openssl-ibmca-2.4.0-150400.4.8.1 >  A dAzp9|E~A>?b #QL'5߂O !^r.e&D^v1*%: &5zk3TUAmoҧҕZ>lK>Sis3mqGz=(rǵ@>=lokR>@.b k+L#Dr8?#:Ux-xv9vDުu 60b0fa79ae5483364358a92d0a1d58b839ad3a70c9a6719f4d6bf36cbecc96d0fd4e4af1771bb7471a3a0aae9a3883c4d3e234b5dAzp9|5,ЎrW)B)RPWڦ7_ @wѲTC'&jWsFK"̻4D!z/$Sg߿cQQ6{ӨW4MP?PtmkA"v%*2dSFM}5gp }ZV_v4V`tMԱs#OpNhq0KP|᝚B})_s6MY%,-Iɑ_zMӋ]ڬ%*:Y=Q= Z côĎ3lhMń>pB1$?1d # D *5 KZ       0  |     0\  r( 8 9 : >+@+#F++G+@ H+p I+ X+Y+\+ ], ^,b-c.Ad.e.f.l.u. v/w00 x0` y0 z00001Copenssl-ibmca2.4.0150400.4.8.1The IBMCA OpenSSL dynamic engineThis package contains a shared object OpenSSL dynamic engine which interfaces to libica, a library enabling the IBM s390/x CPACF crypto instructions.dAgs390zl35SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Hardware/Otherhttps://github.com/opencryptoki/openssl-ibmcalinuxs390x#Original fix for bsc#942839 was to update on first install #For bsc#966139 update if openssl_def not found SSLENGCNF=/etc/ssl/engines.d SSLENGDEF=/etc/ssl/engdef.d cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt ${SSLENGCNF}/openssl-ibmca.cnf cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf ${SSLENGDEF}/openssl-ibmca.cnfSSLENGCNF=/etc/ssl/engines.d SSLENGDEF=/etc/ssl/engdef.d if [ $1 -eq 0 ]; then # last uninstall rm -f ${SSLENGCNF}/openssl-ibmca.cnf rm -f ${SSLENGDEF}/openssl-ibmca.cnf fiQ $A큤큤A큤A큤dAgdAgd%Rd%RdAedAfdAgd%RdAfdAgdAgb2'g14e3cdf87d66ebccdc51109da5456a1112b2457238cfc7bbfe756d19fa360c64a7e6bd9768ef8bd82eeb6e6815489fc7f4a33022057d705345ef7ae28a17e597b15ca0996b5cce68d6d3623ef6f1afb97d619a8c4d33aae01f6b773c99cef4aa794b4db510f65e162942d3bf0a6243ee6aba4b14ae06fb1b0496aaf4ba3d7d9ba8669bbb087f7890880dbe25c6c16206c55307a4165de1f0903a9c3066589c98f943b5c7aee57ec8d33f5baabf638230e0d5c3c4404eb21ecfc2ba93567257a9985506f2b0ae896e2bd3287acd7be6688baaaed82083162d3f430a9f020b574df9d333b132fb7a84e4781038e9881e62638dc45b3cc37a3b5af9a6f03846c0c7dbd9c040f032510a5a2af3f4f0088794f79b19f28be2e0d557d081f763b78512rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenssl-ibmca-2.4.0-150400.4.8.1.src.rpmopenssl-ibmcaopenssl-ibmca(s390-64)@@@@@@@@@    /bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1e)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)opensslrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3d?d-bc< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@nikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commeissner@suse.commpluskal@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comp.drouand@gmail.commeissner@suse.com- Applies a patch (bsc#1210359) * openssl-ibmca-engine-noregister.patch - Updated %autosetup, added ' -p1'- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058) * openssl-ibmca 2.4.0 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding - Provider: Adjustments in OpenSSL config generator and example configs - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)- Upgraded to version 2.3.1 (jsc#PED-597) * openssl-ibmca 2.3.1 - Adjustments for libica 4.1.0 * openssl-ibmca 2.3.0 - First version including the provider - Fix for engine build without OpenSSL 3.0 sources * openssl-ibmca 2.2.3 - Fix PKEY segfault with OpenSSL 3.0 * openssl-ibmca 2.2.2 - Fix tests with OpenSSL 3.0 - Build against libica 4.0 - Removed a Requires for libica from the specfile. - Removed the obsolete baselibs.conf file- Completely revamped the postinstall scriptlet so that it doesn't need to know or care about how many lines are in either /etc/ssl/openssl.cnf, or the sample file at /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample We're now using the ".include" directive for the openssl.cnf file, and only modifying that file the minimum necessary to implement the change. (bsc#1004463)- Upgraded to version 2.2.1 (jsc#SLE-18333) * openssl-ibmca 2.2.1 Bug fixes * openssl-ibmca 2.2.0 Implement fallbacks based on OpenSSL Disable software fallbacks from libica Allow to specify default library (libica vs. libica-cex) to use Provide "libica" engine ctrl to switch library at load time Update README.md Remove libica link dependency Generate sample configuration files from system configuration Restructure registration global data * openssl-ibmca 2.1.3 Bug fix * openssl-ibmca 2.1.2 Bug fixes - Modified spec file to * Define a global variable enginesdir the same was as IBM does instead of _ENGINE_DIR as we had been doing. * Implemented %make_build macro according to spec-cleaner * Changed the package description to match IBM's. * Removed the redundant "autoreconf --force --install"- Upgrade to version 2.1.1 (jsc#SLE-13709) * Bug fixes- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882) Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424) * openssl-ibmca 2.0.3 Add MSA9 CPACF support for ECDSA sign/verify - Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch - Changed the ExclusiveArch directive to include s390x only. - The code in e_ibmca.c does a dlopen for libica.so.3, instead of linking against the shared library. As a result, if the package containing libica.so.3 isn't installed, problems occur. Added a "Requires: libica3" to the spec file to fix this. (bsc#1142286) - Made a couple of changes to the spec file based on the output from spec-cleaner.- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch An Apache HTTP Server was set up with mod_ssl and the openssl ibmca engine using libica and a CEX6A card. Whenever a worker process is cleaned up a segmentation fault occurs. (bsc#1138517)- Upgraded to version 2.0.2 (Fate#325688) * openssl-ibmca 2.0.2 Fix doing rsa-me, altough rsa-crt would be possible.- Upgraded to version 2.0.1 (Fate#325688) * openssl-ibmca 2.0.1 Dont fail when a libica symbol cannot be resolved. - Made multiple changes to the spec file based on spec-cleaner output.- Upgraded to version 2.0.0 (Fate#325688) * openssl-ibmca 2.0.0 Add ECC support. Add check and distcheck make-targets. Project cleanup, code was broken into multiple files and coding style cleanup. Improvements to compat macros for openssl. Don't disable libica sw fallbacks. Fix dlclose logic. * openssl-ibmca 1.4.1 Fix structure size for aes-256-ecb/cbc/cfb/ofb Update man page Switch to ibmca.so filename to allow standalone use Switch off Libica fallback mode if available Make sure ibmca_init only runs once Provide simple macro for DEBUG_PRINTF possibility Cleanup and slight rework of function set_supported_meths - Did some cleanup to the spec file, based on spec-cleanup. - Removed the following obsolete patches: * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Added the following patches for bsc#1097463 * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Upgraded to version 1.4.0 * Re-license to Apache License v2.0 * Fix aes_gcm initialization. * Update man page. * Add macros for OpenSSL 0.9.8 compat. * Remove AC_FUNC_MALLOC from configure.ac * Add compat macro for OpenSSL 1.0.1e-fips. * Setting 'foreign' strictness for automake. * Add AES-GCM support. * Rework EVP_aes macros. * Remove dependency of old local OpenSSL headers. * Fix engine initialization to set function pointers only once. * Remove blank COPYING and NEWS files. * Remove INSTALL and move its content to README.md * Update README.md file to make use of markdown. * Rename README file to README.md to use markdown * Add CONTRIBUTING guidelines. * Adding coding style documentation. * Enable EVP_MD_FLAG_FIPS flag for SHA-*. * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0 * Fix SHA512 EVP digest struct to use EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0 * Fix wrong parenthesis * convert libica loading to dlopen() and friends * Add support to DSO on new API of OpenSSL-1.1.0 - Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch - Added BuildRequires for autoconf, automake, and libtool. - Updated BuildRequires for libica-devel to be >= 3.1.1- Now that the openSSL engines directory is versioned: * Modified the spec file to query the libcrypto package for which directory to install the engine into. * Removed openssl-ibmca-fix-enginepath.patch. Replaced it with a sed command so that it will provide the correct versioned engines directory - Removed openssl-ibmca-configure.patch. It doesn't seem to be needed any longer.- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113) - Added libica-tools to the BuildRequires due to repackaging of libica. - Renamed BuildRequires from libica2-devel to libica-devel for the same reason. - Tweaked a comment to get rid of an rpmlint warning message.- fixed ssl configuration merging (bsc#1004463) - openssl-ibmca-fix-enginepath.patch: fix the engine path- Use macro for configure (fate#319941) - Use url for source - Enable parallel building - Cleanup spec file with spec-cleaner- Upgraded to version 1.3.0 (fate#319941) - Updated openssl-ibmca-configure.patch to apply cleanly - Removed obsolete patches - openssl-ibmca-README.patch - openssl-ibmca-sha256-digest-length.patch - openssl-pkey.patch - openssl-des-ede.patch - Did some spec file cleanup.- Fixed %post script to update library path (the only dynamic part of the ibmca configuration) every time the package is installed. (bsc#966139)- Updated AUTHORS, INSTALL, and README (bsc#942839) - %post and %postun added to properly update openssl.cnf (bsc#942839)- Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138)- Remove dependency on fillup anf insserv; the package provides neither sysconfig file nor sysvinit script - Remove depreciated AUTHORS section - Use %configure macro - Add openssl-ibmca-configure.patch- the openssl engines moved to /%_lib/engines bnc#905480/bin/sh/bin/shs390zl35 1681982567 2.4.0-150400.4.8.12.4.0-150400.4.8.1ibmca.soopenssl-ibmcaChangeLogREADME.mdibmca-engine-opensslconfigopenssl.cnf.sampleopenssl-ibmcaLICENSEibmca.5.gzopenssl-ibmcaopenssl-ibmca.enginedef.cnfopenssl-ibmca.sectiondef.txt/usr/lib64/engines-1.1//usr/share/doc/packages//usr/share/doc/packages/openssl-ibmca//usr/share/licenses//usr/share/licenses/openssl-ibmca//usr/share/man/man5//usr/share//usr/share/openssl-ibmca/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28620/SUSE_SLE-15-SP4_Update/5caa2ed36105c148d4bcc6b60b8bcb07-openssl-ibmca.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3b94698879c2339d148de291a33f710a24de21d, strippeddirectoryASCII textPerl script text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRRRR RRWs~z9z`XOutf-8cdbec4b183274c40dab94ab56efb149368dee74fce230da68a574bad9d087cb7?7zXZ !t/Ńq] crv9w Lj4Ev>H}IfӅeIb56*PUeCrR0ҵY>˅ူ$ _T,b~TN*\ϔ)-׉C0&7czY\Qݝmn]~D s|S0 pb|󼨇0 ,Eb>p6쨍 8;2 `??a Np5meqK.Sp ,+b1%w#xf3 ^!=$ؓ ? ];UcJr5 [_k U?Sy[@}&4,9lŤŘmVN4&d5PGn9iB~+]R"nXD;lIo/I|t.pyS5 L?up#U h+By5ܘMgU1av-av튮1-`L<#PYFo:h"?p*z?!s;Ч򼪕2ծR F+P&'@jp.u~ ?4di}"tt#[WJ ǫ S9ņ"/K@O.I$m,;ߥdK~BfINC5lꏜ}2mјڸH.}F )/.Ɍb!i#@M"֖WmH%.VݩamL73|_͓6G b65Ɉdo/twyi┈!Qj*]y7ʫ`!0>:yP+χP2bfbeɑ5' q)B׊8Ku ) ks1wl,YSR8Yʁ*\OK@Ԕ戀ctdFBTcMq3uQ ŭ} ܻrv^3n/i]*K4PD5;yת`*!SE)9 g8#E`ѾP++hh19brʾˋ`? [I "`rm%5~KJDZ l=?Hkz5Ymah1לw@xdv Zѹ!G%SIyW+FI!uF0qE#Ș vAJgA}QY8:3wLu; DYCH d؞ &~$8`-'$`hxM[F8bwCe=phR](1(I0{_ȍ \:~$kFE]#(g=pgG5d/PB@2fo1K-a]8`yCN,N])zgJ C)\^@J&)?Xovh@P{s,OσV8jWh W&{r ݟ%bTf 4s )Wb,_jpI#Zz|3;8_cz u.!Fxn\|t?eHS܃6Y; %XoC8zv]!I:R1@E:H*q`q5qC,W9DQ2&4re^)9'vw$/6ްUtHw+ EyrxWFҀSXB y[3v5^qN;4{}yosB/h QJSLu-)ev4YF#wz(Pѻ2B 4gVTHJ:nw[Nva27~4'NR'n`-!ᓨOK2WX!V}"Iϝf4{,E3I!5e v$yASklU=ᮁb Y}R+&)CczG՛q1nI봀%rotri0࿘}C2T$#h w0QEVt:>`"簰nKiS dE]4De4]$ {ƲSKgNj ӝJ"#'E96"ux+-1^ۘzK+e_ UUϾ@v~Z"Rr_6 ׼%wy"A%`|* Ec-0vrfL7buT(vD쨛͹:JIby^X-w P.,yb%5M{Y|<+B*z;KΡ%EwTó$R3z\뿈x/K4TR9%W%܉Se)}注)A3UkBh-M<5$V 0ⶨ?@)放LN6lגÍ/IKZ8N j&*X?b{GcY ןWp?"^Uj˪MM4&mw& y |_w쏂 tݑRi3`FR~vm3 d!k$v6$ $Wي)ap2lʡf3lRb/cJۃ ‹wC՞ɼȂ$S jIgGm?84a&\4⫓Y\1O7ݛ61kQlڜuiee:DbR)sw@])E vtD!^r+[ػIG렇$I·Fb@L)Gq= N#Y6pBnE:1.M~ o_.S|*OH9W9ͬ JK{.Fzd(l]FxE\2E=е'?SΓ59B@m"&S|v\f.tr!w>ԅ'aD 4lU +֯O(ۊF(w-Gɲs.@B AE3m_prQmag9G$S;_޼l~)mDﶵa` [٧tҍh&$:sL|~]@-lxM)q:r}RRݲe+Q_QVRoFosL%},qz^Yy&Dtd2~V*g6f(W KY $5,+J oI_i4./_Y35tձֱ9SUbo[R[..?`F\kl ,2E>x `OlA R D)o=]F6ٓ  vP`%&KHTZkѿIqM/f4gdL%4E{O c,jqaqς/pG}ϐ .BIk//B QOwCxw wG~o7'^'?K$$ РUң utyi!EC4œk+;OZEh_!MDn9.NB#))4 LmY)]/O0AI,.ll ?홾 FD%S5v+5cՅ5x]o3tm^~gr}RP|B.gq#ggMkbB7bXpOkl⎪+ƞ0TY9yzIm58r@SNt=)߻YXi'&D> KM~=9CfkZ<ǘPRN̈Zq"݄ChиReHPiUSo|/Xxx>Jz:4#צk*no=t=\ j)ߐJ@6Xk幐Y. pTSU{2F6(CNy{]f0`% o[?hyR$7͓Y7,؞-)WA#G3rWd/u@Z n"c{ty~u|PeIB2QQצ"*.1Wm#T#>v_6e mHF=MYj)E:yfՉCل}ίZ`E0tY>؈ :Z,+#dHIcaM. ]Aq03{26w?q-iRN;%ԣUۯ_8櫐+d1Ur1r.R7ՃA`Q*5gPuV py>" lf3`~lgț6>/ $Y*#>k_\E؍}6[]:h/yRmsF(;QwS`>ϑ#_iDOTwNe֕.&Q :I)K${4}Eq &uLqFJ>^> δ pyz׻ 1AڗNGH3"] , SxOf^ ~v7\i:N95TY7p7u۔eKpmKO,Q6˒l$L #M[;S\"wO$lwWJ[#o6*:gzU0t'ܪխ#Dti˗]g,6f-ۙz*HRxvhCnB"YOtB;yBE\I0 I!a%yD'Is0MCV+kCMn?cn |TCxV6u8/{&;P-''M3b^LW5}\jkC T@|2' >C3},͉w|0R]ww远̅Azܒ@ޕ]*ilp]u,ajύ4?ew#ٻu"~uTF`U6TFNF6yKF-aD>MFT7Lh& bw0X"/rw̤5ƃJ#Ao.N3YDќNFJZ<_H{S4(E {Ҵߘ#_qѢ/ns0#OY?x,bYNS)?`^|/ m2Cvu5qqBނ<Aa EHИ=2+ u"wYN'PPrncg۲Ք.;KxЂ =Gc?Ȅ c/l\Pξ ِ>؉$DwU>Υ>f;|4茖' pt&]t=w&gubEfX;MUە? YnlpxYF=/1#[Z4 -xOB.Uז=9?iι tok"E.(Yc9_hoQ`"0 66O[ .ρ/9|L@gS PbfJUEnUJa`1t #*]9lƄǽYP꘢ O7|.+¯qcϰR7ol1))9߭B:.ڍIeVL{B*)O"O/^)fw'CGk^3\6ş  rP]ll'{?a=*.:|1[zZ9TS~0b:30HLɠS3u3N5bs$ouqK8,* uW،(H =CpGaVzkfPCmJLR:ZZgTv4J=_"\`Rvvj"#%/M$czB1R2 )Q'g sb:Ųbfa#oUK&CXI4.rɘbPjs 0GU* ӬL6"},Z9XMJKV? fb"Q)sNS#s@r,*[ExrUe?㮳(cL7_x!%ms I]E2lS& dx"\{X+ѣh3{P#!22x8a@[.˝o^ٷShQ a2Bq;V /n Gi_S:~O3'Xp*¹HQV#箴W8-~ݲ-^#"FNٝ-Y`q8гkه2kLƵgF`o%.?.4Jkw9)@υߥ ?v`"_8 ʹcYsh|w|>|(cMÜ]j\9BѬJGU5K^gxCC8>ĂaN -oöm_4z˯7HxFP3x.4\q'xq[j` 6IWNVqwCښްYÍ4sq0!^/DPXU(%Y\7sե (=^HE9#S-ӒjaGWdDbHH'֛?5KEO:l=oq]v|H$Ff!<ǐ|9dU %,9W!3&Zlka^ҐƋ?(1ŭs(2٢c}\ϲ*CiAS:4ʿ]?۩35ԣ&1x@`l!YUutWBAH⋱bӥ _7 b?Z_UZ|:\2&NŮgVEu_{i@e+ Вh,fÃCxDXʙgۅD, Bi&>cT b^5 t(o=9Bcaƕj8j w8 jѥɨbGS%fUzE䮮ͷmV5Z:4jr} C2Ew$ 1 ӓkfo h*qEa,@.9}'/خ}o(0cm>Ll 9~OW nK\)xߜ,ϦeEDqIImKU7@uGCNLuYM~ɿ..Ae\ڊ\1]VPl/k؛b#P9h&A|t'DjSߨU~Τe,.Y#c\2+hU@_Qt E q"%:o գ/$>ݨM+͑%;[ u]8 {sw:iwYIm[O 2Np -֨".&v&J9$ayrvͻ\b FfJ >1Hdq{h, uZe/dn:kM!XĖKd]ԮeK6Z'yֽa9[%j GCd:gESAŊ's3R'o% uIrdʢTWJ۱r[B,T^6HՄw1-#=r~ ˾&\w%,4DpZFtTrj UF fBH:8`F;Q~X8Z."ɦ :rb N+pH,N hA=ܴ2VwDji- DBo H;6>Ru ņ /|$N})Kz}#r{˽VdU)@VXu0_rtÅ7)ޱ:wkPU,BH Z⇥Xc@C{$żBi㶪Z`!=ڟoC!}dq,UF* ˯ “dZA F9Qh>n;;4tNp_wB7àv y,a%V 鈉S /g}+g1B%E #"aQ.OM>g9?rgfdI $\'t04%t?~pv!44 BdJ卯&7C"!)R0|Yf^ur?q%ȝޚ([s)5(xC;\TP0)ꖧ{;o >}JD탲VLyO,T҅VTTHf(R4Ó޺FEY^q~]鵼9xաZ:yhϺo3Blm/h;0*ft)۫|rǦ0iقؒ46H,*e1оyY'yPU"ov(oJom.{?!F@I@QbŖb#Z a p1< ~}AjҘ曉sx\]+)~>A}F,44 xFl- -&,@[,(`=MGR1g1qr\-iD:? ]ΐ/H*6W\<&h=$9,|yvrԥiW J$6@&g1q@[$pt[>Cl_Mk +5R p>ic V>şL.=U&d<ԅB[ڤ 罳K^ C*:V|) 3ESI~asᇇ L(ObD:*4yI S #jj 7H8T0oM#6E³;)_ ~/~UmU*xGT t0vHz 5_{ι _јmͥ S`VhCSo hxU˼sUX^nx^о2RvS挻K=O(j6!_'UY8s%5BAYS-t$!j*Lv2PzbŖY1Uߧ6E;gu#VQ~tcwfR[ݺC_&|Mx ՜icԏp]Xzk%-'Y`h,3.h$ܖTu(bD&}.S0}1˰"jZ"Gr:A\+7A ocK'7-x5ӀIt%QrWSM4gp4&u\ i lV`Wh},jQ,wBs,rK6, AѿbW6.KhQ`X8hK/Gz*F"GGWC!bO$ Vݱ>uo oOt[B9ANeh|i}\:'KmdSM &/X0K/LS6dpH{ĘK>Fk'tw(j1b6ܺ?zL?Ch6z2l\`1 5iR)#p69 = qQYa?2 *"q#&'8 Eez Y WCKEԍ.ii[Lst[#ꕚoH(ݻDag=ʕ\pLF6:HGdSâݱ,Y}= |Gcȕ|͡"/y56Ŀs\v{;5Uvd]쁒FǪo=;Kޥ\W1A DE꬏CR02ށmm=pt* %y׵eh< 6 WIlyG-jwAX/O˰^lPw+ښHoa ]O9jkx`0(Ӫ #Q-jx-5|?ub~q,hojp[sh.X+։BӬh;fW,z~,Y ?"xi[sv [D/Jv+w}bjG= 5[J|JsPd6y:'ZP''iOċbD*%*XJ@29j遱Y/xzyx`𷠢 7$p1+RDSBTvjnwZFaU^1 yz@P1pv00]fv}颷J i߶S5+>g᥻VleOS,+Mӭnl}uܗEWqd>!ctO'jsvkS\ j' d<}Kq9#0-=e%5󬏭^bP Ps 5986S5a~A |sXnq{FF[)J]DJ* x_a;:;6&4JBxgJ}r$yzDzL@@7ۇBPj"#̊Iutyjc%7JTD m:) /Pќ-P kcNQ2@SpG+a:_x9xHk߽aY)ze [b>qzKuwI-}?dW-6#:^*g R6Hgoj,5ԣt?It1,i d&`EұQjpHGQY}#~NOnv?!er+ 1a2̝HR8`" Ӟ-ߵ Ԛ#2nzLh5A$ʞuh[qh+0>dۙ4[Nlӧ"]'S"}_ y5yNV"7E9sGaHNM(=:l'S:__s/&v%WMϲv[baAp#+4|um8SVRL/4+˨Ш]C`ʲGr,#TQ 3̆ݎT@b2]Pid|W\:JC@AE'FVտeJD JnPOT}?6g_RVP8Y1 +kF/*͈9MZ .ia]8߼yz'41S'.3ű\|]L@~8q+6㄃'*L@|ebF8jip&8ɢ~UvCH1Qa&#rڵ{JY*M[VΝ|NsNrQVt l &ڸ`0k Ǩ87TogN*Rʇbf! Wf*D.{90|;4[Ou~Ѷۤ0(;L cgu}2Pna4c|kx [eyǼM϶ 眝11$xc5U#B_5Ѿxot焁爔IF$D튓Yۏ$lscBa8\UZdC~|t}$yL*^-F*mk.׎5glqbѳX577)4^(F]8w0I`*-jqI棵S\XZ)mLKth%r^9m3NkQ]&:Fm]lq&h?/IG%Q{rGB꘦SCe=E-sλ7a-C?kv bKƇfWw"dh&lz6 qZ|UzlJ(QS4b9p u~7;=.ފU %N߲Z]W9UDNSA^= NGJCC' x҅ jQ0 d>nZ&%z45'%/nuʽg*}ҁ0a cΊ<*_:`f~y@q?RI*q xj0bjt(}PpR u(nSNͩLۣHp\8PKYcFu_6&8gS~@-I='&-Qcfoir'G(;ZUm3b\pԌ #ӳ uw>u6c)LJ1\Q^J=ώבS$Kl$d Ql~CL^N|ԄH cD&sxCUR1,tHeKzԩh[Nf M_ qpMͽ *e7~#a͞w{higq' *G?3vAYO# O.=DE>)O+.`T˱DǛ"E? LH`a yFQ\? Lv%j>A9bS{X1YD4( ˸yz`~k;@xnUEGnA 1du &0ً}i[ _[u:"Z8Wb-A'M nu׾zӼfX$,Y:Ƙ >G|/'"[9Dǻh{Hg45YGA󔇐)[r]vQ.`[v6=M3PfbhZE0AK7 lO_Lr˲8(.`{esаXcQ( ^v).g(C>zB쩘WYHz$t6E/ݫ`~{2C0s)=WE~y!!}fߤ!dPL!jM3ͬ|eV(Ol]$B Ie.|[o]" 9 -< _Z\M0;VEY;N5<L%uχyeʳfp4\>%~hxn0iokD{rOD˃ҏHh7JR;g7ŕ{\!`p=ܚbQQć]It"7Z_7]  pü7.Xͦ `*}{vŖff|6nE&A/j .e}ЌgزlLRobTg GOnTJqEқ#&9~YTOY 2in'F2#o}Sl`J~gR+混w 9d7yŇhdX,+NVs֯ {j2d+U T^ܶX[%Okўe@x*6Gjēf@+h\*E@##7 x}K'F=e?Gv:ys55Oݢѣ\Uzhf6ްcdܜoS~)E~WyA?>o|v~0NOPe~pID柇Si8N8Ʌ3~ h)=$ h>/-%`qm4x'8Gܛ?VFM`'J!0:W*fNk3A Y~6]3t~x6p$nQ1e)Ne;JH5mHC1K1N-h6̄Gl s8H{&Y`X ŴxBjF^0?ٙ\+T dnvݥu@ڲ"$E$}fbF[v(ĽCbUUv'p w3bbg xd2PXhX>2+ 7}'oZ"1mb?WV.C aVön8Y#ʼn,~j`le͢9ah2g~v6,̪ևoSQk!F^mсgIUzhi'/w:@j<2vh0mF$mfƟP_5b=tU5O, }Ά4iP͚=&B䳏z.][aqì";H,_Q$uKڃI% 8;lOaázԌyTfztVF}kJTؒ?*r}g:ۂ{jJ'Xugp/q[3(8Bh|vȻ|3:qWUnw8eȫM_{,ᖛ+g_Ńv12|Y@ƿwJ%O4j#m_}uGF[e'L^ ,W(Nf~R*?n^i̗2րi9c {A*4fj 7dibFk/z?4͚%zkpqI)LO9tjמj, Ծ'֣k*xroOl1e07ly>o1|^sSGJJD LW3l}{7Y'. PVg+3: ⏇5+Gɼ/t`9dFZ8FTêɍمca(%sKSgfVʈ]엻3}mZ{qC)RBGyC zx{SS2z?f Fqkaޞ1dd׬R>ufG{`4)otM?_](O%IzBPIUs38rߚ9[6bBgx#N¢5՜O.M8O<n_,+@w{GHc)( K/OU>3?t:V- B )<ڋ׉[mz ./H6}U"i=ATZe&GJ"q7@pݽXU]Dj +Y=/\5f&`h}3Sxq9MjB7H) WK1DF_1t9#E2(6Y^$s)3Ju/^H=Dd5낍RO֙ fU'şa.q] .`{pmt}Wx'W{%il /pME o?Ù&Ipş@mAמMBKRgR=Ӡ7h*]E" !2{ƽKOVX]`;x5ArW#94o|2 ouy1{\^{_a?wpsR:_OlaDv97\DpiCt{%Rkq8cPj#b$Ո_zQ,IK\я bƱOE0䚺P5JQ+YjvHeu%lFX{ /(Hd@4UNhەXf4u2*$4&'؛NP;zw UBjD3UL7R'q[p[A X*BjeLJR|={$?MÆG NcΖӚzcS>4lz^]#7QMiFSb;߲iGڧѭ?VeL׶C{'\7тԋ`awaB5;ĖkQC}Ws2*zJg) s=s,( @%YK B [At/rECqԒᩮ3ܢTCu&\O{o۬h-ᎃ[aנVOR􇉊{ 蕃k^~LiVwLbG~+xn] Ҫ/l]w1ۛf 43UCݿZF-H9H]`(vVS(+4P)Cga7ͤ%6OsR=b52̊(hLb+ɜ==mVX975u)iDKc͜s_ Fd5%% 7LhÀXq< tgCt. LVKΣbtK$T~*.&(h;ǻYbuQ7w_p _~QDck<c^2SU^\|B{E+ņ<+wE`fԤ9|%im38tGϷDq+'w*$-d˜bϺ>*=)j"ibQf}WEs@gVS,vO}{nYӛk3 z 1Yt_ 9գd,u -J2ݢRń̑8%6j;ֶe2oCޏoH@:Q"Pgޟ&ث?1_ "tQۻB횪4h/t]?7$N ~dj%7Hmr2hܰ<un&n3ЯPsվKyy#Ǣi%Hzr 3z^ "D6)rkc@8pGZ9^xÞ> .P_/`ڙT܁ n\`-wQ~¶k=sD˛n]D0rzE3E/ k23sCD.3V3Yꟙ*=wJv~^F1>Fz{!#s)05+hx9LP% (Eo.uXU\ѵaݚ6 QN5wAw]=$unGAʕKQP1K{FNMT%d~VN'餫ql% @aL8 o{lAzVYa@_4ܓ&!QRy:pMk6"hp!;pCjQlG$v/? wAL m{˂6]S3d(̌A!j+N,;o8B<3y~`ta-®ˎ:սjȟ$?6|:|^X}x @ԯg~W@p.sCM)!nr0r<%B5W9f4cM@1Bo0G>6ߓ8{vX,ȃq;۲{n 8}  1ap{;Y1mѹ"}>s+&/!Pn(lw9<ԼPq,ӄKNU$xjAIkK7LU(Hˢ/Vܕ4j$x%Rݔ9#ZX7tfv>i3d;V j/`]Luij ?: *TQyK"2=MEw\, VGO{ɿiePr~ڮl‚I!@3 ϫa ,n6C{`! EF|/t ̥lq /Ao?ff1ڱOR)6.ѳɀ.x*sx]Ki_{2obOdV $8'HL^rΜO, (ۡ #MNKfUR$w# G/z4M1L+6ڹz~./e'wի7†iASKo'PmUgD=hdzPoޢȥ1&p-N-#. ;k˻ȣu E-#ҷ.S c /7hnrDW88c|Idͦ1yfO. %oJĤ!O9 a4 RGqP7wYN{xB%||)YAaMiDhi/A'7ZTݵWL[EӲB[X$KnC0+޴Ǫϸ1ǭUxȔ9^@A}/ra\҆E&܋>LRJ/wA.tW|sd8M)'Kxb9R[pER̆w^VlfCxK_2LEZvCs9كvhC%e.hK敏=ze URh|g<FiDbgChgO#E$:'CbdoUG/ai:GS,kZAae,H CH͐[·,5aL;[ x" '߷^IcF9.M Qi?^+7Ж]\$4r{M xҙl%A[Quɥ#7yn{n W{-YHNsӵ3@}H`OBPx̖҆ `HCdՆ=AjNksT1ˤH;q5|%Bb&yO?(dIyퟫ:A>C>-V˯X\QAL31Zu';qZl&FFEw~7{ڝ |ܥ$>> X08wD}I5S(1݊Av|VhW7Ϧ."FSږ5K[>O.T} z-t-(űJoLWTg~l]FU^PHk̅ Cm}ISo8Xk-y y8G| *Qy$Tp#xfQ6C]ʃ} IՑC6v  {Q/l欐gZB/*TMr=6g}x+Kg"ne7'5#*@6Uɼ 6fIc\lWCL0g#pIj3uσo YZ