openssl-ibmca-2.4.0-150500.6.3.1 >  A e3p9| .<`SHc?%0pB5?5d # D *5 KZD t          , \   0X "( P8 X9 : >/@/F/G/ H0 I0H X0TY0\\0 ]0 ^1ub2@c2d3qe3vf3yl3{u3 v3w4 x5 y58 z5\5l5p5v5Copenssl-ibmca2.4.0150500.6.3.1The IBMCA OpenSSL dynamic engineThis package contains a shared object OpenSSL dynamic engine which interfaces to libica, a library enabling the IBM s390/x CPACF crypto instructions.e3s390zl33SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/Hardware/Otherhttps://github.com/opencryptoki/openssl-ibmcalinuxs390x#Original fix for bsc#942839 was to update on first install #For bsc#966139 update if openssl_def not found cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt /etc/ssl/engines.d/openssl-ibmca.cnf cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf /etc/ssl/engdef.d/openssl-ibmca.cnfif [ $1 -eq 0 ]; then # last uninstall rm -f /etc/ssl/engines.d/openssl-ibmca.cnf rm -f /etc/ssl/engdef.d/openssl-ibmca.cnf fi\ $A큤큤A큤A큤e3e3d%Rd%Re3e3e3d%Re3e3e3b2'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-ibmca-2.4.0-150500.6.3.1.src.rpmopenssl-ibmcaopenssl-ibmca(s390-64)@@@@@@@@@     /bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1e)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libica4opensslrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.0.03.0.4-14.6.0-14.0-15.2-14.14.3d@d7dS@dP@dJcdGdA)@d-bd c< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@otto.hollmann@suse.compmonreal@suse.comotto.hollmann@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commeissner@suse.commpluskal@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comp.drouand@gmail.commeissner@suse.com- Adjust configure and Makefile to require libica-openssl3 when building wiht openssl3 flavor. [bsc#1207472] * Add openssl3-rename-libica-files.patch- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild flavor. This allows to install in parallel a version compiled against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]- Add multibuild flavor to provide library compiled against openssl-3 [bsc#1207472]- Updated the .spec file * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries- Updated the .spec file as follow: * BuildRequires: libica-devel >= 4.0.0 * BuildRequires: libica-tools >= 4.0.0- Added dependency on libica4 (bsc#1209038) * BuildRequires and Requires statements in .spec file for libica4- Applies a patch (bsc#1210359) * openssl-ibmca-engine-noregister.patch - Updated the '#dynamic_path' line, as it was before, with the comment '#'.- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059) * openssl-ibmca 2.4.0 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding - Provider: Adjustments in OpenSSL config generator and example configs - Engine: EC: Cache ICA key in EC_KEY object (performance improvement) - Engine: Enable RSA blinding- Updated .spec file removed '#' from the line containing 'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038) - Added in %files * /usr/lib64/engines-3/ibmca-provider.la * /usr/lib64/engines-3/ibmca-provider.so- Upgraded to version 2.3.1 (jsc#PED-597) * openssl-ibmca 2.3.1 - Adjustments for libica 4.1.0 * openssl-ibmca 2.3.0 - First version including the provider - Fix for engine build without OpenSSL 3.0 sources * openssl-ibmca 2.2.3 - Fix PKEY segfault with OpenSSL 3.0 * openssl-ibmca 2.2.2 - Fix tests with OpenSSL 3.0 - Build against libica 4.0 - Removed a Requires for libica from the specfile. - Removed the obsolete baselibs.conf file- Completely revamped the postinstall scriptlet so that it doesn't need to know or care about how many lines are in either /etc/ssl/openssl.cnf, or the sample file at /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample We're now using the ".include" directive for the openssl.cnf file, and only modifying that file the minimum necessary to implement the change. (bsc#1004463)- Upgraded to version 2.2.1 (jsc#SLE-18333) * openssl-ibmca 2.2.1 Bug fixes * openssl-ibmca 2.2.0 Implement fallbacks based on OpenSSL Disable software fallbacks from libica Allow to specify default library (libica vs. libica-cex) to use Provide "libica" engine ctrl to switch library at load time Update README.md Remove libica link dependency Generate sample configuration files from system configuration Restructure registration global data * openssl-ibmca 2.1.3 Bug fix * openssl-ibmca 2.1.2 Bug fixes - Modified spec file to * Define a global variable enginesdir the same was as IBM does instead of _ENGINE_DIR as we had been doing. * Implemented %make_build macro according to spec-cleaner * Changed the package description to match IBM's. * Removed the redundant "autoreconf --force --install"- Upgrade to version 2.1.1 (jsc#SLE-13709) * Bug fixes- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882) Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424) * openssl-ibmca 2.0.3 Add MSA9 CPACF support for ECDSA sign/verify - Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch - Changed the ExclusiveArch directive to include s390x only. - The code in e_ibmca.c does a dlopen for libica.so.3, instead of linking against the shared library. As a result, if the package containing libica.so.3 isn't installed, problems occur. Added a "Requires: libica3" to the spec file to fix this. (bsc#1142286) - Made a couple of changes to the spec file based on the output from spec-cleaner.- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch An Apache HTTP Server was set up with mod_ssl and the openssl ibmca engine using libica and a CEX6A card. Whenever a worker process is cleaned up a segmentation fault occurs. (bsc#1138517)- Upgraded to version 2.0.2 (Fate#325688) * openssl-ibmca 2.0.2 Fix doing rsa-me, altough rsa-crt would be possible.- Upgraded to version 2.0.1 (Fate#325688) * openssl-ibmca 2.0.1 Dont fail when a libica symbol cannot be resolved. - Made multiple changes to the spec file based on spec-cleaner output.- Upgraded to version 2.0.0 (Fate#325688) * openssl-ibmca 2.0.0 Add ECC support. Add check and distcheck make-targets. Project cleanup, code was broken into multiple files and coding style cleanup. Improvements to compat macros for openssl. Don't disable libica sw fallbacks. Fix dlclose logic. * openssl-ibmca 1.4.1 Fix structure size for aes-256-ecb/cbc/cfb/ofb Update man page Switch to ibmca.so filename to allow standalone use Switch off Libica fallback mode if available Make sure ibmca_init only runs once Provide simple macro for DEBUG_PRINTF possibility Cleanup and slight rework of function set_supported_meths - Did some cleanup to the spec file, based on spec-cleanup. - Removed the following obsolete patches: * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Added the following patches for bsc#1097463 * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch- Upgraded to version 1.4.0 * Re-license to Apache License v2.0 * Fix aes_gcm initialization. * Update man page. * Add macros for OpenSSL 0.9.8 compat. * Remove AC_FUNC_MALLOC from configure.ac * Add compat macro for OpenSSL 1.0.1e-fips. * Setting 'foreign' strictness for automake. * Add AES-GCM support. * Rework EVP_aes macros. * Remove dependency of old local OpenSSL headers. * Fix engine initialization to set function pointers only once. * Remove blank COPYING and NEWS files. * Remove INSTALL and move its content to README.md * Update README.md file to make use of markdown. * Rename README file to README.md to use markdown * Add CONTRIBUTING guidelines. * Adding coding style documentation. * Enable EVP_MD_FLAG_FIPS flag for SHA-*. * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0 * Fix SHA512 EVP digest struct to use EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0 * Fix wrong parenthesis * convert libica loading to dlopen() and friends * Add support to DSO on new API of OpenSSL-1.1.0 - Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch - Added BuildRequires for autoconf, automake, and libtool. - Updated BuildRequires for libica-devel to be >= 3.1.1- Now that the openSSL engines directory is versioned: * Modified the spec file to query the libcrypto package for which directory to install the engine into. * Removed openssl-ibmca-fix-enginepath.patch. Replaced it with a sed command so that it will provide the correct versioned engines directory - Removed openssl-ibmca-configure.patch. It doesn't seem to be needed any longer.- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113) - Added libica-tools to the BuildRequires due to repackaging of libica. - Renamed BuildRequires from libica2-devel to libica-devel for the same reason. - Tweaked a comment to get rid of an rpmlint warning message.- fixed ssl configuration merging (bsc#1004463) - openssl-ibmca-fix-enginepath.patch: fix the engine path- Use macro for configure (fate#319941) - Use url for source - Enable parallel building - Cleanup spec file with spec-cleaner- Upgraded to version 1.3.0 (fate#319941) - Updated openssl-ibmca-configure.patch to apply cleanly - Removed obsolete patches - openssl-ibmca-README.patch - openssl-ibmca-sha256-digest-length.patch - openssl-pkey.patch - openssl-des-ede.patch - Did some spec file cleanup.- Fixed %post script to update library path (the only dynamic part of the ibmca configuration) every time the package is installed. (bsc#966139)- Updated AUTHORS, INSTALL, and README (bsc#942839) - %post and %postun added to properly update openssl.cnf (bsc#942839)- Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138)- Remove dependency on fillup anf insserv; the package provides neither sysconfig file nor sysvinit script - Remove depreciated AUTHORS section - Use %configure macro - Add openssl-ibmca-configure.patch- the openssl engines moved to /%_lib/engines bnc#905480/bin/sh/bin/shs390zl33 1697902273 2.4.0-150500.6.3.12.4.0-150500.6.3.1ibmca.soopenssl-ibmcaChangeLogREADME.mdibmca-engine-opensslconfigopenssl.cnf.sampleopenssl-ibmcaLICENSEibmca.5.gzopenssl-ibmcaopenssl-ibmca.enginedef.cnfopenssl-ibmca.sectiondef.txt/usr/lib64/engines-1.1//usr/share/doc/packages//usr/share/doc/packages/openssl-ibmca//usr/share/licenses//usr/share/licenses/openssl-ibmca//usr/share/man/man5//usr/share//usr/share/openssl-ibmca/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31233/SUSE_SLE-15-SP5_Update/beb46e53caf9e7fad4b3e487a1cfc3f9-openssl-ibmca.SUSE_SLE-15-SP5_Updatecpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fecb3f1f875a3a4d9d41b35599965ea24b74dd64, strippeddirectoryASCII textPerl script text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R RRRRRR RRm>ޑ &utf-87ee86ebd5fc0da7e70bd0af4b51e53cb7efc45a4f18de2cf3c5853c62224e9ec?7zXZ !t/ϫq] crv9w䱘YZbQ"Vdym υuUɌyeeex@M+8K*{ zܮ>#4E NۃM2+҇)y3AB#_._`Z;X)TSRNAȦŊ4"HDzJXażυi'ɗ ;RX4ߟ],1{al$K(-Hj3l @z7 pQ̹i*znUpN4RX&l₝v$aAlnB{-Ƴg>d1Q>b:kJ)m:!_ o G^.1|yj6W/[ʮ#qj0-Y,BO `TdK :ljvPf]-Yͷԍ(T"h¼;FHhWř"L4]muj2,Ʉ۶,ȄMcM,H@Lyd2ZAQ֯mzgyt8d5KG_Mn45z3m^Zƈ=ތfI^n\4,}NH6>X(4>GX$㬫-N]݀g)V)%tְEfJ{8|,ql|:4)o-%Ih]˭M\"IV/G_G"4vP#7˫?u*7Sס)v")ǁlnBYBfi°xAPRCMLm[Pv((k`keHm$|56`0͐[rﱻ6ީ@ AQfm "tt7[BBKSZ"dP-TK&ʆuc*l3K1ӌ3y2툯OZA qxf=?0da6 &ku=B|~vŭ'uU^6Nυ_iE&RWOun$,WFI41II)sV>$7+Mj &r虚5N y3脹/61,e?&]-MS~홶 `_v56֞90aIl46;mk:Bz>@$X7y~h:+Yy* 8ef!Vd1E%ah۳]]4_0`! ռ߹ ̑R&tp}hbT/W913Md fwDRd_)Z])=m%¯}=aUbChQ7dVQeb C/oh Ҿ%x] 9\ZFt;qg)@HE< n;nzDFaVtl8pR{^MAqbM-:n{X|I1i $7 !RTb2X{v:\̙71%ȗMr8ERnՋ.Xi3J2Myc۞<")+=8W{$8fsG~ Ǖ89Z{avFkxaJxzvoRCprK(Kއ$J#sq6;zu% ض0Ӻma-p4XJ7&Y/|\ 8g@dZ_*)[ yKw0!hL(eÈs;_PO?=4{z3l{<`"P!P! &ŢwLB^q;~2UÉ*o("Y$0 Uֱ&Np ˰]ђ^]m^}h!Tz1I\@IOjiZ 13LZ:Q_, AǣQC%rfC=zG.1z8͕ 1u^V:-rA{lWE;$>ts![VxNgG=XE&p` \3uŸU>岯d*Ѷ!q.PnCUߔWȎjgQiLahrWiuV4J 0ۺzz&o*8([-g < U:BMW$RFYcwi;`FyFYD! v]Zt/|gD三e\a]AAB;imپss\Aa -=-XC!TH$1su"+ 45%9!M s83s(6nW1U=u%Oc#E(zevx_N" #gXr9HW1(_"G$k#XӔH8ǯd3KVJH(_z)А5QlHPTK@>4lPzJE0ƫ~.n6>OfKKFjz2c_JE[@Nt*ۨJ'p/]W&m~&pYߏ`ڱ~ ȊY ]^u. 2:됨|1idE^%~7!L(43|)=*aGLءVf<OFPPM*n& =;5 A wȷ%}n;M{FꙜ\>7$! 0-NrBt!6k1"ĭOw]/s.]Iw*yI.3[Qmݮm3 ԚTY da$Y"n,%_{h#_67L|+8'8tc1P#VG5~A_5@9 /o:aJaapsUP&9%@xULTYnpW_csD4Sϧz@2s`LzfF8՟l,2 bAbPa'@R}#qn|@~Q6c13DIHeǮ 9JrODp KB+Ko dɒnm{AkD!\%y(cy6yHNAq~~6;Wkh$`)pJ9P?tNJR1ypYE+YȷdrAAဦܖ6Ck[4 dZb='D9צHOJLHcsQE~қL |޷*L`%nt ^ʋ͓7"PԴ ؍ Ijma.sw<qX*5SS*1[hNx`rvRX~{N}HʵǮ̼0[-tJV|1~rȣYEXWPH^sm /OgVUq A(!%QN'z|Rʫ?g(,+._Co|&'ɐKZ(Y7 ҞKf?KuKҁ>+ǙDn ׿1~<ۂ^ 0Yʪ.\ =^O,+GUbebf#9 ZB +>O@/h #:bYx=R=ɗ"]O%>OU;/qǻEvv {<@h^th1JO֐$wًh' /5#YͷB.FKrtC QMXo" 8&ҜDq>j}-!Ю茇t0HRA8߈ub0J!5GEsp{yKyC"jz>PQƠuwnDrD4chX~󛥚?cAb!h=?wn݌:-w~&.LUՂvu75;*>Y8N/iUcBeoί= }ɬ}5*ǝ /Iًm<6( ʣ&7y(֟(QeaN !E'uzIw]<8!i $8-[feR$mtR$k[12^6S97ίv,S!,&|n ,B0 fVPc-(Â?_1)/Zi&K7å3aqc]ftYQ7%yJdD!L7zZmZ ;3A%i:iחs%cLX63p / ũ2_+\,qpVL<3a=l.' r46tm'ە^&.8[0BkbD>A0x W`_T^A [j録Z:k8&2s/9R \+9.UytJbeGJSNtqx#oû։ūOikHD 9۾_Lw(rxO#Q&}-(~9@&MK)wJZWՁ4ySJ b- X_wI> WHJ}.~* uVP +K cQx1jYvJxymKaBӵ?,up~=~ρՑ#kZVWr^@?n~ETN뜿r\ `2(2,&1Ҁ.]ҥ9Kk埳<g7D@ңdNhw_Ҙ|f`].C̈:2'Q <%j 8?lM .WJ6K*.D1=ofRţFY+5'~z튌pWtxlKō尩KdzSJXx^;S`JhTemRf utg*|T,b,3bO[#7EWUAZ) f 9g!MeX* C'Nh?qoWRM<4[}Rw V%}u z~ŋ`rе z*eb3+Ff Ԝ o  hwlnLOWFJjH$^#RBd00b% -SUW[AX;ni-<]lPRG 3T%R|q+^#w _C] &X2,- k,HEumb>EphSh<_QË6[Esc:QEcZUs!$f2H=8c+#Kΰ|WC&gۍ"ͥ'3D/kJ.%R15÷UlwK_j[=oSn x BMi{\E0șHݛ㾝D4<%]W@wLVUu7X\=gU.SJlf 4 DbJ |ubOpI @+cnWE*+ضxLDKeiFX.20c!,ӳ7uXK> ; ^qi"Y: 52*^`!i!1rT)}vR;{fK .#ffk1wsjw4c6&h[?ټS]"~@fkcet4ŲiM?-9Ohܩ t$WI:&ҬQSZOP "E:0#؂U|tm%ηDT/O0R]N_, %<#9qJJԛ{D<#ְ;"&}^i4M7O]p!~/%O.u[A6yghM/:}: fKaHjS:C`5fQ֯Eqb԰*eJYBcU!O,S 4N9si,_@A85btt _ 3^)B F`+;UT~х+h! T 6^;gH'+/D@}Eǹ 0Kb; nk` ,AŸ*doMz/T)(uȦ˪0?@(4h[slݩID T1E f];,KN}򴺩ަPr>\͗&ew£(xi ݪGEL#F!h_{acaޢνZKYU9pD܇e?do3#~`O"ۡeZ\X&Ix>Z*py2K.L9&}7EDncGTZ'3=kA!n(pmSv(؜ L~!Of?w_x{=Y"Ήx!|4ZQZKM}vzo6D*K>fgZs7C^3@=GELo8`xKV0]'&+aM8 G\kշfAթNuOCƕ-_6j2w֠A' &^NAm>ˎr}7R DXW׼ֱ ,>qL,A p چn9dOĕ̊]0ŗ%" [NA!VЙ&1e0ԑ֩lA<եi/g &όCj ̭NBMLHLZ@SLJju\ 5./I5k PҼ5O7AvA%'SKf@ow)z@䋊9"M\OY]NF)f njxJ R/CXֻ.!Ba-!xN7{eh NHY} y5W\KSoWZ3x6Iq:j5{{p rk#J|nzl馓FPO׶`V@5hjAnUk`!쮆-P<9Wv6qDO(}$-YAZMPjr$p䳋͓/Si26OĀƬxHQzKNK)tMrEg|OQ^a8UɭB8ۮx;Rc/ZEaoqŭ` qWjl7|.0qw03FJȱ,dqPI F1Fۯ!2]~-Ke 61 q*Y#vj@{AN9B{HI}tZŴN.rߦ<<@$lp$U~&_ker^Rbݑm45vHF yHX̅0ow~ 6C=d")x4OmrVi4ZJ"Ff p] v uaxs}Sbp6dQ™ˣa7Z͖R!* {$yAT~@_"H+%ٙ=)/:|*vptP1fyy ǂڊȇ5=N B ?<]4wagkaS735\!sچ4請tn]!,85 m܅zo/Dw*w"By%y马TpEW"i9 1+XÛ/;jcY\o9'e sr:OP칌,sfZ:z]|F!¤ve4 '7yiLW '6wgw#&HzT"xt \=ٱE1 =8r0qUihs#Rq $;F߈`u)=/d/4k%8?E96xZ(PSֲK"P׃[ndkS@psjьnQJPjd2|y7[]j/\D\-(;(ӥv~2@v)en {1Cr3y2Pt=Rf?:_j,&8|^^ -TGڕnE8g2.˱\h`WVAjrIyfP%mW(EcÛTM4 !-7\U#D]=\ Ct:Bt1M5.EWg58YGxdڊ4/Y#^\@,SXRYHsGdR!truš>W{ @ƎhA7[8pr̼ WW["l."=vv>ךz.'qYթLe^pC  > *h{fȎ̜PӸs4ȡtĦ]X^]Amȥu ag5Aٵ<9@n{,iR 88? c)KI:0b$Uc`wY#֥%5um(x`Ӌ'M ɯPnrgka I'pՏ4#%:r76eມ.4WA~)&YZƢo~Aw%/u| +3_ZEq꜑eoܗHA&7.K6vUD pQlVim!661;ܘT)2'7{٭z0̤_YC<8&cԝ ᫇3-TiMu-&uNAd˄MOmwot4Tjpe?EVF.VS̼t:87I+ ܣ>j߇:s|^Hqo-"3!>Ws魤6#77tIb4HMvEб"u,>Cv[Z."xbnՓ`=\:'M9jg&xÔʧ]Lewg*auu7zHgvNGaEwz]| ]kC/xdqR]?|AE)&O2Cq1:­v6 !=n4wg$uȑQ6ŵ=C*9d 2TKU\BQ8𲫰by#t[SSga{lUZ "m;'tcFjPpa)TIk{+.i=>x`5X5tsNHj?zG\QYAac4E.[ pKVMpQbF3̹%RhC90Vcʷ2bČة=L5AbMR[ VwoQ(Y%IiDnu HCmǠ?0b8Koy=޾uyg.ҹ7^RIwWĸXϋ3* /^(x6,dƝZiV2ſ'lՖۣrX02}\h0yp/vqᨦߡr _5׽)= &4P;7OwZث7AҝiOFQ/*HY;x .ؙ ˳L؀;3#R(NXbJTzS4%ŖaYe_&4:r?s +XnC`̗R6P@{ `D&EbsNϿKFV_RKA9}=]G#*k`j 9H !*r{n@E oԲDTp&{g{Np0;*xtہjxibf7 x-u#e^Q:$P=Xɖ$_*'Jf`u]ģ.sև/`1GH[ӣ! ]0ڊn*o\u}Uʒ*J2{N Kޕ^=J8)t_Xd!bi\H~'3qa౑`ȾK4tq7{cx F*ChЃiDV飴;s@Lj?C$4|X'ET)ל-E򜥛#%Hqnx zaH?@ W4  ~.ӰZJ)Շ%Hdu;[Do _8a2ᏡKH)M]D&~Ⓧ֤+r~QdUUwKykFe_S=4)E|E(zƯ]Y#UP+a+MtEC>pg9gקѿZY׵` Sgy2 uj{h^iK*AHޮ:z)JWG,PdQlmt:aF4ڈ|CFcLr?RC9,}jȭn Cx5Eǒl21,v=Z?[]x"?memG"%iK|Ű4DX,ʥUϛ?¸{Co(\7!؈R^tUg^Kj>|(K/S6T%T RSfr()BIStf(AF|՗QT;#wu!d/AFQknzL=8#ޥ ޡ"S }QFHm@!Urg妥v^?>b 7 gn] ]YjjVU_kU ژst0<4avWgXg{jyٖ7V˹"%YAQsG* vB@RaxF0UIHw\J>sf@OMAIq pc#OɲD2Ծt$asA= ݔc6(i!?^ Cy%{7OC ODVhPјh0{*ٺ㸾Ŕ0vG&O5E>\FLVނny/d8. P_q24IdQ^omp=8lW9*#MI5i8ϑd:z{_ÚGx1qW=";&|iQ;2 {螢|,i6hvy9j*Q.Ver:d=v8F/e3'7%\TVӥi8HDYme"0Sε X\s澔8xq9gH|)u\?WӷZ0>;;6g~n =ܳrE kqL"1-\ٖ+ޕQZG 6Q7V׷c*yfD!;aܰ؇{E2+Tg"'%̧t_^K[O5> HF'}QPȣ'MVD4ymI>ju{q/"ͯ!GPcM SN>ɗHtA1O۵`VcVčBaE-u{ME3b&`Xp+K$+iPd2L(ʍgK *rF4` J8\؍AJȅˉ0#z={K`-ǣv4Bz'6#v[,]M* z$3Ua.`׋di{/FeGbWŭiVG:@NPW{-mMF¼ ?vn)kF*+Y/^{&ФuF*)j<6j v_O :| |\H3Hh<[h [G#ҫYǓ~b9FyvG73~\dIʹTj6W;1}.'L> cu] .P y%CK͹&cQ_Ot.Sȃ{٢S|?1A"\Ǭ3Sܗ^d=kDcaQQ]ρ.-:`DZ >Yi4ܣ {. |5}+UeHQ,}0[K%?eQfUtg^8tQUB!CBF /M'B6qk0u #G{6}t份3$̰a ,or~’XwGU/GWN0IBHGm{nQF SJsI |Z_4YDXB&MdnsdtZNLw[UςXHy>QabF~n*b#zbF|m6%mЂexz9 | :D:vuB_&lTI n3xG۴ Q~z*O9eZ~ 5hߠlbsM+B G7/D0ⱸ_)poǿd*\,*%?e-~ &Ic9`"ǽfYA:~[(" |ǶW)dbV6q[ގ&Q9p)ar "J [$l?WY]`.yܪgh, ˌMO( I' y?ϕӳb=5OD:\ l`[4D7 b_b'kLh`:bqw#7I#cDuT G#gWQü?e-۪޽UmQU0]x HV;žOV+kh*McbC844Gk,Mxi\4xĻ"`ZY|y)S H[r:O?u<-nU쌧_ ڇ\qN{ZS.lnߟXзIg1Խ ׿?;7r%Va,? CQ|PYi8*3mLAbW%h：p>IFAml/ߪG<[TNگWAR՛p+ ڌқYChړ;Wn:S}ε]}ݒ BL䪊79Z`uҢ2syWpUɾ0Eq 1_^ r0 O5Mȉj#R|$h77bFVW] E\ވ/ [M}medJ\S>C3idWY{DtD6 ԛ8͐7nS's<:qhpC2jv[H@yH#+`XN"qp2XY$KٛG.}iIZ{7VUwJْzF=rkGXj[r#,Ckp9GU5urkʞY? 4R|~S`l˜D^MJ)QpaCh8ykdlr5%0 ƀ3p@ m'M(c̝Ra J6iBLW8cU 7Er"ɯVDjXI[{9#Rj \]NHw  },b̚+ۆ{HxߗṮ()&^BEPř1r[h ߏ ?* ebn %9 =(I#at&@F܉QSV{G=U* Y9Ӎvۛ۴f1$CLvr)ibQvyaqAa^J:#`"N45MRJ6z^Timttlu(+1"v? }fUs\ a676@܁:l쌧k{l}GkF9-/6+~)ql:B8)ypsIևHc`ڀ(^5h:ʋb,(I?÷ ^K<0!Ű&/|u$'6w޻[2 SJmTpPQE\X>wewVv D [8to|{EEgP b~Dco90C3bP^drsɊQIΣ#8w[/J_Kco7 3r)\ሩ@9']\Mur Z)m6!=*MN/~ Agxeau*»9;&j}"oXqZL~+-a]%P!D vc^no{Wz.XS uWk],܂aYi08lka-=l2錚eݚ9FL3 K <]ىaޡZ~bMiM4vx[%fbհ> ~k&J@jR.,ϴatO6kEd,THN^ D>VNŒ@ B\+_K?b8&4D_G&BIm6j뱫9?w]%O0533O/*pIƈ)=j4~-V21!qx1}^66>ZSuKui47l;˕̝Uy)·r~3T|XwoLU5,&lcbd%:9}WkD}BtZÌyuzmXRXK5|joѠvU0s9`;ysZ$Zc)؊٢G˳D>›Ǯ)aj-EiZ i+MNI&0!z_ow[lYĦ5j %X jzr2qt˺~ʲz-0WmJmת*m0fsoQJ鲶ӋetPFr}ThiH1%~N2p`/XKnF7R{ƢFϡo{=ϭ G_ՏH:璈 z̶Pl0C̔ '5y[$hP"oޥV$R&bKpp"Qub*'4yAlEN+R‚2֌Uau^4„h*+yƭ_-wTz_lL$ȯqFqPAW*9 Y+Kc >]vI|yҡ!6.=-ϊs%L 7by5wJzK0ǯ :(8N8˲KiA_K ǍkPUӆ7 z efTBεd Twͫwa= MTj, FL~kO+Ź/_DC穕k},M\foT.]}՚&p@eͽQu> WҺړ }dk@QfaFBCY俷†-?I6)r+-7M&_.|sT F NHGH}QF6 {՞p0*iг@@l|x pYt;%ojt7sO oq1OgwkyKA 3kA7q"z٪n?iD4 %C+?]PS]/.ǭPwQ驙q=7l#~WF7K߽)yr@s+6u{l>*c0Y9^.&a^d4᥋?6rb/OtTEzu6RaT B.̚ U7QP$+.,41<}3Mx5`jQӑ$kV>o1cG 60VWBEMYD%FdsUN/1+mԢX|Sd 81Q~I _ WNAz:bz]pg1Ɏ,q`Sٰ֭i ·cl?SAzG²ԫ$;\NQTxJ 4!;ɸ$j)c@$##$\I%9B>tB"F u+QT5)fvQ'֐yxdUY3C=Gh,ֵ}gV4~{ E_l %jwH! v:y< -.$ T{H"Md|+UWِYpN^/^*4TC$_}[ GH|d<-ԩT1&o~2/JIT| }qO8n w!TW)ŷkl"$qK|O7מs޿;0?Y6CHMR4P 5] ._a' ev3Gt0gu rz$W{) ZM;j͘яeLf#KHݒ8j[QN L5jQ]C1*/4s &GͺOZ6=fC|-gH4l2Y 7󵛋l!XL4-K;,DgN<|;x|If58mtۘR >E ϟ$pZJDYQFr?Oo?Xo ak'o쿄j/Rwh\Vze]4qNMT7ײC3n]Dƭ#9\ }ҕHmTv8C(0~z b!x5PR "|aNmmm< u#l0AI 0D]~"x\V2"wnESp+߮xMR 6\CW*'TvYE?3wqOE@:zVs!Ѕ{ AF[1a UNӒ5f 9;)p`{bl̞Llq#)+#$V!}BiK.ʄPHe7O/Ħnt\1Yz߰; 9JMPz|ȗog7ӳ0*/r˹I8{6ϋo92]ϭVI^.J]HMvS1DYԿ=7Ni F¼M>-tq̹xw$w\V7hE3;4WL 4R6βE_C/N)^fb̳:4%sOOofx|'6XvYO-US @ZY(gz>8q%Nl (x($t)R,4r֤*G}$ ϵmX@S)W] uJM`ViZ-͘II" N0W9G&Z  {65qDa5K/‘e{&_<G}ҧtZ [H6 [qQ]pߦE%,c9@wlp+9CRwvBNVlvzCu^.iHպkv& 0B3ik4q7%gFdpp,O̔KYP%#R$!?Ŏ NxڝډqCL=?$"A<GA)=;"Ŵo6S#FIWh#.E7QIU q~\aCئD%J ]d8r![ b CbY|ͅ!_G 2~4o AN#c3 ;ޑpx&[BoP\ ZUʧ&rR:M_vt1}x`ʓԬH]jym@j{8ZC]Wf ;P%C僪W"ڡq xgJkV ')"W TJ!瑥-IlnL4Eps|b\ ?xҦS8,N9AX>aj'3(e0E)UΝ0׹̍y@hlC%yz0J^nDp;e|$N2>H.-֤]5RqlƙVlFxEK5tOp~l9RaĒ Q9S< R_6]Uv=?Txz:JxnAΔGzx`g~)dVyXcXշnbHg[xm=ȭz >$59ˈala_^f 7,D&*7AM V0=7V[ S:D\^}0$' \SjɎ{]L%S4lc4v)=ټ"&gﰕFrPu1v|V]LG=--͸, 4 F#=, )v֟Di Yi3\oËeB.>-҃)iZo=zIȻsܕM B3)^ ie*p5i(" k{5wx dbr6;2p0WB16 !Tڡ5*z }PZPX*p6sRrg;t=NL]e85LKY'Q( E ovjYbpSR&5eM7Ow}_|$=x^h*MU2#4lNܻK%#١]_>i}ePs!H:ZMBH ds?X=mZ1Pˏ&;,e$C[yEa^+S|Kx)s&-PPt gi0 -N+/BWBv zC/cT\0^ۅf`ZfбL1BW[?#P;אe7{X77AFRJJe(Įd@TX,\HぞA4ّBƽI%tFUvqVt)o&:CS6CM"ߣm!ZU)/o*_ˎԴ7K낻H /kbˑuѵsp^JJF} Sڀ4PL!: s#1cPUD=,eBjԱJ}A&QY$/FlWJ[$Ƴ%Lc+C2V#}?je <5`q J ʸw\u#a`]H?0DC 0[=Cq\6dV v|Ւt ֽ93%R )DM!V)rچ2csd}Z\g_p24/wu(;!tN-S5i(_*_mE`^c{{THـTpζ YZ