crypto-policies-20230731-1.git3177e06.el8 > 6 6_6 3!pQp)Tξ7]mtZ`dɧL ]mtZ`[U23q0 ˤY2TK%=+-וY=h}y/q:TK,XNQSmy(j/mt%;HWP@B5 H tCiS <}o,72Ib+מAO22tܷt&P]dVp=;Sဲ2qʍ+0 xꮊ.HvgwSxvTftonӍ|/VL9rVmՂE9F V*u ݻן%3%\HI%sW.?m9rI3#&DCHJOػbcNjT ;B9 5GUdܨ@&V&2_EdbvLrݏvOpDH?8d , H # AM(t      ( +h-03r3566467,7D7p(787Z99Z:OZ>tBtGtHvIy8XyYyZz[z \z$]|p^bedefltuPv 4Ccrypto-policies202307311.git3177e06.el8System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.dɗord1-prod-x86build005.svc.aws.rockylinux.org KojiRockyLGPLv2+infrastructure@rockylinux.orgUnspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do if fn ~= "." and fn ~= ".." then local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end end+-++0-*.4.1^,*$&KgpVS|k)[@DOOeK}^,KgpVS|k)[@DOOeK}i 6 ByZ{g@3AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤dɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗd".dɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗdɗd".dɗd".d".d".d".d".dɗd".d".d".d".d".dɗdɗd".dɗ83a2076dd8d50ff7d03a29347acb98acda4df906598010bb3785b40025d0df08d411eaa8c61b8e5999db44338913a3c043c30612dbec32323fc3f2cdcd0aba7e88909076899834087ed25a88544e0fb0464becac536c38713dfdea2539d83ec1eac3d00644f5b9ac59296ff888399c00a568d885fb3188d481a0f3fd7543c7c76e6764cdbe50f15dd04226fa815d7e31dffeb555e5393fb48778f75ef411acb39d0c42289b99760aa2079eb88be6b75fa5d5f346b6939ce4fd8cadc67cf04d9fc41999ccfcac3995b0cd7e5658c054e0ae899cd9b20165899ab584cb096809aa3d3c6acdc4f04733dc586be2b3ac59d695c9d81232b9a77ac0f4f5db1715b2b62e987e5e2de34104ac58fc808941041d6f1ee09f5266440fbc5275208a75c3bb04794651f763a547d662f93bf5080d8e8577fe5f0c417643611f4404ef49891d045143ca7d24f661ee4c96034639efd72ecd1dfb0fe555f66dacb144b0e74605ba4270b9936adcf4c33dddfda2bbd66228bbb833fd222344198b66f439de641bebdecc00b137b3d663a15c1a3b51c4bcf564146bbcf56c31dbc6d62eaa023ad0f1f7a522e043da1695684a4cc36dfb157dc88185a955c52189186397b9da811bf13c7ed127764aab9e626e84b99061a0c6a6a71ecee3dfe821eefd2f4d97067917c9621cbd4a12bd0c548a16ae61f858284de1472326996e12140985c6d28636e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855ffa3482faff8b9c39e8f4496aab37e93c694c758c67876eb4d6e3dbefb9f3ed53297ada25f072eafff0a6b217030d100875107296af6fe20ec4f33025e672eade0495c3620a57e37e9e2a11ef1e8a3872dc90f1ac8c08723782b4907f51bc2b56a6f9adb963a3027ffe09ebd117121485dbec9ce90775de7fb8b68681f0272469dffea07b98463ba31b00fae7fcbf647093f0297d851b5b303c91dbbed57806825aff7c3110a3b9efc3d802cb41d11f050e0e53f56a0a89b163df7542aec8920562e932d140cee466930e12507058a0d505f6f6b96f739cd12136f271de35783c0e2a5b4f0bcb22c6be13547488c97b78881013817dba3f26e3935b1ba763ad90c1e430ee375bf679019a42098629b7cccc6ca5a530479d787c5fde204da1cb78aa799cdf385605ea5fdaf0403aa38c961c5e2447d15e40ac0e45f4fede0bfef34de906b1f266ebde46ba23fd3b116027ee3b729d693ee01bf7519908b2f2b1c80135a9478832c42bcde2360bcd42db5fa4617d0315b89a4a524de6eabe1fffc1c9b17757243c929f310d96a9e2290060aa7eef033f2e8313ae4e2fd9622d3f7f52c655a21e1ec3d5808d93e1291891ae7973452d1de9480a5282c02ad07bc7f349bd6fbcb1e70eaf8606e577e35ab4e31d3b931572b6074beb536020ff6e52bceebdc0d2f7fee87d53fcba8ee56a64fe3aa45da53bf2ae0486d5c5acc6fb10d66113891be8480442649d271480a1344005f324b562f8f8aa92f55038f0e6595cf5209c76c4466ba82e6601ccf301f7f533ae1262959ed178c8e1d056f26522cffe2d7ba292fc61103d11aea601bb575295f93e5a0c8a4795bd27070a57244b9f8457858da0d1525a481f232b3c17f367fefcde9adba63f5b500895214065074ba3bd8c5b9fd34734b37d1c60faf50f4120071f56381f5546e0d820aa189d8d5ee3a3567708dd4b79451deef173fe5b8443614d8fb81127dd91f98fb6ff354870169e028a7bff2080b17305e0c38fb6c0ec42d6f947470a087cc33c4c406ead6517bd55ba8e26d7ba380e928e35aeab9f662b9a71258ab0be964e3514391c2e77e55fd889d39c42b1a1dd8d6cf1bd7a890e0444c00e5f5bf5a8b7f8aeb3d2164588fecc57cd07a6e1260e7a6f44236d35a14b1275f746d7d4d609b2389a10270b1b2305bca75793921493bd1e786de310ad6ad7bc774dca812cba64e47b872a776bda255873294ec396bfc30294947c96205d654fa16ca1af40d37e82aeb0ee1fe33108d69c3e21b0b44f017f5c24698fb81b21a1d0faa61b465368c3fc19aa6ab40e36f58732bd72ef61c3a6621cd49c91023a37a1e5f1b8549f06cc0e16d12eac3d00644f5b9ac59296ff888399c00a568d885fb3188d481a0f3fd7543c7c7d3e55a1d7b74de21924b426062ff18e15422ce5c23db3f960daa4f485ff92e58134c7371e74a98e4d5ec637f496fa8a80fd662cb2bfdee700c0f3a305b7cfeae883325093737c8af4e9cf6cb6dcf9c079263168038a58667427735b0b30fe00a8e230fadfa6ef25bb3f732cbb15fa4b38503e9f4c3ba9a700e6fec5e8540987d0cb6cb8d52d825175f9511ea5a218668f74063b49ea45efa6d083d7d14c82a7d50e7761e50638529444b61710ec27a564278bc79bf238c7e719e198ca99a99d348f7bb745d8281c8ca773e610e20083ff1019cc973b82e419b477beae343f72683a2076dd8d50ff7d03a29347acb98acda4df906598010bb3785b40025d0df08d411eaa8c61b8e5999db44338913a3c043c30612dbec32323fc3f2cdcd0aba7e88909076899834087ed25a88544e0fb0464becac536c38713dfdea2539d83ec1eac3d00644f5b9ac59296ff888399c00a568d885fb3188d481a0f3fd7543c7c76e6764cdbe50f15dd04226fa815d7e31dffeb555e5393fb48778f75ef411acb39d0c42289b99760aa2079eb88be6b75fa5d5f346b6939ce4fd8cadc67cf04d9fc41999ccfcac3995b0cd7e5658c054e0ae899cd9b20165899ab584cb096809aa3d3c6acdc4f04733dc586be2b3ac59d695c9d81232b9a77ac0f4f5db1715b2b62e987e5e2de34104ac58fc808941041d6f1ee09f5266440fbc5275208a75c3bb04794651f763a547d662f93bf5080d8e8577fe5f0c417643611f4404ef49891d045143ca7d24f661ee4c96034639efd72ecd1dfb0fe555f66dacb144b0e7460525aff7c3110a3b9efc3d802cb41d11f050e0e53f56a0a89b163df7542aec8920562e932d140cee466930e12507058a0d505f6f6b96f739cd12136f271de35783c0e2a5b4f0bcb22c6be13547488c97b78881013817dba3f26e3935b1ba763ad90c1e430ee375bf679019a42098629b7cccc6ca5a530479d787c5fde204da1cb78aa799cdf385605ea5fdaf0403aa38c961c5e2447d15e40ac0e45f4fede0bfef34de906b1f266ebde46ba23fd3b116027ee3b729d693ee01bf7519908b2f2b1c80135a9478832c42bcde2360bcd42db5fa4617d0315b89a4a524de6eabe1fffc1c9b17757243c929f310d96a9e2290060aa7eef033f2e8313ae4e2fd9622d3f7f52c655a21e1ec3d5808d93e1291891ae7973452d1de9480a5282c02ad07bc7f349bd6fbcb1e70eaf8606e577e35ab4e31d3b931572b6074beb536020ff6e52bceebdc0d2f7fee87d53fcba8ee56a64fe3aa45da53bf2ae0486d5c5acc6fb10d66113891be8480442649d271480a1344005f324b562f8f8aa92f55038f0e6595cf5209c76c4466ba82e6601ccf301f7f533ae1262959ed178c8e1d056f26522cffe2d7ba292fc61103d11aea601bb575295f93e5a0c8a4795bd27070a57244b9f8457858da0d1525a481f232b3c17f367fefcde9adba63f5b500895214065074ba3bd8c5b9fd34734b37d1c60faf50f4120071f56381f5546e0d820aa189d8d5ee3a3567708dd4b79451deef173fe5b8443614d8fb81127dd91f98fb6ff354870169e028a7bff2080b17305e0c38fb6c0ec42d6f947470a087cc33c4c406ead6517bd55ba8e26d7ba380e928e35aeab9f662b9a71258ab0be964e3514391c2e77e55fd889d39c42b1a1dd8d6cf1bd7a890e0444c00e5f5bf5a8b7f8aeb3d2164588fecc57cd07a6e1260e7a6f44236d35a14b1275f746d7d4d609b2389a10270b1b2305bca75793921493bd1e786de310ad6ad7bc774dca812cba64e47b872a776bda255873294ec396bfc30294947c96205d654fa16ca1af40d37e82aeb0ee1fe33108d69c3e21b0b44f017f5c24698fb81b21a1d0faa61b465368c3fc19aa6ab40e36f58732bd72ef61c3a6621cd49c91023a37a1e5f1b8549f06cc0e16d12eac3d00644f5b9ac59296ff888399c00a568d885fb3188d481a0f3fd7543c7c7d3e55a1d7b74de21924b426062ff18e15422ce5c23db3f960daa4f485ff92e58134c7371e74a98e4d5ec637f496fa8a80fd662cb2bfdee700c0f3a305b7cfeae883325093737c8af4e9cf6cb6dcf9c079263168038a58667427735b0b30fe00a8e230fadfa6ef25bb3f732cbb15fa4b38503e9f4c3ba9a700e6fec5e8540987d0cb6cb8d52d825175f9511ea5a218668f74063b49ea45efa6d083d7d14c82a7d50e7761e50638529444b61710ec27a564278bc79bf238c7e719e198ca99a99d348f7bb745d8281c8ca773e610e20083ff1019cc973b82e419b477beae343f72685907f2a81cec2526ecf94651b3aec8c26a84a57276e0f75ad23a3f45cbc01d0135cda15eb47d015eb167c23f9de9e8f8862f6a63c368da37ee561039925b48399815e61e04947118f78fc5dd8eec44d6832d70a730f6a2f870f1f85ca27bca3c8eb8abf4f48d0c01eef4a2aeba26245c104d9b9ab4bd33f12ca4d1e96bc114f2799280c661386978170085587d3ff1d413244e3b71ea713afa4eb712fefab5097640caddb6bf62cc9176c315717953efda070f9cf2c8278d6c7cacd2a1b03a1d87cf8c07761f58502dd7d877a8f723f30e974ddefc10698893fbefb2cfe325fef91b3d09da2fe89c8520a14da6965f652909ed8e98a74138b3e60118c053e494eaa31cf4c5bf6a6ba0b7b6132faf9712f1eb4f58a922f3e9d2d86e5a81975362c36639722c6bf74ff296a606d65fd806e54dd1a2af26871efd139efc208c588794c920c441c18f95f2626d34402d9ece7689686e83e3db69201980adce0cb3369121b6719a4a96cb77bf2372cb58a389b08726e4448b1037b70ec9950af10486095e9ffa777dd22839f7801aa845b31c9ed07f3d6bf8a26dc5d2dec8ccc0ef3a773e0adf86974db84ef5906242907827e4c3d5fb632a5568a6659e15679bcf9/usr/share/crypto-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20230731-1.git3177e06.el8.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20230731-1.git3177e06.el84.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswanlibsshnssopensshopenssl3.6.123.280.9.43.44.08.0p1-51.1.1k4.14.3dǢ@c @a@`9@`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20230731-1.git3177e06Alexander Sosedkin - 20221215-1.gitece0092Alexander Sosedkin - 20211116-1.gitae470d6Alexander Sosedkin - 20210617-1.gitc776d3eAlexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones - krb5: fix policy generator to account for macs - docs: replace `FIPS 140-2` with just `FIPS 140`- bind: expand the list of disableable algorithms - tests/java: fix java.security.disableSystemPropertiesFile=true - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20- implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20230731-1.git3177e06.el820230731-1.git3177e06.el820200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-8faffb0791f7c68c0cd6758f4e0657f3ed3381a7373c050cf1c1c61726b866332?7zXZ !#,qXn] b2u jӫ`(y/=[^)noq>/12YQkiţ|տWRA˦o=9)\P˳ο#Ƃ#ن5f:1 ;dh>:P]p1L N75++ց*p,y_8sg of@9㌙<$X]ʤ>ޙ* 5mV}5q j@($TsFfsP{5ڌz/0bUw./ ]+.@dG¤I\5N "ȞsʾPrCi|RejOt$ڶ彔0I "sX왬Y3lv#9!cpW&g$U0 v>"/FGܑGKӽ&ox}\aKX"#{A(S~3NESv&m[8*`U#W},j7I;g_(vpcx\49DR!3Zs[el*mJ{M'Lf%r8ʽ1QuodScl'ϝ_pH|!àTaxmK_ '@vBq3X}ֈ6q7y{%j*sD6g!gv‚sV9RGZrH* dk_Xb{"-Zr{FX_:zO~GhwEq9wɋӻ/[Nn'/~%8$ T} TqE\+ͦ;ZM ղXk?jU ~L5>Wnee46ajōs@Iu\_X3cM0j%9Mhm8v Nװsr9gÏtuG* b)8`Ls3J^u(h5r|{%x,nrQI#Jp5Ep2ׅ̎MwŀVtE|G^Jӱ"܃bNS6$K8DBԕ40 "] &nfĦ cslBE@Hw&y|4|#83. 'jdp1F|"pW 6FKkUwJ*߄a@l֔nvt)Y:jyJ^lםȷ# MR^{FeKVNX/ ;ؠ)o0}HzpGWl{tLa^h9-H:N>%2PR3GN4nql6 kovmU(D$%MI7ܱ+ 8\j/)*X8*c+(N֛pLVb8)(y`9[b>[s g}/jG˸/(ll5;IE :l\1ҧb@W籡\Nɛ )ohܡd&=+#PI1L*GԊnٿ\"9Uȉ|K<{O}f,*kg6ҍP7y)Y4rJ 9W)߬hu rՉnNYa"V'FljM:83Ӡ`ȖC5{!\vٗC`1Aau]8Cle2&)6Z(Eݮ`Y7rh9z9܌nOr#s`yM\\.8e?UqHT^ z ۀS֔]]sڈh>֐U)Yw%1)fz_O,Wavs UB ,6nթ$Z<4(Ny[r9KP_/o5[zTz+v!#dy@{tA U0ߞͨhp 6 W_w+gbD M)-K?]~r=x7+96x0`iT[-`|?TSmfU-tSLuè6B}|dkЦ,K(q)o&bˌ7*gEޛI{2.|"떣w\_V0aQ",zwCkcxxx2Ov4k Z S>M?FJ\8i1 W2{r(x:ӡy(_j`涢m+@ۄ}Y1"_Befhhzrv7UG/UV8^TG$8z&3;mq Hx~~[vU'GOl8f6LWb)ΒXxj{P]`tgF PkW.;s< P<<^ŷwuq ޲N\Y `soGrNaol QKcGEz>oW+ͪcJ{,#bLXCQnXeq-Vr<ԮSt 4X{lݑY6Ч1kxV=;}cPXiVܘYcf6A^X]Q=c2JmgH92:2|728 ʍڽoo{`h!{dgJaglHsuQyAsU7}K5dT>j^Hsق3&-P4njƦU"3m+N 3M,P(Xm)xc61@DKg )(z@kԭ[i\y\H~v/~ZKEMQ?TN) v`tr>/yUv1[5YU4%"'~~? l䣭{`[iE1].PMYu;U;ꩽu:cK&1 ֓@\RT xZB} |:㵕V D=!? 若Ʀ6W!}"ӵp*?s&:ߞ6Ar^LGma]: ,%z*Ha0<Ҍe$ еtL9$1xXX6I4sdzzAⳊ~G7$aBHnU儉MzS4¡\l ;A{CWf?sxiTzo\E` ,} j\dd3P}}RTCc%WjwoU/}6xA=})cNXut4CL;`=<,2ĴӐ`Yn/Z,VPhUէ KxAoHI2QZ\c&;}nq!:Y\D qH~;{c&-(PٳĒ4ڤߓ)`7F3aGcH_-n[HEwdܗ4=M%; ~yIKI מ(_Uq)72Wk']\`Q.x7H ?`±%>q\E=]kkSسu21'j1@%Kp.`9NU̾Wt0TȪ4 FM,$g4 Ť1=ton l\Hw tŶkY~TxؐÓ;ȇ!&8eU!ze ;v,Q mj}l\.0<& )I=jj ^OkH߫zTZ505HŐ$dj(3%2pOF~?Oh|2( |9o5UO8tGAv 0)yh$/ G;?9]ދؑ`8* J;* !A8~wЇ,v4 \}D[zsXw:[h'%&R dŖT++@]CQIx3pdeX*Cog> 2)2 nsEuIެn љMC|4CZ So q'^VSQljjE$^q-W =%( &#G'ne]WgUbPLp2cDm-NuL8S@%Tۺ CpdH% KgҋsKHe 5d ~'oӴ@A)P@4g^!LU'^Gpz .lh ^Kż 9AڔWj5譆nl0TNdŽ/Ja-6 S@zUd 唭6Vܽ6ݲJ9-şO(+1SMmwk:kdK eY \ bPh8h.`dǃg+kLMg~&jqQ/3v'@[VԻ՝IwH$4B3c\>-pyr!]gC ፂS&9˂UCa ݢk;*0jҢ+h"ȴV@Cd߷0@graI}uQͼ*Ԛ }^*iߢ,H1t#_.TX ^ ZhAG|U:fni"ޱ SW~LL uM,rP")?x=cuZ!=phqp0vssso-S^&f}8IV9N4( # CaG1!-@E[J $5(CJ6nNZEӝ,Ysa R>Ǻk%9"1_;yW; %(10n*&{M,"?+F]iq yyے;ӜILO5WL9LLا,G9 ϐBBG{/b ,pҊE]r3Ms#83EiH-gsc]q_[ϔ?Y`ƇGP5|!p^ӿ P̱cI6IJdL~>~kcjJB4];+u Cu£J"ck uAÞ^uyi󸃌v'I}>M)bg!?( 8o!c90*^=\cJQ M֟* [P3@fDˌ7AdeۦQfX:Q"; a) E#d=./ZvC.޲b:amu<.1Dj5&q/iCSlA߉{j1'Mr/kS@ע2nGGJEQ Q@|hjKlwgcfq`9u?Nluˎo0{q(NUZgn~~6m΅nD^i+1=9'? MR3ZM&.,30th)'S}g^rWnKx:'P~rfL_%H&R-MI Ȋ}fB6?3 xN_z^df\6V Mנ1Ue(Pʟ_CEj,/#KE39ly_ef!l4qhiVh4[R_vsvaَZdqt](l8y.M0:xeB XPAԮDlƑsaAư̆~[9W#$߃ O (%i rȶ~fJ~Ca;RG BҖKG c@9Sfr>(EM}N>E]kN(}e~-ҴDԘ*t۲frÎpM9ʄAgTQ[&R#å&5 4{֖_=uքyp%a2Mi䅅[eQU2A›Vn:LdlweO0/o/DaԐĢ9ptk;WF UXȗrɇm!9B>=_Z ؐ wdAi̤ ^u&􈽧XZ,+k:ͤ٬KChF*P螨mz/6ǿqˬ@³5ΉKɗ@g ޮˠ3x!|]u _$PA9t =( 8s$qe3T\)Knjzg4LG|C+C-X⠆N$"⻗M!َP;KB{)!Q}0uqOPjN']]*ƾ |!+n]?Zp!WhL%0Mvi-$Rp9-ItQiOYt@'cxTz+j ͯaL]5`mӢhh{ bI6[Ne-^>\BA|pQv^wo̴4b IyC~tbK} vַ*qitǗA33/Jzh)3 232C0]I>o{H1KDޢtB!EeDU Ř@ /|p)6lK X2VDef0yD6 P_zedt&bA $K*C0 C=+GU^iﻊP1`5X7@t*;R&-Bi'q 6U}ɔ*r=E!jU2dG_}>pXZ :8J bYc["d#L'{R)Tul$9O3MK'6IR`lAYtK5 -ZoOVQJelnuz~:+Sۤ7rP?%`l#*Z+\Uæ4T$ ]uhwnPb%^Z)ce/ǐe-[2&e O@=.jvDXCfqRe(hRr;LD 7a +HǺ"o9&҅Eʉ JRyDQ:^QwRMzO.Wn[ޝDgz2l~@S><5s}}Q*tF0Y8Eb1:xxJr@^%E0aݣ'<>Ҿ_D hJkuXjp8B,C蟆V0t<"0ŏ%\<Y@wj-<`!vI`/abLa-OuX!@W?6[O$1j*^ oBtRO}0JapIf3iNoߥ-G&n«WX V' 7 *!EnPA"F5hLU/+6w͚ 11zkY(-C@ݨ jF0@K7  ضevwiI:02eDŽ T3 >Nȳ :TL]anL;:SɅ(lP?̭r<n}d&@n'yϪ2J8zlSBWP4 FxSn:V;W,ZDI\Gc WY+nNi~O`hc5Z3q_S IZ R3L*07Db5q2$ /ގ+d|aTK7VΝF҅ c*8|\0i=wLfwx^15zB`MpfmMM4\8B41\|ap1C1i[Fu>h%|wk$킓AZt\*T [+6uP x6rOf%fj쁪/6et'OEF<Ȧye:SuEy% W,_~^/fq>,Owϡ9>n HX jA9P>},8a;me,X% DpҠEg Wdrn*ܻ(h[u:5k0;zL6F*%DCC<dq`p ]|Rм R'ω1QZCp\Bʰ+HǹEP}zE"8J( ~ZfS8$`|/0*i[4xʹ/}]a N^\& 6 ʏg2֨i :Kz'xލgE@@?~;ԁR Hƀ cN[p᱊BTN~إ 8%B+,Y] 1eV'Вݜ# 5#UP³h U-rH-SXV T^{<%$a#/ƶ,rؘno$ kLPB{΀\qƔӒ(;SδGrEݪ—vY##$c߹,[s:_B1:Chd&+Gs16ELo>xqMqA#Q{^(~ut^]T-%(iلAt|(r:0SxՁCRvLLmynH};m3a0gSR'O3!Fi/LJO w %δo'=ԐvVOܼHnŅe:ky>ljEy*}Х9u6I߿:?(~Cf˨HՙT-כT~i{X9xEː?kn B)wүEIu\eܔ m&N.o' <&.H}gDIaB݇CEK*y-wþ=+}O&>cTjװMfZ7]xIz ]y\rq.גmYDD0QE mk 9pJ3Os}e ^XI~dvMKOw?(bբ@00Ӻuw4'5/x5L27B) K؍4[O6NwefUC~x̀]:{RS/г(ǹUHLZ'΄|rޗ~G";܁ac;2Ssnn `t-Ks6c2gkNTf$25'xh|R23\(T{ mD:{V /W'ڲ6ʡW^6zN~j|K+g^X1:Gm# Mɟ@'0C qL\_3["/ȨE8wJ`OV|w;R4cm}-w 5xDnvnjH|sR^C ?NnV.Q\ ?%q>9 $/:k[F'qiL0NzꍚQGRNq-Ußg_NG$Rgie٥,+>- "լ{KY3 e6k7: DdSط!1BƪM8|<4цd*Fz?c epHm@ACimFk<K |0m:\!emϨ}[0?~ [ؓUzú6htKT:~t;$n@g>: b+.er?l]JjM -§u^d|]SA:3Eja2[=@1jDߣ?\=PN?c5:N]g8AkSScjLń6R=e=c}[Y+?/?оw ;,1v t^f-I$f-~૎{P8S1F?0]٤oe$ae۟.i7۸?,FO.s48|3O'm[S0'ω*FX'TZ͗y <eg8`M?%U#7[/B{USa15T{c%ڠv2|G fR4 pBǸc(9w;8:[rBȻKY2v aNꓑL?X4q{ ^Mc9r;NhbKIs z[U }m1 fVjFzb{ ؼ$`g\_|gꁍ!%.c@pp!%:ꌞ/g&.^i߸vϙʪV"Xz`qĠjEeuWe~L>A*oP6Q]-Cܘ_=S`jI֡'f~x؃%REt Ϋ 鲊7Le0v/i;62 Z5e遾Ts6SCUL.o5g}B˹Vv?; 'uiYb1cS4笠u(vӘ·ZI:SCXiAn V&MWU4 g|66Q- -WM+$'rťUEU #GJ=ñ҆U% " ٢qÖn*KĬT{1ػ~=x\}aW>"D$A@agn| 3=N>XA5cJg)#:t nѽL1

EJ UA@fG3{G/ո*iC7ۍ=U5dmԾSKQ ˕FsdF|A*3 ʾJy+Mq>$ kz?N|0E7ئ?VD{tPLBԏZ\Cuug#@]0H\R}F Xb.:Su]硨}"S1w''0 UɁ7`(w Es7 Vn{f{ j)!߅hؾÜe!ZEY[T$uH/_a%Ҟ"27\o+:,*7`8(M8@`#tW!#PdDҽKi$FdQ/`^Db^i kF\aKPS-K/8O3Pg I$v0f,NYph[q; >l*|cV4e"i >\)L,rmt8'0ϞgK{eYTI+zoT/.4 VW+9+eIJB-jz-ݼuQ2ӐOǰ?Fvf>7GIvsnY5T-lEDvXD&/i8;'THz /C뒯vc"@9W|ùmAiH$`dZO,껰/7޻3v.]ȘK~CT/7x[yYg %7HfKͩ}I@BkvwҎ1MzDz9P1kȲw_4Ǟp-Rq!?qŠ{3fSy⒜@ !v61=ʁ7ھN%3+K2 9ݯFG];]kv e h.zZ|afbj="qXoRSƆ)nu+nl,/r!TV7 򿜇NjO:}1+)u%;F׸[z8h5HEQ%i_! l'F &nd޾2ZزwƚVϙ4ڻl;#rȩ+"1;/,%֋$WYik࠵7"Soz቗=o. }Ux55?Pz"I$:529AB/eo^;6kI Q#>zgD8S~W>>dCjLd2-Ã"‰ A7ejaB$6ӆZ5 AuLNj[)+'0r%tuz;S\O#$!(kvDUdqP\%R16"0E;-r&݌ Fިgb aa'L0bvh>)3AQ83Gr^ٮX{I 7v'vhUb=MOEHlvV9H|n.v(&osD%o1-E޺ݜԬ,cBiK+gTiv< V`0X~o̎hBAXʌ뙶F$cJ] TD.eqxpx6.:d@U>M:K}śjǗ{긬!u k*> UY>5o6\y^CP4qM_QQS1IIQC38j, ̎c4PRFQ=pYVWj ;:[~O׃ؖV9t^1 Uje+ZQ(Y{-3 U?voU ~ 3[Mh~\'UStlrmB6kQ3D"KЬ]2Sl}R>[OP2T6bhb/"/607ͤunİU&RH;?M3g¬~|y` ˠ+/߉0&"隻Fn(uh?Xx9WငD}S:pF\ő;伤:)Tza.BD[=r[;;jHݿ0> #5Vy#Z{'uƣ.' &n/X=wfMũojn3nw1?[r`Y =LP|ܬ>lv #(q.~!Gcq|vBNjs}ό?/gCΝ$*L|'EYƮ*(7Q۾3ݏφZ.kmvXQڶv\kH\jAX.h#Ke&xG˼ܵk}jO49vӞ9T`.t" 1lt䀨&^Qm "_8l|w3̎K@0Ua;ZaCL͡H2KuCx| %D]#osplo89Esϱ.N؈dNYc^dpDwSz8fe(A}[@ iYSk#:V.[oqld3AX^1A(N!a1H#+h2X@JEӬP0ds WMfH@/-ITsPH>ؠIOe ofS_7zʥ YOO4-~8rVqI 4yaw.j 3T@жyY~(vqh>v}V:Es.nG@B3*#n#6`:s:F"67J7L-E5eZn0H e×®<T nl AR`%x#qvk\Bx^+7d2>=*x1RHQuh$]hJ|#ݲilHOFXGr? Am.8;^ȁzܮpטVmvq0ŰmʘI)C/87HыX@ߘ{4!@ aۖfSwy% —dMs3eC:z:#p,ܖjcz1} c}7e!}62eZpIv!ͩo% ՗hZ+P߄8t  ,( ej?ӭyE!Ѯ)iq_)jYc]1#4IYJ_X5"qxɐOy<>=EUg5Ӡˉ4t)oа{ңaxGBarK#(^Vމa^C[w?Y(L 4%'vz{ԟeEVQlZzr ֝# ^Rڼ9.`9oC[cY!LbMoɮ<#@3:U@5p! M $<뿭[T~B }D SJi8N9Q"va*Cp$SGxOf,HM + ՞fa A8y\r?&j@xLX]”''(t@GLLL t{]LdnP+|‘+6ES,,Mdp piqGHiYBgA哻[xY> 0c˫m9ǎ=gll S:EC.!gC\2W=͹^ "||r`*+xT<1:و)37Q90aPD180ռ%eKz/󁰥ƈ+XpμxH K\,m ɬ:g霱&kH\ԫG;( sJנe-ꋔf{S5§xEڥ@QFԆ|qfgkE"/].#qɀ@9se{Ru>cgx'zN]?X%b,l"͉\DWh4q_e:5)$*@ Y|C=č|si±p2;* 9^ Żk¯ãb\Zƕ=S+Gj*a@m+WD,2+lhb*{$Ûk 8^Yfard-58s;{(^hY,0R՜fměb>g#uVP(e.c>1BJ>L΅2#`f|~bWwףf:T"4jN$V"c~u!Tͯ+$4w Ê&m4S=SjDϒl >Pw GDI]0.l*ΐ| Q{p4̺l/EgM)26# Cr&ԉ!ϊ nK!U&漋:ل1A$_!]ΫqFU׺:gǾ䂇NlxWtr]Bx$0"L*gǩ''ҝCwօ/o)|2F5.޿~+5A %7p/fxcc,ZI:4\hEf̵GCaʘ`'4'5$(*SZdrb\?Լg'CS[ <;.6 *w$)r267j_%8nշa5uuк#VSB/ZiŒ>-D5d,?'jw, }Ql;8AvxW'3ˋCff$:xj!]Բ4?Z١rmm[ }3QJˀLFoWf#afީt7EqPGzj4ϠW[&F|kcM!-9?Sy [UZi$1WC3|!＠&C;Ũ[.H|y)XVzeyζF׆d#8t.Qϋ0!Z6ǩ&WGj~A[^CU-鞙ɼgP(P3\ []޹[t,]ŵ({ BA$-n׸#pP5WӃ@oH-*FXchQZfdU%k㟽_PyvamTYC wº-jS~FA+RGTvWG0Z=ėΚC#LZS[<<2xa򍐑b*-":7;RƹwH LoY0m5kxʯa5Z*r}U9NB2X( €Xd/ y^ ԛ&:Xlܸ@eR%yѩCTP9UN)nQb (O @s `= eS]ðkخBa(UѥԜ(q݃TpiX1,˰H_GN=3עfe4kX yW\<@,("IXC'Ā=N k5}ĩ}խP#9`JY ǩp¦7%^1t\Nr] !ؕdXTsPL(*,ܛ]t5Ǟ]$[x Ud)R)BB~Wb/h:Ľ^ف1x;!9~[2PUͰr={ghЁUCęDMLe;fj\OհZ5$(2ҁ޾css(fCsRxԘ^,~O4M5`#K~ 5w49"dH8s+g*MeHiLvԊS]5VD6<,p;8TIʍHT?mk=gK?O#cj9 E, oWdOL(F(s%_zjo;oDbNH؏^-_-~&ti cF5Y\K J)=ġ~?&S˾O?' rB~D2v6fpNxM4UV͇*F6m9{=ʭ}hD^.Ej4;Cy7f \^IbB.l7l>IVX}o1((gw$x/enoOJ|\s  )73ؑP!$?vrlCC#ex\N x`F"ipJ^4#,y>iNnt%J~mFQ%;5#t?V3Zw)=7wCԱLi.KZ:Y x>Mt!E^bZ*;~,TU:e$Ge3ވdӜ<&gJ.Xz*&U֫OùQ W=Hw|0 AN;_7u:\JBuE?xa"Mcixe$`6{VZ OXY,F@ 1.7{'<:'g YZ