source: examples/example_scripts/c/abac_attr.c @ bc0ce98

/**
   attr_abac.c

   To demonstrate how to use ABAC's api in C

   call:   attr_abac IceCream_ID.pem IceCream_private.pem IceCream_attr.der

   pre-condition: generate IceCream_ID.pem and IceCream_private.pem with
           creddy --generate --cn IceCream
                  generate Chocolate_ID.pem and Chocolate_private.pem with
           creddy --generate --cn IceCream

   This program will generate an attribute rule, write it out to an external
           file and also load it into the context (prolog db)
           [keyid:IceCream].delicious <- [Keyid:Chocolate]

   Then, a query is made against the context to see if it is populated correctly.

./abac_attr IceCream_ID.pem  IceCream_private.pem IceCream_attr.der Chocolate_ID.pem
**/

#include <err.h>
#include <stdio.h>
#include <assert.h>

#include <abac.h>

extern void abac_print_cred_info(abac_credential_t*, FILE*);
extern char *abac_id_keyid(abac_id_t *id);
extern abac_attribute_t *abac_attribute_add_tail(abac_attribute_t *ptr, abac_aspect_t *);

int main(int argc, char **argv) {
    int i, success=0;
    abac_credential_t *cred=NULL;
    abac_credential_t **credentials=NULL;

    abac_context_t *ctx = abac_context_new();

    if(argc != 5) return 1;

    /* build up structure */
    abac_id_t *id =NULL;
    id = abac_id_from_file(argv[1]);
    int rc=abac_id_load_privkey_file(id,argv[2]);

    rc=abac_context_load_id_privkey_chunk(ctx, 
                  abac_id_cert_chunk(id), 
                  abac_id_privkey_chunk(id));

    abac_id_t *chocolate_id = abac_id_from_file(argv[4]);
/* XXX    rc=abac_context_load_id_id(ctx, chocolate_id); */ 
    rc=abac_context_load_id_privkey_chunk(ctx, 
                  abac_id_cert_chunk(chocolate_id), 
                  abac_id_privkey_chunk(chocolate_id));

    abac_aspect_t *head=abac_role_create(abac_id_keyid(id),"delicious");
    abac_aspect_t *tail=abac_role_principal_create(abac_id_keyid(chocolate_id));
    abac_attribute_t *attr;
    rc=abac_attribute_create(&attr, head, NULL, 1800);
    abac_attribute_add_tail(attr, tail);
    rc=abac_attribute_bake(attr);

    printf(" attribute being made : %s\n",abac_attribute_string(attr));

    abac_attribute_write_cert_fname(attr,argv[3]);
    abac_context_load_attribute_chunk(ctx,abac_attribute_cert_chunk(attr));

    /* make a query */
    abac_aspect_t *q=abac_role_create(abac_id_keyid(id),"delicious");
    abac_aspect_t *w=abac_role_principal_create(abac_id_keyid(chocolate_id));
    char *with=abac_aspect_typed_string(w);
    char *query=abac_aspect_typed_string(q);

printf("query %s\n", query);
printf("with %s\n", with);

    show_yap_db("dump prolog");

    if(query !=NULL && with!=NULL) {
        credentials = abac_context_query(ctx,
                            query, with,
                            &success);
        if (success)
            puts("prover success!!");
            else puts("prover failed!!");

        if (credentials != NULL && success) {
            puts("credentials needed :");
            for (i = 0; credentials[i] != NULL; ++i) {
               cred = credentials[i];
               abac_print_cred_info(cred,NULL);
            }
        }
        if(credentials)
            abac_free_credentials(credentials);
    }

    abac_context_free(ctx);
    return 0;
}