source: examples/passphrase_tests/python/acme_rockets_rt0/README @ 20eaefe

#
# The example makes use of 2 principals, Acme and Coyote.
#
# This example shows a very simple delegation of roles by Acme.  Acme's
# buy_rockets role includes all of Acme's preferred customers. 
# The setup.py creates the principals where Acme is using a pre-existing
# encrypted key file and the attr.py creates 2 policy credentials.  
# Credential 1 encodes the policy that all of Acme's preferred customers 
# can buy rockets from Acme 
# Credential 2 defines the Coyote as an Acme preferred customer.
# In both cases, the private key is decrypted a file that contains the passphrase
# while the attribute is being baked

# The ./run_query script issues queries to show that the Coyote is both a preferred
# customer and can buy rockets.  Two invalid queries are also made, checking if
# Acme is the Coyote's friend, which it isn't and whether a query about
# something other than a principal works (it doesn't).

# acme_rockets_rt0

rm -rf *.der *.pem
cp ../../PFILE pfile
cp ../../ENC_PRIVATE.PEM Acme_private.pem

# Credential 1
#[keyid:Acme].role:buy_rockets <- [keyid:Acme].role:preferred_customer 

# Credential 2
#[keyid:Acme].role:preferred_customer <- [keyid:Coyote]