markbott / certkeyprovider Goto Github PK

In my setup a KeePass database is used by humans and for build automation both. For build automation, KPScript is a great option to query for settings contained in a KDBX file. Several commands are there, e.g. search for a specific (uniquely named) entry and retrieve stored credentials. Output to be used for next build step, like deploying changes to a database.

Works fine as long using standard Master Password for your KDBX, as KeePass/KPScript both accept (encrpyted) password as command line parameter:

%KEEPASS_SCRIPT% %DATABASE% -c:"GetEntryString" -Field:"UserName" -ref-Title:"MyTitle" -pw-enc:%PASSWORD_ENC%

But how to proceed when changing the KDBX from master password to CertKeyProvider instead? Would like to use KPScript as well, executed with a service account, having its own SMIME certificate. But actually there seems to be no chance to pull-in the password the CertKeyProvider plugin prompts for.

Summary - please extend the CertKeyProdiver plugin to support command line parameters, like KeePass itself. Providing passwords via -pw or -pw-enc parameters would be appreciated.