crypto-policies-20230731-1.git3177e06.el8 >  H dX U])zu7p9iS^ՠ w0Rx} 6z~-XV`,jN(HT_U Ɣer t2_HJrMy (G OTpl1$«)cipƇseN}aI)CKEZq8<p[ϗNn\*d"<(LyZg8/'׉+C!iFn< 3YNg})5B)GZBv)>jxU˵5C©;eF0Ē! ymNªNV470o#N/%) AZt`I(#^(ccr /#yv2^YE)&HY,TrE/ dE4/BFX]XtzЏ P3,űM @r-z+Fq.hFh,?,ǧ" 6776ce362ac64d7881fe886ae4a4cc84759f74bf140a7ec6a4e9219e70f9e031134c29b6d9c9d66125381f8d64889269671a076a$dX U][L2%HG8:B9]gs&Q(6L>yp1^mo+|?PV:<(e ~ϩN2vjO^HH)G6e2j mvQ#VS*EBdj4ZTZȣ-XϬVpikv%shVCɃdY ~_8Ub t@H0hcfZAB8 ]tϛHPGzd1a Vڑ 1X14$HsJ `n6ˆ1"lC%c#h&,|KdKrx֤RLJo~6 Mq>pD?d , H )5msz\      ( +P-0{3Z3566677,7X(787Z98Z:OZ>tpBtvGtHvIy XyYyZy[y\z ]|X^bMdefltu vX Ccrypto-policies202307311.git3177e06.el8System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.dKKx86-04.stream.rdu2.redhat.com CentOSCentOSLGPLv2+builder@centos.orgUnspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do if fn ~= "." and fn ~= ".." then local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end end+-++0-*.4.1^,*$&KgpVS|k)[@DOOeK}^,KgpVS|k)[@DOOeK}i 6 ByZ{g@3AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤dKCdKCdKCdKCdKCdKCdKCdKCdKCdKCdKCdKCdKCd".dKBdKBdKBdKCdKCdKCdKCdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKCdKCdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKCdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKCdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKCdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBdKBd".dKCd".d".d".d".d".dKCd".d".d".d".d".dKBdKId".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-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20230731-1.git3177e06.el8.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20230731-1.git3177e06.el84.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswanlibsshnssopensshopenssl3.6.123.280.9.43.44.08.0p1-51.1.1k4.14.3dǢ@c @a@`9@`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20230731-1.git3177e06Alexander Sosedkin - 20221215-1.gitece0092Alexander Sosedkin - 20211116-1.gitae470d6Alexander Sosedkin - 20210617-1.gitc776d3eAlexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones - krb5: fix policy generator to account for macs - docs: replace `FIPS 140-2` with just `FIPS 140`- bind: expand the list of disableable algorithms - tests/java: fix java.security.disableSystemPropertiesFile=true - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20- implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20230731-1.git3177e06.el820230731-1.git3177e06.el820200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-8636aa29b11bc3a1d5c9136ef7408333952be5cef1038e3a2cf2bf00573bcd510?7zXZ !#,qXx] b2u jӫ`(y/=[KgS~X-3?C^*p#+8*,eґLG'f Fs84^WuP$D <DS_aR>ʀ( ,BDV4Ϋ:WfjVcs{]~{u3%u]ۊ _ܫ &uӋ ~um(鏈z4좀|| ESeH ěAHԵ!n﵉|PJ S!Y[/УlD\XBBk4}=!rrwU.B$tb̩YuR q]hH4WA9kVʖpwty7SC6 "zZ͘l@W7fӠF"KOnu? @uۢ1MR;T uVVdƓG8 Z$z<'é{sv3Jxt?XGʆxâ1+/c.B%`30e 2SP%Zkh0vϚni0;b6ILO>s(uP ` @W=88ۙ1운gV6U4wBIf]kԯc`/BdNO}7mw>Y@RK{ݦ+Ôf:&ӽ33vel[>Ik^ʇ|7V{;:m֛w+c "xcۅBٸF Y}F t.cr)3lT]q(;=Y9jFӨ[ pdCYήYY90M>}nu{q☚$8oOvo P|nYkҕTyIL:iMOL+Yˀ%>ݡKb*]?B-upozHCk%RaZs< FǨ_aNfȇ~yIP'Et5bUv5 r#;ETi:Aau)()V D&2D8+Opܵ}&.9ٷnu$ 25VБۅ>S$f"m<|+]1}s]3dVOB2\sM4"Β.4mac7ʿIu V9JݎjX_'ٳVC*<>Om,o. A$fV&R.B}\E?˥z.r\tLg@q1պ $\ajĊ)ɳTac~6 hbxo0I&ýߢpqtOjEe8&p"FÆgt6;$3 %'@GPZ8_G brI!9o;57LJDP iݗھKg:wUo+D 6WFple+T?;]LsnQsR0H u}-t{~9B/s[,Y&AjA׍v*WXblw(j˷[i1PIRnc?qu9[pg#X];r (a(5$ejCz _ٿ kNP%]yA+ *LihW,)i[垍/3hF%hPT"OiYߘrn/ҕ5g]5 9edwiL e~Ȏ?<$Ew30S6t)iB -IlvQͫS;B_}|] iZvv?ͪP&+H >1䲀 &Gm;Mw2nĊ@A#@w/#wV:~S%fhAUK'ʓs=c01`;]߷E^ v(wpwsVb1Wd؇֙Y >s! Vy|!E*/;${B @x ^Zyq^B8  Cg~Cih\4˵xigdXBlSxY/o0nq{}avu555=3f@b\ܣoHovť3Y.rܽd9OM.?zSKVS՝2_.,~%SŊ衃Sg4M;I; 9Jcr6s5Gg=R!3˅.w)qP;zSĊðHa0w-/n܉n\eS#.UaA8)  KY.7s& >a _Qe"vDb̧L/?3k+Z&5 G5!`೩ɲR~Xqa[ w#ϔ\W.FG;y0=jHnCRmpptehm }ΚuDHwZmM|_#7PX׳ЫGtr_""IfM2ns04q c*wkC8Kue*[eG4#*f>aΰrh:Wg /#eCh=Ak;.(j1Ch3h8?fx)xRlAtx%YJ3:[RyRh# 4HW@)tw^+dxWnG٥9|?Yh-a(ZT* q9drd;U+pA6kC: bN\/Nlmb j*˱(@KRA_|06ėzpwJ@Wq{ؾYdT##o}[Z~/d_IW{gX]F@,`3qB2з;k EJ4kl)ڂ#"%<]E񄧷*qSPHoq]ɟǹH3}R(qőNIAf.LX~?Yt{"/y.΂\ N_J &:qUjgY?nv]@tn/j ןZSVQI%ALo myR d YW \x6Is_Q;N' ռ+x 75)' zu/{%Vq/KQVdUKv Q Vs: VK4BQt*|(Aak5pVm9lp!* 6^صN/ڝ`x͉R%$84ä P9jC> hɔ-NƊ6cے q%d dU1oH::os/,BOÀU:oTmWcM3h>ڜ1|`t8]p!5at}T.B5':D[6ΡJMٌ.2Ȫ=މ^Fa|gtO0::`4 J"+/`-A&7:w˧譡,5O9jI?8uu~F;сWA;S8VݶCdNq$ J!,ٴ~SrRv4-3pvkV%zgz蔼Ḙɩg:bGK|Aurɽh#R[6/5|>~: W5  lz 0=Zȥ:o](51-\َ} "aM%02 $m2C^<3#ts L5-xub{.~lZ 萉kM%pot-};17N*U6VHc & hδٍ.%L1{/ҋ^Iy`kR`o+HLP:k|8ReW8T>߂t} '&4.}pɡ+>}Z=WGT;C8Fw %28s;0 Kؾ:̩ДVZ}/CJ>D7lv'vdYp%rv]=\_"[nj*8E #e:2vK8^$]t8_meFw5 p2U `j#ZdJSJNo:]5 ǯ4j各qJ,foj[TPnM0[kʎmmB~qTUa[͒ XS;Q]8 {C16'yu_HHhVM p 2i8=z:A42ά*4my(ċDut+ZyP(=(n:ZPUL h l`lN[A@׭ rY& &p77#h1-xB$h_|hALK^nYON\M"CUt?W=U{<(Q9b o|`8>Ó_'Y\󧄣PE.,"HHpEA;π#.c;:nކݠr/'>Ko us(=LkwXZsCDՖ8Gc ȝ֑\=ɴ}=5e#vzs:J\j4CYˬ=[j9hW$ޑ\f6a]p{YY8G.Q{TN.:Jpe>q| `}PE(]#vHӶA-|"v0-DwXš02d@@0Hx.7 fI *bSWs43jR> NBFg-#RT,idK`h>}--TݗRGwqPF`[e _&vX,\F~`~0,v䧭40 Lox, 7ҧDۥA.X*KxǮo,=bdS*"'pk+swbhH6HN)(c]S˨Pڏ_I\|+})|#gYg=e `Lpz^}ȨJײXؐ ՗ޘ^0RQ Ug bj{d^eLUKx7$O\tŚx`aYYӳ _*Ղ&p>8eƁ ϼq3[etCvۖ !y_Qt>VBʸ itDEnكY 8+w4WtNUٕ=r"kLPF)' ֕=A< Q+s^m*~obo|1)%~5ؖ%SLdϩ@p|h)fnW2pB6"jY(kLlʊmAڎ:?)%ޑUbxv ?JvXꥈ cź:'p줿Y?+7{'pwN]g;[ɐD4OӾU'\&yj [=ҁQCmzT䁶Dhs?HxxN()wTVm5[TwMy SA/;!#5s ќ;Q H*ѬJMIPWkqb }+t^)zZeP7VEȆ]C\$4%r2F+ʻkv^Y-D$Лf ?[;^X@c Xsr\5{S)vzvH&'^C%>F.cc{%[\A %_æ8B×F+`y MP#IIGpASE5 V_l훰`%WH2ow86×юg/LZ >/dԛL}>PNB#1.(/Fzt b(&#e݄,YҙEJ+`>KLhӗ_X8(dl8jd~1^5D|珽֑֜fc ?gu^td>VOA5(Khce2ҷGK4h4} 2l||!D Jz5v$Efxy,ȁ!MhS| g!֔&l=#y!ia]j< d=vp/x~ 9!j\GW&ݰf* gnΊ*LM7EiOסVOPvd7bWgf}/Am.N ewoV8~}S窫|@ %D1U̽o'&s&xd$}>E} 8S2R &QRlU>]:6G}HZsvj")fG6L{$Mf>Tj|W$œWt͸L?CJX{u~M)d-~w) rb0[9BlMkzht~m9޽ ?1P 45嘗02j]]}#}]}goƽ*n|oG;~m]3z2-|WUۮ+'I<<\TDӡ Y- t-tKb ֏@@}(*_U&2LP(,|Z%vbI/[yswN?0@ 0F- 2iDh$?ɕDhlV葬Cq޹y]kbQ/q O08G/h~=$@;RgM8^qrC]Ɖ_2\oB0L0婦GĄٛVN9=P$gLدcV VA&Z˦Ǟ !;SXH^_CxiV u-Ӹh;==%D)!㇭o"/ '";Z6CJQ4i5ˊe~<ɣ:d1)v^LǶZbbw,EYεMs+# _@pǖ.|,՘VM_wQ/!6 ;S0t24tx>Tp -}epo͙!G]8'IGIiW6a.Ȑndߥ_MJ .5OsSmgNڨy< oΞGğ*K(I2Nĩƒ/EJKkV/@e AT8 rcm,P>20~6.O-/5F>nΰpAe`qek_Ur<+W+6[wʟP2 ݈2e]|A{ V,'(¦_x^n];ȃ-$.F0?c渻V=eFr0e8r,~#l}1¼0g2E)Emv*j%aVAtDvV6~1]rԢWR!mV}<,$i PMOs:'ޤ|.5_4nc yN਄vcHꟷ|2LH ڋޞǡ ׳j9iBܒ(-MR}™&yW+U| lMF՛ǰj)o2hpv ȒxnA_s+^R%6N"ƅˊlg1Rw?Yz>NBm1z+|(eJKQ #oxBxq]IƁ=$Ajq,<1ņbrF~@D-ZJZ;GC"}qZd6j<uY֊Q8>b,× |-caL!WR\{YQ@9x|U&-hk2&竼y7vuqJ[.btW /n,Yhs\J0` ex*mom 2HP&z 6*:fO(bg\u;d6@_4|<z&e#xB|vp Rwj6򬔒4^zAWL=lAc/$=K Bc/ee+9"(pQ(dy3WՈ~t-bv|`G*.]iEŖe2I6@YB>i5`]RC`&@a47DtVdbmO+7SGޛCUL;GҘzM$I=Z^:;xJp䍣}o-BcG'Q#v~ffeuoFOc982cZsB2³.i?78wzX ^+e,ߙu`>YH`'A뢌90/tTJИf&BlUs4֣DM4夠"aZ yn2"Z侃Gj78FTڲMEŲg2kNwe> ae-I᧷v22eawHjJ \ &) Yj^B~6!82H`_왙b xh{WIpe LuҽU=lGupUa*efQmv7!t߄6q;*HL#c;_aqN6@Eĭjސკ)N-{bs%87K nѫ.1{ÜȖ 4bHrg'+K;fʧ?ڎ r V&c(/jkkf22ָ*Q_<J=EhjiE(^m.Ъ|uzK!#P:9uk3Ld;K0Gs C;x&ur9&2۶.ݥ#._[xe+0!$uߛm_U߹f&~ꠣҒUHa'}n;].9Q@ $ ֕BeFRf/Eb&Qcm|rtHhGp~2z|HWz2;e</,CxUuQѝ DPUK(gr(MſbEVxB$lWDcOGha2DE+ v&QnR&[r&z*<*<C7;]ِ NQ:#I~f)kԝ֤j@HjϚ;re~eza]'PNN_E#e K< Wh2HB(?9i}%x jy !TIp$-9]X'xt-u7oU~I{?fn5kM`,uߢՔWt]/V/dG53ݠ$bJ5}pZT+Kg7!]WOJhW$bgm;h*#}ʴZj=%뗡VD%̻ %w۴:rш~{y{;,@ 5yjJGX\uWV=9\ Tr[%F{J<^^lc[ڱ سu㿿1 _LEVӤF~FkMZKgσgr':6Hŋr)2 XV'/ԝ 9Q If< `vl5ׯnoGW`eKdQq*,1ƍ7ʰ}jxA aQv.s yP+k/qZ0"ҿ*gK^ҏ=I1ڼۯŢ:x <.H7Œʫ^2AMЏ VD=<ڷ4t^Ƌ9Ãta]聺fbD(wݮo\Z;A$AʒFUJtDMWudԟkQ 0=Il~,-eLr t#tKyח_OTlyJ>?| w qIn4pː~%pjC_XlfN]1\fz`ȄA)QʩJC:93ߛv:L*S_ؑVJs:hH8 0"Xxm9#Շ kWvy?&8;{ARWϷʪP#tm]2M4g^)Nih^=%fM߾[O"2љ3Ya< ;1 s&0Mw>]%NY>,cW%8\tz(@ ~J]f4nh}d`o}So`!:U!͸CXD+C ;b@}*Ye`:ΆkB1{؜Xu"a%ӹH%b-az~EbLyjt?ҢnuYah.r:)% /Ei*"+=qxlAS,u'/[U~q%aw:ν,o0o|X^f7Q]DW-(fS^^S`NzI/q+)u@|:ȥ=gϻd~i Гm}Dd%pK"-HSќuxk}4GIFz)r9PT׎9G87Y;*Y:=U(Ӕ뢦.bgaMjNeb&~[)y{Ag/YO5h Aj%4 oD7̯_̰%Fqf=҅,>P2IRtSrԢlTnI9ϋ@G4D=s87Z@[XߙYAj [}vUX7dtPEGUkKmb*RDlu)r p`u@d^r:1E,0KiO5)/vm$J;h=@So>JR(d4غbXu3Ja +ZSŅu+/v F^$/<継nAյjw0vY3p\ʣN+;qm|XS(E uz#"ʹNXV([Oˊ_ʿ.tgg)/y憱5/͌׼vp)r.A~HQGQO-hɲVoMd PDQ?4rE6Q%|E6HwbgIZeWۗd7).t^*] ͉~;ʻn@U@?ԏbP?;A!*肋 ?;0ucg 0n*FBCBdZKq`?LHSyNx-:~Ϙ $KIuR*‹&wL$0|]Xz_pg!&zm :ug(؆'5a ~fE)뒩I/)ǬU')q<- :dXx T)g%e[ՙoTd/DY;Z]_FGL}#e˜ք卡9f -‡^){y 4Лaц$,2 *I~)f@piWQW 1m0/Z^ذ/:ہM9Wi42[m2x;F4<@܋!]ڢFp~ۋcA)Brg@f9kCirX=k$d i2R}wS7ÌKcf9$dɂl*R5,C4KFv 5 ?=#sMlx\ǞEoK؟080; yEƙ,;d 6Xʈ;seMukl?G&=)|?0[q˳2KD: Տ} 42V;X30뽎Gp^;#4keWX*H(B)lp9Xg1םK ]"R'ܖ@ "N(DR~LKz8ml3EX-):6= vU0;d`<;S: ĝ696j<-D揈`.ۢh'ћ,-Z[!r'm3Gy= V]18A2;JsØ Mָ xZ&р:#Owt-n3t'xm3T-IN˯ΐv=-,ЇcdJKZm4GY@s Uu e HsW(6zS'e.zz -W u,9T>_: jHxey"PYn( Urz~w LϻM2zٚ$ep Ξcn[v 0S\h[k֟uNb]t-TQ؝uWu/|b6eyE;މ.KQ 0ܒN<?څS!|ts\J&HY-H [Ά g~ԞcݘOEWYk+w!`˭B~aNJ}nΞ~C._[縰eavet3a*-KfG)843=(?*2nDfS}C䊞u^b^Lk 6tw1x,{ի*swr v.CZ k8:dg>OcMt 68jIa }!7\1{/Dp+ exeO+>k֧q2e]^3ݝn .'^qa$&΂aIU@|N"!?_S.yt0ŹDԸ"?^XSˈ @W{mOEdfѵoFO=Dc79+.`HbE:0DC@~%QT·Ԩv kcA)/\GVkLs/mw14Z hWJ9@N;El>f%#HtKwٱOlխdj /`jga7DŽB<۷kƐFccf**(uT ӏH{d :2E_`wii;:,@ߔ;#M`f% EY9u۴WiF+Mٝ(~ J7TD 47齳a"3nw):4@Sn8ut*1ݥdCgR*!O-JJ5^ETD,^-N boshtkl;6SdM~!iD5\$3dǟlPK |'\6RT\z/0*𰜓]iTeLzIi.p&3=%>25Ιy| Wa\׳@#RMdaO6@ӕ?^4V}aJK#XTPӪ8flJvY}f}U@!wLĿ HZꙫ8F Mt2^ʛ!d$潬@-.t 3iJ74fzOͅauh#aOₐx7vpHvGojP DEsY+\"Id@OSalI{Ua<7=눯%69C|ɝ ^&|wLJwGJc?[y\<ٗWV o[&tDpZa1ZmS#D23`[\-Z$*>$Dn}nL%%/%ڿmF$0Pt L-m N-ȐeRIx-Ew9\`E&qs69jڃSGYnl{%a$1X»ec)EMoFdL![G2%u:s <Ɂ-} 孽G8tH |}UW]eEA< \fU򃯥kp$" j7/K^xtoìbӋNG'fF\^u |Qh*k߆#10QjOTFGƒG&\R2d"ظYᾄZ i,c pj3l*Oь,iS=ieb'D;/: f$T gR]3~6ڕ i#8%d9dXؠ ^)2(Q Fנ܌Ap~ 5\ ȇ򪛷,(`x)du'Mc?V\; q@ %-8κ= 'px`̜r׭XY/`DТ̡ZsLGFԗC/-Zc56S43D%^zZ]mrLׯ0P %"jIE.AG&S p=pYK?Df#UְCKwv`Cޭ^׎HQ7$jx*"7v/{f>Oc"A/Y>OY좲x*o! <0BzݏTΗu\#b=$s/meDkv&@d4^%H8P:%'AK$ǸhgToo$3]fDo\5|jKӘN|W;x%yG¡":*rRsw$ͩea|ڦ8X]0TL*;Z;wƅyM]P8f럯oQVK rk0Ĝ}op`KgT <"nVJsAA{oM9#$qe,FW[C@:XӖ$X' [Y[&*yaڗ}[wig~= \?f&nLҺ|wqr>' 4_"68m` Dvj] s\#~֦F gT?n8cócXR,9-@*[no*=gD C5 ǻ-7mQ7\kg?G eWYLQBhDa|ڝ4jҙsv( ]>'emoOp}K M49V|.|c$O8z͖U%D)4E-AL-S18 {oro/Q_]$ l\_9i`8Nw͌M׫l{Z׌(ޗ|: gUAP>π%2ﾡY״:y>pqe⶷ bG0{n 1"}c^xζ?#G58"8ɯUR/;HnOۦM-=CpLl fY_q>ƩZC룻QU`K[sUd~GUk&w2EU-˦N 3>A$FO`]s{#*$>4сR@dm YZ