From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: John Cummings Newsgroups: gmane.emacs.bugs Subject: bug#50921: GNU ELPA TLS errors: server is returning chain with expired root Date: Thu, 30 Sep 2021 20:24:28 +0000 Message-ID: Reply-To: John Cummings Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="b1_wXkDk2s4XfEc7RGvh9fVb7zCMfbkMLmrhLxg4vz3cQ" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="34893"; mail-complaints-to="usenet@ciao.gmane.io" To: 50921@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Thu Sep 30 22:25:23 2021 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mW2cL-0008od-VD for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 30 Sep 2021 22:25:23 +0200 Original-Received: from localhost ([::1]:52648 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mW2cJ-0000Pi-Ox for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 30 Sep 2021 16:25:19 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53854) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mW2c2-0000PZ-HR for bug-gnu-emacs@gnu.org; Thu, 30 Sep 2021 16:25:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:42567) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mW2c2-0005r1-9M for bug-gnu-emacs@gnu.org; Thu, 30 Sep 2021 16:25:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mW2c1-00058Z-Sq for bug-gnu-emacs@gnu.org; Thu, 30 Sep 2021 16:25:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: John Cummings Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 30 Sep 2021 20:25:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 50921 X-GNU-PR-Package: emacs X-Debbugs-Original-To: "bug-gnu-emacs@gnu.org" Original-Received: via spool by submit@debbugs.gnu.org id=B.163303349319724 (code B ref -1); Thu, 30 Sep 2021 20:25:01 +0000 Original-Received: (at submit) by debbugs.gnu.org; 30 Sep 2021 20:24:53 +0000 Original-Received: from localhost ([127.0.0.1]:54113 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mW2bt-000584-0u for submit@debbugs.gnu.org; Thu, 30 Sep 2021 16:24:53 -0400 Original-Received: from lists.gnu.org ([209.51.188.17]:55768) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mW2bp-00057u-7w for submit@debbugs.gnu.org; Thu, 30 Sep 2021 16:24:51 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53802) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mW2bp-0000Cy-2C for bug-gnu-emacs@gnu.org; Thu, 30 Sep 2021 16:24:49 -0400 Original-Received: from mail-40133.protonmail.ch ([185.70.40.133]:28617) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mW2bk-0005US-1D for bug-gnu-emacs@gnu.org; Thu, 30 Sep 2021 16:24:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rootabega.net; s=protonmail; t=1633033469; bh=8CWeiVN9jgfT48MytHDTW5bgcqlYyiBFtgbDxlPIqrM=; h=Date:To:From:Reply-To:Subject:From; b=iBFLY0Sq101lbLYeLArQlQHg4OniS+7DM7cY5ULJymWBBPuzycQxYBtGtQtNcyilh sTpJCd00eZLnQdt2VlvShrlwOT+ROH9DX8RqeLaJmDODs1AcWGWQ5l8B7sH+SxmW1W l/wYMcKsQlZdU4szrtWdtuL8MvQu+re8wxeNLF8qPd6mMdLngVFf2jMcPmlWg+XCQR JYww5YT1dAtgi7+QhFg3gdy4LKgcDSWxMKCUR3KVj10mWK/Z3bAHwa/ws7Mc5Z0sKJ c/Ihrek8tNRcxB3xUT0QWrDDeUrTKjayK6uN+eXCsGkstzQXnwgj2t+087Fc9ntvpk znoRxb4Hx0gMg== Received-SPF: pass client-ip=185.70.40.133; envelope-from=john@rootabega.net; helo=mail-40133.protonmail.ch X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:215992 Archived-At: This is a multi-part message in MIME format. --b1_wXkDk2s4XfEc7RGvh9fVb7zCMfbkMLmrhLxg4vz3cQ Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I'm not sure if we are supposed to report infrastructure problems as Emacs = bugs, but it should be easy to close if not. I, and at least a few others, = have had TLS connection problems to GNU ELPA in the last day or two, with t= he errors: |Issued by: R3 |Issued to: CN=3Delpa.gnu.org |Hostname: elpa.gnu.org |Public key: RSA, signature: RSA-SHA256 |Protocol: TLS1.3, key: ECDHE-RSA, cipher: AES-256-GCM, mac: AEAD |Security level: Medium |Valid: From 2021-09-28 to 2021-12-27 | | |The TLS connection to elpa.gnu.org:443 is insecure for the following |reasons: | |certificate has expired |certificate could not be verified It appears that elpa.gnu.org is returning a certificate chain referring to = a root certificate that expired today. (More info: https://twitter.com/lets= encrypt/status/1443621997288767491) I don't know if GnuTLS is supposed to b= e able to work around this (Firefox seems to, for instance), but I think it= 's a safe bet this is the cause of these connection errors. I confirmed the chain that Emacs is seeing a couple ways. In Emacs 28, the = security prompt lets you view certificate details by hitting "d", and in th= at window I confirmed it is seeing the root cert "CN=3DDST Root CA X3,O=3DD= igital Signature Trust Co." I also attached the chain I got by running: openssl s_client -showcerts -servername elpa.gnu.org -connect elpa.gnu.org:= 443 Thanks! --b1_wXkDk2s4XfEc7RGvh9fVb7zCMfbkMLmrhLxg4vz3cQ Content-Type: application/x-x509-ca-cert; name=chain.pem Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=chain.pem Q09OTkVDVEVEKDAwMDAwMDAzKQotLS0KQ2VydGlmaWNhdGUgY2hhaW4KIDAgczpDTiA9IGVscGEu Z251Lm9yZwogICBpOkMgPSBVUywgTyA9IExldCdzIEVuY3J5cHQsIENOID0gUjMKLS0tLS1CRUdJ TiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZIakNDQkFhZ0F3SUJBZ0lTQXk1NitzakkvNHJPOVRnc2Rk d1dVNFkzTUEwR0NTcUdTSWIzRFFFQkN3VUEKTURJeEN6QUpCZ05WQkFZVEFsVlRNUll3RkFZRFZR UUtFdzFNWlhRbmN5QkZibU55ZVhCME1Rc3dDUVlEVlFRRApFd0pTTXpBZUZ3MHlNVEE1TWpneU1E UXlOREphRncweU1URXlNamN5TURReU5ERmFNQmN4RlRBVEJnTlZCQU1UCkRHVnNjR0V1WjI1MUxt OXlaekNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQkFMM0wKNk5oWGVZ TmRBckhNN1c5K0t5K2IzK0NpZmNWYzFNYkJHR2NEUTJIejBjb00xbUp3Y2dlMGdHS0hEVEFhRWxr Qwo2ZVlVVmVUSVJZVWJ1dTk0bFhoV2ZYc2NBK0N2bW53VC9aeFJYNDByMmRkUlhiUHdFeUs2NjlO eFF0ZEdoWWRXCkRWamhkNmdzRDRrbURxOWFydVFtN0lwTThyRm5pZGpNSzhtRFRac3hJY2hSZXla NnRxK1BrQTRiamo1QVV2Q04KNVZJTlRoM240MjhpMGlqdk1iVTM1M0VRaS9RS01lYlNHYVo2N1BK NlpDZ3U5SWV0bGh0UEVZOU1UVzEyQk5tSwp5WnRqekg5TGMybVpFNmFQdVI1a3g5RDdhVUpkTWhm UnlFMVhoM3FJN1hFTUoxRXV1Q2lCc1ZwSFFuUG1wM1JPClVKalJEc0FRMG1sL25udUFURnNDQXdF QUFhT0NBa2N3Z2dKRE1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZEJnTlYKSFNVRUZqQVVCZ2dyQmdF RkJRY0RBUVlJS3dZQkJRVUhBd0l3REFZRFZSMFRBUUgvQkFJd0FEQWRCZ05WSFE0RQpGZ1FVVXN6 K2I3Q0M2YkVtRmNlVlBYZXJrZU5uNWZZd0h3WURWUjBqQkJnd0ZvQVVGQzZ6RjdkWVZzdXVVQWxB CjVoK3ZuWXNVd3NZd1ZRWUlLd1lCQlFVSEFRRUVTVEJITUNFR0NDc0dBUVVGQnpBQmhoVm9kSFJ3 T2k4dmNqTXUKYnk1c1pXNWpjaTV2Y21jd0lnWUlLd1lCQlFVSE1BS0dGbWgwZEhBNkx5OXlNeTVw TG14bGJtTnlMbTl5Wnk4dwpGd1lEVlIwUkJCQXdEb0lNWld4d1lTNW5iblV1YjNKbk1Fd0dBMVVk SUFSRk1FTXdDQVlHWjRFTUFRSUJNRGNHCkN5c0dBUVFCZ3Q4VEFRRUJNQ2d3SmdZSUt3WUJCUVVI QWdFV0dtaDBkSEE2THk5amNITXViR1YwYzJWdVkzSjUKY0hRdWIzSm5NSUlCQkFZS0t3WUJCQUhX ZVFJRUFnU0I5UVNCOGdEd0FIVUFYTnhEa3Y3bXEwVkVzVjZhMUZibQpFRGY3MWZwSDNLRnpsTEpl NXZiSERzb0FBQUY4TGx3aXd3QUFCQU1BUmpCRUFpQklKejBKeEFqaTFWYUJsaWRiCml2Y2JYdzAr MU5jWTNwSjhoR3ZlZm9pQjZRSWdLTjRQVjJNajBoMUZxdmtLLzAzQWgyS2FIeTNFYk5uRndJakEK Z1VxZFhuc0Fkd0I5UHZMNGovK0lWV2drd3NES25sS0plU3ZGRG5nSmZ5NXFsMmlaZmlMdzF3QUFB WHd1WENNRQpBQUFFQXdCSU1FWUNJUUM2ZDFPd1lJbENDOHZaRkIwV2FCZll5QU5zbDZFLzZJTmZn dFlLTVloV1dnSWhBT0pBCkpDclIvV0RmeHVERXFtRjhrdGRvUFN3aUZkVGl0aEgrZktSR3V5a3BN QTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUIKQVFDMHl1WEFqUVE1bjFybU8rTjVRNXBXZENIU3lUQy9k TFVhaUNaQTVnbGhUT3Z0cEJ2VHhrOUswSzV4SVh6dgpBQTlLMExxc29aMitleXM4UWQ4anJnUDNX NlpVMWZDaXduZ1R2bzdBQlhBVHJPOEJOWVRzajJvSG9DbUFtSWEyClR2VzlBYmpqeDg1UHM5VXNw ZkpXR1FjYUhRTHdRSGhDWEoyRGp6MFE1SnIrd1lGbWVqcVl6Y1N6ZFFhVDV1aWkKNXlvYVpXMko0 T3BQOGJ0YzRkZ2tNTWViTElpZTdrSVVoV1BzZ004M1lyalE2VXROcGsxRlNZVkxOWks5eUlSUQow YWlGcFJvd1VZSVlNS2xtNzh1YVdxeGNORHlTRUFpYy9OeTNXdkozMlJOVnFDVGEzSUNCckV4bHRY Z1JTVzRiCjBLQStXYW5ibG5yZzhvUCtMZTljOGFQYwotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0t CiAxIHM6QyA9IFVTLCBPID0gTGV0J3MgRW5jcnlwdCwgQ04gPSBSMwogICBpOkMgPSBVUywgTyA9 IEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNoIEdyb3VwLCBDTiA9IElTUkcgUm9vdCBYMQotLS0t LUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRkZqQ0NBdjZnQXdJQkFnSVJBSkVyQ0VyUERCaW5V L2JXTGlXblgxb3dEUVlKS29aSWh2Y05BUUVMQlFBdwpUekVMTUFrR0ExVUVCaE1DVlZNeEtUQW5C Z05WQkFvVElFbHVkR1Z5Ym1WMElGTmxZM1Z5YVhSNUlGSmxjMlZoCmNtTm9JRWR5YjNWd01SVXdF d1lEVlFRREV3eEpVMUpISUZKdmIzUWdXREV3SGhjTk1qQXdPVEEwTURBd01EQXcKV2hjTk1qVXdP VEUxTVRZd01EQXdXakF5TVFzd0NRWURWUVFHRXdKVlV6RVdNQlFHQTFVRUNoTU5UR1YwSjNNZwpS VzVqY25sd2RERUxNQWtHQTFVRUF4TUNVak13Z2dFaU1BMEdDU3FHU0liM0RRRUJBUVVBQTRJQkR3 QXdnZ0VLCkFvSUJBUUM3QWhVb3pQYWdsTk1QRXV5TlZaTEQrSUx4bWFaNlFvaW5YU2FxdFN1NXhV eXhyNDVyK1hYSW85Y1AKUjVRVVZUVlhqSjZvb2prWjlZSThRcWxPYnZVN3d5N2JqY0N3WFBOWk9P ZnR6Mm53V2dzYnZzQ1VKQ1dIK2pkeApzeFBuSEt6aG0rL2I1RHRGVWtXV3FjRlR6alRJVXU2MXJ1 MlAzbUJ3NHFWVXE3WnREcGVsUURScks5TzhadXRtCk5IejZhNHVQVnltWitEQVhYYnB5Yi91Qnhh M1NobGc5RjhmbkNidnhLL2VHM01IYWNWM1VSdVBNclNYQmlMeGcKWjNWbXMvRVk5NkpjNWxQL09v aTJSNlgvRXhqcW1BbDNQNTFUK2M4QjVmV21jQmNVcjJPay81bXprNTNjVTZjRwova2lGSGFGcHJp VjF1eFBNVWdQMTdWR2hpOXNWQWdNQkFBR2pnZ0VJTUlJQkJEQU9CZ05WSFE4QkFmOEVCQU1DCkFZ WXdIUVlEVlIwbEJCWXdGQVlJS3dZQkJRVUhBd0lHQ0NzR0FRVUZCd01CTUJJR0ExVWRFd0VCL3dR SU1BWUIKQWY4Q0FRQXdIUVlEVlIwT0JCWUVGQlF1c3hlM1dGYkxybEFKUU9ZZnI1MkxGTUxHTUI4 R0ExVWRJd1FZTUJhQQpGSG0wV2VaN3R1WGtBWE9BQ0lqSUdsajI2WnR1TURJR0NDc0dBUVVGQndF QkJDWXdKREFpQmdnckJnRUZCUWN3CkFvWVdhSFIwY0RvdkwzZ3hMbWt1YkdWdVkzSXViM0puTHpB bkJnTlZIUjhFSURBZU1CeWdHcUFZaGhab2RIUncKT2k4dmVERXVZeTVzWlc1amNpNXZjbWN2TUNJ R0ExVWRJQVFiTUJrd0NBWUdaNEVNQVFJQk1BMEdDeXNHQVFRQgpndDhUQVFFQk1BMEdDU3FHU0li M0RRRUJDd1VBQTRJQ0FRQ0Z5azVIUHFQM2hVU0Z2TlZuZUxLWVk2MTFUUjZXClBUTmxjbFF0Z2FE cXcrMzRJTDlmekxkd0FMZHVPL1plbE43a0lKK203NHV5QStlaXRSWThrYzYwN1RrQzUzd2wKaWtm bVpXNC9SdlRaOE02VUsrNVV6aEs4akNkTHVNR1lMNkt2elhHUlNnaTN5TGdqZXdRdENQa0lWejZE MlFRegpDa2NoZUFtQ0o4TXF5SnU1emx6eVpNakF2bm5BVDQ1dFJBeGVrcnN1OTRzUTRlZ2RSQ25i V1NEdFk3a2grQkltCmxKTlhvQjFsQk1FS0lxNFFEVU9Yb1JnZmZ1RGdoamUxV3JHOU1MK0hiaXNx L3lGT0d3WEQ5UmlYOEY2c3c2VzQKYXZBdXZEc3p1ZTVMM3N6ODVLK0VDNFkvd0ZWRE52Wm80VFlY YW82WjBmK2xRS2MwdDhEUVl6azFPWFZ1OHJwMgp5Sk1DNmFsTGJCZk9EQUxadllIN243ZG8xQVps czRJOWQxUDRqbmtEclFveEIzVXFROWhWbDNMRUtRNzN4RjFPCnlLNUdoRERYOG9WZkdLRjV1K2Rl Y0lzSDRZYVR3N21QM0dGeEpTcXYzKzBsVUZKb2k1TGM1ZGExNDlwOTBJZHMKaENFeHJvTDErN21y eUlrWFBlRk01VGdPOXIwcnZaYUJGT3ZWMnowZ3AzNVowK0w0V1BsYnVFak4vbHhQRmluKwpIbFVq cjhnUnNJM3FmSk9RRnkvOXJLSUpSMFkvOE9td3QvOG9UV2d5MW1kZUhtbWprN2oxbllzdkM5SlNR Nlp2Ck1sZGxUVEtCM3poVGhWMStYV1lwNnJqZDVKVzF6YlZXRWtMTnhFN0dKVGhFVUczc3pnQlZH UDdwU1dUVVRzcVgKbkxSYndIT29xN2hId2c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCiAy IHM6QyA9IFVTLCBPID0gSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAsIENOID0gSVNS RyBSb290IFgxCiAgIGk6TyA9IERpZ2l0YWwgU2lnbmF0dXJlIFRydXN0IENvLiwgQ04gPSBEU1Qg Um9vdCBDQSBYMwotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRllEQ0NCRWlnQXdJQkFn SVFRQUYzSVRmVTZVSzQ3bmFxUEdRS3R6QU5CZ2txaGtpRzl3MEJBUXNGQURBLwpNU1F3SWdZRFZR UUtFeHRFYVdkcGRHRnNJRk5wWjI1aGRIVnlaU0JVY25WemRDQkRieTR4RnpBVkJnTlZCQU1UCkRr UlRWQ0JTYjI5MElFTkJJRmd6TUI0WERUSXhNREV5TURFNU1UUXdNMW9YRFRJME1Ea3pNREU0TVRR d00xb3cKVHpFTE1Ba0dBMVVFQmhNQ1ZWTXhLVEFuQmdOVkJBb1RJRWx1ZEdWeWJtVjBJRk5sWTNW eWFYUjVJRkpsYzJWaApjbU5vSUVkeWIzVndNUlV3RXdZRFZRUURFd3hKVTFKSElGSnZiM1FnV0RF d2dnSWlNQTBHQ1NxR1NJYjNEUUVCCkFRVUFBNElDRHdBd2dnSUtBb0lDQVFDdDZDUno5QlEzODV1 ZUsxY29ISWUrM0xmZk9KQ01ianptVjZCNDkzWEMKb3Y3MWFtNzJBRThvMjk1b2hteEVrN2F4WS8w VUVtdS9IOUxxTVpzaGZ0RXpQTHBJOWQxNTM3TzQveEx4SVpwTAp3WXFHY1dsS1ptWnNqMzQ4Y0wr dEtTSUc4K1RBNW9DdTRrdVB0NWwrbEFPZjAwZVhmSmxJSTFQb09LNVBDbStECkx0RkpWNHlBZExi YUw5QTRqWHNEY0NFYmRmSXdQUHFQcnQzYVk2dnJGay9DamhGTGZzOEw2UCsxZHk3MHNudEsKNEV3 U0pReHdqUU1wb09GVEpPd1QyZTRadnhDelNvdy9pYU5oVWQ2c2h3ZVU5R054N0M3aWIxdVlnZUdK WERSNQpiSGJ2TzVCaWVlYmJwSm92SnNYUUVPRU8zdGtRamhiN3QvZW85OGZsQWdlWWp6WUlsZWZp TjVZTk5uV2UrdzV5CnNSMmJ2QVA1U1FYWWdkMEZ0Q3JXUWVtc0FYYVZDZy9ZMzlXOUVoODFMeWdY Yk5LWXdhZ0paSGR1UnplNnpxeFoKWG1pZGYzTFdpY1VHUVNrK1dUN2RKdlVreVJHbldxTk1RQjlH b1ptMXB6cFJib1k3bm4xeXB4SUZlRm50UGxGNApGUXNEajQzUUx3V3lQbnRLSEV0ekJSTDh4dXJn VUJOOFE1TjBzOHAwNTQ0ZkFRalFNTlJiY1RhMEI3ckJNREJjClNMZUNPNWltZldDS29xTXBnc3k2 dllNRUc2S0RBMEdoMWdYeEc4SzI4S2g4aGp0R3FFZ3FpTngybW5hL0gycWwKUFJtUDZ6anpaTjdJ S3cwS0tQLzMyK0lWUXRRaTBDZGQ0WG4rR09kd2lLMU81dG1MT3NiZEoxRnUvN3hrOVRORApUd0lE QVFBQm80SUJSakNDQVVJd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBT0JnTlZIUThCQWY4RUJBTUNB UVl3ClN3WUlLd1lCQlFVSEFRRUVQekE5TURzR0NDc0dBUVVGQnpBQ2hpOW9kSFJ3T2k4dllYQndj eTVwWkdWdWRISjEKYzNRdVkyOXRMM0p2YjNSekwyUnpkSEp2YjNSallYZ3pMbkEzWXpBZkJnTlZI U01FR0RBV2dCVEVwN0drZXl4eAordHZoUzVCMS84UVZZSVdKRURCVUJnTlZIU0FFVFRCTE1BZ0dC bWVCREFFQ0FUQS9CZ3NyQmdFRUFZTGZFd0VCCkFUQXdNQzRHQ0NzR0FRVUZCd0lCRmlKb2RIUndP aTh2WTNCekxuSnZiM1F0ZURFdWJHVjBjMlZ1WTNKNWNIUXUKYjNKbk1Ed0dBMVVkSHdRMU1ETXdN YUF2b0MyR0syaDBkSEE2THk5amNtd3VhV1JsYm5SeWRYTjBMbU52YlM5RQpVMVJTVDA5VVEwRllN ME5TVEM1amNtd3dIUVlEVlIwT0JCWUVGSG0wV2VaN3R1WGtBWE9BQ0lqSUdsajI2WnR1Ck1BMEdD U3FHU0liM0RRRUJDd1VBQTRJQkFRQUtjd0JzbG03L0RsTFFydDJNNTFvR3JTK280NCsveVFvREZW REMKNVd4Q3UyK2I5TFJQd2tTSUNIWE02d2ViRkdKdWVON3NKN281WFBXaW9XNVdsSEFRVTdHNzVL L1Fvc01yQWRTVwo5TVVnTlRQNTJHRTI0SEdOdExpMXFvSkZsY0R5cVNNbzU5YWh5MmNJMnFCRExL b2JreC9KM3ZXcmFWMFQ5VnVHCldDTEtUVlhrY0dkdHdsZkZSamxCejRwWWcxaHRtZjVYNkRZTzhB NGpxdjJJbDlEalhBNlVTYlcxRnpYU0xyOU8KaGU4WTRJV1M2d1k3YkNrakNXRGNSUUpNRWhnNzZm c08zdHhFK0ZpWXJ1cTlSVVdoaUYxbXl2NFE2VytDeUJGQwpEZnZwN09PR0FONmRFT000K3FSOXNk am9TWUtFQnBzcjZHdFBBUXc0ZHk3NTNlYzUKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQotLS0K U2VydmVyIGNlcnRpZmljYXRlCnN1YmplY3Q9Q04gPSBlbHBhLmdudS5vcmcKCmlzc3Vlcj1DID0g VVMsIE8gPSBMZXQncyBFbmNyeXB0LCBDTiA9IFIzCg== --b1_wXkDk2s4XfEc7RGvh9fVb7zCMfbkMLmrhLxg4vz3cQ--