openCryptoki-64bit-3.23.0-150600.3.14.1 < > , i{q[p9|R6R] oT<6,~9=#<[R0;=nMMG_ܕ9PJ в
q=h=XW
^hU
ʞq=w
`1v' ;pY]&ׅc0`pV0V e( H:j> :
_w,@uGX =u3[خ0:/aW_$Vr꧰'.l-+ 8'u /\
e` > @ p ? ` d * w ! B J ` v 0
`
d h
(
{ (
8
= 9 = : = > F G H I X
Y
\ ] T ^ b J c d z e f l u v w D x y ? z \ C openCryptoki-64bit 3.23.0 150600.3.14.1 An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware This is a re-packaged binary rpm. For the package source, please look
for the source of the package without the "64bit" ending
The PKCS#11 version 2.11 API implemented for the IBM cryptographic
cards. This package includes support for the IBM 4758 cryptographic
coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries). i{q[h01-ch4c &a~SUSE Linux Enterprise 15 SUSE LLC CPL-1.0 https://www.suse.com/ Productivity/Security https://github.com/opencryptoki/opencryptoki linux x86_64 # Old library name for 64bit libs were under /usr/lib/pkcs11. For migration purposes only.
test -d /usr/lib/pkcs11 || mkdir -p /usr/lib/pkcs11
ln -sf /usr/lib64/opencryptoki/libopencryptoki.so /usr/lib/pkcs11/PKCS11_API.so64
/sbin/ldconfig 6 ~p
ۘ [ " "
AAA i{qYi{qYi{qYi{qYi{qYi{qZi{qYi{qYi{qYi{qYi{qYi{qYi{qZi{qYi{qYi{qZi{qYi{qYi{qZi{qZi{qYi{qYi{qZi{qZ3406315d5c95bac0fa2fd5322d1bcc9ea0aff9091d94792ff97e86c4294accb0 63eecd23d50644f1e30b1dd6a81fbb15f9827eec2cb20aa5048a7b97351baac2 148b7abde2c0ddf26d5cbef3003d4251ea1970ebbe63046753fe4711445ebc08 3bf09c3b28649cd17fede50078cd8ebd20900e040a8d1fb5692f913d4b278b4a 345614a549d02926858d4a8220fc4805bfae610f5fb0f66d56215706059099e5 libopencryptoki.so libopencryptoki.so.0.0.0 libopencryptoki.so.0.0.0 libpkcs11_icsf.so libpkcs11_sw.so libpkcs11_tpm.so libpkcs11_icsf.so.0.0.0 libpkcs11_icsf.so.0.0.0 libpkcs11_sw.so.0.0.0 libpkcs11_sw.so.0.0.0 libpkcs11_tpm.so.0.0.0 libpkcs11_tpm.so.0.0.0 ../opencryptoki/libopencryptoki.so ../opencryptoki/libopencryptoki.so ../../sbin ../opencryptoki/stdll root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openCryptoki-3.23.0-150600.3.14.1.src.rpm libopencryptoki.so.0()(64bit) libopencryptoki.so.0(OPENCRYPTOKI_3.10)(64bit) libpkcs11_icsf.so.0()(64bit) libpkcs11_icsf.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_sw.so.0()(64bit) libpkcs11_sw.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) libpkcs11_tpm.so.0()(64bit) libpkcs11_tpm.so.0(OPENCRYPTOKI_TOK_3.10)(64bit) openCryptoki-64bit openCryptoki-64bit(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libtspi.so.1()(64bit) openCryptoki rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 i{Khg+Z@ff@epeem@e 0@dp@cc=@ccc6@bb@b; aqV@a ``Ȗ@`+`` l_"^!@]]ʞ] @]nU\f\&@[[@[_ZZw@Z Y.@YX@X@X@X~@X2@W@WE@W@WW^@WEW@V<@VqU@U @U#U#U#Tp@nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com tabraham@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com meissner@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com kukuk@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jengelh@inai.de mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jjolly@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com crrodriguez@opensuse.org crrodriguez@opensuse.org crrodriguez@opensuse.org p.drouand@gmail.com - Applied a patch (bsc#1257116, CVE-2026-23893)
* openCryptoki-SLE15-SP6-CVE-2026-23893.patch - Applied a patch (bsc#1248002)
* ocki-3.23-PKCSSLOTD-Remove-the-use-of-MD5.patch
- Added riscv64 to openCryptoki_64bit_arch
- Updated the patch
* ocki-3.23-remove-make-install-chgrp.patch - improve handling of user/group. use existing user/group if they
exist. create user/group if not (bsc#1225876) - Amended the .spec file accorinding to the recommendation in (bsc#1225876) - Updated the .spec file (bsc#1225876, bsc#1227280)
* Amended for group %{pkcs_group} and user pkcsslotd
* Copying example script files from /usr/share/doc/opencryptoki to
/usr/share/opencryptoki (policy-example.conf and strength-example.conf)
in case that there is 'rpm.install.excludedocs=yes' set in the
zypper.conf(zypp.conf) - Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361)
* EP11: Add support for FIPS-session mode
* Updates to harden against RSA timing attacks (bsc#1219217,CVE-2024-0914)
* Bug fixes
- Renamed ocki-3.22-remove-make-install-chgrp.patch to
ocki-3.23-remove-make-install-chgrp.patch - provide user(pkcs11) and group(pkcs11) - Amended the .spec file for pkcsslotd (jsc#1217703)
* Renamed the patch ocki-3.21-remove-make-install-chgrp.patch to
ocki-3.22-remove-make-install-chgrp.patch - Upgrade to version 3.22 (jsc#PED-3361)
* openCryptoki 3.22
- CCA: Add support for the AES-XTS key type using CPACF protected keys
- p11sak: Add support for managing certificate objects
- p11sak: Add support for public sessions (no-login option)
- p11sak: Add support for logging in as SO (security Officer)
- p11sak: Add support for importing/exporting Edwards and Montgomery keys
- p11sak: Add support for importing of RSA-PSS keys and certificates
- CCA/EP11/Soft/ICA: Ensure that the 2 key parts of an AES-XTS key are different
* Bug fixes - Update to version 3.21 (jsc#PED-3360, jsc#PED-3361)
* openCryptoki 3.21
- EP11 and CCA: Support concurrent HSM master key changes
- CCA: protected-key option
- pkcsslotd: no longer run as root user and further hardening
- p11sak: Add support for additional key types (DH, DSA, generic secret)
- p11sak: Allow wildcards in label filter
- p11sak: Allow to specify hex value for CKA_ID attribute
- p11sak: Support sorting when listing keys
- p11sak: New commands: set-key-attr, copy-key to modify and copy keys
- p11sak: New commands: import-key, export-key to import and export keys
- Remove support for --disable-locks (transactional memory)
- Updates to harden against RSA timing attacks
- Bug fixes
- Amended a new patch to fit the version 3.21
* ocki-3.21-remove-make-install-chgrp.patch
- Removed the old patch for the version 3.20
* ocki-3.20-remove-make-install-chgrp.patch - Updated package to openCryptoki 3.20 (bsc#1207760,
jsc#PED-3376, jsc#PED-2870, jsc#PED-2869 )
- Removed the following obsolite patches:
* ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
* ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
* ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
* ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
* ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
* ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
* ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
* ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
* ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
* ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
* ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
* ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
* ocki-3.19.0-0014-EP11-Add-new-control-points.patch
* ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
* ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
* ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
* ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
* ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
* ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
* ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
* ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
* ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
* ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
* ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
* ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
* ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
* ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
* ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
* ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
* ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
* ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
* ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch
* ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
- Reworked ocki-3.19-remove-make-install-chgrp.patch to fit the current version of
the package and renamed it to ocki-3.20-remove-make-install-chgrp.patch. - Added patch for compile errors
* ocki-3.19.0-0035-Fix-compile-error-error-initializer-element-is-not-c.patch
-- Changed spec file to use %autosetup instead of %setup. - Updated the package openCryptoki 3.19.0 (jsc#PED-616, bsc#1207760), added the
following patches:
* ocki-3.19.0-0001-EP11-Unify-key-pair-generation-functions.patch
* ocki-3.19.0-0002-EP11-Do-not-report-DSA-DH-parameter-generation-as-be.patch
* ocki-3.19.0-0003-EP11-Do-not-pass-empty-CKA_PUBLIC_KEY_INFO-to-EP11-h.patch
* ocki-3.19.0-0004-Mechtable-CKM_IBM_DILITHIUM-can-also-be-used-for-key.patch
* ocki-3.19.0-0005-EP11-Remove-DSA-DH-parameter-generation-mechanisms-f.patch
* ocki-3.19.0-0006-EP11-Pass-back-chain-code-for-CKM_IBM_BTC_DERIVE.patch
* ocki-3.19.0-0007-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0008-EP11-Supply-CKA_PUBLIC_KEY_INFO-when-importing-priva.patch
* ocki-3.19.0-0009-EP11-Fix-memory-leak-introduced-with-recent-commit.patch
* ocki-3.19.0-0010-p11sak-Fix-segfault-when-dilithium-version-is-not-sp.patch
* ocki-3.19.0-0011-EP11-remove-dead-code-and-unused-variables.patch
* ocki-3.19.0-0012-EP11-Update-EP11-host-library-header-files.patch
* ocki-3.19.0-0013-EP11-Support-EP11-host-library-version-4.patch
* ocki-3.19.0-0014-EP11-Add-new-control-points.patch
* ocki-3.19.0-0015-EP11-Default-unknown-CPs-to-ON.patch
* ocki-3.19.0-0016-COMMON-Add-defines-for-Dilithium-round-2-and-3-varia.patch
* ocki-3.19.0-0017-COMMON-Add-defines-for-Kyber.patch
* ocki-3.19.0-0018-COMMON-Add-post-quantum-algorithm-OIDs.patch
* ocki-3.19.0-0019-COMMON-Dilithium-key-BER-encoding-decoding-allow-dif.patch
* ocki-3.19.0-0020-COMMON-EP11-Add-CKA_VALUE-holding-SPKI-PKCS-8-of-key.patch
* ocki-3.19.0-0021-COMMON-EP11-Allow-to-select-Dilithium-variant-via-mo.patch
* ocki-3.19.0-0022-EP11-Query-supported-PQC-variants-and-restrict-usage.patch
* ocki-3.19.0-0023-POLICY-Dilithium-strength-and-signature-size-depends.patch
* ocki-3.19.0-0024-TESTCASES-Test-Dilithium-variants.patch
* ocki-3.19.0-0025-COMMON-EP11-Add-Kyber-key-type-and-mechanism.patch
* ocki-3.19.0-0026-EP11-Add-support-for-generating-and-importing-Kyber-.patch
* ocki-3.19.0-0027-EP11-Add-support-for-encrypt-decrypt-and-KEM-operati.patch
* ocki-3.19.0-0028-POLICY-STATISTICS-Check-for-Kyber-KEM-KDFs-and-count.patch
* ocki-3.19.0-0029-TESTCASES-Add-tests-for-CKM_IBM_KYBER.patch
* ocki-3.19.0-0030-p11sak-Support-additional-Dilithium-variants.patch
* ocki-3.19.0-0031-p11sak-Add-support-for-IBM-Kyber-key-type.patch
* ocki-3.19.0-0032-testcase-Enhance-p11sak-testcase-to-generate-IBM-Kyb.patch
* ocki-3.19.0-0033-EP11-Supply-CKA_PUBLIC_KEY_INFO-with-CKM_IBM_BTC_DER.patch
* ocki-3.19.0-0034-EP11-Fix-setting-unknown-CPs-to-ON.patch - Updated spec file to set permissions on /etc/opencryptoki/strength.conf
to be owned by root:pkcs11 with permissions of 640. (bsc#1205566) - Upgrade to version 3.19.0 (jsc#PED-616)
+ openCryptoki 3.19
- CCA: check for expected master key verification patterns at token init
- CCA: check master key verification pattern of created keys to be as expected
- EP11: check for expected wrapping key verification pattern at token init
- EP11: check wrapping key verification pattern of created keys to be as expected
- p11sak/pkcsconf: display PKCS#11 URIs
- p11sak: add support for IBM specific Dilithium keys
- p11sak: allow to list keys filtered by label
- common: add support for dual-function cryptographic functions
- Add support for C_SessionCancel function (PKCS#11 v3.0)
- EP11: add support for schnorr signatures (mechanism CKM_IBM_ECDSA_OTHER)
- EP11: add support for Bitcoin key derivation (mechanism CKM_IBM_BTC_DERIVE)
- Bug fixes
+ openCryptoki 3.18
- Default to FIPS compliant token data format (tokversion = 3.12)
- Add support for restricting usage of mechanisms and keys via a global policy
- Add support for statistics counting of mechanism usage
- ICA/EP11: Support libica version 4
- p11sak tool: Allow to set different attributes for public and private keys
- Replaced ocki-3.17-remove-make-install-chgrp.patch with an updated
version named ocki-3.19-remove-make-install-chgrp.patch to fit
the current state of the source.
- Removed the following obsolete patches:
openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch
ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch - Added ocki-3.17-EP11-Fix-C_GetMechanismList-returning-CKR_BUFFER_TOO.patch
for bsc#1202106. One test of the gen_purpose test cases fails with
C_GetMechanismList #2 rc=CKR_BUFFER_TOO_SMALL" error on the EP11 Token. - Made the following changes for bsc#1199862 "Please install
p11sak_defined_attrs.conf."
* Replaced ocki-3.11-remove-make-install-chgrp.patch with
ocki-3.17-remove-make-install-chgrp.patch to remove the
"-g pkcs11" parameter from the install command in the Makefile
* Updated the spec file to include
/etc/opencryptoki/p11sak_defined_attrs.conf as a %config file
with the necessary permissions and group ownership. - Added the following two patches for bac#1197395. The CKM_IBM_DILITHIUM
mechanism does not show up as supported by the EP11 token when an
upgraded EP11 host library is used.
* openCryptoki-sles15-sp4-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
* openCryptoki-sles15-sp4-EP11-Fix-host-library-version-query.patch - Upgraded to version 3.17.0 (jsc#SLE-18326)
+ openCryptoki 3.17
- tools: added function to list keys to p11sak
- common: added support for OpenSSL 3.0
- common: added support for event notifications
- ICA: added SW fallbacks
* openCryptoki 3.16
- EP11: protected-key option
- EP11: support attribute-bound keys
- CCA: import and export of secure key objects
- Bug fixes
- Removed the following obsolete patches:
ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch
ocki-3.15.1-Fix-compiling-with-c.patch
ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch
ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch - Added the following patches for bsc#1188879:
* ocki-3.15.1-pkcstok_migrate-Quote-strings-with-spaces-in-opencry.patch
When modifying opencryptoki.conf during token migration, put quotes
around strings that contain spaces, e.g. for the slot description and
manufacturer.
* ocki-3.15.1-pkcstok_migrate-Don-t-remove-tokversion-x.y-during-m.patch
When migrating a slot the opencryptoki.conf file is modified. If it
contains slots that already contain the 'tokversion = x.y' keyword,
this is accidentally removed when migrating another slot.
* ocki-3.15.1-pkcstok_migrate-Fix-detection-if-pkcsslotd-is-still-.patch
Change the code to use the pid file that pkcsslotd creates, and check
if the process with the pid contained in the pid file still exists and
runs pkcsslotd.
* ocki-3.15.1-pkcstok_migrate-Rework-string-quoting-for-opencrypto.patch
Always quote the value of 'description' and 'manufacturer'. Quote the
value of 'stdll', 'confname', and 'tokname' if it contains spaces, and
never quote the value of 'hwversion', 'firmwareversion', and 'tokversion'. - Added the following patches for bsc#1182726 " p11sak list-key segfault"
* ocki-3.15.1-Added-NULL-pointer-to-avoid-double-free-for-the-list.patch
Added NULL pointer to avoid double free() for the list-key and
remove-key commands.
* ocki-3.15.1-Fixed-p11sak-and-corresponding-test-case.patch
Note that two hunks that were unrelated to fixing the running
code were removed from this patch.
* ocki-3.15.1-p11sak-Fix-CKA_LABEL-handling.patch - Added ocki-3.15.1-SOFT-Check-the-EC-Key-on-C_CreateObject-and-C_Derive.patch
When constructing an OpenSSL EC public or private key from PKCS#11
attributes or ECDH public data, check that the key is valid, i.e. that
the point is on the curve.
(bsc#1185976) - Added ocki-3.15.1-A-slot-ID-has-nothing-to-do-with-the-number-of-slots.patch
(bsc#1182120)
Fix pkcscca migration fails with usr/sb2 is not a valid slot ID
- Added ocki-3.15.1-SOFT-Fix-problem-with-C_Get-SetOperationState-and-di.patch
(bsc#1182190)
Fix a segmentation fault of the sess_opstate test on the Soft Token - Added the following patches for bsc#1179319
* Fix compiling with C++:
ocki-3.15.1-Fix-compiling-with-c.patch
* Added error message handling for p11sak remove-key command.
ocki-3.15.1-Added-error-message-handling-for-p11sak-remove-key-c.patch - Don't require pwdutils for build, dropped long ago and not needed - Upgraded to version 3.15.1 (jsc#SLE-13749, jsc#SLE-13666,
jsc#SLE-13813, jsc#SLE-13812, jsc#SLE-13723, jsc#SLE-13714,
jsc#SLE-13715, jsc#SLE-13710, jsc#SLE-13774, jsc#SLE-13786)
* openCryptoki 3.15.1
- Bug fixes
* openCryptoki 3.15.0
- common: conform to PKCS 11 3.0 Baseline Provider profile
- Introduce new vendor defined interface named "Vendor IBM"
- Support C_IBM_ReencryptSingle via "Vendor IBM" interface
- CCA: support key wrapping
- SOFT: support ECC
- p11sak tool: add remove-key command
- Bug fixes
* openCryptoki 3.14.0
- EP11: Dilitium support stage 2
- Common: Rework on process and thread locking
- Common: Rework on btree and object locking
- ICSF: minor fixes
- TPM, ICA, ICSF: support multiple token instances
- new tool p11sak
* openCryptoki 3.13.0
- EP11: Dilithium support
- EP11: EdDSA support
- EP11: support RSA-OAEP with non-SHA1 hash and MGF
- Removed obsolete oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch - Added oki-3.12-EP11-Fix-EC-uncompress-buffer-length.patch (bsc#1159114)
The EP11 token may fail to import an ECC public key. Function
C_CreateObject returns CKR_BUFFER_TOO_SMALL in this case. - Upgraded to version 3.12.1 (bsc#1157863)
* Fix pkcsep11_migrate tool - Upgraded to version 3.12.0 (jsc#SLE-7647, jsc#SLE-7915, jsc#SLE-7918)
* Update token pin and data store encryption for soft,ica,cca and ep11
* EP11: Allow importing of compressed EC public keys
* EP11: Add support for the CMAC mechanisms
* EP11: Add support for the IBM-SHA3 mechanisms
* SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token
* ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token
* EP11: Add config option USE_PRANDOM
* CCA: Use Random Number Generate Long for token_specific_rng()
* Common rng function: Prefer /dev/prandom over /dev/urandom
* ICA: add SHA*_RSA_PKCS_PSS mechanisms
* Bug fixes
- Removed obsolete ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch - Added ocki-3.11.1-EP11-Support-tolerated-new-crypto-cards.patch
(bsc#1152015)
Add support for new IBM crypto card. - Upgraded to version 3.11.1 (Fate#327837)
Bug fixes.
- Dropped obsolete ocki-3.11-Fix-target_list-passing-for-EP11-session.patch - Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch
(bsc#1123988) - Do not ignore errors from groupadd. If groupadd fails,
installation ought not to proceed because files would have the
wrong ownership. - Don't hide error messages from the groupadd command. To eliminate
a potentially common one, check to see if the pkcs11 group is
already defined before trying to add it.
- Update the summary for the -devel package.
- Changed several PreReq entries to Requires(pre) as a result of
the output from spec-cleaner. Removed a couple of obsolete lines.
- Removed obsolete check for whether systemd is in use or not. - Upgraded to version 3.11.0 (Fate#325685)
* opencryptoki 3.11.0
EP11 enhancements
A lot of bug fixes
- Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply
properly to 3.11, and renamed it to
ocki-3.11-remove-make-install-chgrp.patch
- Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch - Upgraded to version 3.10.0 (Fate#325685)
* opencryptoki 3.10.0
Add support to ECC on ICA token and to common code.
Add SHA224 support to SOFT token.
Improve pkcsslotd logging.
Fix sha512_hmac_sign and rsa_x509_verify for ICA token.
Fix tracing of session id.
Fix and improve testcases.
Fix spec file permission for log directory.
Fix build warnings.
* opencryptoki 3.9.0
Fix token reinitialization
Fix conditional man pages
EP11 enhancements
EP11 EC Key import
Increase RSA max key length
Fix broken links on documentation
Define CK_FALSE and CK_TRUE macros
Improve build flags
- Dropped obsolete patch ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
- Made multiple changes to the spec file based on spec-cleaner output.
- Added an rpmlintrc file to squelch warnings about adding ghost
entries for files under /var/lock/opencryptoki/ - Added ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
(bsc#1086678) - Re-enabled ARM architectures now that gcc6 is in SLE15. (bsc#1084617) - Upgraded to version 3.8.2 (fate#323295, bsc#1066412)
* v3.8.2
Update man pages.
Improve ock_tests for parallel execution.
Fix FindObjectsInit for hidden HW-feature.
Fix to allow vendor defined hardware features.
Fix unresolved symbols.
Fix tracing.
Code/project cleanup.
* v3.8.1
Fix TPM data-structure reset function.
Fix error message when dlsym fails.
Update configure.ac
Update travis.
* v3.8.0
Multi token instance feature.
Added possibility to run opencryptoki with transactional memory or locks
(--enable-locks on configure step).
Updated documentation.
Fix segfault on ec_test.
Bunch of small fixes. - Removed ARM architectures from the build list until gcc6 becomes
available for SLES. (bsc#1039510). - Updated to version 3.7.0 (Fate#321451) (bsc#1036640)
- Update example spec file
- Performance improvement. Moving from mutexes to transactional memory.
- Add ECDSA SHA2 support for EP11 and CCA.
- Fix declaration of inline functions.
- Fix wrong testcase and ber en/decoding for integers.
- Check for 'flex' and 'YACC' on configure.
- EP11 config file rework.
- Add enable-debug on travis build.
- Add testcase for C_GetOperationState/C_SetOperationState.
- Upgrade License to CPL-1.0
- Ica token: fix openssh/ibmpkcs11 engine/libica crash.
- Fix segfault and logic in hardware feature test.
- Fix spelling of documentation and manuals.
- Fix the retrieval of p from a generated rsa key.
- Coverity scan fixes - incompatible pointer type and unused variables. - Added libica-tools to the BuildRequires due to repackaging of libica. - Modified the spec file
- Changed libca3-devel BuildRequires to just libica-devel
- Check for systemd in the 32bit postun scriptlet. - Upgraded to version 3.6.2 (fate#321451)
- Support OpenSSL-1.1.
- Add Travis CI support.
- Update autotools scripts and documentation.
- Fix SegFault when a invalid session handle is passed in
SC_EncryptUpdate and SC_DecryptUpdate.
- Updated spec file to use libica3-devel instead of libica2-devel. - Upgraded to version 3.6.1 (fate#321451)
- opencryptoki 3.6.1
- Fix SOFT token implementation of digest functions.
- Replace deprecated OpenSSL interfaces.
- opencryptoki 3.6
- Replace deprecated libica interfaces.
- Performance improvement for ICA.
- Improvement in documentation on system resources.
- Improvement in testcases.
- Added support for rc=8, reasoncode=2028 in icsf token.
- Fix for session handle not set in session issue.
- Multiple fixes for lock and log directories.
- Downgraded a syslog error to warning.
- Multiple fixes based on coverity scan results.
- Added pkcs11 mapping for icsf reason code 72 for return code 8.
- opencryptoki 3.5.1
- Fix Illegal Intruction on pkcscca tool.
- Removed the following obsolete patches:
- ocki-3.5-sanity-checking.patch
- ocki-3.5-icsf-reasoncode72-support.patch
- ocki-3.5-downgrade-syslogerror.patch
- ocki-3.5-icsf-sessionhandle-missing-fix.patch
- ocki-3.5-icsf-reasoncode-2028-added.patch
- ocki-3.5-added-NULLreturn-check.patch
- ocki-3.5-create-missing-tpm-token-lock-directory.patch
- ocki-3.5-fix-pkcscca-calls.patch - Removed reference to pkcs1_startup from pkcsslotd (bsc#1007081) - Added ocki-3.5-fix-pkcscca-calls.patch (bsc#996867). - Added %doc FAQ to the spec file (bsc#991168). - Added ocki-3.5-create-missing-tpm-token-lock-directory.patch
(bsc#989602). - Added the following patches (bsc#986854)
- ocki-3.5-icsf-reasoncode72-support.patch
- ocki-3.5-icsf-coverity-memoryleakfix.patch
- ocki-3.5-downgrade-syslogerror.patch
- ocki-3.5-icsf-sessionhandle-missing-fix.patch
- ocki-3.5-icsf-reasoncode-2028-added.patch
- ocki-3.5-added-NULLreturn-check.patch - Added ocki-3.5-sanity-checking.patch (bsc#983496).
- Added %dir entry for %{_localstatedir}/log/opencryptoki/
(bsc#983990) - Upgraded to openCryptoki 3.5 (bsc#978005).
- Full Coverity scan fixes.
- Fixes for compiler warnings.
- Added support for C_GetObjectSize in icsf token.
- Various bug fixes and memory leak fixes.
- Removed global read permissions from token files
- Added missing PKCS#11v2.2 constants.
- Fix for symbol resolution issue seen in Fedora 22 and 23 for
ep11 and cca tokens.
- Improvements in socket read operation when a token comes up.
- Replaced 32 bit CCA API declarations with latest header from
version 5.0 libsculcca rpm. - Upgraded to openCryptoki v3.4.1 (Fate#319576, 319585, 319592, 319938).
- Changed BuildRequires for libica_2_3_0-devel to libica2-devel.
- Changed BuildRequires for openssl-devel to specify >= 1.0
Contrary to what the README says, version 0.9.7 isn't
sufficient.
- Removed the redundant DESTDIR= parameter from the %make_install
- Removed the following obsolete patches
opencryptoki-run-lock.patch (/var/lock and run/lock are actually the
same place) Also reverted the changed to openCryptoki-tmp.conf to match.
ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
ocki-3.1-fix-implicit-decl.patch
ocki-3.1-fix-init_d-path.patch
ocki-3.1-fix-libica-link.patch
ocki-3.2_01_fix-return-type-error.patch
ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
ocki-3.2_05_icsf_ldap_handles.patch
ocki-3.2_06_icsf_sign_verify.patch
- renamed: ocki-3.1-remove-make-install-chgrp-chmod.patch to
ocki-3.1-remove-make-install-chgrp.patch - Get a new ldap handle for each session opened in the icsf token,
once the user has authenticated. (bsc#953347,LTC#130078)
- ocki-3.2_05_icsf_ldap_handles.patch
- ocki-3.2_06_icsf_sign_verify.patch - Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
- Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
- Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
- Fixed failure to import ECDSA because of lack of attribute (bsc#948114) - Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
- Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162) - Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
- ocki-3.1_01_ep11_makefile.patch
- ocki-3.1_02_ep11_m_init.patch
- ocki-3.1_03_ock_obj_mgr.patch
- ocki-3.1_04_ep11_opaque2blob_error_handl.patch
- ocki-3.1_05_ep11_readme_update.patch
- ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
- ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
- ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
- ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
- ocki-3.1_06_0005-Small-reworks.patch
- ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
- ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
- ocki-3.1_07_0001-Man-page-corrections.patch
- ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
- ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
- ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch - Also create parent directory /run/lock/opencryptoki in
tmpfiles snippet if it does not exists. - spec: do not use -D__USE_BSD, a glibc-internal macro
which no longer has any meaning. - spec: use %{_unitdir} %{_tmpfilesdir)
- spec: call tmpfiles_create macro, if defined in %post
- opencryptoki-run-lock.patch, openCryptoki-tmp.conf: use
/run/lock instead of /var/lock. - Update to version 3.2
+New pkcscca tool. Currently it assists in migrating cca private token
objects from opencryptoki version 2 to the clear key encryption method
used in opencryptoki version 3. Includes a manpage for pkcscca tool.
Changes to README.cca_stdll to assist in using the CCA token and
migrating the private token objects.
+ Support for CKM_RSA_PKCS_OAEP and CKM_RSA_PKCS_PSS algorithms.
+ Various bugfixes.
+ New testcases for various crypto algorithms.
- Only depend on insserv if builded with sysvinit support
- Remove obsolete patches; merged on upstream release
+ ocki-3.1_01_ep11_makefile.patch
+ ocki-3.1_02_ep11_m_init.patch
+ ocki-3.1_03_ock_obj_mgr.patch
+ ocki-3.1_04_ep11_opaque2blob_error_handl.patch
+ ocki-3.1_05_ep11_readme_update.patch
+ ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
+ ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
+ ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
+ ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
+ ocki-3.1_06_0005-Small-reworks.patch
+ ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
+ ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
+ ocki-3.1_07_0001-Man-page-corrections.patch
+ ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
+ ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
+ ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch
+ ocki-3.1_10_0001-ica-sha-update-empty-msg.patch
- Project is now hosted on sourceforge; fix the Url
- Remove cvs related stuff; tarball is produced by upstream
- Use %configure macro instead of manually defined options
- Build with parallel support; use %{?_smp_mflags} macro /bin/sh h01-ch4c 1769697627
3.23.0-150600.3.14.1 3.23.0-150600.3.14.1 opencryptoki-x86_64.conf opencryptoki PKCS11_API.so libopencryptoki.so libopencryptoki.so.0 libopencryptoki.so.0.0.0 stdll PKCS11_ICSF.so PKCS11_SW.so PKCS11_TPM.so libpkcs11_icsf.so libpkcs11_icsf.so.0 libpkcs11_icsf.so.0.0.0 libpkcs11_sw.so libpkcs11_sw.so.0 libpkcs11_sw.so.0.0.0 libpkcs11_tpm.so libpkcs11_tpm.so.0 libpkcs11_tpm.so.0.0.0 pkcs11 PKCS11_API.so libopencryptoki.so methods stdll /etc/ld.so.conf.d/ /usr/lib64/ /usr/lib64/opencryptoki/ /usr/lib64/opencryptoki/stdll/ /usr/lib64/pkcs11/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42499/SUSE_SLE-15-SP6_Update/734b43a78ec51d2cf7ee4aedddb9dbff-openCryptoki.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux ASCII text directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=38b52f10043303221f7d53804c489dbb7b5cd179, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=07bcc70dd2e10cc90df3dbb0a66d9cc6a601e197, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4769cfcbb9397a98b0b430aa2fc8f87eeb65f54c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc11461073fbcee12920350f4a6c6aed1634cbf6, stripped . P P R R R R
R R R R R R R R
P P R R R R
R R R R R R R R
R R R P P R R R R R
R R R R R R R
R P P R R R R R
R R R R R R R
R R R Mߪ!#{: utf-8 fceedb48b232d646dac2eb52aeb85e056316ad1f169e0943e812d8168b293fe1 ? 7zXZ
! t/&] "k%iN,
V!I?8D;iݾ .C)U) 547Xcm"^_/Lr&bYR ias{]*d۲#76Vkcpr-MW%qMBPݔM.q;"uuڂ}'0 T]6fOg{k ɑ d{ >4%r߶)<4j":Ig{@.Ѿ-kD3 iV 'W9&OiV }>o`'g`5(hO /\1ho =g~۰.G'uF V
d>:$^ƒmE{2OTZ jݩv: TQ^_u(TL
x5 RɜjÿGf9I K T hX"CcA ƼhIo57.Crf ?T WꎣFz5v^Q#)x75#} zzU7T*=7$|
&ث X?-ԒPZ#k¼z |ow7vӌ7y6{d]mX*Ux]Q]֯x&SUТvBUfzC 9kߣ:!hټ18նjg 5@l^k:#
tLT/C}l%o6 1FN E˰ J Ș fA(0xßks]Ppf@L'Āc}7,T5aXDc $,w3U{cfBEZFh1MxL7ud
>~C Υ=@/9 q4 qwn+rY!Ü5~f ;SKsśҧeJ݈Q[R'Y .UHxpQWT v4Fdt1$<} =s:XeEo]mM_&V3KH1L#ci _ʂuKX5VT;&'kޤʤH2ڂQqt (ٺI{JdǞ
s="%J
T#)KO`>ȥ'2xu+XWBENw` U(\Z jnQ#cx{],=M 2zf5{sUQ:NM;M/ MSDռ'$%¦4QT#kn[ I6ʼn#}p1ƓlU9pM[x_lg(n@ X;5YbU;Q*B` t 4!74gIy &Rl+0QD#R; Qk Qe#P3K]3"2ytGžRiv1G'
h1}$ /'Ĝn=Y!=ntR:v`Tk<2DS*J4)Ak`U]"&
ZᏜݫ&2J[6+6!(^= 9 ή@NMLG44DAs*SEC}lvKE |G~ Sұ
'
'b[S,;D}
&#z) @[!)Sfcg1+ {H%VKt Ec{ $$E?XZ6Gp_pyH\iDLPV#Db̚kR'ѽ#ng$
5āڣvI~7ڀMן H4r˃'±?J
OR8_r_y(eYwl uI-au\fչ@ ˎ$rz߭^ Y3VE ~ppq2ڮ]кYER fr:^/T~oTv>p(΅}Itۑy? Y q 4MpgoAq;ꗁf7@ o0[ka#oU aJ+'WܺU$h
t=1lVDثHi*
#J? iŅlr&*I{Z8GPOT\+ӣ' tP=ڱI#zL\FNޘ18; n(Sv]\Oy<
wh^qd8 :սS"?_C](^ C9>+E?fFv2y;Mk'a<2T
?$k: 0|7%*k0Rlߨdi'UA3C&fȩsjs~0
Rɴ &3Ͼ"- o4г;@VӰF *虑S82nf~(jx@nY`ʑn
̅(Β z=I/ OOB%N
pH>pN퍣_ȉ=u t (K y4wa)j fiM= +
ъwPczA߃10()Kz5wl:}[~u9 h. @K֯kήOoI<^P=~l sL
BPtآj e +S2ֈ
lP[N Q7V?xr Fmrvrx43^UЪ'z͇ζ)eWCdlʲ0 7\0%5; OjhqW |gA
Fnq$ŴTƲ'Nc}Ҝ EMx[6 LkU6'Ia(n&a *dLU"oQ:|6_*Ɲ^hјe1Oj %05Q=:p D 8@K$i*$YB;>qx
nx9tUt^"2nC# _xMcSseCơA鞪8b}ߺJ {އI>jP%jku_`1l[a/ Q:9oYB~E9>C:;rY,ao(7d]5k,nK(Zps9ۖw-="6Eڍ%v='?XDQ1m hIv ~!IEYWgNd_uAjM ۶XHNG1};R1ag][ՕT^2ZT\D )6z++`l$J@M~fϭ*U
/ q^ |MFJ?=)ުx+̂q-
P{1(~
m!aaan[WWMS j#el
!(H W` z/W3RP X5e*xg3/E{ kZt~Sc.;cfg=eB剀Ag+yi7Gbd6 Dfai)oO1AUf֣jm o@ @k@j^xG 32j8Hv]x;mppO_@+/0 T
s= jaH Fw}"sfgC/9?Ok+}ɲ u?֣=4hr fj RT#-9n#H( u ;Kem;k avݳHOmN$M=Gk@j0ԁ`3fM_\JՇ+;oanf->4
r@Dlۖ~ͣWs_Y0=wxω2CJxNw>ٓ8HAilz a.OĿs PA2cs C;EWC@R3e]ס2L#ؓsyʴ,Mݧvq
wŜ{>\!ǔɲ 2Wi!TBᲬ=).a{荙'phlpy
-c|LJNx lPBrcgLc|-/hts_ a&72,N7̾ 5![u)3xBK/vA0).8{ vV,^}k S_Y [.h
BJ$ 'bQ%>ng FWEP HaEk[st 0ЂJ̘5R/*M^t6ެX5r/k'[D$*j;sA揮wG ӑHD7`hmαw>rRLNJ X
Oj sX'YoP,~zՐX eibbNZ6^ͥѬ p7:GmdH7bYEgk= g#>B6l5FR&B.mw0 7&2,rȶt] 9\zC
Î~?>^2zJ3"˓v$:ux%>t!ٝz z6$ HUǚ1,.*oErFӺXb/X1y cW#_ 5T]5D^vqY9@5ZHVG;2>{Yx* ֙ %Q}vk/ώBs9Je*7+*rv*`q4!y&6u^iF
,
ٜE [)O(m8 ? LcC X!w)ѦWj3#-kcyH;й)7. co+FIڑx>1+yp퉞obҧGG9?b
rhpgZD4{}+Y|$"cф7h,}-) EGV_ ujVԟ^k5's cʨ*gϓ)ˢ~dB] eU.y0Ő-_"EHJYvd. 9QjFqNM!iYX=mo\d#KsVhƴ7r7 DwHU x:)!te/h!^
8 ͦjٚ/q҆p$(=D^zj7c쾼
u;=_n !ԣ
7q|.:xzw ycC[eٴ-j7Ty >RIGGM$-ۊ_!V?ehO'de[.ň 7XJmY1p#d 1wȆC0=9M,L";j~v$P2F0I"^ >&&U:Pl=2Q 5=)'ǞGv-AaL=qf$@}/F)
@+#?PiLj9
zs L]f:|&iq QSߟGm:67B2jϿ 8/yK E
QãcngTm>݅|uX}2KJ)
Վ"l>\0P(E~'w)GD j֠z-@ q^Fl踫.L xEPqtZ Ȁ3!y#:Fm -g +#snhpK{5
¸
ʼnhOœn՚WKVaҪ^D*UhJE]J,Aux
-41
;==ͺwvd
j :('Q{Fݰ!+vWJC\ #$1LZ X 3) J!)@ ljpe!ZH")BяV ɓ>b.][_6
*KO_,>_ƻ H(}77L5* n
'bSP Mg6l?H~?y"]{O:v#"rʌ&PHB" ɓgzgy [VZfCw
>; 5i=m2T=wV;v(iXvPnV0VȇPH(}y1U % 5%pU(K܅~^FTU".u]¥I
ߖUw%o= es>wi[i38 l %mtՀ4jv Z6p76kq͋|rRؔ;[YtadYCƿ1Up 邐 Rŀ#Lz&L9*<j?Ydtr> 6oպCd̦69֙VwdpT7 {^ ttPZjVtЈ/[8b̰:VˏL{T 7d~!tD$K DjI9w]n ݃r oKGzִZ֎L#)qpgyvÌ@F Nf]G
{ <`-,cր>p?FμwK"-X]QAvAс: q<<-@.@?Yҟ iJ_27#OC))ΚN1z?a ! q~5"Z>tOD5N:8m /LٮWt+Q2@ۛV C5KVEmJ x(퉽<_MBkw`P9\dt??N#%q@: c&ɰVF\oQ}y!`FCmi@3_*XE:Y] p\ j6FQ YMQ7!W 93^F_%k}1~SfWъ
7Ҳcn6Xjg
#8ܾuz< ӎ 0r GftzրP/*E_?ٟ۔l4?Ht+vl"ш-bHHtqOM xR lڗg6w^H k(+4 *}- z~ٶo,jޮ 7Or)3E km9 Åi{y14lR"l[w@ jQo4 [
i; c'Z Qe]~=.
; eg@y7?*'eMn
RnQ .[: T" zʬe 7?F>UWY?I'mσ`IBiF 訫fʑ7SŸ g$r0Ie lSR ӏvN"a T@+1^GDf|CR|zZ0>~%}w [mu̳@xfR4#0I.BYHJ'H!,#p2?ݽD9", poĝo&
D(W @٪5Z }s\T|H_R/'̥6 H|I4ao6BpO$7Ԉ=PH0uլ,hXkם7 hn Ua$56Z}+ӈgFOK/ PCD kejx|< 5|
۠Q=X&YyVog ~QzD1N̔ c4q)sX
q]AqY Vn` g3w{%(-nK|]DF0n#o|tIxd&#=\2 GrT RË%B.l!VGrѹj#/6ю=ԫDe9&(~E F[afHCEUOT/quœ([Z)i@f!d
^HY&Z-D 9 ~8"u+B
q<
Y^bبEI(} >^MwW$B7 (d ;#QO$
W~ޞKVEn#e`tC8UqmЀv)Xf->`04O=n,F6C[&R-0R!9hQO/ݠuu>_J CQ<&I/kӍFx).ߟ
Ttl.6 %ŕ 32ȥ0mC$l͡YT g~e'b?1B-qk|aOx- Nn-i 7W:r1Cm'EOC?zH* }YBx
,6~~qLa on 9)Mߪ@δ@)4aZ'4vN^
ht M{A^rsTrfP&X)ZDf^K)Ym2>[X5suE.?/y<.# œÖԇ}jwxcN\09fڏ`όm uv
{}aKmH{mqYX.~18 A3e߰|- $,LF
TbKHWX J-nem?u&6ꈪ NC@5Ik}?DE kVQ3T$}DQ{n=}EbI/5Kn[Ҫѥ0;+{Q-,=fk~u X3#/(%9Gl!1S^c*ꡦ0L7UASb*8@`}4 5ap(dA `Qp(V)qP\
cxwegfd MO Y
>DvC9RubJ-u
a[R7@El*}kF\{2Jhq(] ob! ˏOz~:Y xgTcKuϖn3 =|<_-Xvx) {;pz
<6 .̾ԯr3 Ц+pee :t+uC4{?D KPc1T)YG2M hvwiEǃ4'S ʽzzKѪAE;7nz3Iir/CqB;{Cam(y1jeEl#q>R3{yiLo݂P~*m:~S} и 뼹;q'PW !-'J[(1 dԓC9^Pra~ (P@ &W(2p'lu&4V蔅i]h3Jv[ǵA$ q 1iӇ+*HMU>X5 0gxA';k?l;~ ~l32QnX c,u62қ&Ͷ) @#7tl[, jǨ } ?O }r({.
Iޫs˨`"R
1e[V}y#ƌ*L ,K9M*D° h1 ]+Sh?j/Gs
zL*̄ph:qFܯ6yqo~i` τ h`n=nFD{DD꽒Cyۅ$#L8AD
}_܃ 1e%?E ,N^,W-Y͡N* 1Bb;
_՟KqɔDvW')P<, ҇_T=0q LǸ.iR5J^O_KL؋W:(?sҷqh4BEVNHzйz c-#US䜥 ZRwE?欀}PSߌ\rg)Nt%,Шn va Xy2ړӝFԝ߱aEgY\<
X[k4:Ynr M?zprQc-TCbU0Dp
1> jޮ9c9<
l+CڶFǂQ*{0.:IJ_]ހ.mW;0HX_uIҕ9A>Xèǟ*Nb8wf&,IhСm
ݑ6W?CB
n3 MQ*#?V/fm)_j]
x#_+|g%WuFUIPX N)+ HK}5ͽJTBB1*ɺq<&6-?F
&(,OQaJTԎ َkF,i+q| jԚq
vMf|0C0|cwWG
qOҒ3&hL>%zq'mO? vCdrZ0 wQYA[j"
dǨ ]%F x @YՎSJS8<Mæ ?%rm
d817MM \*w ̏r, MG$k o Z٤kRKuD~x4)8=oJwʘ-w⠢?b YoL5+L3Ԕtӭe`,P(@ G 2c FY1:2b{:L.K_ዶ IaN{UcMG-FũYZZFҧ'13v;ڻ# J)*(amTb
tw
{7MK
OW>b4> Idđ ɴ;\N,qAD64L=% VTIXVʦı;m[C #C< s!kYL.st0 2}Q-e sL=r稰QQ8Z_'i@( T6$Rh[N /,.5ޣ\]!6=×s7n'{ >2{f(Wk .aZ<Ł\(kG.oex]4?67nP@$< $H\DB{PٳPVxB[f*ߧ쏆#CUԕv
sH ?I@KȌYB>U]$J d E^t~8&?xxCKվ;\A9ɱK!'ԁgS굋F![Hv$;&qMYcXuX"Q߹=[m/2ikzsqԙ
HD8 l"IHS "iO>* _heN[C \Yo,mDW5N]ޫ_;Q| =܅HC>;@ iJdx-EcK¤ ZAHEdM .AZ0hQ2ToRMLrBCqcCۘ궥"QD,I (
jIdۚ0"a 4J% 8 %"O;!蹮y.-^ L{p5AI1 >4#tFnpZOtĶ2jxV}*NfXij1ﯵbcܚyݗ0sb`UJnKA<¢ EȄ__ `;Q!i+aV$d) 8 [w> ˝1ùFpOAOGmb3-(ߖAKQrm[H ? SO |& C٢zbYE> 6.z4SqlT-aCV VA _vV*1Àuj0\K7IA)h5#8y]IjʰtfŤ嬂am; ( F`l)ԅYWɡ q?3msb ~.KlfygY59WܐƗ$oO 2|*. xs =)v%yct=k< S}
]*okzTZ:e7Z*q-pY)M ֶ
GH(XrlYұUH1eWBmqO:ܣLe jiWk| 1Ysw-Y Ru
f(2ĉN $*-٘*e#bisz, m# -˸;zWi [hL2)WĴ wCK!xz(Ikq :y_U! fg9m%LRٰg礆z덍nQvv<ڱ1;MagZh;e3n8/ / MZaƫ=@V̷m- j2 ~M0.({f!MQ
% tsaʏI}q.Nnfze7-I!Ekrɘ 'WY
]sS{NNɹ'`Y:KP(Ü!0KLӠNB ;X,~n-eՎz$:Pֻ x^1xb9 de 5 FJ?Hn'Gy&{t-Z 4_SHTd?mV '^_m;#BfR#h'ɇ e%ϧ{}MJ~$=]-!v֘U:,uvN/~&⍞QDsds&ٯOљ]eHDH/|`!KkG?p
隁X;xە@6Vߔ1b@J1_
G@aa&Sv9WD{F>ouٙ97mH7c MxRl!A@Q?YDxC C sX7f @bbt(# ŢVN G;^_oMٍGW^~bI;G`2elIdCbqpü"bX1n\r sY"Ӑuk
^)J=2{dG˦A F2KH/9Ĥ%v5|ي
/
XXRNtuBke #:Ih!
%)Q4L{(߂Y#Wo #9гh~t>]uqGz+ps[.;f1^)K@?˙a>]A|aR ; ]/X :N=lOc`(2*!h7jס/MuC`ႅ:Ί5ʩsnmcBUvjQ (*o)]rg97-S8_ K (&&! _oǍ·n6ɬ z[ĎWR_քuDglt+_'91WnqNw:
SZ߭Dm [g :.s-|KbiWc$_f}`5сd?E%IP9}66`Q30R :OEf^=J{ A)3AKíE
t |O5 M
yр|:) !Q}
! N,Z 9Mzr.pA_&Vm}
6LFQX,#Ը́#cΔCqN mZ BcX\\m7|ZH֑iH% nw"~F py3 V* ݞ: '٤,z>c9߀_:fI?$ ag,,&:ي Yډ_JMKL[W:{Rx%;(բ
,Ts+HTW1>@+OS-ަ.9Vr
P|XZ$o~DC:ڌͿܜ/m!. i ,6EY GUχ\?n%T7 rXp[hk r@0]^;:e3iYȡoNh)2B9fPl^nWb
+G@ZEE$Xı'T
u;<2d`/ٽ-ȨQI}G{6J&SiN膮;71GEBHmÝȌڪur`;6ǓX7uB ĸW$rS ,beB7u9:R;-; ٖY?Ez1 ;;~rCը.I0;k7N Lc
PN& 4k xl
2hG1n Z``
7+hrDDqv8H1n /O^&gQfZw<` Y@sz27Vvmǜ~d&=T(6O8 @ ycE_4;Q\Miٞ&C>Lz~k$Dӗ@$/a&[r*~)
;[tT6E(.W,Z:q
@I^r_眄h3I1A*R:QK8~5|343tw~S0EQ9Z#*T x5tBd!(z v%Y%VN?4{v^yefpQqO6U2̲3&,}2Vo
¬rH-zJ' 8: ~VZ&a#T zm? ɯSu)ƶ\zF,l47gG!
=EV*k)(!\u0ݖsס=
h_p:>J k[swiL++#j'ܓgh(_@+~;zlpm.wTVY֏qnd rsfq[2Br"{?,.xYsHU,Eܺ@;C@b+w䁰VkUH UUǔ ZB;%wyF: ˶cx"BtpF#I(z9jv0,>}0pb,9Eڃ}Tt&T n02Z ל B)J_ܙaJ&%s
{cIv+˜\BXϐ2O+q8 0mceNӸA*|kY_ 7\ML&~*OB rZAϓ6v LpB<#>B&T./Va9OE复ò|͛N3@wz
; Ka0~1Ekɹ;Y 5ٖ >:tpsR)J~TW;2wDs vm0Q q||]ďcf!1O ؈a^U BhHB)Sep x88t
ZYEoG$!SIˣ=0//j$xLYЉM~|:}kˡsQr =ӘJnXsp6[b#hqJ Z-:|3@Eh0͜=( h )@0BkV-O>Ck2OX -U 5Ӡ@6 TpED{c/;U ̈́ wJvd@ë
а /" i}p$~HIKd?na2f"u9_j>Nf̂ƉRg u$_>Gr;I~ lX6CplEU&e
yKY)wU7۪!>bpLwDG>kػL?秶Md);g!3&MKh
2&zB} I`q^.ELҶ
ذ Yy˿
ǰ) #bk"nz8QV'ө蕰
'j}wS(4Ⱥ*('ߖ
Zf::g\ '98-'&E^a%x{аIv+ٻ??uzgKsOI_HS 1)͌d^B9(wl4\{.k2 -G 6h|zf -DRv.
ԎVxQ JroO:pS33Bz"Xn cDLJ] Z
%~ zSg |:Ы8 ߣ&`.I,L$g}z&~h ~m3~J>qKX>?<~ݫg lZU#'!G$^[n:3'qϥ"3M)?|%)6V+Q rKJيt1o"<řD8.B) (S@Xx7'0 !ӕTM4'#nub5 ҭL^ !/ia:-4;A% 0X<6Ji`ާ%8" B({A9OznAݨhC%vl2:)@(tI> d_xO*&X~ kDYܖ$ЋiV /OEgmiȋS^A3*Jθh! {1_ ~I]䝄+Jmr{MD% Z++ R ,w")"TZ%
Rw0Xe#@YLQPgw+/ϐ }b06ok $ng{{Zi_ YCH[T3,=b*c[*ݭZehO
}uY[pUsĈ=gyN*ҩJ "X =z$53v/91S9; 6nC e foa1v&?UD;? ]XJڲÉ;i[mgUB8Q܂ͣP )B)>|z >0VBREE;KY#f k(nsxa*[2Hݷ Wq|{t֚Woּ#fkكC\!ĥu7C'
"/u~}y4KT{ F ~_omٜ#W<@'w l_@Z2b}pZw!U4;5'O8Y1C-Ry)|Lu?ubN
{bO.9e J8hip36ND~\iT^8إNJAؐ;;G+drå:c ,;D!=6IJ{J~E:^SNJl{.EiarޑhŃYA rk~bhWsPVE?>w m ڶnprtTDxHg`#6[%g<` YU?qvϲy a</F2q\-1 Icm#e
kjvhÓ!17a N @'HqodXrN뛉X =|OjQwp_ <![oo5yG jD9
&- ncFo\r_\c(_h 4b|C2R*wo$ 6FY*L<%7j¬^kƾ85 ^RCή >_ b'CHn)ep^& -r%7&f/m:Y㭖0+3t$SM झC|ѯpW8K8(dm8?̿¥v kH|ځ_
U\5oO7 ǭ(B|䂩MP]~J;g_XkMƙ+`Ft!)$lp
Ii 9\e~f6^7.3U'NKQjjC)B[CB@s9AUq\NnPĞZא?Nբn,)@hܜN*5|AM}5;lqHX* 5Ee!.>(Mz dG60~AugR} O!N83 38N ;7oCW
p~e@6Fښ?5W0E.oPj%!w
~?TB5^ppe MS`t\|³!w\=t u_i/| Q ]05k?>a{ m'
i8x(1Ҷˋke2n ǪuS~Adso2 9},3fݓ-N3)x d[El ѯcbjD6Y?hh8ȡ- eb*$H1-5t XҜ9YDE?Ѿ+h ?_{J-{ ^mRR |QsI(dj&.:Fz<-BkIhXwq kI6| {kܘlv(/YHhW,}$dT0gXTE
XL@km5圷HThh&)K~}7wyX4j gxͅ:%bt"!g8 D'&V= 2
z*?~xZ7Wm˲{(VsMut Rsu;Z
"*F' ?tP&Lw N}+S];JY}sϠ
WCJ2&KNˣ-xkR寱+WGIoEί6[PcH89h[, և)v\hwb,a LfiDw]%ې/wy$`
sU)N(=4߀{j1fCݢ]-DZ.ľqS}r$W7j bF^ˌ2m k'hfMMKkBn s~
f5dm'
?ȇ:RX~Qհ1EaP@ miPMr U˞ӎ?_mK4W.)
RVڗ~lJ1 W[ѳ ZQz^ 5уgo
ǖ8]P7)e*zqV>3)AY쇭vu8xCϏ_Nں]5#H%r~F?ts0em ڡLS3<Dd^-7^#=˜ \ir+ Ƒ(,L2)X"}D֖8k9SgʳZv ^h>G ]Ü>jM҆3{c`$ 1@||s%)mq~ LjN"|rffBY>=i VgZc"M|#mSn&
gಸ;h eL5Ŋ>ǿ^I*YA<~K]ڇv
eMFP2 FEpd־M-*< -ϫ;얶e-V?{TC"$ dH>i,.wqT W-l
C
N) V m}Jx+4cP
gNL_X;n 6tʎXXX λ4n z"
57dk} ad6ځ-䛵^^A8['cݎ_ &~^cqӇ"a<\x# ZtQ>Ds -^ ,*#CX1w̼T;G.L8m50Ƈ tBjubgÄ 0,8J1p@OTf=Ky.IO_"dꦗ
?J &Qf*N\sw
].B,z\GA^boV- } hz T%g+?LvGf*=ſíJ(t
}c}o!8eIRlCe44$yķf#5a
/ H9s|x ۨ^V_t%JvtHXus3W> aO{ ;>1\sO@KIiR^AyuH'n} _>p*wDi|HEuLcD-hf\ I;C iN 5 ѓ.yV[iŨ"k( ⥝j
J9|LKP
=~ nuj%DwAd f\ W ;mCy:v
k. 5J( MNFQq3 7 }̷)aۨjf
hJݧg wl|EQ)vK%D z㼯S*Oo ` m
k-qZSv QٞɋC Fg39%?2 wI8Fa(%]mauofZ~ x"yj=Ȳ링:N d 0rhCT.D[*GhPՐiZ7@A_]NmRǿqKY u 9z -" l"?=h?\ *O<4FİP KpNBwqvQubnoRDP|#eM+Nu=z1,|ɻJ |֘]N` Yq"RkrsBػ `¥Y+5荦HZ#WuKչ?]Z($?
O*:])!~lK~> Vx+)ȓ PpCE3 TF9w8A# aGF- x ޛ
QḂ/5\*g4DJ辇c&̂6z&
Şvp^+*yMC q|B薖Gema^mv*dN£/oICM ;8 G+@,DreN",okJ ̱n)N,
DWddhqԁ/%k;9#%ތstwUagIme47m Uw\Hן_t\a=ZGwzMy. r*&bekaƨU[3r
*:Iһ@2&o%ZFSzi jly~qpAW[9GVERVl:d7kM mgs{sVy,QNlUrMD Ħ-E*XH#-V%2{xcԴs7DcYӨ%+JhY FGYtWf!_k~3)6-;WCO%T) m,>}@y^MHGW >HM$ӌwDAƴ{2){p«<鍢\|%2,)wY>psJԤbqG _ E<~DĹC/lE>A3ϥj3ǃ;erlj뛤rn W^'Zrl< [#!:bK ig3K{۳ᚾ(g,"#ӷ-Uk/\ >h|4? gb@̘ܵAJ̌T椈)N4˼J9GQh>c2Q\{q ۑ nstw2AFP ,RL>KN|FĔCC xE i /']%~ڄ \D'4 & ǞGa$ljdkNQB«=˚=m au@=Vm@a !g-Bm0gt-% fޥJUU4_Ӏ_:&I/] r/Bp;'i8N" C}݂ W9FSv 't,
V0\tpOeR} 9{bD3V`\g<fƊNBynSG /8^ qC?t17L LIRNj8py[mI1\:$dupZ]jVA AO~ 3DhovU![SW IZY@>S}g8=[ {q8M$80r(c3m *GImsjYPp;~&iU4-Ѕ6g0){j2 B$cz"V'r = >4+S&M5Sb6#zbRd\ztsK bi.2
q ə$ۯIݝ4 a̷T=. n
ӻH8j3;Ӯ[{4 ^DŲ6jcɧ\ؼ*)"A]MZ"dP'H k=a쿈И:]f̀L = '>u *]u= p/ho(ن9Y7Z23T="d5@61ƳMiI ݥ SK}{@{Qv 5Q}
=⏗T |di-6NZ2`,~E88YY/_%dR%<%8˥^Vo1զPs`.px>tyIqy(k$S%Caq"YYo nkg۲ 1!O% R0 @Y -Ps`{tCx- _?BUrTA>%|CjuV̤+8YL5SQ@ü 6"8YU0m?,|8& h2o W% 7&ٮRs'AKB0Z"'k6`:<25ڵ
? PK`|cub
?0@X 9gC;{zVJA]5\<9c |ynѣ/ 8 Bj݁uK786h}h NmqT(D-j} է?T wl<#$,e3ibvIb]>\U 7@?.}WrQ:Ir2!PpWn N.')HPχuUB/9v<=13 bugC:|>Vz!tb,*mgAJ?F`-(RĮy<
IYo;2`,N_`^ש#;=Xscn-Q'W]:ہVߝs}69ZaFZOcx:/q݁>c$Q}ǧIħǰ{rTc}8'ʄ|m(=F*VMHl ;8|(~m OGBy{ƁjomCQSvЎ2ULb
J( ng~n h
WIn3|ٙt e<'K
0V7g9>L^],u︭]IO# $
Z`jPNkB"R. q/t$ WJa|֮6m^nmn
[gVl Нokp\fJikow)wAdB?ӔP-T}1GitL\8M߭aAV}2#%uawjDRJ4
:$ҫG3 &] )3YHT+Ev[N"&9˰ .#RkC0{v;Lnw o>⡬
kGkdc8f'm]N@AY(; X:i-.ΐSw%cpu;QT:l9uKtٿ8Kb{,:S:&ʂFHk%G9ѣcLi u~YsW7l+p#~ԑW) ۜ+Bj>ҒØ~E @)N_m͵mpCat\j~<gwEǼcSMX늹y[#X+K.B+XU/>8]: Z] ƽNs,(ӵqH.f[#7Qb!\O:۔X~x2W~TT W+DO~JfR1NN
~o} 3 *d~-j>uшe)Oy-7 `u>>dT˼X뱥M ¼b TьFNzFS~t@L Qw 곒 &8HSvH鶳ɗk@S^|(A zd3c >ɾH_ gURsD8>rNE~X/)%& ڞJ-[@$"Ppսaؼ?|M~ur
<rO )IMO> B3ҖP,6jV^^N 0)J~B#%S~3ąpI;mmW6LA$6 TEՙ'/"QJ|kƲ߭J܈T"⨗p2Y=>wH#
# kEb0dʶ*
Tڎ@(ٌY~B6Amm^ȷ~k #?nw9j ])e;7 2:ZL[/e###gA(s߽ΟڗW;v1ꇷc HLF96oڱ혌 U);^8*KxIs%Kѵh
Q#A A0s_gVh/@a@FƇPvJs e G@4E+7⍋C:Zπ/鲱]ʊ+@d+͞W>֥
:HI蘴x;ڻsCSx
t{]?Ff]#vPe y#z @0%ma?X!s0u61r3dyKDؓLNHQl <:zԷw]%#U<%_)G{ J0B#T3K5QhpHO_L-~j?0
fxݖHBL~6[R-tm!VVwDQA.^9 3pӔ忑\ F(&
D=/ߍ;7T(U0;$BKc~?d&О -͔/Z Hxmtn'oKs- 8ZJ*\2Lh闰ᵫf:981$i:__]/)(`41F z(2T>A!·jp *^B<$[kͿ܊[[HՇFU a'c%P~h%.' 4L}[LI0zjj& {SZIQ6&t/P[_Kfm
+8Z텊:vSЃk~NG˨Y,E'ڴ{"C'ɋwl +̔EPg3ԗsP34mz aӂq ٸ~.{_-ޚO$7 2'{NuN
: 6DXMTjwDvR:pZPJiY9=3d"vG?)ntEYf?Yڌ5 !31r 4M lPz CB찡-6D'DS^G4Zw\cm'ѦK$ ӎGå$D7o./ w-Eg sGjVEpٜwd*KHSϼ([5sB{8Y*Rƪ
U
vP '_Fצ[ pGwi[Yziuhao V|7u:h] eSe4AL^RB IKP]5@a65\|@IiS<+S Q" L웶8P 47Q6*b,Ϸ 6"vkHΕbx
y a}!oe_/[PH
3=wGN]`{eOjȹV5ǒt 7nbp )wnFvZ<COПds:] G!F;#JWX St3kBfԗv
,``p?Z&"L N}
ʅ/k= +Y=fAtZ6h^/7wnT}7boqǗK}+ũ%й5fF\k pЎёlc;q,bqk*PWm
9qTD O [I#5_Up#Ur&
^>ek3-|Fj4x3HnOCrz$EOLh%zbtL8ip
lkk EM͗=q K(I^<,ͮ_A*IJjK;AEtc|$A Il%K_)ڀ!IJBb0 9wt᪬Ϙ ]F[ q MOY\6Poc- 6aMPOF#1&~A
_m.0* ,}wXzy3SWmUxGqމu ?j8(c(
45.R{R"Ȭϭ1V#T=}J , + ( Wlv\|C8"FJUKȳSzܪ~_J1|z 'F.t.&_5 eXYF}Ym 53 @
o=D/ LCGQ~p) :O$i_CEzJo Ы0ْ }'6[zŤ#qT+SÊ2ģ4?jּe4ls6H_40 F78n}Xu s YmP`Kփ?g|6
JgqIf"zE=U[ʡ;4 c YpFBͭ<\ѸUDDym^Yoexyb8auJbYU4dKKnkqX+Ǒ߭~%~S}Z#g[>7]Zht0ȻxFX_\RZל Z"%wKMK8ye4H%<}ͪ̕W-< \Q;cz5 Rh'B(_4aPQfY/'Ⱦhh[8])C*{֔N$1y#"å*_:qc5,%QXCWނAXg1tl4nOTYn(s=)E d~0ռ.i$y/K]ז,`;"HkF k'٭S9m#q
" tDMT<PSѻ{y2/ w4*2[ 03wm cW' !]#p-k?V 5 0f(P{Y?,ųL
Yw@K> 胂.B{Nwo,@?`.FO8` C
tNPDw'٣QB -2 Tđ>39qTk3ver#)PpHzၰ$gLe}FӷRQ}yZJ8ÍDel> S)&gϠ}J_fvX+F:QU=u;+pTJӣA^o*MwZFj1d_!S&Qݸ#
yjOv0BzEr-zMJKSsjD [eЫ#E} ?'K2YktS|hA[ 䂒 ]i !E-j#zCK2ԕe͏^AcǶrBA0b% %-kKk#?_>8UY+ByΗ|,_ ,Ý݈*!;1۶_8#TW@w
1{V \7r4BZ_F- OOJf2!=Gt&7BѨq!zEA>c
!*EMN"Ѥw '^=`L[A8uA/.@i>4}kk"߫ E.r˾ plrEm]" 3tķ "F³
hN՜r)0HT["FnFi o}|
gKqYzs¿
7p' qP\w6֗ ~X$r9D(wƙ!#y0O$ mlzq ?.C7i:A%H߃Zh :|JA槳
|A2\FE dtvij"#/f|!(NF"Inÿ 5 ߀6k^M XU}A(`%|Tw+B @%Wy,Ϳ.C] 8,ж
62/g0Csd--@+Omu ܀Teb\ʲQ6e:¬3(j'!lGbR;"unmV>>ṹS˝Z4{BX!܇)
Tu<>y0zFI;j^Z*l"@OҺ9 $n6B Ֆi4 q!>aU^h> -l *E iOT tZ^
e5]5g}FpgNr8_#< hYȈ-#Y䎰+ L@p{^ 1cd G!tVIxL5 2OP < Ehr~NN3f.={bۨ
T4%VUf?Xws
56"=j!c4/'bPr66v?@q Tg}h܊?4 ֦h+Yi'i!ڳAX Άr>tAE 0yۂ\-=rPW n#dUY}5NOuX@?>5):1g 3F=.Okv;U00k4W-y,w(UQ$LrM{0utq5NK ,QGxc;3]hd%=fhNr(
[bؗe0F@`*6 Q[ #P
*81"nug}AW҈vxA
A" @8Q*|-إ, Ѯ Ym ,n\,.oN` @Hك{RN hNL` Nkn%
gx C_H;ɟ) {/ hgtJH1c^&!
ǂ l]<iAk&vÚ s)tl>b2 f x.~m?L4c3 n.n RKyWAo"WW--V>UsxPHJ,"c j".;bWC r\IQ{ _X(T@koz&:QH4 en~[7D;
9{d¥M=j?uSEUm5~80=kΥ; ĄjM.Ж3@:9O<yf\ctiWL8Y8m=3XZy ߩk pi݇2~gD~{P` C ron{[@D@ }tؽWO!u$Go͉1'4tc' N)>S?BCA |~t
g D5Iݭ\&["/n6 qxapQqљNԎ쀙;^ m{U|DcE}cN
22>W%MkR1"!@ٖv%;բ^mO-`h]վ"aؑ8b>3&,|qqJBlA rjⅻ.ϲM ;
r=A};Ӕ|l\Ġ'oIt9#eINd#_ۦdT1N59Frp7'P(id$){N@9\_!
C~ӴԽ9v k fp ")՜?× " ҳ QBVdA_#
Է8_0i/$JarEWTAG-r603 vb=> Xm p\r
{J ?'?@t: Wu1 5`6q@pR,O0
bR=* oSYr:tͳʅw3*_M%P$:l AQhd&z*6g =w9.Wͦ]|qL}۶ c|?0i$4Pמ 8(mxʯE!< N+Q]WM45 rYH/ʱ%|V'R\ syB͑?7/W@V\` wvLIBp2oV!v[$Vcؔ,RcK'
1?ekyzgkw"78ZQx@Rg}Whuqr4ÅsVW*-to`bFy
$卪tsE`9 t &{1Fy]][W +9V~SiE&ڨj`ME4_y
όL233S\X=
]U¢l*jȿBpQn ہ@twUюߪA4AE "[ 4
7 * ?[[sOSi主R _>B}nAd4Y6>*#\~tРpfN72SiT
@W%oC`2dM"اDS3M"scJl^?]a8~PtkAFG8S:,ĄdnHdh *zRFJnk [
L ٦
$
%{f4S9S_sEN:4rHo .UtbkvP S+Z蹭7;1f j75sKO~|?G4,Zf! V0vk0 I+"!W<\G: n MX@nĉJʋ~8rl̽j1]6ߝХLP-lEN@3Nڅ7,,d;y9XZx?Ώ v$zƊ\8J1- %`"!;m]j{#_l9x } o'
9Gd:?6 "9)7bJI<|, ,~#Pw08Xpxs߈Yyi، _Gay\yHRt\0 #v>i k|ݽ<9u敃PFc$b&m+/ˋlwS,܇$ş`LS'(ϯÆ &F, .6낭MGk ^'wU`e FE1w~e%Oҭ: *U&f(qPYh9n*0S[A"PIvFqIgunVm.vz{3XD{
2ZN02S8 o_6%륄?sW ,M+79 OͮLBSv-zi~2~Z_ s4cP8ŕH7(\̙T#RIU*ܮjt-gWS"S K4500Ȟ)O`vcLQĴ,j+3mh(ޜ #u s1/5Q
[c~X'a`i'/5\և"2 (Lyڃgo
( o h"
NuN}Q'"MT0hUZ#|p
KLS$Mն
ªʀ><ص0- LWܫo 2XyH@3&Z :NWY8 v2eLhM' m_fh}x#^&i]eS u6pUG.Or mB(ԡdV{,lءJj)` oAT-ҦNU}u?cn(JYMm+M=Ydy
X2 F)_1@ :+iBi6Kk{N(oѠFX'6kS/A t4s,I,5wQQPlۘX &,D!Óߟta #uڟQF 6~ϒC_]gwUV0 @fĆhnSzg &I=D3 iBƗs I}6;'PDyƙ&ȷ_+kGχͥu^;"3R%?tϛ8MDTW!"XnIkйÄܿf--RL8pT2P8,@XCRt =SacHx8`٭!8 ^Dғe** t*wsCuGq/]`Ա>PbQ Zui=1$qcX@;0s1+, o^p%.SJRЗXḂ;*Iٷ >-{gtvu|6]%"hJ
V!/nf"hCkLDj%ִSmy
mH:ф6K]"7]@R,HbDVͦ~
?mFjbXlM$}w? rPHz*φSI4m!2Bfq*
Smߨh0EoWs Έv̜|az[js0 rnVYRp÷| r*/T|Ka+ ;97L3M̃D"s>ѝzß1WҰsF劄)bGBRg69^ݾA[xQhMXqӋdɫXim5y Awm Eg
5a'd I>.3uT QfH^OXC@%DѾfc¾VJ*]St ,<$Bl>,x!Ze}ƁzߎySrJ-lwF*mL/GgN _- sa}߫gz= #\yJ"B#ER-~o.$;'-~eTD}0u%cdq`V0",Rtf$Y >rӟ 9źDk" m]^ `l~om8JZmMΥQb Vm"".ShuSts'c'A.{LF8 zxwv4 BK% ~ 9;K]vjg]P]1!kNq&%
%O=+urEFȔƑmYR#AS̾ Qsq7&@eA= -˒fvF< /۫ yLk'៰8N.-[ = u,|a]~Y~PA`_椃ܩ1˫vhKfw3ʷ4X$c疙b>
t]$Aef-SE]A*
G=] i`@_`?s LuۏNZ WR؈{܁vjb5|D)0 ;upiH{4'<8&q9Th
IռWB=!,>YojrYx3[軻 |"bFC`w6_~+ ZmgjѽsC }JI2I{4,O
EVh̊!$}V
Rs#qb %3ɮ
{u+ I #:> a$0̸qUqOTψz+5 D
Z[gљs n3jTHw ~Zb
C% 6nGҰսIaXGqE{HLUV4~D[zjP& Zc( ܩUU*˕peq5Al.`8lYUIP%&!O`Zo՛q* z|",G9̇`I3Ob!"ͥ|V>d!OS&Gҙ(}t1SvLg/ qfľ&0u[i#;v7,Gi P>jX=ib0{
k拄H qkNxBf͏rD/i67?Rc87aĘ<#"A
',(n@S]؆FN7COIAr0qt|r@#䀔3OQSR KpaVLD_elkj+ֺ8o<\Cܽ ;Kp֣r!b"A`
T$kgvllƣ;GM:הNcJ ߽N4$ oJ
,ׯh,% ~'ɫ2a4/@'+>P$,ef'V:gNP KEaWN;~5P>&DȻ-Ć Rǧ72m$X"Q*\+y&%|j^EM*qەEDl ?nW^W)j-Q)7eU_{8Dq djD>
X 8Ԕ*iHkɥn/ԙ`$˰i4{P02]2% p!V(8rf
ȱՒO8FNvf!kl ԇ1VnW v
' ʾR#TOȻY'Ȼ#K:HP}Q$t=o>JwE WnАϳsHb _L2x:7֜=NK1X%CbO6Jp>Z-z'
]p;Ca" hǔB]NᘻnZ7!e@+p]%Ψ lw ho4FOj >l_5>&>b
ml
oQyȧ/Q|? 5:.a %{}zTNJ)J['4A ©
uvii <d,bzZ3?OZ|DшW =1Q)m[68'J.UH8JӞ'adg9a QUi4m렋YG
RÑ҇<ݬY(qt)YB [Uf$o
I̡5dJ.]Jz](doX2`̂:Т-'Nm4 H%A6K R_.;:Vb @k}܍Ӗ9GOބI /MfHJt,f_])~v[o8{V:3xM
/K+4yq45>Xd
F:!fw:.CBlS նH3g(7`¼o6XsB(W S9LQ:uB_fRP;֪64n U7ZHy5F J]\b\ :QI8%_a2xl`;+Iy I1EV!ARURpW ]L `14 *#'0٦qQltPX[ci7B5X]i7<-y#=xԔi_JGXWG@'nԷPT)%
kP
|vyIc l%DK1M7 0C{7JiÞŔ[nFP({Nz$Z땢?D?dgY6) F>=pT}-o~Þ"A НZw:z+V%3/Qy0{0 T Mݤ s8cZvKx3ifRE Kc5iNo9?, ZɵbY]GB^aň- ^ScS %BC gvM (xK&I L L=ڸ< WGhxcZ3 b䖊n$Da_wmcJ! Iei"ȣ%H>}K\;jvJ٠Rpka2wV'fro :qzXJO'#07B01\Fb(dɀ=Uy ?!0/GV:o(aU&ة} 7 .Е!W]'ͥ)A_4ڣ8c$ < ͓_}3Z ys[EU)z!?
ÿK 1tfحH"^|q{9`4dMoޖSq2N l-A+?dBaUM$%Ps
ՅzGe7
J=z~_ ˫
1i7tRmjE oE8U"](ý`Re`*rnF^8B;M@y^4fب 0O+kLS`UGtX MpµFermxc8xjW $HNO]JͺxzU v?7}|}x
-벰5Я"o)&7"CeݻCSO09kr HQiZZ4WrAke?Z_Oc7aN|jnL Nߺ U;]KgD P_]/JXBWf˄dMlecGRZ Ђ#SX\=Q7Z$NtOR1zcabN |P/Ĕ, 2u 4λx]݀p6cƼ3P(A<},KaQb}2F\|Stj.NCƑz GE/]
K(="=w \g**Byێ蕕R0?4vXdG-" ڤKNC
w:uI/DGuKnjQ y<{ =qᅕ3pfs>U#"Gsm(yz ^QtkWHNDoU#%ӆ읡|'kt,a^ R
0D0%해
K`lMF
X)L41
xء n8 87&tqJV .,` O߽l"x>_RN _êqgMqD| D=J|L;oS-Fk?X(Sxw6s{*+!Z (ه`-)? 03/j10=/( SW(778 S gtp0D^B xT'@]hE,k(<# D>#5y9ø/ `g i=@==ΥqԶ%iSA>ën|1o[؏Y+T̷ӊ11':֝fA+˄0JpŅ=Ws SHwq'#]Eq@)` pxG[h=^uܻ͚¾杪GIj;UtΤrxQ5ߦ I #
߉ !% E`(5( h:&{!jAp9MbD%ji5&^ HBm $a~%f=e]60~ ,i G0 44̕N5e;J1N(3ƳwǘbO_3x:i#fsb;& ;,`2#Ҝ鼩D'|5!_U([ 7ܓΧ Avv주YiңjA{evX)XU\ZO"(>M1!_lIG_gWvq o`FxTKx3F7}X8(,eEGb
Sj5?֠O./tڿ&CFq+*&գ\T{u
\Sy0"; :]kQ ҜD)Y>!jE\-cz3V(̐AMPS̋jq[nڽhczщvY9Hq íw\L
Fko | ;LjE{li@(Ry2(O -tN#4b'R13E
vMT3p6Sg
a6&M6 a| fM$Khhh:uR)Ag`!Wkfh Uة8PT.
LVq}$}T(> Y(VV&M:
]BW.@̵Z!}?bNzj2r9oG[=wE'EU \8,*0`M(Z<{o98BJKHd1ޒ rG 3e/A˜#[SJJcsRy+'=Q. i<GM!_L 0 Z2Try
-b&E
FVkscdʉ"&Dmfpl5_{dñ$ a^5ƭqjwjC =ba?ŐxD;B{Qfq ņ+qX0JG
3>vVFdE?Z[dPHSCx'UAy[MádYyƆ<k &s_s.BL0
~
oPyM̿ o;9ʬygl5A.
..l2
݆f^ދkp&! e=F0]"M/g\ژ2]lҞ5Qm ;2Ys7 YTmYjsk1Jљ\tɤA VJ+ 3 Pݞ;9xgP")ukOZpPFq63-2S<ʛTw,q!3Z
ݦɽFp.[Eu_x4 zgkչUdZU$Y; ,KvU E
TD5X3y<1#nDo0%ݩ0^ M}芺a2!#GtaE Ē{aZMQQC +5ֽ|DEH\]܃ .wd *j)~O}縋`*?S..8XrǝEȖ-h * ^]iT @_eJA"DJ} E0J6߯)SRV6ͦ,+Bc{jg3#;6G7Y{5CL AnLE GDM{Lq6@^ >J6,ܯo u~O, (- [@"ck2R'cY1,6D\mbL$I*D2&SAbzDq1먒Fj`wlDdo/]On.p(wE8ujmDtS~Re"4E
`5*=D{K꾒К#JKQG.9I A / Ub[Q"/O:}?se> 9Ly(} lSAd Q}ʏFbX 7wT +6J#Z?2oҾ2xՅa$cm " 5\?/
in;WJ ԣ52g
0 &0t)/9yTu &O
i7/Υ̝Q|{ AB^uLΫ1~C@ ) =I^:Gc87ʬ$JT'ǎVƓ\lJT*}'јs7J!b:z&>e*/F%AtTj8Kt'dS(p<5멯0fyVvo,|/͜f>hx .-@usvS>UdYHBADy{Ɛ]u3 ҷ>:S[4ÏӈrT:"ŕTqR`6[R5 3:a'0wzof 9 Oj|:"qo3l D57B /eMz_ _@8 0k'hASg[ս{(?o9}*1;vN.
8PפN0O>"1ʇLpi4eusST P|P4--M o-"Ê1͟. nI^Z ! gTc'B^jg5,&tZ_\A~ E (&x+
-,YﬧO 1u܉p.82ub`\GqkM1OnFPA4^hU(n sV:O1G|*JeȡK.w5.y i^_t-F B!'zn)`>~Wx^{NTi.r1ߩ>څ&:FxQ m;QK>96 ZCB
G (}ȗx+ؽRzA$űI^hjf `A$;
tF|-)G~yٞɐǽF>>pr AگvalA H;X+z/'(5j$-yC PFvs3H.CY Pd=
2nc5Z
/| I$1p9 6>%>r.n
.3cB_̀a'jUa~WQCK/0׳y;a\Ċd`w4c~h}B ̗`0
Omn]8"5$F'6R{!0
N=wa+?v:
=)z TB>Rh #JzU
!ثۀ R4.h+DmX xж@; [5,Ҷ~^1l#RPc< :ck&9 cՙ, 9س4HD2V4 V= 9kǒ_na;}waĉT"yfǷ:tƏ:ͩjx "QѾB Aun5ìH8mj`.2<|wwL\B,k]6/rM8=|szg[H 1FPԵ0#V^scd超w/h7]W2㻑uGhx_"C:̖OZeKza'/ k_5O# WBΦ MAv Lr )ˉHrIʖw) dZɔ~
)0RҾ5QGFԊ"]}\B5j[;A(#t`͎O כ4|N ! DynA̲VMf'%:8dT!kPR Ӝ04k"Bl.(TQZGzn͎?)eVpm њԇ g@ӎ@ t|N RiDӺGƷ]|*6d R~Sp۹32j<2,>Ld Ҋ/QS_ND7INn%% K74 .7'S tj8 Z) |xGE? MۚlA-DtHcVF^df+`ch
ygq˲:/QAwfv
vͫ . RJLV-?! Ap ]
5W D8] `
|8Up9N!8$ANǵPc_WUum8-! ꨏUӻAN뫌~b)Mg&22QZ.N aס.zkn5GpqTs[/2QJl@w%8QѪVB7n+ JǍdp=;s<雧]+z7ʛKy P%c|OhHyI2' G"ˣ~}n/DEcyHUDkg1RNji 4w鬅F7.g G$K\.۾4ȩw$}%K@2(;!0RI,?PҠQsPL8;*0E7 vßcz
m+Z?^ "`[ [o>EB8o',T_zZUTnz8-NSt
.
w
l3+-Dh^6[npUWG5i5ᴉ+g?.:X@
}oe4.T `e +r|C/Ov:[DL
pO~͵ $UuMT*S=P3L ž)AڒO{scVmg+ry0|:~|#snׁo-~(
5! dHZ&a4u?Fhfm $mre\S.[v6 >AtV7_$kvtU FJU ;QLfW:#lʅ @rt op)hK_ؾJ#P/,]{.5M/$&u2 *tr>Mu v궦 ykY%OBHU:v&o Ibړ-tk|[Êe( M; OW0k$N03W*Hj#/ aK2dkdB+/S?\ݷcݺ*27hRxд)cTH?W>m#.:@ձ
w͇R>N5șKFXJ vZ}AzLo"6=
DMӹ<xEaE(]; i.*|n9^rV#s!Ql?n ֒D^N~z 2fwݜ^AaӧK
>5U o1"
tԨ1[tC4Iґ$ڜ&?Tjt]c=av#8G `/+bLJ7Z")(p^b.u% ߏ0Obw3MPu[F,@ Mj@5H`K2
Sro
ޖ
0 B~UT%=7a&6!R䠽!9 l-)'*ʭ$/ wfOq9x*Z( &5U済|(YCk8{ۮ\+7g (*I >у8?uMwT;MW9wuKZ^:nv~J^::P oATf+(^l @r乼~f1I|,VP%"(zzgX:wį27`Y}7-M(5c^$A}.xf ]vZf
x:)7k R,9h$D߯Indדӥ۶ >duSH͏YjZ &^47oYU`P5畫IJX`Xc k ބS9nBP DT?&lڢuV$wIujK<Ξtg Hyq/ˠv$
K>E0PJ 4'W_ԥj cX%wN w*`)@3WHwh]٭S"_x'7zlcbM @ ;xCO霺=52=W Vݪ=߽O]yv<,wLc+CE3<\h})YpfIJu$LmA(SpT7gM4)tg,L[Zi4d'
5NJUz
3Ʌ>
9=KDllpU}(/<@/͗kȀ;^mLar 2w_ p8q9=@; @ '7|Bj8qGpzciG Gޘ89'<j'Nv0vjȮBqPp~ N)`e7U ,֬\Clk
~gdn\l׆;yR-T/;+(S{cwsW*ozi(CG Fo '
- 3"xf 2+x]ͽiR&# Klue+E 'UM@VGK fT͓ .9O$RE.k)g(mnCM7Lb[
F>)yJd
">oJ|"x˿9tfcj8g0mթG? u' s-n:XQR M ԝdc@k^iHN'cs TzU";V }y9d0}ʛ_/nmڝB/x[ul4r8 mG#9R14 -o^OP5^ 6LA"Wk2pکz)$7 A3a/-n JaJAD.Uy7L jF'hu g3$5Rm ].jņjloD^aɆׯOK_X,s& x9e 76 > &✮I\EqM t};q[d>Hף|E_ ApNE%#\*q@Ё]x/ G܅bPm|9,6}tW Q4j8~ ؞"&wxAxfU[E,Cbh~f+6)E4
?&SՃ|xY|Qc;J3tkXV9 /iT\EhCc/_#)X@D`&D;y)J_wГFCϣJ2 uy-\ILvk}l.Fk7-A
cCT2+1DjXzia MrT!nJKYڎnGE1۽`jmCaϹVz=ɦNCkyCW
S]֧ |$8Y\_P[?9:-ִ|($ 6Ӥ2 %>SuDԯ o*]`|K Hy/s:4O=zt?? pǻ;7z
zSKqZUENBo"
]9}mO+qȆƏys=ŚTEvWnCD*hg8M ,)i\P|B1tEW9uCZbH'm"]%<7eNիu"ia $tYPJj
CtX,
;}Î7p( 담%]n"+'DG%zP]1r7~Jt+fY2P&I'hr@/1BAJ
SiGt`['3}l"q*G
} @'EN}߿7GM"ϑǿȓxN U ͧ Ne) v3p,W5idPaWg ҨcKkX&Vk8 g}O1#?Fe8x*&C-zjSd ۢV/gp'M8Rx
푪?63=ɳ' ʄ!i0A촑| nx/y-]tjAKt
˽ʚ*"[;Ǟ-m*e9;1jx 'k* )-2E9ܸ/Jiz 9r}[߽boWN:J-HBR>b':n?N8/'A-9QsԖHtG.RНB?vU:3 Ǹ &Rխ2{:dƟO.~64GFs.qe$ UIT$p _sX~neOj8W]e`L#m:RE n4(Q5WJݵSD֨) zk0 Ipsh㴌b}Tㅺl=[SӼ '4{ߜ9k|
6=` c%\[&:!q:WpsfʻM7S{RŨUo sR
4 YlȏeB}k QNߴ<+ua2οɱfb 1|⠽ٛ2=˛ڸ&ǐ ^VHdh]VۊKx c͜~?;vPDİ`+cz@Qުz'՟ oR2w{4NJi\!wPSb7$a}4-T,?-5 rêL ^OȩQ@3"C!؝+#Pdp\mXvEkȶ (=!lUDTJ:lJK ˪E 6Vӎv&3fɪg]|W9Ƀ? F ZmD6A Z(0 cw*I#q_8$uU A`Sz P$odl+jR# u4m.i|;7BԾM.?mI`O\il PNzWjO>eZ\-UѮĊ߇ d1a]zH{kF GY(v7(.S4ٞ *6+g#s -v ?C\=65d8(۴&#aǦAMw!|`_ h@BAA>?֭ Kyv_obъS`ƃ4˫A?P/=qf jid_b!c m*n#bQ$|8-= #+- ||oVkx{Hp
J8'Hy,* A,E \@ވ3;V t25ԑ} 2$a w )kHo PbV
-Cc-3!|んtW6~ tf
<.$_] <vg< ~齃ĹsjTnۊ7'?D7Lr S?ٗtC<)_I/`{sTIw;%a,TMkv T)=5|%ps: se
|obCԉʞ DF3Pq>Q+e fOp`䏡=l_+h՟vP ` 5UMFSq7(s4|,uo+0b5R2Ʋ /f;}*g{ˠWE){b^p+,4DEٲ ;BdԚ+i&rj%Ƌ=\)kMede.>d'% JQ
&zW["S"5jd q h7-|`VPJLܕUe/d<'K # AϞI+IV[)A uINو]
DϖZȭy ׃ >rhk#\
cNq*bf4 {O)3J7FIR2uҖ~VwfS^ƍA+<7&b-awmaa)k"H)Ք/ dqM pRj $pIo[rړ@~@,t &$Dx X 6a#Lv3
HZ(>*f4dXw6w!hyfi4Sɏ"r'}qC>D%̩Z$bCZܰ m IJu$ƻ1 E$A|W_Z"m UL*iI7q0Q O%yMz
us\uN|y
Hhؗ"yV- RPGwaĿs@4 2ϔiykuFzh.AQ=WrN{\ZNCft6 Xomxk xJ3X.T :*3u)1nAw&d ]ʁm^l@M24}
@W
GON
ڶ[Wp83eF$oJ ̳cIhA!ĵ ̕ ʿdM昴uzl(|e -r bl?ć:\xSv&Vuㆢi|{nhQ.P`$J5h{4,
VNPP '/@UޗzlGAM= lD&m(KdDɆ"5:P Rݑz^| J\6[h}Bߚ|bNb N D@uxKMgbBY}ةIDf@]gvgAT 鉏]$ KA7z7[ rI>^S\@Հ
/50ԙ媼-+h!*;jhAvK=l⛊:fCK9U4E6@j.o+
P/I@zMzg`?`pBV} ~B$Emv@,3}9xz}m`$ݾ\J\ 'eS~1Ik% oG|ijXjʠiGWp8MXWp)NR9[+k pVAE lyӟ?D 8J
[HI*j2IC'(:W&">{_eӖ"I+MJ NMrԈ<9B,I9O6\]]P[(R#B(Np_U:i>>uL~0%0/} /SW~~$:
IU Oس/=ҶN}%ob-t[[yʏE[&r&#͆SE4C&I+KY,*] |"sG%a'~ sBG+0ԃ%'"6>F[ o8/&j^M YD`Tz+>OdQ
$xgÞS KrC-LHqiPfۈ/^չ5RJY8oG8ضzJ :|M J '~`;! `& Nj=slnNd5e4R$Ur5A$hnAjdP-LGW*9)
2V 2R-g5lKG3I:(b{)i2t)b!L1KRrmg#Fk
t%(72 .Iҿdj/ ,4Xb_" j)!IM`~84
#[ɪu,NmN_r q'N" ~0_̿V#a?H贇M3iJUvu<8=N^2P// }&r^hGNRϴ5&ipv]gڗ:|?@ETO ;.%ZL7W`2]0>yrj*$HZO%MM~ Үgdf?^IXzψ ed '>1=F/M"wC2c`bDx /\7cxvVSbv.'Kc:WӦ6S`X1M ѓF#Xt7 K(Ђ;
aۧ\pώҍ[]}43L5G1hi_l)ijQ-8#;b-~)eӻwA5vMl;OI%sb9J
sb;]糒 \fFrB UwG eKF^B;N Ǖ =O'Ȓ0GaKDq͢qCx3~t>Zjm
`5<4
F r>+k~ hNu#C:%\Pcz)Q3 % ȌJ'JSb 'c ʹ`Ux'9iC|xijF ,$_/
DF9;8sJM4I/ϵzbǖdL ܈0wi5xύ; C-in _PeA.'h"nb Gqz2'dB* #9\;:YV芢&c qZGb Mt&2Mm"甥C-{,wƇ鮮`pr?ԝU7%IL NE [8C V gN0# Y Ȉq\c c&}Tw(HFѐTZ6*)*^\!x!qQɴa\ UhB_5è]%qOȀ;& 5I L^*;+()j4郱 Q.p4qcoÂg*O`l\ ϭ}J}ICv 3+gG k)ȱ4EpY5iYwY37 #=G~~ˬד obilE0lDI WO=#p?@'5=0˩/eT3
]ڕ]Nv
Q