(List
  (Com {[LIT_CHARS hash]} {[LIT_CHARS -r]})
  (Com {[LIT_CHARS set]} {[LIT_CHARS -e]})
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('port', {[LIT_CHARS 8443]})])
  (If
    (DBracket {B2 BINARY_STRING_NOT_EQUAL {[VarSub 1]} {[DQ ]}})
    (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('target', {[VarSub 1]})])
    (ElseTrue)
    (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('target', {[LIT_CHARS supermarket.chef.io]})])
  )
  (If
    (DBracket {B2 BINARY_STRING_NOT_EQUAL {[VarSub 2]} {[DQ ]}})
    (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('cafile', {[VarSub 2]})])
    (ElseTrue)
    (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('cafile', {[LIT_CHARS /opt/chef/embedded/ssl/cert.pem]})])
  )
  (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "Copying SSL certificate for "][VarSub target][LIT_CHARS " into store "][VarSub cafile]]})
  (If
    (DBracket {B1 UNARY_FILE_f {[LIT_CHARS ./proxy_setup.sh]}})
    (Com {[LIT_CHARS .]} {[LIT_CHARS ./proxy_setup.sh]})
  )
  (Com {[LIT_CHARS apt-get]} {[LIT_CHARS install]} {[LIT_CHARS proxytunnel]})
  (Fork
    (Com {[LIT_CHARS proxytunnel]} {[LIT_CHARS -p]} {[VarSub https_proxy transform_ops=[VS_UNARY_DPOUND {[LIT_CHARS "*:"] [LIT_SLASH /] [LIT_SLASH /]}]]} {[LIT_CHARS -d]} {[VarSub target] [LIT_OTHER ":"] [LIT_CHARS 443]} {[LIT_CHARS -a]} {[VarSub port]})
  )
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('pid', {[VarSub !]})])
  (Com {[LIT_CHARS trap]} {[SQ <LIT_CHARS "kill ${pid}">]} {[LIT_CHARS HUP]} {[LIT_CHARS EXIT]} {[LIT_CHARS INT]})
  (Com {[LIT_CHARS sleep]} {[LIT_CHARS 1]})
  (Com {[LIT_CHARS cp]} {[LIT_CHARS -H]} {[DQ [VarSub cafile]]} {[DQ [VarSub cafile][LIT_CHARS .old]]})
  (Pipeline
    (Com {[LIT_CHARS echo]})
    (Com {[LIT_CHARS openssl]} {[LIT_CHARS s_client]} {[LIT_CHARS -connect]} {[LIT_CHARS 127.0.0.1] [LIT_OTHER ":"] [VarSub port]} {[LIT_CHARS -showcerts]})
    (Com {[LIT_CHARS sed]} {[LIT_CHARS -n]} {[SQ <LIT_CHARS "/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p">]}
      <
      (FilenameRedirectNode filename={[DQ [VarSub cafile]]} <REDIR_DGREAT ">>"> 1),
      >
    )
  )
)