(command.CommandList
  children: [
    (C {<hash>} {<-r>})
    (C {<Id.KW_Set set>} {<-e>})
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:port)
          op: assign_op.Equal
          rhs: {<8443>}
          spids: [18]
        )
      ]
    )
    (command.If
      arms: [
        (if_arm
          cond: [
            (command.Sentence
              child: 
                (command.DBracket
                  expr: 
                    (bool_expr.Binary
                      op_id: Id.BoolBinary_GlobNEqual
                      left: {($ Id.VSub_Number '$1')}
                      right: {(DQ )}
                    )
                )
              terminator: <Id.Op_Semi _>
            )
          ]
          action: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:target)
                  op: assign_op.Equal
                  rhs: {($ Id.VSub_Number '$1')}
                  spids: [41]
                )
              ]
            )
          ]
          spids: [24 38]
        )
      ]
      else_action: [
        (command.ShAssignment
          pairs: [
            (assign_pair
              lhs: (sh_lhs_expr.Name name:target)
              op: assign_op.Equal
              rhs: {<supermarket.chef.io>}
              spids: [47]
            )
          ]
        )
      ]
    )
    (command.If
      arms: [
        (if_arm
          cond: [
            (command.Sentence
              child: 
                (command.DBracket
                  expr: 
                    (bool_expr.Binary
                      op_id: Id.BoolBinary_GlobNEqual
                      left: {($ Id.VSub_Number '$2')}
                      right: {(DQ )}
                    )
                )
              terminator: <Id.Op_Semi _>
            )
          ]
          action: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:cafile)
                  op: assign_op.Equal
                  rhs: {($ Id.VSub_Number '$2')}
                  spids: [70]
                )
              ]
            )
          ]
          spids: [53 67]
        )
      ]
      else_action: [
        (command.ShAssignment
          pairs: [
            (assign_pair
              lhs: (sh_lhs_expr.Name name:cafile)
              op: assign_op.Equal
              rhs: {</opt/chef/embedded/ssl/cert.pem>}
              spids: [76]
            )
          ]
        )
      ]
    )
    (C {<echo>} 
      {
        (DQ <'Copying SSL certificate for '> ($ Id.VSub_DollarName '$target') <' into store '> 
          ($ Id.VSub_DollarName '$cafile')
        )
      }
    )
    (command.If
      arms: [
        (if_arm
          cond: [
            (command.Sentence
              child: 
                (command.DBracket
                  expr: (bool_expr.Unary op_id:Id.BoolUnary_f child:{<./proxy_setup.sh>})
                )
              terminator: <Id.Op_Semi _>
            )
          ]
          action: [(C {<.>} {<./proxy_setup.sh>})]
          spids: [92 103]
        )
      ]
    )
    (C {<apt-get>} {<install>} {<proxytunnel>})
    (command.Sentence
      child: 
        (C {<proxytunnel>} {<-p>} 
          {
            (braced_var_sub
              token: <Id.VSub_Name https_proxy>
              suffix_op: 
                (suffix_op.Unary
                  op_id: Id.VOp1_DPound
                  arg_word: {<'*:'> <Id.Lit_Slash /> <Id.Lit_Slash />}
                )
            )
          } {<-d>} {($ Id.VSub_DollarName '$target') <Id.Lit_Other ':'> <443>} {<-a>} {(${ Id.VSub_Name port)}
        )
      terminator: <Id.Op_Amp _>
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:pid)
          op: assign_op.Equal
          rhs: {($ Id.VSub_Bang '$!')}
          spids: [146]
        )
      ]
    )
    (C {<trap>} {(SQ <'kill ${pid}'>)} {<HUP>} {<EXIT>} {<INT>})
    (C {<sleep>} {<1>})
    (C {<cp>} {<-H>} {(DQ (${ Id.VSub_Name cafile))} {(DQ (${ Id.VSub_Name cafile) <.old>)})
    (command.Pipeline
      children: [
        (C {<echo>})
        (C {<openssl>} {<s_client>} {<-connect>} 
          {<127.0.0.1> <Id.Lit_Other ':'> ($ Id.VSub_DollarName '$port')} {<-showcerts>}
        )
        (command.Simple
          words: [{<sed>} {<-n>} {(SQ <'/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p'>)}]
          redirects: [
            (redir.Redir
              op: <Id.Redir_DGreat '>>'>
              fd: -1
              arg_word: {(DQ (${ Id.VSub_Name cafile))}
            )
          ]
        )
      ]
      negated: F
    )
  ]
)