openCryptoki-3.23.0-150600.3.11.2<>,̉h|3p9|qmH!eުBh R_dR0;]i̭fa/]FK4jFRSg!!0'T2[FY,ED2Űnڞi:-ąStHM\~\T,+Ae@*=ǪlS4mI8oHWK3je=M]N#JtpWi?.bus nI?d $ qlp| !(  (66 l6 6 6 &6 d6<6 J6!h!6"l"##L#&M#(&8&<9'<:+<=>?!@)F1GH6H 6I6X0YD\6]`6^b=cdmerfulwu6vd w6x6yAzCopenCryptoki3.23.0150600.3.11.2An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareThe PKCS#11 version 2.11 API implemented for the IBM cryptographic cards. This package includes support for the IBM 4758 cryptographic coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer Cryptographic Accelerator (FC 4960 on pSeries).h|3h01-ch3c \SUSE Linux Enterprise 15SUSE LLC CPL-1.0https://www.suse.com/Productivity/Securityhttps://github.com/opencryptoki/opencryptokilinuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi # autobuild:/work/cd/lib/misc/group # openCryptoki pkcs11:x:64: # openCryptoki pkcsslotd:x:64: getent group pkcs11 2>/dev/null || /usr/sbin/groupadd -g 64 -r pkcs11 2>/dev/null || true getent passwd pkcsslotd 2>/dev/null || /usr/sbin/useradd -g pkcs11 -r pkcsslotd -s /sbin/nologin -d /run/opencryptoki 2>/dev/null || true /usr/sbin/usermod -a -G pkcs11 root# Symlink from /var/lib/opencryptoki to /etc/pkcs11 if [ ! -L /etc/pkcs11 ] ; then if [ -e /etc/pkcs11/pk_config_data ] ; then mv /etc/pkcs11/* /var/lib/opencryptoki cd /etc && rm -rf pkcs11 && \ ln -sf /var/lib/opencryptoki pkcs11 fi fi /sbin/ldconfig [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/opencryptoki.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pkcsslotd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pkcsslotd.service ) || : fiif [ -L /etc/pkcs11 ] ; then rm /etc/pkcs11 fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pkcsslotd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pkcsslotd.service ) || : fi fib n9h8s]b<$<2+#]b!);e x]bA큤AAA큤A큤A큤AAAAAAh|1h|1h|1h|1h|1h|1h|2h|2h|2h|2h|2h|2h|2h|2h|2h|1h|1h|1h|3eeeh|1eeeeeh{eh|/eeh|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|1h|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-3.23.0-150600.3.11.2.src.rpmconfig(openCryptoki)group(pkcs11)openCryptokiopenCryptoki(x86-64)user(pkcs11) @@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/groupadd/usr/sbin/useradd/usr/sbin/usermodconfig(openCryptoki)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.23.0-150600.3.11.23.0.4-14.6.0-14.0-15.2-14.14.3hg+Z@ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ]@]nU\f\&@[[@[_ZZw@ZY.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U@U#U#U#Tp@nikolay.gueorguiev@suse.comtabraham@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commeissner@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comkukuk@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjengelh@inai.dempost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgp.drouand@gmail.com- Applied a patch (bsc#1248002) * ocki-3.23-PKCSSLOTD-Remove-the-use-of-MD5.patch - Added riscv64 to openCryptoki_64bit_arch - Updated the patch * ocki-3.23-remove-make-install-chgrp.patch- improve handling of user/group. use existing user/group if they exist. create user/group if not (bsc#1225876)- Amended the .spec file accorinding to the recommendation in (bsc#1225876)- Updated the .spec file (bsc#1225876, bsc#1227280) * Amended for group %{pkcs_group} and user pkcsslotd * Copying example script files from /usr/share/doc/opencryptoki to /usr/share/opencryptoki (policy-example.conf and strength-example.conf) in case that there is 'rpm.install.excludedocs=yes' set in the zypper.conf(zypp.conf)- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914) * Bug fixes - Renamed ocki-3.22-remove-make-install-chgrp.patch to ocki-3.23-remove-make-install-chgrp.patch- provide user(pkcs11) and group(pkcs11)- Amended the .spec file for pkcsslotd (jsc#1217703) * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to ocki-3.22-remove-make-install-chgrp.patch- Upgrade to version 3.22 (jsc#PED-3361) * openCryptoki 3.22 - CCA: Add support for the AES-XTS key type using CPACF protected keys - p11sak: Add support for managing certificate objects - p11sak: Add support for public sessions (no-login option) - p11sak: Add support for logging in as SO (security Officer) - p11sak: Add support for importing/exporting Edwards and Montgomery keys - p11sak: Add support for importing of RSA-PSS keys and certificates - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different * Bug fixes- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361) * openCryptoki 3.21 - EP11 and CCA: Support concurrent HSM master key changes - CCA: protected-key option - pkcsslotd: no longer run as root user and further hardening - p11sak: Add support for additional key types (DH, DSA, generic secret) - p11sak: Allow wildcards in label filter - p11sak: Allow to specify hex value for CKA_ID attribute - p11sak: Support sorting when listing keys - p11sak: New commands: set-key-attr, copy-key to modify and copy keys - p11sak: New commands: import-key, export-key to import and export keys - Remove support for --disable-locks (transactional memory) - Updates to harden against RSA timing attacks - Bug fixes - Amended a new patch to fit the version 3.21 * ocki-3.21-remove-make-install-chgrp.patch - Removed the old patch for the version 3.20 * ocki-3.20-remove-make-install-chgrp.patch- Updated package to openCryptoki 3.20 (bsc#1207760, jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 ) - Removed the following obsolite patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch - Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch.- Added patch for compile errors * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch -- Changed spec file to use %autosetup instead of %setup.- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the following patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch- Updated spec file to set permissions on /etc/opencryptoki/strength.conf to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)- Upgrade to version 3.19.0 (jsc#PED-616) + openCryptoki 3.19 - CCA: check for expected master key verification patterns at token init - CCA: check master key verification pattern of created keys to be as expected - EP11: check for expected wrapping key verification pattern at token init - EP11: check wrapping key verification pattern of created keys to be as expected - p11sak/pkcsconf: display PKCS#11 URIs - p11sak: add support for IBM specific Dilithium keys - p11sak: allow to list keys filtered by label - common: add support for dual-function cryptographic functions - Add support for C_SessionCancel function (PKCS#11 v3.0) - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER) - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE) - Bug fixes + openCryptoki 3.18 - Default to FIPS compliant token data format (tokversion = 3.12) - Add support for restricting usage of mechanisms and keys via a global policy - Add support for statistics counting of mechanism usage - ICA/EP11: Support libica version 4 - p11sak tool: Allow to set different attributes for public and private keys - Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated version named ocki-3.19-remove-make-install-chgrp.patch to fit the current state of the source. - Removed the following obsolete patches: openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch for bsc#1202106. One test of the gen_purpose test cases fails with C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.- Made the following changes for bsc#1199862 "Please install p11sak_defined_attrs.conf." * Replaced ocki-3.11-remove-make-install-chgrp.patch with ocki-3.17-remove-make-install-chgrp.patch to remove the "-g pkcs11" parameter from the install command in the Makefile * Updated the spec file to include /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file with the necessary permissions and group ownership.- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM mechanism does not show up as supported by the EP11 token when an upgraded EP11 host library is used. * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch- Upgraded to version 3.17.0 (jsc#SLE-18326) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks * openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes - Removed the following obsolete patches: ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch ocki-3.15.1-Fix-compiling-with-c.patch ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch- Added the following patches for bsc#1188879: * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch When modifying opencryptoki.conf during token migration, put quotes around strings that contain spaces, e.g. for the slot description and manufacturer. * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch When migrating a slot the opencryptoki.conf file is modified. If it contains slots that already contain the 'tokversion = x.y' keyword, this is accidentally removed when migrating another slot. * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch Change the code to use the pid file that pkcsslotd creates, and check if the process with the pid contained in the pid file still exists and runs pkcsslotd. * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch Always quote the value of 'description' and 'manufacturer'. Quote the value of 'stdll', 'confname', and 'tokname' if it contains spaces, and never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.- Added the following patches for bsc#1182726 " p11sak list-key segfault" * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch Added NULL pointer to avoid double free() for the list-key and remove-key commands. * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch Note that two hunks that were unrelated to fixing the running code were removed from this patch. * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the curve. (bsc#1185976)- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch (bsc#1182120) Fix pkcscca migration fails with usr/sb2 is not a valid slot ID - Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch (bsc#1182190) Fix a segmentation fault of the sess_opstate test on the Soft Token- Added the following patches for bsc#1179319 * Fix compiling with C++: ocki-3.15.1-Fix-compiling-with-c.patch * Added error message handling for p11sak remove-key command. ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch- Don't require pwdutils for build, dropped long ago and not needed- Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666, jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714, jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786) * openCryptoki 3.15.1 - Bug fixes * openCryptoki 3.15.0 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named "Vendor IBM" - Support C_IBM_ReencryptSingle via "Vendor IBM" interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes * openCryptoki 3.14.0 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak * openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF - Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch- Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114) The EP11 token may fail to import an ECC public key. Function C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case.- Upgraded to version 3.12.1 (bsc#1157863) * Fix pkcsep11_migrate tool- Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918) * Update token pin and data store encryption for soft,ica,cca and ep11 * EP11: Allow importing of compressed EC public keys * EP11: Add support for the CMAC mechanisms * EP11: Add support for the IBM-SHA3 mechanisms * SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token * ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token * EP11: Add config option USE_PRANDOM * CCA: Use Random Number Generate Long for token_specific_rng() * Common rng function: Prefer /dev/prandom over /dev/urandom * ICA: add SHA*_RSA_PKCS_PSS mechanisms * Bug fixes - Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch- Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch (bsc#1152015) Add support for new IBM crypto card.- Upgraded to version 3.11.1 (Fate#327837) Bug fixes. - Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch- Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch (bsc#1123988)- Do not ignore errors from groupadd. If groupadd fails, installation ought not to proceed because files would have the wrong ownership.- Don't hide error messages from the groupadd command. To eliminate a potentially common one, check to see if the pkcs11 group is already defined before trying to add it. - Update the summary for the -devel package. - Changed several PreReq entries to Requires(pre) as a result of the output from spec-cleaner. Removed a couple of obsolete lines. - Removed obsolete check for whether systemd is in use or not.- Upgraded to version 3.11.0 (Fate#325685) * opencryptoki 3.11.0 EP11 enhancements A lot of bug fixes - Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply properly to 3.11, and renamed it to ocki-3.11-remove-make-install-chgrp.patch - Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch- Upgraded to version 3.10.0 (Fate#325685) * opencryptoki 3.10.0 Add support to ECC on ICA token and to common code. Add SHA224 support to SOFT token. Improve pkcsslotd logging. Fix sha512_hmac_sign and rsa_x509_verify for ICA token. Fix tracing of session id. Fix and improve testcases. Fix spec file permission for log directory. Fix build warnings. * opencryptoki 3.9.0 Fix token reinitialization Fix conditional man pages EP11 enhancements EP11 EC Key import Increase RSA max key length Fix broken links on documentation Define CK_FALSE and CK_TRUE macros Improve build flags - Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch - Made multiple changes to the spec file based on spec-cleaner output. - Added an rpmlintrc file to squelch warnings about adding ghost entries for files under /var/lock/opencryptoki/- Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch (bsc#1086678)- Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617)- Upgraded to version 3.8.2 (fate#323295, bsc#1066412) * v3.8.2 Update man pages. Improve ock_tests for parallel execution. Fix FindObjectsInit for hidden HW-feature. Fix to allow vendor defined hardware features. Fix unresolved symbols. Fix tracing. Code/project cleanup. * v3.8.1 Fix TPM data-structure reset function. Fix error message when dlsym fails. Update configure.ac Update travis. * v3.8.0 Multi token instance feature. Added possibility to run opencryptoki with transactional memory or locks (--enable-locks on configure step). Updated documentation. Fix segfault on ec_test. Bunch of small fixes.- Removed ARM architectures from the build list until gcc6 becomes available for SLES. (bsc#1039510).- Updated to version 3.7.0 (Fate#321451) (bsc#1036640) - Update example spec file - Performance improvement. Moving from mutexes to transactional memory. - Add ECDSA SHA2 support for EP11 and CCA. - Fix declaration of inline functions. - Fix wrong testcase and ber en/decoding for integers. - Check for 'flex' and 'YACC' on configure. - EP11 config file rework. - Add enable-debug on travis build. - Add testcase for C_GetOperationState/C_SetOperationState. - Upgrade License to CPL-1.0 - Ica token: fix openssh/ibmpkcs11 engine/libica crash. - Fix segfault and logic in hardware feature test. - Fix spelling of documentation and manuals. - Fix the retrieval of p from a generated rsa key. - Coverity scan fixes - incompatible pointer type and unused variables.- Added libica-tools to the BuildRequires due to repackaging of libica.- Modified the spec file - Changed libca3-devel BuildRequires to just libica-devel - Check for systemd in the 32bit postun scriptlet.- Upgraded to version 3.6.2 (fate#321451) - Support OpenSSL-1.1. - Add Travis CI support. - Update autotools scripts and documentation. - Fix SegFault when a invalid session handle is passed in SC_EncryptUpdate and SC_DecryptUpdate. - Updated spec file to use libica3-devel instead of libica2-devel.- Upgraded to version 3.6.1 (fate#321451) - opencryptoki 3.6.1 - Fix SOFT token implementation of digest functions. - Replace deprecated OpenSSL interfaces. - opencryptoki 3.6 - Replace deprecated libica interfaces. - Performance improvement for ICA. - Improvement in documentation on system resources. - Improvement in testcases. - Added support for rc=8, reasoncode=2028 in icsf token. - Fix for session handle not set in session issue. - Multiple fixes for lock and log directories. - Downgraded a syslog error to warning. - Multiple fixes based on coverity scan results. - Added pkcs11 mapping for icsf reason code 72 for return code 8. - opencryptoki 3.5.1 - Fix Illegal Intruction on pkcscca tool. - Removed the following obsolete patches: - ocki-3.5-sanity-checking.patch - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch - ocki-3.5-create-missing-tpm-token-lock-directory.patch - ocki-3.5-fix-pkcscca-calls.patch- Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081)- Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867).- Added %doc FAQ to the spec file (bsc#991168).- Added ocki-3.5-create-missing-tpm-token-lock-directory.patch (bsc#989602).- Added the following patches (bsc#986854) - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-icsf-coverity-memoryleakfix.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch- Added ocki-3.5-sanity-checking.patch (bsc#983496). - Added %dir entry for %{_localstatedir}/log/opencryptoki/ (bsc#983990)- Upgraded to openCryptoki 3.5 (bsc#978005). - Full Coverity scan fixes. - Fixes for compiler warnings. - Added support for C_GetObjectSize in icsf token. - Various bug fixes and memory leak fixes. - Removed global read permissions from token files - Added missing PKCS#11v2.2 constants. - Fix for symbol resolution issue seen in Fedora 22 and 23 for ep11 and cca tokens. - Improvements in socket read operation when a token comes up. - Replaced 32 bit CCA API declarations with latest header from version 5.0 libsculcca rpm.- Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938). - Changed BuildRequires for libica_2_3_0-devel to libica2-devel. - Changed BuildRequires for openssl-devel to specify >= 1.0 Contrary to what the README says, version 0.9.7 isn't sufficient. - Removed the redundant DESTDIR= parameter from the %make_install - Removed the following obsolete patches opencryptoki-run-lock.patch (/var/lock and run/lock are actually the same place) Also reverted the changed to openCryptoki-tmp.conf to match. ocki-3.1_10_0001-ica-sha-update-empty-msg.patch ocki-3.1-fix-implicit-decl.patch ocki-3.1-fix-init_d-path.patch ocki-3.1-fix-libica-link.patch ocki-3.2_01_fix-return-type-error.patch ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch ocki-3.2_05_icsf_ldap_handles.patch ocki-3.2_06_icsf_sign_verify.patch - renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to ocki-3.1-remove-make-install-chgrp.patch- Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (bsc#953347,LTC#130078) - ocki-3.2_05_icsf_ldap_handles.patch - ocki-3.2_06_icsf_sign_verify.patch- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070) - Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch - Fixed two public key object inclusion in EP11 token (bsc#946808) - Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172) - Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)- Fixed BuildRequires: libica2-devel - Added ocki-3.2_01_fix-return-type-error.patch - Changing doc/README.ep11_stdll to unix-style EOL - Added BuildRequires: dos2unix - Removed globbing in %files and specified libraries to include (bsc#942162)- Updated to openCryptoki v3.2 (FATE#318240) - Removed unnecessary patches: - ocki-3.1_01_ep11_makefile.patch - ocki-3.1_02_ep11_m_init.patch - ocki-3.1_03_ock_obj_mgr.patch - ocki-3.1_04_ep11_opaque2blob_error_handl.patch - ocki-3.1_05_ep11_readme_update.patch - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch - ocki-3.1_06_0005-Small-reworks.patch - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch - ocki-3.1_07_0001-Man-page-corrections.patch - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch- Also create parent directory /run/lock/opencryptoki in tmpfiles snippet if it does not exists.- spec: do not use -D__USE_BSD, a glibc-internal macro which no longer has any meaning.- spec: use %{_unitdir} %{_tmpfilesdir) - spec: call tmpfiles_create macro, if defined in %post - opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use /run/lock instead of /var/lock.- Update to version 3.2 +New pkcscca tool. Currently it assists in migrating cca private token objects from opencryptoki version 2 to the clear key encryption method used in opencryptoki version 3. Includes a manpage for pkcscca tool. Changes to README.cca_stdll to assist in using the CCA token and migrating the private token objects. + Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms. + Various bugfixes. + New testcases for various crypto algorithms. - Only depend on insserv if builded with sysvinit support - Remove obsolete patches; merged on upstream release + ocki-3.1_01_ep11_makefile.patch + ocki-3.1_02_ep11_m_init.patch + ocki-3.1_03_ock_obj_mgr.patch + ocki-3.1_04_ep11_opaque2blob_error_handl.patch + ocki-3.1_05_ep11_readme_update.patch + ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch + ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch + ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch + ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch + ocki-3.1_06_0005-Small-reworks.patch + ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch + ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch + ocki-3.1_07_0001-Man-page-corrections.patch + ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch + ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch + ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch + ocki-3.1_10_0001-ica-sha-update-empty-msg.patch - Project is now hosted on sourceforge; fix the Url - Remove cvs related stuff; tarball is produced by upstream - Use %configure macro instead of manually defined options - Build with parallel support; use %{?_smp_mflags} macro/bin/sh/bin/sh/bin/sh/bin/shh01-ch3c 1756134451  !"#$%&'()*+,-./01234563.23.0-150600.3.11.23.23.0-150600.3.11.23.23.0-150600.3.11.2 opencryptokiopencryptoki.confp11sak_defined_attrs.confstrength.confpkcsslotd.serviceopencryptoki.confopencryptokistdllp11sakpkcsconfpkcsicsfpkcsslotdpkcsstatspkcstok_migratercpkcsslotdopencryptokipolicy-example.confstrength-example.confopenCryptokiFAQREADME.cca_stdllREADME.develREADME.ep11_stdllREADME.icsf_stdllREADME.token_dataREADME.tpm_stdllcoding_style.mddoc.mkopenCryptoki-TFAQ.htmlopencryptoki-howto.mdpolicy-example.confstrength-example.confsystem_resourcesp11sak.1.gzpkcsconf.1.gzpkcshsm_mk_change.1.gzpkcsicsf.1.gzpkcsstats.1.gzpkcstok_migrate.1.gzopencryptoki.conf.5.gzp11sak_defined_attrs.conf.5.gzpolicy.conf.5.gzstrength.conf.5.gzopencryptoki.7.gzpkcsslotd.8.gzopencryptokipolicy-example.confstrength-example.confopencryptokiicsfswtokTOK_OBJtpmopencryptoki/etc//etc/opencryptoki//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/opencryptoki//usr/sbin//usr/share/doc//usr/share/doc/opencryptoki//usr/share/doc/packages//usr/share/doc/packages/openCryptoki//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//usr/share//usr/share/opencryptoki//var/lib//var/lib/opencryptoki//var/lib/opencryptoki/swtok//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:40136/SUSE_SLE-15-SP6_Update/70f9a20fe412535be98682cc9d3fdaf6-openCryptoki.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux   directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=d72ac0c6167255d73a98ebfb00a634fd56aecccc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=685393dbf2b9be8159f64572efcef957550bbb97, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=280d978ad877f50cb8448befb012fbd61aa801ca, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=0da77d22e016d77e794f66d65a2bfb1b064ab671, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=b45ddad10622dc131358cb9faabe58bca1e0150e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=704cb2879b1d01df89e15f5abd0e67345c4fa44b, strippedAlgol 68 source, ASCII textHTML document, UTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) #07  R RRRRR R RRR RRRRRR RRRR RRRRRR RRRR RRRRRRRRRRR RRR R RRRRRR RRRRRR RRRRR RRRt+1lysystemd-sysvcompatutf-83c029fe9082540588164a9dc199f7bd850e1fde376d370986acf0563ae041c9a?p7zXZ !t/P]"k%IN, V!I?0:B`?HQ#uXxSA "}[BR}Xs;Iw'0^_Tdxxyf}󒚫0Gx` /ى (, ᚰkJ[PxM9!Eb;ce/JzVW{Qh2HbϚxzFJ-Nk~GjFqc0` "_N/Z|aJOJ:΅O\8Ϛ蚉J3U\8Vc>emuClYyTQdb\-oj&~^f2dWc-R ^'[>5Cf}HA Wp;:8W^|GO ]faP ry K=}!o=L+!_>պ63{?.j?*I}|* }5 *9ajTCE">e=*H*iX{ lcpWCd }Sgzb|_^^[)s,BNo{SF: І"-eI!4.zcѱ;Y0ڴfVl  S{%8nqZTu  b3ƕ=0N,n%ȹ=^FL`\?r mmgt}Uf B?ZL(m+c0tFl ǎXR(K93jvV%x.KUftCFHlG5Nt7F[VgN:R|E :&7>io&6'~Gj}g)ʄ&QZﷀۭ?8Kk!LmEF.e7wya)R9r҅U/QZD Rv8P>eZ Ǘ ڣliR.@NW5tu>.;^ʹlg9(Ց#<*ȥ.K ȶ:>ˠDJ!BIO_jYuîu jd1eQMҏ*.aILXO<3!VE, HiY^§(Y!A*ŞS4#XհK<ד!elJԚmTw9(m)Qæ,#F*l׾kH8tm5Ɖz &W6Gv-ܯ.BjƖH( ziL]xXT!'i HsV:> ;l1xVePh.h?U4 ]&;ט-?;RY> / /uV?B cGezAEk(pD<~luGo]'b)a+fUƏ>|%\^;,OVvM!m&x\*Q/ O@@4 :j߳VyřҲjK!RuwTβ8U'MۺlDдܻ6gK)5Dq }iG8ꀄsW=@{g6F '}ۣ7EYdzsn2D}X3.5#\7x|c2!X*.vٳh k7B;u&H_@0FhV'Er 9# A1@@Ub|z4= s/2硘ôkGc"7E߱ zQȍ`^=AQC„pN)rCe=1`]A 3F,6Tٝ\Rk] j$ωqc^%|+*@TbD.Y_9ٮ#UlFG# kӾSh|*d{)z,#;gzgHnc^9B}>ud nd\a"AРwH*Ǜez8̣h"zTP]phcar O)-lvc"yQVfR mfũʹ3mB oͦz @F@T|;" LNd͐HƵWqOUhHlH8B$^){eG"ΏD' ݳԐss]erl6 ]Ez:(FC\ClGd#_6,H`Lt ͠X'XY$π!orZ,a(m3%ꖟY'O\78ۣDwq'!%swXi=5C_g5E6ց KBDwA X/D_v+^PQ(˹6KiX7QR|#wMFYMYLU0D2ZP\=/+RbZ?XXlGw?Z!Hz5l/3;^<RFdmcx6Cd`a^F0\ i]/ʸQЖݙ&ю<hL,+1\@D*?Rځ p,]Qh.SΈlSQqfZ՝Nj{9?m! Hݞ8w a>EoZӠOуcG P c97G"RWǨ"-F1]H#r?S5"ڳֵ*d&Y,.(1knhj/ / VMyxY/S+i|F$KhkLknZ'6٨|]c"i:: 6jOX2ڀ ҡIN4ɨr.ƀi\ءy `ptS&kx1xA^,5 󏇣 O {Yl{78Vk Hv_ ͗q ȭj4JRV9SiL|. 1g]S :G͢"^>kd?K.8ItԨd߂[<'~T#l̶؀b>śvi.0a\f17jd2+i4Wtd*󝂨m\ŗqF5;8"xhP5BdZ5g'&lڮ8 ,dL+º ʸqmS[;F;U3\GͯhiJx~Z4V'>fGA;hh,|tf1-kD09o!:-h R{%I>H؆$zv+< A`U)ug41"mLlN9=M#܄2`td*`8r܇Vp\b`iFUcW]J¢nz}1L*ʑ/kur |||';wE7X( }Bu,7v0(Oأo2FS\Hʐ: 4; [%\_yqx4y& zn#Ǒ(wh&^n50A> ǣշ8svb$nd#w *,W޼9|EW&?d:~gptbYjifzn5]*<r@zV%2ˮЛ%A8_xe\mVM '8V 1I*3^US LӲkC;-{ӛ&J|N}6wzZL; M>&8PEc_zpź϶,'=lԣ?6Vs( eWfoՙR+PJNN5'%.z*8\25!Z O S/-v KLyBUe9Lze8s۫t;2Vk5MlxwL Vr\Gػh95GXUtxutH'BarE{'3iݸoScqo[>46="\IH> 28`B3Zq y K8sEDMGX#JM u1V^ cooA =u~L`=;m k* tjND=s.N wzN3dP"

eéحȷuX6l ςٕe^2ac3nL1I+h?bz4tp@Ā,`pc(\Ps}ej) [fLĿ^P3V+N]Ojrh 3>t 6juɪ*ezgXq[ёTR .[;(#0Ȓ!|w}ID!`OKL$9sj/0F\hwJ657sL&9 vח~3r%O= 3[b ۰fi0ݴ^|FV#T%&ĉu͒K~SI8:>\7.?etZ3ōnTjk$v:*n=AL[m]iG΅âIܣ5iidM4aFXsP9dA2%y8b~\=U|=}vۊekG-zT36Tk}sUGȫoiSԑ2G+[ 8"RNR6ltD$\hc<UHC \XaV_xSщVUѰ'U96Y a1@aHH {uâbY>_0oO%S"p{G"@}iIv߳L{me>5Kqا#J?B3^$cV.(gEVYĝ,tcehxj`>֪;b^:Y$+&&tnbiMnJ j WҢ~rBhoxe*?LyRڲn|_\n|:X]QU+,¨C=y0v\s 33'Z Wbp+XS!Ԑ+7zt~nž%tTMWƸ$֢[ʥCQ6 R}kܺWG Jun[V(eS?L _'K2`nGڎbX:1cğ xCh {(bDoKP.tP&ý~v)HԦʘt Lzdf/Ab6R^BN;zqugK@S'4sFm׌Ҳ;B#,LPk'_L)La맻Y>S=-O`=9=sȦxzT˙P,D!.jAnPyԩB ڰk2:%9]aP[=FM3wq ~W%(eA/Wigo kDl Wĵ aY oΏoMrࣦɚ_NJ# #&h_!tr:#$}"?' /nB\ '7[t3Q'ZhINZؑPU.ꟾbz܉ڻASOY`QAS2^ F/>%J \{w6a>o#I$qB|o?< I.81U&^U|1'Uc:x;}D/;ُ6D I17lVA;ٹk$hymY Lj2|~B K#Jfe]ѼPуRm| Z9a=mWM:͍5NoOukpΣ bem@9Q|@ጚ6MbIpIg<7磢?/yUF+Tһy;VI6ؘ=j3$w z؎,x?S/"𜜬wL^_nnpL HNJN p73˛Ǟ5ha*4KpYW#).MHd&{?5cdEmwQ0CZ7=da1u`u<Rod1!0"vHvf, J}X-7ΏpWPU"´*IHZQXQ^XiRL>n'ky?ړe4ArKny2R5- Fĩh)߾%kRb(UR4Q;YQ~Vܷ=^UK} 3gnJY}W%l5oT͢ X4uf<#w7 hY FFU8r} >J@5ɘw^NG4sm~n=#~z^Y7~Rr)7M5Ui}Ace< dk(dnp ۻܯƆ9K~_j,Eh8ʐV0܌ ѽxY$`X~s,ދĢ|k[XVkVCFx~lF -®A l4:WX'cEdI2a=4PGcq9DHN >dܩΠ`x%9'y)̧R<̐"jJ͒NsSV/yb4|#`RHГ7U5r Uzmc&`D@cظЬ PT`DSo9Ĵt`ZU By҃ئ=yg.w?yI`qKO9eS'9%JtۺԄN.\Of"n+59$\zg}4]Z”U?>(?yMgPo9@6HaTŁ0zMO7Ҫ ܅^dmI-?gSM$ѦK '+ IBNvs-V}KZVC j@l6݉[̛GYf4R<=AX}%θʺZ %΍0956?Jс\52GcP+ tu'nL7D?G;)V]&l:E>b!^iTk&e֭:]дBJu>#, 80;Ɨ㧙Ty|- 2x?_]eĖP4&=0nI{-I0zaQ8f#&鎭oƃ p+; H+B[7Wuc[*w5wN`%VQ*l HúYOx6++ f+)@rUuGڢfC_,R2Yh= h j.%&}:aF:tL*hم3gºr#EqՁXmnSݘƓ$VF\$sq "!Su17\8J0ordt-/q7yǖO#n*F|UlH&9XZnD}4."ܵ ZeN8,1@Tgbqڴ+VwEK9׀=Dl+ֳ ɪaMPS&[qw 8(+fܐ<oDJ"Q>_9\ &F NןG53lߕ ־/5 S?T'jZ|g3PҚ93~6 TU󒆻RJ!C#*cLT m5Ek_-Z ;4]j3$ ).E?ѐvbnY bar38)f'0[FYZ{cq~;5cy3r^VDr,Tƈ@dM2++ < ,lBb~VS!tHZ#| .eIVT'8gNC!z8`+Z&ƘȻ@-.6!82qD DG(ҠdnHk.0$mWhz/ 7ٗ)iV.TY$fZ`vq0da=C{NEZ:"\T%L9ϕo^@ΨBူCNJ8!P(tk{AYWXDDf;3| C@v=E~1<|NfW=/#%aZ~SID[p^d*LWqCj Zywy \wm j<psQP:bP+d=e.cN:H&Y'܁Q&٣OkSKBG)>WL m#p]@l{ݜ:2?:Vk#dA M'COrlޕmz*Q3& ;C\:[Et"/hKN* Ӱ%EJ%滃1qggȚܳ!XÄ446rb@; pgB [0ZK4U+&x&pD7iJJmItedԃG>Dv\(՛"u[  .R QհL)sZܙۮg􄟸X=4z0rBy:xץG v܃"uh2ä?&F ˛b8+Jg}EH3u1ۙᄯQ˗C>K9[j =n3SGjqgҭ?UY!=8x>*͸q(!w 456h*iCڰnuuCO x_?I;t rC"ە`Uoq;cJ# tdTϔEp^2yg%+BOг)2| qnrV%Y:!^ d{i֜*D `Q?A ? p ~) B; X{DY:x,r&= H )$hf acB4 2VgO4? xj]1rسzf ƍ 0>V?aT6ԝ&{M>kDT7ⷤ5m9|iL/@sA-J(~Cr=S== `o}Te4֜T+C Gφ)y]5&C9λX #96Q!$uW0´Ǫ42_Qyd!1@ڍGh&M)pG p>!G_BϴB8 E?~an^aQ"펷C$ICq`&kquuof6O,l@%w1D Rq\h# \ 2vbmrC@ȥ˃Y͕1k=^SJ2!໗?հ)!*V/~C]J@Ikڳ8tۜr+]t q.*H(WY (6`J@=uRX[2|_x?1|;.C9ͮ# f$`/p{t>~ ^MK5xz#-6uձݚj?S?r7'-vv.P ϱÁ|/Z/< ͱhR ź  Q;.C@sO12{4ͭ {I=]󿠟3^C"oZG /O֔p:%0P8InI^ ִٶ}"issx$QW-@Y cn[GEjDeT=?+tío%@SOv.IXIҒ+QRҩ$,) 監IJT/Rf,мn$޹Jl?D}s!MoP|ԪITg [KR@!?ؘN1CƸ7CP$bqv@; V~֞4NzU+SD,7w7i"ypS3#MS=x,eNQzl?sA[.~9eKJӄrfMK CO z}ƌ*NXiL17Yy}yߠioZ,~|QLNj@/n굔'I 0(k [Uk0NwI& ȓS_.MQIa=J&7T*"!eϒԮ:4es {Z @:xhYSCbp"%.v+ T:7J@[}D)Ri`4'osjת}6eΒ:[\ɗ{ Hq'ϠChHNrkKJ >d`̖ܯ͕(3K}7Mx_ 04do% 1bDwTc`%V?:ov|@K!tĤ &Mf" @Ƶ%7y pm-=!<+Bct 'WN/r?+ϾzΒWu)Oa6 Ò]KK]k侯Mi*w*-W$>Nh_HQoOXF2Ϫx 345=: H{%h-GZ? U KV"Nwf_ҢTTOY&}mkخ X /#=H _H>_Q\0ڌiQJRvs펰\%ω𾷩'cVF@@Zm+b)/ ɐmH)N٤1)5Ӝˏ֧ONoxL(|oϯf^|(‹S0ƪ>. Lw<]yߘ^˸ʅac`)7j?#m? L{5@b լx陊R8axޗqnCZEF'ʹrGڋ0Z @']]^0 3LKڲX4kgW0ŐB.frX j.s!ѕ ; ^϶DTPӚnӄ 'ڨ P~Y]8)ʏOnv?ڍHiY6uq+f:fm)/׹֟Nk^s@u._ `1FD q7AbuA|kE4/E ;ap8ߤ VL,t5ݤ٘(7N1cwHr7b!O1H}0oǨgCEh|Zgz<#]AYc 3mrjEe9V3Y2˓`Olհ<{uߩMxE_$c}(AX$*;q| v J҅M@2q]辬qa YTE$au^?'bFۍ[.#iWjIQ{(}D78n+xqKa[\SY`蕩k}ѱnD.ZwFʗL)UV.Tt;jomIHMqvgp̳0P` ¹˧\as3>~NmEۚU [*n(tv?񫹪Úh c3GwpObgO4}jpG IdiB,kMƃnzb$CU*lk{`H.gBԾ [)VLjz3*j-R;Ȃ ȱ ȫ7Vbmjy @_ xHg؜sN{.gS73mkہwK eI)*i&?jƦg NCW~Egmyz:L5N X42QJ$t i1`n耀iLDz0 [.$z hp7YU $r0xE e7[m鷓w mм)ܓLh,S҈[wvFʼHN0ۤ.l9ZP8jا-OuY ˂nV3vE\x "Zя-[ I$E9٠<]DЁØܻX8N*ߜ[l #^nەRE jDf&ғBP`.uad뺫nD,\<^U)n78.0klO~E/cwQ iɬ)Lp >H4wT6 imcd,fBUDwH^aH|X`$)a E1ԛ2OHAe&EAN1{-6H勣.Kxͩ)Ya6y ֿp8g)Syd]`sڱRH5sM<_hY y܃u:SVcdYN7`V2rgF9ubrŽy} ;F" 0}05L~^`JIbaDhhG$C-Kx3.y$vƔHVT}i]뫲D,m׏ܨ?P3Am(|CzSDn 7jv} TucN(h8ЦP_zgEHyk-ye(q~'i˺eqz!5jJlǾtRv *GMw6jUӯS8X8͊&!O" lraGI=-86`/73 SXIp8 ބX1С\:%]ZAw׎aL4`U7vJ !M<@l^u]K8DvFEo˾[J8eHh~I|4A>BI61:<;.җQ=:Y@<:;'=Э >YҖd*@8jtHKIex}:0/0˓t@_ Ce(vMRgZy|AYwqڔh]s1ߨB3,7#t ҵ2ꥯU rFeׅhjyKn+_ 9M[?ֱJupK_j>Jx/ԎilByyz PIºqngKlѩ.,ouʲHB?'A8d㢣wZ L v '$]K}ܓAem/jʾh<Ӫ=դ"B%PsP$x]-Vy.}OK]J;C^FɆ9$sQm  ?Ljڋ6ڸ7HCMI8N6p*KArd% Hi I˻הhIVrMܺtD9ƭQ?xj1`J%5صQy^:T#b,Q6 !}˫IU5i!##W.z"RSvq>h8"*֧b E䛦O: &V"۞N1\YCKä=`ЯhknKEʂHu<3=L3i M_Kui~,KmWRdXpR4{wОg%9M|o/t2?a t,^AK'O{67(3' ιOb-~rčopNKmn)J]yAnx&][߁mѦ*, hR"%1|XӐGnɻ֭e[uˑiWutMRPLx߇h uNz^En/;w8A.J^W'L1 0gwa5P SiefBt1 1y9'!ӦyL(2Ax:2!MM!vw m^?@A:xsrv|YJ$PM&u+B,9_r?B˿wb^UہG0^>AU[DQv CʇFCIĿuPfq(,]ͩ! ,=lP:ְD$rUo->1pq/5<&5:KT:XhAQ}IB׷R '!{4s/E1X`-c|+|SK#@q'^d4ǵ3%viWP}|5ʃYp~cAzҚGdTء)\obRNg\jxhV&xgnVq/#wE|բkI&f:+nl`iEb5k&#慽/Pap`C_FI^1yOT@H{mPJ;h pr]`&iD \0Tƨ=JsA婁ٮEy.GCALJМ!rTGtZO3e4aG{?IjЕtbho &0AEÇ#*Cc>GP֊;s:p=6⬸.}}PYCq4ruTZew03Ɓ)C\WJKUә|lRfQ$~kTs33cş q( % k7qf]LW._O0?!CmCͪUp^'veTͨ*0sv6nna9l(e1@ZzK]=dc%Yy/- u8ͤ %Z_',:> ws_c Y9Sܢ~fUsqwbP/sT1 䲵^hCl:z:߶܇g| 7d sm4PSoIXؼ( ̪χ ES^2㡂8I7)R_& hwS4K'z%3$LXw3 !gPD#z}(1f){i $C\(i1Uh`IO^ޯ`|GX"׸80XތU]ԎėŖ:sDPN Xg]fp8M: )AkUCf*r״ |[| {n},6sHc1YaJ'+|=y%6P ܇fct9=0]j.iۈdݑ ?)cPޜv($ 'paeD1d^_l#,ehPco{Œxl @LDDW4Wq$*- ,g{^'tP؉)zѮ]qC3VDA?t̢ӿ:.C%`Sԉs=*@q^ KT$stS''# I?02b?oL%^֠]8D+ @tFheQM[|3#nGVRXL;'ktۃ55,Gv4`"C(d_ڰCwvЏ&,b sYbͺPakI$B0 kBjő6` ev-|i vOtQK)Yyvwfz(t|?2& 49vKwg<ךqnmWRA9My ;tvIQ-p¸5D2.VMN+$3wf+9!yrI11U8fԔgz B9&7̆L+ ^?O 5tYdN@_eXŖ-XPaMAO$oFl dY9HK\W_!nB\)k%EM(>&hPHu5mkIVNg6r9j^b9*v65G^n9PEB9F6r(&Wv.ȲcnZjq2[Uw&PLP60aU U6p'=!]% jnJ!R17hM~XH*UTWverw5zs9L&;8xՒJ vYT#gjbIF݀R[K(ٛt\.Ԕ٪ާkѵfLc (E}N QHp )x[p!o?ۢЁ/r<ꪝ?N)֖c9 ޥlPYI͟JuXN-ؙC#e6gEJ~+MiX rU {Z%JDn#\d< Z,1kZJ6jnŎ S od)K_w~+ #18oH-֞`筬mb4q4ܧ :/2l$0w[ÚC3Ŗj8n5 ޵FPN7Pȋ{+`>0"V*H` ߵ+ȕ}*Wկ*(bG eIi6߃.{>:>6٘=b-jIZ+sȾ,N7g?*// &9++Sl7 ) ݜ{1xWhh$Gl3Ws'*6#G]\73c,FbDb] >#Tv&BxX;,~A]Rbn0 6EwQz\fG@pIB:d҆@h?5Πn8hWolbxWiG3<}EK3~ >C5P;IIw3MSތ˧vYX2czu'7ܥ(/8֥~Ij4y&n0 XsQJ^j)qoHfʙ&dCP\Nqf(o͈l(TQwǎ|ovbk8iM(#%DyȺv@4Κ:5&mCޮ=)| U;g^%$ y <)6ܾDo~FO8G%b7mѯ uԄL%ݾ@CTx9' "#Y [A (4<좣&ËxPŪ11gݮOˣ빑ֻL@?R{LlO& = WPcɊ#(DKd#c-)K<*\L5 *WJ-uݻ.Ĭ{8 iOM/=pna ͚_:JR˖IxBqotg3r!wUsA$ R0'}z~B!Іf~TR9맪 aXd~QA2L[%S2"БT@2K MbD%0};? w 82*zP~1ޱl߉?3l!ٲv;p@ |'c1B?3&L\dx!8'+Q>X{ZXi3&"7!L; ov\\yugGjosHO У͵ӡ> )jcS?߆gyhwh_0ʒ1#QN/¾.Z8UƚMAI#c%i-H0fH?vZ zFjfCˣ!Ds rVXp_i/ܴM_5ؾMbBDQ@A.5$o8?0ǫ=BusOHKk'GVf&{{:R(g?+)(o7` .y8,4s h5JbÁ*;x>'=a/CzdPbZAeTwëoЇA LYլW}2tdS=jP$, /A+vtȘgw9K~zPdg2vh5fEzo 5d.廊YR}>MmD4f^(y!L똊#q&+{.$UG/}.Z!Zע䶤wFZn ̹+Y0:Y(~<沬 ,G՗U{W镄GMCĤAv6GǨ:Jhc[cYY_ ƚNј59C]lwgե=Wohi1ox@DM Y I; &R&qQy[ r~˴j8tt7\tmH{N!#Rr,?\JW+K]W~[k+.d(rm_YOWNU(bvv;mM޸ZSsX5,du5U ߃:P̩ n]/!,ªKܿ y$ߵt&*_1eq:[~wSaO_̇jr}0Ѹv QE_/8+stȸ&$hzm9:~]2jpOTbL0( ^F1Txקb"|.MP'i[,~萄ZY'y&8OiH{'^PhCW%?v3?\/XԱѬgL_qxKt̘ |-QmneK_ւ"9uzWbyBZӷ vpzd [ĻuʓRgqցKXl3>J5knԃe^rݯ]|8, ]/ 㷤0 HSL  ^W &[ͫ, d .JN6.O;+(#rtf#ifY[MwkȀ?@m5~YS %:g M:S@lG`Ab BYV|وXQ{xF۽f%*oQNF' u_ATc>m-]ESI\>S"JBmϩZHBrV^{6mQ1`"*z9& $_Qe#I r0S(0X(htJr?I05ixR+} eht3+}ͬ1l?O?Cp_6)5kOoB)y5V8i.S: Yh`9ah˖H洩! PĜg'MlرPkTx\@.ؚp?ᴟ)s:e3$%6y-D=xU Y\&3v^IBj&AhO N/`ff5.i{uc[[5rNpE] . VTj"NEPprYR'{7 (˂sQЯyoXN(2,+n =˽j٩ 6v lE*7؋|Ozӂ4lS)Y>a]l>gϛ6DY2:-0=8H$״e/k˘(p. z nMb & qܞߟS"5SxJ\svNi4e3j<ϣḏ$aR+VQhx9VcG},gg|ԜG(rS00aTǗr@Kfp?(> ] EɆ"v?WPKPʿm5!-&"bV-m? ,qȺb$;BQ$%j^ 25k~ڏN 2&" *F,BcD0.Gȱpq[qʔO]ju=^ %U?x%~/D_SB'#',vzN-*}S av!Shg=C98=o_]夕$ć7~HTVa4[F+NA8E'[E~m7-r!/d5X'%n םN)-OiQ(29=CVo7| ͭ{UI .¯dX+C̎^Y؀Dm,=-*K%O^UMD PL ;w /d j(h# ]7rY:y!a,1ݲ^WKivB4NB7aLku#;.ƺ'qV 0 \'6@ )d_ǔѾx XXniPd*&$KX|zWOA>JVkAdő$qgVVx CkJX庅+]Lb)n[,T~3&4plO/Nb*uX fzLG$JQ!\q0q?9!onXXQp3`&. }#NrX*Ib@M 7.,Pl;vf쇣]kXPV[D ׁF0ܯ$X0/1)' Lת1*8gyh3sT͹G.6GI {`:^yz)˷5>፥y -o3 ư;*+yyK$;%'ݭnX *Ɔ{{ Hy רqONd{g7 (4S h rC{Nb W*K%=j{rC-{tqKJ8-@e|9\,gxcUlzw5o'oW"=j7g>v$sP(:W*:+u~[8q?c8`p9gAJRҒEcߞuiޝ6jWn/t>ًcU&r8,iz,hFH(ص1)Lxȇ^,  ?{O3f iаJW2vv]st%V?|>mD20#NUQ!EP񐪓ty87ΣHa5%V~z(9+-V"Δ5Fo[BJ)݀3[?!HKH@>rcLՀ$@Mo_bȽϒw2ґ{ VРM2Uɾ–zD{L'@L`Òg*u ȍ[%q| lH\w.^շ n_Õz8|& {.S 9A*jaH\t8b/K6F )/.vNƄY)u3k"ZMx1|a ~όG3bIHti]`9.{c %iDQ 7`)I<ܖftӒM)yt&$ c< fgfK[2Aueg@^`޴ERSv?E3.~Py* 6\9܊#2x)'nI`}i_@qREw_X 3]X2@6Y+t6Ss=|LEx1e3/V`w<:BCEƄX:~Ņ9.E|^݇Y8 Ġשׁ{-4ǃ(u=E)Zu͹e?u`-Ucq?L2rAoJqV7Kߜ1$Ծyѷ8JdlE(}{єxep5"H {F̔0L [.x7nDFDH9{ZuŕaqƋ<7Uu/eP@B\u?30quZ $?s}9ŦmS4pϐz Ug2a:e&E`X @>Wg xc"m5,#JA5q<=qm6*1hj6JCMƛߢ,3,$.(<1h Q^+B  vrso ؝LW[ܱ cӦ9(XG,ĽfSݚA$4Y0V`@}@8qEdEr"8 Kl-F/ƳAx4Pfhb/Tj2qpq,ji N79WJǛxRڦ`J~0C|آuXP] avZ hKo_on LSR3:GS~WӋda9ZfS(VW2w V4hYS5t:*C֭alqSY/ 3{ ) x iTd/?=!ԧNZbR`t~ʋ7\o/[dJUNyLXm2p*7=cOO7߉ /e8u6=)b!(koa%;R>e f > Gz'y+e'Y)Nz))Rc]5iCWelU+bs{IܙTjWKVU; 'Xe hSW59D|m Ҙ~ d0>Z 9h8P^f OyB:"Z#`*- !_zJ"ɿyIvαbِZ1x}r^Y_[49^.s%F-) ;-l>fV= DYSpnQ9Ƙ+KhKUn}J)4ӲМVRe 7fuGɆqMLb++ŤӱI(~˚atWDa>K~}ɤWˤ#/ - [pSƹj yggSvlgKj$vS8e>i5@_8Ý84X;r /QV59= M69x<ip3yRl"!fQaz!X)`E\ 8[%i}1P0;ׅGfmS+*HW+(e}x*6aѨ|`Hri Ѿqەr%KR 玜"J$FҫCȿ"C௧/iCw'ThD #~B_Rv4C*G?Z"5:;*&hn|m~nH-@r}-o&(n%5_l\eV9@c o1%WԪ͜pf  1( N^UF: V!/n'Ra;t'`_xA*U)Ѵprَ_O.4"IC`(яB8D`i%O5~S ˉF%ۦ;"ǿ{r}4[ \ӯKeQ_Bp4S L5@6 C~ w?M@*R ,֯\F45z|pķ/ĤӒW]hR3w$3a6+-#Xw1lxĆY\j p-J&D&5yLyV[Gli9c/fa㱍#u'S8$϶QG3Yγ<G$XBx>_||&,zftYK6 < kP٣)arg=u (qbPñSvx_i(O:.2!Ρ~wlp0wMo&;(={L/ih׶ɷXXd#БڈBJ ^^ӹYt}yl)fDb_bJ虿!,HU{qO ݓ2UB& ##כ&:{cl'V) .eO̑awA֎ˣYL͢{t.! ]p0jՎ e \æDA:"=qFɒ?=Ft!&Q"7N=qɄ7oÃ?S'p:Bh&ocY(Bch|GE-Jtsn$hpZ廛o&n72gEgCϋTw9BԖ_EEOEm=֨jquHjZ }@" ʗG0dP&ZqÙV)#B&J=+<863!hZ4#Y8.fޚpk$oT|Hx`1hiۦ >g>t+&b_Bxu~/&xlD⽾5pL֯QيO&:$ y`qG^*ߒ°1= RT YKs0қՄ+:!Z`/ ËsL+۴E1,ȵ;l{-Ooj ހ@[1}*.z#A0pzO'o$/3~kUm eTVmKhΊZQ?_$G& G1%T͒yl Z|iʝ/A;B1 [(6 Ō#“Q[K6F;ܐh63-[T3 LLXc{W4K?^}5Q6t}RU5z;1D[3+,q/~P2;чomCݲ.=w'oղiq0zJtsVVm v`: RA1+.7q' vخ?mE@iA=Ύ0ʧ S d2zb~ÅM4`BBHIA =y{5/+V8cHSAEd$W=r>)0qTȠ۩tr2X|!FCfϦH=ca0xy3f'3a_}[t:;0FzIN7P[E +2β#`=t4? SbY˟z{%(nbG}[A=2y@ a>[LF&֫ӜƢń= %,ʼnb)ʯ;ZEA! Jr&BUڽ :)F?Wv<[u4CG;X6'p[t"/ OG3\GAX8|$pMC_[Φ)kh-ggqq@U[YXH3=J|Z{? % t6׵V>0seV]_K wm |膫Ԧia_c[#r,ݪsy+Sd& 2h 'a8EN!T,whŠ]x$L"6}%^z \vSd9W[ZvN; Ïi|> (qG=:9pp}*O>XMw0&L|=4uե+X,BSw Jѹ iS9v*ԭJX P1 &kppeZ͟%~ q'QѦq ܀{ >QWFUƁ!a,]2ҏV4m:ዀAfVth1B6*!h(TLħ#נDYIu͑O ;¤=vcC7R[FY˻U,>A!qEtZ2Sg'܎'|tvwC mFע/GTB/B8*[tM\\#S<8mc֍O6\?rCQ놘7>}Z*fvfH_.fMz_5e1BwsԝfA>laP -sQP{&lGeJ)mpuMt~33mAi&tWy!{-%wAtfcu \K7LnsL AL U%_j"CB9a_`mnxo斋{<^ JmL) s6fovu"o\ %a dUĺIŊM}[R&5,Y] tNe!œY}1p+ݘ"D>AhjI7x+,PΊi dqjG΍./A_9ڈeZW?.1kepk2yȂ,|qf `G^Pړ1AS?ոΔipcRi.JtEim, -+插85;&1+--ǝ*nqp]"e>:}{ [9 ,п(T0*­ Xxئ@B[%RNש;o2/n]MmWz"8lĹXѮ윍 g5sNyTR| 5yYrF]B =VLUF N(L9#z3$4/E:f>  F8xM,ՅJ?&|ڋSFRQΝ)jayG:Cޫ* (;=4C.iy #ƞ^,V}$S!dB!.`2#÷6ɬŷLjgb*4q%AZlM53@"DYcbDZK*a|t :6_^:3O36r_3Ĺ-\~MYNTtx"$83P1O 漙&@"w&NhbXx^_QduH6O+>J@Z8e{?:ga. Zџh fa]PK_7 4'LW=r[O>oU)RU0=| qg+sK>QvRdɝUa(̢:_4]6i^E\YilpQұÍ )G NM!H3zDp7Ķ9E/rM:=m#~bg*T絵i DY0q,^t<}MD#Fp eb+Cu4&*Pq$WM-_[RtbU12C 6qy6Ev+E\٧! ",fv 5Kۄ2-RNJo=wg+=㱘}o92Q>Ji-.@oj #gP6l6/(luվF7Cv.ifk$?OƝ4J+SK"әe8b e5}@{bA:8MSCSZk&vz$%qV.uUm2[I$ a>8bM1OW?_'eFki:'ݤ1byG䷁4yq 1"e ~0l(~̈qe^DDERKdl=,ihbuAb/̯~Z8[qb  q_K?P_hu@k*4&;sNY qӗ S^KWr|MyI r6W#Թx\G ZTDq۳..SO(j@”e2&ZǦV[U ^@:3'<X."-k`k;2(0^?e8ia݉*A6ɕu}ED$_ُO(%-ˑKU'_,ᠤ"\&p#y&bp?]aΞuC[&2չgrR;̫Mjj0+$!Þ<$R|~g Rl=^ŸT*KyLA-Ŝꏯ)Y| p&9Z׮S_wO  qٴ2I&ߘ\ډUznIa;h$.L(Ȑl"hs"Dwg9|g0nK"Lb8`VhFWWYȞJj=LE T6a{JNrߠtfCWഓŎ\jF|~K+Wn$<;glȜ\1ӮtSDždŔHhں4I>ܭ{b?ٳS?tom5cjsnd\YM/#ƠNZ}d$hŤUZ| A2Wd7sB&Q/ K6Gi܈RJxܧ'3Aډ 10!C^_cST1^[r|Du[4DEAFbEtr2&i5?aTb5I ztdDobw+5/z8J)T^k(Uoȩ&3X=8B(zvub7{9oHjj*vW,آO 0o;CMkP,v5L1Q:}c=ȐNx%#2tNru3JxW%Z(l, z`J7 R1Mа+ RrC愸gh_ōћlJDC %?9Ka(X)IοMSޱl [#xR_KT9 @U \_g}*3V*z ˊ8b\kpCF܆fWs; X7pa`=CՑ!m #{ gS;Ɨ0oͤn#C)QSk M N{#lGu-0vRMic ͐8*~se)LDNP>i}PC5z:$!uoL] l1 Z%8bQ#s-_;CL.g'd;$Wa;Nj*Bb@n;WtL57Pߔn<D[D~9u'iK̝„x4DeO0H`PiT;V<$>Yc%X*a n6+]FߛՑֶ_Dm%bY)W dSF!4s)&R 2OL  lJ.fYUp3bW!JX󩥤t4!5ӻRAA`^̡a>ÙaaY`\|Ilmʥ2C L-vrrJDxD`Yus\ .GBjqړڜ)&inqvya j<|¨RN,^Aupdmvg3esv܂=`)|hȽP>kZu>GK/ia?nsrP%jx{)uܹGXir?j^+JsBj3)￾ n.$k:~^t;t>bס,,]j/F^CpiÎkה0_fpҋj8+DnӶeԛw#B?$_/J,K=9JϪ)!ߌLf mN0PciOFɢkK;TU`bJyrN&k*ǰvBGXH8(s,Q4MFbegHjIӞ`'iٌ]35 ϭMvl&V+1T2c /IR_+e 0"pAҲU_H;Qb L^6ш4j ^^tzdgƘמ?9fԦH1H[xY洢Pš01}BB^@aȽzy /2ɠ+)&OlͬƤ(uXev`Sfx\Ќ3Zo+-NA\xO)}}a`4w2s+]HXi( e7/aC(L OVkeBYMXjP5YUV*vbwPo&.:`I홨#X{8YŪbM;կb?mmK˲]/񰮿kmUxĮ~[R̡VbAvo9(Y0G3܉"c.ImaDypbfh΁kG?9>fSJT^֙h$.K/A{(Gzv]U)h,U'Hs`VS Hn_#S~HA̐/sTm(Γfv5AL3 -#;߄#N= $b:ShwG˯7x<郍p IrGE0좫Aoq}ƼS0zo/!@ (1]/+qGV-Ӯ#{<ƈk@8ض%&9U0WK,[W.V:( εWikeۅآ{UC4ϱ}%54N5OH! [0 9`9qO۠qv %,Xm<$ j3:PM c#ItJS|8 ͦ2ca#`͡T2 e /%]un 7-z].aw#E8B"G9KOv| ͹פ9rbe)=j8T 0Ū.ycO>s_d)g̀eg\ۆ9u)vhc`D6>]ᏁˡюRTx\0U`5BķnFYњ*uTQǐW|~5e6h[3`$D7x$Z !gj^8Ӱ\=w4G6Mް+Kq<ǻGbuvb f97B\/҆ >6Y5Nf?4F[ 7Wgg8)O7DSՈ]k)!D`r2|O!^~*EQ԰0,Kn['>+,)gr=)!W n~47 KbVͬ4X@%k0!w*3{m`[G GOZƍ \@qry&KrxaoM.6%Rݘ]Dݥb*c}{" J%63sTB~JSs2{7N AQj_X=8'&f,]4w@\[#8yɷky-%ֹ/%= Wg.M_1vxRz#cXr+j]KXsYԸ꧂tsq+` ^ʇ=y:n5w+ K_2Mps껏=ۭU_-h.|}شUkIlS;C # ߏ\#hA)Mb LK'O0{̠Ei(oYJr v:Uj>=[_rp '"|qa7UR*EfI6` wMrAHw/+r@@(3B;ur +"C m$ǀᇋ >rBefGAݛ#/0t)/)]`ԳggmԜA٭ i{WrG 8B2ZlD:KƒFpQ7Mi&fQ*>|F ynyv,‚Ωp=ѳ`ZP`k)T 3Gx\ )6)01+`BfB~TKC<ͷYϸW7Ho U2 پлDH bU0@G~a[=wqƁϳ )+NըFl [R%MÿҸ׆ܭ^݆v>P"V a[2DHz(@3>JƒJܪGp {"Y[6hٹֿ9dϘF= C_}fbft{Q }Aa3p Vw9Y;O~f'M[ JR3pA)*0.ʔ#SO癒{泣_A(}cTmP3"<ڭvvBƻ6vkzȶ% 悰В۔F'CW PUlJSHõ9 <3I5bUB!^nr%YM@~9w|!~t6gA ș/=O[a ɉA |Niu"@{T)b{iyf"Tpf3(B :Uۣ,J?PB[ҟoyWs:An~#:(&W1ǯn%Ck#{O /".l2wݓ~h*5Rǜ 1ߘȎ QJd  MX 9eҮ;Ga9R Nb){ Pw5K8 sͼjoO=PdN5S؄҈b|?كG#.fɕ `]'$԰!| Zv^:W,Ueu<ą"ɸ)x9 ?0 U_Gʊs:J[K t *OZM 9"~[*7ЗD>W52B3P5UT2Pp1eX-i},+8O!+'ܔzu:!?36:]) }`Ro#CJ iUC3}kTM qqȫ1:uF/a*Ǩ53d#خtCaBZ:$iX>ZzȆ&wʈ_i (o?8\D^5(H_sT+IAaؠUԑ[RuYDh52*+gB)RHK_DXv‡w9WTʹ*$,6% $ЪՍ;^MI 9pLt;쩼<+\Pslms3.đT~-Tv,wX.(X+Tl.7rui S1^`IM=BkN)RxAhs;XL)چ,K3x*k֛xA+u}sHuXJ~:ɪ,FVи.2՚6(MA %c L y;?;e5:O]. "5:k l"=O4ofPqzoZ#douߖ>]9ek~|T 6|!]}WS(r'vJLG\i>mroN|+*y@'г zV a>W5le;f:AR+/L|6^|1mQ=Ռ?V*77%.IL$cY\ - %  kItjJ_ru?En O(s$6{`Ѫv4>gҪXHs#y:V|"tHMʒ437SS("w^XG s_R#TCzP9Xb~yq ҭכ{ T0@GU L6o=jkcK#h=h裏ngG;[EtPCUSiIÀfFӼ %oK"#,aAIZ5zੜz!"uH$!?FM")Q|!G~b' :Q< /QM`MY]5#*6{axhY;?pRuZ>/,JHȍ7'h IC @WŜKOygG9aNY!ӯ7Q&6A|8̭”Eɝ`+ oRZIi_+ Rk VQieX8%v]/U磘Uga{Kq/尬"yEF6S񞀍5f$-AU͙^A=6 So-í9|MpX_?Q|=D8Ki٤|K,. ۾A*N259w 24|LV@9z˓ :e.;#, !Ň` x`$47k?kdT45!h(^߾)-6γ.Rm%kEҧe4/PcCEP F&* Nw`g!<߭\(cC0IA Ѱ) `m|JO?RYL[M"`ܬT>vdlcoZ-tq6!1j>,O Bn & DsD%]y:ˬ9o;"Ȅ^5ޓaiT~EU8Cȥ|YɻCD* At\i`/%Lw~r%K?lWr' Ĩ]'䑚3Ɨ4䐯c{Kn}@L zf=~'8Z6|NWGwP}DfG۶Tg'K %7Ϥ~υnX*2tMgHkBȝ^H3Gwc{CXv cF_Mњpb0KOɝD4W dô٭˝zƥ!x ИfԜwgqQsZ"]\r-:a+~=Oj iap6bPO|uc'bMJa.gX o^Gana>`uyNI[CB% R⨊uqSn׽^_~?,˝J8ؼcӐ&'eB蟼8.e'څ5Rӥbj^En_GoqEHйnߑ$g9~KP뭞`yLY uNjx;f'*ߺ] u0b0HQA p8pUAO-"I1nfQp8n2 ?: Ix^ y1Ed荈SZYC(|Adu:fr=R_"TL%- 7ɰޠEnm_# m|rć!K`$|C5o\jNIw\ֲ}^%@ I]'~!2)4\O·|O]B㜚2ix3Q!U<{Os]ϯ57HR8YS^p6i{nY}HhDP朶w)D+xzM>%H^&Jz,S eqp#{ EѐH9vh#de4ۺFP-ƭ4K(^q/oo_cauUZR ƐPah(Sq[ ^a0 'W XVg H!Ӛ|,5h@ wz%2,=.OI=ٷBaۺ2CCoAxrjqL`ygD-ΖDb浃$9%ϯZ$dNn`E܎N~:O:bu;}J[m6\a=?HքroW"y?Pdn!qV6t(^'6u,qqlUA ڙ9U@'?j7aVE|8swϹYmבCɂv6b_!q-\@4A ӳReagw"H]>Iш|{1aoȄn5)n E&7# Nj㑴=YXט +5⤁㸈u[BP.^ zv=Χ&uOέsU9 `DkxÇ7prhKg&h!9u`xH(@JD03 "PRb1\jzfJ5 =WҊ)TVxGC'oc|j< Bye@uaQzA'ьRgB`D핎QHBuR'mY Ca\ہp17IO <'g|fI| '} I[|V[L+2%E'Bw%hf}מra}= +j|h{ڽG|Bc:r3c]oNc]p}7[kޱ]z^Ƭ&$G J?N{vOсM֜d@T{n#*P?f  R>o;[HQJo[ &TQiȚtL &}ߒ, 6XEn`Jw&*MDDѾHw8qzZ? b_1M%M%}:dU{ SI}^ȘBĺjYOMlwO̍ށ 9=˻ݪ(U_Ӄ]cS{:lC(ޒ}L=NP(cGb:_эxtHDcp`TÇJЌ-e01B}4hy{gErF f]E ދx@v[ξmF;H )!~(J̌2 ߕ@z6$k*ley߮&WMQi?})_?WSn#*@7loꄥqˤɽ|i,"h/^dFF+YzgfXc1ޔ ]{w1L,$6G"=ӿ^l9Li.+ӸmALDx nEn=a U^ ,SPt+XY_I^ b ;3V+]trC1W6iw;ʴ/Z^hizbp'/!w0=ô#g3N'Om=xyvPMvj_ 4O9@:I/~ALEu4Ay|EAH O~!@$:Ko߮${\0eoI\͂MLlLGzh= F,kϔ#~8iYlvB*6ya>mDG<AɖcrG 1&*jF8IE+Ij?T0Ya|rMd$q6.<a <|%hFN0έc-^"dV ""j'Z!ґZUɱ 9)eQѼ=u"EʦGb㯿_r4QcrA[V-4>l4N4lC_GN#>w|FׅGN3;Y2-P7ܡ9(dK46ץVu_iSu;dVJ^A :,~>)±R &`S"MXNI@ `t<б]\ mVba1E Gz vq$SK{[\W釣wdyki2-!']M(\2REpi >gLMʮ;Hi#f8g~Ya:[2^vBjfS`i(JGdoK}S6p%B,G||wi7~mf6TOHmb |%(t~02`b9C"온|ydxSم̢&)mr{]i̷wh EYKyB!JS^(*r'0f䨃$-W1 Xӿ6;D k%Bi3f dNTj#%ТSmh 0||4R3B &L(p.sw<\G^Oq:]%Yt r18NOsgcSAksJt3y@  LFq HI Jl tXk5+Ҩ@CGՃWM}άY(2e''H Pա<'mg5)]!ϕ,4;.a>Q bTa3թ_}۳,6FM*f)=yӷ$bqTA;w~Z= w}(ͽ icd -1uVw׌8|zED\d PȀd@"M=W^ȡJQMn7% qT~2l1sW(iI3¬*dSyA񎀵(sCH{%a$ۍS{>J\!2R yObRxHoX 2dhآ*ÆS| = %cs8䢰̍{/ĺ9H3]Ch[Itn12Djy$~k!$Nzpw8`bdՁYL\mx0{8&d|Cd?ۭ M/E.MF+F:Y2/HT j@UŨ uwÈuOҵDugck peĽ[~p{ěe "='!Vu5ջxc VL߆u< Em}dci͕o,› !ߖFml;5۶=a]98vW& {@C-$\ prD;ЉOָd6MDd:oU%w ۴):_D]YQܿo/:w^'ઋ 1ӏ/-X7I]mP_C_ ob})N W.7 Go}~9$*/ճm{~YKP |sIQ,ǽaIVB(I˒Qc秪;%[Q\n4'ĎLnJљun"*vlMjh蘘GY&4EĞ`ŭnsSݻU4.?iRGGq3#S3SYͪDھaJtvU2Wų\k=n0ՏQ"%02Zy^ \% fvmGEV#Z =HP!`G)]02kbxxJ'YaWe1PM^d(7`3Z|A~בaŌ]mT"a[4 4F!hѼb1x]{eV~4E.PcL=ZIyj ſDo/r[686"%/,޾44ʉ|&7X`0J~weCLD y sO2x|Yh,$9 MQB`/R)[V #irɔl(UbKH,3\x}77AEx*$BBc ݙ;ps^Iy`}4h,́LÉ=O9a_ܠnP-Gi??HD 䟿/7+5T?я~7x*ARF*C6~A#Ny=}Zé;z$4|ZP#(11KBx?䙋896i3}=iTlHtUfnC~X_ČӯnI  ,rɬiZg/xw@kVR$E$29sTkJF(E)5E&uol([ "-Q[4pgmpՍ"/ɤe#z Os)е <1Vh^G e1Q?߁N?K˿U{(9t?4 `%KVT?4W4!n%To(J1:ѵzY -l[CWQ!$K۶f7B K!x^$Ռzc$.w`ir =VU7wK%)+Ц-e`iw[[?:pV /sK?nm2)\UBպ#L x3 Yi9ARJu(p#8 K^.JZiQd]~ j'`ovo TuQ  DydHvv~t\lJ IaqvjR]592KP f:HX*\4ysjd*p=x'kzB_B)4TIyؘw 3q5pB$r.ƈpza+N!(TlV JrC%ׂy;tS[tZK;]6G;HvD5"OqhCziU5}=~\ݥzF#Іc/$kh)KK~rWH`֑֎OĽdrHnwb<ȼ1<(; QZg-Y^(o8._ð>{?v&Ʉ_9/Olܞ4 ?Qk v>,nwj#g7&/?B'>fS!89#IuuvmG!ND$(Ʈnv;㰖L+ TtsΥf$Q xs%PU& t=@f9<@yl?$iM d@=^'{\(bȖs="I@tV7locɿC? M*߹>+zat$&41ѡ dEmC!* -8)ȏGzу`>Sĭh}j3mcx`VWk`uJk2{.q'_-O;,:w,ښ=Sc<,,iUo쏻Ϟ ] KI[WY.ʧea)5 $&))QYsNu)%dU< 7 g8zqDFs&aCLK4.+Z{E +9k!W٦.x8뢛TsMk^`s[]ʓ^4rh_ -q!IS{@sCh6!N'* PV=MYOn>)eC{gx'S#SP> 43/ƹI/ee vбr5Lqg ab"j6~vY:^Q.F#[2@ \)`a-*oip|. ľ6y\8GQay|[>]nlZkt feIz챪Yp[y5\d;&؅5KM5~Yn>GŖPyKZ%i?d2kv<ݺI8i6EU;sUJ g9.$|zaϩ 2K(׀׋66d%K69o ˘\q qTu-fTt/lAؔdZ1ӱ3ر^?B_*uȽ(+BeN|$vKԡ u^\z 4:;;d8r,I\V]BSֽt!UXkQÊ:Rn?/H9G+[V6맹VPcbϿx.m4twfE v# N ~.Z8CV:-ȱpR>$>~Zdj\&568$:m;'8"l+[u V6Ly]cEPA`of3c; zMb-u1=P*f=>s^Jmؔp2bKوūf¸;QW%Up4D+ug5392r")hH @ܢ4MUX(kLLUf}amuyXjNU'8W6F}FlB?H4 zJfm;T$BrwI#.dԾJ=4BB ZgQݲ{hF\9V)J:o9i8'yD7,{eK⍠/4=D3GT1ũaErT3[8DP|3˜p|Í*3BK[T]*rAሣa,r e)eTEb#fL;W_h'fv2*U9PA_(K+Lb9x&'H:@qi}t f,,N"K5H{1[ ]}X>lix7|^ΐuLJ'p~P7!27$>deTBÒMCRԬs:k'钱"EouY}N }6CBYPϓ>+۳Q.D9@9($«agVvS ;et}٠~Dӱ6OJʷ*Lh'"1PHF~Iԯbd$pݓviq1A3Pf7Ko } =lKoyadStU* "^V?t2 >]Xeay+]q6;0JxBlÕq"ʛ=3]C.R r"/vY#wÕ,X,_΂$}T4$>=@G @X+\ sg'd 6 #IUن)Q0 x{]O@ا׮.4԰L7Uƽ8uઞBeKX0[Uْ~"0 71l2)RoQl:P= I/^{*'r2Pd[x\% H`[WU-*\EDE9ercڦxF )y ֎ U SR&J!UyڀV9-_fsTW b$"UTVE~Q'<sk7aXyXB-u$_<ҳ~>W"?J `JϡG@"%~2|8 v,#ma7uX$)!q0Mx [/,^PpѲDo6FomJ͇DPT-0WCn% IS th uf#jJ^!3`p@YpW? nt|Api{v Iyp\wrKL*p%̻_{٠Mޏ Q.\%`UorexV0w+F~ӷf֓L)$ 6^ t*M V!V艥$&I:(q(H zYA_*/Attn ob 걻ϝj- 6[t&m?l/zUU5Ke۽plFs A/?oFf(("h{&|.N5`['| ^xQp:Lf<[$t]PC.b@9>#OJ)F+=2ܢxMǐ7ؓN#SU Y=W'#)Dmi+} S&@EP>Yo~<;*˻7r >z2Vnv?Y]vJ‘ܕE{=XҐm9L-ϲRTbl荿P.Y"E%ͤ{o^8ZO8HK<7v tWa8)E q-x@=J*y%YњngPRhX2k ː+LoA#G\&&z)ȋambh#Ay)_: +{J` $={$t4A~A!E랍ołVmFQ%5S4_/6*QR;h;&X!QM<'4 ;gbgZTtO;֣F/:H"Ľ=B4Sl,!zGh)9>yG2Fe@{ЂK4`pq$+ ͸X3^ Ƙs6 Rz<.Mv\6gBI 6@TCŕ,UjXK| z^W'6-Gghw3 رa*tvMȈoɋ{URaqpRޫJYfw+!|6>f>䌛G=(N[BOeݒ$ nTyђo2SBPdw^ڐ$zKydG1qfv OK]~zws$K| nbq"2^SP|C|`Ig tW+^6;F/ 7S,LH͙qg#Wl_q_^cާI"{tS #ǟ<>G,-;}25h3=4oY Nڦ dAƓZ^ai%wiҭk_}&tQ\-r'olt 3Rp"U= SݱcB88HQE %) 0O!+)~J`oJ&YVƪ- k#;m0M+L Ѯ,SM$>+&-g!LbP\t$VnA)3e?B+-YxQ[;9m?0 \) XBda>nj%V>Pon42ѩAvRh?QAjdyŜy@Um6 d)+H6?!|U.!Eƒ5'9<vkU3sĴʆLrZPeS;˖hlKzɞb-M#tu#UQ~&Ax@14pCI"v~yVzf>YFފ'4d#.^=P7ڣZ3Л2x}#b(nVW nlNVJDEy w|wf=LAx4Y5/uie,iOy71G~#o"2I8ũ(>2gAa'd ^k0W746/ f{qV4H-B\\? x%Hjh=J ^#U8~xl#%@ Z\&O}S-beNd.k腦l7饟"% iy+: z Vx٨Շ{u,_Kz/t̮ܜg}],HzRitpDPKDa^1EK9RF#1DTY8k;9ADp'ۖᦃW $|Uuez~$ ptD́m=cg1sI-s=l覑koXWtxᏴgt^<U!: itpĔwחhM*aj`2xK+inGBF3ׯOS]V~A =6z,'J7M! 5bt2tU>FEA{+]\U/uq]Bb^< ж Ѵdћ~&Ѯ}>$Ͻ%qV=8{D%Ǖgp )Vi9J.1kןq}_p'mVzׯ|$*_],IgK8^7qC3EB'lA(;bEדX@hrչ=iTQ&TӸ&Δ+B՚r;K\#`٩ A_Zs&'z}B: ;Jl!cٽzө6ienF#!݁'`!4w5 08O! 5hS <]ST̢NHs#C~k%Ԩ{ %*u1~8g5ɱ;MvkGqOEz?D'̺ eX:$_%=i]Gf&,hS$?ra( Zݯ 2 Y`-q4i?=9KB1Oy I`wͽ OcP~ C9Fsd. T+AK5zo%m0ہ) P8 qVi=$D=H)GcAsU cL D˒~R˿6*j71.lO &2]N ovW J\f/RC\wY̬+C{"?uN[M PY- i8`-$%/enLxٞk.j-'p&o]4z%Y稕[R`0pI.u*pnQIHsύ`96y"c ɮ;"*bc@-b,1Py 3=Sey/O%oj2(1I_Q P|v1CZgB2WDᅯ46waJfS N(\53<>_Bs TY,mX@oPr*FWB/ź[!vzߪA:r, [=_j yDndٟtbh Ҝx y& d.5UgjDGP##Å06,)K "_R !HkC-zSʵz̆)|Y% )$!0qOIy璉-,UwWtDc87^[2!)h 42]/mkQ-fh_ʮDʑVirBuY~I}ޔ#\i{D5G0~ !d%[)4NkF6_A2C2ˍue_g 4i`BȈ4qNfUi*k͏RZF|P zH5Bx q>#1H.2`^?T nBw:d {h ĕaN75?Xv(F1e@֓s\~WUB KCѣ-m,FIQ/74*Ӵ+!(;Vf[}oۑa/ Q)Cu䠅. T?N0=eڜ'!vc ({̤Hm"=L`bsm]"}/nAs, 8S4|609=X[zcW#͝^"Ϳ)Kٟ )ev DvddߏU/%%:<̨((s[olҭH.%4TV񣍪́Iy]W1w,t_ r# yMj-vTdh|D%i,˞p Q◲'(ݞxV[LG0 u 蘑Ք$[ܫ{NpVKIQ $[ZAAXz(թ,=xCL&%%U,7r(6:`k*ÖR_N 2ț'd,KcM- T&,3XN6,:*Jnw.x73ˮ4ܱeYњb|_EU^M¹0'_ZU 5TPQ@ k=U