abac0-leakabac0-meimei-idmei-rt0-nmei_rt0tvf-new-xml
Last change
on this file since 7e3f5e2 was
461541a,
checked in by Mei <mei@…>, 12 years ago
|
1) updated original rt0 to remove libstrongswan dependency
a) identity credential being made/accessed with openssl api calls
(X509/EVP_PKEY pem)
b) attribute credential being made/access via xmlsec1 (custom XML
structure)
2) refactored libcreddy into libabac and now one ABAC namespace for
libabac
3) added attribute_rule suboption to creddy's attribute as another way
to insert access rule
4) added some regression tests into example directory
5) updated some docs.
|
-
Property mode set to
100755
|
File size:
1.2 KB
|
Line | |
---|
1 | #!/bin/sh |
---|
2 | # acme_rockets_intersection |
---|
3 | |
---|
4 | pwd=`pwd` |
---|
5 | |
---|
6 | eloc=`which abac_prover | sed 's/\/abac_prover//'` |
---|
7 | if [ "$eloc" = "" ]; then |
---|
8 | echo "ERROR: abac_prover is not in the search path!!!" |
---|
9 | exit 1 |
---|
10 | fi |
---|
11 | keyloc=$pwd |
---|
12 | |
---|
13 | acme=`creddy --keyid --cert $keyloc/Acme_ID.pem` |
---|
14 | batman=`creddy --keyid --cert $keyloc/Batman_ID.pem` |
---|
15 | coyote=`creddy --keyid --cert $keyloc/Coyote_ID.pem` |
---|
16 | |
---|
17 | buy_rockets="$acme.buy_rockets" |
---|
18 | coyote_prin="$coyote" |
---|
19 | batman_prin="$batman" |
---|
20 | bad_buy_rockets="$acme.bad_buy_rockets" |
---|
21 | bad_buy_rockets2="99$acme.buy_rockets" |
---|
22 | |
---|
23 | echo " " |
---|
24 | echo "===good============ Acme.buy_rockets <- Coyote" |
---|
25 | $eloc/abac_prover --keystore $keyloc \ |
---|
26 | --role "$buy_rockets" --principal "$coyote_prin" |
---|
27 | |
---|
28 | echo " " |
---|
29 | echo "===bad============ Acme.bad_buy_rockets <- Coyote" |
---|
30 | $eloc/abac_prover --keystore $keyloc \ |
---|
31 | --role "$bad_buy_rockets" --principal "$coyote_prin" |
---|
32 | |
---|
33 | echo " " |
---|
34 | echo "===bad============ 99Acme.buy_rockets <- Coyote" |
---|
35 | $eloc/abac_prover --keystore $keyloc \ |
---|
36 | --role "$bad_buy_rockets2" --principal "$coyote_prin" |
---|
37 | |
---|
38 | echo " " |
---|
39 | echo "===bad=============== Acme.buy_rockets <- Batman" |
---|
40 | $eloc/abac_prover --keystore $keyloc \ |
---|
41 | --role "$buy_rockets" --principal "$batman_prin" |
---|
42 | |
---|
43 | |
---|
Note: See
TracBrowser
for help on using the repository browser.