#!/bin/bash
#
# pdfencrypt - encrypt PDF files
#
# Requirements:
#
# iText Java classes	-	http://www.lowagie.com/iText/
# Java Runtime/SDK	-	http://java.sun.com/
#
# (c) Arrigo Triulzi, 2003
#
# $Id: pdfencrypt,v 1.2 2003/07/07 16:57:28 arrigo Exp arrigo $
#
# Variables below are to be modified to suit local installation
#
JAVA_HOME=/usr/local/java
ITEXT_CLASS=${HOME}/lib/iText.jar

#
# No user-serviceable parts below!
#
#
# Defaults:
#
# No user password
# Master password to be set by user
# Strength of 128 bits
# Permissions: print & screen viewers
#
userpwd=""
masterpwd=""
strength=128
# Default flags are "print ok", "screen viewers ok"
perms=10000100
#
# Usage function
#
function usage() 
{
    cat <<EOF
usage: `basename $0` -m mp [-u up] [-s str] [-p perms] infile outfile

Encrypts the given PDF infile, puts the output in outfile.

-m mp           set the master password (you _have_ to set one),
-u up           set the user password (default is none),
-s str          encryption strength (40 or 128 bits, default $strength),
-p perms        binary perms (default $perms), these decode as:

                AllowPrinting
                AllowModifyContents
                AllowCopy
                AllowModifyAnnotations
                AllowFillIn (128 bit only)
                AllowScreenReaders (128 bit only)
                AllowAssembly (128 bit only)
                AllowDegradedPrinting (128 bit only)

                Example permissions to copy and print would be: 10100000

-h              print this message,
-d              debug,

EOF
}
#
# Sanity checks before we start
#
if [ ! -r $ITEXT_CLASS ]; then
    echo "You need to download the iText library from http://www.lowagie.com/iText/"
    echo "Then edit $0 and change ITEXT_CLASS to suit your installation"
    exit 1
fi
if [ ! -x $JAVA_HOME/bin/java ]; then
    echo "Cannot find the Java interpreter $JAVA_HOME/bin/java"
    echo "Please edit $0 and change JAVA_HOME to suit your installation"
    exit 1
fi

#
# Option parsing
#
while getopts "u:m:s:f:dh" opt
do
    case "$opt" in
        u) userpwd=$OPTARG
           echo "User password set to: $userpwd"
           ;;
        m) masterpwd=$OPTARG
           echo "Master password set to: $masterpwd"
           ;;
        s) strength=$OPTARG
           echo "Encryption strength set to: $strength"
           ;;
        p) perms=$OPTARG
           echo "Protection flafs set to: $flags"
           ;;
        h) usage
           exit 0
           ;;
        d) set -x
           ;;
        *) usage
           exit 1
           ;;
    esac
done
#
# Get the file names
#
shift $(($OPTIND - 1))
infile=$1
outfile=$2
if [ -z "$infile" -o -z "$outfile" ]; then
    echo "Error: you must supply both infile and outfile"
    exit 1
fi
#
# Do we have a master password?
#
if [ -z "$masterpwd" ]; then
    echo "Error: you must supply a master password"
    exit 1
fi
#
# Do we have files
#
if [ ! -r $infile ]; then
    echo "Error: unable to read $infile"
    exit 1
fi
#
# Do our duty
#
if [ -z $userpwd ]; then
	${JAVA_HOME}/bin/java -cp ${ITEXT_CLASS} com.lowagie.tools.encrypt_pdf $infile $outfile '' $masterpwd $perms $strength
else
	${JAVA_HOME}/bin/java -cp ${ITEXT_CLASS} com.lowagie.tools.encrypt_pdf $infile $outfile $userpwd $masterpwd $perms $strength
fi
#
# Done
#
exit 0