knot-devel-3.2.2-1.el7> 6 6`d63!}|J^>j/5,dcb j/5,d SQ*h)hnP5zhzÜ3%SIWZBXeӮ4|I"fMG#c\4㧔rMî2:ͭIFG;\u詒n:$m1>kw ժ\GǔFi4戬}kj/5,dcb j/5,d Z qci8Edt . 9Ę0ּ iCd3BSA[ot7  _YWfQymC_ ־^y<|,@$[6+_u :֩o)WpL$I7dQV{xgʏܒ+TXGʧE>]Ԭ?~F9m={7KV'Z dvʸ"0w=!+|a\nB%?[ Xٲ3'qRWel}go]*Edvxx{85m'EPnoY xZUTR(:+0V$\':dy0>CG9;mfpи[;g0c j^Ɇs ``jWKM0m n|˹T BgOdf!N~GżT~@۳hj%߶:^ܹ,"X wу496lUtk9M٪up>:?d   M &2JPXWW bW W lW W WWWVpW< h  a ( 8 @9!@:-@GWH\WIWXY(\XW]W^bdefltWuLWvwWx@Wy Cknot-devel3.2.21.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.caZbuildhw-x86-12.iad2.fedoraproject.orgoIFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R . ^, J 0'(9K< - tgj U }FX kr  L >#"2 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.2-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.2-1.el73.33.2.23.0.4-14.6.0-14.0-15.2-14.11.3ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.2-1.el73.2.2-1.el73.2.23.2.23.2.23.2.2  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,o³] b2u jӫ`(y.3zYsӌK{< 'PQ;Idk1]B \^t~(G͊oFI}D0l+(T$R 6`qf["y+%f <BX} ֍Ta[|2ͅp9n*+!ٶ2^OH!W>T1_WlqP'߱C !ِ7U>H*ʺduC7-=mdtj/ڞ7b-1ZlC=/k k oU U;Z"͕Vl90)_6#F3uD8kz8") @ 9MY&̈#|XO]D,IO^:eи b{dlnHP?jnYշ2e_DoT0u̽P`iyUAٕ_i,v7YG>v4&ʸ^Sޔ"9f.3νSdpLRv,`PSZ$)ַ>n&KKAKԄŖ'(O]x+Գ5)@L DfeTu@tBi"!O ^q̟J#xz4Iל9.QHdj~L(1xw@쁃hA 7Hr=CW(=`/TYSLqVUjScEyzKYY8hGNKF5=.Pv8b(tOT ީG9]I\c[m₿ UjLë?IJR=6AyשE >ףxŠ w[, ̬(yr, ˜@qf=z.9} QG[lde ZҒ Z-qټi Y r<%vG7.:8(4h'؅$(혏}ͮI{Hh mP&nAq;#)4$4MsPaUFnM' (H;B9H{b$Tf7wZg?HHK"; Hq0ΊFj}1Aa+!/2bFjɥW;U3rҹ_Hlu _AJ&U⨕>/OșR<#2bLbEȀ/:sȣ rٗns#IZy%Kv=>͙9Z86G$t1 ?v1[Zw% Ys/mLdl^-7!?wuޗ v7E킄XM~Xo9W._6.^8=oͬMK?Kl;_>bUS!ڜa,gE? : Wm= |Փ$y f e~ ф4i\RJy( j8pnWuQDdP8AmZ5[,jr; /̌J,נWbcK8ߘS֎ͻP;P%CSM=X9)4xWj|̴Յ"{1v")D{VXb!=RJGLqDWx==51-0VMG/M驨K}ѭ(RŸ qiভF>1{ ˏ`ab-ˀo5cNrT7ԍ[$b܁OT%ĪŐ![$18:/)䞾)M[K GŵxE)ВY\*.N`v3AV[c=g^ǩdW*@T Le殤[A fl-5杝PkFG~М}XNP3CC%ÏNY xVF^JB <}TaG<8>]'vȹ-eY&da7A^RWĻm%]BNJi3oWNcv!E*.(Fbc/_,l};"FVǟZbS[cz}So3/cP͙S姠x-cY'Z$7"0Y břч4$ ,T!GLYV‹>wz=ȂTY_NN+ .8~HSG54 2XNr=d bxrz!Hdx%*h0wyu]^1{/~ņʽ5Y~f:[O1]"MT.u񽰸炾G .2I=nZ~Ycͻi>D<-9ISIvނ<4Ud–>`2BoZkZ+;P:`~ 졿lbcY?ifKMGY&%4ɼBL[U? gK@͵.VcMrlƔqVx6,P:r:a]g9wuP;+?,/e'/{@A\H;X 7F^'_qNWcKq#4oG?KzOx ~Ma#YQi;Aj&O bVrKh.Am![~|RUJ2n͐UvЧ.E.._O{)|fP/oP3u  \'vPh4Q}u6\ }tZNw'@.i7LՓ~_ĮnP ^^~sI$̐y%hœ8^hҫ-Z[j 8+e\m0@ҰeњU=7TAyHdP:D(ӹ^m,:{~&( [LJx"?ފ*M΀^A#1l;0a22z_#s v⚋mab̺_Y2=B éDp מ3 XZ%W _W:Hw?W Nkr=N>͂ND]l 蠄V?a)Sޭ!+WϡD| (}؉Ahfj eN-aqG"T8ٺǁ_zVdky.2a}(Ot LE?Ԃ?/e%%91n?00Dn\gWW[}rY[ՔC:4x2GO L1S !-b\񉌄>e?$G0mę>W{QYU(lw,`VJLKZIVVe*>%qlu@v&< <6՜:O@ڑdir{2q(:;&i ;=kʉ#FYE#w}Y8[}jkxs":坙2U[ry;fGg*jg1=/IuReF$4H%2y&DQ̛0siͩo'ڭb|nc۪ #;\^Q2m:g:k.4Sӡqe,d3z9}J!y-̻ aq=4vd/%n0'9=({WlSZyX|O䶐lf2oo\Ea3 &-C]9>ғKSd7Ia`n"r`^;{Ux{Nw2Ǖl?וwOiR/s9<7"^8\䑭1FY+*~ s;`B?`&fh؍y>LFFnL.F!)TxD Ĵ?ƀʏ>T,kXN/RV^+v#ewǚl=rl=8q1x98 M+^wJ+d0US0-RZC;ة>|ʖtmPZbZQiWeM,JpVt9n;KS.z50Bx;CA)ECs׵d` s˔k{C-[tNI̙ Yqm3Xt=i)K._wI9R|kz[R;)rݓ]3.ߏeI%=bQM3KD!2ބZ=t#,GhmOo'aE b/nr>6.d7Sl翦XAN̰aHUOгȕJjc'iRUYi=ikARb(ALʑhAO^J#?CJlNa+2sâ LLh3Iݓ?A-mU#Yss"(GIytK/<_sn-DBӱV| x0Mtbl 騜CNyTzvr2IӬ\2E_a3AnX9RKQ5:MX>WXGGg+H^EBnfE{Ph|+WVs5 =L g$ q4`2\ּ &cb؋}\ 11S%pIc@ᱱrGr,ٶ{*TiDWks,Zc:2pmZGg!p0+1<}R  d\i4|)amFzاh϶ɃW #gN Ap 7NafP)N߁u֙I~b Ah 7 LFc^VWÆ7 ދWtGA&[ Xd` @b-yǓ[%o+#㬟r\J*B16~FƶwJSO- {J|%mCMFv۸+2ۗ$h 663@h0s rz~ClݼBFݢ|AI d*ie7,7Z|+q1䣴SN>P<3at ˾w)kL-ʣ3LR#f3Zh:C?8y.M{K2zJ޷!*cȲU@ەVX gwgĭt )S*?cg37-=Q.i,=r%ΈZ(8U%xcQИAjR Ki{ɘ);lh؏NCQDtMY$x%3,ҕGJ-*R2)t@S>{b\Ȉ/ 1a 󽹎?!R Yu|x vU 3 1jU͙] D-p:οڹNI UI-\,Ƌ-~csE4迈G&;ZkJP$$~dƓl/RT-5NṼI¦'E}‰tץmp88mfje@q}qHrm<dGG5(EQ8ܖXy* b*v]e!i7km1 m_]0 R~3Te+UZ)"!,ޖ6Vm#\?Te.fR}5hr~l|σ*o.^!p f/@ܬ?\*CQM֤)zB6vTOoΠS6 u(mm \̷\n.# +m+qU^W,AGsB{@J\ط5t836{!31O=tݴxePazk&-ҫsa 1|]bɪ%Շ-i94bJ!t_!4ڕflYjn1`QhBI+J,]42G$s5G:p-I3&}i70=Ӂp+e kG+$(1i[{Iٞ|U8d~4K$e>ZU<5ȸ5Z6JU_pbrk/t$]]nr%9\ H#@Y/ʟ]9J4_80 'NYu]1KW9@+'ŞVy h\nzDxc:F*r+f|=f`* z~ݼ͑!\==$T8y:ɳRu#.CI39ׂ()ZȱU/wz{R%X;f))<~228U׃|8TӋK>.Gk4GEBz5cX]lEJzY?,?E\8i2Ɇ2@|oNI?@"*/BD Ouw S2{gЭ4SA#TC, t& }X"V>#&ʇY oƆbp<)ͻΰ5&l p>C +Բ(LmÌsNaWzI-Eg?aڨ,Y91}`Ks,JTwRyU"p]i$cmSYߣӓ9V\8] ys5iK*F g4|y?g1ɍcaOEaԑqBfk8TM*p¦&BO#p~S-0Xmb#up iMt|4Vv#Y,VԹݽz͛= 8P>LE`tETW1^!nsW"HΠcYo:OnZu=\R%yZ[J0rIEkڬVJb{1;O::T)}߿Ρfμ>\?5vu>C xj pj;Piec #тbu\xM C}9rzQbaCy%(tK}*ʉ!~y)S<>%c%hr-- b+k-rv}j9 ;~21i ҪOzҘB0V*b˙\]}/Ph7+;]&'AW;?3ufNii}<ru{wTcƣ x+SDck5s^nVdB*™o~g7җ4pQI<ש8qDLE6 x`|xxK5]~B b֤놫ŸS@T&7!e ޏ)g4"0c9US&41̞@֍ %Da ė`ALj&b9. d?7L;q1HmNL^a_hDUZM- ;wFˁBa(ҙio@=êZh|n&{A8$z' Iy _աesH#%BEO(KRxe߀]6%F9pNoCC|eIF]< WҢ6h#L7rks@f00:gŅA?nd ,K=OKˬ%TA0l>Tcp589y5*ޕnH\k%&k\&w4&7T*I=Tv$ rmxOuέaZpĴ6y.F͒pwy1 a'%+~.(Q#y D3eu2}&i-0K jmpR0:>j@9}Cո&Fo\$`v!U-LNbM*TݠOqHQ`jiNp{l6Chgp#o*W=WNXlh(O]?QTSuCC=gjϟ"#grfۓe]l>?%!Iv$ER1beQ҇xOO\w"ULv'qC?FjD JFraKNC ֗ZkCgf,Lpd 7c4~e2Ft`Äc7;һѦp~vLlҁ^*-O0':BkeOs|&|Dq,䙶Z@Κb[ '#.Q 72Ii6F])K1Dm&֌ bHpHwc; "XhIM+~w\Se1Q 0,fh`CWS#FI?ycqUcvSrf.G| hGAե?HqӇ-x9fK=`A9yR ƅgp}sG3Q/aevf.P={x-Bq-Q5|㗈yCPfjD7'k{Iy>YSu48"7JJMg\/P0"ٛ|l}3N%]zs]04. BO=1rD89`?FKu5F[MǘA|nĈ] m&np]kVя)nVK:@$A@mW$̯A{zBXZ[ SFϻw~E$  bA:+vlM|(gQ bWɱˑm`b`8>wŠ/rK\Y3 ?I+)WQ8wŒ_Bӂ!8WS:5/y?BtA덆IR~=I7;7q]b u=@1o*c:>7u PQkоoYAem9\\&I@=z ]Ju9qUGC5ޚVW_ȈM|)Z{f7mvdvJ=p:ozmf![{}_nF݊wT˫m. ќ3?8 )wXE^ɕάo78w'Z I)nZ.EBC[)GG4‹G7n{1ѱa *FK˳Vk0L $<vH+A9f̋ݨa\â"NiZofL=FUY ikdjxOw"<*+17I^Ozp%,X*=4vPX܂p_KzYg-ʶ15cl59od-p@z^pn-;Mr!׺ʐ1(j0~'n՚2>/9/0_ e}Mj7|ܦM(tW:/'N6dɝJN$SMP!!@6de[A8cϑh8afMvo3tz&ad)FPw&~wSupt"ݓ'-Yz ʻAnRx9ϫ:3czA ^v<ܩaadWnj>W&]WAmJ+̀@`_dr0ՙ3*%v fm+ׅȾÊnb($p @ۼy4č p_(]_ _![hGj85Vfcqt;쮋dSu48#$ b&z WYHHQGLm`A*k 6]H x{3$UGުJkL^X/gP_%# R9,Fڒ]Uy6B1I("m1eIJIg/uÏ&X1&< ;& }FN#edlYRɶv4Ef>5.8CHz[QQG&}0RnR<]Eɒ\ڥ&]^P8|=ܿě9DQh_#ȴA$DĔRKes 1$xS}!̄9V,7OT|"_bcK,&4,=3OxZ-Wm}[ _I1insq QcF We.;r H>+ڑo7GY_h jثWҁX b9l&ܜ]qHj71$y>ή\yQ\c FO4.H p+[.\~XX]\e&:bh}WG Y?1aN:m[B۾XeN`C6RzX2FG8d;B 02bQTcB0-ji AUPC]G=PR; Z4="}{ O-1g3I9kad3/[@V/m\^vqMӸk+lf,KAr\9p;`L #%U#sfHj)A}#GJFe6$9lG"hlo-&c?N {ɺ*MO}n%+S:a w)!A/E +cUN౸8gMWyog%2DORfh噗/bǥ" bp֒b ȋŷkZdDCY(]cf%.X,ʶm/T=|vY}cvck6I1+7Қ#NYsyQ#~atLy;5t^w3I{?d<9Zd$iO1~q,bV\| "0# IL~~m R`>D${֟ i2D?.Җɧ5{\ihp,BLt|,UgpZs7e9:gS=)ϣU 7Wkfx.=Ko Eӆ%fpjB|0CĢ/da1,\β-Q{`KZMRssJ2q᱘ 9_G %OlFu{Ӌ2owXKo鳁Q/B6fn *vNӥELrd>/d2 V^ *|âQ r(Eo}fA@,vK iR^q]Qa=BCHL KQh5N=pfs^Pђ4a \q8 |-Hu!E-(,L`j\>ոZ^8"ɇR e? 6HԹ`EEfl]Ċ]7m7B(^, u;3MHqc9d'12Q%0p\.Strד֢ [sCӘW7)c-?~^ yʑ-(ծ*<',Ɨ [A-p&NwݐbwJ2?G(F')aJ=vfI"EӲD^`,uyX޻) \ ;tۏ{?"LFX]l0;u? !4#&!* P:}Z=paSW|˼^WDntk_^a  {Wc6bE,EGD"fhEG3BSPzA1$u iXE\^3W*6mjPUw8GA T!͜JuXN9Nl_2xg^+W*HaV;QBLYHm%}Wykf:lwl堁0̐3>%cߺ1M8ѧ yڽSEqRsH iXZB˿ce`|].$>T>Q?NkoZ,;okb|!UH.2goy>6ﺈ;πǵlE+6ќ'g@崽O[[DM+wCaܧ MpS/fCH7d(dNgl|(C UΉ7"ASWK[ex B\l4(<43n 0c(NxކƮyi)@yG#JĤJ{RX'?'ԻKB.jQ8bRlg8?D1ʞ xg*$p :myz''Ő,5 ɑZ)2?a0.8^IfʼnWh݋%}j`Zx.uD8^F4,Z.t_&N{&ؿ #qg:$:cDVDSމ {$;ŋZFWfYw^va$l3s#r{DYTehuX<.Б_ԣ%Bm }tmEXTWFM]˃Xf25,~k PeM1@JoAԤNT_XEC~M̽R3Nv9G0إPaw,HnmD@*ḤqLK8 Te3'1/&S'u<* d<dO}Sv"o84h&B)T?%.VHoU4s}Ը?ܐ_~S.gnRߊrF*Fӣ)#J!d):H&>^2cZ2A,j֜x!k]ĻH}ǂrf売`AZh9Df!)~)r? GB[MZAc 2ߪ $!ϼQ _4V T[)E!w0; <ԫQI-_q+'!^__W_.Ck1%9aEv8rPlF Qhp@ޗ쐍cnJM\qda%LqFG@K0  D'LawHmǩ*L2=F;D ǙI~"lO-O:E ?>UE)-v6t u^GdR)nQΪ H誷Ҩq ~EHʉ΋9ر_)\4 Ieņ !A0-uQvH5Ipi&Yz0DW.}]I/oVޝQ{9=f0 tܾ;U}-u.} W84LUDUKI ?qL7lx7. 75 )4ZAp&wջht{+wJB0$n /抵}Sgڹ`?3ǟ ܮ5JCwau۶ه,e"\,0({ՍdS<84vdL4bdAjs G23F}~${Y4ԑl-_vhE֖S/mqJ=+ҶU\l<%$,R̒qaʂ=sOs\[.!ǔ3C^C'Nti'Rzx"'rOe4db%nWd-xz6uvj9(ƸLLP(0{mtB7`TwU[ J7ŏEJkB=%S;WNX |&& u,ҼT q\t_ 1SlDӭꯣm BYUj+ 놞p"EFW#+3o>[hF KGyKUVڬ4?scL7%;l_E:^ = /$DV[*{$_u_|dsRhqrXN7AGU{w pQ͂KkK4qc[MzkăLK^lUtӣiY'1<85lVhHdKl\^8p.5r,u4B"jQdAorhRWEPogfE4HVEB^7 p;\.qlI蔎AaDԑSf5lKEG鄡8SEM!{xX.h\h%3f&O =&}l Ec)Ba]I$rEDanmC[5hnj62"Ko+;₌hx B{Zbz!bǛZC 8,uC |cb+ &ăuK };c$ v-0T|5\][05J\~D $y o/T K = C4B^`[}9f e\fE] -JQ \'#zrQ "6}t &8٫y ږUr#߶i/z\<w)XpV n M!f4Du`H8D»hМ56 q-Y|ݵ8[g N-F-ѵλM*#µ?br8);jc6ƪ~gqTn߄Q{ Ƕ}qje|aRHqWԡ6$EVRBQT\/394狎kh,h[X\yO ߘdSxALQ.Ů|S+.Mm.su|fgR=Y*!6s 9&1(x+g)(~q+%,3;xW EdeUpj: ?13طG0;O-DOn0> ~G::ͅaw1m ezw騶;x>+0AJyONL TMu}kFrsp{ /EoIkN,AVw \"nWOaؽ `> o = #J8wъZd{ֱl[Vĸ2F*6UvMJE9"M@wpUy3[3<`tgdGssAM !.@ M! ԕ$4㦠5%yx,⍼smiܨDP0 Yʤ"0B4^CbUCdX=Fr|!3w2~ۚJd%hl-@x )$2":?u^%IQNH@@gPbZF a3H\ܛ EW爔 tFkciH񔅐:mكifW uRWAJ2@ R593cxSYˮߕsR!k& 7/&2CQz~%73= l&oSLb.i/EQV (81Ow܇E Qe.q&%ϧoGI.(ΙV ⣡4z-Qsdp`X0wL+Ghq`- r PI~܈Юv9A^7!Oݱ&3@*W/mi]a9l`2YS=Ȑ)MskX i2^V@kUeQ2\ϖ&|)OzHzүKǫгodx2X,&[#F#b3{˥kw6|NєJII ȪrZh[;f{B{".0 ˋdYain/:oŽqnZBmsOMQpk1< aY^Χ-P| va;Ÿ/ "Ge%Aݳd|E(d^o NAO":j ENƘ@bcCYQp{Ad-\Z{+AW͙"#s`F >QO }R(67߷DrEG$5Z\?сuMi6nmfh8}2D>3>.h\HXqf^_6 dL49k62m " 3KkT`]=joCn-@Z;dtI7Je7-Aa;no&]?)ⵟ/L;Hl~{|qϮ{Q^$ang&wIY(wRf`8ǜ'RQSC;a偷 tt`m>=**9Y6?RpV]&952ҷm .=s0U7u?rfYTTxRQUMZYIeAMtFn9xoq [iH.O:}"@ iñЖd.#CXWx,u8֮AyQD7[_k2oG6jÜ."GD^]+ m,\a/cY*|z{K+Po*>,ڢ4Rl13Ce.>|L5(O@v$㲅k!/;8?UOK P2浘들EڹSs^\Xt@oW!rT%xQD M'0hqDAB1~UUS.4Ƨ|je02:zsN1g͢ãi0MiUXI3', *CMvSqKØBW}CIORJ K ty WP "tآ ~A2p Ufl@w-|lƋ Ǔ֫:_L,#GOvoZag^UnNvTc +_GZ5?/!F%iz.( g.=Sx0]eه',Pu=Rf^g_B($gk;FtQÊNvN@烮lՇ.ԙ~Yxa}1t\41{;{Bn!GCu\zv|YښP^E}@HKz- ?XߣiԫY,W6=K~{AC<,Gɩ H@@WǢi32# DǠP-273BUR:|ںu؋_ &K~wm&5[bmy  Z~.4?PKaB:RzQտħ60hkH:`5svԀfnfj&ju_r|`AbWƨͿ`ȋ٢q8499jF{񖱃y[E{IsD[8h16ቲ/lM!T 2ڒQ@q譿!gT'k ~(J%f*j"ƏR)7}~8>&h9˫ 71KPi4;wT 6)aU9!)W?k/Ҥ' p2HSr7 HjElwK@hnSc=yty 5*~ 4}t**JX >{9Kp&(H$vN>S{0D"WÙ6z^ܵ*8G14/yH"e[4!/7oz&j./2tGSbmvU*EpcocQNm^ dPЌcDKEk8U/[_* }ljn *В)#&WEU@C5]z"khím1RW(}XmDxLWf7̥_ >f_fa^#\v*C0=)vیyqX0Ew)kM7r3'1c3aNbіe3me͆MJ֓-wk!+QF UV9~%ߓ$L\q1 j.|g%!a. @x24N]Bo[giZcrFG҇Qᛚa \_ˆZ=ķIA+.Iӎg!:&7Ȝ8hE$?VxZI}ѧiIQ{2"+Om}ѼuHbmsSG}RDQ]t1 rHH/JPH먚P>(ٶ$,-t+&.+4)iE rkݼvk^[(<#"BF6K{7J5q%y"Ѽ' [#A- eNVM|~^: Gtأ\yh(,lJON 0딦7DaƙZf:z;1 %,tpVPG&d*3b4Ĺ|$`}jtQ寗 e 1D y\|Z`I mܳpT^.̑% e8eOFdlep9~E/Z3X~̞%{֙ƓDSa@jʢ71F7NܦZ`1(}"?|Ÿ`BsJU. DWp "<̧b] 1x~ 3޼~Av 9ݡߋAh6LDz}D,>2'Us ˥!4$H 6a+l% A%sANn|֞z~8ЋD/:NbOhwp*)xPn{@S=u!~ T}=enTޔ)N^4)Hf26(UmJ Wd)޷c(񁫬$&u}4s',A&ީW\Ь63'[>Kyհ7#fXAiqQ΋`gB5.`*_@y1%^6r=o^u)!x4=hLYP;7Cv&Y`#lIʂrhky15Y6 '1 y_;k!n@OϠXڃ.+Ym̈́v:O?&#Y$_yض]eVFUd^|P9۰s4&[v\vTSڂ3PLM0>j)FS8<.h֘"IX7{|`R]84|!QlTqD ~&&}+?cmPH\q%?'࢒B)7R^ \QCO0tM>}u#Ǝ#mNVe#rF8+;4=I4l'ݦK&T+1p+{Q r! q6O}kCM3c% 8*I|!8Ʉ86&!Ak Y&4g"*lk H GvL$ eԶK"{;6N W c˖߱+]y tyJ(^AIFg:a<ʯ6V5?!5>>S!Ð7AniN’k-k*?y/>507Y%[Y[z5o=}y ɦJcu:m.!C 91QFQCQԵ-|AE#;ݦE/:doN=a}{ ZZpYMUЧ "'g^Z{%Ÿi7)Ӻ|vx>u=o$mDU eS䔾˱|o΂m#بiL]"Q&7iaYԭ_'GxrN&BcVe># zfMGj#iܕrj(yiNS^=N%^, ^+ }Kpq DrNa$ $3[f؅;P5 Fu\=Vic=֊0T"uD; ΓZyFtjOe^tƙI-{>)op } P6t .5UU|O^Yt4.΍R`>_ǁvbUr ͣ)dq4MQv~˟I8ruDɥTVdIG2}Bt=N5٢KB^ǓjR!fg[_yq] :x K2D\#|;R|[(r[!: ,ڢEۮ:+~}exش.3g=#'VR*?13.dFPɏݷ*Fq^!% .5I_nFX,x&*g =z5Le!5ʑY>$T!4p&ZC~7eG[q܆Ȕ=Էaf&Ui^T#Y2tc[kX[Z:|B 'äͫ)J?D^ͲIRqy|GUIU2#X +ăNM5:uBI[Ţi6`>Fe@)V=`FC[~iҴoz.C{'.;6K>X4F0{ 낿㋮3; Qe955m2JE'dYc2g ܯc tT˞;Q{jo#Z<%&8WvggKsE{!.H#WH#]r}ߝYՐ8rDZ`Zwr^@x-7> ȗǖjE؂mO=kgÓ.%ztzHV",eQ t>r>lە8LRE6RMᆌWDY!֝ yS͡ӢswZGrviߊ$22g-Z7Eـ{{W~r$oEd5q)%7/qx NJs<aͷ ۞TA"ySsx|I_֊K[v}W0roGYKt6jTG/K0qƐq~ F`"5ϐ!aǹ-\vdl^rl~-h I u-!& ;׆{ڮ{(YJFߏԃz$ؽ]|vh%C?Kw9ݶRE|ݵ Ѡ8q WHYK x؆RT' 5Xb2T賀8b>]=lB1/D9S g"X*&";I$o]'EP_3@c.awo99.h4@fur^Vv6:Cmm-fxX/OgSE6*@u3Ԇa]Nj:P-J~H&W[зU 7:>dM!C{aT%?/"w2{zcy2 R85Q"!Wy@r.(.dѽUhC HZ$LE7b>_j{nɷ]Zlw4R,%H꛼F㰆Gb `˂̩Ql.W0@mm yIz{ Q)6e9L}Z]}PQPZ\騐"aD^5@m+LcFs-͚ VKlꂨQeO;fCGYs{:j c 8pgu9L,ARkӢ]. D<ȬEz1;=g>MFj;RŐퟨ5xpRv*qᩝz,C3zlPag+dxA 9{RVVCH1c A[nMD'ĺҋ,Z,hqܛ݉d(QDd&4C?vCQKJIg7p9zA*괝yC&ochce >zV!:\To֨b3>4ec mlkw$@@]BC|֤)v5Fl3mBT< vP \y#b6\+0aZPC aI/)No Zw.@`Ç Ijwqߥ3t1/W &@̮tdZ }I|c9”Q-EF)fB?1R .wXSRѼy30y$jAu!=I?n7 , rx 1uҽBj0]D4[(|>Y({ ma *5YH-߼J!Qnl zvr9~ N5> !jax1*!N4œw7jt $3[>uP2kq^M k\>wjR;:DRACKKژ٣lemnw?Ś$ֹm53bΘ| IpO"1 :em݆AR4Oňy!<>7}%b7C4$SA|}!\j<T̀lNpZD]7_ ]^Y.%R oդ)PܪfkIFY n|CT(u,uDT6)Kdw4K^نC@6FXq yy?K+t?Gqy"F `AW_e<3:{2Mlߧ+] w:y%ܓZU4^M [ώP`r ywN╋ Ā.ܠKlvY+>>my: (V6 {Za;F +.{N4|?hͭ Ky1I+Aw[ܢ@qG/"fpjCbl)he h¢:c ITaҋ5VU!uo K&jE#@$_7rIjP:2[68 4u8&-Ak@%IO[4 l~tfr1pOOHrh_Y4Gg[W ߲*Cn~$ĉzDf*~QJm r^GعQyjyⒽmUV4}'8$++;'dkG ߶wϨ }>4#Xg*tWHTA rr/#˒1!AФSYߣm'z&}[":J5~%P2&.ZrM͉1@ʄ>}QNDB]gem<,c^Fa8l1@ /Yڒ h dc[mz T_KA=ͮнlk6r(\p{⹊mfL8&/Nq5K)J'fV٣;X ~X!Ct NwVӠoj%O$m:^1T+i=`CIoy98`N]uXx%VygVbV_?L~K_$sv!9M ܊XTZOz_RlȔESg}Xp2;s &qw>ך-#{sЭ&о53F@g{69C#Ll6S OW׀/k 1rl1LؚDX$H lGS!9\'Px\9Ȁ*3Ic%5(%fNtg=\GX!]E48v~ |9|#Y~c;wQ>Rp^׈}ъP9ѬFXy1]]Q@iĠ6ԙk/C>-R)]̤vmBVÖ͑\MGhJ#HE 4Ij'_  +_,9CmpÅy(Cr$h`hȀDC_uPryqHqNHĤM?H .m9-:U(>.䡇v临0!➶ Ձ[bCBOGp >Jn,@2TЈ[A߈=Z_Xΰғsgjtf܅ȝU4X¶AG&:4chA0[RV0|8.Vg`*[\:$TREFЪ`ڭXы#7 g #N&":v[Zl$IDDm(ˤ8GYMR>z 탯 yc\`O_B>مC\(mQK&\ӶC-}G=)h$SͿ2JCuQn,\DO <0/KHꧠ\wԀ/z`ojjC݊Ǘ]El88 OԦ?®5Xh\VJ^1}xS|sW'QqA4hzBrg|wfh V^Q!4 { BiG](G6#li>ގ^g* ͎.GRb.<*a WYVW,6aDRqDX" QlR"w02DoN^O5 ,șLS&1Þ@sӳ5{P|4XAL ;g%t|Cg3B[*`RgYUӚ&tX]&& gSf+]P*>QԔAfS@"׉|>p",Ml.!]jtBA @d-+ WfkCbj #D!61'$;`^dT9,& (>a\5]qX߻ZGt1u:,=T4<3﮻+ t!5Z]`dS݈Hju콵Jej^wEerWU?v>YP0jF/ #3i5s6N5pL]c˯sî=c~^P_~*ܲ'FsFBsYMKaJR[ZI#Mc싡mvopi@9&Vp_Xor"7WϥpUKfPTaCɀ boD3"pL\gyhJ[mϹN2ۧF<%jG Ǝ,$b9nRMYX6@D-(<ۇFL7]3mCAl pN,]|)i@Е`ȟYXlPx{"~}GNLn"w W$Dф3v"hfǿ!Y [mф1DqeZ~?}N%|eI1z44`-5rł /`К4MQYRY9mpvofǸڼc<夌<.]GePMEB̸|p TB/Te!i_d[ՅCi)x<crH'H<54%y;hNUeVu')+(nAF9']5h3~NWֻ S7Ÿ? Ƚ.ywu$ Dj~ݳr~"4^U,H*xC#wXZT~^>Į-n$o~A1cGܽtNg6*Ȥ5WQgsz*9W(_թ^EzQGyDkٍdMζ-xWɘ팫O>l2mPC K[wߑ"w/89B'tDɲ,mfm>? ӯYHlc-BS2`^7RF^@y6 /?k+6P}LIRwi螕ZEJؓ#[Dݚ%%3^\3 ϵq/#V ?.-*0I #p>g`K$c>J„\Oj >D̦UB-0Usvg Vy7]PuY9 zjUYakx۞ Nٓjm v)JPXp\#Nt%S@ ò$ ui3X^:e"B0+R9qH_v%7u1au$7p#ҽH,쫱20Ђ?+Efqn'_xS+<^HiUuݕ"mY qT+i9pX0R!ȗ vA@;MzoH>Z%nfϞNqYXjo]r1Wnj/n)`|bZ>_Vᗆ>Wf3Z8 ԌPe_L2ppo51lNQJ3H|6ZOwJAtη $żJ5~!a݌LMwNBXzぷ!*,smfkֻ ޻H>"g^&{ eskJ Iunfk9wI]YZqB5f,I=lB- ;YMS/Q8:哾8n+ kFiBLi܇]l 4kghH>#1meY?tP*rK&\QQ ߙ$oBAp^*DZaLU:m񩕫aϟכ".P*xP͡`=>RlAV:ew5ەw·krd}QGlQ 41kPc{FnԻZ6"Ŕ{A2kG, V3x|(&$6J}sQJv3%AF˃/@q}w{J-UJ9f+WxN 5 zxJߒEn/(`4Kh(.|uDKALי!Į([w{/̵-^ ܬ gMnk@@3 n:8we?k=Q z!y5,*:@A&w'g} 1I#cȾмbua. }]e8DFRG{֚.="AGDf)wt%cɉVIa3E9-lu|J##o4a|ap#x> >}Ƚ$%߸r#y~zV*?F#kqL^ P9,)ЏΝHi\ 6𾟿YZVSb'-f[vLvKcĝڒՈֿ4I lfE$#ftJ1Tj+5Bhrhe.X.+NǍokz`K ZsP[rqxxYn)@v cڴdAwOQ'b¼3;X\A 9iZr(,P0?9pgI'ză28qBUYwW.` x@zs+φ͓LAXn ѱ+$HyWthfCpuƎ-fd Id8 p+{416e{iaS mFO<0"Ϣ lhLckiut9U8i)1 hI~4^Ku\E#Mb>}&-WrKXv'!:aŇ!,o ;: é{ml~&A?8/ X2´ǧIq΋\)UQWZ:x 3zV냙Lvޭ'Ш&i̶:eȖY7SOXkeWv ݾ.~DvIHB&KɅH]=̼v{*r:YKbg/:o'0UK\5Sk%3MV;[,7|SˤCO0xApp9X%&@% ?z g{VV RdymI:k9GJ+}(H |~;8loV_q'`||E&sVz zЧpq>ߍX#ă~O~cJwFy! :ZE*۲9T=*\Dt__ך2ëܻ^lhm'7:DUv5(24Kʺ Xio]eG+d}֟ X= EΑK2/vMڌc(O|1BoI;yMNoH) Z퍪; GlE&K5z}gYOd^-ﱧ!f70ܔU aTxr~EիAdD)y34x$'N|yiv)HV 5b9k]Wv+7|SE=q¶d)b\p!I֬w{9}$lYV:`dکc)[C#pbBB<3_ "m#ҫ㢏)ݭȸ4H}+5Z2sXdV )U^a޹V鞚U"fI%qR؎B )Rr([1I:V(VطvɽyƙM,a%3#(sM >'`"_= k^k (V$ABVv08[^aٿu3Jy)JW*;Kdqe &%|x/q[sĴ+d|դ?=^LR :A&wVgOf OC y)'Hؔ \¯5H rV/GAӢG?{+N0~0@Ta'Ǻ-'ϪP:P"h;i0Bex`.ϋqwUG1# etF"%ɥER _*:>X'Gz՝qY({&sTpV^X9q)_U}O'e䐿?ڄg%VWٕj:&~DX ϫUyB!'\1۵M<@OrQ_%#Vf:VE/xPs/˶k3mF~2&Bφ,T%7Qk?z-q+_dfԵY? ^jh꾀4xS@jI i %&f#zS+ =$G;'aD2Xj\j! T:\Ĥۭą- 0yW`C}If:ҳta!hO 鰀+T =Q 0P@{g(Q$OST0@tW][Vxa8{/dމy>-WVXSIɰ'f ]z<[D_~yŪ.j2U-=t>hw~b'Z(όX",sqV F5}[j][q  Q{(gi|2dKմ>o@Y-i8bLFcKdȧQ!81Sۉ :^?~9 .I] j- 2G5=aߗx!EᗹLƱ-#XQŧ71DWSD:t:A-`Jlڷ܃֠I% ݉#gjNAǯ  +![jjC e֢qWvy&l>B:''JSOO!$AhAs|j}dg&jM 4ʚ:+3zٴ_Z75I4)b>~lɅTL5Ðx\( S?ihSHtL} Ԟ CfPDf?BCO}e"~:iumBˎN/2B]#MK V9Ѷ 77$5 x1$#2jmWBU 9iʽ6XR,֬/2ֲЍ"&0k&Q=ul<?L1>epBM`T)JEJ~)3%+` }qvYCr&(̜3Nj$pO+Z 90HUzbgv3GxƹDfEP.//rD`Qa 1CXߕe[>n%gLna3@e2μ2DPEC1ߤBepv\ i2 ,}}VLWJUV۸!Y:f}6MJӜ|38>HRM/ ugوsӆ%z2iOgs &aGqAvyQK'RP- 8꒶ &c.2L&tyX(E؎[TܒCo\1J-+`ڣHo[kse Jg>5@S&0i)u'0;}+@hZl* \2OG)ӊS3Ub/|80[`bӽ4(rB T\C-E|[W"dܼkN J JFZ0ng$-80p݇䧜;d2o|I7|Hh-6c{PhK ;%v4Ǘ63I[Ut})ദJ`Kt{F(-Y}EjɜZ^g3s"DfϳsrFlN%UDG{@5o*Xb9Ubi}+WpJhGb-4"w$*6/QJv#oǖNl4V|DɌV!Í푋>_C϶vAQ 9z}װQɬ!ۯS"/D2u vֱp'>8p}B1 ,4f,^ L(&a~Rb=z|gH7lԨcay3ґQ@_#:yIfjbRu*  QY?ǬX,vP~N!SCdd`yĶNr=M@Q=D6#b702xJϢ͙ʴ9R~C(G\T|7vDvT]o׮bK`by_nڔ =|M ewNԠВz ١ "t6yك>{G*w=Lcj'g3SDaqgu{iqIRJ- M艪@|Rp4ɚmf%|&(jcj XӁ{jdʬbGg:VLA׷ w tn*|R1~ οvhД.zfE5*z ޒm1! a#{ǹ1"͟FVEp%tÈ:Uԟ*j ?pSRvzC{cerДx cP 6[M4(5“!E{438_z@'e Byڱ4ָL1e~aAh㐅\1BQgǖ" ӌȋ;Sy /_^A88C kpϷ6bf(xRkAzJ#7 KW%Yb/K#eM, قF>„Ah#8 aaN6Lw,(t7(^򼰁P|C#)/{XAB0іC)zo` ˫!.x`r|]2cC+97{?Fk0|fO\oqU;̴eq!n?e#=^oYBϡq3TS 냅L|e0\ԝzu \ DP!1sd} dM|sLr]cTv3bȠ5 )imj׃ eSͳ!ML@lUblmA|"C\Ne_u~ű'UDR#i㿞, :iyc&eL.?,yOn: lTVfk:# @&Yw;8{H&8 6BM`L }~G~z2ay9oi;Z$Θi&i>x#<n6TtŐ*9H䭪LOXsU[{h/+濞QZؤC8 Y])U6(l|G~>7;6Z|^6Kºf5RBq\+BlZJ/PtO$݋C~ G{D>^iJYneӀCl * VҴWIwHMi DB- *H~JVbŸt|3]GEn|ԔqC]V2Y&)x<~Y72_sˢ[`5ÿn&g7Ffd+'U"!0=܋-d0,@KPXXTU|@H\sKOXИ͌ZyJBfexy09ΪIQce3DoJl( ] [cuzPq`>6.=18ϦZR7?e͕4- yȢ' X?Ȃ]TD]? _$ĺ+hL0}ÁgJ)X^*gxR^`++C]{$]^7@a]/36hí֓Gl NuUmKR_EҸj;,j$*aϩn:y^@(j|?J]qz R1?.voz,)L uK_#F88}/z]h8רԐ8``RGI"e춁*gZ7dc S*cG@ъ%x p kEsM~KGHĿ2kFkp]P+xL~1s*f Vgܲ"_f}Ab^]WRGA(Hlo#:HkJl!+/k͜!{mb2?wYZ.RnE# %P=hp~G9ߌۻ"◿ct,ȟDHhb~Cnx')b2O+3˽DyJ{zѠ_N%J&1BvT  81?sb-vZbh̤kcFXVdn'`bb@ЂLP6VUɕ@,r!TѤw #"z~I2 ޙcw44\gOȴ{,Gu ~Xfw NˁzmDB ahp>aaLÄN?yDz}&т8V)SG&>T;f",`{X\]gqp`{ٝr3mV2C˃ kF˳ËI%#%sl)f|mS)U5kXMQ/=='5:&kCq_֭͝-J^鋰$CZXD]Q2I]Eyř3(aIn |xTIZxNC&N+y{?i%R`9)`Eʴ 78v<`9U᷿B~mp eR^j|c!P1~UGk8=)|R(,FC̩}Y ZAv xK[&k.EFӀ⦔(1s މS ͛);ijxQt|6X@7-!H gGՋhs4?D~n;##+?uJϑ!mwosq5ӹ $AࡃV( J?nr=1o@P$L}vxkn>9 Ma㶔KdE|Rr ;l r|;SAݭ΅%%T23 0 yP"E)A؈P "w{^γն0H*GVq x Դ^tBQ$ -KGqb @jtEG=I^:ICZ;OB'4P<,^s5qlkRť= ޸<5 L'!fHZ{:۔VxۂY&ߪ50BL=k{\6J/\)d:qv]:b~sl.bz8XE s?q6V$&I`Cvp9}GRj%v쬤c]fUGԡT ƈhm30`fn8~Zt:->FyWF<T %q`AH(s!~Njmؒ1/њ~ۅ}ӰTu%Y<`IN|خ^f|!T"ȺB.̠OyhVM3 :PSOrmL%qk׌O9DЭQ  d /Cd") :e7.Eu71ǹ*RbTЗP,lydPε KOMހVVV@}LTL*fD#YOE h1Ne!V4r|Ax#s^B oTY*RO2%s!r[O3ˎ_\iw< Q8:פ^\iRǝbfTX ʯ}+P@qN?Y `S,neК[AS-pAWe}|^յ6[28ӣu2E*5\zoؖ2_H%Ѝ=FbQMqz8Lwgd݃WnN]l"hH̃ΰ>x :b앤4"%7q鋇Be;ϗqaͪcxiA80y#-¶ReBSGUBfliD|Tw.Jag/> /xYXJ,A(x9 ߦ齻^1\~F*ܑAIw!^1{ ~tT>8Sbi5P4q9ۚ/WfHh;vڰaYs.y9xcf6H{%qeH_B9"eRq5+IF8?@xY}Rl.$-Qt杗[bWZ8sU@ZcQ3dyf2Fe+x׎R[0k@@E$]: Z;٨s{;/+\Z $.64st4g~bP"+& cB%:vyWJ&S\WL!U Nj=D[wׁ;p$v ¾p_i\qm{/[] VrkΑ}[K`b.zo>ݧ llM%mxf f*{ݩv\wtCG@UG <_=Jy\cQF_/nfI4>R1֌_(~?'n;BeL/O U⫐)Js\~u}J!#Z@']_$P~ .!\Ng5< i(14u2 kO?*-dg1j= .{ F߳0㊯%ϥgDˏR/Aa`lV2RF-kfxU 5/$ʙ(H~–#{IEbDpu#Lǥd!ӟ*ɸQtP(Fʩvh -g$ Yu0Q ¡xXM =n ~ڊt`,ͽ E$f Bl7RݜN|bآB3yPcf[vHHoL\$ӣ$u6,6$(vQ2Bqyy0'#[乪"=-FZL-܎muӿŠ FpPSsY|A IH!W:ວDD6*:2uFyMJ`^Y;CWFG`!3Z.U 7?"y6݋ve)'* Z O m- :eg"/Z3.-Ӆ6g>;pf+HJG, gSc5 m`&bLdws}ZGiYކ"s&ņ34MG1+TUnOL>7"ݗ#T3' C-@GFzJֈf:YnEʿk-W F,}}k[mA;Z a2Dș[jLSJLK}`R !e@nBV3\a4! 6/NGV>=2_R lK>pjhF~{Fk}i&[Znɸ*^V7[%4@;BRPYzϒv5m` n׽|5y7anޭ@p RՈVF Y3[^|a y̶jdOWq\@MVɵR YZ