crypto-policies-20221215-1.gitece0092.el8 >  A cU]"~׮|1(>ݭ=X X9b`؊iQ_8Mbf(`c$o?FIwdTNct-ۉyQ)6\h^$a ]͊9{@J}}B [~`qQKͶQ5}:O5 ɩ n[=rK9 aiC(m[^`Tlbl$)yG1:hibM[\WK\A=РM6 a9`fR 16ֹ4Kp%B3|[LҢm{1_{$xҟAƨrZt pbez5*<5 t-I`5v(>NUwxM!5D 77c4uΓK:4Ydkbf5JnApWb]j|:2M0DbGM(_9Ax )OPcX't:լqC/$\5PF%Xao4zSX*ٓ~ :q WvWE떂ïA˲KTzqΓêT,Ep>pDH?8d , H 0<tzd      ( +X-03b3566$67747`(787Y98Y:OEY>sBsGsHuIx8XxYxZy[y \y$]{p^bedefltuPv 4Ccrypto-policies202212151.gitece0092.el8System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.cx86-01.mbox.centos.orgCentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do if fn ~= "." and fn ~= ".." then local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end end+-++0-*.4.1^,*$&KgpVS|)[@DOOeK}^,KgpVS|)[@DOOeK} m V>yZ{g@5AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤cccccccccccccc=ccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc=cc=c=c=c=c=cc=c=c=c=c=ccc=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-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20221215-1.gitece0092.el8.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20221215-1.gitece0092.el84.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswanlibsshnssopensshopenssl3.6.123.280.9.43.44.08.0p1-51.1.1k4.14.3c @a@`9@`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20221215-1.gitece0092Alexander Sosedkin - 20211116-1.gitae470d6Alexander Sosedkin - 20210617-1.gitc776d3eAlexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- bind: expand the list of disableable algorithms - tests/java: fix java.security.disableSystemPropertiesFile=true - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20- implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20221215-1.gitece0092.el820221215-1.gitece0092.el820200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-8dd3499fee2eb346780372e6d3b6b106210478fe75dd6766b5d5581193f21e346?7zXZ !#,pX] b2u jӫ`(y.8ףc9I| i4黾fy(jS~CmAtjv|泞:taԐ\fG뀻Ccv5Ç(萼"NS<$I5AT$/[fX ~2_v4E3be$Oiiś40N۪d$rgtՠ߼QdwwyY=r]$K>w ogR/6ȇ{%8@fmwz~"RXnd.}'R*"&\V@rK |Yy$;R痺Q1̙D׼э(,6YyoudhtU]{Y80 &6gR;>DSўK VA#ͶloܜKᙋOà' nI^zoVnZYzm(}AUx&ٜ ж^ox}ՎRTj޽Mr:#4%ͬ;.TOCvɻTmjuآD[kb>{/ilX+6]ȘЍ@Ӝ*G19FIgGكZ{@B8gBCL31y(fR0_qoB6ZZDXu,7Okh㝮Yf zl%q22\kz3(AWO/&1߼~?&go"OO˘mDCC gk8l!w)°<Ϗ'5cX++GSSWȕ?SuhU~2/H tX&H(9P>IƊ2X Zd%FތϬi‰TGH5.2O".rB,d`B3!Y:Ļ;'8p$<8\!>!viF &>,ˉ&q(x$}) <| /xs#FP yS1{p"v;A,nJ `v!M=KLEn&vA/)T}rJDb)ʤGj*$}!\ȫ=mg ~Ly;F6v~$1$ ;ia 5¦rW֕K"W/\3ppV6 HZR|b;;<]v愋v,@"Ij PI2H"xE iqySa0(p^-eܙX'|(wv:-*"ar9v6}~v[CZ)"Hrs841Wr+Ev"⼏ƻx^]puh1= g`ǖ-OW0!2d> Kg?Ÿ !c#:-pY;jUP}5 0l壩^z$bH\n3pUQɘ ^Bٵ=e3̼ "B/y#Q=-޽mV^~hiXF%K4R {p[4n 2&4?#6R^అ;gfu#(@d\yӟ#6p뗖nZ@,]@R2`yń 9'<܈Ll]*`sUʸII$=(x0L"sMDleR["4"iWAݼ|X3Ր@UX{qfu׈xK"4-5/2K odJ غ^&H82;@ LO$/e˞uۄtx7-- .-KM?S؁kZBw Y_\I 0tٌt\+PJrEU:_=?,\-qc`¼k؃<~9|@ beepOV9 -$;HxU]Hv䚻3c?Lc 2}芩x'\ݡAqr-'yj &+=7iH6=C,Q{q T&UǛ 1HC(%6W,Ἠシ Ad9:ѱ=x &)z* ʐRC`Hz 2ϼÉH +HP(D4.NlH䴮vm`,'ԍ[!5L ^عwŢi r]*KH Xe+4tq, Ѽ[{7~ dݍ.pZ_LfE&Uъց@[$Ӆ/CF8i9ge6rÕ!E'fu7pٍ]'4(M\%JVǃ#@aƽYKR`)Y"z:zt񹡬K&@*54paV,mcB6Kx+Yg֤avؤWѤapCTD`VA zU:q+ ac+|z#Хjߎo"\+z{]ZH[ :Jͧ~5>WJdҤwKe]p"iJts[ݱ%=yFI6{wDŽ@x#˫T)JV^S<TSt#dۂR0uTBs]\, aN7i1d͏\Fe8 )'qxԼ*),y s"}`23@|}Sq=i8|GMnA / ō7w| _}i_R*~21>i6q}`8njZL:Uz! aDOKfFD^`;E|;M/о7K2?@VH0ɗ9UT-!Qro-̩bubTD%eݢ=K@T7Bɧ%éGhU,%w$t#+&CG.t U@)B_|!.ؿH|(m̷̂|n3qFT [/coxi7ak$z21vu#>E(Ҷ4hd!1ӟ}/=yb 8ͷ@`]P ̧ZOfO uBVy~>fr sʫk |KtH,ￊk=/fJX|aш4y;ߑ+ڕO^,@$#'gw#J# 퐶qSOZi gRfm/C 8@@F$6tZb?%ɇAkRB|OZ ﱺЮK,Gy'F@3ϼ'7P(A{显w5u" |!<ā&09~7ep^} JF^<+dxT-AwrΘ]ZUVGWRe1QRg{^&ZI5M@,h28݄"S6uZYY(Fȃe׾H3n!8'89+NɊ^r46WglwvdןITs s"^EY`q2(^.Qng(M6&Bz^~v#p m_®$Wm IǪ/yY/!ѵ 풰Lڠycs>H$Oqxփ.LU๬{? ~eSKnԄEll+/:FJ"|Ersjm98㲥{agXLE}\?fs\1-SY&#*qu&+|ȴoL~7GсZ^c.UvȗmtIXFycۭV 6>jf?j|K*8MUٌr=f실}eC͜4LordUjw ++=^a <tR<@vyᶪ9[UdLOEJ ècF"ˈXmNw^>6[`;i]43aRndf\E@Xڬ{+ITcG@aϙ0z]J{C\l'''L)T? ڝ#U1*мcc>,M:/HJ p4@d5bu8 *17*U4!(^Urm<` + _//j`׆E0G `?ߥY~UTSC=34m?gnH;jIЧ@bMvG\rQlh 3܄(qZ "f0xr0 ' dt㗱{#Qt܇Bȗp9jW5\:lNy_bxY%- ?WpO2Bс"sm&t 4V#iQb)j*:]2zN!4O,Lϰ"A% Sl?h؜p(_N 2ɏm|,gja@Rg\Lp1 9xYTOQLHI8`,Rʯk[@*~*\G+7'AVMȫj6WuRC7cDTmgx|hɼ7eT=$؃H2PxSuXd _+[Č tlX:a/q*D;#:to_ G?sЦ1F _򷗸k]j?yEE l Y/B:e]#67I9O"H,f>6(ʞ Hۭ{xzL !yjc$͂$πKrCn x^q)&\>U NAFѽoy⡧f`wApf3Y&TFKi,,Y4P\z$m"/aRL,րtǎ]G{PM^z[һ{V{1&j|6b`k "t!!ӥ +O(24:;$V4?T9MYbG =Gf]A(nHPN\plj4 Ň2X|GLw](TMEB2 ! Ntɟp9MɌKofANIanPA3h!+_#y2d6 !ةʾ6#e!zx]$N aҀQ,%Z]{U|v&XPͫhhq[|8,ܰRvyH倄2XD}.྿e 6x+`ָf1dk`G"Sbi234{]~׀][(rJf5[ N")\6! iΎ0) G]P H-}1aѴ8~ H1z7]]Hy ') r_x;.I(jPxE="'  \ipǔ%4Dx!qbNry.*y s O2ѩfYs^cz 0ASkȆcVQ5P ۚǒSSme:iV=Bou1+0CƓ$:qݾ߉a>eDআ`pcr~$mQ~>>a^u*ܓknEⅲ(Dl.PWϧo~ɰ|<,E&Yd}*EF4}k8G%ˎJ),,#PZ 4 M}[&BOH`/'xgV:s> ‚%9/@ΎwXK?]O6C \w:5\SzxCǒ5!|S*)Ț :]d[41WVXbewK~&낻StV(R\±ھsK>fn\D ?㐌Krǡ&p"E%Az3I4wFZi$r[F z D2W6[rm zd KRDk̈́ ]T3heKBt)Z,Kfcyлa)f,8vH,UO0OE%.8cP\ܭ@=z׀ Iu}7Q>YzQR ,DÓ((t(K4s@lfM{_"N UVҪ?T>y[V@s]ߺ-Z3т8ۻ^)\ˆOtm*҃y\b"G\o)D%=KO5X 1߀T|\Ir-N~N (¸Tg VzKڮ5h>)=xvߞmG-[Y]myre %/=iuI kvׯȝ`K j0"|zm.Y ̣?3{&_VbFs¿>`DlR˙d79lu$>#BzËq]fdN]@]3vGproz"#і\,$g,BlWQI .#{{b+4y*gPve- h`' {( P4y2PaOCӤT4VyʩZN~#Εox³q $z4_T{%TL2v̇(Kwt/+]tav)@v)|cF>mXJTAi9N$fCVAf2ZTK tݎp8pB(.aێ]ڇ?6Bׯrvβ)hp@63 Z a)bX ^4)Z6b!erB !*`]Q !80BTqnSۅ]nHFAPvlM~eO[7*+ fK"Z!l|iDrB- %Ez\ȓv4 DPV YK|; lp[0kθw~~; s'cI_YQFCRxZ=. tl Irs7@+@+0@=Z'E= (H]^RRDp)8z|,pTn+ JrN_-o~4<k>8fq+ bp)tJDCDssn&9e2,lG1&="K'i\xG%{.N>TF nF+/hh?2k>YQT^ذbW'_{Vj~z6H/`)fGo|)(]5Fhbh ǹ[~6/3 =8UG=>kqRI+ ޖ|H0=Zʊ-h$^,;iNHճ\%&2$jt6s;R!F]4SxM5Bixi.Duz\Ů;QrG:êt|}BUV^sO֦sf5c.?>vPL8BÕ+85{lF&y.JXXߣ7/D}ӫjGf{)p_tMHM忴%^,oU\B/ ILjDzbl)[ay:> Z'hɆ*'ʆnwvmTY2pA8Pbw`z nApcŎy2XԸ #<8zhXCެ`cI~VNb|IIRΈ"1XdԹ0B~I@Uiydw%~):=TeC?ֱ:&Ϟq`lV?S DՊ RZ$!@$p3SYh/ģFwjxr#rru GH;Z"rABS ]*KP[NhAKgT7#U/G֚lwJ[eo02џ3l0+c,)tހ9_7{!%ZG\ᙬ&InCPgl>xRSRlBڼ€DM|׈eE$]7hrm"Ԧ,( x]|/uy+Y٪%`8[u$(/k9-gh M@@ Fxvh#} S3,$? 9ꥩ઼Y ]┠oL4t\8_tZ`׮Y*pIGV QVM܋W+5d(nh |L _+MR-Ŷ,o|RzőaUda ]*GiP"@ő[ܳ,/LVǣ3: \i}M([n=:6gg<[Qp薟"3fO.Lkƭg4 e@S&1 {<`K {f95@3ySv7|A#zIJP@dѿYM/==d-~"}[߃/ ºZs цo{d*Ah -dWyh,J㸺o|Tkm oҐHXZaLuSDb PhlU?&rs/~#PM쳼Wn1r~܎5NC?+'+$\FvcW+ѯ^>LiV^!ٚϥn0d0{qS9:V < O_V>썥4Y 8=]wiY*+pl/PHOJ?hq>4uLm$Y.߭h>rE\0o5WVTGb 4tmuSjʮ4(; h/*qF^gh.p~IGQ)(=;\'/~#VuSE߁/iSn|1#]BT;¤onKQH|\L-ΥTm:BO}IR. 6,_?CQY'{4s%>/>py#~Iowûso-S?Z,3N8F fɴ]A H; Aw#&F2=Ploهd2%QBKbױjľ z>V*@ UEF6+^3gX>trN f~gCPNwm}~n2|k a~XSQ_m6iidnE$9gsę ѠJ bl3u!MUBҶOu&* {v,ds҈!N:~%ryL+[t=>h5ez$ĩD3JO!/MݻbnsR &qKf+IdOZ7$6#е[q E cμq{&,gl`_iwcbfhdJ"sA,.yzmh4@1H<p7 "Uj2R45(oaFΚ:eJ\14@g~D\MTԱ-f6-_Xxēz'_r̮,-sqLX:+V`sz4dn!+#P:͊bK/Zq'$TDipvzpX:L3NԺ?ETuoxj"gċk;.K@m'^!Ձɑוd5Yq}_^j~A9dk)`EÑӞ+?YN>JOڂsr=9L|6`k͝,&<@WcyU?~v7~VLQ2yGX ;MM;6ؒ(dqED\|.z '&ÏCfn୽s -62GO7N}o}ڼZ Sf$%Fto 5}Oåp2U&;4w04I}֬m Ϗ$ LBZ.Ҍ q8ag*lbDxSgBNy耒=UOS~qIuA@y3 r{-p-&(a~VpmTgpײ4)c8h_>>d,B9ZZkHЛ=mbD+;sвi/4:`L[l&#jc-u{:|:Ձ©ٔs k(G@TO1sV\a>5qR8baKk G%Lѳ,% O?tV:F9T Z=|T{u?=!,j@ \X?+\!,8F&z-$ w{lyL.Xy<tl]Î:Ia6,da`RJz yor.r>b4#J2%r&K͒E|պytg: #o\b@yBTT LyժV8/" WTl 7 ?TCzoőۯ?.܌zF\PP h1 ^NCw!ٗx7 W ܍k>s{N6 7Ia}&{E)9:~xϲCyaI4=g6a2A%^6igm w^U>;g4D%𹎗#lXNQ'' $[xl%!PvԿ]}ps(:&KsdU'aR{\$Ԩ*h)Wnq'|q*\7NTP7]y~:^_ lX͚B(JV v? U>En']un "9؎Ӫ$w~kT;HlE f8h{Uϋw/jKWGmam O~ yiS=Jyt v:픾](ԊŴ> D2h=MJ?e"-IOhKwa,-j~r9iqm! BhmolGMT`Վ&AÙe\G0Pd25Fz I첒pΪaE~̬ ^Y!5vяW󍃱96\T P,1cJ^OR`wjN~`r qz;`N)-ex,J,Wˊ;{_]Qan~|sYKbYxz> U8,9[ P].}J zYUM6b,̱#`k*^mzțL _$M"Zr_}\rnPȸdg5|HM0 kE B)V⎱46<+EnB*-/Uv^wc[rWu܈sRCϠ"ߠo% Wӓ&?e㢲8%>W:nM3ID{/~wxD6t U16(jEco1mRuXvbyJWr#TӚ3H@i%lxW}ym vhsRA=|gy8W@m},'$~#^q}AC|R]ҀΔ.= lc+}0y=>zpL?t!z,8Wh ʂ!o~BG缟fhńl^.H5^Gqt 0uTq(ȁ/6^nbLG.şk|i)%B H$JS]vZڵ/ J(ϝ5"ĜXp={rxJ j7ɟ Mm-XNX` \Z@p'R3QxIRg 0 D%6M^m3Oּ\Ԇ9벞p[Ch!ˍ($W?:U*!ZB?u>x: <]Φ|?gfZ |701oU)e]c?bv~վ ÌrzОnL5'wWuyjF+[!ب[J/| 7|kUkw?LVAh xn-`g`PKfC,o1)/+㘧;Rguɪ-ʜ;W]"[s|wrwz(-_Xt'7[}0EWyϴ::x8zWai^vgT: F4Ȫmٟnʜ=)G&Q4@rV> _C' Y}7wqn)=̷#>/+YlDMF[c7fAJg bzټ>&f.U˜4Jh#)͂X9ǃͿ4jvǸR!1C> ?S#Al9T27v,܍*C?|pzs_8s_JV?ʷ|WV\á,Q]DhەlaK<- qQ6˖QZWƭbTmӈO񝿞l%%J.$|Â"@Ok xLXN2uqSF[*.~lI=W˟@Vy8>T+nhm `w 'd_wKW,'>%l-fw39Zu\O8z&B}GRDĊ|9%oYT0M%ӆOZȦ}J%ͦ-co{`b0P_͙a/O?ERЊSae6y8?0] Պa83:Sɰ;yD9|0(ߥ?^NN >~_=c1 Yo (U)7}ȕ0DGieB?iPly!J{N_3ɢYz>Ax:zۑ)ܦ9_9$j%" ΜhDarh= /ˆtWl)&WL t4]8d0Pְj8|9Rx)m]Cmx>U&_Gqy[/&>Kڗק::_07G=!/ӈ@񨟮~5#) VէJ yϾJ,-JKX+ন͏!pQ> wq UMiRN/-1_쁢}mٓEk `ǥ `2,Rň \0䎿v4fiVj^a1[̊fe!d2)|`ꁝ?^z!RTm[di=Pr+\х+p{Pv%B. u"@ɛsLPŮsA nZIt/ʥEGy?P?Z=ʋH~Cٜt`4Tz=+N;(2qJ3x7BYLF;>q@)?nv+~ҬǦ*zuWd)+Y0a glBSơǻ>W؜@sҲ/^,Et]iabty'ʅ(kf4pjjcMUYD̀irreh&Tx܎y`E T`9pdMTlgsk;6>4p Lt4RC8KI2=T=olx<^"c<Ƹgg¦Kӷ+TN.Xi(hhsUQLBk쬹>ã\Z( g*ܛT0yXX-kxţPG3A* ٢|0LAV|.|@u4:lt381St6"K Q=9 73νep5Ny /REqG]eE0ӖE6ǃZ ъ~OEnCN gǾa1ϤKSpZc9"g{W\WcbuAP>>{XqS_i&-4c4a|eBv29['if0͔_1PΒ3LRB NJ׮wkrcLG]CUI~=ڥ#tb<%L.wEœ)'Ӂ Zb"R?iϸݵ z v}i* :Q59m͡ aBvL㧛8rc3g7?(sj) ;X5Ȇ%Ux~pNk\v:\6!ԠdaVY=ф|ˊQӋ%wD+xsQ #Q#j!BJZ~-Wh(% q2`b I,b9usH$^`aW`i^8nB귢u%/ê dQm:yQZu ˎOgRI.>!R& ߟֽ6`ZU=~k/=.7[Y(aO@Q/勽0-I?eVqt1I:X;k;cލl+<WI3PCp"ڏ&],oPxg8N w̝]4{7EmfRz9KQ)e]G|%D>cJ}tQG\,*YGO"ԋ;rM>SfMh6& #tuc/]KO%M