openssl-ibmca-2.4.0-150500.4.1 >  A dQHp9|j]MUPZymgj(>ψ (Ot^Ezټ}r;A(c VkX<sEt,G/e$>GGe<_<{PB2T NKR`\<,]7g6b[qOno"s f<=}b|2$O7СK 2` .hטy_I{{y׬ML =}EB16y) 7Ka228970944eff52b0cac2709b31595d9bf387d1746e8a21779d3cfca140f822f91521339a393073443996a0f8dc15f51a79fc1c1fddQHp9|G}تyl`Փ #'qmg?yaJdQ?ED6vk=|'䰩ߋ,Hr@T3'{ʠ{ zI!Aܐ6(O:,xd3݀;q˫kM+Ѣ:Se=5}{BWqڈMeupB\{ Mf=ֱxAG14l>g; 8s|R#с QGIvf$-$[lSwJfO2{?|}pϬ>pB3?3d ! B&1 GV       0  |     0X  y( 8 9 : #>.@.F.'G.< H.l I. X.Y.\. ]/ ^/b0c19d1e1f1l1u1 v1w3 x30 y3` z33333Copenssl-ibmca2.4.0150500.4.1The IBMCA OpenSSL dynamic engineThis package contains a shared object OpenSSL dynamic engine which interfaces to libica, a library enabling the IBM s390/x CPACF crypto instructions.dQI[s390zp36SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Hardware/Otherhttps://github.com/opencryptoki/openssl-ibmcalinuxs390x#Original fix for bsc#942839 was to update on first install #For bsc#966139 update if openssl_def not found SSLENGCNF=/etc/ssl/engines.d SSLENGDEF=/etc/ssl/engdef.d cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt ${SSLENGCNF}/openssl-ibmca.cnf cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf ${SSLENGDEF}/openssl-ibmca.cnfSSLENGCNF=/etc/ssl/engines.d SSLENGDEF=/etc/ssl/engdef.d if [ $1 -eq 0 ]; then # last uninstall rm -f ${SSLENGCNF}/openssl-ibmca.cnf rm -f ${SSLENGDEF}/openssl-ibmca.cnf fi\ $A큤큤A큤A큤dQI[dQI[d%Rd%RdQIXdQIZdQI[d%RdQIZdQIZdQIZb2'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-ibmca-2.4.0-150500.4.1.src.rpmopenssl-ibmcaopenssl-ibmca(s390-64)@@@@@@@@@     /bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1e)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libicaopensslrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.0.03.0.4-14.6.0-14.0-15.2-14.14.3dP@dJcdGdA)@d-bd c< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@nikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commeissner@suse.commpluskal@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comp.drouand@gmail.commeissner@suse.com- Updated the .spec file * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries- Updated the .spec file as follow: * BuildRequires: libica-devel >= 4.0.0 * BuildRequires: libica-tools >= 4.0.0- Added dependency on libica4 (bsc#1209038) * BuildRequires and Requires statements in .spec file for libica4- Applies a patch (bsc#1210359) * openssl-ibmca-engine-noregister.patch - Updated the '#dynamic_path' line, as it was before, with the comment '#'.- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059) * openssl-ibmca 2.4.0 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding - Provider: Adjustments in OpenSSL config generator and example configs - Engine: EC: Cache ICA key in EC_KEY object (performance improvement) - Engine: Enable RSA blinding- Updated .spec file removed '#' from the line containing 'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038) - Added in %files * /usr/lib64/engines-3/ibmca-provider.la * /usr/lib64/engines-3/ibmca-provider.so- Upgraded to version 2.3.1 (jsc#PED-597) * openssl-ibmca 2.3.1 - Adjustments for libica 4.1.0 * openssl-ibmca 2.3.0 - First version including the provider - Fix for engine build without OpenSSL 3.0 sources * openssl-ibmca 2.2.3 - Fix PKEY segfault with OpenSSL 3.0 * openssl-ibmca 2.2.2 - Fix tests with OpenSSL 3.0 - Build against libica 4.0 - Removed a Requires for libica from the specfile. - Removed the obsolete baselibs.conf file- Completely revamped the postinstall scriptlet so that it doesn't need to know or care about how many lines are in either /etc/ssl/openssl.cnf, or the sample file at /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample We're now using the ".include" directive for the openssl.cnf file, and only modifying that file the minimum necessary to implement the change. (bsc#1004463)- Upgraded to version 2.2.1 (jsc#SLE-18333) * openssl-ibmca 2.2.1 Bug fixes * openssl-ibmca 2.2.0 Implement fallbacks based on OpenSSL Disable software fallbacks from libica Allow to specify default library (libica vs. libica-cex) to use Provide "libica" engine ctrl to switch library at load time Update README.md Remove libica link dependency Generate sample configuration files from system configuration Restructure registration global data * openssl-ibmca 2.1.3 Bug fix * openssl-ibmca 2.1.2 Bug fixes - Modified spec file to * Define a global variable enginesdir the same was as IBM does instead of _ENGINE_DIR as we had been doing. * Implemented %make_build macro according to spec-cleaner * Changed the package description to match IBM's. * Removed the redundant "autoreconf --force --install"- Upgrade to version 2.1.1 (jsc#SLE-13709) * Bug fixes- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882) Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424) * openssl-ibmca 2.0.3 Add MSA9 CPACF support for ECDSA sign/verify - Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch - Changed the ExclusiveArch directive to include s390x only. - The code in e_ibmca.c does a dlopen for libica.so.3, instead of linking against the shared library. As a result, if the package containing libica.so.3 isn't installed, problems occur. Added a "Requires: libica3" to the spec file to fix this. (bsc#1142286) - Made a couple of changes to the spec file based on the output from spec-cleaner.- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch An Apache HTTP Server was set up with mod_ssl and the openssl ibmca engine using libica and a CEX6A card. Whenever a worker process is cleaned up a segmentation fault occurs. (bsc#1138517)- Upgraded to version 2.0.2 (Fate#325688) * openssl-ibmca 2.0.2 Fix doing rsa-me, altough rsa-crt would be possible.- Upgraded to version 2.0.1 (Fate#325688) * openssl-ibmca 2.0.1 Dont fail when a libica symbol cannot be resolved. - Made multiple changes to the spec file based on spec-cleaner output.- Upgraded to version 2.0.0 (Fate#325688) * openssl-ibmca 2.0.0 Add ECC support. Add check and distcheck make-targets. Project cleanup, code was broken into multiple files and coding style cleanup. Improvements to compat macros for openssl. Don't disable libica sw fallbacks. Fix dlclose logic. * openssl-ibmca 1.4.1 Fix structure size for aes-256-ecb/cbc/cfb/ofb Update man page Switch to ibmca.so filename to allow standalone use Switch off Libica fallback mode if available Make sure ibmca_init only runs once Provide simple macro for DEBUG_PRINTF possibility Cleanup and slight rework of function set_supported_meths - Did some cleanup to the spec file, based on spec-cleanup. - Removed the following obsolete patches: * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Added the following patches for bsc#1097463 * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Upgraded to version 1.4.0 * Re-license to Apache License v2.0 * Fix aes_gcm initialization. * Update man page. * Add macros for OpenSSL 0.9.8 compat. * Remove AC_FUNC_MALLOC from configure.ac * Add compat macro for OpenSSL 1.0.1e-fips. * Setting 'foreign' strictness for automake. * Add AES-GCM support. * Rework EVP_aes macros. * Remove dependency of old local OpenSSL headers. * Fix engine initialization to set function pointers only once. * Remove blank COPYING and NEWS files. * Remove INSTALL and move its content to README.md * Update README.md file to make use of markdown. * Rename README file to README.md to use markdown * Add CONTRIBUTING guidelines. * Adding coding style documentation. * Enable EVP_MD_FLAG_FIPS flag for SHA-*. * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0 * Fix SHA512 EVP digest struct to use EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0 * Fix wrong parenthesis * convert libica loading to dlopen() and friends * Add support to DSO on new API of OpenSSL-1.1.0 - Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch - Added BuildRequires for autoconf, automake, and libtool. - Updated BuildRequires for libica-devel to be >= 3.1.1- Now that the openSSL engines directory is versioned: * Modified the spec file to query the libcrypto package for which directory to install the engine into. * Removed openssl-ibmca-fix-enginepath.patch. Replaced it with a sed command so that it will provide the correct versioned engines directory - Removed openssl-ibmca-configure.patch. It doesn't seem to be needed any longer.- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113) - Added libica-tools to the BuildRequires due to repackaging of libica. - Renamed BuildRequires from libica2-devel to libica-devel for the same reason. - Tweaked a comment to get rid of an rpmlint warning message.- fixed ssl configuration merging (bsc#1004463) - openssl-ibmca-fix-enginepath.patch: fix the engine path- Use macro for configure (fate#319941) - Use url for source - Enable parallel building - Cleanup spec file with spec-cleaner- Upgraded to version 1.3.0 (fate#319941) - Updated openssl-ibmca-configure.patch to apply cleanly - Removed obsolete patches - openssl-ibmca-README.patch - openssl-ibmca-sha256-digest-length.patch - openssl-pkey.patch - openssl-des-ede.patch - Did some spec file cleanup.- Fixed %post script to update library path (the only dynamic part of the ibmca configuration) every time the package is installed. (bsc#966139)- Updated AUTHORS, INSTALL, and README (bsc#942839) - %post and %postun added to properly update openssl.cnf (bsc#942839)- Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138)- Remove dependency on fillup anf insserv; the package provides neither sysconfig file nor sysvinit script - Remove depreciated AUTHORS section - Use %configure macro - Add openssl-ibmca-configure.patch- the openssl engines moved to /%_lib/engines bnc#905480/bin/sh/bin/shs390zp36 1683048795 2.4.0-150500.4.12.4.0-150500.4.1ibmca.soopenssl-ibmcaChangeLogREADME.mdibmca-engine-opensslconfigopenssl.cnf.sampleopenssl-ibmcaLICENSEibmca.5.gzopenssl-ibmcaopenssl-ibmca.enginedef.cnfopenssl-ibmca.sectiondef.txt/usr/lib64/engines-1.1//usr/share/doc/packages//usr/share/doc/packages/openssl-ibmca//usr/share/licenses//usr/share/licenses/openssl-ibmca//usr/share/man/man5//usr/share//usr/share/openssl-ibmca/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/0943719436ac1978afb266bf55534562-openssl-ibmcacpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=28bff9e134995c2e976bf3071996b2019513167e, strippeddirectoryASCII textPerl script text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRRRR RR[x(&x=9utf-86662202d8dfd7b88ab3fdc4a612ad6c509ad52d97e965f04fcc7b4ec2033e99c?7zXZ !t/ϫq] crv9w?Y,?BnDC8ff8{>E)!]ϓoEIoBfyq;y]ݟ1]^ I6CV']zY8مZ n(9g0ރ9>VL@D&w["^?>D[ ǒVv-5PUI< c&!oHÖ$PӮc4H]7C{ {+~Hۆ '@wr=&+}n\B!".Mu{b] {(QNqzA{&φof}Hg&_|AZqO(Jl?Qʼ94.XDt`%r^W>ͭ2m nr.!u Nq⤐fWf 'WLvV/IJ#gF;@qޢZ 4+4a C_'C>F8\ry|+hܡ9O]LQ `p9 g+(owhȺ}+tL*ZٹikxQ뒆);+ =adl8fЀ>_CF9䍆FkI` b+ O$-'i^|>bdz2&@_pO-rc wV3p꬀<|WJ/(-&٩ M.,s*UpT{ ]qڈ4#Þw;o=9~8rzb: wC(7ucDbηM-E G Dנ>7I;خ7 \"2yȎ2ԀZےI=|=9]v] B+Dt9]:y113ZHpî^n1 ʓ͚VF5D[XݶgEq?q,LkM7k3iq}h/V"a2lk~pDe'˫?FkV$̾ EBSnl@|&߁":Bf?WcHӁtVVCd>J/țzDqM@Ӓe*ntp~+ԅ?Xx1zx3v} K}OD3,Pˌ{Dfg?ʲl7qqߝsAхpѰӮ|ŧgyb=q+4U |03&Rˇt3c?bMNaڴ̰$3/o7Y2pfa˭x6ѦvN)%ZjCהgzɲݴ%=EKpFNb4vo&ytRfei,N)c=y0m!Ey4L.SՐG(хDt %w]d+el7`"ق , #l*Ό #OepD\96&;tGu6YzC]bN1sCYIyn@K2{I +{yz`mFAsqhPqJOQ=c9 Ĺ$C%Z:WzSO[hH1!-.oPʌǺa_LڅNQiq?%018pB/+*LB[ xF\ 3Ibdhzw#2R`fnL&?2mQÞ/)ʸ9uE>3/2fLµڡ'aA֠\TMXXgKw}Ӧ@n$" \Ο7V&1 IC][vԽRԴKw]h,wXaSjM<8hܪmN(>zKH|^KwxwvEuiV\jE#R씼'GSo)G?H2q ;i|mM]O$eaDN3:`x'a;1|̧U0>*skm[ i:Lʌ{H {2OzնX50X]wNg0Ȳ yJohJQ B5ly{-d S ă\=({f9{jqRn=:6L>JORQiS\t2Ydl7|7T߬Q0<'MTX׵&dzSdڃ6Pd~G6I,ar\," qwXqL9CtGNpwbm0OtZX +gb"1)+x+P'r e&qh1,*,њQS/VK?JPknP83C2ά.î#usq| t 5ҹݭ;pLo+N C2dZM >Rj)gD bQ]&`/]SJ<Fh2DiGp`̰Y[Sq! pGd\0u5Txwz I#@q2`O?ÿ*V--H([x}K y\`$Y֌D|τrΥi+.oTu3Љ<(,g!)OZh[dS6wLoڶ Wm}Xb^l.s@n=PGK3y$||_m4 g FFZ} qiTSG5ޑ0b[fGd),! h0]*-`V}4B#DqZE1UbaRKa>Nɪּ`3[zII*>-NkNޚs  ~rڽPc`帮%r+wE?J͏'7avd8Ia37G&Jg ߋ^v^]Y}jrO}ԫ!T4Lm#ގs7op G,M0 <%RcBHd }&iey(*v V.yi4PF;xkG]B3lV_-{nۭ!5P\# 8_U_?s2-B:O3K)mI(nidK&Hu4pfHljJ46ߨk!σ d ɩXտp0Uaҽ"yq$j>Q]^kE\"R 'pk9}<&yRʝ 5:,1{߷AOH41CyiZa~^%O6ecYoNb/n23]CEsІt"-&Լ >{76 w5[>8m| L<_ đ^I~]T<8}x7JSVVr]٠ݽLJ#cTeEoBZj( BzNc::$zľQs"x݂4W`Vup,R} Nj hi#4~n|IlMq?E2@NK|^B4^Z|1soߣ\thc}M:Fڍz2R"OJ^HKA)Am P^wX _2;g!Q2bpDk ,^_dWdD(v ߥ̩X[}/&];&P)Xc QZm~9\:]gQzfUc*(TD}6tOO|d9'e@6I0X ?:fK?^i򧍍Xq qx0+*@+P|KTғ Gn1.nft. kƱBƋ|@"?oMgk|XowO[wݲzE{zZ `KRAޟQqe+ U LAPiY2C(^!҄K LxsJo;>"35i~z) ݅]sH|mmDDQgf= 8 x}[ICn:+a࿧f4E,1+{}So3ibKu%(Qu<PH$ukm4K@VhwA7S/E2IX?; wP6U diSG T@;.@uw`_<:EDZo.GrXZ:t Hmd?̵㬠d`3RWLYQI%6 NWK}`cu/feGtnĹWۄD?2N5/WOqnG<GwdeƜ+y8_ϡSЌ1a# +"#Q\@vagN#?aξ 0qk@iQi&/ț  'n{ծ,Qq`Gjq@6U}ò$zɔ?  / !gw PM9 nF)6yc|U`fxr /$(?嬢82-2U]Q!(@_UB]^ qzKhtGnHX} . Ke|Y2VLU-= Л/^ϯvMO_e,!=2_[dQ9[}?` ? )TP;|)ϷV4],jרl-v DS);}T]YlM4`e%;^J;[чZ`G$%!?!Z (b_}CH2 [u09V* ,xU m:|*x ̝i7G(@Y.h?Bzsi҆}[F0dҨIH1C&%҇Yj] S kA- O4lSgIS=mB~߶#v :$&] Ɇ* nP_jaY8\#'Դ} .)dɦ_ V9</<  8nwc-a} /~t"\b9\ ,:N<%ݕ`ɯH'M$j~knl(Jw:0_7YhJ+<ÐwCHSmyet)0s$RjBN|SP&o͙UC:=PUXb+pqd7"~pSGX]s.7NYMZuSڊS\;$aÝ. Jf'D@T_7(3YjmuCR4E2Q8k|M\<(r9w67FE EXW v7*A S8>_1Zs(ІAۛG=8t{NS,c!:2A{eB|/=QuI¶f Re˻:ssOH?Y×|#{f$ H:L-J6%!`h:.(6x_1+5KISuXd7A^{[E~ SGnv,>핆$xv\I &-B&so F3̡C,o~Z=[KKh=zɞ{^y[%F%&e,Q{)ao^}m}9z{{`XAȪ;<gxpjyn--Dz!SZ)D`}TLFs70CVlexGIg3Ç/+`]‰Ү'nڬ%R~NL`Xm5?`t1@[t5e N`ʹS]QѷBtgSs=@ڌC[V3YB2t yd>`2sظb̘wQS*hOgiqtV 1:tR9B?j7[!hVצ40PR@w]ҦTv&pxgb;aY͇j;] Y۾Ԫ\ziQu:P %/:PM{`h|C|&Yi},qh(L|mSUGGZc( ] ?U}bgR6 d?7*bh[H>Ԝ#I^S! Q7us=ɻ7=_`WcmdxMWWLݪ**Tث\eAuP| w VBz\sbP}[e,C#*bz?J)62f^"ùE=#_%Be?TS |k ځ(X Ot-ɅbsvUXK\ԗ= Ց1b>h a=BuJJgg[\<״ ^ @! Kdzum4CPn+s޳Dy>Lxg̋g)qT1e@%8|ŗ ZQvUG*8c*];՚\CEB܁!vd567믶)Iɝ9J=7=<9ss_K4xcddh8vkng󝑲E2{P؟슪{t(},,Ff} DSRew 4ŕ!j)]K UR=L_/;8po[`~:"~6ZF6iaGͭ #ֵ^E4Ԥ6ی|}Tȴckp 5MޟZ8 S=o V:Ò*tYj%j8(U!1[dA39Q>+(m]r %2%KI{OE{Y,Z,z ia4usA:Fu#eL60 /8:=X[Pt†7<8Y-5F0&pv iAU^ XIE1Pz8 Qmz3%s𾨮fRBztߴR3 [Pb9`yjByt2t$F6cTAJmc"VhHK^} N4 Y@hs8Bu!sS gY-Fp-2ZJn HbclGLξ@bkj<~JzO**MDShUM~c3̃՞uV-]|8 KS?iA-țar mQSd~IMSkfdQ23Wtc?ťZ w(d/>1&Cx̒cRᧇfg=ҲH݃;bX+tMرd&,\Vq<;M$J |cGX"ay]'5o{R&io$]t8\sd/eY7fr k<(EyﱲÀm#tv]V,o+3kp:~*y$4n^Vl1χd `JYgj\}>UгSkf;k`jB9|5b̓=6r<-Z.:jhaq;2NyvzD2d"sëWtJe=qovv&%KGg*=״} U9ќR#ĖgFAr\У ~U+@]<{ aT@')V=,-#b:v}?Ia譼1bTks_yP̜cKI_)G(U2m):M@ ODٝ]Bv9TО(UvF9n|Jy4F͒gM>Θ?vӺ-(}9F|su!ʦ<)L<;i;*;WX*tS ?6"x.Ư#do2 .Œ_?гNDrP_cUb6.vCFd`~eQa:&uR3wU<{ºq)&xp;w҄ 3|F ʈ7G#~3_O& `|@ΩF|RHu>RT$T;jVLl rўՆolKQOc `aܻ WUg-xʯ8zG W`e(9F%|騨T^9>V%H2MUe".Vw c^[q'eS +vc ~Өu8L5Nb!{e&uY2FR:glA ë}p\VyiqPVV8N%z. vJ+zP ,@dk'c-h%DQ <6hqSC­ `|RhquIol0\ot ^dcT[ԭՌ4ɽ' @tz,W_h-TjES?}<phd`M,j$+6=KMrU\xN_!\>sEmywReN3ƇlK%Fm"X{EpfXhȵ+)z&;! bKa h q^P˜&;{ioYX~xY%i52֠fig:ݯe(EY$ca) ݠ%^؇(&Vhe ~Ǽo8Gs0z Kj6 JQ#_9.Mrd:'b~AH4d.vj?=z{ѷiR{w)hwH>oMAeouԻ%rB7p wtܸɼrp{+G<{垉{\e B4yEp| -m\4Xc{ Tʲ x Gxn0g1|>+?DGXT0"C\,Evdaè56r)7`AɌ==%`*b%K٭F!a—'Og? F,w~X89UnT tOK} QhKl^J8;! BBjڍj3Q, l6;'j1lWtZ:O<*2HR1/! ;`. kBz<\8kϑ}-lVêsrZ8b(|ENo]->ITsX.N,7Q/*S:h&3Rb|&6 2nǿj5s/Z|wN؁~E-qwC25^  lDs8ufG,GBSܯ)z-be~Ԑ#!p?xեch8sM heNCiڂر ѳ"2Tֈj2ʢ2ۿGM`Rؤ%z] /jAfCdЄL%g,)f2ؠ8j ~,xZ/ |5Op-}pk ;NHmn$7aһ&T΀q_*!tL _D>#O2B<aJh5^ޥ#_yk'Sd _ϰ_fQ8<•ozUG6V& I1ar/Z[0If Yt kGTLp8AfjxD3^8Xz Ia_ר8*|,UKadz>[^뺭¬|na}0!v`gŋHɠ* X(XlҢ5\`DZO/y\IZW HA5+GBrwJ:ZsszQu-b9Ll|c܅DJTl_L eS,ոGVrND6zэCf۪U jh-NNDǚQ' `-T.|@Pikwϙuчi@~NZ $-n]>.6J@tq*+0 9 ~1vNM2lєKɛg8cac]k>ћ(enfp@ CURƯ3 TXPӟ`R) =,{Z ɅObe'X1fnw.M\ Mųkb Y^ (]bIGԦҮj[-<Ź=vR:+PLZ:0r@!t*WVJ~j ?;df"9x\'e۾ qm8dQklGI)Ƨ{2-1oX-OYW,%ۗů@yY8=,fv'hp89bh5D*췩ZsT6󸆢HY̒f$pFHt Al@~UD;08Βx(q`Gڲ_wՃkUed,,YE9e `p\"Gg}hpPtGTpS*Y2Oѫc@&Q^ GzZFpk<Ŵ!UmOML~*c 03&z1L^wKŏCNFsfgHFydbM2Q0P U8߇rzYZ"r~u"p[Vp,!*bye w3=oǀ#)1q#mrU8:0׈0qD*=̥"|NkU{O6kIF2H.Q b~=zD.0&/6n+2'4yְ1f5sy"o 4f'0||kcpX@D5(jX~14O"GyZuB4J=oXw~fizcYvsɰ& %o 9ܮ-r4ZetZL?s1F'دmWf8t xpvP+ܖֳw\=`<cyDYuոHLN +fi;*kkv> *+!K4]p~RvUIΞf[k; =A'0R"Ww?!{_b\&`jF`H _Hsuu8WlH%`<@,xv^~+Д>dv1M?bUbSd!6'k 8E<_;ruO !/3߯P7?l.Xx"Iu:WBjnb"w*lwM1)d. d5Z s5bN|Y?S<@ΎϢt"Myx҅#͹&ֲ9rJ_Q|> ʥ}"/˯3€)}чd,rd%En~Ja1(H "N>|̬hG .6>pf B!2S)~.6a"y$VJNEXCHx=_'`uK!故v&.c.P #`n0l/kԏ}BYTBbi{froΟ+->}qVEʈLU[=D'o۱+mY~O|џ4i^pIĠ4xQ]P] LӼM#R{} &7?}z̹zM}M.r&W.%R'5k=#sxt d{oo8Ai M{KOܜjn@񆩢iJd.Kn7 CAv"c+H*QqI~Oxu һ4%%1fW ^>[F3g6``B#jmu1b'޾p Sss$ɋZ~z@ ?[|bcrP"z{g:wi=L&8ö=jҐ^wn}/q0MޢHO(9߆&@MUTNϐöX5uh`f*JY+R8_j鬠]T{;svl.6{'%NJ= !Ԯ`]0!+,ΝYƧĔ/:tǂ:Jv p];Ni4pNb?yY<%1=*.)f+6vkT#fJW!ӉVeD2|hz̮]l$l S̈m3,eGXC 4a'$޽]ZxGm?oĈ[+L-sv(ƥ*s[;WV&m&PJH2{ͅĴh'@M4Ĭ_}ݦΞ껽!vr:+T@d$B1J={'d8VH*/·I_&v$.ꍖoQ ,~ 9an>jFc@-QmV:}NWu 8S.t X uWʂȢ:wF9X_N\7xw\xHsËd0C@+lru5%"N?Q@奅!3{C:JbW/ޙz0U ׄ9JrWe˹" apW+^RSՒJxdـ4/L![X#@XDN9z"cK+XQjiKXXX&I!}߉~T{>Eqgo=$ףIpHОHI"ӓ'&] $vھtbǃWKe`$9]@E_LC^. a}բ0.F\zPg+9&IG; O rj@Zo8G,^6LptS -e@ZHe@Q!Őn 4YNm(Z}g<],m/V$R*1B2o!'ѝqVi.tL[:LJ jJ8zi8rcqm+Jݗ:C=T.)%?2(מ;@_ԨJz7mڶU:74! .[ Vr Q\Hpdg2VDV5n<淪0cIKtn2%abp䗅YP`Mu19U@iOz:+jh-c ii(%Fe gوѭ6:7~R*A͓퍌>'0-DUۿؠWyI;bլbI0n'$+NHvkurP"uZE'Ae+O҇0PΪӾYn%~G4- BI#78R|II,d`fQ;i<$~hٴhc5(^zPx˿ܫbP`8drscɆvק#TC5aaS7}R0TKztQ}~;Gkƒ Ƕ5)tE_Զ75qM3*?,n$9,T/tft' JgrEglۖ 5*INlgڭ-2-W>|q[}Mhц $ f/&UC腢d`_J3^!xQQu e0RNש5ˆ2.?ՒrE8;+v1v+"x٢l╗{'eb.6/$UF2ldzB3y?ab/-uͺksG@CFQ^D0;%N{=26j B!bT:[ȕ*qvͼ2Oγ:"B X~0@sG"YTM#\zU\LQk]q1os =N+T%sz+]ae8a,Ws}DP-^݆!Zt-^`€pqƙL/rlm*6vb<80.vu9|IMjrf+d0wX'_N= X0Er&aQhF3}\2e`S<a03,9ODfBdyJLQ/!Hfh/CVܗ1&alUShķl4ySEE">}- vkdو,5ZAnUt ܡ޺."9#iINh @^N #]6@idTwO *|QIh瞣m.F[T 9hۏwZmayip/ڶuey0Z@~֩U HW[bwCn~,'l"%z.h35XK:i4sIfܙ`6Frbp"nYҔLCrk` ># w>ҬTûij#:̄. 0hJ#qFǐZRXc~=R ^]#F8x-FSFʬⳂK#;? ^5z_*ap,Ao6x=cPI-]L==UJT$ z őZDi7;E+?Pk!;s81xzVj.Jֆ[)$[|I8`\^r,`)xIޮ BW{37+? SLxPo5#C^QNW2> dMA̗!޿l10L*3%Ai8j|hGAm..lÎQt0H2]7wp<sY4@0A3>=<}ơW2C6\(ԼhlR\V^*^W$4cF_@'JYP(jh Y z?C/F)eo642{6=n"x͂eVM:]ށ/|iMRQi?.Og>#ʵ%ȧzLc(F1kGn]5 ҋՋt~`*:Qg|~\H+qĝMh)p$۸%l$gjU(FAwȿ;!1 fZnH$q"˶1`YI ,2 ԡח,B{!k~%tY`12P)ݩe$Ƚ^BOxPk ض<>YL7p|8pm,+b454oFYlFupX*YLN%:jmN4*ՇT1`24 *.]BQ$cy^<+ laqt$nNA3OȰ~ Gdt^Sܻi|T}QX v ʹqTIhȧ-E("zLn_q>n~\G"iaoe:ɠN+`KK./E{1 pnT=0\%#;$5xڈxBGW<EƓ|:X|S %kҗ&LpmYt.:;"Ɠc"?amp.jϙDC',ї@vUu'%F{/:H(h)%U$1:^.7Ie8x8%%p*fF۰ϯn34[{s: DG`(!_ۭܜz+/S{a꜄&?mفXN>(v2^Xan0ޠ^C L0 t }i -&HPS? iE{Jh&vE@A1LMrԿMc$ !5'5܂br; zA*S"-!S5uA]!9“2aI;л0Q0@/iɛ]+߱J|kkF޿'nb۟w.u{rxt@*А:!RQn6U!U%X;'eJ1sMar^jTT]+㢵(ݿU9Hu؈k%Aȿv!}z *Ԅx+Z=3NzK-k&ơPs2c\/]a akFf s6ҝ(ߣU=ֆ-G$SAua.N f}-L] ` ,lΜMP"4 C _%ĩ ߠ?}~B8rCMUQ?l1tJKRIu[g~AaCVnca)"9I'FKDOCjDکn UvJ3 * W3ͻMgFlóE3 ֏2i,U>ZHōJ.(tehұ ~ϗm4&bZ00݇% C}mT\q[R͍Wr?2B:AZ%CD@h>ЗyDt뚴^޲+&wCoSW 9`3R)'sG.@ B|HˆO4K*{BژQ4 9%q<ɔT۴yI*nUt{(8W3$w/KU' R,1,($V.RьCF7@P.FoW8 ͎$-0ft`Zd*%mm!F0{ka+3l\=ͰPY!ޙtؕe~QgY| Zj vqCDx/S4)^6=)1gV拦Aw/tO*z_oW&-0,rw{ƛFӓTGI5왾:/U<OƀY=tYţ~Џ:@*VI2*lu 8$bvr !/iZRSDw*hKUC۬,rȰC'?%?OC+ V2<"]aBSlŊ bq' 8w> uc*9Ge{XAh0 b"chvPt_dMS5#`=J&1%J\MxQ$Ա@V28]6WѴ+mֵɰ7Ȳqf^Xe]lDT㦠B yѰp<~sKYv 9[QX FӅsmM[NoAR9W RL$B2D|(#܇#͹V8}X*WScΫ)sݖq%Z>n(US%%8c3 r,y%dUepH8Eu_;͸KCui-^ )s8)njB0?pV.j͗ UI?VL_~**VZLӆuQⅢ')߳mX[':,#0Bi;l[":"HBR$ɒ/k\O< >ʺuܦ;a֊ͮ꙰}fW@ԋevp 79$G^;7>XbfTX !%c=7.MM]aOVG1Ƭ;slglĻiYpu˲T0qe҉Ly,$kE,/$VX*"Gk2І&8PAb;\~7+vguU4Ivj}0 Ȩhߪh>NCfq{dJ9wυ3x/ f'0EIwaԚjgRq/{2T4ZR"@O`{& XF&w>xt92ra23+%6l^%(D9ǖkyz料rƕKM'q]|q\]GWYlAr\j&ɆIJ51][}4q [>HM-O?]]hc~v }Fy/]ۃbJ,S}Ooɼy'r b}B.{֫,zsfl`qWsUO nDl|'k'Oyh/ UDJj 뉯"ڬߥmё(QL|:nVJ p'[ ^3s֢U"SVu$svM  |OJ uq,y WrOBJa0[|oLg9i+UMx3m4*#IulA ym^y T-}IxXi쮆>gzD7=%GAR_F}#fƋЦ2ޮzXy j}Mp@q7(ɇR&q,i5~Vy$ vz6oI}]k%Vkw8 tJY< {\v=rc8U^C$W}~Ѯ@7⪻un~L dGZ=ڳ=:&ٷz2-FR& :_8dM ޡDdǨ0[sMnHPEKv#|6d vު&XNG F "Y*gsP=PնѲ(kiЇD,ᛕ9[:w&I֘-%HȊ5ur#bdWŻa=t!]WI:hc22^b`%s1OkƃώT0zt858YWs,/Dv5.Ŀro 5ZEȢ7]O54P_;Q!f3NȞƛC9ߊ j83HAi{r^߼ z#Өr|W0&E*"KJY>3BV֡Ga׃/}a4R|!MJ0-AVWk LyW+7C,DKMdhB;HP0, [`,$T=ĽeoThBb{Y%n-qeK',|)zG`]Ӿ=cE`ܜeۏEA_U[ixb4![:;{ ydnW$i`)ʼ@ ٧߭%/ݭ{"{tGJ[Q_3Ҕ/8y_H?#$H Tq.Dr; n?߬EcRB~?GAiXXRqۼWŚLEU^YA0e  OPKll;VF~KΓgrV7y\u 9?,0+ZU1jZTqߵEb80/K&^nJcK@>EncKt4||mVj*0Nݯ> >zwr%nrԁ O'͆‡PFdY*vLn O"o&bܮoQ+~g[,k?AhԢs Z֝luA I uc8Op +Fj ȦJ~赚-&@vWCz L(? F^r6Vp^4@}U:*Δ\A@(YlUvzA]T G{!%H2zMZ:ȫ{& A|K=P ok.&hk䗒Q'4Xx~Lq%ZyħOljmy?gg$@ :.袐K >TcHPz/wwo+7 :Up;^oT􁴯>V6׍ryٍ[YWӈ !!Ʀ߱[( >HNJ3mgy7BO`pDXF=ɶ|,j:B`ّ_p3ϖu |C%X\F}B W6#]'>O[1W`H&$hs$SxbC/]<.and 7DP{b]QfZAw.0LR˙-]-2$U\ GqjBTjJ|a$ۈ6_D8htzJy\~VKYඉTƕ4<Ua ԽQ$g ٖhnxWȍx7E1n)FR?J{M;hBGsr0@yhC96^.I#o֎oqw[V;,i[I1&Hl]C?A³Nw>;t YZ