#!/bin/bash
#
# Locally sign an OpenPGP key.
#

# Parameters
BASENAME="`basename $0`"
NAME="$1"
set -e

# Syntax check
if [ -z "$NAME" ]; then
  echo "usage: $BASENAME <key>"
  exit 1
fi

# Optional reason
read -e -p 'Optional lsignreason notation: ' REASON 

# Local signature
if [ ! -z "$REASON" ]; then
  gpg --lsign --ask-cert-expire "$NAME"
else
  gpg --lsign --cert-notation "lsigreason@notations.openpgp.fifthhorseman.net=${REASON}" --ask-cert-expire "$NAME"
fi