| Server IP : 172.24.0.40 / Your IP : 216.73.216.239 Web Server : Apache System : Linux dbweb26.ust.edu.ph 4.18.0-513.5.1.el8_9.x86_64 #1 SMP Fri Sep 29 05:21:10 EDT 2023 x86_64 User : apache ( 48) PHP Version : 8.2.18 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/self/root/reposerver/BaseOS/Packages/ |
Upload File : |
��� openssl-perl-1:1.1.1k-9.el8_7 ��� � > �
A � � � � � � � � � � � c�?�/��C Q��z6
��'�q�L�Y* �"<M���5��M�����OKZ����XE�y51� ��fZ��AÌJ��s �_�S@� ���b�M/38� A�:� ��*�|�Dl6�
Д#�l�}�~�����ζ�0Y�f��m��[�QP�N>��丛�R��/o ��3������x� R�wa
@K1������[�[o��;�A�&�LNn�&��[g�*k�Y�G�O��N~�faϩ_ECX"����������N�|�dT��W"���)���p C�� �Ě���a槪�o�^yf��؟����Jeϸ3m&3oX��i��7��.� [ ��}��Bb��'�%.$^��X��q��B���� Y?p�� �< �=T �?(���h3��v�>�ԃ^i�4�zo����8��28��=ŷFŋ����h[�PU0Pŵ���S�J�~��� ���;���Y��U�EcT.�-( ���a����o��|Ú6�O��?��Y�X�-{�G$� 2���7f97d38f791ff0eee9ab268acda3c6db912860ba 2bcc17529e7bc96e9c6de186e6617559966e45965f9190257e683f153f13b18e 5X� c�?�/��C Qz�OG��N�b]�h@�A}��Xg���v̉=�-�C�Z �e��y(�����lA�
�ל��2�LA�.~�X*�ID����H�AXzG��I+Dg��W�~�V�����qU5�.���y(�y�#Q�<Y_~��
JD|��Ԑ����l%�� ���i��W:�P�Uq���`
&�~��d������(u��,�2���Y��x��{�)� DyP2ax�țk�ؒB���R��w���<����s�n�X�q�W��ᱫ��M��jz�l���t1ڕŤ�+oـ�<�<��|��V�Ϊ��1Q�F�%�o�� {�%����(���|Q �'<��5Ƹ��D]��tk�@��
�����JڃW/�e������7�?�62S�W��� �Y�h�{��3C�=�V }��)=�FB�� �A����~f�R��,��ò K�ʼn��x��VW���O������zu&�J>��`_%�Y��v k�W�τ�<����t��B�զWh�Ol/���/E%G��[L�9?C�
Lj {T > ���p ��� = � ? �x d � � � � � $ � G � � � 4 � 8 � @ � N � b � � � � � � � � �
�
0
d
�
�
Y
� �
� 0 � ( � 8 � � 9
d � : [� � G ��
H �
I �0
X �@ Y �H \ �l
] �
^ � b �U d � e � f � l � t ��
u �
v �0 w �
x ��
y � � �( � �, � �2 � �t C openssl-perl 1.1.1k 9.el8_7 Perl scripts provided with OpenSSL OpenSSL is a toolkit for supporting cryptography. The openssl-perl
package provides Perl scripts for converting certificates and keys
from other formats to the formats used by the OpenSSL toolkit. c���x86-64-01.build.eng.rdu2.redhat.com s�Red Hat Red Hat, Inc. OpenSSL and ASL 2.0 Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> Unspecified http://www.openssl.org/ linux x86_64 � / � �
�A�A�A�A�A�����큤������ c�ʄc�ʄc�ʄc�ʄc�ʄc��dc��dc��dc��dc��dc�ʈc�ʈc��g 2131b48fe02e4002892237e04715e4f37eb2183693165ebc8a0cdc75e35174da 0799b5e54d2535a8ac85bb2b3a68775e6e04b59e9f3238a9b472a62e78b39bf7 38b4c4e741894d4355bc4c5a8a4b60a5b9ca73fe1c1b9e7dbddd5e706f64edb7 8a2d0cf7c9181e285ed2fea3fd80296cf877e0baf710309b2b5f7e331b760c62 0a2373c45bb984e1d1d65065eb57de74cb1ad97c77043bdc24495d4fd81dd57a tsget.pl rehash.1ssl.gz tsget.1ssl.gz root root root root root root root root root root root root root root root root root root root root root root root root root root openssl-1.1.1k-9.el8_7.src.rpm ����������������������������������������������������openssl-perl openssl-perl(x86-64) @
/usr/bin/perl openssl(x86-64) perl-interpreter rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1:1.1.1k-9.el8_7 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 c�b�?�b�'�b; �a��@`�t�`�s�`�"@`��@`��@`y|@`a�@_�$�_��_�@^��^�(@^א�^�V@^�x�^`�^M#@]�]��]��@]�|@]�*�]��@]�A�]��@]�@\� �\��\�g�\�s@\�s@\�@[�@[ā@[��@[� @[�#@[��@[���[~��[qr�[qr�[[ @[Xf@[H�@[(�@[)�Z�l�Z��@Z��@Z�@Z|;�Zs@ZWQ�Z2g�Y�Z@Y�@Yy�Yl��Yg`�YP�@YM�YBv�Y5G�Y1S@X��@X���X��X��X[�@XAb@X>�@X43@X%��X x@W�%�W�%�W��@W��@W�
�W�j�W��W�@Wq@W(��V�n@V�m@V��VՄ@V�=@V��V��@Vs�@Vf�@Vet�Va�@VI�@U�5@U�b@U��@U���U~�@UKS�UKS�U?v@U8�U&i�U
�@U�T�\@T�s@T���T��Tm�TFJ�T?�@T7�@T
�@S�@S�S@S�j@S� @S�Q@S�D�S��@S���S�[�S��@Sj @SB�@S=M@S&�R�@R���R�y@R߲�R��@R�1@R��@R�R�R� �R�i�R|�@Ro�@Ri �R^�R[�REs@R@-@R<8�R:�@R1��R/ �R' �R$}�R 7�R 7�R ��R@Q��Q�d�Q�@Q�*@Q�@Qޞ@Q�L�Q�L�Q���Qs�QG�Q#i@Q#i@Q#i@Q @P�O@P���P�p�P��@PM�@P H@P
�P
�O��@O�j�O�E@O�8�O�O�O�r@O}�@O`�@OT��ON@O1@O�O��Nˎ�N��@Ny�Ng\�NT�N.�@N&�@M�M�M�V�M�@MS�@MQ0@MK�@M=i�L��L�L�[@L�r@L�)@L+1�L�K��K�@K��K�"@K��Kz��KuB�KV�@KO@KM��KE�K
y@K��K��K�J�J@J���J�`@J��@J�H@J�@J��@J�#�J��J��@J��@J�:�Jj�Jf�@JI�@JB@I�@I�o@I��@I� �I�3�I�J�I��@I��@I}��Iq�@Iq�@Ipv�Ipv�Io%@H��@HC�H=I@H;��H1k�G�"�G�@G�}�Ga �GUA@GS�GV@Ga�F��F��F�;@E}H@En�Ee�@EI�E �@E�D�f�DГ�D�@D���D�p@D��@D�4�D�4�D� �Dc'@D2_�C�@C�C�Z�C�q�C�B�C�@C{ @Cp�@CX�@CL��C �B�=�B��Bo~�Bl�Bg��BM7�BK�@BJ��B$Y@B#�B#�B L�A��Aʳ@A��@A��@A��@A��@Ab��@��@͓@@�X�@�5@@b�@V�@@PT�@O@@Dw@@=�@2@@,�@@,�@@*@@ �@ �?��?�@?�@?~�@?z��?yp@?yp@?yp@?x �?r�?r�?q�@?p5�?hL�?I�@?��?�?��?
U@?
�@>��@>��@>��>��>��@>��@>�v�>�@>��@>�G�>�E�>x[�>u��>e�>]��>Sq�>Sq�>K��>G�@>.��>'�@>%M@> d@> �>{@=��=�(�=�=�=��=O�@=I"�=G�@=G�@=E.@=?�@=5\@=@<��@<��<�@<�@@<��@<�b�<��@<���<9��<9��;�8@;��;��@;���;���;�A�;��@;s�;r{@;\�;Uz@;T(�;L?�;DV�;A��;7'�;-�@; l�;��; �@;k�;@;@:�@:�_@:�j�:�R�:� �:��@:��:��@:��@:���:�E@:��@:0�@:@:W@9��@9��@9�y�9�x�9Џ�9�1�9��@9���9���9�v�9r�@9k @9dt�9_.�9[:@9Y�9@�@97��8�@8�@8���8[w@8,@8��Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-8 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6 Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5 Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4 Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-3 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2 Sahana Prasad <sahana@redhat.com> 1.1.1k-1 Daiki Ueno <dueno@redhat.com> 1.1.1g-16 Dmitry Belyavski <dbelyavs@redhat.com> 1.1.1g-15 Sahana Prasad <sahana@redhat.com> 1.1.1g-14 Sahana Prasad <sahana@redhat.com> 1.1.1g-13 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-12 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-11 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-9 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-7 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-6 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-5 Tomáš Mráz <tmraz@redhat.com> 1.1.1g-1 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-15 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-14 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-12 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-9 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-8 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-7 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-6 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-5 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-4 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-3 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2 Tomáš Mráz <tmraz@redhat.com> 1.1.1c-1 Tomáš Mráz <tmraz@redhat.com> 1.1.1b-6 Tomáš Mráz <tmraz@redhat.com> 1.1.1b-5 Tomáš Mráz <tmraz@redhat.com> 1.1.1b-3 Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1 Tomáš Mráz <tmraz@redhat.com> 1.1.1-8 Tomáš Mráz <tmraz@redhat.com> 1.1.1-7 Tomáš Mráz <tmraz@redhat.com> 1.1.1-6 Tomáš Mráz <tmraz@redhat.com> 1.1.1-5 Tomáš Mráz <tmraz@redhat.com> 1.1.1-4 Tomáš Mráz <tmraz@redhat.com> 1.1.1-3 Tomáš Mráz <tmraz@redhat.com> 1.1.1-2 Tomáš Mráz <tmraz@redhat.com> 1.1.1-1 Tomáš Mráz <tmraz@redhat.com> 1.1.1-0.pre9.1 Tomáš Mráz <tmraz@redhat.com> 1.1.1-0.pre8.4 Tomáš Mráz <tmraz@redhat.com> 1.1.1-0.pre8.3 Tomáš Mráz <tmraz@redhat.com> 1.1.1-0.pre8.2 Tomáš Mráz <tmraz@redhat.com> 1.1.1-0.pre8 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.1.0h-6 Tomáš Mráz <tmraz@redhat.com> 1.1.0h-5 Tomáš Mráz <tmraz@redhat.com> 1.1.0h-4 Tomáš Mráz <tmraz@redhat.com> 1.1.0h-3 Tomáš Mráz <tmraz@redhat.com> 1.1.0h-2 Tomáš Mráz <tmraz@redhat.com> 1.1.0h-1 Tomáš Mráz <tmraz@redhat.com> 1.1.0g-6 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.1.0g-5 Tomáš Mráz <tmraz@redhat.com> 1.1.0g-4 Tomáš Mráz <tmraz@redhat.com> 1.1.0g-3 Tomáš Mráz <tmraz@redhat.com> 1.1.0g-2 Tomáš Mráz <tmraz@redhat.com> 1.1.0g-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.1.0f-9 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.1.0f-8 Tomáš Mráz <tmraz@redhat.com> 1:1.1.0f-7 Petr Pisar <ppisar@redhat.com> - 1:1.1.0f-6 Tomáš Mráz <tmraz@redhat.com> 1.1.0f-5 Tomáš Mráz <tmraz@redhat.com> 1.1.0f-4 Tomáš Mráz <tmraz@redhat.com> 1.1.0f-3 Tomáš Mráz <tmraz@redhat.com> 1.1.0f-2 Tomáš Mráz <tmraz@redhat.com> 1.1.0f-1 Tomáš Mráz <tmraz@redhat.com> 1.1.0e-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.1.0d-3 Tomáš Mráz <tmraz@redhat.com> 1.1.0d-2 Tomáš Mráz <tmraz@redhat.com> 1.1.0d-1 Tomáš Mráz <tmraz@redhat.com> 1.1.0c-5 Tomáš Mráz <tmraz@redhat.com> 1.1.0c-4 Tomáš Mráz <tmraz@redhat.com> 1.1.0c-3 Tomáš Mráz <tmraz@redhat.com> 1.1.0c-2 Tomáš Mráz <tmraz@redhat.com> 1.1.0c-1 Tomáš Mráz <tmraz@redhat.com> 1.1.0b-4 Tomáš Mráz <tmraz@redhat.com> 1.1.0b-3 Tomáš Mráz <tmraz@redhat.com> 1.1.0b-2 Tomáš Mráz <tmraz@redhat.com> 1.1.0b-1 Richard W.M. Jones <rjones@redhat.com> - 1:1.0.2j-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2j-1 David Woodhouse <dwmw2@infradead.org> 1.0.2i-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2i-1 Tomáš Mráz <tmraz@redhat.com> 1.0.2h-3 Tomáš Mráz <tmraz@redhat.com> 1.0.2h-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2h-1 Tomáš Mráz <tmraz@redhat.com> 1.0.2g-4 Tom Callaway <spot@fedoraproject.org> - 1.0.2g-3 Tomáš Mráz <tmraz@redhat.com> 1.0.2g-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2g-1 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.0.2f-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2f-1 Tomáš Mráz <tmraz@redhat.com> 1.0.2e-5 Tomáš Mráz <tmraz@redhat.com> 1.0.2e-4 Tomáš Mráz <tmraz@redhat.com> 1.0.2e-3 Tomáš Mráz <tmraz@redhat.com> 1.0.2e-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2e-1 Tomáš Mráz <tmraz@redhat.com> 1.0.2d-3 Tom Callaway <spot@fedoraproject.org> 1.0.2d-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2d-1 Tomáš Mráz <tmraz@redhat.com> 1.0.2c-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.0.2c-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2c-1 Peter Robinson <pbrobinson@fedoraproject.org> 1.0.2a-4 Tomáš Mráz <tmraz@redhat.com> 1.0.2a-3 Tomáš Mráz <tmraz@redhat.com> 1.0.2a-2 Tomáš Mráz <tmraz@redhat.com> 1.0.2a-1 Tomáš Mráz <tmraz@redhat.com> 1.0.1k-7 Tomáš Mráz <tmraz@redhat.com> 1.0.1k-6 Tomáš Mráz <tmraz@redhat.com> 1.0.1k-5 Tomáš Mráz <tmraz@redhat.com> 1.0.1k-4 Till Maas <opensource@till.name> - 1:1.0.1k-3 Tomáš Mráz <tmraz@redhat.com> 1.0.1k-2 Tomáš Mráz <tmraz@redhat.com> 1.0.1k-1 Tomáš Mráz <tmraz@redhat.com> 1.0.1j-3 Tomáš Mráz <tmraz@redhat.com> 1.0.1j-2 Tomáš Mráz <tmraz@redhat.com> 1.0.1j-1 Tomáš Mráz <tmraz@redhat.com> 1.0.1i-5 Tomáš Mráz <tmraz@redhat.com> 1.0.1i-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.0.1i-3 Tomáš Mráz <tmraz@redhat.com> 1.0.1i-2 Tomáš Mráz <tmraz@redhat.com> 1.0.1i-1 Tom Callaway <spot@fedoraproject.org> 1.0.1h-6 Tomáš Mráz <tmraz@redhat.com> 1.0.1h-5 Tomáš Mráz <tmraz@redhat.com> 1.0.1h-4 Tomáš Mráz <tmraz@redhat.com> 1.0.1h-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.0.1h-2 Tomáš Mráz <tmraz@redhat.com> 1.0.1h-1 Peter Robinson <pbrobinson@fedoraproject.org> 1.0.1g-2 Tomáš Mráz <tmraz@redhat.com> 1.0.1g-1 Dennis Gilmore <dennis@ausil.us> - 1.0.1e-44 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-38 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-36 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-33 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-32 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-28 Tom Callaway <spot@fedoraproject.org> - 1.0.1e-27 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-24 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-23 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-22 Kyle McMartin <kyle@redhat.com> 1.0.1e-21 Tomas Mraz <tmraz@redhat.com> 1.0.1e-20 Tomas Mraz <tmraz@redhat.com> 1.0.1e-19 Tomas Mraz <tmraz@redhat.com> 1.0.1e-18 Tomas Mraz <tmraz@redhat.com> 1.0.1e-17 Tomas Mraz <tmraz@redhat.com> 1.0.1e-16 Tomas Mraz <tmraz@redhat.com> 1.0.1e-15 Petr Pisar <ppisar@redhat.com> - 1:1.0.1e-14 Tomas Mraz <tmraz@redhat.com> 1.0.1e-13 Tomas Mraz <tmraz@redhat.com> 1.0.1e-12 Tomas Mraz <tmraz@redhat.com> 1.0.1e-11 Petr Pisar <ppisar@redhat.com> - 1:1.0.1e-10 Tomas Mraz <tmraz@redhat.com> 1.0.1e-9 Tomas Mraz <tmraz@redhat.com> 1.0.1e-8 Tomas Mraz <tmraz@redhat.com> 1.0.1e-7 Tomas Mraz <tmraz@redhat.com> 1.0.1e-6 Peter Robinson <pbrobinson@fedoraproject.org> 1.0.1e-5 Tomas Mraz <tmraz@redhat.com> 1.0.1e-4 Tomas Mraz <tmraz@redhat.com> 1.0.1e-3 Tomas Mraz <tmraz@redhat.com> 1.0.1e-2 Tomas Mraz <tmraz@redhat.com> 1.0.1e-1 Tomas Mraz <tmraz@redhat.com> 1.0.1c-12 Tomas Mraz <tmraz@redhat.com> 1.0.1c-11 Tomas Mraz <tmraz@redhat.com> 1.0.1c-10 Tomas Mraz <tmraz@redhat.com> 1.0.1c-9 Tomas Mraz <tmraz@redhat.com> 1.0.1c-8 Tomas Mraz <tmraz@redhat.com> 1.0.1c-7 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.0.1c-6 Tomas Mraz <tmraz@redhat.com> 1.0.1c-5 Tomas Mraz <tmraz@redhat.com> 1.0.1c-4 Tomas Mraz <tmraz@redhat.com> 1.0.1c-3 Tomas Mraz <tmraz@redhat.com> 1.0.1c-2 Tomas Mraz <tmraz@redhat.com> 1.0.1c-1 Tomas Mraz <tmraz@redhat.com> 1.0.1b-1 Tomas Mraz <tmraz@redhat.com> 1.0.1a-1 Tomas Mraz <tmraz@redhat.com> 1.0.1-3 Tomas Mraz <tmraz@redhat.com> 1.0.1-2 Tomas Mraz <tmraz@redhat.com> 1.0.1-1 Tomas Mraz <tmraz@redhat.com> 1.0.1-0.3.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.1-0.2.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.1-0.1.beta2 Tomas Mraz <tmraz@redhat.com> 1.0.0g-1 Tomas Mraz <tmraz@redhat.com> 1.0.0f-1 Tomas Mraz <tmraz@redhat.com> 1.0.0e-4 Tomas Mraz <tmraz@redhat.com> 1.0.0e-3 Tomas Mraz <tmraz@redhat.com> 1.0.0e-2 Tomas Mraz <tmraz@redhat.com> 1.0.0e-1 Tomas Mraz <tmraz@redhat.com> 1.0.0d-8 Tomas Mraz <tmraz@redhat.com> 1.0.0d-7 Tomas Mraz <tmraz@redhat.com> 1.0.0d-6 Tomas Mraz <tmraz@redhat.com> 1.0.0d-5 Tomas Mraz <tmraz@redhat.com> 1.0.0d-4 Tomas Mraz <tmraz@redhat.com> 1.0.0d-3 Tomas Mraz <tmraz@redhat.com> 1.0.0d-2 Tomas Mraz <tmraz@redhat.com> 1.0.0d-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0c-4 Tomas Mraz <tmraz@redhat.com> 1.0.0c-3 Tomas Mraz <tmraz@redhat.com> 1.0.0c-2 Tomas Mraz <tmraz@redhat.com> 1.0.0c-1 Tomas Mraz <tmraz@redhat.com> 1.0.0b-3 Tomas Mraz <tmraz@redhat.com> 1.0.0b-2 Tomas Mraz <tmraz@redhat.com> 1.0.0b-1 Tomas Mraz <tmraz@redhat.com> 1.0.0a-3 Tomas Mraz <tmraz@redhat.com> 1.0.0a-2 Tomas Mraz <tmraz@redhat.com> 1.0.0a-1 Tomas Mraz <tmraz@redhat.com> 1.0.0-5 Tomas Mraz <tmraz@redhat.com> 1.0.0-4 Tomas Mraz <tmraz@redhat.com> 1.0.0-3 Tomas Mraz <tmraz@redhat.com> 1.0.0-2 Tomas Mraz <tmraz@redhat.com> 1.0.0-1 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.22.beta5 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.20.beta5 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.18.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.16.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.15.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.14.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.10.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.9.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.8.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.7.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.6.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.5.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.4.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.3.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.2.beta3 Tomas Mraz <tmraz@redhat.com> 1.0.0-0.1.beta3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.8k-7 Bill Nottingham <notting@redhat.com> Tomas Mraz <tmraz@redhat.com> 0.9.8k-6 Tomas Mraz <tmraz@redhat.com> 0.9.8k-5 Tomas Mraz <tmraz@redhat.com> 0.9.8k-4 Tomas Mraz <tmraz@redhat.com> 0.9.8k-3 Tomas Mraz <tmraz@redhat.com> 0.9.8k-2 Tomas Mraz <tmraz@redhat.com> 0.9.8k-1 Tomas Mraz <tmraz@redhat.com> 0.9.8j-10 Tomas Mraz <tmraz@redhat.com> 0.9.8j-9 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.8j-8 Tomas Mraz <tmraz@redhat.com> 0.9.8j-7 Tomas Mraz <tmraz@redhat.com> 0.9.8j-6 Tomas Mraz <tmraz@redhat.com> 0.9.8j-5 Tomas Mraz <tmraz@redhat.com> 0.9.8j-4 Tomas Mraz <tmraz@redhat.com> 0.9.8j-3 Tomas Mraz <tmraz@redhat.com> 0.9.8j-2 Tomas Mraz <tmraz@redhat.com> 0.9.8j-1 Tomas Mraz <tmraz@redhat.com> 0.9.8g-11 Joe Orton <jorton@redhat.com> 0.9.8g-10 Tomas Mraz <tmraz@redhat.com> 0.9.8g-9 Tomas Mraz <tmraz@redhat.com> 0.9.8g-8 Tom "spot" Callaway <tcallawa@redhat.com> 0.9.8g-7 Joe Orton <jorton@redhat.com> 0.9.8g-6 Fedora Release Engineering <rel-eng@fedoraproject.org> - 0.9.8g-5 Tomas Mraz <tmraz@redhat.com> 0.9.8g-4 Tomas Mraz <tmraz@redhat.com> 0.9.8g-3 Tomas Mraz <tmraz@redhat.com> 0.9.8g-2 Tomas Mraz <tmraz@redhat.com> 0.9.8g-1 Joe Orton <jorton@redhat.com> 0.9.8b-17 Tomas Mraz <tmraz@redhat.com> 0.9.8b-16 Tomas Mraz <tmraz@redhat.com> 0.9.8b-15 Tomas Mraz <tmraz@redhat.com> 0.9.8b-14 Tomas Mraz <tmraz@redhat.com> 0.9.8b-13 Tomas Mraz <tmraz@redhat.com> 0.9.8b-12 Tomas Mraz <tmraz@redhat.com> 0.9.8b-11 Tomas Mraz <tmraz@redhat.com> 0.9.8b-10 Tomas Mraz <tmraz@redhat.com> 0.9.8b-9 Tomas Mraz <tmraz@redhat.com> 0.9.8b-8 Tomas Mraz <tmraz@redhat.com> 0.9.8b-7 Tomas Mraz <tmraz@redhat.com> 0.9.8b-6 Tomas Mraz <tmraz@redhat.com> - 0.9.8b-5 Alexandre Oliva <aoliva@redhat.com> - 0.9.8b-4.1 Tomas Mraz <tmraz@redhat.com> - 0.9.8b-4 Tomas Mraz <tmraz@redhat.com> Jesse Keating <jkeating@redhat.com> - 0.9.8b-3.1 Tomas Mraz <tmraz@redhat.com> - 0.9.8b-3 Joe Orton <jorton@redhat.com> Tomas Mraz <tmraz@redhat.com> - 0.9.8b-2 Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1 Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6 Jesse Keating <jkeating@redhat.com> - 0.9.8a-5.2 Jesse Keating <jkeating@redhat.com> - 0.9.8a-5.1 Tomas Mraz <tmraz@redhat.com> 0.9.8a-5 Jesse Keating <jkeating@redhat.com> Tomas Mraz <tmraz@redhat.com> 0.9.8a-4 Tomas Mraz <tmraz@redhat.com> 0.9.8a-3 Tomas Mraz <tmraz@redhat.com> 0.9.8a-2 Tomas Mraz <tmraz@redhat.com> 0.9.8a-1 Tomas Mraz <tmraz@redhat.com> 0.9.7f-11 Tomas Mraz <tmraz@redhat.com> 0.9.7f-10 Tomas Mraz <tmraz@redhat.com> 0.9.7f-9 Phil Knirsch <pknirsch@redhat.com> 0.9.7f-8 Tomas Mraz <tmraz@redhat.com> 0.9.7f-7 Tomas Mraz <tmraz@redhat.com> 0.9.7f-6 Joe Orton <jorton@redhat.com> 0.9.7f-5 Tomas Mraz <tmraz@redhat.com> 0.9.7f-4 Tomas Mraz <tmraz@redhat.com> 0.9.7f-3 Tomas Mraz <tmraz@redhat.com> 0.9.7f-2 Tomas Mraz <tmraz@redhat.com> 0.9.7f-1 Tomas Mraz <tmraz@redhat.com> 0.9.7e-3 Tomas Mraz <tmraz@redhat.com> 0.9.7e-2 Tomas Mraz <tmraz@redhat.com> 0.9.7e-1 Tomas Mraz <tmraz@redhat.com> Joe Orton <jorton@redhat.com> 0.9.7a-46 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-45 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-44 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-43 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-42 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-41 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-40 Elliot Lee <sopwith@redhat.com> Phil Knirsch <pknirsch@redhat.com> 0.9.7a-38 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-37 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-36 Joe Orton <jorton@redhat.com> 0.9.7a-35 Phil Knirsch <pknirsch@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-34 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33 Elliot Lee <sopwith@redhat.com> Phil Knirsch <pknirsch@redhat.com> 0.9.7a-32 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-31 Elliot Lee <sopwith@redhat.com> Phil Knirsch <pknirsch@redhat.com> 0.9.7a-29 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-28 Nalin Dahyabhai <nalin@redhat.com> Joe Orton <jorton@redhat.com> 0.9.7a-27 Tim Waugh <twaugh@redhat.com> 0.9.7a-26 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22.1 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-23 Joe Orton <jorton@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-21 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-20 Nalin Dahyabhai <nalin@redhat.com> Matt Wilson <msw@redhat.com> 0.9.7a-19 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-18 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-17 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-10.9 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-16 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-15 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-14 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-13 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-12 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-9.9 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-11 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-10 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-9 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Elliot Lee <sopwith@redhat.com> 0.9.7a-8 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-7 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-6 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-4 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-3 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-2 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-1 Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8 Elliot Lee <sopwith@redhat.com> 0.9.7-7 Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6 Tim Powers <timp@redhat.com> Phil Knirsch <pknirsch@redhat.com> 0.9.7-4 Nalin Dahyabhai <nalin@redhat.com> Bill Nottingham <notting@redhat.com> 0.9.7-3 Nalin Dahyabhai <nalin@redhat.com> 0.9.7-2 Nalin Dahyabhai <nalin@redhat.com> 0.9.7-1 Nalin Dahyabhai <nalin@redhat.com> 0.9.7-0 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30 Elliot Lee <sopwith@redhat.com> 0.9.6b-29hammer.3 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-29 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-28 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-27 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-26 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-25 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-24 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-23 Tim Powers <timp@redhat.com> Tim Powers <timp@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-20 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-19 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-17, 0.9.6b-18 Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-2 Gary Benson <gbenson@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-15 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-13 Florian La Roche <Florian.LaRoche@redhat.de> 0.9.6b-11 Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1 Florian La Roche <Florian.LaRoche@redhat.de> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-9 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-8 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-7 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-6 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-5 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-2 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-1 Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Nalin Dahyabhai <nalin@redhat.com> Joe Orton <jorton@redhat.com> stronghold-0.9.6a-1 Joe Orton <jorton@redhat.com> Joe Orton <jorton@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Than Ngo <than@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Bill Nottingham <notting@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Florian La Roche <Florian.LaRoche@redhat.de> Florian La Roche <Florian.LaRoche@redhat.de> Bernhard Rosenkrdnzer <bero@redhat.de> Bernhard Rosenkrdnzer <bero@redhat.de> Bernhard Rosenkrdnzer <bero@redhat.de> - Fixed Timing Oracle in RSA Decryption
Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
Resolves: CVE-2023-0286 - Fix no-ec build
Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402 - Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
as it introduces a regression if server has a DSA key pair, the handshake fails
when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
known - https://trac.nginx.org/nginx/ticket/2071#comment:1
As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534 - Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362 - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test - Update to version 1.1.1k - Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3 - Remove 2-key 3DES test from FIPS_selftest - Fix CVE-2021-3450 openssl: CA certificate check bypass with
X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing - Fix CVE-2020-1971 ediparty null pointer dereference - Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters - Further changes for SP 800-56A rev3 requirements - Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters - Disallow dropping Extended Master Secret extension
on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
TLS SigAlgs configuration - Add FIPS selftest for PBKDF2 and KBKDF - Allow only well known DH groups in the FIPS mode - update to the 1.1.1g release
- FIPS module installed state definition is modified - add selftest of the RAND_DRBG implementation - fix incorrect error return value from FIPS_selftest_dsa
- S390x: properly restore SIGILL signal handler - additional fix for the edk2 build - disallow use of SHA-1 signatures in TLS in FIPS mode - fix CVE-2019-1547 - side-channel weak encryption vulnerability
- fix CVE-2019-1563 - padding oracle in CMS API
- fix CVE-2019-1549 - ensure fork safety of the DRBG
- fix handling of non-FIPS allowed EC curves in FIPS mode
- fix TLS compliance issues - backported ARM performance fixes from master - backport of S390x ECC CPACF enhancements from master
- FIPS mode: properly disable 1024 bit DSA key generation
- FIPS mode: skip ED25519 and ED448 algorithms in openssl speed
- FIPS mode: allow AES-CCM ciphersuites - make the code suitable for edk2 build - backport of SSKDF from master - backport of KBKDF and KRB5KDF from master - do not try to use EC groups disallowed in FIPS mode
in TLS
- fix Valgrind regression with constant-time code - update to the 1.1.1c release - adjust the default cert pbe algorithm for pkcs12 -export
in the FIPS mode - Fix small regressions related to the rebase - FIPS compliance fixes - update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch - make openssl ts default to using SHA256 digest - use /dev/urandom for seeding the RNG in FIPS POST - make SECLEVEL=3 work - fix defects found in Coverity scan - drop SSLv3 support - drop the TLS-1.3 version revert - disable RC4-MD5 ciphersuites completely - update to the final 1.1.1 version
- for consistent support of security policies we build
RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
- use only /dev/urandom if getrandom() is not available
- disable SM4 - update to the latest 1.1.1 beta version
- temporarily revert TLS-1.3 to draft 28 version - bidirectional shutdown fixes from upstream - do not put error on stack when using fixed protocol version
with the default config (#1615098) - load crypto policy config file from the default config - update to the latest 1.1.1 beta version - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - fix FIPS RSA key generation failure - ppc64le is not multilib arch (#1584994) - fix regression of c_rehash (#1562953) - fix FIPS symbol versions - update to upstream version 1.1.0h
- add Recommends for openssl-pkcs11 - one more try to apply RPM_LD_FLAGS properly (#1541033)
- dropped unneeded starttls xmpp patch (#1417017) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - apply RPM_LD_FLAGS properly (#1541033) - silence the .rnd write failure as that is auxiliary functionality (#1524833) - put the Makefile.certificate in pkgdocdir and drop the requirement on make - update to upstream version 1.1.0g - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - make s_client and s_server work with -ssl3 option (#1471783) - perl dependency renamed to perl-interpreter
<https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> - disable verification of all insecure hashes - make DTLS work (#1462541) - enable 3DES SSL ciphersuites, RC4 is kept disabled (#1453066) - only release thread-local key if we created it (from upstream) (#1458775) - update to upstream version 1.1.0f
- SRP and GOST is now allowed, note that GOST support requires
adding GOST engine which is not part of openssl anymore - update to upstream version 1.1.0e
- add documentation of the PROFILE=SYSTEM special cipher string (#1420232) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - applied upstream fixes (fix regression in X509_CRL_digest) - update to upstream version 1.1.0d - preserve new line in fd BIO BIO_gets() as other BIOs do - FIPS mode fixes for TLS - revert SSL_read() behavior change - patch from upstream (#1394677)
- fix behavior on client certificate request in renegotiation (#1393579) - EC curve NIST P-224 is now allowed, still kept disabled in TLS due
to less than optimal security - update to upstream version 1.1.0c - use a random seed if the supplied one did not generate valid
parameters in dsa_builtin_paramgen2() - do not break contract on return value when using dsa_builtin_paramgen2() - fix afalg failure on big endian - update to upstream version 1.1.0b - Add flags for riscv64. - minor upstream release 1.0.2j fixing regression from previous release - Fix enginesdir in libcrypto.c (#1375361) - minor upstream release 1.0.2i fixing security issues
- move man pages for perl based scripts to perl subpackage (#1377617) - fix regression in Cisco AnyConnect VPN support (#1354588) - require libcrypto in libssl.pc (#1301301) - minor upstream release 1.0.2h fixing security issues - disable SSLv2 support altogether (without ABI break) - enable RC5 - reenable SSL2 in the build to avoid ABI break (it does not
make the openssl vulnerable to DROWN attack) - minor upstream release 1.0.2g fixing security issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - minor upstream release 1.0.2f fixing security issues
- add support for MIPS secondary architecture - document some options of openssl speed command - enable sctp support in DTLS - remove unimplemented EC method from header (#1289599) - the fast nistp implementation works only on little endian architectures - minor upstream release 1.0.2e fixing moderate severity security issues
- enable fast assembler implementation for NIST P-256 and P-521
elliptic curves (#1164210)
- filter out unwanted link options from the .pc files (#1257836)
- do not set serial to 0 in Makefile.certificate (#1135719) - fix sigill on some AMD CPUs (#1278194) - re-enable secp256k1 (bz1021898) - minor upstream release 1.0.2d fixing a high severity security issue - fix the aarch64 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - minor upstream release 1.0.2c fixing multiple security issues - Add aarch64 sslarch details - fix some 64 bit build targets - add alternative certificate chain discovery support from upstream - rebase to 1.0.2 branch - drop the AES-GCM restriction of 2^32 operations because the IV is
always 96 bits (32 bit fixed field + 64 bit invocation field) - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
- fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0293 - triggerable assert in SSLv2 server - fix bug in the CRYPTO_128_unwrap() - fix bug in the RFC 5649 support (#1185878) - Rebuilt for Fedora 23 Change
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - test in the non-FIPS RSA keygen for minimal distance of p and q
similarly to the FIPS RSA keygen - new upstream release fixing multiple security issues - disable SSLv3 by default again (mail servers and possibly
LDAP servers should probably allow it explicitly for legacy
clients) - update the FIPS RSA keygen to be FIPS 186-4 compliant - new upstream release fixing multiple security issues - copy negotiated digests when switching certs by SNI (#1150032) - add support for RFC 5649 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - drop RSA X9.31 from RSA FIPS selftests
- add Power 8 optimalizations - new upstream release fixing multiple moderate security issues
- for now disable only SSLv2 by default - fix license handling - disable SSLv2 and SSLv3 protocols by default (can be enabled
via appropriate SSL_CTX_clear_options() call) - use system profile for default cipher list - make FIPS mode keygen bit length restriction enforced only when
OPENSSL_ENFORCE_MODULUS_BITS is set
- fix CVE-2014-0224 fix that broke EAP-FAST session resumption support - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - new upstream release 1.0.1h - Drop obsolete and irrelevant docs
- Move devel docs to appropriate package - new upstream release 1.0.1g
- do not include ECC ciphersuites in SSLv2 client hello (#1090952)
- fail on hmac integrity check if the .hmac file is empty - pull in upstream patch for CVE-2014-0160
- removed CHANGES file portion from patch for expediency - add support for ppc64le architecture (#1072633) - properly detect encryption failure in BIO
- use 2048 bit RSA key in FIPS selftests - use the key length from configuration file if req -newkey rsa is invoked - print ephemeral key size negotiated in TLS handshake (#1057715)
- add DH_compute_key_padded needed for FIPS CAVS testing - make expiration and key length changeable by DAYS and KEYLEN
variables in the certificate Makefile (#1058108)
- change default hash to sha256 (#1062325) - make 3des strength to be 128 bits instead of 168 (#1056616) - fix CVE-2013-4353 - Invalid TLS handshake crash
- fix CVE-2013-6450 - possible MiTM attack on DTLS1 - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
- more FIPS validation requirement changes - drop weak ciphers from the default TLS ciphersuite list
- add back some symbols that were dropped with update to 1.0.1 branch
- more FIPS validation requirement changes - fix locking and reseeding problems with FIPS drbg - additional changes required for FIPS validation - disable verification of certificate, CRL, and OCSP signatures
using MD5 if OPENSSL_ENABLE_MD5_VERIFY environment variable
is not set - add back support for secp521r1 EC curve
- add aarch64 to Configure (#969692) - fix misdetection of RDRAND support on Cyrix CPUS (from upstream) (#1022346) - do not advertise ECC curves we do not support (#1022493) - only ECC NIST Suite B curves support
- drop -fips subpackage - resolve bugzilla 319901 (phew! only took 6 years & 9 days) - make DTLS1 work in FIPS mode
- avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode - avoid dlopening libssl.so from libcrypto (#1010357) - fix small memory leak in FIPS aes selftest - fix segfault in openssl speed hmac in the FIPS mode - document the nextprotoneg option in manual pages
original patch by Hubert Kario - [arm] use elf auxv to figure out armcap.c instead of playing silly
games with SIGILL handlers. (#1006474) - try to avoid some races when updating the -fips subpackage - use version-release in .hmac suffix to avoid overwrite
during upgrade - allow deinitialization of the FIPS mode - always perform the FIPS selftests in library constructor
if FIPS module is installed - add -fips subpackage that contains the FIPS module files - fix use of rdrand if available
- more commits cherry picked from upstream
- documentation fixes - Perl 5.18 rebuild - additional manual page fix
- use symbol versioning also for the textual version - additional manual page fixes - use _prefix macro - Perl 5.18 rebuild - add openssl.cnf.5 manpage symlink to config.5 - add relro linking flag - add support for the -trusted_first option for certificate chain verification - fix build of manual pages with current pod2man (#959439) - Enable ARM optimised build - fix random bad record mac errors (#918981) - fix up the SHLIB_VERSION_NUMBER - disable ZLIB loading by default (due to CRIME attack) - new upstream version - more fixes from upstream
- fix errors in manual causing build failure (#904777) - add script for renewal of a self-signed cert by Philip Prindeville (#871566)
- allow X509_issuer_and_serial_hash() produce correct result in
the FIPS mode (#881336) - do not load default verify paths if CApath or CAfile specified (#884305) - more fixes from upstream CVS
- fix DSA key pairwise check (#878597) - use 1024 bit DH parameters in s_server as 512 bit is not allowed
in FIPS mode and it is quite weak anyway - add missing initialization of str in aes_ccm_init_key (#853963)
- add important patches from upstream CVS
- use the secure_getenv() with new glibc - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - use __getenv_secure() instead of __libc_enable_secure - do not move libcrypto to /lib
- do not use environment variables if __libc_enable_secure is on
- fix strict aliasing problems in modes - fix DSA key generation in FIPS mode (#833866)
- allow duplicate FIPS_mode_set(1)
- enable build on ppc64 subarch (#834652) - fix s_server with new glibc when no global IPv6 address (#839031)
- make it build with new Perl - new upstream version - new upstream version - new upstream version fixing CVE-2012-2110 - add Kerberos 5 libraries to pkgconfig for static linking (#807050) - backports from upstream CVS
- fix segfault when /dev/urandom is not available (#809586) - new upstream release - add obsoletes to assist multilib updates (#799636) - epoch bumped to 1 due to revert to 1.0.0g on Fedora 17
- new upstream release from the 1.0.1 branch
- fix s390x build (#798411)
- versioning for the SSLeay symbol (#794950)
- add -DPURIFY to build flags (#797323)
- filter engine provides
- split the libraries to a separate -libs package
- add make to requires on the base package (#783446) - new upstream release from the 1.0.1 branch, ABI compatible
- add documentation for the -no_ign_eof option - new upstream release fixing CVE-2012-0050 - DoS regression in
DTLS support introduced by the previous release (#782795) - new upstream release fixing multiple CVEs - move the libraries needed for static linking to Libs.private - do not use AVX instructions when osxsave bit not set
- add direct known answer tests for SHA2 algorithms - fix missing initialization of variable in CHIL engine - new upstream release fixing CVE-2011-3207 (#736088) - drop the separate engine for Intel acceleration improvements
and merge in the AES-NI, SHA1, and RC4 optimizations
- add support for OPENSSL_DISABLE_AES_NI environment variable
that disables the AES-NI support - correct openssl cms help output (#636266)
- more tolerant starttls detection in XMPP protocol (#608239) - add support for newest Intel acceleration improvements backported
from upstream by Intel in form of a separate engine - allow the AES-NI engine in the FIPS mode - add API necessary for CAVS testing of the new DSA parameter generation - add support for VIA Padlock on 64bit arch from upstream (#617539)
- do not return bogus values from load_certs (#652286) - clarify apps help texts for available digest algorithms (#693858) - new upstream release fixing CVE-2011-0014 (OCSP stapling vulnerability) - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
key generation method
- use FIPS-186-3 method for DSA parameter generation
- add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
to allow using MD5 when the system is in the maintenance state
even if the /proc fips flag is on
- make openssl pkcs12 command work by default in the FIPS mode - listen on ipv6 wildcard in s_server so we accept connections
from both ipv4 and ipv6 (#601612)
- fix openssl speed command so it can be used in the FIPS mode
with FIPS allowed ciphers - new upstream version fixing CVE-2010-4180 - replace the revert for the s390x bignum asm routines with
fix from upstream - revert upstream change in s390x bignum asm routines - new upstream version fixing CVE-2010-3864 (#649304) - make SHLIB_VERSION reflect the library suffix - openssl man page fix (#609484) - new upstream patch release, fixes CVE-2010-0742 (#598738)
and CVE-2010-1633 (#598732) - pkgconfig files now contain the correct libdir (#593723) - make CA dir readable - the private keys are in private subdir (#584810) - a few fixes from upstream CVS
- move libcrypto to /lib (#559953) - set UTC timezone on pod2man run (#578842)
- make X509_NAME_hash_old work in FIPS mode - update to final 1.0.0 upstream release - make TLS work in the FIPS mode - gracefully handle zero length in assembler implementations of
OPENSSL_cleanse (#564029)
- do not fail in s_server if client hostname not resolvable (#561260) - new upstream release - fix CVE-2009-4355 - leak in applications incorrectly calling
CRYPTO_free_all_ex_data() before application exit (#546707)
- upstream fix for future TLS protocol version handling - add support for Intel AES-NI - upstream fix compression handling on session resumption
- various null checks and other small fixes from upstream
- upstream changes for the renegotiation info according to the latest draft - fix non-fips mingw build (patch by Kalev Lember)
- add IPV6 fix for DTLS - add better error reporting for the unsafe renegotiation - fix build on s390x - disable enforcement of the renegotiation extension on the client (#537962)
- add fixes from the current upstream snapshot - keep the beta status in version number at 3 so we do not have to rebuild
openssh and possibly other dependencies with too strict version check - update to new upstream version, no soname bump needed
- fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
so the compatibility with unfixed clients is not broken. The
protocol extension is also not final. - fix use of freed memory if SSL_CTX_free() is called before
SSL_free() (#521342) - fix typo in DTLS1 code (#527015)
- fix leak in error handling of d2i_SSL_SESSION() - fix RSA and DSA FIPS selftests
- reenable fixed x86_64 camellia assembler code (#521127) - temporarily disable x86_64 camellia assembler code (#521127) - fix openssl dgst -dss1 (#520152) - drop the compat symlink hacks - constify SSL_CIPHER_description() - fix WWW:Curl:Easy reference in tsget - enable MD-2 - update to new major upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - do not build special 'optimized' versions for i686, as that's the base
arch in Fedora now - abort if selftests failed and random number generator is polled
- mention EVP_aes and EVP_sha2xx routines in the manpages
- add README.FIPS
- make CA dir absolute path (#445344)
- change default length for RSA key generation to 2048 (#484101) - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379
(DTLS DoS problems) (#501253, #501254, #501572) - support compatibility DTLS mode for CISCO AnyConnect (#464629) - correct the SHLIB_VERSION define - add support for multiple CRLs with same subject
- load only dynamic engine support in FIPS mode - update to new upstream release (minor bug fixes, security
fixes and machine code optimizations only) - move libraries to /usr/lib (#239375) - add a static subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - must also verify checksum of libssl.so in the FIPS mode
- obtain the seed for FIPS rng directly from the kernel device
- drop the temporary symlinks - drop the temporary triggerpostun and symlinking in post
- fix the pkgconfig files and drop the unnecessary buildrequires
on pkgconfig as it is a rpmbuild dependency (#481419) - add temporary triggerpostun to reinstate the symlinks - no pairwise key tests in non-fips mode (#479817) - even more robust test for the temporary symlinks - try to ensure the temporary symlinks exist - new upstream version with necessary soname bump (#455753)
- temporarily provide symlink to old soname to make it possible to rebuild
the dependent packages in rawhide
- add eap-fast support (#428181)
- add possibility to disable zlib by setting
- add fips mode support for testing purposes
- do not null dereference on some invalid smime files
- add buildrequires pkgconfig (#479493) - do not add tls extensions to server hello for SSLv3 either - move root CA bundle to ca-certificates package - fix CVE-2008-0891 - server name extension crash (#448492)
- fix CVE-2008-1672 - server key exchange message omit crash (#448495) - super-H arch support
- drop workaround for bug 199604 as it should be fixed in gcc-4.3 - sparc handling - update to new root CA bundle from mozilla.org (r1.45) - Autorebuild for GCC 4.3 - merge review fixes (#226220)
- adjust the SHLIB_VERSION_NUMBER to reflect library name (#429846) - set default paths when no explicit paths are set (#418771)
- do not add tls extensions to client hello for SSLv3 (#422081) - enable some new crypto algorithms and features
- add some more important bug fixes from openssl CVS - update to latest upstream release, SONAME bumped to 7 - update to new CA bundle from mozilla.org - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
- fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
- add alpha sub-archs (#296031) - rebuild - use localhost in testsuite, hopefully fixes slow build in koji
- CVE-2007-3108 - fix side channel attack on private keys (#250577)
- make ssl session cache id matching strict (#233599) - allow building on ARM architectures (#245417)
- use reference timestamps to prevent multilib conflicts (#218064)
- -devel package must require pkgconfig (#241031) - detect duplicates in add_dir properly (#206346) - the previous change still didn't make X509_NAME_cmp transitive - make X509_NAME_cmp transitive otherwise certificate lookup
is broken (#216050) - aliasing bug in engine loading, patch by IBM (#213216) - CVE-2006-2940 fix was incorrect (#208744) - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
- fix CVE-2006-2940 - parasitic public keys DoS (#207274)
- fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
- fix CVE-2006-4343 - sslv2 client DoS (#206940) - fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180) - set buffering to none on stdio/stdout FILE when bufsize is set (#200580)
patch by IBM - rebuild with new binutils (#200330) - add a temporary workaround for sha512 test failure on s390 (#199604) - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
- add patches for BN threadsafety, AES cache collision attack hazard fix and
pkcs7 code memleak fix from upstream CVS - rebuild - dropped libica and ica engine from build - update to new CA bundle from mozilla.org; adds CA certificates
from netlock.hu and startcom.org - fixed a few rpmlint warnings
- better fix for #173399 from upstream
- upstream fix for pkcs12 - upgrade to new version, stays ABI compatible
- there is no more linux/config.h (it was empty anyway) - fix stale open handles in libica (#177155)
- fix build if 'rand' or 'passwd' in buildroot path (#178782)
- initialize VIA Padlock engine (#186857) - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - don't include SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
in SSL_OP_ALL (#175779) - rebuilt - fix build (-lcrypto was erroneusly dropped) of the updated libica
- updated ICA engine to 1.3.6-rc3 - disable builtin compression methods for now until they work
properly (#173399) - don't set -rpath for openssl binary - new upstream version
- patches partially renumbered - updated IBM ICA engine library and patch to latest upstream version - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
disables the countermeasure against man in the middle attack in SSLv2
(#169863)
- use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803) - add *.so.soversion as symlinks in /lib (#165264)
- remove unpackaged symlinks (#159595)
- fixes from upstream (constant time fixes for DSA,
bn assembler div on ppc arch, initialize memory on realloc) - Updated ICA engine IBM patch to latest upstream version. - fix CAN-2005-0109 - use constant time/memory access mod_exp
so bits of private key aren't leaked by cache eviction (#157631)
- a few more fixes from upstream 0.9.7g - use poll instead of select in rand (#128285)
- fix Makefile.certificate to point to /etc/pki/tls
- change the default string mask in ASN1 to PrintableString+UTF8String - update to revision 1.37 of Mozilla CA bundle - move certificates to _sysconfdir/pki/tls (#143392)
- move CA directories to _sysconfdir/pki/CA
- patch the CA script and the default config so it points to the
CA directories - uninitialized variable mustn't be used as input in inline
assembly
- reenable the x86_64 assembly again - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
- disable broken bignum assembly on x86_64 - reenable optimizations on ppc64 and assembly code on ia64
- upgrade to new upstream version (no soname bump needed)
- disable thread test - it was testing the backport of the
RSA blinding - no longer needed
- added support for changing serial number to
Makefile.certificate (#151188)
- make ca-bundle.crt a config file (#118903) - libcrypto shouldn't depend on libkrb5 (#135961) - rebuild - new upstream source, updated patches
- added patch so we are hopefully ABI compatible with upcoming
0.9.7f - Support UTF-8 charset in the Makefile.certificate (#134944)
- Added cmp to BuildPrereq - generate new ca-bundle.crt from Mozilla certdata.txt (revision 1.32) - Fixed and updated libica-1.3.4-urandom.patch patch (#122967) - rebuild - rebuild - rebuild - remove der_chop, as upstream cvs has done (CAN-2004-0975, #140040) - Include latest libica version with important bugfixes - rebuilt - Updated ICA engine IBM patch to latest upstream version. - build for linux-alpha-gcc instead of alpha-gcc on alpha (Jeff Garzik) - handle %{_arch}=i486/i586/i686/athlon cases in the intermediate
header (#124303) - add security fixes for CAN-2004-0079, CAN-2004-0112 - Fixed libica filespec. - ppc/ppc64 define __powerpc__/__powerpc64__, not __ppc__/__ppc64__, fix
the intermediate header - add an intermediate <openssl/opensslconf.h> which points to the right
arch-specific opensslconf.h on multilib arches - rebuilt - Updated libica to latest upstream version 1.3.5. - Update ICA crypto engine patch from IBM to latest version. - rebuilt - rebuilt - Fixed libica build. - add "-ldl" to link flags added for Linux-on-ARM (#99313) - updated ca-bundle.crt: removed expired GeoTrust roots, added
freessl.com root, removed trustcenter.de Class 0 root - Fix link line for libssl (bug #111154). - add dependency on zlib-devel for the -devel package, which depends on zlib
symbols because we enable zlib for libssl (#102962) - Use /dev/urandom instead of PRNG for libica.
- Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
- Use latest ICA engine patch from IBM. - rebuild - rebuild (22 wasn't actually built, fun eh?) - re-disable optimizations on ppc64 - add a_mbstr.c fix for 64-bit platforms from CVS - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
as not needing executable stacks - rebuild - re-enable optimizations on ppc64 - remove exclusivearch - only parse a client cert if one was requested
- temporarily exclusivearch for %{ix86} - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
and heap corruption (CAN-2003-0545)
- update RHNS-CA-CERT files
- ease back on the number of threads used in the threading test - rebuild to fix gzipped file md5sums (#91211) - Updated libica to version 1.3.4. - rebuild - free the kssl_ctx structure when we free an SSL structure (#99066) - rebuild - lower thread test count on s390x - rebuild - disable assembly on arches where it seems to conflict with threading - Updated libica to latest upstream version 1.3.0 - rebuild - rebuild - ubsec: don't stomp on output data which might also be input data - temporarily disable optimizations on ppc64 - backport fix for engine-used-for-everything from 0.9.7b
- backport fix for prng not being seeded causing problems, also from 0.9.7b
- add a check at build-time to ensure that RSA is thread-safe
- keep perlpath from stomping on the libica configure scripts - thread-safety fix for RSA blinding - rebuilt - Added libica-1.2 to openssl (featurerequest). - fix building with incorrect flags on ppc64 - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
attack (CAN-2003-0131) - add patch to enable RSA blinding by default, closing a timing attack
(CAN-2003-0147) - disable use of BN assembly module on x86_64, but continue to allow inline
assembly (#83403) - disable EC algorithms - update to 0.9.7a - add fix to guard against attempts to allocate negative amounts of memory
- add patch for CAN-2003-0078, fixing a timing attack - Add openssl-ppc64.patch - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
to get the right behavior when passed uninitialized context structures
(#83766)
- build with -mcpu=ev5 on alpha family (#83828) - rebuilt - Added IBM hw crypto support patch. - add missing builddep on sed - debloat
- fix broken manpage symlinks - fix double-free in 'openssl ca' - update to 0.9.7 final - update to 0.9.7 beta6 (DO NOT USE UNTIL UPDATED TO FINAL 0.9.7) - update to 0.9.7 beta5 (DO NOT USE UNTIL UPDATED TO FINAL 0.9.7) - add configuration stanza for x86_64 and use it on x86_64
- build for linux-ppc on ppc
- start running the self-tests again - Merge fixes from previous hammer packages, including general x86-64 and
multilib - rebuild - update asn patch to fix accidental reversal of a logic check - update asn patch to reduce chance that compiler optimization will remove
one of the added tests - rebuild - add patch to fix ASN.1 vulnerabilities - add backport of Ben Laurie's patches for OpenSSL 0.9.6d - own {_datadir}/ssl/misc - automated rebuild - automated rebuild - free ride through the build system (whee!) - rebuild in new environment - merge RHL-specific bits into stronghold package, rename - add support for Chrysalis Luna token - disable AEP random number generation, other AEP fixes - only build subpackages on primary arches - on ia32, only disable use of assembler on i386
- enable assembly on ia64 - fix sparcv9 entry - upgrade to 0.9.6c
- bump BuildArch to i686 and enable assembler on all platforms
- synchronise with shrimpy and rawhide
- bump soversion to 3 - delete BN_LLONG for s390x, patch from Oliver Paukstadt - update AEP driver patch - adjust RNG disabling patch to match version of patch from Broadcom - disable the RNG in the ubsec engine driver - tweaks to the ubsec engine driver - tweaks to the ubsec engine driver - update ubsec engine driver from Broadcom - move man pages back to %{_mandir}/man?/foo.?ssl from
%{_mandir}/man?ssl/foo.?
- add an [ engine ] section to the default configuration file - add a patch for selecting a default engine in SSL_library_init() - add patches for AEP hardware support
- add patch to keep trying when we fail to load a cert from a file and
there are more in the file
- add missing prototype for ENGINE_ubsec() in engine_int.h - actually add hw_ubsec to the engine list - add in the hw_ubsec driver from CVS - update to 0.9.6b - move .so symlinks back to %{_libdir} - move shared libraries to /lib (#38410) - switch to engine code base - add a script for creating dummy certificates
- move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.? - add s390x support - change two memcpy() calls to memmove()
- don't define L_ENDIAN on alpha - Add 'stronghold-' prefix to package names.
- Obsolete standard openssl packages. - Add BuildArch: i586 as per Nalin's advice. - Enable assembler on ix86 (using new .tar.bz2 which does
include the asm directories). - make subpackages depend on the main package - adjust the hobble script to not disturb symlinks in include/ (fix from
Joe Orton) - drop the m2crypo patch we weren't using - configure using "shared" as well - update to 0.9.6a
- use the build-shared target to build shared libraries
- bump the soversion to 2 because we're no longer compatible with
our 0.9.5a packages or our 0.9.6 packages
- drop the patch for making rsatest a no-op when rsa null support is used
- put all man pages into <section>ssl instead of <section>
- break the m2crypto modules into a separate package - use BN_LLONG on s390 - fix the s390 changes for 0.9.6 (isn't supposed to be marked as 64-bit) - move c_rehash to the perl subpackage, because it's a perl script now - update to 0.9.6
- enable MD2
- use the libcrypto.so and libssl.so targets to build shared libs with
- bump the soversion to 1 because we're no longer compatible with any of
the various 0.9.5a packages circulating around, which provide lib*.so.0 - change hobble-openssl for disabling MD2 again - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
bytes or so, causing EVP_DigestInit() to zero out stack variables in
apps built against a version of the library without it - disable some inline assembly, which on x86 is Pentium-specific
- re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all) - fix s390 patch - added support s390 - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
- add the CA.pl man page to the perl subpackage - always build with -mcpu=ev5 on alpha - add a symlink from cert.pem to ca-bundle.crt - add a ca-bundle file for packages like Samba to reference for CA certificates - remove libcrypto's crypt(), which doesn't handle md5crypt (#19295) - add unzip as a buildprereq (#17662)
- update m2crypto to 0.05-snap4 - fix some issues in building when it's not installed - make sure the headers we include are the ones we built with (aaaaarrgh!) - add Richard Henderson's patch for BN on ia64
- clean up the changelog - fix the building of python modules without openssl-devel already installed - byte-compile python extensions without the build-root
- adjust the makefile to not remove temporary files (like .key files when
building .csr files) by marking them as .PRECIOUS - break out python extensions into a subpackage - tweak the makefile some more - disable MD2 support - disable MDC2 support - tweak the disabling of RC5, IDEA support
- tweak the makefile - strip binaries and libraries
- rework certificate makefile to have the right parts for Apache - use %{_perl} instead of /usr/bin/perl
- disable alpha until it passes its own test suite - move the passwd.1 man page out of the passwd package's way - update to 0.9.5a, modified for U.S.
- add perl as a build-time requirement
- move certificate makefile to another package
- disable RC5, IDEA, RSA support
- remove optimizations for now - Bero told me to move the Makefile into this package - add lib*.so symlinks to link dynamically against shared libs - update to 0.9.5
- run ldconfig directly in post/postun
- add FAQ - Fix build on non-x86 platforms - move /usr/share/ssl/* from -devel to main package - inital packaging
- changes from base:
- Move /usr/local/ssl to /usr/share/ssl for FHS compliance
- handle RPM_OPT_FLAGS
1:1.1.1k-9.el8_7 1:1.1.1k-9.el8_7 CA certs crl newcerts private CA.pl c_rehash tsget tsget.pl CA.pl.1ssl.gz c_rehash.1ssl.gz openssl-tsget.1ssl.gz tsget.1ssl.gz /etc/pki/ /etc/pki/CA/ /usr/bin/ /usr/share/man/man1/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory Perl script text executable troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R utf-8 3892e487cd6738d17afc46deca5e7e0b8e9a5c38f720b26d21b6e5f148e13d20 ? ���0 �7zXZ
� � ! #��,�{S=�]
�b2�u j�ӫ�`(y.�r�O�⹃R�� L\J�Ѐ*�� �=
İl���6lkQi �zk�Ѻ�7 �+x�mf��LX�a��χh�H�7�1X��sE WH� �Μ�� E��A������K�e��|�� ��n{�AQ��s9�(Y�A�� v���.v �#�)a�f8$�d+��cZ��xf)�h��i&6���pq��rJۦĭѣ�i�~V&Va3 0��)�]1�.o J�;��~G�:��ilba��y:��!�9=��%���~5*&��>:�9�7�"yo_�Kp���k=���P�@��E���?�=��#=fK=����q��g�]�B�9�c>�FYf}�Pܼ�_��$Dɋ�;(>EWcG���}s��_p6"K���_e8?I��|�Z ���=L>4V�<�*����"w��_M|��#V� ˾�q�=����f^���C̢w*����O/�K�_^J��{�90$m�����RN�q�MTa� \mL`�p�ۂ
��.�Ϊ�ǽMl���`�DS"Y�/b����~�s��ؿ��
" i�T`r���ָ� �j (��� �|�s��B��e3� ��nCI-ޜRnyz�'~�Ar����g[B-��aŜ]�-�N�
������]G|
l� �n�EY��g۱�1���(�-z��
���p D��Óc�+�pfb�x� �R ̵ �C�� PvE7��jƆ�����v��]/��;���t ��{�9���G!�/٧�ʣ��e T�t"�cYQA���3e�V`���;5�
� re�`��Yל$�("�C��ey�$7K�.���l>�I��.���� teZAM�%1/-�E��}j��9��Ը�x�S�|*.��B�
���I��� �d�"�s�T,<VVO#|7����5�;������
����(Y`�U`
qr��O~���?�߹�mRY��.N/�V�a�� � 紈��fl�#� Ŏ���E��kڑ��<�a���l~n�+�V��m��k/��w�0�
^mu��;��� n�Fv+� _@
6yΙm�Y|�D=J��k5= �{M C= ��c��7�pPz+�#�d ��e��u�����s Ei��H�?�v�
�G�f� A��Z��3}Y�8 ��&���F�]����r�A���ѧ8q���Q���-}�T������b�L���v� Hh���#��Ϥ%��>��AqMݍT�p�y2�O�1n!�'ETW��`B�ɋ]�-
\�ٓg� T���ʡ��st.� ��o��-{ �,�u*N-� 8��G'�n� ��kҀ-����j
R����e�4;Ȼ���ޔ�̚a�&,���8Ƞ�K[K������ ��@1+5pqI��ܙv�g��*(��Q}��i�,��+�����ͻ�+L�
z���KH���:*��?E2rozW�AP��� F�� eAյ����.^�dB��o����?/�0�̵�ӄ�#\�G�� s�2�)�M*��?H Opw6����-�mG ���h��.���ߢ�a���ؿ��!��y�/��5X`sRe�����ή�ve_s;
���M�G?��i���"Nܓ6S�`�&%��G�8�����t5q�Wy؇c�g�h�{u<"�X(���4���bwG���Ds8[��ش��7��y����y><U�nX�Aq�N{V�B]�&��|
$�c)��R(�f����i��>��,E ���-��b��q�����8o_Y�}�c��6��p��,����3�#��< ��j�i�EA_��E3�6���)��1��J�Y��eԸ~�Қ� �hX�I\�,�c��Դ� �\�獚k����:n�U�M ����� ^+��e��ϸ���vAh�_U$M�L� ňj�M��Y;�ͺI 5@ʍ�Ꭴz�q�o<���e�`1; �׀�&�Ы��E,-�w%��\5~���wZ`�? �����+קY��>G��?�{���kU��ڡ��oh X���x]J�듬y�
`�b/ 42�j�����S��ɭ#�a�WGEMg��y���Uo�)�/_���+��겂��d9vo;�:t+��)�ʎK.���� ¢����\�pݿD�a#;��R�����}�J
\F=�9���o��;,I �.�QO���>�5� ���T�����2�)%7?,k������6c��h!�/��3��N�`0?ǧłS�-�
� M��xĕQ��i �5��GJYWJ�� M�
��>ƈ ︐w�2젾:L�Zp ��st�{-� 5n��=s�[�Ȭ�h ��&P�u��n�]��\�#�Ԯ���k�nT�ӹ��Z�}�����S$���v�%$�A7�v]��`^�t�6� u��ߖ:�:"(� ��sF�7 ��(���]܃@�ɪ�0���j�.+4/S�(��*�emxav��h�Ŝd?�FE M7��Л�`�Y3\�WZs�s ����J
�
v����{g�Wy��}5t$�n���^��e�i�I�{�V�_�g���
�{�� 9�Q�T���w��Ws�˾�w(�̗
o!6p�0�Vϴ��b�Ad��T���xR� ���ș�ˑe��X� �<�X~uk��o�%>�V��6:CI
�(U�=.t<V�t.����X�12m�����;�9�� �{儆f@j�C�$GZ ��3�����2G�N�
�=�U ���
�4X]2=+��J�H7�{�
���$ܚ�
�)V��GMP4b�``�].��0� ��� �3�p}���ͮ
��!*أ#�l� Ǫ�7��ײ(�y�&�( �Im��]����(�_���B����iSՉ��쇗\O��_����q�j�B�ۖ"�O���W�M8��"�f�!�3?ņ��� �X���pxJ7�?��|���T�h�� �ޚO�� ���f�j�'� ��5?�jۿ�a�^U`mhٹ� r�wn�ګ�{��Q��蜻jw� .��X�#&t��(Y�|L��"��EB˛6ا��bw��n43�1Ih䝶+^��"**�4m17��p�$1� �6��?F��Y��x� 1T�y�� ��f0�#
���Ԋ��Z����Q���w�F;�V7�"��K:}��~��i�l ul�gl�g/T��1]�!���$��EbP0�_���ϺB�~��7ʜ��!�?��^��� 0k���!Q����:4e&��W��uO1�kc�D|L�w0�(�7k~���jsp�͊� t;�-�}���᳑��W3 ��f&��u�j0ts̬sfl�� voi'U}P�;et'u{24�Q5Ty�Ūec��N ���`tkA��쭷^��R�D�$��������l�):tu�Y�^t͚�%7����坩{~aA+)�b#¦��\�a*�y= ҩ߯�1�xaM,dť-:�s{#���D���'l�nS�C��v��Q�0X/�6��"�Yx0hO9Bxbpa:bQ��=� K?t/peG3��0
���Kجt��R�̅�����{ $���WMx���$g]�:4ZE�x��e�Fi�Y�h�$ʫY"��2��$�8F�{#td�j�IS#��X�Ï����k*6E-���U�Y{I-ݧ� iݶmԁI�;)���{�d:�M�^ƥ��u��.���?@��XM�����c��k�#W��*e��7���-j@�я;U����*i
F��v)��4��n���B �q1ft|� E���8�a�h✝���?�W-K��=-��M7!��左' ]'�g\��El��Y��ʃ6V��3�P����w�� S���h�qL��6�Ӌ*�x�V�D f$2�}~��X� ��v�Ҧ��}���-!*�/��qb�iN�.%ƹuv��*^��CDx���R�r 2(�J�|bA/�H�=���z��a���Q~2zM��<�d���X�VDc�/��a�{��a�s?V�*��qY�O������?/mT���)=du�*�1l�ʗ�/UA
�Gz�% � >z=�R� lw] ec���,���K�IƢ��<te>\rMg��G;����� ~sʃ8S��}��=�I��vYg��vYxc�W�RAo{�#����!���^#��.1&`4��E��s��k����W�f�M�H��і͗��!��p���|�`,x`�, /�' d��c �[��� ��40�Z�Ba�ޙ�ϓX��˹Ɏ,�Y���*�ĉʎ�f��Ƿ�������F��8f��� �����0�uN5YQHL����"��]�c��(+RL�L�f�z������7���e7h{/�,-+q4�Z ���܁��X2^ޱ�H��"z�ڰk �/����� �#S$�g��t(����nx!ٵ�r�|���BUJ��`��%-��}ņgN�&��c �~ ���D��ۙg�L!}m߽[� � �>N7��e�oE�0��;%3��z��Ϧ�}//bi&���x�!�qsde�{����V)4+�T�9���������K�i#��,��
sZ�{h�bz#7� ��:�����zR��$|֨�P��$6���W�F2�'&��z=ّ@�X�P��n��[Mc��l|Bp<�<�����=g�5�c�p��m_R �gRy��cW�Z�a�0ݟ�,��n��B ��ܿ2\���cǮ�� 9�� �Hr
"�7p . r�́N�$F����?)� a�������a� �x_�i���J"�nS��w��L�3X)�1��HA���FP�_�g��O�Um��5�R��;R�ń��L �k�i8���x:ϴ��ߧ6�W�G����2-����Lڍ ��X�,�K ���潲��/������2����g��'r'"%�/�mL���jV��!��9�����o,"�Z8����]�p��q�q3�A ����i0��)�=��i�H(E�-M��0��n1���� ���=UR+�Q �=]۠ �K�3Z0��˒���mS?������`2��o�%=�,�Z��ۍ] M=��&�
���7Ε�� ŏC<i ه:�OY���@e�[;�����K�!4��W.�r� {I�E�����h�O�
0Yg&UrCq�[�n鉫1�Ւ2tb�#�ӥ�r��� EC����+B�tfe�A f���O\4MOw~N�r(�V��x� �]�ԛGR�H�?~�ݪ&���Q,�y����M '�r�� �S�2�t�=�6�5'��j�T�(2�x��wk��ļ?U����������� �xĭ��9�T� ��ǂ�dpOG��S^ �>����RRo��~)o��d�����xz%#4�4�1�
G�Z��٬��yjC �i�wQ� �=zFA [��!{<R���\^flh��`�Df.�fL� �ı�T$=��ie���X�?�.�o��3���l�4o�CpV^V��n�K�aU��]�}��iT�d�^��t���>�1S�E:۰�G7��"m�ίt w� �:@>�優�D�f��)�rzB�s�w�ӡ/=���#j��PB���` �r;V�M2���^��_�t*��������%c"ܦ���O�L���6�8�V��6R�� ]v�~IϐY����a<Rd��Jo��:�jO c��6�� �HKP��HYP�E�*�� "H��J� �R���Ҥ� W�F���1���4A�ӄ�M�/ �a%���x� 8� �NsU��G�A9�갂����*����U�:h��6�����I �A��~{Q��m�s�F۸W� ��1�?�#�.^Kb�� v���e�S� ����W���Y���"v�`ZFxHC!_�� �~����ڎD�������i� ��I�l����S��-��?w�tv��d6��|���}ꋙ��YY�>#g�h�a�w ��,wm����(͍�� �
Ȍ=��UG�� i]��DY�Qv����sg��f\N�x3�N3{ev��
5|��I>Z�Z�e{�+��#�-r�{�A�\����HƘO�< �-�I��{��_�ڇ�
9 R픇� ��v���<r��f+�g �k�u���)bӦN��p�4hM+E�q�@��O��#�E�f�*#ɓ�kw��2
���,��ʵ�k�&���l��eM�#��ݕ��y��5�z�7*��K��i{�$�U�F���ZM����7.c�yS�~�C�]���k��=�_��|��>kZ�\eCʡݘ��|_~I�O��Hb� kn,�E6���t�
q�J�ﱿ5>N@s�� �� F�^T�Y@��>ҏ�<�Y,���M�:��#;� � Z%8s�kRY��|(���N&&U��"�J�F��T^�<�� �D���#k����N��,$�c���F�Lv�M��N��o�C�/뤗7=���3VG� ��^� ���I)�I���;�U�&�k���s�=�5vC�EfC�ڏ�\�9���Mf@d���p�Z�X�HY[���
�� �A�[�b��*��� anRh:
��b�ڈ�>�x5Ҟ;�GJ�3mG� ��}ѠQ ~�\������Zx���hL�fI�ģp8��� �5|)r��Eu���{��X5Yǎ6ߴE ^h�r�z ��:�g��\��F��̣S�̴FP��ѲaY�~�ZVDd�2��{���-�l�x��g
��d�P��S��?S�`�)��ٯ��y� X�R�m�L:�ȵE�������fv�4��h�Ac�F��B���`�k%�1`ot1=$I�n�^�%猪�rKOYE)�z$��,�t�9�z�5 ��SK�,�"�/��8s0�0;�~��yN�Sc�R��,�x�Ȧ3�p�e�l�ܵ�f��;.�� 3R�'��q/�Gy3}|S�GEdf"�Gx$�FC���om�S}�]�I�a� �f�"c����]�q���1�%Go����"U�*�� ����K1X��Pt"��A��S�0�� ,)�.{:7��#(ؙqA·�^��������P�`?��S$���t��@�$dC\�3�R^�t�q>=�.*#��J^]{nV�o6�PoHy� h�!�f�� ����똰&�:�N��6w�*�f��Lv3��;6&�m����7 �6Ж�i�zo�zCH�% ?:�_�3�q�g[9;伣"Wg�n�m��MI�K�u�,7��#{�v߶�uM�mVcu���a���J;�zc����r�k�5��|��z$�a<3~�� a�j�U:�IEG�� 0�G�OK��;��rV�f��7`��S� �w�_��[� ��R\H �:3/�r�������f >� ���(L��t2� ����Nw��ŏ�oS�oe �^c�wt��)� A�i�E��zy�U�L�0m�D��^��:��/T藬" 8����fI"�tF��і�K���"���3��n���g�-z�x:��t^�5�����]��+�>�,4���y�E�Y���E ?&e��敳 ��*�_����[��Mc�q�ޝ�C� �ޟV��+�"���e�YU� c�i�(Q�u�A�pd��q�Q�1V� �����4D�!D1��vys]AĒ�� \���D0
DgA�n5��0����<7Ǎ dE~>�V�� �)Y=ľ��48)���˙!�Ҩ"�a"J�]-6g�/�E�G��¥�����}�լ7�6m�S�3\@3��x�� y���Z��_n�����Pρi�~=|�COc�~�n�;�N�[���� H+������̲��Ь����
\bYľ���ɳW �`G&���uV `۲ &���.�<X'�[��#-�~���}C��_[H�TE�c��E<���l���5����}������i� �Q�H�7^�4�S���L��,�AA��� z�sI�pD�c��r3� 2L������k�� �&�?҂7c^��)� {� F_4� e�w�_��u��1[q�Po�0�G�_ѥE��*�=N���6K~/@�D(�܄j�,l����J� �=��}��Ҧ��6�����5[I�
y���o�Y���{� ��aIiZ��U8 �9\��U�\�\B�����q�<�}붓JW+�:= ��@�Ih�aX�S�sD��
0���4�>u���Ͼ�S���~p� �@��3Te��nm���}�\��!�;�N{ ք!;Ӧ*AԶB�
�,%h,�o�0� ��9�|�7[ %8|\�>�VSp4^xL g�1�Y�n>نc�f�}c�h ���p���"�<BDqTG!�@@�a�j�,��#4��ۭDNE1� �����/%q�d����K��P�r�&
��'��^�^ 0ݢ�]
�qa��A0�Wm�~�[ ����{�k-|��*O�3YY gL�h ���( �b�YL�)$Ǿ�뻵 �>{��hߙ��u�]��c����ɸ�/( v�e�j�\�� �G�+���5�oq[�-�� c淊�Ɇ��H^� �.�˹ �d��qK��q��\ZI?x�,<Y ���Э�.H҂��w��cN8!��t-��O=WϨ��J �B0h9{�� �̛
�J��G�h |����9Q�:~�)�4�k�8X4Dw��kU�9�+��JuC�+u aaH�������~�ǒ�R��};M�9Q Cej)5�K�j
hj��>8��#"8|��*��v}����T�T[ŋNi&6.얟{K%��¤E���l����)K��V��"?��"P)c�I
�ʑLu6�m�G�پ�WZ��Ʃ0��^*�)�q�D��d�_�\�۔�ƛh�3]�Uڅ������:h: ��ՏRH#��_\�E���մ�_����4�� )�P167!� aN+��eL\_��U���-���v���.��%��o%D� �Hf��2�,���s�9"�> �-lv�7� ؖ�o
(����6���ŧ7�� ��5�xd`�mI�cB�q�o�;ԥ[g��˝�P�:S�C`�S��G ��Y|Q�4�~�I{Y���c[\�h������FN��w����ײ����o�j����')�f��m:U�ߎ�+�<-W؇�J,�g��}���o ��`� ��F�
�t2�"t�������`E}���!nm� �WV0Lyڎ�BY��,����cS0KȞ��m��掵��lO%4 ɵЀ^ �D�G
����,�T4M��]� ˎ{O[������<i����:A �!(G%D� b2Oc�3��n"9�`�lgIDa�C@.��Pϔ� ?"m��p57��c�ijL?&���tTc0�Ɋ���a�zz��V;��ѵ �i+ �Z���I�q���ȷB/�sp��bH�X��:s�o�O>�%�EFM�a�-���ƌ.1�m�L"Jb�@�xP[҅� z#���5�z��]�R���J2�g�E�� ("K9�
��>�Hڑ��9�>I ��M^5��sg�BV��Π).'��P�7-�m�O��+ 2i;�fr 7��K���=6q�9J����(�=�QP�^؊�G�SW�|mjܹ�y�X܌�>��kg-WB n]:Q��ʨ�n#��>�Y*bE����H������l}�cYN�0�M�3+p_P/���71����SӽL�?9v];�ܐi��t(���2�;�J.��* ۂŽ�`��y���⋋��μP���V�ju��Y���W�T_��[Ν�P0�#�,�d
U�TU!�*��Oyɟ�fbrw��Z�Ӊ�5Lck�^�$�(c`֥���LT�z�e!� ��$cG'N�
p2��/i�'w8 �A&�M�o���y�^g���f(���O��5�$�,�7v���1I���K7�)0�@�=�_x�
�*X�R#�#O� 4�P�vP�i��v�m�%OF&�,ѭY��pK�A<�N�Ν�Y�KC�@�T�4UY0��) �w_A�_%7<�g�v�|�}�-��� j�a�s��hۖ�j("Ŵo�í)�u^�&���p���OD���Z����sGV�s/��uTD��x�%!�c���ҳ��� ����O�A�Jr���.5��Mq=;�C� ,F��k�A���S�덱T�u�{�ۋ��j"L� ���_�r�|�
��
��Xni7w��4�|���P�n�¡��8Hm�������Qb $����蒫آ�Av�؇O;�GmM5V�;����9��Z ПgV�]���t^^��+��:�I8a �(�E �.ёt��<��u e� |:?�<吩9��#��"��2�U�F�Շؗt�9�KIKe #U$��z���m{#��'�v��D�`)|֙��� a��;J��n��W��F��A^9�oq� �"��U h�d��H�fʾ�z}�U� �о���/�]�O��kW�A�Y4tZ�@��$n��ޢ`�v\��Z=CB,�C�5,�ere
_|��aU��� f��T͝� �A(���4r�l��i����D^LƞF�t��[�S��I�T%K��%��4�
k/1��q}�� ��̕��x�.��n��D��@��~��w 9�,�v�'>l
l�]4�� ��~�*0$��9k1��a%meS/Ҭ��Y�Cse�5�=<�;�Lk �_��VS��T��V�H)�Y���V��@��� )T���U`��W�;��o�=�]&�c^��[�{n�ɚ�V�R̲�&,y*�f8� ��$k[ 6���A�wY朥l�Z�}����j���mWK��M5 ����~��}�s��(q����V����[�X����jB�WOj����u�Qi�P�UC�����\H�ڃyMx:>�yU�a��Z�����I �u9-���vKTw*�ۼ�ж� �K�iK��M�{����&Esqt���+g��z�y��~T$]��8�+�*h�&�1rC�J�x��\�>Nk���83A��Um�e��g� -���M��й��"�c�']�XW���ٔ�h��0,��Eɨ�Y��<*~ϓ
�PK�� ��=� ��3��DG_�n#�@[9ի�hz�WH�� �fE�/Bܡ ��Mm�( &�~pJ ��l�!��v���[�1$���2�<0�w��
�B��������VΧd{�V�'�wHӻ� SJG:�U����J�I!z>���� S �,�z��Y�σ��ԁެ��^~�;��.B��RD.�e��;\�����q�x�d#'��&��������|̚����_Z]�'� U%[p�4BHPI�G�?WH�7�;�A�.G�8��'�����#�_c7 �J E$Ɋ�H��V�l�����%�R��F�}��虵*d97������h������������5��(���ZbI7$�G�?�:��(������N���OaS�w�ݖn�� Ňvg��w�����ųS)�Z�;%F�%`fʨ �Ϋ�佷> � u���gVx v�?�]�vst�I]х��mI���d�L�
W}w��+�7b"^,��h��X��Q���M�_{9o���N@� ˠJ��H�7�*潜��v#GI�Uk�g�d���N"�n�^��&�MC
{P�ê!7l�����" ���Wа]��J��bԞ�YG��Pk2�Պ��A �>�h�C�Τ�3�)�����p�y��� $��ǝ�m���/�HM�1R� �O�l�Vt_��Z+!�gγ��/�}� ���e%�H�k�y���^��z��,5~��O�Q�,Q�$F9�M�}�G�gvG�Hk_eU �vR�"��Cԡ���) [vB� ]˴�j�X�v(@�4|
k�;uZB9|�D2��m�t�½��B����`o�9 ��t �˶�G�
�ꆽ�u�S�
����Q��r���� �b�k�� ��#MʉOA�7E�A���� �����W�:�%�D �T�,UC���N�V���}"(��Ύ���^/��;�('N�,��z���* �#�Ο�gs�d�ʑ�7� �N� ���Ʀ�KF��aE�a����M9���/�6yҳ���s�!��� )�V�����gFK~���7M��j;m���5�T�+��Kp�� ڙ1��y�� �D�w��W'���s�xϴiN0��7Rh�W����8�I(҆��<slkq��b��l� ��R�m��Pn*�U� Bo�y�(�u|��B��m����Gm�jc���Y)���_.�w���h��O��V� � G���� �)ܫ�qc4��nd�
2��!���
k�x�v���ӯ j0-�y��� qt���&�(V:�� a�<�z���e�P���x�ہ�FK�r�4����8�n�Ab�d�Y ��M�� ���w��,]i�V����Є���I�J�ǻ(�"Ԩ�� ��1� �Z�Ɣ۵��R�����7��*�d9��{�@y�G�B�J�u�SdT�UY_�4��'�7(���BKp�n�R����^�=?Oq ���T�
4�c&�d�����! �R�j[��}�4i���Z<B�����d�������?�p-g���L������
=�"�m|��Z�(�.mC E� � � ��̷ \�Ӟi1�j�nH�P(Yį��
CH��B/\1�� �FAG{� �p�Y��\@��O�5� r��[�ǥNI W� ��ZDN}��� q(�g�?���d?ވ"Y �Kb�C�� �� 0G촞�NaΠaU
����w�ۑ#W�c�m֖? �y:s<O ��`:�g^ų��+-��������a)��Z7
�Z����ɩ)��t�G0�����U'M$Ё�@����"j�����dc憥�D*i��U���4���(*� XeX�� �xCz�?*bR??U�v��G d�1���l8cK"�����Rv꾰��#C��+� < ��S���\z@?�&�� *���h|�����r���n�MV|��W��ӳ� 3�H���ae�8�0d��
��2#�-�i�t� �}N�����M!u��M�I��[)?2��\�Qqub����h�O)�����P\����8�P�77Ȳgl*ٹ(�Ӽb�d? ��]+v,����(�0�9�T��NS9�R`2g�ݓ�����~���w���FHkܮ� éL�A"�3rM�wݢ�}��3'cE-�c��5� �Ň��[��_�� @ݠt
,X!��y:3l�H� ���us �퉑��.xJj��kcT �.��kw ���ce]�4�\�/�xTU ��;Z�7��G{q! K2���_3&X�� �3K�1���4�����D��7S�K����ŬR_�IaT0\'�k��m
�-��g�l
��F��=}N��Wà�'Y(�?o�e
���p���q�l�1� R�D�y�5"�;�}v��?��
��W����k#�z���I�zSC¬H��0{��+&��q�����"�5a:��5Yh� �m?^��'��p����CH�Œ�љ��K��X'�f#�t� �����#��Ȗ���O���\ ��
I~�� L?s�_f��&�켢 �kM�f�-���Y��*K�8Vb\P].=�
������Rxp �q�)�sb�����!!�V��q�d���n�kv<b��Q���R����/��+ �6�<&�����R�R���B(�hۙ.�����N�Z��K0gB{��7�af ���_X�@D�e<| �X�v'�u�@���'�C.p*� ��L����?I6n9z�v�q;0���7 0j�I�M\{qʠ�ٲ���{��;���g>*�����-s��wL���rt⇤)f�"tUw��nso�|� �7o �]?���#)�xy��!�т��� ���ݞ����N��9�eE�'��J./��B49��>K�"[D�mc�"M9 ��Q�\:E@�'���μ.��ݛ�4�ᴕ ��/�P)/� q8:��
v�8�K��Ҋ|�%�E ���Ly�ae��QQ�~�6C�Ij^'�S:����R�
�Y��,Ա�W�����4�XU�I�m��Nj/Dva�/�}װ&����\���`)�Q�7�6�T?�nV��]&
kH> !���^5V��%���ڡ�(��.�A&H�v��P�f�DI��d�ĴrC�����@~���k�Du2M��
h� o=<�ET"�V��EW��v K.��<v�2���Ű}s�2��?-ڭ{"�JZ� b��"e]�����d���_�� �^/r9t"W�я�����n7K+LO&p�m��sQ�[��B7َ�Ni�*��@) �蝈 ����m�-��#y;�
g��22��`��_:!�GC��Z��Hl�E])s�н�Ea����c^B�%,��8l�8��n{\��r��b� [��<��&�Ux{ܚɊ���?��D���Q[
|���L��A�c�]s�X�\��D�l�L����bA�-�7�M پ��
�f�+U��d c�=e�D́��h�U%ud;~)s��@��Pǝ_� ��?��L$��CL#�u�:�CK��Q���p;�5 ���/���K�F�v ��Bo�i �>>u� �R�S��_$5�-bpR�;QB�4MB�T�`�r1�f1��[f#F��|��6�013Y��-��ي�ַl2�O�y�-�"%=��s�O��YՃTw�=K�)�!B Ѽ��';����m�k�7������� �ӍV)�%0� 0�}��X�^K)lA�~6M�K ��!�!Y��ų%���4j�}b쯜��͜��Ql!]Z��
d� � 7��B���k
DZ ]�d������.w��� `r��&��ag���w�����7 ���
��u�i�++�p��֧��T�� ��]rٲB^}J��m=ku�~Br� ޘ&��eH�KM��O��i��Z�52���V� x���p��uo�DB�Q&�uK!�q��#&��t�a�=���g2C5����r!\W�� h[$O�N}L�o�8!Pk��eM0��KlA��e�T�H��S�p��-�
]�:��'ݶ;QX/�
��fWa.jJ�e`/�{\���}l��Щ��J�;�m����U�LT�(�D�FZ!W��# �'Q�� � �I��]}�"��ө�C�$Y��Ve�;D����|�֍z|S�ᒆ�X0��L����=y�x�8ڙ_��e��t;�&`���t,�ފZ�� 9��Xx�G";�O ���e�*�e�4GnQf'�q�ĩ�0�� ����{X��?��mj ���T�O
�I 6x�X���ݚ�8B�Yí��,P��> �Ò� a%�+lu $����z��OG��&Y��'!�8Wx4�}*X�O�g9�~���9 Z�+�J���(�V��*��J
b���їR���tj�I�tNz�'�I�ϖ|*̓����juc��y�'�W��鍘]�f�Rm��g� G��,���P|)��b&۠�a� z�U����Ib�(V�P��=��.�<�9������ f t�4*��OHP#1�;Y �j7�@�ч��Q�]��ej<�� *��bJ��ap�_�u��ۀb��mx�) ���ڌ �H��G��\ Ǫ
qd(Rvƭ,��ť��o ����'�Ԣ��_��Y@E_�� P����!%�kb* �eγ��_ZN �TTYź^��I7:�� ��P��
�h�!�s���d�65͚��\ *����� �{� �Z�z���
YZ