From 53d96b713d3d8d280b4f6218dc2f6f433b1439ba Mon Sep 17 00:00:00 2001 From: Frank Brehm Date: Wed, 28 Oct 2020 08:02:52 +0100 Subject: [PATCH] committing changes in /etc made by "/usr/bin/apt full-upgrade -y" Package changes: -gir1.2-gweather-3.0 3.36.0-1 amd64 +gir1.2-gweather-3.0 3.36.1-1~ubuntu20.04.1 amd64 -libgweather-3-16 3.36.0-1 amd64 -libgweather-common 3.36.0-1 all +libgweather-3-16 3.36.1-1~ubuntu20.04.1 amd64 +libgweather-common 3.36.1-1~ubuntu20.04.1 all -openjdk-11-jre 11.0.8+10-0ubuntu1~20.04 amd64 -openjdk-11-jre-headless 11.0.8+10-0ubuntu1~20.04 amd64 -openjdk-8-jdk 8u265-b01-0ubuntu2~20.04 amd64 -openjdk-8-jdk-headless 8u265-b01-0ubuntu2~20.04 amd64 -openjdk-8-jre 8u265-b01-0ubuntu2~20.04 amd64 -openjdk-8-jre-headless 8u265-b01-0ubuntu2~20.04 amd64 +openjdk-11-jre 11.0.9+11-0ubuntu1~20.04 amd64 +openjdk-11-jre-headless 11.0.9+11-0ubuntu1~20.04 amd64 +openjdk-8-jdk 8u272-b10-0ubuntu1~20.04 amd64 +openjdk-8-jdk-headless 8u272-b10-0ubuntu1~20.04 amd64 +openjdk-8-jre 8u272-b10-0ubuntu1~20.04 amd64 +openjdk-8-jre-headless 8u272-b10-0ubuntu1~20.04 amd64 --- java-11-openjdk/jfr/default.jfc | 9 +++ java-11-openjdk/jfr/profile.jfc | 9 +++ java-11-openjdk/security/blacklisted.certs | 19 ++++++ java-11-openjdk/security/java.security | 57 +++++++++++++++-- .../security/public_suffix_list.dat | Bin 233897 -> 232578 bytes java-8-openjdk/security/blacklisted.certs | 59 ++++++++++++------ java-8-openjdk/security/java.security | 47 ++++++++++++++ 7 files changed, 176 insertions(+), 24 deletions(-) diff --git a/java-11-openjdk/jfr/default.jfc b/java-11-openjdk/jfr/default.jfc index d55eeea..e76140c 100644 --- a/java-11-openjdk/jfr/default.jfc +++ b/java-11-openjdk/jfr/default.jfc @@ -420,6 +420,15 @@ false + + false + everyChunk + + + + false + + true false diff --git a/java-11-openjdk/jfr/profile.jfc b/java-11-openjdk/jfr/profile.jfc index 9023cd0..11ad365 100644 --- a/java-11-openjdk/jfr/profile.jfc +++ b/java-11-openjdk/jfr/profile.jfc @@ -420,6 +420,15 @@ false + + false + everyChunk + + + + false + + true true diff --git a/java-11-openjdk/security/blacklisted.certs b/java-11-openjdk/security/blacklisted.certs index e192c1a..beded9e 100644 --- a/java-11-openjdk/security/blacklisted.certs +++ b/java-11-openjdk/security/blacklisted.certs @@ -1,20 +1,39 @@ Algorithm=SHA-256 +03DB9E5E79FE6117177F81C11595AF598CB176AF766290DBCEB2C318B32E39A2 +08C396C006A21055D00826A5781A5CCFCE2C8D053AB3C197637A4A7A5BB9A650 14E6D2764A4B06701C6CBC376A253775F79C782FBCB6C0EE6F99DE4BA1024ADD +1C5E6985ACC09221DBD1A4B7BBC6D3A8C3F8540D19F20763A9537FDD42B4FFE7 +1F6BF8A3F2399AF7FD04516C2719C566CBAD51F412738F66D0457E1E6BDE6F2D +2A464E4113141352C7962FBD1706ED4B88533EF24D7BBA6CCC5D797FD202F1C4 31C8FD37DB9B56E708B03D1F01848B068C6DA66F36FB5D82C008C6040FA3E133 3946901F46B0071E90D78279E82FABABCA177231A704BE72C5B0E8918566EA66 +3E11CF90719F6FB44D94EAC9A156B89BEBE7B8598F28EC58913F2BFCAF91D0C0 +423279423B9FC8CB06F1BB7C3B247522B948D5F18939F378ECC901126DE40BFB 450F1B421BB05C8609854884559C323319619E8B06B001EA2DCBB74A23AA3BE2 4CBBF8256BC9888A8007B2F386940A2E394378B0D903CBB3863C5A6394B889CE 4FEE0163686ECBD65DB968E7494F55D84B25486D438E9DE558D629D28CD4D176 +535D04DFCE027C70BD5F8A9E0AD4F218E9AFDCF5BBCF9B6DE0D81E148E2E3172 +568FAF38D9F155F624838E2181B1CEB4D8459305EE652B0F810C97C3611BFE19 +585CFE6B7436CBD4E732763A2137D7F49599BA9B1790E688FCEC799C58EB84A6 5E83124D68D24E8E177E306DF643D5EA99C5A94D6FC34B072F7544A1CABB7C7B +71CB00749B9130FB2707A2664BFF958D0FCC8E161D9674C7450BA0FC2BEAF9D3 76A45A496031E4DD2D7ED23E8F6FF97DBDEA980BAAC8B0BA94D7EDB551348645 8A1BD21661C60015065212CC98B1ABB50DFD14C872A208E66BAE890F25C448AF 9ED8F9B0E8E42A1656B8E1DD18F42BA42DC06FE52686173BA2FC70E756F207DC +9FADCE80D62A959F9930D748488C1E22E821F4E1E4A43584B848C2FC11E04D77 A686FEE577C88AB664D0787ECDFFF035F4806F3DE418DC9E4D516324FFF02083 +A90132CEA1D4F7185E4F688EFFD16F6AC14DFD78356A807599A5DABBEEF3333E B8686723E415534BC0DBD16326F9486F85B0B0799BF6639334E61DAAE67F36CD +C0D1F42B9F4BF7ACC045B7BB5D4805E10737F67B6310CE505248D543D0D5FE07 +D0156949F1381943442C6974E9B5B49EF441BB799EF20477B90A89C3F33620CE +D151962D954970501C60079258EBCFA38502E0A9F03CD640322B08C0A3117FE5 D24566BF315F4E597D6E381C87119FB4198F5E9E2607F5F4AB362EF7E2E7672F D3A936E1A7775A45217C8296A1F22AC5631DCDEC45594099E78EEEBBEDCBA967 +D6CEAE5D9E047FAF7D797858D229AC991AD44316D1E2A37A21926D763153593A DF21016B00FC54F9FE3BC8B039911BB216E9162FAD2FD14D990AB96E951B49BE +E0E740E4B0F8B3548181FF75B5372FAF4C70B99EC995D694ED0FB91B03FF8D21 EC30C9C3065A06BB07DC5B1C6B497F370C1CA65C0F30C08E042BA6BCECC78F2C F5B6F88F75D391A4B1EB336F9E201239FB6B1377DB8CFA7B84736216E5AFFFD7 +FBB12938ABD86C125796EDF4162D291028890A7D6C0C1CCA75FD4B95EBFA7A1A FC02FD48DB92D4DCE6F11679D38354CF750CFC7F584A520EB90BDE80E241F2BD FDEDB5BDFCB67411513A61AEE5CB5B5D7C52AF06028EFC996CC1B05B1D6CEA2B diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security index 788ee84..0c0a901 100644 --- a/java-11-openjdk/security/java.security +++ b/java-11-openjdk/security/java.security @@ -477,6 +477,22 @@ sun.security.krb5.disableReferrals=false # be overwritten with a System property (-Dsun.security.krb5.maxReferrals). sun.security.krb5.maxReferrals=5 +# +# This property contains a list of disabled EC Named Curves that can be included +# in the jdk.[tls|certpath|jar].disabledAlgorithms properties. To include this +# list in any of the disabledAlgorithms properties, add the property name as +# an entry. +jdk.disabled.namedCurves = secp112r1, secp112r2, secp128r1, secp128r2, \ + secp160k1, secp160r1, secp160r2, secp192k1, secp192r1, secp224k1, \ + secp224r1, secp256k1, sect113r1, sect113r2, sect131r1, sect131r2, \ + sect163k1, sect163r1, sect163r2, sect193r1, sect193r2, sect233k1, \ + sect233r1, sect239k1, sect283k1, sect283r1, sect409k1, sect409r1, \ + sect571k1, sect571r1, X9.62 c2tnb191v1, X9.62 c2tnb191v2, \ + X9.62 c2tnb191v3, X9.62 c2tnb239v1, X9.62 c2tnb239v2, X9.62 c2tnb239v3, \ + X9.62 c2tnb359v1, X9.62 c2tnb431r1, X9.62 prime192v2, X9.62 prime192v3, \ + X9.62 prime239v1, X9.62 prime239v2, X9.62 prime239v3, brainpoolP256r1, \ + brainpoolP320r1, brainpoolP384r1, brainpoolP512r1 + # # Algorithm restrictions for certification path (CertPath) processing # @@ -491,7 +507,7 @@ sun.security.krb5.maxReferrals=5 # " DisabledAlgorithm { , DisabledAlgorithm } " # # DisabledAlgorithm: -# AlgorithmName [Constraint] { '&' Constraint } +# AlgorithmName [Constraint] { '&' Constraint } | IncludeProperty # # AlgorithmName: # (see below) @@ -518,6 +534,9 @@ sun.security.krb5.maxReferrals=5 # UsageConstraint: # usage [TLSServer] [TLSClient] [SignedJAR] # +# IncludeProperty: +# include +# # The "AlgorithmName" is the standard algorithm name of the disabled # algorithm. See "Java Cryptography Architecture Standard Algorithm Name # Documentation" for information about Standard Algorithm Names. Matching @@ -530,6 +549,14 @@ sun.security.krb5.maxReferrals=5 # that rely on DSA, such as NONEwithDSA, SHA1withDSA. However, the assertion # will not disable algorithms related to "ECDSA". # +# The "IncludeProperty" allows a implementation-defined security property that +# can be included in the disabledAlgorithms properties. These properties are +# to help manage common actions easier across multiple disabledAlgorithm +# properties. +# There is one defined security property: jdk.disabled.NamedCurves +# See the property for more specific details. +# +# # A "Constraint" defines restrictions on the keys and/or certificates for # a specified AlgorithmName: # @@ -602,7 +629,28 @@ sun.security.krb5.maxReferrals=5 # # jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \ - RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224 + RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \ + include jdk.disabled.namedCurves + +# +# Legacy algorithms for certification path (CertPath) processing and +# signed JAR files. +# +# In some environments, a certain algorithm or key length may be undesirable +# but is not yet disabled. +# +# Tools such as keytool and jarsigner may emit warnings when these legacy +# algorithms are used. See the man pages for those tools for more information. +# +# The syntax is the same as the "jdk.certpath.disabledAlgorithms" and +# "jdk.jar.disabledAlgorithms" security properties. +# +# Note: This property is currently used by the JDK Reference +# implementation. It is not guaranteed to be examined and used by other +# implementations. + +jdk.security.legacyAlgorithms=SHA1, \ + RSA keySize < 2048, DSA keySize < 2048 # # Algorithm restrictions for signed JAR files @@ -646,7 +694,7 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \ # See "jdk.certpath.disabledAlgorithms" for syntax descriptions. # jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \ - DSA keySize < 1024 + DSA keySize < 1024, include jdk.disabled.namedCurves # # Algorithm restrictions for Secure Socket Layer/Transport Layer Security @@ -679,7 +727,8 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \ # Example: # jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048 jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ - EC keySize < 224, 3DES_EDE_CBC, anon, NULL + EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \ + include jdk.disabled.namedCurves # # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS) diff --git a/java-11-openjdk/security/public_suffix_list.dat b/java-11-openjdk/security/public_suffix_list.dat index e8ef7a72d5f757d82f9ccb927ad179cd2b8927bc..029aa3c58da4345799290f0bba24883f309f9bc9 100644 GIT binary patch delta 29513 zcmZUb2Rzna`}p0T+wHcpA~Q34r|g-Lm58*<9@#6Sgp4vO`=CitBqK$MwiYF!l$KPq zsg#lWU+44j{XYNa_dKuH_vN|X*LC(e*SXI5oV)5{JiAJH8ZNUX4V4W`vp;+JOQStj z)}DKf+`7K#?JJXh3|74Px$+}Rg-*^Ci{PILnvC;}hoNpxwR;7Yy#6+G`Hf86hs&L# zUn?rF4&~0g_7Hs06aMgdKZ_mT+QGC^PN(RG^UqFiGsug~5ZLI_%k$BA^T!u?8(uw3 zYx4bBxuy9_`|G+E?TxC;R@dAwA>Q$+j7UEXw|qw0*MKK1TJHIAwc>Z5@jHvX@Axh1 znL6vdR?pDS_UR`_MPGeQ;izeqTS5#)^?7}V#kn_sO}=>3y7)>vtC;QB_-32h!cR8} za+wNAhC8ZtDIZEr>4k1&G3M)Q(1*a+cw*=*t^ZAtmb8ZyyU$|{ECyst&zB| z652+x)}JHe+nMZXr;T{qWY_H6J-y{tdgRO$AJ5(3klj-e64TAw!_#+dl|Ik9FMT-b zsNouR0o~NvjBiJFajNPLy3^ZD4Jxl5Xl?4`LQb z^Dv}CJQKn~SGzG-K*z%3ZQHe?_HOqu!GhBiT!?2aD0h-=(&FQ0m1^tDKiGBFp8dq4 zrHV_H=X=SLHiy1GHZg~kUImT8GEGr}F|0{FJlCYTty|WZ`DQNC_`~PUw%43PP-iy5 za<|`y-V49Z1{wyKa*MgqbFaK$6f)8eJ$*NPy!h@?arVmCra#I#W?O^yaeALMn!jYa zCC{Pog2%>_2R7_oGyn4Ejso?}wH99|1$Qo3Wiz$Y_@0JcNrcd06E^kgbUA6W_1kH< z)*M$(8@)@!ttpVvURaPT$6Byg^jK0V)ai5c?ja{-mBp3?%@!r^-*aWUv?grnnz2wE z_*!t{#K#-*T<_3pbX^gk7C`XZ(yDd`&GAuodSg#^xg}l z2GV8P%8F*~=cO;RcHQahX7rGmo|@LGUJRKo&r6YM5_Y*x3+?LUxn|Cu?)iLLN#VW` zzrE^vcGl63me^s(!Otk_kGT7$j9atoWMxE;{VqS#wPmdQ$5p06e&4I(88(tOB@a9p zu4Wo4n#`+uhtzC$X%$jSGBc~wC;<6K7Q0&=)h-I=(8(q1H zB)SZD`cP@e{)Zj43FSF{R?hP)dLIr7Z%M1WWJXKfkbBEUcUoJ{HeDht&iA`@zFybo zd?EUyjUL`d23w_zk47X*nV#4#-86b`hvZ`0Jpa7D)$imtKH+k8vwxO2?LWKK=IrBe z`4@j~t{tzG!aXkepid$ks_+#4b9SH?v;>PcG2J6+NoS6$2poz(wDLXs-rkGdyfPIJ zJ383ZI%g-EoFCk%IWuh+m8bB=WZdl8hrhGvTrypViLpW&i& z@6u_{CNp(6vu=lide-kl@fJ!~^1XS7>8>sFe7${Zxh$vOX_j32lkxuXc7?DLS{p;o zE#6_+ef7r|C1cZzC7KnK`%S zqNK$)uh0BxI$^q>-i)4l*wO8{e2+B!dl{X#`rn;+jqIcqj-S$(l9YV~%3 z?ptn0bG`;8`As`t)fwDvpX4-Pdf}A{d+gyBPw#o$l0L_7*nCW%y2Jdad&bjV#NE@h zaO3fnV*DjbY8&@k?azwHv#}{Qb6gqP?63OG_>9Sn-*%qNKPCz{H%vQcFM2WXd1`mq zO1-yth$Bxt);keFa4R<4}*gtD&si)cK`{>n2 zf9qegy2Mvx{kwea4Y!J$mzuindVe*+k=Xh7#S?|Zml|xfLR|gHI)@scd|9Sf>(Z>5 zd_VKsDMjr_HQRf~RagdN_H+|s^1qT8uhN>!-;7^-p00ZI`Lfbty>-MzLzn%}tu~HX z_?gjt?H6BmJw1CU#5Y~f!uU9^sD7Ti)V3{-zAo3RhI6b!yW-uI7u*{<9Z$3$KPu3F zo9`&=L)$+mZ!G%8cBrYE2^H`lDqpVsAmGrhwd$=+ z>+6$|hb8-ZQ`u^^#qoJnl)ZRw8r!0^AW+9d_iG)GB*Vd7A{-pmEm!) z{F%_k9efMrPiHdH81ce_lJCnW`)v0;`<^AVQN4ygR!uM$wJUE6R)4u+oHIJ0EyJN| z?e^sldn-5Z5tnyyt2Uf16d$qY={gsruKH74K~RoU$!~r4lQ?3elGR6UW1S#Vprjz( zu3Ivxw*a;IXmbx2FQR4{pN;l?^^I4$IMjD}FbGVL?sj#JsPKb!(Xm+s(Y=bN9O1_P+70 zUf!4OU690oJ%(}Mg2|2M(Qo};QCx=>-mT&tGZU?IUU$cb@u6Y4=G)lyqn@{a?`(Rx z&8cjIriTz(+9)zVpZ{pMnuPaO=a7WAS+X>-ZJzGbQ@$uSSJ;yWc8T~U)Lb54nX8I_w>F!$Xkg_w&ry2sj>3+QBqP%m^S1(=cNbP)iRTG7ofbs)zs+r5q z_>IpKUbDo0)Jj;a@I-p{vH05LrLXQh-V*3D6vCetb8+$c_QSb0Y{8YmhfnQgx8HUr z{BISv-l6?1C-zQ`969pcSZZDM&vBXi*36e52IW^;ZcGT}cZ}B$ODfgvn6PFueUO&! z^FHk18yAsSW)rjg{6xdbpI@aP80=nKqdj(1OTPDJW+xXiIIw zHS*U>^Nu|;Y8F4aeqtcW{6@mAtw)G!6&5=>?3;U%6a@bSWV9!Q%340l|0>NbBPmhT zCd?|P5c0j>k8!g;&skDEsbK23dRg4#4sjiag+7Z5j+8vL$rhYc+OE|2$gUvkQ@yfu z?5?g`**xu^PbFL!5x?gC=GXm;`9bx&Ctp4AV}HR&xI3U)?c^AZtp{9XQq#wJ6IL_ zv#3q>OVQ>(BD(nnSI^P6XBc7(PyWL~!Cn%6(L(^Q&Id7Yl{Hr8`O|t6OBOIpV2Up+XQn(U!!Br`!^xJv8PdTv$ z3!>)_hgTbJ+_fk0gQEVQ$?Z0e|2}NIJA7Y!-(|UoYn#3AmepwOuT2byFtfeRN}M&^ z85h@H@;m96_xhU36@vD=-VbuTJagqI=hUmINJ+jxo34OIDHGe-c-}A3`DnPrERVNc zahAKRw_LL7&VnPCKJ2P#-m;Z-L#@}v*}r6*c-q*aDVv>z#Z9W9+(WKlV9R+?fxD+2 zJ2h4ASqo61dS}q7I2j0PvQ>3PHbhd zvR92qbVP;Vg%eUT7ZVr#-u<@m`n8v3Dh^+g9kvb~(Bf>#4@vUV_|nHhAHOr3+#jUl z9q`)mwu)ue%sxj^&F8%WPG4O7*KhFn6!l#Dx~tKNB!wrluJspr>X+P#%&~YMH@}K6 zdvp9zR*!=F68q|wzHk`bKQgP^vQ_VQ&B$)c`VFc?p~dE3zDZ`cYaeqNw7<|e{3?4N zm(%##w?)P=T*sDLt+Tu(n_g&H}0d)YcZqPy6YuJ$lAFcWq>F@jRwceS0}p(UrM!*m>x ze^<3kq*~s?@UqfEM`6JfA!_=JP0y~=EpQT)DHvmAZCa3T!boz6ydlkP<==dP>q5bm zkPX!|m;CT|lZ`aR1GPU|Cz5KX$E9_q+NABiL=TuYf>x^x{~&{W#r~Px7U-tE%yIo`Y1 z-J8mVj{r>eOPb5`wZM8goJwSxo|dl>QMgbPnAst(Wgy*D%TjfQrB?Lr9osIuR4wv& zX+9B`tPl3<3x-Zd2yOoe%K_@*P(8{^cLCO z-J&1T-~7r(Px^leFB0R6{l1OE4G+;uMROXymIhE``<@q<>@+JL4=DSe01;g zx%ugm2mQ&~(A}ctr7p7aflF*2Tg6yxtc=G>2LLaKgq?cj*a75bmzpk zdZ)?7non~3DiODE%Oe+$9yYvrMI_>C-u3iqK-%lJYDfuWPYe4~KlsS9|L8C6$qv>08df%CI$YQ@HX~o^ZOJf4PF+-fOX=fV6tW=btBRMeM}W z`orvEM^BBcp{kPe=^YK%vKJ>D5cR9!IVMr2 zc4EUQ8IJnB_cWX8W_F1= zY^#^CTkgH{@7S}Dqs!mlJ`*dsT<>`PjeEHve^xXdX&BbStMO@8h|Lpd@OyF!w+u?r z)^j2cWg1&cvI^}p4QUzE7%lB;v|>Jd{n2vJgtnhZ`g~?kiTnBN#r@vKVYtJZs(`pZQ)-rN3B^_(3E3pbYYIGb|d0FTNu4^18wiAmpYrLHF7 zvyzv>q}I7SORSpKzanvEvtPjd*5lk!+zCBxnWFs;Q}q@%yXk7*8|yx=O$te1-+yk? zzM@sUnV(wrC+*+wn(U!oT#@E*quyoTsK`7t zxY<3F(XVn#ns0~9t;?;vHy2-uTBX$H`aXQ+NH=SL(Xn?z1>Q+3BTc#b(tP%@Nh*3w zu_mZ*kq#6PuHEuy%^rnRIo;a*JEp%+u#TSPEqpr5)ok@^bCBzr9rBKuURMT$W;rzW zY!Z8$qv50J_0`(@>z#_B$3@I@joZUlIR|HiTo2~#ck&!t;v;hHF?|bBIuf~TI40&^ zNJnk#v+&K^1tjb%lz%22-bGaGaw*i^_V`FbuR0M!JN2Y4S0LkcT}`)cyNjg#yzLJ% zvKm%g)-jcPnb7>CwDhIO?9Y`?cbileIaHoKsJOzR zS>RXI9<>dD>Jl~K?e)G%&(EF&JWx zYfOBdoeDFJU3rH@^fuH7shsXCwXvK3vTHQxQf1wu%-9F)-AMdC*Kt#OpJ-?0lAGby zUwe22d-#KgKe>NN-0(oR^!i1sVCaEj`(ld5;T7ca_A zjB`+L;N{Yj?G~^pZg@RfOex9LFu*Ukp+ZO&I?be95 z**Vv;cfRU)GH;m{m)nz1&mC0u#P1nd*OYv;x4hwyeRGyi*1P%9@^>XZwOAf+xF{)c zOKEZSMgHp86z6XT4-{`hDQUlY|DJKX-|*^(pR-K6xa9JbKTNz>D*AYJ#t9ZW%PwXC zO-H&#-jdczw{KXQeCefgTXdOZYw4E_RuisvysO)m=mcpvq%9qA@f8vkToJhcabG&| zSuf-7{!Of!&q@cy+;WQZPAXTC`{!8~4SgqAgZuEEV~g!_T0OCfeI6f|d`Qpac5j2v zpCtSO&!4_@cX;P{u8%BNY=!J~gl;Po1O&ck*SAW!cgWVxu=2&Nav`keo!7?W0H5HEmG@gV{A!-X9iVp(5rdh z)qmPVg!PfG^xcjp_a95WW|1w`NxZwB%R2c%hnZ5@7PItwe7uh9o@pGudTqt|*Fzn2 zL)MpT=tKN>V)N5eCS~9Aa1tXI~`wFB$>`SuW@*{cTv~9etY*Py?hD7?=M-rtSIBkmYr8Mnk^<{ zYkEC)-Wp+3B?Hsv{Gvy8e&g7jcXPUXRA%L>7q2$;=RJG<^g>Q}LvY`(#nA^ew<__r z^|T)5dKrD}gSYNZ&M>QyD>o`MUpi*rx~Zk^wa(k($l0+1h4eKitzLeuOu3h&WHwLl z!ThBxGgh(t{W=T65BVrpkMzm2<(ai9Odn>f=s0!t)1I~Rb`n<{m^Y%Kqn(>YP_m`AqKkED{MjK2jG^!O}>b<(DJf45mGW%8M-NUc-TYY)Ye$?j0 z`S1Jk60Mz!?jG*0jBje8xymY(dWwcKGW^VyMN~4xExX5jCPkbZx18f;&x&PhPF`}< zCL_Z9diVipBg<_WJCc6PfAdi;YbXx3->t|Ble*UC=w19hxZ{OEX1F6H#CgS&# zu1Lgn@BZ~W`tY!r)xmvI1I7)PFLRk~@zKodJ~DYclYV&eL8+YcTJ^T5OGZ7}?x__@ z4?Zf@d1{}cDGkKuKP!`bA9TEq{hZQ6Gxt@xe_Ik(Gmo46s(30r%9(I%EZctDE4i~7 z6GhYag0&N!GfVFOw13?vvYjjHhj~!PuD-PXq`cefZr|&dxp)2Dy5F-yUpkf6DZ6uJ z%Q4zp@2uC-YCUmWwq;~v_i?#p_0bo3xMDXCi+o>aM8ENK)2nj}7j#QD*II4ATvF_P zTKAyi^PYg!hl^jlk@ONtJL6}RaBtNymRQfvlfT4Qruc_M#yr)nNVnWxV;Z+wdq5U- z{t9ZG|mb+BM+&j_J=Cf?R(B7}RDKumO9{qM_nV*V0I z#{AcP9gTBrpRa8c+1}@CUZU)z_1U~TXP413?F6*of*AeyWv`?CTP7`feKJ=0zv!4s zsA8!rm$r?tE572bxcXjp)3GvHr9U^`KHS{CVzgxKwlli^5)8u6Rzy^?{`{9in}&|> z{dMm%<3F;~y(ex*c#1NEVyfuK7c^;NB;%j))B_^LLgn<6L+xMYQXspJ!U%6=;VL(#w*GVJ_bXHDxQw<&o8elB7#doxfLiQAo+rV{^&Y2n&=sncD?JQN zE^|AMRPCz9uI;fHg>RXS$g0H_4I_-F8|}QDcnYaNF<;(pSPe?FK;>0XqJAxHEsbj8qtmoB`T{St z`?ocfR;tn&5-`>EB5cF7~Arf{^C| zd@@2j?X-UUF|9@S5^W#T&VuKPG`p3{#m}B?uBkV2RZcPrUR+A=pV6^<>nLq zPJ!N%n`F!^KC)uFDa6d~bo|8j;ArQ?5&CIofWgy zY2&LF_TN<2Jky`8{>QqEPcttvJL}%yy4bz^hbt=M|Ktefs%CBti)b*6KP_O^+Llum zX)w(pzKlKKvaF)}=&dO0By%y#4}L8yciEzO6OOc+h|r&#l3nM$vrqc~blrOL2#OQE|oEtbAd4%}a~g%Xu=iX{XA0G9#88boR>F#q)XD ze%C`{au1*WaN77P*us*=8Ev_T|I?_CXt_hc9_L*THdux6dl`n_)XPma;@dg@p@3hW zRxsPo;066CeHW};j*De|G;m)Oqd5q?W~ za-SP@HHF%ZbvG;I&`MGmliGcoJRPrWJ^3+mi1oQ>V5_3=hl-7(5f*FG`8iwFgf+sO zkCwAAT4ioT`--@f9Q{voTlrgCjdH@IX|d9^ipS-1#p)_l-i z@hjEf;zZG8VvMWgt@6x!%8muYu}?eRtjSn9wKhnAr|ywIv-|bw>U8l4is}(w|_# zM!uyj;9q$ETzC3^UJ&TFOzcnfzyCmxfcD{$m~Y z?Cfa7_qJOrW+e5(-p$=*_F0sm#=qdBljR837Q{y!q354xReIA}_P)CIeR9_Sm;6l7 zqt2qB&AQPMG_pwRW2xpyTbxj6F%%@uGFq035tsQn{(by_W>pDCS|zeqBa9dy;7ZjK zMLZ?M&~Y_FjAnx_s}WXghd2QHAx}-N3c>83>IP^=K0Mv{1yUMVQepB6}^ugoBj_ z%z^{MJ*hg>Xc1!E4kQcq3k>xPMLnM&{RhCDB@~W|_C!7XPz_~mC}x;~RB9g}GzFBT z4HXMPZSaS2mKX9z+P;Js9Uh3FlompmU62nLJS9OEKOh_7#Zcr168T03dP9*B8H6<2 z1eku7kEI}oPXrw>Aox%P5Q2*zU0O^SusiYNJp8Dvk*E$-rGP|%$i)?MT@8dbfWmbM zGeTYfHR=$iv`93jLzqCzHI@*@Y{Y!XVXl2yO9(NBB?ibs1=@QZWLhbDv4k+7Jw+l* z2?gnYpRT|pr?bGQ|NB2>*!Dcbk@j&&7`GHEa*PDwD8dFRaux^-R`*gupHLJ+9J+)l zBU%WTMDu_Ie!8Ikf>Lw|LqdB2YS$%<*y9#}I?_7;S!@FfF+Iq#okSs2H?Ialun40F zJ;H$DEsXO@SwI&@cY(7V$8sb!LJWP#d<04B6Z%Xw5#Uii$OR@ZiU$QVj3m%sn4HC? zZKzwHP>}fdNet|##D6uFOBC@N5PGz$$j*Q;Avnd*9s@#7`roH1|C3;~7?c`=^33RB z=&b=EN=SUNIMn`?tlTuDvY)T!uXQ2foTlmdjK;uqzY9r z$MP#u=J$r4OTe;>B-UT`27MFAG!Jy&7&^F|#N;wiFoA9pk^-{?Xj3(et``v6dX#7a zJ$wZeUY=gm7(D_72VEMIK%W@oqC|)y0aF+^TWO?WN*L4gq*)3!ON*cx6`0yZprO4( z4W=*)lx5H-Q^J5PSOzDiW{I^K=uaaLGg!FO=%^WC!Q~)})sf!8p7B(>+04PF7|EE! zOdmoX@P|;7Lr2YF#>b);=7c%zCX%v%QR7{NHd_!ztnQ0gSdfPzwBo!4^!#-Yy}Zyk zp8wwf5UlcuXBqe+Yk5-P(gv3P;7u5NFhHK0KrRQFb_caBgO1`DMB-js(NHY(n}RJY5e;=@ zVM`d&qtsan%+-Y`=XcB&+~Ex%c|aE4g*o#U2qC0_Xm;SF)*>T2m>ZR7yB%T37}daa z!A=+T*@2b0CK|JYqEa-0hfqtv)*k9~4FhV6NCBCU)Ix{sA)gTR+@8>9kJbit*gqqu z=Kxds0*QPBBGKgvLK4LRW3t1&idUE)qEM;KN=#}LJ$1JO7v8RQ0xP+Ee* zSHKvBEx}pSmO$2>z}XwH92OIeXg=UwIGtc{X8@tg-r!rTKqQQpA`d5UXI-eo36_hn zJ{oX>brOI?R}!Y|P4MByD-x6|h3GsGPD=x96cZKYi}>Hb?Dz$c zbss=PlZA?CIfM8Ci~P$#8weuTGDAobqY9{$AYkt{kNBwH^GTWk2eL0n3-5km>UKiSE$!r!rKQ``)+p21XX;`LG&m1QRp>|UH)u2c~ zzN-lx$xB$w@$E|_c#AS&=1ATG=163Cttpl&#iB#9a@Gr0dwHLM8GS`Fs8VZn+-gN-967*s{xPd{;sd=cs z0R~?JJ_mbK4n6|Q<)lom%^Hx|-eK7nc`8Ch-T3UW}lQwLG`B0B# z-$<(Ci-FL-p~j8iUySWQG3N(3HbIVw6d;SR1VFolHg5vMS%x4=4y zM+sZNi`_)6TL@Vs4sjOeJh)-;4v4`~l{QQuw9bPNWw>ET`TjgGA|9_mr#&FOEc)mH z5n`Ydr~}baCzv#Lp5T4zND%GmgYurkaP9`i{6#S;muo<1hUmE`xTB<%IP(+*a5e^B zFb{8GIWRi@-<>cHC_}&*TVZD=_3uO5|5=dhNF#Dee}F_BH?SP+83;=SM?8w&z_?s6 z^M#0q+=Kjp(cDprH}uK@)b33f6R%y+j5oAS9U1r#i)8*NZpsvXJvPTfx7}OPW=CWH2dFfMGzeUQ;zo4kX4xH zKW=>rb}1&|j+qbA4u)=B>Ic~`N6vn*O7@|>eh{)ec1K-)gsk*`-nRVTAY6J4&VlkN zO8zk5Z?|9&;_W#XGx!0dX`mE;Vv+d2?_Z$l9RJnycyz@dX3o>%04P`!p zT@chS9eu>oeWV;rn6L@^K@Q=Rd&md|S|u!$CL^xe@)u zTG(SFKwE=WL_m=DF_?wL2YI%@=6*5)YM>PYvL|vefH^b_fEI=RL=c8-%@j`w1j7xH z;L2x75FLeNiomo45SvvfnU<``LjcgHpCh3Lw=qXrv4ptPf1c$0-~Ey!3>%T5U~&|s z?Lr5l;8?;N0oWHdKr()q1P#-jLR6@*BpPfFpq0_ktFKW`G(;fkk*F)0FyIJ}#7Tq0 z0?~tha6T$AkoF?QsP_2*;bMuxRv}^Dk)G7qs1hjQ5QVPBKriK^*%+7=gUDzb>@$+l z*fuKApY+<&|2__a74YAu*&xyorNAJehuffrpU~%RgaM%*gOp-n;NxN-qd?TdfZZSi zybm0w%YhSO+t906C^i&H#K8)>h&IMSgV-R9Xf(74 z>c_Snk}?x8qJn>O05n^)VLM^M$itip7taIcd`Q~Gh6aZrmk5{_zi{G(+rcOjInM(x zuCoIYdm*PC5Uw7>JO++u@ZL z9Y};EEQx@&&0P~c0z$Jy5QGQWtyO)JHd44 zPEb+na1u-zQ>0w(1Z6Bvf*cLeiX_5_nUn-({~Sb5f`X%mA`s-5$c6pej07(XNI21@P5ZXiZB?Tf~;Z&r$i!f#NNrnA{TsM1m!Pr!Sh%bkt zqNo_~7C`1031Pp3S&E2M2()$5AQicX7=g$v0?{`rf;v9L0D*WqHx(+Yg6^e4Au;J- zPEKT%G+0j0K=h3cjPeYgTTX#M*%UK?#-Q<5DCAfg^!rKFo(6vH7y6S16WV$=sJ9`R zrO<_?=}^@?4B{YM2}OC8FbD$x*`JXx9J&_Y(+FiiRpgLX1}x8D6pH_xL$w)@DJ%M% z0oNkSGg(;t{^@1g-H>Y*MIvJZk!CD-ggpQ`9#arzMZ^iHUB_;yoh*8}8$!0gEXaYH zX-0dX6*X9fs2Cr&w*g>&CIR?&d`N5rLeocGd!QyMh%*ynu7}w;!Q9>%kO^%N$^qi* z<4fI;90x>Ok1l7z##o8|Koa6h4l>Dtvi0`jvdK{?$%3K|VmWZGPkVt7FZZIaSx}Y= zQqP9whU~)z!Bk!LWJ6gEBnh1h<8J^WCibCM*)VpdXkiZcmt3?d2a@*g$4Mj6OD94K zwdX*cq|rbQ9NvO*u_9{j(4w~&>QP4_WR8!6F+hl4xhQWhoO3PmuyHg@rNxAVH2J&{ z{366D|L0(oh3&Rd^GRVJ6gGt{_QBR_h!Xa}3Qx%gbuhSCPhW5sPr-nBmqOGzLufxF znTNFYL(|<+DE@N<)$WHy{Hg#_QtfBW1tTdWl?z^Rb0Nm$VL28s^9Yv1!l=0H3^sg? z?&ZQZu7h~(#d?`5!jNOf5F;uyW@*%rY zWR?%pa1XP-;Pj5xMJi5<^ZH)ik5&31(Kd)egWjP5or{_Fjb?_0@%+! zkoqwHxf$3A7F;@|I89h+G&pC{TXPjcrIP0;TDcZR$sQ0}Cq{6JhX@^|0ibcCBZbg+ ztI_j9D53%_EP}vkxD2df=B^rIi=fR42QY~Y4MZu*kXH*Z_9&7?!=1-g=!PGFXsw91 zm@r_S0S$7w0Mx%23N<{)!h)--35AveplwHO#Zc%CG+hi=v>b=9Iye|<9fuTa5u|V? z5xTksKmh<+0jfiAk{qBoc|FWg0(B5QjMGNK?sX1KZ2-Ylqh|?BgL15)V(bfm8LvqB z!E#veKd_k`;w^>KQ@{~0o4eWfF9pBX0D$r~M?qv0JPLYnz-mzUrvR9%Nf0`Bfm#MR zl_0G$Xw47`ErS)SRF2EV-!`QFec<{(li!~-BKHE~0A%q1Ej$3x)%*%bJGacXVIG9? z4#3sVEzAS`s4_o*f}QgiN#^bW6%K;!N@Q^mVunJLco3>Fhz+PN9{?@8{&A3l;j~3g zE5SpMAQ5REg0s~%tf8iI7GMr~CAJKM{aAYf`tJDRYuJGy@u96Ta5)KXGB0)sMu0d@BE02$Wa_9Nghcbotm7EG

Y!_HCKy(z=q#&494sr`gDviVSNjF#H&Y_ zL=MNHbM#K*3X#dvK&EX&M~*}JgBZ^p4t`>8f%q$-;2h*!33>IPoJ#Opg7w%caBjRu zD`DSTN1m3CUc(&8K0$~w*N_lAAU;NSz$Qv7L$6MNHyOkVA3rLtGCT=`AbEx)-sp=d zIFooloPiiYfDaomc|+L@kk){DP7>zKzoZWKG-xeaTn&n4Xhk(Nc`wSThPFOv!f7Mn z1dorr@4WI*jP85rM0iC#Y=sz<4`2Z$trk7b*0_U#d z7oCALNyzLB&7FCZSqFh5Pb;8Bn0lawbKteg(Fah%6|QPCu}J3M9~IF4 z??@VTK(3(>7vidAHN&pOc@y#@FRN~VNOM3hn<2kEB-%olvAqB#xXqqaxC`9b0&P>h zg+bKZcejgx*dj?pwO|4OTt@MohiNv89M2P$v{fkgJPb`Kx_6#X6#vho`u`iud_cSx zU}01t+Y4~JI(`?*nRAtu7a-FW=nAMg+B$(p{u@z>!Fhl|>jFkO4_A=kPAs$)=H_`+ z+e#R4O<^s3Ef0medNPjSya=tfx(BTu!i(M#MA}ER`6BG18ogjUxAe~gXNF<0%@>ge zxgXf_EaGj0=FA|+Hb`LF2d^>U?p+ajv#Jf$N$6@D%;PJVQ*%YM9rEGn2iez`@!>CJVZveD=Xy;|v+XV-(9rEwd0SO?ttKvQp63Y zXg#XC0TW~reYyb-z~~Pyg$*pD* zD0@9g@fin~v-Bop@e?`Ugy3rx`~w|9;UQEDszJe4L=q~?VQl#b{Q*n1eKfF)q@ou0 zTfm>7h+FU#T7p2QZ^2WAKmzpCCd+vndh`w{lbeGj$b<|XZMh9?@uOoq@~ZAUwz~x~ z+bR63mu%dZ);4(h!4wSJAW!-^OOE2oW12a(svEL=kID8q9!ZQ>u+{siY@4{lK z1%@ofVZ$8;5nl8C0ZUlerk&7>2ha}q!}f*^r=z^UlTMf^@=Oe(|M{e{pbJvMM%)EQ z)N@P}-UVI!lQfBqr+TgvEEp#2xWeRmV!a0`ijdSjaGX;l#utDn7BJJ01I&EqzC|=) z!z6V79%Ox+1I@b+Cj(wiZ1B&~Ve5V9dp8mx^6gF~0QgRJ1x$%&oM`qw%r+@5Tr@dr z3%a4NVz^L!H}u$f;D~PsTF>zSChrUv4YhOAgi&Y<%-$7%XwE3$0b#~|h#N8pgeaW6 zPb4#Y+Ly)eoWAqWL%l{_cvm zCZ$JEp+FKLmw8Y_ZvaH?e3bNv(5HW%Peb*Bv<2wFBSM8?E{Jm`52m7zVY-%pOx^9S z0+IMDh(aF|dTee&U=~fSu@0;#5<)|d!E+2?#oUTE7=U%IxB!DtA1~jzd&D@P%t(@k zQ+w}OAVdpPU;x6O=>>@E2_eHEfBA*Bh|`4_7Q(nrWOV5J1WfCNQOXne5-co2V+o;_ z)??u8(OCBMrXG*58cC}!M-f`Y0^))Q(tHZ5k_81lh0d`Q#b$wX_inf0%)*{Uq99-D z?8_L0LV84z%pi1+0L<+NVl+V%K1iq#L1O6OAna8QVmJ?K3;GG>%yAM#qVfp5UQ3FP=3)>xwi%6<+<>PZR6aPAA}yXTPH z0MTB+`>NE1$mj)ZYWEj{p6qYQe}5td0m*-VjuMfCHj=0H2QOgARiq$|FEvPf*FsOBq^e|!0*tG~_@|8pqV8%C6CgYIvAhWs2gMQB8 zeFH!g!E>KC;PD<|1+^>rzJdINQSuuoW~~Coq+1vO%vujJ6(jP$1uG^}dkfQLgCbak zc?D8u^Gwh%D@Zi=@azT<;;kZj^%hpQf)X~S9H0I>sFObh$Q>~f0MVp`_Pv9pI<15{ z-@)RB7wC{86!F~!r|3HZ7JHOY$_Q9=E2B#zFk{5f?-2+EJXNsa+>%~5N{G!nPLZ%k z?|5(64R8Q<065zO$*Bd?4}j2BMdPCobvnO?UfZq;`A{=A6J)klEYC%U*8mVxs_4ag zSYCE&q+u+0kR>00SE(WA573(GlM{@E5A4tCL0KMrBT-Rfu-4B2jD#hfp2 z`v{6f8YuiDwCtlkIt_mriw$rI2NAvx z;D=^Xb3aOh-=zKD?@$O^QMdCSArw;DE=qj3jX5O10V_LpKV>hDB0y zzY-vEei^zt25tpDulyZ@CAQ2G8H~drBhQko3Hb!DbQ}ulBS9P$O!NUEgsspRm=bK>BQq~|-?|&u!{VCl4+?{z?qgUUcCq}@UdJ?Ah9TF?qK;pTh zdjtSRAO_TesKEv=u^dPp0^R~3WS1k_4{-dx%aQR9SZ_7Uu|X)@N#pS<`2l|GD~aGs z3Atk1WaQNJF)_JBTSoslxnNd(Fu5q7O|R!?z__@ z(4~(MdvN@OavrP((=hyY4!`2H0mKk?$Ejbb!bm5BOssWB2Y*6LbOiIT*tzq~6gGWB zno_qTzra*}4RZPgd*$vmU>Zp^rxGh}uR<!9wC#i}TKFB*dlv{VCu7G{YVn%`Ku; zlaTt{S`<17seh8G$?&uT^W1f42sqKR4v9}e5Gk>q#sWbDIj(V2(7H_|@S8iIp94f3 zUypjGU>1E|k9enH-Y?mJ9H$9$B7FneH;p%~4XA4xJSG1|$cu8Ii)J8Q{6=Ix13}Lv z;M5DGGQbS!P1sCkIdonhHuKzs#=wlN3iD9v#AyE;sxm?XnC0XW+6`!)?q+Ng9~J}8 z0_Fm<+rSy=m{T7Nh*`+<=4K>03)fj3TY$q?;&Bhya1%ho?o1KtBbC&De&+Q*%MjZk z?GsSTah&5vFEsBDGXl0kUZTmdQ=t2V^2C03{Q2J@)&U`voRYhlZ!vR45Rel3VzEI+(h{=Q%oEkGK$s z0_b!THrB16hqIpme6;Pr2G;P!(i0Opc`?f1Vgew@8}pfG2@+0l?^J_iy`%9 z)fZ$!5OxnXx;|rd2Ac7++F$IkI znqt)9ehCNUDj$uUIp}(ftCu-?t5UaM4W(nOJm` zi*Cs37YpmxY%%PWzd_AB1!6eNOfrPj=Z1=mk%T%%L;@fZ;?O>BD4{(L-QlL2GkM~1 z5;)J`tACYwVBr#vZ03QcVopO|x}5|K>j)5Z=o%r1-h;@Yn?NRoPsq|VxP(>W0hU5B zxb-v(gjxjxV?H3+oC`b#gy7$fF7wdM2#@W>ywIIjx8qilH=6FeP-(p#AkRJQ$_2nk z#(+BU-@yi-u^dbFH=PeM)JQ~9e2~+=L>dc(LU`TBU{35rd3?}X>z$~Jk8Z@CvlH|& z|2%S4=7+p`Fxp1tVB&0zkdObOw>l zAQ|-VX)6Ns*#L+g$>@Xt-HfA?RKQ(4^(~QeJ}ex;6m0AnOuaH+4v1p|iM#{h=NfpO zqyr<4r=arrbbaD&3L2aboY@FNXv z$A68|(fI{*GiFvgPB8ZYUPKrc(>;nrd%`Lomx4*K4k(922DaN4=t~V*F=m1PGBUL3 z14f+5Kx4vC-b@D45P^!C?nZ$kbW@J(-H<-eJ8bS7#vKv5821B``3FRM!l#WZTVT)N z5{1r}*@I1~oyi&i;k5^OiqiGjj!_D7H@|=_KVmR^yMB zMN%eX?s04xj1dS|cAPpw2gG0En=B zbX1ydz;cR<0dUW7q_r>~#i+|xNuIcVDs3Wq?vLpm>8 zfb@5dJ$Pu@(x>19-1mq0)X1w!$D?E0h#g=)mU6s z3S#(bc$o4IL}n(4QE+oe)?P*ds?t@8OccOT&M(6n{N-me9BU7Oin*CYa7e za*_nYqmDpmijX3tA1y=LiZCVA51U)XbY8M#0-8(n+x?!60%S z#DsDb<`_6qfIKuN0ATJVK^*FN2Zb~%L3s7xAnH+q@#8-PX{k_0Ng0yHVtLMKcmg1P z972i8(2*90;a}MVx0!Jm8_fOSN<;;kaEBytu}y{!Zh#1$BPd)2X1B``bV`M8%q%;C z6Tt$<-kAe_s>OWy4>=A!VFiRxIf^_~VIjpFMMqTWMvS(jxMtc7(C!(~bNLS8S#0fc|98am7z#|@1j60ghAJvEs8^8c@_YmdwM`s2^@Jv~p) z^OQ?NWGrF7{l?azq#d6(C)x za^_6`0vA2ugjH|^>3Jc+qq}f1zMc<HylcD7HHoBeN-^yYR5jc=0qmwfv1$L*zs{ZNG4_tO4;qMt#(kLBbdfb-js8xDGoy1oR&i>Hkeu#Yi(H<5ZqQx8@KST%og{Q@Q7?RT`M_|EEChPJJvhtn;r}D-s zPdY{cv#gU?SQsC-W%KYUK<)Zr%6~_A+Q0fGYq8CV9R_lXv?22N-(Vod-Hg~wbs_+* zdpT_wh+3OlE+b^EH6p^Wj{#LOJqCgCVL1&O#BKNpauAWWMW1=*b{7 z+t-dVA5Uc4$+t{UZ4>eD&$|+3M=5$R9Od3$fjR2=Ih<32VL<0gC}N(i5e|Xs!(Wlx z5VSPAV>E7v=xZ8zjHNKf$+Fl77RzT6njMZ4D6-TVSnkF#avBP`e;%hGg!Z$Jvz+ZJ zUCvM>mM@WcI1A6$DXIZ!jmJqJfLixD!QUb0$sY!Q^*qzD&yVTxB8}GJBozdpI;Wqc zdjaTyMJK6SAbRAJlN1ps252FtXm=ot-RGz1UZ5Ck`t1~}h_hMI(Zf(LeqS@BOv5Jt z?2-Yf6{OQ3?Hx}eK5mkl&l`gv5iAkaseA!wnWt%N5Df8o88I6}Pu53hBBepX#nAQ) z#Fh5@%$szEnhb}Vb423O!=Ex7c*I#s94^|s{_(!dUu*2rS-lRf8@I^sAYpj#9Mf_z zd?^?-Nm||pUBz^zq@BiymtTJV?#tiiD1KJD8Z11_tty}^60-v37=Tt^K@}kwBH#Q5DlpxJC-3^lGai5ah)CvAU2W34koG)Ji{Hf@ zKl?o6(q#UR@rLvC6L6FJcY592P~07;aKzESp!bl2Bnc_6X$1iDR}zTCxj#4T^BLp| zA(R=6J<4VmAT6!k+V@ej3qY#9R!@+oXB^8r=(6X>0n+>{DeHZ-ql`+ja(JH zM4yW=zL&5p{l;Jz-;@zxU2~B(jSzl@+KZfqT*cFmM6tjAJ=4-Qc`+R+X*m^|4O%<; zJ*^&zCTh7vXGUTrBKQ*c;Xw{Vz5Zhq8eFCXY!{R#1JN#Aq9vnX0A9Jws^!V3?|~a9 zFb#Xj9&5`Fz_{r$_4oj~YcA8Q4`7$NTww+{SkvLWSw=%7Mj|Bd*bfAt6z)(6(`Ty~NO=A^| zDFH9=7Xs2Y|48RPgvVMXqtpR{u4C}IU9YkV+YVY7BasrBCmj&l0z@mmN{7dwnVPPF zHxBoeRF%1W1nyv9@mPD2p8QB4+Nakj<|7z|E7xfEM=-FRuQP}8^Bl&aWlxhpTv;9kn+akfB2j z%gDy^31}^}hVmwge#RY)+t&CULSeY?NFXv27j0!n7z)tPr5<$ z&M+PoHRZ*2fN>J)pmiOiww*9PAll?Q8aGLJnQ~N&?YMF&q6~K!Qkypqn6(?u#Z89G zvHccsn{N^}8DDuz0n(}41VHP0n+{AyvyQy2*CimkU-FY0t*4;D6*7W%WR#&A2}t|x zHpNUq75Udw-W1rUlzOlvC~wX<73z;MFi+VWUjSOKJ2ZAG7Jug7(d*`g!ZGB>14eow_c3>t#(;x;Lk(YqO5g_fpO}`5L@$MdFYYJm7LHzF zysy{I4~@psw5-1sh_erpm~DOMD064trys-70l(!Ko6+by9co+t3_#ia7^YJsEpM>z z0&QQ-bR14$w1K;Qi#fVIUL z(d(=Q)1<3_$h-$*5Zm}Yl(teMIeo~kp{ZUq4^QLn2=tVmG_E}w;boMI@+nr|(wNLKK1z?PPe7_LaP7AR0eatn?1&u;#+&in$TY%?M!Sw#uA~D=JIyKb0@Vrj1t=)YLtuQBkli zKEKlXC}jL!zv`*^Q)GO73^Hzr220Ja^VzV49vuCKyUnx!h^ytn&By(h!K9;hfm28D||%GQ#}of6~5wE{8$|; z`imjYpn`w=8$X<8i+-XCKSK3dOO@`N*-+Z^ci0||TZA9h+2B5lA5L>%>DuUU>l72J zaCrY5mf$cJLPwKc(^VGXt?KG`FQDX$V8wQUHh4mX@bMQ*~QtTAN=-w&ZJ3qn0;b21t9W z^FO1_CKS^@R>Fmv{WAHj6yA1ah@_Zw;Yu4$|?hE*!R-vZPk+S9#N$lsp!^hP?u$L(o)I?6KW z71{;b^64uOI+#^mMoP%?F*IFLV9m~T#R zzAIhfu+f#;W+3weJJ6U6Xix8;>1vB|Ytn4itORY|@-4u+#LsH?*uVyWT3a`AS`7`M zZZv!~@>lFeS*xK*bfgN#13D63c=pz^I#OUJ;;TDS2Gip^(P@O1>`t2Q_NsmL`-|v) zM`W){7K*7JV14p|`V?EM56cp5U+>jf)7@FK;Z||(i-!qA0u4qi1n3$J4ThhmVGIY0 GPWOMX)yG)? delta 30525 zcmZUbcU;Zi|G>NN+r8a(X%8(eO-b52DWalOh;I98y6r>?A!%rwiYOtQ1`(l<77crZ z_=Jp%GBbX!^M2pY=ll77fBtYE=XqXdpYuAe^E&5Uc7@oXTCtNCnVEr=57k5-y?m_I zS}Zbi$%Z1o^^K#WM>3SM9<6nk|5c+Pn8_#f=f`>p-C&Nnp3WUtLB-YIf9)BUu=)HX zZ6al$|7m>Z+SN0J-bY$+lFb~Z@ZXuuK9DUn)!;_Tk-&xfcGd99-D+yLI&t?*^N8%3 zS;Nu0*N&oFt$vSADP2CrtrlK1`gnGkxxZS(3n#4#$8Y&BMERa;ZoPK4rZ;c>pqtWo z%0|&I&g`LA<=ULanN=mj=V!f`@Xgm3TDWx8L0fbA^N*Q#JLZ&KYUNjS`|#1u^=Qf4 zj^ZK#?M%Il(GK5bctg8N%*98xA&iyxn^%QYy_X z@mT$+t8rCBsoHJ-N8De-MvPA~-lsm~c}3Lsx(7<zPVcHjLZywXR8Nw#C!u=T>=V|L6xcuz2 z)K8e=Ta%&UZ9}*+gUf;{WO9yPmHm`o|L#q;wd>o8awbJeJV%l!2-Ir>0On=A<1bKqkEg@x_BD*zWCa65%-$-w~X&4P|eKZ)h1Jm zpHAa%v{N$G5Y=nzrs3#`_>Av5#j8`*i~Fq^jR$SLm{?|72%DS83FG?uF!*4o`1nHH z78>Yvc^Ez;$i~kL{GnIOR?=?#>8vkUJj0Qp8Ocpci2knxH*^mh+;IOph1`Qr$BWqw z+Ku`P0_jG5#y2W$C5F4KbY9K{?QMEK68=U(}J=)R%ik)bB7pN}_PO`2)CptoWF@pl_6E#?TDcV6ic ztaOrDQeGICr>uI$S#quDuw&NqJk{_{*NdGp9Yw)iskaKYgik+pjx0zqQ#{@W3MwnE zkyCG+wOEwMyrL$uX*k(>u0o_=g8C7T#4Wcb!-UB;Irfq#s#l*r8#!h1E=F}&%UMXy zruG4?M>NDT%yqM+wtwe~ndVz&`h5CO6LO{@I_0R_d!G%rCtByHB&TT(F9|ca+HO`P zeA~oq=kJP(W*XgfJEs_}srC7IP8E;E626oV48a zdee)(UxU($ZB7}>C4^4?bu38R<-iU7?&Tpz3qpRs5b#j7XaC5!F8x;eTJ5n|k@q(m zOxcA~v9I*=rVe2|l!zQ)UczjL(cdn$?zB8(r$pX+1e(Q{=CCH^jtU9;;nHsbRRd z{p0~Dxvn{~gSnmi*vDGKA58COK5Li%u7uk09TD^IR(R>QO+?Zw zlkSzb#t4rGUwUxzUfz;zYobs8Ud}$&;LMmAx9>FTV3#T>fKjCoFOEgIJIyl8_G&y;oRC7c#>D(BryT)bdEXTG4`(!~ozZ{PA7 z$T=M2IxoZ9DRc2NC)WIn^|!Rj(%Za8lmkEdoOKXaeC0UJ*LsDZiT48I#67}+6{FoA z=2eI65|X>r_O6&`Cq6s2&F;bJz{*qCk2T58s~l}9E-tFr@oLt*`e#eG&bv9|vdxZ@ zp@X9HhiyxwS4u|pMW`)M^#G3{%1 zu#Dg4Rab1c$w>bdba<+DPjhST+|JRLt(UY!yBGRm{OOJJ4t=Co=% z?HikgI;CAz0+#h}pZ%aM)71RVjLINJ>hOUjH3>Jjw~j>g>XaDY3;ku)>9or#ZyEpA z?2qY}%YV>)iD~K!eFfW_uAJQ@Tz=O1h}s$2ij7{51#RN}*Q{OSMV2{zQ{2|&S2}DV zaldEg>dwUC*^?jHncF<~U)b=p<->ZHsOwX$W*8>B3D&C)-uo8%mGAD`flOQVGlvVp zx3($B##G$DaLAOX7mdih>haLe@p<$;PH1?&rFn_XwprFJCk^eE<>&J*IhcM|9;Hp6 zI(YiJO>n&7hI+5HhvHH_ldh(}l5e+NqTMrVQ&UVp*@K!DZ+BXFoD+?H(JZm7R)5wu zL&L-`x;xd||Ad}#3ezf~%~7`PJb(doLr{ZRaw zM~fz==xF)BxV(0_&wcquljJ>ZH~UVlc{MKi$4TI)oTLQkA=}%&?ZaET|Z_w z?Y}(SzE^hN{;vlY6+a%>c0|BAujO><)it&`=gS!N*N0k{<|)*jZn9F3U(AU<_{vEv zbIZ*`RcdzI-|uwJtXe00?CS=ropL+OQ*xbmRw+K+5t^c)d)<8dRHaLXE_JIj7?}}k zW0Q>XZaj=ij_lt3`At>M`)Pv)UsnvjOMBq6qD#WZq;RfAxzWx`T}S3TIX%ZL|F1s{ zJqM0*#ee8@%{v!OGfdoRr0DMEt=&4z-SSw#>{X`Iw%o?}`mY<5f<#lh_b*lq_`cYM z{p)~8?3NTa{b{EcozClabjMjtrWF+x%o0!!$Z4Dv)^ateTKZ1O1Nz&=%dLcFT{iJu**oK)+5INY z7NKnC(B-o-pBFscee0D;|6b=abz_avXJ&AH;`?UP&CG32M`h|s>OQqpGg$R|uHHiZ zUnx$8p5ga|p6SgzVECQcF7d3}dzXM?_3FXXkCw!)pN!uq^eWpRG-d!z+6|=!#0nKx zv|qVpW%!r>TrKC@P3tBFK3dM%H@{>gwX5c3jIS}8IdLK>b4}C%^G|m!sN1C{ie-N- z+CB4>{b8xawi-vXgFk0YBznHHJ49Qx^H-Js{rgVdITdI5l^0nVoVoJG;rEPt_p7Cs zhc@5dTw`pgSt=p&Uf%7I-AU`RN6X%(TrC{^S-tk7VNUIe2k$mqd^>HY_j1M7pJu&9 z*N3+i*|v*cIw6(aA*hu(Yo=|~8wLBQB}kvrsIKsF)MQ@o zwbUse8?OC~oVp01Zws69CKrtKr7e~-E^ogu;#wmnqZgF?MBaGNH*qHs!AW24vW2ry zJpPB$mo1OiJvq>jwsSg6@OddJ>4A^FDbrmIaiuN~T3`8h(SP4>vW z@K=B6*s4$&i;gt`1KUES*xOXCm>zUagheCm9{z>iZ{*RsoiugQF8mf`BbK==|KSXg z=*%@GjL@JBj4w7#S9M(`4!c>t*?plQl=Hl4i!{=nqVjlvI& z&$Q0`xV>{v*`f&$j9QuuP`JdtXMu1;%EXm8SCqWkr{( z{N(fn6rOiHpYmELZfm?OciNza`q?R7NhbX&a0%)!3$w-4(x= zpLupAN9b(x_4+55b_C?wah`2CI8F28+&sR(M%8Pd)}1}IO76$uC*t$Pmg+MOZVI(7 zn_RnI@U&D~%N_M4Z8}3sX4ae-^HAw;PaUu6w2Lp=TcUoUalO|E<9yj~vt`&)*FO3A zURbn4WcIkpSevi;PX-BrV8A9Uy zgY$cM#{c2s%kIUrR_#W)9kz^2NA6`f_7umwcN)|D(0pv6L!Ra%<%=dylZ#6qPX=#H zT=w~mYxpM%b@#EP;^ahK(}OJ&ubl<;d~a=5-tkIYDLQYS&Fh7hg9lLk>>>H9?b*+w z?VddMt%)6ObxO+ZQ-~`R@!L3{TG4*!=Hq*LHN)pB5}d?MWi^cwGIj1)9vO4kS1~v_ zUUQcwpxix@k@{op_7iH!!*hgOzQ>7F$?jkXLhU*+|^<+-#qiTSxMkVV6`7Tn=%Vb1!_ytAVCtv-I-M3g#$tR-Fto z?@XK;9Mx02Y}%pHH-(jUq7ApFpW#|;3}~G%x+TojxHr|Vh_UdZ!s#=Y#pH0i^2ax& z6hXaQ$>UzXHGiXS$9p34`3#Y_zsJ0VTy$sa_P^<$5+YUP?znH4cHPRWK9#bs&}Pr; zBEOtIebwq#{P9&>x>7R5V(Jumi;by93i352154WZGw8ViOFwCUw=tXA=xdbgJG?PD zux9tyXzPocw!VlF5AG0+TDfmc`HaB(-cyC8c5mS%33awhuWdNgm1~xf*>gQ~{!Wz{ z8!j7EI=J&$f)Z_v4=DAsm`NuhdnXf|2JD&uORBzO8uroTMPQTr@cUe_fugsQIm5}R3 zozC8Sx^CSq{;=4g`Ag5LwJD~erVB&be&yCkiJwk9J*r}RbKlU!6TP8^iDi$y-WmOf z7=7~aV~Bv9hkwKJYpY9x|5!J#?%RIYth28-6OY0hN3F6LSkhBqNn;;J@mx#A#w*?T zEQ=j>^6NyiLxZ_-QDF)HS%01G9`1VGeG3hF3$XX*&k>~Pg zc5Fyo%)i!nr+e@G8+{9St32G}^BPnyO4DiXVbHEHs3aUVCm}BOUuAW9^cvjgdrmF& zuM3<7aT49;Qehguh&Z)1WJi%z5}ZEVWK~@kXmH3SYc8uTERobMQ~a^@5qJPCc(HIW)Ygsoj(tzmst| zIVA6Tv2U^%Yt=}df6mBFbA8<~;)JY!)yc?!yDBX}2zlw#m{a4~|8jnGUN?3#;Ay|j{X5>FdU@#Ly6Lnr8d|SRV`#=Da}pB& zCq<8ek^A3?&V26_#QGF{(1Kzr^=V}iXuS)Kp~4OgOa0f#%=d6V_LLfzJG+j2DW+9v zH_x)66%d&NJHX``y>fDTmHN$!onJ1@WwLMb?Pck#zHlMe(4zS(|G6NE!BxMsLMFe+ zJexW@x&LWHh!Q91!lGD#*tn0!ejdyXpV{n{pY|X_^j+He>DjFdPg=ccnCUY8b50vtaZ))KmyIn9431 zoxb;em~Hyu#8UrR$8NTKbkeUq-aUH@&91Qa$uBV{l_!?drR<25Gb7^>*$uuab)-EYn)N{c-^gHhf<_xY!PzxzGHIkSLR^xn4pu~Nu!4h zZb#?Xfgcl>3}d|~wH(j>?D>{^PeXt5kCDvCejn~1uY`T>SAK5Y+;gPvM(@Pdfw(_) zYaek}Y+2She&6R#^s?&5w5_3fYd1O*$Ia_|FhrnIiQq0^nIS?MG`{Gn`cTY1{M2cos>D#pTRnG7YM?N_WLH{R_L zy{*9gD*AEjrMw~En>mkbr|Q-Sdv!c+FR%-1I&$x=wq%g+oDr=bW2O~3wWSKoz*T45 z6!C{zdu%g*!gPr%8S=K ze504lSvGQ_@Tuj}xSAv19{bvV;NG7aJj--eMdZ*5vs~7LA0A)YZ|hCjc2wt;#n!IR zH`O+sv7ECrRnYEBVavtEn-q-q$ok0ck=s4D54^ADdgLBYyb?9)l$Eb^^UpP-Y`L-C zA!ey-k4KL%zP9jaxpL-bQ!=0?fpisl)olN>~yN_N@5 zee`Bds@ThKUdkh^QPE01tBEBhx9nWd=*88&K>KR@_+?FWWj4Q>STXGCeXTD&KXqJjT_T4$%pk`0cA-*2h5aYQhp*p|& ziqf$+^=|u=%v2+uZ~ovK?e1jL@x!pm^{q&ncTc6h>uJ5+vySa`tnFB5ESlk%`HOQV z%hp@qbF03r;EOX^@b-Ik z<(|9u_h)QM8j;#*{ynsya)s}2_%WwA3z?kFB@E#S?>Dz;L8WC-+MOpYVKnll{&80zu;i0!?buQd4>w{UP|#})EB|F&Kqj7 zm!y_Tm+K@F%~H}4x;MO@T}#cLV%MFl``WKE9@(CkPrZL*rH;tbYGn<#UPl{#_uC;) zJu(fp7I44m`pIdXa38t(vAA642|UaW;CtLb?!!ieG_K${r2CH{#hVnH1=o7o*~+KG~lD8`S6mw^lFp0Iu{Pu zoxG6h^5Te+cxiXW#Ii-3uiCi!S6io_klkl=G%M3*`na^JaYRr zTQD>z(L7CD?8U?_pU+=X?+V|~n_)F{;--dj-%I(P0d4wUzXK(X?U5}|IDOP*lGXeA z>>cL9n&HU&!)`tD+!Qm>MS-DPbds9;vB;7Oh zd;K-4{*Umqv^Z5q#szS1rF)A)IR>qS;i+6n33n;z_a&%OIK zan>)TE5y2pzQ-h>}h;D5X33087F>g!)!1f5X>wu^f6hdi3Jun^VM>K3CL zXmv4|C)VY(8liZ=Y~O7U*GgQ8*)pu_sh23lewzB)zZ>S zg_JkBzQ95g@-@Xbdd&leX#q62hT>OD;Qo6gjr4fK*ebcKxXo6l+2|;36P?%ItvxUM zNi%8e1kLB~PFUAE*;%Zvu8r26quoYcD`@=F6T_mz!sB8&A?$z65%=rv3wru`JQn^% zb)L!QFPn?ir8ThK-0XLrmM`GeCV5GX<>H;Nz-0EOyvr_*qW%}#M}H0N`=njCdq~eZ z^p@8W(R%-ThtBq?*i`-+*d&|%g2S)MYAl!}uXIG%{%W?+LVvP_i?7h$2#MR{5u8{$ zZQL482wwE!B1ttA-$%>Fhi$E-khs{`u#kVZf5DBup7{%mc%7j5*?a?eH2=WQkG}NL zk~0IvHmZqi97!r@*!sx5nyB|84zBjRSl{{EZmsD}u|$9La0VyMN$T=o$CXv(GlyB&Xe9@xOLSD z|K-QdFO;xvIiFX_wM^e6I%h)ig2s}8?Js54N~m!r4(*&OA@eO#b>jGgA*BsNcI0*` z`6#LfUp&qwPol6!n@tC3Nwmz37cKl}hbi6b8kL*hP^q)lV#$$BE*HN1d=n)ycCI5$ z(X!=H!t$YV1t&4(N#AT#sM%Td`!c)mmijzh-Oc4`YG`qW0H%=q7TmRmb zE83p!ha(OZ?st+j9#P#K=%LIV@7M9RH0zA3^ReIm4f?vYWQoK*FPq%BtFWE zQ=^Hi{dCS^tU!$YiUu6lFXQ?_5$>7$u7|BGuGIG0Vd+6Y{MFYdx z$AzXzCkE&pk3YRvU7XRPekCzX-n+bde&iOf?EYmAakLg%ON%wt;-ho-&B@aWmQ_-G z5MS9pC#O*)g3&sv?fYn;pSJ0FW^(STm!hlv?na*D#{PMB`N+P>@jG=E=f`x`vI^{M zPjoz(tAuhwj6~}$Tni;6=%mM&;XP~Dl}?|iQ%T%VFe#t9eyBWo-PEd{0-bYX z8LA!Ep3EJy?K{>Jw&&$!+pYtgXkz}v_@nVPZ=DjAF3Se$YUM5;N?Z7o+(Co_HMd{e z0!HU@!Qx?#TC?A6nlLfNRmH`gR7w4nD`kyg)=~%Gio3K=3`&8JC%kwrC-&boc^Q zjpd0;l7j!duR!0X6CSKOaQ(8w5@V60KB0)h^$11UTa=|oSkT;1iyq-Z+k^h-5taf^ z1wk&Hi&mQu%4iwLGIfN2L?B6RLIITkprxY|`h+d*GJ2;^*f4~IAsVe-0lB&v5Q>a& zGCb@>S3=nkrq!V;1Hy{+8eO6Ui~2$_hGC_IjfvWx**8WM`E3<@Tqfn|V_ z0YO1UhJ+PAQTeP#5h!Q4obKW zjBy$>D(pD}a*{=>W)O2|ap>d>!iCu(0kJV?br2LJV*=5FXod-4jf_nQChpYPv|@D7 zgs>-`N}^E{!cNd|3M7aP<;EeClhC&L&=OWM$yO(!`c^<&0132`D4iOHb|A#>Dd_P` z!kpnFh3n(!00o+vLV=~o%aqVo`{$Vq%wjqpjOsuC{=y035iJl}bP}iVMLnj3HKS4* zXH-7|SZfv(a9#?9Z z>IFesED|s$v{mq{8}iW&G>Z7I#R$>LC!IblnjQ9zf>iD^pzyn=x( z_rKH8(Qk9Yg4M4G1t*0hBJUiS|4S{PE(%H*g;G0Q>_0&}u8l?+uQZP=WYVs#mnEp(ftQ!J4oTxQcmt5~77eL6s1}5K`si zM*)zOE?mf>PX2Bddd|A*b#QD zA`P4oHv&CPC8nbDc97E}5+#HoReL~_fM_~M)}C+>OrC~?lOoxa#z?n^8F!InX!psC54n{N`5YTe~&_scHKLDWsh|ij6y#uH^3oVcg;c2$} zSTv0!ROV8SAljmZj2&T(P2vdT9ST`&0!|A?)s8UD>(C=dP=RCGICj7nW{jm1R&4NG zDL5=PF**#jxk8c@fP(2HO5oq8&uK64o4t0Gj7#o3VE<%<`a|i`mC@Po(%Ha@>LEfTJx7Q#k@S2oN zNA;B;sO1WR>yW)G%*DqBAQ;U?-a$}S1vH;N&5*CS&`<`gjVC0~LrfBZ3l$&nYCb58d!{&HLLxG`3r*~r596si3)iH`7-~lMfOJ7f#RD|(5ftbF?RiVa4*Nil zpTe;js2^g9YvxE|0pUQCN8SrSI0O|gAZ%a>US9y3Z`=ZjEF^6C?JQwN6itPUBNswJ zl@JU@@02Yu+QeV7vHB2WQm@S26N!>MVZun4ls!Gtmu7DJf0 zW{2Vy!7>vV`=?eu}s*pD9h5SD^3;J^&8DA~!>UT*0N-Dd1WvQTQq zCIO-)qC#K7ifDF1y}q!g{B}ZuO9&h0TxYVX5=#gre*D-HNzNo>g>p%XUuGh5GK9l^ zLA!~vmcY)UhR(x}V2BG&m=MOHl!F2&KY_y(qlga>+B+2I2UBGhI_d}AlZ0OQfkAR< z4o;dF8Heg^U>M!~LGcK?0^{u`8vwve-t7--Vmrmjedil+Mn4ABJewH+a*}940E~0l zT#U&LWFN*4(Zv85I%PM&VX=rd7Yb5Z3I&Cbgj$Qf0BHMA{8E@eFEQt-!Y(Xm;!Xl` z!05|Bkc(87L5&(Qk3ekL3Q)>2P)nas(K4`dGg0?4SaTioAUYC;uYVa7ska=uMSMPq zkc0+(DvAWc^d||rgy;D_0H7@|E{DE-ihe97tcA3|uN)EyCjg$=8vursNGu7taQ_nn z_6^>^D*y|gqi|ddIX(ID^H-E*N5~2j3vednYguX#?|?X1r5^)fKuVC&3c`YrTZkf8 zz-kO$2(lb*2&KO}!PI6QB2fa*^x|I$X~&T2N?7pbo@m8N=-YHpoG1|ue~0yQ76cd< zF+q|VVBAhXm=N$n5{4(L}9 z=$mcGhD}%t^m~I4>~2rLL$6h`L5s^RB1tR<3|VsPybn|)n51!u(1Dc7*ZAk%Efmc7 zFJtZ)B@5OHHa&cTp=?_e7YsvDh7JeAj`?IUt{G{YGeaQO7^#OqQ~vXU_J5mV?MpTV z>}Qk;30R{z9LEl!7DW@z!wB_-fRau?!l8tXV9OFL5Di=Tz+ULcC@=v8>3$@GE$ibS zLP_mEFKhnS()J()sro&Kl(c5_I~01H57~qfno8uu8)!6GZ_sQ(`2X*J^U<0xFr#YG zxiA>gw?XJf7}Uj#jmwRR2SX1pm}TKmm-Q3_3yQRO$}zh}ve?i#Y9ihSMiWCH!U-oa zb}-H&HX$iG@$dde0TGbqBozU3x+V$QiGYcI=P@oj1WrI$38DMIh3AFfOyZ*c$w4j> zN+?D%BjEt_nvA5*BM7*_%urIA(xih}G6}tlgkHFS^f@rQ1;TKAQaq(mw}D|NxR8fn zx3z;pyD&o(<0hc2qre1K!9snC8Si-E2!Np;4uD!u=@1r7$6;<*D2LkWnt=(o{ml|X zP}Txi4Bvo?NJQ`?6O&>oW_lM!;DCr zM-m6M;jYq;hV&^s#H%&9BovvKFiW7us}=x_hAu=C7W6<4UvWK08i~dbdd#C75K2Z_ zDqz?8#ek9W1q14=P!I!6bzgM9Q&*HH#AkVrg+n)ZUv4 zG0dYF@wV4`ENX;$L6ngY&BqstPU=G4b>bk$CNf;p1Y3Iugo*FbC^HVs5Sth*=O6~n zzYkm}6NlOVnNPCukY@)ni3c4aielqID=&-%kr2ez1^c5DqM1b)P#d7~zaKvR_n~Ys z7OAWz%$e!&ARR{S=*g?0TU$xMhE+*!fQ`Vwh`zBJ)~!1d;u1DOg{yIrXihSS;0YbY zg;F1q5UJY(H~@gAg4(#C!Z>9Ku<0J>BHIL5Zr`~m1Hz!+&OlILYXZ(Gfja-mCPL}G z6yZdWwx!ZPkFa3%{`W~+0mUXl>$fIC4v~}sy#^TwcVoa|$Hc|*Yyf5wR7M7=CxL47 zN6V9-7R^a$XA;yx7~M?*Rp5{0k_kKE+GLzEAtVmB3mbyz$*{!6C`u`@Q$WB1?oWo2 zxhWvN3Q58yhNhH|gB0D$I#uBQ=}tW9fxCxQ7+dYp9A zLA0Ah)PW-e08F}d=`iF?aaU_!1F{pQxw-g)t_OM{I^rf7Z6Pg#jk-53ttN{ zytUB@oY4aSPN!P12>3HVP8F$Uz#0fzhcT&gQvfp`;xKPFuE%o9s5b+4MRq1|IBt{P zGo7{2+D3|ig+-~E2!Q;I_1J3WLgT9;$Xo}(u)oiF09X?k#IQNk9FkcF1z4gP>!6YA zQ4IdMh7PZTi97|3t|J`b2%w({KTRkm6Xx~zY;-u2uw%GxfJ~@aBd{K(@n#(6azGW$ zxC_1P3XC?0*z3X9CbJRhL+aTUpv)8q!U`Z=LlXe_&)|4lF}f-;$%0N2*@Sbh?{ z1H$}%5T+F7AqWaxz|o1E1a>s#nRx|}DVPJ0*D>nZP;@S`$p*XmK3ba%=8Mi|h)xbG z(eKs>ROkZ6sia*;?$Yubpw9%iU>FZ-1ACi%0nxlr{07)~ zD$sHK^9;S+00o*L!;RppO56$;TYvZPmW{9_G*g6|!ufldb^;dQ&!q&_wP3jTH$k?Z zNOcpq0m^U$HOtljX5J+QsV(d@00G5qI3<@_Z69&UFeH)#H93yv!H>WnG9LOFY;$xl z2eNR=gA`#XJ_vN}UjS&E(VrX`=Rst*8FYlwcC>aglpMMpmrSmRdz&Fy7Y=i%&X(E& zD^MgK8E=7t{7}pmXlrFYj*q4)(g^|rLnMi%R4o5iNTN}I)V9LRib8=~LI1R(s;%J0 zx(fOQf?%`C=Mr`TSJ}ViQ4QlkUj*m}dM<|2{b80%cyq6wV2FH@O0U z#zIeup!2-Z)E!XDZWOo!*5i{(kOI?)?3?BtkekL%Ot`U}M4sdED^OM(NfY6$h#k_i ziXp$#$g>zu?_VJX6`h7E)&b?8y$ga8J69}yUje#)Z7LF(jgpA!wp$0O$aawLD`nVWY&E`@#11?83r7#bw za17-t{Ej6b;czgAr|xH!L6)k>vkaz2=pKjxmoFHes17*)Q2^AA_7s9liE4-squd3G z2rB1I0_YyRbbW!q87>|{gND#?1P6J|8b}b196cc~@>MZ=7#tlTnDX?zQ#m9$j{?iV z9sUP%Y9*b<*bfbqgKMpEFJKO+7+i>61r+;*N5~}+4uocnvMRu8SdUsOKrvja#Tk(& zH~C6vvF1Jq!@E=JJmv!kyj*dW(22)!3^jebvE+MFGA@|X2m(6+&EAg_10q+9Ga%X; zv|=Y1zAZTBpY7=k#0dN$5zjX{j%A&Y*e=*%HypsSl;Ik&3ugBf45+TIhA<4lxm}

GHd0Klwo6y`YxN&rD8oTvhaMg|(K0=M(EgE*(Z9gJ?f zATDS*X8fy+?L2^snk8umS z1Q_lqzV87iO7szk<+9@=(MNodw!9j&L^H(_IXwRWFoEAB3qx5AFnwYv z$g36g?!~(M1eW6P24A-psx*f}aOxvZcj3Tj`6#Ov=HLL1qRtx+05c>`;xKu>klF`g zvB+p2SgZAjvyZS9`T?=vR*8Uv201&sL4@gCk0Is1XY7YGIY@0k=#p!ghlW$;Q#wS5 z2sMx-1b>Y{?Eq&1vwSfQ1G9nLYro(ub|J|FgoD5vGA5c*58ML~VT86HfF`G*-UHCq z^NlzqH-<7|rq@Aj=uLoNil;$OhXSCvqRcwj;I^alb)e@Spr3Ux?WUaqDGqPE0}evE zP)y+bXAg_6_#kK#eRS*~%#`TUz$xv{I0V@pL28F!0tlmkLxhd+qGpJViw-5v$V(t; z3&^mlC<=D~@h~gC0TOyaqL?r^-xL~y!m>CF{b70rr;Z7OY0EnyqyiRLPhqN2O+aW@ zQQu*x{1ha91P0m<&4(YsU1xFXgm@0hN+6U~|M^CNkB^W4zuXKju^=+Bgu1*q0=X?f zw4!jkx_1*IQ_o!9Uj&JJGAP!sR|QK)qy#r|3Ia>t;0tt3pMj=zh6fQvTv z7<85Md0Y;;!*pQ09}ORaDfWuQrt^=(2o<27_eM|j84KL z-g^nBrtWnB6JIZ(nvmdu1cAN$2f;tG8 zwHt?H;5LoCgd71xjI<+K1Lz}NWZeKuCJH4t5Dtu%%Qzvq#oTUy{Or*OEVLf!HG+}Q zhoTw@P4$1iv^Pwv6l^px`d0cDbd^FhIP!PCOjpfN}GPiS3zZYbfbU0)~7)GS( z94PF_J0KQAW3@Pp<_4PPPl@VPAiMIkihEwt}3} zJyH&|Gn{lV@iV7huGbZz$*j^oTC1 zf**mn?|ghw;G!W<6+b|L(SQlHSWGWMUErGRA{fU>sPH1;LiGMXci@+)H3?F18{-Wf zWOWJZ7LEbW$VmV|Ye)H)2n&AtPneEv)4@s{!8EL_4Hn)3fKj~V6wn4WeMy2?(2k_~ z03odE>)XhAIMxR9;{q~hhaso^#s&FFibuyJ%!j06KS_v!zR`h7`S;^F&jVQX?EpaRl0?V*@!1eZ#PQCbf&);0 z%_*3KMDZ4rD=>j5ic#iZHW1oLR5bu~8pjdTdGRY?)+{NU7#c?2i_aQ_k~T^quR&-< z7uq&RSTn_>u>|t&19kTj;+ftU#8dl%`b|i%LmJuM1m!e>GH=2rZ7YL|AnoQm5Y4|2 z!iYT`l8fJhFH zaU0SsCs8Uj90@>(J#whvHleQe&sTI{fc^JQ`2wfm8JnY!gyAI*fSL#zcc6>TAlo~j zfn*eDd@<~hG^z;*VpvN_1TIqY+1M>CT!Y@D>jhO8PN`#c2hJh;9iAAfwi z2m7M7GAW8A?coyD>^?L;P8oUM2c6J@3hu+?7nq9rAxJEmio_ql5LQfu1iTyNRS%$Q z4=~_eia?mqR6!RXz-oz8!5j~b>OY_Afid*o{dkrXA{TwHdIY7i)p4ohsq8z5u@2&JSS)YD zm^B1tj3dt>czt1~feMD;guht>B*6Fr%LTm|0?+z845)o@+G8lmU>dT23`MM-hSofW zP5Ht!i03W5`yjylLxK1eP+93Gkitn5&3FQv;wDW}k~EaJLIk}-lZL!BY0{KZ?*_z_ z(E=IX*@^xX5^vH%s!w4Vzr+zd9hwXgOkHgfkc;6Y00svGYUdoq0*7%phT3bU4MR)c zAiH5$L{2(bj?|r{7+0c`!!X^((3@ef7tC}a7EUYVjlA14$S0K~)OyGUKs$@7oosN^nvU$d!>2s+5_UXv;IXK$}skpMa#8iIrn@cvnV^Gq=DdN#nALy%N zAkPXS2^{!HrSTe&U>$`LBaq2PIN?nH3&cK=4DQY2bwIC%17ce0!Uw^!8#N(z_Q8Ik%1q7&Pn>Eg%OK~-gKfb-0g2^^7XgCs_wZQmdwmV6`1kH1_c zZ-khZaN`}zro7k@qcAe-NDvX1M$MLez=*51=+Y=`Z;EzkaugH>#}3)NhNo;N?Lbur zeSr_;1#;n>be<($ z2XRb)%y_5KrvMlg7*PG7@CT~$6Ne-5=O*CNz=sNdpv<{Zm{R-84gkcKD0KV}sILJk z0#Bk+5xSy)Y%~_6w!~65x}w-J3M9r+E^VA;X)aw+@aW&1v`b5`(G^+aBuay=9G(jE z<1a2zn*kxqvWkH`;p0q7;queyibPfnQlrr=i7PQ^8I5i&Bpi!HLK2hUdl3A@=Nt$z z0x_g)+|M}CZn&c)=oZA2STvuYTe39ZPv*q`bL81ifJj&zY9r`2#PK-vhoD+a;QV9=gTBHit9SrJUNXvKKx6uF z1pGx1$~brlQ9{xw7)5j7)_|NWT1=1+OhJxJx+Q-#M4}m%us7}m%y^DvskFDS*a~>M z!KB*}M^e!Y0chWcREXyy$!)OS@&sV8%+fI6@b1()0Ws4_MCl!Z1)1=tBNY~m(%f_u zz@j^_%F}V0IG$>2!6FaS(H$IRu!fA{*@zZ`bVdHvfY8uIVj4<=pztM1B0dbXJvlMY zU@DwJrb~qH9jP}F-+>A&B`Hr0n+icWJ2Q}{5Z#`5oq-C4pkL>&g>=+T`U2t^ZDjb8 zA`G9JFocEH;ds)k5CCCj3J#}G{ay@!II|9&5QdE8GiiLQDW$`J1wiCwB6SgHb6+M} zE<(3v$*za^B>V!x4~Fb4h%lF7luYF{j??T~kHkgk*2MGm$U_u5TQ`fw$7NG9w@wtg zA_@TYg~n3|5|^{kPf;j?nT^cF==OrX*&q*h9n^aoR4E4QYxh5l?5w+(jgTw^K4u~p ziHtbpWwZgAh{K|Y+km3P>9$1626R}Q?m!4{L~q6ERsvodao)UlX>JlQ@}(4kXKDE2 zX%isg(MD7w0Toi+gdR!IZ5gXJK_V*NQWD1F2oA$zU9t}nfe>SxP@yC&H1iyELy~UI zT$h6-kfRx#0S%^rz||b&Hid34AiWt!{Qa;2VubxDlE}u3T?wu|Mu7?*AZapOPm_bD zEd>i;{BOpyqCx=@He1koDJXf<7IZ-h>fE^neV3x!v1GPFL7Wh94S2&q1xSPF(yb^- zn(n|nLPk-m{x*(yyA^$urdu!#b8#BVdT^J4h9+SECo{648-WmKa#6Jm-CWRm8^pwg z{Ou$B0dcHsih+Jv0!7Z21vEk;?6Sn>4;K)jmxuCY>DB_P^KcHlef%}V@HYXWJhRi} zKu~i#vX`T)s{Qk6_y0TVMr?;Hc*_Do64uIm3?j&P^h)TK99@Cfmyh1d(JdJ-aTH?j zfH8KHhr-+nps=EG2xdW$I8cD97L>9VwzIpzTU@J;B6c zoG2EQ59yVD01}LIn2|mUX=NzyXEBEy@s01?Ep$8Kmc39R$F0P0qiPDQMOho zAi|;?)vLn1&nidn@o#@QGE@T%KeYnIsL@sV$;dH}@Yo#?tcsJP0VNJxWj%N(Hu z+H9c4ks2`ky1Q_SXjGj9!@nO05w{DqX~3{I?LxmG2}7g`*MihsOQ%7K1vnfA?_9AO zDg(mYK@v&<^aEhrB$JSjZGrWXhGV}J!pXzs7TRj5QWQXQt=#w7y&Pmgi)_W|H87R)n(c+ zmG4y}Yi+uXfO-v10$&(nW2HhHl7#aJc@nt=gs87UAGBf7{H#I$SJsusRb6ax?hJR~ z%9^G^in}PTWF{&li2IV2OYVY#f)XGhiI;dhcDLL`$>KJ}J2N*J6!`2ZTh1 zV-c3WGJWg99nEDD4GYBjA@}d59;l4d=Q8PBj88AbS>We1rw1Qw%oI3$?9%a40Ey|2 zLKabMCTrL3*{coD{ru~mMh-nOR`SxIK|6UB*c0F2o&Yq9X%_%Cd^eT!=Yr z4>I;hhfLg?5GVB_dqM5H5}}4`XsAN~*uixA9#m7Oy`TnbS3x?+mnKlJuFrW^{RB@< zz&^c^zHl$S-y2JLlfXk3z}go#i7!E9J!+qT7XD-B@7M=JVv`0(Zdr&zOb2B8SwhV} zQU41N>ySa&ebB-EGU!$xjKtgw>eUxt<$i`x8mt;7p)Z(&_S4S3=%rEnAyK=Oj?Z4c zK>7do>O+xY$*af%`yshwCcV`U8O_b4b^Xu_cV^O=etfw8k4&gjMqkhVXt{w|h=<8_ z&Jr(Wc$1qqYpstEsA}H@V6lQMis=u_r{w{G%jxK%z&|-a4gHbJ)dSSWje8h+WJ9hw zwUXU1gqCFM@Z&v(P_Y|#wJwxm-*EqD#~RHqqYU~SnM%%;BLJ{bIpp&)hQX#BN_`ov zbR~zbzRWvwJljFJ>scG-l1uFe@F7+~xgsU(Al31g55TB8B(Y`mrVUn#0wAWx3h`5| zdk+vBc985|f!VeCAQWh;W56rmUO6NH9N?Gha~dGlC6B&*1*Hkjqo!9dpXKL~$3X63 zGUN+tm}c5;9f(daRzcX($y4Ozz)YJZhU>QS$IDi)LStn<^?wxxg4-9+5b2AX1#%iq z7P6=>XwR!Kf=){r#*Pu4+&Bm$+PVO2U?nsbd?vA+Yq#*^I-}e zf_Y-zVUaLO<#rkj{Vst>b9u{9M6b!Hn{agx5%JDPgjl*h-$R@Q9ia_FxwEBs!bLi& zj9G%w+%Il`W4tR7t*N_sAk~1QG|U4VgruVs>w(nbAs4C&!jGe8kBZdt?HBd5!KZ@X zwuFj3xQCT*iI4^dYd!$S*U*ReN{luYp@>reuv;Y*`WlDB?HI^%mBEj7uW?7qKmh85 zQjI($$A*RrQ2~D zHw@e2sN+Z;xNsp3pU7^oZy4%+T!NvhQ`Z1tmS1i0#K0Z<6?q^utp5tBv^o7FPsnXg zP_8FF(bN-k+Y{5!mJ=XobNomz5H6k|UoQ~aoup5_(1(0af}n=seIY-7lI(|LVmEv( zaN&e@e)g=*bJOoukd#Y(*Knk@J4Gc(YnpNjX+xGotBKjk8?CcdLOAFr$LBOahAR?M z7Wqa1tlw$M^yWj%;ipCN_X2R0S*~{G5nvycpgihCqW~D$8NphnjOtZD*yuC#=?Ivt z$x;#>60VXz7VI*Gsq6=i1iRH)dTS(>n(VXC6V`lKG6SL(k2UDo&8Hhct-ZgI#K7QZ zu*)daY`uab)KeCIfY`-vD0UPdZg%}vrig&8ByZE+fRIOitE1wxaEP7Pzxc(cxf54~dV;t4>%T>#1oiWY>C-y^O(o$da9tmyxLf6M=#&X2|X*RxD# zfy)`qzd*Z;gT`Qi$s;V5;?W}cgNaqP0L2?e%2xCR(ePMc%6#ki?A4&>wm%Dg0Bec5 z81>^g7!mz1(4BGUw~-g9_jnBcQy1vn@vzs8KZ<;%IsNr`w8WSn>DqYi?ELq`FaKYQ zwMe1dH|`Tq@NwlrfgE#75oceN)4Bkh%;2$MI<^alGI(I+Bf(phNp!3OyZ;2uFDiLiF@fEToyUWxxIW6TKmwl*n_mRfys`ZX5S#rAU3n8*$Q@Gj_m#lG zZ(*9Nkzf#xcE}DE0nE_riqN6FVL1W_Qh>CX>qV+834|@uNG@+;rNSwhXGiqkvD zv=o8i_-u!sYTOSo+%nq}YRKoB=bDrQ1!KG!u;zev^`C!Xb3xCgfTls|UesSuX%w zo7Fr`J!T=Vi4s&lkt_hfHr7+jER?*mo{r8!$(?S|!&!Vd3%Nx@XTz~kd<$AaaA-n0 zhPTc}{SCi0Lt>h}2#AgUjT&a7V{QD6`pm&(RVFBEl&qcu`Gnu;GvLN`zXK14MY3UEMbrMqDy6Zfoak)dD z^PoN84!F_U?^qv0V)_Y4wC@7#lFdayZhw~=<{^Xmcd3sLD!%_NE%Cut_CI$)RZi)z zeZU)l!&yGC?PD9LldtH64K&-Azh<=k4|vTNP>X!g(32DrzDzp<_7I@{V*#pB+kZad z)LrmFAQdm90{mXJFH94wrCQY-z4~|AzuFcrFVtzO=Y3RxvMt z$vQXEod8jWM(Q01BQ&Q`XHlMB{!#f3a&SdgObNuw`>>Jr1adDn_6gk##z8s-w^+pvbyC zT7q@eu1QDVJ;AFceS^3w^KYV=LC{&$L_31`FmAG7bTx>3nrGrDP(^xWaz!q63WDQ# z)VrwYUI||Quo+AQX#J-E_g17=nBYTwrw3f&f#8oXC`7T>1pRu zK9sjKFe>G&HN74NOGh6Dk-vdDg~7@=X`sbn$i&V_`@-;f<{9zCm7d9uXHPBP12x}B z{odo=);1<)aVhqnZAcK?%m7@K_EFXDwN+^cROaOZPnY=Ks@;iIX{qFpjcTCL2HhH##l#*47fOq-UWD_OUo zA4TZX0(Yx1zVccyT55&r-CBm~#YI4s$(nXR#AaJlRRkZ$Pg*mIGh^zNePu=@DBW#n zStOsvQf=s5Bp+e-$OiQ|m{oPKr0QT!)j?IRAyHsXw54fL$Uohdwnsr}qb*&H!h|{2 zjygmmthJ+g(HL{R?P+^7?@D|*5=Glnhvg{TIeSJ|Y*9Fw^IC|^?H!m!^{PYF@t>*Y zIt9?$Pl83&@k!OIs9`PI#IORbm@DDK)$vEF!I*N<*e)KMRx(Cu0w{gJqu!cXWLwqLaR17xzG6{UWFOfp*0&mwGSMUE?x znfr^(qBdcF?YccmL*z>7s?FMa*%>&3zy-1}*t!W%W^S0K|@X?yu zRBiU%8v_l$YG5&`GStPO3_aVBE*2?6+tBMGENDY3V)3;c+R||mpWc?9#^S4Gwk5AP z#P8uRbK>yTyd0@S#FHGUF%I^qc!p8hT;}f`k+*!YQIy_^+ONW#(Ao)L(XpCBTx1d} z#Eexa&>R7l9H?FQi2}C>Fb!Z`LQ?IP)e5`-klk{kJFAfE;FqXhJaUbFiGmQCPrn3m z%C;N$VL+<=CLS7W+X4LdvD)OF3N)?;I8_6SwE~O)$hKqCxf*Kg+tFvMp%(vy@QVne z+LKcP)E{dPP1}p>KGn(+m4Huda0Xbg^X9(HoB!TP4f3ba1XOW~zzYlOk~XMpAAroZ zIg`U0X#CZg-VkBW4wQn>9NK|dT;K3n?Ex$-qCIY|K^Y4Kn0~l6SOxswyK7n$t zqApe`7?E4LGCI&1Nrt9yS986f?AcmZn5}Y4NPgt09i&ix|V{h e8@iG6hX~!f)2t7%XfXpbv|6IGi0RI-`}{AZRPks4 diff --git a/java-8-openjdk/security/blacklisted.certs b/java-8-openjdk/security/blacklisted.certs index 00a1dcf..beded9e 100644 --- a/java-8-openjdk/security/blacklisted.certs +++ b/java-8-openjdk/security/blacklisted.certs @@ -1,20 +1,39 @@ -Algorithm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lgorithm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diff --git a/java-8-openjdk/security/java.security b/java-8-openjdk/security/java.security index ad8393c..b766d2e 100644 --- a/java-8-openjdk/security/java.security +++ b/java-8-openjdk/security/java.security @@ -768,6 +768,40 @@ jdk.tls.legacyAlgorithms= \ # EE386BFB 5A899FA5 AE9F2411 7C4B1FE6 49286651 ECE65381 \ # FFFFFFFF FFFFFFFF, 2} +# +# TLS key limits on symmetric cryptographic algorithms +# +# This security property sets limits on algorithms key usage in TLS 1.3. +# When the amount of data encrypted exceeds the algorithm value listed below, +# a KeyUpdate message will trigger a key change. This is for symmetric ciphers +# with TLS 1.3 only. +# +# The syntax for the property is described below: +# KeyLimits: +# " KeyLimit { , KeyLimit } " +# +# WeakKeyLimit: +# AlgorithmName Action Length +# +# AlgorithmName: +# A full algorithm transformation. +# +# Action: +# KeyUpdate +# +# Length: +# The amount of encrypted data in a session before the Action occurs +# This value may be an integer value in bytes, or as a power of two, 2^29. +# +# KeyUpdate: +# The TLS 1.3 KeyUpdate handshake process begins when the Length amount +# is fulfilled. +# +# Note: This property is currently used by OpenJDK's JSSE implementation. It +# is not guaranteed to be examined and used by other implementations. +# +jdk.tls.keyLimits=AES/GCM/NoPadding KeyUpdate 2^37 + # Cryptographic Jurisdiction Policy defaults # # Import and export control rules on cryptographic software vary from @@ -1101,3 +1135,16 @@ jdk.security.caDistrustPolicies=SYMANTEC_TLS # security property value defined here. # #jdk.security.krb5.default.initiate.credential=always-impersonate + +# +# Trust Anchor Certificates - CA Basic Constraint check +# +# X.509 v3 certificates used as Trust Anchors (to validate signed code or TLS +# connections) must have the cA Basic Constraint field set to 'true'. Also, if +# they include a Key Usage extension, the keyCertSign bit must be set. These +# checks, enabled by default, can be disabled for backward-compatibility +# purposes with the jdk.security.allowNonCaAnchor System and Security +# properties. In the case that both properties are simultaneously set, the +# System value prevails. The default value of the property is "false". +# +#jdk.security.allowNonCaAnchor=true -- 2.39.5