openCryptoki-3.23.0-150600.3.5.1<>,, g#Xp9|3υF)wa]*qRpowE 4 Ý 0x:6HrPCa=/5j'erޣ%@s~?qΪ':7)[Kp_S M41itA#^<FR`Y;$l=aunj[5!e;bWхj%(aZ atؿK '+D3w E+_C6Aݒ+}%zobznґ>I|?ld # plp| !'  $E8E E LE `E !%E !tE"E#E%V%E&&%'|%*%(+8+ :9+::/:=>? @(F0GDEHXEIlEXY\E]E^b cd<eAfDlFuXEvlwTExhEy|^z &hCopenCryptoki3.23.0150600.3.5.1An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic HardwareThe PKCS#11 version 2.11 API implemented for the IBM cryptographic cards. This package includes support for the IBM 4758 cryptographic coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer Cryptographic Accelerator (FC 4960 on pSeries).g#Xs390zp37SUSE Linux Enterprise 15SUSE LLC CPL-1.0https://www.suse.com/Productivity/Securityhttps://github.com/opencryptoki/opencryptokilinuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi # autobuild:/work/cd/lib/misc/group # openCryptoki pkcs11:x:64: # openCryptoki pkcsslotd:x:64: getent group pkcs11 2>/dev/null || /usr/sbin/groupadd -g 64 -r pkcs11 2>/dev/null || true getent passwd pkcsslotd 2>/dev/null || /usr/sbin/useradd -g 64 -r pkcsslotd -s /sbin/nologin -d /run/opencryptoki 2>/dev/null || true /usr/sbin/usermod -a -G pkcs11 root# Symlink from /var/lib/opencryptoki to /etc/pkcs11 if [ ! -L /etc/pkcs11 ] ; then if [ -e /etc/pkcs11/pk_config_data ] ; then mv /etc/pkcs11/* /var/lib/opencryptoki cd /etc && rm -rf pkcs11 && \ ln -sf /var/lib/opencryptoki pkcs11 fi fi /sbin/ldconfig [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/opencryptoki.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pkcsslotd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pkcsslotd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pkcsslotd.service ) || : fiif [ -L /etc/pkcs11 ] ; then rm /etc/pkcs11 fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pkcsslotd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pkcsslotd.service ) || : fi fi Vb nX IXِ`X@H@x]b<$<2+#]b!);eyd x]bA큤AAA큤A큤A큤AAAAAAAAAAAAg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xeeeg#Xeeeeeg#X]eg#Xeeg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#Xg#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-3.23.0-150600.3.5.1.src.rpmconfig(openCryptoki)group(pkcs11)openCryptokiopenCryptoki(s390-64)user(pkcs11) @@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/groupadd/usr/sbin/useradd/usr/sbin/usermodconfig(openCryptoki)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libudev.so.1()(64bit)libudev.so.1(LIBUDEV_183)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd3.23.0-150600.3.5.13.0.4-14.6.0-14.0-15.2-14.14.3ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ]@]nU\f\&@[[@[_ZZw@ZY.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U@U#U#U#Tp@nikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commeissner@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.comnikolay.gueorguiev@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comkukuk@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjengelh@inai.dempost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.commpost@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comjjolly@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgp.drouand@gmail.com- Amended the .spec file accorinding to the recommendation in (bsc#1225876)- Updated the .spec file (bsc#1225876, bsc#1227280) * Amended for group %{pkcs_group} and user pkcsslotd * Copying example script files from /usr/share/doc/opencryptoki to /usr/share/opencryptoki (policy-example.conf and strength-example.conf) in case that there is 'rpm.install.excludedocs=yes' set in the zypper.conf(zypp.conf)- Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914) * Bug fixes - Renamed ocki-3.22-remove-make-install-chgrp.patch to ocki-3.23-remove-make-install-chgrp.patch- provide user(pkcs11) and group(pkcs11)- Amended the .spec file for pkcsslotd (jsc#1217703) * Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to ocki-3.22-remove-make-install-chgrp.patch- Upgrade to version 3.22 (jsc#PED-3361) * openCryptoki 3.22 - CCA: Add support for the AES-XTS key type using CPACF protected keys - p11sak: Add support for managing certificate objects - p11sak: Add support for public sessions (no-login option) - p11sak: Add support for logging in as SO (security Officer) - p11sak: Add support for importing/exporting Edwards and Montgomery keys - p11sak: Add support for importing of RSA-PSS keys and certificates - CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different * Bug fixes- Update to version 3.21 (jsc#PED-3360, jsc#PED-3361) * openCryptoki 3.21 - EP11 and CCA: Support concurrent HSM master key changes - CCA: protected-key option - pkcsslotd: no longer run as root user and further hardening - p11sak: Add support for additional key types (DH, DSA, generic secret) - p11sak: Allow wildcards in label filter - p11sak: Allow to specify hex value for CKA_ID attribute - p11sak: Support sorting when listing keys - p11sak: New commands: set-key-attr, copy-key to modify and copy keys - p11sak: New commands: import-key, export-key to import and export keys - Remove support for --disable-locks (transactional memory) - Updates to harden against RSA timing attacks - Bug fixes - Amended a new patch to fit the version 3.21 * ocki-3.21-remove-make-install-chgrp.patch - Removed the old patch for the version 3.20 * ocki-3.20-remove-make-install-chgrp.patch- Updated package to openCryptoki 3.20 (bsc#1207760, jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 ) - Removed the following obsolite patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch - Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch.- Added patch for compile errors * ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch -- Changed spec file to use %autosetup instead of %setup.- Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the following patches: * ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch * ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch * ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch * ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch * ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch * ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch * ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch * ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch * ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch * ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch * ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch * ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch * ocki-3.19.0-0014-EP11-Add-new-control-points.patch * ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch * ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch * ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch * ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch * ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch * ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch * ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch * ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch * ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch * ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch * ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch * ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch * ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch * ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch * ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch * ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch * ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch * ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch * ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch * ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch- Updated spec file to set permissions on /etc/opencryptoki/strength.conf to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)- Upgrade to version 3.19.0 (jsc#PED-616) + openCryptoki 3.19 - CCA: check for expected master key verification patterns at token init - CCA: check master key verification pattern of created keys to be as expected - EP11: check for expected wrapping key verification pattern at token init - EP11: check wrapping key verification pattern of created keys to be as expected - p11sak/pkcsconf: display PKCS#11 URIs - p11sak: add support for IBM specific Dilithium keys - p11sak: allow to list keys filtered by label - common: add support for dual-function cryptographic functions - Add support for C_SessionCancel function (PKCS#11 v3.0) - EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER) - EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE) - Bug fixes + openCryptoki 3.18 - Default to FIPS compliant token data format (tokversion = 3.12) - Add support for restricting usage of mechanisms and keys via a global policy - Add support for statistics counting of mechanism usage - ICA/EP11: Support libica version 4 - p11sak tool: Allow to set different attributes for public and private keys - Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated version named ocki-3.19-remove-make-install-chgrp.patch to fit the current state of the source. - Removed the following obsolete patches: openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch- Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch for bsc#1202106. One test of the gen_purpose test cases fails with C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token.- Made the following changes for bsc#1199862 "Please install p11sak_defined_attrs.conf." * Replaced ocki-3.11-remove-make-install-chgrp.patch with ocki-3.17-remove-make-install-chgrp.patch to remove the "-g pkcs11" parameter from the install command in the Makefile * Updated the spec file to include /etc/opencryptoki/p11sak_defined_attrs.conf as a %config file with the necessary permissions and group ownership.- Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM mechanism does not show up as supported by the EP11 token when an upgraded EP11 host library is used. * openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch * openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch- Upgraded to version 3.17.0 (jsc#SLE-18326) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks * openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes - Removed the following obsolete patches: ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch ocki-3.15.1-Fix-compiling-with-c.patch ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch- Added the following patches for bsc#1188879: * ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch When modifying opencryptoki.conf during token migration, put quotes around strings that contain spaces, e.g. for the slot description and manufacturer. * ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch When migrating a slot the opencryptoki.conf file is modified. If it contains slots that already contain the 'tokversion = x.y' keyword, this is accidentally removed when migrating another slot. * ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch Change the code to use the pid file that pkcsslotd creates, and check if the process with the pid contained in the pid file still exists and runs pkcsslotd. * ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch Always quote the value of 'description' and 'manufacturer'. Quote the value of 'stdll', 'confname', and 'tokname' if it contains spaces, and never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'.- Added the following patches for bsc#1182726 " p11sak list-key segfault" * ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch Added NULL pointer to avoid double free() for the list-key and remove-key commands. * ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch Note that two hunks that were unrelated to fixing the running code were removed from this patch. * ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch- Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the curve. (bsc#1185976)- Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch (bsc#1182120) Fix pkcscca migration fails with usr/sb2 is not a valid slot ID - Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch (bsc#1182190) Fix a segmentation fault of the sess_opstate test on the Soft Token- Added the following patches for bsc#1179319 * Fix compiling with C++: ocki-3.15.1-Fix-compiling-with-c.patch * Added error message handling for p11sak remove-key command. ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch- Don't require pwdutils for build, dropped long ago and not needed- Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666, jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714, jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786) * openCryptoki 3.15.1 - Bug fixes * openCryptoki 3.15.0 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named "Vendor IBM" - Support C_IBM_ReencryptSingle via "Vendor IBM" interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes * openCryptoki 3.14.0 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak * openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF - Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch- Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114) The EP11 token may fail to import an ECC public key. Function C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case.- Upgraded to version 3.12.1 (bsc#1157863) * Fix pkcsep11_migrate tool- Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918) * Update token pin and data store encryption for soft,ica,cca and ep11 * EP11: Allow importing of compressed EC public keys * EP11: Add support for the CMAC mechanisms * EP11: Add support for the IBM-SHA3 mechanisms * SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token * ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token * EP11: Add config option USE_PRANDOM * CCA: Use Random Number Generate Long for token_specific_rng() * Common rng function: Prefer /dev/prandom over /dev/urandom * ICA: add SHA*_RSA_PKCS_PSS mechanisms * Bug fixes - Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch- Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch (bsc#1152015) Add support for new IBM crypto card.- Upgraded to version 3.11.1 (Fate#327837) Bug fixes. - Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch- Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch (bsc#1123988)- Do not ignore errors from groupadd. If groupadd fails, installation ought not to proceed because files would have the wrong ownership.- Don't hide error messages from the groupadd command. To eliminate a potentially common one, check to see if the pkcs11 group is already defined before trying to add it. - Update the summary for the -devel package. - Changed several PreReq entries to Requires(pre) as a result of the output from spec-cleaner. Removed a couple of obsolete lines. - Removed obsolete check for whether systemd is in use or not.- Upgraded to version 3.11.0 (Fate#325685) * opencryptoki 3.11.0 EP11 enhancements A lot of bug fixes - Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply properly to 3.11, and renamed it to ocki-3.11-remove-make-install-chgrp.patch - Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch- Upgraded to version 3.10.0 (Fate#325685) * opencryptoki 3.10.0 Add support to ECC on ICA token and to common code. Add SHA224 support to SOFT token. Improve pkcsslotd logging. Fix sha512_hmac_sign and rsa_x509_verify for ICA token. Fix tracing of session id. Fix and improve testcases. Fix spec file permission for log directory. Fix build warnings. * opencryptoki 3.9.0 Fix token reinitialization Fix conditional man pages EP11 enhancements EP11 EC Key import Increase RSA max key length Fix broken links on documentation Define CK_FALSE and CK_TRUE macros Improve build flags - Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch - Made multiple changes to the spec file based on spec-cleaner output. - Added an rpmlintrc file to squelch warnings about adding ghost entries for files under /var/lock/opencryptoki/- Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch (bsc#1086678)- Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617)- Upgraded to version 3.8.2 (fate#323295, bsc#1066412) * v3.8.2 Update man pages. Improve ock_tests for parallel execution. Fix FindObjectsInit for hidden HW-feature. Fix to allow vendor defined hardware features. Fix unresolved symbols. Fix tracing. Code/project cleanup. * v3.8.1 Fix TPM data-structure reset function. Fix error message when dlsym fails. Update configure.ac Update travis. * v3.8.0 Multi token instance feature. Added possibility to run opencryptoki with transactional memory or locks (--enable-locks on configure step). Updated documentation. Fix segfault on ec_test. Bunch of small fixes.- Removed ARM architectures from the build list until gcc6 becomes available for SLES. (bsc#1039510).- Updated to version 3.7.0 (Fate#321451) (bsc#1036640) - Update example spec file - Performance improvement. Moving from mutexes to transactional memory. - Add ECDSA SHA2 support for EP11 and CCA. - Fix declaration of inline functions. - Fix wrong testcase and ber en/decoding for integers. - Check for 'flex' and 'YACC' on configure. - EP11 config file rework. - Add enable-debug on travis build. - Add testcase for C_GetOperationState/C_SetOperationState. - Upgrade License to CPL-1.0 - Ica token: fix openssh/ibmpkcs11 engine/libica crash. - Fix segfault and logic in hardware feature test. - Fix spelling of documentation and manuals. - Fix the retrieval of p from a generated rsa key. - Coverity scan fixes - incompatible pointer type and unused variables.- Added libica-tools to the BuildRequires due to repackaging of libica.- Modified the spec file - Changed libca3-devel BuildRequires to just libica-devel - Check for systemd in the 32bit postun scriptlet.- Upgraded to version 3.6.2 (fate#321451) - Support OpenSSL-1.1. - Add Travis CI support. - Update autotools scripts and documentation. - Fix SegFault when a invalid session handle is passed in SC_EncryptUpdate and SC_DecryptUpdate. - Updated spec file to use libica3-devel instead of libica2-devel.- Upgraded to version 3.6.1 (fate#321451) - opencryptoki 3.6.1 - Fix SOFT token implementation of digest functions. - Replace deprecated OpenSSL interfaces. - opencryptoki 3.6 - Replace deprecated libica interfaces. - Performance improvement for ICA. - Improvement in documentation on system resources. - Improvement in testcases. - Added support for rc=8, reasoncode=2028 in icsf token. - Fix for session handle not set in session issue. - Multiple fixes for lock and log directories. - Downgraded a syslog error to warning. - Multiple fixes based on coverity scan results. - Added pkcs11 mapping for icsf reason code 72 for return code 8. - opencryptoki 3.5.1 - Fix Illegal Intruction on pkcscca tool. - Removed the following obsolete patches: - ocki-3.5-sanity-checking.patch - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch - ocki-3.5-create-missing-tpm-token-lock-directory.patch - ocki-3.5-fix-pkcscca-calls.patch- Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081)- Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867).- Added %doc FAQ to the spec file (bsc#991168).- Added ocki-3.5-create-missing-tpm-token-lock-directory.patch (bsc#989602).- Added the following patches (bsc#986854) - ocki-3.5-icsf-reasoncode72-support.patch - ocki-3.5-icsf-coverity-memoryleakfix.patch - ocki-3.5-downgrade-syslogerror.patch - ocki-3.5-icsf-sessionhandle-missing-fix.patch - ocki-3.5-icsf-reasoncode-2028-added.patch - ocki-3.5-added-NULLreturn-check.patch- Added ocki-3.5-sanity-checking.patch (bsc#983496). - Added %dir entry for %{_localstatedir}/log/opencryptoki/ (bsc#983990)- Upgraded to openCryptoki 3.5 (bsc#978005). - Full Coverity scan fixes. - Fixes for compiler warnings. - Added support for C_GetObjectSize in icsf token. - Various bug fixes and memory leak fixes. - Removed global read permissions from token files - Added missing PKCS#11v2.2 constants. - Fix for symbol resolution issue seen in Fedora 22 and 23 for ep11 and cca tokens. - Improvements in socket read operation when a token comes up. - Replaced 32 bit CCA API declarations with latest header from version 5.0 libsculcca rpm.- Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938). - Changed BuildRequires for libica_2_3_0-devel to libica2-devel. - Changed BuildRequires for openssl-devel to specify >= 1.0 Contrary to what the README says, version 0.9.7 isn't sufficient. - Removed the redundant DESTDIR= parameter from the %make_install - Removed the following obsolete patches opencryptoki-run-lock.patch (/var/lock and run/lock are actually the same place) Also reverted the changed to openCryptoki-tmp.conf to match. ocki-3.1_10_0001-ica-sha-update-empty-msg.patch ocki-3.1-fix-implicit-decl.patch ocki-3.1-fix-init_d-path.patch ocki-3.1-fix-libica-link.patch ocki-3.2_01_fix-return-type-error.patch ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch ocki-3.2_05_icsf_ldap_handles.patch ocki-3.2_06_icsf_sign_verify.patch - renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to ocki-3.1-remove-make-install-chgrp.patch- Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (bsc#953347,LTC#130078) - ocki-3.2_05_icsf_ldap_handles.patch - ocki-3.2_06_icsf_sign_verify.patch- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070) - Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch - Fixed two public key object inclusion in EP11 token (bsc#946808) - Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172) - Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)- Fixed BuildRequires: libica2-devel - Added ocki-3.2_01_fix-return-type-error.patch - Changing doc/README.ep11_stdll to unix-style EOL - Added BuildRequires: dos2unix - Removed globbing in %files and specified libraries to include (bsc#942162)- Updated to openCryptoki v3.2 (FATE#318240) - Removed unnecessary patches: - ocki-3.1_01_ep11_makefile.patch - ocki-3.1_02_ep11_m_init.patch - ocki-3.1_03_ock_obj_mgr.patch - ocki-3.1_04_ep11_opaque2blob_error_handl.patch - ocki-3.1_05_ep11_readme_update.patch - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch - ocki-3.1_06_0005-Small-reworks.patch - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch - ocki-3.1_07_0001-Man-page-corrections.patch - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch- Also create parent directory /run/lock/opencryptoki in tmpfiles snippet if it does not exists.- spec: do not use -D__USE_BSD, a glibc-internal macro which no longer has any meaning.- spec: use %{_unitdir} %{_tmpfilesdir) - spec: call tmpfiles_create macro, if defined in %post - opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use /run/lock instead of /var/lock.- Update to version 3.2 +New pkcscca tool. Currently it assists in migrating cca private token objects from opencryptoki version 2 to the clear key encryption method used in opencryptoki version 3. Includes a manpage for pkcscca tool. Changes to README.cca_stdll to assist in using the CCA token and migrating the private token objects. + Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms. + Various bugfixes. + New testcases for various crypto algorithms. - Only depend on insserv if builded with sysvinit support - Remove obsolete patches; merged on upstream release + ocki-3.1_01_ep11_makefile.patch + ocki-3.1_02_ep11_m_init.patch + ocki-3.1_03_ock_obj_mgr.patch + ocki-3.1_04_ep11_opaque2blob_error_handl.patch + ocki-3.1_05_ep11_readme_update.patch + ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch + ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch + ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch + ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch + ocki-3.1_06_0005-Small-reworks.patch + ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch + ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch + ocki-3.1_07_0001-Man-page-corrections.patch + ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch + ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch + ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch + ocki-3.1_10_0001-ica-sha-update-empty-msg.patch - Project is now hosted on sourceforge; fix the Url - Remove cvs related stuff; tarball is produced by upstream - Use %configure macro instead of manually defined options - Build with parallel support; use %{?_smp_mflags} macro/bin/sh/bin/sh/bin/sh/bin/shs390zp37 1730369760  !"#$%&'()*+,-./0123456789:;<=>?@ABCDE3.23.0-150600.3.5.13.23.0-150600.3.5.13.23.0-150600.3.5.1 opencryptokiccatok.confep11cpfilter.confep11tok.confopencryptoki.confp11sak_defined_attrs.confstrength.confpkcsslotd.serviceopencryptoki.confopencryptokistdllp11sakpkcsccapkcsconfpkcsep11_migratepkcsep11_sessionpkcsicsfpkcsslotdpkcsstatspkcstok_migratercpkcsslotdopencryptokipolicy-example.confstrength-example.confopenCryptokiFAQREADME.cca_stdllREADME.develREADME.ep11_stdllREADME.icsf_stdllREADME.token_dataREADME.tpm_stdllcoding_style.mddoc.mkopenCryptoki-TFAQ.htmlopencryptoki-howto.mdpolicy-example.confstrength-example.confsystem_resourcesp11sak.1.gzpkcscca.1.gzpkcsconf.1.gzpkcsep11_migrate.1.gzpkcsep11_session.1.gzpkcshsm_mk_change.1.gzpkcsicsf.1.gzpkcsstats.1.gzpkcstok_migrate.1.gzopencryptoki.conf.5.gzp11sak_defined_attrs.conf.5.gzpolicy.conf.5.gzstrength.conf.5.gzopencryptoki.7.gzpkcsslotd.8.gzopencryptokipolicy-example.confstrength-example.confopencryptokiccatokTOK_OBJep11tokTOK_OBJicsfliteTOK_OBJswtokTOK_OBJtpmopencryptoki/etc//etc/opencryptoki//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/opencryptoki//usr/sbin//usr/share/doc//usr/share/doc/opencryptoki//usr/share/doc/packages//usr/share/doc/packages/openCryptoki//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//usr/share/man/man8//usr/share//usr/share/opencryptoki//var/lib//var/lib/opencryptoki//var/lib/opencryptoki/ccatok//var/lib/opencryptoki/ep11tok//var/lib/opencryptoki/lite//var/lib/opencryptoki/swtok//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34792/SUSE_SLE-15-SP6_Update/f70534c96e2e9a2a1df8123adb8bdb50-openCryptoki.SUSE_SLE-15-SP6_Updatedrpmxz5s390x-suse-linux directoryAlgol 68 source, ASCII textASCII text, with very long linesASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=42b1167acf330ae80e1e50919a509b196df74829, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=f3a608ce6a38e268b7ad2e7b240cdd8492061d0b, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=54beaeee8a895dbf2e0b78138d2539eb6f74f56b, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ab218f7628b4717c5c61142f45b7231876f91f1e, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ededfda5e7f5a2b63aacc23ef81b92726c430e7c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=998e4d3c92e56bf4fbba8727ebe19867d25638ae, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=82cc9b94b236e85a945907659e9e1467db78cf14, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d91ff455d2390f450576267893f580448c3661cd, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ebf3a2dd8e500ade4ea48aff6e02b1b4212937ef, for GNU/Linux 3.2.0, strippedHTML document, UTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)Algol 68 source, ASCII text (gzip compressed data, max compression, from Unix) !+6BPV  RR RRRRRRR R R RRRR RRRRR RRRRRRRRRRR RRRRR RR RRR RRRR RRR RRRR RRRRRRRRR RRRRRRRRRRRRR RR RRRRRRRR RRRRRRRR RR="wG^q'L1!Dc$^ꫨgla'K,I=?sTIJ$ڱ)/I`Z1Jw?(J*fB7QB:XyL>qF7xKCޢ|;S"}j4!7bADnŞWCۚ*ʻxbV#ieߧ^M9Y>VdTCdL\HM/ FTA,#9x.E:@:@=Yᛜ27nާy[cECH2zBDr^)AŠAM{՘~_>oNUֲaӔ'8]Oc.OYfjޮ]$ R%ޓ@n{/;1Gb`A)1eEHi&F$ G*ND,d{p:8!P&aEo0܈2IQa ÿ=EL@X̕*f$l$}CTuKV>x8L=Q; K' fC f)||\ׁb{p3)C邟ߠ쾻r6]c $G& >P2wr)ҏn؎E,(xi)UN_ EFk WV5kq$ik5-X>R&=;x08b̓7tD=c.mdd\)QAE`HgV!CJ-*-eفVl'NWCw0]gu?HcU@)9yCˌ;rJj)-yq-y `+[BRsKn/ Il2NӢ'&|/0_Y,__q ;#Y< ?y ~&l; {lȦ1*D E|T V|ع[q_i]rQN@'Ocj }7D(xpz \{KmSͣ̍A+}[__"PMWq?ur$gd0\ەݯ̢Gs'A بe4́˟\sg;[=̱?ǔa_6Iܒ*yB,~~d1&#8k@5rgJS/3˂YALB΀ ~`qj"3d­^`DO型P<_iM*g;%|Yn.[NZ|'+bMg)_Vm8h>ӡyn.+`U,:LDՅΏ(ýēT{@vg0w~KVvٹ=qHR`>vޖ]QF+%c 4+Pʴx 4&-o(?[cϹ'qzf*_ٝE,*7ʎ6⁕D)AG M'łQ+#7!MaJ4)͈ R_>YԲNM!ʈXnQ m aUTewt>yH.*d!LiNl }ɯ\tvG 2\E9?wrὲS ~ޝU'{ А9Ž~6ҧ:+jL=>&9X~=+ Ѷh@> %P-G5?m.L[7B2ϲܳȶP5OW= 7ݑ\pvgW<۲i}_Ϛ;#B}i̒9EC>s蜀ۀ8l-d0yr08"LvLBGsAgA A?.]x}M!NL)8uE?.WH ^/9"_{Z.F]WBa]RM3Z܎g1Ѩu}a(odo:6Hu\u ֔񇇉Hlué܋-rF1 %<Z.0z>YX@N&DTcwv;Nr=CNP#V/q ,TCD4Jlյ5!Vn?]\Re`~p511˕i@n"rK eaukdb&Vc=ӆ: z9TVٌ@ͅ&p밬Ǥ@VN6eVl=pZ`$bH%*,$F\@+HeM7Z]D- V*6aseIzj~a]W`0V"jD[XGTtaD6*5L>Bctsn(F^SFj"gV(DW*[cmpLv#0sEKb C-z# "|WX $ɘ^W}5?}ɓ!ƴn٨fQYFz ke毩xlTN/@1GеiYmB=5Nr+9$L4  ;ЯBy. ԅI$W̜ lYndeo+KϺ;)3ʻe@VH!ə";kp߈ۛ؁ɔP;N?R]1;U8!ZO<I"anJ ׫9}kԛ6պn8jcu=1Q}e.PƑsOLJxm$PwZUyБnNHdlMY s#L]jA+\2"uF{iűWvO0p=~Ԙʐ'>Fh\*Ѣ[YdMK-^UO`XCf^0GR y. ܐtJ=T+zr# >qeO羲YR"'3D$y@X8+-˲ ViԈIՉ?I&;J?xɭN'opfps,!3pm~:̃gjߛN0T9z;bU*H0]0>/xsE2,p#0"Z \d|x|tEz))ɤJ^keB&TlC)9k4i>Ӆ)l|-7yx5;n8$3:h2/Bf$h*/jwIu˴dx_D(B H'Y_qP_ ALĕ l*`i02G0P4NSl`Kֆ聵g*ο]1n(afNE*92k3TZ7 Y4kb8Gӓ.=zyLcr}`%wVyԲD9nU! t(U1VFkWZj\S0 'YƟO|euU]MmAC~!%y;Þx%򒎬ٗUffRVtI*|R $O1Vo8Y|ם鳯?A0n)t 3?#?ښ XJOR힭-=5sEq Dl>tl ;Qr>AltWV+7%Q郿rHQ4v6m' ěYU ގ?#!Ȕ"Rj&Ԇ*$fZj[($НG]`"~paq~NK2cnd&tf`:(, JM=iY9w@V A ~j/w?+" -2mN<ܓB2Lsu?6QH=vqrBbA6C] .y6Z`T9L|H)$5* ȳ D3f 8OD  BF" ֒!,xoDS(rCeVDTD@r_2] tC\D2 4dRm5j Iҩ&ɜM|[o`|n5<=1-%-X`6Zg sσ/ 5H{#/[FLyEƀ\,nR>n+IY?D?ٸhHvR0K%xw"Z2ro6Yd7A};51X0g*xFQFS>rE@:[h\̊ŤirdΑuIHj.XpA-d,%(k'LϔaM Y( P‹c08|w9zDMCI؆#tˑu]$pA֭T иӌnAS.NCz5c]BҗO3vIM$k#-p¡n$Ɲ*G;du %ˁ5XLE]Qqe&#eFձԷnRlf~ȝLKtu6Z}&c[_`i&|hЉ1{s#|hfMc+,vsX+/Ř1LwE , TjJ~Kˌ*3u8%_mp}"Y"ӗ{8qgF|INЅnmnV'փG>amFxS[8.!Sn 9%xg&E8~9UX(l[`&7w!wxx`;B 4tn"K9If!W&bnv^ePp>@XDg=0CKJ߻K1li4 ;Oi6YKɄ佡#l%p(g@d|Ұ1}pbEuB&ca,frp`_b(l, A=l+QB_UUMC,D 6+kdX7Fڌ{#:wno .)p]F.5*ӨFc&u"q*+E.Vdf Jp(o50 ؓ՗%K 0l>ʧrf4N &Zh ;kwzS l+.hyֽh}svǬ]%(G 'ͭ[K=}_Hx5(6cljI(y?J0|J!JDKk@-pv Ww9I"ֿƄrRyK5PziE/D2 YL=ėΣ_ƈ=am1 _|"_*.JQ@&U{YxRs l@a 95\K.eoF~p+PJ%}Ju{5}KsLa&{XZ,&2 T] XpjW?zfqlDt Ť5CkـM&mt7':w9eei1sQ聊&w{> P2nx4gbu'X?a)j2JKC$=2T~;E/٠ ,']=e&'PR&[#'0iv_y<5\Ң.^n~s[֗w LDQN3elK6B1g(|z`u\O+e"xRہɎ\oP'0s?zh_Ӫک1M|=sۡKbypJxU$_=jY|<3JzDeO:- QAHέ&gUWAAڸr !>U4戆z1f(CC)]"wGZA*޲~ J6&C98CŽ$ѓWA$R>u,X[Sɯ=%[m[O"t8%5%:f['JA|WJQlf $Ex jPe0Ʌ޵o#1ƍ9ۅ H)!g.|o}e%ʸ1c wT% mNLmWx wZa PtSħ=cWH͛V(_T_U%s`I>3/EG7(<ҍJE\#`= 58yNd}[ۮn@Ùu!3UȬjB4wʩIl࿇^~ TEbO֨gSp9JVPfY^[u 6 ]2 !D_[M>eӆt\#c#V&ߤ#8'tX 4ָVDY;DxT 0.cVnAr!ZؖЫk#lsHpxn(5ßXǗ!1IncD6⏆z-Ay :KyV8c$O BW\eᆧ?^s+< 1t;⧞,T_ĕJ {H5D#XzSR '<\JQ9ye{л(B .mW4Q3Fv#@_a:j{*FuH~-~>8#C!C1^ Z vEV`5KKcKO]2h]vB˹ޑL= ;_EmiT>%c 1r*Qi&/rgw˾>^$q:nzS  4OmQȤh n<"Y`w̩-C#B.w- IEd1F;>ՂY %W2T!6kȪm8 ZM)sg,Խ$= pEF4ciҾ)'ԗe~=>d,A<]ݍV=YH˂a$g=>L\_lӛ/|iMH5wm)A ̤s95g3I%,"-8p>15߹?z )=^RsF^@L,w %Gk"carz&%5LQ(>w;6oF7L&s}]Kӊcfşgɟ.JXZg+H}Õ@Mn;B *3z߲Ʀ2:jA^4.dje\u;L/44vWxuݖIZL| Nlݘ 0T''A0h^SVPKu0fw<4ƇZ KQ#qͮM&0Ӎ6}?ApIѳ;iTFxmt5p33daI 7WG8s?_K||D!ar50˲)vMǻRe0[ ӁL][ld_`8vG+_/NJC29ǷxV8#%[R&ǵyOr-jm/Md>8͆KDX{|ijCп:%>]yy+}Sfý,>QS[RY@}@lߏ&)[T1V@[;uG4qc|Z7!EeD&b5A=A`-i_>1ee!3I3%1/%8M3 i<:#PgS ZeU4!iɥw>T~6Dt+y="ԑ|!_ȧo^f;Vg>j? Ofl+9aT m[+vϣ'a; { o4t5 GNCIת?@Y>r ~ElcoJZwXӓe}/EI*2A0ŒDf3!tZ[ߋ:R) Re^J%oɾE|SVQåm뛂ǦԃK ‰XszN(MZ~='t5=PMozy aF- {9.(#\k"\"NjDGM"ܘ"ja)-%]rQu^jebKHwM'ʥvԓGK:S-Id]թ"ͽK.1sA o3aE(FOko"Nir0V٥`qŨ lM(g_oߝ[?Y#ٺCI-*jҥKX= H˞|ABM3(+/:? #z$TxcVyW  C((8PZHvwbOqO+-<8uΓ(T毺L!{tK%n`PV *NW "b]A߮;1#O Ob|7-1˺!mN:0&Ta(^yvC LxJ/y<K玪Ge9}x ; #7CZΣױgQpqGB_hl?I% u^QBLr:#(;=NSj}{.COVq `n"=6p6YǢzO\z*wL0v!Z9 zZqd*ŖlcْzC7lc=gogyB9]z{1{R<˶q9xwp& 79}椿!ltDbgBUOZ링[x/`spS?)hw@{i0qrj V_ؙ=CC"c)eYƍyfK$r>c\<)8ȳF~wO5" zDb~5zߢxې NLd$Y*@ 0I͂Ub[3 ׭> U-$~^Kxzx qz£-Z\zLR+Iz\@VZh<}++IX^Z% 'AUf<&͆bK +_'l0{n&Y֑ x6yw3ᗛ;) th}3 v5+ $)Z*dyGŀp8Wtky"J^dg~lC_wم5oOxh ^N% jrNܒOĀL]0\PH#$lZ8$ѣܵJ~ɡ-yt/ϧ$ЮUӇW7nD>^_G*g#TWG /6or8 `GzKExۮ>P?Rǿz#k@2"+XJWh 'ؓ?<*"/+A~)WmI R5ta^ (W[`8E61]lS&|%IbtuQŎ:p? r2`)W'IܼPÉ^pW4! W|KޫFC}cu? _  myr 96ݳT~_=7s[HG$64CQnmC*5ae{$jR%%Ĭb$N~4@RJvЍzW/r? M[Q+6jKSu3:V]#4C4Y7QС/$-@E|#Y -!5Px'r_ia2ξBuOOV ף qn[h#ϜttBܳʳDo.t<wĥEH4i.d(ᢓd,\ojaPii`k>: ΃*Pb8Ȉ+ө]\'/L51_8o~u`^KyuGgIu(u+|㣍udSt<'GSߐ S߄EVCnu?+%Odk vk,`[D8IE7= Ør*}pSF"q j@,+v-NY)F2G~ҁFY!@u)꯳d $y Ape{7Zճ/{8ToZ}j~TRHX=fg-tng{V.vwt6: )h1O)ǦZvsHpG$P#ڰ=o4]IfLؿ~s SgO#f§adV~TڊE jrֻČJX$-SB-pnc<\K5JgE}.9slfi^/Ll1Z%| *Sn͸~fsgq#_:ǯ9O jKy*Q@xnɴ颻Ä℉\Nn*]C *o4f0 :S^n-Lt:o΅;CxH#z==$"??4%HCf<Ц;v,#̓7rvGy̳h o[uA笶Ӕ SXL(:M|]-+t=Z}$6r@`-w1+EW \1{(P(͟7i@G=Ja/r;g˶%jRa$0YwOv^BR`,6nm dx?o4$6(N #4!$ .e6w5.?%ǀzT- OHѺ0p>͚g4ԈtFY@bCB̈́6*/vcPƚYaTME%("`#>>]lBʖS.TxbLg6G 'dG(:OlRN6,\  HKRU1 NHM.oye[1J#_օ˅^Ո<7T}p)'p͌:pG;'kx19mU\ًXDǴ #W%&42BLQaD_MQ A|D>45˾daFٓu6xǘS` Q gTy dG/B>2YpSu]z>9۝q׭k,Lu:sut8< )+^[tKT14:Qt<5% оHдWaw; xdܧf^B΀ k<0$ x/Uh%Ɏ#`uMKM@4,^ dȭcaoGLV3tIbpoޣP6L\f7 xlZYyM&,6- io[,?wb{tSy j5ڻUKUq̓qEoY+]Lnچ5wdtl SA2g 6߱SK6vUz1[R@,u|t bٰl=q/pFR?lDbF[k4u}91U ZA/&:e)hXaɬ?*n2dx2p&71Ë~16bDM^47 zX_4J³]/B=樏vNk̍G ݒ/l|ϱcA7KȻ4!Doo^4_{v١ ]uPç=@aW$hWz96vj3æ=qdG 6XT3U pAEt-o`#{N+@oP:eV#꼀(Wpf쎢ɲ?]krQai^u 5)>dJC󫛨\35dc,yNJO m͂؇4 btw3@%[AmOS$>_V/{^] hWg5Xp HӉWBB ֵ?4R+ V0CgcF#[QPZPfy0T2dBM ?GS;0GOQ|m+۷£dLWu"!PMq5 .Uf賽(gvU5(/ YX$S΂MM-9" P&-99+^Z9>Z!+|"{Ή~2G?YsaߍT n% p| UafBӶw<l~`GIĴ>R݉ǛJdreƧ Iwe8{{jp@0%vɖp=Ѵ\deb8`ʹEyGֹѯjSgoﳖEp0> RFx[<*};.'6>HUmD`g:.jS?eXvQ?1!V<>R@ҁ,|cS f3TK\AʙުRp#VdaJ 5q!ҁ'𠄓OIni2ɫo(O1[ P߳=qʞt~}Ӄqu.,'h?^q5-{z2SKGTr2a .xj]bw~ ϱ>X_9I`Z y)zFy='ɀ#/Rkma3ք/m%Ebe>"1f(Z1WCz) vKͲełvl`,w)!zNAahv;k_𳳧 oN2ߚd3}A?!ȢӉV5l'iK&#Ƭ>o n0V9UҤ&?J!(OAcO^M@ņ:EmnwLvbƗ XN"ccN`/\ۖ`X6n%u@_=،9lN$$"7 _Z:u-l*^A v`IO弳/7o:) UMcPsОBV[8RBt"`U22`4h 7}b(H8ݍKQkG1XACP8F>;@i㦒m M b(OyFMakc8s>ckVK!Mzh dLgd@=.FYwd} w9&?R=yB[g<`Ҹ6̢`C-n1Xulp" ϰcKdCD~-ON~D.#A|iq˱u񌟽m7Q?sΡ0E0*ԏqyGr-Nͨ>kWtL!5x=K;갋,HQ+t93 * 'cT_uv\j%PСdd86Z_k XeO ]`2ɓ2O(Z]y"X㺋QtZiAa?)(^')ȄLY$r`a_=u:5'^הS[*mJFّ~Hen%;'# GWs 6Y{2h_o-0~J8EqPH^9߈;ˊAn ~h|9y5ˎt'GK ?q ۜ7T cy(A,Y qUR}s=s $l㊻SH2DŽع |41KPC{,r]wےwECPЅ)Od;?hV7 yڔx$Y¦(Mj]cP,dOڃ@z Z4u74pʚV{3PuwoZN[pM}Є~%E&d8Srbv8Ξ e3h>a4C 6a Q&C S lG5zAA$;hT%Eo[YbBڜM#w ^#c37xӌXmhnfFSO)>i,;=͕p_vt-@bSA>n+D\wu`_px{vCd1/ƾPӕmeQZi'Ho(؇c . (tJTp$*r`5FBS(@Jz Ro_Ӑ }SK mߙKO4OY_V4U|e;oˮY*7A 9)2G8camDUaFmYzA9goj\E YTC3r&jQ)vyy 9.G xu}ga)=b+xك+nfW6?/!|Np$w]&ij~"~yB-z"F=3Q#A8oR׭G =J=?qa|yQONy1;Qø ~6=YYP3wWb2Y)_z+gw=K@k>H8̨x}ςe7܀LlD&#>޳fމM$;NPū#o!U'z"GI>O<шZfib:_% 0,PX:R!(ݮnH YlOPgtpbHly)HmP9 es +ީh^L[;v8jAwOGMkehΥمU hB<"}1u( 18Kl1eWP_bb{xsn0.uY>\helbG6M#ݯ'E ƿ 9,M=ZJlp6ٲGJx0%ҞjOxR]x7t<JH6TLpڎrHtƹ[n$Cdk{X 2ˊwۤA% @Tul&lO@s尖'+f1? `I)1]"Odç5Z07z (EIeV*?/}뤩6V l6qE34CCP Ww2 T¢`.?'A|݊~ vh2Y0aUJix[gR灊d=K|x[x}eN<I_UU٬gFր@$ɮ%^?*kb=cTX|thWZoQ|bIwnQ:DMofmya"7Iax,Gx#~ nK˗W1oXv՛j#JkYGR?[cBx0ld]vt攊p*gV"c:+ 95@՞O6aNp]IZ?'xGMoIʮ6ck1d[,y_m,9DԌ~) f\O@|y3w%M5Un8^"\TL/뢟v:(fV Q\yKol#C_V)0 5G֫=B+ GzL[r2q\w, (oxK{\ ~iI7(&(s~‰|(X%+*$L=,ꨃe0>Dj`;co_*^}h眲55 J <'9Gqp .3?GG'@!WNaP W'Њ"i;_-7rM%RH|e}X~ofUN_X'X2Yj9Sh" J6>(19AƔG29p=Z@g2bxWVS^,faU!`ɗ`6CFVRp24tjЙ$* ,5Hk.Uq%8BI6r1?fq1ީ>K ; g9ۘ]z/NX=V7d LL$|@SXq㚓p }9w`K]Õצ,:u`F"dvi}",nLɷ.1.}~V} 7hz \X "]>C<-O3VƼNJQRí(pWa~C;y^H*O% MG|cFQKmUF+vq;ۊ6K~S-( ޓȲXAJqzt]T϶Jx\[RjBW|ͼ#%o>@'J6iush1\Ht%w{5`{ FIE%$-ۡ/M%~ypžs3_.^')Tl[, L7XM-(zbb gtɣ@R6Id>`uJ|Nmxwpp\e{@yKȌ0_LDfw /KQcŠѦD8-Z]3'+|9a3 ߥ Nhag+8u(kD=JG?/NpfW_T?A;UgeհK}?vf:r$aʼW"st/KPn(^ #E&Sʓ!weSJx}Z!ZzlEӐ,K٬lO1w+R/C56bdeTjčZ[!GY'=u:~0rCR~RuP&k Y;=3djpL=I؟_yR<ǠִNkA9s(.'< 4nƈh?k%RO<|OL]@o[[IS-gYdHe9.H][ @aC»sQbQ߷1SЧs* ZVTo;d4KJG!@ nwW0f$ݧ nJ>2?[RGwg s4O}B*rOS_L.jC& H7al+B@l"ѓDJ( Iߍg6g1=Gyd$b) ׉oWjU :Q6BAGD=ga p\`\7iܷL;h8 -VgSˈ]#W_?/Cm˺>Lc]Zo\g$p"F*]®%⠛ܛTYVU'Q ΃1iocw'*Zp!*{X,Cj֗X\T%[|iu R0GTo&eRy|>O#vda@l2`ƠL%43# ʹF9qK˽5XDz٪γIq΄su̇o)R&Dϭ4r;ʟO'No,.YNx *q֬LhaEXdUDl%<=B=Ż<)d%7+"B|{vJgvex^lGdpNWhDsR=R?t*F J@0VmCTA" P\AjFF2mj…Ud~Q d\OM" ¹qPtt']ނTA׾}0`tl[,Z qDO5mFLoPf׬'Hc4Gn6/cOp~ÌsF˸j47~O^ۑåDwF;mw꠳~M|د)>g⟺zr$$x LDm- $mԉL" 5;\f^Դ 9IƸ쾒UKnn~ kBx@ qc{Q̙iF=rsĶX[. ao15)rf7E {o~~07l0ǿD` i^W0TdVa8Gݣie0"m2F|rNͭwGjn?LQoWiˈ/Jee}ƿZO{ ᣯJw莆kQkx4 z@@>RkcAxeۼ#_ sTDzTJFw4bG%{ew8 ѳ5 5.tz$I lͣgUܴ~}hKr)l@0/2 _+Al \ѐIk L# ^u1uoUmdu"G!E BדՎV$E yLe[Bnb?.yo5>< 'R[j",F6vTMl17ÏQEݎX]O\*^lq/=LC7o5^f8jUAR8_%zBk0_iUCS݅TZDW>"3g xZCF^ :4l̖$Ͼ@9)Q\ gH+"+pzZ=)S#EJ9ƈϸW`(:, `,#Jl;!MdD}&oÉ䪧HinNinZ?9}oRe{Iyjc[ {)_hZ^‹&#Wo7KO{#A ,xD9<ۨ$d ݧHU{T@~a\7ɕnTM3U0툖EtO$8}u9 vCm839b k`Ն1zOOIK֙5!ВC>,)l{EoHꆗL hy+-6T~6<[!a YM}pef*:p.{NeJ1G5LKȁ3^DbG…3]PK2L Nvnq#v߽-72dUcN>;p+}}||}/i3"` ժC#5Rȯ6+ `]Ft@"b.bp;* 4 +<|"oj[Mo][b[mcj[w p%L0-i䀌hSO*&O vg YWgd7;S4;pAX)[QZ\]օi2M0 Y!ߢj 8vr %Ee`R<{`R?5Т h$\$/*@Ҍ9ftH̜_,9PFI%n4,HW,) t]wKh.Ku7lU\ :3~HeT:KggS1gϵ{ gCrk|bI3=pħ2_ߋX} I|N'Lp]dsRKBC!R밞mB4=QKg'dWq:JpCBNޙQ,C(hrLs.v+`<6Qd֍ )4'f'ܯ2%,p8E$s;)kـZDV('8lX^mJʇVz1ϮH Y$2`ԽZpOB+Q ͶvLjķz8@uB"Hz CXFSQk SȢt#Z!NN0b,U5Dmto_I69(۹Kpݰ絰rXרV"EDbx=<͕S$DX=[(1S09pCE<6 )?߂T6j7 \Y#_\'n1PXmW|\7?DIRo&\' ]޾>%u@06tq©΀s}/E Xvͳ.@:cNA)|>)('=b"`5x{EO4qd;+} VzmC>) &a_b?^$.k!!g^>GY'-nxJY#IZo}6mԠKi ZPE"߈wO6J✵(K͞3qHg}ʟRFgx4n|Gq@p}lz2/̓^*_$҅B`O9haNaM)!Z|"Z43= M1uֽ?Vm=t G'30+''ӈ|#Jc41ǣh>Ūs@)xES(mKzoBjg2[H} tiS׹g1nZۃHJ$ǞiK].:b%4UHVaKmY bl6|UVQ#ѵj!=֢}wp\Hq6i]zE?j VT, vI"+"" {(Jb>ӣ',lռmV4`(K1;}bAJ3Vn2BP &vP;fȕ -1#NE^v:0Lrqm7ɇ< 苆ˋG|*偕)ZYLnBu:D-)a,5ۋM; bqDlGpi47Ql=!i9_÷p^7$^(3u4c3`"_%Rƨ3chàѶx,(??*^A}7faNAA|N\T>S'oZ @@ˍnvM! qOs_'r8d&+9KzE_fКD 0&DmWx9`Qrn4W}2N1x)5̀`q\,ȹQ$, 3]fJI1(wh8tjP]2`] Lg븹MwLyAAB=ksIE&Yei॔YB }ݔk@eho 6x:Z{|tҽzh$=6(NAmRO&bH%(QHHl8e/7ȴ*ڰ|NnmJ Jv77  `:G{6`m3Qd_ 4 &96%4g>7VEm'mӟJq }tȝ$w?d0],Zz bK< M/Tvؑ7'K};6wEư>oC=^ۋ? )I/W3$JNW,3*u [ 2ut{c%MYgM#ً~广\,r@#5m񞧨EY7w:| *ࡰ H6{5u{A>5Y"i7Ǝ'tjÇ3h`<hGyGiB@tH/1nxSMG^+ =%^<ۨ_P0taA e_^Jt>Fy|L>TЍW^0og9/:N59jDU{ӧӱ u;OѽyFzWrOel8pvhP_xS/V`QAҪɠ@.ڍYYˈ ;gS̶&~v#˶.f. < X\l2**PB[.A9Ve)SE,di1;uYC3|\0" ✐@Yp 3C%Ow[އCmޗeBlΞC)5x5>.Vy>qj[Cnpi] %1)^oGMf3t' 4n#o#+g!8l͠Y,!^o՜gPɺ蟘$y`Iɵ2.x8H$ ]h05hp =@ +Z=0:uI׎'K~g."i[;Z-IՏLBsEKB~bPfkf=MUAӗ<1ö6Ԝ4Ѡ\#_@}%.0XDGюjb@lڮ+ #`q($th(ӝ s u;#yេpȏғO[]C&E/ق 9a]IZ/ Ñ"^hcؤjbUy҃B_w*;c/+;HnYrj*X AzKv󿝘j:zi?S N[4;Lyd/;TT[KB{0t{Ei|}DQXoZwYg`bmCDcORmA+ڊ (^O IjM*MQtzʑ3a=eK fwOrLQe7F9c9nuB+wN,Xspl&O8e;Z4wYNhr =t(MTtG bNFi0u B̊ǻ@! u؄3 *]ȋtBVAa%) qF`Ia&WGq&VtcM-]1_CIY4h@]_K񳯳~Xʠ%4"nөQY.(b0ðKVX"i/&}V:x\3:ZAg{LX  `'=amRhCٕv* *6ګ$ezƩ:F{TE OH~-|d"ܕ-V2E0 2ώtRf%TPe S(6s¿?\% i52Tŭ0.9%OoS@m*&M!Kmv'i$X&ag_WL3( nyCZg}jHoJcac'R7ήKO)Bgۃ w Su+*>g69c "-L ә5=9$ǮlWO-S"ޢ0 yA?,L;7*zX婫d0vLGqld=_ }O Ԣ?#l &x C=$<ѧ낒{piMf\Wp0oay/w~v $gŽ DB\a-(A0Sh W?դiDi*r4zx}Pf'j Y sm1yn;Owpъ^>+B)\] (Z&|TTI1nWe`U?; iYϿQv5 5Nf Bp Isia&DezO2+fȣ[Xq‡U 픍횕L*R-"Hp䢶]|p ~cP6_)%^{ "y1f.]ȝs᳽4GR5֛ ]H ZNge*4q?̸m&Wϛmp#1u~0Yҁ|{kJEq@,yհ8_ن[)Ź{lI5p`oAume Ձ%.e\7`\vը~،O5Zd/ۊɥvnF3O&-nǹu$+qFu:>)%bD2EVI) #e;]V& qQ9\d&/7D-JC+:_ԑnwet"-hsSLZ-?n008ϾbCw+ڦtf.ɯT>g@;$F 'sw 5Rkfh=R0yx3#wۇJn$RV{N[wڿPtb b<5[5V)GP=.-ʵ\mS{NqQBB卅}fAx@<}Csr?fK[x<ς#GکIL^#߻\7d,ޒgjsȍ%GAp6.U?1B !$[hC u=4ַ39(Tr!*ՀCWp58Zq'(0w5]gpY{Tߋ{K0ӈ\7k} q=8 xml6.@Ğav .KgMو]bK_H&t!Z6& 01c1{[fWUh.aEDb /S'O!m"|n6Cc'qT:PajIaWD5=zEeٹ9X".M'ֲyamm%M1$%@ۓ$K*`&^kP3Crq-db2E;r ?T1 An=<9ʩzg, 4Ovya ;RD .' +^Hp#C7S,|Ώ"dPge/v 3ϲψ`4YJ7C TdU.0h:3W7b@1Ӧomj iPIep7Zt<?Əukqd.paU`(AZlm3-2]SÓg<)]&>\ϓ ~wVXCqttҐXEso!"tرUUv󘙢?=[kqg%,qg ?ly!b5V(3 Of7$V}"((Rw?dg1)dqUCA&[le/6<4plK#+@E0!@41H&>0EVsyTtиIl%y1f^_ne@cbȦg !k$Y8.3 SY9[}kEn?ycd᱘K) ŌOclvYbCtV;`I,pX6ʯ߼WD7M-ǣ 1. j9NvXy_L賓OkboGoQdrE!p%dGF㒱khu, Dr4ټ[v(_ISW&kAg'hnZCU*XK ݧ3buVSxAˊds:juHCܶ'QO/il7 1oUj{ B(Gl⵶ЧẟSTK1E3Gڸua.mHH G! 4 h}`wDlbQb$<9t_xrvRG`%B1^ǘ8Y3|Jd Xb޶ f^j |ΌjnHL IZ4浑 da&xYPI\IDr|-f!YFω:w1M9f|>AI4FpD/_R*uO^mQ˾˴=C|0 P*+J[푫z99@}V08 &` %v#:Lj)hb*) /!Zaksb@B`N֒fBqsU n2&{}RLzQ(ת W^0Ev懭Sҙjkgዊ=-#tidm܎8?M'q,#BE'Z3s¾j-ARQ9Si^܉u7>}>Vv d6&t[SwH/5ҫXo]"64YHdK +tvV#46kW5o˾[mГrux>} _J0D4.uI Y_ )>Nٶr%r?TbZ Y u{kV)$Y ^Xo5BWhb輦`üFDAMܠjid>3PLY\:1%ۓ2Zm8V=P9s԰r|ĻGyWeăE]-oY  DYAmtZ 7)<:eALyPҖXH۲MϽYHhYOr-aZI.P獍)'8*I%#e+c~uYqd?xEUp q4U3\ c#_@bmrgJCkcmIp n*AtmQym)J{*9b2l~)W>DPf- p1rJOjO{}o`}\D0 w(59]ss6$c'=bX4UǛ5~,Y0q oP En:tfRN IcPGQr \|=KS.i SFј涴Dƒd0J:g.R^SHy1^IIq͟k ['8לpm9j)ʓP Zߵ-Xȋ= ai2p |Rky}ZF>'`֯w@tq?f4iɜf(I?R4ϳl`HL*,/-B2 ļ`ht:ϼtOR-R7r;hh= 5SYwh2IG1@+'|454{Y 7v80kn;Lz%7iR6_aIy%"(7~Kt_I[fXIO,e&iFJt5?WjPv$#|Ȫh5B3'.hl5z|A|5$}aG~{K$&ezZ G^QTH X-&DW)^2aa:A$5Js][uOt4T!O؏#i~}8;R]`@.y⦝>u}M׫g7.FK =DmvdrZM:q,ޏu;̠_ɥ3ה5P(cf27fL8BŁb"ҚK{KIoFVcZj\ԗ/w=Я~1BӭBK#Α- 72LD0[ J^Lbo#y5L]nzvBHzЇҥrn{Vs'>_j^&(-&q"JFo Tʘ=@ j(˝$k7t.sRPe|P]w~{F:`# Nz=8:3{aR>) f$y4 BI|Y\;h:P(IdL9GI]Ibƻφ E,R{i >IDDӚawyDL]!8W +Z8DNYBd5I'cNwW(]Ȉ9KRbP'~t6j$׺ }q(d 7d50RgjiU6JZ>pgT?f2%ȻIj~r$)QC ;v21<#nST ':KLg'> 4" ȺRt7#Ra_bڸg#mٟ͡:. EQgFL2E)2Ü1"JoC"K@hsGr-x,FPmV GD_E7ܧނq8t%hP-_%'9ߧm jQ ^HڞD#͟\ {(./{Nۄ6`u5ur;{ $2xm!W^p%H,c1Z \ Ս_:E^MH<|Ywt=."kKp`>!koaյ$g3EwfmTǟ* #Ҵ0xL0zKoXLA9ip&CZnIpaU46"@-_EgH3>Cf幈j?|ϕyKQoԋsm&V6ϾR ƉQ}9 1ěB"Uy|'wo* :C5"F93B^E0?E=p(OtMkL`޻bZuCx"tէQ|UYrb=G(!dfrxO |7,I>~Dk*ClT:LˠƮ#B;.Tr6-dj.75ȃqlV洡ʭ̓+d7%w^DIG~ t(Em@ {޿jGdrRS_TiV5X'hvPOld}ؘ8y=f}NxA>S"sKWCAQ:ɚɃ'VD{1O* @on{cAz bhmKTqVyqKàYɉIbA7݀wW{XE~͗v5h4P9HFv!c`JjIШaLeH%r`եݝ,Qv6G:I2ǐeW3sj*\Y}R }-L~@ *$++(/7z2B9;P2㗝L7J=XObZ< #^9?F#P0ד%+ӫGiz Z$V=\뜉<*;5h&6 dd˰'_f$#@r|1zRYdhOvwCy#ެv',t] [C*.GVu=\Pxb#E7+_2k4?Qo%!^3;hߡ%(+Z3ԖB]VL7|#_L*SP`or78)k>1Wܝ$$,zhY2I0rɢ[K,FqC"䉯cVY0E7*u'TTZh#䴟%{,h_=RTi'_Cw=arZڗa;Sq؏Իn̊ɺk˷w[r0@H\О6ȫv2P哦ޚG TD~'OW9\6 /앾"p6K <' 1SA^y2iF'jAaѬFnf"E\C`BVE'p0nNٺ60҈:lZtJIU%3"N!t"$_da?Ni1A |CS8^Q1&"K o5.TjXn6*>\i4!a۩%PTXޗ1c~_ٹi凴myt/ƨaH_ab<#1EzL Nl \2^@k}$U m 'Z6{7X)ãGQqM[i% N\.ÑDBO80KH?IXPK%$l)|XNJWtN\{8y8uQ{3z'8D H>W'dZH]}a JGc:KcQ,z:[u#YŻ'YY0us\^ެT'm`gqXoaQ?VN7oUꗗ =ۈxi4p? եbQi#ŤG$c{t8sČ#cv(!CڰX]1e' =oUQ czelvUƻLUNAJGBy2) >ϖH`bIZ" \iuPY9[s`!RV2\4!XNȧ5 P04}"3mnLּWQLlfbOt/uqp4QX)D>'geةP9B#|Ű$fcoN ;Gsy'¿h6[ѢٜnZ=j\+IAo9UGַQ5֒*OHVSSx.&UE˧O'ʿyY5-6]diko4G/HP,QSQ[owQo3I-76A$RƉ0nB=37p: :d\r<&Y:SJ!c#,蚰;Xv`a mklvZM8*Tr}9j~X3;*ƅbw&G 0VMOߚs^:73CyEҖk2 4J?CIA>:@X+U1W KIc۩F\ߢ-N6eBe9}{J,RzO*DQdTg[\yipK:9+B%.Y|-èS O_Vf_k57 E&;R7"=Ybh=$n/y'}S&}1Y[ܺg]A[1t $rk Esv%p^ z)\h&C^K.ȒҬmb߶i)Cp2{C^2Jm% ]<Vr< zVեC]>Vg7We(\;t.7]s~&78//B׻sDLCV#[]|+guZ6}.:3ʒ IzR(0 ߯#f(.KDaO]1 equK$rDTtr?ћI`2dhY0<Ӛvgxܒ!S28Ȼ;32V!k%B~3.ZnCI8EҎX!fDm0HG=78&:TYf _ġVN]@U;깼2Lo@M.o3kzvIDSzi͋W=k]gţ\"xS܁ VA~2~ 7xvA :EB;_s&jO#qr(f>X`tӼ0zqːB={vfT``#LXC*ۧ[/O =3aV ndXs\9y z~(ڎ8"Xҿ~G_/.(YB&?#^$UBrzEUIQ+5}D! cXRҌS̝,Bi6Le;Zf]A_6Xڪʏ ?LP mXBmwݙsړ@r,Bi>;452u#1fh {y/ "+]MJ $hDO ;oV8bPu2gYpbW{OXNٝ )Vb;/t.ʢ,d]5, JK,Ht$~ۿ4wD9Ңl WVg%w @z`KJf,}=l[1u";NK_%|^ɅB(cx"RWr-zյ{9e^aEexT 纅A(Ӯ酷a.sL؆})  N?TWES V-q%Cd(*f >Xm1q8 b Ĺq=sh+Dž; 2JV,ޏvsADI{[47;+IXb7lY/5i'セ9@ 3^Vѕ,;<+]B!N'zV|/kNul$Ô¬omiA>Qn6'}_;VS. tʳ}+8 %A<9}qYqI4G6E+>o^ t6M;Q}5o%aG ^?MnN5Eƒ?s^a#N[>yŠ`}Wm.NV0FVT衟N=~WA\Ki$򎗦d=J=7:Of J/8*7 XMצt! (r iJ ת2Jn?H>>'CJdR*4 t}N8ܕlOͰ`(Y\`,G=AʏHQT,klT`.w56ӹNHcW rcZ/֨Buyq0`taQEr5̂,g AJW; $By1#? AE /ftzyW◲pjZf$=fIbzlè_|,LV2p >޷,qP&Qgx9P0VY"|vh1G4_>uvk"L4"Nc0'~^NZZӼց0\_ؿ"F\ *l?b{NjC<uUE7P襱B7V i1(f벟lXz~ϛ-C&-(0B,̱3XӅha6^@ZO!H*."8fL.ZsI7]HD* o ײo5)Tǘ)Lѓ\|/dE\iP'o'7_U)$ܔƨK*`Kr~i(.s f~m. ĚX_zW Y̤̭H )6%n)=jt X{>u0n+ u#'L8N)%D"1Pt `5S+ma :Ջ=m]’>pm΍]r=if쩰1i-\HFʂAC*~q'Dܣ(!>+,prlȇkvsbS*To+m0HrZ5mAM@%X$ q|c{&LG™zinJrܻ3Yų,{w9ߥ .Ц?Cf[Õ6a# |.Hҧ1S(P}]|0\?'OBhZEA1_~ $X*9[>ϱ5I&X 21#2/.L$iV'ATRdeI;hISn\\~[NoGbҟ*nW(A!KH0g`'sNM e~HΗC=-'W~/u'z3c*r .Fqm@o3r1.BqsǙpR>M6\|t;![BuPY v6V1v6 N=+r Ck3g!:JΠZnV-Lx3fQZ/B:b)@_Hۀ8l'A;r>7Og);M_R`|44m{/N  "ìՅRU={l#/QAfj |Yd_${&s=qV{Kj'g52k26JyhgR7Q+US!sut8o;|7 DȠnpACmzK(b&e "H$/'eȺf+&K #00H^$ߚ@der,x_ >y؛aB;qG !톔J)xi)i:煲PSr&&uĶ<%Ar\ZW! "u4/??Zdɩ`l/CRΗI5{&5Ezlir3H*@ {Du4^,z5Wp͆H8XS4#ˑ" $Xs^q'a7!lAܤzKWQvE4 *J2yᶜfNWMqV*KStdn2J&SעmYA3mbMCfmG!mxD;a0UxXg~%"W ,゗(-޳T2NU̍Wj0p*+Ay0XbާQpb?~蛻vɸ~A(Ked 6(nHϑ,ЕWLCv)CG@|`Nu\#eѸ l o zp桎('gNL!nL]>Z2dXbQ q%7)w=U4 ;NZ'WE#v6"/IYps }" Jd #^;;]3| @&ǖM2O>_`;~¬X?o)jm*INŜR*w=iii^.-|'Rx>`Q P:MmzǢ.<8TSBoBwC XD3:aiBkjlzw~3 ۻ~^?\߅|NӽKWe$o g' *uк x4^} Z6YrD>?,ޒPaH仓cO:IN`?q\RqPmPurE7wȟX©Gfz@z /ҫ NH'E6Z?MoJeGgx뢧qA}JrTYj*@eOxH-2Bܧ3&*ʞ{UP"J$(uq7ޫb43$)YƋ@zE ]K`1(&"%76xTV6mVpPФX|W qxi*P.,=h z4??{=p{Ѱҍ~58Z((^-ɋvķj A 4!:qܥONoj|OpJM DCVrʝnY{K=+0RRv>{iPq:3a Ԥ~z͒}#z8ƨ UD\{y2,G(9eM\@^^AjӭuU)ž! 1Y]Wә 4(w]6dNoU%-s6x9#3IsAZAڟ{;2дvkIsUUb"Vt݋/4/oqo'1 "(6Q'PY}R-xb֕nԽR-~fWv"KȎx7CxѭvceRzCCstKLɛ`5y$}Zds,a6 Y'PDñ0aEA+'m~'s e} "H%hcegbJ]8Pl#8%6.Nv_TG.91V%PSごjR/Wȩ٬=MW#^=g3#bŅ4Y&|=EeY)k3I 9Pû@Y+۱,~cB-M H/Uh [ȼ>f܃%M1`tbmE,P|9s䛕:xdگO)oudӋ^\վF=d0^E)m3N3GY%}RƃNrޯV/ ls().bѼh:0![[pcC)j|ЀE˖Tj~u''PQJo|ݫ[O8 Zٛ)2h,‘*QlYMN;E۸P yJE_ 4D#&gC{kNqO&օ$!x_iVܵ/g4˛-iK`W1')O"!,E;բJ\bS\u&??ýDۖF|y%S;לA2;ʆ:>aH8 88)zX)My]c!1k27=y8(Ҩ]p)4]Tȯ0,y;9O5~s3D~˱z>@BNrZ,&qmL0JMm N%z5_ #NWb탻)Tn*7mG1umjtPK-GPtLI9$U6Н5#jE~EtZO 7K`MJ18õo\¹h7Ϫ%k@yd@1-+#ycOTgGT#J4~viI3 v !=g{o?C*SX:7;8m[REGi혧_af  ,B`4I+@k?NbkvHMͳdnKD_4i޵@ė@CZ Q=Rl'4ekkbd:Rf{[H' АOFl*a%c"B]|o' Wn=.0*%2݊)d14rYKպ )zmG ?=4Sr“u4#TSknEmG!e5%N4%Rҙ"K7]\$%۠[xoDNY' POKN ף-QShS.>\N>JՓEq{|5^cVq2rUVTNź4ׄ1ޥ/TG@>#{}Ih`C7Šn$9 o%n P FTJh/pG֨ĀzY7SǶ~H`z:I}>R -=v;o&L'|8#8 '5j%0[ *JAg<_T-o|% ?# :`\o Z`+CK/9 fȆUm0mXgJ eWw*n`%Es)gbNb e|nۛ,{`0wE1a6ccHI']H~/ O,@JV)HLy©uΪncAwhRƅ/ dx |Vs\1*F[Jp$npd\c~g;4ۈ%LIWX svoU`&aexi|Mؤ'[M'~ydӁvNv5q`Ԩ5clEmk)S~ntL#._%gP:ΆD+˛y)$z,% *F36ð72W{4Ư $&WuPʭfRzWIJ;mUE ha}RGY^@:btj?5%y͜,K.+oԥHpQjTLO9T6tŏ9:eٱ;Hn3VUM!?U*8f/) 9%]dcŞM=:ssfuBy<0pqt+.sT 8mb;70C2z25MiPaM=pno:_c47XFL*-aěMxKF OJk3wNr%< 5LYV=TL]:Ffܠk lWA-w|t\|{_fDž5#y8lR31Yb{$a8Pp&vU Mᕄ׈ŽL 'VgxJ7R <˂t.{Z`OBQzh?Ȅ]׍c_(swG,<q98z^gIs4<~yvUwSa#U"]mHwo"5]{&.;_k.9Y \Gf @?{pYk0+AWu0JNwg1p"Z0K4)hƨrT1ʓtzpė6s>/{r\!YٚAf.ilS]Cc/:>r*E= ";5X<1//Y8>An`Z;7nrxqIZOmcT e֮<r5Dl1,_<3A_ub< } ` )`,w}n"Q7"9>~~Z/t֝dPUQ$־%>PҵlL}讉ι0:Oţ7rSp|7,U ^9~Ԣ6YU39C1zqjov#e3X?snsF|b9S8*>WRmV2fؑdwr#x@X dA)cJWĄb ;Z jƏk _FA^bn_6d&[0Er#%$ }nH+ƫFZ YAU8k 4cpHm)xB$[CD*PFc<)`F]ϥF[&6**76k/exY[3mϙ'!TN B""#Ԕ׹ӄt&yG]I1kFKenx{(׏B@|ai;mWD^ {\.'7"=<*fۣS#"{TY=F} ёt.wPyxf٪&=\':0mi&FxqMm~T-iR:uX-ע( A%w]4bXtit aY TO6LpeI5ϩ%oPIѦpc=3c--`*%l:;-;#jth)n>B}H MK7ni3}~.raEC3Vè+mR?.$RMgcI1D}=B,{ѩvS0đ[cUWWCnV  O95>pHKVgۧ͡L[NOw1[훝& qFjtkߵ)V /*['ńm2Odj HGMƿ+ qrI!T " Ѕ ~}&ʞ&#:WhJw&}\7]L"~n,6Nۅ]6^(`Wum?-;`thlcHB 8 ЌlT 'ygg$Ft`p +򨕷CD_yO~@l;I,zqiVH<_Ͽc##4CTiL{¬٩p(a;DOP%ypF(HeiM !нVۑ2WiﲡٍqMb5?~'nEx:'A Lg6ugW|G&cIZc3Smj=XEn X:pe?6֭K7LާI:/}1rg89Ks'oS5nV DzcikٙywMyRPVu*IYWNNpU>aC3 j˲u9.F9Դbd&9{+5ݑdQ,20=f}*bBj LxzB'lW=LY3Ĵ:jBG.cD<[b5rxX`xY7~>X[6X8{]vA7Ȉb[jXU3ȴ2)c].;٦+ ཭9oe4v%i}ҵĠi-`Yu[B-R5ɊY':˦%:쯋mtF1{LBcsٍ sY,S^A= jI+rssJO0{.?`SOY@ѝ\$-6Rm;Ibfd sx0A.p:k $xjb&?BoCpw5=ƪ>P+/f`4OJRgLtUg![~xwRʪ m3ݎL5(4:#c/qV2 s|2DTf bqo57d-,r?;NFP;>&^ 3SaT3yƄVElVOp(Z Ju,)}~m>D_ˡnhlx]@w0?5b_VT:peد"C۾#HH#q "g9-/.,RQv\8'$pLY~?c2p썣>($Z!>bNͪd9'h+$ 8@}ė#Z xPfw{r,> raXK4MS/gb}%uM[ͶXpHAhffDba@9$J$4(޸ +2iH|rQ{sf#΍塽 O_FӱSa]m 58Q,c11?GbTaj,Dp\Y?z?֫ꗱ|+)i+52=Q~"<{O :, Yu LPVXAь_P%>:b\gQ xO3`C!l k@IN^a"*YA@S#u:b.ɝ`u\s^XBޭZJѝݭeaP@l6Nza C宿VvIm=N X+MUdY;.SB;?Pخ)Xyt K!^&±\^bg8II&cIll-0lȺӓ3D\>I&V3z(H[I|?@:f"h50 k8BYb* 4V,~ő.[>,0jNM.8\yqڧ'JɣBIi`vsmI3#F뒱!@h-O\#ll[ gk}%.ڽ{&`'3Fͦf  isAE5=Y\aŕW,w0-Y~"< [j+h{ ns L_PCZxFHn ߣ8}fC\r<\Mtb} bTCyk);_xQ#O :ucr@A)"Q ߰^BٖcT p" J P\].~eru?%vZ(d.3_?!+@k޳#³Lи~NCJ%=9{8i33Y *pWB4:v `|2[i'ji;0xwԅ Q!FN !~[ `Q6)YcKM~3$ ^DNGٙil~AA&Cc`CqN[bG.#%;"ȃťc2ndŌrDL|wL pa[@oT*61F?ml1c{W$*n8]ԉ>eHXZbݳ,Ҧց =P ۃuCR̾ b$EY"#>˺olB'WzZMt'TWPd D[}}y7|7*W|)^GhD"Ik8Y=\_mWXPBwu^X/$bL D"4D|1Qʁ XEE40YK|{?9Pʯi^^ưR,TVm;Cb7Ŗ|󃖶Sfd*ڏNz}Ӟ;Plr*Lʭ ;/#, JS4 ]AI0`ҕ/aT.G6=]qFݏ 2{RCxȠ??8am!]'l=& [VnguKfWRUAXF@|v/;]Bq;*gHws1&Iu1uEf N%_ XhM$Uy cuD7>\g͒nj5KQ’jT [չk/pt;,w;^t~>T>ܕ^fM8MQ{hJpZ3P}>C BY&n)ZM'4Ep:8Bpղ.}hHh\UnMZ}59.wQ5WPBG;/. ý|Rd Q~v59IU [jqlW<΄8^3 |1ft.s:OGUJJ59"[6ۡ~`VS ,e$uI'iiYm2w1» LԾ,hP/7KpXX+|5Bf&W |Wnma뻼.m|E:@~]N $mk~x?UVdFq dv+]iRlYqqF izVFO|b2;msyW6 πOUa9-Uk5u2S.CJ`I4WODS8VMXRr:J[ڢ$' j;Ac}`x?  }{LG R V&ꋀ\rNZg XG"Bbf'䧡~b㫦 SEg@,&w3b} +h+? i(^krcp'pĐ#|}O6n5]+vT '/.7Pa0iv T@oR}:o0JZ*PȊ,kGu;L80FEL@lJϴʵ\~E$N%@WPY*uÚ}rsUg`5%\8KR:| 﫦\rp?D7,>wS.Lʸ_bڔrlͼ}4岲e!Z} 2_JmS +2!>-ʳ2{^7$|<ixrutzCG=ˡBNspd@8zNQ2.TJ36W)rF*$S9#m3ҿFDIoFx\;݈8j Vx4FIk@^{Aom]'Hk3`(ȄPlht> z˒"^UZm>(0~h^n,eziJ*8K[@5dQSήQs')K 6*{2"ll4ȱV -<N!v7M|Gg NdcFNQinPKFI3;'gK*i/2^!d0@TufC#]=Űq@^,RTtּU I. :k̳};wv(7}"9+KıWʄGe`](7,8''Ľ&ᚏ )EJ?=cM@!Ƣ{ǘ6S>!<~:^P}bWӲAu{ F!r@ 8&dndRSX!F#PFdGq í>afH[.OQ%̫8] 1ByImuyKκ\Ř|2OZRkҜKMWHM-86ح؁d mY-ŀ(j,zFd& ɵ,`u*ΆTA}dLT6ݕiDB.DѾrj[Vd7un1΃KvY,qt &bXԪF .8V*$ugcr-%-#v=Q/]XȘV\C.-R-V悂*|ITㄴנ[ ,rOš[HK% DB7@XT<^ˬGWpBؔE9&YM|`>,{UEz]cƷԹPi-bU͔r lt}4ky{|Q9J m|}GG!Àˈ\08ԺOjeȦ@TN)k6q!F`~'kN_3c/g$âqJnp mH?Fn_o$^kЙI5ANuhʢLm$Q.ڼWF"վlzާP\"*s1XIӒ+1>ݒ.Mh|q5A/,6gqBtћך`"ҺnӁ9M,<.K3պkD'f۬U^BhzF鈔(5igFpkԺ'.9g!#9bՄ7Ra5=JR7l juɕPVzO=:e$tElЅpS HoߨR-RGO| 8e ExP!gㅑr#WZd~[F '+ғy`|rNkuu8 t|^ ki c$(Zа4{GhnlJ ̼2*"t~ AlGsy"fKE ;-'Р_ $89{&|k8>Mӹ1!_eU,󒡈DI O5PKҔ5}}eaΥm#L}u.56UXr, P1- =g4 6&jd2uX]Ap_2YuLm!r[RT}`_ּ?O,7asP(ϩŽ^IX|K~乘Pe8[;5-_R/#+ި7k?ju퓍g/RQ11o"@}2% Pmy>S5ſ($0L,(iLjtb ǔU{Q&[\kpyN{i՟ m4[9R#MN3d i;b(z%4_G99WXTn+{73d]j'0 .U>Y2 KrLn%,j7qN]G>'ªA&o(EQU xqKKz&B,*@VpQME/A;e5|ZE2Tj7-ZHl1H*Kzy2`.Dyt]0ʂx JLp|6tl0Uu{?iݹ/̨g^xC&4 YPZ#ONRTE;K}Я[Ժ֑HJF.#Kl/Tew+|!i;7ړ`\~ 2/اl,x%ER!@eF6%x8"|&vA³ d[:lT8鿹u]x~]ElQ͋$5`)lqj,Z4}RS%4EQ=PO{?Z\5Zl[~Y #RG4G׉R!laN &i7Qu= x0yE-m7lӵMjFHݻ.CF֘P{aݥsX g56v V0 :aZ2au •\̖RTQi+U~m:T*4tWf e 0bMjDt)X{a4 Hme _#cY^wyNz6z9jg ۛt˅&yj;/<7Fp,s0);V  </tz/*8`^  hedpc-=L1kwY~{tvLuBJIyE+u1ߺ# |Eٵ GRqŠ ZwAY22޼#~~ E'vԌCp"r٤]g6Xp=) (5؇FnxVƗ؉3:m{bit)B/~@sj&m QeF'Έ=$odgN?G`mTEO(xYs ;r?Ϥ@Ul,2XWA+Զ{+B/il%s3&<\e$7_@,f-ia?54n$et A&4 5Y*krDC?s&2"R|V\ptGyZ^#cs-~X5slA0 ڂF޷$'|INSl/\ݯ1{p 1(:!KiH޽+lXu;]ZsԾ'8#T9$/pD׿Bk/ "3rdMW_F ~ad2JTK{]3?f@Ur&r7Hsw[sIWƻ>f;e-l|OgiS*~\#i<6=2t7+D5%FC)$7Rد /prL$VbEQK*zR/}׷SGCE˫rs&hph<}gh=d a&^й!֪g1*˟sLMW`Щ乥' r5Cx#5rЂ4pMa< ߡ_AQ^ d+)2zoApFVnNs{AoT'! ~Z]ņㄥ-ގPHX x𨽏v8.Jͱ<(u "bߜbX<.bt[zz_@)\Lp{Ofj)ͺ \- |sTjn<,m9j@ū 7(9ʸ:G`V s8޶p> W3NțOYZ 28EgV'uEY|2J&gyiw:|n 7 uތdcNY+vū-Vxjf^%q@pD,ܓ#s*ʷĊ:ҹ8N!S5PjP oG,@MO$v!5>dX*#W Zm*[9Lcx }+Y4_Ȃv)Ow &+r逎ŭȣfymRGj[N?J5k&3N״pH*9%_8u  2t7%c;Z~9 j1"A r{TciIO樭$o7uN}:1LlӰd )SPBQjr!ܲ gV[ T,-P̱GYsRZγ}=>)yg0!n%,MwC\q4dq( $S;=L\AtJиO/ghB!Tno̧s,Toh5醵g#ƚוbwtZ P c Qo-16A{ {q6p53xhԂNQTB{]Oӿ!^AUd7qϾ7\iPFݼhŷ=VJ>7OM I0Lju6{;1>Hu`UUNt8aby&bvUԻm`tȇ 9O]5BMoIWOI(q41!X,u|F}VAԿ;KvJrOqWpq!!tx,9maI0a&J]'.Ms6).qh6$*88~Y* 8D}=Nd 1M0RW/iU_䖫imirwr7BћeD{?gY\]= ;Dʺ+JA=Tg b=lAF6b>RݳIHIrH-&x)FDD, r!V6mb 13d)ޗGtA**N.>X=_v1aNU(HqL+FVE&9\kVrs^dmY%pbThAߤF`vvW_2W8~֑mW_Jʼno o& ].WM6ݠԩ"ڕX? jf$Zyx̐$|iifQRĎU@@ݛhNG+O׻7iOr]w,bԁح- 4Nl!KTtG=[νEMa嚰5# Y2`<`Brp}z-#FS! *Z(6O\CJWiRs੨0w`G5ﻞ+B{>Ю網zIഀ#m3j |l i,;ۑi0Wpә',cBVy93+|J\2 sh7Ňؒ2daT3EƳjG_2W3F@^ހƢكb[R>vnRj*8yIUDa7qghؔ]&IkL02Y6 &Ҧ){@:‰K0T"U^cQɖ,'uA$$wko5,mUKmHN_@Mɬ4޲̽@8QdT>uZ̞B*@5=#펷j}qMeɰ8|KJ~2\׎O ¸o?/XON WKk833OvxQey}z6n@zp'6(Z%(G<{qIu]?ar~A`;'OE>ÃנnFXq wW.Ie!%`0M?S5Z1ަ\o^Ϭ{է%LB[ LKWSG0p{9(&hS߾mݕ4c3ab2'Sf\elǪ!E׊]Tn]E3;3bu=;7PDTVGEu.6W?JT}un㵩⯘̼GmگFrd?ikܜT˷`Rhz,wa/ /a򙜑s`jͣQ5U{S3(S8C's>U<Z3mY-lO< ʵYjDŸm -R]P[LLK%z5\^+. -ﺡU$v="NZ/\EG[Y7!IdW<"]y<:U8N!M~ (rDdܰ xaqM-.Q@QιAνJBbP}cRFF(h#㋚=m2r=qסZpށ&FJ3[s&(Ĉ[7D fWop'=pG9m5f']rZBbj&N_38Q>I}1-jX@>GV.C87ԡDZSdRX߼se{LWf'(؝2뢸T]ӽKF.WR"Luw0-O;Ia MÓMq'!WCTҀ q/v{:g9GC"db X,σS%TC;c$L=<Q[Ćm!i"ـ6aHLRG<2ZjOU6 O&x͐1zpA_ ]_Pnj'GTa]\X-\|Z}Z%_(0աi}e{]0jy^=;tX .1ɓNZ}S4%`/ $(MOY?RiJXQ8A[ 4Q uy jKÜb Dn ݲQP4"L{:K%ئ{GzI$ T=)$X(r$ňȹ\ 2-,MN8cرp)RQƋ'XI0u) 46L}`, |W@W"fiZe?QmӀN&C0!^ %fJMkmr{N &VEؤB}=%k#RUfCRVXR&f8J0LD\OAX Mg3-r>%V -"^{dR"A;;US^Vee/aȸӄ4*8Df"6agSY,\]õjžy[A_֞;𶫻\?[Em ɤy}t@k#C7(*+IHlR[C+ݾ pQpqҰAۘ^czHt9͊ %IM1TLK;އDmAHWzfE8vl^hMy4{purI7T`#ոc#'iL@LS7h$(fJM+u!Yal\h:Z줆/wi&߿C(Qmzƿ+c,A+L5:~Xb՞y;z'bXkEQRr}fP;$Fosں9!d6 a !FUrp?, rDiiv!xF>a[p(K?+fb*.]DUJQt WD?VNV0Ⱥ5۟(3h1i >Q׻ūo5xq+&$wsrG;iYAŅU/:u-{b ټrIseU$t%N3Ii}۽?PI)JXt-Vh q񿶄2VlăONV2'y7+ѰH49lӸ4nӍ KَQtn{ߧy,F­uŲP(ra¥j`DAr-1ApzG6~#<Oh$3@S ߝGW*>&$H_|]E+4x*_{rPƪէsq8y\( { q[gM3UjVK[s˹gI܍+`9g.<)^pH͔">oQUX6W,~r} %2 ->]jڕܻs;sDܽUZci!;B>2 t.Q/I V{5 GFʦY.4Q}_ +n"GttySsvYt=),^O =Ө7=P`Vӓ鴢bᏎヤ.ab EK[r*. ˣ}5)ARFZv|!M-RjQ;G!ʠ A2}dxI[;Jb 2tV q?rvr ہ)jA`'sCs9ħCRg(Ӽ7R@/Il:Hp\:03Kbm~:fas*Utu*_[&ݽ>j'8kBQ lCKZѠ_C!Aִ}yo:>*+-BFI(^B#Flb S ئJh*C{KV(\~\mZPa$ddCzsc}AҶl4IMwT|u58@$vvE:ĐqIT̯Y?Smzuu-OOjӰl ։57Xk] *nĺ}wlru]q뎃uP{DH3X0ÐDw yƣ9I"S7>kP4f:$tigde@Abn$ ZƒM6H E q ~KZlix eo9Dx{κ=ե޽*Î4@(9̟fo{6ZpBdFܢiD&5 #Ǟ^s|mn =񼭩Y׆6Xd(%pP*tjAz#ˀvn.N>(UAju~szaTet[APi^4#~"_& KU10+X& HCvnHe~;eXeG| 2G\!X5nSmV3^fKN^d6pMYLM+2D?7J[UTilJr[xkH r?/:U BήP[xVϗ||eyLГD 1V0!qU^H=sifEOqioyegD *j\؀unZ;%xB-w%/˵N \UW?‰*b ȲV3v 6|14e#/TJ"<]3-с7S57X2J-l~C5Jͨ^(8׫ N+e3Ө&jVbAD8g&N+4 "ŔǕ35 w`A|!1N`Xw}$aċ"Ig{[g܋pBtQCDeP- FFaT=ZG ݑhc}6[8<+[~?F-ٍC. L"g۟El@Xe^yvx}sp̬M|xM2LZoLM~GLi]f-+c;cfS2o'W{odo3v!)~/lB Ii@m=gɑ",6jX+~bD}3];/x@yna{oV~)߻*HlRLXoM?A!uJCyώǟ,.X]I* L4N}jo.g,緘-Y6 xAg8)a)xEHjTMdFΖ6LFfagBTߓوT%vO& `9~hB+Ph}g9ߵh^u*EZ!8-;> >JXz>:cТ $:=U4@:z^?A6|=)g LF}.'zO"bh nɄt7bd"A/qǑ*|>)L+\ңg*)j0ngӐn178O\6#%D/ @Ę6ZpDR:HlYg[XKޙıHmPFe]Cp Wv-9vm.T &ilAi/{3kWޙ(!QT6V''Mq}Gk-V"jV!@GHM7!x:?47晃BݖI] l}`w.9rjߢ6YϨel3!ߙUPG OőSu Qt|K\"y1RP>H;_58H=$ iȇЭB,x>ž$u%ALMn B]]3UW~Ȱn}br*~y%H| ' ͂eF ۵(1-V٦nVKdi,!~ Q3ED@-k~j?sUCpa / roO\ cK %*a.F[yQK1S!SsfշFJYdL-xj#6~fHe@ tCOp)xhj<ʌf6}dy. 3m6a\nyt)*P=8u %* :nϗ?aR>f^qٻ%Qu[F\cЇnyJ) $9XA\g B+ӂ̳Isq"~S1ͅ9q}- CKb5+0rSvKHTRp;`"Թ`}}|XWw2c>~su&}p <)ñr=P.ЙL"Gb 2=9KM;Bwu):p`.K4X`³HVYybMm&=G6qgUY.X?I^8yЙ/C= k_Wu-ly>A D[u۞!fܵ/"'.zmepm@v<ϒ7 LW UYWBD5IhM/4lJ^4*)~dф#S0ZeEhŭI~ EiV(_>Kҙ%!{ųߧd)OW8N= i.]bV˩R\ 4A#e33ۀV7gXa⇶X@(b| H7DУ^ ʯ,݄NxooW\T:2{Uq=a97 In y;D:~v蜴]5:MنaKiH+7 ŇeI:;Gz?wQd%Lo*0V#-g.8iST`ʰ/Jbcy3kzmIȚ}N?$*:߅W{AzrreJFRd[(ޙ!@hhƏqsCnMDH3oq[v0{YQ =YgVDrƾM:( 4o(/HI,H=@U jۭ"^׉nFXF\]9zތ].Ftz*bo[RLr.{G=eNlξމ,qH4Y.|P~Es߲c/wLH_eN{ D#KOsuR,'TDaDh0B@; Z]Fb)_OQ +ݍ6^Q/F *#SVԪӅI|\.V.W Rd5D!h5& 䌝Tkf.kgS 1:#*7jfE?Z4#at̓|hLږXtۜD#,Ϧ~Mh$;2Wv]XҺmZٲ/ 4ʠ,LWۺΦ:ʓrʫ&g]r?=ES%,lUt@4|4!e(W-6voD|Ȋ0 S+? ĥ.A4?yr섲ѣ-Qč]vc=+x4j~満ݏQ B ^W`Lfۥ$'OYwZl=4wƩ3OT~@hOŤ z\^v"; Bgxuڕ$fh!|=@0HP!^~IRd.Jcw66#(3qi cRwJ>^cpjh9;qVv_I #%r`@##2!`&[(碩{a1L^?4l?cwSvbrb#,};2.F 7.=s<ܨ1aPl!kvp b6~E`bօݏ`ilVJŸ"ICi }XQF S1ƞ?st90T@]Ӳ0"J]$a[MJbylG(G/zzJtvWJDUj}H;rpt/vF !:JmN5ٳȀ#be!4ֺ"3XuN o і0L:Q-y%Rx3 ?ʁ~<ħGS,L'7)2F!1}. a(_}n ,؞4w͔o^3 fHRS>prYD]I93" n%B Iu!zWM'7 s ;&cBw}"p+uoOd`ȷW̽9ˈPݺJ":hQA .P{!,Q]ڃl*9Bo_+zUCVle ZU]7B9o~IHц|7>yA qӐb0]"MMěb 낍Y"x1><,Y~VtgC`7#!)jM={S%Rq7eE8{Ri{ `ߦ#P5)W43!}OA>EFLVd⽃5ؑU۩MC@K/JeֈLG{p%A#yŒ NwxOlR(<9;zk?La\+%&CgPvA͖=Q#za n) '3>uL$J${%gZ !XØ!ju;~t~Wݢa4O1Եjwhp_# ,%&efٰ!t;QAuec.(oqCN0)X[㳂z9mVPt; Uj>hru;FiD zT^ޖ=Fp2ZA@_HOKn!=I)`AlT*uX!Eax/(օ+W2ZEtʯeա}34Vڿʢ=vru6TҊǘ(jf.S0ƕ3@ yA9֏(qJeThQ$c|O A}/\/q9]sT,({]ِf//tTwk<&I J'V-i,ԙ%7JS8DA)ӀwQCC]n:Z=PnH)n Dz7|)}YKf@m,RF*C~`&RulsLu}VISdMSGGd4ʡJKP@UBS oטgyz3lzRm2'It4!T)lA۫Hq.'\hP杛NˮXނtu0?D%ڵGLԟ:5:sO.#FɯC4Hǘ҆b E9D#c`LKOCFΊ%1PM9y81 0憂 P7Xf K6PIBAN™B@.W4BuTuvrLˤjD$ʌ.mOqp\X:T6arӾA!S+VT$zI8*-rEzpv Fpvntfome$nD(mr}`}MdS|+(>M-'XY7ÉWk-;$JG$*JI$k k4kRLc}AI ҐL}-r=5zyr\,2HU}<"*:|wUaͺϠY NhꑜZ[6<'t?+yAAT/Ÿ5~dJ u&{(.Ѡd_sh݅_i}N2v6C]]x.`|% A7f"4wܙE ź~.C)fF9kpcڝIr(shʌ\涯ltE(VEf8ʜ` ҧ'MVlubd`.eԏm+{t}^ ;ѵ!![u=+XA,1̰(L';wtC©$"D]m$2NߕT%WEI5 liИ7Qf2D!FtN39:%#H } ms6:R(w O\Q^=?>NW*,<bF&I\p=eit=\l;RG@7rBZbsl"-V>N5a2;cRU{_ƹDj\P(D-Td9.2XėBabW6fNj rɀg0]q냢9u0cC eKޠy:}4>,(:fH S:t'*@j\A^^g\Q:<mW*M{Q [./+Bq7^G+PKWb5EC$k)4 B7 @"FVe4̈́dJH#"zk- E.DB7#GJX(؛I:,؆l]B,ix6೫=b%׈ih%֫pDK260}B$j,"%ux 5YVK8Km Mȥ:9\5} ފz*4|'ЧѲ2M(Z~ c 5+pl D3 nXˏivF HˆͷbBx.̦_LjjQʤv{ 4;H.ĺnj *ԙp8klyn܄!1\9i5}X8m!q g=8Bk~XNm(m%⥱> 3WקbګYĜOl^;ԄbC5:&j Ɓۼo(%+>wCqՎ0WO:-1gDM@_!G[Z6u9lH%E}鞆,*^gL}/ $MCM®\N~h> e1כBUG8kgڇ|~VBN>Z&˾lfwc !9Z5'*}BQ!|0[}TחIy )Hˣn5?&d~ G`Dbl u_iqoJ6$ek^!D+9 ']\![4]4 __Wf9Q 48@s*ʠAi82\?ʳ:M܁*p"Uruپ,H2N c8I)L1*ZU=8فwrr 0ȳd[]\ 1-FSͯy .J+_<,߂E~n *gu3Bjdו˦'h̷LQdӿE@g+}L~3姰|LtjlP!8Ni ]4Hi93IlR;k_m#m<FhM5Z{+ȶw羮֮G1ahPP0QY Ĭ6TǖK{[ >iO"omP 3cKÞ8 *,ZgHCMȊ4XDGL0S$no,Qp`$xj!8{HKyVjvp^>(hV*h yz"xP ?畳MB?h@N\_r Uw=.놻I߆6S B/_P˷*-6AQRY8q0$(R`eͿʠ[YXL#-=>\{ ~+׮$N; [K(fphs#Ľr))Kl]NV.ױf)W^!Wo=Kyd <ځ ò Xn\HQ.'@ :Ҳd;`̂W%&tt'tBKpjn Hz)=G -:86 ϪaKz*(Hƃ62OQj y}aZ~yV?ϊۆay쁳%tt&aV$GBU!Te[$-"=9yf0օWDMAW`>b?O-AZ=Ȝ3K#HڭHhOǶR&yQgX.j >/Xy/h?~֛7^H8}`ynO+!J6ї-4~<ȁb Cdo?HJjC5]hj>&%X)sdqoBZmث]QAy 1916֎Y M`U쮂&=2=jsmy'9 HrǙ!]^RΏ܊.CN'\ DXȔkޭ^ Lng]$#:wL̰m:hblۗyJrT\⭕\#T.fp"OE24rr ~0 V[<8\Vm& f;'?WyPxp15E`Z(onw%*=LMCZi'z%`<7MDícZ({x v!`+[TeuhX*TqPl-ЉcpvTzGjOuv{?'gpH0pnr/!Ȣps$+,ڠQ۾ Hl5+f]q'_ Мb]d74wMs5xЈ &( omF{O2C?&xl}1tJ9P.P⬓eGꝡ~aWLq{֢ثt,1F'&'p6yC&al臞6sZRh۵ըz?3)O5rbfu?l [>[3N)k'a|mBٿ^ۅ5qRPNQlX~S/@HeIuoy(I't{A9@ qHo~ 7Oj3%nD67?*#MKRj[eEbkO6̋:> e7N6Ǧev :<@&Hdr,(YΞEx/[ӎg+ȸ+&ԩ12؃ӹ(T.CVӃrF04֬ ïc)ʧ 7b{]A@s3cг\?r^FRT ZgЌ,Wpx:B7,2mԣwF72qa0mq3f|j4>⁎H/!sgoQٌ݀>fibiKu s^7/+} Ti2ZXNC&%wG Y4(^h?=DrkxA;RZ>>!34"f>|R[{pLtEB<A7oźո,Zuda X()37JMh&ih">IMgL@^5Y!a#TYGlfUq nK'nY`{@c"y=11Bϑ"% gmgN4d7ΛԊSWڧ'V>hӹr[J {M`5-bD? ft0=!(QHF燆y8g7xhLjJV*8~Y:DMn(+:_P DN@- el ̥ "9Q`V;Hԕ'+O^e&~pOF8K a\`61^F0'WʈSQƋǔPU6_%a&T+Mͬ,:@Aacc2"V.+"$D8!<" YZ