openvpn-2.3.8-14.1<>,!Y/=„/xRKpQx0;9n'ڭx'krIr++1)_Ja:~wpa'o8L~_PW~kPO3'_P vzޢؠ u]eX馻{4{0"Ε;};^z˻Mq&Xgr׏e g׮vS47O$sL2=iZ?>AjbLNF, O::۩3ڡZ:,R>@~?~d   Nhlx| $ KDK K pK K K TKKK n K!!"<$z($8$,9%`,:',>m?m@mFmGmKHoKIp0KXp|Yp\pK]qK^ubwcx)dxexfxlxuxKvz w|Kx}DKy~pz~Copenvpn2.3.814.1Full-featured SSL VPN solution using a TUN/TAP InterfaceOpenVPN is a full-featured SSL VPN solution which can accommodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. OpenVPN implements OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN runs on: Linux, Windows 2000/XP and higher, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris. OpenVPN is not a web application proxy and does not operate through a web browser.Ycloud127._openSUSE Leap 42.3openSUSESUSE-GPL-2.0-with-openssl-exception and LGPL-2.1http://bugs.opensuse.orgProductivity/Networking/Securityhttp://openvpn.net/linuxx86_64/usr/bin/mkdir -p -m750 /run/openvpn test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in openvpn.target ; do sysv_service="${service%.*}" if [ ! -e "/var/lib/systemd/migrated/$sysv_service" ]; then services_to_migrate="$services_to_migrate $sysv_service" touch "/var/lib/systemd/migrated/$sysv_service" || : fi done if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ -n "$services_to_migrate" ]; then if [ -x /usr/sbin/systemd-sysv-convert ]; then /usr/sbin/systemd-sysv-convert --apply $services_to_migrate || : fi elif [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset openvpn.target || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in openvpn.target ; do if [ ! -e "/run/rpm-openvpn-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-openvpn-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done fi # try to migrate openvpn.service autostart to openvpn@.service if test ${FIRST_ARG:-$1} -ge 1 -a \ -x /bin/systemctl -a \ -f /etc/sysconfig/openvpn -a \ -f /var/adm/fillup-templates/sysconfig.openvpn && \ /bin/systemctl --quiet is-enabled openvpn.service &>/dev/null ; then . /etc/sysconfig/openvpn try_service_cgroup_join() { local p="/var/run/openvpn/${1}.pid" local t="/sys/fs/cgroup/systemd/system/openvpn@.service/${1}" /sbin/checkproc -p "$p" "/usr/sbin/openvpn" &>/dev/null || return 0 test -d "$t" || mkdir -p "$t" 2>/dev/null || return 1 cat "$p" > "$t/tasks" 2>/dev/null || return 1 } if test "X$OPENVPN_AUTOSTART" != "X" ; then for conf in $OPENVPN_AUTOSTART ; do test -f "/etc/openvpn/${conf}.conf" && \ /bin/systemctl enable "openvpn@${conf}.service" && \ try_service_cgroup_join "$conf" || continue done else shopt -s nullglob || : for conf in /etc/openvpn/*.conf ; do conf=${conf##*/} conf=${conf%.conf} test -f "/etc/openvpn/${conf}.conf" && \ /bin/systemctl enable "openvpn@${conf}.service" && \ try_service_cgroup_join "$conf" || continue done fi fi rm -f /etc/sysconfig/openvpn || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable openvpn.target || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop openvpn.target ) || : fi/bin/systemctl --system daemon-reload &>/dev/null || :a$ à)%FF 5 +bFBBp  >>?) . C h9SAA聤A큤AA큤A큤A큤A큤A큤A큤큤YYYYYYYYUZ4 UZ4 UZ4 UhUZ4 UZ4 URUZ4 UZ4 UUUZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UYYUZ4 YYUZ4 UZ4 UUUZ4 UZ4 UZ4 YYUZ4 UZ4 UZ4 UZ4 UZ4 UZ4 YUZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UZ4 UUZ4 UZ4 UZ4 UZ4 UZ4 YUZ4 UZ4 UZ4 YYUZ4 UZ4 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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenvpn-2.3.8-14.1.src.rpmopenvpnopenvpn(x86-64)@ @@@@@@@@@@@@@@@   /bin/bash/bin/sh/bin/sh/bin/shlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.0.0()(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)liblzo2.so.2()(64bit)libssl.so.1.0.0()(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)pkcs11-helperrpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)systemdsystemdsystemdsystemdrpmlib(PayloadIsLzma)3.0.4-14.0-14.4.6-14.11.2Yܶ@YI@Y@X@XV&@U@ŬUU'T|X@R&RΏ@R fallout. - Permit pool size of /64.../112 for ifconfig-ipv6-pool - Add MIN() compatibility macro - Fix directly connected routes for "topology subnet" on Solaris. - close more file descriptors on exec - Ignore UTF-8 byte order mark - reintroduce --no-name-remapping option - make --tls-remote compatible with pre 2.3 configs - add new option for X.509 name verification - add man page patch for missing options - Fix parameter listing in non-debug builds at verb 4 - (updated) [PATCH] Warn when using verb levels >=7 without debug - Enable TCP_NODELAY configuration on FreeBSD. - Updated README - Cleaned up and updated INSTALL - PolarSSL-1.2 support - Improve PolarSSL key_state_read_{cipher, plain}text messages - Improve verify_callback messages - Config compatibility patch. Added translate_cipher_name. - Switch to IANA names for TLS ciphers. - Fixed autoconf script to properly detect missing pkcs11 with polarssl. - Use constant time memcmp when comparing HMACs in openvpn_decrypt.- Try to migrate openvpn.service autostart to openvpn@.service instance enablement.- Fixed to enable systemd support in configure - Fixed openvpn-tmpfile.conf to use GID root, there is no openvpn group. - Added openvpn.target file allowing to handle all instances at once. - Fixed to install the service template correctly as openvpn@.service. Use "systemctl enable openvpn@foo.service" to enable instance using /etc/openvpn/foo.conf. - Disabled systemd variant of restart on update rpm macro, adopted other macros to use openvpn.target to e.g. stop all instances on uninstall.- Remove _unitdir definition, it is provided by systemd. - Install service file without x permissionsUpdate to version 2.3.0: * Full IPv6 support * SSL layer modularised, enabling easier implementation for other SSL libraries * PolarSSL support as a drop-in replacement for OpenSSL * New plug-in API providing direct certificate access, improved logging API and easier to extend in the future * Added 'dev_type' environment variable to scripts and plug-ins - which is set to 'TUN' or 'TAP' * New feature: --management-external-key - to provide access to the encryption keys via the management interface * New feature: --x509-track option, more fine grained access to X.509 fields in scripts and plug-ins * New feature: --client-nat support * New feature: --mark which can mark encrypted packets from the tunnel, suitable for more advanced routing and firewalling * New feature: --management-query-proxy - manage proxy settings via the management interface (supercedes --http-proxy-fallback) * New feature: --stale-routes-check, which cleans up the internal routing table * New feature: --x509-username-field, where other X.509v3 fields can be used for the authentication instead of Common Name * Improved client-kill management interface command * Improved UTF-8 support - and added --compat-names to provide backwards compatibility with older scripts/plug-ins * Improved auth-pam with COMMONNAME support, passing the certificate's common name in the PAM conversation * More options can now be used inside blocks * Completely new build system, enabling easier cross-compilation and Windows builds * Much of the code has been better documented * Many documentation updates * Plenty of bug fixes and other code clean-ups - Add systemd native support for OpenSUSE > 12.1 - Adapt patchs to upstream release: * openvpn-2.1-plugin-man.dif > openvpn-2.3-plugin-man.dif * openvpn-2.1.0-man-dot.diff > openvpn-2.3.0-man-dot.diff - Remove obsolete patchs; fixed or merged on upstream release: * 0001-Use-SSL_MODE_RELEASE_BUFFERS-if-available.patch * openvpn-2.1-plugin-build.dif * openvpn-2.1-systemd-passwd.patch - Rebase specfile to upstream changes: * easy-rsa is not provided anymore with main package * remove %clean section * autoreconf -fi is no needed - Update openvpn.keyring file for upstream release asc key- Join openvpn.service systemd cgroup in start when needed, e.g. when starting with further parameters. (bnc#781106)- Verify GPG signature.- fix ciaran's previous license entry. the license has a SUSE prefix- Fixed openvpn init script to not map reopen to reload so the reopen code is without any effect (bnc#781106). - Added requested OPENVPN_AUTOSTART variable allowing to provide an optional list of config names started by default (bnc#692440).- license update: GPL-2.0-with-openssl-exception and LGPL-2.1 openssl has an openssl exception (also, it is GPL-2.0 only)- Fixed SLES build readding Group tags to sub-packages in spec, not require libselinux-devel on SLE-10 and datadir/doc cleanup.- Updated to openvpn-2.2.2: - Warn once, that IPv6 in tun mode is not supported in OpenVPN 2.2 - Pkcs11 support built into the Windows version - Fixed a bug in the Windows TAP-driver- Fix source URLs.- add automake as buildrequire to avoid implicit dependency- Marked /var/run/openvpn as ghost (bnc#710270), man page and other rpmlint warning fixes- BuildRequires libselinux-devel - Use SSL_MODE_RELEASE_BUFFERS to keep memory usage low, sent upstream as https://community.openvpn.net/openvpn/ticket/157- Add openvpn-2.1-systemd-passwd.patch / modify openvpn.init to support systemd password query (bnc#675406)- Updated to openvpn-2.2.1, a new version series providing several new features. This version fixes build issues and provides updated easy-rsa for OpenSSL 1.0.0 (fixes Trac ticket #125), - Adopted spec file, enabled saving password in a file and to specify an alternative username in x509 cert. - Removed X-Interactive from init script again, as systemd isn't able to use it correctly [any more?] (bnc#675406). We will address it later and probably use /bin/systemd-ask-password.- KVPNC is unable to parse openvpn version [bnc#679153]- Added X-Interactive: true LSB tag to the init script.- Updated to openvpn 2.1.4, providing several bug fixes and improvements, such as: * Fix of a problem with special case route targets * Try to ensure, that the tun/tap interface gets closed on non-graceful aborts. * Several AUTH_FAILED reporting fixes causing the connection to fail without any error indication. * Enable exponential backoff in reliability layer retransmits. * Proxy improvements Please review the ChangeLog file for a complete and exact list.- Do not include build date in binaries- Improved netconfig based client up and down sample scripts.- Added netconfig based client up and down scripts to samples.- Updated to openvpn 2.1.1; linux related changes since 2.1_rc20: * Fixed a couple issues in sample plugins auth-pam.c and down-root.c. (1) Fail gracefully rather than segfault if calloc returns NULL. (2) The openvpn_plugin_abort_v1 function can potentially be called with handle == NULL. Add code to detect this case, and if so, avoid dereferencing pointers derived from handle (Thanks to David Sommerseth for finding this bug). * Documented "multihome" option in the man page. * Added a hard failure when peer provides a certificate chain with depth > 16. Previously, a warning was issued. * Added additional session renegotiation hardening. OpenVPN has always required that mid-session renegotiations build up a new SSL/TLS session from scratch. While the client certificate common name is already locked against changes in mid-session TLS renegotiations, we now extend this locking to the auth-user-pass username as well as all certificate content in the full client certificate chain. - Improved openvpn init script adding messages giving a hint about pid write failure and to look into the log messages (bnc#559041). - Added -fno-strict-aliasing to compile flags in the spec file.- Updated to openvpn 2.1 2.1_rc20, fixing problems in route and option handling provided by the from server (bnc#552440). For complete list of changes, see ChangeLog file, here just the IMO most important: * Fixed a bug introduced in 2.1_rc17 (svn r4436) where using the redirect-gateway option by itself, without any extra parameters, would cause the option to be ignored. * Optimized PUSH_REQUEST handshake sequence to shave several seconds off of a typical client connection initiation. * The maximum number of "route" directives (specified in the config file or pulled from a server) can now be configured via the new "max-routes" directive. * Eliminated the limitation on the number of options that can be pushed to clients, including routes. Previously, all pushed options needed to fit within a 1024 byte options string. * Added --server-poll-timeout option : when polling possible remote servers to connect to in a round-robin fashion, spend no more than n seconds waiting for a response before trying the next server. * Added the ability for the server to provide a custom reason string when an AUTH_FAILED message is returned to the client. This string can be set by the server-side managment interface and read by the client-side management interface. * client-kill management interface command, when issued on server, will now send a RESTART message to client. This feature is intended to make UDP clients respond the same as TCP clients in the case where the server issues a RESTART message in order to force the client to reconnect and pull a new options/route list.- Added network-remotefs to init script dependencies (bnc#522279).- Updated to openvpn 2.1 [2.1_rc18] series (fate#305289). - Enabled pkcs11-helper for openSUSE > 10.3 (bnc#487558). - Adopted spec file and patches, improved init script. - Disabled installation of easy-rsa for Windows./bin/sh/bin/sh/bin/shcloud127 1508840078  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJK2.3.8-14.12.3.8-14.1     openvpnopenvpnopenvpn.targetopenvpn@.serviceopenvpn.confopenvpnrcopenvpnopenvpnAUTHORSCOPYINGCOPYRIGHT.GPLChangeLogPORTSREADMEREADME.IPv6README.SUSEREADME.auth-pamREADME.down-rootREADME.polarsslcontribOCSP_checkOCSP_check.shREADMEmultilevel-init.patchopenvpn-fwmarkroute-1.00READMEfwmarkroute.downfwmarkroute.uppull-resolv-confclient.downclient.upmanagement-notes.txtsample-config-filesREADMEclient.conffirewall.shhome.uploopback-clientloopback-serveroffice.upopenvpn-shutdown.shopenvpn-startup.shserver.confstatic-home.confstatic-office.conftls-home.conftls-office.confxinetd-client-configxinetd-server-configsample-keysREADMEca.crtca.keyclient-ec.crtclient-ec.keyclient-pass.keyclient.crtclient.keyclient.p12dh2048.pemgen-sample-keys.shopenssl.cnfserver-ec.crtserver-ec.keyserver.crtserver.keysample-scriptsauth-pam.plbridge-startbridge-stopclient-netconfig.downclient-netconfig.upucn.plverify-cnopenvpn.8.gz/etc//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/openvpn//usr/share/doc/packages/openvpn/contrib//usr/share/doc/packages/openvpn/contrib/OCSP_check//usr/share/doc/packages/openvpn/contrib/openvpn-fwmarkroute-1.00//usr/share/doc/packages/openvpn/contrib/pull-resolv-conf//usr/share/doc/packages/openvpn/sample-config-files//usr/share/doc/packages/openvpn/sample-keys//usr/share/doc/packages/openvpn/sample-scripts//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -gobs://build.opensuse.org/openSUSE:Maintenance:7411/openSUSE_Leap_42.3_Update/607938a45a07ccb3299536d8e3148f6b-openvpn.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux  directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 3.0.0, BuildID[sha1]=11314c2ba28936732bae4112e0ca3ac7a69839fd, strippedBourne-Again shell script, ASCII text executablePascal source, ASCII textUTF-8 Unicode textPOSIX shell script, ASCII text executableunified diff output, ASCII texta /usr/bin/perl -t script, ASCII text executablePerl script, ASCII text executableC++ source, ASCII text (gzip compressed data, max compression, from Unix)RRRRR RR R RRRR RR RRRRz .vx pL C9*W\ h:!i=#=}c l 8{!T5 G`9I#CK cGn #{52UV20pd?vnWVoZ+99YT+a[FswH/Sfka\Z,Ċ6Hgy*6%xkԅ6*?s\G8I 1pߊ H{]9b~!'J-?ʹd4bT\"\5^ &1gJ`+ĩ֒[0AE*T l Kg&aPW3M ݘNDq'΢nH $2(ւG!WlP} 掉V~"@#_ ׃}Y-Jȿ9yZ c5#Ww؏Ko;g:N%3b,pMi7'Bo@9Dpm9;]D ?dH+ڟ1Sc>}{Eg2':`޴%X!#!'a&mVw5&}itC/;qʗGJ܂8F K&:BZ;fgЖ|,DX)t̑id彧V ,x 4WZנ~)u3L(q_Ԗ['~&ieX Jpf7t& g$GP%[n_HZnZa3xpV%J]yxwZ`E8;FVRyC6c1l!&|da^XH*oެ_5|;^4xR;GiU\_ Lˎbfx y\U+MO4C 7+R7sCoK^qI'ӏ"nCbäE˻ώ9cAojh$QaˮX'EV|~Bh'**`@JF-i.vMW!l?4I;퓎L5NMeP= mb4?V\3t7n37Y-H1FbAy'ߎ's+T*p_pgdW1Y4'x6ޞ}1g늵@̮~<s g  /. 3{3>Mlnxk q#W9TCM=:ɀa2|!HB+jK$§}|qj !Xrh8[}8tl]y?3֑V& @`}P [JmUx[ד^b[=8I S`lV}f&ۈlg^LoAAAlUdM uP[^MX(Y?Yhwu@U`ȭ{&Pw4Hx +TɭzKy5$$>8:K.D W{ѪgETboݨH\ EN &&*~'wJ4dg5CP: \4 }\3´ߥfj˽G p+bg/^ 33A6?n쉶A0;6!cks>-dn"X@tF7B%\@c+!5:<+N9aZ6Ub=1w|!Eüx|V^m:IHSc\*tM\0lNvD·=@U>0G-/z_٤c=&'ܷI9Eo'< Y`Կ6B;F4㌅ ߖuNBD KF۳M6?X.e'׌ͱ? RYLue5䄌"$ տe/ 8Ն /[2t=*8QRލ\[a$d#7\v ~6N2r~U_名k ?NxHuP)5{TEp"O깵i´[|f=ADod85Gcq5Ũ <=PIAO}cQ$[Tj3X)~M9!ɿ,6K*w/.1d\iאDi(R^ 4-0ǐ s5Oc@a}f% \f5Y>QxH:W@5˯`*aGYqd+!\. xH ~R XfoZӳI\˦CumxrK ~Փ3Н0_|y{/&ùSH/M_?Y62H6dp61@ k\~x^|[4"luk#gMy> [oIN~ "s/#/֫<XAx.x+pem.VVCs`qpAˍ|?;i4 |RknV](\ҪYMj'smdh%Y#~uW^1dT kEui#lK/V[pȇY:o^mYGe?:~jA&bK sNo^(X>}Uu"n}iL«XseT%?EXE8/^V|yWb?=\Xly Fq}(_9XRV\&F-gw(IVS*gNht}ez[{ˍ!$D3n次kBaz&nKAļr}\u;0ޛސ٪GOhFRnv#-Ǹ)u,{M=)Ir!?7Wz] >MȓI{,k[z/Pe qC@񘭵"Oj1jǮ)EZƒ9\^x3;!zv4R[<ݧ`$cb'1#zN  ;eC ߤLV,8nSƉbKx0nsw -ШUdx$r }|; F~e{Wlto!ۇC_~@ 5\qesLr8خ )ۻy8l²blzv^eEzeyonM^PͲ9o{QӈK(#\LGIp-MP]3? Rt+\i34{%r~: {ȨנG4g)AyJ+%zmhG qυw p֐/`> `8G%=┇dtp'὆Gl nR|#xI=#$}16`Exa`wN=|z ըlaD'ThhŽ PȂ]Y!x]MjFAV0-Ke4Tzn`](\xo*7ݦ7FUpG1&eĄQ>%1e$o#>/%gσiVYDjIl `EX#KǴOE2[bd>haW+% "y*]Lçi`xℂVf.LG-v-0~.dl%|tL?Y;ڛ4ꍍ~y"p{_&pݨľ|VCpQ槪R/3&m/A;SqQ7,RDV|! WsW/'(XJ=OFglrjjw5w藈ՠß1gpWa*yxL8=$[Z/Vxq(/L"gy:67$o0zڋG܃o]]mZ&3Q6\\D&'B7ܼᬀYGГEv~7٥/1ҕ-̱Pd{0Ҟs:cV9s|TMM!_,T跿-5` 8-ɥ&#.y,ڊ#iCs?PNL&ÿifS "і%5#_ -a k=іcUHcޗ 3Ȅ,@ah;=炏y=Hᔲz_KoYH^M>M˥ m_2|1 j晅Y9ʫ(0OoZr9ڭ*MT_CȒe QYcoqբv]vJ"aLlb}[݈֒ţ}(KmK=vKV96uzXF/P`t٧%C=^N`b⧬@aj+&KԼp6qA2i5љW7(2ր2x:\>*XdKz|+Dw#<i7b> V^.i:|eǺB)O5$qQ3sVJ4_0Si|BC36nT6)kRq| ҕx 5kzu8ߢۢGDW"a-71clW8JzN`?; XbUbVqY!'R1JKʚ?Y_vӂxps6;y_^Z+Kgg ,[ZTA`u3sTBq# uFx~Tt1FM&2&,~Y_s}C"T㭒FP`-ڜ`ЈB=4Vtv;9<Zieq'EDrnWSA-ήdI"w#k Sy7lNgפz᭳lehtZ U]* mͪ0 =+^"ܽnG:*n}D쌙(ڧrsgr+EtYqf~&H&C4qC0ͯoII8%TK؊D9t #LuC]n)Mu&̣hx$!Q?Sʞ͑$aGf_qJ8tPTYNaKL(c^LF\Q@'@Ud][ó" ƺ: |'}#!1•Q"S"LT\Uy|hU.UHgq5 ü:@mjZ.yKE!@˹gytl vJMd k lZ|,*\hmGN"K9t4^[l])ߕwҢ5Yc3[j' O#:X/̳߼.J UCV6-/0x_HnB@z4!1C~Fl8HOxdN?o{\BF+gKS9GH~LN8P7-zE Zvy4~H 4LIP*Ve؄7,ė8ЙPY yPlZA~ln ÝJ,yѬ\)! PhRC 5W7,gl.#,+h'L2`@%FU:1D)m9 +f+FW˞SgbUI ʕ$bF.7$G\/߳njea'(3K9FaJv>n5ΓBB}D^M\dR%$Jb>Hyu uw0p !ԡQW}tD yә@bP*_a)Ynz0eP0RK2B0B(=u޿XD2_4v=Z2 $%ԫnb7D(*F6f JQΫ |w3ȅvd8@ⷬ.$IbC绱·T1ZoSx?*$58؏h2U,WtԼ `v~E%*B1#! IeD $bKse[; ij Vnz?wyJߙN'p=j{;쩸?顁mΑr =TN*(UMC^,/_SH`XT0EXB1ͰRZ˨W3XɓrAZWt¹{>eNQ1!:x(so &[r*jX]`mliOvVC͑4pn̎,rcN$=IY->V|'s> KMgEG'lJ vhV yp4&Ib/1e>'Bï'_ȱ8%Wo*'׎(lk1SHK3;X2@vΣ|^@n&h C5䪇)аSCb[\s9>[4)E?U^gg`¶K'z]Uƶ' q>Jxqm$ĞĢmK%V!fс=iT{7<shv\e*"Q6jh .}CcJUЮ7jQ%1uK>8P3蓪laHu&jB:C7[Hb\RV@bx^leʽN1Cy-z6o*`pWC8>= b3>ϒ*]G]g[iH؟Ln:>lq9TNoWcWW' t('[|f$׊60y JE.&{)~nWp#2 4Iqv*>p0h{sT:P@zk 8gbw =X@VdFqjź&_CR7,nMjtƳ.E]>W]Q0!"Pod7"܏Qbh<8DZakt_:<(a R l[W#U%H~}K]#Ԗ` ^YVjc1_{VkoK2*s۶j3a  V9v`I <&U򟻹X?3|䊦£ G~iw