openssl-ibmca-2.4.0-150400.4.16.1 >  A e2hp9|!H[6yQ;NK"rŞ]Bcm|ZcLЌxU 33}ABR a–[LY$v$CxUU1=2>ĘjeP $,w֒$x(GӋ*igpt3,Td vOA[(U9[S  ORmhi˙2R} 5iAL -C)ػ۳1E`Qs770c4eb141a7de69a9b911639f4a82ffa691120ea5b68bb55fa82345f248790313daf742bfd345821f0d88e04ee2ebb31dcc7f020be2hp9|jQipbC.(_!7|E cN{3IcR7QԚb FK,1 Rڻ=lX+Ō>pB4?3d $ E *5 KZD t          , \   0X "( P8 X9 : >-@.F. G. H.P I. X.Y.\. ]. ^/b0xc1!d1e1f1l1u1 v1w3 x3@ y3p z33333Copenssl-ibmca2.4.0150400.4.16.1The IBMCA OpenSSL dynamic engineThis package contains a shared object OpenSSL dynamic engine which interfaces to libica, a library enabling the IBM s390/x CPACF crypto instructions.e2hs390zl31SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Hardware/Otherhttps://github.com/opencryptoki/openssl-ibmcalinuxs390x#Original fix for bsc#942839 was to update on first install #For bsc#966139 update if openssl_def not found cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt /etc/ssl/engines.d/openssl-ibmca.cnf cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf /etc/ssl/engdef.d/openssl-ibmca.cnfif [ $1 -eq 0 ]; then # last uninstall rm -f /etc/ssl/engines.d/openssl-ibmca.cnf rm -f /etc/ssl/engdef.d/openssl-ibmca.cnf fiQ $A큤큤A큤A큤e2he2hd%Rd%Re2he2he2hd%Re2he2he2hb2'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-ibmca-2.4.0-150400.4.16.1.src.rpmopenssl-ibmcaopenssl-ibmca(s390-64)@@@@@@@@@     /bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1e)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libica4opensslrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.0.03.0.4-14.6.0-14.0-15.2-14.14.3d@d7dS@dJcdGd?d-bc< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@otto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commeissner@suse.commpluskal@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comp.drouand@gmail.commeissner@suse.com- Adjust configure and Makefile to require libica-openssl3 when building wiht openssl3 flavor. [bsc#1207472] * Add openssl3-rename-libica-files.patch- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild flavor. This allows to install in parallel a version compiled against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]- Add multibuild flavor to provide library compiled against openssl-3 [bsc#1207472]- Updated the .spec file as follow: * BuildRequires: libica-devel >= 4.0.0 * BuildRequires: libica-tools >= 4.0.0- Added dependency on libica4 (bsc#1209038) * BuildRequires and Requires statements in .spec file for libica4- Applies a patch (bsc#1210359) * openssl-ibmca-engine-noregister.patch - Updated %autosetup, added ' -p1'- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058) * openssl-ibmca 2.4.0 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding - Provider: Adjustments in OpenSSL config generator and example configs - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)- Upgraded to version 2.3.1 (jsc#PED-597) * openssl-ibmca 2.3.1 - Adjustments for libica 4.1.0 * openssl-ibmca 2.3.0 - First version including the provider - Fix for engine build without OpenSSL 3.0 sources * openssl-ibmca 2.2.3 - Fix PKEY segfault with OpenSSL 3.0 * openssl-ibmca 2.2.2 - Fix tests with OpenSSL 3.0 - Build against libica 4.0 - Removed a Requires for libica from the specfile. - Removed the obsolete baselibs.conf file- Completely revamped the postinstall scriptlet so that it doesn't need to know or care about how many lines are in either /etc/ssl/openssl.cnf, or the sample file at /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample We're now using the ".include" directive for the openssl.cnf file, and only modifying that file the minimum necessary to implement the change. (bsc#1004463)- Upgraded to version 2.2.1 (jsc#SLE-18333) * openssl-ibmca 2.2.1 Bug fixes * openssl-ibmca 2.2.0 Implement fallbacks based on OpenSSL Disable software fallbacks from libica Allow to specify default library (libica vs. libica-cex) to use Provide "libica" engine ctrl to switch library at load time Update README.md Remove libica link dependency Generate sample configuration files from system configuration Restructure registration global data * openssl-ibmca 2.1.3 Bug fix * openssl-ibmca 2.1.2 Bug fixes - Modified spec file to * Define a global variable enginesdir the same was as IBM does instead of _ENGINE_DIR as we had been doing. * Implemented %make_build macro according to spec-cleaner * Changed the package description to match IBM's. * Removed the redundant "autoreconf --force --install"- Upgrade to version 2.1.1 (jsc#SLE-13709) * Bug fixes- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882) Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424) * openssl-ibmca 2.0.3 Add MSA9 CPACF support for ECDSA sign/verify - Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch - Changed the ExclusiveArch directive to include s390x only. - The code in e_ibmca.c does a dlopen for libica.so.3, instead of linking against the shared library. As a result, if the package containing libica.so.3 isn't installed, problems occur. Added a "Requires: libica3" to the spec file to fix this. (bsc#1142286) - Made a couple of changes to the spec file based on the output from spec-cleaner.- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch An Apache HTTP Server was set up with mod_ssl and the openssl ibmca engine using libica and a CEX6A card. Whenever a worker process is cleaned up a segmentation fault occurs. (bsc#1138517)- Upgraded to version 2.0.2 (Fate#325688) * openssl-ibmca 2.0.2 Fix doing rsa-me, altough rsa-crt would be possible.- Upgraded to version 2.0.1 (Fate#325688) * openssl-ibmca 2.0.1 Dont fail when a libica symbol cannot be resolved. - Made multiple changes to the spec file based on spec-cleaner output.- Upgraded to version 2.0.0 (Fate#325688) * openssl-ibmca 2.0.0 Add ECC support. Add check and distcheck make-targets. Project cleanup, code was broken into multiple files and coding style cleanup. Improvements to compat macros for openssl. Don't disable libica sw fallbacks. Fix dlclose logic. * openssl-ibmca 1.4.1 Fix structure size for aes-256-ecb/cbc/cfb/ofb Update man page Switch to ibmca.so filename to allow standalone use Switch off Libica fallback mode if available Make sure ibmca_init only runs once Provide simple macro for DEBUG_PRINTF possibility Cleanup and slight rework of function set_supported_meths - Did some cleanup to the spec file, based on spec-cleanup. - Removed the following obsolete patches: * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Added the following patches for bsc#1097463 * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Upgraded to version 1.4.0 * Re-license to Apache License v2.0 * Fix aes_gcm initialization. * Update man page. * Add macros for OpenSSL 0.9.8 compat. * Remove AC_FUNC_MALLOC from configure.ac * Add compat macro for OpenSSL 1.0.1e-fips. * Setting 'foreign' strictness for automake. * Add AES-GCM support. * Rework EVP_aes macros. * Remove dependency of old local OpenSSL headers. * Fix engine initialization to set function pointers only once. * Remove blank COPYING and NEWS files. * Remove INSTALL and move its content to README.md * Update README.md file to make use of markdown. * Rename README file to README.md to use markdown * Add CONTRIBUTING guidelines. * Adding coding style documentation. * Enable EVP_MD_FLAG_FIPS flag for SHA-*. * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0 * Fix SHA512 EVP digest struct to use EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0 * Fix wrong parenthesis * convert libica loading to dlopen() and friends * Add support to DSO on new API of OpenSSL-1.1.0 - Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch - Added BuildRequires for autoconf, automake, and libtool. - Updated BuildRequires for libica-devel to be >= 3.1.1- Now that the openSSL engines directory is versioned: * Modified the spec file to query the libcrypto package for which directory to install the engine into. * Removed openssl-ibmca-fix-enginepath.patch. Replaced it with a sed command so that it will provide the correct versioned engines directory - Removed openssl-ibmca-configure.patch. It doesn't seem to be needed any longer.- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113) - Added libica-tools to the BuildRequires due to repackaging of libica. - Renamed BuildRequires from libica2-devel to libica-devel for the same reason. - Tweaked a comment to get rid of an rpmlint warning message.- fixed ssl configuration merging (bsc#1004463) - openssl-ibmca-fix-enginepath.patch: fix the engine path- Use macro for configure (fate#319941) - Use url for source - Enable parallel building - Cleanup spec file with spec-cleaner- Upgraded to version 1.3.0 (fate#319941) - Updated openssl-ibmca-configure.patch to apply cleanly - Removed obsolete patches - openssl-ibmca-README.patch - openssl-ibmca-sha256-digest-length.patch - openssl-pkey.patch - openssl-des-ede.patch - Did some spec file cleanup.- Fixed %post script to update library path (the only dynamic part of the ibmca configuration) every time the package is installed. (bsc#966139)- Updated AUTHORS, INSTALL, and README (bsc#942839) - %post and %postun added to properly update openssl.cnf (bsc#942839)- Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138)- Remove dependency on fillup anf insserv; the package provides neither sysconfig file nor sysvinit script - Remove depreciated AUTHORS section - Use %configure macro - Add openssl-ibmca-configure.patch- the openssl engines moved to /%_lib/engines bnc#905480/bin/sh/bin/shs390zl31 1697802472 2.4.0-150400.4.16.12.4.0-150400.4.16.1ibmca.soopenssl-ibmcaChangeLogREADME.mdibmca-engine-opensslconfigopenssl.cnf.sampleopenssl-ibmcaLICENSEibmca.5.gzopenssl-ibmcaopenssl-ibmca.enginedef.cnfopenssl-ibmca.sectiondef.txt/usr/lib64/engines-1.1//usr/share/doc/packages//usr/share/doc/packages/openssl-ibmca//usr/share/licenses//usr/share/licenses/openssl-ibmca//usr/share/man/man5//usr/share//usr/share/openssl-ibmca/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31145/SUSE_SLE-15-SP4_Update/5d011dbf2e43ba0fd349833560d8c90c-openssl-ibmca.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d332a189b4f7b4f62b1f6bf7f5d9d82195401162, strippeddirectoryASCII textPerl script text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRRRR RRdzOmutf-8c95412dc9bcf1021722c137abf9a91958e3e716ea0b4433c04f63a633b546ae5?7zXZ !t/ŋq] crv9wۅ]ӈlE{AY!\)1يdէ qa@)f9K8: h?QO62RouY5FL2TʉMOvܔNiܣ.=j?\Ӱ:*7Cڨm],R#>h&& k޿⍠ =ZFNT>(jhS ESBIK 2_k3.ì:Ja7۷swi?O¶@(>dxr.1(£< ?=Pm2러w%˰^+Iou6ńPǘCCަ/_(d7w,U9,Q$Z:7h!];-t lƆ=W Q 5.PrAv3E n[֗[ӴW# !W/gC MxF jh(S׸m\J:q:]b7P#+. Hڠl>^~zЉ>ivFu͔7iqV.\@|i:)Waxά~IR_M& zĿe6mG%!.u7)_䦞}b H< ʊ5vLr& m|BMg>p%?o4b,v5&B<2<2Ђd.U<( c]jbE $ѣYvy$?g!d^Ζ@='pңaPG&t)$m7u%MlP1)?_duyA:!I2غg*[jer;s^@aņ9L0Eޯӿ~ʦT;N..1X: %x^3~- gBM2&~!y=E{thJ1:fUVLVB)1h 8o.^ Ln@)S&A9=j9RBSuc.bm|}UҁoK;w&j@@k+(*YSc6y^kvnxpҤ;]J)p=ήF3e{k$]e<:ȧ’$S} m.Biwx0.5J(aM;4w)鿟;^p  EI3Ch}V7 4<ʋ]Dd_^tPi pKOvkv9+5*rf95) 8+*Jq+fgf%xw ˽(^aCʢWU|:s0VA7r@6q q [֔=f)Eӕ%C X!nylJiG^jP#YchO ]_yr$RQ ':>7[`pZօ.恻Ӻڲ鐔|wX\|x _'_,lON=x6Op>.9ck7ǔ9zM6fJK̰m5woo[b3g1l] :W3qh9Ó q2sH0cGN.S.p|9"濪kpc vU/ YYkfKkC*ZJg%وfn OƏxt /v=Ұ|*ņ睑}w@7iؽhNeP`5/uuٳ!yF % F8YHa5( iZ 鈓   Y 9uWhi.~W㿸h\+\Z}ha?^3F$.$o"@# vʞe&.j𼙗ۯoA? =Ow+_PAypu8)@ok}eu5åƐs3lޅ-_B/Gi4̡- jXjk`oSn 1GJpﵑP1R'#_!Wd<@Ge.@iCe#DГX}HN0 s|5 ;-q`?lOCX|?xСncԫzG!EΖkR'p6|7Qwu` )Ř_Њ[ K$շXn6쳍i<@#rdtmRMa)H8*bUM9j}4>ƇHOjAd8J6u f1aSb1IC[u\ Y9xSQB|,w-U ,v͇K)hO2ϟҵ[`&ZX<iŮVӒBXqEx1bV E1. Tn94 \6<ӈ<r"k8^V*]jK |s?@[tJ_h@CGV#qe&pt^^T|(/65eչ{٦qX\F4>"d0Vp;+dBFdWOא~9/lH$R>ۚg2WDMՀw^#bWN֞WqI;tpdU |ޠ=zoq;M5 [GAXghï"I wW[s8&eRCfD߃Nj dX5 dZSyJ42sSpPziJt0ㅖ3V6L` jw7s{`rS=Z5VV/!}ꍃ6;-ȍjQx 9=,Xި/|Y<WoԾ[ΐRf,a0M^ZF{RuDU1Fs邇P%^uitb;sRVZ#O3hK3C2mfKUu ̄{=3 " Lt$NJ\LX%]ʕ)/lVt|c]@\؛ϾZC(S,ֈؑ>X2۝jKh1B=~"ϫjYN, f1|3PM'cQoFx!k@g4Q`s= _p?psVGA+~ za` JLb"V CX^dgyo?:b~Aad[%\"I{[R+0s` z Z$nSѻa֗B}&At]|scSbU׌R==S>w*_}SlPllA`(ShtMǶ~Vu&B~挑dɳ_fj &C0-NC_u9,qm~ 즞IJrzI$rEن75wXav|5O Db!>d;ђv5S('N<8E7ZI2eE^l-ͪ8oɐnOЮoq<.YWSi*A\_F dU?e} 5r.]Y+("QG*FMsFsVӕ]*x%9{\/R% _^72@-xHx c\'9>h,a %{0֋okKxOe_`eOtU\22;MR T1_a81`o Dr ɨjV:OFu % *ciǦ'!$N08/v嗩ީԁ BEZҞ_ӛbʠNIim-{;P) W+aR)69[΁h%'2[5u$QnsƜk:o[ŸӒriOn! 1N8Htt2LXZ<闢k*@"ԁ8"ځl=AWCS!r҄+=QFO 2BzC~܊tD- bO8ٍrkVfiWdx蔏GUilB[ ;=q/2 "F| zC ՖFy+h/ګ`2g$Q_I]nQIj(/ǷrEMݐWVTc,<Y|+%M{D;XS+ f|?)]+K,XRszdnb)] FIȬdfY*8.1S>7L\61q Mb5䍴RdjC>7"܃[w𡖪:æ$ sJ]{ ԓTV?aL{!S )p,ec>ۈ#^oN%>彂P2hXn~XX ܇SBcq2gPImUJ tnm; S5;иOU1ow)3o f/gB5;Q, 벪5 l(ϻK'̀ >v[Ԧ8lb!ǜH.qv ahTp >t\I*8Rum.K]/z-81b: HuGy|ݒۋA&?qG^+ް_˺}c؍Cwz nFoqO^7(sx^Cٚ:z҃O_ٖap7 wϞe< 6q!G - )]/3/_lw>I(3AFAr pԭ¬BuN9k57Y 4#t QRQT'8\+}Ug 8j4!UvT~/\+`iౣ)2yu% ~p>HK`o1&d3D(tߕjO9;=dLKIlBm_T];[bz2'~ HYN?|?3S;~{2vk}xmxdhٳ~EGةvp^0 CwC{'ɹغZ7fm4u/;u<]-C  ,n+k$Iзv\|[O "-zVvm$ǜ^5ԅ\b  Zp@lCZ9@x=" en7z (%K۲vxT,]׬-_gr%)Gsds:R('\[Lׂٗ_(5[7;^/UY L?WcH֩^ h5j$頾@St^?:AB2fo|@> r}.{it|$0XPyBmJ/Um%!N';C:IlFި B\U-#}0B)=6mAT E Pʄ^а@RH$ l&4C43ݛjV;)>25~3 |a {G:Y?tAsRT*D4Uxs ^P.Ȃ`m5F* 5QUU?LvNկW,}kZ;eVW퍚6n3kexVm( _7/<^呤⸊J8BRg&q)(&,^nz %C9RQpNX`Bau@O"z,zqcg(nC G8 K8BQ6ͭё3n( Ժdѫ;Btk|g@Hc 3=򆕃^kyEBG`u ӨM#}T%@:Y^Nt?.;[p#S<]$bg~)zgށd3gzQ|M(nw)쌇%W``F2Uoƪinϣ5m[Ծg+}NmsFޗ7t +^8 l6/y2շF4PuP 1H8[JMdQZ`{[HC?рC6~] )mDW{hswnK_jo96#O XZunN;\Hm=l8e Bל%K/m 8W-(-b *NOK|_g8b&kt=C˻vj ZkV]h$AޥL|<&n^0İ alJ/Ñ>87->O3261ti0SBd_^EcǏ,ݐ DRmB5"bW%m@M(e~ w$ySM#n+9q>`eqXDS|w4tgZRw|Щ'.&Fl#OM{(&tjcT$A /%K@'EO~}KI)tE왢c-pD(a=:ɡi_fͰ8-ɨcR{b Nt}+y>=,XUFZV?0jS#hW(Lcr:5Q= ,b@E~kBxzrr9adxqv}r.GO {s.-!V9 *)DZ묂M& MT٩L& |l:܀jR37ك#\*{>2W.T) Jh(" !+zX oZ|o4tIxHo.A7}-CQ*`Zߨ7mW)Zdir0Q`å(̧Wt$4)F8ͱr_.=i6Zp)XaBGхkólgvt_\EGY9Kmc|N8tK(x"u?,o|m̀E֛X.f..0t&9ZStLIaNc2b|^Tliw뭗\{fD|x31Tz]$ d><۝FfAAjbZ?;0N kK7%f~J^ÊAſ?'B @K. QrQ{=y1?߃<< @2_NXZށU!}P;=mkfՊkz&r3-KO[2ѤB'á7wrI 6Wb m'H!1bBXٸ{8U[|Ӡr=T&&,RhTKA;ӃP^(phvFHぇK(cXA -L7h2Q6uCۖ1KCrG>BMjG䯌{9,xשCUBWRJa_VxAmn؅Vɣkvy/WjsJe?y|g]jYsM؂?߫[<8z,uP2eTМ{eAW8L)34֩I&{TQ![AĂĔuTJ,0LSdTT&Q+jb 3aueR_ pLBOgG֘SMup$01Q@㞿pvq4\ IIc̎VBTguץf{52n;e>+ r c2zsax}m8fJ"!>{elh&Y9)Y&⑆[8kGY 6m5/n\9feçQ zǚ8tQnB[nMه7e$(nÝr _-*74rJ$WdPDvn|OnCNi"}gu*͸&|~1,j{?hbŹW:%4ހNԵ]#6\VB4-S9Mn4`NRG#hW[5}4NH*O#$dRkiZ)EE绿װ Z͉cNP3(!aAm]e,Xt7"O'`.z?HԊ7a쀐Ij |TpO]e\ Cu|>7$&} ;T};Y7=ӞZXnv䄢nDI%pkبf^u GMzyA$3 x{a|yFRMw'tLTsBaXܒ@vdqņOI!654XeiJnTİXmᯃfm #O3ٵ8`1.-q]iah. ?|i;zez= R/Lq?$`'Uj˃ ˄MMuo=㷏:j[DͺBQifbXhNE@4pӒZEƆ%pH"6Ľd^}$!# aZ"em)[|܍?[JKGj9ͼ$h&ge6I9u# 2J7sJ# EOo\+Cح1j^k r.1v;Ba-c9T'Q9Ux+#qސpN[gk;XQ|QG{$(am DztHgAb-۬^_$ju wlt֌:VQrɚr\℉Ϛ,Js +M7Yqi J1nA٦ކF6Х}aS.#75&U5 AxTDbҚIt #L[-JD. h wO9ZUKƘcY]n1+,΢P gH+MѠ#tp58'Pentǰ" t]"@Xo2J܈t?O{m4T9mx?߰C͊_ b\Sj_qF_nAg)\yxrXrRL1_ 4[OԶd_K~d5o6e0*ਮEvU˦6'}Ρ3Gt)_)h& OwM⃃dbǶoHe.2t{oGE;<C{)H.+:xMrBI%x':vDeulO]UCa.DO:-֔kmr"bk2i.qw6a_GBp>aroGVB}~r?Ũ7x=5AنQS[s&bruVQiy`վtտhWXl3H|D|L9AboYR:96A,WC[Q5aR?u_\XUX$ڷ8 ψKceJt7BI7JN`g8H[@%][orfY"،/gԟYv¸!W4n?Vd/h ѕ֝TOا˖^wỌ slSg;"DC$-$)Ԩmǔ& 5Q !V QKEkq}w#sxt\]MXPMb:2Y 2q;c eGy՟}͞촴wJWMd1:ugdÒmz(M]n]%Ƴ%)zkV2uc'P-?i-bb/g.H+NLj vT۟< a\ݒim9, fT媃H IhlP%='47u[ ę5 /ñBцYS(+>hTbU.6~)BB=-ʚ3c-MDW\5|+"sC@*ق3LY2 ,Jٖ*z c,FK͘)ءF\sg-zӇI\G.39,dV4zƓpgvR4fMin'ZIyk5EŲs2q{k% O^XqxɈF5 D?cn{*S 6[ gHTdž{Y8Q|R7 ]4])@fp"f_%r&IK:31LOu.QT|xLr/BF<>A" 3eR> m l߸x: M۲.,(Gy^4b5} xMPDmJ+K=D]˵@V?p |w\y~!nV[9zГm'.ɵH&BUc g<@lkv8jY?A <~蕛p `\,sXw&aKфIH@VC 2::cE]r8>)-369M#gڝ8H@?3a@ۉmJwBpa4)d?Lr5tv_ !{ԭ^1JR̮ژ3 j)E ;S2LJpm&C&t~™vκSZk Q'az B0_ o焣a<7(8ؿ<+.' ejBJW3 /OFb $t3n0ӲYqT1tG0:(-|ZtSoL9C;a_zҟek.+AD@dݞ!tl xb.ݜ:3>MHs'G5?b$&:EG(H!EA*rg>p]þ>K]C=>^e0Յ^Zdʶ䲋š6Svwz43-)>$Q>Mo{kcԗX `*G5Uat:v 6zx*}?c^b2/|9 1u==6)PtjoƜT7YY!2@2'YZ|-x Cj0Sb~Ȃcoi/e2YH%o-l"AO(&50RaiJuT *@ N2Xw% Ѩd%0nlF|L `ǼxaU͵4@C)R~,t Z%P GR` X3itȔX ժ"3O-a_pd]{n.( 7~JL3w87i!{[ 88i "C&fDiGʅIuԇO(p($9T}lCx2roëƠ-!c7M+,kieR}4)&r^7E'B6rdDuū.jvsULY}TUˊ4=Y(LjO| #)4 Aẗ smkiEB$yRV^f<&dyMM/ʄ|v䤳5bY_|B=]ECEg&r^JnRQi-;`u[ѻ9~.Y>) .1g\/~؎lfzbt8{CꝜEi2^0 .* }>np"wO~ԑR8Lի%ʡB5q#us^DuxL} ~L9~y& 0z,]Y\0UMmx-b$\)LX1}k-^Ѝ;Mf!j 呋K#/t:}v~DoZ.%@[MDoyڨ?~އt4s2}>w[SI=G_ǘU3YU`6ɼM!/Oo ݺ; lU ЛՅwx"~zhlYJk#ԵNk5B\\TJ<Ѽxwr2\Bw,<1)}=V7UAῊ{I0};U+qưkY0m(ASclz*m6q-q&O@$JId:_O=XQ`Mj@Tlz"-0"Bfj7oLߖ[g%@DǸ 8cisC 23Ƅ <#ZvD% G8ṬB;Ee{'La6qJ҇.C >Hwt j/CG+Vp9]j'lS <4lN]a `@m:[D:at(֣͖8>dTnڋ3Wg/1X2˔#@%!Lda3Q#|J{!|xRY^Ѵ,;68wcHkve%x/M=~m%n@Dyc3$Κ5p6>y>K]"eh|E:4T`$lDaFُb%Mz~V=W2L0M aG([hnvG &n`Aszt> JAz5<z?So>M)t[@-Zɩ}iiNˤ1K /%U $_}Pyq9hD(ҍ1v#6G1:gbU"om}ƻRvfl W22:I'FC*Id:X {|XFa-T]DՓ|K;1Y˅*MnO@Һ˕rAu(18#f'l1Iak@FiDi ;=iv!d`࿗!_WoQ, kf,0ZSFd)%! F0DMsc+wJI s)j;/s~PhZ \zQē,g(_B*(Fl+6ϼ كT:A^5f9I}Zrc#Jzed^sj<~a ,$ZaN@r:_z'9e n`ZTp%=.,n:JEtu0 П[1vh$e3rhf*79|:g!Ff0XY I&}Umq։I6>YK8ZcF .7=D(D*y !t̖x mS  t/~7Э4P-H7fݚ$*"в{^'\adI#m7J(>#%XB?HzeӘXLn,|Q.VnKA'yy3i%Tt i*jx\"[aGWH!l7ȐAD a{9ِ@/oe *2'K _UrQOәbgjyZ݋(R=)pxB'毄H1o$;gjwK{N=3"]Õ@.W.ٻ7xG5óxlO>EhY)3?Cf|?ghR)nɭ#$*!r]&}Soj"̀[_ҕi"I;qdR"㮞l@RIB&A$U^2-Ju7St5 rk+b׾~ c,!oS~7qoiેUx2eShQeȝ^A0LTnDe;FqED ʜvv= #UNyw { &5֦20Dheq'6lVk_M46p] $f<`kRxIfƭ+JCi" rK'`M~| 5/:F./|ϻ ]MEQ\GDޘb^b)?9r|֫ ]yICe|~0YWˆ k-W͸0bX3*9I-u,G#]Ig1қ!>Q^({= XHeܐHAhR ^/?* BqUd!һ\ &9wB%>8"#@L|_f=eߊ%hs2*6tU.56~oߏ;W9n3;|khKJ５*mOo9ALREsw"cMȑч&}G7b00pl2|CL x(N4[ɲM>g#? XAjN%a OR{RP5vUߍYs8Gv4F->Rpq6WN(*TaV,]0\ 1{fe$;Oz@{۔owg|{ث@:{`z=]Np[}J%3}L;2Z g&M~q6.9; %z{d4 [~~4"uZܬ\{=u}- *\`7js+d*2-䱻lT\j! (); ZbP_C!x .,D>GzL)OݺRY2…RKe *2bX"`Ϛ)^7EnXBWpۜNv8yh=R.l:p2" 2V#އ*\>-oRO5vhUD*Si|W`I˾rl9t^^ C3bӨ\y ^)&Ca왻䢤M_Mx|ϖfH3 gORfqp6QuMAK] ./~*޸gUҹ08μ 9 M WsqC=,;]nCNj}~9۲ք!gulIbdy>4aÏX[.IE6+/& Ρ u Xߞ ~杁|0K =D`aAUb=tRpn3\@ {?E{1lg]>20t<SK+Mn=%F7cƻ 2$ECcJnrxmvJ7ޯcv=/5CK6Ic΢[϶zŅ-M!Xƴ*H|JN#wrzL[ sE]V\iGCJlU~v* #> |M"'y?n?كl kHRlEFcB)Pi1C)}ޖ"NJ0#!DC=Ʒ{ 鲩 [ʱ MBy`u=Q)ᲅ3&ulc N r`8<9O6vU \G,T:s uWdc;*7sq:F_mH0j8@Jd=4"_LAkp@$ cQ%[؋tN`tn8w?DW*0L{-_:H+v7rB%S|oZՑuۜ]trwgčZ+q6/n] F{#F7¼ X\Q&DIm6Mf|K%tP%\R4 Z@DΔy`,䞺?ZrXCG*,y zeRZ&vYKx@{O\Nh.bLqHY:(DπV4зA$@Y@.e$&ǃ!2 01L#)"y|wP底) 4t;p{z꬘]QK& a"e🟞7s-m)8%0'VG=hߋ)C~yUQTҫtS_7`w w>p lU:`X-2M/S 0Bm7.^:d)/Ԑ2Jy7 >7ca QZ 5q7rl!@ܸws6#1tosp oնY @"U2 >W_3-{9k` u,`ZO)b N(%-U#TSF`@"}ْM~28R7 #yu2ōR)2C=^J*K(tQQqR1f_/uF< SY!Xd-VRGŖ@7=\^=>]ƂrD%dq=u$v0Ɵ֟[hة >c3 HwGd^ r(2* Hݞ~NjEn"凥O! EDbW.pY3Ry=|?[U`UgECRx3_g_+o%* 2$ܥ!x1^<1FV` uB6eVQ;$xgwnj]3yB7DfĢHgd*ԟei}bweBm%Q)S!4)#(.J* E8 c`Ңffx_QgpU$fuIxt+]Vm;թD?ln1yhH*wt#h~#j|lvNIlTE{zbwTzZ˜tK3+Т|HWk 0PFRPDrjݘ/UQx` /z$̬]VJtsEyb T1)]4$FR(DK=-K{xLU1@;6a, ;Oz3v'5,&:xIMqʺsN|DS\D6OΠ';DL'Xiʬ]l2` ȗ"${TMlG292xh;XC*T M۷eڢ澈_j[ck{tA@\wN/T]ZgNmAX#_acQ2l!ug9 4@}ŤkGki,{ ~7.p-w'#˱B )j\CjXL%؛u(r;hbPU20|<p'C>{>3m[-rǾȼvը/3j~0Ҳ[bwI_kXcgs;~кr$\}-0'劎9tL _?*;EqԈlrwH\;me/Ǐ&4Ĝ<8XKȭ.!؁5!9i!7DHn{S+8qj*E^t]kNJ@ί-= $Geply:,t=rIv#R'B)kX8[E"Y*cD$4:z4D GoWE"ȇ۠'"!bG<,W"є߲'G&`]qY|UM#r۟ѣ%sgW0K!>3#r//9 fD4x)6^P *3=9_*9ܼk>LfKs/`v 0Oכȧ[o5ʅ pLzQc|Dȋ`zYea:RgH\MUP>0uKt amHt]jRe Ag(jgx Wyj wA~xU` 0S?O0 Rn/jOO^x.[l/*QoT'n0?g8 >2xyP] t˝~WAIܖ[,f9 "ai.1ѐ\ԃ^B ޳qvNKD~ 1`>-SaOB\hfF]=#y$j5-Mw>sSBw䳮LAx0٤@RUb wg9ryk,I6=_֗rFݠ2npyo>aRCr}$vQ%D7Ìsk"P=K w/X+̥f^Ə ZTC^ Ct`k52_VFOs3-J4YGXq ZeawiC9L?`B"깪3* 7V)3XBK QgaI5C }53j>=/1_\ Qc>LސSՅҁ!Ru>@q'7g! ?*A[MJ7.BGm7Szd[xK^r_[`~xgX£@Nߪ-*>m>3SI̘P Y6me\Rڳ^he+ Gk'E&F};7`\H-* 1g&_H`'RJmHey+V8^6,Y]D# w"t4Mɔ *Ffl./It }clP YZ