knot-devel-3.2.5-bp155.1.24 >  A dkI%z aY]մ lsmdˡbK B>CrH[(a_:}[zUm/h(#p(gSqum׽*d6@V$bqI*q%/ J4)BD@G)^Rv G񧘡m܀׍%J并*kQ@0Ġ"@u=R2 A nS,o:7ʝӺ̪iZ{MX3}RJ0WD@%jbgj@ǻP#~A@VvsDrl͑܆-pg"v/ 7j+]EMP Z*Ej/$eE+lZ||G-E`"A6} y9N'ɯfy'qMz<6Fn羌i3<^9{bSpNqӡ|(aQVe447b8796b74c2c95f9f8ea099f0927861d0197daf26a04e040fc945d025ebdd3bed00378934fbca5a4aefcb9841c65872d06adcPddkI%z Q%Y#? vnG;fkog3{JckNMzv4إioL6WDcNcp6V.=R5,.hv3P3[X)mB=?(uItȃۄq` Dػ&Y,Lr%n(pM2 M c#4Z3q'"?L’:Ò\F>30Yk7pPT#%2& S `rQz_.4Ĺ+ȯ[CLN#Al=>fEY*FE$h{~!v !Rz{)z h;,n z|KZED@ $mlo{6e'횜Ҏ&N<>p>?d   G<@LPmv XHX X X X X 0XXHX X    (! 8!(E9"<E:+EF_GtXHXI4XXY\X]@X^IbcdefluXvpwXxXy| zCknot-devel3.2.5bp155.1.24Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.dkks390zp23oNSUSE Linux Enterprise 15 SP5openSUSEGPL-3.0-or-laterhttps://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxs390xI %~ B#R . ^ J 0'(9K - tgj M }FX kr  >#" 9,(AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.5-bp155.1.24.src.rpmknot-develknot-devel(s390-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotlibdnssec9libknot13libzscanner4pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.53.2.53.2.53.2.53.33.2.53.0.4-14.6.0-14.0-15.2-14.14.3cۥcczca @c,N@c c@c@bjbDF@b[@ap@ap@a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.2.5, see: https://www.knot-dns.cz/2023-02-02-version-325.html- update to version 3.2.4, see: https://www.knot-dns.cz/2022-12-12-version-324.html- update to version 3.2.3, see: https://www.knot-dns.cz/2022-11-20-version-323.html- update to version 3.2.2, see: https://www.knot-dns.cz/2022-11-01-version-322.html- update to version 3.2.1, see: https://www.knot-dns.cz/2022-09-09-version-321.html- add keyring to spec file as source to suppress factory-auto error- use upstream service file that requires less privileges - add keyring to actually verify the signature- update to version 3.2.0, see: https://www.knot-dns.cz/2022-08-22-version-320.html- update to version 3.1.8, see: https://www.knot-dns.cz/2022-04-28-version-318.html- update to version 3.1.7, see: https://www.knot-dns.cz/2022-03-30-version-317.html- update to version 3.1.6, see: https://www.knot-dns.cz/2022-02-08-version-316.html- drop conditions for openSUSE 13 and older - knot.conf is owned by knot as is it's parent directory- update to version 3.1.5, see: https://www.knot-dns.cz/2021-12-20-version-315.html- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)s390zp23 1684767339  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWX3.2.5-bp155.1.243.2.5-bp155.1.243.2.53.2.53.2.53.2.5    knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/xdp//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP5/standard/9712a46701ac6d5ac5c4cbabd1bc2820-knotcpioxz5s390x-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRȿYѕf.Wa4/utf-86a6925c78cc0fd4982c495e12668f741d6e9e3a48443198b76cee74b835574a2? 7zXZ !t/䣓] crt:bLL ؝02N^lj1BX&nȻCm"Yh:&v4N2TjK A~DZLps7 Ђ}N=ͯ6wRwUlX{Rqn-ƈUnԣJ܊hJRf|<a3a!^AtB l Yu9{'K>%ݗ-hXy۶^R\/78N*ڜ9r=p5aEvvճbKIvt_%.r$1|^ yo?)V:f~#iI9Z YGKh-(k)?IQ @ޓ nV1I&T#n`Ir-CTMl,Pt¿[\ive(l5[5+egQpSi!^FF# D`j&i"x#\dtm 6~!JYeb$Ƥv݋!Kb2;}Y.Lf™@ 펧 s~(!+^۷Ek{`ڥS)㽢)&M@lt. "CܶaHda(2b4nr1A d'kމ<ޙ/Z=R%:C]}3>8jd:^4?G iCD'f:@vzYQeRk84a~ esKpMc]n w]e \Obn@"B~m XuQC SY~Pi摲`R5^H&w.P{ ŊA#o U">fCszޥDDxB/ wd#߀>Xkpul&Q~zhrQOxCVk_[SCo@Y_mfrʫE'q>83uEY;_?T{*#3w"}7d҃Ief -Κcw9՜Ga䫺Vdz8wldz3 =w< >ώ5U:5V8~N7qRyV΄+)ktn4$NnC<-sF=JAEI{6@QZE_2jmn>MJa)m蜃-iȉpis3CΤASDmjŃ,nT_ Z YV# Gࣦ"H56)G 3YۂM/YSp\`EԦFw}MYvH 65ٕG=y("at Z:d ''+흖rrC|}wyŞBnN7%FڗЧŴw&}!"ߪ^c"0g15p"p2;1cP$ôky\&)S8ac ƭQ$ƫ:Lttn4֖5#cWF'* 3~V |TW?=Գ ky<1Yr[!߄y$>SJ~.Ԗ/N&X>`iҜGw7Y:*aSܿ$ݨ1X~BQgһ,( U\ɶXt#Wz=h0T9k1F^C+R jiYQ)7BO^:vVsm1ͪ }exUߐSwb$"<_bCo#R}[R]VĉOj}vxDB襙z-IE ԉO}o ,x],oVI3?$cRacɔ@oPIj8,󀍇؞' 4LoSxY s׵ڶ*4zO)EiV,` (埅p1¾ko!$:6*%ѹNvz y҉>71 FXGX[|9&JyCRtR9鸁cאA^|H|7&VOW{-Ǜ}d$W! ADy̰dq 2H]ⅉl[?Vmx?S|{h:AO\m%CL銏%h6o'u!9}6+UÒ&]8at(Ju5 h04UX>=bջTqT1G 2:9ptc?bkltPo96 r>%*$^&ў-r*} `@Zè\{lha>*Z8@s(rʑ&YF.%/-^i! U3Y[݇U4q@`$7!v +U)QA+4`Z<7AMY{P+GU !6Omzq[?8( 9_ﯽCCEIWo6/-aVnUwN(v+#]ƤcJz bϥI 5lVŤk)9cE3vOwh`h,\eLR!Dxdv2۸>QӀ͒KF\(2 &qL b.f 7Ҡ~j#hfme bйu$,-,X#̿OspLZ'Þm󻔮upW<}VSOohCd"׉PKW9O|l=hI/n45U} Sh*-،m7uJ2f^0}U]ifmv4Lkb$p/cȦ%?OkX4ɚ"օ:flhdve,>,hzFޕ[k| s"1Z +cQO8̶.^rPWVES ]P ߔ0c*~*p0~(6&azrP' Z᳥t΋(t 棢5&-0?.u*2?D'Fd&NUJpjĒaQ@Kc  '+1;W,¬G)C+-g}?N +UD]n7Ѧ P79xP/ZIw u>^E)]/ $FKt?0Ln1no듪Gsla0\.vu$E1nk_CF%H ?iΆt >Р;A+/ _d5CDž Qd78a"y:ף3n2`Vn$4(rP}09 |gVV5C5Va0R\u䴥E y-+WD.d't.f~%eX&7v+?'"bwf1ЙK7ޗ=21oEl*3vQθvQ=<6נ>7[K  m<1;I$%(zZ~e"ǎgCᙫW&%S GC7`S Պ)J1-W":6EyJjx<6KUnq_֎6ڋbKgؾm)w> uiВ`nAA2 ֜>@{.2Q5{:^mNbW#.9bH2\၆=QN#aTFocЈxI"#h~ gi-DZbU\ h[SX{fc_Sk4.Gn~ӥP#V+a>D>QI@d`rϹI!P+X3IV,g%ȁĒ|Xmva2e1q pLW&\bSoc2JW[ +Heu:DۈȚj?=!lvaXH`twkEޟ/?׋Z.j@ёq|(ꛭgW[8FUz`ST. DIoMnZi/D! ߨ1 /x{eDQlDmRtX9چRvw7HƎ0$)(J[$[k`c}l/1gLM9O;/4ĀNi*$``) cE%^>ʄm~V 'F]m}NFM{asJHPWu5MP*fwс5Sv oorgr!vD>sN!!x,keq]~,Tk/Q4?ĵBt5,?Swnҗ\I1~Rgg뼻ӆ6Gbc9wF!/Fi8V`4 " g TqUboQ8QOhOlI*p#Ts~6gsO(,}!Gqa23 {36Jݳ[ZKnP"=pu%"xG}, B0/+dI!EeTbiR]75I" G ڐ?&VH \Ln\"ꈽN3Bҡr1xJxEAP: ]tƓ^PěT6bo>˻n羮$ f?R;Zl| 8~r<\_ ?0V~7*8 &^3$|M4cC5?YYno0NKJ$ݲ$ZT@ -@9Y(ؘф ۓIYU;$x:{"/Z 9F9LK܏ rV=K5=QkA.ߍ~vX;|)ɲM^;AdJ JK۪aU vt5?f阙aiY!`6ʇ08KeFS wt*kF( #!]͔#ofa4(|APS\*N^R`Q.~}rJƑE~ H8al[kƇϵjQ=:}D-ƪ*`?tc F9ȴF9bݐ8Yƨ2-Hp]ͪHT Np5 <-O⢒ :4z.8?-C!x\oW__aTL o!x jtĉTmRS|zy5u{?! ,cFl[KXqkOO\.aE۪@ 6>^ٍ4l+6'>90|daP?,r ٠ˎa [ưU[5с L\|VOpiWؕ"r<TL[_q~hh41\<ोY!G\3 F_`>E铽)hP~ `4f?y=FfK[_z3+s} lHe8͂ nT1:o/Ǯ](u;?r.G 8MX$yDiFRY֮5D<^ >/_qD#e3kТjJ$qÀzW Xab;]\&dW z[c0`ϗ(VDGM{OF$ݜEď!@(̮|lSa-ˌ$&%zVI 5ye"|]W[f}_&r?RhQbGWRy@1RQle\T 8q]` R28c8g֦!ܪCrou?oj cz&OG]~X9.RmQYQ,Xq PM2RO]"ߐW_.;. ,M[Nw4#׎vaԊ?~FTf6u_'[4|7g5_L([!pj1l")5-ؙPu߸#T 3gDA]ㆂ5[1C$reѧj/3Q"BrAXo;&L#mp"9&#؜'[ECtEZa<ɜީl4F$L{k;?w䥩!w}Eq &\4ibixn 8d lwbWqai~]/?8r+XmvarݻRjS3Ke H&''[P<'pXrUHee8Ău*4&:ӱTg^E Rf`BvmJE?5'f'ꍁ+~ q qu?5d8Or*2:4YVSِRQEF^XKK4fV6So̘1[F\f+,SOV;}wHȍ%m$5Ƹ c)/hP@YKV~Hp:F{7$C9!j2)rvu8]]kXNk!Gk̉]:xR9XQ!wEbZ8(v8Spv*IJ?v_d;M0>Ea=&IiRjvn# ٸעPg7޿bM@k51{j3+BD/E |6264/93ykVf`bM6R= Y-Fq:=pOYC0IT{8$B>fKh?rJy_jkMa[n^M3?OTW+Cѱfk6;<1$F9W?ڒT8ʴjKZl[Ds:[Ina]O1P#1 ڦ {KZcb˜QoZ&K*c%p Co4֪^^JD6"@eg겳}T)HnÍ_;-9;Wyq5jS <Q̇|hCv-Mjz#w'͒C꣊ۊռ%"N^;k~QXV U4m(e"h*ePK8E>Ⱥe߼I4Ϋ- sT]SlC·~K"-$ _귫t MF$#}+|䭽IYKF{&*Dp:F EQy櫔Hy;W 󯆼P P.^WM#L(YIfm*"@p/Ts?.fWrfX7_8ćx*Y¸!mO5/1ƵNj:*sC@R˵n~wv6H_ϒZrUo6eO Vf3ѮQ%"=rn&.)[7 ΒK ԃp8CU@)-[e-*7cP,C$!T+A8BY-l,g f d)::#5d nQ; |[XP#M@ OCV(pC]TV&rΣ@~ޒ0%=쑞^SK% znoCVsύB#Iy~%?A#Aa[ uhz6-϶9Y,%fuk/eW: #˴!rhƍ/P~& Du(~f6%NO_eZ)ͺ\yy2\mE鎆(*xـ.@* 4ꮎԼ %p4!c7O70?ս)+_0"P@0kiy8bh{ e\RqVSL,xHtWŸgޱ:ouy21GQo„Z ˲׀3v\悵9t5Q!;V S`IGuj#_36ި˨5{ / =X! G6|&g}%)Kw+ 29 :2,K|V,8̀Xw#O@u.-ÔE%fag? !gh,/ͻ!۫ nT**$B}n%9lyQhNI0 E%!h&ᕽQ 㩴camd*R2֞ m[103.![B`5e㔾32DQf4zGP׼tbs> Cܶ8x'_{8+TXF?ՖSlB\ڢq:oA_í%SMx%Z(v&˂o Wu󂑈;\O{56#2EOȑʯSeKr92TU+eP;a2Q՟,NHb:XAA@94vJ+ ;2Y+ GOY6&w%@gp:g636XXwzx½@=SB@Ύk"إXκ5p `̠kT?i,] !erK `[lh" X/@ɯ3|-W vqb20iE(,93JćٽtjT,y(84L%tq{ 'u8˞Q)7Qg޿"9P YZ?{`ڲ=j~юEc0 K_j 5|{$xk(;o9f]p4T;u&X?BKxc({c >PU <+}Za W zqezw(0,CH'cJ/&C#d xgpQ7ˡgV3pΩ3i@}GD/%:wiWmry&ťPs7:3?A7jiAvWw-Tv X/ B0jJ&ADyyQlֱCia8@_y"jx(RsݕP_p@D~^X^ 4u Gmo'(W߲mpd7V"m[L)H4]usG|UtM)t+SivX8?Xb5WOU˝@X,_qy#rLzKQ#8B GY~N`M%3}+DjO*ƳKl@'3u %P#i]4~HhtM֞Ql笤*Y&зXa䈥3F6,0K>XS+fRgJxAXcWy}Xm`m"D͚-l/zw[C] N7;B|p?y ^?؝˛P=(Xas;nCQ`F ќv .Ke'd8Wކ-ǕrT,^=?3AХ3ByS%!a9,4\0KĬpQtPX32b}Dаn Oe8U8 (a'JJQ_@Z ';m'-E¼ɺA%$s`&̱UFQr&V7$v><{5Sө5%-Uzy^A֯:LZ{yh! sZ=] Em2sr:!)`L %0>Z0䑬 XoW<SO)Abp,Ug%n*@(7\-HvMW N_[8tcֻ3ϰ"S1YfZo D%DUnĤJF;0ɧI 8J/D \k;>i7 Aж?-;Nz@]4:Z,1:"ogNnV˔[3@73mݧ^s#ED| T2,O+_rDӁPfS`sjjHח$\ Q]V ՊgW`22ڝT.7ܚhU1ף k{!|+]AJ-wW -a;G8VMsKy'fDޣ6v8n1_Ye`VBc tNz5yFZh5?9u1<2f>26@HTdoy*Ӂei68/@)X]xjv3ɤ"/7ڈ3LH]bQW>Ps u=`eC[cn fa w Xd uhy 6Ek_3^"m(k8a]nA߾ ^~q+:ވYZŅKsGnn*`[DitĹy g&^`e"]Jg9WKY5Í*2Ԩ ;Y,1Egr?dWFaG[_OV]`~9޲q&UhYCS0C X2Z"sb?$)F4 37TBfws/l]i?ޚ7$0lcaEp"hmɎqL H*#i֣8>qjPu%϶P$էlJCsf( z78<˶mg{Ob+c.Cy VR-:P— @:'.i)7^Jً_ 5s!x a3 ~߮oך5Nn膡Vy[jbؘ~t#tSGX Jx&E&>|#<8QaRJT\#*ҟd{n)<Dp^ceH+Tiְu8EL~M0 &;Dծ`vP_y([NPIX^èjּ!r_3ؓ\z3݂iEȀdf^;CXOPюCڼK&:RıVjC)o,P68lIlBxxlA"t9(Y5SW*OODņ\B@IJY-Տ_>wա'@jWvy/eFF?* VSOWXu W1)(6 w4ݓ*V9`ɶK05˨ `gE]dX_#KE6/ G$驂IzpXe Yo(^ *jټg+J w T0v:l  Cx0dhx:>PqtZj-+G8x׆WW&u3o],5-54JɎr06Mx&x4 .yNeZVWeߨZ8p.QPC'd$K u~}MDjkP@|gM2dj[Kt~Uט~o!U/ْeQ!ݐ]#C}R).Đf3y|Ih+F;na7T.t.?% {hw>QSrKz12Rvsp>D+( 6]na} õdVvo.oE˝`y-ao:{Q>~jM˯zXTm[ 4ωasQ&kc xحLV U5ebL1F.@wz(8z>nM:׌#}nV7\+VóYxsO+4l}u.ZT&q#~C-0ME= %ϧsB#Cq$ or) YH+1G%&q``Tl~rN$*20ܕ=?kH=`HԑH?Q5 ty+9rO"FjW nj|UNлgu!3"w׿ 27YnDD{Jf/9wB7@ɰ1 uZ],HF5G7-;J[{9rKR=v2no-eȒw_̑ \EscvI,v^a&\V3bP2֖nu{ljYJh>h=EIA. h0Y ]b+%T״")phqN"ì[*F T,#V ֠N4D?B%JCeL}G2n.>SqͿ~4ڎCu _&-Rg L >mD`,K ,QHXG5BG+o a5Ocv5QQю$H{YpEqdMWKU\Tǁ% rȞ9Gho hcR610 ˂}P&)^rWLD9hhVP\G11{P3nM:z7!vZY~2/>嬧}J`\HV3{< 8 X;h< T= ߡػ?a,$d( DZ}pFSVє".{<H!MĄW_gȲ2wT$f9ehW&ϳ4<ԡ^n W*+[>Vyؚ Np7AZ1Ll:JS(w:Zs1;b9sAUΛyzF+U8Yb84Xl P/ QZ%LC<25F% {'RF Ȁz&ն ־5Ņ@ (>\OųVË _&pg!  ^.͎j0D+wU)GIowSKMR_"evqE[ lzo7C?מNÍ@8v09dJmj&> S aRoYa2N,=JoH~Bz9KVR\s:3_=pveY^+)ճ1NՋCT>'!׎ռ/B8U܉{gy*&)KW9A3YءʜF'C2" Ϟeh=zI1EqwF7qZɿB5q4rAYdim޽6 ]AGzf&b*EA qOv*Tv\;AJ+9ϖkj_<UMkWG9vkt,rg$]Cl;rcx҂V4Z2|)s}mmk=Y&K0Bsnp)Y<~6zn{Ī7̀y/i` D++%UpT(;wURe/l_n·y x.FsTj P\ga*3X  s?ˉ*IRg)!l䏺b G H1NfÊ!/z{¼2Dw߮6mO0:%^&:{F~m-B>9s q'Q&;530l̦ϴ'CmzqZ cb .r~F46Ӈ0umzܽ_KFt [ko߼ lxJo{ttfHMdNmQQ^Jy(z2E'_ ˍݮqrj&4yN-v% q۪Sp,x9p2VyEkS.xcG.Ymyd8ƢH rϔ.ҒZpTIFǾ# #vÐu,ݼ),9WjpLN.>f1*Z6RorP[m7G#ygk#T[IEI/VbMfi=NdCg=ke D]9tA EPWr}&AU.8 kjx)a`=ܶ@ Rg.T48EUꝪH5rr.i3"ÜF 3 r-ޡT= >̹'> J:^#ظv\ÜL @1\-𓜾`S%sw1]ꪭw=m[i?֭kj¾&Y 1 YL3  Oş@lQLaSM2i&|\*69>BX(bͫ o=λ 5sLQ)dat4Br%txr>X4O~҈2`:-ע_S @Bm8µQ$f'R r* 8,^:׆F3nH~W8r 1U@9Nwխoܪ FP\h9 `~Q[T_H۾="\\7[ۙ 7[;. d,QR2K!ڒr7-s s-'Mۜ9'QVlAH^up} { `$6+f[y;R@vɰp]Qn<,ng `%D{ib$9N A 3LcYq-*%:&H$$q WynPb=,Q$B([s\MsW $2 ^6,mݯ<)rV;#_x U-O2o?,虌tF U$11R<ַwW%uRKg\l;Y 1Ch9Y mJ  Ԓ/]eD8]2aģfX!c_>c/Tk@wtkaQpRbGTbqvm,qm_h7euǎ؊?ώ $*ͪ)k(0VֻL 3W6ۜ|_D岋`kyѾ˄g%8ˆ'j@e+c,Wyf3VW]3Z'|QzMe2aG0oi(`%pP&%C}vє>|N~K D|?Ѐ3q *̩δD&'AXۘSS L;snqb$N7Ôu@ 2qeW҆yjo:\ffg3Q~%PKWz[u9C-?I\ɘagDŘ<flS)% 4d*ЮewX5ЌWpz&z+s8ʃehVtIya],x#rF1Gui_;Mҵx@Ƃ)⟧LtӋsf"H٢|IE .uq9RS\ ݦ,%ݘ êWqݱr2l9t^838PrS6z^=l;-~F+* {[2_,67J=gn1=BCՆV~Vn YȍDdT0hĴAu}լOp`I6׭F;zyOjMLy1sx#419A ^jѬ}I)hύj !8S[A[H8>/OFA<9q3AHjAr'iU~\jGɘQ;+hxaW10ܷظAt aĦp\LZ1}ؖ٢Ak}Ԙuk/pj9e.Wy6xҿ5<:AC&: {O| WHTȯmuzՏÞJ18Hc@#Tsw5a4BHkq̒’Nz|{`^E` =y"[ctC"), ɪ1V(cR<م[c%5Δ[rYvi3[;OBlQ3bfpHT2aÞ}'D[kMgj->%bͅCtgH*(.76@M^1Y+{-@T(GSy&To-xy6!P8X{`08胭Ս7W)N$'1"|T fРD;֞O16GV2iMhO_c-P a˚6/fx_mӧ'r{z|0۪* yC7`@Ir.E&&3;Q`UrLk_p/1BQ=ɇ%Iz [O!# kl$Z`3I;!Fl(@/CP"'t  vj/2uͲg3(t;1)Y~zW蔘J_Րo4 -x_e3간T̛B^||15(ϝW."d@ȩb%#0eVbrTUgJC}Qm1—fő)@@d(0Fy, u:Ƶ5ˠq!-*w"IIlT0I0u-.Bj*9JS$Ҁ$i'm36I[g#.gfƴ>YY28֬z|?~hʇ5w  b'P$&Ag}B M#tlM+)J\EXFY~O?Q,镙"6>L8hM~vܢ% +0zħٷ|K:] ILA,o_2!gc~L,єXa_3Ayr vq'8wϬMJD)uWcctE1|SNUCnALƃZCH*kwU-rꪀjr` PuFq5g%:ɧe;=$rkG4J| ;3}L%Q"tN/DQZ  Ќ!bRJ̇Fz"+G[%!S 6!GQ ߯|iwwʗnVU=:l%1w3y(,:^ȑ6t= pArrSJ. "ƾ9MU/;n yGU z1˗P#UCW%1wkҿGA-/JrEǓ# RUScb(Mpd[ {3L( ?%`xgwS?߮W3 6Up^rY>0Y>* C+Glҋ^F=YCkEDʚ:D nvOuȆǭեGBtRWf"%f#t Ҽ =#껧}8ݙRbj p+.x VR\6c"εH[;;XJ@bz:ph,*ޮH4# u<&OԐN'˟:'x!Lums;$Cڨ-C=_@t&^sN.Ժ's2},3R[|$)g&m/>UWhzP{K!0WeT/y+r((_J:$ԝU5,tYV-/ҹ4EjԖ]tԁsb[MJn=L޾omi}$SW4n0L0]l C]#}RKAL^;dv݈:PSƬJT,q,vf.7bj H9سUW:$Ϲ.%&" [m'K!(4NtCMhˮ'_eۺ?, gԊE*D#R(0?J) )C67uaWh, w(V0 ؁ӅD _ԇHVLo%F3 Hh* ځxJ-݆NR33#V%̀d&<ճŴ=p럟enbV۶Ð {1kTC 5HmBcow p$r4odr[UDJ^}صNc+Ao4kr\4"O^i+BGmIiYY+t>Mn0)2 "Csёx]e lհiYW:3?G&qt}ӛS jko:)@]zPv&n"K׫ ;qhgыHP߮P;Oeiw<aUD&5yjF{:B)B䟢 (D2XlQ8ڭ+p.p;9V '4*v7G%i+yۡUMSm?nmi( m` PUu;۵5$ djڈi^,v,¶@ݛc\[KʟFnS6lçqQRPA +yjplC%M3 ͧ3gQ" l #$n)̈^ib ,}mMbnRĽȢD=Dv FGCÝ("W@80CԮ]r6) YiI`5\9Nww_ݓܕ|[HI{O/t#M=(2Zv|s"G@bTmf}#}R^'? A*)KnrO1m¶ tkqЕvvy?U-§XuR+K'Yox5=8XZf_BeGW+q.3'.LԚj!7Rՙ2@ن-TB6x?o(! sߙԹJmD )XF-2°N\% ݉->׈Q>zbdvJ}"c{ ofFacJyH'K5SE}UcNOc43AꥏAQK TOc]zUPFpɏJ@XߛtXj)):o.(WT|){8$'qY`(kQv\g?%]cu\}N*XGՐܡO JVu%[mgBc/2\@TVņ2ښުWyM܍SZEL\9aQxZG&/cQM/_ރ ?QN}xHEs:urWUn[Fx$߾غ{JXΥķ,D2Aro!4ih/ !r4?td.zi?$uo~}y?\|C.R]W }ģxm? Qr GloT46'Xr&*žb$5EE, .-gCGcN:yq1>7nD-3\4 ;2)tǿeWJIF`is F؋e(YZqD?G8V=-fg3]A?o~ܻ΍B=>*(?176Ŗ+JDbU0  oRN/S}ɳkzb(([Q߮'|-HJә(k!%"h9,@|=lu m6oR͢%U3ΞKC[A =f= U>`f+|)k5d !8AD>kfGgS@h(Y<pF, 4sZ[4#Rn@U3cſ\ eQFU[z%Ifa|زoiŸr_(O_q*ݵj=.3{\h:ٯg PoҜ]|Q VLJl6 NB*~ ^"Hd-t?9^nJ}~JijH-Hւ^J8$?R}C8kprŀmR"¬X%!,+:wPŘ/"MwQ׋烪[ATT!I1%cXv&?ߔ<ӪqtfSj)·sy=И벛gPt]= L4/%)H֙鰞/'|5ۓʽо csmt.DZQq;Pv!i4 arQ̤_{"lZ^\\6ѐ~͔  b%o}։uC,L^yIz 3POmjX 73a} 1}:՗d7${(z &8KNQރ2,Ýi9AdH|-q5VTִ *>Sbj j=D֖R=} jkJ3j B@+fO1ޢhb@6M?ciOIV~I%WF]'B Pb-K emz7ѦPLyÃSʫFBNR~!|$inDd71P9{0 +ΡTe7qTHX巉GȽ+77c-u{h.@ꡢBzW F]s_KI;`,qJ*&a57)p{4`6!;Ġ)` ?H$qwc!Z>_G|bpR/.wа;Ug瑥 `ͪ$A0#fa@.G8LݿU"ᙳ;Z V,a?&)!RES>>1`CP9:P!,QjZڡ LՊН6JeˋM\΢!6&")|n "kajɃ-:lZKmq#SMg>[=պڟ[a/0)!k!Rb̂RB3 :\¾]˛!g?~,'er԰ڋ% 3fȍ!Nu`|̍Y֑F1N\~ ՠYl>Qݕ!.:ؼ< \c"FKia)xg>qfT]07L(.Qh)o*Krw6`! {迵#]jy'IY17Y`d!^Q?Zhgs]Ch/M臌MS$( d.p@aJА"MG^o!wE FXH͏I@חP]KǦ0똞̖m1pe66c |1^KK:pD+.Jy RuA~ . 7%IÔ)q˶A7FWOZ^* Q`XǸCRJqC k=׋<8tboDYbߒ=@ :Ь\s|“b?n 3z#ຊ.S'Yޥ.J-eRȃIT;uA.zt} POv xz=7!PԥL;y 3\ntN/ nL-`_‚w>D.ځj0>,-``m z)<"ޱ=>} }]I-6uX)-D;1JE*)<9w,b CO5ƸL-)^icl c%x#RٍnF´U6K&ڵKptc Rel6I£;]m68ηъgG Zxwd R'³z#mҁCsw&R?vbv kU=2=j]ߏuvl S&;ym10ۙLR@LA::'讐mOX[!f2 { v5R c7]8r;ks2E}o+cw!^5qh[5o|]u 6p 6T‰%vȠ37M3_*0vحHL9y̍SG1Ƴnw#l8fVVB]a|Z &Gn_řiCJc>ڕ3uMSUJ.i P? I7S^zwj)`X}ùz9NډYm3<ѭmGʵ85PH뭨!K9>ܣ8%ɀ=#^&̓"sO$!'[x7; Tgޞ^9HQXnzQA>E(|\ ! ~l&ØQڋJ5R\߈W/5oavqZ{VdJ2,'<%"q>xl4RUe-X=NC|Θ< Wqpݣnp!^#¤Cf&h[S"fo( ~?Q-k[hO<8˧&B:3 籛C^)=Wj5{a@8񷛁qli)J~Q.] 5$6  (hFIvR6qtcP{o8S/,W|vv _{юJAE!zlWw>^.5샹 P#%c;('b^Һvkן>dB , BzXv;{\8$ICtot ޥ%cT kKzȸ)EzŘ hdF28I(ɶ3:':cS$H6;3$ν3.ZFi@("~jLY֢0zvl_MM5llbYSpu 5$M뷎S=n9jJ2&^K8fL?M ;y0[0W&ఐwV j&Jݿ\X}֚ Yr$T@|LU"|7%vYn/Tmgbmڀ#PoJ 3W7!ršWvq]ICտTcg l?% [Rkȥl<Ѩ9!!<2ߏ,Yg&}= p .aMmBid<_G6ܓܔ.,%'"Ɋ aЪ qwOlQpv;8}7$gDJhy2o&D%~U-tz|9ȽNɎ2'4ZSA㟪ّ8m!u|7/RfcP u@?@]x>D3>:1bܵ&|7{e[n᭝D8R+Y@SeL1%Fr: 0s0#1*Yϲ{EZgBUb/԰jOO_ n=s-ZSہQ2OkIxjP\*OmfJlM. ~3]hI5S결;ޚp̲ +Jʆd{X!wt<$pɶc3%X|-)MJ/(JqER ٱ!uIyNREHd~23IC @ =᝞vD%'yvs gDk|}.eBk1<469{ 85{t7kdNZP 1|.:B fxdcpP," i72S H7/Xc:8O1$~J؉~K5ӖViHW eGRх;1/TiF,W@AAb9]5a/tU NUžL$dN6 'g+ vKY1G$(F!ˣsZN}$#iqc]T6{siZ~!>mXx-v_Q^+ǸϢ]Kd vMQinGfUSCWdb^8#2^4͠r<]v998 k!Ժ,UzcO q Za.|ugvGohK:~ \CZuL Ѕi 8fP G9;qz5M?xս=uI;҉ȘE*X_(N_k9\ELKWYǕe4s&jy⛕`u+&FY-3 CEr>{e46tq(h>")mHM4lsJ.d0Τ]}JhA@q\ wÏ|9j5K;_0"YN6UtUe[p:x kU%V?)Ha8Ih{`ah{%=I!m6GP*;\~ H[͟hR'Fk{YtD]٦Y5(wa{DW.d 7i)5~duˀĀpn2p4P.gr^v]fҙX=? '}ԄTN֏!_ܹ9T w{tDJpAO::ە-m\d_; )S* ۪#=;θIj"tF\Zђ{B= &$MbVT˞qƑ G"ŕT_qcجO&H>|e6<կxfӹ渞+j "႑@Q T$V IJؒ5grq%Ms1r?7Δ-Hcd@sٕ#/˖])%*$b=}evl1}M'}شdK"Ťb'%TN;5r} _yV.q")+\Kk-9 JoY|w~XE~XIURSR# ZlnR? ȟM0C,Q)C~2F" x,$_n~ף}Ok5&P b̆]͸ƫlrq<ƊS/)_bu%Z]V0\XrF,pLEݿ6s\Gz)@ާ2o ya:y])qM"[(IuL[%a7hyux(V3-]v0n{Q^/&Fc` AZq# lRHPY i\(kD=% ]$;JI0`Nz2;)߂ U1O\`;->HJS8E 9 _H} @Q ,8w>hq~ۄkDl|R0{0ͦߥ&Mlj\77a &q*M>פfM\k营4L\׊u}$(`(5ijOlK~1F{e@FbËpf|? *4ss&pP6)mw"˗YôP,AEm+ do`!vSPev˓tlKFW?Kjy'=˰kF 1G#?GLv[ 'rhYEmEuw/ytR' fɇ]0'= rv"1sdL?lqNo {D}m\jtaܝo6"V>C#{0m88S-Ҵ%͞[J=m7-U n(Kl z Dv%sF[]%.4) x+sFC$۫)ˤ{y'ʯ;]W)PsV.9tgRBc%ȴv OHڌp"muSCs/Cֱl?£K rXV;H .hF!C3?QE> !0572/r`ivSU".bY7T C=X~@򣲗(c-$y:b&aw)_+ީAN^Fg0qߠ;e0/:&}~7UH>jBuQ1 ;͘Wg}6n o18E|gv ;:JmQ%Ԥ`԰ 2UgҖ|xf`=V0\@|E](V֚׵KvV[ OoxaUT5syw !t0𨱺Ļ+,$`CK9}S"F掐_J^z"Nm !/JOB׎^;`TvuJa~!kwpB e\V'0Ŝ~v7]au1 4~,42h'ki 8.IkT% a䄷-KE%HƱ%[[%封v" I؛fRMH;1R_RbHKX 5D,$j)?2Q^r-NKkVwzY|o hʽc['v5AL\~ٷ IzpʳBF;k̪a}6̤"ZJZuvE0 XTU&JHNba= HU8ֻ+| '[)>"(xTeCjm)A L\-۠ney1) $MN3X'+Ro).+jQ!uW<2<&aKJf\Nx|L H%S2zHNѧR ;pj[@3d`(r)aaL'W4fGN%lb1OW8H.^q}s5 oVP鬛؝1_Ê妻2C:Fb#bwu9J$4)7mɊ-<}\HoZ۹2H5 K)Cb۽ޝ:stw,ߊ16Yv&悅.נبʂ:׼G0b$*m5@)Z;Ačt[~PZN5@ m"9Кmeq+>x٦%T$,cpDQ Se ph8s֚Gyˏ *F,6*t 9ckFe@oZWIIWd d&;IQ`>(Xh7 Oe #uODi X}-o34ң,q|1s?)8*RW5!תUGSG[m5FbA_WH8;bK*|4Hcق*Vk=-/'28G-k,8v?bK>S~CX]xAĄ:HV4.`LF=Smwy&EMw#TeqdXQ,yTrEdf,(PQ:3(, RXpM{hdSh$(غհNq&U4Eh7dUzv+K>p Ym_lHk4#\׻k}<7IIs%٤m:YڵoFƐb~S̝?# e<6CQ'`>rG5.e9.|bWC^V{ܳXFJc =ӡYzċ$Y)dtqˇ `/)H2%XN8i^>* ^#xH"/lƟMle)hXY =92{l [񸲖[X,C\Т=gO!b$g 3llB/0Jq}u~N8^⦯Ve|2u[?t3f(i4H^%Ϡ8ݎJןD4ć8V5=n}8B=7tέĸ*e͛[oOsӝL!HFqHMo?ŀT\o /\F!qhՊ(5) 1RCrب{>"~p-_ᴮ4ZIi+Nww2&v3ng|詐(Lw}ϴ&bGhk- 1+шQ^37,fbϟ'|\ri} rG3IM@U;VDԒen6Ju}'X U˜ uB>@ǃKȣ'ֆ5g~:sSK8CyVL8*(t /B#!M)XkYVu6t*8kzNe`AWߚ@ zQ{0cc+Ru/Z*ӕ|+z(8EFX5Xtf1a–Ņ}gKRf ޡEeU]:N)3ثH1t]ɗ}s O"9I3lo& Вc .:iO/Coq)vΣPhVOvfK`J@I({ExP'PgFB 2|lSÃ/屹cZքV7]\k ME`2lr4ʱ,{qݗKKгm! ^)Ov|>pSfjg !ǠD"Tx}0?WeL7 TT^.C_d/]V7E5 {*/ȋt=/]~go#_"?SI٘JTө~K D7rOQ{/fNTʴ ,ЩCA.PRVPcA>HDSa@_sB0LД1S:{>ZI\25ϻl+ h9Zߺ꯰2׎<~춋6⨄Wތ_)&P4Ai{  Iߘs~JN Kbq+Esx1iQZW"҃$|$]f -{R;NR"B8xo#Fv4iGhMK (=4Z)kR8;<B'o`' ^wCOyc5wCjze@EAN1f@rnJr#%E;7[RF\>fr8c![g`Y4בtˍ2;%4B>}ڵ8`ɛAqSqf;r+ [ޜ{jt}ob L4M)]tgC Z^tO-Tf mL +?+0 . jxw'^E*Dl o6P}XJEfNB̴Pgo ;d9Z@1?_t+k=U,ܖg5 XMP&, olj14 JCpvlJ TwI`Ky.Y~X@Fhqbtam,"5I\< t~H< ~%?̣&!|@,w&φلun CFt:.&7# ?;MO^>ʭ bxrpr;0qi0u[{$e%Kzb2w2 wOVÿ3vluVJ*Hfܺ;9D!)r?&x[7ٰr8(p!!.lba5qWy2@TYO"mj`DS1 ZprO |Js" պ|`2%Ab=Ru 2Bv#W[(VUY'8q K/jv4B܅r*:jWBưjb-J$7f9{-7Z .8/-G@uR Qww͗ H.~LÀ*e5W $RNw&;<'?ȆTV}cYk(^+`X1e5nbR[+~A"yq6݃Ѻ?Y@+qJ'HQ %XH.1~gӸ_bOZ2Du۵Qy~=O3ĭJJ GH 6 sխ@%$c|3@cv:2ڄ M`y,腎[̉X8 b*CE.}if1#40˸Վ_-W8E\DW y7/MߓT}oewib|xV'r5Ep"CM `jTFJ l׸h*8!ydUo~K"=IJC sL~Mjsԗf+tSQh٭z3LX6ߜuȫ~Z3jM2}0)|˼&7cBv]ҞN="حRu /|bF|+5zWq߳ n.V!E䜀Q8'Lk=5q>:M1ᦸR&ܶ&4xb`ޜ[sFTV%Ĝi=lAe*#kZilZ WOwfGcUؓTn7v(КLހCŽK~͛df*$cvL#Ə.ъXΗ$ ~w.k@`aR5f ^XU.b(#;q~NIEl)'HŢG}aϲ 7[5ċFrqiiO[4 ܇ j 9SYEACg3K) 0¼AX9*A2v ɩ RiҜ-卟I+S\y2|)R{aiI>Mد9HA//K@o0~c>юɊٓ[@n~@˓`_w5eo7ƓxxCA*E+'Q`UeU7!TTƴ_LLG.KMrͲ?!ioIY\S%!~5#=Vg {4Z~%#)>`PܩcHpǭ{g!4YA啎%߲/p&1A0*& R`[{ylrr=WsǍڙ;:-cmNqyqx0!/SS4VV^z\Xgɝut,bʮk(-` oI(UX\ c Nz#y*'91dzd֑P|w3v "a tVQ3Ѭ4r 0V)R)u/7)+& ~S8ro_(ʔ;=`K~{w*c.g\O ,\ҵ]F:eNL^BBff'k ꨖ{C!EooXXX1#I]4#Ww|Ϩz9?Dn /x>I6N $N%t aXbTG;w§U\YWN8 Tޜnc,OFM*<5l+TfiWVU# UVqHG0_}#v\ȉZrLq?)|+%`6#ӗzպnkZTC )+ʨ՘ho]?$0}IN1l L$(7? ڙX˲T Edк1[ H%%vH.S06Jֻ ǤތH8-^ l{F!H!oWKPxR^OyDl<+ 3;hC.J$@9wS^whJ(wj;fCQO PD6S:k|VYv򘤪=) MiqwDbo$\+ *[}~\F:5zyw"DѫvzM?ߵōȢ1I$uCpy, ۡIq,A Ҟ@XL27M62ό7 9q{v gR 7o{TⱋǻK H$I=/(SUw+=Jap< x \1lr\2ZHc¬bz^+T'V>LB|$yMhT Ԉ|v7ڞ [uG=