openCryptoki-64bit-3.15.1-150300.5.12.1 < > , ĉ bp9|L" $wyz#d`zX c+pi69wP "4:tM53tVJf,4 3CNCg}e0}:eisڤ喱A}B "v1 aA&q}?- T^0?K~#ޜvT/B
YZ3f;ҕ
ufSM *ܺuz7C}2yZ|"_\~wc;DY@϶>\o^\y > @ g` ? gP d * w ! B J ` v $ 0 $ x $
$ P $ t $
$
8 $
$ $ \ ( H 8 P , 9 , : , > X F X G X $ H Y| $ I Z $ X Z0 Y Zp \ Z $ ] [8 $ ^ ] b ^ c ^ d _< e _A f _D l _F u _X $ v _
w c $ x d $ y e x z f g g g
gL C openCryptoki-64bit 3.15.1 150300.5.12.1 An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware This is a re-packaged binary rpm. For the package source, please look
for the source of the package without the "64bit" ending
The PKCS#11 version 2.11 API implemented for the IBM cryptographic
cards. This package includes support for the IBM 4758 cryptographic
coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries). bs390zl36 ;SUSE Linux Enterprise 15 SUSE LLC CPL-1.0 https://www.suse.com/ Productivity/Security https://github.com/opencryptoki/opencryptoki linux s390x # Old library name for 64bit libs were under /usr/lib/pkcs11. For migration purposes only.
test -d /usr/lib/pkcs11 || mkdir -p /usr/lib/pkcs11
ln -sf /usr/lib64/opencryptoki/libopencryptoki.so /usr/lib/pkcs11/PKCS11_API.so64
/sbin/ldconfig 6 X n
@ ?
0 Q ` " "
AAA bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb3406315d5c95bac0fa2fd5322d1bcc9ea0aff9091d94792ff97e86c4294accb0 5fd7cf4112aa11104affd6edc341c5ca9be4bf4fe72d71a6f5dcd99ba770e47a 4eb888fa29c97684680c23db89951a283acfe258360093cfe0969bbf46acb9f1 e4668cec7c33c26964dcd36e1a361fcacb0946af027b938669293df9a45fdac5 7634d726e3a5162d75b7d22c4a114f7f6ad81a2b271a1e400c74f213419cffc4 48bb62cb96a638a33817e6a32d8b61759711a7364fa463f16891a5acf14c98e9 5ffe1572e6e5f0caf30f25240b9b474f1ef2d0bc1c9765524aaf86a5dcc29e76 d190e4fc61cc50832f8c4d5c9a60b90835fffca4afab5b3960706367a223d9f5 libopencryptoki.so libopencryptoki.so.0.0.0 libopencryptoki.so.0.0.0 libpkcs11_cca.so libpkcs11_ep11.so libpkcs11_ica.so libpkcs11_icsf.so libpkcs11_sw.so libpkcs11_tpm.so libpkcs11_cca.so.0.0.0 libpkcs11_cca.so.0.0.0 libpkcs11_ep11.so.0.0.0 libpkcs11_ep11.so.0.0.0 libpkcs11_ica.so.0.0.0 libpkcs11_ica.so.0.0.0 libpkcs11_icsf.so.0.0.0 libpkcs11_icsf.so.0.0.0 libpkcs11_sw.so.0.0.0 libpkcs11_sw.so.0.0.0 libpkcs11_tpm.so.0.0.0 libpkcs11_tpm.so.0.0.0 ../opencryptoki/libopencryptoki.so ../opencryptoki/libopencryptoki.so ../../sbin ../opencryptoki/stdll root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openCryptoki-3.15.1-150300.5.12.1.src.rpm libopencryptoki.so.0()(64bit) libopencryptoki.so.0(OPENCRYPTOKI_3.10)(64bit) libpkcs11_cca.so.0()(64bit) libpkcs11_cca.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_ep11.so.0()(64bit) libpkcs11_ep11.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_ica.so.0()(64bit) libpkcs11_ica.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_icsf.so.0()(64bit) libpkcs11_icsf.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_sw.so.0()(64bit) libpkcs11_sw.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_tpm.so.0()(64bit) libpkcs11_tpm.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) openCryptoki-64bit openCryptoki-64bit(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libcrypto.so.1.1(OPENSSL_1_1_1)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2)(64bit) libica.so.3()(64bit) libica.so.3(LIBICA_3.0.0)(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) librt.so.1()(64bit) librt.so.1(GLIBC_2.2)(64bit) libtspi.so.1()(64bit) openCryptoki rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 bb; a ``Ȗ@`+`` l_"^!@]]ʞ] @]nU\f\&@[[@[_ZZw@Z Y.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U @U#U#U#Tp@mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com kukuk@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jengelh@inai.de mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jjolly@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com crrodriguez@opensuse.org crrodriguez@opensuse.org crrodriguez@opensuse.org p.drouand@gmail.com - Added ocki-3.15.1-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
for bsc#1202028. One test of the gen_purpose test cases fails with
C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token. - Added the following two patches for bsc#1197396. The CKM_IBM_DILITHIUM
mechanism does not show up as supported by the EP11 token when an
upgraded EP11 host library is used.
* ocki-3.15.1-EP11-Fix-host-library-version-query.patch
* ocki-3.15.1-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch - Added the following patches for bsc#1188879:
* ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
When modifying opencryptoki.conf during token migration, put quotes
around strings that contain spaces, e.g. for the slot description and
manufacturer.
* ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
When migrating a slot the opencryptoki.conf file is modified. If it
contains slots that already contain the 'tokversion = x.y' keyword,
this is accidentally removed when migrating another slot.
* ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
Change the code to use the pid file that pkcsslotd creates, and check
if the process with the pid contained in the pid file still exists and
runs pkcsslotd.
* ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
Always quote the value of 'description' and 'manufacturer'. Quote the
value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'. - Added the following patches for bsc#1182726 " p11sak list-key segfault"
* ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
Added NULL pointer to avoid double free() for the list-key and
remove-key commands.
* ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
Note that two hunks that were unrelated to fixing the running
code were removed from this patch.
* ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch - Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
When constructing an OpenSSL EC public or private key from PKCS#11
attributes or ECDH public data, check that the key is valid, i.e. that
the point is on the curve.
(bsc#1185976) - Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
(bsc#1182120)
Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
(bsc#1182190)
Fix a segmentation fault of the sess_opstate test on the Soft Token - Added the following patches for bsc#1179319
* Fix compiling with C++:
ocki-3.15.1-Fix-compiling-with-c.patch
* Added error message handling for p11sak remove-key command.
ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch - Don't require pwdutils for build, dropped long ago and not needed - Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666,
jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714,
jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786)
* openCryptoki 3.15.1
- Bug fixes
* openCryptoki 3.15.0
- common: conform to PKCS 11 3.0 Baseline Provider profile
- Introduce new vendor defined interface named "Vendor IBM"
- Support C_IBM_ReencryptSingle via "Vendor IBM" interface
- CCA: support key wrapping
- SOFT: support ECC
- p11sak tool: add remove-key command
- Bug fixes
* openCryptoki 3.14.0
- EP11: Dilitium support stage 2
- Common: Rework on process and thread locking
- Common: Rework on btree and object locking
- ICSF: minor fixes
- TPM, ICA, ICSF: support multiple token instances
- new tool p11sak
* openCryptoki 3.13.0
- EP11: Dilithium support
- EP11: EdDSA support
- EP11: support RSA-OAEP with non-SHA1 hash and MGF
- Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch - Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114)
The EP11 token may fail to import an ECC public key. Function
C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case. - Upgraded to version 3.12.1 (bsc#1157863)
* Fix pkcsep11_migrate tool - Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918)
* Update token pin and data store encryption for soft,ica,cca and ep11
* EP11: Allow importing of compressed EC public keys
* EP11: Add support for the CMAC mechanisms
* EP11: Add support for the IBM-SHA3 mechanisms
* SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token
* ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token
* EP11: Add config option USE_PRANDOM
* CCA: Use Random Number Generate Long for token_specific_rng()
* Common rng function: Prefer /dev/prandom over /dev/urandom
* ICA: add SHA*_RSA_PKCS_PSS mechanisms
* Bug fixes
- Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch - Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch
(bsc#1152015)
Add support for new IBM crypto card. - Upgraded to version 3.11.1 (Fate#327837)
Bug fixes.
- Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch - Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch
(bsc#1123988) - Do not ignore errors from groupadd. If groupadd fails,
installation ought not to proceed because files would have the
wrong ownership. - Don't hide error messages from the groupadd command. To eliminate
a potentially common one, check to see if the pkcs11 group is
already defined before trying to add it.
- Update the summary for the -devel package.
- Changed several PreReq entries to Requires(pre) as a result of
the output from spec-cleaner. Removed a couple of obsolete lines.
- Removed obsolete check for whether systemd is in use or not. - Upgraded to version 3.11.0 (Fate#325685)
* opencryptoki 3.11.0
EP11 enhancements
A lot of bug fixes
- Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply
properly to 3.11, and renamed it to
ocki-3.11-remove-make-install-chgrp.patch
- Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch - Upgraded to version 3.10.0 (Fate#325685)
* opencryptoki 3.10.0
Add support to ECC on ICA token and to common code.
Add SHA224 support to SOFT token.
Improve pkcsslotd logging.
Fix sha512_hmac_sign and rsa_x509_verify for ICA token.
Fix tracing of session id.
Fix and improve testcases.
Fix spec file permission for log directory.
Fix build warnings.
* opencryptoki 3.9.0
Fix token reinitialization
Fix conditional man pages
EP11 enhancements
EP11 EC Key import
Increase RSA max key length
Fix broken links on documentation
Define CK_FALSE and CK_TRUE macros
Improve build flags
- Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
- Made multiple changes to the spec file based on spec-cleaner output.
- Added an rpmlintrc file to squelch warnings about adding ghost
entries for files under /var/lock/opencryptoki/ - Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
(bsc#1086678) - Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617) - Upgraded to version 3.8.2 (fate#323295, bsc#1066412)
* v3.8.2
Update man pages.
Improve ock_tests for parallel execution.
Fix FindObjectsInit for hidden HW-feature.
Fix to allow vendor defined hardware features.
Fix unresolved symbols.
Fix tracing.
Code/project cleanup.
* v3.8.1
Fix TPM data-structure reset function.
Fix error message when dlsym fails.
Update configure.ac
Update travis.
* v3.8.0
Multi token instance feature.
Added possibility to run opencryptoki with transactional memory or locks
(--enable-locks on configure step).
Updated documentation.
Fix segfault on ec_test.
Bunch of small fixes. - Removed ARM architectures from the build list until gcc6 becomes
available for SLES. (bsc#1039510). - Updated to version 3.7.0 (Fate#321451) (bsc#1036640)
- Update example spec file
- Performance improvement. Moving from mutexes to transactional memory.
- Add ECDSA SHA2 support for EP11 and CCA.
- Fix declaration of inline functions.
- Fix wrong testcase and ber en/decoding for integers.
- Check for 'flex' and 'YACC' on configure.
- EP11 config file rework.
- Add enable-debug on travis build.
- Add testcase for C_GetOperationState/C_SetOperationState.
- Upgrade License to CPL-1.0
- Ica token: fix openssh/ibmpkcs11 engine/libica crash.
- Fix segfault and logic in hardware feature test.
- Fix spelling of documentation and manuals.
- Fix the retrieval of p from a generated rsa key.
- Coverity scan fixes - incompatible pointer type and unused variables. - Added libica-tools to the BuildRequires due to repackaging of libica. - Modified the spec file
- Changed libca3-devel BuildRequires to just libica-devel
- Check for systemd in the 32bit postun scriptlet. - Upgraded to version 3.6.2 (fate#321451)
- Support OpenSSL-1.1.
- Add Travis CI support.
- Update autotools scripts and documentation.
- Fix SegFault when a invalid session handle is passed in
SC_EncryptUpdate and SC_DecryptUpdate.
- Updated spec file to use libica3-devel instead of libica2-devel. - Upgraded to version 3.6.1 (fate#321451)
- opencryptoki 3.6.1
- Fix SOFT token implementation of digest functions.
- Replace deprecated OpenSSL interfaces.
- opencryptoki 3.6
- Replace deprecated libica interfaces.
- Performance improvement for ICA.
- Improvement in documentation on system resources.
- Improvement in testcases.
- Added support for rc=8, reasoncode=2028 in icsf token.
- Fix for session handle not set in session issue.
- Multiple fixes for lock and log directories.
- Downgraded a syslog error to warning.
- Multiple fixes based on coverity scan results.
- Added pkcs11 mapping for icsf reason code 72 for return code 8.
- opencryptoki 3.5.1
- Fix Illegal Intruction on pkcscca tool.
- Removed the following obsolete patches:
- ocki-3.5-sanity-checking.patch
- ocki-3.5-icsf-reasoncode72-support.patch
- ocki-3.5-downgrade-syslogerror.patch
- ocki-3.5-icsf-sessionhandle-missing-fix.patch
- ocki-3.5-icsf-reasoncode-2028-added.patch
- ocki-3.5-added-NULLreturn-check.patch
- ocki-3.5-create-missing-tpm-token-lock-directory.patch
- ocki-3.5-fix-pkcscca-calls.patch - Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081) - Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867). - Added %doc FAQ to the spec file (bsc#991168). - Added ocki-3.5-create-missing-tpm-token-lock-directory.patch
(bsc#989602). - Added the following patches (bsc#986854)
- ocki-3.5-icsf-reasoncode72-support.patch
- ocki-3.5-icsf-coverity-memoryleakfix.patch
- ocki-3.5-downgrade-syslogerror.patch
- ocki-3.5-icsf-sessionhandle-missing-fix.patch
- ocki-3.5-icsf-reasoncode-2028-added.patch
- ocki-3.5-added-NULLreturn-check.patch - Added ocki-3.5-sanity-checking.patch (bsc#983496).
- Added %dir entry for %{_localstatedir}/log/opencryptoki/
(bsc#983990) - Upgraded to openCryptoki 3.5 (bsc#978005).
- Full Coverity scan fixes.
- Fixes for compiler warnings.
- Added support for C_GetObjectSize in icsf token.
- Various bug fixes and memory leak fixes.
- Removed global read permissions from token files
- Added missing PKCS#11v2.2 constants.
- Fix for symbol resolution issue seen in Fedora 22 and 23 for
ep11 and cca tokens.
- Improvements in socket read operation when a token comes up.
- Replaced 32 bit CCA API declarations with latest header from
version 5.0 libsculcca rpm. - Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938).
- Changed BuildRequires for libica_2_3_0-devel to libica2-devel.
- Changed BuildRequires for openssl-devel to specify >= 1.0
Contrary to what the README says, version 0.9.7 isn't
sufficient.
- Removed the redundant DESTDIR= parameter from the %make_install
- Removed the following obsolete patches
opencryptoki-run-lock.patch (/var/lock and run/lock are actually the
same place) Also reverted the changed to openCryptoki-tmp.conf to match.
ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
ocki-3.1-fix-implicit-decl.patch
ocki-3.1-fix-init_d-path.patch
ocki-3.1-fix-libica-link.patch
ocki-3.2_01_fix-return-type-error.patch
ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
ocki-3.2_05_icsf_ldap_handles.patch
ocki-3.2_06_icsf_sign_verify.patch
- renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to
ocki-3.1-remove-make-install-chgrp.patch - Get a new ldap handle for each session opened in the icsf token,
once the user has authenticated. (bsc#953347,LTC#130078)
- ocki-3.2_05_icsf_ldap_handles.patch
- ocki-3.2_06_icsf_sign_verify.patch - Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
- Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
- Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
- Fixed failure to import ECDSA because of lack of attribute (bsc#948114) - Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
- Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162) - Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
- ocki-3.1_01_ep11_makefile.patch
- ocki-3.1_02_ep11_m_init.patch
- ocki-3.1_03_ock_obj_mgr.patch
- ocki-3.1_04_ep11_opaque2blob_error_handl.patch
- ocki-3.1_05_ep11_readme_update.patch
- ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
- ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
- ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
- ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
- ocki-3.1_06_0005-Small-reworks.patch
- ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
- ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
- ocki-3.1_07_0001-Man-page-corrections.patch
- ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
- ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
- ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch - Also create parent directory /run/lock/opencryptoki in
tmpfiles snippet if it does not exists. - spec: do not use -D__USE_BSD, a glibc-internal macro
which no longer has any meaning. - spec: use %{_unitdir} %{_tmpfilesdir)
- spec: call tmpfiles_create macro, if defined in %post
- opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use
/run/lock instead of /var/lock. - Update to version 3.2
+New pkcscca tool. Currently it assists in migrating cca private token
objects from opencryptoki version 2 to the clear key encryption method
used in opencryptoki version 3. Includes a manpage for pkcscca tool.
Changes to README.cca_stdll to assist in using the CCA token and
migrating the private token objects.
+ Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms.
+ Various bugfixes.
+ New testcases for various crypto algorithms.
- Only depend on insserv if builded with sysvinit support
- Remove obsolete patches; merged on upstream release
+ ocki-3.1_01_ep11_makefile.patch
+ ocki-3.1_02_ep11_m_init.patch
+ ocki-3.1_03_ock_obj_mgr.patch
+ ocki-3.1_04_ep11_opaque2blob_error_handl.patch
+ ocki-3.1_05_ep11_readme_update.patch
+ ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
+ ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
+ ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
+ ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
+ ocki-3.1_06_0005-Small-reworks.patch
+ ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
+ ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
+ ocki-3.1_07_0001-Man-page-corrections.patch
+ ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
+ ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
+ ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch
+ ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
- Project is now hosted on sourceforge; fix the Url
- Remove cvs related stuff; tarball is produced by upstream
- Use %configure macro instead of manually defined options
- Build with parallel support; use %{?_smp_mflags} macro /bin/sh s390zl36 1660272321
! " # $ 3.15.1-150300.5.12.1 3.15.1-150300.5.12.1 opencryptoki-s390x.conf opencryptoki PKCS11_API.so libopencryptoki.so libopencryptoki.so.0 libopencryptoki.so.0.0.0 stdll PKCS11_CCA.so PKCS11_EP11.so PKCS11_ICA.so PKCS11_ICSF.so PKCS11_SW.so PKCS11_TPM.so libpkcs11_cca.so libpkcs11_cca.so.0 libpkcs11_cca.so.0.0.0 libpkcs11_ep11.so libpkcs11_ep11.so.0 libpkcs11_ep11.so.0.0.0 libpkcs11_ica.so libpkcs11_ica.so.0 libpkcs11_ica.so.0.0.0 libpkcs11_icsf.so libpkcs11_icsf.so.0 libpkcs11_icsf.so.0.0.0 libpkcs11_sw.so libpkcs11_sw.so.0 libpkcs11_sw.so.0.0.0 libpkcs11_tpm.so libpkcs11_tpm.so.0 libpkcs11_tpm.so.0.0.0 pkcs11 PKCS11_API.so libopencryptoki.so methods stdll /etc/ld.so.conf.d/ /usr/lib64/ /usr/lib64/opencryptoki/ /usr/lib64/opencryptoki/stdll/ /usr/lib64/pkcs11/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:25496/SUSE_SLE-15-SP3_Update/ec2ef9ec2f10a20c3f42562e5816045d-openCryptoki.SUSE_SLE-15-SP3_Update drpm xz 5 s390x-suse-linux ASCII text directory ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9bcd7b5806259e4c07c9a295175425249a0b36f6, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=78b747d9c54ea7188bf1112c76c94839ad3ebc9a, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e73a5d580ea11cdb5fbd1b7bb68c26a328fff0f1, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0040b50c1945f2515e3484dc77b553157f3a3842, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a3613967ba6ee4d0747d0dc875c792f10b72433, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f13c1f0963a5efa5550cc988d591f4f9b33bfc81, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1feea808841759a75b898fc64ca0c073e7c9cb86, stripped
/ C V f
P P R R R R R R R
R P P R R R R R R R R R R R
R R R
R R P P R R R R R R R R R R R R R R
R R
R P P R R R R R R R R R R R R R R R
R
R R P P R R R R R R R R R R R R
R R R R R P P
R R R R R R R R R R R R
R R P
P R R R R R R R R R R R
R R R R R [T.ws utf-8 2b868b1c5ab2c7a4a7a5dd3b49cdd6c2f65a6415a36c2c168ade354adb08a39c ? 7zXZ
! t/|e] "k%N.srͿF8 F!uE7 1[K9]QأLs1jA`?]$~npk@h^R;>(k/mz0 G& ]>4
}p6l+4}3
s
=YZ,RAhʹut,SU0z&B?>A$ITMW .)7#7{riaɍÑO
?o9hJµf~^Y k vGͿ Xdȸ2ƇhΝfb=8t%;u&r[/#&
¤ө;sEg_u;%ỵk>E0O=:rCoGw< EaxQzbK"Mx I* wk;XW\+ U7pDmGI:"ь@a W.m\s7Tl3(o">OgqҞ0)P k{hCwuW>"DPWze-ǯhj
7 ڏ^9%OMTdn;`gpF4xO+7y:m0iJ ~s ,lp-IЀ%*\`v?C]!EOmY m9|K\ _նl?R-i/s3%!)"V)MT1TKo`sxݬH$3Ri1 Y`O۪':
ng;?#*휭ȕ C3 \uVsd|szeD9;XŞrVjFJu##-B<>`9CL A _]) /3'=aK F53,[kI? Zru*8̥Pz4P@kwQຒy u:4V
@]BhɗN>8ncO&8$atYjTI Q4 %XEN¢ƈkYN(烪
v~7*i'r')U~ с<.r`=T Y,YE RkʭC
o. STl߰P6ͺ= G/V] ϭ6DŽ Gl/Pm-@g8D4ŋ .gJK҄$iÚڍ5`8{b9бc`&|-cS)r. zMFֻ.wɝ=j@5im=(aNdچ!06)2zWU7b2U tl`.ieV Vh*7P]j&LM2{ptnTCsrJa 5@ ub.T3L|* iMEQOʠ*d֪zRTm.S@Y\<ˊ[k+tD0'r/l7 hFyZ|(=$koΉ -:GQ,۶F:bu)&$ԝR8/rw#\7VqXc ^lai n:EbҭIcp ~T/Xq^VjIDAUgnwu"%`G5\M&pv
JnF3<[qs EXPY1ޜs-CG%$U?t$
<T YYfW0.>~uJֆ ғ.7[YSS+F+}Ȅ5y"w= +*tB)7^pD%=Pi >~"w0gDZ7hQW~
!xVc& r*-ǽ< MEt]Lmv#ͦ!S_Oo ͎FN-N[-TMvYCDF@R7 pXdC=9aG WH'@"q@0'M^J˯;zT d4\[K5e ֏GgEmyִIWa&NWH# NM6# xYR(9W9bٝ9*3{zh-: L{bUy#aCjmJ̲ 6> s\~]ԓ OV/Y/1[|~}B^4_*#N[[u+n\> ,G3<' ]^m)]єr?ujI
*5as :ě*=iCAJC/0?~+TE^RI;N7d!HS}\Tv$DCtGhC0Y?Fh+f`Nk~C d1ZʖQbXu\eк}5\c0D#.llXD)*4_U b3Q,_s@
)бR-+m %E;v납OM.yz`hÕb"b"$ _t =s@I8 i)KGmM*k
2F$RʺJ^͎Mn~naC˭ @WEnHE)kajs~ha11en0 AV|#JKzN@(Դc PNp[A7ǢfoP>oW:qn_v8P!]²Rl}=<&Py4BgrYl5CU% \|I a9ٖ*u*)^Ü=R=| BfpD', T79
o`3ݗֿOٵZp~qsd.Nɢzv]nuHglՀH%^ [r^Pc
)1, \[Ra2&6 #XTx ) ȫLsc Vɏ$
RǵpAQJp:tVW+챹s.?C:۔
A|U|ǀki0,u>ny 9oV¤ҞL~ R&̮7O,%
ZFA݃xBXX(r/G}oVoo#ttgSí51fLZ{ +t F](+U/;l)SBT:u;z_YXcΤG}Į'ۂz!iF"D}LH4(/ZQ#9g+v
94 }6!@W}`;nyB&; GS J`_Iyp9/SBWe
BZZݰ݊Sky Q
-|KW
XRT[1 m,$ϔ3[AD
+Yk\ kح x9Fݛ~u$}hq rq{4pǍG1 CB-9G`utyuQfBM|&-~_vh[.H&e.(i zϵ݊v.ؚǨWR~6o!6CF=:T!2`wcÇag ur
+SM'Ӧ?.`ISZ MR2ĚVݺƑiS_1E2`f9 !S$:ۼKK/@j7|./ x \]>sBWZ>Z [L\)WGbX94HMr41夃? QpW#֒x1 䳾_qB! -QuRq}4 t = }RdD!ȉ2'Ђ1|J\ թ Z5C}unʼodt~@c5Ft f"U=#RqI>2 QB j]+i1wT#DV5ÌUUC Lohh6d:O" `ieli|VoJ3)[@ԷL@k<`q`z,8n橛rٗ~\,C*YU:UP
ERBЊh,&?Cc0l]SpWAU#&#GdHm;3:LA-3l㝃\MPWk* mJ[nIɐPP P<dl,oq(1〠e+uIܬԧPx3lPoC!FSjlKxZ.RS/gq <)[P KG@RvB l&,scv(]fRNu'U4'xCEak(.Cp[6!nVL.:92 ^xO] .77 d1/e& \<찤'z nB 1ΕP^{
۳Qzg U7nyfvn$|
z3z,s-',6.9JHUCu
GI8XИ{>u> Gڹ*LնX6>pГqCrvꖩ'NnpİPՁ;~ w~G CwM_uL+<"iXm "O*ݺW銝J?hHl+:oQ[skIhP Nd8]g:g L%G
=/
cA}=n> |fBa s7j4? 44F?.,X˔X42v:aR
I.r%{+#Qft?>f
*/u~CE,fḤdo Eo#Gk~$st*r_u'I {/dyEILbl u侧IQ@hXW'1lmCy- EoX:H-7XYuގseԢd@j<(iDݵ~ZGktv,u &lDe&SauUK =)& 5W{4klnT3=wuذ8#ez09%CC&o[H.'띩%]G87}2f5@+}Z ɪVǢr|BCgk
č#)"w}yqJw4z22@$\(wRy]}
6,ƶEa?? 3F&9v_.vXdo9KV 8wexl)~)*M. Foޗ`֮ }Q0 nU=i~e4WU?X1qtwoYV4!~{ST.L olZ&P Y&" W :1Meݤ7srR|aL]x Knek94@kl bP݇ .{2K*OfMX%u Z[
Mx],m0$_P겕]~CY% L y%}
>``Bq/ 1z/2X%kc @Sf BJA[70>
7xY
\ãqG`v*w-&NN˟ծ"ݎײDCyQc<ڬAWӼ`(&pL- }Ǖ}ܽxT[CYVB ~信9PCwY&qa34f^ 4IV S&*<׃Mܼ
'8 $6.ʗt{^?c:dG],cd ,o8ckʻdk뻄밐8),WbԫE5ewbn4wHeT9
.\q^9+_9$¤B /'ڙv}<Uۤ A?
,-QS(tn0 ҩ _3%]v zq]Sr̶KN|`^8M|t~Ah&am15 c:4kDXɤj'7tv 7!(1RJZV*qp{_r "!z'FSI8w(ջvN xVWB&Kn> & ѥ.a;He*> L2XMCj\ $ om'cu_D546YST@`Y : d,` )') ]R j' MŻJl 쫺Ɇh܍ő$fwsq, ]Ht 7J0`MS6F9[u
cWe xm_v|j aA;ljӳ kpQ@RC^\%&mg7G
kGNf,w!SoK/ӄ@Z@M7Y VL/J*BH86q3Z+!- {~}_ʡx%8NZIڜmtOsc йw 7MW($AsjvhEDkƑ+v[~[T~@- +'Evԇ``,}
@ cl _F/~Q8gDJ5L Z(Wsw
1gTD.Aaa씜% r^z@tc2O&1J%w&KZ~aJr: 3
6q}]Wi .q&\%YnZy˷D0yT {}:P->yب LJ &f;?FV%%W?\q4}+Bk.k*OF`kp`IaŒExtRl jͻ g69F*D
S$7֕|2Te<(_ n>JN",Ɛ똤%EޠѱvG*j82w ✵5 wݪDY/Yn]Dܻnmڼ pзV8ɋz= (5>fͽ`x
rzM|#rFzǖT'{O,#ʽhnO19
СpKb]FX [ɆffQuQBR`~@92,m*( R1 ]3-Er1}08w._;2&4d#t!7~J/4DbSFJ LJ42NML_.: pё.: 2żn9m/ 6 Ǽjh6\%|~%pŎ;) 0s<0ON|zӀl@
v\?lcnw䅧CF@?b_;5/ZpI) ۲TMԆ<ܹ͗(B 4 \IZ;:bH X} Pbmz" .fϫ}FXJH1ܧ>Dkf>9\/6XI {h& C! ~h.f 8F,cul3C`p__ BkXA&mǑ
W i6N@jigԷb&Uk`S!
Tx 4хh hVŔ{c *vˤ!YB \@{F;k5%(/<LSRݒ o2</m>W E`6v_-)אdED:xzx6=vEw?$yA;,pGѼc-ooא?Ajy 5 EUKRI.u
lf6uw
j@rJn\*teEi'j d
Efȑcji33` ~Nv'm{ ~!NӅ/+C,acJN_Z!WcC^«uHnM /F" :J s^* ȧbתiN
9Q /yC
;5܋OOG;.89`[Pw Ӿ3
s#X.fu]Qn[̣7kR1qep{EGʹZiNL i ˁQx*/Mݣ9Rwu/OeP-"¾RS;eZ!nE+ `V'%i `O7Zkukvfؖ~sa|&'tޭOV
i\mguP-VG-$?>>Fm|qH{EkՠQ` {ZmM,P̙: +×D{O>2RSæB>ع0 XY;PDĖJx>^#ʚɷ^TCk_jl( VoZt
vbzΠN4z<4 8r.jZq x)vX:z*)mѰ?I([Vt`|H%jz{n.@V+ Ii0 T|Ei%Tq3b83jjPT8'ƬQ1pHf|3/PU_ uYt2ԤaЅ1iRvzO*0s@0[;~8cn/Ɩ%v{^g ab ݃Ti@zh4 },O3K'"{VU# ´v+Ga irҷvD/mvʓzE#q6T4Ph^eut#PEZ]<.)ܠ&6tVdq K{!kjEu
cіv`f76+ 6"^ w{[OZ o| O2C'(3$ʽ- X"W/5n2R~=M6mR)i-3/rrGqs:J%$b{]4!>fGE> rQZK]KYPJ/KOQPlT4.3ee't bty,o sn `D}3̭TFs6cßȗ`gnm},S?ʵw8cyuВ~D)w
>dxpITJj Щ/)3+|
gtPPiE@ؘ@)
H_R>,dpx/i,>Nn33 s} q)+
!H}aSɓCwqJN >% 4nj)eB.3} ^
6v!BO|
֗y9Y9]n tk"2G-Rl@+ _CzJNne譽N[1 \$˿/ 5(D`;}y#ϦSQaJ<1-NT2XҸVq8Oˁ»sdhKPz`T GR +9]@(ryUJ OY@xZ\W4nuDH/|(mXQ8LXE6m/hM:ZJޜ:`UvΟ\ĨDЁ .?UКgA;E~d;#78N"e gCCT[fФ;4:tsΖ/phHHEfqciTBhS|RD#MVa:ee +/h PÃ|ZNN
і 03"@*DP7
$B #<
dT;R[)~:l㑺 ~̧xs ܓ JIѩ''ӯK KX+>Gg -Q̛zי\C_zFR0( _.& 8Ǣmk
PS@3LL 6M5_TUr)3#6:3^N[ag]$˖i2ӲG:чp6}WEA3pʥ0bFm0L*(([$0X5#vԉ La_" OF^Ʌfn\G{L'ez$ 4S !>ԓ&w.lE,;]fsw3'mz8 N"!nB$WB,FQذ~OyH& DKUK/Il"+_BvuX`/%TU ~6FWu'Zr8LLL tM( E x/\T:L˦ZLu'1ahp^E- GX UY r(5ΡccsϞލ+^7X9z?iZF/#G̹]!1E+{C< ƋW
b&&jO@} M{
zNr^ieRg
ÊCSYg:,@+-n _I[dV|FԚ ogd^S'
-ȫQWAU=k#IKQ!z&J&1c̫ J L*9+ 3dIn>1 C]ƪ:́3ϴǙ >ZDD}Qw#ǥ~`ai tc߄Vּxf:.4? Qx#+_dTp.MR*D}zĉ˗j] AdYQek?qXN}_y<÷{ԥc J
W֢oTYd=d^]l\?冷dϑ)ʩZ#ȺhX[\%k5]f#HSlP|3n!{msHc&P"A! ~]ľY ΊҬ]YLV Un.cJC ? h]63CKHSOWvk/& Rj\| <6Ҫ) SK:'Dž'DISգUn,OU@ WS5 =6}Ep4\'|d +!X!U +Segt{9C¡<$O[Vv-坅@]U: ڏ@UK ]T8!>V=D۪^o pn1 R!r>(77 h5,1]fS(?&Wa +\P>}hP4u8J-T/
L>jd0WYSb_! )t"dlTɺ_H2 NzB/GǏs?|wNȃo 6n "ܷ/S z RN?c@$c,wtN`Z?$*ʭ\QIy( V:֦[Yu L Bm:w Hz+Bj;uԗ!OiiԔs#@o
r@iuo
֕[VEb>̉gDRǬ6Պj?y.` kml'J./ ^aGÝ,D ,G@
vK.Dco%|юi}0ng$tޥqPp%ekO \;vgSTD.co CiŖYI|6O zF >U)N_GPJR +{gOZWht'id/]qPSToڧM`7C $WN:ry@.39'BH @4X^ɟb+Y[yЮUaس%1chYɡ nl W1u Z/iMy5E @l/3
L*A"Zj,j:uSI!א uwVS[\LR7#27Nv4X @"*%uC4KmV^(1`] &|K b'Vkb !U$u }QP\-6:M\Z'>K{a X2k4J}>d dFv2 *ax55@=zH&&bhP7 wYiDndq٭VXs(*O4|'"h2
YP%ӹ.Y T.NK[!&(A#k
y:3[DyrlIN6H*
x%%` [hM,jԷ|'y<}+ϊM <f h@w>2Ki7 3(V|># zy6#ods`ڃ7(I{ZRJĢPKd x Y@7bȿ<%@ *HxlS<]w?_ = fڜNo#oNBA#0wA߿|Q}.EI7fL{c EVoq$ l-C}&M q= TZV?\a~7 o (W%*Yx[g耤jSyHv Kw[N##A# uuv&':%"'Th2\_ JE*no{(Y'7N! ^L'.a*7hZ/_khXFC tw&%( Z,lNo}PQ ') a? O!Ȁ68o+X,~gִQDDD3aZKXfZ?|N *a^z1s~%
h#r6jH MO%7AD[<2wy3HR
YȜѼ@ZՂ\ , u{||NpbŎ{#q{QRV3XSvc}~d;U%8ug Nd8Z.u`6g@gyO1|ոYz 5ݣϧڔlo`lizO1mq_c*[EHK$(vڷNMyyr9xvDB72q"JU ~khhqxսzZ4 jh9nzˁoħ2yѝWkľ#?{B$4ZjYp]I
ydvY n7SpTn*Ր3 M?Aw$@gC95jJɤ 8.l9fa_9xDI; E [x#XUxI_wn
K|,v?'WʟUˉw뚠Y5hN[~;g$?7z';^cɽ2WW窦[vnZ\avs+
=\5E[_T:o?RĖ:t{ j.qDڧNE<5Ol4Dz$ƇɀE\uGy|fZ(1o\#o=$TarJWEfFcC!eXp$$T֕/T`&[ ?bb˵+19
3\d?
Sr$MUԏ$[] ^[8k1~aSf(]." CUHp`;.ЂCs, }
%-j [Q v
_<*
#A4~eBJ; {; ;"PS2F`G1|LJa─8 zڙq!2o`BÉRFZ^DD uk6j@,R)TW>{ ,@ced Qic 3=
ƄŲ$T(o>l| ?&NV BIIUqAݣxڋ@NXL# p'4]cQ徳|Rnd%-l}fEUa.k)_ݏR2 K՚c?4!-}\Z OL$*qE#6i:z<,Y,[34O`zƀoM
?; 5wGːYX X=nGO (*|j,MPEZB5:g#f pRsO[ "" ݕzŲeu~hg b}p:E{eNs Sm~?e\bZ .6h˟`*V =PܼWMݘhf8BO߽$S^\5Z%I9*vqOrsv,˯ Fp&`L)?nB im#9zj;
g= e 6 [/}9t=?t[>?f eͭcGFɁKt r *l Tozux=`D~ۑ@H*?t E_A\(G
$ϴ[6w9d$XC$\`"QV6zsU+h,*4jpZ4)g4(x ъVBfHznFrC~@Q"/% ^Q U[J=g7-` k6E3ߏX~SNt5z`F~ä?6}/Uh.*P_wW}?r9!FמNuͩGD/9 UTq MEPIʥ{뢵;-I!]zI6 H6'T Ɖ*XmbB&&NWn _m_cz F) JXJ5ז}
EOЋ`P ʖ(vC Gy~?kދ/+n\g ۴9#07mچ0e6:r8Ǐ2i!M aD=j~'\ d%LP
#<*X/vX01?OTXp-BswCd;4ڠP.q oTv){=kT"nGmni
ruN~G,ڢDh yJ߃CLV>7MZ_s&(~y6N_Z2J2M[1"-U*e yhse|u4FwZx~Bq@G>TPPj F0zJ@;p8?KYiWP+swlӃ.i<z7]Gpf4xPElAe;r}tD g,e)`w[ݧ$c:]GAݹx97>\a^E"5b &JCQliB}) Z:@Bba5dx"&9Ԏpb{sufPQH5X,a҅A!lmbי5?aͶfW9@|t$w sՇ)4ۡl [JѦ)d֎+*3&(ҁs2{E:PqSNuŠVO7
|< 2*Zm,?! K"F0% xF:+ {x
^=cZzҜ!I9[64_ kLi^<#O'dmߘ4{Nqɲ5\OgZcWw j%6?VIV 8!< t,6FV?Z CحE鞬{Qsu _cqbIֶcp*?+Qa>dtQҲOit6K nMs7L r[x 93YZ[i
ci
Oߪ>@hG{胞| ho'8`qEʞp
M ,XY<}T8rpdݖ4p'Ӵ :B*
RFnyD LWGd1H8(5]z
1![ s4HGN_mcx5vV
> c CZaQ$a9b*o
kWDsZ4$3/d-'I_:.o-f|dx (%hqv8|$j>{kgEALq 4f͢~K݅NT?Ϗd]HF}<^
:`sX2G >67m>^3ro tD;u`amy`퉈 + 387V icjF +u/U
*_S`a4H%KbZ; fcOnvR5?A]@;I7mɅ 2k)H Hڙ
)5K}#MAo
>|ߗ(am fsvuvl=S6;Dh%FD$&ԭ]kjZ=jr l{3J凓v";[2F@ /\=ZamE9,WQlEscZS!LTuM?Y$7,-\ AkzH=Ƌ @ 'ad 9kUn y
he^ncSfW5z:0":A$LӥH:"m.vM^`mM
ͣ/i%q fm;D_!t'=DX-}=Q?U9b/̨%K" sLAV\;ޫl)P(cn:Bī_diU 2uݕcE:QQtO3 naTVdS
C{pܙ7=wmw+ T|s1u5Y*Qki]iӉ
RK|Y ìh_ mLٹ!^{9 v4+~\;XKAE>{ZYF].YTftʂ2fiGW$ɯŊfU13(!xƚeAQ#MfޅtH{"%"Ǣߓˈ4UbQn|Kf}:Ӹ{2˘GqOwpJTVNe* " 瘒Nl D8JJ4ܓ?B_\ũ_)Ǐe̵~@j y SŃ/WAKp9߀+.MI!ݚq@ƀ,_Fd URSpT䱟7ߵIW<˲DnAI{l8 d)i Bzx62asL}*/Ӈ ]ڟ "!v{ z` AqBgA Uʣ!JQށ |&i}y6aue9-0`;:IF*`KT]
j ]
`NDU)l강i Izt^f}HjwI zPUŇ*5S⌡6B M>S7~9%qUM* ALI
]WP hx
Yc6K r8x5g
>όio_0i4V<U3d>a.ddלM`LM.2B]P3yQ$NQ#%59_5+^
ul8%ǹӽM ~D_~1d br5N'/ưf
NS tlv]yy[S+͠wPY6:˺$xzLyjt*7B u1f2
_6G;! EǢHQP/Z -kgk&ƂXES˝mNdVA0֫35@Kd
ԂWk>~l>CQނ_4ԵF0Ӆ wk?InC++Sc.(̡kWSۭN +6
nҳ5Ms\bq > j B=;w<÷s4m/e]0LM_p$+5znPc⑈Wj?nE!LTZȴO٢1r(HRyCW+fmL>yoBv`$:L
TV ȸϟv'4{z3]4ma>|pG:-[&/]XMVt+IH6Zfy\Rx/X,,RM B詔7',bfU'Y(`VӎtKӡ>rB RԸݺJM8몕a )77H9fj+
0z TNȌllLbҀ.u0#=N<6z#B]Mh#pp%E^ AI#|ZXCҟnќG HK0T2xv ɤb&Ԯ*O6m?߽ڻ#T0ޝݒf#ս B)veaڨH:9%}I>bsQZ6 wr_2pѩyxW +s%P]@!{\rZi.mq(_!Mg] ˚q=?q@7&62 1 /6`U e .P8
3A} O9F%`M$si̐A[& G'9]&?(ﻜm
K#Ko3`p2n/qAKaƋ/1~aLٷ C5ˮ&