openCryptoki-64bit-3.23.0-150600.3.14.1<>, i{qcp9|c$M=="ԋ5 Ȩeo=V/Z& gUaJ;|[QSf/Zp!v#e݆x0dZe\V Q!Eв)yS^W8[IE'L® FPQb%\@t1-Κn?ڙ0j%5%p4Elp.v75@?d * w!BJ `v 4 d   h  l    ( 8 =9=:a=> FG(HIX Y( \\]^Ibc\defluv`wx y1zDTX^CopenCryptoki-64bit3.23.0150600.3.14.1An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareThis is a re-packaged binary rpm. For the package source, please look for the source of the package without the "64bit" ending The PKCS#11 version 2.11 API implemented for the IBM cryptographic cards. This package includes support for the IBM 4758 cryptographic coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer Cryptographic Accelerator (FC 4960 on pSeries).i{qch02-armsrv3(SUSE Linux Enterprise 15SUSE LLC CPL-1.0https://www.suse.com/Productivity/Securityhttps://github.com/opencryptoki/opencryptokilinuxaarch64# Old library name for 64bit libs were under /usr/lib/pkcs11. For migration purposes only. test -d /usr/lib/pkcs11 || mkdir -p /usr/lib/pkcs11 ln -sf /usr/lib64/opencryptoki/libopencryptoki.so /usr/lib/pkcs11/PKCS11_API.so64 /sbin/ldconfig6 p +( +( +("" AAAi{q`i{qai{q`i{q`i{q`i{qai{qai{q`i{q`i{q`i{q`i{q`i{qai{q`i{q`i{qai{q`i{q`i{qai{qbi{q`i{q`i{qbi{qb3406315d5c95bac0fa2fd5322d1bcc9ea0aff9091d94792ff97e86c4294accb0e98c5dab2a8e888b8f28ea0bdb1d41f58fddd2de85893047943d716d4c991587970a15290013f0eb4a283f340fca72d5eec8ef3dff60ec203c4f1ca106457e41e7995289eac215b0b14d4e2eab0bcac914f8d8724a3e0f8579c473ba77e7e42df7a18dbb9e53fe5b0d6cc62c8be593d2b085264e57a9e29bb74835dd23796703libopencryptoki.solibopencryptoki.so.0.0.0libopencryptoki.so.0.0.0libpkcs11_icsf.solibpkcs11_sw.solibpkcs11_tpm.solibpkcs11_icsf.so.0.0.0libpkcs11_icsf.so.0.0.0libpkcs11_sw.so.0.0.0libpkcs11_sw.so.0.0.0libpkcs11_tpm.so.0.0.0libpkcs11_tpm.so.0.0.0../opencryptoki/libopencryptoki.so../opencryptoki/libopencryptoki.so../../sbin../opencryptoki/stdllrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenCryptoki-3.23.0-150600.3.14.1.src.rpmlibopencryptoki.so.0()(64bit)libopencryptoki.so.0(OPENCRYPTOKI_3.10)(64bit)libpkcs11_icsf.so.0()(64bit)libpkcs11_icsf.so.0(OPENCRYPTOKI_TOK_3.10)(64bit)libpkcs11_sw.so.0()(64bit)libpkcs11_sw.so.0(OPENCRYPTOKI_TOK_3.10)(64bit)libpkcs11_tpm.so.0()(64bit)libpkcs11_tpm.so.0(OPENCRYPTOKI_TOK_3.10)(64bit)openCryptoki-64bitopenCryptoki-64bit(aarch-64)@@@@@@@@@@@@    /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libtspi.so.1()(64bit)openCryptokirpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3i{Khg+Z@ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ]@]nU\f\&@[[@[_ZZw@ZY.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U@U#U#U#Tp@nikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comtabraham@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commeissner@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comkukuk@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjengelh@inai.dempost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgp.drouand@gmail.com- Applied a patch (bsc#1257116, CVE-2026-23893) * openCryptoki-SLE15-SP6-CVE-2026-23893.patch- Applied a patch (bsc#1248002) * ocki-3.23-PKCSSLOTD-Remove-the-use-of-MD5.patch - Added riscv64 to openCryptoki_64bit_arch - Updated the patch * ocki-3.23-remove-make-install-chgrp.patch- improve handling of user/group. use existing user/group if they exist. create user/group if not (bsc#1225876)- Amended the .spec file accorinding to the recommendation in (bsc#1225876)- Updated the .spec file (bsc#1225876, bsc#1227280) * Amended for group %{pkcs_group} and user pkcsslotd * Copying example script files from /usr/share/doc/opencryptoki to /usr/share/opencryptoki (policy-example.conf and strength-example.conf) in case that there is 'rpm.install.excludedocs=yes' set in the zypper.conf(zypp.conf)- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914) * Bug fixes - Renamed ocki-3.22-remove-make-install-chgrp.patch to ocki-3.23-remove-make-install-chgrp.patch- provide user(pkcs11) and group(pkcs11)- Amended the .spec file for pkcsslotd (jsc#1217703) * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to ocki-3.22-remove-make-install-chgrp.patch- Upgrade to version 3.22 (jsc#PED-3361) * openCryptoki 3.22 - CCA: Add support for the AES-XTS key type using CPACF protected keys - p11sak: Add support for managing certificate objects - p11sak: Add support for public sessions (no-login option) - p11sak: Add support for logging in as SO (security Officer) - p11sak: Add support for importing/exporting Edwards and Montgomery keys - p11sak: Add support for importing of RSA-PSS keys and certificates - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different * Bug fixes- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361) * openCryptoki 3.21 - EP11 and CCA: Support concurrent HSM master key changes - CCA: protected-key option - pkcsslotd: no longer run as root user and further hardening - p11sak: Add support for additional key types (DH, DSA, generic secret) - p11sak: Allow wildcards in label filter - p11sak: Allow to specify hex value for CKA_ID attribute - p11sak: Support sorting when listing keys - p11sak: New commands: set-key-attr, copy-key to modify and copy keys - p11sak: New commands: import-key, export-key to import and export keys - Remove support for --disable-locks (transactional memory) - Updates to harden against RSA timing attacks - Bug fixes - Amended a new patch to fit the version 3.21 * ocki-3.21-remove-make-install-chgrp.patch - Removed the old patch for the version 3.20 * ocki-3.20-remove-make-install-chgrp.patch- Updated package to openCryptoki 3.20 (bsc#1207760, jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 ) - Removed the following obsolite patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch - Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch.- Added patch for compile errors * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch -- Changed spec file to use %autosetup instead of %setup.- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the following patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch- Updated spec file to set permissions on /etc/opencryptoki/strength.conf to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)- Upgrade to version 3.19.0 (jsc#PED-616) + openCryptoki 3.19 - CCA: check for expected master key verification patterns at token init - CCA: check master key verification pattern of created keys to be as expected - EP11: check for expected wrapping key verification pattern at token init - EP11: check wrapping key verification pattern of created keys to be as expected - p11sak/pkcsconf: display PKCS#11 URIs - p11sak: add support for IBM specific Dilithium keys - p11sak: allow to list keys filtered by label - common: add support for dual-function cryptographic functions - Add support for C_SessionCancel function (PKCS#11 v3.0) - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER) - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE) - Bug fixes + openCryptoki 3.18 - Default to FIPS compliant token data format (tokversion = 3.12) - Add support for restricting usage of mechanisms and keys via a global policy - Add support for statistics counting of mechanism usage - ICA/EP11: Support libica version 4 - p11sak tool: Allow to set different attributes for public and private keys - Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated version named ocki-3.19-remove-make-install-chgrp.patch to fit the current state of the source. - Removed the following obsolete patches: openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch for bsc#1202106. One test of the gen_purpose test cases fails with C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.- Made the following changes for bsc#1199862 "Please install p11sak_defined_attrs.conf." * Replaced ocki-3.11-remove-make-install-chgrp.patch with ocki-3.17-remove-make-install-chgrp.patch to remove the "-g pkcs11" parameter from the install command in the Makefile * Updated the spec file to include /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file with the necessary permissions and group ownership.- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM mechanism does not show up as supported by the EP11 token when an upgraded EP11 host library is used. * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch- Upgraded to version 3.17.0 (jsc#SLE-18326) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks * openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes - Removed the following obsolete patches: ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch ocki-3.15.1-Fix-compiling-with-c.patch ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch- Added the following patches for bsc#1188879: * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch When modifying opencryptoki.conf during token migration, put quotes around strings that contain spaces, e.g. for the slot description and manufacturer. * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch When migrating a slot the opencryptoki.conf file is modified. If it contains slots that already contain the 'tokversion = x.y' keyword, this is accidentally removed when migrating another slot. * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch Change the code to use the pid file that pkcsslotd creates, and check if the process with the pid contained in the pid file still exists and runs pkcsslotd. * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch Always quote the value of 'description' and 'manufacturer'. Quote the value of 'stdll', 'confname', and 'tokname' if it contains spaces, and never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.- Added the following patches for bsc#1182726 " p11sak list-key segfault" * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch Added NULL pointer to avoid double free() for the list-key and remove-key commands. * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch Note that two hunks that were unrelated to fixing the running code were removed from this patch. * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the curve. (bsc#1185976)- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch (bsc#1182120) Fix pkcscca migration fails with usr/sb2 is not a valid slot ID - Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch (bsc#1182190) Fix a segmentation fault of the sess_opstate test on the Soft Token- Added the following patches for bsc#1179319 * Fix compiling with C++: ocki-3.15.1-Fix-compiling-with-c.patch * Added error message handling for p11sak remove-key command. ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch- Don't require pwdutils for build, dropped long ago and not needed- Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666, jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714, jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786) * openCryptoki 3.15.1 - Bug fixes * openCryptoki 3.15.0 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named "Vendor IBM" - Support C_IBM_ReencryptSingle via "Vendor IBM" interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes * openCryptoki 3.14.0 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak * openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF - Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch- Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114) The EP11 token may fail to import an ECC public key. Function C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case.- Upgraded to version 3.12.1 (bsc#1157863) * Fix pkcsep11_migrate tool- Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918) * Update token pin and data store encryption for soft,ica,cca and ep11 * EP11: Allow importing of compressed EC public keys * EP11: Add support for the CMAC mechanisms * EP11: Add support for the IBM-SHA3 mechanisms * SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token * ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token * EP11: Add config option USE_PRANDOM * CCA: Use Random Number Generate Long for token_specific_rng() * Common rng function: Prefer /dev/prandom over /dev/urandom * ICA: add SHA*_RSA_PKCS_PSS mechanisms * Bug fixes - Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch- Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch (bsc#1152015) Add support for new IBM crypto card.- Upgraded to version 3.11.1 (Fate#327837) Bug fixes. - Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch- Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch (bsc#1123988)- Do not ignore errors from groupadd. If groupadd fails, installation ought not to proceed because files would have the wrong ownership.- Don't hide error messages from the groupadd command. To eliminate a potentially common one, check to see if the pkcs11 group is already defined before trying to add it. - Update the summary for the -devel package. - Changed several PreReq entries to Requires(pre) as a result of the output from spec-cleaner. Removed a couple of obsolete lines. - Removed obsolete check for whether systemd is in use or not.- Upgraded to version 3.11.0 (Fate#325685) * opencryptoki 3.11.0 EP11 enhancements A lot of bug fixes - Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply properly to 3.11, and renamed it to ocki-3.11-remove-make-install-chgrp.patch - Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch- Upgraded to version 3.10.0 (Fate#325685) * opencryptoki 3.10.0 Add support to ECC on ICA token and to common code. Add SHA224 support to SOFT token. Improve pkcsslotd logging. Fix sha512_hmac_sign and rsa_x509_verify for ICA token. Fix tracing of session id. Fix and improve testcases. Fix spec file permission for log directory. Fix build warnings. * opencryptoki 3.9.0 Fix token reinitialization Fix conditional man pages EP11 enhancements EP11 EC Key import Increase RSA max key length Fix broken links on documentation Define CK_FALSE and CK_TRUE macros Improve build flags - Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch - Made multiple changes to the spec file based on spec-cleaner output. - Added an rpmlintrc file to squelch warnings about adding ghost entries for files under /var/lock/opencryptoki/- Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch (bsc#1086678)- Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617)- Upgraded to version 3.8.2 (fate#323295, bsc#1066412) * v3.8.2 Update man pages. Improve ock_tests for parallel execution. Fix FindObjectsInit for hidden HW-feature. Fix to allow vendor defined hardware features. Fix unresolved symbols. Fix tracing. Code/project cleanup. * v3.8.1 Fix TPM data-structure reset function. Fix error message when dlsym fails. Update configure.ac Update travis. * v3.8.0 Multi token instance feature. Added possibility to run opencryptoki with transactional memory or locks (--enable-locks on configure step). Updated documentation. Fix segfault on ec_test. Bunch of small fixes.- Removed ARM architectures from the build list until gcc6 becomes available for SLES. (bsc#1039510).- Updated to version 3.7.0 (Fate#321451) (bsc#1036640) - Update example spec file - Performance improvement. Moving from mutexes to transactional memory. - Add ECDSA SHA2 support for EP11 and CCA. - Fix declaration of inline functions. - Fix wrong testcase and ber en/decoding for integers. - Check for 'flex' and 'YACC' on configure. - EP11 config file rework. - Add enable-debug on travis build. - Add testcase for C_GetOperationState/C_SetOperationState. - Upgrade License to CPL-1.0 - Ica token: fix openssh/ibmpkcs11 engine/libica crash. - Fix segfault and logic in hardware feature test. - Fix spelling of documentation and manuals. - Fix the retrieval of p from a generated rsa key. - Coverity scan fixes - incompatible pointer type and unused variables.- Added libica-tools to the BuildRequires due to repackaging of libica.- Modified the spec file - Changed libca3-devel BuildRequires to just libica-devel - Check for systemd in the 32bit postun scriptlet.- Upgraded to version 3.6.2 (fate#321451) - Support OpenSSL-1.1. - Add Travis CI support. - Update autotools scripts and documentation. - Fix SegFault when a invalid session handle is passed in SC_EncryptUpdate and SC_DecryptUpdate. - Updated spec file to use libica3-devel instead of libica2-devel.- Upgraded to version 3.6.1 (fate#321451) - opencryptoki 3.6.1 - Fix SOFT token implementation of digest functions. - Replace deprecated OpenSSL interfaces. - opencryptoki 3.6 - Replace deprecated libica interfaces. - Performance improvement for ICA. - Improvement in documentation on system resources. - Improvement in testcases. - Added support for rc=8, reasoncode=2028 in icsf token. - Fix for session handle not set in session issue. - Multiple fixes for lock and log directories. - Downgraded a syslog error to warning. - Multiple fixes based on coverity scan results. - Added pkcs11 mapping for icsf reason code 72 for return code 8. - opencryptoki 3.5.1 - Fix Illegal Intruction on pkcscca tool. - Removed the following obsolete patches: - ocki-3.5-sanity-checking.patch - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch - ocki-3.5-create-missing-tpm-token-lock-directory.patch - ocki-3.5-fix-pkcscca-calls.patch- Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081)- Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867).- Added %doc FAQ to the spec file (bsc#991168).- Added ocki-3.5-create-missing-tpm-token-lock-directory.patch (bsc#989602).- Added the following patches (bsc#986854) - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-icsf-coverity-memoryleakfix.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch- Added ocki-3.5-sanity-checking.patch (bsc#983496). - Added %dir entry for %{_localstatedir}/log/opencryptoki/ (bsc#983990)- Upgraded to openCryptoki 3.5 (bsc#978005). - Full Coverity scan fixes. - Fixes for compiler warnings. - Added support for C_GetObjectSize in icsf token. - Various bug fixes and memory leak fixes. - Removed global read permissions from token files - Added missing PKCS#11v2.2 constants. - Fix for symbol resolution issue seen in Fedora 22 and 23 for ep11 and cca tokens. - Improvements in socket read operation when a token comes up. - Replaced 32 bit CCA API declarations with latest header from version 5.0 libsculcca rpm.- Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938). - Changed BuildRequires for libica_2_3_0-devel to libica2-devel. - Changed BuildRequires for openssl-devel to specify >= 1.0 Contrary to what the README says, version 0.9.7 isn't sufficient. - Removed the redundant DESTDIR= parameter from the %make_install - Removed the following obsolete patches opencryptoki-run-lock.patch (/var/lock and run/lock are actually the same place) Also reverted the changed to openCryptoki-tmp.conf to match. ocki-3.1_10_0001-ica-sha-update-empty-msg.patch ocki-3.1-fix-implicit-decl.patch ocki-3.1-fix-init_d-path.patch ocki-3.1-fix-libica-link.patch ocki-3.2_01_fix-return-type-error.patch ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch ocki-3.2_05_icsf_ldap_handles.patch ocki-3.2_06_icsf_sign_verify.patch - renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to ocki-3.1-remove-make-install-chgrp.patch- Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (bsc#953347,LTC#130078) - ocki-3.2_05_icsf_ldap_handles.patch - ocki-3.2_06_icsf_sign_verify.patch- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070) - Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch - Fixed two public key object inclusion in EP11 token (bsc#946808) - Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172) - Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)- Fixed BuildRequires: libica2-devel - Added ocki-3.2_01_fix-return-type-error.patch - Changing doc/README.ep11_stdll to unix-style EOL - Added BuildRequires: dos2unix - Removed globbing in %files and specified libraries to include (bsc#942162)- Updated to openCryptoki v3.2 (FATE#318240) - Removed unnecessary patches: - ocki-3.1_01_ep11_makefile.patch - ocki-3.1_02_ep11_m_init.patch - ocki-3.1_03_ock_obj_mgr.patch - ocki-3.1_04_ep11_opaque2blob_error_handl.patch - ocki-3.1_05_ep11_readme_update.patch - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch - ocki-3.1_06_0005-Small-reworks.patch - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch - ocki-3.1_07_0001-Man-page-corrections.patch - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch- Also create parent directory /run/lock/opencryptoki in tmpfiles snippet if it does not exists.- spec: do not use -D__USE_BSD, a glibc-internal macro which no longer has any meaning.- spec: use %{_unitdir} %{_tmpfilesdir) - spec: call tmpfiles_create macro, if defined in %post - opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use /run/lock instead of /var/lock.- Update to version 3.2 +New pkcscca tool. Currently it assists in migrating cca private token objects from opencryptoki version 2 to the clear key encryption method used in opencryptoki version 3. Includes a manpage for pkcscca tool. Changes to README.cca_stdll to assist in using the CCA token and migrating the private token objects. + Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms. + Various bugfixes. + New testcases for various crypto algorithms. - Only depend on insserv if builded with sysvinit support - Remove obsolete patches; merged on upstream release + ocki-3.1_01_ep11_makefile.patch + ocki-3.1_02_ep11_m_init.patch + ocki-3.1_03_ock_obj_mgr.patch + ocki-3.1_04_ep11_opaque2blob_error_handl.patch + ocki-3.1_05_ep11_readme_update.patch + ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch + ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch + ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch + ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch + ocki-3.1_06_0005-Small-reworks.patch + ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch + ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch + ocki-3.1_07_0001-Man-page-corrections.patch + ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch + ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch + ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch + ocki-3.1_10_0001-ica-sha-update-empty-msg.patch - Project is now hosted on sourceforge; fix the Url - Remove cvs related stuff; tarball is produced by upstream - Use %configure macro instead of manually defined options - Build with parallel support; use %{?_smp_mflags} macro/bin/shh02-armsrv3 1769697635 3.23.0-150600.3.14.13.23.0-150600.3.14.1opencryptoki-aarch64.confopencryptokiPKCS11_API.solibopencryptoki.solibopencryptoki.so.0libopencryptoki.so.0.0.0stdllPKCS11_ICSF.soPKCS11_SW.soPKCS11_TPM.solibpkcs11_icsf.solibpkcs11_icsf.so.0libpkcs11_icsf.so.0.0.0libpkcs11_sw.solibpkcs11_sw.so.0libpkcs11_sw.so.0.0.0libpkcs11_tpm.solibpkcs11_tpm.so.0libpkcs11_tpm.so.0.0.0pkcs11PKCS11_API.solibopencryptoki.somethodsstdll/etc/ld.so.conf.d//usr/lib64//usr/lib64/opencryptoki//usr/lib64/opencryptoki/stdll//usr/lib64/pkcs11/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:42499/SUSE_SLE-15-SP6_Update/734b43a78ec51d2cf7ee4aedddb9dbff-openCryptoki.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linuxASCII textdirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=48835c424348469da983741c9faa65f9b180b74f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cab550fe1d79fe87db197b9e0f5c7c8a03f036c5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d856420bc9a8cf01a9952e6a3f325e63c76b0def, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b9aafeb93190a8f7fefd55e905f9da31354b98f, stripped $ PPRR RRRRRRRPPRRRRRR RR R RRPPRRRRRR RRRR PPRRRRRR RR R RR)#SE#dutf-82363e88e90396cc20c69dd3f26f536da21b95ab70f5d745b8b277f0a277f2f65?7zXZ !t/]"k%N, V!I?8D;iݾ.[vQj.p%LCthD84SNDyJ 7t0-@:_ױB4>ta5ԈqQBzm(j>t#c20S6bk,a._:#Y"Z0<+1 a!}zEZHk4tp+MI,c*Nnkv4M KJ!w X|> xqBۤ+73\/?0YBC,6FCw6`CIn|V 8w2ޑ|հǝtlMI=IЌe VKqžWL;x=ZzȐU /"4Ld Ѡ/7;N|c*TAs"Z+GfޕD?Pr@g#$k=ݸ(ѥ/{rojgMف[oED>խf|7vȃn oGX+US|fo$\'Khu4wɧG. J~)C:UQJմXc({ ]H66V$B>OJ[|NQBB82a Ϛst&.erh^XiYb/?**bU!kȔ ];:ފpo_Gt:!! 'Xr2_ G#MOZ'z1loX`;3`K#~C b%^4 m4#1D g#X60_{2mh J;kie7!Ɖ w3 Z>E`cwpLM pqCw$d-%lc1.VN)vŤ2;YK|]B=k|Oqrm,; ҍp]I_s/WQFy-6 kPdd~TQ#VmK[f&rS akRI"5yXC=Rp8d_kcSA,t czs6վ0Q a,B5j)AW`0Pip)ϩn7`XC??<5`JеUP>q[ޙkE˭`$1*2Nq<閸kAۉ$Ot۸x[@lbkBU6m-N9E :;xDK :!k6A(;K^&a#yyW]SFȴqmG3g#ϵĮܴ߮s{持T De oisP3hpo!Dl˼{`" XGQKB ,-cF"]$v͉i)WYS.&ﯣT@F}$V2M1*̫ڳ'fh/dS?pj5> >Xj-f8-9Y'px9p lO=>./@Ѧ*Y?iQqepJFќf,`+hC{-} TeLEf= XZ Py) ;ţ~/⇙*&5񩤯XѓfKzE̱ɳB#VJt(eOQA3]3SQ`W<ݭw5 `r u:cg[ >1O}=lJDNSk2! s24 lE㕿X!păĥm;fO2TO.k L < :b!?5-ЃѢ} TcEa 8haQ Qd*桉FJJ˄|m*/p:HxqtԁQ0A^%Q/pu/}5T:֛T\he&'`i?zҴXL=vw1AODЅ_6߭hY\b2s4:.d0 fvPI,dF'MKe }=VbefĀL.YaK)lӃqwAAE8I{$>iR&Š0?zbh 7:_HYvWGqu[ɧz i,%YbIsf|A"B--e_MftWa>Z;pr {G7ظZlJ^@E-f1u%h3y5TcnoL'fTt954`OlKI9jQ1y=Z#'Z_)MNAda>uMp1т"ӄLCJVx20w<6F'uv!,`vJ"!-{3c)ߍ/"Wr} 9ڜ s3-Uf猨%kfni~2,.9錆 /萙犱 %w}Fs-kOԪP!&mw@ ىղDjVgR3Ƀj5EMTUF0{J^gQr+V3z>8IG[Vd1}C1H:OwTf6NЊ@R9n@Vүb!آp|գ+x]0t0B[;H!mD+fQ;TBI.Ld0W/Vr]c)|--,ܣ@[8.gELZAa ~.EOX8r1t{΄A8-\̾̃^ CzRŦI|LuN^\f5@x#BĈ)[z۵x_{ X6% :ZÓ1+Zv/vq* i7Fo{-k58Kљ.fgY-O~x@A$)xzķ[[:*-<z`I? M >@D+uY6Q_O ҘL0T'I`!XJog<&)'M2:_$ZJį~tb~ 8@c޾Y{;/J@a ̾x?mn_69K0؈b_S H_} yO5ݎcYu3Aꤪ1[xX1m Γz!$? D&6Jb7~5P/ƮpZSD($Ha$l;'C@1Vݥ4DC[|U?k40.mgӂo<*yFg P$fo%`m&JAqWV^TTl|ִTa2WO?:osX)Xxc:YMvMP#iy#iv oh%#k n OW.35&E7F"2tx9<c'㷲m4%`KS̯{p 0&YAbėU"y}7rR^ֈΊw[l.ԝ 6xJT ;^WL(QxӨ*bGB(1r "WB?"z Vs+ϸE lq+YCZ}0Wd_[S0(+BfN[gUcZe)X<.M(T/QI\k.+SP=B u4P/5siFL< ͏O`mmMDk :;>!xjbYޅړ39bDZ|Y@r_o_rܡ\32Scxo.NF p9ryxlM찙lɛl!DdS;d3YļWy}?6!8zLo9ZHΠM^ZrjYオ{UÒʅ0 >r/zN#ȫ]!Ke?/8Z]!t_7u]E܆3[ dKi3h\vg[mcS,+ 8!OZ ~Tƙ AX[$!dgu3͇C`/׉rO*6+;" Q7mܸ*r_b8GHٕG7j*`{.}}Et.Ey."{u뙂p}Qb:,nHJ5](2.ӕ WR-h[y2 A|\)Lң.Mgl]$,,Yh]P]"RejmϾ/uϡ$5Q_ ,ͶtY| ;*y{VRJ>ot&Zh ⭉o&&th $-u6d `4jЀ楅Ylh PtCӿg^_LвaN#Rؠ(?ۣ(/\,K6ȓI(*l Q֡בQ",oBPz,*egh8]i675+=.?k~ '.J;H`<ÐGxttުm]R&[+H)t>m%G¾{-O?|,坊oKE%mHJ(+vI(ް"\ghOlG دgb%!ZNLe[s∈2CiꞈtCG!'U;il;;&'Qø1N9Bcґ>R:W)ہno\x<{0 rF*k#D {<>z2!]#HAW}fdgq QO~3l%۾4S::iwփ@,4t;ݭ3~:o,z#P;^lE䜥 |3Ҿ|;q7?,f}ijKw\E\5HѢHu'Ԩ](M4& ݍQĝT yYoǗ[j"= LȎ2,_d}-jM_pDzXm_xmCѕ$a&pO-=w-&miGpRPQ_Pobro 1Ŗju8Iyd85$CL=OlܗzkjhB"g8hQ̛[[rmRLd Ot 4K)Qpuce@xe$CGQߪ'4C|UPH1UZ=5+hMh8OۃL}! HXSt`m>.jYZ !Bø)P7+u fw|&?b:G9MO4Gg\@'}U. QNtk+x u$/𣘇 :s }fͰdއңho񀫔*n_Tf^E"L/*qH.V^dcD<@ӌ@=< \J-@Dr" ϣ') a95}(zWbc(ZM9q 䔸-Dkje.\tZ=0a J?yKua_RToG\-I\+rqKnXL-,c+/:cbo_X,47jɪި)fOL 7j%Tp<*Q:McԴ ɖ`^u>ehUd=]h$MW=;3RVG &BMM\?w+J=V@).ܜ>AL#ZxL;He, Ud,ܰJ`{6Tn&\9ҒK6Ѡ9W̙|*UNAiY"ݸERr=XÉx>G[%ְDн:uMrN%Lk”J=d_qp~oѭK0ZgZR22jzTN=׵Ꭴit"'蹧x s_\ ws9I;Ji6A%x0f22(~Gkh1<wpVbMSY 2 l/A5>/þw[(Ԍnt=N#}Œ^BVi׻⁐E -@}P1&ĸq0!6##֡EP V=T 紐ܷ2s0_)C*Q`r$g;jb׮YU نZ5G mT#*Q펭6dZ*c=^oN!oɨXY]1K8ß5ޱ G B`m|>j-mEHPjdŪi2g :܂U{ )>:p 1B?H 3lyy:lF`\vhn Z{F~`8*6u![LyT8K! A0?=0蔹x]7cW˺!IE1?A3bP+Ks@!JjHȂ[BQj*lt}ڛ[ͼ+BNJZ`Ӭ=KI}WWfa5og e W9ի9 4 IM)pj)sx( ~'vGQ+=rf\ (7%G͘E;}mUw7g6% x/,K,lPhqU1b|ˡ/0uOuig TS3GGO"Ԛ+CV \=}2ausCLNS b Uv"@#5#*t+* Db @MI 1iv`oiSo @O1~>S6ǐM =tq!R~ujy9x^ n\y[>x΍],k;2+M)?T :oz \y NWgw?LH/2hs,y3mꨪ2o={>Dy>x9wB &\Gю%Enq8縌iuLO0s}n\5`F5k6ˀ/$"ck^iE<2td KeO.ZDA]g,bzB3_DTOS|֣A *)o/Ae9ԖB4lhv(r题Fbn\mQ^tw#8;p&Q[fv^#MX$Tk77`[DȻt8~ו8EVs._f"Lm S!P =:#T:v BK|7,+*1bbи  * ك8D. k9M7h%RM5a*+<Buq7ݱ]`3D3!+wDZ ['R&&%t}n6 1?p vp5:bg)~C% %-Ȥe )ǐB>ot^܊ulL8%7>-  6 ܘ4Erli-0ӻK4-8FE[ ,p,G6`g& Gf duqP_/:z9CvABl(*Q)ErCm ٧cij} XU z^JUC7勲Mw;&ӈ#5P"5ͳÏw ~ )x   8(5,dlSBl3H ҒW6A:vůrw@j^Q.6FoΐTgm۩> VhFXE6EgG'?JS7g}4?h RWwAmC)DˁSU"~k !oHP;U&^KYI5NB3 56χy_l2i2Vr_-/5>NmM{+dW7#F*2\l Gړd}BW"w+j8Pq~_<[vMIX,`dDh~ t13Lp0jjaUթgS^i|_{r.ވoeRHo#Q}u[()L^OBؖ'3JP`BpCPIN4cub[zhH:Moa+B! R4*&Pv*+8QsXdy Zl]Gx*B@ݳ]؈ !4˚/e<SbYӊL֞0* " eYdb ~bѣ82" yZrV@SDJo5!CJйl7U޵_t)W?}7l܉삤TLٔh) p El lolE;=wN3$;7],[A\At)W2,ܜ5q ;x! @leтcGV&9|L8o+'E71֢TqaVGt)h~nQo*LԪDA0{~JE]*22q>;K q 7" .W@V~P H<]qhC!C5 r9][)(Kiw (%o.(vLJ>i'"gBI5ZF:ZՏVl: m79 05X>$i˃wD=v-F{$V)J#avO_Ѻir&%%{:CqܸsWs]"!⁗ʦ#.4pCj25~U4|={ᤞ mpyC--UZ-s@Ao/;75F8rJXF~C5Jv~Kv«:?bu?%vfx"$amø(4>:{ġS99UW"Ym@/VX)"[aTijX/}5\k謍X8VN(NBy~# Q^|)Gk) T $ r<O ra2磻Vɗ=0(Dą sԩSwv>Wz]ME,iȉ*{q㻬dQ渨O#LfT梊xQ~wiR,PQC|ڕF ʂAzf(_W^t\.ux'_mCMA2W='F腢Sv҆x&SLt҇K$&M!PÇ ȼeP9Xre-)0뉵~ao_ QzO\ETqIP7#t? +gsW4 XC&İ,غz"Iw}6^ GG{֙/T< QMԳ0gx$_Pyu'UP۳y3,tK'?J>rQs 醉w>vD%+J}a"%"낍aөlVQx1.ϱY!t}Rt'o30#"MKY G|.|GWduxu7v.B7mE|,2&P*fElź{9ӕ%S+ĤG|X(຺dقs}o6TZֆPv/㷢A2 i.D;cQ>,p&j 1>ev$ZֽWSJ2I%IWb`&9t|EۻJR殿Iϡ3/Q{kZ,YOT[9DZ r3+*7&8$/eySuyg%n.'sPe5r¨/x3_@ڏWI,¤3gFU}k= Ug5`H*yh9[k F]ѣ6\I'#Q'/AjE39Ql%D+إ4B6+,ꖾb<]( I7d*c6Kn&K+cԌr{Woo|W](c0W[Y)D MY E"nY}X C"tsB;܇N%RC`,w[#E|b"=ߋuXI'P{sk}HT*k}i?JCQ  ΫWN%{ȩ3?YߏV2LО/NhxOOWܵi9Ғ/a۽OzDˀI1\NƅvD?M^>sj H:@^no*E1 HSߪ߭ذŽr9< LV(3"}$F⏱0>ߥdLRnUww@ l]bi)`^ǶN6(fe{ܻ8sl  6rf$LjؼEg+ۊ~;r.ZJn#i䋇u{7~*;H.'(y?=P%)0"e'`Rѓp{e#B꼔 m鰄H#fhߥu+e1xVDGzdO !LG%6OAWsfg硱o:xPW (6yx^;j@Sz3G`@ "R0{ [-bCGp\"wڐD;W_MS0L(P@im[:Gd`uY&W+J>TU{9_t/P8(yPY}+Wyd`} fm:iZD=ll,qP֗[mQ[0ёҤ6%  קXen;  O,cʐ_D=E$\Q&ԙwZo,ԢPL{0ooG!).aD9Y[Nкyߝ- I2Z0M.Wގh:CWމBLzf]ϛКJ(H`(e=\W\ N{ ?ђRNO8 ReRKCPgnGY ʻ=s*8wdxc,J-"8 uZ?31c,Bn">J< \rߛe\2gLaxy,'A.Wj5Nmi@`C~Fsiu}"k+KP(U#АBlI(1(?F`Qz߫oN=p>Fw\ޗs,ϟ:Zά[ oKf"D޶Llb' VJVv}:!5?fxɻ/J }MYj Ӷж9hQTH7X؆7uߡ+s2o%:O$;W@HE8~;*D붔1Z]-s JC}(e>%Ɂ{c18El=YE{|)^ ÑgR 4Rҫj_G_^{/vwRy+=TM<x%|(lMh7!߲ȩ߁}G L:c G̝tYZ~ՔÜhw. oNdOǡ? Ry>h4Q֮G%N`uҬ(rC$ǗWH_we"Z+WUIܻs,xƭO.)u, yzض},-2+RV7%+y7d= W.xTԚʛ0ҡ˧|Hb\'~_{bQ` It OX1T+,Ѿ<~Z 8P9%!yxgFpW5ʪnG;%A Ou'X *{0+IulG")l].Z'-QmDљA8;``ac#n9„i)XN cʓkL{ǚR0`g$s/VPVћa䊦!݉䖂y NK%vwwαSw~pThY< @ґ`JV@KnNk.`I+FD XN>oDn]X2{cQ\ Ô'obQL_Q{+T̂kp҂kL>Hc¡醏?Mj)SL`u&tlSmwO:H=N DNX dzʆ(^c) }bZ0Cr|GT !qpʹJ1ϰAPf5MWN- ĉ#c8j \O5..R?]0Ӫ!7C|琞+i;'!eGRػA\lo}ꢥ BQ#1@)\`G~c4Cr\$UH`xɼVNyvvPBRѰ@ ʝhp.M:4z IBg&SӔ;cӫi嘃{ž):AP,yt#nai1$KW/vgIlCj~U$hlSRFf\s&𻏑I4-CZ2V}~ {d'ihy0S=Tyt|.͹O]^&l%?s^izmQnibUc[j$qOpRpqnp@U[}`??uc'2qi{>N"-d!.+^]~LV:VJțZdUXw AV蚈b]3c|93b+)O3Ѣ )IlN38P Kb,ҌRe_\I6'c6r%ܹ]c}Fg3sG[gv>J\)\A .Xc _H[7xĨ'\}61ϯiϡ DKqhq=Z2 u'RYxZF6PH\qlԼK۫ cWYy ݫq6I >\Y!wLqKԒ83+?ErQ|I g 67S\2JQ}qfҨXә"a%ΦA }Gĺ'8$7f*V =qDM..reYLGN׭5'VBD7W8KY*ckՈ@A"$ϮLѵ-2.L֡#6tp}5OWUm/ɏVxMs➂'z{'چ#x]{6SJS i"9[<4H6\O@յʝ7]a, v0힘6,%Yx KVNj$ Y(rq T$[WcR݈x>$ `ß+Y$\׍{;|q2#-`i5<7JZD8Fbz/16}ԞDHqLjFSjB|֡`VWVX~~0U/ S.\7Pu=N5q VcܒST J-H#x#~֖0iʔ+j+wy2fR&=ʠ0O®m?X+gIJ !w0J{?皛)_qiR]|".2ĊF^!C2~On`e!v5b:2m"[p)//Y'pDsE.ߧaM3#$Yk zh3TXDL~4T EK G5?2,lK;boC&4 eu#8\4QMoD+75>~eZXچܗRɟ+\h9pBfQ˄}2ۭ}>0&Xu Y y]4_&B^pŁԏ J]tkt%FqK0F%/R QR1wUv-D`6Uj#g#njXʼK?R w,WI0MM%<*U7wbvQRq&;HQ Fx8Hч ̟nPz:A#٘׊ZDfZD{>/0 `z޳I ߻J0_=ʈPꧺe)?{m6t@.G8<۟:I)Lt:i|(YHDٶsR8b#5oD <:Sސ+9 Hs 3G"tpMr>率D:\њ4H/`ujyKWC[O5ǧ'ܔ^jdy܎As4w0u=ͧ8dΎUj6 @ !uuhSwBNH%U–Y0->f)Leΰ#Dhie"dg폣Vf% ;iV, A)(۞j1*\32lU别EKA?tZg[Swq?8ݛ׾~iЖ"R41%m;?Еm/* F[9FO ԧQI^cuXFI_l6- N/=?* uhhe ޶Q!  0 E t6vb!_ فHk1!yȘcBiYddw/9sh m_FCF`;T #c8~ wP\m X`،*GwF7}gk'' qG5ɉn({h&h/p)k39ƺb cXQoDr8S9p!3]m/$6,z-b)\02#|S}~4^oVprWڠAıũ(I' x Ԉ#`fhjkY~ﲹrBg]3lIb4'@lex1]!Z#~aF [j6 (sOv}:l=K1N= e13sA0 .Hy \!dR/SDK`ˑŊ"qce^cCW汁Q95hb+3B8 7,RdKIgɊ*kw!"vZ!]3qq×cKr&e^AUs1|it/ZYRt&$ s Gtcswk;D ݚ\C!@gƪbf'֛f닎}]18x5],^c|JE0 yGz|;m+~f9 %dq?-/=2+UJWUf8ƙ0Kto5ZO!>-v?k|og I񲪥믅骙g#_Z=DNj4x/{NY2&!FkW%oJxrI .{ =0/;40"Y- 6)_V( ET7Kka3moU1?KH-'cݬZ4Bhߢs:|Ms6ђ]b9DwBHZ+XUtɿGZD > xRmIKjv]MofM,¬lrád)|3לΤ[o13ϼރKDqI_uBW4@%{d(  CzPrTәWئoNE7 H)F<S,¬a23GBPҰLy)I(Ħ*c"!GFGm|C]t? 9,"ϼ3>I߆Be2:g@oɹ%5|͒fO)|#K`#pqXZm,Гj똍5)ųKVi}!K.2%Gh!$BEi=v \*-qPʆ>ܐ4<69 !. .TQ@^ngo FM""`\ŘLoѻ~ybhP1@3I䃟-Bʗzr 6l/G&uuUu<cmD)ZgK < ".]` S|bxA1qcࠊ!G1NX^7楉}M_FjtiOo9?{y! <{.+>o!hft}ۗS<D OwW֧h&Ȼe]O$3@3[]Hd~~0/l)* GvJg| Ng<פAreM![Y¨*o JB%`VObP6!eFD"X[jRC[܃u%"flkrzo+b^<*]ViZ^"1^טh[/89QL9͒IUbgxATe{TsX9NP-0o|vb|,yM^uߢLI<֥@2 3cMdEV/Iạr PrD\ݪUнƋ:wM}=?/_d<6^:PN3f@f 3 3+)Z 3PQ0T7=i^wҭ-UK$֣P2M7$\m/-(#ܑs]A,]ΰEjrǸ faVyeX 6Aq5TN {oc]b _[nEG@ff"tɅ%HxZT`SWBgDyC"+ C'7]i8@ARHuB$ʩbF}N-2WIr6p[b Wm A $u-B&a5F;Gm,ҩ#]KEJ ~FiGtVD;UybhszC8bH>6aqYy3'V/udcJ,q]ڑdi?S&AtU P{bG%_LvѲ;^ [yƪC|̨m.Ḙ1<6 4Pӿj#AmZ lc6F!|y]?WH *7Ra_{g%.Ի1PhX>[cv }#! 5_-!;(B6>o@[T`@Sl5VfId3Ai?S Lua%,S/ؙ OJ y]v=ei6'.Nyg3i ۬(p9%v?6ƛp'23nzr@gxKI|l $^0apΚ݋|{;=PLMڄlSmW #{f2ZDjсħcs> Xլ0!RfIt*_KpKJٟ;u &1 %wm3Yg?}^FDE.;tХ=Gbx IQ47GT7UFms *nF&VF8{(zw:F.9eH[:ȅIDA \~ kZ]+\J>Dx@ٷ$&Mk_p!j.5a;w 9_+3Y|lKsc*`d4uZ'_KK Fmo9NKs@:mQ΅g&t<(LÏg%AYFcXDb lvmf &+Ԭ.Tr]OAmɀ^5Y4QށZT>a]𖖺7eC!ȆܻuWP+9t\"AO$"9d!_"O\t/˝)MUPdO6 xA˳{_ J}DG|-G!p ՈdǶ%z+01ugA"3-R!‘AuO dOc&D3]"p(5 A*XkvZ܁-FmbM!R(E) ooHA˶t /5ls]{}kNw}+]R3N?snn}Bԗο"ё, >mK&V8UwI~[DCDbksf[<]lF!/&f3.9.~+" rlQ%IW);ѰM{f[;-如 U o>:^ n$Pc,lTJ%*LJ*ֶ5qv˲\>rj7(7ޏh}U?:5TxXVX'4!vMԣrv7~,8Zg~οWi A`?'q͔/#fz=c`JF4Yu*^qUH9ݡ?®S=-kX ufIi͡x9cv0KY6gpR[n2k"P+2D<$,;@w?RJixoX h/meRoXEE2܀-.?; RȤuoiy*qCG.ȗࠡя+ʟ1^Fꄅhp[˥(!׮|ys.KyigDͭ)-rIH 9톚 fKL6{O%XŽ:XzO8QJZv]߀LLN=PKGM-Vy9Sl0pӨk%hi]R0)x3yu&JEbrE3H԰1C/:LVeI ?CJi~>vpEKõpʵH R>SSRy]"jpwS߃'v< ݰ@K+꾑zHPG;uBXzEPWܒ۝^>ZjWs0ѿ]bY0+݉%|3-y5Y7ikEhr(߄_4)mu "}yQb ћu +o] ,L0f'+)f~mܡ8p^}r p^DW!)iX#6T 97iFj)3+'B?EU3MJP_T}=="cNS':yF8-.#nKtEߒ4T4O]+{X_Yt(޻x~GWp'?A RQ<'+4ugߊu$myCVmG[eswmʛ:uYt@9Ӳ[MGRͿa}]^);5f#˿KV;+l/pfnTX' m&y5Z/sk9[3>} %!rá+PuZq ).W&xs`{t>צ=pҵԍAPbfzj2cR仼O,18xǜuj#:\2Z@VFcErjr V6x )v& P- C`ΦkyPsk(\2lﷵtq 2%V7Ԟ+0==ƽ}iΠL  Up*Q܆:@PzZ=ij&- KBdF*5do׎L8.%!'|sqܜ`HhǠyĎI"?-#=aA-ttYK+02O\YOF|$M`1v1'ٟJ3 ML61V]! }w;ޜH*PD@F"kP}*ZS \KSyaE$Vm\uSj|nP۝ HHܚ \d7 ؊uGZs7!B~Tb:|(׆%s01ݥ 5j. W񍁹)=!qG̙h U.z 3kq(c8c3A&*, b°ϥ_n1q?~t6aP8sR]&hWY21ECшv 6X7جn hU$' ֛Fe_ŗ8~>bxGȡ|1Ct z|+Qw=٧Ӕeaa6zOո8^yIvV.JYeZ)׍`R@2†\=Cjx 'UqT$Z4s@ )B%#UIer# l% ,- yQ3P.’/٬β/+W:xƑFd4xM碀g-tו䡚f Ϳm+=~qQʍ ׿#at7G`ٺ ʕ̄Zݙ>X4:,:܆C_`NGrMDX]%5b.DXp lDfR.-|4׶mxH;>dY2ݹuH2g*8lYTrqh@3hǶ#έKNMyHv(gg E/L[Y*'S2o /dϻi )Q ǵj1kV6Fhoq`,4?L6ӨUhhU }Q;M4(d_|Ae-Xh5? xhCw &K:=%QFqO M WG P 9~Eի(X _C &{5FC$e~D,'"P++B1RrT[-?G$6O.)8)T*`:Tۂn[kѺGc}[ԍR2.S!`NL5He1PUR im:YWܰVvFʮLDB{9;aQz3X#P,6-:zjKLqeD_iOe8]MX (^ 9ƶvfo8vCH>&S_g[p 81,ڄOǨwCL:;cr~qK TĢ[I8$Ipr8rTG:|%aܭQeRnhhf5e}c˯n0OGIwDz0LMǐ$Շn r~7ehK0C@~,rr?YnNd 94[=dPd/uv`*QW K-2c{\#J싾Fzl;=s A*[0JW3Է?7nm)#GYNTW6e=Mm&k[t4[9MTz.b?AO:/D.\JʍU Z(jk4{iڬUlWS~/RD${W] &HG!aN,K&P~\mhpOyOz'n"žlP˼y̖}N ƥ~{sȶ4]igi=ijsŊA5bO0Y&wX%||կēN&"0`b^72FUʥGZe, `裌H>Ӿ4oV&0@4i T=vf?5m偙ݞX*^2tG/-M 5jN )?[Ka ܚ+Ԏp~JI+Y.͘ħ2yzdDMghCz WNؘ0a!h lҳ=w TdZ5ܻٿnkq78!3^ۚf:pF?(6܎{xsFs"h36s-sX<>9kEWjwDD:_&i g LX(Kv`{Rpbr@C|$m {iYZnR, *q395Yo~lޱ`܀~_GEEړ n N޾ϫ2\5Wsu8k佚*K.?KlVG%^y6v[H=gԳ/eg"GzMe0(|MW"ܚdʭ]D8N% a{唶!=Xeq#8QX#d[&r3 ǼQy6~Zs׮~"wFLVfʎzX= :Hl6>"񦎬o{Mw7 5·A::Srg  7kh?vPz/2V~:#HS_ŨKbQ|[=m7ĚXr_v3 <=xm@E4_by`~"i~[-Ku7|?1-lݲfaɥ+IYٍD?x,ݍ Ɠ]t7Wt_frϘpTza Ϝ B3rKHI'Y)hK7P_c ƌZ^mC,/3!(ӕ2coHJ@p_n%5{ 6%.}s`1fkƁ Tn|`3Xw#j]RW֝ L!3@yH)&uvKs@QQ*u&IҔ[%A[zgcl|"I,D)h^<&ty {Ih%r&&; 6ά͞`-kO Un_/8Y3n0frrigh2Q@ Fy}Pb/vV5*-W^' 'Yݓh:rJϯGBǧXyZڸ4k#'g='wGrM >?$ $f _uŸ-8xЁR[iKF˸o4/F|E=~:ng%,-t]M? 3ش9r9DX2yI, `voNF #z:&sD(~MJðz΂i 1R\hngU(Ź"sڟkAޔZ|Cae9)G8gf@! zVhMN#kJ!Tjp:4k㖷%QU)gy'WtpBcq5e|X n(WY2Mu-JDk[w0Q>G3uwqnA Wė,g5gǖmn?}ADz9<+19 R !i[M趝}4QZES*L9LfZWʁ EYӯd_GTpD++s-?չ?YPG͢0zSC~|d<ȅ`s 0kUe*r^X1a7c9DE Ww2;1"_-n-H8chAUșydM撝)e5/=c z3} Y 좯;4 Dh\o5$Ҫ 0@)O?]RMY${u9TAFÜ,GhouTD rD'ZB*5[ry_?hĘs[K'ƪnJt>5Pmd͸# u 蕬9MHuh X^lLX`#܃.8䕀e~)e^S?VgpyL7}WeUz&Ĥn@겘riZw ClcK#̪QcupxhscdL(Re.~%xg21 S^sU<[طQȠIC_K$4R|]J.?dwRE꓍;p$WF#!$p/~VVܺE7?93PZAZ a"%NoRhtؾ,~Q(>?Xi: 4z:D(Zl"9ϧ[ɎL 2/&E W}Iٶ1=eo]` F,&F%Ѝ<)p矼w^X>8TWА"xk^Zr%zgNFKuqjrajlVB|C7P8pY eTïsBwEw<.Rj'&Dqbʻs䐲.4R*N qu MnYF3FzH^=e@cmnkWI+Pit̛%( S-NEEgQ!geQq+J $XhQ*w'莞}Ia4!2u(1Նw|D 4kEEH:)㪷Ҫgf>D9[C(σڳ@s-yKlt {.tM*zȟ oWpKY5\;( DΡTM LHN)t֖N{0Aˈo{#"I;9>QBϘI5R*d:hc4#H!#bvNf\7H?̕Pq&HDDd|T蘇B-QͷԄaM{fIB, /3έVF.d&7xS4k?SmIGDxK=l]7[upW@|7!}m#I4ouH : '%'DB.R(;!aܑVIq 9^-*$Vtl;3٨+,ϷJd*qS9XϧֻH3Ap枖0zϧ!ict_-ʷ]X"?a$flbل]>D6ӯdONeWٝsJG9|E7]9_xåԁr=PjP(LPulƷEM'YuwoİQb⌿Nґ(Ii1n 4#^gisܽ+5ڝc"tURn/~~jﻡZ'? >kދ$~;qTJ$dF~yv072RhTMo`X-$BM?3oc^4x~AQ Ypv3R=TwnRK1 ^l#t *+|"@JE]^`* |K=ݖsỳ^_#A%)ٯ<)r9X(6ʈWTN;l3q^$Üv:UذPčY\XѯTGsKAaxrs6!2<_q* 墩xD %º1Zp$n"w;KP8ݪE<'9 q ;Rq͈~V:h>T-D%[s3]͒Z%}WHd8ga*Q%Ym䲯HKs߉W/1:]9~Ȫ) #ieh6W+ X;\ 3x;EDOwO;Zp6\*rg@zyCE.o/,#Pt0L I2[Lfi4UUˏ\`cn|]pQ~pփSݟkIS\ 3쪟ٶe3nMM?qrЖ~VWyW!J*8{ ^t !og*Ƈ6@:zB#ߒTlRo_L>&??4o WuLkz}ߥY%I< p_,A}9p8@.jr|}>wj<3$3as${y+e im~kjk]ȓeC'[}63ף3 <2 =alayCfd; Xt)z O|:#>z8h(I;O v nzGQԗ$bzK GGg bNfwD+χ>Z@Ӌ٣sɔc':~vx_>C4/0'i,Ib-Tq(z;O]dS^!)z%v=yo%phͅ l! klG`sL*Uh>lyGdY @cKlO{u8VTINLN끁ѻØ\[n36斥lɦÿgFk`/laB^x,:i ޛ"bvX(1vBdxxeyf{r#x26qqSy>g`ȐA$aC]3 nI19Û 2Q ZqNKŖ03 R#u@&**_a7uu8w5F0bjȌ';!혻lRIC^KJWI1!8"Ght'~Qy?W)Quq2qLz}AʼnbOpݲQq(w0|g?`U+?5.FՅ6S*998OF) XS7L)iq cRF~v _1~9x%bqΖ=ʯ*ěqM%|-~}ih9[殮tZ5r ԥG$|4, k{x_+~qPK\e@ojc`k }Y.Du@7"v_IWE@:>i U[N4#VЀR+M&#keP0&2 [M^||/*s[Ovn4K\s~[GÏ3~/HZFH=ս'&d"+I*lʌy^|1ՔRpВ;DUY^[*{} }I0r6 iF[-Vvx Z^6Aj8 y%'@M/g!U%?g5.1"Ү.^(opָKNH{%x\v9lx_)No}!t+PVz-\=‡T=A .QI:TC pTZN1JO%, `]_{xo.!}NH}#[GJS"7r׼o%0Doq GH#&lX J=Y_?sJ5. \L3 kaGy5c]ckq[*otjR%Nn1.VUz!r <]7Kӽxc!vJ7WbGuLh$5CQp|)7i?wJ(6}N0na|ńQ<Y7{ώd:"WW.KfX5%Æ5ĐuEV+Dtm#X_10$ܟWN05zxmi]=*?A<0x~a++T+F4bނ7M֣nm_qTvfwh>}#xRpj 0ErS{_P%\ڝ$,){"z#ZB>ww\OIFlPPm}&E*9ZF>j55 RGŪ5_[]aTp{Kvs%/' PK}񿋘o؆鶎0]%ѾJP a@>S_!a)C.}}k{i\Uͣe0ŰMH528ڏ\Io5NTU28ǖZ~*h?=&Tڧj&ZIt5lq 7]kx`G!q6:0W@D_hą HkU[v[̖S˦6XU ĵ X^@&nabyc. ב]lY vpX} p>Jyik!tm|#ET&$oQ*;.<25}(F% b^f\0xy P>nbuhX ey=x ^bKiS& =n֫Ŕxp7^++Cr6y,clEH^P@Mor4y\+D&F_JS~GniّжGN[#ݞtc`JkH!s dD鲹M6qgr\ވ(պxKj{1X=TkqeKs،9o*1HWӓv|+=r4k+lTrj$t5!˼&ńFM $5Kb㻚J?nBHkL"}v f8<,e`mhKsC)~7Ə[rg:Ȟz4l0-TXx:4!b+ҪvJ͘kUu"$߸);I~0`޼;)+ Ltʷtx;=@i6wkޔ>&"6ppʣQ%$L&A@oT)>`jJdd &аN vRY8c $x8#FY?C| M675]8Ay_;%[h1nDcW%[%qR,al>P֍`٢ź:1}_+bV\&q!_~PO='qV\oJl Cnl4yc)㷺W@o{9+fHL͠SVz,IcIF?8:J[RYÙ /P gH0-R<FT4/<䘎rpth~z9>>(]@r3^K&t3n-r$ۮP/sɎ'4%>5P}tF"IYf%`Y}1{Zf:?N zGmuضԃ1jcL_^ e"+$971mq,Ll^R#pUFkvܐmi1 XTvڶ@!{~$)ܹU(}+& u*xw.kcѱ !\[X/2@ ?R˗TvS67wa6MἋ33glm\(W72@4Pغf47+?}ᆫU[Ǩ]+e uJ!AT"ՎW~[hR SG=r9q[桸*2Bl"9^>I8|D%Sݽ--Rr3cՌEKq"#kWإ~t11JB2|Es9l X(vDt2g  *Hwp ݁n;^0^+}ŕۦ~6 /Ja!~XcxE[h37S aY7v23@"l9@f"%Vg5[3:c75dCd~P5?"\YwLtxLb1hw_Hנf^[=u0--tz_yC$rVH ZMZ3xNj!y㆑]HGWr cvu:h} j4KM>6DQp| ѰnUZB^6dVk} _ct%Е<ķ#x+>ṐVxK 8vpXjpܮ>J*< U!KRi@a^uq؀SiG bbqKa'm@2,=+|5T37{a2cUuT h^n @$CUI0]~|V>%s$ )[neahy놘GA|ʈ U})Rk !ڇ;} ~ogd.^ޗجw]fYjL'#{_u9PepG@ Merq+.mlW ؚ*.|*]&޿ Ȧr5E>q2v]R!AcZL⛷Hbj7(/rӇi$Ǒ-Ğ{>89@hhƌP@ߤW"[h:%*`@p㪴l)}ߞ9p-dS 'ۃb%+V(\ %{/./gtPSήDxfPqgfyæ v&]˚Ϳy|r-fWϑ̍11J Sx 2^h6S9oy'c3}.yZKAХ6AxQzn/ھL"&9QdF5k4<,EzS{&=ɋV|ZjR.8gKtnC4Gںyf=U Rcӳ ^mϢSVDp8d8Ug=%0VP:fÓKl|;s"McӸ\8yrCe6م_}㬃MvY,ߧݔPG82eXzÀ˯¥I^(h^?z]Bd:5jAСJfTəGzh#Y D' 7QP3@UkӐ;Z^SX~Dk {G!@YGȡWڐh|J=ilnU8E(z[jUFĆgѳXpFG- uANQR [|5ĮNJmI1Èidpr \xJY4#W& N\ <eq`׈.vV LQo8FθN[ٍiˠciy8&rC[ɧբ"\h veC(t.!.D3N'-[:]K,C6Is<ߛx[Xgyx;{[23GxRZ#6+&r+g8"jsz;ycP//DU4_B}Fy}:`f{HD`mR52u6Re6$tjU''CpXtRCwvoGKO&Q|%x#xwP.!,ksXc`Irތ`}oskMv&[5Z"=ַUIS+Ɖ`$n腝w7eqH! v.~icjUvJkk\JqK @ Г"̑7qD6JX`;]"N*qJn M oiLs4`VSw{`D%&Ji!]&वfOf+6D8Ym+'2$ Yt=+ ,c {{#z8[^#6쳸iR^vUsoɾ*<<S[Ad`TX]F$9e,oS6v|/7a2[Dz!|`^'E}(gIɊ׫:SzUBc@}Q0#"\H/9Td<x ڹْ72b6%g!GQ3[F Erhz6Ȟ\SqkWP'^uXK Pf!(ydS9zl*3M3 U鉔5H_F ]控 ({ȣNVS4]NQ z<Rs3H%#wר%o p-d]TeOpUYd5g['ԛ.ZgG:jB"#!%ؿɑeFrk{4v4d{G42\C*W[|g+!`ws&yP*𦉳!45&a2t/Hnd`. Yt9C~v?m 30 oԥq|*uBP} K,,-٘}G$*uD R7qi7` O"ˬo+5#uY* GPiDR*Z{0߀Vh\gY>GlIȗAD>fLz#>?ո=,9U)w){1`c|"N+hƎ%K.m `_~"!_OdꡅѠ ~D~ $z=ih#Rs>ę T5PRQ6}~'&bR07;`;͒9AA 2@Mp'jG̬5}Mt"b>Dgn ,đ f{7F} ?׎zLKݺnJK=\d`>q-N r70.iu9G^ u?{Ea^4ay|.Hw(D`I&PƉ;iU`S WiP(:LIKA7۰ by%fyf a?FbA|t@OC8[v/}7O!}+~ y]D&^x F+iYLQ/T򚂁`j5PG\~&~"ҐG?(K!ŸalpPHq^@ oD68^:'¤H7?sXyv 4ѳ*di~&% 5Ĥ ]4 ZLFҵÖh"[zx[' ˙y8Y7#|2W!C P{Cq ?bc;-ͱ/%4" 0s:Q|cٯjAq3$??78/uH!xQ͘+1I7 ͫRE>ʅ,1a>2X{ѩF{Nnq7R|mh]a`(wY5$U&˜aH<[Z+)g=٫E $#rҼ$#0"j4G ~c-N=h(oa_)MD3E;58Z0?uR|E,\$/~ݢ˰]?Jc4#$O:ͫ9Xܞh'Ɓmћy s췰B&^:ː1?=fZ{is )wpg_<{BCu} +ؓes@gI_)Yx z$L7ޥC)9N0@1\'Ba \ r#TqtL}?p!xJC}D6yMN+0 lxXgGպBMFyRˡȱ?LO%Ng0 2pװɍy#`XUݚNpHt>ݮU3,EUMrORW燌͎yGGY* p2uB(\kIPxbjϠmD5\GJj7{X[磙m\h %!=`Bh"@1CSL@̗_;Vģӥrw+pl˜Viܯ9f R7XBZVl8aqic@y!hcX0֨KC,gg'߿?vvsAilgXO;Iˈ^ZigS߯,O.6FC;f\FF\bAhb& N(MxI&rؠz2{eyvFnQ!-pd84ɉ珔&/2$`(1(Vď9zpd$W՗~,&Ovp4X[Bϫ@3{%~(\Rf ek`rX.mn>oDv){v7<  ,ۉMεjNy3'w mU ׎o7h)wi |1&lȈ}SCMIzR9쒵Aڻ=.qiŢ݉ˍb|Tf賌n ԧFl7 @|-Y4$geA8{/\DO0yD]{+`3))kMTMٕ히0מ 4ѻ^Zq\SSO&%Q=ƈ^񤥽֡%gأ;QTX؝b2kXiPyB;Si]\K$37*o& &ʚNԥyFBq[]Y8[[p`n]sd'ͣ1v:VzYmnFk9%T--y7\pVo6$uƙcNۨ""u)9@nIڄ*\zCWB% ,ĬS"61j-eT]*\q$se/dUÜ :,禐CA&l ,`տG\JwՅ|SWoV0z71?[:T"k{H܀ ɾW.kmm }5^l0j!%m78|=nR eN96FR)qlOT>\;\_ YESBܬDt m,̨3[&IjH)m=hN6w -&_# ZhR˦쀢d,kv53)Ԛ\/Jb4blLfg n0f"#* iGRM#*ܲ|nǘ:S$B 7968D{ AGBݪ١H"0қolgjkkͿ2XóD +<qj,UUcej&ʿ X~NxcRJM,l`WY&]7tBE3^aR(A(nmFƐP&a!h& N3`T\2PTB]So]ɥSSu3ۗT)Dni"aL̦ G{J\fgp:{vK4Qv\c,.SÊ}lj74@_Y쁙3{sAb9ZXO+Ew՛h>s0)!f}\aX A$?H n#Na}WZ<;!O 1mT?}LMYYcNe mxF zdݜPYb^rf%^lI%Q}BFz=FM]2Evs9-l 3ܵŮ{!ʓ:sa=f?aq.|Ukgiw["$Q&)LIDJ͞8' krTbxa`O8c s8S yN}|-QYbJ326v'[*MpU 덂]0#1o«sB!;j I1F@!zr6QSHI#7vU%SlU|\xgН' mp+eK+3zM9R!{]{h:Qډ4N8ƸJ5;j1& 7p1-Ԁ^]$m E`k}00GzW2 &v<+{24y;>ڈPJ LP'Ytw5ܹQt%C4t}rĄ؋y0D*WM оa<@ѹrtXgL(RB1 }B1,yItBHk/~»T p[ DZ;DfCLm=DK#xk[aޢmvewX[/isItAsE_/:&;0KΡ)3Zm$&I†y&0 ' 0Y,:DVk9>?fSQ*yΗںoդг1u*:I tܛٷ{U`皑z"g=;e'ksW(db3iS)fX3j$Hʓ'0޽ gfpNJI(9 2) _n|2 F*z7 _䉃zߣDaz^2;Nm%8QM D>9:Lp65<>>΅puT>kB%-N?N7($,bj5twҨP\?۞r?HbJsRgA?x/Yw|h!|IK3K+PYO=w5uGf}Is^t% =.>6Hbr@v)>tv-ub~ol]T9 @S1MUm^-5zpƼiˋesjى $C3c P au{ě?69+I2<-`xC(Eqs>EL\fF7 :1Ӗ2mJD^aDy:bBtn&i8 ]4wT +C9ސQAJkIZ3cm9Kb5z} lr0۩2hƮzx,UfmiXşd3 u&@nTtq#C yaOv>iKvK4r߲P]U!7 m!LVh?Q ۍE}^Qpwf"!㸲/اyZx3K\rQ#7h=ǿ !h ȌlE%;p-WaTK!5dN!X9"2b8 L[ o ~.c@̫gqBH*5 Vގ ̌;^!l_EJQԗtT_燧^pQi%IuǻPfXrGW$& SSyO#{ Gcl@?Գy-J*γIpoü>*u հ;Uh  ق2i )\EXyjfbp2?w,[ջ[(E' gB3AOKz4sޭJ_Ɲ"=b}j8xyO(#F,A<.ET#_E +<'l[jRJU=zX[O4y_zm^:[EqՇGA]dⲤ5;v{AW 5*q]qH֩9#pʿ>, .Cr`}Ǽp=D>i"T2qa͡s$̆zt&S~e/F!snx 'b񁇦6^d& ^Ab}A7>ݏ"l=Na<ifq9Eb7uqm%٪]\R_i),V$ͥz&lG BeeCk_Xa_=d|wMGFWr`& 5h3C]/"=~݇8P`3S9"'M8% Ko1٤_Uv %w Wi@~j1WiUɍ$c sݚYZ){8;C ƹԳS-8 HڄI?7,vef?Wv&l1#({rPho@M; IP?IWX 5RՎL[wPV0͆o'[J.rS8vU Nұi 5 T450|}/1%{4&1Jc%zg^ (x*)lWg4 Ӂ+29B.k!?ڢUp]d?$g<r>=">Yz ېb[0K s ́F8 RsG><z>λO* 1jqb:#l)вZ$A2%W8 peJI^"VxǡcR7v|oOeG|ꎦ]?5B7k@\QP j '1omH "LhkzF,/U5$I ($9cE.7sb)(:f Y9.{캍*'|> ?fyXż`Rd,PbhhIکH ˢYdޓiѻCPh'a(E6 .Od6:%LٟYJzWmۀĺaF_:|)5W]JGYgf|*Sn s/#gk1hV FB(50nEw#N+xltphXT֡1MW'#U8#0g]toh&˴W'1?tqW?3RהQwܤp H)^It|' .9: Bw>^+ UhJҥR[CqbM7*y[Ez)K):gϖ#Իz<ĉ@+0[I1vnl=Q>57$o u､^+l? :7+;r e8(Uwy竇yߧDd}6!C61J+O.h L@ò+rOH|)m+nzbh97k(Ddsk΀(U4HK4_催/gQ$I7ҭ)2uĤ-H)?^e6w{RIU;=#mPxN6Q&E!;aΦ >2=zTN!/|V')F[H\)zVwQ SKJ#]\ c½{5fj[J_Ldw`:!v_&yD0ͩA`d9 w #KbCo ieSBkR`D71I AFā5϶0ZMT P{ui\$ԄUZGmG9(p/K;wى}a(O?@G ofy1,GPXZZf~!ٴH{_|9G}&o9/L){,M9$M@.^4J9?v}~NC4v[sʎ1q.-( רS9lNzH6.- TVp&q%FwzgaQ_6N]2˳nqT`h#|㛬nSVS,Σ5S EDByHʷuvU<,By;Јto]-eC5ƾXb%dy`[Qj2#dh[4}L%aP,ړh٪9NC$Qc D%ÍJЗ2m h5ײJ$5A۵ΣWi)ɕfTT,~cՎ9K}9ij^*E^@isՎ ;V형[eFv(M1R<ǘ$`o)84}+`#.}pk/M)dN83UzH6ۣi[p;,˦e;ǴGǑ M%lH(1#yp^,]ѯ/Y%`jg!E\b^X 뎲u峍fsq/r>~NPobgkeŤ xj!N YUB!"<,=ƯXTejj=u~ѬTGثdi38bLrމ= gv~קŕ^[~Ea`濠Tk@7Ƅ;Y wл`{Dy|PlthN<%*R"HKO5lEW !UTmKX0]{ hrYO#bhsOx*P@W ;1AQOPXs if$k=iիwff %߽ gILPDj&~u d_QDotti>H#NDZrnދC{Ϛܖv cN0bu۳`s$H v}_p fy%D$Nf 3t3fѹS@wV&D.ESE(Iar6r HM'dF~~գdmWؘe=b;UjdVgw˜`c܏ש.SmY]’&Ս$"\fBC]zufN;dM=O&*_O9R(&(y`PYy9n=Mt|"Eh>"'Tk.~L\tNΧC!61i b A k=xc$҅_QFt fU{<<E| * 7[̀4PAYޫ {iU E,u쯭.M`W,Ę##v؃< i#ql٢Ue/ιO9< uuZa%7SNa~ājLy<B3kHyOLE- Siƒ掰RD+PB_ZRZ> >kjbӡY]үp æe\,Pyֵ4^{N,Ɇl= +b>}ctfG%'5XuKA"_K| +D޳m$*@T]WСŽFvx7ьgv(\⃳Jop?qc>^:o`'wbv0voT gbxk; =]*%+] ilep5DwL\=^ c,p&7^~ qj7(Y ;\jAAjz~_/vZs73^jR/-G;u䣀83_1,;Hi-bt_o(q[0%.wʮ pXf-i%ŲSb"ńkK+lD6ɎPL5kQ_A”,7f;z[Jm#^.|mCMʺpPӒ UmDuifmF+(opR,@ 菐  ?=I WfQ'/h/mx*J!kh<T;z"Gܓ{tU +ڽoleaPzd "kIljK_Z)zpiEDvv<]j A=pO#Lnˌ- ʜ>D-M>sўP|}Kbל1?dmSC1lD`߳Tݓ{ R XuJd1!+@(~/jRzԹ,65 ն|o7^& Ӯ;MI*`$-޷-Wx\WH^"`jbZ0 ӱw]Mg)OboEwJQ|<|ljWPCW^VV=^/W^CaRlnJkS1K_ Hf,Y [w}vIy@襶㛧΢6 &Lj0 5MUumo֘ \N%QwO~B.V6TvߍD%?Iglb 'z<[ ƝG-?csJk;ֹy\Yg_PqoTU\̽m?]EDA0{ڞ Fr1SBs3یm0yaoGCɆN7Eq C1>BAbCx LI:[BKrEFpb۵uxSH6(rBewX}[ ]?{䶄xE˻Ҵ!G\Iَ`ʣ H/W3Cklw5~K*t WLY>w[(rc@ol'v6۝ԉlf.ĺFTTۼd)9\Kd G3]B< ϟ/~t i#.O"'Foۇ^Mⵘ8ABY5swujCmPt_ٔvfb[^;+8}X!U-h1?)dP%HB_UD9~J?V#9dʼnb`aC| E6r ̽ՊeIo(=%ws]00a$ޣumtg=1xSё TGJz=v~+Hkx !IeVx =:(7~^/ߴy_ymD8@=!HTo9b<*$bF[aei_M(n_V;o? eƌ.nxt{yjn*sd woTkZv+_Y$HSZWcw 8~YM$[{w\̵j* 1!yYʊq5k綡bJ.r.}u!?["#`WS0uX"#}wDSu8&\;su.yV x˦BxhilOnz,^j0Q+g$_Z=*W)1> Ϙ'QTgxX%?> tZQlaK ;N &,Q_ԑKmՉ4}H_f_aYF0/)Z8AAX 0>..mN8|ŢxeCCn $ gj+ {{GmLN9Χnʏ~o1jj1o[ YvҁK) {FE%@dhuNN]$䚡3΅Qdt7Lo+-}R,5ꑼjzBLE ˥X\@ v6M{˾O_QKqX Φ4"h5['=6F6 L_ 0jjDYB'!HCGs7ŗF$E(Xb'`J#˨f[wJVuhJ ӹq'r10vQS+O^XU6ɨ~N++޵f\L㚐"ƴ9bȫ+y:aGJrЊ-E&J?յ`T" g-m"$.?5=\䛋Uf/:+^ΪwܐyĞV|TG/1SZ=~ӆS2?OaYcy72DgCnǒ.:I|쳿U0]amr瘱h5-iK* }%>N S@<< h PP鮼rN'h5vK"GـNK\qV8P>;@\..c:'! waڰ(h_L֪3>'Ȼ|OoU7>-0XdTo IV ";CA$i:,fiABE΢ygDO%?D9?wр)cY2U+##ٖ% bٰr-:)#DQ\:9s~Hܗo|/w-=KfDz"NҘr9g1= p-C!ܹ4Ģ<#7 1“ڢ,s;_y8:tgnŇVxuE$+>8Q"Uc.͜v >`iΰ Z_A 1aWbЉ[M RZX!G*;3]ݮ&UrOfefwSCwGF; sIj'^Aϫc[Dy޶ȑD{iCgee'<]7]#%^o /a. 6P΅#ոBEٕr ó.k3Kmu%մH.?A<#gk{Ėױ'yƐ[s/Z,אJ+-Q&6ϼV9 ҭhhprmM):oZ:W4_0Je ):]/d-\~Pj%۩C˃wS70gH{_zq̩ͺXЏ!Km1Bn՘Ʉ-HUcS)4o(l?) v_Őɼ0R`Qyt}8OB*[9_3Z #`z!#k] f̢x㳁i~Oxi؂Oǖ(SfF;tQZdKevw΃PL3NIb \);ѱϺٱ4l[v&A0k$%; a+rds?lZOUԶұT{ΔfALȊ-nq"$bRŐaϱ^1e" v-GtnOOI'n=4Y*ggo2lyEʙ|chѯ6QǮhZjEX顙 ?^}[3 ?}n9YkK+AVy kyx*Z{2-; KxXrAqKmR+.Vsz2zUIIұ4,6v |wVՊ2RdBvF܂9\8uQ$Gb|x/cn{4*%AU(AbBbH?D]R*'[y -J3xHLQjχj55xWP#0) RWmDWzԟP ~8 i]9?N9'D#U̪̫*„&k@zȼP 6 z( m0H̿m&@鹏V#Q\Jg@P}`TlŇzsQ3_Om-G(lD>եZAzҫ(R}d;V=+R9 > CZ9#!aX} DvB@Ҕ; ^# Mk@G;]`ĺ Rmэ[Xjf&x 6s_kLn>=iH)3k1@[(YGQO>c{:δ`Iݦ4oIՒ#D,fT[bƗ"eLıx;WPK e|V6uLOVm5U&ɫ;&}:P#[0l5v%ߢhVڢr ݀7M!CJJDk%wGB.܃fQ]۷[Ҳs9 Kcj~YߞrV;g}BEodW6ʹC{({oolx>$/z;}#uG8=~<1dȀUtK +hɒ*TkǸF [fT\[FFfM5 7);sA}ݕ2rR.if>k/we_!ndQva9uKγf:ͩz(M jJ Q(F3z}j=6de^#^"KK`+Jr3 rm̱Ƀg| h`>a_>@ǻPטe^Wfi+O&eyژF|(he`WI#Qů cŬe3#Ib/]9%@WPOWP3(ކ::,k9Xk6ڎ,3_"ΛVlEզ6!䄊4ugrN-7#U[ =;ped6jrΜFIg:~:7?V1pt2OSNC7-+O "+&MO[yi:QixϲUgvIN%Zy#1.sj>A AAᗤueAVߟ`5:VI~q ?| mWu(J\$ǣJ:&JX`-y§)n%VP9nLLh w"0RJH[MZ%d_yR*4-R)z~v)j9Vw\(,ן,V`λfe[uIOZBq,:i)$o+"G'J@pI&0&O)>UD@adjG kVcW4X;.oⲱXű؉WFpI,9+(< &/jV&-[Y՗y6ƾkU4vd4ITOzh05q1&| g[1rZ=R+KvEU8VV^|9'QؕJ 8vX-bmmYdWhSBi1gH"j[~5s1lPsߴɖ 燞(\(ǜ 7 jz <3Wz$PK-ύ(ej5WeDՄ*4m/`DyHVZ2rXtu(j?Jҵx s> =-G`@}Un[I&WiKθzd%3|ҴڂX^]֑9iZ_lx #y43mw5)\4(ڨT.?t_?};r\Ii'iHi! r9Wn$^!;aD̀>@\5x}ZIa1pn08d^jb:W9,{˛fVR*[*^|cЫ(4 >h?0'M:n7Z@W @;1BAP'hy1hM% pPzkK u%ë1"CTDCnI$0&{j!p&>:EaI22ƞC W>0]GG'~ؗuzU  c2DvzD''Ak u#˘0*Aq| ̋/9S5'1Vim>o!ZmIKZ*~lzCoUh5d.tkN4ܔ󷫏z|`6r$\~tݢ$jn|(%:x bE'("u{'߭E]CO6vy0osHFE$֡0z^Lf.B]jw L0ן? #hO6dsGrcB_`pue.k%f 1XSC{Wecǵ*j.]4t[h]nI=&Bf &kv捸;{7 :ژji3j -"VıK]:x$go^!t[dbA]*LX[4i~szD݄y\x s"h:zdkdhČLbɉkxQfa7sbUxX/Wx{:yha-=t~#@Eܑ_sO8h:wئm;\cѫ pJ@*n.fgnl㞿=MվGP.RQ(Dbd{Ac/\h1sRcCC6.qF^Pm56|~B25 TYW2*8d舆 pg1{W`Gt 3 jQ6񶒏y'*y_E뽡?urD'հ7#-A{AɩxwYF9~}ȺPnC(q& J<2ߝ0޴0|^lu/x5S J@evN!IuG::QVH=n6бʬB&EJv& Xf7nq×(sφ#A'ϻ=?``682dJ#du[$4!\Ԁ][殡af6tM(^v`e.v$DDh7PSpV}H6NxڱBFADm(Fp9" v=v? ^9JR*:VWM< D{BXO'Vf9lw59iP͔=Np՟+6&pˏbz' i%.&u3fj?  !Jm&#nOWpeD#C3qvspZ'ٳ*Ѵ[eV#g""p:hU gsek#қ` f&վG<#s+hZ:.B/P]a.6倓'(#CT1Ҿkv_^ʪTeS8E!iJ/;!=U"KF2:4ak4"dlRPiwčGDC@̀埃ˢɮ 7-6 CH(>^(-ˀJ|6%c7ړxH9bc 9KķUzIڣM3BSotUb9:j$eO򅿵;Bz*L%z8q)U<rT'yYFfp4JhJJ1H:8,AY6 ~pbI vR|LЈgZbkD4$1gYDov_ͧ1\+3n|vI.uF@aFa7fwPsu!=^{"yY$qKi99bc@]}~xf rS86;+=u@}K86cyI ֔NO_N0Cl>+pؗ ?ʐsS!"h2WNT?\@>'u(dE+D @61$)V_>y#(/DיJ[xM ގ@+0Q)=cǴϡ٘֠:5-Bv }!LmuLu+h0tXnF+Ѧ5_!{Ww*Lf5vY"LtDӒ׷UgJfp(. ;"՛*W Y󢁓hx;oq@.A6J8:#0""ZQvn7%VLNc'&3?s F&T\|4:X͉IؓHq3,l~S ԃJO׶p A -?7qŲjƠV*H v*+ xC;%7}9m& _~U9)EQhvpidOٚ5S[߯^QRȇ\BYM '>.K ԭ婰<?{uAXO<ܰ??hd-'*bBW("R(IkkDa :5&Y8P5tU2e[6@ 3 F/e9>~[*xу-nGaq3etp4WOa7O < ^.,J/NR $Ak(eh誀#₮Hil|f^>Tn qIי;΢2E7t\A*|Netn5l,PۼM$ׄo{"]5- ͣ%C;PhH[) w P\LUej>iz<ѐRlfB:}P{WRveks zX̻l3f. ?-!Oiu^/hf'0A{XW bw8M^Afb:K1q5O\{Z`NR_;9X412u4' ƺ .(а^\Mb:<:}؄̦G$Ql/,@wX$e.@MsCO7~LY) Rh:,PdЁ+U#;j&+Y.kXKn8 T#{>jFl G'1}P@YZ"zzg4Hdnփ2:[7yH[$eI0+;uilqD5v)FzTg|o_◈v8uYT+c^%#ɂ"to2VQD4ɸu*I +W2*ȧj>ܮ.\FAE+s7l-fժ`DL3ПνK ɇb}<mJ} 4H@!C*:K!xptdP PrQpc: )80>$|x}U&+Oۄ6]sռv*]PK&Z'_YYltmb_W=HJ@Cʬpx_=x,\Z[PHfX̊|Gz]Х,^ݲx(Ki>_aⱸ!ҏ"AgyYy-b#3MtO/ n]L.I=E\wMR\ d~Ovr\"*9ؾJ!Se3="-}3҉ 5q*kIj Lc>䫅eޫo#>C%0}T'X5oݡdFe:Ǻ&Ƕ$Z7ox5raս܈XS+ڋ\pxJQ$NNRK6=o{gjn*ڨڅA@uIA0O7o ֭ƾx6s^3@1T=a<(9#KT-jp<J9I[E59MU4iZ8^v}vlf[ӏ*^4l߿'sB3vdZYWfXrɱE/m):mTF϶$Y`' K{{ F\:@E7?=?d%l*AaCY}?[>( "3uq3F3f@}k>ȿ0&NpLgȿH̛ n}C{3hG/&>a7q#hZu/`ЂX@ ʥˏ(Md=p c2b#6TRG9Dȏ{Z>s滔CAH5`a9Ak(/^06$3Ud8v(C  x{G ?*HVMsACCxiʥ[]sH+ߗЗ[C &n{j9ϼ\JxNA4@ }`éa[s|UHI3,+I$uBn p>tg(i&c<N.^s'QdؤaĄw!S $a% ͪ-&i~ˌWr%_H!K6slXWh"]ۍ},Hzf ea!+(6c?5hf=d1;0d-F:66zkNMT ѣV#;eqE~تtSymEzڬ:N"^0ƳghPKl㾵/O Nm=d pV"8 V7o>9ڳ,BO.hѨI8]8uN g &VtwtqB 3'(/RA~ ߒ= 7^H,)-D!Nc:b~% П梯j.';5N^&rḂ . "Xv$Z- r1*#YX=38"#s5qC(S̲owHN㉉raX-D?,õjCW^$_" * Jϣ~Fh8>1^O=59Պ7~$΍&|/=;z,U-8o0C1: P4X(AF^3 Dz1 * YZ