crypto-policies-20210617-1.gitc776d3e.el8 >  A ` U]?] p. GJsT:z޳H6]XKŽD!}F[O@JY,^Y>ohY:3n]3Vhl9} 2O˵3AzXG)@ )\TmAXjsJj/rHSXad3]''Te22ѕW3O[Z*xdsaZ }7p%.[Js ,9vʧ@LE}S[PD(H>8_ XtOoLAt[)Fh@e X}ثjNv=zKXL]~Y/gbVyr0)W~Mu> >YEANr' g `c6& KV7C곃K6SP?~8;|W]C7=[d29fc3fb28fc6efe685072455565ceec80a7a3393edb49540cea0e56ef610cb425eef7be3c167f70b214c0287a9bf81d13bb8e2a礉` U]M7s*VTdZe٪x8C(FAӃ0{$۞{lxk%FE Vf%Aw3h)V?!6 hi1M0{ )䔔2>U%8@*w O)ojv?$\Ɣa4^|#ă?P;~Se?8{NSBS"c,}Fk*۔P=CXف>s!"KҍNGzldfy֨ \;>*UP~3W?alo0{\@pbgmfZwؿxpYaD/$Ai嬬])F G}H`u!ކiگ/YukZ`e.̓@_ϡ1}{c}.aUC T|'^o>pD?d , H 0<tz  F  l   ( +-`0?33P5556667(7387<W98W:NeW>qBq!Gq4HsIuXv`YvhZv[v\v]y^3bdIeNfQlStluv 04LPTZCcrypto-policies202106171.gitc776d3e.el8System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.`{x86-01.mbox.centos.orgCentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end+-++0-*.4.1K{*$&iKgpV\i)[@DFOe|K}KiKgpV\i)[@DFOe|K} m V>yZ{vg@3AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤`{`{`{`{`{`{`{`{`{`{`{`{`{`G`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`{`G`{`G`G`G`G`G`{`G`G`G`G`G`{`{`G`{07b5c0a6dfe62dd10878e05a15137d10f74580c352fb213bb0e0eedb930c5d99d411eaa8c61b8e5999db44338913a3c043c30612dbec32323fc3f2cdcd0aba7e88909076899834087ed25a88544e0fb0464becac536c38713dfdea2539d83ec149800062b22a59de7b2dd2e8ab272de57670dc65fba73b6db66a90a629e3bfdc6e6764cdbe50f15dd04226fa815d7e31dffeb555e5393fb48778f75ef411acb39dd0b68dc387958e0888b17c3d19a6c4b86ec5321e60889749038e33780563ecc41999ccfcac3995b0cd7e5658c054e0ae899cd9b20165899ab584cb096809aa3d3c6acdc4f04733dc586be2b3ac59d695c9d81232b9a77ac0f4f5db1715b2b62e987e5e2de34104ac58fc808941041d6f1ee09f5266440fbc5275208a75c3bb04794651f763a547d662f93bf5080d8e8577fe5f0c417643611f4404ef49891d045143ca7d24f661ee4c96034639efd72ecd1dfb0fe555f66dacb144b0e74605d2625e9228258edc2e53da32845d06dbc584a7bcbdef590e821fb88a66feb071ebdecc00b137b3d663a15c1a3b51c4bcf564146bbcf56c31dbc6d62eaa023ad0f1f7a522e043da1695684a4cc36dfb157dc88185a955c52189186397b9da811bf13c7ed127764aab9e626e84b99061a0c6a6a71ecee3dfe821eefd2f4d97067917c9621cbd4a12bd0c548a16ae61f858284de1472326996e12140985c6d28636e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855ffa3482faff8b9c39e8f4496aab37e93c694c758c67876eb4d6e3dbefb9f3ed53297ada25f072eafff0a6b217030d100875107296af6fe20ec4f33025e672eade0495c3620a57e37e9e2a11ef1e8a3872dc90f1ac8c08723782b4907f51bc2b5ba970b74c7720192a216e8d5a051a1f5f84a75b615c86172a8cd4396aaf4e025d89337c93eed63ce390ada6c1c20c77ef923b1d8adfea622aa6e59b26966c87e49f1bb6234b52eefda267dc53f937458633362c2e285679101eb400db2cf14ea562e932d140cee466930e12507058a0d505f6f6b96f739cd12136f271de35783c0e2a5b4f0bcb22c6be13547488c97b78881013817dba3f26e3935b1ba763ad918ca0b8c4856e18c4af73db1852021d862ea64aaa9595bc17f8bfa918c53f8398aa799cdf385605ea5fdaf0403aa38c961c5e2447d15e40ac0e45f4fede0bfef543a2be58f003dacddb10257a4d3e1bd90dd9555e8e515107a24fd0bb96c8d1c80135a9478832c42bcde2360bcd42db5fa4617d0315b89a4a524de6eabe1fffc1c9b17757243c929f310d96a9e2290060aa7eef033f2e8313ae4e2fd9622d3f7f52c655a21e1ec3d5808d93e1291891ae7973452d1de9480a5282c02ad07bc7fb32ee82d524b28abb8bd5b7263560cd3e0a5ae01dc1ccb93825722eaeff454fde6558fb6aa9d4944381fd417f9f2e2d0911e068c01fa8d13d44a9953fc9fd19749f1bb6234b52eefda267dc53f937458633362c2e285679101eb400db2cf14eacf5209c76c4466ba82e6601ccf301f7f533ae1262959ed178c8e1d056f26522cffe2d7ba292fc61103d11aea601bb575295f93e5a0c8a4795bd27070a57244b9ae21711a4138a99de04797f2057e7c0e730229ebb807f19d7696006159282582ba3bd8c5b9fd34734b37d1c60faf50f4120071f56381f5546e0d820aa189d8d5ee3a3567708dd4b79451deef173fe5b8443614d8fb81127dd91f98fb6ff354870169e028a7bff2080b17305e0c38fb6c0ec42d6f947470a087cc33c4c406ead6517bd55ba8e26d7ba380e928e35aeab9f662b9a71258ab0be964e3514391c2e77e55fd889d39c42b1a1dd8d6cf1bd7a890e0444c00e5f5bf5a8b7f8aeb3d2164588fecc57cd07a6e1260e7a6f44236d35a14b1275f746d7d4d609b2389a10270b1b2305bca75793921493bd1e786de310ad6ad7bc774dca812cba64e47b872a707cbda37a6b3b6757625622e6ea6c00047d10459370bdf222ce9d9e5ab466f13fe33108d69c3e21b0b44f017f5c24698fb81b21a1d0faa61b465368c3fc19aa6ab40e36f58732bd72ef61c3a6621cd49c91023a37a1e5f1b8549f06cc0e16d121f8b1787acc0c901c223db1ba3d733e65c8488b795fd767f68b8df87b1df1731d3e55a1d7b74de21924b426062ff18e15422ce5c23db3f960daa4f485ff92e58c0f3c51a3681dcfb746f5edfcb555f654030551cf824ae6a7af34aaa8c21204f883325093737c8af4e9cf6cb6dcf9c079263168038a58667427735b0b30fe00a8e230fadfa6ef25bb3f732cbb15fa4b38503e9f4c3ba9a700e6fec5e8540987d0cb6cb8d52d825175f9511ea5a218668f74063b49ea45efa6d083d7d14c82a7d50e7761e50638529444b61710ec27a564278bc79bf238c7e719e198ca99a99d348f7bb745d8281c8ca773e610e20083ff1019cc973b82e419b477beae343f72607b5c0a6dfe62dd10878e05a15137d10f74580c352fb213bb0e0eedb930c5d99d411eaa8c61b8e5999db44338913a3c043c30612dbec32323fc3f2cdcd0aba7e88909076899834087ed25a88544e0fb0464becac536c38713dfdea2539d83ec149800062b22a59de7b2dd2e8ab272de57670dc65fba73b6db66a90a629e3bfdc6e6764cdbe50f15dd04226fa815d7e31dffeb555e5393fb48778f75ef411acb39dd0b68dc387958e0888b17c3d19a6c4b86ec5321e60889749038e33780563ecc41999ccfcac3995b0cd7e5658c054e0ae899cd9b20165899ab584cb096809aa3d3c6acdc4f04733dc586be2b3ac59d695c9d81232b9a77ac0f4f5db1715b2b62e987e5e2de34104ac58fc808941041d6f1ee09f5266440fbc5275208a75c3bb04794651f763a547d662f93bf5080d8e8577fe5f0c417643611f4404ef49891d045143ca7d24f661ee4c96034639efd72ecd1dfb0fe555f66dacb144b0e7460549f1bb6234b52eefda267dc53f937458633362c2e285679101eb400db2cf14ea562e932d140cee466930e12507058a0d505f6f6b96f739cd12136f271de35783c0e2a5b4f0bcb22c6be13547488c97b78881013817dba3f26e3935b1ba763ad918ca0b8c4856e18c4af73db1852021d862ea64aaa9595bc17f8bfa918c53f8398aa799cdf385605ea5fdaf0403aa38c961c5e2447d15e40ac0e45f4fede0bfef543a2be58f003dacddb10257a4d3e1bd90dd9555e8e515107a24fd0bb96c8d1c80135a9478832c42bcde2360bcd42db5fa4617d0315b89a4a524de6eabe1fffc1c9b17757243c929f310d96a9e2290060aa7eef033f2e8313ae4e2fd9622d3f7f52c655a21e1ec3d5808d93e1291891ae7973452d1de9480a5282c02ad07bc7fb32ee82d524b28abb8bd5b7263560cd3e0a5ae01dc1ccb93825722eaeff454fde6558fb6aa9d4944381fd417f9f2e2d0911e068c01fa8d13d44a9953fc9fd19749f1bb6234b52eefda267dc53f937458633362c2e285679101eb400db2cf14eacf5209c76c4466ba82e6601ccf301f7f533ae1262959ed178c8e1d056f26522cffe2d7ba292fc61103d11aea601bb575295f93e5a0c8a4795bd27070a57244b9ae21711a4138a99de04797f2057e7c0e730229ebb807f19d7696006159282582ba3bd8c5b9fd34734b37d1c60faf50f4120071f56381f5546e0d820aa189d8d5ee3a3567708dd4b79451deef173fe5b8443614d8fb81127dd91f98fb6ff354870169e028a7bff2080b17305e0c38fb6c0ec42d6f947470a087cc33c4c406ead6517bd55ba8e26d7ba380e928e35aeab9f662b9a71258ab0be964e3514391c2e77e55fd889d39c42b1a1dd8d6cf1bd7a890e0444c00e5f5bf5a8b7f8aeb3d2164588fecc57cd07a6e1260e7a6f44236d35a14b1275f746d7d4d609b2389a10270b1b2305bca75793921493bd1e786de310ad6ad7bc774dca812cba64e47b872a707cbda37a6b3b6757625622e6ea6c00047d10459370bdf222ce9d9e5ab466f13fe33108d69c3e21b0b44f017f5c24698fb81b21a1d0faa61b465368c3fc19aa6ab40e36f58732bd72ef61c3a6621cd49c91023a37a1e5f1b8549f06cc0e16d121f8b1787acc0c901c223db1ba3d733e65c8488b795fd767f68b8df87b1df1731d3e55a1d7b74de21924b426062ff18e15422ce5c23db3f960daa4f485ff92e58c0f3c51a3681dcfb746f5edfcb555f654030551cf824ae6a7af34aaa8c21204f883325093737c8af4e9cf6cb6dcf9c079263168038a58667427735b0b30fe00a8e230fadfa6ef25bb3f732cbb15fa4b38503e9f4c3ba9a700e6fec5e8540987d0cb6cb8d52d825175f9511ea5a218668f74063b49ea45efa6d083d7d14c82a7d50e7761e50638529444b61710ec27a564278bc79bf238c7e719e198ca99a99d348f7bb745d8281c8ca773e610e20083ff1019cc973b82e419b477beae343f7260a6cfa06454100160517fcff46ec0ab4871f3a963260a7c1a14493b02fe70b2ead36ba145ac86d5adbcd1ae33d11fd0150b7f0e9ed1ab706066c309ace140ba399815e61e04947118f78fc5dd8eec44d6832d70a730f6a2f870f1f85ca27bca35aa4c039f8bcb3fe28dc7710b01d52f3fd4cd445302ed1b1dd91c3194f95a92d816271ed1d751420373d11bc21a1a8bdea320918aebe244d1299fb7424236423d89cb3a6e0720ebf6c5fbc3d3cef450053514cedf8c9e844a6f6251ccd36ad8118cf727b739ed26de95e91730fbcd183761de2db88b50ff46f0fa26b7015ce72ef91b3d09da2fe89c8520a14da6965f652909ed8e98a74138b3e60118c053e494eaa31cf4c5bf6a6ba0b7b6132faf9712f1eb4f58a922f3e9d2d86e5a81975362c36639722c6bf74ff296a606d65fd806e54dd1a2af26871efd139efc208c588a032cf551db19de5f8227ce3b4c529e59a0ed1fccf36fff5fa175c3186ad941269121b6719a4a96cb77bf2372cb58a389b08726e4448b1037b70ec9950af10486095e9ffa777dd22839f7801aa845b31c9ed07f3d6bf8a26dc5d2dec8ccc0ef379334dbe0096644f71588bb3941eeee9efb286614165da1b9ab4d52adc82e3e2/usr/share/crypto-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20210617-1.gitc776d3e.el8.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20210617-1.gitc776d3e.el84.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswannssopensshopenssl3.6.123.283.44.08.0p1-51.1.1k4.14.3`9@`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20210617-1.gitc776d3eAlexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20210617-1.gitc776d3e.el820210617-1.gitc776d3e.el820200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-81631ebe979d2ff3118f8b33094fad0de972d0a6baae5e17f638d14a59721090b?7zXZ !#,oXL] b2u jӫ`(y,x{ MBGI`pN5VZMurd=!Y) ^MӓjѯR,^E̓Zy{Id (ÊO&aG-LĢÓӉ64'q :vj̣V]g$Y c +'95sܶ]ȥbdKz;Gl9A?sX rw/ŷsq_Y:*Q)c:u^ a٦¸6M 쪿ց7D' NRj[̤yNPUMWŶateQ4%nR~dY/trfǎnG51Zg-]51T K4Z/됑V{an [-&.^3 EԉNԐm>C(u8MAV }ז =s%EgL÷3eQ.^N{F!ZXG1If]Fe'UfjATnrW9hjJwf y[A֑pC4gLޅ?1ʹҩ=xH”MԠfF;$|瀎НjTk"(xbax?Yn9 *oIMUB/V&o!"ž1wGJAlVBiEGଚDr:M2Q -T2xg.8R j*6H{ɨ}֠20*GL}Ɗ\A}5Fj3@ k_*8&|sczyNg67Z7;iVR P8`@1IR^+fD4Z)XYzA?./-j0:%COY-`zUɁwfY0c~-xErQ:PY8~ ]-uM8L|2M 2Aa*`{uqkb ltNHMwyc,OpXPoِR27k$0+5u@"5@We9֌R2U~mmq<@)[ qJrrG]\jUP(=YFТu=<7hG< VNj˸ o+jP튍9i/)lhwBPZ쬥=ĵ^iM67DBG0Bj A.תB#&v]K3 |q ]iٳN^v'}I}1n7{|眄݄ЧD&"':7O0K:BEf6bVv§4 tz|kЕ@5?sL+Ď= IZÕMb큊A۬0:5c@-g:)򗓊hGj݃8׃t erw\퀶t5^98 5__0[?pZSDUyXV9LVEZd&rK1Έz :PH6D/noװ/sE,۴lNNB/D}ۢ{z7E}~=Ea/%Z-koaT?㹂^3w*cTXvئ#Єc^-K>Co4Kif**8G03OCzCvAp6Bx*nyGŕ(w0İdYa.%1њmd2[{`''③k.?ݕh %ɵ/FŲo[U#졤u;uS~r|̄\?2%'aÕl'T䃭jnVؾ9^_e B,x>0Ғ;fk߼{YCi-::KZФ댪T.ׯŠqF 7@ Y[ EiL6Qʂʹ8uqOVG\S&eCϧKjQ=H76R񫖡p%@cSo_ `[ӡ01A/reྐྵh~ BzuIK)ўcj<8jKc ` Iuco\l(W=LcǢ\Hm%x *av.uhS v{[sy!hVx+ұ .ˮh3w%0Sq{x8p>X߰\s/d^[rc)BrZº ĉ Ȑ,/F~kixu.(dX mJ`EZ>+ OfH:N=4َv<#_}l{r=Ԓ)\uGtM1/W3P~WĠAw\26ʈ.t8OɂSQoM*tuGNk3a+2ƀ eSN4`!TknU3UjUOkwBߝL̃1F vLpݗf &$ld1(+†s2pJ6+&HEڀB/B_G cBӧ8z+ТzYN==c+{`(3Dؾ9`$>v 8=LqwTz;.ҖV)a@>؏©ԴXeTw)_/%rx(^ #E5h05tT5KWcRsQoPN*MTbov[DOH+Ã8;3Bfd.K%ưm?k̥jהz猰YÎ@ : :CCyMz,P1cÕ|Br:9s^ɠDQίoKxΘtz ~%0Fm&y)7D%d\ !'g ҆hR  1C)}Dhgp#V]|ఞi^%wO:Ua.9>oqaq;qآ[_ jڐ^3ɪ&a+zӞm1@ $gmm*L|;T\s8/`yT~bQsGs&ƈY\_Sw.\}U9(ADo'x?1V>GAV&'L|&UK􇛖VC%|JcKQGőٔϾ2HqEzίwK`}r#֯G䡶kƽefS5Uz;F7 e)L6 ޹UqYn B޽I%@i~z֧b9@>ဧyM#u^UpjaTS5_x2ʔ'#9e=qQrjǹ BW_ D#\`ۖh9%X2bG2xg=_^OKu|s# R=Ѹ0PmZ%W(itj{e/B4H@JaDbK,v~ɗK?-g5$-vNt`EfkKS6=Ctbv$,ާ^ _㧟|Ƿ21/5WM K)jw#CM_}5r=N\ČҾƦ,9ټDDӱ(,9Bh&Bq 54dR?և/|7F1[9Hߥ[EJb D ~0i} 63M?ҞkZ H K+1;`#k] vN1tmg /UNC{2sbٛ]N,Q6qpd_y` 1e}m7@ⶡ ڂD42lWS 7qّ;.An=G$갘Z@s]4uLa20Ê0~<DDѩrb ӂAB['X:K Tqfی sK \k@.Mk!p RsŔۑ!K= .n>AMF:K8>A"c͇Az8a=B`z&볻"%cgąQ+!Tr@HXrx-WHQuԜ9ET4?YZjLV=V iIa+7jwj+܆ݑ4zT>iьx\?-w {f\c=CF!yX3&V}[<`( "@x ,|6D8+"EZm+FV`жM5\{ 2`fƴi7O>(ͻx+CG$7iHPvDh+nUU>N,|`<.fd#*p^}8I&P\=#?Iv *ωnqL`xFVC{ ܰX$h(Ƃ9ވ%AJv d4@&a}OnB`:bK=UmwcS.qD]EXtX|`n:Ƚ ,\[+`ir87RԿHZA2mԉS^eݒ{FBF )@az}t`Dp@]4n:JڄaB" rEUbnߝRo5['(&@6t6B[@"e9<Ьs.H~ XO[mHQA&̷w1_}7ezJRVBdsJbq^L-o2|sߙ3Lʂ)`N+KEnDD*oO)d6K ;6YRio~C(&%(\/K]`oCiΓWr+|Gb=#ܨ*7κzkb$N-@K˶,qD+w :=< q9FJbK G&v:>ԁA0dHߴկ |.}JE[E/ ie7zWyȱEe+zn7ϡ^.]Fh{!xt#u&Q8(4SwFɹ![" .!haɹ[?PUǠQ|݊]=z잫⦞p\wl%{XnnoWR WTw;NݛZe@_/DM޲`Ls]@_C;w!Cbue~vvV2=޳I$l*CȨ{1DAlWlN^eɜz>pxv@bpfGCD8eS"~MJ ƣ%n2addjO@R@VYQIL&~ԡX\ew6JUΟq0?6"B~ ((]kqͯ:r%,j}^Pw@vvbJз;/\ Kfygr:!S8ʻ<7[>eN`]Q ʎ1tn,iz#|64Δ7_Ni4 H' -@5qǠcE9m`1v"؁6ͽ͊P"psΝ‡+uaQ: 6%~뤣cH1MUEtRA!Mr.LS9nwf]C4!Z#P5[[Ŋ'w C}PdHy9AĂZl2h>Qr&@ NwÌag+5b $E@iICݻ:@C^^]/GB'f"RhP`Q"YH wݘm?F\墩'd.iwA2} .zЛFes_:˧햱'YS>`:0c .zK>5z{c/6PQpYאk w'$\`r=Ol$MmQ:Pٕk/&6#}d$h`Hb%1wM J;CNa{^SvF(wxp.J^7xm:2SV/&H\{h?j>m0pmmϛ|IsoeP);9/ _oNؖɊ)(AD2 .:)$Q)!3{ TGGڿ dH2܇BnJbƍ-)A?O]8M|T{,QAPVN~˳dEcbȸ2*nԚ}.s/X#K0")]4x_8O[wm!(aCrwk>#,JVK GҊ9kU#r@ DHߘ Y̶cMMFPi2Ud BK70V:jh辍nzyҌ@j bIʢ?yjw$$z(U}ȃva7aL쓂#rP,YHhyVGeHUI/.jd NQPuNKvVFsfkS,Eh 2!sXOa|Yt^$ ~O*P|3O|_HZ '&h]|gn+UG:e=L?[_#IU&ŕ֗(1Ta9-D8%7hmB8gr6ڦ'yQU([|eg`[iW&R&tAu H_rT]fO5u@Ϳi̭cT>96ϱXAɗC4|"x@#PX'@WzǁunmZf[n.@ (snk O ?=V.F"Mq>,qfDS5R2r\߸VM΂i%-{WU//'bw-3/uBd^z8BY#Gs01IXɏ Dۜ8~TdB"au8rpM9kJg ⚪NO] ?O^Z^>I͖mnQ'KASX#W5ú}jis?X^TmQv 54 <#JN}ujuxyԬԦ؎zD]" +e/b;}rˎ,1z7{O(h%xB }0d$K566i!%MuE._ bDS 0AaiQ!phm0,! RZ)^]vWjˤ4bg(e<txw `6}4l"8kW-W8g%btfE<Ьe3KyGԍ` +2JMJcSgI@ה ⋂L\z)̸/>hW*KVŊqU ~ F&<섀9< .Òy|mt.C ewt>QtUHt]4nr]&G5+|++fIu~<}7omc>,Y֝k!\xm)C 볟ق ^ |^b_hd(^Y*N1:kdr\i؆lC Y\!3r Kc å9zs9\cuҖZSzj:LM8{cyWZ(/  -;b2%'Rh1o# F\{t 2+J#mcnl#tH[qr;Hu{2Ri5 z6Z[4,T*4-'uT|72jjͲLJ+ W!Sb2,*?Bnu ;d0{AWVyMMBy 2ܷ:=BY* uXUOйTT";P_O T?uEO>\qmr dBZw!K1Milr Po&_~*7BF T$^,!W囗W#&u8/nw2 'q_|f0®^GP &wMŀo^)j pg?Q Zϑnӂ.;&Y^IwWzzND/PR:w6<6mayOG^L[>`҆(^q!=d- r^Hz_ oF|DdC+S[]IBS0 5W;SMNugYd}T+_ qU|~Cg@*>SwcnQ5u] !_9j UEvK!e C82uT$ѶAŒL*4,bӽ0[rtho>| -XylN;`[)%oAcQ{2пTKΌ[I4S=熩o gzЈ "- ~sqL8QIۇ[俳ܗrl$HU'0ƈ}U;ށ'j  | 5-^"DkwbuBx(m# wzx{q?VD5w| 2nIAkOɿo遷ן{fA;񭁰ڙ;u?=t6L#0Xe>ŪxTTK /,p"h1ݍd=uځ@a0S[]ea9ȥW2~_C4&,k-T>1 d^DˁDkڿQ,n2aS1  j sK~#Q5*C[XZp ꪟQEs-_MWXD>zIE2.exgC&L"e=Xe M$21'2 !!ȌNUP78 H%yM؈׺,5*ے1H;hfz3'] hτg#w☱w&[2=Ϥ雒-AS,n&&CO~0)A{ٕyo2n[?YHDӝ(c|L/P?sfsO${B^0TM[ɲcS`&T+5gJZn iFTAa^|hpx]Sӄ/`'Ehȟ DW]׹/sDo҆횛s2Y3"[ wii?o L%RLfb0@_e6SGL|`z} ˁO*h,oFg6˖aQ3В'2U r5Ys%3-xJk4S8֟„c'GCaќsgay:ga}mpbPS_$AS'&ʍ k|9Bv 00=yW%s}Q3j /*hWW>ݒcD9=K4? | ZJR0)Ne`?YGF$&S*|Xr]Z& 9J;U_$n\pjȈOC|5 U ,z аx]˚ns*3 ldPGȯv cyhu7si{[=l?#̻gQWܵN cr q!`NXmp#E{UU&0 :n*Aȭ+~^ BDEGc&(XLOVps~6DT!\i/"ca 39jo _"A2 53j~nbx%]<&cP!yqSHd KC[YN<뻲<%bCt<:nҷBh:!= H|P$#r `dk,ZWU|+agO܅) 35ޔCuF圌 >/a:@x~o L|+L(HO5pbTaLnRu!D={mv\-Gl|+S I9 y5ֻI)ikIV5|3Qulm +us' }ڴ+ɛDKGńޕaW"%P]šz#:x[u+,LC*bG @HӮ js*rh]IԾ?tzǭ VЊx+ fc =m 1Cr_,1b#yyaŗNJ^j 1S= % }Pl6qz,]Q30{3W6,bz14$JukxeON7Ҟ?VV8uơԝ~$a/n <.\aCJD \s2g*4zSa3^7![ZFH^1L{F"v UamL+i]!RFDd Q!3TqyXv8d0c7*q&Xx1"!7hUvuZ%iN00o?$0G4!XSuBLQ/aŘK*ǹ~ BqwΚaNVYQ.ߤm3nRu-Sd,g6&V`k0^<頦:/Ž6|p'{,ZFlUzQxҭ02^KA;Me̜h)*,AxH}(X`zh7izZXN`ÓZyhBف!Mhv9{3UI9i~Smd:'BERprlѭQQ#_&|#, W=[HXSo##}eY! lIy[ wUBI)\ z;AyX5b֑ib d0dx9KW^*rt#gw:_PsgHm=8란#Ot.p.%Eu4١,dFR!hozM9rWDODCУk1SG6P;?9RT@,Ȟ(>A 1 іco g TA?ûq׮ɩz^BT9`*ً,I$RM҃Py@t|YAC_{wI7و_]3&<c7hٍ*Rܑu1lza0}9b8Ⱦ'x{/3Xd6ޮg|`ZzآLC 0/! t/t^1b#'*v{|Y%Fv:;b e1ҧ.Œ/7`X 䰱Ғ)ݶ2ZřUpJ݊.4AX77s崻|]VҰ_<(ڕb!@BMqBhɼFq&r'>#ñ 4%'&We 쬵f:u*iɄmE M-ߤo4גѓ)E]V#ټ& [Da~{ֈWo&kRW+/rb*J +4ʸRN5|)ޠ԰X;g2sgFzN4k  (1" )rHVX/SG~}9*m_xNx >`)Jg qw>rǫ]2VD² 겆S=!|HA F "b+t+c~J/|3mƏ =J(U2g6#ȏvЂSo!r4Mi,U3-06x ijNB8/C[~CsZIZ g[b1+ CJ7/njzЁZ@N EZVh:]s~w9fG"]eQyzu_=_ RYD9{cƮ=0s Vuz^g4!NF >L; v42J.:T,B{ =cĤ<$g,;0 I=_!\~*@db6Uʩx--E avF*b"$m/:GjzdJ#-TΊ[j wΣ):3||PLʒ+YKXm:/'Y8#<ErJsd(ߖW5(Yh97Ŵe8?L幧Ɣǿ~9zGG)PHuRGљ+$_G~RB@^{=2X~`*3xD4~kDBHhukM%0VDbCmpB?XJ]ٝD&KYq~bFT8TqRCo:V$z绀B_nLe9B^e Jk]Mk,Z mZH\μ}7: U4,틚~A8Sٽ xs&ԋ̪6 eq=jҷ}-7lj !"Ξnx}mg'`*|mK#Qc&,bCӏ+Fݙ̄Y?Wb.SSʧY CkIwա.lT"S<\4=&QyKk6?eCy?̲xi eũs+DaDAm# ͜Vgp>miz?taVAp8DيWX9λZmʀY XDDw*[%"{D=Aqz47DH$Ȯw۴Ӓ6 u@Ѱze6׶V;O%)℈RudNpu2[\@ܜK-.pYz ۤs/l'_Y/ENR$SwbnjPH1qx,EfՔ󶀂 *󈤛 mj ܾ ?e4?.o,i51MwJ!)t K5gu盇ѩ;5E#y0>PRYTzOsr7wO (zd+֚ECbts_X&VPH/9XKVj: ͎,`7A J&&ruT$v(*'cM'L @r&[`_Z妿 Y=>4Vㄝ*g~kܧ٠>18":[6oQտwdAU#./*/ X>&Gtrv~E]  N~oc3 g&.>f~ G+Ұιoi(5:99LgcoҀ$PqTGH٬6^/hnCK^ÿ&H\YOy+ΝC2x^bvZT<;*iJ쭥=.D]`#yKk 4 >Z+; cus365Zᒩ/V9nb/>,NM*gʟ7z,SܰXA\.7+?aTߍdPVGE%vD%Y#Ez[up _.79[0}sÔe$ SIۻ7T󌪋U[͈  }@Ӎʚ&vg6Ep"%CAm0YNE~W&p )2bQTV8JB׸a311 cѬڨ\;O9!|DX3t|J|'ջxW^l$ƣ<%IR #t|L^,OP`8zjǒ\2Ǹ|z<qlUOqD,cղd祅>RDd)䥗( l=?FwLvN~9}4ʟd0.@}2c,Vza^nH<{`iT@9esb+n 34bwvc1;7̮αwb73H[JO H|.[vDE.g%3oŐA@1@5;袍:nb6@pCA6XHhSi4gm.C"ʕRƋ*%b-D.o lֲk?U $<6>I8Ё& ɠCw$><t eihO>_ L0}kc I ̷j1ؗcf'%db`iQm,P)KI W "*0{# k66{Ml`_TotCҜA{5󼷎VhpJ0ڇPeKVMi0z_f.c$S6l3c)YF!s%4b^Xw#vvTI5`/zx-/BBAت>`p+$ ffش4 "IR_~% Mlm;ĨD{y)X xd 0am}jSel2`-y 4h'4YADG+#`!6T %쿔UZP8?<0ΦrJ[JPt8gN%F7ߟ'Jlm4FyǛeIɬi 瀺N[[L!<,\DGtz@pTc2EAiUċʎZ4me"0Bv{},΃#4Oj]!? ʠA :%V6:Jaa+-ý6|e3qtTVvƹ^3}(ܦCqAv -օ_K:;=yS+-u!CLܰDf޸3j/k4=JZNl=&/4Y?J! {N^-C}NcwMgE|6m2+oL Yto*LOX^wY/dAtR>l0cVx8GmF<^5!&8q2r=K\-tI|¬1R@5ˋoKpݺ@IJ߳Ibee菚L}.??f6+p~*üA3WA$Z9hh0_ X}uv+XހL~@^m1Fj&IhU5*b1pm;+N|[?.l~ *pAE)ꍆa\}ۏ_r_ :H؂f7BFv, Ֆc$`0rx{EvPm%şpd_XoZeL"MCris1aԀV ֦zrLxkIjj@y9G@f;q@lcH sd 3`:32p */\jrj xD ';b{ʇ֊wh8IUF;{x R%%(ih *ፎPIla~*KE0_H x7V.fA,G^ L>7Yzr[Gm} ?'e3s"P@^w/D1Rx )(IAf"_SK;e76|fK|C] T_z NRllk3jiɍ$Ji|E2:ʳ?1TtJDYt"$S;هQ'mM1Rt.~Muigf|jLhl:(768A VAv>{p ) .,ϰ|+w]mCh4R& vwwnr`sͽM ןKQY~P^e:@JI&$u-bT+Nm|v#OOx6S(ZUB/ ,lmByA7IhBNBIÕ_n+ULf [ <.xNp5MnE8moYzӃ$UG1H[