source: java/GraphTest.java @ 9725efb

import java.io.*;
import java.util.*;

import edu.uci.ics.jung.graph.*;

import net.deterlab.abac.Credential;
import net.deterlab.abac.CredentialGraph;
import net.deterlab.abac.Query;
import net.deterlab.abac.Role;
import net.deterlab.abac.Identity;

import org.bouncycastle.openssl.PEMReader;
import org.bouncycastle.jce.provider.X509CertificateObject;
import java.security.KeyPair;
import java.security.PublicKey;
// import org.bouncycastle.util.io.pem.PemObject;


/**
 * Simple test of the native Java implementation of ABAC. Loads credentials
 * from an rt0 file and runs a query against them.
 */
public class GraphTest {
    /**
     * Translate either keys to nicknames or vice versa.  Break the string into
     * space separated tokens and then each of them into period separated
     * strings.  If any of the smallest strings is in the map, replace it with
     * the value.
     */
    protected static String replace(String is, Map<String, String> m) {
        String rv = "";
        for (String tok: is.split(" ")) {
            String term = "";
            for (String s: tok.split("\\.")) {
                String next = m.containsKey(s) ? m.get(s) : s;

                if (term.isEmpty()) term = next;
                else term += "." + next;
            }
            if (rv.isEmpty()) rv = term;
            else rv += " " + term;
        }
        return rv;
    }


    /**
     * Import a credential from a der file and add it to the credential graph.
     */
    protected static void importCred(File f, CredentialGraph g) 
        throws Exception {
        Credential c = new Credential(f);
        g.add_credential(c);
    }


    /**
     * Import a directory full of files, using the suffixes as determinants.
     * First import all the identities (pem), then the credentials (der) into
     * the credential graph then any alias files into the two maps.
     */
    protected static void importDir(File d, CredentialGraph g, 
            Map<String, String> nick, Map<String, String> keys) {
        Vector<File> ids = new Vector<File>();
        Vector<File> creds = new Vector<File>();
        Vector<File> alias = new Vector<File>();

        for (File f: d.listFiles()) {
            if (f.getPath().endsWith(".pem")) ids.add(f);
            else if (f.getPath().endsWith(".der") ) creds.add(f);
            else System.out.println(f + " of unknown type");
        }
        for (File f: ids ){
            try {
                Identity id = new Identity(f);

                Credential.addIdentity(id);
                nick.put(id.getName(), id.getKeyID());
                keys.put(id.getKeyID(),id.getName());
            }
            catch (Exception e) {
                System.err.println("Cannot add " + f + ": " + e);
            }
        }

        for (File f: creds) {
            try {
                importCred(f, g);
            }
            catch (Exception e) {
                System.err.println("Cannot add " + f + ": " + e);
            }
        }
    }
    public static void main(String[] args) throws IOException {
        if (args.length < 3) {
            System.out.println("Usage: GraphTest <files> <role> <principal>");
            System.out.println("    runs the query role <-?- principal and prints the result");
            System.exit(1);
        }

        CredentialGraph graph = new CredentialGraph();
        TreeMap<String, String> nicknames = new TreeMap<String, String>();
        TreeMap<String, String> keys = new TreeMap<String, String>();
        String role = args[args.length-2];
        String prin = args[args.length-1];

        for (int i= 0; i < args.length-2; i++) {
            File f = new File(args[i]);

            try {
                if (f.isDirectory()) 
                    importDir(f, graph, nicknames, keys);
                else if (f.getPath().endsWith(".pem")) {
                    Identity id = new Identity(f);
                    Credential.addIdentity(id);
                    nicknames.put(id.getName(), id.getKeyID());
                    keys.put(id.getKeyID(),id.getName());
                }
                else if (f.getPath().endsWith(".der"))
                    importCred(f, graph);
                else
                    System.out.println(f + " of unknown type");
            }
            catch (Exception e) {
                System.err.println("Failed to process " + f + ": " +e);
            }
        }

        // Translate nicknames into key ids.
        role = replace(role, nicknames);
        prin = replace(prin, nicknames);
        //
        // run the query
        //

        Query q = graph.querier();
        Graph<Role, Credential> ret = q.run(role, prin);
        for (Credential c : ret.getEdges())
            System.out.println(replace(c.toString(), keys));

        for (Identity i: Credential.identities())
            System.out.println("ID: " + i);
    }
}