Do not list keys without password at ssh-agent-loadkey

1 files changed, 6 insertions, 3 deletions

diff --git a/ssh-agent-loadkey b/ssh-agent-loadkey
index b6fefb1..840ea82 100755
--- a/ssh-agent-loadkey
+++ b/ssh-agent-loadkey
@@ -17,9 +17,12 @@ fi
 function __query {
   (
   cd $KEYS && find -name '*.pub' | sed -e 's/.pub$//' | grep -v decomissioned | while read line; do
-    handle="`echo $line | cut -d '/' -f 3`"
-    type="`echo $line | cut -d '/' -f 2`"
-    echo "$handle ($type)"
+    # See https://security.stackexchange.com/questions/129724/how-to-check-if-an-ssh-private-key-has-passphrase-or-not#129727
+    if grep -q ',ENCRYPTED' $line; then
+      handle="`echo $line | cut -d '/' -f 3`"
+      type="`echo $line | cut -d '/' -f 2`"
+      echo "$handle ($type)"
+    fi
   done
   )
 }