修改21-23功能验证问题

2020-05-11 19:41:59 +08:00
parent 446bf773db
commit e6e554b9fb
1 changed files with 559 additions and 9 deletions
--- a/01-TestCase/tsg_adc/selfserver/Api_Proxy/Deny_Ssl_Tests.robot
+++ b/01-TestCase/tsg_adc/selfserver/Api_Proxy/Deny_Ssl_Tests.robot
@@ -680,7 +680,7 @@ ProxyPolicy-Deny-Ssl-00021
    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
    ${objectids}    set Variable    ${objectId}
    Comment    创建安全策略
-    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
    #删除策略
    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
@@ -694,8 +694,8 @@ ProxyPolicy-Deny-Ssl-00021
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
-    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Извините    Tango Secure Gateway CA    X-TG-Construct-By
-    ...    ELSE    Create List    Извините    Tango Secure Gateway CA    X-TG-Construct-By
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
    ${starttime}    Get Time
    Sleep    ${policyVerificationSleepSeconds}s
    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
@@ -712,7 +712,7 @@ ProxyPolicy-Deny-Ssl-00022
    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
    ${objectids}    set Variable    ${objectId}
    Comment    创建安全策略
-    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
    #删除策略
    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
@@ -726,8 +726,8 @@ ProxyPolicy-Deny-Ssl-00022
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
-    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA    X-TG-Construct-By
-    ...    ELSE    Create List    Connection reset by peer    Tango Secure Gateway CA    X-TG-Construct-By
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
    ${starttime}    Get Time
    Sleep    ${policyVerificationSleepSeconds}s
    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
@@ -760,7 +760,7 @@ ProxyPolicy-Deny-Ssl-00023
    ${rescode}    ${object_by_Id}    AddObject2    ${1}    ${objectDict}
    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_by_Id}
    Comment    创建安全策略
-    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
    #删除策略
    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
@@ -774,8 +774,558 @@ ProxyPolicy-Deny-Ssl-00023
    Comment    功能端验证HTTP验证
    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/proxyPolicy-Deny-SSL-00023.bat
    ...    ELSE    set variable    curl -kv --user-agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36" --referer 'https://www.baidu.com/' \ https://open.node.com/test/bytedance/bytedance.html
-    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    X-TG-Construct-By
-    ...    ELSE    Create List    Connection reset by peer    X-TG-Construct-By
+    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.comProxyPolicy-Deny-Ssl-00021
+    [Tags]    selfserver    deny    ip+请求体字串匹配    ssl
+    Comment    创建请求体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=test
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-SSL-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_REQ_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00022
+    [Tags]    selfserver    deny    ip+应答体字串匹配    ssl
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=Response Body
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-ssl-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00023
+    [Tags]    selfserver    最大组合    deny    ssl
+    Comment    创建fqdn
+    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$open.node.com
+    ${rescode}    ${object_fqdn_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${object_fqdn_Id}
+    Comment    创建url
+    ${objectDict}    Create Dictionary    objectType=url    isValid=${1}    addItemList=*bytedance.html
+    ${rescode}    ${object_url_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_url_Id}
+    Comment    创建请求头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=*Safari/537.36|User-Agent
+    ${rescode}    ${object_rq_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_rq_Id}
+    Comment    创建应答头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=html|Content-Type
+    ${rescode}    ${object_re_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_re_Id}
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=字节跳动
+    ${rescode}    ${object_by_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_by_Id}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-Ssl-00023    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"你好，五一","code":403,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_rq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_re_Id}|TSG_FIELD_HTTP_RES_HDR,${object_by_Id}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/proxyPolicy-Deny-SSL-00023.bat
+    ...    ELSE    set variable    curl -kv --user-agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36" --referer 'https://www.baidu.com/' \ https://open.node.com/test/bytedance/bytedance.html
+    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.comProxyPolicy-Deny-Ssl-00021
+    [Tags]    selfserver    deny    ip+请求体字串匹配    ssl
+    Comment    创建请求体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=test
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-SSL-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_REQ_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00022
+    [Tags]    selfserver    deny    ip+应答体字串匹配    ssl
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=Response Body
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-ssl-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00023
+    [Tags]    selfserver    最大组合    deny    ssl
+    Comment    创建fqdn
+    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$open.node.com
+    ${rescode}    ${object_fqdn_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${object_fqdn_Id}
+    Comment    创建url
+    ${objectDict}    Create Dictionary    objectType=url    isValid=${1}    addItemList=*bytedance.html
+    ${rescode}    ${object_url_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_url_Id}
+    Comment    创建请求头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=*Safari/537.36|User-Agent
+    ${rescode}    ${object_rq_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_rq_Id}
+    Comment    创建应答头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=html|Content-Type
+    ${rescode}    ${object_re_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_re_Id}
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=字节跳动
+    ${rescode}    ${object_by_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_by_Id}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-Ssl-00023    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"你好，五一","code":403,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_rq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_re_Id}|TSG_FIELD_HTTP_RES_HDR,${object_by_Id}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/proxyPolicy-Deny-SSL-00023.bat
+    ...    ELSE    set variable    curl -kv --user-agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36" --referer 'https://www.baidu.com/' \ https://open.node.com/test/bytedance/bytedance.html
+    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.comProxyPolicy-Deny-Ssl-00021
+    [Tags]    selfserver    deny    ip+请求体字串匹配    ssl
+    Comment    创建请求体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=test
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-SSL-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_REQ_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00022
+    [Tags]    selfserver    deny    ip+应答体字串匹配    ssl
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=Response Body
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-ssl-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00023
+    [Tags]    selfserver    最大组合    deny    ssl
+    Comment    创建fqdn
+    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$open.node.com
+    ${rescode}    ${object_fqdn_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${object_fqdn_Id}
+    Comment    创建url
+    ${objectDict}    Create Dictionary    objectType=url    isValid=${1}    addItemList=*bytedance.html
+    ${rescode}    ${object_url_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_url_Id}
+    Comment    创建请求头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=*Safari/537.36|User-Agent
+    ${rescode}    ${object_rq_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_rq_Id}
+    Comment    创建应答头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=html|Content-Type
+    ${rescode}    ${object_re_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_re_Id}
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=字节跳动
+    ${rescode}    ${object_by_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_by_Id}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-Ssl-00023    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"你好，五一","code":403,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_rq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_re_Id}|TSG_FIELD_HTTP_RES_HDR,${object_by_Id}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/proxyPolicy-Deny-SSL-00023.bat
+    ...    ELSE    set variable    curl -kv --user-agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36" --referer 'https://www.baidu.com/' \ https://open.node.com/test/bytedance/bytedance.html
+    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.comProxyPolicy-Deny-Ssl-00021
+    [Tags]    selfserver    deny    ip+请求体字串匹配    ssl
+    Comment    创建请求体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=test
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-SSL-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_REQ_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00022
+    [Tags]    selfserver    deny    ip+应答体字串匹配    ssl
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=Response Body
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-ssl-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00023
+    [Tags]    selfserver    最大组合    deny    ssl
+    Comment    创建fqdn
+    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$open.node.com
+    ${rescode}    ${object_fqdn_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${object_fqdn_Id}
+    Comment    创建url
+    ${objectDict}    Create Dictionary    objectType=url    isValid=${1}    addItemList=*bytedance.html
+    ${rescode}    ${object_url_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_url_Id}
+    Comment    创建请求头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=*Safari/537.36|User-Agent
+    ${rescode}    ${object_rq_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_rq_Id}
+    Comment    创建应答头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=html|Content-Type
+    ${rescode}    ${object_re_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_re_Id}
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=字节跳动
+    ${rescode}    ${object_by_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_by_Id}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-Ssl-00023    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"你好，五一","code":403,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_rq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_re_Id}|TSG_FIELD_HTTP_RES_HDR,${object_by_Id}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/proxyPolicy-Deny-SSL-00023.bat
+    ...    ELSE    set variable    curl -kv --user-agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36" --referer 'https://www.baidu.com/' \ https://open.node.com/test/bytedance/bytedance.html
+    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.comProxyPolicy-Deny-Ssl-00021
+    [Tags]    selfserver    deny    ip+请求体字串匹配    ssl
+    Comment    创建请求体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=test
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-SSL-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_REQ_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00022
+    [Tags]    selfserver    deny    ip+应答体字串匹配    ssl
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=Response Body
+    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${objectId}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-ssl-00022    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"Извините","code":451,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${objectId}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/ProxyPolicy-Deny-SSL-0019.bat
+    ...    ELSE    set variable    curl -kv -H "Content-Type:application/x-www-form-urlencoded" -X POST -d "reqBody=test&setCookie=12345678&contentType=content-type&resBody=Response Body" https://open.node.com/action
+    @{stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
+    ${starttime}    Get Time
+    Sleep    ${policyVerificationSleepSeconds}s
+    ${rescode}    SystemCommand    ${commandstr}    @{stringlist}
+    Sleep    ${policyLogVerificationSleepSeconds}s
+    ${endtime}    Get Time
+    #日志验证
+    ${s}    Convert to String    ${policyId3}
+    GetLogList    proxy_event_log    ${starttime}    ${endtime}    ${testClentIP}    ${s}    http_host    open.node.com
+
+ProxyPolicy-Deny-Ssl-00023
+    [Tags]    selfserver    最大组合    deny    ssl
+    Comment    创建fqdn
+    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$open.node.com
+    ${rescode}    ${object_fqdn_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    set Variable    ${object_fqdn_Id}
+    Comment    创建url
+    ${objectDict}    Create Dictionary    objectType=url    isValid=${1}    addItemList=*bytedance.html
+    ${rescode}    ${object_url_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_url_Id}
+    Comment    创建请求头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=*Safari/537.36|User-Agent
+    ${rescode}    ${object_rq_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_rq_Id}
+    Comment    创建应答头
+    ${objectDict}    Create Dictionary    objectType=http_signature    isValid=${1}    addItemList=html|Content-Type
+    ${rescode}    ${object_re_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_re_Id}
+    Comment    创建应答体
+    ${objectDict}    Create Dictionary    objectType=keywords    isValid=${1}    addItemList=字节跳动
+    ${rescode}    ${object_by_Id}    AddObject2    ${1}    ${objectDict}
+    ${objectids}    Catenate    SEPARATOR=,    ${objectids}    ${object_by_Id}
+    Comment    创建安全策略
+    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-HTTP-00001    policyType=tsg_security    policyDesc=autotest    userTags=    action=intercept    effectiveRange=    userRegion={"protocol":"SSL","keyring":1,"decryption":109,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    referenceObject=    isValid=${1}    appObjectIdArray=3
+    ${rescode}    ${policyId}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId1}    set Variable    {"policyType":"tsg_security","policyIds":[${policyId}]}
+    ${policyIds}    Create List    ${policyId1}
+    Comment    创建管控策略
+    ${policyDict}    Create Dictionary    policyName=proxyPolicy-Deny-Ssl-00023    policyType=pxy_manipulation    policyDesc=autotest    userTags=    action=deny    effectiveRange=    userRegion={"method":"block","message":"你好，五一","code":403,"protocol":"HTTP"}    isValid=${1}    appObjectIdArray=2    referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_rq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_re_Id}|TSG_FIELD_HTTP_RES_HDR,${object_by_Id}|TSG_FIELD_HTTP_RES_CONTENT
+    ${rescode}    ${policyId3}    AddPolicy2    ${1}    ${policyDict}
+    #删除策略
+    ${policyId2}    set Variable    {"policyType":"pxy_manipulation","policyIds":[${policyId3}]}
+    ${policyIds}    Create List    ${policyId1}    ${policyId2}
+    Comment    功能端验证HTTP验证
+    ${commandstr}    run keyword if    '${systemType}'=='Windows'    set variable    ${curlbatpath}/selfserver/proxyPolicy-Deny-SSL-00023.bat
+    ...    ELSE    set variable    curl -kv --user-agent "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36" --referer 'https://www.baidu.com/' \ https://open.node.com/test/bytedance/bytedance.html
+    ${stringlist}    run keyword if    '${systemType}'=='Windows'    Create List    Empty reply from server    Tango Secure Gateway CA
+    ...    ELSE    Create List    Empty reply from server    Tango Secure Gateway CA
    ${starttime}    Get Time
    Sleep    ${policyVerificationSleepSeconds}s
    ${rescode}    SystemCommands    ${commandstr}    ${stringlist}