#!/bin/sh

rm -rf *.der *.pem

creddy --generate --cn Acme
creddy --generate --cn Coyote

#[keyid:Acme].role:buy_rockets <- [keyid:Acme].role:preferred_customer 
creddy --attribute \
       --issuer Acme_ID.pem --key Acme_private.pem --role buy_rockets \
       --subject-cert Acme_ID.pem --subject-role preferred_customer \
       --out Acme_buy_rockets__Acme_preferred_customer_attr.der

#[keyid:Acme].role:preferred_customer <- [keyid:Coyote]
creddy --attribute \
       --issuer Acme_ID.pem --key Acme_private.pem --role preferred_customer \
       --subject-cert Coyote_ID.pem \
       --out Acme_preferred_customer__Coyote_attr.der