[gnutls-dev] [PATCH] incredibly large RSA modulus not handled

Ian Peters itp@ximian.com
Tue Mar 11 22:55:02 2003


--=-j6TyjchFyxlgwii9snm9
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

The default root CA pem file, as shipped with most browsers, includes a
cert from Thawte that uses a 16384 bit RSA modulus.  The value of
MAX_PARAMETER_SIZE in gnutls_cert.h (1200) appears to have been set for
an 8192 bit modulus, max, which was causing libtasn1 to return
ASN1_E_MEMORY, eventually causing a fatal error in gnutls while parsing
the ca file.

This patch bumps that define up to 2400, which allows the successful
parsing of the Thawte cert.

I've attached a copy of the Thawte cert for testing purposes, as well.

Ian

--=-j6TyjchFyxlgwii9snm9
Content-Disposition: attachment; filename=gnutls-0.8.4-thawte-cert.patch
Content-Type: text/x-patch; name=gnutls-0.8.4-thawte-cert.patch; charset=UTF-8
Content-Transfer-Encoding: 7bit

diff -r -u gnutls-0.8.4/lib/gnutls_cert.h gnutls-0.8.4.new/lib/gnutls_cert.h
--- gnutls-0.8.4/lib/gnutls_cert.h	2002-11-20 16:54:03.000000000 -0500
+++ gnutls-0.8.4.new/lib/gnutls_cert.h	2003-03-11 16:21:20.000000000 -0500
@@ -8,7 +8,8 @@
 #define MAX_PARAMS_SIZE 6 /* ok for RSA and DSA */
 
 /* parameters should not be larger than this limit */
-#define MAX_PARAMETER_SIZE 1200
+#define MAX_PARAMETER_SIZE 2400
 #define DSA_PRIVATE_PARAMS 5
 #define DSA_PUBLIC_PARAMS 4
 #define RSA_PRIVATE_PARAMS 6

--=-j6TyjchFyxlgwii9snm9
Content-Disposition: attachment; filename=thawte.pem
Content-Type: text/plain; name=thawte.pem; charset=UTF-8
Content-Transfer-Encoding: 7bit

Thawte Universal CA Root
========================
MD5 Fingerprint: 17:AF:71:16:52:7B:73:65:22:05:29:28:84:71:9D:13
PEM Data:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate Ingredients:
    Data:
        Version: 1 (0x0)
        Serial Number: 0 (0x0)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=Thawte, OU=Thawte Universal CA Root, CN=Thawte Universal CA Root
        Validity
            Not Before: Dec  5 13:56:05 1999 GMT
            Not After : Apr  3 13:56:05 2037 GMT
        Subject: O=Thawte, OU=Thawte Universal CA Root, CN=Thawte Universal CA Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (16384 bit)
                Modulus (16384 bit):
                    00:e2:89:05:6d:c3:7f:ad:a6:89:3a:ff:bb:c7:cd:
                    9d:37:b1:e1:d2:21:1e:9b:61:2a:15:e7:7b:57:4f:
                    55:3c:d0:bb:f9:d9:3d:3e:a6:bc:ec:b4:ad:53:9a:
                    16:02:eb:0b:72:fd:8a:f2:8f:44:05:c5:eb:d3:e5:
                    bd:b6:44:39:e6:fb:47:bf:6a:9e:0a:95:18:e2:68:
                    e2:d6:96:d6:21:ad:88:fd:f5:17:f5:d3:da:42:a5:
                    90:ed:29:95:96:75:3a:da:87:a1:d4:f5:d3:87:de:
                    05:62:a6:e3:66:74:92:cf:a5:bc:bb:df:68:ff:71:
                    75:56:41:59:35:eb:33:5a:66:51:f2:d2:a3:0a:c1:
                    8c:ce:73:5c:11:6f:2d:8c:95:8c:91:b1:fd:cf:e5:
                    ad:56:95:cc:85:92:83:90:55:41:c9:c2:77:ed:f9:
                    a3:74:42:0a:68:08:f3:d0:d1:65:fd:67:2c:34:ff:
                    24:7f:e7:79:c8:07:3b:25:57:dd:a4:0c:98:3d:be:
                    e0:cc:19:65:db:f2:54:a2:af:42:d4:9d:e2:ae:84:
                    23:25:09:33:12:b5:6a:1e:76:c4:8b:d9:49:00:6c:
                    5e:ba:1f:f2:1b:da:67:ca:27:aa:a3:44:23:1b:83:
                    82:ce:f2:ab:33:ed:54:a4:dc:c9:ab:59:65:d1:38:
                    0e:c1:3e:1b:67:8f:d6:75:01:e0:55:22:dd:76:77:
                    ec:8e:dd:f4:cf:79:22:6d:b9:57:03:f5:99:08:a7:
                    3c:3e:34:fb:c4:17:ae:23:58:cd:24:f3:23:ca:6a:
                    02:28:94:01:81:34:b4:6c:6b:ae:8b:1a:c3:a3:d2:
                    09:3c:16:54:f5:36:5f:24:e3:9f:4a:a1:e2:64:c6:
                    16:c3:a6:81:7a:24:36:47:8e:c1:5e:0e:fb:f9:15:
                    78:04:d6:0e:59:d9:9d:58:66:62:d2:94:29:32:32:
                    c8:78:b9:66:f6:b5:56:e1:6c:c6:14:4b:96:52:59:
                    91:02:24:6a:55:47:d7:3f:b6:23:1a:60:77:97:2e:
                    e2:40:af:9e:04:57:9e:ad:11:c5:c9:43:70:ef:48:
                    b4:5e:ac:1c:69:2e:2e:82:d5:5b:8b:be:82:be:19:
                    14:5e:e7:0d:22:c7:51:1b:ff:1e:9b:f1:30:8f:71:
                    31:06:b3:34:27:8f:5f:7a:66:82:4f:8a:2d:13:ab:
                    42:cf:21:56:9e:97:8e:66:36:0f:96:9b:e5:2b:f4:
                    02:a9:2a:6a:8c:2c:c4:c3:b8:70:2c:2d:29:1e:3f:
                    50:77:1e:6d:2a:54:e4:55:0a:91:38:a1:c5:b5:66:
                    a2:76:5a:ee:0f:bf:b4:67:e1:28:6e:0f:e1:36:a1:
                    82:d1:bf:d4:77:e1:c4:67:32:93:78:c8:e7:54:53:
                    fe:23:79:e6:68:cc:26:90:f6:10:63:5d:2a:6f:91:
                    2d:a4:73:32:51:21:f2:bb:15:df:aa:24:08:48:06:
                    de:a1:9e:26:bf:ba:83:bf:7c:a4:c8:a0:8c:bd:d2:
                    ff:bc:84:69:27:13:24:18:c4:45:18:23:26:5e:18:
                    14:ca:2e:88:87:62:a3:53:e6:21:b7:b8:85:7b:9a:
                    85:bb:15:26:72:f8:b9:f7:6a:74:0f:49:3f:92:be:
                    a9:05:b7:99:27:bf:bf:09:17:4b:99:4c:ad:11:10:
                    7c:df:74:31:f6:8f:26:5f:aa:88:ae:38:57:c8:55:
                    2d:d3:fb:d8:1b:51:99:be:25:1b:3a:ba:c0:7d:1b:
                    ed:ce:d2:49:b9:cf:f3:c5:7d:89:90:81:d8:69:48:
                    20:10:a3:f8:ef:92:51:18:32:8b:11:18:c0:3f:1b:
                    85:56:ce:57:c9:f2:82:64:c6:df:02:09:2e:4a:11:
                    2f:b1:27:6d:37:52:f0:f0:16:61:f1:67:8d:df:87:
                    72:af:87:da:cf:fb:50:94:6e:d4:94:85:eb:8a:2c:
                    ea:21:f5:96:4a:44:d5:e0:ce:6a:74:44:4d:d0:05:
                    d3:87:15:ed:36:d0:a4:8b:66:55:70:93:ee:47:06:
                    c1:7e:2e:a5:18:79:67:f3:28:85:f1:70:f7:0e:83:
                    a4:7e:54:9e:5a:76:32:cb:65:1b:b8:cd:fb:c8:28:
                    03:d2:54:91:d1:a7:c5:85:43:08:17:76:a5:e6:2f:
                    67:08:d8:a1:a2:82:2d:0c:f8:c1:af:63:d4:50:77:
                    6d:6b:46:4a:41:85:d5:90:5f:79:2d:c4:ec:d7:11:
                    87:40:8a:e1:68:e2:64:f8:55:32:fb:6f:93:2c:da:
                    77:d9:21:c1:17:e5:36:2c:4e:7e:90:7f:ac:94:2b:
                    32:67:be:38:50:76:b8:ae:41:b9:d7:21:c5:09:4c:
                    60:c8:a3:51:c4:34:9b:57:37:df:cb:c9:33:57:8b:
                    eb:fb:76:9f:19:4d:c5:6a:1f:2a:45:ae:2b:ed:2f:
                    8d:a7:a5:00:cb:04:fa:25:62:2e:74:48:1b:ca:2a:
                    8c:ba:db:b6:7e:f6:bb:02:7c:a9:c3:db:58:78:a1:
                    bf:f0:fe:1a:10:55:11:ce:e8:69:4e:96:65:c6:17:
                    03:d6:07:68:8c:54:82:ae:1c:22:55:3f:f1:f4:09:
                    97:28:c0:46:f7:4e:0b:25:1d:f7:07:d7:09:1d:3a:
                    18:57:38:3b:e8:33:06:e7:8f:78:46:1e:5b:f5:06:
                    b6:ec:b8:a6:0d:f1:ba:13:4b:d6:18:20:dd:69:33:
                    4a:33:15:ae:b8:c8:98:8a:27:2c:93:bc:2d:fb:ee:
                    33:bf:66:e6:4d:ba:b6:9b:06:55:60:97:4b:bc:44:
                    cd:7e:f4:a1:d8:aa:2f:c0:02:28:21:16:62:78:db:
                    08:54:f2:fc:f4:34:e3:c6:8f:1c:43:57:ce:90:1a:
                    4b:dc:2e:3b:28:91:89:3f:7a:da:35:1d:8e:2c:ee:
                    49:ec:f4:33:ad:c9:53:a8:8c:9f:04:53:3e:24:1c:
                    52:c9:12:f9:62:57:a3:bc:ee:2c:eb:40:7c:20:23:
                    70:2b:95:f9:73:17:8a:d1:c1:1c:69:a6:b7:38:9a:
                    67:f7:70:1d:7a:5a:0c:40:cf:62:0f:85:3c:c2:02:
                    4e:7e:b5:f6:c5:2a:29:84:b3:1f:37:2a:e1:aa:72:
                    42:c4:ed:6b:1a:8f:92:1c:5d:be:d1:f2:5b:f2:ab:
                    aa:a9:d2:f5:b8:a4:41:2b:2b:91:6e:12:48:ca:98:
                    d8:37:8d:c8:ed:00:30:b5:b6:04:4e:7e:9c:da:84:
                    ec:c0:fa:7b:e5:1d:88:a4:53:46:b0:94:e4:5c:1b:
                    a1:25:2c:0f:48:52:77:97:09:6c:ec:5b:18:33:83:
                    02:e5:82:7e:cd:85:21:30:11:fd:27:4f:cf:e4:1e:
                    ec:3f:a5:57:6c:e9:2a:30:19:2a:88:e5:c3:69:38:
                    ab:6f:39:71:7f:84:e1:41:c3:e1:cc:2a:89:20:52:
                    2e:83:0f:6c:39:3f:4b:2d:16:ac:2d:f0:24:ac:00:
                    73:f4:9b:b3:06:3f:05:b8:14:85:1f:ab:9e:5c:3c:
                    9e:62:9d:0e:6d:3b:80:09:fc:02:ea:a2:97:74:ca:
                    c7:f9:e3:56:e1:c3:ca:a5:a6:9a:c0:90:e0:24:12:
                    53:d2:c2:8b:da:be:ed:02:43:5e:67:e1:89:98:79:
                    ee:cb:aa:ca:c3:1b:dc:e7:a5:46:a5:7c:6b:16:87:
                    b6:5a:28:d7:db:27:3c:5e:a5:bd:b6:51:dd:1f:43:
                    cf:3b:26:c8:3a:8d:25:61:c1:49:f4:3c:1b:c9:44:
                    ea:af:1c:c2:2b:94:01:2a:0e:30:d1:5b:8b:2b:47:
                    e5:c3:d1:04:03:9b:0e:39:2c:d6:27:d4:e6:70:5a:
                    d9:75:cf:2a:d8:c9:00:05:e4:13:88:ec:c3:39:fb:
                    87:61:30:36:43:03:c8:9e:9c:a2:06:c2:2f:c5:fc:
                    f0:80:63:b1:54:04:a0:4c:a9:2e:c6:f5:76:7a:d8:
                    d0:e4:d4:94:11:e5:15:b5:78:06:dc:b8:80:8f:99:
                    a9:20:33:3d:10:85:4c:65:09:ca:3e:58:5e:60:93:
                    9a:aa:62:5d:c0:51:06:1c:5d:60:a0:0d:9c:4b:43:
                    f6:a7:16:21:a4:87:aa:f2:c1:2e:ee:92:30:b8:9e:
                    df:df:10:01:8b:86:09:70:d8:6c:a8:b7:50:1e:16:
                    96:b4:f7:67:fd:35:3a:21:90:2a:32:c7:00:7b:4d:
                    07:10:09:b9:2f:73:d8:18:7e:67:99:04:4f:06:fc:
                    50:c7:85:9b:9d:40:9d:b3:96:37:fa:a5:dc:b2:72:
                    4e:ef:4e:09:2c:fd:91:fd:4d:f7:bb:a6:a1:3e:ab:
                    7b:a2:03:40:a6:a9:55:27:e2:fa:f9:19:ce:87:75:
                    aa:f1:75:36:f3:f3:b8:91:f8:91:c3:8b:75:13:8e:
                    4c:65:9a:16:39:6a:e5:34:e8:7a:96:59:7f:35:b0:
                    00:fd:5b:69:fc:43:26:fa:f5:28:6e:fe:87:d9:7e:
                    24:fb:b4:a0:82:6e:54:a2:ff:ae:bf:62:b4:f4:72:
                    01:c2:cb:98:47:98:e1:4c:b5:17:80:80:ce:8f:a6:
                    28:ee:1e:45:6a:fb:df:f1:1d:fc:5a:3b:d6:ea:f4:
                    6c:1d:62:49:57:3b:8a:8f:86:ea:f0:53:04:ce:9c:
                    16:68:ff:ba:b9:fc:88:0f:47:f7:02:44:72:40:b8:
                    ca:3b:2d:53:9d:dc:3c:56:8c:59:7b:68:1a:2c:8d:
                    71:bb:6c:00:c7:1a:ce:6f:40:92:b1:a3:2f:0f:d9:
                    44:f2:a3:70:2e:9e:ee:0e:ae:32:d0:3b:3e:8b:07:
                    ea:e6:79:b3:5c:29:e2:7d:6b:a8:5e:f9:5a:31:e8:
                    08:96:a2:8c:03:98:46:f1:b8:7d:90:54:26:ed:76:
                    62:fe:9e:e9:9a:6e:5e:c9:49:c7:5c:34:53:29:54:
                    d9:ec:e4:46:e1:80:3b:75:d9:df:fb:79:d5:87:f1:
                    ba:9e:eb:19:ce:4c:52:73:e6:5b:87:ae:25:4f:39:
                    79:cc:c6:b8:f9:10:7b:ec:f0:9b:71:a4:05:a0:d3:
                    29:d3:4e:7f:1f:f4:2d:28:78:cc:55:95:7b:1e:91:
                    2f:cc:56:18:73:8b:b2:db:bc:69:07:e6:d0:d8:4f:
                    ed:a2:ff:58:85:a3:6d:e0:4a:53:b7:67:7d:8d:0c:
                    5c:5b:7b:77:28:02:35:44:7a:04:d3:28:43:c8:6b:
                    30:17:5d:32:b8:29:35:ba:76:da:3b:14:4a:76:18:
                    58:a4:f8:92:3c:9e:4d:33:6f:46:6b:08:d9:31:48:
                    68:dd:f4:fb:24:56:34:b2:cf:69:66:be:48:d2:8a:
                    66:22:cd:f2:69:cd:c2:53:13:45:29:41:22:d6:5d:
                    98:1f:b6:a4:b2:a3:c2:ee:02:2f:51:1b:dc:83:a4:
                    ec:70:25:a8:d4:08:61:32:6f:e4:a1:81:2e:7c:63:
                    72:fa:29:65:bc:70:44:cf:5d
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
        55:9a:34:6a:22:06:69:09:45:33:c7:ae:a9:5c:c7:09:4e:9b:
        86:bc:41:90:d4:94:52:f6:cd:23:29:94:4b:22:cd:e8:bd:fe:
        9d:cd:52:f2:bd:ed:ab:87:c9:ab:ab:46:04:b4:bd:a2:3f:22:
        30:47:50:c0:4b:8c:76:0f:03:f5:92:d2:b1:2d:c4:7a:35:9c:
        c9:73:87:eb:a6:9f:de:0f:73:8d:d3:7f:99:d8:ba:8f:6f:c4:
        f3:be:1a:ae:8b:a2:94:36:90:e2:e5:eb:8d:05:f4:fc:65:df:
        95:f1:c4:94:4d:17:56:d7:9f:3c:8f:50:3c:e7:77:bf:95:86:
        26:64:fb:6a:ff:c6:da:e9:8c:ae:42:bb:69:e5:33:c6:d8:e9:
        0d:c6:55:21:49:c1:0c:b4:a3:f9:9b:4b:5c:de:83:4f:41:03:
        ce:2a:79:68:38:7d:f0:54:49:20:f5:b6:10:ff:08:dc:33:66:
        96:9b:ff:06:de:00:9e:d7:ce:56:43:9a:51:fc:70:cd:f6:f0:
        51:a3:b7:cd:b4:5c:85:62:cd:71:b7:c6:2b:23:2b:dd:c3:6e:
        40:42:fa:37:ff:37:1c:f6:7a:57:94:87:85:23:d7:d4:c9:c7:
        5f:c1:4d:2f:c9:0d:d7:5c:ec:9c:25:ee:9e:30:82:91:96:72:
        b8:75:1d:f8:09:68:57:97:b2:2d:4b:ee:25:ec:7a:24:29:ee:
        72:d4:9c:13:db:ab:dc:03:0a:d8:4a:14:c9:08:57:44:5d:a1:
        b5:53:80:34:f2:14:97:cf:52:de:a2:0e:8a:10:e9:14:ef:d0:
        60:be:61:a1:f1:25:5d:d5:18:73:3f:93:10:ca:96:ee:b3:40:
        d2:db:a3:55:cf:57:5a:a5:0e:4f:75:47:df:ea:f7:90:9a:6d:
        f5:70:2e:1d:14:1c:37:64:04:59:50:b0:dc:72:86:6f:9c:37:
        3d:5d:28:af:73:55:ef:d2:ee:24:74:74:13:ef:dc:db:31:49:
        fb:3f:63:f5:d3:08:3e:33:a5:e7:9d:0a:de:53:2c:51:8e:67:
        db:9b:41:65:41:50:bd:d4:a4:96:6c:87:bc:12:e0:94:c7:d3:
        c0:e4:cb:73:58:00:83:e1:ac:27:85:d6:9d:53:9d:5c:bd:0a:
        3e:03:43:9c:0c:91:f5:6d:7b:f8:40:72:75:ab:11:76:91:2b:
        e1:c6:aa:1f:70:69:76:70:15:09:fe:93:d0:d6:2d:b7:15:6a:
        9b:67:5c:b4:69:9f:25:a6:7d:8a:fb:7d:22:a9:71:f2:ce:4e:
        8c:b8:21:2d:de:fe:41:71:0d:ff:9d:ec:73:a6:bb:07:4f:88:
        0e:58:47:2e:7e:a9:c2:c7:78:dd:ba:7a:9e:4e:e0:30:4e:63:
        6f:85:d4:20:41:e9:fa:fe:43:45:e7:fb:af:7a:b2:ce:a4:05:
        1d:22:9a:58:86:df:e4:ce:4c:a9:fe:d8:16:a5:6f:fb:d8:ce:
        56:7b:f5:d6:20:ef:e4:47:cd:63:24:ff:b9:be:f1:48:a3:c1:
        01:72:e6:bd:c0:ad:ed:26:0d:ca:34:9f:fc:02:2d:20:4f:05:
        20:ae:21:3d:0c:c2:20:3c:3f:f0:04:84:dc:cf:89:fd:b9:25:
        91:8e:d0:43:e6:b3:20:ab:5c:2d:d5:40:9e:a0:4b:d8:f4:b2:
        cc:7d:f1:58:0a:8e:87:ed:88:ac:36:96:e4:56:a0:11:8a:f2:
        9a:d0:b3:57:a3:34:bb:19:ab:38:e1:74:6b:22:c4:31:ce:01:
        d5:1b:36:e3:1e:38:4c:33:93:df:40:e3:59:57:4e:ac:6e:7b:
        1e:5a:3d:c5:1d:5b:ac:c8:10:82:35:02:22:b2:fc:75:e8:10:
        91:8d:c4:7d:78:93:47:9e:1c:9d:ac:6b:62:02:58:8c:d6:1c:
        23:d6:af:78:c2:80:9c:a4:aa:24:54:14:b5:14:98:c6:f8:2b:
        1a:24:cb:71:32:0a:e2:9b:0e:69:6b:dd:7e:8c:64:d1:2e:63:
        ef:0e:7f:b1:3e:88:4c:9d:55:e5:c9:6e:17:04:b7:41:ff:bd:
        8a:41:cb:25:31:6f:44:77:3f:47:b1:fc:81:88:07:8e:05:49:
        20:b7:11:d9:69:03:2a:03:9d:b9:33:84:9a:df:df:7a:e3:46:
        73:a3:d8:a2:8c:53:19:88:55:4c:74:b8:f6:44:84:2b:d1:14:
        2d:4e:39:2e:92:68:ff:69:fc:85:62:1b:eb:55:4f:ef:25:84:
        62:45:99:d6:d8:4e:6f:3f:53:08:7d:1d:06:95:81:80:7f:4f:
        4e:74:36:98:b5:e2:87:70:98:dc:d7:f5:dc:52:15:e6:c6:d6:
        79:96:39:7f:8f:95:cf:ab:80:53:ad:1b:0b:45:40:0e:d4:18:
        bd:2c:de:8a:77:76:fd:f2:44:47:c6:21:d0:e4:74:f0:d8:18:
        05:c8:7c:30:72:c7:df:f1:bb:fc:02:30:a9:f4:42:26:59:0d:
        93:05:82:a1:73:ed:34:e5:38:5d:cd:50:90:fe:94:fc:13:bc:
        bd:fc:a8:a2:88:a7:73:c4:b2:a8:d1:5d:88:c4:02:a2:7a:f1:
        04:c9:fe:8c:74:c9:ef:1d:64:41:9f:ac:1e:96:67:64:ac:ab:
        28:41:c7:9d:f7:c0:98:1b:6e:07:c2:64:7d:5a:83:66:56:28:
        36:9c:e7:fb:1c:77:0e:28:a0:c4:f7:6b:79:39:04:20:84:c7:
        57:93:bc:1b:a0:ea:bc:eb:42:e5:a8:11:fe:fc:ac:65:cc:fd:
        f8:28:88:f4:a5:9a:e5:73:51:e0:a8:9b:0d:03:77:4e:e5:e0:
        98:b3:88:da:7d:e6:c6:9e:7c:14:66:c1:2e:53:4a:92:07:37:
        a0:7e:e9:3d:09:e4:15:7c:cf:fd:b8:41:a5:ef:9e:66:9d:c4:
        5e:07:1d:87:f8:41:ad:ea:e7:2f:d2:41:63:18:37:f9:14:e3:
        4d:d0:e5:f7:43:fd:15:e3:f9:36:73:06:26:df:01:4f:a9:c3:
        4e:de:20:46:77:98:b4:7a:24:2b:3b:75:2b:4e:58:8d:9b:5d:
        a4:c7:16:a0:bc:32:88:3f:a1:83:f3:00:c8:f8:d8:58:e9:63:
        5d:4c:2b:b5:f0:72:41:d8:ab:77:37:d6:72:74:ae:b6:36:9c:
        c8:a6:83:49:4b:e0:c9:56:0b:29:be:00:30:cb:dd:d6:c8:42:
        8a:00:d9:ec:15:d1:34:71:f2:5b:64:87:f6:27:d2:b7:eb:86:
        b0:90:bf:29:db:21:9e:36:8c:e3:20:2f:95:23:51:6c:1b:c2:
        a4:d5:e6:d8:02:43:67:a0:fe:9b:50:03:44:7f:bb:e4:72:d5:
        d1:e4:da:8f:92:14:64:fb:5d:14:10:12:4a:95:06:c9:65:08:
        29:ca:21:a3:26:38:11:c9:27:df:70:67:04:fd:ca:48:32:7f:
        63:b2:45:74:31:50:4f:87:d9:20:70:d2:21:70:b1:d6:10:9d:
        33:5d:78:83:91:6d:55:82:ec:da:e4:62:63:c7:81:46:d7:19:
        65:72:2a:43:19:90:b8:d7:23:4d:4c:1c:e0:44:a9:66:67:ac:
        ee:71:79:27:26:78:6d:72:0e:f5:5d:4b:23:b5:7c:7c:65:e9:
        17:c6:3a:0b:0d:dd:5e:1e:51:c3:86:b8:ec:7f:c7:27:4a:a5:
        46:e8:6a:2d:19:c1:87:a3:cb:99:93:87:64:a2:55:14:4c:b7:
        43:a5:93:d7:e7:d2:4e:79:40:ca:65:99:46:3d:3f:7a:80:7a:
        88:6a:cc:1e:e5:6b:33:46:f4:50:c0:d5:1f:09:b8:cd:8a:2e:
        a1:27:eb:5d:73:a7:e8:6b:0a:e5:57:82:2a:b0:fc:e2:54:52:
        56:f0:ab:a9:12:c6:23:96:07:24:9c:e0:bc:46:a5:b4:20:04:
        da:09:93:63:e5:d4:2e:c2:7e:c5:31:ed:b5:15:74:86:17:b9:
        b3:f3:26:8a:1d:02:6a:da:1a:3f:e8:ba:f1:04:6d:94:51:54:
        e2:5a:b4:59:83:1d:60:d0:2d:73:cc:07:b5:26:8c:f9:d7:c6:
        88:91:ef:80:cf:5d:0f:a1:60:cb:45:d4:42:22:d1:b1:70:1d:
        fd:d0:b7:30:90:3a:c6:48:6d:67:e5:32:da:8f:db:e3:a8:e3:
        1d:20:25:a2:1c:e1:4c:b9:a4:f6:c6:3f:5c:58:0d:bb:c6:b2:
        77:01:16:91:9f:17:06:0d:b7:40:3e:cc:8f:8e:9c:4b:e0:9d:
        7e:9b:1e:05:ab:88:22:fa:d3:28:1b:57:14:64:4a:3e:24:2c:
        38:4d:21:69:00:73:2e:d0:55:2d:74:f2:15:e8:94:43:3e:40:
        2a:c6:c6:b9:6a:5b:de:a2:cc:18:50:54:5d:4e:2a:85:6c:f6:
        92:8b:29:19:7e:e7:ea:4a:e0:22:2b:25:bc:f7:66:cf:77:9a:
        41:74:f2:3c:14:0d:74:69:f5:50:83:cd:cd:2f:21:db:22:46:
        8a:d0:f7:51:1a:95:57:f2:05:8b:1a:19:ed:3b:45:e8:36:c2:
        6e:7e:fb:57:22:00:1f:06:53:a9:ae:93:c6:8f:71:2a:31:45:
        92:e7:8e:6d:e6:99:22:c0:83:fc:ef:dc:57:66:77:4f:a2:36:
        31:fb:a1:13:8d:e5:ca:a3:95:7d:01:0c:64:70:3b:53:42:68:
        80:c7:bb:9d:a8:00:35:69:98:0c:a8:67:d8:43:e5:aa:cf:95:
        e0:51:95:a4:17:3f:42:9d:b8:04:ce:d3:79:79:c8:d3:8a:16:
        32:92:e0:d7:a2:ee:d7:37:4c:2f:ac:b8:7b:be:45:f6:f1:18:
        33:9c:7b:37:a6:24:d9:bc:40:ab:00:e9:c3:37:8b:ab:d8:b6:
        f3:5e:81:4e:b0:14:6b:07:3e:1f:ec:c2:f6:44:22:95:bb:b3:
        e6:6f:d6:f9:70:65:ba:0a:83:65:aa:0e:13:2f:83:13:23:53:
        8b:40:16:fa:ce:2f:fc:4d:04:f8:eb:d8:ac:c5:36:c2:15:57:
        48:38:ec:55:b3:b4:1e:ba:ad:d2:42:06:17:0d:73:c8:57:a6:
        be:96:4d:a9:f2:c0:fb:7a:21:1c:f5:c9:70:a9:82:90:b5:f1:
        0c:d4:79:10:be:81:a6:e9:5c:61:9c:77:79:9a:a4:c3:37:26:
        57:37:c9:52:2c:fa:08:ff:d0:5f:c6:61:c0:f4:76:be:fc:de:
        4e:cf:ab:51:99:71:c7:df:7e:f4:d6:cf:06:56:19:13:53:0b:
        6d:74:59:48:19:9b:53:05:2d:9d:32:54:d3:e5:2c:53:8b:64:
        3e:d4:64:7b:e3:80:09:14:cc:fe:16:46:63:6b:71:69:f8:f9:
        cb:27:f6:88:54:bc:45:b3:ce:02:c8:94:ee:40:5b:f9:42:02:
        c2:ff:b0:d8:2c:eb:28:7f:5e:c9:26:01:99:a7


--=-j6TyjchFyxlgwii9snm9--