crypto-policies-20210917.c9d86d1-150400.3.3.1 >  A dmZp9|o\[Wo҈ͷrє9E/NwߦlgD+Ff2XO8E\$B'P`s呜Čcz}T)lTN ,^}`r *_8db6<(MLBOpCl`?lPd# 0 L&8 NoH    `   - 0\269F9|<<0S~FSGSHV$IXXYTYY\\Y]\$^d=bgcgdh6eh;fh>lh@uhTvjzkkkklll lLCcrypto-policies20210917.c9d86d1150400.3.3.1System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.dm>sheep17M~SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/Productivity/Networking/Securityhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do if fn ~= "." and fn ~= ".." then local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end end+-+1+0-*.4.1Kk 5{{$iW3 pBi\iy k)[MF4E RKk 5{iW3 pBi\iy k)[MF4E R 1  t 1K]{vg@A큤AAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤dm:dm:dm:dm:dm:dm:dm:dm:dm:dm:dm:dm:dm:dm:dm:aDTdm9dm9dm9dm:dm:dm:dm:dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm:dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9dm9aDTdm:aDTaDTaDTaDTaDTaDTaDTdm:aDTaDTaDTaDTaDTaDTaDTaDTdm9dm`>` l` l` l__#pmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comdimstar@opensuse.orgpmonreal@suse.compmonreal@suse.compmonreal@suse.comdimstar@opensuse.orgpmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comvcizek@suse.com- Update the update-crypto-policies(8) man pages and README.SUSE to mention the supported back-end policies. [bsc#1209998]- Remove the scripts and documentation regarding fips-finish-install and test-fips-setup * Add crypto-policies-FIPS.patch- Update to version 20210917.c9d86d1: * openssl: fix disabling ChaCha20 * pacify pylint 2.11: use format strings * pacify pylint 2.11: specify explicit encoding * fix minor things found by new pylint * update-crypto-policies: --check against regenerated * update-crypto-policies: fix --check's walking order * policygenerators/gnutls: revert disabling DTLS0.9... * policygenerators/java: add javasystem backend * LEGACY: bump 1023 key size to 1024 * cryptopolicies: fix 'and' in deprecation warnings * *ssh: condition ecdh-sha2-nistp384 on SECP384R1 * nss: hopefully the last fix for nss sigalgs check * cryptopolicies: Python 3.10 compatibility * nss: postponing check + testing at least something * Rename 'policy modules' to 'subpolicies' * validation.rules: fix a missing word in error * cryptopolicies: raise errors right after warnings * update-crypto-policies: capitalize warnings * cryptopolicies: syntax-precheck scope errors * .gitlab-ci.yml, Makefile: enable codespell * all: fix several typos * docs: don't leave zero TLS/DTLS protocols on * openssl: separate TLS/DTLS MinProtocol/MaxProtocol * alg_lists: order protocols new-to-old for consistency * alg_lists: max_{d,}tls_version * update-crypto-policies: fix pregenerated + local.d * openssh: allow validation with pre-8.5 * .gitlab-ci.yml: run commit-range against upstream * openssh: Use the new name for PubkeyAcceptedKeyTypes * sha1_in_dnssec: deprecate * .gitlab-ci.yml: test commit ranges * FIPS:OSPP: sign = -*-SHA2-224 * scoped policies: documentation update * scoped policies: use new features to the fullest... * scoped policies: rewrite + minimal policy changes * scoped policies: rewrite preparations * nss: postponing the version check again, to 3.64 - Remove patches fixed upstream: crypto-policies-typos.patch - Rebase: crypto-policies-test_supported_modules_only.patch - Merge crypto-policies-asciidoc.patch into crypto-policies-no-build-manpages.patch- Update to version 20210225.05203d2: * Disable DTLS0.9 protocol in the DEFAULT policy. * policies/FIPS: insignificant reformatting * policygenerators/libssh: respect ssh_certs * policies/modules/OSPP: tighten to follow RHEL 8 * crypto-policies(7): drop not-reenableable comment * follow up on disabling RC4- Remove not needed scripts: fips-finish-install fips-mode-setup- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938] * The minimum DTLS protocol version in the DEFAULT and FUTURE policies is DTLS1.2. * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e- Update to version 20210213.5c710c0: [bsc#1180938] * setup_directories(): perform safer creation of directories * save_config(): avoid re-opening output file for each iteration * save_config(): break after first match to avoid unnecessary stat() calls * CryptoPolicy.parse(): actually stop parsing line on syntax error * ProfileConfig.parse_string(): correctly extended subpolicies * Exclude RC4 from LEGACY * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT * code style: fix 'not in' membership testing * pylintrc: tighten up a bit * formatting: avoid long lines * formatting: use f-strings instead of format() * formatting: reformat all python code with autopep8 * nss: postponing the version check again, to 3.61 * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"- Use tar_scm service, not obs_scm: With crypto-policies entering Ring0 (distro bootstrap) we want to be sure to keep the buildtime deps as low as possible. - Add python3-base BuildRequires: previously, OBS' tar service pulled this in for us.- Add a BuildIgnore for crypto-policies- Use gzip instead of xz in obscpio and sources- Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch- Convert to use a proper git source _service: + To update, one just needs to update the commit/revision in the _service file and run `osc service dr`. + The version of the package is defined by the commit date of the revision, followed by the abbreviated git hash (The same revision used before results thus in a downgrade to 20210118, but as this is a alltime new package, this is acceptable.- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls- Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option- Fix the man pages generation - Add crypto-policies-asciidoc.patch- Test only supported modules - Add crypto-policies-test_supported_modules_only.patch- Add crypto-policies-typos.patch to fix some typos- Initial packaging, git version 20200918 (jsc#SLE-15832)sheep17 1684920382  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ !"#$g3456789:;<=>t@ABCDEFGHIJKMNOPQRSTUVWX20210917.c9d86d1-150400.3.3.120210917.c9d86d1-150400.3.3.1      crypto-policiesREADME.SUSEback-endsbind.configgnutls.configjava.configjavasystem.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtjavasystem.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtjavasystem.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtjavasystem.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtjavasystem.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtjavasystem.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configjavasystem.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configjavasystem.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configjavasystem.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configjavasystem.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polGOST-ONLY.polLEGACY.polNEXT.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodFEDORA32.pmodGOST.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodSHA1.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:29089/SUSE_SLE-15-SP4_Update/ff500634e19ff571982bb1f5e6b5ba3b-crypto-policies.SUSE_SLE-15-SP4_Updatecpioxz5noarch-suse-linuxdirectoryASCII textemptyASCII text, with very long linesASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)?n4Rc‡,"crypto-policies-scriptsutf-88d194610656dc16834143213e34d36a31a5b8ba06be7d028a5b531028b1a464e?7zXZ !t/'Y] crt:bLL ؠ\'ux9^' ahG̉d6KfK(G!l;s}2ꇰGH:*aR} ޵{Y[/meq&Nrh!־_wt1ڰ-8= q ˢѢ,2!EF>/p}@$-0I\7ƨQ`z;V:YM۴.$S6hk@Մ'~ΪjyM;tfjLIDyrR#sy Z`GC^ng% )j A#UVCMte*oME  lsYP:Sa[z=>0s~o8Ru qH1x׵Oa}8"FU`Zr %,tyjx'SKcz!Yy˾]2|*V)#+)lgDwD>֧D%$db<NN!), 8axvoKEqHo딊}{ ^0^,_hf`To46\"?(Yj>mOt(vHȌa }Ġ66\}J#kJi*E~ck[^2=p>^ʗWkZar8ḁ3r_DI j)#pE8%qE ?zH݋?K.^kM6NX5ᩌs P DZ5&HX! Ia'`Uo_K+?g=  LBt@ g,ʶ;I!)iT]|_Ek\or9%ۢ9CdCF 9>u=lէ6c9a.DǑ_)NMU &PҬE.7x:Nƥva] xXU5I-5-p=84lm7ཪz)'`qvsgY@Y"1y[8C<\衷zڭR㝕ȏö86`{\֗j~quD eG\i3H#-Jn>Ԍ7>|$zM=V]H\w#b~mf;'H֍$&wT\jƌ))2[/R 4N·Bl|h/7o}u~/ NԷKR>!8r˅:}(cA.'4irvycpye+78tq璿$U q|QRg4q0Xx\?Nnd`e ֿ&ES:]~ni<Q㦪wdRǸP,>ntpg1JS¯~"NvP~NؗvN,Wd?P9UGr0pDaΚ~?:P0;\bZ{bXT Ɂ ٽcJA6f lZmAm܍>ku^.Z־`rO.lftY.Ph͖>W^ޣ`v6$2ni$e#DTl m{G>Yil_cLJC&#mk;&ItՖ &Rtg<fp|Kcoɧo*ۘJH A|N=},t,jvmBxNl"/7 ۶*ukj[Л+Y풍|]Ro5ހ"uRmL'jKpQkvi銯0rdNRl)ƈHqP)W4]!O:\>vq?LR~mMz+j;\*Zc|?u;ua8At[EŬM|L A)O^Tӓ4."v*/T_&O)st`6: Ib{ =/"%djH\cN S2yWzĪ[0ߛ~O%Iup^,D#&?+U'jO'KgYNWn +zxX>:VDN7G'@2rU& =o$I#ǻtod~$Pċ foА`vR ;ĺ, dG@ tZ3oG5'c->=)Jƿvv`h  osnxǣ\P z6ʂWi&B#ڵ情ثeġ>F93ͯ }1m8y t\A6=rǓ@Ȕ1W=my]7 "t7ׅ9E`Q~6] e2>lJ*Z/L.P]O-‡Ν]ЉFpm_\9u=׆`U  403L>y[VE.$`<,`|Eّ&ZU.0K8R.B`nDm4KGQ?nlȔ*}F?.Yu{:W/ Tՠb <(ŊNyй<5ӛUDIhp UM>[B IO1Xhu l/.kS4O7V͖5O^T8yF'Hi9LGz^vxJΊ\WSdB݆7a1 !f B%qDpfxs\z]F~$M:VIy܄i'Qc2_qV`2sI[>CD6R.!㳧XZĪᒼ'LiLҗND1=o?/Yƺ/hBq;/*}H8L(s6mg[IF #=Ll9ݕ8=Ӆ4aJM6p~^ ݋D@ ? y5t4KhT|=<"[gvZ*ofͧQ"ȣ*oޚXV렝IVOV8|RYhIGzkȭVx!/dP$DU^lܛv{K{|E;.yhjhW)oCe`2ҀU]ʬ+ ۪iǾu@N[; eL}6]yݵ@q-~W #4y$tR93Rdft\;Zk)N8PHmUY=[!0µ(-V+Z"C`3AlsPq pLR*R{+9 d"[e-AZ <"Y z'dpYURB)IS+c.A\EYߤvX8} * T$i="%Y ǹZ u [2\ĀWii*Ӗ|'w:ZE3u u&7rA:OFn!bA!wa ƭe>{ra]ќ*GkU*Ug5~ƗzEvr`Vx=?Hj343YugfفG=/T]*u@V3<<2Q3}HF>U )KiTAcX>=]I(^%cfO 5l/AI 1K_*sv$5gX8t׌.bVTfjɾG\z;Ǽ{v#"NkZnx&) |(tr/F|F7 HMD^}6tm[fDK7:P^wP7tC&OhW5bY#/מ]<]k)z< 'ʝ>nSY y #c;_6عT-+LB,4_޵rk@с=*SxrG_zW7UY Qz >|t D,>a^K4#P,_Ax:9{2] H_p8}M}fzo{@K!a!:'@ x=vɩeH< YSkYMpǜBhLbg L}f h#ypf}v`Ǐ'2b©ѶHv/:!m(«VL˩ҫ‚b +|xCXJ]"ߺa =o@d\{M|GÍJPM3Y! $ { p{QPB88l*Rcf>?eHKBLn_\g)\Gj7jOHSU+C,2џ>A3L[f_,қ_OT@S;$\Ƽb%X|y"^d(q' ӀmBM`{H/S_Cn8} YuXXb~6Ȗg^x{ .e{@Gq$s%wKНf]p1tߢE<'q179Ii& ДTB88HdDUcWGTt U9RP?Ksly)Qiw [YVcVomʹD+pTT,!kl8C- YS}#KkJ^]@_MrY/P ?lHGu(s`!z!5TɆ)AU?p96*NfQ- E+@45t\ x:E$<락 R4Eu4>VY0oqށnί"$#g3f-Ӿ`+`]- Hn]NY^\n$ry蹲ݷ93ЉZ2LU(2NpA>WOB4a(0+ $6Hf)}m\PeY">_3aRnOt_%@#4%Ԑ&2B'Se9D ]ڱ,a;m;1v[vLFo9HY*5Q9%D,5s""wW#C;ՅP&RҸF!?s%iDڒԋf{p["\(@Q{o坛HIh`IqJbI/Tf݆l*s1ȻmQ&fLT򇱥F1LIZt:4W)ȨN^ᬳg S{2wM _|א>Fvux"c??0P2N6@LJdX&:M H`.ܖ;0h 5yվN >n1+ ې E2Rs6qWaS_Xk$Uat a2 Q̐MBXEH#3c0XRuE#9cFtc^I"u0Pa (fv ϯ#N|CvkB):v ;VUdʀsQRJX3=3z _eR&"tѾR TJ2ַB2T#.W PG;ܣ.2GwVZ[i.ΊG]G:5E\Q;E;߃Qܔr̜{MdRhGwSlo(lٝ伢AE'R`gRvH(V Cc2 " N&v`}-C.=lɛ]q825iRO)ofcYr;D5Ra!Npw\L vd&–-ɀ~3hQ:PL2  z?8MPs`Xrp[R(3#kH`yMFQI6ۄ][NB& OP ׊YGͭYh}b;Vڥ])h |)ŋ b2W-.ɰE$P|9PyrjIzs}i&K ܺ&L=Rt[؀J1}mXzXY@ j- Ji fWݵ7eTL#>k*Io#KloLl ej}_ϵ'l.i#A!UwY HDq3t+!vS-`dF0A&\1lMMW/Eh¿ ED\U`o<}ӔA}{{:p҂f8> Ҽ魮_m?VDc\[ iWg|ϡK v !HʞvWMVJZs9t<?W:Ϡk@}= 5rzYb8ezs?6OQӑ~E6@EG̗[,x9 V@cU $] *?`rbh_JY ` 43pH馹J#)3CDxJYs#:A᳘/%s#V!]I zs.ȇm8sT^hxuW\'T]$~-DwNp苂h羜>/l@sln2幐W)‡悑8э,؂KԻ,d|JQN*Hʊm+NBﻚda/.r& lP5d(o7~!!eD5ODRÝ݊OA>c> b}XRljƃ=9{ߨ3g7u~.1p#3X<Φb~o̖K介E 09M핚VIeBԥYI-`j6X.Ր Fiq$i+џu0@h&mkW]E-X{w "~.H>G?㫊Hj?KAOvznb5Ibe| }ѭ!T+)8רNĹl3<䗒EF.ӈHe6ȟ9f&VZnccI? qݾ:L3tF"2gYtIǒ|~M4n~d?:0vy+P1K_َS Rqn\FMA5[\V>b!P ^&˸!ѼZ砃 Jo+{\ys2ÜD Fh4Å=9xQS+СUu4x8" 4F;mdaI드ڽq +,VGFD9QΌ?ljC= D;DgW' Bz$%t*jsK-Qe+o^&eQkH^'~VFg\/!y*8gYum<,ݩ$dD2ԂSzx*9s0A', $3@YfqHMIݨ.j AĊ%s|, n8pV9Xu;Gzi~ʟT?NnK_5<<PS4!}o8Рc71y\ؽ f}=x- Ryr[5{ja %ӄt1쌜121 4qig.9hpbxbM)vڲ* nز4WiJbe!=CtiؒK^@Rp2|5P+V*PSLzG@!-Y,ECCy%Cn0)2A92A)^ E ;SA(GY(3Z7V f(?᫧\a[TKMJ&ͦAR7*Fc@KW_ pEe /T>lDr  }W0Xq!B+f( :7O y˞Z6<)|6*,GTap&&*O5sRl3Y߹ *hl%EBrzjQ578MAdtT*Np͘p<R/uFyI10OI*ОvF GlD0v-k׬ E;;PXe5iC2sl5!B?КJɣeu 0ri/ע"2dUq ]//+m12*Yd|951[tsUxK[Rve!*C\)MT i$}؜S8\vD:*w?dH*dYS=ybZl );m5D|S T^ PcC 򴡋 rs\G}3i`.9i@fm2LyiphB"g<b{xfzobŠ^ϋz?iѤ@z"iCVo1 zhU[Tmj>vbOiΌݏFg|6DWiXPU68{ p6fpt.ArRMRIԈ=?.8#(趾2{f*pž;l\& a+혇05vyagt;] ӏ;YS~ߣ6[89puXi_5{Y0X'+v7pFːʎ}a"4V?~Jt]rXnv&=S@-U>H] }ADZ Mܡ K5^_>Eͧk֠P0 < Z7 WazO5 URw(iFWbtW@%I!֯A r"ܯDXu>bwS-aћPp;j`x AWz*QJ!N6mpӃ$⾀#Ř%V dC[ ip&)2J!?jڞ.]_}z1TU.! ^8No)} <)Pb8LjK77n +\nI}N%XK"MޫK@4agƂyԬ'!E qWZnK{$6FWz5q*s.~B@ 5넶z@y9~/ ۛ PRT 0Ee83/G AVmCToZ. x-5<6L ~!%ƕ{zřvOs4,g9HH}|(N Z(S}PjÿXh1DK?o{09hlH2iey~rBM)\2sh <7dXTzN>2Sfz笼ژsIPZu+1ꤺ 1-^+5>Gj t@Fqez' duj)7%gvHmWu@grpkduY(TDhAPDzx =Le5s3QPQ9NL/G;$R -f (K&ٍlj9P bv&D<Ƨ {R7R ]W ־2/D+ Z`j GJYL /W(%fd@q3ZQr yP`W{ ٙdN6%:;7~Qw)\x#}9P+ƿ}`@\X`Sg7UqC\q@K; 3 =DZ};.C$P>N 8X*{_x9E^0M*\1İJPPڅr~xȽ#{[,aVR^A],}2T?-ζbWN_{Cf!@ٚ []ǝ0iFVq@Sa`s-R~Gw 4RBmYG*At >syZʐ~E.ݓf"3_HM<i"Z݄si+lGǔ2C6+6#bY*5dģKWq.4ʔlѫ9:.Nkqa*U)5z@l/:UoN\|F i@֚"zG#h7I{OTC\WWl-*eAʫЀ}KmsWh6L;\7X(Kƻ8 )iWF.=]dRoqM\D@Dr~bU~S ) {#Tݨw--0v 2Fedt32'FhØh !c<  m!d/gdE򇔉lSCGVꬌ v%nltTEX2N2֥HJI/(*°k3Kȝ^ۡTttmbfc pYyu-֬Xߗga]&/YߧWq2ϧpĬW&xۚx\corC(8`Mة9Up!hƐJ)K`X<|~4p66P O-C.1M>k|a :WՄX.q >`v#JIU8kjs*K`BgJ0N}R,V}LW7J2R fy"V@~#Ès 9d=|H}ǭq21n^B(U i8]L珜H95iY&+6 jOҦ4ZϪ4\Oҋ|QS_ W19bXtw"uM޹H0 y`8d 2ImÜ\D'yғl8FԲ1 VVƥᄂ0L(UFNt6P4qw:\ օk}Ta[Z"ZdK[^4hX7IIBw 7ŴKJpsoZ8ݶp " K -V U!Ne'v*pO Lhu {FB2ґ]^yI )\hrD^$ .X'2Oא9C`Rq\ONMy_W@paddmcgC.͒Ցh8 ҅_S+B  1Mc|VwaSȇWg, l/@,:C VdQGkдbmGܠPMW5ԟXY]ѥksHBL"5MlI)V1NGĈ` Lm"+cU_b[nhKA st$Q%+$L@\@`E1 4ph]X?n c,I%%@Sj9(;E^^W|-ȼH'vԋ8›u<Q,P4vBKDe*V3{@ {m/(L6˟L-VNj`W'"]9E]z!j%CtW\sr i>nMш!WzkM?:F#J^#t)jtٚT8f)q ݺ8@!Cb8v 6:C$VxťR[ʶWS pw%z)jS@9 IuhlS ~ie.F@}SNqqfsi @4H1̫zI&"hM]n'T{ޮKzv$gWH՞-i.j dΏ c2"aM"uV8)=tCT vTh#o3dKNnq郞]6*r= f.1,@Nп?=;_h5Y#я^ gr'oH\' ;\g̤.u!@{pQy. ʊ18G`V36|{\ aPI# *!o|l{kԋC8uVELsbp;i J W 1#Z; {$Jĭ[AMh׽ yk&x9c3 ]DaU޽tLP/Iâ07[um6k)a/Q|@Ic4,7B5bCiMM\䞉%zsa c]+ [G;\/]ચBlӲKye~m I*L--i (`1fI^1A'Kv,mT fd:Kޏz(=V݆O=kRK4`.qjRD@f۫85so>&#Tux]OŹ;XH>F[4&/2O e#E(6ړH nȗYI+xL;Q9.Qv[euĹ*l$R,`O>a q$͙ f2 7#p( [ RV;L<␥RطLR$}͚x |'3obRTL<<'6=Mc> sSfr{Ì_O!lW"J(,h#X1 \o}]ܰ) &p/[!O\Jq˱j@ژȃIn;"t"ђ3g4{_usܢlcPnB/Փtz;h(!?nSҋ抲YYz yHBDQQu~UY9ef-MxTȚPJbnt6!i o{i_.beU \6Sj< ×H5|/ fzd)j$|"5"2-}+6yޞ\)V,FՋxsG0Z{,,370Jq)!0{\%{ebE l8de.<1bGu6AL!*c7 _>`~Mdx{CY:p`hs/ޛeL?x =_0ua[PЕ芆XSz҂@[rԈxk/LiM&' $9S%^vgI Z5u7Jq:pV׃og 8%3g{5$gɠ t 8fkNlJ-AdGARj^j>tMCqpI oDTCxuz"lGMBP,^ZőojI{"aZP>Ϝ4qUV┍8[r@aAJs`xFOS8W_H~ɱږ5y.Kcvd$O6g?,ç`IcvQPVm3>o2J\?v!/֎;tVOQ}tA>G'0+񾞯dcPȬXdnr%骈rgs\~SјÒE2I |Q$W v/Zz5u XcX<:L Km#aw\[n%r^8n0vWH*6l8/̴o W/`}3E m" -S!I8pc]Yg ȟ |LOH8`ea.ٶr*7d):2_1va 6U~Ywњe" LLl4UF0MzHtB9,jzuF0ܶ dDnUQ. z # U#[~amO2#/z6k=~>k_5~`+` I5Rob2&gm_0/#yEƃ8h?G̋يԫJu 뗄)uA3$ 0}< =a}cuXUȷpsD(gl zyu`WaL-34(x8U9 ;@ph${ndN^vh)';Q$=]xAkTkKr'˙+͈A!"bKuXPv ~ iɧ5SR`l;뀅EE+9:ȶ9֎c( a:8=#~T/ 7!5c;e+ղHHt4 gkev}HHA3,`ֹ]EIDd(}(V_ ;#4Ki