JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/acme/_internal/tests/__pycache__/challenges_test.cpython-39.pyc
a
}|�gJ � @ s� d Z ddlZddlZddlmZ ddlmZ ddlZddl m
Z
ddl Z ddl Z ddl
Z
ddlmZ ddlmZ e�d�Zeje�d�d �ZG d
d � d ej�ZG d d
� d
ej�ZG dd� dej�ZG dd� dej�ZG dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G dd� dej�Z G d d � d ej�Z!G d d � d ej�Z"G d d!� d!ej�Z#e$d"k�r�e�%e �&ej'd#d� e(g �� dS )$zTests for acme.challenges.� N)�mock)�JWKEC)�errors)� test_util�cert.pem�rsa512_key.pem��keyc @ s e Zd Zdd� ZdS )�
ChallengeTestc C s< ddl m} ddl m} |ddi�}||�|j�ks8J �d S )Nr )� Challenge��UnrecognizedChallenge�type�foo)�acme.challengesr r
� from_json�jobj)�selfr r
�chall� r �H/usr/lib/python3.9/site-packages/acme/_internal/tests/challenges_test.py�test_from_json_unrecognized s z)ChallengeTest.test_from_json_unrecognizedN)�__name__�
__module__� __qualname__r r r r r r
s r
c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�UnrecognizedChallengeTestc C s& ddl m} ddi| _|| j�| _d S )Nr r r r )r r
r r �r r
r r r �setUp s
z UnrecognizedChallengeTest.setUpc C s | j | j�� ksJ �d S �N)r r �to_partial_json�r r r r �test_to_partial_json$ s z.UnrecognizedChallengeTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S )Nr r )r r
r r r r r r r �test_from_json' s z(UnrecognizedChallengeTest.test_from_jsonN)r r r r r! r" r r r r r s r c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd S ) �%KeyAuthorizationChallengeResponseTestc C s dd� }t �� | _|| jj_d S )Nc S s | dks J �dS )N�tokenr r )�namer r r �_encode/ s z<KeyAuthorizationChallengeResponseTest.setUp.<locals>._encode)r ZMockr �encode� side_effect)r r& r r r r . s
z+KeyAuthorizationChallengeResponseTest.setUpc C s0 ddl m} |dd�}|�| jt�� �s,J �d S )Nr ��!KeyAuthorizationChallengeResponsez/foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WY��key_authorization�r r* �verifyr �KEY�
public_key�r r* �responser r r �test_verify_ok5 s
�z4KeyAuthorizationChallengeResponseTest.test_verify_okc C s0 ddl m} |dd�}|�| jt�� �r,J �d S )Nr r) z/bar.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr+ r- r1 r r r �test_verify_wrong_token; s
�z=KeyAuthorizationChallengeResponseTest.test_verify_wrong_tokenc C s0 ddl m} |dd�}|�| jt�� �r,J �d S )Nr r) z foo.oKGqedy-b-acd5eoybm2f-NVFxvr+ r- r1 r r r � test_verify_wrong_thumbprintA s
�zBKeyAuthorizationChallengeResponseTest.test_verify_wrong_thumbprintc C s0 ddl m} |dd�}|�| jt�� �r,J �d S )Nr r) z0.foo.oKGqedy-b-acd5eoybm2f-NVFxvyOoET5CNy3xnv8WYr+ r- r1 r r r �test_verify_wrong_formG s
�z<KeyAuthorizationChallengeResponseTest.test_verify_wrong_formN)r r r r r3 r4 r5 r6 r r r r r# , s
r# c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
S )�DNS01ResponseTestc C sP ddl m} |dd�| _dddd�| _ddl m} |d d
�| _| j�t�| _d S ) Nr ��
DNS01Responser r+ � challenge�dns-01��resourcer ZkeyAuthorization��DNS01� xxxxxxxxxxxxxxxx�r$ )r r9 �msg�jmsgr? r r2 r/ )r r9 r? r r r r Q s � zDNS01ResponseTest.setUpc C s i | j �� ksJ �d S r �rB r r r r r r! ^ s z&DNS01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r8 )r r9 rB r rC �r r9 r r r r" a s z DNS01ResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S rE )r r9 �hashr rC rF r r r �test_from_json_hashablee s z)DNS01ResponseTest.test_from_json_hashablec C s8 t j�t�d��}|�� }| j�| jd|�}|r4J �d S �Nzrsa256_key.pem�local) �jose�JWKRSA�loadr � load_vectorr0 r2 �
simple_verifyr )r �key2r0 �verifiedr r r �test_simple_verify_failurei s z,DNS01ResponseTest.test_simple_verify_failurec C s& t �� }| j�| jd|�}|s"J �d S �NrJ )r/ r0 r2 rO r )r r0 rQ r r r �test_simple_verify_successo s z,DNS01ResponseTest.test_simple_verify_successN) r r r r r! r" rH rR rT r r r r r7 O s
r7 c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
S )� DNS01Testc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr r> �+evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ+PCt92wr+oArA r; �+evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA�r r$ )r r? rK �decode_b64joserB rC �r r? r r r r w s �
�zDNS01Test.setUpc C s d| j �d�ksJ �d S )Nz _acme-challenge.www.example.comzwww.example.com�rB Zvalidation_domain_namer r r r �test_validation_domain_name� s
�z%DNS01Test.test_validation_domain_namec C s d| j �t�ksJ �d S )NZ+rAa7iIg4K2y63fvUhCfy8dP1Xl7wEhmQq0oChTcE3Zk)rB �
validationr/ r r r r �test_validation� s
�zDNS01Test.test_validationc C s | j | j�� ksJ �d S r �rC rB r r r r r r! � s z DNS01Test.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r> )r r? rB r rC rZ r r r r" � s zDNS01Test.test_from_jsonc C s ddl m} t|�| j�� d S r` )r r? rG r rC rZ r r r rH � s z!DNS01Test.test_from_json_hashableN) r r r r r\ r^ r! r" rH r r r r rU u s rU c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Ze� d �d d
� �Z
e� d �dd� �Z e� d �dd� �Z e� d �dd� �Z
e� d �dd� �Ze� d �dd� �ZdS )�HTTP01ResponseTestc C sP ddl m} |dd�| _dddd�| _ddl m} |d d
�| _| j�t�| _d S ) Nr ��HTTP01Responser r+ r: �http-01r< ��HTTP01r@ rA )r rc rB rC rf r r2 r/ )r rc rf r r r r � s � zHTTP01ResponseTest.setUpc C s i | j �� ksJ �d S r rD r r r r r! � s z'HTTP01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr rb )r rc rB r rC �r rc r r r r" � s z!HTTP01ResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S rg )r rc rG r rC rh r r r rH � s z*HTTP01ResponseTest.test_from_json_hashablec C s, t j�t�d��}| j�| jd|�� � d S rI � rK rL rM r rN r2 rO r r0 �r rP r r r �(test_simple_verify_bad_key_authorization� s z;HTTP01ResponseTest.test_simple_verify_bad_key_authorizationz acme.challenges.requests.getc C sR | j �t�}tj|d�|_| j�| j dt�� �s4J �|j | j �
d�dtj d� d S )N��textrJ F�r. �timeout) r r] r/ r � MagicMock� return_valuer2 rO r0 �assert_called_once_with�uri�ANY)r �mock_getr] r r r �"test_simple_verify_good_validation� s ��z5HTTP01ResponseTest.test_simple_verify_good_validationc C s, t jdd�|_| j�| jdt�� �r(J �d S )N�!rl rJ )r rp rq r2 rO r r/ r0 �r ru r r r �!test_simple_verify_bad_validation� s �z4HTTP01ResponseTest.test_simple_verify_bad_validationc C s` ddl m} tj| j�t�|j d�|_| j �
| jdt� � �sBJ �|j | j�
d�dtjd� d S )Nr rb rl rJ Frn )r rc r rp r r] r/ ZWHITESPACE_CUTSETrq r2 rO r0 rr rs rt )r ru rc r r r �(test_simple_verify_whitespace_validation� s
�� ��z;HTTP01ResponseTest.test_simple_verify_whitespace_validationc C s( t jj|_| j�| jdt�� �r$J �d S rS ) �requests�
exceptionsZRequestExceptionr( r2 rO r r/ r0 rx r r r �#test_simple_verify_connection_error� s
�z6HTTP01ResponseTest.test_simple_verify_connection_errorc C s@ | j j| jdt�� dd� dt�|jd d d �jks<J �d S )NrJ i� )�domainZaccount_public_key�portz
local:8080r � ) r2 rO r r/ r0 � urllib_parse�urlparseZ
mock_calls�netlocrx r r r �test_simple_verify_port� s ��z*HTTP01ResponseTest.test_simple_verify_portc C sl | j �| jdt�� � |j| j�d�ddd� |�� | j j| jdt�� dd� |j| j�d�ddd� d S )NrJ F� rn i� )ro )r2 rO r r/ r0 rr rs Z
reset_mockrx r r r �test_simple_verify_timeout� s ��z-HTTP01ResponseTest.test_simple_verify_timeoutN)r r r r r! r" rH rk r �patchrv ry rz r} r� r� r r r r ra � s"
ra c @ sD e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dS )�
HTTP01Testc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr re rV rA rd rW rX )r rf rK rY rB rC �r rf r r r r � s ���zHTTP01Test.setUpc C s | j jdksJ �d S )NzG/.well-known/acme-challenge/evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA)rB �pathr r r r � test_path� s zHTTP01Test.test_pathc C s d| j �d�ksJ �d S )NzYhttp://example.com/.well-known/acme-challenge/evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oA� example.com)rB rs r r r r �test_uri� s
�zHTTP01Test.test_uric C s | j | j�� ksJ �d S r r_ r r r r r! � s z HTTP01Test.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr re )r rf rB r rC r� r r r r" � s zHTTP01Test.test_from_jsonc C s ddl m} t|�| j�� d S r� )r rf rG r rC r� r r r rH s z"HTTP01Test.test_from_json_hashablec C s$ | j js J �| j jdd�jr J �d S )Ns ..rA )rB Z
good_token�updater r r r �test_good_token s zHTTP01Test.test_good_tokenN)
r r r r r� r� r! r" rH r� r r r r r� � s
r� c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z e j
ddd�dd� �Ze �
d�e �
d�dd� ��Ze �
d �d d � �Zd S ) �TLSALPN01ResponseTestc C sN ddl m} |t�d�d�| _d| _d| _| j�t�| _dd| jj d �| _
d S )
Nr �� TLSALPN01s a82d5ff8ef740d12881f6d3c2277ab2erA r� z example2.comr: � tls-alpn-01r< ) r r� rK � b64decoder r~ �domain2r2 r/ r, rC �r r� r r r r s ��zTLSALPN01ResponseTest.setUpc C s i | j �� ksJ �d S r )r2 r r r r r r! s z*TLSALPN01ResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr )�TLSALPN01Response)r r� r2 r rC �r r� r r r r" s z$TLSALPN01ResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r rC r� r r r rH ! s z-TLSALPN01ResponseTest.test_from_json_hashablec C sB t �d�}| j�| j|�\}}||ks*J �| j�| j|�s>J �d S �Nr )r �load_pyopenssl_private_keyr2 �gen_certr~ � verify_cert�r Zkey1�certrP r r r �test_gen_verify_cert% s
z*TLSALPN01ResponseTest.test_gen_verify_certc C s< | j �| j�\}}t|tjj�s$J �| j �| j|�s8J �d S r )r2 r� r~ �
isinstance�OpenSSLZcryptoZPKeyr� )r r� r r r r � test_gen_verify_cert_gen_key+ s z2TLSALPN01ResponseTest.test_gen_verify_cert_gen_keyc C s | j �| jt�d��rJ �d S )Nr )r2 r� r~ r Z load_certr r r r �test_verify_bad_cert0 s
�z*TLSALPN01ResponseTest.test_verify_bad_certc C sB t �d�}| j�| j|�\}}||ks*J �| j�| j|�r>J �d S r� )r r� r2 r� r~ r� r� r� r r r �test_verify_bad_domain4 s
z,TLSALPN01ResponseTest.test_verify_bad_domainc C s, t j�t�d��}| j�| jd|�� � d S rI ri rj r r r rk : s z>TLSALPN01ResponseTest.test_simple_verify_bad_key_authorizationz-acme.challenges.TLSALPN01Response.verify_certT)Zautospecc C sP t jj|_t jj| jj| j| jt� � t jj
d�ks6J �|� | j| jt jj
� d S )N)r� ) r �sentinelZ verificationrq r2 rO r r~ r/ r0 r� rr )r Zmock_verify_certr r r �test_simple_verify> s
� �z(TLSALPN01ResponseTest.test_simple_verifyz$acme.challenges.socket.gethostbynamez%acme.challenges.crypto_util.probe_snic C s^ d|_ | j�d� |�d� |jd| jjddgd� | jjddd� |jd tjddgd� d S )
Nz 127.0.0.1zfoo.coms 127.0.0.1s foo.coms
acme-tls/1)�hostr r% Zalpn_protocolsz8.8.8.8)r� s 8.8.8.8)rq r2 Z
probe_certrr ZPORTZassert_called_withr rt )r Zmock_probe_sniZmock_gethostbynamer r r �test_probe_certG s
��z%TLSALPN01ResponseTest.test_probe_certz,acme.challenges.TLSALPN01Response.probe_certc C s( t j|_| j�| j| jt�� �r$J �d S r ) r �Errorr( r2 rO r r~ r/ r0 )r Zmock_probe_certr r r �'test_simple_verify_false_on_probe_errorV s �z=TLSALPN01ResponseTest.test_simple_verify_false_on_probe_errorN)r r r r r! r" rH r� r� r� r� rk r r� r� r� r� r r r r r�
s
r� c @ sF e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Ze� d �d d
� �Z
dS )�
TLSALPN01Testc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr r� Z a82d5ff8ef740d12881f6d3c2277ab2erA r� rX )r r� rK r� rB rC r� r r r r _ s ��zTLSALPN01Test.setUpc C s | j | j�� ksJ �d S r r_ r r r r r! h s z"TLSALPN01Test.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r� )r r� rB r rC r� r r r r" k s z TLSALPN01Test.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r rC r� r r r rH o s z%TLSALPN01Test.test_from_json_hashablec C sX ddl m} t�d�| jd< t�tj�� |�| j� W d � n1 sJ0 Y d S )Nr r� s abcdr$ ) r r� rK Zencode_b64joserC �pytestZraisesZDeserializationErrorr r� r r r �#test_from_json_invalid_token_lengths s z1TLSALPN01Test.test_from_json_invalid_token_lengthz*acme.challenges.TLSALPN01Response.gen_certc C sB d|_ d| jjttjjtjjd�ks(J �|jtjjtjjd� d S )N)r� r )�cert_keyr~ )r r~ ) rq rB r] r/ r r� r� r~ rr )r Z
mock_gen_certr r r r^ y s �
�z TLSALPN01Test.test_validationN) r r r r r! r" rH r� r r� r^ r r r r r� ] s r� c @ sd e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dS )�DNSTestc C s. ddl m} |t�d�d�| _ddd�| _d S )Nr ��DNS�+ evaGxfADs6pSRb2LAv9IZf17Dt3juxGJ-PCt92wr-oArA �dnsrW rX )r r� rK r� rB rC �r r� r r r r � s �
�z
DNSTest.setUpc C s | j | j�� ksJ �d S r r_ r r r r r! � s z DNSTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r� )r r� rB r rC r� r r r r" � s zDNSTest.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r rC r� r r r rH � s z DNSTest.test_from_json_hashablec C s� t t�d�d�}ttjf|tjffD ]X\}}| j||d��2 | j� | jj
||d�|� � �s^J �W d � q$1 sr0 Y q$d S )N�ec_secp384r1_key.pemr )r �alg�r� ) r r �load_ecdsa_private_keyr/ rK �RS256�ES384ZsubTestrB �check_validation�gen_validationr0 )r �ec_key_secp384r1r r� r r r �test_gen_check_validation� s �z!DNSTest.test_gen_check_validationc C s4 t j�t�d��}| j�| j�t�|� � �r0J �d S )Nzrsa1024_key.pem)
rK rL rM r rN rB r� r� r/ r0 rj r r r �#test_gen_check_validation_wrong_key� s �z+DNSTest.test_gen_check_validation_wrong_keyc C s6 t dd� dD ��}|D ]}| j�|t�� �rJ �qd S )Nc s s" | ]}t jj|t jtd �V qdS )��payloadr� r N)rK �JWS�signr� r/ )�.0r� r r r � <genexpr>� s �z>DNSTest.test_check_validation_wrong_payload.<locals>.<genexpr>)� � {})�tuplerB r� r/ r0 )r Z validationsr] r r r �#test_check_validation_wrong_payload� s ��z+DNSTest.test_check_validation_wrong_payloadc C sB t jj| jjdd��� �d�t jtd�}| j� |t�
� �r>J �d S )Ns xxxxxxxxxxxxxxxxxxxxrA zutf-8r� ) rK r� r� rB r� �
json_dumpsr' r� r/ r� r0 )r Zbad_validationr r r �"test_check_validation_wrong_fields� s �
��z*DNSTest.test_check_validation_wrong_fieldsc C sp t �d��&}t jj|_| j�t�}W d � n1 s60 Y ddlm } t
||�sZJ �|jt jjkslJ �d S )Nz"acme.challenges.DNS.gen_validationr �� DNSResponse) r r� r� r] rq rB Z gen_responser/ r r� r� )r Zmock_genr2 r� r r r �test_gen_response� s
* zDNSTest.test_gen_responsec C s d| j �d�ksJ �d S )Nz_acme-challenge.le.wtfzle.wtfr[ r r r r r\ � s z#DNSTest.test_validation_domain_namec C s< t t�d�d�}| j�| jj|tjd�|�� �du s8J �d S )Nr� r r� T) r r r� rB r� r� rK r� r0 )r r� r r r �!test_validation_domain_name_ecdsa� s ��z)DNSTest.test_validation_domain_name_ecdsaN)r r r r r! r" rH r� r� r� r� r� r\ r� r r r r r� � s r� c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd S ) �DNSResponseTestc C s� ddl m} |t�d�d�| _tjj| jjdd��� t tj
d�| _ ddl m } || j d �| _
d
| j i| _d d | j �� d
�| _d S )Nr r� r� rA T)Z sort_keys)r� r r� r� )r] r] r: r� )r= r r] )r r� rK r� r r� r� r� r' r/ r� r] r� rB �jmsg_toZto_json� jmsg_from)r r� r� r r r r � s �
� ��zDNSResponseTest.setUpc C s | j | j�� ksJ �d S r )r� rB r r r r r r! � s z$DNSResponseTest.test_to_partial_jsonc C s& ddl m} | j|�| j�ks"J �d S �Nr r� )r r� rB r r� �r r� r r r r" � s z DNSResponseTest.test_from_jsonc C s ddl m} t|�| j�� d S r� )r r� rG r r� r� r r r rH � s z'DNSResponseTest.test_from_json_hashablec C s | j �| jt�� �sJ �d S r )rB r� r r/ r0 r r r r �test_check_validation� s z%DNSResponseTest.test_check_validationN)r r r r r! r" rH r� r r r r r� � s
r� c @ s e Zd ZdZdd� ZdS )�JWSPayloadRFC8555CompliantzFTest for RFC8555 compliance of JWS generated from resources/challengesc C s2 ddl m} |� }|jdd��� }|dks.J �d S )Nr rb � )�indentr� )r rc r� r' )r rc Zchallenge_bodyr r r r �test_challenge_payload� s z1JWSPayloadRFC8555Compliant.test_challenge_payloadN)r r r �__doc__r� r r r r r� � s r� �__main__r� ))r� �sysZunittestr � urllib.parse�parser� ZjosepyrK Z
josepy.jwkr r� r� r{ Zacmer Zacme._internal.testsr Zload_comparable_certZCERTrL Zload_rsa_private_keyr/ ZTestCaser
r r# r7 rU ra r� r� r� r� r� r� r �exit�main�argv�__file__r r r r �<module> s6
#& Q%S%D$
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg