From f92023e8685433fce4316a4d2915c61f268d0e8c Mon Sep 17 00:00:00 2001 From: sdawley Date: Wed, 21 Feb 2024 11:30:47 -0800 Subject: [PATCH] CRW-5708 Updating leftover instances of http to https. --- .../ubi8-brew/content_sets_pulp.repo | 10 ++++----- .../build/dockerfiles/content_sets_rhel8.repo | 4 ++-- dependencies/che-plugin-registry/README.md | 2 +- .../build/dockerfiles/content_sets_rhel8.repo | 4 ++-- product/buildAllInBrewCopyToQuay.sh | 4 ++-- product/buildInBrewCopyToQuay.sh | 4 ++-- product/getCommitSHAForTag.sh | 4 ++-- product/getLatestImageTags.sh | 22 +++++++++---------- product/getLatestRPM.sh | 10 ++++----- .../manifest/get-3rd-party-deps-manifests.sh | 2 +- product/manifest/get-3rd-party-deps-rpms.sh | 2 +- product/query-pulp.sh | 4 ++-- product/util2.groovy | 18 +++++++-------- 13 files changed, 45 insertions(+), 45 deletions(-) diff --git a/content-set-check/ubi8-brew/content_sets_pulp.repo b/content-set-check/ubi8-brew/content_sets_pulp.repo index b70ed7c0c7..c0d0d78fee 100644 --- a/content-set-check/ubi8-brew/content_sets_pulp.repo +++ b/content-set-check/ubi8-brew/content_sets_pulp.repo @@ -1,29 +1,29 @@ [rhel-8-for-appstream-rpms-pulp] name=rhel-8-appstream-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/appstream/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/appstream/os enabled=1 gpgcheck=0 [rhel-8-for-baseos-rpms-pulp] name=rhel-8-baseos-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/baseos/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/baseos/os enabled=1 gpgcheck=0 [rhel-8-for-codeready-builder-rpms-pulp] name=rhel-8-codeready-builder-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/codeready-builder/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/codeready-builder/os enabled=1 gpgcheck=0 [rhocp-4.11-for-rhel-8-rpms] name=rhocp-4.11-for-rhel-8-rpms -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/$basearch/rhocp/4.11/os/ +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/$basearch/rhocp/4.11/os/ enabled=1 gpgcheck=0 [ocp-tools-4.11-for-rhel-8-rpms] name=ocp-tools-4.11-for-rhel-8-rpms -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/$basearch/ocp-tools/4.11/os/ +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/$basearch/ocp-tools/4.11/os/ enabled=1 gpgcheck=0 diff --git a/dependencies/che-devfile-registry/build/dockerfiles/content_sets_rhel8.repo b/dependencies/che-devfile-registry/build/dockerfiles/content_sets_rhel8.repo index 989cf03cba..91674f1e11 100644 --- a/dependencies/che-devfile-registry/build/dockerfiles/content_sets_rhel8.repo +++ b/dependencies/che-devfile-registry/build/dockerfiles/content_sets_rhel8.repo @@ -1,13 +1,13 @@ [rhel-8-for-appstream-rpms-pulp] name=rhel-8-for-appstream-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/appstream/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/appstream/os enabled=0 gpgcheck=0 skip_if_unavailable=True [rhel-8-for-baseos-rpms-pulp] name=rhel-8-for-baseos-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/baseos/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/baseos/os enabled=0 gpgcheck=0 skip_if_unavailable=True diff --git a/dependencies/che-plugin-registry/README.md b/dependencies/che-plugin-registry/README.md index dbe8643a99..c195a99162 100644 --- a/dependencies/che-plugin-registry/README.md +++ b/dependencies/che-plugin-registry/README.md @@ -34,7 +34,7 @@ Sidecar image sources are then synced from the [devspaces-images](https://github For example, the udi sidecar: * [devspaces-images/devspaces-udi](https://github.com/redhat-developer/devspaces-images/tree/devspaces-3-rhel-8/devspacesudi) -* [containers/devspaces-udi](http://pkgs.devel.redhat.com/cgit/containers/devspaces-udi/tree/sources?h=devspaces-3-rhel-8) +* [containers/devspaces-udi](https://pkgs.devel.redhat.com/cgit/containers/devspaces-udi/tree/sources?h=devspaces-3-rhel-8) ## License diff --git a/dependencies/che-plugin-registry/build/dockerfiles/content_sets_rhel8.repo b/dependencies/che-plugin-registry/build/dockerfiles/content_sets_rhel8.repo index 989cf03cba..91674f1e11 100644 --- a/dependencies/che-plugin-registry/build/dockerfiles/content_sets_rhel8.repo +++ b/dependencies/che-plugin-registry/build/dockerfiles/content_sets_rhel8.repo @@ -1,13 +1,13 @@ [rhel-8-for-appstream-rpms-pulp] name=rhel-8-for-appstream-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/appstream/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/appstream/os enabled=0 gpgcheck=0 skip_if_unavailable=True [rhel-8-for-baseos-rpms-pulp] name=rhel-8-for-baseos-rpms-pulp -baseurl=http://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/baseos/os +baseurl=https://rhsm-pulp.corp.redhat.com/content/dist/rhel8/8/$basearch/baseos/os enabled=0 gpgcheck=0 skip_if_unavailable=True diff --git a/product/buildAllInBrewCopyToQuay.sh b/product/buildAllInBrewCopyToQuay.sh index d1a7124e6d..436cf7803d 100755 --- a/product/buildAllInBrewCopyToQuay.sh +++ b/product/buildAllInBrewCopyToQuay.sh @@ -5,8 +5,8 @@ # $➔ for d in $(ls -1 -d operator-*); do cd $d; { ../buildInBrewCopyToQuay.sh $d; }; cd ..; done # TODO should we invoke this and commit changes first? -# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r openshift-clients-4 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.7 -a "x86_64 s390x ppc64le" -# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r helm-3 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.7 -a "x86_64 s390x ppc64le" +# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r openshift-clients-4 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.7 -a "x86_64 s390x ppc64le" +# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r helm-3 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.7 -a "x86_64 s390x ppc64le" # try to compute branches from currently checked out branch; else fall back to hard coded value # where to find redhat-developer/devspaces/${DWNSTM_BRANCH}/product/getLatestImageTags.sh diff --git a/product/buildInBrewCopyToQuay.sh b/product/buildInBrewCopyToQuay.sh index 9683618bf9..fede9df2c1 100755 --- a/product/buildInBrewCopyToQuay.sh +++ b/product/buildInBrewCopyToQuay.sh @@ -5,8 +5,8 @@ # $➔ for d in $(ls -1 -d operator-*); do cd $d; { ../buildInBrewCopyToQuay.sh $d; }; cd ..; done # TODO should we invoke this and commit changes first? -# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r openshift-clients-4 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.7 -a "x86_64 s390x ppc64le" -# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r helm-3 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.7 -a "x86_64 s390x ppc64le" +# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r openshift-clients-4 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.7 -a "x86_64 s390x ppc64le" +# /path/to/product/getLatestRPM.sh -s "$(pwd)" -r helm-3 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.7 -a "x86_64 s390x ppc64le" # try to compute branches from currently checked out branch; else fall back to hard coded value # where to find redhat-developer/devspaces/${DWNSTM_BRANCH}/product/getLatestImageTags.sh diff --git a/product/getCommitSHAForTag.sh b/product/getCommitSHAForTag.sh index 826c51b28a..ac27705ba2 100755 --- a/product/getCommitSHAForTag.sh +++ b/product/getCommitSHAForTag.sh @@ -14,8 +14,8 @@ if [[ ! -x /usr/bin/brew ]]; then echo "Brew is required. Please install brewkoji rpm from one of these repos:"; - echo " * http://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-F-27/compose/Everything/x86_64/os/" - echo " * http://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-RHEL-8/compose/BaseOS/\$basearch/os/" + echo " * https://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-F-27/compose/Everything/x86_64/os/" + echo " * https://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-RHEL-8/compose/BaseOS/\$basearch/os/" fi usage () { diff --git a/product/getLatestImageTags.sh b/product/getLatestImageTags.sh index d614454098..b3948ed96f 100755 --- a/product/getLatestImageTags.sh +++ b/product/getLatestImageTags.sh @@ -156,7 +156,7 @@ Usage: } if [[ $# -lt 1 ]]; then usage; cleanup_temp; exit 1; fi -REGISTRY="https://registry.redhat.io" # or http://brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888 or https://registry-1.docker.io or https://registry.access.redhat.com +REGISTRY="https://registry.redhat.io" # or https://brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888 or https://registry-1.docker.io or https://registry.access.redhat.com CONTAINERS="" while [[ "$#" -gt 0 ]]; do case $1 in @@ -170,12 +170,12 @@ while [[ "$#" -gt 0 ]]; do '--freshmaker') EXCLUDES_FRESHMAKER="";; # CRW-2499 by default, exclude freshmaker-built images '-a'|'--arches') ARCHES=1;; '-r') REGISTRY="$2"; shift 1;; - '--rhec'|'--rhcc') REGISTRY="http://registry.redhat.io";; - '--stage') REGISTRY="http://registry.stage.redhat.io";; - '--pulp-old') REGISTRY="http://brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888"; EXCLUDES="latest|candidate|guest|containers|sha256-.+.sbom";; - '-p'|'--osbs') REGISTRY="http://registry-proxy.engineering.redhat.com/rh-osbs"; EXCLUDES="latest|candidate|guest|containers|sha256-.+.sbom";; - '-d'|'--docker') REGISTRY="http://docker.io";; - '--quay') REGISTRY="http://quay.io";; + '--rhec'|'--rhcc') REGISTRY="https://registry.redhat.io";; + '--stage') REGISTRY="https://registry.stage.redhat.io";; + '--pulp-old') REGISTRY="https://brew-pulp-docker01.web.prod.ext.phx2.redhat.com:8888"; EXCLUDES="latest|candidate|guest|containers|sha256-.+.sbom";; + '-p'|'--osbs') REGISTRY="https://registry-proxy.engineering.redhat.com/rh-osbs"; EXCLUDES="latest|candidate|guest|containers|sha256-.+.sbom";; + '-d'|'--docker') REGISTRY="https://docker.io";; + '--quay') REGISTRY="https://quay.io";; '--pushtoquay') PUSHTOQUAY=1; PUSHTOQUAYTAGS="";; --pushtoquay=*) PUSHTOQUAY=1; PUSHTOQUAYTAGS="$(echo "${1#*=}")";; '--pushtoquayforce') PUSHTOQUAYFORCE=1;; @@ -285,8 +285,8 @@ if [[ ${SHOWNVR} -eq 1 ]]; then fi if [[ ! -x /usr/bin/brew ]]; then echo "Brew is required. Please install brewkoji rpm from one of these repos:"; - echo " * http://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-F-27/compose/Everything/x86_64/os/" - echo " * http://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-RHEL-8/compose/BaseOS/\$basearch/os/" + echo " * https://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-F-27/compose/Everything/x86_64/os/" + echo " * https://download.devel.redhat.com/rel-eng/RCMTOOLS/latest-RCMTOOLS-2-RHEL-8/compose/BaseOS/\$basearch/os/" exit 1 fi @@ -311,7 +311,7 @@ if [[ ${SHOWNVR} -eq 1 ]]; then fi if [[ ${SHOWLOG} -eq 1 ]]; then result=$(echo "$result" | tail -${NUMTAGS} | sed -E -e "s#[\ \t]+${candidateTag}.+##" | \ - sed -E -e "s#(.+)-container-([0-9.]+)-([0-9]+)#\0 - http://download.eng.bos.redhat.com/brewroot/packages/\1-container/\2/\3/data/logs/x86_64.log#") + sed -E -e "s#(.+)-container-([0-9.]+)-([0-9]+)#\0 - https://download.eng.bos.redhat.com/brewroot/packages/\1-container/\2/\3/data/logs/x86_64.log#") elif [[ ${TAGONLY} -eq 1 ]]; then result=$(echo "$result" | tail -${NUMTAGS} | sed -E -e "s#[\ \t]+${candidateTag}.+##" -e "s@.+-container-@@g") else @@ -423,7 +423,7 @@ for URLfrag in $CONTAINERS; do elif [[ ${SHOWNVR} -eq 1 ]]; then ufrag=${URLfrag%%:*}; ufrag=${ufrag/\//-} if [[ ${SHOWLOG} -eq 1 ]]; then - echo "${ufrag}-container-${LATESTTAG} - http://download.eng.bos.redhat.com/brewroot/packages/${ufrag}-container-${LATESTTAG//-//}/data/logs/x86_64.log" + echo "${ufrag}-container-${LATESTTAG} - https://download.eng.bos.redhat.com/brewroot/packages/${ufrag}-container-${LATESTTAG//-//}/data/logs/x86_64.log" elif [[ ${TAGONLY} -eq 1 ]]; then echo "${LATESTTAG}" else diff --git a/product/getLatestRPM.sh b/product/getLatestRPM.sh index e614671388..e1db058a54 100755 --- a/product/getLatestRPM.sh +++ b/product/getLatestRPM.sh @@ -21,7 +21,7 @@ while [[ "$#" -gt 0 ]]; do '-r') RPM_PATTERN="$2"; shift 1;; # eg., openshift-clients or helm '-s') SOURCE_DIR="$2"; shift 1;; # dir to search for Dockerfiles '-a') ARCHES="$ARCHES $2"; shift 1;; # use space-separated list of arches, or use multiple -a flags - '-u') BASE_URL="$2"; shift 1;; # eg., http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.8 + '-u') BASE_URL="$2"; shift 1;; # eg., https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.8 '-q') QUIET=1; shift 0;; '-h') usage;; esac @@ -33,9 +33,9 @@ usage () { Usage: $0 -s SOURCE_DIR -r RPM_PATTERN -u BASE_URL -a 'ARCH1 ... ARCHN' Example: - $0 -s /path/to/dockerfiles/ -r openshift-clients-4 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.12 - $0 -s /path/to/dockerfiles/ -r odo-3 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.12 - $0 -s /path/to/dockerfiles/ -r helm-3 -u http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.12 + $0 -s /path/to/dockerfiles/ -r openshift-clients-4 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/rhocp/4.12 + $0 -s /path/to/dockerfiles/ -r odo-3 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.12 + $0 -s /path/to/dockerfiles/ -r helm-3 -u https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/basearch/ocp-tools/4.12 Options: -q quieter output; only reports changed rpm version or 0 if failure " @@ -94,7 +94,7 @@ for d in $dockerfiles; do sed -i $d -r \ -e "s#(/| )(${RPM_PATTERN}[^ ]+.el8)#\1$newVersion#g" \ -e "s#${repo_prefix}-[0-9.]+#${repo_new}#g" \ - -e "s#(http://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/)([a-z0-9_]+)/${repo_prefix}/[0-9.]+/#\1\2/${repo_new//-/\/}/#g" + -e "s#(https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/)([a-z0-9_]+)/${repo_prefix}/[0-9.]+/#\1\2/${repo_new//-/\/}/#g" fi done diff --git a/product/manifest/get-3rd-party-deps-manifests.sh b/product/manifest/get-3rd-party-deps-manifests.sh index 46295789a0..9e9552849b 100755 --- a/product/manifest/get-3rd-party-deps-manifests.sh +++ b/product/manifest/get-3rd-party-deps-manifests.sh @@ -202,7 +202,7 @@ if [[ ${phases} == *"1"* ]]; then # echo $containerName log "" log "== ${d} (${MIDSTM_BRANCH}) ==" - logDockerDetails http://pkgs.devel.redhat.com/cgit/containers/${d}/plain/Dockerfile?h=${MIDSTM_BRANCH} "containers/${containerName}:${CSV_VERSION}/" + logDockerDetails https://pkgs.devel.redhat.com/cgit/containers/${d}/plain/Dockerfile?h=${MIDSTM_BRANCH} "containers/${containerName}:${CSV_VERSION}/" done bth "" diff --git a/product/manifest/get-3rd-party-deps-rpms.sh b/product/manifest/get-3rd-party-deps-rpms.sh index 3ee3ea039f..3ccc213c8a 100755 --- a/product/manifest/get-3rd-party-deps-rpms.sh +++ b/product/manifest/get-3rd-party-deps-rpms.sh @@ -83,7 +83,7 @@ function loadNVRlog() { MANIFEST_FILE2="$2" ARCH="$3" # shellcheck disable=SC2001 - URL=$(echo $NVR | sed -e "s#\(.\+\(-container\|-rhel8\)\)-\([0-9.]\+\)-\([0-9.]\+\)#http://download.eng.bos.redhat.com/brewroot/packages/\1/\3/\4/data/logs/${ARCH}-build.log#") + URL=$(echo $NVR | sed -e "s#\(.\+\(-container\|-rhel8\)\)-\([0-9.]\+\)-\([0-9.]\+\)#https://download.eng.bos.redhat.com/brewroot/packages/\1/\3/\4/data/logs/${ARCH}-build.log#") # log "" log " ${URL}" diff --git a/product/query-pulp.sh b/product/query-pulp.sh index cb8b730d8e..61800262cb 100755 --- a/product/query-pulp.sh +++ b/product/query-pulp.sh @@ -62,9 +62,9 @@ elif [ "$DISPLAY_NAME_ONLY" == "true" ]; then elif [ "$MORE" == "true" ]; then curl -s -k --user qa:qa https://rhsm-pulp.corp.redhat.com/pulp/api/v2/repositories/search/ \ --data '{"criteria": {"filters": {"display_name": {"$regex": "'"$QUERY"'"}}}}' \ - | jq '.[] | {display_name, "content_set": .notes.content_set, "repo_url": "http://rhsm-pulp.corp.redhat.com/\(.notes.relative_url)", "include_in_download_service": .notes.include_in_download_service}' + | jq '.[] | {display_name, "content_set": .notes.content_set, "repo_url": "https://rhsm-pulp.corp.redhat.com/\(.notes.relative_url)", "include_in_download_service": .notes.include_in_download_service}' else curl -s -k --user qa:qa https://rhsm-pulp.corp.redhat.com/pulp/api/v2/repositories/search/ \ --data '{"criteria": {"filters": {"display_name": {"$regex": "'"$QUERY"'"}}}}' \ - | jq -c '.[] | {display_name, "content_set": .notes.content_set, "repo_url": "http://rhsm-pulp.corp.redhat.com/\(.notes.relative_url)"}' + | jq -c '.[] | {display_name, "content_set": .notes.content_set, "repo_url": "https://rhsm-pulp.corp.redhat.com/\(.notes.relative_url)"}' fi diff --git a/product/util2.groovy b/product/util2.groovy index 6c1690c8c0..c6a835fe40 100755 --- a/product/util2.groovy +++ b/product/util2.groovy @@ -198,16 +198,16 @@ def getDSShortName(String LONG_NAME) { return LONG_NAME.minus("devspaces-") } -// see http://hdn.corp.redhat.com/rhel7-csb-stage/repoview/redhat-internal-cert-install.html -// and http://hdn.corp.redhat.com/rhel7-csb-stage/RPMS/noarch/?C=M;O=D +// see https://hdn.corp.redhat.com/rhel7-csb-stage/repoview/redhat-internal-cert-install.html +// and https://hdn.corp.redhat.com/rhel7-csb-stage/RPMS/noarch/?C=M;O=D def installRedHatInternalCerts() { sh('''#!/bin/bash -xe if [[ ! $(rpm -qa | grep redhat-internal-cert-install || true) ]]; then cd /tmp - # 403 access on http://hdn.corp.redhat.com/rhel7-csb-stage/RPMS/noarch/redhat-internal-cert-install-0.1-24.el7.noarch.rpm + # 403 access on https://hdn.corp.redhat.com/rhel7-csb-stage/RPMS/noarch/redhat-internal-cert-install-0.1-24.el7.noarch.rpm # so use latest csb.noarch file instead - rpm=$(curl --insecure -sSLo- "http://hdn.corp.redhat.com/rhel7-csb-stage/RPMS/noarch/?C=M;O=D" | grep cert-install | grep "csb.noarch" | head -1 | sed -r -e 's#.+>(redhat-internal-cert-install-.+[^<])(redhat-internal-cert-install-.+[^<])