#!/bin/sh

rm -rf *.der *.pem
# [keyid:stateU].role:foundingAlumni <-?- [keyid:Bob] (yes)
# [keyid:stateU].role:foundingAlumni <-?- [keyid:Maryann] (no)
# [keyid:stateU].role:foundingAlumni <-?- [keyid:Joe] (no)

creddy --generate --cn StateU
creddy --generate --cn Bob
creddy --generate --cn Maryann
creddy --generate --cn Joe

stateU_keyid=`creddy --keyid --cert StateU_ID.pem`
bob_keyid=`creddy --keyid --cert Bob_ID.pem`
maryann_keyid=`creddy --keyid --cert Maryann_ID.pem`
joe_keyid=`creddy --keyid --cert Joe_ID.pem`

diploma_q_qY="diploma([?], [integer:?Year:[1960,1961,1963]])"

diploma_m="diploma([string:'mathmatics'],[integer:1961])"
diploma_z="diploma([string:'zoology'],[integer:1955])"
diploma_p="diploma([string:'psychology'],[integer:1962])"

# [keyid:stateU].role:foundingAlumni 
#                   <- [keyid:stateU].role:diploma([?], [integer:?Year:[1960,1961,1963]])
creddy --attribute \
       --issuer StateU_ID.pem --key StateU_private.pem --role "foundingAlumni" \
       --subject-cert StateU_ID.pem --subject-role "$diploma_q_qY" \
       --out StateU_foundingAlumni__stateU_diploma_q_qY_attr.der

# [keyid:stateU].role:diploma([string:'mathmatics'],[integer:1961]) <- [keyid:bob]
creddy --attribute \
        --issuer StateU_ID.pem --key StateU_private.pem --role "$diploma_m" \
        --subject-cert Bob_ID.pem \
        --out StateU_diploma_m__Bob_attr.der

# [keyid:stateU].role:diploma([string:'zoology'],[integer:1955]) <- [keyid:joe]
creddy --attribute \
        --issuer StateU_ID.pem --key StateU_private.pem --role "$diploma_z" \
        --subject-cert Joe_ID.pem \
        --out StateU_diploma_m__Joe_attr.der

# [keyid:stateU].role:diploma([string:'psychology'],[integer:1962]) <- [keyid:maryann]
creddy --attribute \
        --issuer StateU_ID.pem --key StateU_private.pem --role "$diploma_p" \
        --subject-cert Maryann_ID.pem \
        --out StateU_diploma_m__Maryann_attr.der