Anubis / Xlib | GitLab

Commit 83512cdbe6eabfe2ffb163b11e6288426325bb11

Authored by David RENÉ 2020-10-05 08:50:19 +0900

update the read (according to current xlib and remove unneeded read (http_server…

….anubis, html.anubis)

Showing 1 changed file with 390 additions and 390 deletions Show diff stats

Inline Side-by-side

web/CXM_https_get.anubis

Show/Hide comments View file @83512cd

1	-
2	- Project The Anubis Project
3	-
4	- Title Getting a document from the secured Web.
5	-
6	- Copyright Copyright (c) Alain Prouté 2001.
7	-
8	-
9	- Author Alain Prouté
10	-
11	-
12	- Overview
13	- This file defines the function 'https_get' which retrieve a document from the world
14	- wide web in secured mode (HTTPS). The function is analogous to 'http_get', to be found
15	- in 'web/http_get.anubis'.
16	-
17	- The function simulates the behavior of a browser, at least just what is needed to
18	- retrieve the document. It does not display the document, but returns it (if found) in
19	- the form of a string.
20	-
21	- The function 'https_get' takes the following operands:
22	-
23	- - the name of the server to which the request is to be sent,
24	- - the name (including the path) of the document on this server,
25	- - a list of headers to be added to mandatory standard headers,
26	- - a list of 'arguments' to be sent as the body of the request (web arguments).
27	- - an accept policy function (see below), for accepting X.509 certificates in case of
28	- a problem.
29	-
30	- The result returned by 'https_get' has the following type, which defines the problems
31	- which may happen:
32	-
33	-
34	-read tools/basis.anubis
35	-read system/string.anubis
36	-read html.anubis
37	-read http_get_common.anubis
38	-read http_server.anubis
39	-read common.anubis
40	-
41	-
42	-public type HTTPS_GET_Result:
43	- cannot_resolve_server_name(DNS_Result),
44	- ssl_connect_error(SSLConnectError),
45	- transmission_problem,
46	- request_refused_by_server,
47	- ok(String response,
48	- List(HTTP_header) headers,
49	- String document).
50	-
51	- Cookies are among headers. See 'web/cookies.anubis' for cookies handling.
52	-
53	-
54	- Note: The types 'DNS_Result' and 'SSLConnectError' are defined in 'predefined.anubis'.
55	-
56	-public define HTTPS_GET_Result
57	- https_get
58	- (
59	- String server_name,
60	- String document_name,
61	- List(HTTP_header) headers,
62	- List(HTTP_argument) arguments,
63	- (Maybe(X509)) -> Bool accept_policy
64	- ).
65	-
66	- The same one without the 'headers' argument:
67	-
68	-public define HTTPS_GET_Result
69	- https_get
70	- (
71	- String server_name,
72	- String document_name,
73	- List(HTTP_argument) arguments,
74	- (Maybe(X509)) -> Bool accept_policy
75	- ) = https_get(server_name,document_name,[],arguments,accept_policy).
76	-
77	- The main difference with 'http_get' is the presence of the 'accept_policy'
78	- argument. 'accept_policy' is the function which determines your personal policy for
79	- accepting a server certificate, if it is the case that either this certificate is
80	- invalid (or missing), or if its common name does not match the server name, that is to
81	- say if 'open_SSL_connection' (defined in 'predefined.anubis') did not already accept
82	- it.
83	-
84	- 'X509' is an 'opaque' type defined in 'predefined.anubis'. It is 'opaque' in the sens
85	- that no alternative of this type is directly accessible to you (despite the fact that
86	- the type is public).
87	-
88	- An accept policy function takes (maybe) an X.509 certificate as its unique argument, so
89	- that the decision may be taken with the suspect certificate at hand. It must return
90	- 'true' for accepting, and 'false' for refusing.
91	-
92	- You may use the following default accept policy function:
93	-
94	-public define Bool
95	- default_accept_policy
96	- (
97	- Maybe(X509) suspect_certificate
98	- ) = false.
99	-
100	- That is, never accept a certificate which cannot be successfully verified by
101	- 'open_SSL_connection'. Notice that this is not a paranoid behavior, but a normal
102	- behavior. Nevertheless, you still have the possibility to weaken this behavior by
103	- using another accept policy function. Be very careful when writing this function,
104	- because this may weaken your security. This function may for example show the
105	- certificate and ask for user input for accepting it. It may also check the certificate
106	- fingerprint against a data base, etc...
107	-
108	- Another accept policy function is defined in this file:
109	-
110	-public define Bool
111	- command_line_accept_policy
112	- (
113	- Maybe(X509) suspect_certificate
114	- ).
115	-
116	- It is used by the command line module 'https_get.adm'. If the certificate is not
117	- accepted by 'open_SSL_connection', this function prints the certificate on the screen,
118	- and ask the user for acceptation. It also asks the user for accepting the certificate
119	- for ever.
120	-
121	- It is likely that you will need an accept policy function of your own. See the
122	- definition of 'command_line_accept_policy' below for information and
123	- 'predefined.anubis' for the tools enabling the manipulation of X.509 certificates.
124	- Certificates that you trust are stored into the directory declared under the symbol
125	- 'ca' (for 'Certificate Authorities') in your configuration file. Any certificate
126	- present in this directory is trusted without any condition.
127	-
128	- This file defines the module 'https_get' to be used directly from the command line. To
129	- learn about the syntax, just type 'https_get' at the system prompt, or have a look at
130	- the end of this file.
131	-
132	-
133	-
134	-
135	- --- That's all for public definitions. ------------------------------------------------
136	-
137	-
138	-
139	-
140	-
141	-
142	-
143	-
144	-define Maybe(String)
145	- receive_text_chunk
146	- (
147	- SSL_Connection conn
148	- ) =
149	- read(conn,100,1000).
150	-
151	-
152	-
153	-
154	-define HTTPS_GET_Result
155	- receive
156	- (
157	- SSL_Connection conn,
158	- String headers,
159	- String text_so_far,
160	- Bool double_crlf_seen
161	- ) =
162	- if receive_text_chunk(conn) is
163	- {
164	- failure then if separate_headers(headers) is
165	- {
166	- [ ] then ok("",[],text_so_far),
167	- [h . t] then if h is http_header(a,b) then ok(a,t,text_so_far)
168	- },
169	-
170	- success(s) then
171	- if s = ""
172	- then if separate_headers(headers) is
173	- {
174	- [ ] then ok("",[],text_so_far),
175	- [h . t] then if h is http_header(a,b) then ok(a,t,text_so_far)
176	- }
177	- else with new_s = text_so_far+s,
178	- if double_crlf_seen
179	- then receive(conn,headers,new_s,true)
180	- else if has_double_crlf(new_s) is
181	- {
182	- failure then receive(conn,headers,new_s,false),
183	- success(n) then
184	- if sub_string(new_s,n+4,length(new_s)-n-4) is
185	- {
186	- failure then alert,
187	- success(s1) then
188	- if sub_string(new_s,0,n) is
189	- {
190	- failure then alert,
191	- success(h) then receive(conn,h,s1,true)
192	- }
193	- }
194	- }
195	- }.
196	-
197	-
198	-
199	- The next function has a valid SSL connection to the server, and tries to retrieve the
200	- document.
201	-
202	-define HTTPS_GET_Result
203	- https_get
204	- (
205	- Bool print_all,
206	- SSL_Connection conn,
207	- String server_name,
208	- String document_name,
209	- List(HTTP_header) headers,
210	- List(HTTP_argument) arguments
211	- ) =
212	- //
213	- // Send the HTTP request, and receive the answer:
214	- //
215	- with body = format_http_args(arguments),
216	- with request = (if arguments = [] then "GET " else "POST ")
217	- + document_name + " HTTP/1.0" + crlf +
218	- "Host: " + server_name + crlf +
219	- "Accept-Charset: iso-8859-1,*,utf-8" + crlf +
220	- (if arguments = [] then ""
221	- else "Content-type: application/x-www-form-urlencoded" + crlf +
222	- "Content-length: " + to_decimal(length(body))+ crlf) +
223	- format_headers(headers) +
224	- crlf +
225	- body,
226	- (if print_all then
227	- (
228	- print("Sending request:\n");
229	- print(request);
230	- print("\n")
231	- ) else unique);
232	- if write(conn,request) is
233	- {
234	- failure then transmission_problem,
235	- success(_) then receive(conn,"","",false)
236	- }.
237	-
238	-
239	- The next function retrieves the document using the numerical (resolved) server address.
240	-
241	-define HTTPS_GET_Result
242	- https_get
243	- (
244	- Bool print_all,
245	- Word32 server_addr,
246	- Word32 server_port,
247	- String server_name,
248	- String document_name,
249	- List(HTTP_header) headers,
250	- List(HTTP_argument) arguments,
251	- (Maybe(X509)) -> Bool accept_policy
252	- ) =
253	- if open_SSL_connection(server_name,server_addr,server_port,accept_policy) is
254	- {
255	- error(msg) then ssl_connect_error(msg),
256	- ok(conn) then https_get(print_all,conn,server_name,document_name,headers,arguments)
257	- }.
258	-
259	-
260	-
261	-define HTTPS_GET_Result
262	- https_get
263	- (
264	- Bool print_all,
265	- String server_name,
266	- String document_name,
267	- List(HTTP_header) headers,
268	- List(HTTP_argument) arguments,
269	- (Maybe(X509)) -> Bool accept_policy
270	- ) =
271	- if separate_name_port(server_name,443) is (name,port) then
272	- //
273	- // resolve server name and call 'https_get' with numeric server address:
274	- //
275	- with a = dns(name),
276	- if a is ok(addr)
277	- then https_get(print_all,addr,port,name,document_name,headers,arguments,accept_policy)
278	- else cannot_resolve_server_name(a).
279	-
280	-
281	-
282	- Now, here is our public tool:
283	-
284	-public define HTTPS_GET_Result
285	- https_get
286	- (
287	- String server_name,
288	- String document_name,
289	- List(HTTP_header) headers,
290	- List(HTTP_argument) arguments,
291	- (Maybe(X509)) -> Bool accept_policy
292	- ) = https_get(false,server_name,document_name,headers,arguments,accept_policy).
293	-
294	-
295	-
296	-
297	-
298	- Finally, we construct the command line executable module 'https_get.adm':
299	-
300	-define One
301	- syntax_https_get =
302	- print("\nUsage: https_get <server> <document> [options] =<header> <value> ... <arg> <value> ...\n");
303	- print(" Options are:\n");
304	- print(" -print_all print request, response line, headers and document\n");
305	- print(" (default is to print only the document)\n").
306	-
307	-
308	-
309	-
310	- Below is our accept policy function for the command line module. This function may
311	- serve as a model for your own accept policy function.
312	-
313	-public define Bool
314	- command_line_accept_policy
315	- (
316	- Maybe(X509) mbcert
317	- ) =
318	- if mbcert is
319	- {
320	- failure then
321	- print("No server certificate or invalid server certificate.\n");
322	- print("Do you want to trust this site anyway ? [Y/N]\n");
323	- yes, // this is the same as 'if yes then true else false'
324	-
325	- success(cert) then
326	- print(to_string(cert));
327	- print("\nDo you want to accept the above certificate ? [Y/N]\n");
328	- if yes
329	- then (
330	- print("Do you want to accept this certificate for ever ? [Y/N]\n");
331	- if yes
332	- then (if trust_for_ever(cert) is
333	- {
334	- ca_directory_not_found then print("'ca' directory not found.\n"),
335	- cannot_create_file then print("cannot create file.\n"),
336	- cannot_create_symbolic_link then print("cannot create symbolic link.\n"),
337	- write_error then print("write error.\n"),
338	- ok then unique
339	- }; true)
340	- else true
341	- )
342	- else false
343	- }.
344	-
345	-
346	-global define One
347	- https_get
348	- (
349	- List(String) args
350	- ) =
351	- if args is
352	- {
353	- [ ] then syntax_https_get,
354	- [server . t] then if t is
355	- {
356	- [ ] then syntax_https_get,
357	- [document . rest] then
358	- with print_all = member(rest,"-print_all"),
359	- headers = get_headers(rest),
360	- arguments = get_arguments(rest),
361	- if https_get(print_all,server,document,headers,arguments,command_line_accept_policy) is
362	- {
363	- cannot_resolve_server_name(dns_error) then
364	- print("Cannot resolve server name: " + format(dns_error) + ".\n"),
365	-
366	- ssl_connect_error(connect_error) then
367	- print("SSL connect error: " + format(connect_error) + ".\n"),
368	-
369	- transmission_problem then
370	- print("Transmission problem.\n"),
371	-
372	- request_refused_by_server then
373	- print("The request has been refused by server: " + server + ".\n"),
374	-
375	- ok(response,headers1,document1) then
376	- (
377	- if print_all
378	- then (
379	- print("\n----- response ----\n");
380	- print(response);
381	- print("\n----- headers -----\n");
382	- print_headers(headers1);
383	- print("----- document ----\n")
384	- ) else unique
385	- );
386	- print(document1) // on the screen (use a redirection to get it in a file)
387	- }
388	- }
389	- }.
390	-	1	+
		2	+ Project The Anubis Project
		3	+
		4	+ Title Getting a document from the secured Web.
		5	+
		6	+ Copyright Copyright (c) Alain Prouté 2001.
		7	+
		8	+
		9	+ Author Alain Prouté
		10	+
		11	+
		12	+ Overview
		13	+ This file defines the function 'https_get' which retrieve a document from the world
		14	+ wide web in secured mode (HTTPS). The function is analogous to 'http_get', to be found
		15	+ in 'web/http_get.anubis'.
		16	+
		17	+ The function simulates the behavior of a browser, at least just what is needed to
		18	+ retrieve the document. It does not display the document, but returns it (if found) in
		19	+ the form of a string.
		20	+
		21	+ The function 'https_get' takes the following operands:
		22	+
		23	+ - the name of the server to which the request is to be sent,
		24	+ - the name (including the path) of the document on this server,
		25	+ - a list of headers to be added to mandatory standard headers,
		26	+ - a list of 'arguments' to be sent as the body of the request (web arguments).
		27	+ - an accept policy function (see below), for accepting X.509 certificates in case of
		28	+ a problem.
		29	+
		30	+ The result returned by 'https_get' has the following type, which defines the problems
		31	+ which may happen:
		32	+
		33	+
		34	+read tools/basis.anubis
		35	+read system/string.anubis
		36	+//read html.anubis
		37	+read CXM_http_get_common.anubis
		38	+//read http_server.anubis
		39	+read CXM_common.anubis
		40	+
		41	+
		42	+public type HTTPS_GET_Result:
		43	+ cannot_resolve_server_name(DNS_Result),
		44	+ ssl_connect_error(SSLConnectError),
		45	+ transmission_problem,
		46	+ request_refused_by_server,
		47	+ ok(String response,
		48	+ List(HTTP_header) headers,
		49	+ String document).
		50	+
		51	+ Cookies are among headers. See 'web/cookies.anubis' for cookies handling.
		52	+
		53	+
		54	+ Note: The types 'DNS_Result' and 'SSLConnectError' are defined in 'predefined.anubis'.
		55	+
		56	+public define HTTPS_GET_Result
		57	+ https_get
		58	+ (
		59	+ String server_name,
		60	+ String document_name,
		61	+ List(HTTP_header) headers,
		62	+ List(HTTP_argument) arguments,
		63	+ (Maybe(X509)) -> Bool accept_policy
		64	+ ).
		65	+
		66	+ The same one without the 'headers' argument:
		67	+
		68	+public define HTTPS_GET_Result
		69	+ https_get
		70	+ (
		71	+ String server_name,
		72	+ String document_name,
		73	+ List(HTTP_argument) arguments,
		74	+ (Maybe(X509)) -> Bool accept_policy
		75	+ ) = https_get(server_name,document_name,[],arguments,accept_policy).
		76	+
		77	+ The main difference with 'http_get' is the presence of the 'accept_policy'
		78	+ argument. 'accept_policy' is the function which determines your personal policy for
		79	+ accepting a server certificate, if it is the case that either this certificate is
		80	+ invalid (or missing), or if its common name does not match the server name, that is to
		81	+ say if 'open_SSL_connection' (defined in 'predefined.anubis') did not already accept
		82	+ it.
		83	+
		84	+ 'X509' is an 'opaque' type defined in 'predefined.anubis'. It is 'opaque' in the sens
		85	+ that no alternative of this type is directly accessible to you (despite the fact that
		86	+ the type is public).
		87	+
		88	+ An accept policy function takes (maybe) an X.509 certificate as its unique argument, so
		89	+ that the decision may be taken with the suspect certificate at hand. It must return
		90	+ 'true' for accepting, and 'false' for refusing.
		91	+
		92	+ You may use the following default accept policy function:
		93	+
		94	+public define Bool
		95	+ default_accept_policy
		96	+ (
		97	+ Maybe(X509) suspect_certificate
		98	+ ) = false.
		99	+
		100	+ That is, never accept a certificate which cannot be successfully verified by
		101	+ 'open_SSL_connection'. Notice that this is not a paranoid behavior, but a normal
		102	+ behavior. Nevertheless, you still have the possibility to weaken this behavior by
		103	+ using another accept policy function. Be very careful when writing this function,
		104	+ because this may weaken your security. This function may for example show the
		105	+ certificate and ask for user input for accepting it. It may also check the certificate
		106	+ fingerprint against a data base, etc...
		107	+
		108	+ Another accept policy function is defined in this file:
		109	+
		110	+public define Bool
		111	+ command_line_accept_policy
		112	+ (
		113	+ Maybe(X509) suspect_certificate
		114	+ ).
		115	+
		116	+ It is used by the command line module 'https_get.adm'. If the certificate is not
		117	+ accepted by 'open_SSL_connection', this function prints the certificate on the screen,
		118	+ and ask the user for acceptation. It also asks the user for accepting the certificate
		119	+ for ever.
		120	+
		121	+ It is likely that you will need an accept policy function of your own. See the
		122	+ definition of 'command_line_accept_policy' below for information and
		123	+ 'predefined.anubis' for the tools enabling the manipulation of X.509 certificates.
		124	+ Certificates that you trust are stored into the directory declared under the symbol
		125	+ 'ca' (for 'Certificate Authorities') in your configuration file. Any certificate
		126	+ present in this directory is trusted without any condition.
		127	+
		128	+ This file defines the module 'https_get' to be used directly from the command line. To
		129	+ learn about the syntax, just type 'https_get' at the system prompt, or have a look at
		130	+ the end of this file.
		131	+
		132	+
		133	+
		134	+
		135	+ --- That's all for public definitions. ------------------------------------------------
		136	+
		137	+
		138	+
		139	+
		140	+
		141	+
		142	+
		143	+
		144	+define Maybe(String)
		145	+ receive_text_chunk
		146	+ (
		147	+ SSL_Connection conn
		148	+ ) =
		149	+ read(conn,100,1000).
		150	+
		151	+
		152	+
		153	+
		154	+define HTTPS_GET_Result
		155	+ receive
		156	+ (
		157	+ SSL_Connection conn,
		158	+ String headers,
		159	+ String text_so_far,
		160	+ Bool double_crlf_seen
		161	+ ) =
		162	+ if receive_text_chunk(conn) is
		163	+ {
		164	+ failure then if separate_headers(headers) is
		165	+ {
		166	+ [ ] then ok("",[],text_so_far),
		167	+ [h . t] then if h is http_header(a,b) then ok(a,t,text_so_far)
		168	+ },
		169	+
		170	+ success(s) then
		171	+ if s = ""
		172	+ then if separate_headers(headers) is
		173	+ {
		174	+ [ ] then ok("",[],text_so_far),
		175	+ [h . t] then if h is http_header(a,b) then ok(a,t,text_so_far)
		176	+ }
		177	+ else with new_s = text_so_far+s,
		178	+ if double_crlf_seen
		179	+ then receive(conn,headers,new_s,true)
		180	+ else if has_double_crlf(new_s) is
		181	+ {
		182	+ failure then receive(conn,headers,new_s,false),
		183	+ success(n) then
		184	+ if sub_string(new_s,n+4,length(new_s)-n-4) is
		185	+ {
		186	+ failure then alert,
		187	+ success(s1) then
		188	+ if sub_string(new_s,0,n) is
		189	+ {
		190	+ failure then alert,
		191	+ success(h) then receive(conn,h,s1,true)
		192	+ }
		193	+ }
		194	+ }
		195	+ }.
		196	+
		197	+
		198	+
		199	+ The next function has a valid SSL connection to the server, and tries to retrieve the
		200	+ document.
		201	+
		202	+define HTTPS_GET_Result
		203	+ https_get
		204	+ (
		205	+ Bool print_all,
		206	+ SSL_Connection conn,
		207	+ String server_name,
		208	+ String document_name,
		209	+ List(HTTP_header) headers,
		210	+ List(HTTP_argument) arguments
		211	+ ) =
		212	+ //
		213	+ // Send the HTTP request, and receive the answer:
		214	+ //
		215	+ with body = format_http_args(arguments),
		216	+ with request = (if arguments = [] then "GET " else "POST ")
		217	+ + document_name + " HTTP/1.0" + crlf +
		218	+ "Host: " + server_name + crlf +
		219	+ "Accept-Charset: iso-8859-1,*,utf-8" + crlf +
		220	+ (if arguments = [] then ""
		221	+ else "Content-type: application/x-www-form-urlencoded" + crlf +
		222	+ "Content-length: " + to_decimal(length(body))+ crlf) +
		223	+ format_headers(headers) +
		224	+ crlf +
		225	+ body,
		226	+ (if print_all then
		227	+ (
		228	+ print("Sending request:\n");
		229	+ print(request);
		230	+ print("\n")
		231	+ ) else unique);
		232	+ if write(conn,request) is
		233	+ {
		234	+ failure then transmission_problem,
		235	+ success(_) then receive(conn,"","",false)
		236	+ }.
		237	+
		238	+
		239	+ The next function retrieves the document using the numerical (resolved) server address.
		240	+
		241	+define HTTPS_GET_Result
		242	+ https_get
		243	+ (
		244	+ Bool print_all,
		245	+ Word32 server_addr,
		246	+ Word32 server_port,
		247	+ String server_name,
		248	+ String document_name,
		249	+ List(HTTP_header) headers,
		250	+ List(HTTP_argument) arguments,
		251	+ (Maybe(X509)) -> Bool accept_policy
		252	+ ) =
		253	+ if open_SSL_connection(server_name,server_addr,server_port,accept_policy) is
		254	+ {
		255	+ error(msg) then ssl_connect_error(msg),
		256	+ ok(conn) then https_get(print_all,conn,server_name,document_name,headers,arguments)
		257	+ }.
		258	+
		259	+
		260	+
		261	+define HTTPS_GET_Result
		262	+ https_get
		263	+ (
		264	+ Bool print_all,
		265	+ String server_name,
		266	+ String document_name,
		267	+ List(HTTP_header) headers,
		268	+ List(HTTP_argument) arguments,
		269	+ (Maybe(X509)) -> Bool accept_policy
		270	+ ) =
		271	+ if separate_name_port(server_name,443) is (name,port) then
		272	+ //
		273	+ // resolve server name and call 'https_get' with numeric server address:
		274	+ //
		275	+ with a = dns(name),
		276	+ if a is ok(addr)
		277	+ then https_get(print_all,addr,port,name,document_name,headers,arguments,accept_policy)
		278	+ else cannot_resolve_server_name(a).
		279	+
		280	+
		281	+
		282	+ Now, here is our public tool:
		283	+
		284	+public define HTTPS_GET_Result
		285	+ https_get
		286	+ (
		287	+ String server_name,
		288	+ String document_name,
		289	+ List(HTTP_header) headers,
		290	+ List(HTTP_argument) arguments,
		291	+ (Maybe(X509)) -> Bool accept_policy
		292	+ ) = https_get(false,server_name,document_name,headers,arguments,accept_policy).
		293	+
		294	+
		295	+
		296	+
		297	+
		298	+ Finally, we construct the command line executable module 'https_get.adm':
		299	+
		300	+define One
		301	+ syntax_https_get =
		302	+ print("\nUsage: https_get <server> <document> [options] =<header> <value> ... <arg> <value> ...\n");
		303	+ print(" Options are:\n");
		304	+ print(" -print_all print request, response line, headers and document\n");
		305	+ print(" (default is to print only the document)\n").
		306	+
		307	+
		308	+
		309	+
		310	+ Below is our accept policy function for the command line module. This function may
		311	+ serve as a model for your own accept policy function.
		312	+
		313	+public define Bool
		314	+ command_line_accept_policy
		315	+ (
		316	+ Maybe(X509) mbcert
		317	+ ) =
		318	+ if mbcert is
		319	+ {
		320	+ failure then
		321	+ print("No server certificate or invalid server certificate.\n");
		322	+ print("Do you want to trust this site anyway ? [Y/N]\n");
		323	+ yes, // this is the same as 'if yes then true else false'
		324	+
		325	+ success(cert) then
		326	+ print(to_string(cert));
		327	+ print("\nDo you want to accept the above certificate ? [Y/N]\n");
		328	+ if yes
		329	+ then (
		330	+ print("Do you want to accept this certificate for ever ? [Y/N]\n");
		331	+ if yes
		332	+ then (if trust_for_ever(cert) is
		333	+ {
		334	+ ca_directory_not_found then print("'ca' directory not found.\n"),
		335	+ cannot_create_file then print("cannot create file.\n"),
		336	+ cannot_create_symbolic_link then print("cannot create symbolic link.\n"),
		337	+ write_error then print("write error.\n"),
		338	+ ok then unique
		339	+ }; true)
		340	+ else true
		341	+ )
		342	+ else false
		343	+ }.
		344	+
		345	+
		346	+global define One
		347	+ https_get
		348	+ (
		349	+ List(String) args
		350	+ ) =
		351	+ if args is
		352	+ {
		353	+ [ ] then syntax_https_get,
		354	+ [server . t] then if t is
		355	+ {
		356	+ [ ] then syntax_https_get,
		357	+ [document . rest] then
		358	+ with print_all = member(rest,"-print_all"),
		359	+ headers = get_headers(rest),
		360	+ arguments = get_arguments(rest),
		361	+ if https_get(print_all,server,document,headers,arguments,command_line_accept_policy) is
		362	+ {
		363	+ cannot_resolve_server_name(dns_error) then
		364	+ print("Cannot resolve server name: " + format(dns_error) + ".\n"),
		365	+
		366	+ ssl_connect_error(connect_error) then
		367	+ print("SSL connect error: " + format(connect_error) + ".\n"),
		368	+
		369	+ transmission_problem then
		370	+ print("Transmission problem.\n"),
		371	+
		372	+ request_refused_by_server then
		373	+ print("The request has been refused by server: " + server + ".\n"),
		374	+
		375	+ ok(response,headers1,document1) then
		376	+ (
		377	+ if print_all
		378	+ then (
		379	+ print("\n----- response ----\n");
		380	+ print(response);
		381	+ print("\n----- headers -----\n");
		382	+ print_headers(headers1);
		383	+ print("----- document ----\n")
		384	+ ) else unique
		385	+ );
		386	+ print(document1) // on the screen (use a redirection to get it in a file)
		387	+ }
		388	+ }
		389	+ }.
		390	+