(command.CommandList
  children: [
    (C {<hash>} {<-r>})
    (C {<set>} {<-e>})
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:port)
          op: assign_op.Equal
          rhs: {<8443>}
          spids: [18]
        )
      ]
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [
                (command.Sentence
                  child: 
                    (command.DBracket
                      expr: 
                        (bool_expr.Binary
                          op_id: Id.BoolBinary_GlobNEqual
                          left: {($ Id.VSub_Number '$1')}
                          right: {(DQ )}
                        )
                    )
                  terminator: <Id.Op_Semi _>
                )
              ]
            )
          action: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:target)
                  op: assign_op.Equal
                  rhs: {($ Id.VSub_Number '$1')}
                  spids: [41]
                )
              ]
            )
          ]
          spids: [24 38]
        )
      ]
      else_action: [
        (command.ShAssignment
          pairs: [
            (assign_pair
              lhs: (sh_lhs_expr.Name name:target)
              op: assign_op.Equal
              rhs: {<supermarket.chef.io>}
              spids: [47]
            )
          ]
        )
      ]
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [
                (command.Sentence
                  child: 
                    (command.DBracket
                      expr: 
                        (bool_expr.Binary
                          op_id: Id.BoolBinary_GlobNEqual
                          left: {($ Id.VSub_Number '$2')}
                          right: {(DQ )}
                        )
                    )
                  terminator: <Id.Op_Semi _>
                )
              ]
            )
          action: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:cafile)
                  op: assign_op.Equal
                  rhs: {($ Id.VSub_Number '$2')}
                  spids: [70]
                )
              ]
            )
          ]
          spids: [53 67]
        )
      ]
      else_action: [
        (command.ShAssignment
          pairs: [
            (assign_pair
              lhs: (sh_lhs_expr.Name name:cafile)
              op: assign_op.Equal
              rhs: {<'/opt/chef/embedded/ssl/cert.pem'>}
              spids: [76]
            )
          ]
        )
      ]
    )
    (C {<echo>} 
      {
        (DQ <'Copying SSL certificate for '> ($ Id.VSub_DollarName '$target') <' into store '> 
          ($ Id.VSub_DollarName '$cafile')
        )
      }
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [
                (command.Sentence
                  child: 
                    (command.DBracket
                      expr: (bool_expr.Unary op_id:Id.BoolUnary_f child:{<'./proxy_setup.sh'>})
                    )
                  terminator: <Id.Op_Semi _>
                )
              ]
            )
          action: [(C {<.>} {<'./proxy_setup.sh'>})]
          spids: [92 103]
        )
      ]
    )
    (C {<apt-get>} {<install>} {<proxytunnel>})
    (command.Sentence
      child: 
        (C {<proxytunnel>} {<-p>} 
          {
            (braced_var_sub
              token: <Id.VSub_Name https_proxy>
              suffix_op: 
                (suffix_op.Unary
                  tok: <Id.VOp1_DPound '##'>
                  arg_word: {<Id.Lit_Other '*'> <':'> <Id.Lit_Slash '/'> <Id.Lit_Slash '/'>}
                )
            )
          } {<-d>} {($ Id.VSub_DollarName '$target') <Id.Lit_Colon ':'> <443>} {<-a>} {(${ Id.VSub_Name port)}
        )
      terminator: <Id.Op_Amp _>
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:pid)
          op: assign_op.Equal
          rhs: {($ Id.VSub_Bang '$!')}
          spids: [147]
        )
      ]
    )
    (C {<trap>} {(SQ <'kill ${pid}'>)} {<HUP>} {<EXIT>} {<INT>})
    (C {<sleep>} {<1>})
    (C {<cp>} {<-H>} {(DQ (${ Id.VSub_Name cafile))} {(DQ (${ Id.VSub_Name cafile) <.old>)})
    (command.Pipeline
      children: [
        (C {<echo>})
        (C {<openssl>} {<s_client>} {<-connect>} 
          {<127.0.0.1> <Id.Lit_Colon ':'> ($ Id.VSub_DollarName '$port')} {<-showcerts>}
        )
        (command.Simple
          words: [{<sed>} {<-n>} {(SQ <'/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p'>)}]
          redirects: [
            (redir
              op: <Id.Redir_DGreat '>>'>
              loc: (redir_loc.Fd fd:1)
              arg: {(DQ (${ Id.VSub_Name cafile))}
            )
          ]
          do_fork: T
        )
      ]
      negated: F
    )
  ]
)