From 25d3ce4ee8f411a19c3a0e69ebb5c575c16243a8 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@fakecake.org>
Date: Tue, 8 Apr 2025 08:55:44 +0300
Subject: drop SESSION-specific stuff and move encrypt/decrypt helpers to a
 separate class; add a command line flag to generate encryption keys

---
 update.php | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'update.php')

diff --git a/update.php b/update.php
index 471e323c8..dfac5ab4c 100755
--- a/update.php
+++ b/update.php
@@ -84,6 +84,7 @@
 		"update-schema::" => ["[force-yes]", "update database schema, optionally without prompting"],
 		"force-update" => "mark all feeds as pending update",
 		"gen-search-idx" => "generate basic PostgreSQL fulltext search index",
+		"gen-encryption-key" => "generate an encryption key (ChaCha20-Poly1305)",
 		"plugins-list" => "list installed plugins",
 		"debug-feed:" => ["N", "update specified feed with debug output enabled"],
 		"force-refetch" => "debug update: force refetch feed data",
@@ -323,6 +324,10 @@
 		}
 	}
 
+	if (isset($options["gen-encryption-key"])) {
+		echo "Generated encryption key: " . bin2hex(Crypt::generate_key()) . "\n";
+	}
+
 	if (isset($options["plugins-list"])) {
 		$tmppluginhost = new PluginHost();
 		$tmppluginhost->load_all($tmppluginhost::KIND_ALL);
-- 
cgit v1.2.3-54-g00ecf