aboutsummaryrefslogtreecommitdiff
path: root/docs/bpki.dot
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2008-04-25 21:19:04 +0000
committerRob Austein <sra@hactrn.net>2008-04-25 21:19:04 +0000
commit864151902a2cf5f873bd8b8c027a765f610fd423 (patch)
tree32cf2523558d7e4385d81c23607f4987412d6563 /docs/bpki.dot
parent329dc48813b4fcf0363a5895f1a19de3cb369a47 (diff)
Third pass on BPKI picture, showing why symmetric is better.
svn path=/docs/bpki.dot; revision=1709
Diffstat (limited to 'docs/bpki.dot')
-rw-r--r--docs/bpki.dot69
1 files changed, 46 insertions, 23 deletions
diff --git a/docs/bpki.dot b/docs/bpki.dot
index d6a813cd..6ced8cf6 100644
--- a/docs/bpki.dot
+++ b/docs/bpki.dot
@@ -23,27 +23,35 @@ digraph bpki_symmetric {
// Hosted entities
node [ color=blue ];
Alice_CA [ shape=diamond ];
- Bob_CA [ shape=diamond ];
Alice_EE [ label="Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Bob_EE [ label="Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_CA [ shape=diamond ];
+ Ellen_EE [ label="Ellen\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
// Peers
- node [ color=red ];
- Carol_CA [ shape=diamond ];
- Dave_CA [ shape=diamond ];
+ node [ color=red, shape=diamond ];
+ Bob_CA;
+ Carol_CA;
+ Dave_CA;
+ Frank_CA;
+ Ginny_CA;
+ Harry_CA;
edge [ color=black ];
TA -> rpkid;
TA -> irdbd;
TA -> irbe;
TA -> Alice_CA;
- TA -> Bob_CA;
+ TA -> Ellen_CA;
edge [ color=blue ];
Alice_CA -> Alice_EE;
- Bob_CA -> Bob_EE;
+ Alice_CA -> Bob_CA;
+ Alice_CA -> Carol_CA;
Alice_CA -> Dave_CA;
- Bob_CA -> Carol_CA;
+ Ellen_CA -> Ellen_EE;
+ Ellen_CA -> Frank_CA;
+ Ellen_CA -> Ginny_CA;
+ Ellen_CA -> Harry_CA;
}
digraph bpki_asymmetric {
@@ -59,31 +67,46 @@ digraph bpki_asymmetric {
// Hosted entities
node [ color=blue ];
Alice_CA [ shape=diamond ];
- Bob_CA [ shape=diamond ];
+ Ellen_CA [ shape=diamond ];
// Peers
- node [ color=red ];
- Alice_EE [ label="Alice\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Bob_EE [ label="Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
- Carol_CA [ shape=diamond ];
- Dave_CA [ shape=diamond ];
+ node [ color=red, shape=diamond ];
+ Bob_CA;
+ Carol_CA;
+ Dave_CA;
+ Frank_CA;
+ Ginny_CA;
+ Harry_CA;
+
+ // EE certs issued to us by peers
+ node [ color=red, shape=record ];
+ Alice_Bob_EE [ label="Alice-Bob\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Alice_Carol_EE [ label="Alice-Carol\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Alice_Dave_EE [ label="Alice-Dave\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_Frank_EE [ label="Ellen-Frank\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_Ginny_EE [ label="Ellen-Ginny\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
+ Ellen_Harry_EE [ label="Ellen-Harry\nBSC EE|{HTTPS up-down client|CMS up-down}" ];
edge [ color=black ];
TA -> rpkid;
TA -> irdbd;
TA -> irbe;
TA -> Alice_CA;
- TA -> Bob_CA;
+ TA -> Ellen_CA;
edge [ color=blue ];
+ Alice_CA -> Bob_CA;
+ Alice_CA -> Carol_CA;
Alice_CA -> Dave_CA;
- Bob_CA -> Carol_CA;
+ Ellen_CA -> Frank_CA;
+ Ellen_CA -> Ginny_CA;
+ Ellen_CA -> Harry_CA;
edge [ color=red ];
- Dave_CA -> Alice_EE;
- Carol_CA -> Bob_EE;
-}
-
-// Local Variables:
-// compile-command: "dot -Tps2 bpki.dot | ps2pdf - bpki.pdf"
-// End:
+ Bob_CA -> Alice_Bob_EE;
+ Carol_CA -> Alice_Carol_EE;
+ Dave_CA -> Alice_Dave_EE;
+ Frank_CA -> Ellen_Frank_EE;
+ Ginny_CA -> Ellen_Ginny_EE;
+ Harry_CA -> Ellen_Harry_EE;
+} \ No newline at end of file