michael@0: # This Source Code Form is subject to the terms of the Mozilla Public
michael@0: # License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0: # file, You can obtain one at http://mozilla.org/MPL/2.0/.
michael@0: 
michael@0: scenario Bridge
michael@0: 
michael@0: entity Army
michael@0:   type Root
michael@0: 
michael@0: entity Navy
michael@0:   type Root
michael@0: 
michael@0: entity Bridge
michael@0:   type Bridge
michael@0:   issuer Army
michael@0:   issuer Navy
michael@0: 
michael@0: entity User
michael@0:   type EE
michael@0:   issuer Bridge
michael@0: 
michael@0: db All
michael@0: 
michael@0: import Army::
michael@0: import Navy::
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Navy
michael@0:   trust Navy 
michael@0:   result pass
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Army
michael@0:   trust Army
michael@0:   result pass
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Navy
michael@0:   trust Army
michael@0:   result fail
michael@0: 
michael@0: import Bridge:Army:
michael@0: import Bridge:Navy:
michael@0: 
michael@0: verify User:Bridge
michael@0:   trust Army
michael@0:   result pass
michael@0: 
michael@0: verify User:Bridge
michael@0:   trust Navy 
michael@0:   result pass
michael@0: 
michael@0: db ArmyOnly
michael@0: 
michael@0: import Army::C,,
michael@0: 
michael@0: verify User:Bridge
michael@0:   result fail
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Navy
michael@0:   result fail
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Navy
michael@0:   cert Navy:
michael@0:   result fail
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Navy
michael@0:   cert Navy:
michael@0:   trust Navy:
michael@0:   result pass
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Navy
michael@0:   trust Navy:
michael@0:   result pass
michael@0: 
michael@0: db NavyOnly
michael@0: 
michael@0: import Navy::C,,
michael@0: 
michael@0: verify User:Bridge
michael@0:   result fail
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Army
michael@0:   result fail
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Army
michael@0:   cert Army:
michael@0:   result fail
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Army
michael@0:   cert Army:
michael@0:   trust Army:
michael@0:   result pass
michael@0: 
michael@0: verify User:Bridge
michael@0:   cert Bridge:Army
michael@0:   trust Army:
michael@0:   result pass
michael@0: