From nobody Mon Jul 04 02:36:35 2022 X-Original-To: freebsd-arm@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4C6508AA989 for ; Mon, 4 Jul 2022 02:36:43 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4Lbqgt1pY3z3DNB for ; Mon, 4 Jul 2022 02:36:42 +0000 (UTC) (envelope-from karl@denninger.net) Received: from denninger.net (097-081-026-048.res.spectrum.com [97.81.26.48]) by colo1.denninger.net (Postfix) with ESMTP id 70B042110B2 for ; Sun, 3 Jul 2022 22:36:36 -0400 (EDT) Received: from [192.168.10.25] (D15.Denninger.Net [192.168.10.25]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id EE4A34A7995 for ; Sun, 3 Jul 2022 22:36:35 -0400 (EDT) Message-ID: <6c377413-9430-54d2-3f92-1215055ca30a@denninger.net> Date: Sun, 3 Jul 2022 22:36:35 -0400 List-Id: Porting FreeBSD to ARM processors List-Archive: https://lists.freebsd.org/archives/freebsd-arm List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arm@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0 Subject: Re: 13.1R problems on Pi3 Content-Language: en-US To: freebsd-arm@freebsd.org References: <20220704003639.GA1165@www.zefox.net> <8820A9EC-A25E-4D0A-9F8F-52114E58B66F@yahoo.com> From: Karl Denninger In-Reply-To: <8820A9EC-A25E-4D0A-9F8F-52114E58B66F@yahoo.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms020005010202050209090704" X-Rspamd-Queue-Id: 4Lbqgt1pY3z3DNB X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=none) header.from=denninger.net; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net X-Spamd-Result: default: False [-4.84 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; FREEFALL_USER(0.00)[karl]; FROM_HAS_DN(0.00)[]; SIGNED_SMIME(-2.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arm@freebsd.org]; TO_DN_NONE(0.00)[]; HAS_ATTACHMENT(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_SPAM_SHORT(0.06)[0.060]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; MLMMJ_DEST(0.00)[freebsd-arm]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; RCVD_TLS_LAST(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[97.81.26.48:received] X-ThisMailContainsUnwantedMimeParts: N This is a cryptographically signed message in MIME format. --------------ms020005010202050209090704 Content-Type: multipart/alternative; boundary="------------wuIF7QSb2iptqHD4mYjH03Ny" --------------wuIF7QSb2iptqHD4mYjH03Ny Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 7/3/2022 22:22, Mark Millard wrote: > On 2022-Jul-3, at 17:36, bob prohaska wrote: > >> Inbound ping requests are not answered except for a few >> seconds around the time ntp runs. >> >> Inbound ssh connects prompt for a password and then time out. >> >> The ping and ssh problems can be worked around by starting an >> outbound ping process. A few seconds after doing so both ping >> and ssh are answered, erratically but usably. >> >> The problem seems to be confined to the Pi3s. Four Pi2s and a Pi4 >> on the same network branch exhibit no such problems. Only the >> pair of Pi3s seem to be affected, under 13.1 and -current. >> >> The network is started with these lines in /etc/rc.conf: >> >> hostname="www.zefox.org" >> ifconfig_ue0="inet 50.1.20.28 netmask 255.255.255.0" >> defaultrouter="50.1.20.1" >> sshd_enable="YES" > Is that only one of the RPi3*'s? Multiple machines with > that exact text would conflict with each other, all > such trying to use 50.1.20.28 andwww.zefox.org as > identification. > > Has whatever provides DHCP and such been configured to > reserve 50.1.20.28 and to associate that with the right > ethernet address? If you do not have control of such, > then, as far as I know, you should not be trying to use > what are effectively static IP addresses --unless you > have been assigned the static IP addresses by your ISP. > >> Reference to DHCP has been removed. > Why? If you use DHCP on the others, can you check the > behavior of using DHCP on these? Does it match the > others --or does end up being distinct/problematical? > > (This testing may not be able to cover the intended > use, depending on why you avoid DHCP.) > > Reminder: I'm no networking expert. >> Could that be a source >> of mischief? It seems not to cause problems on other hosts. >> >> >> That reads like you might have tried not using DHCP on >> the RPi2*'s and RPi4* . Did you? This is crossbuilt but... $ uname -v FreeBSD 13.1-STABLE #0 stable/13-n250683-e44e611e31c: Fri May  6 10:47:17 EDT 2022 karl@NewFS.denninger.net:/work/OBJ/ARM64-13/obj/work/CrossBuild-13.1STABLE/arm64.aarch64/sys/GENERIC $ uptime 10:27PM  up 49 days,  7:10, 1 user, load averages: 0.14, 0.15, 0.13 Ping both for Ipv4 and v6 (along with everything else) works fine. /etc/rc.conf: ifconfig_ue0="192.168.10.214 netmask 255.255.255.0" ifconfig_ue0_ipv6="inet6 accept_rtadv" defaultrouter="192.168.10.200" sshd_enable="YES" ipv6_activate_all_interfaces="YES" ip6addrctl_enable="YES" # Set to YES to enable default address selection ip6addrctl_verbose="NO" # Set to YES to enable verbose configuration messages ip6addrctl_policy="ipv4_prefer" # A pre-defined address selection policy                                 # (ipv4_prefer, ipv6_prefer, or AUTO) Ipv4 is fixed-address, v6 is autoconfigured off my router here. No issues and it is a Pi3; it is running a somewhat-customized Crochet build (boots from SD, runs using ram for volatile things on tmpfs, SD is mounted r/o) and a software package that is online and providing services 24x7. hw.fdt.model: Raspberry Pi 3 Model B Rev 1.2 I have "prefer v4" set due to it being dual-address and it has to register the gateway's public address, which it doesn't and can't know for IPv4 (as its dynamically assigned) thus it must send a message to a server which then can getpeername() on it to figure out where it can be reached.  Removing that doesn't change anything other than prohibiting that registration from working since it will then find said server on its v6 address instead. -- Karl Denninger karl@denninger.net /The Market Ticker/ /[S/MIME encrypted email preferred]/ --------------wuIF7QSb2iptqHD4mYjH03Ny Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit
On 7/3/2022 22:22, Mark Millard wrote: 
On 2022-Jul-3, at 17:36, bob prohaska <fbsd@www.zefox.net> wrote:


Inbound ping requests are not answered except for a few
seconds around the time ntp runs.

Inbound ssh connects prompt for a password and then time out.

The ping and ssh problems can be worked around by starting an
outbound ping process. A few seconds after doing so both ping
and ssh are answered, erratically but usably.

The problem seems to be confined to the Pi3s. Four Pi2s and a Pi4
on the same network branch exhibit no such problems. Only the
pair of Pi3s seem to be affected, under 13.1 and -current.

The network is started with these lines in /etc/rc.conf:

hostname="www.zefox.org"
ifconfig_ue0="inet 50.1.20.28 netmask 255.255.255.0"
defaultrouter="50.1.20.1"
sshd_enable="YES"

Is that only one of the RPi3*'s? Multiple machines with
that exact text would conflict with each other, all
such trying to use 50.1.20.28 and www.zefox.org as
identification.

Has whatever provides DHCP and such been configured to
reserve 50.1.20.28 and to associate that with the right
ethernet address? If you do not have control of such,
then, as far as I know, you should not be trying to use
what are effectively static IP addresses --unless you
have been assigned the static IP addresses by your ISP.


Reference to DHCP has been removed.

Why? If you use DHCP on the others, can you check the
behavior of using DHCP on these? Does it match the
others --or does end up being distinct/problematical?

(This testing may not be able to cover the intended
use, depending on why you avoid DHCP.)

Reminder: I'm no networking expert.

Could that be a source
of mischief? It seems not to cause problems on other hosts.


That reads like you might have tried not using DHCP on
the RPi2*'s and RPi4* . Did you?

This is crossbuilt but...

$ uname -v
FreeBSD 13.1-STABLE #0 stable/13-n250683-e44e611e31c: Fri May  6 10:47:17 EDT 2022     karl@NewFS.denninger.net:/work/OBJ/ARM64-13/obj/work/CrossBuild-13.1STABLE/arm64.aarch64/sys/GENERIC

$ uptime
10:27PM  up 49 days,  7:10, 1 user, load averages: 0.14, 0.15, 0.13

Ping both for Ipv4 and v6 (along with everything else) works fine.

/etc/rc.conf:

ifconfig_ue0="192.168.10.214 netmask 255.255.255.0"
ifconfig_ue0_ipv6="inet6 accept_rtadv"
defaultrouter="192.168.10.200"
sshd_enable="YES"
ipv6_activate_all_interfaces="YES"
ip6addrctl_enable="YES" # Set to YES to enable default address selection
ip6addrctl_verbose="NO" # Set to YES to enable verbose configuration messages
ip6addrctl_policy="ipv4_prefer" # A pre-defined address selection policy
                                # (ipv4_prefer, ipv6_prefer, or AUTO)

Ipv4 is fixed-address, v6 is autoconfigured off my router here.  No issues and it is a Pi3; it is running a somewhat-customized Crochet build (boots from SD, runs using ram for volatile things on tmpfs, SD is mounted r/o) and a software package that is online and providing services 24x7.

hw.fdt.model: Raspberry Pi 3 Model B Rev 1.2

I have "prefer v4" set due to it being dual-address and it has to register the gateway's public address, which it doesn't and can't know for IPv4 (as its dynamically assigned) thus it must send a message to a server which then can getpeername() on it to figure out where it can be reached.  Removing that doesn't change anything other than prohibiting that registration from working since it will then find said server on its v6 address instead.

--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]
--------------wuIF7QSb2iptqHD4mYjH03Ny-- --------------ms020005010202050209090704 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC DbowggagMIIEiKADAgECAhMA5EiKghDOXrvfxYxjITXYDdhIMA0GCSqGSIb3DQEBCwUAMIGL MQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTESMBAGA1UEBwwJTmljZXZpbGxlMRkw FwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExITAf BgNVBAMMGEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBDQTAeFw0xNzA4MTcxNjQyMTdaFw0yNzA4 MTUxNjQyMTdaMHsxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdGbG9yaWRhMRkwFwYDVQQKDBBD dWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExJTAjBgNVBAMMHEN1 ZGEgU3lzdGVtcyBMTEMgMjAxNyBJbnQgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQC1aJotNUI+W4jP7xQDO8L/b4XiF4Rss9O0B+3vMH7Njk85fZ052QhZpMVlpaaO+sCI KqG3oNEbuOHzJB/NDJFnqh7ijBwhdWutdsq23Ux6TvxgakyMPpT6TRNEJzcBVQA0kpby1DVD 0EKSK/FrWWBiFmSxg7qUfmIq/mMzgE6epHktyRM3OGq3dbRdOUgfumWrqHXOrdJz06xE9NzY vc9toqZnd79FUtE/nSZVm1VS3Grq7RKV65onvX3QOW4W1ldEHwggaZxgWGNiR/D4eosAGFxn uYeWlKEC70c99Mp1giWux+7ur6hc2E+AaTGh+fGeijO5q40OGd+dNMgK8Es0nDRw81lRcl24 SWUEky9y8DArgIFlRd6d3ZYwgc1DMTWkTavx3ZpASp5TWih6yI8ACwboTvlUYeooMsPtNa9E 6UQ1nt7VEi5syjxnDltbEFoLYcXBcqhRhFETJe9CdenItAHAtOya3w5+fmC2j/xJz29og1KH YqWHlo3Kswi9G77an+zh6nWkMuHs+03DU8DaOEWzZEav3lVD4u76bKRDTbhh0bMAk4eXriGL h4MUoX3Imfcr6JoyheVrAdHDL/BixbMH1UUspeRuqQMQ5b2T6pabXP0oOB4FqldWiDgJBGRd zWLgCYG8wPGJGYgHibl5rFiI5Ix3FQncipc6SdUzOQIDAQABo4IBCjCCAQYwHQYDVR0OBBYE FF3AXsKnjdPND5+bxVECGKtc047PMIHABgNVHSMEgbgwgbWAFBu1oRhUMNEzjODolDka5k4Q EDBioYGRpIGOMIGLMQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTESMBAGA1UEBwwJ TmljZXZpbGxlMRkwFwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5 c3RlbXMgQ0ExITAfBgNVBAMMGEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBDQYIJAKxAy1WBo2kY MBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IC AQCB5686UCBVIT52jO3sz9pKuhxuC2npi8ZvoBwt/IH9piPA15/CGF1XeXUdu2qmhOjHkVLN gO7XB1G8CuluxofOIUce0aZGyB+vZ1ylHXlMeB0R82f5dz3/T7RQso55Y2Vog2Zb7PYTC5B9 oNy3ylsnNLzanYlcW3AAfzZcbxYuAdnuq0Im3EpGm8DoItUcf1pDezugKm/yKtNtY6sDyENj tExZ377cYA3IdIwqn1Mh4OAT/Rmh8au2rZAo0+bMYBy9C11Ex0hQ8zWcvPZBDn4v4RtO8g+K uQZQcJnO09LJNtw94W3d2mj4a7XrsKMnZKvm6W9BJIQ4Nmht4wXAtPQ1xA+QpxPTmsGAU0Cv HmqVC7XC3qxFhaOrD2dsvOAK6Sn3MEpH/YrfYCX7a7cz5zW3DsJQ6o3pYfnnQz+hnwLlz4MK 17NIA0WOdAF9IbtQqarf44+PEyUbKtz1r0KGeGLs+VGdd2FLA0e7yuzxJDYcaBTVwqaHhU2/ Fna/jGU7BhrKHtJbb/XlLeFJ24yvuiYKpYWQSSyZu1R/gvZjHeGb344jGBsZdCDrdxtQQcVA 6OxsMAPSUPMrlg9LWELEEYnVulQJerWxpUecGH92O06wwmPgykkz//UmmgjVSh7ErNvL0lUY UMfunYVO/O5hwhW+P4gviCXzBFeTtDZH259O7TCCBxIwggT6oAMCAQICEgLG8yH4PQFdbd9x Ugmpzl1jXzANBgkqhkiG9w0BAQsFADB7MQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlk YTEZMBcGA1UECgwQQ3VkYSBTeXN0ZW1zIExMQzEYMBYGA1UECwwPQ3VkYSBTeXN0ZW1zIENB MSUwIwYDVQQDDBxDdWRhIFN5c3RlbXMgTExDIDIwMTcgSW50IENBMB4XDTIyMDYyOTE2MTYz NloXDTI3MDYyODE2MTYzNlowOjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEX MBUGA1UEAwwOS2FybCBEZW5uaW5nZXIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC AQC+HVSyxVtJhy3Ohs+PAGRuO//Dha9A16l5FPATr6wude9zjX5f2lrkRyU8vhCXTZW7WbvW ZKpcZ8r0dtZmiK9uF58Ec6hhvfkxJzbg96WHBw5Fumd5ahZzuCJDtCAWW8R7/KN+zwzQf1+B 3MVLmbaXAFBuKzySKhKMcHbK3/wjUYTgy+3UK6v2SBrowvkUBC+jxNg3Wy12GsTXcUS/8FYI XgVVPgfZZrbJJb5HWOQpvvhILpPCD3xsYJFNKEPltXKWHT7Qtc2HNqikgNwj8oqOb+PeZGMi WapsatKm8mxuOOGOEBhAoTVTwUHlMNTg6QUCJtuWFCK38qOCyk9Haj+86lUU8RG6FkRXWgMb NQm1mWREQhw3axgGLSntjjnznJr5vsvXSYR6c+XKLd5KQZcS6LL8FHYNjqVKHBYM+hDnrTZM qa20JLAF1YagutDiMRURU23iWS7bA9tMcXcqkclTSDtFtxahRifXRI7Epq2GSKuEXe/1Tfb5 CE8QsbCpGsfSwv2tZ/SpqVG08MdRiXxN5tmZiQWo15IyWoeKOXl/hKxA9KPuDHngXX022b1l y+5ZOZbxBAZZMod4y4b4FiRUhRI97r9lCxsP/EPHuuTIZ82BYhrhbtab8HuRo2ofne2TfAWY 2BlA7ExM8XShMd9bRPZrNTokPQPUCWCgCdIATQIDAQABo4IBzzCCAcswPAYIKwYBBQUHAQEE MDAuMCwGCCsGAQUFBzABhiBodHRwOi8vb2NzcC5jdWRhc3lzdGVtcy5uZXQ6ODg4ODAJBgNV HRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIFoDAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYI KwYBBQUHAwIGCCsGAQUFBwMEMDMGCWCGSAGG+EIBDQQmFiRPcGVuU1NMIEdlbmVyYXRlZCBD bGllbnQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFLElmNWeVgsBPe7O8NiBzjvjYnpRMIHKBgNV HSMEgcIwgb+AFF3AXsKnjdPND5+bxVECGKtc047PoYGRpIGOMIGLMQswCQYDVQQGEwJVUzEQ MA4GA1UECAwHRmxvcmlkYTESMBAGA1UEBwwJTmljZXZpbGxlMRkwFwYDVQQKDBBDdWRhIFN5 c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExITAfBgNVBAMMGEN1ZGEgU3lz dGVtcyBMTEMgMjAxNyBDQYITAORIioIQzl6738WMYyE12A3YSDAdBgNVHREEFjAUgRJrYXJs QGRlbm5pbmdlci5uZXQwDQYJKoZIhvcNAQELBQADggIBAKquc7cu0xc8FNtAQauZvocDzWQj 7HG9YvMbWnMi+ckhiA3rdW5NwWg0HBhBho1YlnqV+ntCVE2L8ezohHWm+KAdfXgpraL86Vsn 3ywNlZu/3COMpo2ALuHln8YQtH3Y8ebvzKMdlf2b5WB+7mOFIxXIr4AnNOLKCkq5ZhzC6JW6 Jvw3P0csiGa3UrfatYID5NvPgkaQvEgimEjG3psZqwQTL2Wxohvw783PrDt3wS0XeNhvQ61g 3QJFZKuv+bmGH3YBSPo1t6NUGAr+JozX5lDihB8JGkBt/NwdYec49a08uL0BbPaAJ7NjuIPG 7Y0Ak7PXZT37yx/Zla9PzLMJFgbelOkaatdzbblMZPDEVZ27l4lGMmV83Lm3YP17sdAyS/Wp mav7WmJUkQ9iuIKzSpdc82i9Mfujl1vbBtwtkHNPPtKuulIFM4ZwrPKjlVdLqTSqD8m9yHEi Y0PuAooq63OpJWF6hvMaiIPBWEAVIaDW9uG0MshLl9DnHnMyrJTfuC33Z9mOGMz7dRBjJd5Y W02xAzYnUuEBOpj+LQv5R8XIFMHFXktqEKvQrXeM2RU+PcZqKOBkTktxBLn3NI5VfA15Jk0c 5V5XcOqo3p2hvrwvXrinrb2pEREnoqmfrkXT3zOq5Y6ryRH8u734lGEF0dILXzoV4PM7XFit oTePoEjmMYIFBDCCBQACAQEwgZEwezELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0Zsb3JpZGEx GTAXBgNVBAoMEEN1ZGEgU3lzdGVtcyBMTEMxGDAWBgNVBAsMD0N1ZGEgU3lzdGVtcyBDQTEl MCMGA1UEAwwcQ3VkYSBTeXN0ZW1zIExMQyAyMDE3IEludCBDQQISAsbzIfg9AV1t33FSCanO XWNfMA0GCWCGSAFlAwQCAwUAoIICQzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqG SIb3DQEJBTEPFw0yMjA3MDQwMjM2MzVaME8GCSqGSIb3DQEJBDFCBEDdW7F9tOT2eDHFM+mI rbgjnaQf163ShMvySLMWA7jQUxuLldka3zrIpzzrodLl/YCvuL/jBFXb0z5EpnZRVdOQMGwG CSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAO BggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgw gaIGCSsGAQQBgjcQBDGBlDCBkTB7MQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTEZ MBcGA1UECgwQQ3VkYSBTeXN0ZW1zIExMQzEYMBYGA1UECwwPQ3VkYSBTeXN0ZW1zIENBMSUw IwYDVQQDDBxDdWRhIFN5c3RlbXMgTExDIDIwMTcgSW50IENBAhICxvMh+D0BXW3fcVIJqc5d Y18wgaQGCyqGSIb3DQEJEAILMYGUoIGRMHsxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdGbG9y aWRhMRkwFwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMg Q0ExJTAjBgNVBAMMHEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBJbnQgQ0ECEgLG8yH4PQFdbd9x Ugmpzl1jXzANBgkqhkiG9w0BAQEFAASCAgCPekxrobgkftDGl3jTGmxdT7hdG7zrtBksFoPN Q9Fli9Hwhzi9zEccEaivaX5JWHCmQpCQgZ60ncWTVIaYLQhPx+2IKnWz4NznKvcuuEzcEZNX TKcNHf5Y48eF4fwOJ4Tvy/QRMxtmb1/5GAkpFNCOlGUjCK+MknXZzgjOZIcHujYM4Wd/15CN +/5EDJXbu2utZGKk4ga11Gyc9q6CLt9mt/gF/2z4MmuwcPs2J8iUBu9tcMPKY1RqKlZE4thD C6T2Mq9Ax3no2x7hyjPGO5SfC7JBzxqZFDGHbGWVw4M/OuOqeFSMtmZShwAsVotwMjhhRAnE V7i376SMiWP1OyG6KmFiK61bVjl02j3UkL8MvHccyO11aK9kPPmBX0GGkcB3rJ1NhK4Cjr+w 6PNqHRWBjqo2F7eWtITTG68Jf7ZF8prWSC5Y1zQf3hJEDJVbhPQskxQNXOHcBdAHM9obl6XP lY5KEeoywXnzh/LS3p/j5HmFlH8Fr4uS1Lw3zoqOCsDB9iAroNMOAg3X0+KO4lmuBLMpppDL QjPC+BxBeRE+fo7qofRHQ5VbNswqO/VzbfDIlRg9KdGzonEKdWM3TgooJr0U//qldvdwlmeN JfuOtajZnMSLiGf3kuhLAGkPNW6eMmAZqHuBfwGTT7ZDPB3rqiyXrpLsVBUpE9PqpaS1pgAA AAAAAA== --------------ms020005010202050209090704--