nss-softokn-freebl-devel-3.79.0-10.el8 >  A cHU]U$ ])~R5\La.D~[6t.b JVe[rEI %곻1$4GC#8j$vbFԯYkoUrpa vS)T41  :p_};{q?)&^6ͽ4vpi4q~$Ͼ# 3‹Y}Y}? c@g5‚bHGWF' GKuJ Fހ]vr[YȝC6T<+ IS`_&_<8!!64glDڹFG;ijifz/BQjԄPfܵjD~maNA&}~̸Mbیm}iz|3 d:a# )M޻&Ѱ`N,28%] CDg7<;#@Ѹp5Z V0B(iRFJְY3?à O۩[׽YrD-}0MU/7bd5e4f6f4c47fe93165404dfe79c03b24c71475c64e05e09a94665b66e7c51963846974c6d4c9f6498682374ceed1ed32780700cHU],Y .YOV GoC Ml流xw80HCp>-׫Qm)0]޸3= g&q#CB0Ppb1/ei /ȧA?uaJc$_QT|-]d%[s^"D,l{.7DCup4X4-K?d;yY² %F-aG"4$LFo ^R0I~uKDl>ĠiT=hğw8W\R@W/mZP[JCj$U?}CEcjɜPz'U߭p;ȶX@-\3ZT q[ۯ8[_EN UsCf'[$isXE傣d'hp4$"AA']5z=Y{4 "6d5 [w)(HrXleW^ZIۂ5$e˶HnQ1t l>p9?d" ) x " DP     0L8(b8l9 8:\GHIXY\]8^{bdefltuv$LPVCnss-softokn-freebl-devel3.79.010.el8Header and Library files for doing development with the Freebl library for NSSNSS Softoken Cryptographic Module Freebl Library Development Tools This package supports special needs of some PKCS #11 module developers and is otherwise considered private to NSS. As such, the programming interfaces may change and the usual NSS binary compatibility commitments do not apply. Developers should rely only on the officially supported NSS public API.caarch64-05.mbox.centos.org CentOSCentOSMPLv2.0CentOS Buildsys Unspecifiedhttp://www.mozilla.org/projects/security/pki/nss/linuxaarch64 ~72  O0bNYbNYcvbNYbNYbNYc}E790184d9a90b8a3994aba4aad22b0ea752a3796f2d7bd0e7f32aba78478fb2d67bbe85893daceaebc70e6b126a4466df01a4c7379093264b41f5e1053a214e2f954ce36f758fcb6af457823ff92922c48aac3ddf7147fbcbd5c1d72ec3759c9b826ed56865726f7a45ccc3695d324d2022c783440c915c5c277a738316e0c7ac5c01a374f357412f29c2a584ca9fb2c884d61b7f76126486b5fd22399d3fa8b19323ad25f2dead60960cbd421dd55a450c096c5d878e811061c0994f0df933358500cbd52ea1704faea76761539edfbf1a3260ab910a2893055df0de65f85dbarootrootrootrootrootrootrootrootrootrootrootrootrootrootnss-3.79.0-10.el8.src.rpmnss-softokn-freebl-develnss-softokn-freebl-devel(aarch-64)nss-softokn-freebl-static    nss-softokn-freebl(aarch-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.79.0-10.el83.0.4-14.6.0-14.0-15.2-14.14.3b@b@bγby@bba@blbbb@a@@`E`ݮ@` @`ٹ`̊`9@`Ȗ@`D`r_@_^@___@__"@_"@_"@_!d_@_ L_ _@^^@@^@^ۅ@^4]N@]]߶]e@]M@]µ]L]]^@\F@\Q\\\\\\@\I\I\U@\ `\l@[[[u[#@[[W[O+[M@[ZZw@Z|;Zo Zo Zg#Z ZZZ@Y+@Y{YY@Yn@YV@Y@YyYm@Yg`YJ_Y1S@XX@XX @XXYX@X@XX~@Xx@XoX>@X*X@WW@Wt@W~Wv[@WrfWoWm WbWQq@WPWJWDB@W4p@W@Wo@W@VV޾V޾V@VяVIVɦV@V@V=@V@V@VO @VHsVEV3[V UYU@UU@U@U>Ua@Ug@U[%UUU @T@Ts@TTء@T@TÉ@TT@T@T?@T:m@T"@S@S<@S@S@S @SSSSpShS(5@S@SRy@RJ@R@RR@RSRR@Rm@Rg@RD!R@RRR|Q@Q*@QQ@QKQ@QQW@Qw@Q]k@QNQ9Q7/Q#@QQ @P!@PՠP @PqP@P@PAPXPd@Pd@PPP@PP5@PPnP;a@P(@P H@O;O;O@OiO@O@O}O~OiOYOX@OOdO&@O!@@OO@O@N>@N>@NNܲ@N`NؽNN@NuN;@Np@Nf @NA!@N*NpM@MWMc@MM@M@MMfH@M^_@MZjMS@MQ0@MQ0@MQ0@MQ0@MK@MGMF@M6@M-MM@Ls@LOLLZ@L6LdL@L*@L@LA@LL@L4Lx@Lx@Li(@Lf@L_L_LT@L0L0L K @KsKsKKCKCKCK]KMKLd@KD{@K<@K5K4@K,@K+nK*@K K@K@K@KJݦ@J - 3.79.0-11Bob Relyea - 3.79.0-9Bob Relyea - 3.79.0-8Bob Relyea - 3.79.0-7Bob Relyea - 3.79.0-6Bob Relyea - 3.79.0-5Bob Relyea - 3.79.0-4Bob Relyea - 3.79.0-3Bob Relyea - 3.79.0-2Bob Relyea - 3.79.0-1Bob Relyea - 3.67.0-7Bob Relyea - 3.67.0-6Bob Relyea - 3.67.0-5Bob Relyea - 3.67.0-4Bob Relyea - 3.67.0-3Bob Relyea - 3.67.0-2Bob Relyea - 3.67.0-1Bob Relyea - 3.66.0-2Bob Relyea - 3.66.0-1.1Bob Relyea - 3.66.0-1Bob Relyea - 3.53.1-17Bob Relyea - 3.53.1-16Bob Relyea - 3.53.1-15Bob Relyea - 3.53.1-14Bob Relyea - 3.53.1-13Bob Relyea - 3.53.1-12Bob Relyea - 3.53.1-11Bob Relyea - 3.53.1-10Daiki Ueno - 3.53.1-9Daiki Ueno - 3.53.1-8Bob Relyea - 3.53.1-7Daiki Ueno - 3.53.1-6Bob Relyea - 3.53.1-5Bob Relyea - 3.53.1-4Daiki Ueno - 3.53.1-3Daiki Ueno - 3.53.1-2Daiki Ueno - 3.53.1-1Daiki Ueno - 3.53.0-1Bob Relyea - 3.44.0-15Bob Relyea - 3.44.0-14Bob Relyea - 3.44.0-13Daiki Ueno - 3.44.0-12Bob Relyea - 3.44.0-11Daiki Ueno - 3.44.0-10Bob Relyea - 3.44.0-9Bob Relyea - 3.44.0-8Daiki Ueno - 3.44.0-7Daiki Ueno - 3.44.0-6Daiki Ueno - 3.44.0-5Bob Relyea - 3.44.0-4.1Bob Relyea - 3.44.0-4Daiki Ueno - 3.44.0-3Bob Relyea - 3.44.0-2Daiki Ueno - 3.44.0-1Daiki Ueno - 3.41.0-5Bob Relyea - 3.41.0-4Daiki Ueno - 3.41.0-3Daiki Ueno - 3.41.0-2Daiki Ueno - 3.41.0-1Daiki Ueno - 3.39.0-1.5Bob Relyea - 3.39.0-1.4Daiki Ueno - 3.39.0-1.3Daiki Ueno - 3.39.0-1.2Daiki Ueno - 3.39.0-1.1Daiki Ueno - 3.39.0-1.0Daiki Ueno - 3.38.0-1.2Daiki Ueno - 3.38.0-1.1Daiki Ueno - 3.38.0-1.0Kai Engert - 3.36.1-1.2Daiki Ueno - 3.36.1-1.1Daiki Ueno - 3.36.1-1.0Daiki Ueno - 3.36.0-1.0Fedora Release Engineering - 3.35.0-5Kai Engert - 3.35.0-4Kai Engert - 3.35.0-3Daiki Ueno - 3.35.0-2Daiki Ueno - 3.34.0-2Daiki Ueno - 3.33.0-6Kai Engert - 3.33.0-5Kai Engert - 3.33.0-4Kai Engert - 3.33.0-3Daiki Ueno - 3.33.0-2Daiki Ueno - 3.32.1-2Daiki Ueno - 3.32.0-4Kai Engert - 3.32.0-3Daiki Ueno - 3.32.0-2Fedora Release Engineering - 3.31.0-6Fedora Release Engineering - 3.31.0-5Daiki Ueno - 3.31.0-4Daiki Ueno - 3.31.0-3Daiki Ueno - 3.31.0-2Daiki Ueno - 3.30.2-3Daiki Ueno - 3.30.2-2Kai Engert - 3.30.0-3Daiki Ueno - 3.30.0-2Kai Engert - 3.29.1-3Daiki Ueno - 3.29.1-2Daiki Ueno - 3.29.0-3Daiki Ueno - 3.29.0-2Daiki Ueno - 3.28.1-6Daiki Ueno - 3.28.1-5Daiki Ueno - 3.28.1-4Daiki Ueno - 3.28.1-3Daiki Ueno - 3.28.1-2Daiki Ueno - 3.27.2-2Daiki Ueno - 3.27.0-5Kai Engert - 3.27.0-4Daiki Ueno - 3.27.0-3Daiki Ueno - 3.27.0-2Daiki Ueno - 3.26.0-2Elio Maldonado - 3.25.0-6Elio Maldonado - 3.25.0-5Elio Maldonado - 3.25.0-4Elio Maldonado - 3.25.0-3Elio Maldonado - 3.25.0-2Kamil Dudka - 3.24.0-3Elio Maldonado - 3.24.0-2.3Elio Maldonado - 3.24.0-2.2Elio Maldonado - 3.24.0-2.1Elio Maldonado - 3.24.0-2.0Elio Maldonado - 3.23.0-9Elio Maldonado - 3.23.0-8Elio Maldonado - 3.23.0-7Elio Maldonado - 3.23.0-6Elio Maldonado - 3.23.0-5Elio Maldonado - 3.23.0-4Elio Maldonado - 3.23.0-3Elio Maldonado - 3.23.0-2Elio Maldonado - 3.22.2-2Elio Maldonado - 3.22.1-3Elio Maldonado - 3.22.1-1Elio Maldonado - 3.22.0-3Elio Maldonado - 3.22.0-2Fedora Release Engineering - 3.21.0-7Elio Maldonado - 3.21.0-6Michal Toman - 3.21.0-5Elio Maldonado - 3.21.0-4Elio Maldonado - 3.21.0-3Elio Maldonado Batiz - 3.21.1-2Elio Maldonado - 3.20.1-2Elio Maldonado - 3.20.0-6Elio Maldonado - 3.20.0-5Elio Maldonado - 3.20.0-4Elio Maldonado - 3.20.0-3Elio Maldonado - 3.20.0-2Elio Maldonado - 3.19.3-2Elio Maldonado - 3.19.2-3Kai Engert - 3.19.2-2Kai Engert - 3.19.1-2Kai Engert - 3.19.0-2Kai Engert - 3.18.0-2Elio Maldonado - 3.18.0-1Elio Maldonado - 3.17.4-5Till Maas - 3.17.4-4Elio Maldonado - 3.17.4-3Elio Maldonado - 3.17.4-2Elio Maldonado - 3.17.4-1Ville Skyttä - 3.17.3-4Elio Maldonado - 3.17.3-3Elio Maldonado - 3.17.3-2Elio Maldonado - 3.17.3-1Elio Maldonado - 3.17.2-2Elio Maldonado - 3.17.2-1Kai Engert - 3.17.1-1Kevin Fenzi - 3.17.0-2Elio Maldonado - 3.17.0-1Fedora Release Engineering - 3.16.2-4Elio Maldonado - 3.16.2-3Tom Callaway - 3.16.2-2Elio Maldonado - 3.16.2-1Elio Maldonado - 3.16.1-4Fedora Release Engineering - 3.16.1-3Jaromir Capik - 3.16.1-2Elio Maldonado - 3.16.1-1Elio Maldonado - 3.16.0-1Elio Maldonado - 3.15.5-2Elio Maldonado - 3.15.5-1Elio Maldonado - 3.15.4-5Elio Maldonado - 3.15.4-4Elio Maldonado - 3.15.4-3Peter Robinson 3.15.4-2Elio Maldonado - 3.15.4-1Elio Maldonado - 3.15.3.1-1Elio Maldonado - 3.15.3-2Elio Maldonado - 3.15.3-1Elio Maldonado - 3.15.2-3Elio Maldonado - 3.15.2-2Elio Maldonado - 3.15.2-1Elio Maldonado - 3.15.1-7Elio Maldonado - 3.15.1-6Elio Maldonado - 3.15.1-5Elio Maldonado - 3.15.1-4Elio Maldonado - 3.15.1-3Elio Maldonado - 3.15.1-2Elio Maldonado - 3.15.1-1Elio Maldonado - 3.15-5emaldona - 3.15-4emaldona - 3.15-3Elio Maldonado - 3.15-2Elio Maldonado - 3.15-1Elio Maldonado - 3.15-0.1.beta1.2Elio Maldonado - 3.15-0.1.beta1.1Kai Engert - 3.14.3-12Kai Engert - 3.14.3-10Kai Engert - 3.14.3-9Elio Maldonado - 3.14.3-1Elio Maldonado - 3.14.2-2Elio Maldonado - 3.14.2-1Kai Engert - 3.14.1-3Elio Maldonado - 3.14.1-2Elio Maldonado - 3.14.1-1Elio Maldonado - 3.14-12Elio Maldonado - 3.14-11Elio Maldonado - 3.14-10Elio Maldonado - 3.14-9Elio Maldonado - 3.14-8Elio Maldonado - 3.14-7Elio Maldonado - 3.14-6Elio Maldonado - 3.14-5Elio Maldonado - 3.14-4Elio Maldonado - 3.14-3Elio Maldonado - 3.14-2Elio Maldonado - 3.14-1Elio Maldonado - 3.14-0.1.rc.1Kai Engert - 3.13.6-1Elio Maldonado - 3.13.5-8Elio Maldonado - 3.13.5-7Fedora Release Engineering - 3.13.5-6Elio Maldonado - 3.13.5-5Elio Maldonado - 3.13.5-4Elio Maldonado - 3.13.5-3Elio Maldonado - 3.13.5-2Elio Maldonado - 3.13.5-1Elio Maldonado - 3.13.4-3Elio Maldonado - 3.13.4-2Elio Maldonado - 3.13.4-1Elio Maldonado - 3.13.3-4Elio Maldonado - 3.13.3-3Elio Maldonado - 3.13.3-2Elio Maldonado - 3.13.3-1Tom Callaway - 3.13.1-13Elio Maldonado - 3.13.1-12Fedora Release Engineering - 3.13.1-11Elio Maldonado - 3.13.1-11Elio Maldonado - 3.13.1-10elio maldonado - 3.13.1-9Elio Maldonado - 3.13.1-8Elio Maldonado - 3.13.1-7Elio Maldonado - 3.13.1-6Elio Maldonado - 3.13.1-5Elio Maldonado Batiz - 3.13.1-4Elio Maldonado - 3.13.1-2Elio Maldonado - 3.13.1-1Elio Maldonado - 3.13-1Elio Maldonado - 3.13-0.1.rc0.1Elio Maldonado - 3.12.11-3Kai Engert - 3.12.11-2Elio Maldonado - 3.12.11-1Elio Maldonado - 3.12.10-6Michael Schwendt - 3.12.10-5Elio Maldonado - 3.12.10-4Dennis Gilmore - 3.12.10-3Elio Maldonado - 3.12.10-2Elio Maldonado - 3.12.10-1Elio Maldonado - 3.12.10-0.1.beta1Elio Maldonado - 3.12.9-15Elio Maldonado - 3.12.9-14Elio Maldonado - 3.12.9-13Elio Maldonado - 3.12.9-12Elio Maldonado - 3.12.9-11Elio Maldonado - 3.12.9-10Elio Maldonado - 3.12.9-9Fedora Release Engineering - 3.12.9-8Elio Maldonado - 3.12.9-7Christopher Aillon - 3.12.9-6Elio Maldonado - 3.12.9-5Elio Maldonado - 3.12.9-4Elio Maldonado - 3.12.9-3Elio Maldonado - 3.12.9-2Elio Maldonado - 3.12.9-1Elio Maldonado - 3.12.9-0.1.beta2Elio Maldonado - 3.12.8.99.2-1Elio Maldonado - 3.12.8.99.1-1Elio Maldonado - 3.12.8-9Elio Maldonado - 3.12.8-8Elio Maldonado - 3.12.8-7Elio Maldonado - 3.12.8-6Elio Maldonado - 3.12.8-5Elio Maldonado - 3.12.8-4Elio Maldonado - 3.12.8-3Elio Maldonado - 3.12.8-2Elio Maldonado - 3.12.8-1Elio Maldonado - 3.12.7.99.4-1Elio Maldonado - 3.12.7.99.3-2Elio Maldonado - 3.12.7.99.3-1Elio Maldonado - 3.12.7-3Elio Maldonado - 3.12.7-2Elio Maldonado - 3.12.7-1Elio Maldonado - 3.12.6-12Elio Maldonado - 3.12.6-11Elio Maldonado - 3.12.6-10Elio Maldonado - 3.12.6-9Dennis Gilmore - 3.12.6-8Elio Maldonado - 3.12.6-7Elio Maldonado - 3.12.6-6Elio Maldonado - 3.12.6-5Elio Maldonado - 3.12.6-4Elio Maldonado - 3.12.6-3Elio Maldonado - 3.12.6-2Elio Maldonado - 3.12.6-1.2Elio Maldonado - 3.12.6-1.1Elio Maldonado - 3.12.6-1Elio Maldonado - 3.12.5-8Elio Maldonado - 3.12.5-5Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1.13.2Elio Maldonado - 3.12.5-1.13.1Elio Maldonado - 3.12.5-1.13Elio Maldonado - 3.12.5-1.11Elio maldonado - 3.12.5-1.9Elio Maldonado - 3.12.5-2.7Elio Maldonado - 3.12.5-1.6Elio Maldonado - 3.12.5-1.5Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1.1Elio Maldonado - 3.12.5-1Elio Maldonado - 3.12.4-14.1Elio Maldonado - 3.12.4-13.1Elio Maldonado - 3.12.4-13Elio Maldonado - 3.12.4-12Elio Maldonado - 3.12.4-11Elio Maldonado - 3.12.4-10Elio Maldonado - 3.12.4-8Elio Maldonado - 3.12.4-6Elio Maldonado - 3.12.4-5Elio Maldonado - 3.12.4-4Elio Maldonado - 3.12.4-3Elio Maldonado - 3.12.4-2Elio Maldonado - 3.12.4-1Elio Maldonado - 3.12.3.99.3-30Elio Maldonado - 3.12.3.99.3-29Elio Maldonado - 3.12.3.99.3-28Elio Maldonado - 3.12.3.99.3-27Elio Maldonado - 3.12.3.99.3-26Elio Maldonado - 3.12.3.99.3-25Warren Togami - 3.12.3.99.3-24Elio Maldonado - 3.12.3.99.3-23Elio Maldonado - 3.12.3.99.3-22Elio Maldonado - 3.12.3.99.3-21Elio Maldonado - 3.12.3.99.3-20Elio Maldonado - 3.12.3.99.3-19Elio Maldonado - 3.12.3.99.3-18Elio Maldonado - 3.12.3.99.3-16Dennis Gilmore - 3.12.3.99.3-15Dennis Gilmore - 3.12.3.99.3-14Dennis Gilmore - 3.12.3.99.3-13Dennis Gilmore - 3.12.3.99.3-12Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11Elio Maldonado - 3.12.3.99.3-10Dennis Gilmore - 3.12.3.99.3-9Elio Maldonado - 3.12.3.99.3-7.1Fedora Release Engineering - 3.12.3.99.3-7Elio Maldonado - 3.12.3.99.3-6Elio Maldonado - 3.12.3.99.3-5Elio Maldonado - 3.12.3.99.3-4Kai Engert - 3.12.3.99.3-3Kai Engert - 3.12.3.99.3-2Kai Engert - 3.12.3-7Kai Engert - 3.12.3-4Kai Engert - 3.12.3-3Kai Engert - 3.12.3-2Kai Engert - 3.12.2.99.3-7Kai Engert - 3.12.2.99.3-6Kai Engert - 3.12.2.99.3-5Kai Engert - 3.12.2.99.3-4Kai Engert - 3.12.2.99.3-3Kai Engert - 3.12.2.99.3-2Kai Engert - 3.12.2.99.3-1Fedora Release Engineering - 3.12.2.0-4Kai Engert - 3.12.2.0-3Dennis Gilmore - 3.12.1.1-4Kai Engert - 3.12.1.1-3Kai Engert - 3.12.1.1-2Kai Engert - 3.12.1.0-2Kai Engert - 3.12.0.3-7Kai Engert - 3.12.0.3-6Kai Engert - 3.12.0.3-3Kai Engert - 3.12.0.3-2Kai Engert - 3.12.0.1-1Jesse Keating - 3.11.99.5-2Kai Engert - 3.11.99.5-1Kai Engert - 3.11.99.4-1Kai Engert - 3.11.99.3-6Kai Engert - 3.11.99.3-5Kai Engert - 3.11.99.3-4Kai Engert - 3.11.99.3-3Kai Engert - 3.11.99.3-2Kai Engert - 3.11.99.3-1Kai Engert - 3.11.99.2b-3Kai Engert - 3.11.99.2b-2Kai Engert - 3.11.99.2-2Kai Engert - 3.11.99.2-1Kai Engert - 3.11.7-10Rob Crittenden - 3.11.7-9Kai Engert - 3.11.7-8Bob Relyea - 3.11.7-7Kai Engert - 3.11.7-6Kai Engert - 3.11.7-5Kai Engert - 3.11.7-4Kai Engert - 3.11.7-3Kai Engert - 3.11.7-2Kai Engert - 3.11.5-2Kai Engert - 3.11.5-1Bob Relyea - 3.11.4-4Kai Engert - 3.11.4-1Kai Engert - 3.11.3-2Kai Engert - 3.11.3-1Kai Engert - 3.11.2-2Jesse Keating - 3.11.2-1.1Kai Engert - 3.11.2-1Kai Engert - 3.11.1-2Kai Engert - 3.11.1-1Kai Engert - 3.11-4Jesse Keating - 3.11-3.2Jesse Keating - 3.11-3.1Ray Strode 3.11-3Christopher Aillon 3.11-2Christopher Aillon 3.11-1Christopher Aillon 3.11-0.cvs.2Christopher Aillon 3.11-0.cvsKai Engert Rob Crittenden 3.10-1- Fix QA found failures: - remove extra '+' from sslpolicy.txt file causing test error values - only use GRND_RANDOM if the kernel is in FIPS mode.- FIPS 140-3 changes- Update fips default for pk12util to AES rather than TDES - Fix bug in pkcs12 files with null passwords- Better fix for test regressions- fix nss.spec so it works in a rhel-8.1.0 buildroot- FIPS 140-3 changes - Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject signature keys by policy - Allow applications to retrigger selftests on demand.- Fix pkgconfig output- NSR Coverity fix changed selfserv from passive to active, change it back- Fix regressions found in test suites.- Rebase to NSS 3.79 - Set FIPS Module ID - skip attribute verification on attributes with default values - don't export trust objects if they are default trust objects from dbm - add dbtool to nss-tools- Fix CVE 2021 43527- Fix ssl alert issue- Fix issue with reading databases that were updated using unpatched versions of nss- Better fix for the sdb timeout. The issue wasn't a race, it was the sqlite timeout waiting to begin a transaction under heavy thread usage.- Fix sdb race condition- Fix coverity issues- Rebase to NSS 3.67- Restore old pkcs12 defaults.- build nss for older nspr so we can pass gating with the new nspr in the build root- Rebase to NSS 3.66- Fix various corner cases with ike v1 app b support.- Fix the following CVE - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC.- Revert some policy changes the generate ABI runtime issues.- Add support for enable/disable in policy. Now if your policy file has disallow=x enable=y it will act just like our other libraries.- Add OAEP interface so applications can wrap keys with RSA-OAEP rather than RSA-PKCS-1.- fips need to reject small primes even if they are approved - code to autodetect whether or not to use the cache needs to do so in a way that doesn't mess with filesystem negative file caching. - add kdf selftests- Fix issue with upgradedb where upgradedb expects standard to generate dbm databases, not sql databases (default in RHEL8)- Disable dh timing test because it's unreliable on s390- Explicitly enable upgradedb/sharedb test cycles- Disable Delegated Credentials for TLS- Fix attribute decryption issue where the private key components integrity check on private attributes where not being checked.- Update nss-rsa-pkcs1-sigalgs.patch to the upstream version- Include required checks for dh and ecdh key generation in FIPS mode.- Add better checks for dh derive operations in FIPS mode.- Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938) - Adjust for update-crypto-policies packaging change (#1848649) - Fix compilation with -Werror=strict-prototypes (#1843417)- Fix regression in MD5 disablement (#1849938) - Include rsa_pkcs1_* in signature_algorithms extension (#1847945)- Update to NSS 3.53.1- Update to NSS 3.53- Fix swapped CMAC PKCS #11 values. - Fix data alignment crash in CMAC.- Fix coverify scan issue- Fix endian problem in SP-800 108 code.- Install cmac.h required by blapi.h (#1764513) - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)- Add SP-800 108 Generalized kdf- Check policy against hash algorithms used for ServerKeyExchange (#1730039)- Add CMAC- CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for all the CKM_NSS_IKE*_DERIVE mechanism.- Backport fixes from 3.44.1- Add continuous RNG test required by FIPS - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism- Rebuild with the correct build target- rebuild to try to retrigger CI tests- Fix certutil man page - Fix extracting a public key from a private key for dh, ec, and dsa- Disable TLS 1.3 under FIPS mode - Disable RSASSA-PKCS1-v1_5 in TLS 1.3 - Fix post-handshake auth transcript calculation if SSL_ENABLE_SESSION_TICKETS is set - Revert the change to use XDG basedirs (mozilla#818686)- Add ike mechanisms in softokn - Add FIPS checks in softoken- Update to NSS 3.44 - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy - Use %autosetup - Clean up manual pages generation - Clean up %check - Remove prelink dependency, which is not available in RHEL-8 - Remove upstreamed patches- Update manual pages to reflect recent changes in commands- Make sure corresponding public keys are created when importing private keys.- Fix the last change - Add --no-reload option to update-crypto-policies to avoid unnecessary restart of daemons- Restore LDFLAGS injection when linking DSO- Update to NSS 3.41 - Consolidate nss-util, nss-softokn, and nss into a single source package- Fix the last commit- Support for IKE/IPsec typical PKIX usage so libreswan can use nss without rejecting certs based on EKU- Backport upstream fixes for rhbz#1649026, rhbz#1608895, rhbz#1644854 - Document PKCS #11 URI - Add warning when adding module with modutil while p11-kit is enabled- Update nss-dsa.patch to not advertise DSA signature algorithm - Update PayPal test certs for testing- Backport "DSA" keyword in crypto-policies- Update to NSS 3.39- Fix LDFLAGS injection when linking DSO- Install crypto-policies configuration file for https://fedoraproject.org/wiki/Changes/NSSLoadP11KitModules - Port enable-fips-when-system-is-in-fips-mode.patch from RHEL-7 - Use %ldconfig_scriptlets - Remove needless use of %defattr, by Jason Tibbitts- Update to NSS 3.38- Backport upstream addition of nss-policy-check utility, rhbz#1428746, includes required fixes for mozbz#1296263 and mozbz#1474875- Switch the default DB type to SQL - Enable SSLKEYLOGFILE- Update to NSS 3.36.1 - Remove nss-3.14.0.0-disble-ocsp-test.patch - Fix partial injection of LDFLAGS - Remove NSS_NO_PKCS11_BYPASS, which is no-op in upstream- Update to NSS 3.36.0 - Add gcc-c++ to BuildRequires (C++ is needed for gtests) - Make test failure detection robuster- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Fix a compiler error with gcc 8, mozbz#1434070 - Set NSS_FORCE_FIPS=1 at %build time, and remove from %check.- Stop pulling in nss-pem automatically, packages that need it should depend on it, rhbz#1539401- Update to NSS 3.35.0- Update to NSS 3.34.0- Make sure 32bit nss-pem always be installed with 32bit nss in multlib environment, patch by Kamil Dudka- Fix test script- Update tests to be compatible with default NSS DB changed to sql (the default was changed in the nss-util package).- rhbz#1505487, backport upstream fixes required for rhbz#1496560- Update to NSS 3.33.0- Update to NSS 3.32.1- Update iquote.patch to really prefer in-tree headers over system headers- NSS libnssckbi.so has already been obsoleted by p11-kit-trust, rhbz#1484449- Update to NSS 3.32.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Backport mozbz#1381784 to avoid deadlock in dnf- Move signtool to %_libdir/nss/unsupported-tools, for: https://fedoraproject.org/wiki/Changes/NSSSigntoolDeprecation- Rebase to NSS 3.31.0- Enable gtests- Rebase to NSS 3.30.2 - Enable TLS 1.3- Backport upstream mozbz#1328318 to support crypto policy FUTURE.- Rebase to NSS 3.30.0 - Remove upstreamed patches- Backport mozbz#1334976 and mozbz#1336487.- Rebase to NSS 3.29.1- Disable TLS 1.3, following the upstream change- Rebase to NSS 3.29.0 - Suppress -Werror=int-in-bool-context warnings with GCC7- Work around pkgconfig -> pkgconf transition issue (releng#6597)- Disable TLS 1.3 - Add "Conflicts" with packages using older Mozilla codebase, which is not compatible with NSS 3.28.1 - Remove NSS_ECC_MORE_THAN_SUITE_B setting, as it was removed in upstream- Add "Conflicts" with older firefox packages which don't have support for smaller curves added in NSS 3.28.1- Fix incorrect version specification in %nss_{util,softokn}_version, pointed by Elio Maldonado- Rebase to NSS 3.28.1 - Remove upstreamed patch for disabling RSA-PSS - Re-enable TLS 1.3- Rebase to NSS 3.27.2- Revert the previous fix for RSA-PSS and use the upstream fix instead- Disable the use of RSA-PSS with SSL/TLS. #1383809- Disable TLS 1.3 for now, to avoid reported regression with TLS to version intolerant servers- Rebase to NSS 3.27.0 - Remove upstreamed ectest patch- Rebase to NSS 3.26.0 - Update check policy file patch to better match what was upstreamed - Remove conditionally ignore system policy patch as it has been upstreamed - Skip ectest as well as ecperf, which are built as part of nss-softokn - Fix rpmlint error regarding %define usage- Incorporate some changes requested in upstream review and commited upstream (#1157720)- Add support for conditionally ignoring the system policy (#1157720) - Remove unneeded test scripts patches in order to run more tests - Remove unneeded test data modifications from the spec file- Remove obsolete patch and spurious lines from the spec file (#1347336)- Cleanup spec file and patches and add references to bugs filed upstream- Rebase to nss 3.25- decouple nss-pem from the nss package (#1347336)- Apply the patch that was last introduced - Renumber and reorder some of the patches - Resolves: Bug 1342158- Allow application requests to disable SSL v2 to succeed - Resolves: Bug 1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails- Rebase to NSS 3.24.0 - Restore setting the policy file location - Make ssl tests scripts aware of policy - Ajust tests data expected result for policy- Bootstrap build to rebase to NSS 3.24.0 - Temporarily not setting the policy file location- Change POLICY_FILE to "nss.config"- Change POLICY_FILE to "nss.cfg"- Change the POLICY_PATH to "/etc/crypto-policies/back-ends" - Regenerate the check policy patch with hg to provide more context- Fix typo in the last %changelog entry- Load policy file if /etc/pki/nssdb/policy.cfg exists - Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy- Remove unused patch rendered obsolete by pem update- Update pem sources to latest from nss-pem upstream - Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key- Rebase to NSS 3.23- Rebase to NSS 3.22.2- Fix ssl2/exp test disabling to run all the required tests- Rebase to NSS 3.22.1- Update .gitignore as part of updating to nss 3.22- Update to NSS 3.22- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Resolves: Bug 1299040 - Enable ssl_gtests upstream test suite - Remove 'export NSS_DISABLE_GTESTS=1' go ssl_gtests are built - Use %define when specifying the nss_tests to run- Add 64-bit MIPS to multilib arches- Update %{nss_util_version} and %{nss_softokn_version} to 3.21.0 - Resolves: Bug 1284095 - all https fails with sec_error_no_token- Add references to bugs filed upstream- Update to NSS 3.21 - Package listsuites as part of the unsupported tools set - Resolves: Bug 1279912 - nss-3.21 is available - Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit - Resolves: Bug 1280032 - Package listsuites as part of the nss unsupported tools set- Update to NSS 3.20.1- Enable ECC cipher-suites by default [hrbz#1185708] - Split the enabling patch in two for easier maintenance - Remove unused patches rendered obsolete by prior rebase- Enable ECC cipher-suites by default [hrbz#1185708] - Implement corrections requested in code review- Enable ECC cipher-suites by default [hrbz#1185708]- Fix patches that disable ssl2 and export cipher suites support - Fix libssl patch that disable ssl2 & export cipher suites to not disable RSA_WITH_NULL ciphers - Fix syntax errors in patch to skip ssl2 and export cipher suite tests - Turn ssl2 off by default in the tstclnt tool - Disable ssl stress tests containing TLS RC4 128 with MD5- Update to NSS 3.20- Update to NSS 3.19.3- Create on the fly versions of sslcov.txt and sslstress.txt that disable tests for SSL2 and EXPORT ciphers- Update to NSS 3.19.2- Update to NSS 3.19.1- Update to NSS 3.19- Replace expired test certificates, upstream bug 1151037- Update to nss-3.18.0 - Resolves: Bug 1203689 - nss-3.18 is available- Disable export suites and SSL2 support at build time - Fix syntax errors in various shell scripts - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites- Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code- Commented out the export NSS_NO_SSL2=1 line to not disable ssl2 - Backing out from disabling ssl2 until the patches are fixed- Disable SSL2 support at build time - Fix syntax errors in various shell scripts - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites- Update to nss-3.17.4- Own the %{_datadir}/doc/nss-tools dir- Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer - Install pp man page in %{_datadir}/doc/nss-tools/pp.1 - Use %{_mandir} instead of /usr/share/man as more generic- Install pp man page in alternative location - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer- Update to nss-3.17.3 - Resolves: Bug 1171012 - nss-3.17.3 is available- Resolves: Bug 994599 - Enable TLS 1.2 by default- Update to nss-3.17.2- Update to nss-3.17.1 - Add a mechanism to skip test suite execution during development work- Rebuild for rpm bug 1131960- Update to nss-3.17.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Replace expired PayPal test cert with current one to prevent build failure- fix license handling- Update to nss-3.16.2- Remove unwanted source directories at end of %prep so it truly does it - Skip the cipher suite already run as part of the nss-softokn build- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Replacing ppc64 and ppc64le with the power64 macro - Related: Bug 1052545 - Trivial change for ppc64le in nss spec- Update to nss-3.16.1 - Update the iquote patch on account of the rebase - Improve error detection in the %section - Resolves: Bug 1094702 - nss-3.16.1 is available- Update to nss-3.16.0 - Cleanup the copying of the tools man pages - Update the iquote.patch on account of the rebase- Restore requiring nss_softokn_version >= 3.15.5- Update to nss-3.15.5 - Temporarily requiring only nss_softokn_version >= 3.15.4 - Fix location of sharedb files and their manpages - Move cert9.db, key4.db, and pkcs11.txt to the main package - Move nss-sysinit manpages tar archives to the main package - Resolves: Bug 1066877 - nss-3.15.5 is available - Resolves: Bug 1067091 - Move sharedb files to the %files section- Revert previous change that moved some sysinit manpages - Restore nss-sysinit manpages tar archives to %files sysinit - Removing spurious wildcard entry was the only change needed- Add explanatory comments for iquote.patch as was done on f20- Update pem sources to latest from nss-pem upstream - Pick up pem fixes verified on RHEL and applied upstream - Fix a problem where same files in two rpms created rpm conflict - Move some nss-sysinit manpages tar archives to the %files the - All man pages are listed by name so there shouldn't be wildcard inclusion - Add support for ppc64le, Resolves: Bug 1052545- ARM tests pass so remove ARM conditional- Update to nss-3.15.4 (hg tag NSS_3_15_4_RTM) - Resolves: Bug 1049229 - nss-3.15.4 is available - Update pem sources to latest from the interim upstream for pem - Remove no longer needed patches - Update pem/rsawrapr.c patch on account of upstream changes to freebl/softoken - Update iquote.patch on account of upstream changes- Update to nss-3.15.3.1 (hg tag NSS_3_15_3_1_RTM) - Resolves: Bug 1040282 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) - Resolves: Bug 1040192 - nss-3.15.3.1 is available- Bump the release tag- Update to NSS_3_15_3_RTM - Resolves: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws - Fix option descriptions for setup-nsssysinit manpage - Fix man page of nss-sysinit wrong path and other flaws - Document email option for certutil manpage - Remove unused patches- Revert one change from last commit to preserve full nss pluggable ecc supprt [1019245]- Use the full sources from upstream - Bug 1019245 - ECDHE in openssl available -> NSS needs too for Firefox/Thunderbird- Update to NSS_3_15_2_RTM - Update iquote.patch on account of modified prototype on cert.h installed by nss-devel- Update pem sources to pick up a patch applied upstream which a faulty merge had missed - The pem module should not require unique file basenames- Update pem sources to the latest from interim upstream- Resolves: rhbz#996639 - Minor bugs in nss man pages - Fix some typos and improve description and see also sections- Cleanup spec file to address most rpmlint errors and warnings - Using double percent symbols to fix macro-in-comment warnings - Ignore unversioned-explicit-provides nss-system-init per spec comments - Ignore invalid-url Source0 as it comes from the git lookaside cache - Ignore invalid-url Source12 as it comes from the git lookaside cache- Add man page for pkcs11.txt configuration file and cert and key databases - Resolves: rhbz#985114 - Provide man pages for the nss configuration files- Fix errors in the man pages - Resolves: rhbz#984106 - Add missing option descriptions to man pages for {cert|cms|crl}util - Resolves: rhbz#982856 - Fix path to script in man page for nss-sysinit- Update to NSS_3_15_1_RTM - Enable the iquote.patch to access newly introduced types- Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts - Resolves: rhbz#606020 - nss security tools lack man pages- Build nss without softoken or util sources in the tree - Resolves: rhbz#689918- Update ssl-cbc-random-iv-by-default.patch- Fix generation of NSS_VMAJOR, NSS_VMINOR, and NSS_VPATCH for nss-config- Update to NSS_3_15_RTM- Fix incorrect path that hid failed test from view - Add ocsp to the test suites to run but ... - Temporarily disable the ocsp stapling tests - Do not treat failed attempts at ssl pkcs11 bypass as fatal errors- Update to NSS_3_15_BETA1 - Update spec file, patches, and helper scripts on account of a shallower source tree- Update expired test certificates (fixed in upstream bug 852781)- Fix incorrect post/postun scripts. Fix broken links in posttrans.- Configure libnssckbi.so to use the alternatives system in order to prepare for a drop in replacement.- Update to NSS_3_14_3_RTM - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3 - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack - Resolves: rhbz#896651 - PEM module trashes private keys if login fails - Resolves: rhbz#909775 - specfile support for AArch64 - Resolves: rhbz#910584 - certutil -a does not produce ASCII output- Allow building nss against older system sqlite- Update to NSS_3_14_2_RTM- Update to NSS_3_14_1_WITH_CKBI_1_93_RTM- Require nspr >= 4.9.4 - Fix changelog invalid dates- Update to NSS_3_14_1_RTM- Bug 879978 - Install the nssck.api header template where mod_revocator can access it - Install nssck.api in /usr/includes/nss3/templates- Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it - Install nssck.api in /usr/includes/nss3- Bug 870864 - Add support in NSS for Secure Boot- Disable bypass code at build time and return failure on attempts to enable at runtime - Bug 806588 - Disable SSL PKCS #11 bypass at build time- Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs - Bug 872124 - nss-3.14 breaks fedpkg new-sources - Fix should be considered preliminary since the patch may change upon upstream approval- Add a dummy source file for testing /preventing fedpkg breakage - Helps test the fedpkg new-sources and upload commands for breakage by nss updates - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources- Fix a previous unwanted merge from f18 - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while - Keeping the patch disabled while we are still in rawhide and - State in comment that patch is needed for both stable and beta branches - Update .gitignore to download only the new sources- Fix the spec file so sechash.h gets installed - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14- Update the license to MPLv2.0- Use only -f when removing unwanted headers- Add secmodt.h to the headers installed by nss-devel - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14- Update to NSS_3_14_RTM- Update to NSS_3_14_RC1 - update nss-589636.patch to apply to httpdserv - turn off ocsp tests for now - remove no longer needed patches - remove headers shipped by nss-util- Update to NSS_3_13_6_RTM- Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3 - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix- Fix pluggable ecc support- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Fix checkin comment to prevent unwanted expansions of percents- Resolves: Bug 830410 - Missing Requires %{?_isa} - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib - Enable sha224 portion of powerup selftest when running test suites - Require nspr 4.9.1- Resolves: rhbz#833529 - revert unwanted change to nss.pc.in- Resolves: rhbz#833529 - Remove unwanted space from the Libs: line on nss.pc.in- Update to NSS_3_13_5_RTM- Resolves: Bug 812423 - nss_Init leaks memory, fix from RHEL 6.3- Resolves: Bug 805723 - Library needs partial RELRO support added - Patch coreconf/Linux.mk as done on RHEL 6.2- Update to NSS_3_13_4_RTM - Update the nss-pem source archive to the latest version - Remove no longer needed patches - Resolves: Bug 806043 - use pem files interchangeably in a single process - Resolves: Bug 806051 - PEM various flaws detected by Coverity - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name- Resolves: Bug 805723 - Library needs partial RELRO support added- Cleanup of the spec file - Add references to the upstream bugs - Fix typo in Summary for sysinit- Pick up fixes from RHEL - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections- Update to NSS_3_13_3_RTM- fix issue with gcc 4.7 in secmodt.h and C++11 user-defined literals- Resolves: Bug 784672 - nss should protect against being called before nss_Init- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Deactivate a patch currently meant for stable branches only- Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request- Revert to using current nss_softokn_version - Patch to deal with lack of sha224 is no longer needed- Resolves: Bug 754771 - [PEM] an unregistered callback causes a SIGSEGV- Resolves: Bug 750376 - nss 3.13 breaks sssd TLS - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y - Only patch blapitest for the lack of sha224 on system freebl - Completed the patch to make pem link against system freebl- Removed unwanted /usr/include/nss3 in front of the normal cflags include path - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible- Statically link the pem module against system freebl found in buildroot - Disabling sha224-related powerup selftest until we update softokn - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support- Rebuild with nss-softokn from 3.12 in the buildroot - Allows the pem module to statically link against 3.12.x freebl - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo - Build will be temprarily placed on buildroot override but not pushed in bodhi- Fix broken dependencies by updating the nss-util and nss-softokn versions- Update to NSS_3_13_1_RTM - Update builtin certs to those from NSSCKBI_1_88_RTM- Update to NSS_3_13_RTM- Update to NSS_3_13_RC0- Fix attempt to free initilized pointer (#717338) - Fix leak on pem_CreateObject when given non-existing file name (#734760) - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)- Update builtins certs to those from NSSCKBI_1_87_RTM- Update to NSS_3_12_11_RTM- Indicate the provenance of stripped source tarball (#688015)- Provide virtual -static package to meet guidelines (#609612).- Enable pluggable ecc support (#712556) - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)- make the testsuite non fatal on arm arches- Fix crmf hard-coded maximum size for wrapped private keys (#703656)- Update to NSS_3_12_10_RTM- Update to NSS_3_12_10_BETA1- Implement PEM logging using NSPR's own (#695011)- Update to NSS_3.12.9_WITH_CKBI_1_82_RTM- Short-term fix for ssl test suites hangs on ipv6 type connections (#539183)- Add a missing requires for pkcs11-devel (#675196)- Run the test suites in the check section (#677809)- Fix cms headers to not use c++ reserved words (#676036) - Reenabling Bug 499444 patches - Fix to swap internal key slot on fips mode switches- Revert patches for 499444 until all c++ reserved words are found and extirpated- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix cms header to not use c++ reserved word (#676036) - Reenable patches for bug 499444- Revert patches for 499444 as they use a C++ reserved word and cause compilation of Firefox to fail- Fix the earlier infinite recursion patch (#499444) - Remove a header that now nss-softokn-freebl-devel ships- Fix infinite recursion when encoding NSS enveloped/digested data (#499444)- Update the cacert trust patch per upstream review requests (#633043)- Fix to honor the user's cert trust preferences (#633043) - Remove obsoleted patch- Update to 3.12.9- Rebuilt according to fedora pre-release package naming guidelines- Update to NSS_3_12_9_BETA2 - Fix libpnsspem crash when cacert dir contains other directories (#642433)- Update to NSS_3_12_9_BETA1- Update pem source tar with fixes for 614532 and 596674 - Remove no longer needed patches- Update PayPalEE.cert test certificate which had expired- Tell rpm not to verify md5, size, and modtime of configurations file- Fix certificates trust order (#643134) - Apply nss-sysinit-userdb-first.patch last- Move triggerpostun -n nss-sysinit script ahead of the other ones (#639248)- Fix invalid %postun scriptlet (#639248)- Replace posttrans sysinit scriptlet with a triggerpostun one (#636787) - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)- Add posttrans scriptlet (#636787)- Update to 3.12.8 - Prevent disabling of nss-sysinit on package upgrade (#636787) - Create pkcs11.txt with correct permissions regardless of umask (#636792) - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801) - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)- NSS 3.12.8 RC0- Fix nss-util_version and nss_softokn_version required to be 3.12.7.99.3- NSS 3.12.8 Beta3 - Fix unclosed comment in renegotiate-transitional.patch- Change BuildRequries to available version of nss-util-devel- Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch - Add comments regarding an unversioned provides which triggers rpmlint warning - Build requires nss-softokn-devel >= 3.12.7- Update to 3.12.7- Apply the patches to fix rhbz#614532- Removed pem sourecs as they are in the cache- Add support for PKCS#8 encoded PEM RSA private key files (#614532)- Fix nsssysinit to return userdb ahead of systemdb (#603313)- Require and BuildRequire >= the listed version not =- Require nss-softoken 3.12.6- Fix SIGSEGV within CreateObject (#596674)- Update pem source tar to pick up the following bug fixes: - PEM - Allow collect objects to search through all objects - PEM - Make CopyObject return a new shallow copy - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv- Update the test cert in the setup phase- Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071) - Update PayPalEE test cert with unexpired one (#580207)- Fix ns.spec to not require nss-softokn (#575001)- rebuilt with all tests enabled- Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period - Disabling ssl tests suites until bug 539183 is resolved- Update to 3.12.6 - Reactivate all tests - Patch tools to validate command line options arguments- Fix curl related regression and general patch code clean up- retagging- Fix SIGSEGV on call of NSS_Initialize (#553638)- New version of patch to allow root to modify ystem database (#547860)- Temporarily disabling the ssl tests- Fix nsssysinit to allow root to modify the nss system database (#547860)- Fix an error introduced when adapting the patch for rhbz #546211- Remove left over trace statements from nsssysinit patching- Fix a misconstructed patch- Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221) - Fix spec so sysinit requires coreutils for post install scriplet (#547067) - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)- Fix nsssysinit to set the default flags on the crypto module (#545779) - Remove redundant header from the pem module- Remove unneeded patch- Retagging to include missing patch- Update to 3.12.5 - Patch to allow ssl/tls clients to interoperate with servers that require renogiation- Retagging- Require nss-softoken of same architecture as nss (#527867) - Merge setup-nsssysinit.sh improvements from F-12 (#527051)- User no longer prompted for a password when listing keys an empty system db (#527048) - Fix setup-nsssysinit to handle more general formats (#527051)- Fix syntax error in setup-nsssysinit.sh- Fix sysinit to be under mozilla/security/nss/lib- Add nss-sysinit activation/deactivation script- Install blank databases and configuration file for system shared database - nsssysinit queries system for fips mode before relying on environment variable- Restoring nssutil and -rpath-link to nss-config for now - 522477- Add the nss-sysinit subpackage- Installing shared libraries to %{_libdir}- Retagging to pick up new sources- Update pem enabling source tar with latest fixes (509705, 51209)- PEM module implements memory management for internal objects - 509705 - PEM module doesn't crash when processing malformed key files - 512019- Remove symbolic links to shared libraries from devel - 521155 - No rpath-link in nss-softokn-config- Update to 3.12.4- Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766 - Fixed requires and buildrequires as per recommendations in spec file review- Restoring patches 2 and 7 as we still compile all sources - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems- restore require sqlite- Don't require sqlite for nss- Ensure versions in the requires match those used when creating nss.pc- Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn - Add a temprary hack to nss.pc.in to unblock builds- caolan's nss.pc patch- Bump the release number for a chained build of nss-util, nss-softokn and nss- Fix nss-config not to include nssutil - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite- disabling all tests while we investigate a buffer overflow bug- disabling some tests while we investigate a buffer overflow bug - 519766- remove patches that are now in nss-softokn and - remove spurious exec-permissions for nss.pc per rpmlint - single requires line in nss.pc.in- Fix BuildRequires: nss-softokn-devel release number- fix nss.pc.in to have one single requires line- cleanups for softokn- remove the softokn subpackages- don install the nss-util pkgconfig bits- remove from -devel the 3 headers that ship in nss-util-devel- kill off the nss-util nss-util-devel subpackages- split off nss-softokn and nss-util as subpackages with their own rpms - first phase of splitting nss-softokn and nss-util as their own packages- must install libnssutil3.since nss-util is untagged at the moment - preserve time stamps when installing various files- dont install libnssutil3.so since its now in nss-util- Fix spec file problems uncovered by Fedora_12_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- removed two patch files which are no longer needed and fixed previous change log number- updated pem module incorporates various patches - fix off-by-one error when computing size to reduce memory leak. (483855) - fix data type to work on x86_64 systems. (429175) - fix various memory leaks and free internal objects on module unload. (501080) - fix to not clone internal objects in collect_objects(). (501118) - fix to not bypass initialization if module arguments are omitted. (501058) - fix numerous gcc warnings. (500815) - fix to support arbitrarily long password while loading a private key. (500180) - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)- add patch for bug 502133 upstream bug 496997- rebuild with higher release number for upgrade sanity- updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75- re-enable test suite - add patch for upstream bug 488646 and add newer paypal certs in order to make the test suite pass- add conflicts info in order to fix bug 499436- ship .chk files instead of running shlibsign at install time - include .chk file in softokn-freebl subpackage - add patch for upstream nss bug 488350- Update to NSS 3.12.3- temporarily disable the test suite because of bug 494266- fix softokn-freebl dependency for multilib (bug 494122)- introduce separate nss-softokn-freebl package- disable execstack when building freebl- add upstream patch to fix bug 483855- build nspr-less freebl library- Update to NSS_3_12_3_BETA4- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- update to NSS_3_12_2_RC1 - use system zlib- add sparc64 to the list of 64 bit arches- bug 456847, move pkgconfig requirement to devel package- Update to NSS_3_12_1_RC2- NSS 3.12.1 RC1- fix bug bug 429175 in libpem module- bug 456847, add Requires: pkgconfig- nss package should own /etc/prelink.conf.d folder, rhbz#452062 - use upstream patch to fix test suite abort- Update to NSS_3_12_RC4- Update to NSS_3_12_RC2- Zapping old Obsoletes/Provides. No longer needed, causes multilib headache.- Update to NSS_3_12_BETA3- NSS 3.12 Beta 2 - Use /usr/lib{64} as devel libdir, create symbolic links.- Apply upstream patch for bug 417664, enable test suite on pcc.- Support concurrent runs of the test suite on a single build host.- disable test suite on ppc- disable test suite on ppc64- Build against gcc 4.3.0, use workaround for bug 432146 - Run the test suite after the build and abort on failures.* NSS 3.12 Beta 1- move .so files to /lib- NSS 3.12 alpha 2b- upstream patches to avoid calling netstat for random data- NSS 3.12 alpha 2- Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist our signed libraries and protect them from modification.- Fix off-by-one error in the PEM module- fix a C++ mode compilation error- Add 3.12 ckfw and libnsspem- Updated license tag- Ensure the workaround for mozilla bug 51429 really get's built.- Better approach to ship freebl/softokn based on 3.11.5 - Remove link time dependency on softokn- Fix unowned directories, rhbz#233890- Update to 3.11.7, but freebl/softokn remain at 3.11.5. - Use a workaround to avoid mozilla bug 51429.- Fix rhbz#230545, failure to enable FIPS mode - Fix rhbz#220542, make NSS more tolerant of resets when in the middle of prompting for a user password.- Update to 3.11.5 - This update fixes two security vulnerabilities with SSL 2 - Do not use -rpath link option - Added several unsupported tools to tools package- disable ECC, cleanout dead code- Update to 3.11.4- Revert the attempt to require latest NSPR, as it is not yet available in the build infrastructure.- Update to 3.11.3- Add /etc/pki/nssdb- rebuild- Update to 3.11.2 - Enable executable bit on shared libs, also fixes debug info.- Enable Elliptic Curve Cryptography (ECC)- Update to 3.11.1 - Include upstream patch to limit curves- add --noexecstack when compiling assembler on x86_64- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- rebuild- Update file list for the devel packages- Update to 3.11- Add patch to allow building on ppc* - Update the pkgconfig file to Require nspr- Initial import into Fedora Core, based on a CVS snapshot of the NSS_3_11_RTM tag - Fix up the pkcs11-devel subpackage to contain the proper headers - Build with RPM_OPT_FLAGS - No need to have rpath of /usr/lib in the pc file- Adressed review comments by Wan-Teh Chang, Bob Relyea, Christopher Aillon.- Initial build3.79.0-10.el83.79.0-10.el83.79.0-10.el8alghmac.hblapi.hblapit.hcmac.hlowkeyi.hlowkeyti.hlibfreebl.a/usr/include/nss3//usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnuC source, ASCII textcurrent ar archiveutf-87b01a95a708d55a8c07a1f4d039eac0b2efeaae308e396e8740a0e5b127ecb31?p7zXZ !#,k`] b2u Q{LTqQHCe=t_rͰJ|c=ZRz==D} 7FR|ЗDg _QPOb)_:Z,}uA'dcURb pXrٕBsF`]-x8:hx8TwɭOw:B6@W`ш[%J &v}Z# $!(khai91b2pPPE4Ш)F BmC>s"7Q,=Wvd`Jhb(Q7cBp7'SwH_#|-цc/j7s;gyA̬Úx'2)>}=ҩ!JP@ש{:Ct؜ $z"gVR&[F3W>X q?p\nQԵ986gfvcZ+JFÀFxz? (IM̅kRǕ~M~~ڤS6/^"S|˺+,4%1::b6F7R au AX@7A+>fek_k4y>5dT qmYTL{Щ_2PLNy *84[*+5QR-ܟI$; 8ckKiW4LƖ4,}%'׸PdPCIyɦ k8SP4 $.H \#OGA%رwxY/E54tL @g #'H:\xԱ=Ivaf/dȖDfx&M<*eծ7,?(3lt[[?apЖ xyQĮ7e?@%f.;?^u[)_6~* L(r_9[c$+.*˒{\܈8yoɖZՊ#5@mC:{Dz8vA#c6΅nt(QŊ#ubj2 9OAm\ؒh#^f;uFY-7wo&&6]? $'! TߵW#g%UgKEt'dB,>גj%UM2.I$Ճ8j~;V9ѯ:(:jͳy[i':j"Agu? -EFBt :iDe/Zo|'- Ћ FP n|H.Y ;7O[Tӵ؇OMG`GR98HN~ނۇU=&Cp4 "XF?~WjPжjVYk!A&jd $;bkQJ݁iKTȆT j$ׁ yfw*jĝ\D`lشBql &,v5{N$μ)aVp}Z^XH MY)$3^f[긳o^3쭧ktEnG7]wtPRt uG,0SsBBgG0;Z`GݫuE\.?ubjvRwhx(K7U+}':HFMr"a*:s[6ΛcgFD3 + ٭;fY Qq0w4PN#JQہ xAU>e-k%yGz,,[<[""3h8=heﶟѺ3$}1cS~@=+KU.5U 2rXrw u8sN:5Udl&G}_YeZ ߾l Ix(O8wEw ^θibQң+, ?-Q+k)m 'mjj8޵ћ@; )L 7u7P74ϭ\rl1'M9fv(3žn1bU"|q$Ѯ x(e&&:4m}>?A(Jx+ZPDZN['(4zv=sY8~A0Mt'bSБF$2<`-Zԧ57ag7≥Ih˼=lf{:9!w`96qKvi;b`9VoFtH#s@kVo4m1m*D1A9Cy6i'|opJQ7}O}ϿQȫ[o ײ-=N]rKk`Łh}YWg) ᏿_5Zyy}-mb\Up٤Zٓ(MaТ`|ߒ!+?QnSk%a8atGik#-{T0l%↞hE(S{ktۣSa( ^^-ݙojEY?p[1WZ2 An y7֏!i"_=}(ksrXEaNu9(vq+yoA:d~nbԩTe*MW=a[}Af~>$lR p|;]ONJrMDxw KSt'w 󣚠j-3#V^@LXo .%"b羔)*Y5РيE̋+'Z-M4{ u_Y/>2MgTGY 6q=-L J׾+[LM ":bFg |SUo0_1Rz)S_$!F* %E?lT0"'IL/A#w:Y_B>S̏ #n1 \d}u3uxCW{f%U^all׷^lp+;.(K@8ߡmV=̯VKHvZȲǦQED^rjgn4 `ZpQzm9yKcvær1zpWFd!G⿪pU@aEB(db:SX3?X<9tC`}[oz2݃:ZGNI +,ت, 3Bi@.M6q-ܬt >w:{pǗr6gM.I;Ǐ ϵ6mGLEZ꘶#.i2G]*vhv?Sxm2NM'y&xt{_eVj׎Û>݊yn2v" Z^23tdNeѡS0zJ,/!0a0xx _gÇ]<&o//hAVl~d(AVvr9Lk vl$WV cQz-W?-nyT8Kc?r7~J-aVIPg]((1n(d47m,=F. 8hHkLy c-^4yn EB+i ۴@BuM }@"ǫT|Pˏ*id7z_v)LiǤr6TWVdeɴJ >QvBlޥUhi5%W݌6 rQ E7$ǒc=j O=Fi߽ؕ#U\Ш÷31A<7*~jmr {meiFLvyMOs{c ]ߍrcxfe͇ < xЩ,"fޱ;*4!o~WZ(/d޹c3=)4CjGXR5|hJf|RV (3a-Gv3zЀ+ E}'VH\y:8ԺҪmU`TeQ>$L,r^7oV:TJiiG¬ Ouq {O~/RC! ʚm G9a Zς ?u)Y0Y/D b{%alކ7Oimٌ];$B6C`Ɇ:U-sCmUSafug }WzIob+ir3l~yu5%HF"%`T:Eln8!y%>o]{Z-(/-Ç)R}?~(bՃ6`p%L<9lz7wU%d"DC2YFL597P]Lύr%o>m$ha}Mn~ K7{_Clt"._XkF LdhHG]u6zWIšîzhYF)MtV0LWKb]OpL81$y̅ĘzF&WM.N7ܡA'LqVr W2x?YSiY0-hSvnA|;:leЧ/fTy~ֲ5G|/s! at)ݼݯA9B1A~-* V<8HA"$h/k' :LCu%vX* I7k^e!1P ^/nyo߳KnhwPSdȼ  )n]@uiطBVi+wox&=v H{$tmhgg鐽hFvC,^6W/.`z;+'5e: E/:>LeBvɾ"ESb; -UlgX!U) hyזJ]K`qO2j 9tK%Gۄ $$#y )be0uGddq h) O0K-yK7%4 vHtkxɤIweC5jP G2\_YS֛ͫ|ρ^JK0VZ欤"v"$p|#Q$UZ-_rATMj*C8XwUD$0̓%qЦ$c× ~['s ?c&$axiE' @@)W΍Ğ/'[n&W>+j]Y'=b yȯq4QW}Қ/q-1< gjW v=7YX ؏THӒ %Ufwd 7oVX:C!څy<3oSoﺧfsl-NPN{X4Bf]Qb!k b)[LW>eWr_2BJQsp ([8rW8$;R4mI|θ h& Y㫀rݵ6.eVZOF!UP][\W4ݯI[pzE #p;Xf^-օ+#Q#ԶEx`y_{@IPH2+6ʡ vJ I2VZ l*K{n-g"Po#Zd!OC&)kr%4AHz2ްE(JӒB::4@&@cGDE$*ojFizT8KdiA;!Er٪sydS-"AFĜ/^r_)q %p|V j`P !.<ԏz2-w2It:rG6E,lƤ22JKir:e,Ay3Ъi]gL!r/o]o (#+ue'0o7ɍNxK]2PkaUCGx T $WJyݛذOO>XqmM CC>V `dQрh`= 0sy叟}3SPD)'cKZBdf#Znߩ2XAq68 Pt?yBi^P?aCW77 C8\ TKt&>;Jb1mٍ? ׯ~OoF4ޓtDQQHְi/zQ85cA*Wܔ Xm"nT`&nϯ#QZ#fyFY?CtE!zM n[EU'ݾϴ.}#fvZgn&_HD?VYɇ԰j;7]Q6u)8ỏZYc7e%mƇ{(<o/Q.գxd&1k=4l,xz8U.$^|ZAp@]vQ!Ey/4asBy$xiS JVDS ?ٓ٤"Μ|ABq{(!ppa(whEٷs[T+#?uٞsik-U$8te<] ~Ih dYp)_ѩ@򜐸wrrONX3/}w8˙4{_>e Gx>eׯs6N).xp fbwl$bmkz@c9Z/գHV2b1`oX~G46㇘-&V=XoO[ w5n]0 H&壅 ' pnzEdovHN/zU>=|x\J6ù(&^ZB?]ExKf`?('!jFQU ǵX5v9X.4+ RVkݓOIG?3Mt FF46Kpgmn.oQfnPyL)  &"Bhn8FOV8êp7(#\,]ؙ^BdŮ1 >ǜCL2ҕ`* \/3ǎUKُo=s1nWPrgo tfguw~zϯw8 y}B|sf3Uy5{P{?Iq_3l4̌fy"[\BR(BGXEΏĘ<.o9A ݠKO#B&3 Yh&E&e"qH0P@Nǀп+(hY8T- -Z.b~в5!) zR*Mz`V:&/cD]9EL078Øy#Z+5XR LӘ_!ǓFP_shz i1AcEx-J??!J:Bgl[_,jg_>7?'5]_CpZ f\&幯KOjCUwHa*X@ڈ's&1u:kXqM%P(1rnSvY~B1m `2q>O@ "F{fܑըHiA KeNf~oD*lJs!H_,ʚdU>UiҜ>_zF϶)ElolxMPUPdk*y4(|y4إH2bRg|DidA ;a2ޅ*~18VY >p{MwS!OO5r0Ml'HnSnEϥRgfYtKI/;]ο^'^Mۉ]݀Oe[Sr?VPJ/ny:C}i0">#4ؒ Qnw~.Mq6,L *@Yf{.feXQi%n*j cʔ˩Ҝrpc3xX $L3 T|,Mt=@8>uaFvit}qxY3)f#y }_)pm-Kd|Y\3Y$Xv% pT|)D#: A&L*BF܇ ݫ^T n{HuSy L7oe-!]ʣq! SI|DnMDBoORV_5IEI \mhDRubSGܰ=C)o^<Ƀ`pNcyYNq ^OJ *_zGg;O챻MqBJ2ZG Ѽ|j-У9!f)R!ѡ'\M8BA3,&v_U8 v;zɤv 0 $m/ZmFrHf.tT繊VCƒ4[PA6Q:eHL걋VV##L{LBn A- D/Y#G29VKή7\Z CM%-΃џz֜lT;a7t,RM*nj%ds)L܆ۼ bw:ĈN!4& KAKYǩKVya%SkzgW\75tNQ_,`)&Q|a+~;~ [0rG'LLBPlYMTPϝQPay-Җ{IւlHRJ)/[|8-Y1r۞ȷ>\IsHJkTk4!a-?Sx"r4gT6z>EuIz~WtCfzXB_&*+:¶%- Wô`1_8> R7I 1I2i&0^Efpnu?z @fk'!)N\Y>Θ-kՕ! JG1tqv8 ]9 /=SX)-ȓD5̂xwF^Dpǒo5HV/M]w9p[깮mx4 ge4Ga1 c,Av:U'V=Õ5ާXH=ynDwW#_{kbY %9OR l82ɲ9]{Y(c:348W]ԡSU!)ksEkol|(ϳJ7݊> Lݠ[1JD8l҄cHxv)R&6bWrЀ;u:kJz9;q{ZhS-M.Ox,%`TcDOn9u`7ՆAę9G$K%8џ̟*H@:b(✖-#^fi$] %B9 \~~sۙ2; }v)o-pzZ n _ԥIOؼ71:.rZ k35NU<'!̕Q'y^V eﬨx5r;Η41v0Oz\~BF(wFdaܦjRYf@1N[vyѺXykg]oR}z\v{Й@D&qH?2@@6Ojj8+v DSI"$fX'1R| z& \Dz-_okP32%zb1 9y< d/oZy[{uX}t?brAI' +B܀*AU:qR7YfB[[Ue0&޿zGanS#otgʘgҢ^Дu+-g(j0&+*~br[j:bNo.. U N2gsmtr-tFJd {!j"9d+ÄEӹnThKk<#~2PXCCTCሎk^ae[r%3rO,m+QJG}S] @;,ӑZHnMp+mRYfUk#Kڽ(XAñ{vѪjOU(ʒM ;425:JRW< #<7?d'[>Fѹ9r+ai۵pT& qJ)F5QY֢*6>Ժ4_p*#lϣEIjxHr=|fo8st8s\sι,.?ÿ(_N7Jbƅ|`y$Rٙ. 7lX 4tJ|m$YTMVXߗJ,{EId; .@Y8=7#j~Jt_m [ɻK?>PB>݀!ޚAKnO M?٭'C{jҧdH%/xvd:PYP8i2@[BAZ|E<`6$Cf}c1#P؍($0lg]^QlrUX;2;4xP$N*X tŀ)UZK DQ [dgi lvnXpZ9o(c$//ʵ˘c6{(0AQ($#p{6O~چ¬U uQEdB _+֐ۯ+Ɯ/هΠ|nAĄe*=53莍@$μBRO.=vzN& HWy^c 5G$Q^Hܞl T0=~KH6Y-؏bz1g`;|Հܺata[>+<KXzi9#6 h:%XET6vK*< Y+c]w'"RՏ$#BQ|J΅0xsKkuo˺f Cjqb#^j)+&Ep ھo;_WC0fj r!F52[DfO߶K4` NClCyϏv\f0q33wsGye.|̱Oh&Aw=,t>C+%0/6Β4vǓε~z[GN( i+.t*AE QƦ6zO}dhݝuJ[{unT[hC|5`iFË'&²6e`8Ga,/{9̯Q MF~ra ]=R;qMknP>AFe:zTNɋnƑ<=<`X]N∗wݷ5)ўLSPAҀF,Pi+Z Ⱦ_rRȚ-#S4  #(rW)w|Q|tESVa4-"^^OM:-*tY~WdV$*xXA|g:ڧJٺ`0I xMaeduU)ñ3]P(MALW9Va$p~_-Wq6xXڈ_qa(1| oYD9$F2{N'j0]oUB 7*XezC<6׉>eR|gKʴAsH(8d[mQh '"'wurPgCoz0| U6~cRLf,jRXQ6>jbDn'SH8> >n|Hi)SЧRz`u?`iЁi׮RTY~&eI)6Q)*\rFe"-8YA~%CT6e4Cn:S.;f^JU7 _V=*`鈇O5EKR*Ϋkx PXQmm@-2tCiWQbզpJ TT6J,n~PF#=ZTP oS}oM(x8t=J92w JRVjװ?YɣRuTpSl€,T^.fI ՠU-kJR%Zvxt,$o੏pzc:Pu/E&ڮ%#\C\͐YowARe85?"8_ߩ}0J?VR:.9PjOV?"8F1Ct._$[6!,2i{KEj,:#EIH=@ WO- ҭjqBBuY˹x c#Refe#1f 9XeJ=#B]jYȄ?ژP5mVHiE\ڼ i{u_bxBE\lq㐌<5:?4cX+Gz !.^Jk/Q\b]x2li_-5ݻb7ߦjμdS JUw ּ:yjuqj*t%ܻg]]d[{$Hm>l$<뗸o0ckL4oɭ鈨B눆^sO!T} (>"6>G xb88#E&߶+Ls`45(\FQ; A6x=URSbYr?PPpFqzp7ؒVXD QF6Ulc ;EuQnNj6mL#KK.6u {]*AfPûLf.3aR֏k87tK}Pʛ~M%hrLƬuMXEo= fTh!A, ;ԇ6-/#.geS$c)0S^S5> cK`,ύHumd^Lhtq Md;YKJ0 mG s_.I7o p C HKGǿA-y&[Gx96DWQW(*7IRۂ/uSK,MYRU7a6v=;21wR2ސSzKፇlfwQf(()~\Ţ3T*PXmrN3Dn瀳WoІ`Y6\&`Gl,72@HJE`RBt܇kÐP'Ŭ4Z~z-7|Zvgcz$XDX_ "Hn! O×p/7`#=0ͣr,2A L;F~g5)u(ٸ<;g͕Pߠ%|jUô%%k.v---QQP2ETI,*T[֯㔱[ca}3w@V5l~jk$Q!?wʸ-K|B`}3PLME{`Kq 8h 3|?"CpvTIR<$l N5=﹊-g(<=^ȟ1 N n|eR`P+Q* ht9[+j/%7 Rv@!r6qY 䮟Ti{2%\qQc~'6? MMcno,37H"Ȍ tSAj?T 0օfT:+F[8{cUKș0XXg:4D|&fҞENgQ̌+@`jExCvAaW kYw 'e28B#e`va5h{BV~js'+.#@oD_㗑8q線@ɉ~SܸfB 8Ry 1+V0Q\;+Պ0([d}JcIL=I@ш6Sd]Jw)p,=nv`8V8u[6KQ}_5*%xQkż$6DŽ2, #~d*-9feJD>& jR"JbMY@,[ my*ej ^uW{`~rۨuֵ<OTa 4⊓ ΢ +,:[fu}&k@XR$J>0^Ģqo] SLluJ&|L^&@un+%4aӎ PL$q]DREP2 :e4w>/iH%F\fQj_~Q0dԺ5{ѫp|ofܨGa1 i٬Ǘ9e9"1n~vW.>#QVӂwp|}mRżԨ>0:hFNC3 bP ht#a^E'{3P_!$#RzI4Ќ_z*`F8Y:;&'3uDj5 Avenn'ʪZ,%a8֚(T7KcLz&amm:Nm%ZaPwOtorE9ۊd }ƣm)ΆC/Z^ڦB,I]\ @s?kUoA'4*@`uD1k(=Yv58{JT D=U.W'hJ6|)Co7xnOh՛,r[cܧ~_A5ڜ6>_zKpc`Cw-.b 1J*}`r$ ԯU&LUXԧ: 2Vw0yaxΒa}wQXXKuB>]2TB-V%ecPQY<&U 0jTG fѩe}m[)ݖ׀7]۞Ë6aYV-Q:h &Iyދ(~M:EDǧG 1^HT-ݔ0rxdܟgl~6zݙH/"|y˹~)؁t&# ]R1!aZO/Uzgn3p,-DM9(Vn`4ڞO᧔sN89M%ryV/h{A<= a/"qH>9K}pY_2j_V mIR ?  zM2 9t6gI5gMy2br~7,Y&6[e?G0ؙBө?#R@ .%Tb8oGř׊͈9X%G|opi[=~fz]@;ow_7q=2GoԠLp{Qd& I3KX$r^c<PfŻ{/b( d)|0mJQn|M%x rĭ-=Am6\\9d%R'$'1JB8;9S5۴]}%ƒ=\Jy2 `͍1EMt})C z =cw~6tqmaeKg1 ?P̚hc7o:`OԳt Ë割%;|ٵ~\jYZ7l%AW[C9p ^=A!_CXLL Uiz'0u6+}ݴӚ0olO*hbuUfD&؆LsjjL/ah)t"H`-C-v&4g%E%!R;*;B-Q>_GB(m& #.د27k+K"'#dB;c,CLSkHiM̢,{Ť^c%R 0_ԩ?U;n!s:=6EG SUH_=KpU6OlE2p =;+bBdEiYI<6ĸ=~JQ <)A YZ ,̝`nIWw Tyt9j4\R ܻwX=ɜDO:LGFXI?ep۟ܩ+|R)_[\i׵6GUD?WBl( vs@\"}NP_Rb#|- MKNs^r&R0=60H6+ֵw-m #2"/lűW}ϔ%P53uAIǼ5¾jK<+quƊZY]=p_}CTdq!/ɃtpW t*)cx4:l]H#[reI{)N=tt~yA70o1-[q4}tjgۥTdԼ ;f֭!@]B#[}V6 Wב;8qzR jJafoN*=&_U 2,:. #C]"TGQ0FkdB4|Mf"yy|9c0kƟjT-?YIwUr9;} @C.Ǭh[)6rфTLiX9*eu,f:`p,c|M9^p@_NGsx8Z j^0K*܊@ԱŠԆHU[6wVb/A=M仠uA!nއ3\z;aKݑQwZm{1pWzjd;cɞWE0d Ngd>7z4~-Su0oćb[P6إ)by2̋C/wĐ xN8҉GR!c%_0w5/qgձ3_WnFɶG.1xn4|m6UhӺCꠋ4<6f]m -^&pZcn,Ot:Wa Wd d%rouwcݬH/)O6Yqz WCcܪBa>R/:~^G,)C`1!ltfr(Ӑ@0{t,ہkƳ3i8䉨h)Kv#=l,)y1"gZ+ Rrvǫr˻+2: `/WŹk!Xo>I~o(.y;ښY˄Gv}ݼ) Mae y>-؀[挻qoTRh:q< ttyQz{DT i?kIj$AQp^#DEV?| ?)Hvթ_UT"O7r Vkm9[V'4}jѕrMǚfej;m_":3Vt#ǡ73RR0oJ2GO`6XesL=k1Td7drZ!o'%L*wjzmX`+h0婍8Oe2a^~mmM*S@AR*⁈l(~:-a>˥?^ج݃F[$< uӗXʇbq`iDvM&I 8XW"=c^Scr#\"2Z4WHq)2CH0^:(= 'ڬ<[,/i oTYotpUU Zdw28)lj>|{NӅ8ΧOܺ"hyQa׹ 6(x-aK[NAK>8憒T"KYofW7`9ysWPZD'A4bǟ?(c qJDAe-r2R25 '"!ʌ/Ş~ mJOu_TXC! P=|+YlQl`/Qo!:c% `=[_,zWt-Ua*6&H}Ap`>-]&ˡ)RhûAIXFlﴪ+G Ah<뇃172Z)N8b,Pg׀97C$B}nn貶*VYǙr0;$aP5/ON)lqسBTv#G)9p**7ZG h*URbxR ՀRz,c=k8ZqIﻼR^.I_c/$ũY>؁M!P!LFd!)Ȋ=|)AɾA2uȡ@ϫ%%l؂-2鍈PP^?S.8d,v(B.> S H0?t0v%<'s<^!<8Þ:/6BNhgfKł 8>.3b!{snkIj6:GGwu,V"DM>&2lW|奕BEn&JOl ejh,"؇C>۞Du))oO~$wP<9<G ordb9`8+^t=Ň0OG//Bc{4UZYù#ڬHG/u62p$/P<^N/+X m_V#3#^~,O٩p(l/K΋AJ { y5Ų݀|8 [MRQga:{./w2a./0U04ؿ׻/T•7I~@qyFGº+`o׺b . O#Sg5C>)JShvnsGᾼ:-@ТvS V&G#T]}k * xWu|j_(- c `zmi9-pe^#"OR/Cغv("LtK+r\)Kɣ*R594$ 6JfKݺZQxOѿ̟qeiS3ھNDl\V=F(7eK7ә:o2WE7Ϸ#js:BzAd( D0'QяsR.d9{>(GO+s%vE%mr7؜+_ /*O6{@Q=)S*%ﾵf@9 0q['S'{o$wMvz{ (j %'~ Pn;<]]A}2$paX]C.tJ`0C;qc*[93zh"eƹjJpJ".xg ?&A>e\ǚ MJq*E*RA vr0^(~)ϙ4s0C:shTy;B`Aѫ _Y 64;_Iwg` ś}.+!1㰩`k1Ocp%jJ>O8)Y"'`d`=.wu~nY> f!LZɍr);e^ρ+Yh `ӯ~IϤRonUjh/w0Υ{UO F@ iuUzrS ݮ AugkHP!89p,0%x?j{?c}SCyxpG^xGuq? \P3$nM~0̙jDfy*ginW`rk {zAͲe)4Ak ͦt#O@~>?OkeC?OzB.7Yw>>d9zIWrP$2qw DPPq܉2z}fV]=Ck$F, [0.̓ZŴR{1XB %<8H\|t7BXw4? BJ)bu,Qs?!ȑm W vUԔyY>j]Nv4ʻ4 a3|՟&z?90Mw <^ܐ,FO&OMVCߕ  iV52SRՍ-#s2c$]G ' "fYT$K>}$&mQ ,պCAz, n˼I_{dhn>F{vC-Ơ׆iw $*zje3:3dK@A\9Wn.صu6lR)]#owsI  l27[GXΆlamV^ЅkjU<}î|u/(ZW}-j] Chj?+VU)Grߨv[)*iP4.MS]- I1IN]|aj]rr$kw LvnHU{Q)Q:e_՗.!jyŴI1j%zVsa|0֎SpT.ӊܳ{OzԹk}ߠsg2YP3k.MXaz:EJ g^pm`30H[J%?%< ao$}}[<7WTM Z ǁ9¢ߧw=‹Ä"1h.M>DD`J }'$QnMU0yZ/z YsCvS]h0q{>z~U14IM=r%ͯn0#r2Btu,iky:ɟ#{ra5kJQ롍K3(Eդ挚^O&g5a|V~ySbxz% ڛ0Z9JG=`e;eS[^#Pw"(pi[GQٶ)Oi$k7?r]윦0ɕn3P#χ{KEb(|0NW{'C{P>4|CYJfB :-t3q;G*CjGE'R0!:|]D p7Ppp^eIF@&]% yw`&);L;iS/U,y |gW\ Yԥ2m!Do7i.2C~03(BY _('d p;$$I̼ö㊄&mkc<BEge.IJ n +Nq+bJ˺ܙgŵ]5NLļ}by2J!ۆD!' VvKM}tVf2p:= 䋛z}G"wkt{fF>YN9*Fh1 qt-S6W\]g6riC/0rt?-_+x+)Ȧ )3C l=,~90AF0`}K:JL(f{(0?7*6RIBOF"my.~fo o0-aaŵʊF437 ꏙ'ѽGir_KU ûQG.BZӖ]#7ycE*V4=§'s]gD\$ OΩTj#(]}Z PL6kJn"t Ke'ue(/8֪膽|D-޲T _1?s"w{Œv`El3x?u8ٲGG,czVC#L&o*4H~~ LO\h'*g\}h0#PDnenˢrsr?VDMU36o@$r|1~l[XFZ%cQ%E pۜ!AAvLآQt@h{ܻ6 > 18|%l. ZBWfECXbơRBndKRAeC|ާLGPrB f,!C+$겜-Oe ryW61V:wFyÏX?tw@{;7=(ZXMVi"o`Mjw4cnF i6uB;۹΅W11\=i%K:aBքTMrP?qqR,4MZK.ӗK:m, j!vHo*n%<ȉ k`*]qU3Vx-cY RQgi2z6hiZDIr5J_l5ck|Qze}=Hٱ.'|8l4|# "IS FI_x-81e@NnNGxԔֈAcxHߴB-`FIG!6C[` 8=n c'eUt܌Pr"Dޭl; cA 0ԤzJO:Ue(F~ȼ;IP&՝<}VS0/MRmU$Qhf\aj`>@(o?/-̑ Idb &QA'@oEr0~m-|_Yf)ta4ZF{ةD?8Zj3ay*,;kjߓJ7LY*%)5Hgt!_dUU\ty\FA7eBr(wfF{r1j,ҵO8#.UT<-pi7gF>2p!h$&Oo1E'L2gaFWt1)%jU,*;wJ!+FqĶm^(5 Tᱱݖ fLNtP%bdQ`R_d:|J;r| ΛaECEM_u,ٰ]-0bU}fȻ-3I;=OE Hy oLAKnэ@SKš\CG BB[mPfv>`ОFLc˒p2A7"NO/ \Bm.nz<8َf|\{[.C̐W}*&l,QVhZ,>oKom>n\+PkV*KX!FEten U=Z'K"[7!3SxӬaͳuvM]714kڝհZsx=PE4RwLi׾`C"`A^se BiY%VeKƴCٽE|"41ʉY 7Ma>>#,E1*ާa9?yUda>KnXDߛ/ʉRr~qzs6KS(f-%tF⛰7PAT쪂]yC={9Ѝ$ qT@Z&l67VmW5Y|&y/"߶3d*6l[*PP3DFPA?ٮco#0b={E'cxa-YKr@  I-PRP =YG\_6IRtq+qNn9gN y('_c Aܾ1WiuYy$YWlNzԣcC~5ѱl}q O= jBu 1y z?NJ/ɔ#5MnZiO @2(MZ~J#k-қT}j@ J\$n@v0-LB]яv&Ud;:kx$awuL%9tl!Inn n~,k Gm}>A-%V ,W0vŗ)hX%7 M0/ ě֙Vt? Y(?Kif/Ԗ/3~Q+ WCDwSIwa*p"9lg*I];bGYh-Vs H7O6x"5T.膋;&nc,?) %Wxs^n\/}۫eH?S]q=ڬw }0C̥ÜX1Ml;8تb}D@bU⼭H٤^1dzFԻT[is!@I_Q͗hLRPol*h@lJ1BkJh|Z\>*.Ə5'~xfz6ŗrz/qG̒}m e*lڀ%F@Hp!}:nhzr/3gکǏj:oOM Qgm#Wh.:-c;iZ>xPWdBw \tÿߖ#TI<9ZG*)r߈&Cz# %jj2Q z!" ߙSoB'OԊN1Wb{4׈F0B.7wU[DߗI]FN.Էi9l 7G >B|j^2$~l-)l_jT׺Z'] sbkkrL0ki% k3 ,SQj&,&BMjf ?V1oh5UӦ.rLEr{7Hzb i/dږw60.IoU?}Ϟ gUiuS/±2Sh#a v)Zkt? =fqϊF *:N3qy;g{ d/_X<*PK%/+ݮnYN0ԀY|yzUv"-p6Յ>0{-PEVlB*4Hx PfF@MjS~_M\Փ_cwni#])/%TfdbQ?\z:M|y<>~.sXAՁ7cn?x{j̮n7rv6O$$P% :e~K]4^'6}Fz%[_̭oO 0Dy+RgOQI5s%3EhQ^|j Fid~ObVax~Nx'Bdfy)fEgaYfoh55HsTlz"#$Tu xz W7q͸B͝M:zA\W' W8hPWRsfoeZhYOK|%I=fgS.dB^^P U;Jk #Ti{}pM`=U값gM ]}Od5ˑf-6r5y .(i;U{=&ޗlES\,LhϹW]o!؎ӣZfPwlG J!D#J"cpΌ ! J= GN}3{PjWԻ@[m_q#WXyCjDh0&uՏd$y_KBf(qNqYs&NHzpN=( ={d=&P *X,6 fcp+ l)oYJZ~ Ʌ(cE,3ѣ5 s~uRIZ8,qdO_]zF4xcwCƢS(?0с90edS9 [YE5qaPE|/Ѷ52&&s:hHiT BH9*kDinZ#z&X`4MBE cζ>H41>NGVk`c}ܻ_` ʼ$7: m|{ l8'f,CYqaO3iՑ7G)m(5(lָNe y!po@& qb kZ}xϿSIJVb=;ި*P*q#iNb^ȃR8/:{ D -dхiA~y_-@0yJn+13ŰǭK}FtJ¦rTK:Y orT9P-B6SF,Pq4Mk^>݆&y \ 1,b(G2Hh~UEhGHf8)i'Xs)LP ? &0뾃.}3zk 2i$oh؋c$hF\!͕ۄVsbpz,='rs|Wb8g:ђY[k9$}fu 7z&{KU;z%ցe@+H\8:"~PAX'7"ߚXZ Mݷ,Ď<-&0#urQxAkQ5eya/ ?c[ v?/$hrҿ"<P_/`Ъ"#&vax9r2xPtʲ~#h/0ؽ{ȭ!`MW~=Ѭ$`Ƨgx -bxm sS$2ڬc7j3tSKa=­ Z0틤_- 3c oW8Y+KfZ3lO_k12:u0%tg 6YN>BcT%oM T/e0.z_'K'r.ΐ $բRD_?anH_!^m0yBV)0é<)#q>YSrmc8k'gȝSU|nfX,Op}]|Usw ȧ!s,ٕW_I+|09Cu|g o_xN ( gu9yC$I_-H;j_8,=H jܰ&ÔMYe;0` !,a@RϘ 9g 3:8d1Y+WfnN@~ŶgD2.;uٟ@Pw{nawT [mMyWkHZKe £k?\]TV'(}5‘V\Gdҗp=Wm^bsܶeU$e K->Sw@g ?yk WJ# #о0]rVH~5)*πΰ8mƦUh8;MfΙng9,lą 51`2okݓwsd"Jh-a9&>IeW}Bx^ 0 w@k5`<Daq'2_LhLHk7uH}? ]6ѻ>1 UXZ̢UiHhB(Si0{x6 1B!(gUx(tjྫ5 hgIn †@yEn;rCj&%w$ʄY2'6<#]@Y+{ Re*Dc%Z=0_n.t]TkX'Wݐ>-O,X u)n('/h .õ:=x|u82QIEhEHI8D1x}فijQ='*<"(@CAyD牚؃2!Eq DeyVu;gDaǒ~nRN͠450 =|}d[oð˵B.STM^e-{z<|XIe{O"y hX'w/< _sl[V ;x!WFUIN9^-ap@9N/J_uA~xg$óN_xxr}oX=Y ŅkcQI`:޷݋~ihwy֧^Jl6.Iع2"hB$y$ ܔΊ Q=jWlOTB ̮D"F t̍׆_*|1lر |5"V[p;h95H4LҮrM^#xQ1lxC.6Φ5rf3*hdx V=J".i&_{zՐ='D6tMo:Qs-z<=Ŋ& u?Y5f /HIyH$)*nrO=Xvqq͟lD>mfNGW>v [46+6*?Mg]a" mEzZ+ZW0yݕ^dwA_75{ir2pH(hUFRjv;wFM8>B.xT4F0qsP|^^&lH,'b]H1jղ| Tv Tw Ҙ +c8|*E^iY # G{!7a%DUsl܆%*T0xו ]YIqnt \ѐ,ýEcJ}Ma(9TR9aUBiTUK9ɵ pÉq- [ǔ%51S^֬Ո -)6cfᄗau5yAdG0bx}`y3@!.Ngg4/;4kЈf_Mg7+Wl0AH:0[qf$H|ˈt3B:+>:`i"FM<Ț7ڃQͱz_k --UK @]K-6Fԑvӧ<>iT* jb5\f6QnU8Jv]$ij"k,, 1{rb3w'tRqRJoS>ܞ sGU2L/ɤ2Ĭ1>[V#md_ I(,24?9jcRPzyd]^q!5J趴7b}T/0!2VXIl,1XKk2lAN>6M^9ذ_&p* { aM x3ퟨQmC\ҢϝaѵX@ן(J@r ˭AH!|9@;[@uQ |Ȥot%;w2XonP7w!kTTF57 ,]4h=Ss'?,Nv5n^[3GK GG3_#ܠ_F焨rs9>]M ;t h y GJY[Ϝa}BsU͗G~ѧfZ{: i m<39jgE2w]\dy}fٲpϓR{SR9ŊJܜ+cAwſ44yXGiXaĻs!>{[y1Y-,WG=>J{@Of9*"ɝWPAC<~.8!V?t]r`jaA/ gNAP3M$hM9ҘcpSr@7D@Gwy8!)WTl_drMuF/z$Q8~~MN<r6;} tyoDvcRaoXHd%QȓFx5f?!}+cʃ+;pd_y:O% z}b/wKWBnXy|ӱ骢 a8lF݃RDXN>x2&9:t 1ZVl)ǰ`*! n_M3[ >1w;UnJ VFpӠKC&Dk;˓ِ>q71`@(HN.9q&}_Ϊ* 'VRjMpI*D?YxjP%G\{#ߴ,zc 5ȉ EJ+( *<_*CY=(6lUHTv"R= ;TeQ@h\zx?=#HB2>m^5f+<}d! prCpR7zŸv 3k^)|\(54ɺ@0ϓ~syzw sGH4q6;GKDG$08> t׏U*]XWE5l>s\#Cp0Uf>Q vg[ILaiRW6K[I&ox3n qG_$Y6e4 sTlӇo+6y+{v) mP+);nЙq M73L.ߢ&rbg7"u1e!ntkZ\uq=M_udgj@Z' ;AxeS_apKB}W5#?MD86HSĐ_L E.ɮ7kwkm