+ DfjZRt^RIt^RIt^RIHtHtHtHt^RIH t ^RI H t ^RI H t ^RIHt^RIHt^RIHt^R IHt^R IHsHt^R IHs^R IHtHt^RIH t !RR] PB4t"!RR] PB4t#!RR]PH4t%!RR]PH4t&] !]PN4!RR]PH44t(Rt)Rt*!RR4t+\.e!RR\2PX4t-!RR ]]4t.!R!R"]4t/!R#R$]/4t0!R%R&]4t1!R'R(]]+4t2!R)R*4t3!R+R,]4t4!R-R.]4t5R# ]dR t]!4EL$i;i)/z Tests for twisted SSL support. N)defer interfacesprotocolreactor)ConnectionDone)waitUntilAllDisconnected)basic)FilePath)platform)ProperlyCloseFilesMixin)TestCase)SSLcrypto)ssl)ClientTLSContextcertPathcR;ssR#N)r r7/usr/lib/python3/dist-packages/twisted/test/test_ssl.py_noSSLrscr) implementercLa]tRt^'toRt.R OtRR.tRtRtRt Rt Rt Vt R #) UnintelligentProtocolz @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @cvar pretext: text sent before TLS is set up. @type pretext: C{bytes} @cvar posttext: text sent after TLS is set up. @type posttext: C{bytes} sfirst thing after tls startedslast thing everc:\P!4VnR#rrDeferreddeferredselfs&r__init__UnintelligentProtocol.__init__7( rcNVPFpVPV4K R#r)pretextsendLine)r ls& rconnectionMade$UnintelligentProtocol.connectionMade:sA MM! rcVR8XdyVPP\4VPP4VP FpVP V4K VPP4R#R#)READYN) transportstartTLSrfactoryclientposttextr&loseConnection)r liner's&& r lineReceived"UnintelligentProtocol.lineReceived>s[ 8  NN # #$4$6 8K8K L]] a # NN ) ) + rc<VPPR4R#rrcallbackr reasons&&rconnectionLost$UnintelligentProtocol.connectionLostE t$rrN)s first lineslast thing before tls startsSTARTTLS) __name__ __module__ __qualname____firstlineno____doc__r%r0r!r(r3r:__static_attributes____classdictcell__ __classdict__s@rrr's6 LG02DEH),%%rrcFa]tRt^ItoRtR RltRtRtRtRt Rt Vt R#) LineCollectora* @ivar deferred: a deferred that will fire at connection lost. @type deferred: L{defer.Deferred} @ivar doTLS: whether the protocol is initiate TLS or not. @type doTLS: C{bool} @ivar fillBuffer: if set to True, it will send lots of data once C{STARTTLS} is received. @type fillBuffer: C{bool} cRWnW n\P!4VnR#r)doTLS fillBufferrrr)r rKrLs&&&rr!LineCollector.__init__Vs $( rcJRVPn.VPnR#)rN)r.rawdatalinesrs&rr(LineCollector.connectionMade[s"  rcVPPPV4VR8XdVP'd$\ R4FpVP R4K VP R4VP 'dG\\\R7pVPPW0PP4R#VP4R#R#)r>ir+)privateKeyFileNamecertificateFileNameNsXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX) r.rPappendrLranger&rKServerTLSContextrr,r-server setRawMode)r r2xctxs&& rr3LineCollector.lineReceived_s !!$' ; sAMM+.$ MM( #zzz&'/(0''\\-@-@A! rcVP;PV, unVPP4R#r)r.rOr,r1r datas&&rrawDataReceivedLineCollector.rawDataReceivedos' $ %%'rc<VPPR4R#rr6r8s&&rr:LineCollector.connectionLostsr<r)rrKrLNF) r?r@rArBrCr!r(r3r`r:rDrErFs@rrIrIIs( )  " (%%rrIc*a]tRt^wtoRtRtRtVtR#)SingleLineServerProtocolzC A protocol that sends a single line of data at C{connectionMade}. cpVPPR4VPP4R#)+OK N)r,writegetPeerCertificaters&rr('SingleLineServerProtocol.connectionMade|s% 34 ))+rrN)r?r@rArBrCr(rDrErFs@rrfrfws,,rrfc6a]tRt^toRtRtRtRtRtVt R#)RecordingClientProtocolzj @ivar deferred: a deferred that will fire with first received content. @type deferred: L{defer.Deferred} c:\P!4VnR#rrrs&rr! RecordingClientProtocol.__init__r#rc:VPP4R#r)r,rjrs&rr(&RecordingClientProtocol.connectionMades ))+rc<VPPV4R#rr6r^s&&r dataReceived$RecordingClientProtocol.dataReceivedr<rr=N) r?r@rArBrCr!r(rsrDrErFs@rrmrms ),%%rrmc0a]tRt^toRtRtRtRtVtR#) ImmediatelyDisconnectingProtocolz A protocol that disconnect immediately on connection. It fires the C{connectionDisconnected} deferred of its factory on connetion lost. c:VPP4R#rr,r1rs&rhandshakeCompleted3ImmediatelyDisconnectingProtocol.handshakeCompleteds %%'rcPVPPPR4R#r)r.connectionDisconnectedr7r8s&&rr:/ImmediatelyDisconnectingProtocol.connectionLosts ++44T:rrN) r?r@rArBrCryr:rDrErFs@rrvrvs (;;rrvc\P!4pVP\PR4\P!4pVP 4pWnWnVPV4VPVR4\P!4pVP^4VP^4VP^<4VPVP 44VPVP 44VPVP!44VPVR4W#V3#)z Create a certificate for given C{organization} and C{organizationalUnit}. @return: a tuple of (key, request, certificate) objects. imd5)rPKey generate_keyTYPE_RSAX509Req get_subjectOOU set_pubkeysignX509set_serial_numbergmtime_adj_notBeforegmtime_adj_notAfter set_issuer set_subject get_pubkey) organizationorganizationalUnitpkeyreqsubjectcerts&& rgenerateCertificateObjectsrs ;;=Dfoot, .. CooGI#JNN4HHT5 ;;=D1a R OOCOO%&S__&'OOCNN$%IIdE d?rcb\W4wr4pRV\P3RV\P3RV\P33Fdwrgp\ P PW34PR4p \V 4PV!\PV44Kf R#)zy Create certificate files key, req and cert prefixed by C{basename} for given C{organization} and C{organizationalUnit}. keyrrzutf-8N) rrdump_privatekeydump_certificate_requestdump_certificateosextsepjoinencoder setContent FILETYPE_PEM) basenamerrrrrextobjdumpFuncfNames &&& rgenerateCertificateFilesrs 1RODt f,,- V445 v../(  /66w?""8F,?,?#EF rc0a]tRt^toRtRtRtRtVtR#)ContextGeneratingMixina4 Offer methods to create L{ssl.DefaultOpenSSLContextFactory} for both client and server. @ivar clientBase: prefix of client certificate files. @type clientBase: C{str} @ivar serverBase: prefix of server certificate files. @type serverBase: C{str} @ivar clientCtxFactory: a generated context factory to be used in L{IReactorSSL.connectSSL}. @type clientCtxFactory: L{ssl.DefaultOpenSSLContextFactory} @ivar serverCtxFactory: a generated context factory to be used in L{IReactorSSL.listenSSL}. @type serverCtxFactory: L{ssl.DefaultOpenSSLContextFactory} cVP4p\WQV4\P!\P P VR34\P P VR34.VO5/VBpWV3#)rr)mktemprrDefaultOpenSSLContextFactoryrrr)r orgorgUnitargskwArgsbaseserverCtxFactorys&&&*, rmakeContextFactory)ContextGeneratingMixin.makeContextFactoryso{{} G4;; IINND%= ) IINND&> *    %%rcVP!V/VBwVnVnVP!V/VBwVnVnR#r)r clientBaseclientCtxFactory serverBaser)r clientArgs clientKwArgs serverArgs serverKwArgss&&&&&rsetupServerAndClient+ContextGeneratingMixin.setupServerAndClientsN151H1H 2 '2 ..261H1H 2 '2 ..r)rrrrN) r?r@rArBrCrrrDrErFs@rrrs& &  rrc.a]tRt^toRtRtRtRtVtR#)rWzN A context factory with a default method set to L{OpenSSL.SSL.SSLv23_METHOD}. Fct\PVR&\PP!V.VO5/VBR#) sslmethodN)r SSLv23_METHODrrr!)r rkws&*,rr!ServerTLSContext.__init__s/!//B{O  , , 5 5d HT HR HrrN) r?r@rArBrCisClientr!rDrErFs@rrWrWs  I IrrWcja]tRtRtoRt]P !]R4fRtRt Rt Rt Rt R t VtR#) StolenTCPTestsizW For SSL transports, test many of the same things which are tested for TCP transports. N2Reactor does not support SSL, cannot run SSL testsc \PP\\4P 44pVP 4p\P!W#WQR7#)zI Create an SSL server with a certificate using L{IReactorSSL.listenSSL}.  interface) rPrivateCertificateloadPEMr r getContentoptionsr listenSSL)r address portNumberr.rcontextFactorys&&&& r createServerStolenTCPTests.createServer sF%%--hx.@.K.K.MN  nXXrc P\P!4pVPWV4#)z7 Create an SSL client using L{IReactorSSL.connectSSL}. )rCertificateOptions connectSSL)r rr clientCreatorrs&&&& r connectClientStolenTCPTests.connectClients%//1''^LLrc "\P#)z Return L{OpenSSL.SSL.Error} as the expected error type which will be raised by a write to the L{OpenSSL.SSL.Connection} object after it has been closed. )r Errorrs&rgetHandleExceptionType%StolenTCPTests.getHandleExceptionTypes yyrc  N\P!\P!\P!R4\P!\P!R4\P!R4\P!R44\P!R444#)a Return a L{hamcrest.core.matcher.Matcher} for the argument L{OpenSSL.SSL.Error} will be constructed with for this case. This is basically just a random OpenSSL implementation detail. It would be better if this test worked in a way which did not require this. z SSL routines SSL_writessl_write_internalzprotocol is shutdown)hamcrestcontainsequal_toany_ofrs&rgetHandleErrorCodeMatcher(StolenTCPTests.getHandleErrorCodeMatcher#s{    !!.1%%k2%%&:;%%b) !!"89   rr)r?r@rArBrCr IReactorSSLrskiprrrrrDrErFs@rrrs? gt,4CYM  rrca]tRtRtoRt]P !]R4fRtRt Rt Rt Rt R Rlt RtR tR tR tVtR#) TLSTestsi:zs Tests for startTLS support. @ivar fillBuffer: forwarded to L{LineCollector.fillBuffer} @type fillBuffer: C{bool} NrFcVPPe%VPPP4VPPe'VPPP4R#R#r) clientProtor,r1 serverProtors&rtearDownTLSTests.tearDownJs[    % % 1    & & 5 5 7    % % 1    & & 5 5 7 2rc 6aaSVn\P!4;q@nV3RlVnV'd RVnMRVnSVn\P!4;qPnV3RlVnV'd RVnMRVn\P!^VRR7pVPVP4\P!RVP4PV4\ P"!SP$SP$.4#)am Helper method to run TLS tests. @param clientProto: protocol instance attached to the client connection. @param serverProto: protocol instance attached to the server connection. @param clientIsServer: flag indicated if client should initiate startTLS instead of server. @return: a L{defer.Deferred} that will fire when both connections are lost. c<S#rrrsr#TLSTests._runTest..`krFTc<S#rrrsrrrhrr 127.0.0.1r)rr ClientFactory clientFactoryrXr/r ServerFactory serverFactoryr listenTCP addCleanup stopListening connectTCPgetHostportr gatherResultsr)r rrclientIsServercfsfrs&ff& r_runTestTLSTests._runTestPs'"*"8"8":: ) BIBI&"*"8"8":: ) BIBI  B+> **+; (;(;R@""K$8$8+:N:N#OPPrc aV3RlpSP\4\RSP44pVP V4#)zf Test for server and client startTLS: client should received data both before and after the startTLS. c<SPSPP\P\P ,4R#r) assertEqualrrPrr%r0)ignorer s&rcheck TLSTests.test_TLS..check{5   ""((%--0E0N0NN rTr rrIrL addCallbackr rdsf rtest_TLSTLSTests.test_TLSus8   MM/1=t3W X}}U##rc aV3RlpSP\4\RSP44pVP V4#)z Test for server startTLS not followed by a startTLS in client: the data received after server startTLS should be received as raw. c<SPSPP\P4SP SPP R4R#)zNo encrypted bytes receivedN)rrrPrr% assertTruerOignoredr s&rr"TLSTests.test_unTLS..checksA   T//557L7T7T U OOD..668U VrFrrsf r test_unTLSTLSTests.test_unTLSs=  W MM ! #]5$//%J }}U##rc aV3RlpSP\RSP4\4R4pVP V4#)z* Test startTLS first initiated by client. c<SPSPP\P\P ,4R#r)rrrPrr%r0rs&rr)TLSTests.test_backwardsTLS..checkrrT)r rIrLrrrsf rtest_backwardsTLSTLSTests.test_backwardsTLSs?   MM $ 02G2I4 }}U##r)rrrrrd)r?r@rArBrCrrrrrLrrrr rrr$rDrErFs@rrr:sSgt,4CJKK8 #QJ $ $$$rrcL]tRtRtRt]P !]R4fRtRt Rt R#)SpammyTLSTestsiz9 Test TLS features with bytes sitting in the out buffer. NrTr) r?r@rArBrCrrrrrLrDrrrr'r's&gt,4CJrr'cba]tRtRto]P !]R4fRtRtRt Rt Rt Rt Vt R#)BufferingTestsiNrc>VPPe%VPPP4VPPe%VPPP4\ \ VPVP.4#r)rr,r1rrrrs&rrBufferingTests.tearDownst    % % 1    & & 5 5 7    % % 1    & & 5 5 7'$2B2BDDTDT1UVVrcaa\4;oVn\4;oVn\P !4p\P !4;q nV3RlVnV3RlVn\P!\\4p\P!4p\P!^WRR7pVPVP4\P !RVP#4P$W$4pVPVP&4SP(P+VP,R4#)c<S#rrrsrr6BufferingTests.test_openSSLBuffering..+rc<S#rrrsrrr.r/rrrrh)rfrrmrrrrr/rrrClientContextFactoryrrrrrrr disconnectrrr) r rXr/sCTXcCTXrclientConnectorrrs & @@rtest_openSSLBuffering$BufferingTests.test_openSSLBufferings)A)CC d&)@)BB d&'')'5577--//(C'')  FKH **+!,, ,,f  223##//   4  r)r/rr)r?r@rArBrrrrrrrr6rDrErFs@rr)r)s7gt,4CKKW  rr)cja]tRtRtoRt]P !]R4fRtRt Rt Rt Rt R t VtR#) ConnectionLostTestsiz SSL connection closing tests. NrcaRpSPWR,3/WR,3/4\P!4p\PVn\P !^VSP 4;Snp\P!4p\Vn\P!4Vn \P!RVP4PVSP 4VPP#V3Rl4#)twisted.test.test_ssl, client, serverrc8<SPP4#r) serverPortr) ignoredResultr s&rr=ConnectionLostTests.testImmediateDisconnect..s$//"?"?"Ar)rrrProtocolrrrr?rrvrrr|rrrrr)r rserverProtocolFactoryr?clientProtocolFactorysf rtestImmediateDisconnect+ConnectionLostTests.testImmediateDisconnects% !!  " #R#Z/?)@" !) 6 6 8)1):):&'.'8'8 $d&;&;(  *!) 6 6 8)I&7<~~7G4     % % !  ! !  %;;GG A  rc aa\\P4!RR\P44pRpVP W"R,3/W"R,3/4V!4o\P !4pV3RlVn\P!^W0P4pVPVP4V!4o\P!4pV3RlVn\P!RVP4PVVP 4R p\"P$!SP&P)V4SP&P)V4.4#) z Both sides of SSL connection close connection; the connections should close cleanly, and only after the underlying TCP connection has disconnected. c6a]tRtRtoRtRtRtRtRtVt R#)MConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshakeiFc:\P!4VnR#r)rrdoners&rr!VConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.__init__s!NN, rc:VPP4R#rrxrs&rry`ConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.handshakeCompleted s--/rc@VPPV4V=R#r)rKerrbackr8s&&rr:\ConnectionLostTests.test_bothSidesLoseConnection..CloseAfterHandshake.connectionLost s !!&)Ir)rKN) r?r@rArBgotDatar!ryr:rDrErFs@rCloseAfterHandshakerIsG - 0  rrSr;r<r=c<S#rrserverProtocolsrrBConnectionLostTests.test_bothSidesLoseConnection..rc<S#rrclientProtocolsrrrWrXrrc0VP\4R#r)trapr)failures&r checkResultEConnectionLostTests.test_bothSidesLoseConnection..checkResult&s LL (r)rrIHandshakeListenerrrBrrrrrrrrrrrrrrrK addErrback) r rSrrCr?rDr_r[rVs & @@rtest_bothSidesLoseConnection0ConnectionLostTests.test_bothSidesLoseConnections@ Z22 3 ("3"3  4 & !!  " #R#Z/?)@" -. ( 6 6 8)?&&&q*?AVAVW   001,. ( 6 6 8)?&     % % !  ! !   )""##..{;##..{;   rcba a RpVPWR,3/WR,3/4RpVPP4P\P V4\ P!4p\P!4o VPS n \P!4pV 3RlVn\P!^W@P4;Vnp\ P!4p\P!4o VPS n \P"!4pV 3RlVn\P$!RVP'4P(VVP4\ P*!W6.RR7pVP-VP.4#) r;r<r=cR#rdr)as*rverify4ConnectionLostTests.testFailedVerify..verify6src<S#rrrUsrr6ConnectionLostTests.testFailedVerify..?rXrc<S#rrrZsrrrkHrXrrT) consumeErrors)rr getContext set_verifyr VERIFY_PEERrrrrBr7r:rrrrr?rrrr DeferredListr _cbLostConns) r rrhserverConnLostrCr?clientConnLostrDdlr[rVs & @@rtestFailedVerify$ConnectionLostTests.testFailedVerify0s\% !!  " #R#Z/?)@"   ((*55coovN)!**,(6(?(?% ( 6 6 8)?&'.'8'8 $&;&;(  *)!**,(6(?(?% ( 6 6 8)?&     % % !  ! !     @PT U~~d//00rcRVwwr#wrEVPV4VPV4\P.p\P!4'd^RIHpVPV4VP!V!VP!V!VPP4#))ConnectionLost) assertFalser rr isWindowstwisted.internet.errorrzrUr]r?r)r resultssSuccesssResultcSuccesscResultacceptableErrorsrzs&& rrr ConnectionLostTests._cbLostConnsSs3:00h " "II;      =  # #N 3 &' &',,..r)r?)r?r@rArBrCrrrrrErcrvrrrDrErFs@rr9r9s?gt,4C 82 h!1F//rr9c<a]tRtRtoRtRtRtRtRtRt Vt R#) FakeContextinzC L{OpenSSL.SSL.Context} double which can more easily be inspected. c Wn^VnR#)ryN_method_options)r methods&&rr!FakeContext.__init__ss  rc8V;PV,unR#r)r)r rs&&r set_optionsFakeContext.set_optionsws  rcR#rrr fileNames&&ruse_certificate_file FakeContext.use_certificate_filez rcR#rrrs&&ruse_privatekey_fileFakeContext.use_privatekey_file}rrrN) r?r@rArBrCr!rrrrDrErFs@rrrns#!   rrcja]tRtRtoRt]P !]R4fRtRt Rt Rt Rt R t VtR#) !DefaultOpenSSLContextFactoryTestsiz0 Tests for L{ssl.DefaultOpenSSLContextFactory}. Nrc\P!\\\R7VnVPP 4VnR#))_contextFactoryN)rrrrrrncontextrs&rsetUp'DefaultOpenSSLContextFactoryTests.setUps6">> h  **557 rc tVPVPP\P4VPVPP \P ,\P 4VPVPP \P,4R#)zs L{ssl.DefaultOpenSSLContextFactory.getContext} returns an SSL context which can use SSLv3 or TLSv1 but not SSLv2. N) rrrr TLS_METHODr OP_NO_SSLv2r{ OP_NO_TLSv1_2rs&r test_method-DefaultOpenSSLContextFactoryTests.test_methodsp --s~~> ..@#//R ..1B1BBCrc VP\P\P\ VP 44R#)z Instantiating L{ssl.DefaultOpenSSLContextFactory} with a certificate filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N) assertRaisesr rrrrrrs&rtest_missingCertificateFile=DefaultOpenSSLContextFactoryTests.test_missingCertificateFiles+  IIs774;;= rc VP\P\PVP 4\ 4R#)z Instantiating L{ssl.DefaultOpenSSLContextFactory} with a private key filename which does not identify an existing file results in the initializer raising L{OpenSSL.SSL.Error}. N)rr rrrrrrs&rtest_missingPrivateKeyFilegt,4C8 D   rrc^a]tRtRtoRt]P !]R4fRtRt Rt Rt Vt R#)ClientContextFactoryTestsiz( Tests for L{ssl.ClientContextFactory}. Nrc\P!4Vn\VPnVPP 4VnR#r)rr1rrrrnrrs&rrClientContextFactoryTests.setUps7!668.9+**557 rc VPVPP\P4VPVPP \P ,\P 4VPVPP \P,4VPVPP \P,4R#)zl L{ssl.ClientContextFactory.getContext} returns a context which can use TLSv1.2 or 1.3 but nothing earlier. N) rrrr rrrr OP_NO_SSLv3 OP_NO_TLSv1rs&rr%ClientContextFactoryTests.test_methods --s~~> ..@#//R  --?@  --?@rr) r?r@rArBrCrrrrrrrDrErFs@rrrs5gt,4C8 AArr)6rCrrtwisted.internetrrrrr}rtwisted.internet.testingrtwisted.protocolsrtwisted.python.filepathr twisted.python.runtimer twisted.test.test_tcpr twisted.trial.unittestr OpenSSLr rrtwisted.test.ssl_helpersrr ImportErrorrzope.interfacer LineReceiverrrIrBrfrmrarvrrrrrWrrr'r)r9rrrrrrrst AA1=#,+9+  #$C'%E..%D+%E&&+%\,x00, %h// %  Z * *+ ;x'8'8 ;, ;8 G & & R? I3;; I4 ,h4 ng$xg$TX& X& RS/($:S/l  &0 0 fAAu   H sE((E=<E=