*** Settings ***
Force Tags        tsg_adc_wp    adc_api    security_policy
Library           OperatingSystem
Resource          ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource          ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource          ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource          ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource          ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource          ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot
Resource          ../../../03-Variable/ApplicationID.txt
Resource          ../../../02-Keyword/tsg_bfapi/policy_object/ProcessPolicyBody.robot

*** Variables ***

*** Test Cases ***
SecurityPolicy-Intercept-Ssl-00001
    [Tags]    fqdn完整匹配        update policy:source geo
    Comment    创建fqdn
    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$www.reviewpro.com
    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
    Comment    创建ip geo
    ${addItemList1}    Create Dictionary    keywordArray=XXG地区.*
    ${addItemLists}    Create list    ${addItemList1}
    ${objectDict}    Create Dictionary    objectType=ip     objectSubType=geo_location    isValid=${1}    addItemList=${addItemLists}  
    ${rescode}    ${objectId1}    AddObjects    ${1}    ${objectDict}
    Comment    创建安全策略
    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-Ssl-00001    policyType=tsg_security    policyDesc=autotest    action=intercept    userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    filterList=${objectId}|TSG_FIELD_SSL_SNI    isValid=${1}    appIdObjects=${SSL_ID}
    log    ${policyDict}
    ${rescode}    ${policyId}    AddPolicies    1    ${policyDict}    v2
    ${policyId}    Get-Pids    ${policyId}
    ${policyId}    Set Variable    ${policyId}[0]
    insert_policyId_to_file1    intercept_ssl_objectId    ${objectId}
    insert_policyId_to_file1    intercept_ssl_objectId1    ${objectId1}
    insert_policyId_to_file1    intercept_ssl_policyId    ${policyId}

SecurityPolicy-Intercept-Ssl-00002
    [Tags]    category
    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=*fenopy.se
    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
    Comment    创建安全策略
    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-Ssl-00002    policyType=tsg_security    policyDesc=autotest    action=intercept    userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    filterList=166|TSG_FIELD_SSL_SNI,${objectId}|TSG_FIELD_SSL_SNI    isValid=${1}    appIdObjects=${SSL_ID}
    log    ${policyDict}
    ${rescode}    ${policyId}    AddPolicies    1    ${policyDict}    v2
    ${policyId}    Get-Pids    ${policyId}
    ${policyId}    Set Variable    ${policyId}[0]
    insert_policyId_to_file1    intercept_ssl_objectId2    ${objectId}
    insert_policyId_to_file1    intercept_ssl_policyId1    ${policyId}
    
SecurityPolicy-Intercept-Ssl-00003
    [Tags]    fqdn other Certificate    update policy:fqdn
    Comment    创建fqdn    
    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=$www.xs8.cn
    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
    Comment    创建fqdn2    
    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=*xs8.cn
    ${rescode}    ${objectId1}    AddObject2    ${1}    ${objectDict}
    Comment    创建安全策略
    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-Ssl-00003     policyType=tsg_security    policyDesc=autotest    action=intercept    userRegion={"protocol":"SSL","keyring":87,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    filterList=${objectId}|TSG_FIELD_SSL_SNI    isValid=${1}    appIdObjects=${SSL_ID}    
    log    ${policyDict}
    ${rescode}    ${policyId}    AddPolicies    1    ${policyDict}    v2
    ${policyId}    Get-Pids    ${policyId}
    ${policyId}    Set Variable    ${policyId}[0]
    insert_policyId_to_file1    intercept_ssl_objectId3    ${objectId}
    insert_policyId_to_file1    intercept_ssl_objectId4    ${objectId1}
    insert_policyId_to_file1    intercept_ssl_policyId2    ${policyId}
    
SecurityPolicy-Intercept-Ssl-00004
    [Tags]    category    Other Certificate to replace
    ${objectDict}    Create Dictionary    objectType=fqdn    isValid=${1}    addItemList=*worldweapon.info
    ${rescode}    ${objectId}    AddObject2    ${1}    ${objectDict}
    Comment    创建安全策略
    ${policyDict}    Create Dictionary    policyName=SecurityPolicy-Intercept-Ssl-00004    policyType=tsg_security    policyDesc=autotest    action=intercept    userRegion={"protocol":"SSL","keyring":87,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}}    filterList=167|TSG_FIELD_SSL_SNI    isValid=${1}    appIdObjects=${SSL_ID}
    log    ${policyDict}
    ${rescode}    ${policyId}    AddPolicies    1    ${policyDict}    v2
    ${policyId}    Get-Pids    ${policyId}
    ${policyId}    Set Variable    ${policyId}[0]
    insert_policyId_to_file1    intercept_ssl_objectId5    ${objectId}
    insert_policyId_to_file1    intercept_ssl_policyId3    ${policyId}