openssl-ibmca-2.4.1-150600.6.9.2 < > , $ gg!p9|9GT$#yV 2JA
-=?tq"1a
: kƧ_樾Zq܃ZW
@JN`<35٘%6X olQ4ܗ"" QrAqkǨXLƷP$s*I:JEju# qJᓏC,2_/(XLkМAƼHpQBH⟈t,A+t6$-ąDbcG&r$id87 ޝWKu-z > B Gd ? GT d # D * 5 K Z d
'
8 t
4
p
] (
8
' 9 8 ' : o ' > ? @ ? F @ G @ H @P I @ X @ Y @ \ @ ] A ^ B b B c C d D e D$ f D' l D) u D< v Dx w F$ x F` y F z F G G G GP C openssl-ibmca 2.4.1 150600.6.9.2 The IBMCA OpenSSL dynamic engine This package contains a shared object OpenSSL dynamic engine which interfaces
to libica, a library enabling the IBM s390/x CPACF crypto instructions. gg!s390zl35 oSUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ Hardware/Other https://github.com/opencryptoki/openssl-ibmca linux s390x #Original fix for bsc#942839 was to update on first install
#For bsc#966139 update if openssl_def not found
mkdir -p /etc/ssl/engines3.d
mkdir -p /etc/ssl/engdef3.d
cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt /etc/ssl/engines3.d/openssl-ibmca.cnf
cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf /etc/ssl/engdef3.d/openssl-ibmca.cnf
if [ -f "/usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig" ]; then
cp -p /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig.orig
sed -e 's/ossl-modules/engines-3/' /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig.orig > /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig
rm /usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig.orig
fi if [ $1 -eq 0 ]; then # last uninstall
rm -f /etc/ssl/engines3.d/openssl-ibmca.cnf
rm -f /etc/ssl/engdef3.d/openssl-ibmca.cnf
fi \
) $ A큤큤A큤A큤 gg!gg!gg!e ;e ;gg e ;gg!gg!e ;gg!gg!gg!gg!b2'g6cdb42e98271e985601ab049ba7b9f68bc545559ed06fe56813477d477ab043b 5cf6c70d3637e80812ef951015cae7bdfb70a88836d8ecfd883d8a673f66399d 54f51a5f6d9b3064fa033c3bf36e3faa7d574eba20351b4e75a3f85072d89e69 b15ca0996b5cce68d6d3623ef6f1afb97d619a8c4d33aae01f6b773c99cef4aa f2c60a3bb506fbcb6a4c170cecb14350e69437b913ae49c24872a7c53af80291 731be61bc4173a05256343b4fc84079623c9c3dbfe3be444e3c92aaddc2f39e5 827900c632630b44065023a1033d4f8c450cb813fc8220e5ea601287a3eeb451 f943b5c7aee57ec8d33f5baabf638230e0d5c3c4404eb21ecfc2ba93567257a9 fd96e52b3aaa6e82f1e763105040490775e0bb7226f0a3c86469a23a68da0ca5 985506f2b0ae896e2bd3287acd7be6688baaaed82083162d3f430a9f020b574d d21758b0834f572123eb4ea706e9e444586146d134789e7a8973a0677c900bb3 dbd9c040f032510a5a2af3f4f0088794f79b19f28be2e0d557d081f763b78512 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openssl-ibmca-2.4.1-150600.6.9.2.src.rpm openssl-ibmca openssl-ibmca(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh ld64.so.1()(64bit) ld64.so.1(GLIBC_2.3)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.30)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.4)(64bit) libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) libica-cex.so.4()(64bit) libica-cex.so.4(LIBICA_3.0.0)(64bit) libica-cex.so.4(LIBICA_3.0.0_FIPS)(64bit) libica-cex.so.4(LIBICA_3.3.0)(64bit) libica-cex.so.4(LIBICA_4.0.2)(64bit) libica4 libopenssl3 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 4.0.0 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gg @f@f f f-f@e,e)1@e dkY@dP@dGdFo@d?d.@dac< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com meissner@suse.com mpluskal@suse.com mpost@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com p.drouand@gmail.com meissner@suse.com - Applied additonal patch(bsc#1237344)
* openssl-ibmca-05-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch - Applied patches (jsc#PED-10292)
* openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch
* openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch
* openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch
* openssl-ibmca-04-engine-Fix-compile-error.patch - Amended the .spec file (bsc#1227537)
* 'rpm.install.excludedocs = yes' in zypp.conf excludes the /usr/share/doc/..
* Added a check, if there is is /usr/share/doc file to be editted.
* Replaced hard-coded '/usr/share' with %{_datadir} - Amended the .spec file
- Changed the package names
+-------------+---------------------------------+--------------------------+
| Flavor | Package name | Note |
+-------------+---------------------------------+--------------------------+
| '' | openssl-ibmca | Both engine and provider |
| openssl1_1 | openssl1_1-ibmca | openssl1 flavor |
| engine | openssl-ibmca-engine | Only engine |
| provider | openssl-ibmca-provider | Only provider |
+-------------+---------------------------------+--------------------------+ - Applied a patch for openssl1_1 (bsc#1221627)
* openssl1-rename-libica-files.patch - Re-implemented flavors (openssl3, engine, provider) (bsc#1221627)
+------------+---------------------------------+--------------------------+
| Flavor | Package name | Note |
+------------+---------------------------------+--------------------------+
| '' | openssl-ibmca | openssl1 flavor |
| engine | openssl3-ibmca-engine | Only engine |
| provider | openssl3-ibmca-provider | Only provider |
| openssl3 | openssl3-ibmca | Both engine and provider |
+------------+---------------------------------+--------------------------+
- Changing/editing 'dynamic_path' after the installation on the target system
* From /usr/lib64/ossl-modules to /usr/lib64/engines-3 in
/usr/share/doc/packages/openssl3-ibmca/ibmca-engine-opensslconfig
for openssl3 flavor - Amended the .spec file (bsc#1221627)
* Removed the flavors
* Removed 'muiltibuild' environment
* Removed the 'provider' logic - Updated the .spec file (bsc#1218933, bsc#1221627)
* Amended the .spec file to use modulesdir variable
- Implemented _multibuild environment (openssl1, engine, provider)
- Added a flag and logic for provider in the .spec file
* When provider is set to 1, it 'configures' the provider
* When provider is set to 0, it 'configures' the engine - Removed an obsolete patch (implemented in the version 2.4.1)
* openssl-ibmca-engine-noregister.patch - Upgrade to version 2.4.1 (jsc#PED-5422)
* Provider: Change the default log directory to /tmp
* Bug fixes - Updated the .spec file, amended to use libica4 instead of libica
* Requires: libica4 >= 4 - Updated the .spec file
* uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries - Updated the .spec file as follow:
* BuildRequires: libica-devel >= 4.0.0
* BuildRequires: libica-tools >= 4.0.0 - Added dependency on libica4 (bsc#1209038)
* BuildRequires and Requires statements in .spec file for libica4 - Applies a patch (bsc#1210359)
* openssl-ibmca-engine-noregister.patch
- Updated the '#dynamic_path' line, as it was before, with the comment '#'. - Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
* openssl-ibmca 2.4.0
- Provider: Adjustments for OpenSSL versions 3.1 and 3.2
- Provider: Support RSA blinding
- Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
- Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
- Provider: Adjustments in OpenSSL config generator and example configs
- Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
- Engine: Enable RSA blinding - Updated .spec file removed '#' from the line containing
'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
- Added in %files
* /usr/lib64/engines-3/ibmca-provider.la
* /usr/lib64/engines-3/ibmca-provider.so - Upgraded to version 2.3.1 (jsc#PED-597)
* openssl-ibmca 2.3.1
- Adjustments for libica 4.1.0
* openssl-ibmca 2.3.0
- First version including the provider
- Fix for engine build without OpenSSL 3.0 sources
* openssl-ibmca 2.2.3
- Fix PKEY segfault with OpenSSL 3.0
* openssl-ibmca 2.2.2
- Fix tests with OpenSSL 3.0
- Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file - Completely revamped the postinstall scriptlet so that it doesn't
need to know or care about how many lines are in either
/etc/ssl/openssl.cnf, or the sample file at
/usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
We're now using the ".include" directive for the openssl.cnf
file, and only modifying that file the minimum necessary to
implement the change. (bsc#1004463) - Upgraded to version 2.2.1 (jsc#SLE-18333)
* openssl-ibmca 2.2.1
Bug fixes
* openssl-ibmca 2.2.0
Implement fallbacks based on OpenSSL
Disable software fallbacks from libica
Allow to specify default library (libica vs. libica-cex) to use
Provide "libica" engine ctrl to switch library at load time
Update README.md
Remove libica link dependency
Generate sample configuration files from system configuration
Restructure registration global data
* openssl-ibmca 2.1.3
Bug fix
* openssl-ibmca 2.1.2
Bug fixes
- Modified spec file to
* Define a global variable enginesdir the same was as IBM does
instead of _ENGINE_DIR as we had been doing.
* Implemented %make_build macro according to spec-cleaner
* Changed the package description to match IBM's.
* Removed the redundant "autoreconf --force --install" - Upgrade to version 2.1.1 (jsc#SLE-13709)
* Bug fixes - Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448 - Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
* openssl-ibmca 2.0.3
Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
linking against the shared library. As a result, if the package
containing libica.so.3 isn't installed, problems occur. Added
a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
from spec-cleaner. - Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
An Apache HTTP Server was set up with mod_ssl and the openssl
ibmca engine using libica and a CEX6A card. Whenever a worker
process is cleaned up a segmentation fault occurs.
(bsc#1138517) - Upgraded to version 2.0.2 (Fate#325688)
* openssl-ibmca 2.0.2
Fix doing rsa-me, altough rsa-crt would be possible. - Upgraded to version 2.0.1 (Fate#325688)
* openssl-ibmca 2.0.1
Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output. - Upgraded to version 2.0.0 (Fate#325688)
* openssl-ibmca 2.0.0
Add ECC support.
Add check and distcheck make-targets.
Project cleanup, code was broken into multiple files and coding style cleanup.
Improvements to compat macros for openssl.
Don't disable libica sw fallbacks.
Fix dlclose logic.
* openssl-ibmca 1.4.1
Fix structure size for aes-256-ecb/cbc/cfb/ofb
Update man page
Switch to ibmca.so filename to allow standalone use
Switch off Libica fallback mode if available
Make sure ibmca_init only runs once
Provide simple macro for DEBUG_PRINTF possibility
Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
* openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
* openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
* openssl-ibmca-sles15-Update-lib-name-in-documentation.patch - Added the following patches for bsc#1097463
* openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
* openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
* openssl-ibmca-sles15-Update-lib-name-in-documentation.patch - Upgraded to version 1.4.0
* Re-license to Apache License v2.0
* Fix aes_gcm initialization.
* Update man page.
* Add macros for OpenSSL 0.9.8 compat.
* Remove AC_FUNC_MALLOC from configure.ac
* Add compat macro for OpenSSL 1.0.1e-fips.
* Setting 'foreign' strictness for automake.
* Add AES-GCM support.
* Rework EVP_aes macros.
* Remove dependency of old local OpenSSL headers.
* Fix engine initialization to set function pointers only once.
* Remove blank COPYING and NEWS files.
* Remove INSTALL and move its content to README.md
* Update README.md file to make use of markdown.
* Rename README file to README.md to use markdown
* Add CONTRIBUTING guidelines.
* Adding coding style documentation.
* Enable EVP_MD_FLAG_FIPS flag for SHA-*.
* Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0
* Fix SHA512 EVP digest struct to use
EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
* Fix wrong parenthesis
* convert libica loading to dlopen() and friends
* Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be >= 3.1.1 - Now that the openSSL engines directory is versioned:
* Modified the spec file to query the libcrypto package
for which directory to install the engine into.
* Removed openssl-ibmca-fix-enginepath.patch. Replaced it
with a sed command so that it will provide the correct
versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
be needed any longer. - Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
same reason.
- Tweaked a comment to get rid of an rpmlint warning message. - fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path - Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner - Upgraded to version 1.3.0 (fate#319941)
- Updated openssl-ibmca-configure.patch to apply cleanly
- Removed obsolete patches
- openssl-ibmca-README.patch
- openssl-ibmca-sha256-digest-length.patch
- openssl-pkey.patch
- openssl-des-ede.patch
- Did some spec file cleanup. - Fixed %post script to update library path (the only dynamic part
of the ibmca configuration) every time the package is installed.
(bsc#966139) - Updated AUTHORS, INSTALL, and README (bsc#942839)
- %post and %postun added to properly update openssl.cnf (bsc#942839) - Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138) - Remove dependency on fillup anf insserv; the package provides
neither sysconfig file nor sysvinit script
- Remove depreciated AUTHORS section
- Use %configure macro
- Add openssl-ibmca-configure.patch - the openssl engines moved to /%_lib/engines bnc#905480 /bin/sh /bin/sh s390zl35 1740138273
2.4.1-150600.6.9.2 2.4.1-150600.6.9.2 ibmca.so ibmca-provider.so openssl-ibmca ChangeLog README.md ibmca-engine-opensslconfig ibmca-provider-opensslconfig openssl.cnf.sample openssl-ibmca LICENSE ibmca-provider.5.gz ibmca.5.gz openssl-ibmca openssl-ibmca.enginedef.cnf openssl-ibmca.sectiondef.txt /usr/lib64/engines-3/ /usr/lib64/ossl-modules/ /usr/share/doc/packages/ /usr/share/doc/packages/openssl-ibmca/ /usr/share/licenses/ /usr/share/licenses/openssl-ibmca/ /usr/share/man/man5/ /usr/share/ /usr/share/openssl-ibmca/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37567/SUSE_SLE-15-SP6_Update/a6861d1304a2419b427542ef33314a5b-openssl-ibmca.SUSE_SLE-15-SP6_Update drpm xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7a0e7fd83f0fcce6354e5bb9907e72d96fc00cb, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c1b19883037f1159393691a1142a65b158bf9a2, stripped directory ASCII text Perl script text executable troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R
R R R R R R R R R R
R R R R R R R
R R R ^LUۘTQ0 utf-8 6c4eb2c54c628d7bf085ddf880356065ef3383c85da1cf5f218f461cd0c2c13b ? 7zXZ
! t/C45] "k% .pBE9KLMOQʾ(H6H=6$nVǎ#$$;z9u(+䧨FG~.fsYO Գp~xLk7)xjݓ^/I۲ 8 ? +AN1rё/m3A1$=ׁ2ci'Ҳ¼fU]?WB,_ncx _sf$ÐJr[wκmU6#7Ods ܉mB
{fC_^{<[۔ Pp1wi~= &̕1; dTvVo- 4&O#fWI'ܚ9YɁv8ɐ78ٰ++4E70m)8k$ X ̖-M)RU`' L,F5 b43'</YAL\z"YA hd4[H&;>ˏV~źۊR P#H)z3x:ascp.7^Acnʢ@ڑ.hVzB
u+C
п_!G\_wCCN^['nPD28 Tp:lQ J) `2Q),O뙾N)r`zŁ^nT:hezI`'f!eَČv LЌo
CGF,B~ O?*ݑ!NGOOvL,+{d a#>-Ja8gy
ňq ]Kv9 ^&XZd00 D G#7 1Fq#$0+hؤ#[554Hٗ-%ƀatX%]1L1eGn 7S~Ժ }j;_*ߠW]} "yJ`xf;hlN}\I7
3fi8r#c,L?(*qՎ(pHY '4 ~@D8hAb @չ `fsN\%
l:|Qc@䙹9¶" o{#6ɴ Vb
b&DWE҅Hzɼ i["2eb^FlG68O!:L
lL4 xnmG[5I` >U*FzRL:-bKV08.ۿ C.Qww:#ikNq^Yqn0c tF,?h%IBQk+zP3z?A^顨{вx}yv+SKnpO?N6 2U鋐 ݫnJSSZl2S);_Ą>>bFt>Dhdh=4S6Hw^$lVEc4"~iL+h79gi\'.K?
!Tlh _9{' W
CfTAX GA4AK83oH0zWOR:Y.> Y{fE}'2R,l:J4&sǒ{IlL mGo1\)p/ M0qr"FE(&{tDG0 ^.Y+vkŧ:E( 7 :#;nQ1ibnʴf:W.Hu|'8S::9V nvB8 HԂdy__# ]`m6&w ~-yl :2^MYm.>Z(Z u*U̒DXXnR)k{/
=˙qx2xBinIǔOxC|+PW.R BaTx`J!Ճ &Yŭa&2!%69 . "íX~^te9A9 v_!n"Sd6}v ` hobok7hFwО `
#j 1BI]@6D41NjJLp>C";\?qPp|xO1cN!$(H_A?*IM'6:Fco+Z*,sx), 뽏?縔@S>5,EQI
KzP]. 6+x0SƚQ"@Pjoyԇ <3}*W^b]mHv^Mۑ"Fۻ 30v:OW(oe7I:-%'0K>Nm & r8~(Rq Eb=`ph YD |yDE|'ycF36#L7V% >nX\"904nHO-p&- 8P8ڌuY+|C$"B+'9xKD E!l:˴[Z q<5`
KP c$1#rD[KLԬ,<⚶;BPk]p\ }V]4w`>̍e<:1(0 'A_v3F})sܖ]\,_*\#hA,z,fs{eX K4%lHpm.q"XgYISFve SyEQ 42`]u`Iҡg-E6j#Bu)Y ˰ǭ]]drԗD0oΈ
VMަ1 0L
w3UQ]#p-pX&̂%^Gγ.Mu L#۴=^ _|0&7EĖ_h{%lDWCs\Gizb*|]NHKD;u*o/l\jk_&4m,@wh_} ^Zf ]M j˂aH@
TC^{q&SA/ PHn&I Xss=̞#5 lgLC MRvt/ s\7&X@'f7֗ѽm`,Yˊ[0]ʆOQ& !E/ҰKubX kvu
P]98@[(U"Q̘m4vr :JM[lND}^*
TS՜Ja ൴ ekEaDޓ tH0sB(Pc\MPW_섟 'Zn9%Aki j,tTSt.
EC9z
UV 6ai)O.WM|+ÑkqAlOŤܹyd $vl~kgrxm_&$Qc$,rLqt̪x7
Puݟ TzîՈ#=嬙/]0=d=f! x6}ˎIo9-PES}mC $9n bwXv'UmO[Et*e6g5rMv8.JoE 2ufqҸ)yH7!J o?zǗJA'w]Mb.g8\Yޖ)7u${]gt]
lc,5?ϯ:Օ%y I( {d9T,$7(,Սcz/* +P@ Qc mJ,L915@ ĉP?q0&%.cht6!*y<ĺ̻>"R눂f'Q,u[yG0cgDӴMT >(4|W@cu'0PG -Ycʝ5=xr
mXw^K&UY{л}=-b0
yP^4VJ ,2j] y}`ʍhʨK˧CH9gAWKčavD
DWi6`]`|k?ìzD) 2_V'
$&guF˸T];8OSwɫ.,Lŋj#v~;zI*`qI7;hTA_ UPsXḶ6C43ep$A%B}R#r!HTa/ _CBt3Ӑ58
{_c l!"6 T=6
+<\nA 'P ^|SY ]]^r x'v)ߚ 5 c#b ȏkd$ [ri~vkO_P zAChvup H4W:};g=SYoG_~n` 32=tf kd$sF0˜(W1B_H6^"hɊ8Vw#T4v
sc pךU== ,a& jZݣ
N[D{I .lmjGĞ4dSBH48.Ms?KN@MVcl B4 @ spK~~We]>(x)y:sEJ
o<; p&%٥ +"N{wi`i!`~3¨[uz)=ߛL@[/#~ M Ȍ]t`6ƔmzD%?&c0M0< E3>g%I< 6 a=$/Q#J4 ' sFX/St҈jn~Tm?HPYB#y? Mo`EupoFp;
\K[ld |܃uvkH<"< S]l*`->jy&\d& ,e]
"5DuG}Á{& 1^1FY4D+6gyn8$D#@LHo
a֭w[C
P}~
@iCvw"D.kײ5z^&ʐbX~aE /lԅ@òz`d6a8&Ѹ1%W" rV_o0 &)v jR|
ǦS)vf&4l}Vx>ZP*uy?B+txc! V:iwMf5\xQhKt97ri"@%(,G&6dzׄZ]&:I (
~l_#2[s | 7,d uMdk
S^~E?x.!=jB0kRς-d'OpYp %/KڲgN4 C-(6Nu1/,O})Y-K2zUs}j?w\۪:ћ4K'Qv>^f *= Z Bܸ.1p7JP"Pf6 2hrh5.m zweq3!%VV37 F3aAh)M
32ս[]JO[0dYW
[zу_5kNEsagAn6[]+(rK;B VJeY UG It*U0|ʷAYl߂?G}3-'+m~&Nn@̾3@!~́MG 9t)Ն<[ _P7Ͷw3`9c+shy!Nqu'4ul_ZYM^'3@TO4wGŦjο}3IҧjwٹG;D@l9Yv\@?OEğ`[u >[NqF~Ǣ:.FT4mU֙ wWICCoLjFt8Z6(чE»-6굹&
5Ľ;bo䌨~lFH"\:uQrl2:O3ǥ vM0u{F,P$v`09 b}9HH\JHwSB]M"EKa @Dy_fRqRPv3KC /-iE4=nH٬Fo#z~Zg 60RĦ01;ys40}Rz-b=//m0
8 (^!rRPeQ6*z** yo4m pTWQѡ偱f
1 _lq4/]4l:Z.WnI'yK
f|%>zHݲ!ZL %tV=(ݪmMzZ.
2Ak
BJ~,ϢW?MstFQ5aoӮl Ƨo mL/ԳZ~E͑ (˼ιt椀JT_)5semɻl/D<$">tFλ/ {k8JF"j}[~W7r{? y3:"|jÒT. jJ"?!Z,Xw>2(Pmn ) Q3Ot7PDsZDZEccX)#\ 4)5Zx¡6h(:%!{ DB#xv}Lđvngd&
h0s;}SU!1 I V0[e _3; ~\}i47aÔuy.TZÖߔ!kR &z`xKk?ۻ_bSXHs
pYu[6j[!ZK*"ʶ;Jl
ӏl1X ~'leWsLT|Ii-rҠMTBB qM*MW,~432 .F;lPS>
$D SdL=ZC\[ Q4RY>D:*ޕl36uCo*aXJ* ɵ4MВiBvNK6ViG#s ҸF#t.0.?E8拃R3lʴK[f\s=l)W@R`^; aL2pM"'ii|pBƋ$JuٽZ"2LIᜟl6. zSU&]1SpDH tH9 ;o y®Db ( dPz3٣Oh C'^jTR;ϧcG.|}˄] kZj QMk͔#0۱7͢ n,
]l0&yy)K5Ö!mhVs6K7
DVxs-pa{sOnIJrҋ9y #[TJʙ͌ƪ6>ZnyۣZz/]ҊuP
+RU>5oc*ד<5Bj#0=V'VAq)vV |LkzinC@Xܖ*%.Tnx:C+p- x-6ke6ȕksuf|15<'J(5Uiv`N $\XJQ#<=ne1`R0@\H`PMc=gk'sTXqዞڙ'jޑRE_4F>_Zk߭$C` U 3Y6x &? ūl rc=l?_ ZN3\$~MR."iDGSR oڴ^%%3t}iWۼf5F ^5.=$D\zYʝdyZ)'PZ!L!IDLCYss,734!O~J5P`s+xf۳r#qi}3< X3ˍ-i"7:K~[K H^c^u}HAT6%`Zb*j V4d|@PCR) t ap ګÐID;`n2pH}y9Nȓyv ˏ5u &~34\rA72 'Z9$vzstZVMҘO
ˍ!2B 4 ߎSl @E1(0o8 d=:?R F`Jz=:Oh6P݅w~xAp)`5 PWd}WP2ceِ>3exMR\pS AIlS I+5@ a|ƜߪtжUМ])jz Ihvۜ^@^ 3@><@|ۃɴؐ/&1#7!ɣzH At:2CK07ϡ9~ZLЅo>U57b* Wif9Q>l:i=y< ׀D`̸WzT6[/|A?1vzr3^9=)xh{5u&6v0$
ԲjD=bK3Vl2 ƟbNJ`MlA-xpqyƈ vQ}nAw# ʾ"&V! L8ε
6`MI\Up 3~w7ȶOKsyt.36 - ';a0hJ^˜2cXf>`|ײY Uo]Y cJǨQo U7\.r _'ˠ;^Bk
Z|쑻O7gF?q=ͷⓖf3膡&;OQ) SFCOdsuhL:2q )>
Q?18QC9* Vdп <A7@ɓ`A{gY_plLEs!y|k.pj1rw`<7Kw[uH,VX~O_ 4̋,5 DHLf@j#iD q`-~߂In<ńQXeo`^dp}id`$ 7*̈́5g"bHawHh2-fRP+Θ,qy `\ ȉcX&1| p>'W+ Bv7A? ȅ2kRQ8{'|2zo,, щolHq Jx3 O֦#Cq
YMkf| [o*Q¶W+G#F=I; &Rş4$0#xD]6CCG&\ eBGQzn]\C-4m[^(~=l,r?roM W~lT71 -HKl·gފRP%ppʈ3'LRK3|)/!jaʢCC#Qmվت~H֧Z%"xnoy.g+eddX?_?m@= {;$Err(rQ! GIJnò `_rS3H
oXF̴JVi9V' L
;W|6ȳwzk_ ˢM qMnz'jؓ
BѷYɖq;
Z /oC0T9,Mlfuuyfٹc>(QwJ ;+mԸ= }yr