From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: "Timothy J. Miller" Newsgroups: gmane.emacs.bugs Subject: bug#63157: 29.0.60; mml-sec with EPA S/MIME signencrypt messgages are not parsed by other implementations Date: Fri, 28 Apr 2023 15:36:17 -0500 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="27058"; mail-complaints-to="usenet@ciao.gmane.io" To: 63157@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri Apr 28 22:37:21 2023 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1psUqG-0006rK-DR for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 28 Apr 2023 22:37:20 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1psUq0-0007RY-Ku; Fri, 28 Apr 2023 16:37:04 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1psUpz-0007RG-7J for bug-gnu-emacs@gnu.org; Fri, 28 Apr 2023 16:37:03 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1psUpy-0001iC-Fo for bug-gnu-emacs@gnu.org; Fri, 28 Apr 2023 16:37:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1psUpy-0000B9-CR for bug-gnu-emacs@gnu.org; Fri, 28 Apr 2023 16:37:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: "Timothy J. Miller" Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 28 Apr 2023 20:37:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 63157 X-GNU-PR-Package: emacs X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Original-Received: via spool by submit@debbugs.gnu.org id=B.1682714188632 (code B ref -1); Fri, 28 Apr 2023 20:37:02 +0000 Original-Received: (at submit) by debbugs.gnu.org; 28 Apr 2023 20:36:28 +0000 Original-Received: from localhost ([127.0.0.1]:34607 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1psUpP-0000A7-Th for submit@debbugs.gnu.org; Fri, 28 Apr 2023 16:36:28 -0400 Original-Received: from lists.gnu.org ([209.51.188.17]:42850) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1psUpM-00009v-Bi for submit@debbugs.gnu.org; Fri, 28 Apr 2023 16:36:26 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1psUpM-0007AO-5C for bug-gnu-emacs@gnu.org; Fri, 28 Apr 2023 16:36:24 -0400 Original-Received: from smtpvbsrv1.mitre.org ([198.49.146.234]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1psUpJ-0001e6-Q2 for bug-gnu-emacs@gnu.org; Fri, 28 Apr 2023 16:36:23 -0400 Original-Received: from smtpvbsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 40D44132E0F1 for ; Fri, 28 Apr 2023 16:36:20 -0400 (EDT) Original-Received: from smtprhbv1.mitre.org (unknown [10.20.0.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtpvbsrv1.mitre.org (Postfix) with ESMTPS id D9F3A132E099 for ; Fri, 28 Apr 2023 16:36:19 -0400 (EDT) Original-Received: from MM273467-PC (f5-infra-prod-vl2218-fip.mitre.org [10.20.118.253]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtprhbv1.mitre.org (Postfix) with ESMTPS id 7ABAE947603 for ; Fri, 28 Apr 2023 16:36:19 -0400 (EDT) X-MITRE: 8GQsMWxq66rxk57w DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.org; h=from:to:subject:date:message-id:mime-version:content-type; s=mZkevYdL; bh=Mhjcl6bkpCukWQ6h9agQBCXkczcDbbSgP7WsLzxNCO8=; b=k7xa+4+oSuccO252F38O2jXk0Ymc5AQ+bVMctBn1B0ssMdoszoREMon3CooF1obathrFfXYEAbP0lnLKKqldOGS0ZCp8FLw7gYtWDYY+9NVUiAEOPOCnQ95IqXG0q1Tyh5l7v/MYfOiWWzvBYHL5oXGv5siiMR4zN9lfd5rweok= Received-SPF: pass client-ip=198.49.146.234; envelope-from=tmiller@mitre.org; helo=smtpvbsrv1.mitre.org X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:260792 Archived-At: --=-=-= Content-Type: text/plain S/MIME signencrypt messages created with epg enabled are readable by gnus-article-mode and other emacs modes, but not anything else. Signed messages are fine. Encrypted-only (e.g., by setting "smime" to combined in mml-signencrypt-sytle-alist, which is not supported) is also fine. For example, the p7m attachment from an EPA enabled signencrypt message will decrypt, but resulting multipart won't verify with Outlook or gpgsm, but will verify with OpenSSL: ``` ~/Documents/projects/scratch/smime > gpgsm -d emacs.p7m > emacs.mime gpgsm: encrypted to rsa2048 key 28AB1F8A641EF8784309B496484C16A6C5F741A0 ~/Documents/projects/scratch/smime > gpgsm --debug 1 --verify emacs.mime gpgsm: reading options from '/Users/tmiller/.gnupg/gpgsm.conf' gpgsm: reading options from '[cmdline]' gpgsm: enabled debug flags: x509 gpgsm: enabled compatibility flags: gpgsm: ksba_cms_parse failed: End of file secmem usage: 0/16384 bytes in 0 blocks ~/Documents/projects/scratch/smime > openssl smime -verify < emacs.mime Content-Type: text/plain lsakdjfhlaskjdhflaksdjhflkasdjhflkajsdhflkajshdflkjashd alksdjuhflkasjdhflkasjdhflkasdjhflkasjdhflkasjdhflkasjdhf -- -- T Verification successful ``` If I configure S/MIME to use OpenSSL, signencrypt messages work just fine. A sample decrypted MIME parts attached with the signing cert if you need it. -- T In GNU Emacs 29.0.60 (build 1, x86_64-apple-darwin20.6.0, NS appkit-2202.70 Version 11.7.2 (Build 20G1020)) of 2023-03-10 built on MM273467-PC Windowing system distributor 'Apple', version 10.3.2022 System Description: macOS 11.7.6 Configured using: 'configure --disable-dependency-tracking --disable-silent-rules --enable-locallisppath=/usr/local/share/emacs/site-lisp --infodir=/usr/local/Cellar/emacs-plus@29/29.0.60/share/info/emacs --prefix=/usr/local/Cellar/emacs-plus@29/29.0.60 --with-xml2 --with-gnutls --with-native-compilation --without-compress-install --without-dbus --without-imagemagick --with-modules --with-rsvg --with-ns --disable-ns-self-contained 'CFLAGS=-Os -w -pipe -march=nehalem -mmacosx-version-min=11 -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX11.sdk -DFD_SETSIZE=10000 -DDARWIN_UNLIMITED_SELECT' 'CPPFLAGS=-I/usr/local/opt/zlib/include -I/usr/local/opt/jpeg/include -I/usr/local/opt/icu4c/include -I/usr/local/opt/openssl@1.1/include -F/usr/local/Frameworks -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX11.sdk' 'LDFLAGS=-L/usr/local/opt/zlib/lib -L/usr/local/opt/jpeg/lib -L/usr/local/opt/icu4c/lib -L/usr/local/opt/openssl@1.1/lib -L/usr/local/lib -F/usr/local/Frameworks -Wl,-headerpad_max_install_names -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX11.sdk'' Configured features: ACL GIF GLIB GMP GNUTLS JPEG JSON LCMS2 LIBXML2 MODULES NATIVE_COMP NOTIFY KQUEUE NS PDUMPER PNG RSVG SQLITE3 THREADS TIFF TOOLKIT_SCROLL_BARS TREE_SITTER WEBP XIM ZLIB Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: ELisp/l Minor modes in effect: shell-dirtrack-mode: t mu4e-modeline-mode: t format-all-mode: t global-hl-todo-mode: t hl-todo-mode: t corfu-popupinfo-mode: t global-corfu-mode: t corfu-mode: t marginalia-mode: t vertico-mouse-mode: t vertico-mode: t override-global-mode: t global-display-line-numbers-mode: t display-line-numbers-mode: t electric-pair-mode: t tooltip-mode: t global-eldoc-mode: t eldoc-mode: t show-paren-mode: t electric-layout-mode: t electric-indent-mode: t mouse-wheel-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t line-number-mode: t global-visual-line-mode: t visual-line-mode: t indent-tabs-mode: t transient-mark-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t Load-path shadows: None found. Features: (shadow emacsbug cl-print ielm em-unix em-term term disp-table ehelp em-script em-prompt em-ls em-hist em-pred em-glob em-extpipe em-cmpl em-dirs esh-var em-basic em-banner em-alias em-tramp tramp tramp-loaddefs trampver tramp-integration tramp-compat shell ls-lisp em-rebind esh-mode eshell esh-cmd esh-ext esh-opt esh-proc esh-io esh-arg esh-module esh-groups esh-util cus-start files-x view ace-window avy network-stream nsm mailalias py-isort dabbrev calc calc-loaddefs rect calc-macs mm-archive sort smiley gnus-cite mail-extr textsec uni-scripts idna-mapping uni-confusable textsec-check qp face-remap mu4e-icalendar gnus-icalendar org-capture icalendar diary-lib diary-loaddefs epa-file mu4e mu4e-org ob-plantuml embark-org org-element org-persist xdg org-id org-refile avl-tree generator org ob ob-tangle ob-ref ob-lob ob-table ob-exp org-macro org-src ob-comint org-pcomplete pcomplete org-list org-footnote org-faces org-entities noutline outline ob-emacs-lisp ob-core ob-eval org-cycle org-table ol org-fold org-fold-core org-keys oc org-loaddefs org-version org-compat org-macs format-spec mu4e-notification notifications mu4e-main mu4e-view comint ansi-osc ansi-color ring gnus-art mm-uu mml2015 mm-view mml-smime smime gnutls dig gnus-sum gnus-group gnus-undo gnus-start gnus-dbus dbus gnus-cloud nnimap nnmail mail-source utf7 nnoo parse-time iso8601 gnus-spec gnus-int gnus-range gnus-win gnus nnheader range cal-menu calendar cal-loaddefs mu4e-headers mu4e-compose mu4e-draft mu4e-actions smtpmail mu4e-search mu4e-lists mu4e-bookmarks mu4e-mark mu4e-message shr pixel-fill kinsoku url-file svg xml dom flow-fill hl-line mu4e-contacts mu4e-update mu4e-folders mu4e-context mu4e-query-items mu4e-server mu4e-modeline mu4e-vars mu4e-helpers mu4e-config mu4e-window ido message sendmail yank-media puny dired dired-loaddefs rfc822 mml mml-sec epa derived epg rfc6068 epg-config gnus-util mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047 rfc2045 mm-util ietf-drums mail-prsvr mailabbrev mail-utils gmm-utils mailheader mu4e-obsolete cursor-sensor time-date tutorial comp comp-cstr warnings rx format-all language-id inheritenv my-org my-email my-plantuml my-golang project my-jinja-yaml my-jinja2 my-yaml my-csv my-python my-hl-todo hl-todo my-ide my-tree-sitter treesit my-eshell my-ace-window my-helpful helpful cc-langs cc-vars cc-defs imenu trace edebug debug backtrace info-look find-func f f-shortdoc help-fns radix-tree elisp-refs s dash my-combobulate my-cape cape my-corfu corfu-popupinfo corfu my-embark embark-consult consult bookmark text-property-search embark ffap thingatpt my-orderless orderless my-marginalia marginalia my-vertico cus-edit pp cus-load icons wid-edit vertico-mouse vertico-directory vertico compat my-consult edmacro kmacro cl-extra help-mode use-package-bind-key bind-key easy-mmode use-package-ensure use-package-core modus-operandi-theme modus-themes pcase display-line-numbers elec-pair exec-path-from-shell finder-inf my-auth auth-source-pass py-isort-autoloads gotest-autoloads marginalia-autoloads pyvenv-autoloads cape-autoloads go-mode-autoloads orderless-autoloads csv-mode-autoloads go-gen-test-autoloads consult-eglot-autoloads embark-consult-autoloads embark-autoloads vertico-autoloads ace-window-autoloads avy-autoloads format-all-autoloads language-id-autoloads combobulate-autoloads inheritenv-autoloads hl-todo-autoloads consult-autoloads corfu-terminal-autoloads popon-autoloads corfu-autoloads compat-autoloads vc-use-package-autoloads poly-ansible-autoloads yaml-mode-autoloads jinja2-mode-autoloads ansible-autoloads helpful-autoloads elisp-refs-autoloads f-autoloads s-autoloads polymode-autoloads ansible-doc-autoloads exec-path-from-shell-autoloads plantuml-mode-autoloads info dash-autoloads package browse-url url url-proxy url-privacy url-expand url-methods url-history url-cookie generate-lisp-file url-domsuf url-util mailcap url-handlers url-parse auth-source cl-seq eieio eieio-core cl-macs password-cache json subr-x map byte-opt bytecomp byte-compile url-vars cl-loaddefs cl-lib chemacs gv rmc iso-transl tooltip cconv eldoc paren electric uniquify ediff-hook vc-hooks lisp-float-type elisp-mode mwheel term/ns-win ns-win ucs-normalize mule-util term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list replace newcomment text-mode lisp-mode prog-mode register page tab-bar menu-bar rfn-eshadow isearch easymenu timer select scroll-bar mouse jit-lock font-lock syntax font-core term/tty-colors frame minibuffer nadvice seq simple cl-generic indonesian philippine cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese composite emoji-zwj charscript charprop case-table epa-hook jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs theme-loaddefs faces cus-face macroexp files window text-properties overlay sha1 md5 base64 format env code-pages mule custom widget keymap hashtable-print-readable backquote threads kqueue cocoa ns lcms2 multi-tty make-network-process native-compile emacs) Memory information: ((conses 16 712600 56314) (symbols 48 63261 3) (strings 32 262495 34299) (string-bytes 1 7453545) (vectors 16 72471) (vector-slots 8 1796940 116594) (floats 8 566 287) (intervals 56 16609 656) (buffers 984 33)) --=-=-= Content-Type: application/octet-stream Content-Disposition: attachment; filename=emacs.mime Content-Transfer-Encoding: base64 Q29udGVudC1UeXBlOiBtdWx0aXBhcnQvc2lnbmVkOyBib3VuZGFyeT0iPS09LT0iOwoJbWljYWxn PXNoYTI1NjsgICBwcm90b2NvbD0iYXBwbGljYXRpb24vcGtjczctc2lnbmF0dXJlIgoKLS09LT0t PQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4KCmxzYWtkamZobGFza2pkaGZsYWtzZGpoZmxrYXNk amhmbGthanNkaGZsa2Fqc2hkZmxramFzaGQKYWxrc2RqdWhmbGthc2pkaGZsa2FzamRoZmxrYXNk amhmbGthc2pkaGZsa2FzamRoZmxrYXNqZGhmCgotLQotLSBUCgotLT0tPS09CkNvbnRlbnQtVHlw ZTogYXBwbGljYXRpb24vcGtjczctc2lnbmF0dXJlOyBuYW1lPXNtaW1lLnA3cwpDb250ZW50LVRy YW5zZmVyLUVuY29kaW5nOiBiYXNlNjQKQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsg ZmlsZW5hbWU9c21pbWUucDdzCgpNSUFHQ1NxR1NJYjNEUUVIQXFDQU1JQUNBUUV4RHpBTkJnbGdo a2dCWlFNRUFnRUZBRENBQmdrcWhraUc5dzBCQndFQUFLQ0NDdUV3CmdnVm5NSUlEVDZBREFnRUNB Z3AxSlY0bkFBRUFBQUFMTUEwR0NTcUdTSWIzRFFFQkN3VUFNQ2t4SnpBbEJnTlZCQU1USGsxSlZG SkYKSUVOdmNuQnZjbUYwYVc5dUlGQkZJRkp2YjNRZ1EwRXRNVEFlRncweE9URXhNRFl4TlRVNU1U ZGFGdzB5T0RFeE1ERXhORFE1TkRkYQpNRkF4RXpBUkJnb0praWFKay9Jc1pBRVpGZ05QVWtjeEZU QVRCZ29Ka2lhSmsvSXNaQUVaRmdWTlNWUlNSVEVpTUNBR0ExVUVBeE1aClRVbFVVa1VnUTI5eWNH OXlZWFJwYjI0Z1VFVWdRMEV0TWpDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFv Q2dnRUIKQUpDd2ZkZk54VlhaNi9KcExlQ3NXVjhWdlZQUkFpSTR1ZW1OM0N5bjgxZ0svMHVDMEtK UlgvV0oxWEhtZnplTGVzeUY0Nnl4Q2dkMApmZTZtdGFEZkZRTldmbmd6TVZhaUhIVDduTnlSY09v NVRFK1ptekRlN2k0Q3ArU2Q3eVNTeWFqNVdUTFZ5bHY2UG1GeHRLWW0vMnRJCjQ0dEVMaEdSRHN3 L0o3cmh3aTAvOWpFdWp4alhwTDY0bDcyYmNyRWFEajhwU0ZnMUxOUExGRWU0UzJqSTl5eGM1azBa S1FKdHFHaEIKVlB0T0dTaVpnSThheHJWa2RuanIxRHdyME0xVVQ3UW1leHArcjBXdk1LMTY4NzdW YUFwT0duMDU2MGVLdExnQlliOGo3MkI3S1V3RgpHRk10dU03WmRDQ0hZYml3TFZuYXVPRmJQSzZx eGhLLzFmUUJoWjBDQXdFQUFhT0NBV2d3Z2dGa01CSUdDU3NHQVFRQmdqY1ZBUVFGCkFnTUJBQUl3 SXdZSkt3WUJCQUdDTnhVQ0JCWUVGRXZsaiszZ080QkY0ZXBqeDBTaUZwdEJ2ZzNCTUIwR0ExVWRE Z1FXQkJRTXhtdnUKQWthMTJZL2JvOHpzdkQ3aEJiMmxKekFaQmdrckJnRUVBWUkzRkFJRURCNEtB Rk1BZFFCaUFFTUFRVEFMQmdOVkhROEVCQU1DQVlZdwpEd1lEVlIwVEFRSC9CQVV3QXdFQi96QWZC Z05WSFNNRUdEQVdnQlJiaDMyZi9teStBdW56NENrNmlsUWxMSjg0THpCUUJnTlZIUjhFClNUQkhN RVdnUTZCQmhqOW9kSFJ3T2k4dmNHdHBMbTFwZEhKbExtOXlaeTlOU1ZSU1JTVXlNRU52Y25CdmNt RjBhVzl1SlRJd1VFVWwKTWpCU2IyOTBKVEl3UTBFdE1TNWpjbXd3WGdZSUt3WUJCUVVIQVFFRVVq QlFNRTRHQ0NzR0FRVUZCekFDaGtKb2RIUndPaTh2Y0d0cApMbTFwZEhKbExtOXlaeTlOU1ZSU1JT VXlNRU52Y25CdmNtRjBhVzl1SlRJd1VFVWxNakJTYjI5MEpUSXdRMEV0TVNneEtTNWpjblF3CkRR WUpLb1pJaHZjTkFRRUxCUUFEZ2dJQkFBWUZScFd6Y2VhTVRLTHcvKy8xVVRMZlNDRlNLeUFPcjNr QjlHS1RVcGZwWXY5WG9nQnMKSGZXQkVQYUJWY3FWU2RFVjhuREx4bnlXSzByTk5uNVdva2d4dTFK Wk1ESHVzd0VONTdRbEJLdGd5dnhDS3RmalM0aTN0UmwxVzlhdQoxMWE2cjVZOEd5dDVRS3ZkRHM1 YVBIR05lcDdwdjQ3L3JVUHhTYVJ0cGp3VVNkWmhZQ3M3V1BUdEJwS3JHcHpreFRuQ0hlV3V1T0ps CnNMaTFPZm1TVGN1Q0lwa3hINFNsRTdJTGJkZmcxUDVBeVkwdmtMcE1IN3NYVTdSQ1R4ZTl1bmw3 bjFkcnhVL2hkNjczaUZmYWYvc0kKVnM1VTJndUVBdkxyUkZudXFVL2JscEdsR1pKNnN4clhxMmV0 SUdubVZ6S3oyVnFYSSs2SVpzcVBHcmdaeWYvVEtNTVM4a3B3elJrRgoxV1NtL09IMkpKRm9scmlB MmFsOWxOS1o1bTYxZG5QZVl5RjJDWDQ1azkzL1dNWEMzcGFNV3Y3cDlQR0dIbzNnRGtGWGJlRElD eU9FCk1iR1VYVXRlNGRLbC9MSlZqL3NFMUIrYytoUEZJUnJoNjRlRWQzaVpKRm1wVWtZMUVjV21Z RzdoQzBGL0Z1OUcrUlQxd3BDc1FncVEKWEY1azBWaGdoMmR1V2QyQlNJV2FPbUhFeFVGWEd5MjFs M3gwSWpGMW1la04rTnNjRUZHVExidnJCM0VWWUdwVVZhNGtxL21EcldBWgpEUDBHSDJobWtaSUtZ U2wyeUlHeVp2R0s3OVB3VG0zcytaaGRDOFZuNDJDaDFvOUU0aGxUeFlyb05TTkJnYXpKeSsrMmJN WWZUNld5CklPNG9QQmpmR2JFZnE5SU1UY1FxUDlReE1JSUZjakNDQkZxZ0F3SUJBZ0lLRkRtaDRB QUNBQURkR2pBTkJna3Foa2lHOXcwQkFRc0YKQURCUU1STXdFUVlLQ1pJbWlaUHlMR1FCR1JZRFQx SkhNUlV3RXdZS0NaSW1pWlB5TEdRQkdSWUZUVWxVVWtVeElqQWdCZ05WQkFNVApHVTFKVkZKRklF TnZjbkJ2Y21GMGFXOXVJRkJGSUVOQkxUSXdIaGNOTWpBd09ESTBNVGN5TWpBeFdoY05Nak13T0RJ ME1UY3lNakF4CldqQ0JnakVUTUJFR0NnbVNKb21UOGl4a0FSa1dBMDlTUnpFVk1CTUdDZ21TSm9t VDhpeGtBUmtXQlUxSlZGSkZNUkl3RUFZRFZRUUwKRXdsTWIyTmhkR2x2Ym5NeEN6QUpCZ05WQkFz VEFsTk9NUTR3REFZRFZRUUxFd1ZWVTBWU1V6RWpNQ0VHQTFVRUF4TWFWR2x0YjNSbwplU0JLSUUx cGJHeGxjaUFvVkUxSlRFeEZVaWt3Z2dFaU1BMEdDU3FHU0liM0RRRUJBUVVBQTRJQkR3QXdnZ0VL QW9JQkFRQ1pTR3MrCkZBTHZpTjdSZFplRmNOSU44dVFBcmM5VDBxZk9Dc1p5QlVRTVJhRjY5b0tK d1crdm1INWZHSXRER0dpM0htR1FLMlpDWjkya0NWRjcKcEtXK2xMTmNxZ1RtKy9QQlVyVm96bzZO QVdldWRzcmFOSjk4cEFWTG1aSFR1dUd6VW1pOEdMRitYTWU3VjZabkU4U3R1RFhsYmNJdQpEbWIr V2l1cThNVlVJS2dWQ2UyYzBhejd3dTQ3UjlOWW9GeWdIQjg3VGZsUGRDWVdaMXlCZEZkSjhZTVkr a3BxQXhkaFV5NkpuSGcyCm9xQXMwdlMxYkRzb2srdW5VeXljQWozSG5mdUVuS0VCQ0FvRWd4QllD Z1JaQzdKeHQzRHdZNTJEbDFhRklKSWJXL1VGTWNQZmIwdGMKUFJaR2lZVWRZRlZqc1djc2lDYWpW VGpWc3VFVHNPQlZBZ01CQUFHamdnSVpNSUlDRlRBK0Jna3JCZ0VFQVlJM0ZRY0VNVEF2QmljcgpC Z0VFQVlJM0ZRaURycXdqaG82V1Y0R05pVDJDcEtzU2hiNnVBWUUyaG96SENJWGd3QWtDQVdRQ0FR b3dFd1lEVlIwbEJBd3dDZ1lJCkt3WUJCUVVIQXdRd0N3WURWUjBQQkFRREFnWGdNQnNHQ1NzR0FR UUJnamNWQ2dRT01Bd3dDZ1lJS3dZQkJRVUhBd1F3UkFZSktvWkkKaHZjTkFRa1BCRGN3TlRBT0Jn Z3Foa2lHOXcwREFnSUNBSUF3RGdZSUtvWklodmNOQXdRQ0FnQ0FNQWNHQlNzT0F3SUhNQW9HQ0Nx RwpTSWIzRFFNSE1CMEdBMVVkRGdRV0JCVHJ6OVU0bnArbDhGMlQyTHEyNkFnamlwb3UyekFmQmdO VkhTTUVHREFXZ0JRTXhtdnVBa2ExCjJZL2JvOHpzdkQ3aEJiMmxKekJNQmdOVkhSOEVSVEJETUVH Z1A2QTloanRvZEhSd09pOHZjR3RwTG0xcGRISmxMbTl5Wnk5TlNWUlMKUlNVeU1FTnZjbkJ2Y21G MGFXOXVKVEl3VUVVbE1qQkRRUzB5S0RFcExtTnliREIvQmdnckJnRUZCUWNCQVFSek1IRXdSd1lJ S3dZQgpCUVVITUFLR08yaDBkSEE2THk5d2Eya3ViV2wwY21VdWIzSm5MMDFKVkZKRkpUSXdRMjl5 Y0c5eVlYUnBiMjRsTWpCUVJTVXlNRU5CCkxUSW9NaWt1WTNKME1DWUdDQ3NHQVFVRkJ6QUJoaHBv ZEhSd09pOHZiMk56Y0M1dGFYUnlaUzV2Y21jdmIyTnpjREEvQmdOVkhSRUUKT0RBMm9DRUdDaXNH QVFRQmdqY1VBZ09nRXd3UlZFMUpURXhGVWtCTlNWUlNSUzVQVWtlQkVYUnRhV3hzWlhKQWJXbDBj bVV1YjNKbgpNQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNJQm4rWlBpV2MrcXFTSVpmaWQwQzg3 RFFQSW03em1XWG0weFJiRWVVaGVETmNTVjUrCjIvaURnSEQ2WVVLaysrYkNlblJRUkQvbCtDNUta QnNuNUZrOWtHTmhldk10WTNPbjlSaFlvb05CbnhMNkhkd0h1bTk4TUkxNnA5QUwKc3RlRG1rT29m cEZwbVdxMTBWRHFXbjdkVGtyT1ozdkppTkIxQTJvblR6R2hIeGI1ZWVkTmdHdXF2WlV5d0NNbmU5 SmRCbW0zb1BmSwprazduOTQ3NHVsM1JYUmQ4V08vTDZNUG5CcVR2MGcyTHRPM1d6WVNXYVZyME9z UTlocFVVSDNvOThTbWFMQ2ZsK1NiOSs3dkVYU3BkCkZiQmVLVHV5eHMyVENPdEROSXFnUzh2UGM3 TEpFd1JGL3p6cG9wL1dkdk55RW5JWEFXRnlKSE50TGEzdzR3ZGhNWUlDTERDQ0FpZ0MKQVFFd1hq QlFNUk13RVFZS0NaSW1pWlB5TEdRQkdSWURUMUpITVJVd0V3WUtDWkltaVpQeUxHUUJHUllGVFVs VVVrVXhJakFnQmdOVgpCQU1UR1UxSlZGSkZJRU52Y25CdmNtRjBhVzl1SUZCRklFTkJMVElDQ2hR NW9lQUFBZ0FBM1Jvd0RRWUpZSVpJQVdVREJBSUJCUUNnCmdhQXdHQVlKS29aSWh2Y05BUWtETVFz R0NTcUdTSWIzRFFFSEFUQWNCZ2txaGtpRzl3MEJDUVV4RHhjTk1qTXdOREk0TVRjeE16UTEKV2pB dkJna3Foa2lHOXcwQkNRUXhJZ1FnSWpvbXhhc082RjJyRW1aOU90Yms1OU0rNDZBRzZMV0k5c0JL MUpaV09QQXdOUVlKS29aSQpodmNOQVFrUE1TZ3dKakFMQmdsZ2hrZ0JaUU1FQVNvd0N3WUpZSVpJ QVdVREJBRUNNQW9HQ0NxR1NJYjNEUU1ITUEwR0NTcUdTSWIzCkRRRUJBUVVBQklJQkFHNmpaMEdF VVJXeHJGM1ZxKy8xWldDbjIxd1FOQk40SnZPdk1HVlFRZ3BFNGRPQXZ4Slhhd3RrZ3M5UG5PY3EK bFg2eW1tZ1hOQTQrL2t6S1FOYUR0cHo5SzdGVmFMRHFCRkxkTU55M0NoMW1JOVdaY1VBdVA5K1ZF THFXWmlIYzdaU0dJYytBU0dPNwpyQklVSDVjNDdBdXVIcGQ0QWp6QWJ0dllCamlzOHNIWWpHcXR5 NkwyQzBoTG5BVGNWeC9TQ3R1MjdzRkR2QlVyZ25vaDUvYmdqcGJuClZmdWltMGIyblhaMjU2dXRR NHRrbTRvakZwa2o4SEFEckpoWGVyNWI2RG9SZW9mSUw5WGNySmlxaEVnQ3EzV2xGalc1a3YrSDFs NHkKTC9rQXovTHJHaVJrYnp2N2pERkVva1JURnJXY2ovWTc2UkVRajV0Sytyc1EzdVgwZldnQUFB QUFBQUE9Ci0tPS09LT0tLQo= --=-=-= Content-Type: application/octet-stream Content-Disposition: attachment; filename=cert.pem Content-Transfer-Encoding: base64 QmFnIEF0dHJpYnV0ZXMKICAgIGxvY2FsS2V5SUQ6IDAxIDAwIDAwIDAwIApzdWJqZWN0PS9EQz1P UkcvREM9TUlUUkUvT1U9TG9jYXRpb25zL09VPVNOL09VPVVTRVJTL0NOPVRpbW90aHkgSiBNaWxs ZXIgKFRNSUxMRVIpCmlzc3Vlcj0vREM9T1JHL0RDPU1JVFJFL0NOPU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTIKLS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZjakNDQkZxZ0F3SUJBZ0lL RkRtaDRBQUNBQURkR2pBTkJna3Foa2lHOXcwQkFRc0ZBREJRTVJNd0VRWUsKQ1pJbWlaUHlMR1FC R1JZRFQxSkhNUlV3RXdZS0NaSW1pWlB5TEdRQkdSWUZUVWxVVWtVeElqQWdCZ05WQkFNVApHVTFK VkZKRklFTnZjbkJ2Y21GMGFXOXVJRkJGSUVOQkxUSXdIaGNOTWpBd09ESTBNVGN5TWpBeFdoY05N ak13Ck9ESTBNVGN5TWpBeFdqQ0JnakVUTUJFR0NnbVNKb21UOGl4a0FSa1dBMDlTUnpFVk1CTUdD Z21TSm9tVDhpeGsKQVJrV0JVMUpWRkpGTVJJd0VBWURWUVFMRXdsTWIyTmhkR2x2Ym5NeEN6QUpC Z05WQkFzVEFsTk9NUTR3REFZRApWUVFMRXdWVlUwVlNVekVqTUNFR0ExVUVBeE1hVkdsdGIzUm9l U0JLSUUxcGJHeGxjaUFvVkUxSlRFeEZVaWt3CmdnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUJE d0F3Z2dFS0FvSUJBUUNaU0dzK0ZBTHZpTjdSZFplRmNOSU4KOHVRQXJjOVQwcWZPQ3NaeUJVUU1S YUY2OW9LSndXK3ZtSDVmR0l0REdHaTNIbUdRSzJaQ1o5MmtDVkY3cEtXKwpsTE5jcWdUbSsvUEJV clZvem82TkFXZXVkc3JhTko5OHBBVkxtWkhUdXVHelVtaThHTEYrWE1lN1Y2Wm5FOFN0CnVEWGxi Y0l1RG1iK1dpdXE4TVZVSUtnVkNlMmMwYXo3d3U0N1I5TllvRnlnSEI4N1RmbFBkQ1lXWjF5QmRG ZEoKOFlNWStrcHFBeGRoVXk2Sm5IZzJvcUFzMHZTMWJEc29rK3VuVXl5Y0FqM0huZnVFbktFQkNB b0VneEJZQ2dSWgpDN0p4dDNEd1k1MkRsMWFGSUpJYlcvVUZNY1BmYjB0Y1BSWkdpWVVkWUZWanNX Y3NpQ2FqVlRqVnN1RVRzT0JWCkFnTUJBQUdqZ2dJWk1JSUNGVEErQmdrckJnRUVBWUkzRlFjRU1U QXZCaWNyQmdFRUFZSTNGUWlEcnF3amhvNlcKVjRHTmlUMkNwS3NTaGI2dUFZRTJob3pIQ0lYZ3dB a0NBV1FDQVFvd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSApBd1F3Q3dZRFZSMFBCQVFEQWdYZ01C c0dDU3NHQVFRQmdqY1ZDZ1FPTUF3d0NnWUlLd1lCQlFVSEF3UXdSQVlKCktvWklodmNOQVFrUEJE Y3dOVEFPQmdncWhraUc5dzBEQWdJQ0FJQXdEZ1lJS29aSWh2Y05Bd1FDQWdDQU1BY0cKQlNzT0F3 SUhNQW9HQ0NxR1NJYjNEUU1ITUIwR0ExVWREZ1FXQkJUcno5VTRucCtsOEYyVDJMcTI2QWdqaXBv dQoyekFmQmdOVkhTTUVHREFXZ0JRTXhtdnVBa2ExMlkvYm84enN2RDdoQmIybEp6Qk1CZ05WSFI4 RVJUQkRNRUdnClA2QTloanRvZEhSd09pOHZjR3RwTG0xcGRISmxMbTl5Wnk5TlNWUlNSU1V5TUVO dmNuQnZjbUYwYVc5dUpUSXcKVUVVbE1qQkRRUzB5S0RFcExtTnliREIvQmdnckJnRUZCUWNCQVFS ek1IRXdSd1lJS3dZQkJRVUhNQUtHTzJoMApkSEE2THk5d2Eya3ViV2wwY21VdWIzSm5MMDFKVkZK RkpUSXdRMjl5Y0c5eVlYUnBiMjRsTWpCUVJTVXlNRU5CCkxUSW9NaWt1WTNKME1DWUdDQ3NHQVFV RkJ6QUJoaHBvZEhSd09pOHZiMk56Y0M1dGFYUnlaUzV2Y21jdmIyTnoKY0RBL0JnTlZIUkVFT0RB Mm9DRUdDaXNHQVFRQmdqY1VBZ09nRXd3UlZFMUpURXhGVWtCTlNWUlNSUzVQVWtlQgpFWFJ0YVd4 c1pYSkFiV2wwY21VdWIzSm5NQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUJBUUNJQm4rWlBpV2MrcXFT CklaZmlkMEM4N0RRUEltN3ptV1htMHhSYkVlVWhlRE5jU1Y1KzIvaURnSEQ2WVVLaysrYkNlblJR UkQvbCtDNUsKWkJzbjVGazlrR05oZXZNdFkzT245UmhZb29OQm54TDZIZHdIdW05OE1JMTZwOUFM c3RlRG1rT29mcEZwbVdxMQowVkRxV243ZFRrck9aM3ZKaU5CMUEyb25UekdoSHhiNWVlZE5nR3Vx dlpVeXdDTW5lOUpkQm1tM29QZktrazduCjk0NzR1bDNSWFJkOFdPL0w2TVBuQnFUdjBnMkx0TzNX ellTV2FWcjBPc1E5aHBVVUgzbzk4U21hTENmbCtTYjkKKzd2RVhTcGRGYkJlS1R1eXhzMlRDT3RE TklxZ1M4dlBjN0xKRXdSRi96enBvcC9XZHZOeUVuSVhBV0Z5SkhOdApMYTN3NHdkaAotLS0tLUVO RCBDRVJUSUZJQ0FURS0tLS0tCg== --=-=-=--