libgnutls-devel-3.7.3-150400.4.44.1<>,fIp9|I(2$kjzuvs3EkN|X&L@ #ECQDʱďWO8mJ+[l>B?d & O 28?   * >  ````̈́,(_8h9:>@?HFPGdHdIdXdYt\]ʸ^m- bn?cndoieonfoqlosuovwPxPyPzl|Clibgnutls-devel3.7.3150400.4.44.1Development package for the GnuTLS C APIFiles needed for software development using gnutls.fIh03-ch2dJSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.gnutls.org/linuxx86_64 ALL_ARGS=(--info-dir=/usr/share/info /usr/share/info/gnutls.info.gz) if test -x /sbin/install-info ; then /sbin/install-info "${ALL_ARGS[@]}" || : fi ; test -n "$FIRST_ARG" || FIRST_ARG=$1 if test -x /sbin/install-info ; then if [ "$FIRST_ARG" = 0 ]; then /sbin/install-info --quiet --delete --info-dir=/usr/share/info /usr/share/info/gnutls.info.gz || : fi ; fi ;h$, ,(:QS1|  !| cEZ %0!7@@H%M#boi;wbC+'CvC '&XJw I =.D;L$@=742525<6"f 0G4x|xO\n1J%n}}kv%TMM#/q~q8#od?A33NO'KJ(tG:BkXZww3jB%q5_X5PmoSRDuY|?[X_=Dm9#;. |}~qLCJHe!]\x,z' D1^8/,2!P)SS91\kvgg|P[-P=N`+St$P'/zm,R#l=3].}r@Y=~{]q9 qVPp1LsC=J(U'T ^>q(855F&D*y^D2y5&Vs4|C $qXEZf Z8 CjfBlf,MaLL !4#Qo .W#[5\k!1U KQ<^R}( wcE";- +m2!h Z=_c\}R)@E\)KKa ntHKd^7Y/QN1Z1KE\+cY^ L^6=1z?L.|{ Jt!<; ++bV&zH3&* 5fd5'`9px _xfN 6 )N}$Ww7|9{s@$VO RZ"kK O2a'N4)&>)/.+k"9k__U(Jl5!&'"&a^V+B.?$!!+%F>Q @ OX@{]FUZbjM;_DsidQ x=j||`^<Mn<kbHXwmA큤AA큤A큤fGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfGfG8a4318ffe545312bd3649618070b1d8085a386e4591c3a2d4c246ca855ce48693bc18e4946450bcdfa4c3d9531d3ab89b9cdf23488840a76f899f55433cbb4ba276f0cb32523e1cb71dd2332bba065e35dd115a305e4f40ad12cd11d8e254a9ee7dece82e75be914decb9f4054c1f55d8a797cff23bfc20f8105c5024a330c79802625bd2ac347478f59bc3eb984781a300ae0d97f434af870ac27d9b1d99873cebcdacd8ae0a2441fa41f26a645de9bc3f752f12b35f6bdad1a29164a2d749c9d3c6747bbe067dcea3d66b83488b1c394b3ebeb1dac00c79a966a948df3400c5c65dc9de3d4e94d73e467cf3d0418668b1eecf98e32ad45d0b4d2a8c07f11d0d0e16f0d60e1d5345a930f6bb6576c95ec84fbe30fc8230fdff51ae033ac9aa5fc48a2cb3a6c3be97b3ae4aaf1045aebfcb7d0b1207f27c7b56382c560d300e3924b3031afb63b68396ded9f2d52277af2c8595af243c9e38f1447d852553dd5e09c13b897141d0e50f07c10c0b2aad50bfce5872018850899b9e0a07930fc6607b0f8143a8a63cbc89dc4808d83da8c38a865df35995344c133aae69532af4fda539bd3a14136ff2f452652ba48708267c7875da2bdfb35e1abdf7b2d71d19492431648ef8fe1c4d593bb506d5cda3c4821a28eb20d4a0486cc01b607f146b478fd8352536f5be6464e779e2be8a4fa889288a7773589caab4a5fee9c1371f8e779578205efc3b99041f59394e9e92402200e2feb759d1ecebded02f86eb5173cc4c8c1e85fe9a3dc991e4340daf88cf826609ca8b06e37faf8d2e479e2bbfa322703c511560119ecfc58fb3526700f249a0bc14238a007e2de6511997b9aeb96190117e20a73f657a6a49de4911a8cb962f5674510772e0213997f79f79caf06667d98847a2e125fa9031268f0d4cc831fcc1bb0e5168449b901c41568df83256fc598d83f1b64c0cd17bbc58c7a5fa91d08eee7e7778935f475e2975ea5307775fe7db9f7aa86c70467a7bc139699d2564a9194c60b4cd477208aae100b516595f93074551ddd3fea9bad64f8f8f65cf0aeea93105b34e71dd8e0d2f845982fe21adccdba673e47b126ac659b90e9eacebd2618df31b8da7cdbd5bd74f8641a98347cfbc1df0092c5acf404a46b452794d6314988af79093bfffaed4ac57e5e3817e5e61792201dccc9b26e15907f1b5f151533e71c222abd68ac4d30eaee92ded9a12a068daa9dc5c266a3c8d98215a908a32b131d5c5fea84e767b9288b255856ea9097ea4cd91f1f4592def953540afdf78d67d590608bb5647dc7dc484a250c3d1c715831d2a1ec9f39af90e98af606d39ea6baea49e288f727a0b9c168fcd9dd8a3be07c6af5a7e5bdf5375bb275e3492e9fc8ecaa4ec463627c2d8c8f6cfa0d96c778b219a4498fa6d831d5e9335522dde01cdbca0bed460ac184c2bfb8e36975d54aed08c5d4d8e38060e71cf88472118f351941a80320fc8fd26f3bcb227fbe033e0611ba2f2d5da7c1275334fcb994035e80ac6918260321135215ca9bccdabc25668c2a25b26f0bf584edd004e8184ca003faafcb347c865f6cf9794cbf48c933858af0c814000890f567990ab59880ec426d9a98f2306ec8707602eacd37f60767b99a37e48c502558fbb73d9ce11896a8f3bfbaf644c407e29224268008e71272f11c91afb8c2430853eafcc384a9086e1b55314becfd872fd2b3c99909c49ec9a29d0656c65fc96b491357faf03c5c15abe40b7a8d3970a6275a1b621808440b376194c4291593cc07e171c87aac3dbde019346b6c99eca70789b3a3a4a129b5da7e708f5a4f9e0052987bce55bb28cc12587cc49d14c453674cbf3e7b4109bc94177c7c3b57922d23987175d29d71b33dd6108e3a4d049a7429ce1051ab72e6634841727da48bb2f73b45c3063fa2490480341de92139353b3c425c8916f76a8d91b3d35110dabfa19a7d21e2c452eaba4278818dac7dbdd7c279f5d65a7ad6e8d302f21687e36781efcf303d170f15c2e233108b1e52dd067194e93871006f6fd989c6ef7f6490854a4b664fe55dc5dd28b13ae7f3c2dc67bea03002c2fce84e129128f38e8bc52813b8ae2eba04dca0cfbe82c65b7900f8903814b72bddfde01d0b4883f9288fe55829acda89653217a9024c3df18138a0e67b6e74ae2e4af12985bcbb0e07c7fbf38342be9b0a5e4192440f703f6349b325a8f764db03f26a26a4d386ec36ec6d8a8c88045100f4f975d8c2dbe3ece5a3fcc65c4f0954b8474753463d0c74b62180c8796b4f0760048dc153a2026c430c7c67f74b68103b066759b894c3e62f83203d125f83f8b4a6f30a8939a776ddabc43c84f955d142c35d3ecacdad5d26426bfa29c9d4b92167ffdf2c3b16ffb888616d91d935e4b1c6fa088f1b2e48ca9cce03927ca176ce6ec937483a3fb2a7bdf660b546e445af4b8aa8a242ae1b316dd4abf17e1475ce7af2b64ea59b66de4ee91573a216495a1253bd38df3f770130f0cec42250331ecaf2b798cbdfb8162c36c3784098af709d00c7d6e72231ad1335fae4b71c65c22459e5041943aa8fe10c41282d84be1e86ea4df7d027ddd06edb0473cfa7bf802125dab2e2055530bb4b27155d7d89771d2f481ce9705f0d6469426a015609b08236752a9d2615cf4ca38fb6b177f0354972eb843ef3e5516f7bec816c81428f9d3c7c4f0a7b95f955596677f841d2e2be385481ff82d50f768d1d8c047074494c53279181c66bc7536072b65a61832cf89e9c12dde2f482599a0085bda55136ee3705df1a0bc9e813ee4bc36ad082ca1660ea0392b59f7862777a68cf362c2bd33dbfb66ef083f0c036a0949e855e1eff6bc7b677ffda5e22614649deb23dba6066b378b227959e4c603298a68f11b6476bf63556d656c7a4e82513c7f5fa2c83295e98d3fc9b92e4bff729adec27c6b3277cca9fe33b89084ec5900cd5d4f143d403dc26a2045df521b6a4d21366d428fc03bb8c06581bfb515c740ca943e6d915c7d42ff2ea763c66a6d782674a57de7694e7c02164aec06713df0e0daa3611b11234f694b5fcd97247a71781d542ab0bbdf84bc5357bcee24ea62bd1aa414d7d112ae4b3e5247a7ee359f847289375765ca6a82eb10ffc7c37af007ae7eaac5f51cad535cee69a1cc3db57d60feab7501430cdb36ba78869e0c567d5b6055b8fd9fa8ce2de691f32247f3c877f5e9f1312b13f029367cbd72e96238799fd07ca3470033edf78b6f84fe31e6996e5d48b901bd74cf86a91ee5fc785fe9d76da3b2ce917d8cd69fb1477fe666e942786970278d7423317fac3fca05384e901dda82d635f86289500feaf76cde11bb03763f23650d44d34817434bec83fd34cb1f7c23d2675052d82a3f70420d2df247e899ed71f6085f4017bb1e3fbd9dd77673a7fbee8289c69091ee6282ff6b5316d54f0367f5e91613c26454cb48df1504700afe0da27d9416d73fba0bf6773f7e66f7b113e48b17745a82e6b432a19899483b4f3e67e900181e755987531bc90d9ab3354df066fc1fd2b76ddb649f45ba5b2e54f7936840eee4c66bbf14a259edaa53f4f0a411014e1e37465683fd5ab4d5b505989d0786d0081dbc293b09aab980588b0c695a6049545017ccc8ddd553011a67facbb99ae56190eaa1bd6e24b9cd4d92d112817f1905c4f7e70ffe8d54f2a9eb6d8f39a16139f00eac5550f3ab253bda518a6cdbebda9700f997db78589a5d1d26eecf8eba3840441c71c46f7783c5e3a6fa8bada1a04953422d02a54ffb392b148e5b61dcea1df3e5632c37e46decfcf6091e83566b13301219b95e22313f83277fd4351442e459248e90fba90fec18e738004447e29ee3bf828b07f4c5552b641377221b5c669689b6cb4f5e963a2e0a6d920764513a79a56dfb429fc93c78c374a3c7748c5a12e397455f6da01d73923ef044c29b3ade0bf4724a26070de966400d9cd20e3ce51c2b3c1a8791654a3b5a43a7af12f8a40f3420864ee7b0f5ba3d2dc471b1f41c3bbee1698f825464d9334585b84a2f360b0ea0025b32a60d1bd022b8594259557fa7a6c19b2a95b58d40dcde58b840b9bc6c9fa0fd176e79cc05e77081fd83611d7202ed8e2baa052844591ebe033a84369708f137f8487fb7ebfc04758fb1071a3db45124e22cbfb0ec9828f1f414b08fb9f0b29864a3f1f402eb8ec3d8c6fe6bb3f42b40ce8b722cd572eead8593b49b07a812ba5add59f29862dcd9afb7ef1d3e9f0db3ca0650cad2d06f628ac632ef0e51d8eefc92fa1a091bc61323f3acff3f629579880e9f8dde6045807d8ca684511379616c142269635738fcd0259cb079b2e6d0a9b4ffe19558d877a5daaf93a9aa4eb0b2c2b65ba05447299de5bffa6ea653e25eef001e6c036c7187cd20fff62517b3d649cce657a7f8f8376daa9ba8b3acb9b19a1ddcd943e03bc389e2eb44fb040d4d078618846cddcc95e53e6fd47b20b5ffd8eb323336de86dc584dec7a45d1d6ac8b9003f472dfb24128b6104b6802aa5d5fbad50ad369fedc08bdbf8ee74dfdfb48389f532cf301aa583ddf2e8ca77add247265541f87c73d3c2915b11f3df304f0358f83e97382545a02896a446ebfb6e7244cf2b2f8c064151b30625557fcf1db93e479620dc59667e3001ebe83c29688dd6b95f102ac24429ae811e93f860c0af6447bbe1c557813228ca91034d47ecee1a8a8c7fad262663a44eb8919ced11b59df32fbde03e78f644bccc411f04bc059f1d8e2255ec1ff26650b1b5afe1b9de2d978ab4b7e3bff3559b2ee4a94f228622cb83c9b0435c71b0b2ea661969f30ff191ffd770bd9d4a343c54952cccec99eede29621781a54078fafd94512f460c8a3bf2ffa3efc27ee41c021bb363013fcc22ef4c4239d2e279fc231883ab31e9a4993a0abfcfd822828a20ffd2a4cb4bddaacc6145d8cf6fd50fab229f75d4828f6039583c31475ed0f243ce1f93357032920113320d08f8ecc39e6d36dd4c0aef0e10f54d744ca8e9795ba19350235c3afb63b8d60ac506f483dd373097af511d88bbc936d2958eebe9c2e535a0d17615f761a8a352beeb22df5e15f6daf7db3585988fe35b17370429d996a8d642d83adb806b11a469c7d47fdd09a4cba02b0f5dd97f08541fbcd5ef08bceabea12f2ff10489e5c01246874eb0190b3a444b2e126a3da8488757f09f3755c51f56e73e1addb7cf7b2bf99ce2dc45038e6dbc6e61cdc1b054959ddd85d8df1057324f61561eda426e489de9072b7f1391c1a75184a96e2fd18248eb513f977fb47ec7aa84878207c0d845e8bf5100779bcc428651d9799034df561058ecdd1d7328244e7dcf599036857f9d3b94659f2c825998d39fb4b36a2af77bd3c1d4c0be73df576d924a3454c07f9b9b31285a2aa1678b35f484c53b3df370fc8e269463fd07531255ae7f8afa6f76e3b1ff3d3cf26a5a45c8ce98259da4d9748e54a76b48d6f7f3da68db155ddca0bc131fef31a51ccf6abf2578b706f684d1cf0fee027ecd1a511908bdc6db98633235340d0d75b519f6c96f506d460e98b15292fe22a6b8f6ae5594f28d44901f451c3d92e30121fa81ecb7ec0f50bf9bc78ba5a9751315d010d0094deaf7557ca2b7ead1f285dca1bc204e9d79b45d6404350c40054aa5e085e4177ea7fc99c284b879a88b1a4adf9ea9910bb73ca02891aa3b3dead0fa1ade0a73003d78eb522b914f5be805a1c519b34c1826f0db7ad15cf4e522811678541512ee1c3d73addd44daf4fcbd3a798ab196ead67119bb6186b6fe2a4bd11f3b56d2c1c9c9d3f65c3c4460ec02f6f41b4cf2ffdee59b8035cd1b84bb602500bddfdeecad435a98b4cf9346cc7c92acfccfe27fc040f186a9ed943925d2eeb4614fe9228a06b6d40ecc2d7c121e855d220f60074234adc4363fc06daf493fd3b482e8a6cd9250ce27e0bf50dc233c01f2269f4d3a05657705ac387e1281cb8154b4382c77b5feaef7d9d7f4c6499500f406a657f113d0cc09d438aa264c17e5e35055684713a2140b49dc90612e6df8b14f45c423236ba5581abfbb4bfbb220cf5b203e43e8d451f4026be51253faeff94eae6b9ebfa42c8af53df6840ea15774cf3a687ba2e68f20fd4da7dbddeb9139a56c757aa3ff26f5955a53728d12f8250bd1d6f11b362a19debf325af6a78dfe5b2e85ae203c6588ce1c32862de5b899c5975d6dfdb2ba4dd9adaf5b128f228bd04b1cf8dd8c03228cabf761036799bcf89a69fd6ea907d61e92462ab2b5793be99b5b6bc1d7b6d7796bef540cb6cbb0ffdd557acf075cca9bd86edfe284497317302894ac94daeee8ec77e33778de4d3d70dc1356f7925b6ec51b7fb5ff3bc514701f99c604854b598b10d2dd545b4040efd90fb4982b0b86eb6f0878303b99c57ec66fcbd428ca9fbd026256682e632c661cc79b9d70c7b22e683a34d58a9860dbb03f45c9488d1a6280d2c5d08214f42b559c3567eec8d79028431183d36c261f2a15ec260f13e9475d1bd21fd3bf284e763a0fc4d24384b42a1f89b39c245d49355199fae370527fe9e3f0af8e06ff21298d016f1b057d04bedc08af8310fa4852176889210a19267d1d25330d6b244a6caa8daba1a1477784d57dd58d15564cd378f6243c9ca78d83bb55bc71262fc3b02d5f41d44d7503cbb17200f853a95740f6ae79b724991641fe239284124f20df93fd951fe52839e30757cb6e12abc0d3292e971c060dd157a6eff731aad6dd01d618f9c895194ba2c7664ff74d5a09190fed18fb38b4aa74def33cdd1fd5b34a6f0120fdcaa3c5723cf6f530a3ce01f3e8dc2ad163528063f827c62e1e04fb6efd305878f79caacd0481414b327607c8ad5b8c0cd90aeb3452e1b409558dda3396516d44f7d37b3cf8d65660c4afcd802adc1fff75c6ef053e34be0da581499a67914ce472f0d06e2e34c4c67aef7a29bb41b017c58f2f7b2ba250a8e1760a1920a4a1271ea73631857d90323a06e74466ab0b5e1dacf0a91dd81a36470ccabdc56bcd7d8914be79f20b58d4c0dd74099703cb57c7ed900b9030b9bfc6d79d3524cd5738ca44894761074960bf7be77914a90bded2d13bfe7591bd45f8f6a0d31499462e2ca2c5eb77efe0a18283dea0221e286c2bad27c33e17ac5fede4dcb609b938eac09afba56d405a9e27b018160d89efb9b970dc0d4967616d676ae046de1a29951df08341f24be59b66ec5fd85b7a3ec05045d8c48909e0bd6ba970b8d26e4bd97090627df20bc8b5f2ac9189aa2b3ba13abedf61f7a01cd5ae108df56a43c93638aebf5c65090ca6bff7b3f8d806c4d20f268469bef46910e7e892440e6ddc1e09647552489e332a12f583636ad2c4bbc4e9303aaabfdde28b9c34234a181a5cc041cb591a81338107e31b6e4769ab80670322678547fd4bbe4b362da8d990dfd424ba2bd4b5396337ad6bf39b467c3d45afb4f0b16476d4cd5904714c06a0dbe66ec5bfd68e8fcc87d6a666a7f0d58e6527994dac424d160b549cd90db0cb9c90776922d7a9d4e8c0055324b3c06788584263ae6d628220116f09ef2aaaa39af666e25188b0f997aaa84168c3f3afe8b709688974322706a321c558d7518a607b88a74ffb3bd1b05367cd083153e0a4c69691687b72acdb823cf75539e290d1f807b952998a041f4472a3a681faabccd8d22dbea03992a238ba40cae9870effb699173b4e66e7c1deb05569d93b0a293be27e35a4e68e46e502b96b2703d5e3edfd4c5db8deb6c75c7382093499449e946534ee5cecd972068c1f9f2858f34e2bf3e1d0df36505c62778cbfed364d28a8e64777269a44c4f5c706c864643de8d953cee411e381d430bc1680693c78b874ce85f91415297eef5d96a21b6322f461000a843f5ed16b108f7b694f68c8793fd64a154db374419fd7ca03e5bdcbd5f70471b0ba649b6db83b3d29dffbecd26862964e2ebddfc9a16869dd732bc592320c27994b4ea99bd0e16bbdb783927da5b6646831c6a23a1f455e9df99d147e90c54d4e08b567552d9ebdebda8f6148fff8bf1daea7aa53cf564e9748ca74edb777d7211fabc37bab4fc3aab151202638d141fd8d037a43e263775cbebe553f35f69712ece5868a123effa877781ad002d6e95471c970ce5787113f346f58d0997990f70fdd367a98a5c3e735b53a7d654a56a911b5bf2062395f5baa5a7e8f5ab31cd2955a10b2ddbb8d9ad6883b51970e45b932ca2b8f3c45975773a1e1f90ebdcb65ffbb4e408e797dc169266384694a1be88deec5cfa0361de251f08ba61ae3dc020bc5c5861d48991ba953a9c2e28f3833735f33b2c1428b70658747a5e315532ff6d1f7b3d9499d0a87fe5ee7455dd593510ffeb874a96b766a0b60d072379f315b0ec22784cdcac92ead578bf44d549b6cc429f2064c9d6f54d280ce0f305d63b6465189ddcb6a9a5eaaa6d86b7c2751eb8fe2f059068a0d8346189833da0c584f8c200991705dfed1b43742b0c344c2baf3d91dc2f647308e8406d7a03c108281604f3c7c07a08bf0c55f8da89c9b49b185b076e07119548fdbf65336b2bf5b58e78f680ea82404ac70c554d9690edfb1721ac93238e934d173e36b5ea5bb5f5a409fb6ee17f8aa221231620a6fff1ac97c58e88be0bf1955480efa33733bf55bcd8a6577a3c38750eb04b8af1bb9fd316e5d66d492306c4c82bac2e8a50aef44c1369683daafa3f5a717f21a8aaf5ab37a77f86d41167e925953d4e5f3cbaa308af20b41d450278f8712889663d4f883541dc8573b23e686ed5b814fa1252c5597b1aac26de62a3cd655169806b65efc4774d527095b7a048a670f629cd8e0fd2b8d2f3839a075742ad09dd7dcf7b5b028be2423f2b3bb4733e9bd204e3ccec90add878c2b4533fb1027f9a70ffbb69fd9a0ff897e21fd783c40769fd83d1f6114451f0b4c0f3e27e6bf58195b3aed25efa5f5f1d5b758f44ff32b9220ce4eb3204f6d99dea8e1ca396033b4f144f3569159ea2e2ff37cf04738cfab813e9fe0f4d1522c3b11997f0c0ddff232685fcd14f4429c333786a6b7da355df1913b55a8f31e4ab78b6960bbae98c676dffcfa22c6137f71a1031ef31fc9a3d16ab341084e73e6b6db8fca53410285ccc2cc2b351524a8f7e24d256d7d4452ab82a686463741225c07871843be8bafd6dc4b2b73e9584ce3759a587b1ca3868168bbf9922328357f87bb901e23492376c5e4db72381cff13c52bf85cf74e05af1393fac60df6b21bbbff1ed0b164f05fc5529307e50b93b6ab4b00cfbfdfcc85e243712bd461d03deb6743b8075a316c5204ad78cc8081caa0e3f6da9496025cfb6e21b2409de4beea17d80d36495f6ef642ca1cbd37b01e52c748e4b00f037fc596c5f407cb1be2d6e56f56418d1752df7552693929d9cba294e7de5dee13fa000d75a1bb7073742f25512a67f1eabb5ef5363015757a0f8ba530cb3a3bf7611bebb01ba88b3609df79400eddf03799d920852111268bf50e5dadbff06b09cceca33f6b4adfcc5bcdcefa4424a1f0591c0044718186b365fdfd26773b0f0d015f2c095ee28384750cb4d3f2595ee18a50a324cdde899424916c6424fda0ff893f5eb8190b49581d0b0f0c94978575fda2e3cd3c4e39fdbc77565e5570005da1ce5dee610f44c18f497eb7665c80cd96f42ac85715d8f59300f6b8c86a92a296d5393519f02bd11a384ad1b93d02429f6b1d2b0f0c7b9218d57ea7db8031d70b54028ac7bbe333ddc295f10086662c1fcf47f349453964b8b4567cc061b69d5eb04a44c6854d3e728832bbae36b8ec864c90306bd28566017ed035bf01464b3fb425dbd580b15a247b019b1f02adcc5b1f1c8ccee6ed8a2da641affbb345c3a2326579141bbf410d658383387903fceb108edb87506d6b88c6856637b5bcffe0b6da9307ac29071662eeb31c3d72b773336f7f3236e966acd05e773cd3e56750f9b16f499ade40037eb4d8d03897ae109f990bca4b441017f5792e3c6b882c230761b55c86c77740ea530bfc583efaf3d086b77a6c277115d421cb0330333cc9a542170a2caf3ce49942fe8f51fed0d0ec995257f5ff00bb3ee2ee64911abbc4d88f034578aaeb0b4b8304627034327c733647ef053562447c681fa24a97284c50ab3d95b0d8ad1067b19c0f9d418aaf3d29b562e15c474ce8fa617e7d3438d120163cf37df2297fe04c9196705aa7136dc39862a86224a56821b6acddfedf7e42ea27dee10e8063cde70677ac1d8c55e389b69d3ba046e8c4a8cefa601fea1cfedf3845164275711dc211e6b0b035dbfd1c02c33bc9463d47ec527baf8d4a5574a440df69dfb9de0892588ef2b2f1e158f30a8dbbe5e7bcd25956bf5f7e0681d4514bc896c7034e717bb162a070df9417297d88c69345ae24d3fe3e690a4e7f1f961c7ff2e1ba22390f53a7572ce13d9ea2d21f9e7023ceaec9746874dbb18dc38336d6a15e9c05404222eb8241714bb44d6224a7200e438568f106c53d9a27f9e6a371d13a0be43d847c4d370da21cd905d95e6a63f70fa3ea383259e752d5ce608efec7e53033bcaad32eb2b868a849c690f8eb2ce25bbd6fc1e1ab3846c51c36f819dddc7d23d4df854bc915d9a6b62ded5ca9966517998adc2417912089407e975911a47bf534247a36ba2724cebb00d639c77ca39b63f394ebba85cefb6252b988ff4a7c31054415cbe7ba0cea0ed5eb824cc5e0d7c821f3d57dd76d0e1aa367ac0ecc61395adc336b79b810a67c0982a876f85e0e280fb170f5964dc332b6a82c44c99635db932af433f9073386cd8a42214f89ce5e0186f08f60c0dd88c2932d66229ffc3f43c320a78fb456e699515208020c839f659bbad9d4e116b8ed9ae4df2bdc579603b0fc381f755d62807d6496dac15e5dfcd4d9d3523d322c6c76088ac73405503df868213f2b5636bbd520ab00664da2d0ca6ee4a7783ad330f146bbe77569b3c1441e0f80c1bcaf10f810f84ca5acae58a49b8893c2bc68d8c5f6723baf970fd322a8125899619ac4d535f6d4bd5361227ceb49b7c37f75a53a4838e869e7b1f3d1f375f5de80fd2b3a8fd4b5d8398ba7846574e75b75f285dfee0080f741377c0c707fd8e72440716e6cdde0a385c5dd4d3b5fc905ccf9c63a7463896fe64ea76eba8e5767ed3364f63f62c8752123142ff42d5af1d39fb36527cb3f07e175d139ff300c5fbc13aac8e988650ec3d6749ab0d4369e2c413fd2a598acfcdf57822d7a321bdcb08d4af5712fe10a2e3ae7c760b17b1c945048796b6d7243cf95f47eda3ea3cdd3e572fad28625aa31b4ec2502230e3802f2fc1b91a8b7e2aeaef21d6b0b31e47871d651faca5cb98de369be3dd97b26a78fadbed63abc88f832d911a4a034d59811125aa7b1c98b51994ee08f4b76ff09db4515310a38db1fd7151e9b06ea24e38e3f32f352d8a1ad7b59822816f641c4a4435dc994a87564d63e5fbe82257ec81ca4813bb85cda4065930b43462721f106b3ffaee386d1dccc6a946a5769399e59b4c2d300b1b759277fec9c77ce12839ee0677b9736c1aa256b1678845d20518415c3a7ae13fb7ee5741e9dc5564b1d8216dcd10951923b64217eb2538183429bd82cffefbc16a1f7249e2d70d379e356fc1845a46fde2640acbab8e11553e4bd47fd979218b343a24f79cb28b33ff14749996609bb23e79b0dce6e21580d40f3dd88e172471c67fef4de1c41bf9ddacdc0a1b46c0d330954f5db605e4b44548f23b2ee67166faadc1936d73aa44546e93d4cd8cd301147d62a58e10f5e6ffb9c1764af2cfdc6ec1d0ca9da2248bc9f051bd2e059f7b53349367a50ada1c650eb4b41f3b88a76fd17aaf20400ee76ab6678a9b0293bb236f32d8373c9cb3027c7702216f082e58164b106c3ba098816060b3bd373b4adfa762392de2ab7d493379be41fae57ecaf245aba7118fcd171e0c0ddff2b3435bce3edb88097a7c1cce3eabea67c4bcfb64cd01198cf7a4abfa72689ea4165b9d716025d5ebb6f2425ef4481f4451ab33b0ade0a77a867247227ef7718c91a2573ccf150b5918da5559f989f5b882b288d8f6807f1fe5dce295a3eb03f6614075900087643e1ef386aa21d9f6228d50a36525ebc12aee95653bac484e6eba022b504afc64391cf17ca7c3fe30699e5f94b832eeebc637559f3fad3c1dd98b4466f493621b695eaa9a6a101d632779c5cd7e8efa335cd9bb165bfc6407fdbd2fc642b185fa411d7cbc0c7663822b122b619951b0fc843c60d14c0f02ffca1a7e7672621f41bf8a79e66367ec631f62051f83f9f5daa85fc5179a925d607466992590f1d7ccc2cacdd98a1f557c5ecab536d1b9fb6b6432d5ff460389b12631e6ddd5517c45638f961a7f91af80d837fa20b83cf4c1db95006a190d3c3584d4df7622ebd2d68fbf8af8ad0855571d109bdba028738c06f348385ab0e9f44c200ec029ce9c89fb4157b4fe88798d7d9335175b8982d9922f2d51a781f2f217087a3c66643dc35b9c0112caed19b1fff791e2807fc4cf0d38a900beb82ccb1c5ef0e71656b944e10e51ac8ca5e36922085788559022c97a794ea368133ada920be3be2a2da62c934dc201ae481ae629b229beca990f2158919e6f2f8bda4d30fadbae121b6aec10b5c3e9e40329cde1aca36b1e1bcee039535ff1be40faff10e861e6d1ab7257453f012e7b7d702f6e9661fd98b421f9e9186a429c0001645a540fb7a3282dce40bf0066ebd038217454cacc32bf97ff84c6a512e3da1859356e7c77d2eebd17481460eb807c6e7c6c4f38e34f56abdf0d15c618d20738a555640b27ddc99a40e7997e7700e483b50723d7c54c16793d0b2269a3e346f14a69e548596c5f78a98844609a8ca3794c0ce9fea4514fdaba4595790e7469e3df5d629a6783d6f6ac83f1b6e187191926d775f1068601da4ca9c4815597029aabe575d31bdb7abc0685ac401da63b32bc772106deb79b774a4a498bc5221f933c3b871d4a52d4feefa9b6ca82b6c6e28f1bad3737d2ce478ba8a42fa77fad55c8e2e55f2e7a23ac8a1db89484861289231346ee10aec61d35c134590a2fc134c6443c67d840de0372c937404815c0fe86f03daaa89e81b02d7eab0ce1810a2915f7d1174566b36d3687f8ca465c7fe09db7cfaeef47ce94d1ca9cba0187aed5fc28ab2ba99a06f107306de5f7575e48ec777acb47bd3826d2daff0ddcd46634d67c543ea25423754f08cd80809498df61b4972ab1e31672de47fbdf249db0297e87fa3480b9112f667b3060141550222c7d5ae9c72a25bc6c0fa6cd405f90f9c2cb3ce28faaed56b7b34b74685c3ae881c42c2f81ac15f4030d2a36e9ece18961e19ef3df2b7c50121ca8b3640ed4836febb3a4801c59a8efc44119c4a4539b32d2d42abb010a8e7633dc60ec5b8ba5ce4875b4a354703710be931fbb2e5f41a9ec63b3084abaf3c2a38a821bf3cea8ae4b97bb324508f1ff02560dbfb96ff43e9dea3d3fe378d8cec5dbcc971f88310d4fb880840ff99aef093e6756f0e6b10333840f22524b5c041384bdf3c788686dbbb36cb776ae275052cbb03e7e5531046ba90f9992fdefde3eb96c669681a3ebd17d852413f66740d5b32897045425e5ba65e25610a09647e13c86fbe8bfeed94e5429f86cfed4576ec00c30ead54baf25da90fc6b58fc2a0b1aa3597faa6ef0c0e1118f4f124c46028fe9b5eab90a39fac3adc02205d803cd930cdf4ae1204fea63bd60914e4b21364e4c1a3f5038c6126fdb2f6e3c2205d580beb214b5a4b7bfe3fef8f10e62dcd85509c7675fc4553aec671720509caf17d61bb5966d3fac4743497dd44adf01520152374988eec60f0cc1e2aeb8255461477a97ef961cfa538fbad100fb264fd984ab4e4af2d18268ab7c249ff71523ae6d2d590a67a732335d60ca03f2c7aba0e11f9be8922b2177304f36c97558c9d00efbe733de571381d2b8b966471cff6ee76deb1034ec3c9fc6c972fc42a264556807d75d79c518a2febc5899f08c023a1cfaa8ec4f82888b3a7db9e8732f0ebfc23881690e3cd9452abf3dce90a6394b6dd103f88fe45e3e610a02be1aad397e91ea7531e1377fd0a808fff28ed3834ea6b8a76670074de3c2d91fd334a3c31d8428966ae8ff6a4bd194fe4420494f6e96ed87034431f969b075a62ac637d0bf6379452395f0a866fdee9a1ce3787f8780ab66190c187ee7c0affeeb9a9e506dc77bb4e09b700fafc1a4ab25b9dd2e80b244e821f5e61ff50727350b64cf5031ecf2f0e1a6032c478d68579b9a484a4c13dd59aa0f86f0e7d64091096b5c0714250c96debaeb80b3e67ee672246280cfadda59c5dd59dbf46906465872c3d3ff139fa2ca041be2faa27f0a4a5a80421daf869799ca8fdec5212a1c7e0f7499b7230547154d96120b3735ed3be0f64955e0bf051d42e2d3f688ed3de08090cc8c05fee409bbbefb3042a4302c729751c5653934e39c63d8d496f9168e54917bec34284baacf40d54d001006ed365b72c822c785711233d5ad35f949cb104b139983e0543c5fce6c358ceb1e305c3ffa50c8648d90b670f1c137789ef43c4d38d54db97e713a807230715be6c605d2befa4931033a61f924d62131bea06210d60f47df5b551ee5e6f3f435c9521270d86246b82dc42eb4ce80da0bc3d3262490da5130dcb34bb06a651c919842d6415c5a8eaaa626082b9843593c0696a787edf5a9971963e5132a42e5f7b55ae5398ba5047a7692bd7ad00c58a1caf2ad8a4cab23d2241192df3ce0d61061ee71c698d01a26ee0863a2f09bee508a97b69d78405910ce3cdb81c5dc8d76fde59a67161c1787d52b28865fb1d6b8fde04c5c26a036fbbb872ece6e7889a2c613d75ca8b59f69a323290a7f764e1d4126cdedb9267202414e2a0f0ae40b0bdf7faa7e9c988bb132350af86c4abe75f5ca2ed8f564c0187b9995783d93db1c49d9c663fbe83895614a20f47c1b908705210f31321a51fd9d93caa60a8a6db28c87ffe16dd6bbf4d1aac37fdf64d0b0da771b97116d3dc4a86de6805dc170df0a2a6377a35f9d886ec312e4619b11f2d871d16a4690cff6e6bb5c3bb2f8e64819fd5a108ba8fd65c32e5baa8abbc2bf35603dc0e5f4a70365570d777ca39b8579ffdf0c83951a208df5b0c5191c10a78c2991f41683633b684ed71550c099c03a788732c8e0c63023a9f2945f4c86bfceb5547f115402a4a7d5b14bb6621ccd68637691f70ca3ac1c34fc27dc377065c543c73866d5ee1e1f3f98fa5b2e4d0e9ab9d16a3ac592e8bb3ee593d17ada03514a78b20d4cfea5997b30c7872b8454974f34608d0bd1f6e6327d9bfeb935669cbcb8b62ddb692f76f0c031b99a7e3f344310f08d0fd4c96d4dcb6810db48a5784aa56284b4540f5fe358fe5ee5d77d2ad7308b29663acc00866a0aa07e2e5cc1e1f9214039b2904492bd6be1731ebd9aa4376255a92f25fd33a8a3dfa21c5b407b446ec758a36d5ef49b6685b37bc1c2e5659f6445dbc6d2658074115ea452182a6c92c9e9b2f5feeac541b6af6074a0622cb597f60a3dffce645c0e08e9a91e5d34255ff8b789e12c003a605e8da55e9d44d0ef8989b38d420a5a61f86e348fd21e3c5b1f9356ec8668c6c01b37fe538e02508f58cec9eb5881671c04b4941610a7c49fd0878d2ffd30ee16ed3a51d5c03e6c1e6fdc9e3a93ca030afac87f86db395f98540cb25817c0750fbd323cca44722a3a78b993fc90a07ca09761ce3b1945aa4552195761f0368289a1c657c4ae4e56b29807c86f660d8caa44ac0adabdc0a07389563a4ea5d535d710811baeaf5b22e32d62a5e3d4ba1e41aecdd98ff95e0f04aa182969a54e18042d53bd193eff327f09e8279b4f3fd6f5c6a0d70f16af4b307bc91df6c334b580d8fd56509ab1e3924dd17a12a37e3412c38ad1e8f2df6e835479749ad3622016b8d85d30f10ab1560f039672bf98b73b1f33b0d257bd70deaf8a2b025bd12203b7ecfaad1ffd7100ade4d17a752fdc2e417013af5a01df3be3bb1ce4c017370b7b9175f9a4e141ec4480f52e5d16c393f3251d1ef9f18be945a19ebac04ad730b273f55a0384867e8c929808d2fe314204d35dff0cf99445d67f1d2926769dac2fa54d4e9dcef92772a873c104b877a09b2a21d70496ffbdb2e07b46c50e8268df21f42f049b9b002e470d21533359da27467b3ead5fd16568e57cf234ea265a785af3d39ba9770f2559b0d3ce1e3851d71b927df0a2a96a27ec8336047fecdcbfec8b466c364e9960c47ad747404d9795f38ef67b85f71dbe456e39f9c3db961637af82734158e76c813431750c156dcbbd58ed35068c32198cd500dcbc7e71d6cba60ba37fef3e309ad783f958bcf47e081a077091c2672699047e8f0aa79e5d2a670b888fb1106f81a13431aa13e67158115bffcb94cc504095fa2e256653570f5f79e9363d32de0bfb7758e4c6c041d4766c5d342c2ea224507ada7695f6c42d4ee4df7059d4757878bc526f115988b975c51b3a31ee2cf308e9d5216dd9dca78558489c09bfbb4b4d82b2256226d2547577fc831c8b718154244ac1c425d0487199a48513f9dc81d03cf635aa9b106d80094ac28bda33e6a11f9a57122f93295fee86addd25df35368acca2a70512e14e42bd021c916b94aa1fb2f5e801387e4393503fbd8c416c9c0561dc7f0edcd83e2ec8c3b006e5b1e719aad8972dfbc7ecf01bdc55682e606cf9abb1bb8ea400c8f45a8304b4b9d80f44c2a247891549d9713c12d5d127c8843287052383b14cfef6e94294111ca095eec495cbc1a9905f0b49f6ae8c1d0c29e0caeeceb0f5040d2f2b1a7f115eeee2cf8cb452673a688c939c66798dcb8425cd691ba3e94b3f79e84b72221ed8ba93cc41cd521ee3bc65d8c277ef0984566bbfa86a8d97939a04189b406fa174f76199cbcb3bd6c7ad27790092376c0b5dc659e9328e3076b8452ec164d56432bb22afc185989576bf29abdd2345bbc40db0deb126d10604706f7d37a03b6a8b2cdb23b42a5f49a2e3adeca6b866aa5bddc48d815524ba7a0d30da01e2d08d655fe53558c5b2d24752c2d75b982a21d6af9d115aa3341724c999c2d397ec725e361fdfb9cd5bd38705fddc175fe2442e4f1e2077a6d4b02a9a8cc11089cdad7c5b6af55189633dfee5c05d6ab12a7cdac70a5099b3639a8f29159c59cea2343e724d11501114c3ec29b098599b1f3d2bb9fc150116f858f138f4c6f358f9ed72e8d52922eb68b3bdc691af838562fbefbd9987cb188a8f219e99dc24292e0303cdb807f86b3c2702ac0a0594ea9ae7d260e4812568bc9e7ab02441b366f962d71b2b5b507347c199dc3e3330ebda6579c9441eb9dd185635f2e38bf512d59a6da4f74b4c26624234054ae5a644ebdad604f9df26a51e870542bc2e66d437bc9d461a52ab83d12d4cdcc716e4b14b6c9c161b972895a13f6bce43c086e96f29dcf4a9de113dac8c5f5d9ebb8944229f7aba636d916ef02f45cb9a37af57e31b0263648598de8b382bd90237a45fdac6e09b6e99394451cc8fb15f8b6a99c9cb9a5b19218111e9dc3c659ba261f2470e713af919c2ef2f2f50f35065aeed83324b00dd32efd4bff32bb1878e8e0a4513c3e1e4792034ae1c8dc3ddafa15a4676ada3184324755ab69af6c9dd27a80b5ffa795bfc701db13d810d49215fa25ecb874b136cc2e2342d7e8aa4b2bb1a7694ae79552c1325a1bbeb03233574bb8f14fbd1a03f85644e46c7da1acbccecd2dec338fd0ce61ecb71aa39c80ed6105eac27d6ea5f54603329b34ac9b9e9307ff098a1afc2ce314fb817dec6ba53f6fcfdea19381ff1b9e8d046d66a759525abcbd23772f76f98409ce0537bd3eecf4ea38ffe0b966fa6ae4bd13888e98a0f81687cf9726d8f80a25beedcb1efab2efa417f382c12e27415b5842957facc160333f1a8b1fa4d7da6e1c2a4a0a835cf5c97e6d2d5ec70015c638524a8d36ef1bf1728c577950374304d5c96aa8273b1034644d018cd2928961ec06bf368f58133ee9a2aaeda72bf191665a6b6894b39dda5c995ea5d95969769ac0d9e0355624c553240989387ae013d55dc071e4745e01cc329b19b5bcbb03bfbcacbde673c89358fdbfe62f2e76d47e6c855d379ca62e75749b8726df5d018b33f29482f90f370fc161222c66b771222eb528252a98a405b1105f19f6820fbd399b048f0309e5c182fb35f15acb99d11fe1dd0ecfd4b19730d040e2cc1ea6760f55082efcbf4883f9cb4c52812c1ce675643a830223fa7929d9facd35816b4acfc400ea89f8094d11350f87e07c4720e86d464e496ed3f873fed1003d7070d45c9fa2befe0964aff857e9a36842df11614107835e5d443f594b9adfc89d495c1e8f1d03056ea7137326711fe1af0fa179153cce6b2d33f71289e70d50fd911433cd401e0e8106a97d7ed18eeaba9ea8fc47ead11418740ce8e31a8595d94c3f40907e237973c66fdbe435d7818026df70095f5fc27fec204152087815ef037e55df405a7a05642a68bd89a27553bd7a5676a4c161b585e62c04efe38a2ddf143d1a6278e63b05ce950adb881000233f1b04fc890a636e423c14d062e1cb45343c9cf1a36b1713670377de4611d8f283b261e65e12955b4df30537834c6ed604e6df0af60452a79cf8f1b1eea4e9d3abf7915aad3c4378652afc35ace51a2017f9d9374ca54911538b618c8cc844bbce1269c6232bee59f9d844af251a7cc0ccfaef6cab67416cd2265cee91af20c1f7f09fea6f0d382f5293ef69d28ab219c2d359c597cb0a0150690bafe0614a6e48375bdfe5544497189f9f7e90931f54e9bc3e32e4aab13b685f1b7813b55459bc050b957d531e931ce0eef1da61696b32c413e7dd3cd2788490b005fc7f7b822390e98dfb8fdaf264c169f55ce2a9b637db1bca4e73c531bf128be6300e3bec08e938b81a4c9063e7102d2919cd0550a251136e1792bde90d23de60db07ddaf40541c4ab7672246a31fe4052bca66855eeb63ca9c573509d5645dd9bcf702e61c7b34bd522e2650fe5b990a29d4a6e29e1e23a269ac891d8f2ae141eff0cc67faf938e8391c451f89e76e9547cbb9cfc6af53b3bf8bcf96b6227bc9dcd15167c56b0088c7a611b9ef80914de3f9c11e51147f1abb04d5d3b2a034352e6d7af3c97b4d15361f0d9e54ec095f8e856f9f340bfac94caf62fbf2d2bdd227c58273bd92edcf80c79ba729b34ffb696dac27b4c0cbcd20dff95ff167c68c8301a7cffeaa829e2a3f0392bbdcd3a9165910a287d151fb639b08dd5357ae854a3bd07236e8c98a2581aca9d3d0c9bce72d47f9cdb72d7a1e1a5c4149231c4fbf9a0d202544f45367a4be1bb3b3279f97e1ac75db4cb535f68d0816e5c033131638e6e90edc52682fb09048e955eabd73d77eeab014baf40fdb1479cd6a6b906ed5740b3359e80f7123b5ab5e08ed5b18e3e80ab5675ab376c97b97845087ae757459169580625690c290f02eb46b266efb018f02d80d60ef405bb152eb5b99289ce77e520af155c66d26d523dbb6a28548145a8e04bc8be385250bf056e72c3782da53f3088856baecb76dec385bd3706f700eac873dce9a4031d33f7ac8e61d9d6f17f0bfa9feafe573e6e830bd415c51715ffa3222dac0fc770d7e1716f0acdacb55b0b2aad274416d1081204a4febcbd658ae05079f3b671e3c9fd3b488e420ce6bf8b157b01b04cb9e1a0ef3925b621b5191a190ee2c54461fec3a7617c36159b4b452defeefe16bf04a8804f4c068cc71500cd2fa5cd9694d520b6e8f70340ee72a9e1e042519fd2bbba8ae4cf7dff12866a5a81217a85c29c1415727f74f98783053e27d185d21ee04faa11b4b8b72110cb10a16845237eeba0925668710a2da63259ff8002abf31ba8d811316a7b560165af72a4f1404d05c9f3affcc6b3cb22d1e0ef4df3ade11bb61da7f9603be21ecbf2cf6a32ca556a9afaadd68caa662d7296ce8a93351bc50fa6e635f04d1b3a6ea086aa327b31c4bfbcc0be84761672d8cc0e65988dafbfc2203839ea31d7995c498d638549475a778c7c905a098e8bbab590c1bf94deee4ce447466c9325a7e8e7940f3ad5e39a2e0bf96cbe9c2cc2314ca344fdaeeacd3f5dbcdb7b52d74fde734f2c17b3f402eba5b18a81b81b13b4c58e93c1397d605beb4a16d6a1f72ad970c1557aca30384f71b81031dff528301a1b7eb7dd177d58696bc3449611a544683aa81469deaf5fe87cf7e0d5096cf1c7992fc89387472d1fcc41958dbaf98f8337ca1836769eb3caa42c0fb764b9137e350cdc359767119e9f82e3232785d8817bc02fd18e62f4275c406a46d6d74f652d22c36a61a1752a99ef298ab0b8355f38347e9eb8510757294c0759455277a0217a81223dbe239432836cecff4f272e39ff2bacd2c95df3ec6919e76f4a3c9303935e346b7821c29ac908465e007249ba4955b11ed1f438a6ae0810a905b1465c57d3d7050b70c5e02a24f43b97f9414c2dae294aba841ff4da539bd878e0faaebf03619d18ffd6dc4aaa975aee5d48bbf8ec6155b4671f6dfddbb6b01a239ba4a8ab9f8a71ada003e0d91eed46bc86efcd35355cfa371729c872e5e10033b04d30de7fad32b7094a7b0308d77fb4fa972ba0559aa52d59859cf20571dc5e43e6d9c4b6ed93bca582093ceaabb7299d7d394d75ce35ce8c036f7b5451e94f32b3ed8798496885791dc0d7c3c890f2126822515860404818d227ecc12f3a877073037823efe7b78cff5ff7961da936be38df134300510860f3882c5ca41e67802e04af424e479f012aa0c80d502294e3b81841dbe06ef6118c81c88ad6550a03ea946cb8d574a89d7b24db282c3f2c96e86cbddab4e0b946e1b20667531ef7c40fc32dbc105f47fded31cf1431a17d1e78734aaa461e36eb211c23f04c60f5aee70f136263df2fa8837f42ae8f9cb5b15506c5d0d2f8ad93bfefe2307682510b913a050166f69abee5b0b034007aed1a86a6e9ae587cf0033083304309125622bd79251979b565f3992fb05e2edece759142a2201eb55b34b0ab62b4217d2973e92f44fff4d6f37d6f0d5b40706112988a48bc81e9b7c7a52ae147a82793a7624552887072d8f079b3e2be867d3f6871172ab61577450333374a2d86b7b1fd4471a130f9accb10cd5e5fcd6be3990fec33ff7a7e11774389ef16fff11da532ffea1d4339c73fff420abfdeb5cc0648bce8e1780e5a03c163046c71f4db83f069302bf41b2b036c041f4e00ccd120f0b5ec683ccccfbcbe5dd928fbc6b6de0fd4f98d66e9080ac1463ea8be57bf81f90efcbc8147d3d2f99ff311410086a39a0b3dc75c993855b760c39e7f91d93ae85c9ec373358db3575067c93067e117a1876d6ff55f37e93cd5e9466d81ce76a6cada9c692640f0192715ad5671596b4e141b4a04017e1ef2a88ee6c59e9fa5296903e3b37dc83920f3217b2f6ccb11dc470ea4c0d6b03d9220a7ea2d7dc675565a1c86439c4221f3b43ffe55505e18a539fcb3b5b54e21b3a583d5392b5eb0e82a325898853ab8cd5c1deea5060c159e0ed6df1abfc246481aa0a7fb419c8ceb0cf5aae8a045be7a85b946f82dfa3945fd265e300f15af8a6c4679991ef087c3b5b55761b641d8725e9fea6c8dc2f4f037ba808895c9a4dabceed1ea9837a50c4baa0ab99ec1083e850a00094e8351c2a3a9e32ba852f92adc2d03cfba2b1ad8ce1c6c2e9ddc78f8b5f68d9d466d81c82f61759f348b42f63ad3cbdf672ac3396d1049338d320971632ec04d93864b544c2b31fafbc33733185c21b2ba65adc574561f351adcca1d9cd1fba81866dab67b9833ba983cfd421b2a8045c152252846050d55bebb9c99197c407fc4debaf1ffeee61eb681e4cc11315748881cd240d440f2c72b5d90d25ad78b30036be7b62ba0d529622862167137b2712708a0796bc8df5bb9b2043b38fbecd1cabb2141a0c0a29cdacf2e5af41d521864199ad5f6caecd31766006a46707ba5a9d207cafcb2dbb966b1f1bfa5a6c784f1c5f975edaea481b6275421664bdda98afdbc0bc50d2c108f24942b89e18dfbab398757c2747c4f4ebe3f8a92f5540a4acaba72edeeb96bc0352c8d322dbc57b0891389c648fbce4ec454b02c0bbcbea133ccbc92004604a163b5c1679e7fe1d39ef4640267eac4c27b35ea04648ef0030de334af38e8f2cd3f55d94137d34b5cc776c55c6aae5831c9c807ef6089ec01a86d634ad2f62e5a760833a39db68ef9670e02151400b7b30faae992df36f8c2037297cdde80a5f433e449c604d5d25aecd1451ccb993c4fab807d1034998f03d0f308a3292a577b9e971dcf5ac619c58d10d0fcef4ae7dcfd8b434c63f656526837694c10f0362545c38c011de1b843a7cc16da2d14366f0f7d989ccb76e764d112f9aa3d05ef32a38a0556d6bc5a2a3cb4af271eeaf6ed8df634a976f3db38d52853608d06367fe3182d5b32d0fbabacb8f2c537f5ef1319319f820e63d68597fd3287fd8df3023be9c6a7e1f88848f76736227047da18aac3f743d4fd5bb130e2dca0f99145abc72412e2535f73fde27aaa7c0f6b763a3ecc1689faf3a973f5debcba05d2e42ae6609fffe9c954467150cf0970e6a23b16e9d1a371e8701d73e22013cb4a80a7fefc43d4bead203e243696550b3b5941e08acb5830c9e24d135c714d5795e9b0baa2a26938896f31aec3f31199e35e5f942f00ae6c511d40295d5039eb352d4433171878d9c38029d93b43432c45d6309f402dec628deb52637d3f979048f5d607eae40b7119dddd614cf2ba001c7902a9b93699b084e9691abbdfecc96c795ad290f903705466ef9871c9a038d335077bdb478071b900a08b1459851cfd24348790733f6823b25805b5d78ef423cd47fbe84cd68e469d17440e84b72ce05d23e70a713741e47146d32d3c2f9f416546c2ccb0b348ac82dbfcda5788478c64dbccffc9398270ad6a9df00d57286f013c7e02c1ba246d185be9c42b08c2bb52b16826c4d0eb372b5f489de5ef6bf14817c2e47f39617c38712e946c0c6a224ac0276317bdc7871970640255def53be067ab2013df8f0a4483cb365235f19a35c452aaa89a95ddff8ecc804edd4721a50bf9a0509eb17dfc2d4ce6267312d2b6caafaaab487e5fb4c3e2fb56ca64e233f21aba3850b2e81e9e2c05dd4792b88eee06572b9b4f84ea40af3fb3ca35c6d28a2e4247ddadffbc0efdccc57a36f17f97666fe4ffb9bf5d8210b678faf1843fedd12faf7f3d48b54b76b1a6e1635d4ed7d3b4a30bf316ea3766461ac41bab9a807159d81253396699bb2a6e5e605876daf6f415d53a1d26b8ad3812470317655e448d0e374cb4cc6593e7463389002da795a97f70f1439f597aa331ef47cbc7090be7f69c45da41777950567b233560a34c7b4dc4a5b546c050ef29e098d754ab563271301eb95a4e6ed4dc60f096009f6c0045c3dda4e7100a527d95df9c3637644c261c904a4b772bd21b7e329d0eff38c814cdf0f765506a20582ca23002f21d2f8752b82f87eee0ae3bf6501204adb6b537f0c04def5b071ab21b49174b0080cd6701e4ccf3ad3b1da4772eb933b8412e8b466f071d2e0fda8cc6c9f154cba1353baad83e39e1765f51d68df3a5b196857d6b9e9bbce5699228d26e9d23352eefb5165c7922fbc25d33d2ffbe0c97a50063f8b2c43b7ded9ae64907b0005532c63aed914e45acbf8d6248741fbb570f03225e034e6fdf3802e3356feb187eca7367bf49d70260b06eb9f2127cea9ef7f98d97f3e85aa1e6207e364de58e8edd04f1e5d126ac1b6553afb1db88c1e3c8aee16e603375cfc7762f8423cb4b1d242daf3e8aaa8b53cf63ee98e5e23005bf462194ce905acc85b18809f2ef73e099add1f4f46dc2318e0c804b24ca719a8c603fd55c69bf676056098261b4258de4ddd2ae9601755fb9620dd8b3a797f568cd719260285316ce0d0ea16a11ac74a98247518aa610465e8ee3cb104bc49ccfae27814e822089c94609cae2f59f5b7310c0093e54f002080c0f13d5322a3927fc56135c80d1de1f6c7c63d1630428166d550d0cd63f9ed74d79977af6d89b8054fc3692d1216431a199e5fe2cc4ea2e486f350897d81354c997166c0da4a484d8cce8283bcf877cd12dae373d96d3f159233246f156ba9cf53e9cda5ac3258f5cde03dad11f2edef46632615adf5965f216f2bf2fa3ed31a120a60c4fb08603d0226f445e5f0c0ea9f8a4481a1750b5d6e092ab3987f2dca0e01972affd959fc68c41a48a23809c154c9e3ce5f453a5753e3a635f91ba01fb3c0f996724a2fc7db2fb19445b499073a2f663ff1b716670182c601bbcb450af70a1b0761e7102f20a0d4c3f837505153eef1e2a57bcecd93ca8ccd4ef81f635d7836d2770266aa94a5dea30cc9bcf4019e04bf9bf8147cd8424f0231bb49fc9b98feb4871fe73a5c29e1b156742d4615d479739ac65bfe7e59ab09292680a7abf958b18f7d2f5b6593c4a752263f5076c322adcfab6c02e298392006fb55880bde80fe85e920feeb4de7c227a974ee08c3d1b262ba84f55b879137fb3e3ec6ae9a9380903d3f7634b25933aa71d687015a557270ff30a107898dd2a6031ee41b16f9c43a0451ffa31a3d9c50c568d2374af8784e70da42c608798c81643afb2cc7bfbe811cdbe497252a67e03b95c5016009af9bf6e91fb351222e4b6576bc3419f935ba32fc7a021c16690544b13332a5e748b911129ee8dec784d9b6f68ff207c1160559b5b5769b4b12bdd0389a02fbf6931b22f25dfb5e512d1730f70051ddc46ebaf9de8be44c9a060c61fccc77ccbe8e35a583fe8bdee3dd02109134b05f4736ff45a25ff09b46891cdc2bf2aeda2c10a2f68cfd380b711fd733e5ed745f6378b0bb6f8e21dd90a72aa2d49c308f22d4454aea7ed9b2cbf4d2f0f78c6b67e3cdb79a8295dbe19a46e818180bf51ad2054aa2e16914af40439e0147c9e1d427152d37848b0fbd32fb6bc6025b862ce2614963e2d8e87c471aa1a4c9de60173624ad5d38297b4cbf2bd7f34542a71d17e339c3f46294625a5e689051250f7d575e0e52ea011e701399c23a893bc5e7cd8d50327dde95574d71d4410faae69287d4448dd235f26b6676812c08bef8c835afafc54699808c3721e1b60cde96e0655fe7b6847a9ee8a7b908cefac1a559cb51347a079ba9b060dc462ba330f64483b144271a2340402e9af2860d0d17074eee3c58b007caab0fa3bef8aacd19f9c74411b079d01ded5e037859d87e1b661ee4b266d1ea56c516a914be52fc065d7ce567e7402454efb4285d6965587c88ad876963b7f16693f4a55087b319c7743fe515f6b1b9b11a9c18f27ed247973f508f27b11cf7c2c9bc16078981d7a34c0d5e4d3f58e4d6974edf8c86cb2f53d497aff500f2230343d33468f7de1251a6c8e8467fac7d891802139e7fa587801d2c89c124b109adc0dd19735b4522cc492a9e498c611952406ba636eff37b5dbe5461eb5a68ec5d063399b67247ec3efb229677b242e883d1983b5db54d88d8113f261d57822031e856a3a45acbe1cf1614cb2a63461e8ddd12d7e2320a001ecf15ac6d7daf528f1a8797a305c223fc56af3d3f6f9d1febef0a327d88fdbda5d09f5c247ae0e161e3aa9060994751dad0178ca19646b21d98165a1a78fcc13d970f0bbbbeb45f545d43663a866d60cda05237dfbf67c7807107e4ed1e286aec7bfc673f6a70c2a2cba70d65b0fa1c2a9d73d751ca2a7e249d722164bfa6a0c12b41b2f9fc9141caab68a8dbc6dd725213fcd794b533a07b686472e2f2833e5e9b77e9fe7f0903437c7271611db37320a417bbb30ad3c8ffec403a676ed2e87f7a1bb85dbcfbbd7d2bca732eb848853e45a3bab617972b82f05ec6ae974f82f19ab7dbc274f882e9df430bddecd9a662f322f2600556eae17a4e9eb2684b27b75e128ce4f873bddee033aceea72fcf68176c94ae54efd362df6d2f1835abc9cc73a5ff72cf9d7789b4c9e4df91a20f3fe19da2352c252086e0b0b6190881a3878464bfcb3d38d114d17f5c493c18c3139aa96bd8a40ff328e203b24de4a4228bd46542fe644b1007b4ea77a1e562afc444f1dfd3a2c39f88cc1698a2e9c847ef9a113669615e86f32249cde5687f17bb60ff0f45d76591ee4246872710e0829c84e6db60f4e967ad56bef3e07abd3ff4d152e7da68e7c5631381649918f2fd498f476927337855edc1902c900424f26f2c0486440c759507547ad604765090067f1344a2c8beb87f7a6e5dd66872fd4df97c17ce74ef59e5f91336f5b5abb4beaf7f5760c325402aa19517e9b30bf00990bd04a6c9d9badd99ba586a0afddd44675ef6c6fd71f1c94920d8ad26e70b154970b84bc8183d8c84278c6fdafa703de961ebcf35af61e36cedd870095669ba1a73db5b321ebf6b4999793a65ec31d2fa6f6a4276c64a3c9bddd9cb2eae37de38ab606329002cf1eeeb45b88164c1ae5c084164899415bd07aaff6fcd22186d99474062708b95ee0fa9d6595c8bab98c17adc4c0d5ab1099904053c4b9bde98e74f2ffe68f8882bf1936310cf1ef47896c78ddf2d4ed8927d1b17684f2c5409a575234dd7b4f4f3d12a8c6322a9c55a861d2161bc15d82e927877399a2f0f9b41963239ad326709e0a2fc602f70a1d8e706eb161fd6419204ad8a2b5a3fb75ee128f5bd1141cfcce9b5448aff68696f106a66c61d6a4f8d126f1eecb9e231e7ef8ce331461f6ba31f4cb73e8a05869dfe29b069cef0a9c1c8e484c545ca48a5707d116bc4e3cfb1520a721830c9dd01962e64ffbb22ea3e229d1349731f22b26983957652fec8f080d7626918e1b490b833826d63e6b3ff20191b8510525e0cb2dcabc55b975e6e82870de18bc98d4b2639b455b1b88191657cd58fb531eb70fe5194eb8656be3f37a2312b483d121f2c7570ebd0229e3de11df78941c81a7bab08eda44fbfd33fcaecb7f520c1fb847f310eddb5d7cf7f99fbadee5401a160658fc332e2b824d0de5ada1aa743f1f06644174d5cc6e11366fd8b9d1789ac5b9523235782635f7f9a8edd54aa82e0e7f68d454023a30aea585a10918e7521b7516140ad0dd374c60fe608b94f188efa7a64057cb70f7c9fcbc2693607a9e34678371c86ea885f33f22877053a4e8a210e4c97f4e7c260e61ac961d47049283a422d06ba69a6e651e419e8dd4653848dcdf9e137dc21d3b7ac8da6a8dfa65f944357361d997b85583478b7cddc52da15d2bd31dc1406aa5cd997e8405b1ab20106f9ce4a2c146228fc8ea3f9077b0131ca9232d1ed70ab5ebc853410287556d5cca728ed9fffd837db1b37f304fd5d0f62950fbc06c09caa1371fcb1f7694637cb08be807688af60638b209f25cf7938c1e793c91dca14bbd58c53130a1231a3b5fa8717cee61e4be4a2001c83ae220a94437bba0e2057c188b2013ae983707af363debd17ae17ef1c84398dbd16ab74a7b3d0be60b5383f0028e1f097c201d3e897e82bc2bd7f69932a2d1f03395f6faeda3dba0186515359cb1912e10936602f089e4589c32496b0ebfeaaaa0b94d41164d52702a5093fe06c7c850d7cf5af138f6cb9a2084d77ded71a5f88235d1443ebb1eac0dbe56486954ce0e21e0ebfccf9979770b57b6cdaf6433d3acc98cd7515031b794213007f0f1696b00f63bde77a56c3cd81e250916982a38b21bde3c32698c0fcbc43b512239ac6612c123d157fb3ba5c9108ee0054a7ea396291273a4c08ae49ae3c8479c6d5547debaca54c1d776d19120474eec6ebccaa2abfcf25bca64c3070d796669872fd51c3be334fc0ea297736df42d1d2bb5782f1030a3dece0e9c23f87cc769697db127414769f8842919a8cc469fb73fa6bb9b8eb6c270af96aa64712e9456840797fcb708f58f5cf38b81c16040a669c912f4083aac2660c612f737aa690c3de4faad07793b22bd689469d476534f0025ae6b3144d2f8e82839cf5a90fde44738f179fca8b4041dd34fb423bd4b63c83c50a16235f54e404dcad88682a27fff8c16e498ede0dc6725d420a46bb66aff82a6532db7c5da0fee774c2737e186eacb6f558f905722fd779a01cbf93051f03f83081ded99f1bfd8de2ba8822e8d7d23935352c2bc8fee6c5e540040743b74c091d0a69da83f5630787ce582d17ecba586dd59bf0be30fb3ce3f79a662272a72447ef7d5c49b649497af6148428879eba1b21241141834ac9271571a9ccd2a6238ad27a22c65c7717079997367cf1a9f8ec50789cec66baa673725ee34a9b2e8a97f3c60b59dab2cb8e14271a5df2dbaaf698476a85a60e5d39cbb69ebf6a87418c5a190f38f3a481457a4091d26a589d278dfd61e95bbe1241be7fc7958c9f53a6943d145a481d3cf9e072215236f6d26c1b949a5a1986574f33ed8015bb687d8f548f137c7367fc527b777d5a81ab7de8c2e2cc5d1986421aa0aae647a7aca4766bc3a781fc58984fe059592ee864dae3d3803ddefadcedf06a162bc43d01cdc589b3c21ae78488802851d149750baeec1cbf17b286be0d339de142726469f1314c352c57b71c2ac6c7108b82a8e48ee8feef8b7d28087f414939579c4d67aad401a31d33f71215144b45b99b3a46628e4c3854b6b6dd45745696c71ff6a7935fadc5becc0274f479a2941a20e45ccecf6ce442002f6ee2eed2cb9887f6e2e189f8532ba774a933b198273c3621eaaf6bd2ed288bf666804101eb86aff0632fff4afa84af52cb7f41002e3c316aa7c7de23d6c05b030be914c115979a9385687da45d301cc583e618cf4e3a29c83cdbb6207378579aa0ddad71fdcba3c1154215c05618d0e5061c09054a9992e59db4d1d314ce04660a6a1d39fd5e2ed02c81256792528e11559864385bf11aa74f17b08631dc6272f4b848da0e0e96215294b3c9f705bbce83fa4901a042f8515ef3368976a30a57fcf0611f873c767c76deaf27a5a5fe4accfdacf90695d9d38f053b9b2ab3a95dc3a9706ccc26b9693d89be2dff2c6455568fc37644423559356e1a90de208b54c616129bea52675fbaf95c4391513dd7f035cb972abc2e398f01cb45c285dd0ba5521012402a5abf3094f256cd25916fe180626d390e3410532d43790f771922afb1053a36f3f0b626560d3fd11affa225b49d4385e4c27dac211cdd2428b81a963e309f27da30deac4257abcb6b2f8e02243d905f12246abb0d8103ba69fa6b00ff0d2d475267af8d3b9b311d43602d1ba5e56ad65d2ce60391a780bcf8b92c60246a6d509a8db4f45622918f4695cf28f50aaa9f6fce4eebee11299d527969110bb3a6dc6e642fee3f2d2142d10676ded699e3d682c8e9389ed673140bc7840c492d5fdb738e6ebd432bb4b0c73792e90afa5544affdd4fdf204a743356a1191d4eb7946d6e8ed45e01cd2f5bf0d7d9258c6d908df060759e313fa3c68dd8493c1c7472c3e7fb5db16aef1b188fe57cc736f53f9364e18407cf4026bb25e7518cbffb96295b061757dcbe6ba27759a1e5b8088448fafe47df2bb1230372907d5025e2a74af14cc4e952ff8b3d6d11dc5f7489eb3a082ac57e8438495561deaaba9b02eb556c200541632981db7a1a5d776aaabe3a061a4e5d4c8c71bf9202d74954f49292e059ca071d32c50ce3b6bac4f9f21220c0cb04e41edbf9af18603f205ce29ad7557ba6808ea6fdfa7c913b5578de9b3801bb162aa97efa6897939a19f6a043604b8b1aa0f206c5aef1487db9d18896accbc1ef729f09734250f052193f6b0bd8c9908e7ec6d348862f805db7ccd2759915215c65b4d58d21318e7fcb7dd04abccf16c625161b8a9b90aab82be9544ab31df953d5c89795f96b0d50e908308915cf4daa673c2129f6cc13cf3f1c42f334cc31460e0a1038ef649e40362c0ed3a30c98672cc280bb498194c703db0d1490c9fcb9ca231401244d52b98f2373bfc2c4f3d330ec77145bb95fd9e9c28712a62922852cb6fa483528150c2c45de4b96dedb464db758dc7393149bb5fc4bdf938a95f8a3a95b19fa35790b95c468cac93063235c61135e5268b818ef101409d91b3383a564264ad7f047ac419d47c59c1a429b3dc07b0776e75343abc96e43a701023139fe6a5450b5ddd56857cae912bf0d8944fc21ea01b9f4d3d9ffbc05e15e381004abfb27218bdad870e8310bfaea0bdabd4ea5ba5e35846b43f5e84688c7e8271eeae05119c5e029bf73bc5389e0bc72420ec5d92543c4e36eceac8acadf2e5569e3942af997ac859897443184910f41e466dd7bc1d357ce0476f967232f7542a74049a78b4ed58237c6c5f1781b3a521902ab2af33a2db250d6da7df52c44e5a0c0ab2bb6c2d0d365b10a24ada15ac4c8da08c73cc6cd41342fec4b1136b3bed62ce4a248780038118b94a03b863524301d52bf71453ff1dc08e5b4bb350bd084b27c7fe2fd3acea9e22c1a7a3f68303e5a834252c582dea8e19f99418a26b31b035755057eee13923c33102abefa2536cb40bcb2bb6ee3901b253acff4b811235e202ca463f487f8414cd4fcc44596dba2f7d1b8237892fa91a6ca9e43b454c61f320a30bb87aa37bf561637f19c2d5662b3def6eaa4c79eef1116c327b593c22914593b94c0b995cd47620ea70df2f4e82f0b0bc3b85261525668caa3fdd1f7e9d24d5c8351557599268518ef49675a7bd89e9dd17b7a614b9e46176c1f354f1f463e41650bc6df61c798723c0a7f9522d0e302b003ddf58da86028a27a2ce2eb8c23f3f583bc710b21abb41b5fac9e043862820a8690d719606b94819543ffb6b3f7ab1c25a96ce26b57a8f4420af3c2a7cc9180b15baf513ba86f2cc4a0372ee6bd06aa51c790f2b0ad8c76742364b66974dc74ca1bc9089aea12dcb472eec3c8f8032354cc251f9626ee01e80d210ff8fc2b17f415a5c28ba0a7e44b5c956a34fe4fe2a05afc6b802e1dbe51aa0d332c24340bc358216945d34c61cf3699b373033504b6bd60b2823c50b366538a398515e20269789dbcec4f0a86db633b8808be2b493f7ccd7ba0831d6511e53b93168539481167cacb7a60fb4bdc8836f2980a8b5a18ff14ae9c6197edb41b12e562a744bca1417ac4d6b9fb18852a2f20877fe49d46074a530039326dbff34dc4c8d84ce7bb295222cbde9151e514fa13dd4e2f0a5496d0f8a2ee57abeac84809c1532eff31a237bc16b7d2d9d89b81856e8cc14402c081220cd95a24b383f3449f9ae4f5443e2d0022c8a4ac2fd4002075de8e886b880ea7413e0d2d94df2824c0e80e460e847b4ce9efd11d6d2e327be0670359cd3e08289216d2d442feb73361f2f193de23e496ecd8812fe8298cd7fb52ab7d463c17b7f415584dee485bb85134359c9570801c2867e573b3e3bba13f2e8637d94f8b00d7c29273961ec4fe0abc335caf0bd8ed9030640137a8689e69f557f8e8eec42f9da88d22a7a1cf3c2badd64662c191bd122d8a529126905ceb5c34b0bc6f3590ad2657b96442fbe25865c56e2866268ef34d0ed55131ac95c8c7c4867e3ec0805595518c3cdb5baab6dc91bea4b95c7352e81cf26b5bfdf7b601438bb3d6193f7b1415eae87ff705a5e49ffe6b3d77d207210bbe5f1451f49d5882bb994ed629234793ea83a48529b7c1963bd7e447b5122cbcad2be92383d36dbd3b7f19c21ffc69266ee8e2ff7055704f7e8dffb970f89ffcae04aa9545b04506c816c42e900404b5005e245ab41915f803c1bf2b7d8224f821362bcd3fa0dfd88448db75f4cd329c4fb7ebdc3dc76d8a753324b271cdf8afa4c96c81d66c78770e4049623681af0eefcec939355b2a2afb09d3e19b685dd201a567f2c312d6355547e732b6934e2792a2fc439609288eabc1022825d8f3d7d23b7cf9bae9811ef519471212998ffd066533171bec50d7a626ee1a751abf08a1ac28c34c402028fb105d1856739e57cc11184cb7bdcbd042fbbb0b2839999f336f2cd783e8a2a6c1039f89822eda55764d20b16de4b07a5687828b871c25e0bcda7699a57bb9b0db7d0e13e0d4e43aa88c150304f318fd0d5eb73d5e9d459123f648265942f4bd0adf6f73fa3def11f943ed82b9c1e568253021bbab34c09bc419df41ddab27c3cb955af556b0298c72cf0c0f7d86622820cef357733b69279111c1a9db908b55bbd85c6a09f9126b213d1de37829a7d185dd049061866831e18a4e292b6bda22f4cb3faf2ce701684a094379596d1402fa1a1865551c36e86846d20280fd5fe06865c01b0440c462414a7db9bfb9db8d04ba150c7e8607c84f154341f3cfb5b7cb8804e2f0fcd0a4b470426f995656e0e80674c2d9eded91cb775eb708480a27bbfcd317fc4d8c0542351bf5cb6883e13580e906ffe4b350e3c2793f0167f9d4c1190f4ce9685ce8362705ac2dcebbebf09bc85e6c34c42b22ac018aad9c8978d54085408b8e5a7913afa00702814233954c3348b09949e9eecc2264d5891cd5eb8bd19e0c082924c2132d2b153f76f507f1389157f587125624389908adea5fc8af8d235de56fb703b7806c0a6e3ae538e15f728ec7142f6d437dad06f8f97a1b2574a90ff6829ad4abfeae225552e1250b4b50230b3cbee19d0a5bed8f5017398f2ef0be1883bb3dabb800baf935ef0760e2361c1221b88b6c4e54fd548f4c400c6ebc8a713d5150287de8542309de3862e2555c955cfee801c192d1f0b1c2cc70bb9aac6324ac6787c6e505fed7c9558e0d377fea96dfd1dde339bbd628d4f8c555334549a70a4566f56a13d37382bc8906e603013aff8f1b45e1578f556c13807817baf61aa22137ba3cbd34a4d3073490d3933ac830622b6ecac8d69c730882217a38e2b21765b1b06d9862d1f605550c9791621897228dec8988b2a9b389b3c44e0c110f838366851c84f4b77d100161e725c6de62d5cb8a25f5743406d6a577c106eec7a402ee518f5c82e2e7ef750c52dde00bd7e8171eaa2bb4be944d90e2d722e53d96e8d2077d54653958dddd6338dd728738e61b488caf93f288d3daf344389f0e313bbf25b4497c4e2db2db21f79461a0d4d56d5b815eaad6d32f815dd0dab5e46a5340efe5b23d51b1c74b58d599c2fd044a6f0c08708fa5311bb78ab06f109a91538baefd1847261685b06de6db10b7f2290246e86315c6f18348b802ed92800cc299e6129e5fa6f61f3ad46c790987e34e9613e36efbcec8a648d635d5aecd1016f13a9e26d94b40d1cce5162b2328dfe692d712a032bbca711d91a20562b4f362cd325356c4195026a0499b84bcc6a38a3a3d6b6b4d59b6456e1e36eeba289fdc1b8a87dc70ba1f4327ae5b9455526d92e7e0001baf2b024bd6fe9d98d8734eb7fe4f8de81140e9af7262c108dfdee8da2d093dd1331c844693ba856be40b03dc2b61002e31f6f8805f2efdfefcd02e53aa5280a6d6997b8f676fdde5b2c92cd401626fcd696e963987c91b10a9b1ba48a2f3655bc8c640a8b629de32e08fb4c0d12696a915cf96f5de302423cfe8b55d062079e3e0afcf18b6768672bfd8b72b2d38132b0ae62f90e096eea5ee2c20b4c8900a0c9e911f8d93a0b77ca96e5803c4c4c1eda258ad997925ab063bf2a6bbc0c91acef5d840500464cf4d0062031fb9358ada6d0dbcdbcd9b5e926db9ce47b5610ad45b152c6de03b981da621a286967a95de01fa7e2c1ae9900b9e8deb85c4917eeb0a76f3938531d721b4bc68933e1744ce2b3f98aaad7067968401c21e0728ffadc8e133b610b5a64ce4c3518a0922cdb5b28953b5f37f7dee4a7fff6f384c7d9cadbbcca544f0fab337b9e993ab6027d481b7afd1e871ea6327bb3fbce8e1a4737b932349faa7ec014c432a58c3c9fb2ee4a92e71fcf63f7f8532636bd08039ea0a4f9486c52505ae5ab826e1529ad7ba83cf3771954153b409cf7792957c9c68899755a918fd68d3c9595660b2c9ef82e75219777db2783a7fbbb6ce6b05944271b5d50c19e6b8623bcc4a39b063783c4223842cf4515ca11a9fa9151861c6160fb3bd637973273070ec61481619734240dc35929464c287320af318383e470a3dc3ffba09b69e5340aee55f802458c63c5520181853ce5393d328922293d452daa3d8ea2a28281b174bcb088bd273ee955aaf2a12c50dabab3ff58dcbd553077051503049ec9403be2d9b7e92b15929f394ac992826250d3483091199045f5849098854745b731c39e8c2cb684917e62314126b35effbe856cbb9f481bc8db095189d52a56fb53fc2c5fbc6a028394e51d820f777536118fabc45f25404526f041c3f16a6f0b1e1bf79727f582f64bd5edf8e6c813f9fa10a87c201cb25dbb614c3d76231e1735806e9ccfe58d0d993ef5910e362e8aa480b4e951268c4ad672d2bdf8fa603ada9c62a2656137e3a5e7145e85279412b5f2d9ca3568783e89ae38c852fc37c5f44c0784575beed11fa89d3c34d774926d67a1883a8c93ca200d214b54bc3debe2dcb14ea708a38980f1f6923ff1c95b25e4847147f03d1d75f47ba4b54b7d4f906b291ff0259368b69554165a400575ed2a2790d142fe32df50d4715f3cd38e0aaaadb9b5cf8193576d99fe74fcf7ae001e6d887804fa1bb35319703272fbd81d42376eca87fa0683872ef5910a2a22568828133ac6ed7ec9c1b1ad5ba0d48cebba51f71d7a9655ba07636f236d4838c41649f7031dfa9bc317c084eb91a1c13575c09ae3331f50a72328a8f572d7fc694aaa2b2b48fbbbc58ce72fb52a9afd569be26b003707d87ce4e3d2c0020cae2dfd434c293b1e447a2442f95dffbe25c4ff47f88042b3d3ca2539d7338864b6e1f0fde8ed0c92a97815bd25aff4771e3715bbfce6443ffc3e4a8d74279c9e0b6c04e38dfc85a7c12bba2b8e101b33a900d2058d3f255ff9e30939598247c4f02b4987e0eebee4c975281389189cea90cd29de8551f984a39edf4dac2fb9ed3d98007bb299783427b7a73c3f5576541caf39ce1b3be1bbe871c8b2d87d8a6c38159d2d3d4e0292d6b2b17b2dff6537399608e16a206757c62aba918e78a0f3461319cfaa9cc7de038d185ab7ba1d187ad1331164505e8165f15f601339b78bd4b84dbdfe5c42676eaf4e0059b7da90760b8344871180ae18a25556f7ed47ed77ad788725e31c4525c49dd6561095b5a70a87fca166d1ceb295cc92afecfa21bf641b1555bd84f356bc4a149ccde1688b6144c9faf864313438588c15d97daa776e104b665fed240c98d4f4b4ca59017bfae232fc08cacf422768932d434452e50b168d30fdba36e9abb215abc4fb99348d48aecdd55ef44cf4fa1f6fbddf5ea124328e792f59249cf571c54081e5a10bac9a2496387824de945fb5053c884b98f2fed77aea954cb2b494037f19b6b0ec110cb42c7d1ec3cf20484401a1f9f55ff9fe62e284d3d1f227dcd4908b11b3e04fdddd45dd787deb35aaf33c67ea49530d70e6f04bd4a1e9a8d6080f062573ba26052d51301bfc6315269e03944c560a8b551a3022914fe68e11a4142da6fcddcede80918adf1c015491c08acb10a1159bc36bfc6dab3e1b0d1e395de33d3f72acf605f4540cceb85cebe52932bd9cc1871539e7854493b726e3f0252d8bb1798cfbd441b380c0688f1270e2f8b4c32f70df83e662dcacaa96ee9f07757c389f3a29a0f2228385726e54dbe13ef59a3a79fc8ea3be7847dc2b3b2b43ee1a8cb52c637438a297a5c015ab57d96558477381361077432f2ba419e1c799a172ad3c215cb07e7f92cca6edd283d776fada58b612166218aae0028bd637a85dc02b3918d4c85de1981b579211094788eafdf2d72c5ea3adc492b32fac1e25d040650ed5880eb80d70f1297bc346a5c7bf0eb4e2e8a3b5e91eddcba110793dc269aa622059ca8e58cba96026cc635999bb46951ff76a07161ec3d2f198d7ef8f5387249a2eae1f9da2c4f52fc314e79a991e5189c9ace7366fdcd6eaa9792d0a8a732c329ff90c1d0d258023bfd9d0a9399c78c127091618423a928aa5a01831e24aaa1a258c7c1e6a8fc0d858a3345985cec142463cf2e789d1b5e2cf61a166f834a003a2d72b28e259e50c02f6b393f8817e11380f509c9ac81cd206b2bea89727cc991aa6f2cfac28d2c64f4504d7a5847b88339050cbb4a5cf94ea4c04e4629c758ea78fd5599bfde2d86854dfb382d02d29fc92569b66a8facf665c224e91ad93e1278f9ab211ddf6854a773530477b7bb29bf765707e720d894973e6a4e03b05f81dad88aedd38c2fb74e11e1301a7b5b5cf0517fd327b7e55cd9aec08b51c6931b655a83f1d181ff12dfb469bd466696e2fc46b76a11c393098e92c5854d6ce499ad77c6f244d24e138e9fa238cb361b27a4f07d04d6fce3efb41989cbed78ca377f9c38a912d28ba81832f58b58bd39a5e1b0b639838557c6d8c1c29b0f319027f688430d6b9cca07c52915830ed1659f7bbdc0e8045dfa43e55593393bedee698c3ac888f1f851aded58c3305b6d539af9fc7cc6cddbb1b11e39efab2b43ab3f6d00b7feaec005185b0c299286e3c47b983e814d97a3c3be0e729b6d75f7902d40427b07498b482d45807005f0b621cd536e092aa3d1a87bd1330c534996903148204d00bd2e3bc949fc96b4a1358b3e71bc5e00cd011d98d00553a0bbc7d51396a8c875f714520638a5fe0ee9bce6e9d1f2834d7ea8f57d3d36bdc4d098d4a5cdb541224fa5811622a5f1b88d14adfe80cb62cb90b146d2f338b46ff60ec78783d97fef5807299b63a4cbf76599e4afbe41aeb45a924cff3395cdd193848875a62ae4c9c81c7dd4ee5083095356307ffabad1ae08b9653d1e3e3488e3b2bb96e77edf68925e49945fb9a118ba7fb13f10538a3b65baf0f042c992455324d691195358efc5ef3f6f190117658eb420ec6258a912a037a3ab9276c1602bdfe76eb58e4cc4739e623e3b1b7d1d92f424fe290e935550005912be5a5da545effb964bb5f90b3e32b11cbfeb9fb12acaca9e8b68c917249077203a91426f69306b3d4c597910a64e17be6822087dfa00d420cef18224db306faa0b87a56b39ad57d3604b0d42d8aa858f7fcb3812200fc1df1f54bc6ba01facfec15f4844a10951333ea2de0f9c414328b540d4162308c7007738767983667ffd7ce0bca5c3ca68d45be76bce89aef5e98bf2c6cf6673ea120a7849fde5e08998bc30e1830ceb6f9574e77f61c9d7b0359ec5f53fcbf1558fcad0502e0c1f553c6a081c0fadaf4751d2cf49cb5a89f0f94d45dd7c5630ac4e0a5b9f79d18a3b3c6c63d4e3cd257a4b01d4efb20cae52c1e0f200644f872e796f538bba8bf97e3d289a4a0e890e1d642fcf95eb62534dd3aaac8502ee0fd80906938fec03b4afe4bd9f24697100d5febe4acaba9b8494ca93719b24b1c156089b666d846bdda6a0f2e17b51b21b35353c8a5df0916e2f5dc431c59e579f0627af0723508d7ead362a09720ec7a631a33d0ed149ae3468290fa23c2cd093a538bffa07bb717f8a7dc08a148ef5f35be714ffa2aace7c4875d447c6579e77d7c8ce9916113b2eaac8be2efbc5f8e8c8e28021a17e6ddc0397a391824ffee1487eb54e59e39cabde53d395e8bee49844d0a3ad9566773bc7fe56c251cf61b983c06db1e7a4a342f03250896f38b8d557c2e7a51e91c6c66bcb1a648d461981607b9f027949f9fd3bf0291338e0823afe1e982c6eee693bcd32bcdefff2e3c554c43144c07d76aa7c8427d21d0ca24a11e72ae2e2dff18f9956b10c522a0f627cbaf822b990a68435059ba3aa4aa18f72127e511f693fcfa48527e385051b5e6e058f4805927975819a252b74159a921e18b82afc0ec3f30af083ca828b48307800f142dfd542392dcb881a5c142b28f9e47a0c96673dafcf2016fdad3005db7e7ceeb52181121f7de5810dceac30b07615ba99c94dfc7b3a6ae70601d0f2a6fc6df152ae5ee4ba7d81f05589ac2a8991d05e2441b0c1cd8a1799491825e5499ccf3f88e5b98eb01451ac5ab8b8308940827202843ba99822c1489a61b7fe2eda64d7e2943c921f6b0ec450ccb4c2c400400f9dbebaeaae68706b8758a27f7419013d07b0efad1e3a5ab8a19e4e881999524891a22f1f32a40d7f663aaac96a663ab8aa8c4644f38c9c9cadc67965f06b893e6a11d21298cb4172587d874332473f2b338ca2ae73178ef79ec91c643a71c82c975b6e81410eb38f4edaa5f86460ceeb22ef15e7649486c116ddd296deff433176e61b8066ee7e1b2f19bb45aee80a1462b1bf3b416041026aa2750721da88cd3d0c203f4bc9244ed96529b8a87b85ec957e8a3071daf135c28de5ec26a9c9266a902102bfa6e243db0416daa1e65e83e923dfaed38fdee2a8a1e114a5c3722be8f940cbbfa378a3b2ef6c613a8e0fa9f478b03829c93b6cc9e9c5bfb19197d5df82549d49d436e858cf117c82c8938d2526e4389337c641f25c3d5278f6bdbf82509fe8be30e7b19705951bfd17a5d12a375dacbed3d9d22e6025ddbaab2813d51bad3c9b897310f1809dd8fc6fe885644af4cdbc001affd03c3c50200b59b053656d7a67a5b4d2311553c04f9c3153567a6e00d2912edc26ad9aa2a99d7ee1749e35e89600604aa53f2f4f27cf24a4edaed8d48a98865c9eb7bfd9112f502065686484a548cbb271aa86e7ceb0526ddd71ac08a6722ce6f6e3dc9a14b93ba9ba20d7b08995fd5cd16e214fa31ba51a86b7e5821b4de7c0fd6f07704c4947a0af7b7fee666a2c7f5f82827caa7dd92ae1a1351ac2bc339accaf4c460c58432cb4b841ab96f3e53fcbe0e693f79a16b9dd7aa5299cbf644badb9f996c4bd6183e5af2152d59d487cb92ade4290b6afe4990ae7a044fddab6a395cf23f88477ea4d6a8edd3f1e5fb8415a38b550e9013d9caf749d50a9c0d713a2c7c2cc8e952960ac347cf07c87a3192dc47228d37abb29d45805df3a47069510e61fdafde074537e7357d49efb32542c5847d073daeb8f549db3e5b3927f67f06a29a51186bbb1fc4b13e33b82b722d9e0c89062e504dcba66d0249087fd4d08b247fee030928904d9a63b1fc6d379b2707168e926adda07cf54a11ef8501beb1eb831909bb4b37107d921dbbd6177715691f08348a950117b23fb8b744992ae7bf72fc4f262fdd41f7143702519287376fa7bccaaa0615ea16b54287f5b93895dfcee12bd5acb4e5c8d2ab3f3b24b6f88e44ee294f7c29b03957179b14ff8dcee47f0af2bed526c324ce348c81b1009a18a993c94e8ec91ca0ac021aa30ba5f09e83a4bc0d17b838b0d52e9e308b48cc8b5873b79e92b4060a37a2bfdda81bb15209a2fcebe4d0a1a75532a2f3cf5102badcf0006056c67ba71d7957be1437f55d6bceb4ae45b8fcf40fbe17757c82d1c34851c40973fb23d34850bcce9e3e332f23b10d2bf81454c8d058a3fc8f12d9a83b6bca5a20aa16464450ad010349ec7191a18a7f34d1c322e51f87d13533ae92c8d8770426d4755698d73e9a92868edcccd4deff3128513251b6328d55be49a6b19e83dd89a8c42ea0157e08ae7aae98080323e52e5cb9f269e18961e9ed3a926dd174e78fa7a9d98a47ab3ff5f6366b891c36cfd16e149b3f6a217621b29ecf742123bcb99d077f6600d96edf9c8411605514c014cb20a2bbe69a64a66681b63461fcde0894b85a3af01c8e0691bc89e63b006dcdd08053d812973a406791e453d7e37a2b4960abd78500f5752122dccbb99e2c52d06efcfdc877c35f595ca9f9d07c5d64a30049367fd9f4a73bd9cfe7657cb5f42b3722cc99245fde207c253499e850ac7a76717f6119e2887b19925a743f382346f2913454cf69db68bce0f384deea13d8ac05d985de55977dcdf2136b3c25d2676e079e0fa4342d6f9fe5d78afca482b74150d01eacd151eb8f5ce400cb90826a93c55b63f2cd7b37e56d8b5c72f2d669b250960e2b0759bbe31c9f8d34370141ae96e68b3d319d8a69dca7036eb716888a8825b5086e03ab2bef1caf13965072f4c44f37399302899e20b60e892e7404dd86c84416eb106a0ef9b3acde88ba2abb9e18496aabf4d9f551228e767ecd7bdd5ca10e62a55f2c936a7affbcf289079851e4b02280d89ef3a1dfb6c9a143f17c1156879c7c411be330308dc772f662db31565c6ec41d625c6eef305f885040601f290192755c50c9cf8509681869f0eba7f9bb39c9a922857e1efb65c7bdad09d3dae3b30a4c65fae79e3240f0fb492afef3884f414253268f3579f7373bf0866d0b85fb07d5586749ae0d217a6b256f13f064055a922c766a8f8e92186951ae53ac1eb25ee99f6318787e4e1892665ed1a011edf4219ef9aab6746568acd2c5b4c82e174c8568ac2f8ae70c9e5c7479481c1713c9d3da1e9a8308584862bb6e2c8a100c82389159ac4cac84561a414f3d2a4c7bc9bb5137947475e8be24c26fbac13234c805e4e15e71c8f111a56da3428daa254a87cd3fd083abf482345ef434176c0fe72f69a2de36da04558e111315d02804cbd19352f0b4c45ba3f89340713bc009d551452c679e64f2c4ee7182f36369d9db468fe46a6694a3d7d129db364ff8da704cb31833f2468265b9a0e3c11ea6a2a9d6fe8a4eaef833b3f7804d80a9ff4b96121c96e62158069226c829122fdab48df9fe608acfaa14b24ed0e5862ab8abd365e9ffe47db1ea53e3b07fdc6d615c8a70a84822ca17f8cc397dbac309e058c48e0a1e21deed95a802fc52ec5d6f81cee40041fbbfe01c050f0419752ffd423916ca9f6234b63f9f49de9416d454d641019cb73819d9bcc880f7546d8132688cfa159b2c36ea46f11e32aa7f292e8567e96e23cbef1a2c765af0432e61df7ca5b6f9c7d2fab04de64af4849e11ccfafd8d730c7e43a6a798aee1425739c526bd3efeacdedabbeceeb2abf9d5ff2279dcd0f9c6942c2a67558dd4510f6afabcb5917829d285f2344f259b365bc37f617302c7038225f6c810722c82cce81dbfbfffd0224eb7f3775b692cf0ddd51bf2f75c4d91b2f4d90b4b94f0870c1b6ff4e2d6170c67f3e569f313dc8a2fb169c7fc99d5eea083bc89866ec0ed0c6281e1b867f9967a0170af2c0ebc50c406a5e02ddafa500e274a0f1ccf50db006c1c882154cbb3283ce8b99e49c4e15374c40d8450970a4762fd55b8e8990f51e2026eedd97c970ae7d0c83e2f862439147900077095d2b5caf6a04c08ef20d7b49f7f5cb806f6ca245f9a9a65b085369777256dc683ba018740c53d2ec8cf8fc7f9c2eb8a3aa1024bb9430a673061c1c23c961bc11e0490f26329b1f6ac43a5419ce8394f0b1725a805a8d5a1312426f5c7b002d9120a815eb7d7f21edecb9aeaa781762613cd4fb2a3097051c0ef630d84c19e9cb4cb5c6129ad1714ddfa14055d6bf0e6208b10c7644ba1e42170ea7ab4ae8ff0d9f9f8b092db89bd448c48630f6a5bb91c52d79df8d7625d0708e65a615e6f3fdb45ddcc367413d2345c3be0359dbc9309fa85123d7920db9e207178a7e09a04f6a0ee49fe6243a6f16195017a226d6eead1c9f989bdfae8de51038c5ff938d64306fb631e21f5043ef598125fb22f06fecc52fecfc5dfb534734492803f9fbfca6765fcb6357d012707764379c270bb1b94b40fce3b9494729ad7765c9dcf32e92f6d764ccf75cf13796e6346f16c56fbb09cca6897cbed4770940d26f2c13fae328d38146bbfc5fa2ab027be583dc39f0c978d45a046d642299ebbe5a9373d5850ea5261536bd8528a58dfef6f1577b613037de4dd5742100ccfebaedf3e78196b75e4773e0a1d15ac2805da4c10a0285ca85ead803f00438a8d0180f8403014826f02684609367f023fd6699bb285694828e8e7d449ddb9b8aebc7921fa2f926feb12df7d10ea08a6eaa95e91f63a7267030b2d54ed41b60c209315d8436985dcdae1a8c5a4ad56a619045c0808553fb4ea9af144a38abdc652a46aefee7a478fc600c401340c864d7786c3a15e55ade3e961790051bdb8f992a418c684db953d6c746b67ce6f674ba790857689d9e5c69e1e1edb8894b8d08fef7f24aeb57834ad37e2c721a45194aecb1a077b144148a2438f01501eb6f9ef58ab31ec91c4f47f98172b7e4c8255459fd3a62a0f3a68fd3bd0b90f94616ebc7c65f568947bd0d225e2eda33bc323a1cf14653d7a0b4d3af5daee3f88d864ff72f0dbb3db722c48bcd5a49f4c87386e154cf03b173b581edb2525f94f73953d5c8dbaf5b9443cb6bb24c9fb12e902dde45f5eee5b81cb9062465c912ca7d17936dca1a0abfff8a90aefefd55cc9cfb23e8f18c9b7ea6ff017e0d5f7ab87ffb6682ad6044fde3164eb377baa74efbb1e72ef83db17de0b4052b6e2bbbfce71715cd70b09c1833aaf73decd584888a5f07b6fc2b4f38f79395d625c22343d3705ccf05af20fea17de458d2cf4eb94b4c98d7b074d2ca13634a1a77896ecb27c693b41deedc27f57acab274ac161b265dfcd3c19ed417767d07885724412848411f901b766e3d991602c48d154179a23065e0403edb13685448cdcfe0942e7a4971cdf5911c7d24fae2b33f2df19ad2e5be60218cb9562753bcf20684d68de91d47987ed07e1a00c3d1cb1f8d41dd49c8b88866a3a875e64e9d167452443d2469af879b5ae59746fd5e17f3707e036584dc315487c243d6d5a911d73f19bc2d0302dfca8a083fd7aa2fcb5193afeeac507dc35feb16a0328ddbae9e6d353b0dbc1a33e113f6662df27e98f7b36e88f80959454d91cf600d590d78117bb9708dd11e3a1b09b8ae67fa134a3d7e95f4b08cfb4675a7986d747c2f654eb009b10b6feb180bcd270c5a897adfc9787b40a50418268358099df1c53e12a22fc259144ca46ed896cf4eeba366bbd46dcb588c5b5606489816478cec9205bc84e226301ae5c78c76fd016cb646102b0d054153778b350cea4ec1be2d5dc45b1211a01a4f2e5f02bf6dc0b9e0461121833719684bfd34389d0a41e5900afb0ceabaf45edaa3992be25f869107b044707317b44e69576e8747a5262b7ada271681dd65d591b70b35267919db781ace165b30321e781169dbd8fdb2ada37c91b813cd40efbb0280833737c662cd827f5524a70cd71526c18708f83dc7ffa776e68ecc610262383d70520b8dd3d7687e5b7296fa4c3cbe5975ecf7a996ace0c9754d675f8c47f4651e290dc4c21703999e73e04f3b05eb74556a094fe4ca59ac938e3b2ca8331fc5ec5bfe31b616f321f44f5fe54c2c40e1ef6b86ae6b271eef69d86ed82bfe8b7fc815d54cfc04662b761411623625069930c0330e9cdda1cb5414d01aa12a7afe154d039a0ecc8ce1a0d16000585bf0f0cae199dbdbfd960fc2d8b926a94577d70d145f0e1e00b4b98a9f30818a850fe1e9c920e121ce8a5add6d22fcc0d4c6998319b63096b87c0dff95e776b88aeee98ef76d02a14ea78473f349d89e09f548fd1831bb808397ff790b3434fe912b09011f1973e5846ac6541644331f4fc73f7ef9d78532a2aee6b937a70a937ca71ebe06540d900ea610d2b7884e2a781a1bf16de5f32872caf4ce09cf2389e7b72c6b56d75f34f642df0ee2748a804f62387877f1188bf76473f1c9651be4f0f5d66582b409d82dba43b244899e787b694a4cadd03aecb3459d0d9fafbebb2f2188ac7cc6a8c9929019a9f2a1fbeefc4a021b85f531520e8941b1d8cb7964bd1623fd91f58474664d591caabeaa1c71bf42a37404b571e81df58e745774c6a1ec4674cd6deb0592fc8d3e88994438109d1287361efeb51c0de3fe70095a032d457026e1122570687a13c3b83c3b00534c6e7ba1c8a0bdee24787d2e8f44d01c6838a65ed1a355d47f15f1295328922c9055233632fbe4aa99c351ae5b6422b899a8996777dde7740eafe708d2de261346590ce6090840f2352b4c4ade155754385b6922fa2a944e66124a87aa2958fbd3e940347a6e845a49f4b9a8491d0f23fdbed200af8da7e2b94afb79131c8b6d95940cbbe74e6022b8235e5759e5fdef80fce8687e38b839677b3e84d9c1b8b27d11b69bba8d479bd3c1c58180f5aa725ee24b7af930e50e2ed2efc6f5e1fec5a6702112020ae426fe224c17a32509e0bed834e1f1db5709a8d9bb3a5a3aec32abe6e3ceebbd35b24a86b7d28118ed15d9d6b5f1370fde7dcf3d2e7d837938f3dff5c7434090d34f928278123bf02ba374f9edd528de955fec36672111e75cc9f647c4202db8917af5bca180a060c5792a2a8eb0045102966558c41efee006faf2eb6266b839cb73e35399427ba7486c99d7a71be990598937db0c419bb0cff1ea837ce0ade09ac54eb3833146aff3a42e6ca403504e03809c716ba8674e99b4f99d00b9cfc2c04d76804f207479d912ac43da10cca0f2ff2c849792db864efe574515a3a223069280d6215493c63f25b920dc800446d6a1a55a479bdc89b6c4118c603ada3113e911c891f7d8f5625c206c2b34f340b640610ff00b23dae218bde88a72eee7642688fd16c4a2bc682f1ca09ed370588f871f61bfc74a0aaa1ac21a57ce7eeb086655b1d97061673184cc734302d230479ff2e12ee0ba6e065c4997d17ebe080a60ed4a009dcb12d438efdb9d81488af2c14d0dd2508925ba2ef768cb56b44c5b543d45c862340b6aad09eb36d4a2b85585386b409a4e8a5b2172038470240ba37d8730de3f64a463b2cd2fcc5f36e5cfc667718f4a74312209eb83c923dea34cb13e3c557bc0f8b59b7546186d6998f625f29b2b32b6a917c36d6cdbf956071915cd188e2608e71deefbc12583325e95d69d8caa62ac417f20320366f7eba010186aa5b63886c44cc87fe8e05ecc037f20f22d94ab53bc330621ba0e627bf80f22e7de01695f465e5e5d51b181d74c45187b19c64e299f90493ae49455311dd01fe6755332a8159345ae3e9e2a8652027c346ef89e2c309c1c5e7846d2cde1b14fd00a8c21410176b9d87b9af93c77b4d07ef9cfa8fcad8cb42f1bb5917ed5fa7d67bdf4e63e9b8968d1e744208254998c13c8f82e18b0428a5e7b11bdeca5c4e49c4e29b707e3d4a2c897af974496219bc6c4a7759eee11876921a6a98a14fed1db30a7e0201fd90806f6a19cf785bbf05b2194fc912a205ce7e7d576c92e2cfe362bee29cc21fc5f5dd49fad2ce9c5dd9b02f46a220af8c617d80dd1b6bf0885f85d23d57fd3e56ad23808a75293697ac7f3d737a3131731f9e3c183b434d5b0a0aca9ac8012600f2e4d8d64d31e6f2b5f7c56d2d5f4d912b96748b98990cd58529bc75fca09557e4298165bf77383560ea0e43f67432209416f2d8c177f492698caa9c03c0d53d539180fea057bf2f16c94958c4598fe832b5edaa9ebe975dcbd092307e887c4803323fb35da224953082f8a56cb359c1fb25304f024a88575805f216dce7b90ec1611c6822c7a1de6d8980671bb86040c7eef77f37a12763961a611db8ce7584df9a20b873aa1b7395e3142fc189c76981386e96ac83b7e264195e2011d48a7371d80466a42bf82fc4d102d65ccf516d56d4999c32410c13750650cd61c5b1345fd67a88b2e775afea470e0c8d467972b05c6e54795b1d739680735cb2a06896c9849f2196acfc10a623994b365a08c3b6bbcd6a017a5649b40926d7a066b90bd4e7700856fd9402a515ce127a926c0103c70060b1ce4dd55aabb5057f06a7aec096f8015eb48d8059fe70e8f3f0d6cdf16d0a745e274e84077af0adb1f4a7f90896e1d6ff824a5b744bc670ca5c32f5f158b229d07ea0b030423a1e12caf3239c0300a6039e84b89c076a5b6c701734a66d12bcc4d64db05a83fe321f90ae6cd2fc6ed912feb69c5090428626d99c719977dc57012dd0a08ce94ef0619460396135b3f19b3d9c9f5d152287a344d9c2a6156dfeccba72f0e85e6d9a6464104e77e007b6691570ed7d2511c8e0f32c73c39e84f829a6628a17bffd01e0540b4885ded60f0802183f946bced72ef8cd6ec41630509c8034be61f7aebc4cd8340629f1fd4de1e5e24abab211a54e6cc7a812f2d6aa6039c8b515600da8f49ee87a7635b2f0efe2ac26894181f077b86b20d55d1203cd92a9071b2f00caf65b8f4e53888524419c7d1f49c3345b559008453756bbf36221ef7d45cc36263f30fe5b223e667c944675c6e7f8cb5397aa349a1b501bfece86572129b527fdfb08805e371df9c7f45f461fcea7641b3d01c7df4ae2363cc14ef521b9a64049525d075e1ff50be934710a557af5e0bfb4e239c5e7e20feba166465fb6153f91611da6a64b3c9b68af5d9dbd27e1f1f56ab2a9379747b3c10bea061956a99089ec67c3aab475e3dacc8bc225161dd369e24e959dbe0167cd5521f490ac6fa1ddbd4dcc8153a830d4011c784a318c01c49ef39760cb9c33d55e677fd595dfa3954e077d25f048f87738c5c396cb50925b046bab75414fb01d3795053138631b4be375f7bb1925f115b5c0a5426cfadb65aec89a5b2086a7844909b2b13119dc1a56d9fa67dd1b62157854fbb2d540dfccba92aa3f2467e0386f22662bca981801d923aefa6f265b3e44b6109b5f4b8b16eb31a7321894fb68514928dd5068633ab0be6ffc9668ed7d1f549ebe571c2edcb5a18dc8d83fa3baa3da095ddd06a7f34390abc0c3a1020f36bbd124544806ea13f3b61041fde2e304332363da4889c3ae1170fcdfeaa9bfcfbb199b93c92f50917371b29f838b61fe74a07ad3b7d965e2fb1ac1968f76443a765bb0c2f7076bb4c10ba7bd62f839a40c4e4d2f43aa412fcb969e30e3e2e8b182c3105bd4bbadce8e281248214e0403983e9910455b31e4a803ad14e4383c4bcdfcafd33bb3082ea6018cd4c2be8d37dbda519fc504a172504d1b7bb88f795b5070d8c834e4fc29780b6cec40dcb8225c1339ef76a985d948d1c99d8d4660619d475feca0683fe8f65a3f4b1077e9778e327297740510d0dbdffc649627d1d9de205bb4ac09b91df9d4d74a5cba5e1e10decb3c826e1d288473e4b4116a25491416930162dd981319645d92cb6c20d3a8b78697c64759e6d075fbd1de821d1dcdcf55f55d83a218e4a1503143a21aeaa135c1f4af09c335c425e68fedbdd53d55bf37f019797d3338ef1e7b3c3d41568985eb032c395faf9bc50390df99a18fe4f5c75e739403158e050e5be9e280f8aa50feeccc13b14f33b0cd88e8a4ceaa9eeb98bb7c0985d86e10b9a9edef76a8c188f16c6763a8850a5f2287fcaf65f2cf21a46f1a03cbb82ec7cc4d55ffd4124fbb1b7db565a18fdf9c1b93840925bfecd324ea62e3f6a4b8fd32a0ca0db6be5893f851c0a54da44df90d731354d4400d1d63bc875fa4c52bb8c721b9692db4ae284650b539c4df898118f6756c341614383854f1e4fc1d42eb075ee965656a95f86e8b36df47d8eb102924f17fd49bfaccb97e02ad4c03d59891e05ac386118e0d3b614659ad293a7a8e77e0aeae38ea2348cea318f271370b6ee9e4a1f92aa6d48ca162ebddced15b634c13e1fd990607bdbdc57868801955ad258b1b6ebef25ae34b6c48c95852b3f19921f0a65c45587a8eaeb244d545eea20abcead57c530bc5d6ead17871c50604dd2c7e761ded455af77cbbf716fd0945a9ece80fe16963d5773dfd58ad03a1db7f1cb38ebd251059c96ee8ed9a52dbdb448074e379f7b27fd6c63786627a46d36524e5a73b8f18fed0164c7e0c0c09dba9a17a06f32f4a7ad776758cae9be96cfa09c979f7f2f8feb8593496448a2ac903d544d8b2e6f7c30290b934e02af02ffb769b5925fcb8d7c35e95ae85d7064fae2a46637071055612a0907cbb4ff3957ec16bd70782561ac8c5168a58cdb99e33163cd5627d20d3fd7f7704d58c769193341da052292950002b5c49b9d3483867302f164304f7175876607f3cccd4ef012628f626e191d3c63215bf93b85aa5d7e88d3762d4cb8b017447c0cd94c3c1f02cebb72cdf6929f5d29ad8e5610f90d07edd81196adcec5210a88ca989df664371eb24f5895e2787529196eb56eeea4dafd27ec05d63f6682fe86b2e40282bab469a9e2945e6a0ee3102ce7367cdd9287c37b9a4be2a24ab66a07421dfce95568a36ead2871624446311f9b9e180bbfe466a0bff49238bdd1754e5efb3c2685b19cadffce06a63af35152d3727d2f7b5d175c11e9a8f523dbd802550add5e227af1c95a04f1ca8d0e9a9c204e27587f692ce79b10e36742f21c6f9ecac17418e903837dc158e1732928631c93105f207eaf7952407d1f521e68847348f05e27aae7dcb1a53584c8246a511b3671d9a1acb76d9f28ee576703969fded5737a6e18beb7bbbf39a81a0df312751d929841fd3497be55544ede540657be09722d16794a0c0e7d6ce8e8a0ad7f0647c16ed15d9c515bd5bc0d6330b888c0798731a7254f7ce75e469789b03efbfb9412c4fe6162ba225128858a75a1cb864d39bd1c2288e12257c2749dfbd042e5802153958d29d01cac32709569ccc8a0189f952cbef982edf54f89f9634f4cb6f1d4220baac161a2c5903ba80d40a8c23b74b63d90ce87e55d8f31cbd274ef74c34066a3b93f6be9686fa22661bdfd36a191972d2b9d0ff20dfc7d0a0b081a241a0bfb6ea6c07cd76ff26e80cac16f4051130697fc8cb9190383a33775f60eb4e1f6518714156f08ae4436437079b8425f5eb75dbd36d6f4964e6c4234217e12101a42cce2ea79dfc027b4a7c9837b19650cf9c00d16a1519e350e870cf02af751b14bdf0cafde3035c1e562c32b655071eb8e9d2016fb6b05ee9cba0da6b31dcc7475538b1b36e6b4e64a4a40bb57cd5d4d0d250bd3e88ed6e1fb5e85d0c2e6fa5bc9cf00857764bc797a923495a9d5453bc3a69ae3f81ee77eb852134a2b3cca24fd50cc964ef5d2bac9bcfa65df8272fab3d81767a565fbaf20ebbeebda20281c16f9b09e2650000579c00b77097445a41eb7ce4ff49eac7ddee7ecbe760cbe37cff8b91134db10f9b9a0e10e619f79e794d32ae554c3bd73656c2ff37e504a6a277ab541aea114989ee76f8d0c29785168e511d73de58a54482ee37e4f47807c72b09a111f1696cecbc1ab3b84e5d48e73621ece8a54ef36dd91c6bff5869540ca198542c31032ce9d1abf84893de62abf9984ff9ee0ea7fcc5d81de85f980a85d8636f63f2763c921f5e5ade2b4b6e949bfd9f1e543c20000ef6fd8ea2f8b811a13434860a3b36dffb727162d4fd571c7ce40bc9e60927aaadbf9eab5b79d481b433c0bac2d7776ff8b6df47cad8bcde1d53f4eb090e9b4df9888244ce57404d0e0f4e1bca5743c381e91327726af71451e91970d216fc627571a58fa92313d67d6c25829afd154c43cb454015de7935d76ed50530aaaad409ec219ca0b6818158c9103d1c9f93814cd961ddff077825c40639b47bd364febe8b7a96af903298bfe49ff170b237bff032b8c1ca37793ecbcc761fd4267aab5a4195ae37980f414a2162ecaa7cd5cd4ad01618bc4a8af3ad0575e985314c67bd5b66d0edd708825e784bbedb2c2b61bf58a8212dd91fb91c5cb6a9e61987e31929ccca4fe482889d859596d650f3e47ea22949d8d968b121112ad6e025bb9e32e45aef62a0f3044c113c8a9419f44cc5dca3b0ac440c34aca0101b853e31bd4e09dc3ebc72964dcdbcb3a40f773f5a09fede0853cf54fc8ba92508c643b0a4a942cd68ebcbba1f911d62599775a407fc2236a06d8c5019dac11a27192296126881fc48f33047cc7dac4a57ada63223efa39b50b409b3340e4ffea8a2d1603172f87c25c0ab2ac334095f013fc3f5a5564fc92688071760c21fffce0db262fe116f692452179e3201ba5de09449520c3cf2abb7f909d820baf1ad9753c07ee185fdc539ed999b1a358c225d10859e286687e5d4d7bac607dc24915f5b26d5063a69fed8b8449a3abc6ef331283ab9fd7115c4bacfd5e427efaffe4d120e487c9b2a9aea3f4d6b9636c1a457dec82dd13921c3f93bf2bdb1b92e824a5eb8efc09911077b1690adb1644a30e977632c1533c34eab3e01ae924a3a8aa60e9d350e9058b895daedec650eb96b7c87fdae5d683f054c1f32923e1232fd3d0cb47e9b8c700ae63195467ec927117131a79a2d215e66299348dfa2a8ca215ded103e6f06a7cb27fb841e6a73bb20c5d199008a9c9084f88537d1738bc4471184038e6b303beb947314eef58269cf42a7838ae94a290e9086c592bbd529f4c5c6f0f85e1a234b1602731b0822209925f989f8ded93c0d139542923ac52cb9102c747772d0a47696891cf7bc9531e738d9ddb2da4a652fd78273b13f43c6deb9992bf52032c4fd357d60580bc8185ec0c5b4c6c88b7d7e823596d1214f3701230de8a4a75efa44ed74161e44ccd22989318f7ee763b2b0b55cd47d44df81f3f81ecd1cdd82f355bd486896a619cca23bd0802625458bf07755baefbba46f75be35425f917d79e86e7c02eace189096e7ad79ac331adc74848c4f5c53193457b13de501d10519acf0f10ec843f9e2af104edd0371c2fd0d5328448fcdd71d6e79f72b3117d526a22ac893aae20524c2de2fe2fde13f3771eee9129463f9e0c7db3bd704383a67823116b6a487240196e6bca630fd8d0b01b5c0ee67e77c0cc3901fa4e320e8c133e79ad1d54364aa7bc428082061a4fc6ab9d0f39038527f465f1d8925fad19e8864dbc6eabf03afbbf349eabe1a0953395efa59f694777617a5a3d9440f08c75200a3496a1a3a6a324a794b4727fbf6748171df9b7ef56f8b208731df943ef2b2a53dd8216c62d1b26fb67207c84aad62831cb5a206249082dacc5d3848fcdb4d67ec3e8db029a834ae01c2105e132643a8d6177b192e9e9e133e1bfafca88b4837f89f39d68ca529d8eda3339db27ba1ecce3b9296af466ef28a038fa5eedc5b32e734837de3450c14c7d89d07afc3a546ebe1e6effee0ca0ce1047e44dc8c1558565c142a7b83b4407a67a6837ae59317bcf03780575dec7b4c58c2c006c62ef460778804e06fffc248bf1484b5e1da293f74856e4daab75020892d5dbb9134bf90f2ed7be3d8004ed5ec964657ff588556eaeefd221cbbca345c5dc30816a2fc47d234fbc02b7a9564ae03827745de76e75627743593fc519d26135a3782a4c20a15c109a500c6ae1ca5e3721953454ebe0b68bef4d4864c7c047715a85a60d2ad85d1dc639798ce45b86829ba21cc6bdf0e395892f6ced9eb9351071a6b0f6e45e56da044d8d6258b3addc4f22db629c595195dc47ff51884d58f27258bef85ed4ab407d99fb18ecfc0a1e5746886d949cebba82caa4e28c9fe7821a6d7dc3a6e92186958831a18ca090d6181823302fb0c712057a98aff7437d63c971b1e66fd51137ceb36df40165bc62da77d8a6bb807ee7ad1863ec5b39f86ee070bf6f65fbf6a60b13986a223e1f2d57e862a200c9d2ff6c1f04d19652ce2c45b9642ffe07a5efcd6976a27e548186bf0cc16e96abe1294f610f6c85ba3116d77316dd513c984af95e645b3142a05bc874f068a2f2ad95dc3933b9a9b6a9ae109ada65c1f14a9b4820c8bbd9f0acffe6a0033933f3de69936e4fcf11e316abe8ab00c97b7d97cbec82147054ba7b9d3af71595ec4e9b5449c2b4c0221e96db998713ce55da009c00c607a943a198192513aec1b3ff970eadd2ceb67d770bcb460365ddaded39e9e29bc55c7e0bd98d2318a3e2d7a8e89da87200bce4d877b5309dfb63e4cb237c9b4078163ed6270de3e5e70c125b174561cbef5c855d400bbd808b44214ab11ce5f36f89f47b8df2e244b05cde9ca4d63aefc8518df3beda9fde7fb92ca09969fac001db753cddc7f6dff8147ecd0c8ec3cf3e1971f54278cdb9bc2be54abe64c407d2e71dee28a60fa60c1c43699cfc8b4667e27fd36ba66a02918fbed5f750e63c57cd0e7a089fac5cb9adf2354176c98e9c3c14301a6338922f328cdfd2b799c8a1ce1843728358f51df9b5a4783e0fb115e9c4a0b327c2d95c071a6a0b6f6b10dc7b06e0eedb99f12d49ba8d16b1f20d926e8080580ace77731538e6b801bf3f8950a870132dd83f2efba4607704c6f9d10daef4a77122c14721171eeb8d9ebf14304e4b5cde84aa751e0e0e2c38aa33b9387945d505b42c455d8267674fcf3754a04ad35dd648567102777a6c44acfd2c79b0aa0082cc233bb1d96bc1eeeda26e379878f866462f9f6f7ee224fd0203c7fb34ae3a48ba84ba3ad716c1a49cb63550176494438e138116017dcdc0cd7c1f8515502a547353f41cc0426676724d0f1f96ac98bda2ea4534b0db0e105b7681a7c4af0c741e8a1e1c4d35181cd678570310855a42a2a86a49b05335138e51fabbc90433eed6b528946fd36d39579331579d49ca44275b21f3a5214926a69999f2f60eb0d503e30b43574df802c0d639b5fc227b10796008e10cb90f85bcba4ecde143f388c22e4942ea23ddf2d9efcacebc2e8350c39f17526dc7d249b17d42e87a82f83f8d2360e604eccce26e41094852bbd1492c369b07bd401367f8e3a91780de66dc53c0174d3a9714bb68860bca146147c57e25ef9f19bd96bafc0667facf39e9134516f931e3946eb11b8f59c18a6ae3d88cb3f8f928448f0cf76248fdbdc7847498a29e07b2868750513d4737a4c3db07107c09b92aedf75870d572d8c3935f9e6fafdfc0fdcca1f4e5d50a7c744f77c0c25bbe8a478fac0780ca9ba7f77a72f7d08d4afb44a08a0ef2028fb839390a391984d6cb42e7f14bab6cc24c19065dc1b782f47e9f04c4824f693de83817e45e85b8cb97da05494be26e4eaa51c6d9c60e3fb5ab37edf3efe3e7ad155c854ce9a845d3134bfce0b859cf49cf87abd553f97b3889349f514e8b683fca9c3a284bcdf424d31e95426174c3fab6bc55d7fd416592e434568441fd7a379bf39b2d4c628c88d48bb1ac820553bceb97da9a987033f12a0a4d1f4f77368d6bd0c35e16288e3011b984861549446b71f313db1a0ff39d11621ec1311eb030cb2173480ddf6d1a4aa5c04fff5efe24aa31315f16b1f4c31a091496e8abf51e42941a3b116843db4e05ce288848b40bfb53f937a35b74dd83b3b5da9e84575883167e6b1da1a3b05d85085c94c8897c86a35800f231e772d5b6b3b90584626b33f9d8b9da38e06f564c2bbcce21cd3d324a5a54dbe711e3fc56d1b1a8c5cca9004951c1973840c70a378a3e7da0226ebf63b6493a5e40a469f0956e66e3cefa84eeb4c8f48f81e8193cb372bb780f25661f166ead9f2c42b51bd2440b001f4435e57aad54dee9f75327c78960e0b0ba638d5042235806c130c0dee8616727e5dcb1ed40e561f34cc5102d534137c90fffffc09166e2e85a33506f68277cfdc3fa1f3b32bd5b8c3fb98642789fdcb37edc8f0bc439f433aeeb0bff14d664040d351cf2e357c6f6806f43a7b85246053813be768122016db7d661441b881480290fb1f5c4d45843fd2f4b3c7b52ed999972cdf4b6fba45d52495a536d4a9ff4bd3fe61bc44bb6e71e08de1e604807b885ca1354694c375f6b85057eee761288b1a07a588083d6bee3ee20fa0c758a7297cfe852e0444e3f1f8330418f0d0c0152adbeca3e2fdc0955b03e79b9330cac3f2f0f7cc3cb883c31083dc67cf5a0264a2e8ebfc9e850cacf2e6b017a92997d7e3484354c31e23c9b3dabe51e92fa4c5cf0ab8456b9611b30377c8d7480c9376bbbc29948ee57debe112af4b753686abd30254c66d7a76fd0aa42275edd8699f96a6725de4b8c41f4e0c912ac6a8a0e3666d3472fadcb2fc9a097d0614048d12cc529e94e79df56f07b3bac9e2c5b4926402b9ff5f2f22d90d6c08b4a30f68d5fb3b636b5071807ce0b7fd6c7cb2ef9e2a41ef15cf7d99762938c419228593d1973b6d89d7244b9e7a6a43ee857772b338b8bdbd5800a84b577a42cc9592e7db3d384a5fa9386cac72216cf8954c2cab587ef68583b8e0d423d913be2af18cf8de32ab8957d86d02ed6dfb9c424d27a0c8a46dc858b4afd853075211771c9bb6bd7614e2f93567a179ad5d6fab238d74f92cee1f211b4129db3ca6570bbf52c8a410d7785d398d76cb6e76b62a7c3d0353759bc7be617ea99522e97d39058cadad0ddb5ae9843998a6845ad026874f22eb0164ec27499aefa132222331d283ba017f96a46bd1e1d8c53655ddc30ebcfb021160e5ae9c9c77c349d00e530fc9f71e9e10392506f648c81702601aa7944a3aa90ab05353625b1f2b758aabfba7afec30b4ad7be5761354c49f1c71cabdb1550599224aa775883e7eccdfcc73d86e549da483752bbe8491a9d60bf07d691c763b98db2597ddc615e4fa4b6b957ae0bed7e2381f63e5c5fe12a5db1b4c3e3c3d45ed8838b5e3f894d629d9392b9ba41b69fcd7c77d203d63359657d595dbd1870c425361856c5c318b743130bb2620ff349fd998f9b149e4fdddb5ccd5588612ce45c34142b26d06e8bea7184a3e6e0d4e2a14664a65e68a0b687a5cbee042aa1abc2e8f04a1aa9be10aa30f62b4abd73fdf8b276ba0fba647de5d6876a824aff8f1f4c9ad840ed2e0d8374c1e2e0903c72daa963a672043d7b9aff82b6f605ba7ece52d5458a345fb11348bcfc9694d2a74d48f8be946584b0bdce31d5d3b819e0fcbe15e5e5ba28c1f01826750d8c5dab587c4fd9b4d639c5c3223f5c1cecadc482a8ce22d164a263ac176c56e984e195ed3a21cfecfb72bfe5144e948eaf3fcb37ff8adb04eee5fceacf74bf31d0ef5ac6fc274faf322d2311b83f3d8c0157aa03ea1483d414c1283b296f83cb98a726d83908a532b5f6c1d58910d3d7f9ecd96c6aa1a41f4dee06a171a2fd484c655bca3709d5d1bde07b2f66d93982782f540f3eec4bcda4d271d25eeca331a7e7591c5e14d833e38bdda6cea1109255a2dbf9a7ab3fea4b9ff46c2254c86cac54560430ce6ac747077a15f51fb4ce8fa754e92f4fe6b9a1eee28e1ee6ef0636e5066b959478cf23704b1e2213c520b0e31d18613a27f8fe3f094b009bd615da275e21249e84a965a47e6ec338b027cd8adb54f1298ee0a0776bb1f09b946554f178da4a8c523f28e480fd975c4290972c2aac4c7c1967bd7942fb457005c964e4094b6993bc138163d533840d3173bfbf4c077b2431d88334fbe335feba623b663564e57988d86ff006b6a7e2ce39927bd3e86809cd2e19af5de8c9d449f73f31d4372c7646e4136c13ae7dfb97a913cfb11d2685f0add77691750459b952ddd3bb93ce1b6907208b9e3fa5f773943e949f363211b05b461a72b4f37fe3e9203dcef296b204e1f8274eb26a55bfe3c4d1b287bc21d3b76972ebd3b927ad432861661c0a52225ca86aa4a9415c187802eb6ba46fb954cd9442dced2fac068829d314bb788284b8296ccc117120779932e92ad1ba8bdd623bc297e12c09d12d09cc353f367c3831e389b2e17c0bf1a490b80cf0b6bb9c113c7e43b1459871557e445c30cee5313e95430348f56f8769e8f51fcf37a51795dff1cca3aec64e0f76873511bef4378cf228efd7b8682deb8da26577bf7a779c663be780911f70a9fc6fbd748e6d60f0ff22de8af76c7ec9f52f904edbce87fd5700eead5925664a12503d7aa6d16a55bfced5d6459daa036b6bbca7df57795aa0eb96313715ba04b06e21cbecd2fe2c6aae40b5b0b16099b7eea00036b7fb8e2f64ee96715a95a728e53f24f5de09d314b3530d35af786f5c8c287990f9f41dfedde2e9bc9b655f9c43943d8497e4d11104b85c5d0ea48276b21f9d89ab01a75adc952a47e19d614224b7db33297cd8a94d9bc12cca777dbf95a43c320b838b865222c1fddd0d8ced45f5833f06109cb6b9e21638e2623fa2c85421c599a18703c880792f0012b03faf48959e93aae08d7ea29575178022e15a4276db242f425d798d40a072063472dbedca1af7fa87cbb7176ef4157980f0f6e47c6422d0c99d5a20163eea0f65f0d8351692780184ba8c626fc9fb43f4df025f11b793bf9baacd62a0db6ee89cb05bfccec3bfd2b5d71b4683509a3b92f0d15bf2913648df51f5c1ea7bc4d102669bdbc14da1d2e7258163b0bfad6b00b7ef18899bcd3e9d29ac1c09fa0d861f1758b063295c908346f1485c5e3db1b5d110f20b6f461c3ca4026ab9d6fc244d46c5bdcda77e9c7440b51ee9bef75f08ac0c790fdda2e28496c4cf1ee3b57f032427ec7cf2797ad62dfefeb80ef98ded5a97d1c24398b1eb294d47b29b4f0adac5a64fa6a2f855344eb838a581953dd335fe7a4ea2627cbec14117de926e0ed62834075376395e1b09bbc5473168e370c7d132eea296a857b054435df940fda5c0e236b1c1e0ac2cfc07c1c09c9f33b328d9e2f923ee15f8b95828b45f6071045adff928dbe9e091978fb538cb4cc43b8a106e4b908ed3f9368ed56226c365c4540a446653ea31f15755940dbfe835942c8b7d992e269175f6eaf5b8e59d9434f4314b5dc43a4a85a1704d523cda2930e76bd548a51c0239ec128af34b9b6e22fad08df5ff1098726d0f6901deabc0f5594beaf87cfc9c5327e5bd933456415e20eb55c5ae56e1e09085b702dbe3a089ceac078ceb2c3d93920e963a71654787c856efc2127d9cd1098575d704d46f7554426956364e5a663eabc95e9666ae714678ea13b9870e5709fa34b03bec9ee1080a159f958b307d4fc41942c561e4f5b09e883d4dc5b7039dbf3f337614d64d839b97ac832df1458306323000a3072f337dacf384d7c22149db8dbd2ba7bb95b7074c7fe68babbb3b38ea1ce49da885daef811f72c3433bdc2e811f5369c9daf9d7828f53f5c7e9b25d269c3ac096b72c5b31b203b97aa1467a73397606a23409d74686f481bf4634ab8ce1c0b1e54cce4cc934b1152a147caf36df8a1ef71767623c63958104ea33c9a94bb2534c28d6e6f3dfe3ec8eea5b56438bd14571d792abae249404837c2ed4cbb77e5e1799c7f16655ce044bb366981b1c17c7c3499e147d3ddbf73980f04c630d799b27f803213e5cf8434a1750194ca28980150a42810510f9239c8486f728725999de368f1b647e0eb807c5b00811f101c8771f498d950d537c91c36d79753d5019bc1122d02daaab3c54dc56766d9bfb628e5dfc7c1dd02cb584c37f498672b6461447270403dcff96b6fb24ee0cb2fa9libgnutls.so.30.31.0../doc/packages/libgnutls-devel/gnutls-client-server-use-case.png.gz../doc/packages/libgnutls-devel/gnutls-crypto-layers.png.gz../doc/packages/libgnutls-devel/gnutls-handshake-sequence.png.gz../doc/packages/libgnutls-devel/gnutls-handshake-state.png.gz../doc/packages/libgnutls-devel/gnutls-internals.png.gz../doc/packages/libgnutls-devel/gnutls-layers.png.gz../doc/packages/libgnutls-devel/gnutls-logo.png.gz../doc/packages/libgnutls-devel/gnutls-modauth.png.gz../doc/packages/libgnutls-devel/gnutls-x509.png.gz../doc/packages/libgnutls-devel/pkcs11-vision.png.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootgnutls-3.7.3-150400.4.44.1.src.rpmgnutls-devellibgnutls-devellibgnutls-devel(x86-64)pkgconfig(gnutls) @@@@@@    /bin/sh/bin/sh/usr/bin/pkg-configcrypto-policiesglibc-develgnutlsinfolibgnutls30pkgconfig(hogweed)pkgconfig(libidn2)pkgconfig(libtasn1)pkgconfig(nettle)pkgconfig(p11-kit-1)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.7.33.7.33.0.4-14.6.0-14.0-15.2-14.14.3f@f@ee@e@e_>d'@c>@c@ccccʂ@c<@cWc@c=qc6@c6@bbb@b>by@by@b?@b4t@aaaZ@a@a*@a@ah`@``!@``OL@`OL@`KW`#`#`!'`U___E@_d@_cO__[@__[@_Wr@^y^(@^@^@^>@^@^k@^^^^@^x^x^9\]N@]@]@]A\P\\\N\+@\,[1[ā@[ā@[[["@[}P@[`O@Z@ZZ@Z@Z@Z`@Z@ZZz@Y@YX@Y@YzYYf@Y_wY[@Y9<@Y3@YY@Y@YYX@Xs{@XVz@XVz@WW@Wu WV@WcW VŲ@VHVU@UUHUHU<@U*^@UU@U@U ]@T@T@TcKpmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comotto.hollmann@suse.comotto.hollmann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comrichard.costa@suse.comrichard.costa@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comdimstar@opensuse.orgpmonreal@suse.compmonreal@suse.compmonreal@suse.comrpm@fthiessen.debwiedemann@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comvcizek@suse.comvcizek@suse.comdimstar@opensuse.orgvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comabergmann@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.comjsikes@suse.comjsikes@suse.commimi.vx@gmail.comandreas.stieger@gmx.deandreas.stieger@gmx.devcizek@suse.comandreas.stieger@gmx.devcizek@suse.comjsikes@suse.dejengelh@inai.dejsikes@suse.dejsikes@suse.devcizek@suse.comjbrielmaier@suse.devcizek@suse.comtchvatal@suse.comschwab@suse.delhenriques@suse.comvcizek@suse.comvcizek@suse.comschwab@suse.devcizek@suse.comjengelh@inai.devcizek@suse.comvcizek@suse.comro@suse.demeissner@suse.comkbabioch@suse.comfvogt@suse.comvcizek@suse.comastieger@suse.comvcizek@suse.comastieger@suse.comdimstar@opensuse.orgastieger@suse.comjengelh@inai.detchvatal@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.combwiedemann@suse.comvcizek@suse.comvcizek@suse.comastieger@suse.commeissner@suse.comastieger@suse.comastieger@suse.comecsos@opensuse.orgastieger@suse.comvcizek@suse.commeissner@suse.comsleep_walker@opensuse.orgmeissner@suse.commrueckert@suse.demeissner@suse.comidonmez@suse.comastieger@suse.comvcizek@suse.comdmueller@suse.commeissner@suse.comschwab@linux-m68k.orgmeissner@suse.commeissner@suse.comastieger@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.com- Security fix: [bsc#1221747, CVE-2024-28835] * gnutls: certtool crash when verifying a certificate chain * Add gnutls-CVE-2024-28835.patch- Security fix: [bsc#1221746, CVE-2024-28834] * gnutls: side-channel in the deterministic ECDSA * Add gnutls-CVE-2024-28834.patch- jitterentropy: Release the memory of the entropy collector when using jitterentropy with phtreads as there is also a pre-intitization done in the main thread. [bsc#1221242] * Add gnutls-FIPS-jitterentropy-deinit-threads.patch- Security fix: [bsc#1218862, CVE-2024-0567] * gnutls: rejects certificate chain with distributed trust * Cockpit (which uses gnuTLS) rejects certificate chain with distributed trust. * Add gnutls-CVE-2024-0567.patch- Security fix: [bsc#1218865, CVE-2024-0553] * Incomplete fix for CVE-2023-5981. * The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. * Add gnutls-CVE-2024-0553.patch- Security fix: [bsc#1217277, CVE-2023-5981] * Fix timing side-channel inside RSA-PSK key exchange. * auth/rsa_psk: side-step potential side-channel * Add curl-CVE-2023-5981.patch- FIPS: PBKDF2 additional requirements [bsc#1209001] * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N) * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1) * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2) * Set the minimum passlen of 20 characters (SP SP800-132 sec 5) * Add regression tests for the new PBKDF2 requirements. * Add gnutls-FIPS-pbkdf2-additional-requirements.patch- libgnutls: Increase the limit of TLS PSK usernames from 128 to 65535 characters. [bsc#1208237, jsc#PED-1562] * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a * Add gnutls-increase-TLS-PSK-username-limit.patch- FIPS: Fix pct_test() return code in case of error [bsc#1207183] * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146] * Add gnutls-FIPS-jitterentropy-threadsafe.patch- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183] * Rebase patches with the version submitted upstream. * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch- Security Fix: [bsc#1208143, CVE-2023-0361] * Bleichenbacher oracle in TLS RSA key exchange * Add gnutls-CVE-2023-0361.patch- FIPS: Change all the 140-2 references to FIPS 140-3 in order to account for the new FIPS certification [bsc#1207346] * Add gnutls-FIPS-140-3-references.patch- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183] * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299] * Fixes a SIGILL termination at the verzoupper instruction when trying to run GnuTLS on a Linux kernel with the noxsave command line parameter set. Relevant mostly for virutal systems. * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282 * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146] * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch- FIPS: Make XTS key check failure not fatal [bsc#1203779] * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch- FIPS: Zeroize the calculated hmac and new_hmac in the check_binary_integrity() function. [bsc#1191021] * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch- FIPS: Additional modifications to the SLI. [bsc#1190698] * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2(). * Mark HMAC keylength less than 112 bits as non-approved in gnutls_pbkfd2(). * Adapt the pbkdf2 selftest and the regression tests accordingly. * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941] * Add new dependency on jitterentropy * Add gnutls-FIPS-jitterentropy.patch- Security fix: [bsc#1202020, CVE-2022-2509] * Fixed double free during verification of pkcs7 signatures * Add gnutls-CVE-2022-2509.patch- FIPS: * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979] - gnutls_fips140_run_self_tests now properly releases fips_context- FIPS: * Add gnutls_ECDSA_signing.patch [bsc#1190698] - Check minimum keylength for symmetric key generation - Only allows ECDSA signature with valid set of hashes (SHA2 and SHA3) * Add gnutls-FIPS-force-self-test.patch [bsc#1198979] - Provides interface for running library self tests on-demand - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598- FIPS: Make sure zeroization is performed in all API functions * Add gnutls-zeroization-API-functions.patch [bsc#1191021] * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573- FIPS: Add missing requirements for the SLI [bsc#1190698] * Remove 3DES from FIPS approved algorithms: - gnutls-Remove-3DES-from-FIPS-approved-algos.patch - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570 * DRBG service (gnutls_rnd) should be considered approved: - gnutls-Add-missing-FIPS-service-indicator-transitions.patch - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907] * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311- FIPS: Additional PBKDF2 requirements for KAT [bsc#1184669] * The IG 10.3.A and SP800-132 require some minimum parameters for the salt length, password length and iteration count. These parameters should be also used in the KAT. * Add gnutls-FIPS-PBKDF2-KAT-requirements.patch * Upstream: https://gitlab.com/gnutls/gnutls/merge_requests/1561 - Enable to run the regression tests also in FIPS mode.- Update to 3.7.3: [bsc#1190698, bsc#1190796] * libgnutls: The allowlisting configuration mode has been added to the system-wide settings. In this mode, all the algorithms are initially marked as insecure or disabled, while the applications can re-enable them either through the [overrides] section of the configuration file or the new API (#1172). * The build infrastructure no longer depends on GNU AutoGen for generating command-line option handling, template file parsing in certtool, and documentation generation (#773, #774). This change also removes run-time or bundled dependency on the libopts library, and requires Python 3.6 or later to regenerate the distribution tarball. Note that this brings in known backward incompatibility in command-line tools, such as long options are now case sensitive, while previously they were treated in a case insensitive manner: for example --RSA is no longer a valid option of certtool. The existing scripts using GnuTLS tools may need adjustment for this change. * libgnutls: The tpm2-tss-engine compatible private blobs can be loaded and used as a gnutls_privkey_t (#594). The code was originally written for the OpenConnect VPN project by David Woodhouse. To generate such blobs, use the tpm2tss-genkey tool from tpm2-tss-engine: https://github.com/tpm2-software/tpm2-tss-engine/#rsa-operations or the tpm2_encodeobject tool from unreleased tpm2-tools. * libgnutls: The library now transparently enables Linux KTLS (kernel TLS) when the feature is compiled in with --enable-ktls configuration option (#1113). If the KTLS initialization fails it automatically falls back to the user space implementation. * certtool: The certtool command can now read the Certificate Transparency (RFC 6962) SCT extension (#232). New API functions are also provided to access and manipulate the extension values. * certtool: The certtool command can now generate, manipulate, and evaluate x25519 and x448 public keys, private keys, and certificates. * libgnutls: Disabling a hashing algorithm through "insecure-hash" configuration directive now also disables TLS ciphersuites that use it as a PRF algorithm. * libgnutls: PKCS#12 files are now created with modern algorithms by default (!1499). Previously certtool used PKCS12-3DES-SHA1 for key derivation and HMAC-SHA1 as an integity measure in PKCS#12. Now it uses AES-128-CBC with PBKDF2 and SHA-256 for both key derivation and MAC algorithms, and the default PBKDF2 iteration count has been increased to 600000. * libgnutls: PKCS#12 keys derived using GOST algorithm now uses HMAC_GOSTR3411_2012_512 instead of HMAC_GOSTR3411_2012_256 for integrity, to conform with the latest TC-26 requirements (#1225). * libgnutls: The library now provides a means to report the status of approved cryptographic operations (!1465). To adhere to the FIPS140-3 IG 2.4.C., this complements the existing mechanism to prohibit the use of unapproved algorithms by making the library unusable state. * gnutls-cli: The gnutls-cli command now provides a --list-config option to print the library configuration (!1508). * libgnutls: Fixed possible race condition in gnutls_x509_trust_list_verify_crt2 when a single trust list object is shared among multiple threads (#1277). [GNUTLS-SA-2022-01-17, CVSS: low] * API and ABI modifications: GNUTLS_PRIVKEY_FLAG_RSA_PSS_FIXED_SALT_LENGTH: new flag in gnutls_privkey_flags_t GNUTLS_VERIFY_RSA_PSS_FIXED_SALT_LENGTH: new flag in gnutls_certificate_verify_flags gnutls_ecc_curve_set_enabled: Added. gnutls_sign_set_secure: Added. gnutls_sign_set_secure_for_certs: Added. gnutls_digest_set_secure: Added. gnutls_protocol_set_enabled: Added. gnutls_fips140_context_init: New function gnutls_fips140_context_deinit: New function gnutls_fips140_push_context: New function gnutls_fips140_pop_context: New function gnutls_fips140_get_operation_state: New function gnutls_fips140_operation_state_t: New enum gnutls_transport_is_ktls_enabled: New function gnutls_get_library_configuration: New function * Remove patches fixed in the update: - gnutls-FIPS-module-version.patch - gnutls-FIPS-service-indicator.patch - gnutls-FIPS-service-indicator-public-key.patch - gnutls-FIPS-service-indicator-symmetric-key.patch - gnutls-FIPS-RSA-PSS-flags.patch - gnutls-FIPS-RSA-mod-sizes.patch- FIPS: Fix regression tests in fips and non-fips mode [bsc#1194468] * Add gnutls-FIPS-disable-failing-tests.patch * Remove patches: - gnutls-temporarily_disable_broken_guile_reauth_test.patch - gnutls-3.6.0-disable-flaky-dtls_resume-test.patch - disable-psk-file-test.patch- FIPS: Provide module identifier and version [bsc#1190796] * Add configurable options to output the module name/identifier (--with-fips140-module-name) and the module version (--with-fips140-module-version). * Add the CLI option list-config that reports the configuration of the library. * Add gnutls-FIPS-module-version.patch- FIPS: Provide a service-level indicator [bsc#1190698] * Add support for a "service indicator" as required in the FIPS140-3 Implementation Guidance in section 2.4.C * Add patches: - gnutls-FIPS-service-indicator.patch - gnutls-FIPS-service-indicator-public-key.patch - gnutls-FIPS-service-indicator-symmetric-key.patch - gnutls-FIPS-RSA-PSS-flags.patch- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192008] * fips: allow more RSA modulus sizes * Add gnutls-FIPS-RSA-mod-sizes.patch * Delete gnutls-3.6.7-fips-rsa-4096.patch- Drop bogus condition "> 1550": that would mean 'more recent than Tumbleweed' which is technically impossible, as Tumbleweed is the leading project (and the condition causes issues as Tumbleweed needs to move away from 1550 due to CODE 15 SP5 plans).- Add crypto-policies support in SLE-15-SP4 [jsc#SLE-20287]- Account for the libnettle soname bump [jsc#SLE-19765]- Update to 3.7.2 in SLE-15-SP4: [jsc#SLE-19765, jsc#SLE-18139] - Add gnutls-temporarily_disable_broken_guile_reauth_test.patch - Rebased patches: * disable-psk-file-test.patch * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch * gnutls-fips_mode_enabled.patch - Remove patches merged upstream: * gnutls-CVE-2020-11501.patch * gnutls-CVE-2020-13777.patch * gnutls-CVE-2020-24659.patch * gnutls-CVE-2021-20231.patch * gnutls-CVE-2021-20232.patch * gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch * gnutls-fips_XTS_key_check.patch * 0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch * 0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch * 0003-x509-trigger-fallback-verification-path-when-cert-is.patch * 0004-tests-add-test-case-for-certificate-chain-supersedin.patch * 0001-Add-Full-Public-Key-Check-for-DH.patch * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch * 0001-dh-check-validity-of-Z-before-export.patch * 0002-ecdh-check-validity-of-P-before-export.patch * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch * 0001-Vendor-in-XTS-functionality-from-Nettle.patch * 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch * gnutls-3.6.7-fix-FTBFS-2024.patch * gnutls-3.6.7-reproducible-date.patch- Update to version 3.7.2 * Added Linux kernel AF_ALG based acceleration * Fixed timing of early data exchange * The priority string option DISABLE_TLS13_COMPAT_MODE was added to disable TLS 1.3 middlebox compatibility mode * The GNUTLS_NO_EXPLICIT_INIT envvar has been renamed to GNUTLS_NO_IMPLICIT_INIT to reflect the purpose * certtool: * When signing a CSR, CRL distribution point (CDP) is no longer copied from the signing CA by default * When producing certificates and certificate requests, subject DN components that are provided individually will now be ordered by assumed scale- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579) - Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)- Security fix: [bsc#1183456, CVE-2021-20232] * A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences. - Add gnutls-CVE-2021-20232.patch- Security fix: [bsc#1183457, CVE-2021-20231] * A use after free issue in client sending key_share extension may lead to memory corruption and other consequences. - Add gnutls-CVE-2021-20231.patch- Update to 3.7.1: [bsc#1183456, CVE-2021-20232] [bsc#1183457, CVE-2021-20231] * Fixed potential use-after-free in sending "key_share" and "pre_shared_key" extensions. * Fixed a regression in handling duplicated certs in a chain. * Fixed sending of session ID in TLS 1.3 middlebox compatibility mode. In that mode the client shall always send a non-zero session ID to make the handshake resemble the TLS 1.2 resumption; this was not true in the previous versions. * Removed dependency on the external 'fipscheck' package, when compiled with --enable-fips140-mode. * Added padlock acceleration for AES-192-CBC. - Remove patches upstream: * gnutls-gnutls-cli-debug.patch * gnutls-ignore-duplicate-certificates.patch * gnutls-test-fixes.patch- Fix the test suite for tests/gnutls-cli-debug.sh [bsc#1171565] * Don't unset system priority settings in gnutls-cli-debug.sh * Upstream: gitlab.com/gnutls/gnutls/merge_requests/1387 - Add gnutls-gnutls-cli-debug.patch- Fix: Test certificates in tests/testpkcs11-certs have expired * Upstream bug: gitlab.com/gnutls/gnutls/issues/1135 - Add gnutls-test-fixes.patch- gnutls_x509_trust_list_verify_crt2: ignore duplicate certificates * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1131 - Add gnutls-ignore-duplicate-certificates.patch- Update to 3.7.0 * Depend on nettle 3.6 * Added a new API that provides a callback function to retrieve missing certificates from incomplete certificate chains * Added a new API that provides a callback function to output the complete path to the trusted root during certificate chain verification * OIDs exposed as gnutls_datum_t no longer account for the terminating null bytes, while the data field is null terminated. The affected API functions are: gnutls_ocsp_req_get_extension, gnutls_ocsp_resp_get_response, and gnutls_ocsp_resp_get_extension * Added a new set of API to enable QUIC implementation * The crypto implementation override APIs deprecated in 3.6.9 are now no-op * Added MAGMA/KUZNYECHIK CTR-ACPKM and CMAC support * Support for padlock has been fixed to make it work with Zhaoxin CPU * The maximum PIN length for PKCS #11 has been increased from 31 bytes to 255 bytes - Remove patch fixed upstream: * gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - Fix threading bug in libgnutls [bsc#1173434] * Upstream bug: gitlab.com/gnutls/gnutls/issues/1044- Avoid spurious audit messages about incompatible signature algorithms (bsc#1172695) * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch - FIPS: Add TLS KDF selftest (bsc#1176671) * add gnutls-FIPS-TLS_KDF_selftest.patch- Escape rpm command %%expand when used in comment.- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086) * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch- FIPS: Add TLS KDF selftest (bsc#1176671) * add gnutls-FIPS-TLS_KDF_selftest.patch- Fix heap buffer overflow in handshake with no_renegotiation alert sent * CVE-2020-24659 (bsc#1176181) - add gnutls-CVE-2020-24659.patch- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086) - add patches * 0001-Add-Full-Public-Key-Check-for-DH.patch * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch * 0001-dh-check-validity-of-Z-before-export.patch * 0002-ecdh-check-validity-of-P-before-export.patch * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch - drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch- Update to 3.6.15 * libgnutls: Fixed "no_renegotiation" alert handling at incorrect timing. [GNUTLS-SA-2020-09-04, CVSS: medium] * libgnutls: If FIPS self-tests are failed, gnutls_fips140_mode_enabled() now indicates that with a false return value (!1306). * libgnutls: Under FIPS mode, the generated ECDH/DH public keys are checked accordingly to SP800-56A rev 3 (!1295, !1299). * libgnutls: gnutls_x509_crt_export2() now returns 0 upon success, rather than the size of the internal base64 blob (#1025). * libgnutls: Certificate verification failue due to OCSP must-stapling is not honered is now correctly marked with the GNUTLS_CERT_INVALID flag * libgnutls: The audit log message for weak hashes is no longer printed twice * libgnutls: Fixed version negotiation when TLS 1.3 is enabled and TLS 1.2 is disabled in the priority string. Previously, even when TLS 1.2 is explicitly disabled with "-VERS-TLS1.2", the server still offered TLS 1.2 if TLS 1.3 is enabled (#1054). - drop upstreamed patches: * gnutls-detect_nettle_so.patch * 0001-crypto-api-always-allocate-memory-when-serializing-i.patch- Correctly detect gmp, nettle, and hogweed libraries (bsc#1172666) * add gnutls-detect_nettle_so.patch- Fix a memory leak that could lead to a DoS attack against Samba servers (bsc#1172663) * add 0001-crypto-api-always-allocate-memory-when-serializing-i.patch - Temporarily disable broken guile reauth test (bsc#1171565) * add gnutls-temporarily_disable_broken_guile_reauth_test.patch- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction) The TLS server would not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777) * add patches: + gnutls-CVE-2020-13777.patch - Fixed handling of certificate chain with cross-signed intermediate CA certificates (#1008). (bsc#1172461) * add patches: + 0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch + 0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch + 0003-x509-trigger-fallback-verification-path-when-cert-is.patch + 0004-tests-add-test-case-for-certificate-chain-supersedin.patch- Update to 3.6.14 * libgnutls: Fixed insecure session ticket key construction, since 3.6.4. The TLS server would not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing attacker to bypass authentication in TLS 1.3 and recover previous conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777) [GNUTLS-SA-2020-06-03, CVSS: high] * libgnutls: Fixed handling of certificate chain with cross-signed intermediate CA certificates (#1008). (bsc#1172461) * libgnutls: Fixed reception of empty session ticket under TLS 1.2 (#997). * libgnutls: gnutls_x509_crt_print() is enhanced to recognizes commonName (2.5.4.3), decodes certificate policy OIDs (!1245), and prints Authority Key Identifier (AKI) properly (#989, #991). * certtool: PKCS #7 attributes are now printed with symbolic names (!1246). * libgnutls: Use accelerated AES-XTS implementation if possible (!1244). Also both accelerated and non-accelerated implementations check key block according to FIPS-140-2 IG A.9 (!1233). * libgnutls: Added support for AES-SIV ciphers (#463). * libgnutls: Added support for 192-bit AES-GCM cipher (!1267). * libgnutls: No longer use internal symbols exported from Nettle (!1235) * API and ABI modifications: GNUTLS_CIPHER_AES_128_SIV: Added GNUTLS_CIPHER_AES_256_SIV: Added GNUTLS_CIPHER_AES_192_GCM: Added gnutls_pkcs7_print_signature_info: Added - Add key D605848ED7E69871: public key "Daiki Ueno " to the keyring - Drop gnutls-fips_correct_nettle_soversion.patch (upstream)- Add RSA 4096 key generation support in FIPS mode (bsc#1171422) * add gnutls-3.6.7-fips-rsa-4096.patch- Don't check for /etc/system-fips which we don't have (bsc#1169992) * add gnutls-fips_mode_enabled.patch- Backport AES XTS support (bsc#1168835) * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch * add gnutls-fips_XTS_key_check.patch- Use correct nettle .so version when looking for a FIPS checksum (bsc#1166635) * add gnutls-fips_correct_nettle_soversion.patch- Update to 3.6.13 * libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support) The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol (#960) [GNUTLS-SA-2020-03-31, CVSS: high] (bsc#1168345) * libgnutls: Added new APIs to access KDF algorithms (#813). * libgnutls: Added new callback gnutls_keylog_func that enables a custom logging functionality. * libgnutls: Added support for non-null terminated usernames in PSK negotiation (#586). * gnutls-cli-debug: Improved support for old servers that only support SSL 3.0.- Fix zero random value in DTLS client hello (CVE-2020-11501, bsc#1168345) * add gnutls-CVE-2020-11501.patch- Split off FIPS checksums into a separate libgnutls30-hmac subpackage (bsc#1152692) * update baselibs.conf- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue * No longer truncate output IV if input is shorter than block size. * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test * Added Diffie Hellman public key verification test. * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch- gnutls 3.6.12 * libgnutls: Introduced TLS session flag (gnutls_session_get_flags()) to identify sessions that client request OCSP status request (#829). * libgnutls: Added support for X448 key exchange (RFC 7748) and Ed448 signature algorithm (RFC 8032) under TLS (#86). * libgnutls: Added the default-priority-string option to system configuration; it allows overriding the compiled-in default-priority-string. * libgnutls: Added support for GOST CNT_IMIT ciphersuite (as defined by draft-smyshlyaev-tls12-gost-suites-07). By default this ciphersuite is disabled. It can be enabled by adding +GOST to priority string. In the future this priority string may enable other GOST ciphersuites as well. Note, that server will fail to negotiate GOST ciphersuites if TLS 1.3 is enabled both on a server and a client. It is recommended for now to disable TLS 1.3 in setups where GOST ciphersuites are enabled on GnuTLS-based servers. * libgnutls: added priority shortcuts for different GOST categories like CIPHER-GOST-ALL, MAC-GOST-ALL, KX-GOST-ALL, SIGN-GOST-ALL, GROUP-GOST-ALL. * libgnutls: Reject certificates with invalid time fields. That is we reject certificates with invalid characters in Time fields, or invalid time formatting To continue accepting the invalid form compile with --disable-strict-der-time * libgnutls: Reject certificates which contain duplicate extensions. We were previously printing warnings when printing such a certificate, but that is not always sufficient to flag such certificates as invalid. Instead we now refuse to import them (#887). * libgnutls: If a CA is found in the trusted list, check in addition to time validity, whether the algorithms comply to the expected level prior to accepting it. This addresses the problem of accepting CAs which would have been marked as insecure otherwise (#877). * libgnutls: The min-verification-profile from system configuration applies for all certificate verifications, not only under TLS. The configuration can be overriden using the GNUTLS_SYSTEM_PRIORITY_FILE environment variable. * libgnutls: The stapled OCSP certificate verification adheres to the convention used throughout the library of setting the 'GNUTLS_CERT_INVALID' flag. * libgnutls: On client side only send OCSP staples if they have been requested by the server, and on server side always advertise that we support OCSP stapling * libgnutls: Introduced the gnutls_ocsp_req_const_t which is compatible with gnutls_ocsp_req_t but const. * certtool: Added the --verify-profile option to set a certificate verification profile. Use '--verify-profile low' for certificate verification to apply the 'NORMAL' verification profile. * certtool: The add_extension template option is considered even when generating a certificate from a certificate request.- gnutls 3.6.11.1: * libgnutls: Corrected issue with TLS 1.2 session ticket handling as client during resumption * libgnutls: gnutls_base64_decode2() succeeds decoding the empty string to the empty string. This is a behavioral change of the API but it conforms to the RFC4648 expectations * libgnutls: Fixed AES-CFB8 implementation, when input is shorter than the block size. Fix backported from nettle. * certtool: CRL distribution points will be set in CA certificates even when non self-signed * gnutls-cli/serv: added raw public-key handling capabilities (RFC7250). Key material can be set via the --rawpkkeyfile and - -rawpkfile flags.- gnutls 3.6.10: * Add support for deterministic ECDSA/DSA (RFC6979) * Add functions for in-place encryption/decryption of data buffers * server now selects the highest TLS protocol version, if TLS 1.3 is enabled and the client advertises an older protocol version first * Add support for GOST 28147-89 cipher in CNT (GOST counter) mode and MAC generation based on GOST 28147-89 (IMIT) * certtool: when outputting an encrypted private key do not insert the textual description of it- Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)- gnutls 3.6.9: * add support for copying digest or MAC contexts * Mark the crypto implementation override APIs as deprecated * Add support for AES-GMAC, as a separate to GCM, MAC algorithm * Add support for Generalname registeredID * The priority configuration was enhanced to allow more elaborate system-wide configuration of the library - includes changes from 3.6.8: * Add support for AES-XTS cipher * Fix calculation of Streebog digests * During Diffie-Hellman operations in TLS, verify that the peer's public key is on the right subgroup (y^q=1 mod p), when q is available (under TLS 1.3 and under earlier versions when RFC7919 parameters are used). * Apply STD3 ASCII rules in gnutls_idna_map() to prevent hostname/domain crafting via IDNA conversion * certtool: allow the digital signature key usage flag in CA certificates * gnutls-cli/serv: add the --keymatexport and --keymatexportsize options. These allow testing the RFC5705 using these tools - drop patches to re-enable tests: * disable-psk-file-test.patch * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch- Explicitly require libnettle 3.4.1 (bsc#1134856) * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order to fix CVE-2018-16868, the new implementation makes use of a new rsa_sec_decrypt() function introduced in libnettle 3.4.1 * libnettle was recently updated to the 3.4.1 version but we need to add explicit dependency on it to prevent missing symbol errors with the older versions- Restored autoreconf in build. - Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch since the version requirements of required libraries are once again automatically determined. - Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a better patch name for handling the '--with-guile-site-dir=' problem in 3.6.7.- Trim useless %if..%endif guards that do not affect the build. - Fix language errors in description again.- Update gnutls to 3.6.7 * * libgnutls, gnutls tools: Every gnutls_free() will automatically set the free'd pointer to NULL. This prevents possible use-after-free and double free issues. Use-after-free will be turned into NULL dereference. The counter-measure does not extend to applications using gnutls_free(). * * libgnutls: Fixed a memory corruption (double free) vulnerability in the certificate verification API. Reported by Tavis Ormandy; addressed with the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829) * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages; Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836) * * libgnutls: enforce key usage limitations on certificates more actively. Previously we would enforce it for TLS1.2 protocol, now we enforce it even when TLS1.3 is negotiated, or on client certificates as well. When an inappropriate for TLS1.3 certificate is seen on the credentials structure GnuTLS will disable TLS1.3 support for that session (#690). * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to two. This makes it easier for clients which perform multiple connections to the server to use the tickets sent by a default server. * * libgnutls: enforce the equality of the two signature parameters fields in a certificate. We were already enforcing the signature algorithm, but there was a bug in parameter checking code. * * libgnutls: fixed issue preventing sending and receiving from different threads when false start was enabled (#713). * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable session, as non-writeable security officer sessions are undefined in PKCS#11 (#721). * * libgnutls: no longer send downgrade sentinel in TLS 1.3. Previously the sentinel value was embedded to early in version negotiation and was sent even on TLS 1.3. It is now sent only when TLS 1.2 or earlier is negotiated (#689). * * gnutls-cli: Added option --logfile to redirect informational messages output. - Disabled dane support since dane is not shipped with SLE-15 - Changed configure script to hardware guile site directory since command-line option '--with-guile-site-dir=' was removed from the configure script in 3.6.7. * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch - Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix compilation issues on PPC - Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3 * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits on the public key (#640). * * libgnutls: Added support for raw public-key authentication as defined in RFC7250. Raw public-keys can be negotiated by enabling the corresponding certificate types via the priority strings. The raw public-key mechanism must be explicitly enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280). * * libgnutls: When on server or client side we are sending no extensions we do not set an empty extensions field but we rather remove that field competely. This solves a regression since 3.5.x and improves compatibility of the server side with certain clients. * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if the CKA_SIGN is not set (#667). * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely disable extensions at all cases, while providing a functional session. This also implies that when specified, TLS1.3 is disabled. * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated. The previous definition was non-functional (#609). * Removed patches: 0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch 0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch 0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch 0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch * Added Patches: * * disable failing psk-file test (race condition): disable-psk-file-test.patch * * Patch configure script to accept specific versions of autotools and guile that are present in SUSE-SLE15. (A bug prevents configure from accepting a range of compatible versions. Upstream's solution is to hardwire for the most current versions.) gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch * Modified: * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch - drop no longer needed gnutls-enbale-guile-2.2.patch - refresh disable-psk-file-test.patch- Update to 3.6.5 * * libgnutls: Provide the option of transparent re-handshake/reauthentication when the GNUTLS_AUTO_REAUTH flag is specified in gnutls_init() (#571). * * libgnutls: Added support for TLS 1.3 zero round-trip (0-RTT) mode (#127) * * libgnutls: The priority functions will ignore and not enable TLS1.3 if requested with legacy TLS versions enabled but not TLS1.2. That is because if such a priority string is used in the client side (e.g., TLS1.3+TLS1.0 enabled) servers which do not support TLS1.3 will negotiate TLS1.2 which will be rejected by the client as disabled (#621). * * libgnutls: Change RSA decryption to use a new side-channel silent function. This addresses a security issue where memory access patterns as well as timing on the underlying Nettle rsa-decrypt function could lead to new Bleichenbacher attacks. Side-channel resistant code is slower due to the need to mask access and timings. When used in TLS the new functions cause RSA based handshakes to be between 13% and 28% slower on average (Numbers are indicative, the tests where performed on a relatively modern Intel CPU, results vary depending on the CPU and architecture used). This change makes nettle 3.4.1 the minimum requirement of gnutls (#630). [CVSS: medium] * * libgnutls: gnutls_priority_init() and friends, allow the CTYPE-OPENPGP keyword in the priority string. It is only accepted as legacy option and is ignored. * * libgnutls: Added support for EdDSA under PKCS#11 (#417) * * libgnutls: Added support for AES-CFB8 cipher (#357) * * libgnutls: Added support for AES-CMAC MAC (#351) * * libgnutls: In two previous versions GNUTLS_CIPHER_GOST28147_CPB/CPC/CPD_CFB ciphers have incorrectly used CryptoPro-A S-BOX instead of proper (CryptoPro-B/-C/-D S-BOXes). They are fixed now. * * libgnutls: Added support for GOST key unmasking and unwrapped GOST private keys parsing, as specified in R 50.1.112-2016. * * gnutls-serv: It applies the default settings when no --priority option is given, using gnutls_set_default_priority(). * * p11tool: Fix initialization of security officer's PIN with the --initialize-so-pin option (#561) * * certtool: Add parameter --no-text that prevents certtool from outputting text before PEM-encoded private key, public key, certificate, CRL or CSR. - minimum required libnettle is now 3.4.1 - refresh * disable-psk-file-test.patch * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch- search for guile-2.2 during configure, part of boo#1117121 add patches: * gnutls-enbale-guile-2.2.patch: search for guile-2.2 refresh patches: * disable-psk-file-test.patch: disable psk-file in Makefile.am- Temporarily disable failing psk-file test (race condition) * add disable-psk-file-test.patch- Version update to 3.6.4 (bsc#1111757): * * libgnutls: Added the final (RFC8446) version numbering of the TLS1.3 protocol. * * libgnutls: Corrected regression since 3.6.3 in the callbacks set with gnutls_certificate_set_retrieve_function() which could not handle the case where no certificates were returned, or the callbacks were set to NULL (see #528). * * libgnutls: gnutls_handshake() on server returns early on handshake when no certificate is presented by client and the gnutls_init() flag GNUTLS_ENABLE_EARLY_START is specified. * * libgnutls: Added session ticket key rotation on server side with TOTP. The key set with gnutls_session_ticket_enable_server() is used as a master key to generate time-based keys for tickets. The rotation relates to the gnutls_db_set_cache_expiration() period. * * libgnutls: The 'record size limit' extension is added and preferred to the 'max record size' extension when possible. * * libgnutls: Provide a more flexible PKCS#11 search of trust store certificates. This addresses the problem where the CA certificate doesn't have a subject key identifier whereas the end certificates have an authority key identifier (#569) * * libgnutls: gnutls_privkey_export_gost_raw2(), gnutls_privkey_import_gost_raw(), gnutls_pubkey_export_gost_raw2(), gnutls_pubkey_import_gost_raw() import and export GOST parameters in the "native" little endian format used for these curves. This is an intentional incompatible change with 3.6.3. * * libgnutls: Added support for seperately negotiating client and server certificate types as defined in RFC7250. This mechanism must be explicitly enabled via the GNUTLS_ENABLE_CERT_TYPE_NEG flag in gnutls_init(). - Drop upstreamed patch: * gnutls-3.6.3-backport-upstream-fixes.patch- gnutls-3.6.0-disable-flaky-dtls_resume-test.patch: refresh to also patch test/Makefile.in as autoreconf does not work- Backport of upstream fixes (boo#1108450) * gnutls-3.6.3-backport-upstream-fixes.patch Fixes taken from upstream commits: * * 3df5b7bc8a64 ("cert-cred: fix possible segfault when resetting cert retrieval function") * * 42945a7aab6d ("allow no certificates to be reported by the gnutls_certificate_retrieve_function callbacks") * * 10f83e36ed92 ("hello_ext_parse: apply the test for pre-shared key ext being last on client hello") The patch was taken from https://github.com/weechat/weechat/issues/1231- Security update Improve mitigations against Lucky 13 class of attacks * "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460) * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459) * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437) * add patches: 0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch 0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch 0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch 0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch- Update to 3.6.3 Fixes security issues: CVE-2018-10846, CVE-2018-10845, CVE-2018-10844, CVE-2017-10790 (bsc#1105437, bsc#1105460, bsc#1105459, bsc#1047002) Other Changes: * * libgnutls: Introduced support for draft-ietf-tls-tls13-28 * * libgnutls: Apply compatibility settings for existing applications running with TLS1.2 or earlier and TLS 1.3. * * Added support for Russian Public Key Infrastructure according to RFCs 4491/4357/7836. * * Provide a uniform cipher list across supported TLS protocols * * The SSL 3.0 protocol is disabled on compile-time by default. * * libgnutls: Introduced function to switch the current FIPS140-2 operational mode * * libgnutls: Introduced low-level function to assist applications attempting client hello extension parsing, prior to GnuTLS' parsing of the message. * * libgnutls: When exporting an X.509 certificate avoid re-encoding if there are no modifications to the certificate. * * libgnutls: on group exchange honor the %SERVER_PRECEDENCE and select the groups which are preferred by the server. * * Improved counter-measures for TLS CBC record padding. * * Introduced the %FORCE_ETM priority string option. This option prevents the negotiation of legacy CBC ciphersuites unless encrypt-then-mac is negotiated. * * libgnutls: gnutls_privkey_import_ext4() was enhanced with the GNUTLS_PRIVKEY_INFO_PK_ALGO_BITS flag. * * libgnutls: gnutls_pkcs11_copy_secret_key, gnutls_pkcs11_copy_x509_privkey2, gnutls_pkcs11_privkey_generate3 will mark objects as sensitive by default unless GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_SENSITIVE is specified. This is an API change for these functions which make them err towards safety. * * libgnutls: improved aarch64 cpu features detection by using getauxval(). * * certtool: It is now possible to specify certificate and serial CRL numbers greater than 2**63-2 as a hex-encoded string both when prompted and in a template file. Default certificate serial numbers are now fully random. - don't run autoreconf to avoid pulling in gtk-doc- Require pkgconfig(autoopts) for building- Simplify the DANE support %ifdef condition * build with DANE on openSUSE only- Adjust RPM groups. Drop %if..%endif guards that are idempotent.- build without DANE support on SLE-15, as it doesn't have unbound (bsc#1086428)- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch the dtls-resume test still keeps randomly failing on PPC- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch patch does not apply any more and apparently the build suceeds even if the formerly flaky testcase is run (bsc#1086579)- gnutls.keyring: Nikos key refreshed to be unexpired- GnuTLS 3.6.2: * libgnutls: When verifying against a self signed certificate ignore issuer. That is, ignore issuer when checking the issuer's parameters strength, resolving issue #347 which caused self signed certificates to be additionally marked as of insufficient security level. * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data MTU calculation now, it correctly accounts for the fixed overhead due to padding (as 1 byte), while at the same time considers the rest of the padding as part of data MTU. * libgnutls: Address issue of loading of all PKCS#11 modules on startup on systems with a PKCS#11 trust store (as opposed to a file trust store). Introduced a multi-stage initialization which loads the trust modules, and other modules are deferred for the first pure PKCS#11 request. * libgnutls: The SRP authentication will reject any parameters outside RFC5054. This protects any client from potential MitM due to insecure parameters. That also brings SRP in par with the RFC7919 changes to Diffie-Hellman. * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters for SRP authentication. * libgnutls: Addressed issue in the accelerated code affecting interoperability with versions of nettle >= 3.4. * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64. * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by Vitezslav Cizek). * srptool: the --create-conf option no longer includes 1024-bit parameters. * p11tool: Fixed the deletion of objects in batch mode. - Dropped gnutls-check_aes_keysize.patch as it is included upstream now.- Use %license (boo#1082318)- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303) * add gnutls-check_aes_keysize.patch- GnuTLS 3.6.1: * Fix interoperability issue with openssl when safe renegotiation was used * gnutls_x509_crl_sign, gnutls_x509_crt_sign, gnutls_x509_crq_sign, were modified to sign with a better algorithm than SHA1. They will now sign with an algorithm that corresponds to the security level of the signer's key. * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign() accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That will signal the function to auto-detect an appropriate hash algorithm to use. * Remove support for signature algorithms using SHA2-224 in TLS. TLS 1.3 no longer uses SHA2-224 and it was never a widespread algorithm in TLS 1.2 * Refuse to use client certificates containing disallowed algorithms for a session, reverting a change on 3.5.5 * Refuse to resume a session which had a different SNI advertised That improves RFC6066 support in server side. * p11tool: Mark all generated objects as sensitive by default. * p11tool: added options --sign-params and --hash. This allows testing signature with multiple algorithms, including RSA-PSS.- Disable flaky dtls_resume test on Power * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch- GnuTLS 3.6.0: * Introduce a lock-free random generator which operates per- thread and eliminates random-generator related bottlenecks in multi-threaded operation. * Replace the Salsa20 random generator with one based on CHACHA. The goal is to reduce code needed in cache (CHACHA is also used for TLS), and the number of primitives used by the library. That does not affect the AES-DRBG random generator used in FIPS140-2 mode. * Add support for RSA-PSS key type as well as signatures in certificates, and TLS key exchange * Add support for Ed25519 signing in certificates and TLS key exchange following draft-ietf-tls-rfc4492bis-17 * Enable X25519 key exchange by default, following draft-ietf-tls-rfc4492bis-17. * Add support for Diffie-Hellman group negotiation following RFC7919. * Introduce various sanity checks on certificate import * Introduce gnutls_x509_crt_set_flags(). This function can set flags in the crt structure. The only flag supported at the moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the certificate sanity checks on import. * PKIX certificates with unknown critical extensions are rejected on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS * Refuse to generate a certificate with an illegal version, or an illegal serial number. That is, gnutls_x509_crt_set_version() and gnutls_x509_crt_set_serial(), will fail on input considered to be invalid in RFC5280. * Call to gnutls_record_send() and gnutls_record_recv() prior to handshake being complete are now refused * Add support for PKCS#12 files with no salt (zero length) in their password encoding, and PKCS#12 files using SHA384 and SHA512 as MAC. * libgnutls: Exported functions to encode and decode DSA and ECDSA r,s values. * Add new callback setting function to gnutls_privkey_t for external keys. The new function (gnutls_privkey_import_ext4), allows signing in addition to previous algorithms (RSA PKCS#1 1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys. * Introduce the %VERIFY_ALLOW_BROKEN and %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These allows enabling all broken and SHA1-based signature algorithms in certificate verification, respectively. * 3DES-CBC is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+3DES-CBC". * SHA1 was marked as insecure for signing certificates. Verification of certificates signed with SHA1 is now considered insecure and will fail, unless flags intended to enable broken algorithms are set. Other uses of SHA1 are still allowed. * RIPEMD160 was marked as insecure for certificate signatures. Verification of certificates signed with RIPEMD160 hash algorithm is now considered insecure and will fail, unless flags intended to enable broken algorithms are set. * No longer enable SECP192R1 and SECP224R1 by default on TLS handshakes. These curves were rarely used for that purpose, provide no advantage over x25519 and were deprecated by TLS 1.3. * Remove support for DEFLATE, or any other compression method. * OpenPGP authentication was removed; the resulting library is ABI compatible, with the openpgp related functions being stubs that fail on invocation. Drop gnutls-broken-openpgp-tests.patch, no longer required. * Remove support for libidn (i.e., IDNA2003); gnutls can now be compiled only with libidn2 which provides IDNA2008. * certtool: The option '--load-ca-certificate' can now accept PKCS#11 URLs in addition to files. * certtool: The option '--load-crl' can now be used when generating PKCS#12 files (i.e., in conjunction with '--to-p12' option). * certtool: Keys with provable RSA and DSA parameters are now only read and exported from PKCS#8 form, following draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt. This removes support for the previous a non-standard key format. * certtool: Added support for generating, printing and handling RSA-PSS and Ed25519 keys and certificates. * certtool: the parameters --rsa, --dsa and --ecdsa to - -generate-privkey are now deprecated, replaced by the - -key-type option. * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa options were replaced by the --generate-privkey option. * psktool: Generate 256-bit keys by default. * gnutls-server: Increase request buffer size to 16kb, and added the --alpn and --alpn-fatal options, allowing testing of ALPN negotiation. * Enables FIPS 140-2 mode during build- Buildrequire iproute2: the test suite calls /usr/bin/ss and as such we have to ensure to pull it in.- GnuTLS 3.5.15: * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode * certtool: Keys with provable RSA and DSA parameters are now only exported in PKCS#8 form- RPM group fix. Diversification of summaries. - Avoid aims and future plans in description. Say what it does now.- Drop the deprecated openssl compat ; discussed and suggested by vcizek - Cleanup a bit with spec-cleaner- GnuTLS 3.5.14: * Handle specially HSMs which request explicit authentication * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs * do not set leading zeros when copying integers on HSMs * Fix issue discovering certain OCSP signers, and improved the discovery of OCSP signer in the case where the Subject Public Key identifier field matches * ensure OCSP responses are saved with --save-ocsp even if certificate verification fails.- GnuTLS 3.5.13: * libgnutls: fixed issue with AES-GCM in-place encryption and decryption in aarch64 * libgnutls: no longer parse the ResponseID field of the status response TLS extension. The field is not used by GnuTLS nor is made available to calling applications. That addresses a null pointer dereference on server side caused by packets containing the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398 * libgnutls: tolerate certificates which do not have strict DER time encoding. It is possible using 3rd party tools to generate certificates with time fields that do not conform to DER requirements. Since 3.4.x these certificates were rejected and cannot be used with GnuTLS, however that caused problems with existing private certificate infrastructures, which were relying on such certificates. Tolerate reading and using these certificates. * minitasn1: updated to libtasn1 4.11. * certtool: allow multiple certificates to be used in --p7-sign with the --load-certificate option- GnuTLS 3.5.12: * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches IP addresses against DNS fields of certificate (CN or DNSname). The previous behavior was to tolerate some misconfigured servers, but that was non-standard and skipped any IP constraints present in higher level certificates. * libgnutls: when converting to IDNA2008, fallback to IDNA2003 (i.e., transitional encoding) if the domain cannot be converted. That provides maximum compatibility with browsers like firefox that perform the same conversion. * libgnutls: fix issue in RSA-PSK client callback which resulted in no username being sent to the peer * libgnutls: fix regression causing stapled extensions in trust modules not to be considered. * certtool: introduced the email_protection_key option. This option was introduced in documentation for certtool without an implementation of it. It is a shortcut for option 'key_purpose_oid = 1.3.6.1.5.5.7.3.4'. * certtool: made printing of key ID and key PIN consistent between certificates, public keys, and private keys. That is the private key printing now uses the same format as the rest. * gnutls-cli: introduced the --sni-hostname option. This allows overriding the hostname advertised to the peer.- skip trust-store tests to avoid build cycle with ca-certificates-mozilla, add gnutls-3.5.11-skip-trust-store-tests.patch- GnuTLS 3.5.11: * gnutls.pc: do not include libtool options into Libs.private. * libgnutls: Fixed issue when rehandshaking without a client certificate in a session which initially used one * libgnutls: Addressed read of 4 bytes past the end of buffer in OpenPGP certificate parsing (bsc#1038337) * libgnutls: Introduced locks in gnutls_pkcs11_privkey_t structure access. That allows PKCS#11 operations such as signing to be performed with the same object from multiple threads. * libgnutls: when disabling OpenPGP authentication, the resulting library is ABI compatible (will openpgp related functions being stubs that fail on invocation).- call gzip -n to make build fully reproducible- update to 3.5.10 * addresses GNUTLS-SA-2017-3 CVE-2017-7869 bsc#1034173 * gnutls.pc: do not include libidn2 in Requires.private * libgnutls: optimized access to subject alternative names (SANs) in parsed certificates * libgnutls: Print the key PIN value used by the HPKP protocol as per RFC7469 when printing certificate information. * libgnutls: gnutls_ocsp_resp_verify_direct() and gnutls_ocsp_resp_verify() flags can be set from the gnutls_certificate_verify_flags enumeration. This allows the functions to pass the same flags available for certificates to the verification function (e.g., GNUTLS_VERIFY_DISABLE_TIME_CHECKS or GNUTLS_VERIFY_ALLOW_BROKEN). * libgnutls: gnutls_store_commitment() can accept flag GNUTLS_SCOMMIT_FLAG_ALLOW_BROKEN. This is to allow the function to operate in applications which use SHA1 for example, after SHA1 is deprecated. * certtool: No longer ignore the 'add_critical_extension' template option if the 'add_extension' option is not present. * gnutls-cli: Added LMTP, POP3, NNTP, Sieve and PostgreSQL support to the starttls-proto command- drop gnutls-3.5.9-pkgconfig.patch (upstream) - drop gnutls-3.5.9-pkgconfig.patch (upstream) - remove unknown --disable-srp flag (bsc#901857)- disable the deprecated OpenPGP authentication support * see https://gitlab.com/gnutls/gnutls/issues/102 - add gnutls-broken-openpgp-tests.patch- GnuTLS 3.5.9: * libgnutls: OpenPGP references removed, functionality deprecated * libgnutls: Improve detection of AVX support * libgnutls: Add support for IDNA2008 with libidn2 FATE#321897 * p11tool: re-use ID from corresponding objects when writing certificates. * API and ABI modifications: gnutls_idna_map: Added gnutls_idna_reverse_map: Added - prevent pkgconfig issues due to libidn2 when building with GnuTLS add gnutls-3.5.9-pkgconfig.patch- Version 3.5.8 (released 2016-01-09) * libgnutls: Ensure that multiple calls to the gnutls_set_priority_* functions will not leave the verification profiles field to an undefined state. The last call will take precedence. * libgnutls: Ensure that GNUTLS_E_DECRYPTION_FAIL will be returned by PKCS#8 decryption functions when an invalid key is provided. This addresses regression on decrypting certain PKCS#8 keys. * libgnutls: Introduced option to override the default priority string used by the library. The intention is to allow support of system-wide priority strings (as set with --with-system-priority-file). The configure option is --with-default-priority-string. * libgnutls: Require a valid IV size on all ciphers for PKCS#8 decryption. This prevents crashes when decrypting malformed PKCS#8 keys. * libgnutls: Fix crash on the loading of malformed private keys with certain parameters set to zero. * libgnutls: Fix double free in certificate information printing. If the PKIX extension proxy was set with a policy language set but no policy specified, that could lead to a double free. * libgnutls: Addressed memory leaks in client and server side error paths (issues found using oss-fuzz project) * libgnutls: Addressed memory leaks in X.509 certificate printing error paths (issues found using oss-fuzz project) * libgnutls: Addressed memory leaks and an infinite loop in OpenPGP certificate parsing. Fixes by Alex Gaynor. (issues found using oss-fuzz project) * libgnutls: Addressed invalid memory accesses in OpenPGP certificate parsing. (issues found using oss-fuzz project) - security issues fixed: GNUTLS-SA-2017-1 GNUTLS-SA-2017-2- GnuTLS 3.5.7, the next stable branch, with the following highlights: * SHA3 as a certificate signature algorithm * X25519 (formerly curve25519) for ephemeral EC diffie-hellman key exchange * TLS false start * New APIs to access the Shawe-Taylor-based provable RSA and DSA parameter generation * Prevent the change of identity on rehandshakes by default- GnuTLS 3.4.17: * libgnutls: Introduced time and constraints checks in the end certificate in the gnutls_x509_crt_verify_data2() and gnutls_pkcs7_verify_direct() functions. * libgnutls: Set limits on the maximum number of alerts handled. That is, applications using gnutls could be tricked into an busy loop if the peer sends continuously alert messages. Applications which set a maximum handshake time (via gnutls_handshake_set_timeout) will eventually recover but others may remain in a busy loops indefinitely. This is related but not identical to CVE-2016-8610, due to the difference in alert handling of the libraries (gnutls delegates that handling to applications). boo#1005879 * libgnutls: Enhanced the PKCS#7 parser to allow decoding old (pre-rfc5652) structures with arbitrary encapsulated content. * libgnutls: Backported cipher priorities order from 3.5.x branch That adds CHACHA20-POLY1305 ciphersuite to SECURE priority strings. * certtool: When exporting a CRQ in DER format ensure no text data are intermixed. * API and ABI modifications: gnutls_pkcs7_get_embedded_data_oid: Added - includes changes from 3.4.16: * libgnutls: Ensure proper cleanups on gnutls_certificate_set_*key() failures due to key mismatch. This prevents leaks or double freeing on such failures. * libgnutls: Increased the maximum size of the handshake message hash. This will allow the library to cope better with larger packets, as the ones offered by current TLS 1.3 drafts. * libgnutls: Allow to use client certificates despite them containing disallowed algorithms for a session. That allows for example a client to use DSA-SHA1 due to his old DSA certificate, without requiring him to enable DSA-SHA1 (and thus make it acceptable for the server's certificate). * guile: Backported all improvements from 3.5.x branch. * guile: Update code to the I/O port API of Guile >= 2.1.4 This makes sure the GnuTLS bindings will work with the forthcoming 2.2 stable series of Guile, of which 2.1 is a preview.- GnuTLS 3.4.15: * libgnutls: Corrected the comparison of the serial size in OCSP response. Previously the OCSP certificate check wouldn't verify the serial length and could succeed in cases it shouldn't (GNUTLS-SA-2016-3). * libgnutls: Fixes in gnutls_x509_crt_list_import2, which was ignoring flags if all certificates in the list fit within the initially allocated memory. * libgnutls: Corrected issue which made gnutls_certificate_get_x509_crt() to return invalid pointers when returned more than a single certificate. * libgnutls: Fix gnutls_pkcs12_simple_parse to always extract the complete chain. * libgnutls: Added support for decrypting PKCS#8 files which use the HMAC-SHA256 as PRF. * libgnutls: Addressed issue with PKCS#11 signature generation on ECDSA keys. The signature is now written as unsigned integers into the DSASignatureValue structure. Previously signed integers could be written depending on what the underlying module would produce. Addresses #122. - fix build error for 13.2, 42.1 and 42.2- GnuTLS 3.4.14: * libgnutls: Address issue when utilizing the p11-kit trust store for certificate verification (GNUTLS-SA-2016-2, boo#988276) * libgnutls: Fixed DTLS handshake packet reconstruction. * libgnutls: Fixed issues with PKCS#11 reading of sensitive objects from SafeNet Network HSM * libgnutls: Corrected the writing of PKCS#11 CKA_SERIAL_NUMBER - drop upstreamed 0001-tests-use-datefudge-in-name-constraints-test.patch- Fix a problem with expired test certificate by using datefudge (boo#987139) * add 0001-tests-use-datefudge-in-name-constraints-test.patch- Version 3.4.13 (released 2016-06-06) * libgnutls: Consider the SSLKEYLOGFILE environment to be compatible with NSS instead of using a separate variable; in addition append any keys to the file instead of overwriting it. * libgnutls: use secure_getenv() where available to obtain environment variables. Addresses GNUTLS-SA-2016-1. - Version 3.4.12 (released 2016-05-20) * libgnutls: The CHACHA20-POLY1305 ciphersuite is enabled by default. This cipher is prioritized after AES-GCM. * libgnutls: Fixes in gnutls_privkey_import_ecc_raw(). * libgnutls: Fixed gnutls_pkcs11_get_raw_issuer() usage with the GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag. Previously that operation could fail on certain PKCS#11 modules. * libgnutls: gnutls_pkcs11_obj_import_url() and gnutls_x509_crt_import_url() can accept the GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT flag. * libgnutls: gnutls_certificate_set_key() was enhanced to import the DNS name of the certificates if the provided names are NULL. * libgnutls: when receiving SNI names, only save and expose to application the supported DNS names. * libgnutls: when importing the certificate names at the gnutls_certificate_set* functions, only consider the CN as a fallback if DNS names are provided via the alternative name extension. * gnutls-cli: on OCSP verification do not fail if we have a single valid reply. Report and reproducer by Thomas Klute. * libgnutls: The GNUTLS_KEYLOGFILE environment variable can be used to log session keys in client side. These session keys are compatible with the NSS Key Log Format and can be used to decrypt the session for debugging using wireshark.- enabled guile support - removed duplicates- Updated to 3.4.11 * Version 3.4.11 (released 2016-04-11) * * libgnutls: Fixes in gnutls_record_get/set_state() with DTLS. Reported by Fridolin Pokorny. * * libgnutls: Fixes in DSA key generation under PKCS #11. Report and patches by Jan Vcelak. * * libgnutls: Corrected behavior of ALPN extension parsing during session resumption. Report and patches by Yuriy M. Kaminskiy. * * libgnutls: Corrected regression (since 3.4.0) in gnutls_server_name_set() which caused it not to accept non-null- terminated hostnames. Reported by Tim Ruehsen. * * libgnutls: Corrected printing of the IP Adress name constraints. * * ocsptool: use HTTP/1.0 for requests. This avoids issue with servers serving chunk encoding which ocsptool doesn't support. Reported by Thomas Klute. * * certtool: do not require a CA for OCSP signing tag. This follows the recommendations in RFC6960 in 4.2.2.2 which allow a CA to delegate OCSP signing to another certificate without requiring it to be a CA. Reported by Thomas Klute. * Version 3.4.10 (released 2016-03-03) * * libgnutls: Eliminated issues preventing buffers more than 2^32 bytes to be used with hashing functions. * * libgnutls: Corrected leaks and other issues in gnutls_x509_crt_list_import(). * * libgnutls: Fixes in DSA key handling for PKCS #11. Report and patches by Jan Vcelak. * * libgnutls: Several fixes to prevent relying on undefined behavior of C (found with libubsan). * Version 3.4.9 (released 2016-02-03) * * libgnutls: Corrected ALPN protocol negotiation. Before GnuTLS would negotiate the last commonly supported protocol, rather than the first. Reported by Remi Denis-Courmont (#63). * * libgnutls: Tolerate empty DN fields in informational output functions. * * libgnutls: Corrected regression causes by incorrect fix in gnutls_x509_ext_export_key_usage() at 3.4.8 release.- follow the work in the unbound package and use the libunbound-devel symbol for the buildrequires. we override it for the distro build with libunbound-devel-mini to avoid build loops.- reenable dane support, require unbound-devel bsc#964346 - split out libgnutls-dane-devel to try to avoid build cycle.- Update to 3.4.8 All changes since 3.4.4: * libgnutls: Corrected memory leak in gnutls_pubkey_import_privkey() when used with PKCS #11 keys. * libgnutls: For DSA and ECDSA keys in PKCS #11 objects, import their public keys from either a public key object or a certificate. That is, because private keys do not contain all the required parameters for a direct import. * libgnutls: Fixed issue when writing ECDSA private keys in PKCS #11 tokens. * libgnutls: Fixed out-of-bounds read in gnutls_x509_ext_export_key_usage() * libgnutls: The CHACHA20-POLY1305 ciphersuites were updated to conform to draft-ietf-tls-chacha20-poly1305-02. * libgnutls: Several fixes in PKCS #7 signing which improve compatibility with the MacOSX tools. * libgnutls: The max-record extension not negotiated on DTLS. This resolves issue with the max-record being negotiated but ignored. * certtool: Added the --p7-include-cert and --p7-show-data options. * libgnutls: Properly require TLS 1.2 in all CBC-SHA256 and CBC-SHA384 ciphersuites. This solves an interoperability issue with openssl. * libgnutls: Corrected the setting of salt size in gnutls_pkcs12_mac_info(). * libgnutls: On a rehandshake allow switching from anonymous to ECDHE and DHE ciphersuites. * libgnutls: Corrected regression from 3.3.x which prevented ARCFOUR128 from using arbitrary key sizes. * libgnutls: Added GNUTLS_SKIP_GLOBAL_INIT macro to allow programs skipping the implicit global initialization. * gnutls.pc: Don't include libtool specific options to link flags. * tools: Better support for FTP AUTH TLS negotiation * libgnutls: Added new simple verification functions. That avoids the need to install a callback to perform certificate verification. See doc/examples/ex-client-x509.c for usage. * libgnutls: Introduced the security parameter 'future' which is at the 256-bit level of security, and 'ultra' was aligned to its documented size at 192-bits. * libgnutls: When writing a certificate into a PKCS #11 token, ensure that CKA_SERIAL_NUMBER and CKA_ISSUER are written. * libgnutls: Allow the presence of legacy ciphers and key exchanges in priority strings and consider them a no-op. * libgnutls: Handle the extended master secret as a mandatory extension. That fixes incompatibility issues with Chromium (#45). * libgnutls: Added the ability to copy a public key into a PKCS #11 token. * tools: Added support for LDAP and XMPP negotiation for STARTTLS. * p11tool: Allow writing a public key into a PKCS #11 token. * certtool: Key generation security level was switched to HIGH. That is, by default the tool generates 3072 bit keys for RSA and DSA. * libgnutls: When re-importing CRLs to a trust list ensure that there no duplicate entries. * certtool: Removed any arbitrary limits imposed on input file sizes and maximum number of certificates imported. * certtool: Allow specifying fixed dates on CRL generation. * gnutls-cli-debug: Added check for inappropriate fallback support (RFC7507).- Update to 3.4.4 This update contains a fix for a denial of service vulnerability: * Allow the parsing of very long DNs. Also fixes double free in DN decoding [GNUTLS-SA-2015-3]. boo#941794 CVE-2015-6251 Other changes: * Add high level API (gnutls_prf_rfc5705) to access the PRF as specified by RFC5705. * Link to trousers (TPM library) dynamically when this functionality is requested. (disabled in SUSE package) * Fix issue with server side sending the status request extension even when not requested. * Add support for RFC7507 by introducing the %FALLBACK_SCSV priority string option. * gnutls_pkcs11_privkey_generate2() will store the generated public key, unless the GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY flag is specified. * Correct regression from 3.4.3 in loading PKCS #8 keys as fallback. * API and ABI modifications: gnutls_prf_rfc5705: Added gnutls_hex_encode2: Added gnutls_hex_decode2: Added - build with autogen for libopts compatibility - fix failures in test suite, add upstream commits 0001-certtool-lifted-limits-on-file-size-to-load.patch 0002-certtool-eliminated-memory-leaks-due-to-new-cert-loa.patch- update to 3.4.3 * * libgnutls: Follow closely RFC5280 recommendations and use UTCTime for dates prior to 2050. * * libgnutls: Force 16-byte alignment to all input to ciphers (previously it was done only when cryptodev was enabled). * * libgnutls: Removed support for pthread_atfork() as it has undefined semantics when used with dlopen(), and may lead to a crash. * * libgnutls: corrected failure when importing plain files with gnutls_x509_privkey_import2(), and a password was provided. * * libgnutls: Don't reject certificates if a CA has the URI or IP address name constraints, and the end certificate doesn't have an IP address name or a URI set. * * libgnutls: set and read the hint in DHE-PSK and ECDHE-PSK ciphersuites. * * p11tool: Added --list-token-urls option, and print the token module name in list-tokens. * * libgnutls: DTLS blocking API is more robust against infinite blocking, and will notify of more possible timeouts. * * libgnutls: corrected regression with Camellia-256-GCM cipher. Reported by Manuel Pegourie-Gonnard. * * libgnutls: Introduced the GNUTLS_NO_SIGNAL flag to gnutls_init(). That allows to disable SIGPIPE for writes done within gnutls. * * libgnutls: Enhanced the PKCS #7 API to allow signing and verification of structures. API moved to gnutls/pkcs7.h header. * * certtool: Added options to generate PKCS #7 bundles and signed structures. - includes changes from 3.4.2: * DTLS blocking API is more robust against infinite blocking, and will notify of more possible timeouts. * Correct regression with Camellia-256-GCM cipher. * Introduce the GNUTLS_NO_SIGNAL flag to gnutls_init(). That allows to disable SIGPIPE for writes done within gnutls. * Enhance the PKCS #7 API to allow signing and verification of structures. Move API to gnutls/pkcs7.h header. * certtool: Added options to generate PKCS #7 bundles and signed structures.- disable testsuite run against valgrind on aarch64- Updated to 3.4.1 (released 2015-05-03) * * libgnutls: gnutls_certificate_get_ours: will return the certificate even if a callback was used to send it. * * libgnutls: Check for invalid length in the X.509 version field. Without the check certificates with invalid length would be detected as having an arbitrary version. Reported by Hanno Böck. * * libgnutls: Handle DNS name constraints with a leading dot. Patch by Fotis Loukos. * * libgnutls: Updated system-keys support for windows to compile in more versions of mingw. Patch by Tim Kosse. * * libgnutls: Fix for MD5 downgrade in TLS 1.2 signatures. Reported by Karthikeyan Bhargavan [GNUTLS-SA-2015-2]. bsc#929690 * * libgnutls: Reverted: The gnutls_handshake() process will enforce a timeout by default. That caused issues with non-blocking programs. * * certtool: It can generate SHA256 key IDs. * * gnutls-cli: fixed crash in --benchmark-ciphers. Reported by James Cloos. * * API and ABI modifications: gnutls_x509_crt_get_pk_ecc_raw: Added - gnutls-fix-double-mans.patch: fixed upstream- Disable buggy valgrind on armv7l- updated to 3.4.0 (released 2015-04-08) * * libgnutls: Added support for AES-CCM and AES-CCM-8 (RFC6655 and RFC7251) ciphersuites. The former are enabled by default, the latter need to be explicitly enabled, since they reduce the overall security level. * * libgnutls: Added support for Chacha20-Poly1305 ciphersuites following draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10. That is currently provided as technology preview and is not enabled by default, since there are no assigned ciphersuite points by IETF and there is no guarrantee of compatibility between draft versions. The ciphersuite priority string to enable it is "+CHACHA20-POLY1305". * * libgnutls: Added support for encrypt-then-authenticate in CBC ciphersuites (RFC7366 -taking into account its errata text). This is enabled by default and can be disabled using the %NO_ETM priority string. * * libgnutls: Added support for the extended master secret (triple-handshake fix) following draft-ietf-tls-session-hash-02. * * libgnutls: Added a new simple and hard to misuse AEAD API (crypto.h). * * libgnutls: SSL 3.0 is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+VERS-SSL3.0". * * libgnutls: ARCFOUR (RC4) is no longer included in the default priorities list. It has to be explicitly enabled, e.g., with a string like "NORMAL:+ARCFOUR-128". * * libgnutls: DSA signatures and DHE-DSS are no longer included in the default priorities list. They have to be explicitly enabled, e.g., with a string like "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1". The DSA ciphersuites were dropped because they had no deployment at all on the internet, to justify their inclusion. * * libgnutls: The priority string EXPORT was completely removed. The string was already defunc as support for the EXPORT ciphersuites was removed in GnuTLS 3.2.0. * * libgnutls: Added API to utilize system specific private keys in "gnutls/system-keys.h". It is currently provided as technology preview and is restricted to windows CNG keys. * * libgnutls: gnutls_x509_crt_check_hostname() and friends will use RFC6125 comparison of hostnames. That introduces a dependency on libidn. * * libgnutls: Depend on p11-kit 0.23.1 to comply with the final PKCS #11 URLs draft (draft-pechanec-pkcs11uri-21). * * libgnutls: Depend on nettle 3.1. * * libgnutls: Use getrandom() or getentropy() when available. That avoids the complexity of file descriptor handling and issues with applications closing all open file descriptors on startup. * * libgnutls: Use pthread_atfork() to detect fork when available. * * libgnutls: The gnutls_handshake() process will enforce a timeout by default. * * libgnutls: If a key purpose (extended key usage) is specified for verification, it is applied into intermediate certificates. The verification result GNUTLS_CERT_PURPOSE_MISMATCH is also introduced. * * libgnutls: When gnutls_certificate_set_x509_key_file2() is used in combination with PKCS #11, or TPM URLs, it will utilize the provided password as PIN if required. That removes the requirement for the application to set a callback for PINs in that case. * * libgnutls: priority strings VERS-TLS-ALL and VERS-DTLS-ALL are restricted to the corresponding protocols only, and the VERS-ALL string is introduced to catch all possible protocols. * * libgnutls: Added helper functions to obtain information on PKCS #8 structures. * * libgnutls: Certificate chains which are provided to gnutls_certificate_credentials_t will automatically be sorted instead of failing with GNUTLS_E_CERTIFICATE_LIST_UNSORTED. * * libgnutls: Added functions to export and set the record state. That allows for gnutls_record_send() and recv() to be offloaded (to kernel, hardware or any other subsystem). * * libgnutls: Added the ability to register application specific URL types, which express certificates and keys using gnutls_register_custom_url(). * * libgnutls: Added API to override existing ciphers, digests and MACs, e.g., to override AES-GCM using a system-specific accelerator. That is, (crypto.h) gnutls_crypto_register_cipher(), gnutls_crypto_register_aead_cipher(), gnutls_crypto_register_mac(), and gnutls_crypto_register_digest(). * * libgnutls: Added gnutls_ext_register() to register custom extensions. Contributed by Thierry Quemerais. * * libgnutls: Added gnutls_supplemental_register() to register custom supplemental data handshake messages. Contributed by Thierry Quemerais. * * libgnutls-openssl: it is no longer built by default. * * certtool: Added --p8-info option, which will print PKCS #8 information even if the password is not available. * * certtool: --key-info option will print PKCS #8 encryption information when available. * * certtool: Added the --key-id and --fingerprint options. * * certtool: Added the --verify-hostname, --verify-email and --verify-purpose options to be used in certificate chain verification, to simulate verification for specific hostname and key purpose (extended key usage). * * certtool: --p12-info option will print PKCS #12 MAC and cipher information when available. * * certtool: it will print the A-label (ACE) names in addition to UTF-8. * * p11tool: added options --set-id and --set-label. * * gnutls-cli: added options --priority-list and --save-cert. * * guile: Deprecated priority API has been removed. The old priority API, which had been deprecated for some time, is now gone; use 'set-session-priorities!' instead. * * guile: Remove RSA parameters and related procedures. This API had been deprecated. * * guile: Fix compilation on MinGW. Previously only the static version of the 'guile-gnutls-v-2' library would be built, preventing dynamic loading from Guile.- updated to 3.3.13 (released 2015-03-30) * * libgnutls: When retrieving OCTET STRINGS from PKCS #12 ContentInfo structures use BER to decode them (requires libtasn1 4.3). That allows to decode some more complex structures. * * libgnutls: When an end-certificate with no name is present and there are CA name constraints, don't reject the certificate. This follows RFC5280 advice closely. Reported by Fotis Loukos. * * libgnutls: Fixed handling of supplemental data with types > 255. Patch by Thierry Quemerais. * * libgnutls: Fixed double free in the parsing of CRL distribution points certificate extension. Reported by Robert Święcki. * * libgnutls: Fixed a two-byte stack overflow in DTLS 0.9 protocol. That protocol is not enabled by default (used by openconnect VPN). * * libgnutls: The maximum user data send size is set to be the same for block and non-block ciphersuites. This addresses a regression with wine: https://bugs.winehq.org/show_bug.cgi?id=37500 * * libgnutls: When generating PKCS #11 keys, set CKA_ID, CKA_SIGN, and CKA_DECRYPT when needed. * * libgnutls: Allow names with zero size to be set using gnutls_server_name_set(). That will disable the Server Name Indication. Resolves issue with wine: https://gitlab.com/gnutls/gnutls/issues/2 - new main library major version .so.30 - requires new libnettle >= 3.1, p11-kit-devel >= 0.23.1 - Now need to configure --enable-openssl-compatibility (might go away) - added gnutls-fix-double-mans.patch: avoid double installing manpages - dropped gnutls-3.0.26-skip-test-fwrite.patch: does not seem to be needed anymore - install_info_delete moved from %postun to %preun- for DANE support, use bcond_with - for tpm support, same - note p11-kit >= 0.20.7 requirement - note libtasn1 3.9 requirement (built-in lib used otherwise)- disable trousers and unbound again for now, as it causes too long build cycles.- added unbound-devel (for DANE) and trousers-devel (for TPM support) - removed now upstreamed gnutls-implement-trust-store-dir-3.2.8.diff - libgnutls-dane0 new library added - updated to 3.3.13 (released 2015-02-25) * * libgnutls: Enable AESNI in GCM on x86 * * libgnutls: Fixes in DTLS message handling * * libgnutls: Check certificate algorithm consistency, i.e., check whether the signatureAlgorithm field matches the signature field inside TBSCertificate. * * gnutls-cli: Fixes in OCSP verification. - Version 3.3.12 (released 2015-01-17) * * libgnutls: When negotiating TLS use the lowest enabled version in the client hello, rather than the lowest supported. In addition, do not use SSL 3.0 as a version in the TLS record layer, unless SSL 3.0 is the only protocol supported. That addresses issues with servers that immediately drop the connection when the encounter SSL 3.0 as the record version number. See: http://lists.gnutls.org/pipermail/gnutls-help/2014-November/003673.html * * libgnutls: Corrected encoding and decoding of ANSI X9.62 parameters. * * libgnutls: Handle zero length plaintext for VIA PadLock functions. This solves a potential crash on AES encryption for small size plaintext. Patch by Matthias-Christian Ott. * * libgnutls: In DTLS don't combine multiple packets which exceed MTU. Reported by Andreas Schultz. https://savannah.gnu.org/support/?108715 * * libgnutls: In DTLS decode all handshake packets present in a record packet, in a single pass. Reported by Andreas Schultz. https://savannah.gnu.org/support/?108712 * * libgnutls: When importing a CA file with a PKCS #11 URL, simply import the certificates, if the URL specifies objects, rather than treating it as trust module. * * libgnutls: When importing a PKCS #11 URL and we know the type of object we are importing, don't require the object type in the URL. * * libgnutls: fixed openpgp authentication when gnutls_certificate_set_retrieve_function2 was used by the server. * * certtool: --pubkey-info will also attempt to load a public key from stdin. * * gnutls-cli: Added --starttls-proto option. That allows to specify a protocol for starttls negotiation. - Version 3.3.11 (released 2014-12-11) * * libgnutls: Corrected regression introduced in 3.3.9 related to session renegotiation. Reported by Dan Winship. * * libgnutls: Corrected parsing issue with OCSP responses. - Version 3.3.10 (released 2014-11-10) * * libgnutls: Refuse to import v1 or v2 certificates that contain extensions. * * libgnutls: Fixes in usage of PKCS #11 token callback * * libgnutls: Fixed bug in gnutls_x509_trust_list_get_issuer() when used with a PKCS #11 trust module and without the GNUTLS_TL_GET_COPY flag. Reported by David Woodhouse. * * libgnutls: Removed superfluous random generator refresh on every call of gnutls_deinit(). That reduces load and usage of /dev/urandom. * * libgnutls: Corrected issue in export of ECC parameters to X9.63 format. Reported by Sean Burford [GNUTLS-SA-2014-5]. * * libgnutls: When gnutls_global_init() is called for a second time, it will check whether the /dev/urandom fd kept is still open and matches the original one. That behavior works around issues with servers that close all file descriptors. * * libgnutls: Corrected behavior with PKCS #11 objects that are marked as CKA_ALWAYS_AUTHENTICATE. * * certtool: The default cipher for PKCS #12 structures is 3des-pkcs12. That option is more compatible than AES or RC4. - Version 3.3.9 (released 2014-10-13) * * libgnutls: Fixes in the transparent import of PKCS #11 certificates. Reported by Joseph Peruski. * * libgnutls: Fixed issue with unexpected non-fatal errors resetting the handshake's hash buffer, in applications using the heartbeat extension or DTLS. Reported by Joeri de Ruiter. * * libgnutls: When both a trust module and additional CAs are present account the latter as well; reported by David Woodhouse. * * libgnutls: added GNUTLS_TL_GET_COPY flag for gnutls_x509_trust_list_get_issuer(). That allows the function to be used in a thread safe way when PKCS #11 trust modules are in use. * * libgnutls: fix issue in DTLS retransmission when session tickets were in use; reported by Manuel Pégourié-Gonnard. * * libgnutls-dane: Do not require the CA on a ca match to be direct CA. * * libgnutls: Prevent abort() in library if getrusage() fails. Try to detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work. * * guile: new 'set-session-server-name!' procedure; see the manual for details. * * certtool: The authority key identifier will be set in a certificate only if the CA's subject key identifier is set. - Version 3.3.8 (released 2014-09-18) * * libgnutls: Updates in the name constraints checks. No name constraints will be checked for intermediate certificates. As our support for name constraints is limited to e-mail addresses in DNS names, it is pointless to check them on intermediate certificates. * * libgnutls: Fixed issues in PKCS #11 object listing. Previously multiple object listing would fail completely if a single object could not be exported. * * libgnutls: Improved the performance of PKCS #11 object listing/retrieving, by retrieving them in large batches. Report and suggestion by David Woodhouse. * * libgnutls: Fixed issue with certificates being sanitized by gnutls prior to signature verification. That resulted to certain non-DER compliant modifications of valid certificates, being corrected by libtasn1's parser and restructured as the original. Issue found and reported by Antti Karjalainen and Matti Kamunen from Codenomicon. * * libgnutls: Fixes in gnutls_x509_crt_set_dn() and friends to properly handle strings with embedded spaces and escaped commas. * * libgnutls: when comparing a CA certificate with the trusted list compare the name and key only instead of the whole certificate. That is to handle cases where a CA certificate was superceded by a different one with the same name and the same key. * * libgnutls: when verifying a certificate against a p11-kit trusted module, use the attached extensions in the module to override the CA's extensions (that requires p11-kit 0.20.7). * * libgnutls: In DTLS prevent sending zero-size fragments in certain cases of MTU split. Reported by Manuel Pégourié-Gonnard. * * libgnutls: Added gnutls_x509_trust_list_verify_crt2() which allows verifying using a hostname and a purpose (extended key usage). That enhances PKCS #11 trust module verification, as it can now check the purpose when this function is used. * * libgnutls: Corrected gnutls_x509_crl_verify() which would always report a CRL signature as invalid. Reported by Armin Burgmeier. * * libgnutls: added option --disable-padlock to allow disabling the padlock CPU acceleration. * * p11tool: when listing tokens, list their type as well. * * p11tool: when listing objects from a trust module print any attached extensions on certificates. - Version 3.3.7 (released 2014-08-24) * * libgnutls: Added function to export the public key of a PKCS #11 private key. Contributed by Wolfgang Meyer zu Bergsten. * * libgnutls: Explicitly set the exponent in PKCS #11 key generation. That improves compatibility with certain PKCS #11 modules. Contributed by Wolfgang Meyer zu Bergsten. * * libgnutls: When generating a PKCS #11 private key allow setting the WRAP/UNWRAP flags. Contributed by Wolfgang Meyer zu Bergsten. * * libgnutls: gnutls_pkcs11_privkey_t will always hold an open session to the key. * * libgnutls: bundle replacements of inet_pton and inet_aton if not available. * * libgnutls: initialize parameters variable on PKCS #8 decryption. * * libgnutls: gnutls_pkcs12_verify_mac() will not fail in other than SHA1 algorithms. * * libgnutls: gnutls_x509_crt_check_hostname() will follow the RFC6125 requirement of checking the Common Name (CN) part of DN only if there is a single CN present in the certificate. * * libgnutls: The environment variable GNUTLS_FORCE_FIPS_MODE can be used to force the FIPS mode, when set to 1. * * libgnutls: In DTLS ignore only errors that relate to unexpected packets and decryption failures. * * p11tool: Added --info parameter. * * certtool: Added --mark-wrap parameter. * * danetool: --check will attempt to retrieve the server's certificate chain and verify against it. * * danetool/gnutls-cli-debug: Added --app-proto parameters which can be used to enforce starttls (currently only SMTP and IMAP) on the connection. * * danetool: Added openssl linking exception, to allow linking with libunbound. - Version 3.3.6 (released 2014-07-23) * * libgnutls: Use inet_ntop to print IP addresses when available * * libgnutls: gnutls_x509_crt_check_hostname and friends will also check IP addresses, and match documented behavior. Reported by David Woodhouse. * * libgnutls: DSA key generation in FIPS140-2 mode doesn't allow 1024 bit parameters. * * libgnutls: fixed issue in gnutls_pkcs11_reinit() which prevented tokens being usable after a reinitialization. * * libgnutls: fixed PKCS #11 private key operations after a fork. * * libgnutls: fixed PKCS #11 ECDSA key generation. * * libgnutls: The GNUTLS_CPUID_OVERRIDE environment variable can be used to explicitly enable/disable the use of certain CPU capabilities. Note that CPU detection cannot be overriden, i.e., VIA options cannot be enabled on an Intel CPU. The currently available options are: 0x1: Disable all run-time detected optimizations 0x2: Enable AES-NI 0x4: Enable SSSE3 0x8: Enable PCLMUL 0x100000: Enable VIA padlock 0x200000: Enable VIA PHE 0x400000: Enable VIA PHE SHA512 * * libdane: added dane_query_to_raw_tlsa(); patch by Simon Arlott. * * p11tool: use GNUTLS_SO_PIN to read the security officer's PIN if set. * * p11tool: ask for label when one isn't provided. * * p11tool: added --batch parameter to disable any interactivity. * * p11tool: will not implicitly enable so-login for certain types of objects. That avoids issues with tokens that require different login types. * * certtool/p11tool: Added the --curve parameter which allows to explicitly specify the curve to use. - Version 3.3.5 (released 2014-06-26) * * libgnutls: Added gnutls_record_recv_packet() and gnutls_packet_deinit(). These functions provide a variant of gnutls_record_recv() that avoids the final memcpy of data. * * libgnutls: gnutls_x509_crl_iter_crt_serial() was added as a faster variant of gnutls_x509_crl_get_crt_serial() when coping with very large structures. * * libgnutls: When the decoding of a printable DN element fails, then treat it as unknown and print its hex value rather than failing. That works around an issue in a TURKTRST root certificate which improperly encodes the X520countryName element. * * libgnutls: gnutls_x509_trust_list_add_trust_file() will return the number of certificates present in a PKCS #11 token when loading it. * * libgnutls: Allow the post client hello callback to put the handshake on hold, by returning GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED. * * certtool: option --to-p12 will now consider --load-ca-certificate * * certtol: Added option to specify the PKCS #12 friendly name on command line. * * p11tool: Allow marking a certificate copied to a token as a CA. - Version 3.3.4 (released 2014-05-31) * * libgnutls: Updated Andy Polyakov's assembly code. That prevents a crash on certain CPUs. - Version 3.3.3 (released 2014-05-30) * * libgnutls: Eliminated memory corruption issue in Server Hello parsing. Issue reported by Joonas Kuorilehto of Codenomicon. * * libgnutls: gnutls_global_set_mutex() was modified to operate with the new initialization process. * * libgnutls: Increased the maximum certificate size buffer in the PKCS #11 subsystem. * * libgnutls: Check the return code of getpwuid_r() instead of relying on the result value. That avoids issue in certain systems, when using tofu authentication and the home path cannot be determined. Issue reported by Viktor Dukhovni. * * libgnutls-dane: Improved dane_verify_session_crt(), which now attempts to create a full chain. This addresses points from https://savannah.gnu.org/support/index.php?108552 * * gnutls-cli: --dane will only check the end certificate if PKIX validation has been disabled. * * gnutls-cli: --benchmark-soft-ciphers has been removed. That option cannot be emulated with the implicit initialization of gnutls. * * certtool: Allow multiple organizations and organizational unit names to be specified in a template. * * certtool: Warn when invalid configuration options are set to a template. * * ocsptool: Include path in ocsp request. This resolves #108582 (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen. - Version 3.3.2 (released 2014-05-06) * * libgnutls: Added the 'very weak' certificate verification profile that corresponds to 64-bit security level. * * libgnutls: Corrected file descriptor leak on random generator initialization. * * libgnutls: Corrected file descriptor leak on PSK password file reading. Issue identified using the Codenomicon TLS test suite. * * libgnutls: Avoid deinitialization if initialization has failed. * * libgnutls: null-terminate othername alternative names. * * libgnutls: gnutls_x509_trust_list_get_issuer() will operate correctly on a PKCS #11 trust list. * * libgnutls: Several small bug fixes identified using valgrind and the Codenomicon TLS test suite. * * libgnutls-dane: Accept a certificate using DANE if there is at least one entry that matches the certificate. Patch by simon [at] arlott.org. * * libgnutls-guile: Fixed compilation issue. * * certtool: Allow exporting a CRL on DER format. * * certtool: The ECDSA keys generated by default use the SECP256R1 curve which is supported more widely than the previously used SECP224R1. - Version 3.3.1 (released 2014-04-19) * * libgnutls: Enforce more strict checks to heartbeat messages concerning padding and payload. Suggested by Peter Dettman. * * libgnutls: Allow decoding PKCS #8 files with ECC parameters from openssl. * * libgnutls: Several small bug fixes found by coverity. * * libgnutls: The conditionally available self-test functions were moved to self-test.h. * * libgnutls: Fixed issue with the check of incoming data when two different recv and send pointers have been specified. Reported and investigated by JMRecio. * * libgnutls: Fixed issue in the RSA-PSK key exchange, which would result to illegal memory access if a server hint was provided. Reported by André Klitzing. * * libgnutls: Fixed client memory leak in the PSK key exchange, if a server hint was provided. * * libgnutls: Corrected the *get_*_othername_oid() functions. - Version 3.3.0 (released 2014-04-10) * * libgnutls: The initialization of the library was moved to a constructor. That is, gnutls_global_init() is no longer required unless linking with a static library or a system that does not support library constructors. * * libgnutls: static libraries are not built by default. * * libgnutls: PKCS #11 initialization is delayed to first usage. That avoids long delays in gnutls initialization due to broken PKCS #11 modules. * * libgnutls: The PKCS #11 subsystem is re-initialized "automatically" on the first PKCS #11 API call after a fork. * * libgnutls: certificate verification profiles were introduced that can be specified as flags to verification functions. They are enumerations in gnutls_certificate_verification_profiles_t and can be converted to flags for use in a verification function using GNUTLS_PROFILE_TO_VFLAGS(). * * libgnutls: Added the ability to read system-specific initial keywords, if they are prefixed with '@'. That allows a compile-time specified configuration file to be used to read pre-configured priority strings from. That can be used to impose system specific policies. * * libgnutls: Increased the default security level of priority strings (NORMAL and PFS strings require at minimum a 1008 DH prime), and set a verification profile by default. The LEGACY keyword is introduced to set the old defaults. * * libgnutls: Added support for the name constraints PKIX extension. Currently only DNS names and e-mails are supported (no URIs, IPs or DNs). * * libgnutls: Security parameter SEC_PARAM_NORMAL was renamed to SEC_PARAM_MEDIUM to avoid confusion with the priority string NORMAL. * * libgnutls: Added new API in x509-ext.h to handle X.509 extensions. This API handles the X.509 extensions in isolation, allowing to parse similarly formatted extensions stored in other structures. * * libgnutls: When generating DSA keys the macro GNUTLS_SUBGROUP_TO_BITS can be used to specify a particular subgroup as the number of bits in gnutls_privkey_generate; e.g., GNUTLS_SUBGROUP_TO_BITS(2048, 256). * * libgnutls: DH parameter generation is now delegated to nettle. That unfortunately has the side-effect that DH parameters longer than 3072 bits, cannot be generated (not without a nettle update). * * libgnutls: Separated nonce RNG from the main RNG. The nonce random number generator is based on salsa20/12. * * libgnutls: The buffer alignment provided to crypto backend is enforced to be 16-byte aligned, when compiled with cryptodev support. That allows certain cryptodev drivers to operate more efficiently. * * libgnutls: Return error when a public/private key pair that doesn't match is set into a credentials structure. * * libgnutls: Depend on p11-kit 0.20.0 or later. * * libgnutls: The new padding (%NEW_PADDING) experimental TLS extension has been removed. It was not approved by IETF. * * libgnutls: The experimental xssl library is removed from the gnutls distribution. * * libgnutls: Reduced the number of gnulib modules used in the main library. * * libgnutls: Added priority string %DISABLE_WILDCARDS. * * libgnutls: Added the more extensible verification function gnutls_certificate_verify_peers(), that allows checking, in addition to a peer's DNS hostname, for the key purpose of the end certificate (via PKIX extended key usage). * * certtool: Timestamps for serial numbers were increased to 8 bytes, and in batch mode to 12 (appended with 4 random bytes). * * certtool: When no CRL number is provided (or value set to -1), then a time-based number will be used, similarly to the serial generation number in certificates. * * certtool: Print the SHA256 fingerprint of a certificate in addition to SHA1. * * libgnutls: Added --enable-fips140-mode configuration option (unsupported). That option enables (when running on FIPS140-enabled system): o RSA, DSA and DH key generation as in FIPS-186-4 (using provable primes) o The DRBG-CTR-AES256 deterministic random generator from SP800-90A. o Self-tests on initialization on ciphers/MACs, public key algorithms and the random generator. o HMAC-SHA256 verification of the library on load. o MD5 is included for TLS purposes but cannot be used by the high level hashing functions. o All ciphers except AES are disabled. o All MACs and hashes except GCM and SHA are disabled (e.g., HMAC-MD5). o All keys (temporal and long term) are zeroized after use. o Security levels are adjusted to the FIPS140-2 recommendations (rather than ECRYPT).- build with PIE for commandline tools- Updated to 3.2.21 (released 2014-12-11) - libgnutls: Corrected regression introduced in 3.2.19 related to session renegotiation. Reported by Dan Winship. - libgnutls: Corrected parsing issue with OCSP responses.- Updated to 3.2.20 (released 2014-11-10) * * libgnutls: Removed superfluous random generator refresh on every call of gnutls_deinit(). That reduces load and usage of /dev/urandom. * * libgnutls: Corrected issue in export of ECC parameters to X9.63 format. Reported by Sean Burford [GNUTLS-SA-2014-5]. (CVE-2014-8564 bnc#904603) - Updated to 3.2.19 (released 2014-10-13) * * libgnutls: Fixes in the transparent import of PKCS #11 certificates. Reported by Joseph Peruski. * * libgnutls: Fixed issue with unexpected non-fatal errors resetting the handshake's hash buffer, in applications using the heartbeat extension or DTLS. Reported by Joeri de Ruiter. * * libgnutls: fix issue in DTLS retransmission when session tickets were in use; reported by Manuel Pégourié-Gonnard. * * libgnutls: Prevent abort() in library if getrusage() fails. Try to detect instead which of RUSAGE_THREAD and RUSAGE_SELF would work. * * guile: new 'set-session-server-name!' procedure; see the manual for details./bin/sh/bin/shh03-ch2d 1712671219  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~3.7.3-150400.4.44.13.7.3-150400.4.44.13.7.3-150400.4.44.13.7.3 gnutlsabstract.hcompat.hcrypto.hdtls.hgnutls.hocsp.hopenpgp.hpkcs11.hpkcs12.hpkcs7.hself-test.hsocket.hsystem-keys.htpm.hurls.hx509-ext.hx509.hlibgnutls.sognutls.pclibgnutls-develexamplesex-alert.cex-cert-select-pkcs11.cex-cert-select.cex-client-anon.cex-client-dtls.cex-client-psk.cex-client-resume.cex-client-srp.cex-client-x509-3.1.cex-client-x509.cex-crq.cex-ocsp-client.cex-pkcs11-list.cex-pkcs12.cex-serv-anon.cex-serv-dtls.cex-serv-psk.cex-serv-srp.cex-serv-x509.cex-session-info.cex-verify-ssh.cex-verify.cex-x509-info.cexamples.hprint-ciphersuites.ctcp.cudp.cverify.cgnutls-client-server-use-case.png.gzgnutls-crypto-layers.png.gzgnutls-handshake-sequence.png.gzgnutls-handshake-state.png.gzgnutls-internals.png.gzgnutls-layers.png.gzgnutls-logo.png.gzgnutls-modauth.png.gzgnutls-x509.png.gzgnutls.htmlpkcs11-vision.png.gzreferenceapi-index-full.htmlgnutls-abstract.htmlgnutls-crypto.htmlgnutls-dtls.htmlgnutls-gnutls.htmlgnutls-ocsp.htmlgnutls-openpgp.htmlgnutls-pkcs11.htmlgnutls-pkcs12.htmlgnutls-tpm.htmlgnutls-x509.htmlgnutls.devhelp2home.png.gzindex.htmlintro.htmlleft-insensitive.png.gzleft.png.gzright-insensitive.png.gzright.png.gzstyle.cssup-insensitive.png.gzup.png.gzgnutls-client-server-use-case.png.gzgnutls-crypto-layers.png.gzgnutls-guile.info.gzgnutls-handshake-sequence.png.gzgnutls-handshake-state.png.gzgnutls-internals.png.gzgnutls-layers.png.gzgnutls-logo.png.gzgnutls-modauth.png.gzgnutls-x509.png.gzgnutls.info-1.gzgnutls.info-2.gzgnutls.info-3.gzgnutls.info-4.gzgnutls.info-5.gzgnutls.info-6.gzgnutls.info-7.gzgnutls.info.gzpkcs11-vision.png.gzdane_cert_type_name.3.gzdane_cert_usage_name.3.gzdane_match_type_name.3.gzdane_query_data.3.gzdane_query_deinit.3.gzdane_query_entries.3.gzdane_query_status.3.gzdane_query_tlsa.3.gzdane_query_to_raw_tlsa.3.gzdane_raw_tlsa.3.gzdane_state_deinit.3.gzdane_state_init.3.gzdane_state_set_dlv_file.3.gzdane_strerror.3.gzdane_verification_status_print.3.gzdane_verify_crt.3.gzdane_verify_crt_raw.3.gzdane_verify_session_crt.3.gzgnutls_aead_cipher_decrypt.3.gzgnutls_aead_cipher_decryptv2.3.gzgnutls_aead_cipher_deinit.3.gzgnutls_aead_cipher_encrypt.3.gzgnutls_aead_cipher_encryptv.3.gzgnutls_aead_cipher_encryptv2.3.gzgnutls_aead_cipher_init.3.gzgnutls_alert_get.3.gzgnutls_alert_get_name.3.gzgnutls_alert_get_strname.3.gzgnutls_alert_send.3.gzgnutls_alert_send_appropriate.3.gzgnutls_alert_set_read_function.3.gzgnutls_alpn_get_selected_protocol.3.gzgnutls_alpn_set_protocols.3.gzgnutls_anon_allocate_client_credentials.3.gzgnutls_anon_allocate_server_credentials.3.gzgnutls_anon_free_client_credentials.3.gzgnutls_anon_free_server_credentials.3.gzgnutls_anon_set_params_function.3.gzgnutls_anon_set_server_dh_params.3.gzgnutls_anon_set_server_known_dh_params.3.gzgnutls_anon_set_server_params_function.3.gzgnutls_anti_replay_deinit.3.gzgnutls_anti_replay_enable.3.gzgnutls_anti_replay_init.3.gzgnutls_anti_replay_set_add_function.3.gzgnutls_anti_replay_set_ptr.3.gzgnutls_anti_replay_set_window.3.gzgnutls_auth_client_get_type.3.gzgnutls_auth_get_type.3.gzgnutls_auth_server_get_type.3.gzgnutls_base64_decode2.3.gzgnutls_base64_encode2.3.gzgnutls_buffer_append_data.3.gzgnutls_bye.3.gzgnutls_certificate_activation_time_peers.3.gzgnutls_certificate_allocate_credentials.3.gzgnutls_certificate_client_get_request_status.3.gzgnutls_certificate_expiration_time_peers.3.gzgnutls_certificate_free_ca_names.3.gzgnutls_certificate_free_cas.3.gzgnutls_certificate_free_credentials.3.gzgnutls_certificate_free_crls.3.gzgnutls_certificate_free_keys.3.gzgnutls_certificate_get_crt_raw.3.gzgnutls_certificate_get_issuer.3.gzgnutls_certificate_get_ocsp_expiration.3.gzgnutls_certificate_get_ours.3.gzgnutls_certificate_get_peers.3.gzgnutls_certificate_get_peers_subkey_id.3.gzgnutls_certificate_get_trust_list.3.gzgnutls_certificate_get_verify_flags.3.gzgnutls_certificate_get_x509_crt.3.gzgnutls_certificate_get_x509_key.3.gzgnutls_certificate_send_x509_rdn_sequence.3.gzgnutls_certificate_server_set_request.3.gzgnutls_certificate_set_dh_params.3.gzgnutls_certificate_set_flags.3.gzgnutls_certificate_set_key.3.gzgnutls_certificate_set_known_dh_params.3.gzgnutls_certificate_set_ocsp_status_request_file.3.gzgnutls_certificate_set_ocsp_status_request_file2.3.gzgnutls_certificate_set_ocsp_status_request_function.3.gzgnutls_certificate_set_ocsp_status_request_function2.3.gzgnutls_certificate_set_ocsp_status_request_mem.3.gzgnutls_certificate_set_params_function.3.gzgnutls_certificate_set_pin_function.3.gzgnutls_certificate_set_rawpk_key_file.3.gzgnutls_certificate_set_rawpk_key_mem.3.gzgnutls_certificate_set_retrieve_function.3.gzgnutls_certificate_set_retrieve_function2.3.gzgnutls_certificate_set_retrieve_function3.3.gzgnutls_certificate_set_trust_list.3.gzgnutls_certificate_set_verify_flags.3.gzgnutls_certificate_set_verify_function.3.gzgnutls_certificate_set_verify_limits.3.gzgnutls_certificate_set_x509_crl.3.gzgnutls_certificate_set_x509_crl_file.3.gzgnutls_certificate_set_x509_crl_mem.3.gzgnutls_certificate_set_x509_key.3.gzgnutls_certificate_set_x509_key_file.3.gzgnutls_certificate_set_x509_key_file2.3.gzgnutls_certificate_set_x509_key_mem.3.gzgnutls_certificate_set_x509_key_mem2.3.gzgnutls_certificate_set_x509_simple_pkcs12_file.3.gzgnutls_certificate_set_x509_simple_pkcs12_mem.3.gzgnutls_certificate_set_x509_system_trust.3.gzgnutls_certificate_set_x509_trust.3.gzgnutls_certificate_set_x509_trust_dir.3.gzgnutls_certificate_set_x509_trust_file.3.gzgnutls_certificate_set_x509_trust_mem.3.gzgnutls_certificate_type_get.3.gzgnutls_certificate_type_get2.3.gzgnutls_certificate_type_get_id.3.gzgnutls_certificate_type_get_name.3.gzgnutls_certificate_type_list.3.gzgnutls_certificate_verification_profile_get_id.3.gzgnutls_certificate_verification_profile_get_name.3.gzgnutls_certificate_verification_status_print.3.gzgnutls_certificate_verify_peers.3.gzgnutls_certificate_verify_peers2.3.gzgnutls_certificate_verify_peers3.3.gzgnutls_check_version.3.gzgnutls_cipher_add_auth.3.gzgnutls_cipher_decrypt.3.gzgnutls_cipher_decrypt2.3.gzgnutls_cipher_deinit.3.gzgnutls_cipher_encrypt.3.gzgnutls_cipher_encrypt2.3.gzgnutls_cipher_get.3.gzgnutls_cipher_get_block_size.3.gzgnutls_cipher_get_id.3.gzgnutls_cipher_get_iv_size.3.gzgnutls_cipher_get_key_size.3.gzgnutls_cipher_get_name.3.gzgnutls_cipher_get_tag_size.3.gzgnutls_cipher_init.3.gzgnutls_cipher_list.3.gzgnutls_cipher_set_iv.3.gzgnutls_cipher_suite_get_name.3.gzgnutls_cipher_suite_info.3.gzgnutls_cipher_tag.3.gzgnutls_compression_get.3.gzgnutls_compression_get_id.3.gzgnutls_compression_get_name.3.gzgnutls_compression_list.3.gzgnutls_credentials_clear.3.gzgnutls_credentials_get.3.gzgnutls_credentials_set.3.gzgnutls_crypto_register_aead_cipher.3.gzgnutls_crypto_register_cipher.3.gzgnutls_crypto_register_digest.3.gzgnutls_crypto_register_mac.3.gzgnutls_db_check_entry.3.gzgnutls_db_check_entry_expire_time.3.gzgnutls_db_check_entry_time.3.gzgnutls_db_get_default_cache_expiration.3.gzgnutls_db_get_ptr.3.gzgnutls_db_remove_session.3.gzgnutls_db_set_cache_expiration.3.gzgnutls_db_set_ptr.3.gzgnutls_db_set_remove_function.3.gzgnutls_db_set_retrieve_function.3.gzgnutls_db_set_store_function.3.gzgnutls_decode_ber_digest_info.3.gzgnutls_decode_gost_rs_value.3.gzgnutls_decode_rs_value.3.gzgnutls_deinit.3.gzgnutls_dh_get_group.3.gzgnutls_dh_get_peers_public_bits.3.gzgnutls_dh_get_prime_bits.3.gzgnutls_dh_get_pubkey.3.gzgnutls_dh_get_secret_bits.3.gzgnutls_dh_params_cpy.3.gzgnutls_dh_params_deinit.3.gzgnutls_dh_params_export2_pkcs3.3.gzgnutls_dh_params_export_pkcs3.3.gzgnutls_dh_params_export_raw.3.gzgnutls_dh_params_generate2.3.gzgnutls_dh_params_import_dsa.3.gzgnutls_dh_params_import_pkcs3.3.gzgnutls_dh_params_import_raw.3.gzgnutls_dh_params_import_raw2.3.gzgnutls_dh_params_import_raw3.3.gzgnutls_dh_params_init.3.gzgnutls_dh_set_prime_bits.3.gzgnutls_digest_get_id.3.gzgnutls_digest_get_name.3.gzgnutls_digest_get_oid.3.gzgnutls_digest_list.3.gzgnutls_digest_set_secure.3.gzgnutls_dtls_cookie_send.3.gzgnutls_dtls_cookie_verify.3.gzgnutls_dtls_get_data_mtu.3.gzgnutls_dtls_get_mtu.3.gzgnutls_dtls_get_timeout.3.gzgnutls_dtls_prestate_set.3.gzgnutls_dtls_set_data_mtu.3.gzgnutls_dtls_set_mtu.3.gzgnutls_dtls_set_timeouts.3.gzgnutls_early_cipher_get.3.gzgnutls_early_prf_hash_get.3.gzgnutls_ecc_curve_get.3.gzgnutls_ecc_curve_get_id.3.gzgnutls_ecc_curve_get_name.3.gzgnutls_ecc_curve_get_oid.3.gzgnutls_ecc_curve_get_pk.3.gzgnutls_ecc_curve_get_size.3.gzgnutls_ecc_curve_list.3.gzgnutls_ecc_curve_set_enabled.3.gzgnutls_encode_ber_digest_info.3.gzgnutls_encode_gost_rs_value.3.gzgnutls_encode_rs_value.3.gzgnutls_error_is_fatal.3.gzgnutls_error_to_alert.3.gzgnutls_est_record_overhead_size.3.gzgnutls_ext_get_current_msg.3.gzgnutls_ext_get_data.3.gzgnutls_ext_get_name.3.gzgnutls_ext_get_name2.3.gzgnutls_ext_raw_parse.3.gzgnutls_ext_register.3.gzgnutls_ext_set_data.3.gzgnutls_fingerprint.3.gzgnutls_fips140_context_deinit.3.gzgnutls_fips140_context_init.3.gzgnutls_fips140_get_operation_state.3.gzgnutls_fips140_mode_enabled.3.gzgnutls_fips140_pop_context.3.gzgnutls_fips140_push_context.3.gzgnutls_fips140_run_self_tests.3.gzgnutls_fips140_set_mode.3.gzgnutls_get_library_config.3.gzgnutls_get_system_config_file.3.gzgnutls_global_deinit.3.gzgnutls_global_init.3.gzgnutls_global_set_audit_log_function.3.gzgnutls_global_set_log_function.3.gzgnutls_global_set_log_level.3.gzgnutls_global_set_mem_functions.3.gzgnutls_global_set_mutex.3.gzgnutls_global_set_time_function.3.gzgnutls_gost_paramset_get_name.3.gzgnutls_gost_paramset_get_oid.3.gzgnutls_group_get.3.gzgnutls_group_get_id.3.gzgnutls_group_get_name.3.gzgnutls_group_list.3.gzgnutls_handshake.3.gzgnutls_handshake_description_get_name.3.gzgnutls_handshake_get_last_in.3.gzgnutls_handshake_get_last_out.3.gzgnutls_handshake_set_hook_function.3.gzgnutls_handshake_set_max_packet_length.3.gzgnutls_handshake_set_post_client_hello_function.3.gzgnutls_handshake_set_private_extensions.3.gzgnutls_handshake_set_random.3.gzgnutls_handshake_set_read_function.3.gzgnutls_handshake_set_secret_function.3.gzgnutls_handshake_set_timeout.3.gzgnutls_handshake_write.3.gzgnutls_hash.3.gzgnutls_hash_copy.3.gzgnutls_hash_deinit.3.gzgnutls_hash_fast.3.gzgnutls_hash_get_len.3.gzgnutls_hash_init.3.gzgnutls_hash_output.3.gzgnutls_heartbeat_allowed.3.gzgnutls_heartbeat_enable.3.gzgnutls_heartbeat_get_timeout.3.gzgnutls_heartbeat_ping.3.gzgnutls_heartbeat_pong.3.gzgnutls_heartbeat_set_timeouts.3.gzgnutls_hex2bin.3.gzgnutls_hex_decode.3.gzgnutls_hex_decode2.3.gzgnutls_hex_encode.3.gzgnutls_hex_encode2.3.gzgnutls_hkdf_expand.3.gzgnutls_hkdf_extract.3.gzgnutls_hmac.3.gzgnutls_hmac_copy.3.gzgnutls_hmac_deinit.3.gzgnutls_hmac_fast.3.gzgnutls_hmac_get_key_size.3.gzgnutls_hmac_get_len.3.gzgnutls_hmac_init.3.gzgnutls_hmac_output.3.gzgnutls_hmac_set_nonce.3.gzgnutls_idna_map.3.gzgnutls_idna_reverse_map.3.gzgnutls_init.3.gzgnutls_key_generate.3.gzgnutls_kx_get.3.gzgnutls_kx_get_id.3.gzgnutls_kx_get_name.3.gzgnutls_kx_list.3.gzgnutls_load_file.3.gzgnutls_mac_get.3.gzgnutls_mac_get_id.3.gzgnutls_mac_get_key_size.3.gzgnutls_mac_get_name.3.gzgnutls_mac_get_nonce_size.3.gzgnutls_mac_list.3.gzgnutls_memcmp.3.gzgnutls_memset.3.gzgnutls_ocsp_req_add_cert.3.gzgnutls_ocsp_req_add_cert_id.3.gzgnutls_ocsp_req_deinit.3.gzgnutls_ocsp_req_export.3.gzgnutls_ocsp_req_get_cert_id.3.gzgnutls_ocsp_req_get_extension.3.gzgnutls_ocsp_req_get_nonce.3.gzgnutls_ocsp_req_get_version.3.gzgnutls_ocsp_req_import.3.gzgnutls_ocsp_req_init.3.gzgnutls_ocsp_req_print.3.gzgnutls_ocsp_req_randomize_nonce.3.gzgnutls_ocsp_req_set_extension.3.gzgnutls_ocsp_req_set_nonce.3.gzgnutls_ocsp_resp_check_crt.3.gzgnutls_ocsp_resp_deinit.3.gzgnutls_ocsp_resp_export.3.gzgnutls_ocsp_resp_export2.3.gzgnutls_ocsp_resp_get_certs.3.gzgnutls_ocsp_resp_get_extension.3.gzgnutls_ocsp_resp_get_nonce.3.gzgnutls_ocsp_resp_get_produced.3.gzgnutls_ocsp_resp_get_responder.3.gzgnutls_ocsp_resp_get_responder2.3.gzgnutls_ocsp_resp_get_responder_raw_id.3.gzgnutls_ocsp_resp_get_response.3.gzgnutls_ocsp_resp_get_signature.3.gzgnutls_ocsp_resp_get_signature_algorithm.3.gzgnutls_ocsp_resp_get_single.3.gzgnutls_ocsp_resp_get_status.3.gzgnutls_ocsp_resp_get_version.3.gzgnutls_ocsp_resp_import.3.gzgnutls_ocsp_resp_import2.3.gzgnutls_ocsp_resp_init.3.gzgnutls_ocsp_resp_list_import2.3.gzgnutls_ocsp_resp_print.3.gzgnutls_ocsp_resp_verify.3.gzgnutls_ocsp_resp_verify_direct.3.gzgnutls_ocsp_status_request_enable_client.3.gzgnutls_ocsp_status_request_get.3.gzgnutls_ocsp_status_request_get2.3.gzgnutls_ocsp_status_request_is_checked.3.gzgnutls_oid_to_digest.3.gzgnutls_oid_to_ecc_curve.3.gzgnutls_oid_to_gost_paramset.3.gzgnutls_oid_to_mac.3.gzgnutls_oid_to_pk.3.gzgnutls_oid_to_sign.3.gzgnutls_openpgp_privkey_sign_hash.3.gzgnutls_openpgp_send_cert.3.gzgnutls_packet_deinit.3.gzgnutls_packet_get.3.gzgnutls_pbkdf2.3.gzgnutls_pcert_deinit.3.gzgnutls_pcert_export_openpgp.3.gzgnutls_pcert_export_x509.3.gzgnutls_pcert_import_openpgp.3.gzgnutls_pcert_import_openpgp_raw.3.gzgnutls_pcert_import_rawpk.3.gzgnutls_pcert_import_rawpk_raw.3.gzgnutls_pcert_import_x509.3.gzgnutls_pcert_import_x509_list.3.gzgnutls_pcert_import_x509_raw.3.gzgnutls_pcert_list_import_x509_file.3.gzgnutls_pcert_list_import_x509_raw.3.gzgnutls_pem_base64_decode.3.gzgnutls_pem_base64_decode2.3.gzgnutls_pem_base64_encode.3.gzgnutls_pem_base64_encode2.3.gzgnutls_perror.3.gzgnutls_pk_algorithm_get_name.3.gzgnutls_pk_bits_to_sec_param.3.gzgnutls_pk_get_id.3.gzgnutls_pk_get_name.3.gzgnutls_pk_get_oid.3.gzgnutls_pk_list.3.gzgnutls_pk_to_sign.3.gzgnutls_pkcs11_add_provider.3.gzgnutls_pkcs11_copy_attached_extension.3.gzgnutls_pkcs11_copy_pubkey.3.gzgnutls_pkcs11_copy_secret_key.3.gzgnutls_pkcs11_copy_x509_crt.3.gzgnutls_pkcs11_copy_x509_crt2.3.gzgnutls_pkcs11_copy_x509_privkey.3.gzgnutls_pkcs11_copy_x509_privkey2.3.gzgnutls_pkcs11_crt_is_known.3.gzgnutls_pkcs11_deinit.3.gzgnutls_pkcs11_delete_url.3.gzgnutls_pkcs11_get_pin_function.3.gzgnutls_pkcs11_get_raw_issuer.3.gzgnutls_pkcs11_get_raw_issuer_by_dn.3.gzgnutls_pkcs11_get_raw_issuer_by_subject_key_id.3.gzgnutls_pkcs11_init.3.gzgnutls_pkcs11_obj_deinit.3.gzgnutls_pkcs11_obj_export.3.gzgnutls_pkcs11_obj_export2.3.gzgnutls_pkcs11_obj_export3.3.gzgnutls_pkcs11_obj_export_url.3.gzgnutls_pkcs11_obj_flags_get_str.3.gzgnutls_pkcs11_obj_get_exts.3.gzgnutls_pkcs11_obj_get_flags.3.gzgnutls_pkcs11_obj_get_info.3.gzgnutls_pkcs11_obj_get_ptr.3.gzgnutls_pkcs11_obj_get_type.3.gzgnutls_pkcs11_obj_import_url.3.gzgnutls_pkcs11_obj_init.3.gzgnutls_pkcs11_obj_list_import_url3.3.gzgnutls_pkcs11_obj_list_import_url4.3.gzgnutls_pkcs11_obj_set_info.3.gzgnutls_pkcs11_obj_set_pin_function.3.gzgnutls_pkcs11_privkey_cpy.3.gzgnutls_pkcs11_privkey_deinit.3.gzgnutls_pkcs11_privkey_export_pubkey.3.gzgnutls_pkcs11_privkey_export_url.3.gzgnutls_pkcs11_privkey_generate.3.gzgnutls_pkcs11_privkey_generate2.3.gzgnutls_pkcs11_privkey_generate3.3.gzgnutls_pkcs11_privkey_get_info.3.gzgnutls_pkcs11_privkey_get_pk_algorithm.3.gzgnutls_pkcs11_privkey_import_url.3.gzgnutls_pkcs11_privkey_init.3.gzgnutls_pkcs11_privkey_set_pin_function.3.gzgnutls_pkcs11_privkey_status.3.gzgnutls_pkcs11_reinit.3.gzgnutls_pkcs11_set_pin_function.3.gzgnutls_pkcs11_set_token_function.3.gzgnutls_pkcs11_token_check_mechanism.3.gzgnutls_pkcs11_token_get_flags.3.gzgnutls_pkcs11_token_get_info.3.gzgnutls_pkcs11_token_get_mechanism.3.gzgnutls_pkcs11_token_get_ptr.3.gzgnutls_pkcs11_token_get_random.3.gzgnutls_pkcs11_token_get_url.3.gzgnutls_pkcs11_token_init.3.gzgnutls_pkcs11_token_set_pin.3.gzgnutls_pkcs11_type_get_name.3.gzgnutls_pkcs12_bag_decrypt.3.gzgnutls_pkcs12_bag_deinit.3.gzgnutls_pkcs12_bag_enc_info.3.gzgnutls_pkcs12_bag_encrypt.3.gzgnutls_pkcs12_bag_get_count.3.gzgnutls_pkcs12_bag_get_data.3.gzgnutls_pkcs12_bag_get_friendly_name.3.gzgnutls_pkcs12_bag_get_key_id.3.gzgnutls_pkcs12_bag_get_type.3.gzgnutls_pkcs12_bag_init.3.gzgnutls_pkcs12_bag_set_crl.3.gzgnutls_pkcs12_bag_set_crt.3.gzgnutls_pkcs12_bag_set_data.3.gzgnutls_pkcs12_bag_set_friendly_name.3.gzgnutls_pkcs12_bag_set_key_id.3.gzgnutls_pkcs12_bag_set_privkey.3.gzgnutls_pkcs12_deinit.3.gzgnutls_pkcs12_export.3.gzgnutls_pkcs12_export2.3.gzgnutls_pkcs12_generate_mac.3.gzgnutls_pkcs12_generate_mac2.3.gzgnutls_pkcs12_get_bag.3.gzgnutls_pkcs12_import.3.gzgnutls_pkcs12_init.3.gzgnutls_pkcs12_mac_info.3.gzgnutls_pkcs12_set_bag.3.gzgnutls_pkcs12_simple_parse.3.gzgnutls_pkcs12_verify_mac.3.gzgnutls_pkcs7_add_attr.3.gzgnutls_pkcs7_attrs_deinit.3.gzgnutls_pkcs7_deinit.3.gzgnutls_pkcs7_delete_crl.3.gzgnutls_pkcs7_delete_crt.3.gzgnutls_pkcs7_export.3.gzgnutls_pkcs7_export2.3.gzgnutls_pkcs7_get_attr.3.gzgnutls_pkcs7_get_crl_count.3.gzgnutls_pkcs7_get_crl_raw.3.gzgnutls_pkcs7_get_crl_raw2.3.gzgnutls_pkcs7_get_crt_count.3.gzgnutls_pkcs7_get_crt_raw.3.gzgnutls_pkcs7_get_crt_raw2.3.gzgnutls_pkcs7_get_embedded_data.3.gzgnutls_pkcs7_get_embedded_data_oid.3.gzgnutls_pkcs7_get_signature_count.3.gzgnutls_pkcs7_get_signature_info.3.gzgnutls_pkcs7_import.3.gzgnutls_pkcs7_init.3.gzgnutls_pkcs7_print.3.gzgnutls_pkcs7_print_signature_info.3.gzgnutls_pkcs7_set_crl.3.gzgnutls_pkcs7_set_crl_raw.3.gzgnutls_pkcs7_set_crt.3.gzgnutls_pkcs7_set_crt_raw.3.gzgnutls_pkcs7_sign.3.gzgnutls_pkcs7_signature_info_deinit.3.gzgnutls_pkcs7_verify.3.gzgnutls_pkcs7_verify_direct.3.gzgnutls_pkcs8_info.3.gzgnutls_pkcs_schema_get_name.3.gzgnutls_pkcs_schema_get_oid.3.gzgnutls_prf.3.gzgnutls_prf_early.3.gzgnutls_prf_hash_get.3.gzgnutls_prf_raw.3.gzgnutls_prf_rfc5705.3.gzgnutls_priority_certificate_type_list.3.gzgnutls_priority_certificate_type_list2.3.gzgnutls_priority_cipher_list.3.gzgnutls_priority_compression_list.3.gzgnutls_priority_deinit.3.gzgnutls_priority_ecc_curve_list.3.gzgnutls_priority_get_cipher_suite_index.3.gzgnutls_priority_group_list.3.gzgnutls_priority_init.3.gzgnutls_priority_init2.3.gzgnutls_priority_kx_list.3.gzgnutls_priority_mac_list.3.gzgnutls_priority_protocol_list.3.gzgnutls_priority_set.3.gzgnutls_priority_set_direct.3.gzgnutls_priority_sign_list.3.gzgnutls_priority_string_list.3.gzgnutls_privkey_decrypt_data.3.gzgnutls_privkey_decrypt_data2.3.gzgnutls_privkey_deinit.3.gzgnutls_privkey_export_dsa_raw.3.gzgnutls_privkey_export_dsa_raw2.3.gzgnutls_privkey_export_ecc_raw.3.gzgnutls_privkey_export_ecc_raw2.3.gzgnutls_privkey_export_gost_raw2.3.gzgnutls_privkey_export_openpgp.3.gzgnutls_privkey_export_pkcs11.3.gzgnutls_privkey_export_rsa_raw.3.gzgnutls_privkey_export_rsa_raw2.3.gzgnutls_privkey_export_x509.3.gzgnutls_privkey_generate.3.gzgnutls_privkey_generate2.3.gzgnutls_privkey_get_pk_algorithm.3.gzgnutls_privkey_get_seed.3.gzgnutls_privkey_get_spki.3.gzgnutls_privkey_get_type.3.gzgnutls_privkey_import_dsa_raw.3.gzgnutls_privkey_import_ecc_raw.3.gzgnutls_privkey_import_ext.3.gzgnutls_privkey_import_ext2.3.gzgnutls_privkey_import_ext3.3.gzgnutls_privkey_import_ext4.3.gzgnutls_privkey_import_gost_raw.3.gzgnutls_privkey_import_openpgp.3.gzgnutls_privkey_import_openpgp_raw.3.gzgnutls_privkey_import_pkcs11.3.gzgnutls_privkey_import_pkcs11_url.3.gzgnutls_privkey_import_rsa_raw.3.gzgnutls_privkey_import_tpm_raw.3.gzgnutls_privkey_import_tpm_url.3.gzgnutls_privkey_import_url.3.gzgnutls_privkey_import_x509.3.gzgnutls_privkey_import_x509_raw.3.gzgnutls_privkey_init.3.gzgnutls_privkey_set_flags.3.gzgnutls_privkey_set_pin_function.3.gzgnutls_privkey_set_spki.3.gzgnutls_privkey_sign_data.3.gzgnutls_privkey_sign_data2.3.gzgnutls_privkey_sign_hash.3.gzgnutls_privkey_sign_hash2.3.gzgnutls_privkey_status.3.gzgnutls_privkey_verify_params.3.gzgnutls_privkey_verify_seed.3.gzgnutls_protocol_get_id.3.gzgnutls_protocol_get_name.3.gzgnutls_protocol_get_version.3.gzgnutls_protocol_list.3.gzgnutls_protocol_set_enabled.3.gzgnutls_psk_allocate_client_credentials.3.gzgnutls_psk_allocate_server_credentials.3.gzgnutls_psk_client_get_hint.3.gzgnutls_psk_free_client_credentials.3.gzgnutls_psk_free_server_credentials.3.gzgnutls_psk_server_get_username.3.gzgnutls_psk_server_get_username2.3.gzgnutls_psk_set_client_credentials.3.gzgnutls_psk_set_client_credentials2.3.gzgnutls_psk_set_client_credentials_function.3.gzgnutls_psk_set_client_credentials_function2.3.gzgnutls_psk_set_params_function.3.gzgnutls_psk_set_server_credentials_file.3.gzgnutls_psk_set_server_credentials_function.3.gzgnutls_psk_set_server_credentials_function2.3.gzgnutls_psk_set_server_credentials_hint.3.gzgnutls_psk_set_server_dh_params.3.gzgnutls_psk_set_server_known_dh_params.3.gzgnutls_psk_set_server_params_function.3.gzgnutls_pubkey_deinit.3.gzgnutls_pubkey_encrypt_data.3.gzgnutls_pubkey_export.3.gzgnutls_pubkey_export2.3.gzgnutls_pubkey_export_dsa_raw.3.gzgnutls_pubkey_export_dsa_raw2.3.gzgnutls_pubkey_export_ecc_raw.3.gzgnutls_pubkey_export_ecc_raw2.3.gzgnutls_pubkey_export_ecc_x962.3.gzgnutls_pubkey_export_gost_raw2.3.gzgnutls_pubkey_export_rsa_raw.3.gzgnutls_pubkey_export_rsa_raw2.3.gzgnutls_pubkey_get_key_id.3.gzgnutls_pubkey_get_key_usage.3.gzgnutls_pubkey_get_openpgp_key_id.3.gzgnutls_pubkey_get_pk_algorithm.3.gzgnutls_pubkey_get_preferred_hash_algorithm.3.gzgnutls_pubkey_get_spki.3.gzgnutls_pubkey_import.3.gzgnutls_pubkey_import_dsa_raw.3.gzgnutls_pubkey_import_ecc_raw.3.gzgnutls_pubkey_import_ecc_x962.3.gzgnutls_pubkey_import_gost_raw.3.gzgnutls_pubkey_import_openpgp.3.gzgnutls_pubkey_import_openpgp_raw.3.gzgnutls_pubkey_import_pkcs11.3.gzgnutls_pubkey_import_privkey.3.gzgnutls_pubkey_import_rsa_raw.3.gzgnutls_pubkey_import_tpm_raw.3.gzgnutls_pubkey_import_tpm_url.3.gzgnutls_pubkey_import_url.3.gzgnutls_pubkey_import_x509.3.gzgnutls_pubkey_import_x509_crq.3.gzgnutls_pubkey_import_x509_raw.3.gzgnutls_pubkey_init.3.gzgnutls_pubkey_print.3.gzgnutls_pubkey_set_key_usage.3.gzgnutls_pubkey_set_pin_function.3.gzgnutls_pubkey_set_spki.3.gzgnutls_pubkey_verify_data2.3.gzgnutls_pubkey_verify_hash2.3.gzgnutls_pubkey_verify_params.3.gzgnutls_random_art.3.gzgnutls_range_split.3.gzgnutls_reauth.3.gzgnutls_record_can_use_length_hiding.3.gzgnutls_record_check_corked.3.gzgnutls_record_check_pending.3.gzgnutls_record_cork.3.gzgnutls_record_disable_padding.3.gzgnutls_record_discard_queued.3.gzgnutls_record_get_direction.3.gzgnutls_record_get_discarded.3.gzgnutls_record_get_max_early_data_size.3.gzgnutls_record_get_max_size.3.gzgnutls_record_get_state.3.gzgnutls_record_overhead_size.3.gzgnutls_record_recv.3.gzgnutls_record_recv_early_data.3.gzgnutls_record_recv_packet.3.gzgnutls_record_recv_seq.3.gzgnutls_record_send.3.gzgnutls_record_send2.3.gzgnutls_record_send_early_data.3.gzgnutls_record_send_range.3.gzgnutls_record_set_max_early_data_size.3.gzgnutls_record_set_max_recv_size.3.gzgnutls_record_set_max_size.3.gzgnutls_record_set_state.3.gzgnutls_record_set_timeout.3.gzgnutls_record_uncork.3.gzgnutls_register_custom_url.3.gzgnutls_rehandshake.3.gzgnutls_rnd.3.gzgnutls_rnd_refresh.3.gzgnutls_safe_renegotiation_status.3.gzgnutls_sec_param_get_name.3.gzgnutls_sec_param_to_pk_bits.3.gzgnutls_sec_param_to_symmetric_bits.3.gzgnutls_server_name_get.3.gzgnutls_server_name_set.3.gzgnutls_session_channel_binding.3.gzgnutls_session_enable_compatibility_mode.3.gzgnutls_session_etm_status.3.gzgnutls_session_ext_master_secret_status.3.gzgnutls_session_ext_register.3.gzgnutls_session_force_valid.3.gzgnutls_session_get_data.3.gzgnutls_session_get_data2.3.gzgnutls_session_get_desc.3.gzgnutls_session_get_flags.3.gzgnutls_session_get_id.3.gzgnutls_session_get_id2.3.gzgnutls_session_get_keylog_function.3.gzgnutls_session_get_master_secret.3.gzgnutls_session_get_ptr.3.gzgnutls_session_get_random.3.gzgnutls_session_get_verify_cert_status.3.gzgnutls_session_is_resumed.3.gzgnutls_session_key_update.3.gzgnutls_session_resumption_requested.3.gzgnutls_session_set_data.3.gzgnutls_session_set_id.3.gzgnutls_session_set_keylog_function.3.gzgnutls_session_set_premaster.3.gzgnutls_session_set_ptr.3.gzgnutls_session_set_verify_cert.3.gzgnutls_session_set_verify_cert2.3.gzgnutls_session_set_verify_function.3.gzgnutls_session_set_verify_output_function.3.gzgnutls_session_supplemental_register.3.gzgnutls_session_ticket_enable_client.3.gzgnutls_session_ticket_enable_server.3.gzgnutls_session_ticket_key_generate.3.gzgnutls_session_ticket_send.3.gzgnutls_set_default_priority.3.gzgnutls_set_default_priority_append.3.gzgnutls_sign_algorithm_get.3.gzgnutls_sign_algorithm_get_client.3.gzgnutls_sign_algorithm_get_requested.3.gzgnutls_sign_get_hash_algorithm.3.gzgnutls_sign_get_id.3.gzgnutls_sign_get_name.3.gzgnutls_sign_get_oid.3.gzgnutls_sign_get_pk_algorithm.3.gzgnutls_sign_is_secure.3.gzgnutls_sign_is_secure2.3.gzgnutls_sign_list.3.gzgnutls_sign_set_secure.3.gzgnutls_sign_set_secure_for_certs.3.gzgnutls_sign_supports_pk_algorithm.3.gzgnutls_srp_allocate_client_credentials.3.gzgnutls_srp_allocate_server_credentials.3.gzgnutls_srp_base64_decode.3.gzgnutls_srp_base64_decode2.3.gzgnutls_srp_base64_encode.3.gzgnutls_srp_base64_encode2.3.gzgnutls_srp_free_client_credentials.3.gzgnutls_srp_free_server_credentials.3.gzgnutls_srp_server_get_username.3.gzgnutls_srp_set_client_credentials.3.gzgnutls_srp_set_client_credentials_function.3.gzgnutls_srp_set_prime_bits.3.gzgnutls_srp_set_server_credentials_file.3.gzgnutls_srp_set_server_credentials_function.3.gzgnutls_srp_set_server_fake_salt_seed.3.gzgnutls_srp_verifier.3.gzgnutls_srtp_get_keys.3.gzgnutls_srtp_get_mki.3.gzgnutls_srtp_get_profile_id.3.gzgnutls_srtp_get_profile_name.3.gzgnutls_srtp_get_selected_profile.3.gzgnutls_srtp_set_mki.3.gzgnutls_srtp_set_profile.3.gzgnutls_srtp_set_profile_direct.3.gzgnutls_store_commitment.3.gzgnutls_store_pubkey.3.gzgnutls_strerror.3.gzgnutls_strerror_name.3.gzgnutls_subject_alt_names_deinit.3.gzgnutls_subject_alt_names_get.3.gzgnutls_subject_alt_names_init.3.gzgnutls_subject_alt_names_set.3.gzgnutls_supplemental_get_name.3.gzgnutls_supplemental_recv.3.gzgnutls_supplemental_register.3.gzgnutls_supplemental_send.3.gzgnutls_system_key_add_x509.3.gzgnutls_system_key_delete.3.gzgnutls_system_key_iter_deinit.3.gzgnutls_system_key_iter_get_info.3.gzgnutls_system_recv_timeout.3.gzgnutls_tdb_deinit.3.gzgnutls_tdb_init.3.gzgnutls_tdb_set_store_commitment_func.3.gzgnutls_tdb_set_store_func.3.gzgnutls_tdb_set_verify_func.3.gzgnutls_tpm_get_registered.3.gzgnutls_tpm_key_list_deinit.3.gzgnutls_tpm_key_list_get_url.3.gzgnutls_tpm_privkey_delete.3.gzgnutls_tpm_privkey_generate.3.gzgnutls_transport_get_int.3.gzgnutls_transport_get_int2.3.gzgnutls_transport_get_ptr.3.gzgnutls_transport_get_ptr2.3.gzgnutls_transport_is_ktls_enabled.3.gzgnutls_transport_set_errno.3.gzgnutls_transport_set_errno_function.3.gzgnutls_transport_set_fastopen.3.gzgnutls_transport_set_int.3.gzgnutls_transport_set_int2.3.gzgnutls_transport_set_ptr.3.gzgnutls_transport_set_ptr2.3.gzgnutls_transport_set_pull_function.3.gzgnutls_transport_set_pull_timeout_function.3.gzgnutls_transport_set_push_function.3.gzgnutls_transport_set_vec_push_function.3.gzgnutls_url_is_supported.3.gzgnutls_utf8_password_normalize.3.gzgnutls_verify_stored_pubkey.3.gzgnutls_x509_aia_deinit.3.gzgnutls_x509_aia_get.3.gzgnutls_x509_aia_init.3.gzgnutls_x509_aia_set.3.gzgnutls_x509_aki_deinit.3.gzgnutls_x509_aki_get_cert_issuer.3.gzgnutls_x509_aki_get_id.3.gzgnutls_x509_aki_init.3.gzgnutls_x509_aki_set_cert_issuer.3.gzgnutls_x509_aki_set_id.3.gzgnutls_x509_cidr_to_rfc5280.3.gzgnutls_x509_crl_check_issuer.3.gzgnutls_x509_crl_deinit.3.gzgnutls_x509_crl_dist_points_deinit.3.gzgnutls_x509_crl_dist_points_get.3.gzgnutls_x509_crl_dist_points_init.3.gzgnutls_x509_crl_dist_points_set.3.gzgnutls_x509_crl_export.3.gzgnutls_x509_crl_export2.3.gzgnutls_x509_crl_get_authority_key_gn_serial.3.gzgnutls_x509_crl_get_authority_key_id.3.gzgnutls_x509_crl_get_crt_count.3.gzgnutls_x509_crl_get_crt_serial.3.gzgnutls_x509_crl_get_dn_oid.3.gzgnutls_x509_crl_get_extension_data.3.gzgnutls_x509_crl_get_extension_data2.3.gzgnutls_x509_crl_get_extension_info.3.gzgnutls_x509_crl_get_extension_oid.3.gzgnutls_x509_crl_get_issuer_dn.3.gzgnutls_x509_crl_get_issuer_dn2.3.gzgnutls_x509_crl_get_issuer_dn3.3.gzgnutls_x509_crl_get_issuer_dn_by_oid.3.gzgnutls_x509_crl_get_next_update.3.gzgnutls_x509_crl_get_number.3.gzgnutls_x509_crl_get_raw_issuer_dn.3.gzgnutls_x509_crl_get_signature.3.gzgnutls_x509_crl_get_signature_algorithm.3.gzgnutls_x509_crl_get_signature_oid.3.gzgnutls_x509_crl_get_this_update.3.gzgnutls_x509_crl_get_version.3.gzgnutls_x509_crl_import.3.gzgnutls_x509_crl_init.3.gzgnutls_x509_crl_iter_crt_serial.3.gzgnutls_x509_crl_iter_deinit.3.gzgnutls_x509_crl_list_import.3.gzgnutls_x509_crl_list_import2.3.gzgnutls_x509_crl_print.3.gzgnutls_x509_crl_privkey_sign.3.gzgnutls_x509_crl_set_authority_key_id.3.gzgnutls_x509_crl_set_crt.3.gzgnutls_x509_crl_set_crt_serial.3.gzgnutls_x509_crl_set_next_update.3.gzgnutls_x509_crl_set_number.3.gzgnutls_x509_crl_set_this_update.3.gzgnutls_x509_crl_set_version.3.gzgnutls_x509_crl_sign.3.gzgnutls_x509_crl_sign2.3.gzgnutls_x509_crl_verify.3.gzgnutls_x509_crq_deinit.3.gzgnutls_x509_crq_export.3.gzgnutls_x509_crq_export2.3.gzgnutls_x509_crq_get_attribute_by_oid.3.gzgnutls_x509_crq_get_attribute_data.3.gzgnutls_x509_crq_get_attribute_info.3.gzgnutls_x509_crq_get_basic_constraints.3.gzgnutls_x509_crq_get_challenge_password.3.gzgnutls_x509_crq_get_dn.3.gzgnutls_x509_crq_get_dn2.3.gzgnutls_x509_crq_get_dn3.3.gzgnutls_x509_crq_get_dn_by_oid.3.gzgnutls_x509_crq_get_dn_oid.3.gzgnutls_x509_crq_get_extension_by_oid.3.gzgnutls_x509_crq_get_extension_by_oid2.3.gzgnutls_x509_crq_get_extension_data.3.gzgnutls_x509_crq_get_extension_data2.3.gzgnutls_x509_crq_get_extension_info.3.gzgnutls_x509_crq_get_key_id.3.gzgnutls_x509_crq_get_key_purpose_oid.3.gzgnutls_x509_crq_get_key_rsa_raw.3.gzgnutls_x509_crq_get_key_usage.3.gzgnutls_x509_crq_get_pk_algorithm.3.gzgnutls_x509_crq_get_pk_oid.3.gzgnutls_x509_crq_get_private_key_usage_period.3.gzgnutls_x509_crq_get_signature_algorithm.3.gzgnutls_x509_crq_get_signature_oid.3.gzgnutls_x509_crq_get_spki.3.gzgnutls_x509_crq_get_subject_alt_name.3.gzgnutls_x509_crq_get_subject_alt_othername_oid.3.gzgnutls_x509_crq_get_tlsfeatures.3.gzgnutls_x509_crq_get_version.3.gzgnutls_x509_crq_import.3.gzgnutls_x509_crq_init.3.gzgnutls_x509_crq_print.3.gzgnutls_x509_crq_privkey_sign.3.gzgnutls_x509_crq_set_attribute_by_oid.3.gzgnutls_x509_crq_set_basic_constraints.3.gzgnutls_x509_crq_set_challenge_password.3.gzgnutls_x509_crq_set_dn.3.gzgnutls_x509_crq_set_dn_by_oid.3.gzgnutls_x509_crq_set_extension_by_oid.3.gzgnutls_x509_crq_set_key.3.gzgnutls_x509_crq_set_key_purpose_oid.3.gzgnutls_x509_crq_set_key_rsa_raw.3.gzgnutls_x509_crq_set_key_usage.3.gzgnutls_x509_crq_set_private_key_usage_period.3.gzgnutls_x509_crq_set_pubkey.3.gzgnutls_x509_crq_set_spki.3.gzgnutls_x509_crq_set_subject_alt_name.3.gzgnutls_x509_crq_set_subject_alt_othername.3.gzgnutls_x509_crq_set_tlsfeatures.3.gzgnutls_x509_crq_set_version.3.gzgnutls_x509_crq_sign.3.gzgnutls_x509_crq_sign2.3.gzgnutls_x509_crq_verify.3.gzgnutls_x509_crt_check_email.3.gzgnutls_x509_crt_check_hostname.3.gzgnutls_x509_crt_check_hostname2.3.gzgnutls_x509_crt_check_ip.3.gzgnutls_x509_crt_check_issuer.3.gzgnutls_x509_crt_check_key_purpose.3.gzgnutls_x509_crt_check_revocation.3.gzgnutls_x509_crt_cpy_crl_dist_points.3.gzgnutls_x509_crt_deinit.3.gzgnutls_x509_crt_equals.3.gzgnutls_x509_crt_equals2.3.gzgnutls_x509_crt_export.3.gzgnutls_x509_crt_export2.3.gzgnutls_x509_crt_get_activation_time.3.gzgnutls_x509_crt_get_authority_info_access.3.gzgnutls_x509_crt_get_authority_key_gn_serial.3.gzgnutls_x509_crt_get_authority_key_id.3.gzgnutls_x509_crt_get_basic_constraints.3.gzgnutls_x509_crt_get_ca_status.3.gzgnutls_x509_crt_get_crl_dist_points.3.gzgnutls_x509_crt_get_dn.3.gzgnutls_x509_crt_get_dn2.3.gzgnutls_x509_crt_get_dn3.3.gzgnutls_x509_crt_get_dn_by_oid.3.gzgnutls_x509_crt_get_dn_oid.3.gzgnutls_x509_crt_get_expiration_time.3.gzgnutls_x509_crt_get_extension_by_oid.3.gzgnutls_x509_crt_get_extension_by_oid2.3.gzgnutls_x509_crt_get_extension_data.3.gzgnutls_x509_crt_get_extension_data2.3.gzgnutls_x509_crt_get_extension_info.3.gzgnutls_x509_crt_get_extension_oid.3.gzgnutls_x509_crt_get_fingerprint.3.gzgnutls_x509_crt_get_inhibit_anypolicy.3.gzgnutls_x509_crt_get_issuer.3.gzgnutls_x509_crt_get_issuer_alt_name.3.gzgnutls_x509_crt_get_issuer_alt_name2.3.gzgnutls_x509_crt_get_issuer_alt_othername_oid.3.gzgnutls_x509_crt_get_issuer_dn.3.gzgnutls_x509_crt_get_issuer_dn2.3.gzgnutls_x509_crt_get_issuer_dn3.3.gzgnutls_x509_crt_get_issuer_dn_by_oid.3.gzgnutls_x509_crt_get_issuer_dn_oid.3.gzgnutls_x509_crt_get_issuer_unique_id.3.gzgnutls_x509_crt_get_key_id.3.gzgnutls_x509_crt_get_key_purpose_oid.3.gzgnutls_x509_crt_get_key_usage.3.gzgnutls_x509_crt_get_name_constraints.3.gzgnutls_x509_crt_get_pk_algorithm.3.gzgnutls_x509_crt_get_pk_dsa_raw.3.gzgnutls_x509_crt_get_pk_ecc_raw.3.gzgnutls_x509_crt_get_pk_gost_raw.3.gzgnutls_x509_crt_get_pk_oid.3.gzgnutls_x509_crt_get_pk_rsa_raw.3.gzgnutls_x509_crt_get_policy.3.gzgnutls_x509_crt_get_preferred_hash_algorithm.3.gzgnutls_x509_crt_get_private_key_usage_period.3.gzgnutls_x509_crt_get_proxy.3.gzgnutls_x509_crt_get_raw_dn.3.gzgnutls_x509_crt_get_raw_issuer_dn.3.gzgnutls_x509_crt_get_serial.3.gzgnutls_x509_crt_get_signature.3.gzgnutls_x509_crt_get_signature_algorithm.3.gzgnutls_x509_crt_get_signature_oid.3.gzgnutls_x509_crt_get_spki.3.gzgnutls_x509_crt_get_subject.3.gzgnutls_x509_crt_get_subject_alt_name.3.gzgnutls_x509_crt_get_subject_alt_name2.3.gzgnutls_x509_crt_get_subject_alt_othername_oid.3.gzgnutls_x509_crt_get_subject_key_id.3.gzgnutls_x509_crt_get_subject_unique_id.3.gzgnutls_x509_crt_get_tlsfeatures.3.gzgnutls_x509_crt_get_version.3.gzgnutls_x509_crt_import.3.gzgnutls_x509_crt_import_pkcs11.3.gzgnutls_x509_crt_import_url.3.gzgnutls_x509_crt_init.3.gzgnutls_x509_crt_list_import.3.gzgnutls_x509_crt_list_import2.3.gzgnutls_x509_crt_list_import_pkcs11.3.gzgnutls_x509_crt_list_import_url.3.gzgnutls_x509_crt_list_verify.3.gzgnutls_x509_crt_print.3.gzgnutls_x509_crt_privkey_sign.3.gzgnutls_x509_crt_set_activation_time.3.gzgnutls_x509_crt_set_authority_info_access.3.gzgnutls_x509_crt_set_authority_key_id.3.gzgnutls_x509_crt_set_basic_constraints.3.gzgnutls_x509_crt_set_ca_status.3.gzgnutls_x509_crt_set_crl_dist_points.3.gzgnutls_x509_crt_set_crl_dist_points2.3.gzgnutls_x509_crt_set_crq.3.gzgnutls_x509_crt_set_crq_extension_by_oid.3.gzgnutls_x509_crt_set_crq_extensions.3.gzgnutls_x509_crt_set_dn.3.gzgnutls_x509_crt_set_dn_by_oid.3.gzgnutls_x509_crt_set_expiration_time.3.gzgnutls_x509_crt_set_extension_by_oid.3.gzgnutls_x509_crt_set_flags.3.gzgnutls_x509_crt_set_inhibit_anypolicy.3.gzgnutls_x509_crt_set_issuer_alt_name.3.gzgnutls_x509_crt_set_issuer_alt_othername.3.gzgnutls_x509_crt_set_issuer_dn.3.gzgnutls_x509_crt_set_issuer_dn_by_oid.3.gzgnutls_x509_crt_set_issuer_unique_id.3.gzgnutls_x509_crt_set_key.3.gzgnutls_x509_crt_set_key_purpose_oid.3.gzgnutls_x509_crt_set_key_usage.3.gzgnutls_x509_crt_set_name_constraints.3.gzgnutls_x509_crt_set_pin_function.3.gzgnutls_x509_crt_set_policy.3.gzgnutls_x509_crt_set_private_key_usage_period.3.gzgnutls_x509_crt_set_proxy.3.gzgnutls_x509_crt_set_proxy_dn.3.gzgnutls_x509_crt_set_pubkey.3.gzgnutls_x509_crt_set_serial.3.gzgnutls_x509_crt_set_spki.3.gzgnutls_x509_crt_set_subject_alt_name.3.gzgnutls_x509_crt_set_subject_alt_othername.3.gzgnutls_x509_crt_set_subject_alternative_name.3.gzgnutls_x509_crt_set_subject_key_id.3.gzgnutls_x509_crt_set_subject_unique_id.3.gzgnutls_x509_crt_set_tlsfeatures.3.gzgnutls_x509_crt_set_version.3.gzgnutls_x509_crt_sign.3.gzgnutls_x509_crt_sign2.3.gzgnutls_x509_crt_verify.3.gzgnutls_x509_crt_verify_data2.3.gzgnutls_x509_ct_sct_get.3.gzgnutls_x509_ct_sct_get_version.3.gzgnutls_x509_dn_deinit.3.gzgnutls_x509_dn_export.3.gzgnutls_x509_dn_export2.3.gzgnutls_x509_dn_get_rdn_ava.3.gzgnutls_x509_dn_get_str.3.gzgnutls_x509_dn_get_str2.3.gzgnutls_x509_dn_import.3.gzgnutls_x509_dn_init.3.gzgnutls_x509_dn_oid_known.3.gzgnutls_x509_dn_oid_name.3.gzgnutls_x509_dn_set_str.3.gzgnutls_x509_ext_ct_export_scts.3.gzgnutls_x509_ext_ct_import_scts.3.gzgnutls_x509_ext_ct_scts_deinit.3.gzgnutls_x509_ext_ct_scts_init.3.gzgnutls_x509_ext_deinit.3.gzgnutls_x509_ext_export_aia.3.gzgnutls_x509_ext_export_authority_key_id.3.gzgnutls_x509_ext_export_basic_constraints.3.gzgnutls_x509_ext_export_crl_dist_points.3.gzgnutls_x509_ext_export_inhibit_anypolicy.3.gzgnutls_x509_ext_export_key_purposes.3.gzgnutls_x509_ext_export_key_usage.3.gzgnutls_x509_ext_export_name_constraints.3.gzgnutls_x509_ext_export_policies.3.gzgnutls_x509_ext_export_private_key_usage_period.3.gzgnutls_x509_ext_export_proxy.3.gzgnutls_x509_ext_export_subject_alt_names.3.gzgnutls_x509_ext_export_subject_key_id.3.gzgnutls_x509_ext_export_tlsfeatures.3.gzgnutls_x509_ext_import_aia.3.gzgnutls_x509_ext_import_authority_key_id.3.gzgnutls_x509_ext_import_basic_constraints.3.gzgnutls_x509_ext_import_crl_dist_points.3.gzgnutls_x509_ext_import_inhibit_anypolicy.3.gzgnutls_x509_ext_import_key_purposes.3.gzgnutls_x509_ext_import_key_usage.3.gzgnutls_x509_ext_import_name_constraints.3.gzgnutls_x509_ext_import_policies.3.gzgnutls_x509_ext_import_private_key_usage_period.3.gzgnutls_x509_ext_import_proxy.3.gzgnutls_x509_ext_import_subject_alt_names.3.gzgnutls_x509_ext_import_subject_key_id.3.gzgnutls_x509_ext_import_tlsfeatures.3.gzgnutls_x509_ext_print.3.gzgnutls_x509_key_purpose_deinit.3.gzgnutls_x509_key_purpose_get.3.gzgnutls_x509_key_purpose_init.3.gzgnutls_x509_key_purpose_set.3.gzgnutls_x509_name_constraints_add_excluded.3.gzgnutls_x509_name_constraints_add_permitted.3.gzgnutls_x509_name_constraints_check.3.gzgnutls_x509_name_constraints_check_crt.3.gzgnutls_x509_name_constraints_deinit.3.gzgnutls_x509_name_constraints_get_excluded.3.gzgnutls_x509_name_constraints_get_permitted.3.gzgnutls_x509_name_constraints_init.3.gzgnutls_x509_othername_to_virtual.3.gzgnutls_x509_policies_deinit.3.gzgnutls_x509_policies_get.3.gzgnutls_x509_policies_init.3.gzgnutls_x509_policies_set.3.gzgnutls_x509_policy_release.3.gzgnutls_x509_privkey_cpy.3.gzgnutls_x509_privkey_deinit.3.gzgnutls_x509_privkey_export.3.gzgnutls_x509_privkey_export2.3.gzgnutls_x509_privkey_export2_pkcs8.3.gzgnutls_x509_privkey_export_dsa_raw.3.gzgnutls_x509_privkey_export_ecc_raw.3.gzgnutls_x509_privkey_export_gost_raw.3.gzgnutls_x509_privkey_export_pkcs8.3.gzgnutls_x509_privkey_export_rsa_raw.3.gzgnutls_x509_privkey_export_rsa_raw2.3.gzgnutls_x509_privkey_fix.3.gzgnutls_x509_privkey_generate.3.gzgnutls_x509_privkey_generate2.3.gzgnutls_x509_privkey_get_key_id.3.gzgnutls_x509_privkey_get_pk_algorithm.3.gzgnutls_x509_privkey_get_pk_algorithm2.3.gzgnutls_x509_privkey_get_seed.3.gzgnutls_x509_privkey_get_spki.3.gzgnutls_x509_privkey_import.3.gzgnutls_x509_privkey_import2.3.gzgnutls_x509_privkey_import_dsa_raw.3.gzgnutls_x509_privkey_import_ecc_raw.3.gzgnutls_x509_privkey_import_gost_raw.3.gzgnutls_x509_privkey_import_openssl.3.gzgnutls_x509_privkey_import_pkcs8.3.gzgnutls_x509_privkey_import_rsa_raw.3.gzgnutls_x509_privkey_import_rsa_raw2.3.gzgnutls_x509_privkey_init.3.gzgnutls_x509_privkey_sec_param.3.gzgnutls_x509_privkey_set_flags.3.gzgnutls_x509_privkey_set_pin_function.3.gzgnutls_x509_privkey_set_spki.3.gzgnutls_x509_privkey_sign_data.3.gzgnutls_x509_privkey_sign_hash.3.gzgnutls_x509_privkey_verify_params.3.gzgnutls_x509_privkey_verify_seed.3.gzgnutls_x509_rdn_get.3.gzgnutls_x509_rdn_get2.3.gzgnutls_x509_rdn_get_by_oid.3.gzgnutls_x509_rdn_get_oid.3.gzgnutls_x509_spki_deinit.3.gzgnutls_x509_spki_get_rsa_pss_params.3.gzgnutls_x509_spki_init.3.gzgnutls_x509_spki_set_rsa_pss_params.3.gzgnutls_x509_tlsfeatures_add.3.gzgnutls_x509_tlsfeatures_check_crt.3.gzgnutls_x509_tlsfeatures_deinit.3.gzgnutls_x509_tlsfeatures_get.3.gzgnutls_x509_tlsfeatures_init.3.gzgnutls_x509_trust_list_add_cas.3.gzgnutls_x509_trust_list_add_crls.3.gzgnutls_x509_trust_list_add_named_crt.3.gzgnutls_x509_trust_list_add_system_trust.3.gzgnutls_x509_trust_list_add_trust_dir.3.gzgnutls_x509_trust_list_add_trust_file.3.gzgnutls_x509_trust_list_add_trust_mem.3.gzgnutls_x509_trust_list_deinit.3.gzgnutls_x509_trust_list_get_issuer.3.gzgnutls_x509_trust_list_get_issuer_by_dn.3.gzgnutls_x509_trust_list_get_issuer_by_subject_key_id.3.gzgnutls_x509_trust_list_get_ptr.3.gzgnutls_x509_trust_list_init.3.gzgnutls_x509_trust_list_iter_deinit.3.gzgnutls_x509_trust_list_iter_get_ca.3.gzgnutls_x509_trust_list_remove_cas.3.gzgnutls_x509_trust_list_remove_trust_file.3.gzgnutls_x509_trust_list_remove_trust_mem.3.gzgnutls_x509_trust_list_set_getissuer_function.3.gzgnutls_x509_trust_list_set_ptr.3.gzgnutls_x509_trust_list_verify_crt.3.gzgnutls_x509_trust_list_verify_crt2.3.gzgnutls_x509_trust_list_verify_named_crt.3.gz/usr/include//usr/include/gnutls//usr/lib64//usr/lib64/pkgconfig//usr/share/doc/packages//usr/share/doc/packages/libgnutls-devel//usr/share/doc/packages/libgnutls-devel/examples//usr/share/doc/packages/libgnutls-devel/reference//usr/share/info//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33311/SUSE_SLE-15-SP4_Update/3c77a940cf59bc4bac5ba96d54903ca2-gnutls.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linux directoryC source, ASCII textC source, ASCII text, with very long linespkgconfig filePNG image data, 315 x 245, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 423 x 353, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 472 x 321, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 501 x 205, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 633 x 395, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 492 x 242, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 313 x 286, 1-bit grayscale, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 628 x 346, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)PNG image data, 331 x 401, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)HTML document, ASCII text, with very long linesPNG image data, 572 x 334, 8-bit/color RGB, non-interlaced (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode textHTML document, UTF-8 Unicode text, with very long linesXML 1.0 document, UTF-8 Unicode textPNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced (gzip compressed data, max compression, from Unix)HTML document, ASCII textassembler source, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)PRR RR R R ik ce~utf-8ce78096ee6ce51247a678fc128ebf46fc364390ca7a2ace968cf512b009402e8?7zXZ !t/]"k%BBjg#x={.d=~E=kWF&Tl20(EX Wr`=yw9-6 y^䷑=?F§iBB&>4=ZΦ>ӭ@y q(lX_Qa>rakLG;bBm.8n\(xp\dc}ױl,6Pym}u(1Xb0+#<бce撨hk 'KZ9S;+Ȯ>Dn:>OMH{$0$Ga#ĒKM zV(ߧ>}qr}1zħn"T}W__j{Ý6q1߿9ޗϰ=]~_ʭ*&JGU쭱~ `V8$P)P@:xUVfry "bc. Y&2ҊT+j~QY@z/4"-]/ @U>0pA[͊>3yɟ&} q‘wiid'Fd,HIu1my2@qWXq-iq6QYa{< } xIFysK5v㽑'\`RrlxI!{@Brh'R r 6:1V;խ֑xb: 02g; (ֽf =kGVs˜޵/]k Aqj#֩ +u ~%h,KE, z?R}8=5LwhF2ZdUDg~*#ؕ 2=+K @Yu(2hDWLMo!}Ҭ޷+/jl|B48_@o|BY[sB$+k`T=W04ۯH7KEM]o.? 8K|d>MSXp@}D,k;wFL憆}ĥnKCcWX )@ ' *vHG@rD晜FXuWl}J ke8E`M !oȩ3#atJ|]]@Qu" %KRY/v!v<02BMI/qa-zBuEZ=2uӉy^".@MfD4NP _2Oog[^ߦB"* o Mxmj- ;U52d:, iC7Ef+{%"țn>_flpcV~*CYm}w 7.4q642﯅Cky/p=_d$n5l}ouEAFdl؆K=Wǥ(B[[/s-ȴdgUt:U9}y ߏ8[1+_ZN[v?LDQ :`}fS3S~<rx؄V- ?GGġo u8)Ѧ /tڤ0a$0*:ioCjjZǔA*. ώ\o +r6(4}< J%pf  =f6W9@mzϷžgSr]sҶJ.LpxSw!(p#-"~F)x` ٘vRnG "JSț墧P;qT!tZkYm0GzmJYd l\Vۏh\D XsoA.wo5fP ?xjjÏvZr72/x)?ȟ+MA (T\̣[k`Ʉ)BΠgJrAM`}̷惓5Sj\x#A cRZβ:iW1ļ獉A5 &w'6W+g ,2Ge %3(oOrZSgwTdT_h }\8<!h"bRI&komiK-#@%klMi/AE.Y', ؟jⱌ0:PT9]a6N/97+䨣hP}êOni:D(pP/j|#:ύ\"*wl ܙP0̫jDm:6]~@"Mram?Ή(GPsrYl6n#V>~(e^:^~7&TdIy䌽-4\i 'u,c30Ȏ Fa{rؘ<HwAr K6h;Zz=kNٽ-;OR#8ˢ;~ŐdX0^t9U_A'Lb`F}R)GNX&)x b پ weĉo3sC6 Ѹ~|qe?F0/%;8o \Hu#:[&|ܪDb.^-WE#Y{)X#G|56BΤ^o \9 !+ڧm z?{*"!+Bw9aV@^i;.pln:na Џ[B*%llBw@ύf].wvߧe}3Of(|G'X9J\ѩ݄?o${ ocKvk "r2}yЎOk{`O=C2M ϔaY:oq*7Ȩ;!hbʖimJ'>{SU=w Q-S.m'–]E1J#Qq, L<`[ou=qFVʱJ.Ezpbc1V->W{>U^@܍󣣒3[<BDxyt6' Nh4 $jl9qj uH~,ޚ"G9'[h1(S涘LTK^9Vg$lP~q(l6d2AMEAi~PlƇ#Pw*_=ID]ˀa"ORZIAv&%D=On!Q`p)f) @.7Vd#(qQ(?1J~}d]f HnS4 1\S-/R݌})2a->ʡ˨5Bqd؟I V`6A"\ij6}+g m I +'ee:p2>QbBAQQjCG_F%h%JnO}uV\,ۡ&K\IM#w:YûOTFkGQkcwkvB酑{P`/5 ej6zK1'gaO(^G5B!t<hDno]ԎJ `~= B a`@.}:U݇H.sۧރv'v4Q*b.٪eߙ۴D+mcD@3a^|? Z,yLꞨ$~ٖ'x; ']W6 vp5 |_Q5 Qxq=1`\idG1<pӡH#;g?W;ٖ#1I<:3YC"f;%C̟!H?U/x-zup72Ù;<[F_dɪZ>1V"N卩 hg*MTdm:UCaFU!M!@"]T4xmÁp71ϩxXkJb= cWF1PD+yoDU9"dBt/L+>]߷6pЖ8v;賮 iN`@YQy`^{! 5;PPs,>S]c#w-mD/aC d;6ъs7 ^&{NA)ZN:<߇]d,yF!1)Lplv WKo zowX{r!D.5'yU>0o֮bm~'mzwb ;^[:ut#vXs*abd~: 4wcxCO!8hWW*ή͘Aω§U5>N@B5n%=9caphPz,@ujXp>I` au>iR4HuABy%^I,}ܠss*>z}:cHz8t85Z߂_T(yF5èjW^ Цޖ`l1QGW8{/ I<֘ߙ34[!$L@M ;9*kiesnz0)srf?l-p!5+?*7R9:C({R|*yCVK9Pd!jB4:gA /TS({*-ZrZaOsX)RJ4, Hr|qxcjĭ8碌grB/kV6϶՗ƚKS̫; )2c@3}sIύfrvruIZ9Q.x| >|>N?N' (խ? #njOS]KLw,zroƛ^n{ ?>yGEpJM=zpk])e#uL9i/b"%[n>I_M1,.x)U3|M <}PS[XaBhjFm}s3&o[\sQxHW\ QJ EY;3*+/&jJFV`m"1|=]H>Gw5Kx,{5@"eLˊyX Űpz8ok~jdu o[+:>hLyP Xs RXuAf>ܴ%OPgGlh!g#~޵w7hC7zt "Ґz@g"osqr/ejd?z!$:2(0`Y.EIEIK5X]JAO[rya+=XNXA͈XR sRRaȟlyD ɋZ#aZ5rǪ&<[ XX%\kª"+>s9叢kF!3jqN!ʦ U(vSR#bGgEuЮv&Ɵ2Ce9', iiK[#> Lk 4hO;0B}m埲OOL#b aV#@v瀹FKڤI T,$0?G) kO^)M:iq9ߊ)b0CL 6a;y 韕_'_UK\kn,,\f@.sOʕArLͤh VPǸ%9qO/,{IajYzVI[λYL"Za-ɛ"S,^ oz&~er}w@9hݷ$-:V[EoQ-r'uy0$꒖Z%l$F7f]@ka"?^Ķ+Qy $ Ә8a(At톛O{w|Rl5orEDjY|H4wXS9E9aEp܀W_aYxĘVun)8+/V7ֻ8p *Stt<40M!Xbs)憞%*YtF.`a"ꢗuf 1fu-_MY(*`!I f!C(;NVZQϷ Mdha΂LJT;ծ5ƆPeA.όwM)qZ& c-)Ht^`j teJ9v J/Px7)C@f> \=YJ C -c>Iu5n?ڷUFu"֯@}tԀqvADw92rSM~8 r/1AGSv*NS ^o*zz=kڭ*ZH'P2}Z{ >sb j櫂oksp%ǺG3LQowHܔ ׾T{&=(V~~D 7 v"lbx♺J-)lAYmq̚ĬE?,{/eogOj\52fE/C/w ^7)/ .yqI:@i5 &7`#bȎF| |0|K1! ׁ@bN1t@u>lk!=;3D-Ey~Xc}zWTt 4Cԕlsiy*g8qG1Mc23>.NK$]]Yv |Պr$}x-b-| 1^j+{n"^][j0PGJs]iuN4!:f"j*u"wfz EnT]`jISNZ<1; 펣Wo\,Xw:&&Fݺ.w ,G*H Xxl +AIQ*Xgd kZu;j,PW湘ؗ"D:֦?h Gud&Alo/)gsG76Umb{4n_."b ;YQ?Vt%_OovW4A# uAo,K{ynZDãq\:1,䶼.[!W PtDưօ= If0S=U$ ak\lN> WDbrF y}놆IN3g0Q9Ǩ9e_R"ok54 Dp9 ~Mė|Q@ސ&wtU:<Л0"T>?T+KYRb zQp:å#]qlbB7A2k2S\]3XG=ސLɷ@~fzJ:FHss.B\Ȗ4* }F&Qv^J"#zb) zrԳM ʍ }' V8#b .8okׇ@{8U(&x{R$ѱ,zF6ݵ(Ye;,>Gw:3Kwș 5%spM4#%~pHrefS~073i-X7L& *xW@ȭzRhc2%z_drS6G4R]f@;B ,'k6h,D}GeUYk.PIc?2C\ ySԗ< (sfm]ܶZ3v3m85B(n =59ӯ@)swsР{Z( OL γoGr$t j {)7+hn"{IKL@^SY7qG_,KCH Hƪ~NN_hFU%hmܔǘ*Գ- PrtZLvYj/+^A*ߩ"&oMWxnLmڬʿQ`ksq>ѧsHjB>ђjf Շ%ES|s.wK>id$4tA$rSTثuF?Ï_[83ɏo!ri&XdiE5,g]޾3}'Mew|4lV'j'Z^KLt#jHmnu;:wobvmA:Y"ywCM4t ޏ'CIޑ m^zF,s.ooMus)٣A7[ Y򪣉$wQSWttR@2T= e%״t2Oԙ~3(DG1xR69T0K|lO|j_~<\|Ro51pn8pNAԻ % 6oS$4 z/'| GUN: bNvuSN-@w;5l ^?%#jv$R68![|{ BmƵ:h\zb/<!%>Rݰ{"rLiskY77XiG?ۯ 2M b,UA"'M\. 1DG]]3i t6ӄ%I ZݰNa…c\6$]} fX]}S:@ pw{:R3CTm]r@7/MdW^( ^2.Kjfm❱9]Kq(unF`UWIE^2Fjm/5O}3 \Ѹ/~*:'W-T^0nF RW@Bp1YbríHojߠcH%W,m7q8ɘEOOI{D%0uiH3@(3t[J$B"Gh ]!ÞTeWb| lA8H) 6O;lىh(Qy>āPEYVD= $1-yZȾtoTV4PIk顠ƢhK H*Ǵv. 99Ϲ믔H4A׋G}b5,Vc3Z?ZcP}U*p,RZHKo~M] ;OgE\lz!4EtH3dO@e'g"yO𚞡l *aCJl7k%X#OM&>xbٛ|΋agdpW ,E/f%oFJ03ڬ36h]r3s/E K'I^;~43(Q4!R%e쌑yl߂VL*I3?[0T `,=jF^LlC=L<B,c #Nk{F='!p*(R<)>Kxy'CBH欣r46ϻxJ3Eo.kwP[1jhJ1U VP0ldŧ˱Й!7:JnRɤx_lD~b7O)`#ףX6# /% +E;ݱq&"7 mS vت~\G_YӸ#/e!>HFLf5oܟs.?|. .ӡ )Gۚ4ACN'Cpe0J ژ4%'[=h/f Uτ;qGShC9D^堹co5qrPqteyy?ZySfաMT""%+@GBħ D%J[//ލ&+/eqO)ݺ!n*ol^`\tZR㦠B3fEB$>k9-^Sc Nv&5M(t5zҪM>MtWwg.3o0*#NA;6t.fۂ,X3)3c ,XG9Or{[Ive eͽxgC#ga8xk~î~c_lF /7OCckfBt*Jw cúD%ƨf}z .g$x{ Z[r0K]Iɛ8hxU`#1N5\ bk&K%KjX9Y/>˸-!p ϴ!TT!,>Tިf\mX4Ո 01DuS!Nn-CUx궺kz_cP B"9Ql!y`*?ؘ0d =C7#xG83eP/ߦLWCMd+@/ N}}\-#yIiqDcXʻ,N .$IX'v`W_nz>54LQn z弯\)taѮ:}}L'W^:g=_Qѯ2ܔ  frxÐo&BQ3sw?7f ;_vx41KTD؉bX=P"7mpk8F-[^{f@F !4fOE{i%!D\C smgO]1QcOxz۰oTԛ{ePR)$-i 'KsqTb~9hF]ämU PcXK8%$Kv)`aKuK[v'JUXy΂Q( S9zN̘!4ʈւxjuAj0㏒>d@b}RkQ]w  ~ lr?SQ7eu*-Pn\ jT뜍t GOɾ;䃞ITޑwbi"Opyd0w ׈ F@flA:lVG)`iE2?' YP¦97 XiUh/`ج j#/$jljc48omP>Ǡ2iAO脞ImBEZ~39ށp}`,'HXKVr `4`?DoZG.&i/+kBw`PkzȢOe%.Meƕj:$[3̡9P<F&hQ)Yq=5"D-hc I { -8{ ͞[e`JZ`Tj@89W& 8R$YDY̐{hey6 A"z_M4:ZUS'0EV>-n&#xHk0uʋWwPΈ5 }"9^ZnK=C=ϔ `"˕XY7`Uly+RWt*޶|WNeÛwu½ͼ@V5`$$f]RGx(碈$B_ys/`DТ$k]Ggggs0z`55 4؂O'gQAL츻xZg.d;w7\zRx1w P"PxA R/" cTf%C$E$jd4dMV ^x_='^o@g{̳CtCC<4aIh>Su4e|ϓ -PXz暣\.=yn?U #/#3Zj nxZOjT*@ְbưѵaCIW+lTqHZC:^F^x3Ţn]~'A-ʌ:=:2u,}]a/yUںه ʰQtO;l~}*9;KkM9䢑FQˇi~M'p M<`b4y׮w2$޷X,1uԽ b>`uKZ"}(?x틢:漍mc-Doi)RAGܺ[E7`!Hbze2S(*ƠUT0@MO#lE1&vIYt3"^t A./Fs+nۦū3v4j澺0V(:ЖY"<k y}N? ['OdJIP*4.TN|0b O2vKUDsj/]bFK1xOTI&kn(rr҇\7碤2*b>*H :${! ׉.\>te`k.Ϩՠi Ofv#$y<7?cSwUTVFFVG]FW]vyq!s~I!~6}V ]LK+Yԛ m]9ݭGi{$5*׭&>ڎGWWk Kևgzr{8H7*P[uoEATAA㷀fQ#Vc $B&Uk`!*dɂaG@s+9V%3* Ni`Ѫ}i03">| [7 , [/l+jVbthԄ(;]LJK*q(28ۏR lG>#Uߨ_zov@h8vG 1IA^iU]GQ!\ 2>.J?i=0hHnC6#~dylW1Pibe:E h_{HCSkO.ȆCJ#$(o$Vmec+6QUyьTdL6夭}9D|~#@U 4bcc2tuL|O2Bi IŐt@kw8ees5RRLqMXqxۗ(PBo\I0^4zBiPj  p,5 >ԩM:W(9Ү֢6u GP_rߺ }&&H_(jO|< $C;8MHoy_BF:_KULLd%@AgvHYR)z}@Ed؅e`)l罤[N9u#KO/2 O}S8[oPQs!VϬ8In@Qz2[D8|b{E^Ɇhתdˣ8gj5akn9Q6yoӃXv`֪>vŏ8ٚZά*C"Čs>Pָ_6LOuUĠ(<p<+Pq}XmkMFNSX,U"k=gO/ YO )kj/q̧6ї*<̀k,0!B6>un7t 9aѲ TSVbx8d?C.EjP̕>[N -X`<& (Zizo(/$J .k_|R\ɠ2-*{߱=%Vqa|P]908R:Ck>pKw?'p >Fi=| 5<%>`цb< jO+ L&8A1u{i ';n-dtQ,l>w:a-d&v)d;7iO@j A{aZι"ȋiz#!]ЊX#@sOWZtԇ0|DFj r2S_йnwԨIRb73uFXVǗ/8a+ U*cݵB;1d/7B`+`U,4S:1h<ӱpI|֯w\1 SuK-%kmuԑ9myOfp)TezL-:d`ԱK-HQPrԟKmݓ68nn0'A$AJ=YqGDu\Q9U$?yu1Ly K  F9 oO@#{PUwEicXu೚tf9楠,Xd9.=hYH{9}EI&ҳRKǸr~_b24g]ޣ;NоF l3/KsaEnV1흮VFd2)vW ?Rs-|9i32W!Ь#1!fK`cVgr'>h|dձQt2h۳`+ﹹЙ2tPLk(O4} oEH္ue!K%7F5dЗ6}sv2T30??m2O̢W y Tih fϐP?L|YL΁(ʄ,t= h\{>$L8iٗ Z{gF46BMyl-H9]j/4DSi ݸNY,3~GPl/uÍ΃L %d 6*c wR'VbN|f<ߌe$׿xʌ4ż?Fc+*ѵzgEDٵ^SO9ݭ?y-ѯy~3 (܂cL=QQl}AY$T tChO{5dEɒ4C wb瘟K9ssl{}{m4ȁ(а4m1TGV-{ftgk-[qVO ;j:~:P`JM?i%43OΐiF<>4U^qQϱL*Iy}4 B0MXX:ps89b6 ̭:.$ u*>K(i@&/@dn#("]kV7ZB;鉢ax=Qv>zļ\0+B.˹־v.rvNY/ 3l1~r)۵$|`$|5g'5TtH(v 껢\J f L 2 *h]` |Qեd]V-7 LK.s \w[cBtx 5ʂ`I%bg*5aV發䙇λć:|9AZ 5V Bm :K犕`K(% r?mWzA˚vSRsPTe>Q(xutI|Ҹkˋ ĺ*</ї4P5r{pختK\QJ T 4U]%^Ftm3l]R-?>p(OTbꂫg bm"g4}YHHLa6EuգW⁏Йak_ZRjܣ&eۚ0L2%I);`ȊR<_4VQ\݋qumi*QO iwS/[^C_0Fz73Oj&X+wgQMGGgG|Dב1c#Jok;;R_0> 2ǀcG&0]\vRs#)8n”OEfoJaA7O6p];.)>Jp@{UzFKTh!;@qg:Y&ӪwԦh\uC_ي?T;L'Jjɸ$ `>S\#e~ b6 t]X?h!ErE%m< XGwMIdcB.޿[CGX@_N1-8U1qE 1NbȐc$ }2cf_"(.G^"j#ܩݻ%CM}FҮɻiW>joo`<{\T&ILV5h ~' N4-ex`o.oBSiHr$$S*#-7`O ]HP44Pu{_tc+PIԚ9C!KQj'`ӟ{⊈Gގ,u2oB1]'5Ak8չ1ܴ&#h𬲩7 5BϏr+Cd5:4`3ŗ G%q)Q&  vt[WB$pXCr nfXOgq۫MNJ\9l!n=<:B<0S3K "X/' 23>`CjSTt)12fF\|{Ebg&'َSVRt;65WOՅ_>2(r皮˙ًU $?]*v;Of#-gM+q 2N5^#N#B|Qbo, i:~h7ή u_o 0t|>+.6$9b9EyX 'SYUjY"5~fCSvy)<9W($("uf0xl_\8[)iӷMH[ 9!a=vFls' 4ea _{IfG tz2\5WLtvi #?nOuNE0*y.s{]wl%V\^9(}(n}c+6f~$F:aO( W4]͎ %xt|3T\H< 4S󩃬htƫrߪ'r :rٔ";ƾ%v`o ./YĘnNclz2>vR(U47ڵ%؊WVEt94&1\||){}Æ=EɷXɢ_XK't묕n G|`:gZsց PwnEahO PS%};`)gZ8PIn񗫬{c!5-o)c#? q*V&h3̿ٷNVnD,\jS a9Hr-猵M>dƇtdӠ wK*V[(WSeن2ɨE/֦:u3^ nLb)Sqj]5y_޻{%W/ cBt=V K bZoEu/gi'fU!Lǥ7}s:b[ P6s;`Jz벘+7qH̕OmE!!9zA. WàERBEo92"(RQqSp(VCĭP  5Ft{-r`s""Q"1P BT$ŽY&j5&K<ʐWD˜%n!sLElt1$,&E G8&m6x~m K/4F=/EcGTK:+zdJwcxgtqӍLEnKko . RWv&3`I]L5ٱt5HͥE1>r1MY+h~UT9f.k8p2S)g6>)qc0&\ш6ZDI 7ujh pE2ŀdv}qw* 7ڭgAKVqoza*wGo2x&]IH*:xakW{Q,E4Ictyfَ?!!h[4#q'BS.hu.ZQ9;te8{<7L|mI41e6~  ff)aqȽ]W fze]F"zA6Y6c8 =UrgGwZAYx3Q˓oLtg%1Ȋ?VeloѪk3@mQ@]Ԅ$A٣5-gI2f1Y x>&=%<'7~4a}HNŭYX] ,]&4/F3{=چA)ˎ6 Jž[O[5.swq ;:'P,p]XSj;Х-Я4)9*oaJ C_mkJ}im;{בЉySST?pg+,a2o w 1shکZ$# r-Mrk Pv.r֙5#3.gc{/&d̻??0uK{$V'LJ#(f!*a} sey] MXۃ<4W'E0R_h^%,~^Hxt봕= 68CGԺE|G#C;yfsvBQ-?RNZWyؠL*BC_d92R=1)}GpK6\=R,6qWz{%0\|n 2q7D.ӲFFu`gmf;FjF/1] YAmLU RDanŸv*&Ge b(O+Nl<ÅՔ|Q}k 'А;krbjJ$IM=y~p?/!8Vi@q%Ӌ-63>h"b5DDK89$C4>e'(bsT'҃|cd3npT4}k)jiْWB>-mBp7 ŗ2hd-xWA;GPk_n HM-?4fϩNn`ظ%iwo%(;0sJs 7WPj4v,l$wC5RS˺21.?9)&8(ERWwgi(zЀw7:<v³*78TMXbFqF2a\qjŠ-:$ 9mt֤XGBN+D*4 _ M+Q! k0t ;Fӌ8yu[3́Q5C(ϊ! X)qia;Ro4M1pbRW<ȟ5ogc!.iJ)N{8`c7YϟCŧmL k1 vdX,8H=Fe(>.2TN:`tܽa%t+!ٴ6qb}uxYY=7*sxVN_v&e9>utSk,x[GS(jϥ x @7vȈ p浢z>I!6.LMI1=m2F}.落O8/50b//ew嶂pwT LмP;{D*`%U~1x2CrLT# m;GrK/N1Ý6\瘄njڪb .6:k? &@U6<6@?C%H?j39̝̓5)qBIVT Ry+ϯصa" 쥍JS:7 ')BLc vRP>Q3< ~Fa$&BD'ͺr7u~Rj9<03^E3-xNxn@j~&"b.ƎenR{PmB9& yg5Ž9L{ qڹ; w8e{+jQ+QHnOR|!û;sk0W#%ʠ>8 FKC\sxC?ȴZP> 1S\I"1-=0"B-l(cn4pMo:"D$.؋Qqqƚux&Ҷ037 I=$eh<\jȧAśnk*Ŀ cG"DMU1t~Gu'g.vAET<Ȅ2ӯp% O]#1j"yU)*u<х{]n6qZՖ=3\ྶMl΀,)Ʊj`"'4r+Mq~A~ʅ$K+P C YtzWѱӶ|oMH_ٔMjWKRDPXy 8jԉ"9r`yU3aZ'@C"]c`>ûe  2"!˜UIwѭhID6Ŕ`*sr)Go]VaA{wO\LanJD|d% #@} Ŭ^l<.M[9 @vK5]p on{"tn ucbc%:[&Hk;LeCikcfr td+! @fpu=6ol CPn 8k+AtѥMTZ`a ce%%$TX[oMwŖHa E;iwS?3 85~G5i_ _XcrlXo}n%'@(^)!-%!"U=mXnW`tù e{Pg)S򄧔Fcc,9Wײ,΅h2(3"8ba>{UN =Q{Ϸ!qOho)ē@[4u3BNIH~*i)G}c@ fސ)&&@&8!lZz51d{׆V478笷R@0ʧRP UZ'j:U 0 GL nLjLKE{ziW Vq_߮gLz'kg=VT:>O?F*A8 öjʊ =D^﹡xOg\uc Vno.e~0n M7>=޺>7 -!id,,Kv U}ܹ{8GAuu:`-2 #uͿ:fbF6ٻs=ǂߌ:w B B 0vDQ8K+B@ %#cΣnxXb舵Tw2I.#x;+1vF.Bݞ5qHM$~-[+gLSSr쑷nޕ3eߖ3.4%Vg3ȶU{BE5o}4R粅 Zx>b. $dUx:(ж I+=TYlx8+LoKrLL {}z(]!lzQC:}AZhċgD/e[PC}zk*-Gn&|FݿmA~$@..aSWU,](=,RZK Lf16If{;@4W8Nu>y{HC-:NB>&3bl;4ȷ7vIԷ~"8ET$\fʓDɜ bw5I]ռ8Vfgs!Igxn 'lGC\ƹ0#A:P`9{譋6tT /JZ񞮫x\t ̖kTl/}:pKCIg{{LX_e?B(_D,ϜFTiE2A=t{ʠm=\Q2 ,3SdtLU\մ(zֻR]Gϟd0"TlYlQ$s+lĬHޞqiG h&*ǜ;YlQj4`眐;@-^2L iݙҭ|1O$\b_ް%;ݥR߁C!N?ng*GuՁI)j M6u;!9rҮfb&a$1B4Q^&la+s QƙN X㓶:_lB@<7@:eԴKbZm֞YudНMFj\YFBM5hM!4%^@2O]KwkU"SL3jaET\ИH;0ٰЮM(Q[RURP̅ Xk -!3~P}1imRi&0^oop-#\Gn^j$DBH`9ASirqD}JBX\M{tW}:y#47LNN ,Y F^\u KJ3Ak_B&k%xu6^nA4-ᙤZmzWGuiӥpqL{B[Q:\[G $x[lF#Ět;-\l^ nP(D+$u Ό[G.B'ږQutn*jɈ-lbG̏t *BzeKHaŦEN2;mI yn(%16g(CO2g]կD:|qrѭщQ;?:PgAt)"ԩ^ًKϸQ yzW>E[rfa/Aۥ<^ۇY-YHqVh{od3%. SCh|$g;%9:tW_Q୤@5xn=o'{HS4iV _ٿMK۔Z:w*aA8{4v:l}d1W!1+,ZnH|Oy0%oRYV :q.5DƸ{? nVZ$&D= ?ρjVَt6wP53.O՘]W. >|zi" OR =ϑT9 +.)4,'m`Ce_ԴDo6\RP>;@jE𵸗-zou9;ˆ^hHA^--Z1۔bޏ/~.굒 㕂_r~U  h:?ƳiWQǀj^aLHV&Bp c7=~ 'q33 Rwɳ;Y.UvkcPp4I[?$AŠkt =3hwiRYXel*GI~w˰gmym~*tC-:pK>WNP@/B#I7 }wׁ?f)ޕ޿ _膛J|Yw܈9#SKm/r*JM^䈕^!RG,7} bO=bMΡ;6йjVψm}-X{ ?t9]r) \+ҵf}/}w&vb݋a\CfhZ2GW.k=m{>kJ gQGo3i$/:;YMxūJ-18 p!}hg~g&bbgfdR:KN[fᆔ>Up۶tgg34Q/ Lh c_P,l?[J" xZOQuE; 6k"5'1WY)*^Qcכ|: #z$(h Vv on>]= `+^h'CR bYEY`%._LS}|W v &핤CR^ 3"-ܚq͕6~k[/O5$̞R$UhpEfGdc{26S0P.Al߉%(eVX@?%2%z V!R<[ |Nvlu "p4$$:E uH93nඔ+Jqȋ`&*pN"r_^wSn9GW1-܌P{ƂH!4%*G=4H9$b֟{\QNjoBNبdWK)s~Kz!M80!1tؚα" 甯ڇωbwg%t&n!s :>zuwȑrᏸ;LDwmuWھጷ9^]A2 (|Ց"c74][֕wI|jf6HTjc6A|.+XA5.9G7$oZŝB(L"̛ ]%4ayNG/)? `z3x}s {xl r{(SoA3PQv6,])d- ZC< ܷ<3D¿H<\ 4`8͓ĒG,/g#< vHp+m{Gb|>ZD@ ~YW{<(0nx4"P>o2HTPD441V4Pӛ+?fBrc^|bl k^!rXvl3\2wm(Xщ6-;$ SPpґhϠB&-Dn-^ MfM@Tngs)YL>8Ya[wP5ՔϮ7@2!&(FeF`~DSE{9l=62XC}:}97 Us(tL%H#th5f.p{ƬBzuVi5V-6/H}MQK{J xI`=8uRRHp}:q8'J{~./Dо6TxH5,Zդ~Mri6 dW+~X;FU_խ- ϛo:^2 k0t}h -? ):+] ._7d ٍД=ݰl /:7RwQsn 0).reS[^,#0HbGFRgV@2~`j/ۉ5 /V}J@#L亡 ~ض @"E1jrJ|}= AbG~Zs%l짓\%]3w Py w6*}&S4i.U &Q~wo!=4@X#b4Y@˂sGKY`h2C\]-xPufQOŰ?qR!4PƉ =Sz0׌G~rrB[(<1`,l}u5_W\ `vAj v8Q `~ )Uut}&yV8r-?`tuZg=w5NM[6 hϨd'/ Hn-&V ]+#'gCJ mr-.,TT}59͚MjR~1KgP3d*oNLe6ssVቶn:Q~1t X\^TᜃKJ {k MHn_9NVp--˺hA aJU!C.٢p i~X*_ܓBb+Ip)C{2]`J9Zۺg!ï>QBϖyvu)-չEEpSK)IT֕]RTi1"_٥{~Xbc5Q?R1,> T.oiWgYzTd,(6[5l #)/h!cXཁK^ȀF]̛!T66@/?;X췚拉K):1\ D́cs:nYB~nij2x[y劏Ӂ2V"AEVy1OnaUʼn{Ƒyt.f^\âdke)pa}$طZs'FV ԥMܜl_R Jl÷e9:zCȲoG%֣c(GO^GQpi%2iY p]4ʳ^h7C~4ԿHDV@d4!e ZC bmpe9ip߈C3Z2d͟-t蠰@7lL#[ַSAKL'ѹ;gƬg LXr~J8LrÚ 1u#פQKjD` @l%ySBNtE2dɟ11!6Da1Z٣s  7[1"Y▔UJx-n{zB-]gd_ZokO8.!s@Ȋէ\rIx-a!&\qb9zFE 0Un;?w8c޺+ۡTZua!QbyB(U̺/M&PNx,'o)Q%^JjM/WQS<>:_phq#*%j/yh-fi8H~B]9*4]nHbko Da"_(DR{].>g,yhьCUfE+Ew;5V.FɃ8Jb@}=uRt`Z6{>_FO 2ֻᐦ;Vk]mz8@EZ&QMNnϤ{"4=ѺXj^U%JPGZSUSafUBN~, WX1N)&/R SujLڂ1Ğv_;dD@մQuA#Y\{:)Dzqp'Ɏ2c|.85ŎL ,MK8$R" y9;h _~u1|A1r >}D+cjwMk޳}V_*G5NvEod@T,Pu Yׄ64߫b E($Fјp$Q0L'q^P|ԾewhTċ'4[ꢭ[)dtKI+PoB?: q](gьƳ5PFB#;ܠ9;uczo4~c7$7hL*1t#}TwG ^싄NnqvKVŤb u\19]h4T+e~KZX=h&XoWn*ca#%'5'{ 3lV~ǹ C6DPon3͗`p=k^&f ˾L}M`kuPzyQdax@(OTI(S%F@EODѶɟ@nOJ?4S#ʦ:}S*'H8c9W 7vK?, q2M?xR YBAڈC3=n VoK!oe _bp GEx+xL\Bpm[#?t}v`*/H@2$5 adv!ģ%@8[r3~p+TJ.fu6);A}OX$Vĸ|0oۆXt$rq_"ˊ*w t*)b@d TFih'PS/cYEڦ``piͺ/Ɔ;(r`$3r+0ҍ`| hJ@r_M?Yc,2i~> ?|)vŠv3=nT$ľNh*ߵRL+CCx0{`b. GȢn vD(Jp2U %i1RNםX|\/}Ωd]6yTbAME|\O{o~1sOjNd_%s2KImtDkCZ a]ŝP 4OsQ4;Gof5k#C$)?)PhbYxgܭLrDm5i 0-E;.\z(NY&`*~6kĎ dQ^~08wy@t?;/5;%r E,:(~ uD n0^n}{nzlfe&k֚o_<Աs Rs\3 6VAPqS$]);JW}b']hlT-d@?z *JN{jԝu*ݽ-FLKheh fp2HjU+*qJzoU|h-?b-"ZH4d$}5w(v_R(xC%TGïtҶL#aZ*^;#^bH F/t)*ިT%52#^p@ [@ܯL`)K;c)'cwL}ߏ[*JAŘgSà5,[~,,sE0-~m V$Ȉiqa&+xR60_jdg#^xrsU+? } ۣ|h;N2cOVO DW4Atfcx,zӻ9E(rh<䤷, Ug^V"7ϺD8Ŵ{0kHlXrY%<}uff|vCiGWwNfᑆ;&aR'؂" !Xq9xy$€A!x\k*wٌEu<$,QYi<gUE3(ZWI 1o8m$4<&9n@QWrF&{ΞNȧ^C=3M^TfSbL Xi){ܐ"RN!9-e$x)0𱹻\%Rza솬(R i׮迓9xHLQq8s' bjQQfh28̒w] ;B-şyh!O~WB1 NFʉOP/!>ckE ߳5( X LQ#BW0&xb:KtHv(VMM5S]\l3ykrAJnP..rSqń+6k6:P;7bM7Ow=\8rQW[M&Y~(}EwJg,P] zT$_*Z9 ̐O JA~Hr<3k雷\Jhal[HH=$dE愩Px˾B9|It܍2`/$c}d*mE>R[8|  3 "1ź{5-yuJ\Q@= DXd|,Q1449ʱ 8"`BzMnPZd{~f蓆ʀ kB4WvvB2,BᏰ 'k~&o=;R %EnL_~!ѕC@x@-ԕrARcli1p;C>pCVpTyD.>_Ocos3F%m%?X$iْRJ4Nx $髗=, N(aw;oN %[҃ju?E9Zh"$7;g^~'Nj G}^t ) 5ockDzm?sV?O]oMb?-s~q2;JJӇᇅS~D3JC)>},hєQ ?"3 {QKfi7gk2tD2*y/D0);7[^+ ͒<=t=lHQ]yLIѼV=M\QxSY"eb(/)fKʅc;yܭ߭8zjT5(ŠE@F7%>jP0G!=&vSc!P. Ɣ,޷~L$&Ili}l3]Hm@Tdٖ *{;d&(z~̏3;Iz:~$CL(OHo LjIfP&"aa?h)Kp4]!ڤ116@J4D\vMPKc>%S9!y:},9I·\wc]Ę(Dr]o)fAB 9i . 2ނۡI=lYP@=8$(kX`A/E~x m:YI}oV>E[%+;!&G*>BS]lARUR3P럄pۄd .܇'EV!> H<&獋>{Ţ5)=B}cȉ)vF5hg1j*bN~>&)ʨYMOJki0N&.j*9u03-}ϔc3+?HF:樿iugTj)7"LOOEJ޾@m^IF~n;U5gR_+ͦl-yN@k0,{Mյ,`tI%0`oCdA!EsZڑӞ١ ^|^G̞B7%#d&(-* -@/s1k?B 3v+vYpidǔ/PyoW'ܾX¥]z+"sh(ѹ;VNͦ*nJ 3,vzm,#͖*3OP$W-@{kdW(TWgds|f]P%}A[4J!M7AD!̒,Sx"78ܯaVK"fdROS5WA- %@AmV86>y>$ѥbYU:߶;aDДh[yZaې7eȋgqQEMI(,E!0DO'򩓔qzZx \ ' { Rʳ׃j g8N<ǃm;r ~OngAF7P-M(ƨP=j.v]e . Co!(LPNEYi:'>#dyH|l[.P~(*pxvQlK`az֗$ .s-H|/;v/j[& Bn.? rOgz$MNmvt.*ô:4ҕjh`AZb/F29z|EXlX-p\e+L"vBܤГ1u0yJ#ML )3 M~kn؂vە^vMibqwٳ7-}fp".G{0ʼngD1sé&3R|ko?>!#XWW9FRB%{dZ%- e$*h0/?̭15~^yu4z|T@)E_oͮ k汁7G4hQ_00B^Cdt^f6+BLK~i4\%w|Hr9IkU}i|#Z$گi,Kޭ:u3W ~%zK-2s= &Kda",/*(U@(Ǣ> nFHl 'B[.1n-s3Hȫ+HU`N,$^8Z8$" 3TFFBdȅkSqyG0汮ceWz~3&RiDͲ)ap}!|T(@B4tHѕͧ$W?Ümgvr)h#{m)?uyf zsR&*ZK{c:Fu{|_.O ,#*.,2BKmt kHfQ42H_AO?! ~8.sLrzIp{ueY ϩu9DyTvzx\5ڞa@R(lo9ֈg;pZ=7a[oX.k{=l@^zMuy/GAv<̽5# ĞmZʮgN nPݽL_RzZ im6n?y!"*t[":Lpi0k,@9:Ak˒ f6)}=v- w8 No6k"C]uEj3##Kn&frdK"=3w~r|R$le8\'zm#$h%Z [W w -7ƌP%B/Nɞġ2cTo>h*Ih33Kw5$nb~'D T9`C߾wkm@6n pd{d/kg97 >%5) R˙'0m: ^,|fzl:aqbP& ivAUpϴhS8[$``Wty o'4)>e*<.18i]= dPX@y|] c`}ЄO5\[I+MyEue&nvXpa/d=Z!xC!5:as^03[7I̔K{ӀS\ʒs 0ph ҄pIF-Ga$޺/<1REN؂2;ɒف4-0[MѢǚֹ0j3 {`Jz3jEy)x~t&s18xb=o/l&C| $EW^gW4J3=H!<#u >XO\RYuWo</kt-I$ ~Oǭ%"aRwMTVy*YHRH( 4K JأKm4EbL\Qm #j#Q~3"(@ [jR(n_8b&zq sk| թ|0\ itvֹg Im`=S F?Õ$?5c`P(S콙פwk {@z7bEDN涽0T!RY[?ZtzPoTâ1/-}ѪϢ4c@,ű2CJ +QhQ^٠r8I ǚXsz# hH[yMF놇bZeL, 22)ig ¹M&✠ڄhZxgqd޻L]lGJ癓NBy39^# O~66%ci_v"6%":VyCyr mՙCQAS}Fe[LIw-b}Ѱ7y;>sW*ؑ鴝kPq&"s80L,7pu픟[U;lq!NTXFf|6`EdtBIOO1`&ߖ@؛AsX=# ͊XikXԞEO(E 7f[(Ph1 u,OKUЉY@r#zR,Y8)Y5+Rz^8qh~z;eй5cb9 mMnϗ-_)WlzߞڝU(bMA1!&>}db6pb(w'ҭ A G9I8X½z^CυimeJ`]7P) IS?hN[+O!6Gm '~w|wÓ;;ۛYM[uWՍzHF54+l% eKwi\ra'oB/EW 1bl*RJm5*V{L[Wz=.;M4ε6ݽ=rH0oH۽능_Ag@(&*LJ )u1h@Ol;` }zDiЇH=H\3@MJU|W=VBwxhegҖ7lX O-?2s$ҩ>1ޤ#c:R i?cE:,b{SqS1ur KlbHJ#ޕ$j7DfQ=^>.qShSw۔?\b G#"y2_P!! g*>>{Sڃ?#(+XGR+ "dag$5ys,+=rFu*qQ\%ݮ`2>c0.cF?|cm`RK)h]SJyZ"%}YqUgkֈ~=ZCo -+[ՑTwyS BT4Ei"t,R{8u8Jb* ?ǔeW4hjjP Dƫ/me~ض1$K~2.fqe(sxU  \V*3a¡?)̜!ҌaR񢊙.14+q+8gw/eU4sɚ8cٵ6ܤi6j"M l\q-yx+MoqG+6c.@6\$a?ި5%7Kے.oXD`ƀ0Ay`LT(jԶbZ-;;Z/dMek09 .\?vp.b>.d .zrГ$Ir;kR⧊Pk=Dj{kDډ >)|M|a9OU9\?4 b&\t^8DJcFzZ`VcoA|Bj4I'[f7_Ƕxl[?tMNmUB7v{‹s~YUK듌poT$] ,}QAچqdrtb_6J4W+:x^esMHFMhg"I=J7@Ӯڢl KN\ PB[bϿF :clk>S91r;47O}&Ӹl፰C4ђ9XlOvpN[fGӡltLXy{jɋz Qe% N7\.0D{rF”GJcOI"@=/#(D[i$ދڦʭ$uuNR%9Yy=lYby Ji;qDǫ=8"M]8afE$#ӈ&°#(ӝ =7hExJR R_zDъ)ZhdΞWf[g9caE"aޢ7}ke WQ-O43gVIMXnZy"oK0vsmckxR3p6m#&6S5fsrdƔI%WX4B qMjXR&p HN(,4VĭK4iمb)Տ_ 7eg`C%XO b,AޮL6/,\ԞIz7\g$%޼^Fp.osx|9t9ɿ[6K4W86H FlZMcqD HҘ~荳Ar4ʨ=Wza:"rj:#: `nx;|D?7=_J*bBNAZe:[C5d&\hq+t\X#m 7nx|WT'q=DoxlCbP.KQ= d5|OzbNӓV/aL;6V[0R6C%~ =/m <e]voL>x3dbl #ME<,W"~uφ²Eo&.QBs}DB5N geuzX590 #੘^#8$u@nX ,ly׆ڥqs޷SDaٸȋ2&H~TO >p L2=a~ߎUoCB~h]H\w~N<{wShY{A _0~?nx>sa6DG f42s0RHbdGW'  ;ӬMrpKm) 3olizH(*hwzQJcZv4W{SR61TR1\Y +< ΁|J3]TmO$ =x7TݞYv_G̃z Uڴcs%4ski^[sɧ)c 0M 7,|GA7RK;dD3js1 Dr**2.p23ǬPL\SUs.i/Կh ,]X(-Jmk5P*;Y/Qv~zSM*8|%F'x=/C.~ 4 x9YpU]hٮwՁȮ8,q2F"]ğ_|^=k%U_w?8\1t,U/Ax9of_LI)#Bk->RP12t5W +S(-;z/Դ|_h2hSؐ368+0.zʨ<._FΈ{LCcA.T,dh۶-U[(YVhtb^} [ Lw,*0Ѝ;zT ̩:H ZcCl Q/n&ө3wæcd4𐡾40 ]& 9·5 M`rkV 5 i:I/f wɰfD_:ү];(MwC5iF7M0ӘBhi$sIuupzn5L)s)WIr"N,.jgQ gQyq0џ(`2 Y69RrG{|$w'@*V0%T(3Q*G_Otj5F6DI jNɿBCSG|\@4+MWC3!VHLE/;0O ʴ/CoDX+tL"so/\C,k ^#fZt鬓*UT"~2G6%T^v ʏs<'B/Ф ' w6vF?_޲C8nAe#WZDJ]S~i6)Y'f f,@+GJAo\p=oͿl/f#(]z.{% /88Z+ߴewa4[Qٴ"j Wt~+dEpev׾.N/~$S`6nLsΆ/6;MOq-e{}F{'Z姰a XNi4"X/4P =xe&#EK&ئ$?l4(-\gO%b&jSJ]xiz*A"pٽkM8\M\[lj-j! D)B Ċy҈X(}+'¦ Ha1ėH[vFꔖA , 靌*e`$G^uyk ^~E]~1C|x*! ;Uy7oӲ CMe? +,Dmnh_Z<)7vbd`'˚/ ٌ8d[_1/nQ*2JY\ ĪOF53$*3?Fj?dbc˯ 4Ԣ19gJʛug6qч" Jj 'KuaKAVDϹta _rM3Q J^CzG*s)<:P yM[{+ | sfOkw&D-hLÝۨ[9Wp6֧BhR+j}u_pqqs/k~4=!84^/;=@u-p$!U)n@H<7rbPd?%Hbv /͋/V_w)JsNK6^9clŘ 3WG^/6$z pF O䇷'Pi&3Z(Y_}|85wjR;p"Ki>uSl"f:miiR XBl+! (y_kXҞ9$rA!M YK_CD63G=FЌWd;`"ΖA$-`r뎤~KC+%X}BiOs`m JI,sCi<ʥY.<>aHq6y `G'=F!i_#MU@)k>^l?S2 S>atF ]1@xߦY;p R}:i/ԙQ*߇g ~g@27Ls 98ZJT!^}a24gU'9c V(h%~QUk{) xJAVZ]̥.`7Ms 8aYKײPdRbpE&(.ۦ}}>/d88KWGˣagF ,2jsxB:.iԡjc(*yUq!W͹6)* `A 4o"pU蘃Fyū¬r*uz)Y2K#y^!!k+`8]|P ׬FsO͎ %p♌v)=C-}8h7)vr] %T(8wlr%0M ;4 d| kCj8\OӑFgpubẗ́)€4\"tM^]r#vmqNzcnl(1M ~vmiP=G!J Ge+)A2G"9s82>jMGi :p_$ -}l|A`^T*⮘Fx9,LF2{׫)*^ஶGe)aMS 2BۜiT1u'On8Ij|veN0|LZɪ  ?& ^sKL}*lxJ7ێx,X+J=$&z9Pm<ح:n[ 1e{,XkKI'U]6Xd,D1ˌHmkFעƗDA""':,]-ɘ*) eE|~9k5Ix-(;`}e7 brҿ^t{=[xs .+"?U&$XZ ъHzWǶ|_$MSBJČW'ñEҎ"j>_?OI8G+VX2@:+?-YII1Cc6CCև86ޤdTӵAW<ߣ^2Tq7 drA[A.76swQaP&MAhGda>I2\RL2|+%8=c9-}f|]lOR 3!"\q |4=\܂B!/ R ,a0_# P5(he!ozwUGΦ0y Ϩ[P `b9pm9p;HeTK-n/7U2R&ҰO.֑VIE$D)%8 >G{X$ںnJC6[fWLMXK:Mb]i5!Yk9nMi}Ur,C/ǼltkE˿\@zɿ/Wpz>Med|=Ѓu@Tu6˦p-XJ@@N:<OUQޙe>wDCX}Bqi|7xL$y-Ǝ3%H2ն5plw5+HR!g\As{6;CAXj7Y7# xq癒MDٝQ@%5rޘi3'm޲=zL ΂yev7]&* [\,fK <0x̋e J`!YCW6^g3_y/orb+*cG +c0;I7+'t,):N/wbsZ\p}IIw&#g7!ݥ 4gկ1B7(BHۚKbף dUiqS, wp-dn]Oݫ]МM sm-2( "(w";1fT7*w1J A.f\rbAⱱ≞DٳHbJ&Х L{xn4-GY5|߃ - x0u$.DIr2{+s_Dcc/}= T6g,d) :^.oMW2ŠG|4 7S2s {$^GH:X k <6g,y&ROm1&vHL-T=kSo5iBu]31-m( el#{t~B 9OopLjsy%z&&d 0ynE o%m%=CVžcw={eIp)𨃶FdjA-b,XK$0fˁNot ƽ %e] ǷF-P,FV`vD  ڑ% .( >1 |I.*rz0 .U^ႅ:=u/kXHXd@CM3duJ_rYZ:1izJ?  3%CKq~ k4\%hSr/z꤁&GG ?qi<5k#i` S2)vBeM<5XjmjKs~ws! n4qz6UV8ҫ 'Kq35:cYm4f~"h`at$xCٕpoHa>Տq~l8'+*oGIx R`ѥI!nS#j):jj@LX0bx/Nj^M2`ԟ:<Q:]_^.@_}(1g'oΏNqr#pQ&ea ~>zsA ˺ ؑ4 tѲ/\S%ݾv8P~8Ǧ17i2b7s6s^:nbJItY}۱8RTdWS>p1an]*e"d{pSussIp Xfj[ws3 1W.Âħ=@\b~W7)_z&*!D Y3^S&" -Uz5~ml2R1 q㹖%R`?:ɩm/H xS_Y[&U꽂A|:kwiiw|V& +ˊ5n-4wVzQ^C!22Ɯܳn@-f {p VPnBP͊xPی`VGl{y\/4[峭/loֳFӗ?<~"+=2 Vu%0o%VL^>۹~Y싯ں϶?q|w&/3@}.GU,|z鲄;fdL?q#uH{jkNy}[픕&p^ˌi\}ƭ]N,ʘj>Kp@lQyd !D凌N]~V'-BȕC2<^<n~UỦgMR9p ,#+j 91Ӝ"uE^3Ztk4=-`տ+Aޛ\޲+KX:G!%FzoN?H5 VXN9*Dn"҈Y?>$.FD7qWje  E*%t;B$Wd#r-}L'9W2Fw T2]|utᔘB:W)%bamt35: @;`z}o޾ze֏f{!Hjzfoa[kT-unqư -`6a"b1n7j|\l|TkncpSc9/'FA5cHx&8* 3)ƹd~Ir~M?g6O*2.G%x|]'IZNJ'-"wI]2Hz^PynUʑ15+|lVFMZeanIU2nm?:`}}'jIm"ScdVsD|F_Y V|1#L*Wt+L\ g+M(&Sd#s ZB 1X6\x><\SJ]%jkp5AZ~ /7[_/* 2 `eZ[sFJچA@XvKdܭ:O.\D N%arCaЙӻnd086K;%];x7UMEaUD3h>ۿ𚢢Ф1I$QaxM=^^Ōã'O 3CPHK,Ǚe]F'ݸ$G}Q`ïFh5¡}p!dV5/oB >ۨtFzƜ¶QkBUmFF!jhT>Yw˗+[8$'i B%&W]@ IdDHi LKCiii#ͱ~mJVTF/gQm; G 2k^".@gŌ([RBV4rN_!4Fd/ۚ78m$Ys6iɋ?6-#C eK!gPAl^ r*xK,ӍwE'QMZ4cBrQ2zDH7m6*XC*x"G",OEY*p5BFE͓㈾HA`8i_>~ū%1ٝl B'E F9g#k3`UuV=> XW;[۟on}&q9MҹAr+,=zǨZ ěȹd!y:Ȝ>ILzwJc`I{螷".ec ||v@Q/%v,m\7- !"n1j&?XRd2`g3FdZt@@,ݦ+, K 2aXg7KJpGl5"LL&rmt&?tDc*g?8^S q0}JҁS_SN/a1AEa.r<[~i 2 2wiak~=A4nt#K:oB|rl.S!DzC!C`~37Çn ;w%߻.-s|e7:x0NݟpsIfנ}3w/ؓpq>} Q5^$Dc]ئ׳)kW ,oXTn|aX}r+o3,_V! -Kmʫd 7_B/lNtr 8Y)ڨ ԥI'ԤNf4mr_0Od ߢv Tj"Rc钼:Ӝ~:fQ4Տil.24LY̮Tj|8]'(ޓ Tiqr  ;߲Lr}EiKJx*_y$,mTmW~f͎=Q q-,̧:lՎ$bZlPkdr^=K``n "ށ ;6_߂"F7HjJr8P U>3r0O<2;}5m t_"Ks9w? ~w 4?"w78ӥU֜}ey x9K1H"{1 9ʗ l]r@Rcމ4s3Ωf`ѯj@tCbc?i4;ᎃqŭpaJ >>,@HZ/%j N(Wy*}Oik͗~,ڣV؟l 5߮,/Uk}fW:t n~v A br8W,'qn_q~w+l~֩*~߱gTg!Hʂ&N0[9A=bAl οMPuV^WC+z0kl2uj/B7_ª_yk}0_tsÚer?p;] 6. ,Scݯ> r0۪Nnn"p\}.5C`TsN=>Uow5bnPQRO.Z!?}Jwgeu5`ml토Zbp >$eo&&hTJ]zaE΂k C&_q\C17fHo =gM_[ fqG+9owzg';kp0B`0EZeL\T5\_θr))> كkZ$WGsE;l>֢=}t/Ht1M5U'qNS0顶MuU'(gþ,Dǚָ*_B#}?HTxS_{#I+Y7`%%]b'4@Vl4BsGVlCw"a@Lj;0yA?I!*#;ye"j6*!jq@FV2D1-2v8b3N俘:؛yjO[R=q %B9ҡhrFn'hnRĥ-+j`]7'z vm^@k'QlF4Uޗ6w s Ʈ . e91!XBgQ|{g`7;^ P>YuS2T|gjϵY&Mȩ^ TxsuDW{i,Gr 60 E@A A4tyM)Hgeu𸙇BD:w.7O2FJG^&CnDm-uG ]55! hZk\Ulb6k VuS`=NK{Wx.%.sS99ԃpL$Rj /ak[Fz1xأoYl`nwv>3ŧ;?><6Zmd۷p WIЙc ǯά%]NwWޕ3&w7wSb:l}z )*daQQĬ 4֭k&TUmӀ 3zԭN+jB%֓!4^&7T.)G"lD;OQO5E '`6M殞-c}sxQpPT'=u){ABEn #k٪9yq]TcJ'eE1+DD{h_G*_ċ%9KQ8g/[L*^[q|+sΐ n$!(6$?79Cޤ9,hR (u-ad*8pDgu7UL1i8Xd]˲)zܧlGGG.|8Y#ju }w:|Cܰ՗=XR*x,%!<I  2~zʺ "O73`V-3{b)"!^P&Q >|W2Ԉ@[(Oc@؎^gD#;Ek+q~{=HT=g-nZD3u&4?ߞ bR ; q)4 ϣˋO f[ f` t!/)O^?`z#MxqIxHU#-IL+^SrطJt$Wq~=u"C40wؚ9wj#<sc#M6:KsV 1gU '>;m;M&%LB`4^/c<:;n ĉ\T@uTK .{* |,ub/ ՁHUiÌ}KGԹG%EKL=ioEj{@w*ojAh;|JD&kٝ,P@7Vz D_4 }ݖy;JE;  /r3e&el"586/qk(Iՠm ióqYk4 d`#T{gf,c^e1!균PNP W]T{}N]ڝjWĥP0}@)\hnx ákBqm%Zr$#i,?H̫gЯ#uֈ6"k'=2JG0eǃgKXi :Ѡӽ'n܇HW|Jv_L<ȸ1`,uƠI֪aCq ݲGZ|J&ٗk8k/+cC^ `4&3"!M>duӲkelRtӌ#ggɈ4 ^ Ah8<. $E -ꥯ8=V_}'i[F:fa\_&7"Ic8I+*K{d<ږ[' AAW*&` jfU# JhX]z|w 1U>!K%xS\ ؽB|n#־4rWVv.p7-ĤzW"oQ]l(tb2!})/ 5VB3h >ju 572MԒ |~(l: V(ڴ=uM9DV mPmt:#v숧w=bO-C3 -.yBUucqa_GF%FQ(v9Ul yg`o`HvQq0Ax|:^73U]5pi j,x; ώ鸦nBFn\;d.ɬ?w~pg5 ҝ*ULZ^oBsLaqAc^4 q3bLZxi5둷o1}C>נq cŀR#L&hLYG ^GtLdY׸6`90p\eMfU.x9,g+3/{A)"fh̑ rVdž 9哻 JfepL}Qk⼦/ʴ-8a G0Bg=77ue6p(֑HKc7s",Z` 6#fچbnLehH-bwxgp ܏6 kS:v݌CkiϏO;^]VӶ}#OuTp$׻I+_MgTh՝R_Ҁc9IrÈz-3|hCo3!7QmFV~+ $sY:-nA87A_;$NciHoL] {'FT3$Ѭ&sSdhQ->j_ mrR!B]<8e d1 `ߪʖɊ ȕy5\^U%E(?[ċѩ1l({>~˵cKuP3x|BCp-S]uMoiĩyXGO @o7'׸uo*JȖƏ,tmU ݵD%7ɑRt+!X^Svƿއ_${tk! kd0oMU؛ ;^24Wo%(9eƭ6g;r<g{KxtҝyEeų3_j_A?+j# ׊AF)1\- CA*BBJf`#.4C4Ѽbu'OzQݞOE<ÿcs-MTn;A_n5"#wrw<-PdM׊ou?AMpF98Fzra>5ڻ`1mMurM6Jre ~֓ P72IU{DTK<[ă횹,D ;ǘKVlj;ܦխ .|o1oj.J͕$GoԺ1wue c|l>s@(s$ 5=3fcGW  qxSU0ז)DawotMq#f%i/,TX 2͵fh0Lx"S*VMpt &܌ S\x]~ف@Jsz <|­eQKf7H3'Hwy&`_bZ*8&_Hmb%N9mRbU1NAsW>x?~Ju~dDJl4=8&ָk_E!$'< [c`K83H h[Hlu˘3uZ]j3 uuժu.g֥!"\bbU"3_xԶ;d<v3 c`81S:(3Yȋț4]b;O;L09L\WxU,M1*C0"x51`H>qg+$\^'0.Ԓ,")fryFT׫9G 5¸:wy RiG(ܾ!fˇYG3{ DVͬ.m LE[nHE ,fLva_ca%eTjxBYe0 ko^eyӈ6!(arOp#eO / 㨯WF.H8K j@EGz'!n^iY#_Ao[l3iC)*{$2k\|,sM+.5B8~@ys/8C`SƦ &<^/$L0eHV-PNP@yVe7.y|sϒ<Q슔P؍ Eq`S*L&Vbbe66_'̙ۀoo v[;_M"cFC:i&vB?g"Єc0icė^b&[,VWcP#X/V(/|P٘3[ ߾ATHMj;m uzXn̻!yY|rcXx 猬Dk!3| E G}E3$dס`xT(0CHEA&M3|t xh:ѱ?^r1yfUpjBvaiN:|k `^AO8+ՠ$c#% τw"z7#s7yt9>I'=_SLTMeiA辄1\)p;N\Fݏ!exja@(3~|g45o8sl<WVu/5bV0ݎ6 NRPg^mlV (5 ]4EH~ǯFݣ̐~tاgݣ3lg4Dްd uUI8Y`w*-O^FfJ_iD_ HiS/dX+<+!TTh8ך"0;;F2\frE%o'rcQZ0*ࠊ9 Ac1d/v (;b|yn1m~ڄY * JT'~-Oiv+BFdp:Oy4 c%>qJxC0|BK9T9~$ݖ3;0x^Ŝ6LhuFСe)gYll*SG)H2isF$| q|K{&h ܏ QNqlc|3.A@O ŎiܢO㩑C-k'pUt|XL'cۗ4q<0"| Hhyc%ī-É qJIӳ[Y`泊*,h@PMFw"Nk Sm2r!m:+AHpػܱUȘRlq9B £V`D#GZ`p% 4@ cV yQQ8z)G'F!Bfdt &n$sݫe i&$6 ֘珋a;vFfu„dKk!#0&?7ړ|Og{sZ%0O-' .# dr:(ZsK3~U խ-m0ز}ѺIo|㺁#نM2Ե^<}[N`wvÓѸsȻV7"$8<[ƅj4l{v!&H(X]д; a׃nU $j/xmj_Ăg/)s͠.Ptge(L{$,@b=Ԇ9y~HVou+ޔăjAa3ZWH7% FD>Ĩ.1ϒ| hK|Tp,.̞s4_}X>tzJ+* NU]QL1>9lC%,"7g ,5>\I !| 9n.bO& ,5R wBFʢ*]krLZI!-~yF76_ܰWaktǛ/ːk?'),V*4~QG2#\틘P&Ԓ  ~N _#Qm2p\d%aΔ0WT. R$w;EE¹>)ܠ6K2ݶ*MSc\BxK""Cg`H—t iڈQpU[[ck_6Z ;|D.`N28জEa[yJ$t䎫@ 8)gEfwlf}wv2?[J˅Inʵ $pۻt6LYB6 )ƴcC*΅}3x=Y#= O^$nӵ]3 3%(*cK.-mR̄8Oq `hs4|\Kߙɑ({4|lEĺpc Ь(vcx+PX"ڰai󝱩ǚ|X. qgsdG&w.xyG '+tU7[xR34 c@MJX.Ҝ| 2%ǯWy1mFlؓ#*'3 +tmR.a(e/̲S;UW\솼M1]rB@l˱;Ř#O3`0 AntC6M yJڸJL7K> II|u/" `&FԐ9NRwʃmE*(P9uJ&{&fY0ۢ)4s#z*#JAVr* [ޢ:s+ƿRa":P~<N O)ƘZHE e{N!dMgd݂hGvRd7QXK-vFYs-K0:/؈) H)I+r#U\8Zia TN&{9C8qP$\@FÇ`ff"s8$+b`-GO#8RAPx"K@Gqt=Ѝ0}3ߘU1#lgʨ|wyfǶJS<=\ R1vU #Æ/W Vmf-v,Q֧C@X8P/pyDRI 4C!.LAz[Z\ HA ߋty>CT2sþPٓ'D/k8nrl) 6݈~]2dzS!BY^*8k>svշL*D,) = -)[@l¶4vXЎ@^TM !jD Zo_ |UwY :E|N)-.}9ah1`r\yD,+YuQ|@$30mΡήh ENJ+BYBSRjQ z} rۣ{at4ݷ#~tttd)/o R )y%K"bzly uLFwUI{FiJk|#)UTk9|=];8OxWmo^\x(||5y LTSy=PO2qUc?g5S*nv}S2R6u]R-a_Xry/ s9WV I4Q Iж1O"9_X 3IP`cdo}κd‚:y@jmZu*Op;'2vBsM F7r1YTCYk>Z#6*dorh!%;SwKf󹄌;h7=i mP=Hύ254bY`YQ;IYHBrdizjF&a{Y*LߊK6Mnc[4⎲@yJs" h}-V}šX+(Ŭ\>ŒF>T|ԕ MTY z V.Mn"|lrz9y ɑ 'Hv iSeЌPɨ?g#sۙʮa% OGNQCHXK/<2Rk g Vrm7^xTְ"#.pM&y$RqdSl6 +E4C 9J- )33frn^׸̈1.Ջ4n8](8P8e \Idhr7O CC0ĐlA2pl<5(}p~ +&M ^-AꆲLEb#nNJ%R["DOav4y(j, ¨]rDAE3l{V\H$&0cv><6M_ E6E]h9sȲa^<;zrgWiThZju4y/a3~n?C5|'0mD$~'YEl/ry b0BNhܶ)a[,mjѴ/x@H\huo D8; 7z䂟_yF$@g) }7m}1 DkW KfOγq^Ā&Gje^5zSvLWYr@ts.<8`0pѰM | ^yO05 fxArv> Ct[Bkw6#mwltSS,0?vfY=J f7M.hU-tŔ&j\!֩,(GP`@ZSo96354ҐrYl:16f|lWug}-a#ܬ%S* B:soGvvʒ+ْy -NĽ$>~< [$ꏁ Ur?&֞(D (܎㳚0mcj}[~9 0'sZ")! zR3 |"m @DIpK8@g(Ynn-㑲%si~L/F=Atprl$aUБ! s 0Y# 7AB 5)2)gjwqG< +|{?z:~m0m ;JPiӋ /$ |;|eC,eln3V;ǯz<.\J],O9G6 4 ykQQv<״;؇ݣag݁cN df~2<\#1 L!Y)N[0g $1sM'_ dt}⮀#%bP-jF RYxk1{F6`0s"Ve,QIRG)@;XDL]R3R C *v9g73ap ܡrY+/ty1,卭 %ZɵjAotvr]2eGYİP2rq?pʩ?LV †j iҰUEK=e;3()*Ȭ0jM(HٍjD[]|qpm38DIDk:Wy&<,< c;#6bK nV6 \i8ٳݯx + Ro,1C*cmQa-34P*1ClX [;.QmB [N_{IaD-ט9FE7F=sC>PK(3 qu~*Vbs7yÆ̞ƣM*VoA᱂֏YcX 3;Qlc{jڑx+>#%C!$]vc1-t8xYpj"(8B +sӻʕ*NoJu ]CM _Ƽe U)enjlImlsAY}@µǰw=/;3Jl%T]4* ˕EG9jvI]ޖO~n+ I \73Y~#}`Wq4v[mWJD# s|&o׮zp#T$#?cγ]=Y#}* x;e}Ft'tX)H+FRgծ5Th*2Gb&]ͻ[<p{ HVP;~1+.qd IGЗY_2%JJv3}*`]VC(fw{5l}uq Cɤ]N,4 r`d0 -ZV5:pNnAZ/-)U*$[+GСj.ەVp!_9dz0~ F}ﶇTڎjʿ*i|:B[HNXBTSO"˫?ejC6W|A|'R5.9TS_t&*6pX & sޯj9q h0[*[zQ0!"6bzQX32IF[Di_2Z ^j>wِ-P?sq="" ,#@uoz?ѧ$5^棋ļ7NáɭL:LJAd6?G*lܝ9% p#jz .Q4Lߣ䮋 Qa 8PMXՏ^`c,1-@BpV5M2Evkm4V(j s%>3+.@iX"grf]\v}L+2kplMxr6ڳ̃c#z5c$%Yc o}nx $1zpؔVaۦIJ8HWE9:05-RtB{^8Mqǝ2b`АS>=I%vJXq,8 KM"̅$ӹkB 7Y&YJzʃ׹)ݦ[j}vMˀ ^{Z}6O/<չAK#xH|Ź%kDfUӍwGnHJUkf?jxli uaiʥvj/o-]ꤾk$%jgXJ+wU_𼓕Ԩ×˾݅1E!gK=6oO30/t6v͉6`2ݲE;8>8Ӄm8gSK^Q=0?Wa&4Xۚ+&BƎʰ嗀C# }YBJƒM҇X:[qP{6L= 50P|}0f(@-,Hė01gZe䢋 AI*8XZ%'g(m$ Wlrٝc*%':UZZ?u e]5sr8^Z SXn)%J(MO9KcX·\6g]F,[aŻ*%|q\px"x fEe2gC0M&5ɰ8B؝Lp28Dq+Vk#i@mnP;y6梚E%ԭ*'ƉGB0jPzܦ`*(% H |l9 #PޱAߧXͨ\ SM TځjIiPXbj8+j~;5 YuE~!=2Ey1cOG&pbuv25\̌zh&3:  GwYXچX9*s`U1h!' KʃAZ ̎pdžQwec:_7 = <"5W;X[ ixg"+fm%vσTHH"s mSRL)h  jfj q[^nAu UbµAZB[}&pLx*cFf9ubW%NTE`,Ua61`4$QpmV8>:"@pt$A,`:idW[(Y s%(fEoK2uV?ư7Nkr%-O0P z =L+z;~uInyl`x#jѶk&8Ƽ[^W]|wFvJ aY2Ox }FCwP"jdBf` cVXR90fWu!BR[Y DChaJa͎YdyLs1 Q%U3df$ 9;\7ڈc5pe 3-PV X#./[ m,+AmaY04i Uޫ=uF.22eE_ 6tB‚T'R[BxT 1}xF]0hsf-o<7KJ\. W>l*<բGye3lVrߖQe~Lq>íoo$g@%V4=\qQa7ov_<ڞvxç%dm]mʸP6ܺ&ީ{J4 \Oʜfי8]f=;XkmV`WڪIAˋ"f~S%O xKH ߇kM,RiR,ҧBzofbY~p 3Jh4-[A |N.E$~X ጵmIѧ-bp*Uk"uyx'rYAW,V:oH3j"FJ}ZYBVqζ/ǞAw1F87xm2{Zs֜AmaHU %6͐`Txz#Mxͱ(C1*/(1٧t-H)5{!*C>Q[Ik^Uj ZmIrh%Ѫ3𛴋<.^J6f̐@m a"}c21`:0&֫uaӌV7(#OS.QL."_Ʀ|~L&w3ː>ݮD0lXR  FjNIɐ%ge Ds$n>t1j /$_f!Ӂ_|5|'L\_clB mt&6. V^-gzYR4",[VqsEAdCm@41kՕWYe[CYܧ*Mz.I{8}q!kܚq~2YTԒ.pGΏxy'}jO3*Γ.<4{1ye ֆmsMqcwAИІ,UbaǓqejluϊ`HTͫSUki߇5?@ڪ+at݁p=ۨ]RFFjslT;i@3 )D`XhҬr0*D6t9XjF@1vjlS$$tB,A7+ r-^t%IJ{, M ~ZbeyުP= ?pdX ZWlW^=l5W{f ake8"Y!C0ѱתXO 6ق|YlӳAm1>})I{4҃yjtʮHB`i kݰ9(b"둲e ;ɾdrCLY=p TZ^$)} r@!W>􂩄ϟ[߉ܪqvӖRӒp68Mzn4g, J8?J[USfFXE6.$A+.',3* EC%LnAHa&X87"y?U6?ގ?Ȼ wޱ[U~vEL296^%1GzYot;ywRN-KZOt;fMCmk8ZT}u~ f?P dyG2H{aT,¥BS,N)-L1Zh<戜 ߇9>Z){:$YAaHޜrJ _LKiYE E]A8@!df"00PwG'oV ’Ox>ܧK bFÕ,|MSC6X|Y $K̰4\@%T@[Xʙ(sGuRD2-<5 t_*G[0|ΦH" 9P3p wppV{[<g&_Mәm L1XimBql +j-d~_ZԐGE rdPv " xidG{{dAqyjKuo2^6ɜZE/ 4{o(˜HTK8Mto3f&CǸ¸yS,scfk +K&r~TK$^cvHbTۓZpB5!Y q ‘M}}/LX~06WrQrt܁46>֐, v@;1FQēsݛ8ƫɑh;jOl-=^F78X$W Fvs\@Y-ޤR4?͙LѾ' Aڑ>+}|$zE? "X]K4&vrΌfӥ8@ WqpΌlrxe )xQUH*vBSst."9Fm$}NP#0| rntޥ7QفB::xHFeCnr5YqS LH6,W; w9$݀43 Hp K'MB1A@Lo0[Vpoj~fwr16+ 홯d`0|b+_No2g8mkD-tlu'vj>O RFʱRk PS~F0>Ro(RP7FlALݚ,r25jvgRk347GRr)~vy \$F*Gma\TpZxs+YT%}ao`AJ"ùj-D4`` 4Ed4ZյV`Y$RFJEp:LuϴT*{6/vڌ enl))-) ޶x/ƋkIe lzC;8b~'ZRw"T<`C  _O.lqcDMYd>q zCGL"法A\I>r G IL7  q~pX"7 '}[WWmo:E^$O6$RJy:=w B4eߧA))^Izb¦S`CP>[WTNv2$CèId85 st2_iHb|?X C嬥.tb6cKf:<+!ȂZ:h]eS4x:]Lۦ<]$z*'ڊ-8~P_n?VsneI|m\]=&I2CM:G4OQDjVwA p_ >1D 0 I3 vፋ$p0BD{Lz6{Ռ e8ot> r]P*zJ w /Tlq[+Օ.dHΐ<+8ӽ]5'1ϑHXNpH "Hw\8lvFEkX"%`0B(& .UcA\Y 1VO@m Ũ W ؽưmUƯ]:QT9Z2R[[΋ʏwWYQM{eݛ$PcQ4.F݃A~#qCABEkfu} fE`ȢTQ<8tQh]3K!(4W'/hD6xAC8' g'VQwn#W|Vq"Dr@s,8*RO_^3:#kD|[wRa*(u:d|u6mk".&- }t ɢ`A%qEn0WC?qȍ3A&g xB&ZPC6P}Xe0r+Ht R6E*+1Қg ;[{ .n?!jZ,H9@y(rZ[;0'pήjg Kר$q۞cYM竏HQzİbF#u`Mr؞gó'Ʋv|nm:'JxXK؍=ࣺ( a*W ަy|@OI38(@4W6Ԩ\,oοY;,&{J !ir] x,v.)iUM1żR `=E?1/zY/ |'*qY+`A0I^g aYW(ޜf:&`D댪 *E9`VQ_XRɆ-4jqe:8^]ɵ9f׵)-֠駍awl>2#1`\@Z!ܛON.zf);"0.b! |b4[xp"/CE-Xxc=7 9dS3'"v>[! 6=[qcsuav`m*dw 33@>,}20 X뭣*;T'DO o3ѥ<:JX&]N:P ( bêXq/",RIikLGM Rsˈ"72$rt'ãt@ʚ %fBl2@I4]m^?&~DE/wqmgrA=OyI#dSe̬6xr~QC>+}doߝ DzU3Ql$,Dz[Qϭ- dTLɥV&-P\N/؇Pxw:7Ft\g兜坿t ⯁=Yz7pN _w-`tr|Yz-%哓7ӓ٦Fhl_VʑzƜi[l 2kAL om/jLInQ d;oo[i -%27T"QqUDmڐ+o(/4/\d+xm/ۚU!\MC&h֢q?*-ԫ~U OxYQ01v0V0b &w_iP)+c 毚(mB5SdKsWHvX(U.xJl6>Jw8=~êPRajytw'P)`RVCF6bAۜ Up!oT;`A%%1Ms>;A3*J h/{`@T'h@JC2$j ]lT-.Tx3<9Rmes.q#&.*. 6\ #b!eU u՚>תjU:'\{T (PdLTAyjcUmI!g#B :gݳ^v-Y~yãW){Y1碾ȫX$fۥe}ѩ(${MpZٙU(JUr@0d9oIxa@VU Y̙7ޞ3ppi\yKǰ7CxR1Ls&`Ef,*-zq7],K!9b(EfC4Ii.Wȉ\B 3G`}/e>#藌O9> zGݟFV'VT%ayHo:^u >cdP:͑<^;w.c鍡HQcF@ߦ@@4njV 3Bmg,a=}q,~C;,eCMj gJӛb %(`1&U@Xz!+"vaxkdp1O=/qD<'| T- #2Re"i<յMqPyf73Xdb#lYѐg BMG saIRKjJ@Ɨ5t[s 6; =+ {pe<Oc@ez a`Ր`edY "t,0!S[ЀtI;N!W.Hau~F=.{_OɩUSWί}2<;)Hٳ!},?C`ďc0+No&;LjuQ%oE]Ԡ퉔 '~M?N_eE74ZtԦJvz2 N<{SÂ#~DHځfX DՕDWiV=Յ;v3@ be1=]$N @<1v@ ke׆6b0n8 P(,q[-#;!n+걣rX,L^,+&))#IR p/]!"3U( bu& 5yHHq5Pk)^Ԁ,< k(*H=6Ԧj| [jIahJ&MnlbdS'=mƻzFbl"G8~a[uE&^t0JʴٌDM͖2:(5Bd2t^]A<SqJXʜRO; *c[S .uy\ig>+|Ơ6]C ."YxVqY> ʨgx7 )ZPMATǑ vD).K(y$A%k&f88"L Bv $9!Q85#//fp>{,Tϻ﹢p+WU@k%O*s m{K9Ho5q͂MζQֹ6{8 U;%(L-[ǽW'g.9vn5D} {tLT@zn$*& hTn 0qn30BHԏbI eDW(Uf6I#roŠBє<8 Mo5<عeZ`F;97p^H4 Ks7ij]*.Ixd%lifuI5'OX$fYa4iY0@ VJ>Ā]v }ʊP5J42ELPahb+ *3EއҖmߌC=Orw\phJM1pg.ɖQI̹9x򀸇:сuX9F"<h*dPaj [/LbJ˗0E]|[[-ziTl^kv:uuj/LMD-!¼_ rZdwj{ UR*ᖎPH.Rb}"^X~8GJ~hp@X$b1cko(^5MRd#"J9Xr7teU[>Dh(CY*QvJPtUa3ei()AfIuk9ĉZBcb.NNȄG[&׉ˣ%@qҕv;<W%8Uj;;C߉_uL8Z<.LTOeiTGOVs 懐I5*KjB "+Z=lwŠd r!E)*0;? vD~dY 7 .dfWSY7MtaO܎DXa=| ık~pNUv*q(\Xy(%ȭ iMHAWGA26+D"9<k`͌,f2xyj;Ac*5N'qv7 v+#W1Ntcu$B]K3Q0zg=Q*'}][P(.LN0 Lwεc{ * ] UA@KE*Ԍ=1X߆7eh@ͤTQVIO^XHiAؽ(.,n5Wve@,ԅ:&4N JPmUx2X߱3q+x}j;tus rJf7IIf~4)kcpBsb՛6*46hh,lpb%SsX璇J~55-/GM a3smf8(lqyIEV~85թn^$* WWF_P֯(b[l>vG{OTZRp\/EJ TJ%?|Day w8CDpn=:Gqjaw(@|pVRz"G4!ZUfܦw~=$B7L)Cq4-3/DhqH50a[@"yh+t3N&(tJr)XaM3^ nGq^^V.ͮy3QQ *ز^Ϛ]a9꿚Xt{u5Wk[ݪe#qD,rEӘl87eӉ?Mϼ4bI f;_>P)QYZe5.PX4IrkQ!e ?Gnʀ"*PJ2smloU'+jsn b*2w`.R >;~t-&lj]w!/q ^2 >QmmT8ڱE Z KJa4DH Ed˲K%޵'ѧ G: 03lXc#pPExHV\kРb0HO+_T:)4Ěx-nri3|N*+^m7Vd+9ZW ֏b}ie*7]KWۢ"EC%My;Nn+_lf\'T72o4d؉+3HHᢳ9bs0!#`ijZW_IY1\tB+\HV(3v F[nO̓\v"FZX| ZsqU<e_"Cʤ"_P }uI""_Z%RpSNciFzAWJ87F8fB`CDS ~1XLD< ? zoNmv^ĥT~r?Mѻ^ȡZ׷'ݣÓwoZ%)!9?! d)_O,Ht-햆m}{XT@aehS8 a=4yT8pcDVӜŦs;W6c,˻tKP|b0B,x*Oj^*ZKi3Az. 2zyHLtF/0*׬=NG7ې-|D]obzj*w3acu^uƂ1z0 /qa3 Seŗtd:u|AfAy yo}r)ĵ\LT W̻$[ @%n}8ߋq#x FsexZݏ{0/n '%:gU]oCw{U, \T.c#fؔ__76՜v{T@M4!KvP{ײ Za \zNVP}ҙ0ySI^ÀZ@^$y& |Mxuϟ=ެ-bDKP 9넍b # Mhr3&kZMLW g|əa< ̑b!H ~YSWWS/ ֗C {Ɩ|an;ePFa,)3eat1.:D@У1W􆹍^:˛Y"R;=M]mɄJz1/v⹱ /S.0hR5@ Ϊ6W#fG@Y-82QM F~~Ĝ$lEk*Hq$3C|&EӰ9^8>*Lo:$ Gi]~].,ЦJ;K2*∲?Q"Xe(1,6V<2uj@m=5#M9ZH0qL7+Z5L0 (ݬ:|[U@$Qxɯ虓W`aKT|<4&3+j_+Jv147O,*ui`#>n aG:KcQñx~Ge e]r ms0crMI_>IL9G;Lt""h\n2qhU0ZҊɇyN̛1lj{dҽkr+!&A3{gn_b?y#£6IQ8T1SKsf1<@1 J 7 wQ.E$ ؍KuaB ] 2X5MY {A>.3( -6Qd0C`M!%>E\bOG(hV53Y[9$PGPTh!lGEhSPx,8rpp-:Z̄-Ep(ɘaDz}#^̒[g͎ztzV!e^mk_n:~뭳kk%B9Aig|)tt?J~E {$k#[ ^dŜe>z#ly{$A`Yzzom dp~  x88-m_)l_ߤo] V]s͏)+@{eJF3D.dUY՘:[2zXz_I|5ǗF!7`mw3^<7[5}ͳNu @ :2+s!›$hMFLQe23)z+U\JAKo4%fS~;RAK!/01A'T^J,FJ)YOdM; A| `Lg1(n9:@z(Yu3|Zua?iԿ՛G;xy5.i-! !"g;۲ݭCm,BAn}m󏝄r(륹``G/LO{(u[_RH*Wx8Nw;0>07( /}$y_qђoSPYqzdZ,92w)1ѓXh7 ^ vA٠\ |P9(X2>1F*mj{ƝC־b>`Z_Og5ϸL6L 0%KLw)\DO g ˖Kg{qf^t!<6R׵~#t5BBtǀ: `ba U`B`W Jft+q +u&+e٢qs ЏϷ2 }5pF -ows^7!-csV @>qXCiL,+0-i:T໮ooq  *b)L1Ū-.\m]\{ `|6YԃLQ:2^ P+,/ʉWZ+0}tV^|6{_~&]ɹ6$#ʠ6M\:s&AbBG !";rcg.U*7 [@N*ǵCEX,uF(t*`\4uI5i:o^jx|FDW["r z\J ( !~wkȰW; a?™/.*#Ҝ tZkGR?Ab֠gIUHh-cn/y=ga[vWڤL [mfHdw y*(")Aɂd`}X.Z PSIRg5<Φ.rB1N0trp;/!|h#AHֿ@6%>p(Mn Ooc' &98:]VA5xxf0FLQ5ٗ H<\wG`bop>jĿk11e7Y/$m9lX"<{F4:5 w:2a/6?nC}Ó~f1_0U@7čE2Ⱥb ibp~#37>gb=Q!-"mf }4,UwE َ&+[Kuacxw\ Z-G${3̡RJ69ZJ+bT+2lLsl\y2~-.o\eO`AF˳Z&;tmvlWrH\d?nڈOCG%8jn@| ' l]'F.Y|hԣ?fs[})=qcUon.ɤ ]_,l~FF]Cq5^ +Q+ jjl:G(b)yK\?:8Ofq3--,*. Ԓ."" rA@@bѠ\|=:f4~ƷŀE,FA 0K&J2X46xFS }.XoFeKa4n<8)#wFKvN `/_S9[B ˧#GoOz!}LOd2K.Ddo=+}3tm6; Q,#m}qɛq:_|xdE<|ݝf ] _ y ^Z VkC7  XNhf:~[iq}hbBS\t݁;Yqw߉dgidaem?n;{7m5 .ju и t&",5_Spn 1*2l>/{nE["t`:ɓy YhDR}fQ* κbcjLˇSͯ @W!G?R]%ʩ<喖(Cb*saA"}w* 07t4# C9[7+Щ:)A4P* 5[Q703t%Q2y}e^J}ez7U+54hL|(6#eϒ4 m^$ azPߵωWG˪"Gii.9mkn5"C(Ql Z?bn,@w4~uG|MLu[50:"{{4ЛjD%k4)VBeM 7ӱ+bҼԔC|h)Xs1}X>$ !w21/òPy9i5EںK A -w"nzɂhS"ʜZ9P Wtz-zYup'/1!-Gd+sXSU#ڇscue^/NK1̐uFFwaOwF~ / ksjuaVѝAł2^  3.Zw$^ a:Y%M"(fDm΋m`GěX^&mjif[0-Y*Ofּ 2,a<ʤX-=zEb瓀8qK/fT4JPN@2B U =q&J@d6Q# 0V9r#\,E_2tX5saIￛoGCu3ܐX|1[\r]EuL3v+EH3 R-77en9JFR]Ub%skKSb-!FWiXmNpB4tFlIHL :TmAa,he)V)ֻ 0T((5rE@\H=ps,=a4i*5lQ @Ws …`z8U:Nm6! `pyFFO;ASA|a/l018+2],ϟ>%zc*OzR@Bs9S)6XjtO#)'h3 eԒ3StnxLDSޡi9-2 9jG, %d&Z&?"@.B̳[ oۦQ\*;7E(4El(-\48Þ5X)sc{>ẹvdҲ6%.X EUN 0\HsUgr\H 7v”RuSZնMıQ^^%*ަIfT|. 2Og ~\~.|^"ڜ!J6D2{)h P\!5A/X&`elyZElM͍~aQ==Q'a]E0O 9 oȫc>ޯH_ 62T}-CC}I|ԲeW80~`W/&Z"Ol[]2 CN?O|[\Q QbDrw@-i.pUĈ$dĄcha>| vL vq%6(nFUq ۮvrh+!&9GP,ܮ.fצyiYZVmN 6JQ&h5]oME!$ť2L}P@!Jo*:ũZ; Ag1YS4E.k,u_ !T~"#[*+uN({Rt@430H޴&帠-啂aQug{)J8"Q/ p0IH8x@ZD1z1FބMRh櫣rROۡutmOȾhH%7 @+쁠vY璘W$@a90 |Lri_ e*<J f Ϊ b^92`P+YNyCT7K,,j? jS೻,眨x;[nCAQq?d%:(' |4!Ś'ZWdmf%=lqT.CBE`K*,%ȳ cDq|V4cnݳ.+v׵KnGiMbЩ&\ZhSC$ c +=Y.rd` %Є pL$9 0O Kf2#(bHa8B!mSLXvTa&\KIWh\xx9xNAi6řTo}{I),1q~^0t_Rwȕ?Df >i j_wΒIVM2~J7Y<8n!)kP+%PYΦ̸0_).EuR0TOxhvs12b.+jQv9&o(֘Η)(PC\mxo4|oZoAWSg,9vv: ҕ/ulmo%eY~™'@nqJp{qeYQfUNAҤ&#;76y g<*85| hۊX?M43oo9]>``y9ާO@MArklYs+c ZV1Kx nfk&RR\%/|0,(3 5t1@xmmh*٦8}x䜒SviNx .wcl N/K(U ʠMWY m@~@8!xWhn(={ W71b^x QdGFH6E)+" kɐ8o1鍺о̨XY%OΪ2ץ]DqUS` Q(Q(00\5~lrtW@{>3ZZy{ҡ3)FPExs,MXTqzrm3xL 6/8{ܽGFv__3{"rNA0m@]E[9i%Ów-JXy=Z![L씄mxR X!6X0FYn%% ŹED_nȘl*}Ӯ_n룭[-!>0BN9o' i֗l;x~gȬ ~dԬ,<So{ocx \W'_[8dHuOl>fQqk6\wd{wؓeeޙQƻzB.{Kk.±![y9k c&D?bp3T)ey21)m2ѻ[hfdmsK7X06.[mN2 Gg7J* P LϢ-v ,5n|3J=*)$#ffaA"90m`g13/c.M:zchM[\;ubakܛҟ*oicūM= Xz`0|r|5;2Oǂxpv!v6=j4un:{2#t*yc ~{v9~Nt3:%Ujm}?M]`BsU)ZVwe]9:lϫ aK B>+r䕇̜쑲F2(Xg=pɱa#sDha&f?qr (MلHAatMqA9ÇBtGTd,O "vQ8 jGaylL/vAnk.5iqQx+ޗNt{KJ>bg-t`N]yY.5VbPp6I & Qrv.xkqn_nA=($F_̒Kl7%28Q`;X Je$ulM0gU;ydo^Qi7Q;X_$- |?˽7L}cWϛUߛ[d3W+s,x:U@=G䑨+46j~`" rjˉڈ;O'g'A/.:>>j0@¥ŕQd fojpHh>4`[kޑUc!LTP\~ WeDL $I^sXVuQ\gO!lxFuYVfo#޻z` 8̄`Ď+KH{fj"XuB#;aW1Wĵ%Z_|WC<`4쐡Y>"mf Vof ᰷ z:k.n2KM HyV u,&T+hՃϊSIqxDc@6!ɩh~XnW-@|<9~ tdw2q˶LKnmqU2jMۜfbm}ƕ UMx+ WUt0ҶC)ծ㣟FWRڬtNBVg2" p8 3*E0 "k|={Vt9 ,cۈe'Ԅ2[tZ|2&^ p2ԜHBGATwYROF#(Gy19bʈ u9M$O*nVG;2]"}R7x-%8̔$!K 7$~iȐ#*mˀ pk3ұ t˿lLJ\j@E"\ذZ RHWaW` Vl j t6}?9B`3;U ?L3*4ao0T-hhoPZZzwcu S JoזVjq󔤫ekA кtV!{} #*PWFnM4^]ǫy5}yϪGm5ГU1&)IRUxQ`<-vw&2wF NM2iCrUGy1-yfneT(4S>q3 tdŝ-6YRx`Yi&KK^%)lgIqBo`%sqWT"мy hHɳbq<*A.LTZNНHrOAt-ܨu`dBW~-:͹E-Psuv ^@MS>g7܂$aQn(qi%  (D{xtIrts3uK6CZf̹!Ø Z!"liE{v9 ]PA[1`x͕7, 0[wBaCL+Bؘh kh[qmVJe,hc!:oٓ'-; or vQ6 Ւ >zصfW5|Eu(aS!9Lr + j @p?tcsΠyJDH)˨XJ%TE;ʕ)5Rj&y G|K\X0xͻi7  F[tq*E!gģ`I-P<{ h4w]8#V8OA :}ZʴJJn 9X[aBۯQؐuK* @ +.KdX.סcTͶUp!sa[4H@x9T>ڑ1.xK sIt?sI\2D%q꩸M誹_%:^7T{l[#Azs^r* % 7^ob<Ҍl+M{Ǚב~f tCr3WFš\#Лy'HԈ|5O%DE{_S#C m ^+TH JW@uT( R䊪Y{blq|xd׼U+h6m;pK]6եE5Ýdy h۠MpfKe-!I]H*af1XIrkOSu{엹Qg'>2XVlG{7kOΜ؇Hs5U[Os -A֗n{5LGs1_xR-ӑE`+lP$0IpS#䱹 Մ13jnAs4yBtli\`1VgG-ʈ0pA`ޢ54Q|AwFnF9w۟ȭe![4Mo/fxK. xC'9=ꀨ妃Ghmm]jNH*N{z N .=$mlʡR!⃐7x*9unZh.^`gET)F-/@*jq-:/-l2aE⚆iiEtL',ӑ<_|']\ÓY8x)<:5i]{K\WP׊bj=pF!GFᴹJRsZNj`f.K"/YB0'Anaռ4v6ɮɏ(#9C\FE-ځ7ia󯷟^ÅBõlV1." bocʲ-/оXE?O-0ۏ ;Og\FA.ǜ zQ@[]/ _TRC=|w.^ *~aAPj_K'y➑f=pU]f!z@V9̜\rTXsgrΞo% h4kjISԘDt @Jd&cQ^ ѩ%.18ip=7JM=92X,;FUDYV 5쁞䬜,]M[ܶm!Tx:}\*" ԰HjIT CCˈTz08y ^\ mC+U[/mneB7ya4PZ ιp^m<>gAeQ]zݜJbft8Fq)gQQq*il3Y>ZCT{5$?TyBL|)ĔqE ӊv/TJ]҇{q/Mr@.-FoZܦ?WЊ)ۄD#kX[V3H7eҜqo}Z3vGuEf›{S`S694IVԖc~NF(g *c)6XAdXrqBt\ipZwF1*(+0a.E~DAi~ƃh>gyp$Y$.t[q̏q% btFϻ*kxoUW| VO\uEΘI:8M\in/gY¨JB_70e$bBro_k|- d/"Qg Eiؾ0<-\fY/2G[E.kۋmzmL.lfu}W_m]|QP7DOl2ja/|Yvb WI5Shm6C^3`D(XKJ _ӎ+MD(oQ1 Hy*z]BjȘ<* 7M$^// +,n揉F&/yY@lBBx1B>=}i{ -xZNZ}: R KƘHਖEAR+%h$e^^ uE$T cC}G* [clUq# I숞[+&* ;`)=)9T]R4 jH*yl0 LKא6_u v/OޞvHd`&=nft}q3,bZkf{p{t6aS󇌏w~[6Rc@M54q ]'(ߏj53n|t_"N!ƚͰ.J$ zQP4K bX)PPbh',"כ0Ϫ CSD2358L_rzp`_N!EXOB@j9NY?FR Hmǟ:tZUfѩβ̅׈֙,J2] p Y3g*8D[0:ji kWxzlqE_׍!z\l䀒af)f[%WR\ R"2aIe@A>C4%佑q6NgL}SlT^fJyTmDB q nߨ)"?vo`a W刴Nu[b uG~ ?@%@rO| p?rX3qY=y&"]eMwуGiʸH፷,bW V@ ^FÔfRlB5MTR.,d2+I~$TSU}`L~YNĨw!&G.XN9^wpGk,,:1ɢN$H+<,B$:'Q Nįj|Hjg:W"/"]O Jdg>3h&W}HPA<4=*rK=4UUH>F# ;C l>&.(- 6>n4 _޴_O6YQ7,-oc3b;G߽;wwGzgZm9lXXfGj܀/[_όX| R/Ke5(T),sO }܎Ԕ$b R3AVOgD㟼ol<Gj괡 mD3aLI&|cG}9Xӡvx0 26#EԜ gg|9['3LG8YnuI˽%v n^IE.* ~AvXIjQzݿB ,1X)UnH4C#X&~d~ZkTnߞN{o P?gd l{uý:Ŕ~yLp[6@)vD5a\dԜ뛥 K*+kU H<2bΆ?E}oԫxRh=X;\z:;Зkgׄ.aA61WWt;a #2QL÷~&|` 㿧Sw}wo{$hˁW rAY*0,h-Q(x;Ky4]fZAk-n"rzOGhEBTui ;V_:\}!`7%OҠCNУbߠ?!Li(VXZ@`6)XF\':jZ\,t_K+?_,XO'v$&RfD%'ѿ 1 젬ۖ ;Rx;42NG4D@Yk ciFoe~6Dr[dGXU8y(O,saar i±@r?]SJ+qO=Ju14/^l]{$?8So߾U_1`j:HqBqxM*Ѝx 1.-*F&IzfQb4)sp=Kp)12ZPokVpOg1sndQ#Jҳ` bdw"d t>pq,agP3jȕ?i֖,o'yYn5AT7/JF]KZiݖVoK[MjmioKS/+YZ 7U5Wt=~f^~[}>kSwϺ ٻb 9I;ۯk]*4}Qp8 ȥ۳wG;dkog{[^LHj<[inL&^'q"iȽ{No=uhPW9k)qdT^rFM[(~PnsVHXRry`SH#?ǴqR *BP0UJI)^FFvRHCil,q&0k*YE51"} {_ 7L;;)A?"HV4WT*MQ0Ή ;W1ZûeѻA?Cu^\`X,9+@vv'/|V.oLÂ8>&uXr9vO؇w獻tGѓ4?ɲsdly2TGikq_XeP8IggѸ6vj#f%doz?L#dH:}>xI~{~0bwMz^; ooɷ_Lοx~_|ӧn޽;WU^rߪkX=7' &a>nsg8CsN<}䨣rVP08hc:/4‰0䣶aڏe3¸ZE";\"ck6QφS'T*R4*3*lR(ճU+ڢO1ZL0¿ 9'o7&b YLb  p^uxU16ErD@5RVAvch4dmi|icӬe(ڬ 4S>M~`B㯐"Ot`%!UA'L2E2\\Maa?-ga^3V!k#IXL?ד'X@c jZF:*̸QRunx@3+A11cїHԡ $Ό$ KyӎBlSq&z gaJS`k?~[OMqTۭɵTAO ~LrYȧǩ'^u-45/63~q5X/M>'x(~fFKط6R}_ȴߖy k6ê𕭪8ьQd]I5/%Z b. -Bec3 l>,C: ]P x5ڤdѽO/!;6Sã0|G"m :%"EwY Y) X cH1W3#&,*-B#m9 o,=(X% "])@Dp+(^{uP}:Q7("\.%ς^|xY>uRaC\0Xv˥B;Y̱4֙ O݅+j'8 `>aH"i}G#(Q9נ~lbb(|ѳ0'T4wv[i,De15T\cXi0p؛DPx-HI3cx̨$-S|ܜ܊n)NGWy~thW?0ku|-ɻヺ i`_X& Gnڪ`3kf3pd6/NMK'd,sS5$"#W *2L'*]'tbmb=A{?# $I.S ?L'sݖ_' <0ӥKf)A[ůB&ӁE ̐էO>'g:E<^Nז04-dY"v)e02M:6*weS^jƘ8 @M+Jg^LCS-YQŰ77z~Qh-a?~2_|GY?!Be_({qwf |~|% +@y_~i`D?$: %GˠzIzNA[3qQԤڨl rI흵sBuz _Ҏ[neqj >6Oh{p0u ?B߷UnK\:-qpy9a}4wގvf3$ sE0rw͍{(uج]JvL7fPg׻N|/`؂Vos 5sm8AÎ|\L|rM.@ d= Y/~(Wy+C7-1!H^ } x#S* 0wg.P-n볳ek= cK6M2:LW~K܈\PW'o79m2>b &;\HE 5 <.˪۬a6X=&f;6-_eAҧ4 0.BD~UQk[K+'=ʕ76\qj4!i-bbG~ANLAƁp6gz6}67JMi,1_g/sS/f wk0U.eMR7ndI[q4(2; 12ID yt[z\meM}qqx_ƫg䓜eRTNϾ ?$v,4䘢A?E(^b\r#CI 5@D|븦Ϫ "yfA I4G>>wn=<] ޵k veƵ=: m .iלƮ?\)tntKasMrH+lg@C7߫?0;O٣vL.!}p3>"N9&a9$*O6A7PVۂd?m󵤶ERKm?7ѩ?G??i ӧqxڌ})b?.*^gqH?qG- _05!![UҪ#&`Ssx2MA?us!~u{nb_zӨqԭ1* SxxNY}, UA@?wwh;~)gFFC4NXD4S`"e5Nݩ#l:rK7yX6¼z$w KBO$pxؔ#( !q8>  uDnc! FlM P 7?Y;g?,>V hhwrtPvR*l|Գz|wQ񌃤i'P! m/DéAJY$qC0|l,2HBæSMCnPCՕ-~{\b̲M[t"JGN掹۰ kqj+"6yeuz=P#_^wns %oNg! >?4zPЩB/%k*U`;6So}'y|cΛi˷!zlrD7;Hƶl 5λ5e" +#0''i|3%ґyĜ _uY j;YzP4ifij9.YDŽ.L~@[hɁi/ʑ6s&:<Ϩf/␔SEErNun `kdAJ{oa'ɱmi;.Sg $G8$No}2<:hpn'ܼ<7#zv 5/]#=| Ӆ,6/!"+ DYeXOv] Px2ø:71(wj%TU!8J@u}['XQ)s]:J2F|:4ЀUGd|WQ>^3ԇYoJY,=W1s:=wĄAwCvor@kPs @(gSGX2" zbnLשŒ}̼ 88qd`?eN! px8f rw.*4$CEP"`5H{i3ik:2m]O'P~'%ɥ kyM1N Jc^}r*wr*ʴgؕNV(D|bB-:GLrn߮ɖ5 SaIfVMG7b$n|/&OggOv:[m{Et|QSֵ1u|+H0ɛR-с6`G{姍7> 3M0RZ:͏IޝPA5Y8nXƗ2MTp Qw|Vhru[PQ& *g+iopb'[f/=xYn+cncY-pIWlTӴZkG(ukV^9XqyJkPYIEr=ʚdq8Uᛚ%4TJa#H٪~jBD>wv~z4RubWnqXwaUXMUB/WV^fcˮ*6BK Q>Bw+zWu"Uku}Bl: ԤÉ j1̌ץ4S6HnO:PVW* ;IDKb BgTl+TRT/sؑ"6XxϜjaW x0t ޟjQ 'T]W.Jܐ:i-'aT }Q7/Ag& ?*÷Be~eox獲_61R12*0D@GBDH@\Up~!=2+! JX2l_b85jpLn7״ G<1ݴ_]1'9=C6揰'}xkxeչbmW5gw^ˀl8$vv:m/y,M3X0欻|(rddd*-U@*: 9׻ >'!H6nWFt`lPbH[N ?aO2Iid|oewܯo[Z^kf~ZgҺ) ˙&0kSIwȇva莩 2C`40F1SQ8Fok'GWl]=s#Ͱ2!ׯr /Ƌa13B@ 簼Y8O{]Q{h/017xGj+ d'( Jwf&9[T~ #$\ruנRYjHsK(,a꭫V%! Ayߨ&=G_@ t<9eX|E50FCr9m ׃&~|-h_zSƗXm,Ubfm8`q~Y_kFL{[n:-8;Xe탑@`$yPknr)ӼF =JVQ؋j(5!EN@⭘^8~ceF ~\컑`{! ?Aa<?`IgTVVCPxϫy8V6kN |y"yv{sB2&0wCB/9 ͲOaUF&s]~ao4x4Mj*ҙߕK-T}Q7M.Gٿ_#Vk!hMZK[wY?`s_/1K9&_j5Vh⵩bz y6*zl{oٺKodKgG{OFm:*Γ=bx[D#:=/f، ą;i x M5 \_4JaygD4NI}d7=@ٲ〿?-27lS.rKe0׀Va\Q84j.&L!I aSF-~I/b<ݔQ4O3gϜ\DAӘ+u&P}CyTm:"Qhݾ$=4:6{6Uz+ @Kf|iČRr~ySbUT)ww) $D22Z/)O}<,^3/ oCx塛զpBPsYZpNP7qߪu`:PuoE9$ø9_;>bviVujT >mݟ__s|S*oԫZ-|U*PIqIdCpۺͦ8`Tv88`ӊ}0opu_8,U>ݾ/':}c >`Kf9G"G 4 Soѯ>"ݚ5KVxqڕͷ{L?q Ͻ-ɍf25#Nܤᨣp0cFy؍ʙ&3Q9a6Vg=#z(ƒvl@ D Q~ozl4rgԚ/aB*0?:uEMKG"ECSqͫV*ndZ?;{_hZi\<.j&odn7Cc2_~lSUjPG͍Nk>G[o~}q![}"m;CW4,-Il/$`ݠq,Z|MJ>TGA?U(w<c2`84jM"$,q;Vwq ϙ0H;a!m o =d*B~ #T/Ad70G$#N`afj5D+&3.Tf4, {^!vN# !5l ">}E(QX4f06YmhU>,  ̼mOi۞˰jQ;pk4#0-p?@B [5v闃#UF0#p_쳺Mw¿M^6V>:CH(OpDQM%k`-#hh@h0uqrZ{M)6_Z Wµ>ƈ`\U5U"M_?hfCpr\ W,yX&BތkmZJb5P}\-|Ѩw"hS̤3" M^pRA6Mgop?4.l> @Gu"kM>͢V~{/.1[,[}GPw^ ̑{9%KgiBDqDW^̫^seڮ~ h)3nɗNBvk>m#< N0Ҁeotpȗǚ@kE> ozG1MEPk(n{N8FTzQ4?/x3]d*.p}Z^.%T!"3Yw .+gA&[ّX2a(E|XQ ʄV1P7 |3s4R'g׆p Ѓ"' |`ѧGFrPt9{ڑ#eGt~6]\LqzϖN|9&c_$ЊDBdkU`p'ķFSԛQ>7TbhC Kxl<2 !4LQɤeBJR`X]R)&xY^bu, lӑщ6̿ŅE/!xPa!C~4'𾽽jR6F /o5xP,5g0 ni U%~[=u-UQqO9kUdݔ5[+JiA D5#6p/ӏHԥYE>:NVWF ;olf+BέZVl, 6*$4*&c(qbi-hb/~ |hY)纈\ |sщX''ZMc8#$"Ν:o 0zab O@di g;azqdp?Eay<@h{Ĭ-Nk@IY8.W,dV7y}/;{5> =Lrܥ/ dTg/J~m ڡiKF٤W^5ԍJþ#;#*Dqy\qSō {jY JUD*T!d܍*H79qsW{BWmBWa3y3'e5@FA'[cf ӿp> ?g!bNE&ؖ$ Ƹ[3H#FAd?5}X?uOO{ (ΡML3MGAmma3(Păe/An﬍hx6u$'au^C˗|a߶[?J1ɦEr=|(ܷ 1Q(x}_fA6@^|Iy·]g&g,=ш~ z=]Ů}I\hOt{Г}|(Hؑ]-#h+]3IAȭk}0‚X b6hLۡGX9ɡTqrCe Ht8"q|Ԅ٨9(H jzt-Z4u߫4n/K5doxEN]n_B B.<KG\ȉ35ŵQD_L0d|mV z~s )π5qV(5AEGXߚR0KÀӵ [K3/ Owx"GB eռmW' +WU] s|g9_$xOV,s61[Ǖ6lv}Ӑ*g4[s~JS0Y<  ;_GyNuLs'ówX*\(F _"+2;g!֞^Nx%!A`6 ;S07070100000061000081a4000000000000000000000001661547a70001be3c000000000000000000000000000000000000002200000000./usr/share/info/gnutls.info-3.gz=isƒ?,2EZ)U4II\K$xm " M߷"AYy{k%e- V^۰v9͊-O;zm/ܵ1ڵ -U+PMgGW} /lpWm7K fSԵk.|6a:s9gS{߫.ggv`pbKkRkؕzڷjYcj ]lpU 1m wL}|i||W@m-Xr ȵtBg>*r>Ž644ny% qpaČrbQlH”vo f;}66y-||ږ׵<h~j6cHD)Gf: fX$`xb2 lkh7M`4L4n\ {3=]m7c2l?y`5=v}v@ &Ev?e|d}iX(x*w}߶ .+2FsZ>Pbݻ0P$+L#6X4=E`DK0ѐ@sOiބRc19{cM k` VPNTt2fym 3i[Ȇ*T a;"6])ZZځO_^;}P;B,8KB#FU{>wʿ,"ᘪ(aM50KDwktGórqclknܶ~xaSVw]+m+{Ǟ}~:>p.Ch"mY&LO?=4~V *t>^/h$=ȫzu`_&L4g:eھ=`5חJ}pTŴdO"_~F?ؗb+ʸ9%t;!k gz<, QclׄFlu_g iĴ&3t~w6͓oʫ3vxpSp<˗/ΐ ALs j'g`VP7w7kLD+xI[ K<qVuU@=UA7&u6拜_V />&-Ba>t)u. $7BlɌ! 9wG~Lsv|!^ eiΪM-V'?%M1\-I #FDzxx}y Sğ7dТCNC1PA*?PLٗ, M([1%?CK1!(bL^Pd3sk7 QS`heISm_>d MQfTӴI6R؉Y"~,"hdKT 1%)b!o ˃T@=_mf~kB>)UE4 P+U[S,s :+خ#3p,Y\2M;|F<UO%_+@ ng _nM t2WB{ o{ ^ot{9e @Obn[!5ec򼍌b6Y撦EB:8kjCK^ZWmc'2<{?kdp+bA(E :h''E%L2;+nE3O'"$ظ'eh~#ևU精՘׿u./zө0v[a@N棲fԝ HƉ 7S h 00/Y`Fup6vfͩSHz!n`e2}$äC(6{~ہ3L~ pW1UCIo*p}oE{lN$m[("dɃ4"p9hJh-=jg'1,EEkbA sO]Ou4[eX`8e DƅOo6XkHf%QjKT+~ygVgZP?h|A|Pdn{Țd9hFwwwED[OLD2\#HoXF$UC19N2d6D n~wz gtKXLfX8 aV(D/+ ]+ifVnk9E\2bX@WM<I ;;/I^vz$ْ۪*U] A*U(O0`!quZ]56j 'ͥunW4"qj(l@)K$Q6#$LBAQС{59%^ς[b%pYVA*VbnV<N/gI]Z_-OF4sCrGas:!.wydvny dK]pӁ!Gɐd-cC-caXH,:g 9hj Gb4<>DͩG:*9av5m,a_{kT|-z2llEfӏhK,RK ]eܙt~opMO'ݿ'{Jp4w{?;sӶX XS[(wVIQOp)@{E-Jx\ι$3Aax*`&J䋯9m i|Qi9)Hء"خEʓPs5,fo ܵXR]!LRV1X?)"wX?ɧ"da*1$B&xev 6\M:M1COmKS&vJr6.!o٠ na)$)F*~%%H:o!бi,vIEE 6kŲ -yۓdDxe ^ErG uy,#`mouZ GRLhj [W{| UkI_QE<>6mUBͨ qH<:!Q E%@ܥVz`M#.ύrqXEDx{ [1"[SF![:lbp\U o:_ȓq^Gpq $Uۻ&NJH|C,jt-lSF%U" {S݃D/zD#):y)ujm3H̹dcBnҊʱ:-^Y.%H*Ċ A $k:bC iQJO?Y~,PT : ZJz2x,;` VIJYoP\&Us#.g&?{J3n͔ΛgCrITE#lW;Z6mYQԟ}z0w wd?7R𴴫dڗTوc-U!-+ X N1b?]`| KDA+V5pa6yiCZ-Jj6xS dE;0U|W 3L3BHYщglK:U .TɲwV&݉$kQ7` [ѫ%XKyZbq[U*paC0'tS}PXQ+~2疿7[9XNN~/dZ+! nELN!G٠ٛJUǀHV?4~@dTx#߂]魓8}5t ̅ X2B(8eDE1,Ue °(eu3 U+p,)Lr%CKZe].2O({6q :AL هz9MѤڔ*[.Tz8\S[`PmJ#B- }ceI AL5o1ߵX>v\r*ztg7zmyUYoܩ6LG3" Le[:P_|7A%%=tamaV(=ӳԧ@4Ż(ܲEH#da|'}U{~ZC4zzlCXBQ0Pl]q+8]l'DZ~kCD#9K)p/VwJeѝ}&*huwzxA:eo- 6"3>,Vw,5 C_o8lne'\X^e{.2/i B3#X͏ej.D7f$dJp4-""-D]EW،ɞqL9kt4~?x̨Όe1E2A# ^+E!6g!Eھ!,sNaH=DEoVRgP>/KvO)s!h6٩l\Cksnj!Q/C׻gsfK30P_`Ym%xĞ"^h\wW e#dޏ6cV~_f:&=6q/Z@ j[Ȓ{ژF%ǷWdO7RI^u#d3ր]S AH6"h,f{gYUmOOl9Gģd,7|@hNtL +GXxv:ެzf2")Sp-:wg'7Ӳ1=!0v ng#' H/o:8d Q]rzsl_깦/EGh)?d/"B:}›\TD%N]ۚ ), 0s0,F΅T؀h$%ccw?𼀅EO(B2E Su4h=E#t4ުH[ZU#R m4@1 >rgڍ,&o* 3-vX֘|C N$-mQ!6%?{g5@?Ef*,7u,F~kA /2VJ֩[R,GڻɶO;X?rTbw'9JɈŭBP1i0<Jc=͛Hc/^Sqszة;g://R'Ζ]VHׅY+/g۾J_3<@"9& 3yf %H"ueckە}Rj)\Lhq)}RoLsz IO$S{S4pbhRiԶ5"z'IEU9Pi\YJ0+ 9}&$9pDY5 UO}6|Enlch\(NapeA (Xq{Ro3rQ5@r_mվ\8PYXi&Q`=ə9aFڦ,N׫!E[X.M"Hx5;&F*1qhP5>Oy5ޘ'4)QM-'GFQȈ-K?&;~LQ9>?a$Wq^´oW1ܨY`{8G 'vv_x%:< E0RШzN}ߗƃ:K`UhG WbU݇Ȏ..3]seaSrs/ך_NTh#aH]oeU" Y-WL.`/:w%uUu $FݿYE@Hܢ&FqB}ցҭ(V)@ ,l9ݢ)KW)#%V4V.|ex=KMT.ozߧT}EM_qGWD(X\`~ԟD5:Ԥ/d $5^N/WeR@jJJ'/ EQSc,K6;s IqWET2^<(օR``+*U7g{Œ%n@b)d Jh"$o`0\=ᏴB~c$uM4„TMZ&n#OiTMKrvBFj2y7W+e̒rqW rىvwDA)XTi*:?3o^$);l7sN ۙ\fYN'CMēTƆc[ nD]\jEj{.T\%l(ɪ{8^z3t{{PZų͔"ñj̢ͨ]0H(ܡHrMJ&Ԝym68=.Jv6.zMq⇋^>ev`XS|0H9-'͐X>!.oLμQԎV h ZN@~ӉHKm(ZG"퟇~c\Ǥ1E˦CHqa Sq1A]Q# ?/!hs`] D۽;PO"X` LQ\eo=^6 P%ءq` sRU5~=V #C0s4l}un;j8 7~x޴NS[|9?My~3z&Y6sV\"HNd79Mh5G^K__@DeCq(Uy42V? o^C9~(ӕ(/zG+U9A]ީ0w*aG|\5H\ReBziE[3Ai s4D! &Y ?6@C_IDHLo& :H %nZ"s[Ig,6i} ,R(JsQzxas=S aB>Cg뺹4Ս?qNi&|=2x5J̦f1*Duu&n=AhM4JTi3H)v6HT[S0I-7nu0ĻGtޑd" }@03Ap*.RHv]j|>%/EuSTF_#[-B/T˛ES#0}bhƏͦp۔Pk.j1)-ga^?o,pYsv 9HbB]]MHdDO_o궙:j{iT+@~xk`9HYXzX\r5:u7cejp٫|pND\/ڡf' ~#FITjoT֩-%MuߌP.fSJ+%Xڨ.).(SLL89 $ˋX'9 /Ǘ˳ B3urS#xxm[^zRq-( BZpF \TKY |n ~t-wymj gK*r LAP,X]*sXoSi':é拸'uGMeF1 QXPVMUK\EK¤f"&^ sxdZ܁ȵR?Ta {G\jU4^HPl@ kAT;GS=9K~;I4hRsџ.B% uQ yu.} IvH8櫨;ty6J- gkL3Mll31vzXAZI Jx :z:IeI؃pam7Q 4,Jb@C,[?ډ0$2jJA.:NJH2N7 ~D oޚYy敮F1F6h~.!;p}A7y\.Zq_ul}uak^xl[@K*evY^ɮq=u;894 Iٯx3&5  P2~;Uh/A.Iǚn15ITعT=f5yY!Z쫨9Z+ݪ]?@˳_G;Db0Rxڢhy>|1:m;}-/>z9n]5:|7Ժ? һ>y˯VTWuqz_a^qN8'q:M)V(ݧmPsZX _D73Qmj 'jJg@A(z.1Ycwh9=)ЭhCFô0|\yډ ::AAW29IJL% ΁ЌW3NƾƐzR~Y$=dt0zz?DݓᎺG ѻ, vfˇQe N!\.s{;kFE6V)mUREX׏ʅTV|4R2<]qJ#0VˠGτˠvKh37>x)zX`vLi~0n/ 7)7pCQ6~۽8l\YT]Xn{,qL<EیҧY"T~?3ŸĄK&3>uwXw1bR|Vi\Yobtս8c5mĕT㞮{Ka};\I#_Eoإ띂zbAPQaoaתk 6 eA|8#s >0焤 >T[= ?EM+0!/T]MėBmGDy 2E#,3r3tiS3+;:c~iPC!u,#UcE|U0#%'PT1Ne,C E1YT{?{wb*ء*TV_nR8NP 1uɨKGTg9 *H$ߵОc Hn|fVЃ٧N@[ȅ/أG{E$oj%QOp1iP>Ư[b)c5Gu: r~u+$d/c9 TC̊XT ˅l*Ab+:LU=0(KLJBWЎUC(M[6Z/XO~] Ǜd9㤣ԹL}є:Zo-{x%MVdʖ؜~9˼]}5argNceydQ)v%L" i.44b;Dcs @`:<k{L:,\OT鏢[47:ֈy-X/U |tX4Go0,QXN SuN12|'Xs,N =3˵o¬O2*h#7-Jq  pHy^?5]qMAM!eKnhoTѦ=mrJm&UOSs m^>WdkMvb4F| AB۝z`ŷ^d*28DJOBG3;Nh/%PeZY^4,D k2?`0 J ftfF FL^8,O Y" EpˁUi;♇=_ ~K :.4hlCNL+_ jwyU_{X< ? c| D:hEsV^H}AZR\@]Vt/v& UM]@R]5r 3/  T(GrܐctSXHe ^RGw| D8LUe^Γ!PJnj e=A0v_,w"Bf 8[FF6%3WCʜ/It /K'9<#<)##i qR մlpmUW]S=T4U:2SYcEUy`^VV@)6䐪Y"ǯZ8V(RSXG-իD1@Cy~"rhn9(_]>Ղrq5 ]h[]u|*YJUF፦ j(J=@Gr DoTg>A%Gs]|~)zNS2 SpFO(p0|UQ~*R'3|U6ye&S8'ryG;f1`dtgJ u䕽vRvx#~囉3Z:5 .T! aVKVՌBznIM%E&(i7)}W`/ ?z ^7弎7yjޫN.W.MKWl5-ف]+ofU /$E\ZpIn²98Bl švweD|.蘿AT<,&w:C~BCK@e<>@wOQ ^&HU l=ZzJeP e >s#4{|DDr='X}ˁQW@eEUP_ʢvP/fQI2 O7tUgY0w6ޟtfU+M;7RUm@Q‡,IPGX=q;zNɸV9bH5zA>$IDRsp 5l[YEj=^έO{)]C˪9OpxfOVndꉑ bg񫔐ͳ{-.Q UcK]mp"^yZ. _/,ɔt.VwT`h輦 Q U7эjxq2RWpMD3OB`YD z&=s" bϪsçz`uY$J\/Uq$=‰h;!TyL2y88A{>гxq{0 6V؃=7? {Gk:5Yc m\@̦3f#)(RސL8R Q-sj9*!Fcǒo&۰RN{iQܩ4uVnE0P:Xx $RᵏUaI˷]Hth%B.(jT n0\i#xi9פG*m,aC@% T/DN%n)SNa;hm}ȘT mxRMs'Q|TFLWѵǦ#r%v8:CJI&-+)aѭ:.fՍBp17J( ~ c; <}bPCRr_\eF-OOuq%&5X\&dB/>MӯNW:]s/X5~Ta[sKŽ9Ձ̛e/߷ -d^({]mCs6.D/*iQwI2V}R7|M=?!$OƶWw#~/K\!iLq[ nBH\1i(W΃YJά4[um x F&勷.:PKQ M\vM\lZCAzT̾1/t'ERi\+5K$>GJ1#16H9HG9R3RU81*`]"X"P,E#OިRVW#r&_9Pklr(SQ^b7 z+4Jrh`5!'N+5*:.1/:1in'1{B;Jh'4X*4 Ƣ$)#lnj3DtC)dz,פX}Zy)J7x|K!I俗~ tkmr]F\Wֈ+m!,Y ZYp{wҐff5D!@RC.]於Y _Ǟ.)H@k0نrvOcB(Q.0prYpSm-0RE>oe?iow퇨hP%b 6|Iȅ`U[΃5 tx];݆װq}6p)Z ɱTcQY8r*b<)k͂EX'݋3Sfb4vˇF1@1Js}SP.%J!YvL ?=4h9K.|ІtM]Ԍi,sBf^(ؼ} a@x!#S r! ӵ [&L07<5,*S"j)⥧8",jh/p-!DoR2)@PuR&i1VkT6=&M?M5=ӻ(74\9q_54?tX6cP~s[C]$l;߬M? /d~ d} P]D-If+736<'FwIOYORtޤy ?86 ʓa~t7 S i]ƾ#2"%ZPT\ 'oxMG+WZfq.4Y,%eXsA8@N@*_caו1D7JtDO^J|SUZ$rd_'; [U&Ǵ bzk-I[./R}>~`qYy깾gPL\8 xX%#0*nS6{LDO'|Q@Y L;AG[Rqo $s$Scᗘp|嫟B|܇%σG6u(^Һs'aବ;]34N_8*%*jn۳O.,zfg v&(HF] v'f@2b0 hԔVQ[h<Ҷ[n hޅe'Ru_?r0v}&,1-fךl9㨞ԋ=~ZGrl?_ӏ'qony4} <ϳ (?8'W!8 A:w UTҪaػG wkq0MSŏ') /7|J(/LU>U9~%O_œ+UZ=/m S}^0z^)%lŒȗ!TIMΓaR;ݟKv4U*A">U 10TF(Rc߹]v1MiD{ 6w4.w^ӓ "nL%H >35elQ;øy+p9vGi?w`ժ.)w htWފk5u-YjߊYx&|sx.) ď`\pڏ㟛QҪ6\~~=_xg5fmH*g ^dWrS`YL#8RiU*|*ji.F?q MC%P>IAeȱZ:wfTBiwOXG~{iG71,e2^z452/ &hxj$)&!K<&E4iw>`Kik)Kh;rL;&w'Д >jT<#筽6ͼ]?9`/EJSD6]B0h>!rxa].(4)Fᘺun_bjz>mVPYփԋ6F,f)ˮKIӛN,nv}׺q@CdeF}x$%{DݮU5fٞM=v6..?o#j<ᯓհ'{^6d<ّ벼6<0-]#;CAi,kH M\~ػz3G&Tvg㽌Isq^ ݬ`*M񂜞y=1 N&ए;g-uKum[=y}@6З ,*M{6/k}+I8=~46*븍TrbPbGm,e|5ƲV0zAX"y"{a@E7<ܓ,5[Jh8˺'b__:,27ЇʁECE0MXu)qD[>;DpaT{{vuk]լPU-mrB$'"{?~t+p"KѤx|:޼2R*Gēm[gVZzkn5b4ӎ{fIp)GEjI#WOZmrntQxyn8]CJH\jf08,YYFtL]=T=:Z◼KgNVM> BE7׆q,.(tL<+b-dsў슣HkpjROf^7;?UǝPFO{: ~ow^즨-L{Oh`n|E.[bق%"Y@hf^&2-jU`p=}ƶg8z1vp[a}^RNZ9`,lRXA>ES%@?6QFmu-ɲ@m=ĊhUvflZ1%CS15GKóHq>1.<9d=3[mB=|Z~;/[=ywM4^|:B6V*`?]s㏅ex~>CRϓakJr]pJ_t md;._K|(Κ`.Wʥủ7hvd@eu9 ~L>FLԳ'hɁ_;,0Gfa6:Gχmf85o_7]5ΥcKSN*,dv~pզH;Mc]󥔺v wqɋ}92U}{óSDzk"?M5%ZA*&CAfiFT-)D'oC$NٱL5/w[ 5\kn},~&dʹZs}2Vi;gOh|̮=_ X,ܻhοf:DѢ1F Ԏ![Q)@$\Δ y._=WW {,׭~~0GN%} g༄ !SY*S U^!Sb~m/㒫LTt+/'1a[Veע~G6(SQ0)0횿Yp g4'l{ӈT8=_Ő]{qwH9FaMjӶR^W._7L||o_1pһ9;=95riRQ=ʧTbتQ"B.y"#L -TQ1^W= TfN- Û[4sֆׯa{4zS4k5xV~8?s]jĈյUj\THm&c7 E hx:AVmH[`qhT=blkc4(;'0!<3dYBVOʯR,'5K*kk]v(9Ŝ-UsPfMS^qDw0fmUa^1#("*nxmbA.#)^IR :I)zз2S%eR;瞨JWCN**^%9Uk!]3k-F|kpoz34" %jr>gwliڨ /i͚^5wnj TD"+Wt=T(-[ZoM:nZlYfn&penYAV菰!HMb,&ܔghy%Z'F]l%((-:LFˆ5Ek^ȑ΀X{LʚB r<΋<+ ;5C2xʟ'oaMDm }Ie:#`Ԁv78& bL,åU f3 E& ];XC#=Z%1D=KIƾ1 01]?Sjnޙ{kԳTLaS)ɼi"^P3=ԼMoǜ[aE+M^؛mA^,BZ3-rEpkRRx<hspҩIܓW"  PI3+|<<tp룃5 Q㟘q]k(?RNagnWihI)cb 9 nVb!%W%4%CGjf#rp0MAy)hPz/mpݨ\;f5gH]גT\Z瀷؊<]tƮfCM*YYy#K#%=BّdL1l(:ƫG))%q4 %d,NOw8hgk*ʅ<23;#+u]V1mxJ]DX1U^Yd+~j߳/߁VIxLC["*^݃QIw ~0djRE,@_#'R݇O5&֖wyy|+s:YI`ٽ;iN@_t0W[#Vmʀa{t$=)s5 >=r#1ǽH^MwVdt[&2xhQKT7'p-B9tVޙF鍶\eC%rB9|)1UJ}.LiU)^UD(S$Gd郞.\KYG QxeB_O݉ߔ#& UפuȯCT) Q"T@!+IxҤ2> 1>~, ʗ 0#*@ӣh\ s{0fZw9s2IpSuIHPaah X)Hа07ŸgYUusVӓV Uل2&6Inٍo7Fjo8웙[üS'Kߨ,GdK]c)Xs9Ϗ jֿ=C7~r{`ߒ~'r2(Pc1ҙ+G=Z~d U3+Tm[*JBC2ɀa J'*!FB_$%o}څO~֞ ~N"Ed66 Tj!. Dimi!0Kfk~[\D#]@#n~ k#Z6:Xp2~{WQ3zLS1*[{`Bi(u1\^|6Ue'AC!u:R L|!9zlȉ vWPñ!y\` /_*Fk5'$0DBuO "Ӏ3DPBWr܄VEb /jm5],$Fva!U᠐zeZMsw2%PAB}{Bt yEU(64Od먳_ BPR*D 4uBmŀ`H ,kMGQOÉ,4dORdQ26'%{M@&6 ӀxY<@Bxe&,Ŏ@jGPRtmu{ȍ $Lt_+mLjH Nt;`钨5.@)]R[$N"ӥ~>Qoz e|Y`z.Ϗ*'AIyݳtWYBuggnWQx#9Q)L+zO7a>98} |+{=zbBBE_v)JDLT3hbs$ i)+t>%M4Bc#+|R-.aNbF 18 2r*iErToE *Ů4:/Qd N"B8P=ʈJJq021ۖS]Qnc)B;n[=r TB+N јT09p_*7}fo!k _Rn+]'vgBP`{dkPZ`R7`)GZAfZ-ս3f}sX)ap'h"wUS0|q B2!,ZppKW$XDLlԭ HD|]_fߔ/ZIpm,c{T~DGĞ y+C4'-ZW2t;lFE\Zbdp̥VHRPVss"E} 9w8@ f͉1gN*gQXyrذL1d8J5[s &vl;sO&ސKfMEm0q[SEkHi#>yg7?6X?'s8Pukm[d*e@"{m0aDGU)l[OT!?u/K,_ݛl!PֿR@.,Eਔ,2Q3.Ow?w^gDΉ<$Z9-&edn1Ha_5r?n++ڸɃ]Kr'#^0KzSB=tnGP6#"rdi9OTw&H~PA]Kl  J :PMoMhU%!}AiߌLfH*aL wIyX!+JQ'~Œ0֎eјOCUҧXR! L>M*)U#dTOaԞ׽![@JsN,j]+Ww#gT]ПA@؉p V:3:&ɌM1KI.\&S:Z9x pN9թoG}%Ӎ9%#~Av$<.c/9l]&UCR&NBo5),2t.3Lr h p@;3U@=cd +M#8%[ڠpag.JHHme&/G}%Xe8TY3|f{\ӃYZ covo&?#?tGh<$izT4z"NxK&ďX&|gy@HE(g ?.;鷛TeJ8`` q?wGLfboo${v>]^ ƃˋYzDZw|nK.@6jDQX?&{ J7oP/-]pt+PnncRb)Vo. 5q'*/NHNS5X>ROb>0eT/_E+Fk(E$!wyCyCVRS,IctwOF/q^, sn)q4yq= -G5)̲̙bK%ԸSUbW*խNfD(Vt(O@Q6HKTmN3 `J ]R?s\ct=kwzGTj?vo˂D^Lg??r1Jt@YX٠1F>wv_C}ݙaG*?jOR ``&nlSe0Xd?YR@w)~o8H,o`;0@9 PI]b! GhB0q0HhB?Ig8(/6D2FS".~ ѕMt%EhI1+1Q+K8@y _.+ogߢi9Eښ_YZl;M Fh@yy}w1u"ڰAX (g횳fj7˝Z_n\T-b䳘Tdtڹ"?n%`w/x ʇ7>s̏ }1 Gؽf8lv,7w` W񮖃0}r$5aӖwMU &Z&KioQ?o>q."o0'ej1Q >Lx-V-u mY3#evVX/9Jڝ @#Ǔ}Ԉ)bznྫྷ-ԯ6{O&W;{ֿx3~9۰?P̴^ ogo=Æ۞W$tmbxRقקw海/ВA9헫Rܠ%kˮ ]|m3Rsf7oHmEf>qȃF֢$"b  6Y[(~lDP@]mUb{]VP0W`'v~OY.ɉ]@GӒ{Dx*vK-<#d᡽XT;M[+tO qqMDa(Nޚh5+yH,S. HD!UݰlB!˵JmkЃ5tb+YfvPsŅ'ebΊydYT2e%Э0mq`u&*7h%6/Uaي2-\D*db4=)X1l -,^Ďr9a%Q[A}i{BHK査6]W5הLo3 `'bo8:쾱KJPt" Lwۡ@ey J8n3+g*G%UsBmCں^ų [ҡLR?AÜs(r^NrqhZv3Aһy]EDb-<|giH#-rA-dq8ŽQ1Lպ7C[(R&_*۩p&}c3˦>M$t邹_ݫ$\2)L|$)khYpAd3Qunf1;!f&w ŵL\ol[tF3ND*4l/ Muʊū0_e.+^K GS^Nj?ū;U3bVʔHS;%WXi+srܚ ڧ>xOL 7]-)ѿxvd^m:_ˡ 9.UOp?7{ϾYC N"+ C`z]f [:1e"l>B+kO"p1Iǻ_5}WQ_]羀Zl dV#eQ-)NڨPLmhwUALl[5(ϖ)J43܄ⴛY3G3J+ij-6"v3#k QbCIIJVkS{WpТ@tCqD?pR}_7brBu=JKP;!ݵSD<w \49q%`J1{CvDe9jܤPNλwWZ41s\@OgrA J,Qڳ2q2~ fz(GhNH}xH+|THV=Vay'M+ܼV),¨9y9I'<ЋX 6E^g3~rzW[ qwY?N>Q+*;pм]bJ^IbBi$pH<k/縅9^=HE։z6-FǪ Єh2 \s |>^ `liQ^dzk( [. \Ws>ڦcRUzmӝGLmů+$7}lٴdSpԗ#!e.s("D@CNRV#O} | }CKA2^t %mO [x :I:h󲓝ήٻ9fI4#&4iL&S/<jH:Z1ʎ\XR0bR{E]VF`TAŸ/J< ¢PZzu.'z5 mjw373޾]䡮;#4X/ k /ߒpݴfBkĴ\ bIdd%O5U!`[KbFLr2)A׿Ꞝ]ً>){r'+ @q2-Qr/NpM5`#4PW5pTy'2;N5xt$b[IݒFa rv ieRR(RHUg膼UQ>|yoe _sc  zt:ZysMhOSj {7Őheµ lHi@VE,5wO 3>fEC끙EaB -iv*Dl׭4 JDE;$;\3mCDbQQsWN*H JȦMJ?b#czbn,O1bGr77ذ"$3sϓ0zn.1HJuSƬ/aY6Rkb0tb%{Y~.f=ۭγvū=|<0ށP9_q(>< qBIQY2rA%ܪlPdj/x^8oKJؽ5#sZPD+5 {m!=~\D`WźfJN}nT 2U3^mu3]܈k㵝IH.n427pwvYREE%17EtF~YHCX7YaY@}B"~ދFr!Zq! U_RuOUnP$"S=/( P|^à2l8P )B]ut YRɡ(f@3R%8,YBQrNqȆ>)Br q̈OD qd)WU1ێD6`5΍! (I)gn%@z ٸ~iH+,qǵ1,ֈLH 0ԝ2^7Uv}t9ՌR١x'ԁBfX~hSS/E %49 NooH+NÙPtHFu*Fr;ԃ^[0xp&8:HQXc)򪗰 %0Hoz<6q[ {]v/N.o>ç$GeD\xZ4S(Q7mFQG: rv&|6>*l'0ւ2&ZVẃ)O2v!>"(MDOuSqA̔QR(,zt@Vfv]dQfvJFRU.gmv o9ݦIV<5oXXGL^OdSЂj0*9L)f6FW1mgr{K+E-e*=㶲&s)a(L_& "hs_y `~@Fy-.Nb0H\I8s''9dKz#<!WYI_.o4ڛMͺD( f%W*RL + ^@9Me~DI B%L ȌG\ pSbLۚ1/X%M󰘐[BfغY0=Bp3[EHص\:xݱBMLՠ*{bw<ލ8O'3Zױ=)+ݷds.丌&o(+ޑ{[ui+ҙˬfЅGx&Esz)q0 %X%^>6jP3p"\ 0QV趼▯4yQQ K]c2`9 )+2NP="v6g/r[X'G3[#,\aH5ʥ@IО>D *{9NaBiRJ)ʀ zZ)MY CalD ys$$",A7eOp0!sEF/SB#%X0R-<:`= %:EP-ڨg;P8_\uDPbɱ`"$7EUGڕ\p3'g# #d.@ێʼnlI5>Њ9t1Ap\1)EVF뷀4%҄\H {[K3j[j`f|GjI[$̨dZ݊h!97LaQbN%fC(>fckEj/#bX_Aכ:Xn龍gEUh ag.1003!vKK]sufqcۭ *5 1^(#ӻŊ^%Er7qf;8H^#jzQ%LRu69^Ii8])?:6%荭i?>].;@WCTctghpGy kw>ʏint(C2=v!ӭPO?"" (@~F9dm$3ARY䐲*[[5 b -:tr@JfjEmCuXg:{-lQܚS'YeV54,ߎq) ӭuHʀTh˶^L%` k3-VY[gW cbSlJӻUp,%:}ҫ"H#1_V|od9gs֪5N.g\-NYx;Ӱhp!`G3}#CN6R5PLv T([L+PM14@059 LGQo*sUb&O:m"Lf&V<pZβ4P`5^USwZHp?.:P>{_nS :UƟ5{,B2=~JX&'p,TV|MF?!Fr r(3c*Bqc.q֕ p7:Z$UD !o%;sʇĢKSL?M4i>l4w ' f%Rns$5,:)VTIlخ*Ҋ3,jfkOfI%gqNڷ'Ijkn LrJ ._ ,K#?rL~RDwcASneD\ ,* #48iߢ헨:۷h%ڎVY]+0lj^YznD"Q|ِNSL,{W{B> =g)VC;#1qM;"FW8\_Cdrc]<mA ւTHS_pmk+m,zFjHy\E[Bn:^g;vBQjlu:R s/|pl&A#YRx dgE8*0|YVLgd<5;>,HdJ",8>3i3jYc8$k@i,TC@ yXg}RhZ[F[j9o!mjBx&J ƊfS̗A7~pJk30 Gn >dRTT< +#dIRISs }SȍFqj\(/%)cOTzFg6l3kb$\u >p6kZ?Nd]]^^(@]Lpŋ$2{f- (? ./&A]@Q]N@-^`ŧ8ⵍGOn*[ȟpr}L(ݺ*vC|jHIA#:fJY|#TZ}f#^ylmsȴ U_DmѹDR›-.rv*m;pQlI^Th؇7R!oDSI!mFE~U|[IS-vExu {A<L&)֠ॆކ]{9K<BPEe=5@~IXޅs0XTA-fHnIK,⒥(I,8DUbLEKoVAUY&V+')_\8]rcQEB|cJž UYTcGgjjSpiR . $bv3ʴr[~.nnNsޜ;3<_*zSW2\1Ws5ػu!C ,G;g3٤P3 gg2|5v xHDV&GjoRtHri m<^!Z;K*-e4NH!wllVk1?c L]8_6U-:e<k7kJ}/?tzّeij)뽶~-9NI֒U,_#)L ,>{{њ,J"}ū?%gH6v;_\cnR:b(]F_+ Ukmr's{xmq/]7ԡS8L[qx`nʬeT *NĿ\on{VO@۶TE( N)KW'WųU TZY]vj!:qvkV7\Vu;y ХT\?Mɦ-[Im#(Ԑ`'.e{c=Ĺ<IQ{eRRK<:FeuBH2tAqUY &cRQ=ȉLѓM1uR5f#&Ca&; rv0hb x.U5_B#@U17W+Oh&KjdQweL-`7C}v i7tvl̒EPU\^gYcQ/0XŊLhC"A^w ?%9$=TăKPk{Ȭu|IddM16O!K~SЁ#b.|M8e ]@BZ?qqԚ4RP0{݄,wh\<,J@A"t\6 Murg+CTvpDRՕ(>\j@'Jhx D:&"2bBpOEJ/ DYX4Bf^nf;kЇ֦*O*<9ǔ^ML>ZO)f Zkh.hj{xOݏ2-BL_)Skې[SX~ZbCڐz} Y,(89 ߬tIz Lv4!j*11w) Ga7e6 ErJۅ=^TZkB}5eNSG'$c*nRvE\kܱ6TT3u'&􋡰!Z'= ~@ ͕̃~̽g-=icתm( bq7RNS?ՏܷMԞڏJ4wT!.5rkK C.'UPĆSaLmj`97BRQށڬI>fr822԰.F 69t+ؒ*-sm1gZ ` mp˓O6ԜO0۪U]ZOz1lIh5^"O&R6;f䗐p /wK\F '^42j(, x@Mvt>Fʉ[,J偪*AyY?+xF{^ ..`P<ݳ7yO>?( ==VHaٱ3^6p26si剹 %y =aEΘgK|NO^n8HĈzC4L7Al]2O&Z'3ꪡd{h%F~FTK*w=UQ҇N{+UWCHtfS7MAw9CZ@\V ;dugp ԾXF9PX?J\D?̎ B5S!q?· "Ft:wGk8ܙ[Lfn% פssťs5N/_ZDnF̝HQGy-`_ 7X2$wqq8Ε@K_m~|jJej8!LW&0a:wLkggƛϟ8Q."dpv;a@S3_hV8z7JoJZ~,$ڜ|ڦCE-ړ t]uU~¸'X8/S90®kj:J2$>ݎtf\t]LS͙m`tގ]NW=1}4_{JhNO t "hF]V./u5\cE!VJhyQ;y9__e;6ղRB\ǂXw0}Q =Y*xC]OAZ*,c<\tGIz&+b-IXgyMC ``NI20O`X{UkSBX'z_0,/fY~.M?Q`xquju$孶R݋A7Oƀ;,np`.?㯃[hX 6~*4``/f{QGuS^~O. w DfNk {CƗs/Uc.~IMSdưA?ͯ"]^/\Mޓf* /~/̑fkžލ/\O,/,_0hK4-3jS"Wc3ԙ݀yt1@a̲ijc.Q藔+ub^/ Wp/ @&?_OqrЎ;eH椬eSJ^ Qa˚1cF3LrUV uu:\[*÷cs}g5Gu9#DߨI%!#긲zv&){JPZ a1z‚CXyn"CyTv=:`\cJkZX֫Ōl9K]ŭQO9Q񰋗hS# V EzuPLz >̞l7UwDz6˻z~JaM6hT5ƼHUARC :ƺþKYr ~umr)J7Ar 9FqllH$}Vѡyd0E['@Ե]jb Cly·Cc w]ڻp%Y624C[_Nuǽ`ixyḘNLv]m|v9 FNAUG4zAFz5ZАYbJW 78R 8TՍT>ԓ DF:[*lQ|~NЛ APD_$Uv0\gURm:Qݷ?ðaz}{\lcd Q6y= R긽1pα!n^׋|8auynзM78: S[EeNKA-,l!'zONF]O Mwyf4xX.Q4sx",-EbQ_..WS VWoV,U ߟcA >[ u`l][K=t^ >(<:bobVww/p|onivcHS.$hpA84=+~Y$f.V7*YI<k Ԉvvc7Dz+ϰh;dOYJXalJcz5{:h}i | k[O% $qIƑh(&Ո`Vu LvK?{@jG_Ze;k"%|;H8:үFIM+wqG~MLhz{yū̓h@ǀDь8]_*,!w_l7&d5A()=diDPrkQel8l:f5—F<} پr}=TAT4|\ ^aEsv;wڣmᙧN] ܑ6,n%UWWcƽvWkFF؃*s'%A U85!VCsp u#6*ȔrS~n$l Q;E;m΢6MJ WӌÞiSdv '&yVycVq6X $c0dYe'UD@-V%~کڮ{+?fBYjWO():ز> Hk)d'SS?RDi%p@K&(߯{v{u| vM:P8`Mϻ_CzY*nRB1EyAs1FH/-cw5zu%ejץŷԂ0s3’Z-؛($QrZ '1 qpVjX}SHÇ9Qt2ʦv~ktKB͚~S+Oef0zH0QfK}VX Iź|mBz5"hsYu;O_ڧKCG&yR'<[Ȋ]uz 6NkoU~|&P"o'O5G WN RqZtl+S߃-|H<)}@& ;),wS U5 =+Q\v˻ˆ$?wMZs%\㺉פP0$A5śᘓ |xy4wGbY?9m6pbz:8ϧ8x"G W}s'h#MXA A*v V5΅@M?<}T0 w^UBxYCA8@u*} ߮S p N/i?p;Bv(N@'>^& tN9-]A>AמH\nYhD !l@8ld3*gj'{8E)B(@xU>2J l?A~Q & .t%Wa@86rms ph+|< 6:%)՝RetJAxYaR4p')EC( E`3zQ,24Ba)QRetJ t;[PDg3Y/CDYEP7+nVԽ8(Pf*Pf :a:ھ-7eճ(/ WQf.PfoÖY߬jP|^CH[YCݺEwr*sȕTC),r}M 3@(s BB9S@(s au!:/Kv\Ssh̡֪{dyt,EAxQw F`e ,P «0BAC(9OE)Tg)=TJ!-e)/"g(9y}H E}jB( BNsot b-+"Ω9V0KQgѭJ2KQ^A(,Ǩ «j7+GPW,J TCFPUP'Fq"΋*q a+?x^}wE>T^A"?,w|ۻ-YFQ^̡lWY \m1+?l.׹jX_ !T<22ksPڜCi3Pnm~/p9gt8Y#zNza^n|"!CNdڇvս W6|d Bh{uX eQ!WhyuP|mŽX^?/~/mSe*XOB(]j/CR^mLJB[1jUM~ϵָ/O !Tv9ދNNVBUoI*ެís؆GPflv.Pf=azQm%bJETK  m[,1j akm«*P}VهR%'L[dM*@Ρ@C !o& l%^M u!RUBUէ;Y[}o~U, }ͽb>)PE~xujgQrX J@r) ècͷpV ‹|/@c}U4{/<_F1n!4!B(QC/-N͡WaXǚC9TOKPBxi;s!%vCow^_Lz|0v ӑz I)Ѡ4׻yWR;z 5䏶8?NW?~S ӂ`wcL}g=i>!7|?3gS=og#IA? m24_j0JJ?+uW8,qZηnws|w"m<}>7Vl <Y?Oh?er1oϻoa aۻzK~.~9_#4 {!"%LddBCpMi:rfXig `?_ܥmw~6g~Ҹu4up}:@o3c-mHKv 睰?<=lg^=?u k1 HMAˬׂ0towSN3jx~~ostfb/m SߘE[pVLozoVfv \cV/4?3杞웿_t߇ CKҥ ZγKj7X` Jٶ)۾ +N?c9/ l} /N 8;mkl&BQEojؽ=*3^YF4 `&6{%RnNo1}&6Taj:O?I>5<s8mΤ4{jK-T^t-2ǎ&%saɧcj&jnfӕ}xJs:`bR,.H>_lÕ2~r'E?i@B+YSwx gX\ie{y%TEg".w6{R N=h1$~t߅9|*Ѿ?XiM{')o4,XW!|?gӻ 5AárliTNTχŰ<Ĥ#LlǮ@Zk\I&c‡caj`%;[vu~I/zY@Am@JQ *;;Om.^SovbKkŤig2 l) ӣDpKj$TRER&Ĩ]R,`ppے5UU5gTv\ZSšP. &6IvtUc!_ݠZqq5P$APb HWs훻ju7axC3Aȶŧpjƺo`tOb:iZzc gʌ(ŋ˹UsyJyօSwn=kY vmfAAO? 'dt5D WJd]tyO8/V0̶SMvs 5gPÅx:B0 }I7X Xruˎc)6wNwLOV$66i<{yM *X$zSQK K"""InkM4K`ŬFVk)f~9jفO_Ȃ-/iƧA=SD(c~k+u읗X9Rz9`!̈$/d`M:xNTJhZ'xw=]3)/S"4Tb$ukd.5Oq (/鈗l&(UG4n2 tV=»hXݯUBkH?I*ƛGp5 L<R;jB57X9jb4ݙn2[ uߌG8H12t£-ݱpEAx,R̛ypw5&atK~|Ņ$[{z`3II\Hf@2xhIE4`;řNAl4BlM䭽8 hUUA ԧ"y'ojᨆre]1{WwDgPOV@n^+KvW}>;"~XjNOE$28E(nBA'^[Jȧ K)4{!?BkƭˢZRm܇_[,r/=/5'0Zb~ϲLU!Ʋbd.dbZhcɦ݋`2_uQ曌¡a8|UpEH`_ax:,#c|0EQ o9l|(wc8 ZJ~i]uػeH6?ݽ1@!JAb=/$}6s-,S) `S9i.ݴ%ذhh 8\Nku|YNbXZA>4[qVo"9 *$~8Xf7UuOd]wZk:UpDJ[/'/:ۈ hzAq1$J.R)*DbD-PPyuyfr9Z LR*~@(HMܹ2;bq .uӤ:Wh~f De=m:6'ȫSޱIY'fG)= jVU*WMkupȶ;lhV{K>`oB0e&b-M&M4or1Sz9=<̾(B@NNf!})W|#ʾ)k8ȌӆyxI2/+Kqɸ" )t OVC1؋ah/O'( M66fTf"eJ)W8^?8VPvN),'<Knb ,/KK:1B!: F̵X/xhOdR6P#".1~BtLxOcJۘ>CmY4w({qb iCJ ^L.z4W$|yj `aggK+֭ N~9u",3 ob~,qCi@Gc пB{.e-a8y5HOo'@*1 5ɴ7yB(v(L 8?'2 @<sڎfICwp}}olqudE.\]j!)!YqXO|Fa  HOkMwxF*ODS4]ǀUC]'V(SEMT" ɛxһQ(,oYtTR&yDY\B ^>*brQhr%,3qp 1b<<!Z@.t9 [;/3Cgre&Rr{ F&Y;lGZIpV0wPdimKcz.%ؕrz,+H$JE )ˋdK=΂pDxK E*K 2rqqwjiq/c@B?%>KKF3s''Ljp5I-Ű=БqG+OQytbk NJ}&j@71o9: FU8Qfb'DYʓ_[)rpI5fK̽t Y)(7砘PmVcqceп#+h LU z8Agе v}{x3Ȋ,'\mF;-用Mk"u՚ұMžO6\q͡\g;{j=03%(8T92r%e{I9\|snRQPaVɅ6c "c1 8+3bvԗݞ.P6혹 Kb_܂=A0 ] i?^*J] 53dOn(MZyG@ (wH"u2Ě!zsӵ4~#Ér@f52@⇅xIjk^QKBhVd,\OQ~1b4JDhK[wMo$ݥ q E' m/ngj5-Skܖ_J^Wp g-ؿ)9.xtTq0ޓ# Ʃ"Aٚȯm<ϧ Q}9# U ݊b: Tʀk t4, ^g vYxlȕOQ!G@pV]v(jY hN(бfQn/{pMsҔ*eg D!UJC K*o$&(_Ǥb2@T(ITr0T_o..5NS櫄4J3S%Px,A GCas&oھ/ƒ&+9|o;-:&W ʎ4YL`8ΈWmGc?*{`L'{rtt-߾J=$֖~D% CbȪsO_ޅ)`^D­CIHF;ͩ8M`-d")3 :ɳ'lSH|\I%LuI뷆''Bah11!`r<.X9-F^]^@D@ZATqƚVc6]0T%7*f$ZSA|0m`^ dimtZRXFF{\Gs$MReVMHK~+< c؏ MZR|C%OI KuNxA6@1dUhm wF=:&$m) /`z)7]R-rw@D幐ǵH)}ɟ RPSd Y'Xmk 4,%"|0:{o'? oiG4 #x"G#xJg9z755rr9hAp[ Jh *n'+l5[RQ圷C,c[D"GF8@,i~ v+ϔ1N]58nr W7h;=pcX p?Ga?¦S\kg¯o!?4Ӫ|݆v45HN((&.l!kƖ"v+`!v:S&D8Vto\KmɷUt Ux|Q %U@֮xkl*|bV[|2R>=1Z%GkAu|1t??L!t"m+Sc5csˬPd ZBA>2_ *Z;v%Ӣ]8o6N'nQ knl 9CЀuH }\똊Gɱ?(vrY_a^eá ?x93Uk;w=iXvvUn-L˟RHcƒWJgohQ8@d8|ʴdђ݌%`lkv)\ƚ&~Qu۔nj;/c) Xc2#˞h]F;}̞J;O!_,(o7x>TNt.`iV*|̊ltոEl3\v~[W2;CE>|-MR6 m2S6%P&5C*!J>3U@kZ#<5ڪ>jp_G*T0!Ʊ&UuR] mhXSP0VNae[n#I=e+Po:Ht-jn-ĵaE'xz %G!JR*Ī~׿\h4Ú,lP툞&8jNz#\;Χlj᦬-$,C)jx++*<\VnRnuL_aQ*z_[iH/?t û//.b-_uGi8y?As yu5urֿx3~(ӜPTu!tnO_0uV_΀ '-7hJip ~mɯw`q+ GДl.)J1];±ii 8MCrl‰F!xEy<(;&XRZq:V2&R!ɳzc @' NT5U@% O.FҲ:LY+S@B@p+rL*h^-®`Qr-8Mq) qLf&Zf)ƀ߀>{g3_ϬїAʖl%IJ銷ZN5!5U]b,?F7NId0uK,ul4\6VFJORj(}c۬SY: nW]XQoX#Z*Jo\Eyj(To*7 MB|S!*rɎR[Ȇ?UR/pj"Y!–aSOԷ3q PkUU<el2n#nC.K1٧H"FVy)r {C\Z=b?ms6*&߫w3qE (Mg_&@C*Z{9ʍӄ ay73Idz׸?j)m=TSR:uqsKU*/{" ;>:,Ի@)rcL\+kr`%EL ҡJM)0ZPQ2Ǿݒ0 M\pT9bNas܆:>SoJ] 5E9UE @rQmSݭ2$EY޴mpaXbYEHHb E. Рԥۙ4E0Q_Z ʗ)h\XR<Q8aFI)ޛ 8Ԕ$ FVvgsv%cCTLӼUL!Va=1R*\=WP [C&_HD%MG*䶗T3*6BsD'PtG_hԦ'UpD{[*fc#|e1*:SF 0(#i Q%Y<, *ekȺ>Gõ[)+IaZuտV[yX(:^#նkJ6iVJh`KM(5S&Dsޘ- BFPY_4^vlPtY<։+ e\`\̆okqA4055̣kԙ;"k3HW"G,-J n,ҬxuLvBRQ> z .7B4Y'=kQƧ5Y\k- g² dB)k(i 퍘[Kx6,?,!;+_?ԏ d;ncCǿ\}aő(NTJ# ֎q3 |LbXoɗنtrXw$m6ވ'& lvui݇ߊili%'jj߀oJ"U,hS遜lgrLI51 *]դѦ4rq+5 Y5PY}<**!9w5\ ?Zɟ9/K"sk'vs<1qTtvY8!@>,)f8 /scY;vKP4u&?%^t6*j7A4-|j;RCs=. 7$X/UERT^_9[ de̗X^#ifXPtWS4ZOA_E3)N Fe9_E<9T2sԖd)bQ&8F/$$Md É&j*K [p+426W5S~QbIx8 ۚTnerL)*Am)ev*| (`/%)!-›E[E^א]6[W:v * \5q{V4<+q[ 4E56fFDlP(c5^,hDwo 9/Q̵Ur&I6"8?t텀HMqka-vk+&T,Tj}%K߾ .einW\:_E o/I&I;%Ge:d:}IT$KT3t/Ph%:!`8"2^k#ux?P$p]k>Uڻʀ7!f'|'D_]B@fzDؗrw m Fo4+J='fK*^`%e f( Y '-f>rL(8/u6KN+QiT y~|WlPv*9SKjcgTD*nj_&n7n Kjb8Ɖ_P)IM ߬7W`IM\Slb΀_ds T}OÓ/erfcs:k^1ҹSʰgN80BYH 5F8vt}%5tRо%_ƞZYN _QITn雒BjrK.*t7z> !aYQV@WTMƜxOQ@;LKv69L{"BnXQmH2x NvH\#M7w^qAxlE$- vPD_8&ñZS7Y[1`5+l[U\ͮǝF918#]#M>dšnfAz5=P8y%Rf.3rNz:FJT8 3Xxdo2E$_{>|[q1{!x]@BX #GBNmn#Y펁y$쌽 I0Q$bk$$ H@H *UO͘)w>y~F_wV82jOt'xdG)TPqاip@:UJ̎Aw$lzGt|oyµSJDwlRoŏlJ#;:4Ů u|`4l`}'xP% \uh\-DB◬jȜ YAr [S0G8KZ;,p!G|I 5 [fB ̸ l(a6F &Ѩ4 -通F=l.rHY"ۦorG~'F:w1ID:AYV'H*= SyDw9Ͷ&!ʞ/% W7f 7ijilY[t.f\T>v]LGLu4?nnM9[V֞%Im VnGWNjs֬"զ!EFL󒆐G-)wͽlc{VN"4y2vm Q' @A OF?ݖi޶r:kluGB{@gLpU.v".ںǩ^,A\uY o\ x2٧ِɸZSsh#L{fqʅ:J\Ϡb6Гڳ)?Ԙ kn Q {MIIThiwqϹbh/6ؓ)[)('Eݽv?\wOQz?8h!-[Ę DotDgO͊ɍYZfOv!@*Y2@Ř.8iQ@E(>XG%(xp^Ѧc'♑zX% =WZ SLBi B- floR~ ]7 Wv}mr_j)ðش'!aݣ%Y5d.^Z)UyRZM: 6tn&# aHS$}I.J؅<ӛtZK<)" M!KD?/viΞ17\'s7pZ9+&"6~yݤKx |.Z_6~Uoye/rHd"( Q{H:(]k|:1wI0hS۬hZ_wGcez@Ն\cTrk|~yr5s_\_7LL }&!ˠPq ![Zs9)HdcnAfb%eWxQ0SJ&0x IV,|:;3IhXJ}3Q~ E Mqۄ`xղRF{1ڪkvg)WVYXE syF혘*#:Ca1nW(HRBGM,LyKF5h=m럏i<X: זPkzOۿ;q@ h5ӹ0M8P􂩑K 'K6Ǧ|ڈ® ^{b\ \^,:IX^﷬R.$'GAW?Lr ->l"LIUmYCZ!޿?b]LwNn`?-44\*Uo #ﶇ5I٫ -w|[wKpvC^8Z0m⵸׏c89]o+L'h %*܏josimy0k˲CN~Кjjņ=t [8c2ݓ WJ(ܾr4Bޚ9:*a@ fdjSsm{a6ݻ^;9tG6& "F9nG憀NccY^Ny{9BO8Frlhg@28, CXP)%g ! ~ N O>šk!xx/,*i>'[210y>%^QI+ej*UlE:3Y*.ۣ(֝iX3=. g‹衻>ovƀ5wٽN@B+\χ$cH)EE)9SD8wl"]ׁ6|A=C)f|ՁA2 x%eWھZ b.؍"@/9s"Ck$jn%{zx.J1Ο)I@8>`Av<}nnv `@&VL.FHBR}٭%|e MqqVB{\̚w | A=sZGvrrԢUwihʭFހ S>ûæy=t[ڇ ΋J2igS ?*`CӍXhA뻥`5LT8]:C$;#d}ayL|`5'yt5qܴ\TpfLZqr ]:X= tk`do/?s=%(=i lN sV$UZⅾDKnn^64qZ=ؾC##`_"NG2d7 h^櫥x9q H-->a|jC±b؁=f ˯hw١4mF42$̹>6Nq5rZwyM3ˎ=UY?Zψt!;R Rc_Ar{GQ,2M1MD: #:?8F:N gzCC/%c;DjPQA~MK8qF "hr~+O35;7t61|w Jm øBP/RddIZPȕJf ?]e)aO w-FIUR͏>,m_BL$_H '`w]%.NߒFL MÐSQJDd7tgeyZ\o?lxD}uP8c5"X$`#$n}dA<_޼1, t{ִKqf qpSqkI"|y*jRZ}}#y3PeK A戓O&9"gd"Nt{ Nr8 1UذЎ9iQE /#4솱^gXcHv9–ӰPb-5$REVn9YQ ]GP[F29.P#R| R/ "Lھ6 ښ2:/XQ ʔ#gKz.a[V4xC;ŎRq7j0<ٶ,sf-9\qCGBF6=)51O* P)ܴvK9fD8hL&tOoo/(>G Qn>;B=$pFh 8_0~ cl#bCZQ% #@Pa7]M W?L#VEPT:߾je*xM8^5OA8|XWVqǠ  z틾j_5j~N xBƴ$@tjaab0=X 8:KXr fs}<veǚnYRLNqoo8do/Y~)87$6O'"7^/7Ć I:I<'}ت{}R-D;puR̀K y#Xc| J2QQWK@0լEJ@;R> U-Zk^RbYiKsjvTʐYMRփ*p\_&GpO#Up}E Q|QH1rTg!߳K.N/R@lW^@̽Zi&]r[VD]Q/R2'Ehvc"ыJ+*UVWAOO4 ~ԫ{.d.% I L%ʠw\`NM*xJRoE%Oї |.{·otzMI IpQ:*'Cy׻!g3BK68pݨx+.J i="ʟ$}=z\4ͭY5<+z.-]~H>a;yx#6_a@X}~sy{|LjIz}o7Gwq9yB~ o|-J6%i2߫O$ջW=&9*SmX|9s8qUw3MJLG$Z( N@TPX}[FlhAj-Fm՜]2s=ܥ4/3I`먵0X13q p( gGQea/_LJv>cC6|1|s; C"ՋT#$^]%[BRGYZ{/>CCb9אf0*/` S M.LZCes`+$=5V8/Dg\If.B5r_g(, uOBY@e5 -?s,@Y1SӨ.sk\!TK=*pp$coC7wȽ;D \ulA3aLBff{gXq. h %}|:.1g&[#c>EY:[%؟uIOg,ٻΰoۿ!wF剔ewԑ7Atsmb yoB|ﳸ-Oj J/3Z` + j⒃BDʔbۮ .2W|pVȁ2R>Ɗ^,K/rtW(qJKG ȶf"?( ׁ4't(Sm<&ˢUud8ԟt'.6Q&߸X+,Ѝ}R+yH+`օ罱X^<%'A!pOZ"<Ϻ՝C:M{u<\83G_ Hr}^zxi ۄϫKI( 4AȦfklդ64sLv1m>+.YWgo, 0R>MYHh3[_ufhW*B\t JARF܋tٞbaIGR}ujYJa,)mHqō g ʍL@eT1o$e?h 8GfaOQ1Ix`dL]<6^Y7EnK]8nnY^ȷ?6P;7M{3#+-]).dsrɽz4cУK$lڕ-Jt/XhrtarM2r{WP6ڏFSxfW{YR]4+0b轡nԵ)R]xBg] `}բײX1G]hEwvIWQ"NOjs]~S V ^SZ&Kva458cXji#zyPWvӌȷN{OM[fWu~b"5=__0MB{nYz RL @=DGHeF]Ӣ8z^X& fqkT[ap"'XÃW`^a`[c(re'9_ZZg`B%V(D0F-if+Gq `7`έQ@S\Wȉ*a@eG]fm(a+G(GkBnV5)yc*0MUھf x?ĊG$D BKbZy6X`y/-;;1Y@'ôt-AT7Y.jDF k' ~M;gl8XF.U0-(-𬄁Ƃhk#RHo,.owʯ ."`<:BK8% oMGe 9yn0'C;jG#c(/LC%z0nD=DSeLql<\qvqq…B-b^KHQ|׼B`*%63Ke}2(R\]jrM6*yKxbgM쾭M2߇GFCۮ6mW:Kw+r(dKjmjpν뜞O{vjUTe@EXV;K;ʻ!<$)6ZہeDo/W?Lf G jO&:o]OېcjAi#~a;Gzn7jm9H>𙵉0j2|4ܗAƎhy#ynLGNA;)#aNA*Cuԃ4y;B$XBD6_AE)F6?bMFXm-tquVGNP*b6Kg>צ8%`;8Y`3]U dJNo}=m:r@20dCjP.d3eBQ^wv/bhhN U,2)(Aom7׷oP(݇5>m&88ըw-:M*UOdn@8'9źS;ݨj~ƌd2m1NpJ])2Pa:>- 6dž+Nf]l>eUID5?!ܽ"I- h+ [zk,:HWTnK|OhJoE''9G a2ˆ:o+CXQVH"My^Ö`]],X}m\oa_<e@g $k܊-LO dQG+<}4OLCɲX|F޻U x^ȥBPYm  VU<3U^ץl7?H} ϒ2_LmH1sɖvٶF7vq\D <ۊ B` C$)ӢV:"OŠ ײʇ*bz_FAX"3Q5P]^ʸů5%B܋c$ˀ@KFΠ T0L瓴Eڕ/W Ѿ$+5/n"B?)kE{T9Ǝu7vC]g yԯNC_⚫RP|Y۶+BGlϊu}oN2iIZuQLzZ}'> >?z:37z"d^x]g?LUpJU>uATe7^2Oɻ@{TXRō9y ,~k7r7^I>c=vy=oJ q+8 :*@ W [WޠZ&TE%O/sʉ! F^6mh |>֓~Y.z fdϬ]0+ޑ-+顳-Z@iSi+m 9("]n@"I"w.6w5r q4Vg#gG5AMTO9ޛ~#7\܎0$FCyXͽY5fny|6SJhUCZi餲ă (&^Kc"QdzŞ-ǾZCo[KMc.LAf,ƈCIG5M!mX-t; 2İ\;:\iEL(Z$D=]zě傞[eܣW: r6'dEaOaa04It~O//b5}[_u-# G%+4f?狏C4>IX 4#l2Ѩy-\'ūfp,Xvۏ,޺$,h4*@f*j5C0چ(+%u! `) Oa}t-ni睑 ;nb0|9?z,~ wz -!%nXmJ1@=Oo1~ldyc *\o ċ+7 %AB)Ak8Mc|J3"N,9"Ֆ[j2Sù3`[UǨЂ{>.;ҿ޹`#=wL!"wdbZ/$sGxmQ•j;Xp .Azd(X&SEUfƾc4P hBurm6jM8*BkK0)Ԏ5>Ǚ0a!ADv2Yqݿ̈́ ˕!(L̲[!_5>FTUp_9V]Y4i,o$:2O}H5GvWRRgo6$lĚ80Á2P7ߊ*B Z 8O䫫%@R᳉og/.𻇱U_ nV]PEsLu}`oVVOA˖(뻏xqu>}g#/;*u6? 3UmGK7F0 lPZ= 2 }(_n?P5\ȳ;y2YMx +=i6|N\BsK 섾uN;gxFRCGA'dlQk,ma-}YjnKNg{o;E ADFW35zۀ)/zȔʹ&OPmOL{?Ey&Em䔵uqE  y-i8֑{5&"ۯׅ?knYZ.s{62Z rC\7}u,J Iә<li!T惶.V|BxY`U!A>݋W1@ϣ CD[ϻ "D(MCd15YB!<$T57ӝH|9Omy3i:c4.JRtnH~TLGШVa2FI…dkD= zЂ8S51IB`X{ȊӴ6 GJúZH"Ghƥ!f*$xHQ{YU7蟑jY#)lSiֆm~Pq3_ ctzF?FpV b<ooݖJ9'n"*WF9#DKH2D\(G4-2sP-A3IS XCNC )Ew0<:g \Qk#ճKȇZa8v,yih.[Ǖ]dr3I".ҋˊ*#T!dtӔcաnYm_J&e$.4p?*l|a2ZzY EocbJҐ [tY%2$jty rNC[H0 ][{DnӢƚ?z;ck J%iܚ~n,S`4T~4Ye3wo'FŽTsYXlE:z^N]B8~1y @LsD/8U(;^z=83h9#ۍ>t⤼Ca``Mر?;籢 {!EB>3,OQ@I~҄Kp l}.{gZǭDGŃgd<5ύyYl NbKwtۙe~q`/&%B*6[-b=RrCˠt9=g.6aV%9y885CfIZĺMKu2*])_6Z[<-וie3M{cuB/vjx"NqQ +䘷f%C.Λͦx?|x' Ey}kg$;ovz~H/ԞЎ. ʈcd`i@z(h )6Vٮ{G$o:u#  @Th95b8"Mے/+I+?t1;/L ?X vuأ5݄t␀4_!Se\4C'P%Կ$q;^Aak BJ6r `i]eQF8]}EYkU5;btMŜO ֌s>7}J͞vOO 7Az)!Xo&b ʍdU4gĿC R>F\C 2{[ޓ['J-Wo~:_^j9={9ѧJ}2RPO B[chXUJ+I 4Af|v=jXM㗵:ViǎjF<09y*Akĕ?-A:uͫ^G_@/e0NH+Ԣoۻv {5 ϘS80yaϹ| F1.9Ҍ*'V#[퇣v9m$bㅈ:\Fkz=6X]6CQ'yۆj%%GECyWuT*W.Zs5O~'|[d/ ,%B=UNB8ߟ]Pi$$09{jGQgW%'ڎ2lI}Hj,ؚ/Avc3C/yK*5eRcpo8^op>NOOeoDo(_!eLWsRwyvc Ύcl1$ܪ`oWnV ?mlY`r; '˜!Å8:08C508ODr`!Gӹs3)1%+{q˼T*!` ﮲cHy-qȖ`sq)!3Ks?$S q|I LͧfvMiӥe"5N= 0`a8fsc *v{p]㛋EHё1?k[q(ICJKɤx| D!LOז5=0֥׃%R'ilyL%mb[X^QdvQt?t7+{BU,%xp\Br58g# i>́Սp3o0 $|u d\l 18kZx!h A4 ;S8EeIn-X34_f%5Ssp^c'j xHQOg2%vck37.&e϶cv⎵qlqlekRSj28QwLh:`VV{^)bAɻؼb#o ĺFn^;=eYA`?tf& xlJA%ZUBh1 g7sTܣ7qwN";URrwz#.HBG%ƲD;t>CLML=wˀGL)y 6d^T!-Su{ {ߚe?/R,^\67e`Gep!լz0[ [*F"ŸGݾfWQ&U4_xma>60kpcx_ߥ_`AOo/"{swVX5'P<O/ep:jA`Up_ISL,]EXK3hhoZi-.is;oƛ 젏t;Ӈ⑤Odd4;~(9(IѼ o|I(I_:u׽c08)5n3 *}﫿jJ4aE'!6o}s^:+ڝ`yJo-qMU?~~ew$}b4iDwnD$*wVb\g򖯥:=ub֖=0-L(xG~7譸7u,&a: ja֯>Io.W,C(f&̽~!A=~(!Tk(Er1%HK[O BH$a aܺ 6 {s?_L#ļ'q`[rjI9|=U6?^_nXܻY`k-5'?BfcZoÃI2a֌!ifbs1Sa gY}2ݖ9HE:0SPDJ$0n*,Ϡiy`Rȣ)vlKA$Jzf"ٻ+Vet("4Ҥk܁~$E"i8?Tu3\oZYfl[CU ߌ% ێY4aSIak^Ri㪺 .D^F""xsՋ5JAL히 %Пy 73~v}qvah:^^u.w-I.XiR{9~3Tub`\V@pP֜\/Tz(IUopz#Mt7 91jh65T|Dm.Ԉ+EZBqzS,_[lEd/@I% ו.e^۲^uzKe3I ;w\=AIJLS]*3>xGp/3Nl4c:e?WقLnRŖ^3q`S#4ŀy@uFvPD6Vbu6``TmBmi{`4P0AMgӆsNG՜`Ҏ4&k\[_`AI`X")|1(ob0D~`Je|B QxbJ2䁛ޮH*}2sLU`f GIMio+ 9VC.ϚFRGȍ9y0cTW/WDdcW ] (ŮsXB)CT+=:B4\r l=Wы^A J-?Pק)AK%.:<)UK.t#AD핣g{`GxUZJELaMZ Jb(Ǣ}؁j} }Qiw/iFb+<hI M>#R@!s{; PgzYr VYX'c!\ZQN5K °`qƩ}hݥRH+U:Nؤm֐%_[4H9v"^yً {&`62xXG~Ձd}3؆Sgoͭ))^dǵZ!Q`,h<݀ ^kx(b,no>4fHTW iHf (/Io`fe _"n;^$(ݣ"YK6 *17u U7n&`0+OIiU0?1сoظSXiV h},p|Ke' 6 g`fJnAAI"*x3fݐ^xuq- 7A vL/)V&">T2 5*Glx)odF[9)d*59R0sl^]Ub Lld3ىLHod#AO>3oН-%g,wMZ;KCZ[C"FK1][4y>&BF4ĢMw(t]6` !2@RE]9+GIv3UT=%OfSAWb(`%XNUsVF{B&7{Ry1ЁY] ?z!GIi6m_LVIr1EGk2"L8Ţς=L5&6BvV5kXYWX[#dro428ϓ!ŤD_Ɉ$jQxf C Lpg,R=H(HcκKf!`rۭ C3^A_7l^}ݏUԳd3o9@$ g';~AeΰM f&9ս[t$jW{Y$Ct!/_#ջNA0.13;TO{z8 >u(=id^N<:6j E zW9^Ba4 v[NT%vn.@i<|j8JvV$ xB%H,WA  $N\vl 汿!08e &pkL@MXl$Xs0wt Q0XYT""Ѫz7>ϵێܶ|j97d>2~|ov*r/Ȝ% ;>:e.'.[9<7kN&5ֻ6"zx]lzA|g@?0owk!sCN02$W8ЯUxQ:{4$ GW23p"A=m`jSxB*Pe[#tuˉ5,*/pҫ$װm9v]#\!zdqȐ,ɬjL=HBM\ |Bp^\/:o/]ᔨXRUb8&YAcr\ ]m%"'NȆvF9m1d+d'~[k2gan_՟a(BQUZQaqf0 ̍PTJL{O8GUtLiȈW)׫94-G|YaIȦ3hN#*~7)UF[*\آzS 6llƞ7_K2.I%W8ߎ֭-t6Q$΁* res:\D vX삶xeh^RC[SP=y 9xC& _sGo 3cC ^mRK. <5A}}3ة0zhqjUkzn@DX`߼^tW\"ϽG_7I=84>}o6,DAF(@t$+ V/MEFd:^xZǙdvd{o:JⰚQT=i?V9_-CL ML"|8Ă p.bnG>0 ,3}[P܎HPoJo톇dΆ u G$m·(|kXeӗA0.Wk5%  Yi2G}jR'.F:%Ta*9dXX,fP'vSq+wU3hkO)Oem,gϝ識wh9d pa'(:#.y/ ?(`r^l"+p^K()xIUk`GL }0,}qO:.C|v";퀓0vbf%0O<ͤ2UòdhNfn=M;-7*κo:5Are1p7['6]356*9MÙ6v7[7~8 mpl^Ҙ&|&S1PZÏ0 b-S b9r)8 o,!C>P ?9STq@_?PzS:@>!G[0up/g-sH06n C:cZuoV˖̼`2eSԒB @k ,CYPzM#Xr] >fӴLeSI"_p6ظ/aP֐iSaێ^gN "Y^oxҮBA $9z2,s8R=o%< LS} sso!p$Aאem YeC9Yu2z¨rxo{ȽeH)ۀ0y-6Q鮟m0|x$݈^ OUI^X Ny4@1]Bu8"GuJvqXZpJa2bUӋMÞ)5u} llLjh+ E6 Dzv4|2+K%o~KZR-rP5@ίo4L*{7[,"J 0@agqӼ^~Y?O0WRv[{'Bs7=l6!Y% 9 $ 8rfW?}% 6bgK@k rXf$2poc0^M]Xͪ7sɕpܑG xo[=.IK!yN|qhKoo!Ii$-3fhVs=qe_%H j gK9VnfЕqa܅VE@ҪFAt\ p)}4( PoAg8~\^.U 24π8F۪gD+\U0L"l4 Lp!n@RŰ=. rg݁fvZ*5"ѹPr;YW{tMkbs ^KtellV}:d~R  yBJ1yU$`qHw9n@++Wǫ,`p\,!y%e2 _ڽ hwz)ċfdj P@F#:pp5 /9^u:=z1WQU@2E$DZʗJyL[QSMSU5<΍K(렡c|Zg~ U'҅Nǡ:jsM@=?ѩ_JGJo6'{# Q) `*qo鵮櫗J3u@75SjeDbUuAU(³UE$Qkdwc8}7>[دGz%tv8|88ĺS\ %F8L&w=`^j@zgW7E4'wJT2b0|~gu$Fg#HEC+ d8d+Yp^m5E+_,GAJ)l-OE>cU_A;gEDyc%{M\74ԡa:\Fܕ:b;NHl=ArR}Ƣm,H< s:mm:9<\ J~ ^O*R'M7m#=a,*wr\Ya֍F/˞@5}b&((=bÉ!`V\àD_=k7M,Rc_Pe93<[4Lfթ/S}U],mHS)7B,Kݳv}ڑ{&@?Ϙ,z=xs86q=+ ݒGQҨX:.{ __yYda d[q]3 woN=Qj-vN0Ď(wӼ&sJc6gwRXҔفksy JI!E<R&ZzMw;:׽BluS]s>|mdZQ٭ϴFQnKUGTt KՍ ˇ!$%ՋAy>  8ZH+@2 v㭉+OTJWE0env1FdT+U>('.G`ɢ;ën5z_o/N# |esqF_ =3YMXuf D2]L݈*=ck2ph@a*`̢!fR+萃8TzC@O½'|`zN 8bEcnoh,u}!)T16ג/fq/Y=CQAoB]sLu#㑏S;p| --'̃RcqSy>s_P$F V|\K=QR 9dP6ǰy:XVKI`/z3h7H^97~m} P" a).Օ[Ȋfa ` pL"R,͹H0ۂSm\HdfR)e (Z ŶBHGCrڝ'Oa~#=1fBA`X,PBe ]&]ޏ]iu [mD lj & 1bP2toɰNEv YR1K r8Z1#r7WRߎtc[耊J{;pd܇Nˉ}0ZjoED6b%MN3(Kb9H*'M͊pbM,"ZKUL ^,SI0>@:،سc$e%75IO^1dP(K`^6t}x͜9 ^uYZ*70B.2A˟zd_b5|NJn7Yʍ $E#ѓQ}Rߒ)- LXÈfE=%u+ߒ4%h H-"}|qbTWC^Tum n} l 7.{#}U~?pl lDR".\:caNl9eps!aVeSTW/tocwfJ2FawhG~Ue -[4UVkڿƲkxq,WیxdEQr7x-\BP.:ϘoUjo~l ӇI~g-;drFqTpm[jm;E-f^`k*xu;W}}hm3sap8 uS}$P|mYb[h"q<|F(Ǟw;*0U_ޯ!xD02/[:QNz׵,r'dRH: ns¶<޺{ܽuEd{Hbg=^a&% +&,ȪC*Hqv ^yHWZTc%ݹ,WkX#dO% n8܅񾰁6VϑP.}R< 5^r("2,WR_|;A% ۣvu%cQg)W-4Ho{oYE!1%YE:6&hy$Rq̒xCz@`Z".KZ6"`i:$N-0kf4̓(HЁp]B\PNp[ R|A1dha652dGU@vv 0=*i-mT 鉶B\3duq;\ȶrI IQöbm`H2ZTk. ?q(`q˪^J:=sUI΁3YBgtPHwS{( ]zs !jΏ?eExAVSFje7H40UiW:k=YlNxǾ豯(T7rX󮯡,* ҅-BJӛ'3o1  Ŝ6 @0+V!ᄓl„u#>Uq)1eQm1L̡ [) N6H Ôb,pDQ1.*fX7F <}?^a3ԴQn vYs AwGˁHM1Nwޯݫw^i2>v߷5xWe9?!UsyCvvƝ@X4Ǽ'.9>Y @,mlݖz8S.lq;7 }|`{ <~%\D|d͢“PXh7]w>qZG$j)4[Fs((UYuliImJt:yXLU=nSb]Q@5WKlFƱCǿ$EY mIJplTj%5Es7UdBDvVoT:E1BC2734'pP!U#baIuDܲn0])+oڛa7UM`LSN,tV;#Ԉ4 B"yXeT% u@<%Ͱ%4DChWk<;VëDz6bfNyn𿬑A0T+anhk}cP+z LuH/ZMOI{O?RQ?Q|C-Q&K)GGE0ÝhJI)<׭@r`†+q`UXH™ڻ87)2XF~Rl8+ vW0o=L`E z6r]*ڴR V֚TKlm'gnbC \$t#.8V5,H褪nypWx% 7||P:J`+ > `U'+p_sS= Tt1u'knbQǑ|<-I,jd|yP^3*>sCGHܚ`ژW:w)uyj.U'2:AyD1㯻'hF|=Lx(4Efg!wftQsKX hܒv Z7*-b4PU~) [g+T$ Imţbah /kUڂ'NWجGJfO,Shfꇲd RMwA0Ed%Sw0AV(ĂSbpX㲶 a>XMFA"FsLh_:Ep k 20G6U_&Hv>ڰ% R"SB<d)kv"If8fP4W9FJ4CVyC(nt|nwYLk4CyLC3`;|Y]:0,¬[5V,q [ >\ egSGtJ_O$w8nbS)/ǼrS+0Tv}}v6u/?0wxu̯ͨ0x=Xϴ]šFWmY&4$r[c/b܂aCi5v=Ses6fBɄNyq~f~C^{@濿vBK[K)7?O#{T:Duܳ ^ {.W~`J@e}x^xM]@w 1\+;{7[%o//.Pj :g>Y\{Oz 'u/\z+ o/w!藾T+*,AO|| [nKDsMsnxr\EVg>-լǭYYЋ^S;a=YLf@'-wBVRhKP˽d{;Af;CU0L#䪛]LG?ZկmƕՂךxJ*W L;x`wt%(}lґHV{NV(ʡvka&rΈ`Y2s8U ^|4`iO|fuiN ʞDM6m^#VezucnAʔ]c؈j-j 3ǚ J[d fB,_#|`)2bM&,n0 pN-(Y;x,@D(T}mf% @_O&aTL9bC=fwcy)lk þ5f}έY{a[S0m+{Pf5d+/A]G*o~Ao 1C I`];$k_Fs~}Eԏ:,b$J^6(ou@Vʩs*0 7Dw/+ 8{ͬħd6--C8fOpddAАIMd{:2-;] =!Y\bE_'>m9_@n"8vt`E,8R AcBJ\:!,zjJx uyf#yԠ')εe-^m[`KӖ7 %᭝d7f_˥e7XVH3yҀn,EPe,/+i+õv :.{ __yHT7J',䚛 3А_Ȑ5{w|RNx#I귵Zzуv鍤R3I+;q |#_ \nH(2Y9GHsW`+2/c&u0_߉ye?ys75waׂB]TF2();`q,/*f9@4_M\ !-t˲"$#N Wkkߚj]yk6to Aەa![5T2FlKJ\dq|KIi?Ոvѐ} AbSzq;] YE[x2ij]!q<&J^LB+>LkAH,3aBO$;<${Z+߆nWBs \sqR$} sm^ \:ݾy3̪?R_T.z\.AWf2_Oi8W_~/6@muM#mqO{BR8ۻ=Ң,?"K?{|IH9 e.)3D j{6a-NE k/̸))"+G-!nJ"c Q~So*6 fm#b<](6Dc)1Lŭrret0>mhZ$m qgQ:5` vsJn4_I "*.XfFÛl]A`^hgCլ}짆) ׸%귑iXĖ{_O=3 0pL`L < *8@TVr9v;oëvXĔV('@-p6Mdjd.'y4~ulDaXyo'ޅi"C`CyϬY%EYH~Gh\Xijq>0"0|5 3Fl#ai ^#a/"aNo! 5jG{V$ej,dA2+*93:',bJ0˕Ʈ )b.d\sAbѕr.C߀qzfA#IoسC ,Vh{*4`fi|t]&-zJuρ(JfV&cBq"Gw2PF~"- ` W(J?⺀DsvlI]3o^J5.4L:誻Ь9.Bs\j]l%+^xB(!p'fM2밌61pM2KiN@ih,;5!7%._y5HgW<jAZVg,X5yPL`,31mjXoDwqm:3?}>w.hـΙ*jrg߂*wt2PQt_{H_yLٝS J'lu,g:HZHg3Z>)df7yD84,I 2G 5$+!:#Լp,->}<x 4&F7cAPsMZq{F4AG"z%o.8xuž(6+N )ӻ!]z.gR(P/Ÿ o=hҡU[eG:MVFMS"Pao!?Q,3+t  "=Q\XFg#M<~id Ðp:O+{lEegA5! Xdm8x0H6.fo{=޷HIȊO;y]GN=,ٸuak^ ?)0'|2.n"dZlVB ~2X~y lJ$hM\ Dbs $(xF?QW nGI!>p#Ή[%Jݝ!4OW1J6("'Mso kXsL`bTG~h:nBXі{l=n6YC(F8+8)!f/\2AQ\yN&|6OkaQFT3*H v֮@~_)T۰5Ql;wH]uк69iZ?V.K 3PR˞~,]昺Hoh9=I!^Mg$w4b4TT#e,ߍT%.@چp\GD]Ui J#w/Aۚdž)/EGI}b](ztU1w7uC)Rzټ zl l4h-%Bj|d0SӠ\ԑpK'OI!t,{(܄NmW^smq3\|cN>K벑^Yka,2J2>=muέrnP#.?9(|xt4g,J2\F%*`P1r;TcWTxeErK.6ط.yOTu3S~ja~0[נ5> s3B;V84[N˯#頋@?{=({:wA'tOcDߵWÑ ߶5a~~x*x='6q ʑ5,+|.ؐЙ,tq] b9 c'6҂ >,! u`F~vP$ڝ>o ko~>Ǖ\>8330O/?|&}~~u}BZxV~z2N2!Ġ;!5؟gnW`" /@ ]dQPB<X~~ef9m@$4O( fJyLO$'~S~x:Xùl7@bt$$Mh xEe2` K_*/:B!|7;\vP޹|1}GCnd} rjbdhQQYM:Cd?q8Yg//ga/܈Lp-{o`Ey\bU`+0ysgdzYZD)qFG1`fx )ieCF.RژU S:u-zI#HC?K5!lKIJ繙K1%90H%H)S f6f{o ~?o"SZL!]?;z% zo0mÓa4ށ9# rJ+WisE6y@ApQJELVKWde)Pqwp 9N^R) OZw+v*M>'zd(|bttyz>ʆeIcbXyhhmkK2O`朽b\m hMb}&VQ$('IL$/UIzʔ& ~,]eCx|nݬuyLdi('E:Sy˖g+y:;:.X?' lWF67q /r&dX*h# ,tP[tGOm .hUyA⋽]±j:kŠfH>d9lrH+ݟ҆i6i fc=y'^΁>l..G1{DM[ ~闗*9b:el.nvs-H! kl+X>BUFL8pp!t8u= H7)p+w%qX:ʖR}PGsdRDj20Ŗx[~Y@bښ+[2Ey??8"G F1ޤ)Hǀ2}*vԢY}*;>f~#^be{3„`Rl4\!Q7,Ö!ȱR(qfR#G۞l+ QWzk_Ǹ=Qj4wjZB?[g7-JUS;]-k g$ݼ߳|WaS}ntى6PĜa91w4'۲}ؔjDZޮL-Na;r·[x !cNTnp|pL(VW4 jb(H;+}4,ARC%eq4ʴdA:O8 ēQxW,)K"e=HtZ|-~~u4*"?\w;?[$U8mWu i֕#EV^p! 2lm2V_StOťvn{-u: j"s e TDe.L.t6ݲJlA~ߕ6s/J"=#!==Ok59(@rO(Fskx%+BI nľЌF2:MJf!+h_u+9क़sDKٳ,3X%TbkUb1H0?j꩔j,KILs*.JLgdl +c!`ut魚B` j& ubqWb׮g Ͳ2 8fr΋ˋ痧*#w$йAaa| 0C]E\*"yK['"7~[OJ,u].ò e []aNr6K/3XD$$x$!B5FR]{$zR ~BFOa`K}ܠSQ=S:"mw#l#yvNwSҶ5b{Ӟ&~\AkS{\P䨛}W#(neav3SS҄XKP@wY @YfK+Ty7V0$D7f%~²=R2A׽.s6>7^q!fzmF,OЋژd7CD8)n?WZ|@+l6=0s R Tʴ&F (\ qLE\թKsXѡ=ZJƽ:\D!]}!\ƭє1QN",=ߛOx $%2X# D㠤*U*Vzl=dB:@vRz*Ƅ bYQt˰vz/0 >çp0JBYXψR70f惵z݋%5h+&^}g{58rp֠ո`C= ~l+@Ur +H/d/<@!6yۚRm*p$cw@r<Хla^Gw?Ā@ąꚛCG\ ! ]`E=]4Х|kZ .g$[L<@]Pp\V$2\\z#8k=KU8(=%/Yȁ~gx\u ຸV..Ϧ=1?zUKܝ-r&$%:Bk8.%b:l"$"Tb9qi qyXE (yEY3ȣ*~'$J jt-r;q8'-{̯\`4eZh{s˖1:g ]RT8u!Lk(e1KB&B, ,G)GɧT#% ڀVPqXIQl 0LvBJQy8 ["IQ92`Q[a<> 4Jfa0BU! Ovxzy7tϦۛddaX n>R99U1zntfSČKtm`( *gpvs͂c#$$UꠁWA1p&{ڣ$NdI 5 oLa-Ј4֝j<Idm0AE/i13 ;n/&}Q(1Cw * ?P}VfdEV +nbOBepNB<.Btx7eDZ~ &_)>jiW@,96 BqM$U: ڄ$X "];P%Tn`PuQ)zaLhݐ=<R- WUgCB/5)tqʱp1ɹ6|Ɵ 0߇G%ZrokCLWr=.ecd3Z'3{=;o5M6]:Sqj{-FՇ 쌬:O`1Cy#~x ЈcŘF{%E1т*u1n@$>EǤVѢ[Y2GhFVXZVF kѱMlIʍͦCso)R:uTZ]ˡ:z2q\:]գ;(oM_umnO3_U5*.p<+T:oX"ܗ+d!+WJ٫5!m׸g{Qqa4:֌}{3Y}T97M*KɺＯu{deP,2y.kw dX6OoUar`*3UO $]. fCƨrSv4GwzK\uJREiHGVUp,Hi%]F 8요7mh4H`_6-Γ2)FwL N-#s[QҐ*+0!,Mkʌjs֤`du\eEV{P87^:AюmP]VW+~H.Y5uFɆ7t׽ qӮ*{빗.=jL)$;+ Cxҳc;{ ԝvW&0D~mqY##Dz#4UcsfkTk+U_llo7_|%VdʕdiPB9Hʚo'58;*]팀DȨ2XxֱV>*$ߔ3j.S[oYWUWShv}1\`f'U;5.8:ćKj|cdJ[{{GƊzFge=9eVSՋ3(S5356'$&hwO9~ d_jyتM^ibO ff]ׯ~+*HU*zb^4pj(z)f-!~ӎJR{_FSw4jL{Z|y)N1dYL/ZFUEŨ]}2QcR h?̮S07070100000066000081a4000000000000000000000001661547a7000047c6000000000000000000000000000000000000002000000000./usr/share/info/gnutls.info.gz[]s6}eSjH A#ۉ7rkfgE)+6Cek^" RI6D<nO}w_mS s]zPk!1EK+}=}}{hݾ{FWswPnzU0@?~W7P-;PU;T?h&3I=z xmA ]C3z|y*zl{ vUI}~w^u`TF|4? J"vS^=ɬn cГn=6bO~ ߼^ݼtM}cpy&to?|7*NMw]?gl8IOo|nxA-U?]L_(R Ǣ':b5TBX=`LJC?Mf y;~Ƣl|{0ВAnO[l4L𸔍Ǧ 0>p؇@(_{?.Y[vc1 _Lk.޷澺0~,goUY| HDi`|,D.>'Y*S`2ɖfqEXMqM;/>uUpjO(3,2޷rax}mȺƢiY]|~(|ucۍUeq7%P!kbEz?6`>[.i-{!mHfN,7Լ!23gfpW߇d S+d_p#X]58 ۶쟏jEs= h^pn7rh|(@k;J4 )K+_Ʈ=ϙ${{1B!(|4 BX jLmk(-8M]dY*upƇn)ՔDdr$Ja|(FaK29eN!Эԃ5\NP,cH:SiȒ4O4~C%3/ɪ3dJHgմ@^rn#l;L );_U{R@!iF8rF+5}xܯOEK\O9Oߑt>6xWT+%bgEn›&g7mAD{ṋ;$s|!3 : S6W²'d_H[*R7DGZ$"Ag$T*$r O']9Cl E̮Ш2󥯊ka0q\0Q%q"b>R1DbtWDbc9|1dRh "_'~PEC1 S ),N= ;suGpV=U;K5|OX͑z&4yeB|(lGpnhsPeHfX$#x@(_IsB&lIl4 ͛e|͹ `!{$(VSl#6, J╰eB)X:hzAUtLVf&W!yx[ɐ$+xreFh*+[%Ǜ0FbX&EMd*^,a4m=V^J!QN426* &+ $+e9S) xpTN4oDʍyƚd+x@T#%eH;~4zIn\$+}[j$)ۤ0Wheߟ0pf <* y-<~Y``c[1\?tO3ea#}7Io s}\ AE<]c|ГlǪkr&K{y^bN/,jlR5|~β4v BPu2{%I'3"_NQ7 GeIoP:C0>\kB\tf2|yo[ •W]nQ V-BbjpB":A⑲VPF}nMՃIu#`F7$_M6F29ix0s68<?YD Ukݭ VfBM~E#7Om .UjtK5T=sCSWZX|ֲ^tmֳX4*4U­gQA`Wn8;\SpEaQ!ET,TO%՞H26I(`&=8U{ S=IQ-aԢ}IGO蚇j^Z_еXzHQ2O)%=,|մw@QG/ѯpMUhs%8h 1j͒xc&j̉v~#x ul5 ߚb_W8"Rl{edQ5e0na&A'ƥ[lHo,EgfW< yE½dcIO jʝpx DVp>sw @)JGʎ/<ծ<"u &iz[AfkN\Nrz JA>2s ̋mJdskGNI;,羏vy.iG%]NAn'w]>ltu_6Ͳ;'6*.9S䮯Cu'mps`E![4KG4141~῭OW8c1X+2h$+FD,A5$coac"u@5FEy5.ۅSKۀVlHb-}{o"6uhiDtcv!}}i $ꅩڧZ% 0\ۢ| NmiF^wSfXsuOk3x^.C9 l'e4 >xU~ ݩ/DJF_t9.u4\Yz:><{ 4TЄ!Qȩy,d#}-nI'1~@1Օ$IY6|:py-t':_me&/9'㏩I֬gY dv.T(tTQ˩D| sQhD۝J?}X s]K ǫ+jWh6`hu/kUҵFL٤wA0ǜ %?BrJ}ݩE`fYlGC" s:\g dC (3/k!T Y]ԿGzǒaFҦ{w9vǺ!G%<<~)p' 8 ]4336{Nͷ7Y._2LzImNdjJEEK4Q:Qѯ#g+}u=JxHU YzĄWPj n"R.Ljo4c~WfK1m<IM(܅ƘuA$^FH~,ۢf5u{PV.PL?03M.u{D37š)%ʆ~PRL3^O f-v?T/U NLr*3 5ⶳ9冫?6.A; wF`aH]~_ 3NH+%Ǧ3t{{vv,j .?̄doN # ӊ7_ݟnw0ᗔmdpɓBtQ/g.{dה|IQ6c d_cb'1I¸9d5x\*ΗF<(IJK98c%<<$E(x۟7I[]&a[5]a,%+myܗEҡh A${MDv/a-GȘg+5!'뮓UJ1œ#|q--l )hu{ꝰ(sz) LFt~C`h1:b7hH縌U\/[槏UBŸx Ct7T 0R&17&ӌtM[ eǕIfjWJ`ű%wIK!UI]|~9mAc⊮wTs# e}pƧ7ƛN>AS霳?qmɀםGfA(׊n?Ɲt@k X iegȚa !]1fpx4h.CE[0@<'CȖ;@JF C©^-E,D9n(CdD UFGXYz1自S*K7FvcM+Ajĥ-< P!WKn lXo܀-u٣Ff@T"c#lU5<ªTظixq{&.!6V+D-7Tl8 S>ڒ]P+eHgHSC>5}@D٠{xx^֔$eYx%pt S*U\W0IW~/W",~ dA}j޼}/㾛5K?7D2Vw!&(Oh:J ^g'c &~l}U;;vS%iٿB~ AVO)&֚s8.9{f^u𿅿<[Ͱ h)M'I/Za+v/a^:7?aJ9 =6z; E?q܍Z 6]H-Mg qɦ @`3mJܶG4>wpH(+ndaMÌ|"G5"c7̇nP?k'^])gӣ>&)ŸxZxi"MkDMܤЩ)=`8=ғ9MO ?;cH*O.)`.`Gs'dp( L+7w#HD(y/~ܼP KPϬ"'q'a1"+ gr$5X#G_h{)jTIh n ]aS1aFsdApn v9 |%C6 +z Mv Q)"%LGvI+F&: -:Ndb K)2jMD4l!Ւ3)0k @y(Ʒy2{\>I`][v*q~>֠ġo F cbrtIc16{&Ƌ&G\_fM(RJUb-TopkW^y0+)ZHPUl\U\>'kG!n{ ss9ldȠbj_͊6c(q"MHczZyWJ? j#9ItT>G\ J8t!g1 tҥ]/$MtJ*$"1FxR7ۇRĠWrGgr7`4[; ^js(\d,*&ثZ*>eЮJqc[2oű|ga5 S>~"q窗Y!MDh;>@~PA?Ud5{@D+E1}|DuFp&ZL,_-^I@C~h 'ǰ61IMŹ.l5c<(@zΔQ/D/@>DU'$Y"n);M-q1[7Hx%iL(K* [KvwO[hⰚrP>M;~K 9{h(Q!om>}Õ57IJc7qڏ~w4kSّȥňbS (߶ixk{}<` ]AJyD)͊YҘBXxzBD,yм/c0,aC7.X2$gsV3(\B!aɀaD%ޣL >q0^#YHKR8 ; fwEl`(jn(rl4nNC&CX`դlL I}u(&ݟ ݓ`ꪘjx:W( ᡗb'nL4$}CrG jL@IӊX S ineӡY'?-#)ba`sϵTf}f},‘Ul][@GO,̢ǝDΩdZX2$Y ռ@eQPnA<09گ+`oEA}S H T%.՘IX!c]$9SB76%AG,ӧ#4fLeBAmσ|Èn'c~Y倜O˅Ү E_A[9ST½?+`jQst XM EV!锵1d+6hdJb>7CAc'o4`p:)XcoOԓ&hdI¶"ScD_q(f1DS{PJOg<$I]P{%N$eֈ%ze%'%7@Dkif"3 mrᑬ!5JQ/7H$bp~pt!c6Jx?6Zb@IP 5ZCD'I)fp_˵o]!TP !60Ab'\YZҡr2GeMXP KҸ删'6x2 |9ia #6暉ڣ`pNcoPre;-ܕln[Q+DB2ig0C*f&Hȑ烚Hn zr=WU4TCT dGXrٺ rKB޾ǎ9<>bh{9A,@ s92 vAgC(TԁF:Us.R |E^3XT:[KYh|9vwPup4G vAx595҉[D`e.J1CvVbpԪEC|:eCR}UYw cEY;B~zoyP>s| @OogDFjzY i]38m'@K}bjb/=7u/L}\aX9'#٩4%݁> 3p*VbWl|}1D'u|6FxM̅$aL ^MDA?F@K l x%O .R>b8ݔH-`rJTy|THFABs㮍X㑝J u!*ԻD,Yޮr%ѯ }bx|zFN .q z">Y ri$1ڭɖU7TxUz)՗8j𩡮圛ˁVi7g4bPu{9>)@H%[7O!ؑ%xa B`E"#*ϟdkRr#j] vKHJJhaFP `Dnܕ5Ē#jP E8rQmϸLѡ%˿hX-F:9?MO%(ng$ Z,z?/.ciϺx Lޜn?¢~3 VFV\Z%!8KW/ *c!N2ge'LThP˛z6npr.YD]3A -IQGӾʇVFV5`P0++#BWZZv'ѠKFB+) Z0p;抇u y-;ŮHòg4ӀܻI~bETХW\{ +UƲ+לiԄOmޫ'#NIIiUi8'y@ d-@W/T$1W#诹HB5PqhBxL3Bex]&p4w:U#AB'$肜`0홱ṃ(T~+v @M9~Ӻ@e587&D@E :g4.q}&nM1fƄ )U0Ic|]ԁHYBޟ)}Wcf{1~qGGNDn?nЯhWJPW28.w,A׃H~ 5 ZWHjh7qyjSqxe5"ѨBxήHm*)#us&!5;8\H)*ψ+tE4FB[Mݬt(d쟃Q|R0 \HKR`N07Cɺ3HxD/,) 8(g'2'!5 Xl%\)+RI>bJSӟ\fh MYǂgci'z9+z {7(4֘>x@ rJ%[0bP9Ⓔz+ ٨_hFs54zƄDgaϘ ܠNcBowUq׈Hq`Ȭq[Vi*w%r-O>mv}%f Vu^NZ7(̠eqlX:nL9P 439V*d#@$3M0jM?X %<)}Q lOgs6eC<s+晈 r%:CY; kz;p/ZD4cI_bKe2Y9}h5C悥]o)]/2Z$M{kE+LI 6%9s'w]U{k!Ҟ%/fnR` GHCښ}K<דF1>ٙq+ hwRkjoo$RSvDVNj$*vx)Pr=#1Z4P!ň :zP^aXh˜٢l:|SU$N$g[`@NgzӳW0jwju¬Z=ӬZ 4X`~$8yY>zdCK.?5\{Hn!{ZE oؕ1 FJ$,]oBk)J;#n(M%ۨ?0FPr\s: h2'z>nhWm&DίXq>ZJ)XwechYPLǙr5|-,Urp7?z!1FM@rzCD &m7xG3C73(>YPYGYX^!^@Y !@<S7FiE /rs* E㗞6RޞBRefww )I~y t gU>ّ \z9- sW|jQzX$O@m*㉞!u"?Gk67!Yw;륷"os*C pʃ!XWޤz0\u]tK6T;Z[Ò)CԈY% P3FO˭(.+v3 +ۼҋy ,O„C+D53)H %X-#剆% {ͬb k A @Q/ʍ䄜bE  w8>߽2Tt 3(5pt!yESB흝0tg5lm&)T!~lRO3θ㤍$*0PFsf!Ћ,fTc> c2UA*/ uW xwRHVhgtVJ-grrznm dv&c_!jn}`Nekڞv/5\a׎xh?=X&!c8͸Np'2y]򘛆1ہ{ ݚV!ÛPJG(POSM53vN`gsf1N JØ|04x'qH>5V ;TV{m=:| Xo`E5jR)ڽaOhjOcGR{&\} ޡ5M<."rMPgJk 4Sn> 3%ٕ-]KLġHc-kԢ61-԰!ɨیP͝C 9(#=F1\ C(.12QHI ]Z)dF 4vsP.%^SO =qьm[&.MSgLLՍbԝf zDP%4e NzRj^Ю4 iA_Zyrz]eNr7RvNaPxUû-ai\P0oyd4v.B\1Z32 `h&t :4#6QriM/\2YAPPͭFAm2 M;ATPTW7Ml38~RFՐ3fyz{8،JiW 屚jh2 wy;c4N%:qLw?/oaU3^21!e|cWjL,Oj.`.S!P\ᙙe"`s0VkriVKU2@ƩzT34Y+0B~2>ѻ82_|K;ֺ[$ n5^z+z:4A/K9Q|•a|r\4ln_N\NQ7  TN32T\ETAo&b Xy7 H77(DM QXDfmsqPvq}HzgOLaTC:g>#*b1z89gm#2Munə sF‹,g%1=7^Z(Ij[vF9b#@͝҉8> [ᣟ)S$/PăwP,&),^Nh E77ii8g%4է t"5aq 5"zh^E6#=m vѵ 'Z6RKBWt[C* 2pN) YLW(K?}e/[tE9m-4':J RB͚PplSZ9uWi ѕhhWяW "gc}JY$Ec;t]h '?`?i=:I7˵0  L1fbQMJҰ5o޽G:`굜SU[1T/#e>2Ÿpz>g  T`:>KV@r"yGk{^oo~K?߿[޼GBBQ~~o~-fo76$H#MnGE2C:>XBU*(EhCL?R2V-?_TU]̧h»PRJG?oe*2K@ \Ltt!Nr~Qzy*+oщsW| \.vcS(~/Zwţ'2vo<&5w¯ڠw~+Fw~V޿׿ ?$!3>V<7?8]~{6V9{s̙lW|6T~߄.WXca1%*V%V3c۟ϥke3w̺ÛÏx!6mXQ~~_ϰ\O#`h 0 jaNx pxӜC]*݂ JU{8IDZKe)V#/׆/6 8Om\1.H'"՚j=": 4Gӱqɓ YZ