nghttp2-1.40.0-150200.17.1<>,̉fp9|J;_jm1ċ ׸E˲=lKGI( uF~OQמ,`]ni@7bϒ jc&>?wtE_7}j*y 0PA:0 tabyQyM 2<ƣ\MgUpavpӏ>Qq1)+2?[.)g rOV? ¹o-\"ν¼tq2˽[8Uw>dm[M.:,yny0Vڙv )x>?-lF>>?d   Z 4IOXx     <T22 22( |8 I9 I:IFG$HDIdXlYt\]^ b4cd_edfgliu|vwx y,zCnghttp21.40.0150200.17.1Implementation of Hypertext Transfer Protocol version 2 in CThis is an implementation of Hypertext Transfer Protocol version 2. The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed load test and benchmarking tool for HTTP/2. HPACK encoder and decoder are available as public API.fxinomavro#HSUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/Development/Libraries/C and C++https://nghttp2.org/linuxppc64le h h#Afkflfkfkflfmfkfk2ed8838d8086f5a6284e1f72d9b46deebce8b7f66dafcca2d36c0c75dfd9891acd38c6a49e5769cac7db1c03804182572953947eb869ccccb1989a808c3be9acdc8e522cca3c475cd9edb5bdf927287f7010fb27ffc855850288a64a14643c66e7726f72eb4049589603d7e49f01c6649782111e5c606f8ed83945df5460861960a7a8d8457b4f8061d1971e0b5dbfe77fb6ca07b6fe30fa64b1f286294097d43a27b449358ea89ebad766ea6195405b4dc607303e28fd0bd255d9364bb0b8003a22362814ba191b10fa8a50106097ffae4ce30013526f522b7962d2a602f1e4rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootnghttp2-1.40.0-150200.17.1.src.rpmnghttp2nghttp2(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /usr/bin/python3libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcares.so.2()(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libcrypto.so.1.1(OPENSSL_1_1_1)(64bit)libev.so.4()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.4.4)(64bit)libjansson.so.4()(64bit)libjansson.so.4(libjansson.so.4)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libnghttp2.so.14()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.11)(64bit)libstdc++.so.6(CXXABI_1.3.2)(64bit)libstdc++.so.6(CXXABI_1.3.3)(64bit)libstdc++.so.6(CXXABI_1.3.7)(64bit)libstdc++.so.6(CXXABI_1.3.8)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.17)(64bit)libstdc++.so.6(GLIBCXX_3.4.18)(64bit)libstdc++.so.6(GLIBCXX_3.4.19)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.22)(64bit)libstdc++.so.6(GLIBCXX_3.4.30)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1f De1@e`KW^@]i]Z@]Z@]R@\g\A\A\8@[F[t[CN@ZЛZUZUZZOhZ.s@Z'ZY@YdYYlYcl@YX@XӸX@Xk@XQ4@X6@W@WRW"W~WXW W4V@V>@V@VV_V@VzV]VI@V4@V@UU@UUȒ@UUUUUcU]US= TLSv1.2 * asio: More graceful stop of nghttp2::asio_http2::server::http2 (Patch from Amir Pakdel) (GH-805) * asio: Holding more shared_ptrs instead of raw ptrs to make sure called objects don't get deleted. (Patch from clemahieu) * asio: Fix infinite loop in acceptor handler (Patch from clemahieu) (GH-794) * asio: close_stream erases from streams_ while it's being iterated over. (Patch from clemahieu) (GH-795) * nghttpx: Strip version number from server header field * nghttpx: Add --single-worker option * nghttpx: Fix bug that send_reply does not participate graceful shutdown * nghttpx: Add --frontend-max-requests option * nghttpx: Enable stream-write-timeout by default * nghttpx: Fix stream write timer handling * nghttpx: Add configrevision API endpoint (GH-820) * nghttpx: Redirect to HTTPS URI with redirect-if-not-tls parameter (GH-819) * nghttpx: Update log time stamp in millisecond interval * nghttpx: Better error message when private key and certificate are missing * nghttpx: Fix bug that old config is used during reloading configuration * nghttpx: Specify TLS protocol by version range (GH-809) * nghttpx: Send SIGQUIT to the original master process (GH-807) * nghttpx: Restrict HTTP major and minor in 0 or 1 * nghttpx: Drop privilege of neverbleed daemon first * nghttpx: add systemd support (Patch from Tomasz Torcz) (GH-802) * nghttpx: Fix crash on SIGHUP with multi thread configuration (GH-801) * nghttpx: Send 1xx non-final response using mruby script (GH-800) * nghttpx: Select certificate by client's supported signature algorithm (GH-792) * nghttpx: Recommend POST for backendconfig API request * nghttpx: Don't build PSK features with LibreSSL (Patch from Bernard Spil) (GH-789) * nghttp: add support for link rel="preload" for --get-assets (Patch from Benedikt Christoph Wolters) (GH-791) * h2load: Fix wrong req_stat updates * h2load: Explicitly count the number of requests left and inflight * integration: Fix deprecation warnings * integration: Redirect nghttpx stdout/stderr to test driver's stdout/stderr - Changes for version 1.19.0: * lib: Fix memory leak of nghttp2_stream object in server side nghttp2_session object * Fix issues found by PVS Studio (Patch from Alexis La Goutte) (GH-769) * doc: Update README file to write about the issue of Alpine Linux's inability to replace malloc (Patch from makovich) (GH-768) * build: Compile with Android NDK r13b using clang * src: Fix assertion error with boringssl * nghttp: Take into account scheme and port when parsing HTML links * nghttp: Fix authority for --get-assets if IP address is used in conjunction with user-defined :authority header (Patch from Benedikt Christoph Wolters) (GH-783) * nghttpx: Add --accesslog-write-early option (GH-777) * nghttpx: Fix access.log timestamp (GH-778) * nghttpx: Show default cipher list in -h * nghttpx: Add client-ciphers option * nghttpx: Add client-no-http2-cipher-black-list option * nghttpx: Fix the bug that no-http2-cipher-black-list does not work on backend HTTP/2 connections. * nghttpx: Add --client-psk-secret option to enable PSK in backend (GH-612) * nghttpx: Add --psk-secret option to enable PSK in frontend connection (GH-612) * nghttpx: Enable SCT with OpenSSL 1.1.0 * nghttpx: Add proxyproto to frontend option to accept PROXY protocol (GH-765) * h2load: Show default cipher list in -h * h2load: Show custom server temp key such as X25519 * h2load: Fix incorrect return value from spdylay_send_callback - Changes for version 1.18.1: * nghttpx: Fix assertion error in libev ev_io_start (GH-759) * nghttpx: Handle c-ares success without result * nghttpx: Fix bug that DNS timeout was erroneously disabled (GH-763) * nghttpx: Fix bug that DNS timeout was ignored (GH-763)- use individual libboost-*-devel packages instead of boost-devel- Update to version 1.18.0: * lib: Accept and ignore content-length: 0 in 204 response for now * build: Use pkg-config to detect libxml2 * build: Require c-ares to compile applications under src * build: Add Windows CI via AppVeyor (Patch from Alexis La Goutte) * examples: Delete tiny-nghttpd * nghttpx: Retry h1 backend request if first write fails (GH-757) * nghttpx: Keep reading after backend write failed (GH-756) * nghttpx: Add frontend-keep-alive-timeout option (GH-755) * nghttpx: New error log format (GH-749) * nghttpx: Fix bug that fetch-ocsp-response does not work with OpenSSL 1.1.0 (GH-742) * nghttpx: Backend API call allows non-numeric host with dns parameter (GH-731) * nghttpx: Lookup backend host name dynamically (GH-721) * nghttpx: Accept and ignore content-length: 0 in 204 response for now (GH-735) * nghttpx: Wait for child process to exit- Update to version 1.17.0: * lib: Disallow content-length in 1xx, 204, or 200 to a CONNECT request (GH-722) * lib: Avoid memcpy against NULL src * build: MSVC version resource support (Patch from Remo E) (GH-718) * asio: server: Call on_close callback on connection close (GH-729) * nghttpx: Fix frequent crash with --backend-http-proxy-uri * nghttpx: Robust backend read timeout * nghttpx: Fix bug that mishandles response header from h1 backend * nghttpx: Fix bug that zero-length POST is not forwarded (GH-726) * nghttpx: Remove optional reason-phrase from SPDY :status * nghttpx: Header key and value must be string in mruby script * nghttpx: Strip content-length with 204 or 200 to CONNECT in mruby (GH-722) * nghttpx: Strict handling for Content-Length or Transfer-Encoding in h1 (GH-722) * nghttpx: Fix compilation with BoringSSL (Patch from dalf) (GH-717) * nghttpd, nghttpx, asio: Add missing mandatory SP after status code- Update to version 1.16.1: * lib: Prevent undefined behavior in decode_length * nghttpx: Fix bug which may crash nghttpx if non-final response is forwarded from origin server to HTTP/1.1 client - Changes for version 1.16.0: * lib: Add nghttp2_set_debug_vprintf_callback to take advantage of DEBUGF statements in when building DEBUGBUILD. * Update .clang-format for clang-format-3.9 * build: Make it possible to include nghttp2/CMakeLists.txt in another project using add_subdirectory. * third-party: Update http-parser to feae95a3a69f111bc1897b9048d9acbc290992f9 * asio: Fix crash when end() is called outside nghttp2 callback * nghttpx: Add --backend-connect-timeout option * nghttpx: Add TLS signed_certificate_timestamp extension support * nghttpx: Add --ecdh-curves option to specify list of named curves * h2load: Add --header-table-size and --encoder-header-table-size options- Update to version 1.15.0: * lib: Add nghttp2_option_set_max_deflate_dynamic_table_size() API function (GH-684) * lib: Allow NGHTTP2_ERR_PAUSE from nghttp2_data_source_read_callback (GH-671) * lib: Add nghttp2_session_get_hd_deflate_dynamic_table_size() and nghttp2_session_get_hd_inflate_dynamic_table_size() API functions to get current HPACK dynamic table size (GH-664) * lib: Add nghttp2_session_get_local_settings() API function * lib: Add nghttp2_session_get_local_window_size() and nghttp2_session_get_stream_local_window_size() API functions * build: Add -lsocket -lnsl to APPLDFLAGS for solaris build * neverbleed: Update neverbleed to support ECDSA certificate * doc: Mention --enable-lib-only configure option in README * integration: Fix test failure with go1.7.1 * src: Fix compile error with openssl 1.1.0 * nghttpx: Improve performance with HTTP/1.1 backend when request body is involved * nghttpx: Use std::atomic_* overloads for std::shared_ptr if available * nghttpx: Migrate backend stream to another h2 session on graceful shutdown * nghttpx: Add option to specify HPACK encoder/decoder dynamic table size * nghttpx: Log client address * nghttpx: Add tls_sni to mruby Nghttpx::Env class * nghttpx: Add --frontend-http2-window-size option, and its family functions * nghttpx: Add experimental TCP optimization for h2 frontend * nghttpx: Workaround for std::make_shared bug in Xcode7, 7.1, and 7.2 (GH-670) * nghttpx: Fix bug that bytes are doubly counted to rate limit for TLS connections * nghttpx: Add --no-server-rewrite option not to rewrite server header field (GH-667) * nghttpx: Retry if backend h1 connection cannot be established due to timeout * nghttpx: Reset stream if invalid header field is received in h2 * nghttpx: Add --server-name option to change server response header field (GH-667) * nghttpd: Add --encoder-header-table-size option * nghttp: Add --encoder-header-table-size option * python: Support ALPN, require Python 3.5- Update to version 1.14.0: * lib: Make emit_header() return void since it always succeed * lib: Add nghttp2_hd_deflate_hd_vec() deflate API to support multiple buffer input * lib: since hd_inflate_commit_indexed() always return 0, remove the return value check in nghttp2_hd_inflate_hd_nv() * lib: Use memeq() instead of lstreq() in lookup_token() * lib: More strict stream state handling * lib: Modify genlibtokenlookup.py to remove redundant header comparisons and remove inline qualifier of lookup_token() in genlibtokenlookup.py * lib: Fix wrong tree operation to avoid cycle * lib: Make get_max_index() return the max index in frame, so we don't need to do extra calculation * lib: Add nghttp2_on_invalid_header_callback * lib: Log frame's stream ID for header debug logging * doc: Remove old doc about differential encoding in HPACK * doc: Document about ALPN in nghttpx howto * nghttpx: Log error code from getsockopt(SO_ERROR) on first write event * nghttpx: Don't change pushed stream's priority * nghttpx: Log backend connection failure in WARN level * nghttpx: Fix bug that api and healthmon parameters do not work with http2 proxy * nghttpx: Add access log variable for backend host and port * nghttpx: Use copy instead of const reference of backend group * nghttpx: Reload configuration with SIGHUP * nghttp: Adjust weight according to Firefox stable * nghttp: Call error callback when invalid header field is received and ignored * nghttp: Allow multiple -p option * deflatehd: Call nghttp2_hd_deflate_change_table_size only if table size is changed from default- Update to version 1.13.0: * lib: Cancel non-DATA frame transmission from nghttp2_before_frame_send_callback * doc: Fix warning with Sphinx 1.4 * build: Work with Android NDK r12b * nghttpx: Use consistent hashing for client IP based session affinity * nghttpx: Fix FTBFS on armel by explicitly including the header * nghttpx: Cast to double to fix build with gcc 4.8 on Solaris 11 * nghttpx: Fix build error with libressl * examples: Fix compile error with OpenSSL v1.1.0-beta2- Update to version 1.12.0: * Add nghttp2_session_set_local_window_size API function * Add nghttp2_option_set_max_send_header_block_length API function (GH-613) * Fix warning: declaration of 'free' shadows a global declaration (Patch from Alexis La Goutte) * examples: Add ALPN support to tutorial client/server (GH-614) * nghttpx: Reduce TTFB with large number of incoming connections * nghttpx: Rewrite read timer handling * nghttpx: Clean up neverbleed AF_UNIX socket * nghttpx: Add --backend-max-backoff option * nghttpx: Use 16KiB buffer for reading to match TLS record size * nghttpx: Add healthmon parameter to -f option to enable health monitor mode * nghttpx: Receive reference of std::mt19937, not making a copy * nghttpx: Fix bug that backend never return to online (GH-615) * nghttpx: Implement client IP based session affinity * nghttpx: Add --api-max-request-body option to set maximum API request body size * nghttpx: Add api parameter to --frontend option to mark API endpoint * h2load: Add content-length header field for HTTP/2 and SPDY as well * h2load: Implement HTTP/1 upload (GH-611)- Update to 1.11.1 * lib: Add nghttp2_hd_inflate_hd2() and deprecate nghttp2_hd_inflate_hd() * lib: Avoid 0-length DATA if NGHTTP2_DATA_FLAG_NO_END_STREAM is set * lib: Fix bug that PING flags are ignored in nghttp2_submit_ping * integration: Workaround runtime error: cgo argument has Go pointer to Go pointer * nghttp: Eliminate zero length DATA frame at the end if possible * nghttpd: Set content-length in status response * nghttpx: Add sni keyword to --backend option * nghttpx: Allow mixed protocol and TLS settings among backends under same pattern * nghttpx: Don't add 0-length DATA when response HEADERS bears END_STREAM flag * nghttpx: Don't add chunked encoded response body for HEAD request * nghttpx: Don't use CN if we have dNSName or iPAddress field * nghttpx: Just call execv instead of execve to pass environ * nghttpx: Make SETTINGS timeout value configurable * nghttpx: Save PID file after it is ready to accept connections * nghttpx: Treat backend failure if SETTINGS is not received within timeout * nghttpx: Wait for SETTINGS ACK to make sure that backend h2 server is alive- Update to 1.10.0 * Pass unknown SETTINGS values to nghttp2_on_frame_recv_callback * Add ALTSVC frame support * Run error callback when peer does not send initial SETTINGS frame * Update http-parser * Update sphinx_rtd_theme * nghttp: add an --expect-continue option * nghttpx: Fix downstream connect callback called early * nghttpx: Truncate too long -b option signature * nghttpx: Fix bug that server push from mruby script did not work * nghttpx: Try next HTTP/1 backend address when connection cannot be made * nghttpx: Retry next HTTP/2 backend address when connection cannot be made * nghttpx: Enable link header field based push for non-final response * nghttpx: Detect online/offline state of backend servers * nghttpx: Better load balancing between backend HTTP/2 servers * nghttpx: Fix crash with backend failure- Update to 1.9.2 * nghttpx: Fix crash with backend failure * nghttpx: Better distribute load to backend h2 servers * nghttpx: Fix error messages on deprecated mode * nghttpx: Fix bug that logger wrote string which was not NULL-terminated * nghttpx: Fix bug that proxy with HTTP/1.1 CONNECT did not work- Update to 1.9.1 * nghttpx: Fix bug that backend tls keyword did not work with -s option * nghttpx: Fix handing stream after connection check was failed - Changes for 1.9.0 * lib: Add nghttp2_error_callback to tell application human readable error message * lib: Reference counted HPACK name/value pair, adding * nghttp2_on_header_callback2 * lib: Add nghttp2_option_set_no_auto_ping_ack() option * lib: Add nghttp2_http2_strerror() to return HTTP/2 error code string * build: Makefile.msvc enhancements (Patch from Jan-E) * build: Lower libev version requirement (Patch from Peter Wu) * build: cmake build support (Patch from Peter Wu) * asio: Fix bug that server event loop breaks with exception * integration: Disable tests that sometimes break randomly on travis * integration: do not use recursive target (Patch from Peter Wu) * h2load: Fix bug that it did not try to connect to server again * h2load: Fix bug that initial max concurrent streams was too large * nghttpx: Memcached connection encryption with tls keyword * nghttpx: Enable/disable TLS per frontend address * nghttpx: Configure TLS per backend routing pattern * nghttpx: Workaround for Ubuntu 15.04 which does not value-initialize on std::make_shared. * nghttpx: Add --error-page option to set custom error pages * nghttpx: Add wildcard host routing * nghttpx: Change read timeout reset timing * nghttpx: Don't push if Link header field includes nopush * nghttpx: Deprecate backend-http1-connections-per-host in favor of backend-connections-per-host * nghttpx: Restructure mode settings, removing --http2-bridge, - -client, and --client-proxy options * nghttpx: Deprecate backend-http1-connections-per-frontend in favor of backend-connections-per-frontend * nghttpx: Don't share session which is already in draining state * nghttpx: Effectively disable backend HTTP/2 connection flow control * nghttpx: Add --frontend-http2-max-concurrent-streams and - -backend-http2-max-concurrent-streams, and deprecate - -http2-max-concurrent-streams option * nghttpx: Deprecate --backend-http2-connections-per-worker option * nghttpx: Share TLS session cache between HTTP/2 and HTTP/1 backend * nghttpx: Rewrite backend HTTP/2 connection coalesce strategy- Update to 1.8.0 * Add Architecture documents (work in progress) * List all contributors in AUTHORS * doc: fix out-of-tree doc builds (Patch from Peter Wu) * Wrap AM_PATH_XML2 by m4_ifdef to handle the case when _PATH_XML2 is not found * Fix configure script for non-gcc, clang build * Document compiling apps and include h2load in configure (Patch from David Beitey) * Don't check for dlopen/libdl on *BSD (Patch from Bernard Spil) * Don't taint CXXFLAGS from AX_CXX_COMPILE_STDCXX_11 * Fixing Windows Makefile version detection (Patch from Reza Tavakoli) * lib: Tokenize extra HTTP header fields * lib: Fix typo in HAVE_CONFIG_H name (Patch from Peter Wu) * lib: Add HTTP/2 extension framework to send and receive non-critical frames * tests: remove unused macros (Patch from Peter Wu) * src: Update default cipher list * src: Fix compile error with gcc-6 which enables C++14 by default * asio: client: Fix connect timeout does not work, return from cb if session stopped, removing client::session::connect_timeout() functon * nghttpd: Start SETTINGS timer after it is written to output buffer * nghttpd: Add trailer header field to status responses * nghttpd: Add -w and -W options to change window size * nghttpx: Worker wide blocker which is used when socket(2) is failed * nghttpx: ConnectBlocker per backend address * nghttpx: Interleave text/html pushed resources with associated resource * nghttpx: Add headers given in add-response-headers for mruby response * nghttpx: Deprecate --backend-ipv4 and --backend-ipv6 in favor of --backend-address-family * nghttpx: Add options to specify address family of memcached connections * nghttpx: Add encryption support for TLS ticket key retrieval * nghttpx: Add TLS support for session cache memcached connection * nghttpx: Refactor blacklisted cipher suite check (Patch from Jay Satiro) * nghttpx: Add TLS support for HTTP/1 backend * nghttpx: Add request-header-field-buffer and max-request-header-fields options, deprecating header-field-buffer and max-header-fields options. * nghttpx: Add --no-http2-cipher-black-list to allow black listed cipher suite * nghttpx: Limit header fields from backend * nghttpx: Fix bug that IPv6 address in Forwarded "for" is not quoted-string * nghttpx: Support multiple frontend addresses * integration-tests: support out-of-tree tests (Patch from Peter Wu) * examples: fix compile warnings (Patch from Peter Wu) - Drop upstreamed nghttp2-c++14.patch- Update to 1.7.1 * Fix CVE-2016-1544 (boo#966514)- Add nghttp2-c++14.patch to properly guard make_unique templates. [bsc#964140]- Update to 1.7.0 * Reset (RST_STREAM) stream if flow control window gets overflow * Validate :authroity, host, and :scheme value more strictly * Check request/response submission error based side of session * Strict outgoing idle stream detection * Return error from nghttp2_submit_{headers,request} when self dependency is made * Add -ldl to APPLDFLAGS for static openssl linking * asio: Stop acceptor on server::http2::stop * asio: Rename http2::get_io_services() as http2::io_services() * h2load: Support UNIX domain socket * h2load: Improve readability of traffic numbers * h2load: Remove "auto" for -m option * h2load: Show progress in rate mode * h2load: Perform sampling for request and connection timings to reduce memory consumption * nghttpd: Add --no-content-length option to omit content-length in response * nghttpx: Interleave pushed streams with the associated stream if pushed streams are javascript and CSS resources * nghttpx: The initial value of request/response buffer is increased to 128K * nghttpx: Fix bug that --listener-disable-timeout option is not used * nghttpx: Don't emit :authority if request does not contain authority information * nghttpx: Add clarification of quotes in configuration file * nghttpx: Don't allow certain characters in host and :scheme header field * nghttpx: Add RFC 7239 Forwarded header field support * nghttpx: Fix crash when running on IPv6 only (Patch from Vernon Tang) * nghttpx: Take into account of trailers when applying max_header_fields * nghttpx: Don't apply max_header_fields and header_field_buffer limit to response * nghttpx: Strict validation for header fields given in configuration * nghttpx: header value should not be lower-cased (Patch from ayanamist)- fixed typo in libnghttp2_asio1 [bsc#962914]- Update to 1.6.0 * Fix heap-use-after-free bug when handling idle streams * Strict error handling for frames which are not allowed after closed (remote) * Set max number of outgoing concurrent streams to 100 by default * Keep incoming streams only at server side * Create stream object for pushed resource during nghttp2_submit_push_promise() * Add nghttp2_session_create_idle_stream() API * Handle response in nghttp2_on_begin_frame_callback * Add --lib-only configure option * Compile with OpenSSL 1.1.0-pre1 * Fix build when OpenSSL 1.0.2 is not available (patch from Sunpoet Po-Chuan Hsieh) * asio: Add connect and read timeout to client API * asio: Add TLS handshake and read timeout to server API * asio: Added access to a requests remote endpoint (patch from Andreas Pohl) * asio: libnghttp2_asio: Added io_service accessors (patch from Andreas Pohl) * h2load: Add req/s min, max, mean and sd for clients * h2load: Fix broken connection times- Update to 1.5.0 * Fix bug that nghttp2_session_find_stream(session, 0) returned NULL * Add nghttp2_session_change_stream_priority() to change stream priority without sending PRIORITY frame * Add nghttp2_session_check_server_session() API * Consider to use CANCEL error code when closing streams with GOAWAY * Don't send push response if GOAWAY has been received * Use error code CANCEL to reset pushed reserved stream from remote * Add nghttp2_session_upgrade2(), deprecate nghttp2_session_upgrade() * Workaround HTTP upgrade with HEAD request in nghttp2_session_upgrade() * Introduce NGHTTP2_NV_FLAG_NO_COPY_NAME and NGHTTP2_NV_FLAG_NO_COPY_VALUE * Add nghttp2_session_check_request_allowed() API function * Switch to clang-format-3.6 * Update mruby to 1.2.0 * tests: fix broken linkage with --disable-static (Patch from Kamil Dudka) * python: Send RST_STREAM if remote side is not closed and response finished * asio: client: call on_error when connection is dropped * asio: ALPN support * h2load: Add --h1 option to force http/1.1 for both http and https URI * h2load: Fix crash when dealing with "connection: close" form HTTP/1.1 server * h2load: h2load goes into infinite loop when timing script file starts with 0.0 in first line (Patch from Kit Chan) * h2load: Override user-agent with -H option * h2load: Print "space savings" to measure header compression efficiency * h2load: Stream error should be counted toward errored * h2load: Show application protocol with OpenSSL < 1.0.2 * nghttpx: Don't send RST_STREAM to h2 backend if backend is disconnected state * nghttpx: Support server push from HTTP/2 backend * nghttpx: Fix bug that causes connection failure with backend proxy URI * nghttpx: Use --backend-tls-sni-field to verify certificate hostname * nghttpx: Log :authority as $http_host if available * nghttpd: Fix crash with CONNECT request * nghttpd: Defered eviction of cached fd using timer * nghttpd: Read /etc/mime.types to set content-type header field * nghttp: Record request method to output it in har correctly * nghttp: Use method given in -H with ":method" in HTTP Upgrade - Drop nghttp2-1.4.0-fix-tests.patch (now in upstream)- Enable spdy and more example applications- Update to 1.4.0: * lib: Don't always expect dynamic table size update. * lib: Shrink to the minimum table size seen in local SETTINGS. * lib: Add new error code NGHTTP2_ERR_PAUSE to send_data_callback. * lib: Avoid excessive WINDOW_UPDATE queuing. * lib: Return fatal error if flooding is detected to close session immediately. * lib: Return type of nghttp2_submit_trailer is int. * lib: Don't send WINDOW_UPDATE with 0 increment. * lib: Fix bug that headers in CONTINUATION were ignored after HEADERS with padding. * package: Use -fvisibility=hidden for internal functions. * package: Show more information in configure summary. * package: Add PIDFile directive to systemd service. * package: Fix daemon upgrade when running under systemd. * app: Compile with BoringSSL. * nghttp: Allow multiple -c option occurrence, and take min and last value. * nghttpd: Fix leak when server failed to listen to given port. * nghttpx: Add TLS dynamic record size behaviour command line options. * nghttpx: Reduce default timeouts for read sockets to 1m. * nghttpx: Fix bug that PUT is replaced with POST. * nghttpx: Change mruby script handling. * nghttpx: Added support for RFC 7413 (TCP Fast Open) on nghttpx proxy listening connections. * nghttpx: Add neverbleed support. * h2load: Don't DOS our server! * h2load: Use duration syntax for timeouts. * h2load: Support subsecond rate period. * h2load: Simplify rate mode. * h2load: Add option for user-definable rate period. * h2load: Reuse SSL/TLS session. * h2load: Reconnect server on connection: close. * h2load: Don't exit in the case of no ALPN protocol overlap. * integration: Update go's http2 package URI. - Add missing baselibs.conf. - Add nghttp2-1.4.0-fix-tests.patch from commit 4825009. - Small spec cleanup.- Update to 1.3.4 * Make traditional init script fail if new config file is broken (Patch from Janusz Dziemidowicz) * nghttpx-logrotate: Don't use killall since we have multiple processes * nghttpx: Fix improper signal handling - Changes for 1.3.3 * Fix bug in padding handling of DATA frame * Use hash table for dynamic table lookup * More warning flags for --enable-werror * Update mruby * h2load: HTTP/1.1 support (Patch from Lucas Pardue) * nghttpx: Do not try to set TCP_NODELAY when frontend is an UNIX socket (Patch from Janusz Dziemidowicz) * nghttpx: Chown UNIX domain socket to user specified as --user * nghttpx: Split monolithic one process into control and worker processes * nghttpx: Handle SSL/TLS data following PROXY protocol line - Changes for 1.3.2 * Check header block limit after new stream is opened * nghttp: Show error if HEADERS frame cannot be sent for whatever reason * nghttpx: Fix assertion failure on TLS handshake * nghttpx: Add x-http2-push header field for pushed resource * nghttpx: Fix compile error with --disable-threads- Update to 1.3.1 * Avoid usage of typeof and replace __builtin_offsetof with offsetof * Honor stream->weight even if stream->last_writelen is 0 * Compile third-party libraries if hpack-tools is enabled * nghttpx-init: Start nghttpx with --daemon * Bundle sphinxcontrib.rubydomain https://bitbucket.org/birkenfeld/sphinx-contrib/src/default/rubydomain/ * Bundle mruby * h2load: Record TTFB on first byte of response body, rather than first socket read * h2load: Improve checking for timing script input, prevent false positive in certain situations * nghttpx: Implement PROXY protocol version 1 (--accept-proxy-protocol option) * nghttpx: Allow link header server push for HTTP/2 backend as well * nghttpx: Don't initiate push if client disabled push * nghttpx: Allow absolute URI in Link header field for push * nghttpx: Fix crash with multi workers and QUIT signal * nghttpx: Add mruby support which is disabled by default (use --with-mruby configure option to enable it) * nghttpx: Drop connection before TLS finish if h2 requirement is not fulfilled - Fix typo in previous changelog entry- Update to 1.3.1 * Limit the number of incoming reserved (remote) streams * Add stream public API * Rewrite priority tree handling * Fix parallel make distcheck * Define it and itprep recursive target if AM_EXTRA_RECURSIVE_TARGETS is defined * fetch-ocsp-response: Handle spurious openssl exist status 0 * nghttpx: Use nghttp2::ssl::DEFAULT_CIPHER_LIST for backend TLS connection * nghttpx: Don't allow blacked listed cipher suites for HTTP/2 connection * nghttpx: better handle /dev/stderr and /dev/stdout (Patch from Tomasz Buchert) * nghttpd: GOAWAY if SSL/TLS requirements for HTTP/2 are not met * nghttpd: Return date header field for 304 * nghttpd: Support HEAD request * h2load: Add Timing-script and base URI support (Patch from Lucas Pardue) * h2load: Add timeout options (Patch from Nora) - Fix typo in changelog- Update to 1.2.1 * doc: Reword the HPACK tutorial (Patch from Tom Harwood) * nghttpx: Fix stability issues * h2load: Fix crash if -r > -n- Update to 1.2.0 * Fix crash if response or data is submitted to closing stream * Header table size UINT32_MAX must be accepted * Use PROTOCOL_ERROR against DATA sent to idle stream * Allow multiple in-flight SETTINGS * Strictly check occurrence of dynamic table size update * Fix configure warning that 'missing' is missing or too old * Fix rm: cannot remove ‘*.rst’: No such file or directory when "make clean" (Patch from Alexis La Goutte) * doc: Reword some of the server and client tutorial (Patch from Tom Harwood) * src: Remove monotonic_clock replacement macro for gcc-4.6 * nghttpx: Add TLS ticket key sharing among nghttpx instances using memcached * nghttpx: Add shared session cache using memcached * nghttpx: Set SSL/TLS session timeout to 12 hours * nghttpx: Enable session resumption on HTTP/2 backend * nghttpx: Don't rewrite host header field by default * nghttpx: Generate new ticket key every 1hr and its life time is now 12hrs * nghttpx: Don't reuse backend connection if it is not clean * nghttpx: Add AES-256-CBC encryption for TLS session ticket * nghttpd: Fix the bug that 304 response has non-empty body * h2load: Add -r and -C options to h2load (Patch from Nora Shoemaker) - Changes for 1.1.2 * Fix linker error with libnghttp2_asio * Allow custom installation location for Python bindings - Drop no longer needed missing_nghttp2_timegm.patch- Update to 1.1.1 * nghttpx: Fix various stability issues and memory leak bug - Changes for 1.1.0 * Fix DATA is not consumed if nghttp2_http_on_data_chunk failed * nghttp2_submit_response and nghttp2_submit_headers may return * NGHTTP2_ERR_DATA_EXIST * msvc build fixes and enchantments (Patch from Gabi Davar) * Compile with IRIX gcc-4.7 (Patch from Klaus Ziegler) * nghttp: Add --max-concurrent-streams option * nghttp: Add comment on HAR on pushed objects (Patch from acesso) * nghttpx: Add --include option to read additional configuration from given file * nghttpx: Add backend routing based on request host and path by extending -b option * nghttpx: Allow log variable to be enclosed by curly braces for disambiguation * nghttpx: Add log variables related to SSL/TLS connection * h2load: Add --ciphers option - Add patches * missing_nghttp2_timegm.patch to fix building of asio library * nghttp2-remove-python-build.patch to fix python bindings installation when autotools are used- Update to 1.0.5 * Add STREAM_DEP_DEBUG macro switch to enable runtime validation of depedency tree * Fix another bug in priority handling; sibling's item is not queued when ancestor's item is detached * nghttpx: Fix crash with --http2-bridge and both frontend and backend TLS- Update to 1.0.4 * Fix assertion failure in stream_update_dep_on_detach_item (GH-264) - Changes for 1.0.3 * Fix bug that idle self-depending PRIORITY is not handled gracefully * Optimize dependency based priority code to Firefox style tree * enable third-party for asio_lib too (Patch from Mike Frysinger) * fetch-ocsp-response: Support LibreSSL, and include port in ocsp_host * src: Support compile with LibreSSL * nghttpx: Fix bug that x-forwarded-proto header field does not reflect frontend scheme on HTTP/2 backend * nghttpx: Validate :path on SPDY frontend- Update to 1.0.2 * Fix bug that data are not consumed for connection in race condition (GH-253) * Define NGHTTP2_EXTERN to __declspec(dllimport) when using nghttp2 for Windows build * Translate fetch-ocsp-response into Python * libevent-client: Fix bug that path is broken if URI does not contain path part * python: Call on_close callback when connection is lost for server session * python: Expose client certificate, if available (Patch from Fabian Wiesel) * python: Catch and log failure to set TCP_NODELAY (Patch from Fabian Wiesel) * nghttpx: Add --add-request-header option * nghttpx: Make WebSocket upgrade work * nghttpx: Fix bug that END_STREAM is not set in backend for POST with Upgrade * nghttpx: Don't send "Expect" header field twice- Update to 1.0.1 * Include stdint.h instead of inttypes.h when compiled with MSVC < 2013 * Fix invalid memory free on out-of-memory handling * integration: Use our own copy of golang spdy package * android: Don't link zlib bundled with android NDK * Dockerfile.android: Update NDK ver, and ubuntu; build and link zlib * src, examples: Fix up OpenSSL initialization * nghttpx: Allow HTTP Upgrade from POST request if response header has not been sent to the client * nghttpx: Fix bug that PUSH_PROMISE is sent after associated response HEADERS * nghttpd: Close connection after settings timeout and GOAWAY was sent * h2load: Fix bug that NPN fails if ALPN is enabled- Update to 1.0.0 * v1.0.0 introduced backward incompatible changes from 0.7 series. Read https://nghttp2.org/documentation/package_README.html#migration-from-v0-7-15-or-earlier to migrate from older version to this latest version. - Changes for 0.7.15 * Hopefully, this is the last release for 0.7.x series. Development continues in 1.x series. * Access violation in buffers (GH-232) (Patch from Etienne Cimon) * Retry finding jemalloc lib by je_malloc_stats_print (GH-233) * inflatehd: Fix crash if 'wire' value is not string (GH-235) * nghttpx: Revert 585af93 to fix crash with TLS (GH-234) * nghttpd: Add --echo-upload option to send back request body- Update to 0.7.14 * Fix global-buffer-overflow in HPACK code * Fix doc for nghttp2_select_next_protocol * Fix bug that promised stream was not reset on decompression error * Add systemd and upstart configuration file for nghttpx (Patch from Zhuoyun Wei) * Improve nghttpx logrotate configuration file (Patch from Zhuoyun Wei) * Update sphinx_rtd_theme * h2load: Update h2load to give connect time and ttfb stats (Patch from ericcarlschwartz) * nghttpd: Add -m, --max-concurrent-streams option * nghttpx: Log absolute URI for HTTP/2 or client proxy request * nghttpx: Add --header-field-buffer and --max-header-fields options * nghttp: Fix assertion error if very large value is given to -t- Update to 0.7.13 * Fix bug that promised stream was not reset by returning NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from nghttp2_on_header_callback. Instead, associated stream was reset. * Allow NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from nghttp2_on_begin_headers_callback * h2load: Effectively disable flow control by setting large window size * asio: Graceful shutdown and joinable server (Patch from Xiaoguang Sun)- Update to 0.7.12 * Fix bug that nghttp2_session_set_next_stream_id accepts invalid stream_id * HPACK: Rewrite static header table handling * HPACK: Never index authorization and small cookie header field * Don't install libnghttp2_asio headers if they are disabled * doc: Specify program directive so that hyperlink to option is correctly pointed to the intended location * asio: client: Call error_cb on error occurred in do_read and do_write (Fixes GH-207) * nghttp: Add --no-push option to disable server push * nghttp: Show stream ID in statistics output * nghttp: Remove --dep-idle option * nghttp: Use same priority anchor nodes as Firefox does * nghttpx: Don't push resource if link header has non empty loadpolicy * nghttpx: Add logging for somewhat important events (logs, tickets, and ocsp) * nghttpx: Set Downstream to stream user data on HTTP Upgrade to h2- Update to 0.7.11 * nghttpx: Fix waitpid race condition in ocsp response update * nghttp: Consider user-provided :authority header field for SNI as well as host header field - Changes for 0.7.10 * Make sure that nghttp2 license is MIT license * Add nghttp2_session_consume_{connection,stream} to consume bytes independent * Add nghttp2_send_data_callback to send DATA payload without copying "static inline" fix for build with VS2013 (Patch from Remo E) * Update lib/Makefile.msvc (Patch from Remo E) * Remove dependency on libws2_32 on Windows build * Define NGHTTP2_EXTERN macro to export function for Windows build * doc: Generate API doc per function * python: Add async body generation support * python: Fix pseudo-header field ordering bug * nghttpx: Redirect stderr to errorlog file * nghttpx: Fix bug that data buffered in SSL object are not read * nghttpx: Remove --tls-ctx-per-worker option * nghttpx: Add OCSP stapling feature- Enable python bindings - Update to 0.7.9 * Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14) * Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09) * h2load: Fix crash if -t > -c * h2load: Add -d option to upload data to server * nghttpx: Forward only "trailers" keyword in te when forwarding HTTP/2 backend * nghttpx: Fix PUSH_PROMISE header field corruption [GH-194] * nghttpx: Fix te header field is duplicated when forwarding HTTP/2 backend * nghttp, nghttpd: Add --hexdump option to hexdump incoming traffic. * examples: Place AM_CPPFLAGS first to use in-package header files first [GH-192] - Changes for 0.7.8 * Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14) * Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09) * Validate :path header field for http or https URI scheme * NULL-terminate header field name and value presented by callback * README.rst: Cleaned up the grammar a bit (Patch from Ross Smith II) * h2load: fix for segfault by reserving correct worker count (Patch from Stefan Eissing)- Avoid shipping documentation redundantly. Set RPM groups.- Fix rpm group- Update to 0.7.5 * Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14) * Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09) * Validate HTTP semantics by default * Add nghttp2_option_set_no_http_messaging() API function * Update http-parser * nghttp, nghttpd, nghttpx: Use "sensitive" to indicate "never indexed" header field * nghttp, nghttpd, nghttpx, h2load: Select/announce h2 in ALPN/NPN * nghttp: Fix unaligned field output in --stat * nghttp: Fix -H does not work with -u upgrade request * nghttp: Update resource timing terminology according to Resource Timing TR * nghttpd: Add -a option which takes an address parameter that allows nghttpd to bind to a non-default address. Patch from Brian Card * nghttpx: Use omit minor version in case of HTTP/2 in via header and access log * nghttpx: Support UNIX domain socket on both frontend and backend * nghttpx: Fix crash in http/1 backend when backend returns more bytes than CL * nghttpx: Cast configuration value to rlim_t to avoid compile error on 32bit * nghttpx: Fix 1 second delay in HTTP/2 backend connection * nghttpx: Fix request re-submission bug in HTTP/2 backend * asio-sv2: Fix compile error with OS X- Initial packaging of 0.7.4xinomavro 17122392521.40.0-150200.17.11.40.0-150200.17.1deflatehdh2loadinflatehdnghttpnghttpdnghttpxnghttp2fetch-ocsp-response/usr/bin//usr/share//usr/share/nghttp2/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33194/SUSE_SLE-15-SP2_Update/2720cfad478d5f25d6a703c7c47509b1-nghttp2.SUSE_SLE-15-SP2_Updatedrpmxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9e528146d178905502e02a41ad49fbda42fdfb27, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=0c1a470d3fc407c63a795ce81d21e819b7b4e230, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=eded7ef22b69ff5bb213bda7e7a30499cc779f59, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=768d910d7f3e940957c5b988aa2f026f76054545, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9fcdd0178f50be2ad6ea5cefbb89c3886de049a1, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=2753c314db32cf7c11fdad19d48203a6f0c1c44b, for GNU/Linux 3.10.0, strippeddirectoryPython script, ASCII text executable.;Xr &R RR(RRRR RRR RRRRR RRRRRR$R!RR"RRR(R RRR'RR%RR&R#RRRRRRR RRRR R(RRRR RRR RRRRR R,R RRRRRRR#R(RR"RRRR%RR+RRRR R-RR RRRR RRRRRR#RR"R(RRRR%R&RRRRRR-RR RRRR R RRRRR*RRRRRRR"RRR(R RRRR%RR&R#RRRRRRR)R-RR RRRR[" -yMD<.utf-877bf14776771bb86906e4f12672740eec67fbb94338bb7b9bd74790b1a0a5fe9? 7zXZ !t/̥]"k%Y֫9$ 鳅VJn^6, f oT(q`>|ݜWGtvͧ=NdFd5V:#ϭ%)~2ܿAl ѽiWcEL˴@9/f{?e=X;& lG{oTL{84é/FT 9w٢ArR^\z~~FV?-J\̎qk\ ?d4^o%v=;IwK}Rkʞ)jI[xnԅF$`z\`?xB'G+X)MԨangr̒h:|~NVM5MS#awqc?rQ$A|&@ &{x3d' ˒|G$ BnR>y&cցþ {Wxs[,86?lt*`m<V-5CE)1`MTSOS4_`H/?.4 [߼!J擱Gk–lBA/Zh;;cXhΓ38ģ9rwsS VѲ%cWd>_B;7I 5qhR=C]8[ i#KJGX9AαzB9*iXܬ<ЊMa;-|RXई0yHZhE)x,yUt<"<_e]q`M?([:&c>N:8 (x2̠+94w R#Ll1r>.lcXgj:b,8w>~9O~ `ؾX.\4!yWFrj7@1­=nQ6 ,([+ @l6H { .p]kM5,2[p-?KHenD,lЋ[3}QkWlm<ԑ־S1hA&ƹkUqcb,ܨnm.O]ƾ0/kMp놪!FgG\8Ak4) FnDzG,z|a]9͒ή¢J\OQΨzK݈ZZ""nNMt֟ȳ(q_'ᠢ f3w%߼vkbO[bf(yRY7R'ŐZ9wXg[? h4O PsvALY[]-%ՌkBj>0C>n믺C0-"T11?\yEm׀ [1X˽t0_}RV`F6 O!O+Ȗ Iu fF]/H&4-FFgK"1C`9z@qM2Cdk;>5yV)0Vwk|3QuXDS> ҳ2]Fcd*3w*a*/+X/XJr9^ق"BS&`ŰSʻI!9g,{pfq/+vgy7'=CP} @ncЎ"M:F- ˸0BhioxHa%NLBiPɁK0FF!lKbTcmXQzyj2p1f℡%v!I9Ӧ0k! "as>iESU}ֺo&d)}7-s`0HM婜BOR-jW f|ִkds6y jx7poް3 2ݏ(3%tL֚iu솝͉$&5&.^uҭbWiߋ[}\QOk-Aej:ۨ_Y DV:> !h0i־QR ~3eݙVyzVZIb?gEyg -y[eH*ߎ#SC5Lج9@>$ _Kmx'b-ybZN1MYJx+;҅jZ<n¥]o!NEKd}{31}Z+K7?sˠ\ĪhuZ 8nc.Lsbfrkiet$3v07λqGnEhBk̢q};[}IGW! fpG @#Oo0u*ͪK nH{)f2rl-萀wgaoeQI B)8iR`heu:^2[?G$g^' q,/nNòm]jvqɅ&1;9X DVL'\$X,agV-.D@Л?+!!,r9+Rm}:T3?^ݶ!aVc+7.Ÿ6Y< Jb(/u`(:H.οh.dy1Rd)VK7@W&Q"!(o#-,%#OGN{PWAMTt}+ڱʙ I#=zS@ԝlד즙I7!12n_Ӝlols:"u^8Y_̠^J{ƚYmkު d9>铔Br2P:_0A_y`X@:3iHO> ]el->=jDRjNt8sw+Œ5 nPu3i|2܎3 1)`; ɗe% 4U`MJڭEcvc+vUL,tgorsz'U$Hyc30aTqEVFtsï̚w)#<29C0EG͡G,:!TbO;+6=#-wpˮvt{‹?Q~Ƿh%@U,7cNްWcf |ᑧ'#>䜊8nǷ]a3Wbǽ߱9LvbÊ=◪T",g,7 ThUj0]8V =kgES)!j5iAi}(S9)y.ԧ ֵbKoJ*(҄aVi{-J-=d&>!y%cwT4|jmgD%="KDp,ݜV5qT6|SM\MEX`j(z˨#99av(eS|e,ۯ'Eţ,0M!k&VSY%jTY`G %u$04TV8S).'3j k]^"&;!e_0@(xI=#7Gcx hSK4F([Ax]P,1DWV3G|(՟4iF-Ȱ΀'=}FO!{9GEjn`?E$ x)Th=.U,K2KӒqB{rGo$יWۭ#؊uGV+Z&\68V ήqi Hԗ=@r`"][TWU-ƾ][/ngOi9ݱo.ƫPzP B `g1ĹT :nRɏ?TVFR_p#A>:k;[5Nf`"[Her}Er$/"cUo^= Bӳw>:S끁p2랝Zܽ`~T릭(HJOnv_hF۰Y?E+툰U~CڦgF;ц"cZ7rf ~͓s$VK̅FIK̞\՚@&\.x"3J䣦jK[mϿ*H4 $Q[:'bf5% l37?Q$U0Tψ9?f鸘KqMB"vc߷{sabTD۲$^!)nQ_]A~A1p9yY1˹p[ nNZ6Xm6.d%Gx2 mocXqywe 3QDWNW *o]n,>_ї>Jbgm8T`M7,L|G|\zV l5(ܛpg$t)0 Fe3#rظU{ǁ^j#6/5Nt QAHMF:v>|R;^ M^[y@#إ+ϵeb3ڲHNCcKЗcW/[ J04es9n'Ϊ& Z_ ftmFT|wd7bCc1e82^r b|~ lY#!08&*hl'wtE7|`4!N=%+3CxeQמ)Қ̞ MuO-xye+o_}#MsƼȯUR N١q}N~M?t5{h9`()DAOc&9Bq/:K|M]]ܩ0|K6,X-#M@HW>lq+8͊*mn$"a"$2ox E4 +Lc, [Vp4i+^ris E$U^)I,ugS'1vS"KZu&T÷IʭvYD ׎s9e5]/1[]@?^j J4kE"~^N [?+"{w]]SP0 sLf \؀pPen]ckt|.h.QE1y6ׅ9AU va(vwtB鿎 Kzo, <D6G(W8#u}4іdQOyBŜCB*ڒ2L#6QU8W, p=DƞG悗Žh܂ƌ^M(`Ss}|YskTTnθ>EN9Yb2JpTNsHz(LԑS&J?)忾׊<޹mԅTMC%dGap 6}cw|b Wxh-'ԴuCN ( 1f`{a#J_\yi yFN R&ӤX_-Sc=OYdmX"jb2xS7כUNQhq"aGm@&c(I.X|Ou y_N&3s4y+mjEXhR)#||cv9pDexvv>"Dm˶'=LVO, F.A6rLDg$<HB[(ze}Q&3X}eXiv]|SA`V1Io\o"Y'_1.TmW̱U#eE-SO ؓ9%@d.5;B^ΉDfx "[r3Pj]W\ #pn zc Zڟ,&t i`aǹF :v8u[(/89!e?gF|ٍSZ,F6>yj'rޥK#Y=]Ê`~J9 F>C_K+[Ѹ M F̖ڍf^-v}G7ED;fU4t?gf- H3N֏IivޘnfF-G+_* s@H|{^2$ K.ԑ} 3Jv2Ԉ) 5ʛbdf"ed$x1bWӇK3SmuS S!;R{믈59eTx:' Tm"R;ٷQ${ԦEE:XݮQ3IyqRXt9d7niҳXona2=EcjfE9XU=f 8i~_OQ8VRǧ[/^4qU簧.rhe); pXXKbUQ{p[-@Շmٿ8f薟b6Q  U/Taɯ{QwЍƙ<_e{̔*u!ш!@j,5%CSЇ$!:亳t`GP=ыnvIT5 14.{Tǵy \ƞFcgzʵ"h@z1 E.pm*\Q#ZmǮ[!ͻ_W^뮛:R {1B\uЍ(M @ -u!IF*暎_.H-$ WP]Ćoքv%W> $a=RCvRO.a:w9rsf;Gy'q4Jт nԫ'ٜzt`c*w[+cc`, 8\~=^2X?r-!lԫ쵡f^"jTl*Rҭ5`Yh{Ԗ&))[x\){\a!:ˆ T,J߹f2؞. hd o)݁87;Ej-EDNQ e QmqψP.Siy G化\TPf6Vܰ+?mz]Yʂ8'-_5Kvp_dk8”#Ş-ـJPjNE|5&Nゝt|I#'b=H|+(j(am98j~})2o4]\HSS-LDңj&2*4)5 [PBO'c!TirS5# 3^{U",}"B=,X?S:%V폇;T5J)}"N H@[x~щV`_ ɋˊX!cǨ;h wI ]a8XMZS ǂn2N|9%3Uݰ1;LTSvdOTCH6nG̶kA|NrY=rܵ@#PSZ>E#FK>9AЎ b˂0(儐TE ii_•&#'?&<ĸ wІi<݊I9̥gS.cI*fb!}ɔxLsXlBy&?֏l?qXM:wd3p {W<6`hӏ'6l8+K?c/D$ƉY ZR0%̺{j+Uu3 Q}metf3JwQgFԤ@?f1)Z@+?\t2,KL}sb4ƚ׏$iI3xwO<-X0ue{Y2TSA?ʽ5w23 U\UEA;N>oJEշ X&ʑnw7'0+ Z&܂"Sdx`z!aoY*PAEzghW{?#wqpbHx\&Kc?O0[D*956)I27$Z0Fƕ,dhp&'qy݁To>}ty%+ؾ,v8d 7Sl/I1>i ? fF@DƤ[]-݂y= 7K嬱Br/go-Hp ϤU C+C|c檜LD2s#^ z02QbrnP* ʰjp|a LJ;X%Q޽jEĤiT7GIu#j B8 KT[vJ &=ϻ3,˕rBT2K(bPV?g!idWp^n5ǻp&kNK4kG5ل f.iIuu| P3U:زo}()<+wטqWwc^бIP+ Ϩi|D7Gc`1`ϊB qEvx9r, fջ#Cs{~xha wi :Tv7X}VJF.c@9M9vUKHh˖8>Hu+Nc1NTEbʠ1bŪiUH>\?T9'Ā$YB;fR/5v&,byy[+4уtR;QV2==+>9\IUwi8˲- &ᣒz?Ic [Fr XuADo+(@WݤIYxC2*5s?5 лu9vµO+ӽɝISG;D+' NN 4(Dkm5)i-fDN k"sqǍHz  13xx5ZPaE҅ `pDym-}(( בv*D>&M]C䟇SN"a['G"࢙uz -ثs٪'1R=3Uzʞ!u 7ڋh sHWUuXK(7'c}Jn{05bh(l\$XWM/T~>aʀ)팰U/TH{UuG+S_ެV5Uٔoϭ Ґ$*k{ )}(c>,M*B'$?8?YsJ{؍Ƥ}l?0X]nb}=^:sh?7MӿX-8$ZySj"ڨߣSY-A>68E9Ppҡid,qw~%j,3l,OY :gM_t$ߩ5YVA,ttU+猃Qt|WN]'s1f^k$n6vi.G]p,DL6 T1f*? FVB۟w:> 2(rY?]*p´=i'X9] &| Y }K 4散}tjxA)r? r } @>!⑓/*Cڱ/EF.fy9WxNy m¢Vm6>u}sq RIv"Sdtd7LzQ u٘M!N) 搰DL`=eMΆ)zhQv{r$ U^I<sr2!6V+H5s%iI1;hDŽ4eJRvpqo{T^xLO㞡Ȉ"YͫRbT*zSPh"'Uѹ"?Jzh@DʀfmWPFx!)u^˪nåk $ cKDVJd8\ads3B>| e ޺%0C*}Vg'0r 1++PX`(Ҷ8 )SN~hCDL=O5)% 2`0V a1zFWQJS0Rp@G?+H]~Y@~ (LK3},Cc %4`؇zWHQWM޿|y)fupz)tqIcpŽ':W %> Ek^>U}'\pag:* ֛KR?#~;sdJiĘd̘>!æk ClݜQ֫BPVqʁ񠔖DaA,SD66Ct1*)2>dӗ $pV-61k[+5ggyX͠z`ڿJcŃy$֤^Y!y}fLXg>J/n/{mИu7/.A&-mv)oʼF:i  >ڷ'k?/bcHU>%P)nHzrjrvQp>z7֭k8E[-BOF\8S#EKł}8 Vx'2_S+E3%dU8Y^ r&CBt{5itbGư6$b-ʂ.WR?iH.]&O+J[tiMx뻃{<zCDW#>xb ,GoU6|X ELr7~ۖbsНpx@|f9EH>h[E?S6v !-"/ORtalF )yJwx-\ hfy ~tufYd!^EChi]7}yr:!9d :LOr:yb_iO#Wm]u_{+Fn  ӊ"Jhˢ3CRWpcGwAF?dlwsTqoaGL&Big-nzw6)!yGxVm}OZ4H ;Vl#Wr B u:˳3qnH#XYVd[`XxmPs-޵A;ǤX՟rf}r 洖V SNwSŽL fdV槜]f剳\ ..tvr(g]ajxo4oBe{d["o qI_DusTr䢝@#-] I^y}|zx F m9fr+VN1H4NF˔/ҍ"qǺM٨v>RZ @{ŝ0éKt=fl;`JTsu1M[Vd/O#- :2ڦvGǚ9 .tafpIhc%ປ*G!v9_T ?sFp$\5S eɗ=n?`ώ֢TswT|`k3Ez<qZsPΤZ?xZ&QBx mYuDX0]ǜ,BKeꠂqV$9xF-nO>  @H|ƢkPhcxTV(ڑo@,Ψ&2O>u#9jmk#17s~0cʩ--=%:`'vUG[M6o.cJw"_VKvúM5aGa`lvU66,WɚpIA@uԾQ鸚/cx} qG5ygGY8|}/vUGI{KUh^ce=Tg]7 hYڥ]J9ԽTL>{_ 8 ܘ{;W")RG$#; O|w`}L _Ǚ2,PxBV lS[b%,2 SZX5b%xzЧbYi M\Ԡ [!r܃a(-8a8&cTќw0HSZ6y2n6 PBqe< NEYBݿ+W°f6n݅u=9Q$Ju1 &OԤ}=xT5 M%Ԯ&FxA]NIm)8NfsA@@< <1j;0] IݤA;vI3K1y4%c2kJWAb-$z LyϙSޛ1e#k=c_ѷR#Yp){3f60ua8[0\ص5է % t/ը&hR?~d CS4'{ nGKRM ]K bxf]<}ŞXe xq9=yd|Ϲ{-d&XTK;6.5]_3ޡ*-؊"b> ט°AZd8~3zQo,n-Jz]~u^eϑh(to2Wm2k"g0l`nn`l$/EH[eg*rxlOJR,1 P?qs^lآ3Ey%Zx*%~^@v?DY.?WуK˥}.Kzx7}xr=ZMׁЬD.aIy6CQpf]9p' hqeUSrr.q&rV&TC]QUg[5 nF'Vzq1lԽ}6ѢA?:zj⋞؎HrA/$hoU4W<͗FkW.2V&-o"`Ã֝ j2.<9R~3qs6WI0},'3|ژ]Y69 *\aOQ@,XiX T0Q#t ;-V!\1tE/ 8;8WdrX3(T੉wbY"Eu$sdeyy]6o.M0M^8ϛ3彮) tr ,Yxzj&3U"#៙o ǚkg@1HIA\!FGֺ2ုZ+U*oœ!, P0%TvV8[$tjع r r>i#Rvۛy˺24"x>uDeYr8yP'*=m#nW&&CgvE;A]=Gc~X ʁuMAnb Z?9q(igKBY! 2S&,`T;N-W` c)K39[s5,SG哆o%a@cR3e)H[:y#iI=6ޛ<6&L<ŒTY஡,*)d9op%sa)Uw2*E_5N4Q 䎖!fjox z_V\h2/-zp3NШ8xzu!"7|>mIq$6A Yh0xhqFMREW'f}1 _Z,ת,ˤ6sأ{S YĚ?8S_WP`׵7oK<# OVw@PG2kbǔ,LőA#XJ{u8f)ۂȳ9< ]W&9Af۫, L=(mX۩?Kf:grK.Կ[d7=5!tZ2.ڑfe^^Acɑh@KÁHT6ϤڣN=N@fhZԳ3ژu %f,0jYabl?B6}v#6_~Rr)^[GLq$MBb <ihx>7Iu.P ׬^v\$MPUA/ZQ>(8YAԧςN7-=]g=Tl-@Ạ\PtP-\kOyI=&Nzw<7ʂk0CFEtI_yLӈKM i^SԖ"Mfnw:Nd/[A1Аb@q)W/|Bo ZVr2x gpXv=BcSw.)Y3W/ʁcr\^%MOALUc6ڗv1 u彚aI%〓!di d"џ!8m$Z Pض04TV`DkTbJ#Rq(GuRt;kgq質h5 !!o)ly9)aLTu-S SF\17iHpAbZ)":|6 LO d {jz  4cBsѣ뙹f_ ySug2l҅gVh!9*dTb}{K;%eZQ9 GܕU#]b(2?5 igIcD (GN5>S#+cK~~֓A;שJ,,@NRGah? 9nݱ+-ԉ ּú-O`۠}HGOXr5^s9Da63t %[^ u+~R^fxjUX 'q^5]H?QU+KG4zL. Ӑע.u1E\`1CYixJB~SBĬek~Nhȧ (.T{US[:zO}gyi{l\HI`R>ϩ`n‰?gLD؝.zw^z,6MT校t~Dd]^Qɯ=  Dҽ BCS E;?srZOǸКnAt4"I0nGlCܵ˛@Mjkm&:.3#']SΧXߏB(;N|m<vD\*!YZ~<G0dq6t| o<{d1`]D3< k|h- Tq1[ӂܰ$- M&z;:V 0w(`9H3ƙ2,m¨9ozO9=y'MlXa}v]%]|>dޣ%]Wfz {{(>$Y*kt+QP0<:ngjݡRuʾ  *j!|*$J[-l $qݎiND=d*>($F{l5=͉}~x_h‡M$+|"o%IVVqi78$,Pj.ׅg4&m$#1&[qRZ  ?@ b8z&eR ]a'?#C`!O<.ɗ@ 걤,MЫ{ɹ_9Z H}ȣtA*(7,Vմ,]2_.3# )8м@7?)]S*q~:lbYYt6kZaLCm<^zLIEBS}oq~ِ|s)4Qԇd#jexsu!"k;Ce4^laFIiz#BWyɉE܀,[zEw8³`JNfd')̫D>f^qƌr, YWVXuK0ϧm #^K¡YeċZhf-OCW*04 p1+jLF[_cޖxs.E`8KU^B9 -`h _ChwtuxĢ*e(N6Xύu?<vi5Љڴ1^rm=!j*3/Zc/Owۤ3ڝb<@͌T'@GL!UR<[j=#NZ.=E\ h}G.{ͨsX)h{);vW:C%jNrN|?"?X e#Zp\0 D5ۈ~l<hqٖܰCMa=SiY!J ˶Zov|T4L wD0O!7M%ybFòxկY%)ڲ<+7u(`%QwH7AH܇ ~Ɏr=|c47ߪk\c$nSϿ!opAewa~ZOx˼Aǀ43m׭gG /M$y!Q8]h*[bՍԠI97-c>P@4[;Oyfk`2t&ъi eb\ŐBIp`u.Bb|}׽2|)JמvX8Gy1m[zym N0P?6l$$ֶ:'u89͝~7*|{ѣG0l3M4OӬxqI9,XUD"p,v.2'FS#|:uѨlG0|:evYݓe1;y1;Fc6ybq$/jc ?m]Abʗ+_T7t9zQ..:X,ux,+J&w%-5%$)N6Gx)zwFe4 ^O-%246@RMχM=0񋬋pw PPЙK&⬪x^9h~wdyL.edBm\H!-uդ4k<M!n$Է`F 084mfU6(WViwkS\[U匐uずAEWR}ڶ }Xwl2Ohg#ie7Dm!'ͧ4xU ?3 hvZ/L7* C{Ph +Ecݲp6`q:P:47AYZdCݥƱ[jQ~֪nSOGg6`Cex ;][cXPrtRX.@ Р ǖ9'C-@2a]|f q}l ϗJǠ&K*yT3M['ߘ0KH`EcnNRZ- LH k4 ?Д_P%w!ya nz 5PNkÕ|2{=K7[ :$uN5;t:Luس<*؍3dW.OQ;|0dy%"DYp֝_8'5L%$F )^,qJi(P{g[8!Gɇ6oSIJ.V#pWC=vkw@?ͫd5’뛌y(v' >w2J9NNr@7/]dUwΑs'k'y'G- !$x~x; /R勺nbcTڇ]z##W3MzrKB\^.'׵Qh$c^aQe4ed)M]e=8d3F`6 *|'r3q3F ū"}QϚm{ Hn pC? P{]ouYR^glw$KaN%#208j 3+S6|/iri]^Dc%)dŗV.wfQ?lǿ6zi&Q(ަS-)vv+KՈ HR!+%P.W{GBxW䠶EL1 kGj_X|g3 > 1n~t2DiH +f77B/ -.ZS|4cva%HX\Iu wUv[3yO,WObYDZ9xDq/{IsJU?աg:5« Y.}:!LRwQl.y`]Aį ŦΞqP__ d%Q^5?foړ[#m-g$'jXa}- sr0/֢0}WG8^MlCƏb7pX9VZQ +6mNf p&ւi0#Yxt}6>6;{T8dFӔ1/!}A}ju]@<)&jP0PwǷzJ@ /쟵 ozi3fΕa0?jYt3"ԘZ ?5%/'][(Ǡ{$qghwoTNp:[{YD9.qLW/y(] |* ң+,Dz ag%ok || /& Exݸ +ݡ&e .-ȚAXcѥHꌅLXb\2R]$11`~9~68\ eYD*DUW#tØ3M&85G$ lȬ=f`?w8{ZQ;-QMZo85%k ǡe anh3~1|_&Sض:J"Q3dWB~ASPsa.f=o +5¤=o~]H+l~&e- W_g ;U5GKU|;dnqA]JUVH^5KmG_6L2#ė *D 9Rʏ#,7gy{TOBZ(5dO"1Y=,@Fbh6@~=#Y"xڎrCQyc(WD# B.EW*D ^m9"}F}w=#Ez#[ 6PJCLe$[ۥ2viYy*8p.~)6hȉ6w.iLh . IRG ?S/3 tعDzITjeQDEE.6qP˼9}2y`]^iw!Qj& Ńaӱ= 4=D(/[>@(W/":/r( ]KXAwd-WB/q l5F0)`6%UCrybZƏx`b"bd1s' icjT^K}.]`dT`Qc1qPQLpiØZ(OH1R5]mOdkRcAGښ{ӳnO7G>ZX rH FutޥZڢǀ`78nZ5"W{aͪ=MLږTM!v!ع.;M~nO*zU{7#XUÄIUɇ 뜆)ΛCk=),N\ds|Iy<}% ?1J[(JZUm~{.)8!&;^b@!8m齱l1@.D̑s78aC=loaޗgٻ:YEXQCd?'~`gF ڧῌoMҒ v \,`^64*YFcqN&A5Ii+hF6:wbpZAEVs6S>5&ײۍtIKXg#<ߝ߂tR@&^CYz})^d}W)Ƈmɑ( Q3-&_Xpmpb RmE9Ua/^S3*Xڗ\̒IU+$=|Pe$WWZBZby"`B"gaܪҟ3'ͭ7tE]р HF1Qѿ-}WAd_&w G٘7QW܈L, dhI32hGAV0s-^[&asv*@9Mr-CV>|jL7  SW;Oԝl ꊘ I2`EyAz|;\(Ž?\y`QaWhއLM wVvW{)ОP,OFԇڼX@tA'ܣ3k+tT rm a=`Jʢ+T2+NxPiGnɣ.J )9PMl{o9[b/ !BZo 4FĒהK: oiܧQV#=}guK9`$||/o].Fθ\n2Qlij0n'|K?2X /.`1_x[wp[Y\-ȜA\bAG[pigjiϙY #?wY7uE#ir& y5`j[gMX8}U? lU:P~ h7[b8y PnnS;;e^9!᭤Tilg@Xpl, (ǦjL'sD iD(b:nbHhr&pCgZ\iqE4 j=(޼J +TJgI;{5{f:{Q j? BT])p!B$qⒾ>ģ*-JGHgU߆R7(QږAI>(z~EX-@HD"ZlhK!u]}3Ј~ZG@&ʛ*n(Nˇ+ .C.$g,r8kpԵzb?<R,Pެ]O\,&@?P N=+At7s|Y?s@M"5N.oG@O=R距,ʳkI:[ǝ![I}BbI՟ DߴZLj(WQNN}.[pXiw;X~1b>Gu/ ڀHoX4\e wm|];GVp{wڍ8F^+SgO!nT cxʢc 3e 3syßq\|C[T7z27t߈Yh l;)vqOv(URJ`iIuFD V(:[dz@;t&$˄]KcmywoGՃS)CZ浩 @9nn7SLcD4^;do-T_B;J$pfqʅD!!i-oSضnaj3`!X;.J=QQ!~5)ZqaGYQm$ Ⱦ5ntarDߢ5B={022ɨRX0jk9NuVQ@ʳA R_sa;Dym]9]38m4Pdϛj2j:h|c6azlK;7/op7o1Pt>:So%Z )ŧ;{흽{'F:7&#'3'!]3>m2?D|xתrW6T-) OŶ`~_@%p#ixK`Xrl/5Ļ׼_[za-g-l#$ @GZ+Gwϫ1gD3T:Q:./aEj)Dy@5S t)F)0& ~r;R]-k^NbA^0h6n9VGVdn#u6"(-n<nt yay. <_fC*$ҪiƲk$c(4N87sؐKkB_$}栟j$ eizKӵ;7ձt"t@[B\ԴզRed<<$\2@TP'06*8\ja&BڞZj,w$$K?Lݟ"&PDFo47| =Fw@aR&;te8Êe_`Mx;y"D>8Lp[ji+ߌ#)nwt$U_UEhkWBf3+E<*;NBevvMN0Pth&<}/1r8NR?goyu)A|BH|0eW\ !Rȼ>uԁ(!>\y-Ws3 Js"X'?TfhCvW~8셼2tw몜[L=Fl>~+Or9[2 nlXCg02߮AWN$>䱏U@s a_PhsD -+Y1_~ԴVZ1 n.FByfV-ȥU>މUi|6c4ktj ql%XPhu֝dœY*wvya$bŴEe  /Ś r{2zҲC9j Wꈓo#_0EHv]Ԋ/||\ʖ!\2 ٞ>+DWޥxmgϫGGN4ڄu]QnE{ǼYQ^G;h{Ąp{/!liMlѶεvkԾ`6廢eC3g"ׂh۠ *~ lA\k% xcn7:|5\Ct w#|M}Byy1OxB啒ZZDcO"tw<%/ (ۯ/=5Bv7 Xq/]-`T<Ŏ-}I~Vu_ FF[ >bպvd{ X_ɲ: /*J zyE43Mm˯y_\zK܏Fr#"CH4y xu1P|,v_zEnd=2 RrWnD=b81&V^ BN B XGwҙ׋QH[Z@FSk>9za5 §QAd/"CbNzV̡]M6܋wk"9r L-?pҰ`i(+ P$<.̥V'%3^q}֕/z}?(e`EɯC` X/J>sL{?bՐ{kJXPo.r!"vw ):ĐJh3\6cj$)"7v.qz5&oBskUɬ#ӎ@H:ۀXp"DA4xݯiXY%\=oC5`W+&l#ETw໌6I(d@nCd GVO,Zj\7wbV3hb+lI\|P: gv]"Pd:rϏFC?7t=u;?7ϠfCK֏ vk4"#x\_$6ُD*ϗDOs{S9HeO"Ş80LO&*9Svc1JO y& /?JS#R<ٍޏl^uiU@]0N{"_B(Z7&C8+TL\ Blx:"%üHRт{fa,p B'kDa1kGF1Rtj1)%C.^zMo%}K[1QKGFrx(}o BMI#h|*Oj6[@4o))_ۼPєG2*S8Dt/ؚԠ,,Y$(\i@<ȟ,&5 E6 ~V9xL5RuwtUOшe VdpyqJ4j)h;4;(*|qf(l(NEk~&Εd.βFU S,.TJ=7n Gq ls*!A$0Oݷ*&Wfb4rѬy;wj|XY ʴ[^ :8 p[$aCsPaI[Q%]FyV9EχT+= Qn( ;Qda*i,Cʱ'p~ qx(]oq "Mp-8P-Vtc8?{rȺ f?O]1iEDҹĖ(c=JFD]jm4w0 %@nn,^ǐdU] __^ӡA,8:=s,p1g[qQ2)S>fP"½J1L1+D#~IFN#$w 禓 :,mÉeKbɲKSMrRqu{J쭟n"J"R aM_nP'%/Jh.0Hh䛶.kѨS1Zpx! Tԟ,Z lU Z9xm6+o0T5f'r'} NZ`OyҘ`S} #4[CC~U`W;Oƺ nǾ%cT&#v#V&XMv|f?ѷӧX wkvq=Qf'nV(.9<=x4(N++7-snjJ;:׼4 ҟ]@A_W2rz8h#z4n=oORjtDŽ?5iƿo@XQVbΣ1t ݗ6qepGs,oziup5YE]5 {KpɅ3^\D5g 2Ч CdXB+(&DtCn\+ 3PO'2#khRH 0eNgI+֚ ٗDSW=<,nkM)gZ[g=^ެ.SBe Me]yrM&o'wȎ7FeZSnm%YY!8UFl5CsT:( oTU;#k^GBLG L.n-/ X'u#.\ќf#z3NRΤok+yş Z `kmH@!5̋8%?X77':zRW4 ۊ5MD³^^YMo*K #I&16>8 pgwݢ>ԿB׊搠zVe o̘53t6>9˙/0B?_;r3oTI{L7'*0/M/*RP?  !=H>JF[6hiƁW<uy.&ܢ`Ez> ]iܴB9N \k(HO`8h}롍tT*oX% ֊d+؊NmΌ> ʢPR!C?fq% ep@Da>Dty0e8mِMՒ}SXZabEqB]SF EHP]H S*@GFsK o7yf!e֧UɪBIC(4(-YiM~&2?ei`-MhR 3g1)f2%eLFkhL]\4װV9t+lei4k Z_ơ~|R:;Rt(P-luV7;ӽtE#T>^X"pJ05Vv%qXr#Ԅ\B +?HN=&ikzEa~kX@3N'2M6>"*)b#rQVa<!/x2կ|ݱ{j G_Ь2Vt-8V0:bnBNr0Ɛ7VuM+][=1让_rw9淒r hS1z:tMS`0Sn+ywLa\}t&=v#Yo4Qv5lR 썱eY*W5w>[͓X }v IBrM*w}nff^ MkD[!/A.?#+FӢzd:v6\5uyRғ‡  2`W|/_B.xx|2gtx!ʂSlUTv7᫷2L\V /r(S.u *:]D!hL@fM>$wb0rmLѮH XLZ(=\δ*lᦺiI*-4#Uq YXz{ǹ$;U#)4UD*eX US;Yw5͔'X|3YŽ @f($EU írIoƁ63Tx,"'k:zhOgz ŎFh3>Q*ڣ%PJέ@;40]'775x^[ 0vGK]wj̪msőo?s=v!0bj}5%ʵDo+[{el,NLŏ•ht;~BcpB}&W@}a<#I|ۿ*ێt+hLeT[J!5sP}}W% ,gE5`*OQ!YeLm<box[pkۡ@y\ tbaF(PyW5m dN5?7 o ˚CwSzhgN)jHq? HI2]bɃEgᵊcxOV!3*%\\"LdaUgsܒ&4 [f b9%BvJ}hsp)zՄ3B ^ *cxuȹTM*/(m\Yك.ID0Jb3;2侴2Pz,u㶃+)ʊ:&l=Tv -(gI? 6j) cU(ػA tUgPű|\ Q$_dL/Uv2g c)C~ҋ ɂ 5_/Ҹ@,qg]']ǖ IKNli V T+RӅRz?KPܽ 9hIndM6g^p#kxd{5F$5ۇb$sc1jEւl2 ~굘g/Ӟ>os}(f+ ;ME_Vh))b7XYCޖMŢL|:٪4xl&XgPWxd&7NS"-ْ6_sMi֮d\EwUW{郚>xh%f,i[+ʙ=D3[*r`hs K'Db@@5w'AEEe_d[]B1M4I,ggu1]csd]WTcp[$WOT55lM4)~.{&ϲ?u3+*n@f2$.< Z N6;h 8H7au@}% dB9z@k9Jلdt yٌtkU;I2Qf(9rfn1܃W?RRf"6! (,(`=GZI.hj?W%@L*MxO5J'k?eHj;oP =->7}°he^^@u立Ia\s)TImf3v eTWbl]}' 4בr@Gx}1"oª>m\m؝:hTF./xV_e(t*^]2Ž`gQ1s7$u\HCTBa3iw6jZPr&Uƭv4u䪳g~iL:}θQG;uN$!,M 84&=(+5*jn&Sg9@(P װO/Sl.hb8ّ0ܤ_c9`x SZ !\ G",ؗ--JYjך3Zl zsVT$6Eq ZZS&p5#Q%qJɵeRT_$C-UumMA֟3\tř݀|2D4n86rd+\l˝HD-M9E2 9YzDZ4IFʮD#h k :@gZ1%*)CBG쮒Ϫ{K)9 s&HtExZkq"Xf=nK&C#Wm%Z'*Sr'w `,}4QWwύJQc/[iv`c0 FTOK{;d)q0ZQlNC 0B.<[?rAlhI?B;c ׶No*>!' Dh Fv|hΒk`„˗њݬyE*@_VK@p(}=wA.RgD(Ft8\%`IZtВh)*U&@^I!eN!y-|%(P$\FFU=\CV{O{Oe)'4. CJݏ/\,3͆ǻ`biT 8p!i `O;\O<G2}<{^=eD3+޵VpCA`[ɧUHyҰP|6 F!v]6Q%fnFQ=lA-G,A3W,J5T}R\,= zɎxM*o aej(ED?)fX^40ww>>*ac.*+h])DS!AXg%t͑, ]%>;5FTR]WL*apP9з[i^/H8-|h+oH{).WS!,cab`yGz7/i ZSɭtzzW8C"osd?$(nap;:FI٪X";WW ]gOFP>P:h$Pu\|05r-RMRyٵ?jêN>||?X&$@/xо&7~siIm$yҨ/}& cNW3P<6 K)JJ>βvN$c aC^Sl8SYJ>at0R'~tΞȊdY%#˓ ;kaZćV%]鸪rm%bT6e4ܪ?SryuP{~[*,6eIFÖgX,u^$Qěغ󐉶*b\YE9#)FK29,2<+tu9jVLߡ_y>T*a% N܈%C~~ S$r>aHۑG|ai^9ARH ̪ylQa>ݧ#B/ ͍T~ YZ