<!--
Disabled by https-everywhere-checker because:
Fetch error: http://portalsp.acs.ncsu.edu/ => https://portalsp.acs.ncsu.edu/: (28, 'Connection timed out after 10000 milliseconds')
	For problematic rules, see North_Carolina_State_University-problematic.xml.


	Nonfunctional subdomains:

		- www7.acs
		- ced ¹
		- dic.fi ²
		- giving ¹
		- info ¹
		- news ³
		- v3prod.news		(cert: ssl; shows ssl's data)
		- oied ⁵
		- oncampus
		- policies ¹
		- web		(ssl_error_rx_record_too_long)

	¹ Shows default page
	² Redirects to http, valid cert
	³ Refused
	⁵ Shows another domain; mismatched, CN: *.fi.ncsu.edu


	Problematic subdomains:

		- www.cs	(mismatched, CN: www.csc.ncsu.edu)
		- www.csc	(self-signed)
		- fi ³
		- miso.fi ⁴
		- golinks ⁵
		- miso ⁶

	³ Redirects to http before www
	⁴ Mixed css from www
	⁵ Works; mismatched, CN: go.ncsu.edu
	⁶ Works; mismatched, CN: *.fi.ncsu.edu


	Partially covered subdomains:

		- miso.fi *

	* Avoiding mixed css from www


	Fully covered subdomains:

		- ^
		- mypack.acs
		- portalsp.acs
		- www.acs
		- cdn

		- fi subdomains:

			- eval
			- ptmt
			- stem
			- surveys

		- go
		- (www\.)?mypack
		- shib
		- webauth


	These altnames don't exist:

		- acs.ncsu.edu


	Mixed content:

		- css, on:

			- eval.fi from fonts.googleapis.com ¹
			- miso.fi from www ²

		- Images on miso.fi from miso ¹

		- favicon on oit from $self ¹

	¹ Secured by us
	² Unsecurable

-->
<ruleset name="North Carolina State University (partial)" default_off='failed ruleset test'>

	<target host="libraryh3lp.com" />
		<!--
			Breaks widgets embedded on 3rd-party websites:

				https://trac.torproject.org/projects/tor/ticket/9325
										-->
		<exclusion pattern="^http://libraryh3lp\.com/(?:chat/|follow/)" />
	<target host="ncsu.edu" />
		<!--
			Avoid false/broken MCB:
						-->
		<!--exclusion pattern="^http://miso\.(fi\.)?ncsu\.edu/+(?!wp-content/|wp-includes/)" /-->
	<target host="www.*.ncsu.edu" />
	<target host="portalsp.acs.ncsu.edu" />
	<target host="*.lib.ncsu.edu" />


	<securecookie host="^libraryh3lp\.com$" name=".*" />
	<!--
		Secured by server:
					-->
	<!--securecookie host="^shib\.ncsu\.edu$" name="^JSESSIONID$" /-->
	<!--
		Not secured by server:
						-->
	<!--securecookie host="\.ncsu\.edu$" name="^(PAC|WRAP16|WRAP_REFERER)$" /-->
	<!--securecookie host="^surveys\.fi\.ncsu\.edu$" name="^dvc$" /-->
	<!--securecookie host="^(go|golinks)\.ncsu\.edu$" name="^PHPSESSID$" /-->
	<!--securecookie host="^\.oit\.ncsu\.edu$" name="^SESS[0-9a-f]{32}$" /-->

	<securecookie host="^(?:.*\.)?ncsu\.edu$" name=".*" />


	<rule from="^http://libraryh3lp\.com/"
		to="https://libraryh3lp.com/" />

	<rule from="^http://(?:www\.)?ncsu\.edu/directory/"
		to="https://www.ncsu.edu/directory/" />

	<rule from="^http://((?:(?:mypack|portalsp|www)\.acs|cdn|(?:eval|ptmt|stem|surveys)\.fi|go|jobs|(?:(?:my|staff|www)\.)?lib|(?:www\.)?mypack|oit|shib|ssl|webauth)\.)?ncsu\.edu/"
		to="https://$1ncsu.edu/" />

	<!--	!www redirects to http before www:
							-->
	<rule from="^http://(?:www\.)?fi\.ncsu\.edu/(?=wp-content/|wp-includes/)"
		to="https://www.fi.ncsu.edu/" />

	<rule from="^http://miso\.(?:fi\.)?ncsu\.edu/(?=favicon\.ico|wp-content/|wp-includes/)"
		to="https://miso.fi.ncsu.edu/" />

</ruleset>
