<!--
	For problematic rules, see Gentoo-mismatches.xml.


	Nonfunctional subdomains:

		- anoncvs
		- archives	(sec_error_reused_issuer_and_serial)
		- bouncer	(times out)
		- devmanual	(times out)
		- distfiles	(support varies between mirrors resolved to)
		- foundation
		- packages
		- planet	(times out)
		- security
		- sources	(times out)
		- torrent
		- www

-->
<ruleset name="Gentoo (partial)" platform="cacert">

	<target host="*.gentoo.org" />
		<!--	git.overlays & sidebar are handled in Gentoo-mismatches.xml.	-->
		<exclusion pattern="^http://(anoncvs|archives|blogs|bouncer|devmanual|distfiles|foundation|git\.overlays|packages|planet|security|sidebar|sources|torrent|www)\." />
	<target host="*.bugs.gentoo.org" />
	<!--	* for cross-domain cookie.	-->
	<target host="*.forums.gentoo.org" />


	<!--	Observed cookies:

			- bugs
			- ^\.forums
			- overlays
					-->
	<securecookie host="^.*\.gentoo\.org$" name=".*" />


	<!--	This is what the server does	-->
	<rule from="^https?://store\.gentoo\.org/"
		to="https://www.cafepress.com/officialgentoo" />

	<!--	Matched domains:

			- blogs
			- bugs
			- \d+.bugs
			- dev
			- forums
			- overlays
			- piwik
			- wiki
					-->	
	<rule from="^http://((?:\d+\.)?\w+)\.gentoo\.org/"
		to="https://$1.gentoo.org/" />

</ruleset>
