
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://search.no.citrix.com/ => https://search.no.citrix.com/: (51, "SSL: no alternative certificate subject name matches target host name 'search.no.citrix.com'")
Fetch error: http://utilityservices.no.citrix.com/ => https://utilityservices.no.citrix.com/: (51, "SSL: no alternative certificate subject name matches target host name 'utilityservices.no.citrix.com'")
Fetch error: http://staging-cq.citrix.com/ => https://staging-cq.citrix.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
Fetch error: http://tarpon.citrix.com/ => https://tarpon.citrix.com/: (6, 'Could not resolve host: tarpon.citrix.com')

	For rules causing false/broken MCB, see Citrix.com-falsemixed.xml.

	Other Citrix rulesets:

		- Citrix_Online.com.xml
		- Citrix_Online_CDN.com.xml
		- GoToAssist.com.xml
		- GoToMeeting.com.xml
		- GoToTraining.com.xml
		- GoToWebinar.com.xml
		- Netviewer.com.xml
		- Podio.com.xml
		- ShareConnect.com.xml
		- ShareFile.com.xml
		- ShareFile_support.com.xml


	CDN buckets:

		- blogsprod.s3.amazonaws.com
		- c558080.r80.cf2.rackcdn.com	← cdn.ws.citrix.com


	Nonfunctional domains:

		- open.citrix.com ¹
		- (www.)?joingotomeeting.com ²
		- (www.)?jointraining.com ²
		- (www.)?joinwebinar.com ²

	¹ Shows another domain
	² Refused


	Problematic hosts in *citrix.com:

		- blogs ¹
		- help ²
		- cdn.ws ³
		- training ⁴

	¹ Redirects to webapps.citrite.net
	² Mismatched
	³ Akamai
	⁴ Mixed css


	Insecure cookies are set for these domains and hosts:

		- .citrix.com
		- discussions.citrix.com
		- training.citrix.com


	Mixed content:

		- css on training from $self *

		- Images, on:

			- training from $self *
			- training from www.citrix.com *

	* Secured by us

-->
<ruleset name="Citrix.com (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="citrix.com" />
	<target host="citrixready.citrix.com" />
	<target host="community.citrix.com" />
	<target host="discussions.citrix.com" />
	<target host="eu.citrix.com" />
	<target host="go.citrix.com" />
	<target host="no.citrix.com" />
	<target host="search.no.citrix.com" />
	<target host="utilityservices.no.citrix.com" />
	<target host="search.citrix.com" />
	<target host="support.citrix.com" />
	<target host="staging-cq.citrix.com" />
	<target host="tarpon.citrix.com" />
	<target host="training.citrix.com" />
	<target host="www.citrix.com" />

	<!--	Complications:
				-->
	<target host="blogs.citrix.com" />
	<target host="cdn.ws.citrix.com" />

		<!--	Avoid broken MCB:
						-->
		<exclusion pattern="^http://training\.citrix\.com/+(?!favicon\.ico|theme/)" />

			<!--	+ve:
					-->
			<test url="http://training.citrix.com/cms/education/networking/" />
			<test url="http://training.citrix.com/cms/index.php/certification/" />
			<test url="http://training.citrix.com/mod/ctxcatalog/training.php?lang=ja" />

			<!--	-ve:
					-->
			<test url="http://training.citrix.com/favicon.ico" />
			<test url="http://training.citrix.com/theme/ctxmain/pix/search_gradient.png" />

		<test url="http://discussions.citrix.com/forum/363-storefront/" />
		<test url="http://discussions.citrix.com/topic/365473-gssexception/" />
		<test url="http://discussions.citrix.com/public/style_images/master/attachicon.gif" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.citrix\.com$" name="^(_wsad_|MyCitrixHash|MyCitrixShadow|id_validate)$" /-->
	<!--securecookie host="^discussions\.citrix\.com$" name="^session_id$" /-->
	<!--securecookie host="^training\.citrix\.com$" name="^(MoodleSession$|NSC_)" /-->

	<securecookie host="." name="." />


	<!--	Redirect keeps path and args,
		but not forward slash:
					-->
	<rule from="^http://blogs\.citrix\.com/+"
		to="https://www.citrix.com/blogs/" />

		<test url="http://blogs.citrix.com//index.htm" />

	<rule from="^http://cdn\.ws\.citrix\.com/"
		to="https://c558080.ssl.cf2.rackcdn.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
