From 11d62f2dbec55412b3bb9f54bedce3b8c495b465 Mon Sep 17 00:00:00 2001
From: Daniil Baturin <daniil@vyos.io>
Date: Wed, 11 Dec 2024 09:46:37 -0600
Subject: [PATCH] Add support for passing the key password non-interactively

---
 src/get_line.c | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/src/get_line.c b/src/get_line.c
index 328de78..f01f811 100644
--- a/src/get_line.c
+++ b/src/get_line.c
@@ -7,6 +7,7 @@
 #include <errno.h>
 #include <limits.h>
 #include <stdio.h>
+#include <stdlib.h>
 #include <string.h>
 
 #if defined(__unix__) || (defined(__APPLE__) && defined(__MACH__)) || defined(__HAIKU__)
@@ -109,10 +110,22 @@ get_password(char *pwd, size_t max_len, const char *prompt)
 {
     int ret;
 
-    disable_echo();
-    ret = get_line(pwd, max_len, prompt);
-    enable_echo();
-
+    char* env_var_pwd = getenv("MINISIGN_PASSWORD");
+    if (env_var_pwd != NULL) {
+        size_t env_var_pwd_len = strlen(env_var_pwd);
+        if (env_var_pwd_len >= max_len) {
+            fprintf(stderr, "MINISIGN_PASSWORD environment variable value\
+               exceeds maximum allowed length\n");
+            return -1;
+        } else {
+            strcpy(pwd, env_var_pwd);
+            return 0;
+        }
+    } else {
+        disable_echo();
+        ret = get_line(pwd, max_len, prompt);
+        enable_echo();
+    }
     return ret;
 }