同步元辰鑫测试环境的table_info

2019-06-17 10:35:59 +08:00
parent 048c60439d
commit 1e3ce2bcb0
8 changed files with 373 additions and 17 deletions
--- a/resource/pangu/pangu_http.json
+++ b/resource/pangu/pangu_http.json
@@ -18,7 +18,7 @@
                            "table_name": "PXY_CTRL_HTTP_URL",
                            "table_type": "string",
                            "table_content": {
-                                "keywords": "www.google.com",
+                                "keywords": "www.rbc.ru",
                                "expr_type": "regex",
                                "match_method": "sub",
                                "format": "uncase plain"
@@ -44,7 +44,7 @@
                            "table_name": "PXY_CTRL_HTTP_URL",
                            "table_type": "string",
                            "table_content": {
-                                "keywords": "cn.bing.com",
+                                "keywords": "bing.com",
                                "expr_type": "regex",
                                "match_method": "sub",
                                "format": "uncase plain"
@@ -61,6 +61,32 @@
            "do_blacklist": 1,
 			"do_log": 1,
            "effective_range": 0,
+            "user_region": "{\"method\":\"block\",\"code\":403,\"message\":\"error\",\"html_profile\":102}",
+            "is_valid": "yes",
+            "groups": [
+                {
+                    "regions": [
+                        {
+                            "table_name": "PXY_CTRL_HTTP_URL",
+                            "table_type": "string",
+                            "table_content": {
+                                "keywords": "pc.wps.cn",
+                                "expr_type": "regex",
+                                "match_method": "sub",
+                                "format": "uncase plain"
+                            }
+                        }
+                    ]
+                }
+            ]
+        },
+		{
+            "compile_id": 1024,
+            "service": 1,
+            "action": 48,
+            "do_blacklist": 1,
+						"do_log": 1,
+            "effective_range": 0,
            "user_region": "{\"method\":\"replace\",\"rules\":[{\"search_in\":\"http_resp_body\",\"find\":\"比特币\",\"replace_with\":\"硬币\"}]}",
            "is_valid": "yes",
            "groups": [
@@ -81,7 +107,7 @@
            ]
        },
 		{
-            "compile_id": 1024,
+            "compile_id": 1025,
            "service": 1,
            "action": 48,
            "do_blacklist": 1,
@@ -107,7 +133,7 @@
            ]
        },
 		{
-            "compile_id": 1025,
+            "compile_id": 1026,
            "service": 1,
            "action": 48,
            "do_blacklist": 1,
@@ -133,7 +159,33 @@
            ]
        },
 		{
-            "compile_id": 1026,
+            "compile_id": 1027,
+            "service": 1,
+            "action": 48,
+            "do_blacklist": 1,
+			"do_log": 1,
+            "effective_range": 0,
+            "user_region": "{\"method\":\"hijack\",\"hijack_profile\":202}",
+            "is_valid": "yes",
+            "groups": [
+                {
+                    "regions": [
+                        {
+                            "table_name": "PXY_CTRL_HTTP_URL",
+                            "table_type": "string",
+                            "table_content": {
+                                "keywords": "dldir1.qq.com/foxmail/windows/FoxmailSetup_7.2.10.151.exe",
+                                "expr_type": "regex",
+                                "match_method": "sub",
+                                "format": "uncase plain"
+                            }
+                        }
+                    ]
+                }
+            ]
+        },
+		{
+            "compile_id": 1028,
            "service": 1,
            "action": 48,
            "do_blacklist": 1,
@@ -159,13 +211,13 @@
            ]
        },
 		{
-            "compile_id": 1027,
+            "compile_id": 1029,
            "service": 1,
            "action": 48,
            "do_blacklist": 1,
            "do_log": 1,
            "effective_range": 0,
-            "user_region": "{\"method\":\"insert\",\"insert_profile\":303,\"position\":\"before-page-load\"}",
+            "user_region": "{\"method\":\"insert\",\"insert_profile\":303,\"position\":\"after-page-load\"}",
            "is_valid": "yes",
            "groups": [
                {
@@ -183,35 +235,88 @@
                    ]
                }
            ]
+        },
+		{
+            "compile_id": 1030,
+            "service": 1,
+            "action": 48,
+            "do_blacklist": 1,
+            "do_log": 1,
+            "effective_range": 0,
+            "user_region": "{\"method\":\"insert\",\"insert_profile\":303,\"position\":\"before-page-load\"}",
+            "is_valid": "yes",
+            "groups": [
+                {
+                    "regions": [
+                        {
+                            "table_name": "PXY_CTRL_HTTP_URL",
+                            "table_type": "string",
+                            "table_content": {
+                                "keywords": "www.youku.com",
+                                "expr_type": "regex",
+                                "match_method": "sub",
+                                "format": "uncase plain"
+                            }
+                        }
+                    ]
+                }
+            ]
+        },
+		{
+            "compile_id": 1031,
+            "service": 1,
+            "action": 48,
+            "do_blacklist": 1,
+						"do_log": 1,
+            "effective_range": 0,
+            "user_region": "{\"method\":\"replace\",\"rules\":[{\"search_in\":\"http_req_uri\",\"find\":\"(?<=\\\\\\?|^|&)q=([^&|^#]*)(?=&|$)\",\"replace_with\":\"q=find\"},{\"search_in\":\"http_req_uri\",\"find\":\"(?<=\\\\\\?|^|&)ei=([^&|^#]*)(?=&|$)\",\"replace_with\":\"ei=chaxun\"}]}",
+            "is_valid": "yes",
+            "groups": [
+                {
+                    "regions": [
+                        {
+                            "table_name": "PXY_CTRL_HTTP_URL",
+                            "table_type": "string",
+                            "table_content": {
+                                "keywords": "www.google.com/search?",
+                                "expr_type": "regex",
+                                "match_method": "sub",
+                                "format": "uncase plain"
+                            }
+                        }
+                    ]
+                }
+            ]
        }
   ],
    "plugin_table": [
        {
            "table_name": "PXY_PROFILE_RESPONSE_PAGES",
            "table_content": [
-                "101\t404\thtml\t./resource/pangu/404.html\t1",
+                "101\t404\thtml\t./resource/pangu/policy_file/404.html\t1",
                "102\tHTTP403\ttemplate\t./resource/pangu/HTTP403.html\t1"
            ]
        },
        {
            "table_name": "PXY_PROFILE_HIJACK_FILES",
            "table_content": [
-                "201\tchakanqi.exe\tapplication/x-msdos-program\t./resource/pangu/chakanqi.exe\t1"
+                "201\tchakanqi-947KB.exe\tapplication/x-msdos-program\t./resource/pangu/policy_file/chakanqi-947KB.exe\t1",
+                "202\tWPS8648-132M.exe\tapplication/x-msdos-program\t./resource/pangu/policy_file/WPS8648-132M.exe\t1"
            ]
        },
 				{
            "table_name": "PXY_PROFILE_INSERT_SCRIPTS",
            "table_content": [
-                "301\ttime\tjs\t./resource/pangu/time.js\t1",
-                "302\tu1\tcss\t./resource/pangu/u1.css\t1",
-                "303\tu1\tjs\t./resource/pangu/alert.js\t1"
+                "301\ttime\tjs\t./resource/pangu/policy_file/time.js\t1",
+                "302\tu1\tcss\t./resource/pangu/policy_file/u1.css\t1",
+                "303\tu1\tjs\t./resource/pangu/policy_file/alert.js\t1"
            ]
        },
 				{
            "table_name": "PXY_INTERCEPT_COMPILE",
            "table_content": [
-                "0\t0\t2\t1\t1\t{}\t{\"keyring\":1,\"exclusions\":{\"ev_cert\":1,\"cert_transparency\":1,\"client_cert_req\":1,\"pinning\":1},\"cert_verify\":{\"approach\":{\"cn\":1,\"issuer\":1,\"self-signed\":1,\"expiration\":0},\"fail_method\":\"fail-close\"},\"ssl_ver\":{\"min\":\"ssl3\",\"max\":\"tls13\",\"mirror_client\":1},\"decrypt_mirror\":{\"enable\":0}}\t1\t2",
-                "1\t0\t2\t1\t1\t{}\t{\"keyring\":2,\"exclusions\":{\"ev_cert\":0,\"cert_transparency\":0,\"client_cert_req\":1,\"pinning\":1},\"cert_verify\":{\"approach\":{\"cn\":1,\"issuer\":1,\"self-signed\":1,\"expiration\":1},\"fail_method\":\"pass-through\"},\"ssl_ver\":{\"min\":\"ssl3\",\"max\":\"tls13\",\"mirror_client\":1},\"decrypt_mirror\":{\"enable\":1,\"mirror_profile\":4}}\t1\t2"
+                "0\t0\t2\t1\t1\t{}\t{\"keyring\":765,\"exclusions\":{\"ev_cert\":0,\"cert_transparency\":0,\"client_cert_req\":1,\"pinning\":1,\"protocol_errors\":1},\"cert_verify\":{\"approach\":{\"cn\":1,\"issuer\":1,\"self-signed\":1,\"expiration\":0},\"fail_method\":\"pass-through\"},\"ssl_ver\":{\"min\":\"ssl3\",\"max\":\"ssl3\",\"mirror_client\":1,\"allow_http2\":1},\"decrypt_mirror\":{\"enable\":0}}\t1\t2",
+                "1\t0\t2\t1\t1\t{}\t{\"keyring\":0,\"exclusions\":{\"ev_cert\":0,\"cert_transparency\":0,\"client_cert_req\":1,\"pinning\":1},\"cert_verify\":{\"approach\":{\"cn\":1,\"issuer\":1,\"self-signed\":1,\"expiration\":1},\"fail_method\":\"pass-through\"},\"ssl_ver\":{\"min\":\"ssl3\",\"max\":\"tls13\",\"mirror_client\":1},\"decrypt_mirror\":{\"enable\":1,\"mirror_profile\":4}}\t1\t2"
            ]
        }
    ]
--- a/resource/pangu/table_info.conf
+++ b/resource/pangu/table_info.conf
@@ -17,20 +17,27 @@
 #id	name	type	src_charset	dst_charset	do_merge cross_cache quick_mode
 0	PXY_CTRL_COMPILE	compile	escape	--
 1	PXY_CTRL_GROUP	group	--
-2	PXY_CTRL_IP	ip	---
+1	GROUP_COMPILE_RELATION	group	--
+2	PXY_CTRL_IP	ip_plus	---
+2	TSG_OBJ_IP_ADDR	ip_plus	---
 3	PXY_CTRL_HTTP_URL	expr	UTF8	GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8	yes	0	quickoff
+3	TSG_OBJ_URL	expr	UTF8	GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8	yes	0	quickoff
 4	PXY_CTRL_HTTP_REQ_HDR	expr_plus	UTF8	UTF8	yes	0	quickoff
+4	TSG_OBJ_REQ_HDR	expr_plus	UTF8	UTF8	yes	0	quickoff
 5	PXY_CTRL_HTTP_REQ_BODY	expr	UTF8	GBK/UNICODE/UTF8	yes	128	quickoff
 6	PXY_CTRL_HTTP_RES_HDR	expr_plus	UTF8	UTF8	UTF8	yes	0	quickoff
+6	TSG_OBJ_RES_HDR	expr_plus	UTF8	UTF8	UTF8	yes	0	quickoff
 7	PXY_CTRL_HTTP_RES_BODY	expr	UTF8	GBK/UNICODE/UTF8	yes	128	quickoff
+7	TSG_OBJ_CONTENT	expr	UTF8	GBK/UNICODE/UTF8	yes	128	quickoff
 8	PXY_CTRL_SUBSCRIBE_ID	expr	UTF8	UTF8	yes	0	quickon
 9	PXY_CACHE_COMPILE	compile	escape	--
 10	PXY_CACHE_GROUP	group	--
 11	PXY_CACHE_HTTP_URL	expr	UTF8	UTF8	yes	0	quickoff
 12	PXY_CACHE_HTTP_COOKIE	expr	UTF8	UTF8	yes	0	quickoff
-13	PXY_PROFILE_TRUSTED_CA_CERT	plugin	{"valid":4,"foreign":"3"}
+13	PXY_PROFILE_TRUSTED_CA_CERT	plugin	{"key":1,"valid":4,"foreign":"3"}
 14	PXY_OBJ_TRUSTED_CA_CRL	plugin	{"valid":4,"foreign":"3"}
 15	PXY_PROFILE_RESPONSE_PAGES plugin	{"key":1,"foreign":"4","valid":5}
 16	PXY_PROFILE_HIJACK_FILES   plugin	{"key":1,"foreign":"5","valid":6}
 17	PXY_PROFILE_INSERT_SCRIPTS plugin	{"key":1,"foreign":"4","valid":5}
 18	PXY_INTERCEPT_COMPILE	plugin	{"key":1,"valid":8}
+19	PXY_PROFILE_TRAFFIC_MIRROR	plugin	{"key":1,"valid":4}
--- a/resource/pangu/table_info.conf_yiqi
+++ b/resource/pangu/table_info.conf_yiqi
@@ -0,0 +1,37 @@
+#each collumn seperate with '\t'
+#id	(0~65535)
+#name string
+#type one of ip,expr,expr_plus,digest,intval,compile or plugin
+#src_charset one of GBK,BIG5,UNICODE,UTF8
+#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
+#do_merege [yes/no]
+#cross cache [number]
+#quick mode [quickon/quickoff], default [quickoff]
+#For ip/intval/digest/compile/group
+#id	name	type
+#
+#For plugin table
+#id	name	type	json_descr
+#
+#For expr/expr_plus Table
+#id	name	type	src_charset	dst_charset	do_merge cross_cache quick_mode
+0	PXY_CTRL_COMPILE	compile	escape	--
+1	PXY_CTRL_GROUP	group	--
+2	PXY_CTRL_IP	ip	---
+3	PXY_CTRL_HTTP_URL	expr	UTF8	GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8	yes	0	quickoff
+4	PXY_CTRL_HTTP_REQ_HDR	expr_plus	UTF8	UTF8	yes	0	quickoff
+5	PXY_CTRL_HTTP_REQ_BODY	expr	UTF8	GBK/UNICODE/UTF8	yes	128	quickoff
+6	PXY_CTRL_HTTP_RES_HDR	expr_plus	UTF8	UTF8	UTF8	yes	0	quickoff
+7	PXY_CTRL_HTTP_RES_BODY	expr	UTF8	GBK/UNICODE/UTF8	yes	128	quickoff
+8	PXY_CTRL_SUBSCRIBE_ID	expr	UTF8	UTF8	yes	0	quickon
+9	PXY_CACHE_COMPILE	compile	escape	--
+10	PXY_CACHE_GROUP	group	--
+11	PXY_CACHE_HTTP_URL	expr	UTF8	UTF8	yes	0	quickoff
+12	PXY_CACHE_HTTP_COOKIE	expr	UTF8	UTF8	yes	0	quickoff
+13	PXY_PROFILE_TRUSTED_CA_CERT	plugin	{"key":1,"valid":4,"foreign":"3"}
+14	PXY_OBJ_TRUSTED_CA_CRL	plugin	{"valid":4,"foreign":"3"}
+15	PXY_PROFILE_RESPONSE_PAGES plugin	{"key":1,"foreign":"4","valid":5}
+16	PXY_PROFILE_HIJACK_FILES   plugin	{"key":1,"foreign":"5","valid":6}
+17	PXY_PROFILE_INSERT_SCRIPTS plugin	{"key":1,"foreign":"4","valid":5}
+18	PXY_INTERCEPT_COMPILE	plugin	{"key":1,"valid":8}
+19	PXY_PROFILE_TRAFFIC_MIRROR	plugin	{"key":1,"valid":4}
--- a/resource/tfe/tango-ca-trust-ca.pem
+++ b/resource/tfe/tango-ca-trust-ca.pem
@@ -0,0 +1,51 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/resource/tfe/tango-ca-untrust-ca.pem
+++ b/resource/tfe/tango-ca-untrust-ca.pem
@@ -0,0 +1,51 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCpKys98OeNXQJa
+d+7qu03OKlaAN3xTslBZRTbKoI/WvomKQSEOdYZiFwzXj+eg7oTDsWAgHk7CbkTo
+e6qvWF4vCpqeGaiLU4sulLPeSBg8D4Nj5xK2HtE92enYpnVCa4fGPASzMXJqpJQI
+MlutaxCxNoIGhPh6ZcAMBInlvdzWXnOTSF4loop4EozILPvnlrgQ2zjRlMteSfNV
+vF3MUsESmd8Rmlbc/dtj/w/DK3zmTc/2DkjkbQcBWUF4AGJFGelNyMcvg9sqkfUI
+4XksmI1GQfoPLJuaFtWkB31bCtqk6CiZnEwlnC1qUmH/WDJazeR8hlwfeYqaqRic
+3yfX6jVHAgMBAAECggEAFJPvuqUnRYbe1mpoYZ1PJZj41LfrI7M5GuLUe2l0lcav
+rGWnw76ADkaHhWE359ebxsI40y9cnUIUl8MTTCkPq+E6VakBW5FaCNyF1LAoYoXw
+kaJ2IDk3crKjQ3tcICw8Y9zBJZsKM/a5GxYlGL9BVI0w2+Io55qg9dVHgO7Lgjfg
+alUdCe3z57oEE0PYIaHCe7eCFeDX13sb6fmzr9yvHjuZus7WgbX3ztr4ebnWFF1d
+rYIxT+O002PwoARDVS4kRVF1ZjOaxOhYsXroiogmBiFHZDLrGBtZL1aJ9556qCUs
+msJh5ofDivJiBsWTSyajqvjLd3QUnJoD/I+1ujn7YQKBgQDVSJKFy34RLiV1IkK/
+WNeDkBoaJJ1UYzE44E/tG/uWpY+k+wwJ2/x3SfqfRfrgijJ7Vw7H11LMogHHLNGm
+CZ+mgcwKl0tMipkiOzVXI0Y33hpPk0+y6RC0W+3ATylt4yFHrRePwHyFi3jkkrfF
+Ws4d2YPmd/TAjzDeqBqtAohvYwKBgQDLDL+gor+13PBwPLellPruMZDD0TlN3dgC
+WwofdV7G6Yx52acMohDieDXJGMvpnaJD9XLjwxUyDV3FcCXDw7cZdBJ8YXgbxkdB
+Nh1cTmfEUGoGiOP/ErIVHwFraWClMMNCCK51+a+1p/CUYTUao/eX1FHDW799FOP6
+CK/auSHhzQKBgDwOgWO3VzpTOizvhsgGpjjfnNn7sWmPvM59K0Ri+scCu54DKvKj
+xUV5yV6MAAa2I1zjuL/A/AmvHL0O+8G7N/9U0TWyQHu/Ezu2XGC7CAy3N8Vsf6ar
+Rg7jS+E46TuOF1LthJLv6qBYE6SZQ7IIzb1OAHwnDv4h0+r+fvR0oCJtAoGASHyQ
+nGP9VIs/OpIybWY1/nqrV3yFnIqp5o1hm8FmyFPv1kAhJp1ksbSAXv3/LbMcjm49
+SZoHIwsqgqV6ldx0rR2Gy+hv3Fp4bYtIB//lg2vBrfuIiTK/aFLdSt8fpVk3G4fF
+4E/2rj75376kGpKWfRlK5xcF0T139XbMcKTOt7ECgYBs3adogIihPLEDkxAl7ABo
+iCtexGeSyHwK5alunuTUQQO17MnWpp+0DJ5hg6BPLyPi2B0gB9nB5egOQ/K7hs0Q
+fcwwMLIPWkFLl0NUgrlLu+h2jJT47ZpAOems9BEZ7gh2cgXLrEDTgcm2kfiBFdeP
+SaLCgcRu5I5C041EjlTUoQ==
+-----END PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/resource/tfe/tango-ca-v3-trust-ca.pem
+++ b/resource/tfe/tango-ca-v3-trust-ca.pem
@@ -0,0 +1,51 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----
+MIIDzTCCArWgAwIBAgIGDhoh7QVJMA0GCSqGSIb3DQEBCwUAMD4xIDAeBgNVBAMM
+F1RhbmdvIFNlY3VyZSBHYXRld2F5IENBMRowGAYDVQQKDBFNYXNlcmF0aSBTb2x1
+dGlvbjAeFw0xOTAyMTcwMTM1MTJaFw0yMjAyMTgwMTM1MTJaMD4xIDAeBgNVBAMM
+F1RhbmdvIFNlY3VyZSBHYXRld2F5IENBMRowGAYDVQQKDBFNYXNlcmF0aSBTb2x1
+dGlvbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMno29yuMEzXssn6
+UPZEz7YDi1zCml+BvTxlCexUSO2W1q3pzjH2yP1Wqo5q0ij70YcZn8UpJpycAPG6
+2b+lZKvafG2sl0zVIKpH04XZ5kZ+F0kra59Ytw6Rfv/4IQBdUQ5cvjHGc1Lnku47
+IIw6J0+Sr5fOTVIkEiukWuly0zFMXMly+7flyG2QXUjE+E3V1NVbosm3PnlTyC8n
+QGWD/DsSR+wd38oe8Ex2lsbHTa9OdZRc9gbKLbC87Lmm062GtKXHLEbCYHJ6E8+z
+lcaTszybZ5nN/4pvmL/Z77ATw+tcKkYvU+JyPgBvWEsXJlVG01V9XOqT6QIS/p5y
+FunZ8T8CAwEAAaOB0DCBzTAPBgNVHRMBAf8EBTADAQH/MBEGCWCGSAGG+EIBAQQE
+AwICBDB4BgNVHSUEcTBvBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMEBggr
+BgEFBQcDCAYKKwYBBAGCNwIBFQYKKwYBBAGCNwIBFgYKKwYBBAGCNwoDAQYKKwYB
+BAGCNwoDAwYKKwYBBAGCNwoDBAYJYIZIAYb4QgQBMA4GA1UdDwEB/wQEAwIBBjAd
+BgNVHQ4EFgQULQNPIvNlh8oGhVmVqAG3syRbdWAwDQYJKoZIhvcNAQELBQADggEB
+AAzCDOWcu38Sw+AWQSq5y0RwL6ga8W5hB0HTqxPpnUUhZN3LMl8F3E/1JK/wWDWF
+meJACTiL/rMDSWFUz57xGm4SmiPSOgWmToQ5PYahyNlkw9uODxRyl84zEMp/MXfi
+LL57v3XFRnTbTHaEu3ew/Xjkhq1/mhwYblP17iPq1i8o4AqX2OGLIueDrz3j80AV
+syrm3cFE5jPJHvvVuArvIDdCnhCX2g0Es6cYSYppMxRtRiZnydqJ3o326zTigdIB
+8zYflognJJkV2lavt0nz4NkvmlOj3S88smWxxYRzKEpEw8/m+DbhGIx6R7w0Ot6Q
+bzLgBvYDF+BCkkjaQCR334M=
+-----END CERTIFICATE-----
--- a/resource/tfe/tango-ca-v3-untrust-ca.pem
+++ b/resource/tfe/tango-ca-v3-untrust-ca.pem
@@ -0,0 +1,51 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----
+MIID3TCCAsWgAwIBAgIGDhoh7clOMA0GCSqGSIb3DQEBCwUAMEYxKDAmBgNVBAMM
+H1RhbmdvIFNlY3VyZSBHYXRld2F5IENBIFVOVFJVU1QxGjAYBgNVBAoMEU1hc2Vy
+YXRpIFNvbHV0aW9uMB4XDTE5MDIxNzAxMzUxN1oXDTIyMDIxODAxMzUxN1owRjEo
+MCYGA1UEAwwfVGFuZ28gU2VjdXJlIEdhdGV3YXkgQ0EgVU5UUlVTVDEaMBgGA1UE
+CgwRTWFzZXJhdGkgU29sdXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
+AoIBAQCrtAM/GPvdhxsAuipj2ohNEN7NCD11fu3wDQ8rO+n2BXdTobpfMh816e7v
+tPSz1VEMYr4DTRe8GpEpYj3bxnWLVAe9+M4A1E1a/K9F50wqlF/Mm12MlSF3hscP
+RwfO1k0tYcNwVOfuoyTDBvqVXxZaz+nM70h38wkfqfaOeLC/eB7khejq5HSCQvTP
+tBShY8ZhAIPkybk8YUBHIQjHV4vqRGxkAgSxgrT7z99Sqd8NJE48M0b7IyhaWisG
+HCa2KDK7xbPRzojX9Oi2F/rraZZo4t6p9ab7SxV/+JZ7juE5PbGJs+cXJe3fufXA
+isGtX2LougxQEpO6BB8c1j4gtF7rAgMBAAGjgdAwgc0wDwYDVR0TAQH/BAUwAwEB
+/zARBglghkgBhvhCAQEEBAMCAgQweAYDVR0lBHEwbwYIKwYBBQUHAwEGCCsGAQUF
+BwMCBggrBgEFBQcDBAYIKwYBBQUHAwgGCisGAQQBgjcCARUGCisGAQQBgjcCARYG
+CisGAQQBgjcKAwEGCisGAQQBgjcKAwMGCisGAQQBgjcKAwQGCWCGSAGG+EIEATAO
+BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFI/dacOl4JQdR9xDiWpJf/2mvblUMA0G
+CSqGSIb3DQEBCwUAA4IBAQAOWQiEcJqpen1/AXfprE+9uqwQWt/Gh8UPYZPE7Kcc
+VnhlqTDO+nGLVPM97ju/NjFNojJaMxsKBHVcRRHA3V+sKtqoHNUVhHJLtMDvh+2w
+vloUM11ckgilIOYqFzjeIL11NB4ivAN7V9jP6Sh8gC31Q6Ttd6FkJ7f9QObQ6sKT
+OEmaMqKVe6H0+U4jhQF3/gSW+PAIb1YIJof/wtewBCDm5Pp2UYaNlrnMGTIxayXQ
+Cc+h16oDTRPBsLZgDkmR5fslRH9CAbxC4/b2M1jU/MKlWlu7ThzAPPEtEKqpiLSi
+Ebfe/jvJ786VcXwO09FWfCiUjE9Gf4rbMZjkkHOL7UPa
+-----END CERTIFICATE-----
--- a/resource/tfe/tls-ca-bundle.pem
+++ b/resource/tfe/tls-ca-bundle.pem
@@ -3805,3 +3805,6 @@ oijHHKOnNlA8OqTfSm7mhzvO6/DggTedEzxSjr25HTTGHdUKaj2YKXCMiSrRq4IQ
 SB/c9O+lxbtVGjhjhE63bK2VVOxlIhBJF7jAHscPrFRH
 -----END CERTIFICATE-----

+# DigiCertSHA2SecureServerCA
+
+