From 22099553ab420339483badb74858c3a92121881d Mon Sep 17 00:00:00 2001
From: Dan Staples <dan.staples@riseup.net>
Date: Mon, 6 Jan 2014 17:24:51 -0500
Subject: [PATCH] dont include --sign-key when restoring w/ hidden-enc key

---
 duplicity-backup.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/duplicity-backup.sh b/duplicity-backup.sh
index 673c55f..21a6d27 100755
--- a/duplicity-backup.sh
+++ b/duplicity-backup.sh
@@ -187,7 +187,10 @@ LOCKFILE=${LOGDIR}backup.lock
 if [ "$ENCRYPTION" = "yes" ]; then
   if [ ! -z "$GPG_ENC_KEY" ] && [ ! -z "$GPG_SIGN_KEY" ]; then
     if [ "$HIDE_KEY_ID" = "yes" ]; then
-      ENCRYPT="--hidden-encrypt-key=${GPG_ENC_KEY} --sign-key=${GPG_SIGN_KEY}"
+      ENCRYPT="--hidden-encrypt-key=${GPG_ENC_KEY}"
+      if [ "$COMMAND" != "restore" -a "$COMMAND" != "restore-file" -a "$COMMAND" != "restore-dir" ]; then
+        ENCRYPT="$ENCRYPT --sign-key=${GPG_SIGN_KEY}"
+      fi
     else
       ENCRYPT="--encrypt-key=${GPG_ENC_KEY} --sign-key=${GPG_SIGN_KEY}"
     fi