crypto-policies-scripts-20210917.c9d86d1-150400.3.6.1 < > , pȉ e \p9|X'X⠧Utz~ t1F/ϝ Ӳ? 6A{O4蓋Q6`c.p&9h`@^WagJ MҡK{M|Iyf}`/Mգ\B ojaD.}`Sq,NýhkVD uz]FlЊ s $ %BnyL|I*NKۏa b _ȹSJ˻
ċ54- > C @ ? @ d + 8 _ ( > _ 8 8 8
d 8 D 8 | 8
8 8 8 8 ( 8 9 T : F 0 G 0 8 H 1 8 I 2 8 X 2 Y 2 \ 2 8 ] 3 8 ^ 7 b 9 c :e d : e : f : l : u ; 8 v ; w > 8 x > 8 y ? z ? ? @7 @@ @D @T @X @\ @b @ C crypto-policies-scripts 20210917.c9d86d1 150400.3.6.1 Tool to switch between crypto policies This package provides a tool update-crypto-policies, which applies
the policies provided by the crypto-policies package. These can be
either the pre-built policies from the base package or custom policies
defined in simple policy definition files.
The package also provides a tool fips-mode-setup, which can be used
to enable or disable the system FIPS mode. e \h01-ch3b 4`SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ Productivity/Networking/Security https://gitlab.com/redhat-crypto/fedora-crypto-policies linux noarch 2 % W S , [ < @ I B I T
s S
!S ^ ) # r + 3 7Z r p :AA큤A큤A큤A큤A큤A큤A큤큤 e Ye YaDTe Ze Ze Ze ZaDTe ZaDTe Ze Ze Ze ZaDTaDTe ZaDTe Ze Ze Ze Ze Ze ZaDTaDTaDTaDTe ZaDTe Ze Ze Ze Ze Ze Ze Ze Ze Ze Ze Ze ZaDTaDTaDTaDTaDTaDTaDTaDTaDTaDTaDTe Ze Ze Z55ff95cb963e896c5ce6fe3fb9e2334a507561e38d6a27b7ad8266b57b505744 2eb9d218b87eba5d06c7bc1aefa8f257041bd7af9794af1a41e052a4a822961b 6addb83218c406dc7f789cd90b7f230feac4938419570cff45d9f0ae00710dd3 453eeb5922feb9fc65c701183572621680366d544009bb9ea15e374a9024ffec c0ca3ad76147ae22d520bafc50f01ca71084a10d865330dd836ccf53130e09eb 9d86f5c7b39e3f5cccc995689848bb2673becd15689273efdfe7f07974c83504 401e0a6bac35a9f506f80475c7b1bbbb909cfc732c157b660d26c7bb7111e07c a30473aa31d8442ebd0b9710f018d8ad3a5b4d069cce03b906719689b79305a2 d7b15c861c5d55ca4414f6d7bbb81df6f5a39696b969df374c1a3ed0b7acd1ac f1f16f90176e57ded3c8ae43e19f099422411aefb1c42e1d6ee8765545421af9 a0954d29274503da1b1c9428e326938d3c1dede8ee699db9a684c1a152eca953 c80146332bb7795438787d4c05b099d0d0dceb0aeaab1d2dd544aaa4a8c961a1 0fb780dae62ad275c76855277255693573603b125e8fd316c217ba99969df98c b2e1f4ff636b6a8d49e4a98e07b80c108df123a4776a844dd0920b5225576908 a8171caeb8f30f640fdc9db92c0b0ae5d91990d8421ae9b27f10e9104e50a7e7 fdf892eca5a5def49e0050313758a15794cfab65529e905688de7135075dcffa c88de0ee1b846a66619953d1c335e3b0df858421505ab2bd604eb9d846f2c43f 28c2e24b58783a580fcd31e2cd5bd59f520540ab1b0e489fc04cf863998eea1a b270384e11867a2d932f49a9eaa785c435314c51257ec25963eeb76198ac02a2 b604380985c865e148d6091dc11fb82b99c2730706b25414c7c7a45b08b0ede8 58b1d69f11eda1f83630d53543b4c901ca7c9cc15139eb05990eaa4fbf50a27d aa7a3b3fd79089d6a2e89382ab730165db06aeb6e2b56f538df8d40a15f86a6a 0468b333af6ccc0402a2f7882b081a135aee91fc591a2f0f5b67fdc12141a8f6 4cbbf344b4b687ba4f7113224d252f4b90b9338a3486e29fba350e9a70c7ab52 169f48528e05152a7bede134b49a8457f053ebd3d652ab0b4c4be4945683d401 825c03e720b2c4bfa4a41f7010649824cbe14d08641969a3ce59e882de65c8da 1b7e51f4e1738c769fcddf018c379699bb5f1a23d97ea7c8e3d5337c29463758 f04c4306783ef91b75a28083aa095cf3759f7813070245dbec10174fb169e08e 862bdd5e8bb2c50998d859ebc4714691cda36e2ebbcede8740657eaf6f22959f 417911f8a09c9f6a484f1b287d9d37dc664264fb1f00bac5654bfd4b963f46ce 7117ff97ded89791bbb3ebb64527c4a21ba4613e6df4d0ae74995a3cf07afae0 128ccf5f3f1b09ec0b4992fff320d7bc016bbfa8dc8ab155ae48dac4cb4383fb dcf960041edbc7f38ca218a1ca1d3feaab30bf2885c6114fd4b6f8eecdfb2f1e a781f12bb9e4322634c078067cb90ee31b86a89f01553dc8fb887c3ce77744dd 449317ff392d759473dd483eb5de0f9f2e170bb4179fcbc11d2cff24682442a5 30c42a7b489730b2ed63585735c6de6197b6b1b58974f121e5b0ffb8f9a53f44 f536cd130b61af5f13f38acfbd7de08b16052a71e36c8e8d4ae437060521b931 b8856a056ed1abd6bc3fc8160ff5be448b2f359a790e89f8d09dec737d4066f9 28b1bf1bf81b15be1fa2899685a56f72390a002bebdbb7d45551048411f65aaf 78450587dffe287a0ef0301ee007105759a99b5e6eff652058a4cf7f42963257 f8ac50a9945f75c9d46077ae445454db20cff6146d87193e8cc1755ef88e2857 f429112a585d124545f2a80438bd081573e254e8c0a9d124a6e9a0d9f420a0be a63d279bd779a565f888592dc3f41d148df1786004848d111f0e87431ca0cc2b 797308417ae70a0272322fa65c257f1f2b563ee6338c1daa485df5bfb1a2822b 4e67c0f4a1eff6fa8a0480f3e69dd02eb151304a036ab189ab4174662b175014 c4dff53987cdab85fb31cfdf96a44b34c548271da679d5fb81b477baa27d87bc b29d2ba880077b33ef73932ca13ef88581e66288c4277a610aff9afa3a354b59 950fcd3d9729c215baaa0dddb9434b01f02addca6aa4a4404a8d2ad65ef53598 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root crypto-policies-20210917.c9d86d1-150400.3.6.1.src.rpm crypto-policies-scripts @ @ @
/bin/bash /bin/sh /usr/bin/python3 /usr/bin/sh crypto-policies rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 20210917.c9d86d1-150400.3.6.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 ddd-@dX@aMaM`7@`7@`6?`-@`"y@`!'`!'` 3@`>`>` l` l` l__#pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com dimstar@opensuse.org pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com dimstar@opensuse.org pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com vcizek@suse.com - Make the supported versions change in the update-crypto-policies(8)
man page persistent [bsc#1209998].
* Add patch crypto-policies-supported.patch
* Rebase patches:
- crypto-policies-asciidoc.patch
- crypto-policies-no-build-manpages.patch - FIPS: Adapt the fips-mode-setup script to use the pbl command
from the perl-Bootloader package to replace grubby. Add a note
for transactional systems. Ship the man 8 pages for
fips-mode-setup and fips-finish-install [jsc#PED-5041].
* Rebase crypto-policies-FIPS.patch - FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
and fips-finish-install commands, add also the man pages.
* Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
* Rebase crypto-policies-FIPS.patch
* Simplify the man pages creation:
- Rebase crypto-policies-no-build-manpages.patch
- Add crypto-policies-asciidoc.patch - Update the update-crypto-policies(8) man pages and README.SUSE
to mention the supported back-end policies. [bsc#1209998] - Remove the scripts and documentation regarding
fips-finish-install and test-fips-setup
* Add crypto-policies-FIPS.patch - Update to version 20210917.c9d86d1:
* openssl: fix disabling ChaCha20
* pacify pylint 2.11: use format strings
* pacify pylint 2.11: specify explicit encoding
* fix minor things found by new pylint
* update-crypto-policies: --check against regenerated
* update-crypto-policies: fix --check's walking order
* policygenerators/gnutls: revert disabling DTLS0.9...
* policygenerators/java: add javasystem backend
* LEGACY: bump 1023 key size to 1024
* cryptopolicies: fix 'and' in deprecation warnings
* *ssh: condition ecdh-sha2-nistp384 on SECP384R1
* nss: hopefully the last fix for nss sigalgs check
* cryptopolicies: Python 3.10 compatibility
* nss: postponing check + testing at least something
* Rename 'policy modules' to 'subpolicies'
* validation.rules: fix a missing word in error
* cryptopolicies: raise errors right after warnings
* update-crypto-policies: capitalize warnings
* cryptopolicies: syntax-precheck scope errors
* .gitlab-ci.yml, Makefile: enable codespell
* all: fix several typos
* docs: don't leave zero TLS/DTLS protocols on
* openssl: separate TLS/DTLS MinProtocol/MaxProtocol
* alg_lists: order protocols new-to-old for consistency
* alg_lists: max_{d,}tls_version
* update-crypto-policies: fix pregenerated + local.d
* openssh: allow validation with pre-8.5
* .gitlab-ci.yml: run commit-range against upstream
* openssh: Use the new name for PubkeyAcceptedKeyTypes
* sha1_in_dnssec: deprecate
* .gitlab-ci.yml: test commit ranges
* FIPS:OSPP: sign = -*-SHA2-224
* scoped policies: documentation update
* scoped policies: use new features to the fullest...
* scoped policies: rewrite + minimal policy changes
* scoped policies: rewrite preparations
* nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
crypto-policies-no-build-manpages.patch - Update to version 20210225.05203d2:
* Disable DTLS0.9 protocol in the DEFAULT policy.
* policies/FIPS: insignificant reformatting
* policygenerators/libssh: respect ssh_certs
* policies/modules/OSPP: tighten to follow RHEL 8
* crypto-policies(7): drop not-reenableable comment
* follow up on disabling RC4 - Remove not needed scripts: fips-finish-install fips-mode-setup - Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
* The minimum DTLS protocol version in the DEFAULT and FUTURE
policies is DTLS1.2.
* Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e - Update to version 20210213.5c710c0: [bsc#1180938]
* setup_directories(): perform safer creation of directories
* save_config(): avoid re-opening output file for each iteration
* save_config(): break after first match to avoid unnecessary stat() calls
* CryptoPolicy.parse(): actually stop parsing line on syntax error
* ProfileConfig.parse_string(): correctly extended subpolicies
* Exclude RC4 from LEGACY
* Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
* code style: fix 'not in' membership testing
* pylintrc: tighten up a bit
* formatting: avoid long lines
* formatting: use f-strings instead of format()
* formatting: reformat all python code with autopep8
* nss: postponing the version check again, to 3.61
* Revert "Unfortunately we have to keep ignoring the openssh check for sk-" - Use tar_scm service, not obs_scm: With crypto-policies entering
Ring0 (distro bootstrap) we want to be sure to keep the buildtime
deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
pulled this in for us. - Add a BuildIgnore for crypto-policies - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch - Convert to use a proper git source _service:
+ To update, one just needs to update the commit/revision in the
_service file and run `osc service dr`.
+ The version of the package is defined by the commit date of the
revision, followed by the abbreviated git hash (The same
revision used before results thus in a downgrade to 20210118,
but as this is a alltime new package, this is acceptable. - Update to git version 20210127
* Bump Python requirement to 3.6
* Output sigalgs required by nss >=3.59
* Do not require bind during build
* Break build cycles with openssl and gnutls - Update to git version 20210118
* Output sigalgs required by nss >=3.59
* Bump Python requirement to 3.6
* Kerberos 5: Fix policy generator to account for macs
* Add AES-192 support (non-TLS scenarios)
* Add documentation of the --check option - Fix the man pages generation
- Add crypto-policies-asciidoc.patch - Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos - Initial packaging, git version 20200918 (jsc#SLE-15832) h01-ch3b 1696500060
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 20210917.c9d86d1-150400.3.6.1
fips-finish-install fips-mode-setup update-crypto-policies python __pycache__ build-crypto-policies.cpython-36.pyc update-crypto-policies.cpython-36.pyc build-crypto-policies.py cryptopolicies __init__.py __pycache__ __init__.cpython-36.pyc alg_lists.cpython-36.pyc cryptopolicies.cpython-36.pyc alg_lists.py cryptopolicies.py validation __init__.py __pycache__ __init__.cpython-36.pyc alg_lists.cpython-36.pyc general.cpython-36.pyc rules.cpython-36.pyc scope.cpython-36.pyc alg_lists.py general.py rules.py scope.py policygenerators __init__.py __pycache__ __init__.cpython-36.pyc bind.cpython-36.pyc configgenerator.cpython-36.pyc gnutls.cpython-36.pyc java.cpython-36.pyc krb5.cpython-36.pyc libreswan.cpython-36.pyc libssh.cpython-36.pyc nss.cpython-36.pyc openssh.cpython-36.pyc openssl.cpython-36.pyc bind.py configgenerator.py gnutls.py java.py krb5.py libreswan.py libssh.py nss.py openssh.py openssl.py update-crypto-policies.py fips-finish-install.8.gz fips-mode-setup.8.gz update-crypto-policies.8.gz /usr/bin/ /usr/share/crypto-policies/ /usr/share/crypto-policies/python/ /usr/share/crypto-policies/python/__pycache__/ /usr/share/crypto-policies/python/cryptopolicies/ /usr/share/crypto-policies/python/cryptopolicies/__pycache__/ /usr/share/crypto-policies/python/cryptopolicies/validation/ /usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/ /usr/share/crypto-policies/python/policygenerators/ /usr/share/crypto-policies/python/policygenerators/__pycache__/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:30937/SUSE_SLE-15-SP4_Update/93e35fbdf460cdfa166e312155552fc7-crypto-policies.SUSE_SLE-15-SP4_Update drpm xz 5 noarch-suse-linux Bourne-Again shell script, ASCII text executable a /usr/bin/sh script, ASCII text executable directory python 3.6 byte-compiled Python script, UTF-8 Unicode text executable Python script, ASCII text executable troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R R R R ljU.h$?m/usr/bin/update-crypto-policies --no-check >/dev/null 2>/dev/null || : /bin/sh perl-Bootloader utf-8 eb7ceab8a8d70034f4e78e796eb15ed380646744dfe5fda893cfe1d240745b41 ? 7zXZ
! t/R+v] "k%*6l"3ג_ib}k5+
=Vs~d t ؑo@ e-Cڟ' ZbXgG=q6y\XYZ6<U^71d=֠͠u@( ^s^3|K^A-gD WICvI鰕XITDD~6]cuż~q7_{` CrxP@Mr p2b0v*75u48kmf? OB#_/4 hjŎVrk4[t2+;O3f@L| ?!kOC ]$S#)d|my>=PJgYU^ o+HaO5"r+l||W 0!)$o;L ̟L V{&I~K]M7"r4Dgmt7 МɅg/Qh@ K-.>Mc\."kBrY.g᪂BT.ѲwUjM!&M
A8_4Y2p, u_>ꐌtt~2\ZΐrE@;L Ѹ_nppOѴnA'3z# I} qdI7 ]!gP7,G~~&L` z,Hݰ$+J7Ux31 졳mZ{%Kɖ[KlF*xd?=8FaǞId!ѷm~۷b![[Nv&px`O(XI an 49 *+6xǝ~'F6a,M*-E Q% l¬JYfS$grcF1,FWlU>ؠ9v
/6紑 nhj1ZqpS%l+~7uqi*z^N1điE^F3{r+^1R6@!
B.
p(Q|r2YνR./ҹ*nJ@||zw:1\<%np\Ê+~+C2K& e Fa@7VRPEї+}&\ebdUf[ta)> ֭Iل
<:$<~Y!`h6 &n) Tۜy3q x2uYqQ~&.ɴ#اJ`?4LQjSu8:9g5y_Tq*
EFORP+Q(i<͞F"QA |( b E9h?S#f5*]3r$J]pmGHjW}K֗
u Z ҩ~V=չ7$u3dVt_Npf ܕ]TYm9 ._Amz?PА -t-OSZ\VĦ8YȒIҏNm^Xi /nxT
4o@($KוڣYʩ|/|<[D%vu+_t 3qf,^}$7 ]}S]!}W~"`P{r)Ƈ J'#iYi~; vK@SX#o,vþ%6} mu;)H\ ~[6hH 2A
QYN}G2a.לFWaYo%0c+ZTK~tӧC1`*^;qdշJqV+
[V[B
M=:YT+Y%AdZ,:c4
Ȑr/R + qǧ1泠ŁD&*s5Vh"l0
fZMLL Θdk(>4+Y wX(tVxBM2h~ޙ &!'z )4Y,P rm .>u.+X y4}!#j (͙]fJpxb>wvZʛdK YxI;sǵBV$wd %*GIe
(B9p/q# &|O:Aud Nwb
Xp] 1 ttƜe #0jJE۔䍠d46هvqqп[vY2^mt& lʣB@By $AvфW8t߂XeEjxZ:# oTS1Õ0KO6 ,?ec? MEF(yƇ2kvDfoJn,]4 #LdU?$6㾢\DD";)K)eixFt<fަsڝ 'Ptx ɵ4
Xz+^HMu'Os"R M `#Cb9_'Fu<; c%~ w.bRXZȷUv#^d:ܲdx oY3%!{MG,]?R]W sl{Zz-*851tj tּێۨ48}M&i2nYÄ<UMr F#+,%bs Pa i |XI `zGuoՓ( U1kFyk @ n4VcG2b8,-p5S7|wds7 &-N: {ӠQz%DtDž7(nI(]̕S{ ެcFy;nCBҙZ @7
ǛOh` Zjk@UϦ,jIN[t ty7L2@Rs W>DU:dStj.[dG!\ }vk;zOƤfx`z |}|Ϸ,EJn 3 q&쥺ӒeLqD*o;fE4O91) _
#hJR,iTds%y 1Ŝ é+pGm<(P kCذS!a v/z>mvvٜ Aך~ՃN5.)Sm T
hX,+p;+)7w.yZfSm )6ҏGWA1@tT]Om"+F${B,YеК$&5{6VnĥivN~E5HD+%/k@S1gľy7 tq;Aϗfe? slJZ,J~?8w!QWR-X{B-ct%NᏔZ7!A i izI_2p|1^ER>5(P&dAj; OJTk6))+SsѓeEڋ*h4.Uh ZY5_fU((YN2Fҍ~%HH ߑ MMD{uЄO67JTm/,m7kMPh$:\Tdl&x.x(V)8AmB?[P as:]b@V~-jh0 Юk:c
dT|lgHO~ h@G(ౘ=n,0
fN@ 4Vʪa0Z
ջ
֡^K6EU2|WC4$>bx>nHnT1`Z|@`{snvprZ|-pB!q^BGŔgkAɖm $9qq?q'
y8W>;qZO42tCfZ~:n'/.᧒QOhL Xn1;»2 =g ]Cޑۡg}팂{A9eh5>X{ßxW ,OVN G*y w~%<+Ӱ
UCL_bOd2Ѧ |qUAF
X.`SmP}^ w C5Z&kavnfOS{J
FT
7 m|9\-$:\xyoi^⩾/|DjRL_| >[Fۆ4ukvF Sźj~ƒŏI $ǂ ! :cF~ig 1Mtz |9 jd|p>h@A^,J;
MAQ 9?^swưkm8ΉN~I`}v
e{*|LG;#.Hwq4u<3и #MKeHnɴB< U"O1
^{_?J٘UouiS w'x,j&zpi7=*/gq+ :B9\x\@:wq5W=H0-T*u@wn<7#.EI@Hj!DMWk$h'@\byMnW57i&Ns3 pAB&6 Hc ѧr,Gw+)
V O[ "ZӧWγ{;oNl F?yR
exh~*e]F! =7LJdst(_oAcJ/J\3֣'61jO9|$pWJ2Md/|Lj
W~"ԕv8! t=1
< Rӣ^Xȳ}S%JN v?"2#lRs _hgT a`@1ZIu$!k& Ռb]
eDk:s*1%]묢, Of)SvhآZ`Ieg _I`C <
b[cLTTdR/"
lfX w˕O
8> ^o#M1fχد ZmD /̅~J訆H!
gh;=zB
C7\I ¤3F1gLE 褢Ps]"M$ܵ`s{הrxvGkc[ e4 }$)PL#ϗVHɬR &j @W \+mޙs>#A"ŀqK(X>N,۫7 gӅsk'ėǬSiK' 6q3oː4N3hxCioxWUSFr%TYы k(4%``ݩ YH @G|TTCS%[P$'aEi#*Z ¾3_uWIz^IV@ڻ*] @H;{IDu 喝DߩĬeFN8ߋQ~qbXջ{}oy+iw=U~?gwh%K>Mܞr-BMc,ȩֽT<7 b H$P۽Rk|
7 4<:>|vOwO,O;G(WvN[J˕|B3
T}ӹC}{k R<$1 ?S{2 h LN}xYת f@4LLop:b^BXaDWmQ r\g]DG8~#c: am Μke
}Iw BLϴ, ]ZytY<, TJz Y
G\؈@# 1Qy 0#-,tG~2P'gBmAy.f_ a^Wi G r,}.:}z
wu!9_'secZTP8C"W. YcJ%?}~QaFCz, 8kX~?}Y2kLTCbH/Ja6j :dfݰSoOa4_W>x>oZ(Ϲ`~LR.7ÿj{^UBuF$?on٩ўM%*.$+=UJzMV
!*g\= M#ύ .)`
s}wFQR;uM¸aᔬ$
8@*ֺmyv *{_syg+u⾸{c$T@FUPpz堄[WI@ 1o y뵞PD+v7 gu iupb O{F,G2&jzowKUPX7a 7 sל?.)8/kN 3t ֧e?_1&X_S P"Quh|I$B=nM&>Raʡ#QT nW!-\u<>P>N
0čo
G1aLG)İ1-y:B`6CUO"UA _9ė ۦ$sT(uOC .
Z@LNk1_z#\'}AJZ-P.SC+/`+#g-iA0.T/-#oy B]-Ve.x !~R80EWOq^ Vq%Dt 3=&u?-Ylw*-ux %T
G } & E`kǀc#ˤ/ ! 5mˣM
*s@Fel̡ t
~&Rc
o+ HYX4vyþ(jLX2
\2r!O1I6b"Tĵ8`Tiv=V3]ؑx{E_kߡ4iϋ2 3e)'H\״e U Q81~>\@#oXfH"5B} {U$+2N"V+ ^`֬vG\Z%b Ήa!C]f}
T_ry1;K YO4M{TRF8G~]C=6:@,rϯ! ,>/ 0EvٽMġIW](ml`A^AvUb71
J(ffxUdcj P"#g7͉O|U[do3p~4:g6@}=I| O4įoܖy/{N;r_0SvZ֎0㋑?ë(/ eFqpuwIF
e^hw#=p7Ĥaz'$Wa UpvD"+!0cȋk5qA0kN?OAm[]2Eud
G4XM﨣0:ZVZ%A*: _9#.yMy 9⭻3묾
$=1kg[/&*./MLHH$ SgCBYg c$'L Wdqe MEjJKo<)qD2Xrxmm$( #d $DIR<^ U'
?s4Ӯ T?40 %j# up)_KT!|QAh$n] Mj rc&itv 3&*|V cd8@.ӯ vTvOi[`g 2l.Yirפғ W .f
YZ