openCryptoki-3.23.0-150600.3.11.2 < > , 24 h~vp9|w 8!;BVfROh É3nIG c3_buJV`k`Z<S۽ Vh&9 /$y3> - VNt!rN?7@[}ab-n):)wcibXBP l n:]Z#Ph}+
aK wCx[b@GP=yibՑbugJbgє*ϖ"K9趫Dņ]&
[7 > I ? d $ q l p | ! '
( E < E E
P E d E !) E
!x E " E # E %Z % E & & % ' % * % ( + 8 + < 9 , < : 05 < = } > ? @ F G E H E I E X $ Y 8 \ | E ] E ^ b c ) d e f l u E v w E x E y ^ z h x | C openCryptoki 3.23.0 150600.3.11.2 An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware The PKCS#11 version 2.11 API implemented for the IBM cryptographic
cards. This package includes support for the IBM 4758 cryptographic
coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries). h~vs390zp36 SUSE Linux Enterprise 15 SUSE LLC CPL-1.0 https://www.suse.com/ Productivity/Security https://github.com/opencryptoki/opencryptoki linux s390x
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in pkcsslotd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
# autobuild:/work/cd/lib/misc/group
# openCryptoki pkcs11:x:64:
# openCryptoki pkcsslotd:x:64:
getent group pkcs11 2>/dev/null || /usr/sbin/groupadd -g 64 -r pkcs11 2>/dev/null || true
getent passwd pkcsslotd 2>/dev/null || /usr/sbin/useradd -g pkcs11 -r pkcsslotd -s /sbin/nologin -d /run/opencryptoki 2>/dev/null || true
/usr/sbin/usermod -a -G pkcs11 root # Symlink from /var/lib/opencryptoki to /etc/pkcs11
if [ ! -L /etc/pkcs11 ] ; then
if [ -e /etc/pkcs11/pk_config_data ] ; then
mv /etc/pkcs11/* /var/lib/opencryptoki
cd /etc && rm -rf pkcs11 && \
ln -sf /var/lib/opencryptoki pkcs11
fi
fi
/sbin/ldconfig
[ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] &&
/usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/opencryptoki.conf || :
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in pkcsslotd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable pkcsslotd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop pkcsslotd.service
) || :
fi if [ -L /etc/pkcs11 ] ; then
rm /etc/pkcs11
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in pkcsslotd.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart pkcsslotd.service
) || :
fi
fi V b n X
IX ِ ` X @ H @ x ] b < $ < 2 + # ] b ! ); e y d x ] b A큤AAA큤A큤A큤AAAAAAAAAAAA h~mh~mh~mh~mh~mh~mh~mh~mh~mh~nh~oh~rh~rh~rh~rh~rh~rh~rh~rh~rh~sh~mh~mh~mh~teeeh~leeeeeh}?eh~aeeh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~mh~m a7a6ed1f8ef40f782e69a31ca790c25f063cde2b038f445223f2220e9d1c70c1 d1caf69263a134911257446bdb220b17b4913459189c9d970e9c6945a653d042 efb892098d67bb43dcf0f3d3a158ac2578e98a8dd4d407c6d06c9e8e5a9a3517 b8d87c198065312838eb2f058bf837482f6eb14a2a213f5387902ae2978ddcd6 ac50fa97a1d87fe2d758956ea138706d4fe45374224a65f7b02cde5c69211008 95944fc8c290df6c84cbe9a9357310caae76cdca02e92ba36c032fecb433ff9f 556dd2932605ef0c1deac1235de039b05901d764f224da372e1a845187b315eb d21d517200c5b08b3afda7832cf51121bcc4577d49345ed3f8c2d917df1afd0c 38000fba5775c98a6ade7592ef5666a48d2f1d2246199a6150f695ea5555877c bb35921d366b5175eb8af1dc0b140b15cadfeaa9d662f62765364123826c89ba 75cb9b5417ed83cc227481f8913543c0539f95d0a85e58474814421042116527 ee73bc6f198cd1295a0de0bbeb3f325ffa5acf8f2494b64a52753304c5eb81b4 ef80cf48b67ce8339605acd6cb7dbc86f5133e3c0fe9cb2c607b40d43c546a0a b8c98b64193f5a0057b9f8cfdb80e10aef80a1c948eb64dfae3c107909a01328 e42f640ec4845638385e18b25ebcfccf5016174c173c1600c4fcfef5ff224e4c 238d2a454860e33d6e208d292f2ccc5c887b70cd19eee4707507edcb21cb61b5 c7b2edc015a4560d73a9945fc86f47474ded9f4eb715b360d6aa8606fb6275c9 cba597debb07c858865f4a2557e541d8097de14772e477b46401a329a92a03e0 95944fc8c290df6c84cbe9a9357310caae76cdca02e92ba36c032fecb433ff9f 029ef5db4494260773e0c79258a72ce924616c594fcf8f5041b49627eba9bb09 138507de5b9a136467f41aa4eee84b7a0c883d118bfcc50e96ca05f7c23cef13 6e983e86b2292d8a9738d75462d87654dad7ecd4061c593d92eb33f8c99622bb e3d475bd868be2c6f7c4ab1fd551aa7d4a28cd3f45986a4a94766f51526784f8 0943affd464a7c8941d05115eaa2df274bcb96891a14cdbc3b928dfdab4a37b7 71716ffcf8e4559d268ed9dac99988bed2eb95043a8fb2244aa08ab8ae1c7231 504d88f1ac3bed5233ef3c83c2f3996843666015d7bd240ba864c541e97d35f5 59633e1eaf1f4f4ac317f76ecd9afc63c66519bd97d40f82154037368acea81a 280a8db0c0423968e6158b32f7c5e6896134ba19cc399cbee1b0aec8bb9ac8cc 6d8001cee4d5deabe400d23363f7e1aa5b958cb355fc6ffe87107ab5e51242a2 1220787f6e6a28949bd0dc38abe4e1ab96427e69f75f40624f0d104fcb9585b5 cba597debb07c858865f4a2557e541d8097de14772e477b46401a329a92a03e0 95944fc8c290df6c84cbe9a9357310caae76cdca02e92ba36c032fecb433ff9f 527ab63544f21c2abc4c8faeba47324bfabef5e1a2cb6c042aa9cc463920eb77 765b90a44e331a6955b50480fe567f1a4b114803bdfa9fc4fa1d1b10d3a4adf6 151a4b7d47a3d340fdc9cb49013587519315eb9107ccf59a534748f264ccf21f c929ae5c8434f261b6715b1886ae6ed51628786104e7f64d74adac19f0cb35dc 7da270707e961178ad3f1566e5e1b3f7262d7ce30d02cafb9c88c432a619e9e6 b725968b0bd89ba1234416c6ebf5ae8523745fd1cc8209b709eae0f7f85a0e34 e896c17286deb4f5a19c03b1669699f51c2b7868676a6894f08eb89d624d7112 e0b4f7ec1c616c0840e2ef6e19d7769d872d7f9208228c1c8efb86d107043cb5 43335648dcf45afd97ef369b1612e152049a7a81d50eb79f27aac68d61141305 4a092931971ef9235edad944aa49db3b02a412a9e4f3e50b899abeedaa27378c 861ec4420811c00176b1cbfb5870d8e6305426cc833ccf68c58bbd54d30c736e 2d256e89409199a43d8f61793becc63c9bc8766e990392cfa9a8dc0c6bc9c930 2feb0b4cf9ba952ec172f8a799767269fc3770c209a79a81ba4b4e2972c4ce89 0446bc83cdcf9ac4c4587923ed2db167486fa2a7c47438e95d279e98438c20d3 d6d1e54b3845b0f44f876d1147be85ee890095b76ccc3f96513cc9088aabe836 a522794d49cae7c22169b77e71a0e7bf662c1a9956a05166343825d44d6981b1 cba597debb07c858865f4a2557e541d8097de14772e477b46401a329a92a03e0 95944fc8c290df6c84cbe9a9357310caae76cdca02e92ba36c032fecb433ff9f service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root pkcs11 pkcs11 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 pkcs11 openCryptoki-3.23.0-150600.3.11.2.src.rpm config(openCryptoki) group(pkcs11) openCryptoki openCryptoki(s390-64) user(pkcs11) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /usr/sbin/groupadd /usr/sbin/useradd /usr/sbin/usermod config(openCryptoki) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.2.3)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.9)(64bit) libcap.so.2()(64bit) libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libudev.so.1()(64bit) libudev.so.1(LIBUDEV_183)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) systemd systemd systemd systemd 3.23.0-150600.3.11.2 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 hg+Z@ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ] @]nU\f\&@[[@[_ZZw@Z Y.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U @U#U#U#Tp@nikolay.gueorguiev@suse.com tabraham@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com meissner@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com kukuk@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jengelh@inai.de mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jjolly@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com crrodriguez@opensuse.org crrodriguez@opensuse.org crrodriguez@opensuse.org p.drouand@gmail.com - Applied a patch (bsc#1248002)
* ocki-3.23-PKCSSLOTD-Remove-the-use-of-MD5.patch
- Added riscv64 to openCryptoki_64bit_arch
- Updated the patch
* ocki-3.23-remove-make-install-chgrp.patch - improve handling of user/group. use existing user/group if they
exist. create user/group if not (bsc#1225876) - Amended the .spec file accorinding to the recommendation in (bsc#1225876) - Updated the .spec file (bsc#1225876, bsc#1227280)
* Amended for group %{pkcs_group} and user pkcsslotd
* Copying example script files from /usr/share/doc/opencryptoki to
/usr/share/opencryptoki (policy-example.conf and strength-example.conf)
in case that there is 'rpm.install.excludedocs=yes' set in the
zypper.conf(zypp.conf) - Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)
* EP11: Add support for FIPS-session mode
* Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914)
* Bug fixes
- Renamed ocki-3.22-remove-make-install-chgrp.patch to
ocki-3.23-remove-make-install-chgrp.patch - provide user(pkcs11) and group(pkcs11) - Amended the .spec file for pkcsslotd (jsc#1217703)
* Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to
ocki-3.22-remove-make-install-chgrp.patch - Upgrade to version 3.22 (jsc#PED-3361)
* openCryptoki 3.22
- CCA: Add support for the AES-XTS key type using CPACF protected keys
- p11sak: Add support for managing certificate objects
- p11sak: Add support for public sessions (no-login option)
- p11sak: Add support for logging in as SO (security Officer)
- p11sak: Add support for importing/exporting Edwards and Montgomery keys
- p11sak: Add support for importing of RSA-PSS keys and certificates
- CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different
* Bug fixes - Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)
* openCryptoki 3.21
- EP11 and CCA: Support concurrent HSM master key changes
- CCA: protected-key option
- pkcsslotd: no longer run as root user and further hardening
- p11sak: Add support for additional key types (DH, DSA, generic secret)
- p11sak: Allow wildcards in label filter
- p11sak: Allow to specify hex value for CKA_ID attribute
- p11sak: Support sorting when listing keys
- p11sak: New commands: set-key-attr, copy-key to modify and copy keys
- p11sak: New commands: import-key, export-key to import and export keys
- Remove support for --disable-locks (transactional memory)
- Updates to harden against RSA timing attacks
- Bug fixes
- Amended a new patch to fit the version 3.21
* ocki-3.21-remove-make-install-chgrp.patch
- Removed the old patch for the version 3.20
* ocki-3.20-remove-make-install-chgrp.patch - Updated package to openCryptoki 3.20 (bsc#1207760,
jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 )
- Removed the following obsolite patches:
* ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
* ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
* ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
* ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
* ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
* ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
* ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
* ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
* ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
* ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
* ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
* ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
* ocki-3.19.0-0014-EP11-Add-new-control-points.patch
* ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
* ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
* ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
* ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
* ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
* ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
* ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
* ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
* ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
* ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
* ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
* ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
* ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
* ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
* ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
* ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
* ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
* ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
* ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch
* ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
- Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of
the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch. - Added patch for compile errors
* ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
-- Changed spec file to use %autosetup instead of %setup. - Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the
following patches:
* ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
* ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
* ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
* ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
* ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
* ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
* ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
* ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
* ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
* ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
* ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
* ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
* ocki-3.19.0-0014-EP11-Add-new-control-points.patch
* ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
* ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
* ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
* ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
* ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
* ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
* ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
* ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
* ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
* ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
* ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
* ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
* ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
* ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
* ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
* ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
* ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
* ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
* ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch - Updated spec file to set permissions on /etc/opencryptoki/strength.conf
to be owned by root:pkcs11 with permissions of 640. (bsc#1205566) - Upgrade to version 3.19.0 (jsc#PED-616)
+ openCryptoki 3.19
- CCA: check for expected master key verification patterns at token init
- CCA: check master key verification pattern of created keys to be as expected
- EP11: check for expected wrapping key verification pattern at token init
- EP11: check wrapping key verification pattern of created keys to be as expected
- p11sak/pkcsconf: display PKCS#11 URIs
- p11sak: add support for IBM specific Dilithium keys
- p11sak: allow to list keys filtered by label
- common: add support for dual-function cryptographic functions
- Add support for C_SessionCancel function (PKCS#11 v3.0)
- EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER)
- EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE)
- Bug fixes
+ openCryptoki 3.18
- Default to FIPS compliant token data format (tokversion = 3.12)
- Add support for restricting usage of mechanisms and keys via a global policy
- Add support for statistics counting of mechanism usage
- ICA/EP11: Support libica version 4
- p11sak tool: Allow to set different attributes for public and private keys
- Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated
version named ocki-3.19-remove-make-install-chgrp.patch to fit
the current state of the source.
- Removed the following obsolete patches:
openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch
ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch - Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
for bsc#1202106. One test of the gen_purpose test cases fails with
C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token. - Made the following changes for bsc#1199862 "Please install
p11sak_defined_attrs.conf."
* Replaced ocki-3.11-remove-make-install-chgrp.patch with
ocki-3.17-remove-make-install-chgrp.patch to remove the
"-g pkcs11" parameter from the install command in the Makefile
* Updated the spec file to include
/etc/opencryptoki/p11sak_defined_attrs.conf as a %config file
with the necessary permissions and group ownership. - Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM
mechanism does not show up as supported by the EP11 token when an
upgraded EP11 host library is used.
* openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
* openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch - Upgraded to version 3.17.0 (jsc#SLE-18326)
+ openCryptoki 3.17
- tools: added function to list keys to p11sak
- common: added support for OpenSSL 3.0
- common: added support for event notifications
- ICA: added SW fallbacks
* openCryptoki 3.16
- EP11: protected-key option
- EP11: support attribute-bound keys
- CCA: import and export of secure key objects
- Bug fixes
- Removed the following obsolete patches:
ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch
ocki-3.15.1-Fix-compiling-with-c.patch
ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch
ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch - Added the following patches for bsc#1188879:
* ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
When modifying opencryptoki.conf during token migration, put quotes
around strings that contain spaces, e.g. for the slot description and
manufacturer.
* ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
When migrating a slot the opencryptoki.conf file is modified. If it
contains slots that already contain the 'tokversion = x.y' keyword,
this is accidentally removed when migrating another slot.
* ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
Change the code to use the pid file that pkcsslotd creates, and check
if the process with the pid contained in the pid file still exists and
runs pkcsslotd.
* ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
Always quote the value of 'description' and 'manufacturer'. Quote the
value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'. - Added the following patches for bsc#1182726 " p11sak list-key segfault"
* ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
Added NULL pointer to avoid double free() for the list-key and
remove-key commands.
* ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
Note that two hunks that were unrelated to fixing the running
code were removed from this patch.
* ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch - Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
When constructing an OpenSSL EC public or private key from PKCS#11
attributes or ECDH public data, check that the key is valid, i.e. that
the point is on the curve.
(bsc#1185976) - Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
(bsc#1182120)
Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
(bsc#1182190)
Fix a segmentation fault of the sess_opstate test on the Soft Token - Added the following patches for bsc#1179319
* Fix compiling with C++:
ocki-3.15.1-Fix-compiling-with-c.patch
* Added error message handling for p11sak remove-key command.
ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch - Don't require pwdutils for build, dropped long ago and not needed - Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666,
jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714,
jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786)
* openCryptoki 3.15.1
- Bug fixes
* openCryptoki 3.15.0
- common: conform to PKCS 11 3.0 Baseline Provider profile
- Introduce new vendor defined interface named "Vendor IBM"
- Support C_IBM_ReencryptSingle via "Vendor IBM" interface
- CCA: support key wrapping
- SOFT: support ECC
- p11sak tool: add remove-key command
- Bug fixes
* openCryptoki 3.14.0
- EP11: Dilitium support stage 2
- Common: Rework on process and thread locking
- Common: Rework on btree and object locking
- ICSF: minor fixes
- TPM, ICA, ICSF: support multiple token instances
- new tool p11sak
* openCryptoki 3.13.0
- EP11: Dilithium support
- EP11: EdDSA support
- EP11: support RSA-OAEP with non-SHA1 hash and MGF
- Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch - Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114)
The EP11 token may fail to import an ECC public key. Function
C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case. - Upgraded to version 3.12.1 (bsc#1157863)
* Fix pkcsep11_migrate tool - Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918)
* Update token pin and data store encryption for soft,ica,cca and ep11
* EP11: Allow importing of compressed EC public keys
* EP11: Add support for the CMAC mechanisms
* EP11: Add support for the IBM-SHA3 mechanisms
* SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token
* ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token
* EP11: Add config option USE_PRANDOM
* CCA: Use Random Number Generate Long for token_specific_rng()
* Common rng function: Prefer /dev/prandom over /dev/urandom
* ICA: add SHA*_RSA_PKCS_PSS mechanisms
* Bug fixes
- Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch - Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch
(bsc#1152015)
Add support for new IBM crypto card. - Upgraded to version 3.11.1 (Fate#327837)
Bug fixes.
- Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch - Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch
(bsc#1123988) - Do not ignore errors from groupadd. If groupadd fails,
installation ought not to proceed because files would have the
wrong ownership. - Don't hide error messages from the groupadd command. To eliminate
a potentially common one, check to see if the pkcs11 group is
already defined before trying to add it.
- Update the summary for the -devel package.
- Changed several PreReq entries to Requires(pre) as a result of
the output from spec-cleaner. Removed a couple of obsolete lines.
- Removed obsolete check for whether systemd is in use or not. - Upgraded to version 3.11.0 (Fate#325685)
* opencryptoki 3.11.0
EP11 enhancements
A lot of bug fixes
- Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply
properly to 3.11, and renamed it to
ocki-3.11-remove-make-install-chgrp.patch
- Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch - Upgraded to version 3.10.0 (Fate#325685)
* opencryptoki 3.10.0
Add support to ECC on ICA token and to common code.
Add SHA224 support to SOFT token.
Improve pkcsslotd logging.
Fix sha512_hmac_sign and rsa_x509_verify for ICA token.
Fix tracing of session id.
Fix and improve testcases.
Fix spec file permission for log directory.
Fix build warnings.
* opencryptoki 3.9.0
Fix token reinitialization
Fix conditional man pages
EP11 enhancements
EP11 EC Key import
Increase RSA max key length
Fix broken links on documentation
Define CK_FALSE and CK_TRUE macros
Improve build flags
- Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
- Made multiple changes to the spec file based on spec-cleaner output.
- Added an rpmlintrc file to squelch warnings about adding ghost
entries for files under /var/lock/opencryptoki/ - Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
(bsc#1086678) - Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617) - Upgraded to version 3.8.2 (fate#323295, bsc#1066412)
* v3.8.2
Update man pages.
Improve ock_tests for parallel execution.
Fix FindObjectsInit for hidden HW-feature.
Fix to allow vendor defined hardware features.
Fix unresolved symbols.
Fix tracing.
Code/project cleanup.
* v3.8.1
Fix TPM data-structure reset function.
Fix error message when dlsym fails.
Update configure.ac
Update travis.
* v3.8.0
Multi token instance feature.
Added possibility to run opencryptoki with transactional memory or locks
(--enable-locks on configure step).
Updated documentation.
Fix segfault on ec_test.
Bunch of small fixes. - Removed ARM architectures from the build list until gcc6 becomes
available for SLES. (bsc#1039510). - Updated to version 3.7.0 (Fate#321451) (bsc#1036640)
- Update example spec file
- Performance improvement. Moving from mutexes to transactional memory.
- Add ECDSA SHA2 support for EP11 and CCA.
- Fix declaration of inline functions.
- Fix wrong testcase and ber en/decoding for integers.
- Check for 'flex' and 'YACC' on configure.
- EP11 config file rework.
- Add enable-debug on travis build.
- Add testcase for C_GetOperationState/C_SetOperationState.
- Upgrade License to CPL-1.0
- Ica token: fix openssh/ibmpkcs11 engine/libica crash.
- Fix segfault and logic in hardware feature test.
- Fix spelling of documentation and manuals.
- Fix the retrieval of p from a generated rsa key.
- Coverity scan fixes - incompatible pointer type and unused variables. - Added libica-tools to the BuildRequires due to repackaging of libica. - Modified the spec file
- Changed libca3-devel BuildRequires to just libica-devel
- Check for systemd in the 32bit postun scriptlet. - Upgraded to version 3.6.2 (fate#321451)
- Support OpenSSL-1.1.
- Add Travis CI support.
- Update autotools scripts and documentation.
- Fix SegFault when a invalid session handle is passed in
SC_EncryptUpdate and SC_DecryptUpdate.
- Updated spec file to use libica3-devel instead of libica2-devel. - Upgraded to version 3.6.1 (fate#321451)
- opencryptoki 3.6.1
- Fix SOFT token implementation of digest functions.
- Replace deprecated OpenSSL interfaces.
- opencryptoki 3.6
- Replace deprecated libica interfaces.
- Performance improvement for ICA.
- Improvement in documentation on system resources.
- Improvement in testcases.
- Added support for rc=8, reasoncode=2028 in icsf token.
- Fix for session handle not set in session issue.
- Multiple fixes for lock and log directories.
- Downgraded a syslog error to warning.
- Multiple fixes based on coverity scan results.
- Added pkcs11 mapping for icsf reason code 72 for return code 8.
- opencryptoki 3.5.1
- Fix Illegal Intruction on pkcscca tool.
- Removed the following obsolete patches:
- ocki-3.5-sanity-checking.patch
- ocki-3.5-icsf-reasoncode72-support.patch
- ocki-3.5-downgrade-syslogerror.patch
- ocki-3.5-icsf-sessionhandle-missing-fix.patch
- ocki-3.5-icsf-reasoncode-2028-added.patch
- ocki-3.5-added-NULLreturn-check.patch
- ocki-3.5-create-missing-tpm-token-lock-directory.patch
- ocki-3.5-fix-pkcscca-calls.patch - Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081) - Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867). - Added %doc FAQ to the spec file (bsc#991168). - Added ocki-3.5-create-missing-tpm-token-lock-directory.patch
(bsc#989602). - Added the following patches (bsc#986854)
- ocki-3.5-icsf-reasoncode72-support.patch
- ocki-3.5-icsf-coverity-memoryleakfix.patch
- ocki-3.5-downgrade-syslogerror.patch
- ocki-3.5-icsf-sessionhandle-missing-fix.patch
- ocki-3.5-icsf-reasoncode-2028-added.patch
- ocki-3.5-added-NULLreturn-check.patch - Added ocki-3.5-sanity-checking.patch (bsc#983496).
- Added %dir entry for %{_localstatedir}/log/opencryptoki/
(bsc#983990) - Upgraded to openCryptoki 3.5 (bsc#978005).
- Full Coverity scan fixes.
- Fixes for compiler warnings.
- Added support for C_GetObjectSize in icsf token.
- Various bug fixes and memory leak fixes.
- Removed global read permissions from token files
- Added missing PKCS#11v2.2 constants.
- Fix for symbol resolution issue seen in Fedora 22 and 23 for
ep11 and cca tokens.
- Improvements in socket read operation when a token comes up.
- Replaced 32 bit CCA API declarations with latest header from
version 5.0 libsculcca rpm. - Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938).
- Changed BuildRequires for libica_2_3_0-devel to libica2-devel.
- Changed BuildRequires for openssl-devel to specify >= 1.0
Contrary to what the README says, version 0.9.7 isn't
sufficient.
- Removed the redundant DESTDIR= parameter from the %make_install
- Removed the following obsolete patches
opencryptoki-run-lock.patch (/var/lock and run/lock are actually the
same place) Also reverted the changed to openCryptoki-tmp.conf to match.
ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
ocki-3.1-fix-implicit-decl.patch
ocki-3.1-fix-init_d-path.patch
ocki-3.1-fix-libica-link.patch
ocki-3.2_01_fix-return-type-error.patch
ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
ocki-3.2_05_icsf_ldap_handles.patch
ocki-3.2_06_icsf_sign_verify.patch
- renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to
ocki-3.1-remove-make-install-chgrp.patch - Get a new ldap handle for each session opened in the icsf token,
once the user has authenticated. (bsc#953347,LTC#130078)
- ocki-3.2_05_icsf_ldap_handles.patch
- ocki-3.2_06_icsf_sign_verify.patch - Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
- Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
- Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
- Fixed failure to import ECDSA because of lack of attribute (bsc#948114) - Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
- Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162) - Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
- ocki-3.1_01_ep11_makefile.patch
- ocki-3.1_02_ep11_m_init.patch
- ocki-3.1_03_ock_obj_mgr.patch
- ocki-3.1_04_ep11_opaque2blob_error_handl.patch
- ocki-3.1_05_ep11_readme_update.patch
- ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
- ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
- ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
- ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
- ocki-3.1_06_0005-Small-reworks.patch
- ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
- ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
- ocki-3.1_07_0001-Man-page-corrections.patch
- ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
- ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
- ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch - Also create parent directory /run/lock/opencryptoki in
tmpfiles snippet if it does not exists. - spec: do not use -D__USE_BSD, a glibc-internal macro
which no longer has any meaning. - spec: use %{_unitdir} %{_tmpfilesdir)
- spec: call tmpfiles_create macro, if defined in %post
- opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use
/run/lock instead of /var/lock. - Update to version 3.2
+New pkcscca tool. Currently it assists in migrating cca private token
objects from opencryptoki version 2 to the clear key encryption method
used in opencryptoki version 3. Includes a manpage for pkcscca tool.
Changes to README.cca_stdll to assist in using the CCA token and
migrating the private token objects.
+ Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms.
+ Various bugfixes.
+ New testcases for various crypto algorithms.
- Only depend on insserv if builded with sysvinit support
- Remove obsolete patches; merged on upstream release
+ ocki-3.1_01_ep11_makefile.patch
+ ocki-3.1_02_ep11_m_init.patch
+ ocki-3.1_03_ock_obj_mgr.patch
+ ocki-3.1_04_ep11_opaque2blob_error_handl.patch
+ ocki-3.1_05_ep11_readme_update.patch
+ ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
+ ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
+ ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
+ ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
+ ocki-3.1_06_0005-Small-reworks.patch
+ ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
+ ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
+ ocki-3.1_07_0001-Man-page-corrections.patch
+ ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
+ ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
+ ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch
+ ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
- Project is now hosted on sourceforge; fix the Url
- Remove cvs related stuff; tarball is produced by upstream
- Use %configure macro instead of manually defined options
- Build with parallel support; use %{?_smp_mflags} macro /bin/sh /bin/sh /bin/sh /bin/sh s390zp36 1756135030
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E 3.23.0-150600.3.11.2 3.23.0-150600.3.11.2 3.23.0-150600.3.11.2
opencryptoki ccatok.conf ep11cpfilter.conf ep11tok.conf opencryptoki.conf p11sak_defined_attrs.conf strength.conf pkcsslotd.service opencryptoki.conf opencryptoki stdll p11sak pkcscca pkcsconf pkcsep11_migrate pkcsep11_session pkcsicsf pkcsslotd pkcsstats pkcstok_migrate rcpkcsslotd opencryptoki policy-example.conf strength-example.conf openCryptoki FAQ README.cca_stdll README.devel README.ep11_stdll README.icsf_stdll README.token_data README.tpm_stdll coding_style.md doc.mk openCryptoki-TFAQ.html opencryptoki-howto.md policy-example.conf strength-example.conf system_resources p11sak.1.gz pkcscca.1.gz pkcsconf.1.gz pkcsep11_migrate.1.gz pkcsep11_session.1.gz pkcshsm_mk_change.1.gz pkcsicsf.1.gz pkcsstats.1.gz pkcstok_migrate.1.gz opencryptoki.conf.5.gz p11sak_defined_attrs.conf.5.gz policy.conf.5.gz strength.conf.5.gz opencryptoki.7.gz pkcsslotd.8.gz opencryptoki policy-example.conf strength-example.conf opencryptoki ccatok TOK_OBJ ep11tok TOK_OBJ icsf lite TOK_OBJ swtok TOK_OBJ tpm opencryptoki /etc/ /etc/opencryptoki/ /usr/lib/systemd/system/ /usr/lib/tmpfiles.d/ /usr/lib64/ /usr/lib64/opencryptoki/ /usr/sbin/ /usr/share/doc/ /usr/share/doc/opencryptoki/ /usr/share/doc/packages/ /usr/share/doc/packages/openCryptoki/ /usr/share/man/man1/ /usr/share/man/man5/ /usr/share/man/man7/ /usr/share/man/man8/ /usr/share/ /usr/share/opencryptoki/ /var/lib/ /var/lib/opencryptoki/ /var/lib/opencryptoki/ccatok/ /var/lib/opencryptoki/ep11tok/ /var/lib/opencryptoki/lite/ /var/lib/opencryptoki/swtok/ /var/log/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:40136/SUSE_SLE-15-SP6_Update/70f9a20fe412535be98682cc9d3fdaf6-openCryptoki.SUSE_SLE-15-SP6_Update drpm xz 5 s390x-suse-linux
directory Algol 68 source, ASCII text ASCII text, with very long lines ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=e45c33afa3b89a88c1850bacd551855e257f9b9d, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=c94063939919baeb93cf95a302d2533258a785f2, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=b3721e43e2a2e3b1d74adb2a6d731fa2294ba19f, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=47f3155ee0cb3e31a78a3ac4276276cde934e0cd, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=51550b0c3ea0b7af4add862589f0df28a7873dbe, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=c48b4ad82e9dc5d58e9bc25192615f1c229fa10f, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=21872fb7590d643f4bf637b4a12cc14b15b94204, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=5de7182a766f4d543a2cf8711ca6730398e50e06, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=f210c24c22bcaa1306fff54fd2162ea78305e750, stripped HTML document, UTF-8 Unicode text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) Algol 68 source, ASCII text (gzip compressed data, max compression, from Unix)
! + 6 B P V
R R R R R R R R R
R R R R R R R R R R R
R R R R R R R R R R R
R R R R R R R R R R
R R R R R R R R R R R
R R R R R R R R R
R R R R R R R R R R R R R
R R
R R R R R R R R
R R R R R R R R
R R Zr qI~ systemd-sysvcompat utf-8 fbe9e3e50795feab039890a2066f9d607ebf89fbb918666785c4a03822c71a80 ? p 7zXZ
! t/K] "k%IN,
V!I?0:B`?HQ#;UpLtT*a#VZ9K|;gsgpm8G$0ivX9=n_J+ô 5KL sL L8GCBSH|8JH#2 Q/x-3:e#'8V Ѡˮ<>hؒrmuZؖpeҀ={5KSRF#N~ %}L,yϜOE ?9u/ Sdm#F\{A
>@{#=$ h&;q+U.!* .6'-[ .18 ׳ժ>D`0j. Q;)N)gBf^f]Ü >QtFB\%XwIj4D1{%vws-lI](UڟU0`
طp@9xl1 Iy!wM>fm._";$0+r'9Z@زDפi߱XmI& W1<2{ָ:P`ԝxjsU1k3יB?k5$:~ o e]L/ 7e"D'ꠑw] ށv , T+2+]xFB<;j.# kFhcP.D܌:FV /uқ30KJWW ooe+ᖔ5d֔Hʴ*=yњ==O"=fb4#R^\!vY֮NH !f#rƍ2la0$z ʅ>V Yy%hUWF.< AxJC['oمY!AF6\QOSD]"1|_( yJ6Ey{oucgy4x*7 &"tx![ 6 bZYa`ځ tt-TJR oZ wgٮ,zZ2̀1|fb
T)/UPՠ))=F&[h<*1p!C U[ Qp^BGnim)i0%CPwY(
HOиX{~5fJcrK O K%}Qz'tf]\N4Qe¯|?NBF \g̦ _
u \0 Ppʂx\u=tE`&1
Gtv\e"}Yr g>4UUG%u DugGRHV,W"l0 Klʽ6(( /brqc^O)hҷ2A ɏCx tM`T
DCr[_xrYb ")RQ`c2JrAF]"GS-*gЙ~nлW.Әq>Z7,U\,l7[bO aj(nD_]v6ң7Fqa!!% σ~f;0"y?ڬF x}ƣު7?ϳ &y7}^-e| &w
JDu=pF(2Π&-4¡ukM l>;S»X[;j͔Lц~+)AI QĐKV~BzzgoqV$ ͜Z#]bGӬ;{h{
B @&?l
>Ib/Н]%r}>W43}:tn+l W(8g)Y GBxfCyj% ݙ1#(Z,ș2j`w$ ׯ
m1PuS! NLK2#RuV](P4u
@6OtR
n@3wb~9qCy1kgirFgB:,5On1LuJPݺdG&f6ÉX57<_=ʨZ9{`* H&+-1|j!I]x֝;Och͠ktDNMk,_G >ժ\;µRn4d {-O3uŴ氹Q\@8b ؆Dj .<|-It%!0~JvYfz5e7ϴWR,|JB<i4N9@I{/ _3SAfA Ɔ-fu%TR+d7j 4oZH( [ lKw OO
׆=6Qƪd n@r&
Pd dQCm8W9<2/M09hzK uK/Ȑ8ؘq*/&GnIveu EhwF1%cju^A)]ʺ DK}f&XlfOk/C&=soS_Hͺ0J4 M罗|V6Oth Rk{
̭ Op 'oǎ Zޢ AB0 1p"ro]DninMՊY_k'%jRk
R ,0Ah&z9'R5[Af& 4OZrō92#fz)*>zlJK{$ w+tOBuӼǾ/[?w f3F %*0`ElQ ;|,ޙ"YT]a9b5Ii厦ȡ >7riq.|O7B
l> | mlDe`E>GSTnWjjϙugjr.ǯÅ: xnEmY/ݨGA,mֵaLtڥ"cfp $d 0 |PFʻǩ [AR7AH7b,U C 0}
'f]`Y3R!Vxjd[>?&wdEsE]chMna^r +^d~/4L /N hk< $^uI&d bUyi%tؽ*NWS}̽5 n5GM#~Tk/g
:Sh_fc)+m ~P.tϠ#5_OEA7'4]tt
JzTf
L$H| SxՏy/$RHJn]b32i t ?jxpkq0Kn=WfT: +QX@ rN}Òg `b/r++f&c\4UY8> hc"
-#YTQLV==MWf1;s"
a (އMLo,^H{4ZI+}uQ[FOꆊpr"NJupm];FXGQOFeDi+s&F=$ KAT34w&bh&((Scp-yRk^cQCzP
P,dixq}̤-7<]6G5 =zLK/]o3.nViОf];OS#wjtR cBW˾q|\z #l /tj}`.ع
eL,
"jJ|pMleji!{sK[VƋ6' lvݴ@ ppK@ |NɞYr RA{˰G3OKsO1m
Z! ug%xWtvmSW&N :ox69 ƕ`~J/bgU%'I9s&jlRp
zЌlC JXM2Xdt y
nveuQ) 8i]JEPS_oQ\4 k*j8uhX2Y߬q+C
+pDAj(Wgx X+*W9 McO%@N$5ێSOѻ 8
az9`M }>K#3 `}|Ň,0 ~=mwSk*܇ě~:gcLq$gc աYJn&`6F]K#=Zzh,`Ic, (Qzt4BG,O/p'VE r=? ϺRK kW> &O4 U6- @ߐ=窆qށ:;aA gcA6%<)[6A7_kƎ,T@g CQQ",)8Uvdخ}21-]%Ohz_e t .-\ÊOXy{ m9S,[CMKn_Jf)5K8byG;?G۰8X^Q Э`>BsJ~x܀AKO˸cw{(+=z0BfNDf+F4PΉ 'pi ^ ?{YZt?_Yww8 YBP1&
:km!Em h+r̀c{˞Qdzts3.T3g8Q}&Υr[T ?xWD]*lmXw#8Ծ84 @kV[5-J'l $8Fܴ<|8<g,6JN4ߨs3aL#u pNEˑ!〷G|F:Qxt+b|u9QO\ )+P?j')
TQ_
_rGw@sblсKf,Ԣ N5fd:r Q7sޫ5R#BGTVEeoAPF+CM#bY7S?DyxCe!) mm1|IهZG
ERÛP(^uA/[ QIZUU=8qM"[
v5ɲqudxh-_* a9'E* *u7ATQ礪D <(?$ K;Ng&Πt38^+ R`}3` Zڕd^(+7gi}8okQji
鰬L8*a؞fD!$JII ػh} VznQ`F=Tq~|6˹DGϮ]j_c{gllB+P @BWɣz \t#/ sUxEvm Cv챳I ">o
T _a9xCi}ѭ+KP|(WWP,N/\v˙Ē\=kw*=+\˜MC}D6lvF'[ys'푇C"Dd `E;1Ս5/dd߈w_ Ո
FI~D_7 1JoJiklM"9WV3CjEOJlVBX7X qjĜ ɐL;) mGČ3?Ն]<8B(Ǟ?a
4-;t
}"}:u)}*JHF{+0LSr4TT~@차]m߿I]Y]mس-{N(+
1T| w=Hl{[z36oQa$){nrtMwxo Yr]``ca 'FT!&hF
R:LOSvvfM8 %9l50N&USX&/=`J5{fXbS c4Iے& M
^L@J k`:
|z&+ownY!s;:'ʢ Pj^)kiղl+>Q b Am(0>"ɨ0ŐuB8BM?E.(}S 5??"&J %A\ jڬ#*n JcKn#:5@E<4CfIX@)[cRWbqÂImh }@O04 '"gxc-zp慊c(!8帋eNT/Z݅4j>gjK#.]@1${+=YCNKHAg9]s.f0WcjX խ ooSYW "W1°p)WM;zs1Q
A(-$'"QKk922ߪ%
`/ݔ
d${1Ktorܮy_C ^C0s~ WJ0ՕoEj}?eb uꅆ=A :Xk?O B./0R [ZJ>qUqkH3;-1z%Ԅ?%r5dEQ=A^$8ꔸ\jX?Q5Y ~4 I
3^1j lN1? t IE>%ALt;й
RL( 6 g<{a.ȒÛhlXڸ+gq ($X⑳=
?3ly;c}gM^MU0p/0'dxZ[QB>d˸(>0| MICTSssͪO)m6Qd"A8ϲ9#F8A}ex(].A@2W"غ 9_1i.6dOJ
Md\avN43xWVK.'iȺ2I"7TO7Y&0(گZoXwJCrj6͍bu
j)x=NF`SجBK_WLVr=;b@d!'EG'_72RB0yO[7zWoud.{p5KQJkG+Df ITk #< &ʰra%~xxTE~Z[ЩӨ1zx_}vuגyt34INRQ|L/uޟ ?sPѕS$@aqkDl0 s` m S̐;W{?KxKG@js%E]j?> Gb{ `q4ɈYhgf1 0 PIj$#ob7霁OpXeݾ ju4!bxv&K 0J)*?)5і̞5ɍm"hlr NH3 l~щCgk(
nYK~P~CFq:c,5,M upUirofL& A2cp 8AOb`" P@"OW
¼&|(/Rj1ͮ7T7+\9 X%c])~>1w
s:5x;.taۗ%wzi*yȳ&բSnQ<~ c+Y3SMj'yejL1x4oiQ0je
pܡ}*㗥 qmϷ g!})ڪaGX`'eUHvK:,ZFQLYؒh \ gѤ{X@n5uj}B+tə}v 63|gV0 7ƥsv΅K+[FUC8@0e"X>/M>cpU XUai)+̱5?ʲ!?=82 "= WZ+ѱ NC`F-@x[=( $4睲{$=@@22L: ZkW͇E_(u6xyWnRI +
.A6:<'^
z" ۧ4ܢvx6 Wީ1 @o3闠|D z [z(ӞJ7xz}s
-G\',&~>RpV1=G,iS$!+g fC Q]1#s;G:}% ^2n9>=䅂}7O9Rs&䴻]`:e 7#U`r!l elI, L7\eί2?
Ӱd{@ٿ!ͮ(ӕ6n K;>N lkD:ci8vFi?,
:XE!qOCj{V+LR
jg Fb>Eqha\-VC|9ʞ$J M@)"5+M`s(a^z5zL D|総W̸Et%_,?; Vm#$А&R UK,v{#ˀ-c - <60 !HF*3;အN> @ʓX^կ@INU(1\A V>p/Br2GbilRG<Ｂh f>}^U .V/ my8`Iӂ e)Ju[ 3PBHҔ܊RtFl
,YsTʛMGf_@&ޟ.(:vӕ[H{-E_\+!u~S4ALL}>; }dU]anJ,ysu&n% ?:g'^R i!NjǝX@54CX)]l cS+T=>c6EGlcpxDvPN?mU){a,F%glԏGaF^9K@# _hƤ'LZ⦯JY/Ψ=M80fN,vu?
4 {`x Gp9Z-q5CR+rޜ12kA_0d_G͊EHJB1N}8 M,eM$Џ⌟!" LK'#
phR R"%6 kM ?=rVr /6jRsq%UN O3
|GjA'Rð y"9Aɲ ^,rlmXo zSng!::c G7[m+#o[ u F(x'vcԦt 9֬{D:<Ts]DnrϦRU/xg`BR`sW~*Jכ lPW$˗xuҒՊ|)ciu6 ] JU9
rP%\ JC ֠hhJ6ɿPyE<_c)16Am
vzl@ vc(_:s"Ed\-ӢE3L-Xgnj79`7w(z;<8%
^d,V &4/jYp
YZT^WSQ$hC~ <&_s_Ól *A4;3/]}U}8݀Okd1[#k:wV~Zc@߬5 ` Sq
w5X oN9b;MSnhIMg_[RrRV smw ƼX[0i[P,u<<3^&9ϥP7h#WdM'i&26S -kt+N;1; RUI)[;u%D>e:b$?O#v75FP}Ye )ׯbRx^i]@:͑$*r>:<Qg H hUaP
'mS2g.Ckz&HrhELźZ.!! =|gFg0ܺ(OUE`&sg`
k6(pxe(&E o5Nlxk ($=QK +N%mY7}zaMPS)%K;[
$R~ד$ \2829 'T6M['M5ĻKTl-TgÝÝ ="Gs e*`[ kM&9_Kz5BCOS5^dD8~ x sHS)70lsɄ{%gh|pMK:;PL>I2 w8~[-D n?t]_GPtȜfpqypy2XL0![iv~1VTu&[{0{,{⮗[r)Y.`
Sy[ϓnT̉OgmC2zyi/pN;黮XqW@ﯼ"m05!Q,dt7*Dȯ4r3!pR(PF]u^\p~{I;̧)\y:+ %AXj_- gu{`D]|_
x0 -4(XخoюΚQIܑ_wIs
8* @)62K]א7e Z77& >9}}O`` m>~`Ats:KhOt%{ۮ1z>f*GG[vmY: pPzH)33qfO`)+J4>!G zJ+3b E!qK|.a=4^~&|ek\ȈHt 8k 7Ii 4)͛
+|.'RN0m EpiS9FYW3ȩڧ
z .w.`D~X6A\
ֶx/5ܰ{FɗXQ21q6 uKL o/7TrFA] 8k̄Q֎J`v]?}r{z*tc K<~$f\e쌧lgd(_I6b_br!.&Wڈ]EE;?ճ?=@@۰+{.}= f* !SNwD$xG0D;
H&mtMDsz
ف4XL=0e_q+}$"vH-;2C 'Ϟ{ٔ p}˗ԄD`0A)Y'ީG>yF3H,Ce,u1DBi *2cq,<N& Yv=,VQkLP DbOf2CB& 섢y^7ѻN<* y~0 F5a պ4_bkp~tNug][*txO&u&2"E7"<:jE-IC0GE_dK cPIZdLA9m,@Ds;Xqew]_=}bU ፍ/틋ĝ 6dE 2>Ǹ1,4ZR`7xs^YGEdO&^9-V|X8^pED=H" :ȼGӈ8C a&?cm*oR<#.e/]\2 |_a8` ^D(qY7hjZV
n(2 b- W r&s&dK`U(bU J3X2~ y=IӔ=f Y
ERg;%H^3!(}V *z(5LM 'FY ')(gQ4D'IHspq Pd]t=c0P=_Ds\8&'l1HYH_
! ~G 1
.~֝G[&jhM tCG:X @*9Wۻ }6rCIkI2)קP"ht{Uh, `-t_n> tό
v֜~%7S6~6u;LPvŬL&rX ñTSByxcp0ܝma
ڽ!5:"QS´Y
/qM倰h }Xs&^D`6dz71f$_x$no{4e$=IIK%*YkIyqodAO&&?,AHZDHWcZ~I4*%l&aeDe\*
%X[I[٥ظ; onLfZsh N7v01b\O T#m|D┯vEu͙m8Y< q ЭX,"Z0A Ϊ { Ԯ
Э Mg۱к@)W^δxY A5?Z4ۍ^K"o J+|
Ŝrx.8!k]\i0jk!S aFS5|jLρ {/{.~d-ϼv't6_w©/%I Q*jtQٷ}s
}澓LtxÖ}b>Ԃ'e "2(<{gdڎ;D,QN`-J83=3̺eQZՠ5U#Y@T)r
%j
K^YEjC9k?_ӀNC Q]'6@i\$xy @,]ЏF n5 p
6OZ; TPXx VGQhdt ;!c;v*KC:'=:a&h n_ Qܿ21KGxuzՃVÄ+D3aꝶ&~Kq*zer9}
fQ)rck* h pj; I,_)f;
]Üp11Czq*9swGN 1D4^ʭ =pj^ߙ6*ۄ5~0#ŤsA{QLh-QwJ䮼AToʩV[4G@ کZFD@/2F!q&4}mGeTb8c>Ew7 @+Q͈1 lQ`k5] ]) K
F|NU]怋wsQtVHz_ *Y СG]$\I[̆G-F ~1@0k:RRH<2.?~jQOe>nX '*.k>
Rj0Y$yUY,_ N>> O'TD?1&Z
RYTp/NG҇2gvKHuJB2VD t1vX_zotrYV[%M/')"1~ %p!Xy;l,]0G,ʽ9QoJdNʤUHq~+?|Ԏ1j+?$)SU7:^Q#LvJ,)k/tlE\hΈ[^s]ĀRPBM4lγxEE0,@48}@]me/OL,Utqf0M/Aar1BtНdj
r 1RI /-(Hj,&%vOx.}w4ẖD6=#/ 3cOIӎ ou1Jz.bL/MnX[oιAk|F2Sx.RM[5Etԭ)U&T"%oɚw/[m[MBSP|]ފ_YX$]UCi,l qJ9%.$
VɺPJ0U2 |.>!X}NnaԹZ4:y@VG1 .|=3>
^qmM!ۖ4Ph3z \t4
[Vv~+" mFȾI,yi#oL|.f o0p=B0i21\d x!MӌLP1+,
=0ye%T-A|}Vu37Yj5 zTk`dZ E-WrQ3,9UjB 8l,_R.X d:E:&WeX * vL^
r:! 50n7pS] togD
iE PE"^s1SqOa|4% b:lS+Ï|iĊ"rxOX ߌҡ&:s`C}XH/#nme32<_"O͍[/~UPYeNa (&LXq'PqV[WlN)^w
P#W?6А< a%*/ c.R^0]Q.&᳠qޟ4QSվN?-#6MޠaE=f; mma3?~669(%rG=yR-+w/%h//=j\5kC"2 xik~ _g^pݬ J*1w}vr:f)c[J0ʂ=OMkS]&c|h㐋]SE/ȄAGDnY:KBLMWr%ndgψ@GN Zihl bs0h.} j]J!~.>c:
ʖ?))$3x6Vd뺹oH^ &X jyxpwR D ޙ !`Hz3&YZ{NĥdMJ%+| |I|'K]pB9նcc/'sii]P髷ȅ::esx2S!B6N-I2}Gj莞 !nWWzRJﻗ5Og>rF$ R a[ӳRw {]N<*Mс{JW*x`^o7 AYiNӋw=
| /KxL+z<>^s ͙
Vegf8Qg+ݖ-2e99NC f2 bTx/6uZ>V#7k&zod+L4»DX_+H ?Vv? ,y[+tg<ԟy_Xtyođ.35R:KUZנ.q4
k.ǥDP唁eҡ7bOz&!Oy\fstʽ}]7 lȄ3ﴛѹ_Y3 DL<T#
¾= ٟrp!jK&}ѐ&<tU %vݏۉ|{M")G8~OUe ] h[WMR m]ĐI6eI&qI ڽVMUBWj{Nj f=,|rdOn3IC?ۂ?4-$~A'y@u\j-jYLvIr(}zg+I>^ `F+rw_t^WuKVan7NBփ!u5kM~vuy<>1h; ba+Jr9zs mi[*^O
u fOQ[:t>PzN4,Jhh~Xm"ׇVh?zȫ`{ ߏ>82cj9
]~`]Wl< 짡9@ -8S3-# ?cj%/eUN6.H(հy9G+~ԾedR'?C]QMolz<" -^ø#
H>]@ G/`jfSf2@D9;IBN4 pӁ 0?_TS0 } n8VqK.*~vf=[H?NC_$zx||E X_@"RW:
.~u6^-JR38gЛ;a :~E𡟳ʠ`EQ+',E|-ޓ?4] j0*Aq` QQ{ZQ jzGQڝrYZ)8(oʀi
dkSڎXomd Wc
2>&s~˲è:E
YVL/fnG~6yH2Z] ?@Ibٛ4vj'/jп)% Z#3QLKL p8|؊ϰ'·MO4/ɱѴJ*j9|nn< ]Q14Ht)!Q} `Y!mdt$fwxV w{!v8v8yZ]1ĄCo9M F|0"2eM*? ƲFuG[ BVT ֆ( ;rTZu'lyVSΎhց"lm};w˓A^nNc,Gbyk7UjOdU߄ o U˄b. -ӭ'qAޓM:i'ꬤ[L!N{2bʚ^>2 E2@t [ پ^z*W Pbps~f]4W$G[WQv5ٕ؛mc gǂ~w$1,IE
2R-0e~sw;ݷ5l8nٹAlwa~̿cn1,en%Q='05t3$f S|'~}ih$U=6xb qQQa/ڤ@ rd~g2VpvsojWճ"K=\s+!B:RٌJ1(a | XHp pQZcc%IQe)q>yǪp\xdOzݦŨnEU{kBi=Z(t KWݠ.MPoW!LjԙW&(eG{]C5tu)ٺ(>}v\c :%ZI\FmfM&GH.塸֙;dg=| ur-GW Ke|F0 ]/}M7TAj#lٺ| RDh *0
g1f|9KUZ/3+5sY"1o]/)^=cOxmd4]h*D.06<m&WHrY,3k6.xlP}GB^ 99.s74G<@*?Z3b<8^\_ӛ>Hy/,}Z뱍J(]0TlfCku)>
-^p(#1K
xDkV0RdAmM}%]UZM(x_Hk,Nn>#i
K_JYٺNduvyǁ2yO\ΐ&SthbzYcN[]IA'&ѾR=Æ =t+}֮2jZzU?2u6M$m=o2!W_={A&A8 K.m2E |
Գ|:
ysꡞɴ938?Z (+5XEq :lq4h&;'Vk bUk) Й/ j &l^aE(z8qűV-l3-ϸ}~` p\\#>hYK$+dC7R&]%3VeyD\L㞻Yr RM: ڼ yl+zظ
lJҔUd4hI))+=z+(* :p)VH6Y0mt0)# &upC
QD:#Q[J8zZ"kuFf$") 2+k.Lb eW]N[H,xW $&aRm:eBOKjX_{Sf\B
Y&Ho k dS!z a:Yh&~8O%<9OQSV>0 zVh!FA2Q oťA1): %+iKZQ^QۑS ȟ[oNuxQbq'~3\͍jW%zYWE k8Dھ[^\9 $a`oք0Q`=*vir4;qTK9Zs|crTo
I=a" "d^ Pa߫ !K_`zG]w]˿ݔ>n *QakjV쪨>-.b٤PQ
Dp÷OYk6DUdtlIgϲ
$>Bޱ 1lk> m5A\jWU $ FIn)_'8 #4$hq/WlYot@_7apl=LL473.ΊGn?qkc4?ĦE5HIi'zLl#\.x픆5JS"9vz]au`t$pI-c*GZ1-tGkjv&P
뇱jmA0rcU҂`qÝje^`\CƒMy0 2юHN
R[TBj˞d5$+ޡ (RE x ` pGJ݁S>rU\y<-q89v3ig^'{!uX>1@?|ַMW *cA2ZdVLNՁ+Ǩ^PxSH7A]B5NIA':4kS >3 !
#B QМRc.K-JLP:):j3`} 6'TEb6NP~-m*8IMN\t웢
EHȭ#N-O7uZa ScvAg'Wo\[ eywDFN{
f\/Ħfo~"<'Tlt_
٪ ׃ %R6ZSU$۬\lc$L1ΠZf~"n]d9PwE
)a_ցw:I# AtgNP! U.-",ds6&C̰ omec gFԌ/WH@ATt" rg =qK](oYic*a|
S3iP.? R< +?
+Hv6G) (,ٷӻ~GMPC +V&_{%% MU'eҿ $l) ۳As Ǻ:T5pI&6Fk(3De)8>^ /{ |_H| Ճ n#f,uA@"Q^4N7kreK. Li0%;PUca۽S>&Z`KI:9DtXF%]>
a6KcpIBj1
4 nw :c+*˥ԭ
j{^dzI,J,y,9 uDU9-Yc5; F:l g)!67)醢^r`G9$e !+d8Po}t==~+spʫ@9DlT;E[_TQKYN[#}#1z!GtΈ\Z -9|9 6@8
!?JL7fo۲6rbn>FvPP.9CFpG1Lk# @9C*;ohƏSjkYRR tVnw(![%\$ Cڅ3lTLx+z;`RF&ߵ;St~#(*[.[.0# ^fKJFaH&l`0{ab
U%f
aꞃ3m6!
ޏ9tosNSD| t2{)D PHfԃ@=ZN2 Y~+em Vwu]zwЭF_ԅHtcDvK 09̈́7}~>:p#}}s^G @Sa_;IjA@U
C j=mNjN21OG`b;wJ 'LO mα[[?dQ7+XNǜ=4^ ;doۦ( 4SzR|L!|K\ަ5l۞[݉GSe76i36H{}mҡ^ y9>俅hC:z9U|l2)sӞ|`Ycj=e^ WmWw֕XcI(
ʑ=+\ kMvY\cZY8> VزRl `{|xMbR^4j00H#G):'d)b>ZwҤ B;}υh]eiFTcW뵫Fzlr05BUiH"e Ws TCW
;"ae0%EuO-ȦR3F p2n(YyW`=*1nzZ#)G
퐚lhem zvqOp?pp[j}%x&o<;p` |F^
t}&L ~ l~>}L`i\d$юRm1YrF\\ rQX܆^W\vXDeW8a1} #qb hCL^\P^AU[ Mˑ6XFqr|7ᐌuR?ݮOլl_g(kYUQs*hae] okDyKw##L{TE:SIV>ib fE,K >`fX~Ѝ}KKnWxz#4 % HeIs41)r@B/Ru l{ߌֈwk?D~S *V
8y fB6.w TQϱw|-i1*-/J"sx=TOpGЁ,C4{
c3MV_ Hjvu>=DRd/t(ڧTy#9aWSwP7q|VQ'~'uQq`Sſrci=@;Pgr>0)_ )X6V}?#֕Y
<+%gF=L>[VHGRJŀS5ҏ?\Ap
2Rtk3;@/T e:v?`ovR pt+E.EՆowz,:}7IN52k_ҪPmAmoc:yĂqډXx{Im`xKpX蝘 ,F=#s HGGd] gdΑR=z PgI:I?NwcDAP mۓٰ.^np0p?# &0N߸]BvTEi4 ]U"c X_ ;& 'eEpHHĎ*RH,WxQf ]'M + OxݩƜ3}J #8(m:
2q4\VK
PhvWfƃZ܂Yʸvöխ a,3ӀW+SאXPj0?9Ī%zJ [f%Ȝ'r]R%>\
uAM1[/ګ٤iX_i_IX:&5Oб M85[Y&X4Ӿ Y;*]h KE?~L$Q+:1 g7FW =Z9߽;wu%Pҩ<]8&
^Mr=pc8oR.dciȬkZi7M !l )5߬=JmrY,xr wY*
/KP>(?9i$3i !bxt [OΫXF ;4 c@i`3:VrUy]l7Nͺo3?twV_q'|66&ޜ%K A;mv*`t@ݥT
$-Qs|S&h=q)>x#3?٥!=_-
g!-[ E v\!n~ouqƏxp;G@4Ϭ`
Vm+ߨ/pS(Dk>jL>g"]Y ݜ8?<N~D@*X~dTt!N+sZ|b stYv NUl_x/ckաz,˨(\dl bKdJ
E 4.#N~F} 7S@Gxs#C'l&%+Fu
1X窊v2,,}XtR!ڴw{\RPqGi!KqĞ iRBp2M1&l* W|ι _bspX;Ƥ/mG
\:ㅫc\`=i6(fpX[ˤ߆I
x n̺ z-}:k%X( '}eF0H)e i|١FDD$g@eك9
|{ Ds;iE!6y^_ADyqnC YIc ';-; |bJ^p0dT_nɄϪA#t.⟞m>
|Y838&621aQɂw
z3o ShئS P.^ SiF{!|;iPj*p`sx男GDZ|]9l< _u#VP3Q+W/$P&p5zZYx#<-n֬ԜsY2:inpV̰
]P*sAg
]be3xjg\nʦ~ #OjBW*0jȧBjєMZd"Z~
מl_@'; J-=_
Dza`ݚW -%7itT)V3 H~PXz%^0G;T6h #ʻBnzE_s$
%y3߈g^B 0Wo̜ .@>cpy>}UIOozL0Q~! . f+/eQqeZ D9(;z;B0f'^;gq@ /]VPfN>T3KML^$c*Mpm__Ӄۑw_OVNCO_E--
te>'?WpuG, bJH
:RJ21{ET-g۸Րk/h*,'oJ"
[{7'dHX 4$@̎ܨzzq"$H0ģx*R?R$qVܷKVE}/!]@j=9]\wb˧Xx j"{[Rd>wu[l#P)#9~'3f7I([T)VBF\X\F.31t6tV^F6ɩV%zmq m*`QT͛ Q~ hHDHxv-h65삤֗xN
ZT 1RF
ހr^;v/ڷwI5J)>͘ Qe;"YŧwZП 6[
NQblxoH{קtG%Ht><1C[oAy) U\(YhITAH;#*3h AwM0ӉX zJޓNR~ oc & aP;! wpmr!O=VxQi5[Cu.|)؊dM\
)qAVܡe g8hZ&d}
;DC"|ŭ/ygFK w^>#zE,JEo)|=QiըT.)v)j帛(gC\9|ͤl5W{O}jY,YSr%L'"Wb)73Fu5 xtn|؝6Y
o 'YȨe"SE70|X] RR `:[:Y:ԝn3U~Z}eK <Ӎsg98WuI Sr v=;p/G0-6yz0lj* =Ggie5ǀgsBv2 87P{[5T=6CQJ|eH":ZC7ArV:}G#lb!KbE
&,TF& [lc냆NI%rL9 ʦ銅V x̴χ xm,LDͶ-)xk~s~h=pxn Zb=;1$3|9Kg aXz4 fEeTL"+|h,ȷ~_Z7=8ث } [ gf,ݕ In&dp!MeQ͢Sr**)BD> R WKf5Qh6Y0 YVó~$TK:־3iAun(~/_^ -r`^35 BF eA;oe"4w㏚7>`$H#PiA :Bz͜uY xuΩC8- K[JO+4&TXizϢvU:V݃ǎc{.GJ?babtON[rvq( 6۷v~C]tvO YW}L
Xh,Ґ,pp'g]]c'T #@4͂vy+Va4Z"itsǮ~RIL`ahgLsj{-E:V0 aoˣ 0C6
(&2*k2 'tcu.!ډi3|W[5'>۴B N&^qg ~B@. ( jd)5˗m^89JjB ȷËfE
\gHDMU}( Ï6LIo?t|cf
w%>UhN%n`qbn)ICQ8`b]k9=s 8"K쿖p:L6-x%[ ɘz-P Lq#\axv(!zMvOܫҌx5
~GnlŐѺ "NՕX#
4 /ġ> vRnЧ38X*Q#rK(VOL 1j)zޭi|WnT+<$l9!ޤv.yf- t 0]+wm?J}>eðO#ìiR4G= @>G~걢B9jYq 0+S,Y1绐X4).D IVU]6ݸ_ G( \9p4I7p3vQ~ON=\nE&q4'g#Qgْ%.?Auz$$Οi\ z0k{PUwŵh{5iдˆgo O,FM7]+fPT/1j1q=x)̆ѭm,=Z;tgє7 gi/_)1ю|]3cAT dGl &F Uې OW-V?CϿD: #m%& Fn58AUk4bkŔգuJ^nIG{N=rEGcPL{w}W:`4>K]{R:6Vy_A( ԨUԞrҜz_bM d@Z
dʼnT
! | hHn)
Wa c)!=/⾀9C: 7! M;&~8L>i25K-G
5Vzv5I "LtDZggE>ASG:
H
H>]1` i0|Jv>&mw
3 FX$ƈ0S=1VCOԂ;^@W
8?&KvЇAC%0 c =I,qBQ]m-Ky ِ!tD
U/p'l{dQlULԍJ
̼"Oԉ(v;=d7Nؑ5SK faeF;0+/\dm8}Gu(2$ܰ]#|]-S%H5xE_W9wG? ^O)fGT|fç!۩-21i}9CI܁6\`+cdgzYĮ.O-yM M3b[;9z2|olT/ 2zm|jLJE%p~?Er= f-$* csÇ@tn$ieZ]!*'VTq)ɛg`O)9'9Y46 7؋|}܀UvC,g zKm7% 33(|Ysu[r9ͯn^cl&iŠ'ĝ&fAax\Yu(X`c [`8e iM9{?3KUEO3' o6M/Ȓq/8zc(>V>iN3}ji+h/G#\y7 5^1h1CdeQ@fo !W ԧ?-۟rƪ4q'x,&l:NiOPfn 9SJZf8
;*'<&Qp0kD4=luD մ OE*/)@mu6}?٢ HmUruUf: : |aX-ި)Yy zބxjO;U oWA1=z
mg vuYe:
Q?MM|BaB{I/uXr6*IBg'ԞY R-NXh 0Do,MnnplX>1S/DT*rw&Ԋރmku*P7YL~-Tü!tm cip oTH2 Vƺ K ~ p8$ ,%)[
15$k
iRIYQ'HnJϮ!׆TԻ Cx?^
{nyNLF4i#XzI6yHZo EKˀl˨sXq_cૄD% O>3A;[Gg 7*uJ&,Fݥ7z&.(ڝJJ$&@}b$)-Â҉(ߡt?Hz8g` a*
/BN_&ZhQP\Ug{٪r]
5wr5
(:k"na/80;Uy~.@miýU4,`S]f X ]>O
>g [^q7|4="-Y@Jn %AgvP=xr u3 ^UbYb7AN0QQnt,ju9ڣmjj}:rOkhvVQjͶkD~
͵rL_#"\q3ySE !&%ԪTݰ!$`TeP(!q;H^ʜ R tbW:b>ږq.'G=xV^/z+ty2nzvqA)d-
Nc[âx5U7!/,L i;lH^"Ug˾ _Єzw.y3uɮ<B* + iq;Ѯ5)ia.OCAȒ=[Y4Ǔh9Y)hpYӠ*1h.i0r4tlRόRg qf gQw*ڈxiw4 _(kΆdc:ZFю
ӚZtWYe c=PtoLw5hA][ ݤj*Zm^*~'F2 aҴV]~W@^u wڦHLXst uvU*Qӂrܞ+x2<3),ВFh\^=
'&ş5scaj i!*m b96V+|zwe Eolpۛl7
,YnHL(6:XzrĸY-6~wvЧo4ְڐ~^a.n Erh}NL0/G )' =%[}&J?Ps}?-cր=|<\({ؙY D+f,c~TTN٤Y ԣ*L@:(mOĥiNW ّ"{x91>dnC*#E HyqvM2v<0Zl WIט627|=!,Txl ou&Ԉėj٘"N :tc ZYݧXa3`zUS RJ+H{=]µ<ʜ:Xy{
L0 o +ͅdU 6b ~Wj"oV_wv
2#mtRv >!KG&
̃)_#BR !pMޛ@&x&ZkIAO1["E :+JU\z\=NdMwM$N I,Sj\JޒY7fW{sQ؟'`ڧzl R%nC4fDOda{B;%ސ瞾Wkz,pl&^}{§ɥ/[ba -d)OC7ge{!Pbk֤NӫtxP>"H:q>}"VuA0 Qۃ)>
l+YPnw-a'\lEwz b 2ygX*.j#c+0,uj#9Γ8Ɠ4t ?aVy ;>k meTB7 B 3S5*ͽrȃ>7D.3ҡxg :YBW
l ZI]Mco?@BSxIyE uL~iRbj CR]Aƀo-# *pިRXÒw4NX{4NA8˔IyUUW 9%t>>rQ|): (m&^V@QvH#4 `p!X]0[L}Ot|wx9Y&'=ƎtʝC%'=ϿVf ӆTȞGX .(w
ζ> iC/ʛf|䂫>~ j $=ADR؞ \3*G^wzX r+ (a5`߶(~}ӈsMi@ӎ-2tGU
~7
{ٱvT5v2˿Wr)/2pt8~3iluf %"sQr} -F͎ib4BWӍV\dAtfG>L1Ilf8P+B
3R m{S{,Oޘ/Ɇ+1WlN@]yTV$hG- ^* G HEb3 {l֠ߠ\`bh9
jT ~u&C8.1N
;x>!x`T":E%zuU)Npm]X$N3`9|c6; c15 8y Z+u9r-@-{2UQ$A
WgT:;T5$yDŮz%ѭv!T f=1|1I璪Շk5ԟO;
VXm,3q6I)hQ^%y! B멈Islx8ɱ=9PLJ^d6䄮ybS8#u0ʕ|U!4*y^sQɿFE q(*dAS<"1{@:~/X*i .yN穐@r sհ4vQU'R
k(|1wHUf:Ss+
U߭z 9^5-W&d$cN'@b6#nU=El
^cllDs? ҟZW[XOl@V >:-BUH'+|%M)
/ZC/_n' ;3dfj[9fuvrWȫ**J/&C"
L
!.6Pplт\)X!ջT.tx[}B#Za m#L{^!|6
߲@lf^&}@
S
C^Ve- $On
Sݕ۠51+'pdf.k'`}/ m
F sm YTlFn-`8&>w0?oCw_w2>n#YR| s4V̍EN,87nSQA`S/ SwPt`y[.?n:!eIn@7:n_O-{WB9( TQ 8:u
Pr*&Ck
Y K̂YQU.NUXZzJ6 Ǹ 7㨊#>xj"=9cRi
+Br V/62/$Y,>vN.?_Sf. OfZ"P6W^okSbR7 x-41>em38f
Ɖn1:]#벢AMuqm! Tfrt4 x ,t<3X|ei4OݕQϬE
݆ VSxpت
?ad0U] 9կPk^PJ羳U dB]DVj"%AES:wxҷ#Zd:|>obo~[d6ryVn^p)]TpKC\Ҏ FP hLaRGc' 7h"2:zC@WFr{ct2#.~0kٽ)o^zO? @%hPEqϣ IZ6V <^3{epK*./T<6E]V?ytR2 c<)~K)0xQ |3a#2vߙ(T@~NAᲟg%v~ >,P҆HAH}6yZBOKLQ)6OURY]0=Љ=D2Mt[5+P /?LU'+j o}{ՊJUW%1 FpHzB)y@iHqr,LJP
[|
G!ϛw #׃ʅrEKl=dNv i
zn`lX|D=AVy4=,v~) KC3ST|Q=Lm3\8 o;2BNߵ
t5 JGW
/ U׃ iCfXNkO|K.P?$J7zx<O*]LVNGq噯<NDwo2 & tcŖDgT餫Ť`4QE@3vg>}/2[C %(le _ˑ1R*6Ȃ48p `
;UG=6xKe۸ C*CC_RU4m5Qlo Yb
<c9()>[-3`D[nKa)S鸖c
WJ}|
Ϙt;M }uqXnh~4' ^h$t m%RRBZKRskQ/[{'5~Cgp9ۮAL6<~_bەlERf +x8! MmwB BEX4|@[#?cq2?TNw6Y0;6GnzWt."aȤIy[gVz^ɧT.>>xp. ,g5x<?Sr
vmU?qME6Q|V!`2:?
Y qm6g-X$WB [Lo~5LZi49q
rL/ 3Ԁa,1r0[Ll0_,Mq5FD`/>6 48#XmuL>S= Q ]I_OFG05ȑ˺ʲowsxUŒ,y2`%$C? `K y~İQD>XL袒ݚÝTOЅ "k^5`W/8tH o]#e0o @#>yeYBgr#C4~ѬMOI{ `!S IvX1qc fԐ5Cn͉<*݄&C`e]e?q?/ } xBt/竜[- 1B5[lD _ ]n&<&o
/ejso R@M (ijF{k<H-PBa~u{[PܶN=8F/\ |v $e.2dVϿYXchIgfx?/_/lIj_|L|@q?s5dL9{rxxI{\y'G@9V
wclUeҘوn檧Ä_Xq3%9p:xYe^1jŗ 踭pON¾VnDH{J&PtJ劙|:/.kᔧ$E>n~ W 3GЬ"[ D?D۵zM@cnں
V
?4B7% yHiyj3 ny67:B z6Z\JZT?QL%)ҦH9j7aa4V#N^B&" m,?!8yhgT'ư&PB= ̏.!\ٓ?|O1zF\U]\Ֆ߮=0Fp
:$0hb9qE >V
2Q;x)bMng+[nZ[&HFLgV0h:Ҝpui |7W5їVmM; ~U=[_'u%{@tn-e M2X7 wܦJ:8"hTn`"
yA
ïa\ r*{} I$w ><]n ?5-'-8+kKT4aF,(
Q!k7p.8dQaKI U/0wY,;>"$D -/%jTz+Ӥ gle]%00] J{^BΊU 2؎ $'z{xnF`#3 ޠ0 ^ћhWzq*Z' Ϝlo%RayT8hxn&Ը*2*r}T[_f4p,'ޑ=,tAl/| 5; OA#k>%$Н^2-oKї/])xx:SL5*l?QDݍ:}a? /?+s?@
CCaQM,.c, 6oT.zmLf̌>:e BJ,{d.f$+0 huݼyomt#aȡ [τ%y DA{@'ţ5X\ 3ʤ/lU_d6{ڠ4"Zö^ aF_|T`6],>g*#juh%eür*@FM"U
ܥ=Kb4*%_y;x(M2LS_@Ϻ.ffR.2ݍCBk iۭ C0''쁛G븄9c%Nt0Y>:\z6ik!s]t{~*/,G.=n5Ft
Zn|;_*ʰi)
*6h bpXa{q=߳m(=G-k8Q0ؿ!a~֚s<0Jn8,bU躆&5&!(B4pv@lݗ(C
yǝII4d![
NY~XS:FaLDi\B
kiaȬGsFDo?&h iɗ@Dw2 M}X& dHY밨)G־h3|ԑe+V8 s6M)[:^I^4A8N>S f 2פ|YL$e$Y3GLRf#mtk~?{N
x4keY3)1p<1` >Gg0!W]'W;~>KiJns`'m]d2Y^UcW>jq<<{5 }H9i)%n+=ADŽ· 'iY?Not XNs9Dg 蠟a#Nr＇
caMNC
F$]Hf{;OQvEËOčxKĜmjt>ˏL|^Aq8Dnk\ )Iݱ+-yɠ +
2K |,W_9EkGoIz?-?Oh.>6X:oWw"3"pAju; Vyѓ v.O]cY@N(?v],+[U'VE8HQ`dED$ |Bj ]aT$m[ i#$V&ivX-ma% :_u'e1]{<~ŭ紑wQB__*(&)o&YSZ+rZ(Iejӫ_DГ/G6"@Nζ.>Vxc E /IWㅆ Ձeb:n7Xbv`%7-&nvt3|w(5,uQׯ>z]6L|g'"{g
+7|,Q A֭1NmII;wZ`!YuRWe" 6S_W ^*ߡ 퇝)O(Yׇ?Q{K Jw/sFj(%ۉ!K_$8yH~ҏ̴k9+.Ń桅pKN
a#?]&q&nlf۳ʯJFe0^!S/vyJʘN3 "TN05B|aʵkz0ޘZDUx8{6rm `]my\R}L@5Y% ;ŭE>=N n!ܩ_`),~fW"dkYq+x?;{[jv!7{8Z1Tq`S$CNM+Bj bQĭFrijϿw4cCɏ>p} kJPq:?m:h0(UM#L"7ӥ7
ighJOW/hs? 1ƥ5ʹ\pv:f/n/>̣ y UM\V 5* /i }J` 7vܐd+z$QW< Ts8 B *
Fиi>R,&1 CE NCS/X LB
Oc ^q{ӭ`L_ ;kwc -t*Q5W ,zNʠ 7&vf/x~݀ =8"#ƂMr
][$Oׯ[ V@+KQ#ް dx[U p=Y42s:McT ug*80e9dƘ|ϝjO_?rkF9Z,ZnQuTKpxT LaFYo[웽ג] m^F婴 ؚgU$BJl.b0]@)-Od#WbH癖@"OT%3)BW_nVϫfX
*i&[,VةLsTA-].ftEc'qI+4iJ.\鞏v~/S5<| gDTV xW K#)9"! M*D˅O;Ut"g
Hi32:jGrlodw9őw=q( %uv2 =/QTa:gjwģ@>Vļp":Lpsri Uѣ>P'egA ,(&w ܍w㼇,WRŽ/}K;fӵ'U 0]abR#ǩzTGW(\9 ۅ
;>Ӵ*DyR)yY{'ϾMx`??(!Z[e(qPUv/ lό,R8W)uCe8hI#IJ]z% kF*b\Vi |da|AŹ_}bZ99 <:QIƠc|YcY\"70@`E- Vw>KtmP.E7
w'~/PF% ͑pC7'7p,ߔ>I[ү0̾ 4NHXK$cj2Ej[`n 'Qy(\T%-Nzq|ᨫInԎ}
\<!+j>ͫi-p26e6 vM]r)gW+]ܮqDκ"S ohl D mPE7nZi'hŝA$SfOØ X+rt}ݸ| y?N]B i2hR"u-C
-
CJ
UGRzz D, Gs? ]Ɍ!ݾfbOPN>#_ЩM'aV.\P~LsADj y6}b'ٱ1@-XQ'wD}Iƴ+ܡ5rCW;3]e* OE_oUG
/1Q>"k 7i5V&1?Tx",jxŭ=
Ibp7G*W ku_vvZq5#B%
`Sʞz fL] niz #a~s/jˇ> A%pmoT^[$ X\9ypbTx݉|Eˬp^E]qObrT)R֟'1%v,k @Ofx\zȅG;
ZBfڅ6S^ G Ĺ?29+Ŀ%rqoq{=b^= I QE9^͘i2d%MGyY%bȅ A0d9Hfl^>Ma0&E:
Ws'bh bȨ`NZ[RU4]OB)ŭ NJF7sA &/ NwI
˔i!:`QI ckvXG]dts]s[u 2 ˢtVB\*jt+k-'U;1 mӒ Ca;2{~Ճ㍹<}aES|>cy0d05&E*D;, vgzt+IZXhnmU{^D 3 g77ڧvrh_~9V˯Z垊+VRgNXYLrB},z yXrZv%|ᆑc#BK]jfhb9Mn2nHԑ@%jз\L vWr ]X :R YOiH-x uU ɓ0yD Z;WhR>^| 1^nSG8;$__.37A; @A`( eĪO8rБ }K+.F^4dvRlqSECt->P8
O# A51|"M: g"ݕ+?&q
R<043l,i:7yϳ75dly>
H6 .ޘ{u WLjX驅y9:պdlfà t;BB=@쎦*&G~4' k}|lJkXN#叇 <^;CN6G/ymfL$iƂPrՂ
{R^) 1a9ɤaZ,^:҅S֗M] wZHQ[tAȳ\pqPh~F-30*@ɰ+5] c= 6@/QFi~lSٖ+U"=H) .sʬmB#5|n^/ #J*Ӂ[v'<џq=nʗd~ EWS=e'(D jNioA"@< 69iH~^ wΊ^^ J̙^l5o*BAL8P_#y ż-NB/i xD%Vή RLNMvcM_z {~EK@81h9g{mǠų9Az H@8*0MqmkzLm-4˸JMGz mS
o yZ1 sOۂ*cvPқ? cR`!zRsE %b*MAeO 4gR$zjSxQOUѦ[V&XBZ)-em:<'
vgaO'D"\c=cDW' p[d}j84VlR rxesljʎhUδ8c?lГ K
$E@6!)QNGHMy /Amw'}4mr*
Ϙ=ʩEL. @[v|i6 n]ͫ7張_,Ѡ[ J5GڤICvPa+
D$1> ֠NKJN )H> `Rt,:r{[t$T ieZ`S` W
B zrXA-ZM;t Xbb'9n VÉhsþNrJ3uN%kgZ&^\Z!Eވ7!XÓئ]))bW9,iW mm:kJdUAj P.*i9,O! W`R)~5mcP |릘3>xҔ5+?EHbW-(ﮣR {SZSmP!g΄2 D{jg bV@u!8CB z[
WnkZӇ: BiKs#l6P"C\Hg_0VnAÇܠWp2/86jJ$J:ϼݚFI845V
%)i
Cfrm4 zV44Ɇv_}19uudkz/%7 fwx>^c5ǹ%w̦:KS{݂3wn 4χҚO-w [b s?#ɱ«r+W%<*&;zvzBDa͓
p~$B̤ o5yqU.7@| gO2 %C]5`C,Vbk@BvZ[^d A$;[p,."*F؝[F "Z=0WR 21ӱ)LzgDɁ[,}fy/Է>*H@]*6'Vxg F˹Ӟ#I Ы G6S. c>/JK E @FРHR (,V7]c˼b%-[:F+H}70~ri~ |5)04|=~i%Td:t]b \[d&<x,G2iiXq0\4T@Q֝Q@Y:Vi緂Ԡ9TrƍhQOdm̚}!z5zxL:o % +Y~РmΒ7$^i)Z67,'D1K(:\\2O Cɚ pdB AzN5*=7:-NZ}?,_]N<x>Bd ;(MԊy\ \T}X@PqDkIHˋۨ $JO}2ޟǏQa14L 8kP|9 0
x5 q B_5fła Ѷf *wX-ZHi㍝QO9$%GKF0=iqV/{kp-wʵ#m
}Ap) Ɔ(5>Df{nxD˻ؑm@^J_iv׳Ċ T3
5z3WB^&?K1? ~v26BS&G JBsCQҳbP3k]1XIn -y $z̶Ŭԭ)a*g Ɗ++]D$)ؖn7W1J8Ҳp)3m(z\MGٵ 3 K2 YmEg
T
=fO9AWn8ܷP A,f\S2v8R3rCDB]WQooU#K?9պ^SVaԝK'3'n&""yx`:MA2Y+
YvVPm[OA#]`0ݮ ]eУBi](*R/nyoߪ0 M:{|&v ٻQda]|ws t1O >X,okB KL鬻FѮ_綧mNXqj Ǿǣˌ $D30KYH}ڐW]}VMbH ^52NMr Ǒ`*klQ8/zK}e! V [&iD lw;4vdQpzնsGJA{CdzMƽ`Kz
VXGKpwКÈŨXz0yͺh4byJMxg%߮saMJ
6 ; 1_
Ct9=Ӽ .
8
gTDs;f 1z*S[vPRXk r`9x:qշ+?ReR
(Ht)vTu4N ' >\ Yp'D'CsbǗ(/gɖO@iP
'Տ Lf߂<"gq ר%qx-aܟ?3[7ilA~EbӃ|Oxﻯ4>sa*]mFBD/R[33G3qȽ.h4T@FޠQˀW0"|ZU#hـ`s Ց X ڂHl3ogr=|ݥXD?ɺEEz*
uj֗x% J$LMB{2*VK埴G5)_ZVb,AtR0ȩY9T IE:79 bطy#` y'C7U"VMTgfr;L/N{~VC)4~Ӵet y
Gi*C}aH;lP78%U9a5l
L`-dd*;\(w?_@|
4 peo:)U % 1f=9\Pb㘬 =?K~xtb<%ů!y"sG
$=a^$uU %e|* |Et5r~\_ϫIFGy9f[~8m$>Lk5Jw~O7lߗ/^:K60װloOu`=*\b}!p_# d~c2>jQCLV]aNCN4z4Oy&lchykq` >䯙@YTf6> Y-ɲ`|٩d
_8¾Qg )47sPK| }Z*˷S <Ə!|6Qߞ_~uNgh^YٻrkLv}7.LPr*{^{ Z;
@ 2 ǣXB@ b+M
-Ld%
8ri JTd\k LQC(SqfJ&dhOکe^X/+~;5Zhׇ xCѹc*} "zmw0۠p Rh^ ʸ#LP%壜f#AKuUq%y,߳==YiЌ7s0 i|3x"TR%88 $P 6~8Z8&ps8Kq qa66 IyC/sx #.v%-P:nquy0c%H͌xw}e4GFgrr қE ̧5)_!E6?bH\J;mސRXWr df7>,!K!YzU<=m8w$C )u{OPkP]}O;jZuB$%A8 .5*T%̃ya xn.&ƖZJih==}1Y<ЋX[>j҅C}JdC! spI(WM܄ :-҆t鯱 @ [o ?$" kNY{O;&v(^p ;.a͟N)˂>DDCSs$fEyGHCKibޭ$Mb4d-P{| +uf%OrJ4G : {gǔ|AO0HHoɄv|&@y+W'G fr "N;gDoB&I|C$AX'ȡ9:@>46MK&EZIŊE oHA9Lh= ߢ | wF X͞!H,ڟ6?0=Q"nDcpiuQnY!VǞ$h|KS6F4A{?M y/@+ A=1RO5Fu~k9 L٩&<jAL{.XK% -J^- Ltg4 oǼޝbAbbیs
4_3i6eK
"P
ff}iZ;qOH`k[}|
zH< JgÃJ/Rwry\Z oB
mNXE-{o-~8
Yai.Q~B50>C*82hb= FbgȴW.Cɱ.r/ Ya)#8)Ho<u4()a{9ۻR!CzkjSn /q`rj;HP @
T_eYe%Y@R =j`zyj~,{F*⽚ nz7Nx{hVI>vqjw{ٌw FV5Ǿi 1+#d
7F D,e/4d8X7jyk!'&cu̚\c&R דW}Yc#k# H+>kʻp>-Ԫj
Vec/(~zX8z ȵ웆B$Q4o? ,f[0)'
]c$"N,-[)@P\
kKX˥5Yh۫R"nb&!w-vr҃ ! myI`Y23<
M˷ ۮuԄ`6͋pBְ{gȎlkh첂|+0)B>x +J-2Z#ʺ5)`zn
_ϥ<~:AXkиMc=u[ hQr5`+ՋTfuPK36"WzE30xRxgnr n٦d:) |xs;} wSwbW gn>$d6cW;
1zA1$RVEು vf a /01^ tǎ!UCwY]8&K,X7MnϽ9x->
53?t^b"/ N$آC- x܃ CT*'W:Xi7iT>~UXb\kϾg53vړŤ8]-ohꇗv欌R{b3
/ML* ީWReSx:TΥV bx}HGU :XlBLշkϧٹώ NC }hLq9Ɠ we}OɌBdx3~7ks[ 3?6ͲpɴC.0M%<I墌3?.6&Dml.56Q1:J=
NK|}8BIB1QP=]RmkOγ$KVeB _db
Utߙ ,]HU hmkea*i12(R[gGYv{Kj˭t )Ԍ:N&0 ހ^:fe8),: 3Sr7VgRS:P3%vkϤi:(AgP]s++T~sǩ?OnWXDik!:dh:m@~ li#0$oGo
jBIOZ \>\78.?/^A }^ LIOŕe^ǫ/
g4
p4
Q5?
*@xJ>J&@E`<0(nv 5-[Rb,Ni/(u֊l=Ӛ@7Ќj1m >DO^g|74_QbsU&y_7/eoj|"Pwu]Y/n@[V #fR9q] mQ] `PK Kj ]gɅkL zfJ.bX}`ń*=RpmǦ #Nk;{Ӣ ҽ_ 9aq(څGmIE wX0 uR̙Zd+n}t ):~'/ FxtK_ C8B& MYH{|No%5m彺)_(KG C+)& w? @2 PU)ܘ ݜĨ!h:Y҅m=u>&\M:7e%XQk5K|XT,#Kbpj/q=y<ݷ^|Im 0L_˖ws_
|w&}6r\1Xt8lV ʈ8v T JHs
dzq@ʳ5Ro1y
L ZIW QۓfYEMʁ ;2 { +ظtسd@ fqq>9R«Y Q`F>9Lp O@i0Yc*T=Vr n ^$1 oLi hcD
?l6hFWp>8i0F _ƅm43ܕJ] {t
̨~g͐@@;ӅiYrVPM-$ @:P,KA-uDik%d
r|r_
4ݞ8+o&-[~<%\
mf<}( cܣ8[X$;KOܙ)
F Gk AGv=4nDOIxtE6&9 &E)() $`Y ơp
J=S,)빫bxO?HGso,B4ݮ* g5~Ǟ7/ iW +fS|/ [H_D(X$S&@F#.|0}u}he?2kѮo]C h_"_@>yEְ vq *|a?)VZX-.dhrw/\\Eזiڔ'mN ::3sdxT:U17)
ɌxL!!u*e*J(V nʸ# G\)&] 0ki0Kf%Z[ä́"&*| &Pg{ܙh}&?h5`B %bu
}EFwYZ-'ghޙ@
0 nSJr
7`AQ 4- ge6
5[a":)u\~ib-~7iNJՅ42[d~A b4M۴-262n6">_ U
r"t кbހ.k<$*'!~\`
h JTj`/voxs}rH'\*@2#H1A^} p [zvED.B9& "aH"QFE]
`q{}]f1e$sc U)0NtXi nRRqؠyWoX2H [U|:zٍ\M~"?U" [wDZGI7z/3F̓Wˣr[bT"L}#i6. 0#drnX%Xݮb8AxWQhf8>w'iny3R9>ICi冭\Ղ4tP-lUh
"z{{I#[YB5mpC#RS)yվ(1LR!^< 6 iTA}!p
9SiJTs Ejf8-AסWsBlFDuI B Wz1 OLPCՆ\F|IrZ|7 ($QzhbQr6];>\fơifX9
uyJGq h־!NJo0etuf^5)>uLl? E>
zruHb6)wA`\']}2 C\l C"\=m/Щ"L .cdf:~#Mx6I#"٥Ya@%ZX2βr{KZwms#R3Ip H5O2o>9/9b qh]?Btmbx˰8o1|utmqNZA
I$/#+>
<㉋V+ tY泠4;qf2)1L
9n31c',99IDg FROY6ʛ ,i06 \xOuN{dmͼJ({ReOS2(%G1 b˓.5,kJh&p|{r8 sMNM15Id6P!Wc ~ 32pȕeoFm6qYjIY:. =Y")y|Y.P9
.KE -Ȗ%2'3ԑѵb_n<ϵ-
Q{j^#CM7m1 P
e[*]vt3_m< " k=~naWc_
ilQ)@i*Kss ) e 0}
XxHx^ f7Id,F
|=JI'/DǾ n&E dQ"
T: B_`(g
31L2WpѲ Ҳxno?
Gﾼ)H aoSfMX?փmQiaϽA 0aDS * 4
ΤgElX
0gԛ.x^ހ(<\j65Y Ȉw/ifKo~1v'o ]/*ބH $$=cF C<NG1;G_p \N0 \>Z qil[Y !wܦh ,e(q,7'J3?ٚggt&`Es>GmΝaf#CpfqN$ N6lg'~T̓FXL{d(v6h6~AraJ*jzH@Xz1c%&zs6/ fMQX"w\1$tCs?yr,}Y7Ts_mK*?do__^Y[KMbe
Um]ncW9zCB Q5rs=M
3/ N6=: sw]1 _ vE[;ln=^hѴ~fJ/i>}~'I^G 4#+%?r\FE!;B]R5FCdHijof܅2#Q8 b|4(̘4"ErZpІP\[d;OJCl/05E u|) Ed ϖ d1S{K 4'汵qB9G5R@ /q{Is 4@#`*(kaayR
pKh >}Ocu[NԂ/ $oE3<Lfn?&)Jh-^yЃK6ۗ>>4-G2ɾ UA4b& }n02sKW<wH8*]F߂gSMrFvygjsZ7i?'R7LrD9ddQ1nrΟS$X ]ˎ*
#3D!6QjO5a>i{9Ng2BlY e
&q_#wKcB6'W`&8!=榜3SKl˕1 N9)!t4(T6 $Śۡ&,F{i{yg,DCp쯬dEuyH-2(qWr$ ioM9cQSJ] >pw/dдmfa[d?1j)zn#dd.8a1XEh' dTT:0NILz3xs MFGd^7t6q色S
da0k #9X
%r+|[z3D1$ ~*$ID ZpvDqBj& Jeq3掺M/[Vc7wA L: 7ʬ b@*R '"%@A42%~Uƾ]쨱FgoWNERa,H *M*2`
ʋ_jטIVJ_~gCBs:a 3"(6FV
4E Ȭ#0 :u6!|=l&' GP[7TŢ&ljuђZ:C
$GVJgʆ @+9NTW`o j~ 1i˄:
L- D =+F. `1">JAݞ,/a_NJ
ldZVg$k] ĺҳ%TRN-AD7W|$.^}m#at`*+fa \`2x9:Þy'{Џ|q,VcmKqI!Fn].N `c|, Pu whڦw0iF.w/=pˆDNTrExtПE{s;Mķݐ"I ?fKT"
f ֞g T>I_G ұԎq_(*qI;^:3 e7Q ?Y&!B q tެ t"$CJ RL}_q16ۛ)ljo9j,}u~Yג Z(U0vveat Ȳ&F>X8]=
:%>+ 1ٴAeZY Ȫ\hY 5"EVYdDL&u芀t
iuS<-]|2xeFx .?_ @+,
_fn;݂ CM"rf- _>']<丒[|sXi1h~UN&d]7RL(iIgV$PP7"sJcmv.HT+V"\XX< S]&dI#ø/F ڷb$%Z+g^߮Ǵ,pDSBoae
pl C ^:w<ԃdz ]e|8i:Q@U>)2N IœtX@ϷC@]ʾvt[PQ-+d#WQg7y*Gp\kɸ0z* U#eV K-4`Dܚr9 dڛR
Sy/aEjAgE*DA|{( )*CR$=/AuB҄]j5/Zc2Mp Zi$D-f^ZJZŦFp G8a {ʇtU[-"Ǽ0 VZ [ s<&~䯂eAY7&&G;_QIL?y*/] R(fD*#P0( c_1rfGgw 2r/elM0OxcW+n{W@&mB:~Ӝ0 N˵) 0|̱N}V{gT) lB@ o U4"|Qm :tם+|hübU/
R.65OVXAG^x
/^ ]K#/s4ex1(O 7p1=dKCc %g
3ۣ|-5:;OyP@F , d$;gG5N==?\E>Ta#]UuY>GKc;pEM`GUY5ʒ%Nj&l33ExdƹOwÈK~ X0Z}H0" ^ ) ֏(F2\(&GG6vEuHjo8@V:D9U 8&h ͨ)IY
[ʵ5C1i[# ' jtW Ez eQ\%a ֠T E7ю+TǕ; 2RS
[:d-5Օ=`2~UhZ`p@~SW'D~kۉO#3F'$P]X EM&= UPj ` h0'̓y[ lD8OXNx_6@ϕ|@oH0dgt D} (Is'H^Y~=8_&Ro#9ݡ^ηȈ$;$SPz:S<\ =B(/ zoZTlJ\A Ks {x"?
Z7Jv ^ڿ0e46(ۑcsGZ/6 ZYCp Y߳iYHKq%.Z v;">ǎg% dI4Ý=*/v1s,6r[Sd q}uruEzUиugB {B<`\Q_-#4Lm3zϯzK++ M;Dm N\`ui:k k">
.Eu=O3|XN@7|yg59ozl1Z/
3 ["&[MFn@a,<2 THj \UpI Ý).μ_ 0ig^!~yj}Z47 0 5rO{B
phMY?qyLYE Gc!yGBI
IE|H^^]#M?
Oh^q֡ T W
NĜ ^Yr@::sI9t!E~y(7hy uJMXe.wɯ)Ȱ{8oY~_V2,N. BD4֞w Ե\F~8V>΅ $6|&l8w. OdpTG5m7V;n0GȬ)ey &r?F(N> Od%ŋcQ:^$C(b 4;j`n-RP 39IF1:ҹa@`@G(WF
|[p dU%B*)[oFc\ xZڷ'~MeɅ(g3kS>_1
vMNM0)Xr2ۉX!S +=cӰaUFʍ0{>=_5,ym_N/ }L|]Ǧ>h
?ொ'f7Aqz <~fDⱡ~<@lxg0=\ht{? v#kH;#,(Z냦 &saDf cjzEBeMQBib05%_O0M2eUa(,wXbGp6-C(^LRd3؎"ׯ
[[W.8 66Xb-ovR 1]E ZenU棠qUE]!"pkm
]) }鵤KH^BW#˕&Ϧ)?4gF3TЁQ $u/C" Ut ӺS- igTWd1@5ǹ^PO_8ȍypxظBĘ)$롺Fhv *Hx]}=>[\9 1k= E\kKiPLs>A=9[k|Gef͞QL `f-M+`=.Vx(H|39E`h" 8b~M}r !g&H3֡( dڀ9uLА ^tF&/lޛ:kB˲@E\WZuܔ\VRq+^+ VA.k`4nn'38F;ج-|qN X|ѵ=2qڢskuKLMK
o2jkZ?(V㯸 >thلufe\<PZ2dO_'ؒ Bl8Ƭ\1CKN0Ϩ4K@q@+=M.`xr5bY_OR3ֿHKCwh$ 95m?ӵ7ZZRxnaZz{ bg2Dz>pNt{o%EVgr _QW w@vgH*@:cX]1TAR[܀u((*7IٓFy^3siul-QuM`mcCNF bNp~ۋpB YaΩՀ eoF\tl =h5 3 v%#|opnjP5
ϙɱL"!"݀\f;Ev;]0 1!Gۗ5o.Q߱$6oU!i/0p[jkWϹq9Z껦; (T;9{^J}4pm2tG[Xs4.ѧI m.E2%0+2cA]ؓYOyzl[-*4l=B /`&X + Epz=۱F=sW0=5 +~YU@Z9S/BrZ,zz
{ ) O40 V2~Ï!
|XDy]C{YԤ;L[Ke * iQh̘8g]o. T *4ov(]< =ި brcdvT|qȌ>I9"zg}k^r2hTa )%;1Iϯs_G&ǿIha:.sݵh< :Fό Y|{E{- %!7^>;E=
óFDG&.l\A mX?IkrPN.VU۷d:v|}uu][4V4VoT= =iױ)Xc_tUHH[Kyc^薷P/ÏP+ >^wC~EMb!#mrwe_L3rh]KCi@7rU6xQ6q :mCQՒ2ev Õ +t!`tF)GXN:AP0x^9jBZ㍟mk/($Apc:O%M%4"8EOYxJ= bWĨHTMTd
Sqa=
$]eՑ.ѿjs/,݀D=hCySĽzl$!giE:PdfV g$|ɗ?BqR3}r84)BX- BF#[/\
'8i$m'ǔ>{特P
ϴ?jR#䱥Cg fwE9&9cW&cCi~P :=Ǣ)^m BAtmK(:3qӅߖ.= *H鹙5#B&? u"|?WfN==(Е oͯw
na 9]aR#_=j?+?YCO3eϑ{]Jʞ
) qd4lU TlrK N! "ts"p)8 1iUcPS$
<舨|#bW
ZNSi}kn EgxcB ۶B$9JT!}Ƽf
nN`M!kS(Qv~+ ,ϣ&r"lsm'µ$̑
6C6B7P^ˉ/vC
ɥX? '҅G`Pv*"L]-dI9@#K6@xL Gy `-*Dd}
).QW 9AU9-@dz4
Y/4V#mI >OPyEA ;μK$ Od~o꒿>Қ"fŋ½}_Ez~棑41Ϣp0'ߺ! ,rكB. XU `)/7DPS& `P(91/U 4
P:T@I:m_TL66a("(W$Q=PJhB@τSw07\g4AGX!֪F44o0IlK9`
I4M- %ړo.rĹK
,sC-L9ǴU V^M5I1 Pk^WT GF | 2ꚹJ× Tcܡ8a
eɐX{f.{ a.UtzbA~٬tg/w~ )"ȈGWq.nӎ Y`Vn0D\wj%qybpCJi1ߋx%W/Mc6t5-,%iˇd}
{2j')Dmhϐ
%~D nS*
gCcd:ő\49$
&pbV.
u HJz^JB/_~l\և`C!!_mԮ-8ۥ-6V=M?/cKֈ
A _96{cU|`P" H`]T][,H/#.Pd^>8 qWV`dԌ ;H epwD}̚> gJbىTގ'-h ^k5au؇IɧY nO#_*^a:XZ`=|̉L6Cb(oF#ig }4.)50pb$qOs"cަ\LGiH$c 'UL9?` ^}CB9&B3Vp+(r0mUn
T{_S 8䛭$TOGC~s p]s<8}
zC9+&t<)ò ?w ~ Gu'U-kۮ̬ )eB&\ȧ7̻X$Ko##U)X^ڗ;>2h(js@WB^ ,HX'B- 41ww|' }ѰCV\ Cc a#{Kt{Qq;bcG[Z+Hq.A\S
5/>W/ R1˰H*&Mޗp 4f` X}äs!jncWM a@Tqhe7//&4ö:a}Ku yiJt*`!!!v/"}&cpLcյte`w-T=Fn-:" .I$ i-F
0 ,: nP2 C H O2i9X|T6V)Cơ. u Rz+NcLwµ3%w Wk^?&B.9:5E#avX:ÌX0X}H-
DxQ'hAEwf Mc;`FNw4*cK5/7+AC 2;ɜN<Yv X :!smq{0[ $2Fux!)e5/ zvaCܶb* z5! tOǯ~4}q5m!0^/?~6ȶ'*}DS
i겶FًTXb-}QM-Penc
`r 59qVMzX6ǃ(q\{(l¾q.b[`B.9
xU,boN˃҇~Fþ&0ah܍j,Ds5R4tOY|o#四Tz)n|fw*J ].Eg5pKRpG/"RP&b¾QQ:Id
y'aPs; N;nDg:W o"|f-?^q` ᶅMڭߢBcW4+Vn^~ ? P ~n`17לf
icL:9 ԹFmim|ua$=VQ #k=_z}ig,.˶u\e QR^ bn;2t J LѴ^/A.@H
9
^-ԭx貍Fg9)Vh3AQE7oޱECrP `A"Ex[m V?8 SqD(72:5ld|zi9yb_⟭@1ZUR}%' I]1ꠕUztqT(
+QH>:P(̔a-%0
})hmb ,wiFjQve
3m˰I+^f3HJ,~[7d% ʼnɓf~]yEbv5wʭOWi[ ) 73PⴸŖ PJ~tF/;J.p8nR60H zϒ]-|aH HZ 98 OR[IqA] +2Hu q2Nez?Lv5ӮABC%hgLFч^6~dd\{'Eu_a]UAl2$).>\lUlv:e*bUk!
h ɔ9/=u} wj Ugr%f #IXQ1B؛)!{q Dt%7wP YkgIcȥ&w{δ:X/*ȮW!?3k ~SwP4Ϫ1FaߔnR{&Br nɌahn )0 rݓ-M WB ~ 2!0gm7 DC>U0^)c#~7o/iSWQn #` nUgH&h>vPPD$O)%a)8X0!C})6
v-B ɱ
Q}Kk|w nlԏ\d*^ 0v]nvtU4wN
& 6@kY!Upv Hʃ@i KCV %`&^"Uߒzmb- 4C34w.imxM F7
e {ULD"I۟$G= rԎE ০dtWF(\Uxl gվPg*jnelO97 s*O~
?iTnh9(ט [uw8ԾRt!~țJ_m\>(r}gn4WS5L/]/(/kwe :z aE1H,sg{- -[AP" _80Uu嶀>W
Or'YE'7>>uxfwM{ *)_}㶱6%dtѬs¡Q| zwܪk jv8[8Ӥ?wC}I*?WzhXV[$JgV-{qU jFt=VJ /6O .~V/ҟ #0 WQD. o<πx
sKd9oUײ3H6fXgg(ݵ4| v,eR$.oA(
[f݇qޓ?cșD 3lonF)|`W bJ`,uYr,LPcò-\s*tnf abp="C:([Y I(k)Lja [G-[AV-o5 [?Ģ8eQTȷXF z7kaxqldD~u
#A T:ttq. (m8c\˥J-L
ft=sn]Pڛ9|C/gV^,;'E,c&qH7IPi7.C t@#*`ͷLuUoTSd%{_9 t\|p0%0z Qpɭ ضlSr0\RSYšY-B;S s;-e2&lT_-wޙ$uu\B.cL3ix Sἵxv ˠɐ7~0&˨ssg7J5>=2~3*.?%88ͣ &|GRc i;^i'k(r;ʹm,0xsy" A;Hܰ46ZRCvy 1'>dDZz똯6S*(8}&NB!t T) r(v)d<\C@l]'04S%Iۤx,1p=s$Ç#2q `:JOJhzW<1 mN8gC,%VR hE.qz}BVVW,5[OSV&:->9{t Ef+6Bk._96U8kSwh:E aumel x 讥6%oBO˃Vsy4
8n)Q]ʽ=1B C'Lϛp3|( .ޝ? ˢїbEUp(=[~{ygb9,w͏Oz@%݉LN=G7g? J"y'lDȗz+nV{MVk =6 E$/.ƻۄ)O ,]+*U]Py>SrL8P
,
[YӤJ,*j[e\qvݹv[;$iN2'D{qؤ+ ws~2a2+x`g;!E t\hQTпNdyF6J KUن{7- i?Ǣ<) \RşFܡeS n%y22 TcvVʏtKHDa$NЀyQ)Z;qɈ|j/yL'RI YBWP#J=-<$R 42Ko3;锗"?>zCJ w̝ ijZ̏z|?|Fw7c8J"ߚ
CB ({\h)S|AI{_S^#0EsjBۻ:>6Im);w" M_4e tP3D \)N.(HO 4xr~]KaW*l7ʇ^ }"`$@=ZK6'\+룭45; gmu8Ѻ9Ra), aM5y}Fڿq0wce/rIR8sou!Z#6kr-ZrԑF:NzKc:穏_']3*. 5kjK\R!=o'W,ր>8x?b[\hJaV ʺ}Z d7, * 9@%1{) *DS
G;n& xq H%-{(L (Z4I4 ABe^bȌe {fg)R\L!/ &3qNYp
~dP!ms3mXLfqc bs}6
b1/7ZJi1|NE?
FoDDh̸ z<{f`ϞhPf5 {b9q]E={]:E34APvY2hhIoDG+kϟH+U_f[p_ȳVK ]Xʃ[Y?-Dq ӪLS luV?grTZ ^5>ZА eݶMj# 1y '8!UwְE3ӈ'Iɺ.EgKl^T QD 5z!Ow: ^U/(006Ñ9k-)/2 ;G.hI<^{ݤaH+Y!͞ϴx>*Ox %'K ~Cy
3g^ 퓅C(jY\0^M%LK) E
hxW6S 0Py@ YKz[12թ"#akh kg ;h[Nw]b x]T '3m՝s!;ԝyx.`^4 j8S70CNE 4XB/EZ"mRN[K[J Sְ2 - 4Wqp}ZCdtrpK {,x.JũbAyj7 UW
H%sP Ж֯b;Y' eçaEtiۨW E]u{Eg _BQjskagavpX1U&p",3NmYߝ=1XD,ke t,In8YXi`gtuDmR2Te3+NFҚ)M
:DqM px(=E%
CzHrzqo3k {.|@+̒MlG[b]ơM(_ͮu U-jqD.~@+I?nܬ-nYN:A r|/TI D
/V$ OQ|GG d#WMfwY?1Fmn{UI28j1E| chֽsǸEȂ7gy {RM&'RO|
yÚfIP'@&g:c=R<`p Y#
9.Z Bh%l = fFy܁(y̰vSUzb11hm ΅˫6BFBYRf_[8whh LyUA8T{b[ 1.v64G vtBC}p_eP7~LuCe>ռ0tsj mz?{[vg
crN_m:dILB뜾n!x.N
An=7ǖPkq=@QX5Ӛ'4/A 9j,o±n[_ < r;C% ֑CAx 7y=NrjB*55I28^ u l P5-993E娄ڒM\`Ӧ@W*OnV__pJ[{Ca] cL()\g>6[l. ω.~L{_>cStU-߆iu'BC6bw"r`5@}/"Rq w rvul\BP_1ڰF 3Hfok|Rw4"7$ l>O99ɱmpHݽ-u!9P =!` YUoǩ4m
A?p
~At鋸(5+(
{)fM:W dΙ~,./oGV1Eŏ`$ {0a]u˗ ]idZK~ 5cʩk{>1_ 3s @ v!敓ơd+Domtm 4׳1:A44.ϿeS J7OOf q'a6[cA lſOMPǩJԽ`շ(BieoBˤљ'L1,ڿ-{j ''6d#.dMX@%,,em I_§CniAxN,TLϪުn ucY@E7֪b yfױ/^ ?rg<вikl迆0hju
]]kriN[7P}A\)f:y E8F;
3SDEr(
[MɷXXS\S1uEtSk+Fz=qsvq'cTm暹cyb.utJZiq˔}GDp|ucڣuwSP"ޥ+g5@Oxÿv5'v G
)fрU)xL[ !