crypto-policies-20210209-1.gitbfb6bed.el8_3 >  A `mSU]Shu-2(Ԩɐ5<^Uȳkn2q+ypݼc\7pSC,'ZDi[nug 3weɧh!C>w(t~xjcmE{dVٗbSДos5UѰ_3bLLQ+Oށ<  { !9+I? ^REpP?)sn&faUPNpD?d . J  4@x~$ J  p   ( +-d0C3"3X5556667(7,874V98V:NV>mBmGnHp\IrXs<YsDZs|[s\s]u^}bd)e.f1l3tLuv ,04:|Ccrypto-policies202102091.gitbfb6bed.el8_3System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.`mx86-01.mbox.centos.org^CentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end+-++0-*.4.1KG{*$&iKgYVi4DKFOe|K}iKGiKgYVi4DKFOe|K}iIl  vg@_AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤`m`m`m`m`m`m`m`m`m`m`m`m`m`"`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`m`"`m`"`"`"`"`"`m`"`"`"`"`"`m`m`"`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-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20210209-1.gitbfb6bed.el8_3.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20210209-1.gitbfb6bed.el8_34.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswannssopenssh3.6.123.283.44.08.0p1-54.14.3`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20210209-1.gitbfb6bed.el8_320210209-1.gitbfb6bed.el8_320200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-8b35917190e191dd95c4ed647bac6c54accbb98305db25023f06f64585bf575a1?7zXZ !#,o?VT] b2u jӫ`(y,e3@P!'.nLЎnO?5a:?}+whK][*F wQHj&pa./ aKې.1)k$oCE tzʨ15 |grmFE =Ng$sy°bjQ< Yf<]8@a1gt鳣8*Pg4^ J YQ- wzHZ[-| 5 hDtIx) @\(B jꭤTV_PE18PۏmH1vΫU\N,-Lm!nhtO9^A FhHʞH`=g*hR"q+ab"Mcή֖4iW_Xt!~˜(n?i <6j50 $R kgϤMvnw~RG/8Ɏva['gg޽ѫ7֧se.L̐b!6%=N46;|=tGPw\!J".>< 64;4PFte|bsrcB7E\3*5eJVҚ9k6W?(Tʦs$1@il]ȥ ̇{ЦSD~({48`I.#z+K7)|ͅ-VoYԏ"#M`z!,KIOg@4K-8O]s;QZA` |M|NZԚPY;U}K0q}P^@ z2?v_+3tLpO8{g>Mq[Rc@ ;aJ<" ylkIR> `yѨ٠@2.TEj$4?RF>|B.wp>{ddHR6kI8%t'9|`LqzA LKLdʵtXgb ucW,$`{la f h(X5ٮ#،ּQ;Az\TDRv'6oܵa`Ȁ#NOTsD')S몳8L\E)t1?,UB<7qp$pwC߀-[ͯI>uM~ƍXltDzI]=]Uk,YնJoIChpftSbyu;*B(aP0Z>;(WiGѶEf)^an;vbәD7@Z},d*3%2x0FԖ(и'TjIxܩWdX?xqr~u%iXJמтCϖ _fV]'M{ Ⱥ;pJ8V,Z0uFɖ&Sª *a: ׊~PAļ'ʚ9y=TSb #~gguˠT:mlX5qfps.N'̕V(V%h/5kps"R?^ 15a/lp`9Q%vj14Bytm#ޕH>t(R ί0E6lw@LYv>Nr?ct="acDP'Y8֝ߎ+5e1?5_0ZDN?#=@Jg%nwmp}HNJYUY̫BCZyiA dy2xeUNrk닂]ק1:Ld(?eE_)?q˲s|C:NE+)kCbc?Hʱ&`CfK+؉=[dh*THqQ0y@(;\ B#ܐvsb;#.;G; +!Ι{pb/0T=+.',S*_Y0A"|G92d]<"joC;R>}枫UBQU9]ɞNFjx^~/ No&hѹW*$[95WB'Gͫ΃s)SJw:_Ax9-Nteuj8FUu7`pPYӺ>hJdQKtϮէF39vBv/m %$:\pM xS[G B0`Y~Yt% ?p`uc2S003D߱4Zzc(Zʋ@8N wțÓ+60tc>ڵ%̓`Aŝ.8~ko[^?I)OS= q^+[@O[G=aV(pEA°SrjYarUgce*Abh^i-vK};ξOmvM#r{^\@'d6i)pOaR DтPMn$YSϊ9{PfGbYMy^cꖕY m}Z𱜇B_I3[hsr,󕫁m/ |eR7,s^{܄밤Ak",Oi9И=iɘkZW0sjpOl,s~\˜c)DgQ+'PWlby݇9_Fh)OuUhAX}ZQzD4oNX8Ԡf+Hؘ2,a.Z2Uo |gNUȌѹd]y5& ta],llZe #Xɺz3:Z1g1sse7_5oZEBbGz鮠ͻiv81`& _N|~ j! KU0qzlh[({'KXva{\0F"@k/5WK-XX)ě5P'lŒ{mV a .Fn(/8}ص28Vܞ;!dHZI:P/\F#(_!0gBTRhNWjQ HtO Lf]`VNfq焰e.'O۽~»rTьز %IG_ }*<lH.g| pO''{"Xw|V| Y0ޮ^uNfѼ_D[$uv',k k} 1ڕ5C]ZJ#1wtHՄf쟞eYĊ!ƎGt:{e%a We^!{>*HqZ.=~}re8L!8HْWUoDčSA7Z|8`>F+5_]6Fk@1l;*̣ґB5 TqDfGyBAvgͧh.GD0dREeuوO5NLd ־zNQZAx'a.fLkI19 _m;T\®6˽ך̸QU.N>KnO(jze6-9ZQh]; '6J*dMr /"^5N%;/Η}!y g/IU`vu}=37!vuTsM[k]'R叐3l=u"0Z `P|  ЗO}D2;K7 0 L5+`xPp,ԗkEiOPt4gCiK 2}Tʄ^5t@]{r .э,+`">R6s&j5a\7RfÄ^<H* Iq_;H',qީ4KG5KFOۜa( 3 8>n|[nAoYb" 'U MAj bVa TmΑQx%wݜ#q@TήH2$tS}R,ޡp;#^8@p qf!zBd֮@< SLw|i{֗f\?KVy|weɵGEWjj# ^xg[OO@ky[ O4KCq')#lytդuE5>pΖפ _)ݣ:W蚖IaEd0;9l^m*2rŦMeঊ'M@Z xq1%/yrUu\jcڼTb \; y텎l>5UJ0`Ў}l4ē[:)w[#lYv4f2M")Jd]V axʠAyp27~ɶgtA@[ymWϟH2AVy1#v)̊L=dϞIlvwz7NE&I+D/S2:ٮH[$_x4 sk`tC>Ҡ;uODˎOi,i |vYJ>&иJ`s'irbJ`k}'':*m,dS-,@5%lL{b iQV=馭:jw|!gSy,v 7?hIQQ~? S %H5 a렃YŪl++Lw.h5}A[c6wɂ6ԟKGHG~J@*pn*?LEq͘ "]1 )h ;&qg2ی/zc:6o{dhSxm/Q$\IrQw[ԌQ4G5ρ5Oxw'πi63WNt(N?aJGgG'N%__]Lb?pcw##R7$ ߸%:Ρ3úoϼkBjkH%O ܜ= -⏉Pp VCSK{R ļ _-B`X lQ!FȁkFF@j^֑PϽX?>7F?ē\xs2b> $ƚNV^;7k<O!,cϪSf\{2>z럧;3Ĩv6pBaI `!̴-S2tY0nT'^^킷&]-Koܙ5D7ql2=pPog"S̻Ƽ`e8E5Ƚ:Z#%|~jbLc1 +K䣬b (AtrÕ ޯ{Z\68 2n@b8+~={kRH']f+-Q0b}mU;*om0y۰Y^6o!c2/A3:,ޫ2_^F$^8/߷ GA˿|}+M3'=\lE8ҊdVpLdMftj)Wqdk(! cKw] E"'{5`0D$?Ƀ6r~" _t]=6Xlٴʂmͽpe-@Qs12 RT0HzO {OUڤ3YD& D4ףψihp@P>兞j8:!}C@{6/dҍ=Ǡ)78(hJ"3n,M^R|RB_>uɊp}Ԍt2=j2OcNsi x\TQ$]}_iU4̩p;/f7B U֠؝ך]HfDAOGUܤCrr0Sn:;E ~dlw:0$ӒaJ`) Y82Р'e'f#7HE,1@n`/X\RN 7?1k/wZ=?갻ީPlf `;[a.b3?]Uv ڬ }78XΣw\(׏Ocki!7&%켾=|PdN"<]ZSTH0֭qj}KnXb]N!Y,:MbMw< } _GI~qp23sfỎv%>ZF$,x)HK(5~Z3&ˍO@T?P)9о a=R8s"X:[%H$"xe|MJ5~|'az" >riAt).CXrI9V=qq2D9&L:.G^`aaccZC{AXdZPLj̪!QnXgU ~m iݑXEX]΃+C$U"wϧǴ Qp/6JKUʹ$Nqj!" 9\X3/Խ7D* Y4. 28E ^[ݵ^V'jZ6R6Z\Ipr&NJq ^ԀH\* Dy%4Շ4M L,-.(aB'rI݌b@sZ]w)oQ|ij*BH`*d5Z36CbyF;4UlAzD:h˨;E0 -tU,:݀Q`F52RbVq "ɞ0(u~,^7N_qz6)H)'E5Ň#Nׯ I)rap$yDzR6E"q4:MA.-""BNt[rѺġlw9-Sb]Ŏz6C\2|p| t||#j>3DCV8j K,2Nɒ~c6IVGZpu*!Ҭ3Qc;MyZf A`T)Ih EfvVXAƹC'݊&z SHU<?tg[r\^)KE@iX'NSe>HD/Xd #G7#YLx--BgI4quWb|;K ccl-M(孷I|LpT-P&@(; 'hfposxRIdUKQ0FIif Mm/COwˊUFz?:خ9=#@P:WqhP\*uq.dJ y$NM6]^h[9 SM]_=RYﶨB\-֔#Ph ΡFP1-u6G7$݂E"Y,sh%|\DZn [ퟩvFe866W?W!QQ֠} "ބxan7iIFVs17=SxƲ're7ՁS!̤ fK6h1_3|D<2Ht> #|[ iC_`Jl5jxz强}qF(+#xjFnE+GTY†6}j .9/nXby|/}ݰr*؂99TkKSm_("V묏dGTHoOO  k!"~Vj`%,Emc\m*Z&4{q?Cun8C?%-ydc-cwZF:Ӡfh8R{K5fJO8%rOxjxGm˖ >f4±}ЀՌ7o]wm3B2NI@Aмa=E佈W^$AER)R\y+#VpYyx6KJڍm$` >w}^ώX"G)l2f%Qy'"@NG_@ {w$aנpf_SnF>+ S.]s|  w:WEm9lأɚQ5*u_!yZ8QebxW ZbN, fLȲ'ளGߙRf>yKo˂U(g#[=I@'3 z@KUO-JN;H.,ȼeʒ`,f.ފnt_fK5} ֣h& tY?S**[EB2Ƚі`ĻZ1ΔAS@|VGC9qlr4BLJSTK/BL1ߎU$X Rj[*[I%9nȿH6)oZ@αAcu 0p5(W \lɁ OՎCrF8(;8H}RrtL1AFרlDZ+ux`RO@֚N/oBb e9|>K5_Nca 르+hޚ_Lbm߫LÑ  gpܑ(Q)hr&kNn ENI'жTANZmT\߽qodh]me,#D ' g/?-JѶDiQi\:{dH4iƎ[i2Zд2 U D?pp JyR?DKhfKėCi'!v+k ~}4zuoG+-񴳓s/{C'I[ hZB9Q9P@.ěg*= UnfLX'Tنڸ(c~jങ y20"K|;Tq9R$AkRxϔ)TJ,vn@crNҏ&&'(X 6ٯȗ#51 V#GJj) -[MUysomXpd`_)f2Q{)Q۩A%jPUg4֮I7K*4* ɣ|Z%h^)]-ΰQNgMPSw*$Y4m'ԉusY<R)SÔ:r& ST#{0>b@k' }Y5^ag+$e-_?BIJvM_gjI+M7ËZ=Զ@w !^IJ>z68<2XROq6?j'bBA!8{[[&'X|Rt1}9'BӦ77th&s\cYijƙ S{ m-{-D{$$ -ҵ?oQ,ɽql#\Z+zU,tsoXNО$X$s')FaBKjࡪCC'ƀs6F7X25 D=W#B_lS@'&+;J`z~|N[vyLu O\պ@7 \Z3- c@6#d@MC|x O}꼄Z w? JѮ*5UI8!\84¹f>Vy@g-&Ğ;ux%_c"T'ɒih?'ԩ,O-9\ObYRpۀII0YN3Iʓ]앳?$#]y^2#I+vY8`/[xiL V1rBZOrÛڹ: @yz>rj W>2,v[Go&ŝ;d V; {z =ͪ#6av#2!tE|*N OODedZNQs>GitY>&)~SCu?w/.hg~Ej~pcT^NU_'{0!4TosQ K 3FD%-#JA?-C4]5CF~VQx',tzS*iZ*9mb%j.~@m .i 8P;u?êf{[%tLfZ=qAi0S ަ[|bPMyϏqq04WܷV< ]M @?Mhބ _Z[xv$Ҟ2(@"e:M,&lL<ڽq]*$^Y PhQUViH~FٞoNoRϖAk^9]WVDL%~k1cE7}6X'M[ a㬲tB!}.;{\V`4acT ?tӖyp-RMns)$|3 5mpFy^W @'\FT@ʋpOP `Mv"|3h mXyiI'[pK]!"oNv{L6&(>%E5"=5Ughp.B?#5|B2<^u  %yx;i`99^>eGhjtUWӴqC-88E(pθ5~IZ7+ߺLmkP >IzW@\ _ }t=sJME} Z `lܨMn& }vyy3 G"*wQ̆2.G8C] [<2#1Mý=JT/D_7m"=P!#w{?mn"U{ iٝX)[`9]NyAcr?(w0 K@+NxΨ'e! u$DIxaIpi<1b߻wԀE4f2߂FlO~ ["Xu )ER6UKA*"+bS m:a|ܷ?)C<8i#b3mMuE|:댨;%yՠMիMBXK@(SScOSÀX\6dV$Rҵi+[QE^ m}u^&mBM4'bq6<'! ADM*ƮO)Wgc)mx&`5Is̺M8r:J4O=ցEN@{m0hA۬TNF tEY\1(x %)iߝνJGqqS#~cKZS&gum: 8g|7af?y8-*^s:^Wmey.)"UE C ?M2]ue:St^2)f?*ddt*yKͶeP0s~9 sҔٞ#]"5 ;eHsVn5!Sn;*ȔUz䚽TO9c@(Bw˃υmDZ̪&ځZmԅk9Y$̰Azj;#<|B';u,oFӨDlt=gQE{N5 hRIs iDy/'~=Sw]K!i ?DU8gFDX#oJve2cmLya3JgCDaFA܂Zέ&4=ʝgDhrWھ,+V1Ĕ[C3?1w}먴R},Cㄧrd􄯵 S!1=eIe&A*iH᠝u)ɹZIە]~,]2W` M^>YaLGMۿiyD.MTr"M `L$F!asJ{¸svsJ @Ђ*!=U)4 2݊܄Oh~LWePElì,wZ=!S=2"[k3^xIaao=?5FB OD"M/顥#sғY̏y&9l9Ozh e @ wisWPB9 "R8i1xehlH'Q%|oqWÒλUBexp:bbʰ8cPP7LJ Mnݿv ҏa:um>nzNm!ɜ,|j͕>tS?I}yX_Tp>rC )fP'Ld&M[ Ąw­s*un%3~.2kU+=#Q7t'<1;䱐{=*b!a[(qS<»"B1yY5t㵀꾽s Ʉ=5 *e܄JOS˞ 3xm-HԅNx}oy}.`;㶩lYm_㞛/CBO/]Kb2#fSWb0<a␝˸5CztUPʵcBXob+>3~yS-ρzZXUPoW@a-IV:&B:X18gW)e&DTK>".p|+9^֧+WzE$!Vgw%Tb[\;(KqAv̊ _ju8R[/\6鯑-^4F3Ɋ@J׸Ѯɰk_gbc*6I~m1 ^T*0k؂=[0>6hBo/oJ̙fgf3ͨhgCOd4!uGC=k ?Իdm@2,Y﬋.^UkVQԾw^jaRGt453p̚jGUG:(/gީ3m/'<,ZR n@s//i ʷgdڍy*b~ªZ;tbUxd Sh< vȼ%ܥX9;cȅ2lzD= kX^@GP$#Yʃ G{MUy C;O"|!'PvRڨ5 .mvV-d#q?RҶ4ءvt0]bkOoA`7{ӆ?|iJ9k<{Gɓkg,cVqwܥwbJZNCQLк>.XO?AdewSA{TemiJn1 W3sЁOX\3S䦺$9#H|[#II)ڜb6UMBHgVb<^֏P8S{) X%g3S?1^za= 1o[̡_CJr 2w%qI.޷l7syBC0iތfxUUUA% Z-= CaTyh.1BSg5?=:9T@Y.VAnc{'*z?{ʉbͱT=qزyooYm tNRX#|#W=̮-c ͏IL>*YJ(jo %$EjOՒ)o}\^ ^O :33/<\Dic͂ +)[mxLѼ͓m'2k}o6!) 2mhl"ҙG.٤nFșE*16~d6(_%(i3!V%+OwXl!gw#p=/[^E.|zتŏͶ$RUB{ 1 ߎk !:Tgzʕvxmi[?Q;[$D 4_\nHCif#$vS`3\"!1AsRjkZ]]4 K)3^㚖kcc>g[mܗV^ 6>y~NR-*-WyJkl'`.9z Ǭݿ(ntahǞqP(~05k-rpʶcV|/w7C̢1yٛ\v8Z,rCe@{RSFs-bt[tYBY.HTʼhVf4fq`Y2_:ߧRfD4i^;|17KfT1~o*.4~qQTo^9Ŀz.6Zaџ:.;iv.8%L2|Leo7GX+}Wrгcavm[ׯMw@~4E5kptrIƖ8_xt`;[ҫ_Y9/q Ї\yK*',xyV@^o@osXyUL4H)e';';[=̿_P8VMbkvȊ'-\i*1|MGj-z Z/"6&ɾ[i'2&*j[t۾c6/NQ͟ZR|Lc~$6ٳbSC U*@FB l{=mk#f0j X Uג&lA"vS5pd678)VQ/'/. _9d_|˲shnҼR u{m@)`ց g[l<4?>6Y|&v@ӲJ^ ?y&}ۦbSJZM-~ZcRa1no27,!1y D"3'p8m={@]%(pIJnBþ֥\!n=t YZ