p11-kit-server-0.23.22-150500.8.3.1 < > , dЉ e:;'p9|4er%O+L5b[mhcӹ%0ɦ Ê;KIi:u^\B/r̬St{j&~Cbr bl̳uCaM'8h3͖cnF~ˌ
q̔< e|JM?NV塶#^M7hsA@ #<͂I
A !aV{hXIIa,PG Yڲz[yR9ԯ 0
Ut< > > 5 ? 5 d & M " / E e
:
< D N X $ a ( 8
9
:
F 0 G 0 H 0 I 0 X 0 Y 0 \ 1 ] 1 ^ 1= b 1b c 2 d 2 e 2 f 2 l 2 u 2 v 2 w 4 x 4 y 4 % z 4 4 4 4 5 C p11-kit-server 0.23.22 150500.8.3.1 Server and client commands for p11-kit Command line tools that enable to export PKCS#11 modules through a
Unix domain socket. Note that this feature is still experimental. e:;'h01-ch3a SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ Development/Libraries/C and C++ https://p11-glue.freedesktop.org/p11-kit.html linux x86_64 e:;e:;96b4e3a2aa89067bd7fe6f9b3dcc1e164075054caa7fc3393478ef350f72a445 e0d0d5d6c43393eb349faeddd6f59ca76723a6244ac37ebddb11e5ac3d1b113c root root root root p11-kit-0.23.22-150500.8.3.1.src.rpm p11-kit-server p11-kit-server(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
ld-linux-x86-64.so.2()(64bit) ld-linux-x86-64.so.2(GLIBC_2.3)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.16)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.26)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.6)(64bit) libc.so.6(GLIBC_2.8)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2.5)(64bit) libffi.so.7()(64bit) libffi.so.7(LIBFFI_BASE_7.0)(64bit) libffi.so.7(LIBFFI_CLOSURE_7.0)(64bit) libp11-kit.so.0()(64bit) libp11-kit.so.0(LIBP11_KIT_1.0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) p11-kit(x86-64) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 0.23.22-150500.8.3.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 e7ca^ @]Γ@ZX43@V@T9T;pmonreal@suse.com lnussel@suse.com scabrero@suse.de lnussel@suse.de lnussel@suse.de kukuk@suse.de sbrabec@suse.com mpluskal@suse.com p.drouand@gmail.com lnussel@suse.de - Ensure that programs using can be compiled
with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705]
* Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch - Backport IBM specific mechanism and attributes (Jira#PED-584)
0001-Add-IBM-specific-mechanism-and-attributes.patch
0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch
0003-client-Allow-zero-part-length-at-C_SignUpdate.patch
0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch
0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch
0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch
0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch
0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch
0009-rpc-Handle-special-cases-for-buffer-and-length.patch
0010-Add-support-for-CKM_AES_CTR.patch
0011-Add-support-for-CKM_AES_GCM.patch
0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch - Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066):
* Fix memory-safety issues that affect the RPC protocol
(CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered
and fixed by David Cook
* anchor: Prefer persistent format when storing anchor [PR#329]
* common: Fix infloop in p11_path_build [PR#326, PR#327]
* proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325]
* common: Check for a NULL locale before freeing it [PR#321]
* Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323,
PR#330, PR#333, PR#334, PR#335, PR#338, PR#339]
- Changes for version 0.23.21
* proxy: Do not assign duplicate slot IDs [PR#282]
* common: Get program name based on executable path if possible [PR#307]
* anchor: Exit with non-zero code, if any error occurs [PR#304]
* Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299,
PR#305, PR#306, PR#309, PR#311]
- Changes for version 0.23.20:
* Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
* common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
* Add simple bash completion for provided commands [PR#258]
* Unbreak list matching in enable-in and disable-in [PR#262]
* Fix RPC when length-s are 0 [PR#259]
* rpc: Add vsock transport support [PR#270]
* trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
* Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
* rpc: Allow empty CK_DATE value [PR#253]
* build: Meson fixes [PR#245]
* build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
* common: Fix uClibc-ng compilation [PR#237]
* trust: do not allow daylight to invalidate date validation [PR#236]
* build: Port to meson build system [PR#231, PR#234]
* rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
* doc: Add 'server' command in help [PR#229]
* Build and test fixes [PR#230]
- Changes for version 0.23.16:
* proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
* conf: Ignore user configuration if the program is running as root [PR#226]
* proxy: Refresh slot list on every C_GetSlotList call [PR#224]
* modules: Fix index used in call to p11_dict_remove() [PR#219]
* Fix Win32 p11_dl_error crash [PR#218]
* modules: check gl.modules before iterates on it when freeing [PR#217]
* trust: Ignore unreadable content in anchors [PR#215]
* extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
* trust: Improve error handling if backed trust file is corrupted [PR#206]
* url: Prefer upper-case letters in hex characters when encoding [PR#193]
* trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
* virtual: Prefer fixed closures to libffi closures [PR#196]
* Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
* Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
* proxy: Avoid invalid memory access when unloading proxy module [PR#180]
* Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
* build: Restore libpthread dependency [PR#183]
* Build fixes [PR#188]
- Changes for version 0.23.13:
* server: Enable socket activation through systemd [PR#173]
* rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules
[PR#174]
* proxy: Fail early if there is no slot mapping [PR#175]
* Remove hard dependency on libpthread [PR#177]
* Build fixes [PR#170, PR#176]
- Changes for version 0.23.12
* Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160]
* Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167]
* Build and test fixes on macOS [PR#162, PR#168]
- Changes for version 0.23.11
* trust: Add extractor for edk2/cacerts.bin [PR#139]
* modules: Add option to control module visibility from proxy [PR#140]
* trust: Prevent trust module being loaded by proxy module [PR#142]
* library: Use dedicated locale object for printing error [PR#148]
* Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134]
* Improve const correctness for P11KitUri [PR#152]
* PKCS#11 URI scheme comparison is now case insensitive [PR#156]
* Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135]
- Changes for version 0.23.10
* filter: Respect "write-protected" vendor-specific attribute in
PKCS#11 URI [PR#129]
* server: Improve shell integration and documentation [PR#107, PR#108]
* proxy: Reuse existing slot ID mapping in after fork() [PR#120]
* trust: Forcibly mark "Default Trust" read-only [PR#123]
* New function p11_kit_override_system_files() which can be used for
testing [PR#110]
* trust: Filter out duplicate extensions [PR#69]
* Update translations [PR#128]
* Bug fixes [PR#125, PR#126]
- Changes for version 0.23.9
* Fix p11-kit server regressions [PR#103, PR#104]
* trust: Respect anyExtendedKeyUsage in CA certificates [PR#99]
* Build fixes related to reallocarray [PR#96, PR#98, PR#100]
- Changes for version 0.23.8
* Improve vendor query attributes handling in PKCS#11 URI [PR#92]
* Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91]
* New envvar P11_KIT_NO_USER_CONFIG to stop looking at user
configurations [PR#87]
* Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86]
- Changes for version 0.23.7
* Fix memory issues with "p11-kit server" [PR#78]
* Build fixes [PR#77 ...]
- Changes for version 0.23.6
* Port "p11-kit server" to Windows and portability fixes of the RPC
protocol [PR#67, PR#72, PR#74]
* Recover the old behavior of "trust anchor --remove" [PR#70, PR#71]
* Build fixes [PR#63 ...]
- Changes for version 0.23.5
* Fix license notice of common/unix-peer.c [PR#58]
* Remove systemd unit files for now [PR#60]
* Build fixes for FreeBSD [PR#56]
- Changes for version 0.23.4
* Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31,
PR#37, PR#52]
* The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY
attribute, used by Firefox [#99453, PR#46]
* Add 'trust dump' command to dump all PKCS#11 objects in the
persistence format [PR#44]
* New experimental 'p11-kit server' command that allows PKCS#11
forwarding through a Unix domain socket. A client-side module
p11-kit-client.so is also provided [PR#15]
* Add systemd unit files for exporting the proxy module through a
Unix domain socket [PR#35]
* New P11KitIter API to iterate over slots, tokens, and modules in
addition to objects [PR#28]
* libffi dependency is now optional [PR#9]
* Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45]
- Changes for version 0.23.3
* Install private executables in libexecdir [fdo#98817]
* Fix link error of proxy module on macOS [fdo#98022]
* Use new PKCS#11 URI specification for URIs [fdo#97245]
* Support x-init-reserved argument of C_Initialize() in remote modules
[fdo#80519]
* Incorporate changes from PKCS#11 2.40 specification
* Bump libtool library version
* Documentation fixes
* Build fixes [fdo#87192 ...]
- Move RPM macros to %_rpmmacrodir.
- New server subpackage
- Change keyring to new maintainer Daiki Ueno
- Avoid bareword to fix build failure
- Remove obsolete patches:
* p11-kit-biarch.patch
* 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch
* 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch - Also build documentation (boo#1013125) - support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
detects built in certificates (boo#1154871,
0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch) - Use %license instead of %doc [bsc#1082318] - 32-bit compatibility fixes:
* Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
* Add p11-kit-nss-trust-32bit NSS module
* Fix potential bi-arch issue with private binaries
(fdo#98817, p11-kit-biarch.patch) - Update to 0.23.2
* Fix forking issues with libffi
* Fix various crashes in corner cases
* Updated translations
* Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner - Update to version 0.23.1 (stable)
* Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
* Add pem-directory-hash extract format
* Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section - remove patches:
* trust-Print-label-of-certificate-when-complaining-.patch
* trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
* New public pkcs11x.h header containing extensions [fdo#83495]
* Export necessary defines to lookup attached extensions [fdo#83495]
* Build fixes
- new version 0.20.6 (stable)
* Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
* Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
* Don't use invalid keys for looking up stapled extensions [fdo#82328]
* Better error messages when invalid certificate extensions
* Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
* Fix some leaks, and memory issues
* Silence some clang scanner warnings
- new version 0.20.4 (stable)
* Don't complain about C_Finalize after a fork
* Fix typo h01-ch3a 1698315047 0.23.22-150500.8.3.1 0.23.22-150500.8.3.1 p11-kit-server p11-kit-client.so /usr/lib/p11-kit/ /usr/lib64/pkcs11/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31290/SUSE_SLE-15-SP5_Update/d2461017bafa557a22e90431a0c28c1a-p11-kit.SUSE_SLE-15-SP5_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2f290485bd586bef1e6e342f8762a9b7a6885f0b, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2229872ec8d1dab34109e3122311f3c1a96a6f04, stripped R R R R R R R R
R R R
R R R R R R R R R R R R R R R
R R R R R R
R R R R R ԥi{ X> utf-8 f15798c479ff5f34fb336d2a16b341f64dc631104985f175d28eb12f1df125fb ? 7zXZ
! t/F+h] "k%ĖPdD{xAq?uA~Y<7`9 'wi#9l g1vs}j*'ȇ%Z /ƊOͨUOr #6Mjzgً%gi$3]\pԀB, /!ڿb.Y+]Yh2o#hW^ @!~}O=I~w\Iұ H?fWˤf) 1
Xn
bx U ?%N8V \fgX{O @Ve̱t{$ai1= Hu|ǛCfNQ`[vG?Dgp WS#-%LJ2cf&6^zt& _hQΟ
9(Ke(sF@JwUƩ!N3g ABy|wH))3b6%E|)[>a- T+K ӧ(g͕4 oeN!
l=>¸kǟ:,=*,_sT ?rϩ.?|W / ( a^.5?<'Ll[4" \m֖Yg6T}2q=5H2:CkfD\k @S"!vhW]U~ "D@=H#Jm~ePō<\g_+DR/&m`?3˥]tȮ3{-ױ'5gWI^Z fG5-rt:Ws">},+R 9AƓ ?9C]%8p$M0枾o
7ݜD^sOE|9GI:e ȄEf O9N7ZV {bݥP|= tDs"~0.sQ6O2`8r2
刼g>5ѶGYr^& Ϟ)ym
9nqnh ƘW_0If7xP$R|lZ+ɺ5!P K^ƛ[ƵRHFєڤ'4_3yny_
@
t^G} LZ FU,Dw- /- *`RzjHhwmE˳\!|۸6߯{o'>ߛ}'N&j ґqTw]8kykZ9Ϻh8N Ez0UFG<r̓%V9M>lO>F+&}AjԨgao tbHmDL s$iv|8
u]d{ٽ8H8bm_E0\d 2 V~k!w̍G=S ԗ u16bJ BշP9WЪB8zHBRFϊFg9 irz<&Yps]"c3pxfbFF/XW@zP,k i%cIh{csJXImQ rfݼNo|y0lhF?ȧ~m1kD Dyb
ׯNONgt hZhҖ=EfBA*8]`k`Z( ޛf@dT P3O< \#OEd?(q?Ll3lڧ) FħPQ9|Ayf rPI +Ml/OvFeM Ō <ƽ`L +95^
t9!j81 W}9y;ZyIn
x
K\gtmp@fi X\>q0|Q3`T_:
?JMGϾ 2|Q&]А`E^ȣF& H쩟Xs3+ezz: QǎQyLanp^) I ͍sÌdF]xhOky6) ¦ ]>; y -5u N*> lxx}7c_ +U0آy5B#Ű?;SKRK닌_5Sv'$=iQ2Pei$E1l5 hu
cban}L;o NtnR3S
τ8=$y3O5z 5%d 5ks@nuޫ?~věRr96JVhh0 Ms~|_3aڐ =&vMaH!0"UA@cTGг5Sum~$BXV r'j
pOmQynI_
=HyU&i/,>Zy߮3-G}]^Xb I;q9/]#~MGtoH'QZakQg BQ\M_ֱ6\ 79T"|
Zߤčxn,*)q1Sggt &ȫJI\Nj ݘro_Yu6- xtD=D,̙>(Q ܂XWiwGMJT =28@>cG"زߐ`ۻT4\( @fQA?8
o$_L,W n!~=0
,ľOLT64G2awKPG㛐.+M\`m:uyx}Tp Sntj+TF!@ybR9ÿZ)90d>;'A).|ϳ-ǎ LpAm&ʄa_?Ły: CmQ'OLbԐ8,H'0?l 0 _Cw
UM% - Gtt{ .N҉[߫lZ̽91,* C]lsB*&"$ܶ! dos]h x٭}5pD1`|}N(0 GGVQ*vD`|]rXt2cE[crhU33qwLEi$4bU&mXV-Ai +,b_A>[iend]AubZpyQnh@oҥQ Sg10g= x%J>"-em~#iAQa BBPP(+Żkus3%
#yu C [&~f:
Jm9-ؖnDM9|:跄XH4+g&o$rЋ}Ɔ|E C+ܭ&oxIʏwZ2x
FG\`emV} JRnhBtIzK-3.N@6$|[D2X[[nt^G/H (drbpM4sqe֫r5%e3β9`y@*"
ʢhL^9VGfZLQ/թjEI[\ Xd3@z<>.6D)ۤ˺lnl>Hd,SU> %]<wU/ ݩ D=zBogE>Tcg] 4c2 SI uJ .UA*dlfs㲹ai=_τ{ ɡdIz#S&8F.n̔*m~t)6aL]e[rTo>/VSzmwoFBcI
7 cԡ{W N?|,
_jiå2z1ƳFp~ < T K. 46C] ӂ D9-EPN"s#F/'V_pjkw|k@9+X@,n`
47^cVjY vߪ- QQO.1>y2lD_Y~ ;cyk_IxVxM'v&}0U&,9Y6p59vQ$Ⱥ%,%jB_ ?6' mPKG&[ ),QΣƺߏ:EgX'6+$S43!rykm0(J䠝$W\՞]
{ۋ0qjzVmC|xy,d >h
!*QF.F=ƦO.^y^+a" ׯT3qC^c깩7Y;CdnY }ċ };q Ӈ_K@zPܸ亪)'~, ,ŸYbՖ+>f>߄.D `"`lM./ќy3~X)
|7Y0Cz]
]OU8lq.nqE2J &koC>k,6Nrh $O3f~ hJk J_F}0XpEH uT2b49oS!R=ܳ.f \Ӑ]^=Cx5 W}T p ~[@drmO ڈ]kQfxeN፧A ڮ`(trWX۩4,xlNF=aƼ
KZŪzP^=xP@Pߴ/(\ P"]0v $ կ.w
z AJ"P=sRiQGY^1vWcJɛOr$^첸b)*TTt AG **֝5mB c~_f:e5F<Pz fG>Y벫k HNF fd8|BUK`iѮ?0J+ÿB?
`>T*Eq wA@':"l9$D1d>&^Yr 5{c+J9_\2#u +y ޖ˭gf?.%+Yz2*g3 %Mc%V62,I)qTV4WY3|̤`MdE y ({Y ̣i IT"@ؑq(}` $8|~gI) p'7p 4e<@^>ڶl7m9"*jmxM;&}:?4iBvWhbqAˇRK@l'V6CL,
79ܰԙWRHÛXD-dzz4fYzjh;'ɫ69GׇU堟
X]UTKnb} tFe]eI+l+պmKNO;.L|jJj~ GUONt譔C93{2,8
; 0( C v½M[cx:KcdU6W-_6B}-6U^g0$)YzݹYp8J _e~<֟g _b]@ >|@ex2")if #
W
M6w"sh k,arƗ3%)eA 'L#EmHao 6 1xIQ⠽e"A;Bfآ0/ɣוo Ε% ʊ'
\9}k++ѝ&?l:QKn=X5Uq]1AB# D!.aL-b+&ʴRm(ji Nnڢ$PP pglĢE2&`ӊM4%$ ڬ#sQtoîd}[fS&w!#sU ݡi.۴y- ?xXz,wK?@dܕ*2A jzeAz(^C W'1
(xm&U/_FrۗwjF}^(O| G>E+%kADh
ӲB^@lGiX9s
}ݲn UoAfƙmok~T (o.; nmkb/ť]\JX\[Ze`#,{Ub7s >wU«~} Dꐜ `6r[vkour'7E! ƨO1T)m_)/}Z>:%t?*y¦ϛ 2l }V pbɌ+uq bV*LujTg9i##νw歹YF eT++ =0ZIrLH<,)}ɑvgAk_< ^p~v]\wQ Fw}+H2 _ȎR'#:l`b4I b< SH zyjthB)[*.@<+E#:vwE i" =t+ͧ"%mJ8&vgWe ֬x
dYӏIᛚҶ(WI n_a H+M2KO\n5T"nsIoPEJiJ
6o %ɾZB=;W {`7GsSu7a]),.fW! hчm[ȿ$g]< ttP)U$%lfYϬJ4 @@$:l\ȝS9F6 "Gd2E|"DCp\L9M GUrP;yZf$\B)T,'
=#:pvň>:Y>oeg2ŗK9lb2( {Y|
^{ Xd+?R_شE|̧_MI5a p$y_koqqK6p2}vWv|Gkl{1\DTd" }v Tv~YO.d "睈>H ` obL$ |+ +̗w= *N xQϺCP2Z˞ Z"\/Ǵ(^6?v3@Ԃ GARR UPu[ʌLŶ
aLycJ"R%uϔ#>l2POzRvl"4]rEF1渡GB%˧\*I OpuRUD7T&$StԏWWFP/`u
l̮5ɮսr~ w;鏊l4'9]vȫ8(.fXbPz H2"5EaԂ7Ը0AEOu*_, ,]+ij} ҽ r?ٶt%kgLGYT> Kp= Un:n;ݛ c]AVPH3V-]>"wՀxӖy/ >cTD@kZ>ݍsr<:x{Y R mdQPV~E2ܧBi{Mk?חG"!2fX`[2f^C ^v4Sxe=NN"oyhr͔ '53ʐ;żZ 9tr dZ2u$x+dj6U*O e,I\_2h
ËQr5W1뜷PUʳ
1,%ffvQmV|AzJuxZteB~Yv묞 I>f7Imtl=$ xU'݉-bp\`Gz_ "F?EZ+`1uj4 iC10 q_zE1j%2+V4b# 7,\``wU y':8u @Չ#:kL>,A1ګVhwyd[cfA2f>rsq!!#( 3 j2OGMkomp牝|&V?cI|#P{% zvD+]5 P\?eBc&)H t!LJ' >IXҪLGdwH Ŭd4Zٰ
OևM E)(5hFB#j;4 aൔ>uU3; q0Ԯf:|Y&dO@̩&zR9Bq\F\T)%u?jIQ%:0+MvK|dZ>[GT}+ΐ`$ڐNE#rڝh >ڂW| q$s憏Al:lzi )dCS:Ҫl:L % UdDN GiMٺ?n< r nj(_IXXh܃oV.q͖⑨+~Yk$!=36@ޫ84j&nPϢk쟩1Wj/q/ߺ ct^ rիO˜2+
_
$Mgݶ_rP ˤXXUv%Q 8lXpc~N FrLxÖm5 "N8a= u7r;( 8 cH,BN'eIB ""] #FC[Z_