[4f79997] | 1 | #!/usr/bin/env sh |
---|
[461541a] | 2 | # |
---|
| 3 | # |
---|
[92661b4] | 4 | #Acme runs a testbed. They've delegated the authority to create |
---|
| 5 | #experiments to all their partners. The Globotron company is one such |
---|
[461541a] | 6 | #partner. |
---|
| 7 | # |
---|
| 8 | # Acme.experiment_create <- Acme.partner.experiment_create |
---|
| 9 | # Acme.partner <- Globotron |
---|
| 10 | # |
---|
| 11 | #Globotron has delegated the authority to anyone an admin thinks is a |
---|
| 12 | #'power user'. |
---|
| 13 | # |
---|
| 14 | # Globotron.experiment_create <- Globotron.admin.power_user |
---|
| 15 | # |
---|
| 16 | #Alice is an admin, and her friend Bob is a power user: |
---|
| 17 | # |
---|
| 18 | # Globotron.admin <- Alice |
---|
| 19 | # Alice.power_user <- Bob |
---|
| 20 | # |
---|
| 21 | #From these credentials, it is possible to construct a proof graph |
---|
| 22 | #showing that Acme.experiment_create <- Bob. |
---|
| 23 | # |
---|
| 24 | #Note that there is a one-to-one correspondence with each credential |
---|
| 25 | #above and the attribute certificates below. |
---|
| 26 | # |
---|
| 27 | |
---|
| 28 | rm -rf *.pem *.xml |
---|
[f1817a9] | 29 | |
---|
[3c30b59] | 30 | . ${TESTDIR}/test_util.sh |
---|
[4f79997] | 31 | if [ -z "${TESTDIR}" ] ; then |
---|
| 32 | TESTDIR=../.. |
---|
| 33 | fi |
---|
[f1817a9] | 34 | |
---|
[3c30b59] | 35 | $eloc/creddy --generate --cn Acme |
---|
[f1817a9] | 36 | |
---|
[3c30b59] | 37 | $eloc/creddy --generate --cn Globotron |
---|
[f1817a9] | 38 | |
---|
[3c30b59] | 39 | $eloc/creddy --generate --cn Alice |
---|
[f1817a9] | 40 | |
---|
[3c30b59] | 41 | $eloc/creddy --generate --cn Bob |
---|
| 42 | |
---|
| 43 | $eloc/creddy --attribute \ |
---|
[f1817a9] | 44 | --issuer Acme_ID.pem --key Acme_private.pem --role experiment_create \ |
---|
| 45 | --subject-cert Acme_ID.pem --subject-role partner.experiment_create \ |
---|
[461541a] | 46 | --out Acme_experiment_create__Acme_partner_experiment_create_attr.xml |
---|
[f1817a9] | 47 | |
---|
[3c30b59] | 48 | $eloc/creddy --attribute \ |
---|
[f1817a9] | 49 | --issuer Acme_ID.pem --key Acme_private.pem --role partner \ |
---|
| 50 | --subject-cert Globotron_ID.pem \ |
---|
[461541a] | 51 | --out Acme_partner__Globotron_attr.xml |
---|
[f1817a9] | 52 | |
---|
[3c30b59] | 53 | $eloc/creddy --attribute \ |
---|
[f1817a9] | 54 | --issuer Globotron_ID.pem --key Globotron_private.pem --role experiment_create \ |
---|
| 55 | --subject-cert Globotron_ID.pem --subject-role admin.power_user \ |
---|
[461541a] | 56 | --out Globotron_experiment_create__Globotron_admin_power_user_attr.xml |
---|
[f1817a9] | 57 | |
---|
[3c30b59] | 58 | $eloc/creddy --attribute \ |
---|
[f1817a9] | 59 | --issuer Globotron_ID.pem --key Globotron_private.pem --role admin \ |
---|
| 60 | --subject-cert Alice_ID.pem \ |
---|
[461541a] | 61 | --out Globotron_admin__Alice_attr.xml |
---|
[f1817a9] | 62 | |
---|
[3c30b59] | 63 | $eloc/creddy --attribute \ |
---|
[f1817a9] | 64 | --issuer Alice_ID.pem --key Alice_private.pem --role power_user \ |
---|
| 65 | --subject-cert Bob_ID.pem \ |
---|
[461541a] | 66 | --out Alice_admin__Bob_attr.xml |
---|
| 67 | |
---|
| 68 | |
---|