abac0-leakabac0-meimei-idmei-rt0-nmei_rt0tvf-new-xml
|
Last change
on this file since 18963eb was
461541a,
checked in by Mei <mei@…>, 12 years ago
|
|
1) updated original rt0 to remove libstrongswan dependency
a) identity credential being made/accessed with openssl api calls
(X509/EVP_PKEY pem)
b) attribute credential being made/access via xmlsec1 (custom XML
structure)
2) refactored libcreddy into libabac and now one ABAC namespace for
libabac
3) added attribute_rule suboption to creddy's attribute as another way
to insert access rule
4) added some regression tests into example directory
5) updated some docs.
|
-
Property mode set to
100755
|
|
File size:
758 bytes
|
| Line | |
|---|
| 1 | #!/bin/sh |
|---|
| 2 | |
|---|
| 3 | #Acme.buy_rockets <- Acme.preferred_customer |
|---|
| 4 | #Acme.preferred_customer <- Coyote |
|---|
| 5 | |
|---|
| 6 | rm -rf *.pem *.xml |
|---|
| 7 | |
|---|
| 8 | pwd=`pwd` |
|---|
| 9 | eloc=`which creddy | sed 's/\/creddy//'` |
|---|
| 10 | if [ "$eloc" = "" ]; then |
|---|
| 11 | echo "ERROR: creddy is not in the search path!!!" |
|---|
| 12 | exit 1 |
|---|
| 13 | fi |
|---|
| 14 | |
|---|
| 15 | $eloc/creddy --generate --cn Acme |
|---|
| 16 | |
|---|
| 17 | $eloc/creddy --generate --cn Coyote |
|---|
| 18 | |
|---|
| 19 | $eloc/creddy --attribute \ |
|---|
| 20 | --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \ |
|---|
| 21 | --subject-cert Acme_ID.pem --subject-role preferred_customer \ |
|---|
| 22 | --out Acme_buy_rockets__Acme_preferred_customer_attr.xml |
|---|
| 23 | |
|---|
| 24 | $eloc/creddy --attribute \ |
|---|
| 25 | --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \ |
|---|
| 26 | --subject-cert Coyote_ID.pem \ |
|---|
| 27 | --out Acme_preferred_customer__Coyote_attr.xml |
|---|
Note: See
TracBrowser
for help on using the repository browser.
