From 31745d95cae878d1349b9c71c03f50685175fcb0 Mon Sep 17 00:00:00 2001 From: pero1203 Date: Sat, 5 Dec 2020 12:58:56 +0100 Subject: [PATCH] Vendor je po novem v repozitoriju --- .gitignore | 2 +- composer.lock | 123 +- vendor/autoload.php | 7 + vendor/composer/ClassLoader.php | 445 ++ vendor/composer/LICENSE | 21 + vendor/composer/autoload_classmap.php | 1031 +++ vendor/composer/autoload_files.php | 24 + vendor/composer/autoload_namespaces.php | 9 + vendor/composer/autoload_psr4.php | 38 + vendor/composer/autoload_real.php | 70 + vendor/composer/autoload_static.php | 1246 ++++ vendor/composer/ca-bundle/LICENSE | 19 + vendor/composer/ca-bundle/README.md | 85 + vendor/composer/ca-bundle/composer.json | 54 + vendor/composer/ca-bundle/res/cacert.pem | 3447 ++++++++++ vendor/composer/ca-bundle/src/CaBundle.php | 325 + vendor/composer/installed.json | 1963 ++++++ vendor/fgrosse/phpasn1/CHANGELOG.md | 47 + vendor/fgrosse/phpasn1/LICENSE | 19 + vendor/fgrosse/phpasn1/README.md | 167 + vendor/fgrosse/phpasn1/composer.json | 49 + vendor/fgrosse/phpasn1/lib/ASN1/ASNObject.php | 355 + .../phpasn1/lib/ASN1/AbstractString.php | 136 + .../fgrosse/phpasn1/lib/ASN1/AbstractTime.php | 78 + vendor/fgrosse/phpasn1/lib/ASN1/Base128.php | 63 + .../ASN1/Composite/AttributeTypeAndValue.php | 35 + .../phpasn1/lib/ASN1/Composite/RDNString.php | 37 + .../Composite/RelativeDistinguishedName.php | 50 + vendor/fgrosse/phpasn1/lib/ASN1/Construct.php | 191 + .../Exception/NotImplementedException.php | 15 + .../lib/ASN1/Exception/ParserException.php | 29 + .../lib/ASN1/ExplicitlyTaggedObject.php | 131 + .../fgrosse/phpasn1/lib/ASN1/Identifier.php | 339 + vendor/fgrosse/phpasn1/lib/ASN1/OID.php | 198 + vendor/fgrosse/phpasn1/lib/ASN1/Parsable.php | 32 + .../phpasn1/lib/ASN1/TemplateParser.php | 70 + .../phpasn1/lib/ASN1/Universal/BMPString.php | 41 + .../phpasn1/lib/ASN1/Universal/BitString.php | 88 + .../phpasn1/lib/ASN1/Universal/Boolean.php | 75 + .../lib/ASN1/Universal/CharacterString.php | 28 + .../phpasn1/lib/ASN1/Universal/Enumerated.php | 21 + .../lib/ASN1/Universal/GeneralString.php | 34 + .../lib/ASN1/Universal/GeneralizedTime.php | 134 + .../lib/ASN1/Universal/GraphicString.php | 34 + .../phpasn1/lib/ASN1/Universal/IA5String.php | 35 + .../phpasn1/lib/ASN1/Universal/Integer.php | 130 + .../phpasn1/lib/ASN1/Universal/NullObject.php | 54 + .../lib/ASN1/Universal/NumericString.php | 38 + .../lib/ASN1/Universal/ObjectDescriptor.php | 26 + .../lib/ASN1/Universal/ObjectIdentifier.php | 138 + .../lib/ASN1/Universal/OctetString.php | 91 + .../lib/ASN1/Universal/PrintableString.php | 53 + .../Universal/RelativeObjectIdentifier.php | 57 + .../phpasn1/lib/ASN1/Universal/Sequence.php | 23 + .../phpasn1/lib/ASN1/Universal/Set.php | 21 + .../phpasn1/lib/ASN1/Universal/T61String.php | 36 + .../phpasn1/lib/ASN1/Universal/UTCTime.php | 77 + .../phpasn1/lib/ASN1/Universal/UTF8String.php | 34 + .../lib/ASN1/Universal/UniversalString.php | 36 + .../lib/ASN1/Universal/VisibleString.php | 34 + .../lib/ASN1/UnknownConstructedObject.php | 59 + .../phpasn1/lib/ASN1/UnknownObject.php | 59 + .../phpasn1/lib/Utility/BigInteger.php | 195 + .../phpasn1/lib/Utility/BigIntegerBcmath.php | 133 + .../phpasn1/lib/Utility/BigIntegerGmp.php | 133 + .../phpasn1/lib/X509/AlgorithmIdentifier.php | 22 + .../phpasn1/lib/X509/CSR/Attributes.php | 68 + vendor/fgrosse/phpasn1/lib/X509/CSR/CSR.php | 137 + .../lib/X509/CertificateExtensions.php | 100 + .../phpasn1/lib/X509/CertificateSubject.php | 108 + .../fgrosse/phpasn1/lib/X509/PrivateKey.php | 35 + vendor/fgrosse/phpasn1/lib/X509/PublicKey.php | 35 + .../fgrosse/phpasn1/lib/X509/SAN/DNSName.php | 28 + .../phpasn1/lib/X509/SAN/IPAddress.php | 73 + .../lib/X509/SAN/SubjectAlternativeNames.php | 96 + vendor/geoip2/geoip2/CHANGELOG.md | 290 + vendor/geoip2/geoip2/LICENSE | 202 + vendor/geoip2/geoip2/README.md | 409 ++ vendor/geoip2/geoip2/composer.json | 31 + vendor/geoip2/geoip2/examples/benchmark.php | 25 + vendor/geoip2/geoip2/src/Database/Reader.php | 273 + .../Exception/AddressNotFoundException.php | 12 + .../src/Exception/AuthenticationException.php | 12 + .../geoip2/src/Exception/GeoIp2Exception.php | 12 + .../geoip2/src/Exception/HttpException.php | 26 + .../src/Exception/InvalidRequestException.php | 28 + .../src/Exception/OutOfQueriesException.php | 12 + .../geoip2/geoip2/src/Model/AbstractModel.php | 61 + .../geoip2/geoip2/src/Model/AnonymousIp.php | 60 + vendor/geoip2/geoip2/src/Model/Asn.php | 43 + vendor/geoip2/geoip2/src/Model/City.php | 111 + .../geoip2/src/Model/ConnectionType.php | 39 + vendor/geoip2/geoip2/src/Model/Country.php | 70 + vendor/geoip2/geoip2/src/Model/Domain.php | 39 + vendor/geoip2/geoip2/src/Model/Enterprise.php | 16 + vendor/geoip2/geoip2/src/Model/Insights.php | 16 + vendor/geoip2/geoip2/src/Model/Isp.php | 52 + .../geoip2/geoip2/src/ProviderInterface.php | 22 + .../geoip2/src/Record/AbstractPlaceRecord.php | 61 + .../geoip2/src/Record/AbstractRecord.php | 59 + vendor/geoip2/geoip2/src/Record/City.php | 31 + vendor/geoip2/geoip2/src/Record/Continent.php | 34 + vendor/geoip2/geoip2/src/Record/Country.php | 42 + vendor/geoip2/geoip2/src/Record/Location.php | 54 + vendor/geoip2/geoip2/src/Record/MaxMind.php | 21 + vendor/geoip2/geoip2/src/Record/Postal.php | 28 + .../geoip2/src/Record/RepresentedCountry.php | 28 + .../geoip2/geoip2/src/Record/Subdivision.php | 42 + vendor/geoip2/geoip2/src/Record/Traits.php | 146 + vendor/geoip2/geoip2/src/Util.php | 36 + .../geoip2/geoip2/src/WebService/Client.php | 235 + vendor/guzzlehttp/guzzle/.php_cs | 23 + vendor/guzzlehttp/guzzle/CHANGELOG.md | 1338 ++++ vendor/guzzlehttp/guzzle/Dockerfile | 18 + vendor/guzzlehttp/guzzle/LICENSE | 19 + vendor/guzzlehttp/guzzle/README.md | 90 + vendor/guzzlehttp/guzzle/UPGRADING.md | 1203 ++++ vendor/guzzlehttp/guzzle/composer.json | 59 + vendor/guzzlehttp/guzzle/src/Client.php | 501 ++ .../guzzlehttp/guzzle/src/ClientInterface.php | 87 + .../guzzle/src/Cookie/CookieJar.php | 316 + .../guzzle/src/Cookie/CookieJarInterface.php | 84 + .../guzzle/src/Cookie/FileCookieJar.php | 91 + .../guzzle/src/Cookie/SessionCookieJar.php | 72 + .../guzzle/src/Cookie/SetCookie.php | 403 ++ .../src/Exception/BadResponseException.php | 27 + .../guzzle/src/Exception/ClientException.php | 9 + .../guzzle/src/Exception/ConnectException.php | 37 + .../guzzle/src/Exception/GuzzleException.php | 23 + .../Exception/InvalidArgumentException.php | 7 + .../guzzle/src/Exception/RequestException.php | 192 + .../guzzle/src/Exception/SeekException.php | 27 + .../guzzle/src/Exception/ServerException.php | 9 + .../Exception/TooManyRedirectsException.php | 6 + .../src/Exception/TransferException.php | 6 + .../guzzle/src/Handler/CurlFactory.php | 585 ++ .../src/Handler/CurlFactoryInterface.php | 27 + .../guzzle/src/Handler/CurlHandler.php | 45 + .../guzzle/src/Handler/CurlMultiHandler.php | 219 + .../guzzle/src/Handler/EasyHandle.php | 92 + .../guzzle/src/Handler/MockHandler.php | 195 + .../guzzlehttp/guzzle/src/Handler/Proxy.php | 55 + .../guzzle/src/Handler/StreamHandler.php | 545 ++ vendor/guzzlehttp/guzzle/src/HandlerStack.php | 277 + .../guzzle/src/MessageFormatter.php | 185 + vendor/guzzlehttp/guzzle/src/Middleware.php | 254 + vendor/guzzlehttp/guzzle/src/Pool.php | 134 + .../guzzle/src/PrepareBodyMiddleware.php | 111 + .../guzzle/src/RedirectMiddleware.php | 255 + .../guzzlehttp/guzzle/src/RequestOptions.php | 263 + .../guzzlehttp/guzzle/src/RetryMiddleware.php | 128 + .../guzzlehttp/guzzle/src/TransferStats.php | 126 + vendor/guzzlehttp/guzzle/src/UriTemplate.php | 237 + vendor/guzzlehttp/guzzle/src/Utils.php | 92 + vendor/guzzlehttp/guzzle/src/functions.php | 334 + .../guzzle/src/functions_include.php | 6 + vendor/guzzlehttp/promises/.php_cs.dist | 88 + vendor/guzzlehttp/promises/CHANGELOG.md | 81 + vendor/guzzlehttp/promises/LICENSE | 19 + vendor/guzzlehttp/promises/Makefile | 13 + vendor/guzzlehttp/promises/README.md | 532 ++ vendor/guzzlehttp/promises/composer.json | 39 + .../guzzlehttp/promises/phpstan-baseline.neon | 7 + vendor/guzzlehttp/promises/phpstan.neon.dist | 10 + vendor/guzzlehttp/promises/psalm.xml | 15 + .../promises/src/AggregateException.php | 17 + .../promises/src/CancellationException.php | 10 + vendor/guzzlehttp/promises/src/Coroutine.php | 169 + vendor/guzzlehttp/promises/src/Create.php | 84 + vendor/guzzlehttp/promises/src/Each.php | 90 + .../guzzlehttp/promises/src/EachPromise.php | 253 + .../promises/src/FulfilledPromise.php | 84 + vendor/guzzlehttp/promises/src/Is.php | 46 + vendor/guzzlehttp/promises/src/Promise.php | 278 + .../promises/src/PromiseInterface.php | 97 + .../promises/src/PromisorInterface.php | 16 + .../promises/src/RejectedPromise.php | 91 + .../promises/src/RejectionException.php | 48 + vendor/guzzlehttp/promises/src/TaskQueue.php | 67 + .../promises/src/TaskQueueInterface.php | 24 + vendor/guzzlehttp/promises/src/Utils.php | 274 + vendor/guzzlehttp/promises/src/functions.php | 363 ++ .../promises/src/functions_include.php | 6 + vendor/guzzlehttp/psr7/CHANGELOG.md | 270 + vendor/guzzlehttp/psr7/LICENSE | 19 + vendor/guzzlehttp/psr7/README.md | 809 +++ vendor/guzzlehttp/psr7/composer.json | 49 + vendor/guzzlehttp/psr7/src/AppendStream.php | 244 + vendor/guzzlehttp/psr7/src/BufferStream.php | 140 + vendor/guzzlehttp/psr7/src/CachingStream.php | 139 + vendor/guzzlehttp/psr7/src/DroppingStream.php | 43 + vendor/guzzlehttp/psr7/src/FnStream.php | 160 + vendor/guzzlehttp/psr7/src/Header.php | 71 + vendor/guzzlehttp/psr7/src/InflateStream.php | 53 + vendor/guzzlehttp/psr7/src/LazyOpenStream.php | 40 + vendor/guzzlehttp/psr7/src/LimitStream.php | 156 + vendor/guzzlehttp/psr7/src/Message.php | 252 + vendor/guzzlehttp/psr7/src/MessageTrait.php | 214 + vendor/guzzlehttp/psr7/src/MimeType.php | 140 + .../guzzlehttp/psr7/src/MultipartStream.php | 154 + vendor/guzzlehttp/psr7/src/NoSeekStream.php | 23 + vendor/guzzlehttp/psr7/src/PumpStream.php | 168 + vendor/guzzlehttp/psr7/src/Query.php | 108 + vendor/guzzlehttp/psr7/src/Request.php | 152 + vendor/guzzlehttp/psr7/src/Response.php | 155 + vendor/guzzlehttp/psr7/src/Rfc7230.php | 18 + vendor/guzzlehttp/psr7/src/ServerRequest.php | 378 ++ vendor/guzzlehttp/psr7/src/Stream.php | 270 + .../psr7/src/StreamDecoratorTrait.php | 151 + vendor/guzzlehttp/psr7/src/StreamWrapper.php | 163 + vendor/guzzlehttp/psr7/src/UploadedFile.php | 325 + vendor/guzzlehttp/psr7/src/Uri.php | 761 +++ vendor/guzzlehttp/psr7/src/UriNormalizer.php | 217 + vendor/guzzlehttp/psr7/src/UriResolver.php | 220 + vendor/guzzlehttp/psr7/src/Utils.php | 398 ++ vendor/guzzlehttp/psr7/src/functions.php | 417 ++ .../guzzlehttp/psr7/src/functions_include.php | 6 + vendor/maxmind-db/reader/CHANGELOG.md | 200 + vendor/maxmind-db/reader/LICENSE | 202 + vendor/maxmind-db/reader/README.md | 178 + vendor/maxmind-db/reader/autoload.php | 47 + vendor/maxmind-db/reader/composer.json | 43 + vendor/maxmind-db/reader/ext/config.m4 | 40 + vendor/maxmind-db/reader/ext/maxminddb.c | 806 +++ vendor/maxmind-db/reader/ext/php_maxminddb.h | 24 + .../maxmind-db/reader/ext/tests/001-load.phpt | 12 + .../reader/ext/tests/002-final.phpt | 13 + .../reader/ext/tests/003-open-basedir.phpt | 12 + vendor/maxmind-db/reader/package.xml | 60 + .../reader/src/MaxMind/Db/Reader.php | 365 ++ .../reader/src/MaxMind/Db/Reader/Decoder.php | 358 + .../Db/Reader/InvalidDatabaseException.php | 14 + .../reader/src/MaxMind/Db/Reader/Metadata.php | 112 + .../reader/src/MaxMind/Db/Reader/Util.php | 31 + .../maxmind/web-service-common/CHANGELOG.md | 106 + vendor/maxmind/web-service-common/LICENSE | 202 + vendor/maxmind/web-service-common/README.md | 25 + .../maxmind/web-service-common/composer.json | 31 + .../web-service-common/dev-bin/release.sh | 60 + .../src/Exception/AuthenticationException.php | 12 + .../src/Exception/HttpException.php | 42 + .../Exception/InsufficientFundsException.php | 12 + .../src/Exception/InvalidInputException.php | 14 + .../src/Exception/InvalidRequestException.php | 39 + .../Exception/IpAddressNotFoundException.php | 9 + .../Exception/PermissionRequiredException.php | 12 + .../src/Exception/WebServiceException.php | 12 + .../src/WebService/Client.php | 490 ++ .../src/WebService/Http/CurlRequest.php | 136 + .../src/WebService/Http/Request.php | 19 + .../src/WebService/Http/RequestFactory.php | 48 + vendor/minishlink/web-push/LICENSE | 19 + vendor/minishlink/web-push/composer.json | 39 + vendor/minishlink/web-push/src/Encryption.php | 321 + .../web-push/src/MessageSentReport.php | 181 + .../minishlink/web-push/src/Notification.php | 86 + .../minishlink/web-push/src/Subscription.php | 122 + .../web-push/src/SubscriptionInterface.php | 40 + vendor/minishlink/web-push/src/Utils.php | 63 + vendor/minishlink/web-push/src/VAPID.php | 197 + vendor/minishlink/web-push/src/WebPush.php | 412 ++ vendor/paragonie/random_compat/LICENSE | 22 + vendor/paragonie/random_compat/build-phar.sh | 5 + vendor/paragonie/random_compat/composer.json | 34 + .../dist/random_compat.phar.pubkey | 5 + .../dist/random_compat.phar.pubkey.asc | 11 + vendor/paragonie/random_compat/lib/random.php | 32 + .../random_compat/other/build_phar.php | 57 + .../random_compat/psalm-autoload.php | 9 + vendor/paragonie/random_compat/psalm.xml | 19 + vendor/paragonie/sodium_compat/.gitignore | 9 + vendor/paragonie/sodium_compat/LICENSE | 21 + vendor/paragonie/sodium_compat/README.md | 347 + vendor/paragonie/sodium_compat/appveyor.yml | 27 + .../paragonie/sodium_compat/autoload-fast.php | 4 + .../sodium_compat/autoload-pedantic.php | 6 + .../paragonie/sodium_compat/autoload-php7.php | 31 + .../sodium_compat/autoload-phpunit.php | 7 + vendor/paragonie/sodium_compat/autoload.php | 65 + vendor/paragonie/sodium_compat/build-phar.sh | 8 + .../sodium_compat/composer-php52.json | 87 + vendor/paragonie/sodium_compat/composer.json | 63 + vendor/paragonie/sodium_compat/dist/Makefile | 39 + vendor/paragonie/sodium_compat/dist/box.json | 32 + .../paragonie/sodium_compat/lib/constants.php | 52 + .../sodium_compat/lib/namespaced.php | 48 + .../sodium_compat/lib/php72compat.php | 1366 ++++ .../sodium_compat/lib/php72compat_const.php | 90 + .../sodium_compat/lib/sodium_compat.php | 826 +++ .../sodium_compat/namespaced/Compat.php | 7 + .../sodium_compat/namespaced/Core/BLAKE2b.php | 7 + .../namespaced/Core/ChaCha20.php | 7 + .../namespaced/Core/ChaCha20/Ctx.php | 7 + .../namespaced/Core/ChaCha20/IetfCtx.php | 7 + .../namespaced/Core/Curve25519.php | 7 + .../namespaced/Core/Curve25519/Fe.php | 7 + .../namespaced/Core/Curve25519/Ge/Cached.php | 7 + .../namespaced/Core/Curve25519/Ge/P1p1.php | 7 + .../namespaced/Core/Curve25519/Ge/P2.php | 7 + .../namespaced/Core/Curve25519/Ge/P3.php | 7 + .../namespaced/Core/Curve25519/Ge/Precomp.php | 7 + .../namespaced/Core/Curve25519/H.php | 7 + .../sodium_compat/namespaced/Core/Ed25519.php | 7 + .../namespaced/Core/HChaCha20.php | 7 + .../namespaced/Core/HSalsa20.php | 7 + .../namespaced/Core/Poly1305.php | 7 + .../namespaced/Core/Poly1305/State.php | 7 + .../sodium_compat/namespaced/Core/Salsa20.php | 7 + .../sodium_compat/namespaced/Core/SipHash.php | 7 + .../sodium_compat/namespaced/Core/Util.php | 7 + .../sodium_compat/namespaced/Core/X25519.php | 7 + .../namespaced/Core/XChaCha20.php | 7 + .../namespaced/Core/Xsalsa20.php | 7 + .../sodium_compat/namespaced/Crypto.php | 7 + .../sodium_compat/namespaced/File.php | 7 + .../paragonie/sodium_compat/phpunit.xml.dist | 27 + .../paragonie/sodium_compat/psalm-above-3.xml | 54 + .../paragonie/sodium_compat/psalm-below-3.xml | 43 + vendor/paragonie/sodium_compat/src/Compat.php | 3560 ++++++++++ .../sodium_compat/src/Core/BLAKE2b.php | 789 +++ .../sodium_compat/src/Core/Base64/Common.php | 213 + .../src/Core/Base64/Original.php | 248 + .../sodium_compat/src/Core/Base64/UrlSafe.php | 247 + .../sodium_compat/src/Core/ChaCha20.php | 395 ++ .../sodium_compat/src/Core/ChaCha20/Ctx.php | 119 + .../src/Core/ChaCha20/IetfCtx.php | 38 + .../sodium_compat/src/Core/Curve25519.php | 3002 +++++++++ .../sodium_compat/src/Core/Curve25519/Fe.php | 123 + .../src/Core/Curve25519/Ge/Cached.php | 65 + .../src/Core/Curve25519/Ge/P1p1.php | 64 + .../src/Core/Curve25519/Ge/P2.php | 54 + .../src/Core/Curve25519/Ge/P3.php | 65 + .../src/Core/Curve25519/Ge/Precomp.php | 54 + .../sodium_compat/src/Core/Curve25519/H.php | 1467 +++++ .../src/Core/Curve25519/README.md | 3 + .../sodium_compat/src/Core/Ed25519.php | 480 ++ .../sodium_compat/src/Core/HChaCha20.php | 108 + .../sodium_compat/src/Core/HSalsa20.php | 96 + .../sodium_compat/src/Core/Poly1305.php | 63 + .../sodium_compat/src/Core/Poly1305/State.php | 445 ++ .../sodium_compat/src/Core/Salsa20.php | 273 + .../src/Core/SecretStream/State.php | 163 + .../sodium_compat/src/Core/SipHash.php | 306 + .../paragonie/sodium_compat/src/Core/Util.php | 926 +++ .../sodium_compat/src/Core/X25519.php | 327 + .../sodium_compat/src/Core/XChaCha20.php | 117 + .../sodium_compat/src/Core/XSalsa20.php | 57 + .../sodium_compat/src/Core32/BLAKE2b.php | 718 ++ .../sodium_compat/src/Core32/ChaCha20.php | 400 ++ .../sodium_compat/src/Core32/ChaCha20/Ctx.php | 126 + .../src/Core32/ChaCha20/IetfCtx.php | 39 + .../sodium_compat/src/Core32/Curve25519.php | 3196 +++++++++ .../src/Core32/Curve25519/Fe.php | 185 + .../src/Core32/Curve25519/Ge/Cached.php | 65 + .../src/Core32/Curve25519/Ge/P1p1.php | 67 + .../src/Core32/Curve25519/Ge/P2.php | 54 + .../src/Core32/Curve25519/Ge/P3.php | 65 + .../src/Core32/Curve25519/Ge/Precomp.php | 56 + .../sodium_compat/src/Core32/Curve25519/H.php | 1467 +++++ .../src/Core32/Curve25519/README.md | 3 + .../sodium_compat/src/Core32/Ed25519.php | 481 ++ .../sodium_compat/src/Core32/HChaCha20.php | 127 + .../sodium_compat/src/Core32/HSalsa20.php | 141 + .../sodium_compat/src/Core32/Int32.php | 871 +++ .../sodium_compat/src/Core32/Int64.php | 1066 +++ .../sodium_compat/src/Core32/Poly1305.php | 63 + .../src/Core32/Poly1305/State.php | 451 ++ .../sodium_compat/src/Core32/Salsa20.php | 306 + .../src/Core32/SecretStream/State.php | 163 + .../sodium_compat/src/Core32/SipHash.php | 238 + .../sodium_compat/src/Core32/Util.php | 13 + .../sodium_compat/src/Core32/X25519.php | 345 + .../sodium_compat/src/Core32/XChaCha20.php | 64 + .../sodium_compat/src/Core32/XSalsa20.php | 57 + vendor/paragonie/sodium_compat/src/Crypto.php | 1655 +++++ .../paragonie/sodium_compat/src/Crypto32.php | 1654 +++++ vendor/paragonie/sodium_compat/src/File.php | 1567 +++++ .../sodium_compat/src/PHP52/SplFixedArray.php | 189 + .../sodium_compat/src/SodiumException.php | 11 + vendor/paypal/paypal-checkout-sdk/.gitignore | 2 + vendor/paypal/paypal-checkout-sdk/LICENSE | 86 + vendor/paypal/paypal-checkout-sdk/README.md | 169 + .../paypal/paypal-checkout-sdk/composer.json | 35 + .../paypal/paypal-checkout-sdk/composer.phar | Bin 0 -> 1874955 bytes vendor/paypal/paypal-checkout-sdk/gen.yml | 6 + .../paypal/paypal-checkout-sdk/homepage.jpg | Bin 0 -> 165333 bytes vendor/paypal/paypal-checkout-sdk/init | 0 .../PayPalCheckoutSdk/Core/AccessToken.php | 25 + .../Core/AccessTokenRequest.php | 27 + .../Core/AuthorizationInjector.php | 51 + .../Core/FPTIInstrumentationInjector.php | 16 + .../PayPalCheckoutSdk/Core/GzipInjector.php | 14 + .../Core/PayPalEnvironment.php | 23 + .../Core/PayPalHttpClient.php | 27 + .../Core/ProductionEnvironment.php | 16 + .../Core/RefreshTokenRequest.php | 19 + .../Core/SandboxEnvironment.php | 16 + .../lib/PayPalCheckoutSdk/Core/UserAgent.php | 52 + .../lib/PayPalCheckoutSdk/Core/Version.php | 8 + .../Orders/OrdersAuthorizeRequest.php | 37 + .../Orders/OrdersCaptureRequest.php | 37 + .../Orders/OrdersCreateRequest.php | 31 + .../Orders/OrdersGetRequest.php | 26 + .../Orders/OrdersPatchRequest.php | 26 + .../Orders/OrdersValidateRequest.php | 29 + .../Payments/AuthorizationsCaptureRequest.php | 33 + .../Payments/AuthorizationsGetRequest.php | 25 + .../AuthorizationsReauthorizeRequest.php | 33 + .../Payments/AuthorizationsVoidRequest.php | 25 + .../Payments/CapturesGetRequest.php | 25 + .../Payments/CapturesRefundRequest.php | 33 + .../Payments/RefundsGetRequest.php | 25 + vendor/paypal/paypal-checkout-sdk/phpunit.xml | 9 + .../AuthorizeOrder.php | 61 + .../AuthorizeIntentExamples/CaptureOrder.php | 55 + .../AuthorizeIntentExamples/CreateOrder.php | 237 + .../AuthorizeIntentExamples/RunAll.php | 82 + .../CaptureIntentExamples/CaptureOrder.php | 60 + .../CaptureIntentExamples/CreateOrder.php | 178 + .../samples/CaptureIntentExamples/RunAll.php | 74 + .../samples/ErrorSample.php | 94 + .../paypal-checkout-sdk/samples/GetOrder.php | 54 + .../samples/PatchOrder.php | 82 + .../samples/PayPalClient.php | 35 + .../samples/RefundOrder.php | 60 + .../tests/Orders/OrdersAuthorizeTest.php | 26 + .../tests/Orders/OrdersCaptureTest.php | 26 + .../tests/Orders/OrdersCreateTest.php | 69 + .../tests/Orders/OrdersGetTest.php | 48 + .../tests/Orders/OrdersPatchTest.php | 73 + .../paypal-checkout-sdk/tests/TestHarness.php | 24 + vendor/paypal/paypalhttp/.gitattributes | 7 + vendor/paypal/paypalhttp/.gitignore | 32 + vendor/paypal/paypalhttp/.travis.yml | 16 + vendor/paypal/paypalhttp/CHANGELOG.md | 2 + vendor/paypal/paypalhttp/CONTRIBUTING.md | 10 + vendor/paypal/paypalhttp/LICENSE | 23 + vendor/paypal/paypalhttp/README.md | 76 + vendor/paypal/paypalhttp/Rakefile | 2 + vendor/paypal/paypalhttp/composer.json | 23 + .../paypal/paypalhttp/lib/PayPalHttp/Curl.php | 57 + .../paypalhttp/lib/PayPalHttp/Encoder.php | 114 + .../paypalhttp/lib/PayPalHttp/Environment.php | 18 + .../paypalhttp/lib/PayPalHttp/HttpClient.php | 231 + .../lib/PayPalHttp/HttpException.php | 23 + .../paypalhttp/lib/PayPalHttp/HttpRequest.php | 42 + .../lib/PayPalHttp/HttpResponse.php | 34 + .../paypalhttp/lib/PayPalHttp/IOException.php | 13 + .../paypalhttp/lib/PayPalHttp/Injector.php | 19 + .../paypalhttp/lib/PayPalHttp/Serializer.php | 29 + .../lib/PayPalHttp/Serializer/Form.php | 46 + .../lib/PayPalHttp/Serializer/FormPart.php | 25 + .../lib/PayPalHttp/Serializer/Json.php | 38 + .../lib/PayPalHttp/Serializer/Multipart.php | 134 + .../lib/PayPalHttp/Serializer/Text.php | 38 + vendor/paypal/paypalhttp/phpunit.xml | 10 + vendor/phpmailer/phpmailer/COMMITMENT | 46 + vendor/phpmailer/phpmailer/LICENSE | 502 ++ vendor/phpmailer/phpmailer/README.md | 215 + vendor/phpmailer/phpmailer/SECURITY.md | 30 + vendor/phpmailer/phpmailer/VERSION | 1 + vendor/phpmailer/phpmailer/composer.json | 61 + .../phpmailer/phpmailer/get_oauth_token.php | 146 + .../phpmailer/language/phpmailer.lang-af.php | 26 + .../phpmailer/language/phpmailer.lang-ar.php | 28 + .../phpmailer/language/phpmailer.lang-az.php | 27 + .../phpmailer/language/phpmailer.lang-ba.php | 27 + .../phpmailer/language/phpmailer.lang-be.php | 27 + .../phpmailer/language/phpmailer.lang-bg.php | 27 + .../phpmailer/language/phpmailer.lang-ca.php | 27 + .../phpmailer/language/phpmailer.lang-ch.php | 27 + .../phpmailer/language/phpmailer.lang-cs.php | 26 + .../phpmailer/language/phpmailer.lang-da.php | 29 + .../phpmailer/language/phpmailer.lang-de.php | 28 + .../phpmailer/language/phpmailer.lang-el.php | 26 + .../phpmailer/language/phpmailer.lang-eo.php | 26 + .../phpmailer/language/phpmailer.lang-es.php | 27 + .../phpmailer/language/phpmailer.lang-et.php | 28 + .../phpmailer/language/phpmailer.lang-fa.php | 28 + .../phpmailer/language/phpmailer.lang-fi.php | 28 + .../phpmailer/language/phpmailer.lang-fo.php | 27 + .../phpmailer/language/phpmailer.lang-fr.php | 32 + .../phpmailer/language/phpmailer.lang-gl.php | 27 + .../phpmailer/language/phpmailer.lang-he.php | 27 + .../phpmailer/language/phpmailer.lang-hi.php | 27 + .../phpmailer/language/phpmailer.lang-hr.php | 27 + .../phpmailer/language/phpmailer.lang-hu.php | 27 + .../phpmailer/language/phpmailer.lang-hy.php | 27 + .../phpmailer/language/phpmailer.lang-id.php | 31 + .../phpmailer/language/phpmailer.lang-it.php | 28 + .../phpmailer/language/phpmailer.lang-ja.php | 28 + .../phpmailer/language/phpmailer.lang-ka.php | 27 + .../phpmailer/language/phpmailer.lang-ko.php | 27 + .../phpmailer/language/phpmailer.lang-lt.php | 27 + .../phpmailer/language/phpmailer.lang-lv.php | 27 + .../phpmailer/language/phpmailer.lang-mg.php | 27 + .../phpmailer/language/phpmailer.lang-ms.php | 27 + .../phpmailer/language/phpmailer.lang-nb.php | 26 + .../phpmailer/language/phpmailer.lang-nl.php | 29 + .../phpmailer/language/phpmailer.lang-pl.php | 27 + .../phpmailer/language/phpmailer.lang-pt.php | 27 + .../language/phpmailer.lang-pt_br.php | 30 + .../phpmailer/language/phpmailer.lang-ro.php | 27 + .../phpmailer/language/phpmailer.lang-ru.php | 28 + .../phpmailer/language/phpmailer.lang-sk.php | 28 + .../phpmailer/language/phpmailer.lang-sl.php | 31 + .../phpmailer/language/phpmailer.lang-sr.php | 28 + .../phpmailer/language/phpmailer.lang-sv.php | 27 + .../phpmailer/language/phpmailer.lang-tl.php | 28 + .../phpmailer/language/phpmailer.lang-tr.php | 31 + .../phpmailer/language/phpmailer.lang-uk.php | 28 + .../phpmailer/language/phpmailer.lang-vi.php | 27 + .../phpmailer/language/phpmailer.lang-zh.php | 29 + .../language/phpmailer.lang-zh_cn.php | 29 + vendor/phpmailer/phpmailer/src/Exception.php | 40 + vendor/phpmailer/phpmailer/src/OAuth.php | 139 + vendor/phpmailer/phpmailer/src/PHPMailer.php | 4881 ++++++++++++++ vendor/phpmailer/phpmailer/src/POP3.php | 448 ++ vendor/phpmailer/phpmailer/src/SMTP.php | 1431 ++++ vendor/psr/http-message/CHANGELOG.md | 36 + vendor/psr/http-message/LICENSE | 19 + vendor/psr/http-message/README.md | 13 + vendor/psr/http-message/composer.json | 26 + .../psr/http-message/src/MessageInterface.php | 187 + .../psr/http-message/src/RequestInterface.php | 129 + .../http-message/src/ResponseInterface.php | 68 + .../src/ServerRequestInterface.php | 261 + .../psr/http-message/src/StreamInterface.php | 158 + .../src/UploadedFileInterface.php | 123 + vendor/psr/http-message/src/UriInterface.php | 323 + vendor/ralouphie/getallheaders/LICENSE | 21 + vendor/ralouphie/getallheaders/README.md | 27 + vendor/ralouphie/getallheaders/composer.json | 26 + .../getallheaders/src/getallheaders.php | 46 + .../google-authenticator/LICENSE | 21 + .../google-authenticator/Makefile | 60 + .../google-authenticator/composer.json | 50 + .../google-authenticator/phpunit.xml.dist | 40 + .../google-authenticator/sample/example.php | 41 + .../sample/tmpl/ask-for-otp.php | 23 + .../sample/tmpl/loggedin.php | 19 + .../sample/tmpl/login-error.php | 6 + .../sample/tmpl/login.php | 8 + .../sample/tmpl/show-qr.php | 11 + .../google-authenticator/sample/web/Users.php | 155 + .../google-authenticator/sample/web/index.php | 119 + .../src/FixedBitNotation.php | 296 + .../src/GoogleAuthenticator.php | 173 + .../src/GoogleAuthenticatorInterface.php | 44 + .../google-authenticator/src/GoogleQrUrl.php | 94 + .../src/RuntimeException.php | 46 + .../spomky-labs/base64url/.github/FUNDING.yml | 2 + vendor/spomky-labs/base64url/LICENSE | 22 + vendor/spomky-labs/base64url/composer.json | 35 + .../spomky-labs/base64url/src/Base64Url.php | 56 + .../stripe-php/.coveralls.github-actions.yml | 3 + vendor/stripe/stripe-php/.editorconfig | 20 + vendor/stripe/stripe-php/.gitignore | 31 + vendor/stripe/stripe-php/.php_cs.dist | 38 + vendor/stripe/stripe-php/CHANGELOG.md | 1311 ++++ vendor/stripe/stripe-php/CODE_OF_CONDUCT.md | 77 + vendor/stripe/stripe-php/LICENSE | 21 + vendor/stripe/stripe-php/Makefile | 36 + vendor/stripe/stripe-php/README.md | 266 + vendor/stripe/stripe-php/VERSION | 1 + vendor/stripe/stripe-php/build.php | 25 + vendor/stripe/stripe-php/composer.json | 48 + .../stripe-php/data/ca-certificates.crt | 3476 ++++++++++ vendor/stripe/stripe-php/init.php | 238 + vendor/stripe/stripe-php/lib/Account.php | 431 ++ vendor/stripe/stripe-php/lib/AccountLink.php | 26 + .../stripe/stripe-php/lib/AlipayAccount.php | 75 + .../stripe-php/lib/ApiOperations/All.php | 37 + .../stripe-php/lib/ApiOperations/Create.php | 31 + .../stripe-php/lib/ApiOperations/Delete.php | 30 + .../lib/ApiOperations/NestedResource.php | 135 + .../stripe-php/lib/ApiOperations/Request.php | 68 + .../stripe-php/lib/ApiOperations/Retrieve.php | 30 + .../stripe-php/lib/ApiOperations/Update.php | 52 + vendor/stripe/stripe-php/lib/ApiRequestor.php | 515 ++ vendor/stripe/stripe-php/lib/ApiResource.php | 120 + vendor/stripe/stripe-php/lib/ApiResponse.php | 45 + .../stripe/stripe-php/lib/ApplePayDomain.php | 31 + .../stripe/stripe-php/lib/ApplicationFee.php | 90 + .../stripe-php/lib/ApplicationFeeRefund.php | 66 + vendor/stripe/stripe-php/lib/Balance.php | 45 + .../stripe-php/lib/BalanceTransaction.php | 71 + vendor/stripe/stripe-php/lib/BankAccount.php | 132 + .../stripe-php/lib/BaseStripeClient.php | 269 + .../stripe-php/lib/BillingPortal/Session.php | 32 + .../stripe/stripe-php/lib/BitcoinReceiver.php | 71 + .../stripe-php/lib/BitcoinTransaction.php | 19 + vendor/stripe/stripe-php/lib/Capability.php | 87 + vendor/stripe/stripe-php/lib/Card.php | 142 + vendor/stripe/stripe-php/lib/Charge.php | 146 + .../stripe-php/lib/Checkout/Session.php | 88 + vendor/stripe/stripe-php/lib/Collection.php | 281 + vendor/stripe/stripe-php/lib/CountrySpec.php | 30 + vendor/stripe/stripe-php/lib/Coupon.php | 41 + vendor/stripe/stripe-php/lib/CreditNote.php | 111 + .../stripe-php/lib/CreditNoteLineItem.php | 26 + vendor/stripe/stripe-php/lib/Customer.php | 276 + .../lib/CustomerBalanceTransaction.php | 103 + vendor/stripe/stripe-php/lib/Discount.php | 18 + vendor/stripe/stripe-php/lib/Dispute.php | 82 + vendor/stripe/stripe-php/lib/EphemeralKey.php | 43 + vendor/stripe/stripe-php/lib/ErrorObject.php | 164 + vendor/stripe/stripe-php/lib/Event.php | 231 + .../lib/Exception/ApiConnectionException.php | 12 + .../lib/Exception/ApiErrorException.php | 219 + .../lib/Exception/AuthenticationException.php | 11 + .../lib/Exception/BadMethodCallException.php | 7 + .../lib/Exception/CardException.php | 84 + .../lib/Exception/ExceptionInterface.php | 22 + .../lib/Exception/IdempotencyException.php | 11 + .../Exception/InvalidArgumentException.php | 7 + .../lib/Exception/InvalidRequestException.php | 60 + .../Exception/OAuth/ExceptionInterface.php | 10 + .../OAuth/InvalidClientException.php | 12 + .../Exception/OAuth/InvalidGrantException.php | 13 + .../OAuth/InvalidRequestException.php | 11 + .../Exception/OAuth/InvalidScopeException.php | 10 + .../Exception/OAuth/OAuthErrorException.php | 19 + .../OAuth/UnknownOAuthErrorException.php | 12 + .../OAuth/UnsupportedGrantTypeException.php | 11 + .../UnsupportedResponseTypeException.php | 11 + .../lib/Exception/PermissionException.php | 11 + .../lib/Exception/RateLimitException.php | 12 + .../SignatureVerificationException.php | 74 + .../Exception/UnexpectedValueException.php | 7 + .../Exception/UnknownApiErrorException.php | 12 + vendor/stripe/stripe-php/lib/ExchangeRate.php | 30 + vendor/stripe/stripe-php/lib/File.php | 81 + vendor/stripe/stripe-php/lib/FileLink.php | 30 + .../lib/HttpClient/ClientInterface.php | 22 + .../stripe-php/lib/HttpClient/CurlClient.php | 549 ++ vendor/stripe/stripe-php/lib/Invoice.php | 259 + vendor/stripe/stripe-php/lib/InvoiceItem.php | 49 + .../stripe/stripe-php/lib/InvoiceLineItem.php | 33 + .../stripe-php/lib/Issuing/Authorization.php | 81 + vendor/stripe/stripe-php/lib/Issuing/Card.php | 59 + .../stripe-php/lib/Issuing/CardDetails.php | 19 + .../stripe-php/lib/Issuing/Cardholder.php | 39 + .../stripe/stripe-php/lib/Issuing/Dispute.php | 53 + .../stripe-php/lib/Issuing/Transaction.php | 43 + vendor/stripe/stripe-php/lib/LineItem.php | 26 + vendor/stripe/stripe-php/lib/LoginLink.php | 15 + vendor/stripe/stripe-php/lib/Mandate.php | 27 + vendor/stripe/stripe-php/lib/OAuth.php | 101 + .../stripe-php/lib/OAuthErrorObject.php | 31 + vendor/stripe/stripe-php/lib/Order.php | 81 + vendor/stripe/stripe-php/lib/OrderItem.php | 19 + vendor/stripe/stripe-php/lib/OrderReturn.php | 32 + .../stripe/stripe-php/lib/PaymentIntent.php | 125 + .../stripe/stripe-php/lib/PaymentMethod.php | 86 + vendor/stripe/stripe-php/lib/Payout.php | 108 + vendor/stripe/stripe-php/lib/Person.php | 111 + vendor/stripe/stripe-php/lib/Plan.php | 57 + vendor/stripe/stripe-php/lib/Price.php | 62 + vendor/stripe/stripe-php/lib/Product.php | 53 + .../stripe/stripe-php/lib/PromotionCode.php | 33 + .../lib/Radar/EarlyFraudWarning.php | 37 + .../stripe/stripe-php/lib/Radar/ValueList.php | 35 + .../stripe-php/lib/Radar/ValueListItem.php | 31 + vendor/stripe/stripe-php/lib/Recipient.php | 44 + .../stripe-php/lib/RecipientTransfer.php | 36 + vendor/stripe/stripe-php/lib/Refund.php | 58 + .../stripe-php/lib/Reporting/ReportRun.php | 37 + .../stripe-php/lib/Reporting/ReportType.php | 34 + .../stripe-php/lib/RequestTelemetry.php | 26 + vendor/stripe/stripe-php/lib/Review.php | 66 + vendor/stripe/stripe-php/lib/SKU.php | 44 + .../lib/Service/AbstractService.php | 79 + .../lib/Service/AbstractServiceFactory.php | 59 + .../lib/Service/AccountLinkService.php | 25 + .../stripe-php/lib/Service/AccountService.php | 381 ++ .../lib/Service/ApplePayDomainService.php | 70 + .../lib/Service/ApplicationFeeService.php | 125 + .../stripe-php/lib/Service/BalanceService.php | 26 + .../lib/Service/BalanceTransactionService.php | 47 + .../BillingPortalServiceFactory.php | 25 + .../Service/BillingPortal/SessionService.php | 23 + .../stripe-php/lib/Service/ChargeService.php | 101 + .../Checkout/CheckoutServiceFactory.php | 25 + .../lib/Service/Checkout/SessionService.php | 73 + .../lib/Service/CoreServiceFactory.php | 125 + .../lib/Service/CountrySpecService.php | 39 + .../stripe-php/lib/Service/CouponService.php | 104 + .../lib/Service/CreditNoteService.php | 156 + .../lib/Service/CustomerService.php | 353 + .../stripe-php/lib/Service/DisputeService.php | 83 + .../lib/Service/EphemeralKeyService.php | 43 + .../stripe-php/lib/Service/EventService.php | 44 + .../lib/Service/ExchangeRateService.php | 41 + .../lib/Service/FileLinkService.php | 70 + .../stripe-php/lib/Service/FileService.php | 66 + .../lib/Service/InvoiceItemService.php | 93 + .../stripe-php/lib/Service/InvoiceService.php | 272 + .../Service/Issuing/AuthorizationService.php | 97 + .../lib/Service/Issuing/CardService.php | 73 + .../lib/Service/Issuing/CardholderService.php | 74 + .../lib/Service/Issuing/DisputeService.php | 99 + .../Service/Issuing/IssuingServiceFactory.php | 33 + .../Service/Issuing/TransactionService.php | 59 + .../stripe-php/lib/Service/MandateService.php | 24 + .../stripe-php/lib/Service/OAuthService.php | 150 + .../lib/Service/OrderReturnService.php | 42 + .../stripe-php/lib/Service/OrderService.php | 109 + .../lib/Service/PaymentIntentService.php | 181 + .../lib/Service/PaymentMethodService.php | 121 + .../stripe-php/lib/Service/PayoutService.php | 127 + .../stripe-php/lib/Service/PlanService.php | 91 + .../stripe-php/lib/Service/PriceService.php | 72 + .../stripe-php/lib/Service/ProductService.php | 92 + .../lib/Service/PromotionCodeService.php | 72 + .../Radar/EarlyFraudWarningService.php | 43 + .../lib/Service/Radar/RadarServiceFactory.php | 29 + .../Service/Radar/ValueListItemService.php | 74 + .../lib/Service/Radar/ValueListService.php | 93 + .../stripe-php/lib/Service/RefundService.php | 76 + .../Service/Reporting/ReportRunService.php | 57 + .../Service/Reporting/ReportTypeService.php | 41 + .../Reporting/ReportingServiceFactory.php | 27 + .../stripe-php/lib/Service/ReviewService.php | 58 + .../lib/Service/SetupAttemptService.php | 23 + .../lib/Service/SetupIntentService.php | 127 + .../Sigma/ScheduledQueryRunService.php | 39 + .../lib/Service/Sigma/SigmaServiceFactory.php | 25 + .../stripe-php/lib/Service/SkuService.php | 95 + .../stripe-php/lib/Service/SourceService.php | 110 + .../lib/Service/SubscriptionItemService.php | 151 + .../Service/SubscriptionScheduleService.php | 113 + .../lib/Service/SubscriptionService.php | 124 + .../stripe-php/lib/Service/TaxRateService.php | 71 + .../Terminal/ConnectionTokenService.php | 25 + .../lib/Service/Terminal/LocationService.php | 87 + .../lib/Service/Terminal/ReaderService.php | 87 + .../Terminal/TerminalServiceFactory.php | 29 + .../stripe-php/lib/Service/TokenService.php | 42 + .../stripe-php/lib/Service/TopupService.php | 89 + .../lib/Service/TransferService.php | 175 + .../lib/Service/WebhookEndpointService.php | 97 + vendor/stripe/stripe-php/lib/SetupAttempt.php | 32 + vendor/stripe/stripe-php/lib/SetupIntent.php | 114 + .../lib/Sigma/ScheduledQueryRun.php | 37 + .../stripe-php/lib/SingletonApiResource.php | 38 + vendor/stripe/stripe-php/lib/Source.php | 168 + .../stripe-php/lib/SourceTransaction.php | 20 + vendor/stripe/stripe-php/lib/Stripe.php | 278 + vendor/stripe/stripe-php/lib/StripeClient.php | 77 + .../stripe-php/lib/StripeClientInterface.php | 56 + vendor/stripe/stripe-php/lib/StripeObject.php | 576 ++ vendor/stripe/stripe-php/lib/Subscription.php | 116 + .../stripe-php/lib/SubscriptionItem.php | 84 + .../stripe-php/lib/SubscriptionSchedule.php | 74 + vendor/stripe/stripe-php/lib/TaxId.php | 106 + vendor/stripe/stripe-php/lib/TaxRate.php | 38 + .../lib/Terminal/ConnectionToken.php | 23 + .../stripe-php/lib/Terminal/Location.php | 30 + .../stripe/stripe-php/lib/Terminal/Reader.php | 35 + vendor/stripe/stripe-php/lib/ThreeDSecure.php | 37 + vendor/stripe/stripe-php/lib/Token.php | 57 + vendor/stripe/stripe-php/lib/Topup.php | 63 + vendor/stripe/stripe-php/lib/Transfer.php | 130 + .../stripe-php/lib/TransferReversal.php | 79 + vendor/stripe/stripe-php/lib/UsageRecord.php | 25 + .../stripe-php/lib/UsageRecordSummary.php | 19 + .../lib/Util/CaseInsensitiveArray.php | 72 + .../stripe-php/lib/Util/DefaultLogger.php | 29 + .../stripe-php/lib/Util/LoggerInterface.php | 34 + .../stripe-php/lib/Util/ObjectTypes.php | 99 + .../stripe-php/lib/Util/RandomGenerator.php | 36 + .../stripe-php/lib/Util/RequestOptions.php | 168 + vendor/stripe/stripe-php/lib/Util/Set.php | 44 + vendor/stripe/stripe-php/lib/Util/Util.php | 265 + vendor/stripe/stripe-php/lib/Webhook.php | 42 + .../stripe/stripe-php/lib/WebhookEndpoint.php | 41 + .../stripe-php/lib/WebhookSignature.php | 140 + vendor/stripe/stripe-php/phpdoc.dist.xml | 31 + .../stripe/stripe-php/phpstan-baseline.neon | 12 + vendor/stripe/stripe-php/phpstan.neon.dist | 10 + vendor/stripe/stripe-php/update_certs.php | 19 + vendor/symfony/polyfill-intl-idn/Idn.php | 925 +++ vendor/symfony/polyfill-intl-idn/Info.php | 23 + vendor/symfony/polyfill-intl-idn/LICENSE | 19 + vendor/symfony/polyfill-intl-idn/README.md | 12 + .../Resources/unidata/DisallowedRanges.php | 375 ++ .../Resources/unidata/Regex.php | 24 + .../Resources/unidata/deviation.php | 8 + .../Resources/unidata/disallowed.php | 2638 ++++++++ .../unidata/disallowed_STD3_mapped.php | 308 + .../unidata/disallowed_STD3_valid.php | 71 + .../Resources/unidata/ignored.php | 273 + .../Resources/unidata/mapped.php | 5778 +++++++++++++++++ .../Resources/unidata/virama.php | 65 + .../symfony/polyfill-intl-idn/bootstrap.php | 141 + .../symfony/polyfill-intl-idn/composer.json | 44 + .../symfony/polyfill-intl-normalizer/LICENSE | 19 + .../polyfill-intl-normalizer/Normalizer.php | 308 + .../polyfill-intl-normalizer/README.md | 14 + .../Resources/stubs/Normalizer.php | 17 + .../unidata/canonicalComposition.php | 945 +++ .../unidata/canonicalDecomposition.php | 2065 ++++++ .../Resources/unidata/combiningClass.php | 876 +++ .../unidata/compatibilityDecomposition.php | 3695 +++++++++++ .../polyfill-intl-normalizer/bootstrap.php | 19 + .../polyfill-intl-normalizer/composer.json | 39 + vendor/symfony/polyfill-php72/LICENSE | 19 + vendor/symfony/polyfill-php72/Php72.php | 217 + vendor/symfony/polyfill-php72/README.md | 28 + vendor/symfony/polyfill-php72/bootstrap.php | 57 + vendor/symfony/polyfill-php72/composer.json | 35 + vendor/web-token/jwt-core/Algorithm.php | 29 + .../web-token/jwt-core/AlgorithmManager.php | 95 + .../jwt-core/AlgorithmManagerFactory.php | 77 + .../jwt-core/Converter/JsonConverter.php | 30 + .../jwt-core/Converter/StandardConverter.php | 50 + vendor/web-token/jwt-core/JWK.php | 148 + vendor/web-token/jwt-core/JWKSet.php | 321 + vendor/web-token/jwt-core/JWT.php | 23 + vendor/web-token/jwt-core/LICENSE | 21 + vendor/web-token/jwt-core/Util/BigInteger.php | 232 + vendor/web-token/jwt-core/Util/ECKey.php | 306 + .../web-token/jwt-core/Util/ECSignature.php | 93 + vendor/web-token/jwt-core/Util/Hash.php | 90 + .../web-token/jwt-core/Util/JsonConverter.php | 27 + vendor/web-token/jwt-core/Util/KeyChecker.php | 107 + vendor/web-token/jwt-core/Util/RSAKey.php | 322 + vendor/web-token/jwt-core/composer.json | 44 + vendor/web-token/jwt-key-mgmt/JKUFactory.php | 50 + vendor/web-token/jwt-key-mgmt/JWKFactory.php | 304 + .../KeyAnalyzer/AlgorithmAnalyzer.php | 26 + .../jwt-key-mgmt/KeyAnalyzer/KeyAnalyzer.php | 24 + .../KeyAnalyzer/KeyAnalyzerManager.php | 50 + .../KeyAnalyzer/KeyIdentifierAnalyzer.php | 26 + .../jwt-key-mgmt/KeyAnalyzer/Message.php | 96 + .../jwt-key-mgmt/KeyAnalyzer/MessageBag.php | 59 + .../jwt-key-mgmt/KeyAnalyzer/NoneAnalyzer.php | 28 + .../jwt-key-mgmt/KeyAnalyzer/OctAnalyzer.php | 50 + .../jwt-key-mgmt/KeyAnalyzer/RsaAnalyzer.php | 34 + .../KeyAnalyzer/UsageAnalyzer.php | 31 + .../jwt-key-mgmt/KeyConverter/ECKey.php | 273 + .../KeyConverter/KeyConverter.php | 256 + .../jwt-key-mgmt/KeyConverter/RSAKey.php | 244 + vendor/web-token/jwt-key-mgmt/LICENSE | 21 + .../jwt-key-mgmt/UrlKeySetFactory.php | 54 + vendor/web-token/jwt-key-mgmt/X5UFactory.php | 66 + vendor/web-token/jwt-key-mgmt/composer.json | 46 + .../jwt-signature-algorithm-ecdsa/ECDSA.php | 79 + .../jwt-signature-algorithm-ecdsa/ES256.php | 32 + .../jwt-signature-algorithm-ecdsa/ES384.php | 32 + .../jwt-signature-algorithm-ecdsa/ES512.php | 32 + .../jwt-signature-algorithm-ecdsa/LICENSE | 21 + .../composer.json | 36 + .../jwt-signature-algorithm-eddsa/EdDSA.php | 76 + .../jwt-signature-algorithm-eddsa/LICENSE | 21 + .../composer.json | 36 + .../jwt-signature-algorithm-hmac/HMAC.php | 49 + .../jwt-signature-algorithm-hmac/HS256.php | 27 + .../jwt-signature-algorithm-hmac/HS384.php | 27 + .../jwt-signature-algorithm-hmac/HS512.php | 27 + .../jwt-signature-algorithm-hmac/LICENSE | 21 + .../composer.json | 36 + .../jwt-signature-algorithm-none/LICENSE | 21 + .../jwt-signature-algorithm-none/None.php | 48 + .../composer.json | 36 + .../jwt-signature-algorithm-rsa/LICENSE | 21 + .../jwt-signature-algorithm-rsa/PS256.php | 34 + .../jwt-signature-algorithm-rsa/PS384.php | 34 + .../jwt-signature-algorithm-rsa/PS512.php | 34 + .../jwt-signature-algorithm-rsa/RS256.php | 34 + .../jwt-signature-algorithm-rsa/RS384.php | 34 + .../jwt-signature-algorithm-rsa/RS512.php | 34 + .../jwt-signature-algorithm-rsa/RSA.php | 62 + .../jwt-signature-algorithm-rsa/composer.json | 36 + .../Algorithm/SignatureAlgorithm.php | 41 + vendor/web-token/jwt-signature/JWS.php | 159 + vendor/web-token/jwt-signature/JWSBuilder.php | 213 + .../jwt-signature/JWSBuilderFactory.php | 51 + vendor/web-token/jwt-signature/JWSLoader.php | 122 + .../jwt-signature/JWSLoaderFactory.php | 62 + .../jwt-signature/JWSTokenSupport.php | 38 + .../web-token/jwt-signature/JWSVerifier.php | 160 + .../jwt-signature/JWSVerifierFactory.php | 44 + vendor/web-token/jwt-signature/LICENSE | 21 + .../Serializer/CompactSerializer.php | 97 + .../Serializer/JSONFlattenedSerializer.php | 109 + .../Serializer/JSONGeneralSerializer.php | 174 + .../Serializer/JWSSerializer.php | 42 + .../Serializer/JWSSerializerManager.php | 104 + .../JWSSerializerManagerFactory.php | 64 + .../jwt-signature/Serializer/Serializer.php | 22 + vendor/web-token/jwt-signature/Signature.php | 144 + vendor/web-token/jwt-signature/Util/RSA.php | 229 + vendor/web-token/jwt-signature/composer.json | 49 + vendor/web-token/jwt-util-ecc/Curve.php | 315 + vendor/web-token/jwt-util-ecc/LICENSE | 21 + vendor/web-token/jwt-util-ecc/Math.php | 97 + .../jwt-util-ecc/ModularArithmetic.php | 35 + vendor/web-token/jwt-util-ecc/NistCurve.php | 92 + vendor/web-token/jwt-util-ecc/Point.php | 152 + vendor/web-token/jwt-util-ecc/PrivateKey.php | 67 + vendor/web-token/jwt-util-ecc/PublicKey.php | 70 + vendor/web-token/jwt-util-ecc/composer.json | 38 + 904 files changed, 138235 insertions(+), 62 deletions(-) create mode 100644 vendor/autoload.php create mode 100644 vendor/composer/ClassLoader.php create mode 100644 vendor/composer/LICENSE create mode 100644 vendor/composer/autoload_classmap.php create mode 100644 vendor/composer/autoload_files.php create mode 100644 vendor/composer/autoload_namespaces.php create mode 100644 vendor/composer/autoload_psr4.php create mode 100644 vendor/composer/autoload_real.php create mode 100644 vendor/composer/autoload_static.php create mode 100644 vendor/composer/ca-bundle/LICENSE create mode 100644 vendor/composer/ca-bundle/README.md create mode 100644 vendor/composer/ca-bundle/composer.json create mode 100644 vendor/composer/ca-bundle/res/cacert.pem create mode 100644 vendor/composer/ca-bundle/src/CaBundle.php create mode 100644 vendor/composer/installed.json create mode 100644 vendor/fgrosse/phpasn1/CHANGELOG.md create mode 100644 vendor/fgrosse/phpasn1/LICENSE create mode 100644 vendor/fgrosse/phpasn1/README.md create mode 100644 vendor/fgrosse/phpasn1/composer.json create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/ASNObject.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/AbstractString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/AbstractTime.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Base128.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Composite/AttributeTypeAndValue.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Composite/RDNString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Composite/RelativeDistinguishedName.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Construct.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Exception/NotImplementedException.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Exception/ParserException.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/ExplicitlyTaggedObject.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Identifier.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/OID.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Parsable.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/TemplateParser.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/BMPString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/BitString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/Boolean.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/CharacterString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/Enumerated.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralizedTime.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/GraphicString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/IA5String.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/Integer.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/NullObject.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/NumericString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectDescriptor.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectIdentifier.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/OctetString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/PrintableString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/RelativeObjectIdentifier.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/Sequence.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/Set.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/T61String.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTCTime.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTF8String.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/UniversalString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/Universal/VisibleString.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/UnknownConstructedObject.php create mode 100644 vendor/fgrosse/phpasn1/lib/ASN1/UnknownObject.php create mode 100644 vendor/fgrosse/phpasn1/lib/Utility/BigInteger.php create mode 100644 vendor/fgrosse/phpasn1/lib/Utility/BigIntegerBcmath.php create mode 100644 vendor/fgrosse/phpasn1/lib/Utility/BigIntegerGmp.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/AlgorithmIdentifier.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/CSR/Attributes.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/CSR/CSR.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/CertificateExtensions.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/CertificateSubject.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/PrivateKey.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/PublicKey.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/SAN/DNSName.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/SAN/IPAddress.php create mode 100644 vendor/fgrosse/phpasn1/lib/X509/SAN/SubjectAlternativeNames.php create mode 100644 vendor/geoip2/geoip2/CHANGELOG.md create mode 100644 vendor/geoip2/geoip2/LICENSE create mode 100644 vendor/geoip2/geoip2/README.md create mode 100644 vendor/geoip2/geoip2/composer.json create mode 100644 vendor/geoip2/geoip2/examples/benchmark.php create mode 100644 vendor/geoip2/geoip2/src/Database/Reader.php create mode 100644 vendor/geoip2/geoip2/src/Exception/AddressNotFoundException.php create mode 100644 vendor/geoip2/geoip2/src/Exception/AuthenticationException.php create mode 100644 vendor/geoip2/geoip2/src/Exception/GeoIp2Exception.php create mode 100644 vendor/geoip2/geoip2/src/Exception/HttpException.php create mode 100644 vendor/geoip2/geoip2/src/Exception/InvalidRequestException.php create mode 100644 vendor/geoip2/geoip2/src/Exception/OutOfQueriesException.php create mode 100644 vendor/geoip2/geoip2/src/Model/AbstractModel.php create mode 100644 vendor/geoip2/geoip2/src/Model/AnonymousIp.php create mode 100644 vendor/geoip2/geoip2/src/Model/Asn.php create mode 100644 vendor/geoip2/geoip2/src/Model/City.php create mode 100644 vendor/geoip2/geoip2/src/Model/ConnectionType.php create mode 100644 vendor/geoip2/geoip2/src/Model/Country.php create mode 100644 vendor/geoip2/geoip2/src/Model/Domain.php create mode 100644 vendor/geoip2/geoip2/src/Model/Enterprise.php create mode 100644 vendor/geoip2/geoip2/src/Model/Insights.php create mode 100644 vendor/geoip2/geoip2/src/Model/Isp.php create mode 100644 vendor/geoip2/geoip2/src/ProviderInterface.php create mode 100644 vendor/geoip2/geoip2/src/Record/AbstractPlaceRecord.php create mode 100644 vendor/geoip2/geoip2/src/Record/AbstractRecord.php create mode 100644 vendor/geoip2/geoip2/src/Record/City.php create mode 100644 vendor/geoip2/geoip2/src/Record/Continent.php create mode 100644 vendor/geoip2/geoip2/src/Record/Country.php create mode 100644 vendor/geoip2/geoip2/src/Record/Location.php create mode 100644 vendor/geoip2/geoip2/src/Record/MaxMind.php create mode 100644 vendor/geoip2/geoip2/src/Record/Postal.php create mode 100644 vendor/geoip2/geoip2/src/Record/RepresentedCountry.php create mode 100644 vendor/geoip2/geoip2/src/Record/Subdivision.php create mode 100644 vendor/geoip2/geoip2/src/Record/Traits.php create mode 100644 vendor/geoip2/geoip2/src/Util.php create mode 100644 vendor/geoip2/geoip2/src/WebService/Client.php create mode 100644 vendor/guzzlehttp/guzzle/.php_cs create mode 100644 vendor/guzzlehttp/guzzle/CHANGELOG.md create mode 100644 vendor/guzzlehttp/guzzle/Dockerfile create mode 100644 vendor/guzzlehttp/guzzle/LICENSE create mode 100644 vendor/guzzlehttp/guzzle/README.md create mode 100644 vendor/guzzlehttp/guzzle/UPGRADING.md create mode 100644 vendor/guzzlehttp/guzzle/composer.json create mode 100644 vendor/guzzlehttp/guzzle/src/Client.php create mode 100644 vendor/guzzlehttp/guzzle/src/ClientInterface.php create mode 100644 vendor/guzzlehttp/guzzle/src/Cookie/CookieJar.php create mode 100644 vendor/guzzlehttp/guzzle/src/Cookie/CookieJarInterface.php create mode 100644 vendor/guzzlehttp/guzzle/src/Cookie/FileCookieJar.php create mode 100644 vendor/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.php create mode 100644 vendor/guzzlehttp/guzzle/src/Cookie/SetCookie.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/BadResponseException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/ClientException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/ConnectException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/GuzzleException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/InvalidArgumentException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/RequestException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/SeekException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/ServerException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/TooManyRedirectsException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Exception/TransferException.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/CurlFactory.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/CurlHandler.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/EasyHandle.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/MockHandler.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/Proxy.php create mode 100644 vendor/guzzlehttp/guzzle/src/Handler/StreamHandler.php create mode 100644 vendor/guzzlehttp/guzzle/src/HandlerStack.php create mode 100644 vendor/guzzlehttp/guzzle/src/MessageFormatter.php create mode 100644 vendor/guzzlehttp/guzzle/src/Middleware.php create mode 100644 vendor/guzzlehttp/guzzle/src/Pool.php create mode 100644 vendor/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php create mode 100644 vendor/guzzlehttp/guzzle/src/RedirectMiddleware.php create mode 100644 vendor/guzzlehttp/guzzle/src/RequestOptions.php create mode 100644 vendor/guzzlehttp/guzzle/src/RetryMiddleware.php create mode 100644 vendor/guzzlehttp/guzzle/src/TransferStats.php create mode 100644 vendor/guzzlehttp/guzzle/src/UriTemplate.php create mode 100644 vendor/guzzlehttp/guzzle/src/Utils.php create mode 100644 vendor/guzzlehttp/guzzle/src/functions.php create mode 100644 vendor/guzzlehttp/guzzle/src/functions_include.php create mode 100644 vendor/guzzlehttp/promises/.php_cs.dist create mode 100644 vendor/guzzlehttp/promises/CHANGELOG.md create mode 100644 vendor/guzzlehttp/promises/LICENSE create mode 100644 vendor/guzzlehttp/promises/Makefile create mode 100644 vendor/guzzlehttp/promises/README.md create mode 100644 vendor/guzzlehttp/promises/composer.json create mode 100644 vendor/guzzlehttp/promises/phpstan-baseline.neon create mode 100644 vendor/guzzlehttp/promises/phpstan.neon.dist create mode 100644 vendor/guzzlehttp/promises/psalm.xml create mode 100644 vendor/guzzlehttp/promises/src/AggregateException.php create mode 100644 vendor/guzzlehttp/promises/src/CancellationException.php create mode 100644 vendor/guzzlehttp/promises/src/Coroutine.php create mode 100644 vendor/guzzlehttp/promises/src/Create.php create mode 100644 vendor/guzzlehttp/promises/src/Each.php create mode 100644 vendor/guzzlehttp/promises/src/EachPromise.php create mode 100644 vendor/guzzlehttp/promises/src/FulfilledPromise.php create mode 100644 vendor/guzzlehttp/promises/src/Is.php create mode 100644 vendor/guzzlehttp/promises/src/Promise.php create mode 100644 vendor/guzzlehttp/promises/src/PromiseInterface.php create mode 100644 vendor/guzzlehttp/promises/src/PromisorInterface.php create mode 100644 vendor/guzzlehttp/promises/src/RejectedPromise.php create mode 100644 vendor/guzzlehttp/promises/src/RejectionException.php create mode 100644 vendor/guzzlehttp/promises/src/TaskQueue.php create mode 100644 vendor/guzzlehttp/promises/src/TaskQueueInterface.php create mode 100644 vendor/guzzlehttp/promises/src/Utils.php create mode 100644 vendor/guzzlehttp/promises/src/functions.php create mode 100644 vendor/guzzlehttp/promises/src/functions_include.php create mode 100644 vendor/guzzlehttp/psr7/CHANGELOG.md create mode 100644 vendor/guzzlehttp/psr7/LICENSE create mode 100644 vendor/guzzlehttp/psr7/README.md create mode 100644 vendor/guzzlehttp/psr7/composer.json create mode 100644 vendor/guzzlehttp/psr7/src/AppendStream.php create mode 100644 vendor/guzzlehttp/psr7/src/BufferStream.php create mode 100644 vendor/guzzlehttp/psr7/src/CachingStream.php create mode 100644 vendor/guzzlehttp/psr7/src/DroppingStream.php create mode 100644 vendor/guzzlehttp/psr7/src/FnStream.php create mode 100644 vendor/guzzlehttp/psr7/src/Header.php create mode 100644 vendor/guzzlehttp/psr7/src/InflateStream.php create mode 100644 vendor/guzzlehttp/psr7/src/LazyOpenStream.php create mode 100644 vendor/guzzlehttp/psr7/src/LimitStream.php create mode 100644 vendor/guzzlehttp/psr7/src/Message.php create mode 100644 vendor/guzzlehttp/psr7/src/MessageTrait.php create mode 100644 vendor/guzzlehttp/psr7/src/MimeType.php create mode 100644 vendor/guzzlehttp/psr7/src/MultipartStream.php create mode 100644 vendor/guzzlehttp/psr7/src/NoSeekStream.php create mode 100644 vendor/guzzlehttp/psr7/src/PumpStream.php create mode 100644 vendor/guzzlehttp/psr7/src/Query.php create mode 100644 vendor/guzzlehttp/psr7/src/Request.php create mode 100644 vendor/guzzlehttp/psr7/src/Response.php create mode 100644 vendor/guzzlehttp/psr7/src/Rfc7230.php create mode 100644 vendor/guzzlehttp/psr7/src/ServerRequest.php create mode 100644 vendor/guzzlehttp/psr7/src/Stream.php create mode 100644 vendor/guzzlehttp/psr7/src/StreamDecoratorTrait.php create mode 100644 vendor/guzzlehttp/psr7/src/StreamWrapper.php create mode 100644 vendor/guzzlehttp/psr7/src/UploadedFile.php create mode 100644 vendor/guzzlehttp/psr7/src/Uri.php create mode 100644 vendor/guzzlehttp/psr7/src/UriNormalizer.php create mode 100644 vendor/guzzlehttp/psr7/src/UriResolver.php create mode 100644 vendor/guzzlehttp/psr7/src/Utils.php create mode 100644 vendor/guzzlehttp/psr7/src/functions.php create mode 100644 vendor/guzzlehttp/psr7/src/functions_include.php create mode 100644 vendor/maxmind-db/reader/CHANGELOG.md create mode 100644 vendor/maxmind-db/reader/LICENSE create mode 100644 vendor/maxmind-db/reader/README.md create mode 100644 vendor/maxmind-db/reader/autoload.php create mode 100644 vendor/maxmind-db/reader/composer.json create mode 100644 vendor/maxmind-db/reader/ext/config.m4 create mode 100644 vendor/maxmind-db/reader/ext/maxminddb.c create mode 100644 vendor/maxmind-db/reader/ext/php_maxminddb.h create mode 100644 vendor/maxmind-db/reader/ext/tests/001-load.phpt create mode 100644 vendor/maxmind-db/reader/ext/tests/002-final.phpt create mode 100644 vendor/maxmind-db/reader/ext/tests/003-open-basedir.phpt create mode 100644 vendor/maxmind-db/reader/package.xml create mode 100644 vendor/maxmind-db/reader/src/MaxMind/Db/Reader.php create mode 100644 vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Decoder.php create mode 100644 vendor/maxmind-db/reader/src/MaxMind/Db/Reader/InvalidDatabaseException.php create mode 100644 vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Metadata.php create mode 100644 vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Util.php create mode 100644 vendor/maxmind/web-service-common/CHANGELOG.md create mode 100644 vendor/maxmind/web-service-common/LICENSE create mode 100644 vendor/maxmind/web-service-common/README.md create mode 100644 vendor/maxmind/web-service-common/composer.json create mode 100644 vendor/maxmind/web-service-common/dev-bin/release.sh create mode 100644 vendor/maxmind/web-service-common/src/Exception/AuthenticationException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/HttpException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/InsufficientFundsException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/InvalidInputException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/InvalidRequestException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/IpAddressNotFoundException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/PermissionRequiredException.php create mode 100644 vendor/maxmind/web-service-common/src/Exception/WebServiceException.php create mode 100644 vendor/maxmind/web-service-common/src/WebService/Client.php create mode 100644 vendor/maxmind/web-service-common/src/WebService/Http/CurlRequest.php create mode 100644 vendor/maxmind/web-service-common/src/WebService/Http/Request.php create mode 100644 vendor/maxmind/web-service-common/src/WebService/Http/RequestFactory.php create mode 100644 vendor/minishlink/web-push/LICENSE create mode 100644 vendor/minishlink/web-push/composer.json create mode 100644 vendor/minishlink/web-push/src/Encryption.php create mode 100644 vendor/minishlink/web-push/src/MessageSentReport.php create mode 100644 vendor/minishlink/web-push/src/Notification.php create mode 100644 vendor/minishlink/web-push/src/Subscription.php create mode 100644 vendor/minishlink/web-push/src/SubscriptionInterface.php create mode 100644 vendor/minishlink/web-push/src/Utils.php create mode 100644 vendor/minishlink/web-push/src/VAPID.php create mode 100644 vendor/minishlink/web-push/src/WebPush.php create mode 100644 vendor/paragonie/random_compat/LICENSE create mode 100644 vendor/paragonie/random_compat/build-phar.sh create mode 100644 vendor/paragonie/random_compat/composer.json create mode 100644 vendor/paragonie/random_compat/dist/random_compat.phar.pubkey create mode 100644 vendor/paragonie/random_compat/dist/random_compat.phar.pubkey.asc create mode 100644 vendor/paragonie/random_compat/lib/random.php create mode 100644 vendor/paragonie/random_compat/other/build_phar.php create mode 100644 vendor/paragonie/random_compat/psalm-autoload.php create mode 100644 vendor/paragonie/random_compat/psalm.xml create mode 100644 vendor/paragonie/sodium_compat/.gitignore create mode 100644 vendor/paragonie/sodium_compat/LICENSE create mode 100644 vendor/paragonie/sodium_compat/README.md create mode 100644 vendor/paragonie/sodium_compat/appveyor.yml create mode 100644 vendor/paragonie/sodium_compat/autoload-fast.php create mode 100644 vendor/paragonie/sodium_compat/autoload-pedantic.php create mode 100644 vendor/paragonie/sodium_compat/autoload-php7.php create mode 100644 vendor/paragonie/sodium_compat/autoload-phpunit.php create mode 100644 vendor/paragonie/sodium_compat/autoload.php create mode 100644 vendor/paragonie/sodium_compat/build-phar.sh create mode 100644 vendor/paragonie/sodium_compat/composer-php52.json create mode 100644 vendor/paragonie/sodium_compat/composer.json create mode 100644 vendor/paragonie/sodium_compat/dist/Makefile create mode 100644 vendor/paragonie/sodium_compat/dist/box.json create mode 100644 vendor/paragonie/sodium_compat/lib/constants.php create mode 100644 vendor/paragonie/sodium_compat/lib/namespaced.php create mode 100644 vendor/paragonie/sodium_compat/lib/php72compat.php create mode 100644 vendor/paragonie/sodium_compat/lib/php72compat_const.php create mode 100644 vendor/paragonie/sodium_compat/lib/sodium_compat.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Compat.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/BLAKE2b.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/ChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/ChaCha20/Ctx.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/ChaCha20/IetfCtx.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Fe.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Ge/Cached.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Ge/P1p1.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Ge/P2.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Ge/P3.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Ge/Precomp.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/H.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Ed25519.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/HChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/HSalsa20.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Poly1305.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Poly1305/State.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Salsa20.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/SipHash.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Util.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/X25519.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/XChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Core/Xsalsa20.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/Crypto.php create mode 100644 vendor/paragonie/sodium_compat/namespaced/File.php create mode 100644 vendor/paragonie/sodium_compat/phpunit.xml.dist create mode 100644 vendor/paragonie/sodium_compat/psalm-above-3.xml create mode 100644 vendor/paragonie/sodium_compat/psalm-below-3.xml create mode 100644 vendor/paragonie/sodium_compat/src/Compat.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/BLAKE2b.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Base64/Common.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Base64/Original.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Base64/UrlSafe.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/ChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/ChaCha20/Ctx.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/ChaCha20/IetfCtx.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/Fe.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Cached.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P1p1.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P2.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P3.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Precomp.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/H.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Curve25519/README.md create mode 100644 vendor/paragonie/sodium_compat/src/Core/Ed25519.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/HChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/HSalsa20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Poly1305.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Poly1305/State.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Salsa20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/SecretStream/State.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/SipHash.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/Util.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/X25519.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/XChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core/XSalsa20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/BLAKE2b.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/ChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/ChaCha20/Ctx.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/ChaCha20/IetfCtx.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Cached.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P1p1.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P2.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P3.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Precomp.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/H.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Curve25519/README.md create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Ed25519.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/HChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/HSalsa20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Int32.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Int64.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Poly1305.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Poly1305/State.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Salsa20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/SecretStream/State.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/SipHash.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/Util.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/X25519.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/XChaCha20.php create mode 100644 vendor/paragonie/sodium_compat/src/Core32/XSalsa20.php create mode 100644 vendor/paragonie/sodium_compat/src/Crypto.php create mode 100644 vendor/paragonie/sodium_compat/src/Crypto32.php create mode 100644 vendor/paragonie/sodium_compat/src/File.php create mode 100644 vendor/paragonie/sodium_compat/src/PHP52/SplFixedArray.php create mode 100644 vendor/paragonie/sodium_compat/src/SodiumException.php create mode 100644 vendor/paypal/paypal-checkout-sdk/.gitignore create mode 100644 vendor/paypal/paypal-checkout-sdk/LICENSE create mode 100644 vendor/paypal/paypal-checkout-sdk/README.md create mode 100644 vendor/paypal/paypal-checkout-sdk/composer.json create mode 100644 vendor/paypal/paypal-checkout-sdk/composer.phar create mode 100644 vendor/paypal/paypal-checkout-sdk/gen.yml create mode 100644 vendor/paypal/paypal-checkout-sdk/homepage.jpg create mode 100644 vendor/paypal/paypal-checkout-sdk/init create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessToken.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessTokenRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AuthorizationInjector.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/FPTIInstrumentationInjector.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/GzipInjector.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalEnvironment.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalHttpClient.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/ProductionEnvironment.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/RefreshTokenRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/SandboxEnvironment.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/UserAgent.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/Version.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersAuthorizeRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCaptureRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCreateRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersGetRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersPatchRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersValidateRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsCaptureRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsGetRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsReauthorizeRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsVoidRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesGetRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesRefundRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/RefundsGetRequest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/phpunit.xml create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/AuthorizeOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CaptureOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CreateOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/RunAll.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CaptureOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CreateOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/RunAll.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/ErrorSample.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/GetOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/PatchOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/PayPalClient.php create mode 100644 vendor/paypal/paypal-checkout-sdk/samples/RefundOrder.php create mode 100644 vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersAuthorizeTest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCaptureTest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCreateTest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersGetTest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersPatchTest.php create mode 100644 vendor/paypal/paypal-checkout-sdk/tests/TestHarness.php create mode 100644 vendor/paypal/paypalhttp/.gitattributes create mode 100644 vendor/paypal/paypalhttp/.gitignore create mode 100644 vendor/paypal/paypalhttp/.travis.yml create mode 100644 vendor/paypal/paypalhttp/CHANGELOG.md create mode 100644 vendor/paypal/paypalhttp/CONTRIBUTING.md create mode 100644 vendor/paypal/paypalhttp/LICENSE create mode 100644 vendor/paypal/paypalhttp/README.md create mode 100644 vendor/paypal/paypalhttp/Rakefile create mode 100644 vendor/paypal/paypalhttp/composer.json create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Curl.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Encoder.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Environment.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/HttpClient.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/HttpException.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/HttpRequest.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/HttpResponse.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/IOException.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Injector.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Form.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/FormPart.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Json.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Multipart.php create mode 100644 vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Text.php create mode 100644 vendor/paypal/paypalhttp/phpunit.xml create mode 100644 vendor/phpmailer/phpmailer/COMMITMENT create mode 100644 vendor/phpmailer/phpmailer/LICENSE create mode 100644 vendor/phpmailer/phpmailer/README.md create mode 100644 vendor/phpmailer/phpmailer/SECURITY.md create mode 100644 vendor/phpmailer/phpmailer/VERSION create mode 100644 vendor/phpmailer/phpmailer/composer.json create mode 100644 vendor/phpmailer/phpmailer/get_oauth_token.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-af.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ar.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-az.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ba.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-be.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-bg.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ca.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ch.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-cs.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-da.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-de.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-el.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-eo.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-es.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-et.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-fa.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-fi.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-fo.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-fr.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-gl.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-he.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-hi.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-hr.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-hu.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-hy.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-id.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-it.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ja.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ka.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ko.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-lt.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-lv.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-mg.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ms.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-nb.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-nl.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-pl.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-pt.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-pt_br.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ro.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-ru.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-sk.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-sl.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-sr.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-sv.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-tl.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-tr.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-uk.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-vi.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-zh.php create mode 100644 vendor/phpmailer/phpmailer/language/phpmailer.lang-zh_cn.php create mode 100644 vendor/phpmailer/phpmailer/src/Exception.php create mode 100644 vendor/phpmailer/phpmailer/src/OAuth.php create mode 100644 vendor/phpmailer/phpmailer/src/PHPMailer.php create mode 100644 vendor/phpmailer/phpmailer/src/POP3.php create mode 100644 vendor/phpmailer/phpmailer/src/SMTP.php create mode 100644 vendor/psr/http-message/CHANGELOG.md create mode 100644 vendor/psr/http-message/LICENSE create mode 100644 vendor/psr/http-message/README.md create mode 100644 vendor/psr/http-message/composer.json create mode 100644 vendor/psr/http-message/src/MessageInterface.php create mode 100644 vendor/psr/http-message/src/RequestInterface.php create mode 100644 vendor/psr/http-message/src/ResponseInterface.php create mode 100644 vendor/psr/http-message/src/ServerRequestInterface.php create mode 100644 vendor/psr/http-message/src/StreamInterface.php create mode 100644 vendor/psr/http-message/src/UploadedFileInterface.php create mode 100644 vendor/psr/http-message/src/UriInterface.php create mode 100644 vendor/ralouphie/getallheaders/LICENSE create mode 100644 vendor/ralouphie/getallheaders/README.md create mode 100644 vendor/ralouphie/getallheaders/composer.json create mode 100644 vendor/ralouphie/getallheaders/src/getallheaders.php create mode 100644 vendor/sonata-project/google-authenticator/LICENSE create mode 100644 vendor/sonata-project/google-authenticator/Makefile create mode 100644 vendor/sonata-project/google-authenticator/composer.json create mode 100644 vendor/sonata-project/google-authenticator/phpunit.xml.dist create mode 100644 vendor/sonata-project/google-authenticator/sample/example.php create mode 100644 vendor/sonata-project/google-authenticator/sample/tmpl/ask-for-otp.php create mode 100644 vendor/sonata-project/google-authenticator/sample/tmpl/loggedin.php create mode 100644 vendor/sonata-project/google-authenticator/sample/tmpl/login-error.php create mode 100644 vendor/sonata-project/google-authenticator/sample/tmpl/login.php create mode 100644 vendor/sonata-project/google-authenticator/sample/tmpl/show-qr.php create mode 100644 vendor/sonata-project/google-authenticator/sample/web/Users.php create mode 100644 vendor/sonata-project/google-authenticator/sample/web/index.php create mode 100644 vendor/sonata-project/google-authenticator/src/FixedBitNotation.php create mode 100644 vendor/sonata-project/google-authenticator/src/GoogleAuthenticator.php create mode 100644 vendor/sonata-project/google-authenticator/src/GoogleAuthenticatorInterface.php create mode 100644 vendor/sonata-project/google-authenticator/src/GoogleQrUrl.php create mode 100644 vendor/sonata-project/google-authenticator/src/RuntimeException.php create mode 100644 vendor/spomky-labs/base64url/.github/FUNDING.yml create mode 100644 vendor/spomky-labs/base64url/LICENSE create mode 100644 vendor/spomky-labs/base64url/composer.json create mode 100644 vendor/spomky-labs/base64url/src/Base64Url.php create mode 100644 vendor/stripe/stripe-php/.coveralls.github-actions.yml create mode 100644 vendor/stripe/stripe-php/.editorconfig create mode 100644 vendor/stripe/stripe-php/.gitignore create mode 100644 vendor/stripe/stripe-php/.php_cs.dist create mode 100644 vendor/stripe/stripe-php/CHANGELOG.md create mode 100644 vendor/stripe/stripe-php/CODE_OF_CONDUCT.md create mode 100644 vendor/stripe/stripe-php/LICENSE create mode 100644 vendor/stripe/stripe-php/Makefile create mode 100644 vendor/stripe/stripe-php/README.md create mode 100644 vendor/stripe/stripe-php/VERSION create mode 100644 vendor/stripe/stripe-php/build.php create mode 100644 vendor/stripe/stripe-php/composer.json create mode 100644 vendor/stripe/stripe-php/data/ca-certificates.crt create mode 100644 vendor/stripe/stripe-php/init.php create mode 100644 vendor/stripe/stripe-php/lib/Account.php create mode 100644 vendor/stripe/stripe-php/lib/AccountLink.php create mode 100644 vendor/stripe/stripe-php/lib/AlipayAccount.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/All.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/Create.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/Delete.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/NestedResource.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/Request.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/Retrieve.php create mode 100644 vendor/stripe/stripe-php/lib/ApiOperations/Update.php create mode 100644 vendor/stripe/stripe-php/lib/ApiRequestor.php create mode 100644 vendor/stripe/stripe-php/lib/ApiResource.php create mode 100644 vendor/stripe/stripe-php/lib/ApiResponse.php create mode 100644 vendor/stripe/stripe-php/lib/ApplePayDomain.php create mode 100644 vendor/stripe/stripe-php/lib/ApplicationFee.php create mode 100644 vendor/stripe/stripe-php/lib/ApplicationFeeRefund.php create mode 100644 vendor/stripe/stripe-php/lib/Balance.php create mode 100644 vendor/stripe/stripe-php/lib/BalanceTransaction.php create mode 100644 vendor/stripe/stripe-php/lib/BankAccount.php create mode 100644 vendor/stripe/stripe-php/lib/BaseStripeClient.php create mode 100644 vendor/stripe/stripe-php/lib/BillingPortal/Session.php create mode 100644 vendor/stripe/stripe-php/lib/BitcoinReceiver.php create mode 100644 vendor/stripe/stripe-php/lib/BitcoinTransaction.php create mode 100644 vendor/stripe/stripe-php/lib/Capability.php create mode 100644 vendor/stripe/stripe-php/lib/Card.php create mode 100644 vendor/stripe/stripe-php/lib/Charge.php create mode 100644 vendor/stripe/stripe-php/lib/Checkout/Session.php create mode 100644 vendor/stripe/stripe-php/lib/Collection.php create mode 100644 vendor/stripe/stripe-php/lib/CountrySpec.php create mode 100644 vendor/stripe/stripe-php/lib/Coupon.php create mode 100644 vendor/stripe/stripe-php/lib/CreditNote.php create mode 100644 vendor/stripe/stripe-php/lib/CreditNoteLineItem.php create mode 100644 vendor/stripe/stripe-php/lib/Customer.php create mode 100644 vendor/stripe/stripe-php/lib/CustomerBalanceTransaction.php create mode 100644 vendor/stripe/stripe-php/lib/Discount.php create mode 100644 vendor/stripe/stripe-php/lib/Dispute.php create mode 100644 vendor/stripe/stripe-php/lib/EphemeralKey.php create mode 100644 vendor/stripe/stripe-php/lib/ErrorObject.php create mode 100644 vendor/stripe/stripe-php/lib/Event.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/ApiConnectionException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/ApiErrorException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/AuthenticationException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/BadMethodCallException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/CardException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/ExceptionInterface.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/IdempotencyException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/InvalidArgumentException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/InvalidRequestException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/ExceptionInterface.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/InvalidClientException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/InvalidGrantException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/InvalidRequestException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/InvalidScopeException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/OAuthErrorException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/UnknownOAuthErrorException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/UnsupportedGrantTypeException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/OAuth/UnsupportedResponseTypeException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/PermissionException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/RateLimitException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/SignatureVerificationException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/UnexpectedValueException.php create mode 100644 vendor/stripe/stripe-php/lib/Exception/UnknownApiErrorException.php create mode 100644 vendor/stripe/stripe-php/lib/ExchangeRate.php create mode 100644 vendor/stripe/stripe-php/lib/File.php create mode 100644 vendor/stripe/stripe-php/lib/FileLink.php create mode 100644 vendor/stripe/stripe-php/lib/HttpClient/ClientInterface.php create mode 100644 vendor/stripe/stripe-php/lib/HttpClient/CurlClient.php create mode 100644 vendor/stripe/stripe-php/lib/Invoice.php create mode 100644 vendor/stripe/stripe-php/lib/InvoiceItem.php create mode 100644 vendor/stripe/stripe-php/lib/InvoiceLineItem.php create mode 100644 vendor/stripe/stripe-php/lib/Issuing/Authorization.php create mode 100644 vendor/stripe/stripe-php/lib/Issuing/Card.php create mode 100644 vendor/stripe/stripe-php/lib/Issuing/CardDetails.php create mode 100644 vendor/stripe/stripe-php/lib/Issuing/Cardholder.php create mode 100644 vendor/stripe/stripe-php/lib/Issuing/Dispute.php create mode 100644 vendor/stripe/stripe-php/lib/Issuing/Transaction.php create mode 100644 vendor/stripe/stripe-php/lib/LineItem.php create mode 100644 vendor/stripe/stripe-php/lib/LoginLink.php create mode 100644 vendor/stripe/stripe-php/lib/Mandate.php create mode 100644 vendor/stripe/stripe-php/lib/OAuth.php create mode 100644 vendor/stripe/stripe-php/lib/OAuthErrorObject.php create mode 100644 vendor/stripe/stripe-php/lib/Order.php create mode 100644 vendor/stripe/stripe-php/lib/OrderItem.php create mode 100644 vendor/stripe/stripe-php/lib/OrderReturn.php create mode 100644 vendor/stripe/stripe-php/lib/PaymentIntent.php create mode 100644 vendor/stripe/stripe-php/lib/PaymentMethod.php create mode 100644 vendor/stripe/stripe-php/lib/Payout.php create mode 100644 vendor/stripe/stripe-php/lib/Person.php create mode 100644 vendor/stripe/stripe-php/lib/Plan.php create mode 100644 vendor/stripe/stripe-php/lib/Price.php create mode 100644 vendor/stripe/stripe-php/lib/Product.php create mode 100644 vendor/stripe/stripe-php/lib/PromotionCode.php create mode 100644 vendor/stripe/stripe-php/lib/Radar/EarlyFraudWarning.php create mode 100644 vendor/stripe/stripe-php/lib/Radar/ValueList.php create mode 100644 vendor/stripe/stripe-php/lib/Radar/ValueListItem.php create mode 100644 vendor/stripe/stripe-php/lib/Recipient.php create mode 100644 vendor/stripe/stripe-php/lib/RecipientTransfer.php create mode 100644 vendor/stripe/stripe-php/lib/Refund.php create mode 100644 vendor/stripe/stripe-php/lib/Reporting/ReportRun.php create mode 100644 vendor/stripe/stripe-php/lib/Reporting/ReportType.php create mode 100644 vendor/stripe/stripe-php/lib/RequestTelemetry.php create mode 100644 vendor/stripe/stripe-php/lib/Review.php create mode 100644 vendor/stripe/stripe-php/lib/SKU.php create mode 100644 vendor/stripe/stripe-php/lib/Service/AbstractService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/AbstractServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/AccountLinkService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/AccountService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/ApplePayDomainService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/ApplicationFeeService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/BalanceService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/BalanceTransactionService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/BillingPortal/BillingPortalServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/BillingPortal/SessionService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/ChargeService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Checkout/CheckoutServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Checkout/SessionService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/CoreServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/CountrySpecService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/CouponService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/CreditNoteService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/CustomerService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/DisputeService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/EphemeralKeyService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/EventService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/ExchangeRateService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/FileLinkService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/FileService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/InvoiceItemService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/InvoiceService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Issuing/AuthorizationService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Issuing/CardService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Issuing/CardholderService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Issuing/DisputeService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Issuing/IssuingServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Issuing/TransactionService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/MandateService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/OAuthService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/OrderReturnService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/OrderService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/PaymentIntentService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/PaymentMethodService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/PayoutService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/PlanService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/PriceService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/ProductService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/PromotionCodeService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Radar/EarlyFraudWarningService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Radar/RadarServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Radar/ValueListItemService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Radar/ValueListService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/RefundService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Reporting/ReportRunService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Reporting/ReportTypeService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Reporting/ReportingServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/ReviewService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SetupAttemptService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SetupIntentService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Sigma/ScheduledQueryRunService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Sigma/SigmaServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SkuService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SourceService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SubscriptionItemService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SubscriptionScheduleService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/SubscriptionService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/TaxRateService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Terminal/LocationService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Terminal/ReaderService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/Terminal/TerminalServiceFactory.php create mode 100644 vendor/stripe/stripe-php/lib/Service/TokenService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/TopupService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/TransferService.php create mode 100644 vendor/stripe/stripe-php/lib/Service/WebhookEndpointService.php create mode 100644 vendor/stripe/stripe-php/lib/SetupAttempt.php create mode 100644 vendor/stripe/stripe-php/lib/SetupIntent.php create mode 100644 vendor/stripe/stripe-php/lib/Sigma/ScheduledQueryRun.php create mode 100644 vendor/stripe/stripe-php/lib/SingletonApiResource.php create mode 100644 vendor/stripe/stripe-php/lib/Source.php create mode 100644 vendor/stripe/stripe-php/lib/SourceTransaction.php create mode 100644 vendor/stripe/stripe-php/lib/Stripe.php create mode 100644 vendor/stripe/stripe-php/lib/StripeClient.php create mode 100644 vendor/stripe/stripe-php/lib/StripeClientInterface.php create mode 100644 vendor/stripe/stripe-php/lib/StripeObject.php create mode 100644 vendor/stripe/stripe-php/lib/Subscription.php create mode 100644 vendor/stripe/stripe-php/lib/SubscriptionItem.php create mode 100644 vendor/stripe/stripe-php/lib/SubscriptionSchedule.php create mode 100644 vendor/stripe/stripe-php/lib/TaxId.php create mode 100644 vendor/stripe/stripe-php/lib/TaxRate.php create mode 100644 vendor/stripe/stripe-php/lib/Terminal/ConnectionToken.php create mode 100644 vendor/stripe/stripe-php/lib/Terminal/Location.php create mode 100644 vendor/stripe/stripe-php/lib/Terminal/Reader.php create mode 100644 vendor/stripe/stripe-php/lib/ThreeDSecure.php create mode 100644 vendor/stripe/stripe-php/lib/Token.php create mode 100644 vendor/stripe/stripe-php/lib/Topup.php create mode 100644 vendor/stripe/stripe-php/lib/Transfer.php create mode 100644 vendor/stripe/stripe-php/lib/TransferReversal.php create mode 100644 vendor/stripe/stripe-php/lib/UsageRecord.php create mode 100644 vendor/stripe/stripe-php/lib/UsageRecordSummary.php create mode 100644 vendor/stripe/stripe-php/lib/Util/CaseInsensitiveArray.php create mode 100644 vendor/stripe/stripe-php/lib/Util/DefaultLogger.php create mode 100644 vendor/stripe/stripe-php/lib/Util/LoggerInterface.php create mode 100644 vendor/stripe/stripe-php/lib/Util/ObjectTypes.php create mode 100644 vendor/stripe/stripe-php/lib/Util/RandomGenerator.php create mode 100644 vendor/stripe/stripe-php/lib/Util/RequestOptions.php create mode 100644 vendor/stripe/stripe-php/lib/Util/Set.php create mode 100644 vendor/stripe/stripe-php/lib/Util/Util.php create mode 100644 vendor/stripe/stripe-php/lib/Webhook.php create mode 100644 vendor/stripe/stripe-php/lib/WebhookEndpoint.php create mode 100644 vendor/stripe/stripe-php/lib/WebhookSignature.php create mode 100644 vendor/stripe/stripe-php/phpdoc.dist.xml create mode 100644 vendor/stripe/stripe-php/phpstan-baseline.neon create mode 100644 vendor/stripe/stripe-php/phpstan.neon.dist create mode 100644 vendor/stripe/stripe-php/update_certs.php create mode 100644 vendor/symfony/polyfill-intl-idn/Idn.php create mode 100644 vendor/symfony/polyfill-intl-idn/Info.php create mode 100644 vendor/symfony/polyfill-intl-idn/LICENSE create mode 100644 vendor/symfony/polyfill-intl-idn/README.md create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/DisallowedRanges.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/Regex.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/deviation.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/disallowed.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/disallowed_STD3_mapped.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/disallowed_STD3_valid.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/ignored.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/mapped.php create mode 100644 vendor/symfony/polyfill-intl-idn/Resources/unidata/virama.php create mode 100644 vendor/symfony/polyfill-intl-idn/bootstrap.php create mode 100644 vendor/symfony/polyfill-intl-idn/composer.json create mode 100644 vendor/symfony/polyfill-intl-normalizer/LICENSE create mode 100644 vendor/symfony/polyfill-intl-normalizer/Normalizer.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/README.md create mode 100644 vendor/symfony/polyfill-intl-normalizer/Resources/stubs/Normalizer.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/Resources/unidata/canonicalComposition.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/Resources/unidata/canonicalDecomposition.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/Resources/unidata/combiningClass.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/Resources/unidata/compatibilityDecomposition.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/bootstrap.php create mode 100644 vendor/symfony/polyfill-intl-normalizer/composer.json create mode 100644 vendor/symfony/polyfill-php72/LICENSE create mode 100644 vendor/symfony/polyfill-php72/Php72.php create mode 100644 vendor/symfony/polyfill-php72/README.md create mode 100644 vendor/symfony/polyfill-php72/bootstrap.php create mode 100644 vendor/symfony/polyfill-php72/composer.json create mode 100644 vendor/web-token/jwt-core/Algorithm.php create mode 100644 vendor/web-token/jwt-core/AlgorithmManager.php create mode 100644 vendor/web-token/jwt-core/AlgorithmManagerFactory.php create mode 100644 vendor/web-token/jwt-core/Converter/JsonConverter.php create mode 100644 vendor/web-token/jwt-core/Converter/StandardConverter.php create mode 100644 vendor/web-token/jwt-core/JWK.php create mode 100644 vendor/web-token/jwt-core/JWKSet.php create mode 100644 vendor/web-token/jwt-core/JWT.php create mode 100644 vendor/web-token/jwt-core/LICENSE create mode 100644 vendor/web-token/jwt-core/Util/BigInteger.php create mode 100644 vendor/web-token/jwt-core/Util/ECKey.php create mode 100644 vendor/web-token/jwt-core/Util/ECSignature.php create mode 100644 vendor/web-token/jwt-core/Util/Hash.php create mode 100644 vendor/web-token/jwt-core/Util/JsonConverter.php create mode 100644 vendor/web-token/jwt-core/Util/KeyChecker.php create mode 100644 vendor/web-token/jwt-core/Util/RSAKey.php create mode 100644 vendor/web-token/jwt-core/composer.json create mode 100644 vendor/web-token/jwt-key-mgmt/JKUFactory.php create mode 100644 vendor/web-token/jwt-key-mgmt/JWKFactory.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/AlgorithmAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/KeyAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/KeyAnalyzerManager.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/KeyIdentifierAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/Message.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/MessageBag.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/NoneAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/OctAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/RsaAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyAnalyzer/UsageAnalyzer.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyConverter/ECKey.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyConverter/KeyConverter.php create mode 100644 vendor/web-token/jwt-key-mgmt/KeyConverter/RSAKey.php create mode 100644 vendor/web-token/jwt-key-mgmt/LICENSE create mode 100644 vendor/web-token/jwt-key-mgmt/UrlKeySetFactory.php create mode 100644 vendor/web-token/jwt-key-mgmt/X5UFactory.php create mode 100644 vendor/web-token/jwt-key-mgmt/composer.json create mode 100644 vendor/web-token/jwt-signature-algorithm-ecdsa/ECDSA.php create mode 100644 vendor/web-token/jwt-signature-algorithm-ecdsa/ES256.php create mode 100644 vendor/web-token/jwt-signature-algorithm-ecdsa/ES384.php create mode 100644 vendor/web-token/jwt-signature-algorithm-ecdsa/ES512.php create mode 100644 vendor/web-token/jwt-signature-algorithm-ecdsa/LICENSE create mode 100644 vendor/web-token/jwt-signature-algorithm-ecdsa/composer.json create mode 100644 vendor/web-token/jwt-signature-algorithm-eddsa/EdDSA.php create mode 100644 vendor/web-token/jwt-signature-algorithm-eddsa/LICENSE create mode 100644 vendor/web-token/jwt-signature-algorithm-eddsa/composer.json create mode 100644 vendor/web-token/jwt-signature-algorithm-hmac/HMAC.php create mode 100644 vendor/web-token/jwt-signature-algorithm-hmac/HS256.php create mode 100644 vendor/web-token/jwt-signature-algorithm-hmac/HS384.php create mode 100644 vendor/web-token/jwt-signature-algorithm-hmac/HS512.php create mode 100644 vendor/web-token/jwt-signature-algorithm-hmac/LICENSE create mode 100644 vendor/web-token/jwt-signature-algorithm-hmac/composer.json create mode 100644 vendor/web-token/jwt-signature-algorithm-none/LICENSE create mode 100644 vendor/web-token/jwt-signature-algorithm-none/None.php create mode 100644 vendor/web-token/jwt-signature-algorithm-none/composer.json create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/LICENSE create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/PS256.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/PS384.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/PS512.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/RS256.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/RS384.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/RS512.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/RSA.php create mode 100644 vendor/web-token/jwt-signature-algorithm-rsa/composer.json create mode 100644 vendor/web-token/jwt-signature/Algorithm/SignatureAlgorithm.php create mode 100644 vendor/web-token/jwt-signature/JWS.php create mode 100644 vendor/web-token/jwt-signature/JWSBuilder.php create mode 100644 vendor/web-token/jwt-signature/JWSBuilderFactory.php create mode 100644 vendor/web-token/jwt-signature/JWSLoader.php create mode 100644 vendor/web-token/jwt-signature/JWSLoaderFactory.php create mode 100644 vendor/web-token/jwt-signature/JWSTokenSupport.php create mode 100644 vendor/web-token/jwt-signature/JWSVerifier.php create mode 100644 vendor/web-token/jwt-signature/JWSVerifierFactory.php create mode 100644 vendor/web-token/jwt-signature/LICENSE create mode 100644 vendor/web-token/jwt-signature/Serializer/CompactSerializer.php create mode 100644 vendor/web-token/jwt-signature/Serializer/JSONFlattenedSerializer.php create mode 100644 vendor/web-token/jwt-signature/Serializer/JSONGeneralSerializer.php create mode 100644 vendor/web-token/jwt-signature/Serializer/JWSSerializer.php create mode 100644 vendor/web-token/jwt-signature/Serializer/JWSSerializerManager.php create mode 100644 vendor/web-token/jwt-signature/Serializer/JWSSerializerManagerFactory.php create mode 100644 vendor/web-token/jwt-signature/Serializer/Serializer.php create mode 100644 vendor/web-token/jwt-signature/Signature.php create mode 100644 vendor/web-token/jwt-signature/Util/RSA.php create mode 100644 vendor/web-token/jwt-signature/composer.json create mode 100644 vendor/web-token/jwt-util-ecc/Curve.php create mode 100644 vendor/web-token/jwt-util-ecc/LICENSE create mode 100644 vendor/web-token/jwt-util-ecc/Math.php create mode 100644 vendor/web-token/jwt-util-ecc/ModularArithmetic.php create mode 100644 vendor/web-token/jwt-util-ecc/NistCurve.php create mode 100644 vendor/web-token/jwt-util-ecc/Point.php create mode 100644 vendor/web-token/jwt-util-ecc/PrivateKey.php create mode 100644 vendor/web-token/jwt-util-ecc/PublicKey.php create mode 100644 vendor/web-token/jwt-util-ecc/composer.json diff --git a/.gitignore b/.gitignore index 3f7a4162f..b69fb7aa5 100644 --- a/.gitignore +++ b/.gitignore @@ -1,5 +1,5 @@ # Vendor folder -/vendor/ +#vendor/ # DEV tools .vscode/ diff --git a/composer.lock b/composer.lock index 0f35bb0c7..f792825e9 100644 --- a/composer.lock +++ b/composer.lock @@ -1,10 +1,9 @@ { "_readme": [ "This file locks the dependencies of your project to a known state", - "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file", + "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies", "This file is @generated automatically" ], - "hash": "c9fc655cdb58743c38114c03e68c1cc7", "content-hash": "a150435d7f20bef4fdda8cb6c59eb1a6", "packages": [ { @@ -61,7 +60,7 @@ "ssl", "tls" ], - "time": "2020-08-23 12:54:47" + "time": "2020-08-23T12:54:47+00:00" }, { "name": "fgrosse/phpasn1", @@ -132,7 +131,7 @@ "x509", "x690" ], - "time": "2020-10-11 16:28:18" + "time": "2020-10-11T16:28:18+00:00" }, { "name": "geoip2/geoip2", @@ -185,7 +184,7 @@ "geolocation", "maxmind" ], - "time": "2020-10-01 18:48:34" + "time": "2020-10-01T18:48:34+00:00" }, { "name": "guzzlehttp/guzzle", @@ -252,7 +251,7 @@ "rest", "web service" ], - "time": "2020-06-16 21:01:06" + "time": "2020-06-16T21:01:06+00:00" }, { "name": "guzzlehttp/promises", @@ -303,7 +302,7 @@ "keywords": [ "promise" ], - "time": "2020-09-30 07:37:28" + "time": "2020-09-30T07:37:28+00:00" }, { "name": "guzzlehttp/psr7", @@ -374,7 +373,7 @@ "uri", "url" ], - "time": "2020-09-30 07:37:11" + "time": "2020-09-30T07:37:11+00:00" }, { "name": "maxmind-db/reader", @@ -434,7 +433,7 @@ "geolocation", "maxmind" ], - "time": "2020-10-01 17:30:21" + "time": "2020-10-01T17:30:21+00:00" }, { "name": "maxmind/web-service-common", @@ -480,7 +479,7 @@ ], "description": "Internal MaxMind Web Service API", "homepage": "https://github.com/maxmind/web-service-common-php", - "time": "2020-11-02 17:00:53" + "time": "2020-11-02T17:00:53+00:00" }, { "name": "minishlink/web-push", @@ -536,7 +535,7 @@ "push", "web" ], - "time": "2020-08-02 08:58:01" + "time": "2020-08-02T08:58:01+00:00" }, { "name": "paragonie/random_compat", @@ -581,20 +580,20 @@ "pseudorandom", "random" ], - "time": "2020-10-15 08:29:30" + "time": "2020-10-15T08:29:30+00:00" }, { "name": "paragonie/sodium_compat", - "version": "v1.13.0", + "version": "v1.14.0", "source": { "type": "git", "url": "https://github.com/paragonie/sodium_compat.git", - "reference": "bbade402cbe84c69b718120911506a3aa2bae653" + "reference": "a1cfe0b21faf9c0b61ac0c6188c4af7fd6fd0db3" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/paragonie/sodium_compat/zipball/bbade402cbe84c69b718120911506a3aa2bae653", - "reference": "bbade402cbe84c69b718120911506a3aa2bae653", + "url": "https://api.github.com/repos/paragonie/sodium_compat/zipball/a1cfe0b21faf9c0b61ac0c6188c4af7fd6fd0db3", + "reference": "a1cfe0b21faf9c0b61ac0c6188c4af7fd6fd0db3", "shasum": "" }, "require": { @@ -602,7 +601,7 @@ "php": "^5.2.4|^5.3|^5.4|^5.5|^5.6|^7|^8" }, "require-dev": { - "phpunit/phpunit": "^3|^4|^5|^6|^7" + "phpunit/phpunit": "^3|^4|^5|^6|^7|^8|^9" }, "suggest": { "ext-libsodium": "PHP < 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security.", @@ -663,7 +662,7 @@ "secret-key cryptography", "side-channel resistant" ], - "time": "2020-03-20 21:48:09" + "time": "2020-12-03T16:26:19+00:00" }, { "name": "paypal/paypal-checkout-sdk", @@ -712,7 +711,7 @@ "rest", "sdk" ], - "time": "2019-11-07 23:16:44" + "time": "2019-11-07T23:16:44+00:00" }, { "name": "paypal/paypalhttp", @@ -751,21 +750,20 @@ "homepage": "https://github.com/paypal/paypalhttp_php/contributors" } ], - "abandoned": true, - "time": "2019-11-06 21:27:12" + "time": "2019-11-06T21:27:12+00:00" }, { "name": "phpmailer/phpmailer", - "version": "v6.1.8", + "version": "v6.2.0", "source": { "type": "git", "url": "https://github.com/PHPMailer/PHPMailer.git", - "reference": "917ab212fa00dc6eacbb26e8bc387ebe40993bc1" + "reference": "e38888a75c070304ca5514197d4847a59a5c853f" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/PHPMailer/PHPMailer/zipball/917ab212fa00dc6eacbb26e8bc387ebe40993bc1", - "reference": "917ab212fa00dc6eacbb26e8bc387ebe40993bc1", + "url": "https://api.github.com/repos/PHPMailer/PHPMailer/zipball/e38888a75c070304ca5514197d4847a59a5c853f", + "reference": "e38888a75c070304ca5514197d4847a59a5c853f", "shasum": "" }, "require": { @@ -775,9 +773,12 @@ "php": ">=5.5.0" }, "require-dev": { + "dealerdirect/phpcodesniffer-composer-installer": "^0.7.0", "doctrine/annotations": "^1.2", - "friendsofphp/php-cs-fixer": "^2.2", - "phpunit/phpunit": "^4.8 || ^5.7" + "phpcompatibility/php-compatibility": "^9.3.5", + "roave/security-advisories": "dev-latest", + "squizlabs/php_codesniffer": "^3.5.6", + "yoast/phpunit-polyfills": "^0.2.0" }, "suggest": { "ext-mbstring": "Needed to send email in multibyte encoding charset", @@ -815,7 +816,7 @@ } ], "description": "PHPMailer is a full-featured email creation and transfer class for PHP", - "time": "2020-10-09 14:55:58" + "time": "2020-11-25T15:24:57+00:00" }, { "name": "psr/http-message", @@ -865,7 +866,7 @@ "request", "response" ], - "time": "2016-08-06 14:39:51" + "time": "2016-08-06T14:39:51+00:00" }, { "name": "ralouphie/getallheaders", @@ -905,7 +906,7 @@ } ], "description": "A polyfill for getallheaders.", - "time": "2019-03-08 08:55:37" + "time": "2019-03-08T08:55:37+00:00" }, { "name": "sonata-project/google-authenticator", @@ -962,7 +963,7 @@ "keywords": [ "google authenticator" ], - "time": "2018-07-18 22:08:02" + "time": "2018-07-18T22:08:02+00:00" }, { "name": "spomky-labs/base64url", @@ -1013,20 +1014,20 @@ "safe", "url" ], - "time": "2020-11-03 09:10:25" + "time": "2020-11-03T09:10:25+00:00" }, { "name": "stripe/stripe-php", - "version": "v7.61.0", + "version": "v7.66.1", "source": { "type": "git", "url": "https://github.com/stripe/stripe-php.git", - "reference": "51c6cd18cb51740101c940a3fefc876ef7cd8cae" + "reference": "a2ebaa272a8797b21e81afaf8d5ba0953ff15e13" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/stripe/stripe-php/zipball/51c6cd18cb51740101c940a3fefc876ef7cd8cae", - "reference": "51c6cd18cb51740101c940a3fefc876ef7cd8cae", + "url": "https://api.github.com/repos/stripe/stripe-php/zipball/a2ebaa272a8797b21e81afaf8d5ba0953ff15e13", + "reference": "a2ebaa272a8797b21e81afaf8d5ba0953ff15e13", "shasum": "" }, "require": { @@ -1036,7 +1037,7 @@ "php": ">=5.6.0" }, "require-dev": { - "friendsofphp/php-cs-fixer": "2.16.1", + "friendsofphp/php-cs-fixer": "2.16.5", "php-coveralls/php-coveralls": "^2.1", "phpunit/phpunit": "^5.7", "squizlabs/php_codesniffer": "^3.3", @@ -1070,7 +1071,7 @@ "payment processing", "stripe" ], - "time": "2020-10-20 20:01:45" + "time": "2020-12-01T18:44:12+00:00" }, { "name": "symfony/polyfill-intl-idn", @@ -1140,7 +1141,7 @@ "portable", "shim" ], - "time": "2020-10-23 14:02:19" + "time": "2020-10-23T14:02:19+00:00" }, { "name": "symfony/polyfill-intl-normalizer", @@ -1207,7 +1208,7 @@ "portable", "shim" ], - "time": "2020-10-23 14:02:19" + "time": "2020-10-23T14:02:19+00:00" }, { "name": "symfony/polyfill-php72", @@ -1266,7 +1267,7 @@ "portable", "shim" ], - "time": "2020-10-23 14:02:19" + "time": "2020-10-23T14:02:19+00:00" }, { "name": "web-token/jwt-core", @@ -1341,7 +1342,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-key-mgmt", @@ -1418,7 +1419,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-signature", @@ -1498,7 +1499,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-signature-algorithm-ecdsa", @@ -1565,7 +1566,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-signature-algorithm-eddsa", @@ -1632,7 +1633,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-signature-algorithm-hmac", @@ -1699,7 +1700,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-signature-algorithm-none", @@ -1766,7 +1767,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-signature-algorithm-rsa", @@ -1833,7 +1834,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" }, { "name": "web-token/jwt-util-ecc", @@ -1902,7 +1903,7 @@ "jwt", "symfony" ], - "time": "2020-03-20 13:29:04" + "time": "2020-03-20T13:29:04+00:00" } ], "packages-dev": [ @@ -1965,7 +1966,7 @@ "throwable", "whoops" ], - "time": "2020-11-01 12:00:00" + "time": "2020-11-01T12:00:00+00:00" }, { "name": "kint-php/kint", @@ -2016,7 +2017,7 @@ "kint", "php" ], - "time": "2017-01-15 14:23:43" + "time": "2017-01-15T14:23:43+00:00" }, { "name": "maximebf/debugbar", @@ -2077,7 +2078,7 @@ "debug", "debugbar" ], - "time": "2020-05-06 07:06:27" + "time": "2020-05-06T07:06:27+00:00" }, { "name": "psr/log", @@ -2124,7 +2125,7 @@ "psr", "psr-3" ], - "time": "2020-03-23 09:12:05" + "time": "2020-03-23T09:12:05+00:00" }, { "name": "symfony/polyfill-mbstring", @@ -2187,7 +2188,7 @@ "portable", "shim" ], - "time": "2020-10-23 14:02:19" + "time": "2020-10-23T14:02:19+00:00" }, { "name": "symfony/polyfill-php80", @@ -2253,20 +2254,20 @@ "portable", "shim" ], - "time": "2020-10-23 14:02:19" + "time": "2020-10-23T14:02:19+00:00" }, { "name": "symfony/var-dumper", - "version": "v4.4.16", + "version": "v4.4.17", "source": { "type": "git", "url": "https://github.com/symfony/var-dumper.git", - "reference": "3718e18b68d955348ad860e505991802c09f5f73" + "reference": "65c6f1e848cda840ef7278686c8e30a7cc353c93" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/var-dumper/zipball/3718e18b68d955348ad860e505991802c09f5f73", - "reference": "3718e18b68d955348ad860e505991802c09f5f73", + "url": "https://api.github.com/repos/symfony/var-dumper/zipball/65c6f1e848cda840ef7278686c8e30a7cc353c93", + "reference": "65c6f1e848cda840ef7278686c8e30a7cc353c93", "shasum": "" }, "require": { @@ -2325,7 +2326,7 @@ "debug", "dump" ], - "time": "2020-10-26 20:47:51" + "time": "2020-11-24T09:55:37+00:00" } ], "aliases": [], diff --git a/vendor/autoload.php b/vendor/autoload.php new file mode 100644 index 000000000..11896c3f9 --- /dev/null +++ b/vendor/autoload.php @@ -0,0 +1,7 @@ + + * Jordi Boggiano + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Composer\Autoload; + +/** + * ClassLoader implements a PSR-0, PSR-4 and classmap class loader. + * + * $loader = new \Composer\Autoload\ClassLoader(); + * + * // register classes with namespaces + * $loader->add('Symfony\Component', __DIR__.'/component'); + * $loader->add('Symfony', __DIR__.'/framework'); + * + * // activate the autoloader + * $loader->register(); + * + * // to enable searching the include path (eg. for PEAR packages) + * $loader->setUseIncludePath(true); + * + * In this example, if you try to use a class in the Symfony\Component + * namespace or one of its children (Symfony\Component\Console for instance), + * the autoloader will first look for the class under the component/ + * directory, and it will then fallback to the framework/ directory if not + * found before giving up. + * + * This class is loosely based on the Symfony UniversalClassLoader. + * + * @author Fabien Potencier + * @author Jordi Boggiano + * @see http://www.php-fig.org/psr/psr-0/ + * @see http://www.php-fig.org/psr/psr-4/ + */ +class ClassLoader +{ + // PSR-4 + private $prefixLengthsPsr4 = array(); + private $prefixDirsPsr4 = array(); + private $fallbackDirsPsr4 = array(); + + // PSR-0 + private $prefixesPsr0 = array(); + private $fallbackDirsPsr0 = array(); + + private $useIncludePath = false; + private $classMap = array(); + private $classMapAuthoritative = false; + private $missingClasses = array(); + private $apcuPrefix; + + public function getPrefixes() + { + if (!empty($this->prefixesPsr0)) { + return call_user_func_array('array_merge', $this->prefixesPsr0); + } + + return array(); + } + + public function getPrefixesPsr4() + { + return $this->prefixDirsPsr4; + } + + public function getFallbackDirs() + { + return $this->fallbackDirsPsr0; + } + + public function getFallbackDirsPsr4() + { + return $this->fallbackDirsPsr4; + } + + public function getClassMap() + { + return $this->classMap; + } + + /** + * @param array $classMap Class to filename map + */ + public function addClassMap(array $classMap) + { + if ($this->classMap) { + $this->classMap = array_merge($this->classMap, $classMap); + } else { + $this->classMap = $classMap; + } + } + + /** + * Registers a set of PSR-0 directories for a given prefix, either + * appending or prepending to the ones previously set for this prefix. + * + * @param string $prefix The prefix + * @param array|string $paths The PSR-0 root directories + * @param bool $prepend Whether to prepend the directories + */ + public function add($prefix, $paths, $prepend = false) + { + if (!$prefix) { + if ($prepend) { + $this->fallbackDirsPsr0 = array_merge( + (array) $paths, + $this->fallbackDirsPsr0 + ); + } else { + $this->fallbackDirsPsr0 = array_merge( + $this->fallbackDirsPsr0, + (array) $paths + ); + } + + return; + } + + $first = $prefix[0]; + if (!isset($this->prefixesPsr0[$first][$prefix])) { + $this->prefixesPsr0[$first][$prefix] = (array) $paths; + + return; + } + if ($prepend) { + $this->prefixesPsr0[$first][$prefix] = array_merge( + (array) $paths, + $this->prefixesPsr0[$first][$prefix] + ); + } else { + $this->prefixesPsr0[$first][$prefix] = array_merge( + $this->prefixesPsr0[$first][$prefix], + (array) $paths + ); + } + } + + /** + * Registers a set of PSR-4 directories for a given namespace, either + * appending or prepending to the ones previously set for this namespace. + * + * @param string $prefix The prefix/namespace, with trailing '\\' + * @param array|string $paths The PSR-4 base directories + * @param bool $prepend Whether to prepend the directories + * + * @throws \InvalidArgumentException + */ + public function addPsr4($prefix, $paths, $prepend = false) + { + if (!$prefix) { + // Register directories for the root namespace. + if ($prepend) { + $this->fallbackDirsPsr4 = array_merge( + (array) $paths, + $this->fallbackDirsPsr4 + ); + } else { + $this->fallbackDirsPsr4 = array_merge( + $this->fallbackDirsPsr4, + (array) $paths + ); + } + } elseif (!isset($this->prefixDirsPsr4[$prefix])) { + // Register directories for a new namespace. + $length = strlen($prefix); + if ('\\' !== $prefix[$length - 1]) { + throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator."); + } + $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length; + $this->prefixDirsPsr4[$prefix] = (array) $paths; + } elseif ($prepend) { + // Prepend directories for an already registered namespace. + $this->prefixDirsPsr4[$prefix] = array_merge( + (array) $paths, + $this->prefixDirsPsr4[$prefix] + ); + } else { + // Append directories for an already registered namespace. + $this->prefixDirsPsr4[$prefix] = array_merge( + $this->prefixDirsPsr4[$prefix], + (array) $paths + ); + } + } + + /** + * Registers a set of PSR-0 directories for a given prefix, + * replacing any others previously set for this prefix. + * + * @param string $prefix The prefix + * @param array|string $paths The PSR-0 base directories + */ + public function set($prefix, $paths) + { + if (!$prefix) { + $this->fallbackDirsPsr0 = (array) $paths; + } else { + $this->prefixesPsr0[$prefix[0]][$prefix] = (array) $paths; + } + } + + /** + * Registers a set of PSR-4 directories for a given namespace, + * replacing any others previously set for this namespace. + * + * @param string $prefix The prefix/namespace, with trailing '\\' + * @param array|string $paths The PSR-4 base directories + * + * @throws \InvalidArgumentException + */ + public function setPsr4($prefix, $paths) + { + if (!$prefix) { + $this->fallbackDirsPsr4 = (array) $paths; + } else { + $length = strlen($prefix); + if ('\\' !== $prefix[$length - 1]) { + throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator."); + } + $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length; + $this->prefixDirsPsr4[$prefix] = (array) $paths; + } + } + + /** + * Turns on searching the include path for class files. + * + * @param bool $useIncludePath + */ + public function setUseIncludePath($useIncludePath) + { + $this->useIncludePath = $useIncludePath; + } + + /** + * Can be used to check if the autoloader uses the include path to check + * for classes. + * + * @return bool + */ + public function getUseIncludePath() + { + return $this->useIncludePath; + } + + /** + * Turns off searching the prefix and fallback directories for classes + * that have not been registered with the class map. + * + * @param bool $classMapAuthoritative + */ + public function setClassMapAuthoritative($classMapAuthoritative) + { + $this->classMapAuthoritative = $classMapAuthoritative; + } + + /** + * Should class lookup fail if not found in the current class map? + * + * @return bool + */ + public function isClassMapAuthoritative() + { + return $this->classMapAuthoritative; + } + + /** + * APCu prefix to use to cache found/not-found classes, if the extension is enabled. + * + * @param string|null $apcuPrefix + */ + public function setApcuPrefix($apcuPrefix) + { + $this->apcuPrefix = function_exists('apcu_fetch') && filter_var(ini_get('apc.enabled'), FILTER_VALIDATE_BOOLEAN) ? $apcuPrefix : null; + } + + /** + * The APCu prefix in use, or null if APCu caching is not enabled. + * + * @return string|null + */ + public function getApcuPrefix() + { + return $this->apcuPrefix; + } + + /** + * Registers this instance as an autoloader. + * + * @param bool $prepend Whether to prepend the autoloader or not + */ + public function register($prepend = false) + { + spl_autoload_register(array($this, 'loadClass'), true, $prepend); + } + + /** + * Unregisters this instance as an autoloader. + */ + public function unregister() + { + spl_autoload_unregister(array($this, 'loadClass')); + } + + /** + * Loads the given class or interface. + * + * @param string $class The name of the class + * @return bool|null True if loaded, null otherwise + */ + public function loadClass($class) + { + if ($file = $this->findFile($class)) { + includeFile($file); + + return true; + } + } + + /** + * Finds the path to the file where the class is defined. + * + * @param string $class The name of the class + * + * @return string|false The path if found, false otherwise + */ + public function findFile($class) + { + // class map lookup + if (isset($this->classMap[$class])) { + return $this->classMap[$class]; + } + if ($this->classMapAuthoritative || isset($this->missingClasses[$class])) { + return false; + } + if (null !== $this->apcuPrefix) { + $file = apcu_fetch($this->apcuPrefix.$class, $hit); + if ($hit) { + return $file; + } + } + + $file = $this->findFileWithExtension($class, '.php'); + + // Search for Hack files if we are running on HHVM + if (false === $file && defined('HHVM_VERSION')) { + $file = $this->findFileWithExtension($class, '.hh'); + } + + if (null !== $this->apcuPrefix) { + apcu_add($this->apcuPrefix.$class, $file); + } + + if (false === $file) { + // Remember that this class does not exist. + $this->missingClasses[$class] = true; + } + + return $file; + } + + private function findFileWithExtension($class, $ext) + { + // PSR-4 lookup + $logicalPathPsr4 = strtr($class, '\\', DIRECTORY_SEPARATOR) . $ext; + + $first = $class[0]; + if (isset($this->prefixLengthsPsr4[$first])) { + $subPath = $class; + while (false !== $lastPos = strrpos($subPath, '\\')) { + $subPath = substr($subPath, 0, $lastPos); + $search = $subPath . '\\'; + if (isset($this->prefixDirsPsr4[$search])) { + $pathEnd = DIRECTORY_SEPARATOR . substr($logicalPathPsr4, $lastPos + 1); + foreach ($this->prefixDirsPsr4[$search] as $dir) { + if (file_exists($file = $dir . $pathEnd)) { + return $file; + } + } + } + } + } + + // PSR-4 fallback dirs + foreach ($this->fallbackDirsPsr4 as $dir) { + if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr4)) { + return $file; + } + } + + // PSR-0 lookup + if (false !== $pos = strrpos($class, '\\')) { + // namespaced class name + $logicalPathPsr0 = substr($logicalPathPsr4, 0, $pos + 1) + . strtr(substr($logicalPathPsr4, $pos + 1), '_', DIRECTORY_SEPARATOR); + } else { + // PEAR-like class name + $logicalPathPsr0 = strtr($class, '_', DIRECTORY_SEPARATOR) . $ext; + } + + if (isset($this->prefixesPsr0[$first])) { + foreach ($this->prefixesPsr0[$first] as $prefix => $dirs) { + if (0 === strpos($class, $prefix)) { + foreach ($dirs as $dir) { + if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr0)) { + return $file; + } + } + } + } + } + + // PSR-0 fallback dirs + foreach ($this->fallbackDirsPsr0 as $dir) { + if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr0)) { + return $file; + } + } + + // PSR-0 include paths. + if ($this->useIncludePath && $file = stream_resolve_include_path($logicalPathPsr0)) { + return $file; + } + + return false; + } +} + +/** + * Scope isolated include. + * + * Prevents access to $this/self from included files. + */ +function includeFile($file) +{ + include $file; +} diff --git a/vendor/composer/LICENSE b/vendor/composer/LICENSE new file mode 100644 index 000000000..f27399a04 --- /dev/null +++ b/vendor/composer/LICENSE @@ -0,0 +1,21 @@ + +Copyright (c) Nils Adermann, Jordi Boggiano + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is furnished +to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. + diff --git a/vendor/composer/autoload_classmap.php b/vendor/composer/autoload_classmap.php new file mode 100644 index 000000000..c31b2c47d --- /dev/null +++ b/vendor/composer/autoload_classmap.php @@ -0,0 +1,1031 @@ + $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaBreak.php', + 'AnalizaCReport' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaCReport.php', + 'AnalizaCharts' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaCharts.php', + 'AnalizaCrosstab' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaCrosstab.php', + 'AnalizaDesc' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaDesc.php', + 'AnalizaFreq' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaFreq.php', + 'AnalizaMean' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaMean.php', + 'AnalizaMultiCrosstab' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaMultiCrosstab.php', + 'AnalizaSums' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaSums.php', + 'AnalizaTTest' => $baseDir . '/admin/survey/export/latexclasses/Analize/AnalizaTTest.php', + 'ApiController' => $baseDir . '/admin/survey/api/class.ApiController.php', + 'ApiNarocilaController' => $baseDir . '/frontend/payments/classes/class.ApiNarocilaController.php', + 'ApiSurvey' => $baseDir . '/admin/survey/api/class.ApiSurvey.php', + 'App\\Controllers\\AjaxController' => $baseDir . '/main/survey/app/Controllers/AjaxController.php', + 'App\\Controllers\\BodyController' => $baseDir . '/main/survey/app/Controllers/BodyController.php', + 'App\\Controllers\\CheckController' => $baseDir . '/main/survey/app/Controllers/CheckController.php', + 'App\\Controllers\\Controller' => $baseDir . '/main/survey/app/Controllers/Controller.php', + 'App\\Controllers\\DisplayController' => $baseDir . '/main/survey/app/Controllers/DisplayController.php', + 'App\\Controllers\\FindController' => $baseDir . '/main/survey/app/Controllers/FindController.php', + 'App\\Controllers\\HeaderController' => $baseDir . '/main/survey/app/Controllers/HeaderController.php', + 'App\\Controllers\\HelperController' => $baseDir . '/main/survey/app/Controllers/HelperController.php', + 'App\\Controllers\\InitClass' => $baseDir . '/main/survey/app/Controllers/InitClass.php', + 'App\\Controllers\\JsController' => $baseDir . '/main/survey/app/Controllers/JsController.php', + 'App\\Controllers\\LanguageController' => $baseDir . '/main/survey/app/Controllers/LanguageController.php', + 'App\\Controllers\\StatisticController' => $baseDir . '/main/survey/app/Controllers/StatisticController.php', + 'App\\Controllers\\SurveyController' => $baseDir . '/main/survey/app/Controllers/SurveyController.php', + 'App\\Controllers\\VariableClass' => $baseDir . '/main/survey/app/Controllers/VariableClass.php', + 'App\\Controllers\\Vprasanja\\ComputeController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/ComputeController.php', + 'App\\Controllers\\Vprasanja\\DatumController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/DatumController.php', + 'App\\Controllers\\Vprasanja\\DoubleController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/DoubleController.php', + 'App\\Controllers\\Vprasanja\\DragDropController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/DragDropController.php', + 'App\\Controllers\\Vprasanja\\DynamicController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/DynamicController.php', + 'App\\Controllers\\Vprasanja\\HeatMapController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/HeatMapController.php', + 'App\\Controllers\\Vprasanja\\ImageHotSpotController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/ImageHotSpotController.php', + 'App\\Controllers\\Vprasanja\\ImenaController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/ImenaController.php', + 'App\\Controllers\\Vprasanja\\MapsController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/MapsController.php', + 'App\\Controllers\\Vprasanja\\MaxDiffController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/MaxDiffController.php', + 'App\\Controllers\\Vprasanja\\MultigridController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/MultigridController.php', + 'App\\Controllers\\Vprasanja\\MultigridMobileController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/MultigridMobileController.php', + 'App\\Controllers\\Vprasanja\\NumberController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/NumberController.php', + 'App\\Controllers\\Vprasanja\\OneAgainstAnotherController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/OneAgainstAnotherController.php', + 'App\\Controllers\\Vprasanja\\QuotaController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/QuotaController.php', + 'App\\Controllers\\Vprasanja\\RadioCheckboxSelectController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/RadioCheckboxSelectController.php', + 'App\\Controllers\\Vprasanja\\RankingController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/RankingController.php', + 'App\\Controllers\\Vprasanja\\SystemVariableController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/SystemVariableController.php', + 'App\\Controllers\\Vprasanja\\TextController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/TextController.php', + 'App\\Controllers\\Vprasanja\\VprasanjaController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/VprasanjaController.php', + 'App\\Controllers\\Vprasanja\\VsotaController' => $baseDir . '/main/survey/app/Controllers/Vprasanja/VsotaController.php', + 'App\\Models\\Model' => $baseDir . '/main/survey/app/Models/Model.php', + 'App\\Models\\SaveSurvey' => $baseDir . '/main/survey/app/Models/SaveSurvey.php', + 'App\\Models\\User' => $baseDir . '/main/survey/app/Models/User.php', + 'Base64Url\\Base64Url' => $vendorDir . '/spomky-labs/base64url/src/Base64Url.php', + 'BesediloLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/BesediloLatex.php', + 'BesediloXml' => $baseDir . '/admin/survey/export/xmlClasses/Vprasanja/BesediloXml.php', + 'Branching' => $baseDir . '/admin/survey/Branching.php', + 'BranchingAjax' => $baseDir . '/admin/survey/BranchingAjax.php', + 'Cache' => $baseDir . '/admin/survey/classes/class.Cache.php', + 'CheckboxXml' => $baseDir . '/admin/survey/export/xmlClasses/Vprasanja/CheckboxXml.php', + 'Common' => $baseDir . '/admin/survey/classes/class.Common.php', + 'Composer\\CaBundle\\CaBundle' => $vendorDir . '/composer/ca-bundle/src/CaBundle.php', + 'CrossRoad' => $baseDir . '/admin/survey/classes/CrossRoad.php', + 'DatumLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/DatumLatex.php', + 'Demografija' => $baseDir . '/admin/survey/classes/class.Demografija.php', + 'Dostop' => $baseDir . '/admin/survey/classes/class.Dostop.php', + 'Evalvacija' => $baseDir . '/admin/survey/modules/Evalvacija/class.Evalvacija.php', + 'EvoliForm' => $baseDir . '/admin/survey/modules/mod_EVOLI/class.EvoliForm.php', + 'ExclusiveLock' => $baseDir . '/admin/survey/classes/surveyData/class.ExclusiveLock.php', + 'Export' => $baseDir . '/admin/survey/classes/class.Export.php', + 'ExportController' => $baseDir . '/admin/survey/export/class.ExportController.php', + 'FG\\ASN1\\ASNObject' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/ASNObject.php', + 'FG\\ASN1\\AbstractString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/AbstractString.php', + 'FG\\ASN1\\AbstractTime' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/AbstractTime.php', + 'FG\\ASN1\\Base128' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Base128.php', + 'FG\\ASN1\\Composite\\AttributeTypeAndValue' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Composite/AttributeTypeAndValue.php', + 'FG\\ASN1\\Composite\\RDNString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Composite/RDNString.php', + 'FG\\ASN1\\Composite\\RelativeDistinguishedName' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Composite/RelativeDistinguishedName.php', + 'FG\\ASN1\\Construct' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Construct.php', + 'FG\\ASN1\\Exception\\NotImplementedException' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Exception/NotImplementedException.php', + 'FG\\ASN1\\Exception\\ParserException' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Exception/ParserException.php', + 'FG\\ASN1\\ExplicitlyTaggedObject' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/ExplicitlyTaggedObject.php', + 'FG\\ASN1\\Identifier' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Identifier.php', + 'FG\\ASN1\\OID' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/OID.php', + 'FG\\ASN1\\Parsable' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Parsable.php', + 'FG\\ASN1\\TemplateParser' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/TemplateParser.php', + 'FG\\ASN1\\Universal\\BMPString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/BMPString.php', + 'FG\\ASN1\\Universal\\BitString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/BitString.php', + 'FG\\ASN1\\Universal\\Boolean' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/Boolean.php', + 'FG\\ASN1\\Universal\\CharacterString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/CharacterString.php', + 'FG\\ASN1\\Universal\\Enumerated' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/Enumerated.php', + 'FG\\ASN1\\Universal\\GeneralString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/GeneralString.php', + 'FG\\ASN1\\Universal\\GeneralizedTime' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/GeneralizedTime.php', + 'FG\\ASN1\\Universal\\GraphicString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/GraphicString.php', + 'FG\\ASN1\\Universal\\IA5String' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/IA5String.php', + 'FG\\ASN1\\Universal\\Integer' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/Integer.php', + 'FG\\ASN1\\Universal\\NullObject' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/NullObject.php', + 'FG\\ASN1\\Universal\\NumericString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/NumericString.php', + 'FG\\ASN1\\Universal\\ObjectDescriptor' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/ObjectDescriptor.php', + 'FG\\ASN1\\Universal\\ObjectIdentifier' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/ObjectIdentifier.php', + 'FG\\ASN1\\Universal\\OctetString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/OctetString.php', + 'FG\\ASN1\\Universal\\PrintableString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/PrintableString.php', + 'FG\\ASN1\\Universal\\RelativeObjectIdentifier' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/RelativeObjectIdentifier.php', + 'FG\\ASN1\\Universal\\Sequence' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/Sequence.php', + 'FG\\ASN1\\Universal\\Set' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/Set.php', + 'FG\\ASN1\\Universal\\T61String' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/T61String.php', + 'FG\\ASN1\\Universal\\UTCTime' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/UTCTime.php', + 'FG\\ASN1\\Universal\\UTF8String' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/UTF8String.php', + 'FG\\ASN1\\Universal\\UniversalString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/UniversalString.php', + 'FG\\ASN1\\Universal\\VisibleString' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/Universal/VisibleString.php', + 'FG\\ASN1\\UnknownConstructedObject' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/UnknownConstructedObject.php', + 'FG\\ASN1\\UnknownObject' => $vendorDir . '/fgrosse/phpasn1/lib/ASN1/UnknownObject.php', + 'FG\\Utility\\BigInteger' => $vendorDir . '/fgrosse/phpasn1/lib/Utility/BigInteger.php', + 'FG\\Utility\\BigIntegerBcmath' => $vendorDir . '/fgrosse/phpasn1/lib/Utility/BigIntegerBcmath.php', + 'FG\\Utility\\BigIntegerGmp' => $vendorDir . '/fgrosse/phpasn1/lib/Utility/BigIntegerGmp.php', + 'FG\\X509\\AlgorithmIdentifier' => $vendorDir . '/fgrosse/phpasn1/lib/X509/AlgorithmIdentifier.php', + 'FG\\X509\\CSR\\Attributes' => $vendorDir . '/fgrosse/phpasn1/lib/X509/CSR/Attributes.php', + 'FG\\X509\\CSR\\CSR' => $vendorDir . '/fgrosse/phpasn1/lib/X509/CSR/CSR.php', + 'FG\\X509\\CertificateExtensions' => $vendorDir . '/fgrosse/phpasn1/lib/X509/CertificateExtensions.php', + 'FG\\X509\\CertificateSubject' => $vendorDir . '/fgrosse/phpasn1/lib/X509/CertificateSubject.php', + 'FG\\X509\\PrivateKey' => $vendorDir . '/fgrosse/phpasn1/lib/X509/PrivateKey.php', + 'FG\\X509\\PublicKey' => $vendorDir . '/fgrosse/phpasn1/lib/X509/PublicKey.php', + 'FG\\X509\\SAN\\DNSName' => $vendorDir . '/fgrosse/phpasn1/lib/X509/SAN/DNSName.php', + 'FG\\X509\\SAN\\IPAddress' => $vendorDir . '/fgrosse/phpasn1/lib/X509/SAN/IPAddress.php', + 'FG\\X509\\SAN\\SubjectAlternativeNames' => $vendorDir . '/fgrosse/phpasn1/lib/X509/SAN/SubjectAlternativeNames.php', + 'Forum' => $baseDir . '/admin/survey/classes/class.Forum.php', + 'GC' => $baseDir . '/admin/survey/modules/Evalvacija/class.GC.php', + 'GDPR' => $baseDir . '/admin/survey/classes/class.GDPR.php', + 'GeoIp2\\Database\\Reader' => $vendorDir . '/geoip2/geoip2/src/Database/Reader.php', + 'GeoIp2\\Exception\\AddressNotFoundException' => $vendorDir . '/geoip2/geoip2/src/Exception/AddressNotFoundException.php', + 'GeoIp2\\Exception\\AuthenticationException' => $vendorDir . '/geoip2/geoip2/src/Exception/AuthenticationException.php', + 'GeoIp2\\Exception\\GeoIp2Exception' => $vendorDir . '/geoip2/geoip2/src/Exception/GeoIp2Exception.php', + 'GeoIp2\\Exception\\HttpException' => $vendorDir . '/geoip2/geoip2/src/Exception/HttpException.php', + 'GeoIp2\\Exception\\InvalidRequestException' => $vendorDir . '/geoip2/geoip2/src/Exception/InvalidRequestException.php', + 'GeoIp2\\Exception\\OutOfQueriesException' => $vendorDir . '/geoip2/geoip2/src/Exception/OutOfQueriesException.php', + 'GeoIp2\\Model\\AbstractModel' => $vendorDir . '/geoip2/geoip2/src/Model/AbstractModel.php', + 'GeoIp2\\Model\\AnonymousIp' => $vendorDir . '/geoip2/geoip2/src/Model/AnonymousIp.php', + 'GeoIp2\\Model\\Asn' => $vendorDir . '/geoip2/geoip2/src/Model/Asn.php', + 'GeoIp2\\Model\\City' => $vendorDir . '/geoip2/geoip2/src/Model/City.php', + 'GeoIp2\\Model\\ConnectionType' => $vendorDir . '/geoip2/geoip2/src/Model/ConnectionType.php', + 'GeoIp2\\Model\\Country' => $vendorDir . '/geoip2/geoip2/src/Model/Country.php', + 'GeoIp2\\Model\\Domain' => $vendorDir . '/geoip2/geoip2/src/Model/Domain.php', + 'GeoIp2\\Model\\Enterprise' => $vendorDir . '/geoip2/geoip2/src/Model/Enterprise.php', + 'GeoIp2\\Model\\Insights' => $vendorDir . '/geoip2/geoip2/src/Model/Insights.php', + 'GeoIp2\\Model\\Isp' => $vendorDir . '/geoip2/geoip2/src/Model/Isp.php', + 'GeoIp2\\ProviderInterface' => $vendorDir . '/geoip2/geoip2/src/ProviderInterface.php', + 'GeoIp2\\Record\\AbstractPlaceRecord' => $vendorDir . '/geoip2/geoip2/src/Record/AbstractPlaceRecord.php', + 'GeoIp2\\Record\\AbstractRecord' => $vendorDir . '/geoip2/geoip2/src/Record/AbstractRecord.php', + 'GeoIp2\\Record\\City' => $vendorDir . '/geoip2/geoip2/src/Record/City.php', + 'GeoIp2\\Record\\Continent' => $vendorDir . '/geoip2/geoip2/src/Record/Continent.php', + 'GeoIp2\\Record\\Country' => $vendorDir . '/geoip2/geoip2/src/Record/Country.php', + 'GeoIp2\\Record\\Location' => $vendorDir . '/geoip2/geoip2/src/Record/Location.php', + 'GeoIp2\\Record\\MaxMind' => $vendorDir . '/geoip2/geoip2/src/Record/MaxMind.php', + 'GeoIp2\\Record\\Postal' => $vendorDir . '/geoip2/geoip2/src/Record/Postal.php', + 'GeoIp2\\Record\\RepresentedCountry' => $vendorDir . '/geoip2/geoip2/src/Record/RepresentedCountry.php', + 'GeoIp2\\Record\\Subdivision' => $vendorDir . '/geoip2/geoip2/src/Record/Subdivision.php', + 'GeoIp2\\Record\\Traits' => $vendorDir . '/geoip2/geoip2/src/Record/Traits.php', + 'GeoIp2\\Util' => $vendorDir . '/geoip2/geoip2/src/Util.php', + 'GeoIp2\\WebService\\Client' => $vendorDir . '/geoip2/geoip2/src/WebService/Client.php', + 'GetSiteUrl' => $baseDir . '/admin/survey/classes/class.GetSiteUrl.php', + 'Glasovanje' => $baseDir . '/admin/survey/Glasovanje.php', + 'GlobalMisc' => $baseDir . '/admin/survey/classes/class.GlobalMisc.php', + 'GridMultipleLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/GridMultipleLatex.php', + 'GuzzleHttp\\Client' => $vendorDir . '/guzzlehttp/guzzle/src/Client.php', + 'GuzzleHttp\\ClientInterface' => $vendorDir . '/guzzlehttp/guzzle/src/ClientInterface.php', + 'GuzzleHttp\\Cookie\\CookieJar' => $vendorDir . '/guzzlehttp/guzzle/src/Cookie/CookieJar.php', + 'GuzzleHttp\\Cookie\\CookieJarInterface' => $vendorDir . '/guzzlehttp/guzzle/src/Cookie/CookieJarInterface.php', + 'GuzzleHttp\\Cookie\\FileCookieJar' => $vendorDir . '/guzzlehttp/guzzle/src/Cookie/FileCookieJar.php', + 'GuzzleHttp\\Cookie\\SessionCookieJar' => $vendorDir . '/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.php', + 'GuzzleHttp\\Cookie\\SetCookie' => $vendorDir . '/guzzlehttp/guzzle/src/Cookie/SetCookie.php', + 'GuzzleHttp\\Exception\\BadResponseException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/BadResponseException.php', + 'GuzzleHttp\\Exception\\ClientException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/ClientException.php', + 'GuzzleHttp\\Exception\\ConnectException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/ConnectException.php', + 'GuzzleHttp\\Exception\\GuzzleException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/GuzzleException.php', + 'GuzzleHttp\\Exception\\InvalidArgumentException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/InvalidArgumentException.php', + 'GuzzleHttp\\Exception\\RequestException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/RequestException.php', + 'GuzzleHttp\\Exception\\SeekException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/SeekException.php', + 'GuzzleHttp\\Exception\\ServerException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/ServerException.php', + 'GuzzleHttp\\Exception\\TooManyRedirectsException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/TooManyRedirectsException.php', + 'GuzzleHttp\\Exception\\TransferException' => $vendorDir . '/guzzlehttp/guzzle/src/Exception/TransferException.php', + 'GuzzleHttp\\HandlerStack' => $vendorDir . '/guzzlehttp/guzzle/src/HandlerStack.php', + 'GuzzleHttp\\Handler\\CurlFactory' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/CurlFactory.php', + 'GuzzleHttp\\Handler\\CurlFactoryInterface' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php', + 'GuzzleHttp\\Handler\\CurlHandler' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/CurlHandler.php', + 'GuzzleHttp\\Handler\\CurlMultiHandler' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php', + 'GuzzleHttp\\Handler\\EasyHandle' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/EasyHandle.php', + 'GuzzleHttp\\Handler\\MockHandler' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/MockHandler.php', + 'GuzzleHttp\\Handler\\Proxy' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/Proxy.php', + 'GuzzleHttp\\Handler\\StreamHandler' => $vendorDir . '/guzzlehttp/guzzle/src/Handler/StreamHandler.php', + 'GuzzleHttp\\MessageFormatter' => $vendorDir . '/guzzlehttp/guzzle/src/MessageFormatter.php', + 'GuzzleHttp\\Middleware' => $vendorDir . '/guzzlehttp/guzzle/src/Middleware.php', + 'GuzzleHttp\\Pool' => $vendorDir . '/guzzlehttp/guzzle/src/Pool.php', + 'GuzzleHttp\\PrepareBodyMiddleware' => $vendorDir . '/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php', + 'GuzzleHttp\\Promise\\AggregateException' => $vendorDir . '/guzzlehttp/promises/src/AggregateException.php', + 'GuzzleHttp\\Promise\\CancellationException' => $vendorDir . '/guzzlehttp/promises/src/CancellationException.php', + 'GuzzleHttp\\Promise\\Coroutine' => $vendorDir . '/guzzlehttp/promises/src/Coroutine.php', + 'GuzzleHttp\\Promise\\Create' => $vendorDir . '/guzzlehttp/promises/src/Create.php', + 'GuzzleHttp\\Promise\\Each' => $vendorDir . '/guzzlehttp/promises/src/Each.php', + 'GuzzleHttp\\Promise\\EachPromise' => $vendorDir . '/guzzlehttp/promises/src/EachPromise.php', + 'GuzzleHttp\\Promise\\FulfilledPromise' => $vendorDir . '/guzzlehttp/promises/src/FulfilledPromise.php', + 'GuzzleHttp\\Promise\\Is' => $vendorDir . '/guzzlehttp/promises/src/Is.php', + 'GuzzleHttp\\Promise\\Promise' => $vendorDir . '/guzzlehttp/promises/src/Promise.php', + 'GuzzleHttp\\Promise\\PromiseInterface' => $vendorDir . '/guzzlehttp/promises/src/PromiseInterface.php', + 'GuzzleHttp\\Promise\\PromisorInterface' => $vendorDir . '/guzzlehttp/promises/src/PromisorInterface.php', + 'GuzzleHttp\\Promise\\RejectedPromise' => $vendorDir . '/guzzlehttp/promises/src/RejectedPromise.php', + 'GuzzleHttp\\Promise\\RejectionException' => $vendorDir . '/guzzlehttp/promises/src/RejectionException.php', + 'GuzzleHttp\\Promise\\TaskQueue' => $vendorDir . '/guzzlehttp/promises/src/TaskQueue.php', + 'GuzzleHttp\\Promise\\TaskQueueInterface' => $vendorDir . '/guzzlehttp/promises/src/TaskQueueInterface.php', + 'GuzzleHttp\\Promise\\Utils' => $vendorDir . '/guzzlehttp/promises/src/Utils.php', + 'GuzzleHttp\\Psr7\\AppendStream' => $vendorDir . '/guzzlehttp/psr7/src/AppendStream.php', + 'GuzzleHttp\\Psr7\\BufferStream' => $vendorDir . '/guzzlehttp/psr7/src/BufferStream.php', + 'GuzzleHttp\\Psr7\\CachingStream' => $vendorDir . '/guzzlehttp/psr7/src/CachingStream.php', + 'GuzzleHttp\\Psr7\\DroppingStream' => $vendorDir . '/guzzlehttp/psr7/src/DroppingStream.php', + 'GuzzleHttp\\Psr7\\FnStream' => $vendorDir . '/guzzlehttp/psr7/src/FnStream.php', + 'GuzzleHttp\\Psr7\\Header' => $vendorDir . '/guzzlehttp/psr7/src/Header.php', + 'GuzzleHttp\\Psr7\\InflateStream' => $vendorDir . '/guzzlehttp/psr7/src/InflateStream.php', + 'GuzzleHttp\\Psr7\\LazyOpenStream' => $vendorDir . '/guzzlehttp/psr7/src/LazyOpenStream.php', + 'GuzzleHttp\\Psr7\\LimitStream' => $vendorDir . '/guzzlehttp/psr7/src/LimitStream.php', + 'GuzzleHttp\\Psr7\\Message' => $vendorDir . '/guzzlehttp/psr7/src/Message.php', + 'GuzzleHttp\\Psr7\\MessageTrait' => $vendorDir . '/guzzlehttp/psr7/src/MessageTrait.php', + 'GuzzleHttp\\Psr7\\MimeType' => $vendorDir . '/guzzlehttp/psr7/src/MimeType.php', + 'GuzzleHttp\\Psr7\\MultipartStream' => $vendorDir . '/guzzlehttp/psr7/src/MultipartStream.php', + 'GuzzleHttp\\Psr7\\NoSeekStream' => $vendorDir . '/guzzlehttp/psr7/src/NoSeekStream.php', + 'GuzzleHttp\\Psr7\\PumpStream' => $vendorDir . '/guzzlehttp/psr7/src/PumpStream.php', + 'GuzzleHttp\\Psr7\\Query' => $vendorDir . '/guzzlehttp/psr7/src/Query.php', + 'GuzzleHttp\\Psr7\\Request' => $vendorDir . '/guzzlehttp/psr7/src/Request.php', + 'GuzzleHttp\\Psr7\\Response' => $vendorDir . '/guzzlehttp/psr7/src/Response.php', + 'GuzzleHttp\\Psr7\\Rfc7230' => $vendorDir . '/guzzlehttp/psr7/src/Rfc7230.php', + 'GuzzleHttp\\Psr7\\ServerRequest' => $vendorDir . '/guzzlehttp/psr7/src/ServerRequest.php', + 'GuzzleHttp\\Psr7\\Stream' => $vendorDir . '/guzzlehttp/psr7/src/Stream.php', + 'GuzzleHttp\\Psr7\\StreamDecoratorTrait' => $vendorDir . '/guzzlehttp/psr7/src/StreamDecoratorTrait.php', + 'GuzzleHttp\\Psr7\\StreamWrapper' => $vendorDir . '/guzzlehttp/psr7/src/StreamWrapper.php', + 'GuzzleHttp\\Psr7\\UploadedFile' => $vendorDir . '/guzzlehttp/psr7/src/UploadedFile.php', + 'GuzzleHttp\\Psr7\\Uri' => $vendorDir . '/guzzlehttp/psr7/src/Uri.php', + 'GuzzleHttp\\Psr7\\UriNormalizer' => $vendorDir . '/guzzlehttp/psr7/src/UriNormalizer.php', + 'GuzzleHttp\\Psr7\\UriResolver' => $vendorDir . '/guzzlehttp/psr7/src/UriResolver.php', + 'GuzzleHttp\\Psr7\\Utils' => $vendorDir . '/guzzlehttp/psr7/src/Utils.php', + 'GuzzleHttp\\RedirectMiddleware' => $vendorDir . '/guzzlehttp/guzzle/src/RedirectMiddleware.php', + 'GuzzleHttp\\RequestOptions' => $vendorDir . '/guzzlehttp/guzzle/src/RequestOptions.php', + 'GuzzleHttp\\RetryMiddleware' => $vendorDir . '/guzzlehttp/guzzle/src/RetryMiddleware.php', + 'GuzzleHttp\\TransferStats' => $vendorDir . '/guzzlehttp/guzzle/src/TransferStats.php', + 'GuzzleHttp\\UriTemplate' => $vendorDir . '/guzzlehttp/guzzle/src/UriTemplate.php', + 'GuzzleHttp\\Utils' => $vendorDir . '/guzzlehttp/guzzle/src/Utils.php', + 'HTML5' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PH5P.php', + 'HTML5TreeConstructer' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PH5P.php', + 'HTMLPurifier' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier.php', + 'HTMLPurifier_AttrCollections' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrCollections.php', + 'HTMLPurifier_AttrDef' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef.php', + 'HTMLPurifier_AttrDef_CSS' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS.php', + 'HTMLPurifier_AttrDef_CSS_AlphaValue' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/AlphaValue.php', + 'HTMLPurifier_AttrDef_CSS_Background' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Background.php', + 'HTMLPurifier_AttrDef_CSS_BackgroundPosition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/BackgroundPosition.php', + 'HTMLPurifier_AttrDef_CSS_Border' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Border.php', + 'HTMLPurifier_AttrDef_CSS_Color' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Color.php', + 'HTMLPurifier_AttrDef_CSS_Composite' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Composite.php', + 'HTMLPurifier_AttrDef_CSS_DenyElementDecorator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/DenyElementDecorator.php', + 'HTMLPurifier_AttrDef_CSS_Filter' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Filter.php', + 'HTMLPurifier_AttrDef_CSS_Font' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Font.php', + 'HTMLPurifier_AttrDef_CSS_FontFamily' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/FontFamily.php', + 'HTMLPurifier_AttrDef_CSS_ImportantDecorator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/ImportantDecorator.php', + 'HTMLPurifier_AttrDef_CSS_Length' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Length.php', + 'HTMLPurifier_AttrDef_CSS_ListStyle' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/ListStyle.php', + 'HTMLPurifier_AttrDef_CSS_Multiple' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Multiple.php', + 'HTMLPurifier_AttrDef_CSS_Number' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Number.php', + 'HTMLPurifier_AttrDef_CSS_Percentage' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Percentage.php', + 'HTMLPurifier_AttrDef_CSS_TextDecoration' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/TextDecoration.php', + 'HTMLPurifier_AttrDef_CSS_URI' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/URI.php', + 'HTMLPurifier_AttrDef_Enum' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Enum.php', + 'HTMLPurifier_AttrDef_HTML_Bool' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Bool.php', + 'HTMLPurifier_AttrDef_HTML_Class' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Class.php', + 'HTMLPurifier_AttrDef_HTML_Color' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Color.php', + 'HTMLPurifier_AttrDef_HTML_FrameTarget' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/FrameTarget.php', + 'HTMLPurifier_AttrDef_HTML_ID' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/ID.php', + 'HTMLPurifier_AttrDef_HTML_Length' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Length.php', + 'HTMLPurifier_AttrDef_HTML_LinkTypes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/LinkTypes.php', + 'HTMLPurifier_AttrDef_HTML_MultiLength' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/MultiLength.php', + 'HTMLPurifier_AttrDef_HTML_Nmtokens' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Nmtokens.php', + 'HTMLPurifier_AttrDef_HTML_Pixels' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Pixels.php', + 'HTMLPurifier_AttrDef_Integer' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Integer.php', + 'HTMLPurifier_AttrDef_Lang' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Lang.php', + 'HTMLPurifier_AttrDef_Switch' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Switch.php', + 'HTMLPurifier_AttrDef_Text' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Text.php', + 'HTMLPurifier_AttrDef_URI' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI.php', + 'HTMLPurifier_AttrDef_URI_Email' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/Email.php', + 'HTMLPurifier_AttrDef_URI_Email_SimpleCheck' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/Email/SimpleCheck.php', + 'HTMLPurifier_AttrDef_URI_Host' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/Host.php', + 'HTMLPurifier_AttrDef_URI_IPv4' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/IPv4.php', + 'HTMLPurifier_AttrDef_URI_IPv6' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/IPv6.php', + 'HTMLPurifier_AttrTransform' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform.php', + 'HTMLPurifier_AttrTransform_Background' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Background.php', + 'HTMLPurifier_AttrTransform_BdoDir' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/BdoDir.php', + 'HTMLPurifier_AttrTransform_BgColor' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/BgColor.php', + 'HTMLPurifier_AttrTransform_BoolToCSS' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/BoolToCSS.php', + 'HTMLPurifier_AttrTransform_Border' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Border.php', + 'HTMLPurifier_AttrTransform_EnumToCSS' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/EnumToCSS.php', + 'HTMLPurifier_AttrTransform_ImgRequired' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/ImgRequired.php', + 'HTMLPurifier_AttrTransform_ImgSpace' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/ImgSpace.php', + 'HTMLPurifier_AttrTransform_Input' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Input.php', + 'HTMLPurifier_AttrTransform_Lang' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Lang.php', + 'HTMLPurifier_AttrTransform_Length' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Length.php', + 'HTMLPurifier_AttrTransform_Name' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Name.php', + 'HTMLPurifier_AttrTransform_NameSync' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/NameSync.php', + 'HTMLPurifier_AttrTransform_Nofollow' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Nofollow.php', + 'HTMLPurifier_AttrTransform_SafeEmbed' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/SafeEmbed.php', + 'HTMLPurifier_AttrTransform_SafeObject' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/SafeObject.php', + 'HTMLPurifier_AttrTransform_SafeParam' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/SafeParam.php', + 'HTMLPurifier_AttrTransform_ScriptRequired' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/ScriptRequired.php', + 'HTMLPurifier_AttrTransform_Textarea' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Textarea.php', + 'HTMLPurifier_AttrTypes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTypes.php', + 'HTMLPurifier_AttrValidator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrValidator.php', + 'HTMLPurifier_Bootstrap' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Bootstrap.php', + 'HTMLPurifier_CSSDefinition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/CSSDefinition.php', + 'HTMLPurifier_ChildDef' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef.php', + 'HTMLPurifier_ChildDef_Chameleon' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Chameleon.php', + 'HTMLPurifier_ChildDef_Custom' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Custom.php', + 'HTMLPurifier_ChildDef_Empty' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Empty.php', + 'HTMLPurifier_ChildDef_Optional' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Optional.php', + 'HTMLPurifier_ChildDef_Required' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Required.php', + 'HTMLPurifier_ChildDef_StrictBlockquote' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/StrictBlockquote.php', + 'HTMLPurifier_ChildDef_Table' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Table.php', + 'HTMLPurifier_Config' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Config.php', + 'HTMLPurifier_ConfigSchema' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema.php', + 'HTMLPurifier_ConfigSchema_Builder_ConfigSchema' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Builder/ConfigSchema.php', + 'HTMLPurifier_ConfigSchema_Builder_Xml' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Builder/Xml.php', + 'HTMLPurifier_ConfigSchema_Exception' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Exception.php', + 'HTMLPurifier_ConfigSchema_Interchange' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Interchange.php', + 'HTMLPurifier_ConfigSchema_InterchangeBuilder' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/InterchangeBuilder.php', + 'HTMLPurifier_ConfigSchema_Interchange_Directive' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Interchange/Directive.php', + 'HTMLPurifier_ConfigSchema_Interchange_Id' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Interchange/Id.php', + 'HTMLPurifier_ConfigSchema_Validator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Validator.php', + 'HTMLPurifier_ConfigSchema_ValidatorAtom' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/ValidatorAtom.php', + 'HTMLPurifier_ContentSets' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ContentSets.php', + 'HTMLPurifier_Context' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Context.php', + 'HTMLPurifier_Definition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Definition.php', + 'HTMLPurifier_DefinitionCache' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache.php', + 'HTMLPurifier_DefinitionCacheFactory' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCacheFactory.php', + 'HTMLPurifier_DefinitionCache_Decorator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Decorator.php', + 'HTMLPurifier_DefinitionCache_Decorator_Cleanup' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Decorator/Cleanup.php', + 'HTMLPurifier_DefinitionCache_Decorator_Memory' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Decorator/Memory.php', + 'HTMLPurifier_DefinitionCache_Null' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Null.php', + 'HTMLPurifier_DefinitionCache_Serializer' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Serializer.php', + 'HTMLPurifier_Doctype' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Doctype.php', + 'HTMLPurifier_DoctypeRegistry' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DoctypeRegistry.php', + 'HTMLPurifier_ElementDef' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ElementDef.php', + 'HTMLPurifier_Encoder' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Encoder.php', + 'HTMLPurifier_EntityLookup' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/EntityLookup.php', + 'HTMLPurifier_EntityParser' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/EntityParser.php', + 'HTMLPurifier_ErrorCollector' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ErrorCollector.php', + 'HTMLPurifier_ErrorStruct' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ErrorStruct.php', + 'HTMLPurifier_Exception' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Exception.php', + 'HTMLPurifier_Filter' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Filter.php', + 'HTMLPurifier_Filter_ExtractStyleBlocks' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Filter/ExtractStyleBlocks.php', + 'HTMLPurifier_Filter_YouTube' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Filter/YouTube.php', + 'HTMLPurifier_Generator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Generator.php', + 'HTMLPurifier_HTMLDefinition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLDefinition.php', + 'HTMLPurifier_HTMLModule' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule.php', + 'HTMLPurifier_HTMLModuleManager' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModuleManager.php', + 'HTMLPurifier_HTMLModule_Bdo' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Bdo.php', + 'HTMLPurifier_HTMLModule_CommonAttributes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/CommonAttributes.php', + 'HTMLPurifier_HTMLModule_Edit' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Edit.php', + 'HTMLPurifier_HTMLModule_Forms' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Forms.php', + 'HTMLPurifier_HTMLModule_Hypertext' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Hypertext.php', + 'HTMLPurifier_HTMLModule_Image' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Image.php', + 'HTMLPurifier_HTMLModule_Legacy' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Legacy.php', + 'HTMLPurifier_HTMLModule_List' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/List.php', + 'HTMLPurifier_HTMLModule_Name' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Name.php', + 'HTMLPurifier_HTMLModule_Nofollow' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Nofollow.php', + 'HTMLPurifier_HTMLModule_NonXMLCommonAttributes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/NonXMLCommonAttributes.php', + 'HTMLPurifier_HTMLModule_Object' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Object.php', + 'HTMLPurifier_HTMLModule_Presentation' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Presentation.php', + 'HTMLPurifier_HTMLModule_Proprietary' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Proprietary.php', + 'HTMLPurifier_HTMLModule_Ruby' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Ruby.php', + 'HTMLPurifier_HTMLModule_SafeEmbed' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/SafeEmbed.php', + 'HTMLPurifier_HTMLModule_SafeObject' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/SafeObject.php', + 'HTMLPurifier_HTMLModule_Scripting' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Scripting.php', + 'HTMLPurifier_HTMLModule_StyleAttribute' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/StyleAttribute.php', + 'HTMLPurifier_HTMLModule_Tables' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tables.php', + 'HTMLPurifier_HTMLModule_Target' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Target.php', + 'HTMLPurifier_HTMLModule_Text' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Text.php', + 'HTMLPurifier_HTMLModule_Tidy' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy.php', + 'HTMLPurifier_HTMLModule_Tidy_Name' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Name.php', + 'HTMLPurifier_HTMLModule_Tidy_Proprietary' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Proprietary.php', + 'HTMLPurifier_HTMLModule_Tidy_Strict' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Strict.php', + 'HTMLPurifier_HTMLModule_Tidy_Transitional' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Transitional.php', + 'HTMLPurifier_HTMLModule_Tidy_XHTML' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/XHTML.php', + 'HTMLPurifier_HTMLModule_Tidy_XHTMLAndHTML4' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/XHTMLAndHTML4.php', + 'HTMLPurifier_HTMLModule_XMLCommonAttributes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/XMLCommonAttributes.php', + 'HTMLPurifier_IDAccumulator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/IDAccumulator.php', + 'HTMLPurifier_Injector' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector.php', + 'HTMLPurifier_Injector_AutoParagraph' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/AutoParagraph.php', + 'HTMLPurifier_Injector_DisplayLinkURI' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/DisplayLinkURI.php', + 'HTMLPurifier_Injector_Linkify' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/Linkify.php', + 'HTMLPurifier_Injector_PurifierLinkify' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/PurifierLinkify.php', + 'HTMLPurifier_Injector_RemoveEmpty' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/RemoveEmpty.php', + 'HTMLPurifier_Injector_RemoveSpansWithoutAttributes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/RemoveSpansWithoutAttributes.php', + 'HTMLPurifier_Injector_SafeObject' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/SafeObject.php', + 'HTMLPurifier_Language' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Language.php', + 'HTMLPurifier_LanguageFactory' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/LanguageFactory.php', + 'HTMLPurifier_Language_en_x_test' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Language/classes/en-x-test.php', + 'HTMLPurifier_Length' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Length.php', + 'HTMLPurifier_Lexer' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer.php', + 'HTMLPurifier_Lexer_DOMLex' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/DOMLex.php', + 'HTMLPurifier_Lexer_DirectLex' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/DirectLex.php', + 'HTMLPurifier_Lexer_PEARSax3' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PEARSax3.php', + 'HTMLPurifier_Lexer_PH5P' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PH5P.php', + 'HTMLPurifier_PercentEncoder' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/PercentEncoder.php', + 'HTMLPurifier_Printer' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer.php', + 'HTMLPurifier_Printer_CSSDefinition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/CSSDefinition.php', + 'HTMLPurifier_Printer_ConfigForm' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_ConfigForm_NullDecorator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_ConfigForm_bool' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_ConfigForm_default' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_HTMLDefinition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/HTMLDefinition.php', + 'HTMLPurifier_PropertyList' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/PropertyList.php', + 'HTMLPurifier_PropertyListIterator' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/PropertyListIterator.php', + 'HTMLPurifier_Strategy' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy.php', + 'HTMLPurifier_Strategy_Composite' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/Composite.php', + 'HTMLPurifier_Strategy_Core' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/Core.php', + 'HTMLPurifier_Strategy_FixNesting' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/FixNesting.php', + 'HTMLPurifier_Strategy_MakeWellFormed' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/MakeWellFormed.php', + 'HTMLPurifier_Strategy_RemoveForeignElements' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/RemoveForeignElements.php', + 'HTMLPurifier_Strategy_ValidateAttributes' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/ValidateAttributes.php', + 'HTMLPurifier_StringHash' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/StringHash.php', + 'HTMLPurifier_StringHashParser' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/StringHashParser.php', + 'HTMLPurifier_TagTransform' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TagTransform.php', + 'HTMLPurifier_TagTransform_Font' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TagTransform/Font.php', + 'HTMLPurifier_TagTransform_Simple' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TagTransform/Simple.php', + 'HTMLPurifier_Token' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token.php', + 'HTMLPurifier_TokenFactory' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TokenFactory.php', + 'HTMLPurifier_Token_Comment' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Comment.php', + 'HTMLPurifier_Token_Empty' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Empty.php', + 'HTMLPurifier_Token_End' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/End.php', + 'HTMLPurifier_Token_Start' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Start.php', + 'HTMLPurifier_Token_Tag' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Tag.php', + 'HTMLPurifier_Token_Text' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Text.php', + 'HTMLPurifier_URI' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URI.php', + 'HTMLPurifier_URIDefinition' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIDefinition.php', + 'HTMLPurifier_URIFilter' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter.php', + 'HTMLPurifier_URIFilter_DisableExternal' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/DisableExternal.php', + 'HTMLPurifier_URIFilter_DisableExternalResources' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/DisableExternalResources.php', + 'HTMLPurifier_URIFilter_DisableResources' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/DisableResources.php', + 'HTMLPurifier_URIFilter_HostBlacklist' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/HostBlacklist.php', + 'HTMLPurifier_URIFilter_MakeAbsolute' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/MakeAbsolute.php', + 'HTMLPurifier_URIFilter_Munge' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/Munge.php', + 'HTMLPurifier_URIParser' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIParser.php', + 'HTMLPurifier_URIScheme' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme.php', + 'HTMLPurifier_URISchemeRegistry' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URISchemeRegistry.php', + 'HTMLPurifier_URIScheme_data' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/data.php', + 'HTMLPurifier_URIScheme_file' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/file.php', + 'HTMLPurifier_URIScheme_ftp' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/ftp.php', + 'HTMLPurifier_URIScheme_http' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/http.php', + 'HTMLPurifier_URIScheme_https' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/https.php', + 'HTMLPurifier_URIScheme_mailto' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/mailto.php', + 'HTMLPurifier_URIScheme_news' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/news.php', + 'HTMLPurifier_URIScheme_nntp' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/nntp.php', + 'HTMLPurifier_UnitConverter' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/UnitConverter.php', + 'HTMLPurifier_VarParser' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParser.php', + 'HTMLPurifier_VarParserException' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParserException.php', + 'HTMLPurifier_VarParser_Flexible' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParser/Flexible.php', + 'HTMLPurifier_VarParser_Native' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParser/Native.php', + 'HashUrl' => $baseDir . '/admin/survey/classes/class.HashUrl.php', + 'HeatmapLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/HeatmapLatex.php', + 'Help' => $baseDir . '/admin/survey/Help.php', + 'HierarhijaAnalysis' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaAnalysisClass.php', + 'Hierarhija\\Ajax\\AjaxHierarhija' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxHierarhijaClass.php', + 'Hierarhija\\Ajax\\AjaxHierarhijaDostopUporabnikovClass' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxHierarhijaDostopUporabnikovClass.php', + 'Hierarhija\\Ajax\\AjaxSuperSifra' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxSuperSifraClass.php', + 'Hierarhija\\Ajax\\AjaxUporabniki' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxUporabnikiClass.php', + 'Hierarhija\\Hierarhija' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaClass.php', + 'Hierarhija\\HierarhijaAjax' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaAjaxClass.php', + 'Hierarhija\\HierarhijaHelper' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaHelper.php', + 'Hierarhija\\HierarhijaIzvoz' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaIzvoz.php', + 'Hierarhija\\HierarhijaIzvozAnalize' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaIzvozAnalize.php', + 'Hierarhija\\HierarhijaKopiranjeClass' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaKopiranjeClass.php', + 'Hierarhija\\HierarhijaPorocilaClass' => $baseDir . '/admin/survey/modules/mod_hierarhija/class/HierarhijaPorocilaClass.php', + 'Hierarhija\\Model\\HierarhijaOnlyQuery' => $baseDir . '/admin/survey/modules/mod_hierarhija/model/HierarhijaOnlyQuery.php', + 'Hierarhija\\Model\\HierarhijaQuery' => $baseDir . '/admin/survey/modules/mod_hierarhija/model/HierarhijaQuery.php', + 'Jose\\Component\\Core\\Algorithm' => $vendorDir . '/web-token/jwt-core/Algorithm.php', + 'Jose\\Component\\Core\\AlgorithmManager' => $vendorDir . '/web-token/jwt-core/AlgorithmManager.php', + 'Jose\\Component\\Core\\AlgorithmManagerFactory' => $vendorDir . '/web-token/jwt-core/AlgorithmManagerFactory.php', + 'Jose\\Component\\Core\\Converter\\JsonConverter' => $vendorDir . '/web-token/jwt-core/Converter/JsonConverter.php', + 'Jose\\Component\\Core\\Converter\\StandardConverter' => $vendorDir . '/web-token/jwt-core/Converter/StandardConverter.php', + 'Jose\\Component\\Core\\JWK' => $vendorDir . '/web-token/jwt-core/JWK.php', + 'Jose\\Component\\Core\\JWKSet' => $vendorDir . '/web-token/jwt-core/JWKSet.php', + 'Jose\\Component\\Core\\JWT' => $vendorDir . '/web-token/jwt-core/JWT.php', + 'Jose\\Component\\Core\\Util\\BigInteger' => $vendorDir . '/web-token/jwt-core/Util/BigInteger.php', + 'Jose\\Component\\Core\\Util\\ECKey' => $vendorDir . '/web-token/jwt-core/Util/ECKey.php', + 'Jose\\Component\\Core\\Util\\ECSignature' => $vendorDir . '/web-token/jwt-core/Util/ECSignature.php', + 'Jose\\Component\\Core\\Util\\Ecc\\Curve' => $vendorDir . '/web-token/jwt-util-ecc/Curve.php', + 'Jose\\Component\\Core\\Util\\Ecc\\Math' => $vendorDir . '/web-token/jwt-util-ecc/Math.php', + 'Jose\\Component\\Core\\Util\\Ecc\\ModularArithmetic' => $vendorDir . '/web-token/jwt-util-ecc/ModularArithmetic.php', + 'Jose\\Component\\Core\\Util\\Ecc\\NistCurve' => $vendorDir . '/web-token/jwt-util-ecc/NistCurve.php', + 'Jose\\Component\\Core\\Util\\Ecc\\Point' => $vendorDir . '/web-token/jwt-util-ecc/Point.php', + 'Jose\\Component\\Core\\Util\\Ecc\\PrivateKey' => $vendorDir . '/web-token/jwt-util-ecc/PrivateKey.php', + 'Jose\\Component\\Core\\Util\\Ecc\\PublicKey' => $vendorDir . '/web-token/jwt-util-ecc/PublicKey.php', + 'Jose\\Component\\Core\\Util\\Hash' => $vendorDir . '/web-token/jwt-core/Util/Hash.php', + 'Jose\\Component\\Core\\Util\\JsonConverter' => $vendorDir . '/web-token/jwt-core/Util/JsonConverter.php', + 'Jose\\Component\\Core\\Util\\KeyChecker' => $vendorDir . '/web-token/jwt-core/Util/KeyChecker.php', + 'Jose\\Component\\Core\\Util\\RSAKey' => $vendorDir . '/web-token/jwt-core/Util/RSAKey.php', + 'Jose\\Component\\KeyManagement\\JKUFactory' => $vendorDir . '/web-token/jwt-key-mgmt/JKUFactory.php', + 'Jose\\Component\\KeyManagement\\JWKFactory' => $vendorDir . '/web-token/jwt-key-mgmt/JWKFactory.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\AlgorithmAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/AlgorithmAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\KeyAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/KeyAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\KeyAnalyzerManager' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/KeyAnalyzerManager.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\KeyIdentifierAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/KeyIdentifierAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\Message' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/Message.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\MessageBag' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/MessageBag.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\NoneAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/NoneAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\OctAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/OctAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\RsaAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/RsaAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\UsageAnalyzer' => $vendorDir . '/web-token/jwt-key-mgmt/KeyAnalyzer/UsageAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyConverter\\ECKey' => $vendorDir . '/web-token/jwt-key-mgmt/KeyConverter/ECKey.php', + 'Jose\\Component\\KeyManagement\\KeyConverter\\KeyConverter' => $vendorDir . '/web-token/jwt-key-mgmt/KeyConverter/KeyConverter.php', + 'Jose\\Component\\KeyManagement\\KeyConverter\\RSAKey' => $vendorDir . '/web-token/jwt-key-mgmt/KeyConverter/RSAKey.php', + 'Jose\\Component\\KeyManagement\\UrlKeySetFactory' => $vendorDir . '/web-token/jwt-key-mgmt/UrlKeySetFactory.php', + 'Jose\\Component\\KeyManagement\\X5UFactory' => $vendorDir . '/web-token/jwt-key-mgmt/X5UFactory.php', + 'Jose\\Component\\Signature\\Algorithm\\ECDSA' => $vendorDir . '/web-token/jwt-signature-algorithm-ecdsa/ECDSA.php', + 'Jose\\Component\\Signature\\Algorithm\\ES256' => $vendorDir . '/web-token/jwt-signature-algorithm-ecdsa/ES256.php', + 'Jose\\Component\\Signature\\Algorithm\\ES384' => $vendorDir . '/web-token/jwt-signature-algorithm-ecdsa/ES384.php', + 'Jose\\Component\\Signature\\Algorithm\\ES512' => $vendorDir . '/web-token/jwt-signature-algorithm-ecdsa/ES512.php', + 'Jose\\Component\\Signature\\Algorithm\\EdDSA' => $vendorDir . '/web-token/jwt-signature-algorithm-eddsa/EdDSA.php', + 'Jose\\Component\\Signature\\Algorithm\\HMAC' => $vendorDir . '/web-token/jwt-signature-algorithm-hmac/HMAC.php', + 'Jose\\Component\\Signature\\Algorithm\\HS256' => $vendorDir . '/web-token/jwt-signature-algorithm-hmac/HS256.php', + 'Jose\\Component\\Signature\\Algorithm\\HS384' => $vendorDir . '/web-token/jwt-signature-algorithm-hmac/HS384.php', + 'Jose\\Component\\Signature\\Algorithm\\HS512' => $vendorDir . '/web-token/jwt-signature-algorithm-hmac/HS512.php', + 'Jose\\Component\\Signature\\Algorithm\\None' => $vendorDir . '/web-token/jwt-signature-algorithm-none/None.php', + 'Jose\\Component\\Signature\\Algorithm\\PS256' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/PS256.php', + 'Jose\\Component\\Signature\\Algorithm\\PS384' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/PS384.php', + 'Jose\\Component\\Signature\\Algorithm\\PS512' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/PS512.php', + 'Jose\\Component\\Signature\\Algorithm\\RS256' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/RS256.php', + 'Jose\\Component\\Signature\\Algorithm\\RS384' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/RS384.php', + 'Jose\\Component\\Signature\\Algorithm\\RS512' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/RS512.php', + 'Jose\\Component\\Signature\\Algorithm\\RSA' => $vendorDir . '/web-token/jwt-signature-algorithm-rsa/RSA.php', + 'Jose\\Component\\Signature\\Algorithm\\SignatureAlgorithm' => $vendorDir . '/web-token/jwt-signature/Algorithm/SignatureAlgorithm.php', + 'Jose\\Component\\Signature\\JWS' => $vendorDir . '/web-token/jwt-signature/JWS.php', + 'Jose\\Component\\Signature\\JWSBuilder' => $vendorDir . '/web-token/jwt-signature/JWSBuilder.php', + 'Jose\\Component\\Signature\\JWSBuilderFactory' => $vendorDir . '/web-token/jwt-signature/JWSBuilderFactory.php', + 'Jose\\Component\\Signature\\JWSLoader' => $vendorDir . '/web-token/jwt-signature/JWSLoader.php', + 'Jose\\Component\\Signature\\JWSLoaderFactory' => $vendorDir . '/web-token/jwt-signature/JWSLoaderFactory.php', + 'Jose\\Component\\Signature\\JWSTokenSupport' => $vendorDir . '/web-token/jwt-signature/JWSTokenSupport.php', + 'Jose\\Component\\Signature\\JWSVerifier' => $vendorDir . '/web-token/jwt-signature/JWSVerifier.php', + 'Jose\\Component\\Signature\\JWSVerifierFactory' => $vendorDir . '/web-token/jwt-signature/JWSVerifierFactory.php', + 'Jose\\Component\\Signature\\Serializer\\CompactSerializer' => $vendorDir . '/web-token/jwt-signature/Serializer/CompactSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JSONFlattenedSerializer' => $vendorDir . '/web-token/jwt-signature/Serializer/JSONFlattenedSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JSONGeneralSerializer' => $vendorDir . '/web-token/jwt-signature/Serializer/JSONGeneralSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JWSSerializer' => $vendorDir . '/web-token/jwt-signature/Serializer/JWSSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JWSSerializerManager' => $vendorDir . '/web-token/jwt-signature/Serializer/JWSSerializerManager.php', + 'Jose\\Component\\Signature\\Serializer\\JWSSerializerManagerFactory' => $vendorDir . '/web-token/jwt-signature/Serializer/JWSSerializerManagerFactory.php', + 'Jose\\Component\\Signature\\Serializer\\Serializer' => $vendorDir . '/web-token/jwt-signature/Serializer/Serializer.php', + 'Jose\\Component\\Signature\\Signature' => $vendorDir . '/web-token/jwt-signature/Signature.php', + 'Jose\\Component\\Signature\\Util\\RSA' => $vendorDir . '/web-token/jwt-signature/Util/RSA.php', + 'KalkulacijaLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/KalkulacijaLatex.php', + 'KvotaLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/KvotaLatex.php', + 'LatexAnalysis' => $baseDir . '/admin/survey/export/latexclasses/class.LatexAnalysis.php', + 'LatexAnalysisElement' => $baseDir . '/admin/survey/export/latexclasses/class.LatexAnalysisElement.php', + 'LatexDocument' => $baseDir . '/admin/survey/export/latexclasses/class.LatexDocument.php', + 'LatexEditsAnalysis' => $baseDir . '/admin/survey/export/latexclasses/class.LatexEditsAnalysis.php', + 'LatexGDPR' => $baseDir . '/admin/survey/export/latexclasses/class.LatexGDPR.php', + 'LatexStatus' => $baseDir . '/admin/survey/export/latexclasses/class.LatexStatus.php', + 'LatexSurvey' => $baseDir . '/admin/survey/export/latexclasses/class.LatexSurvey.php', + 'LatexSurveyElement' => $baseDir . '/admin/survey/export/latexclasses/class.LatexSurveyElement.php', + 'Library' => $baseDir . '/admin/survey/classes/class.Library.php', + 'LokacijaLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/LokacijaLatex.php', + 'MAZA' => $baseDir . '/admin/survey/modules/mod_MAZA/class.MAZA.php', + 'MAZAExport' => $baseDir . '/admin/survey/modules/mod_MAZA/class.MAZAExport.php', + 'MailAdapter' => $baseDir . '/admin/survey/classes/objects/obj.MailAdapter.php', + 'Mailer' => $baseDir . '/admin/survey/modules/Evalvacija/PDF_mailer/mailer.php', + 'MaxMind\\Db\\Reader' => $vendorDir . '/maxmind-db/reader/src/MaxMind/Db/Reader.php', + 'MaxMind\\Db\\Reader\\Decoder' => $vendorDir . '/maxmind-db/reader/src/MaxMind/Db/Reader/Decoder.php', + 'MaxMind\\Db\\Reader\\InvalidDatabaseException' => $vendorDir . '/maxmind-db/reader/src/MaxMind/Db/Reader/InvalidDatabaseException.php', + 'MaxMind\\Db\\Reader\\Metadata' => $vendorDir . '/maxmind-db/reader/src/MaxMind/Db/Reader/Metadata.php', + 'MaxMind\\Db\\Reader\\Util' => $vendorDir . '/maxmind-db/reader/src/MaxMind/Db/Reader/Util.php', + 'MaxMind\\Exception\\AuthenticationException' => $vendorDir . '/maxmind/web-service-common/src/Exception/AuthenticationException.php', + 'MaxMind\\Exception\\HttpException' => $vendorDir . '/maxmind/web-service-common/src/Exception/HttpException.php', + 'MaxMind\\Exception\\InsufficientFundsException' => $vendorDir . '/maxmind/web-service-common/src/Exception/InsufficientFundsException.php', + 'MaxMind\\Exception\\InvalidInputException' => $vendorDir . '/maxmind/web-service-common/src/Exception/InvalidInputException.php', + 'MaxMind\\Exception\\InvalidRequestException' => $vendorDir . '/maxmind/web-service-common/src/Exception/InvalidRequestException.php', + 'MaxMind\\Exception\\IpAddressNotFoundException' => $vendorDir . '/maxmind/web-service-common/src/Exception/IpAddressNotFoundException.php', + 'MaxMind\\Exception\\PermissionRequiredException' => $vendorDir . '/maxmind/web-service-common/src/Exception/PermissionRequiredException.php', + 'MaxMind\\Exception\\WebServiceException' => $vendorDir . '/maxmind/web-service-common/src/Exception/WebServiceException.php', + 'MaxMind\\WebService\\Client' => $vendorDir . '/maxmind/web-service-common/src/WebService/Client.php', + 'MaxMind\\WebService\\Http\\CurlRequest' => $vendorDir . '/maxmind/web-service-common/src/WebService/Http/CurlRequest.php', + 'MaxMind\\WebService\\Http\\Request' => $vendorDir . '/maxmind/web-service-common/src/WebService/Http/Request.php', + 'MaxMind\\WebService\\Http\\RequestFactory' => $vendorDir . '/maxmind/web-service-common/src/WebService/Http/RequestFactory.php', + 'Minishlink\\WebPush\\Encryption' => $vendorDir . '/minishlink/web-push/src/Encryption.php', + 'Minishlink\\WebPush\\MessageSentReport' => $vendorDir . '/minishlink/web-push/src/MessageSentReport.php', + 'Minishlink\\WebPush\\Notification' => $vendorDir . '/minishlink/web-push/src/Notification.php', + 'Minishlink\\WebPush\\Subscription' => $vendorDir . '/minishlink/web-push/src/Subscription.php', + 'Minishlink\\WebPush\\SubscriptionInterface' => $vendorDir . '/minishlink/web-push/src/SubscriptionInterface.php', + 'Minishlink\\WebPush\\Utils' => $vendorDir . '/minishlink/web-push/src/Utils.php', + 'Minishlink\\WebPush\\VAPID' => $vendorDir . '/minishlink/web-push/src/VAPID.php', + 'Minishlink\\WebPush\\WebPush' => $vendorDir . '/minishlink/web-push/src/WebPush.php', + 'MultiGridLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/MultiGridLatex.php', + 'MultiGridXml' => $baseDir . '/admin/survey/export/xmlClasses/Vprasanja/MultiGridXml.php', + 'MustangWord' => $baseDir . '/admin/survey/classes/class.SurveyLanguageTechnology.php', + 'MyHorBar' => $baseDir . '/admin/survey/pChart/classes/class.MyHorBar.php', + 'NagovorLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/NagovorLatex.php', + 'NewSurvey' => $baseDir . '/admin/survey/classes/class.NewSurvey.php', + 'Normalizer' => $vendorDir . '/symfony/polyfill-intl-normalizer/Resources/stubs/Normalizer.php', + 'Notifications' => $baseDir . '/admin/survey/classes/class.Notifications.php', + 'PHPMailer\\PHPMailer\\Exception' => $vendorDir . '/phpmailer/phpmailer/src/Exception.php', + 'PHPMailer\\PHPMailer\\OAuth' => $vendorDir . '/phpmailer/phpmailer/src/OAuth.php', + 'PHPMailer\\PHPMailer\\PHPMailer' => $vendorDir . '/phpmailer/phpmailer/src/PHPMailer.php', + 'PHPMailer\\PHPMailer\\POP3' => $vendorDir . '/phpmailer/phpmailer/src/POP3.php', + 'PHPMailer\\PHPMailer\\SMTP' => $vendorDir . '/phpmailer/phpmailer/src/SMTP.php', + 'PayPalCheckoutSdk\\Core\\AccessToken' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessToken.php', + 'PayPalCheckoutSdk\\Core\\AccessTokenRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessTokenRequest.php', + 'PayPalCheckoutSdk\\Core\\AuthorizationInjector' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AuthorizationInjector.php', + 'PayPalCheckoutSdk\\Core\\FPTIInstrumentationInjector' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/FPTIInstrumentationInjector.php', + 'PayPalCheckoutSdk\\Core\\GzipInjector' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/GzipInjector.php', + 'PayPalCheckoutSdk\\Core\\PayPalEnvironment' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalEnvironment.php', + 'PayPalCheckoutSdk\\Core\\PayPalHttpClient' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalHttpClient.php', + 'PayPalCheckoutSdk\\Core\\ProductionEnvironment' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/ProductionEnvironment.php', + 'PayPalCheckoutSdk\\Core\\RefreshTokenRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/RefreshTokenRequest.php', + 'PayPalCheckoutSdk\\Core\\SandboxEnvironment' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/SandboxEnvironment.php', + 'PayPalCheckoutSdk\\Core\\UserAgent' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/UserAgent.php', + 'PayPalCheckoutSdk\\Core\\Version' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/Version.php', + 'PayPalCheckoutSdk\\Orders\\OrdersAuthorizeRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersAuthorizeRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersCaptureRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCaptureRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersCreateRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCreateRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersGetRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersGetRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersPatchRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersPatchRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersValidateRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersValidateRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsCaptureRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsCaptureRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsGetRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsGetRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsReauthorizeRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsReauthorizeRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsVoidRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsVoidRequest.php', + 'PayPalCheckoutSdk\\Payments\\CapturesGetRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesGetRequest.php', + 'PayPalCheckoutSdk\\Payments\\CapturesRefundRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesRefundRequest.php', + 'PayPalCheckoutSdk\\Payments\\RefundsGetRequest' => $vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/RefundsGetRequest.php', + 'PayPalHttp\\Curl' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Curl.php', + 'PayPalHttp\\Encoder' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Encoder.php', + 'PayPalHttp\\Environment' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Environment.php', + 'PayPalHttp\\HttpClient' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/HttpClient.php', + 'PayPalHttp\\HttpException' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/HttpException.php', + 'PayPalHttp\\HttpRequest' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/HttpRequest.php', + 'PayPalHttp\\HttpResponse' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/HttpResponse.php', + 'PayPalHttp\\IOException' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/IOException.php', + 'PayPalHttp\\Injector' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Injector.php', + 'PayPalHttp\\Serializer' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Serializer.php', + 'PayPalHttp\\Serializer\\Form' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Form.php', + 'PayPalHttp\\Serializer\\FormPart' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/FormPart.php', + 'PayPalHttp\\Serializer\\Json' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Json.php', + 'PayPalHttp\\Serializer\\Multipart' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Multipart.php', + 'PayPalHttp\\Serializer\\Text' => $vendorDir . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Text.php', + 'PopUp' => $baseDir . '/admin/survey/classes/objects/obj.PopUp.php', + 'PopUpButton' => $baseDir . '/admin/survey/classes/objects/obj.PopUpButton.php', + 'PopUpCancelButton' => $baseDir . '/admin/survey/classes/objects/obj.PopUpCancelButton.php', + 'Prevajanje' => $baseDir . '/admin/survey/classes/class.Prevajanje.php', + 'Psr\\Http\\Message\\MessageInterface' => $vendorDir . '/psr/http-message/src/MessageInterface.php', + 'Psr\\Http\\Message\\RequestInterface' => $vendorDir . '/psr/http-message/src/RequestInterface.php', + 'Psr\\Http\\Message\\ResponseInterface' => $vendorDir . '/psr/http-message/src/ResponseInterface.php', + 'Psr\\Http\\Message\\ServerRequestInterface' => $vendorDir . '/psr/http-message/src/ServerRequestInterface.php', + 'Psr\\Http\\Message\\StreamInterface' => $vendorDir . '/psr/http-message/src/StreamInterface.php', + 'Psr\\Http\\Message\\UploadedFileInterface' => $vendorDir . '/psr/http-message/src/UploadedFileInterface.php', + 'Psr\\Http\\Message\\UriInterface' => $vendorDir . '/psr/http-message/src/UriInterface.php', + 'Purifier' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/Purifier.php', + 'RadioCheckboxSelectLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/RadioCheckboxSelectLatex.php', + 'RadioXml' => $baseDir . '/admin/survey/export/xmlClasses/Vprasanja/RadioXml.php', + 'RazvrscanjeLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/RazvrscanjeLatex.php', + 'RecodeValues' => $baseDir . '/admin/survey/classes/class.RecodeValues.php', + 'SNImenaLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/SNImena.php', + 'Sample\\AuthorizeIntentExamples\\AuthorizeOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/AuthorizeOrder.php', + 'Sample\\AuthorizeIntentExamples\\CaptureOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CaptureOrder.php', + 'Sample\\AuthorizeIntentExamples\\CreateOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CreateOrder.php', + 'Sample\\CaptureIntentExamples\\CaptureOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CaptureOrder.php', + 'Sample\\CaptureIntentExamples\\CreateOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CreateOrder.php', + 'Sample\\GetOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/GetOrder.php', + 'Sample\\PatchOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/PatchOrder.php', + 'Sample\\PayPalClient' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/PayPalClient.php', + 'Sample\\RefundOrder' => $vendorDir . '/paypal/paypal-checkout-sdk/samples/RefundOrder.php', + 'Setting' => $baseDir . '/admin/survey/classes/class.Setting.php', + 'Sonata\\GoogleAuthenticator\\FixedBitNotation' => $vendorDir . '/sonata-project/google-authenticator/src/FixedBitNotation.php', + 'Sonata\\GoogleAuthenticator\\GoogleAuthenticator' => $vendorDir . '/sonata-project/google-authenticator/src/GoogleAuthenticator.php', + 'Sonata\\GoogleAuthenticator\\GoogleAuthenticatorInterface' => $vendorDir . '/sonata-project/google-authenticator/src/GoogleAuthenticatorInterface.php', + 'Sonata\\GoogleAuthenticator\\GoogleQrUrl' => $vendorDir . '/sonata-project/google-authenticator/src/GoogleQrUrl.php', + 'Sonata\\GoogleAuthenticator\\RuntimeException' => $vendorDir . '/sonata-project/google-authenticator/src/RuntimeException.php', + 'SpremenljivkaSkala' => $baseDir . '/admin/survey/classes/objects/obj.SpremenljivkaSkala.php', + 'SteviloLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/SteviloLatex.php', + 'SteviloXml' => $baseDir . '/admin/survey/export/xmlClasses/Vprasanja/SteviloXml.php', + 'Stripe\\Account' => $vendorDir . '/stripe/stripe-php/lib/Account.php', + 'Stripe\\AccountLink' => $vendorDir . '/stripe/stripe-php/lib/AccountLink.php', + 'Stripe\\AlipayAccount' => $vendorDir . '/stripe/stripe-php/lib/AlipayAccount.php', + 'Stripe\\ApiOperations\\All' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/All.php', + 'Stripe\\ApiOperations\\Create' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/Create.php', + 'Stripe\\ApiOperations\\Delete' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/Delete.php', + 'Stripe\\ApiOperations\\NestedResource' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/NestedResource.php', + 'Stripe\\ApiOperations\\Request' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/Request.php', + 'Stripe\\ApiOperations\\Retrieve' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/Retrieve.php', + 'Stripe\\ApiOperations\\Update' => $vendorDir . '/stripe/stripe-php/lib/ApiOperations/Update.php', + 'Stripe\\ApiRequestor' => $vendorDir . '/stripe/stripe-php/lib/ApiRequestor.php', + 'Stripe\\ApiResource' => $vendorDir . '/stripe/stripe-php/lib/ApiResource.php', + 'Stripe\\ApiResponse' => $vendorDir . '/stripe/stripe-php/lib/ApiResponse.php', + 'Stripe\\ApplePayDomain' => $vendorDir . '/stripe/stripe-php/lib/ApplePayDomain.php', + 'Stripe\\ApplicationFee' => $vendorDir . '/stripe/stripe-php/lib/ApplicationFee.php', + 'Stripe\\ApplicationFeeRefund' => $vendorDir . '/stripe/stripe-php/lib/ApplicationFeeRefund.php', + 'Stripe\\Balance' => $vendorDir . '/stripe/stripe-php/lib/Balance.php', + 'Stripe\\BalanceTransaction' => $vendorDir . '/stripe/stripe-php/lib/BalanceTransaction.php', + 'Stripe\\BankAccount' => $vendorDir . '/stripe/stripe-php/lib/BankAccount.php', + 'Stripe\\BaseStripeClient' => $vendorDir . '/stripe/stripe-php/lib/BaseStripeClient.php', + 'Stripe\\BillingPortal\\Session' => $vendorDir . '/stripe/stripe-php/lib/BillingPortal/Session.php', + 'Stripe\\BitcoinReceiver' => $vendorDir . '/stripe/stripe-php/lib/BitcoinReceiver.php', + 'Stripe\\BitcoinTransaction' => $vendorDir . '/stripe/stripe-php/lib/BitcoinTransaction.php', + 'Stripe\\Capability' => $vendorDir . '/stripe/stripe-php/lib/Capability.php', + 'Stripe\\Card' => $vendorDir . '/stripe/stripe-php/lib/Card.php', + 'Stripe\\Charge' => $vendorDir . '/stripe/stripe-php/lib/Charge.php', + 'Stripe\\Checkout\\Session' => $vendorDir . '/stripe/stripe-php/lib/Checkout/Session.php', + 'Stripe\\Collection' => $vendorDir . '/stripe/stripe-php/lib/Collection.php', + 'Stripe\\CountrySpec' => $vendorDir . '/stripe/stripe-php/lib/CountrySpec.php', + 'Stripe\\Coupon' => $vendorDir . '/stripe/stripe-php/lib/Coupon.php', + 'Stripe\\CreditNote' => $vendorDir . '/stripe/stripe-php/lib/CreditNote.php', + 'Stripe\\CreditNoteLineItem' => $vendorDir . '/stripe/stripe-php/lib/CreditNoteLineItem.php', + 'Stripe\\Customer' => $vendorDir . '/stripe/stripe-php/lib/Customer.php', + 'Stripe\\CustomerBalanceTransaction' => $vendorDir . '/stripe/stripe-php/lib/CustomerBalanceTransaction.php', + 'Stripe\\Discount' => $vendorDir . '/stripe/stripe-php/lib/Discount.php', + 'Stripe\\Dispute' => $vendorDir . '/stripe/stripe-php/lib/Dispute.php', + 'Stripe\\EphemeralKey' => $vendorDir . '/stripe/stripe-php/lib/EphemeralKey.php', + 'Stripe\\ErrorObject' => $vendorDir . '/stripe/stripe-php/lib/ErrorObject.php', + 'Stripe\\Event' => $vendorDir . '/stripe/stripe-php/lib/Event.php', + 'Stripe\\Exception\\ApiConnectionException' => $vendorDir . '/stripe/stripe-php/lib/Exception/ApiConnectionException.php', + 'Stripe\\Exception\\ApiErrorException' => $vendorDir . '/stripe/stripe-php/lib/Exception/ApiErrorException.php', + 'Stripe\\Exception\\AuthenticationException' => $vendorDir . '/stripe/stripe-php/lib/Exception/AuthenticationException.php', + 'Stripe\\Exception\\BadMethodCallException' => $vendorDir . '/stripe/stripe-php/lib/Exception/BadMethodCallException.php', + 'Stripe\\Exception\\CardException' => $vendorDir . '/stripe/stripe-php/lib/Exception/CardException.php', + 'Stripe\\Exception\\ExceptionInterface' => $vendorDir . '/stripe/stripe-php/lib/Exception/ExceptionInterface.php', + 'Stripe\\Exception\\IdempotencyException' => $vendorDir . '/stripe/stripe-php/lib/Exception/IdempotencyException.php', + 'Stripe\\Exception\\InvalidArgumentException' => $vendorDir . '/stripe/stripe-php/lib/Exception/InvalidArgumentException.php', + 'Stripe\\Exception\\InvalidRequestException' => $vendorDir . '/stripe/stripe-php/lib/Exception/InvalidRequestException.php', + 'Stripe\\Exception\\OAuth\\ExceptionInterface' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/ExceptionInterface.php', + 'Stripe\\Exception\\OAuth\\InvalidClientException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/InvalidClientException.php', + 'Stripe\\Exception\\OAuth\\InvalidGrantException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/InvalidGrantException.php', + 'Stripe\\Exception\\OAuth\\InvalidRequestException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/InvalidRequestException.php', + 'Stripe\\Exception\\OAuth\\InvalidScopeException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/InvalidScopeException.php', + 'Stripe\\Exception\\OAuth\\OAuthErrorException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/OAuthErrorException.php', + 'Stripe\\Exception\\OAuth\\UnknownOAuthErrorException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/UnknownOAuthErrorException.php', + 'Stripe\\Exception\\OAuth\\UnsupportedGrantTypeException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/UnsupportedGrantTypeException.php', + 'Stripe\\Exception\\OAuth\\UnsupportedResponseTypeException' => $vendorDir . '/stripe/stripe-php/lib/Exception/OAuth/UnsupportedResponseTypeException.php', + 'Stripe\\Exception\\PermissionException' => $vendorDir . '/stripe/stripe-php/lib/Exception/PermissionException.php', + 'Stripe\\Exception\\RateLimitException' => $vendorDir . '/stripe/stripe-php/lib/Exception/RateLimitException.php', + 'Stripe\\Exception\\SignatureVerificationException' => $vendorDir . '/stripe/stripe-php/lib/Exception/SignatureVerificationException.php', + 'Stripe\\Exception\\UnexpectedValueException' => $vendorDir . '/stripe/stripe-php/lib/Exception/UnexpectedValueException.php', + 'Stripe\\Exception\\UnknownApiErrorException' => $vendorDir . '/stripe/stripe-php/lib/Exception/UnknownApiErrorException.php', + 'Stripe\\ExchangeRate' => $vendorDir . '/stripe/stripe-php/lib/ExchangeRate.php', + 'Stripe\\File' => $vendorDir . '/stripe/stripe-php/lib/File.php', + 'Stripe\\FileLink' => $vendorDir . '/stripe/stripe-php/lib/FileLink.php', + 'Stripe\\HttpClient\\ClientInterface' => $vendorDir . '/stripe/stripe-php/lib/HttpClient/ClientInterface.php', + 'Stripe\\HttpClient\\CurlClient' => $vendorDir . '/stripe/stripe-php/lib/HttpClient/CurlClient.php', + 'Stripe\\Invoice' => $vendorDir . '/stripe/stripe-php/lib/Invoice.php', + 'Stripe\\InvoiceItem' => $vendorDir . '/stripe/stripe-php/lib/InvoiceItem.php', + 'Stripe\\InvoiceLineItem' => $vendorDir . '/stripe/stripe-php/lib/InvoiceLineItem.php', + 'Stripe\\Issuing\\Authorization' => $vendorDir . '/stripe/stripe-php/lib/Issuing/Authorization.php', + 'Stripe\\Issuing\\Card' => $vendorDir . '/stripe/stripe-php/lib/Issuing/Card.php', + 'Stripe\\Issuing\\CardDetails' => $vendorDir . '/stripe/stripe-php/lib/Issuing/CardDetails.php', + 'Stripe\\Issuing\\Cardholder' => $vendorDir . '/stripe/stripe-php/lib/Issuing/Cardholder.php', + 'Stripe\\Issuing\\Dispute' => $vendorDir . '/stripe/stripe-php/lib/Issuing/Dispute.php', + 'Stripe\\Issuing\\Transaction' => $vendorDir . '/stripe/stripe-php/lib/Issuing/Transaction.php', + 'Stripe\\LineItem' => $vendorDir . '/stripe/stripe-php/lib/LineItem.php', + 'Stripe\\LoginLink' => $vendorDir . '/stripe/stripe-php/lib/LoginLink.php', + 'Stripe\\Mandate' => $vendorDir . '/stripe/stripe-php/lib/Mandate.php', + 'Stripe\\OAuth' => $vendorDir . '/stripe/stripe-php/lib/OAuth.php', + 'Stripe\\OAuthErrorObject' => $vendorDir . '/stripe/stripe-php/lib/OAuthErrorObject.php', + 'Stripe\\Order' => $vendorDir . '/stripe/stripe-php/lib/Order.php', + 'Stripe\\OrderItem' => $vendorDir . '/stripe/stripe-php/lib/OrderItem.php', + 'Stripe\\OrderReturn' => $vendorDir . '/stripe/stripe-php/lib/OrderReturn.php', + 'Stripe\\PaymentIntent' => $vendorDir . '/stripe/stripe-php/lib/PaymentIntent.php', + 'Stripe\\PaymentMethod' => $vendorDir . '/stripe/stripe-php/lib/PaymentMethod.php', + 'Stripe\\Payout' => $vendorDir . '/stripe/stripe-php/lib/Payout.php', + 'Stripe\\Person' => $vendorDir . '/stripe/stripe-php/lib/Person.php', + 'Stripe\\Plan' => $vendorDir . '/stripe/stripe-php/lib/Plan.php', + 'Stripe\\Price' => $vendorDir . '/stripe/stripe-php/lib/Price.php', + 'Stripe\\Product' => $vendorDir . '/stripe/stripe-php/lib/Product.php', + 'Stripe\\PromotionCode' => $vendorDir . '/stripe/stripe-php/lib/PromotionCode.php', + 'Stripe\\Radar\\EarlyFraudWarning' => $vendorDir . '/stripe/stripe-php/lib/Radar/EarlyFraudWarning.php', + 'Stripe\\Radar\\ValueList' => $vendorDir . '/stripe/stripe-php/lib/Radar/ValueList.php', + 'Stripe\\Radar\\ValueListItem' => $vendorDir . '/stripe/stripe-php/lib/Radar/ValueListItem.php', + 'Stripe\\Recipient' => $vendorDir . '/stripe/stripe-php/lib/Recipient.php', + 'Stripe\\RecipientTransfer' => $vendorDir . '/stripe/stripe-php/lib/RecipientTransfer.php', + 'Stripe\\Refund' => $vendorDir . '/stripe/stripe-php/lib/Refund.php', + 'Stripe\\Reporting\\ReportRun' => $vendorDir . '/stripe/stripe-php/lib/Reporting/ReportRun.php', + 'Stripe\\Reporting\\ReportType' => $vendorDir . '/stripe/stripe-php/lib/Reporting/ReportType.php', + 'Stripe\\RequestTelemetry' => $vendorDir . '/stripe/stripe-php/lib/RequestTelemetry.php', + 'Stripe\\Review' => $vendorDir . '/stripe/stripe-php/lib/Review.php', + 'Stripe\\SKU' => $vendorDir . '/stripe/stripe-php/lib/SKU.php', + 'Stripe\\Service\\AbstractService' => $vendorDir . '/stripe/stripe-php/lib/Service/AbstractService.php', + 'Stripe\\Service\\AbstractServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/AbstractServiceFactory.php', + 'Stripe\\Service\\AccountLinkService' => $vendorDir . '/stripe/stripe-php/lib/Service/AccountLinkService.php', + 'Stripe\\Service\\AccountService' => $vendorDir . '/stripe/stripe-php/lib/Service/AccountService.php', + 'Stripe\\Service\\ApplePayDomainService' => $vendorDir . '/stripe/stripe-php/lib/Service/ApplePayDomainService.php', + 'Stripe\\Service\\ApplicationFeeService' => $vendorDir . '/stripe/stripe-php/lib/Service/ApplicationFeeService.php', + 'Stripe\\Service\\BalanceService' => $vendorDir . '/stripe/stripe-php/lib/Service/BalanceService.php', + 'Stripe\\Service\\BalanceTransactionService' => $vendorDir . '/stripe/stripe-php/lib/Service/BalanceTransactionService.php', + 'Stripe\\Service\\BillingPortal\\BillingPortalServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/BillingPortal/BillingPortalServiceFactory.php', + 'Stripe\\Service\\BillingPortal\\SessionService' => $vendorDir . '/stripe/stripe-php/lib/Service/BillingPortal/SessionService.php', + 'Stripe\\Service\\ChargeService' => $vendorDir . '/stripe/stripe-php/lib/Service/ChargeService.php', + 'Stripe\\Service\\Checkout\\CheckoutServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/Checkout/CheckoutServiceFactory.php', + 'Stripe\\Service\\Checkout\\SessionService' => $vendorDir . '/stripe/stripe-php/lib/Service/Checkout/SessionService.php', + 'Stripe\\Service\\CoreServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/CoreServiceFactory.php', + 'Stripe\\Service\\CountrySpecService' => $vendorDir . '/stripe/stripe-php/lib/Service/CountrySpecService.php', + 'Stripe\\Service\\CouponService' => $vendorDir . '/stripe/stripe-php/lib/Service/CouponService.php', + 'Stripe\\Service\\CreditNoteService' => $vendorDir . '/stripe/stripe-php/lib/Service/CreditNoteService.php', + 'Stripe\\Service\\CustomerService' => $vendorDir . '/stripe/stripe-php/lib/Service/CustomerService.php', + 'Stripe\\Service\\DisputeService' => $vendorDir . '/stripe/stripe-php/lib/Service/DisputeService.php', + 'Stripe\\Service\\EphemeralKeyService' => $vendorDir . '/stripe/stripe-php/lib/Service/EphemeralKeyService.php', + 'Stripe\\Service\\EventService' => $vendorDir . '/stripe/stripe-php/lib/Service/EventService.php', + 'Stripe\\Service\\ExchangeRateService' => $vendorDir . '/stripe/stripe-php/lib/Service/ExchangeRateService.php', + 'Stripe\\Service\\FileLinkService' => $vendorDir . '/stripe/stripe-php/lib/Service/FileLinkService.php', + 'Stripe\\Service\\FileService' => $vendorDir . '/stripe/stripe-php/lib/Service/FileService.php', + 'Stripe\\Service\\InvoiceItemService' => $vendorDir . '/stripe/stripe-php/lib/Service/InvoiceItemService.php', + 'Stripe\\Service\\InvoiceService' => $vendorDir . '/stripe/stripe-php/lib/Service/InvoiceService.php', + 'Stripe\\Service\\Issuing\\AuthorizationService' => $vendorDir . '/stripe/stripe-php/lib/Service/Issuing/AuthorizationService.php', + 'Stripe\\Service\\Issuing\\CardService' => $vendorDir . '/stripe/stripe-php/lib/Service/Issuing/CardService.php', + 'Stripe\\Service\\Issuing\\CardholderService' => $vendorDir . '/stripe/stripe-php/lib/Service/Issuing/CardholderService.php', + 'Stripe\\Service\\Issuing\\DisputeService' => $vendorDir . '/stripe/stripe-php/lib/Service/Issuing/DisputeService.php', + 'Stripe\\Service\\Issuing\\IssuingServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/Issuing/IssuingServiceFactory.php', + 'Stripe\\Service\\Issuing\\TransactionService' => $vendorDir . '/stripe/stripe-php/lib/Service/Issuing/TransactionService.php', + 'Stripe\\Service\\MandateService' => $vendorDir . '/stripe/stripe-php/lib/Service/MandateService.php', + 'Stripe\\Service\\OAuthService' => $vendorDir . '/stripe/stripe-php/lib/Service/OAuthService.php', + 'Stripe\\Service\\OrderReturnService' => $vendorDir . '/stripe/stripe-php/lib/Service/OrderReturnService.php', + 'Stripe\\Service\\OrderService' => $vendorDir . '/stripe/stripe-php/lib/Service/OrderService.php', + 'Stripe\\Service\\PaymentIntentService' => $vendorDir . '/stripe/stripe-php/lib/Service/PaymentIntentService.php', + 'Stripe\\Service\\PaymentMethodService' => $vendorDir . '/stripe/stripe-php/lib/Service/PaymentMethodService.php', + 'Stripe\\Service\\PayoutService' => $vendorDir . '/stripe/stripe-php/lib/Service/PayoutService.php', + 'Stripe\\Service\\PlanService' => $vendorDir . '/stripe/stripe-php/lib/Service/PlanService.php', + 'Stripe\\Service\\PriceService' => $vendorDir . '/stripe/stripe-php/lib/Service/PriceService.php', + 'Stripe\\Service\\ProductService' => $vendorDir . '/stripe/stripe-php/lib/Service/ProductService.php', + 'Stripe\\Service\\PromotionCodeService' => $vendorDir . '/stripe/stripe-php/lib/Service/PromotionCodeService.php', + 'Stripe\\Service\\Radar\\EarlyFraudWarningService' => $vendorDir . '/stripe/stripe-php/lib/Service/Radar/EarlyFraudWarningService.php', + 'Stripe\\Service\\Radar\\RadarServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/Radar/RadarServiceFactory.php', + 'Stripe\\Service\\Radar\\ValueListItemService' => $vendorDir . '/stripe/stripe-php/lib/Service/Radar/ValueListItemService.php', + 'Stripe\\Service\\Radar\\ValueListService' => $vendorDir . '/stripe/stripe-php/lib/Service/Radar/ValueListService.php', + 'Stripe\\Service\\RefundService' => $vendorDir . '/stripe/stripe-php/lib/Service/RefundService.php', + 'Stripe\\Service\\Reporting\\ReportRunService' => $vendorDir . '/stripe/stripe-php/lib/Service/Reporting/ReportRunService.php', + 'Stripe\\Service\\Reporting\\ReportTypeService' => $vendorDir . '/stripe/stripe-php/lib/Service/Reporting/ReportTypeService.php', + 'Stripe\\Service\\Reporting\\ReportingServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/Reporting/ReportingServiceFactory.php', + 'Stripe\\Service\\ReviewService' => $vendorDir . '/stripe/stripe-php/lib/Service/ReviewService.php', + 'Stripe\\Service\\SetupAttemptService' => $vendorDir . '/stripe/stripe-php/lib/Service/SetupAttemptService.php', + 'Stripe\\Service\\SetupIntentService' => $vendorDir . '/stripe/stripe-php/lib/Service/SetupIntentService.php', + 'Stripe\\Service\\Sigma\\ScheduledQueryRunService' => $vendorDir . '/stripe/stripe-php/lib/Service/Sigma/ScheduledQueryRunService.php', + 'Stripe\\Service\\Sigma\\SigmaServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/Sigma/SigmaServiceFactory.php', + 'Stripe\\Service\\SkuService' => $vendorDir . '/stripe/stripe-php/lib/Service/SkuService.php', + 'Stripe\\Service\\SourceService' => $vendorDir . '/stripe/stripe-php/lib/Service/SourceService.php', + 'Stripe\\Service\\SubscriptionItemService' => $vendorDir . '/stripe/stripe-php/lib/Service/SubscriptionItemService.php', + 'Stripe\\Service\\SubscriptionScheduleService' => $vendorDir . '/stripe/stripe-php/lib/Service/SubscriptionScheduleService.php', + 'Stripe\\Service\\SubscriptionService' => $vendorDir . '/stripe/stripe-php/lib/Service/SubscriptionService.php', + 'Stripe\\Service\\TaxRateService' => $vendorDir . '/stripe/stripe-php/lib/Service/TaxRateService.php', + 'Stripe\\Service\\Terminal\\ConnectionTokenService' => $vendorDir . '/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php', + 'Stripe\\Service\\Terminal\\LocationService' => $vendorDir . '/stripe/stripe-php/lib/Service/Terminal/LocationService.php', + 'Stripe\\Service\\Terminal\\ReaderService' => $vendorDir . '/stripe/stripe-php/lib/Service/Terminal/ReaderService.php', + 'Stripe\\Service\\Terminal\\TerminalServiceFactory' => $vendorDir . '/stripe/stripe-php/lib/Service/Terminal/TerminalServiceFactory.php', + 'Stripe\\Service\\TokenService' => $vendorDir . '/stripe/stripe-php/lib/Service/TokenService.php', + 'Stripe\\Service\\TopupService' => $vendorDir . '/stripe/stripe-php/lib/Service/TopupService.php', + 'Stripe\\Service\\TransferService' => $vendorDir . '/stripe/stripe-php/lib/Service/TransferService.php', + 'Stripe\\Service\\WebhookEndpointService' => $vendorDir . '/stripe/stripe-php/lib/Service/WebhookEndpointService.php', + 'Stripe\\SetupAttempt' => $vendorDir . '/stripe/stripe-php/lib/SetupAttempt.php', + 'Stripe\\SetupIntent' => $vendorDir . '/stripe/stripe-php/lib/SetupIntent.php', + 'Stripe\\Sigma\\ScheduledQueryRun' => $vendorDir . '/stripe/stripe-php/lib/Sigma/ScheduledQueryRun.php', + 'Stripe\\SingletonApiResource' => $vendorDir . '/stripe/stripe-php/lib/SingletonApiResource.php', + 'Stripe\\Source' => $vendorDir . '/stripe/stripe-php/lib/Source.php', + 'Stripe\\SourceTransaction' => $vendorDir . '/stripe/stripe-php/lib/SourceTransaction.php', + 'Stripe\\Stripe' => $vendorDir . '/stripe/stripe-php/lib/Stripe.php', + 'Stripe\\StripeClient' => $vendorDir . '/stripe/stripe-php/lib/StripeClient.php', + 'Stripe\\StripeClientInterface' => $vendorDir . '/stripe/stripe-php/lib/StripeClientInterface.php', + 'Stripe\\StripeObject' => $vendorDir . '/stripe/stripe-php/lib/StripeObject.php', + 'Stripe\\Subscription' => $vendorDir . '/stripe/stripe-php/lib/Subscription.php', + 'Stripe\\SubscriptionItem' => $vendorDir . '/stripe/stripe-php/lib/SubscriptionItem.php', + 'Stripe\\SubscriptionSchedule' => $vendorDir . '/stripe/stripe-php/lib/SubscriptionSchedule.php', + 'Stripe\\TaxId' => $vendorDir . '/stripe/stripe-php/lib/TaxId.php', + 'Stripe\\TaxRate' => $vendorDir . '/stripe/stripe-php/lib/TaxRate.php', + 'Stripe\\Terminal\\ConnectionToken' => $vendorDir . '/stripe/stripe-php/lib/Terminal/ConnectionToken.php', + 'Stripe\\Terminal\\Location' => $vendorDir . '/stripe/stripe-php/lib/Terminal/Location.php', + 'Stripe\\Terminal\\Reader' => $vendorDir . '/stripe/stripe-php/lib/Terminal/Reader.php', + 'Stripe\\ThreeDSecure' => $vendorDir . '/stripe/stripe-php/lib/ThreeDSecure.php', + 'Stripe\\Token' => $vendorDir . '/stripe/stripe-php/lib/Token.php', + 'Stripe\\Topup' => $vendorDir . '/stripe/stripe-php/lib/Topup.php', + 'Stripe\\Transfer' => $vendorDir . '/stripe/stripe-php/lib/Transfer.php', + 'Stripe\\TransferReversal' => $vendorDir . '/stripe/stripe-php/lib/TransferReversal.php', + 'Stripe\\UsageRecord' => $vendorDir . '/stripe/stripe-php/lib/UsageRecord.php', + 'Stripe\\UsageRecordSummary' => $vendorDir . '/stripe/stripe-php/lib/UsageRecordSummary.php', + 'Stripe\\Util\\CaseInsensitiveArray' => $vendorDir . '/stripe/stripe-php/lib/Util/CaseInsensitiveArray.php', + 'Stripe\\Util\\DefaultLogger' => $vendorDir . '/stripe/stripe-php/lib/Util/DefaultLogger.php', + 'Stripe\\Util\\LoggerInterface' => $vendorDir . '/stripe/stripe-php/lib/Util/LoggerInterface.php', + 'Stripe\\Util\\ObjectTypes' => $vendorDir . '/stripe/stripe-php/lib/Util/ObjectTypes.php', + 'Stripe\\Util\\RandomGenerator' => $vendorDir . '/stripe/stripe-php/lib/Util/RandomGenerator.php', + 'Stripe\\Util\\RequestOptions' => $vendorDir . '/stripe/stripe-php/lib/Util/RequestOptions.php', + 'Stripe\\Util\\Set' => $vendorDir . '/stripe/stripe-php/lib/Util/Set.php', + 'Stripe\\Util\\Util' => $vendorDir . '/stripe/stripe-php/lib/Util/Util.php', + 'Stripe\\Webhook' => $vendorDir . '/stripe/stripe-php/lib/Webhook.php', + 'Stripe\\WebhookEndpoint' => $vendorDir . '/stripe/stripe-php/lib/WebhookEndpoint.php', + 'Stripe\\WebhookSignature' => $vendorDir . '/stripe/stripe-php/lib/WebhookSignature.php', + 'Survey360' => $baseDir . '/admin/survey/modules/mod_360/class.Survey360.php', + 'Survey3601ka' => $baseDir . '/admin/survey/modules/mod_360_1KA/class.Survey3601ka.php', + 'SurveyAapor' => $baseDir . '/admin/survey/classes/class.SurveyAapor.php', + 'SurveyAdmin' => $baseDir . '/admin/survey/SurveyAdmin.php', + 'SurveyAdminAjax' => $baseDir . '/admin/survey/SurveyAdminAjax.php', + 'SurveyAdminSettings' => $baseDir . '/admin/survey/SurveyAdminSettings.php', + 'SurveyAdvancedParadata' => $baseDir . '/admin/survey/modules/mod_advanced_paradata/class.SurveyAdvancedParadata.php', + 'SurveyAdvancedParadataExport' => $baseDir . '/admin/survey/modules/mod_advanced_paradata/class.SurveyAdvancedParadataExport.php', + 'SurveyAdvancedParadataLog' => $baseDir . '/admin/survey/modules/mod_advanced_paradata/class.SurveyAdvancedParadataLog.php', + 'SurveyAktivnost' => $baseDir . '/admin/survey/classes/class.SurveyAktivnost.php', + 'SurveyAlert' => $baseDir . '/admin/survey/classes/class.SurveyAlert.php', + 'SurveyAnalysis' => $baseDir . '/admin/survey/classes/class.SurveyAnalysis.php', + 'SurveyAnalysisArchive' => $baseDir . '/admin/survey/classes/class.SurveyAnalysisArchive.php', + 'SurveyAnalysisGorenje' => $baseDir . '/admin/survey/modules/mod_gorenje/class.SurveyAnalysisGorenje.php', + 'SurveyAnalysisHelper' => $baseDir . '/admin/survey/classes/class.SurveyAnalysisHelper.php', + 'SurveyAnalysisR' => $baseDir . '/admin/survey/R/class.SurveyAnalysisR.php', + 'SurveyAppendMerge' => $baseDir . '/admin/survey/classes/class.SurveyAppendMerge.php', + 'SurveyBORZA' => $baseDir . '/admin/survey/modules/mod_BORZA/class.SurveyBORZA.php', + 'SurveyBaseSetting' => $baseDir . '/admin/survey/classes/class.SurveyBaseSetting.php', + 'SurveyBreak' => $baseDir . '/admin/survey/classes/class.SurveyBreak.php', + 'SurveyChart' => $baseDir . '/admin/survey/classes/class.SurveyChart.php', + 'SurveyChat' => $baseDir . '/admin/survey/modules/mod_chat/class.SurveyChat.php', + 'SurveyCondition' => $baseDir . '/admin/survey/classes/class.SurveyCondition.php', + 'SurveyConditionProfiles' => $baseDir . '/admin/survey/classes/class.SurveyConditionProfiles.php', + 'SurveyConnect' => $baseDir . '/admin/survey/classes/class.SurveyConnect.php', + 'SurveyCopy' => $baseDir . '/admin/survey/classes/class.SurveyCopy.php', + 'SurveyCrosstabs' => $baseDir . '/admin/survey/classes/class.SurveyCrosstabs.php', + 'SurveyCustomReport' => $baseDir . '/admin/survey/classes/class.SurveyCustomReport.php', + 'SurveyDataCollect' => $baseDir . '/admin/survey/classes/surveyData/class.SurveyDataCollect.php', + 'SurveyDataDisplay' => $baseDir . '/admin/survey/classes/surveyData/class.SurveyDataDisplay.php', + 'SurveyDataFile' => $baseDir . '/admin/survey/classes/surveyData/class.SurveyDataFile.php', + 'SurveyDataSettingProfiles' => $baseDir . '/admin/survey/classes/class.SurveyDataSettingProfiles.php', + 'SurveyDiagnostics' => $baseDir . '/admin/survey/classes/class.SurveyDiagnostics.php', + 'SurveyEditsAnalysis' => $baseDir . '/admin/survey/classes/class.SurveyEditsAnalysis.php', + 'SurveyEmployMeter' => $baseDir . '/admin/survey/modules/mod_EVOLI/class.SurveyEmployMeter.php', + 'SurveyEvoli' => $baseDir . '/admin/survey/modules/mod_EVOLI/class.SurveyEvoli.php', + 'SurveyExport' => $baseDir . '/admin/survey/classes/class.SurveyExport.php', + 'SurveyExportProfiles' => $baseDir . '/admin/survey/classes/class.SurveyExportProfiles.php', + 'SurveyFieldwork' => $baseDir . '/admin/survey/modules/mod_fieldwork/class.SurveyFieldwork.php', + 'SurveyGeoIP' => $baseDir . '/admin/survey/modules/mod_geoIP/class.SurveyGeoIP.php', + 'SurveyGetHeatMapRadij' => $baseDir . '/admin/survey/classes/class.SurveyGetHeatMapRadij.php', + 'SurveyGorenje' => $baseDir . '/admin/survey/modules/mod_gorenje/SurveyGorenje.php', + 'SurveyHeatMap' => $baseDir . '/admin/survey/classes/class.SurveyHeatMap.php', + 'SurveyHeatMapBackground' => $baseDir . '/admin/survey/classes/class.SurveyHeatMapBackground.php', + 'SurveyHeatMapExportIcons' => $baseDir . '/admin/survey/classes/class.SurveyHeatMapExportIcons.php', + 'SurveyHeatMapImageSave' => $baseDir . '/admin/survey/classes/class.SurveyHeatMapSaveImage.php', + 'SurveyHeatMapRadij' => $baseDir . '/admin/survey/classes/class.SurveyHeatMapRadij.php', + 'SurveyInfo' => $baseDir . '/admin/survey/classes/class.SurveyInfo.php', + 'SurveyInspect' => $baseDir . '/admin/survey/classes/class.SurveyInpect.php', + 'SurveyInvitationsNew' => $baseDir . '/admin/survey/classes/class.SurveyInvitationsNew.php', + 'SurveyJsonSurveyData' => $baseDir . '/admin/survey/modules/mod_json_survey_export/class.SurveyJsonSurveyData.php', + 'SurveyLanguageTechnology' => $baseDir . '/admin/survey/classes/class.SurveyLanguageTechnology.php', + 'SurveyList' => $baseDir . '/admin/survey/classes/class.SurveyList.php', + 'SurveyLog' => $baseDir . '/admin/survey/classes/log/class.SurveyLog.php', + 'SurveyMFDPS' => $baseDir . '/admin/survey/modules/mod_MFDPS/class.SurveyMFDPS.php', + 'SurveyMJU' => $baseDir . '/admin/survey/modules/mod_MJU/class.SurveyMJU.php', + 'SurveyMJUEnote' => $baseDir . '/admin/survey/modules/mod_MJU/class.SurveyMJUEnote.php', + 'SurveyMapData' => $baseDir . '/admin/survey/classes/class.SurveyMapData.php', + 'SurveyMeans' => $baseDir . '/admin/survey/classes/class.SurveyMeans.php', + 'SurveyMissingProfiles' => $baseDir . '/admin/survey/classes/class.SurveyMissingProfiles.php', + 'SurveyMissingValues' => $baseDir . '/admin/survey/classes/class.SurveyMissingValues.php', + 'SurveyMobile' => $baseDir . '/admin/survey/classes/class.SurveyMobile.php', + 'SurveyMultiCrosstabs' => $baseDir . '/admin/survey/classes/class.SurveyMultiCrosstabs.php', + 'SurveyPanel' => $baseDir . '/admin/survey/modules/mod_panel/class.SurveyPanel.php', + 'SurveyParaAnalysis' => $baseDir . '/admin/survey/classes/class.SurveyParaAnalysis.php', + 'SurveyParaGraph' => $baseDir . '/admin/survey/classes/class.SurveyParaGraph.php', + 'SurveyPostProcess' => $baseDir . '/admin/survey/classes/class.SurveyPostProcess.php', + 'SurveyProfileManager' => $baseDir . '/admin/survey/classes/class.SurveyProfileManager.php', + 'SurveyQuiz' => $baseDir . '/admin/survey/modules/mod_quiz/class.SurveyQuiz.php', + 'SurveyQuotas' => $baseDir . '/admin/survey/classes/class.SurveyQuotas.php', + 'SurveyRecoding' => $baseDir . '/admin/survey/classes/class.SurveyRecoding.php', + 'SurveyReminderTracking' => $baseDir . '/admin/survey/classes/class.SurveyReminderTracking.php', + 'SurveyRespondents' => $baseDir . '/admin/survey/classes/class.SurveyRespondents.php', + 'SurveySession' => $baseDir . '/admin/survey/classes/class.SurveySession.php', + 'SurveySessionDestructor' => $baseDir . '/admin/survey/classes/class.SurveySession.php', + 'SurveySetting' => $baseDir . '/admin/survey/classes/class.SurveySetting.php', + 'SurveySimpleMailInvitation' => $baseDir . '/admin/survey/classes/class.SurveySimpleMailInvitation.php', + 'SurveySkupine' => $baseDir . '/admin/survey/classes/class.SurveySkupine.php', + 'SurveySlideshow' => $baseDir . '/admin/survey/modules/mod_slideshow/class.SurveySlideshow.php', + 'SurveySpeedIndex' => $baseDir . '/admin/survey/modules/mod_SPEEDINDEX/class.SurveySpeedIndex.php', + 'SurveyStaticHtml' => $baseDir . '/admin/survey/classes/class.SurveyStaticHtml.php', + 'SurveyStatistic' => $baseDir . '/admin/survey/classes/class.SurveyStatistic.php', + 'SurveyStatisticProfiles' => $baseDir . '/admin/survey/classes/class.SurveyStatisticProfiles.php', + 'SurveyStatusCasi' => $baseDir . '/admin/survey/classes/class.SurveyStatusCasi.php', + 'SurveyStatusProfiles' => $baseDir . '/admin/survey/classes/class.SurveyStatusProfiles.php', + 'SurveyTTest' => $baseDir . '/admin/survey/classes/class.SurveyTTest.php', + 'SurveyTableChart' => $baseDir . '/admin/survey/classes/class.SurveyTableChart.php', + 'SurveyTeamMeter' => $baseDir . '/admin/survey/modules/mod_EVOLI/class.SurveyTeamMeter.php', + 'SurveyTelephone' => $baseDir . '/admin/survey/classes/class.SurveyTelephone.php', + 'SurveyTextAnalysis' => $baseDir . '/admin/survey/classes/class.SurveyTextAnalysis.php', + 'SurveyTheme' => $baseDir . '/admin/survey/classes/class.SurveyTheme.php', + 'SurveyThemeEditor' => $baseDir . '/admin/survey/classes/class.SurveyThemeEditor.php', + 'SurveyTimeProfiles' => $baseDir . '/admin/survey/classes/class.SurveyTimeProfiles.php', + 'SurveyUnsubscribe' => $baseDir . '/admin/survey/classes/class.SurveyUnsubscribe.php', + 'SurveyUporabnost' => $baseDir . '/admin/survey/modules/mod_uporabnost/class.SurveyUporabnost.php', + 'SurveyUrlLinks' => $baseDir . '/admin/survey/classes/class.SurveyUrlLinks.php', + 'SurveyUsableResp' => $baseDir . '/admin/survey/classes/class.SurveyUsableResp.php', + 'SurveyUserSession' => $baseDir . '/admin/survey/classes/class.SurveyUserSession.php', + 'SurveyUserSessionDestructor' => $baseDir . '/admin/survey/classes/class.SurveyUserSession.php', + 'SurveyUserSetting' => $baseDir . '/admin/survey/classes/class.SurveyUserSetting.php', + 'SurveyVariablesProfiles' => $baseDir . '/admin/survey/classes/class.SurveyVariablesProfiles.php', + 'SurveyVizualizacija' => $baseDir . '/admin/survey/modules/mod_vizualizacija/class.SurveyVizualizacija.php', + 'SurveyZankaProfiles' => $baseDir . '/admin/survey/classes/class.SurveyZankaProfiles.php', + 'SurveyZoom' => $baseDir . '/admin/survey/classes/class.SurveyZoom.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Idn' => $vendorDir . '/symfony/polyfill-intl-idn/Idn.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Info' => $vendorDir . '/symfony/polyfill-intl-idn/Info.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Resources\\unidata\\DisallowedRanges' => $vendorDir . '/symfony/polyfill-intl-idn/Resources/unidata/DisallowedRanges.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Resources\\unidata\\Regex' => $vendorDir . '/symfony/polyfill-intl-idn/Resources/unidata/Regex.php', + 'Symfony\\Polyfill\\Intl\\Normalizer\\Normalizer' => $vendorDir . '/symfony/polyfill-intl-normalizer/Normalizer.php', + 'Symfony\\Polyfill\\Php72\\Php72' => $vendorDir . '/symfony/polyfill-php72/Php72.php', + 'Timer' => $baseDir . '/admin/survey/classes/class.Timer.php', + 'TrackingClass' => $baseDir . '/admin/survey/classes/TrackingClass.php', + 'User' => $baseDir . '/admin/survey/classes/class.User.php', + 'UserAccess' => $baseDir . '/frontend/payments/classes/class.UserAccess.php', + 'UserNarocila' => $baseDir . '/frontend/payments/classes/class.UserNarocila.php', + 'UserNarocilaCebelica' => $baseDir . '/frontend/payments/classes/class.UserNarocilaCebelica.php', + 'UserNarocilaCron' => $baseDir . '/frontend/payments/classes/class.UserNarocilaCron.php', + 'UserNarocilaPaypal' => $baseDir . '/frontend/payments/classes/class.UserNarocilaPaypal.php', + 'UserNarocilaStripe' => $baseDir . '/frontend/payments/classes/class.UserNarocilaStripe.php', + 'UserPlacila' => $baseDir . '/frontend/payments/classes/class.UserPlacila.php', + 'UserSetting' => $baseDir . '/admin/survey/classes/class.UserSetting.php', + 'UserTrackingClass' => $baseDir . '/admin/survey/classes/UserTrackingClass.php', + 'VariableView' => $baseDir . '/admin/survey/classes/class.SurveyVariableView.php', + 'Vprasanje' => $baseDir . '/admin/survey/classes/class.Vprasanje.php', + 'VprasanjeInline' => $baseDir . '/admin/survey/classes/class.VprasanjeInline.php', + 'VsotaLatex' => $baseDir . '/admin/survey/export/latexclasses/Vprasanja/VsotaLatex.php', + 'WPN' => $baseDir . '/admin/survey/modules/mod_WPN/class.WPN.php', + 'XmlDocument' => $baseDir . '/admin/survey/export/xmlClasses/class.XmlDocument.php', + 'XmlSurvey' => $baseDir . '/admin/survey/export/xmlClasses/class.XmlSurvey.php', + 'XmlSurveyElement' => $baseDir . '/admin/survey/export/xmlClasses/class.XmlSurveyElement.php', + 'ZapisiAnketiranje' => $baseDir . '/admin/survey/modules/mod_gorenje/SurveyGorenje.php', + 'enkaParameters' => $baseDir . '/admin/survey/classes/class.params.php', + 'pCache' => $baseDir . '/admin/survey/pChart/classes/class.pCache.php', + 'pChart' => $baseDir . '/admin/survey/pChart/classes/class.pChart.php', + 'pData' => $baseDir . '/admin/survey/pChart/classes/class.pData.php', +); diff --git a/vendor/composer/autoload_files.php b/vendor/composer/autoload_files.php new file mode 100644 index 000000000..36222315d --- /dev/null +++ b/vendor/composer/autoload_files.php @@ -0,0 +1,24 @@ + $vendorDir . '/ralouphie/getallheaders/src/getallheaders.php', + 'e69f7f6ee287b969198c3c9d6777bd38' => $vendorDir . '/symfony/polyfill-intl-normalizer/bootstrap.php', + '25072dd6e2470089de65ae7bf11d3109' => $vendorDir . '/symfony/polyfill-php72/bootstrap.php', + 'c964ee0ededf28c96ebd9db5099ef910' => $vendorDir . '/guzzlehttp/promises/src/functions_include.php', + 'a0edc8309cc5e1d60e3047b5df6b7052' => $vendorDir . '/guzzlehttp/psr7/src/functions_include.php', + '3109cb1a231dcd04bee1f9f620d46975' => $vendorDir . '/paragonie/sodium_compat/autoload.php', + 'f598d06aa772fa33d905e87be6398fb1' => $vendorDir . '/symfony/polyfill-intl-idn/bootstrap.php', + '37a3dc5111fe8f707ab4c132ef1dbc62' => $vendorDir . '/guzzlehttp/guzzle/src/functions_include.php', + '2bf0564df058fbe21b5554296cc8571a' => $baseDir . '/main/survey/class.EvalvacijaMain.php', + '5bc35216aa4f6cb823ce4a5cec52fdce' => $baseDir . '/main/survey/mobile-detect/Mobile_Detect.php', + '22b9df91cd299713e735921c8347a64c' => $baseDir . '/admin/survey/classes/phpqrcode/phpqrcode.php', + 'b16a1c1f07a2cd49108ffd9526301d46' => $baseDir . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier.auto.php', + '42ee429c4fc185623d97225cd58c1721' => $baseDir . '/frontend/api/class.ApiLoginController.php', + '5c9b5464443c3e2e223486d66948f183' => $baseDir . '/frontend/api/class.ApiLogin.php', + '35561f6018bff40f363b94411e0141e0' => $baseDir . '/utils/1kaCron/class.CronJobs.php', +); diff --git a/vendor/composer/autoload_namespaces.php b/vendor/composer/autoload_namespaces.php new file mode 100644 index 000000000..b7fc0125d --- /dev/null +++ b/vendor/composer/autoload_namespaces.php @@ -0,0 +1,9 @@ + array($vendorDir . '/symfony/polyfill-php72'), + 'Symfony\\Polyfill\\Intl\\Normalizer\\' => array($vendorDir . '/symfony/polyfill-intl-normalizer'), + 'Symfony\\Polyfill\\Intl\\Idn\\' => array($vendorDir . '/symfony/polyfill-intl-idn'), + 'Stripe\\' => array($vendorDir . '/stripe/stripe-php/lib'), + 'Sonata\\GoogleAuthenticator\\' => array($vendorDir . '/sonata-project/google-authenticator/src'), + 'Sample\\' => array($vendorDir . '/paypal/paypal-checkout-sdk/samples'), + 'Psr\\Http\\Message\\' => array($vendorDir . '/psr/http-message/src'), + 'PayPalHttp\\' => array($vendorDir . '/paypal/paypalhttp/lib/PayPalHttp'), + 'PayPalCheckoutSdk\\' => array($vendorDir . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk'), + 'PHPMailer\\PHPMailer\\' => array($vendorDir . '/phpmailer/phpmailer/src'), + 'Minishlink\\WebPush\\' => array($vendorDir . '/minishlink/web-push/src'), + 'MaxMind\\WebService\\' => array($vendorDir . '/maxmind/web-service-common/src/WebService'), + 'MaxMind\\Exception\\' => array($vendorDir . '/maxmind/web-service-common/src/Exception'), + 'MaxMind\\Db\\' => array($vendorDir . '/maxmind-db/reader/src/MaxMind/Db'), + 'Jose\\Component\\Signature\\Algorithm\\' => array($vendorDir . '/web-token/jwt-signature-algorithm-ecdsa', $vendorDir . '/web-token/jwt-signature-algorithm-eddsa', $vendorDir . '/web-token/jwt-signature-algorithm-hmac', $vendorDir . '/web-token/jwt-signature-algorithm-none', $vendorDir . '/web-token/jwt-signature-algorithm-rsa'), + 'Jose\\Component\\Signature\\' => array($vendorDir . '/web-token/jwt-signature'), + 'Jose\\Component\\KeyManagement\\' => array($vendorDir . '/web-token/jwt-key-mgmt'), + 'Jose\\Component\\Core\\Util\\Ecc\\' => array($vendorDir . '/web-token/jwt-util-ecc'), + 'Jose\\Component\\Core\\' => array($vendorDir . '/web-token/jwt-core'), + 'Hierarhija\\' => array($baseDir . '/admin/survey/modules/mod_hierarhija'), + 'GuzzleHttp\\Psr7\\' => array($vendorDir . '/guzzlehttp/psr7/src'), + 'GuzzleHttp\\Promise\\' => array($vendorDir . '/guzzlehttp/promises/src'), + 'GuzzleHttp\\' => array($vendorDir . '/guzzlehttp/guzzle/src'), + 'Google\\Authenticator\\' => array($vendorDir . '/sonata-project/google-authenticator/src'), + 'GeoIp2\\' => array($vendorDir . '/geoip2/geoip2/src'), + 'FG\\' => array($vendorDir . '/fgrosse/phpasn1/lib'), + 'Composer\\CaBundle\\' => array($vendorDir . '/composer/ca-bundle/src'), + 'Base64Url\\' => array($vendorDir . '/spomky-labs/base64url/src'), + 'App\\' => array($baseDir . '/main/survey/app'), +); diff --git a/vendor/composer/autoload_real.php b/vendor/composer/autoload_real.php new file mode 100644 index 000000000..1fe46e482 --- /dev/null +++ b/vendor/composer/autoload_real.php @@ -0,0 +1,70 @@ += 50600 && !defined('HHVM_VERSION') && (!function_exists('zend_loader_file_encoded') || !zend_loader_file_encoded()); + if ($useStaticLoader) { + require_once __DIR__ . '/autoload_static.php'; + + call_user_func(\Composer\Autoload\ComposerStaticInit0d06eb1022200eb96b7e4bb652ca3996::getInitializer($loader)); + } else { + $map = require __DIR__ . '/autoload_namespaces.php'; + foreach ($map as $namespace => $path) { + $loader->set($namespace, $path); + } + + $map = require __DIR__ . '/autoload_psr4.php'; + foreach ($map as $namespace => $path) { + $loader->setPsr4($namespace, $path); + } + + $classMap = require __DIR__ . '/autoload_classmap.php'; + if ($classMap) { + $loader->addClassMap($classMap); + } + } + + $loader->register(true); + + if ($useStaticLoader) { + $includeFiles = Composer\Autoload\ComposerStaticInit0d06eb1022200eb96b7e4bb652ca3996::$files; + } else { + $includeFiles = require __DIR__ . '/autoload_files.php'; + } + foreach ($includeFiles as $fileIdentifier => $file) { + composerRequire0d06eb1022200eb96b7e4bb652ca3996($fileIdentifier, $file); + } + + return $loader; + } +} + +function composerRequire0d06eb1022200eb96b7e4bb652ca3996($fileIdentifier, $file) +{ + if (empty($GLOBALS['__composer_autoload_files'][$fileIdentifier])) { + require $file; + + $GLOBALS['__composer_autoload_files'][$fileIdentifier] = true; + } +} diff --git a/vendor/composer/autoload_static.php b/vendor/composer/autoload_static.php new file mode 100644 index 000000000..32b252986 --- /dev/null +++ b/vendor/composer/autoload_static.php @@ -0,0 +1,1246 @@ + __DIR__ . '/..' . '/ralouphie/getallheaders/src/getallheaders.php', + 'e69f7f6ee287b969198c3c9d6777bd38' => __DIR__ . '/..' . '/symfony/polyfill-intl-normalizer/bootstrap.php', + '25072dd6e2470089de65ae7bf11d3109' => __DIR__ . '/..' . '/symfony/polyfill-php72/bootstrap.php', + 'c964ee0ededf28c96ebd9db5099ef910' => __DIR__ . '/..' . '/guzzlehttp/promises/src/functions_include.php', + 'a0edc8309cc5e1d60e3047b5df6b7052' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/functions_include.php', + '3109cb1a231dcd04bee1f9f620d46975' => __DIR__ . '/..' . '/paragonie/sodium_compat/autoload.php', + 'f598d06aa772fa33d905e87be6398fb1' => __DIR__ . '/..' . '/symfony/polyfill-intl-idn/bootstrap.php', + '37a3dc5111fe8f707ab4c132ef1dbc62' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/functions_include.php', + '2bf0564df058fbe21b5554296cc8571a' => __DIR__ . '/../..' . '/main/survey/class.EvalvacijaMain.php', + '5bc35216aa4f6cb823ce4a5cec52fdce' => __DIR__ . '/../..' . '/main/survey/mobile-detect/Mobile_Detect.php', + '22b9df91cd299713e735921c8347a64c' => __DIR__ . '/../..' . '/admin/survey/classes/phpqrcode/phpqrcode.php', + 'b16a1c1f07a2cd49108ffd9526301d46' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier.auto.php', + '42ee429c4fc185623d97225cd58c1721' => __DIR__ . '/../..' . '/frontend/api/class.ApiLoginController.php', + '5c9b5464443c3e2e223486d66948f183' => __DIR__ . '/../..' . '/frontend/api/class.ApiLogin.php', + '35561f6018bff40f363b94411e0141e0' => __DIR__ . '/../..' . '/utils/1kaCron/class.CronJobs.php', + ); + + public static $prefixLengthsPsr4 = array ( + 'S' => + array ( + 'Symfony\\Polyfill\\Php72\\' => 23, + 'Symfony\\Polyfill\\Intl\\Normalizer\\' => 33, + 'Symfony\\Polyfill\\Intl\\Idn\\' => 26, + 'Stripe\\' => 7, + 'Sonata\\GoogleAuthenticator\\' => 27, + 'Sample\\' => 7, + ), + 'P' => + array ( + 'Psr\\Http\\Message\\' => 17, + 'PayPalHttp\\' => 11, + 'PayPalCheckoutSdk\\' => 18, + 'PHPMailer\\PHPMailer\\' => 20, + ), + 'M' => + array ( + 'Minishlink\\WebPush\\' => 19, + 'MaxMind\\WebService\\' => 19, + 'MaxMind\\Exception\\' => 18, + 'MaxMind\\Db\\' => 11, + ), + 'J' => + array ( + 'Jose\\Component\\Signature\\Algorithm\\' => 35, + 'Jose\\Component\\Signature\\' => 25, + 'Jose\\Component\\KeyManagement\\' => 29, + 'Jose\\Component\\Core\\Util\\Ecc\\' => 29, + 'Jose\\Component\\Core\\' => 20, + ), + 'H' => + array ( + 'Hierarhija\\' => 11, + ), + 'G' => + array ( + 'GuzzleHttp\\Psr7\\' => 16, + 'GuzzleHttp\\Promise\\' => 19, + 'GuzzleHttp\\' => 11, + 'Google\\Authenticator\\' => 21, + 'GeoIp2\\' => 7, + ), + 'F' => + array ( + 'FG\\' => 3, + ), + 'C' => + array ( + 'Composer\\CaBundle\\' => 18, + ), + 'B' => + array ( + 'Base64Url\\' => 10, + ), + 'A' => + array ( + 'App\\' => 4, + ), + ); + + public static $prefixDirsPsr4 = array ( + 'Symfony\\Polyfill\\Php72\\' => + array ( + 0 => __DIR__ . '/..' . '/symfony/polyfill-php72', + ), + 'Symfony\\Polyfill\\Intl\\Normalizer\\' => + array ( + 0 => __DIR__ . '/..' . '/symfony/polyfill-intl-normalizer', + ), + 'Symfony\\Polyfill\\Intl\\Idn\\' => + array ( + 0 => __DIR__ . '/..' . '/symfony/polyfill-intl-idn', + ), + 'Stripe\\' => + array ( + 0 => __DIR__ . '/..' . '/stripe/stripe-php/lib', + ), + 'Sonata\\GoogleAuthenticator\\' => + array ( + 0 => __DIR__ . '/..' . '/sonata-project/google-authenticator/src', + ), + 'Sample\\' => + array ( + 0 => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples', + ), + 'Psr\\Http\\Message\\' => + array ( + 0 => __DIR__ . '/..' . '/psr/http-message/src', + ), + 'PayPalHttp\\' => + array ( + 0 => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp', + ), + 'PayPalCheckoutSdk\\' => + array ( + 0 => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk', + ), + 'PHPMailer\\PHPMailer\\' => + array ( + 0 => __DIR__ . '/..' . '/phpmailer/phpmailer/src', + ), + 'Minishlink\\WebPush\\' => + array ( + 0 => __DIR__ . '/..' . '/minishlink/web-push/src', + ), + 'MaxMind\\WebService\\' => + array ( + 0 => __DIR__ . '/..' . '/maxmind/web-service-common/src/WebService', + ), + 'MaxMind\\Exception\\' => + array ( + 0 => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception', + ), + 'MaxMind\\Db\\' => + array ( + 0 => __DIR__ . '/..' . '/maxmind-db/reader/src/MaxMind/Db', + ), + 'Jose\\Component\\Signature\\Algorithm\\' => + array ( + 0 => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-ecdsa', + 1 => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-eddsa', + 2 => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-hmac', + 3 => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-none', + 4 => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa', + ), + 'Jose\\Component\\Signature\\' => + array ( + 0 => __DIR__ . '/..' . '/web-token/jwt-signature', + ), + 'Jose\\Component\\KeyManagement\\' => + array ( + 0 => __DIR__ . '/..' . '/web-token/jwt-key-mgmt', + ), + 'Jose\\Component\\Core\\Util\\Ecc\\' => + array ( + 0 => __DIR__ . '/..' . '/web-token/jwt-util-ecc', + ), + 'Jose\\Component\\Core\\' => + array ( + 0 => __DIR__ . '/..' . '/web-token/jwt-core', + ), + 'Hierarhija\\' => + array ( + 0 => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija', + ), + 'GuzzleHttp\\Psr7\\' => + array ( + 0 => __DIR__ . '/..' . '/guzzlehttp/psr7/src', + ), + 'GuzzleHttp\\Promise\\' => + array ( + 0 => __DIR__ . '/..' . '/guzzlehttp/promises/src', + ), + 'GuzzleHttp\\' => + array ( + 0 => __DIR__ . '/..' . '/guzzlehttp/guzzle/src', + ), + 'Google\\Authenticator\\' => + array ( + 0 => __DIR__ . '/..' . '/sonata-project/google-authenticator/src', + ), + 'GeoIp2\\' => + array ( + 0 => __DIR__ . '/..' . '/geoip2/geoip2/src', + ), + 'FG\\' => + array ( + 0 => __DIR__ . '/..' . '/fgrosse/phpasn1/lib', + ), + 'Composer\\CaBundle\\' => + array ( + 0 => __DIR__ . '/..' . '/composer/ca-bundle/src', + ), + 'Base64Url\\' => + array ( + 0 => __DIR__ . '/..' . '/spomky-labs/base64url/src', + ), + 'App\\' => + array ( + 0 => __DIR__ . '/../..' . '/main/survey/app', + ), + ); + + public static $classMap = array ( + 'AnalizaBreak' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaBreak.php', + 'AnalizaCReport' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaCReport.php', + 'AnalizaCharts' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaCharts.php', + 'AnalizaCrosstab' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaCrosstab.php', + 'AnalizaDesc' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaDesc.php', + 'AnalizaFreq' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaFreq.php', + 'AnalizaMean' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaMean.php', + 'AnalizaMultiCrosstab' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaMultiCrosstab.php', + 'AnalizaSums' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaSums.php', + 'AnalizaTTest' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Analize/AnalizaTTest.php', + 'ApiController' => __DIR__ . '/../..' . '/admin/survey/api/class.ApiController.php', + 'ApiNarocilaController' => __DIR__ . '/../..' . '/frontend/payments/classes/class.ApiNarocilaController.php', + 'ApiSurvey' => __DIR__ . '/../..' . '/admin/survey/api/class.ApiSurvey.php', + 'App\\Controllers\\AjaxController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/AjaxController.php', + 'App\\Controllers\\BodyController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/BodyController.php', + 'App\\Controllers\\CheckController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/CheckController.php', + 'App\\Controllers\\Controller' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Controller.php', + 'App\\Controllers\\DisplayController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/DisplayController.php', + 'App\\Controllers\\FindController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/FindController.php', + 'App\\Controllers\\HeaderController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/HeaderController.php', + 'App\\Controllers\\HelperController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/HelperController.php', + 'App\\Controllers\\InitClass' => __DIR__ . '/../..' . '/main/survey/app/Controllers/InitClass.php', + 'App\\Controllers\\JsController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/JsController.php', + 'App\\Controllers\\LanguageController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/LanguageController.php', + 'App\\Controllers\\StatisticController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/StatisticController.php', + 'App\\Controllers\\SurveyController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/SurveyController.php', + 'App\\Controllers\\VariableClass' => __DIR__ . '/../..' . '/main/survey/app/Controllers/VariableClass.php', + 'App\\Controllers\\Vprasanja\\ComputeController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/ComputeController.php', + 'App\\Controllers\\Vprasanja\\DatumController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/DatumController.php', + 'App\\Controllers\\Vprasanja\\DoubleController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/DoubleController.php', + 'App\\Controllers\\Vprasanja\\DragDropController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/DragDropController.php', + 'App\\Controllers\\Vprasanja\\DynamicController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/DynamicController.php', + 'App\\Controllers\\Vprasanja\\HeatMapController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/HeatMapController.php', + 'App\\Controllers\\Vprasanja\\ImageHotSpotController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/ImageHotSpotController.php', + 'App\\Controllers\\Vprasanja\\ImenaController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/ImenaController.php', + 'App\\Controllers\\Vprasanja\\MapsController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/MapsController.php', + 'App\\Controllers\\Vprasanja\\MaxDiffController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/MaxDiffController.php', + 'App\\Controllers\\Vprasanja\\MultigridController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/MultigridController.php', + 'App\\Controllers\\Vprasanja\\MultigridMobileController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/MultigridMobileController.php', + 'App\\Controllers\\Vprasanja\\NumberController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/NumberController.php', + 'App\\Controllers\\Vprasanja\\OneAgainstAnotherController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/OneAgainstAnotherController.php', + 'App\\Controllers\\Vprasanja\\QuotaController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/QuotaController.php', + 'App\\Controllers\\Vprasanja\\RadioCheckboxSelectController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/RadioCheckboxSelectController.php', + 'App\\Controllers\\Vprasanja\\RankingController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/RankingController.php', + 'App\\Controllers\\Vprasanja\\SystemVariableController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/SystemVariableController.php', + 'App\\Controllers\\Vprasanja\\TextController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/TextController.php', + 'App\\Controllers\\Vprasanja\\VprasanjaController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/VprasanjaController.php', + 'App\\Controllers\\Vprasanja\\VsotaController' => __DIR__ . '/../..' . '/main/survey/app/Controllers/Vprasanja/VsotaController.php', + 'App\\Models\\Model' => __DIR__ . '/../..' . '/main/survey/app/Models/Model.php', + 'App\\Models\\SaveSurvey' => __DIR__ . '/../..' . '/main/survey/app/Models/SaveSurvey.php', + 'App\\Models\\User' => __DIR__ . '/../..' . '/main/survey/app/Models/User.php', + 'Base64Url\\Base64Url' => __DIR__ . '/..' . '/spomky-labs/base64url/src/Base64Url.php', + 'BesediloLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/BesediloLatex.php', + 'BesediloXml' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/Vprasanja/BesediloXml.php', + 'Branching' => __DIR__ . '/../..' . '/admin/survey/Branching.php', + 'BranchingAjax' => __DIR__ . '/../..' . '/admin/survey/BranchingAjax.php', + 'Cache' => __DIR__ . '/../..' . '/admin/survey/classes/class.Cache.php', + 'CheckboxXml' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/Vprasanja/CheckboxXml.php', + 'Common' => __DIR__ . '/../..' . '/admin/survey/classes/class.Common.php', + 'Composer\\CaBundle\\CaBundle' => __DIR__ . '/..' . '/composer/ca-bundle/src/CaBundle.php', + 'CrossRoad' => __DIR__ . '/../..' . '/admin/survey/classes/CrossRoad.php', + 'DatumLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/DatumLatex.php', + 'Demografija' => __DIR__ . '/../..' . '/admin/survey/classes/class.Demografija.php', + 'Dostop' => __DIR__ . '/../..' . '/admin/survey/classes/class.Dostop.php', + 'Evalvacija' => __DIR__ . '/../..' . '/admin/survey/modules/Evalvacija/class.Evalvacija.php', + 'EvoliForm' => __DIR__ . '/../..' . '/admin/survey/modules/mod_EVOLI/class.EvoliForm.php', + 'ExclusiveLock' => __DIR__ . '/../..' . '/admin/survey/classes/surveyData/class.ExclusiveLock.php', + 'Export' => __DIR__ . '/../..' . '/admin/survey/classes/class.Export.php', + 'ExportController' => __DIR__ . '/../..' . '/admin/survey/export/class.ExportController.php', + 'FG\\ASN1\\ASNObject' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/ASNObject.php', + 'FG\\ASN1\\AbstractString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/AbstractString.php', + 'FG\\ASN1\\AbstractTime' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/AbstractTime.php', + 'FG\\ASN1\\Base128' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Base128.php', + 'FG\\ASN1\\Composite\\AttributeTypeAndValue' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Composite/AttributeTypeAndValue.php', + 'FG\\ASN1\\Composite\\RDNString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Composite/RDNString.php', + 'FG\\ASN1\\Composite\\RelativeDistinguishedName' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Composite/RelativeDistinguishedName.php', + 'FG\\ASN1\\Construct' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Construct.php', + 'FG\\ASN1\\Exception\\NotImplementedException' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Exception/NotImplementedException.php', + 'FG\\ASN1\\Exception\\ParserException' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Exception/ParserException.php', + 'FG\\ASN1\\ExplicitlyTaggedObject' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/ExplicitlyTaggedObject.php', + 'FG\\ASN1\\Identifier' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Identifier.php', + 'FG\\ASN1\\OID' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/OID.php', + 'FG\\ASN1\\Parsable' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Parsable.php', + 'FG\\ASN1\\TemplateParser' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/TemplateParser.php', + 'FG\\ASN1\\Universal\\BMPString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/BMPString.php', + 'FG\\ASN1\\Universal\\BitString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/BitString.php', + 'FG\\ASN1\\Universal\\Boolean' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/Boolean.php', + 'FG\\ASN1\\Universal\\CharacterString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/CharacterString.php', + 'FG\\ASN1\\Universal\\Enumerated' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/Enumerated.php', + 'FG\\ASN1\\Universal\\GeneralString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/GeneralString.php', + 'FG\\ASN1\\Universal\\GeneralizedTime' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/GeneralizedTime.php', + 'FG\\ASN1\\Universal\\GraphicString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/GraphicString.php', + 'FG\\ASN1\\Universal\\IA5String' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/IA5String.php', + 'FG\\ASN1\\Universal\\Integer' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/Integer.php', + 'FG\\ASN1\\Universal\\NullObject' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/NullObject.php', + 'FG\\ASN1\\Universal\\NumericString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/NumericString.php', + 'FG\\ASN1\\Universal\\ObjectDescriptor' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/ObjectDescriptor.php', + 'FG\\ASN1\\Universal\\ObjectIdentifier' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/ObjectIdentifier.php', + 'FG\\ASN1\\Universal\\OctetString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/OctetString.php', + 'FG\\ASN1\\Universal\\PrintableString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/PrintableString.php', + 'FG\\ASN1\\Universal\\RelativeObjectIdentifier' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/RelativeObjectIdentifier.php', + 'FG\\ASN1\\Universal\\Sequence' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/Sequence.php', + 'FG\\ASN1\\Universal\\Set' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/Set.php', + 'FG\\ASN1\\Universal\\T61String' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/T61String.php', + 'FG\\ASN1\\Universal\\UTCTime' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/UTCTime.php', + 'FG\\ASN1\\Universal\\UTF8String' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/UTF8String.php', + 'FG\\ASN1\\Universal\\UniversalString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/UniversalString.php', + 'FG\\ASN1\\Universal\\VisibleString' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/Universal/VisibleString.php', + 'FG\\ASN1\\UnknownConstructedObject' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/UnknownConstructedObject.php', + 'FG\\ASN1\\UnknownObject' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/ASN1/UnknownObject.php', + 'FG\\Utility\\BigInteger' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/Utility/BigInteger.php', + 'FG\\Utility\\BigIntegerBcmath' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/Utility/BigIntegerBcmath.php', + 'FG\\Utility\\BigIntegerGmp' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/Utility/BigIntegerGmp.php', + 'FG\\X509\\AlgorithmIdentifier' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/AlgorithmIdentifier.php', + 'FG\\X509\\CSR\\Attributes' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/CSR/Attributes.php', + 'FG\\X509\\CSR\\CSR' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/CSR/CSR.php', + 'FG\\X509\\CertificateExtensions' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/CertificateExtensions.php', + 'FG\\X509\\CertificateSubject' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/CertificateSubject.php', + 'FG\\X509\\PrivateKey' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/PrivateKey.php', + 'FG\\X509\\PublicKey' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/PublicKey.php', + 'FG\\X509\\SAN\\DNSName' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/SAN/DNSName.php', + 'FG\\X509\\SAN\\IPAddress' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/SAN/IPAddress.php', + 'FG\\X509\\SAN\\SubjectAlternativeNames' => __DIR__ . '/..' . '/fgrosse/phpasn1/lib/X509/SAN/SubjectAlternativeNames.php', + 'Forum' => __DIR__ . '/../..' . '/admin/survey/classes/class.Forum.php', + 'GC' => __DIR__ . '/../..' . '/admin/survey/modules/Evalvacija/class.GC.php', + 'GDPR' => __DIR__ . '/../..' . '/admin/survey/classes/class.GDPR.php', + 'GeoIp2\\Database\\Reader' => __DIR__ . '/..' . '/geoip2/geoip2/src/Database/Reader.php', + 'GeoIp2\\Exception\\AddressNotFoundException' => __DIR__ . '/..' . '/geoip2/geoip2/src/Exception/AddressNotFoundException.php', + 'GeoIp2\\Exception\\AuthenticationException' => __DIR__ . '/..' . '/geoip2/geoip2/src/Exception/AuthenticationException.php', + 'GeoIp2\\Exception\\GeoIp2Exception' => __DIR__ . '/..' . '/geoip2/geoip2/src/Exception/GeoIp2Exception.php', + 'GeoIp2\\Exception\\HttpException' => __DIR__ . '/..' . '/geoip2/geoip2/src/Exception/HttpException.php', + 'GeoIp2\\Exception\\InvalidRequestException' => __DIR__ . '/..' . '/geoip2/geoip2/src/Exception/InvalidRequestException.php', + 'GeoIp2\\Exception\\OutOfQueriesException' => __DIR__ . '/..' . '/geoip2/geoip2/src/Exception/OutOfQueriesException.php', + 'GeoIp2\\Model\\AbstractModel' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/AbstractModel.php', + 'GeoIp2\\Model\\AnonymousIp' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/AnonymousIp.php', + 'GeoIp2\\Model\\Asn' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/Asn.php', + 'GeoIp2\\Model\\City' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/City.php', + 'GeoIp2\\Model\\ConnectionType' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/ConnectionType.php', + 'GeoIp2\\Model\\Country' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/Country.php', + 'GeoIp2\\Model\\Domain' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/Domain.php', + 'GeoIp2\\Model\\Enterprise' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/Enterprise.php', + 'GeoIp2\\Model\\Insights' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/Insights.php', + 'GeoIp2\\Model\\Isp' => __DIR__ . '/..' . '/geoip2/geoip2/src/Model/Isp.php', + 'GeoIp2\\ProviderInterface' => __DIR__ . '/..' . '/geoip2/geoip2/src/ProviderInterface.php', + 'GeoIp2\\Record\\AbstractPlaceRecord' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/AbstractPlaceRecord.php', + 'GeoIp2\\Record\\AbstractRecord' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/AbstractRecord.php', + 'GeoIp2\\Record\\City' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/City.php', + 'GeoIp2\\Record\\Continent' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/Continent.php', + 'GeoIp2\\Record\\Country' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/Country.php', + 'GeoIp2\\Record\\Location' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/Location.php', + 'GeoIp2\\Record\\MaxMind' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/MaxMind.php', + 'GeoIp2\\Record\\Postal' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/Postal.php', + 'GeoIp2\\Record\\RepresentedCountry' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/RepresentedCountry.php', + 'GeoIp2\\Record\\Subdivision' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/Subdivision.php', + 'GeoIp2\\Record\\Traits' => __DIR__ . '/..' . '/geoip2/geoip2/src/Record/Traits.php', + 'GeoIp2\\Util' => __DIR__ . '/..' . '/geoip2/geoip2/src/Util.php', + 'GeoIp2\\WebService\\Client' => __DIR__ . '/..' . '/geoip2/geoip2/src/WebService/Client.php', + 'GetSiteUrl' => __DIR__ . '/../..' . '/admin/survey/classes/class.GetSiteUrl.php', + 'Glasovanje' => __DIR__ . '/../..' . '/admin/survey/Glasovanje.php', + 'GlobalMisc' => __DIR__ . '/../..' . '/admin/survey/classes/class.GlobalMisc.php', + 'GridMultipleLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/GridMultipleLatex.php', + 'GuzzleHttp\\Client' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Client.php', + 'GuzzleHttp\\ClientInterface' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/ClientInterface.php', + 'GuzzleHttp\\Cookie\\CookieJar' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Cookie/CookieJar.php', + 'GuzzleHttp\\Cookie\\CookieJarInterface' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Cookie/CookieJarInterface.php', + 'GuzzleHttp\\Cookie\\FileCookieJar' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Cookie/FileCookieJar.php', + 'GuzzleHttp\\Cookie\\SessionCookieJar' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.php', + 'GuzzleHttp\\Cookie\\SetCookie' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Cookie/SetCookie.php', + 'GuzzleHttp\\Exception\\BadResponseException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/BadResponseException.php', + 'GuzzleHttp\\Exception\\ClientException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/ClientException.php', + 'GuzzleHttp\\Exception\\ConnectException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/ConnectException.php', + 'GuzzleHttp\\Exception\\GuzzleException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/GuzzleException.php', + 'GuzzleHttp\\Exception\\InvalidArgumentException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/InvalidArgumentException.php', + 'GuzzleHttp\\Exception\\RequestException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/RequestException.php', + 'GuzzleHttp\\Exception\\SeekException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/SeekException.php', + 'GuzzleHttp\\Exception\\ServerException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/ServerException.php', + 'GuzzleHttp\\Exception\\TooManyRedirectsException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/TooManyRedirectsException.php', + 'GuzzleHttp\\Exception\\TransferException' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Exception/TransferException.php', + 'GuzzleHttp\\HandlerStack' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/HandlerStack.php', + 'GuzzleHttp\\Handler\\CurlFactory' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/CurlFactory.php', + 'GuzzleHttp\\Handler\\CurlFactoryInterface' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php', + 'GuzzleHttp\\Handler\\CurlHandler' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/CurlHandler.php', + 'GuzzleHttp\\Handler\\CurlMultiHandler' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php', + 'GuzzleHttp\\Handler\\EasyHandle' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/EasyHandle.php', + 'GuzzleHttp\\Handler\\MockHandler' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/MockHandler.php', + 'GuzzleHttp\\Handler\\Proxy' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/Proxy.php', + 'GuzzleHttp\\Handler\\StreamHandler' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Handler/StreamHandler.php', + 'GuzzleHttp\\MessageFormatter' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/MessageFormatter.php', + 'GuzzleHttp\\Middleware' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Middleware.php', + 'GuzzleHttp\\Pool' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Pool.php', + 'GuzzleHttp\\PrepareBodyMiddleware' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php', + 'GuzzleHttp\\Promise\\AggregateException' => __DIR__ . '/..' . '/guzzlehttp/promises/src/AggregateException.php', + 'GuzzleHttp\\Promise\\CancellationException' => __DIR__ . '/..' . '/guzzlehttp/promises/src/CancellationException.php', + 'GuzzleHttp\\Promise\\Coroutine' => __DIR__ . '/..' . '/guzzlehttp/promises/src/Coroutine.php', + 'GuzzleHttp\\Promise\\Create' => __DIR__ . '/..' . '/guzzlehttp/promises/src/Create.php', + 'GuzzleHttp\\Promise\\Each' => __DIR__ . '/..' . '/guzzlehttp/promises/src/Each.php', + 'GuzzleHttp\\Promise\\EachPromise' => __DIR__ . '/..' . '/guzzlehttp/promises/src/EachPromise.php', + 'GuzzleHttp\\Promise\\FulfilledPromise' => __DIR__ . '/..' . '/guzzlehttp/promises/src/FulfilledPromise.php', + 'GuzzleHttp\\Promise\\Is' => __DIR__ . '/..' . '/guzzlehttp/promises/src/Is.php', + 'GuzzleHttp\\Promise\\Promise' => __DIR__ . '/..' . '/guzzlehttp/promises/src/Promise.php', + 'GuzzleHttp\\Promise\\PromiseInterface' => __DIR__ . '/..' . '/guzzlehttp/promises/src/PromiseInterface.php', + 'GuzzleHttp\\Promise\\PromisorInterface' => __DIR__ . '/..' . '/guzzlehttp/promises/src/PromisorInterface.php', + 'GuzzleHttp\\Promise\\RejectedPromise' => __DIR__ . '/..' . '/guzzlehttp/promises/src/RejectedPromise.php', + 'GuzzleHttp\\Promise\\RejectionException' => __DIR__ . '/..' . '/guzzlehttp/promises/src/RejectionException.php', + 'GuzzleHttp\\Promise\\TaskQueue' => __DIR__ . '/..' . '/guzzlehttp/promises/src/TaskQueue.php', + 'GuzzleHttp\\Promise\\TaskQueueInterface' => __DIR__ . '/..' . '/guzzlehttp/promises/src/TaskQueueInterface.php', + 'GuzzleHttp\\Promise\\Utils' => __DIR__ . '/..' . '/guzzlehttp/promises/src/Utils.php', + 'GuzzleHttp\\Psr7\\AppendStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/AppendStream.php', + 'GuzzleHttp\\Psr7\\BufferStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/BufferStream.php', + 'GuzzleHttp\\Psr7\\CachingStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/CachingStream.php', + 'GuzzleHttp\\Psr7\\DroppingStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/DroppingStream.php', + 'GuzzleHttp\\Psr7\\FnStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/FnStream.php', + 'GuzzleHttp\\Psr7\\Header' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Header.php', + 'GuzzleHttp\\Psr7\\InflateStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/InflateStream.php', + 'GuzzleHttp\\Psr7\\LazyOpenStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/LazyOpenStream.php', + 'GuzzleHttp\\Psr7\\LimitStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/LimitStream.php', + 'GuzzleHttp\\Psr7\\Message' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Message.php', + 'GuzzleHttp\\Psr7\\MessageTrait' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/MessageTrait.php', + 'GuzzleHttp\\Psr7\\MimeType' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/MimeType.php', + 'GuzzleHttp\\Psr7\\MultipartStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/MultipartStream.php', + 'GuzzleHttp\\Psr7\\NoSeekStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/NoSeekStream.php', + 'GuzzleHttp\\Psr7\\PumpStream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/PumpStream.php', + 'GuzzleHttp\\Psr7\\Query' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Query.php', + 'GuzzleHttp\\Psr7\\Request' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Request.php', + 'GuzzleHttp\\Psr7\\Response' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Response.php', + 'GuzzleHttp\\Psr7\\Rfc7230' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Rfc7230.php', + 'GuzzleHttp\\Psr7\\ServerRequest' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/ServerRequest.php', + 'GuzzleHttp\\Psr7\\Stream' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Stream.php', + 'GuzzleHttp\\Psr7\\StreamDecoratorTrait' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/StreamDecoratorTrait.php', + 'GuzzleHttp\\Psr7\\StreamWrapper' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/StreamWrapper.php', + 'GuzzleHttp\\Psr7\\UploadedFile' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/UploadedFile.php', + 'GuzzleHttp\\Psr7\\Uri' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Uri.php', + 'GuzzleHttp\\Psr7\\UriNormalizer' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/UriNormalizer.php', + 'GuzzleHttp\\Psr7\\UriResolver' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/UriResolver.php', + 'GuzzleHttp\\Psr7\\Utils' => __DIR__ . '/..' . '/guzzlehttp/psr7/src/Utils.php', + 'GuzzleHttp\\RedirectMiddleware' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/RedirectMiddleware.php', + 'GuzzleHttp\\RequestOptions' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/RequestOptions.php', + 'GuzzleHttp\\RetryMiddleware' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/RetryMiddleware.php', + 'GuzzleHttp\\TransferStats' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/TransferStats.php', + 'GuzzleHttp\\UriTemplate' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/UriTemplate.php', + 'GuzzleHttp\\Utils' => __DIR__ . '/..' . '/guzzlehttp/guzzle/src/Utils.php', + 'HTML5' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PH5P.php', + 'HTML5TreeConstructer' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PH5P.php', + 'HTMLPurifier' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier.php', + 'HTMLPurifier_AttrCollections' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrCollections.php', + 'HTMLPurifier_AttrDef' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef.php', + 'HTMLPurifier_AttrDef_CSS' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS.php', + 'HTMLPurifier_AttrDef_CSS_AlphaValue' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/AlphaValue.php', + 'HTMLPurifier_AttrDef_CSS_Background' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Background.php', + 'HTMLPurifier_AttrDef_CSS_BackgroundPosition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/BackgroundPosition.php', + 'HTMLPurifier_AttrDef_CSS_Border' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Border.php', + 'HTMLPurifier_AttrDef_CSS_Color' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Color.php', + 'HTMLPurifier_AttrDef_CSS_Composite' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Composite.php', + 'HTMLPurifier_AttrDef_CSS_DenyElementDecorator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/DenyElementDecorator.php', + 'HTMLPurifier_AttrDef_CSS_Filter' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Filter.php', + 'HTMLPurifier_AttrDef_CSS_Font' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Font.php', + 'HTMLPurifier_AttrDef_CSS_FontFamily' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/FontFamily.php', + 'HTMLPurifier_AttrDef_CSS_ImportantDecorator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/ImportantDecorator.php', + 'HTMLPurifier_AttrDef_CSS_Length' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Length.php', + 'HTMLPurifier_AttrDef_CSS_ListStyle' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/ListStyle.php', + 'HTMLPurifier_AttrDef_CSS_Multiple' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Multiple.php', + 'HTMLPurifier_AttrDef_CSS_Number' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Number.php', + 'HTMLPurifier_AttrDef_CSS_Percentage' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/Percentage.php', + 'HTMLPurifier_AttrDef_CSS_TextDecoration' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/TextDecoration.php', + 'HTMLPurifier_AttrDef_CSS_URI' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/CSS/URI.php', + 'HTMLPurifier_AttrDef_Enum' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Enum.php', + 'HTMLPurifier_AttrDef_HTML_Bool' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Bool.php', + 'HTMLPurifier_AttrDef_HTML_Class' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Class.php', + 'HTMLPurifier_AttrDef_HTML_Color' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Color.php', + 'HTMLPurifier_AttrDef_HTML_FrameTarget' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/FrameTarget.php', + 'HTMLPurifier_AttrDef_HTML_ID' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/ID.php', + 'HTMLPurifier_AttrDef_HTML_Length' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Length.php', + 'HTMLPurifier_AttrDef_HTML_LinkTypes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/LinkTypes.php', + 'HTMLPurifier_AttrDef_HTML_MultiLength' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/MultiLength.php', + 'HTMLPurifier_AttrDef_HTML_Nmtokens' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Nmtokens.php', + 'HTMLPurifier_AttrDef_HTML_Pixels' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/HTML/Pixels.php', + 'HTMLPurifier_AttrDef_Integer' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Integer.php', + 'HTMLPurifier_AttrDef_Lang' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Lang.php', + 'HTMLPurifier_AttrDef_Switch' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Switch.php', + 'HTMLPurifier_AttrDef_Text' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/Text.php', + 'HTMLPurifier_AttrDef_URI' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI.php', + 'HTMLPurifier_AttrDef_URI_Email' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/Email.php', + 'HTMLPurifier_AttrDef_URI_Email_SimpleCheck' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/Email/SimpleCheck.php', + 'HTMLPurifier_AttrDef_URI_Host' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/Host.php', + 'HTMLPurifier_AttrDef_URI_IPv4' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/IPv4.php', + 'HTMLPurifier_AttrDef_URI_IPv6' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrDef/URI/IPv6.php', + 'HTMLPurifier_AttrTransform' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform.php', + 'HTMLPurifier_AttrTransform_Background' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Background.php', + 'HTMLPurifier_AttrTransform_BdoDir' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/BdoDir.php', + 'HTMLPurifier_AttrTransform_BgColor' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/BgColor.php', + 'HTMLPurifier_AttrTransform_BoolToCSS' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/BoolToCSS.php', + 'HTMLPurifier_AttrTransform_Border' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Border.php', + 'HTMLPurifier_AttrTransform_EnumToCSS' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/EnumToCSS.php', + 'HTMLPurifier_AttrTransform_ImgRequired' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/ImgRequired.php', + 'HTMLPurifier_AttrTransform_ImgSpace' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/ImgSpace.php', + 'HTMLPurifier_AttrTransform_Input' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Input.php', + 'HTMLPurifier_AttrTransform_Lang' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Lang.php', + 'HTMLPurifier_AttrTransform_Length' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Length.php', + 'HTMLPurifier_AttrTransform_Name' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Name.php', + 'HTMLPurifier_AttrTransform_NameSync' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/NameSync.php', + 'HTMLPurifier_AttrTransform_Nofollow' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Nofollow.php', + 'HTMLPurifier_AttrTransform_SafeEmbed' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/SafeEmbed.php', + 'HTMLPurifier_AttrTransform_SafeObject' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/SafeObject.php', + 'HTMLPurifier_AttrTransform_SafeParam' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/SafeParam.php', + 'HTMLPurifier_AttrTransform_ScriptRequired' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/ScriptRequired.php', + 'HTMLPurifier_AttrTransform_Textarea' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTransform/Textarea.php', + 'HTMLPurifier_AttrTypes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrTypes.php', + 'HTMLPurifier_AttrValidator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/AttrValidator.php', + 'HTMLPurifier_Bootstrap' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Bootstrap.php', + 'HTMLPurifier_CSSDefinition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/CSSDefinition.php', + 'HTMLPurifier_ChildDef' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef.php', + 'HTMLPurifier_ChildDef_Chameleon' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Chameleon.php', + 'HTMLPurifier_ChildDef_Custom' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Custom.php', + 'HTMLPurifier_ChildDef_Empty' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Empty.php', + 'HTMLPurifier_ChildDef_Optional' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Optional.php', + 'HTMLPurifier_ChildDef_Required' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Required.php', + 'HTMLPurifier_ChildDef_StrictBlockquote' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/StrictBlockquote.php', + 'HTMLPurifier_ChildDef_Table' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ChildDef/Table.php', + 'HTMLPurifier_Config' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Config.php', + 'HTMLPurifier_ConfigSchema' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema.php', + 'HTMLPurifier_ConfigSchema_Builder_ConfigSchema' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Builder/ConfigSchema.php', + 'HTMLPurifier_ConfigSchema_Builder_Xml' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Builder/Xml.php', + 'HTMLPurifier_ConfigSchema_Exception' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Exception.php', + 'HTMLPurifier_ConfigSchema_Interchange' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Interchange.php', + 'HTMLPurifier_ConfigSchema_InterchangeBuilder' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/InterchangeBuilder.php', + 'HTMLPurifier_ConfigSchema_Interchange_Directive' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Interchange/Directive.php', + 'HTMLPurifier_ConfigSchema_Interchange_Id' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Interchange/Id.php', + 'HTMLPurifier_ConfigSchema_Validator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/Validator.php', + 'HTMLPurifier_ConfigSchema_ValidatorAtom' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ConfigSchema/ValidatorAtom.php', + 'HTMLPurifier_ContentSets' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ContentSets.php', + 'HTMLPurifier_Context' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Context.php', + 'HTMLPurifier_Definition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Definition.php', + 'HTMLPurifier_DefinitionCache' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache.php', + 'HTMLPurifier_DefinitionCacheFactory' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCacheFactory.php', + 'HTMLPurifier_DefinitionCache_Decorator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Decorator.php', + 'HTMLPurifier_DefinitionCache_Decorator_Cleanup' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Decorator/Cleanup.php', + 'HTMLPurifier_DefinitionCache_Decorator_Memory' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Decorator/Memory.php', + 'HTMLPurifier_DefinitionCache_Null' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Null.php', + 'HTMLPurifier_DefinitionCache_Serializer' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DefinitionCache/Serializer.php', + 'HTMLPurifier_Doctype' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Doctype.php', + 'HTMLPurifier_DoctypeRegistry' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/DoctypeRegistry.php', + 'HTMLPurifier_ElementDef' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ElementDef.php', + 'HTMLPurifier_Encoder' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Encoder.php', + 'HTMLPurifier_EntityLookup' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/EntityLookup.php', + 'HTMLPurifier_EntityParser' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/EntityParser.php', + 'HTMLPurifier_ErrorCollector' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ErrorCollector.php', + 'HTMLPurifier_ErrorStruct' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/ErrorStruct.php', + 'HTMLPurifier_Exception' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Exception.php', + 'HTMLPurifier_Filter' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Filter.php', + 'HTMLPurifier_Filter_ExtractStyleBlocks' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Filter/ExtractStyleBlocks.php', + 'HTMLPurifier_Filter_YouTube' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Filter/YouTube.php', + 'HTMLPurifier_Generator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Generator.php', + 'HTMLPurifier_HTMLDefinition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLDefinition.php', + 'HTMLPurifier_HTMLModule' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule.php', + 'HTMLPurifier_HTMLModuleManager' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModuleManager.php', + 'HTMLPurifier_HTMLModule_Bdo' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Bdo.php', + 'HTMLPurifier_HTMLModule_CommonAttributes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/CommonAttributes.php', + 'HTMLPurifier_HTMLModule_Edit' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Edit.php', + 'HTMLPurifier_HTMLModule_Forms' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Forms.php', + 'HTMLPurifier_HTMLModule_Hypertext' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Hypertext.php', + 'HTMLPurifier_HTMLModule_Image' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Image.php', + 'HTMLPurifier_HTMLModule_Legacy' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Legacy.php', + 'HTMLPurifier_HTMLModule_List' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/List.php', + 'HTMLPurifier_HTMLModule_Name' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Name.php', + 'HTMLPurifier_HTMLModule_Nofollow' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Nofollow.php', + 'HTMLPurifier_HTMLModule_NonXMLCommonAttributes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/NonXMLCommonAttributes.php', + 'HTMLPurifier_HTMLModule_Object' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Object.php', + 'HTMLPurifier_HTMLModule_Presentation' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Presentation.php', + 'HTMLPurifier_HTMLModule_Proprietary' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Proprietary.php', + 'HTMLPurifier_HTMLModule_Ruby' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Ruby.php', + 'HTMLPurifier_HTMLModule_SafeEmbed' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/SafeEmbed.php', + 'HTMLPurifier_HTMLModule_SafeObject' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/SafeObject.php', + 'HTMLPurifier_HTMLModule_Scripting' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Scripting.php', + 'HTMLPurifier_HTMLModule_StyleAttribute' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/StyleAttribute.php', + 'HTMLPurifier_HTMLModule_Tables' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tables.php', + 'HTMLPurifier_HTMLModule_Target' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Target.php', + 'HTMLPurifier_HTMLModule_Text' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Text.php', + 'HTMLPurifier_HTMLModule_Tidy' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy.php', + 'HTMLPurifier_HTMLModule_Tidy_Name' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Name.php', + 'HTMLPurifier_HTMLModule_Tidy_Proprietary' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Proprietary.php', + 'HTMLPurifier_HTMLModule_Tidy_Strict' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Strict.php', + 'HTMLPurifier_HTMLModule_Tidy_Transitional' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/Transitional.php', + 'HTMLPurifier_HTMLModule_Tidy_XHTML' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/XHTML.php', + 'HTMLPurifier_HTMLModule_Tidy_XHTMLAndHTML4' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/Tidy/XHTMLAndHTML4.php', + 'HTMLPurifier_HTMLModule_XMLCommonAttributes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/HTMLModule/XMLCommonAttributes.php', + 'HTMLPurifier_IDAccumulator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/IDAccumulator.php', + 'HTMLPurifier_Injector' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector.php', + 'HTMLPurifier_Injector_AutoParagraph' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/AutoParagraph.php', + 'HTMLPurifier_Injector_DisplayLinkURI' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/DisplayLinkURI.php', + 'HTMLPurifier_Injector_Linkify' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/Linkify.php', + 'HTMLPurifier_Injector_PurifierLinkify' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/PurifierLinkify.php', + 'HTMLPurifier_Injector_RemoveEmpty' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/RemoveEmpty.php', + 'HTMLPurifier_Injector_RemoveSpansWithoutAttributes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/RemoveSpansWithoutAttributes.php', + 'HTMLPurifier_Injector_SafeObject' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Injector/SafeObject.php', + 'HTMLPurifier_Language' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Language.php', + 'HTMLPurifier_LanguageFactory' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/LanguageFactory.php', + 'HTMLPurifier_Language_en_x_test' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Language/classes/en-x-test.php', + 'HTMLPurifier_Length' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Length.php', + 'HTMLPurifier_Lexer' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer.php', + 'HTMLPurifier_Lexer_DOMLex' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/DOMLex.php', + 'HTMLPurifier_Lexer_DirectLex' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/DirectLex.php', + 'HTMLPurifier_Lexer_PEARSax3' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PEARSax3.php', + 'HTMLPurifier_Lexer_PH5P' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Lexer/PH5P.php', + 'HTMLPurifier_PercentEncoder' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/PercentEncoder.php', + 'HTMLPurifier_Printer' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer.php', + 'HTMLPurifier_Printer_CSSDefinition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/CSSDefinition.php', + 'HTMLPurifier_Printer_ConfigForm' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_ConfigForm_NullDecorator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_ConfigForm_bool' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_ConfigForm_default' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/ConfigForm.php', + 'HTMLPurifier_Printer_HTMLDefinition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Printer/HTMLDefinition.php', + 'HTMLPurifier_PropertyList' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/PropertyList.php', + 'HTMLPurifier_PropertyListIterator' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/PropertyListIterator.php', + 'HTMLPurifier_Strategy' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy.php', + 'HTMLPurifier_Strategy_Composite' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/Composite.php', + 'HTMLPurifier_Strategy_Core' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/Core.php', + 'HTMLPurifier_Strategy_FixNesting' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/FixNesting.php', + 'HTMLPurifier_Strategy_MakeWellFormed' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/MakeWellFormed.php', + 'HTMLPurifier_Strategy_RemoveForeignElements' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/RemoveForeignElements.php', + 'HTMLPurifier_Strategy_ValidateAttributes' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Strategy/ValidateAttributes.php', + 'HTMLPurifier_StringHash' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/StringHash.php', + 'HTMLPurifier_StringHashParser' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/StringHashParser.php', + 'HTMLPurifier_TagTransform' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TagTransform.php', + 'HTMLPurifier_TagTransform_Font' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TagTransform/Font.php', + 'HTMLPurifier_TagTransform_Simple' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TagTransform/Simple.php', + 'HTMLPurifier_Token' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token.php', + 'HTMLPurifier_TokenFactory' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/TokenFactory.php', + 'HTMLPurifier_Token_Comment' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Comment.php', + 'HTMLPurifier_Token_Empty' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Empty.php', + 'HTMLPurifier_Token_End' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/End.php', + 'HTMLPurifier_Token_Start' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Start.php', + 'HTMLPurifier_Token_Tag' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Tag.php', + 'HTMLPurifier_Token_Text' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/Token/Text.php', + 'HTMLPurifier_URI' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URI.php', + 'HTMLPurifier_URIDefinition' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIDefinition.php', + 'HTMLPurifier_URIFilter' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter.php', + 'HTMLPurifier_URIFilter_DisableExternal' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/DisableExternal.php', + 'HTMLPurifier_URIFilter_DisableExternalResources' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/DisableExternalResources.php', + 'HTMLPurifier_URIFilter_DisableResources' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/DisableResources.php', + 'HTMLPurifier_URIFilter_HostBlacklist' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/HostBlacklist.php', + 'HTMLPurifier_URIFilter_MakeAbsolute' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/MakeAbsolute.php', + 'HTMLPurifier_URIFilter_Munge' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIFilter/Munge.php', + 'HTMLPurifier_URIParser' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIParser.php', + 'HTMLPurifier_URIScheme' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme.php', + 'HTMLPurifier_URISchemeRegistry' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URISchemeRegistry.php', + 'HTMLPurifier_URIScheme_data' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/data.php', + 'HTMLPurifier_URIScheme_file' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/file.php', + 'HTMLPurifier_URIScheme_ftp' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/ftp.php', + 'HTMLPurifier_URIScheme_http' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/http.php', + 'HTMLPurifier_URIScheme_https' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/https.php', + 'HTMLPurifier_URIScheme_mailto' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/mailto.php', + 'HTMLPurifier_URIScheme_news' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/news.php', + 'HTMLPurifier_URIScheme_nntp' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/URIScheme/nntp.php', + 'HTMLPurifier_UnitConverter' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/UnitConverter.php', + 'HTMLPurifier_VarParser' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParser.php', + 'HTMLPurifier_VarParserException' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParserException.php', + 'HTMLPurifier_VarParser_Flexible' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParser/Flexible.php', + 'HTMLPurifier_VarParser_Native' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/library/HTMLPurifier/VarParser/Native.php', + 'HashUrl' => __DIR__ . '/../..' . '/admin/survey/classes/class.HashUrl.php', + 'HeatmapLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/HeatmapLatex.php', + 'Help' => __DIR__ . '/../..' . '/admin/survey/Help.php', + 'HierarhijaAnalysis' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaAnalysisClass.php', + 'Hierarhija\\Ajax\\AjaxHierarhija' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxHierarhijaClass.php', + 'Hierarhija\\Ajax\\AjaxHierarhijaDostopUporabnikovClass' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxHierarhijaDostopUporabnikovClass.php', + 'Hierarhija\\Ajax\\AjaxSuperSifra' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxSuperSifraClass.php', + 'Hierarhija\\Ajax\\AjaxUporabniki' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/Ajax/AjaxUporabnikiClass.php', + 'Hierarhija\\Hierarhija' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaClass.php', + 'Hierarhija\\HierarhijaAjax' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaAjaxClass.php', + 'Hierarhija\\HierarhijaHelper' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaHelper.php', + 'Hierarhija\\HierarhijaIzvoz' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaIzvoz.php', + 'Hierarhija\\HierarhijaIzvozAnalize' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaIzvozAnalize.php', + 'Hierarhija\\HierarhijaKopiranjeClass' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaKopiranjeClass.php', + 'Hierarhija\\HierarhijaPorocilaClass' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/class/HierarhijaPorocilaClass.php', + 'Hierarhija\\Model\\HierarhijaOnlyQuery' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/model/HierarhijaOnlyQuery.php', + 'Hierarhija\\Model\\HierarhijaQuery' => __DIR__ . '/../..' . '/admin/survey/modules/mod_hierarhija/model/HierarhijaQuery.php', + 'Jose\\Component\\Core\\Algorithm' => __DIR__ . '/..' . '/web-token/jwt-core/Algorithm.php', + 'Jose\\Component\\Core\\AlgorithmManager' => __DIR__ . '/..' . '/web-token/jwt-core/AlgorithmManager.php', + 'Jose\\Component\\Core\\AlgorithmManagerFactory' => __DIR__ . '/..' . '/web-token/jwt-core/AlgorithmManagerFactory.php', + 'Jose\\Component\\Core\\Converter\\JsonConverter' => __DIR__ . '/..' . '/web-token/jwt-core/Converter/JsonConverter.php', + 'Jose\\Component\\Core\\Converter\\StandardConverter' => __DIR__ . '/..' . '/web-token/jwt-core/Converter/StandardConverter.php', + 'Jose\\Component\\Core\\JWK' => __DIR__ . '/..' . '/web-token/jwt-core/JWK.php', + 'Jose\\Component\\Core\\JWKSet' => __DIR__ . '/..' . '/web-token/jwt-core/JWKSet.php', + 'Jose\\Component\\Core\\JWT' => __DIR__ . '/..' . '/web-token/jwt-core/JWT.php', + 'Jose\\Component\\Core\\Util\\BigInteger' => __DIR__ . '/..' . '/web-token/jwt-core/Util/BigInteger.php', + 'Jose\\Component\\Core\\Util\\ECKey' => __DIR__ . '/..' . '/web-token/jwt-core/Util/ECKey.php', + 'Jose\\Component\\Core\\Util\\ECSignature' => __DIR__ . '/..' . '/web-token/jwt-core/Util/ECSignature.php', + 'Jose\\Component\\Core\\Util\\Ecc\\Curve' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/Curve.php', + 'Jose\\Component\\Core\\Util\\Ecc\\Math' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/Math.php', + 'Jose\\Component\\Core\\Util\\Ecc\\ModularArithmetic' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/ModularArithmetic.php', + 'Jose\\Component\\Core\\Util\\Ecc\\NistCurve' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/NistCurve.php', + 'Jose\\Component\\Core\\Util\\Ecc\\Point' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/Point.php', + 'Jose\\Component\\Core\\Util\\Ecc\\PrivateKey' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/PrivateKey.php', + 'Jose\\Component\\Core\\Util\\Ecc\\PublicKey' => __DIR__ . '/..' . '/web-token/jwt-util-ecc/PublicKey.php', + 'Jose\\Component\\Core\\Util\\Hash' => __DIR__ . '/..' . '/web-token/jwt-core/Util/Hash.php', + 'Jose\\Component\\Core\\Util\\JsonConverter' => __DIR__ . '/..' . '/web-token/jwt-core/Util/JsonConverter.php', + 'Jose\\Component\\Core\\Util\\KeyChecker' => __DIR__ . '/..' . '/web-token/jwt-core/Util/KeyChecker.php', + 'Jose\\Component\\Core\\Util\\RSAKey' => __DIR__ . '/..' . '/web-token/jwt-core/Util/RSAKey.php', + 'Jose\\Component\\KeyManagement\\JKUFactory' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/JKUFactory.php', + 'Jose\\Component\\KeyManagement\\JWKFactory' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/JWKFactory.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\AlgorithmAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/AlgorithmAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\KeyAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/KeyAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\KeyAnalyzerManager' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/KeyAnalyzerManager.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\KeyIdentifierAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/KeyIdentifierAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\Message' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/Message.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\MessageBag' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/MessageBag.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\NoneAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/NoneAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\OctAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/OctAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\RsaAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/RsaAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyAnalyzer\\UsageAnalyzer' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyAnalyzer/UsageAnalyzer.php', + 'Jose\\Component\\KeyManagement\\KeyConverter\\ECKey' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyConverter/ECKey.php', + 'Jose\\Component\\KeyManagement\\KeyConverter\\KeyConverter' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyConverter/KeyConverter.php', + 'Jose\\Component\\KeyManagement\\KeyConverter\\RSAKey' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/KeyConverter/RSAKey.php', + 'Jose\\Component\\KeyManagement\\UrlKeySetFactory' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/UrlKeySetFactory.php', + 'Jose\\Component\\KeyManagement\\X5UFactory' => __DIR__ . '/..' . '/web-token/jwt-key-mgmt/X5UFactory.php', + 'Jose\\Component\\Signature\\Algorithm\\ECDSA' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-ecdsa/ECDSA.php', + 'Jose\\Component\\Signature\\Algorithm\\ES256' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-ecdsa/ES256.php', + 'Jose\\Component\\Signature\\Algorithm\\ES384' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-ecdsa/ES384.php', + 'Jose\\Component\\Signature\\Algorithm\\ES512' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-ecdsa/ES512.php', + 'Jose\\Component\\Signature\\Algorithm\\EdDSA' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-eddsa/EdDSA.php', + 'Jose\\Component\\Signature\\Algorithm\\HMAC' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-hmac/HMAC.php', + 'Jose\\Component\\Signature\\Algorithm\\HS256' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-hmac/HS256.php', + 'Jose\\Component\\Signature\\Algorithm\\HS384' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-hmac/HS384.php', + 'Jose\\Component\\Signature\\Algorithm\\HS512' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-hmac/HS512.php', + 'Jose\\Component\\Signature\\Algorithm\\None' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-none/None.php', + 'Jose\\Component\\Signature\\Algorithm\\PS256' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/PS256.php', + 'Jose\\Component\\Signature\\Algorithm\\PS384' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/PS384.php', + 'Jose\\Component\\Signature\\Algorithm\\PS512' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/PS512.php', + 'Jose\\Component\\Signature\\Algorithm\\RS256' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/RS256.php', + 'Jose\\Component\\Signature\\Algorithm\\RS384' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/RS384.php', + 'Jose\\Component\\Signature\\Algorithm\\RS512' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/RS512.php', + 'Jose\\Component\\Signature\\Algorithm\\RSA' => __DIR__ . '/..' . '/web-token/jwt-signature-algorithm-rsa/RSA.php', + 'Jose\\Component\\Signature\\Algorithm\\SignatureAlgorithm' => __DIR__ . '/..' . '/web-token/jwt-signature/Algorithm/SignatureAlgorithm.php', + 'Jose\\Component\\Signature\\JWS' => __DIR__ . '/..' . '/web-token/jwt-signature/JWS.php', + 'Jose\\Component\\Signature\\JWSBuilder' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSBuilder.php', + 'Jose\\Component\\Signature\\JWSBuilderFactory' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSBuilderFactory.php', + 'Jose\\Component\\Signature\\JWSLoader' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSLoader.php', + 'Jose\\Component\\Signature\\JWSLoaderFactory' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSLoaderFactory.php', + 'Jose\\Component\\Signature\\JWSTokenSupport' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSTokenSupport.php', + 'Jose\\Component\\Signature\\JWSVerifier' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSVerifier.php', + 'Jose\\Component\\Signature\\JWSVerifierFactory' => __DIR__ . '/..' . '/web-token/jwt-signature/JWSVerifierFactory.php', + 'Jose\\Component\\Signature\\Serializer\\CompactSerializer' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/CompactSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JSONFlattenedSerializer' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/JSONFlattenedSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JSONGeneralSerializer' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/JSONGeneralSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JWSSerializer' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/JWSSerializer.php', + 'Jose\\Component\\Signature\\Serializer\\JWSSerializerManager' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/JWSSerializerManager.php', + 'Jose\\Component\\Signature\\Serializer\\JWSSerializerManagerFactory' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/JWSSerializerManagerFactory.php', + 'Jose\\Component\\Signature\\Serializer\\Serializer' => __DIR__ . '/..' . '/web-token/jwt-signature/Serializer/Serializer.php', + 'Jose\\Component\\Signature\\Signature' => __DIR__ . '/..' . '/web-token/jwt-signature/Signature.php', + 'Jose\\Component\\Signature\\Util\\RSA' => __DIR__ . '/..' . '/web-token/jwt-signature/Util/RSA.php', + 'KalkulacijaLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/KalkulacijaLatex.php', + 'KvotaLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/KvotaLatex.php', + 'LatexAnalysis' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexAnalysis.php', + 'LatexAnalysisElement' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexAnalysisElement.php', + 'LatexDocument' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexDocument.php', + 'LatexEditsAnalysis' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexEditsAnalysis.php', + 'LatexGDPR' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexGDPR.php', + 'LatexStatus' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexStatus.php', + 'LatexSurvey' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexSurvey.php', + 'LatexSurveyElement' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/class.LatexSurveyElement.php', + 'Library' => __DIR__ . '/../..' . '/admin/survey/classes/class.Library.php', + 'LokacijaLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/LokacijaLatex.php', + 'MAZA' => __DIR__ . '/../..' . '/admin/survey/modules/mod_MAZA/class.MAZA.php', + 'MAZAExport' => __DIR__ . '/../..' . '/admin/survey/modules/mod_MAZA/class.MAZAExport.php', + 'MailAdapter' => __DIR__ . '/../..' . '/admin/survey/classes/objects/obj.MailAdapter.php', + 'Mailer' => __DIR__ . '/../..' . '/admin/survey/modules/Evalvacija/PDF_mailer/mailer.php', + 'MaxMind\\Db\\Reader' => __DIR__ . '/..' . '/maxmind-db/reader/src/MaxMind/Db/Reader.php', + 'MaxMind\\Db\\Reader\\Decoder' => __DIR__ . '/..' . '/maxmind-db/reader/src/MaxMind/Db/Reader/Decoder.php', + 'MaxMind\\Db\\Reader\\InvalidDatabaseException' => __DIR__ . '/..' . '/maxmind-db/reader/src/MaxMind/Db/Reader/InvalidDatabaseException.php', + 'MaxMind\\Db\\Reader\\Metadata' => __DIR__ . '/..' . '/maxmind-db/reader/src/MaxMind/Db/Reader/Metadata.php', + 'MaxMind\\Db\\Reader\\Util' => __DIR__ . '/..' . '/maxmind-db/reader/src/MaxMind/Db/Reader/Util.php', + 'MaxMind\\Exception\\AuthenticationException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/AuthenticationException.php', + 'MaxMind\\Exception\\HttpException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/HttpException.php', + 'MaxMind\\Exception\\InsufficientFundsException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/InsufficientFundsException.php', + 'MaxMind\\Exception\\InvalidInputException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/InvalidInputException.php', + 'MaxMind\\Exception\\InvalidRequestException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/InvalidRequestException.php', + 'MaxMind\\Exception\\IpAddressNotFoundException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/IpAddressNotFoundException.php', + 'MaxMind\\Exception\\PermissionRequiredException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/PermissionRequiredException.php', + 'MaxMind\\Exception\\WebServiceException' => __DIR__ . '/..' . '/maxmind/web-service-common/src/Exception/WebServiceException.php', + 'MaxMind\\WebService\\Client' => __DIR__ . '/..' . '/maxmind/web-service-common/src/WebService/Client.php', + 'MaxMind\\WebService\\Http\\CurlRequest' => __DIR__ . '/..' . '/maxmind/web-service-common/src/WebService/Http/CurlRequest.php', + 'MaxMind\\WebService\\Http\\Request' => __DIR__ . '/..' . '/maxmind/web-service-common/src/WebService/Http/Request.php', + 'MaxMind\\WebService\\Http\\RequestFactory' => __DIR__ . '/..' . '/maxmind/web-service-common/src/WebService/Http/RequestFactory.php', + 'Minishlink\\WebPush\\Encryption' => __DIR__ . '/..' . '/minishlink/web-push/src/Encryption.php', + 'Minishlink\\WebPush\\MessageSentReport' => __DIR__ . '/..' . '/minishlink/web-push/src/MessageSentReport.php', + 'Minishlink\\WebPush\\Notification' => __DIR__ . '/..' . '/minishlink/web-push/src/Notification.php', + 'Minishlink\\WebPush\\Subscription' => __DIR__ . '/..' . '/minishlink/web-push/src/Subscription.php', + 'Minishlink\\WebPush\\SubscriptionInterface' => __DIR__ . '/..' . '/minishlink/web-push/src/SubscriptionInterface.php', + 'Minishlink\\WebPush\\Utils' => __DIR__ . '/..' . '/minishlink/web-push/src/Utils.php', + 'Minishlink\\WebPush\\VAPID' => __DIR__ . '/..' . '/minishlink/web-push/src/VAPID.php', + 'Minishlink\\WebPush\\WebPush' => __DIR__ . '/..' . '/minishlink/web-push/src/WebPush.php', + 'MultiGridLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/MultiGridLatex.php', + 'MultiGridXml' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/Vprasanja/MultiGridXml.php', + 'MustangWord' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyLanguageTechnology.php', + 'MyHorBar' => __DIR__ . '/../..' . '/admin/survey/pChart/classes/class.MyHorBar.php', + 'NagovorLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/NagovorLatex.php', + 'NewSurvey' => __DIR__ . '/../..' . '/admin/survey/classes/class.NewSurvey.php', + 'Normalizer' => __DIR__ . '/..' . '/symfony/polyfill-intl-normalizer/Resources/stubs/Normalizer.php', + 'Notifications' => __DIR__ . '/../..' . '/admin/survey/classes/class.Notifications.php', + 'PHPMailer\\PHPMailer\\Exception' => __DIR__ . '/..' . '/phpmailer/phpmailer/src/Exception.php', + 'PHPMailer\\PHPMailer\\OAuth' => __DIR__ . '/..' . '/phpmailer/phpmailer/src/OAuth.php', + 'PHPMailer\\PHPMailer\\PHPMailer' => __DIR__ . '/..' . '/phpmailer/phpmailer/src/PHPMailer.php', + 'PHPMailer\\PHPMailer\\POP3' => __DIR__ . '/..' . '/phpmailer/phpmailer/src/POP3.php', + 'PHPMailer\\PHPMailer\\SMTP' => __DIR__ . '/..' . '/phpmailer/phpmailer/src/SMTP.php', + 'PayPalCheckoutSdk\\Core\\AccessToken' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessToken.php', + 'PayPalCheckoutSdk\\Core\\AccessTokenRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessTokenRequest.php', + 'PayPalCheckoutSdk\\Core\\AuthorizationInjector' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AuthorizationInjector.php', + 'PayPalCheckoutSdk\\Core\\FPTIInstrumentationInjector' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/FPTIInstrumentationInjector.php', + 'PayPalCheckoutSdk\\Core\\GzipInjector' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/GzipInjector.php', + 'PayPalCheckoutSdk\\Core\\PayPalEnvironment' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalEnvironment.php', + 'PayPalCheckoutSdk\\Core\\PayPalHttpClient' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalHttpClient.php', + 'PayPalCheckoutSdk\\Core\\ProductionEnvironment' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/ProductionEnvironment.php', + 'PayPalCheckoutSdk\\Core\\RefreshTokenRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/RefreshTokenRequest.php', + 'PayPalCheckoutSdk\\Core\\SandboxEnvironment' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/SandboxEnvironment.php', + 'PayPalCheckoutSdk\\Core\\UserAgent' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/UserAgent.php', + 'PayPalCheckoutSdk\\Core\\Version' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/Version.php', + 'PayPalCheckoutSdk\\Orders\\OrdersAuthorizeRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersAuthorizeRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersCaptureRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCaptureRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersCreateRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCreateRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersGetRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersGetRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersPatchRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersPatchRequest.php', + 'PayPalCheckoutSdk\\Orders\\OrdersValidateRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersValidateRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsCaptureRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsCaptureRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsGetRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsGetRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsReauthorizeRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsReauthorizeRequest.php', + 'PayPalCheckoutSdk\\Payments\\AuthorizationsVoidRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsVoidRequest.php', + 'PayPalCheckoutSdk\\Payments\\CapturesGetRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesGetRequest.php', + 'PayPalCheckoutSdk\\Payments\\CapturesRefundRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesRefundRequest.php', + 'PayPalCheckoutSdk\\Payments\\RefundsGetRequest' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/RefundsGetRequest.php', + 'PayPalHttp\\Curl' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Curl.php', + 'PayPalHttp\\Encoder' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Encoder.php', + 'PayPalHttp\\Environment' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Environment.php', + 'PayPalHttp\\HttpClient' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/HttpClient.php', + 'PayPalHttp\\HttpException' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/HttpException.php', + 'PayPalHttp\\HttpRequest' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/HttpRequest.php', + 'PayPalHttp\\HttpResponse' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/HttpResponse.php', + 'PayPalHttp\\IOException' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/IOException.php', + 'PayPalHttp\\Injector' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Injector.php', + 'PayPalHttp\\Serializer' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Serializer.php', + 'PayPalHttp\\Serializer\\Form' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Form.php', + 'PayPalHttp\\Serializer\\FormPart' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/FormPart.php', + 'PayPalHttp\\Serializer\\Json' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Json.php', + 'PayPalHttp\\Serializer\\Multipart' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Multipart.php', + 'PayPalHttp\\Serializer\\Text' => __DIR__ . '/..' . '/paypal/paypalhttp/lib/PayPalHttp/Serializer/Text.php', + 'PopUp' => __DIR__ . '/../..' . '/admin/survey/classes/objects/obj.PopUp.php', + 'PopUpButton' => __DIR__ . '/../..' . '/admin/survey/classes/objects/obj.PopUpButton.php', + 'PopUpCancelButton' => __DIR__ . '/../..' . '/admin/survey/classes/objects/obj.PopUpCancelButton.php', + 'Prevajanje' => __DIR__ . '/../..' . '/admin/survey/classes/class.Prevajanje.php', + 'Psr\\Http\\Message\\MessageInterface' => __DIR__ . '/..' . '/psr/http-message/src/MessageInterface.php', + 'Psr\\Http\\Message\\RequestInterface' => __DIR__ . '/..' . '/psr/http-message/src/RequestInterface.php', + 'Psr\\Http\\Message\\ResponseInterface' => __DIR__ . '/..' . '/psr/http-message/src/ResponseInterface.php', + 'Psr\\Http\\Message\\ServerRequestInterface' => __DIR__ . '/..' . '/psr/http-message/src/ServerRequestInterface.php', + 'Psr\\Http\\Message\\StreamInterface' => __DIR__ . '/..' . '/psr/http-message/src/StreamInterface.php', + 'Psr\\Http\\Message\\UploadedFileInterface' => __DIR__ . '/..' . '/psr/http-message/src/UploadedFileInterface.php', + 'Psr\\Http\\Message\\UriInterface' => __DIR__ . '/..' . '/psr/http-message/src/UriInterface.php', + 'Purifier' => __DIR__ . '/../..' . '/admin/survey/classes/htmlpurifier-4.3.0/Purifier.php', + 'RadioCheckboxSelectLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/RadioCheckboxSelectLatex.php', + 'RadioXml' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/Vprasanja/RadioXml.php', + 'RazvrscanjeLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/RazvrscanjeLatex.php', + 'RecodeValues' => __DIR__ . '/../..' . '/admin/survey/classes/class.RecodeValues.php', + 'SNImenaLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/SNImena.php', + 'Sample\\AuthorizeIntentExamples\\AuthorizeOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/AuthorizeOrder.php', + 'Sample\\AuthorizeIntentExamples\\CaptureOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CaptureOrder.php', + 'Sample\\AuthorizeIntentExamples\\CreateOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CreateOrder.php', + 'Sample\\CaptureIntentExamples\\CaptureOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CaptureOrder.php', + 'Sample\\CaptureIntentExamples\\CreateOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CreateOrder.php', + 'Sample\\GetOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/GetOrder.php', + 'Sample\\PatchOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/PatchOrder.php', + 'Sample\\PayPalClient' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/PayPalClient.php', + 'Sample\\RefundOrder' => __DIR__ . '/..' . '/paypal/paypal-checkout-sdk/samples/RefundOrder.php', + 'Setting' => __DIR__ . '/../..' . '/admin/survey/classes/class.Setting.php', + 'Sonata\\GoogleAuthenticator\\FixedBitNotation' => __DIR__ . '/..' . '/sonata-project/google-authenticator/src/FixedBitNotation.php', + 'Sonata\\GoogleAuthenticator\\GoogleAuthenticator' => __DIR__ . '/..' . '/sonata-project/google-authenticator/src/GoogleAuthenticator.php', + 'Sonata\\GoogleAuthenticator\\GoogleAuthenticatorInterface' => __DIR__ . '/..' . '/sonata-project/google-authenticator/src/GoogleAuthenticatorInterface.php', + 'Sonata\\GoogleAuthenticator\\GoogleQrUrl' => __DIR__ . '/..' . '/sonata-project/google-authenticator/src/GoogleQrUrl.php', + 'Sonata\\GoogleAuthenticator\\RuntimeException' => __DIR__ . '/..' . '/sonata-project/google-authenticator/src/RuntimeException.php', + 'SpremenljivkaSkala' => __DIR__ . '/../..' . '/admin/survey/classes/objects/obj.SpremenljivkaSkala.php', + 'SteviloLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/SteviloLatex.php', + 'SteviloXml' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/Vprasanja/SteviloXml.php', + 'Stripe\\Account' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Account.php', + 'Stripe\\AccountLink' => __DIR__ . '/..' . '/stripe/stripe-php/lib/AccountLink.php', + 'Stripe\\AlipayAccount' => __DIR__ . '/..' . '/stripe/stripe-php/lib/AlipayAccount.php', + 'Stripe\\ApiOperations\\All' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/All.php', + 'Stripe\\ApiOperations\\Create' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/Create.php', + 'Stripe\\ApiOperations\\Delete' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/Delete.php', + 'Stripe\\ApiOperations\\NestedResource' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/NestedResource.php', + 'Stripe\\ApiOperations\\Request' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/Request.php', + 'Stripe\\ApiOperations\\Retrieve' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/Retrieve.php', + 'Stripe\\ApiOperations\\Update' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiOperations/Update.php', + 'Stripe\\ApiRequestor' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiRequestor.php', + 'Stripe\\ApiResource' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiResource.php', + 'Stripe\\ApiResponse' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApiResponse.php', + 'Stripe\\ApplePayDomain' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApplePayDomain.php', + 'Stripe\\ApplicationFee' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApplicationFee.php', + 'Stripe\\ApplicationFeeRefund' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ApplicationFeeRefund.php', + 'Stripe\\Balance' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Balance.php', + 'Stripe\\BalanceTransaction' => __DIR__ . '/..' . '/stripe/stripe-php/lib/BalanceTransaction.php', + 'Stripe\\BankAccount' => __DIR__ . '/..' . '/stripe/stripe-php/lib/BankAccount.php', + 'Stripe\\BaseStripeClient' => __DIR__ . '/..' . '/stripe/stripe-php/lib/BaseStripeClient.php', + 'Stripe\\BillingPortal\\Session' => __DIR__ . '/..' . '/stripe/stripe-php/lib/BillingPortal/Session.php', + 'Stripe\\BitcoinReceiver' => __DIR__ . '/..' . '/stripe/stripe-php/lib/BitcoinReceiver.php', + 'Stripe\\BitcoinTransaction' => __DIR__ . '/..' . '/stripe/stripe-php/lib/BitcoinTransaction.php', + 'Stripe\\Capability' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Capability.php', + 'Stripe\\Card' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Card.php', + 'Stripe\\Charge' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Charge.php', + 'Stripe\\Checkout\\Session' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Checkout/Session.php', + 'Stripe\\Collection' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Collection.php', + 'Stripe\\CountrySpec' => __DIR__ . '/..' . '/stripe/stripe-php/lib/CountrySpec.php', + 'Stripe\\Coupon' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Coupon.php', + 'Stripe\\CreditNote' => __DIR__ . '/..' . '/stripe/stripe-php/lib/CreditNote.php', + 'Stripe\\CreditNoteLineItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/CreditNoteLineItem.php', + 'Stripe\\Customer' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Customer.php', + 'Stripe\\CustomerBalanceTransaction' => __DIR__ . '/..' . '/stripe/stripe-php/lib/CustomerBalanceTransaction.php', + 'Stripe\\Discount' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Discount.php', + 'Stripe\\Dispute' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Dispute.php', + 'Stripe\\EphemeralKey' => __DIR__ . '/..' . '/stripe/stripe-php/lib/EphemeralKey.php', + 'Stripe\\ErrorObject' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ErrorObject.php', + 'Stripe\\Event' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Event.php', + 'Stripe\\Exception\\ApiConnectionException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/ApiConnectionException.php', + 'Stripe\\Exception\\ApiErrorException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/ApiErrorException.php', + 'Stripe\\Exception\\AuthenticationException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/AuthenticationException.php', + 'Stripe\\Exception\\BadMethodCallException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/BadMethodCallException.php', + 'Stripe\\Exception\\CardException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/CardException.php', + 'Stripe\\Exception\\ExceptionInterface' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/ExceptionInterface.php', + 'Stripe\\Exception\\IdempotencyException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/IdempotencyException.php', + 'Stripe\\Exception\\InvalidArgumentException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/InvalidArgumentException.php', + 'Stripe\\Exception\\InvalidRequestException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/InvalidRequestException.php', + 'Stripe\\Exception\\OAuth\\ExceptionInterface' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/ExceptionInterface.php', + 'Stripe\\Exception\\OAuth\\InvalidClientException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/InvalidClientException.php', + 'Stripe\\Exception\\OAuth\\InvalidGrantException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/InvalidGrantException.php', + 'Stripe\\Exception\\OAuth\\InvalidRequestException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/InvalidRequestException.php', + 'Stripe\\Exception\\OAuth\\InvalidScopeException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/InvalidScopeException.php', + 'Stripe\\Exception\\OAuth\\OAuthErrorException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/OAuthErrorException.php', + 'Stripe\\Exception\\OAuth\\UnknownOAuthErrorException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/UnknownOAuthErrorException.php', + 'Stripe\\Exception\\OAuth\\UnsupportedGrantTypeException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/UnsupportedGrantTypeException.php', + 'Stripe\\Exception\\OAuth\\UnsupportedResponseTypeException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/OAuth/UnsupportedResponseTypeException.php', + 'Stripe\\Exception\\PermissionException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/PermissionException.php', + 'Stripe\\Exception\\RateLimitException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/RateLimitException.php', + 'Stripe\\Exception\\SignatureVerificationException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/SignatureVerificationException.php', + 'Stripe\\Exception\\UnexpectedValueException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/UnexpectedValueException.php', + 'Stripe\\Exception\\UnknownApiErrorException' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Exception/UnknownApiErrorException.php', + 'Stripe\\ExchangeRate' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ExchangeRate.php', + 'Stripe\\File' => __DIR__ . '/..' . '/stripe/stripe-php/lib/File.php', + 'Stripe\\FileLink' => __DIR__ . '/..' . '/stripe/stripe-php/lib/FileLink.php', + 'Stripe\\HttpClient\\ClientInterface' => __DIR__ . '/..' . '/stripe/stripe-php/lib/HttpClient/ClientInterface.php', + 'Stripe\\HttpClient\\CurlClient' => __DIR__ . '/..' . '/stripe/stripe-php/lib/HttpClient/CurlClient.php', + 'Stripe\\Invoice' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Invoice.php', + 'Stripe\\InvoiceItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/InvoiceItem.php', + 'Stripe\\InvoiceLineItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/InvoiceLineItem.php', + 'Stripe\\Issuing\\Authorization' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Issuing/Authorization.php', + 'Stripe\\Issuing\\Card' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Issuing/Card.php', + 'Stripe\\Issuing\\CardDetails' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Issuing/CardDetails.php', + 'Stripe\\Issuing\\Cardholder' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Issuing/Cardholder.php', + 'Stripe\\Issuing\\Dispute' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Issuing/Dispute.php', + 'Stripe\\Issuing\\Transaction' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Issuing/Transaction.php', + 'Stripe\\LineItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/LineItem.php', + 'Stripe\\LoginLink' => __DIR__ . '/..' . '/stripe/stripe-php/lib/LoginLink.php', + 'Stripe\\Mandate' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Mandate.php', + 'Stripe\\OAuth' => __DIR__ . '/..' . '/stripe/stripe-php/lib/OAuth.php', + 'Stripe\\OAuthErrorObject' => __DIR__ . '/..' . '/stripe/stripe-php/lib/OAuthErrorObject.php', + 'Stripe\\Order' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Order.php', + 'Stripe\\OrderItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/OrderItem.php', + 'Stripe\\OrderReturn' => __DIR__ . '/..' . '/stripe/stripe-php/lib/OrderReturn.php', + 'Stripe\\PaymentIntent' => __DIR__ . '/..' . '/stripe/stripe-php/lib/PaymentIntent.php', + 'Stripe\\PaymentMethod' => __DIR__ . '/..' . '/stripe/stripe-php/lib/PaymentMethod.php', + 'Stripe\\Payout' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Payout.php', + 'Stripe\\Person' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Person.php', + 'Stripe\\Plan' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Plan.php', + 'Stripe\\Price' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Price.php', + 'Stripe\\Product' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Product.php', + 'Stripe\\PromotionCode' => __DIR__ . '/..' . '/stripe/stripe-php/lib/PromotionCode.php', + 'Stripe\\Radar\\EarlyFraudWarning' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Radar/EarlyFraudWarning.php', + 'Stripe\\Radar\\ValueList' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Radar/ValueList.php', + 'Stripe\\Radar\\ValueListItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Radar/ValueListItem.php', + 'Stripe\\Recipient' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Recipient.php', + 'Stripe\\RecipientTransfer' => __DIR__ . '/..' . '/stripe/stripe-php/lib/RecipientTransfer.php', + 'Stripe\\Refund' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Refund.php', + 'Stripe\\Reporting\\ReportRun' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Reporting/ReportRun.php', + 'Stripe\\Reporting\\ReportType' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Reporting/ReportType.php', + 'Stripe\\RequestTelemetry' => __DIR__ . '/..' . '/stripe/stripe-php/lib/RequestTelemetry.php', + 'Stripe\\Review' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Review.php', + 'Stripe\\SKU' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SKU.php', + 'Stripe\\Service\\AbstractService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/AbstractService.php', + 'Stripe\\Service\\AbstractServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/AbstractServiceFactory.php', + 'Stripe\\Service\\AccountLinkService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/AccountLinkService.php', + 'Stripe\\Service\\AccountService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/AccountService.php', + 'Stripe\\Service\\ApplePayDomainService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/ApplePayDomainService.php', + 'Stripe\\Service\\ApplicationFeeService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/ApplicationFeeService.php', + 'Stripe\\Service\\BalanceService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/BalanceService.php', + 'Stripe\\Service\\BalanceTransactionService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/BalanceTransactionService.php', + 'Stripe\\Service\\BillingPortal\\BillingPortalServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/BillingPortal/BillingPortalServiceFactory.php', + 'Stripe\\Service\\BillingPortal\\SessionService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/BillingPortal/SessionService.php', + 'Stripe\\Service\\ChargeService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/ChargeService.php', + 'Stripe\\Service\\Checkout\\CheckoutServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Checkout/CheckoutServiceFactory.php', + 'Stripe\\Service\\Checkout\\SessionService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Checkout/SessionService.php', + 'Stripe\\Service\\CoreServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/CoreServiceFactory.php', + 'Stripe\\Service\\CountrySpecService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/CountrySpecService.php', + 'Stripe\\Service\\CouponService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/CouponService.php', + 'Stripe\\Service\\CreditNoteService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/CreditNoteService.php', + 'Stripe\\Service\\CustomerService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/CustomerService.php', + 'Stripe\\Service\\DisputeService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/DisputeService.php', + 'Stripe\\Service\\EphemeralKeyService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/EphemeralKeyService.php', + 'Stripe\\Service\\EventService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/EventService.php', + 'Stripe\\Service\\ExchangeRateService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/ExchangeRateService.php', + 'Stripe\\Service\\FileLinkService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/FileLinkService.php', + 'Stripe\\Service\\FileService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/FileService.php', + 'Stripe\\Service\\InvoiceItemService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/InvoiceItemService.php', + 'Stripe\\Service\\InvoiceService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/InvoiceService.php', + 'Stripe\\Service\\Issuing\\AuthorizationService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Issuing/AuthorizationService.php', + 'Stripe\\Service\\Issuing\\CardService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Issuing/CardService.php', + 'Stripe\\Service\\Issuing\\CardholderService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Issuing/CardholderService.php', + 'Stripe\\Service\\Issuing\\DisputeService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Issuing/DisputeService.php', + 'Stripe\\Service\\Issuing\\IssuingServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Issuing/IssuingServiceFactory.php', + 'Stripe\\Service\\Issuing\\TransactionService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Issuing/TransactionService.php', + 'Stripe\\Service\\MandateService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/MandateService.php', + 'Stripe\\Service\\OAuthService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/OAuthService.php', + 'Stripe\\Service\\OrderReturnService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/OrderReturnService.php', + 'Stripe\\Service\\OrderService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/OrderService.php', + 'Stripe\\Service\\PaymentIntentService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/PaymentIntentService.php', + 'Stripe\\Service\\PaymentMethodService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/PaymentMethodService.php', + 'Stripe\\Service\\PayoutService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/PayoutService.php', + 'Stripe\\Service\\PlanService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/PlanService.php', + 'Stripe\\Service\\PriceService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/PriceService.php', + 'Stripe\\Service\\ProductService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/ProductService.php', + 'Stripe\\Service\\PromotionCodeService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/PromotionCodeService.php', + 'Stripe\\Service\\Radar\\EarlyFraudWarningService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Radar/EarlyFraudWarningService.php', + 'Stripe\\Service\\Radar\\RadarServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Radar/RadarServiceFactory.php', + 'Stripe\\Service\\Radar\\ValueListItemService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Radar/ValueListItemService.php', + 'Stripe\\Service\\Radar\\ValueListService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Radar/ValueListService.php', + 'Stripe\\Service\\RefundService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/RefundService.php', + 'Stripe\\Service\\Reporting\\ReportRunService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Reporting/ReportRunService.php', + 'Stripe\\Service\\Reporting\\ReportTypeService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Reporting/ReportTypeService.php', + 'Stripe\\Service\\Reporting\\ReportingServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Reporting/ReportingServiceFactory.php', + 'Stripe\\Service\\ReviewService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/ReviewService.php', + 'Stripe\\Service\\SetupAttemptService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SetupAttemptService.php', + 'Stripe\\Service\\SetupIntentService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SetupIntentService.php', + 'Stripe\\Service\\Sigma\\ScheduledQueryRunService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Sigma/ScheduledQueryRunService.php', + 'Stripe\\Service\\Sigma\\SigmaServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Sigma/SigmaServiceFactory.php', + 'Stripe\\Service\\SkuService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SkuService.php', + 'Stripe\\Service\\SourceService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SourceService.php', + 'Stripe\\Service\\SubscriptionItemService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SubscriptionItemService.php', + 'Stripe\\Service\\SubscriptionScheduleService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SubscriptionScheduleService.php', + 'Stripe\\Service\\SubscriptionService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/SubscriptionService.php', + 'Stripe\\Service\\TaxRateService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/TaxRateService.php', + 'Stripe\\Service\\Terminal\\ConnectionTokenService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php', + 'Stripe\\Service\\Terminal\\LocationService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Terminal/LocationService.php', + 'Stripe\\Service\\Terminal\\ReaderService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Terminal/ReaderService.php', + 'Stripe\\Service\\Terminal\\TerminalServiceFactory' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/Terminal/TerminalServiceFactory.php', + 'Stripe\\Service\\TokenService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/TokenService.php', + 'Stripe\\Service\\TopupService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/TopupService.php', + 'Stripe\\Service\\TransferService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/TransferService.php', + 'Stripe\\Service\\WebhookEndpointService' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Service/WebhookEndpointService.php', + 'Stripe\\SetupAttempt' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SetupAttempt.php', + 'Stripe\\SetupIntent' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SetupIntent.php', + 'Stripe\\Sigma\\ScheduledQueryRun' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Sigma/ScheduledQueryRun.php', + 'Stripe\\SingletonApiResource' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SingletonApiResource.php', + 'Stripe\\Source' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Source.php', + 'Stripe\\SourceTransaction' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SourceTransaction.php', + 'Stripe\\Stripe' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Stripe.php', + 'Stripe\\StripeClient' => __DIR__ . '/..' . '/stripe/stripe-php/lib/StripeClient.php', + 'Stripe\\StripeClientInterface' => __DIR__ . '/..' . '/stripe/stripe-php/lib/StripeClientInterface.php', + 'Stripe\\StripeObject' => __DIR__ . '/..' . '/stripe/stripe-php/lib/StripeObject.php', + 'Stripe\\Subscription' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Subscription.php', + 'Stripe\\SubscriptionItem' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SubscriptionItem.php', + 'Stripe\\SubscriptionSchedule' => __DIR__ . '/..' . '/stripe/stripe-php/lib/SubscriptionSchedule.php', + 'Stripe\\TaxId' => __DIR__ . '/..' . '/stripe/stripe-php/lib/TaxId.php', + 'Stripe\\TaxRate' => __DIR__ . '/..' . '/stripe/stripe-php/lib/TaxRate.php', + 'Stripe\\Terminal\\ConnectionToken' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Terminal/ConnectionToken.php', + 'Stripe\\Terminal\\Location' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Terminal/Location.php', + 'Stripe\\Terminal\\Reader' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Terminal/Reader.php', + 'Stripe\\ThreeDSecure' => __DIR__ . '/..' . '/stripe/stripe-php/lib/ThreeDSecure.php', + 'Stripe\\Token' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Token.php', + 'Stripe\\Topup' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Topup.php', + 'Stripe\\Transfer' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Transfer.php', + 'Stripe\\TransferReversal' => __DIR__ . '/..' . '/stripe/stripe-php/lib/TransferReversal.php', + 'Stripe\\UsageRecord' => __DIR__ . '/..' . '/stripe/stripe-php/lib/UsageRecord.php', + 'Stripe\\UsageRecordSummary' => __DIR__ . '/..' . '/stripe/stripe-php/lib/UsageRecordSummary.php', + 'Stripe\\Util\\CaseInsensitiveArray' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/CaseInsensitiveArray.php', + 'Stripe\\Util\\DefaultLogger' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/DefaultLogger.php', + 'Stripe\\Util\\LoggerInterface' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/LoggerInterface.php', + 'Stripe\\Util\\ObjectTypes' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/ObjectTypes.php', + 'Stripe\\Util\\RandomGenerator' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/RandomGenerator.php', + 'Stripe\\Util\\RequestOptions' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/RequestOptions.php', + 'Stripe\\Util\\Set' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/Set.php', + 'Stripe\\Util\\Util' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Util/Util.php', + 'Stripe\\Webhook' => __DIR__ . '/..' . '/stripe/stripe-php/lib/Webhook.php', + 'Stripe\\WebhookEndpoint' => __DIR__ . '/..' . '/stripe/stripe-php/lib/WebhookEndpoint.php', + 'Stripe\\WebhookSignature' => __DIR__ . '/..' . '/stripe/stripe-php/lib/WebhookSignature.php', + 'Survey360' => __DIR__ . '/../..' . '/admin/survey/modules/mod_360/class.Survey360.php', + 'Survey3601ka' => __DIR__ . '/../..' . '/admin/survey/modules/mod_360_1KA/class.Survey3601ka.php', + 'SurveyAapor' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAapor.php', + 'SurveyAdmin' => __DIR__ . '/../..' . '/admin/survey/SurveyAdmin.php', + 'SurveyAdminAjax' => __DIR__ . '/../..' . '/admin/survey/SurveyAdminAjax.php', + 'SurveyAdminSettings' => __DIR__ . '/../..' . '/admin/survey/SurveyAdminSettings.php', + 'SurveyAdvancedParadata' => __DIR__ . '/../..' . '/admin/survey/modules/mod_advanced_paradata/class.SurveyAdvancedParadata.php', + 'SurveyAdvancedParadataExport' => __DIR__ . '/../..' . '/admin/survey/modules/mod_advanced_paradata/class.SurveyAdvancedParadataExport.php', + 'SurveyAdvancedParadataLog' => __DIR__ . '/../..' . '/admin/survey/modules/mod_advanced_paradata/class.SurveyAdvancedParadataLog.php', + 'SurveyAktivnost' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAktivnost.php', + 'SurveyAlert' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAlert.php', + 'SurveyAnalysis' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAnalysis.php', + 'SurveyAnalysisArchive' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAnalysisArchive.php', + 'SurveyAnalysisGorenje' => __DIR__ . '/../..' . '/admin/survey/modules/mod_gorenje/class.SurveyAnalysisGorenje.php', + 'SurveyAnalysisHelper' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAnalysisHelper.php', + 'SurveyAnalysisR' => __DIR__ . '/../..' . '/admin/survey/R/class.SurveyAnalysisR.php', + 'SurveyAppendMerge' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyAppendMerge.php', + 'SurveyBORZA' => __DIR__ . '/../..' . '/admin/survey/modules/mod_BORZA/class.SurveyBORZA.php', + 'SurveyBaseSetting' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyBaseSetting.php', + 'SurveyBreak' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyBreak.php', + 'SurveyChart' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyChart.php', + 'SurveyChat' => __DIR__ . '/../..' . '/admin/survey/modules/mod_chat/class.SurveyChat.php', + 'SurveyCondition' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyCondition.php', + 'SurveyConditionProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyConditionProfiles.php', + 'SurveyConnect' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyConnect.php', + 'SurveyCopy' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyCopy.php', + 'SurveyCrosstabs' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyCrosstabs.php', + 'SurveyCustomReport' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyCustomReport.php', + 'SurveyDataCollect' => __DIR__ . '/../..' . '/admin/survey/classes/surveyData/class.SurveyDataCollect.php', + 'SurveyDataDisplay' => __DIR__ . '/../..' . '/admin/survey/classes/surveyData/class.SurveyDataDisplay.php', + 'SurveyDataFile' => __DIR__ . '/../..' . '/admin/survey/classes/surveyData/class.SurveyDataFile.php', + 'SurveyDataSettingProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyDataSettingProfiles.php', + 'SurveyDiagnostics' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyDiagnostics.php', + 'SurveyEditsAnalysis' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyEditsAnalysis.php', + 'SurveyEmployMeter' => __DIR__ . '/../..' . '/admin/survey/modules/mod_EVOLI/class.SurveyEmployMeter.php', + 'SurveyEvoli' => __DIR__ . '/../..' . '/admin/survey/modules/mod_EVOLI/class.SurveyEvoli.php', + 'SurveyExport' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyExport.php', + 'SurveyExportProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyExportProfiles.php', + 'SurveyFieldwork' => __DIR__ . '/../..' . '/admin/survey/modules/mod_fieldwork/class.SurveyFieldwork.php', + 'SurveyGeoIP' => __DIR__ . '/../..' . '/admin/survey/modules/mod_geoIP/class.SurveyGeoIP.php', + 'SurveyGetHeatMapRadij' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyGetHeatMapRadij.php', + 'SurveyGorenje' => __DIR__ . '/../..' . '/admin/survey/modules/mod_gorenje/SurveyGorenje.php', + 'SurveyHeatMap' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyHeatMap.php', + 'SurveyHeatMapBackground' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyHeatMapBackground.php', + 'SurveyHeatMapExportIcons' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyHeatMapExportIcons.php', + 'SurveyHeatMapImageSave' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyHeatMapSaveImage.php', + 'SurveyHeatMapRadij' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyHeatMapRadij.php', + 'SurveyInfo' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyInfo.php', + 'SurveyInspect' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyInpect.php', + 'SurveyInvitationsNew' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyInvitationsNew.php', + 'SurveyJsonSurveyData' => __DIR__ . '/../..' . '/admin/survey/modules/mod_json_survey_export/class.SurveyJsonSurveyData.php', + 'SurveyLanguageTechnology' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyLanguageTechnology.php', + 'SurveyList' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyList.php', + 'SurveyLog' => __DIR__ . '/../..' . '/admin/survey/classes/log/class.SurveyLog.php', + 'SurveyMFDPS' => __DIR__ . '/../..' . '/admin/survey/modules/mod_MFDPS/class.SurveyMFDPS.php', + 'SurveyMJU' => __DIR__ . '/../..' . '/admin/survey/modules/mod_MJU/class.SurveyMJU.php', + 'SurveyMJUEnote' => __DIR__ . '/../..' . '/admin/survey/modules/mod_MJU/class.SurveyMJUEnote.php', + 'SurveyMapData' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyMapData.php', + 'SurveyMeans' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyMeans.php', + 'SurveyMissingProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyMissingProfiles.php', + 'SurveyMissingValues' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyMissingValues.php', + 'SurveyMobile' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyMobile.php', + 'SurveyMultiCrosstabs' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyMultiCrosstabs.php', + 'SurveyPanel' => __DIR__ . '/../..' . '/admin/survey/modules/mod_panel/class.SurveyPanel.php', + 'SurveyParaAnalysis' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyParaAnalysis.php', + 'SurveyParaGraph' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyParaGraph.php', + 'SurveyPostProcess' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyPostProcess.php', + 'SurveyProfileManager' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyProfileManager.php', + 'SurveyQuiz' => __DIR__ . '/../..' . '/admin/survey/modules/mod_quiz/class.SurveyQuiz.php', + 'SurveyQuotas' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyQuotas.php', + 'SurveyRecoding' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyRecoding.php', + 'SurveyReminderTracking' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyReminderTracking.php', + 'SurveyRespondents' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyRespondents.php', + 'SurveySession' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveySession.php', + 'SurveySessionDestructor' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveySession.php', + 'SurveySetting' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveySetting.php', + 'SurveySimpleMailInvitation' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveySimpleMailInvitation.php', + 'SurveySkupine' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveySkupine.php', + 'SurveySlideshow' => __DIR__ . '/../..' . '/admin/survey/modules/mod_slideshow/class.SurveySlideshow.php', + 'SurveySpeedIndex' => __DIR__ . '/../..' . '/admin/survey/modules/mod_SPEEDINDEX/class.SurveySpeedIndex.php', + 'SurveyStaticHtml' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyStaticHtml.php', + 'SurveyStatistic' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyStatistic.php', + 'SurveyStatisticProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyStatisticProfiles.php', + 'SurveyStatusCasi' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyStatusCasi.php', + 'SurveyStatusProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyStatusProfiles.php', + 'SurveyTTest' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyTTest.php', + 'SurveyTableChart' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyTableChart.php', + 'SurveyTeamMeter' => __DIR__ . '/../..' . '/admin/survey/modules/mod_EVOLI/class.SurveyTeamMeter.php', + 'SurveyTelephone' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyTelephone.php', + 'SurveyTextAnalysis' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyTextAnalysis.php', + 'SurveyTheme' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyTheme.php', + 'SurveyThemeEditor' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyThemeEditor.php', + 'SurveyTimeProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyTimeProfiles.php', + 'SurveyUnsubscribe' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyUnsubscribe.php', + 'SurveyUporabnost' => __DIR__ . '/../..' . '/admin/survey/modules/mod_uporabnost/class.SurveyUporabnost.php', + 'SurveyUrlLinks' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyUrlLinks.php', + 'SurveyUsableResp' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyUsableResp.php', + 'SurveyUserSession' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyUserSession.php', + 'SurveyUserSessionDestructor' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyUserSession.php', + 'SurveyUserSetting' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyUserSetting.php', + 'SurveyVariablesProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyVariablesProfiles.php', + 'SurveyVizualizacija' => __DIR__ . '/../..' . '/admin/survey/modules/mod_vizualizacija/class.SurveyVizualizacija.php', + 'SurveyZankaProfiles' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyZankaProfiles.php', + 'SurveyZoom' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyZoom.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Idn' => __DIR__ . '/..' . '/symfony/polyfill-intl-idn/Idn.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Info' => __DIR__ . '/..' . '/symfony/polyfill-intl-idn/Info.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Resources\\unidata\\DisallowedRanges' => __DIR__ . '/..' . '/symfony/polyfill-intl-idn/Resources/unidata/DisallowedRanges.php', + 'Symfony\\Polyfill\\Intl\\Idn\\Resources\\unidata\\Regex' => __DIR__ . '/..' . '/symfony/polyfill-intl-idn/Resources/unidata/Regex.php', + 'Symfony\\Polyfill\\Intl\\Normalizer\\Normalizer' => __DIR__ . '/..' . '/symfony/polyfill-intl-normalizer/Normalizer.php', + 'Symfony\\Polyfill\\Php72\\Php72' => __DIR__ . '/..' . '/symfony/polyfill-php72/Php72.php', + 'Timer' => __DIR__ . '/../..' . '/admin/survey/classes/class.Timer.php', + 'TrackingClass' => __DIR__ . '/../..' . '/admin/survey/classes/TrackingClass.php', + 'User' => __DIR__ . '/../..' . '/admin/survey/classes/class.User.php', + 'UserAccess' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserAccess.php', + 'UserNarocila' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserNarocila.php', + 'UserNarocilaCebelica' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserNarocilaCebelica.php', + 'UserNarocilaCron' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserNarocilaCron.php', + 'UserNarocilaPaypal' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserNarocilaPaypal.php', + 'UserNarocilaStripe' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserNarocilaStripe.php', + 'UserPlacila' => __DIR__ . '/../..' . '/frontend/payments/classes/class.UserPlacila.php', + 'UserSetting' => __DIR__ . '/../..' . '/admin/survey/classes/class.UserSetting.php', + 'UserTrackingClass' => __DIR__ . '/../..' . '/admin/survey/classes/UserTrackingClass.php', + 'VariableView' => __DIR__ . '/../..' . '/admin/survey/classes/class.SurveyVariableView.php', + 'Vprasanje' => __DIR__ . '/../..' . '/admin/survey/classes/class.Vprasanje.php', + 'VprasanjeInline' => __DIR__ . '/../..' . '/admin/survey/classes/class.VprasanjeInline.php', + 'VsotaLatex' => __DIR__ . '/../..' . '/admin/survey/export/latexclasses/Vprasanja/VsotaLatex.php', + 'WPN' => __DIR__ . '/../..' . '/admin/survey/modules/mod_WPN/class.WPN.php', + 'XmlDocument' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/class.XmlDocument.php', + 'XmlSurvey' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/class.XmlSurvey.php', + 'XmlSurveyElement' => __DIR__ . '/../..' . '/admin/survey/export/xmlClasses/class.XmlSurveyElement.php', + 'ZapisiAnketiranje' => __DIR__ . '/../..' . '/admin/survey/modules/mod_gorenje/SurveyGorenje.php', + 'enkaParameters' => __DIR__ . '/../..' . '/admin/survey/classes/class.params.php', + 'pCache' => __DIR__ . '/../..' . '/admin/survey/pChart/classes/class.pCache.php', + 'pChart' => __DIR__ . '/../..' . '/admin/survey/pChart/classes/class.pChart.php', + 'pData' => __DIR__ . '/../..' . '/admin/survey/pChart/classes/class.pData.php', + ); + + public static function getInitializer(ClassLoader $loader) + { + return \Closure::bind(function () use ($loader) { + $loader->prefixLengthsPsr4 = ComposerStaticInit0d06eb1022200eb96b7e4bb652ca3996::$prefixLengthsPsr4; + $loader->prefixDirsPsr4 = ComposerStaticInit0d06eb1022200eb96b7e4bb652ca3996::$prefixDirsPsr4; + $loader->classMap = ComposerStaticInit0d06eb1022200eb96b7e4bb652ca3996::$classMap; + + }, null, ClassLoader::class); + } +} diff --git a/vendor/composer/ca-bundle/LICENSE b/vendor/composer/ca-bundle/LICENSE new file mode 100644 index 000000000..c5b5220e8 --- /dev/null +++ b/vendor/composer/ca-bundle/LICENSE @@ -0,0 +1,19 @@ +Copyright (C) 2016 Composer + +Permission is hereby granted, free of charge, to any person obtaining a copy of +this software and associated documentation files (the "Software"), to deal in +the Software without restriction, including without limitation the rights to +use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies +of the Software, and to permit persons to whom the Software is furnished to do +so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/vendor/composer/ca-bundle/README.md b/vendor/composer/ca-bundle/README.md new file mode 100644 index 000000000..d8205ec53 --- /dev/null +++ b/vendor/composer/ca-bundle/README.md @@ -0,0 +1,85 @@ +composer/ca-bundle +================== + +Small utility library that lets you find a path to the system CA bundle, +and includes a fallback to the Mozilla CA bundle. + +Originally written as part of [composer/composer](https://github.com/composer/composer), +now extracted and made available as a stand-alone library. + + +Installation +------------ + +Install the latest version with: + +```bash +$ composer require composer/ca-bundle +``` + + +Requirements +------------ + +* PHP 5.3.2 is required but using the latest version of PHP is highly recommended. + + +Basic usage +----------- + +### `Composer\CaBundle\CaBundle` + +- `CaBundle::getSystemCaRootBundlePath()`: Returns the system CA bundle path, or a path to the bundled one as fallback +- `CaBundle::getBundledCaBundlePath()`: Returns the path to the bundled CA file +- `CaBundle::validateCaFile($filename)`: Validates a CA file using openssl_x509_parse only if it is safe to use +- `CaBundle::isOpensslParseSafe()`: Test if it is safe to use the PHP function openssl_x509_parse() +- `CaBundle::reset()`: Resets the static caches + + +#### To use with curl + +```php +$curl = curl_init("https://example.org/"); + +$caPathOrFile = \Composer\CaBundle\CaBundle::getSystemCaRootBundlePath(); +if (is_dir($caPathOrFile)) { + curl_setopt($curl, CURLOPT_CAPATH, $caPathOrFile); +} else { + curl_setopt($curl, CURLOPT_CAINFO, $caPathOrFile); +} + +$result = curl_exec($curl); +``` + +#### To use with php streams + +```php +$opts = array( + 'http' => array( + 'method' => "GET" + ) +); + +$caPathOrFile = \Composer\CaBundle\CaBundle::getSystemCaRootBundlePath(); +if (is_dir($caPathOrFile)) { + $opts['ssl']['capath'] = $caPathOrFile; +} else { + $opts['ssl']['cafile'] = $caPathOrFile; +} + +$context = stream_context_create($opts); +$result = file_get_contents('https://example.com', false, $context); +``` + +#### To use with Guzzle + +```php +$client = new \GuzzleHttp\Client([ + \GuzzleHttp\RequestOptions::VERIFY => \Composer\CaBundle\CaBundle::getSystemCaRootBundlePath() +]); +``` + +License +------- + +composer/ca-bundle is licensed under the MIT License, see the LICENSE file for details. diff --git a/vendor/composer/ca-bundle/composer.json b/vendor/composer/ca-bundle/composer.json new file mode 100644 index 000000000..22de0a892 --- /dev/null +++ b/vendor/composer/ca-bundle/composer.json @@ -0,0 +1,54 @@ +{ + "name": "composer/ca-bundle", + "description": "Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.", + "type": "library", + "license": "MIT", + "keywords": [ + "cabundle", + "cacert", + "certificate", + "ssl", + "tls" + ], + "authors": [ + { + "name": "Jordi Boggiano", + "email": "j.boggiano@seld.be", + "homepage": "http://seld.be" + } + ], + "support": { + "irc": "irc://irc.freenode.org/composer", + "issues": "https://github.com/composer/ca-bundle/issues" + }, + "require": { + "ext-openssl": "*", + "ext-pcre": "*", + "php": "^5.3.2 || ^7.0 || ^8.0" + }, + "require-dev": { + "phpunit/phpunit": "^4.8.35 || ^5.7 || 6.5 - 8", + "psr/log": "^1.0", + "symfony/process": "^2.5 || ^3.0 || ^4.0 || ^5.0" + }, + "autoload": { + "psr-4": { + "Composer\\CaBundle\\": "src" + } + }, + "autoload-dev": { + "psr-4": { + "Composer\\CaBundle\\": "tests" + } + }, + "extra": { + "branch-alias": { + "dev-master": "1.x-dev" + } + }, + "config": { + "platform": { + "php": "5.3.9" + } + } +} diff --git a/vendor/composer/ca-bundle/res/cacert.pem b/vendor/composer/ca-bundle/res/cacert.pem new file mode 100644 index 000000000..f9bd706b4 --- /dev/null +++ b/vendor/composer/ca-bundle/res/cacert.pem @@ -0,0 +1,3447 @@ +## +## Bundle of CA Root Certificates +## +## Certificate data from Mozilla as of: Wed Jul 22 03:12:14 2020 GMT +## +## This is a bundle of X.509 certificates of public Certificate Authorities +## (CA). These were automatically extracted from Mozilla's root certificates +## file (certdata.txt). This file can be found in the mozilla source tree: +## https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt +## +## It contains the certificates in PEM format and therefore +## can be directly used with curl / libcurl / php_curl, or with +## an Apache+mod_ssl webserver for SSL client authentication. +## Just configure this file as the SSLCACertificateFile. +## +## Conversion done with mk-ca-bundle.pl version 1.28. +## SHA256: cc6408bd4be7fbfb8699bdb40ccb7f6de5780d681d87785ea362646e4dad5e8e +## + + +GlobalSign Root CA +================== +-----BEGIN CERTIFICATE----- +MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkGA1UEBhMCQkUx +GTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jvb3QgQ0ExGzAZBgNVBAMTEkds +b2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAwMDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNV +BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYD +VQQDExJHbG9iYWxTaWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa +DuaZjc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavpxy0Sy6sc +THAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp1Wrjsok6Vjk4bwY8iGlb +Kk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdGsnUOhugZitVtbNV4FpWi6cgKOOvyJBNP +c1STE4U6G7weNLWLBYy5d4ux2x8gkasJU26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrX +gzT/LCrBbBlDSgeF59N89iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV +HRMBAf8EBTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0BAQUF +AAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOzyj1hTdNGCbM+w6Dj +Y1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE38NflNUVyRRBnMRddWQVDf9VMOyG +j/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymPAbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhH +hm4qxFYxldBniYUr+WymXUadDKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveC +X4XSQRjbgbMEHMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A== +-----END CERTIFICATE----- + +GlobalSign Root CA - R2 +======================= +-----BEGIN CERTIFICATE----- +MIIDujCCAqKgAwIBAgILBAAAAAABD4Ym5g0wDQYJKoZIhvcNAQEFBQAwTDEgMB4GA1UECxMXR2xv +YmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2Jh +bFNpZ24wHhcNMDYxMjE1MDgwMDAwWhcNMjExMjE1MDgwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxT +aWduIFJvb3QgQ0EgLSBSMjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2ln +bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbPJA6+Lm8omUVCxKs+IVSbC9N/hHD6 +ErPLv4dfxn+G07IwXNb9rfF73OX4YJYJkhD10FPe+3t+c4isUoh7SqbKSaZeqKeMWhG8eoLrvozp +s6yWJQeXSpkqBy+0Hne/ig+1AnwblrjFuTosvNYSuetZfeLQBoZfXklqtTleiDTsvHgMCJiEbKjN +S7SgfQx5TfC4LcshytVsW33hoCmEofnTlEnLJGKRILzdC9XZzPnqJworc5HGnRusyMvo4KD0L5CL +TfuwNhv2GXqF4G3yYROIXJ/gkwpRl4pazq+r1feqCapgvdzZX99yqWATXgAByUr6P6TqBwMhAo6C +ygPCm48CAwEAAaOBnDCBmTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E +FgQUm+IHV2ccHsBqBt5ZtJot39wZhi4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5nbG9i +YWxzaWduLm5ldC9yb290LXIyLmNybDAfBgNVHSMEGDAWgBSb4gdXZxwewGoG3lm0mi3f3BmGLjAN +BgkqhkiG9w0BAQUFAAOCAQEAmYFThxxol4aR7OBKuEQLq4GsJ0/WwbgcQ3izDJr86iw8bmEbTUsp +9Z8FHSbBuOmDAGJFtqkIk7mpM0sYmsL4h4hO291xNBrBVNpGP+DTKqttVCL1OmLNIG+6KYnX3ZHu +01yiPqFbQfXf5WRDLenVOavSot+3i9DAgBkcRcAtjOj4LaR0VknFBbVPFd5uRHg5h6h+u/N5GJG7 +9G+dwfCMNYxdAfvDbbnvRG15RjF+Cv6pgsH/76tuIMRQyV+dTZsXjAzlAcmgQWpzU/qlULRuJQ/7 +TBj0/VLZjmmx6BEP3ojY+x1J96relc8geMJgEtslQIxq/H5COEBkEveegeGTLg== +-----END CERTIFICATE----- + +Entrust.net Premium 2048 Secure Server CA +========================================= +-----BEGIN CERTIFICATE----- +MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChMLRW50cnVzdC5u +ZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBpbmNvcnAuIGJ5IHJlZi4gKGxp +bWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNV +BAMTKkVudHJ1c3QubmV0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQx +NzUwNTFaFw0yOTA3MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3 +d3d3LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTEl +MCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50cnVzdC5u +ZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEArU1LqRKGsuqjIAcVFmQqK0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOL +Gp18EzoOH1u3Hs/lJBQesYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSr +hRSGlVuXMlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVTXTzW +nLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9+5CFVghTAp+XtIpGmG4zU/HoZdenoVve8AjhUi +VBcAkCaTvA5JaJG/+EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH4QIDAQABo0IwQDAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJ +KoZIhvcNAQEFBQADggEBADubj1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4+WZiT6QBshJ8rmcnPy +T/4xmf3IDExoU8aAghOY+rat2l098c5u9hURlIIM7j+VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf +zX1XEC+bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5bu/8j72gZyxKT +J1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7+bYQLCIt+jerXmCHG8+c8eS9e +nNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/ErfF6adulZkMV8gzURZVE= +-----END CERTIFICATE----- + +Baltimore CyberTrust Root +========================= +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJRTESMBAGA1UE +ChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3li +ZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoXDTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMC +SUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFs +dGltb3JlIEN5YmVyVHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKME +uyKrmD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjrIZ3AQSsB +UnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeKmpYcqWe4PwzV9/lSEy/C +G9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSuXmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9 +XbIGevOF6uvUA65ehD5f/xXtabz5OTZydc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjpr +l3RjM71oGDHweI12v/yejl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoI +VDaGezq1BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEB +BQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT929hkTI7gQCvlYpNRh +cL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3WgxjkzSswF07r51XgdIGn9w/xZchMB5 +hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsa +Y71k5h+3zvDyny67G7fyUIhzksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9H +RCwBXbsdtTLSR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp +-----END CERTIFICATE----- + +Entrust Root Certification Authority +==================================== +-----BEGIN CERTIFICATE----- +MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMCVVMxFjAUBgNV +BAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0Lm5ldC9DUFMgaXMgaW5jb3Jw +b3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMWKGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsG +A1UEAxMkRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0 +MloXDTI2MTEyNzIwNTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMu +MTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSByZWZlcmVu +Y2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNVBAMTJEVudHJ1c3QgUm9v +dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +ALaVtkNC+sZtKm9I35RMOVcF7sN5EUFoNu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYsz +A9u3g3s+IIRe7bJWKKf44LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOww +Cj0Yzfv9KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGIrb68 +j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi94DkZfs0Nw4pgHBN +rziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOBsDCBrTAOBgNVHQ8BAf8EBAMCAQYw +DwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAigA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1 +MzQyWjAfBgNVHSMEGDAWgBRokORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DH +hmak8fdLQ/uEvW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA +A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9tO1KzKtvn1ISM +Y/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6ZuaAGAT/3B+XxFNSRuzFVJ7yVTa +v52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTS +W3iDVuycNsMm4hH2Z0kdkquM++v/eu6FSqdQgPCnXEqULl8FmTxSQeDNtGPPAUO6nIPcj2A781q0 +tHuu2guQOHXvgR1m0vdXcDazv/wor3ElhVsT/h5/WrQ8 +-----END CERTIFICATE----- + +GeoTrust Global CA +================== +-----BEGIN CERTIFICATE----- +MIIDVDCCAjygAwIBAgIDAjRWMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQK +Ew1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMDIwNTIxMDQw +MDAwWhcNMjIwNTIxMDQwMDAwWjBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5j +LjEbMBkGA1UEAxMSR2VvVHJ1c3QgR2xvYmFsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEA2swYYzD99BcjGlZ+W988bDjkcbd4kdS8odhM+KhDtgPpTSEHCIjaWC9mOSm9BXiLnTjo +BbdqfnGk5sRgprDvgOSJKA+eJdbtg/OtppHHmMlCGDUUna2YRpIuT8rxh0PBFpVXLVDviS2Aelet +8u5fa9IAjbkU+BQVNdnARqN7csiRv8lVK83Qlz6cJmTM386DGXHKTubU1XupGc1V3sjs0l44U+Vc +T4wt/lAjNvxm5suOpDkZALeVAjmRCw7+OC7RHQWa9k0+bw8HHa8sHo9gOeL6NlMTOdReJivbPagU +vTLrGAMoUgRx5aszPeE4uwc2hGKceeoWMPRfwCvocWvk+QIDAQABo1MwUTAPBgNVHRMBAf8EBTAD +AQH/MB0GA1UdDgQWBBTAephojYn7qwVkDBF9qn1luMrMTjAfBgNVHSMEGDAWgBTAephojYn7qwVk +DBF9qn1luMrMTjANBgkqhkiG9w0BAQUFAAOCAQEANeMpauUvXVSOKVCUn5kaFOSPeCpilKInZ57Q +zxpeR+nBsqTP3UEaBU6bS+5Kb1VSsyShNwrrZHYqLizz/Tt1kL/6cdjHPTfStQWVYrmm3ok9Nns4 +d0iXrKYgjy6myQzCsplFAMfOEVEiIuCl6rYVSAlk6l5PdPcFPseKUgzbFbS9bZvlxrFUaKnjaZC2 +mqUPuLk/IH2uSrW4nOQdtqvmlKXBx4Ot2/Unhw4EbNX/3aBd7YdStysVAq45pmp06drE57xNNB6p +XE0zX5IJL4hmXXeXxx12E6nV5fEWCRE11azbJHFwLJhWC9kXtNHjUStedejV0NxPNO3CBWaAocvm +Mw== +-----END CERTIFICATE----- + +GeoTrust Universal CA +===================== +-----BEGIN CERTIFICATE----- +MIIFaDCCA1CgAwIBAgIBATANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJVUzEWMBQGA1UEChMN +R2VvVHJ1c3QgSW5jLjEeMBwGA1UEAxMVR2VvVHJ1c3QgVW5pdmVyc2FsIENBMB4XDTA0MDMwNDA1 +MDAwMFoXDTI5MDMwNDA1MDAwMFowRTELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IElu +Yy4xHjAcBgNVBAMTFUdlb1RydXN0IFVuaXZlcnNhbCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIP +ADCCAgoCggIBAKYVVaCjxuAfjJ0hUNfBvitbtaSeodlyWL0AG0y/YckUHUWCq8YdgNY96xCcOq9t +JPi8cQGeBvV8Xx7BDlXKg5pZMK4ZyzBIle0iN430SppyZj6tlcDgFgDgEB8rMQ7XlFTTQjOgNB0e +RXbdT8oYN+yFFXoZCPzVx5zw8qkuEKmS5j1YPakWaDwvdSEYfyh3peFhF7em6fgemdtzbvQKoiFs +7tqqhZJmr/Z6a4LauiIINQ/PQvE1+mrufislzDoR5G2vc7J2Ha3QsnhnGqQ5HFELZ1aD/ThdDc7d +8Lsrlh/eezJS/R27tQahsiFepdaVaH/wmZ7cRQg+59IJDTWU3YBOU5fXtQlEIGQWFwMCTFMNaN7V +qnJNk22CDtucvc+081xdVHppCZbW2xHBjXWotM85yM48vCR85mLK4b19p71XZQvk/iXttmkQ3Cga +Rr0BHdCXteGYO8A3ZNY9lO4L4fUorgtWv3GLIylBjobFS1J72HGrH4oVpjuDWtdYAVHGTEHZf9hB +Z3KiKN9gg6meyHv8U3NyWfWTehd2Ds735VzZC1U0oqpbtWpU5xPKV+yXbfReBi9Fi1jUIxaS5BZu +KGNZMN9QAZxjiRqf2xeUgnA3wySemkfWWspOqGmJch+RbNt+nhutxx9z3SxPGWX9f5NAEC7S8O08 +ni4oPmkmM8V7AgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNq7LqqwDLiIJlF0 +XG0D08DYj3rWMB8GA1UdIwQYMBaAFNq7LqqwDLiIJlF0XG0D08DYj3rWMA4GA1UdDwEB/wQEAwIB +hjANBgkqhkiG9w0BAQUFAAOCAgEAMXjmx7XfuJRAyXHEqDXsRh3ChfMoWIawC/yOsjmPRFWrZIRc +aanQmjg8+uUfNeVE44B5lGiku8SfPeE0zTBGi1QrlaXv9z+ZhP015s8xxtxqv6fXIwjhmF7DWgh2 +qaavdy+3YL1ERmrvl/9zlcGO6JP7/TG37FcREUWbMPEaiDnBTzynANXH/KttgCJwpQzgXQQpAvvL +oJHRfNbDflDVnVi+QTjruXU8FdmbyUqDWcDaU/0zuzYYm4UPFd3uLax2k7nZAY1IEKj79TiG8dsK +xr2EoyNB3tZ3b4XUhRxQ4K5RirqNPnbiucon8l+f725ZDQbYKxek0nxru18UGkiPGkzns0ccjkxF +KyDuSN/n3QmOGKjaQI2SJhFTYXNd673nxE0pN2HrrDktZy4W1vUAg4WhzH92xH3kt0tm7wNFYGm2 +DFKWkoRepqO1pD4r2czYG0eq8kTaT/kD6PAUyz/zg97QwVTjt+gKN02LIFkDMBmhLMi9ER/frslK +xfMnZmaGrGiR/9nmUxwPi1xpZQomyB40w11Re9epnAahNt3ViZS82eQtDF4JbAiXfKM9fJP/P6EU +p8+1Xevb2xzEdt+Iub1FBZUbrvxGakyvSOPOrg/SfuvmbJxPgWp6ZKy7PtXny3YuxadIwVyQD8vI +P/rmMuGNG2+k5o7Y+SlIis5z/iw= +-----END CERTIFICATE----- + +GeoTrust Universal CA 2 +======================= +-----BEGIN CERTIFICATE----- +MIIFbDCCA1SgAwIBAgIBATANBgkqhkiG9w0BAQUFADBHMQswCQYDVQQGEwJVUzEWMBQGA1UEChMN +R2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMXR2VvVHJ1c3QgVW5pdmVyc2FsIENBIDIwHhcNMDQwMzA0 +MDUwMDAwWhcNMjkwMzA0MDUwMDAwWjBHMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3Qg +SW5jLjEgMB4GA1UEAxMXR2VvVHJ1c3QgVW5pdmVyc2FsIENBIDIwggIiMA0GCSqGSIb3DQEBAQUA +A4ICDwAwggIKAoICAQCzVFLByT7y2dyxUxpZKeexw0Uo5dfR7cXFS6GqdHtXr0om/Nj1XqduGdt0 +DE81WzILAePb63p3NeqqWuDW6KFXlPCQo3RWlEQwAx5cTiuFJnSCegx2oG9NzkEtoBUGFF+3Qs17 +j1hhNNwqCPkuwwGmIkQcTAeC5lvO0Ep8BNMZcyfwqph/Lq9O64ceJHdqXbboW0W63MOhBW9Wjo8Q +JqVJwy7XQYci4E+GymC16qFjwAGXEHm9ADwSbSsVsaxLse4YuU6W3Nx2/zu+z18DwPw76L5GG//a +QMJS9/7jOvdqdzXQ2o3rXhhqMcceujwbKNZrVMaqW9eiLBsZzKIC9ptZvTdrhrVtgrrY6slWvKk2 +WP0+GfPtDCapkzj4T8FdIgbQl+rhrcZV4IErKIM6+vR7IVEAvlI4zs1meaj0gVbi0IMJR1FbUGrP +20gaXT73y/Zl92zxlfgCOzJWgjl6W70viRu/obTo/3+NjN8D8WBOWBFM66M/ECuDmgFz2ZRthAAn +ZqzwcEAJQpKtT5MNYQlRJNiS1QuUYbKHsu3/mjX/hVTK7URDrBs8FmtISgocQIgfksILAAX/8sgC +SqSqqcyZlpwvWOB94b67B9xfBHJcMTTD7F8t4D1kkCLm0ey4Lt1ZrtmhN79UNdxzMk+MBB4zsslG +8dhcyFVQyWi9qLo2CQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR281Xh+qQ2 ++/CfXGJx7Tz0RzgQKzAfBgNVHSMEGDAWgBR281Xh+qQ2+/CfXGJx7Tz0RzgQKzAOBgNVHQ8BAf8E +BAMCAYYwDQYJKoZIhvcNAQEFBQADggIBAGbBxiPz2eAubl/oz66wsCVNK/g7WJtAJDday6sWSf+z +dXkzoS9tcBc0kf5nfo/sm+VegqlVHy/c1FEHEv6sFj4sNcZj/NwQ6w2jqtB8zNHQL1EuxBRa3ugZ +4T7GzKQp5y6EqgYweHZUcyiYWTjgAA1i00J9IZ+uPTqM1fp3DRgrFg5fNuH8KrUwJM/gYwx7WBr+ +mbpCErGR9Hxo4sjoryzqyX6uuyo9DRXcNJW2GHSoag/HtPQTxORb7QrSpJdMKu0vbBKJPfEncKpq +A1Ihn0CoZ1Dy81of398j9tx4TuaYT1U6U+Pv8vSfx3zYWK8pIpe44L2RLrB27FcRz+8pRPPphXpg +Y+RdM4kX2TGq2tbzGDVyz4crL2MjhF2EjD9XoIj8mZEoJmmZ1I+XRL6O1UixpCgp8RW04eWe3fiP +pm8m1wk8OhwRDqZsN/etRIcsKMfYdIKz0G9KV7s1KSegi+ghp4dkNl3M2Basx7InQJJVOCiNUW7d +FGdTbHFcJoRNdVq2fmBWqU2t+5sel/MN2dKXVHfaPRK34B7vCAas+YWH6aLcr34YEoP9VhdBLtUp +gn2Z9DH2canPLAEnpQW5qrJITirvn5NSUZU8UnOOVkwXQMAJKOSLakhT2+zNVVXxxvjpoixMptEm +X36vWkzaH6byHCx+rgIW0lbQL1dTR+iS +-----END CERTIFICATE----- + +Comodo AAA Services root +======================== +-----BEGIN CERTIFICATE----- +MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwS +R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0Eg +TGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAw +MFoXDTI4MTIzMTIzNTk1OVowezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hl +c3RlcjEQMA4GA1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV +BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQuaBtDFcCLNSS1UY8y2bmhG +C1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe3M/vg4aijJRPn2jymJBGhCfHdr/jzDUs +i14HZGWCwEiwqJH5YZ92IFCokcdmtet4YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszW +Y19zjNoFmag4qMsXeDZRrOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjH +Ypy+g8cmez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQUoBEK +Iz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wewYDVR0f +BHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNl +cy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29tb2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2Vz +LmNybDANBgkqhkiG9w0BAQUFAAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm +7l3sAg9g1o1QGE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz +Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2G9w84FoVxp7Z +8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsil2D4kF501KKaU73yqWjgom7C +12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg== +-----END CERTIFICATE----- + +QuoVadis Root CA +================ +-----BEGIN CERTIFICATE----- +MIIF0DCCBLigAwIBAgIEOrZQizANBgkqhkiG9w0BAQUFADB/MQswCQYDVQQGEwJCTTEZMBcGA1UE +ChMQUXVvVmFkaXMgTGltaXRlZDElMCMGA1UECxMcUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 +eTEuMCwGA1UEAxMlUXVvVmFkaXMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wMTAz +MTkxODMzMzNaFw0yMTAzMTcxODMzMzNaMH8xCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRp +cyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MS4wLAYDVQQD +EyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEAv2G1lVO6V/z68mcLOhrfEYBklbTRvM16z/Ypli4kVEAkOPcahdxYTMuk +J0KX0J+DisPkBgNbAKVRHnAEdOLB1Dqr1607BxgFjv2DrOpm2RgbaIr1VxqYuvXtdj182d6UajtL +F8HVj71lODqV0D1VNk7feVcxKh7YWWVJWCCYfqtffp/p1k3sg3Spx2zY7ilKhSoGFPlU5tPaZQeL +YzcS19Dsw3sgQUSj7cugF+FxZc4dZjH3dgEZyH0DWLaVSR2mEiboxgx24ONmy+pdpibu5cxfvWen +AScOospUxbF6lR1xHkopigPcakXBpBlebzbNw6Kwt/5cOOJSvPhEQ+aQuwIDAQABo4ICUjCCAk4w +PQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFodHRwczovL29jc3AucXVvdmFkaXNvZmZzaG9y +ZS5jb20wDwYDVR0TAQH/BAUwAwEB/zCCARoGA1UdIASCAREwggENMIIBCQYJKwYBBAG+WAABMIH7 +MIHUBggrBgEFBQcCAjCBxxqBxFJlbGlhbmNlIG9uIHRoZSBRdW9WYWRpcyBSb290IENlcnRpZmlj +YXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgdGhlIHRoZW4gYXBwbGljYWJs +ZSBzdGFuZGFyZCB0ZXJtcyBhbmQgY29uZGl0aW9ucyBvZiB1c2UsIGNlcnRpZmljYXRpb24gcHJh +Y3RpY2VzLCBhbmQgdGhlIFF1b1ZhZGlzIENlcnRpZmljYXRlIFBvbGljeS4wIgYIKwYBBQUHAgEW +Fmh0dHA6Ly93d3cucXVvdmFkaXMuYm0wHQYDVR0OBBYEFItLbe3TKbkGGew5Oanwl4Rqy+/fMIGu +BgNVHSMEgaYwgaOAFItLbe3TKbkGGew5Oanwl4Rqy+/foYGEpIGBMH8xCzAJBgNVBAYTAkJNMRkw +FwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0 +aG9yaXR5MS4wLAYDVQQDEyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggQ6 +tlCLMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAitQUtf70mpKnGdSkfnIYj9lo +fFIk3WdvOXrEql494liwTXCYhGHoG+NpGA7O+0dQoE7/8CQfvbLO9Sf87C9TqnN7Az10buYWnuul +LsS/VidQK2K6vkscPFVcQR0kvoIgR13VRH56FmjffU1RcHhXHTMe/QKZnAzNCgVPx7uOpHX6Sm2x +gI4JVrmcGmD+XcHXetwReNDWXcG31a0ymQM6isxUJTkxgXsTIlG6Rmyhu576BGxJJnSP0nPrzDCi +5upZIof4l/UO/erMkqQWxFIY6iHOsfHmhIHluqmGKPJDWl0Snawe2ajlCmqnf6CHKc/yiU3U7MXi +5nrQNiOKSnQ2+Q== +-----END CERTIFICATE----- + +QuoVadis Root CA 2 +================== +-----BEGIN CERTIFICATE----- +MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoT +EFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMjAeFw0wNjExMjQx +ODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM +aW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQCaGMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6 +XJxgFyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55JWpzmM+Yk +lvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bBrrcCaoF6qUWD4gXmuVbB +lDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp+ARz8un+XJiM9XOva7R+zdRcAitMOeGy +lZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt +66/3FsvbzSUr5R/7mp/iUcw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1Jdxn +wQ5hYIizPtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og/zOh +D7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UHoycR7hYQe7xFSkyy +BNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuIyV77zGHcizN300QyNQliBJIWENie +J0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1Ud +DgQWBBQahGK8SEwzJQTU7tD2A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGU +a6FJpEcwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT +ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2fBluornFdLwUv +Z+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzng/iN/Ae42l9NLmeyhP3ZRPx3 +UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2BlfF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodm +VjB3pjd4M1IQWK4/YY7yarHvGH5KWWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK ++JDSV6IZUaUtl0HaB0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrW +IozchLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPRTUIZ3Ph1 +WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWDmbA4CD/pXvk1B+TJYm5X +f6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0ZohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II +4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8 +VCLAAVBpQ570su9t+Oza8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u +-----END CERTIFICATE----- + +QuoVadis Root CA 3 +================== +-----BEGIN CERTIFICATE----- +MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoT +EFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMzAeFw0wNjExMjQx +OTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM +aW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQDMV0IWVJzmmNPTTe7+7cefQzlKZbPoFog02w1ZkXTPkrgEQK0CSzGrvI2RaNgg +DhoB4hp7Thdd4oq3P5kazethq8Jlph+3t723j/z9cI8LoGe+AaJZz3HmDyl2/7FWeUUrH556VOij +KTVopAFPD6QuN+8bv+OPEKhyq1hX51SGyMnzW9os2l2ObjyjPtr7guXd8lyyBTNvijbO0BNO/79K +DDRMpsMhvVAEVeuxu537RR5kFd5VAYwCdrXLoT9CabwvvWhDFlaJKjdhkf2mrk7AyxRllDdLkgbv +BNDInIjbC3uBr7E9KsRlOni27tyAsdLTmZw67mtaa7ONt9XOnMK+pUsvFrGeaDsGb659n/je7Mwp +p5ijJUMv7/FfJuGITfhebtfZFG4ZM2mnO4SJk8RTVROhUXhA+LjJou57ulJCg54U7QVSWllWp5f8 +nT8KKdjcT5EOE7zelaTfi5m+rJsziO+1ga8bxiJTyPbH7pcUsMV8eFLI8M5ud2CEpukqdiDtWAEX +MJPpGovgc2PZapKUSU60rUqFxKMiMPwJ7Wgic6aIDFUhWMXhOp8q3crhkODZc6tsgLjoC2SToJyM +Gf+z0gzskSaHirOi4XCPLArlzW1oUevaPwV/izLmE1xr/l9A4iLItLRkT9a6fUg+qGkM17uGcclz +uD87nSVL2v9A6wIDAQABo4IBlTCCAZEwDwYDVR0TAQH/BAUwAwEB/zCB4QYDVR0gBIHZMIHWMIHT +BgkrBgEEAb5YAAMwgcUwgZMGCCsGAQUFBwICMIGGGoGDQW55IHVzZSBvZiB0aGlzIENlcnRpZmlj +YXRlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFF1b1ZhZGlzIFJvb3QgQ0EgMyBDZXJ0 +aWZpY2F0ZSBQb2xpY3kgLyBDZXJ0aWZpY2F0aW9uIFByYWN0aWNlIFN0YXRlbWVudC4wLQYIKwYB +BQUHAgEWIWh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL2NwczALBgNVHQ8EBAMCAQYwHQYD +VR0OBBYEFPLAE+CCQz777i9nMpY1XNu4ywLQMG4GA1UdIwRnMGWAFPLAE+CCQz777i9nMpY1XNu4 +ywLQoUmkRzBFMQswCQYDVQQGEwJCTTEZMBcGA1UEChMQUXVvVmFkaXMgTGltaXRlZDEbMBkGA1UE +AxMSUXVvVmFkaXMgUm9vdCBDQSAzggIFxjANBgkqhkiG9w0BAQUFAAOCAgEAT62gLEz6wPJv92ZV +qyM07ucp2sNbtrCD2dDQ4iH782CnO11gUyeim/YIIirnv6By5ZwkajGxkHon24QRiSemd1o417+s +hvzuXYO8BsbRd2sPbSQvS3pspweWyuOEn62Iix2rFo1bZhfZFvSLgNLd+LJ2w/w4E6oM3kJpK27z +POuAJ9v1pkQNn1pVWQvVDVJIxa6f8i+AxeoyUDUSly7B4f/xI4hROJ/yZlZ25w9Rl6VSDE1JUZU2 +Pb+iSwwQHYaZTKrzchGT5Or2m9qoXadNt54CrnMAyNojA+j56hl0YgCUyyIgvpSnWbWCar6ZeXqp +8kokUvd0/bpO5qgdAm6xDYBEwa7TIzdfu4V8K5Iu6H6li92Z4b8nby1dqnuH/grdS/yO9SbkbnBC +bjPsMZ57k8HkyWkaPcBrTiJt7qtYTcbQQcEr6k8Sh17rRdhs9ZgC06DYVYoGmRmioHfRMJ6szHXu +g/WwYjnPbFfiTNKRCw51KBuav/0aQ/HKd/s7j2G4aSgWQgRecCocIdiP4b0jWy10QJLZYxkNc91p +vGJHvOB0K7Lrfb5BG7XARsWhIstfTsEokt4YutUqKLsRixeTmJlglFwjz1onl14LBQaTNx47aTbr +qZ5hHY8y2o4M1nQ+ewkk2gF3R8Q7zTSMmfXK4SVhM7JZG+Ju1zdXtg2pEto= +-----END CERTIFICATE----- + +Security Communication Root CA +============================== +-----BEGIN CERTIFICATE----- +MIIDWjCCAkKgAwIBAgIBADANBgkqhkiG9w0BAQUFADBQMQswCQYDVQQGEwJKUDEYMBYGA1UEChMP +U0VDT00gVHJ1c3QubmV0MScwJQYDVQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTEw +HhcNMDMwOTMwMDQyMDQ5WhcNMjMwOTMwMDQyMDQ5WjBQMQswCQYDVQQGEwJKUDEYMBYGA1UEChMP +U0VDT00gVHJ1c3QubmV0MScwJQYDVQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTEw +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzs/5/022x7xZ8V6UMbXaKL0u/ZPtM7orw +8yl89f/uKuDp6bpbZCKamm8sOiZpUQWZJtzVHGpxxpp9Hp3dfGzGjGdnSj74cbAZJ6kJDKaVv0uM +DPpVmDvY6CKhS3E4eayXkmmziX7qIWgGmBSWh9JhNrxtJ1aeV+7AwFb9Ms+k2Y7CI9eNqPPYJayX +5HA49LY6tJ07lyZDo6G8SVlyTCMwhwFY9k6+HGhWZq/NQV3Is00qVUarH9oe4kA92819uZKAnDfd +DJZkndwi92SL32HeFZRSFaB9UslLqCHJxrHty8OVYNEP8Ktw+N/LTX7s1vqr2b1/VPKl6Xn62dZ2 +JChzAgMBAAGjPzA9MB0GA1UdDgQWBBSgc0mZaNyFW2XjmygvV5+9M7wHSDALBgNVHQ8EBAMCAQYw +DwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAaECpqLvkT115swW1F7NgE+vGkl3g +0dNq/vu+m22/xwVtWSDEHPC32oRYAmP6SBbvT6UL90qY8j+eG61Ha2POCEfrUj94nK9NrvjVT8+a +mCoQQTlSxN3Zmw7vkwGusi7KaEIkQmywszo+zenaSMQVy+n5Bw+SUEmK3TGXX8npN6o7WWWXlDLJ +s58+OmJYxUmtYg5xpTKqL8aJdkNAExNnPaJUJRDL8Try2frbSVa7pv6nQTXD4IhhyYjH3zYQIphZ +6rBK+1YWc26sTfcioU+tHXotRSflMMFe8toTyyVCUZVHA4xsIcx0Qu1T/zOLjw9XARYvz6buyXAi +FL39vmwLAw== +-----END CERTIFICATE----- + +Sonera Class 2 Root CA +====================== +-----BEGIN CERTIFICATE----- +MIIDIDCCAgigAwIBAgIBHTANBgkqhkiG9w0BAQUFADA5MQswCQYDVQQGEwJGSTEPMA0GA1UEChMG +U29uZXJhMRkwFwYDVQQDExBTb25lcmEgQ2xhc3MyIENBMB4XDTAxMDQwNjA3Mjk0MFoXDTIxMDQw +NjA3Mjk0MFowOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVyYTEZMBcGA1UEAxMQU29uZXJh +IENsYXNzMiBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJAXSjWdyvANlsdE+hY3 +/Ei9vX+ALTU74W+oZ6m/AxxNjG8yR9VBaKQTBME1DJqEQ/xcHf+Js+gXGM2RX/uJ4+q/Tl18GybT +dXnt5oTjV+WtKcT0OijnpXuENmmz/V52vaMtmdOQTiMofRhj8VQ7Jp12W5dCsv+u8E7s3TmVToMG +f+dJQMjFAbJUWmYdPfz56TwKnoG4cPABi+QjVHzIrviQHgCWctRUz2EjvOr7nQKV0ba5cTppCD8P +tOFCx4j1P5iop7oc4HFx71hXgVB6XGt0Rg6DA5jDjqhu8nYybieDwnPz3BjotJPqdURrBGAgcVeH +nfO+oJAjPYok4doh28MCAwEAAaMzMDEwDwYDVR0TAQH/BAUwAwEB/zARBgNVHQ4ECgQISqCqWITT +XjwwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQBazof5FnIVV0sd2ZvnoiYw7JNn39Yt +0jSv9zilzqsWuasvfDXLrNAPtEwr/IDva4yRXzZ299uzGxnq9LIR/WFxRL8oszodv7ND6J+/3DEI +cbCdjdY0RzKQxmUk96BKfARzjzlvF4xytb1LyHr4e4PDKE6cCepnP7JnBBvDFNr450kkkdAdavph +Oe9r5yF1BgfYErQhIHBCcYHaPJo2vqZbDWpsmh+Re/n570K6Tk6ezAyNlNzZRZxe7EJQY670XcSx +EtzKO6gunRRaBXW37Ndj4ro1tgQIkejanZz2ZrUYrAqmVCY0M9IbwdR/GjqOC6oybtv8TyWf2TLH +llpwrN9M +-----END CERTIFICATE----- + +XRamp Global CA Root +==================== +-----BEGIN CERTIFICATE----- +MIIEMDCCAxigAwIBAgIQUJRs7Bjq1ZxN1ZfvdY+grTANBgkqhkiG9w0BAQUFADCBgjELMAkGA1UE +BhMCVVMxHjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2Vj +dXJpdHkgU2VydmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBB +dXRob3JpdHkwHhcNMDQxMTAxMTcxNDA0WhcNMzUwMTAxMDUzNzE5WjCBgjELMAkGA1UEBhMCVVMx +HjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2VjdXJpdHkg +U2VydmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBBdXRob3Jp +dHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJB69FbS638eMpSe2OAtp87ZOqCwu +IR1cRN8hXX4jdP5efrRKt6atH67gBhbim1vZZ3RrXYCPKZ2GG9mcDZhtdhAoWORlsH9KmHmf4MMx +foArtYzAQDsRhtDLooY2YKTVMIJt2W7QDxIEM5dfT2Fa8OT5kavnHTu86M/0ay00fOJIYRyO82FE +zG+gSqmUsE3a56k0enI4qEHMPJQRfevIpoy3hsvKMzvZPTeL+3o+hiznc9cKV6xkmxnr9A8ECIqs +AxcZZPRaJSKNNCyy9mgdEm3Tih4U2sSPpuIjhdV6Db1q4Ons7Be7QhtnqiXtRYMh/MHJfNViPvry +xS3T/dRlAgMBAAGjgZ8wgZwwEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1Ud +EwEB/wQFMAMBAf8wHQYDVR0OBBYEFMZPoj0GY4QJnM5i5ASsjVy16bYbMDYGA1UdHwQvMC0wK6Ap +oCeGJWh0dHA6Ly9jcmwueHJhbXBzZWN1cml0eS5jb20vWEdDQS5jcmwwEAYJKwYBBAGCNxUBBAMC +AQEwDQYJKoZIhvcNAQEFBQADggEBAJEVOQMBG2f7Shz5CmBbodpNl2L5JFMn14JkTpAuw0kbK5rc +/Kh4ZzXxHfARvbdI4xD2Dd8/0sm2qlWkSLoC295ZLhVbO50WfUfXN+pfTXYSNrsf16GBBEYgoyxt +qZ4Bfj8pzgCT3/3JknOJiWSe5yvkHJEs0rnOfc5vMZnT5r7SHpDwCRR5XCOrTdLaIR9NmXmd4c8n +nxCbHIgNsIpkQTG4DmyQJKSbXHGPurt+HBvbaoAPIbzp26a3QPSyi6mx5O+aGtA9aZnuqCij4Tyz +8LIRnM98QObd50N9otg6tamN8jSZxNQQ4Qb9CYQQO+7ETPTsJ3xCwnR8gooJybQDJbw= +-----END CERTIFICATE----- + +Go Daddy Class 2 CA +=================== +-----BEGIN CERTIFICATE----- +MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMY +VGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRp +ZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkG +A1UEBhMCVVMxITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28g +RGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQAD +ggENADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCAPVYYYwhv +2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6wwdhFJ2+qN1j3hybX2C32 +qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXiEqITLdiOr18SPaAIBQi2XKVlOARFmR6j +YGB0xUGlcmIbYsUfb18aQr4CUWWoriMYavx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmY +vLEHZ6IVDd2gWMZEewo+YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0O +BBYEFNLEsNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h/t2o +atTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMu +MTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwG +A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wim +PQoZ+YeAEW5p5JYXMP80kWNyOO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKt +I3lpjbi2Tc7PTMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ +HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mERdEr/VxqHD3VI +Ls9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5CufReYNnyicsbkqWletNw+vHX/b +vZ8= +-----END CERTIFICATE----- + +Starfield Class 2 CA +==================== +-----BEGIN CERTIFICATE----- +MIIEDzCCAvegAwIBAgIBADANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJVUzElMCMGA1UEChMc +U3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMpU3RhcmZpZWxkIENsYXNzIDIg +Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwNjI5MTczOTE2WhcNMzQwNjI5MTczOTE2WjBo +MQswCQYDVQQGEwJVUzElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAG +A1UECxMpU3RhcmZpZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEgMA0GCSqG +SIb3DQEBAQUAA4IBDQAwggEIAoIBAQC3Msj+6XGmBIWtDBFk385N78gDGIc/oav7PKaf8MOh2tTY +bitTkPskpD6E8J7oX+zlJ0T1KKY/e97gKvDIr1MvnsoFAZMej2YcOadN+lq2cwQlZut3f+dZxkqZ +JRRU6ybH838Z1TBwj6+wRir/resp7defqgSHo9T5iaU0X9tDkYI22WY8sbi5gv2cOj4QyDvvBmVm +epsZGD3/cVE8MC5fvj13c7JdBmzDI1aaK4UmkhynArPkPw2vCHmCuDY96pzTNbO8acr1zJ3o/WSN +F4Azbl5KXZnJHoe0nRrA1W4TNSNe35tfPe/W93bC6j67eA0cQmdrBNj41tpvi/JEoAGrAgEDo4HF +MIHCMB0GA1UdDgQWBBS/X7fRzt0fhvRbVazc1xDCDqmI5zCBkgYDVR0jBIGKMIGHgBS/X7fRzt0f +hvRbVazc1xDCDqmI56FspGowaDELMAkGA1UEBhMCVVMxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNo +bm9sb2dpZXMsIEluYy4xMjAwBgNVBAsTKVN0YXJmaWVsZCBDbGFzcyAyIENlcnRpZmljYXRpb24g +QXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAAWdP4id0ckaVaGs +afPzWdqbAYcaT1epoXkJKtv3L7IezMdeatiDh6GX70k1PncGQVhiv45YuApnP+yz3SFmH8lU+nLM +PUxA2IGvd56Deruix/U0F47ZEUD0/CwqTRV/p2JdLiXTAAsgGh1o+Re49L2L7ShZ3U0WixeDyLJl +xy16paq8U4Zt3VekyvggQQto8PT7dL5WXXp59fkdheMtlb71cZBDzI0fmgAKhynpVSJYACPq4xJD +KVtHCN2MQWplBqjlIapBtJUhlbl90TSrE9atvNziPTnNvT51cKEYWQPJIrSPnNVeKtelttQKbfi3 +QBFGmh95DmK/D5fs4C8fF5Q= +-----END CERTIFICATE----- + +Taiwan GRCA +=========== +-----BEGIN CERTIFICATE----- +MIIFcjCCA1qgAwIBAgIQH51ZWtcvwgZEpYAIaeNe9jANBgkqhkiG9w0BAQUFADA/MQswCQYDVQQG +EwJUVzEwMC4GA1UECgwnR292ZXJubWVudCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4X +DTAyMTIwNTEzMjMzM1oXDTMyMTIwNTEzMjMzM1owPzELMAkGA1UEBhMCVFcxMDAuBgNVBAoMJ0dv +dmVybm1lbnQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQAD +ggIPADCCAgoCggIBAJoluOzMonWoe/fOW1mKydGGEghU7Jzy50b2iPN86aXfTEc2pBsBHH8eV4qN +w8XRIePaJD9IK/ufLqGU5ywck9G/GwGHU5nOp/UKIXZ3/6m3xnOUT0b3EEk3+qhZSV1qgQdW8or5 +BtD3cCJNtLdBuTK4sfCxw5w/cP1T3YGq2GN49thTbqGsaoQkclSGxtKyyhwOeYHWtXBiCAEuTk8O +1RGvqa/lmr/czIdtJuTJV6L7lvnM4T9TjGxMfptTCAtsF/tnyMKtsc2AtJfcdgEWFelq16TheEfO +htX7MfP6Mb40qij7cEwdScevLJ1tZqa2jWR+tSBqnTuBto9AAGdLiYa4zGX+FVPpBMHWXx1E1wov +J5pGfaENda1UhhXcSTvxls4Pm6Dso3pdvtUqdULle96ltqqvKKyskKw4t9VoNSZ63Pc78/1Fm9G7 +Q3hub/FCVGqY8A2tl+lSXunVanLeavcbYBT0peS2cWeqH+riTcFCQP5nRhc4L0c/cZyu5SHKYS1t +B6iEfC3uUSXxY5Ce/eFXiGvviiNtsea9P63RPZYLhY3Naye7twWb7LuRqQoHEgKXTiCQ8P8NHuJB +O9NAOueNXdpm5AKwB1KYXA6OM5zCppX7VRluTI6uSw+9wThNXo+EHWbNxWCWtFJaBYmOlXqYwZE8 +lSOyDvR5tMl8wUohAgMBAAGjajBoMB0GA1UdDgQWBBTMzO/MKWCkO7GStjz6MmKPrCUVOzAMBgNV +HRMEBTADAQH/MDkGBGcqBwAEMTAvMC0CAQAwCQYFKw4DAhoFADAHBgVnKgMAAAQUA5vwIhP/lSg2 +09yewDL7MTqKUWUwDQYJKoZIhvcNAQEFBQADggIBAECASvomyc5eMN1PhnR2WPWus4MzeKR6dBcZ +TulStbngCnRiqmjKeKBMmo4sIy7VahIkv9Ro04rQ2JyftB8M3jh+Vzj8jeJPXgyfqzvS/3WXy6Tj +Zwj/5cAWtUgBfen5Cv8b5Wppv3ghqMKnI6mGq3ZW6A4M9hPdKmaKZEk9GhiHkASfQlK3T8v+R0F2 +Ne//AHY2RTKbxkaFXeIksB7jSJaYV0eUVXoPQbFEJPPB/hprv4j9wabak2BegUqZIJxIZhm1AHlU +D7gsL0u8qV1bYH+Mh6XgUmMqvtg7hUAV/h62ZT/FS9p+tXo1KaMuephgIqP0fSdOLeq0dDzpD6Qz +DxARvBMB1uUO07+1EqLhRSPAzAhuYbeJq4PjJB7mXQfnHyA+z2fI56wwbSdLaG5LKlwCCDTb+Hbk +Z6MmnD+iMsJKxYEYMRBWqoTvLQr/uB930r+lWKBi5NdLkXWNiYCYfm3LU05er/ayl4WXudpVBrkk +7tfGOB5jGxI7leFYrPLfhNVfmS8NVVvmONsuP3LpSIXLuykTjx44VbnzssQwmSNOXfJIoRIM3BKQ +CZBUkQM8R+XVyWXgt0t97EfTsws+rZ7QdAAO671RrcDeLMDDav7v3Aun+kbfYNucpllQdSNpc5Oy ++fwC00fmcc4QAu4njIT/rEUNE1yDMuAlpYYsfPQS +-----END CERTIFICATE----- + +DigiCert Assured ID Root CA +=========================== +-----BEGIN CERTIFICATE----- +MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBlMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw +IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzEx +MTEwMDAwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL +ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0Ew +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7cJpSIqvTO +9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYPmDI2dsze3Tyoou9q+yHy +UmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW +/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpy +oeb6pNnVFzF1roV9Iq4/AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whf +GHdPAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRF +66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzANBgkq +hkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRCdWKuh+vy1dneVrOfzM4UKLkNl2Bc +EkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTffwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38Fn +SbNd67IJKusm7Xi+fT8r87cmNW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i +8b5QZ7dsvfPxH2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe ++o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g== +-----END CERTIFICATE----- + +DigiCert Global Root CA +======================= +-----BEGIN CERTIFICATE----- +MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAw +HgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAw +MDAwMDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 +dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkq +hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsBCSDMAZOn +TjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97nh6Vfe63SKMI2tavegw5 +BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt43C/dxC//AH2hdmoRBBYMql1GNXRor5H +4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7PT19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y +7vrTC0LUq7dBMtoM1O/4gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQAB +o2MwYTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbRTLtm +8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQEF +BQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/EsrhMAtudXH/vTBH1jLuG2cenTnmCmr +EbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIt +tep3Sp+dWOIrWcBAI+0tKIJFPnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886 +UAb3LujEV0lsYSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk +CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4= +-----END CERTIFICATE----- + +DigiCert High Assurance EV Root CA +================================== +-----BEGIN CERTIFICATE----- +MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSsw +KQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAw +MFoXDTMxMTExMDAwMDAwMFowbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZ +MBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFu +Y2UgRVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm+9S75S0t +Mqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTWPNt0OKRKzE0lgvdKpVMS +OO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEMxChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3 +MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFBIk5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQ +NAQTXKFx01p8VdteZOE3hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUe +h10aUAsgEsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMB +Af8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaAFLE+w2kD+L9HAdSY +JhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3NecnzyIZgYIVyHbIUf4KmeqvxgydkAQ +V8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6zeM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFp +myPInngiK3BD41VHMWEZ71jFhS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkK +mNEVX58Svnw2Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe +vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep+OkuE6N36B9K +-----END CERTIFICATE----- + +DST Root CA X3 +============== +-----BEGIN CERTIFICATE----- +MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/MSQwIgYDVQQK +ExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMTDkRTVCBSb290IENBIFgzMB4X +DTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVowPzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1 +cmUgVHJ1c3QgQ28uMRcwFQYDVQQDEw5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQAD +ggEPADCCAQoCggEBAN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmT +rE4Orz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEqOLl5CjH9 +UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9bxiqKqy69cK3FCxolkHRy +xXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40d +utolucbY38EVAjqr2m7xPi71XAicPNaDaeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0T +AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQ +MA0GCSqGSIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69ikug +dB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXrAvHRAosZy5Q6XkjE +GB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZzR8srzJmwN0jP41ZL9c8PDHIyh8bw +RLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubS +fZGL+T0yjWW06XyxV3bqxbYoOb8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ +-----END CERTIFICATE----- + +SwissSign Gold CA - G2 +====================== +-----BEGIN CERTIFICATE----- +MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkNIMRUw +EwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2lnbiBHb2xkIENBIC0gRzIwHhcN +MDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBFMQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dp +c3NTaWduIEFHMR8wHQYDVQQDExZTd2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUq +t2/876LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+bbqBHH5C +jCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c6bM8K8vzARO/Ws/BtQpg +vd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqEemA8atufK+ze3gE/bk3lUIbLtK/tREDF +ylqM2tIrfKjuvqblCqoOpd8FUrdVxyJdMmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvR +AiTysybUa9oEVeXBCsdtMDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuend +jIj3o02yMszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69yFGkO +peUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPiaG59je883WX0XaxR +7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxMgI93e2CaHt+28kgeDrpOVG2Y4OGi +GqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUw +AwEB/zAdBgNVHQ4EFgQUWyV7lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64 +OfPAeGZe6Drn8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov +L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe645R88a7A3hfm +5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczOUYrHUDFu4Up+GC9pWbY9ZIEr +44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOf +Mke6UiI0HTJ6CVanfCU2qT1L2sCCbwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6m +Gu6uLftIdxf+u+yvGPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxp +mo/a77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCChdiDyyJk +vC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid392qgQmwLOM7XdVAyksLf +KzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEppLd6leNcG2mqeSz53OiATIgHQv2ieY2Br +NU0LbbqhPcCT4H8js1WtciVORvnSFu+wZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6Lqj +viOvrv1vA+ACOzB2+httQc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ +-----END CERTIFICATE----- + +SwissSign Silver CA - G2 +======================== +-----BEGIN CERTIFICATE----- +MIIFvTCCA6WgAwIBAgIITxvUL1S7L0swDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCQ0gxFTAT +BgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWduIFNpbHZlciBDQSAtIEcyMB4X +DTA2MTAyNTA4MzI0NloXDTM2MTAyNTA4MzI0NlowRzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3 +aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWduIFNpbHZlciBDQSAtIEcyMIICIjANBgkqhkiG +9w0BAQEFAAOCAg8AMIICCgKCAgEAxPGHf9N4Mfc4yfjDmUO8x/e8N+dOcbpLj6VzHVxumK4DV644 +N0MvFz0fyM5oEMF4rhkDKxD6LHmD9ui5aLlV8gREpzn5/ASLHvGiTSf5YXu6t+WiE7brYT7QbNHm ++/pe7R20nqA1W6GSy/BJkv6FCgU+5tkL4k+73JU3/JHpMjUi0R86TieFnbAVlDLaYQ1HTWBCrpJH +6INaUFjpiou5XaHc3ZlKHzZnu0jkg7Y360g6rw9njxcH6ATK72oxh9TAtvmUcXtnZLi2kUpCe2Uu +MGoM9ZDulebyzYLs2aFK7PayS+VFheZteJMELpyCbTapxDFkH4aDCyr0NQp4yVXPQbBH6TCfmb5h +qAaEuSh6XzjZG6k4sIN/c8HDO0gqgg8hm7jMqDXDhBuDsz6+pJVpATqJAHgE2cn0mRmrVn5bi4Y5 +FZGkECwJMoBgs5PAKrYYC51+jUnyEEp/+dVGLxmSo5mnJqy7jDzmDrxHB9xzUfFwZC8I+bRHHTBs +ROopN4WSaGa8gzj+ezku01DwH/teYLappvonQfGbGHLy9YR0SslnxFSuSGTfjNFusB3hB48IHpmc +celM2KX3RxIfdNFRnobzwqIjQAtz20um53MGjMGg6cFZrEb65i/4z3GcRm25xBWNOHkDRUjvxF3X +CO6HOSKGsg0PWEP3calILv3q1h8CAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/ +BAUwAwEB/zAdBgNVHQ4EFgQUF6DNweRBtjpbO8tFnb0cwpj6hlgwHwYDVR0jBBgwFoAUF6DNweRB +tjpbO8tFnb0cwpj6hlgwRgYDVR0gBD8wPTA7BglghXQBWQEDAQEwLjAsBggrBgEFBQcCARYgaHR0 +cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBAHPGgeAn0i0P +4JUw4ppBf1AsX19iYamGamkYDHRJ1l2E6kFSGG9YrVBWIGrGvShpWJHckRE1qTodvBqlYJ7YH39F +kWnZfrt4csEGDyrOj4VwYaygzQu4OSlWhDJOhrs9xCrZ1x9y7v5RoSJBsXECYxqCsGKrXlcSH9/L +3XWgwF15kIwb4FDm3jH+mHtwX6WQ2K34ArZv02DdQEsixT2tOnqfGhpHkXkzuoLcMmkDlm4fS/Bx +/uNncqCxv1yL5PqZIseEuRuNI5c/7SXgz2W79WEE790eslpBIlqhn10s6FvJbakMDHiqYMZWjwFa +DGi8aRl5xB9+lwW/xekkUV7U1UtT7dkjWjYDZaPBA61BMPNGG4WQr2W11bHkFlt4dR2Xem1ZqSqP +e97Dh4kQmUlzeMg9vVE1dCrV8X5pGyq7O70luJpaPXJhkGaH7gzWTdQRdAtq/gsD/KNVV4n+Ssuu +WxcFyPKNIzFTONItaj+CuY0IavdeQXRuwxF+B6wpYJE/OMpXEA29MC/HpeZBoNquBYeaoKRlbEwJ +DIm6uNO5wJOKMPqN5ZprFQFOZ6raYlY+hAhm0sQ2fac+EPyI4NSA5QC9qvNOBqN6avlicuMJT+ub +DgEj8Z+7fNzcbBGXJbLytGMU0gYqZ4yD9c7qB9iaah7s5Aq7KkzrCWA5zspi2C5u +-----END CERTIFICATE----- + +GeoTrust Primary Certification Authority +======================================== +-----BEGIN CERTIFICATE----- +MIIDfDCCAmSgAwIBAgIQGKy1av1pthU6Y2yv2vrEoTANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQG +EwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMoR2VvVHJ1c3QgUHJpbWFyeSBD +ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjExMjcwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMFgx +CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTEwLwYDVQQDEyhHZW9UcnVzdCBQ +cmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEAvrgVe//UfH1nrYNke8hCUy3f9oQIIGHWAVlqnEQRr+92/ZV+zmEwu3qDXwK9AWbK7hWN +b6EwnL2hhZ6UOvNWiAAxz9juapYC2e0DjPt1befquFUWBRaa9OBesYjAZIVcFU2Ix7e64HXprQU9 +nceJSOC7KMgD4TCTZF5SwFlwIjVXiIrxlQqD17wxcwE07e9GceBrAqg1cmuXm2bgyxx5X9gaBGge +RwLmnWDiNpcB3841kt++Z8dtd1k7j53WkBWUvEI0EME5+bEnPn7WinXFsq+W06Lem+SYvn3h6YGt +tm/81w7a4DSwDRp35+MImO9Y+pyEtzavwt+s0vQQBnBxNQIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQULNVQQZcVi/CPNmFbSvtr2ZnJM5IwDQYJKoZI +hvcNAQEFBQADggEBAFpwfyzdtzRP9YZRqSa+S7iq8XEN3GHHoOo0Hnp3DwQ16CePbJC/kRYkRj5K +Ts4rFtULUh38H2eiAkUxT87z+gOneZ1TatnaYzr4gNfTmeGl4b7UVXGYNTq+k+qurUKykG/g/CFN +NWMziUnWm07Kx+dOCQD32sfvmWKZd7aVIl6KoKv0uHiYyjgZmclynnjNS6yvGaBzEi38wkG6gZHa +Floxt/m0cYASSJlyc1pZU8FjUjPtp8nSOQJw+uCxQmYpqptR7TBUIhRf2asdweSU8Pj1K/fqynhG +1riR/aYNKxoUAT6A8EKglQdebc3MS6RFjasS6LPeWuWgfOgPIh1a6Vk= +-----END CERTIFICATE----- + +thawte Primary Root CA +====================== +-----BEGIN CERTIFICATE----- +MIIEIDCCAwigAwIBAgIQNE7VVyDV7exJ9C/ON9srbTANBgkqhkiG9w0BAQUFADCBqTELMAkGA1UE +BhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2 +aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhv +cml6ZWQgdXNlIG9ubHkxHzAdBgNVBAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwHhcNMDYxMTE3 +MDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCBqTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwg +SW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMv +KGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAMT +FnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs +oPD7gFnUnMekz52hWXMJEEUMDSxuaPFsW0hoSVk3/AszGcJ3f8wQLZU0HObrTQmnHNK4yZc2AreJ +1CRfBsDMRJSUjQJib+ta3RGNKJpchJAQeg29dGYvajig4tVUROsdB58Hum/u6f1OCyn1PoSgAfGc +q/gcfomk6KHYcWUNo1F77rzSImANuVud37r8UVsLr5iy6S7pBOhih94ryNdOwUxkHt3Ph1i6Sk/K +aAcdHJ1KxtUvkcx8cXIcxcBn6zL9yZJclNqFwJu/U30rCfSMnZEfl2pSy94JNqR32HuHUETVPm4p +afs5SSYeCaWAe0At6+gnhcn+Yf1+5nyXHdWdAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYD +VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR7W0XPr87Lev0xkhpqtvNG61dIUDANBgkqhkiG9w0BAQUF +AAOCAQEAeRHAS7ORtvzw6WfUDW5FvlXok9LOAz/t2iWwHVfLHjp2oEzsUHboZHIMpKnxuIvW1oeE +uzLlQRHAd9mzYJ3rG9XRbkREqaYB7FViHXe4XI5ISXycO1cRrK1zN44veFyQaEfZYGDm/Ac9IiAX +xPcW6cTYcvnIc3zfFi8VqT79aie2oetaupgf1eNNZAqdE8hhuvU5HIe6uL17In/2/qxAeeWsEG89 +jxt5dovEN7MhGITlNgDrYyCZuen+MwS7QcjBAvlEYyCegc5C09Y/LHbTY5xZ3Y+m4Q6gLkH3LpVH +z7z9M/P2C2F+fpErgUfCJzDupxBdN49cOSvkBPB7jVaMaA== +-----END CERTIFICATE----- + +VeriSign Class 3 Public Primary Certification Authority - G5 +============================================================ +-----BEGIN CERTIFICATE----- +MIIE0zCCA7ugAwIBAgIQGNrRniZ96LtKIVjNzGs7SjANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE +BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO +ZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk +IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRp +ZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMDYxMTA4MDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCB +yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2ln +biBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBh +dXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmlt +YXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw +ggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ/XxrcgxiV0i6CqqpkKz +j/i5Vbext0uz/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6/WhkcIzSdhD +Y2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn/ +Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4/VBEnkjWNHiDxpg8v+R70r +fk/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10/NIeWiu5T6CUVAgMBAAGjgbIwga8wDwYDVR0TAQH/ +BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2Uv +Z2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVy +aXNpZ24uY29tL3ZzbG9nby5naWYwHQYDVR0OBBYEFH/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqG +SIb3DQEBBQUAA4IBAQCTJEowX2LP2BqYLz3q3JktvXf2pXkiOOzEp6B4Eq1iDkVwZMXnl2YtmAl+ +X6/WzChl8gGqCBpH3vn5fJJaCGkgDdk+bW48DW7Y5gaRQBi5+MHt39tBquCWIMnNZBU4gcmU7qKE +KQsTb47bDN0lAtukixlE0kF6BWlKWE9gyn6CagsCqiUXObXbf+eEZSqVir2G3l6BFoMtEMze/aiC +Km0oHw0LxOXnGiYZ4fQRbxC1lfznQgUy286dUV4otp6F01vvpX1FQHKOtw5rDgb7MzVIcbidJ4vE +ZV8NhnacRHr2lVz2XTIIM6RUthg/aFzyQkqFOFSDX9HoLPKsEdao7WNq +-----END CERTIFICATE----- + +SecureTrust CA +============== +-----BEGIN CERTIFICATE----- +MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBIMQswCQYDVQQG +EwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xFzAVBgNVBAMTDlNlY3VyZVRy +dXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIzMTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAe +BgNVBAoTF1NlY3VyZVRydXN0IENvcnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCC +ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQX +OZEzZum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO0gMdA+9t +DWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIaowW8xQmxSPmjL8xk037uH +GFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b +01k/unK8RCSc43Oz969XL0Imnal0ugBS8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmH +ursCAwEAAaOBnTCBmjATBgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/ +BAUwAwEB/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCegJYYj +aHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGCNxUBBAMCAQAwDQYJ +KoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt36Z3q059c4EVlew3KW+JwULKUBRSu +SceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHf +mbx8IVQr5Fiiu1cprp6poxkmD5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZ +nMUFdAvnZyPSCPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR +3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE= +-----END CERTIFICATE----- + +Secure Global CA +================ +-----BEGIN CERTIFICATE----- +MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBKMQswCQYDVQQG +EwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBH +bG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkxMjMxMTk1MjA2WjBKMQswCQYDVQQGEwJVUzEg +MB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwg +Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNS7YrGxVaQZx5RNoJLNP2MwhR/jx +YDiJiQPpvepeRlMJ3Fz1Wuj3RSoC6zFh1ykzTM7HfAo3fg+6MpjhHZevj8fcyTiW89sa/FHtaMbQ +bqR8JNGuQsiWUGMu4P51/pinX0kuleM5M2SOHqRfkNJnPLLZ/kG5VacJjnIFHovdRIWCQtBJwB1g +8NEXLJXr9qXBkqPFwqcIYA1gBBCWeZ4WNOaptvolRTnIHmX5k/Wq8VLcmZg9pYYaDDUz+kulBAYV +HDGA76oYa8J719rO+TMg1fW9ajMtgQT7sFzUnKPiXB3jqUJ1XnvUd+85VLrJChgbEplJL4hL/VBi +0XPnj3pDAgMBAAGjgZ0wgZowEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1Ud +EwEB/wQFMAMBAf8wHQYDVR0OBBYEFK9EBMJBfkiD2045AuzshHrmzsmkMDQGA1UdHwQtMCswKaAn +oCWGI2h0dHA6Ly9jcmwuc2VjdXJldHJ1c3QuY29tL1NHQ0EuY3JsMBAGCSsGAQQBgjcVAQQDAgEA +MA0GCSqGSIb3DQEBBQUAA4IBAQBjGghAfaReUw132HquHw0LURYD7xh8yOOvaliTFGCRsoTciE6+ +OYo68+aCiV0BN7OrJKQVDpI1WkpEXk5X+nXOH0jOZvQ8QCaSmGwb7iRGDBezUqXbpZGRzzfTb+cn +CDpOGR86p1hcF895P4vkp9MmI50mD1hp/Ed+stCNi5O/KU9DaXR2Z0vPB4zmAve14bRDtUstFJ/5 +3CYNv6ZHdAbYiNE6KTCEztI5gGIbqMdXSbxqVVFnFUq+NQfk1XWYN3kwFNspnWzFacxHVaIw98xc +f8LDmBxrThaA63p4ZUWiABqvDA1VZDRIuJK58bRQKfJPIx/abKwfROHdI3hRW8cW +-----END CERTIFICATE----- + +COMODO Certification Authority +============================== +-----BEGIN CERTIFICATE----- +MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCBgTELMAkGA1UE +BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG +A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNVBAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1 +dGhvcml0eTAeFw0wNjEyMDEwMDAwMDBaFw0yOTEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEb +MBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFD +T01PRE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3UcEbVASY06m/weaKXTuH ++7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI2GqGd0S7WWaXUF601CxwRM/aN5VCaTww +xHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV +4EajcNxo2f8ESIl33rXp+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA +1KGzqSX+DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5OnKVI +rLsm9wIDAQABo4GOMIGLMB0GA1UdDgQWBBQLWOWLxkwVN6RAqTCpIb5HNlpW/zAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmNvbW9k +b2NhLmNvbS9DT01PRE9DZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDANBgkqhkiG9w0BAQUFAAOC +AQEAPpiem/Yb6dc5t3iuHXIYSdOH5EOC6z/JqvWote9VfCFSZfnVDeFs9D6Mk3ORLgLETgdxb8CP +OGEIqB6BCsAvIC9Bi5HcSEW88cbeunZrM8gALTFGTO3nnc+IlP8zwFboJIYmuNg4ON8qa90SzMc/ +RxdMosIGlgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmc +IGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5ddBA6+C4OmF4O5MBKgxTMVBbkN ++8cFduPYSo38NBejxiEovjBFMR7HeL5YYTisO+IBZQ== +-----END CERTIFICATE----- + +Network Solutions Certificate Authority +======================================= +-----BEGIN CERTIFICATE----- +MIID5jCCAs6gAwIBAgIQV8szb8JcFuZHFhfjkDFo4DANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQG +EwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMuMTAwLgYDVQQDEydOZXR3b3Jr +IFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDYxMjAxMDAwMDAwWhcNMjkxMjMx +MjM1OTU5WjBiMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMu +MTAwLgYDVQQDEydOZXR3b3JrIFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0G +CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvH6SMG3G2I4rC7xGzuAnlt7e+foS0zwzc7MEL7xx +jOWftiJgPl9dzgn/ggwbmlFQGiaJ3dVhXRncEg8tCqJDXRfQNJIg6nPPOCwGJgl6cvf6UDL4wpPT +aaIjzkGxzOTVHzbRijr4jGPiFFlp7Q3Tf2vouAPlT2rlmGNpSAW+Lv8ztumXWWn4Zxmuk2GWRBXT +crA/vGp97Eh/jcOrqnErU2lBUzS1sLnFBgrEsEX1QV1uiUV7PTsmjHTC5dLRfbIR1PtYMiKagMnc +/Qzpf14Dl847ABSHJ3A4qY5usyd2mFHgBeMhqxrVhSI8KbWaFsWAqPS7azCPL0YCorEMIuDTAgMB +AAGjgZcwgZQwHQYDVR0OBBYEFCEwyfsA106Y2oeqKtCnLrFAMadMMA4GA1UdDwEB/wQEAwIBBjAP +BgNVHRMBAf8EBTADAQH/MFIGA1UdHwRLMEkwR6BFoEOGQWh0dHA6Ly9jcmwubmV0c29sc3NsLmNv +bS9OZXR3b3JrU29sdXRpb25zQ2VydGlmaWNhdGVBdXRob3JpdHkuY3JsMA0GCSqGSIb3DQEBBQUA +A4IBAQC7rkvnt1frf6ott3NHhWrB5KUd5Oc86fRZZXe1eltajSU24HqXLjjAV2CDmAaDn7l2em5Q +4LqILPxFzBiwmZVRDuwduIj/h1AcgsLj4DKAv6ALR8jDMe+ZZzKATxcheQxpXN5eNK4CtSbqUN9/ +GGUsyfJj4akH/nxxH2szJGoeBfcFaMBqEssuXmHLrijTfsK0ZpEmXzwuJF/LWA/rKOyvEZbz3Htv +wKeI8lN3s2Berq4o2jUsbzRF0ybh3uxbTydrFny9RAQYgrOJeRcQcT16ohZO9QHNpGxlaKFJdlxD +ydi8NmdspZS11My5vWo1ViHe2MPr+8ukYEywVaCge1ey +-----END CERTIFICATE----- + +COMODO ECC Certification Authority +================================== +-----BEGIN CERTIFICATE----- +MIICiTCCAg+gAwIBAgIQH0evqmIAcFBUTAGem2OZKjAKBggqhkjOPQQDAzCBhTELMAkGA1UEBhMC +R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE +ChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBB +dXRob3JpdHkwHhcNMDgwMzA2MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMCR0Ix +GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR +Q09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRo +b3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQDR3svdcmCFYX7deSRFtSrYpn1PlILBs5BAH+X +4QokPB0BBO490o0JlwzgdeT6+3eKKvUDYEs2ixYjFq0JcfRK9ChQtP6IHG4/bC8vCVlbpVsLM5ni +wz2J+Wos77LTBumjQjBAMB0GA1UdDgQWBBR1cacZSBm8nZ3qQUfflMRId5nTeTAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjEA7wNbeqy3eApyt4jf/7VG +FAkK+qDmfQjGGoe9GKhzvSbKYAydzpmfz1wPMOG+FDHqAjAU9JM8SaczepBGR7NjfRObTrdvGDeA +U/7dIOA1mjbRxwG55tzd8/8dLDoWV9mSOdY= +-----END CERTIFICATE----- + +OISTE WISeKey Global Root GA CA +=============================== +-----BEGIN CERTIFICATE----- +MIID8TCCAtmgAwIBAgIQQT1yx/RrH4FDffHSKFTfmjANBgkqhkiG9w0BAQUFADCBijELMAkGA1UE +BhMCQ0gxEDAOBgNVBAoTB1dJU2VLZXkxGzAZBgNVBAsTEkNvcHlyaWdodCAoYykgMjAwNTEiMCAG +A1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBH +bG9iYWwgUm9vdCBHQSBDQTAeFw0wNTEyMTExNjAzNDRaFw0zNzEyMTExNjA5NTFaMIGKMQswCQYD +VQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEbMBkGA1UECxMSQ29weXJpZ2h0IChjKSAyMDA1MSIw +IAYDVQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5 +IEdsb2JhbCBSb290IEdBIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0+zAJs9 +Nt350UlqaxBJH+zYK7LG+DKBKUOVTJoZIyEVRd7jyBxRVVuuk+g3/ytr6dTqvirdqFEr12bDYVxg +Asj1znJ7O7jyTmUIms2kahnBAbtzptf2w93NvKSLtZlhuAGio9RN1AU9ka34tAhxZK9w8RxrfvbD +d50kc3vkDIzh2TbhmYsFmQvtRTEJysIA2/dyoJaqlYfQjse2YXMNdmaM3Bu0Y6Kff5MTMPGhJ9vZ +/yxViJGg4E8HsChWjBgbl0SOid3gF27nKu+POQoxhILYQBRJLnpB5Kf+42TMwVlxSywhp1t94B3R +LoGbw9ho972WG6xwsRYUC9tguSYBBQIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw +AwEB/zAdBgNVHQ4EFgQUswN+rja8sHnR3JQmthG+IbJphpQwEAYJKwYBBAGCNxUBBAMCAQAwDQYJ +KoZIhvcNAQEFBQADggEBAEuh/wuHbrP5wUOxSPMowB0uyQlB+pQAHKSkq0lPjz0e701vvbyk9vIm +MMkQyh2I+3QZH4VFvbBsUfk2ftv1TDI6QU9bR8/oCy22xBmddMVHxjtqD6wU2zz0c5ypBd8A3HR4 ++vg1YFkCExh8vPtNsCBtQ7tgMHpnM1zFmdH4LTlSc/uMqpclXHLZCB6rTjzjgTGfA6b7wP4piFXa +hNVQA7bihKOmNqoROgHhGEvWRGizPflTdISzRpFGlgC3gCy24eMQ4tui5yiPAZZiFj4A4xylNoEY +okxSdsARo27mHbrjWr42U8U+dY+GaSlYU7Wcu2+fXMUY7N0v4ZjJ/L7fCg0= +-----END CERTIFICATE----- + +Certigna +======== +-----BEGIN CERTIFICATE----- +MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNVBAYTAkZSMRIw +EAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4XDTA3MDYyOTE1MTMwNVoXDTI3 +MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwI +Q2VydGlnbmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7q +XOEm7RFHYeGifBZ4QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyH +GxnygQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbwzBfsV1/p +ogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q130yGLMLLGq/jj8UEYkg +DncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKf +Irjxwo1p3Po6WAbfAgMBAAGjgbwwgbkwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQ +tCRZvgHyUtVF9lo53BEwZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJ +BgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzjAQ/J +SP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQUFAAOCAQEA +hQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8hbV6lUmPOEvjvKtpv6zf+EwLHyzs+ +ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFncfca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1klu +PBS1xp81HlDQwY9qcEQCYsuuHWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY +1gkIl2PlwS6wt0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw +WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg== +-----END CERTIFICATE----- + +Cybertrust Global Root +====================== +-----BEGIN CERTIFICATE----- +MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYGA1UEChMPQ3li +ZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2JhbCBSb290MB4XDTA2MTIxNTA4 +MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQD +ExZDeWJlcnRydXN0IEdsb2JhbCBSb290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA ++Mi8vRRQZhP/8NN57CPytxrHjoXxEnOmGaoQ25yiZXRadz5RfVb23CO21O1fWLE3TdVJDm71aofW +0ozSJ8bi/zafmGWgE07GKmSb1ZASzxQG9Dvj1Ci+6A74q05IlG2OlTEQXO2iLb3VOm2yHLtgwEZL +AfVJrn5GitB0jaEMAs7u/OePuGtm839EAL9mJRQr3RAwHQeWP032a7iPt3sMpTjr3kfb1V05/Iin +89cqdPHoWqI7n1C6poxFNcJQZZXcY4Lv3b93TZxiyWNzFtApD0mpSPCzqrdsxacwOUBdrsTiXSZT +8M4cIwhhqJQZugRiQOwfOHB3EgZxpzAYXSUnpQIDAQABo4GlMIGiMA4GA1UdDwEB/wQEAwIBBjAP +BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2CHsNesysIEyGVjJez6tuhS1wVzA/BgNVHR8EODA2 +MDSgMqAwhi5odHRwOi8vd3d3Mi5wdWJsaWMtdHJ1c3QuY29tL2NybC9jdC9jdHJvb3QuY3JsMB8G +A1UdIwQYMBaAFLYIew16zKwgTIZWMl7Pq26FLXBXMA0GCSqGSIb3DQEBBQUAA4IBAQBW7wojoFRO +lZfJ+InaRcHUowAl9B8Tq7ejhVhpwjCt2BWKLePJzYFa+HMjWqd8BfP9IjsO0QbE2zZMcwSO5bAi +5MXzLqXZI+O4Tkogp24CJJ8iYGd7ix1yCcUxXOl5n4BHPa2hCwcUPUf/A2kaDAtE52Mlp3+yybh2 +hO0j9n0Hq0V+09+zv+mKts2oomcrUtW3ZfA5TGOgkXmTUg9U3YO7n9GPp1Nzw8v/MOx8BLjYRB+T +X3EJIrduPuocA06dGiBh+4E37F78CkWr1+cXVdCg6mCbpvbjjFspwgZgFJ0tl0ypkxWdYcQBX0jW +WL1WMRJOEcgh4LMRkWXbtKaIOM5V +-----END CERTIFICATE----- + +ePKI Root Certification Authority +================================= +-----BEGIN CERTIFICATE----- +MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQG +EwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0ZC4xKjAoBgNVBAsMIWVQS0kg +Um9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMx +MjdaMF4xCzAJBgNVBAYTAlRXMSMwIQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEq +MCgGA1UECwwhZVBLSSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAHSyZbCUNs +IZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAhijHyl3SJCRImHJ7K2RKi +lTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3XDZoTM1PRYfl61dd4s5oz9wCGzh1NlDiv +qOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX +12ruOzjjK9SXDrkb5wdJfzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0O +WQqraffAsgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uUWH1+ +ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLSnT0IFaUQAS2zMnao +lQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pHdmX2Os+PYhcZewoozRrSgx4hxyy/ +vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJipNiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXi +Zo1jDiVN1Rmy5nk3pyKdVDECAwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/Qkqi +MAwGA1UdEwQFMAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH +ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGBuvl2ICO1J2B0 +1GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6YlPwZpVnPDimZI+ymBV3QGypzq +KOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkPJXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdV +xrsStZf0X4OFunHB2WyBEXYKCrC/gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEP +NXubrjlpC2JgQCA2j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+r +GNm65ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUBo2M3IUxE +xJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS/jQ6fbjpKdx2qcgw+BRx +gMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2zGp1iro2C6pSe3VkQw63d4k3jMdXH7Ojy +sP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTEW9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmOD +BCEIZ43ygknQW/2xzQ+DhNQ+IIX3Sj0rnP0qCglN6oH4EZw= +-----END CERTIFICATE----- + +certSIGN ROOT CA +================ +-----BEGIN CERTIFICATE----- +MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYTAlJPMREwDwYD +VQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTAeFw0wNjA3MDQxNzIwMDRa +Fw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UE +CxMQY2VydFNJR04gUk9PVCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7I +JUqOtdu0KBuqV5Do0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHH +rfAQUySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5dRdY4zTW2 +ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQOA7+j0xbm0bqQfWwCHTD +0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwvJoIQ4uNllAoEwF73XVv4EOLQunpL+943 +AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B +Af8EBAMCAcYwHQYDVR0OBBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IB +AQA+0hyJLjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecYMnQ8 +SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ44gx+FkagQnIl6Z0 +x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6IJd1hJyMctTEHBDa0GpC9oHRxUIlt +vBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNwi/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7Nz +TogVZ96edhBiIL5VaZVDADlN9u6wWk5JRFRYX0KD +-----END CERTIFICATE----- + +GeoTrust Primary Certification Authority - G3 +============================================= +-----BEGIN CERTIFICATE----- +MIID/jCCAuagAwIBAgIQFaxulBmyeUtB9iepwxgPHzANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UE +BhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChjKSAyMDA4IEdlb1RydXN0 +IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2MDQGA1UEAxMtR2VvVHJ1c3QgUHJpbWFy +eSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTA4MDQwMjAwMDAwMFoXDTM3MTIwMTIz +NTk1OVowgZgxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTkwNwYDVQQLEzAo +YykgMjAwOCBHZW9UcnVzdCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxNjA0BgNVBAMT +LUdlb1RydXN0IFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzCCASIwDQYJKoZI +hvcNAQEBBQADggEPADCCAQoCggEBANziXmJYHTNXOTIz+uvLh4yn1ErdBojqZI4xmKU4kB6Yzy5j +K/BGvESyiaHAKAxJcCGVn2TAppMSAmUmhsalifD614SgcK9PGpc/BkTVyetyEH3kMSj7HGHmKAdE +c5IiaacDiGydY8hS2pgn5whMcD60yRLBxWeDXTPzAxHsatBT4tG6NmCUgLthY2xbF37fQJQeqw3C +IShwiP/WJmxsYAQlTlV+fe+/lEjetx3dcI0FX4ilm/LC7urRQEFtYjgdVgbFA0dRIBn8exALDmKu +dlW/X3e+PkkBUz2YJQN2JFodtNuJ6nnltrM7P7pMKEF/BqxqjsHQ9gUdfeZChuOl1UcCAwEAAaNC +MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMR5yo6hTgMdHNxr +2zFblD4/MH8tMA0GCSqGSIb3DQEBCwUAA4IBAQAtxRPPVoB7eni9n64smefv2t+UXglpp+duaIy9 +cr5HqQ6XErhK8WTTOd8lNNTBzU6B8A8ExCSzNJbGpqow32hhc9f5joWJ7w5elShKKiePEI4ufIbE +Ap7aDHdlDkQNkv39sxY2+hENHYwOB4lqKVb3cvTdFZx3NWZXqxNT2I7BQMXXExZacse3aQHEerGD +AWh9jUGhlBjBJVz88P6DAod8DQ3PLghcSkANPuyBYeYk28rgDi0Hsj5W3I31QYUHSJsMC8tJP33s +t/3LjWeJGqvtux6jAAgIFyqCXDFdRootD4abdNlF+9RAsXqqaC2Gspki4cErx5z481+oghLrGREt +-----END CERTIFICATE----- + +thawte Primary Root CA - G2 +=========================== +-----BEGIN CERTIFICATE----- +MIICiDCCAg2gAwIBAgIQNfwmXNmET8k9Jj1Xm67XVjAKBggqhkjOPQQDAzCBhDELMAkGA1UEBhMC +VVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjE4MDYGA1UECxMvKGMpIDIwMDcgdGhhd3RlLCBJbmMu +IC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxJDAiBgNVBAMTG3RoYXd0ZSBQcmltYXJ5IFJvb3Qg +Q0EgLSBHMjAeFw0wNzExMDUwMDAwMDBaFw0zODAxMTgyMzU5NTlaMIGEMQswCQYDVQQGEwJVUzEV +MBMGA1UEChMMdGhhd3RlLCBJbmMuMTgwNgYDVQQLEy8oYykgMjAwNyB0aGF3dGUsIEluYy4gLSBG +b3IgYXV0aG9yaXplZCB1c2Ugb25seTEkMCIGA1UEAxMbdGhhd3RlIFByaW1hcnkgUm9vdCBDQSAt +IEcyMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEotWcgnuVnfFSeIf+iha/BebfowJPDQfGAFG6DAJS +LSKkQjnE/o/qycG+1E3/n3qe4rF8mq2nhglzh9HnmuN6papu+7qzcMBniKI11KOasf2twu8x+qi5 +8/sIxpHR+ymVo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU +mtgAMADna3+FGO6Lts6KDPgR4bswCgYIKoZIzj0EAwMDaQAwZgIxAN344FdHW6fmCsO99YCKlzUN +G4k8VIZ3KMqh9HneteY4sPBlcIx/AlTCv//YoT7ZzwIxAMSNlPzcU9LcnXgWHxUzI1NS41oxXZ3K +rr0TKUQNJ1uo52icEvdYPy5yAlejj6EULg== +-----END CERTIFICATE----- + +thawte Primary Root CA - G3 +=========================== +-----BEGIN CERTIFICATE----- +MIIEKjCCAxKgAwIBAgIQYAGXt0an6rS0mtZLL/eQ+zANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UE +BhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2 +aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIwMDggdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhv +cml6ZWQgdXNlIG9ubHkxJDAiBgNVBAMTG3RoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EgLSBHMzAeFw0w +ODA0MDIwMDAwMDBaFw0zNzEyMDEyMzU5NTlaMIGuMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhh +d3RlLCBJbmMuMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMTgwNgYD +VQQLEy8oYykgMjAwOCB0aGF3dGUsIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEkMCIG +A1UEAxMbdGhhd3RlIFByaW1hcnkgUm9vdCBDQSAtIEczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEAsr8nLPvb2FvdeHsbnndmgcs+vHyu86YnmjSjaDFxODNi5PNxZnmxqWWjpYvVj2At +P0LMqmsywCPLLEHd5N/8YZzic7IilRFDGF/Eth9XbAoFWCLINkw6fKXRz4aviKdEAhN0cXMKQlkC ++BsUa0Lfb1+6a4KinVvnSr0eAXLbS3ToO39/fR8EtCab4LRarEc9VbjXsCZSKAExQGbY2SS99irY +7CFJXJv2eul/VTV+lmuNk5Mny5K76qxAwJ/C+IDPXfRa3M50hqY+bAtTyr2SzhkGcuYMXDhpxwTW +vGzOW/b3aJzcJRVIiKHpqfiYnODz1TEoYRFsZ5aNOZnLwkUkOQIDAQABo0IwQDAPBgNVHRMBAf8E +BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUrWyqlGCc7eT/+j4KdCtjA/e2Wb8wDQYJ +KoZIhvcNAQELBQADggEBABpA2JVlrAmSicY59BDlqQ5mU1143vokkbvnRFHfxhY0Cu9qRFHqKweK +A3rD6z8KLFIWoCtDuSWQP3CpMyVtRRooOyfPqsMpQhvfO0zAMzRbQYi/aytlryjvsvXDqmbOe1bu +t8jLZ8HJnBoYuMTDSQPxYA5QzUbF83d597YV4Djbxy8ooAw/dyZ02SUS2jHaGh7cKUGRIjxpp7sC +8rZcJwOJ9Abqm+RyguOhCcHpABnTPtRwa7pxpqpYrvS76Wy274fMm7v/OeZWYdMKp8RcTGB7BXcm +er/YB1IsYvdwY9k5vG8cwnncdimvzsUsZAReiDZuMdRAGmI0Nj81Aa6sY6A= +-----END CERTIFICATE----- + +GeoTrust Primary Certification Authority - G2 +============================================= +-----BEGIN CERTIFICATE----- +MIICrjCCAjWgAwIBAgIQPLL0SAoA4v7rJDteYD7DazAKBggqhkjOPQQDAzCBmDELMAkGA1UEBhMC +VVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChjKSAyMDA3IEdlb1RydXN0IElu +Yy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2MDQGA1UEAxMtR2VvVHJ1c3QgUHJpbWFyeSBD +ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEcyMB4XDTA3MTEwNTAwMDAwMFoXDTM4MDExODIzNTk1 +OVowgZgxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTkwNwYDVQQLEzAoYykg +MjAwNyBHZW9UcnVzdCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxNjA0BgNVBAMTLUdl +b1RydXN0IFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjB2MBAGByqGSM49AgEG +BSuBBAAiA2IABBWx6P0DFUPlrOuHNxFi79KDNlJ9RVcLSo17VDs6bl8VAsBQps8lL33KSLjHUGMc +KiEIfJo22Av+0SbFWDEwKCXzXV2juLaltJLtbCyf691DiaI8S0iRHVDsJt/WYC69IaNCMEAwDwYD +VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBVfNVdRVfslsq0DafwBo/q+ +EVXVMAoGCCqGSM49BAMDA2cAMGQCMGSWWaboCd6LuvpaiIjwH5HTRqjySkwCY/tsXzjbLkGTqQ7m +ndwxHLKgpxgceeHHNgIwOlavmnRs9vuD4DPTCF+hnMJbn0bWtsuRBmOiBuczrD6ogRLQy7rQkgu2 +npaqBA+K +-----END CERTIFICATE----- + +VeriSign Universal Root Certification Authority +=============================================== +-----BEGIN CERTIFICATE----- +MIIEuTCCA6GgAwIBAgIQQBrEZCGzEyEDDrvkEhrFHTANBgkqhkiG9w0BAQsFADCBvTELMAkGA1UE +BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO +ZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwOCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk +IHVzZSBvbmx5MTgwNgYDVQQDEy9WZXJpU2lnbiBVbml2ZXJzYWwgUm9vdCBDZXJ0aWZpY2F0aW9u +IEF1dGhvcml0eTAeFw0wODA0MDIwMDAwMDBaFw0zNzEyMDEyMzU5NTlaMIG9MQswCQYDVQQGEwJV +UzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdv +cmsxOjA4BgNVBAsTMShjKSAyMDA4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNl +IG9ubHkxODA2BgNVBAMTL1ZlcmlTaWduIFVuaXZlcnNhbCBSb290IENlcnRpZmljYXRpb24gQXV0 +aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2E3XrEBNNti1xWb/1hajCMj +1mCOkdeQmIN65lgZOIzF9uVkhbSicfvtvbnazU0AtMgtc6XHaXGVHzk8skQHnOgO+k1KxCHfKWGP +MiJhgsWHH26MfF8WIFFE0XBPV+rjHOPMee5Y2A7Cs0WTwCznmhcrewA3ekEzeOEz4vMQGn+HLL72 +9fdC4uW/h2KJXwBL38Xd5HVEMkE6HnFuacsLdUYI0crSK5XQz/u5QGtkjFdN/BMReYTtXlT2NJ8I +AfMQJQYXStrxHXpma5hgZqTZ79IugvHw7wnqRMkVauIDbjPTrJ9VAMf2CGqUuV/c4DPxhGD5WycR +tPwW8rtWaoAljQIDAQABo4GyMIGvMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMG0G +CCsGAQUFBwEMBGEwX6FdoFswWTBXMFUWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFI/l0xqGrI2O +a8PPgGrUSBgsexkuMCUWI2h0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92c2xvZ28uZ2lmMB0GA1Ud +DgQWBBS2d/ppSEefUxLVwuoHMnYH0ZcHGTANBgkqhkiG9w0BAQsFAAOCAQEASvj4sAPmLGd75JR3 +Y8xuTPl9Dg3cyLk1uXBPY/ok+myDjEedO2Pzmvl2MpWRsXe8rJq+seQxIcaBlVZaDrHC1LGmWazx +Y8u4TB1ZkErvkBYoH1quEPuBUDgMbMzxPcP1Y+Oz4yHJJDnp/RVmRvQbEdBNc6N9Rvk97ahfYtTx +P/jgdFcrGJ2BtMQo2pSXpXDrrB2+BxHw1dvd5Yzw1TKwg+ZX4o+/vqGqvz0dtdQ46tewXDpPaj+P +wGZsY6rp2aQW9IHRlRQOfc2VNNnSj3BzgXucfr2YYdhFh5iQxeuGMMY1v/D/w1WIg0vvBZIGcfK4 +mJO37M2CYfE45k+XmCpajQ== +-----END CERTIFICATE----- + +VeriSign Class 3 Public Primary Certification Authority - G4 +============================================================ +-----BEGIN CERTIFICATE----- +MIIDhDCCAwqgAwIBAgIQL4D+I4wOIg9IZxIokYesszAKBggqhkjOPQQDAzCByjELMAkGA1UEBhMC +VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 +b3JrMTowOAYDVQQLEzEoYykgMjAwNyBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz +ZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmlj +YXRpb24gQXV0aG9yaXR5IC0gRzQwHhcNMDcxMTA1MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCByjEL +MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBU +cnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNyBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRo +b3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5 +IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASnVnp8 +Utpkmw4tXNherJI9/gHmGUo9FANL+mAnINmDiWn6VMaaGF5VKmTeBvaNSjutEDxlPZCIBIngMGGz +rl0Bp3vefLK+ymVhAIau2o970ImtTR1ZmkGxvEeA3J5iw/mjgbIwga8wDwYDVR0TAQH/BAUwAwEB +/zAOBgNVHQ8BAf8EBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEw +HzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24u +Y29tL3ZzbG9nby5naWYwHQYDVR0OBBYEFLMWkf3upm7ktS5Jj4d4gYDs5bG1MAoGCCqGSM49BAMD +A2gAMGUCMGYhDBgmYFo4e1ZC4Kf8NoRRkSAsdk1DPcQdhCPQrNZ8NQbOzWm9kA3bbEhCHQ6qQgIx +AJw9SDkjOVgaFRJZap7v1VmyHVIsmXHNxynfGyphe3HR3vPA5Q06Sqotp9iGKt0uEA== +-----END CERTIFICATE----- + +NetLock Arany (Class Gold) Főtanúsítvány +======================================== +-----BEGIN CERTIFICATE----- +MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQGEwJIVTERMA8G +A1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3MDUGA1UECwwuVGFuw7pzw610 +dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNlcnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBB +cmFueSAoQ2xhc3MgR29sZCkgRsWRdGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgx +MjA2MTUwODIxWjCBpzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxO +ZXRMb2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlmaWNhdGlv +biBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNzIEdvbGQpIEbFkXRhbsO6 +c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRec75LbRTDofTjl5Bu +0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrTlF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw +/HpYzY6b7cNGbIRwXdrzAZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAk +H3B5r9s5VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRGILdw +fzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2BJtr+UBdADTHLpl1 +neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAGAQH/AgEEMA4GA1UdDwEB/wQEAwIB +BjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2MU9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwW +qZw8UQCgwBEIBaeZ5m8BiFRhbvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTta +YtOUZcTh5m2C+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC +bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2FuLjbvrW5Kfna +NwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2XjG4Kvte9nHfRCaexOYNkbQu +dZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E= +-----END CERTIFICATE----- + +Hongkong Post Root CA 1 +======================= +-----BEGIN CERTIFICATE----- +MIIDMDCCAhigAwIBAgICA+gwDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoT +DUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxMB4XDTAzMDUx +NTA1MTMxNFoXDTIzMDUxNTA0NTIyOVowRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25n +IFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEArP84tulmAknjorThkPlAj3n54r15/gK97iSSHSL22oVyaf7XPwnU3ZG1 +ApzQjVrhVcNQhrkpJsLj2aDxaQMoIIBFIi1WpztUlVYiWR8o3x8gPW2iNr4joLFutbEnPzlTCeqr +auh0ssJlXI6/fMN4hM2eFvz1Lk8gKgifd/PFHsSaUmYeSF7jEAaPIpjhZY4bXSNmO7ilMlHIhqqh +qZ5/dpTCpmy3QfDVyAY45tQM4vM7TG1QjMSDJ8EThFk9nnV0ttgCXjqQesBCNnLsak3c78QA3xMY +V18meMjWCnl3v/evt3a5pQuEF10Q6m/hq5URX208o1xNg1vysxmKgIsLhwIDAQABoyYwJDASBgNV +HRMBAf8ECDAGAQH/AgEDMA4GA1UdDwEB/wQEAwIBxjANBgkqhkiG9w0BAQUFAAOCAQEADkbVPK7i +h9legYsCmEEIjEy82tvuJxuC52pF7BaLT4Wg87JwvVqWuspube5Gi27nKi6Wsxkz67SfqLI37pio +l7Yutmcn1KZJ/RyTZXaeQi/cImyaT/JaFTmxcdcrUehtHJjA2Sr0oYJ71clBoiMBdDhViw+5Lmei +IAQ32pwL0xch4I+XeTRvhEgCIDMb5jREn5Fw9IBehEPCKdJsEhTkYY2sEJCehFC78JZvRZ+K88ps +T/oROhUVRsPNH4NbLUES7VBnQRM9IauUiqpOfMGx+6fWtScvl6tu4B3i0RwsH0Ti/L6RoZz71ilT +c4afU9hDDl3WY4JxHYB0yvbiAmvZWg== +-----END CERTIFICATE----- + +SecureSign RootCA11 +=================== +-----BEGIN CERTIFICATE----- +MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJKUDErMCkGA1UEChMi +SmFwYW4gQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcywgSW5jLjEcMBoGA1UEAxMTU2VjdXJlU2lnbiBS +b290Q0ExMTAeFw0wOTA0MDgwNDU2NDdaFw0yOTA0MDgwNDU2NDdaMFgxCzAJBgNVBAYTAkpQMSsw +KQYDVQQKEyJKYXBhbiBDZXJ0aWZpY2F0aW9uIFNlcnZpY2VzLCBJbmMuMRwwGgYDVQQDExNTZWN1 +cmVTaWduIFJvb3RDQTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/XeqpRyQBTvL +TJszi1oURaTnkBbR31fSIRCkF/3frNYfp+TbfPfs37gD2pRY/V1yfIw/XwFndBWW4wI8h9uuywGO +wvNmxoVF9ALGOrVisq/6nL+k5tSAMJjzDbaTj6nU2DbysPyKyiyhFTOVMdrAG/LuYpmGYz+/3ZMq +g6h2uRMft85OQoWPIucuGvKVCbIFtUROd6EgvanyTgp9UK31BQ1FT0Zx/Sg+U/sE2C3XZR1KG/rP +O7AxmjVuyIsG0wCR8pQIZUyxNAYAeoni8McDWc/V1uinMrPmmECGxc0nEovMe863ETxiYAcjPitA +bpSACW22s293bzUIUPsCh8U+iQIDAQABo0IwQDAdBgNVHQ4EFgQUW/hNT7KlhtQ60vFjmqC+CfZX +t94wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAKCh +OBZmLqdWHyGcBvod7bkixTgm2E5P7KN/ed5GIaGHd48HCJqypMWvDzKYC3xmKbabfSVSSUOrTC4r +bnpwrxYO4wJs+0LmGJ1F2FXI6Dvd5+H0LgscNFxsWEr7jIhQX5Ucv+2rIrVls4W6ng+4reV6G4pQ +Oh29Dbx7VFALuUKvVaAYga1lme++5Jy/xIWrQbJUb9wlze144o4MjQlJ3WN7WmmWAiGovVJZ6X01 +y8hSyn+B/tlr0/cR7SXf+Of5pPpyl4RTDaXQMhhRdlkUbA/r7F+AjHVDg8OFmP9Mni0N5HeDk061 +lgeLKBObjBmNQSdJQO7e5iNEOdyhIta6A/I= +-----END CERTIFICATE----- + +Microsec e-Szigno Root CA 2009 +============================== +-----BEGIN CERTIFICATE----- +MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYDVQQGEwJIVTER +MA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jv +c2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o +dTAeFw0wOTA2MTYxMTMwMThaFw0yOTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UE +BwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUt +U3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvPkd6mJviZpWNwrZuuyjNA +fW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tccbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG +0IMZfcChEhyVbUr02MelTTMuhTlAdX4UfIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKA +pxn1ntxVUwOXewdI/5n7N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm +1HxdrtbCxkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1+rUC +AwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTLD8bf +QkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAbBgNVHREE +FDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqGSIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0o +lZMEyL/azXm4Q5DwpL7v8u8hmLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfX +I/OMn74dseGkddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775 +tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c2Pm2G2JwCz02 +yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5tHMN1Rq41Bab2XD0h7lbwyYIi +LXpUq3DDfSJlgnCW +-----END CERTIFICATE----- + +GlobalSign Root CA - R3 +======================= +-----BEGIN CERTIFICATE----- +MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4GA1UECxMXR2xv +YmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2Jh +bFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxT +aWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2ln +bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWt +iHL8RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsTgHeMCOFJ +0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmmKPZpO/bLyCiR5Z2KYVc3 +rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zdQQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjl +OCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZXriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2 +xmmFghcCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE +FI/wS3+oLkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZURUm7 +lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMpjjM5RcOO5LlXbKr8 +EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK6fBdRoyV3XpYKBovHd7NADdBj+1E +bddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQXmcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18 +YIvDQVETI53O9zJrlAGomecsMx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7r +kpeDMdmztcpHWD9f +-----END CERTIFICATE----- + +Autoridad de Certificacion Firmaprofesional CIF A62634068 +========================================================= +-----BEGIN CERTIFICATE----- +MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UEBhMCRVMxQjBA +BgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1hcHJvZmVzaW9uYWwgQ0lGIEE2 +MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEyMzEwODM4MTVaMFExCzAJBgNVBAYTAkVTMUIw +QAYDVQQDDDlBdXRvcmlkYWQgZGUgQ2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBB +NjI2MzQwNjgwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDD +Utd9thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQMcas9UX4P +B99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefGL9ItWY16Ck6WaVICqjaY +7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15iNA9wBj4gGFrO93IbJWyTdBSTo3OxDqqH +ECNZXyAFGUftaI6SEspd/NYrspI8IM/hX68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyI +plD9amML9ZMWGxmPsu2bm8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctX +MbScyJCyZ/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirjaEbsX +LZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/TKI8xWVvTyQKmtFLK +bpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF6NkBiDkal4ZkQdU7hwxu+g/GvUgU +vzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVhOSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMBIGA1Ud +EwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRlzeurNR4APn7VdMActHNH +DhpkLzCBpgYDVR0gBIGeMIGbMIGYBgRVHSAAMIGPMC8GCCsGAQUFBwIBFiNodHRwOi8vd3d3LmZp +cm1hcHJvZmVzaW9uYWwuY29tL2NwczBcBggrBgEFBQcCAjBQHk4AUABhAHMAZQBvACAAZABlACAA +bABhACAAQgBvAG4AYQBuAG8AdgBhACAANAA3ACAAQgBhAHIAYwBlAGwAbwBuAGEAIAAwADgAMAAx +ADcwDQYJKoZIhvcNAQEFBQADggIBABd9oPm03cXF661LJLWhAqvdpYhKsg9VSytXjDvlMd3+xDLx +51tkljYyGOylMnfX40S2wBEqgLk9am58m9Ot/MPWo+ZkKXzR4Tgegiv/J2Wv+xYVxC5xhOW1//qk +R71kMrv2JYSiJ0L1ILDCExARzRAVukKQKtJE4ZYm6zFIEv0q2skGz3QeqUvVhyj5eTSSPi5E6PaP +T481PyWzOdxjKpBrIF/EUhJOlywqrJ2X3kjyo2bbwtKDlaZmp54lD+kLM5FlClrD2VQS3a/DTg4f +Jl4N3LON7NWBcN7STyQF82xO9UxJZo3R/9ILJUFI/lGExkKvgATP0H5kSeTy36LssUzAKh3ntLFl +osS88Zj0qnAHY7S42jtM+kAiMFsRpvAFDsYCA0irhpuF3dvd6qJ2gHN99ZwExEWN57kci57q13XR +crHedUTnQn3iV2t93Jm8PYMo6oCTjcVMZcFwgbg4/EMxsvYDNEeyrPsiBsse3RdHHF9mudMaotoR +saS8I8nkvof/uZS2+F0gStRf571oe2XyFR7SOqkt6dhrJKyXWERHrVkY8SFlcN7ONGCoQPHzPKTD +KCOM/iczQ0CgFzzr6juwcqajuUpLXhZI9LK8yIySxZ2frHI2vDSANGupi5LAuBft7HZT9SQBjLMi +6Et8Vcad+qMUu2WFbm5PEn4KPJ2V +-----END CERTIFICATE----- + +Izenpe.com +========== +-----BEGIN CERTIFICATE----- +MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4MQswCQYDVQQG +EwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6ZW5wZS5jb20wHhcNMDcxMjEz +MTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMu +QS4xEzARBgNVBAMMCkl6ZW5wZS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ +03rKDx6sp4boFmVqscIbRTJxldn+EFvMr+eleQGPicPK8lVx93e+d5TzcqQsRNiekpsUOqHnJJAK +ClaOxdgmlOHZSOEtPtoKct2jmRXagaKH9HtuJneJWK3W6wyyQXpzbm3benhB6QiIEn6HLmYRY2xU ++zydcsC8Lv/Ct90NduM61/e0aL6i9eOBbsFGb12N4E3GVFWJGjMxCrFXuaOKmMPsOzTFlUFpfnXC +PCDFYbpRR6AgkJOhkEvzTnyFRVSa0QUmQbC1TR0zvsQDyCV8wXDbO/QJLVQnSKwv4cSsPsjLkkxT +OTcj7NMB+eAJRE1NZMDhDVqHIrytG6P+JrUV86f8hBnp7KGItERphIPzidF0BqnMC9bC3ieFUCbK +F7jJeodWLBoBHmy+E60QrLUk9TiRodZL2vG70t5HtfG8gfZZa88ZU+mNFctKy6lvROUbQc/hhqfK +0GqfvEyNBjNaooXlkDWgYlwWTvDjovoDGrQscbNYLN57C9saD+veIR8GdwYDsMnvmfzAuU8Lhij+ +0rnq49qlw0dpEuDb8PYZi+17cNcC1u2HGCgsBCRMd+RIihrGO5rUD8r6ddIBQFqNeb+Lz0vPqhbB +leStTIo+F5HUsWLlguWABKQDfo2/2n+iD5dPDNMN+9fR5XJ+HMh3/1uaD7euBUbl8agW7EekFwID +AQABo4H2MIHzMIGwBgNVHREEgagwgaWBD2luZm9AaXplbnBlLmNvbaSBkTCBjjFHMEUGA1UECgw+ +SVpFTlBFIFMuQS4gLSBDSUYgQTAxMzM3MjYwLVJNZXJjLlZpdG9yaWEtR2FzdGVpeiBUMTA1NSBG +NjIgUzgxQzBBBgNVBAkMOkF2ZGEgZGVsIE1lZGl0ZXJyYW5lbyBFdG9yYmlkZWEgMTQgLSAwMTAx +MCBWaXRvcmlhLUdhc3RlaXowDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0O +BBYEFB0cZQ6o8iV7tJHP5LGx5r1VdGwFMA0GCSqGSIb3DQEBCwUAA4ICAQB4pgwWSp9MiDrAyw6l +Fn2fuUhfGI8NYjb2zRlrrKvV9pF9rnHzP7MOeIWblaQnIUdCSnxIOvVFfLMMjlF4rJUT3sb9fbga +kEyrkgPH7UIBzg/YsfqikuFgba56awmqxinuaElnMIAkejEWOVt+8Rwu3WwJrfIxwYJOubv5vr8q +hT/AQKM6WfxZSzwoJNu0FXWuDYi6LnPAvViH5ULy617uHjAimcs30cQhbIHsvm0m5hzkQiCeR7Cs +g1lwLDXWrzY0tM07+DKo7+N4ifuNRSzanLh+QBxh5z6ikixL8s36mLYp//Pye6kfLqCTVyvehQP5 +aTfLnnhqBbTFMXiJ7HqnheG5ezzevh55hM6fcA5ZwjUukCox2eRFekGkLhObNA5me0mrZJfQRsN5 +nXJQY6aYWwa9SG3YOYNw6DXwBdGqvOPbyALqfP2C2sJbUjWumDqtujWTI6cfSN01RpiyEGjkpTHC +ClguGYEQyVB1/OpaFs4R1+7vUIgtYf8/QnMFlEPVjjxOAToZpR9GTnfQXeWBIiGH/pR9hNiTrdZo +Q0iy2+tzJOeRf1SktoA+naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1Z +WrOZyGlsQyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw== +-----END CERTIFICATE----- + +Chambers of Commerce Root - 2008 +================================ +-----BEGIN CERTIFICATE----- +MIIHTzCCBTegAwIBAgIJAKPaQn6ksa7aMA0GCSqGSIb3DQEBBQUAMIGuMQswCQYDVQQGEwJFVTFD +MEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNv +bS9hZGRyZXNzKTESMBAGA1UEBRMJQTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMu +QS4xKTAnBgNVBAMTIENoYW1iZXJzIG9mIENvbW1lcmNlIFJvb3QgLSAyMDA4MB4XDTA4MDgwMTEy +Mjk1MFoXDTM4MDczMTEyMjk1MFowga4xCzAJBgNVBAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNl +ZSBjdXJyZW50IGFkZHJlc3MgYXQgd3d3LmNhbWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQF +EwlBODI3NDMyODcxGzAZBgNVBAoTEkFDIENhbWVyZmlybWEgUy5BLjEpMCcGA1UEAxMgQ2hhbWJl +cnMgb2YgQ29tbWVyY2UgUm9vdCAtIDIwMDgwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC +AQCvAMtwNyuAWko6bHiUfaN/Gh/2NdW928sNRHI+JrKQUrpjOyhYb6WzbZSm891kDFX29ufyIiKA +XuFixrYp4YFs8r/lfTJqVKAyGVn+H4vXPWCGhSRv4xGzdz4gljUha7MI2XAuZPeEklPWDrCQiorj +h40G072QDuKZoRuGDtqaCrsLYVAGUvGef3bsyw/QHg3PmTA9HMRFEFis1tPo1+XqxQEHd9ZR5gN/ +ikilTWh1uem8nk4ZcfUyS5xtYBkL+8ydddy/Js2Pk3g5eXNeJQ7KXOt3EgfLZEFHcpOrUMPrCXZk +NNI5t3YRCQ12RcSprj1qr7V9ZS+UWBDsXHyvfuK2GNnQm05aSd+pZgvMPMZ4fKecHePOjlO+Bd5g +D2vlGts/4+EhySnB8esHnFIbAURRPHsl18TlUlRdJQfKFiC4reRB7noI/plvg6aRArBsNlVq5331 +lubKgdaX8ZSD6e2wsWsSaR6s+12pxZjptFtYer49okQ6Y1nUCyXeG0+95QGezdIp1Z8XGQpvvwyQ +0wlf2eOKNcx5Wk0ZN5K3xMGtr/R5JJqyAQuxr1yW84Ay+1w9mPGgP0revq+ULtlVmhduYJ1jbLhj +ya6BXBg14JC7vjxPNyK5fuvPnnchpj04gftI2jE9K+OJ9dC1vX7gUMQSibMjmhAxhduub+84Mxh2 +EQIDAQABo4IBbDCCAWgwEgYDVR0TAQH/BAgwBgEB/wIBDDAdBgNVHQ4EFgQU+SSsD7K1+HnA+mCI +G8TZTQKeFxkwgeMGA1UdIwSB2zCB2IAU+SSsD7K1+HnA+mCIG8TZTQKeFxmhgbSkgbEwga4xCzAJ +BgNVBAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNlZSBjdXJyZW50IGFkZHJlc3MgYXQgd3d3LmNh +bWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQFEwlBODI3NDMyODcxGzAZBgNVBAoTEkFDIENh +bWVyZmlybWEgUy5BLjEpMCcGA1UEAxMgQ2hhbWJlcnMgb2YgQ29tbWVyY2UgUm9vdCAtIDIwMDiC +CQCj2kJ+pLGu2jAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUH +AgEWHGh0dHA6Ly9wb2xpY3kuY2FtZXJmaXJtYS5jb20wDQYJKoZIhvcNAQEFBQADggIBAJASryI1 +wqM58C7e6bXpeHxIvj99RZJe6dqxGfwWPJ+0W2aeaufDuV2I6A+tzyMP3iU6XsxPpcG1Lawk0lgH +3qLPaYRgM+gQDROpI9CF5Y57pp49chNyM/WqfcZjHwj0/gF/JM8rLFQJ3uIrbZLGOU8W6jx+ekbU +RWpGqOt1glanq6B8aBMz9p0w8G8nOSQjKpD9kCk18pPfNKXG9/jvjA9iSnyu0/VU+I22mlaHFoI6 +M6taIgj3grrqLuBHmrS1RaMFO9ncLkVAO+rcf+g769HsJtg1pDDFOqxXnrN2pSB7+R5KBWIBpih1 +YJeSDW4+TTdDDZIVnBgizVGZoCkaPF+KMjNbMMeJL0eYD6MDxvbxrN8y8NmBGuScvfaAFPDRLLmF +9dijscilIeUcE5fuDr3fKanvNFNb0+RqE4QGtjICxFKuItLcsiFCGtpA8CnJ7AoMXOLQusxI0zcK +zBIKinmwPQN/aUv0NCB9szTqjktk9T79syNnFQ0EuPAtwQlRPLJsFfClI9eDdOTlLsn+mCdCxqvG +nrDQWzilm1DefhiYtUU79nm06PcaewaD+9CL2rvHvRirCG88gGtAPxkZumWK5r7VXNM21+9AUiRg +OGcEMeyP84LG3rlV8zsxkVrctQgVrXYlCg17LofiDKYGvCYQbTed7N14jHyAxfDZd0jQ +-----END CERTIFICATE----- + +Global Chambersign Root - 2008 +============================== +-----BEGIN CERTIFICATE----- +MIIHSTCCBTGgAwIBAgIJAMnN0+nVfSPOMA0GCSqGSIb3DQEBBQUAMIGsMQswCQYDVQQGEwJFVTFD +MEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNv +bS9hZGRyZXNzKTESMBAGA1UEBRMJQTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMu +QS4xJzAlBgNVBAMTHkdsb2JhbCBDaGFtYmVyc2lnbiBSb290IC0gMjAwODAeFw0wODA4MDExMjMx +NDBaFw0zODA3MzExMjMxNDBaMIGsMQswCQYDVQQGEwJFVTFDMEEGA1UEBxM6TWFkcmlkIChzZWUg +Y3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNvbS9hZGRyZXNzKTESMBAGA1UEBRMJ +QTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMuQS4xJzAlBgNVBAMTHkdsb2JhbCBD +aGFtYmVyc2lnbiBSb290IC0gMjAwODCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDf +VtPkOpt2RbQT2//BthmLN0EYlVJH6xedKYiONWwGMi5HYvNJBL99RDaxccy9Wglz1dmFRP+RVyXf +XjaOcNFccUMd2drvXNL7G706tcuto8xEpw2uIRU/uXpbknXYpBI4iRmKt4DS4jJvVpyR1ogQC7N0 +ZJJ0YPP2zxhPYLIj0Mc7zmFLmY/CDNBAspjcDahOo7kKrmCgrUVSY7pmvWjg+b4aqIG7HkF4ddPB +/gBVsIdU6CeQNR1MM62X/JcumIS/LMmjv9GYERTtY/jKmIhYF5ntRQOXfjyGHoiMvvKRhI9lNNgA +TH23MRdaKXoKGCQwoze1eqkBfSbW+Q6OWfH9GzO1KTsXO0G2Id3UwD2ln58fQ1DJu7xsepeY7s2M +H/ucUa6LcL0nn3HAa6x9kGbo1106DbDVwo3VyJ2dwW3Q0L9R5OP4wzg2rtandeavhENdk5IMagfe +Ox2YItaswTXbo6Al/3K1dh3ebeksZixShNBFks4c5eUzHdwHU1SjqoI7mjcv3N2gZOnm3b2u/GSF +HTynyQbehP9r6GsaPMWis0L7iwk+XwhSx2LE1AVxv8Rk5Pihg+g+EpuoHtQ2TS9x9o0o9oOpE9Jh +wZG7SMA0j0GMS0zbaRL/UJScIINZc+18ofLx/d33SdNDWKBWY8o9PeU1VlnpDsogzCtLkykPAgMB +AAGjggFqMIIBZjASBgNVHRMBAf8ECDAGAQH/AgEMMB0GA1UdDgQWBBS5CcqcHtvTbDprru1U8VuT +BjUuXjCB4QYDVR0jBIHZMIHWgBS5CcqcHtvTbDprru1U8VuTBjUuXqGBsqSBrzCBrDELMAkGA1UE +BhMCRVUxQzBBBgNVBAcTOk1hZHJpZCAoc2VlIGN1cnJlbnQgYWRkcmVzcyBhdCB3d3cuY2FtZXJm +aXJtYS5jb20vYWRkcmVzcykxEjAQBgNVBAUTCUE4Mjc0MzI4NzEbMBkGA1UEChMSQUMgQ2FtZXJm +aXJtYSBTLkEuMScwJQYDVQQDEx5HbG9iYWwgQ2hhbWJlcnNpZ24gUm9vdCAtIDIwMDiCCQDJzdPp +1X0jzjAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0 +dHA6Ly9wb2xpY3kuY2FtZXJmaXJtYS5jb20wDQYJKoZIhvcNAQEFBQADggIBAICIf3DekijZBZRG +/5BXqfEv3xoNa/p8DhxJJHkn2EaqbylZUohwEurdPfWbU1Rv4WCiqAm57OtZfMY18dwY6fFn5a+6 +ReAJ3spED8IXDneRRXozX1+WLGiLwUePmJs9wOzL9dWCkoQ10b42OFZyMVtHLaoXpGNR6woBrX/s +dZ7LoR/xfxKxueRkf2fWIyr0uDldmOghp+G9PUIadJpwr2hsUF1Jz//7Dl3mLEfXgTpZALVza2Mg +9jFFCDkO9HB+QHBaP9BrQql0PSgvAm11cpUJjUhjxsYjV5KTXjXBjfkK9yydYhz2rXzdpjEetrHH +foUm+qRqtdpjMNHvkzeyZi99Bffnt0uYlDXA2TopwZ2yUDMdSqlapskD7+3056huirRXhOukP9Du +qqqHW2Pok+JrqNS4cnhrG+055F3Lm6qH1U9OAP7Zap88MQ8oAgF9mOinsKJknnn4SPIVqczmyETr +P3iZ8ntxPjzxmKfFGBI/5rsoM0LpRQp8bfKGeS/Fghl9CYl8slR2iK7ewfPM4W7bMdaTrpmg7yVq +c5iJWzouE4gev8CSlDQb4ye3ix5vQv/n6TebUB0tovkC7stYWDpxvGjjqsGvHCgfotwjZT+B6q6Z +09gwzxMNTxXJhLynSC34MCN32EZLeW32jO06f2ARePTpm67VVMB0gNELQp/B +-----END CERTIFICATE----- + +Go Daddy Root Certificate Authority - G2 +======================================== +-----BEGIN CERTIFICATE----- +MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT +B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMu +MTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5 +MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6 +b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8G +A1UEAxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZI +hvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKDE6bFIEMBO4Tx5oVJnyfq +9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD ++qK+ihVqf94Lw7YZFAXK6sOoBJQ7RnwyDfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutd +fMh8+7ArU6SSYmlRJQVhGkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMl +NAJWJwGRtDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEAAaNC +MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9 +BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmXWWcDYfF+OwYxdS2hII5PZYe096ac +vNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r +5N9ss4UXnT3ZJE95kTXWXwTrgIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYV +N8Gb5DKj7Tjo2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO +LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI4uJEvlz36hz1 +-----END CERTIFICATE----- + +Starfield Root Certificate Authority - G2 +========================================= +-----BEGIN CERTIFICATE----- +MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT +B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9s +b2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVsZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0 +eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAw +DgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQg +VGVjaG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZpY2F0ZSBB +dXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3twQP89o/8ArFv +W59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMgnLRJdzIpVv257IzdIvpy3Cdhl+72WoTs +bhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNk +N3mSwOxGXn/hbVNMYq/NHwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7Nf +ZTD4p7dNdloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0HZbU +JtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0GCSqGSIb3DQEBCwUAA4IBAQARWfol +TwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjUsHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx +4mcujJUDJi5DnUox9g61DLu34jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUw +F5okxBDgBPfg8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K +pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1mMpYjn0q7pBZ +c2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0 +-----END CERTIFICATE----- + +Starfield Services Root Certificate Authority - G2 +================================================== +-----BEGIN CERTIFICATE----- +MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMxEDAOBgNVBAgT +B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9s +b2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVsZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRl +IEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgZgxCzAJBgNV +BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxT +dGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2VydmljZXMg +Um9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC +AQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz/Lz58gE20pOsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX/2 +h/klQ4bnaRtSmpDhcePYLQ1Ob/bISdm28xpWriu2dBTrz/sm4xq6HZYuajtYlIlHVv8loJNwU4Pa +hHQUw2eeBGg6345AWh1KTs9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLP +LJGmpufehRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk6mFB +rMnUVN+HL8cisibMn1lUaJ/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaNCMEAwDwYDVR0TAQH/BAUw +AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJxfAN+qAdcwKziIorhtSpzyEZGDMA0GCSqG +SIb3DQEBCwUAA4IBAQBLNqaEd2ndOxmfZyMIbw5hyf2E3F/YNoHN2BtBLZ9g3ccaaNnRbobhiCPP +E95Dz+I0swSdHynVv/heyNXBve6SbzJ08pGCL72CQnqtKrcgfU28elUSwhXqvfdqlS5sdJ/PHLTy +xQGjhdByPq1zqwubdQxtRbeOlKyWN7Wg0I8VRw7j6IPdj/3vQQF3zCepYoUz8jcI73HPdwbeyBkd +iEDPfUYd/x7H4c7/I9vG+o1VTqkC50cRRj70/b17KSa7qWFiNyi2LSr2EIZkyXCn0q23KXB56jza +YyWf/Wi3MOxw+3WKt21gZ7IeyLnp2KhvAotnDU0mV3HaIPzBSlCNsSi6 +-----END CERTIFICATE----- + +AffirmTrust Commercial +====================== +-----BEGIN CERTIFICATE----- +MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCVVMxFDAS +BgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBDb21tZXJjaWFsMB4XDTEw +MDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmly +bVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBDb21tZXJjaWFsMIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEA9htPZwcroRX1BiLLHwGy43NFBkRJLLtJJRTWzsO3qyxPxkEylFf6Eqdb +DuKPHx6GGaeqtS25Xw2Kwq+FNXkyLbscYjfysVtKPcrNcV/pQr6U6Mje+SJIZMblq8Yrba0F8PrV +C8+a5fBQpIs7R6UjW3p6+DM/uO+Zl+MgwdYoic+U+7lF7eNAFxHUdPALMeIrJmqbTFeurCA+ukV6 +BfO9m2kVrn1OIGPENXY6BwLJN/3HR+7o8XYdcxXyl6S1yHp52UKqK39c/s4mT6NmgTWvRLpUHhww +MmWd5jyTXlBOeuM61G7MGvv50jeuJCqrVwMiKA1JdX+3KNp1v47j3A55MQIDAQABo0IwQDAdBgNV +HQ4EFgQUnZPGU4teyq8/nx4P5ZmVvCT2lI8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwDQYJKoZIhvcNAQELBQADggEBAFis9AQOzcAN/wr91LoWXym9e2iZWEnStB03TX8nfUYGXUPG +hi4+c7ImfU+TqbbEKpqrIZcUsd6M06uJFdhrJNTxFq7YpFzUf1GO7RgBsZNjvbz4YYCanrHOQnDi +qX0GJX0nof5v7LMeJNrjS1UaADs1tDvZ110w/YETifLCBivtZ8SOyUOyXGsViQK8YvxO8rUzqrJv +0wqiUOP2O+guRMLbZjipM1ZI8W0bM40NjD9gN53Tym1+NH4Nn3J2ixufcv1SNUFFApYvHLKac0kh +sUlHRUe072o0EclNmsxZt9YCnlpOZbWUrhvfKbAW8b8Angc6F2S1BLUjIZkKlTuXfO8= +-----END CERTIFICATE----- + +AffirmTrust Networking +====================== +-----BEGIN CERTIFICATE----- +MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UEBhMCVVMxFDAS +BgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBOZXR3b3JraW5nMB4XDTEw +MDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmly +bVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBOZXR3b3JraW5nMIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEAtITMMxcua5Rsa2FSoOujz3mUTOWUgJnLVWREZY9nZOIG41w3SfYvm4SE +Hi3yYJ0wTsyEheIszx6e/jarM3c1RNg1lho9Nuh6DtjVR6FqaYvZ/Ls6rnla1fTWcbuakCNrmreI +dIcMHl+5ni36q1Mr3Lt2PpNMCAiMHqIjHNRqrSK6mQEubWXLviRmVSRLQESxG9fhwoXA3hA/Pe24 +/PHxI1Pcv2WXb9n5QHGNfb2V1M6+oF4nI979ptAmDgAp6zxG8D1gvz9Q0twmQVGeFDdCBKNwV6gb +h+0t+nvujArjqWaJGctB+d1ENmHP4ndGyH329JKBNv3bNPFyfvMMFr20FQIDAQABo0IwQDAdBgNV +HQ4EFgQUBx/S55zawm6iQLSwelAQUHTEyL0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwDQYJKoZIhvcNAQEFBQADggEBAIlXshZ6qML91tmbmzTCnLQyFE2npN/svqe++EPbkTfOtDIu +UFUaNU52Q3Eg75N3ThVwLofDwR1t3Mu1J9QsVtFSUzpE0nPIxBsFZVpikpzuQY0x2+c06lkh1QF6 +12S4ZDnNye2v7UsDSKegmQGA3GWjNq5lWUhPgkvIZfFXHeVZLgo/bNjR9eUJtGxUAArgFU2HdW23 +WJZa3W3SAKD0m0i+wzekujbgfIeFlxoVot4uolu9rxj5kFDNcFn4J2dHy8egBzp90SxdbBk6ZrV9 +/ZFvgrG+CJPbFEfxojfHRZ48x3evZKiT3/Zpg4Jg8klCNO1aAFSFHBY2kgxc+qatv9s= +-----END CERTIFICATE----- + +AffirmTrust Premium +=================== +-----BEGIN CERTIFICATE----- +MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UEBhMCVVMxFDAS +BgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVzdCBQcmVtaXVtMB4XDTEwMDEy +OTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRy +dXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVzdCBQcmVtaXVtMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEAxBLfqV/+Qd3d9Z+K4/as4Tx4mrzY8H96oDMq3I0gW64tb+eT2TZwamjPjlGjhVtn +BKAQJG9dKILBl1fYSCkTtuG+kU3fhQxTGJoeJKJPj/CihQvL9Cl/0qRY7iZNyaqoe5rZ+jjeRFcV +5fiMyNlI4g0WJx0eyIOFJbe6qlVBzAMiSy2RjYvmia9mx+n/K+k8rNrSs8PhaJyJ+HoAVt70VZVs ++7pk3WKL3wt3MutizCaam7uqYoNMtAZ6MMgpv+0GTZe5HMQxK9VfvFMSF5yZVylmd2EhMQcuJUmd +GPLu8ytxjLW6OQdJd/zvLpKQBY0tL3d770O/Nbua2Plzpyzy0FfuKE4mX4+QaAkvuPjcBukumj5R +p9EixAqnOEhss/n/fauGV+O61oV4d7pD6kh/9ti+I20ev9E2bFhc8e6kGVQa9QPSdubhjL08s9NI +S+LI+H+SqHZGnEJlPqQewQcDWkYtuJfzt9WyVSHvutxMAJf7FJUnM7/oQ0dG0giZFmA7mn7S5u04 +6uwBHjxIVkkJx0w3AJ6IDsBz4W9m6XJHMD4Q5QsDyZpCAGzFlH5hxIrff4IaC1nEWTJ3s7xgaVY5 +/bQGeyzWZDbZvUjthB9+pSKPKrhC9IK31FOQeE4tGv2Bb0TXOwF0lkLgAOIua+rF7nKsu7/+6qqo ++Nz2snmKtmcCAwEAAaNCMEAwHQYDVR0OBBYEFJ3AZ6YMItkm9UWrpmVSESfYRaxjMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBDAUAA4ICAQCzV00QYk465KzquByv +MiPIs0laUZx2KI15qldGF9X1Uva3ROgIRL8YhNILgM3FEv0AVQVhh0HctSSePMTYyPtwni94loMg +Nt58D2kTiKV1NpgIpsbfrM7jWNa3Pt668+s0QNiigfV4Py/VpfzZotReBA4Xrf5B8OWycvpEgjNC +6C1Y91aMYj+6QrCcDFx+LmUmXFNPALJ4fqENmS2NuB2OosSw/WDQMKSOyARiqcTtNd56l+0OOF6S +L5Nwpamcb6d9Ex1+xghIsV5n61EIJenmJWtSKZGc0jlzCFfemQa0W50QBuHCAKi4HEoCChTQwUHK ++4w1IX2COPKpVJEZNZOUbWo6xbLQu4mGk+ibyQ86p3q4ofB4Rvr8Ny/lioTz3/4E2aFooC8k4gmV +BtWVyuEklut89pMFu+1z6S3RdTnX5yTb2E5fQ4+e0BQ5v1VwSJlXMbSc7kqYA5YwH2AG7hsj/oFg +IxpHYoWlzBk0gG+zrBrjn/B7SK3VAdlntqlyk+otZrWyuOQ9PLLvTIzq6we/qzWaVYa8GKa1qF60 +g2xraUDTn9zxw2lrueFtCfTxqlB2Cnp9ehehVZZCmTEJ3WARjQUwfuaORtGdFNrHF+QFlozEJLUb +zxQHskD4o55BhrwE0GuWyCqANP2/7waj3VjFhT0+j/6eKeC2uAloGRwYQw== +-----END CERTIFICATE----- + +AffirmTrust Premium ECC +======================= +-----BEGIN CERTIFICATE----- +MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMCVVMxFDASBgNV +BAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQcmVtaXVtIEVDQzAeFw0xMDAx +MjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1U +cnVzdDEgMB4GA1UEAwwXQWZmaXJtVHJ1c3QgUHJlbWl1bSBFQ0MwdjAQBgcqhkjOPQIBBgUrgQQA +IgNiAAQNMF4bFZ0D0KF5Nbc6PJJ6yhUczWLznCZcBz3lVPqj1swS6vQUX+iOGasvLkjmrBhDeKzQ +N8O9ss0s5kfiGuZjuD0uL3jET9v0D6RoTFVya5UdThhClXjMNzyR4ptlKymjQjBAMB0GA1UdDgQW +BBSaryl6wBE1NSZRMADDav5A1a7WPDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAK +BggqhkjOPQQDAwNnADBkAjAXCfOHiFBar8jAQr9HX/VsaobgxCd05DhT1wV/GzTjxi+zygk8N53X +57hG8f2h4nECMEJZh0PUUd+60wkyWs6Iflc9nF9Ca/UHLbXwgpP5WW+uZPpY5Yse42O+tYHNbwKM +eQ== +-----END CERTIFICATE----- + +Certum Trusted Network CA +========================= +-----BEGIN CERTIFICATE----- +MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBMMSIwIAYDVQQK +ExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBUcnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIy +MTIwNzM3WhcNMjkxMjMxMTIwNzM3WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBU +ZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +MSIwIAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC +AQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rHUV+rpDKmYYe2bg+G0jAC +l/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LMTXPb865Px1bVWqeWifrzq2jUI4ZZJ88J +J7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVUBBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4 +fOQtf/WsX+sWn7Et0brMkUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0 +cvW0QM8xAcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNVHRMB +Af8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNVHQ8BAf8EBAMCAQYw +DQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15ysHhE49wcrwn9I0j6vSrEuVUEtRCj +jSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfLI9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1 +mS1FhIrlQgnXdAIv94nYmem8J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5aj +Zt3hrvJBW8qYVoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI +03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw= +-----END CERTIFICATE----- + +TWCA Root Certification Authority +================================= +-----BEGIN CERTIFICATE----- +MIIDezCCAmOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJUVzESMBAGA1UECgwJ +VEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NBIFJvb3QgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkwHhcNMDgwODI4MDcyNDMzWhcNMzAxMjMxMTU1OTU5WjBfMQswCQYDVQQG +EwJUVzESMBAGA1UECgwJVEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NB +IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQCwfnK4pAOU5qfeCTiRShFAh6d8WWQUe7UREN3+v9XAu1bihSX0NXIP+FPQQeFEAcK0HMMx +QhZHhTMidrIKbw/lJVBPhYa+v5guEGcevhEFhgWQxFnQfHgQsIBct+HHK3XLfJ+utdGdIzdjp9xC +oi2SBBtQwXu4PhvJVgSLL1KbralW6cH/ralYhzC2gfeXRfwZVzsrb+RH9JlF/h3x+JejiB03HFyP +4HYlmlD4oFT/RJB2I9IyxsOrBr/8+7/zrX2SYgJbKdM1o5OaQ2RgXbL6Mv87BK9NQGr5x+PvI/1r +y+UPizgN7gr8/g+YnzAx3WxSZfmLgb4i4RxYA7qRG4kHAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIB +BjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqOFsmjd6LWvJPelSDGRjjCDWmujANBgkqhkiG +9w0BAQUFAAOCAQEAPNV3PdrfibqHDAhUaiBQkr6wQT25JmSDCi/oQMCXKCeCMErJk/9q56YAf4lC +mtYR5VPOL8zy2gXE/uJQxDqGfczafhAJO5I1KlOy/usrBdlsXebQ79NqZp4VKIV66IIArB6nCWlW +QtNoURi+VJq/REG6Sb4gumlc7rh3zc5sH62Dlhh9DrUUOYTxKOkto557HnpyWoOzeW/vtPzQCqVY +T0bf+215WfKEIlKuD8z7fDvnaspHYcN6+NOSBB+4IIThNlQWx0DeO4pz3N/GCUzf7Nr/1FNCocny +Yh0igzyXxfkZYiesZSLX0zzG5Y6yU8xJzrww/nsOM5D77dIUkR8Hrw== +-----END CERTIFICATE----- + +Security Communication RootCA2 +============================== +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDElMCMGA1UEChMc +U0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMeU2VjdXJpdHkgQ29tbXVuaWNh +dGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoXDTI5MDUyOTA1MDAzOVowXTELMAkGA1UEBhMC +SlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xJzAlBgNVBAsTHlNlY3Vy +aXR5IENvbW11bmljYXRpb24gUm9vdENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +ANAVOVKxUrO6xVmCxF1SrjpDZYBLx/KWvNs2l9amZIyoXvDjChz335c9S672XewhtUGrzbl+dp++ ++T42NKA7wfYxEUV0kz1XgMX5iZnK5atq1LXaQZAQwdbWQonCv/Q4EpVMVAX3NuRFg3sUZdbcDE3R +3n4MqzvEFb46VqZab3ZpUql6ucjrappdUtAtCms1FgkQhNBqyjoGADdH5H5XTz+L62e4iKrFvlNV +spHEfbmwhRkGeC7bYRr6hfVKkaHnFtWOojnflLhwHyg/i/xAXmODPIMqGplrz95Zajv8bxbXH/1K +EOtOghY6rCcMU/Gt1SSwawNQwS08Ft1ENCcadfsCAwEAAaNCMEAwHQYDVR0OBBYEFAqFqXdlBZh8 +QIH4D5csOPEK7DzPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEB +CwUAA4IBAQBMOqNErLlFsceTfsgLCkLfZOoc7llsCLqJX2rKSpWeeo8HxdpFcoJxDjrSzG+ntKEj +u/Ykn8sX/oymzsLS28yN/HH8AynBbF0zX2S2ZTuJbxh2ePXcokgfGT+Ok+vx+hfuzU7jBBJV1uXk +3fs+BXziHV7Gp7yXT2g69ekuCkO2r1dcYmh8t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6q +tnRGEmyR7jTV7JqR50S+kDFy1UkC9gLl9B/rfNmWVan/7Ir5mUf/NVoCqgTLiluHcSmRvaS0eg29 +mvVXIwAHIRc/SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03 +-----END CERTIFICATE----- + +EC-ACC +====== +-----BEGIN CERTIFICATE----- +MIIFVjCCBD6gAwIBAgIQ7is969Qh3hSoYqwE893EATANBgkqhkiG9w0BAQUFADCB8zELMAkGA1UE +BhMCRVMxOzA5BgNVBAoTMkFnZW5jaWEgQ2F0YWxhbmEgZGUgQ2VydGlmaWNhY2lvIChOSUYgUS0w +ODAxMTc2LUkpMSgwJgYDVQQLEx9TZXJ2ZWlzIFB1YmxpY3MgZGUgQ2VydGlmaWNhY2lvMTUwMwYD +VQQLEyxWZWdldSBodHRwczovL3d3dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbCAoYykwMzE1MDMGA1UE +CxMsSmVyYXJxdWlhIEVudGl0YXRzIGRlIENlcnRpZmljYWNpbyBDYXRhbGFuZXMxDzANBgNVBAMT +BkVDLUFDQzAeFw0wMzAxMDcyMzAwMDBaFw0zMTAxMDcyMjU5NTlaMIHzMQswCQYDVQQGEwJFUzE7 +MDkGA1UEChMyQWdlbmNpYSBDYXRhbGFuYSBkZSBDZXJ0aWZpY2FjaW8gKE5JRiBRLTA4MDExNzYt +SSkxKDAmBgNVBAsTH1NlcnZlaXMgUHVibGljcyBkZSBDZXJ0aWZpY2FjaW8xNTAzBgNVBAsTLFZl +Z2V1IGh0dHBzOi8vd3d3LmNhdGNlcnQubmV0L3ZlcmFycmVsIChjKTAzMTUwMwYDVQQLEyxKZXJh +cnF1aWEgRW50aXRhdHMgZGUgQ2VydGlmaWNhY2lvIENhdGFsYW5lczEPMA0GA1UEAxMGRUMtQUND +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyLHT+KXQpWIR4NA9h0X84NzJB5R85iK +w5K4/0CQBXCHYMkAqbWUZRkiFRfCQ2xmRJoNBD45b6VLeqpjt4pEndljkYRm4CgPukLjbo73FCeT +ae6RDqNfDrHrZqJyTxIThmV6PttPB/SnCWDaOkKZx7J/sxaVHMf5NLWUhdWZXqBIoH7nF2W4onW4 +HvPlQn2v7fOKSGRdghST2MDk/7NQcvJ29rNdQlB50JQ+awwAvthrDk4q7D7SzIKiGGUzE3eeml0a +E9jD2z3Il3rucO2n5nzbcc8tlGLfbdb1OL4/pYUKGbio2Al1QnDE6u/LDsg0qBIimAy4E5S2S+zw +0JDnJwIDAQABo4HjMIHgMB0GA1UdEQQWMBSBEmVjX2FjY0BjYXRjZXJ0Lm5ldDAPBgNVHRMBAf8E +BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoMOLRKo3pUW/l4Ba0fF4opvpXY0wfwYD +VR0gBHgwdjB0BgsrBgEEAfV4AQMBCjBlMCwGCCsGAQUFBwIBFiBodHRwczovL3d3dy5jYXRjZXJ0 +Lm5ldC92ZXJhcnJlbDA1BggrBgEFBQcCAjApGidWZWdldSBodHRwczovL3d3dy5jYXRjZXJ0Lm5l +dC92ZXJhcnJlbCAwDQYJKoZIhvcNAQEFBQADggEBAKBIW4IB9k1IuDlVNZyAelOZ1Vr/sXE7zDkJ +lF7W2u++AVtd0x7Y/X1PzaBB4DSTv8vihpw3kpBWHNzrKQXlxJ7HNd+KDM3FIUPpqojlNcAZQmNa +Al6kSBg6hW/cnbw/nZzBh7h6YQjpdwt/cKt63dmXLGQehb+8dJahw3oS7AwaboMMPOhyRp/7SNVe +l+axofjk70YllJyJ22k4vuxcDlbHZVHlUIiIv0LVKz3l+bqeLrPK9HOSAgu+TGbrIP65y7WZf+a2 +E/rKS03Z7lNGBjvGTq2TWoF+bCpLagVFjPIhpDGQh2xlnJ2lYJU6Un/10asIbvPuW/mIPX64b24D +5EI= +-----END CERTIFICATE----- + +Hellenic Academic and Research Institutions RootCA 2011 +======================================================= +-----BEGIN CERTIFICATE----- +MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1IxRDBCBgNVBAoT +O0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9y +aXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25z +IFJvb3RDQSAyMDExMB4XDTExMTIwNjEzNDk1MloXDTMxMTIwMTEzNDk1MlowgZUxCzAJBgNVBAYT +AkdSMUQwQgYDVQQKEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25z +IENlcnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNo +IEluc3RpdHV0aW9ucyBSb290Q0EgMjAxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +AKlTAOMupvaO+mDYLZU++CwqVE7NuYRhlFhPjz2L5EPzdYmNUeTDN9KKiE15HrcS3UN4SoqS5tdI +1Q+kOilENbgH9mgdVc04UfCMJDGFr4PJfel3r+0ae50X+bOdOFAPplp5kYCvN66m0zH7tSYJnTxa +71HFK9+WXesyHgLacEnsbgzImjeN9/E2YEsmLIKe0HjzDQ9jpFEw4fkrJxIH2Oq9GGKYsFk3fb7u +8yBRQlqD75O6aRXxYp2fmTmCobd0LovUxQt7L/DICto9eQqakxylKHJzkUOap9FNhYS5qXSPFEDH +3N6sQWRstBmbAmNtJGSPRLIl6s5ddAxjMlyNh+UCAwEAAaOBiTCBhjAPBgNVHRMBAf8EBTADAQH/ +MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUppFC/RNhSiOeCKQp5dgTBCPuQSUwRwYDVR0eBEAwPqA8 +MAWCAy5ncjAFggMuZXUwBoIELmVkdTAGggQub3JnMAWBAy5ncjAFgQMuZXUwBoEELmVkdTAGgQQu +b3JnMA0GCSqGSIb3DQEBBQUAA4IBAQAf73lB4XtuP7KMhjdCSk4cNx6NZrokgclPEg8hwAOXhiVt +XdMiKahsog2p6z0GW5k6x8zDmjR/qw7IThzh+uTczQ2+vyT+bOdrwg3IBp5OjWEopmr95fZi6hg8 +TqBTnbI6nOulnJEWtk2C4AwFSKls9cz4y51JtPACpf1wA+2KIaWuE4ZJwzNzvoc7dIsXRSZMFpGD +/md9zU1jZ/rzAxKWeAaNsWftjj++n08C9bMJL/NMh98qy5V8AcysNnq/onN694/BtZqhFLKPM58N +7yLcZnuEvUUXBj08yrl3NI/K6s8/MT7jiOOASSXIl7WdmplNsDz4SgCbZN2fOUvRJ9e4 +-----END CERTIFICATE----- + +Actalis Authentication Root CA +============================== +-----BEGIN CERTIFICATE----- +MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCSVQxDjAM +BgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UE +AwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290IENBMB4XDTExMDkyMjExMjIwMloXDTMwMDky +MjExMjIwMlowazELMAkGA1UEBhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlz +IFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290 +IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp8bEpSmkLO/lGMWwUKNvUTufClrJ +wkg4CsIcoBh/kbWHuUA/3R1oHwiD1S0eiKD4j1aPbZkCkpAW1V8IbInX4ay8IMKx4INRimlNAJZa +by/ARH6jDuSRzVju3PvHHkVH3Se5CAGfpiEd9UEtL0z9KK3giq0itFZljoZUj5NDKd45RnijMCO6 +zfB9E1fAXdKDa0hMxKufgFpbOr3JpyI/gCczWw63igxdBzcIy2zSekciRDXFzMwujt0q7bd9Zg1f +YVEiVRvjRuPjPdA1YprbrxTIW6HMiRvhMCb8oJsfgadHHwTrozmSBp+Z07/T6k9QnBn+locePGX2 +oxgkg4YQ51Q+qDp2JE+BIcXjDwL4k5RHILv+1A7TaLndxHqEguNTVHnd25zS8gebLra8Pu2Fbe8l +EfKXGkJh90qX6IuxEAf6ZYGyojnP9zz/GPvG8VqLWeICrHuS0E4UT1lF9gxeKF+w6D9Fz8+vm2/7 +hNN3WpVvrJSEnu68wEqPSpP4RCHiMUVhUE4Q2OM1fEwZtN4Fv6MGn8i1zeQf1xcGDXqVdFUNaBr8 +EBtiZJ1t4JWgw5QHVw0U5r0F+7if5t+L4sbnfpb2U8WANFAoWPASUHEXMLrmeGO89LKtmyuy/uE5 +jF66CyCU3nuDuP/jVo23Eek7jPKxwV2dpAtMK9myGPW1n0sCAwEAAaNjMGEwHQYDVR0OBBYEFFLY +iDrIn3hm7YnzezhwlMkCAjbQMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUUtiIOsifeGbt +ifN7OHCUyQICNtAwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQALe3KHwGCmSUyI +WOYdiPcUZEim2FgKDk8TNd81HdTtBjHIgT5q1d07GjLukD0R0i70jsNjLiNmsGe+b7bAEzlgqqI0 +JZN1Ut6nna0Oh4lScWoWPBkdg/iaKWW+9D+a2fDzWochcYBNy+A4mz+7+uAwTc+G02UQGRjRlwKx +K3JCaKygvU5a2hi/a5iB0P2avl4VSM0RFbnAKVy06Ij3Pjaut2L9HmLecHgQHEhb2rykOLpn7VU+ +Xlff1ANATIGk0k9jpwlCCRT8AKnCgHNPLsBA2RF7SOp6AsDT6ygBJlh0wcBzIm2Tlf05fbsq4/aC +4yyXX04fkZT6/iyj2HYauE2yOE+b+h1IYHkm4vP9qdCa6HCPSXrW5b0KDtst842/6+OkfcvHlXHo +2qN8xcL4dJIEG4aspCJTQLas/kx2z/uUMsA1n3Y/buWQbqCmJqK4LL7RK4X9p2jIugErsWx0Hbhz +lefut8cl8ABMALJ+tguLHPPAUJ4lueAI3jZm/zel0btUZCzJJ7VLkn5l/9Mt4blOvH+kQSGQQXem +OR/qnuOf0GZvBeyqdn6/axag67XH/JJULysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9 +vwGYT7JZVEc+NHt4bVaTLnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg== +-----END CERTIFICATE----- + +Trustis FPS Root CA +=================== +-----BEGIN CERTIFICATE----- +MIIDZzCCAk+gAwIBAgIQGx+ttiD5JNM2a/fH8YygWTANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQG +EwJHQjEYMBYGA1UEChMPVHJ1c3RpcyBMaW1pdGVkMRwwGgYDVQQLExNUcnVzdGlzIEZQUyBSb290 +IENBMB4XDTAzMTIyMzEyMTQwNloXDTI0MDEyMTExMzY1NFowRTELMAkGA1UEBhMCR0IxGDAWBgNV +BAoTD1RydXN0aXMgTGltaXRlZDEcMBoGA1UECxMTVHJ1c3RpcyBGUFMgUm9vdCBDQTCCASIwDQYJ +KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQe547NdDfxIzNjpvto8A2mfRC6qc+gIMPpqdZh8mQ +RUN+AOqGeSoDvT03mYlmt+WKVoaTnGhLaASMk5MCPjDSNzoiYYkchU59j9WvezX2fihHiTHcDnlk +H5nSW7r+f2C/revnPDgpai/lkQtV/+xvWNUtyd5MZnGPDNcE2gfmHhjjvSkCqPoc4Vu5g6hBSLwa +cY3nYuUtsuvffM/bq1rKMfFMIvMFE/eC+XN5DL7XSxzA0RU8k0Fk0ea+IxciAIleH2ulrG6nS4zt +o3Lmr2NNL4XSFDWaLk6M6jKYKIahkQlBOrTh4/L68MkKokHdqeMDx4gVOxzUGpTXn2RZEm0CAwEA +AaNTMFEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBS6+nEleYtXQSUhhgtx67JkDoshZzAd +BgNVHQ4EFgQUuvpxJXmLV0ElIYYLceuyZA6LIWcwDQYJKoZIhvcNAQEFBQADggEBAH5Y//01GX2c +GE+esCu8jowU/yyg2kdbw++BLa8F6nRIW/M+TgfHbcWzk88iNVy2P3UnXwmWzaD+vkAMXBJV+JOC +yinpXj9WV4s4NvdFGkwozZ5BuO1WTISkQMi4sKUraXAEasP41BIy+Q7DsdwyhEQsb8tGD+pmQQ9P +8Vilpg0ND2HepZ5dfWWhPBfnqFVO76DH7cZEf1T1o+CP8HxVIo8ptoGj4W1OLBuAZ+ytIJ8MYmHV +l/9D7S3B2l0pKoU/rGXuhg8FjZBf3+6f9L/uHfuY5H+QK4R4EA5sSVPvFVtlRkpdr7r7OnIdzfYl +iB6XzCGcKQENZetX2fNXlrtIzYE= +-----END CERTIFICATE----- + +Buypass Class 2 Root CA +======================= +-----BEGIN CERTIFICATE----- +MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU +QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMiBSb290IENBMB4X +DTEwMTAyNjA4MzgwM1oXDTQwMTAyNjA4MzgwM1owTjELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1 +eXBhc3MgQVMtOTgzMTYzMzI3MSAwHgYDVQQDDBdCdXlwYXNzIENsYXNzIDIgUm9vdCBDQTCCAiIw +DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANfHXvfBB9R3+0Mh9PT1aeTuMgHbo4Yf5FkNuud1 +g1Lr6hxhFUi7HQfKjK6w3Jad6sNgkoaCKHOcVgb/S2TwDCo3SbXlzwx87vFKu3MwZfPVL4O2fuPn +9Z6rYPnT8Z2SdIrkHJasW4DptfQxh6NR/Md+oW+OU3fUl8FVM5I+GC911K2GScuVr1QGbNgGE41b +/+EmGVnAJLqBcXmQRFBoJJRfuLMR8SlBYaNByyM21cHxMlAQTn/0hpPshNOOvEu/XAFOBz3cFIqU +CqTqc/sLUegTBxj6DvEr0VQVfTzh97QZQmdiXnfgolXsttlpF9U6r0TtSsWe5HonfOV116rLJeff +awrbD02TTqigzXsu8lkBarcNuAeBfos4GzjmCleZPe4h6KP1DBbdi+w0jpwqHAAVF41og9JwnxgI +zRFo1clrUs3ERo/ctfPYV3Me6ZQ5BL/T3jjetFPsaRyifsSP5BtwrfKi+fv3FmRmaZ9JUaLiFRhn +Bkp/1Wy1TbMz4GHrXb7pmA8y1x1LPC5aAVKRCfLf6o3YBkBjqhHk/sM3nhRSP/TizPJhk9H9Z2vX +Uq6/aKtAQ6BXNVN48FP4YUIHZMbXb5tMOA1jrGKvNouicwoN9SG9dKpN6nIDSdvHXx1iY8f93ZHs +M+71bbRuMGjeyNYmsHVee7QHIJihdjK4TWxPAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD +VR0OBBYEFMmAd+BikoL1RpzzuvdMw964o605MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsF +AAOCAgEAU18h9bqwOlI5LJKwbADJ784g7wbylp7ppHR/ehb8t/W2+xUbP6umwHJdELFx7rxP462s +A20ucS6vxOOto70MEae0/0qyexAQH6dXQbLArvQsWdZHEIjzIVEpMMpghq9Gqx3tOluwlN5E40EI +osHsHdb9T7bWR9AUC8rmyrV7d35BH16Dx7aMOZawP5aBQW9gkOLo+fsicdl9sz1Gv7SEr5AcD48S +aq/v7h56rgJKihcrdv6sVIkkLE8/trKnToyokZf7KcZ7XC25y2a2t6hbElGFtQl+Ynhw/qlqYLYd +DnkM/crqJIByw5c/8nerQyIKx+u2DISCLIBrQYoIwOula9+ZEsuK1V6ADJHgJgg2SMX6OBE1/yWD +LfJ6v9r9jv6ly0UsH8SIU653DtmadsWOLB2jutXsMq7Aqqz30XpN69QH4kj3Io6wpJ9qzo6ysmD0 +oyLQI+uUWnpp3Q+/QFesa1lQ2aOZ4W7+jQF5JyMV3pKdewlNWudLSDBaGOYKbeaP4NK75t98biGC +wWg5TbSYWGZizEqQXsP6JwSxeRV0mcy+rSDeJmAc61ZRpqPq5KM/p/9h3PFaTWwyI0PurKju7koS +CTxdccK+efrCh2gdC/1cacwG0Jp9VJkqyTkaGa9LKkPzY11aWOIv4x3kqdbQCtCev9eBCfHJxyYN +rJgWVqA= +-----END CERTIFICATE----- + +Buypass Class 3 Root CA +======================= +-----BEGIN CERTIFICATE----- +MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU +QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMyBSb290IENBMB4X +DTEwMTAyNjA4Mjg1OFoXDTQwMTAyNjA4Mjg1OFowTjELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1 +eXBhc3MgQVMtOTgzMTYzMzI3MSAwHgYDVQQDDBdCdXlwYXNzIENsYXNzIDMgUm9vdCBDQTCCAiIw +DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKXaCpUWUOOV8l6ddjEGMnqb8RB2uACatVI2zSRH +sJ8YZLya9vrVediQYkwiL944PdbgqOkcLNt4EemOaFEVcsfzM4fkoF0LXOBXByow9c3EN3coTRiR +5r/VUv1xLXA+58bEiuPwKAv0dpihi4dVsjoT/Lc+JzeOIuOoTyrvYLs9tznDDgFHmV0ST9tD+leh +7fmdvhFHJlsTmKtdFoqwNxxXnUX/iJY2v7vKB3tvh2PX0DJq1l1sDPGzbjniazEuOQAnFN44wOwZ +ZoYS6J1yFhNkUsepNxz9gjDthBgd9K5c/3ATAOux9TN6S9ZV+AWNS2mw9bMoNlwUxFFzTWsL8TQH +2xc519woe2v1n/MuwU8XKhDzzMro6/1rqy6any2CbgTUUgGTLT2G/H783+9CHaZr77kgxve9oKeV +/afmiSTYzIw0bOIjL9kSGiG5VZFvC5F5GQytQIgLcOJ60g7YaEi7ghM5EFjp2CoHxhLbWNvSO1UQ +RwUVZ2J+GGOmRj8JDlQyXr8NYnon74Do29lLBlo3WiXQCBJ31G8JUJc9yB3D34xFMFbG02SrZvPA +Xpacw8Tvw3xrizp5f7NJzz3iiZ+gMEuFuZyUJHmPfWupRWgPK9Dx2hzLabjKSWJtyNBjYt1gD1iq +j6G8BaVmos8bdrKEZLFMOVLAMLrwjEsCsLa3AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD +VR0OBBYEFEe4zf/lb+74suwvTg75JbCOPGvDMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsF +AAOCAgEAACAjQTUEkMJAYmDv4jVM1z+s4jSQuKFvdvoWFqRINyzpkMLyPPgKn9iB5btb2iUspKdV +cSQy9sgL8rxq+JOssgfCX5/bzMiKqr5qb+FJEMwx14C7u8jYog5kV+qi9cKpMRXSIGrs/CIBKM+G +uIAeqcwRpTzyFrNHnfzSgCHEy9BHcEGhyoMZCCxt8l13nIoUE9Q2HJLw5QY33KbmkJs4j1xrG0aG +Q0JfPgEHU1RdZX33inOhmlRaHylDFCfChQ+1iHsaO5S3HWCntZznKWlXWpuTekMwGwPXYshApqr8 +ZORK15FTAaggiG6cX0S5y2CBNOxv033aSF/rtJC8LakcC6wc1aJoIIAE1vyxjy+7SjENSoYc6+I2 +KSb12tjE8nVhz36udmNKekBlk4f4HoCMhuWG1o8O/FMsYOgWYRqiPkN7zTlgVGr18okmAWiDSKIz +6MkEkbIRNBE+6tBDGR8Dk5AM/1E9V/RBbuHLoL7ryWPNbczk+DaqaJ3tvV2XcEQNtg413OEMXbug +UZTLfhbrES+jkkXITHHZvMmZUldGL1DPvTVp9D0VzgalLA8+9oG6lLvDu79leNKGef9JOxqDDPDe +eOzI8k1MGt6CKfjBWtrt7uYnXuhF0J0cUahoq0Tj0Itq4/g7u9xN12TyUb7mqqta6THuBrxzvxNi +Cp/HuZc= +-----END CERTIFICATE----- + +T-TeleSec GlobalRoot Class 3 +============================ +-----BEGIN CERTIFICATE----- +MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoM +IlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBU +cnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwHhcNMDgx +MDAxMTAyOTU2WhcNMzMxMDAxMjM1OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lz +dGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBD +ZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwggEiMA0GCSqGSIb3 +DQEBAQUAA4IBDwAwggEKAoIBAQC9dZPwYiJvJK7genasfb3ZJNW4t/zN8ELg63iIVl6bmlQdTQyK +9tPPcPRStdiTBONGhnFBSivwKixVA9ZIw+A5OO3yXDw/RLyTPWGrTs0NvvAgJ1gORH8EGoel15YU +NpDQSXuhdfsaa3Ox+M6pCSzyU9XDFES4hqX2iys52qMzVNn6chr3IhUciJFrf2blw2qAsCTz34ZF +iP0Zf3WHHx+xGwpzJFu5ZeAsVMhg02YXP+HMVDNzkQI6pn97djmiH5a2OK61yJN0HZ65tOVgnS9W +0eDrXltMEnAMbEQgqxHY9Bn20pxSN+f6tsIxO0rUFJmtxxr1XV/6B7h8DR/Wgx6zAgMBAAGjQjBA +MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS1A/d2O2GCahKqGFPr +AyGUv/7OyjANBgkqhkiG9w0BAQsFAAOCAQEAVj3vlNW92nOyWL6ukK2YJ5f+AbGwUgC4TeQbIXQb +fsDuXmkqJa9c1h3a0nnJ85cp4IaH3gRZD/FZ1GSFS5mvJQQeyUapl96Cshtwn5z2r3Ex3XsFpSzT +ucpH9sry9uetuUg/vBa3wW306gmv7PO15wWeph6KU1HWk4HMdJP2udqmJQV0eVp+QD6CSyYRMG7h +P0HHRwA11fXT91Q+gT3aSWqas+8QPebrb9HIIkfLzM8BMZLZGOMivgkeGj5asuRrDFR6fUNOuIml +e9eiPZaGzPImNC1qkp2aGtAw4l1OBLBfiyB+d8E9lYLRRpo7PHi4b6HQDWSieB4pTpPDpFQUWw== +-----END CERTIFICATE----- + +EE Certification Centre Root CA +=============================== +-----BEGIN CERTIFICATE----- +MIIEAzCCAuugAwIBAgIQVID5oHPtPwBMyonY43HmSjANBgkqhkiG9w0BAQUFADB1MQswCQYDVQQG +EwJFRTEiMCAGA1UECgwZQVMgU2VydGlmaXRzZWVyaW1pc2tlc2t1czEoMCYGA1UEAwwfRUUgQ2Vy +dGlmaWNhdGlvbiBDZW50cmUgUm9vdCBDQTEYMBYGCSqGSIb3DQEJARYJcGtpQHNrLmVlMCIYDzIw +MTAxMDMwMTAxMDMwWhgPMjAzMDEyMTcyMzU5NTlaMHUxCzAJBgNVBAYTAkVFMSIwIAYDVQQKDBlB +UyBTZXJ0aWZpdHNlZXJpbWlza2Vza3VzMSgwJgYDVQQDDB9FRSBDZXJ0aWZpY2F0aW9uIENlbnRy +ZSBSb290IENBMRgwFgYJKoZIhvcNAQkBFglwa2lAc2suZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDIIMDs4MVLqwd4lfNE7vsLDP90jmG7sWLqI9iroWUyeuuOF0+W2Ap7kaJjbMeM +TC55v6kF/GlclY1i+blw7cNRfdCT5mzrMEvhvH2/UpvObntl8jixwKIy72KyaOBhU8E2lf/slLo2 +rpwcpzIP5Xy0xm90/XsY6KxX7QYgSzIwWFv9zajmofxwvI6Sc9uXp3whrj3B9UiHbCe9nyV0gVWw +93X2PaRka9ZP585ArQ/dMtO8ihJTmMmJ+xAdTX7Nfh9WDSFwhfYggx/2uh8Ej+p3iDXE/+pOoYtN +P2MbRMNE1CV2yreN1x5KZmTNXMWcg+HCCIia7E6j8T4cLNlsHaFLAgMBAAGjgYowgYcwDwYDVR0T +AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBLyWj7qVhy/zQas8fElyalL1BSZ +MEUGA1UdJQQ+MDwGCCsGAQUFBwMCBggrBgEFBQcDAQYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEF +BQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQEFBQADggEBAHv25MANqhlHt01Xo/6tu7Fq1Q+e2+Rj +xY6hUFaTlrg4wCQiZrxTFGGVv9DHKpY5P30osxBAIWrEr7BSdxjhlthWXePdNl4dp1BUoMUq5KqM +lIpPnTX/dqQGE5Gion0ARD9V04I8GtVbvFZMIi5GQ4okQC3zErg7cBqklrkar4dBGmoYDQZPxz5u +uSlNDUmJEYcyW+ZLBMjkXOZ0c5RdFpgTlf7727FE5TpwrDdr5rMzcijJs1eg9gIWiAYLtqZLICjU +3j2LrTcFU3T+bsy8QxdxXvnFzBqpYe73dgzzcvRyrc9yAjYHR8/vGVCJYMzpJJUPwssd8m92kMfM +dcGWxZ0= +-----END CERTIFICATE----- + +D-TRUST Root Class 3 CA 2 2009 +============================== +-----BEGIN CERTIFICATE----- +MIIEMzCCAxugAwIBAgIDCYPzMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAkRFMRUwEwYDVQQK +DAxELVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgMjAwOTAe +Fw0wOTExMDUwODM1NThaFw0yOTExMDUwODM1NThaME0xCzAJBgNVBAYTAkRFMRUwEwYDVQQKDAxE +LVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgMjAwOTCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANOySs96R+91myP6Oi/WUEWJNTrGa9v+2wBoqOAD +ER03UAifTUpolDWzU9GUY6cgVq/eUXjsKj3zSEhQPgrfRlWLJ23DEE0NkVJD2IfgXU42tSHKXzlA +BF9bfsyjxiupQB7ZNoTWSPOSHjRGICTBpFGOShrvUD9pXRl/RcPHAY9RySPocq60vFYJfxLLHLGv +KZAKyVXMD9O0Gu1HNVpK7ZxzBCHQqr0ME7UAyiZsxGsMlFqVlNpQmvH/pStmMaTJOKDfHR+4CS7z +p+hnUquVH+BGPtikw8paxTGA6Eian5Rp/hnd2HN8gcqW3o7tszIFZYQ05ub9VxC1X3a/L7AQDcUC +AwEAAaOCARowggEWMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFP3aFMSfMN4hvR5COfyrYyNJ +4PGEMA4GA1UdDwEB/wQEAwIBBjCB0wYDVR0fBIHLMIHIMIGAoH6gfIZ6bGRhcDovL2RpcmVjdG9y +eS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwUm9vdCUyMENsYXNzJTIwMyUyMENBJTIwMiUyMDIw +MDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwQ6BBoD+G +PWh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfcm9vdF9jbGFzc18zX2NhXzJfMjAw +OS5jcmwwDQYJKoZIhvcNAQELBQADggEBAH+X2zDI36ScfSF6gHDOFBJpiBSVYEQBrLLpME+bUMJm +2H6NMLVwMeniacfzcNsgFYbQDfC+rAF1hM5+n02/t2A7nPPKHeJeaNijnZflQGDSNiH+0LS4F9p0 +o3/U37CYAqxva2ssJSRyoWXuJVrl5jLn8t+rSfrzkGkj2wTZ51xY/GXUl77M/C4KzCUqNQT4YJEV +dT1B/yMfGchs64JTBKbkTCJNjYy6zltz7GRUUG3RnFX7acM2w4y8PIWmawomDeCTmGCufsYkl4ph +X5GOZpIJhzbNi5stPvZR1FDUWSi9g/LMKHtThm3YJohw1+qRzT65ysCQblrGXnRl11z+o+I= +-----END CERTIFICATE----- + +D-TRUST Root Class 3 CA 2 EV 2009 +================================= +-----BEGIN CERTIFICATE----- +MIIEQzCCAyugAwIBAgIDCYP0MA0GCSqGSIb3DQEBCwUAMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQK +DAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAw +OTAeFw0wOTExMDUwODUwNDZaFw0yOTExMDUwODUwNDZaMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQK +DAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAw +OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnxhDRwui+3MKCOvXwEz75ivJn9gpfS +egpnljgJ9hBOlSJzmY3aFS3nBfwZcyK3jpgAvDw9rKFs+9Z5JUut8Mxk2og+KbgPCdM03TP1YtHh +zRnp7hhPTFiu4h7WDFsVWtg6uMQYZB7jM7K1iXdODL/ZlGsTl28So/6ZqQTMFexgaDbtCHu39b+T +7WYxg4zGcTSHThfqr4uRjRxWQa4iN1438h3Z0S0NL2lRp75mpoo6Kr3HGrHhFPC+Oh25z1uxav60 +sUYgovseO3Dvk5h9jHOW8sXvhXCtKSb8HgQ+HKDYD8tSg2J87otTlZCpV6LqYQXY+U3EJ/pure35 +11H3a6UCAwEAAaOCASQwggEgMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNOUikxiEyoZLsyv +cop9NteaHNxnMA4GA1UdDwEB/wQEAwIBBjCB3QYDVR0fBIHVMIHSMIGHoIGEoIGBhn9sZGFwOi8v +ZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBSb290JTIwQ2xhc3MlMjAzJTIwQ0El +MjAyJTIwRVYlMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRp +b25saXN0MEagRKBChkBodHRwOi8vd3d3LmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3Jvb3RfY2xh +c3NfM19jYV8yX2V2XzIwMDkuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQA07XtaPKSUiO8aEXUHL7P+ +PPoeUSbrh/Yp3uDx1MYkCenBz1UbtDDZzhr+BlGmFaQt77JLvyAoJUnRpjZ3NOhk31KxEcdzes05 +nsKtjHEh8lprr988TlWvsoRlFIm5d8sqMb7Po23Pb0iUMkZv53GMoKaEGTcH8gNFCSuGdXzfX2lX +ANtu2KZyIktQ1HWYVt+3GP9DQ1CuekR78HlR10M9p9OB0/DJT7naxpeG0ILD5EJt/rDiZE4OJudA +NCa1CInXCGNjOCd1HjPqbqjdn5lPdE2BiYBL3ZqXKVwvvoFBuYz/6n1gBp7N1z3TLqMVvKjmJuVv +w9y4AyHqnxbxLFS1 +-----END CERTIFICATE----- + +CA Disig Root R2 +================ +-----BEGIN CERTIFICATE----- +MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNVBAYTAlNLMRMw +EQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMuMRkwFwYDVQQDExBDQSBEaXNp +ZyBSb290IFIyMB4XDTEyMDcxOTA5MTUzMFoXDTQyMDcxOTA5MTUzMFowUjELMAkGA1UEBhMCU0sx +EzARBgNVBAcTCkJyYXRpc2xhdmExEzARBgNVBAoTCkRpc2lnIGEucy4xGTAXBgNVBAMTEENBIERp +c2lnIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCio8QACdaFXS1tFPbC +w3OeNcJxVX6B+6tGUODBfEl45qt5WDza/3wcn9iXAng+a0EE6UG9vgMsRfYvZNSrXaNHPWSb6Wia +xswbP7q+sos0Ai6YVRn8jG+qX9pMzk0DIaPY0jSTVpbLTAwAFjxfGs3Ix2ymrdMxp7zo5eFm1tL7 +A7RBZckQrg4FY8aAamkw/dLukO8NJ9+flXP04SXabBbeQTg06ov80egEFGEtQX6sx3dOy1FU+16S +GBsEWmjGycT6txOgmLcRK7fWV8x8nhfRyyX+hk4kLlYMeE2eARKmK6cBZW58Yh2EhN/qwGu1pSqV +g8NTEQxzHQuyRpDRQjrOQG6Vrf/GlK1ul4SOfW+eioANSW1z4nuSHsPzwfPrLgVv2RvPN3YEyLRa +5Beny912H9AZdugsBbPWnDTYltxhh5EF5EQIM8HauQhl1K6yNg3ruji6DOWbnuuNZt2Zz9aJQfYE +koopKW1rOhzndX0CcQ7zwOe9yxndnWCywmZgtrEE7snmhrmaZkCo5xHtgUUDi/ZnWejBBhG93c+A +Ak9lQHhcR1DIm+YfgXvkRKhbhZri3lrVx/k6RGZL5DJUfORsnLMOPReisjQS1n6yqEm70XooQL6i +Fh/f5DcfEXP7kAplQ6INfPgGAVUzfbANuPT1rqVCV3w2EYx7XsQDnYx5nQIDAQABo0IwQDAPBgNV +HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUtZn4r7CU9eMg1gqtzk5WpC5u +Qu0wDQYJKoZIhvcNAQELBQADggIBACYGXnDnZTPIgm7ZnBc6G3pmsgH2eDtpXi/q/075KMOYKmFM +tCQSin1tERT3nLXK5ryeJ45MGcipvXrA1zYObYVybqjGom32+nNjf7xueQgcnYqfGopTpti72TVV +sRHFqQOzVju5hJMiXn7B9hJSi+osZ7z+Nkz1uM/Rs0mSO9MpDpkblvdhuDvEK7Z4bLQjb/D907Je +dR+Zlais9trhxTF7+9FGs9K8Z7RiVLoJ92Owk6Ka+elSLotgEqv89WBW7xBci8QaQtyDW2QOy7W8 +1k/BfDxujRNt+3vrMNDcTa/F1balTFtxyegxvug4BkihGuLq0t4SOVga/4AOgnXmt8kHbA7v/zjx +mHHEt38OFdAlab0inSvtBfZGR6ztwPDUO+Ls7pZbkBNOHlY667DvlruWIxG68kOGdGSVyCh13x01 +utI3gzhTODY7z2zp+WsO0PsE6E9312UBeIYMej4hYvF/Y3EMyZ9E26gnonW+boE+18DrG5gPcFw0 +sorMwIUY6256s/daoQe/qUKS82Ail+QUoQebTnbAjn39pCXHR+3/H3OszMOl6W8KjptlwlCFtaOg +UxLMVYdh84GuEEZhvUQhuMI9dM9+JDX6HAcOmz0iyu8xL4ysEr3vQCj8KWefshNPZiTEUxnpHikV +7+ZtsH8tZ/3zbBt1RqPlShfppNcL +-----END CERTIFICATE----- + +ACCVRAIZ1 +========= +-----BEGIN CERTIFICATE----- +MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UEAwwJQUNDVlJB +SVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQswCQYDVQQGEwJFUzAeFw0xMTA1 +MDUwOTM3MzdaFw0zMDEyMzEwOTM3MzdaMEIxEjAQBgNVBAMMCUFDQ1ZSQUlaMTEQMA4GA1UECwwH +UEtJQUNDVjENMAsGA1UECgwEQUNDVjELMAkGA1UEBhMCRVMwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQCbqau/YUqXry+XZpp0X9DZlv3P4uRm7x8fRzPCRKPfmt4ftVTdFXxpNRFvu8gM +jmoYHtiP2Ra8EEg2XPBjs5BaXCQ316PWywlxufEBcoSwfdtNgM3802/J+Nq2DoLSRYWoG2ioPej0 +RGy9ocLLA76MPhMAhN9KSMDjIgro6TenGEyxCQ0jVn8ETdkXhBilyNpAlHPrzg5XPAOBOp0KoVdD +aaxXbXmQeOW1tDvYvEyNKKGno6e6Ak4l0Squ7a4DIrhrIA8wKFSVf+DuzgpmndFALW4ir50awQUZ +0m/A8p/4e7MCQvtQqR0tkw8jq8bBD5L/0KIV9VMJcRz/RROE5iZe+OCIHAr8Fraocwa48GOEAqDG +WuzndN9wrqODJerWx5eHk6fGioozl2A3ED6XPm4pFdahD9GILBKfb6qkxkLrQaLjlUPTAYVtjrs7 +8yM2x/474KElB0iryYl0/wiPgL/AlmXz7uxLaL2diMMxs0Dx6M/2OLuc5NF/1OVYm3z61PMOm3WR +5LpSLhl+0fXNWhn8ugb2+1KoS5kE3fj5tItQo05iifCHJPqDQsGH+tUtKSpacXpkatcnYGMN285J +9Y0fkIkyF/hzQ7jSWpOGYdbhdQrqeWZ2iE9x6wQl1gpaepPluUsXQA+xtrn13k/c4LOsOxFwYIRK +Q26ZIMApcQrAZQIDAQABo4ICyzCCAscwfQYIKwYBBQUHAQEEcTBvMEwGCCsGAQUFBzAChkBodHRw +Oi8vd3d3LmFjY3YuZXMvZmlsZWFkbWluL0FyY2hpdm9zL2NlcnRpZmljYWRvcy9yYWl6YWNjdjEu +Y3J0MB8GCCsGAQUFBzABhhNodHRwOi8vb2NzcC5hY2N2LmVzMB0GA1UdDgQWBBTSh7Tj3zcnk1X2 +VuqB5TbMjB4/vTAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNKHtOPfNyeTVfZW6oHlNsyM +Hj+9MIIBcwYDVR0gBIIBajCCAWYwggFiBgRVHSAAMIIBWDCCASIGCCsGAQUFBwICMIIBFB6CARAA +QQB1AHQAbwByAGkAZABhAGQAIABkAGUAIABDAGUAcgB0AGkAZgBpAGMAYQBjAGkA8wBuACAAUgBh +AO0AegAgAGQAZQAgAGwAYQAgAEEAQwBDAFYAIAAoAEEAZwBlAG4AYwBpAGEAIABkAGUAIABUAGUA +YwBuAG8AbABvAGcA7QBhACAAeQAgAEMAZQByAHQAaQBmAGkAYwBhAGMAaQDzAG4AIABFAGwAZQBj +AHQAcgDzAG4AaQBjAGEALAAgAEMASQBGACAAUQA0ADYAMAAxADEANQA2AEUAKQAuACAAQwBQAFMA +IABlAG4AIABoAHQAdABwADoALwAvAHcAdwB3AC4AYQBjAGMAdgAuAGUAczAwBggrBgEFBQcCARYk +aHR0cDovL3d3dy5hY2N2LmVzL2xlZ2lzbGFjaW9uX2MuaHRtMFUGA1UdHwROMEwwSqBIoEaGRGh0 +dHA6Ly93d3cuYWNjdi5lcy9maWxlYWRtaW4vQXJjaGl2b3MvY2VydGlmaWNhZG9zL3JhaXphY2N2 +MV9kZXIuY3JsMA4GA1UdDwEB/wQEAwIBBjAXBgNVHREEEDAOgQxhY2N2QGFjY3YuZXMwDQYJKoZI +hvcNAQEFBQADggIBAJcxAp/n/UNnSEQU5CmH7UwoZtCPNdpNYbdKl02125DgBS4OxnnQ8pdpD70E +R9m+27Up2pvZrqmZ1dM8MJP1jaGo/AaNRPTKFpV8M9xii6g3+CfYCS0b78gUJyCpZET/LtZ1qmxN +YEAZSUNUY9rizLpm5U9EelvZaoErQNV/+QEnWCzI7UiRfD+mAM/EKXMRNt6GGT6d7hmKG9Ww7Y49 +nCrADdg9ZuM8Db3VlFzi4qc1GwQA9j9ajepDvV+JHanBsMyZ4k0ACtrJJ1vnE5Bc5PUzolVt3OAJ +TS+xJlsndQAJxGJ3KQhfnlmstn6tn1QwIgPBHnFk/vk4CpYY3QIUrCPLBhwepH2NDd4nQeit2hW3 +sCPdK6jT2iWH7ehVRE2I9DZ+hJp4rPcOVkkO1jMl1oRQQmwgEh0q1b688nCBpHBgvgW1m54ERL5h +I6zppSSMEYCUWqKiuUnSwdzRp+0xESyeGabu4VXhwOrPDYTkF7eifKXeVSUG7szAh1xA2syVP1Xg +Nce4hL60Xc16gwFy7ofmXx2utYXGJt/mwZrpHgJHnyqobalbz+xFd3+YJ5oyXSrjhO7FmGYvliAd +3djDJ9ew+f7Zfc3Qn48LFFhRny+Lwzgt3uiP1o2HpPVWQxaZLPSkVrQ0uGE3ycJYgBugl6H8WY3p +EfbRD0tVNEYqi4Y7 +-----END CERTIFICATE----- + +TWCA Global Root CA +=================== +-----BEGIN CERTIFICATE----- +MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcxEjAQBgNVBAoT +CVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMTVFdDQSBHbG9iYWwgUm9vdCBD +QTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5NTlaMFExCzAJBgNVBAYTAlRXMRIwEAYDVQQK +EwlUQUlXQU4tQ0ExEDAOBgNVBAsTB1Jvb3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3Qg +Q0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCwBdvI64zEbooh745NnHEKH1Jw7W2C +nJfF10xORUnLQEK1EjRsGcJ0pDFfhQKX7EMzClPSnIyOt7h52yvVavKOZsTuKwEHktSz0ALfUPZV +r2YOy+BHYC8rMjk1Ujoog/h7FsYYuGLWRyWRzvAZEk2tY/XTP3VfKfChMBwqoJimFb3u/Rk28OKR +Q4/6ytYQJ0lM793B8YVwm8rqqFpD/G2Gb3PpN0Wp8DbHzIh1HrtsBv+baz4X7GGqcXzGHaL3SekV +tTzWoWH1EfcFbx39Eb7QMAfCKbAJTibc46KokWofwpFFiFzlmLhxpRUZyXx1EcxwdE8tmx2RRP1W +KKD+u4ZqyPpcC1jcxkt2yKsi2XMPpfRaAok/T54igu6idFMqPVMnaR1sjjIsZAAmY2E2TqNGtz99 +sy2sbZCilaLOz9qC5wc0GZbpuCGqKX6mOL6OKUohZnkfs8O1CWfe1tQHRvMq2uYiN2DLgbYPoA/p +yJV/v1WRBXrPPRXAb94JlAGD1zQbzECl8LibZ9WYkTunhHiVJqRaCPgrdLQABDzfuBSO6N+pjWxn +kjMdwLfS7JLIvgm/LCkFbwJrnu+8vyq8W8BQj0FwcYeyTbcEqYSjMq+u7msXi7Kx/mzhkIyIqJdI +zshNy/MGz19qCkKxHh53L46g5pIOBvwFItIm4TFRfTLcDwIDAQABoyMwITAOBgNVHQ8BAf8EBAMC +AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAXzSBdu+WHdXltdkCY4QWwa6g +cFGn90xHNcgL1yg9iXHZqjNB6hQbbCEAwGxCGX6faVsgQt+i0trEfJdLjbDorMjupWkEmQqSpqsn +LhpNgb+E1HAerUf+/UqdM+DyucRFCCEK2mlpc3INvjT+lIutwx4116KD7+U4x6WFH6vPNOw/KP4M +8VeGTslV9xzU2KV9Bnpv1d8Q34FOIWWxtuEXeZVFBs5fzNxGiWNoRI2T9GRwoD2dKAXDOXC4Ynsg +/eTb6QihuJ49CcdP+yz4k3ZB3lLg4VfSnQO8d57+nile98FRYB/e2guyLXW3Q0iT5/Z5xoRdgFlg +lPx4mI88k1HtQJAH32RjJMtOcQWh15QaiDLxInQirqWm2BJpTGCjAu4r7NRjkgtevi92a6O2JryP +A9gK8kxkRr05YuWW6zRjESjMlfGt7+/cgFhI6Uu46mWs6fyAtbXIRfmswZ/ZuepiiI7E8UuDEq3m +i4TWnsLrgxifarsbJGAzcMzs9zLzXNl5fe+epP7JI8Mk7hWSsT2RTyaGvWZzJBPqpK5jwa19hAM8 +EHiGG3njxPPyBJUgriOCxLM6AGK/5jYk4Ve6xx6QddVfP5VhK8E7zeWzaGHQRiapIVJpLesux+t3 +zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmyKwbQBM0= +-----END CERTIFICATE----- + +TeliaSonera Root CA v1 +====================== +-----BEGIN CERTIFICATE----- +MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAwNzEUMBIGA1UE +CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMDcxMDE4 +MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwW +VGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+ +6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA +3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75Ljo1k +B1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJjmhn +Xb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxH +oLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3 +F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJ +oWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4pgd7 +gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTwEhDc +TwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVNAgMB +AAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qW +DNXr+nuqF+gTEjANBgkqhkiG9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNm +zqjMDfz1mgbldxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx +0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1TjTQpgcmLNkQfW +pb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBedY2gea+zDTYa4EzAvXUYNR0PV +G6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpc +c41teyWRyu5FrgZLAMzTsVlQ2jqIOylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOT +JsjrDNYmiLbAJM+7vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2 +qReWt88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcnHL/EVlP6 +Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVxSK236thZiNSQvxaz2ems +WWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY= +-----END CERTIFICATE----- + +E-Tugra Certification Authority +=============================== +-----BEGIN CERTIFICATE----- +MIIGSzCCBDOgAwIBAgIIamg+nFGby1MwDQYJKoZIhvcNAQELBQAwgbIxCzAJBgNVBAYTAlRSMQ8w +DQYDVQQHDAZBbmthcmExQDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamls +ZXJpIHZlIEhpem1ldGxlcmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBN +ZXJrZXppMSgwJgYDVQQDDB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEzMDMw +NTEyMDk0OFoXDTIzMDMwMzEyMDk0OFowgbIxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHDAZBbmthcmEx +QDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhpem1ldGxl +cmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBNZXJrZXppMSgwJgYDVQQD +DB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEA4vU/kwVRHoViVF56C/UYB4Oufq9899SKa6VjQzm5S/fDxmSJPZQuVIBSOTkHS0vd +hQd2h8y/L5VMzH2nPbxHD5hw+IyFHnSOkm0bQNGZDbt1bsipa5rAhDGvykPL6ys06I+XawGb1Q5K +CKpbknSFQ9OArqGIW66z6l7LFpp3RMih9lRozt6Plyu6W0ACDGQXwLWTzeHxE2bODHnv0ZEoq1+g +ElIwcxmOj+GMB6LDu0rw6h8VqO4lzKRG+Bsi77MOQ7osJLjFLFzUHPhdZL3Dk14opz8n8Y4e0ypQ +BaNV2cvnOVPAmJ6MVGKLJrD3fY185MaeZkJVgkfnsliNZvcHfC425lAcP9tDJMW/hkd5s3kc91r0 +E+xs+D/iWR+V7kI+ua2oMoVJl0b+SzGPWsutdEcf6ZG33ygEIqDUD13ieU/qbIWGvaimzuT6w+Gz +rt48Ue7LE3wBf4QOXVGUnhMMti6lTPk5cDZvlsouDERVxcr6XQKj39ZkjFqzAQqptQpHF//vkUAq +jqFGOjGY5RH8zLtJVor8udBhmm9lbObDyz51Sf6Pp+KJxWfXnUYTTjF2OySznhFlhqt/7x3U+Lzn +rFpct1pHXFXOVbQicVtbC/DP3KBhZOqp12gKY6fgDT+gr9Oq0n7vUaDmUStVkhUXU8u3Zg5mTPj5 +dUyQ5xJwx0UCAwEAAaNjMGEwHQYDVR0OBBYEFC7j27JJ0JxUeVz6Jyr+zE7S6E5UMA8GA1UdEwEB +/wQFMAMBAf8wHwYDVR0jBBgwFoAULuPbsknQnFR5XPonKv7MTtLoTlQwDgYDVR0PAQH/BAQDAgEG +MA0GCSqGSIb3DQEBCwUAA4ICAQAFNzr0TbdF4kV1JI+2d1LoHNgQk2Xz8lkGpD4eKexd0dCrfOAK +kEh47U6YA5n+KGCRHTAduGN8qOY1tfrTYXbm1gdLymmasoR6d5NFFxWfJNCYExL/u6Au/U5Mh/jO +XKqYGwXgAEZKgoClM4so3O0409/lPun++1ndYYRP0lSWE2ETPo+Aab6TR7U1Q9Jauz1c77NCR807 +VRMGsAnb/WP2OogKmW9+4c4bU2pEZiNRCHu8W1Ki/QY3OEBhj0qWuJA3+GbHeJAAFS6LrVE1Uweo +a2iu+U48BybNCAVwzDk/dr2l02cmAYamU9JgO3xDf1WKvJUawSg5TB9D0pH0clmKuVb8P7Sd2nCc +dlqMQ1DujjByTd//SffGqWfZbawCEeI6FiWnWAjLb1NBnEg4R2gz0dfHj9R0IdTDBZB6/86WiLEV +KV0jq9BgoRJP3vQXzTLlyb/IQ639Lo7xr+L0mPoSHyDYwKcMhcWQ9DstliaxLL5Mq+ux0orJ23gT +Dx4JnW2PAJ8C2sH6H3p6CcRK5ogql5+Ji/03X186zjhZhkuvcQu02PJwT58yE+Owp1fl2tpDy4Q0 +8ijE6m30Ku/Ba3ba+367hTzSU8JNvnHhRdH9I2cNE3X7z2VnIp2usAnRCf8dNL/+I5c30jn6PQ0G +C7TbO6Orb1wdtn7os4I07QZcJA== +-----END CERTIFICATE----- + +T-TeleSec GlobalRoot Class 2 +============================ +-----BEGIN CERTIFICATE----- +MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoM +IlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBU +cnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwHhcNMDgx +MDAxMTA0MDE0WhcNMzMxMDAxMjM1OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lz +dGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBD +ZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwggEiMA0GCSqGSIb3 +DQEBAQUAA4IBDwAwggEKAoIBAQCqX9obX+hzkeXaXPSi5kfl82hVYAUdAqSzm1nzHoqvNK38DcLZ +SBnuaY/JIPwhqgcZ7bBcrGXHX+0CfHt8LRvWurmAwhiCFoT6ZrAIxlQjgeTNuUk/9k9uN0goOA/F +vudocP05l03Sx5iRUKrERLMjfTlH6VJi1hKTXrcxlkIF+3anHqP1wvzpesVsqXFP6st4vGCvx970 +2cu+fjOlbpSD8DT6IavqjnKgP6TeMFvvhk1qlVtDRKgQFRzlAVfFmPHmBiiRqiDFt1MmUUOyCxGV +WOHAD3bZwI18gfNycJ5v/hqO2V81xrJvNHy+SE/iWjnX2J14np+GPgNeGYtEotXHAgMBAAGjQjBA +MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS/WSA2AHmgoCJrjNXy +YdK4LMuCSjANBgkqhkiG9w0BAQsFAAOCAQEAMQOiYQsfdOhyNsZt+U2e+iKo4YFWz827n+qrkRk4 +r6p8FU3ztqONpfSO9kSpp+ghla0+AGIWiPACuvxhI+YzmzB6azZie60EI4RYZeLbK4rnJVM3YlNf +vNoBYimipidx5joifsFvHZVwIEoHNN/q/xWA5brXethbdXwFeilHfkCoMRN3zUA7tFFHei4R40cR +3p1m0IvVVGb6g1XqfMIpiRvpb7PO4gWEyS8+eIVibslfwXhjdFjASBgMmTnrpMwatXlajRWc2BQN +9noHV8cigwUtPJslJj0Ys6lDfMjIq2SPDqO/nBudMNva0Bkuqjzx+zOAduTNrRlPBSeOE6Fuwg== +-----END CERTIFICATE----- + +Atos TrustedRoot 2011 +===================== +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UEAwwVQXRvcyBU +cnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0xMTA3MDcxNDU4 +MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMMFUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsG +A1UECgwEQXRvczELMAkGA1UEBhMCREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV +hTuXbyo7LjvPpvMpNb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr +54rMVD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+SZFhyBH+ +DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ4J7sVaE3IqKHBAUsR320 +HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0Lcp2AMBYHlT8oDv3FdU9T1nSatCQujgKR +z3bFmx5VdJx4IbHwLfELn8LVlhgf8FQieowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7R +l+lwrrw7GWzbITAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZ +bNshMBgGA1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEB +CwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8jvZfza1zv7v1Apt+h +k6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kPDpFrdRbhIfzYJsdHt6bPWHJxfrrh +TZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pcmaHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a9 +61qn8FYiqTxlVMYVqL2Gns2Dlmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G +3mB/ufNPRJLvKrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed +-----END CERTIFICATE----- + +QuoVadis Root CA 1 G3 +===================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQELBQAwSDELMAkG +A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv +b3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00MjAxMTIxNzI3NDRaMEgxCzAJBgNVBAYTAkJN +MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEg +RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCgvlAQjunybEC0BJyFuTHK3C3kEakE +PBtVwedYMB0ktMPvhd6MLOHBPd+C5k+tR4ds7FtJwUrVu4/sh6x/gpqG7D0DmVIB0jWerNrwU8lm +PNSsAgHaJNM7qAJGr6Qc4/hzWHa39g6QDbXwz8z6+cZM5cOGMAqNF34168Xfuw6cwI2H44g4hWf6 +Pser4BOcBRiYz5P1sZK0/CPTz9XEJ0ngnjybCKOLXSoh4Pw5qlPafX7PGglTvF0FBM+hSo+LdoIN +ofjSxxR3W5A2B4GbPgb6Ul5jxaYA/qXpUhtStZI5cgMJYr2wYBZupt0lwgNm3fME0UDiTouG9G/l +g6AnhF4EwfWQvTA9xO+oabw4m6SkltFi2mnAAZauy8RRNOoMqv8hjlmPSlzkYZqn0ukqeI1RPToV +7qJZjqlc3sX5kCLliEVx3ZGZbHqfPT2YfF72vhZooF6uCyP8Wg+qInYtyaEQHeTTRCOQiJ/GKubX +9ZqzWB4vMIkIG1SitZgj7Ah3HJVdYdHLiZxfokqRmu8hqkkWCKi9YSgxyXSthfbZxbGL0eUQMk1f +iyA6PEkfM4VZDdvLCXVDaXP7a3F98N/ETH3Goy7IlXnLc6KOTk0k+17kBL5yG6YnLUlamXrXXAkg +t3+UuU/xDRxeiEIbEbfnkduebPRq34wGmAOtzCjvpUfzUwIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUo5fW816iEOGrRZ88F2Q87gFwnMwwDQYJKoZI +hvcNAQELBQADggIBABj6W3X8PnrHX3fHyt/PX8MSxEBd1DKquGrX1RUVRpgjpeaQWxiZTOOtQqOC +MTaIzen7xASWSIsBx40Bz1szBpZGZnQdT+3Btrm0DWHMY37XLneMlhwqI2hrhVd2cDMT/uFPpiN3 +GPoajOi9ZcnPP/TJF9zrx7zABC4tRi9pZsMbj/7sPtPKlL92CiUNqXsCHKnQO18LwIE6PWThv6ct +Tr1NxNgpxiIY0MWscgKCP6o6ojoilzHdCGPDdRS5YCgtW2jgFqlmgiNR9etT2DGbe+m3nUvriBbP ++V04ikkwj+3x6xn0dxoxGE1nVGwvb2X52z3sIexe9PSLymBlVNFxZPT5pqOBMzYzcfCkeF9OrYMh +3jRJjehZrJ3ydlo28hP0r+AJx2EqbPfgna67hkooby7utHnNkDPDs3b69fBsnQGQ+p6Q9pxyz0fa +wx/kNSBT8lTR32GDpgLiJTjehTItXnOQUl1CxM49S+H5GYQd1aJQzEH7QRTDvdbJWqNjZgKAvQU6 +O0ec7AAmTPWIUb+oI38YB7AL7YsmoWTTYUrrXJ/es69nA7Mf3W1daWhpq1467HxpvMc7hU6eFbm0 +FU/DlXpY18ls6Wy58yljXrQs8C097Vpl4KlbQMJImYFtnh8GKjwStIsPm6Ik8KaN1nrgS7ZklmOV +hMJKzRwuJIczYOXD +-----END CERTIFICATE----- + +QuoVadis Root CA 2 G3 +===================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQELBQAwSDELMAkG +A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv +b3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJN +MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIg +RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFh +ZiFfqq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMWn4rjyduY +NM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ymc5GQYaYDFCDy54ejiK2t +oIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+O7q414AB+6XrW7PFXmAqMaCvN+ggOp+o +MiwMzAkd056OXbxMmO7FGmh77FOm6RQ1o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+l +V0POKa2Mq1W/xPtbAd0jIaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZo +L1NesNKqIcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz8eQQ +sSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43ehvNURG3YBZwjgQQvD +6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l7ZizlWNof/k19N+IxWA1ksB8aRxh +lRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALGcC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZI +hvcNAQELBQADggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66 +AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RCroijQ1h5fq7K +pVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0GaW/ZZGYjeVYg3UQt4XAoeo0L9 +x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4nlv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgz +dWqTHBLmYF5vHX/JHyPLhGGfHoJE+V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6X +U/IyAgkwo1jwDQHVcsaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+Nw +mNtddbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNgKCLjsZWD +zYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeMHVOyToV7BjjHLPj4sHKN +JeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4WSr2Rz0ZiC3oheGe7IUIarFsNMkd7Egr +O3jtZsSOeWmD3n+M +-----END CERTIFICATE----- + +QuoVadis Root CA 3 G3 +===================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQELBQAwSDELMAkG +A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv +b3QgQ0EgMyBHMzAeFw0xMjAxMTIyMDI2MzJaFw00MjAxMTIyMDI2MzJaMEgxCzAJBgNVBAYTAkJN +MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDMg +RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzyw4QZ47qFJenMioKVjZ/aEzHs286 +IxSR/xl/pcqs7rN2nXrpixurazHb+gtTTK/FpRp5PIpM/6zfJd5O2YIyC0TeytuMrKNuFoM7pmRL +Mon7FhY4futD4tN0SsJiCnMK3UmzV9KwCoWdcTzeo8vAMvMBOSBDGzXRU7Ox7sWTaYI+FrUoRqHe +6okJ7UO4BUaKhvVZR74bbwEhELn9qdIoyhA5CcoTNs+cra1AdHkrAj80//ogaX3T7mH1urPnMNA3 +I4ZyYUUpSFlob3emLoG+B01vr87ERRORFHAGjx+f+IdpsQ7vw4kZ6+ocYfx6bIrc1gMLnia6Et3U +VDmrJqMz6nWB2i3ND0/kA9HvFZcba5DFApCTZgIhsUfei5pKgLlVj7WiL8DWM2fafsSntARE60f7 +5li59wzweyuxwHApw0BiLTtIadwjPEjrewl5qW3aqDCYz4ByA4imW0aucnl8CAMhZa634RylsSqi +Md5mBPfAdOhx3v89WcyWJhKLhZVXGqtrdQtEPREoPHtht+KPZ0/l7DxMYIBpVzgeAVuNVejH38DM +dyM0SXV89pgR6y3e7UEuFAUCf+D+IOs15xGsIs5XPd7JMG0QA4XN8f+MFrXBsj6IbGB/kE+V9/Yt +rQE5BwT6dYB9v0lQ7e/JxHwc64B+27bQ3RP+ydOc17KXqQIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUxhfQvKjqAkPyGwaZXSuQILnXnOQwDQYJKoZI +hvcNAQELBQADggIBADRh2Va1EodVTd2jNTFGu6QHcrxfYWLopfsLN7E8trP6KZ1/AvWkyaiTt3px +KGmPc+FSkNrVvjrlt3ZqVoAh313m6Tqe5T72omnHKgqwGEfcIHB9UqM+WXzBusnIFUBhynLWcKzS +t/Ac5IYp8M7vaGPQtSCKFWGafoaYtMnCdvvMujAWzKNhxnQT5WvvoxXqA/4Ti2Tk08HS6IT7SdEQ +TXlm66r99I0xHnAUrdzeZxNMgRVhvLfZkXdxGYFgu/BYpbWcC/ePIlUnwEsBbTuZDdQdm2NnL9Du +DcpmvJRPpq3t/O5jrFc/ZSXPsoaP0Aj/uHYUbt7lJ+yreLVTubY/6CD50qi+YUbKh4yE8/nxoGib +Ih6BJpsQBJFxwAYf3KDTuVan45gtf4Od34wrnDKOMpTwATwiKp9Dwi7DmDkHOHv8XgBCH/MyJnmD +hPbl8MFREsALHgQjDFSlTC9JxUrRtm5gDWv8a4uFJGS3iQ6rJUdbPM9+Sb3H6QrG2vd+DhcI00iX +0HGS8A85PjRqHH3Y8iKuu2n0M7SmSFXRDw4m6Oy2Cy2nhTXN/VnIn9HNPlopNLk9hM6xZdRZkZFW +dSHBd575euFgndOtBBj0fOtek49TSiIp+EgrPk2GrFt/ywaZWWDYWGWVjUTR939+J399roD1B0y2 +PpxxVJkES/1Y+Zj0 +-----END CERTIFICATE----- + +DigiCert Assured ID Root G2 +=========================== +-----BEGIN CERTIFICATE----- +MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw +IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgw +MTE1MTIwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL +ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIw +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSAn61UQbVH +35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4HteccbiJVMWWXvdMX0h5i89vq +bFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9HpEgjAALAcKxHad3A2m67OeYfcgnDmCXRw +VWmvo2ifv922ebPynXApVfSr/5Vh88lAbx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OP +YLfykqGxvYmJHzDNw6YuYjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+Rn +lTGNAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTO +w0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPIQW5pJ6d1Ee88hjZv +0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I0jJmwYrA8y8678Dj1JGG0VDjA9tz +d29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4GnilmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAW +hsI6yLETcDbYz+70CjTVW0z9B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0M +jomZmWzwPDCvON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo +IhNzbM8m9Yop5w== +-----END CERTIFICATE----- + +DigiCert Assured ID Root G3 +=========================== +-----BEGIN CERTIFICATE----- +MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQswCQYDVQQGEwJV +UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYD +VQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1 +MTIwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQ +BgcqhkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJfZn4f5dwb +RXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17QRSAPWXYQ1qAk8C3eNvJs +KTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgF +UaFNN6KDec6NHSrkhDAKBggqhkjOPQQDAwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5Fy +YZ5eEJJZVrmDxxDnOOlYJjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy +1vUhZscv6pZjamVFkpUBtA== +-----END CERTIFICATE----- + +DigiCert Global Root G2 +======================= +-----BEGIN CERTIFICATE----- +MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAw +HgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUx +MjAwMDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 +dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkq +hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI2/Ou8jqJ +kTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx1x7e/dfgy5SDN67sH0NO +3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQq2EGnI/yuum06ZIya7XzV+hdG82MHauV +BJVJ8zUtluNJbd134/tJS7SsVQepj5WztCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyM +UNGPHgm+F6HmIcr9g+UQvIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQAB +o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV5uNu +5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY1Yl9PMWLSn/pvtsr +F9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4NeF22d+mQrvHRAiGfzZ0JFrabA0U +WTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NGFdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBH +QRFXGU7Aj64GxJUTFy8bJZ918rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/ +iyK5S9kJRaTepLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl +MrY= +-----END CERTIFICATE----- + +DigiCert Global Root G3 +======================= +-----BEGIN CERTIFICATE----- +MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQswCQYDVQQGEwJV +UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYD +VQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAw +MDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5k +aWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0C +AQYFK4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FGfp4tn+6O +YwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPOZ9wj/wMco+I+o0IwQDAP +BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNp +Yim8S8YwCgYIKoZIzj0EAwMDaAAwZQIxAK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y +3maTD/HMsQmP3Wyr+mt/oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34 +VOKa5Vt8sycX +-----END CERTIFICATE----- + +DigiCert Trusted Root G4 +======================== +-----BEGIN CERTIFICATE----- +MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBiMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEw +HwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1 +MTIwMDAwWjBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0G +CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3yithZwuEp +pz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9o +k3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7Fsa +vOvJz82sNEBfsXpm7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGY +QJB5w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6 +MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCiEhtm +mnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7 +f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFH +dL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8 +oR7FwI+isX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud +DwEB/wQEAwIBhjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD +ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2SV1EY+CtnJYY +ZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd+SeuMIW59mdNOj6PWTkiU0Tr +yF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWcfFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy +7zBZLq7gcfJW5GqXb5JQbZaNaHqasjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iah +ixTXTBmyUEFxPT9NcCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN +5r5N0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie4u1Ki7wb +/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mIr/OSmbaz5mEP0oUA51Aa +5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tK +G48BtieVU+i2iW1bvGjUI+iLUaJW+fCmgKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP +82Z+ +-----END CERTIFICATE----- + +COMODO RSA Certification Authority +================================== +-----BEGIN CERTIFICATE----- +MIIF2DCCA8CgAwIBAgIQTKr5yttjb+Af907YWwOGnTANBgkqhkiG9w0BAQwFADCBhTELMAkGA1UE +BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG +A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkwHhcNMTAwMTE5MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMC +R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE +ChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBB +dXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCR6FSS0gpWsawNJN3Fz0Rn +dJkrN6N9I3AAcbxT38T6KhKPS38QVr2fcHK3YX/JSw8Xpz3jsARh7v8Rl8f0hj4K+j5c+ZPmNHrZ +FGvnnLOFoIJ6dq9xkNfs/Q36nGz637CC9BR++b7Epi9Pf5l/tfxnQ3K9DADWietrLNPtj5gcFKt+ +5eNu/Nio5JIk2kNrYrhV/erBvGy2i/MOjZrkm2xpmfh4SDBF1a3hDTxFYPwyllEnvGfDyi62a+pG +x8cgoLEfZd5ICLqkTqnyg0Y3hOvozIFIQ2dOciqbXL1MGyiKXCJ7tKuY2e7gUYPDCUZObT6Z+pUX +2nwzV0E8jVHtC7ZcryxjGt9XyD+86V3Em69FmeKjWiS0uqlWPc9vqv9JWL7wqP/0uK3pN/u6uPQL +OvnoQ0IeidiEyxPx2bvhiWC4jChWrBQdnArncevPDt09qZahSL0896+1DSJMwBGB7FY79tOi4lu3 +sgQiUpWAk2nojkxl8ZEDLXB0AuqLZxUpaVICu9ffUGpVRr+goyhhf3DQw6KqLCGqR84onAZFdr+C +GCe01a60y1Dma/RMhnEw6abfFobg2P9A3fvQQoh/ozM6LlweQRGBY84YcWsr7KaKtzFcOmpH4MN5 +WdYgGq/yapiqcrxXStJLnbsQ/LBMQeXtHT1eKJ2czL+zUdqnR+WEUwIDAQABo0IwQDAdBgNVHQ4E +FgQUu69+Aj36pvE8hI6t7jiY7NkyMtQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w +DQYJKoZIhvcNAQEMBQADggIBAArx1UaEt65Ru2yyTUEUAJNMnMvlwFTPoCWOAvn9sKIN9SCYPBMt +rFaisNZ+EZLpLrqeLppysb0ZRGxhNaKatBYSaVqM4dc+pBroLwP0rmEdEBsqpIt6xf4FpuHA1sj+ +nq6PK7o9mfjYcwlYRm6mnPTXJ9OV2jeDchzTc+CiR5kDOF3VSXkAKRzH7JsgHAckaVd4sjn8OoSg +tZx8jb8uk2IntznaFxiuvTwJaP+EmzzV1gsD41eeFPfR60/IvYcjt7ZJQ3mFXLrrkguhxuhoqEwW +sRqZCuhTLJK7oQkYdQxlqHvLI7cawiiFwxv/0Cti76R7CZGYZ4wUAc1oBmpjIXUDgIiKboHGhfKp +pC3n9KUkEEeDys30jXlYsQab5xoq2Z0B15R97QNKyvDb6KkBPvVWmckejkk9u+UJueBPSZI9FoJA +zMxZxuY67RIuaTxslbH9qh17f4a+Hg4yRvv7E491f0yLS0Zj/gA0QHDBw7mh3aZw4gSzQbzpgJHq +ZJx64SIDqZxubw5lT2yHh17zbqD5daWbQOhTsiedSrnAdyGN/4fy3ryM7xfft0kL0fJuMAsaDk52 +7RH89elWsn2/x20Kk4yl0MC2Hb46TpSi125sC8KKfPog88Tk5c0NqMuRkrF8hey1FGlmDoLnzc7I +LaZRfyHBNVOFBkpdn627G190 +-----END CERTIFICATE----- + +USERTrust RSA Certification Authority +===================================== +-----BEGIN CERTIFICATE----- +MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCBiDELMAkGA1UE +BhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQK +ExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkwHhcNMTAwMjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UE +BhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQK +ExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCAEmUXNg7D2wiz +0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2j +Y0K2dvKpOyuR+OJv0OwWIJAJPuLodMkYtJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFn +RghRy4YUVD+8M/5+bJz/Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O ++T23LLb2VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT79uq +/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6c0Plfg6lZrEpfDKE +Y1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmTYo61Zs8liM2EuLE/pDkP2QKe6xJM +lXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97lc6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8 +yexDJtC/QV9AqURE9JnnV4eeUB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+ +eLf8ZxXhyVeEHg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd +BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF +MAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPFUp/L+M+ZBn8b2kMVn54CVVeW +FPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KOVWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ +7l8wXEskEVX/JJpuXior7gtNn3/3ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQ +Eg9zKC7F4iRO/Fjs8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM +8WcRiQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYzeSf7dNXGi +FSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZXHlKYC6SQK5MNyosycdi +yA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9c +J2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRBVXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGw +sAvgnEzDHNb842m1R0aBL6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gx +Q+6IHdfGjjxDah2nGN59PRbxYvnKkKj9 +-----END CERTIFICATE----- + +USERTrust ECC Certification Authority +===================================== +-----BEGIN CERTIFICATE----- +MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDELMAkGA1UEBhMC +VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU +aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkwHhcNMTAwMjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMC +VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU +aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqfloI+d61SRvU8Za2EurxtW2 +0eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinngo4N+LZfQYcTxmdwlkWOrfzCjtHDix6Ez +nPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0GA1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNV +HQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBB +HU6+4WMBzzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbWRNZu +9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg= +-----END CERTIFICATE----- + +GlobalSign ECC Root CA - R4 +=========================== +-----BEGIN CERTIFICATE----- +MIIB4TCCAYegAwIBAgIRKjikHJYKBN5CsiilC+g0mAIwCgYIKoZIzj0EAwIwUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI0MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoXDTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI0MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEuMZ5049sJQ6fLjkZHAOkrprl +OQcJFspjsbmG+IpXwVfOQvpzofdlQv8ewQCybnMO/8ch5RikqtlxP6jUuc6MHaNCMEAwDgYDVR0P +AQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFSwe61FuOJAf/sKbvu+M8k8o4TV +MAoGCCqGSM49BAMCA0gAMEUCIQDckqGgE6bPA7DmxCGXkPoUVy0D7O48027KqGx2vKLeuwIgJ6iF +JzWbVsaj8kfSt24bAgAXqmemFZHe+pTsewv4n4Q= +-----END CERTIFICATE----- + +GlobalSign ECC Root CA - R5 +=========================== +-----BEGIN CERTIFICATE----- +MIICHjCCAaSgAwIBAgIRYFlJ4CYuu1X5CneKcflK2GwwCgYIKoZIzj0EAwMwUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoXDTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAER0UOlvt9Xb/pOdEh+J8LttV7HpI6 +SFkc8GIxLcB6KP4ap1yztsyX50XUWPrRd21DosCHZTQKH3rd6zwzocWdTaRvQZU4f8kehOvRnkmS +h5SHDDqFSmafnVmTTZdhBoZKo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd +BgNVHQ4EFgQUPeYpSJvqB8ohREom3m7e0oPQn1kwCgYIKoZIzj0EAwMDaAAwZQIxAOVpEslu28Yx +uglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7 +yFz9SO8NdCKoCOJuxUnOxwy8p2Fp8fc74SrL+SvzZpA3 +-----END CERTIFICATE----- + +Staat der Nederlanden Root CA - G3 +================================== +-----BEGIN CERTIFICATE----- +MIIFdDCCA1ygAwIBAgIEAJiiOTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJOTDEeMBwGA1UE +CgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFhdCBkZXIgTmVkZXJsYW5kZW4g +Um9vdCBDQSAtIEczMB4XDTEzMTExNDExMjg0MloXDTI4MTExMzIzMDAwMFowWjELMAkGA1UEBhMC +TkwxHjAcBgNVBAoMFVN0YWF0IGRlciBOZWRlcmxhbmRlbjErMCkGA1UEAwwiU3RhYXQgZGVyIE5l +ZGVybGFuZGVuIFJvb3QgQ0EgLSBHMzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4y +olQPcPssXFnrbMSkUeiFKrPMSjTysF/zDsccPVMeiAho2G89rcKezIJnByeHaHE6n3WWIkYFsO2t +x1ueKt6c/DrGlaf1F2cY5y9JCAxcz+bMNO14+1Cx3Gsy8KL+tjzk7FqXxz8ecAgwoNzFs21v0IJy +EavSgWhZghe3eJJg+szeP4TrjTgzkApyI/o1zCZxMdFyKJLZWyNtZrVtB0LrpjPOktvA9mxjeM3K +Tj215VKb8b475lRgsGYeCasH/lSJEULR9yS6YHgamPfJEf0WwTUaVHXvQ9Plrk7O53vDxk5hUUur +mkVLoR9BvUhTFXFkC4az5S6+zqQbwSmEorXLCCN2QyIkHxcE1G6cxvx/K2Ya7Irl1s9N9WMJtxU5 +1nus6+N86U78dULI7ViVDAZCopz35HCz33JvWjdAidiFpNfxC95DGdRKWCyMijmev4SH8RY7Ngzp +07TKbBlBUgmhHbBqv4LvcFEhMtwFdozL92TkA1CvjJFnq8Xy7ljY3r735zHPbMk7ccHViLVlvMDo +FxcHErVc0qsgk7TmgoNwNsXNo42ti+yjwUOH5kPiNL6VizXtBznaqB16nzaeErAMZRKQFWDZJkBE +41ZgpRDUajz9QdwOWke275dhdU/Z/seyHdTtXUmzqWrLZoQT1Vyg3N9udwbRcXXIV2+vD3dbAgMB +AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRUrfrHkleu +yjWcLhL75LpdINyUVzANBgkqhkiG9w0BAQsFAAOCAgEAMJmdBTLIXg47mAE6iqTnB/d6+Oea31BD +U5cqPco8R5gu4RV78ZLzYdqQJRZlwJ9UXQ4DO1t3ApyEtg2YXzTdO2PCwyiBwpwpLiniyMMB8jPq +KqrMCQj3ZWfGzd/TtiunvczRDnBfuCPRy5FOCvTIeuXZYzbB1N/8Ipf3YF3qKS9Ysr1YvY2WTxB1 +v0h7PVGHoTx0IsL8B3+A3MSs/mrBcDCw6Y5p4ixpgZQJut3+TcCDjJRYwEYgr5wfAvg1VUkvRtTA +8KCWAg8zxXHzniN9lLf9OtMJgwYh/WA9rjLA0u6NpvDntIJ8CsxwyXmA+P5M9zWEGYox+wrZ13+b +8KKaa8MFSu1BYBQw0aoRQm7TIwIEC8Zl3d1Sd9qBa7Ko+gE4uZbqKmxnl4mUnrzhVNXkanjvSr0r +mj1AfsbAddJu+2gw7OyLnflJNZoaLNmzlTnVHpL3prllL+U9bTpITAjc5CgSKL59NVzq4BZ+Extq +1z7XnvwtdbLBFNUjA9tbbws+eC8N3jONFrdI54OagQ97wUNNVQQXOEpR1VmiiXTTn74eS9fGbbeI +JG9gkaSChVtWQbzQRKtqE77RLFi3EjNYsjdj3BP1lB0/QFH1T/U67cjF68IeHRaVesd+QnGTbksV +tzDfqu1XhUisHWrdOWnk4Xl4vs4Fv6EM94B7IWcnMFk= +-----END CERTIFICATE----- + +Staat der Nederlanden EV Root CA +================================ +-----BEGIN CERTIFICATE----- +MIIFcDCCA1igAwIBAgIEAJiWjTANBgkqhkiG9w0BAQsFADBYMQswCQYDVQQGEwJOTDEeMBwGA1UE +CgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSkwJwYDVQQDDCBTdGFhdCBkZXIgTmVkZXJsYW5kZW4g +RVYgUm9vdCBDQTAeFw0xMDEyMDgxMTE5MjlaFw0yMjEyMDgxMTEwMjhaMFgxCzAJBgNVBAYTAk5M +MR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xKTAnBgNVBAMMIFN0YWF0IGRlciBOZWRl +cmxhbmRlbiBFViBSb290IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA48d+ifkk +SzrSM4M1LGns3Amk41GoJSt5uAg94JG6hIXGhaTK5skuU6TJJB79VWZxXSzFYGgEt9nCUiY4iKTW +O0Cmws0/zZiTs1QUWJZV1VD+hq2kY39ch/aO5ieSZxeSAgMs3NZmdO3dZ//BYY1jTw+bbRcwJu+r +0h8QoPnFfxZpgQNH7R5ojXKhTbImxrpsX23Wr9GxE46prfNeaXUmGD5BKyF/7otdBwadQ8QpCiv8 +Kj6GyzyDOvnJDdrFmeK8eEEzduG/L13lpJhQDBXd4Pqcfzho0LKmeqfRMb1+ilgnQ7O6M5HTp5gV +XJrm0w912fxBmJc+qiXbj5IusHsMX/FjqTf5m3VpTCgmJdrV8hJwRVXj33NeN/UhbJCONVrJ0yPr +08C+eKxCKFhmpUZtcALXEPlLVPxdhkqHz3/KRawRWrUgUY0viEeXOcDPusBCAUCZSCELa6fS/ZbV +0b5GnUngC6agIk440ME8MLxwjyx1zNDFjFE7PZQIZCZhfbnDZY8UnCHQqv0XcgOPvZuM5l5Tnrmd +74K74bzickFbIZTTRTeU0d8JOV3nI6qaHcptqAqGhYqCvkIH1vI4gnPah1vlPNOePqc7nvQDs/nx +fRN0Av+7oeX6AHkcpmZBiFxgV6YuCcS6/ZrPpx9Aw7vMWgpVSzs4dlG4Y4uElBbmVvMCAwEAAaNC +MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP6rAJCYniT8qcwa +ivsnuL8wbqg7MA0GCSqGSIb3DQEBCwUAA4ICAQDPdyxuVr5Os7aEAJSrR8kN0nbHhp8dB9O2tLsI +eK9p0gtJ3jPFrK3CiAJ9Brc1AsFgyb/E6JTe1NOpEyVa/m6irn0F3H3zbPB+po3u2dfOWBfoqSmu +c0iH55vKbimhZF8ZE/euBhD/UcabTVUlT5OZEAFTdfETzsemQUHSv4ilf0X8rLiltTMMgsT7B/Zq +5SWEXwbKwYY5EdtYzXc7LMJMD16a4/CrPmEbUCTCwPTxGfARKbalGAKb12NMcIxHowNDXLldRqAN +b/9Zjr7dn3LDWyvfjFvO5QxGbJKyCqNMVEIYFRIYvdr8unRu/8G2oGTYqV9Vrp9canaW2HNnh/tN +f1zuacpzEPuKqf2evTY4SUmH9A4U8OmHuD+nT3pajnnUk+S7aFKErGzp85hwVXIy+TSrK0m1zSBi +5Dp6Z2Orltxtrpfs/J92VoguZs9btsmksNcFuuEnL5O7Jiqik7Ab846+HUCjuTaPPoIaGl6I6lD4 +WeKDRikL40Rc4ZW2aZCaFG+XroHPaO+Zmr615+F/+PoTRxZMzG0IQOeLeG9QgkRQP2YGiqtDhFZK +DyAthg710tvSeopLzaXoTvFeJiUBWSOgftL2fiFX1ye8FVdMpEbB4IMeDExNH08GGeL5qPQ6gqGy +eUN51q1veieQA6TqJIc/2b3Z6fJfUEkc7uzXLg== +-----END CERTIFICATE----- + +IdenTrust Commercial Root CA 1 +============================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBKMQswCQYDVQQG +EwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBS +b290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQwMTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzES +MBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENB +IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ld +hNlT3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU+ehcCuz/ +mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gpS0l4PJNgiCL8mdo2yMKi +1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1bVoE/c40yiTcdCMbXTMTEl3EASX2MN0C +XZ/g1Ue9tOsbobtJSdifWwLziuQkkORiT0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl +3ZBWzvurpWCdxJ35UrCLvYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzy +NeVJSQjKVsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZKdHzV +WYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHTc+XvvqDtMwt0viAg +xGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hvl7yTmvmcEpB4eoCHFddydJxVdHix +uuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5NiGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMC +AQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZI +hvcNAQELBQADggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH +6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwtLRvM7Kqas6pg +ghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93nAbowacYXVKV7cndJZ5t+qnt +ozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3+wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmV +YjzlVYA211QC//G5Xc7UI2/YRYRKW2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUX +feu+h1sXIFRRk0pTAwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/ro +kTLql1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG4iZZRHUe +2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZmUlO+KWA2yUPHGNiiskz +Z2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7R +cGzM7vRX+Bi6hG6H +-----END CERTIFICATE----- + +IdenTrust Public Sector Root CA 1 +================================= +-----BEGIN CERTIFICATE----- +MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBNMQswCQYDVQQG +EwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3Rv +ciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcNMzQwMTE2MTc1MzMyWjBNMQswCQYDVQQGEwJV +UzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3RvciBS +b290IENBIDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2IpT8pEiv6EdrCvsnduTy +P4o7ekosMSqMjbCpwzFrqHd2hCa2rIFCDQjrVVi7evi8ZX3yoG2LqEfpYnYeEe4IFNGyRBb06tD6 +Hi9e28tzQa68ALBKK0CyrOE7S8ItneShm+waOh7wCLPQ5CQ1B5+ctMlSbdsHyo+1W/CD80/HLaXI +rcuVIKQxKFdYWuSNG5qrng0M8gozOSI5Cpcu81N3uURF/YTLNiCBWS2ab21ISGHKTN9T0a9SvESf +qy9rg3LvdYDaBjMbXcjaY8ZNzaxmMc3R3j6HEDbhuaR672BQssvKplbgN6+rNBM5Jeg5ZuSYeqoS +mJxZZoY+rfGwyj4GD3vwEUs3oERte8uojHH01bWRNszwFcYr3lEXsZdMUD2xlVl8BX0tIdUAvwFn +ol57plzy9yLxkA2T26pEUWbMfXYD62qoKjgZl3YNa4ph+bz27nb9cCvdKTz4Ch5bQhyLVi9VGxyh +LrXHFub4qjySjmm2AcG1hp2JDws4lFTo6tyePSW8Uybt1as5qsVATFSrsrTZ2fjXctscvG29ZV/v +iDUqZi/u9rNl8DONfJhBaUYPQxxp+pu10GFqzcpL2UyQRqsVWaFHVCkugyhfHMKiq3IXAAaOReyL +4jM9f9oZRORicsPfIsbyVtTdX5Vy7W1f90gDW/3FKqD2cyOEEBsB5wIDAQABo0IwQDAOBgNVHQ8B +Af8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU43HgntinQtnbcZFrlJPrw6PRFKMw +DQYJKoZIhvcNAQELBQADggIBAEf63QqwEZE4rU1d9+UOl1QZgkiHVIyqZJnYWv6IAcVYpZmxI1Qj +t2odIFflAWJBF9MJ23XLblSQdf4an4EKwt3X9wnQW3IV5B4Jaj0z8yGa5hV+rVHVDRDtfULAj+7A +mgjVQdZcDiFpboBhDhXAuM/FSRJSzL46zNQuOAXeNf0fb7iAaJg9TaDKQGXSc3z1i9kKlT/YPyNt +GtEqJBnZhbMX73huqVjRI9PHE+1yJX9dsXNw0H8GlwmEKYBhHfpe/3OsoOOJuBxxFcbeMX8S3OFt +m6/n6J91eEyrRjuazr8FGF1NFTwWmhlQBJqymm9li1JfPFgEKCXAZmExfrngdbkaqIHWchezxQMx +NRF4eKLg6TCMf4DfWN88uieW4oA0beOY02QnrEh+KHdcxiVhJfiFDGX6xDIvpZgF5PgLZxYWxoK4 +Mhn5+bl53B/N66+rDt0b20XkeucC4pVd/GnwU2lhlXV5C15V5jgclKlZM57IcXR5f1GJtshquDDI +ajjDbp7hNxbqBWJMWxJH7ae0s1hWx0nzfxJoCTFx8G34Tkf71oXuxVhAGaQdp/lLQzfcaFpPz+vC +ZHTetBXZ9FRUGi8c15dxVJCO2SCdUyt/q4/i6jC8UDfv8Ue1fXwsBOxonbRJRBD0ckscZOf85muQ +3Wl9af0AVqW3rLatt8o+Ae+c +-----END CERTIFICATE----- + +Entrust Root Certification Authority - G2 +========================================= +-----BEGIN CERTIFICATE----- +MIIEPjCCAyagAwIBAgIESlOMKDANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMCVVMxFjAUBgNV +BAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVy +bXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ug +b25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIw +HhcNMDkwNzA3MTcyNTU0WhcNMzAxMjA3MTc1NTU0WjCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoT +DUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMx +OTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25s +eTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwggEi +MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hLZy254Ma+KZ6TABp3bqMriVQRrJ2mFOWHLP +/vaCeb9zYQYKpSfYs1/TRU4cctZOMvJyig/3gxnQaoCAAEUesMfnmr8SVycco2gvCoe9amsOXmXz +HHfV1IWNcCG0szLni6LVhjkCsbjSR87kyUnEO6fe+1R9V77w6G7CebI6C1XiUJgWMhNcL3hWwcKU +s/Ja5CeanyTXxuzQmyWC48zCxEXFjJd6BmsqEZ+pCm5IO2/b1BEZQvePB7/1U1+cPvQXLOZprE4y +TGJ36rfo5bs0vBmLrpxR57d+tVOxMyLlbc9wPBr64ptntoP0jaWvYkxN4FisZDQSA/i2jZRjJKRx +AgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqciZ6 +0B7vfec7aVHUbI2fkBJmqzANBgkqhkiG9w0BAQsFAAOCAQEAeZ8dlsa2eT8ijYfThwMEYGprmi5Z +iXMRrEPR9RP/jTkrwPK9T3CMqS/qF8QLVJ7UG5aYMzyorWKiAHarWWluBh1+xLlEjZivEtRh2woZ +Rkfz6/djwUAFQKXSt/S1mja/qYh2iARVBCuch38aNzx+LaUa2NSJXsq9rD1s2G2v1fN2D807iDgi +nWyTmsQ9v4IbZT+mD12q/OWyFcq1rca8PdCE6OoGcrBNOTJ4vz4RnAuknZoh8/CbCzB428Hch0P+ +vGOaysXCHMnHjf87ElgI5rY97HosTvuDls4MPGmHVHOkc8KT/1EQrBVUAdj8BbGJoX90g5pJ19xO +e4pIb4tF9g== +-----END CERTIFICATE----- + +Entrust Root Certification Authority - EC1 +========================================== +-----BEGIN CERTIFICATE----- +MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkGA1UEBhMCVVMx +FjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVn +YWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXpl +ZCB1c2Ugb25seTEzMDEGA1UEAxMqRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +IC0gRUMxMB4XDTEyMTIxODE1MjUzNloXDTM3MTIxODE1NTUzNlowgb8xCzAJBgNVBAYTAlVTMRYw +FAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2Fs +LXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQg +dXNlIG9ubHkxMzAxBgNVBAMTKkVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt +IEVDMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABIQTydC6bUF74mzQ61VfZgIaJPRbiWlH47jCffHy +AsWfoPZb1YsGGYZPUxBtByQnoaD41UcZYUx9ypMn6nQM72+WCf5j7HBdNq1nd67JnXxVRDqiY1Ef +9eNi1KlHBz7MIKNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE +FLdj5xrdjekIplWDpOBqUEFlEUJJMAoGCCqGSM49BAMDA2cAMGQCMGF52OVCR98crlOZF7ZvHH3h +vxGU0QOIdeSNiaSKd0bebWHvAvX7td/M/k7//qnmpwIwW5nXhTcGtXsI/esni0qU+eH6p44mCOh8 +kmhtc9hvJqwhAriZtyZBWyVgrtBIGu4G +-----END CERTIFICATE----- + +CFCA EV ROOT +============ +-----BEGIN CERTIFICATE----- +MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJDTjEwMC4GA1UE +CgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQDDAxDRkNB +IEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkxMjMxMDMwNzAxWjBWMQswCQYDVQQGEwJDTjEw +MC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQD +DAxDRkNBIEVWIFJPT1QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXXWvNED8fBVnV +BU03sQ7smCuOFR36k0sXgiFxEFLXUWRwFsJVaU2OFW2fvwwbwuCjZ9YMrM8irq93VCpLTIpTUnrD +7i7es3ElweldPe6hL6P3KjzJIx1qqx2hp/Hz7KDVRM8Vz3IvHWOX6Jn5/ZOkVIBMUtRSqy5J35DN +uF++P96hyk0g1CXohClTt7GIH//62pCfCqktQT+x8Rgp7hZZLDRJGqgG16iI0gNyejLi6mhNbiyW +ZXvKWfry4t3uMCz7zEasxGPrb382KzRzEpR/38wmnvFyXVBlWY9ps4deMm/DGIq1lY+wejfeWkU7 +xzbh72fROdOXW3NiGUgthxwG+3SYIElz8AXSG7Ggo7cbcNOIabla1jj0Ytwli3i/+Oh+uFzJlU9f +py25IGvPa931DfSCt/SyZi4QKPaXWnuWFo8BGS1sbn85WAZkgwGDg8NNkt0yxoekN+kWzqotaK8K +gWU6cMGbrU1tVMoqLUuFG7OA5nBFDWteNfB/O7ic5ARwiRIlk9oKmSJgamNgTnYGmE69g60dWIol +hdLHZR4tjsbftsbhf4oEIRUpdPA+nJCdDC7xij5aqgwJHsfVPKPtl8MeNPo4+QgO48BdK4PRVmrJ +tqhUUy54Mmc9gn900PvhtgVguXDbjgv5E1hvcWAQUhC5wUEJ73IfZzF4/5YFjQIDAQABo2MwYTAf +BgNVHSMEGDAWgBTj/i39KNALtbq2osS/BqoFjJP7LzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB +/wQEAwIBBjAdBgNVHQ4EFgQU4/4t/SjQC7W6tqLEvwaqBYyT+y8wDQYJKoZIhvcNAQELBQADggIB +ACXGumvrh8vegjmWPfBEp2uEcwPenStPuiB/vHiyz5ewG5zz13ku9Ui20vsXiObTej/tUxPQ4i9q +ecsAIyjmHjdXNYmEwnZPNDatZ8POQQaIxffu2Bq41gt/UP+TqhdLjOztUmCypAbqTuv0axn96/Ua +4CUqmtzHQTb3yHQFhDmVOdYLO6Qn+gjYXB74BGBSESgoA//vU2YApUo0FmZ8/Qmkrp5nGm9BC2sG +E5uPhnEFtC+NiWYzKXZUmhH4J/qyP5Hgzg0b8zAarb8iXRvTvyUFTeGSGn+ZnzxEk8rUQElsgIfX +BDrDMlI1Dlb4pd19xIsNER9Tyx6yF7Zod1rg1MvIB671Oi6ON7fQAUtDKXeMOZePglr4UeWJoBjn +aH9dCi77o0cOPaYjesYBx4/IXr9tgFa+iiS6M+qf4TIRnvHST4D2G0CvOJ4RUHlzEhLN5mydLIhy +PDCBBpEi6lmt2hkuIsKNuYyH4Ga8cyNfIWRjgEj1oDwYPZTISEEdQLpe/v5WOaHIz16eGWRGENoX +kbcFgKyLmZJ956LYBws2J+dIeWCKw9cTXPhyQN9Ky8+ZAAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3C +ekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su +-----END CERTIFICATE----- + +OISTE WISeKey Global Root GB CA +=============================== +-----BEGIN CERTIFICATE----- +MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBtMQswCQYDVQQG +EwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNl +ZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwgUm9vdCBHQiBDQTAeFw0xNDEyMDExNTAw +MzJaFw0zOTEyMDExNTEwMzFaMG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYD +VQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEds +b2JhbCBSb290IEdCIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be3HEokKtaX +scriHvt9OO+Y9bI5mE4nuBFde9IllIiCFSZqGzG7qFshISvYD06fWvGxWuR51jIjK+FTzJlFXHtP +rby/h0oLS5daqPZI7H17Dc0hBt+eFf1Biki3IPShehtX1F1Q/7pn2COZH8g/497/b1t3sWtuuMlk +9+HKQUYOKXHQuSP8yYFfTvdv37+ErXNku7dCjmn21HYdfp2nuFeKUWdy19SouJVUQHMD9ur06/4o +Qnc/nSMbsrY9gBQHTC5P99UKFg29ZkM3fiNDecNAhvVMKdqOmq0NpQSHiB6F4+lT1ZvIiwNjeOvg +GUpuuy9rM2RYk61pv48b74JIxwIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB +/zAdBgNVHQ4EFgQUNQ/INmNe4qPs+TtmFc5RUuORmj0wEAYJKwYBBAGCNxUBBAMCAQAwDQYJKoZI +hvcNAQELBQADggEBAEBM+4eymYGQfp3FsLAmzYh7KzKNbrghcViXfa43FK8+5/ea4n32cZiZBKpD +dHij40lhPnOMTZTg+XHEthYOU3gf1qKHLwI5gSk8rxWYITD+KJAAjNHhy/peyP34EEY7onhCkRd0 +VQreUGdNZtGn//3ZwLWoo4rOZvUPQ82nK1d7Y0Zqqi5S2PTt4W2tKZB4SLrhI6qjiey1q5bAtEui +HZeeevJuQHHfaPFlTc58Bd9TZaml8LGXBHAVRgOY1NK/VLSgWH1Sb9pWJmLU2NuJMW8c8CLC02Ic +Nc1MaRVUGpCY3useX8p3x8uOPUNpnJpY0CQ73xtAln41rYHHTnG6iBM= +-----END CERTIFICATE----- + +SZAFIR ROOT CA2 +=============== +-----BEGIN CERTIFICATE----- +MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQELBQAwUTELMAkG +A1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6ZW5pb3dhIFMuQS4xGDAWBgNV +BAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkwNzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJ +BgNVBAYTAlBMMSgwJgYDVQQKDB9LcmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYD +VQQDDA9TWkFGSVIgUk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5Q +qEvNQLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT3PSQ1hNK +DJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw3gAeqDRHu5rr/gsUvTaE +2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr63fE9biCloBK0TXC5ztdyO4mTp4CEHCdJ +ckm1/zuVnsHMyAHs6A6KCpbns6aH5db5BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwi +ieDhZNRnvDF5YTy7ykHNXGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P +AQH/BAQDAgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsFAAOC +AQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw8PRBEew/R40/cof5 +O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOGnXkZ7/e7DDWQw4rtTw/1zBLZpD67 +oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCPoky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul +4+vJhaAlIDf7js4MNIThPIGyd05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6 ++/NNIxuZMzSgLvWpCz/UXeHPhJ/iGcJfitYgHuNztw== +-----END CERTIFICATE----- + +Certum Trusted Network CA 2 +=========================== +-----BEGIN CERTIFICATE----- +MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCBgDELMAkGA1UE +BhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMuQS4xJzAlBgNVBAsTHkNlcnR1 +bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIGA1UEAxMbQ2VydHVtIFRydXN0ZWQgTmV0d29y +ayBDQSAyMCIYDzIwMTExMDA2MDgzOTU2WhgPMjA0NjEwMDYwODM5NTZaMIGAMQswCQYDVQQGEwJQ +TDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENl +cnRpZmljYXRpb24gQXV0aG9yaXR5MSQwIgYDVQQDExtDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENB +IDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9+Xj45tWADGSdhhuWZGc/IjoedQF9 +7/tcZ4zJzFxrqZHmuULlIEub2pt7uZld2ZuAS9eEQCsn0+i6MLs+CRqnSZXvK0AkwpfHp+6bJe+o +CgCXhVqqndwpyeI1B+twTUrWwbNWuKFBOJvR+zF/j+Bf4bE/D44WSWDXBo0Y+aomEKsq09DRZ40b +Rr5HMNUuctHFY9rnY3lEfktjJImGLjQ/KUxSiyqnwOKRKIm5wFv5HdnnJ63/mgKXwcZQkpsCLL2p +uTRZCr+ESv/f/rOf69me4Jgj7KZrdxYq28ytOxykh9xGc14ZYmhFV+SQgkK7QtbwYeDBoz1mo130 +GO6IyY0XRSmZMnUCMe4pJshrAua1YkV/NxVaI2iJ1D7eTiew8EAMvE0Xy02isx7QBlrd9pPPV3WZ +9fqGGmd4s7+W/jTcvedSVuWz5XV710GRBdxdaeOVDUO5/IOWOZV7bIBaTxNyxtd9KXpEulKkKtVB +Rgkg/iKgtlswjbyJDNXXcPiHUv3a76xRLgezTv7QCdpw75j6VuZt27VXS9zlLCUVyJ4ueE742pye +hizKV/Ma5ciSixqClnrDvFASadgOWkaLOusm+iPJtrCBvkIApPjW/jAux9JG9uWOdf3yzLnQh1vM +BhBgu4M1t15n3kfsmUjxpKEV/q2MYo45VU85FrmxY53/twIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MB0GA1UdDgQWBBS2oVQ5AsOgP46KvPrU+Bym0ToO/TAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZI +hvcNAQENBQADggIBAHGlDs7k6b8/ONWJWsQCYftMxRQXLYtPU2sQF/xlhMcQSZDe28cmk4gmb3DW +Al45oPePq5a1pRNcgRRtDoGCERuKTsZPpd1iHkTfCVn0W3cLN+mLIMb4Ck4uWBzrM9DPhmDJ2vuA +L55MYIR4PSFk1vtBHxgP58l1cb29XN40hz5BsA72udY/CROWFC/emh1auVbONTqwX3BNXuMp8SMo +clm2q8KMZiYcdywmdjWLKKdpoPk79SPdhRB0yZADVpHnr7pH1BKXESLjokmUbOe3lEu6LaTaM4tM +pkT/WjzGHWTYtTHkpjx6qFcL2+1hGsvxznN3Y6SHb0xRONbkX8eftoEq5IVIeVheO/jbAoJnwTnb +w3RLPTYe+SmTiGhbqEQZIfCn6IENLOiTNrQ3ssqwGyZ6miUfmpqAnksqP/ujmv5zMnHCnsZy4Ypo +J/HkD7TETKVhk/iXEAcqMCWpuchxuO9ozC1+9eB+D4Kob7a6bINDd82Kkhehnlt4Fj1F4jNy3eFm +ypnTycUm/Q1oBEauttmbjL4ZvrHG8hnjXALKLNhvSgfZyTXaQHXyxKcZb55CEJh15pWLYLztxRLX +is7VmFxWlgPF7ncGNf/P5O4/E2Hu29othfDNrp2yGAlFw5Khchf8R7agCyzxxN5DaAhqXzvwdmP7 +zAYspsbiDrW5viSP +-----END CERTIFICATE----- + +Hellenic Academic and Research Institutions RootCA 2015 +======================================================= +-----BEGIN CERTIFICATE----- +MIIGCzCCA/OgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBpjELMAkGA1UEBhMCR1IxDzANBgNVBAcT +BkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0 +aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl +YXJjaCBJbnN0aXR1dGlvbnMgUm9vdENBIDIwMTUwHhcNMTUwNzA3MTAxMTIxWhcNNDAwNjMwMTAx +MTIxWjCBpjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMg +QWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNV +BAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgUm9vdENBIDIw +MTUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDC+Kk/G4n8PDwEXT2QNrCROnk8Zlrv +bTkBSRq0t89/TSNTt5AA4xMqKKYx8ZEA4yjsriFBzh/a/X0SWwGDD7mwX5nh8hKDgE0GPt+sr+eh +iGsxr/CL0BgzuNtFajT0AoAkKAoCFZVedioNmToUW/bLy1O8E00BiDeUJRtCvCLYjqOWXjrZMts+ +6PAQZe104S+nfK8nNLspfZu2zwnI5dMK/IhlZXQK3HMcXM1AsRzUtoSMTFDPaI6oWa7CJ06CojXd +FPQf/7J31Ycvqm59JCfnxssm5uX+Zwdj2EUN3TpZZTlYepKZcj2chF6IIbjV9Cz82XBST3i4vTwr +i5WY9bPRaM8gFH5MXF/ni+X1NYEZN9cRCLdmvtNKzoNXADrDgfgXy5I2XdGj2HUb4Ysn6npIQf1F +GQatJ5lOwXBH3bWfgVMS5bGMSF0xQxfjjMZ6Y5ZLKTBOhE5iGV48zpeQpX8B653g+IuJ3SWYPZK2 +fu/Z8VFRfS0myGlZYeCsargqNhEEelC9MoS+L9xy1dcdFkfkR2YgP/SWxa+OAXqlD3pk9Q0Yh9mu +iNX6hME6wGkoLfINaFGq46V3xqSQDqE3izEjR8EJCOtu93ib14L8hCCZSRm2Ekax+0VVFqmjZayc +Bw/qa9wfLgZy7IaIEuQt218FL+TwA9MmM+eAws1CoRc0CwIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUcRVnyMjJvXVdctA4GGqd83EkVAswDQYJKoZI +hvcNAQELBQADggIBAHW7bVRLqhBYRjTyYtcWNl0IXtVsyIe9tC5G8jH4fOpCtZMWVdyhDBKg2mF+ +D1hYc2Ryx+hFjtyp8iY/xnmMsVMIM4GwVhO+5lFc2JsKT0ucVlMC6U/2DWDqTUJV6HwbISHTGzrM +d/K4kPFox/la/vot9L/J9UUbzjgQKjeKeaO04wlshYaT/4mWJ3iBj2fjRnRUjtkNaeJK9E10A/+y +d+2VZ5fkscWrv2oj6NSU4kQoYsRL4vDY4ilrGnB+JGGTe08DMiUNRSQrlrRGar9KC/eaj8GsGsVn +82800vpzY4zvFrCopEYq+OsS7HK07/grfoxSwIuEVPkvPuNVqNxmsdnhX9izjFk0WaSrT2y7Hxjb +davYy5LNlDhhDgcGH0tGEPEVvo2FXDtKK4F5D7Rpn0lQl033DlZdwJVqwjbDG2jJ9SrcR5q+ss7F +Jej6A7na+RZukYT1HCjI/CbM1xyQVqdfbzoEvM14iQuODy+jqk+iGxI9FghAD/FGTNeqewjBCvVt +J94Cj8rDtSvK6evIIVM4pcw72Hc3MKJP2W/R8kCtQXoXxdZKNYm3QdV8hn9VTYNKpXMgwDqvkPGa +JI7ZjnHKe7iG2rKPmT4dEw0SEe7Uq/DpFXYC5ODfqiAeW2GFZECpkJcNrVPSWh2HagCXZWK0vm9q +p/UsQu0yrbYhnr68 +-----END CERTIFICATE----- + +Hellenic Academic and Research Institutions ECC RootCA 2015 +=========================================================== +-----BEGIN CERTIFICATE----- +MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0 +aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9u +cyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj +aCBJbnN0aXR1dGlvbnMgRUNDIFJvb3RDQSAyMDE1MB4XDTE1MDcwNzEwMzcxMloXDTQwMDYzMDEw +MzcxMlowgaoxCzAJBgNVBAYTAkdSMQ8wDQYDVQQHEwZBdGhlbnMxRDBCBgNVBAoTO0hlbGxlbmlj +IEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUQwQgYD +VQQDEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIEVDQyBSb290 +Q0EgMjAxNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABJKgQehLgoRc4vgxEZmGZE4JJS+dQS8KrjVP +dJWyUWRrjWvmP3CV8AVER6ZyOFB2lQJajq4onvktTpnvLEhvTCUp6NFxW98dwXU3tNf6e3pCnGoK +Vlp8aQuqgAkkbH7BRqNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0O +BBYEFLQiC4KZJAEOnLvkDv2/+5cgk5kqMAoGCCqGSM49BAMCA2cAMGQCMGfOFmI4oqxiRaeplSTA +GiecMjvAwNW6qef4BENThe5SId6d9SWDPp5YSy/XZxMOIQIwBeF1Ad5o7SofTUwJCA3sS61kFyjn +dc5FZXIhF8siQQ6ME5g4mlRtm8rifOoCWCKR +-----END CERTIFICATE----- + +ISRG Root X1 +============ +-----BEGIN CERTIFICATE----- +MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAwTzELMAkGA1UE +BhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNoIEdyb3VwMRUwEwYDVQQD +EwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQG +EwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMT +DElTUkcgUm9vdCBYMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54r +Vygch77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+0TM8ukj1 +3Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6UA5/TR5d8mUgjU+g4rk8K +b4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sWT8KOEUt+zwvo/7V3LvSye0rgTBIlDHCN +Aymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyHB5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ +4Q7e2RCOFvu396j3x+UCB5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf +1b0SHzUvKBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWnOlFu +hjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTnjh8BCNAw1FtxNrQH +usEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbwqHyGO0aoSCqI3Haadr8faqU9GY/r +OPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CIrU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4G +A1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY +9umbbjANBgkqhkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL +ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ3BebYhtF8GaV +0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KKNFtY2PwByVS5uCbMiogziUwt +hDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJw +TdwJx4nLCgdNbOhdjsnvzqvHu7UrTkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nx +e5AW0wdeRlN8NwdCjNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZA +JzVcoyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq4RgqsahD +YVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPAmRGunUHBcnWEvgJBQl9n +JEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57demyPxgcYxn/eR44/KJ4EBs+lVDR3veyJ +m+kXQ99b21/+jh5Xos1AnX5iItreGCc= +-----END CERTIFICATE----- + +AC RAIZ FNMT-RCM +================ +-----BEGIN CERTIFICATE----- +MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsxCzAJBgNVBAYT +AkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJWiBGTk1ULVJDTTAeFw0wODEw +MjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJD +TTEZMBcGA1UECwwQQUMgUkFJWiBGTk1ULVJDTTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC +ggIBALpxgHpMhm5/yBNtwMZ9HACXjywMI7sQmkCpGreHiPibVmr75nuOi5KOpyVdWRHbNi63URcf +qQgfBBckWKo3Shjf5TnUV/3XwSyRAZHiItQDwFj8d0fsjz50Q7qsNI1NOHZnjrDIbzAzWHFctPVr +btQBULgTfmxKo0nRIBnuvMApGGWn3v7v3QqQIecaZ5JCEJhfTzC8PhxFtBDXaEAUwED653cXeuYL +j2VbPNmaUtu1vZ5Gzz3rkQUCwJaydkxNEJY7kvqcfw+Z374jNUUeAlz+taibmSXaXvMiwzn15Cou +08YfxGyqxRxqAQVKL9LFwag0Jl1mpdICIfkYtwb1TplvqKtMUejPUBjFd8g5CSxJkjKZqLsXF3mw +WsXmo8RZZUc1g16p6DULmbvkzSDGm0oGObVo/CK67lWMK07q87Hj/LaZmtVC+nFNCM+HHmpxffnT +tOmlcYF7wk5HlqX2doWjKI/pgG6BU6VtX7hI+cL5NqYuSf+4lsKMB7ObiFj86xsc3i1w4peSMKGJ +47xVqCfWS+2QrYv6YyVZLag13cqXM7zlzced0ezvXg5KkAYmY6252TUtB7p2ZSysV4999AeU14EC +ll2jB0nVetBX+RvnU0Z1qrB5QstocQjpYL05ac70r8NWQMetUqIJ5G+GR4of6ygnXYMgrwTJbFaa +i0b1AgMBAAGjgYMwgYAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE +FPd9xf3E6Jobd2Sn9R2gzL+HYJptMD4GA1UdIAQ3MDUwMwYEVR0gADArMCkGCCsGAQUFBwIBFh1o +dHRwOi8vd3d3LmNlcnQuZm5tdC5lcy9kcGNzLzANBgkqhkiG9w0BAQsFAAOCAgEAB5BK3/MjTvDD +nFFlm5wioooMhfNzKWtN/gHiqQxjAb8EZ6WdmF/9ARP67Jpi6Yb+tmLSbkyU+8B1RXxlDPiyN8+s +D8+Nb/kZ94/sHvJwnvDKuO+3/3Y3dlv2bojzr2IyIpMNOmqOFGYMLVN0V2Ue1bLdI4E7pWYjJ2cJ +j+F3qkPNZVEI7VFY/uY5+ctHhKQV8Xa7pO6kO8Rf77IzlhEYt8llvhjho6Tc+hj507wTmzl6NLrT +Qfv6MooqtyuGC2mDOL7Nii4LcK2NJpLuHvUBKwrZ1pebbuCoGRw6IYsMHkCtA+fdZn71uSANA+iW ++YJF1DngoABd15jmfZ5nc8OaKveri6E6FO80vFIOiZiaBECEHX5FaZNXzuvO+FB8TxxuBEOb+dY7 +Ixjp6o7RTUaN8Tvkasq6+yO3m/qZASlaWFot4/nUbQ4mrcFuNLwy+AwF+mWj2zs3gyLp1txyM/1d +8iC9djwj2ij3+RvrWWTV3F9yfiD8zYm1kGdNYno/Tq0dwzn+evQoFt9B9kiABdcPUXmsEKvU7ANm +5mqwujGSQkBqvjrTcuFqN1W8rB2Vt2lh8kORdOag0wokRqEIr9baRRmW1FMdW4R58MD3R++Lj8UG +rp1MYp3/RgT408m2ECVAdf4WqslKYIYvuu8wd+RU4riEmViAqhOLUTpPSPaLtrM= +-----END CERTIFICATE----- + +Amazon Root CA 1 +================ +-----BEGIN CERTIFICATE----- +MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsFADA5MQswCQYD +VQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAxMB4XDTE1 +MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpv +bjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBALJ4gHHKeNXjca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgH +FzZM9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qwIFAGbHrQ +gLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6VOujw5H5SNz/0egwLX0t +dHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L93FcXmn/6pUCyziKrlA4b9v7LWIbxcce +VOF34GfID5yHI9Y/QCB/IIDEgEw+OyQmjgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB +/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3 +DQEBCwUAA4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDIU5PM +CCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUsN+gDS63pYaACbvXy +8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vvo/ufQJVtMVT8QtPHRh8jrdkPSHCa +2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2 +xJNDd2ZhwLnoQdeXeGADbkpyrqXRfboQnoZsG4q5WTP468SQvvG5 +-----END CERTIFICATE----- + +Amazon Root CA 2 +================ +-----BEGIN CERTIFICATE----- +MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwFADA5MQswCQYD +VQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAyMB4XDTE1 +MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpv +bjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC +ggIBAK2Wny2cSkxKgXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4 +kHbZW0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg1dKmSYXp +N+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K8nu+NQWpEjTj82R0Yiw9 +AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvd +fLC6HM783k81ds8P+HgfajZRRidhW+mez/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAEx +kv8LV/SasrlX6avvDXbR8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSS +btqDT6ZjmUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz7Mt0 +Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6+XUyo05f7O0oYtlN +c/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI0u1ufm8/0i2BWSlmy5A5lREedCf+ +3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSw +DPBMMPQFWAJI/TPlUq9LhONmUjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oA +A7CXDpO8Wqj2LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY ++gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kSk5Nrp+gvU5LE +YFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl7uxMMne0nxrpS10gxdr9HIcW +xkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygmbtmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQ +gj9sAq+uEjonljYE1x2igGOpm/HlurR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbW +aQbLU8uz/mtBzUF+fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoV +Yh63n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE76KlXIx3 +KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H9jVlpNMKVv/1F2Rs76gi +JUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT4PsJYGw= +-----END CERTIFICATE----- + +Amazon Root CA 3 +================ +-----BEGIN CERTIFICATE----- +MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5MQswCQYDVQQG +EwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAzMB4XDTE1MDUy +NjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZ +MBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZB +f8ANm+gBG1bG8lKlui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjr +Zt6jQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSrttvXBp43 +rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkrBqWTrBqYaGFy+uGh0Psc +eGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteMYyRIHN8wfdVoOw== +-----END CERTIFICATE----- + +Amazon Root CA 4 +================ +-----BEGIN CERTIFICATE----- +MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5MQswCQYDVQQG +EwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSA0MB4XDTE1MDUy +NjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZ +MBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN +/sGKe0uoe0ZLY7Bi9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri +83BkM6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV +HQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WBMAoGCCqGSM49BAMDA2gA +MGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlwCkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1 +AE47xDqUEpHJWEadIRNyp4iciuRMStuW1KyLa2tJElMzrdfkviT8tQp21KW8EA== +-----END CERTIFICATE----- + +TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 +============================================= +-----BEGIN CERTIFICATE----- +MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIxGDAWBgNVBAcT +D0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxpbXNlbCB2ZSBUZWtub2xvamlr +IEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0wKwYDVQQLEyRLYW11IFNlcnRpZmlrYXN5b24g +TWVya2V6aSAtIEthbXUgU00xNjA0BgNVBAMTLVRVQklUQUsgS2FtdSBTTSBTU0wgS29rIFNlcnRp +ZmlrYXNpIC0gU3VydW0gMTAeFw0xMzExMjUwODI1NTVaFw00MzEwMjUwODI1NTVaMIHSMQswCQYD +VQQGEwJUUjEYMBYGA1UEBxMPR2ViemUgLSBLb2NhZWxpMUIwQAYDVQQKEzlUdXJraXllIEJpbGlt +c2VsIHZlIFRla25vbG9qaWsgQXJhc3Rpcm1hIEt1cnVtdSAtIFRVQklUQUsxLTArBgNVBAsTJEth +bXUgU2VydGlmaWthc3lvbiBNZXJrZXppIC0gS2FtdSBTTTE2MDQGA1UEAxMtVFVCSVRBSyBLYW11 +IFNNIFNTTCBLb2sgU2VydGlmaWthc2kgLSBTdXJ1bSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEAr3UwM6q7a9OZLBI3hNmNe5eA027n/5tQlT6QlVZC1xl8JoSNkvoBHToP4mQ4t4y8 +6Ij5iySrLqP1N+RAjhgleYN1Hzv/bKjFxlb4tO2KRKOrbEz8HdDc72i9z+SqzvBV96I01INrN3wc +wv61A+xXzry0tcXtAA9TNypN9E8Mg/uGz8v+jE69h/mniyFXnHrfA2eJLJ2XYacQuFWQfw4tJzh0 +3+f92k4S400VIgLI4OD8D62K18lUUMw7D8oWgITQUVbDjlZ/iSIzL+aFCr2lqBs23tPcLG07xxO9 +WSMs5uWk99gL7eqQQESolbuT1dCANLZGeA4fAJNG4e7p+exPFwIDAQABo0IwQDAdBgNVHQ4EFgQU +ZT/HiobGPN08VFw1+DrtUgxHV8gwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJ +KoZIhvcNAQELBQADggEBACo/4fEyjq7hmFxLXs9rHmoJ0iKpEsdeV31zVmSAhHqT5Am5EM2fKifh +AHe+SMg1qIGf5LgsyX8OsNJLN13qudULXjS99HMpw+0mFZx+CFOKWI3QSyjfwbPfIPP54+M638yc +lNhOT8NrF7f3cuitZjO1JVOr4PhMqZ398g26rrnZqsZr+ZO7rqu4lzwDGrpDxpa5RXI4s6ehlj2R +e37AIVNMh+3yC1SVUZPVIqUNivGTDj5UDrDYyU7c8jEyVupk+eq1nRZmQnLzf9OxMUP8pI4X8W0j +q5Rm+K37DwhuJi1/FwcJsoz7UMCflo3Ptv0AnVoUmr8CRPXBwp8iXqIPoeM= +-----END CERTIFICATE----- + +GDCA TrustAUTH R5 ROOT +====================== +-----BEGIN CERTIFICATE----- +MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UEBhMCQ04xMjAw +BgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZIENPLixMVEQuMR8wHQYDVQQD +DBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0MTEyNjA1MTMxNVoXDTQwMTIzMTE1NTk1OVow +YjELMAkGA1UEBhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ +IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEA2aMW8Mh0dHeb7zMNOwZ+Vfy1YI92hhJCfVZmPoiC7XJjDp6L3TQs +AlFRwxn9WVSEyfFrs0yw6ehGXTjGoqcuEVe6ghWinI9tsJlKCvLriXBjTnnEt1u9ol2x8kECK62p +OqPseQrsXzrj/e+APK00mxqriCZ7VqKChh/rNYmDf1+uKU49tm7srsHwJ5uu4/Ts765/94Y9cnrr +pftZTqfrlYwiOXnhLQiPzLyRuEH3FMEjqcOtmkVEs7LXLM3GKeJQEK5cy4KOFxg2fZfmiJqwTTQJ +9Cy5WmYqsBebnh52nUpmMUHfP/vFBu8btn4aRjb3ZGM74zkYI+dndRTVdVeSN72+ahsmUPI2JgaQ +xXABZG12ZuGR224HwGGALrIuL4xwp9E7PLOR5G62xDtw8mySlwnNR30YwPO7ng/Wi64HtloPzgsM +R6flPri9fcebNaBhlzpBdRfMK5Z3KpIhHtmVdiBnaM8Nvd/WHwlqmuLMc3GkL30SgLdTMEZeS1SZ +D2fJpcjyIMGC7J0R38IC+xo70e0gmu9lZJIQDSri3nDxGGeCjGHeuLzRL5z7D9Ar7Rt2ueQ5Vfj4 +oR24qoAATILnsn8JuLwwoC8N9VKejveSswoAHQBUlwbgsQfZxw9cZX08bVlX5O2ljelAU58VS6Bx +9hoh49pwBiFYFIeFd3mqgnkCAwEAAaNCMEAwHQYDVR0OBBYEFOLJQJ9NzuiaoXzPDj9lxSmIahlR +MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQDRSVfg +p8xoWLoBDysZzY2wYUWsEe1jUGn4H3++Fo/9nesLqjJHdtJnJO29fDMylyrHBYZmDRd9FBUb1Ov9 +H5r2XpdptxolpAqzkT9fNqyL7FeoPueBihhXOYV0GkLH6VsTX4/5COmSdI31R9KrO9b7eGZONn35 +6ZLpBN79SWP8bfsUcZNnL0dKt7n/HipzcEYwv1ryL3ml4Y0M2fmyYzeMN2WFcGpcWwlyua1jPLHd ++PwyvzeG5LuOmCd+uh8W4XAR8gPfJWIyJyYYMoSf/wA6E7qaTfRPuBRwIrHKK5DOKcFw9C+df/KQ +HtZa37dG/OaG+svgIHZ6uqbL9XzeYqWxi+7egmaKTjowHz+Ay60nugxe19CxVsp3cbK1daFQqUBD +F8Io2c9Si1vIY9RCPqAzekYu9wogRlR+ak8x8YF+QnQ4ZXMn7sZ8uI7XpTrXmKGcjBBV09tL7ECQ +8s1uV9JiDnxXk7Gnbc2dg7sq5+W2O3FYrf3RRbxake5TFW/TRQl1brqQXR4EzzffHqhmsYzmIGrv +/EhOdJhCrylvLmrH+33RZjEizIYAfmaDDEL0vTSSwxrqT8p+ck0LcIymSLumoRT2+1hEmRSuqguT +aaApJUqlyyvdimYHFngVV3Eb7PVHhPOeMTd61X8kreS8/f3MboPoDKi3QWwH3b08hpcv0g== +-----END CERTIFICATE----- + +TrustCor RootCert CA-1 +====================== +-----BEGIN CERTIFICATE----- +MIIEMDCCAxigAwIBAgIJANqb7HHzA7AZMA0GCSqGSIb3DQEBCwUAMIGkMQswCQYDVQQGEwJQQTEP +MA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEkMCIGA1UECgwbVHJ1c3RDb3Ig +U3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5UcnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3Jp +dHkxHzAdBgNVBAMMFlRydXN0Q29yIFJvb3RDZXJ0IENBLTEwHhcNMTYwMjA0MTIzMjE2WhcNMjkx +MjMxMTcyMzE2WjCBpDELMAkGA1UEBhMCUEExDzANBgNVBAgMBlBhbmFtYTEUMBIGA1UEBwwLUGFu +YW1hIENpdHkxJDAiBgNVBAoMG1RydXN0Q29yIFN5c3RlbXMgUy4gZGUgUi5MLjEnMCUGA1UECwwe +VHJ1c3RDb3IgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MR8wHQYDVQQDDBZUcnVzdENvciBSb290Q2Vy +dCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv463leLCJhJrMxnHQFgKq1mq +jQCj/IDHUHuO1CAmujIS2CNUSSUQIpidRtLByZ5OGy4sDjjzGiVoHKZaBeYei0i/mJZ0PmnK6bV4 +pQa81QBeCQryJ3pS/C3Vseq0iWEk8xoT26nPUu0MJLq5nux+AHT6k61sKZKuUbS701e/s/OojZz0 +JEsq1pme9J7+wH5COucLlVPat2gOkEz7cD+PSiyU8ybdY2mplNgQTsVHCJCZGxdNuWxu72CVEY4h +gLW9oHPY0LJ3xEXqWib7ZnZ2+AYfYW0PVcWDtxBWcgYHpfOxGgMFZA6dWorWhnAbJN7+KIor0Gqw +/Hqi3LJ5DotlDwIDAQABo2MwYTAdBgNVHQ4EFgQU7mtJPHo/DeOxCbeKyKsZn3MzUOcwHwYDVR0j +BBgwFoAU7mtJPHo/DeOxCbeKyKsZn3MzUOcwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AYYwDQYJKoZIhvcNAQELBQADggEBACUY1JGPE+6PHh0RU9otRCkZoB5rMZ5NDp6tPVxBb5UrJKF5 +mDo4Nvu7Zp5I/5CQ7z3UuJu0h3U/IJvOcs+hVcFNZKIZBqEHMwwLKeXx6quj7LUKdJDHfXLy11yf +ke+Ri7fc7Waiz45mO7yfOgLgJ90WmMCV1Aqk5IGadZQ1nJBfiDcGrVmVCrDRZ9MZyonnMlo2HD6C +qFqTvsbQZJG2z9m2GM/bftJlo6bEjhcxwft+dtvTheNYsnd6djtsL1Ac59v2Z3kf9YKVmgenFK+P +3CghZwnS1k1aHBkcjndcw5QkPTJrS37UeJSDvjdNzl/HHk484IkzlQsPpTLWPFp5LBk= +-----END CERTIFICATE----- + +TrustCor RootCert CA-2 +====================== +-----BEGIN CERTIFICATE----- +MIIGLzCCBBegAwIBAgIIJaHfyjPLWQIwDQYJKoZIhvcNAQELBQAwgaQxCzAJBgNVBAYTAlBBMQ8w +DQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQwIgYDVQQKDBtUcnVzdENvciBT +eXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRydXN0Q29yIENlcnRpZmljYXRlIEF1dGhvcml0 +eTEfMB0GA1UEAwwWVHJ1c3RDb3IgUm9vdENlcnQgQ0EtMjAeFw0xNjAyMDQxMjMyMjNaFw0zNDEy +MzExNzI2MzlaMIGkMQswCQYDVQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5h +bWEgQ2l0eTEkMCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U +cnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxHzAdBgNVBAMMFlRydXN0Q29yIFJvb3RDZXJ0 +IENBLTIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCnIG7CKqJiJJWQdsg4foDSq8Gb +ZQWU9MEKENUCrO2fk8eHyLAnK0IMPQo+QVqedd2NyuCb7GgypGmSaIwLgQ5WoD4a3SwlFIIvl9Nk +RvRUqdw6VC0xK5mC8tkq1+9xALgxpL56JAfDQiDyitSSBBtlVkxs1Pu2YVpHI7TYabS3OtB0PAx1 +oYxOdqHp2yqlO/rOsP9+aij9JxzIsekp8VduZLTQwRVtDr4uDkbIXvRR/u8OYzo7cbrPb1nKDOOb +XUm4TOJXsZiKQlecdu/vvdFoqNL0Cbt3Nb4lggjEFixEIFapRBF37120Hapeaz6LMvYHL1cEksr1 +/p3C6eizjkxLAjHZ5DxIgif3GIJ2SDpxsROhOdUuxTTCHWKF3wP+TfSvPd9cW436cOGlfifHhi5q +jxLGhF5DUVCcGZt45vz27Ud+ez1m7xMTiF88oWP7+ayHNZ/zgp6kPwqcMWmLmaSISo5uZk3vFsQP +eSghYA2FFn3XVDjxklb9tTNMg9zXEJ9L/cb4Qr26fHMC4P99zVvh1Kxhe1fVSntb1IVYJ12/+Ctg +rKAmrhQhJ8Z3mjOAPF5GP/fDsaOGM8boXg25NSyqRsGFAnWAoOsk+xWq5Gd/bnc/9ASKL3x74xdh +8N0JqSDIvgmk0H5Ew7IwSjiqqewYmgeCK9u4nBit2uBGF6zPXQIDAQABo2MwYTAdBgNVHQ4EFgQU +2f4hQG6UnrybPZx9mCAZ5YwwYrIwHwYDVR0jBBgwFoAU2f4hQG6UnrybPZx9mCAZ5YwwYrIwDwYD +VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggIBAJ5Fngw7tu/h +Osh80QA9z+LqBrWyOrsGS2h60COXdKcs8AjYeVrXWoSK2BKaG9l9XE1wxaX5q+WjiYndAfrs3fnp +kpfbsEZC89NiqpX+MWcUaViQCqoL7jcjx1BRtPV+nuN79+TMQjItSQzL/0kMmx40/W5ulop5A7Zv +2wnL/V9lFDfhOPXzYRZY5LVtDQsEGz9QLX+zx3oaFoBg+Iof6Rsqxvm6ARppv9JYx1RXCI/hOWB3 +S6xZhBqI8d3LT3jX5+EzLfzuQfogsL7L9ziUwOHQhQ+77Sxzq+3+knYaZH9bDTMJBzN7Bj8RpFxw +PIXAz+OQqIN3+tvmxYxoZxBnpVIt8MSZj3+/0WvitUfW2dCFmU2Umw9Lje4AWkcdEQOsQRivh7dv +DDqPys/cA8GiCcjl/YBeyGBCARsaU1q7N6a3vLqE6R5sGtRk2tRD/pOLS/IseRYQ1JMLiI+h2IYU +RpFHmygk71dSTlxCnKr3Sewn6EAes6aJInKc9Q0ztFijMDvd1GpUk74aTfOTlPf8hAs/hCBcNANE +xdqtvArBAs8e5ZTZ845b2EzwnexhF7sUMlQMAimTHpKG9n/v55IFDlndmQguLvqcAFLTxWYp5KeX +RKQOKIETNcX2b2TmQcTVL8w0RSXPQQCWPUouwpaYT05KnJe32x+SMsj/D1Fu1uwJ +-----END CERTIFICATE----- + +TrustCor ECA-1 +============== +-----BEGIN CERTIFICATE----- +MIIEIDCCAwigAwIBAgIJAISCLF8cYtBAMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYDVQQGEwJQQTEP +MA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEkMCIGA1UECgwbVHJ1c3RDb3Ig +U3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5UcnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3Jp +dHkxFzAVBgNVBAMMDlRydXN0Q29yIEVDQS0xMB4XDTE2MDIwNDEyMzIzM1oXDTI5MTIzMTE3Mjgw +N1owgZwxCzAJBgNVBAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5 +MSQwIgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRydXN0Q29y +IENlcnRpZmljYXRlIEF1dGhvcml0eTEXMBUGA1UEAwwOVHJ1c3RDb3IgRUNBLTEwggEiMA0GCSqG +SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj+ARtZ+odnbb3w9U73NjKYKtR8aja+3+XzP4Q1HpGjOR +MRegdMTUpwHmspI+ap3tDvl0mEDTPwOABoJA6LHip1GnHYMma6ve+heRK9jGrB6xnhkB1Zem6g23 +xFUfJ3zSCNV2HykVh0A53ThFEXXQmqc04L/NyFIduUd+Dbi7xgz2c1cWWn5DkR9VOsZtRASqnKmc +p0yJF4OuowReUoCLHhIlERnXDH19MURB6tuvsBzvgdAsxZohmz3tQjtQJvLsznFhBmIhVE5/wZ0+ +fyCMgMsq2JdiyIMzkX2woloPV+g7zPIlstR8L+xNxqE6FXrntl019fZISjZFZtS6mFjBAgMBAAGj +YzBhMB0GA1UdDgQWBBREnkj1zG1I1KBLf/5ZJC+Dl5mahjAfBgNVHSMEGDAWgBREnkj1zG1I1KBL +f/5ZJC+Dl5mahjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsF +AAOCAQEABT41XBVwm8nHc2FvcivUwo/yQ10CzsSUuZQRg2dd4mdsdXa/uwyqNsatR5Nj3B5+1t4u +/ukZMjgDfxT2AHMsWbEhBuH7rBiVDKP/mZb3Kyeb1STMHd3BOuCYRLDE5D53sXOpZCz2HAF8P11F +hcCF5yWPldwX8zyfGm6wyuMdKulMY/okYWLW2n62HGz1Ah3UKt1VkOsqEUc8Ll50soIipX1TH0Xs +J5F95yIW6MBoNtjG8U+ARDL54dHRHareqKucBK+tIA5kmE2la8BIWJZpTdwHjFGTot+fDz2LYLSC +jaoITmJF4PkL0uDgPFveXHEnJcLmA4GLEFPjx1WitJ/X5g== +-----END CERTIFICATE----- + +SSL.com Root Certification Authority RSA +======================================== +-----BEGIN CERTIFICATE----- +MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxDjAM +BgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24x +MTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBSU0EwHhcNMTYw +MjEyMTczOTM5WhcNNDEwMjEyMTczOTM5WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMx +EDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NM +LmNvbSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTCCAiIwDQYJKoZIhvcNAQEBBQAD +ggIPADCCAgoCggIBAPkP3aMrfcvQKv7sZ4Wm5y4bunfh4/WvpOz6Sl2RxFdHaxh3a3by/ZPkPQ/C +Fp4LZsNWlJ4Xg4XOVu/yFv0AYvUiCVToZRdOQbngT0aXqhvIuG5iXmmxX9sqAn78bMrzQdjt0Oj8 +P2FI7bADFB0QDksZ4LtO7IZl/zbzXmcCC52GVWH9ejjt/uIZALdvoVBidXQ8oPrIJZK0bnoix/ge +oeOy3ZExqysdBP+lSgQ36YWkMyv94tZVNHwZpEpox7Ko07fKoZOI68GXvIz5HdkihCR0xwQ9aqkp +k8zruFvh/l8lqjRYyMEjVJ0bmBHDOJx+PYZspQ9AhnwC9FwCTyjLrnGfDzrIM/4RJTXq/LrFYD3Z +fBjVsqnTdXgDciLKOsMf7yzlLqn6niy2UUb9rwPW6mBo6oUWNmuF6R7As93EJNyAKoFBbZQ+yODJ +gUEAnl6/f8UImKIYLEJAs/lvOCdLToD0PYFH4Ih86hzOtXVcUS4cK38acijnALXRdMbX5J+tB5O2 +UzU1/Dfkw/ZdFr4hc96SCvigY2q8lpJqPvi8ZVWb3vUNiSYE/CUapiVpy8JtynziWV+XrOvvLsi8 +1xtZPCvM8hnIk2snYxnP/Okm+Mpxm3+T/jRnhE6Z6/yzeAkzcLpmpnbtG3PrGqUNxCITIJRWCk4s +bE6x/c+cCbqiM+2HAgMBAAGjYzBhMB0GA1UdDgQWBBTdBAkHovV6fVJTEpKV7jiAJQ2mWTAPBgNV +HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFN0ECQei9Xp9UlMSkpXuOIAlDaZZMA4GA1UdDwEB/wQE +AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAIBgRlCn7Jp0cHh5wYfGVcpNxJK1ok1iOMq8bs3AD/CUr +dIWQPXhq9LmLpZc7tRiRux6n+UBbkflVma8eEdBcHadm47GUBwwyOabqG7B52B2ccETjit3E+ZUf +ijhDPwGFpUenPUayvOUiaPd7nNgsPgohyC0zrL/FgZkxdMF1ccW+sfAjRfSda/wZY52jvATGGAsl +u1OJD7OAUN5F7kR/q5R4ZJjT9ijdh9hwZXT7DrkT66cPYakylszeu+1jTBi7qUD3oFRuIIhxdRjq +erQ0cuAjJ3dctpDqhiVAq+8zD8ufgr6iIPv2tS0a5sKFsXQP+8hlAqRSAUfdSSLBv9jra6x+3uxj +MxW3IwiPxg+NQVrdjsW5j+VFP3jbutIbQLH+cU0/4IGiul607BXgk90IH37hVZkLId6Tngr75qNJ +vTYw/ud3sqB1l7UtgYgXZSD32pAAn8lSzDLKNXz1PQ/YK9f1JmzJBjSWFupwWRoyeXkLtoh/D1JI +Pb9s2KJELtFOt3JY04kTlf5Eq/jXixtunLwsoFvVagCvXzfh1foQC5ichucmj87w7G6KVwuA406y +wKBjYZC6VWg3dGq2ktufoYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NI +WuuA8ShYIc2wBlX7Jz9TkHCpBB5XJ7k= +-----END CERTIFICATE----- + +SSL.com Root Certification Authority ECC +======================================== +-----BEGIN CERTIFICATE----- +MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMCVVMxDjAMBgNV +BAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24xMTAv +BgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEy +MTgxNDAzWhcNNDEwMjEyMTgxNDAzWjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAO +BgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNv +bSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuBBAAiA2IA +BEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI7Z4INcgn64mMU1jrYor+ +8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPgCemB+vNH06NjMGEwHQYDVR0OBBYEFILR +hXMw5zUE044CkvvlpNHEIejNMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTT +jgKS++Wk0cQh6M0wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCW +e+0F+S8Tkdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+gA0z +5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl +-----END CERTIFICATE----- + +SSL.com EV Root Certification Authority RSA R2 +============================================== +-----BEGIN CERTIFICATE----- +MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAlVTMQ4w +DAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9u +MTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy +MB4XDTE3MDUzMTE4MTQzN1oXDTQyMDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQI +DAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYD +VQQDDC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMIICIjAN +BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvqM0fNTPl9fb69LT3w23jh +hqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssufOePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7w +cXHswxzpY6IXFJ3vG2fThVUCAtZJycxa4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTO +Zw+oz12WGQvE43LrrdF9HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+ +B6KjBSYRaZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcAb9Zh +CBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQGp8hLH94t2S42Oim +9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQVPWKchjgGAGYS5Fl2WlPAApiiECto +RHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMOpgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+Slm +JuwgUHfbSguPvuUCYHBBXtSuUDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48 ++qvWBkofZ6aYMBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV +HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa49QaAJadz20Zp +qJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBWs47LCp1Jjr+kxJG7ZhcFUZh1 +++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nx +Y/hoLVUE0fKNsKTPvDxeH3jnpaAgcLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2G +guDKBAdRUNf/ktUM79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDz +OFSz/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXtll9ldDz7 +CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEmKf7GUmG6sXP/wwyc5Wxq +lD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKKQbNmC1r7fSOl8hqw/96bg5Qu0T/fkreR +rwU7ZcegbLHNYhLDkBvjJc40vG93drEQw/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1 +hlMYegouCRw2n5H9gooiS9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX +9hwJ1C07mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w== +-----END CERTIFICATE----- + +SSL.com EV Root Certification Authority ECC +=========================================== +-----BEGIN CERTIFICATE----- +MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMCVVMxDjAMBgNV +BAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24xNDAy +BgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYw +MjEyMTgxNTIzWhcNNDEwMjEyMTgxNTIzWjB/MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMx +EDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE0MDIGA1UEAwwrU1NM +LmNvbSBFViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB +BAAiA2IABKoSR5CYG/vvw0AHgyBO8TCCogbR8pKGYfL2IWjKAMTH6kMAVIbc/R/fALhBYlzccBYy +3h+Z1MzFB8gIH2EWB1E9fVwHU+M1OIzfzZ/ZLg1KthkuWnBaBu2+8KGwytAJKaNjMGEwHQYDVR0O +BBYEFFvKXuXe0oGqzagtZFG22XKbl+ZPMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUW8pe +5d7SgarNqC1kUbbZcpuX5k8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2gAMGUCMQCK5kCJ +N+vp1RPZytRrJPOwPYdGWBrssd9v+1a6cGvHOMzosYxPD/fxZ3YOg9AeUY8CMD32IygmTMZgh5Mm +m7I1HrrW9zzRHM76JTymGoEVW/MSD2zuZYrJh6j5B+BimoxcSg== +-----END CERTIFICATE----- + +GlobalSign Root CA - R6 +======================= +-----BEGIN CERTIFICATE----- +MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEgMB4GA1UECxMX +R2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkds +b2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQxMjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9i +YWxTaWduIFJvb3QgQ0EgLSBSNjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFs +U2lnbjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQss +grRIxutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1kZguSgMpE +3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxDaNc9PIrFsmbVkJq3MQbF +vuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJwLnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqM +PKq0pPbzlUoSB239jLKJz9CgYXfIWHSw1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+ +azayOeSsJDa38O+2HBNXk7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05O +WgtH8wY2SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/hbguy +CLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4nWUx2OVvq+aWh2IMP +0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpYrZxCRXluDocZXFSxZba/jJvcE+kN +b7gu3GduyYsRtYQUigAZcIN5kZeR1BonvzceMgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQE +AwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNV +HSMEGDAWgBSubAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN +nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGtIxg93eFyRJa0 +lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr6155wsTLxDKZmOMNOsIeDjHfrY +BzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLjvUYAGm0CuiVdjaExUd1URhxN25mW7xocBFym +Fe944Hn+Xds+qkxV/ZoVqW/hpvvfcDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr +3TsTjxKM4kEaSHpzoHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB1 +0jZpnOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfspA9MRf/T +uTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+vJJUEeKgDu+6B5dpffItK +oZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+t +JDfLRVpOoERIyNiwmcUVhAn21klJwGW45hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA= +-----END CERTIFICATE----- + +OISTE WISeKey Global Root GC CA +=============================== +-----BEGIN CERTIFICATE----- +MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJD +SDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNlZDEo +MCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwgUm9vdCBHQyBDQTAeFw0xNzA1MDkwOTQ4MzRa +Fw00MjA1MDkwOTU4MzNaMG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQL +ExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2Jh +bCBSb290IEdDIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAETOlQwMYPchi82PG6s4nieUqjFqdr +VCTbUf/q9Akkwwsin8tqJ4KBDdLArzHkdIJuyiXZjHWd8dvQmqJLIX4Wp2OQ0jnUsYd4XxiWD1Ab +NTcPasbc2RNNpI6QN+a9WzGRo1QwUjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd +BgNVHQ4EFgQUSIcUrOPDnpBgOtfKie7TrYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0E +AwMDaAAwZQIwJsdpW9zV57LnyAyMjMPdeYwbY9XJUpROTYJKcx6ygISpJcBMWm1JKWB4E+J+SOtk +AjEA2zQgMgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9 +-----END CERTIFICATE----- + +GTS Root R1 +=========== +-----BEGIN CERTIFICATE----- +MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBHMQswCQYDVQQG +EwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJv +b3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAG +A1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx +9vaMf/vo27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vXmX7wCl7r +aKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7zUjwTcLCeoiKu7rPWRnW +r4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0PfyblqAj+lug8aJRT7oM6iCsVlgmy4HqM +LnXWnOunVmSPlk9orj2XwoSPwLxAwAtcvfaHszVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly +4cpk9+aCEI3oncKKiPo4Zor8Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr +06zqkUspzBmkMiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOORc92 +wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYWk70paDPvOmbsB4om +3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+DVrNVjzRlwW5y0vtOUucxD/SVRNu +JLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgFlQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD +VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEM +BQADggIBADiWCu49tJYeX++dnAsznyvgyv3SjgofQXSlfKqE1OXyHuY3UjKcC9FhHb8owbZEKTV1 +d5iyfNm9dKyKaOOpMQkpAWBz40d8U6iQSifvS9efk+eCNs6aaAyC58/UEBZvXw6ZXPYfcX3v73sv +fuo21pdwCxXu11xWajOl40k4DLh9+42FpLFZXvRq4d2h9mREruZRgyFmxhE+885H7pwoHyXa/6xm +ld01D1zvICxi/ZG6qcz8WpyTgYMpl0p8WnK0OdC3d8t5/Wk6kjftbjhlRn7pYL15iJdfOBL07q9b +gsiG1eGZbYwE8na6SfZu6W0eX6DvJ4J2QPim01hcDyxC2kLGe4g0x8HYRZvBPsVhHdljUEn2NIVq +4BjFbkerQUIpm/ZgDdIx02OYI5NaAIFItO/Nis3Jz5nu2Z6qNuFoS3FJFDYoOj0dzpqPJeaAcWEr +tXvM+SUWgeExX6GjfhaknBZqlxi9dnKlC54dNuYvoS++cJEPqOba+MSSQGwlfnuzCdyyF62ARPBo +pY+Udf90WuioAnwMCeKpSwughQtiue+hMZL77/ZRBIls6Kl0obsXs7X9SQ98POyDGCBDTtWTurQ0 +sR8WNh8M5mQ5Fkzc4P4dyKliPUDqysU0ArSuiYgzNdwsE3PYJ/HQcu51OyLemGhmW/HGY0dVHLql +CFF1pkgl +-----END CERTIFICATE----- + +GTS Root R2 +=========== +-----BEGIN CERTIFICATE----- +MIIFWjCCA0KgAwIBAgIQbkepxlqz5yDFMJo/aFLybzANBgkqhkiG9w0BAQwFADBHMQswCQYDVQQG +EwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJv +b3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAG +A1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTuk +k3LvCvptnfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY6Dlo +7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAuMC6C/Pq8tBcKSOWI +m8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7kRXuJVfeKH2JShBKzwkCX44ofR5Gm +dFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWgf9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbu +ak7MkogwTZq9TwtImoS1mKPV+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscsz +cTJGr61K8YzodDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW +Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKaG73Vululycsl +aVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCqgc7dGtxRcw1PcOnlthYhGXmy +5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD +VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEM +BQADggIBALZp8KZ3/p7uC4Gt4cCpx/k1HUCCq+YEtN/L9x0Pg/B+E02NjO7jMyLDOfxA325BS0JT +vhaI8dI4XsRomRyYUpOM52jtG2pzegVATX9lO9ZY8c6DR2Dj/5epnGB3GFW1fgiTz9D2PGcDFWEJ ++YF59exTpJ/JjwGLc8R3dtyDovUMSRqodt6Sm2T4syzFJ9MHwAiApJiS4wGWAqoC7o87xdFtCjMw +c3i5T1QWvwsHoaRc5svJXISPD+AVdyx+Jn7axEvbpxZ3B7DNdehyQtaVhJ2Gg/LkkM0JR9SLA3Da +WsYDQvTtN6LwG1BUSw7YhN4ZKJmBR64JGz9I0cNv4rBgF/XuIwKl2gBbbZCr7qLpGzvpx0QnRY5r +n/WkhLx3+WuXrD5RRaIRpsyF7gpo8j5QOHokYh4XIDdtak23CZvJ/KRY9bb7nE4Yu5UC56Gtmwfu +Nmsk0jmGwZODUNKBRqhfYlcsu2xkiAhu7xNUX90txGdj08+JN7+dIPT7eoOboB6BAFDC5AwiWVIQ +7UNWhwD4FFKnHYuTjKJNRn8nxnGbJN7k2oaLDX5rIMHAnuFl2GqjpuiFizoHCBy69Y9Vmhh1fuXs +gWbRIXOhNUQLgD1bnF5vKheW0YMjiGZt5obicDIvUiLnyOd/xCxgXS/Dr55FBcOEArf9LAhST4Ld +o/DUhgkC +-----END CERTIFICATE----- + +GTS Root R3 +=========== +-----BEGIN CERTIFICATE----- +MIICDDCCAZGgAwIBAgIQbkepx2ypcyRAiQ8DVd2NHTAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJV +UzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3Qg +UjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UE +ChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcq +hkjOPQIBBgUrgQQAIgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUU +Rout736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL24Cej +QjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTB8Sa6oC2uhYHP +0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEAgFukfCPAlaUs3L6JbyO5o91lAFJekazInXJ0 +glMLfalAvWhgxeG4VDvBNhcl2MG9AjEAnjWSdIUlUfUk7GRSJFClH9voy8l27OyCbvWFGFPouOOa +KaqW04MjyaR7YbPMAuhd +-----END CERTIFICATE----- + +GTS Root R4 +=========== +-----BEGIN CERTIFICATE----- +MIICCjCCAZGgAwIBAgIQbkepyIuUtui7OyrYorLBmTAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJV +UzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3Qg +UjQwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UE +ChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQwdjAQBgcq +hkjOPQIBBgUrgQQAIgNiAATzdHOnaItgrkO4NcWBMHtLSZ37wWHO5t5GvWvVYRg1rkDdc/eJkTBa +6zzuhXyiQHY7qca4R9gq55KRanPpsXI5nymfopjTX15YhmUPoYRlBtHci8nHc8iMai/lxKvRHYqj +QjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSATNbrdP9JNqPV +2Py1PsVq8JQdjDAKBggqhkjOPQQDAwNnADBkAjBqUFJ0CMRw3J5QdCHojXohw0+WbhXRIjVhLfoI +N+4Zba3bssx9BzT1YBkstTTZbyACMANxsbqjYAuG7ZoIapVon+Kz4ZNkfF6Tpt95LY2F45TPI11x +zPKwTdb+mciUqXWi4w== +-----END CERTIFICATE----- + +UCA Global G2 Root +================== +-----BEGIN CERTIFICATE----- +MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9MQswCQYDVQQG +EwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBHbG9iYWwgRzIgUm9vdDAeFw0x +NjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0xCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlU +cnVzdDEbMBkGA1UEAwwSVUNBIEdsb2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEAxeYrb3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmT +oni9kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzmVHqUwCoV +8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/RVogvGjqNO7uCEeBHANBS +h6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDcC/Vkw85DvG1xudLeJ1uK6NjGruFZfc8o +LTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIjtm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/ +R+zvWr9LesGtOxdQXGLYD0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBe +KW4bHAyvj5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6DlNaBa +4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6iIis7nCs+dwp4wwc +OxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznPO6Q0ibd5Ei9Hxeepl2n8pndntd97 +8XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O +BBYEFIHEjMz15DD/pQwIX4wVZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo +5sOASD0Ee/ojL3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5 +1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl1qnN3e92mI0A +Ds0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oUb3n09tDh05S60FdRvScFDcH9 +yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LVPtateJLbXDzz2K36uGt/xDYotgIVilQsnLAX +c47QN6MUPJiVAAwpBVueSUmxX8fjy88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHo +jhJi6IjMtX9Gl8CbEGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZk +bxqgDMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI+Vg7RE+x +ygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGyYiGqhkCyLmTTX8jjfhFn +RR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bXUB+K+wb1whnw0A== +-----END CERTIFICATE----- + +UCA Extended Validation Root +============================ +-----BEGIN CERTIFICATE----- +MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQG +EwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9u +IFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMxMDAwMDAwWjBHMQswCQYDVQQGEwJDTjERMA8G +A1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpCQcoEwKwmeBkqh5DFnpzsZGgdT6o+uM4AHrs +iWogD4vFsJszA1qGxliG1cGFu0/GnEBNyr7uaZa4rYEwmnySBesFK5pI0Lh2PpbIILvSsPGP2KxF +Rv+qZ2C0d35qHzwaUnoEPQc8hQ2E0B92CvdqFN9y4zR8V05WAT558aopO2z6+I9tTcg1367r3CTu +eUWnhbYFiN6IXSV8l2RnCdm/WhUFhvMJHuxYMjMR83dksHYf5BA1FxvyDrFspCqjc/wJHx4yGVMR +59mzLC52LqGj3n5qiAno8geK+LLNEOfic0CTuwjRP+H8C5SzJe98ptfRr5//lpr1kXuYC3fUfugH +0mK1lTnj8/FtDw5lhIpjVMWAtuCeS31HJqcBCF3RiJ7XwzJE+oJKCmhUfzhTA8ykADNkUVkLo4KR +el7sFsLzKuZi2irbWWIQJUoqgQtHB0MGcIfS+pMRKXpITeuUx3BNr2fVUbGAIAEBtHoIppB/TuDv +B0GHr2qlXov7z1CymlSvw4m6WC31MJixNnI5fkkE/SmnTHnkBVfblLkWU41Gsx2VYVdWf6/wFlth +WG82UBEL2KwrlRYaDh8IzTY0ZRBiZtWAXxQgXy0MoHgKaNYs1+lvK9JKBZP8nm9rZ/+I8U6laUpS +NwXqxhaN0sSZ0YIrO7o1dfdRUVjzyAfd5LQDfwIDAQABo0IwQDAdBgNVHQ4EFgQU2XQ65DA9DfcS +3H5aBZ8eNJr34RQwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQEL +BQADggIBADaNl8xCFWQpN5smLNb7rhVpLGsaGvdftvkHTFnq88nIua7Mui563MD1sC3AO6+fcAUR +ap8lTwEpcOPlDOHqWnzcSbvBHiqB9RZLcpHIojG5qtr8nR/zXUACE/xOHAbKsxSQVBcZEhrxH9cM +aVr2cXj0lH2RC47skFSOvG+hTKv8dGT9cZr4QQehzZHkPJrgmzI5c6sq1WnIeJEmMX3ixzDx/BR4 +dxIOE/TdFpS/S2d7cFOFyrC78zhNLJA5wA3CXWvp4uXViI3WLL+rG761KIcSF3Ru/H38j9CHJrAb ++7lsq+KePRXBOy5nAliRn+/4Qh8st2j1da3Ptfb/EX3C8CSlrdP6oDyp+l3cpaDvRKS+1ujl5BOW +F3sGPjLtx7dCvHaj2GU4Kzg1USEODm8uNBNA4StnDG1KQTAYI1oyVZnJF+A83vbsea0rWBmirSwi +GpWOvpaQXUJXxPkUAzUrHC1RVwinOt4/5Mi0A3PCwSaAuwtCH60NryZy2sy+s6ODWA2CxR9GUeOc +GMyNm43sSet1UNWMKFnKdDTajAshqx7qG+XH/RU+wBeq+yNuJkbL+vmxcmtpzyKEC2IPrNkZAJSi +djzULZrtBJ4tBmIQN1IchXIbJ+XMxjHsN+xjWZsLHXbMfjKaiJUINlK73nZfdklJrX+9ZSCyycEr +dhh2n1ax +-----END CERTIFICATE----- + +Certigna Root CA +================ +-----BEGIN CERTIFICATE----- +MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UE +BhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAwMiA0ODE0NjMwODEwMDAzNjEZ +MBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0xMzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjda +MFoxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYz +MDgxMDAwMzYxGTAXBgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sOty3tRQgX +stmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9MCiBtnyN6tMbaLOQdLNyz +KNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPuI9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8 +JXrJhFwLrN1CTivngqIkicuQstDuI7pmTLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16 +XdG+RCYyKfHx9WzMfgIhC59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq +4NYKpkDfePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3YzIoej +wpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWTCo/1VTp2lc5ZmIoJ +lXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1kJWumIWmbat10TWuXekG9qxf5kBdI +jzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp/ +/TBt2dzhauH8XwIDAQABo4IBGjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw +HQYDVR0OBBYEFBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of +1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczovL3d3d3cuY2Vy +dGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilodHRwOi8vY3JsLmNlcnRpZ25h +LmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYraHR0cDovL2NybC5kaGlteW90aXMuY29tL2Nl +cnRpZ25hcm9vdGNhLmNybDANBgkqhkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOIt +OoldaDgvUSILSo3L6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxP +TGRGHVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH60BGM+RFq +7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncBlA2c5uk5jR+mUYyZDDl3 +4bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdio2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd +8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS +6Cvu5zHbugRqh5jnxV/vfaci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaY +tlu3zM63Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayhjWZS +aX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw3kAP+HwV96LOPNde +E4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= +-----END CERTIFICATE----- + +emSign Root CA - G1 +=================== +-----BEGIN CERTIFICATE----- +MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYDVQQGEwJJTjET +MBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRl +ZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBHMTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgx +ODMwMDBaMGcxCzAJBgNVBAYTAklOMRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVk +aHJhIFRlY2hub2xvZ2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIB +IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQzf2N4aLTN +LnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO8oG0x5ZOrRkVUkr+PHB1 +cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aqd7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHW +DV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhMtTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ +6DqS0hdW5TUaQBw+jSztOd9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrH +hQIDAQABo0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQDAgEG +MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31xPaOfG1vR2vjTnGs2 +vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjMwiI/aTvFthUvozXGaCocV685743Q +NcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6dGNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q ++Mri/Tm3R7nrft8EI6/6nAYH6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeih +U80Bv2noWgbyRQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx +iN66zB+Afko= +-----END CERTIFICATE----- + +emSign ECC Root CA - G3 +======================= +-----BEGIN CERTIFICATE----- +MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQGEwJJTjETMBEG +A1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEg +MB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4 +MTgzMDAwWjBrMQswCQYDVQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11 +ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g +RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0WXTsuwYc +58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xySfvalY8L1X44uT6EYGQIr +MgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuBzhccLikenEhjQjAOBgNVHQ8BAf8EBAMC +AQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+D +CBeQyh+KTOgNG3qxrdWBCUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7 +jHvrZQnD+JbNR6iC8hZVdyR+EhCVBCyj +-----END CERTIFICATE----- + +emSign Root CA - C1 +=================== +-----BEGIN CERTIFICATE----- +MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkGA1UEBhMCVVMx +EzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNp +Z24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAwMFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UE +BhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQD +ExNlbVNpZ24gUm9vdCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+up +ufGZBczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZHdPIWoU/ +Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH3DspVpNqs8FqOp099cGX +OFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvHGPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4V +I5b2P/AgNBbeCsbEBEV5f6f9vtKppa+cxSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleooms +lMuoaJuvimUnzYnu3Yy1aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+ +XJGFehiqTbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQAD +ggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87/kOXSTKZEhVb3xEp +/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4kqNPEjE2NuLe/gDEo2APJ62gsIq1 +NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrGYQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9 +wC68AivTxEDkigcxHpvOJpkT+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQ +BmIMMMAVSKeoWXzhriKi4gp6D/piq1JM4fHfyr6DDUI= +-----END CERTIFICATE----- + +emSign ECC Root CA - C3 +======================= +-----BEGIN CERTIFICATE----- +MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQGEwJVUzETMBEG +A1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMxIDAeBgNVBAMTF2VtU2lnbiBF +Q0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAwMFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UE +BhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQD +ExdlbVNpZ24gRUNDIFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd +6bciMK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4OjavtisIGJAnB9 +SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0OBBYEFPtaSNCAIEDyqOkA +B2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MAoGCCqGSM49BAMDA2gA +MGUCMQC02C8Cif22TGK6Q04ThHK1rt0c3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwU +ZOR8loMRnLDRWmFLpg9J0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ== +-----END CERTIFICATE----- + +Hongkong Post Root CA 3 +======================= +-----BEGIN CERTIFICATE----- +MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQELBQAwbzELMAkG +A1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJSG9uZyBLb25nMRYwFAYDVQQK +Ew1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQb3N0IFJvb3QgQ0EgMzAeFw0xNzA2 +MDMwMjI5NDZaFw00MjA2MDMwMjI5NDZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtv +bmcxEjAQBgNVBAcTCUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMX +SG9uZ2tvbmcgUG9zdCBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz +iNfqzg8gTr7m1gNt7ln8wlffKWihgw4+aMdoWJwcYEuJQwy51BWy7sFOdem1p+/l6TWZ5Mwc50tf +jTMwIDNT2aa71T4Tjukfh0mtUC1Qyhi+AViiE3CWu4mIVoBc+L0sPOFMV4i707mV78vH9toxdCim +5lSJ9UExyuUmGs2C4HDaOym71QP1mbpV9WTRYA6ziUm4ii8F0oRFKHyPaFASePwLtVPLwpgchKOe +sL4jpNrcyCse2m5FHomY2vkALgbpDDtw1VAliJnLzXNg99X/NWfFobxeq81KuEXryGgeDQ0URhLj +0mRiikKYvLTGCAj4/ahMZJx2Ab0vqWwzD9g/KLg8aQFChn5pwckGyuV6RmXpwtZQQS4/t+TtbNe/ +JgERohYpSms0BpDsE9K2+2p20jzt8NYt3eEV7KObLyzJPivkaTv/ciWxNoZbx39ri1UbSsUgYT2u +y1DhCDq+sI9jQVMwCFk8mB13umOResoQUGC/8Ne8lYePl8X+l2oBlKN8W4UdKjk60FSh0Tlxnf0h ++bV78OLgAo9uliQlLKAeLKjEiafv7ZkGL7YKTE/bosw3Gq9HhS2KX8Q0NEwA/RiTZxPRN+ZItIsG +xVd7GYYKecsAyVKvQv83j+GjHno9UKtjBucVtT+2RTeUN7F+8kjDf8V1/peNRY8apxpyKBpADwID +AQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQXnc0e +i9Y5K3DTXNSguB+wAPzFYTAdBgNVHQ4EFgQUF53NHovWOStw01zUoLgfsAD8xWEwDQYJKoZIhvcN +AQELBQADggIBAFbVe27mIgHSQpsY1Q7XZiNc4/6gx5LS6ZStS6LG7BJ8dNVI0lkUmcDrudHr9Egw +W62nV3OZqdPlt9EuWSRY3GguLmLYauRwCy0gUCCkMpXRAJi70/33MvJJrsZ64Ee+bs7Lo3I6LWld +y8joRTnU+kLBEUx3XZL7av9YROXrgZ6voJmtvqkBZss4HTzfQx/0TW60uhdG/H39h4F5ag0zD/ov ++BS5gLNdTaqX4fnkGMX41TiMJjz98iji7lpJiCzfeT2OnpA8vUFKOt1b9pq0zj8lMH8yfaIDlNDc +eqFS3m6TjRgm/VWsvY+b0s+v54Ysyx8Jb6NvqYTUc79NoXQbTiNg8swOqn+knEwlqLJmOzj/2ZQw +9nKEvmhVEA/GcywWaZMH/rFF7buiVWqw2rVKAiUnhde3t4ZEFolsgCs+l6mc1X5VTMbeRRAc6uk7 +nwNT7u56AQIWeNTowr5GdogTPyK7SBIdUgC0An4hGh6cJfTzPV4e0hz5sy229zdcxsshTrD3mUcY +hcErulWuBurQB7Lcq9CClnXO0lD+mefPL5/ndtFhKvshuzHQqp9HpLIiyhY6UFfEW0NnxWViA0kB +60PZ2Pierc+xYw5F9KBaLJstxabArahH9CdMOA0uG0k7UvToiIMrVCjU8jVStDKDYmlkDJGcn5fq +dBb9HxEGmpv0 +-----END CERTIFICATE----- + +Entrust Root Certification Authority - G4 +========================================= +-----BEGIN CERTIFICATE----- +MIIGSzCCBDOgAwIBAgIRANm1Q3+vqTkPAAAAAFVlrVgwDQYJKoZIhvcNAQELBQAwgb4xCzAJBgNV +BAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3Qu +bmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxNSBFbnRydXN0LCBJbmMuIC0gZm9yIGF1 +dGhvcml6ZWQgdXNlIG9ubHkxMjAwBgNVBAMTKUVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1 +dGhvcml0eSAtIEc0MB4XDTE1MDUyNzExMTExNloXDTM3MTIyNzExNDExNlowgb4xCzAJBgNVBAYT +AlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0 +L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxNSBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhv +cml6ZWQgdXNlIG9ubHkxMjAwBgNVBAMTKUVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhv +cml0eSAtIEc0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsewsQu7i0TD/pZJH4i3D +umSXbcr3DbVZwbPLqGgZ2K+EbTBwXX7zLtJTmeH+H17ZSK9dE43b/2MzTdMAArzE+NEGCJR5WIoV +3imz/f3ET+iq4qA7ec2/a0My3dl0ELn39GjUu9CH1apLiipvKgS1sqbHoHrmSKvS0VnM1n4j5pds +8ELl3FFLFUHtSUrJ3hCX1nbB76W1NhSXNdh4IjVS70O92yfbYVaCNNzLiGAMC1rlLAHGVK/XqsEQ +e9IFWrhAnoanw5CGAlZSCXqc0ieCU0plUmr1POeo8pyvi73TDtTUXm6Hnmo9RR3RXRv06QqsYJn7 +ibT/mCzPfB3pAqoEmh643IhuJbNsZvc8kPNXwbMv9W3y+8qh+CmdRouzavbmZwe+LGcKKh9asj5X +xNMhIWNlUpEbsZmOeX7m640A2Vqq6nPopIICR5b+W45UYaPrL0swsIsjdXJ8ITzI9vF01Bx7owVV +7rtNOzK+mndmnqxpkCIHH2E6lr7lmk/MBTwoWdPBDFSoWWG9yHJM6Nyfh3+9nEg2XpWjDrk4JFX8 +dWbrAuMINClKxuMrLzOg2qOGpRKX/YAr2hRC45K9PvJdXmd0LhyIRyk0X+IyqJwlN4y6mACXi0mW +Hv0liqzc2thddG5msP9E36EYxr5ILzeUePiVSj9/E15dWf10hkNjc0kCAwEAAaNCMEAwDwYDVR0T +AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJ84xFYjwznooHFs6FRM5Og6sb9n +MA0GCSqGSIb3DQEBCwUAA4ICAQAS5UKme4sPDORGpbZgQIeMJX6tuGguW8ZAdjwD+MlZ9POrYs4Q +jbRaZIxowLByQzTSGwv2LFPSypBLhmb8qoMi9IsabyZIrHZ3CL/FmFz0Jomee8O5ZDIBf9PD3Vht +7LGrhFV0d4QEJ1JrhkzO3bll/9bGXp+aEJlLdWr+aumXIOTkdnrG0CSqkM0gkLpHZPt/B7NTeLUK +YvJzQ85BK4FqLoUWlFPUa19yIqtRLULVAJyZv967lDtX/Zr1hstWO1uIAeV8KEsD+UmDfLJ/fOPt +jqF/YFOOVZ1QNBIPt5d7bIdKROf1beyAN/BYGW5KaHbwH5Lk6rWS02FREAutp9lfx1/cH6NcjKF+ +m7ee01ZvZl4HliDtC3T7Zk6LERXpgUl+b7DUUH8i119lAg2m9IUe2K4GS0qn0jFmwvjO5QimpAKW +RGhXxNUzzxkvFMSUHHuk2fCfDrGA4tGeEWSpiBE6doLlYsKA2KSD7ZPvfC+QsDJMlhVoSFLUmQjA +JOgc47OlIQ6SwJAfzyBfyjs4x7dtOvPmRLgOMWuIjnDrnBdSqEGULoe256YSxXXfW8AKbnuk5F6G ++TaU33fD6Q3AOfF5u0aOq0NZJ7cguyPpVkAh7DE9ZapD8j3fcEThuk0mEDuYn/PIjhs4ViFqUZPT +kcpG2om3PVODLAgfi49T3f+sHw== +-----END CERTIFICATE----- + +Microsoft ECC Root Certificate Authority 2017 +============================================= +-----BEGIN CERTIFICATE----- +MIICWTCCAd+gAwIBAgIQZvI9r4fei7FK6gxXMQHC7DAKBggqhkjOPQQDAzBlMQswCQYDVQQGEwJV +UzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNyb3NvZnQgRUND +IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwHhcNMTkxMjE4MjMwNjQ1WhcNNDIwNzE4 +MjMxNjA0WjBlMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYw +NAYDVQQDEy1NaWNyb3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwdjAQ +BgcqhkjOPQIBBgUrgQQAIgNiAATUvD0CQnVBEyPNgASGAlEvaqiBYgtlzPbKnR5vSmZRogPZnZH6 +thaxjG7efM3beaYvzrvOcS/lpaso7GMEZpn4+vKTEAXhgShC48Zo9OYbhGBKia/teQ87zvH2RPUB +eMCjVDBSMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIy5lycFIM ++Oa+sgRXKSrPQhDtNTAQBgkrBgEEAYI3FQEEAwIBADAKBggqhkjOPQQDAwNoADBlAjBY8k3qDPlf +Xu5gKcs68tvWMoQZP3zVL8KxzJOuULsJMsbG7X7JNpQS5GiFBqIb0C8CMQCZ6Ra0DvpWSNSkMBaR +eNtUjGUBiudQZsIxtzm6uBoiB078a1QWIP8rtedMDE2mT3M= +-----END CERTIFICATE----- + +Microsoft RSA Root Certificate Authority 2017 +============================================= +-----BEGIN CERTIFICATE----- +MIIFqDCCA5CgAwIBAgIQHtOXCV/YtLNHcB6qvn9FszANBgkqhkiG9w0BAQwFADBlMQswCQYDVQQG +EwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNyb3NvZnQg +UlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwHhcNMTkxMjE4MjI1MTIyWhcNNDIw +NzE4MjMwMDIzWjBlMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u +MTYwNAYDVQQDEy1NaWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcw +ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKW76UM4wplZEWCpW9R2LBifOZNt9GkMml +7Xhqb0eRaPgnZ1AzHaGm++DlQ6OEAlcBXZxIQIJTELy/xztokLaCLeX0ZdDMbRnMlfl7rEqUrQ7e +S0MdhweSE5CAg2Q1OQT85elss7YfUJQ4ZVBcF0a5toW1HLUX6NZFndiyJrDKxHBKrmCk3bPZ7Pw7 +1VdyvD/IybLeS2v4I2wDwAW9lcfNcztmgGTjGqwu+UcF8ga2m3P1eDNbx6H7JyqhtJqRjJHTOoI+ +dkC0zVJhUXAoP8XFWvLJjEm7FFtNyP9nTUwSlq31/niol4fX/V4ggNyhSyL71Imtus5Hl0dVe49F +yGcohJUcaDDv70ngNXtk55iwlNpNhTs+VcQor1fznhPbRiefHqJeRIOkpcrVE7NLP8TjwuaGYaRS +MLl6IE9vDzhTyzMMEyuP1pq9KsgtsRx9S1HKR9FIJ3Jdh+vVReZIZZ2vUpC6W6IYZVcSn2i51BVr +lMRpIpj0M+Dt+VGOQVDJNE92kKz8OMHY4Xu54+OU4UZpyw4KUGsTuqwPN1q3ErWQgR5WrlcihtnJ +0tHXUeOrO8ZV/R4O03QK0dqq6mm4lyiPSMQH+FJDOvTKVTUssKZqwJz58oHhEmrARdlns87/I6KJ +ClTUFLkqqNfs+avNJVgyeY+QW5g5xAgGwax/Dj0ApQIDAQABo1QwUjAOBgNVHQ8BAf8EBAMCAYYw +DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUCctZf4aycI8awznjwNnpv7tNsiMwEAYJKwYBBAGC +NxUBBAMCAQAwDQYJKoZIhvcNAQEMBQADggIBAKyvPl3CEZaJjqPnktaXFbgToqZCLgLNFgVZJ8og +6Lq46BrsTaiXVq5lQ7GPAJtSzVXNUzltYkyLDVt8LkS/gxCP81OCgMNPOsduET/m4xaRhPtthH80 +dK2Jp86519efhGSSvpWhrQlTM93uCupKUY5vVau6tZRGrox/2KJQJWVggEbbMwSubLWYdFQl3JPk ++ONVFT24bcMKpBLBaYVu32TxU5nhSnUgnZUP5NbcA/FZGOhHibJXWpS2qdgXKxdJ5XbLwVaZOjex +/2kskZGT4d9Mozd2TaGf+G0eHdP67Pv0RR0Tbc/3WeUiJ3IrhvNXuzDtJE3cfVa7o7P4NHmJweDy +AmH3pvwPuxwXC65B2Xy9J6P9LjrRk5Sxcx0ki69bIImtt2dmefU6xqaWM/5TkshGsRGRxpl/j8nW +ZjEgQRCHLQzWwa80mMpkg/sTV9HB8Dx6jKXB/ZUhoHHBk2dxEuqPiAppGWSZI1b7rCoucL5mxAyE +7+WL85MB+GqQk2dLsmijtWKP6T+MejteD+eMuMZ87zf9dOLITzNy4ZQ5bb0Sr74MTnB8G2+NszKT +c0QWbej09+CVgI+WXTik9KveCjCHk9hNAHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D +5KbvtwEwXlGjefVwaaZBRA+GsCyRxj3qrg+E +-----END CERTIFICATE----- + +e-Szigno Root CA 2017 +===================== +-----BEGIN CERTIFICATE----- +MIICQDCCAeWgAwIBAgIMAVRI7yH9l1kN9QQKMAoGCCqGSM49BAMCMHExCzAJBgNVBAYTAkhVMREw +DwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMgTHRkLjEXMBUGA1UEYQwOVkFUSFUt +MjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25vIFJvb3QgQ0EgMjAxNzAeFw0xNzA4MjIxMjA3MDZa +Fw00MjA4MjIxMjA3MDZaMHExCzAJBgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UE +CgwNTWljcm9zZWMgTHRkLjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3pp +Z25vIFJvb3QgQ0EgMjAxNzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJbcPYrYsHtvxie+RJCx +s1YVe45DJH0ahFnuY2iyxl6H0BVIHqiQrb1TotreOpCmYF9oMrWGQd+HWyx7xf58etqjYzBhMA8G +A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSHERUI0arBeAyxr87GyZDv +vzAEwDAfBgNVHSMEGDAWgBSHERUI0arBeAyxr87GyZDvvzAEwDAKBggqhkjOPQQDAgNJADBGAiEA +tVfd14pVCzbhhkT61NlojbjcI4qKDdQvfepz7L9NbKgCIQDLpbQS+ue16M9+k/zzNY9vTlp8tLxO +svxyqltZ+efcMQ== +-----END CERTIFICATE----- + +certSIGN Root CA G2 +=================== +-----BEGIN CERTIFICATE----- +MIIFRzCCAy+gAwIBAgIJEQA0tk7GNi02MA0GCSqGSIb3DQEBCwUAMEExCzAJBgNVBAYTAlJPMRQw +EgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJR04gUk9PVCBDQSBHMjAeFw0xNzAy +MDYwOTI3MzVaFw00MjAyMDYwOTI3MzVaMEExCzAJBgNVBAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lH +TiBTQTEcMBoGA1UECxMTY2VydFNJR04gUk9PVCBDQSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIP +ADCCAgoCggIBAMDFdRmRfUR0dIf+DjuW3NgBFszuY5HnC2/OOwppGnzC46+CjobXXo9X69MhWf05 +N0IwvlDqtg+piNguLWkh59E3GE59kdUWX2tbAMI5Qw02hVK5U2UPHULlj88F0+7cDBrZuIt4Imfk +abBoxTzkbFpG583H+u/E7Eu9aqSs/cwoUe+StCmrqzWaTOTECMYmzPhpn+Sc8CnTXPnGFiWeI8Mg +wT0PPzhAsP6CRDiqWhqKa2NYOLQV07YRaXseVO6MGiKscpc/I1mbySKEwQdPzH/iV8oScLumZfNp +dWO9lfsbl83kqK/20U6o2YpxJM02PbyWxPFsqa7lzw1uKA2wDrXKUXt4FMMgL3/7FFXhEZn91Qqh +ngLjYl/rNUssuHLoPj1PrCy7Lobio3aP5ZMqz6WryFyNSwb/EkaseMsUBzXgqd+L6a8VTxaJW732 +jcZZroiFDsGJ6x9nxUWO/203Nit4ZoORUSs9/1F3dmKh7Gc+PoGD4FapUB8fepmrY7+EF3fxDTvf +95xhszWYijqy7DwaNz9+j5LP2RIUZNoQAhVB/0/E6xyjyfqZ90bp4RjZsbgyLcsUDFDYg2WD7rlc +z8sFWkz6GZdr1l0T08JcVLwyc6B49fFtHsufpaafItzRUZ6CeWRgKRM+o/1Pcmqr4tTluCRVLERL +iohEnMqE0yo7AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1Ud +DgQWBBSCIS1mxteg4BXrzkwJd8RgnlRuAzANBgkqhkiG9w0BAQsFAAOCAgEAYN4auOfyYILVAzOB +ywaK8SJJ6ejqkX/GM15oGQOGO0MBzwdw5AgeZYWR5hEit/UCI46uuR59H35s5r0l1ZUa8gWmr4UC +b6741jH/JclKyMeKqdmfS0mbEVeZkkMR3rYzpMzXjWR91M08KCy0mpbqTfXERMQlqiCA2ClV9+BB +/AYm/7k29UMUA2Z44RGx2iBfRgB4ACGlHgAoYXhvqAEBj500mv/0OJD7uNGzcgbJceaBxXntC6Z5 +8hMLnPddDnskk7RI24Zf3lCGeOdA5jGokHZwYa+cNywRtYK3qq4kNFtyDGkNzVmf9nGvnAvRCjj5 +BiKDUyUM/FHE5r7iOZULJK2v0ZXkltd0ZGtxTgI8qoXzIKNDOXZbbFD+mpwUHmUUihW9o4JFWklW +atKcsWMy5WHgUyIOpwpJ6st+H6jiYoD2EEVSmAYY3qXNL3+q1Ok+CHLsIwMCPKaq2LxndD0UF/tU +Sxfj03k9bWtJySgOLnRQvwzZRjoQhsmnP+mg7H/rpXdYaXHmgwo38oZJar55CJD2AhZkPuXaTH4M +NMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE1LlSVHJ7liXMvGnjSG4N +0MedJ5qq+BOS3R7fY581qRY27Iy4g/Q9iY/NtBde17MXQRBdJ3NghVdJIgc= +-----END CERTIFICATE----- diff --git a/vendor/composer/ca-bundle/src/CaBundle.php b/vendor/composer/ca-bundle/src/CaBundle.php new file mode 100644 index 000000000..ea8d7934f --- /dev/null +++ b/vendor/composer/ca-bundle/src/CaBundle.php @@ -0,0 +1,325 @@ + + * + * For the full copyright and license information, please view + * the LICENSE file that was distributed with this source code. + */ + +namespace Composer\CaBundle; + +use Psr\Log\LoggerInterface; +use Symfony\Component\Process\PhpProcess; + +/** + * @author Chris Smith + * @author Jordi Boggiano + */ +class CaBundle +{ + private static $caPath; + private static $caFileValidity = array(); + private static $useOpensslParse; + + /** + * Returns the system CA bundle path, or a path to the bundled one + * + * This method was adapted from Sslurp. + * https://github.com/EvanDotPro/Sslurp + * + * (c) Evan Coury + * + * For the full copyright and license information, please see below: + * + * Copyright (c) 2013, Evan Coury + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without modification, + * are permitted provided that the following conditions are met: + * + * * Redistributions of source code must retain the above copyright notice, + * this list of conditions and the following disclaimer. + * + * * Redistributions in binary form must reproduce the above copyright notice, + * this list of conditions and the following disclaimer in the documentation + * and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED + * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE + * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR + * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES + * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; + * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON + * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS + * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + * + * @param LoggerInterface $logger optional logger for information about which CA files were loaded + * @return string path to a CA bundle file or directory + */ + public static function getSystemCaRootBundlePath(LoggerInterface $logger = null) + { + if (self::$caPath !== null) { + return self::$caPath; + } + $caBundlePaths = array(); + + + // If SSL_CERT_FILE env variable points to a valid certificate/bundle, use that. + // This mimics how OpenSSL uses the SSL_CERT_FILE env variable. + $caBundlePaths[] = self::getEnvVariable('SSL_CERT_FILE'); + + // If SSL_CERT_DIR env variable points to a valid certificate/bundle, use that. + // This mimics how OpenSSL uses the SSL_CERT_FILE env variable. + $caBundlePaths[] = self::getEnvVariable('SSL_CERT_DIR'); + + $caBundlePaths[] = ini_get('openssl.cafile'); + $caBundlePaths[] = ini_get('openssl.capath'); + + $otherLocations = array( + '/etc/pki/tls/certs/ca-bundle.crt', // Fedora, RHEL, CentOS (ca-certificates package) + '/etc/ssl/certs/ca-certificates.crt', // Debian, Ubuntu, Gentoo, Arch Linux (ca-certificates package) + '/etc/ssl/ca-bundle.pem', // SUSE, openSUSE (ca-certificates package) + '/usr/local/share/certs/ca-root-nss.crt', // FreeBSD (ca_root_nss_package) + '/usr/ssl/certs/ca-bundle.crt', // Cygwin + '/opt/local/share/curl/curl-ca-bundle.crt', // OS X macports, curl-ca-bundle package + '/usr/local/share/curl/curl-ca-bundle.crt', // Default cURL CA bunde path (without --with-ca-bundle option) + '/usr/share/ssl/certs/ca-bundle.crt', // Really old RedHat? + '/etc/ssl/cert.pem', // OpenBSD + '/usr/local/etc/ssl/cert.pem', // FreeBSD 10.x + '/usr/local/etc/openssl/cert.pem', // OS X homebrew, openssl package + '/usr/local/etc/openssl@1.1/cert.pem', // OS X homebrew, openssl@1.1 package + ); + + foreach($otherLocations as $location) { + $otherLocations[] = dirname($location); + } + + $caBundlePaths = array_merge($caBundlePaths, $otherLocations); + + foreach ($caBundlePaths as $caBundle) { + if (self::caFileUsable($caBundle, $logger)) { + return self::$caPath = $caBundle; + } + + if (self::caDirUsable($caBundle)) { + return self::$caPath = $caBundle; + } + } + + return self::$caPath = static::getBundledCaBundlePath(); // Bundled CA file, last resort + } + + /** + * Returns the path to the bundled CA file + * + * In case you don't want to trust the user or the system, you can use this directly + * + * @return string path to a CA bundle file + */ + public static function getBundledCaBundlePath() + { + $caBundleFile = __DIR__.'/../res/cacert.pem'; + + // cURL does not understand 'phar://' paths + // see https://github.com/composer/ca-bundle/issues/10 + if (0 === strpos($caBundleFile, 'phar://')) { + file_put_contents( + $tempCaBundleFile = tempnam(sys_get_temp_dir(), 'openssl-ca-bundle-'), + file_get_contents($caBundleFile) + ); + + register_shutdown_function(function() use ($tempCaBundleFile) { + @unlink($tempCaBundleFile); + }); + + $caBundleFile = $tempCaBundleFile; + } + + return $caBundleFile; + } + + /** + * Validates a CA file using opensl_x509_parse only if it is safe to use + * + * @param string $filename + * @param LoggerInterface $logger optional logger for information about which CA files were loaded + * + * @return bool + */ + public static function validateCaFile($filename, LoggerInterface $logger = null) + { + static $warned = false; + + if (isset(self::$caFileValidity[$filename])) { + return self::$caFileValidity[$filename]; + } + + $contents = file_get_contents($filename); + + // assume the CA is valid if php is vulnerable to + // https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html + if (!static::isOpensslParseSafe()) { + if (!$warned && $logger) { + $logger->warning(sprintf( + 'Your version of PHP, %s, is affected by CVE-2013-6420 and cannot safely perform certificate validation, we strongly suggest you upgrade.', + PHP_VERSION + )); + $warned = true; + } + + $isValid = !empty($contents); + } else { + $contents = preg_replace("/^(\\-+(?:BEGIN|END))\\s+TRUSTED\\s+(CERTIFICATE\\-+)\$/m", '$1 $2', $contents); + $isValid = (bool) openssl_x509_parse($contents); + } + + if ($logger) { + $logger->debug('Checked CA file '.realpath($filename).': '.($isValid ? 'valid' : 'invalid')); + } + + return self::$caFileValidity[$filename] = $isValid; + } + + /** + * Test if it is safe to use the PHP function openssl_x509_parse(). + * + * This checks if OpenSSL extensions is vulnerable to remote code execution + * via the exploit documented as CVE-2013-6420. + * + * @return bool + */ + public static function isOpensslParseSafe() + { + if (null !== self::$useOpensslParse) { + return self::$useOpensslParse; + } + + if (PHP_VERSION_ID >= 50600) { + return self::$useOpensslParse = true; + } + + // Vulnerable: + // PHP 5.3.0 - PHP 5.3.27 + // PHP 5.4.0 - PHP 5.4.22 + // PHP 5.5.0 - PHP 5.5.6 + if ( + (PHP_VERSION_ID < 50400 && PHP_VERSION_ID >= 50328) + || (PHP_VERSION_ID < 50500 && PHP_VERSION_ID >= 50423) + || (PHP_VERSION_ID < 50600 && PHP_VERSION_ID >= 50507) + ) { + // This version of PHP has the fix for CVE-2013-6420 applied. + return self::$useOpensslParse = true; + } + + if (defined('PHP_WINDOWS_VERSION_BUILD')) { + // Windows is probably insecure in this case. + return self::$useOpensslParse = false; + } + + $compareDistroVersionPrefix = function ($prefix, $fixedVersion) { + $regex = '{^'.preg_quote($prefix).'([0-9]+)$}'; + + if (preg_match($regex, PHP_VERSION, $m)) { + return ((int) $m[1]) >= $fixedVersion; + } + + return false; + }; + + // Hard coded list of PHP distributions with the fix backported. + if ( + $compareDistroVersionPrefix('5.3.3-7+squeeze', 18) // Debian 6 (Squeeze) + || $compareDistroVersionPrefix('5.4.4-14+deb7u', 7) // Debian 7 (Wheezy) + || $compareDistroVersionPrefix('5.3.10-1ubuntu3.', 9) // Ubuntu 12.04 (Precise) + ) { + return self::$useOpensslParse = true; + } + + // Symfony Process component is missing so we assume it is unsafe at this point + if (!class_exists('Symfony\Component\Process\PhpProcess')) { + return self::$useOpensslParse = false; + } + + // This is where things get crazy, because distros backport security + // fixes the chances are on NIX systems the fix has been applied but + // it's not possible to verify that from the PHP version. + // + // To verify exec a new PHP process and run the issue testcase with + // known safe input that replicates the bug. + + // Based on testcase in https://github.com/php/php-src/commit/c1224573c773b6845e83505f717fbf820fc18415 + // changes in https://github.com/php/php-src/commit/76a7fd893b7d6101300cc656058704a73254d593 + $cert = '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'; + $script = <<<'EOT' + +error_reporting(-1); +$info = openssl_x509_parse(base64_decode('%s')); +var_dump(PHP_VERSION, $info['issuer']['emailAddress'], $info['validFrom_time_t']); + +EOT; + $script = '<'."?php\n".sprintf($script, $cert); + + try { + $process = new PhpProcess($script); + $process->mustRun(); + } catch (\Exception $e) { + // In the case of any exceptions just accept it is not possible to + // determine the safety of openssl_x509_parse and bail out. + return self::$useOpensslParse = false; + } + + $output = preg_split('{\r?\n}', trim($process->getOutput())); + $errorOutput = trim($process->getErrorOutput()); + + if ( + count($output) === 3 + && $output[0] === sprintf('string(%d) "%s"', strlen(PHP_VERSION), PHP_VERSION) + && $output[1] === 'string(27) "stefan.esser@sektioneins.de"' + && $output[2] === 'int(-1)' + && preg_match('{openssl_x509_parse\(\): illegal (?:ASN1 data type for|length in) timestamp in - on line \d+}', $errorOutput) + ) { + // This PHP has the fix backported probably by a distro security team. + return self::$useOpensslParse = true; + } + + return self::$useOpensslParse = false; + } + + /** + * Resets the static caches + */ + public static function reset() + { + self::$caFileValidity = array(); + self::$caPath = null; + self::$useOpensslParse = null; + } + + private static function getEnvVariable($name) + { + if (isset($_SERVER[$name])) { + return (string) $_SERVER[$name]; + } + + if (PHP_SAPI === 'cli' && ($value = getenv($name)) !== false && $value !== null) { + return (string) $value; + } + + return false; + } + + private static function caFileUsable($certFile, LoggerInterface $logger = null) + { + return $certFile && @is_file($certFile) && @is_readable($certFile) && static::validateCaFile($certFile, $logger); + } + + private static function caDirUsable($certDir) + { + return $certDir && @is_dir($certDir) && @is_readable($certDir) && glob($certDir . '/*'); + } +} diff --git a/vendor/composer/installed.json b/vendor/composer/installed.json new file mode 100644 index 000000000..d9834f665 --- /dev/null +++ b/vendor/composer/installed.json @@ -0,0 +1,1963 @@ +[ + { + "name": "composer/ca-bundle", + "version": "1.2.8", + "version_normalized": "1.2.8.0", + "source": { + "type": "git", + "url": "https://github.com/composer/ca-bundle.git", + "reference": "8a7ecad675253e4654ea05505233285377405215" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/composer/ca-bundle/zipball/8a7ecad675253e4654ea05505233285377405215", + "reference": "8a7ecad675253e4654ea05505233285377405215", + "shasum": "" + }, + "require": { + "ext-openssl": "*", + "ext-pcre": "*", + "php": "^5.3.2 || ^7.0 || ^8.0" + }, + "require-dev": { + "phpunit/phpunit": "^4.8.35 || ^5.7 || 6.5 - 8", + "psr/log": "^1.0", + "symfony/process": "^2.5 || ^3.0 || ^4.0 || ^5.0" + }, + "time": "2020-08-23T12:54:47+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Composer\\CaBundle\\": "src" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Jordi Boggiano", + "email": "j.boggiano@seld.be", + "homepage": "http://seld.be" + } + ], + "description": "Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.", + "keywords": [ + "cabundle", + "cacert", + "certificate", + "ssl", + "tls" + ] + }, + { + "name": "fgrosse/phpasn1", + "version": "v2.2.0", + "version_normalized": "2.2.0.0", + "source": { + "type": "git", + "url": "https://github.com/fgrosse/PHPASN1.git", + "reference": "d1978f7abd580f3fc33561e7f71d4c12c7531fad" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/fgrosse/PHPASN1/zipball/d1978f7abd580f3fc33561e7f71d4c12c7531fad", + "reference": "d1978f7abd580f3fc33561e7f71d4c12c7531fad", + "shasum": "" + }, + "require": { + "php": ">=7.0.0" + }, + "require-dev": { + "phpunit/phpunit": "~6.3", + "satooshi/php-coveralls": "~2.0" + }, + "suggest": { + "ext-bcmath": "BCmath is the fallback extension for big integer calculations", + "ext-curl": "For loading OID information from the web if they have not bee defined statically", + "ext-gmp": "GMP is the preferred extension for big integer calculations", + "phpseclib/bcmath_compat": "BCmath polyfill for servers where neither GMP nor BCmath is available" + }, + "time": "2020-10-11T16:28:18+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "2.0.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "FG\\": "lib/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Friedrich Große", + "email": "friedrich.grosse@gmail.com", + "homepage": "https://github.com/FGrosse", + "role": "Author" + }, + { + "name": "All contributors", + "homepage": "https://github.com/FGrosse/PHPASN1/contributors" + } + ], + "description": "A PHP Framework that allows you to encode and decode arbitrary ASN.1 structures using the ITU-T X.690 Encoding Rules.", + "homepage": "https://github.com/FGrosse/PHPASN1", + "keywords": [ + "DER", + "asn.1", + "asn1", + "ber", + "binary", + "decoding", + "encoding", + "x.509", + "x.690", + "x509", + "x690" + ] + }, + { + "name": "geoip2/geoip2", + "version": "v2.11.0", + "version_normalized": "2.11.0.0", + "source": { + "type": "git", + "url": "https://github.com/maxmind/GeoIP2-php.git", + "reference": "d01be5894a5c1a3381c58c9b1795cd07f96c30f7" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/maxmind/GeoIP2-php/zipball/d01be5894a5c1a3381c58c9b1795cd07f96c30f7", + "reference": "d01be5894a5c1a3381c58c9b1795cd07f96c30f7", + "shasum": "" + }, + "require": { + "ext-json": "*", + "maxmind-db/reader": "~1.8", + "maxmind/web-service-common": "~0.8", + "php": ">=7.2" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.*", + "phpunit/phpunit": "^8.0 || ^9.0", + "squizlabs/php_codesniffer": "3.*" + }, + "time": "2020-10-01T18:48:34+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "GeoIp2\\": "src" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "Apache-2.0" + ], + "authors": [ + { + "name": "Gregory J. Oschwald", + "email": "goschwald@maxmind.com", + "homepage": "https://www.maxmind.com/" + } + ], + "description": "MaxMind GeoIP2 PHP API", + "homepage": "https://github.com/maxmind/GeoIP2-php", + "keywords": [ + "IP", + "geoip", + "geoip2", + "geolocation", + "maxmind" + ] + }, + { + "name": "guzzlehttp/guzzle", + "version": "6.5.5", + "version_normalized": "6.5.5.0", + "source": { + "type": "git", + "url": "https://github.com/guzzle/guzzle.git", + "reference": "9d4290de1cfd701f38099ef7e183b64b4b7b0c5e" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/guzzle/guzzle/zipball/9d4290de1cfd701f38099ef7e183b64b4b7b0c5e", + "reference": "9d4290de1cfd701f38099ef7e183b64b4b7b0c5e", + "shasum": "" + }, + "require": { + "ext-json": "*", + "guzzlehttp/promises": "^1.0", + "guzzlehttp/psr7": "^1.6.1", + "php": ">=5.5", + "symfony/polyfill-intl-idn": "^1.17.0" + }, + "require-dev": { + "ext-curl": "*", + "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.4 || ^7.0", + "psr/log": "^1.1" + }, + "suggest": { + "psr/log": "Required for using the Log middleware" + }, + "time": "2020-06-16T21:01:06+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "6.5-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "GuzzleHttp\\": "src/" + }, + "files": [ + "src/functions_include.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + } + ], + "description": "Guzzle is a PHP HTTP client library", + "homepage": "http://guzzlephp.org/", + "keywords": [ + "client", + "curl", + "framework", + "http", + "http client", + "rest", + "web service" + ] + }, + { + "name": "guzzlehttp/promises", + "version": "1.4.0", + "version_normalized": "1.4.0.0", + "source": { + "type": "git", + "url": "https://github.com/guzzle/promises.git", + "reference": "60d379c243457e073cff02bc323a2a86cb355631" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/guzzle/promises/zipball/60d379c243457e073cff02bc323a2a86cb355631", + "reference": "60d379c243457e073cff02bc323a2a86cb355631", + "shasum": "" + }, + "require": { + "php": ">=5.5" + }, + "require-dev": { + "symfony/phpunit-bridge": "^4.4 || ^5.1" + }, + "time": "2020-09-30T07:37:28+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.4-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "GuzzleHttp\\Promise\\": "src/" + }, + "files": [ + "src/functions_include.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + } + ], + "description": "Guzzle promises library", + "keywords": [ + "promise" + ] + }, + { + "name": "guzzlehttp/psr7", + "version": "1.7.0", + "version_normalized": "1.7.0.0", + "source": { + "type": "git", + "url": "https://github.com/guzzle/psr7.git", + "reference": "53330f47520498c0ae1f61f7e2c90f55690c06a3" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/guzzle/psr7/zipball/53330f47520498c0ae1f61f7e2c90f55690c06a3", + "reference": "53330f47520498c0ae1f61f7e2c90f55690c06a3", + "shasum": "" + }, + "require": { + "php": ">=5.4.0", + "psr/http-message": "~1.0", + "ralouphie/getallheaders": "^2.0.5 || ^3.0.0" + }, + "provide": { + "psr/http-message-implementation": "1.0" + }, + "require-dev": { + "ext-zlib": "*", + "phpunit/phpunit": "~4.8.36 || ^5.7.27 || ^6.5.14 || ^7.5.20 || ^8.5.8 || ^9.3.10" + }, + "suggest": { + "laminas/laminas-httphandlerrunner": "Emit PSR-7 responses" + }, + "time": "2020-09-30T07:37:11+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.7-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "GuzzleHttp\\Psr7\\": "src/" + }, + "files": [ + "src/functions_include.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + }, + { + "name": "Tobias Schultze", + "homepage": "https://github.com/Tobion" + } + ], + "description": "PSR-7 message implementation that also provides common utility methods", + "keywords": [ + "http", + "message", + "psr-7", + "request", + "response", + "stream", + "uri", + "url" + ] + }, + { + "name": "maxmind-db/reader", + "version": "v1.8.0", + "version_normalized": "1.8.0.0", + "source": { + "type": "git", + "url": "https://github.com/maxmind/MaxMind-DB-Reader-php.git", + "reference": "b566d429ac9aec10594b0935be8ff38302f8d5c8" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/maxmind/MaxMind-DB-Reader-php/zipball/b566d429ac9aec10594b0935be8ff38302f8d5c8", + "reference": "b566d429ac9aec10594b0935be8ff38302f8d5c8", + "shasum": "" + }, + "require": { + "php": ">=7.2" + }, + "conflict": { + "ext-maxminddb": "<1.8.0,>=2.0.0" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.*", + "php-coveralls/php-coveralls": "^2.1", + "phpunit/phpcov": ">=6.0.0", + "phpunit/phpunit": ">=8.0.0,<10.0.0", + "squizlabs/php_codesniffer": "3.*" + }, + "suggest": { + "ext-bcmath": "bcmath or gmp is required for decoding larger integers with the pure PHP decoder", + "ext-gmp": "bcmath or gmp is required for decoding larger integers with the pure PHP decoder", + "ext-maxminddb": "A C-based database decoder that provides significantly faster lookups" + }, + "time": "2020-10-01T17:30:21+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "MaxMind\\Db\\": "src/MaxMind/Db" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "Apache-2.0" + ], + "authors": [ + { + "name": "Gregory J. Oschwald", + "email": "goschwald@maxmind.com", + "homepage": "https://www.maxmind.com/" + } + ], + "description": "MaxMind DB Reader API", + "homepage": "https://github.com/maxmind/MaxMind-DB-Reader-php", + "keywords": [ + "database", + "geoip", + "geoip2", + "geolocation", + "maxmind" + ] + }, + { + "name": "maxmind/web-service-common", + "version": "v0.8.1", + "version_normalized": "0.8.1.0", + "source": { + "type": "git", + "url": "https://github.com/maxmind/web-service-common-php.git", + "reference": "32f274051c543fc865e5a84d3a2c703913641ea8" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/maxmind/web-service-common-php/zipball/32f274051c543fc865e5a84d3a2c703913641ea8", + "reference": "32f274051c543fc865e5a84d3a2c703913641ea8", + "shasum": "" + }, + "require": { + "composer/ca-bundle": "^1.0.3", + "ext-curl": "*", + "ext-json": "*", + "php": ">=7.2" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.*", + "phpunit/phpunit": "^8.0 || ^9.0", + "squizlabs/php_codesniffer": "3.*" + }, + "time": "2020-11-02T17:00:53+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "MaxMind\\Exception\\": "src/Exception", + "MaxMind\\WebService\\": "src/WebService" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "Apache-2.0" + ], + "authors": [ + { + "name": "Gregory Oschwald", + "email": "goschwald@maxmind.com" + } + ], + "description": "Internal MaxMind Web Service API", + "homepage": "https://github.com/maxmind/web-service-common-php" + }, + { + "name": "minishlink/web-push", + "version": "v5.2.5", + "version_normalized": "5.2.5.0", + "source": { + "type": "git", + "url": "https://github.com/web-push-libs/web-push-php.git", + "reference": "0e75af425126435794ed42d7aa92119fd563e503" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-push-libs/web-push-php/zipball/0e75af425126435794ed42d7aa92119fd563e503", + "reference": "0e75af425126435794ed42d7aa92119fd563e503", + "shasum": "" + }, + "require": { + "ext-gmp": "*", + "ext-json": "*", + "guzzlehttp/guzzle": "^6.2", + "lib-openssl": "*", + "php": "^7.1", + "web-token/jwt-key-mgmt": "^1.0", + "web-token/jwt-signature": "^1.0" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "^2.14", + "phpstan/phpstan": "0.11.2", + "phpunit/phpunit": "^7.0" + }, + "time": "2020-08-02T08:58:01+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "Minishlink\\WebPush\\": "src" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Louis Lagrange", + "email": "lagrange.louis@gmail.com", + "homepage": "https://github.com/Minishlink" + } + ], + "description": "Web Push library for PHP", + "homepage": "https://github.com/web-push-libs/web-push-php", + "keywords": [ + "Push API", + "WebPush", + "notifications", + "push", + "web" + ] + }, + { + "name": "paragonie/random_compat", + "version": "v9.99.100", + "version_normalized": "9.99.100.0", + "source": { + "type": "git", + "url": "https://github.com/paragonie/random_compat.git", + "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/paragonie/random_compat/zipball/996434e5492cb4c3edcb9168db6fbb1359ef965a", + "reference": "996434e5492cb4c3edcb9168db6fbb1359ef965a", + "shasum": "" + }, + "require": { + "php": ">= 7" + }, + "require-dev": { + "phpunit/phpunit": "4.*|5.*", + "vimeo/psalm": "^1" + }, + "suggest": { + "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes." + }, + "time": "2020-10-15T08:29:30+00:00", + "type": "library", + "installation-source": "dist", + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Paragon Initiative Enterprises", + "email": "security@paragonie.com", + "homepage": "https://paragonie.com" + } + ], + "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7", + "keywords": [ + "csprng", + "polyfill", + "pseudorandom", + "random" + ] + }, + { + "name": "paragonie/sodium_compat", + "version": "v1.14.0", + "version_normalized": "1.14.0.0", + "source": { + "type": "git", + "url": "https://github.com/paragonie/sodium_compat.git", + "reference": "a1cfe0b21faf9c0b61ac0c6188c4af7fd6fd0db3" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/paragonie/sodium_compat/zipball/a1cfe0b21faf9c0b61ac0c6188c4af7fd6fd0db3", + "reference": "a1cfe0b21faf9c0b61ac0c6188c4af7fd6fd0db3", + "shasum": "" + }, + "require": { + "paragonie/random_compat": ">=1", + "php": "^5.2.4|^5.3|^5.4|^5.5|^5.6|^7|^8" + }, + "require-dev": { + "phpunit/phpunit": "^3|^4|^5|^6|^7|^8|^9" + }, + "suggest": { + "ext-libsodium": "PHP < 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security.", + "ext-sodium": "PHP >= 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security." + }, + "time": "2020-12-03T16:26:19+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "files": [ + "autoload.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "ISC" + ], + "authors": [ + { + "name": "Paragon Initiative Enterprises", + "email": "security@paragonie.com" + }, + { + "name": "Frank Denis", + "email": "jedisct1@pureftpd.org" + } + ], + "description": "Pure PHP implementation of libsodium; uses the PHP extension if it exists", + "keywords": [ + "Authentication", + "BLAKE2b", + "ChaCha20", + "ChaCha20-Poly1305", + "Chapoly", + "Curve25519", + "Ed25519", + "EdDSA", + "Edwards-curve Digital Signature Algorithm", + "Elliptic Curve Diffie-Hellman", + "Poly1305", + "Pure-PHP cryptography", + "RFC 7748", + "RFC 8032", + "Salpoly", + "Salsa20", + "X25519", + "XChaCha20-Poly1305", + "XSalsa20-Poly1305", + "Xchacha20", + "Xsalsa20", + "aead", + "cryptography", + "ecdh", + "elliptic curve", + "elliptic curve cryptography", + "encryption", + "libsodium", + "php", + "public-key cryptography", + "secret-key cryptography", + "side-channel resistant" + ] + }, + { + "name": "paypal/paypal-checkout-sdk", + "version": "1.0.1", + "version_normalized": "1.0.1.0", + "source": { + "type": "git", + "url": "https://github.com/paypal/Checkout-PHP-SDK.git", + "reference": "ed6a55075448308b87a8b59dcb7fedf04a048cb1" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/paypal/Checkout-PHP-SDK/zipball/ed6a55075448308b87a8b59dcb7fedf04a048cb1", + "reference": "ed6a55075448308b87a8b59dcb7fedf04a048cb1", + "shasum": "" + }, + "require": { + "paypal/paypalhttp": "1.0.0" + }, + "require-dev": { + "phpunit/phpunit": "^5.7" + }, + "time": "2019-11-07T23:16:44+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "PayPalCheckoutSdk\\": "lib/PayPalCheckoutSdk", + "Sample\\": "samples/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "https://github.com/paypal/Checkout-PHP-SDK/blob/master/LICENSE" + ], + "authors": [ + { + "name": "PayPal", + "homepage": "https://github.com/paypal/Checkout-PHP-SDK/contributors" + } + ], + "description": "PayPal's PHP SDK for Checkout REST APIs", + "homepage": "http://github.com/paypal/Checkout-PHP-SDK/", + "keywords": [ + "checkout", + "orders", + "payments", + "paypal", + "rest", + "sdk" + ] + }, + { + "name": "paypal/paypalhttp", + "version": "1.0.0", + "version_normalized": "1.0.0.0", + "source": { + "type": "git", + "url": "https://github.com/paypal/paypalhttp_php.git", + "reference": "1ad9b846a046f09d6135cbf2cbaa7701bbc630a3" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/paypal/paypalhttp_php/zipball/1ad9b846a046f09d6135cbf2cbaa7701bbc630a3", + "reference": "1ad9b846a046f09d6135cbf2cbaa7701bbc630a3", + "shasum": "" + }, + "require": { + "ext-curl": "*" + }, + "require-dev": { + "phpunit/phpunit": "^5.7", + "wiremock-php/wiremock-php": "1.43.2" + }, + "time": "2019-11-06T21:27:12+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "PayPalHttp\\": "lib/PayPalHttp" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "PayPal", + "homepage": "https://github.com/paypal/paypalhttp_php/contributors" + } + ] + }, + { + "name": "phpmailer/phpmailer", + "version": "v6.2.0", + "version_normalized": "6.2.0.0", + "source": { + "type": "git", + "url": "https://github.com/PHPMailer/PHPMailer.git", + "reference": "e38888a75c070304ca5514197d4847a59a5c853f" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/PHPMailer/PHPMailer/zipball/e38888a75c070304ca5514197d4847a59a5c853f", + "reference": "e38888a75c070304ca5514197d4847a59a5c853f", + "shasum": "" + }, + "require": { + "ext-ctype": "*", + "ext-filter": "*", + "ext-hash": "*", + "php": ">=5.5.0" + }, + "require-dev": { + "dealerdirect/phpcodesniffer-composer-installer": "^0.7.0", + "doctrine/annotations": "^1.2", + "phpcompatibility/php-compatibility": "^9.3.5", + "roave/security-advisories": "dev-latest", + "squizlabs/php_codesniffer": "^3.5.6", + "yoast/phpunit-polyfills": "^0.2.0" + }, + "suggest": { + "ext-mbstring": "Needed to send email in multibyte encoding charset", + "hayageek/oauth2-yahoo": "Needed for Yahoo XOAUTH2 authentication", + "league/oauth2-google": "Needed for Google XOAUTH2 authentication", + "psr/log": "For optional PSR-3 debug logging", + "stevenmaguire/oauth2-microsoft": "Needed for Microsoft XOAUTH2 authentication", + "symfony/polyfill-mbstring": "To support UTF-8 if the Mbstring PHP extension is not enabled (^1.2)" + }, + "time": "2020-11-25T15:24:57+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "PHPMailer\\PHPMailer\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "LGPL-2.1-only" + ], + "authors": [ + { + "name": "Marcus Bointon", + "email": "phpmailer@synchromedia.co.uk" + }, + { + "name": "Jim Jagielski", + "email": "jimjag@gmail.com" + }, + { + "name": "Andy Prevost", + "email": "codeworxtech@users.sourceforge.net" + }, + { + "name": "Brent R. Matzelle" + } + ], + "description": "PHPMailer is a full-featured email creation and transfer class for PHP" + }, + { + "name": "psr/http-message", + "version": "1.0.1", + "version_normalized": "1.0.1.0", + "source": { + "type": "git", + "url": "https://github.com/php-fig/http-message.git", + "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/php-fig/http-message/zipball/f6561bf28d520154e4b0ec72be95418abe6d9363", + "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363", + "shasum": "" + }, + "require": { + "php": ">=5.3.0" + }, + "time": "2016-08-06T14:39:51+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.0.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Psr\\Http\\Message\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "PHP-FIG", + "homepage": "http://www.php-fig.org/" + } + ], + "description": "Common interface for HTTP messages", + "homepage": "https://github.com/php-fig/http-message", + "keywords": [ + "http", + "http-message", + "psr", + "psr-7", + "request", + "response" + ] + }, + { + "name": "ralouphie/getallheaders", + "version": "3.0.3", + "version_normalized": "3.0.3.0", + "source": { + "type": "git", + "url": "https://github.com/ralouphie/getallheaders.git", + "reference": "120b605dfeb996808c31b6477290a714d356e822" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822", + "reference": "120b605dfeb996808c31b6477290a714d356e822", + "shasum": "" + }, + "require": { + "php": ">=5.6" + }, + "require-dev": { + "php-coveralls/php-coveralls": "^2.1", + "phpunit/phpunit": "^5 || ^6.5" + }, + "time": "2019-03-08T08:55:37+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "files": [ + "src/getallheaders.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Ralph Khattar", + "email": "ralph.khattar@gmail.com" + } + ], + "description": "A polyfill for getallheaders." + }, + { + "name": "sonata-project/google-authenticator", + "version": "2.2.0", + "version_normalized": "2.2.0.0", + "source": { + "type": "git", + "url": "https://github.com/sonata-project/GoogleAuthenticator.git", + "reference": "feda53899b26af24e3db2fe7a3e5f053ca483762" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/sonata-project/GoogleAuthenticator/zipball/feda53899b26af24e3db2fe7a3e5f053ca483762", + "reference": "feda53899b26af24e3db2fe7a3e5f053ca483762", + "shasum": "" + }, + "require": { + "php": "^7.1" + }, + "require-dev": { + "symfony/phpunit-bridge": "^4.0" + }, + "time": "2018-07-18T22:08:02+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "2.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Google\\Authenticator\\": "src/", + "Sonata\\GoogleAuthenticator\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Christian Stocker", + "email": "me@chregu.tv" + }, + { + "name": "Andre DeMarre", + "homepage": "http://www.devnetwork.net/viewtopic.php?f=50&t=94989" + }, + { + "name": "Thomas Rabaix", + "email": "thomas.rabaix@gmail.com" + } + ], + "description": "Library to integrate Google Authenticator into a PHP project", + "homepage": "https://github.com/sonata-project/GoogleAuthenticator", + "keywords": [ + "google authenticator" + ] + }, + { + "name": "spomky-labs/base64url", + "version": "v2.0.4", + "version_normalized": "2.0.4.0", + "source": { + "type": "git", + "url": "https://github.com/Spomky-Labs/base64url.git", + "reference": "7752ce931ec285da4ed1f4c5aa27e45e097be61d" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/Spomky-Labs/base64url/zipball/7752ce931ec285da4ed1f4c5aa27e45e097be61d", + "reference": "7752ce931ec285da4ed1f4c5aa27e45e097be61d", + "shasum": "" + }, + "require": { + "php": ">=7.1" + }, + "require-dev": { + "phpstan/extension-installer": "^1.0", + "phpstan/phpstan": "^0.11|^0.12", + "phpstan/phpstan-beberlei-assert": "^0.11|^0.12", + "phpstan/phpstan-deprecation-rules": "^0.11|^0.12", + "phpstan/phpstan-phpunit": "^0.11|^0.12", + "phpstan/phpstan-strict-rules": "^0.11|^0.12" + }, + "time": "2020-11-03T09:10:25+00:00", + "type": "library", + "installation-source": "dist", + "autoload": { + "psr-4": { + "Base64Url\\": "src/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky-Labs/base64url/contributors" + } + ], + "description": "Base 64 URL Safe Encoding/Decoding PHP Library", + "homepage": "https://github.com/Spomky-Labs/base64url", + "keywords": [ + "base64", + "rfc4648", + "safe", + "url" + ] + }, + { + "name": "stripe/stripe-php", + "version": "v7.66.1", + "version_normalized": "7.66.1.0", + "source": { + "type": "git", + "url": "https://github.com/stripe/stripe-php.git", + "reference": "a2ebaa272a8797b21e81afaf8d5ba0953ff15e13" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/stripe/stripe-php/zipball/a2ebaa272a8797b21e81afaf8d5ba0953ff15e13", + "reference": "a2ebaa272a8797b21e81afaf8d5ba0953ff15e13", + "shasum": "" + }, + "require": { + "ext-curl": "*", + "ext-json": "*", + "ext-mbstring": "*", + "php": ">=5.6.0" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.16.5", + "php-coveralls/php-coveralls": "^2.1", + "phpunit/phpunit": "^5.7", + "squizlabs/php_codesniffer": "^3.3", + "symfony/process": "~3.4" + }, + "time": "2020-12-01T18:44:12+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "2.0-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Stripe\\": "lib/" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Stripe and contributors", + "homepage": "https://github.com/stripe/stripe-php/contributors" + } + ], + "description": "Stripe PHP Library", + "homepage": "https://stripe.com/", + "keywords": [ + "api", + "payment processing", + "stripe" + ] + }, + { + "name": "symfony/polyfill-intl-idn", + "version": "v1.20.0", + "version_normalized": "1.20.0.0", + "source": { + "type": "git", + "url": "https://github.com/symfony/polyfill-intl-idn.git", + "reference": "3b75acd829741c768bc8b1f84eb33265e7cc5117" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/symfony/polyfill-intl-idn/zipball/3b75acd829741c768bc8b1f84eb33265e7cc5117", + "reference": "3b75acd829741c768bc8b1f84eb33265e7cc5117", + "shasum": "" + }, + "require": { + "php": ">=7.1", + "symfony/polyfill-intl-normalizer": "^1.10", + "symfony/polyfill-php72": "^1.10" + }, + "suggest": { + "ext-intl": "For best performance" + }, + "time": "2020-10-23T14:02:19+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-main": "1.20-dev" + }, + "thanks": { + "name": "symfony/polyfill", + "url": "https://github.com/symfony/polyfill" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Symfony\\Polyfill\\Intl\\Idn\\": "" + }, + "files": [ + "bootstrap.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Laurent Bassin", + "email": "laurent@bassin.info" + }, + { + "name": "Trevor Rowbotham", + "email": "trevor.rowbotham@pm.me" + }, + { + "name": "Symfony Community", + "homepage": "https://symfony.com/contributors" + } + ], + "description": "Symfony polyfill for intl's idn_to_ascii and idn_to_utf8 functions", + "homepage": "https://symfony.com", + "keywords": [ + "compatibility", + "idn", + "intl", + "polyfill", + "portable", + "shim" + ] + }, + { + "name": "symfony/polyfill-intl-normalizer", + "version": "v1.20.0", + "version_normalized": "1.20.0.0", + "source": { + "type": "git", + "url": "https://github.com/symfony/polyfill-intl-normalizer.git", + "reference": "727d1096295d807c309fb01a851577302394c897" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/symfony/polyfill-intl-normalizer/zipball/727d1096295d807c309fb01a851577302394c897", + "reference": "727d1096295d807c309fb01a851577302394c897", + "shasum": "" + }, + "require": { + "php": ">=7.1" + }, + "suggest": { + "ext-intl": "For best performance" + }, + "time": "2020-10-23T14:02:19+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-main": "1.20-dev" + }, + "thanks": { + "name": "symfony/polyfill", + "url": "https://github.com/symfony/polyfill" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Symfony\\Polyfill\\Intl\\Normalizer\\": "" + }, + "files": [ + "bootstrap.php" + ], + "classmap": [ + "Resources/stubs" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Nicolas Grekas", + "email": "p@tchwork.com" + }, + { + "name": "Symfony Community", + "homepage": "https://symfony.com/contributors" + } + ], + "description": "Symfony polyfill for intl's Normalizer class and related functions", + "homepage": "https://symfony.com", + "keywords": [ + "compatibility", + "intl", + "normalizer", + "polyfill", + "portable", + "shim" + ] + }, + { + "name": "symfony/polyfill-php72", + "version": "v1.20.0", + "version_normalized": "1.20.0.0", + "source": { + "type": "git", + "url": "https://github.com/symfony/polyfill-php72.git", + "reference": "cede45fcdfabdd6043b3592e83678e42ec69e930" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/symfony/polyfill-php72/zipball/cede45fcdfabdd6043b3592e83678e42ec69e930", + "reference": "cede45fcdfabdd6043b3592e83678e42ec69e930", + "shasum": "" + }, + "require": { + "php": ">=7.1" + }, + "time": "2020-10-23T14:02:19+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-main": "1.20-dev" + }, + "thanks": { + "name": "symfony/polyfill", + "url": "https://github.com/symfony/polyfill" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Symfony\\Polyfill\\Php72\\": "" + }, + "files": [ + "bootstrap.php" + ] + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Nicolas Grekas", + "email": "p@tchwork.com" + }, + { + "name": "Symfony Community", + "homepage": "https://symfony.com/contributors" + } + ], + "description": "Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions", + "homepage": "https://symfony.com", + "keywords": [ + "compatibility", + "polyfill", + "portable", + "shim" + ] + }, + { + "name": "web-token/jwt-core", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-core.git", + "reference": "30e9df9e040d933043b16237f9dba7a3be746566" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-core/zipball/30e9df9e040d933043b16237f9dba7a3be746566", + "reference": "30e9df9e040d933043b16237f9dba7a3be746566", + "shasum": "" + }, + "require": { + "ext-gmp": "*", + "ext-mbstring": "*", + "fgrosse/phpasn1": "^2.0", + "php": "^7.1", + "spomky-labs/base64url": "^1.0|^2.0", + "web-token/jwt-util-ecc": "^1.3" + }, + "conflict": { + "spomky-labs/jose": "*" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Core\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "Core component of the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-key-mgmt", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-key-mgmt.git", + "reference": "65b1e908e50b0e5be6b28135085d3c1097b81801" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-key-mgmt/zipball/65b1e908e50b0e5be6b28135085d3c1097b81801", + "reference": "65b1e908e50b0e5be6b28135085d3c1097b81801", + "shasum": "" + }, + "require": { + "lib-openssl": "*", + "paragonie/sodium_compat": "^1.2", + "web-token/jwt-core": "^1.3", + "web-token/jwt-util-ecc": "^1.3" + }, + "require-dev": { + "php-http/httplug": "^1.1", + "php-http/message-factory": "^1.0", + "php-http/mock-client": "^1.0", + "phpunit/phpunit": "^6.0|^7.0" + }, + "suggest": { + "php-http/httplug": "To enable JKU/X5U support.", + "php-http/message-factory": "To enable JKU/X5U support." + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\KeyManagement\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-key-mgmt/contributors" + } + ], + "description": "Key Management component of the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-signature", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-signature.git", + "reference": "00f23e997c9032536444f819bc3338ab475d69f9" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-signature/zipball/00f23e997c9032536444f819bc3338ab475d69f9", + "reference": "00f23e997c9032536444f819bc3338ab475d69f9", + "shasum": "" + }, + "require": { + "web-token/jwt-core": "^1.3", + "web-token/jwt-signature-algorithm-ecdsa": "^1.3", + "web-token/jwt-signature-algorithm-eddsa": "^1.3", + "web-token/jwt-signature-algorithm-hmac": "^1.3", + "web-token/jwt-signature-algorithm-none": "^1.3", + "web-token/jwt-signature-algorithm-rsa": "^1.3" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "suggest": { + "web-token/jwt-signature-algorithm-ecdsa": "ECDSA Based Signature Algorithms", + "web-token/jwt-signature-algorithm-eddsa": "EdDSA Based Signature Algorithms", + "web-token/jwt-signature-algorithm-experimental": "Experimental Signature Algorithms", + "web-token/jwt-signature-algorithm-hmac": "HMAC Based Signature Algorithms", + "web-token/jwt-signature-algorithm-none": "None Signature Algorithm", + "web-token/jwt-signature-algorithm-rsa": "RSA Based Signature Algorithms" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Signature\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-signature/contributors" + } + ], + "description": "Signature component of the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-signature-algorithm-ecdsa", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-signature-algorithm-ecdsa.git", + "reference": "a3babd3b82c29c739d426271ccb9dc1a56222e36" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-signature-algorithm-ecdsa/zipball/a3babd3b82c29c739d426271ccb9dc1a56222e36", + "reference": "a3babd3b82c29c739d426271ccb9dc1a56222e36", + "shasum": "" + }, + "require": { + "web-token/jwt-signature": "^1.3" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Signature\\Algorithm\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "ECDSA Based Signature Algorithms the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-signature-algorithm-eddsa", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-signature-algorithm-eddsa.git", + "reference": "b0dad134313b14b3ba077b63a7afcc2b38e5f793" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-signature-algorithm-eddsa/zipball/b0dad134313b14b3ba077b63a7afcc2b38e5f793", + "reference": "b0dad134313b14b3ba077b63a7afcc2b38e5f793", + "shasum": "" + }, + "require": { + "web-token/jwt-signature": "^1.3" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Signature\\Algorithm\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "EdDSA Signature Algorithm the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-signature-algorithm-hmac", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-signature-algorithm-hmac.git", + "reference": "3bc85e1d13804902a8d81a11f58c28c9a471b5e2" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-signature-algorithm-hmac/zipball/3bc85e1d13804902a8d81a11f58c28c9a471b5e2", + "reference": "3bc85e1d13804902a8d81a11f58c28c9a471b5e2", + "shasum": "" + }, + "require": { + "web-token/jwt-signature": "^1.3" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Signature\\Algorithm\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "HMAC Based Signature Algorithms the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-signature-algorithm-none", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-signature-algorithm-none.git", + "reference": "0391e160367e85846736e63ea6026e2dab667b6e" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-signature-algorithm-none/zipball/0391e160367e85846736e63ea6026e2dab667b6e", + "reference": "0391e160367e85846736e63ea6026e2dab667b6e", + "shasum": "" + }, + "require": { + "web-token/jwt-signature": "^1.3" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Signature\\Algorithm\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "None Signature Algorithm the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-signature-algorithm-rsa", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-signature-algorithm-rsa.git", + "reference": "344181ef6cdd3aca77f7ff7defc9fb502eb33ec0" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-signature-algorithm-rsa/zipball/344181ef6cdd3aca77f7ff7defc9fb502eb33ec0", + "reference": "344181ef6cdd3aca77f7ff7defc9fb502eb33ec0", + "shasum": "" + }, + "require": { + "web-token/jwt-signature": "^1.3" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Signature\\Algorithm\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "RSA Based Signature Algorithms the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + }, + { + "name": "web-token/jwt-util-ecc", + "version": "v1.3.10", + "version_normalized": "1.3.10.0", + "source": { + "type": "git", + "url": "https://github.com/web-token/jwt-util-ecc.git", + "reference": "2011af8454561ebce06a77fcd681c29a252e0068" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/web-token/jwt-util-ecc/zipball/2011af8454561ebce06a77fcd681c29a252e0068", + "reference": "2011af8454561ebce06a77fcd681c29a252e0068", + "shasum": "" + }, + "require": { + "ext-gmp": "*", + "ext-mbstring": "*", + "php": "^7.1" + }, + "require-dev": { + "phpunit/phpunit": "^6.0|^7.0" + }, + "time": "2020-03-20T13:29:04+00:00", + "type": "library", + "extra": { + "branch-alias": { + "dev-master": "1.3.x-dev" + } + }, + "installation-source": "dist", + "autoload": { + "psr-4": { + "Jose\\Component\\Core\\Util\\Ecc\\": "" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "MIT" + ], + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky" + }, + { + "name": "All contributors", + "homepage": "https://github.com/web-token/jwt-core/contributors" + } + ], + "description": "ECC Tools for the JWT Framework.", + "homepage": "https://github.com/web-token", + "keywords": [ + "JOSE", + "JWE", + "JWK", + "JWKSet", + "JWS", + "Jot", + "RFC7515", + "RFC7516", + "RFC7517", + "RFC7518", + "RFC7519", + "RFC7520", + "bundle", + "jwa", + "jwt", + "symfony" + ] + } +] diff --git a/vendor/fgrosse/phpasn1/CHANGELOG.md b/vendor/fgrosse/phpasn1/CHANGELOG.md new file mode 100644 index 000000000..25426e4c4 --- /dev/null +++ b/vendor/fgrosse/phpasn1/CHANGELOG.md @@ -0,0 +1,47 @@ +#### v2.2.0 (2020-08) +* support polyfills for bcmath and gmp, and add a composer.json + suggestion for the `phpseclib/bcmath_polyfill` for servers unable + to install PHP the gmp or bcmath extensions. + +#### v.2.1.1 & &v.2.0.2 (2018-12) +* add stricter validation around some structures, highlighed + by wycheproof test suite + +#### v.2.1.0 (2018-03) +* add support for `bcmath` extension (making `gmp` optional)
+ https://github.com/fgrosse/PHPASN1/pull/68 + +#### v.2.0.1 & v.1.5.3 (2017-12) +* add .gitattributes file to prevent examples and tests to be installed via composer when --prefer-dist was set + +#### v.2.0.0 (2017-08) +* rename `FG\ASN1\Object` to `FG\ASN1\ASNObject` because `Object` is a special class name in the next major PHP release + - when you upgrade you have to adapt all corresponding `use` and `extends` statements as well as type hints and all + usages of `Object::fromBinary(…)`. +* generally drop PHP 5.6 support + +#### v.1.5.2 (2016-10-29) +* allow empty octet strings + +#### v.1.5.1 (2015-10-02) +* add keywords to composer.json (this is a version on its own so the keywords are found on a stable version at packagist.org) + +#### v.1.5.0 (2015-10-30) +* fix a bug that would prevent you from decoding context specific tags on multiple objects [#57](https://github.com/fgrosse/PHPASN1/issues/57) + - `ExplicitlyTaggedObject::__construct` does now accept multiple objects to be tagged with a single tag + - `ExplicitlyTaggedObject::getContent` will now always return an array (even if only one object is tagged) + +#### v.1.4.2 (2015-09-29) +* fix a bug that would prevent you from decoding empty tagged objects [#57](https://github.com/fgrosse/PHPASN1/issues/57) + +#### v.1.4.1 +* improve exception messages and general error handling [#55](https://github.com/fgrosse/PHPASN1/pull/55) + +#### v.1.4.0 +* **require PHP 5.6** +* support big integers (closes #1 and #37) +* enforce one code style via [styleci.io][9] +* track code coverage via [coveralls.io][10] +* replace obsolete `FG\ASN1\Exception\GeneralException` with `\Exception` +* `Construct` (`Sequence`, `Set`) does now implement `ArrayAccess`, `Countable` and `Iterator` so its easier to use +* add [`TemplateParser`][11] diff --git a/vendor/fgrosse/phpasn1/LICENSE b/vendor/fgrosse/phpasn1/LICENSE new file mode 100644 index 000000000..1e17eb03e --- /dev/null +++ b/vendor/fgrosse/phpasn1/LICENSE @@ -0,0 +1,19 @@ +Copyright (c) 2012-2015 Friedrich Große + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/vendor/fgrosse/phpasn1/README.md b/vendor/fgrosse/phpasn1/README.md new file mode 100644 index 000000000..3931010ab --- /dev/null +++ b/vendor/fgrosse/phpasn1/README.md @@ -0,0 +1,167 @@ +PHPASN1 +======= + +[![Build Status](https://secure.travis-ci.org/fgrosse/PHPASN1.png?branch=master)](http://travis-ci.org/fgrosse/PHPASN1) +[![PHP 7 ready](http://php7ready.timesplinter.ch/fgrosse/PHPASN1/badge.svg)](https://travis-ci.org/fgrosse/PHPASN1) +[![Coverage Status](https://coveralls.io/repos/fgrosse/PHPASN1/badge.svg?branch=master&service=github)](https://coveralls.io/github/fgrosse/PHPASN1?branch=master) + +[![Latest Stable Version](https://poser.pugx.org/fgrosse/phpasn1/v/stable.png)](https://packagist.org/packages/fgrosse/phpasn1) +[![Total Downloads](https://poser.pugx.org/fgrosse/phpasn1/downloads.png)](https://packagist.org/packages/fgrosse/phpasn1) +[![Latest Unstable Version](https://poser.pugx.org/fgrosse/phpasn1/v/unstable.png)](https://packagist.org/packages/fgrosse/phpasn1) +[![License](https://poser.pugx.org/fgrosse/phpasn1/license.png)](https://packagist.org/packages/fgrosse/phpasn1) + +A PHP Framework that allows you to encode and decode arbitrary [ASN.1][3] structures +using the [ITU-T X.690 Encoding Rules][4]. +This encoding is very frequently used in [X.509 PKI environments][5] or the communication between heterogeneous computer systems. + +The API allows you to encode ASN.1 structures to create binary data such as certificate +signing requests (CSR), X.509 certificates or certificate revocation lists (CRL). +PHPASN1 can also read [BER encoded][6] binary data into separate PHP objects that can be manipulated by the user and reencoded afterwards. + +The **changelog** can now be found at [CHANGELOG.md](CHANGELOG.md). + +## Dependencies + +PHPASN1 requires at least `PHP 7.0` and either the `gmp` or `bcmath` extension. +Support for older PHP versions (i.e. PHP 5.6) was dropped starting with `v2.0`. +If you must use an outdated PHP version consider using [PHPASN v1.5][13]. + +For the loading of object identifier names directly from the web [curl][7] is used. + +## Installation + +The preferred way to install this library is to rely on [Composer][2]: + +```bash +$ composer require fgrosse/phpasn1 +``` + +## Usage + +### Encoding ASN.1 Structures + +PHPASN1 offers you a class for each of the implemented ASN.1 universal types. +The constructors should be pretty self explanatory so you should have no big trouble getting started. +All data will be encoded using [DER encoding][8] + +```php +use FG\ASN1\OID; +use FG\ASN1\Universal\Integer; +use FG\ASN1\Universal\Boolean; +use FG\ASN1\Universal\Enumerated; +use FG\ASN1\Universal\IA5String; +use FG\ASN1\Universal\ObjectIdentifier; +use FG\ASN1\Universal\PrintableString; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\Set; +use FG\ASN1\Universal\NullObject; + +$integer = new Integer(123456); +$boolean = new Boolean(true); +$enum = new Enumerated(1); +$ia5String = new IA5String('Hello world'); + +$asnNull = new NullObject(); +$objectIdentifier1 = new ObjectIdentifier('1.2.250.1.16.9'); +$objectIdentifier2 = new ObjectIdentifier(OID::RSA_ENCRYPTION); +$printableString = new PrintableString('Foo bar'); + +$sequence = new Sequence($integer, $boolean, $enum, $ia5String); +$set = new Set($sequence, $asnNull, $objectIdentifier1, $objectIdentifier2, $printableString); + +$myBinary = $sequence->getBinary(); +$myBinary .= $set->getBinary(); + +echo base64_encode($myBinary); +``` + + +### Decoding binary data + +Decoding BER encoded binary data is just as easy as encoding it: + +```php +use FG\ASN1\ASNObject; + +$base64String = ... +$binaryData = base64_decode($base64String); +$asnObject = ASNObject::fromBinary($binaryData); + + +// do stuff +``` + +If you already know exactly how your expected data should look like you can use the `FG\ASN1\TemplateParser`: + +```php +use FG\ASN1\TemplateParser; + +// first define your template +$template = [ + Identifier::SEQUENCE => [ + Identifier::SET => [ + Identifier::OBJECT_IDENTIFIER, + Identifier::SEQUENCE => [ + Identifier::INTEGER, + Identifier::BITSTRING, + ] + ] + ] +]; + +// if your binary data is not matching the template you provided this will throw an `\Exception`: +$parser = new TemplateParser(); +$object = $parser->parseBinary($data, $template); + +// there is also a convenience function if you parse binary data from base64: +$object = $parser->parseBase64($data, $template); +``` + +You can use this function to make sure your data has exactly the format you are expecting. + +### Navigating decoded data + +All constructed classes (i.e. `Sequence` and `Set`) can be navigated by array access or using an iterator. +You can find examples +[here](https://github.com/fgrosse/PHPASN1/blob/f6442cadda9d36f3518c737e32f28300a588b777/tests/ASN1/Universal/SequenceTest.php#L148-148), +[here](https://github.com/fgrosse/PHPASN1/blob/f6442cadda9d36f3518c737e32f28300a588b777/tests/ASN1/Universal/SequenceTest.php#L121) and +[here](https://github.com/fgrosse/PHPASN1/blob/f6442cadda9d36f3518c737e32f28300a588b777/tests/ASN1/TemplateParserTest.php#L45). + + +### Give me more examples! + +To see some example usage of the API classes or some generated output check out the [examples](https://github.com/fgrosse/PHPASN1/tree/master/examples). + + +### How do I contribute? + +If you found an issue or have a question submit a github issue with detailed information. + +In case you already know what caused the issue and feel in the mood to fix it, your code contributions are always welcome. Just fork the repository, implement your changes and make sure that you covered everything with tests. +Afterwards submit a pull request via github and be a little patient :) I usually try to comment and/or merge as soon as possible. + +#### Mailing list + +New features or questions can be discussed in [this google group/mailing list][12]. + +### Thanks + +To [all contributors][1] so far! + +## License + +This library is distributed under the [MIT License](LICENSE). + +[1]: https://github.com/fgrosse/PHPASN1/graphs/contributors +[2]: https://getcomposer.org/ +[3]: http://www.itu.int/ITU-T/asn1/ +[4]: http://www.itu.int/ITU-T/recommendations/rec.aspx?rec=x.690 +[5]: http://en.wikipedia.org/wiki/X.509 +[6]: http://en.wikipedia.org/wiki/X.690#BER_encoding +[7]: http://php.net/manual/en/book.curl.php +[8]: http://en.wikipedia.org/wiki/X.690#DER_encoding +[9]: https://styleci.io +[10]: https://coveralls.io/github/fgrosse/PHPASN1 +[11]: https://github.com/fgrosse/PHPASN1/blob/master/tests/ASN1/TemplateParserTest.php#L16 +[12]: https://groups.google.com/d/forum/phpasn1 +[13]: https://packagist.org/packages/fgrosse/phpasn1#1.5.2 diff --git a/vendor/fgrosse/phpasn1/composer.json b/vendor/fgrosse/phpasn1/composer.json new file mode 100644 index 000000000..01ffadaed --- /dev/null +++ b/vendor/fgrosse/phpasn1/composer.json @@ -0,0 +1,49 @@ +{ + "name": "fgrosse/phpasn1", + "description": "A PHP Framework that allows you to encode and decode arbitrary ASN.1 structures using the ITU-T X.690 Encoding Rules.", + "type": "library", + "homepage": "https://github.com/FGrosse/PHPASN1", + "license": "MIT", + "authors": [ + { + "name": "Friedrich Große", + "email": "friedrich.grosse@gmail.com", + "homepage": "https://github.com/FGrosse", + "role": "Author" + }, + { + "name": "All contributors", + "homepage": "https://github.com/FGrosse/PHPASN1/contributors" + } + ], + "keywords": [ "x690", "x.690", "x.509", "x509", "asn1", "asn.1", "ber", "der", "binary", "encoding", "decoding" ], + + "require": { + "php": ">=7.0.0" + }, + "require-dev": { + "phpunit/phpunit": "~6.3", + "satooshi/php-coveralls": "~2.0" + }, + "suggest": { + "ext-gmp": "GMP is the preferred extension for big integer calculations", + "ext-bcmath": "BCmath is the fallback extension for big integer calculations", + "phpseclib/bcmath_compat": "BCmath polyfill for servers where neither GMP nor BCmath is available", + "ext-curl": "For loading OID information from the web if they have not bee defined statically" + }, + "autoload": { + "psr-4": { + "FG\\": "lib/" + } + }, + "autoload-dev": { + "psr-4": { + "FG\\Test\\": "tests/" + } + }, + "extra": { + "branch-alias": { + "dev-master": "2.0.x-dev" + } + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/ASNObject.php b/vendor/fgrosse/phpasn1/lib/ASN1/ASNObject.php new file mode 100644 index 000000000..3b7f16215 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/ASNObject.php @@ -0,0 +1,355 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use FG\ASN1\Exception\ParserException; +use FG\ASN1\Universal\BitString; +use FG\ASN1\Universal\Boolean; +use FG\ASN1\Universal\Enumerated; +use FG\ASN1\Universal\GeneralizedTime; +use FG\ASN1\Universal\Integer; +use FG\ASN1\Universal\NullObject; +use FG\ASN1\Universal\ObjectIdentifier; +use FG\ASN1\Universal\RelativeObjectIdentifier; +use FG\ASN1\Universal\OctetString; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\Set; +use FG\ASN1\Universal\UTCTime; +use FG\ASN1\Universal\IA5String; +use FG\ASN1\Universal\PrintableString; +use FG\ASN1\Universal\NumericString; +use FG\ASN1\Universal\UTF8String; +use FG\ASN1\Universal\UniversalString; +use FG\ASN1\Universal\CharacterString; +use FG\ASN1\Universal\GeneralString; +use FG\ASN1\Universal\VisibleString; +use FG\ASN1\Universal\GraphicString; +use FG\ASN1\Universal\BMPString; +use FG\ASN1\Universal\T61String; +use FG\ASN1\Universal\ObjectDescriptor; +use FG\Utility\BigInteger; +use LogicException; + +/** + * Class ASNObject is the base class for all concrete ASN.1 objects. + */ +abstract class ASNObject implements Parsable +{ + private $contentLength; + private $nrOfLengthOctets; + + /** + * Must return the number of octets of the content part. + * + * @return int + */ + abstract protected function calculateContentLength(); + + /** + * Encode the object using DER encoding. + * + * @see http://en.wikipedia.org/wiki/X.690#DER_encoding + * + * @return string the binary representation of an objects value + */ + abstract protected function getEncodedValue(); + + /** + * Return the content of this object in a non encoded form. + * This can be used to print the value in human readable form. + * + * @return mixed + */ + abstract public function getContent(); + + /** + * Return the object type octet. + * This should use the class constants of Identifier. + * + * @see Identifier + * + * @return int + */ + abstract public function getType(); + + /** + * Returns all identifier octets. If an inheriting class models a tag with + * the long form identifier format, it MUST reimplement this method to + * return all octets of the identifier. + * + * @throws LogicException If the identifier format is long form + * + * @return string Identifier as a set of octets + */ + public function getIdentifier() + { + $firstOctet = $this->getType(); + + if (Identifier::isLongForm($firstOctet)) { + throw new LogicException(sprintf('Identifier of %s uses the long form and must therefor override "ASNObject::getIdentifier()".', get_class($this))); + } + + return chr($firstOctet); + } + + /** + * Encode this object using DER encoding. + * + * @return string the full binary representation of the complete object + */ + public function getBinary() + { + $result = $this->getIdentifier(); + $result .= $this->createLengthPart(); + $result .= $this->getEncodedValue(); + + return $result; + } + + private function createLengthPart() + { + $contentLength = $this->getContentLength(); + $nrOfLengthOctets = $this->getNumberOfLengthOctets($contentLength); + + if ($nrOfLengthOctets == 1) { + return chr($contentLength); + } else { + // the first length octet determines the number subsequent length octets + $lengthOctets = chr(0x80 | ($nrOfLengthOctets - 1)); + for ($shiftLength = 8 * ($nrOfLengthOctets - 2); $shiftLength >= 0; $shiftLength -= 8) { + $lengthOctets .= chr($contentLength >> $shiftLength); + } + + return $lengthOctets; + } + } + + protected function getNumberOfLengthOctets($contentLength = null) + { + if (!isset($this->nrOfLengthOctets)) { + if ($contentLength == null) { + $contentLength = $this->getContentLength(); + } + + $this->nrOfLengthOctets = 1; + if ($contentLength > 127) { + do { // long form + $this->nrOfLengthOctets++; + $contentLength = $contentLength >> 8; + } while ($contentLength > 0); + } + } + + return $this->nrOfLengthOctets; + } + + protected function getContentLength() + { + if (!isset($this->contentLength)) { + $this->contentLength = $this->calculateContentLength(); + } + + return $this->contentLength; + } + + protected function setContentLength($newContentLength) + { + $this->contentLength = $newContentLength; + $this->getNumberOfLengthOctets($newContentLength); + } + + /** + * Returns the length of the whole object (including the identifier and length octets). + */ + public function getObjectLength() + { + $nrOfIdentifierOctets = strlen($this->getIdentifier()); + $contentLength = $this->getContentLength(); + $nrOfLengthOctets = $this->getNumberOfLengthOctets($contentLength); + + return $nrOfIdentifierOctets + $nrOfLengthOctets + $contentLength; + } + + public function __toString() + { + return $this->getContent(); + } + + /** + * Returns the name of the ASN.1 Type of this object. + * + * @see Identifier::getName() + */ + public function getTypeName() + { + return Identifier::getName($this->getType()); + } + + /** + * @param string $binaryData + * @param int $offsetIndex + * + * @throws ParserException + * + * @return \FG\ASN1\ASNObject + */ + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + if (strlen($binaryData) <= $offsetIndex) { + throw new ParserException('Can not parse binary from data: Offset index larger than input size', $offsetIndex); + } + + $identifierOctet = ord($binaryData[$offsetIndex]); + if (Identifier::isContextSpecificClass($identifierOctet) && Identifier::isConstructed($identifierOctet)) { + return ExplicitlyTaggedObject::fromBinary($binaryData, $offsetIndex); + } + + switch ($identifierOctet) { + case Identifier::BITSTRING: + return BitString::fromBinary($binaryData, $offsetIndex); + case Identifier::BOOLEAN: + return Boolean::fromBinary($binaryData, $offsetIndex); + case Identifier::ENUMERATED: + return Enumerated::fromBinary($binaryData, $offsetIndex); + case Identifier::INTEGER: + return Integer::fromBinary($binaryData, $offsetIndex); + case Identifier::NULL: + return NullObject::fromBinary($binaryData, $offsetIndex); + case Identifier::OBJECT_IDENTIFIER: + return ObjectIdentifier::fromBinary($binaryData, $offsetIndex); + case Identifier::RELATIVE_OID: + return RelativeObjectIdentifier::fromBinary($binaryData, $offsetIndex); + case Identifier::OCTETSTRING: + return OctetString::fromBinary($binaryData, $offsetIndex); + case Identifier::SEQUENCE: + return Sequence::fromBinary($binaryData, $offsetIndex); + case Identifier::SET: + return Set::fromBinary($binaryData, $offsetIndex); + case Identifier::UTC_TIME: + return UTCTime::fromBinary($binaryData, $offsetIndex); + case Identifier::GENERALIZED_TIME: + return GeneralizedTime::fromBinary($binaryData, $offsetIndex); + case Identifier::IA5_STRING: + return IA5String::fromBinary($binaryData, $offsetIndex); + case Identifier::PRINTABLE_STRING: + return PrintableString::fromBinary($binaryData, $offsetIndex); + case Identifier::NUMERIC_STRING: + return NumericString::fromBinary($binaryData, $offsetIndex); + case Identifier::UTF8_STRING: + return UTF8String::fromBinary($binaryData, $offsetIndex); + case Identifier::UNIVERSAL_STRING: + return UniversalString::fromBinary($binaryData, $offsetIndex); + case Identifier::CHARACTER_STRING: + return CharacterString::fromBinary($binaryData, $offsetIndex); + case Identifier::GENERAL_STRING: + return GeneralString::fromBinary($binaryData, $offsetIndex); + case Identifier::VISIBLE_STRING: + return VisibleString::fromBinary($binaryData, $offsetIndex); + case Identifier::GRAPHIC_STRING: + return GraphicString::fromBinary($binaryData, $offsetIndex); + case Identifier::BMP_STRING: + return BMPString::fromBinary($binaryData, $offsetIndex); + case Identifier::T61_STRING: + return T61String::fromBinary($binaryData, $offsetIndex); + case Identifier::OBJECT_DESCRIPTOR: + return ObjectDescriptor::fromBinary($binaryData, $offsetIndex); + default: + // At this point the identifier may be >1 byte. + if (Identifier::isConstructed($identifierOctet)) { + return new UnknownConstructedObject($binaryData, $offsetIndex); + } else { + $identifier = self::parseBinaryIdentifier($binaryData, $offsetIndex); + $lengthOfUnknownObject = self::parseContentLength($binaryData, $offsetIndex); + $offsetIndex += $lengthOfUnknownObject; + + return new UnknownObject($identifier, $lengthOfUnknownObject); + } + } + } + + protected static function parseIdentifier($identifierOctet, $expectedIdentifier, $offsetForExceptionHandling) + { + if (is_string($identifierOctet) || is_numeric($identifierOctet) == false) { + $identifierOctet = ord($identifierOctet); + } + + if ($identifierOctet != $expectedIdentifier) { + $message = 'Can not create an '.Identifier::getName($expectedIdentifier).' from an '.Identifier::getName($identifierOctet); + throw new ParserException($message, $offsetForExceptionHandling); + } + } + + protected static function parseBinaryIdentifier($binaryData, &$offsetIndex) + { + if (strlen($binaryData) <= $offsetIndex) { + throw new ParserException('Can not parse identifier from data: Offset index larger than input size', $offsetIndex); + } + + $identifier = $binaryData[$offsetIndex++]; + + if (Identifier::isLongForm(ord($identifier)) == false) { + return $identifier; + } + + while (true) { + if (strlen($binaryData) <= $offsetIndex) { + throw new ParserException('Can not parse identifier (long form) from data: Offset index larger than input size', $offsetIndex); + } + $nextOctet = $binaryData[$offsetIndex++]; + $identifier .= $nextOctet; + + if ((ord($nextOctet) & 0x80) === 0) { + // the most significant bit is 0 to we have reached the end of the identifier + break; + } + } + + return $identifier; + } + + protected static function parseContentLength(&$binaryData, &$offsetIndex, $minimumLength = 0) + { + if (strlen($binaryData) <= $offsetIndex) { + throw new ParserException('Can not parse content length from data: Offset index larger than input size', $offsetIndex); + } + + $contentLength = ord($binaryData[$offsetIndex++]); + if (($contentLength & 0x80) != 0) { + // bit 8 is set -> this is the long form + $nrOfLengthOctets = $contentLength & 0x7F; + $contentLength = BigInteger::create(0x00); + for ($i = 0; $i < $nrOfLengthOctets; $i++) { + if (strlen($binaryData) <= $offsetIndex) { + throw new ParserException('Can not parse content length (long form) from data: Offset index larger than input size', $offsetIndex); + } + $contentLength = $contentLength->shiftLeft(8)->add(ord($binaryData[$offsetIndex++])); + } + + if ($contentLength->compare(PHP_INT_MAX) > 0) { + throw new ParserException("Can not parse content length from data: length > maximum integer", $offsetIndex); + } + + $contentLength = $contentLength->toInteger(); + } + + if ($contentLength < $minimumLength) { + throw new ParserException('A '.get_called_class()." should have a content length of at least {$minimumLength}. Extracted length was {$contentLength}", $offsetIndex); + } + + $lenDataRemaining = strlen($binaryData) - $offsetIndex; + + if ($lenDataRemaining < $contentLength) { + throw new ParserException("Content length {$contentLength} exceeds remaining data length {$lenDataRemaining}", $offsetIndex); + } + + return $contentLength; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/AbstractString.php b/vendor/fgrosse/phpasn1/lib/ASN1/AbstractString.php new file mode 100644 index 000000000..7e0d7ddbb --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/AbstractString.php @@ -0,0 +1,136 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use Exception; + +abstract class AbstractString extends ASNObject implements Parsable +{ + /** @var string */ + protected $value; + private $checkStringForIllegalChars = true; + private $allowedCharacters = []; + + /** + * The abstract base class for ASN.1 classes which represent some string of character. + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + } + + public function getContent() + { + return $this->value; + } + + protected function allowCharacter($character) + { + $this->allowedCharacters[] = $character; + } + + protected function allowCharacters(...$characters) + { + foreach ($characters as $character) { + $this->allowedCharacters[] = $character; + } + } + + protected function allowNumbers() + { + foreach (range('0', '9') as $char) { + $this->allowedCharacters[] = (string) $char; + } + } + + protected function allowAllLetters() + { + $this->allowSmallLetters(); + $this->allowCapitalLetters(); + } + + protected function allowSmallLetters() + { + foreach (range('a', 'z') as $char) { + $this->allowedCharacters[] = $char; + } + } + + protected function allowCapitalLetters() + { + foreach (range('A', 'Z') as $char) { + $this->allowedCharacters[] = $char; + } + } + + protected function allowSpaces() + { + $this->allowedCharacters[] = ' '; + } + + protected function allowAll() + { + $this->checkStringForIllegalChars = false; + } + + protected function calculateContentLength() + { + return strlen($this->value); + } + + protected function getEncodedValue() + { + if ($this->checkStringForIllegalChars) { + $this->checkString(); + } + + return $this->value; + } + + protected function checkString() + { + $stringLength = $this->getContentLength(); + for ($i = 0; $i < $stringLength; $i++) { + if (in_array($this->value[$i], $this->allowedCharacters) == false) { + $typeName = Identifier::getName($this->getType()); + throw new Exception("Could not create a {$typeName} from the character sequence '{$this->value}'."); + } + } + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + $parsedObject = new static(''); + + self::parseIdentifier($binaryData[$offsetIndex], $parsedObject->getType(), $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + $string = substr($binaryData, $offsetIndex, $contentLength); + $offsetIndex += $contentLength; + + $parsedObject->value = $string; + $parsedObject->setContentLength($contentLength); + return $parsedObject; + } + + public static function isValid($string) + { + $testObject = new static($string); + try { + $testObject->checkString(); + + return true; + } catch (Exception $exception) { + return false; + } + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/AbstractTime.php b/vendor/fgrosse/phpasn1/lib/ASN1/AbstractTime.php new file mode 100644 index 000000000..9fad50516 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/AbstractTime.php @@ -0,0 +1,78 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use DateInterval; +use DateTime; +use DateTimeZone; +use Exception; + +abstract class AbstractTime extends ASNObject +{ + /** @var DateTime */ + protected $value; + + public function __construct($dateTime = null, $dateTimeZone = 'UTC') + { + if ($dateTime == null || is_string($dateTime)) { + $timeZone = new DateTimeZone($dateTimeZone); + $dateTimeObject = new DateTime($dateTime, $timeZone); + if ($dateTimeObject == false) { + $errorMessage = $this->getLastDateTimeErrors(); + $className = Identifier::getName($this->getType()); + throw new Exception(sprintf("Could not create %s from date time string '%s': %s", $className, $dateTime, $errorMessage)); + } + $dateTime = $dateTimeObject; + } elseif (!$dateTime instanceof DateTime) { + throw new Exception('Invalid first argument for some instance of AbstractTime constructor'); + } + + $this->value = $dateTime; + } + + public function getContent() + { + return $this->value; + } + + protected function getLastDateTimeErrors() + { + $messages = ''; + $lastErrors = DateTime::getLastErrors(); + foreach ($lastErrors['errors'] as $errorMessage) { + $messages .= "{$errorMessage}, "; + } + + return substr($messages, 0, -2); + } + + public function __toString() + { + return $this->value->format("Y-m-d\tH:i:s"); + } + + protected static function extractTimeZoneData(&$binaryData, &$offsetIndex, DateTime $dateTime) + { + $sign = $binaryData[$offsetIndex++]; + $timeOffsetHours = intval(substr($binaryData, $offsetIndex, 2)); + $timeOffsetMinutes = intval(substr($binaryData, $offsetIndex + 2, 2)); + $offsetIndex += 4; + + $interval = new DateInterval("PT{$timeOffsetHours}H{$timeOffsetMinutes}M"); + if ($sign == '+') { + $dateTime->sub($interval); + } else { + $dateTime->add($interval); + } + + return $dateTime; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Base128.php b/vendor/fgrosse/phpasn1/lib/ASN1/Base128.php new file mode 100644 index 000000000..119ee7b9c --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Base128.php @@ -0,0 +1,63 @@ +modulus(0x80)->toInteger()); + + $value = $value->shiftRight(7); + while ($value->compare(0) > 0) { + $octets .= chr(0x80 | $value->modulus(0x80)->toInteger()); + $value = $value->shiftRight(7); + } + + return strrev($octets); + } + + /** + * @param string $octets + * + * @throws InvalidArgumentException if the given octets represent a malformed base-128 value or the decoded value would exceed the the maximum integer length + * + * @return int + */ + public static function decode($octets) + { + $bitsPerOctet = 7; + $value = BigInteger::create(0); + $i = 0; + + while (true) { + if (!isset($octets[$i])) { + throw new InvalidArgumentException(sprintf('Malformed base-128 encoded value (0x%s).', strtoupper(bin2hex($octets)) ?: '0')); + } + + $octet = ord($octets[$i++]); + + $l1 = $value->shiftLeft($bitsPerOctet); + $r1 = $octet & 0x7f; + $value = $l1->add($r1); + + if (0 === ($octet & 0x80)) { + break; + } + } + + return (string)$value; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Composite/AttributeTypeAndValue.php b/vendor/fgrosse/phpasn1/lib/ASN1/Composite/AttributeTypeAndValue.php new file mode 100644 index 000000000..3f4027c25 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Composite/AttributeTypeAndValue.php @@ -0,0 +1,35 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Composite; + +use FG\ASN1\ASNObject; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\ObjectIdentifier; + +class AttributeTypeAndValue extends Sequence +{ + /** + * @param ObjectIdentifier|string $objIdentifier + * @param \FG\ASN1\ASNObject $value + */ + public function __construct($objIdentifier, ASNObject $value) + { + if ($objIdentifier instanceof ObjectIdentifier == false) { + $objIdentifier = new ObjectIdentifier($objIdentifier); + } + parent::__construct($objIdentifier, $value); + } + + public function __toString() + { + return $this->children[0].': '.$this->children[1]; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Composite/RDNString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Composite/RDNString.php new file mode 100644 index 000000000..e95e7acd3 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Composite/RDNString.php @@ -0,0 +1,37 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Composite; + +use FG\ASN1\Universal\PrintableString; +use FG\ASN1\Universal\IA5String; +use FG\ASN1\Universal\UTF8String; + +class RDNString extends RelativeDistinguishedName +{ + /** + * @param string|\FG\ASN1\Universal\ObjectIdentifier $objectIdentifierString + * @param string|\FG\ASN1\ASNObject $value + */ + public function __construct($objectIdentifierString, $value) + { + if (PrintableString::isValid($value)) { + $value = new PrintableString($value); + } else { + if (IA5String::isValid($value)) { + $value = new IA5String($value); + } else { + $value = new UTF8String($value); + } + } + + parent::__construct($objectIdentifierString, $value); + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Composite/RelativeDistinguishedName.php b/vendor/fgrosse/phpasn1/lib/ASN1/Composite/RelativeDistinguishedName.php new file mode 100644 index 000000000..4185f41a1 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Composite/RelativeDistinguishedName.php @@ -0,0 +1,50 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Composite; + +use FG\ASN1\Exception\NotImplementedException; +use FG\ASN1\ASNObject; +use FG\ASN1\Universal\Set; + +class RelativeDistinguishedName extends Set +{ + /** + * @param string|\FG\ASN1\Universal\ObjectIdentifier $objIdentifierString + * @param \FG\ASN1\ASNObject $value + */ + public function __construct($objIdentifierString, ASNObject $value) + { + // TODO: This does only support one element in the RelativeDistinguishedName Set but it it is defined as follows: + // RelativeDistinguishedName ::= SET SIZE (1..MAX) OF AttributeTypeAndValue + parent::__construct(new AttributeTypeAndValue($objIdentifierString, $value)); + } + + public function getContent() + { + /** @var \FG\ASN1\ASNObject $firstObject */ + $firstObject = $this->children[0]; + return $firstObject->__toString(); + } + + /** + * At the current version this code can not work since the implementation of Construct requires + * the class to support a constructor without arguments. + * + * @deprecated this function is not yet implemented! Feel free to submit a pull request on github + * @param string $binaryData + * @param int $offsetIndex + * @throws NotImplementedException + */ + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + throw new NotImplementedException(); + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Construct.php b/vendor/fgrosse/phpasn1/lib/ASN1/Construct.php new file mode 100644 index 000000000..58f961375 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Construct.php @@ -0,0 +1,191 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use ArrayAccess; +use ArrayIterator; +use Countable; +use FG\ASN1\Exception\ParserException; +use Iterator; + +abstract class Construct extends ASNObject implements Countable, ArrayAccess, Iterator, Parsable +{ + /** @var \FG\ASN1\ASNObject[] */ + protected $children; + private $iteratorPosition; + + /** + * @param \FG\ASN1\ASNObject[] $children the variadic type hint is commented due to https://github.com/facebook/hhvm/issues/4858 + */ + public function __construct(/* HH_FIXME[4858]: variadic + strict */ ...$children) + { + $this->children = $children; + $this->iteratorPosition = 0; + } + + public function getContent() + { + return $this->children; + } + + public function rewind() + { + $this->iteratorPosition = 0; + } + + public function current() + { + return $this->children[$this->iteratorPosition]; + } + + public function key() + { + return $this->iteratorPosition; + } + + public function next() + { + $this->iteratorPosition++; + } + + public function valid() + { + return isset($this->children[$this->iteratorPosition]); + } + + public function offsetExists($offset) + { + return array_key_exists($offset, $this->children); + } + + public function offsetGet($offset) + { + return $this->children[$offset]; + } + + public function offsetSet($offset, $value) + { + if ($offset === null) { + $offset = count($this->children); + } + + $this->children[$offset] = $value; + } + + public function offsetUnset($offset) + { + unset($this->children[$offset]); + } + + protected function calculateContentLength() + { + $length = 0; + foreach ($this->children as $component) { + $length += $component->getObjectLength(); + } + + return $length; + } + + protected function getEncodedValue() + { + $result = ''; + foreach ($this->children as $component) { + $result .= $component->getBinary(); + } + + return $result; + } + + public function addChild(ASNObject $child) + { + $this->children[] = $child; + } + + public function addChildren(array $children) + { + foreach ($children as $child) { + $this->addChild($child); + } + } + + public function __toString() + { + $nrOfChildren = $this->getNumberOfChildren(); + $childString = $nrOfChildren == 1 ? 'child' : 'children'; + + return "[{$nrOfChildren} {$childString}]"; + } + + public function getNumberOfChildren() + { + return count($this->children); + } + + /** + * @return \FG\ASN1\ASNObject[] + */ + public function getChildren() + { + return $this->children; + } + + /** + * @return \FG\ASN1\ASNObject + */ + public function getFirstChild() + { + return $this->children[0]; + } + + /** + * @param string $binaryData + * @param int $offsetIndex + * + * @throws Exception\ParserException + * + * @return Construct|static + */ + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + $parsedObject = new static(); + self::parseIdentifier($binaryData[$offsetIndex], $parsedObject->getType(), $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + $startIndex = $offsetIndex; + + $children = []; + $octetsToRead = $contentLength; + while ($octetsToRead > 0) { + $newChild = ASNObject::fromBinary($binaryData, $offsetIndex); + $octetsToRead -= $newChild->getObjectLength(); + $children[] = $newChild; + } + + if ($octetsToRead !== 0) { + throw new ParserException("Sequence length incorrect", $startIndex); + } + + $parsedObject->addChildren($children); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } + + public function count($mode = COUNT_NORMAL) + { + return count($this->children, $mode); + } + + public function getIterator() + { + return new ArrayIterator($this->children); + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Exception/NotImplementedException.php b/vendor/fgrosse/phpasn1/lib/ASN1/Exception/NotImplementedException.php new file mode 100644 index 000000000..c9f8e82e6 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Exception/NotImplementedException.php @@ -0,0 +1,15 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Exception; + +class NotImplementedException extends \Exception +{ +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Exception/ParserException.php b/vendor/fgrosse/phpasn1/lib/ASN1/Exception/ParserException.php new file mode 100644 index 000000000..4bda4e872 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Exception/ParserException.php @@ -0,0 +1,29 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Exception; + +class ParserException extends \Exception +{ + private $errorMessage; + private $offset; + + public function __construct($errorMessage, $offset) + { + $this->errorMessage = $errorMessage; + $this->offset = $offset; + parent::__construct("ASN.1 Parser Exception at offset {$this->offset}: {$this->errorMessage}"); + } + + public function getOffset() + { + return $this->offset; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/ExplicitlyTaggedObject.php b/vendor/fgrosse/phpasn1/lib/ASN1/ExplicitlyTaggedObject.php new file mode 100644 index 000000000..b947a9599 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/ExplicitlyTaggedObject.php @@ -0,0 +1,131 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use FG\ASN1\Exception\ParserException; + +/** + * Class ExplicitlyTaggedObject decorate an inner object with an additional tag that gives information about + * its context specific meaning. + * + * Explanation taken from A Layman's Guide to a Subset of ASN.1, BER, and DER: + * >>> An RSA Laboratories Technical Note + * >>> Burton S. Kaliski Jr. + * >>> Revised November 1, 1993 + * + * [...] + * Explicitly tagged types are derived from other types by adding an outer tag to the underlying type. + * In effect, explicitly tagged types are structured types consisting of one component, the underlying type. + * Explicit tagging is denoted by the ASN.1 keywords [class number] EXPLICIT (see Section 5.2). + * [...] + * + * @see http://luca.ntop.org/Teaching/Appunti/asn1.html + */ +class ExplicitlyTaggedObject extends ASNObject +{ + /** @var \FG\ASN1\ASNObject[] */ + private $decoratedObjects; + private $tag; + + /** + * @param int $tag + * @param \FG\ASN1\ASNObject $objects,... + */ + public function __construct($tag, /* HH_FIXME[4858]: variadic + strict */ ...$objects) + { + $this->tag = $tag; + $this->decoratedObjects = $objects; + } + + protected function calculateContentLength() + { + $length = 0; + foreach ($this->decoratedObjects as $object) { + $length += $object->getObjectLength(); + } + + return $length; + } + + protected function getEncodedValue() + { + $encoded = ''; + foreach ($this->decoratedObjects as $object) { + $encoded .= $object->getBinary(); + } + + return $encoded; + } + + public function getContent() + { + return $this->decoratedObjects; + } + + public function __toString() + { + switch ($length = count($this->decoratedObjects)) { + case 0: + return "Context specific empty object with tag [{$this->tag}]"; + case 1: + $decoratedType = Identifier::getShortName($this->decoratedObjects[0]->getType()); + return "Context specific $decoratedType with tag [{$this->tag}]"; + default: + return "$length context specific objects with tag [{$this->tag}]"; + } + } + + public function getType() + { + return ord($this->getIdentifier()); + } + + public function getIdentifier() + { + $identifier = Identifier::create(Identifier::CLASS_CONTEXT_SPECIFIC, true, $this->tag); + + return is_int($identifier) ? chr($identifier) : $identifier; + } + + public function getTag() + { + return $this->tag; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + $identifier = self::parseBinaryIdentifier($binaryData, $offsetIndex); + $firstIdentifierOctet = ord($identifier); + assert(Identifier::isContextSpecificClass($firstIdentifierOctet), 'identifier octet should indicate context specific class'); + assert(Identifier::isConstructed($firstIdentifierOctet), 'identifier octet should indicate constructed object'); + $tag = Identifier::getTagNumber($identifier); + + $totalContentLength = self::parseContentLength($binaryData, $offsetIndex); + $remainingContentLength = $totalContentLength; + + $offsetIndexOfDecoratedObject = $offsetIndex; + $decoratedObjects = []; + + while ($remainingContentLength > 0) { + $nextObject = ASNObject::fromBinary($binaryData, $offsetIndex); + $remainingContentLength -= $nextObject->getObjectLength(); + $decoratedObjects[] = $nextObject; + } + + if ($remainingContentLength != 0) { + throw new ParserException("Context-Specific explicitly tagged object [$tag] starting at offset $offsetIndexOfDecoratedObject specifies a length of $totalContentLength octets but $remainingContentLength remain after parsing the content", $offsetIndexOfDecoratedObject); + } + + $parsedObject = new self($tag, ...$decoratedObjects); + $parsedObject->setContentLength($totalContentLength); + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Identifier.php b/vendor/fgrosse/phpasn1/lib/ASN1/Identifier.php new file mode 100644 index 000000000..b21caa34c --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Identifier.php @@ -0,0 +1,339 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use Exception; + +/** + * The Identifier encodes the ASN.1 tag (class and number) of the type of a data value. + * + * Every identifier whose number is in the range 0 to 30 has the following structure: + * + * Bits: 8 7 6 5 4 3 2 1 + * | Class | P/C | Tag number | + * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + * + * Bits 8 and 7 define the class of this type ( Universal, Application, Context-specific or Private). + * Bit 6 encoded whether this type is primitive or constructed + * The remaining bits 5 - 1 encode the tag number + */ +class Identifier +{ + const CLASS_UNIVERSAL = 0x00; + const CLASS_APPLICATION = 0x01; + const CLASS_CONTEXT_SPECIFIC = 0x02; + const CLASS_PRIVATE = 0x03; + + const EOC = 0x00; // unsupported for now + const BOOLEAN = 0x01; + const INTEGER = 0x02; + const BITSTRING = 0x03; + const OCTETSTRING = 0x04; + const NULL = 0x05; + const OBJECT_IDENTIFIER = 0x06; + const OBJECT_DESCRIPTOR = 0x07; + const EXTERNAL = 0x08; // unsupported for now + const REAL = 0x09; // unsupported for now + const ENUMERATED = 0x0A; + const EMBEDDED_PDV = 0x0B; // unsupported for now + const UTF8_STRING = 0x0C; + const RELATIVE_OID = 0x0D; + // value 0x0E and 0x0F are reserved for future use + + const SEQUENCE = 0x30; + const SET = 0x31; + const NUMERIC_STRING = 0x12; + const PRINTABLE_STRING = 0x13; + const T61_STRING = 0x14; // sometimes referred to as TeletextString + const VIDEOTEXT_STRING = 0x15; + const IA5_STRING = 0x16; + const UTC_TIME = 0x17; + const GENERALIZED_TIME = 0x18; + const GRAPHIC_STRING = 0x19; + const VISIBLE_STRING = 0x1A; + const GENERAL_STRING = 0x1B; + const UNIVERSAL_STRING = 0x1C; + const CHARACTER_STRING = 0x1D; // Unrestricted character type + const BMP_STRING = 0x1E; + + const LONG_FORM = 0x1F; + const IS_CONSTRUCTED = 0x20; + + /** + * Creates an identifier. Short form identifiers are returned as integers + * for BC, long form identifiers will be returned as a string of octets. + * + * @param int $class + * @param bool $isConstructed + * @param int $tagNumber + * + * @throws Exception if the given arguments are invalid + * + * @return int|string + */ + public static function create($class, $isConstructed, $tagNumber) + { + if (!is_numeric($class) || $class < self::CLASS_UNIVERSAL || $class > self::CLASS_PRIVATE) { + throw new Exception(sprintf('Invalid class %d given', $class)); + } + + if (!is_bool($isConstructed)) { + throw new Exception("\$isConstructed must be a boolean value ($isConstructed given)"); + } + + $tagNumber = self::makeNumeric($tagNumber); + if ($tagNumber < 0) { + throw new Exception(sprintf('Invalid $tagNumber %d given. You can only use positive integers.', $tagNumber)); + } + + if ($tagNumber < self::LONG_FORM) { + return ($class << 6) | ($isConstructed << 5) | $tagNumber; + } + + $firstOctet = ($class << 6) | ($isConstructed << 5) | self::LONG_FORM; + + // Tag numbers formatted in long form are base-128 encoded. See X.609#8.1.2.4 + return chr($firstOctet).Base128::encode($tagNumber); + } + + public static function isConstructed($identifierOctet) + { + return ($identifierOctet & self::IS_CONSTRUCTED) === self::IS_CONSTRUCTED; + } + + public static function isLongForm($identifierOctet) + { + return ($identifierOctet & self::LONG_FORM) === self::LONG_FORM; + } + + /** + * Return the name of the mapped ASN.1 type with a preceding "ASN.1 ". + * + * Example: ASN.1 Octet String + * + * @see Identifier::getShortName() + * + * @param int|string $identifier + * + * @return string + */ + public static function getName($identifier) + { + $identifierOctet = self::makeNumeric($identifier); + + $typeName = static::getShortName($identifier); + + if (($identifierOctet & self::LONG_FORM) < self::LONG_FORM) { + $typeName = "ASN.1 {$typeName}"; + } + + return $typeName; + } + + /** + * Return the short version of the type name. + * + * If the given identifier octet can be mapped to a known universal type this will + * return its name. Else Identifier::getClassDescription() is used to retrieve + * information about the identifier. + * + * @see Identifier::getName() + * @see Identifier::getClassDescription() + * + * @param int|string $identifier + * + * @return string + */ + public static function getShortName($identifier) + { + $identifierOctet = self::makeNumeric($identifier); + + switch ($identifierOctet) { + case self::EOC: + return 'End-of-contents octet'; + case self::BOOLEAN: + return 'Boolean'; + case self::INTEGER: + return 'Integer'; + case self::BITSTRING: + return 'Bit String'; + case self::OCTETSTRING: + return 'Octet String'; + case self::NULL: + return 'NULL'; + case self::OBJECT_IDENTIFIER: + return 'Object Identifier'; + case self::OBJECT_DESCRIPTOR: + return 'Object Descriptor'; + case self::EXTERNAL: + return 'External Type'; + case self::REAL: + return 'Real'; + case self::ENUMERATED: + return 'Enumerated'; + case self::EMBEDDED_PDV: + return 'Embedded PDV'; + case self::UTF8_STRING: + return 'UTF8 String'; + case self::RELATIVE_OID: + return 'Relative OID'; + case self::SEQUENCE: + return 'Sequence'; + case self::SET: + return 'Set'; + case self::NUMERIC_STRING: + return 'Numeric String'; + case self::PRINTABLE_STRING: + return 'Printable String'; + case self::T61_STRING: + return 'T61 String'; + case self::VIDEOTEXT_STRING: + return 'Videotext String'; + case self::IA5_STRING: + return 'IA5 String'; + case self::UTC_TIME: + return 'UTC Time'; + case self::GENERALIZED_TIME: + return 'Generalized Time'; + case self::GRAPHIC_STRING: + return 'Graphic String'; + case self::VISIBLE_STRING: + return 'Visible String'; + case self::GENERAL_STRING: + return 'General String'; + case self::UNIVERSAL_STRING: + return 'Universal String'; + case self::CHARACTER_STRING: + return 'Character String'; + case self::BMP_STRING: + return 'BMP String'; + + case 0x0E: + return 'RESERVED (0x0E)'; + case 0x0F: + return 'RESERVED (0x0F)'; + + case self::LONG_FORM: + default: + $classDescription = self::getClassDescription($identifier); + + if (is_int($identifier)) { + $identifier = chr($identifier); + } + + return "$classDescription (0x".strtoupper(bin2hex($identifier)).')'; + } + } + + /** + * Returns a textual description of the information encoded in a given identifier octet. + * + * The first three (most significant) bytes are evaluated to determine if this is a + * constructed or primitive type and if it is either universal, application, context-specific or + * private. + * + * Example: + * Constructed context-specific + * Primitive universal + * + * @param int|string $identifier + * + * @return string + */ + public static function getClassDescription($identifier) + { + $identifierOctet = self::makeNumeric($identifier); + + if (self::isConstructed($identifierOctet)) { + $classDescription = 'Constructed '; + } else { + $classDescription = 'Primitive '; + } + $classBits = $identifierOctet >> 6; + switch ($classBits) { + case self::CLASS_UNIVERSAL: + $classDescription .= 'universal'; + break; + case self::CLASS_APPLICATION: + $classDescription .= 'application'; + break; + case self::CLASS_CONTEXT_SPECIFIC: + $tagNumber = self::getTagNumber($identifier); + $classDescription = "[$tagNumber] Context-specific"; + break; + case self::CLASS_PRIVATE: + $classDescription .= 'private'; + break; + + default: + return "INVALID IDENTIFIER OCTET: {$identifierOctet}"; + } + + return $classDescription; + } + + /** + * @param int|string $identifier + * + * @return int + */ + public static function getTagNumber($identifier) + { + $firstOctet = self::makeNumeric($identifier); + $tagNumber = $firstOctet & self::LONG_FORM; + + if ($tagNumber < self::LONG_FORM) { + return $tagNumber; + } + + if (is_numeric($identifier)) { + $identifier = chr($identifier); + } + return Base128::decode(substr($identifier, 1)); + } + + public static function isUniversalClass($identifier) + { + $identifier = self::makeNumeric($identifier); + + return $identifier >> 6 == self::CLASS_UNIVERSAL; + } + + public static function isApplicationClass($identifier) + { + $identifier = self::makeNumeric($identifier); + + return $identifier >> 6 == self::CLASS_APPLICATION; + } + + public static function isContextSpecificClass($identifier) + { + $identifier = self::makeNumeric($identifier); + + return $identifier >> 6 == self::CLASS_CONTEXT_SPECIFIC; + } + + public static function isPrivateClass($identifier) + { + $identifier = self::makeNumeric($identifier); + + return $identifier >> 6 == self::CLASS_PRIVATE; + } + + private static function makeNumeric($identifierOctet) + { + if (!is_numeric($identifierOctet)) { + return ord($identifierOctet); + } else { + return $identifierOctet; + } + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/OID.php b/vendor/fgrosse/phpasn1/lib/ASN1/OID.php new file mode 100644 index 000000000..61ab01e15 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/OID.php @@ -0,0 +1,198 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +class OID +{ + const RSA_ENCRYPTION = '1.2.840.113549.1.1.1'; + const MD5_WITH_RSA_ENCRYPTION = '1.2.840.113549.1.1.4'; + const SHA1_WITH_RSA_SIGNATURE = '1.2.840.113549.1.1.5'; + const PKCS9_EMAIL = '1.2.840.113549.1.9.1'; + const PKCS9_UNSTRUCTURED_NAME = '1.2.840.113549.1.9.2'; + const PKCS9_CONTENT_TYPE = '1.2.840.113549.1.9.3'; + const PKCS9_MESSAGE_DIGEST = '1.2.840.113549.1.9.4'; + const PKCS9_SIGNING_TIME = '1.2.840.113549.1.9.5'; + const PKCS9_EXTENSION_REQUEST = '1.2.840.113549.1.9.14'; + + // certificate extension identifier + const CERT_EXT_SUBJECT_DIRECTORY_ATTR = '2.5.29.9'; + const CERT_EXT_SUBJECT_KEY_IDENTIFIER = '2.5.29.14'; + const CERT_EXT_KEY_USAGE = '2.5.29.15'; + const CERT_EXT_PRIVATE_KEY_USAGE_PERIOD = '2.5.29.16'; + const CERT_EXT_SUBJECT_ALT_NAME = '2.5.29.17'; + const CERT_EXT_ISSUER_ALT_NAME = '2.5.29.18'; + const CERT_EXT_BASIC_CONSTRAINTS = '2.5.29.19'; + const CERT_EXT_CRL_NUMBER = '2.5.29.20'; + const CERT_EXT_REASON_CODE = '2.5.29.21'; + const CERT_EXT_INVALIDITY_DATE = '2.5.29.24'; + const CERT_EXT_DELTA_CRL_INDICATOR = '2.5.29.27'; + const CERT_EXT_ISSUING_DIST_POINT = '2.5.29.28'; + const CERT_EXT_CERT_ISSUER = '2.5.29.29'; + const CERT_EXT_NAME_CONSTRAINTS = '2.5.29.30'; + const CERT_EXT_CRL_DISTRIBUTION_POINTS = '2.5.29.31'; + const CERT_EXT_CERT_POLICIES = '2.5.29.32'; + const CERT_EXT_AUTHORITY_KEY_IDENTIFIER = '2.5.29.35'; + const CERT_EXT_EXTENDED_KEY_USAGE = '2.5.29.37'; + + // standard certificate files + const COMMON_NAME = '2.5.4.3'; + const SURNAME = '2.5.4.4'; + const SERIAL_NUMBER = '2.5.4.5'; + const COUNTRY_NAME = '2.5.4.6'; + const LOCALITY_NAME = '2.5.4.7'; + const STATE_OR_PROVINCE_NAME = '2.5.4.8'; + const STREET_ADDRESS = '2.5.4.9'; + const ORGANIZATION_NAME = '2.5.4.10'; + const OU_NAME = '2.5.4.11'; + const TITLE = '2.5.4.12'; + const DESCRIPTION = '2.5.4.13'; + const POSTAL_ADDRESS = '2.5.4.16'; + const POSTAL_CODE = '2.5.4.17'; + const AUTHORITY_REVOCATION_LIST = '2.5.4.38'; + + const AUTHORITY_INFORMATION_ACCESS = '1.3.6.1.5.5.7.1.1'; + + /** + * Returns the name of the given object identifier. + * + * Some OIDs are saved as class constants in this class. + * If the wanted oidString is not among them, this method will + * query http://oid-info.com for the right name. + * This behavior can be suppressed by setting the second method parameter to false. + * + * @param string $oidString + * @param bool $loadFromWeb + * + * @see self::loadFromWeb($oidString) + * + * @return string + */ + public static function getName($oidString, $loadFromWeb = true) + { + switch ($oidString) { + case self::RSA_ENCRYPTION: + return 'RSA Encryption'; + case self::MD5_WITH_RSA_ENCRYPTION: + return 'MD5 with RSA Encryption'; + case self::SHA1_WITH_RSA_SIGNATURE: + return 'SHA-1 with RSA Signature'; + + case self::PKCS9_EMAIL: + return 'PKCS #9 Email Address'; + case self::PKCS9_UNSTRUCTURED_NAME: + return 'PKCS #9 Unstructured Name'; + case self::PKCS9_CONTENT_TYPE: + return 'PKCS #9 Content Type'; + case self::PKCS9_MESSAGE_DIGEST: + return 'PKCS #9 Message Digest'; + case self::PKCS9_SIGNING_TIME: + return 'PKCS #9 Signing Time'; + + case self::COMMON_NAME: + return 'Common Name'; + case self::SURNAME: + return 'Surname'; + case self::SERIAL_NUMBER: + return 'Serial Number'; + case self::COUNTRY_NAME: + return 'Country Name'; + case self::LOCALITY_NAME: + return 'Locality Name'; + case self::STATE_OR_PROVINCE_NAME: + return 'State or Province Name'; + case self::STREET_ADDRESS: + return 'Street Address'; + case self::ORGANIZATION_NAME: + return 'Organization Name'; + case self::OU_NAME: + return 'Organization Unit Name'; + case self::TITLE: + return 'Title'; + case self::DESCRIPTION: + return 'Description'; + case self::POSTAL_ADDRESS: + return 'Postal Address'; + case self::POSTAL_CODE: + return 'Postal Code'; + case self::AUTHORITY_REVOCATION_LIST: + return 'Authority Revocation List'; + + case self::CERT_EXT_SUBJECT_DIRECTORY_ATTR: + return 'Subject directory attributes'; + case self::CERT_EXT_SUBJECT_KEY_IDENTIFIER: + return 'Subject key identifier'; + case self::CERT_EXT_KEY_USAGE: + return 'Key usage certificate extension'; + case self::CERT_EXT_PRIVATE_KEY_USAGE_PERIOD: + return 'Private key usage'; + case self::CERT_EXT_SUBJECT_ALT_NAME: + return 'Subject alternative name (SAN)'; + case self::CERT_EXT_ISSUER_ALT_NAME: + return 'Issuer alternative name'; + case self::CERT_EXT_BASIC_CONSTRAINTS: + return 'Basic constraints'; + case self::CERT_EXT_CRL_NUMBER: + return 'CRL number'; + case self::CERT_EXT_REASON_CODE: + return 'Reason code'; + case self::CERT_EXT_INVALIDITY_DATE: + return 'Invalidity code'; + case self::CERT_EXT_DELTA_CRL_INDICATOR: + return 'Delta CRL indicator'; + case self::CERT_EXT_ISSUING_DIST_POINT: + return 'Issuing distribution point'; + case self::CERT_EXT_CERT_ISSUER: + return 'Certificate issuer'; + case self::CERT_EXT_NAME_CONSTRAINTS: + return 'Name constraints'; + case self::CERT_EXT_CRL_DISTRIBUTION_POINTS: + return 'CRL distribution points'; + case self::CERT_EXT_CERT_POLICIES: + return 'Certificate policies '; + case self::CERT_EXT_AUTHORITY_KEY_IDENTIFIER: + return 'Authority key identifier'; + case self::CERT_EXT_EXTENDED_KEY_USAGE: + return 'Extended key usage'; + case self::AUTHORITY_INFORMATION_ACCESS: + return 'Certificate Authority Information Access (AIA)'; + + default: + if ($loadFromWeb) { + return self::loadFromWeb($oidString); + } else { + return $oidString; + } + } + } + + public static function loadFromWeb($oidString) + { + $ch = curl_init("http://oid-info.com/get/{$oidString}"); + + curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); + curl_setopt($ch, CURLOPT_HEADER, 0); + + $contents = curl_exec($ch); + curl_close($ch); + + // This pattern needs to be updated as soon as the website layout of oid-info.com changes + preg_match_all('#(.+)\(\d+\)#si', $contents, $oidName); + + if (empty($oidName[1])) { + return "{$oidString} (unknown)"; + } + + $oidName = ucfirst(strtolower(preg_replace('/([A-Z][a-z])/', ' $1', $oidName[1][0]))); + $oidName = str_replace('-', ' ', $oidName); + + return "{$oidName} ({$oidString})"; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Parsable.php b/vendor/fgrosse/phpasn1/lib/ASN1/Parsable.php new file mode 100644 index 000000000..fa66b558d --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Parsable.php @@ -0,0 +1,32 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use FG\ASN1\Exception\ParserException; + +/** + * The Parsable interface describes classes that can be parsed from their binary DER representation. + */ +interface Parsable +{ + /** + * Parse an instance of this class from its binary DER encoded representation. + * + * @param string $binaryData + * @param int $offsetIndex the offset at which parsing of the $binaryData is started. This parameter ill be modified + * to contain the offset index of the next object after this object has been parsed + * + * @throws ParserException if the given binary data is either invalid or not currently supported + * + * @return static + */ + public static function fromBinary(&$binaryData, &$offsetIndex = null); +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/TemplateParser.php b/vendor/fgrosse/phpasn1/lib/ASN1/TemplateParser.php new file mode 100644 index 000000000..90a40b037 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/TemplateParser.php @@ -0,0 +1,70 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +use Exception; +use FG\ASN1\Exception\ParserException; +use FG\ASN1\Universal\Sequence; + +class TemplateParser +{ + /** + * @param string $data + * @param array $template + * @return \FG\ASN1\ASNObject|Sequence + * @throws ParserException if there was an issue parsing + */ + public function parseBase64($data, array $template) + { + // TODO test with invalid data + return $this->parseBinary(base64_decode($data), $template); + } + + /** + * @param string $binary + * @param array $template + * @return \FG\ASN1\ASNObject|Sequence + * @throws ParserException if there was an issue parsing + */ + public function parseBinary($binary, array $template) + { + $parsedObject = ASNObject::fromBinary($binary); + + foreach ($template as $key => $value) { + $this->validate($parsedObject, $key, $value); + } + + return $parsedObject; + } + + private function validate(ASNObject $object, $key, $value) + { + if (is_array($value)) { + $this->assertTypeId($key, $object); + + /* @var Construct $object */ + foreach ($value as $key => $child) { + $this->validate($object->current(), $key, $child); + $object->next(); + } + } else { + $this->assertTypeId($value, $object); + } + } + + private function assertTypeId($expectedTypeId, ASNObject $object) + { + $actualType = $object->getType(); + if ($expectedTypeId != $actualType) { + throw new Exception("Expected type ($expectedTypeId) does not match actual type ($actualType"); + } + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/BMPString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/BMPString.php new file mode 100644 index 000000000..83ec6a910 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/BMPString.php @@ -0,0 +1,41 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class BMPString extends AbstractString +{ + /** + * Creates a new ASN.1 BMP String. + * + * BMPString is a subtype of UniversalString that has its own + * unique tag and contains only the characters in the + * Basic Multilingual Plane (those corresponding to the first + * 64K-2 cells, less cells whose encoding is used to address + * characters outside the Basic Multilingual Plane) of ISO/IEC 10646-1. + * + * TODO The encodable characters of this type are not yet checked. + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::BMP_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/BitString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/BitString.php new file mode 100644 index 000000000..226695c59 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/BitString.php @@ -0,0 +1,88 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use Exception; +use FG\ASN1\Exception\ParserException; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; + +class BitString extends OctetString implements Parsable +{ + private $nrOfUnusedBits; + + /** + * Creates a new ASN.1 BitString object. + * + * @param string|int $value Either the hexadecimal value as a string (spaces are allowed - leading 0x is optional) or a numeric value + * @param int $nrOfUnusedBits the number of unused bits in the last octet [optional]. + * + * @throws Exception if the second parameter is no positive numeric value + */ + public function __construct($value, $nrOfUnusedBits = 0) + { + parent::__construct($value); + + if (!is_numeric($nrOfUnusedBits) || $nrOfUnusedBits < 0) { + throw new Exception('BitString: second parameter needs to be a positive number (or zero)!'); + } + + $this->nrOfUnusedBits = $nrOfUnusedBits; + } + + public function getType() + { + return Identifier::BITSTRING; + } + + protected function calculateContentLength() + { + // add one to the length for the first octet which encodes the number of unused bits in the last octet + return parent::calculateContentLength() + 1; + } + + protected function getEncodedValue() + { + // the first octet determines the number of unused bits + $nrOfUnusedBitsOctet = chr($this->nrOfUnusedBits); + $actualContent = parent::getEncodedValue(); + + return $nrOfUnusedBitsOctet.$actualContent; + } + + public function getNumberOfUnusedBits() + { + return $this->nrOfUnusedBits; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::BITSTRING, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex, 2); + + $nrOfUnusedBits = ord($binaryData[$offsetIndex]); + $value = substr($binaryData, $offsetIndex + 1, $contentLength - 1); + + if ($nrOfUnusedBits > 7 || // no less than 1 used, otherwise non-minimal + ($contentLength - 1) == 1 && $nrOfUnusedBits > 0 || // content length only 1, no + (ord($value[strlen($value)-1])&((1<<$nrOfUnusedBits)-1)) != 0 // unused bits set + ) { + throw new ParserException("Can not parse bit string with invalid padding", $offsetIndex); + } + + $offsetIndex += $contentLength; + + $parsedObject = new self(bin2hex($value), $nrOfUnusedBits); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Boolean.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Boolean.php new file mode 100644 index 000000000..b73c99f1e --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Boolean.php @@ -0,0 +1,75 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Exception\ParserException; + +class Boolean extends ASNObject implements Parsable +{ + private $value; + + /** + * @param bool $value + */ + public function __construct($value) + { + $this->value = $value; + } + + public function getType() + { + return Identifier::BOOLEAN; + } + + protected function calculateContentLength() + { + return 1; + } + + protected function getEncodedValue() + { + if ($this->value == false) { + return chr(0x00); + } else { + return chr(0xFF); + } + } + + public function getContent() + { + if ($this->value == true) { + return 'TRUE'; + } else { + return 'FALSE'; + } + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::BOOLEAN, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + + if ($contentLength != 1) { + throw new ParserException("An ASN.1 Boolean should not have a length other than one. Extracted length was {$contentLength}", $offsetIndex); + } + + $value = ord($binaryData[$offsetIndex++]); + $booleanValue = $value == 0xFF ? true : false; + + $parsedObject = new self($booleanValue); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/CharacterString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/CharacterString.php new file mode 100644 index 000000000..bfc170dba --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/CharacterString.php @@ -0,0 +1,28 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class CharacterString extends AbstractString +{ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::CHARACTER_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Enumerated.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Enumerated.php new file mode 100644 index 000000000..06d04a3a3 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Enumerated.php @@ -0,0 +1,21 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\Identifier; + +class Enumerated extends Integer +{ + public function getType() + { + return Identifier::ENUMERATED; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralString.php new file mode 100644 index 000000000..fb0346f0a --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralString.php @@ -0,0 +1,34 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class GeneralString extends AbstractString +{ + /** + * Creates a new ASN.1 GeneralString. + * TODO The encodable characters of this type are not yet checked. + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::GENERAL_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralizedTime.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralizedTime.php new file mode 100644 index 000000000..ca9220972 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GeneralizedTime.php @@ -0,0 +1,134 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractTime; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Exception\ParserException; + +/** + * This ASN.1 universal type contains date and time information according to ISO 8601. + * + * The type consists of values representing: + * a) a calendar date, as defined in ISO 8601; and + * b) a time of day, to any of the precisions defined in ISO 8601, except for the hours value 24 which shall not be used; and + * c) the local time differential factor as defined in ISO 8601. + * + * Decoding of this type will accept the Basic Encoding Rules (BER) + * The encoding will comply with the Distinguished Encoding Rules (DER). + */ +class GeneralizedTime extends AbstractTime implements Parsable +{ + private $microseconds; + + public function __construct($dateTime = null, $dateTimeZone = 'UTC') + { + parent::__construct($dateTime, $dateTimeZone); + $this->microseconds = $this->value->format('u'); + if ($this->containsFractionalSecondsElement()) { + // DER requires us to remove trailing zeros + $this->microseconds = preg_replace('/([1-9]+)0+$/', '$1', $this->microseconds); + } + } + + public function getType() + { + return Identifier::GENERALIZED_TIME; + } + + protected function calculateContentLength() + { + $contentSize = 15; // YYYYMMDDHHmmSSZ + + if ($this->containsFractionalSecondsElement()) { + $contentSize += 1 + strlen($this->microseconds); + } + + return $contentSize; + } + + public function containsFractionalSecondsElement() + { + return intval($this->microseconds) > 0; + } + + protected function getEncodedValue() + { + $encodedContent = $this->value->format('YmdHis'); + if ($this->containsFractionalSecondsElement()) { + $encodedContent .= ".{$this->microseconds}"; + } + + return $encodedContent.'Z'; + } + + public function __toString() + { + if ($this->containsFractionalSecondsElement()) { + return $this->value->format("Y-m-d\tH:i:s.uP"); + } else { + return $this->value->format("Y-m-d\tH:i:sP"); + } + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::GENERALIZED_TIME, $offsetIndex++); + $lengthOfMinimumTimeString = 14; // YYYYMMDDHHmmSS + $contentLength = self::parseContentLength($binaryData, $offsetIndex, $lengthOfMinimumTimeString); + $maximumBytesToRead = $contentLength; + + $format = 'YmdGis'; + $content = substr($binaryData, $offsetIndex, $contentLength); + $dateTimeString = substr($content, 0, $lengthOfMinimumTimeString); + $offsetIndex += $lengthOfMinimumTimeString; + $maximumBytesToRead -= $lengthOfMinimumTimeString; + + if ($contentLength == $lengthOfMinimumTimeString) { + $localTimeZone = new \DateTimeZone(date_default_timezone_get()); + $dateTime = \DateTime::createFromFormat($format, $dateTimeString, $localTimeZone); + } else { + if ($binaryData[$offsetIndex] == '.') { + $maximumBytesToRead--; // account for the '.' + $nrOfFractionalSecondElements = 1; // account for the '.' + + while ($maximumBytesToRead > 0 + && $binaryData[$offsetIndex + $nrOfFractionalSecondElements] != '+' + && $binaryData[$offsetIndex + $nrOfFractionalSecondElements] != '-' + && $binaryData[$offsetIndex + $nrOfFractionalSecondElements] != 'Z') { + $nrOfFractionalSecondElements++; + $maximumBytesToRead--; + } + + $dateTimeString .= substr($binaryData, $offsetIndex, $nrOfFractionalSecondElements); + $offsetIndex += $nrOfFractionalSecondElements; + $format .= '.u'; + } + + $dateTime = \DateTime::createFromFormat($format, $dateTimeString, new \DateTimeZone('UTC')); + + if ($maximumBytesToRead > 0) { + if ($binaryData[$offsetIndex] == '+' + || $binaryData[$offsetIndex] == '-') { + $dateTime = static::extractTimeZoneData($binaryData, $offsetIndex, $dateTime); + } elseif ($binaryData[$offsetIndex++] != 'Z') { + throw new ParserException('Invalid ISO 8601 Time String', $offsetIndex); + } + } + } + + $parsedObject = new self($dateTime); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GraphicString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GraphicString.php new file mode 100644 index 000000000..4a01d67be --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/GraphicString.php @@ -0,0 +1,34 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class GraphicString extends AbstractString +{ + /** + * Creates a new ASN.1 Graphic String. + * TODO The encodable characters of this type are not yet checked. + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::GRAPHIC_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/IA5String.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/IA5String.php new file mode 100644 index 000000000..33a806793 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/IA5String.php @@ -0,0 +1,35 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +/** + * The International Alphabet No.5 (IA5) references the encoding of the ASCII characters. + * + * Each character in the data is encoded as 1 byte. + */ +class IA5String extends AbstractString +{ + public function __construct($string) + { + parent::__construct($string); + for ($i = 1; $i < 128; $i++) { + $this->allowCharacter(chr($i)); + } + } + + public function getType() + { + return Identifier::IA5_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Integer.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Integer.php new file mode 100644 index 000000000..fe3806ba7 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Integer.php @@ -0,0 +1,130 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use Exception; +use FG\Utility\BigInteger; +use FG\ASN1\Exception\ParserException; +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; + +class Integer extends ASNObject implements Parsable +{ + /** @var int */ + private $value; + + /** + * @param int $value + * + * @throws Exception if the value is not numeric + */ + public function __construct($value) + { + if (is_numeric($value) == false) { + throw new Exception("Invalid VALUE [{$value}] for ASN1_INTEGER"); + } + $this->value = $value; + } + + public function getType() + { + return Identifier::INTEGER; + } + + public function getContent() + { + return $this->value; + } + + protected function calculateContentLength() + { + return strlen($this->getEncodedValue()); + } + + protected function getEncodedValue() + { + $value = BigInteger::create($this->value, 10); + $negative = $value->compare(0) < 0; + if ($negative) { + $value = $value->absoluteValue(); + $limit = 0x80; + } else { + $limit = 0x7f; + } + + $mod = 0xff+1; + $values = []; + while($value->compare($limit) > 0) { + $values[] = $value->modulus($mod)->toInteger(); + $value = $value->shiftRight(8); + } + + $values[] = $value->modulus($mod)->toInteger(); + $numValues = count($values); + + if ($negative) { + for ($i = 0; $i < $numValues; $i++) { + $values[$i] = 0xff - $values[$i]; + } + for ($i = 0; $i < $numValues; $i++) { + $values[$i] += 1; + if ($values[$i] <= 0xff) { + break; + } + assert($i != $numValues - 1); + $values[$i] = 0; + } + if ($values[$numValues - 1] == 0x7f) { + $values[] = 0xff; + } + } + $values = array_reverse($values); + $r = pack("C*", ...$values); + return $r; + } + + private static function ensureMinimalEncoding($binaryData, $offsetIndex) + { + // All the first nine bits cannot equal 0 or 1, which would + // be non-minimal encoding for positive and negative integers respectively + if ((ord($binaryData[$offsetIndex]) == 0x00 && (ord($binaryData[$offsetIndex+1]) & 0x80) == 0) || + (ord($binaryData[$offsetIndex]) == 0xff && (ord($binaryData[$offsetIndex+1]) & 0x80) == 0x80)) { + throw new ParserException("Integer not minimally encoded", $offsetIndex); + } + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + $parsedObject = new static(0); + self::parseIdentifier($binaryData[$offsetIndex], $parsedObject->getType(), $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex, 1); + + if ($contentLength > 1) { + self::ensureMinimalEncoding($binaryData, $offsetIndex); + } + $isNegative = (ord($binaryData[$offsetIndex]) & 0x80) != 0x00; + $number = BigInteger::create(ord($binaryData[$offsetIndex++]) & 0x7F); + + for ($i = 0; $i < $contentLength - 1; $i++) { + $number = $number->multiply(0x100)->add(ord($binaryData[$offsetIndex++])); + } + + if ($isNegative) { + $number = $number->subtract(BigInteger::create(2)->toPower(8 * $contentLength - 1)); + } + + $parsedObject = new static((string)$number); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/NullObject.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/NullObject.php new file mode 100644 index 000000000..b5293e4ba --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/NullObject.php @@ -0,0 +1,54 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Exception\ParserException; + +class NullObject extends ASNObject implements Parsable +{ + public function getType() + { + return Identifier::NULL; + } + + protected function calculateContentLength() + { + return 0; + } + + protected function getEncodedValue() + { + return null; + } + + public function getContent() + { + return 'NULL'; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::NULL, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + + if ($contentLength != 0) { + throw new ParserException("An ASN.1 Null should not have a length other than zero. Extracted length was {$contentLength}", $offsetIndex); + } + + $parsedObject = new self(); + $parsedObject->setContentLength(0); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/NumericString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/NumericString.php new file mode 100644 index 000000000..13fb7c347 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/NumericString.php @@ -0,0 +1,38 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class NumericString extends AbstractString +{ + /** + * Creates a new ASN.1 NumericString. + * + * The following characters are permitted: + * Digits 0,1, ... 9 + * SPACE (space) + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowNumbers(); + $this->allowSpaces(); + } + + public function getType() + { + return Identifier::NUMERIC_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectDescriptor.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectDescriptor.php new file mode 100644 index 000000000..1c5d3498a --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectDescriptor.php @@ -0,0 +1,26 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\Identifier; + +class ObjectDescriptor extends GraphicString +{ + public function __construct($objectDescription) + { + parent::__construct($objectDescription); + } + + public function getType() + { + return Identifier::OBJECT_DESCRIPTOR; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectIdentifier.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectIdentifier.php new file mode 100644 index 000000000..150ce9c4a --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/ObjectIdentifier.php @@ -0,0 +1,138 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use Exception; +use FG\ASN1\Base128; +use FG\ASN1\OID; +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Exception\ParserException; + +class ObjectIdentifier extends ASNObject implements Parsable +{ + protected $subIdentifiers; + protected $value; + + public function __construct($value) + { + $this->subIdentifiers = explode('.', $value); + $nrOfSubIdentifiers = count($this->subIdentifiers); + + for ($i = 0; $i < $nrOfSubIdentifiers; $i++) { + if (is_numeric($this->subIdentifiers[$i])) { + // enforce the integer type + $this->subIdentifiers[$i] = intval($this->subIdentifiers[$i]); + } else { + throw new Exception("[{$value}] is no valid object identifier (sub identifier ".($i + 1).' is not numeric)!'); + } + } + + // Merge the first to arcs of the OID registration tree (per ASN definition!) + if ($nrOfSubIdentifiers >= 2) { + $this->subIdentifiers[1] = ($this->subIdentifiers[0] * 40) + $this->subIdentifiers[1]; + unset($this->subIdentifiers[0]); + } + + $this->value = $value; + } + + public function getContent() + { + return $this->value; + } + + public function getType() + { + return Identifier::OBJECT_IDENTIFIER; + } + + protected function calculateContentLength() + { + $length = 0; + foreach ($this->subIdentifiers as $subIdentifier) { + do { + $subIdentifier = $subIdentifier >> 7; + $length++; + } while ($subIdentifier > 0); + } + + return $length; + } + + protected function getEncodedValue() + { + $encodedValue = ''; + foreach ($this->subIdentifiers as $subIdentifier) { + $encodedValue .= Base128::encode($subIdentifier); + } + + return $encodedValue; + } + + public function __toString() + { + return OID::getName($this->value); + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::OBJECT_IDENTIFIER, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex, 1); + + $firstOctet = ord($binaryData[$offsetIndex++]); + $oidString = floor($firstOctet / 40).'.'.($firstOctet % 40); + $oidString .= '.'.self::parseOid($binaryData, $offsetIndex, $contentLength - 1); + + $parsedObject = new self($oidString); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } + + /** + * Parses an object identifier except for the first octet, which is parsed + * differently. This way relative object identifiers can also be parsed + * using this. + * + * @param $binaryData + * @param $offsetIndex + * @param $octetsToRead + * + * @throws ParserException + * + * @return string + */ + protected static function parseOid(&$binaryData, &$offsetIndex, $octetsToRead) + { + $oid = ''; + + while ($octetsToRead > 0) { + $octets = ''; + + do { + if (0 === $octetsToRead) { + throw new ParserException('Malformed ASN.1 Object Identifier', $offsetIndex - 1); + } + + $octetsToRead--; + $octet = $binaryData[$offsetIndex++]; + $octets .= $octet; + } while (ord($octet) & 0x80); + + $oid .= sprintf('%d.', Base128::decode($octets)); + } + + // Remove trailing '.' + return substr($oid, 0, -1) ?: ''; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/OctetString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/OctetString.php new file mode 100644 index 000000000..5d69ae7bf --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/OctetString.php @@ -0,0 +1,91 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use Exception; +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; + +class OctetString extends ASNObject implements Parsable +{ + protected $value; + + public function __construct($value) + { + if (is_string($value)) { + // remove gaps between hex digits + $value = preg_replace('/\s|0x/', '', $value); + } elseif (is_numeric($value)) { + $value = dechex($value); + } elseif ($value === null) { + return; + } else { + throw new Exception('OctetString: unrecognized input type!'); + } + + if (strlen($value) % 2 != 0) { + // transform values like 1F2 to 01F2 + $value = '0'.$value; + } + + $this->value = $value; + } + + public function getType() + { + return Identifier::OCTETSTRING; + } + + protected function calculateContentLength() + { + return strlen($this->value) / 2; + } + + protected function getEncodedValue() + { + $value = $this->value; + $result = ''; + + //Actual content + while (strlen($value) >= 2) { + // get the hex value byte by byte from the string and and add it to binary result + $result .= chr(hexdec(substr($value, 0, 2))); + $value = substr($value, 2); + } + + return $result; + } + + public function getContent() + { + return strtoupper($this->value); + } + + public function getBinaryContent() + { + return $this->getEncodedValue(); + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::OCTETSTRING, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + + $value = substr($binaryData, $offsetIndex, $contentLength); + $offsetIndex += $contentLength; + + $parsedObject = new self(bin2hex($value)); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/PrintableString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/PrintableString.php new file mode 100644 index 000000000..fe6d4bc02 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/PrintableString.php @@ -0,0 +1,53 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class PrintableString extends AbstractString +{ + /** + * Creates a new ASN.1 PrintableString. + * + * The ITU-T X.680 Table 8 permits the following characters: + * Latin capital letters A,B, ... Z + * Latin small letters a,b, ... z + * Digits 0,1, ... 9 + * SPACE (space) + * APOSTROPHE ' + * LEFT PARENTHESIS ( + * RIGHT PARENTHESIS ) + * PLUS SIGN + + * COMMA , + * HYPHEN-MINUS - + * FULL STOP . + * SOLIDUS / + * COLON : + * EQUALS SIGN = + * QUESTION MARK ? + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowNumbers(); + $this->allowAllLetters(); + $this->allowSpaces(); + $this->allowCharacters("'", '(', ')', '+', '-', '.', ',', '/', ':', '=', '?'); + } + + public function getType() + { + return Identifier::PRINTABLE_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/RelativeObjectIdentifier.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/RelativeObjectIdentifier.php new file mode 100644 index 000000000..2aa9643a1 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/RelativeObjectIdentifier.php @@ -0,0 +1,57 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use Exception; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Exception\ParserException; + +class RelativeObjectIdentifier extends ObjectIdentifier implements Parsable +{ + public function __construct($subIdentifiers) + { + $this->value = $subIdentifiers; + $this->subIdentifiers = explode('.', $subIdentifiers); + $nrOfSubIdentifiers = count($this->subIdentifiers); + + for ($i = 0; $i < $nrOfSubIdentifiers; $i++) { + if (is_numeric($this->subIdentifiers[$i])) { + // enforce the integer type + $this->subIdentifiers[$i] = intval($this->subIdentifiers[$i]); + } else { + throw new Exception("[{$subIdentifiers}] is no valid object identifier (sub identifier ".($i + 1).' is not numeric)!'); + } + } + } + + public function getType() + { + return Identifier::RELATIVE_OID; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::RELATIVE_OID, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex, 1); + + try { + $oidString = self::parseOid($binaryData, $offsetIndex, $contentLength); + } catch (ParserException $e) { + throw new ParserException('Malformed ASN.1 Relative Object Identifier', $e->getOffset()); + } + + $parsedObject = new self($oidString); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Sequence.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Sequence.php new file mode 100644 index 000000000..0397cf126 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Sequence.php @@ -0,0 +1,23 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\Construct; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; + +class Sequence extends Construct implements Parsable +{ + public function getType() + { + return Identifier::SEQUENCE; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Set.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Set.php new file mode 100644 index 000000000..6e6d346f7 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/Set.php @@ -0,0 +1,21 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\Identifier; + +class Set extends Sequence +{ + public function getType() + { + return Identifier::SET; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/T61String.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/T61String.php new file mode 100644 index 000000000..56418645f --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/T61String.php @@ -0,0 +1,36 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class T61String extends AbstractString +{ + /** + * Creates a new ASN.1 T61 String. + * TODO The encodable characters of this type are not yet checked. + * + * @see http://en.wikipedia.org/wiki/ITU_T.61 + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::T61_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTCTime.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTCTime.php new file mode 100644 index 000000000..c4d303cb7 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTCTime.php @@ -0,0 +1,77 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractTime; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Exception\ParserException; + +/** + * This ASN.1 universal type contains the calendar date and time. + * + * The precision is one minute or one second and optionally a + * local time differential from coordinated universal time. + * + * Decoding of this type will accept the Basic Encoding Rules (BER) + * The encoding will comply with the Distinguished Encoding Rules (DER). + */ +class UTCTime extends AbstractTime implements Parsable +{ + public function getType() + { + return Identifier::UTC_TIME; + } + + protected function calculateContentLength() + { + return 13; // Content is a string o the following format: YYMMDDhhmmssZ (13 octets) + } + + protected function getEncodedValue() + { + return $this->value->format('ymdHis').'Z'; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::UTC_TIME, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex, 11); + + $format = 'ymdGi'; + $dateTimeString = substr($binaryData, $offsetIndex, 10); + $offsetIndex += 10; + + // extract optional seconds part + if ($binaryData[$offsetIndex] != 'Z' + && $binaryData[$offsetIndex] != '+' + && $binaryData[$offsetIndex] != '-') { + $dateTimeString .= substr($binaryData, $offsetIndex, 2); + $offsetIndex += 2; + $format .= 's'; + } + + $dateTime = \DateTime::createFromFormat($format, $dateTimeString, new \DateTimeZone('UTC')); + + // extract time zone settings + if ($binaryData[$offsetIndex] == '+' + || $binaryData[$offsetIndex] == '-') { + $dateTime = static::extractTimeZoneData($binaryData, $offsetIndex, $dateTime); + } elseif ($binaryData[$offsetIndex++] != 'Z') { + throw new ParserException('Invalid UTC String', $offsetIndex); + } + + $parsedObject = new self($dateTime); + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTF8String.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTF8String.php new file mode 100644 index 000000000..cba568d33 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UTF8String.php @@ -0,0 +1,34 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class UTF8String extends AbstractString +{ + /** + * Creates a new ASN.1 Universal String. + * TODO The encodable characters of this type are not yet checked. + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::UTF8_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UniversalString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UniversalString.php new file mode 100644 index 000000000..0c3fe1d01 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/UniversalString.php @@ -0,0 +1,36 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class UniversalString extends AbstractString +{ + /** + * Creates a new ASN.1 Universal String. + * TODO The encodable characters of this type are not yet checked. + * + * @see http://en.wikipedia.org/wiki/Universal_Character_Set + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::UNIVERSAL_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/Universal/VisibleString.php b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/VisibleString.php new file mode 100644 index 000000000..d9326d3fa --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/Universal/VisibleString.php @@ -0,0 +1,34 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1\Universal; + +use FG\ASN1\AbstractString; +use FG\ASN1\Identifier; + +class VisibleString extends AbstractString +{ + /** + * Creates a new ASN.1 Visible String. + * TODO The encodable characters of this type are not yet checked. + * + * @param string $string + */ + public function __construct($string) + { + $this->value = $string; + $this->allowAll(); + } + + public function getType() + { + return Identifier::VISIBLE_STRING; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/UnknownConstructedObject.php b/vendor/fgrosse/phpasn1/lib/ASN1/UnknownConstructedObject.php new file mode 100644 index 000000000..b19a07a18 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/UnknownConstructedObject.php @@ -0,0 +1,59 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +class UnknownConstructedObject extends Construct +{ + private $identifier; + private $contentLength; + + /** + * @param string $binaryData + * @param int $offsetIndex + * + * @throws \FG\ASN1\Exception\ParserException + */ + public function __construct($binaryData, &$offsetIndex) + { + $this->identifier = self::parseBinaryIdentifier($binaryData, $offsetIndex); + $this->contentLength = self::parseContentLength($binaryData, $offsetIndex); + + $children = []; + $octetsToRead = $this->contentLength; + while ($octetsToRead > 0) { + $newChild = ASNObject::fromBinary($binaryData, $offsetIndex); + $octetsToRead -= $newChild->getObjectLength(); + $children[] = $newChild; + } + + parent::__construct(...$children); + } + + public function getType() + { + return ord($this->identifier); + } + + public function getIdentifier() + { + return $this->identifier; + } + + protected function calculateContentLength() + { + return $this->contentLength; + } + + protected function getEncodedValue() + { + return ''; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/ASN1/UnknownObject.php b/vendor/fgrosse/phpasn1/lib/ASN1/UnknownObject.php new file mode 100644 index 000000000..4ac536a9b --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/ASN1/UnknownObject.php @@ -0,0 +1,59 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\ASN1; + +class UnknownObject extends ASNObject +{ + /** @var string */ + private $value; + + private $identifier; + + /** + * @param string|int $identifier Either the first identifier octet as int or all identifier bytes as a string + * @param int $contentLength + */ + public function __construct($identifier, $contentLength) + { + if (is_int($identifier)) { + $identifier = chr($identifier); + } + + $this->identifier = $identifier; + $this->value = "Unparsable Object ({$contentLength} bytes)"; + $this->setContentLength($contentLength); + } + + public function getContent() + { + return $this->value; + } + + public function getType() + { + return ord($this->identifier[0]); + } + + public function getIdentifier() + { + return $this->identifier; + } + + protected function calculateContentLength() + { + return $this->getContentLength(); + } + + protected function getEncodedValue() + { + return ''; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/Utility/BigInteger.php b/vendor/fgrosse/phpasn1/lib/Utility/BigInteger.php new file mode 100644 index 000000000..866162cc0 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/Utility/BigInteger.php @@ -0,0 +1,195 @@ +_fromInteger($val); + } + else { + // convert to string, if not already one + $val = (string)$val; + + // validate string + if (!preg_match('/^-?[0-9]+$/', $val)) { + throw new \InvalidArgumentException('Expects a string representation of an integer.'); + } + $ret->_fromString($val); + } + + return $ret; + } + + /** + * BigInteger constructor. + * Prevent directly instantiating object, use BigInteger::create instead. + */ + protected function __construct() + { + + } + + /** + * Subclasses must provide clone functionality. + * @return BigInteger + */ + abstract public function __clone(); + + /** + * Assign the instance value from base 10 string. + * @param string $str + */ + abstract protected function _fromString($str); + + /** + * Assign the instance value from an integer type. + * @param int $integer + */ + abstract protected function _fromInteger($integer); + + /** + * Must provide string implementation that returns base 10 number. + * @return string + */ + abstract public function __toString(); + + /* INFORMATIONAL FUNCTIONS */ + + /** + * Return integer, if possible. Throws an exception if the number can not be represented as a native integer. + * @return int + * @throws \OverflowException + */ + abstract public function toInteger(); + + /** + * Is represented integer negative? + * @return bool + */ + abstract public function isNegative(); + + /** + * Compare the integer with $number, returns a negative integer if $this is less than number, returns 0 if $this is + * equal to number and returns a positive integer if $this is greater than number. + * @param BigInteger|string|int $number + * @return int + */ + abstract public function compare($number); + + /* MODIFY */ + + /** + * Add another integer $b and returns the result. + * @param BigInteger|string|int $b + * @return BigInteger + */ + abstract public function add($b); + + /** + * Subtract $b from $this and returns the result. + * @param BigInteger|string|int $b + * @return BigInteger + */ + abstract public function subtract($b); + + /** + * Multiply value. + * @param BigInteger|string|int $b + * @return BigInteger + */ + abstract public function multiply($b); + + /** + * The value $this modulus $b. + * @param BigInteger|string|int $b + * @return BigInteger + */ + abstract public function modulus($b); + + /** + * Raise $this to the power of $b and returns the result. + * @param BigInteger|string|int $b + * @return BigInteger + */ + abstract public function toPower($b); + + /** + * Shift the value to the right by a set number of bits and returns the result. + * @param int $bits + * @return BigInteger + */ + abstract public function shiftRight($bits = 8); + + /** + * Shift the value to the left by a set number of bits and returns the result. + * @param int $bits + * @return BigInteger + */ + abstract public function shiftLeft($bits = 8); + + /** + * Returns the absolute value. + * @return BigInteger + */ + abstract public function absoluteValue(); +} diff --git a/vendor/fgrosse/phpasn1/lib/Utility/BigIntegerBcmath.php b/vendor/fgrosse/phpasn1/lib/Utility/BigIntegerBcmath.php new file mode 100644 index 000000000..25ad89164 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/Utility/BigIntegerBcmath.php @@ -0,0 +1,133 @@ +_str = (string)$str; + } + + protected function _fromInteger($integer) + { + $this->_str = (string)$integer; + } + + public function __toString() + { + return $this->_str; + } + + public function toInteger() + { + if ($this->compare(PHP_INT_MAX) > 0 || $this->compare(PHP_INT_MIN) < 0) { + throw new \OverflowException(sprintf('Can not represent %s as integer.', $this->_str)); + } + return (int)$this->_str; + } + + public function isNegative() + { + return bccomp($this->_str, '0', 0) < 0; + } + + protected function _unwrap($number) + { + if ($number instanceof self) { + return $number->_str; + } + return $number; + } + + public function compare($number) + { + return bccomp($this->_str, $this->_unwrap($number), 0); + } + + public function add($b) + { + $ret = new self(); + $ret->_str = bcadd($this->_str, $this->_unwrap($b), 0); + return $ret; + } + + public function subtract($b) + { + $ret = new self(); + $ret->_str = bcsub($this->_str, $this->_unwrap($b), 0); + return $ret; + } + + public function multiply($b) + { + $ret = new self(); + $ret->_str = bcmul($this->_str, $this->_unwrap($b), 0); + return $ret; + } + + public function modulus($b) + { + $ret = new self(); + if ($this->isNegative()) { + // bcmod handles negative numbers differently + $b = $this->_unwrap($b); + $ret->_str = bcsub($b, bcmod(bcsub('0', $this->_str, 0), $b), 0); + } + else { + $ret->_str = bcmod($this->_str, $this->_unwrap($b)); + } + return $ret; + } + + public function toPower($b) + { + $ret = new self(); + $ret->_str = bcpow($this->_str, $this->_unwrap($b), 0); + return $ret; + } + + public function shiftRight($bits = 8) + { + $ret = new self(); + $ret->_str = bcdiv($this->_str, bcpow('2', $bits)); + return $ret; + } + + public function shiftLeft($bits = 8) { + $ret = new self(); + $ret->_str = bcmul($this->_str, bcpow('2', $bits)); + return $ret; + } + + public function absoluteValue() + { + $ret = new self(); + if (-1 === bccomp($this->_str, '0', 0)) { + $ret->_str = bcsub('0', $this->_str, 0); + } + else { + $ret->_str = $this->_str; + } + return $ret; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/Utility/BigIntegerGmp.php b/vendor/fgrosse/phpasn1/lib/Utility/BigIntegerGmp.php new file mode 100644 index 000000000..0791226a5 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/Utility/BigIntegerGmp.php @@ -0,0 +1,133 @@ +_rh = gmp_add($this->_rh, 0); + } + + protected function _fromString($str) + { + $this->_rh = gmp_init($str, 10); + } + + protected function _fromInteger($integer) + { + $this->_rh = gmp_init($integer, 10); + } + + public function __toString() + { + return gmp_strval($this->_rh, 10); + } + + public function toInteger() + { + if ($this->compare(PHP_INT_MAX) > 0 || $this->compare(PHP_INT_MIN) < 0) { + throw new \OverflowException(sprintf('Can not represent %s as integer.', $this)); + } + return gmp_intval($this->_rh); + } + + public function isNegative() + { + return gmp_sign($this->_rh) === -1; + } + + protected function _unwrap($number) + { + if ($number instanceof self) { + return $number->_rh; + } + return $number; + } + + public function compare($number) + { + return gmp_cmp($this->_rh, $this->_unwrap($number)); + } + + public function add($b) + { + $ret = new self(); + $ret->_rh = gmp_add($this->_rh, $this->_unwrap($b)); + return $ret; + } + + public function subtract($b) + { + $ret = new self(); + $ret->_rh = gmp_sub($this->_rh, $this->_unwrap($b)); + return $ret; + } + + public function multiply($b) + { + $ret = new self(); + $ret->_rh = gmp_mul($this->_rh, $this->_unwrap($b)); + return $ret; + } + + public function modulus($b) + { + $ret = new self(); + $ret->_rh = gmp_mod($this->_rh, $this->_unwrap($b)); + return $ret; + } + + public function toPower($b) + { + if ($b instanceof self) { + // gmp_pow accepts just an integer + if ($b->compare(PHP_INT_MAX) > 0) { + throw new \UnexpectedValueException('Unable to raise to power greater than PHP_INT_MAX.'); + } + $b = gmp_intval($b->_rh); + } + $ret = new self(); + $ret->_rh = gmp_pow($this->_rh, $b); + return $ret; + } + + public function shiftRight($bits=8) + { + $ret = new self(); + $ret->_rh = gmp_div($this->_rh, gmp_pow(2, $bits)); + return $ret; + } + + public function shiftLeft($bits=8) + { + $ret = new self(); + $ret->_rh = gmp_mul($this->_rh, gmp_pow(2, $bits)); + return $ret; + } + + public function absoluteValue() + { + $ret = new self(); + $ret->_rh = gmp_abs($this->_rh); + return $ret; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/AlgorithmIdentifier.php b/vendor/fgrosse/phpasn1/lib/X509/AlgorithmIdentifier.php new file mode 100644 index 000000000..a06b56f77 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/AlgorithmIdentifier.php @@ -0,0 +1,22 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509; + +use FG\ASN1\Universal\NullObject; +use FG\ASN1\Composite\AttributeTypeAndValue; + +class AlgorithmIdentifier extends AttributeTypeAndValue +{ + public function __construct($objectIdentifierString) + { + parent::__construct($objectIdentifierString, new NullObject()); + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/CSR/Attributes.php b/vendor/fgrosse/phpasn1/lib/X509/CSR/Attributes.php new file mode 100644 index 000000000..5a965e2f8 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/CSR/Attributes.php @@ -0,0 +1,68 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509\CSR; + +use FG\ASN1\ASNObject; +use FG\X509\CertificateExtensions; +use FG\ASN1\OID; +use FG\ASN1\Parsable; +use FG\ASN1\Construct; +use FG\ASN1\Identifier; +use FG\ASN1\Universal\Set; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\ObjectIdentifier; + +class Attributes extends Construct implements Parsable +{ + public function getType() + { + return 0xA0; + } + + public function addAttribute($objectIdentifier, Set $attribute) + { + if (is_string($objectIdentifier)) { + $objectIdentifier = new ObjectIdentifier($objectIdentifier); + } + $attributeSequence = new Sequence($objectIdentifier, $attribute); + $attributeSequence->getNumberOfLengthOctets(); // length and number of length octets is calculated + $this->addChild($attributeSequence); + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], 0xA0, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + $octetsToRead = $contentLength; + + $parsedObject = new self(); + while ($octetsToRead > 0) { + $initialOffset = $offsetIndex; // used to calculate how much bits have been read + self::parseIdentifier($binaryData[$offsetIndex], Identifier::SEQUENCE, $offsetIndex++); + self::parseContentLength($binaryData, $offsetIndex); + + $objectIdentifier = ObjectIdentifier::fromBinary($binaryData, $offsetIndex); + $oidString = $objectIdentifier->getContent(); + if ($oidString == OID::PKCS9_EXTENSION_REQUEST) { + $attribute = CertificateExtensions::fromBinary($binaryData, $offsetIndex); + } else { + $attribute = ASNObject::fromBinary($binaryData, $offsetIndex); + } + + $parsedObject->addAttribute($objectIdentifier, $attribute); + $octetsToRead -= ($offsetIndex - $initialOffset); + } + + $parsedObject->setContentLength($contentLength); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/CSR/CSR.php b/vendor/fgrosse/phpasn1/lib/X509/CSR/CSR.php new file mode 100644 index 000000000..69decdbb5 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/CSR/CSR.php @@ -0,0 +1,137 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509\CSR; + +use FG\ASN1\OID; +use FG\ASN1\Universal\Integer; +use FG\ASN1\Universal\BitString; +use FG\ASN1\Universal\Sequence; +use FG\X509\CertificateSubject; +use FG\X509\AlgorithmIdentifier; +use FG\X509\PublicKey; + +class CSR extends Sequence +{ + const CSR_VERSION_NR = 0; + + protected $subject; + protected $publicKey; + protected $signature; + protected $signatureAlgorithm; + + protected $startSequence; + + /** + * @param string $commonName + * @param string $email + * @param string $organization + * @param string $locality + * @param string $state + * @param string $country + * @param string $organizationalUnit + * @param string $publicKey + * @param string $signature + * @param string $signatureAlgorithm + */ + public function __construct($commonName, $email, $organization, $locality, $state, $country, $organizationalUnit, $publicKey, $signature, $signatureAlgorithm = OID::SHA1_WITH_RSA_SIGNATURE) + { + $this->subject = new CertificateSubject( + $commonName, + $email, + $organization, + $locality, + $state, + $country, + $organizationalUnit + ); + $this->publicKey = $publicKey; + $this->signature = $signature; + $this->signatureAlgorithm = $signatureAlgorithm; + + $this->createCSRSequence(); + } + + protected function createCSRSequence() + { + $versionNr = new Integer(self::CSR_VERSION_NR); + $publicKey = new PublicKey($this->publicKey); + $signature = new BitString($this->signature); + $signatureAlgorithm = new AlgorithmIdentifier($this->signatureAlgorithm); + + $certRequestInfo = new Sequence($versionNr, $this->subject, $publicKey); + + $this->addChild($certRequestInfo); + $this->addChild($signatureAlgorithm); + $this->addChild($signature); + } + + public function __toString() + { + $tmp = base64_encode($this->getBinary()); + + for ($i = 0; $i < strlen($tmp); $i++) { + if (($i + 2) % 65 == 0) { + $tmp = substr($tmp, 0, $i + 1)."\n".substr($tmp, $i + 1); + } + } + + $result = '-----BEGIN CERTIFICATE REQUEST-----'.PHP_EOL; + $result .= $tmp.PHP_EOL; + $result .= '-----END CERTIFICATE REQUEST-----'; + + return $result; + } + + public function getVersion() + { + return self::CSR_VERSION_NR; + } + + public function getOrganizationName() + { + return $this->subject->getOrganization(); + } + + public function getLocalName() + { + return $this->subject->getLocality(); + } + + public function getState() + { + return $this->subject->getState(); + } + + public function getCountry() + { + return $this->subject->getCountry(); + } + + public function getOrganizationalUnit() + { + return $this->subject->getOrganizationalUnit(); + } + + public function getPublicKey() + { + return $this->publicKey; + } + + public function getSignature() + { + return $this->signature; + } + + public function getSignatureAlgorithm() + { + return $this->signatureAlgorithm; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/CertificateExtensions.php b/vendor/fgrosse/phpasn1/lib/X509/CertificateExtensions.php new file mode 100644 index 000000000..6ed1c6a7c --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/CertificateExtensions.php @@ -0,0 +1,100 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509; + +use FG\ASN1\Exception\ParserException; +use FG\ASN1\OID; +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Universal\OctetString; +use FG\ASN1\Universal\Set; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\ObjectIdentifier; +use FG\X509\SAN\SubjectAlternativeNames; + +class CertificateExtensions extends Set implements Parsable +{ + private $innerSequence; + private $extensions = []; + + public function __construct() + { + $this->innerSequence = new Sequence(); + parent::__construct($this->innerSequence); + } + + public function addSubjectAlternativeNames(SubjectAlternativeNames $sans) + { + $this->addExtension(OID::CERT_EXT_SUBJECT_ALT_NAME, $sans); + } + + private function addExtension($oidString, ASNObject $extension) + { + $sequence = new Sequence(); + $sequence->addChild(new ObjectIdentifier($oidString)); + $sequence->addChild($extension); + + $this->innerSequence->addChild($sequence); + $this->extensions[] = $extension; + } + + public function getContent() + { + return $this->extensions; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::SET, $offsetIndex++); + self::parseContentLength($binaryData, $offsetIndex); + + $tmpOffset = $offsetIndex; + $extensions = Sequence::fromBinary($binaryData, $offsetIndex); + $tmpOffset += 1 + $extensions->getNumberOfLengthOctets(); + + $parsedObject = new self(); + foreach ($extensions as $extension) { + if ($extension->getType() != Identifier::SEQUENCE) { + //FIXME wrong offset index + throw new ParserException('Could not parse Certificate Extensions: Expected ASN.1 Sequence but got '.$extension->getTypeName(), $offsetIndex); + } + + $tmpOffset += 1 + $extension->getNumberOfLengthOctets(); + $children = $extension->getChildren(); + if (count($children) < 2) { + throw new ParserException('Could not parse Certificate Extensions: Needs at least two child elements per extension sequence (object identifier and octet string)', $tmpOffset); + } + /** @var \FG\ASN1\ASNObject $objectIdentifier */ + $objectIdentifier = $children[0]; + + /** @var OctetString $octetString */ + $octetString = $children[1]; + + if ($objectIdentifier->getType() != Identifier::OBJECT_IDENTIFIER) { + throw new ParserException('Could not parse Certificate Extensions: Expected ASN.1 Object Identifier but got '.$extension->getTypeName(), $tmpOffset); + } + + $tmpOffset += $objectIdentifier->getObjectLength(); + + if ($objectIdentifier->getContent() == OID::CERT_EXT_SUBJECT_ALT_NAME) { + $sans = SubjectAlternativeNames::fromBinary($binaryData, $tmpOffset); + $parsedObject->addSubjectAlternativeNames($sans); + } else { + // can now only parse SANs. There might be more in the future + $tmpOffset += $octetString->getObjectLength(); + } + } + + $parsedObject->getBinary(); // Determine the number of content octets and object sizes once (just to let the equality unit tests pass :/ ) + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/CertificateSubject.php b/vendor/fgrosse/phpasn1/lib/X509/CertificateSubject.php new file mode 100644 index 000000000..0a04d5740 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/CertificateSubject.php @@ -0,0 +1,108 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509; + +use FG\ASN1\Composite\RelativeDistinguishedName; +use FG\ASN1\Identifier; +use FG\ASN1\OID; +use FG\ASN1\Parsable; +use FG\ASN1\Composite\RDNString; +use FG\ASN1\Universal\Sequence; + +class CertificateSubject extends Sequence implements Parsable +{ + private $commonName; + private $email; + private $organization; + private $locality; + private $state; + private $country; + private $organizationalUnit; + + /** + * @param string $commonName + * @param string $email + * @param string $organization + * @param string $locality + * @param string $state + * @param string $country + * @param string $organizationalUnit + */ + public function __construct($commonName, $email, $organization, $locality, $state, $country, $organizationalUnit) + { + parent::__construct( + new RDNString(OID::COUNTRY_NAME, $country), + new RDNString(OID::STATE_OR_PROVINCE_NAME, $state), + new RDNString(OID::LOCALITY_NAME, $locality), + new RDNString(OID::ORGANIZATION_NAME, $organization), + new RDNString(OID::OU_NAME, $organizationalUnit), + new RDNString(OID::COMMON_NAME, $commonName), + new RDNString(OID::PKCS9_EMAIL, $email) + ); + + $this->commonName = $commonName; + $this->email = $email; + $this->organization = $organization; + $this->locality = $locality; + $this->state = $state; + $this->country = $country; + $this->organizationalUnit = $organizationalUnit; + } + + public function getCommonName() + { + return $this->commonName; + } + + public function getEmail() + { + return $this->email; + } + + public function getOrganization() + { + return $this->organization; + } + + public function getLocality() + { + return $this->locality; + } + + public function getState() + { + return $this->state; + } + + public function getCountry() + { + return $this->country; + } + + public function getOrganizationalUnit() + { + return $this->organizationalUnit; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::SEQUENCE, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + + $names = []; + $octetsToRead = $contentLength; + while ($octetsToRead > 0) { + $relativeDistinguishedName = RelativeDistinguishedName::fromBinary($binaryData, $offsetIndex); + $octetsToRead -= $relativeDistinguishedName->getObjectLength(); + $names[] = $relativeDistinguishedName; + } + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/PrivateKey.php b/vendor/fgrosse/phpasn1/lib/X509/PrivateKey.php new file mode 100644 index 000000000..d57ad8659 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/PrivateKey.php @@ -0,0 +1,35 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509; + +use FG\ASN1\OID; +use FG\ASN1\Universal\NullObject; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\BitString; +use FG\ASN1\Universal\ObjectIdentifier; + +class PrivateKey extends Sequence +{ + /** + * @param string $hexKey + * @param \FG\ASN1\ASNObject|string $algorithmIdentifierString + */ + public function __construct($hexKey, $algorithmIdentifierString = OID::RSA_ENCRYPTION) + { + parent::__construct( + new Sequence( + new ObjectIdentifier($algorithmIdentifierString), + new NullObject() + ), + new BitString($hexKey) + ); + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/PublicKey.php b/vendor/fgrosse/phpasn1/lib/X509/PublicKey.php new file mode 100644 index 000000000..ab8b4514b --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/PublicKey.php @@ -0,0 +1,35 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509; + +use FG\ASN1\OID; +use FG\ASN1\Universal\NullObject; +use FG\ASN1\Universal\Sequence; +use FG\ASN1\Universal\BitString; +use FG\ASN1\Universal\ObjectIdentifier; + +class PublicKey extends Sequence +{ + /** + * @param string $hexKey + * @param \FG\ASN1\ASNObject|string $algorithmIdentifierString + */ + public function __construct($hexKey, $algorithmIdentifierString = OID::RSA_ENCRYPTION) + { + parent::__construct( + new Sequence( + new ObjectIdentifier($algorithmIdentifierString), + new NullObject() + ), + new BitString($hexKey) + ); + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/SAN/DNSName.php b/vendor/fgrosse/phpasn1/lib/X509/SAN/DNSName.php new file mode 100644 index 000000000..502738b01 --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/SAN/DNSName.php @@ -0,0 +1,28 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509\SAN; + +use FG\ASN1\Universal\GeneralString; + +class DNSName extends GeneralString +{ + const IDENTIFIER = 0x82; // not sure yet why this is the identifier used in SAN extensions + + public function __construct($dnsNameString) + { + parent::__construct($dnsNameString); + } + + public function getType() + { + return self::IDENTIFIER; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/SAN/IPAddress.php b/vendor/fgrosse/phpasn1/lib/X509/SAN/IPAddress.php new file mode 100644 index 000000000..f55be95bb --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/SAN/IPAddress.php @@ -0,0 +1,73 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509\SAN; + +use FG\ASN1\ASNObject; +use FG\ASN1\Parsable; +use FG\ASN1\Exception\ParserException; + +class IPAddress extends ASNObject implements Parsable +{ + const IDENTIFIER = 0x87; // not sure yet why this is the identifier used in SAN extensions + + /** @var string */ + private $value; + + public function __construct($ipAddressString) + { + $this->value = $ipAddressString; + } + + public function getType() + { + return self::IDENTIFIER; + } + + public function getContent() + { + return $this->value; + } + + protected function calculateContentLength() + { + return 4; + } + + protected function getEncodedValue() + { + $ipParts = explode('.', $this->value); + $binary = chr($ipParts[0]); + $binary .= chr($ipParts[1]); + $binary .= chr($ipParts[2]); + $binary .= chr($ipParts[3]); + + return $binary; + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], self::IDENTIFIER, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + if ($contentLength != 4) { + throw new ParserException("A FG\\X509\SAN\IPAddress should have a content length of 4. Extracted length was {$contentLength}", $offsetIndex); + } + + $ipAddressString = ord($binaryData[$offsetIndex++]).'.'; + $ipAddressString .= ord($binaryData[$offsetIndex++]).'.'; + $ipAddressString .= ord($binaryData[$offsetIndex++]).'.'; + $ipAddressString .= ord($binaryData[$offsetIndex++]); + + $parsedObject = new self($ipAddressString); + $parsedObject->getObjectLength(); + + return $parsedObject; + } +} diff --git a/vendor/fgrosse/phpasn1/lib/X509/SAN/SubjectAlternativeNames.php b/vendor/fgrosse/phpasn1/lib/X509/SAN/SubjectAlternativeNames.php new file mode 100644 index 000000000..271ddde7b --- /dev/null +++ b/vendor/fgrosse/phpasn1/lib/X509/SAN/SubjectAlternativeNames.php @@ -0,0 +1,96 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace FG\X509\SAN; + +use FG\ASN1\Exception\ParserException; +use FG\ASN1\ASNObject; +use FG\ASN1\OID; +use FG\ASN1\Parsable; +use FG\ASN1\Identifier; +use FG\ASN1\Universal\Sequence; + +/** + * See section 8.3.2.1 of ITU-T X.509. + */ +class SubjectAlternativeNames extends ASNObject implements Parsable +{ + private $alternativeNamesSequence; + + public function __construct() + { + $this->alternativeNamesSequence = new Sequence(); + } + + protected function calculateContentLength() + { + return $this->alternativeNamesSequence->getObjectLength(); + } + + public function getType() + { + return Identifier::OCTETSTRING; + } + + public function addDomainName(DNSName $domainName) + { + $this->alternativeNamesSequence->addChild($domainName); + } + + public function addIP(IPAddress $ip) + { + $this->alternativeNamesSequence->addChild($ip); + } + + public function getContent() + { + return $this->alternativeNamesSequence->getContent(); + } + + protected function getEncodedValue() + { + return $this->alternativeNamesSequence->getBinary(); + } + + public static function fromBinary(&$binaryData, &$offsetIndex = 0) + { + self::parseIdentifier($binaryData[$offsetIndex], Identifier::OCTETSTRING, $offsetIndex++); + $contentLength = self::parseContentLength($binaryData, $offsetIndex); + + if ($contentLength < 2) { + throw new ParserException('Can not parse Subject Alternative Names: The Sequence within the octet string after the Object identifier '.OID::CERT_EXT_SUBJECT_ALT_NAME." is too short ({$contentLength} octets)", $offsetIndex); + } + + $offsetOfSequence = $offsetIndex; + $sequence = Sequence::fromBinary($binaryData, $offsetIndex); + $offsetOfSequence += $sequence->getNumberOfLengthOctets() + 1; + + if ($sequence->getObjectLength() != $contentLength) { + throw new ParserException('Can not parse Subject Alternative Names: The Sequence length does not match the length of the surrounding octet string', $offsetIndex); + } + + $parsedObject = new self(); + /** @var \FG\ASN1\ASNObject $object */ + foreach ($sequence as $object) { + if ($object->getType() == DNSName::IDENTIFIER) { + $domainName = DNSName::fromBinary($binaryData, $offsetOfSequence); + $parsedObject->addDomainName($domainName); + } elseif ($object->getType() == IPAddress::IDENTIFIER) { + $ip = IPAddress::fromBinary($binaryData, $offsetOfSequence); + $parsedObject->addIP($ip); + } else { + throw new ParserException('Could not parse Subject Alternative Name: Only DNSName and IP SANs are currently supported', $offsetIndex); + } + } + + $parsedObject->getBinary(); // Determine the number of content octets and object sizes once (just to let the equality unit tests pass :/ ) + return $parsedObject; + } +} diff --git a/vendor/geoip2/geoip2/CHANGELOG.md b/vendor/geoip2/geoip2/CHANGELOG.md new file mode 100644 index 000000000..f233bc5ab --- /dev/null +++ b/vendor/geoip2/geoip2/CHANGELOG.md @@ -0,0 +1,290 @@ +CHANGELOG +========= + +2.11.0 (2020-10-01) +------------------- + +* IMPORTANT: PHP 7.2 or greater is now required. +* Added the `isResidentialProxy` property to `GeoIp2\Model\AnonymousIP` and + `GeoIp2\Record\Traits`. +* Additional type hints have been added. + +2.10.0 (2019-12-12) +------------------- + +* PHP 5.6 or greater is now required. +* The `network` property was added to `GeoIp2\Record\Traits`, + `GeoIp2\Model\AnonymousIp`, `GeoIp2\Model\Asn`, + `GeoIp2\Model\ConnectionType`, `Geoip2\Model\Domain`, + and `GeoIp2\Model\Isp`. This is a string in CIDR format representing the + largest network where all of the properties besides `ipAddress` have the + same value. +* Updated documentation of anonymizer properties - `isAnonymousVpn` + and `isHostingProvider` - to be more descriptive. +* The `userCount` property was added to `GeoIp2\Record\Traits`. This is an + integer which indicates the estimated number of users sharing the + IP/network during the past 24 hours. This output is available from GeoIP2 + Precision Insights. +* The `staticIpScore` property was added to `GeoIp2\Record\Traits`. This is + a float which indicates how static or dynamic an IP address is. This + output is available from GeoIP2 Precision Insights. + +2.9.0 (2018-04-10) +------------------ + +* Refer to account IDs using the terminology "account" rather than "user". + +2.8.0 (2018-01-18) +------------------ + +* The `isInEuropeanUnion` property was added to `GeoIp2\Record\Country` + and `GeoIp2\Record\RepresentedCountry`. This property is `true` if the + country is a member state of the European Union. + +2.7.0 (2017-10-27) +------------------ + +* The following new anonymizer properties were added to `GeoIp2\Record\Traits` + for use with GeoIP2 Precision Insights: `isAnonymous`, `isAnonymousVpn`, + `isHostingProvider`, `isPublicProxy`, and `isTorExitNode`. + +2.6.0 (2017-07-10) +----------------- + +* Code clean-up and tidying. +* Set minimum required PHP version to 5.4 in `composer.json`. Previously, + 5.3 would work but was not tested. Now 5.4 is hard minimum version. + +2.5.0 (2017-05-08) +------------------ + +* Support for PHP 5.3 was dropped. +* Added support for GeoLite2 ASN database. + +2.4.5 (2017-01-31) +------------------ + +* Additional error checking on the data returned from `MaxMind\Db\Reader` + was added to help detect corrupt databases. GitHub #83. + +2.4.4 (2016-10-11) +------------------ + +* `isset()` on `mostSpecificSubdivision` attribute now returns the + correct value. Reported by Juan Francisco Giordana. GitHub #81. + +2.4.3 (2016-10-11) +------------------ + +* `isset()` on `name` attribute now returns the correct value. Reported by + Juan Francisco Giordana. GitHub #79. + +2.4.2 (2016-08-17) +------------------ + +* Updated documentation to clarify what the accuracy radius refers to. +* Upgraded `maxmind/web-service-common` to 0.3.0. This version uses + `composer/ca-bundle` rather than our own CA bundle. GitHub #75. +* Improved PHP documentation generation. + +2.4.1 (2016-06-10) +------------------ + +* Corrected type annotations in documentation. GitHub #66. +* Updated documentation to reflect that the accuracy radius is now included + in City. +* Upgraded web service client, which supports setting a proxy. GitHub #59. + +2.4.0 (2016-04-15) +------------------ + +* Added support for the GeoIP2 Enterprise database. + +2.3.3 (2015-09-24) +------------------ + +* Corrected case on `JsonSerializable` interface. Reported by Axel Etcheverry. + GitHub #56. + +2.3.2 (2015-09-23) +------------------ + +* `JsonSerializable` compatibility interface was moved to `GeoIp2\Compat` + rather than the global namespace to prevent autoloading issues. Reported by + Tomas Buteler. GitHub #54. +* Missing documentation for the `$postal` property was added to the + `GeoIp2\Model\City` class. Fix by Roy Sindre Norangshol. GitHub #51. +* In the Phar distribution, source files for this module no longer have their + documentation stripped, allowing IDE introspection to work properly. + Reported by Dominic Black. GitHub #52. + +2.3.1 (2015-06-30) +------------------ + +* Updated `maxmind/web-service-common` to version with fixes for PHP 5.3 and + 5.4. + +2.3.0 (2015-06-29) +------------------ + +* Support for demographics fields `averageIncome` and `populationDensity` in + the `Location` record, returned by the Insights endpoint. +* The `isAnonymousProxy` and `isSatelliteProvider` properties on + `GeoIP2\Record\Traits` have been deprecated. Please use our [GeoIP2 + Anonymous IP database](https://www.maxmind.com/en/geoip2-anonymous-ip-database) + to determine whether an IP address is used by an anonymizing service. + +2.2.0-beta1 (2015-06-09) +------------------------ + +* Typo fix in documentation. + +2.2.0-alpha2 (2015-06-01) +------------------------- + +* `maxmind-ws/web-service-common` was renamed to `maxmind/web-service-common`. + +2.2.0-alpha1 (2015-05-22) +------------------------- + +* The library no longer uses Guzzle and instead uses curl directly. +* Support for `timeout` and `connectTimout` were added to the `$options` array + passed to the `GeoIp2\WebService\Client` constructor. Pull request by Will + Bradley. GitHub #36. + +2.1.1 (2014-12-03) +------------------ + +* The 2.1.0 Phar builds included a shebang line, causing issues when loading + it as a library. This has been corrected. GitHub #33. + +2.1.0 (2014-10-29) +------------------ + +* Update ApiGen dependency to version that isn't broken on case sensitive + file systems. +* Added support for the GeoIP2 Anonymous IP database. The + `GeoIP2\Database\Reader` class now has an `anonymousIp` method which returns + a `GeoIP2\Model\AnonymousIp` object. +* Boolean attributes like those in the `GeoIP2\Record\Traits` class now return + `false` instead of `null` when they were not true. + +2.0.0 (2014-09-22) +------------------ + +* First production release. + +0.9.0 (2014-09-15) +------------------ + +* IMPORTANT: The deprecated `omni()` and `cityIspOrg()` methods have been + removed from `GeoIp2\WebService\Client`. + +0.8.1 (2014-09-12) +------------------ + +* The check added to the `GeoIP2\Database\Reader` lookup methods in 0.8.0 did + not work with the GeoIP2 City Database Subset by Continent with World + Countries. This has been fixed. Fixes GitHub issue #23. + +0.8.0 (2014-09-10) +------------------ + +* The `GeoIp2\Database\Reader` lookup methods (e.g., `city()`, `isp()`) now + throw a `BadMethodCallException` if they are used with a database that + does not match the method. In particular, doing a `city()` lookup on a + GeoIP2 Country database will result in an exception, and vice versa. +* A `metadata()` method has been added to the `GeoIP2\Database\Reader` class. + This returns a `MaxMind\Db\Reader\Metadata` class with information about the + database. +* The name attribute was missing from the RepresentedCountry class. + +0.7.0 (2014-07-22) +------------------ + +* The web service client API has been updated for the v2.1 release of the web + service. In particular, the `cityIspOrg` and `omni` methods on + `GeoIp2\WebService\Client` should be considered deprecated. The `city` + method now provides all of the data formerly provided by `cityIspOrg`, and + the `omni` method has been replaced by the `insights` method. +* Support was added for GeoIP2 Connection Type, Domain and ISP databases. + + +0.6.3 (2014-05-12) +------------------ + +* With the previous Phar builds, some users received `phar error: invalid url + or non-existent phar` errors. The correct alias is now used for the Phar, + and this should no longer be an issue. + +0.6.2 (2014-05-08) +------------------ + +* The Phar build was broken with Guzzle 3.9.0+. This has been fixed. + +0.6.1 (2014-05-01) +------------------ + +* This API now officially supports HHVM. +* The `maxmind-db/reader` dependency was updated to a version that does not + require BC Math. +* The Composer compatibility autoload rules are now targeted more narrowly. +* A `box.json` file is included to build a Phar package. + +0.6.0 (2014-02-19) +------------------ + +* This API is now licensed under the Apache License, Version 2.0. +* Model and record classes now implement `JsonSerializable`. +* `isset` now works with model and record classes. + +0.5.0 (2013-10-21) +------------------ + +* Renamed $languages constructor parameters to $locales for both the Client + and Reader classes. +* Documentation and code clean-up (Ben Morel). +* Added the interface `GeoIp2\ProviderInterface`, which is implemented by both + `\GeoIp2\Database\Reader` and `\GeoIp2\WebService\Client`. + +0.4.0 (2013-07-16) +------------------ + +* This is the first release with the GeoIP2 database reader. Please see the + `README.md` file and the `\GeoIp2\Database\Reader` class. +* The general exception classes were replaced with specific exception classes + representing particular types of errors, such as an authentication error. + +0.3.0 (2013-07-12) +------------------ + +* In namespaces and class names, "GeoIP2" was renamed to "GeoIp2" to improve + consistency. + +0.2.1 (2013-06-10) +------------------ + +* First official beta release. +* Documentation updates and corrections. + +0.2.0 (2013-05-29) +------------------ + +* `GenericException` was renamed to `GeoIP2Exception`. +* We now support more languages. The new languages are de, es, fr, and pt-BR. +* The REST API now returns a record with data about your account. There is + a new `GeoIP\Records\MaxMind` class for this data. +* The `continentCode` attribute on `Continent` was renamed to `code`. +* Documentation updates. + +0.1.1 (2013-05-14) +------------------ + +* Updated Guzzle version requirement. +* Fixed Composer example in README.md. + + +0.1.0 (2013-05-13) +------------------ + +* Initial release. diff --git a/vendor/geoip2/geoip2/LICENSE b/vendor/geoip2/geoip2/LICENSE new file mode 100644 index 000000000..d64569567 --- /dev/null +++ b/vendor/geoip2/geoip2/LICENSE @@ -0,0 +1,202 @@ + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/vendor/geoip2/geoip2/README.md b/vendor/geoip2/geoip2/README.md new file mode 100644 index 000000000..e4a74dc10 --- /dev/null +++ b/vendor/geoip2/geoip2/README.md @@ -0,0 +1,409 @@ +# GeoIP2 PHP API # + +## Description ## + +This package provides an API for the GeoIP2 +[web services](https://dev.maxmind.com/geoip/geoip2/web-services) and +[databases](https://dev.maxmind.com/geoip/geoip2/downloadable). The API also +works with the free +[GeoLite2 databases](https://dev.maxmind.com/geoip/geoip2/geolite2/). + +## Install via Composer ## + +We recommend installing this package with [Composer](https://getcomposer.org/). + +### Download Composer ### + +To download Composer, run in the root directory of your project: + +```bash +curl -sS https://getcomposer.org/installer | php +``` + +You should now have the file `composer.phar` in your project directory. + +### Install Dependencies ### + +Run in your project root: + +``` +php composer.phar require geoip2/geoip2:~2.0 +``` + +You should now have the files `composer.json` and `composer.lock` as well as +the directory `vendor` in your project directory. If you use a version control +system, `composer.json` should be added to it. + +### Require Autoloader ### + +After installing the dependencies, you need to require the Composer autoloader +from your code: + +```php +require 'vendor/autoload.php'; +``` + +## Install via Phar ## + +Although we strongly recommend using Composer, we also provide a +[phar archive](https://php.net/manual/en/book.phar.php) containing most of the +dependencies for GeoIP2. Our latest phar archive is available on +[our releases page](https://github.com/maxmind/GeoIP2-php/releases). + +### Install Dependencies ### + +In order to use the phar archive, you must have the PHP +[Phar extension](https://php.net/manual/en/book.phar.php) installed and +enabled. + +If you will be making web service requests, you must have the PHP +[cURL extension](https://php.net/manual/en/book.curl.php) +installed to use this archive. For Debian based distributions, this can +typically be found in the the `php-curl` package. For other operating +systems, please consult the relevant documentation. After installing the +extension you may need to restart your web server. + +If you are missing this extension, you will see errors like the following: + +``` +PHP Fatal error: Uncaught Error: Call to undefined function MaxMind\WebService\curl_version() +``` + +### Require Package ### + +To use the archive, just require it from your script: + +```php +require 'geoip2.phar'; +``` + +## Optional C Extension ## + +The [MaxMind DB API](https://github.com/maxmind/MaxMind-DB-Reader-php) +includes an optional C extension that you may install to dramatically increase +the performance of lookups in GeoIP2 or GeoLite2 databases. To install, please +follow the instructions included with that API. + +The extension has no effect on web-service lookups. + +## IP Geolocation Usage ## + +IP geolocation is inherently imprecise. Locations are often near the center of +the population. Any location provided by a GeoIP2 database or web service +should not be used to identify a particular address or household. + +## Database Reader ## + +### Usage ### + +To use this API, you must create a new `\GeoIp2\Database\Reader` object with +the path to the database file as the first argument to the constructor. You +may then call the method corresponding to the database you are using. + +If the lookup succeeds, the method call will return a model class for the +record in the database. This model in turn contains multiple container +classes for the different parts of the data such as the city in which the +IP address is located. + +If the record is not found, a `\GeoIp2\Exception\AddressNotFoundException` +is thrown. If the database is invalid or corrupt, a +`\MaxMind\Db\InvalidDatabaseException` will be thrown. + +See the API documentation for more details. + +### City Example ### + +```php +city('128.101.101.101'); + +print($record->country->isoCode . "\n"); // 'US' +print($record->country->name . "\n"); // 'United States' +print($record->country->names['zh-CN'] . "\n"); // '美国' + +print($record->mostSpecificSubdivision->name . "\n"); // 'Minnesota' +print($record->mostSpecificSubdivision->isoCode . "\n"); // 'MN' + +print($record->city->name . "\n"); // 'Minneapolis' + +print($record->postal->code . "\n"); // '55455' + +print($record->location->latitude . "\n"); // 44.9733 +print($record->location->longitude . "\n"); // -93.2323 + +print($record->traits->network . "\n"); // '128.101.101.101/32' + +``` + +### Anonymous IP Example ### + +```php +anonymousIp('128.101.101.101'); + +if ($record->isAnonymous) { print "anon\n"; } +print($record->ipAddress . "\n"); // '128.101.101.101' +print($record->network . "\n"); // '128.101.101.101/32' + +``` + +### Connection-Type Example ### + +```php +connectionType('128.101.101.101'); + +print($record->connectionType . "\n"); // 'Corporate' +print($record->ipAddress . "\n"); // '128.101.101.101' +print($record->network . "\n"); // '128.101.101.101/32' + +``` + +### Domain Example ### + +```php +domain('128.101.101.101'); + +print($record->domain . "\n"); // 'umn.edu' +print($record->ipAddress . "\n"); // '128.101.101.101' +print($record->network . "\n"); // '128.101.101.101/32' + +``` + +### Enterprise Example ### + +```php +enterprise method to do a lookup in the Enterprise database +$record = $reader->enterprise('128.101.101.101'); + +print($record->country->confidence . "\n"); // 99 +print($record->country->isoCode . "\n"); // 'US' +print($record->country->name . "\n"); // 'United States' +print($record->country->names['zh-CN'] . "\n"); // '美国' + +print($record->mostSpecificSubdivision->confidence . "\n"); // 77 +print($record->mostSpecificSubdivision->name . "\n"); // 'Minnesota' +print($record->mostSpecificSubdivision->isoCode . "\n"); // 'MN' + +print($record->city->confidence . "\n"); // 60 +print($record->city->name . "\n"); // 'Minneapolis' + +print($record->postal->code . "\n"); // '55455' + +print($record->location->accuracyRadius . "\n"); // 50 +print($record->location->latitude . "\n"); // 44.9733 +print($record->location->longitude . "\n"); // -93.2323 + +print($record->traits->network . "\n"); // '128.101.101.101/32' + +``` + +### ISP Example ### + +```php +isp('128.101.101.101'); + +print($record->autonomousSystemNumber . "\n"); // 217 +print($record->autonomousSystemOrganization . "\n"); // 'University of Minnesota' +print($record->isp . "\n"); // 'University of Minnesota' +print($record->organization . "\n"); // 'University of Minnesota' + +print($record->ipAddress . "\n"); // '128.101.101.101' +print($record->network . "\n"); // '128.101.101.101/32' + +``` + +## Web Service Client ## + +### Usage ### + +To use this API, you must create a new `\GeoIp2\WebService\Client` +object with your `$accountId` and `$licenseKey`, then you call the method +corresponding to a specific end point, passing it the IP address you want to +look up. + +If the request succeeds, the method call will return a model class for the end +point you called. This model in turn contains multiple record classes, each of +which represents part of the data returned by the web service. + +If there is an error, a structured exception is thrown. + +See the API documentation for more details. + +### Example ### + +```php +city('128.101.101.101'); + +print($record->country->isoCode . "\n"); // 'US' +print($record->country->name . "\n"); // 'United States' +print($record->country->names['zh-CN'] . "\n"); // '美国' + +print($record->mostSpecificSubdivision->name . "\n"); // 'Minnesota' +print($record->mostSpecificSubdivision->isoCode . "\n"); // 'MN' + +print($record->city->name . "\n"); // 'Minneapolis' + +print($record->postal->code . "\n"); // '55455' + +print($record->location->latitude . "\n"); // 44.9733 +print($record->location->longitude . "\n"); // -93.2323 + +print($record->traits->network . "\n"); // '128.101.101.101/32' + +``` + +## Values to use for Database or Array Keys ## + +**We strongly discourage you from using a value from any `names` property as +a key in a database or array.** + +These names may change between releases. Instead we recommend using one of the +following: + +* `GeoIp2\Record\City` - `$city->geonameId` +* `GeoIp2\Record\Continent` - `$continent->code` or `$continent->geonameId` +* `GeoIp2\Record\Country` and `GeoIp2\Record\RepresentedCountry` - + `$country->isoCode` or `$country->geonameId` +* `GeoIp2\Record\Subdivision` - `$subdivision->isoCode` or `$subdivision->geonameId` + +### What data is returned? ### + +While many of the end points return the same basic records, the attributes +which can be populated vary between end points. In addition, while an end +point may offer a particular piece of data, MaxMind does not always have every +piece of data for any given IP address. + +Because of these factors, it is possible for any end point to return a record +where some or all of the attributes are unpopulated. + +See the +[GeoIP2 Precision web service docs](https://dev.maxmind.com/geoip/geoip2/web-services) +for details on what data each end point may return. + +The only piece of data which is always returned is the `ipAddress` +attribute in the `GeoIp2\Record\Traits` record. + +## Integration with GeoNames ## + +[GeoNames](https://www.geonames.org/) offers web services and downloadable +databases with data on geographical features around the world, including +populated places. They offer both free and paid premium data. Each +feature is unique identified by a `geonameId`, which is an integer. + +Many of the records returned by the GeoIP2 web services and databases +include a `geonameId` property. This is the ID of a geographical feature +(city, region, country, etc.) in the GeoNames database. + +Some of the data that MaxMind provides is also sourced from GeoNames. We +source things like place names, ISO codes, and other similar data from +the GeoNames premium data set. + +## Reporting data problems ## + +If the problem you find is that an IP address is incorrectly mapped, +please +[submit your correction to MaxMind](https://www.maxmind.com/en/correction). + +If you find some other sort of mistake, like an incorrect spelling, +please check the [GeoNames site](https://www.geonames.org/) first. Once +you've searched for a place and found it on the GeoNames map view, there +are a number of links you can use to correct data ("move", "edit", +"alternate names", etc.). Once the correction is part of the GeoNames +data set, it will be automatically incorporated into future MaxMind +releases. + +If you are a paying MaxMind customer and you're not sure where to submit +a correction, please +[contact MaxMind support](https://www.maxmind.com/en/support) for help. + +## Other Support ## + +Please report all issues with this code using the +[GitHub issue tracker](https://github.com/maxmind/GeoIP2-php/issues). + +If you are having an issue with a MaxMind service that is not specific +to the client API, please see +[our support page](https://www.maxmind.com/en/support). + +## Requirements ## + +This library requires PHP 5.6 or greater. + +This library also relies on the [MaxMind DB Reader](https://github.com/maxmind/MaxMind-DB-Reader-php). + +## Contributing ## + +Patches and pull requests are encouraged. All code should follow the PSR-2 +style guidelines. Please include unit tests whenever possible. You may obtain +the test data for the maxmind-db folder by running `git submodule update +--init --recursive` or adding `--recursive` to your initial clone, or from +https://github.com/maxmind/MaxMind-DB + +## Versioning ## + +The GeoIP2 PHP API uses [Semantic Versioning](https://semver.org/). + +## Copyright and License ## + +This software is Copyright (c) 2013-2019 by MaxMind, Inc. + +This is free software, licensed under the Apache License, Version 2.0. diff --git a/vendor/geoip2/geoip2/composer.json b/vendor/geoip2/geoip2/composer.json new file mode 100644 index 000000000..8d3d980b2 --- /dev/null +++ b/vendor/geoip2/geoip2/composer.json @@ -0,0 +1,31 @@ +{ + "name": "geoip2/geoip2", + "description": "MaxMind GeoIP2 PHP API", + "keywords": ["geoip", "geoip2", "geolocation", "ip", "maxmind"], + "homepage": "https://github.com/maxmind/GeoIP2-php", + "type": "library", + "license": "Apache-2.0", + "authors": [ + { + "name": "Gregory J. Oschwald", + "email": "goschwald@maxmind.com", + "homepage": "https://www.maxmind.com/" + } + ], + "require": { + "maxmind-db/reader": "~1.8", + "maxmind/web-service-common": "~0.8", + "php": ">=7.2", + "ext-json": "*" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.*", + "phpunit/phpunit": "^8.0 || ^9.0", + "squizlabs/php_codesniffer": "3.*" + }, + "autoload": { + "psr-4": { + "GeoIp2\\": "src" + } + } +} diff --git a/vendor/geoip2/geoip2/examples/benchmark.php b/vendor/geoip2/geoip2/examples/benchmark.php new file mode 100644 index 000000000..7af2a5db1 --- /dev/null +++ b/vendor/geoip2/geoip2/examples/benchmark.php @@ -0,0 +1,25 @@ +city($ip); + } catch (\GeoIp2\Exception\AddressNotFoundException $e) { + } + if ($i % 10000 === 0) { + echo $i . ' ' . $ip . "\n"; + } +} +$endTime = microtime(true); + +$duration = $endTime - $startTime; +echo 'Requests per second: ' . $count / $duration . "\n"; diff --git a/vendor/geoip2/geoip2/src/Database/Reader.php b/vendor/geoip2/geoip2/src/Database/Reader.php new file mode 100644 index 000000000..0c370b730 --- /dev/null +++ b/vendor/geoip2/geoip2/src/Database/Reader.php @@ -0,0 +1,273 @@ +dbReader = new DbReader($filename); + $this->dbType = $this->dbReader->metadata()->databaseType; + $this->locales = $locales; + } + + /** + * This method returns a GeoIP2 City model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function city(string $ipAddress): \GeoIp2\Model\City + { + return $this->modelFor('City', 'City', $ipAddress); + } + + /** + * This method returns a GeoIP2 Country model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function country(string $ipAddress): \GeoIp2\Model\Country + { + return $this->modelFor('Country', 'Country', $ipAddress); + } + + /** + * This method returns a GeoIP2 Anonymous IP model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function anonymousIp(string $ipAddress): \GeoIp2\Model\AnonymousIp + { + return $this->flatModelFor( + 'AnonymousIp', + 'GeoIP2-Anonymous-IP', + $ipAddress + ); + } + + /** + * This method returns a GeoLite2 ASN model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function asn(string $ipAddress): \GeoIp2\Model\Asn + { + return $this->flatModelFor( + 'Asn', + 'GeoLite2-ASN', + $ipAddress + ); + } + + /** + * This method returns a GeoIP2 Connection Type model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function connectionType(string $ipAddress): \GeoIp2\Model\ConnectionType + { + return $this->flatModelFor( + 'ConnectionType', + 'GeoIP2-Connection-Type', + $ipAddress + ); + } + + /** + * This method returns a GeoIP2 Domain model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function domain(string $ipAddress): \GeoIp2\Model\Domain + { + return $this->flatModelFor( + 'Domain', + 'GeoIP2-Domain', + $ipAddress + ); + } + + /** + * This method returns a GeoIP2 Enterprise model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function enterprise(string $ipAddress): \GeoIp2\Model\Enterprise + { + return $this->modelFor('Enterprise', 'Enterprise', $ipAddress); + } + + /** + * This method returns a GeoIP2 ISP model. + * + * @param string $ipAddress an IPv4 or IPv6 address as a string + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address is + * not in the database + * @throws \MaxMind\Db\Reader\InvalidDatabaseException if the database + * is corrupt or invalid + */ + public function isp(string $ipAddress): \GeoIp2\Model\Isp + { + return $this->flatModelFor( + 'Isp', + 'GeoIP2-ISP', + $ipAddress + ); + } + + private function modelFor(string $class, string $type, string $ipAddress) + { + list($record, $prefixLen) = $this->getRecord($class, $type, $ipAddress); + + $record['traits']['ip_address'] = $ipAddress; + $record['traits']['prefix_len'] = $prefixLen; + + $class = 'GeoIp2\\Model\\' . $class; + + return new $class($record, $this->locales); + } + + private function flatModelFor(string $class, string $type, string $ipAddress) + { + list($record, $prefixLen) = $this->getRecord($class, $type, $ipAddress); + + $record['ip_address'] = $ipAddress; + $record['prefix_len'] = $prefixLen; + $class = 'GeoIp2\\Model\\' . $class; + + return new $class($record); + } + + private function getRecord(string $class, string $type, string $ipAddress): array + { + if (strpos($this->dbType, $type) === false) { + $method = lcfirst($class); + throw new \BadMethodCallException( + "The $method method cannot be used to open a {$this->dbType} database" + ); + } + list($record, $prefixLen) = $this->dbReader->getWithPrefixLen($ipAddress); + if ($record === null) { + throw new AddressNotFoundException( + "The address $ipAddress is not in the database." + ); + } + if (!\is_array($record)) { + // This can happen on corrupt databases. Generally, + // MaxMind\Db\Reader will throw a + // MaxMind\Db\Reader\InvalidDatabaseException, but occasionally + // the lookup may result in a record that looks valid but is not + // an array. This mostly happens when the user is ignoring all + // exceptions and the more frequent InvalidDatabaseException + // exceptions go unnoticed. + throw new InvalidDatabaseException( + "Expected an array when looking up $ipAddress but received: " + . \gettype($record) + ); + } + + return [$record, $prefixLen]; + } + + /** + * @throws \InvalidArgumentException if arguments are passed to the method + * @throws \BadMethodCallException if the database has been closed + * + * @return \MaxMind\Db\Reader\Metadata object for the database + */ + public function metadata(): \MaxMind\Db\Reader\Metadata + { + return $this->dbReader->metadata(); + } + + /** + * Closes the GeoIP2 database and returns the resources to the system. + */ + public function close(): void + { + $this->dbReader->close(); + } +} diff --git a/vendor/geoip2/geoip2/src/Exception/AddressNotFoundException.php b/vendor/geoip2/geoip2/src/Exception/AddressNotFoundException.php new file mode 100644 index 000000000..628fb0672 --- /dev/null +++ b/vendor/geoip2/geoip2/src/Exception/AddressNotFoundException.php @@ -0,0 +1,12 @@ +uri = $uri; + parent::__construct($message, $httpStatus, $previous); + } +} diff --git a/vendor/geoip2/geoip2/src/Exception/InvalidRequestException.php b/vendor/geoip2/geoip2/src/Exception/InvalidRequestException.php new file mode 100644 index 000000000..e469f56cc --- /dev/null +++ b/vendor/geoip2/geoip2/src/Exception/InvalidRequestException.php @@ -0,0 +1,28 @@ +error = $error; + parent::__construct($message, $httpStatus, $uri, $previous); + } +} diff --git a/vendor/geoip2/geoip2/src/Exception/OutOfQueriesException.php b/vendor/geoip2/geoip2/src/Exception/OutOfQueriesException.php new file mode 100644 index 000000000..9734c8ce4 --- /dev/null +++ b/vendor/geoip2/geoip2/src/Exception/OutOfQueriesException.php @@ -0,0 +1,12 @@ +raw = $raw; + } + + /** + * @ignore + */ + protected function get(string $field) + { + if (isset($this->raw[$field])) { + return $this->raw[$field]; + } + if (preg_match('/^is_/', $field)) { + return false; + } + + return null; + } + + /** + * @ignore + */ + public function __get(string $attr) + { + if ($attr !== 'instance' && property_exists($this, $attr)) { + return $this->$attr; + } + + throw new \RuntimeException("Unknown attribute: $attr"); + } + + /** + * @ignore + */ + public function __isset(string $attr): bool + { + return $attr !== 'instance' && isset($this->$attr); + } + + public function jsonSerialize(): array + { + return $this->raw; + } +} diff --git a/vendor/geoip2/geoip2/src/Model/AnonymousIp.php b/vendor/geoip2/geoip2/src/Model/AnonymousIp.php new file mode 100644 index 000000000..bdfbc258a --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/AnonymousIp.php @@ -0,0 +1,60 @@ +isAnonymous = $this->get('is_anonymous'); + $this->isAnonymousVpn = $this->get('is_anonymous_vpn'); + $this->isHostingProvider = $this->get('is_hosting_provider'); + $this->isPublicProxy = $this->get('is_public_proxy'); + $this->isResidentialProxy = $this->get('is_residential_proxy'); + $this->isTorExitNode = $this->get('is_tor_exit_node'); + $ipAddress = $this->get('ip_address'); + $this->ipAddress = $ipAddress; + $this->network = Util::cidr($ipAddress, $this->get('prefix_len')); + } +} diff --git a/vendor/geoip2/geoip2/src/Model/Asn.php b/vendor/geoip2/geoip2/src/Model/Asn.php new file mode 100644 index 000000000..38a0f750c --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/Asn.php @@ -0,0 +1,43 @@ +autonomousSystemNumber = $this->get('autonomous_system_number'); + $this->autonomousSystemOrganization = + $this->get('autonomous_system_organization'); + $ipAddress = $this->get('ip_address'); + $this->ipAddress = $ipAddress; + $this->network = Util::cidr($ipAddress, $this->get('prefix_len')); + } +} diff --git a/vendor/geoip2/geoip2/src/Model/City.php b/vendor/geoip2/geoip2/src/Model/City.php new file mode 100644 index 000000000..1840e778f --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/City.php @@ -0,0 +1,111 @@ +city = new \GeoIp2\Record\City($this->get('city'), $locales); + $this->location = new \GeoIp2\Record\Location($this->get('location')); + $this->postal = new \GeoIp2\Record\Postal($this->get('postal')); + + $this->createSubdivisions($raw, $locales); + } + + private function createSubdivisions(array $raw, array $locales): void + { + if (!isset($raw['subdivisions'])) { + return; + } + + foreach ($raw['subdivisions'] as $sub) { + array_push( + $this->subdivisions, + new \GeoIp2\Record\Subdivision($sub, $locales) + ); + } + } + + /** + * @ignore + */ + public function __get(string $attr) + { + if ($attr === 'mostSpecificSubdivision') { + return $this->$attr(); + } + + return parent::__get($attr); + } + + /** + * @ignore + */ + public function __isset(string $attr): bool + { + if ($attr === 'mostSpecificSubdivision') { + // We always return a mostSpecificSubdivision, even if it is the + // empty subdivision + return true; + } + + return parent::__isset($attr); + } + + private function mostSpecificSubdivision(): \GeoIp2\Record\Subdivision + { + return empty($this->subdivisions) ? + new \GeoIp2\Record\Subdivision([], $this->locales) : + end($this->subdivisions); + } +} diff --git a/vendor/geoip2/geoip2/src/Model/ConnectionType.php b/vendor/geoip2/geoip2/src/Model/ConnectionType.php new file mode 100644 index 000000000..5f7747fe5 --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/ConnectionType.php @@ -0,0 +1,39 @@ +connectionType = $this->get('connection_type'); + $ipAddress = $this->get('ip_address'); + $this->ipAddress = $ipAddress; + $this->network = Util::cidr($ipAddress, $this->get('prefix_len')); + } +} diff --git a/vendor/geoip2/geoip2/src/Model/Country.php b/vendor/geoip2/geoip2/src/Model/Country.php new file mode 100644 index 000000000..d7d07f1cf --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/Country.php @@ -0,0 +1,70 @@ +continent = new \GeoIp2\Record\Continent( + $this->get('continent'), + $locales + ); + $this->country = new \GeoIp2\Record\Country( + $this->get('country'), + $locales + ); + $this->maxmind = new \GeoIp2\Record\MaxMind($this->get('maxmind')); + $this->registeredCountry = new \GeoIp2\Record\Country( + $this->get('registered_country'), + $locales + ); + $this->representedCountry = new \GeoIp2\Record\RepresentedCountry( + $this->get('represented_country'), + $locales + ); + $this->traits = new \GeoIp2\Record\Traits($this->get('traits')); + + $this->locales = $locales; + } +} diff --git a/vendor/geoip2/geoip2/src/Model/Domain.php b/vendor/geoip2/geoip2/src/Model/Domain.php new file mode 100644 index 000000000..e332dd48e --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/Domain.php @@ -0,0 +1,39 @@ +domain = $this->get('domain'); + $ipAddress = $this->get('ip_address'); + $this->ipAddress = $ipAddress; + $this->network = Util::cidr($ipAddress, $this->get('prefix_len')); + } +} diff --git a/vendor/geoip2/geoip2/src/Model/Enterprise.php b/vendor/geoip2/geoip2/src/Model/Enterprise.php new file mode 100644 index 000000000..e9706a698 --- /dev/null +++ b/vendor/geoip2/geoip2/src/Model/Enterprise.php @@ -0,0 +1,16 @@ +autonomousSystemNumber = $this->get('autonomous_system_number'); + $this->autonomousSystemOrganization = + $this->get('autonomous_system_organization'); + $this->isp = $this->get('isp'); + $this->organization = $this->get('organization'); + + $ipAddress = $this->get('ip_address'); + $this->ipAddress = $ipAddress; + $this->network = Util::cidr($ipAddress, $this->get('prefix_len')); + } +} diff --git a/vendor/geoip2/geoip2/src/ProviderInterface.php b/vendor/geoip2/geoip2/src/ProviderInterface.php new file mode 100644 index 000000000..4e28eff1b --- /dev/null +++ b/vendor/geoip2/geoip2/src/ProviderInterface.php @@ -0,0 +1,22 @@ +locales = $locales; + parent::__construct($record); + } + + /** + * @ignore + */ + public function __get(string $attr) + { + if ($attr === 'name') { + return $this->name(); + } + + return parent::__get($attr); + } + + /** + * @ignore + */ + public function __isset(string $attr): bool + { + if ($attr === 'name') { + return $this->firstSetNameLocale() !== null; + } + + return parent::__isset($attr); + } + + private function name(): ?string + { + $locale = $this->firstSetNameLocale(); + + return $locale === null ? null : $this->names[$locale]; + } + + private function firstSetNameLocale(): ?string + { + foreach ($this->locales as $locale) { + if (isset($this->names[$locale])) { + return $locale; + } + } + + return null; + } +} diff --git a/vendor/geoip2/geoip2/src/Record/AbstractRecord.php b/vendor/geoip2/geoip2/src/Record/AbstractRecord.php new file mode 100644 index 000000000..e2abcf16c --- /dev/null +++ b/vendor/geoip2/geoip2/src/Record/AbstractRecord.php @@ -0,0 +1,59 @@ +record = isset($record) ? $record : []; + } + + /** + * @ignore + */ + public function __get(string $attr) + { + // XXX - kind of ugly but greatly reduces boilerplate code + $key = $this->attributeToKey($attr); + + if ($this->__isset($attr)) { + return $this->record[$key]; + } elseif ($this->validAttribute($attr)) { + if (preg_match('/^is_/', $key)) { + return false; + } + + return null; + } + throw new \RuntimeException("Unknown attribute: $attr"); + } + + public function __isset(string $attr): bool + { + return $this->validAttribute($attr) && + isset($this->record[$this->attributeToKey($attr)]); + } + + private function attributeToKey(string $attr): string + { + return strtolower(preg_replace('/([A-Z])/', '_\1', $attr)); + } + + private function validAttribute(string $attr): bool + { + return \in_array($attr, $this->validAttributes, true); + } + + public function jsonSerialize(): ?array + { + return $this->record; + } +} diff --git a/vendor/geoip2/geoip2/src/Record/City.php b/vendor/geoip2/geoip2/src/Record/City.php new file mode 100644 index 000000000..ac62bea6e --- /dev/null +++ b/vendor/geoip2/geoip2/src/Record/City.php @@ -0,0 +1,31 @@ +military + * but this could expand to include other types in the future. + */ +class RepresentedCountry extends Country +{ + protected $validAttributes = [ + 'confidence', + 'geonameId', + 'isInEuropeanUnion', + 'isoCode', + 'names', + 'type', + ]; +} diff --git a/vendor/geoip2/geoip2/src/Record/Subdivision.php b/vendor/geoip2/geoip2/src/Record/Subdivision.php new file mode 100644 index 000000000..87b895f55 --- /dev/null +++ b/vendor/geoip2/geoip2/src/Record/Subdivision.php @@ -0,0 +1,42 @@ +The user type associated with the IP + * address. This can be one of the following values:

+ *
    + *
  • business + *
  • cafe + *
  • cellular + *
  • college + *
  • content_delivery_network + *
  • dialup + *
  • government + *
  • hosting + *
  • library + *
  • military + *
  • residential + *
  • router + *
  • school + *
  • search_engine_spider + *
  • traveler + *
+ *

+ * This attribute is only available from the Insights web service and the + * GeoIP2 Enterprise database. + *

+ */ +class Traits extends AbstractRecord +{ + /** + * @ignore + */ + protected $validAttributes = [ + 'autonomousSystemNumber', + 'autonomousSystemOrganization', + 'connectionType', + 'domain', + 'ipAddress', + 'isAnonymous', + 'isAnonymousProxy', + 'isAnonymousVpn', + 'isHostingProvider', + 'isLegitimateProxy', + 'isp', + 'isPublicProxy', + 'isResidentialProxy', + 'isSatelliteProvider', + 'isTorExitNode', + 'network', + 'organization', + 'staticIpScore', + 'userCount', + 'userType', + ]; + + public function __construct(?array $record) + { + if (!isset($record['network']) && isset($record['ip_address']) && isset($record['prefix_len'])) { + $record['network'] = Util::cidr($record['ip_address'], $record['prefix_len']); + } + + parent::__construct($record); + } +} diff --git a/vendor/geoip2/geoip2/src/Util.php b/vendor/geoip2/geoip2/src/Util.php new file mode 100644 index 000000000..e0a03be8c --- /dev/null +++ b/vendor/geoip2/geoip2/src/Util.php @@ -0,0 +1,36 @@ + 0; $i++) { + $b = $ipBytes[$i]; + if ($curPrefix < 8) { + $shiftN = 8 - $curPrefix; + $b = \chr(0xFF & (\ord($b) >> $shiftN) << $shiftN); + } + $networkBytes[$i] = $b; + $curPrefix -= 8; + } + + $network = inet_ntop($networkBytes); + + return "$network/$prefixLen"; + } +} diff --git a/vendor/geoip2/geoip2/src/WebService/Client.php b/vendor/geoip2/geoip2/src/WebService/Client.php new file mode 100644 index 000000000..a6801ebdf --- /dev/null +++ b/vendor/geoip2/geoip2/src/WebService/Client.php @@ -0,0 +1,235 @@ +locales = $locales; + + // This is for backwards compatibility. Do not remove except for a + // major version bump. + if (\is_string($options)) { + $options = ['host' => $options]; + } + + if (!isset($options['host'])) { + $options['host'] = 'geoip.maxmind.com'; + } + + $options['userAgent'] = $this->userAgent(); + + $this->client = new WsClient($accountId, $licenseKey, $options); + } + + private function userAgent(): string + { + return 'GeoIP2-API/' . self::VERSION; + } + + /** + * This method calls the GeoIP2 Precision: City service. + * + * @param string $ipAddress IPv4 or IPv6 address as a string. If no + * address is provided, the address that the web service is called + * from will be used. + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address you + * provided is not in our database (e.g., a private address). + * @throws \GeoIp2\Exception\AuthenticationException if there is a problem + * with the account ID or license key that you provided + * @throws \GeoIp2\Exception\OutOfQueriesException if your account is out + * of queries + * @throws \GeoIp2\Exception\InvalidRequestException} if your request was received by the web service but is + * invalid for some other reason. This may indicate an issue + * with this API. Please report the error to MaxMind. + * @throws \GeoIp2\Exception\HttpException if an unexpected HTTP error code or message was returned. + * This could indicate a problem with the connection between + * your server and the web service or that the web service + * returned an invalid document or 500 error code + * @throws \GeoIp2\Exception\GeoIp2Exception This serves as the parent + * class to the above exceptions. It will be thrown directly + * if a 200 status code is returned but the body is invalid. + */ + public function city(string $ipAddress = 'me'): \GeoIp2\Model\City + { + return $this->responseFor('city', 'City', $ipAddress); + } + + /** + * This method calls the GeoIP2 Precision: Country service. + * + * @param string $ipAddress IPv4 or IPv6 address as a string. If no + * address is provided, the address that the web service is called + * from will be used. + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address you provided is not in our database (e.g., + * a private address). + * @throws \GeoIp2\Exception\AuthenticationException if there is a problem + * with the account ID or license key that you provided + * @throws \GeoIp2\Exception\OutOfQueriesException if your account is out of queries + * @throws \GeoIp2\Exception\InvalidRequestException} if your request was received by the web service but is + * invalid for some other reason. This may indicate an + * issue with this API. Please report the error to MaxMind. + * @throws \GeoIp2\Exception\HttpException if an unexpected HTTP error + * code or message was returned. This could indicate a problem + * with the connection between your server and the web service + * or that the web service returned an invalid document or 500 + * error code. + * @throws \GeoIp2\Exception\GeoIp2Exception This serves as the parent class to the above exceptions. It + * will be thrown directly if a 200 status code is returned but + * the body is invalid. + */ + public function country(string $ipAddress = 'me'): \GeoIp2\Model\Country + { + return $this->responseFor('country', 'Country', $ipAddress); + } + + /** + * This method calls the GeoIP2 Precision: Insights service. + * + * @param string $ipAddress IPv4 or IPv6 address as a string. If no + * address is provided, the address that the web service is called + * from will be used. + * + * @throws \GeoIp2\Exception\AddressNotFoundException if the address you + * provided is not in our database (e.g., a private address). + * @throws \GeoIp2\Exception\AuthenticationException if there is a problem + * with the account ID or license key that you provided + * @throws \GeoIp2\Exception\OutOfQueriesException if your account is out + * of queries + * @throws \GeoIp2\Exception\InvalidRequestException} if your request was received by the web service but is + * invalid for some other reason. This may indicate an + * issue with this API. Please report the error to MaxMind. + * @throws \GeoIp2\Exception\HttpException if an unexpected HTTP error code or message was returned. + * This could indicate a problem with the connection between + * your server and the web service or that the web service + * returned an invalid document or 500 error code + * @throws \GeoIp2\Exception\GeoIp2Exception This serves as the parent + * class to the above exceptions. It will be thrown directly + * if a 200 status code is returned but the body is invalid. + */ + public function insights(string $ipAddress = 'me'): \GeoIp2\Model\Insights + { + return $this->responseFor('insights', 'Insights', $ipAddress); + } + + private function responseFor(string $endpoint, string $class, string $ipAddress) + { + $path = implode('/', [self::$basePath, $endpoint, $ipAddress]); + + try { + $body = $this->client->get('GeoIP2 ' . $class, $path); + } catch (\MaxMind\Exception\IpAddressNotFoundException $ex) { + throw new AddressNotFoundException( + $ex->getMessage(), + $ex->getStatusCode(), + $ex + ); + } catch (\MaxMind\Exception\AuthenticationException $ex) { + throw new AuthenticationException( + $ex->getMessage(), + $ex->getStatusCode(), + $ex + ); + } catch (\MaxMind\Exception\InsufficientFundsException $ex) { + throw new OutOfQueriesException( + $ex->getMessage(), + $ex->getStatusCode(), + $ex + ); + } catch (\MaxMind\Exception\InvalidRequestException $ex) { + throw new InvalidRequestException( + $ex->getMessage(), + $ex->getErrorCode(), + $ex->getStatusCode(), + $ex->getUri(), + $ex + ); + } catch (\MaxMind\Exception\HttpException $ex) { + throw new HttpException( + $ex->getMessage(), + $ex->getStatusCode(), + $ex->getUri(), + $ex + ); + } catch (\MaxMind\Exception\WebServiceException $ex) { + throw new GeoIp2Exception( + $ex->getMessage(), + $ex->getCode(), + $ex + ); + } + + $class = 'GeoIp2\\Model\\' . $class; + + return new $class($body, $this->locales); + } +} diff --git a/vendor/guzzlehttp/guzzle/.php_cs b/vendor/guzzlehttp/guzzle/.php_cs new file mode 100644 index 000000000..2dd5036c1 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/.php_cs @@ -0,0 +1,23 @@ +setRiskyAllowed(true) + ->setRules([ + '@PSR2' => true, + 'array_syntax' => ['syntax' => 'short'], + 'declare_strict_types' => false, + 'concat_space' => ['spacing'=>'one'], + 'php_unit_test_case_static_method_calls' => ['call_type' => 'self'], + 'ordered_imports' => true, + // 'phpdoc_align' => ['align'=>'vertical'], + // 'native_function_invocation' => true, + ]) + ->setFinder( + PhpCsFixer\Finder::create() + ->in(__DIR__.'/src') + ->in(__DIR__.'/tests') + ->name('*.php') + ) +; + +return $config; diff --git a/vendor/guzzlehttp/guzzle/CHANGELOG.md b/vendor/guzzlehttp/guzzle/CHANGELOG.md new file mode 100644 index 000000000..464cf1c50 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/CHANGELOG.md @@ -0,0 +1,1338 @@ +# Change Log + +## 6.5.5 - 2020-06-16 + +* Unpin version constraint for `symfony/polyfill-intl-idn` [#2678](https://github.com/guzzle/guzzle/pull/2678) + +## 6.5.4 - 2020-05-25 + +* Fix various intl icu issues [#2626](https://github.com/guzzle/guzzle/pull/2626) + +## 6.5.3 - 2020-04-18 + +* Use Symfony intl-idn polyfill [#2550](https://github.com/guzzle/guzzle/pull/2550) +* Remove use of internal functions [#2548](https://github.com/guzzle/guzzle/pull/2548) + +## 6.5.2 - 2019-12-23 + +* idn_to_ascii() fix for old PHP versions [#2489](https://github.com/guzzle/guzzle/pull/2489) + +## 6.5.1 - 2019-12-21 + +* Better defaults for PHP installations with old ICU lib [#2454](https://github.com/guzzle/guzzle/pull/2454) +* IDN support for redirects [#2424](https://github.com/guzzle/guzzle/pull/2424) + +## 6.5.0 - 2019-12-07 + +* Improvement: Added support for reset internal queue in MockHandler. [#2143](https://github.com/guzzle/guzzle/pull/2143) +* Improvement: Added support to pass arbitrary options to `curl_multi_init`. [#2287](https://github.com/guzzle/guzzle/pull/2287) +* Fix: Gracefully handle passing `null` to the `header` option. [#2132](https://github.com/guzzle/guzzle/pull/2132) +* Fix: `RetryMiddleware` did not do exponential delay between retries due unit mismatch. [#2132](https://github.com/guzzle/guzzle/pull/2132) + Previously, `RetryMiddleware` would sleep for 1 millisecond, then 2 milliseconds, then 4 milliseconds. + **After this change, `RetryMiddleware` will sleep for 1 second, then 2 seconds, then 4 seconds.** + `Middleware::retry()` accepts a second callback parameter to override the default timeouts if needed. +* Fix: Prevent undefined offset when using array for ssl_key options. [#2348](https://github.com/guzzle/guzzle/pull/2348) +* Deprecated `ClientInterface::VERSION` + +## 6.4.1 - 2019-10-23 + +* No `guzzle.phar` was created in 6.4.0 due expired API token. This release will fix that +* Added `parent::__construct()` to `FileCookieJar` and `SessionCookieJar` + +## 6.4.0 - 2019-10-23 + +* Improvement: Improved error messages when using curl < 7.21.2 [#2108](https://github.com/guzzle/guzzle/pull/2108) +* Fix: Test if response is readable before returning a summary in `RequestException::getResponseBodySummary()` [#2081](https://github.com/guzzle/guzzle/pull/2081) +* Fix: Add support for GUZZLE_CURL_SELECT_TIMEOUT environment variable [#2161](https://github.com/guzzle/guzzle/pull/2161) +* Improvement: Added `GuzzleHttp\Exception\InvalidArgumentException` [#2163](https://github.com/guzzle/guzzle/pull/2163) +* Improvement: Added `GuzzleHttp\_current_time()` to use `hrtime()` if that function exists. [#2242](https://github.com/guzzle/guzzle/pull/2242) +* Improvement: Added curl's `appconnect_time` in `TransferStats` [#2284](https://github.com/guzzle/guzzle/pull/2284) +* Improvement: Make GuzzleException extend Throwable wherever it's available [#2273](https://github.com/guzzle/guzzle/pull/2273) +* Fix: Prevent concurrent writes to file when saving `CookieJar` [#2335](https://github.com/guzzle/guzzle/pull/2335) +* Improvement: Update `MockHandler` so we can test transfer time [#2362](https://github.com/guzzle/guzzle/pull/2362) + +## 6.3.3 - 2018-04-22 + +* Fix: Default headers when decode_content is specified + + +## 6.3.2 - 2018-03-26 + +* Fix: Release process + + +## 6.3.1 - 2018-03-26 + +* Bug fix: Parsing 0 epoch expiry times in cookies [#2014](https://github.com/guzzle/guzzle/pull/2014) +* Improvement: Better ConnectException detection [#2012](https://github.com/guzzle/guzzle/pull/2012) +* Bug fix: Malformed domain that contains a "/" [#1999](https://github.com/guzzle/guzzle/pull/1999) +* Bug fix: Undefined offset when a cookie has no first key-value pair [#1998](https://github.com/guzzle/guzzle/pull/1998) +* Improvement: Support PHPUnit 6 [#1953](https://github.com/guzzle/guzzle/pull/1953) +* Bug fix: Support empty headers [#1915](https://github.com/guzzle/guzzle/pull/1915) +* Bug fix: Ignore case during header modifications [#1916](https://github.com/guzzle/guzzle/pull/1916) + ++ Minor code cleanups, documentation fixes and clarifications. + + +## 6.3.0 - 2017-06-22 + +* Feature: force IP resolution (ipv4 or ipv6) [#1608](https://github.com/guzzle/guzzle/pull/1608), [#1659](https://github.com/guzzle/guzzle/pull/1659) +* Improvement: Don't include summary in exception message when body is empty [#1621](https://github.com/guzzle/guzzle/pull/1621) +* Improvement: Handle `on_headers` option in MockHandler [#1580](https://github.com/guzzle/guzzle/pull/1580) +* Improvement: Added SUSE Linux CA path [#1609](https://github.com/guzzle/guzzle/issues/1609) +* Improvement: Use class reference for getting the name of the class instead of using hardcoded strings [#1641](https://github.com/guzzle/guzzle/pull/1641) +* Feature: Added `read_timeout` option [#1611](https://github.com/guzzle/guzzle/pull/1611) +* Bug fix: PHP 7.x fixes [#1685](https://github.com/guzzle/guzzle/pull/1685), [#1686](https://github.com/guzzle/guzzle/pull/1686), [#1811](https://github.com/guzzle/guzzle/pull/1811) +* Deprecation: BadResponseException instantiation without a response [#1642](https://github.com/guzzle/guzzle/pull/1642) +* Feature: Added NTLM auth [#1569](https://github.com/guzzle/guzzle/pull/1569) +* Feature: Track redirect HTTP status codes [#1711](https://github.com/guzzle/guzzle/pull/1711) +* Improvement: Check handler type during construction [#1745](https://github.com/guzzle/guzzle/pull/1745) +* Improvement: Always include the Content-Length if there's a body [#1721](https://github.com/guzzle/guzzle/pull/1721) +* Feature: Added convenience method to access a cookie by name [#1318](https://github.com/guzzle/guzzle/pull/1318) +* Bug fix: Fill `CURLOPT_CAPATH` and `CURLOPT_CAINFO` properly [#1684](https://github.com/guzzle/guzzle/pull/1684) +* Improvement: Use `\GuzzleHttp\Promise\rejection_for` function instead of object init [#1827](https://github.com/guzzle/guzzle/pull/1827) + + ++ Minor code cleanups, documentation fixes and clarifications. + +## 6.2.3 - 2017-02-28 + +* Fix deprecations with guzzle/psr7 version 1.4 + +## 6.2.2 - 2016-10-08 + +* Allow to pass nullable Response to delay callable +* Only add scheme when host is present +* Fix drain case where content-length is the literal string zero +* Obfuscate in-URL credentials in exceptions + +## 6.2.1 - 2016-07-18 + +* Address HTTP_PROXY security vulnerability, CVE-2016-5385: + https://httpoxy.org/ +* Fixing timeout bug with StreamHandler: + https://github.com/guzzle/guzzle/pull/1488 +* Only read up to `Content-Length` in PHP StreamHandler to avoid timeouts when + a server does not honor `Connection: close`. +* Ignore URI fragment when sending requests. + +## 6.2.0 - 2016-03-21 + +* Feature: added `GuzzleHttp\json_encode` and `GuzzleHttp\json_decode`. + https://github.com/guzzle/guzzle/pull/1389 +* Bug fix: Fix sleep calculation when waiting for delayed requests. + https://github.com/guzzle/guzzle/pull/1324 +* Feature: More flexible history containers. + https://github.com/guzzle/guzzle/pull/1373 +* Bug fix: defer sink stream opening in StreamHandler. + https://github.com/guzzle/guzzle/pull/1377 +* Bug fix: do not attempt to escape cookie values. + https://github.com/guzzle/guzzle/pull/1406 +* Feature: report original content encoding and length on decoded responses. + https://github.com/guzzle/guzzle/pull/1409 +* Bug fix: rewind seekable request bodies before dispatching to cURL. + https://github.com/guzzle/guzzle/pull/1422 +* Bug fix: provide an empty string to `http_build_query` for HHVM workaround. + https://github.com/guzzle/guzzle/pull/1367 + +## 6.1.1 - 2015-11-22 + +* Bug fix: Proxy::wrapSync() now correctly proxies to the appropriate handler + https://github.com/guzzle/guzzle/commit/911bcbc8b434adce64e223a6d1d14e9a8f63e4e4 +* Feature: HandlerStack is now more generic. + https://github.com/guzzle/guzzle/commit/f2102941331cda544745eedd97fc8fd46e1ee33e +* Bug fix: setting verify to false in the StreamHandler now disables peer + verification. https://github.com/guzzle/guzzle/issues/1256 +* Feature: Middleware now uses an exception factory, including more error + context. https://github.com/guzzle/guzzle/pull/1282 +* Feature: better support for disabled functions. + https://github.com/guzzle/guzzle/pull/1287 +* Bug fix: fixed regression where MockHandler was not using `sink`. + https://github.com/guzzle/guzzle/pull/1292 + +## 6.1.0 - 2015-09-08 + +* Feature: Added the `on_stats` request option to provide access to transfer + statistics for requests. https://github.com/guzzle/guzzle/pull/1202 +* Feature: Added the ability to persist session cookies in CookieJars. + https://github.com/guzzle/guzzle/pull/1195 +* Feature: Some compatibility updates for Google APP Engine + https://github.com/guzzle/guzzle/pull/1216 +* Feature: Added support for NO_PROXY to prevent the use of a proxy based on + a simple set of rules. https://github.com/guzzle/guzzle/pull/1197 +* Feature: Cookies can now contain square brackets. + https://github.com/guzzle/guzzle/pull/1237 +* Bug fix: Now correctly parsing `=` inside of quotes in Cookies. + https://github.com/guzzle/guzzle/pull/1232 +* Bug fix: Cusotm cURL options now correctly override curl options of the + same name. https://github.com/guzzle/guzzle/pull/1221 +* Bug fix: Content-Type header is now added when using an explicitly provided + multipart body. https://github.com/guzzle/guzzle/pull/1218 +* Bug fix: Now ignoring Set-Cookie headers that have no name. +* Bug fix: Reason phrase is no longer cast to an int in some cases in the + cURL handler. https://github.com/guzzle/guzzle/pull/1187 +* Bug fix: Remove the Authorization header when redirecting if the Host + header changes. https://github.com/guzzle/guzzle/pull/1207 +* Bug fix: Cookie path matching fixes + https://github.com/guzzle/guzzle/issues/1129 +* Bug fix: Fixing the cURL `body_as_string` setting + https://github.com/guzzle/guzzle/pull/1201 +* Bug fix: quotes are no longer stripped when parsing cookies. + https://github.com/guzzle/guzzle/issues/1172 +* Bug fix: `form_params` and `query` now always uses the `&` separator. + https://github.com/guzzle/guzzle/pull/1163 +* Bug fix: Adding a Content-Length to PHP stream wrapper requests if not set. + https://github.com/guzzle/guzzle/pull/1189 + +## 6.0.2 - 2015-07-04 + +* Fixed a memory leak in the curl handlers in which references to callbacks + were not being removed by `curl_reset`. +* Cookies are now extracted properly before redirects. +* Cookies now allow more character ranges. +* Decoded Content-Encoding responses are now modified to correctly reflect + their state if the encoding was automatically removed by a handler. This + means that the `Content-Encoding` header may be removed an the + `Content-Length` modified to reflect the message size after removing the + encoding. +* Added a more explicit error message when trying to use `form_params` and + `multipart` in the same request. +* Several fixes for HHVM support. +* Functions are now conditionally required using an additional level of + indirection to help with global Composer installations. + +## 6.0.1 - 2015-05-27 + +* Fixed a bug with serializing the `query` request option where the `&` + separator was missing. +* Added a better error message for when `body` is provided as an array. Please + use `form_params` or `multipart` instead. +* Various doc fixes. + +## 6.0.0 - 2015-05-26 + +* See the UPGRADING.md document for more information. +* Added `multipart` and `form_params` request options. +* Added `synchronous` request option. +* Added the `on_headers` request option. +* Fixed `expect` handling. +* No longer adding default middlewares in the client ctor. These need to be + present on the provided handler in order to work. +* Requests are no longer initiated when sending async requests with the + CurlMultiHandler. This prevents unexpected recursion from requests completing + while ticking the cURL loop. +* Removed the semantics of setting `default` to `true`. This is no longer + required now that the cURL loop is not ticked for async requests. +* Added request and response logging middleware. +* No longer allowing self signed certificates when using the StreamHandler. +* Ensuring that `sink` is valid if saving to a file. +* Request exceptions now include a "handler context" which provides handler + specific contextual information. +* Added `GuzzleHttp\RequestOptions` to allow request options to be applied + using constants. +* `$maxHandles` has been removed from CurlMultiHandler. +* `MultipartPostBody` is now part of the `guzzlehttp/psr7` package. + +## 5.3.0 - 2015-05-19 + +* Mock now supports `save_to` +* Marked `AbstractRequestEvent::getTransaction()` as public. +* Fixed a bug in which multiple headers using different casing would overwrite + previous headers in the associative array. +* Added `Utils::getDefaultHandler()` +* Marked `GuzzleHttp\Client::getDefaultUserAgent` as deprecated. +* URL scheme is now always lowercased. + +## 6.0.0-beta.1 + +* Requires PHP >= 5.5 +* Updated to use PSR-7 + * Requires immutable messages, which basically means an event based system + owned by a request instance is no longer possible. + * Utilizing the [Guzzle PSR-7 package](https://github.com/guzzle/psr7). + * Removed the dependency on `guzzlehttp/streams`. These stream abstractions + are available in the `guzzlehttp/psr7` package under the `GuzzleHttp\Psr7` + namespace. +* Added middleware and handler system + * Replaced the Guzzle event and subscriber system with a middleware system. + * No longer depends on RingPHP, but rather places the HTTP handlers directly + in Guzzle, operating on PSR-7 messages. + * Retry logic is now encapsulated in `GuzzleHttp\Middleware::retry`, which + means the `guzzlehttp/retry-subscriber` is now obsolete. + * Mocking responses is now handled using `GuzzleHttp\Handler\MockHandler`. +* Asynchronous responses + * No longer supports the `future` request option to send an async request. + Instead, use one of the `*Async` methods of a client (e.g., `requestAsync`, + `getAsync`, etc.). + * Utilizing `GuzzleHttp\Promise` instead of React's promise library to avoid + recursion required by chaining and forwarding react promises. See + https://github.com/guzzle/promises + * Added `requestAsync` and `sendAsync` to send request asynchronously. + * Added magic methods for `getAsync()`, `postAsync()`, etc. to send requests + asynchronously. +* Request options + * POST and form updates + * Added the `form_fields` and `form_files` request options. + * Removed the `GuzzleHttp\Post` namespace. + * The `body` request option no longer accepts an array for POST requests. + * The `exceptions` request option has been deprecated in favor of the + `http_errors` request options. + * The `save_to` request option has been deprecated in favor of `sink` request + option. +* Clients no longer accept an array of URI template string and variables for + URI variables. You will need to expand URI templates before passing them + into a client constructor or request method. +* Client methods `get()`, `post()`, `put()`, `patch()`, `options()`, etc. are + now magic methods that will send synchronous requests. +* Replaced `Utils.php` with plain functions in `functions.php`. +* Removed `GuzzleHttp\Collection`. +* Removed `GuzzleHttp\BatchResults`. Batched pool results are now returned as + an array. +* Removed `GuzzleHttp\Query`. Query string handling is now handled using an + associative array passed into the `query` request option. The query string + is serialized using PHP's `http_build_query`. If you need more control, you + can pass the query string in as a string. +* `GuzzleHttp\QueryParser` has been replaced with the + `GuzzleHttp\Psr7\parse_query`. + +## 5.2.0 - 2015-01-27 + +* Added `AppliesHeadersInterface` to make applying headers to a request based + on the body more generic and not specific to `PostBodyInterface`. +* Reduced the number of stack frames needed to send requests. +* Nested futures are now resolved in the client rather than the RequestFsm +* Finishing state transitions is now handled in the RequestFsm rather than the + RingBridge. +* Added a guard in the Pool class to not use recursion for request retries. + +## 5.1.0 - 2014-12-19 + +* Pool class no longer uses recursion when a request is intercepted. +* The size of a Pool can now be dynamically adjusted using a callback. + See https://github.com/guzzle/guzzle/pull/943. +* Setting a request option to `null` when creating a request with a client will + ensure that the option is not set. This allows you to overwrite default + request options on a per-request basis. + See https://github.com/guzzle/guzzle/pull/937. +* Added the ability to limit which protocols are allowed for redirects by + specifying a `protocols` array in the `allow_redirects` request option. +* Nested futures due to retries are now resolved when waiting for synchronous + responses. See https://github.com/guzzle/guzzle/pull/947. +* `"0"` is now an allowed URI path. See + https://github.com/guzzle/guzzle/pull/935. +* `Query` no longer typehints on the `$query` argument in the constructor, + allowing for strings and arrays. +* Exceptions thrown in the `end` event are now correctly wrapped with Guzzle + specific exceptions if necessary. + +## 5.0.3 - 2014-11-03 + +This change updates query strings so that they are treated as un-encoded values +by default where the value represents an un-encoded value to send over the +wire. A Query object then encodes the value before sending over the wire. This +means that even value query string values (e.g., ":") are url encoded. This +makes the Query class match PHP's http_build_query function. However, if you +want to send requests over the wire using valid query string characters that do +not need to be encoded, then you can provide a string to Url::setQuery() and +pass true as the second argument to specify that the query string is a raw +string that should not be parsed or encoded (unless a call to getQuery() is +subsequently made, forcing the query-string to be converted into a Query +object). + +## 5.0.2 - 2014-10-30 + +* Added a trailing `\r\n` to multipart/form-data payloads. See + https://github.com/guzzle/guzzle/pull/871 +* Added a `GuzzleHttp\Pool::send()` convenience method to match the docs. +* Status codes are now returned as integers. See + https://github.com/guzzle/guzzle/issues/881 +* No longer overwriting an existing `application/x-www-form-urlencoded` header + when sending POST requests, allowing for customized headers. See + https://github.com/guzzle/guzzle/issues/877 +* Improved path URL serialization. + + * No longer double percent-encoding characters in the path or query string if + they are already encoded. + * Now properly encoding the supplied path to a URL object, instead of only + encoding ' ' and '?'. + * Note: This has been changed in 5.0.3 to now encode query string values by + default unless the `rawString` argument is provided when setting the query + string on a URL: Now allowing many more characters to be present in the + query string without being percent encoded. See http://tools.ietf.org/html/rfc3986#appendix-A + +## 5.0.1 - 2014-10-16 + +Bugfix release. + +* Fixed an issue where connection errors still returned response object in + error and end events event though the response is unusable. This has been + corrected so that a response is not returned in the `getResponse` method of + these events if the response did not complete. https://github.com/guzzle/guzzle/issues/867 +* Fixed an issue where transfer statistics were not being populated in the + RingBridge. https://github.com/guzzle/guzzle/issues/866 + +## 5.0.0 - 2014-10-12 + +Adding support for non-blocking responses and some minor API cleanup. + +### New Features + +* Added support for non-blocking responses based on `guzzlehttp/guzzle-ring`. +* Added a public API for creating a default HTTP adapter. +* Updated the redirect plugin to be non-blocking so that redirects are sent + concurrently. Other plugins like this can now be updated to be non-blocking. +* Added a "progress" event so that you can get upload and download progress + events. +* Added `GuzzleHttp\Pool` which implements FutureInterface and transfers + requests concurrently using a capped pool size as efficiently as possible. +* Added `hasListeners()` to EmitterInterface. +* Removed `GuzzleHttp\ClientInterface::sendAll` and marked + `GuzzleHttp\Client::sendAll` as deprecated (it's still there, just not the + recommended way). + +### Breaking changes + +The breaking changes in this release are relatively minor. The biggest thing to +look out for is that request and response objects no longer implement fluent +interfaces. + +* Removed the fluent interfaces (i.e., `return $this`) from requests, + responses, `GuzzleHttp\Collection`, `GuzzleHttp\Url`, + `GuzzleHttp\Query`, `GuzzleHttp\Post\PostBody`, and + `GuzzleHttp\Cookie\SetCookie`. This blog post provides a good outline of + why I did this: http://ocramius.github.io/blog/fluent-interfaces-are-evil/. + This also makes the Guzzle message interfaces compatible with the current + PSR-7 message proposal. +* Removed "functions.php", so that Guzzle is truly PSR-4 compliant. Except + for the HTTP request functions from function.php, these functions are now + implemented in `GuzzleHttp\Utils` using camelCase. `GuzzleHttp\json_decode` + moved to `GuzzleHttp\Utils::jsonDecode`. `GuzzleHttp\get_path` moved to + `GuzzleHttp\Utils::getPath`. `GuzzleHttp\set_path` moved to + `GuzzleHttp\Utils::setPath`. `GuzzleHttp\batch` should now be + `GuzzleHttp\Pool::batch`, which returns an `objectStorage`. Using functions.php + caused problems for many users: they aren't PSR-4 compliant, require an + explicit include, and needed an if-guard to ensure that the functions are not + declared multiple times. +* Rewrote adapter layer. + * Removing all classes from `GuzzleHttp\Adapter`, these are now + implemented as callables that are stored in `GuzzleHttp\Ring\Client`. + * Removed the concept of "parallel adapters". Sending requests serially or + concurrently is now handled using a single adapter. + * Moved `GuzzleHttp\Adapter\Transaction` to `GuzzleHttp\Transaction`. The + Transaction object now exposes the request, response, and client as public + properties. The getters and setters have been removed. +* Removed the "headers" event. This event was only useful for changing the + body a response once the headers of the response were known. You can implement + a similar behavior in a number of ways. One example might be to use a + FnStream that has access to the transaction being sent. For example, when the + first byte is written, you could check if the response headers match your + expectations, and if so, change the actual stream body that is being + written to. +* Removed the `asArray` parameter from + `GuzzleHttp\Message\MessageInterface::getHeader`. If you want to get a header + value as an array, then use the newly added `getHeaderAsArray()` method of + `MessageInterface`. This change makes the Guzzle interfaces compatible with + the PSR-7 interfaces. +* `GuzzleHttp\Message\MessageFactory` no longer allows subclasses to add + custom request options using double-dispatch (this was an implementation + detail). Instead, you should now provide an associative array to the + constructor which is a mapping of the request option name mapping to a + function that applies the option value to a request. +* Removed the concept of "throwImmediately" from exceptions and error events. + This control mechanism was used to stop a transfer of concurrent requests + from completing. This can now be handled by throwing the exception or by + cancelling a pool of requests or each outstanding future request individually. +* Updated to "GuzzleHttp\Streams" 3.0. + * `GuzzleHttp\Stream\StreamInterface::getContents()` no longer accepts a + `maxLen` parameter. This update makes the Guzzle streams project + compatible with the current PSR-7 proposal. + * `GuzzleHttp\Stream\Stream::__construct`, + `GuzzleHttp\Stream\Stream::factory`, and + `GuzzleHttp\Stream\Utils::create` no longer accept a size in the second + argument. They now accept an associative array of options, including the + "size" key and "metadata" key which can be used to provide custom metadata. + +## 4.2.2 - 2014-09-08 + +* Fixed a memory leak in the CurlAdapter when reusing cURL handles. +* No longer using `request_fulluri` in stream adapter proxies. +* Relative redirects are now based on the last response, not the first response. + +## 4.2.1 - 2014-08-19 + +* Ensuring that the StreamAdapter does not always add a Content-Type header +* Adding automated github releases with a phar and zip + +## 4.2.0 - 2014-08-17 + +* Now merging in default options using a case-insensitive comparison. + Closes https://github.com/guzzle/guzzle/issues/767 +* Added the ability to automatically decode `Content-Encoding` response bodies + using the `decode_content` request option. This is set to `true` by default + to decode the response body if it comes over the wire with a + `Content-Encoding`. Set this value to `false` to disable decoding the + response content, and pass a string to provide a request `Accept-Encoding` + header and turn on automatic response decoding. This feature now allows you + to pass an `Accept-Encoding` header in the headers of a request but still + disable automatic response decoding. + Closes https://github.com/guzzle/guzzle/issues/764 +* Added the ability to throw an exception immediately when transferring + requests in parallel. Closes https://github.com/guzzle/guzzle/issues/760 +* Updating guzzlehttp/streams dependency to ~2.1 +* No longer utilizing the now deprecated namespaced methods from the stream + package. + +## 4.1.8 - 2014-08-14 + +* Fixed an issue in the CurlFactory that caused setting the `stream=false` + request option to throw an exception. + See: https://github.com/guzzle/guzzle/issues/769 +* TransactionIterator now calls rewind on the inner iterator. + See: https://github.com/guzzle/guzzle/pull/765 +* You can now set the `Content-Type` header to `multipart/form-data` + when creating POST requests to force multipart bodies. + See https://github.com/guzzle/guzzle/issues/768 + +## 4.1.7 - 2014-08-07 + +* Fixed an error in the HistoryPlugin that caused the same request and response + to be logged multiple times when an HTTP protocol error occurs. +* Ensuring that cURL does not add a default Content-Type when no Content-Type + has been supplied by the user. This prevents the adapter layer from modifying + the request that is sent over the wire after any listeners may have already + put the request in a desired state (e.g., signed the request). +* Throwing an exception when you attempt to send requests that have the + "stream" set to true in parallel using the MultiAdapter. +* Only calling curl_multi_select when there are active cURL handles. This was + previously changed and caused performance problems on some systems due to PHP + always selecting until the maximum select timeout. +* Fixed a bug where multipart/form-data POST fields were not correctly + aggregated (e.g., values with "&"). + +## 4.1.6 - 2014-08-03 + +* Added helper methods to make it easier to represent messages as strings, + including getting the start line and getting headers as a string. + +## 4.1.5 - 2014-08-02 + +* Automatically retrying cURL "Connection died, retrying a fresh connect" + errors when possible. +* cURL implementation cleanup +* Allowing multiple event subscriber listeners to be registered per event by + passing an array of arrays of listener configuration. + +## 4.1.4 - 2014-07-22 + +* Fixed a bug that caused multi-part POST requests with more than one field to + serialize incorrectly. +* Paths can now be set to "0" +* `ResponseInterface::xml` now accepts a `libxml_options` option and added a + missing default argument that was required when parsing XML response bodies. +* A `save_to` stream is now created lazily, which means that files are not + created on disk unless a request succeeds. + +## 4.1.3 - 2014-07-15 + +* Various fixes to multipart/form-data POST uploads +* Wrapping function.php in an if-statement to ensure Guzzle can be used + globally and in a Composer install +* Fixed an issue with generating and merging in events to an event array +* POST headers are only applied before sending a request to allow you to change + the query aggregator used before uploading +* Added much more robust query string parsing +* Fixed various parsing and normalization issues with URLs +* Fixing an issue where multi-valued headers were not being utilized correctly + in the StreamAdapter + +## 4.1.2 - 2014-06-18 + +* Added support for sending payloads with GET requests + +## 4.1.1 - 2014-06-08 + +* Fixed an issue related to using custom message factory options in subclasses +* Fixed an issue with nested form fields in a multi-part POST +* Fixed an issue with using the `json` request option for POST requests +* Added `ToArrayInterface` to `GuzzleHttp\Cookie\CookieJar` + +## 4.1.0 - 2014-05-27 + +* Added a `json` request option to easily serialize JSON payloads. +* Added a `GuzzleHttp\json_decode()` wrapper to safely parse JSON. +* Added `setPort()` and `getPort()` to `GuzzleHttp\Message\RequestInterface`. +* Added the ability to provide an emitter to a client in the client constructor. +* Added the ability to persist a cookie session using $_SESSION. +* Added a trait that can be used to add event listeners to an iterator. +* Removed request method constants from RequestInterface. +* Fixed warning when invalid request start-lines are received. +* Updated MessageFactory to work with custom request option methods. +* Updated cacert bundle to latest build. + +4.0.2 (2014-04-16) +------------------ + +* Proxy requests using the StreamAdapter now properly use request_fulluri (#632) +* Added the ability to set scalars as POST fields (#628) + +## 4.0.1 - 2014-04-04 + +* The HTTP status code of a response is now set as the exception code of + RequestException objects. +* 303 redirects will now correctly switch from POST to GET requests. +* The default parallel adapter of a client now correctly uses the MultiAdapter. +* HasDataTrait now initializes the internal data array as an empty array so + that the toArray() method always returns an array. + +## 4.0.0 - 2014-03-29 + +* For more information on the 4.0 transition, see: + http://mtdowling.com/blog/2014/03/15/guzzle-4-rc/ +* For information on changes and upgrading, see: + https://github.com/guzzle/guzzle/blob/master/UPGRADING.md#3x-to-40 +* Added `GuzzleHttp\batch()` as a convenience function for sending requests in + parallel without needing to write asynchronous code. +* Restructured how events are added to `GuzzleHttp\ClientInterface::sendAll()`. + You can now pass a callable or an array of associative arrays where each + associative array contains the "fn", "priority", and "once" keys. + +## 4.0.0.rc-2 - 2014-03-25 + +* Removed `getConfig()` and `setConfig()` from clients to avoid confusion + around whether things like base_url, message_factory, etc. should be able to + be retrieved or modified. +* Added `getDefaultOption()` and `setDefaultOption()` to ClientInterface +* functions.php functions were renamed using snake_case to match PHP idioms +* Added support for `HTTP_PROXY`, `HTTPS_PROXY`, and + `GUZZLE_CURL_SELECT_TIMEOUT` environment variables +* Added the ability to specify custom `sendAll()` event priorities +* Added the ability to specify custom stream context options to the stream + adapter. +* Added a functions.php function for `get_path()` and `set_path()` +* CurlAdapter and MultiAdapter now use a callable to generate curl resources +* MockAdapter now properly reads a body and emits a `headers` event +* Updated Url class to check if a scheme and host are set before adding ":" + and "//". This allows empty Url (e.g., "") to be serialized as "". +* Parsing invalid XML no longer emits warnings +* Curl classes now properly throw AdapterExceptions +* Various performance optimizations +* Streams are created with the faster `Stream\create()` function +* Marked deprecation_proxy() as internal +* Test server is now a collection of static methods on a class + +## 4.0.0-rc.1 - 2014-03-15 + +* See https://github.com/guzzle/guzzle/blob/master/UPGRADING.md#3x-to-40 + +## 3.8.1 - 2014-01-28 + +* Bug: Always using GET requests when redirecting from a 303 response +* Bug: CURLOPT_SSL_VERIFYHOST is now correctly set to false when setting `$certificateAuthority` to false in + `Guzzle\Http\ClientInterface::setSslVerification()` +* Bug: RedirectPlugin now uses strict RFC 3986 compliance when combining a base URL with a relative URL +* Bug: The body of a request can now be set to `"0"` +* Sending PHP stream requests no longer forces `HTTP/1.0` +* Adding more information to ExceptionCollection exceptions so that users have more context, including a stack trace of + each sub-exception +* Updated the `$ref` attribute in service descriptions to merge over any existing parameters of a schema (rather than + clobbering everything). +* Merging URLs will now use the query string object from the relative URL (thus allowing custom query aggregators) +* Query strings are now parsed in a way that they do no convert empty keys with no value to have a dangling `=`. + For example `foo&bar=baz` is now correctly parsed and recognized as `foo&bar=baz` rather than `foo=&bar=baz`. +* Now properly escaping the regular expression delimiter when matching Cookie domains. +* Network access is now disabled when loading XML documents + +## 3.8.0 - 2013-12-05 + +* Added the ability to define a POST name for a file +* JSON response parsing now properly walks additionalProperties +* cURL error code 18 is now retried automatically in the BackoffPlugin +* Fixed a cURL error when URLs contain fragments +* Fixed an issue in the BackoffPlugin retry event where it was trying to access all exceptions as if they were + CurlExceptions +* CURLOPT_PROGRESS function fix for PHP 5.5 (69fcc1e) +* Added the ability for Guzzle to work with older versions of cURL that do not support `CURLOPT_TIMEOUT_MS` +* Fixed a bug that was encountered when parsing empty header parameters +* UriTemplate now has a `setRegex()` method to match the docs +* The `debug` request parameter now checks if it is truthy rather than if it exists +* Setting the `debug` request parameter to true shows verbose cURL output instead of using the LogPlugin +* Added the ability to combine URLs using strict RFC 3986 compliance +* Command objects can now return the validation errors encountered by the command +* Various fixes to cache revalidation (#437 and 29797e5) +* Various fixes to the AsyncPlugin +* Cleaned up build scripts + +## 3.7.4 - 2013-10-02 + +* Bug fix: 0 is now an allowed value in a description parameter that has a default value (#430) +* Bug fix: SchemaFormatter now returns an integer when formatting to a Unix timestamp + (see https://github.com/aws/aws-sdk-php/issues/147) +* Bug fix: Cleaned up and fixed URL dot segment removal to properly resolve internal dots +* Minimum PHP version is now properly specified as 5.3.3 (up from 5.3.2) (#420) +* Updated the bundled cacert.pem (#419) +* OauthPlugin now supports adding authentication to headers or query string (#425) + +## 3.7.3 - 2013-09-08 + +* Added the ability to get the exception associated with a request/command when using `MultiTransferException` and + `CommandTransferException`. +* Setting `additionalParameters` of a response to false is now honored when parsing responses with a service description +* Schemas are only injected into response models when explicitly configured. +* No longer guessing Content-Type based on the path of a request. Content-Type is now only guessed based on the path of + an EntityBody. +* Bug fix: ChunkedIterator can now properly chunk a \Traversable as well as an \Iterator. +* Bug fix: FilterIterator now relies on `\Iterator` instead of `\Traversable`. +* Bug fix: Gracefully handling malformed responses in RequestMediator::writeResponseBody() +* Bug fix: Replaced call to canCache with canCacheRequest in the CallbackCanCacheStrategy of the CachePlugin +* Bug fix: Visiting XML attributes first before visiting XML children when serializing requests +* Bug fix: Properly parsing headers that contain commas contained in quotes +* Bug fix: mimetype guessing based on a filename is now case-insensitive + +## 3.7.2 - 2013-08-02 + +* Bug fix: Properly URL encoding paths when using the PHP-only version of the UriTemplate expander + See https://github.com/guzzle/guzzle/issues/371 +* Bug fix: Cookie domains are now matched correctly according to RFC 6265 + See https://github.com/guzzle/guzzle/issues/377 +* Bug fix: GET parameters are now used when calculating an OAuth signature +* Bug fix: Fixed an issue with cache revalidation where the If-None-Match header was being double quoted +* `Guzzle\Common\AbstractHasDispatcher::dispatch()` now returns the event that was dispatched +* `Guzzle\Http\QueryString::factory()` now guesses the most appropriate query aggregator to used based on the input. + See https://github.com/guzzle/guzzle/issues/379 +* Added a way to add custom domain objects to service description parsing using the `operation.parse_class` event. See + https://github.com/guzzle/guzzle/pull/380 +* cURL multi cleanup and optimizations + +## 3.7.1 - 2013-07-05 + +* Bug fix: Setting default options on a client now works +* Bug fix: Setting options on HEAD requests now works. See #352 +* Bug fix: Moving stream factory before send event to before building the stream. See #353 +* Bug fix: Cookies no longer match on IP addresses per RFC 6265 +* Bug fix: Correctly parsing header parameters that are in `<>` and quotes +* Added `cert` and `ssl_key` as request options +* `Host` header can now diverge from the host part of a URL if the header is set manually +* `Guzzle\Service\Command\LocationVisitor\Request\XmlVisitor` was rewritten to change from using SimpleXML to XMLWriter +* OAuth parameters are only added via the plugin if they aren't already set +* Exceptions are now thrown when a URL cannot be parsed +* Returning `false` if `Guzzle\Http\EntityBody::getContentMd5()` fails +* Not setting a `Content-MD5` on a command if calculating the Content-MD5 fails via the CommandContentMd5Plugin + +## 3.7.0 - 2013-06-10 + +* See UPGRADING.md for more information on how to upgrade. +* Requests now support the ability to specify an array of $options when creating a request to more easily modify a + request. You can pass a 'request.options' configuration setting to a client to apply default request options to + every request created by a client (e.g. default query string variables, headers, curl options, etc.). +* Added a static facade class that allows you to use Guzzle with static methods and mount the class to `\Guzzle`. + See `Guzzle\Http\StaticClient::mount`. +* Added `command.request_options` to `Guzzle\Service\Command\AbstractCommand` to pass request options to requests + created by a command (e.g. custom headers, query string variables, timeout settings, etc.). +* Stream size in `Guzzle\Stream\PhpStreamRequestFactory` will now be set if Content-Length is returned in the + headers of a response +* Added `Guzzle\Common\Collection::setPath($path, $value)` to set a value into an array using a nested key + (e.g. `$collection->setPath('foo/baz/bar', 'test'); echo $collection['foo']['bar']['bar'];`) +* ServiceBuilders now support storing and retrieving arbitrary data +* CachePlugin can now purge all resources for a given URI +* CachePlugin can automatically purge matching cached items when a non-idempotent request is sent to a resource +* CachePlugin now uses the Vary header to determine if a resource is a cache hit +* `Guzzle\Http\Message\Response` now implements `\Serializable` +* Added `Guzzle\Cache\CacheAdapterFactory::fromCache()` to more easily create cache adapters +* `Guzzle\Service\ClientInterface::execute()` now accepts an array, single command, or Traversable +* Fixed a bug in `Guzzle\Http\Message\Header\Link::addLink()` +* Better handling of calculating the size of a stream in `Guzzle\Stream\Stream` using fstat() and caching the size +* `Guzzle\Common\Exception\ExceptionCollection` now creates a more readable exception message +* Fixing BC break: Added back the MonologLogAdapter implementation rather than extending from PsrLog so that older + Symfony users can still use the old version of Monolog. +* Fixing BC break: Added the implementation back in for `Guzzle\Http\Message\AbstractMessage::getTokenizedHeader()`. + Now triggering an E_USER_DEPRECATED warning when used. Use `$message->getHeader()->parseParams()`. +* Several performance improvements to `Guzzle\Common\Collection` +* Added an `$options` argument to the end of the following methods of `Guzzle\Http\ClientInterface`: + createRequest, head, delete, put, patch, post, options, prepareRequest +* Added an `$options` argument to the end of `Guzzle\Http\Message\Request\RequestFactoryInterface::createRequest()` +* Added an `applyOptions()` method to `Guzzle\Http\Message\Request\RequestFactoryInterface` +* Changed `Guzzle\Http\ClientInterface::get($uri = null, $headers = null, $body = null)` to + `Guzzle\Http\ClientInterface::get($uri = null, $headers = null, $options = array())`. You can still pass in a + resource, string, or EntityBody into the $options parameter to specify the download location of the response. +* Changed `Guzzle\Common\Collection::__construct($data)` to no longer accepts a null value for `$data` but a + default `array()` +* Added `Guzzle\Stream\StreamInterface::isRepeatable` +* Removed `Guzzle\Http\ClientInterface::setDefaultHeaders(). Use + $client->getConfig()->setPath('request.options/headers/{header_name}', 'value')`. or + $client->getConfig()->setPath('request.options/headers', array('header_name' => 'value'))`. +* Removed `Guzzle\Http\ClientInterface::getDefaultHeaders(). Use $client->getConfig()->getPath('request.options/headers')`. +* Removed `Guzzle\Http\ClientInterface::expandTemplate()` +* Removed `Guzzle\Http\ClientInterface::setRequestFactory()` +* Removed `Guzzle\Http\ClientInterface::getCurlMulti()` +* Removed `Guzzle\Http\Message\RequestInterface::canCache` +* Removed `Guzzle\Http\Message\RequestInterface::setIsRedirect` +* Removed `Guzzle\Http\Message\RequestInterface::isRedirect` +* Made `Guzzle\Http\Client::expandTemplate` and `getUriTemplate` protected methods. +* You can now enable E_USER_DEPRECATED warnings to see if you are using a deprecated method by setting + `Guzzle\Common\Version::$emitWarnings` to true. +* Marked `Guzzle\Http\Message\Request::isResponseBodyRepeatable()` as deprecated. Use + `$request->getResponseBody()->isRepeatable()` instead. +* Marked `Guzzle\Http\Message\Request::canCache()` as deprecated. Use + `Guzzle\Plugin\Cache\DefaultCanCacheStrategy->canCacheRequest()` instead. +* Marked `Guzzle\Http\Message\Request::canCache()` as deprecated. Use + `Guzzle\Plugin\Cache\DefaultCanCacheStrategy->canCacheRequest()` instead. +* Marked `Guzzle\Http\Message\Request::setIsRedirect()` as deprecated. Use the HistoryPlugin instead. +* Marked `Guzzle\Http\Message\Request::isRedirect()` as deprecated. Use the HistoryPlugin instead. +* Marked `Guzzle\Cache\CacheAdapterFactory::factory()` as deprecated +* Marked 'command.headers', 'command.response_body' and 'command.on_complete' as deprecated for AbstractCommand. + These will work through Guzzle 4.0 +* Marked 'request.params' for `Guzzle\Http\Client` as deprecated. Use [request.options][params]. +* Marked `Guzzle\Service\Client::enableMagicMethods()` as deprecated. Magic methods can no longer be disabled on a Guzzle\Service\Client. +* Marked `Guzzle\Service\Client::getDefaultHeaders()` as deprecated. Use $client->getConfig()->getPath('request.options/headers')`. +* Marked `Guzzle\Service\Client::setDefaultHeaders()` as deprecated. Use $client->getConfig()->setPath('request.options/headers/{header_name}', 'value')`. +* Marked `Guzzle\Parser\Url\UrlParser` as deprecated. Just use PHP's `parse_url()` and percent encode your UTF-8. +* Marked `Guzzle\Common\Collection::inject()` as deprecated. +* Marked `Guzzle\Plugin\CurlAuth\CurlAuthPlugin` as deprecated. Use `$client->getConfig()->setPath('request.options/auth', array('user', 'pass', 'Basic|Digest');` +* CacheKeyProviderInterface and DefaultCacheKeyProvider are no longer used. All of this logic is handled in a + CacheStorageInterface. These two objects and interface will be removed in a future version. +* Always setting X-cache headers on cached responses +* Default cache TTLs are now handled by the CacheStorageInterface of a CachePlugin +* `CacheStorageInterface::cache($key, Response $response, $ttl = null)` has changed to `cache(RequestInterface + $request, Response $response);` +* `CacheStorageInterface::fetch($key)` has changed to `fetch(RequestInterface $request);` +* `CacheStorageInterface::delete($key)` has changed to `delete(RequestInterface $request);` +* Added `CacheStorageInterface::purge($url)` +* `DefaultRevalidation::__construct(CacheKeyProviderInterface $cacheKey, CacheStorageInterface $cache, CachePlugin + $plugin)` has changed to `DefaultRevalidation::__construct(CacheStorageInterface $cache, + CanCacheStrategyInterface $canCache = null)` +* Added `RevalidationInterface::shouldRevalidate(RequestInterface $request, Response $response)` + +## 3.6.0 - 2013-05-29 + +* ServiceDescription now implements ToArrayInterface +* Added command.hidden_params to blacklist certain headers from being treated as additionalParameters +* Guzzle can now correctly parse incomplete URLs +* Mixed casing of headers are now forced to be a single consistent casing across all values for that header. +* Messages internally use a HeaderCollection object to delegate handling case-insensitive header resolution +* Removed the whole changedHeader() function system of messages because all header changes now go through addHeader(). +* Specific header implementations can be created for complex headers. When a message creates a header, it uses a + HeaderFactory which can map specific headers to specific header classes. There is now a Link header and + CacheControl header implementation. +* Removed from interface: Guzzle\Http\ClientInterface::setUriTemplate +* Removed from interface: Guzzle\Http\ClientInterface::setCurlMulti() +* Removed Guzzle\Http\Message\Request::receivedRequestHeader() and implemented this functionality in + Guzzle\Http\Curl\RequestMediator +* Removed the optional $asString parameter from MessageInterface::getHeader(). Just cast the header to a string. +* Removed the optional $tryChunkedTransfer option from Guzzle\Http\Message\EntityEnclosingRequestInterface +* Removed the $asObjects argument from Guzzle\Http\Message\MessageInterface::getHeaders() +* Removed Guzzle\Parser\ParserRegister::get(). Use getParser() +* Removed Guzzle\Parser\ParserRegister::set(). Use registerParser(). +* All response header helper functions return a string rather than mixing Header objects and strings inconsistently +* Removed cURL blacklist support. This is no longer necessary now that Expect, Accept, etc. are managed by Guzzle + directly via interfaces +* Removed the injecting of a request object onto a response object. The methods to get and set a request still exist + but are a no-op until removed. +* Most classes that used to require a `Guzzle\Service\Command\CommandInterface` typehint now request a + `Guzzle\Service\Command\ArrayCommandInterface`. +* Added `Guzzle\Http\Message\RequestInterface::startResponse()` to the RequestInterface to handle injecting a response + on a request while the request is still being transferred +* The ability to case-insensitively search for header values +* Guzzle\Http\Message\Header::hasExactHeader +* Guzzle\Http\Message\Header::raw. Use getAll() +* Deprecated cache control specific methods on Guzzle\Http\Message\AbstractMessage. Use the CacheControl header object + instead. +* `Guzzle\Service\Command\CommandInterface` now extends from ToArrayInterface and ArrayAccess +* Added the ability to cast Model objects to a string to view debug information. + +## 3.5.0 - 2013-05-13 + +* Bug: Fixed a regression so that request responses are parsed only once per oncomplete event rather than multiple times +* Bug: Better cleanup of one-time events across the board (when an event is meant to fire once, it will now remove + itself from the EventDispatcher) +* Bug: `Guzzle\Log\MessageFormatter` now properly writes "total_time" and "connect_time" values +* Bug: Cloning an EntityEnclosingRequest now clones the EntityBody too +* Bug: Fixed an undefined index error when parsing nested JSON responses with a sentAs parameter that reference a + non-existent key +* Bug: All __call() method arguments are now required (helps with mocking frameworks) +* Deprecating Response::getRequest() and now using a shallow clone of a request object to remove a circular reference + to help with refcount based garbage collection of resources created by sending a request +* Deprecating ZF1 cache and log adapters. These will be removed in the next major version. +* Deprecating `Response::getPreviousResponse()` (method signature still exists, but it's deprecated). Use the + HistoryPlugin for a history. +* Added a `responseBody` alias for the `response_body` location +* Refactored internals to no longer rely on Response::getRequest() +* HistoryPlugin can now be cast to a string +* HistoryPlugin now logs transactions rather than requests and responses to more accurately keep track of the requests + and responses that are sent over the wire +* Added `getEffectiveUrl()` and `getRedirectCount()` to Response objects + +## 3.4.3 - 2013-04-30 + +* Bug fix: Fixing bug introduced in 3.4.2 where redirect responses are duplicated on the final redirected response +* Added a check to re-extract the temp cacert bundle from the phar before sending each request + +## 3.4.2 - 2013-04-29 + +* Bug fix: Stream objects now work correctly with "a" and "a+" modes +* Bug fix: Removing `Transfer-Encoding: chunked` header when a Content-Length is present +* Bug fix: AsyncPlugin no longer forces HEAD requests +* Bug fix: DateTime timezones are now properly handled when using the service description schema formatter +* Bug fix: CachePlugin now properly handles stale-if-error directives when a request to the origin server fails +* Setting a response on a request will write to the custom request body from the response body if one is specified +* LogPlugin now writes to php://output when STDERR is undefined +* Added the ability to set multiple POST files for the same key in a single call +* application/x-www-form-urlencoded POSTs now use the utf-8 charset by default +* Added the ability to queue CurlExceptions to the MockPlugin +* Cleaned up how manual responses are queued on requests (removed "queued_response" and now using request.before_send) +* Configuration loading now allows remote files + +## 3.4.1 - 2013-04-16 + +* Large refactoring to how CurlMulti handles work. There is now a proxy that sits in front of a pool of CurlMulti + handles. This greatly simplifies the implementation, fixes a couple bugs, and provides a small performance boost. +* Exceptions are now properly grouped when sending requests in parallel +* Redirects are now properly aggregated when a multi transaction fails +* Redirects now set the response on the original object even in the event of a failure +* Bug fix: Model names are now properly set even when using $refs +* Added support for PHP 5.5's CurlFile to prevent warnings with the deprecated @ syntax +* Added support for oauth_callback in OAuth signatures +* Added support for oauth_verifier in OAuth signatures +* Added support to attempt to retrieve a command first literally, then ucfirst, the with inflection + +## 3.4.0 - 2013-04-11 + +* Bug fix: URLs are now resolved correctly based on http://tools.ietf.org/html/rfc3986#section-5.2. #289 +* Bug fix: Absolute URLs with a path in a service description will now properly override the base URL. #289 +* Bug fix: Parsing a query string with a single PHP array value will now result in an array. #263 +* Bug fix: Better normalization of the User-Agent header to prevent duplicate headers. #264. +* Bug fix: Added `number` type to service descriptions. +* Bug fix: empty parameters are removed from an OAuth signature +* Bug fix: Revalidating a cache entry prefers the Last-Modified over the Date header +* Bug fix: Fixed "array to string" error when validating a union of types in a service description +* Bug fix: Removed code that attempted to determine the size of a stream when data is written to the stream +* Bug fix: Not including an `oauth_token` if the value is null in the OauthPlugin. +* Bug fix: Now correctly aggregating successful requests and failed requests in CurlMulti when a redirect occurs. +* The new default CURLOPT_TIMEOUT setting has been increased to 150 seconds so that Guzzle works on poor connections. +* Added a feature to EntityEnclosingRequest::setBody() that will automatically set the Content-Type of the request if + the Content-Type can be determined based on the entity body or the path of the request. +* Added the ability to overwrite configuration settings in a client when grabbing a throwaway client from a builder. +* Added support for a PSR-3 LogAdapter. +* Added a `command.after_prepare` event +* Added `oauth_callback` parameter to the OauthPlugin +* Added the ability to create a custom stream class when using a stream factory +* Added a CachingEntityBody decorator +* Added support for `additionalParameters` in service descriptions to define how custom parameters are serialized. +* The bundled SSL certificate is now provided in the phar file and extracted when running Guzzle from a phar. +* You can now send any EntityEnclosingRequest with POST fields or POST files and cURL will handle creating bodies +* POST requests using a custom entity body are now treated exactly like PUT requests but with a custom cURL method. This + means that the redirect behavior of POST requests with custom bodies will not be the same as POST requests that use + POST fields or files (the latter is only used when emulating a form POST in the browser). +* Lots of cleanup to CurlHandle::factory and RequestFactory::createRequest + +## 3.3.1 - 2013-03-10 + +* Added the ability to create PHP streaming responses from HTTP requests +* Bug fix: Running any filters when parsing response headers with service descriptions +* Bug fix: OauthPlugin fixes to allow for multi-dimensional array signing, and sorting parameters before signing +* Bug fix: Removed the adding of default empty arrays and false Booleans to responses in order to be consistent across + response location visitors. +* Bug fix: Removed the possibility of creating configuration files with circular dependencies +* RequestFactory::create() now uses the key of a POST file when setting the POST file name +* Added xmlAllowEmpty to serialize an XML body even if no XML specific parameters are set + +## 3.3.0 - 2013-03-03 + +* A large number of performance optimizations have been made +* Bug fix: Added 'wb' as a valid write mode for streams +* Bug fix: `Guzzle\Http\Message\Response::json()` now allows scalar values to be returned +* Bug fix: Fixed bug in `Guzzle\Http\Message\Response` where wrapping quotes were stripped from `getEtag()` +* BC: Removed `Guzzle\Http\Utils` class +* BC: Setting a service description on a client will no longer modify the client's command factories. +* BC: Emitting IO events from a RequestMediator is now a parameter that must be set in a request's curl options using + the 'emit_io' key. This was previously set under a request's parameters using 'curl.emit_io' +* BC: `Guzzle\Stream\Stream::getWrapper()` and `Guzzle\Stream\Stream::getSteamType()` are no longer converted to + lowercase +* Operation parameter objects are now lazy loaded internally +* Added ErrorResponsePlugin that can throw errors for responses defined in service description operations' errorResponses +* Added support for instantiating responseType=class responseClass classes. Classes must implement + `Guzzle\Service\Command\ResponseClassInterface` +* Added support for additionalProperties for top-level parameters in responseType=model responseClasses. These + additional properties also support locations and can be used to parse JSON responses where the outermost part of the + JSON is an array +* Added support for nested renaming of JSON models (rename sentAs to name) +* CachePlugin + * Added support for stale-if-error so that the CachePlugin can now serve stale content from the cache on error + * Debug headers can now added to cached response in the CachePlugin + +## 3.2.0 - 2013-02-14 + +* CurlMulti is no longer reused globally. A new multi object is created per-client. This helps to isolate clients. +* URLs with no path no longer contain a "/" by default +* Guzzle\Http\QueryString does no longer manages the leading "?". This is now handled in Guzzle\Http\Url. +* BadResponseException no longer includes the full request and response message +* Adding setData() to Guzzle\Service\Description\ServiceDescriptionInterface +* Adding getResponseBody() to Guzzle\Http\Message\RequestInterface +* Various updates to classes to use ServiceDescriptionInterface type hints rather than ServiceDescription +* Header values can now be normalized into distinct values when multiple headers are combined with a comma separated list +* xmlEncoding can now be customized for the XML declaration of a XML service description operation +* Guzzle\Http\QueryString now uses Guzzle\Http\QueryAggregator\QueryAggregatorInterface objects to add custom value + aggregation and no longer uses callbacks +* The URL encoding implementation of Guzzle\Http\QueryString can now be customized +* Bug fix: Filters were not always invoked for array service description parameters +* Bug fix: Redirects now use a target response body rather than a temporary response body +* Bug fix: The default exponential backoff BackoffPlugin was not giving when the request threshold was exceeded +* Bug fix: Guzzle now takes the first found value when grabbing Cache-Control directives + +## 3.1.2 - 2013-01-27 + +* Refactored how operation responses are parsed. Visitors now include a before() method responsible for parsing the + response body. For example, the XmlVisitor now parses the XML response into an array in the before() method. +* Fixed an issue where cURL would not automatically decompress responses when the Accept-Encoding header was sent +* CURLOPT_SSL_VERIFYHOST is never set to 1 because it is deprecated (see 5e0ff2ef20f839e19d1eeb298f90ba3598784444) +* Fixed a bug where redirect responses were not chained correctly using getPreviousResponse() +* Setting default headers on a client after setting the user-agent will not erase the user-agent setting + +## 3.1.1 - 2013-01-20 + +* Adding wildcard support to Guzzle\Common\Collection::getPath() +* Adding alias support to ServiceBuilder configs +* Adding Guzzle\Service\Resource\CompositeResourceIteratorFactory and cleaning up factory interface + +## 3.1.0 - 2013-01-12 + +* BC: CurlException now extends from RequestException rather than BadResponseException +* BC: Renamed Guzzle\Plugin\Cache\CanCacheStrategyInterface::canCache() to canCacheRequest() and added CanCacheResponse() +* Added getData to ServiceDescriptionInterface +* Added context array to RequestInterface::setState() +* Bug: Removing hard dependency on the BackoffPlugin from Guzzle\Http +* Bug: Adding required content-type when JSON request visitor adds JSON to a command +* Bug: Fixing the serialization of a service description with custom data +* Made it easier to deal with exceptions thrown when transferring commands or requests in parallel by providing + an array of successful and failed responses +* Moved getPath from Guzzle\Service\Resource\Model to Guzzle\Common\Collection +* Added Guzzle\Http\IoEmittingEntityBody +* Moved command filtration from validators to location visitors +* Added `extends` attributes to service description parameters +* Added getModels to ServiceDescriptionInterface + +## 3.0.7 - 2012-12-19 + +* Fixing phar detection when forcing a cacert to system if null or true +* Allowing filename to be passed to `Guzzle\Http\Message\Request::setResponseBody()` +* Cleaning up `Guzzle\Common\Collection::inject` method +* Adding a response_body location to service descriptions + +## 3.0.6 - 2012-12-09 + +* CurlMulti performance improvements +* Adding setErrorResponses() to Operation +* composer.json tweaks + +## 3.0.5 - 2012-11-18 + +* Bug: Fixing an infinite recursion bug caused from revalidating with the CachePlugin +* Bug: Response body can now be a string containing "0" +* Bug: Using Guzzle inside of a phar uses system by default but now allows for a custom cacert +* Bug: QueryString::fromString now properly parses query string parameters that contain equal signs +* Added support for XML attributes in service description responses +* DefaultRequestSerializer now supports array URI parameter values for URI template expansion +* Added better mimetype guessing to requests and post files + +## 3.0.4 - 2012-11-11 + +* Bug: Fixed a bug when adding multiple cookies to a request to use the correct glue value +* Bug: Cookies can now be added that have a name, domain, or value set to "0" +* Bug: Using the system cacert bundle when using the Phar +* Added json and xml methods to Response to make it easier to parse JSON and XML response data into data structures +* Enhanced cookie jar de-duplication +* Added the ability to enable strict cookie jars that throw exceptions when invalid cookies are added +* Added setStream to StreamInterface to actually make it possible to implement custom rewind behavior for entity bodies +* Added the ability to create any sort of hash for a stream rather than just an MD5 hash + +## 3.0.3 - 2012-11-04 + +* Implementing redirects in PHP rather than cURL +* Added PECL URI template extension and using as default parser if available +* Bug: Fixed Content-Length parsing of Response factory +* Adding rewind() method to entity bodies and streams. Allows for custom rewinding of non-repeatable streams. +* Adding ToArrayInterface throughout library +* Fixing OauthPlugin to create unique nonce values per request + +## 3.0.2 - 2012-10-25 + +* Magic methods are enabled by default on clients +* Magic methods return the result of a command +* Service clients no longer require a base_url option in the factory +* Bug: Fixed an issue with URI templates where null template variables were being expanded + +## 3.0.1 - 2012-10-22 + +* Models can now be used like regular collection objects by calling filter, map, etc. +* Models no longer require a Parameter structure or initial data in the constructor +* Added a custom AppendIterator to get around a PHP bug with the `\AppendIterator` + +## 3.0.0 - 2012-10-15 + +* Rewrote service description format to be based on Swagger + * Now based on JSON schema + * Added nested input structures and nested response models + * Support for JSON and XML input and output models + * Renamed `commands` to `operations` + * Removed dot class notation + * Removed custom types +* Broke the project into smaller top-level namespaces to be more component friendly +* Removed support for XML configs and descriptions. Use arrays or JSON files. +* Removed the Validation component and Inspector +* Moved all cookie code to Guzzle\Plugin\Cookie +* Magic methods on a Guzzle\Service\Client now return the command un-executed. +* Calling getResult() or getResponse() on a command will lazily execute the command if needed. +* Now shipping with cURL's CA certs and using it by default +* Added previousResponse() method to response objects +* No longer sending Accept and Accept-Encoding headers on every request +* Only sending an Expect header by default when a payload is greater than 1MB +* Added/moved client options: + * curl.blacklist to curl.option.blacklist + * Added ssl.certificate_authority +* Added a Guzzle\Iterator component +* Moved plugins from Guzzle\Http\Plugin to Guzzle\Plugin +* Added a more robust backoff retry strategy (replaced the ExponentialBackoffPlugin) +* Added a more robust caching plugin +* Added setBody to response objects +* Updating LogPlugin to use a more flexible MessageFormatter +* Added a completely revamped build process +* Cleaning up Collection class and removing default values from the get method +* Fixed ZF2 cache adapters + +## 2.8.8 - 2012-10-15 + +* Bug: Fixed a cookie issue that caused dot prefixed domains to not match where popular browsers did + +## 2.8.7 - 2012-09-30 + +* Bug: Fixed config file aliases for JSON includes +* Bug: Fixed cookie bug on a request object by using CookieParser to parse cookies on requests +* Bug: Removing the path to a file when sending a Content-Disposition header on a POST upload +* Bug: Hardening request and response parsing to account for missing parts +* Bug: Fixed PEAR packaging +* Bug: Fixed Request::getInfo +* Bug: Fixed cases where CURLM_CALL_MULTI_PERFORM return codes were causing curl transactions to fail +* Adding the ability for the namespace Iterator factory to look in multiple directories +* Added more getters/setters/removers from service descriptions +* Added the ability to remove POST fields from OAuth signatures +* OAuth plugin now supports 2-legged OAuth + +## 2.8.6 - 2012-09-05 + +* Added the ability to modify and build service descriptions +* Added the use of visitors to apply parameters to locations in service descriptions using the dynamic command +* Added a `json` parameter location +* Now allowing dot notation for classes in the CacheAdapterFactory +* Using the union of two arrays rather than an array_merge when extending service builder services and service params +* Ensuring that a service is a string before doing strpos() checks on it when substituting services for references + in service builder config files. +* Services defined in two different config files that include one another will by default replace the previously + defined service, but you can now create services that extend themselves and merge their settings over the previous +* The JsonLoader now supports aliasing filenames with different filenames. This allows you to alias something like + '_default' with a default JSON configuration file. + +## 2.8.5 - 2012-08-29 + +* Bug: Suppressed empty arrays from URI templates +* Bug: Added the missing $options argument from ServiceDescription::factory to enable caching +* Added support for HTTP responses that do not contain a reason phrase in the start-line +* AbstractCommand commands are now invokable +* Added a way to get the data used when signing an Oauth request before a request is sent + +## 2.8.4 - 2012-08-15 + +* Bug: Custom delay time calculations are no longer ignored in the ExponentialBackoffPlugin +* Added the ability to transfer entity bodies as a string rather than streamed. This gets around curl error 65. Set `body_as_string` in a request's curl options to enable. +* Added a StreamInterface, EntityBodyInterface, and added ftell() to Guzzle\Common\Stream +* Added an AbstractEntityBodyDecorator and a ReadLimitEntityBody decorator to transfer only a subset of a decorated stream +* Stream and EntityBody objects will now return the file position to the previous position after a read required operation (e.g. getContentMd5()) +* Added additional response status codes +* Removed SSL information from the default User-Agent header +* DELETE requests can now send an entity body +* Added an EventDispatcher to the ExponentialBackoffPlugin and added an ExponentialBackoffLogger to log backoff retries +* Added the ability of the MockPlugin to consume mocked request bodies +* LogPlugin now exposes request and response objects in the extras array + +## 2.8.3 - 2012-07-30 + +* Bug: Fixed a case where empty POST requests were sent as GET requests +* Bug: Fixed a bug in ExponentialBackoffPlugin that caused fatal errors when retrying an EntityEnclosingRequest that does not have a body +* Bug: Setting the response body of a request to null after completing a request, not when setting the state of a request to new +* Added multiple inheritance to service description commands +* Added an ApiCommandInterface and added `getParamNames()` and `hasParam()` +* Removed the default 2mb size cutoff from the Md5ValidatorPlugin so that it now defaults to validating everything +* Changed CurlMulti::perform to pass a smaller timeout to CurlMulti::executeHandles + +## 2.8.2 - 2012-07-24 + +* Bug: Query string values set to 0 are no longer dropped from the query string +* Bug: A Collection object is no longer created each time a call is made to `Guzzle\Service\Command\AbstractCommand::getRequestHeaders()` +* Bug: `+` is now treated as an encoded space when parsing query strings +* QueryString and Collection performance improvements +* Allowing dot notation for class paths in filters attribute of a service descriptions + +## 2.8.1 - 2012-07-16 + +* Loosening Event Dispatcher dependency +* POST redirects can now be customized using CURLOPT_POSTREDIR + +## 2.8.0 - 2012-07-15 + +* BC: Guzzle\Http\Query + * Query strings with empty variables will always show an equal sign unless the variable is set to QueryString::BLANK (e.g. ?acl= vs ?acl) + * Changed isEncodingValues() and isEncodingFields() to isUrlEncoding() + * Changed setEncodeValues(bool) and setEncodeFields(bool) to useUrlEncoding(bool) + * Changed the aggregation functions of QueryString to be static methods + * Can now use fromString() with querystrings that have a leading ? +* cURL configuration values can be specified in service descriptions using `curl.` prefixed parameters +* Content-Length is set to 0 before emitting the request.before_send event when sending an empty request body +* Cookies are no longer URL decoded by default +* Bug: URI template variables set to null are no longer expanded + +## 2.7.2 - 2012-07-02 + +* BC: Moving things to get ready for subtree splits. Moving Inflection into Common. Moving Guzzle\Http\Parser to Guzzle\Parser. +* BC: Removing Guzzle\Common\Batch\Batch::count() and replacing it with isEmpty() +* CachePlugin now allows for a custom request parameter function to check if a request can be cached +* Bug fix: CachePlugin now only caches GET and HEAD requests by default +* Bug fix: Using header glue when transferring headers over the wire +* Allowing deeply nested arrays for composite variables in URI templates +* Batch divisors can now return iterators or arrays + +## 2.7.1 - 2012-06-26 + +* Minor patch to update version number in UA string +* Updating build process + +## 2.7.0 - 2012-06-25 + +* BC: Inflection classes moved to Guzzle\Inflection. No longer static methods. Can now inject custom inflectors into classes. +* BC: Removed magic setX methods from commands +* BC: Magic methods mapped to service description commands are now inflected in the command factory rather than the client __call() method +* Verbose cURL options are no longer enabled by default. Set curl.debug to true on a client to enable. +* Bug: Now allowing colons in a response start-line (e.g. HTTP/1.1 503 Service Unavailable: Back-end server is at capacity) +* Guzzle\Service\Resource\ResourceIteratorApplyBatched now internally uses the Guzzle\Common\Batch namespace +* Added Guzzle\Service\Plugin namespace and a PluginCollectionPlugin +* Added the ability to set POST fields and files in a service description +* Guzzle\Http\EntityBody::factory() now accepts objects with a __toString() method +* Adding a command.before_prepare event to clients +* Added BatchClosureTransfer and BatchClosureDivisor +* BatchTransferException now includes references to the batch divisor and transfer strategies +* Fixed some tests so that they pass more reliably +* Added Guzzle\Common\Log\ArrayLogAdapter + +## 2.6.6 - 2012-06-10 + +* BC: Removing Guzzle\Http\Plugin\BatchQueuePlugin +* BC: Removing Guzzle\Service\Command\CommandSet +* Adding generic batching system (replaces the batch queue plugin and command set) +* Updating ZF cache and log adapters and now using ZF's composer repository +* Bug: Setting the name of each ApiParam when creating through an ApiCommand +* Adding result_type, result_doc, deprecated, and doc_url to service descriptions +* Bug: Changed the default cookie header casing back to 'Cookie' + +## 2.6.5 - 2012-06-03 + +* BC: Renaming Guzzle\Http\Message\RequestInterface::getResourceUri() to getResource() +* BC: Removing unused AUTH_BASIC and AUTH_DIGEST constants from +* BC: Guzzle\Http\Cookie is now used to manage Set-Cookie data, not Cookie data +* BC: Renaming methods in the CookieJarInterface +* Moving almost all cookie logic out of the CookiePlugin and into the Cookie or CookieJar implementations +* Making the default glue for HTTP headers ';' instead of ',' +* Adding a removeValue to Guzzle\Http\Message\Header +* Adding getCookies() to request interface. +* Making it easier to add event subscribers to HasDispatcherInterface classes. Can now directly call addSubscriber() + +## 2.6.4 - 2012-05-30 + +* BC: Cleaning up how POST files are stored in EntityEnclosingRequest objects. Adding PostFile class. +* BC: Moving ApiCommand specific functionality from the Inspector and on to the ApiCommand +* Bug: Fixing magic method command calls on clients +* Bug: Email constraint only validates strings +* Bug: Aggregate POST fields when POST files are present in curl handle +* Bug: Fixing default User-Agent header +* Bug: Only appending or prepending parameters in commands if they are specified +* Bug: Not requiring response reason phrases or status codes to match a predefined list of codes +* Allowing the use of dot notation for class namespaces when using instance_of constraint +* Added any_match validation constraint +* Added an AsyncPlugin +* Passing request object to the calculateWait method of the ExponentialBackoffPlugin +* Allowing the result of a command object to be changed +* Parsing location and type sub values when instantiating a service description rather than over and over at runtime + +## 2.6.3 - 2012-05-23 + +* [BC] Guzzle\Common\FromConfigInterface no longer requires any config options. +* [BC] Refactoring how POST files are stored on an EntityEnclosingRequest. They are now separate from POST fields. +* You can now use an array of data when creating PUT request bodies in the request factory. +* Removing the requirement that HTTPS requests needed a Cache-Control: public directive to be cacheable. +* [Http] Adding support for Content-Type in multipart POST uploads per upload +* [Http] Added support for uploading multiple files using the same name (foo[0], foo[1]) +* Adding more POST data operations for easier manipulation of POST data. +* You can now set empty POST fields. +* The body of a request is only shown on EntityEnclosingRequest objects that do not use POST files. +* Split the Guzzle\Service\Inspector::validateConfig method into two methods. One to initialize when a command is created, and one to validate. +* CS updates + +## 2.6.2 - 2012-05-19 + +* [Http] Better handling of nested scope requests in CurlMulti. Requests are now always prepares in the send() method rather than the addRequest() method. + +## 2.6.1 - 2012-05-19 + +* [BC] Removing 'path' support in service descriptions. Use 'uri'. +* [BC] Guzzle\Service\Inspector::parseDocBlock is now protected. Adding getApiParamsForClass() with cache. +* [BC] Removing Guzzle\Common\NullObject. Use https://github.com/mtdowling/NullObject if you need it. +* [BC] Removing Guzzle\Common\XmlElement. +* All commands, both dynamic and concrete, have ApiCommand objects. +* Adding a fix for CurlMulti so that if all of the connections encounter some sort of curl error, then the loop exits. +* Adding checks to EntityEnclosingRequest so that empty POST files and fields are ignored. +* Making the method signature of Guzzle\Service\Builder\ServiceBuilder::factory more flexible. + +## 2.6.0 - 2012-05-15 + +* [BC] Moving Guzzle\Service\Builder to Guzzle\Service\Builder\ServiceBuilder +* [BC] Executing a Command returns the result of the command rather than the command +* [BC] Moving all HTTP parsing logic to Guzzle\Http\Parsers. Allows for faster C implementations if needed. +* [BC] Changing the Guzzle\Http\Message\Response::setProtocol() method to accept a protocol and version in separate args. +* [BC] Moving ResourceIterator* to Guzzle\Service\Resource +* [BC] Completely refactored ResourceIterators to iterate over a cloned command object +* [BC] Moved Guzzle\Http\UriTemplate to Guzzle\Http\Parser\UriTemplate\UriTemplate +* [BC] Guzzle\Guzzle is now deprecated +* Moving Guzzle\Common\Guzzle::inject to Guzzle\Common\Collection::inject +* Adding Guzzle\Version class to give version information about Guzzle +* Adding Guzzle\Http\Utils class to provide getDefaultUserAgent() and getHttpDate() +* Adding Guzzle\Curl\CurlVersion to manage caching curl_version() data +* ServiceDescription and ServiceBuilder are now cacheable using similar configs +* Changing the format of XML and JSON service builder configs. Backwards compatible. +* Cleaned up Cookie parsing +* Trimming the default Guzzle User-Agent header +* Adding a setOnComplete() method to Commands that is called when a command completes +* Keeping track of requests that were mocked in the MockPlugin +* Fixed a caching bug in the CacheAdapterFactory +* Inspector objects can be injected into a Command object +* Refactoring a lot of code and tests to be case insensitive when dealing with headers +* Adding Guzzle\Http\Message\HeaderComparison for easy comparison of HTTP headers using a DSL +* Adding the ability to set global option overrides to service builder configs +* Adding the ability to include other service builder config files from within XML and JSON files +* Moving the parseQuery method out of Url and on to QueryString::fromString() as a static factory method. + +## 2.5.0 - 2012-05-08 + +* Major performance improvements +* [BC] Simplifying Guzzle\Common\Collection. Please check to see if you are using features that are now deprecated. +* [BC] Using a custom validation system that allows a flyweight implementation for much faster validation. No longer using Symfony2 Validation component. +* [BC] No longer supporting "{{ }}" for injecting into command or UriTemplates. Use "{}" +* Added the ability to passed parameters to all requests created by a client +* Added callback functionality to the ExponentialBackoffPlugin +* Using microtime in ExponentialBackoffPlugin to allow more granular backoff strategies. +* Rewinding request stream bodies when retrying requests +* Exception is thrown when JSON response body cannot be decoded +* Added configurable magic method calls to clients and commands. This is off by default. +* Fixed a defect that added a hash to every parsed URL part +* Fixed duplicate none generation for OauthPlugin. +* Emitting an event each time a client is generated by a ServiceBuilder +* Using an ApiParams object instead of a Collection for parameters of an ApiCommand +* cache.* request parameters should be renamed to params.cache.* +* Added the ability to set arbitrary curl options on requests (disable_wire, progress, etc.). See CurlHandle. +* Added the ability to disable type validation of service descriptions +* ServiceDescriptions and ServiceBuilders are now Serializable diff --git a/vendor/guzzlehttp/guzzle/Dockerfile b/vendor/guzzlehttp/guzzle/Dockerfile new file mode 100644 index 000000000..f6a095230 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/Dockerfile @@ -0,0 +1,18 @@ +FROM composer:latest as setup + +RUN mkdir /guzzle + +WORKDIR /guzzle + +RUN set -xe \ + && composer init --name=guzzlehttp/test --description="Simple project for testing Guzzle scripts" --author="Márk Sági-Kazár " --no-interaction \ + && composer require guzzlehttp/guzzle + + +FROM php:7.3 + +RUN mkdir /guzzle + +WORKDIR /guzzle + +COPY --from=setup /guzzle /guzzle diff --git a/vendor/guzzlehttp/guzzle/LICENSE b/vendor/guzzlehttp/guzzle/LICENSE new file mode 100644 index 000000000..50a177b03 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/LICENSE @@ -0,0 +1,19 @@ +Copyright (c) 2011-2018 Michael Dowling, https://github.com/mtdowling + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/guzzlehttp/guzzle/README.md b/vendor/guzzlehttp/guzzle/README.md new file mode 100644 index 000000000..5fdb6c5f4 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/README.md @@ -0,0 +1,90 @@ +Guzzle, PHP HTTP client +======================= + +[![Latest Version](https://img.shields.io/github/release/guzzle/guzzle.svg?style=flat-square)](https://github.com/guzzle/guzzle/releases) +[![Build Status](https://img.shields.io/travis/guzzle/guzzle.svg?style=flat-square)](https://travis-ci.org/guzzle/guzzle) +[![Total Downloads](https://img.shields.io/packagist/dt/guzzlehttp/guzzle.svg?style=flat-square)](https://packagist.org/packages/guzzlehttp/guzzle) + +Guzzle is a PHP HTTP client that makes it easy to send HTTP requests and +trivial to integrate with web services. + +- Simple interface for building query strings, POST requests, streaming large + uploads, streaming large downloads, using HTTP cookies, uploading JSON data, + etc... +- Can send both synchronous and asynchronous requests using the same interface. +- Uses PSR-7 interfaces for requests, responses, and streams. This allows you + to utilize other PSR-7 compatible libraries with Guzzle. +- Abstracts away the underlying HTTP transport, allowing you to write + environment and transport agnostic code; i.e., no hard dependency on cURL, + PHP streams, sockets, or non-blocking event loops. +- Middleware system allows you to augment and compose client behavior. + +```php +$client = new \GuzzleHttp\Client(); +$response = $client->request('GET', 'https://api.github.com/repos/guzzle/guzzle'); + +echo $response->getStatusCode(); # 200 +echo $response->getHeaderLine('content-type'); # 'application/json; charset=utf8' +echo $response->getBody(); # '{"id": 1420053, "name": "guzzle", ...}' + +# Send an asynchronous request. +$request = new \GuzzleHttp\Psr7\Request('GET', 'http://httpbin.org'); +$promise = $client->sendAsync($request)->then(function ($response) { + echo 'I completed! ' . $response->getBody(); +}); + +$promise->wait(); +``` + +## Help and docs + +- [Documentation](http://guzzlephp.org/) +- [Stack Overflow](http://stackoverflow.com/questions/tagged/guzzle) +- [Gitter](https://gitter.im/guzzle/guzzle) + + +## Installing Guzzle + +The recommended way to install Guzzle is through +[Composer](http://getcomposer.org). + +```bash +# Install Composer +curl -sS https://getcomposer.org/installer | php +``` + +Next, run the Composer command to install the latest stable version of Guzzle: + +```bash +composer require guzzlehttp/guzzle +``` + +After installing, you need to require Composer's autoloader: + +```php +require 'vendor/autoload.php'; +``` + +You can then later update Guzzle using composer: + + ```bash +composer update + ``` + + +## Version Guidance + +| Version | Status | Packagist | Namespace | Repo | Docs | PSR-7 | PHP Version | +|---------|------------|---------------------|--------------|---------------------|---------------------|-------|-------------| +| 3.x | EOL | `guzzle/guzzle` | `Guzzle` | [v3][guzzle-3-repo] | [v3][guzzle-3-docs] | No | >= 5.3.3 | +| 4.x | EOL | `guzzlehttp/guzzle` | `GuzzleHttp` | [v4][guzzle-4-repo] | N/A | No | >= 5.4 | +| 5.x | EOL | `guzzlehttp/guzzle` | `GuzzleHttp` | [v5][guzzle-5-repo] | [v5][guzzle-5-docs] | No | >= 5.4 | +| 6.x | Latest | `guzzlehttp/guzzle` | `GuzzleHttp` | [v6][guzzle-6-repo] | [v6][guzzle-6-docs] | Yes | >= 5.5 | + +[guzzle-3-repo]: https://github.com/guzzle/guzzle3 +[guzzle-4-repo]: https://github.com/guzzle/guzzle/tree/4.x +[guzzle-5-repo]: https://github.com/guzzle/guzzle/tree/5.3 +[guzzle-6-repo]: https://github.com/guzzle/guzzle +[guzzle-3-docs]: http://guzzle3.readthedocs.org +[guzzle-5-docs]: http://guzzle.readthedocs.org/en/5.3/ +[guzzle-6-docs]: http://guzzle.readthedocs.org/en/latest/ diff --git a/vendor/guzzlehttp/guzzle/UPGRADING.md b/vendor/guzzlehttp/guzzle/UPGRADING.md new file mode 100644 index 000000000..91d1dcc99 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/UPGRADING.md @@ -0,0 +1,1203 @@ +Guzzle Upgrade Guide +==================== + +5.0 to 6.0 +---------- + +Guzzle now uses [PSR-7](http://www.php-fig.org/psr/psr-7/) for HTTP messages. +Due to the fact that these messages are immutable, this prompted a refactoring +of Guzzle to use a middleware based system rather than an event system. Any +HTTP message interaction (e.g., `GuzzleHttp\Message\Request`) need to be +updated to work with the new immutable PSR-7 request and response objects. Any +event listeners or subscribers need to be updated to become middleware +functions that wrap handlers (or are injected into a +`GuzzleHttp\HandlerStack`). + +- Removed `GuzzleHttp\BatchResults` +- Removed `GuzzleHttp\Collection` +- Removed `GuzzleHttp\HasDataTrait` +- Removed `GuzzleHttp\ToArrayInterface` +- The `guzzlehttp/streams` dependency has been removed. Stream functionality + is now present in the `GuzzleHttp\Psr7` namespace provided by the + `guzzlehttp/psr7` package. +- Guzzle no longer uses ReactPHP promises and now uses the + `guzzlehttp/promises` library. We use a custom promise library for three + significant reasons: + 1. React promises (at the time of writing this) are recursive. Promise + chaining and promise resolution will eventually blow the stack. Guzzle + promises are not recursive as they use a sort of trampolining technique. + Note: there has been movement in the React project to modify promises to + no longer utilize recursion. + 2. Guzzle needs to have the ability to synchronously block on a promise to + wait for a result. Guzzle promises allows this functionality (and does + not require the use of recursion). + 3. Because we need to be able to wait on a result, doing so using React + promises requires wrapping react promises with RingPHP futures. This + overhead is no longer needed, reducing stack sizes, reducing complexity, + and improving performance. +- `GuzzleHttp\Mimetypes` has been moved to a function in + `GuzzleHttp\Psr7\mimetype_from_extension` and + `GuzzleHttp\Psr7\mimetype_from_filename`. +- `GuzzleHttp\Query` and `GuzzleHttp\QueryParser` have been removed. Query + strings must now be passed into request objects as strings, or provided to + the `query` request option when creating requests with clients. The `query` + option uses PHP's `http_build_query` to convert an array to a string. If you + need a different serialization technique, you will need to pass the query + string in as a string. There are a couple helper functions that will make + working with query strings easier: `GuzzleHttp\Psr7\parse_query` and + `GuzzleHttp\Psr7\build_query`. +- Guzzle no longer has a dependency on RingPHP. Due to the use of a middleware + system based on PSR-7, using RingPHP and it's middleware system as well adds + more complexity than the benefits it provides. All HTTP handlers that were + present in RingPHP have been modified to work directly with PSR-7 messages + and placed in the `GuzzleHttp\Handler` namespace. This significantly reduces + complexity in Guzzle, removes a dependency, and improves performance. RingPHP + will be maintained for Guzzle 5 support, but will no longer be a part of + Guzzle 6. +- As Guzzle now uses a middleware based systems the event system and RingPHP + integration has been removed. Note: while the event system has been removed, + it is possible to add your own type of event system that is powered by the + middleware system. + - Removed the `Event` namespace. + - Removed the `Subscriber` namespace. + - Removed `Transaction` class + - Removed `RequestFsm` + - Removed `RingBridge` + - `GuzzleHttp\Subscriber\Cookie` is now provided by + `GuzzleHttp\Middleware::cookies` + - `GuzzleHttp\Subscriber\HttpError` is now provided by + `GuzzleHttp\Middleware::httpError` + - `GuzzleHttp\Subscriber\History` is now provided by + `GuzzleHttp\Middleware::history` + - `GuzzleHttp\Subscriber\Mock` is now provided by + `GuzzleHttp\Handler\MockHandler` + - `GuzzleHttp\Subscriber\Prepare` is now provided by + `GuzzleHttp\PrepareBodyMiddleware` + - `GuzzleHttp\Subscriber\Redirect` is now provided by + `GuzzleHttp\RedirectMiddleware` +- Guzzle now uses `Psr\Http\Message\UriInterface` (implements in + `GuzzleHttp\Psr7\Uri`) for URI support. `GuzzleHttp\Url` is now gone. +- Static functions in `GuzzleHttp\Utils` have been moved to namespaced + functions under the `GuzzleHttp` namespace. This requires either a Composer + based autoloader or you to include functions.php. +- `GuzzleHttp\ClientInterface::getDefaultOption` has been renamed to + `GuzzleHttp\ClientInterface::getConfig`. +- `GuzzleHttp\ClientInterface::setDefaultOption` has been removed. +- The `json` and `xml` methods of response objects has been removed. With the + migration to strictly adhering to PSR-7 as the interface for Guzzle messages, + adding methods to message interfaces would actually require Guzzle messages + to extend from PSR-7 messages rather then work with them directly. + +## Migrating to middleware + +The change to PSR-7 unfortunately required significant refactoring to Guzzle +due to the fact that PSR-7 messages are immutable. Guzzle 5 relied on an event +system from plugins. The event system relied on mutability of HTTP messages and +side effects in order to work. With immutable messages, you have to change your +workflow to become more about either returning a value (e.g., functional +middlewares) or setting a value on an object. Guzzle v6 has chosen the +functional middleware approach. + +Instead of using the event system to listen for things like the `before` event, +you now create a stack based middleware function that intercepts a request on +the way in and the promise of the response on the way out. This is a much +simpler and more predictable approach than the event system and works nicely +with PSR-7 middleware. Due to the use of promises, the middleware system is +also asynchronous. + +v5: + +```php +use GuzzleHttp\Event\BeforeEvent; +$client = new GuzzleHttp\Client(); +// Get the emitter and listen to the before event. +$client->getEmitter()->on('before', function (BeforeEvent $e) { + // Guzzle v5 events relied on mutation + $e->getRequest()->setHeader('X-Foo', 'Bar'); +}); +``` + +v6: + +In v6, you can modify the request before it is sent using the `mapRequest` +middleware. The idiomatic way in v6 to modify the request/response lifecycle is +to setup a handler middleware stack up front and inject the handler into a +client. + +```php +use GuzzleHttp\Middleware; +// Create a handler stack that has all of the default middlewares attached +$handler = GuzzleHttp\HandlerStack::create(); +// Push the handler onto the handler stack +$handler->push(Middleware::mapRequest(function (RequestInterface $request) { + // Notice that we have to return a request object + return $request->withHeader('X-Foo', 'Bar'); +})); +// Inject the handler into the client +$client = new GuzzleHttp\Client(['handler' => $handler]); +``` + +## POST Requests + +This version added the [`form_params`](http://guzzle.readthedocs.org/en/latest/request-options.html#form_params) +and `multipart` request options. `form_params` is an associative array of +strings or array of strings and is used to serialize an +`application/x-www-form-urlencoded` POST request. The +[`multipart`](http://guzzle.readthedocs.org/en/latest/request-options.html#multipart) +option is now used to send a multipart/form-data POST request. + +`GuzzleHttp\Post\PostFile` has been removed. Use the `multipart` option to add +POST files to a multipart/form-data request. + +The `body` option no longer accepts an array to send POST requests. Please use +`multipart` or `form_params` instead. + +The `base_url` option has been renamed to `base_uri`. + +4.x to 5.0 +---------- + +## Rewritten Adapter Layer + +Guzzle now uses [RingPHP](http://ringphp.readthedocs.org/en/latest) to send +HTTP requests. The `adapter` option in a `GuzzleHttp\Client` constructor +is still supported, but it has now been renamed to `handler`. Instead of +passing a `GuzzleHttp\Adapter\AdapterInterface`, you must now pass a PHP +`callable` that follows the RingPHP specification. + +## Removed Fluent Interfaces + +[Fluent interfaces were removed](http://ocramius.github.io/blog/fluent-interfaces-are-evil) +from the following classes: + +- `GuzzleHttp\Collection` +- `GuzzleHttp\Url` +- `GuzzleHttp\Query` +- `GuzzleHttp\Post\PostBody` +- `GuzzleHttp\Cookie\SetCookie` + +## Removed functions.php + +Removed "functions.php", so that Guzzle is truly PSR-4 compliant. The following +functions can be used as replacements. + +- `GuzzleHttp\json_decode` -> `GuzzleHttp\Utils::jsonDecode` +- `GuzzleHttp\get_path` -> `GuzzleHttp\Utils::getPath` +- `GuzzleHttp\Utils::setPath` -> `GuzzleHttp\set_path` +- `GuzzleHttp\Pool::batch` -> `GuzzleHttp\batch`. This function is, however, + deprecated in favor of using `GuzzleHttp\Pool::batch()`. + +The "procedural" global client has been removed with no replacement (e.g., +`GuzzleHttp\get()`, `GuzzleHttp\post()`, etc.). Use a `GuzzleHttp\Client` +object as a replacement. + +## `throwImmediately` has been removed + +The concept of "throwImmediately" has been removed from exceptions and error +events. This control mechanism was used to stop a transfer of concurrent +requests from completing. This can now be handled by throwing the exception or +by cancelling a pool of requests or each outstanding future request +individually. + +## headers event has been removed + +Removed the "headers" event. This event was only useful for changing the +body a response once the headers of the response were known. You can implement +a similar behavior in a number of ways. One example might be to use a +FnStream that has access to the transaction being sent. For example, when the +first byte is written, you could check if the response headers match your +expectations, and if so, change the actual stream body that is being +written to. + +## Updates to HTTP Messages + +Removed the `asArray` parameter from +`GuzzleHttp\Message\MessageInterface::getHeader`. If you want to get a header +value as an array, then use the newly added `getHeaderAsArray()` method of +`MessageInterface`. This change makes the Guzzle interfaces compatible with +the PSR-7 interfaces. + +3.x to 4.0 +---------- + +## Overarching changes: + +- Now requires PHP 5.4 or greater. +- No longer requires cURL to send requests. +- Guzzle no longer wraps every exception it throws. Only exceptions that are + recoverable are now wrapped by Guzzle. +- Various namespaces have been removed or renamed. +- No longer requiring the Symfony EventDispatcher. A custom event dispatcher + based on the Symfony EventDispatcher is + now utilized in `GuzzleHttp\Event\EmitterInterface` (resulting in significant + speed and functionality improvements). + +Changes per Guzzle 3.x namespace are described below. + +## Batch + +The `Guzzle\Batch` namespace has been removed. This is best left to +third-parties to implement on top of Guzzle's core HTTP library. + +## Cache + +The `Guzzle\Cache` namespace has been removed. (Todo: No suitable replacement +has been implemented yet, but hoping to utilize a PSR cache interface). + +## Common + +- Removed all of the wrapped exceptions. It's better to use the standard PHP + library for unrecoverable exceptions. +- `FromConfigInterface` has been removed. +- `Guzzle\Common\Version` has been removed. The VERSION constant can be found + at `GuzzleHttp\ClientInterface::VERSION`. + +### Collection + +- `getAll` has been removed. Use `toArray` to convert a collection to an array. +- `inject` has been removed. +- `keySearch` has been removed. +- `getPath` no longer supports wildcard expressions. Use something better like + JMESPath for this. +- `setPath` now supports appending to an existing array via the `[]` notation. + +### Events + +Guzzle no longer requires Symfony's EventDispatcher component. Guzzle now uses +`GuzzleHttp\Event\Emitter`. + +- `Symfony\Component\EventDispatcher\EventDispatcherInterface` is replaced by + `GuzzleHttp\Event\EmitterInterface`. +- `Symfony\Component\EventDispatcher\EventDispatcher` is replaced by + `GuzzleHttp\Event\Emitter`. +- `Symfony\Component\EventDispatcher\Event` is replaced by + `GuzzleHttp\Event\Event`, and Guzzle now has an EventInterface in + `GuzzleHttp\Event\EventInterface`. +- `AbstractHasDispatcher` has moved to a trait, `HasEmitterTrait`, and + `HasDispatcherInterface` has moved to `HasEmitterInterface`. Retrieving the + event emitter of a request, client, etc. now uses the `getEmitter` method + rather than the `getDispatcher` method. + +#### Emitter + +- Use the `once()` method to add a listener that automatically removes itself + the first time it is invoked. +- Use the `listeners()` method to retrieve a list of event listeners rather than + the `getListeners()` method. +- Use `emit()` instead of `dispatch()` to emit an event from an emitter. +- Use `attach()` instead of `addSubscriber()` and `detach()` instead of + `removeSubscriber()`. + +```php +$mock = new Mock(); +// 3.x +$request->getEventDispatcher()->addSubscriber($mock); +$request->getEventDispatcher()->removeSubscriber($mock); +// 4.x +$request->getEmitter()->attach($mock); +$request->getEmitter()->detach($mock); +``` + +Use the `on()` method to add a listener rather than the `addListener()` method. + +```php +// 3.x +$request->getEventDispatcher()->addListener('foo', function (Event $event) { /* ... */ } ); +// 4.x +$request->getEmitter()->on('foo', function (Event $event, $name) { /* ... */ } ); +``` + +## Http + +### General changes + +- The cacert.pem certificate has been moved to `src/cacert.pem`. +- Added the concept of adapters that are used to transfer requests over the + wire. +- Simplified the event system. +- Sending requests in parallel is still possible, but batching is no longer a + concept of the HTTP layer. Instead, you must use the `complete` and `error` + events to asynchronously manage parallel request transfers. +- `Guzzle\Http\Url` has moved to `GuzzleHttp\Url`. +- `Guzzle\Http\QueryString` has moved to `GuzzleHttp\Query`. +- QueryAggregators have been rewritten so that they are simply callable + functions. +- `GuzzleHttp\StaticClient` has been removed. Use the functions provided in + `functions.php` for an easy to use static client instance. +- Exceptions in `GuzzleHttp\Exception` have been updated to all extend from + `GuzzleHttp\Exception\TransferException`. + +### Client + +Calling methods like `get()`, `post()`, `head()`, etc. no longer create and +return a request, but rather creates a request, sends the request, and returns +the response. + +```php +// 3.0 +$request = $client->get('/'); +$response = $request->send(); + +// 4.0 +$response = $client->get('/'); + +// or, to mirror the previous behavior +$request = $client->createRequest('GET', '/'); +$response = $client->send($request); +``` + +`GuzzleHttp\ClientInterface` has changed. + +- The `send` method no longer accepts more than one request. Use `sendAll` to + send multiple requests in parallel. +- `setUserAgent()` has been removed. Use a default request option instead. You + could, for example, do something like: + `$client->setConfig('defaults/headers/User-Agent', 'Foo/Bar ' . $client::getDefaultUserAgent())`. +- `setSslVerification()` has been removed. Use default request options instead, + like `$client->setConfig('defaults/verify', true)`. + +`GuzzleHttp\Client` has changed. + +- The constructor now accepts only an associative array. You can include a + `base_url` string or array to use a URI template as the base URL of a client. + You can also specify a `defaults` key that is an associative array of default + request options. You can pass an `adapter` to use a custom adapter, + `batch_adapter` to use a custom adapter for sending requests in parallel, or + a `message_factory` to change the factory used to create HTTP requests and + responses. +- The client no longer emits a `client.create_request` event. +- Creating requests with a client no longer automatically utilize a URI + template. You must pass an array into a creational method (e.g., + `createRequest`, `get`, `put`, etc.) in order to expand a URI template. + +### Messages + +Messages no longer have references to their counterparts (i.e., a request no +longer has a reference to it's response, and a response no loger has a +reference to its request). This association is now managed through a +`GuzzleHttp\Adapter\TransactionInterface` object. You can get references to +these transaction objects using request events that are emitted over the +lifecycle of a request. + +#### Requests with a body + +- `GuzzleHttp\Message\EntityEnclosingRequest` and + `GuzzleHttp\Message\EntityEnclosingRequestInterface` have been removed. The + separation between requests that contain a body and requests that do not + contain a body has been removed, and now `GuzzleHttp\Message\RequestInterface` + handles both use cases. +- Any method that previously accepts a `GuzzleHttp\Response` object now accept a + `GuzzleHttp\Message\ResponseInterface`. +- `GuzzleHttp\Message\RequestFactoryInterface` has been renamed to + `GuzzleHttp\Message\MessageFactoryInterface`. This interface is used to create + both requests and responses and is implemented in + `GuzzleHttp\Message\MessageFactory`. +- POST field and file methods have been removed from the request object. You + must now use the methods made available to `GuzzleHttp\Post\PostBodyInterface` + to control the format of a POST body. Requests that are created using a + standard `GuzzleHttp\Message\MessageFactoryInterface` will automatically use + a `GuzzleHttp\Post\PostBody` body if the body was passed as an array or if + the method is POST and no body is provided. + +```php +$request = $client->createRequest('POST', '/'); +$request->getBody()->setField('foo', 'bar'); +$request->getBody()->addFile(new PostFile('file_key', fopen('/path/to/content', 'r'))); +``` + +#### Headers + +- `GuzzleHttp\Message\Header` has been removed. Header values are now simply + represented by an array of values or as a string. Header values are returned + as a string by default when retrieving a header value from a message. You can + pass an optional argument of `true` to retrieve a header value as an array + of strings instead of a single concatenated string. +- `GuzzleHttp\PostFile` and `GuzzleHttp\PostFileInterface` have been moved to + `GuzzleHttp\Post`. This interface has been simplified and now allows the + addition of arbitrary headers. +- Custom headers like `GuzzleHttp\Message\Header\Link` have been removed. Most + of the custom headers are now handled separately in specific + subscribers/plugins, and `GuzzleHttp\Message\HeaderValues::parseParams()` has + been updated to properly handle headers that contain parameters (like the + `Link` header). + +#### Responses + +- `GuzzleHttp\Message\Response::getInfo()` and + `GuzzleHttp\Message\Response::setInfo()` have been removed. Use the event + system to retrieve this type of information. +- `GuzzleHttp\Message\Response::getRawHeaders()` has been removed. +- `GuzzleHttp\Message\Response::getMessage()` has been removed. +- `GuzzleHttp\Message\Response::calculateAge()` and other cache specific + methods have moved to the CacheSubscriber. +- Header specific helper functions like `getContentMd5()` have been removed. + Just use `getHeader('Content-MD5')` instead. +- `GuzzleHttp\Message\Response::setRequest()` and + `GuzzleHttp\Message\Response::getRequest()` have been removed. Use the event + system to work with request and response objects as a transaction. +- `GuzzleHttp\Message\Response::getRedirectCount()` has been removed. Use the + Redirect subscriber instead. +- `GuzzleHttp\Message\Response::isSuccessful()` and other related methods have + been removed. Use `getStatusCode()` instead. + +#### Streaming responses + +Streaming requests can now be created by a client directly, returning a +`GuzzleHttp\Message\ResponseInterface` object that contains a body stream +referencing an open PHP HTTP stream. + +```php +// 3.0 +use Guzzle\Stream\PhpStreamRequestFactory; +$request = $client->get('/'); +$factory = new PhpStreamRequestFactory(); +$stream = $factory->fromRequest($request); +$data = $stream->read(1024); + +// 4.0 +$response = $client->get('/', ['stream' => true]); +// Read some data off of the stream in the response body +$data = $response->getBody()->read(1024); +``` + +#### Redirects + +The `configureRedirects()` method has been removed in favor of a +`allow_redirects` request option. + +```php +// Standard redirects with a default of a max of 5 redirects +$request = $client->createRequest('GET', '/', ['allow_redirects' => true]); + +// Strict redirects with a custom number of redirects +$request = $client->createRequest('GET', '/', [ + 'allow_redirects' => ['max' => 5, 'strict' => true] +]); +``` + +#### EntityBody + +EntityBody interfaces and classes have been removed or moved to +`GuzzleHttp\Stream`. All classes and interfaces that once required +`GuzzleHttp\EntityBodyInterface` now require +`GuzzleHttp\Stream\StreamInterface`. Creating a new body for a request no +longer uses `GuzzleHttp\EntityBody::factory` but now uses +`GuzzleHttp\Stream\Stream::factory` or even better: +`GuzzleHttp\Stream\create()`. + +- `Guzzle\Http\EntityBodyInterface` is now `GuzzleHttp\Stream\StreamInterface` +- `Guzzle\Http\EntityBody` is now `GuzzleHttp\Stream\Stream` +- `Guzzle\Http\CachingEntityBody` is now `GuzzleHttp\Stream\CachingStream` +- `Guzzle\Http\ReadLimitEntityBody` is now `GuzzleHttp\Stream\LimitStream` +- `Guzzle\Http\IoEmittyinEntityBody` has been removed. + +#### Request lifecycle events + +Requests previously submitted a large number of requests. The number of events +emitted over the lifecycle of a request has been significantly reduced to make +it easier to understand how to extend the behavior of a request. All events +emitted during the lifecycle of a request now emit a custom +`GuzzleHttp\Event\EventInterface` object that contains context providing +methods and a way in which to modify the transaction at that specific point in +time (e.g., intercept the request and set a response on the transaction). + +- `request.before_send` has been renamed to `before` and now emits a + `GuzzleHttp\Event\BeforeEvent` +- `request.complete` has been renamed to `complete` and now emits a + `GuzzleHttp\Event\CompleteEvent`. +- `request.sent` has been removed. Use `complete`. +- `request.success` has been removed. Use `complete`. +- `error` is now an event that emits a `GuzzleHttp\Event\ErrorEvent`. +- `request.exception` has been removed. Use `error`. +- `request.receive.status_line` has been removed. +- `curl.callback.progress` has been removed. Use a custom `StreamInterface` to + maintain a status update. +- `curl.callback.write` has been removed. Use a custom `StreamInterface` to + intercept writes. +- `curl.callback.read` has been removed. Use a custom `StreamInterface` to + intercept reads. + +`headers` is a new event that is emitted after the response headers of a +request have been received before the body of the response is downloaded. This +event emits a `GuzzleHttp\Event\HeadersEvent`. + +You can intercept a request and inject a response using the `intercept()` event +of a `GuzzleHttp\Event\BeforeEvent`, `GuzzleHttp\Event\CompleteEvent`, and +`GuzzleHttp\Event\ErrorEvent` event. + +See: http://docs.guzzlephp.org/en/latest/events.html + +## Inflection + +The `Guzzle\Inflection` namespace has been removed. This is not a core concern +of Guzzle. + +## Iterator + +The `Guzzle\Iterator` namespace has been removed. + +- `Guzzle\Iterator\AppendIterator`, `Guzzle\Iterator\ChunkedIterator`, and + `Guzzle\Iterator\MethodProxyIterator` are nice, but not a core requirement of + Guzzle itself. +- `Guzzle\Iterator\FilterIterator` is no longer needed because an equivalent + class is shipped with PHP 5.4. +- `Guzzle\Iterator\MapIterator` is not really needed when using PHP 5.5 because + it's easier to just wrap an iterator in a generator that maps values. + +For a replacement of these iterators, see https://github.com/nikic/iter + +## Log + +The LogPlugin has moved to https://github.com/guzzle/log-subscriber. The +`Guzzle\Log` namespace has been removed. Guzzle now relies on +`Psr\Log\LoggerInterface` for all logging. The MessageFormatter class has been +moved to `GuzzleHttp\Subscriber\Log\Formatter`. + +## Parser + +The `Guzzle\Parser` namespace has been removed. This was previously used to +make it possible to plug in custom parsers for cookies, messages, URI +templates, and URLs; however, this level of complexity is not needed in Guzzle +so it has been removed. + +- Cookie: Cookie parsing logic has been moved to + `GuzzleHttp\Cookie\SetCookie::fromString`. +- Message: Message parsing logic for both requests and responses has been moved + to `GuzzleHttp\Message\MessageFactory::fromMessage`. Message parsing is only + used in debugging or deserializing messages, so it doesn't make sense for + Guzzle as a library to add this level of complexity to parsing messages. +- UriTemplate: URI template parsing has been moved to + `GuzzleHttp\UriTemplate`. The Guzzle library will automatically use the PECL + URI template library if it is installed. +- Url: URL parsing is now performed in `GuzzleHttp\Url::fromString` (previously + it was `Guzzle\Http\Url::factory()`). If custom URL parsing is necessary, + then developers are free to subclass `GuzzleHttp\Url`. + +## Plugin + +The `Guzzle\Plugin` namespace has been renamed to `GuzzleHttp\Subscriber`. +Several plugins are shipping with the core Guzzle library under this namespace. + +- `GuzzleHttp\Subscriber\Cookie`: Replaces the old CookiePlugin. Cookie jar + code has moved to `GuzzleHttp\Cookie`. +- `GuzzleHttp\Subscriber\History`: Replaces the old HistoryPlugin. +- `GuzzleHttp\Subscriber\HttpError`: Throws errors when a bad HTTP response is + received. +- `GuzzleHttp\Subscriber\Mock`: Replaces the old MockPlugin. +- `GuzzleHttp\Subscriber\Prepare`: Prepares the body of a request just before + sending. This subscriber is attached to all requests by default. +- `GuzzleHttp\Subscriber\Redirect`: Replaces the RedirectPlugin. + +The following plugins have been removed (third-parties are free to re-implement +these if needed): + +- `GuzzleHttp\Plugin\Async` has been removed. +- `GuzzleHttp\Plugin\CurlAuth` has been removed. +- `GuzzleHttp\Plugin\ErrorResponse\ErrorResponsePlugin` has been removed. This + functionality should instead be implemented with event listeners that occur + after normal response parsing occurs in the guzzle/command package. + +The following plugins are not part of the core Guzzle package, but are provided +in separate repositories: + +- `Guzzle\Http\Plugin\BackoffPlugin` has been rewritten to be much simpler + to build custom retry policies using simple functions rather than various + chained classes. See: https://github.com/guzzle/retry-subscriber +- `Guzzle\Http\Plugin\Cache\CachePlugin` has moved to + https://github.com/guzzle/cache-subscriber +- `Guzzle\Http\Plugin\Log\LogPlugin` has moved to + https://github.com/guzzle/log-subscriber +- `Guzzle\Http\Plugin\Md5\Md5Plugin` has moved to + https://github.com/guzzle/message-integrity-subscriber +- `Guzzle\Http\Plugin\Mock\MockPlugin` has moved to + `GuzzleHttp\Subscriber\MockSubscriber`. +- `Guzzle\Http\Plugin\Oauth\OauthPlugin` has moved to + https://github.com/guzzle/oauth-subscriber + +## Service + +The service description layer of Guzzle has moved into two separate packages: + +- http://github.com/guzzle/command Provides a high level abstraction over web + services by representing web service operations using commands. +- http://github.com/guzzle/guzzle-services Provides an implementation of + guzzle/command that provides request serialization and response parsing using + Guzzle service descriptions. + +## Stream + +Stream have moved to a separate package available at +https://github.com/guzzle/streams. + +`Guzzle\Stream\StreamInterface` has been given a large update to cleanly take +on the responsibilities of `Guzzle\Http\EntityBody` and +`Guzzle\Http\EntityBodyInterface` now that they have been removed. The number +of methods implemented by the `StreamInterface` has been drastically reduced to +allow developers to more easily extend and decorate stream behavior. + +## Removed methods from StreamInterface + +- `getStream` and `setStream` have been removed to better encapsulate streams. +- `getMetadata` and `setMetadata` have been removed in favor of + `GuzzleHttp\Stream\MetadataStreamInterface`. +- `getWrapper`, `getWrapperData`, `getStreamType`, and `getUri` have all been + removed. This data is accessible when + using streams that implement `GuzzleHttp\Stream\MetadataStreamInterface`. +- `rewind` has been removed. Use `seek(0)` for a similar behavior. + +## Renamed methods + +- `detachStream` has been renamed to `detach`. +- `feof` has been renamed to `eof`. +- `ftell` has been renamed to `tell`. +- `readLine` has moved from an instance method to a static class method of + `GuzzleHttp\Stream\Stream`. + +## Metadata streams + +`GuzzleHttp\Stream\MetadataStreamInterface` has been added to denote streams +that contain additional metadata accessible via `getMetadata()`. +`GuzzleHttp\Stream\StreamInterface::getMetadata` and +`GuzzleHttp\Stream\StreamInterface::setMetadata` have been removed. + +## StreamRequestFactory + +The entire concept of the StreamRequestFactory has been removed. The way this +was used in Guzzle 3 broke the actual interface of sending streaming requests +(instead of getting back a Response, you got a StreamInterface). Streaming +PHP requests are now implemented through the `GuzzleHttp\Adapter\StreamAdapter`. + +3.6 to 3.7 +---------- + +### Deprecations + +- You can now enable E_USER_DEPRECATED warnings to see if you are using any deprecated methods.: + +```php +\Guzzle\Common\Version::$emitWarnings = true; +``` + +The following APIs and options have been marked as deprecated: + +- Marked `Guzzle\Http\Message\Request::isResponseBodyRepeatable()` as deprecated. Use `$request->getResponseBody()->isRepeatable()` instead. +- Marked `Guzzle\Http\Message\Request::canCache()` as deprecated. Use `Guzzle\Plugin\Cache\DefaultCanCacheStrategy->canCacheRequest()` instead. +- Marked `Guzzle\Http\Message\Request::canCache()` as deprecated. Use `Guzzle\Plugin\Cache\DefaultCanCacheStrategy->canCacheRequest()` instead. +- Marked `Guzzle\Http\Message\Request::setIsRedirect()` as deprecated. Use the HistoryPlugin instead. +- Marked `Guzzle\Http\Message\Request::isRedirect()` as deprecated. Use the HistoryPlugin instead. +- Marked `Guzzle\Cache\CacheAdapterFactory::factory()` as deprecated +- Marked `Guzzle\Service\Client::enableMagicMethods()` as deprecated. Magic methods can no longer be disabled on a Guzzle\Service\Client. +- Marked `Guzzle\Parser\Url\UrlParser` as deprecated. Just use PHP's `parse_url()` and percent encode your UTF-8. +- Marked `Guzzle\Common\Collection::inject()` as deprecated. +- Marked `Guzzle\Plugin\CurlAuth\CurlAuthPlugin` as deprecated. Use + `$client->getConfig()->setPath('request.options/auth', array('user', 'pass', 'Basic|Digest|NTLM|Any'));` or + `$client->setDefaultOption('auth', array('user', 'pass', 'Basic|Digest|NTLM|Any'));` + +3.7 introduces `request.options` as a parameter for a client configuration and as an optional argument to all creational +request methods. When paired with a client's configuration settings, these options allow you to specify default settings +for various aspects of a request. Because these options make other previous configuration options redundant, several +configuration options and methods of a client and AbstractCommand have been deprecated. + +- Marked `Guzzle\Service\Client::getDefaultHeaders()` as deprecated. Use `$client->getDefaultOption('headers')`. +- Marked `Guzzle\Service\Client::setDefaultHeaders()` as deprecated. Use `$client->setDefaultOption('headers/{header_name}', 'value')`. +- Marked 'request.params' for `Guzzle\Http\Client` as deprecated. Use `$client->setDefaultOption('params/{param_name}', 'value')` +- Marked 'command.headers', 'command.response_body' and 'command.on_complete' as deprecated for AbstractCommand. These will work through Guzzle 4.0 + + $command = $client->getCommand('foo', array( + 'command.headers' => array('Test' => '123'), + 'command.response_body' => '/path/to/file' + )); + + // Should be changed to: + + $command = $client->getCommand('foo', array( + 'command.request_options' => array( + 'headers' => array('Test' => '123'), + 'save_as' => '/path/to/file' + ) + )); + +### Interface changes + +Additions and changes (you will need to update any implementations or subclasses you may have created): + +- Added an `$options` argument to the end of the following methods of `Guzzle\Http\ClientInterface`: + createRequest, head, delete, put, patch, post, options, prepareRequest +- Added an `$options` argument to the end of `Guzzle\Http\Message\Request\RequestFactoryInterface::createRequest()` +- Added an `applyOptions()` method to `Guzzle\Http\Message\Request\RequestFactoryInterface` +- Changed `Guzzle\Http\ClientInterface::get($uri = null, $headers = null, $body = null)` to + `Guzzle\Http\ClientInterface::get($uri = null, $headers = null, $options = array())`. You can still pass in a + resource, string, or EntityBody into the $options parameter to specify the download location of the response. +- Changed `Guzzle\Common\Collection::__construct($data)` to no longer accepts a null value for `$data` but a + default `array()` +- Added `Guzzle\Stream\StreamInterface::isRepeatable` +- Made `Guzzle\Http\Client::expandTemplate` and `getUriTemplate` protected methods. + +The following methods were removed from interfaces. All of these methods are still available in the concrete classes +that implement them, but you should update your code to use alternative methods: + +- Removed `Guzzle\Http\ClientInterface::setDefaultHeaders(). Use + `$client->getConfig()->setPath('request.options/headers/{header_name}', 'value')`. or + `$client->getConfig()->setPath('request.options/headers', array('header_name' => 'value'))` or + `$client->setDefaultOption('headers/{header_name}', 'value')`. or + `$client->setDefaultOption('headers', array('header_name' => 'value'))`. +- Removed `Guzzle\Http\ClientInterface::getDefaultHeaders(). Use `$client->getConfig()->getPath('request.options/headers')`. +- Removed `Guzzle\Http\ClientInterface::expandTemplate()`. This is an implementation detail. +- Removed `Guzzle\Http\ClientInterface::setRequestFactory()`. This is an implementation detail. +- Removed `Guzzle\Http\ClientInterface::getCurlMulti()`. This is a very specific implementation detail. +- Removed `Guzzle\Http\Message\RequestInterface::canCache`. Use the CachePlugin. +- Removed `Guzzle\Http\Message\RequestInterface::setIsRedirect`. Use the HistoryPlugin. +- Removed `Guzzle\Http\Message\RequestInterface::isRedirect`. Use the HistoryPlugin. + +### Cache plugin breaking changes + +- CacheKeyProviderInterface and DefaultCacheKeyProvider are no longer used. All of this logic is handled in a + CacheStorageInterface. These two objects and interface will be removed in a future version. +- Always setting X-cache headers on cached responses +- Default cache TTLs are now handled by the CacheStorageInterface of a CachePlugin +- `CacheStorageInterface::cache($key, Response $response, $ttl = null)` has changed to `cache(RequestInterface + $request, Response $response);` +- `CacheStorageInterface::fetch($key)` has changed to `fetch(RequestInterface $request);` +- `CacheStorageInterface::delete($key)` has changed to `delete(RequestInterface $request);` +- Added `CacheStorageInterface::purge($url)` +- `DefaultRevalidation::__construct(CacheKeyProviderInterface $cacheKey, CacheStorageInterface $cache, CachePlugin + $plugin)` has changed to `DefaultRevalidation::__construct(CacheStorageInterface $cache, + CanCacheStrategyInterface $canCache = null)` +- Added `RevalidationInterface::shouldRevalidate(RequestInterface $request, Response $response)` + +3.5 to 3.6 +---------- + +* Mixed casing of headers are now forced to be a single consistent casing across all values for that header. +* Messages internally use a HeaderCollection object to delegate handling case-insensitive header resolution +* Removed the whole changedHeader() function system of messages because all header changes now go through addHeader(). + For example, setHeader() first removes the header using unset on a HeaderCollection and then calls addHeader(). + Keeping the Host header and URL host in sync is now handled by overriding the addHeader method in Request. +* Specific header implementations can be created for complex headers. When a message creates a header, it uses a + HeaderFactory which can map specific headers to specific header classes. There is now a Link header and + CacheControl header implementation. +* Moved getLinks() from Response to just be used on a Link header object. + +If you previously relied on Guzzle\Http\Message\Header::raw(), then you will need to update your code to use the +HeaderInterface (e.g. toArray(), getAll(), etc.). + +### Interface changes + +* Removed from interface: Guzzle\Http\ClientInterface::setUriTemplate +* Removed from interface: Guzzle\Http\ClientInterface::setCurlMulti() +* Removed Guzzle\Http\Message\Request::receivedRequestHeader() and implemented this functionality in + Guzzle\Http\Curl\RequestMediator +* Removed the optional $asString parameter from MessageInterface::getHeader(). Just cast the header to a string. +* Removed the optional $tryChunkedTransfer option from Guzzle\Http\Message\EntityEnclosingRequestInterface +* Removed the $asObjects argument from Guzzle\Http\Message\MessageInterface::getHeaders() + +### Removed deprecated functions + +* Removed Guzzle\Parser\ParserRegister::get(). Use getParser() +* Removed Guzzle\Parser\ParserRegister::set(). Use registerParser(). + +### Deprecations + +* The ability to case-insensitively search for header values +* Guzzle\Http\Message\Header::hasExactHeader +* Guzzle\Http\Message\Header::raw. Use getAll() +* Deprecated cache control specific methods on Guzzle\Http\Message\AbstractMessage. Use the CacheControl header object + instead. + +### Other changes + +* All response header helper functions return a string rather than mixing Header objects and strings inconsistently +* Removed cURL blacklist support. This is no longer necessary now that Expect, Accept, etc. are managed by Guzzle + directly via interfaces +* Removed the injecting of a request object onto a response object. The methods to get and set a request still exist + but are a no-op until removed. +* Most classes that used to require a `Guzzle\Service\Command\CommandInterface` typehint now request a + `Guzzle\Service\Command\ArrayCommandInterface`. +* Added `Guzzle\Http\Message\RequestInterface::startResponse()` to the RequestInterface to handle injecting a response + on a request while the request is still being transferred +* `Guzzle\Service\Command\CommandInterface` now extends from ToArrayInterface and ArrayAccess + +3.3 to 3.4 +---------- + +Base URLs of a client now follow the rules of http://tools.ietf.org/html/rfc3986#section-5.2.2 when merging URLs. + +3.2 to 3.3 +---------- + +### Response::getEtag() quote stripping removed + +`Guzzle\Http\Message\Response::getEtag()` no longer strips quotes around the ETag response header + +### Removed `Guzzle\Http\Utils` + +The `Guzzle\Http\Utils` class was removed. This class was only used for testing. + +### Stream wrapper and type + +`Guzzle\Stream\Stream::getWrapper()` and `Guzzle\Stream\Stream::getStreamType()` are no longer converted to lowercase. + +### curl.emit_io became emit_io + +Emitting IO events from a RequestMediator is now a parameter that must be set in a request's curl options using the +'emit_io' key. This was previously set under a request's parameters using 'curl.emit_io' + +3.1 to 3.2 +---------- + +### CurlMulti is no longer reused globally + +Before 3.2, the same CurlMulti object was reused globally for each client. This can cause issue where plugins added +to a single client can pollute requests dispatched from other clients. + +If you still wish to reuse the same CurlMulti object with each client, then you can add a listener to the +ServiceBuilder's `service_builder.create_client` event to inject a custom CurlMulti object into each client as it is +created. + +```php +$multi = new Guzzle\Http\Curl\CurlMulti(); +$builder = Guzzle\Service\Builder\ServiceBuilder::factory('/path/to/config.json'); +$builder->addListener('service_builder.create_client', function ($event) use ($multi) { + $event['client']->setCurlMulti($multi); +} +}); +``` + +### No default path + +URLs no longer have a default path value of '/' if no path was specified. + +Before: + +```php +$request = $client->get('http://www.foo.com'); +echo $request->getUrl(); +// >> http://www.foo.com/ +``` + +After: + +```php +$request = $client->get('http://www.foo.com'); +echo $request->getUrl(); +// >> http://www.foo.com +``` + +### Less verbose BadResponseException + +The exception message for `Guzzle\Http\Exception\BadResponseException` no longer contains the full HTTP request and +response information. You can, however, get access to the request and response object by calling `getRequest()` or +`getResponse()` on the exception object. + +### Query parameter aggregation + +Multi-valued query parameters are no longer aggregated using a callback function. `Guzzle\Http\Query` now has a +setAggregator() method that accepts a `Guzzle\Http\QueryAggregator\QueryAggregatorInterface` object. This object is +responsible for handling the aggregation of multi-valued query string variables into a flattened hash. + +2.8 to 3.x +---------- + +### Guzzle\Service\Inspector + +Change `\Guzzle\Service\Inspector::fromConfig` to `\Guzzle\Common\Collection::fromConfig` + +**Before** + +```php +use Guzzle\Service\Inspector; + +class YourClient extends \Guzzle\Service\Client +{ + public static function factory($config = array()) + { + $default = array(); + $required = array('base_url', 'username', 'api_key'); + $config = Inspector::fromConfig($config, $default, $required); + + $client = new self( + $config->get('base_url'), + $config->get('username'), + $config->get('api_key') + ); + $client->setConfig($config); + + $client->setDescription(ServiceDescription::factory(__DIR__ . DIRECTORY_SEPARATOR . 'client.json')); + + return $client; + } +``` + +**After** + +```php +use Guzzle\Common\Collection; + +class YourClient extends \Guzzle\Service\Client +{ + public static function factory($config = array()) + { + $default = array(); + $required = array('base_url', 'username', 'api_key'); + $config = Collection::fromConfig($config, $default, $required); + + $client = new self( + $config->get('base_url'), + $config->get('username'), + $config->get('api_key') + ); + $client->setConfig($config); + + $client->setDescription(ServiceDescription::factory(__DIR__ . DIRECTORY_SEPARATOR . 'client.json')); + + return $client; + } +``` + +### Convert XML Service Descriptions to JSON + +**Before** + +```xml + + + + + + Get a list of groups + + + Uses a search query to get a list of groups + + + + Create a group + + + + + Delete a group by ID + + + + + + + Update a group + + + + + + +``` + +**After** + +```json +{ + "name": "Zendesk REST API v2", + "apiVersion": "2012-12-31", + "description":"Provides access to Zendesk views, groups, tickets, ticket fields, and users", + "operations": { + "list_groups": { + "httpMethod":"GET", + "uri": "groups.json", + "summary": "Get a list of groups" + }, + "search_groups":{ + "httpMethod":"GET", + "uri": "search.json?query=\"{query} type:group\"", + "summary": "Uses a search query to get a list of groups", + "parameters":{ + "query":{ + "location": "uri", + "description":"Zendesk Search Query", + "type": "string", + "required": true + } + } + }, + "create_group": { + "httpMethod":"POST", + "uri": "groups.json", + "summary": "Create a group", + "parameters":{ + "data": { + "type": "array", + "location": "body", + "description":"Group JSON", + "filters": "json_encode", + "required": true + }, + "Content-Type":{ + "type": "string", + "location":"header", + "static": "application/json" + } + } + }, + "delete_group": { + "httpMethod":"DELETE", + "uri": "groups/{id}.json", + "summary": "Delete a group", + "parameters":{ + "id":{ + "location": "uri", + "description":"Group to delete by ID", + "type": "integer", + "required": true + } + } + }, + "get_group": { + "httpMethod":"GET", + "uri": "groups/{id}.json", + "summary": "Get a ticket", + "parameters":{ + "id":{ + "location": "uri", + "description":"Group to get by ID", + "type": "integer", + "required": true + } + } + }, + "update_group": { + "httpMethod":"PUT", + "uri": "groups/{id}.json", + "summary": "Update a group", + "parameters":{ + "id": { + "location": "uri", + "description":"Group to update by ID", + "type": "integer", + "required": true + }, + "data": { + "type": "array", + "location": "body", + "description":"Group JSON", + "filters": "json_encode", + "required": true + }, + "Content-Type":{ + "type": "string", + "location":"header", + "static": "application/json" + } + } + } +} +``` + +### Guzzle\Service\Description\ServiceDescription + +Commands are now called Operations + +**Before** + +```php +use Guzzle\Service\Description\ServiceDescription; + +$sd = new ServiceDescription(); +$sd->getCommands(); // @returns ApiCommandInterface[] +$sd->hasCommand($name); +$sd->getCommand($name); // @returns ApiCommandInterface|null +$sd->addCommand($command); // @param ApiCommandInterface $command +``` + +**After** + +```php +use Guzzle\Service\Description\ServiceDescription; + +$sd = new ServiceDescription(); +$sd->getOperations(); // @returns OperationInterface[] +$sd->hasOperation($name); +$sd->getOperation($name); // @returns OperationInterface|null +$sd->addOperation($operation); // @param OperationInterface $operation +``` + +### Guzzle\Common\Inflection\Inflector + +Namespace is now `Guzzle\Inflection\Inflector` + +### Guzzle\Http\Plugin + +Namespace is now `Guzzle\Plugin`. Many other changes occur within this namespace and are detailed in their own sections below. + +### Guzzle\Http\Plugin\LogPlugin and Guzzle\Common\Log + +Now `Guzzle\Plugin\Log\LogPlugin` and `Guzzle\Log` respectively. + +**Before** + +```php +use Guzzle\Common\Log\ClosureLogAdapter; +use Guzzle\Http\Plugin\LogPlugin; + +/** @var \Guzzle\Http\Client */ +$client; + +// $verbosity is an integer indicating desired message verbosity level +$client->addSubscriber(new LogPlugin(new ClosureLogAdapter(function($m) { echo $m; }, $verbosity = LogPlugin::LOG_VERBOSE); +``` + +**After** + +```php +use Guzzle\Log\ClosureLogAdapter; +use Guzzle\Log\MessageFormatter; +use Guzzle\Plugin\Log\LogPlugin; + +/** @var \Guzzle\Http\Client */ +$client; + +// $format is a string indicating desired message format -- @see MessageFormatter +$client->addSubscriber(new LogPlugin(new ClosureLogAdapter(function($m) { echo $m; }, $format = MessageFormatter::DEBUG_FORMAT); +``` + +### Guzzle\Http\Plugin\CurlAuthPlugin + +Now `Guzzle\Plugin\CurlAuth\CurlAuthPlugin`. + +### Guzzle\Http\Plugin\ExponentialBackoffPlugin + +Now `Guzzle\Plugin\Backoff\BackoffPlugin`, and other changes. + +**Before** + +```php +use Guzzle\Http\Plugin\ExponentialBackoffPlugin; + +$backoffPlugin = new ExponentialBackoffPlugin($maxRetries, array_merge( + ExponentialBackoffPlugin::getDefaultFailureCodes(), array(429) + )); + +$client->addSubscriber($backoffPlugin); +``` + +**After** + +```php +use Guzzle\Plugin\Backoff\BackoffPlugin; +use Guzzle\Plugin\Backoff\HttpBackoffStrategy; + +// Use convenient factory method instead -- see implementation for ideas of what +// you can do with chaining backoff strategies +$backoffPlugin = BackoffPlugin::getExponentialBackoff($maxRetries, array_merge( + HttpBackoffStrategy::getDefaultFailureCodes(), array(429) + )); +$client->addSubscriber($backoffPlugin); +``` + +### Known Issues + +#### [BUG] Accept-Encoding header behavior changed unintentionally. + +(See #217) (Fixed in 09daeb8c666fb44499a0646d655a8ae36456575e) + +In version 2.8 setting the `Accept-Encoding` header would set the CURLOPT_ENCODING option, which permitted cURL to +properly handle gzip/deflate compressed responses from the server. In versions affected by this bug this does not happen. +See issue #217 for a workaround, or use a version containing the fix. diff --git a/vendor/guzzlehttp/guzzle/composer.json b/vendor/guzzlehttp/guzzle/composer.json new file mode 100644 index 000000000..c01864f01 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/composer.json @@ -0,0 +1,59 @@ +{ + "name": "guzzlehttp/guzzle", + "type": "library", + "description": "Guzzle is a PHP HTTP client library", + "keywords": [ + "framework", + "http", + "rest", + "web service", + "curl", + "client", + "HTTP client" + ], + "homepage": "http://guzzlephp.org/", + "license": "MIT", + "authors": [ + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + } + ], + "require": { + "php": ">=5.5", + "ext-json": "*", + "symfony/polyfill-intl-idn": "^1.17.0", + "guzzlehttp/promises": "^1.0", + "guzzlehttp/psr7": "^1.6.1" + }, + "require-dev": { + "ext-curl": "*", + "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.4 || ^7.0", + "psr/log": "^1.1" + }, + "suggest": { + "psr/log": "Required for using the Log middleware" + }, + "config": { + "sort-packages": true + }, + "extra": { + "branch-alias": { + "dev-master": "6.5-dev" + } + }, + "autoload": { + "psr-4": { + "GuzzleHttp\\": "src/" + }, + "files": [ + "src/functions_include.php" + ] + }, + "autoload-dev": { + "psr-4": { + "GuzzleHttp\\Tests\\": "tests/" + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Client.php b/vendor/guzzlehttp/guzzle/src/Client.php new file mode 100644 index 000000000..315a022cf --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Client.php @@ -0,0 +1,501 @@ + 'http://www.foo.com/1.0/', + * 'timeout' => 0, + * 'allow_redirects' => false, + * 'proxy' => '192.168.16.1:10' + * ]); + * + * Client configuration settings include the following options: + * + * - handler: (callable) Function that transfers HTTP requests over the + * wire. The function is called with a Psr7\Http\Message\RequestInterface + * and array of transfer options, and must return a + * GuzzleHttp\Promise\PromiseInterface that is fulfilled with a + * Psr7\Http\Message\ResponseInterface on success. + * If no handler is provided, a default handler will be created + * that enables all of the request options below by attaching all of the + * default middleware to the handler. + * - base_uri: (string|UriInterface) Base URI of the client that is merged + * into relative URIs. Can be a string or instance of UriInterface. + * - **: any request option + * + * @param array $config Client configuration settings. + * + * @see \GuzzleHttp\RequestOptions for a list of available request options. + */ + public function __construct(array $config = []) + { + if (!isset($config['handler'])) { + $config['handler'] = HandlerStack::create(); + } elseif (!is_callable($config['handler'])) { + throw new \InvalidArgumentException('handler must be a callable'); + } + + // Convert the base_uri to a UriInterface + if (isset($config['base_uri'])) { + $config['base_uri'] = Psr7\uri_for($config['base_uri']); + } + + $this->configureDefaults($config); + } + + /** + * @param string $method + * @param array $args + * + * @return Promise\PromiseInterface + */ + public function __call($method, $args) + { + if (count($args) < 1) { + throw new \InvalidArgumentException('Magic request methods require a URI and optional options array'); + } + + $uri = $args[0]; + $opts = isset($args[1]) ? $args[1] : []; + + return substr($method, -5) === 'Async' + ? $this->requestAsync(substr($method, 0, -5), $uri, $opts) + : $this->request($method, $uri, $opts); + } + + /** + * Asynchronously send an HTTP request. + * + * @param array $options Request options to apply to the given + * request and to the transfer. See \GuzzleHttp\RequestOptions. + * + * @return Promise\PromiseInterface + */ + public function sendAsync(RequestInterface $request, array $options = []) + { + // Merge the base URI into the request URI if needed. + $options = $this->prepareDefaults($options); + + return $this->transfer( + $request->withUri($this->buildUri($request->getUri(), $options), $request->hasHeader('Host')), + $options + ); + } + + /** + * Send an HTTP request. + * + * @param array $options Request options to apply to the given + * request and to the transfer. See \GuzzleHttp\RequestOptions. + * + * @return ResponseInterface + * @throws GuzzleException + */ + public function send(RequestInterface $request, array $options = []) + { + $options[RequestOptions::SYNCHRONOUS] = true; + return $this->sendAsync($request, $options)->wait(); + } + + /** + * Create and send an asynchronous HTTP request. + * + * Use an absolute path to override the base path of the client, or a + * relative path to append to the base path of the client. The URL can + * contain the query string as well. Use an array to provide a URL + * template and additional variables to use in the URL template expansion. + * + * @param string $method HTTP method + * @param string|UriInterface $uri URI object or string. + * @param array $options Request options to apply. See \GuzzleHttp\RequestOptions. + * + * @return Promise\PromiseInterface + */ + public function requestAsync($method, $uri = '', array $options = []) + { + $options = $this->prepareDefaults($options); + // Remove request modifying parameter because it can be done up-front. + $headers = isset($options['headers']) ? $options['headers'] : []; + $body = isset($options['body']) ? $options['body'] : null; + $version = isset($options['version']) ? $options['version'] : '1.1'; + // Merge the URI into the base URI. + $uri = $this->buildUri($uri, $options); + if (is_array($body)) { + $this->invalidBody(); + } + $request = new Psr7\Request($method, $uri, $headers, $body, $version); + // Remove the option so that they are not doubly-applied. + unset($options['headers'], $options['body'], $options['version']); + + return $this->transfer($request, $options); + } + + /** + * Create and send an HTTP request. + * + * Use an absolute path to override the base path of the client, or a + * relative path to append to the base path of the client. The URL can + * contain the query string as well. + * + * @param string $method HTTP method. + * @param string|UriInterface $uri URI object or string. + * @param array $options Request options to apply. See \GuzzleHttp\RequestOptions. + * + * @return ResponseInterface + * @throws GuzzleException + */ + public function request($method, $uri = '', array $options = []) + { + $options[RequestOptions::SYNCHRONOUS] = true; + return $this->requestAsync($method, $uri, $options)->wait(); + } + + /** + * Get a client configuration option. + * + * These options include default request options of the client, a "handler" + * (if utilized by the concrete client), and a "base_uri" if utilized by + * the concrete client. + * + * @param string|null $option The config option to retrieve. + * + * @return mixed + */ + public function getConfig($option = null) + { + return $option === null + ? $this->config + : (isset($this->config[$option]) ? $this->config[$option] : null); + } + + /** + * @param string|null $uri + * + * @return UriInterface + */ + private function buildUri($uri, array $config) + { + // for BC we accept null which would otherwise fail in uri_for + $uri = Psr7\uri_for($uri === null ? '' : $uri); + + if (isset($config['base_uri'])) { + $uri = Psr7\UriResolver::resolve(Psr7\uri_for($config['base_uri']), $uri); + } + + if (isset($config['idn_conversion']) && ($config['idn_conversion'] !== false)) { + $idnOptions = ($config['idn_conversion'] === true) ? IDNA_DEFAULT : $config['idn_conversion']; + $uri = Utils::idnUriConvert($uri, $idnOptions); + } + + return $uri->getScheme() === '' && $uri->getHost() !== '' ? $uri->withScheme('http') : $uri; + } + + /** + * Configures the default options for a client. + * + * @param array $config + * @return void + */ + private function configureDefaults(array $config) + { + $defaults = [ + 'allow_redirects' => RedirectMiddleware::$defaultSettings, + 'http_errors' => true, + 'decode_content' => true, + 'verify' => true, + 'cookies' => false, + 'idn_conversion' => true, + ]; + + // Use the standard Linux HTTP_PROXY and HTTPS_PROXY if set. + + // We can only trust the HTTP_PROXY environment variable in a CLI + // process due to the fact that PHP has no reliable mechanism to + // get environment variables that start with "HTTP_". + if (php_sapi_name() === 'cli' && getenv('HTTP_PROXY')) { + $defaults['proxy']['http'] = getenv('HTTP_PROXY'); + } + + if ($proxy = getenv('HTTPS_PROXY')) { + $defaults['proxy']['https'] = $proxy; + } + + if ($noProxy = getenv('NO_PROXY')) { + $cleanedNoProxy = str_replace(' ', '', $noProxy); + $defaults['proxy']['no'] = explode(',', $cleanedNoProxy); + } + + $this->config = $config + $defaults; + + if (!empty($config['cookies']) && $config['cookies'] === true) { + $this->config['cookies'] = new CookieJar(); + } + + // Add the default user-agent header. + if (!isset($this->config['headers'])) { + $this->config['headers'] = ['User-Agent' => default_user_agent()]; + } else { + // Add the User-Agent header if one was not already set. + foreach (array_keys($this->config['headers']) as $name) { + if (strtolower($name) === 'user-agent') { + return; + } + } + $this->config['headers']['User-Agent'] = default_user_agent(); + } + } + + /** + * Merges default options into the array. + * + * @param array $options Options to modify by reference + * + * @return array + */ + private function prepareDefaults(array $options) + { + $defaults = $this->config; + + if (!empty($defaults['headers'])) { + // Default headers are only added if they are not present. + $defaults['_conditional'] = $defaults['headers']; + unset($defaults['headers']); + } + + // Special handling for headers is required as they are added as + // conditional headers and as headers passed to a request ctor. + if (array_key_exists('headers', $options)) { + // Allows default headers to be unset. + if ($options['headers'] === null) { + $defaults['_conditional'] = []; + unset($options['headers']); + } elseif (!is_array($options['headers'])) { + throw new \InvalidArgumentException('headers must be an array'); + } + } + + // Shallow merge defaults underneath options. + $result = $options + $defaults; + + // Remove null values. + foreach ($result as $k => $v) { + if ($v === null) { + unset($result[$k]); + } + } + + return $result; + } + + /** + * Transfers the given request and applies request options. + * + * The URI of the request is not modified and the request options are used + * as-is without merging in default options. + * + * @param array $options See \GuzzleHttp\RequestOptions. + * + * @return Promise\PromiseInterface + */ + private function transfer(RequestInterface $request, array $options) + { + // save_to -> sink + if (isset($options['save_to'])) { + $options['sink'] = $options['save_to']; + unset($options['save_to']); + } + + // exceptions -> http_errors + if (isset($options['exceptions'])) { + $options['http_errors'] = $options['exceptions']; + unset($options['exceptions']); + } + + $request = $this->applyOptions($request, $options); + /** @var HandlerStack $handler */ + $handler = $options['handler']; + + try { + return Promise\promise_for($handler($request, $options)); + } catch (\Exception $e) { + return Promise\rejection_for($e); + } + } + + /** + * Applies the array of request options to a request. + * + * @param RequestInterface $request + * @param array $options + * + * @return RequestInterface + */ + private function applyOptions(RequestInterface $request, array &$options) + { + $modify = [ + 'set_headers' => [], + ]; + + if (isset($options['headers'])) { + $modify['set_headers'] = $options['headers']; + unset($options['headers']); + } + + if (isset($options['form_params'])) { + if (isset($options['multipart'])) { + throw new \InvalidArgumentException('You cannot use ' + . 'form_params and multipart at the same time. Use the ' + . 'form_params option if you want to send application/' + . 'x-www-form-urlencoded requests, and the multipart ' + . 'option to send multipart/form-data requests.'); + } + $options['body'] = http_build_query($options['form_params'], '', '&'); + unset($options['form_params']); + // Ensure that we don't have the header in different case and set the new value. + $options['_conditional'] = Psr7\_caseless_remove(['Content-Type'], $options['_conditional']); + $options['_conditional']['Content-Type'] = 'application/x-www-form-urlencoded'; + } + + if (isset($options['multipart'])) { + $options['body'] = new Psr7\MultipartStream($options['multipart']); + unset($options['multipart']); + } + + if (isset($options['json'])) { + $options['body'] = \GuzzleHttp\json_encode($options['json']); + unset($options['json']); + // Ensure that we don't have the header in different case and set the new value. + $options['_conditional'] = Psr7\_caseless_remove(['Content-Type'], $options['_conditional']); + $options['_conditional']['Content-Type'] = 'application/json'; + } + + if (!empty($options['decode_content']) + && $options['decode_content'] !== true + ) { + // Ensure that we don't have the header in different case and set the new value. + $options['_conditional'] = Psr7\_caseless_remove(['Accept-Encoding'], $options['_conditional']); + $modify['set_headers']['Accept-Encoding'] = $options['decode_content']; + } + + if (isset($options['body'])) { + if (is_array($options['body'])) { + $this->invalidBody(); + } + $modify['body'] = Psr7\stream_for($options['body']); + unset($options['body']); + } + + if (!empty($options['auth']) && is_array($options['auth'])) { + $value = $options['auth']; + $type = isset($value[2]) ? strtolower($value[2]) : 'basic'; + switch ($type) { + case 'basic': + // Ensure that we don't have the header in different case and set the new value. + $modify['set_headers'] = Psr7\_caseless_remove(['Authorization'], $modify['set_headers']); + $modify['set_headers']['Authorization'] = 'Basic ' + . base64_encode("$value[0]:$value[1]"); + break; + case 'digest': + // @todo: Do not rely on curl + $options['curl'][CURLOPT_HTTPAUTH] = CURLAUTH_DIGEST; + $options['curl'][CURLOPT_USERPWD] = "$value[0]:$value[1]"; + break; + case 'ntlm': + $options['curl'][CURLOPT_HTTPAUTH] = CURLAUTH_NTLM; + $options['curl'][CURLOPT_USERPWD] = "$value[0]:$value[1]"; + break; + } + } + + if (isset($options['query'])) { + $value = $options['query']; + if (is_array($value)) { + $value = http_build_query($value, null, '&', PHP_QUERY_RFC3986); + } + if (!is_string($value)) { + throw new \InvalidArgumentException('query must be a string or array'); + } + $modify['query'] = $value; + unset($options['query']); + } + + // Ensure that sink is not an invalid value. + if (isset($options['sink'])) { + // TODO: Add more sink validation? + if (is_bool($options['sink'])) { + throw new \InvalidArgumentException('sink must not be a boolean'); + } + } + + $request = Psr7\modify_request($request, $modify); + if ($request->getBody() instanceof Psr7\MultipartStream) { + // Use a multipart/form-data POST if a Content-Type is not set. + // Ensure that we don't have the header in different case and set the new value. + $options['_conditional'] = Psr7\_caseless_remove(['Content-Type'], $options['_conditional']); + $options['_conditional']['Content-Type'] = 'multipart/form-data; boundary=' + . $request->getBody()->getBoundary(); + } + + // Merge in conditional headers if they are not present. + if (isset($options['_conditional'])) { + // Build up the changes so it's in a single clone of the message. + $modify = []; + foreach ($options['_conditional'] as $k => $v) { + if (!$request->hasHeader($k)) { + $modify['set_headers'][$k] = $v; + } + } + $request = Psr7\modify_request($request, $modify); + // Don't pass this internal value along to middleware/handlers. + unset($options['_conditional']); + } + + return $request; + } + + /** + * Throw Exception with pre-set message. + * @return void + * @throws \InvalidArgumentException Invalid body. + */ + private function invalidBody() + { + throw new \InvalidArgumentException('Passing in the "body" request ' + . 'option as an array to send a POST request has been deprecated. ' + . 'Please use the "form_params" request option to send a ' + . 'application/x-www-form-urlencoded request, or the "multipart" ' + . 'request option to send a multipart/form-data request.'); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/ClientInterface.php b/vendor/guzzlehttp/guzzle/src/ClientInterface.php new file mode 100644 index 000000000..638b75dca --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/ClientInterface.php @@ -0,0 +1,87 @@ +strictMode = $strictMode; + + foreach ($cookieArray as $cookie) { + if (!($cookie instanceof SetCookie)) { + $cookie = new SetCookie($cookie); + } + $this->setCookie($cookie); + } + } + + /** + * Create a new Cookie jar from an associative array and domain. + * + * @param array $cookies Cookies to create the jar from + * @param string $domain Domain to set the cookies to + * + * @return self + */ + public static function fromArray(array $cookies, $domain) + { + $cookieJar = new self(); + foreach ($cookies as $name => $value) { + $cookieJar->setCookie(new SetCookie([ + 'Domain' => $domain, + 'Name' => $name, + 'Value' => $value, + 'Discard' => true + ])); + } + + return $cookieJar; + } + + /** + * @deprecated + */ + public static function getCookieValue($value) + { + return $value; + } + + /** + * Evaluate if this cookie should be persisted to storage + * that survives between requests. + * + * @param SetCookie $cookie Being evaluated. + * @param bool $allowSessionCookies If we should persist session cookies + * @return bool + */ + public static function shouldPersist( + SetCookie $cookie, + $allowSessionCookies = false + ) { + if ($cookie->getExpires() || $allowSessionCookies) { + if (!$cookie->getDiscard()) { + return true; + } + } + + return false; + } + + /** + * Finds and returns the cookie based on the name + * + * @param string $name cookie name to search for + * @return SetCookie|null cookie that was found or null if not found + */ + public function getCookieByName($name) + { + // don't allow a non string name + if ($name === null || !is_scalar($name)) { + return null; + } + foreach ($this->cookies as $cookie) { + if ($cookie->getName() !== null && strcasecmp($cookie->getName(), $name) === 0) { + return $cookie; + } + } + + return null; + } + + public function toArray() + { + return array_map(function (SetCookie $cookie) { + return $cookie->toArray(); + }, $this->getIterator()->getArrayCopy()); + } + + public function clear($domain = null, $path = null, $name = null) + { + if (!$domain) { + $this->cookies = []; + return; + } elseif (!$path) { + $this->cookies = array_filter( + $this->cookies, + function (SetCookie $cookie) use ($domain) { + return !$cookie->matchesDomain($domain); + } + ); + } elseif (!$name) { + $this->cookies = array_filter( + $this->cookies, + function (SetCookie $cookie) use ($path, $domain) { + return !($cookie->matchesPath($path) && + $cookie->matchesDomain($domain)); + } + ); + } else { + $this->cookies = array_filter( + $this->cookies, + function (SetCookie $cookie) use ($path, $domain, $name) { + return !($cookie->getName() == $name && + $cookie->matchesPath($path) && + $cookie->matchesDomain($domain)); + } + ); + } + } + + public function clearSessionCookies() + { + $this->cookies = array_filter( + $this->cookies, + function (SetCookie $cookie) { + return !$cookie->getDiscard() && $cookie->getExpires(); + } + ); + } + + public function setCookie(SetCookie $cookie) + { + // If the name string is empty (but not 0), ignore the set-cookie + // string entirely. + $name = $cookie->getName(); + if (!$name && $name !== '0') { + return false; + } + + // Only allow cookies with set and valid domain, name, value + $result = $cookie->validate(); + if ($result !== true) { + if ($this->strictMode) { + throw new \RuntimeException('Invalid cookie: ' . $result); + } else { + $this->removeCookieIfEmpty($cookie); + return false; + } + } + + // Resolve conflicts with previously set cookies + foreach ($this->cookies as $i => $c) { + + // Two cookies are identical, when their path, and domain are + // identical. + if ($c->getPath() != $cookie->getPath() || + $c->getDomain() != $cookie->getDomain() || + $c->getName() != $cookie->getName() + ) { + continue; + } + + // The previously set cookie is a discard cookie and this one is + // not so allow the new cookie to be set + if (!$cookie->getDiscard() && $c->getDiscard()) { + unset($this->cookies[$i]); + continue; + } + + // If the new cookie's expiration is further into the future, then + // replace the old cookie + if ($cookie->getExpires() > $c->getExpires()) { + unset($this->cookies[$i]); + continue; + } + + // If the value has changed, we better change it + if ($cookie->getValue() !== $c->getValue()) { + unset($this->cookies[$i]); + continue; + } + + // The cookie exists, so no need to continue + return false; + } + + $this->cookies[] = $cookie; + + return true; + } + + public function count() + { + return count($this->cookies); + } + + public function getIterator() + { + return new \ArrayIterator(array_values($this->cookies)); + } + + public function extractCookies( + RequestInterface $request, + ResponseInterface $response + ) { + if ($cookieHeader = $response->getHeader('Set-Cookie')) { + foreach ($cookieHeader as $cookie) { + $sc = SetCookie::fromString($cookie); + if (!$sc->getDomain()) { + $sc->setDomain($request->getUri()->getHost()); + } + if (0 !== strpos($sc->getPath(), '/')) { + $sc->setPath($this->getCookiePathFromRequest($request)); + } + $this->setCookie($sc); + } + } + } + + /** + * Computes cookie path following RFC 6265 section 5.1.4 + * + * @link https://tools.ietf.org/html/rfc6265#section-5.1.4 + * + * @param RequestInterface $request + * @return string + */ + private function getCookiePathFromRequest(RequestInterface $request) + { + $uriPath = $request->getUri()->getPath(); + if ('' === $uriPath) { + return '/'; + } + if (0 !== strpos($uriPath, '/')) { + return '/'; + } + if ('/' === $uriPath) { + return '/'; + } + if (0 === $lastSlashPos = strrpos($uriPath, '/')) { + return '/'; + } + + return substr($uriPath, 0, $lastSlashPos); + } + + public function withCookieHeader(RequestInterface $request) + { + $values = []; + $uri = $request->getUri(); + $scheme = $uri->getScheme(); + $host = $uri->getHost(); + $path = $uri->getPath() ?: '/'; + + foreach ($this->cookies as $cookie) { + if ($cookie->matchesPath($path) && + $cookie->matchesDomain($host) && + !$cookie->isExpired() && + (!$cookie->getSecure() || $scheme === 'https') + ) { + $values[] = $cookie->getName() . '=' + . $cookie->getValue(); + } + } + + return $values + ? $request->withHeader('Cookie', implode('; ', $values)) + : $request; + } + + /** + * If a cookie already exists and the server asks to set it again with a + * null value, the cookie must be deleted. + * + * @param SetCookie $cookie + */ + private function removeCookieIfEmpty(SetCookie $cookie) + { + $cookieValue = $cookie->getValue(); + if ($cookieValue === null || $cookieValue === '') { + $this->clear( + $cookie->getDomain(), + $cookie->getPath(), + $cookie->getName() + ); + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Cookie/CookieJarInterface.php b/vendor/guzzlehttp/guzzle/src/Cookie/CookieJarInterface.php new file mode 100644 index 000000000..6ee11885e --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Cookie/CookieJarInterface.php @@ -0,0 +1,84 @@ +filename = $cookieFile; + $this->storeSessionCookies = $storeSessionCookies; + + if (file_exists($cookieFile)) { + $this->load($cookieFile); + } + } + + /** + * Saves the file when shutting down + */ + public function __destruct() + { + $this->save($this->filename); + } + + /** + * Saves the cookies to a file. + * + * @param string $filename File to save + * @throws \RuntimeException if the file cannot be found or created + */ + public function save($filename) + { + $json = []; + foreach ($this as $cookie) { + /** @var SetCookie $cookie */ + if (CookieJar::shouldPersist($cookie, $this->storeSessionCookies)) { + $json[] = $cookie->toArray(); + } + } + + $jsonStr = \GuzzleHttp\json_encode($json); + if (false === file_put_contents($filename, $jsonStr, LOCK_EX)) { + throw new \RuntimeException("Unable to save file {$filename}"); + } + } + + /** + * Load cookies from a JSON formatted file. + * + * Old cookies are kept unless overwritten by newly loaded ones. + * + * @param string $filename Cookie file to load. + * @throws \RuntimeException if the file cannot be loaded. + */ + public function load($filename) + { + $json = file_get_contents($filename); + if (false === $json) { + throw new \RuntimeException("Unable to load file {$filename}"); + } elseif ($json === '') { + return; + } + + $data = \GuzzleHttp\json_decode($json, true); + if (is_array($data)) { + foreach (json_decode($json, true) as $cookie) { + $this->setCookie(new SetCookie($cookie)); + } + } elseif (strlen($data)) { + throw new \RuntimeException("Invalid cookie file: {$filename}"); + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.php b/vendor/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.php new file mode 100644 index 000000000..0224a2447 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.php @@ -0,0 +1,72 @@ +sessionKey = $sessionKey; + $this->storeSessionCookies = $storeSessionCookies; + $this->load(); + } + + /** + * Saves cookies to session when shutting down + */ + public function __destruct() + { + $this->save(); + } + + /** + * Save cookies to the client session + */ + public function save() + { + $json = []; + foreach ($this as $cookie) { + /** @var SetCookie $cookie */ + if (CookieJar::shouldPersist($cookie, $this->storeSessionCookies)) { + $json[] = $cookie->toArray(); + } + } + + $_SESSION[$this->sessionKey] = json_encode($json); + } + + /** + * Load the contents of the client session into the data array + */ + protected function load() + { + if (!isset($_SESSION[$this->sessionKey])) { + return; + } + $data = json_decode($_SESSION[$this->sessionKey], true); + if (is_array($data)) { + foreach ($data as $cookie) { + $this->setCookie(new SetCookie($cookie)); + } + } elseif (strlen($data)) { + throw new \RuntimeException("Invalid cookie data"); + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Cookie/SetCookie.php b/vendor/guzzlehttp/guzzle/src/Cookie/SetCookie.php new file mode 100644 index 000000000..3d776a70b --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Cookie/SetCookie.php @@ -0,0 +1,403 @@ + null, + 'Value' => null, + 'Domain' => null, + 'Path' => '/', + 'Max-Age' => null, + 'Expires' => null, + 'Secure' => false, + 'Discard' => false, + 'HttpOnly' => false + ]; + + /** @var array Cookie data */ + private $data; + + /** + * Create a new SetCookie object from a string + * + * @param string $cookie Set-Cookie header string + * + * @return self + */ + public static function fromString($cookie) + { + // Create the default return array + $data = self::$defaults; + // Explode the cookie string using a series of semicolons + $pieces = array_filter(array_map('trim', explode(';', $cookie))); + // The name of the cookie (first kvp) must exist and include an equal sign. + if (empty($pieces[0]) || !strpos($pieces[0], '=')) { + return new self($data); + } + + // Add the cookie pieces into the parsed data array + foreach ($pieces as $part) { + $cookieParts = explode('=', $part, 2); + $key = trim($cookieParts[0]); + $value = isset($cookieParts[1]) + ? trim($cookieParts[1], " \n\r\t\0\x0B") + : true; + + // Only check for non-cookies when cookies have been found + if (empty($data['Name'])) { + $data['Name'] = $key; + $data['Value'] = $value; + } else { + foreach (array_keys(self::$defaults) as $search) { + if (!strcasecmp($search, $key)) { + $data[$search] = $value; + continue 2; + } + } + $data[$key] = $value; + } + } + + return new self($data); + } + + /** + * @param array $data Array of cookie data provided by a Cookie parser + */ + public function __construct(array $data = []) + { + $this->data = array_replace(self::$defaults, $data); + // Extract the Expires value and turn it into a UNIX timestamp if needed + if (!$this->getExpires() && $this->getMaxAge()) { + // Calculate the Expires date + $this->setExpires(time() + $this->getMaxAge()); + } elseif ($this->getExpires() && !is_numeric($this->getExpires())) { + $this->setExpires($this->getExpires()); + } + } + + public function __toString() + { + $str = $this->data['Name'] . '=' . $this->data['Value'] . '; '; + foreach ($this->data as $k => $v) { + if ($k !== 'Name' && $k !== 'Value' && $v !== null && $v !== false) { + if ($k === 'Expires') { + $str .= 'Expires=' . gmdate('D, d M Y H:i:s \G\M\T', $v) . '; '; + } else { + $str .= ($v === true ? $k : "{$k}={$v}") . '; '; + } + } + } + + return rtrim($str, '; '); + } + + public function toArray() + { + return $this->data; + } + + /** + * Get the cookie name + * + * @return string + */ + public function getName() + { + return $this->data['Name']; + } + + /** + * Set the cookie name + * + * @param string $name Cookie name + */ + public function setName($name) + { + $this->data['Name'] = $name; + } + + /** + * Get the cookie value + * + * @return string + */ + public function getValue() + { + return $this->data['Value']; + } + + /** + * Set the cookie value + * + * @param string $value Cookie value + */ + public function setValue($value) + { + $this->data['Value'] = $value; + } + + /** + * Get the domain + * + * @return string|null + */ + public function getDomain() + { + return $this->data['Domain']; + } + + /** + * Set the domain of the cookie + * + * @param string $domain + */ + public function setDomain($domain) + { + $this->data['Domain'] = $domain; + } + + /** + * Get the path + * + * @return string + */ + public function getPath() + { + return $this->data['Path']; + } + + /** + * Set the path of the cookie + * + * @param string $path Path of the cookie + */ + public function setPath($path) + { + $this->data['Path'] = $path; + } + + /** + * Maximum lifetime of the cookie in seconds + * + * @return int|null + */ + public function getMaxAge() + { + return $this->data['Max-Age']; + } + + /** + * Set the max-age of the cookie + * + * @param int $maxAge Max age of the cookie in seconds + */ + public function setMaxAge($maxAge) + { + $this->data['Max-Age'] = $maxAge; + } + + /** + * The UNIX timestamp when the cookie Expires + * + * @return mixed + */ + public function getExpires() + { + return $this->data['Expires']; + } + + /** + * Set the unix timestamp for which the cookie will expire + * + * @param int $timestamp Unix timestamp + */ + public function setExpires($timestamp) + { + $this->data['Expires'] = is_numeric($timestamp) + ? (int) $timestamp + : strtotime($timestamp); + } + + /** + * Get whether or not this is a secure cookie + * + * @return bool|null + */ + public function getSecure() + { + return $this->data['Secure']; + } + + /** + * Set whether or not the cookie is secure + * + * @param bool $secure Set to true or false if secure + */ + public function setSecure($secure) + { + $this->data['Secure'] = $secure; + } + + /** + * Get whether or not this is a session cookie + * + * @return bool|null + */ + public function getDiscard() + { + return $this->data['Discard']; + } + + /** + * Set whether or not this is a session cookie + * + * @param bool $discard Set to true or false if this is a session cookie + */ + public function setDiscard($discard) + { + $this->data['Discard'] = $discard; + } + + /** + * Get whether or not this is an HTTP only cookie + * + * @return bool + */ + public function getHttpOnly() + { + return $this->data['HttpOnly']; + } + + /** + * Set whether or not this is an HTTP only cookie + * + * @param bool $httpOnly Set to true or false if this is HTTP only + */ + public function setHttpOnly($httpOnly) + { + $this->data['HttpOnly'] = $httpOnly; + } + + /** + * Check if the cookie matches a path value. + * + * A request-path path-matches a given cookie-path if at least one of + * the following conditions holds: + * + * - The cookie-path and the request-path are identical. + * - The cookie-path is a prefix of the request-path, and the last + * character of the cookie-path is %x2F ("/"). + * - The cookie-path is a prefix of the request-path, and the first + * character of the request-path that is not included in the cookie- + * path is a %x2F ("/") character. + * + * @param string $requestPath Path to check against + * + * @return bool + */ + public function matchesPath($requestPath) + { + $cookiePath = $this->getPath(); + + // Match on exact matches or when path is the default empty "/" + if ($cookiePath === '/' || $cookiePath == $requestPath) { + return true; + } + + // Ensure that the cookie-path is a prefix of the request path. + if (0 !== strpos($requestPath, $cookiePath)) { + return false; + } + + // Match if the last character of the cookie-path is "/" + if (substr($cookiePath, -1, 1) === '/') { + return true; + } + + // Match if the first character not included in cookie path is "/" + return substr($requestPath, strlen($cookiePath), 1) === '/'; + } + + /** + * Check if the cookie matches a domain value + * + * @param string $domain Domain to check against + * + * @return bool + */ + public function matchesDomain($domain) + { + // Remove the leading '.' as per spec in RFC 6265. + // http://tools.ietf.org/html/rfc6265#section-5.2.3 + $cookieDomain = ltrim($this->getDomain(), '.'); + + // Domain not set or exact match. + if (!$cookieDomain || !strcasecmp($domain, $cookieDomain)) { + return true; + } + + // Matching the subdomain according to RFC 6265. + // http://tools.ietf.org/html/rfc6265#section-5.1.3 + if (filter_var($domain, FILTER_VALIDATE_IP)) { + return false; + } + + return (bool) preg_match('/\.' . preg_quote($cookieDomain, '/') . '$/', $domain); + } + + /** + * Check if the cookie is expired + * + * @return bool + */ + public function isExpired() + { + return $this->getExpires() !== null && time() > $this->getExpires(); + } + + /** + * Check if the cookie is valid according to RFC 6265 + * + * @return bool|string Returns true if valid or an error message if invalid + */ + public function validate() + { + // Names must not be empty, but can be 0 + $name = $this->getName(); + if (empty($name) && !is_numeric($name)) { + return 'The cookie name must not be empty'; + } + + // Check if any of the invalid characters are present in the cookie name + if (preg_match( + '/[\x00-\x20\x22\x28-\x29\x2c\x2f\x3a-\x40\x5c\x7b\x7d\x7f]/', + $name + )) { + return 'Cookie name must not contain invalid characters: ASCII ' + . 'Control characters (0-31;127), space, tab and the ' + . 'following characters: ()<>@,;:\"/?={}'; + } + + // Value must not be empty, but can be 0 + $value = $this->getValue(); + if (empty($value) && !is_numeric($value)) { + return 'The cookie value must not be empty'; + } + + // Domains must not be empty, but can be 0 + // A "0" is not a valid internet domain, but may be used as server name + // in a private network. + $domain = $this->getDomain(); + if (empty($domain) && !is_numeric($domain)) { + return 'The cookie domain must not be empty'; + } + + return true; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Exception/BadResponseException.php b/vendor/guzzlehttp/guzzle/src/Exception/BadResponseException.php new file mode 100644 index 000000000..427d896fb --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Exception/BadResponseException.php @@ -0,0 +1,27 @@ +getStatusCode() + : 0; + parent::__construct($message, $code, $previous); + $this->request = $request; + $this->response = $response; + $this->handlerContext = $handlerContext; + } + + /** + * Wrap non-RequestExceptions with a RequestException + * + * @param RequestInterface $request + * @param \Exception $e + * + * @return RequestException + */ + public static function wrapException(RequestInterface $request, \Exception $e) + { + return $e instanceof RequestException + ? $e + : new RequestException($e->getMessage(), $request, null, $e); + } + + /** + * Factory method to create a new exception with a normalized error message + * + * @param RequestInterface $request Request + * @param ResponseInterface $response Response received + * @param \Exception $previous Previous exception + * @param array $ctx Optional handler context. + * + * @return self + */ + public static function create( + RequestInterface $request, + ResponseInterface $response = null, + \Exception $previous = null, + array $ctx = [] + ) { + if (!$response) { + return new self( + 'Error completing request', + $request, + null, + $previous, + $ctx + ); + } + + $level = (int) floor($response->getStatusCode() / 100); + if ($level === 4) { + $label = 'Client error'; + $className = ClientException::class; + } elseif ($level === 5) { + $label = 'Server error'; + $className = ServerException::class; + } else { + $label = 'Unsuccessful request'; + $className = __CLASS__; + } + + $uri = $request->getUri(); + $uri = static::obfuscateUri($uri); + + // Client Error: `GET /` resulted in a `404 Not Found` response: + // ... (truncated) + $message = sprintf( + '%s: `%s %s` resulted in a `%s %s` response', + $label, + $request->getMethod(), + $uri, + $response->getStatusCode(), + $response->getReasonPhrase() + ); + + $summary = static::getResponseBodySummary($response); + + if ($summary !== null) { + $message .= ":\n{$summary}\n"; + } + + return new $className($message, $request, $response, $previous, $ctx); + } + + /** + * Get a short summary of the response + * + * Will return `null` if the response is not printable. + * + * @param ResponseInterface $response + * + * @return string|null + */ + public static function getResponseBodySummary(ResponseInterface $response) + { + return \GuzzleHttp\Psr7\get_message_body_summary($response); + } + + /** + * Obfuscates URI if there is a username and a password present + * + * @param UriInterface $uri + * + * @return UriInterface + */ + private static function obfuscateUri(UriInterface $uri) + { + $userInfo = $uri->getUserInfo(); + + if (false !== ($pos = strpos($userInfo, ':'))) { + return $uri->withUserInfo(substr($userInfo, 0, $pos), '***'); + } + + return $uri; + } + + /** + * Get the request that caused the exception + * + * @return RequestInterface + */ + public function getRequest() + { + return $this->request; + } + + /** + * Get the associated response + * + * @return ResponseInterface|null + */ + public function getResponse() + { + return $this->response; + } + + /** + * Check if a response was received + * + * @return bool + */ + public function hasResponse() + { + return $this->response !== null; + } + + /** + * Get contextual information about the error from the underlying handler. + * + * The contents of this array will vary depending on which handler you are + * using. It may also be just an empty array. Relying on this data will + * couple you to a specific handler, but can give more debug information + * when needed. + * + * @return array + */ + public function getHandlerContext() + { + return $this->handlerContext; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Exception/SeekException.php b/vendor/guzzlehttp/guzzle/src/Exception/SeekException.php new file mode 100644 index 000000000..a77c28926 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Exception/SeekException.php @@ -0,0 +1,27 @@ +stream = $stream; + $msg = $msg ?: 'Could not seek the stream to position ' . $pos; + parent::__construct($msg); + } + + /** + * @return StreamInterface + */ + public function getStream() + { + return $this->stream; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Exception/ServerException.php b/vendor/guzzlehttp/guzzle/src/Exception/ServerException.php new file mode 100644 index 000000000..127094c14 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Exception/ServerException.php @@ -0,0 +1,9 @@ +maxHandles = $maxHandles; + } + + public function create(RequestInterface $request, array $options) + { + if (isset($options['curl']['body_as_string'])) { + $options['_body_as_string'] = $options['curl']['body_as_string']; + unset($options['curl']['body_as_string']); + } + + $easy = new EasyHandle; + $easy->request = $request; + $easy->options = $options; + $conf = $this->getDefaultConf($easy); + $this->applyMethod($easy, $conf); + $this->applyHandlerOptions($easy, $conf); + $this->applyHeaders($easy, $conf); + unset($conf['_headers']); + + // Add handler options from the request configuration options + if (isset($options['curl'])) { + $conf = array_replace($conf, $options['curl']); + } + + $conf[CURLOPT_HEADERFUNCTION] = $this->createHeaderFn($easy); + $easy->handle = $this->handles + ? array_pop($this->handles) + : curl_init(); + curl_setopt_array($easy->handle, $conf); + + return $easy; + } + + public function release(EasyHandle $easy) + { + $resource = $easy->handle; + unset($easy->handle); + + if (count($this->handles) >= $this->maxHandles) { + curl_close($resource); + } else { + // Remove all callback functions as they can hold onto references + // and are not cleaned up by curl_reset. Using curl_setopt_array + // does not work for some reason, so removing each one + // individually. + curl_setopt($resource, CURLOPT_HEADERFUNCTION, null); + curl_setopt($resource, CURLOPT_READFUNCTION, null); + curl_setopt($resource, CURLOPT_WRITEFUNCTION, null); + curl_setopt($resource, CURLOPT_PROGRESSFUNCTION, null); + curl_reset($resource); + $this->handles[] = $resource; + } + } + + /** + * Completes a cURL transaction, either returning a response promise or a + * rejected promise. + * + * @param callable $handler + * @param EasyHandle $easy + * @param CurlFactoryInterface $factory Dictates how the handle is released + * + * @return \GuzzleHttp\Promise\PromiseInterface + */ + public static function finish( + callable $handler, + EasyHandle $easy, + CurlFactoryInterface $factory + ) { + if (isset($easy->options['on_stats'])) { + self::invokeStats($easy); + } + + if (!$easy->response || $easy->errno) { + return self::finishError($handler, $easy, $factory); + } + + // Return the response if it is present and there is no error. + $factory->release($easy); + + // Rewind the body of the response if possible. + $body = $easy->response->getBody(); + if ($body->isSeekable()) { + $body->rewind(); + } + + return new FulfilledPromise($easy->response); + } + + private static function invokeStats(EasyHandle $easy) + { + $curlStats = curl_getinfo($easy->handle); + $curlStats['appconnect_time'] = curl_getinfo($easy->handle, CURLINFO_APPCONNECT_TIME); + $stats = new TransferStats( + $easy->request, + $easy->response, + $curlStats['total_time'], + $easy->errno, + $curlStats + ); + call_user_func($easy->options['on_stats'], $stats); + } + + private static function finishError( + callable $handler, + EasyHandle $easy, + CurlFactoryInterface $factory + ) { + // Get error information and release the handle to the factory. + $ctx = [ + 'errno' => $easy->errno, + 'error' => curl_error($easy->handle), + 'appconnect_time' => curl_getinfo($easy->handle, CURLINFO_APPCONNECT_TIME), + ] + curl_getinfo($easy->handle); + $ctx[self::CURL_VERSION_STR] = curl_version()['version']; + $factory->release($easy); + + // Retry when nothing is present or when curl failed to rewind. + if (empty($easy->options['_err_message']) + && (!$easy->errno || $easy->errno == 65) + ) { + return self::retryFailedRewind($handler, $easy, $ctx); + } + + return self::createRejection($easy, $ctx); + } + + private static function createRejection(EasyHandle $easy, array $ctx) + { + static $connectionErrors = [ + CURLE_OPERATION_TIMEOUTED => true, + CURLE_COULDNT_RESOLVE_HOST => true, + CURLE_COULDNT_CONNECT => true, + CURLE_SSL_CONNECT_ERROR => true, + CURLE_GOT_NOTHING => true, + ]; + + // If an exception was encountered during the onHeaders event, then + // return a rejected promise that wraps that exception. + if ($easy->onHeadersException) { + return \GuzzleHttp\Promise\rejection_for( + new RequestException( + 'An error was encountered during the on_headers event', + $easy->request, + $easy->response, + $easy->onHeadersException, + $ctx + ) + ); + } + if (version_compare($ctx[self::CURL_VERSION_STR], self::LOW_CURL_VERSION_NUMBER)) { + $message = sprintf( + 'cURL error %s: %s (%s)', + $ctx['errno'], + $ctx['error'], + 'see https://curl.haxx.se/libcurl/c/libcurl-errors.html' + ); + } else { + $message = sprintf( + 'cURL error %s: %s (%s) for %s', + $ctx['errno'], + $ctx['error'], + 'see https://curl.haxx.se/libcurl/c/libcurl-errors.html', + $easy->request->getUri() + ); + } + + // Create a connection exception if it was a specific error code. + $error = isset($connectionErrors[$easy->errno]) + ? new ConnectException($message, $easy->request, null, $ctx) + : new RequestException($message, $easy->request, $easy->response, null, $ctx); + + return \GuzzleHttp\Promise\rejection_for($error); + } + + private function getDefaultConf(EasyHandle $easy) + { + $conf = [ + '_headers' => $easy->request->getHeaders(), + CURLOPT_CUSTOMREQUEST => $easy->request->getMethod(), + CURLOPT_URL => (string) $easy->request->getUri()->withFragment(''), + CURLOPT_RETURNTRANSFER => false, + CURLOPT_HEADER => false, + CURLOPT_CONNECTTIMEOUT => 150, + ]; + + if (defined('CURLOPT_PROTOCOLS')) { + $conf[CURLOPT_PROTOCOLS] = CURLPROTO_HTTP | CURLPROTO_HTTPS; + } + + $version = $easy->request->getProtocolVersion(); + if ($version == 1.1) { + $conf[CURLOPT_HTTP_VERSION] = CURL_HTTP_VERSION_1_1; + } elseif ($version == 2.0) { + $conf[CURLOPT_HTTP_VERSION] = CURL_HTTP_VERSION_2_0; + } else { + $conf[CURLOPT_HTTP_VERSION] = CURL_HTTP_VERSION_1_0; + } + + return $conf; + } + + private function applyMethod(EasyHandle $easy, array &$conf) + { + $body = $easy->request->getBody(); + $size = $body->getSize(); + + if ($size === null || $size > 0) { + $this->applyBody($easy->request, $easy->options, $conf); + return; + } + + $method = $easy->request->getMethod(); + if ($method === 'PUT' || $method === 'POST') { + // See http://tools.ietf.org/html/rfc7230#section-3.3.2 + if (!$easy->request->hasHeader('Content-Length')) { + $conf[CURLOPT_HTTPHEADER][] = 'Content-Length: 0'; + } + } elseif ($method === 'HEAD') { + $conf[CURLOPT_NOBODY] = true; + unset( + $conf[CURLOPT_WRITEFUNCTION], + $conf[CURLOPT_READFUNCTION], + $conf[CURLOPT_FILE], + $conf[CURLOPT_INFILE] + ); + } + } + + private function applyBody(RequestInterface $request, array $options, array &$conf) + { + $size = $request->hasHeader('Content-Length') + ? (int) $request->getHeaderLine('Content-Length') + : null; + + // Send the body as a string if the size is less than 1MB OR if the + // [curl][body_as_string] request value is set. + if (($size !== null && $size < 1000000) || + !empty($options['_body_as_string']) + ) { + $conf[CURLOPT_POSTFIELDS] = (string) $request->getBody(); + // Don't duplicate the Content-Length header + $this->removeHeader('Content-Length', $conf); + $this->removeHeader('Transfer-Encoding', $conf); + } else { + $conf[CURLOPT_UPLOAD] = true; + if ($size !== null) { + $conf[CURLOPT_INFILESIZE] = $size; + $this->removeHeader('Content-Length', $conf); + } + $body = $request->getBody(); + if ($body->isSeekable()) { + $body->rewind(); + } + $conf[CURLOPT_READFUNCTION] = function ($ch, $fd, $length) use ($body) { + return $body->read($length); + }; + } + + // If the Expect header is not present, prevent curl from adding it + if (!$request->hasHeader('Expect')) { + $conf[CURLOPT_HTTPHEADER][] = 'Expect:'; + } + + // cURL sometimes adds a content-type by default. Prevent this. + if (!$request->hasHeader('Content-Type')) { + $conf[CURLOPT_HTTPHEADER][] = 'Content-Type:'; + } + } + + private function applyHeaders(EasyHandle $easy, array &$conf) + { + foreach ($conf['_headers'] as $name => $values) { + foreach ($values as $value) { + $value = (string) $value; + if ($value === '') { + // cURL requires a special format for empty headers. + // See https://github.com/guzzle/guzzle/issues/1882 for more details. + $conf[CURLOPT_HTTPHEADER][] = "$name;"; + } else { + $conf[CURLOPT_HTTPHEADER][] = "$name: $value"; + } + } + } + + // Remove the Accept header if one was not set + if (!$easy->request->hasHeader('Accept')) { + $conf[CURLOPT_HTTPHEADER][] = 'Accept:'; + } + } + + /** + * Remove a header from the options array. + * + * @param string $name Case-insensitive header to remove + * @param array $options Array of options to modify + */ + private function removeHeader($name, array &$options) + { + foreach (array_keys($options['_headers']) as $key) { + if (!strcasecmp($key, $name)) { + unset($options['_headers'][$key]); + return; + } + } + } + + private function applyHandlerOptions(EasyHandle $easy, array &$conf) + { + $options = $easy->options; + if (isset($options['verify'])) { + if ($options['verify'] === false) { + unset($conf[CURLOPT_CAINFO]); + $conf[CURLOPT_SSL_VERIFYHOST] = 0; + $conf[CURLOPT_SSL_VERIFYPEER] = false; + } else { + $conf[CURLOPT_SSL_VERIFYHOST] = 2; + $conf[CURLOPT_SSL_VERIFYPEER] = true; + if (is_string($options['verify'])) { + // Throw an error if the file/folder/link path is not valid or doesn't exist. + if (!file_exists($options['verify'])) { + throw new \InvalidArgumentException( + "SSL CA bundle not found: {$options['verify']}" + ); + } + // If it's a directory or a link to a directory use CURLOPT_CAPATH. + // If not, it's probably a file, or a link to a file, so use CURLOPT_CAINFO. + if (is_dir($options['verify']) || + (is_link($options['verify']) && is_dir(readlink($options['verify'])))) { + $conf[CURLOPT_CAPATH] = $options['verify']; + } else { + $conf[CURLOPT_CAINFO] = $options['verify']; + } + } + } + } + + if (!empty($options['decode_content'])) { + $accept = $easy->request->getHeaderLine('Accept-Encoding'); + if ($accept) { + $conf[CURLOPT_ENCODING] = $accept; + } else { + $conf[CURLOPT_ENCODING] = ''; + // Don't let curl send the header over the wire + $conf[CURLOPT_HTTPHEADER][] = 'Accept-Encoding:'; + } + } + + if (isset($options['sink'])) { + $sink = $options['sink']; + if (!is_string($sink)) { + $sink = \GuzzleHttp\Psr7\stream_for($sink); + } elseif (!is_dir(dirname($sink))) { + // Ensure that the directory exists before failing in curl. + throw new \RuntimeException(sprintf( + 'Directory %s does not exist for sink value of %s', + dirname($sink), + $sink + )); + } else { + $sink = new LazyOpenStream($sink, 'w+'); + } + $easy->sink = $sink; + $conf[CURLOPT_WRITEFUNCTION] = function ($ch, $write) use ($sink) { + return $sink->write($write); + }; + } else { + // Use a default temp stream if no sink was set. + $conf[CURLOPT_FILE] = fopen('php://temp', 'w+'); + $easy->sink = Psr7\stream_for($conf[CURLOPT_FILE]); + } + $timeoutRequiresNoSignal = false; + if (isset($options['timeout'])) { + $timeoutRequiresNoSignal |= $options['timeout'] < 1; + $conf[CURLOPT_TIMEOUT_MS] = $options['timeout'] * 1000; + } + + // CURL default value is CURL_IPRESOLVE_WHATEVER + if (isset($options['force_ip_resolve'])) { + if ('v4' === $options['force_ip_resolve']) { + $conf[CURLOPT_IPRESOLVE] = CURL_IPRESOLVE_V4; + } elseif ('v6' === $options['force_ip_resolve']) { + $conf[CURLOPT_IPRESOLVE] = CURL_IPRESOLVE_V6; + } + } + + if (isset($options['connect_timeout'])) { + $timeoutRequiresNoSignal |= $options['connect_timeout'] < 1; + $conf[CURLOPT_CONNECTTIMEOUT_MS] = $options['connect_timeout'] * 1000; + } + + if ($timeoutRequiresNoSignal && strtoupper(substr(PHP_OS, 0, 3)) !== 'WIN') { + $conf[CURLOPT_NOSIGNAL] = true; + } + + if (isset($options['proxy'])) { + if (!is_array($options['proxy'])) { + $conf[CURLOPT_PROXY] = $options['proxy']; + } else { + $scheme = $easy->request->getUri()->getScheme(); + if (isset($options['proxy'][$scheme])) { + $host = $easy->request->getUri()->getHost(); + if (!isset($options['proxy']['no']) || + !\GuzzleHttp\is_host_in_noproxy($host, $options['proxy']['no']) + ) { + $conf[CURLOPT_PROXY] = $options['proxy'][$scheme]; + } + } + } + } + + if (isset($options['cert'])) { + $cert = $options['cert']; + if (is_array($cert)) { + $conf[CURLOPT_SSLCERTPASSWD] = $cert[1]; + $cert = $cert[0]; + } + if (!file_exists($cert)) { + throw new \InvalidArgumentException( + "SSL certificate not found: {$cert}" + ); + } + $conf[CURLOPT_SSLCERT] = $cert; + } + + if (isset($options['ssl_key'])) { + if (is_array($options['ssl_key'])) { + if (count($options['ssl_key']) === 2) { + list($sslKey, $conf[CURLOPT_SSLKEYPASSWD]) = $options['ssl_key']; + } else { + list($sslKey) = $options['ssl_key']; + } + } + + $sslKey = isset($sslKey) ? $sslKey: $options['ssl_key']; + + if (!file_exists($sslKey)) { + throw new \InvalidArgumentException( + "SSL private key not found: {$sslKey}" + ); + } + $conf[CURLOPT_SSLKEY] = $sslKey; + } + + if (isset($options['progress'])) { + $progress = $options['progress']; + if (!is_callable($progress)) { + throw new \InvalidArgumentException( + 'progress client option must be callable' + ); + } + $conf[CURLOPT_NOPROGRESS] = false; + $conf[CURLOPT_PROGRESSFUNCTION] = function () use ($progress) { + $args = func_get_args(); + // PHP 5.5 pushed the handle onto the start of the args + if (is_resource($args[0])) { + array_shift($args); + } + call_user_func_array($progress, $args); + }; + } + + if (!empty($options['debug'])) { + $conf[CURLOPT_STDERR] = \GuzzleHttp\debug_resource($options['debug']); + $conf[CURLOPT_VERBOSE] = true; + } + } + + /** + * This function ensures that a response was set on a transaction. If one + * was not set, then the request is retried if possible. This error + * typically means you are sending a payload, curl encountered a + * "Connection died, retrying a fresh connect" error, tried to rewind the + * stream, and then encountered a "necessary data rewind wasn't possible" + * error, causing the request to be sent through curl_multi_info_read() + * without an error status. + */ + private static function retryFailedRewind( + callable $handler, + EasyHandle $easy, + array $ctx + ) { + try { + // Only rewind if the body has been read from. + $body = $easy->request->getBody(); + if ($body->tell() > 0) { + $body->rewind(); + } + } catch (\RuntimeException $e) { + $ctx['error'] = 'The connection unexpectedly failed without ' + . 'providing an error. The request would have been retried, ' + . 'but attempting to rewind the request body failed. ' + . 'Exception: ' . $e; + return self::createRejection($easy, $ctx); + } + + // Retry no more than 3 times before giving up. + if (!isset($easy->options['_curl_retries'])) { + $easy->options['_curl_retries'] = 1; + } elseif ($easy->options['_curl_retries'] == 2) { + $ctx['error'] = 'The cURL request was retried 3 times ' + . 'and did not succeed. The most likely reason for the failure ' + . 'is that cURL was unable to rewind the body of the request ' + . 'and subsequent retries resulted in the same error. Turn on ' + . 'the debug option to see what went wrong. See ' + . 'https://bugs.php.net/bug.php?id=47204 for more information.'; + return self::createRejection($easy, $ctx); + } else { + $easy->options['_curl_retries']++; + } + + return $handler($easy->request, $easy->options); + } + + private function createHeaderFn(EasyHandle $easy) + { + if (isset($easy->options['on_headers'])) { + $onHeaders = $easy->options['on_headers']; + + if (!is_callable($onHeaders)) { + throw new \InvalidArgumentException('on_headers must be callable'); + } + } else { + $onHeaders = null; + } + + return function ($ch, $h) use ( + $onHeaders, + $easy, + &$startingResponse + ) { + $value = trim($h); + if ($value === '') { + $startingResponse = true; + $easy->createResponse(); + if ($onHeaders !== null) { + try { + $onHeaders($easy->response); + } catch (\Exception $e) { + // Associate the exception with the handle and trigger + // a curl header write error by returning 0. + $easy->onHeadersException = $e; + return -1; + } + } + } elseif ($startingResponse) { + $startingResponse = false; + $easy->headers = [$value]; + } else { + $easy->headers[] = $value; + } + return strlen($h); + }; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php b/vendor/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php new file mode 100644 index 000000000..b0fc23685 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php @@ -0,0 +1,27 @@ +factory = isset($options['handle_factory']) + ? $options['handle_factory'] + : new CurlFactory(3); + } + + public function __invoke(RequestInterface $request, array $options) + { + if (isset($options['delay'])) { + usleep($options['delay'] * 1000); + } + + $easy = $this->factory->create($request, $options); + curl_exec($easy->handle); + $easy->errno = curl_errno($easy->handle); + + return CurlFactory::finish($this, $easy, $this->factory); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php b/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php new file mode 100644 index 000000000..564c95f48 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php @@ -0,0 +1,219 @@ +factory = isset($options['handle_factory']) + ? $options['handle_factory'] : new CurlFactory(50); + + if (isset($options['select_timeout'])) { + $this->selectTimeout = $options['select_timeout']; + } elseif ($selectTimeout = getenv('GUZZLE_CURL_SELECT_TIMEOUT')) { + $this->selectTimeout = $selectTimeout; + } else { + $this->selectTimeout = 1; + } + + $this->options = isset($options['options']) ? $options['options'] : []; + } + + public function __get($name) + { + if ($name === '_mh') { + $this->_mh = curl_multi_init(); + + foreach ($this->options as $option => $value) { + // A warning is raised in case of a wrong option. + curl_multi_setopt($this->_mh, $option, $value); + } + + // Further calls to _mh will return the value directly, without entering the + // __get() method at all. + return $this->_mh; + } + + throw new \BadMethodCallException(); + } + + public function __destruct() + { + if (isset($this->_mh)) { + curl_multi_close($this->_mh); + unset($this->_mh); + } + } + + public function __invoke(RequestInterface $request, array $options) + { + $easy = $this->factory->create($request, $options); + $id = (int) $easy->handle; + + $promise = new Promise( + [$this, 'execute'], + function () use ($id) { + return $this->cancel($id); + } + ); + + $this->addRequest(['easy' => $easy, 'deferred' => $promise]); + + return $promise; + } + + /** + * Ticks the curl event loop. + */ + public function tick() + { + // Add any delayed handles if needed. + if ($this->delays) { + $currentTime = Utils::currentTime(); + foreach ($this->delays as $id => $delay) { + if ($currentTime >= $delay) { + unset($this->delays[$id]); + curl_multi_add_handle( + $this->_mh, + $this->handles[$id]['easy']->handle + ); + } + } + } + + // Step through the task queue which may add additional requests. + P\queue()->run(); + + if ($this->active && + curl_multi_select($this->_mh, $this->selectTimeout) === -1 + ) { + // Perform a usleep if a select returns -1. + // See: https://bugs.php.net/bug.php?id=61141 + usleep(250); + } + + while (curl_multi_exec($this->_mh, $this->active) === CURLM_CALL_MULTI_PERFORM); + + $this->processMessages(); + } + + /** + * Runs until all outstanding connections have completed. + */ + public function execute() + { + $queue = P\queue(); + + while ($this->handles || !$queue->isEmpty()) { + // If there are no transfers, then sleep for the next delay + if (!$this->active && $this->delays) { + usleep($this->timeToNext()); + } + $this->tick(); + } + } + + private function addRequest(array $entry) + { + $easy = $entry['easy']; + $id = (int) $easy->handle; + $this->handles[$id] = $entry; + if (empty($easy->options['delay'])) { + curl_multi_add_handle($this->_mh, $easy->handle); + } else { + $this->delays[$id] = Utils::currentTime() + ($easy->options['delay'] / 1000); + } + } + + /** + * Cancels a handle from sending and removes references to it. + * + * @param int $id Handle ID to cancel and remove. + * + * @return bool True on success, false on failure. + */ + private function cancel($id) + { + // Cannot cancel if it has been processed. + if (!isset($this->handles[$id])) { + return false; + } + + $handle = $this->handles[$id]['easy']->handle; + unset($this->delays[$id], $this->handles[$id]); + curl_multi_remove_handle($this->_mh, $handle); + curl_close($handle); + + return true; + } + + private function processMessages() + { + while ($done = curl_multi_info_read($this->_mh)) { + $id = (int) $done['handle']; + curl_multi_remove_handle($this->_mh, $done['handle']); + + if (!isset($this->handles[$id])) { + // Probably was cancelled. + continue; + } + + $entry = $this->handles[$id]; + unset($this->handles[$id], $this->delays[$id]); + $entry['easy']->errno = $done['result']; + $entry['deferred']->resolve( + CurlFactory::finish( + $this, + $entry['easy'], + $this->factory + ) + ); + } + } + + private function timeToNext() + { + $currentTime = Utils::currentTime(); + $nextTime = PHP_INT_MAX; + foreach ($this->delays as $time) { + if ($time < $nextTime) { + $nextTime = $time; + } + } + + return max(0, $nextTime - $currentTime) * 1000000; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Handler/EasyHandle.php b/vendor/guzzlehttp/guzzle/src/Handler/EasyHandle.php new file mode 100644 index 000000000..7754e9111 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Handler/EasyHandle.php @@ -0,0 +1,92 @@ +headers)) { + throw new \RuntimeException('No headers have been received'); + } + + // HTTP-version SP status-code SP reason-phrase + $startLine = explode(' ', array_shift($this->headers), 3); + $headers = \GuzzleHttp\headers_from_lines($this->headers); + $normalizedKeys = \GuzzleHttp\normalize_header_keys($headers); + + if (!empty($this->options['decode_content']) + && isset($normalizedKeys['content-encoding']) + ) { + $headers['x-encoded-content-encoding'] + = $headers[$normalizedKeys['content-encoding']]; + unset($headers[$normalizedKeys['content-encoding']]); + if (isset($normalizedKeys['content-length'])) { + $headers['x-encoded-content-length'] + = $headers[$normalizedKeys['content-length']]; + + $bodyLength = (int) $this->sink->getSize(); + if ($bodyLength) { + $headers[$normalizedKeys['content-length']] = $bodyLength; + } else { + unset($headers[$normalizedKeys['content-length']]); + } + } + } + + // Attach a response to the easy handle with the parsed headers. + $this->response = new Response( + $startLine[1], + $headers, + $this->sink, + substr($startLine[0], 5), + isset($startLine[2]) ? (string) $startLine[2] : null + ); + } + + public function __get($name) + { + $msg = $name === 'handle' + ? 'The EasyHandle has been released' + : 'Invalid property: ' . $name; + throw new \BadMethodCallException($msg); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Handler/MockHandler.php b/vendor/guzzlehttp/guzzle/src/Handler/MockHandler.php new file mode 100644 index 000000000..5b312bc04 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Handler/MockHandler.php @@ -0,0 +1,195 @@ +onFulfilled = $onFulfilled; + $this->onRejected = $onRejected; + + if ($queue) { + call_user_func_array([$this, 'append'], $queue); + } + } + + public function __invoke(RequestInterface $request, array $options) + { + if (!$this->queue) { + throw new \OutOfBoundsException('Mock queue is empty'); + } + + if (isset($options['delay']) && is_numeric($options['delay'])) { + usleep($options['delay'] * 1000); + } + + $this->lastRequest = $request; + $this->lastOptions = $options; + $response = array_shift($this->queue); + + if (isset($options['on_headers'])) { + if (!is_callable($options['on_headers'])) { + throw new \InvalidArgumentException('on_headers must be callable'); + } + try { + $options['on_headers']($response); + } catch (\Exception $e) { + $msg = 'An error was encountered during the on_headers event'; + $response = new RequestException($msg, $request, $response, $e); + } + } + + if (is_callable($response)) { + $response = call_user_func($response, $request, $options); + } + + $response = $response instanceof \Exception + ? \GuzzleHttp\Promise\rejection_for($response) + : \GuzzleHttp\Promise\promise_for($response); + + return $response->then( + function ($value) use ($request, $options) { + $this->invokeStats($request, $options, $value); + if ($this->onFulfilled) { + call_user_func($this->onFulfilled, $value); + } + if (isset($options['sink'])) { + $contents = (string) $value->getBody(); + $sink = $options['sink']; + + if (is_resource($sink)) { + fwrite($sink, $contents); + } elseif (is_string($sink)) { + file_put_contents($sink, $contents); + } elseif ($sink instanceof \Psr\Http\Message\StreamInterface) { + $sink->write($contents); + } + } + + return $value; + }, + function ($reason) use ($request, $options) { + $this->invokeStats($request, $options, null, $reason); + if ($this->onRejected) { + call_user_func($this->onRejected, $reason); + } + return \GuzzleHttp\Promise\rejection_for($reason); + } + ); + } + + /** + * Adds one or more variadic requests, exceptions, callables, or promises + * to the queue. + */ + public function append() + { + foreach (func_get_args() as $value) { + if ($value instanceof ResponseInterface + || $value instanceof \Exception + || $value instanceof PromiseInterface + || is_callable($value) + ) { + $this->queue[] = $value; + } else { + throw new \InvalidArgumentException('Expected a response or ' + . 'exception. Found ' . \GuzzleHttp\describe_type($value)); + } + } + } + + /** + * Get the last received request. + * + * @return RequestInterface + */ + public function getLastRequest() + { + return $this->lastRequest; + } + + /** + * Get the last received request options. + * + * @return array + */ + public function getLastOptions() + { + return $this->lastOptions; + } + + /** + * Returns the number of remaining items in the queue. + * + * @return int + */ + public function count() + { + return count($this->queue); + } + + public function reset() + { + $this->queue = []; + } + + private function invokeStats( + RequestInterface $request, + array $options, + ResponseInterface $response = null, + $reason = null + ) { + if (isset($options['on_stats'])) { + $transferTime = isset($options['transfer_time']) ? $options['transfer_time'] : 0; + $stats = new TransferStats($request, $response, $transferTime, $reason); + call_user_func($options['on_stats'], $stats); + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Handler/Proxy.php b/vendor/guzzlehttp/guzzle/src/Handler/Proxy.php new file mode 100644 index 000000000..f8b00be0b --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Handler/Proxy.php @@ -0,0 +1,55 @@ +withoutHeader('Expect'); + + // Append a content-length header if body size is zero to match + // cURL's behavior. + if (0 === $request->getBody()->getSize()) { + $request = $request->withHeader('Content-Length', '0'); + } + + return $this->createResponse( + $request, + $options, + $this->createStream($request, $options), + $startTime + ); + } catch (\InvalidArgumentException $e) { + throw $e; + } catch (\Exception $e) { + // Determine if the error was a networking error. + $message = $e->getMessage(); + // This list can probably get more comprehensive. + if (strpos($message, 'getaddrinfo') // DNS lookup failed + || strpos($message, 'Connection refused') + || strpos($message, "couldn't connect to host") // error on HHVM + || strpos($message, "connection attempt failed") + ) { + $e = new ConnectException($e->getMessage(), $request, $e); + } + $e = RequestException::wrapException($request, $e); + $this->invokeStats($options, $request, $startTime, null, $e); + + return \GuzzleHttp\Promise\rejection_for($e); + } + } + + private function invokeStats( + array $options, + RequestInterface $request, + $startTime, + ResponseInterface $response = null, + $error = null + ) { + if (isset($options['on_stats'])) { + $stats = new TransferStats( + $request, + $response, + Utils::currentTime() - $startTime, + $error, + [] + ); + call_user_func($options['on_stats'], $stats); + } + } + + private function createResponse( + RequestInterface $request, + array $options, + $stream, + $startTime + ) { + $hdrs = $this->lastHeaders; + $this->lastHeaders = []; + $parts = explode(' ', array_shift($hdrs), 3); + $ver = explode('/', $parts[0])[1]; + $status = $parts[1]; + $reason = isset($parts[2]) ? $parts[2] : null; + $headers = \GuzzleHttp\headers_from_lines($hdrs); + list($stream, $headers) = $this->checkDecode($options, $headers, $stream); + $stream = Psr7\stream_for($stream); + $sink = $stream; + + if (strcasecmp('HEAD', $request->getMethod())) { + $sink = $this->createSink($stream, $options); + } + + $response = new Psr7\Response($status, $headers, $sink, $ver, $reason); + + if (isset($options['on_headers'])) { + try { + $options['on_headers']($response); + } catch (\Exception $e) { + $msg = 'An error was encountered during the on_headers event'; + $ex = new RequestException($msg, $request, $response, $e); + return \GuzzleHttp\Promise\rejection_for($ex); + } + } + + // Do not drain when the request is a HEAD request because they have + // no body. + if ($sink !== $stream) { + $this->drain( + $stream, + $sink, + $response->getHeaderLine('Content-Length') + ); + } + + $this->invokeStats($options, $request, $startTime, $response, null); + + return new FulfilledPromise($response); + } + + private function createSink(StreamInterface $stream, array $options) + { + if (!empty($options['stream'])) { + return $stream; + } + + $sink = isset($options['sink']) + ? $options['sink'] + : fopen('php://temp', 'r+'); + + return is_string($sink) + ? new Psr7\LazyOpenStream($sink, 'w+') + : Psr7\stream_for($sink); + } + + private function checkDecode(array $options, array $headers, $stream) + { + // Automatically decode responses when instructed. + if (!empty($options['decode_content'])) { + $normalizedKeys = \GuzzleHttp\normalize_header_keys($headers); + if (isset($normalizedKeys['content-encoding'])) { + $encoding = $headers[$normalizedKeys['content-encoding']]; + if ($encoding[0] === 'gzip' || $encoding[0] === 'deflate') { + $stream = new Psr7\InflateStream( + Psr7\stream_for($stream) + ); + $headers['x-encoded-content-encoding'] + = $headers[$normalizedKeys['content-encoding']]; + // Remove content-encoding header + unset($headers[$normalizedKeys['content-encoding']]); + // Fix content-length header + if (isset($normalizedKeys['content-length'])) { + $headers['x-encoded-content-length'] + = $headers[$normalizedKeys['content-length']]; + + $length = (int) $stream->getSize(); + if ($length === 0) { + unset($headers[$normalizedKeys['content-length']]); + } else { + $headers[$normalizedKeys['content-length']] = [$length]; + } + } + } + } + } + + return [$stream, $headers]; + } + + /** + * Drains the source stream into the "sink" client option. + * + * @param StreamInterface $source + * @param StreamInterface $sink + * @param string $contentLength Header specifying the amount of + * data to read. + * + * @return StreamInterface + * @throws \RuntimeException when the sink option is invalid. + */ + private function drain( + StreamInterface $source, + StreamInterface $sink, + $contentLength + ) { + // If a content-length header is provided, then stop reading once + // that number of bytes has been read. This can prevent infinitely + // reading from a stream when dealing with servers that do not honor + // Connection: Close headers. + Psr7\copy_to_stream( + $source, + $sink, + (strlen($contentLength) > 0 && (int) $contentLength > 0) ? (int) $contentLength : -1 + ); + + $sink->seek(0); + $source->close(); + + return $sink; + } + + /** + * Create a resource and check to ensure it was created successfully + * + * @param callable $callback Callable that returns stream resource + * + * @return resource + * @throws \RuntimeException on error + */ + private function createResource(callable $callback) + { + $errors = null; + set_error_handler(function ($_, $msg, $file, $line) use (&$errors) { + $errors[] = [ + 'message' => $msg, + 'file' => $file, + 'line' => $line + ]; + return true; + }); + + $resource = $callback(); + restore_error_handler(); + + if (!$resource) { + $message = 'Error creating resource: '; + foreach ($errors as $err) { + foreach ($err as $key => $value) { + $message .= "[$key] $value" . PHP_EOL; + } + } + throw new \RuntimeException(trim($message)); + } + + return $resource; + } + + private function createStream(RequestInterface $request, array $options) + { + static $methods; + if (!$methods) { + $methods = array_flip(get_class_methods(__CLASS__)); + } + + // HTTP/1.1 streams using the PHP stream wrapper require a + // Connection: close header + if ($request->getProtocolVersion() == '1.1' + && !$request->hasHeader('Connection') + ) { + $request = $request->withHeader('Connection', 'close'); + } + + // Ensure SSL is verified by default + if (!isset($options['verify'])) { + $options['verify'] = true; + } + + $params = []; + $context = $this->getDefaultContext($request); + + if (isset($options['on_headers']) && !is_callable($options['on_headers'])) { + throw new \InvalidArgumentException('on_headers must be callable'); + } + + if (!empty($options)) { + foreach ($options as $key => $value) { + $method = "add_{$key}"; + if (isset($methods[$method])) { + $this->{$method}($request, $context, $value, $params); + } + } + } + + if (isset($options['stream_context'])) { + if (!is_array($options['stream_context'])) { + throw new \InvalidArgumentException('stream_context must be an array'); + } + $context = array_replace_recursive( + $context, + $options['stream_context'] + ); + } + + // Microsoft NTLM authentication only supported with curl handler + if (isset($options['auth']) + && is_array($options['auth']) + && isset($options['auth'][2]) + && 'ntlm' == $options['auth'][2] + ) { + throw new \InvalidArgumentException('Microsoft NTLM authentication only supported with curl handler'); + } + + $uri = $this->resolveHost($request, $options); + + $context = $this->createResource( + function () use ($context, $params) { + return stream_context_create($context, $params); + } + ); + + return $this->createResource( + function () use ($uri, &$http_response_header, $context, $options) { + $resource = fopen((string) $uri, 'r', null, $context); + $this->lastHeaders = $http_response_header; + + if (isset($options['read_timeout'])) { + $readTimeout = $options['read_timeout']; + $sec = (int) $readTimeout; + $usec = ($readTimeout - $sec) * 100000; + stream_set_timeout($resource, $sec, $usec); + } + + return $resource; + } + ); + } + + private function resolveHost(RequestInterface $request, array $options) + { + $uri = $request->getUri(); + + if (isset($options['force_ip_resolve']) && !filter_var($uri->getHost(), FILTER_VALIDATE_IP)) { + if ('v4' === $options['force_ip_resolve']) { + $records = dns_get_record($uri->getHost(), DNS_A); + if (!isset($records[0]['ip'])) { + throw new ConnectException( + sprintf( + "Could not resolve IPv4 address for host '%s'", + $uri->getHost() + ), + $request + ); + } + $uri = $uri->withHost($records[0]['ip']); + } elseif ('v6' === $options['force_ip_resolve']) { + $records = dns_get_record($uri->getHost(), DNS_AAAA); + if (!isset($records[0]['ipv6'])) { + throw new ConnectException( + sprintf( + "Could not resolve IPv6 address for host '%s'", + $uri->getHost() + ), + $request + ); + } + $uri = $uri->withHost('[' . $records[0]['ipv6'] . ']'); + } + } + + return $uri; + } + + private function getDefaultContext(RequestInterface $request) + { + $headers = ''; + foreach ($request->getHeaders() as $name => $value) { + foreach ($value as $val) { + $headers .= "$name: $val\r\n"; + } + } + + $context = [ + 'http' => [ + 'method' => $request->getMethod(), + 'header' => $headers, + 'protocol_version' => $request->getProtocolVersion(), + 'ignore_errors' => true, + 'follow_location' => 0, + ], + ]; + + $body = (string) $request->getBody(); + + if (!empty($body)) { + $context['http']['content'] = $body; + // Prevent the HTTP handler from adding a Content-Type header. + if (!$request->hasHeader('Content-Type')) { + $context['http']['header'] .= "Content-Type:\r\n"; + } + } + + $context['http']['header'] = rtrim($context['http']['header']); + + return $context; + } + + private function add_proxy(RequestInterface $request, &$options, $value, &$params) + { + if (!is_array($value)) { + $options['http']['proxy'] = $value; + } else { + $scheme = $request->getUri()->getScheme(); + if (isset($value[$scheme])) { + if (!isset($value['no']) + || !\GuzzleHttp\is_host_in_noproxy( + $request->getUri()->getHost(), + $value['no'] + ) + ) { + $options['http']['proxy'] = $value[$scheme]; + } + } + } + } + + private function add_timeout(RequestInterface $request, &$options, $value, &$params) + { + if ($value > 0) { + $options['http']['timeout'] = $value; + } + } + + private function add_verify(RequestInterface $request, &$options, $value, &$params) + { + if ($value === true) { + // PHP 5.6 or greater will find the system cert by default. When + // < 5.6, use the Guzzle bundled cacert. + if (PHP_VERSION_ID < 50600) { + $options['ssl']['cafile'] = \GuzzleHttp\default_ca_bundle(); + } + } elseif (is_string($value)) { + $options['ssl']['cafile'] = $value; + if (!file_exists($value)) { + throw new \RuntimeException("SSL CA bundle not found: $value"); + } + } elseif ($value === false) { + $options['ssl']['verify_peer'] = false; + $options['ssl']['verify_peer_name'] = false; + return; + } else { + throw new \InvalidArgumentException('Invalid verify request option'); + } + + $options['ssl']['verify_peer'] = true; + $options['ssl']['verify_peer_name'] = true; + $options['ssl']['allow_self_signed'] = false; + } + + private function add_cert(RequestInterface $request, &$options, $value, &$params) + { + if (is_array($value)) { + $options['ssl']['passphrase'] = $value[1]; + $value = $value[0]; + } + + if (!file_exists($value)) { + throw new \RuntimeException("SSL certificate not found: {$value}"); + } + + $options['ssl']['local_cert'] = $value; + } + + private function add_progress(RequestInterface $request, &$options, $value, &$params) + { + $this->addNotification( + $params, + function ($code, $a, $b, $c, $transferred, $total) use ($value) { + if ($code == STREAM_NOTIFY_PROGRESS) { + $value($total, $transferred, null, null); + } + } + ); + } + + private function add_debug(RequestInterface $request, &$options, $value, &$params) + { + if ($value === false) { + return; + } + + static $map = [ + STREAM_NOTIFY_CONNECT => 'CONNECT', + STREAM_NOTIFY_AUTH_REQUIRED => 'AUTH_REQUIRED', + STREAM_NOTIFY_AUTH_RESULT => 'AUTH_RESULT', + STREAM_NOTIFY_MIME_TYPE_IS => 'MIME_TYPE_IS', + STREAM_NOTIFY_FILE_SIZE_IS => 'FILE_SIZE_IS', + STREAM_NOTIFY_REDIRECTED => 'REDIRECTED', + STREAM_NOTIFY_PROGRESS => 'PROGRESS', + STREAM_NOTIFY_FAILURE => 'FAILURE', + STREAM_NOTIFY_COMPLETED => 'COMPLETED', + STREAM_NOTIFY_RESOLVE => 'RESOLVE', + ]; + static $args = ['severity', 'message', 'message_code', + 'bytes_transferred', 'bytes_max']; + + $value = \GuzzleHttp\debug_resource($value); + $ident = $request->getMethod() . ' ' . $request->getUri()->withFragment(''); + $this->addNotification( + $params, + function () use ($ident, $value, $map, $args) { + $passed = func_get_args(); + $code = array_shift($passed); + fprintf($value, '<%s> [%s] ', $ident, $map[$code]); + foreach (array_filter($passed) as $i => $v) { + fwrite($value, $args[$i] . ': "' . $v . '" '); + } + fwrite($value, "\n"); + } + ); + } + + private function addNotification(array &$params, callable $notify) + { + // Wrap the existing function if needed. + if (!isset($params['notification'])) { + $params['notification'] = $notify; + } else { + $params['notification'] = $this->callArray([ + $params['notification'], + $notify + ]); + } + } + + private function callArray(array $functions) + { + return function () use ($functions) { + $args = func_get_args(); + foreach ($functions as $fn) { + call_user_func_array($fn, $args); + } + }; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/HandlerStack.php b/vendor/guzzlehttp/guzzle/src/HandlerStack.php new file mode 100644 index 000000000..6a49cc069 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/HandlerStack.php @@ -0,0 +1,277 @@ +push(Middleware::httpErrors(), 'http_errors'); + $stack->push(Middleware::redirect(), 'allow_redirects'); + $stack->push(Middleware::cookies(), 'cookies'); + $stack->push(Middleware::prepareBody(), 'prepare_body'); + + return $stack; + } + + /** + * @param callable $handler Underlying HTTP handler. + */ + public function __construct(callable $handler = null) + { + $this->handler = $handler; + } + + /** + * Invokes the handler stack as a composed handler + * + * @param RequestInterface $request + * @param array $options + * + * @return ResponseInterface|PromiseInterface + */ + public function __invoke(RequestInterface $request, array $options) + { + $handler = $this->resolve(); + + return $handler($request, $options); + } + + /** + * Dumps a string representation of the stack. + * + * @return string + */ + public function __toString() + { + $depth = 0; + $stack = []; + if ($this->handler) { + $stack[] = "0) Handler: " . $this->debugCallable($this->handler); + } + + $result = ''; + foreach (array_reverse($this->stack) as $tuple) { + $depth++; + $str = "{$depth}) Name: '{$tuple[1]}', "; + $str .= "Function: " . $this->debugCallable($tuple[0]); + $result = "> {$str}\n{$result}"; + $stack[] = $str; + } + + foreach (array_keys($stack) as $k) { + $result .= "< {$stack[$k]}\n"; + } + + return $result; + } + + /** + * Set the HTTP handler that actually returns a promise. + * + * @param callable $handler Accepts a request and array of options and + * returns a Promise. + */ + public function setHandler(callable $handler) + { + $this->handler = $handler; + $this->cached = null; + } + + /** + * Returns true if the builder has a handler. + * + * @return bool + */ + public function hasHandler() + { + return (bool) $this->handler; + } + + /** + * Unshift a middleware to the bottom of the stack. + * + * @param callable $middleware Middleware function + * @param string $name Name to register for this middleware. + */ + public function unshift(callable $middleware, $name = null) + { + array_unshift($this->stack, [$middleware, $name]); + $this->cached = null; + } + + /** + * Push a middleware to the top of the stack. + * + * @param callable $middleware Middleware function + * @param string $name Name to register for this middleware. + */ + public function push(callable $middleware, $name = '') + { + $this->stack[] = [$middleware, $name]; + $this->cached = null; + } + + /** + * Add a middleware before another middleware by name. + * + * @param string $findName Middleware to find + * @param callable $middleware Middleware function + * @param string $withName Name to register for this middleware. + */ + public function before($findName, callable $middleware, $withName = '') + { + $this->splice($findName, $withName, $middleware, true); + } + + /** + * Add a middleware after another middleware by name. + * + * @param string $findName Middleware to find + * @param callable $middleware Middleware function + * @param string $withName Name to register for this middleware. + */ + public function after($findName, callable $middleware, $withName = '') + { + $this->splice($findName, $withName, $middleware, false); + } + + /** + * Remove a middleware by instance or name from the stack. + * + * @param callable|string $remove Middleware to remove by instance or name. + */ + public function remove($remove) + { + $this->cached = null; + $idx = is_callable($remove) ? 0 : 1; + $this->stack = array_values(array_filter( + $this->stack, + function ($tuple) use ($idx, $remove) { + return $tuple[$idx] !== $remove; + } + )); + } + + /** + * Compose the middleware and handler into a single callable function. + * + * @return callable + */ + public function resolve() + { + if (!$this->cached) { + if (!($prev = $this->handler)) { + throw new \LogicException('No handler has been specified'); + } + + foreach (array_reverse($this->stack) as $fn) { + $prev = $fn[0]($prev); + } + + $this->cached = $prev; + } + + return $this->cached; + } + + /** + * @param string $name + * @return int + */ + private function findByName($name) + { + foreach ($this->stack as $k => $v) { + if ($v[1] === $name) { + return $k; + } + } + + throw new \InvalidArgumentException("Middleware not found: $name"); + } + + /** + * Splices a function into the middleware list at a specific position. + * + * @param string $findName + * @param string $withName + * @param callable $middleware + * @param bool $before + */ + private function splice($findName, $withName, callable $middleware, $before) + { + $this->cached = null; + $idx = $this->findByName($findName); + $tuple = [$middleware, $withName]; + + if ($before) { + if ($idx === 0) { + array_unshift($this->stack, $tuple); + } else { + $replacement = [$tuple, $this->stack[$idx]]; + array_splice($this->stack, $idx, 1, $replacement); + } + } elseif ($idx === count($this->stack) - 1) { + $this->stack[] = $tuple; + } else { + $replacement = [$this->stack[$idx], $tuple]; + array_splice($this->stack, $idx, 1, $replacement); + } + } + + /** + * Provides a debug string for a given callable. + * + * @param array|callable $fn Function to write as a string. + * + * @return string + */ + private function debugCallable($fn) + { + if (is_string($fn)) { + return "callable({$fn})"; + } + + if (is_array($fn)) { + return is_string($fn[0]) + ? "callable({$fn[0]}::{$fn[1]})" + : "callable(['" . get_class($fn[0]) . "', '{$fn[1]}'])"; + } + + return 'callable(' . spl_object_hash($fn) . ')'; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/MessageFormatter.php b/vendor/guzzlehttp/guzzle/src/MessageFormatter.php new file mode 100644 index 000000000..dc36bb524 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/MessageFormatter.php @@ -0,0 +1,185 @@ +>>>>>>>\n{request}\n<<<<<<<<\n{response}\n--------\n{error}"; + const SHORT = '[{ts}] "{method} {target} HTTP/{version}" {code}'; + + /** @var string Template used to format log messages */ + private $template; + + /** + * @param string $template Log message template + */ + public function __construct($template = self::CLF) + { + $this->template = $template ?: self::CLF; + } + + /** + * Returns a formatted message string. + * + * @param RequestInterface $request Request that was sent + * @param ResponseInterface $response Response that was received + * @param \Exception $error Exception that was received + * + * @return string + */ + public function format( + RequestInterface $request, + ResponseInterface $response = null, + \Exception $error = null + ) { + $cache = []; + + return preg_replace_callback( + '/{\s*([A-Za-z_\-\.0-9]+)\s*}/', + function (array $matches) use ($request, $response, $error, &$cache) { + if (isset($cache[$matches[1]])) { + return $cache[$matches[1]]; + } + + $result = ''; + switch ($matches[1]) { + case 'request': + $result = Psr7\str($request); + break; + case 'response': + $result = $response ? Psr7\str($response) : ''; + break; + case 'req_headers': + $result = trim($request->getMethod() + . ' ' . $request->getRequestTarget()) + . ' HTTP/' . $request->getProtocolVersion() . "\r\n" + . $this->headers($request); + break; + case 'res_headers': + $result = $response ? + sprintf( + 'HTTP/%s %d %s', + $response->getProtocolVersion(), + $response->getStatusCode(), + $response->getReasonPhrase() + ) . "\r\n" . $this->headers($response) + : 'NULL'; + break; + case 'req_body': + $result = $request->getBody(); + break; + case 'res_body': + $result = $response ? $response->getBody() : 'NULL'; + break; + case 'ts': + case 'date_iso_8601': + $result = gmdate('c'); + break; + case 'date_common_log': + $result = date('d/M/Y:H:i:s O'); + break; + case 'method': + $result = $request->getMethod(); + break; + case 'version': + $result = $request->getProtocolVersion(); + break; + case 'uri': + case 'url': + $result = $request->getUri(); + break; + case 'target': + $result = $request->getRequestTarget(); + break; + case 'req_version': + $result = $request->getProtocolVersion(); + break; + case 'res_version': + $result = $response + ? $response->getProtocolVersion() + : 'NULL'; + break; + case 'host': + $result = $request->getHeaderLine('Host'); + break; + case 'hostname': + $result = gethostname(); + break; + case 'code': + $result = $response ? $response->getStatusCode() : 'NULL'; + break; + case 'phrase': + $result = $response ? $response->getReasonPhrase() : 'NULL'; + break; + case 'error': + $result = $error ? $error->getMessage() : 'NULL'; + break; + default: + // handle prefixed dynamic headers + if (strpos($matches[1], 'req_header_') === 0) { + $result = $request->getHeaderLine(substr($matches[1], 11)); + } elseif (strpos($matches[1], 'res_header_') === 0) { + $result = $response + ? $response->getHeaderLine(substr($matches[1], 11)) + : 'NULL'; + } + } + + $cache[$matches[1]] = $result; + return $result; + }, + $this->template + ); + } + + /** + * Get headers from message as string + * + * @return string + */ + private function headers(MessageInterface $message) + { + $result = ''; + foreach ($message->getHeaders() as $name => $values) { + $result .= $name . ': ' . implode(', ', $values) . "\r\n"; + } + + return trim($result); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Middleware.php b/vendor/guzzlehttp/guzzle/src/Middleware.php new file mode 100644 index 000000000..bffc1974b --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Middleware.php @@ -0,0 +1,254 @@ +withCookieHeader($request); + return $handler($request, $options) + ->then( + function ($response) use ($cookieJar, $request) { + $cookieJar->extractCookies($request, $response); + return $response; + } + ); + }; + }; + } + + /** + * Middleware that throws exceptions for 4xx or 5xx responses when the + * "http_error" request option is set to true. + * + * @return callable Returns a function that accepts the next handler. + */ + public static function httpErrors() + { + return function (callable $handler) { + return function ($request, array $options) use ($handler) { + if (empty($options['http_errors'])) { + return $handler($request, $options); + } + return $handler($request, $options)->then( + function (ResponseInterface $response) use ($request) { + $code = $response->getStatusCode(); + if ($code < 400) { + return $response; + } + throw RequestException::create($request, $response); + } + ); + }; + }; + } + + /** + * Middleware that pushes history data to an ArrayAccess container. + * + * @param array|\ArrayAccess $container Container to hold the history (by reference). + * + * @return callable Returns a function that accepts the next handler. + * @throws \InvalidArgumentException if container is not an array or ArrayAccess. + */ + public static function history(&$container) + { + if (!is_array($container) && !$container instanceof \ArrayAccess) { + throw new \InvalidArgumentException('history container must be an array or object implementing ArrayAccess'); + } + + return function (callable $handler) use (&$container) { + return function ($request, array $options) use ($handler, &$container) { + return $handler($request, $options)->then( + function ($value) use ($request, &$container, $options) { + $container[] = [ + 'request' => $request, + 'response' => $value, + 'error' => null, + 'options' => $options + ]; + return $value; + }, + function ($reason) use ($request, &$container, $options) { + $container[] = [ + 'request' => $request, + 'response' => null, + 'error' => $reason, + 'options' => $options + ]; + return \GuzzleHttp\Promise\rejection_for($reason); + } + ); + }; + }; + } + + /** + * Middleware that invokes a callback before and after sending a request. + * + * The provided listener cannot modify or alter the response. It simply + * "taps" into the chain to be notified before returning the promise. The + * before listener accepts a request and options array, and the after + * listener accepts a request, options array, and response promise. + * + * @param callable $before Function to invoke before forwarding the request. + * @param callable $after Function invoked after forwarding. + * + * @return callable Returns a function that accepts the next handler. + */ + public static function tap(callable $before = null, callable $after = null) + { + return function (callable $handler) use ($before, $after) { + return function ($request, array $options) use ($handler, $before, $after) { + if ($before) { + $before($request, $options); + } + $response = $handler($request, $options); + if ($after) { + $after($request, $options, $response); + } + return $response; + }; + }; + } + + /** + * Middleware that handles request redirects. + * + * @return callable Returns a function that accepts the next handler. + */ + public static function redirect() + { + return function (callable $handler) { + return new RedirectMiddleware($handler); + }; + } + + /** + * Middleware that retries requests based on the boolean result of + * invoking the provided "decider" function. + * + * If no delay function is provided, a simple implementation of exponential + * backoff will be utilized. + * + * @param callable $decider Function that accepts the number of retries, + * a request, [response], and [exception] and + * returns true if the request is to be retried. + * @param callable $delay Function that accepts the number of retries and + * returns the number of milliseconds to delay. + * + * @return callable Returns a function that accepts the next handler. + */ + public static function retry(callable $decider, callable $delay = null) + { + return function (callable $handler) use ($decider, $delay) { + return new RetryMiddleware($decider, $handler, $delay); + }; + } + + /** + * Middleware that logs requests, responses, and errors using a message + * formatter. + * + * @param LoggerInterface $logger Logs messages. + * @param MessageFormatter $formatter Formatter used to create message strings. + * @param string $logLevel Level at which to log requests. + * + * @return callable Returns a function that accepts the next handler. + */ + public static function log(LoggerInterface $logger, MessageFormatter $formatter, $logLevel = 'info' /* \Psr\Log\LogLevel::INFO */) + { + return function (callable $handler) use ($logger, $formatter, $logLevel) { + return function ($request, array $options) use ($handler, $logger, $formatter, $logLevel) { + return $handler($request, $options)->then( + function ($response) use ($logger, $request, $formatter, $logLevel) { + $message = $formatter->format($request, $response); + $logger->log($logLevel, $message); + return $response; + }, + function ($reason) use ($logger, $request, $formatter) { + $response = $reason instanceof RequestException + ? $reason->getResponse() + : null; + $message = $formatter->format($request, $response, $reason); + $logger->notice($message); + return \GuzzleHttp\Promise\rejection_for($reason); + } + ); + }; + }; + } + + /** + * This middleware adds a default content-type if possible, a default + * content-length or transfer-encoding header, and the expect header. + * + * @return callable + */ + public static function prepareBody() + { + return function (callable $handler) { + return new PrepareBodyMiddleware($handler); + }; + } + + /** + * Middleware that applies a map function to the request before passing to + * the next handler. + * + * @param callable $fn Function that accepts a RequestInterface and returns + * a RequestInterface. + * @return callable + */ + public static function mapRequest(callable $fn) + { + return function (callable $handler) use ($fn) { + return function ($request, array $options) use ($handler, $fn) { + return $handler($fn($request), $options); + }; + }; + } + + /** + * Middleware that applies a map function to the resolved promise's + * response. + * + * @param callable $fn Function that accepts a ResponseInterface and + * returns a ResponseInterface. + * @return callable + */ + public static function mapResponse(callable $fn) + { + return function (callable $handler) use ($fn) { + return function ($request, array $options) use ($handler, $fn) { + return $handler($request, $options)->then($fn); + }; + }; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Pool.php b/vendor/guzzlehttp/guzzle/src/Pool.php new file mode 100644 index 000000000..5838db4f4 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Pool.php @@ -0,0 +1,134 @@ + $rfn) { + if ($rfn instanceof RequestInterface) { + yield $key => $client->sendAsync($rfn, $opts); + } elseif (is_callable($rfn)) { + yield $key => $rfn($opts); + } else { + throw new \InvalidArgumentException('Each value yielded by ' + . 'the iterator must be a Psr7\Http\Message\RequestInterface ' + . 'or a callable that returns a promise that fulfills ' + . 'with a Psr7\Message\Http\ResponseInterface object.'); + } + } + }; + + $this->each = new EachPromise($requests(), $config); + } + + /** + * Get promise + * + * @return PromiseInterface + */ + public function promise() + { + return $this->each->promise(); + } + + /** + * Sends multiple requests concurrently and returns an array of responses + * and exceptions that uses the same ordering as the provided requests. + * + * IMPORTANT: This method keeps every request and response in memory, and + * as such, is NOT recommended when sending a large number or an + * indeterminate number of requests concurrently. + * + * @param ClientInterface $client Client used to send the requests + * @param array|\Iterator $requests Requests to send concurrently. + * @param array $options Passes through the options available in + * {@see GuzzleHttp\Pool::__construct} + * + * @return array Returns an array containing the response or an exception + * in the same order that the requests were sent. + * @throws \InvalidArgumentException if the event format is incorrect. + */ + public static function batch( + ClientInterface $client, + $requests, + array $options = [] + ) { + $res = []; + self::cmpCallback($options, 'fulfilled', $res); + self::cmpCallback($options, 'rejected', $res); + $pool = new static($client, $requests, $options); + $pool->promise()->wait(); + ksort($res); + + return $res; + } + + /** + * Execute callback(s) + * + * @return void + */ + private static function cmpCallback(array &$options, $name, array &$results) + { + if (!isset($options[$name])) { + $options[$name] = function ($v, $k) use (&$results) { + $results[$k] = $v; + }; + } else { + $currentFn = $options[$name]; + $options[$name] = function ($v, $k) use (&$results, $currentFn) { + $currentFn($v, $k); + $results[$k] = $v; + }; + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php b/vendor/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php new file mode 100644 index 000000000..568a1e906 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php @@ -0,0 +1,111 @@ +nextHandler = $nextHandler; + } + + /** + * @param RequestInterface $request + * @param array $options + * + * @return PromiseInterface + */ + public function __invoke(RequestInterface $request, array $options) + { + $fn = $this->nextHandler; + + // Don't do anything if the request has no body. + if ($request->getBody()->getSize() === 0) { + return $fn($request, $options); + } + + $modify = []; + + // Add a default content-type if possible. + if (!$request->hasHeader('Content-Type')) { + if ($uri = $request->getBody()->getMetadata('uri')) { + if ($type = Psr7\mimetype_from_filename($uri)) { + $modify['set_headers']['Content-Type'] = $type; + } + } + } + + // Add a default content-length or transfer-encoding header. + if (!$request->hasHeader('Content-Length') + && !$request->hasHeader('Transfer-Encoding') + ) { + $size = $request->getBody()->getSize(); + if ($size !== null) { + $modify['set_headers']['Content-Length'] = $size; + } else { + $modify['set_headers']['Transfer-Encoding'] = 'chunked'; + } + } + + // Add the expect header if needed. + $this->addExpectHeader($request, $options, $modify); + + return $fn(Psr7\modify_request($request, $modify), $options); + } + + /** + * Add expect header + * + * @return void + */ + private function addExpectHeader( + RequestInterface $request, + array $options, + array &$modify + ) { + // Determine if the Expect header should be used + if ($request->hasHeader('Expect')) { + return; + } + + $expect = isset($options['expect']) ? $options['expect'] : null; + + // Return if disabled or if you're not using HTTP/1.1 or HTTP/2.0 + if ($expect === false || $request->getProtocolVersion() < 1.1) { + return; + } + + // The expect header is unconditionally enabled + if ($expect === true) { + $modify['set_headers']['Expect'] = '100-Continue'; + return; + } + + // By default, send the expect header when the payload is > 1mb + if ($expect === null) { + $expect = 1048576; + } + + // Always add if the body cannot be rewound, the size cannot be + // determined, or the size is greater than the cutoff threshold + $body = $request->getBody(); + $size = $body->getSize(); + + if ($size === null || $size >= (int) $expect || !$body->isSeekable()) { + $modify['set_headers']['Expect'] = '100-Continue'; + } + } +} diff --git a/vendor/guzzlehttp/guzzle/src/RedirectMiddleware.php b/vendor/guzzlehttp/guzzle/src/RedirectMiddleware.php new file mode 100644 index 000000000..e4644b7ac --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/RedirectMiddleware.php @@ -0,0 +1,255 @@ + 5, + 'protocols' => ['http', 'https'], + 'strict' => false, + 'referer' => false, + 'track_redirects' => false, + ]; + + /** @var callable */ + private $nextHandler; + + /** + * @param callable $nextHandler Next handler to invoke. + */ + public function __construct(callable $nextHandler) + { + $this->nextHandler = $nextHandler; + } + + /** + * @param RequestInterface $request + * @param array $options + * + * @return PromiseInterface + */ + public function __invoke(RequestInterface $request, array $options) + { + $fn = $this->nextHandler; + + if (empty($options['allow_redirects'])) { + return $fn($request, $options); + } + + if ($options['allow_redirects'] === true) { + $options['allow_redirects'] = self::$defaultSettings; + } elseif (!is_array($options['allow_redirects'])) { + throw new \InvalidArgumentException('allow_redirects must be true, false, or array'); + } else { + // Merge the default settings with the provided settings + $options['allow_redirects'] += self::$defaultSettings; + } + + if (empty($options['allow_redirects']['max'])) { + return $fn($request, $options); + } + + return $fn($request, $options) + ->then(function (ResponseInterface $response) use ($request, $options) { + return $this->checkRedirect($request, $options, $response); + }); + } + + /** + * @param RequestInterface $request + * @param array $options + * @param ResponseInterface $response + * + * @return ResponseInterface|PromiseInterface + */ + public function checkRedirect( + RequestInterface $request, + array $options, + ResponseInterface $response + ) { + if (substr($response->getStatusCode(), 0, 1) != '3' + || !$response->hasHeader('Location') + ) { + return $response; + } + + $this->guardMax($request, $options); + $nextRequest = $this->modifyRequest($request, $options, $response); + + if (isset($options['allow_redirects']['on_redirect'])) { + call_user_func( + $options['allow_redirects']['on_redirect'], + $request, + $response, + $nextRequest->getUri() + ); + } + + /** @var PromiseInterface|ResponseInterface $promise */ + $promise = $this($nextRequest, $options); + + // Add headers to be able to track history of redirects. + if (!empty($options['allow_redirects']['track_redirects'])) { + return $this->withTracking( + $promise, + (string) $nextRequest->getUri(), + $response->getStatusCode() + ); + } + + return $promise; + } + + /** + * Enable tracking on promise. + * + * @return PromiseInterface + */ + private function withTracking(PromiseInterface $promise, $uri, $statusCode) + { + return $promise->then( + function (ResponseInterface $response) use ($uri, $statusCode) { + // Note that we are pushing to the front of the list as this + // would be an earlier response than what is currently present + // in the history header. + $historyHeader = $response->getHeader(self::HISTORY_HEADER); + $statusHeader = $response->getHeader(self::STATUS_HISTORY_HEADER); + array_unshift($historyHeader, $uri); + array_unshift($statusHeader, $statusCode); + return $response->withHeader(self::HISTORY_HEADER, $historyHeader) + ->withHeader(self::STATUS_HISTORY_HEADER, $statusHeader); + } + ); + } + + /** + * Check for too many redirects + * + * @return void + * + * @throws TooManyRedirectsException Too many redirects. + */ + private function guardMax(RequestInterface $request, array &$options) + { + $current = isset($options['__redirect_count']) + ? $options['__redirect_count'] + : 0; + $options['__redirect_count'] = $current + 1; + $max = $options['allow_redirects']['max']; + + if ($options['__redirect_count'] > $max) { + throw new TooManyRedirectsException( + "Will not follow more than {$max} redirects", + $request + ); + } + } + + /** + * @param RequestInterface $request + * @param array $options + * @param ResponseInterface $response + * + * @return RequestInterface + */ + public function modifyRequest( + RequestInterface $request, + array $options, + ResponseInterface $response + ) { + // Request modifications to apply. + $modify = []; + $protocols = $options['allow_redirects']['protocols']; + + // Use a GET request if this is an entity enclosing request and we are + // not forcing RFC compliance, but rather emulating what all browsers + // would do. + $statusCode = $response->getStatusCode(); + if ($statusCode == 303 || + ($statusCode <= 302 && !$options['allow_redirects']['strict']) + ) { + $modify['method'] = 'GET'; + $modify['body'] = ''; + } + + $uri = $this->redirectUri($request, $response, $protocols); + if (isset($options['idn_conversion']) && ($options['idn_conversion'] !== false)) { + $idnOptions = ($options['idn_conversion'] === true) ? IDNA_DEFAULT : $options['idn_conversion']; + $uri = Utils::idnUriConvert($uri, $idnOptions); + } + + $modify['uri'] = $uri; + Psr7\rewind_body($request); + + // Add the Referer header if it is told to do so and only + // add the header if we are not redirecting from https to http. + if ($options['allow_redirects']['referer'] + && $modify['uri']->getScheme() === $request->getUri()->getScheme() + ) { + $uri = $request->getUri()->withUserInfo(''); + $modify['set_headers']['Referer'] = (string) $uri; + } else { + $modify['remove_headers'][] = 'Referer'; + } + + // Remove Authorization header if host is different. + if ($request->getUri()->getHost() !== $modify['uri']->getHost()) { + $modify['remove_headers'][] = 'Authorization'; + } + + return Psr7\modify_request($request, $modify); + } + + /** + * Set the appropriate URL on the request based on the location header + * + * @param RequestInterface $request + * @param ResponseInterface $response + * @param array $protocols + * + * @return UriInterface + */ + private function redirectUri( + RequestInterface $request, + ResponseInterface $response, + array $protocols + ) { + $location = Psr7\UriResolver::resolve( + $request->getUri(), + new Psr7\Uri($response->getHeaderLine('Location')) + ); + + // Ensure that the redirect URI is allowed based on the protocols. + if (!in_array($location->getScheme(), $protocols)) { + throw new BadResponseException( + sprintf( + 'Redirect URI, %s, does not use one of the allowed redirect protocols: %s', + $location, + implode(', ', $protocols) + ), + $request, + $response + ); + } + + return $location; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/RequestOptions.php b/vendor/guzzlehttp/guzzle/src/RequestOptions.php new file mode 100644 index 000000000..355f658f0 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/RequestOptions.php @@ -0,0 +1,263 @@ +decider = $decider; + $this->nextHandler = $nextHandler; + $this->delay = $delay ?: __CLASS__ . '::exponentialDelay'; + } + + /** + * Default exponential backoff delay function. + * + * @param int $retries + * + * @return int milliseconds. + */ + public static function exponentialDelay($retries) + { + return (int) pow(2, $retries - 1) * 1000; + } + + /** + * @param RequestInterface $request + * @param array $options + * + * @return PromiseInterface + */ + public function __invoke(RequestInterface $request, array $options) + { + if (!isset($options['retries'])) { + $options['retries'] = 0; + } + + $fn = $this->nextHandler; + return $fn($request, $options) + ->then( + $this->onFulfilled($request, $options), + $this->onRejected($request, $options) + ); + } + + /** + * Execute fulfilled closure + * + * @return mixed + */ + private function onFulfilled(RequestInterface $req, array $options) + { + return function ($value) use ($req, $options) { + if (!call_user_func( + $this->decider, + $options['retries'], + $req, + $value, + null + )) { + return $value; + } + return $this->doRetry($req, $options, $value); + }; + } + + /** + * Execute rejected closure + * + * @return callable + */ + private function onRejected(RequestInterface $req, array $options) + { + return function ($reason) use ($req, $options) { + if (!call_user_func( + $this->decider, + $options['retries'], + $req, + null, + $reason + )) { + return \GuzzleHttp\Promise\rejection_for($reason); + } + return $this->doRetry($req, $options); + }; + } + + /** + * @return self + */ + private function doRetry(RequestInterface $request, array $options, ResponseInterface $response = null) + { + $options['delay'] = call_user_func($this->delay, ++$options['retries'], $response); + + return $this($request, $options); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/TransferStats.php b/vendor/guzzlehttp/guzzle/src/TransferStats.php new file mode 100644 index 000000000..87fb3c001 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/TransferStats.php @@ -0,0 +1,126 @@ +request = $request; + $this->response = $response; + $this->transferTime = $transferTime; + $this->handlerErrorData = $handlerErrorData; + $this->handlerStats = $handlerStats; + } + + /** + * @return RequestInterface + */ + public function getRequest() + { + return $this->request; + } + + /** + * Returns the response that was received (if any). + * + * @return ResponseInterface|null + */ + public function getResponse() + { + return $this->response; + } + + /** + * Returns true if a response was received. + * + * @return bool + */ + public function hasResponse() + { + return $this->response !== null; + } + + /** + * Gets handler specific error data. + * + * This might be an exception, a integer representing an error code, or + * anything else. Relying on this value assumes that you know what handler + * you are using. + * + * @return mixed + */ + public function getHandlerErrorData() + { + return $this->handlerErrorData; + } + + /** + * Get the effective URI the request was sent to. + * + * @return UriInterface + */ + public function getEffectiveUri() + { + return $this->request->getUri(); + } + + /** + * Get the estimated time the request was being transferred by the handler. + * + * @return float|null Time in seconds. + */ + public function getTransferTime() + { + return $this->transferTime; + } + + /** + * Gets an array of all of the handler specific transfer data. + * + * @return array + */ + public function getHandlerStats() + { + return $this->handlerStats; + } + + /** + * Get a specific handler statistic from the handler by name. + * + * @param string $stat Handler specific transfer stat to retrieve. + * + * @return mixed|null + */ + public function getHandlerStat($stat) + { + return isset($this->handlerStats[$stat]) + ? $this->handlerStats[$stat] + : null; + } +} diff --git a/vendor/guzzlehttp/guzzle/src/UriTemplate.php b/vendor/guzzlehttp/guzzle/src/UriTemplate.php new file mode 100644 index 000000000..96dcfd09c --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/UriTemplate.php @@ -0,0 +1,237 @@ + ['prefix' => '', 'joiner' => ',', 'query' => false], + '+' => ['prefix' => '', 'joiner' => ',', 'query' => false], + '#' => ['prefix' => '#', 'joiner' => ',', 'query' => false], + '.' => ['prefix' => '.', 'joiner' => '.', 'query' => false], + '/' => ['prefix' => '/', 'joiner' => '/', 'query' => false], + ';' => ['prefix' => ';', 'joiner' => ';', 'query' => true], + '?' => ['prefix' => '?', 'joiner' => '&', 'query' => true], + '&' => ['prefix' => '&', 'joiner' => '&', 'query' => true] + ]; + + /** @var array Delimiters */ + private static $delims = [':', '/', '?', '#', '[', ']', '@', '!', '$', + '&', '\'', '(', ')', '*', '+', ',', ';', '=']; + + /** @var array Percent encoded delimiters */ + private static $delimsPct = ['%3A', '%2F', '%3F', '%23', '%5B', '%5D', + '%40', '%21', '%24', '%26', '%27', '%28', '%29', '%2A', '%2B', '%2C', + '%3B', '%3D']; + + public function expand($template, array $variables) + { + if (false === strpos($template, '{')) { + return $template; + } + + $this->template = $template; + $this->variables = $variables; + + return preg_replace_callback( + '/\{([^\}]+)\}/', + [$this, 'expandMatch'], + $this->template + ); + } + + /** + * Parse an expression into parts + * + * @param string $expression Expression to parse + * + * @return array Returns an associative array of parts + */ + private function parseExpression($expression) + { + $result = []; + + if (isset(self::$operatorHash[$expression[0]])) { + $result['operator'] = $expression[0]; + $expression = substr($expression, 1); + } else { + $result['operator'] = ''; + } + + foreach (explode(',', $expression) as $value) { + $value = trim($value); + $varspec = []; + if ($colonPos = strpos($value, ':')) { + $varspec['value'] = substr($value, 0, $colonPos); + $varspec['modifier'] = ':'; + $varspec['position'] = (int) substr($value, $colonPos + 1); + } elseif (substr($value, -1) === '*') { + $varspec['modifier'] = '*'; + $varspec['value'] = substr($value, 0, -1); + } else { + $varspec['value'] = (string) $value; + $varspec['modifier'] = ''; + } + $result['values'][] = $varspec; + } + + return $result; + } + + /** + * Process an expansion + * + * @param array $matches Matches met in the preg_replace_callback + * + * @return string Returns the replacement string + */ + private function expandMatch(array $matches) + { + static $rfc1738to3986 = ['+' => '%20', '%7e' => '~']; + + $replacements = []; + $parsed = self::parseExpression($matches[1]); + $prefix = self::$operatorHash[$parsed['operator']]['prefix']; + $joiner = self::$operatorHash[$parsed['operator']]['joiner']; + $useQuery = self::$operatorHash[$parsed['operator']]['query']; + + foreach ($parsed['values'] as $value) { + if (!isset($this->variables[$value['value']])) { + continue; + } + + $variable = $this->variables[$value['value']]; + $actuallyUseQuery = $useQuery; + $expanded = ''; + + if (is_array($variable)) { + $isAssoc = $this->isAssoc($variable); + $kvp = []; + foreach ($variable as $key => $var) { + if ($isAssoc) { + $key = rawurlencode($key); + $isNestedArray = is_array($var); + } else { + $isNestedArray = false; + } + + if (!$isNestedArray) { + $var = rawurlencode($var); + if ($parsed['operator'] === '+' || + $parsed['operator'] === '#' + ) { + $var = $this->decodeReserved($var); + } + } + + if ($value['modifier'] === '*') { + if ($isAssoc) { + if ($isNestedArray) { + // Nested arrays must allow for deeply nested + // structures. + $var = strtr( + http_build_query([$key => $var]), + $rfc1738to3986 + ); + } else { + $var = $key . '=' . $var; + } + } elseif ($key > 0 && $actuallyUseQuery) { + $var = $value['value'] . '=' . $var; + } + } + + $kvp[$key] = $var; + } + + if (empty($variable)) { + $actuallyUseQuery = false; + } elseif ($value['modifier'] === '*') { + $expanded = implode($joiner, $kvp); + if ($isAssoc) { + // Don't prepend the value name when using the explode + // modifier with an associative array. + $actuallyUseQuery = false; + } + } else { + if ($isAssoc) { + // When an associative array is encountered and the + // explode modifier is not set, then the result must be + // a comma separated list of keys followed by their + // respective values. + foreach ($kvp as $k => &$v) { + $v = $k . ',' . $v; + } + } + $expanded = implode(',', $kvp); + } + } else { + if ($value['modifier'] === ':') { + $variable = substr($variable, 0, $value['position']); + } + $expanded = rawurlencode($variable); + if ($parsed['operator'] === '+' || $parsed['operator'] === '#') { + $expanded = $this->decodeReserved($expanded); + } + } + + if ($actuallyUseQuery) { + if (!$expanded && $joiner !== '&') { + $expanded = $value['value']; + } else { + $expanded = $value['value'] . '=' . $expanded; + } + } + + $replacements[] = $expanded; + } + + $ret = implode($joiner, $replacements); + if ($ret && $prefix) { + return $prefix . $ret; + } + + return $ret; + } + + /** + * Determines if an array is associative. + * + * This makes the assumption that input arrays are sequences or hashes. + * This assumption is a tradeoff for accuracy in favor of speed, but it + * should work in almost every case where input is supplied for a URI + * template. + * + * @param array $array Array to check + * + * @return bool + */ + private function isAssoc(array $array) + { + return $array && array_keys($array)[0] !== 0; + } + + /** + * Removes percent encoding on reserved characters (used with + and # + * modifiers). + * + * @param string $string String to fix + * + * @return string + */ + private function decodeReserved($string) + { + return str_replace(self::$delimsPct, self::$delims, $string); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/Utils.php b/vendor/guzzlehttp/guzzle/src/Utils.php new file mode 100644 index 000000000..c698acbf0 --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/Utils.php @@ -0,0 +1,92 @@ +getHost()) { + $asciiHost = self::idnToAsci($uri->getHost(), $options, $info); + if ($asciiHost === false) { + $errorBitSet = isset($info['errors']) ? $info['errors'] : 0; + + $errorConstants = array_filter(array_keys(get_defined_constants()), function ($name) { + return substr($name, 0, 11) === 'IDNA_ERROR_'; + }); + + $errors = []; + foreach ($errorConstants as $errorConstant) { + if ($errorBitSet & constant($errorConstant)) { + $errors[] = $errorConstant; + } + } + + $errorMessage = 'IDN conversion failed'; + if ($errors) { + $errorMessage .= ' (errors: ' . implode(', ', $errors) . ')'; + } + + throw new InvalidArgumentException($errorMessage); + } else { + if ($uri->getHost() !== $asciiHost) { + // Replace URI only if the ASCII version is different + $uri = $uri->withHost($asciiHost); + } + } + } + + return $uri; + } + + /** + * @param string $domain + * @param int $options + * @param array $info + * + * @return string|false + */ + private static function idnToAsci($domain, $options, &$info = []) + { + if (\preg_match('%^[ -~]+$%', $domain) === 1) { + return $domain; + } + + if (\extension_loaded('intl') && defined('INTL_IDNA_VARIANT_UTS46')) { + return \idn_to_ascii($domain, $options, INTL_IDNA_VARIANT_UTS46, $info); + } + + /* + * The Idn class is marked as @internal. Verify that class and method exists. + */ + if (method_exists(Idn::class, 'idn_to_ascii')) { + return Idn::idn_to_ascii($domain, $options, Idn::INTL_IDNA_VARIANT_UTS46, $info); + } + + throw new \RuntimeException('ext-intl or symfony/polyfill-intl-idn not loaded or too old'); + } +} diff --git a/vendor/guzzlehttp/guzzle/src/functions.php b/vendor/guzzlehttp/guzzle/src/functions.php new file mode 100644 index 000000000..c2afd8c7b --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/functions.php @@ -0,0 +1,334 @@ +expand($template, $variables); +} + +/** + * Debug function used to describe the provided value type and class. + * + * @param mixed $input + * + * @return string Returns a string containing the type of the variable and + * if a class is provided, the class name. + */ +function describe_type($input) +{ + switch (gettype($input)) { + case 'object': + return 'object(' . get_class($input) . ')'; + case 'array': + return 'array(' . count($input) . ')'; + default: + ob_start(); + var_dump($input); + // normalize float vs double + return str_replace('double(', 'float(', rtrim(ob_get_clean())); + } +} + +/** + * Parses an array of header lines into an associative array of headers. + * + * @param iterable $lines Header lines array of strings in the following + * format: "Name: Value" + * @return array + */ +function headers_from_lines($lines) +{ + $headers = []; + + foreach ($lines as $line) { + $parts = explode(':', $line, 2); + $headers[trim($parts[0])][] = isset($parts[1]) + ? trim($parts[1]) + : null; + } + + return $headers; +} + +/** + * Returns a debug stream based on the provided variable. + * + * @param mixed $value Optional value + * + * @return resource + */ +function debug_resource($value = null) +{ + if (is_resource($value)) { + return $value; + } elseif (defined('STDOUT')) { + return STDOUT; + } + + return fopen('php://output', 'w'); +} + +/** + * Chooses and creates a default handler to use based on the environment. + * + * The returned handler is not wrapped by any default middlewares. + * + * @return callable Returns the best handler for the given system. + * @throws \RuntimeException if no viable Handler is available. + */ +function choose_handler() +{ + $handler = null; + if (function_exists('curl_multi_exec') && function_exists('curl_exec')) { + $handler = Proxy::wrapSync(new CurlMultiHandler(), new CurlHandler()); + } elseif (function_exists('curl_exec')) { + $handler = new CurlHandler(); + } elseif (function_exists('curl_multi_exec')) { + $handler = new CurlMultiHandler(); + } + + if (ini_get('allow_url_fopen')) { + $handler = $handler + ? Proxy::wrapStreaming($handler, new StreamHandler()) + : new StreamHandler(); + } elseif (!$handler) { + throw new \RuntimeException('GuzzleHttp requires cURL, the ' + . 'allow_url_fopen ini setting, or a custom HTTP handler.'); + } + + return $handler; +} + +/** + * Get the default User-Agent string to use with Guzzle + * + * @return string + */ +function default_user_agent() +{ + static $defaultAgent = ''; + + if (!$defaultAgent) { + $defaultAgent = 'GuzzleHttp/' . Client::VERSION; + if (extension_loaded('curl') && function_exists('curl_version')) { + $defaultAgent .= ' curl/' . \curl_version()['version']; + } + $defaultAgent .= ' PHP/' . PHP_VERSION; + } + + return $defaultAgent; +} + +/** + * Returns the default cacert bundle for the current system. + * + * First, the openssl.cafile and curl.cainfo php.ini settings are checked. + * If those settings are not configured, then the common locations for + * bundles found on Red Hat, CentOS, Fedora, Ubuntu, Debian, FreeBSD, OS X + * and Windows are checked. If any of these file locations are found on + * disk, they will be utilized. + * + * Note: the result of this function is cached for subsequent calls. + * + * @return string + * @throws \RuntimeException if no bundle can be found. + */ +function default_ca_bundle() +{ + static $cached = null; + static $cafiles = [ + // Red Hat, CentOS, Fedora (provided by the ca-certificates package) + '/etc/pki/tls/certs/ca-bundle.crt', + // Ubuntu, Debian (provided by the ca-certificates package) + '/etc/ssl/certs/ca-certificates.crt', + // FreeBSD (provided by the ca_root_nss package) + '/usr/local/share/certs/ca-root-nss.crt', + // SLES 12 (provided by the ca-certificates package) + '/var/lib/ca-certificates/ca-bundle.pem', + // OS X provided by homebrew (using the default path) + '/usr/local/etc/openssl/cert.pem', + // Google app engine + '/etc/ca-certificates.crt', + // Windows? + 'C:\\windows\\system32\\curl-ca-bundle.crt', + 'C:\\windows\\curl-ca-bundle.crt', + ]; + + if ($cached) { + return $cached; + } + + if ($ca = ini_get('openssl.cafile')) { + return $cached = $ca; + } + + if ($ca = ini_get('curl.cainfo')) { + return $cached = $ca; + } + + foreach ($cafiles as $filename) { + if (file_exists($filename)) { + return $cached = $filename; + } + } + + throw new \RuntimeException( + <<< EOT +No system CA bundle could be found in any of the the common system locations. +PHP versions earlier than 5.6 are not properly configured to use the system's +CA bundle by default. In order to verify peer certificates, you will need to +supply the path on disk to a certificate bundle to the 'verify' request +option: http://docs.guzzlephp.org/en/latest/clients.html#verify. If you do not +need a specific certificate bundle, then Mozilla provides a commonly used CA +bundle which can be downloaded here (provided by the maintainer of cURL): +https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt. Once +you have a CA bundle available on disk, you can set the 'openssl.cafile' PHP +ini setting to point to the path to the file, allowing you to omit the 'verify' +request option. See http://curl.haxx.se/docs/sslcerts.html for more +information. +EOT + ); +} + +/** + * Creates an associative array of lowercase header names to the actual + * header casing. + * + * @param array $headers + * + * @return array + */ +function normalize_header_keys(array $headers) +{ + $result = []; + foreach (array_keys($headers) as $key) { + $result[strtolower($key)] = $key; + } + + return $result; +} + +/** + * Returns true if the provided host matches any of the no proxy areas. + * + * This method will strip a port from the host if it is present. Each pattern + * can be matched with an exact match (e.g., "foo.com" == "foo.com") or a + * partial match: (e.g., "foo.com" == "baz.foo.com" and ".foo.com" == + * "baz.foo.com", but ".foo.com" != "foo.com"). + * + * Areas are matched in the following cases: + * 1. "*" (without quotes) always matches any hosts. + * 2. An exact match. + * 3. The area starts with "." and the area is the last part of the host. e.g. + * '.mit.edu' will match any host that ends with '.mit.edu'. + * + * @param string $host Host to check against the patterns. + * @param array $noProxyArray An array of host patterns. + * + * @return bool + */ +function is_host_in_noproxy($host, array $noProxyArray) +{ + if (strlen($host) === 0) { + throw new \InvalidArgumentException('Empty host provided'); + } + + // Strip port if present. + if (strpos($host, ':')) { + $host = explode($host, ':', 2)[0]; + } + + foreach ($noProxyArray as $area) { + // Always match on wildcards. + if ($area === '*') { + return true; + } elseif (empty($area)) { + // Don't match on empty values. + continue; + } elseif ($area === $host) { + // Exact matches. + return true; + } else { + // Special match if the area when prefixed with ".". Remove any + // existing leading "." and add a new leading ".". + $area = '.' . ltrim($area, '.'); + if (substr($host, -(strlen($area))) === $area) { + return true; + } + } + } + + return false; +} + +/** + * Wrapper for json_decode that throws when an error occurs. + * + * @param string $json JSON data to parse + * @param bool $assoc When true, returned objects will be converted + * into associative arrays. + * @param int $depth User specified recursion depth. + * @param int $options Bitmask of JSON decode options. + * + * @return mixed + * @throws Exception\InvalidArgumentException if the JSON cannot be decoded. + * @link http://www.php.net/manual/en/function.json-decode.php + */ +function json_decode($json, $assoc = false, $depth = 512, $options = 0) +{ + $data = \json_decode($json, $assoc, $depth, $options); + if (JSON_ERROR_NONE !== json_last_error()) { + throw new Exception\InvalidArgumentException( + 'json_decode error: ' . json_last_error_msg() + ); + } + + return $data; +} + +/** + * Wrapper for JSON encoding that throws when an error occurs. + * + * @param mixed $value The value being encoded + * @param int $options JSON encode option bitmask + * @param int $depth Set the maximum depth. Must be greater than zero. + * + * @return string + * @throws Exception\InvalidArgumentException if the JSON cannot be encoded. + * @link http://www.php.net/manual/en/function.json-encode.php + */ +function json_encode($value, $options = 0, $depth = 512) +{ + $json = \json_encode($value, $options, $depth); + if (JSON_ERROR_NONE !== json_last_error()) { + throw new Exception\InvalidArgumentException( + 'json_encode error: ' . json_last_error_msg() + ); + } + + return $json; +} diff --git a/vendor/guzzlehttp/guzzle/src/functions_include.php b/vendor/guzzlehttp/guzzle/src/functions_include.php new file mode 100644 index 000000000..a93393acc --- /dev/null +++ b/vendor/guzzlehttp/guzzle/src/functions_include.php @@ -0,0 +1,6 @@ +setRiskyAllowed(true) + ->setRules([ + '@PSR2' => true, + 'array_syntax' => ['syntax' => 'short'], + 'binary_operator_spaces' => ['operators' => ['=>' => null]], + 'blank_line_after_opening_tag' => true, + 'class_attributes_separation' => ['elements' => ['method']], + 'compact_nullable_typehint' => true, + 'concat_space' => ['spacing' => 'one'], + 'declare_equal_normalize' => ['space' => 'none'], + 'declare_strict_types' => false, + 'dir_constant' => true, + 'final_static_access' => true, + 'fully_qualified_strict_types' => true, + 'function_to_constant' => true, + 'function_typehint_space' => true, + 'header_comment' => false, + 'is_null' => ['use_yoda_style' => false], + 'list_syntax' => ['syntax' => 'short'], + 'lowercase_cast' => true, + 'magic_method_casing' => true, + 'modernize_types_casting' => true, + 'multiline_comment_opening_closing' => true, + //'native_constant_invocation' => true, + 'no_alias_functions' => true, + 'no_alternative_syntax' => true, + 'no_blank_lines_after_phpdoc' => true, + 'no_empty_comment' => true, + 'no_empty_phpdoc' => true, + 'no_extra_blank_lines' => true, + 'no_leading_import_slash' => true, + 'no_leading_namespace_whitespace' => true, + 'no_spaces_around_offset' => true, + 'no_superfluous_phpdoc_tags' => ['allow_mixed' => true], + 'no_trailing_comma_in_singleline_array' => true, + 'no_unneeded_control_parentheses' => true, + 'no_unset_cast' => true, + 'no_unused_imports' => true, + 'no_useless_else' => true, + 'no_useless_return' => true, + 'no_whitespace_in_blank_line' => true, + 'normalize_index_brace' => true, + 'ordered_imports' => true, + 'php_unit_construct' => true, + 'php_unit_dedicate_assert' => ['target' => 'newest'], + 'php_unit_dedicate_assert_internal_type' => ['target' => 'newest'], + 'php_unit_expectation' => ['target' => 'newest'], + 'php_unit_mock' => ['target' => 'newest'], + 'php_unit_mock_short_will_return' => true, + 'php_unit_no_expectation_annotation' => ['target' => 'newest'], + 'php_unit_test_annotation' => ['style' => 'prefix'], + //'php_unit_test_case_static_method_calls' => ['call_type' => 'self'], + 'phpdoc_align' => ['align' => 'vertical'], + //'phpdoc_line_span' => ['method' => 'multi', 'property' => 'multi'], + 'phpdoc_no_package' => true, + 'phpdoc_no_useless_inheritdoc' => true, + 'phpdoc_scalar' => true, + 'phpdoc_separation' => true, + 'phpdoc_single_line_var_spacing' => true, + 'phpdoc_trim' => true, + 'phpdoc_trim_consecutive_blank_line_separation' => true, + 'phpdoc_types' => true, + 'phpdoc_types_order' => ['null_adjustment' => 'always_last', 'sort_algorithm' => 'none'], + 'phpdoc_var_without_name' => true, + 'return_assignment' => true, + 'short_scalar_cast' => true, + 'single_trait_insert_per_statement' => true, + 'standardize_not_equals' => true, + //'static_lambda' => true, + 'ternary_to_null_coalescing' => true, + 'trim_array_spaces' => true, + 'visibility_required' => true, + 'yoda_style' => false, + // 'native_function_invocation' => true, + 'braces' => ['allow_single_line_closure'=>true], + ]) + ->setFinder( + PhpCsFixer\Finder::create() + ->in(__DIR__.'/src') + ->in(__DIR__.'/tests') + ->name('*.php') + ) +; + +return $config; diff --git a/vendor/guzzlehttp/promises/CHANGELOG.md b/vendor/guzzlehttp/promises/CHANGELOG.md new file mode 100644 index 000000000..4b63b2c74 --- /dev/null +++ b/vendor/guzzlehttp/promises/CHANGELOG.md @@ -0,0 +1,81 @@ +# CHANGELOG + + +## 1.4.0 - 2020-09-30 + +### Added + +- Support for PHP 8 +- Optional `$recursive` flag to `all` +- Replaced functions by static methods + +### Fixed + +- Fix empty `each` processing +- Fix promise handling for Iterators of non-unique keys +- Fixed `method_exists` crashes on PHP 8 +- Memory leak on exceptions + + +## 1.3.1 - 2016-12-20 + +### Fixed + +- `wait()` foreign promise compatibility + + +## 1.3.0 - 2016-11-18 + +### Added + +- Adds support for custom task queues. + +### Fixed + +- Fixed coroutine promise memory leak. + + +## 1.2.0 - 2016-05-18 + +### Changed + +- Update to now catch `\Throwable` on PHP 7+ + + +## 1.1.0 - 2016-03-07 + +### Changed + +- Update EachPromise to prevent recurring on a iterator when advancing, as this + could trigger fatal generator errors. +- Update Promise to allow recursive waiting without unwrapping exceptions. + + +## 1.0.3 - 2015-10-15 + +### Changed + +- Update EachPromise to immediately resolve when the underlying promise iterator + is empty. Previously, such a promise would throw an exception when its `wait` + function was called. + + +## 1.0.2 - 2015-05-15 + +### Changed + +- Conditionally require functions.php. + + +## 1.0.1 - 2015-06-24 + +### Changed + +- Updating EachPromise to call next on the underlying promise iterator as late + as possible to ensure that generators that generate new requests based on + callbacks are not iterated until after callbacks are invoked. + + +## 1.0.0 - 2015-05-12 + +- Initial release diff --git a/vendor/guzzlehttp/promises/LICENSE b/vendor/guzzlehttp/promises/LICENSE new file mode 100644 index 000000000..67f91a14c --- /dev/null +++ b/vendor/guzzlehttp/promises/LICENSE @@ -0,0 +1,19 @@ +Copyright (c) 2015-2016 Michael Dowling, https://github.com/mtdowling + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/guzzlehttp/promises/Makefile b/vendor/guzzlehttp/promises/Makefile new file mode 100644 index 000000000..8d5b3ef95 --- /dev/null +++ b/vendor/guzzlehttp/promises/Makefile @@ -0,0 +1,13 @@ +all: clean test + +test: + vendor/bin/phpunit + +coverage: + vendor/bin/phpunit --coverage-html=artifacts/coverage + +view-coverage: + open artifacts/coverage/index.html + +clean: + rm -rf artifacts/* diff --git a/vendor/guzzlehttp/promises/README.md b/vendor/guzzlehttp/promises/README.md new file mode 100644 index 000000000..a95c60594 --- /dev/null +++ b/vendor/guzzlehttp/promises/README.md @@ -0,0 +1,532 @@ +# Guzzle Promises + +[Promises/A+](https://promisesaplus.com/) implementation that handles promise +chaining and resolution iteratively, allowing for "infinite" promise chaining +while keeping the stack size constant. Read [this blog post](https://blog.domenic.me/youre-missing-the-point-of-promises/) +for a general introduction to promises. + +- [Features](#features) +- [Quick start](#quick-start) +- [Synchronous wait](#synchronous-wait) +- [Cancellation](#cancellation) +- [API](#api) + - [Promise](#promise) + - [FulfilledPromise](#fulfilledpromise) + - [RejectedPromise](#rejectedpromise) +- [Promise interop](#promise-interop) +- [Implementation notes](#implementation-notes) + + +# Features + +- [Promises/A+](https://promisesaplus.com/) implementation. +- Promise resolution and chaining is handled iteratively, allowing for + "infinite" promise chaining. +- Promises have a synchronous `wait` method. +- Promises can be cancelled. +- Works with any object that has a `then` function. +- C# style async/await coroutine promises using + `GuzzleHttp\Promise\Coroutine::of()`. + + +# Quick start + +A *promise* represents the eventual result of an asynchronous operation. The +primary way of interacting with a promise is through its `then` method, which +registers callbacks to receive either a promise's eventual value or the reason +why the promise cannot be fulfilled. + + +## Callbacks + +Callbacks are registered with the `then` method by providing an optional +`$onFulfilled` followed by an optional `$onRejected` function. + + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise(); +$promise->then( + // $onFulfilled + function ($value) { + echo 'The promise was fulfilled.'; + }, + // $onRejected + function ($reason) { + echo 'The promise was rejected.'; + } +); +``` + +*Resolving* a promise means that you either fulfill a promise with a *value* or +reject a promise with a *reason*. Resolving a promises triggers callbacks +registered with the promises's `then` method. These callbacks are triggered +only once and in the order in which they were added. + + +## Resolving a promise + +Promises are fulfilled using the `resolve($value)` method. Resolving a promise +with any value other than a `GuzzleHttp\Promise\RejectedPromise` will trigger +all of the onFulfilled callbacks (resolving a promise with a rejected promise +will reject the promise and trigger the `$onRejected` callbacks). + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise(); +$promise + ->then(function ($value) { + // Return a value and don't break the chain + return "Hello, " . $value; + }) + // This then is executed after the first then and receives the value + // returned from the first then. + ->then(function ($value) { + echo $value; + }); + +// Resolving the promise triggers the $onFulfilled callbacks and outputs +// "Hello, reader." +$promise->resolve('reader.'); +``` + + +## Promise forwarding + +Promises can be chained one after the other. Each then in the chain is a new +promise. The return value of a promise is what's forwarded to the next +promise in the chain. Returning a promise in a `then` callback will cause the +subsequent promises in the chain to only be fulfilled when the returned promise +has been fulfilled. The next promise in the chain will be invoked with the +resolved value of the promise. + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise(); +$nextPromise = new Promise(); + +$promise + ->then(function ($value) use ($nextPromise) { + echo $value; + return $nextPromise; + }) + ->then(function ($value) { + echo $value; + }); + +// Triggers the first callback and outputs "A" +$promise->resolve('A'); +// Triggers the second callback and outputs "B" +$nextPromise->resolve('B'); +``` + +## Promise rejection + +When a promise is rejected, the `$onRejected` callbacks are invoked with the +rejection reason. + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise(); +$promise->then(null, function ($reason) { + echo $reason; +}); + +$promise->reject('Error!'); +// Outputs "Error!" +``` + +## Rejection forwarding + +If an exception is thrown in an `$onRejected` callback, subsequent +`$onRejected` callbacks are invoked with the thrown exception as the reason. + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise(); +$promise->then(null, function ($reason) { + throw new Exception($reason); +})->then(null, function ($reason) { + assert($reason->getMessage() === 'Error!'); +}); + +$promise->reject('Error!'); +``` + +You can also forward a rejection down the promise chain by returning a +`GuzzleHttp\Promise\RejectedPromise` in either an `$onFulfilled` or +`$onRejected` callback. + +```php +use GuzzleHttp\Promise\Promise; +use GuzzleHttp\Promise\RejectedPromise; + +$promise = new Promise(); +$promise->then(null, function ($reason) { + return new RejectedPromise($reason); +})->then(null, function ($reason) { + assert($reason === 'Error!'); +}); + +$promise->reject('Error!'); +``` + +If an exception is not thrown in a `$onRejected` callback and the callback +does not return a rejected promise, downstream `$onFulfilled` callbacks are +invoked using the value returned from the `$onRejected` callback. + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise(); +$promise + ->then(null, function ($reason) { + return "It's ok"; + }) + ->then(function ($value) { + assert($value === "It's ok"); + }); + +$promise->reject('Error!'); +``` + +# Synchronous wait + +You can synchronously force promises to complete using a promise's `wait` +method. When creating a promise, you can provide a wait function that is used +to synchronously force a promise to complete. When a wait function is invoked +it is expected to deliver a value to the promise or reject the promise. If the +wait function does not deliver a value, then an exception is thrown. The wait +function provided to a promise constructor is invoked when the `wait` function +of the promise is called. + +```php +$promise = new Promise(function () use (&$promise) { + $promise->resolve('foo'); +}); + +// Calling wait will return the value of the promise. +echo $promise->wait(); // outputs "foo" +``` + +If an exception is encountered while invoking the wait function of a promise, +the promise is rejected with the exception and the exception is thrown. + +```php +$promise = new Promise(function () use (&$promise) { + throw new Exception('foo'); +}); + +$promise->wait(); // throws the exception. +``` + +Calling `wait` on a promise that has been fulfilled will not trigger the wait +function. It will simply return the previously resolved value. + +```php +$promise = new Promise(function () { die('this is not called!'); }); +$promise->resolve('foo'); +echo $promise->wait(); // outputs "foo" +``` + +Calling `wait` on a promise that has been rejected will throw an exception. If +the rejection reason is an instance of `\Exception` the reason is thrown. +Otherwise, a `GuzzleHttp\Promise\RejectionException` is thrown and the reason +can be obtained by calling the `getReason` method of the exception. + +```php +$promise = new Promise(); +$promise->reject('foo'); +$promise->wait(); +``` + +> PHP Fatal error: Uncaught exception 'GuzzleHttp\Promise\RejectionException' with message 'The promise was rejected with value: foo' + + +## Unwrapping a promise + +When synchronously waiting on a promise, you are joining the state of the +promise into the current state of execution (i.e., return the value of the +promise if it was fulfilled or throw an exception if it was rejected). This is +called "unwrapping" the promise. Waiting on a promise will by default unwrap +the promise state. + +You can force a promise to resolve and *not* unwrap the state of the promise +by passing `false` to the first argument of the `wait` function: + +```php +$promise = new Promise(); +$promise->reject('foo'); +// This will not throw an exception. It simply ensures the promise has +// been resolved. +$promise->wait(false); +``` + +When unwrapping a promise, the resolved value of the promise will be waited +upon until the unwrapped value is not a promise. This means that if you resolve +promise A with a promise B and unwrap promise A, the value returned by the +wait function will be the value delivered to promise B. + +**Note**: when you do not unwrap the promise, no value is returned. + + +# Cancellation + +You can cancel a promise that has not yet been fulfilled using the `cancel()` +method of a promise. When creating a promise you can provide an optional +cancel function that when invoked cancels the action of computing a resolution +of the promise. + + +# API + + +## Promise + +When creating a promise object, you can provide an optional `$waitFn` and +`$cancelFn`. `$waitFn` is a function that is invoked with no arguments and is +expected to resolve the promise. `$cancelFn` is a function with no arguments +that is expected to cancel the computation of a promise. It is invoked when the +`cancel()` method of a promise is called. + +```php +use GuzzleHttp\Promise\Promise; + +$promise = new Promise( + function () use (&$promise) { + $promise->resolve('waited'); + }, + function () { + // do something that will cancel the promise computation (e.g., close + // a socket, cancel a database query, etc...) + } +); + +assert('waited' === $promise->wait()); +``` + +A promise has the following methods: + +- `then(callable $onFulfilled, callable $onRejected) : PromiseInterface` + + Appends fulfillment and rejection handlers to the promise, and returns a new promise resolving to the return value of the called handler. + +- `otherwise(callable $onRejected) : PromiseInterface` + + Appends a rejection handler callback to the promise, and returns a new promise resolving to the return value of the callback if it is called, or to its original fulfillment value if the promise is instead fulfilled. + +- `wait($unwrap = true) : mixed` + + Synchronously waits on the promise to complete. + + `$unwrap` controls whether or not the value of the promise is returned for a + fulfilled promise or if an exception is thrown if the promise is rejected. + This is set to `true` by default. + +- `cancel()` + + Attempts to cancel the promise if possible. The promise being cancelled and + the parent most ancestor that has not yet been resolved will also be + cancelled. Any promises waiting on the cancelled promise to resolve will also + be cancelled. + +- `getState() : string` + + Returns the state of the promise. One of `pending`, `fulfilled`, or + `rejected`. + +- `resolve($value)` + + Fulfills the promise with the given `$value`. + +- `reject($reason)` + + Rejects the promise with the given `$reason`. + + +## FulfilledPromise + +A fulfilled promise can be created to represent a promise that has been +fulfilled. + +```php +use GuzzleHttp\Promise\FulfilledPromise; + +$promise = new FulfilledPromise('value'); + +// Fulfilled callbacks are immediately invoked. +$promise->then(function ($value) { + echo $value; +}); +``` + + +## RejectedPromise + +A rejected promise can be created to represent a promise that has been +rejected. + +```php +use GuzzleHttp\Promise\RejectedPromise; + +$promise = new RejectedPromise('Error'); + +// Rejected callbacks are immediately invoked. +$promise->then(null, function ($reason) { + echo $reason; +}); +``` + + +# Promise interop + +This library works with foreign promises that have a `then` method. This means +you can use Guzzle promises with [React promises](https://github.com/reactphp/promise) +for example. When a foreign promise is returned inside of a then method +callback, promise resolution will occur recursively. + +```php +// Create a React promise +$deferred = new React\Promise\Deferred(); +$reactPromise = $deferred->promise(); + +// Create a Guzzle promise that is fulfilled with a React promise. +$guzzlePromise = new GuzzleHttp\Promise\Promise(); +$guzzlePromise->then(function ($value) use ($reactPromise) { + // Do something something with the value... + // Return the React promise + return $reactPromise; +}); +``` + +Please note that wait and cancel chaining is no longer possible when forwarding +a foreign promise. You will need to wrap a third-party promise with a Guzzle +promise in order to utilize wait and cancel functions with foreign promises. + + +## Event Loop Integration + +In order to keep the stack size constant, Guzzle promises are resolved +asynchronously using a task queue. When waiting on promises synchronously, the +task queue will be automatically run to ensure that the blocking promise and +any forwarded promises are resolved. When using promises asynchronously in an +event loop, you will need to run the task queue on each tick of the loop. If +you do not run the task queue, then promises will not be resolved. + +You can run the task queue using the `run()` method of the global task queue +instance. + +```php +// Get the global task queue +$queue = GuzzleHttp\Promise\Utils::queue(); +$queue->run(); +``` + +For example, you could use Guzzle promises with React using a periodic timer: + +```php +$loop = React\EventLoop\Factory::create(); +$loop->addPeriodicTimer(0, [$queue, 'run']); +``` + +*TODO*: Perhaps adding a `futureTick()` on each tick would be faster? + + +# Implementation notes + + +## Promise resolution and chaining is handled iteratively + +By shuffling pending handlers from one owner to another, promises are +resolved iteratively, allowing for "infinite" then chaining. + +```php +then(function ($v) { + // The stack size remains constant (a good thing) + echo xdebug_get_stack_depth() . ', '; + return $v + 1; + }); +} + +$parent->resolve(0); +var_dump($p->wait()); // int(1000) + +``` + +When a promise is fulfilled or rejected with a non-promise value, the promise +then takes ownership of the handlers of each child promise and delivers values +down the chain without using recursion. + +When a promise is resolved with another promise, the original promise transfers +all of its pending handlers to the new promise. When the new promise is +eventually resolved, all of the pending handlers are delivered the forwarded +value. + + +## A promise is the deferred. + +Some promise libraries implement promises using a deferred object to represent +a computation and a promise object to represent the delivery of the result of +the computation. This is a nice separation of computation and delivery because +consumers of the promise cannot modify the value that will be eventually +delivered. + +One side effect of being able to implement promise resolution and chaining +iteratively is that you need to be able for one promise to reach into the state +of another promise to shuffle around ownership of handlers. In order to achieve +this without making the handlers of a promise publicly mutable, a promise is +also the deferred value, allowing promises of the same parent class to reach +into and modify the private properties of promises of the same type. While this +does allow consumers of the value to modify the resolution or rejection of the +deferred, it is a small price to pay for keeping the stack size constant. + +```php +$promise = new Promise(); +$promise->then(function ($value) { echo $value; }); +// The promise is the deferred value, so you can deliver a value to it. +$promise->resolve('foo'); +// prints "foo" +``` + + +## Upgrading from Function API + +A static API was first introduced in 1.4.0, in order to mitigate problems with functions conflicting between global and local copies of the package. The function API will be removed in 2.0.0. A migration table has been provided here for your convenience: + +| Original Function | Replacement Method | +|----------------|----------------| +| `queue` | `Utils::queue` | +| `task` | `Utils::task` | +| `promise_for` | `Create::promiseFor` | +| `rejection_for` | `Create::rejectionFor` | +| `exception_for` | `Create::exceptionFor` | +| `iter_for` | `Create::iterFor` | +| `inspect` | `Utils::inspect` | +| `inspect_all` | `Utils::inspectAll` | +| `unwrap` | `Utils::unwrap` | +| `all` | `Utils::all` | +| `some` | `Utils::some` | +| `any` | `Utils::any` | +| `settle` | `Utils::settle` | +| `each` | `Each::of` | +| `each_limit` | `Each::ofLimit` | +| `each_limit_all` | `Each::ofLimitAll` | +| `!is_fulfilled` | `Is::pending` | +| `is_fulfilled` | `Is::fulfilled` | +| `is_rejected` | `Is::rejected` | +| `is_settled` | `Is::settled` | +| `coroutine` | `Coroutine::of` | diff --git a/vendor/guzzlehttp/promises/composer.json b/vendor/guzzlehttp/promises/composer.json new file mode 100644 index 000000000..db44d9e3f --- /dev/null +++ b/vendor/guzzlehttp/promises/composer.json @@ -0,0 +1,39 @@ +{ + "name": "guzzlehttp/promises", + "description": "Guzzle promises library", + "keywords": ["promise"], + "license": "MIT", + "authors": [ + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + } + ], + "require": { + "php": ">=5.5" + }, + "require-dev": { + "symfony/phpunit-bridge": "^4.4 || ^5.1" + }, + "autoload": { + "psr-4": { + "GuzzleHttp\\Promise\\": "src/" + }, + "files": ["src/functions_include.php"] + }, + "autoload-dev": { + "psr-4": { + "GuzzleHttp\\Promise\\Tests\\": "tests/" + } + }, + "scripts": { + "test": "vendor/bin/simple-phpunit", + "test-ci": "vendor/bin/simple-phpunit --coverage-text" + }, + "extra": { + "branch-alias": { + "dev-master": "1.4-dev" + } + } +} diff --git a/vendor/guzzlehttp/promises/phpstan-baseline.neon b/vendor/guzzlehttp/promises/phpstan-baseline.neon new file mode 100644 index 000000000..26012c2d4 --- /dev/null +++ b/vendor/guzzlehttp/promises/phpstan-baseline.neon @@ -0,0 +1,7 @@ +parameters: + ignoreErrors: + - + message: "#^Parameter \\#1 \\$function of function register_shutdown_function expects callable\\(\\)\\: void, Closure\\(\\)\\: mixed given\\.$#" + count: 1 + path: src/TaskQueue.php + diff --git a/vendor/guzzlehttp/promises/phpstan.neon.dist b/vendor/guzzlehttp/promises/phpstan.neon.dist new file mode 100644 index 000000000..b533a8c99 --- /dev/null +++ b/vendor/guzzlehttp/promises/phpstan.neon.dist @@ -0,0 +1,10 @@ +includes: + - phpstan-baseline.neon + +parameters: + level: 5 + paths: + - src + + ignoreErrors: + - "#^Dead catch - Exception is already caught by Throwable above\\.$#" diff --git a/vendor/guzzlehttp/promises/psalm.xml b/vendor/guzzlehttp/promises/psalm.xml new file mode 100644 index 000000000..3e4e3d085 --- /dev/null +++ b/vendor/guzzlehttp/promises/psalm.xml @@ -0,0 +1,15 @@ + + + + + + + + + diff --git a/vendor/guzzlehttp/promises/src/AggregateException.php b/vendor/guzzlehttp/promises/src/AggregateException.php new file mode 100644 index 000000000..d2b5712b9 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/AggregateException.php @@ -0,0 +1,17 @@ +then(function ($v) { echo $v; }); + * + * @param callable $generatorFn Generator function to wrap into a promise. + * + * @return Promise + * + * @link https://github.com/petkaantonov/bluebird/blob/master/API.md#generators inspiration + */ +final class Coroutine implements PromiseInterface +{ + /** + * @var PromiseInterface|null + */ + private $currentPromise; + + /** + * @var Generator + */ + private $generator; + + /** + * @var Promise + */ + private $result; + + public function __construct(callable $generatorFn) + { + $this->generator = $generatorFn(); + $this->result = new Promise(function () { + while (isset($this->currentPromise)) { + $this->currentPromise->wait(); + } + }); + try { + $this->nextCoroutine($this->generator->current()); + } catch (\Exception $exception) { + $this->result->reject($exception); + } catch (Throwable $throwable) { + $this->result->reject($throwable); + } + } + + /** + * Create a new coroutine. + * + * @return self + */ + public static function of(callable $generatorFn) + { + return new self($generatorFn); + } + + public function then( + callable $onFulfilled = null, + callable $onRejected = null + ) { + return $this->result->then($onFulfilled, $onRejected); + } + + public function otherwise(callable $onRejected) + { + return $this->result->otherwise($onRejected); + } + + public function wait($unwrap = true) + { + return $this->result->wait($unwrap); + } + + public function getState() + { + return $this->result->getState(); + } + + public function resolve($value) + { + $this->result->resolve($value); + } + + public function reject($reason) + { + $this->result->reject($reason); + } + + public function cancel() + { + $this->currentPromise->cancel(); + $this->result->cancel(); + } + + private function nextCoroutine($yielded) + { + $this->currentPromise = Create::promiseFor($yielded) + ->then([$this, '_handleSuccess'], [$this, '_handleFailure']); + } + + /** + * @internal + */ + public function _handleSuccess($value) + { + unset($this->currentPromise); + try { + $next = $this->generator->send($value); + if ($this->generator->valid()) { + $this->nextCoroutine($next); + } else { + $this->result->resolve($value); + } + } catch (Exception $exception) { + $this->result->reject($exception); + } catch (Throwable $throwable) { + $this->result->reject($throwable); + } + } + + /** + * @internal + */ + public function _handleFailure($reason) + { + unset($this->currentPromise); + try { + $nextYield = $this->generator->throw(Create::exceptionFor($reason)); + // The throw was caught, so keep iterating on the coroutine + $this->nextCoroutine($nextYield); + } catch (Exception $exception) { + $this->result->reject($exception); + } catch (Throwable $throwable) { + $this->result->reject($throwable); + } + } +} diff --git a/vendor/guzzlehttp/promises/src/Create.php b/vendor/guzzlehttp/promises/src/Create.php new file mode 100644 index 000000000..8d038e9c1 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/Create.php @@ -0,0 +1,84 @@ +then([$promise, 'resolve'], [$promise, 'reject']); + return $promise; + } + + return new FulfilledPromise($value); + } + + /** + * Creates a rejected promise for a reason if the reason is not a promise. + * If the provided reason is a promise, then it is returned as-is. + * + * @param mixed $reason Promise or reason. + * + * @return PromiseInterface + */ + public static function rejectionFor($reason) + { + if ($reason instanceof PromiseInterface) { + return $reason; + } + + return new RejectedPromise($reason); + } + + /** + * Create an exception for a rejected promise value. + * + * @param mixed $reason + * + * @return \Exception|\Throwable + */ + public static function exceptionFor($reason) + { + if ($reason instanceof \Exception || $reason instanceof \Throwable) { + return $reason; + } + + return new RejectionException($reason); + } + + /** + * Returns an iterator for the given value. + * + * @param mixed $value + * + * @return \Iterator + */ + public static function iterFor($value) + { + if ($value instanceof \Iterator) { + return $value; + } + + if (is_array($value)) { + return new \ArrayIterator($value); + } + + return new \ArrayIterator([$value]); + } +} diff --git a/vendor/guzzlehttp/promises/src/Each.php b/vendor/guzzlehttp/promises/src/Each.php new file mode 100644 index 000000000..1dda35499 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/Each.php @@ -0,0 +1,90 @@ + $onFulfilled, + 'rejected' => $onRejected + ]))->promise(); + } + + /** + * Like of, but only allows a certain number of outstanding promises at any + * given time. + * + * $concurrency may be an integer or a function that accepts the number of + * pending promises and returns a numeric concurrency limit value to allow + * for dynamic a concurrency size. + * + * @param mixed $iterable + * @param int|callable $concurrency + * @param callable $onFulfilled + * @param callable $onRejected + * + * @return PromiseInterface + */ + public static function ofLimit( + $iterable, + $concurrency, + callable $onFulfilled = null, + callable $onRejected = null + ) { + return (new EachPromise($iterable, [ + 'fulfilled' => $onFulfilled, + 'rejected' => $onRejected, + 'concurrency' => $concurrency + ]))->promise(); + } + + /** + * Like limit, but ensures that no promise in the given $iterable argument + * is rejected. If any promise is rejected, then the aggregate promise is + * rejected with the encountered rejection. + * + * @param mixed $iterable + * @param int|callable $concurrency + * @param callable $onFulfilled + * + * @return PromiseInterface + */ + public static function ofLimitAll( + $iterable, + $concurrency, + callable $onFulfilled = null + ) { + return each_limit( + $iterable, + $concurrency, + $onFulfilled, + function ($reason, $idx, PromiseInterface $aggregate) { + $aggregate->reject($reason); + } + ); + } +} diff --git a/vendor/guzzlehttp/promises/src/EachPromise.php b/vendor/guzzlehttp/promises/src/EachPromise.php new file mode 100644 index 000000000..fbb8876c7 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/EachPromise.php @@ -0,0 +1,253 @@ +iterable = Create::iterFor($iterable); + + if (isset($config['concurrency'])) { + $this->concurrency = $config['concurrency']; + } + + if (isset($config['fulfilled'])) { + $this->onFulfilled = $config['fulfilled']; + } + + if (isset($config['rejected'])) { + $this->onRejected = $config['rejected']; + } + } + + /** @psalm-suppress InvalidNullableReturnType */ + public function promise() + { + if ($this->aggregate) { + return $this->aggregate; + } + + try { + $this->createPromise(); + /** @psalm-assert Promise $this->aggregate */ + $this->iterable->rewind(); + if (!$this->checkIfFinished()) { + $this->refillPending(); + } + } catch (\Throwable $e) { + /** + * @psalm-suppress NullReference + * @phpstan-ignore-next-line + */ + $this->aggregate->reject($e); + } catch (\Exception $e) { + /** + * @psalm-suppress NullReference + * @phpstan-ignore-next-line + */ + $this->aggregate->reject($e); + } + + /** + * @psalm-suppress NullableReturnStatement + * @phpstan-ignore-next-line + */ + return $this->aggregate; + } + + private function createPromise() + { + $this->mutex = false; + $this->aggregate = new Promise(function () { + reset($this->pending); + // Consume a potentially fluctuating list of promises while + // ensuring that indexes are maintained (precluding array_shift). + while ($promise = current($this->pending)) { + next($this->pending); + $promise->wait(); + if (Is::settled($this->aggregate)) { + return; + } + } + }); + + // Clear the references when the promise is resolved. + $clearFn = function () { + $this->iterable = $this->concurrency = $this->pending = null; + $this->onFulfilled = $this->onRejected = null; + }; + + $this->aggregate->then($clearFn, $clearFn); + } + + private function refillPending() + { + if (!$this->concurrency) { + // Add all pending promises. + while ($this->addPending() && $this->advanceIterator()); + return; + } + + // Add only up to N pending promises. + $concurrency = is_callable($this->concurrency) + ? call_user_func($this->concurrency, count($this->pending)) + : $this->concurrency; + $concurrency = max($concurrency - count($this->pending), 0); + // Concurrency may be set to 0 to disallow new promises. + if (!$concurrency) { + return; + } + // Add the first pending promise. + $this->addPending(); + // Note this is special handling for concurrency=1 so that we do + // not advance the iterator after adding the first promise. This + // helps work around issues with generators that might not have the + // next value to yield until promise callbacks are called. + while (--$concurrency + && $this->advanceIterator() + && $this->addPending()); + } + + private function addPending() + { + if (!$this->iterable || !$this->iterable->valid()) { + return false; + } + + $promise = Create::promiseFor($this->iterable->current()); + $key = $this->iterable->key(); + + // Iterable keys may not be unique, so we add the promises at the end + // of the pending array and retrieve the array index being used + $this->pending[] = null; + end($this->pending); + $idx = key($this->pending); + + $this->pending[$idx] = $promise->then( + function ($value) use ($idx, $key) { + if ($this->onFulfilled) { + call_user_func( + $this->onFulfilled, + $value, + $key, + $this->aggregate + ); + } + $this->step($idx); + }, + function ($reason) use ($idx, $key) { + if ($this->onRejected) { + call_user_func( + $this->onRejected, + $reason, + $key, + $this->aggregate + ); + } + $this->step($idx); + } + ); + + return true; + } + + private function advanceIterator() + { + // Place a lock on the iterator so that we ensure to not recurse, + // preventing fatal generator errors. + if ($this->mutex) { + return false; + } + + $this->mutex = true; + + try { + $this->iterable->next(); + $this->mutex = false; + return true; + } catch (\Throwable $e) { + $this->aggregate->reject($e); + $this->mutex = false; + return false; + } catch (\Exception $e) { + $this->aggregate->reject($e); + $this->mutex = false; + return false; + } + } + + private function step($idx) + { + // If the promise was already resolved, then ignore this step. + if (Is::settled($this->aggregate)) { + return; + } + + unset($this->pending[$idx]); + + // Only refill pending promises if we are not locked, preventing the + // EachPromise to recursively invoke the provided iterator, which + // cause a fatal error: "Cannot resume an already running generator" + if ($this->advanceIterator() && !$this->checkIfFinished()) { + // Add more pending promises if possible. + $this->refillPending(); + } + } + + private function checkIfFinished() + { + if (!$this->pending && !$this->iterable->valid()) { + // Resolve the promise if there's nothing left to do. + $this->aggregate->resolve(null); + return true; + } + + return false; + } +} diff --git a/vendor/guzzlehttp/promises/src/FulfilledPromise.php b/vendor/guzzlehttp/promises/src/FulfilledPromise.php new file mode 100644 index 000000000..98f72a62a --- /dev/null +++ b/vendor/guzzlehttp/promises/src/FulfilledPromise.php @@ -0,0 +1,84 @@ +value = $value; + } + + public function then( + callable $onFulfilled = null, + callable $onRejected = null + ) { + // Return itself if there is no onFulfilled function. + if (!$onFulfilled) { + return $this; + } + + $queue = Utils::queue(); + $p = new Promise([$queue, 'run']); + $value = $this->value; + $queue->add(static function () use ($p, $value, $onFulfilled) { + if (Is::pending($p)) { + try { + $p->resolve($onFulfilled($value)); + } catch (\Throwable $e) { + $p->reject($e); + } catch (\Exception $e) { + $p->reject($e); + } + } + }); + + return $p; + } + + public function otherwise(callable $onRejected) + { + return $this->then(null, $onRejected); + } + + public function wait($unwrap = true, $defaultDelivery = null) + { + return $unwrap ? $this->value : null; + } + + public function getState() + { + return self::FULFILLED; + } + + public function resolve($value) + { + if ($value !== $this->value) { + throw new \LogicException("Cannot resolve a fulfilled promise"); + } + } + + public function reject($reason) + { + throw new \LogicException("Cannot reject a fulfilled promise"); + } + + public function cancel() + { + // pass + } +} diff --git a/vendor/guzzlehttp/promises/src/Is.php b/vendor/guzzlehttp/promises/src/Is.php new file mode 100644 index 000000000..c3ed8d014 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/Is.php @@ -0,0 +1,46 @@ +getState() === PromiseInterface::PENDING; + } + + /** + * Returns true if a promise is fulfilled or rejected. + * + * @return bool + */ + public static function settled(PromiseInterface $promise) + { + return $promise->getState() !== PromiseInterface::PENDING; + } + + /** + * Returns true if a promise is fulfilled. + * + * @return bool + */ + public static function fulfilled(PromiseInterface $promise) + { + return $promise->getState() === PromiseInterface::FULFILLED; + } + + /** + * Returns true if a promise is rejected. + * + * @return bool + */ + public static function rejected(PromiseInterface $promise) + { + return $promise->getState() === PromiseInterface::REJECTED; + } +} diff --git a/vendor/guzzlehttp/promises/src/Promise.php b/vendor/guzzlehttp/promises/src/Promise.php new file mode 100644 index 000000000..75939057b --- /dev/null +++ b/vendor/guzzlehttp/promises/src/Promise.php @@ -0,0 +1,278 @@ +waitFn = $waitFn; + $this->cancelFn = $cancelFn; + } + + public function then( + callable $onFulfilled = null, + callable $onRejected = null + ) { + if ($this->state === self::PENDING) { + $p = new Promise(null, [$this, 'cancel']); + $this->handlers[] = [$p, $onFulfilled, $onRejected]; + $p->waitList = $this->waitList; + $p->waitList[] = $this; + return $p; + } + + // Return a fulfilled promise and immediately invoke any callbacks. + if ($this->state === self::FULFILLED) { + $promise = Create::promiseFor($this->result); + return $onFulfilled ? $promise->then($onFulfilled) : $promise; + } + + // It's either cancelled or rejected, so return a rejected promise + // and immediately invoke any callbacks. + $rejection = Create::rejectionFor($this->result); + return $onRejected ? $rejection->then(null, $onRejected) : $rejection; + } + + public function otherwise(callable $onRejected) + { + return $this->then(null, $onRejected); + } + + public function wait($unwrap = true) + { + $this->waitIfPending(); + + if ($this->result instanceof PromiseInterface) { + return $this->result->wait($unwrap); + } + if ($unwrap) { + if ($this->state === self::FULFILLED) { + return $this->result; + } + // It's rejected so "unwrap" and throw an exception. + throw Create::exceptionFor($this->result); + } + } + + public function getState() + { + return $this->state; + } + + public function cancel() + { + if ($this->state !== self::PENDING) { + return; + } + + $this->waitFn = $this->waitList = null; + + if ($this->cancelFn) { + $fn = $this->cancelFn; + $this->cancelFn = null; + try { + $fn(); + } catch (\Throwable $e) { + $this->reject($e); + } catch (\Exception $e) { + $this->reject($e); + } + } + + // Reject the promise only if it wasn't rejected in a then callback. + /** @psalm-suppress RedundantCondition */ + if ($this->state === self::PENDING) { + $this->reject(new CancellationException('Promise has been cancelled')); + } + } + + public function resolve($value) + { + $this->settle(self::FULFILLED, $value); + } + + public function reject($reason) + { + $this->settle(self::REJECTED, $reason); + } + + private function settle($state, $value) + { + if ($this->state !== self::PENDING) { + // Ignore calls with the same resolution. + if ($state === $this->state && $value === $this->result) { + return; + } + throw $this->state === $state + ? new \LogicException("The promise is already {$state}.") + : new \LogicException("Cannot change a {$this->state} promise to {$state}"); + } + + if ($value === $this) { + throw new \LogicException('Cannot fulfill or reject a promise with itself'); + } + + // Clear out the state of the promise but stash the handlers. + $this->state = $state; + $this->result = $value; + $handlers = $this->handlers; + $this->handlers = null; + $this->waitList = $this->waitFn = null; + $this->cancelFn = null; + + if (!$handlers) { + return; + } + + // If the value was not a settled promise or a thenable, then resolve + // it in the task queue using the correct ID. + if (!is_object($value) || !method_exists($value, 'then')) { + $id = $state === self::FULFILLED ? 1 : 2; + // It's a success, so resolve the handlers in the queue. + Utils::queue()->add(static function () use ($id, $value, $handlers) { + foreach ($handlers as $handler) { + self::callHandler($id, $value, $handler); + } + }); + } elseif ($value instanceof Promise && Is::pending($value)) { + // We can just merge our handlers onto the next promise. + $value->handlers = array_merge($value->handlers, $handlers); + } else { + // Resolve the handlers when the forwarded promise is resolved. + $value->then( + static function ($value) use ($handlers) { + foreach ($handlers as $handler) { + self::callHandler(1, $value, $handler); + } + }, + static function ($reason) use ($handlers) { + foreach ($handlers as $handler) { + self::callHandler(2, $reason, $handler); + } + } + ); + } + } + + /** + * Call a stack of handlers using a specific callback index and value. + * + * @param int $index 1 (resolve) or 2 (reject). + * @param mixed $value Value to pass to the callback. + * @param array $handler Array of handler data (promise and callbacks). + */ + private static function callHandler($index, $value, array $handler) + { + /** @var PromiseInterface $promise */ + $promise = $handler[0]; + + // The promise may have been cancelled or resolved before placing + // this thunk in the queue. + if (Is::settled($promise)) { + return; + } + + try { + if (isset($handler[$index])) { + /* + * If $f throws an exception, then $handler will be in the exception + * stack trace. Since $handler contains a reference to the callable + * itself we get a circular reference. We clear the $handler + * here to avoid that memory leak. + */ + $f = $handler[$index]; + unset($handler); + $promise->resolve($f($value)); + } elseif ($index === 1) { + // Forward resolution values as-is. + $promise->resolve($value); + } else { + // Forward rejections down the chain. + $promise->reject($value); + } + } catch (\Throwable $reason) { + $promise->reject($reason); + } catch (\Exception $reason) { + $promise->reject($reason); + } + } + + private function waitIfPending() + { + if ($this->state !== self::PENDING) { + return; + } elseif ($this->waitFn) { + $this->invokeWaitFn(); + } elseif ($this->waitList) { + $this->invokeWaitList(); + } else { + // If there's no wait function, then reject the promise. + $this->reject('Cannot wait on a promise that has ' + . 'no internal wait function. You must provide a wait ' + . 'function when constructing the promise to be able to ' + . 'wait on a promise.'); + } + + Utils::queue()->run(); + + /** @psalm-suppress RedundantCondition */ + if ($this->state === self::PENDING) { + $this->reject('Invoking the wait callback did not resolve the promise'); + } + } + + private function invokeWaitFn() + { + try { + $wfn = $this->waitFn; + $this->waitFn = null; + $wfn(true); + } catch (\Exception $reason) { + if ($this->state === self::PENDING) { + // The promise has not been resolved yet, so reject the promise + // with the exception. + $this->reject($reason); + } else { + // The promise was already resolved, so there's a problem in + // the application. + throw $reason; + } + } + } + + private function invokeWaitList() + { + $waitList = $this->waitList; + $this->waitList = null; + + foreach ($waitList as $result) { + do { + $result->waitIfPending(); + $result = $result->result; + } while ($result instanceof Promise); + + if ($result instanceof PromiseInterface) { + $result->wait(false); + } + } + } +} diff --git a/vendor/guzzlehttp/promises/src/PromiseInterface.php b/vendor/guzzlehttp/promises/src/PromiseInterface.php new file mode 100644 index 000000000..e59833143 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/PromiseInterface.php @@ -0,0 +1,97 @@ +reason = $reason; + } + + public function then( + callable $onFulfilled = null, + callable $onRejected = null + ) { + // If there's no onRejected callback then just return self. + if (!$onRejected) { + return $this; + } + + $queue = Utils::queue(); + $reason = $this->reason; + $p = new Promise([$queue, 'run']); + $queue->add(static function () use ($p, $reason, $onRejected) { + if (Is::pending($p)) { + try { + // Return a resolved promise if onRejected does not throw. + $p->resolve($onRejected($reason)); + } catch (\Throwable $e) { + // onRejected threw, so return a rejected promise. + $p->reject($e); + } catch (\Exception $e) { + // onRejected threw, so return a rejected promise. + $p->reject($e); + } + } + }); + + return $p; + } + + public function otherwise(callable $onRejected) + { + return $this->then(null, $onRejected); + } + + public function wait($unwrap = true, $defaultDelivery = null) + { + if ($unwrap) { + throw Create::exceptionFor($this->reason); + } + + return null; + } + + public function getState() + { + return self::REJECTED; + } + + public function resolve($value) + { + throw new \LogicException("Cannot resolve a rejected promise"); + } + + public function reject($reason) + { + if ($reason !== $this->reason) { + throw new \LogicException("Cannot reject a rejected promise"); + } + } + + public function cancel() + { + // pass + } +} diff --git a/vendor/guzzlehttp/promises/src/RejectionException.php b/vendor/guzzlehttp/promises/src/RejectionException.php new file mode 100644 index 000000000..e2f137707 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/RejectionException.php @@ -0,0 +1,48 @@ +reason = $reason; + + $message = 'The promise was rejected'; + + if ($description) { + $message .= ' with reason: ' . $description; + } elseif (is_string($reason) + || (is_object($reason) && method_exists($reason, '__toString')) + ) { + $message .= ' with reason: ' . $this->reason; + } elseif ($reason instanceof \JsonSerializable) { + $message .= ' with reason: ' + . json_encode($this->reason, JSON_PRETTY_PRINT); + } + + parent::__construct($message); + } + + /** + * Returns the rejection reason. + * + * @return mixed + */ + public function getReason() + { + return $this->reason; + } +} diff --git a/vendor/guzzlehttp/promises/src/TaskQueue.php b/vendor/guzzlehttp/promises/src/TaskQueue.php new file mode 100644 index 000000000..f0fba2c59 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/TaskQueue.php @@ -0,0 +1,67 @@ +run(); + */ +class TaskQueue implements TaskQueueInterface +{ + private $enableShutdown = true; + private $queue = []; + + public function __construct($withShutdown = true) + { + if ($withShutdown) { + register_shutdown_function(function () { + if ($this->enableShutdown) { + // Only run the tasks if an E_ERROR didn't occur. + $err = error_get_last(); + if (!$err || ($err['type'] ^ E_ERROR)) { + $this->run(); + } + } + }); + } + } + + public function isEmpty() + { + return !$this->queue; + } + + public function add(callable $task) + { + $this->queue[] = $task; + } + + public function run() + { + while ($task = array_shift($this->queue)) { + /** @var callable $task */ + $task(); + } + } + + /** + * The task queue will be run and exhausted by default when the process + * exits IFF the exit is not the result of a PHP E_ERROR error. + * + * You can disable running the automatic shutdown of the queue by calling + * this function. If you disable the task queue shutdown process, then you + * MUST either run the task queue (as a result of running your event loop + * or manually using the run() method) or wait on each outstanding promise. + * + * Note: This shutdown will occur before any destructors are triggered. + */ + public function disableShutdown() + { + $this->enableShutdown = false; + } +} diff --git a/vendor/guzzlehttp/promises/src/TaskQueueInterface.php b/vendor/guzzlehttp/promises/src/TaskQueueInterface.php new file mode 100644 index 000000000..723d4d54e --- /dev/null +++ b/vendor/guzzlehttp/promises/src/TaskQueueInterface.php @@ -0,0 +1,24 @@ + + * while ($eventLoop->isRunning()) { + * GuzzleHttp\Promise\Utils::queue()->run(); + * } + * + * + * @param TaskQueueInterface $assign Optionally specify a new queue instance. + * + * @return TaskQueueInterface + */ + public static function queue(TaskQueueInterface $assign = null) + { + static $queue; + + if ($assign) { + $queue = $assign; + } elseif (!$queue) { + $queue = new TaskQueue(); + } + + return $queue; + } + + /** + * Adds a function to run in the task queue when it is next `run()` and + * returns a promise that is fulfilled or rejected with the result. + * + * @param callable $task Task function to run. + * + * @return PromiseInterface + */ + public static function task(callable $task) + { + $queue = self::queue(); + $promise = new Promise([$queue, 'run']); + $queue->add(function () use ($task, $promise) { + try { + $promise->resolve($task()); + } catch (\Throwable $e) { + $promise->reject($e); + } catch (\Exception $e) { + $promise->reject($e); + } + }); + + return $promise; + } + + /** + * Synchronously waits on a promise to resolve and returns an inspection + * state array. + * + * Returns a state associative array containing a "state" key mapping to a + * valid promise state. If the state of the promise is "fulfilled", the + * array will contain a "value" key mapping to the fulfilled value of the + * promise. If the promise is rejected, the array will contain a "reason" + * key mapping to the rejection reason of the promise. + * + * @param PromiseInterface $promise Promise or value. + * + * @return array + */ + public static function inspect(PromiseInterface $promise) + { + try { + return [ + 'state' => PromiseInterface::FULFILLED, + 'value' => $promise->wait() + ]; + } catch (RejectionException $e) { + return ['state' => PromiseInterface::REJECTED, 'reason' => $e->getReason()]; + } catch (\Throwable $e) { + return ['state' => PromiseInterface::REJECTED, 'reason' => $e]; + } catch (\Exception $e) { + return ['state' => PromiseInterface::REJECTED, 'reason' => $e]; + } + } + + /** + * Waits on all of the provided promises, but does not unwrap rejected + * promises as thrown exception. + * + * Returns an array of inspection state arrays. + * + * @see inspect for the inspection state array format. + * + * @param PromiseInterface[] $promises Traversable of promises to wait upon. + * + * @return array + */ + public static function inspectAll($promises) + { + $results = []; + foreach ($promises as $key => $promise) { + $results[$key] = inspect($promise); + } + + return $results; + } + + /** + * Waits on all of the provided promises and returns the fulfilled values. + * + * Returns an array that contains the value of each promise (in the same + * order the promises were provided). An exception is thrown if any of the + * promises are rejected. + * + * @param iterable $promises Iterable of PromiseInterface objects to wait on. + * + * @return array + * + * @throws \Exception on error + * @throws \Throwable on error in PHP >=7 + */ + public static function unwrap($promises) + { + $results = []; + foreach ($promises as $key => $promise) { + $results[$key] = $promise->wait(); + } + + return $results; + } + + /** + * Given an array of promises, return a promise that is fulfilled when all + * the items in the array are fulfilled. + * + * The promise's fulfillment value is an array with fulfillment values at + * respective positions to the original array. If any promise in the array + * rejects, the returned promise is rejected with the rejection reason. + * + * @param mixed $promises Promises or values. + * @param bool $recursive If true, resolves new promises that might have been added to the stack during its own resolution. + * + * @return PromiseInterface + */ + public static function all($promises, $recursive = false) + { + $results = []; + $promise = Each::of( + $promises, + function ($value, $idx) use (&$results) { + $results[$idx] = $value; + }, + function ($reason, $idx, Promise $aggregate) { + $aggregate->reject($reason); + } + )->then(function () use (&$results) { + ksort($results); + return $results; + }); + + if (true === $recursive) { + $promise = $promise->then(function ($results) use ($recursive, &$promises) { + foreach ($promises as $promise) { + if (Is::pending($promise)) { + return self::all($promises, $recursive); + } + } + return $results; + }); + } + + return $promise; + } + + /** + * Initiate a competitive race between multiple promises or values (values + * will become immediately fulfilled promises). + * + * When count amount of promises have been fulfilled, the returned promise + * is fulfilled with an array that contains the fulfillment values of the + * winners in order of resolution. + * + * This promise is rejected with a {@see AggregateException} if the number + * of fulfilled promises is less than the desired $count. + * + * @param int $count Total number of promises. + * @param mixed $promises Promises or values. + * + * @return PromiseInterface + */ + public static function some($count, $promises) + { + $results = []; + $rejections = []; + + return Each::of( + $promises, + function ($value, $idx, PromiseInterface $p) use (&$results, $count) { + if (Is::settled($p)) { + return; + } + $results[$idx] = $value; + if (count($results) >= $count) { + $p->resolve(null); + } + }, + function ($reason) use (&$rejections) { + $rejections[] = $reason; + } + )->then( + function () use (&$results, &$rejections, $count) { + if (count($results) !== $count) { + throw new AggregateException( + 'Not enough promises to fulfill count', + $rejections + ); + } + ksort($results); + return array_values($results); + } + ); + } + + /** + * Like some(), with 1 as count. However, if the promise fulfills, the + * fulfillment value is not an array of 1 but the value directly. + * + * @param mixed $promises Promises or values. + * + * @return PromiseInterface + */ + public static function any($promises) + { + return self::some(1, $promises)->then(function ($values) { + return $values[0]; + }); + } + + /** + * Returns a promise that is fulfilled when all of the provided promises have + * been fulfilled or rejected. + * + * The returned promise is fulfilled with an array of inspection state arrays. + * + * @see inspect for the inspection state array format. + * + * @param mixed $promises Promises or values. + * + * @return PromiseInterface + */ + public static function settle($promises) + { + $results = []; + + return Each::of( + $promises, + function ($value, $idx) use (&$results) { + $results[$idx] = ['state' => PromiseInterface::FULFILLED, 'value' => $value]; + }, + function ($reason, $idx) use (&$results) { + $results[$idx] = ['state' => PromiseInterface::REJECTED, 'reason' => $reason]; + } + )->then(function () use (&$results) { + ksort($results); + return $results; + }); + } +} diff --git a/vendor/guzzlehttp/promises/src/functions.php b/vendor/guzzlehttp/promises/src/functions.php new file mode 100644 index 000000000..c03d39d02 --- /dev/null +++ b/vendor/guzzlehttp/promises/src/functions.php @@ -0,0 +1,363 @@ + + * while ($eventLoop->isRunning()) { + * GuzzleHttp\Promise\queue()->run(); + * } + * + * + * @param TaskQueueInterface $assign Optionally specify a new queue instance. + * + * @return TaskQueueInterface + * + * @deprecated queue will be removed in guzzlehttp/promises:2.0. Use Utils::queue instead. + */ +function queue(TaskQueueInterface $assign = null) +{ + return Utils::queue($assign); +} + +/** + * Adds a function to run in the task queue when it is next `run()` and returns + * a promise that is fulfilled or rejected with the result. + * + * @param callable $task Task function to run. + * + * @return PromiseInterface + * + * @deprecated task will be removed in guzzlehttp/promises:2.0. Use Utils::task instead. + */ +function task(callable $task) +{ + return Utils::task($task); +} + +/** + * Creates a promise for a value if the value is not a promise. + * + * @param mixed $value Promise or value. + * + * @return PromiseInterface + * + * @deprecated promise_for will be removed in guzzlehttp/promises:2.0. Use Create::promiseFor instead. + */ +function promise_for($value) +{ + return Create::promiseFor($value); +} + +/** + * Creates a rejected promise for a reason if the reason is not a promise. If + * the provided reason is a promise, then it is returned as-is. + * + * @param mixed $reason Promise or reason. + * + * @return PromiseInterface + * + * @deprecated rejection_for will be removed in guzzlehttp/promises:2.0. Use Create::rejectionFor instead. + */ +function rejection_for($reason) +{ + return Create::rejectionFor($reason); +} + +/** + * Create an exception for a rejected promise value. + * + * @param mixed $reason + * + * @return \Exception|\Throwable + * + * @deprecated exception_for will be removed in guzzlehttp/promises:2.0. Use Create::exceptionFor instead. + */ +function exception_for($reason) +{ + return Create::exceptionFor($reason); +} + +/** + * Returns an iterator for the given value. + * + * @param mixed $value + * + * @return \Iterator + * + * @deprecated iter_for will be removed in guzzlehttp/promises:2.0. Use Create::iterFor instead. + */ +function iter_for($value) +{ + return Create::iterFor($value); +} + +/** + * Synchronously waits on a promise to resolve and returns an inspection state + * array. + * + * Returns a state associative array containing a "state" key mapping to a + * valid promise state. If the state of the promise is "fulfilled", the array + * will contain a "value" key mapping to the fulfilled value of the promise. If + * the promise is rejected, the array will contain a "reason" key mapping to + * the rejection reason of the promise. + * + * @param PromiseInterface $promise Promise or value. + * + * @return array + * + * @deprecated inspect will be removed in guzzlehttp/promises:2.0. Use Utils::inspect instead. + */ +function inspect(PromiseInterface $promise) +{ + return Utils::inspect($promise); +} + +/** + * Waits on all of the provided promises, but does not unwrap rejected promises + * as thrown exception. + * + * Returns an array of inspection state arrays. + * + * @see inspect for the inspection state array format. + * + * @param PromiseInterface[] $promises Traversable of promises to wait upon. + * + * @return array + * + * @deprecated inspect will be removed in guzzlehttp/promises:2.0. Use Utils::inspectAll instead. + */ +function inspect_all($promises) +{ + return Utils::inspectAll($promises); +} + +/** + * Waits on all of the provided promises and returns the fulfilled values. + * + * Returns an array that contains the value of each promise (in the same order + * the promises were provided). An exception is thrown if any of the promises + * are rejected. + * + * @param iterable $promises Iterable of PromiseInterface objects to wait on. + * + * @return array + * + * @throws \Exception on error + * @throws \Throwable on error in PHP >=7 + * + * @deprecated unwrap will be removed in guzzlehttp/promises:2.0. Use Utils::unwrap instead. + */ +function unwrap($promises) +{ + return Utils::unwrap($promises); +} + +/** + * Given an array of promises, return a promise that is fulfilled when all the + * items in the array are fulfilled. + * + * The promise's fulfillment value is an array with fulfillment values at + * respective positions to the original array. If any promise in the array + * rejects, the returned promise is rejected with the rejection reason. + * + * @param mixed $promises Promises or values. + * @param bool $recursive If true, resolves new promises that might have been added to the stack during its own resolution. + * + * @return PromiseInterface + * + * @deprecated all will be removed in guzzlehttp/promises:2.0. Use Utils::all instead. + */ +function all($promises, $recursive = false) +{ + return Utils::all($promises, $recursive); +} + +/** + * Initiate a competitive race between multiple promises or values (values will + * become immediately fulfilled promises). + * + * When count amount of promises have been fulfilled, the returned promise is + * fulfilled with an array that contains the fulfillment values of the winners + * in order of resolution. + * + * This promise is rejected with a {@see AggregateException} if the number of + * fulfilled promises is less than the desired $count. + * + * @param int $count Total number of promises. + * @param mixed $promises Promises or values. + * + * @return PromiseInterface + * + * @deprecated some will be removed in guzzlehttp/promises:2.0. Use Utils::some instead. + */ +function some($count, $promises) +{ + return Utils::some($count, $promises); +} + +/** + * Like some(), with 1 as count. However, if the promise fulfills, the + * fulfillment value is not an array of 1 but the value directly. + * + * @param mixed $promises Promises or values. + * + * @return PromiseInterface + * + * @deprecated any will be removed in guzzlehttp/promises:2.0. Use Utils::any instead. + */ +function any($promises) +{ + return Utils::any($promises); +} + +/** + * Returns a promise that is fulfilled when all of the provided promises have + * been fulfilled or rejected. + * + * The returned promise is fulfilled with an array of inspection state arrays. + * + * @see inspect for the inspection state array format. + * + * @param mixed $promises Promises or values. + * + * @return PromiseInterface + * + * @deprecated settle will be removed in guzzlehttp/promises:2.0. Use Utils::settle instead. + */ +function settle($promises) +{ + return Utils::settle($promises); +} + +/** + * Given an iterator that yields promises or values, returns a promise that is + * fulfilled with a null value when the iterator has been consumed or the + * aggregate promise has been fulfilled or rejected. + * + * $onFulfilled is a function that accepts the fulfilled value, iterator index, + * and the aggregate promise. The callback can invoke any necessary side + * effects and choose to resolve or reject the aggregate if needed. + * + * $onRejected is a function that accepts the rejection reason, iterator index, + * and the aggregate promise. The callback can invoke any necessary side + * effects and choose to resolve or reject the aggregate if needed. + * + * @param mixed $iterable Iterator or array to iterate over. + * @param callable $onFulfilled + * @param callable $onRejected + * + * @return PromiseInterface + * + * @deprecated each will be removed in guzzlehttp/promises:2.0. Use Each::of instead. + */ +function each( + $iterable, + callable $onFulfilled = null, + callable $onRejected = null +) { + return Each::of($iterable, $onFulfilled, $onRejected); +} + +/** + * Like each, but only allows a certain number of outstanding promises at any + * given time. + * + * $concurrency may be an integer or a function that accepts the number of + * pending promises and returns a numeric concurrency limit value to allow for + * dynamic a concurrency size. + * + * @param mixed $iterable + * @param int|callable $concurrency + * @param callable $onFulfilled + * @param callable $onRejected + * + * @return PromiseInterface + * + * @deprecated each_limit will be removed in guzzlehttp/promises:2.0. Use Each::ofLimit instead. + */ +function each_limit( + $iterable, + $concurrency, + callable $onFulfilled = null, + callable $onRejected = null +) { + return Each::ofLimit($iterable, $concurrency, $onFulfilled, $onRejected); +} + +/** + * Like each_limit, but ensures that no promise in the given $iterable argument + * is rejected. If any promise is rejected, then the aggregate promise is + * rejected with the encountered rejection. + * + * @param mixed $iterable + * @param int|callable $concurrency + * @param callable $onFulfilled + * + * @return PromiseInterface + * + * @deprecated each_limit_all will be removed in guzzlehttp/promises:2.0. Use Each::ofLimitAll instead. + */ +function each_limit_all( + $iterable, + $concurrency, + callable $onFulfilled = null +) { + return Each::ofLimitAll($iterable, $concurrency, $onFulfilled); +} + +/** + * Returns true if a promise is fulfilled. + * + * @return bool + * + * @deprecated is_fulfilled will be removed in guzzlehttp/promises:2.0. Use Is::fulfilled instead. + */ +function is_fulfilled(PromiseInterface $promise) +{ + return Is::fulfilled($promise); +} + +/** + * Returns true if a promise is rejected. + * + * @return bool + * + * @deprecated is_rejected will be removed in guzzlehttp/promises:2.0. Use Is::rejected instead. + */ +function is_rejected(PromiseInterface $promise) +{ + return Is::rejected($promise); +} + +/** + * Returns true if a promise is fulfilled or rejected. + * + * @return bool + * + * @deprecated is_settled will be removed in guzzlehttp/promises:2.0. Use Is::settled instead. + */ +function is_settled(PromiseInterface $promise) +{ + return Is::settled($promise); +} + +/** + * Create a new coroutine. + * + * @see Coroutine + * + * @return PromiseInterface + * + * @deprecated coroutine will be removed in guzzlehttp/promises:2.0. Use Coroutine::of instead. + */ +function coroutine(callable $generatorFn) +{ + return Coroutine::of($generatorFn); +} diff --git a/vendor/guzzlehttp/promises/src/functions_include.php b/vendor/guzzlehttp/promises/src/functions_include.php new file mode 100644 index 000000000..34cd1710a --- /dev/null +++ b/vendor/guzzlehttp/promises/src/functions_include.php @@ -0,0 +1,6 @@ +withPath('foo')->withHost('example.com')` will throw an exception + because the path of a URI with an authority must start with a slash "/" or be empty + - `(new Uri())->withScheme('http')` will return `'http://localhost'` + +### Deprecated + +- `Uri::resolve` in favor of `UriResolver::resolve` +- `Uri::removeDotSegments` in favor of `UriResolver::removeDotSegments` + +### Fixed + +- `Stream::read` when length parameter <= 0. +- `copy_to_stream` reads bytes in chunks instead of `maxLen` into memory. +- `ServerRequest::getUriFromGlobals` when `Host` header contains port. +- Compatibility of URIs with `file` scheme and empty host. + + +## [1.3.1] - 2016-06-25 + +### Fixed + +- `Uri::__toString` for network path references, e.g. `//example.org`. +- Missing lowercase normalization for host. +- Handling of URI components in case they are `'0'` in a lot of places, + e.g. as a user info password. +- `Uri::withAddedHeader` to correctly merge headers with different case. +- Trimming of header values in `Uri::withAddedHeader`. Header values may + be surrounded by whitespace which should be ignored according to RFC 7230 + Section 3.2.4. This does not apply to header names. +- `Uri::withAddedHeader` with an array of header values. +- `Uri::resolve` when base path has no slash and handling of fragment. +- Handling of encoding in `Uri::with(out)QueryValue` so one can pass the + key/value both in encoded as well as decoded form to those methods. This is + consistent with withPath, withQuery etc. +- `ServerRequest::withoutAttribute` when attribute value is null. + + +## [1.3.0] - 2016-04-13 + +### Added + +- Remaining interfaces needed for full PSR7 compatibility + (ServerRequestInterface, UploadedFileInterface, etc.). +- Support for stream_for from scalars. + +### Changed + +- Can now extend Uri. + +### Fixed +- A bug in validating request methods by making it more permissive. + + +## [1.2.3] - 2016-02-18 + +### Fixed + +- Support in `GuzzleHttp\Psr7\CachingStream` for seeking forward on remote + streams, which can sometimes return fewer bytes than requested with `fread`. +- Handling of gzipped responses with FNAME headers. + + +## [1.2.2] - 2016-01-22 + +### Added + +- Support for URIs without any authority. +- Support for HTTP 451 'Unavailable For Legal Reasons.' +- Support for using '0' as a filename. +- Support for including non-standard ports in Host headers. + + +## [1.2.1] - 2015-11-02 + +### Changes + +- Now supporting negative offsets when seeking to SEEK_END. + + +## [1.2.0] - 2015-08-15 + +### Changed + +- Body as `"0"` is now properly added to a response. +- Now allowing forward seeking in CachingStream. +- Now properly parsing HTTP requests that contain proxy targets in + `parse_request`. +- functions.php is now conditionally required. +- user-info is no longer dropped when resolving URIs. + + +## [1.1.0] - 2015-06-24 + +### Changed + +- URIs can now be relative. +- `multipart/form-data` headers are now overridden case-insensitively. +- URI paths no longer encode the following characters because they are allowed + in URIs: "(", ")", "*", "!", "'" +- A port is no longer added to a URI when the scheme is missing and no port is + present. + + +## 1.0.0 - 2015-05-19 + +Initial release. + +Currently unsupported: + +- `Psr\Http\Message\ServerRequestInterface` +- `Psr\Http\Message\UploadedFileInterface` + + + +[Unreleased]: https://github.com/guzzle/psr7/compare/1.6.0...HEAD +[1.6.0]: https://github.com/guzzle/psr7/compare/1.5.2...1.6.0 +[1.5.2]: https://github.com/guzzle/psr7/compare/1.5.1...1.5.2 +[1.5.1]: https://github.com/guzzle/psr7/compare/1.5.0...1.5.1 +[1.5.0]: https://github.com/guzzle/psr7/compare/1.4.2...1.5.0 +[1.4.2]: https://github.com/guzzle/psr7/compare/1.4.1...1.4.2 +[1.4.1]: https://github.com/guzzle/psr7/compare/1.4.0...1.4.1 +[1.4.0]: https://github.com/guzzle/psr7/compare/1.3.1...1.4.0 +[1.3.1]: https://github.com/guzzle/psr7/compare/1.3.0...1.3.1 +[1.3.0]: https://github.com/guzzle/psr7/compare/1.2.3...1.3.0 +[1.2.3]: https://github.com/guzzle/psr7/compare/1.2.2...1.2.3 +[1.2.2]: https://github.com/guzzle/psr7/compare/1.2.1...1.2.2 +[1.2.1]: https://github.com/guzzle/psr7/compare/1.2.0...1.2.1 +[1.2.0]: https://github.com/guzzle/psr7/compare/1.1.0...1.2.0 +[1.1.0]: https://github.com/guzzle/psr7/compare/1.0.0...1.1.0 diff --git a/vendor/guzzlehttp/psr7/LICENSE b/vendor/guzzlehttp/psr7/LICENSE new file mode 100644 index 000000000..581d95f92 --- /dev/null +++ b/vendor/guzzlehttp/psr7/LICENSE @@ -0,0 +1,19 @@ +Copyright (c) 2015 Michael Dowling, https://github.com/mtdowling + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/guzzlehttp/psr7/README.md b/vendor/guzzlehttp/psr7/README.md new file mode 100644 index 000000000..acfabfdcb --- /dev/null +++ b/vendor/guzzlehttp/psr7/README.md @@ -0,0 +1,809 @@ +# PSR-7 Message Implementation + +This repository contains a full [PSR-7](http://www.php-fig.org/psr/psr-7/) +message implementation, several stream decorators, and some helpful +functionality like query string parsing. + + +[![Build Status](https://travis-ci.org/guzzle/psr7.svg?branch=master)](https://travis-ci.org/guzzle/psr7) + + +# Stream implementation + +This package comes with a number of stream implementations and stream +decorators. + + +## AppendStream + +`GuzzleHttp\Psr7\AppendStream` + +Reads from multiple streams, one after the other. + +```php +use GuzzleHttp\Psr7; + +$a = Psr7\Utils::streamFor('abc, '); +$b = Psr7\Utils::streamFor('123.'); +$composed = new Psr7\AppendStream([$a, $b]); + +$composed->addStream(Psr7\Utils::streamFor(' Above all listen to me')); + +echo $composed; // abc, 123. Above all listen to me. +``` + + +## BufferStream + +`GuzzleHttp\Psr7\BufferStream` + +Provides a buffer stream that can be written to fill a buffer, and read +from to remove bytes from the buffer. + +This stream returns a "hwm" metadata value that tells upstream consumers +what the configured high water mark of the stream is, or the maximum +preferred size of the buffer. + +```php +use GuzzleHttp\Psr7; + +// When more than 1024 bytes are in the buffer, it will begin returning +// false to writes. This is an indication that writers should slow down. +$buffer = new Psr7\BufferStream(1024); +``` + + +## CachingStream + +The CachingStream is used to allow seeking over previously read bytes on +non-seekable streams. This can be useful when transferring a non-seekable +entity body fails due to needing to rewind the stream (for example, resulting +from a redirect). Data that is read from the remote stream will be buffered in +a PHP temp stream so that previously read bytes are cached first in memory, +then on disk. + +```php +use GuzzleHttp\Psr7; + +$original = Psr7\Utils::streamFor(fopen('http://www.google.com', 'r')); +$stream = new Psr7\CachingStream($original); + +$stream->read(1024); +echo $stream->tell(); +// 1024 + +$stream->seek(0); +echo $stream->tell(); +// 0 +``` + + +## DroppingStream + +`GuzzleHttp\Psr7\DroppingStream` + +Stream decorator that begins dropping data once the size of the underlying +stream becomes too full. + +```php +use GuzzleHttp\Psr7; + +// Create an empty stream +$stream = Psr7\Utils::streamFor(); + +// Start dropping data when the stream has more than 10 bytes +$dropping = new Psr7\DroppingStream($stream, 10); + +$dropping->write('01234567890123456789'); +echo $stream; // 0123456789 +``` + + +## FnStream + +`GuzzleHttp\Psr7\FnStream` + +Compose stream implementations based on a hash of functions. + +Allows for easy testing and extension of a provided stream without needing +to create a concrete class for a simple extension point. + +```php + +use GuzzleHttp\Psr7; + +$stream = Psr7\Utils::streamFor('hi'); +$fnStream = Psr7\FnStream::decorate($stream, [ + 'rewind' => function () use ($stream) { + echo 'About to rewind - '; + $stream->rewind(); + echo 'rewound!'; + } +]); + +$fnStream->rewind(); +// Outputs: About to rewind - rewound! +``` + + +## InflateStream + +`GuzzleHttp\Psr7\InflateStream` + +Uses PHP's zlib.inflate filter to inflate deflate or gzipped content. + +This stream decorator skips the first 10 bytes of the given stream to remove +the gzip header, converts the provided stream to a PHP stream resource, +then appends the zlib.inflate filter. The stream is then converted back +to a Guzzle stream resource to be used as a Guzzle stream. + + +## LazyOpenStream + +`GuzzleHttp\Psr7\LazyOpenStream` + +Lazily reads or writes to a file that is opened only after an IO operation +take place on the stream. + +```php +use GuzzleHttp\Psr7; + +$stream = new Psr7\LazyOpenStream('/path/to/file', 'r'); +// The file has not yet been opened... + +echo $stream->read(10); +// The file is opened and read from only when needed. +``` + + +## LimitStream + +`GuzzleHttp\Psr7\LimitStream` + +LimitStream can be used to read a subset or slice of an existing stream object. +This can be useful for breaking a large file into smaller pieces to be sent in +chunks (e.g. Amazon S3's multipart upload API). + +```php +use GuzzleHttp\Psr7; + +$original = Psr7\Utils::streamFor(fopen('/tmp/test.txt', 'r+')); +echo $original->getSize(); +// >>> 1048576 + +// Limit the size of the body to 1024 bytes and start reading from byte 2048 +$stream = new Psr7\LimitStream($original, 1024, 2048); +echo $stream->getSize(); +// >>> 1024 +echo $stream->tell(); +// >>> 0 +``` + + +## MultipartStream + +`GuzzleHttp\Psr7\MultipartStream` + +Stream that when read returns bytes for a streaming multipart or +multipart/form-data stream. + + +## NoSeekStream + +`GuzzleHttp\Psr7\NoSeekStream` + +NoSeekStream wraps a stream and does not allow seeking. + +```php +use GuzzleHttp\Psr7; + +$original = Psr7\Utils::streamFor('foo'); +$noSeek = new Psr7\NoSeekStream($original); + +echo $noSeek->read(3); +// foo +var_export($noSeek->isSeekable()); +// false +$noSeek->seek(0); +var_export($noSeek->read(3)); +// NULL +``` + + +## PumpStream + +`GuzzleHttp\Psr7\PumpStream` + +Provides a read only stream that pumps data from a PHP callable. + +When invoking the provided callable, the PumpStream will pass the amount of +data requested to read to the callable. The callable can choose to ignore +this value and return fewer or more bytes than requested. Any extra data +returned by the provided callable is buffered internally until drained using +the read() function of the PumpStream. The provided callable MUST return +false when there is no more data to read. + + +## Implementing stream decorators + +Creating a stream decorator is very easy thanks to the +`GuzzleHttp\Psr7\StreamDecoratorTrait`. This trait provides methods that +implement `Psr\Http\Message\StreamInterface` by proxying to an underlying +stream. Just `use` the `StreamDecoratorTrait` and implement your custom +methods. + +For example, let's say we wanted to call a specific function each time the last +byte is read from a stream. This could be implemented by overriding the +`read()` method. + +```php +use Psr\Http\Message\StreamInterface; +use GuzzleHttp\Psr7\StreamDecoratorTrait; + +class EofCallbackStream implements StreamInterface +{ + use StreamDecoratorTrait; + + private $callback; + + public function __construct(StreamInterface $stream, callable $cb) + { + $this->stream = $stream; + $this->callback = $cb; + } + + public function read($length) + { + $result = $this->stream->read($length); + + // Invoke the callback when EOF is hit. + if ($this->eof()) { + call_user_func($this->callback); + } + + return $result; + } +} +``` + +This decorator could be added to any existing stream and used like so: + +```php +use GuzzleHttp\Psr7; + +$original = Psr7\Utils::streamFor('foo'); + +$eofStream = new EofCallbackStream($original, function () { + echo 'EOF!'; +}); + +$eofStream->read(2); +$eofStream->read(1); +// echoes "EOF!" +$eofStream->seek(0); +$eofStream->read(3); +// echoes "EOF!" +``` + + +## PHP StreamWrapper + +You can use the `GuzzleHttp\Psr7\StreamWrapper` class if you need to use a +PSR-7 stream as a PHP stream resource. + +Use the `GuzzleHttp\Psr7\StreamWrapper::getResource()` method to create a PHP +stream from a PSR-7 stream. + +```php +use GuzzleHttp\Psr7\StreamWrapper; + +$stream = GuzzleHttp\Psr7\Utils::streamFor('hello!'); +$resource = StreamWrapper::getResource($stream); +echo fread($resource, 6); // outputs hello! +``` + + +# Static API + +There are various static methods available under the `GuzzleHttp\Psr7` namespace. + + +## `GuzzleHttp\Psr7\Message::toString` + +`public static function toString(MessageInterface $message): string` + +Returns the string representation of an HTTP message. + +```php +$request = new GuzzleHttp\Psr7\Request('GET', 'http://example.com'); +echo GuzzleHttp\Psr7\Message::toString($request); +``` + + +## `GuzzleHttp\Psr7\Message::bodySummary` + +`public static function bodySummary(MessageInterface $message, int $truncateAt = 120): string|null` + +Get a short summary of the message body. + +Will return `null` if the response is not printable. + + +## `GuzzleHttp\Psr7\Message::rewindBody` + +`public static function rewindBody(MessageInterface $message): void` + +Attempts to rewind a message body and throws an exception on failure. + +The body of the message will only be rewound if a call to `tell()` +returns a value other than `0`. + + +## `GuzzleHttp\Psr7\Message::parseMessage` + +`public static function parseMessage(string $message): array` + +Parses an HTTP message into an associative array. + +The array contains the "start-line" key containing the start line of +the message, "headers" key containing an associative array of header +array values, and a "body" key containing the body of the message. + + +## `GuzzleHttp\Psr7\Message::parseRequestUri` + +`public static function parseRequestUri(string $path, array $headers): string` + +Constructs a URI for an HTTP request message. + + +## `GuzzleHttp\Psr7\Message::parseRequest` + +`public static function parseRequest(string $message): Request` + +Parses a request message string into a request object. + + +## `GuzzleHttp\Psr7\Message::parseResponse` + +`public static function parseResponse(string $message): Response` + +Parses a response message string into a response object. + + +## `GuzzleHttp\Psr7\Header::parse` + +`public static function parse(string|array $header): array` + +Parse an array of header values containing ";" separated data into an +array of associative arrays representing the header key value pair data +of the header. When a parameter does not contain a value, but just +contains a key, this function will inject a key with a '' string value. + + +## `GuzzleHttp\Psr7\Header::normalize` + +`public static function normalize(string|array $header): array` + +Converts an array of header values that may contain comma separated +headers into an array of headers with no comma separated values. + + +## `GuzzleHttp\Psr7\Query::parse` + +`public static function parse(string $str, int|bool $urlEncoding = true): array` + +Parse a query string into an associative array. + +If multiple values are found for the same key, the value of that key +value pair will become an array. This function does not parse nested +PHP style arrays into an associative array (e.g., `foo[a]=1&foo[b]=2` +will be parsed into `['foo[a]' => '1', 'foo[b]' => '2'])`. + + +## `GuzzleHttp\Psr7\Query::build` + +`public static function build(array $params, int|false $encoding = PHP_QUERY_RFC3986): string` + +Build a query string from an array of key value pairs. + +This function can use the return value of `parse()` to build a query +string. This function does not modify the provided keys when an array is +encountered (like `http_build_query()` would). + + +## `GuzzleHttp\Psr7\Utils::caselessRemove` + +`public static function caselessRemove(iterable $keys, $keys, array $data): array` + +Remove the items given by the keys, case insensitively from the data. + + +## `GuzzleHttp\Psr7\Utils::copyToStream` + +`public static function copyToStream(StreamInterface $source, StreamInterface $dest, int $maxLen = -1): void` + +Copy the contents of a stream into another stream until the given number +of bytes have been read. + + +## `GuzzleHttp\Psr7\Utils::copyToString` + +`public static function copyToString(StreamInterface $stream, int $maxLen = -1): string` + +Copy the contents of a stream into a string until the given number of +bytes have been read. + + +## `GuzzleHttp\Psr7\Utils::hash` + +`public static function hash(StreamInterface $stream, string $algo, bool $rawOutput = false): string` + +Calculate a hash of a stream. + +This method reads the entire stream to calculate a rolling hash, based on +PHP's `hash_init` functions. + + +## `GuzzleHttp\Psr7\Utils::modifyRequest` + +`public static function modifyRequest(RequestInterface $request, array $changes): RequestInterface` + +Clone and modify a request with the given changes. + +This method is useful for reducing the number of clones needed to mutate +a message. + +- method: (string) Changes the HTTP method. +- set_headers: (array) Sets the given headers. +- remove_headers: (array) Remove the given headers. +- body: (mixed) Sets the given body. +- uri: (UriInterface) Set the URI. +- query: (string) Set the query string value of the URI. +- version: (string) Set the protocol version. + + +## `GuzzleHttp\Psr7\Utils::readLine` + +`public static function readLine(StreamInterface $stream, int $maxLength = null): string` + +Read a line from the stream up to the maximum allowed buffer length. + + +## `GuzzleHttp\Psr7\Utils::streamFor` + +`public static function streamFor(resource|string|null|int|float|bool|StreamInterface|callable|\Iterator $resource = '', array $options = []): StreamInterface` + +Create a new stream based on the input type. + +Options is an associative array that can contain the following keys: + +- metadata: Array of custom metadata. +- size: Size of the stream. + +This method accepts the following `$resource` types: + +- `Psr\Http\Message\StreamInterface`: Returns the value as-is. +- `string`: Creates a stream object that uses the given string as the contents. +- `resource`: Creates a stream object that wraps the given PHP stream resource. +- `Iterator`: If the provided value implements `Iterator`, then a read-only + stream object will be created that wraps the given iterable. Each time the + stream is read from, data from the iterator will fill a buffer and will be + continuously called until the buffer is equal to the requested read size. + Subsequent read calls will first read from the buffer and then call `next` + on the underlying iterator until it is exhausted. +- `object` with `__toString()`: If the object has the `__toString()` method, + the object will be cast to a string and then a stream will be returned that + uses the string value. +- `NULL`: When `null` is passed, an empty stream object is returned. +- `callable` When a callable is passed, a read-only stream object will be + created that invokes the given callable. The callable is invoked with the + number of suggested bytes to read. The callable can return any number of + bytes, but MUST return `false` when there is no more data to return. The + stream object that wraps the callable will invoke the callable until the + number of requested bytes are available. Any additional bytes will be + buffered and used in subsequent reads. + +```php +$stream = GuzzleHttp\Psr7\Utils::streamFor('foo'); +$stream = GuzzleHttp\Psr7\Utils::streamFor(fopen('/path/to/file', 'r')); + +$generator = function ($bytes) { + for ($i = 0; $i < $bytes; $i++) { + yield ' '; + } +} + +$stream = GuzzleHttp\Psr7\Utils::streamFor($generator(100)); +``` + + +## `GuzzleHttp\Psr7\Utils::tryFopen` + +`public static function tryFopen(string $filename, string $mode): resource` + +Safely opens a PHP stream resource using a filename. + +When fopen fails, PHP normally raises a warning. This function adds an +error handler that checks for errors and throws an exception instead. + + +## `GuzzleHttp\Psr7\Utils::uriFor` + +`public static function uriFor(string|UriInterface $uri): UriInterface` + +Returns a UriInterface for the given value. + +This function accepts a string or UriInterface and returns a +UriInterface for the given value. If the value is already a +UriInterface, it is returned as-is. + + +## `GuzzleHttp\Psr7\MimeType::fromFilename` + +`public static function fromFilename(string $filename): string|null` + +Determines the mimetype of a file by looking at its extension. + + +## `GuzzleHttp\Psr7\MimeType::fromExtension` + +`public static function fromExtension(string $extension): string|null` + +Maps a file extensions to a mimetype. + + +## Upgrading from Function API + +The static API was first introduced in 1.7.0, in order to mitigate problems with functions conflicting between global and local copies of the package. The function API will be removed in 2.0.0. A migration table has been provided here for your convenience: + +| Original Function | Replacement Method | +|----------------|----------------| +| `str` | `Message::toString` | +| `uri_for` | `Utils::uriFor` | +| `stream_for` | `Utils::streamFor` | +| `parse_header` | `Header::parse` | +| `normalize_header` | `Header::normalize` | +| `modify_request` | `Utils::modifyRequest` | +| `rewind_body` | `Message::rewindBody` | +| `try_fopen` | `Utils::tryFopen` | +| `copy_to_string` | `Utils::copyToString` | +| `copy_to_stream` | `Utils::copyToStream` | +| `hash` | `Utils::hash` | +| `readline` | `Utils::readLine` | +| `parse_request` | `Message::parseRequest` | +| `parse_response` | `Message::parseResponse` | +| `parse_query` | `Query::parse` | +| `build_query` | `Query::build` | +| `mimetype_from_filename` | `MimeType::fromFilename` | +| `mimetype_from_extension` | `MimeType::fromExtension` | +| `_parse_message` | `Message::parseMessage` | +| `_parse_request_uri` | `Message::parseRequestUri` | +| `get_message_body_summary` | `Message::bodySummary` | +| `_caseless_remove` | `Utils::caselessRemove` | + + +# Additional URI Methods + +Aside from the standard `Psr\Http\Message\UriInterface` implementation in form of the `GuzzleHttp\Psr7\Uri` class, +this library also provides additional functionality when working with URIs as static methods. + +## URI Types + +An instance of `Psr\Http\Message\UriInterface` can either be an absolute URI or a relative reference. +An absolute URI has a scheme. A relative reference is used to express a URI relative to another URI, +the base URI. Relative references can be divided into several forms according to +[RFC 3986 Section 4.2](https://tools.ietf.org/html/rfc3986#section-4.2): + +- network-path references, e.g. `//example.com/path` +- absolute-path references, e.g. `/path` +- relative-path references, e.g. `subpath` + +The following methods can be used to identify the type of the URI. + +### `GuzzleHttp\Psr7\Uri::isAbsolute` + +`public static function isAbsolute(UriInterface $uri): bool` + +Whether the URI is absolute, i.e. it has a scheme. + +### `GuzzleHttp\Psr7\Uri::isNetworkPathReference` + +`public static function isNetworkPathReference(UriInterface $uri): bool` + +Whether the URI is a network-path reference. A relative reference that begins with two slash characters is +termed an network-path reference. + +### `GuzzleHttp\Psr7\Uri::isAbsolutePathReference` + +`public static function isAbsolutePathReference(UriInterface $uri): bool` + +Whether the URI is a absolute-path reference. A relative reference that begins with a single slash character is +termed an absolute-path reference. + +### `GuzzleHttp\Psr7\Uri::isRelativePathReference` + +`public static function isRelativePathReference(UriInterface $uri): bool` + +Whether the URI is a relative-path reference. A relative reference that does not begin with a slash character is +termed a relative-path reference. + +### `GuzzleHttp\Psr7\Uri::isSameDocumentReference` + +`public static function isSameDocumentReference(UriInterface $uri, UriInterface $base = null): bool` + +Whether the URI is a same-document reference. A same-document reference refers to a URI that is, aside from its +fragment component, identical to the base URI. When no base URI is given, only an empty URI reference +(apart from its fragment) is considered a same-document reference. + +## URI Components + +Additional methods to work with URI components. + +### `GuzzleHttp\Psr7\Uri::isDefaultPort` + +`public static function isDefaultPort(UriInterface $uri): bool` + +Whether the URI has the default port of the current scheme. `Psr\Http\Message\UriInterface::getPort` may return null +or the standard port. This method can be used independently of the implementation. + +### `GuzzleHttp\Psr7\Uri::composeComponents` + +`public static function composeComponents($scheme, $authority, $path, $query, $fragment): string` + +Composes a URI reference string from its various components according to +[RFC 3986 Section 5.3](https://tools.ietf.org/html/rfc3986#section-5.3). Usually this method does not need to be called +manually but instead is used indirectly via `Psr\Http\Message\UriInterface::__toString`. + +### `GuzzleHttp\Psr7\Uri::fromParts` + +`public static function fromParts(array $parts): UriInterface` + +Creates a URI from a hash of [`parse_url`](http://php.net/manual/en/function.parse-url.php) components. + + +### `GuzzleHttp\Psr7\Uri::withQueryValue` + +`public static function withQueryValue(UriInterface $uri, $key, $value): UriInterface` + +Creates a new URI with a specific query string value. Any existing query string values that exactly match the +provided key are removed and replaced with the given key value pair. A value of null will set the query string +key without a value, e.g. "key" instead of "key=value". + +### `GuzzleHttp\Psr7\Uri::withQueryValues` + +`public static function withQueryValues(UriInterface $uri, array $keyValueArray): UriInterface` + +Creates a new URI with multiple query string values. It has the same behavior as `withQueryValue()` but for an +associative array of key => value. + +### `GuzzleHttp\Psr7\Uri::withoutQueryValue` + +`public static function withoutQueryValue(UriInterface $uri, $key): UriInterface` + +Creates a new URI with a specific query string value removed. Any existing query string values that exactly match the +provided key are removed. + +## Reference Resolution + +`GuzzleHttp\Psr7\UriResolver` provides methods to resolve a URI reference in the context of a base URI according +to [RFC 3986 Section 5](https://tools.ietf.org/html/rfc3986#section-5). This is for example also what web browsers +do when resolving a link in a website based on the current request URI. + +### `GuzzleHttp\Psr7\UriResolver::resolve` + +`public static function resolve(UriInterface $base, UriInterface $rel): UriInterface` + +Converts the relative URI into a new URI that is resolved against the base URI. + +### `GuzzleHttp\Psr7\UriResolver::removeDotSegments` + +`public static function removeDotSegments(string $path): string` + +Removes dot segments from a path and returns the new path according to +[RFC 3986 Section 5.2.4](https://tools.ietf.org/html/rfc3986#section-5.2.4). + +### `GuzzleHttp\Psr7\UriResolver::relativize` + +`public static function relativize(UriInterface $base, UriInterface $target): UriInterface` + +Returns the target URI as a relative reference from the base URI. This method is the counterpart to resolve(): + +```php +(string) $target === (string) UriResolver::resolve($base, UriResolver::relativize($base, $target)) +``` + +One use-case is to use the current request URI as base URI and then generate relative links in your documents +to reduce the document size or offer self-contained downloadable document archives. + +```php +$base = new Uri('http://example.com/a/b/'); +echo UriResolver::relativize($base, new Uri('http://example.com/a/b/c')); // prints 'c'. +echo UriResolver::relativize($base, new Uri('http://example.com/a/x/y')); // prints '../x/y'. +echo UriResolver::relativize($base, new Uri('http://example.com/a/b/?q')); // prints '?q'. +echo UriResolver::relativize($base, new Uri('http://example.org/a/b/')); // prints '//example.org/a/b/'. +``` + +## Normalization and Comparison + +`GuzzleHttp\Psr7\UriNormalizer` provides methods to normalize and compare URIs according to +[RFC 3986 Section 6](https://tools.ietf.org/html/rfc3986#section-6). + +### `GuzzleHttp\Psr7\UriNormalizer::normalize` + +`public static function normalize(UriInterface $uri, $flags = self::PRESERVING_NORMALIZATIONS): UriInterface` + +Returns a normalized URI. The scheme and host component are already normalized to lowercase per PSR-7 UriInterface. +This methods adds additional normalizations that can be configured with the `$flags` parameter which is a bitmask +of normalizations to apply. The following normalizations are available: + +- `UriNormalizer::PRESERVING_NORMALIZATIONS` + + Default normalizations which only include the ones that preserve semantics. + +- `UriNormalizer::CAPITALIZE_PERCENT_ENCODING` + + All letters within a percent-encoding triplet (e.g., "%3A") are case-insensitive, and should be capitalized. + + Example: `http://example.org/a%c2%b1b` → `http://example.org/a%C2%B1b` + +- `UriNormalizer::DECODE_UNRESERVED_CHARACTERS` + + Decodes percent-encoded octets of unreserved characters. For consistency, percent-encoded octets in the ranges of + ALPHA (%41–%5A and %61–%7A), DIGIT (%30–%39), hyphen (%2D), period (%2E), underscore (%5F), or tilde (%7E) should + not be created by URI producers and, when found in a URI, should be decoded to their corresponding unreserved + characters by URI normalizers. + + Example: `http://example.org/%7Eusern%61me/` → `http://example.org/~username/` + +- `UriNormalizer::CONVERT_EMPTY_PATH` + + Converts the empty path to "/" for http and https URIs. + + Example: `http://example.org` → `http://example.org/` + +- `UriNormalizer::REMOVE_DEFAULT_HOST` + + Removes the default host of the given URI scheme from the URI. Only the "file" scheme defines the default host + "localhost". All of `file:/myfile`, `file:///myfile`, and `file://localhost/myfile` are equivalent according to + RFC 3986. + + Example: `file://localhost/myfile` → `file:///myfile` + +- `UriNormalizer::REMOVE_DEFAULT_PORT` + + Removes the default port of the given URI scheme from the URI. + + Example: `http://example.org:80/` → `http://example.org/` + +- `UriNormalizer::REMOVE_DOT_SEGMENTS` + + Removes unnecessary dot-segments. Dot-segments in relative-path references are not removed as it would + change the semantics of the URI reference. + + Example: `http://example.org/../a/b/../c/./d.html` → `http://example.org/a/c/d.html` + +- `UriNormalizer::REMOVE_DUPLICATE_SLASHES` + + Paths which include two or more adjacent slashes are converted to one. Webservers usually ignore duplicate slashes + and treat those URIs equivalent. But in theory those URIs do not need to be equivalent. So this normalization + may change the semantics. Encoded slashes (%2F) are not removed. + + Example: `http://example.org//foo///bar.html` → `http://example.org/foo/bar.html` + +- `UriNormalizer::SORT_QUERY_PARAMETERS` + + Sort query parameters with their values in alphabetical order. However, the order of parameters in a URI may be + significant (this is not defined by the standard). So this normalization is not safe and may change the semantics + of the URI. + + Example: `?lang=en&article=fred` → `?article=fred&lang=en` + +### `GuzzleHttp\Psr7\UriNormalizer::isEquivalent` + +`public static function isEquivalent(UriInterface $uri1, UriInterface $uri2, $normalizations = self::PRESERVING_NORMALIZATIONS): bool` + +Whether two URIs can be considered equivalent. Both URIs are normalized automatically before comparison with the given +`$normalizations` bitmask. The method also accepts relative URI references and returns true when they are equivalent. +This of course assumes they will be resolved against the same base URI. If this is not the case, determination of +equivalence or difference of relative references does not mean anything. diff --git a/vendor/guzzlehttp/psr7/composer.json b/vendor/guzzlehttp/psr7/composer.json new file mode 100644 index 000000000..58dcb07e4 --- /dev/null +++ b/vendor/guzzlehttp/psr7/composer.json @@ -0,0 +1,49 @@ +{ + "name": "guzzlehttp/psr7", + "type": "library", + "description": "PSR-7 message implementation that also provides common utility methods", + "keywords": ["request", "response", "message", "stream", "http", "uri", "url", "psr-7"], + "license": "MIT", + "authors": [ + { + "name": "Michael Dowling", + "email": "mtdowling@gmail.com", + "homepage": "https://github.com/mtdowling" + }, + { + "name": "Tobias Schultze", + "homepage": "https://github.com/Tobion" + } + ], + "require": { + "php": ">=5.4.0", + "psr/http-message": "~1.0", + "ralouphie/getallheaders": "^2.0.5 || ^3.0.0" + }, + "require-dev": { + "phpunit/phpunit": "~4.8.36 || ^5.7.27 || ^6.5.14 || ^7.5.20 || ^8.5.8 || ^9.3.10", + "ext-zlib": "*" + }, + "provide": { + "psr/http-message-implementation": "1.0" + }, + "suggest": { + "laminas/laminas-httphandlerrunner": "Emit PSR-7 responses" + }, + "autoload": { + "psr-4": { + "GuzzleHttp\\Psr7\\": "src/" + }, + "files": ["src/functions_include.php"] + }, + "autoload-dev": { + "psr-4": { + "GuzzleHttp\\Tests\\Psr7\\": "tests/" + } + }, + "extra": { + "branch-alias": { + "dev-master": "1.7-dev" + } + } +} diff --git a/vendor/guzzlehttp/psr7/src/AppendStream.php b/vendor/guzzlehttp/psr7/src/AppendStream.php new file mode 100644 index 000000000..86e7a23ba --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/AppendStream.php @@ -0,0 +1,244 @@ +addStream($stream); + } + } + + public function __toString() + { + try { + $this->rewind(); + return $this->getContents(); + } catch (\Exception $e) { + return ''; + } + } + + /** + * Add a stream to the AppendStream + * + * @param StreamInterface $stream Stream to append. Must be readable. + * + * @throws \InvalidArgumentException if the stream is not readable + */ + public function addStream(StreamInterface $stream) + { + if (!$stream->isReadable()) { + throw new \InvalidArgumentException('Each stream must be readable'); + } + + // The stream is only seekable if all streams are seekable + if (!$stream->isSeekable()) { + $this->seekable = false; + } + + $this->streams[] = $stream; + } + + public function getContents() + { + return Utils::copyToString($this); + } + + /** + * Closes each attached stream. + * + * {@inheritdoc} + */ + public function close() + { + $this->pos = $this->current = 0; + $this->seekable = true; + + foreach ($this->streams as $stream) { + $stream->close(); + } + + $this->streams = []; + } + + /** + * Detaches each attached stream. + * + * Returns null as it's not clear which underlying stream resource to return. + * + * {@inheritdoc} + */ + public function detach() + { + $this->pos = $this->current = 0; + $this->seekable = true; + + foreach ($this->streams as $stream) { + $stream->detach(); + } + + $this->streams = []; + + return null; + } + + public function tell() + { + return $this->pos; + } + + /** + * Tries to calculate the size by adding the size of each stream. + * + * If any of the streams do not return a valid number, then the size of the + * append stream cannot be determined and null is returned. + * + * {@inheritdoc} + */ + public function getSize() + { + $size = 0; + + foreach ($this->streams as $stream) { + $s = $stream->getSize(); + if ($s === null) { + return null; + } + $size += $s; + } + + return $size; + } + + public function eof() + { + return !$this->streams || + ($this->current >= count($this->streams) - 1 && + $this->streams[$this->current]->eof()); + } + + public function rewind() + { + $this->seek(0); + } + + /** + * Attempts to seek to the given position. Only supports SEEK_SET. + * + * {@inheritdoc} + */ + public function seek($offset, $whence = SEEK_SET) + { + if (!$this->seekable) { + throw new \RuntimeException('This AppendStream is not seekable'); + } elseif ($whence !== SEEK_SET) { + throw new \RuntimeException('The AppendStream can only seek with SEEK_SET'); + } + + $this->pos = $this->current = 0; + + // Rewind each stream + foreach ($this->streams as $i => $stream) { + try { + $stream->rewind(); + } catch (\Exception $e) { + throw new \RuntimeException('Unable to seek stream ' + . $i . ' of the AppendStream', 0, $e); + } + } + + // Seek to the actual position by reading from each stream + while ($this->pos < $offset && !$this->eof()) { + $result = $this->read(min(8096, $offset - $this->pos)); + if ($result === '') { + break; + } + } + } + + /** + * Reads from all of the appended streams until the length is met or EOF. + * + * {@inheritdoc} + */ + public function read($length) + { + $buffer = ''; + $total = count($this->streams) - 1; + $remaining = $length; + $progressToNext = false; + + while ($remaining > 0) { + + // Progress to the next stream if needed. + if ($progressToNext || $this->streams[$this->current]->eof()) { + $progressToNext = false; + if ($this->current === $total) { + break; + } + $this->current++; + } + + $result = $this->streams[$this->current]->read($remaining); + + // Using a loose comparison here to match on '', false, and null + if ($result == null) { + $progressToNext = true; + continue; + } + + $buffer .= $result; + $remaining = $length - strlen($buffer); + } + + $this->pos += strlen($buffer); + + return $buffer; + } + + public function isReadable() + { + return true; + } + + public function isWritable() + { + return false; + } + + public function isSeekable() + { + return $this->seekable; + } + + public function write($string) + { + throw new \RuntimeException('Cannot write to an AppendStream'); + } + + public function getMetadata($key = null) + { + return $key ? null : []; + } +} diff --git a/vendor/guzzlehttp/psr7/src/BufferStream.php b/vendor/guzzlehttp/psr7/src/BufferStream.php new file mode 100644 index 000000000..627e4a5f1 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/BufferStream.php @@ -0,0 +1,140 @@ +hwm = $hwm; + } + + public function __toString() + { + return $this->getContents(); + } + + public function getContents() + { + $buffer = $this->buffer; + $this->buffer = ''; + + return $buffer; + } + + public function close() + { + $this->buffer = ''; + } + + public function detach() + { + $this->close(); + + return null; + } + + public function getSize() + { + return strlen($this->buffer); + } + + public function isReadable() + { + return true; + } + + public function isWritable() + { + return true; + } + + public function isSeekable() + { + return false; + } + + public function rewind() + { + $this->seek(0); + } + + public function seek($offset, $whence = SEEK_SET) + { + throw new \RuntimeException('Cannot seek a BufferStream'); + } + + public function eof() + { + return strlen($this->buffer) === 0; + } + + public function tell() + { + throw new \RuntimeException('Cannot determine the position of a BufferStream'); + } + + /** + * Reads data from the buffer. + */ + public function read($length) + { + $currentLength = strlen($this->buffer); + + if ($length >= $currentLength) { + // No need to slice the buffer because we don't have enough data. + $result = $this->buffer; + $this->buffer = ''; + } else { + // Slice up the result to provide a subset of the buffer. + $result = substr($this->buffer, 0, $length); + $this->buffer = substr($this->buffer, $length); + } + + return $result; + } + + /** + * Writes data to the buffer. + */ + public function write($string) + { + $this->buffer .= $string; + + // TODO: What should happen here? + if (strlen($this->buffer) >= $this->hwm) { + return false; + } + + return strlen($string); + } + + public function getMetadata($key = null) + { + if ($key == 'hwm') { + return $this->hwm; + } + + return $key ? null : []; + } +} diff --git a/vendor/guzzlehttp/psr7/src/CachingStream.php b/vendor/guzzlehttp/psr7/src/CachingStream.php new file mode 100644 index 000000000..244d2a063 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/CachingStream.php @@ -0,0 +1,139 @@ +remoteStream = $stream; + $this->stream = $target ?: new Stream(fopen('php://temp', 'r+')); + } + + public function getSize() + { + return max($this->stream->getSize(), $this->remoteStream->getSize()); + } + + public function rewind() + { + $this->seek(0); + } + + public function seek($offset, $whence = SEEK_SET) + { + if ($whence == SEEK_SET) { + $byte = $offset; + } elseif ($whence == SEEK_CUR) { + $byte = $offset + $this->tell(); + } elseif ($whence == SEEK_END) { + $size = $this->remoteStream->getSize(); + if ($size === null) { + $size = $this->cacheEntireStream(); + } + $byte = $size + $offset; + } else { + throw new \InvalidArgumentException('Invalid whence'); + } + + $diff = $byte - $this->stream->getSize(); + + if ($diff > 0) { + // Read the remoteStream until we have read in at least the amount + // of bytes requested, or we reach the end of the file. + while ($diff > 0 && !$this->remoteStream->eof()) { + $this->read($diff); + $diff = $byte - $this->stream->getSize(); + } + } else { + // We can just do a normal seek since we've already seen this byte. + $this->stream->seek($byte); + } + } + + public function read($length) + { + // Perform a regular read on any previously read data from the buffer + $data = $this->stream->read($length); + $remaining = $length - strlen($data); + + // More data was requested so read from the remote stream + if ($remaining) { + // If data was written to the buffer in a position that would have + // been filled from the remote stream, then we must skip bytes on + // the remote stream to emulate overwriting bytes from that + // position. This mimics the behavior of other PHP stream wrappers. + $remoteData = $this->remoteStream->read( + $remaining + $this->skipReadBytes + ); + + if ($this->skipReadBytes) { + $len = strlen($remoteData); + $remoteData = substr($remoteData, $this->skipReadBytes); + $this->skipReadBytes = max(0, $this->skipReadBytes - $len); + } + + $data .= $remoteData; + $this->stream->write($remoteData); + } + + return $data; + } + + public function write($string) + { + // When appending to the end of the currently read stream, you'll want + // to skip bytes from being read from the remote stream to emulate + // other stream wrappers. Basically replacing bytes of data of a fixed + // length. + $overflow = (strlen($string) + $this->tell()) - $this->remoteStream->tell(); + if ($overflow > 0) { + $this->skipReadBytes += $overflow; + } + + return $this->stream->write($string); + } + + public function eof() + { + return $this->stream->eof() && $this->remoteStream->eof(); + } + + /** + * Close both the remote stream and buffer stream + */ + public function close() + { + $this->remoteStream->close() && $this->stream->close(); + } + + private function cacheEntireStream() + { + $target = new FnStream(['write' => 'strlen']); + Utils::copyToStream($this, $target); + + return $this->tell(); + } +} diff --git a/vendor/guzzlehttp/psr7/src/DroppingStream.php b/vendor/guzzlehttp/psr7/src/DroppingStream.php new file mode 100644 index 000000000..e125642d3 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/DroppingStream.php @@ -0,0 +1,43 @@ +stream = $stream; + $this->maxLength = $maxLength; + } + + public function write($string) + { + $diff = $this->maxLength - $this->stream->getSize(); + + // Begin returning 0 when the underlying stream is too large. + if ($diff <= 0) { + return 0; + } + + // Write the stream or a subset of the stream if needed. + if (strlen($string) < $diff) { + return $this->stream->write($string); + } + + return $this->stream->write(substr($string, 0, $diff)); + } +} diff --git a/vendor/guzzlehttp/psr7/src/FnStream.php b/vendor/guzzlehttp/psr7/src/FnStream.php new file mode 100644 index 000000000..407577a37 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/FnStream.php @@ -0,0 +1,160 @@ +methods = $methods; + + // Create the functions on the class + foreach ($methods as $name => $fn) { + $this->{'_fn_' . $name} = $fn; + } + } + + /** + * Lazily determine which methods are not implemented. + * + * @throws \BadMethodCallException + */ + public function __get($name) + { + throw new \BadMethodCallException(str_replace('_fn_', '', $name) + . '() is not implemented in the FnStream'); + } + + /** + * The close method is called on the underlying stream only if possible. + */ + public function __destruct() + { + if (isset($this->_fn_close)) { + call_user_func($this->_fn_close); + } + } + + /** + * An unserialize would allow the __destruct to run when the unserialized value goes out of scope. + * @throws \LogicException + */ + public function __wakeup() + { + throw new \LogicException('FnStream should never be unserialized'); + } + + /** + * Adds custom functionality to an underlying stream by intercepting + * specific method calls. + * + * @param StreamInterface $stream Stream to decorate + * @param array $methods Hash of method name to a closure + * + * @return FnStream + */ + public static function decorate(StreamInterface $stream, array $methods) + { + // If any of the required methods were not provided, then simply + // proxy to the decorated stream. + foreach (array_diff(self::$slots, array_keys($methods)) as $diff) { + $methods[$diff] = [$stream, $diff]; + } + + return new self($methods); + } + + public function __toString() + { + return call_user_func($this->_fn___toString); + } + + public function close() + { + return call_user_func($this->_fn_close); + } + + public function detach() + { + return call_user_func($this->_fn_detach); + } + + public function getSize() + { + return call_user_func($this->_fn_getSize); + } + + public function tell() + { + return call_user_func($this->_fn_tell); + } + + public function eof() + { + return call_user_func($this->_fn_eof); + } + + public function isSeekable() + { + return call_user_func($this->_fn_isSeekable); + } + + public function rewind() + { + call_user_func($this->_fn_rewind); + } + + public function seek($offset, $whence = SEEK_SET) + { + call_user_func($this->_fn_seek, $offset, $whence); + } + + public function isWritable() + { + return call_user_func($this->_fn_isWritable); + } + + public function write($string) + { + return call_user_func($this->_fn_write, $string); + } + + public function isReadable() + { + return call_user_func($this->_fn_isReadable); + } + + public function read($length) + { + return call_user_func($this->_fn_read, $length); + } + + public function getContents() + { + return call_user_func($this->_fn_getContents); + } + + public function getMetadata($key = null) + { + return call_user_func($this->_fn_getMetadata, $key); + } +} diff --git a/vendor/guzzlehttp/psr7/src/Header.php b/vendor/guzzlehttp/psr7/src/Header.php new file mode 100644 index 000000000..865d74214 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Header.php @@ -0,0 +1,71 @@ +]+>|[^=]+/', $kvp, $matches)) { + $m = $matches[0]; + if (isset($m[1])) { + $part[trim($m[0], $trimmed)] = trim($m[1], $trimmed); + } else { + $part[] = trim($m[0], $trimmed); + } + } + } + if ($part) { + $params[] = $part; + } + } + + return $params; + } + + /** + * Converts an array of header values that may contain comma separated + * headers into an array of headers with no comma separated values. + * + * @param string|array $header Header to normalize. + * + * @return array Returns the normalized header field values. + */ + public static function normalize($header) + { + if (!is_array($header)) { + return array_map('trim', explode(',', $header)); + } + + $result = []; + foreach ($header as $value) { + foreach ((array) $value as $v) { + if (strpos($v, ',') === false) { + $result[] = $v; + continue; + } + foreach (preg_split('/,(?=([^"]*"[^"]*")*[^"]*$)/', $v) as $vv) { + $result[] = trim($vv); + } + } + } + + return $result; + } +} diff --git a/vendor/guzzlehttp/psr7/src/InflateStream.php b/vendor/guzzlehttp/psr7/src/InflateStream.php new file mode 100644 index 000000000..c98b96f25 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/InflateStream.php @@ -0,0 +1,53 @@ +read(10); + $filenameHeaderLength = $this->getLengthOfPossibleFilenameHeader($stream, $header); + // Skip the header, that is 10 + length of filename + 1 (nil) bytes + $stream = new LimitStream($stream, -1, 10 + $filenameHeaderLength); + $resource = StreamWrapper::getResource($stream); + stream_filter_append($resource, 'zlib.inflate', STREAM_FILTER_READ); + $this->stream = $stream->isSeekable() ? new Stream($resource) : new NoSeekStream(new Stream($resource)); + } + + /** + * @param StreamInterface $stream + * @param $header + * @return int + */ + private function getLengthOfPossibleFilenameHeader(StreamInterface $stream, $header) + { + $filename_header_length = 0; + + if (substr(bin2hex($header), 6, 2) === '08') { + // we have a filename, read until nil + $filename_header_length = 1; + while ($stream->read(1) !== chr(0)) { + $filename_header_length++; + } + } + + return $filename_header_length; + } +} diff --git a/vendor/guzzlehttp/psr7/src/LazyOpenStream.php b/vendor/guzzlehttp/psr7/src/LazyOpenStream.php new file mode 100644 index 000000000..13c7af5c8 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/LazyOpenStream.php @@ -0,0 +1,40 @@ +filename = $filename; + $this->mode = $mode; + } + + /** + * Creates the underlying stream lazily when required. + * + * @return StreamInterface + */ + protected function createStream() + { + return Utils::streamFor(Utils::tryFopen($this->filename, $this->mode)); + } +} diff --git a/vendor/guzzlehttp/psr7/src/LimitStream.php b/vendor/guzzlehttp/psr7/src/LimitStream.php new file mode 100644 index 000000000..bef9161ea --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/LimitStream.php @@ -0,0 +1,156 @@ +stream = $stream; + $this->setLimit($limit); + $this->setOffset($offset); + } + + public function eof() + { + // Always return true if the underlying stream is EOF + if ($this->stream->eof()) { + return true; + } + + // No limit and the underlying stream is not at EOF + if ($this->limit == -1) { + return false; + } + + return $this->stream->tell() >= $this->offset + $this->limit; + } + + /** + * Returns the size of the limited subset of data + * {@inheritdoc} + */ + public function getSize() + { + if (null === ($length = $this->stream->getSize())) { + return null; + } elseif ($this->limit == -1) { + return $length - $this->offset; + } else { + return min($this->limit, $length - $this->offset); + } + } + + /** + * Allow for a bounded seek on the read limited stream + * {@inheritdoc} + */ + public function seek($offset, $whence = SEEK_SET) + { + if ($whence !== SEEK_SET || $offset < 0) { + throw new \RuntimeException(sprintf( + 'Cannot seek to offset %s with whence %s', + $offset, + $whence + )); + } + + $offset += $this->offset; + + if ($this->limit !== -1) { + if ($offset > $this->offset + $this->limit) { + $offset = $this->offset + $this->limit; + } + } + + $this->stream->seek($offset); + } + + /** + * Give a relative tell() + * {@inheritdoc} + */ + public function tell() + { + return $this->stream->tell() - $this->offset; + } + + /** + * Set the offset to start limiting from + * + * @param int $offset Offset to seek to and begin byte limiting from + * + * @throws \RuntimeException if the stream cannot be seeked. + */ + public function setOffset($offset) + { + $current = $this->stream->tell(); + + if ($current !== $offset) { + // If the stream cannot seek to the offset position, then read to it + if ($this->stream->isSeekable()) { + $this->stream->seek($offset); + } elseif ($current > $offset) { + throw new \RuntimeException("Could not seek to stream offset $offset"); + } else { + $this->stream->read($offset - $current); + } + } + + $this->offset = $offset; + } + + /** + * Set the limit of bytes that the decorator allows to be read from the + * stream. + * + * @param int $limit Number of bytes to allow to be read from the stream. + * Use -1 for no limit. + */ + public function setLimit($limit) + { + $this->limit = $limit; + } + + public function read($length) + { + if ($this->limit == -1) { + return $this->stream->read($length); + } + + // Check if the current position is less than the total allowed + // bytes + original offset + $remaining = ($this->offset + $this->limit) - $this->stream->tell(); + if ($remaining > 0) { + // Only return the amount of requested data, ensuring that the byte + // limit is not exceeded + return $this->stream->read(min($remaining, $length)); + } + + return ''; + } +} diff --git a/vendor/guzzlehttp/psr7/src/Message.php b/vendor/guzzlehttp/psr7/src/Message.php new file mode 100644 index 000000000..516d1cb84 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Message.php @@ -0,0 +1,252 @@ +getMethod() . ' ' + . $message->getRequestTarget()) + . ' HTTP/' . $message->getProtocolVersion(); + if (!$message->hasHeader('host')) { + $msg .= "\r\nHost: " . $message->getUri()->getHost(); + } + } elseif ($message instanceof ResponseInterface) { + $msg = 'HTTP/' . $message->getProtocolVersion() . ' ' + . $message->getStatusCode() . ' ' + . $message->getReasonPhrase(); + } else { + throw new \InvalidArgumentException('Unknown message type'); + } + + foreach ($message->getHeaders() as $name => $values) { + if (strtolower($name) === 'set-cookie') { + foreach ($values as $value) { + $msg .= "\r\n{$name}: " . $value; + } + } else { + $msg .= "\r\n{$name}: " . implode(', ', $values); + } + } + + return "{$msg}\r\n\r\n" . $message->getBody(); + } + + /** + * Get a short summary of the message body. + * + * Will return `null` if the response is not printable. + * + * @param MessageInterface $message The message to get the body summary + * @param int $truncateAt The maximum allowed size of the summary + * + * @return string|null + */ + public static function bodySummary(MessageInterface $message, $truncateAt = 120) + { + $body = $message->getBody(); + + if (!$body->isSeekable() || !$body->isReadable()) { + return null; + } + + $size = $body->getSize(); + + if ($size === 0) { + return null; + } + + $summary = $body->read($truncateAt); + $body->rewind(); + + if ($size > $truncateAt) { + $summary .= ' (truncated...)'; + } + + // Matches any printable character, including unicode characters: + // letters, marks, numbers, punctuation, spacing, and separators. + if (preg_match('/[^\pL\pM\pN\pP\pS\pZ\n\r\t]/u', $summary)) { + return null; + } + + return $summary; + } + + /** + * Attempts to rewind a message body and throws an exception on failure. + * + * The body of the message will only be rewound if a call to `tell()` + * returns a value other than `0`. + * + * @param MessageInterface $message Message to rewind + * + * @throws \RuntimeException + */ + public static function rewindBody(MessageInterface $message) + { + $body = $message->getBody(); + + if ($body->tell()) { + $body->rewind(); + } + } + + /** + * Parses an HTTP message into an associative array. + * + * The array contains the "start-line" key containing the start line of + * the message, "headers" key containing an associative array of header + * array values, and a "body" key containing the body of the message. + * + * @param string $message HTTP request or response to parse. + * + * @return array + */ + public static function parseMessage($message) + { + if (!$message) { + throw new \InvalidArgumentException('Invalid message'); + } + + $message = ltrim($message, "\r\n"); + + $messageParts = preg_split("/\r?\n\r?\n/", $message, 2); + + if ($messageParts === false || count($messageParts) !== 2) { + throw new \InvalidArgumentException('Invalid message: Missing header delimiter'); + } + + list($rawHeaders, $body) = $messageParts; + $rawHeaders .= "\r\n"; // Put back the delimiter we split previously + $headerParts = preg_split("/\r?\n/", $rawHeaders, 2); + + if ($headerParts === false || count($headerParts) !== 2) { + throw new \InvalidArgumentException('Invalid message: Missing status line'); + } + + list($startLine, $rawHeaders) = $headerParts; + + if (preg_match("/(?:^HTTP\/|^[A-Z]+ \S+ HTTP\/)(\d+(?:\.\d+)?)/i", $startLine, $matches) && $matches[1] === '1.0') { + // Header folding is deprecated for HTTP/1.1, but allowed in HTTP/1.0 + $rawHeaders = preg_replace(Rfc7230::HEADER_FOLD_REGEX, ' ', $rawHeaders); + } + + /** @var array[] $headerLines */ + $count = preg_match_all(Rfc7230::HEADER_REGEX, $rawHeaders, $headerLines, PREG_SET_ORDER); + + // If these aren't the same, then one line didn't match and there's an invalid header. + if ($count !== substr_count($rawHeaders, "\n")) { + // Folding is deprecated, see https://tools.ietf.org/html/rfc7230#section-3.2.4 + if (preg_match(Rfc7230::HEADER_FOLD_REGEX, $rawHeaders)) { + throw new \InvalidArgumentException('Invalid header syntax: Obsolete line folding'); + } + + throw new \InvalidArgumentException('Invalid header syntax'); + } + + $headers = []; + + foreach ($headerLines as $headerLine) { + $headers[$headerLine[1]][] = $headerLine[2]; + } + + return [ + 'start-line' => $startLine, + 'headers' => $headers, + 'body' => $body, + ]; + } + + /** + * Constructs a URI for an HTTP request message. + * + * @param string $path Path from the start-line + * @param array $headers Array of headers (each value an array). + * + * @return string + */ + public static function parseRequestUri($path, array $headers) + { + $hostKey = array_filter(array_keys($headers), function ($k) { + return strtolower($k) === 'host'; + }); + + // If no host is found, then a full URI cannot be constructed. + if (!$hostKey) { + return $path; + } + + $host = $headers[reset($hostKey)][0]; + $scheme = substr($host, -4) === ':443' ? 'https' : 'http'; + + return $scheme . '://' . $host . '/' . ltrim($path, '/'); + } + + /** + * Parses a request message string into a request object. + * + * @param string $message Request message string. + * + * @return Request + */ + public static function parseRequest($message) + { + $data = self::parseMessage($message); + $matches = []; + if (!preg_match('/^[\S]+\s+([a-zA-Z]+:\/\/|\/).*/', $data['start-line'], $matches)) { + throw new \InvalidArgumentException('Invalid request string'); + } + $parts = explode(' ', $data['start-line'], 3); + $version = isset($parts[2]) ? explode('/', $parts[2])[1] : '1.1'; + + $request = new Request( + $parts[0], + $matches[1] === '/' ? self::parseRequestUri($parts[1], $data['headers']) : $parts[1], + $data['headers'], + $data['body'], + $version + ); + + return $matches[1] === '/' ? $request : $request->withRequestTarget($parts[1]); + } + + /** + * Parses a response message string into a response object. + * + * @param string $message Response message string. + * + * @return Response + */ + public static function parseResponse($message) + { + $data = self::parseMessage($message); + // According to https://tools.ietf.org/html/rfc7230#section-3.1.2 the space + // between status-code and reason-phrase is required. But browsers accept + // responses without space and reason as well. + if (!preg_match('/^HTTP\/.* [0-9]{3}( .*|$)/', $data['start-line'])) { + throw new \InvalidArgumentException('Invalid response string: ' . $data['start-line']); + } + $parts = explode(' ', $data['start-line'], 3); + + return new Response( + (int) $parts[1], + $data['headers'], + $data['body'], + explode('/', $parts[0])[1], + isset($parts[2]) ? $parts[2] : null + ); + } +} diff --git a/vendor/guzzlehttp/psr7/src/MessageTrait.php b/vendor/guzzlehttp/psr7/src/MessageTrait.php new file mode 100644 index 000000000..99203bb43 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/MessageTrait.php @@ -0,0 +1,214 @@ + array of values */ + private $headers = []; + + /** @var array Map of lowercase header name => original name at registration */ + private $headerNames = []; + + /** @var string */ + private $protocol = '1.1'; + + /** @var StreamInterface|null */ + private $stream; + + public function getProtocolVersion() + { + return $this->protocol; + } + + public function withProtocolVersion($version) + { + if ($this->protocol === $version) { + return $this; + } + + $new = clone $this; + $new->protocol = $version; + return $new; + } + + public function getHeaders() + { + return $this->headers; + } + + public function hasHeader($header) + { + return isset($this->headerNames[strtolower($header)]); + } + + public function getHeader($header) + { + $header = strtolower($header); + + if (!isset($this->headerNames[$header])) { + return []; + } + + $header = $this->headerNames[$header]; + + return $this->headers[$header]; + } + + public function getHeaderLine($header) + { + return implode(', ', $this->getHeader($header)); + } + + public function withHeader($header, $value) + { + $this->assertHeader($header); + $value = $this->normalizeHeaderValue($value); + $normalized = strtolower($header); + + $new = clone $this; + if (isset($new->headerNames[$normalized])) { + unset($new->headers[$new->headerNames[$normalized]]); + } + $new->headerNames[$normalized] = $header; + $new->headers[$header] = $value; + + return $new; + } + + public function withAddedHeader($header, $value) + { + $this->assertHeader($header); + $value = $this->normalizeHeaderValue($value); + $normalized = strtolower($header); + + $new = clone $this; + if (isset($new->headerNames[$normalized])) { + $header = $this->headerNames[$normalized]; + $new->headers[$header] = array_merge($this->headers[$header], $value); + } else { + $new->headerNames[$normalized] = $header; + $new->headers[$header] = $value; + } + + return $new; + } + + public function withoutHeader($header) + { + $normalized = strtolower($header); + + if (!isset($this->headerNames[$normalized])) { + return $this; + } + + $header = $this->headerNames[$normalized]; + + $new = clone $this; + unset($new->headers[$header], $new->headerNames[$normalized]); + + return $new; + } + + public function getBody() + { + if (!$this->stream) { + $this->stream = Utils::streamFor(''); + } + + return $this->stream; + } + + public function withBody(StreamInterface $body) + { + if ($body === $this->stream) { + return $this; + } + + $new = clone $this; + $new->stream = $body; + return $new; + } + + private function setHeaders(array $headers) + { + $this->headerNames = $this->headers = []; + foreach ($headers as $header => $value) { + if (is_int($header)) { + // Numeric array keys are converted to int by PHP but having a header name '123' is not forbidden by the spec + // and also allowed in withHeader(). So we need to cast it to string again for the following assertion to pass. + $header = (string) $header; + } + $this->assertHeader($header); + $value = $this->normalizeHeaderValue($value); + $normalized = strtolower($header); + if (isset($this->headerNames[$normalized])) { + $header = $this->headerNames[$normalized]; + $this->headers[$header] = array_merge($this->headers[$header], $value); + } else { + $this->headerNames[$normalized] = $header; + $this->headers[$header] = $value; + } + } + } + + private function normalizeHeaderValue($value) + { + if (!is_array($value)) { + return $this->trimHeaderValues([$value]); + } + + if (count($value) === 0) { + throw new \InvalidArgumentException('Header value can not be an empty array.'); + } + + return $this->trimHeaderValues($value); + } + + /** + * Trims whitespace from the header values. + * + * Spaces and tabs ought to be excluded by parsers when extracting the field value from a header field. + * + * header-field = field-name ":" OWS field-value OWS + * OWS = *( SP / HTAB ) + * + * @param string[] $values Header values + * + * @return string[] Trimmed header values + * + * @see https://tools.ietf.org/html/rfc7230#section-3.2.4 + */ + private function trimHeaderValues(array $values) + { + return array_map(function ($value) { + if (!is_scalar($value) && null !== $value) { + throw new \InvalidArgumentException(sprintf( + 'Header value must be scalar or null but %s provided.', + is_object($value) ? get_class($value) : gettype($value) + )); + } + + return trim((string) $value, " \t"); + }, array_values($values)); + } + + private function assertHeader($header) + { + if (!is_string($header)) { + throw new \InvalidArgumentException(sprintf( + 'Header name must be a string but %s provided.', + is_object($header) ? get_class($header) : gettype($header) + )); + } + + if ($header === '') { + throw new \InvalidArgumentException('Header name can not be empty.'); + } + } +} diff --git a/vendor/guzzlehttp/psr7/src/MimeType.php b/vendor/guzzlehttp/psr7/src/MimeType.php new file mode 100644 index 000000000..205c7b1fa --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/MimeType.php @@ -0,0 +1,140 @@ + 'video/3gpp', + '7z' => 'application/x-7z-compressed', + 'aac' => 'audio/x-aac', + 'ai' => 'application/postscript', + 'aif' => 'audio/x-aiff', + 'asc' => 'text/plain', + 'asf' => 'video/x-ms-asf', + 'atom' => 'application/atom+xml', + 'avi' => 'video/x-msvideo', + 'bmp' => 'image/bmp', + 'bz2' => 'application/x-bzip2', + 'cer' => 'application/pkix-cert', + 'crl' => 'application/pkix-crl', + 'crt' => 'application/x-x509-ca-cert', + 'css' => 'text/css', + 'csv' => 'text/csv', + 'cu' => 'application/cu-seeme', + 'deb' => 'application/x-debian-package', + 'doc' => 'application/msword', + 'docx' => 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', + 'dvi' => 'application/x-dvi', + 'eot' => 'application/vnd.ms-fontobject', + 'eps' => 'application/postscript', + 'epub' => 'application/epub+zip', + 'etx' => 'text/x-setext', + 'flac' => 'audio/flac', + 'flv' => 'video/x-flv', + 'gif' => 'image/gif', + 'gz' => 'application/gzip', + 'htm' => 'text/html', + 'html' => 'text/html', + 'ico' => 'image/x-icon', + 'ics' => 'text/calendar', + 'ini' => 'text/plain', + 'iso' => 'application/x-iso9660-image', + 'jar' => 'application/java-archive', + 'jpe' => 'image/jpeg', + 'jpeg' => 'image/jpeg', + 'jpg' => 'image/jpeg', + 'js' => 'text/javascript', + 'json' => 'application/json', + 'latex' => 'application/x-latex', + 'log' => 'text/plain', + 'm4a' => 'audio/mp4', + 'm4v' => 'video/mp4', + 'mid' => 'audio/midi', + 'midi' => 'audio/midi', + 'mov' => 'video/quicktime', + 'mkv' => 'video/x-matroska', + 'mp3' => 'audio/mpeg', + 'mp4' => 'video/mp4', + 'mp4a' => 'audio/mp4', + 'mp4v' => 'video/mp4', + 'mpe' => 'video/mpeg', + 'mpeg' => 'video/mpeg', + 'mpg' => 'video/mpeg', + 'mpg4' => 'video/mp4', + 'oga' => 'audio/ogg', + 'ogg' => 'audio/ogg', + 'ogv' => 'video/ogg', + 'ogx' => 'application/ogg', + 'pbm' => 'image/x-portable-bitmap', + 'pdf' => 'application/pdf', + 'pgm' => 'image/x-portable-graymap', + 'png' => 'image/png', + 'pnm' => 'image/x-portable-anymap', + 'ppm' => 'image/x-portable-pixmap', + 'ppt' => 'application/vnd.ms-powerpoint', + 'pptx' => 'application/vnd.openxmlformats-officedocument.presentationml.presentation', + 'ps' => 'application/postscript', + 'qt' => 'video/quicktime', + 'rar' => 'application/x-rar-compressed', + 'ras' => 'image/x-cmu-raster', + 'rss' => 'application/rss+xml', + 'rtf' => 'application/rtf', + 'sgm' => 'text/sgml', + 'sgml' => 'text/sgml', + 'svg' => 'image/svg+xml', + 'swf' => 'application/x-shockwave-flash', + 'tar' => 'application/x-tar', + 'tif' => 'image/tiff', + 'tiff' => 'image/tiff', + 'torrent' => 'application/x-bittorrent', + 'ttf' => 'application/x-font-ttf', + 'txt' => 'text/plain', + 'wav' => 'audio/x-wav', + 'webm' => 'video/webm', + 'webp' => 'image/webp', + 'wma' => 'audio/x-ms-wma', + 'wmv' => 'video/x-ms-wmv', + 'woff' => 'application/x-font-woff', + 'wsdl' => 'application/wsdl+xml', + 'xbm' => 'image/x-xbitmap', + 'xls' => 'application/vnd.ms-excel', + 'xlsx' => 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', + 'xml' => 'application/xml', + 'xpm' => 'image/x-xpixmap', + 'xwd' => 'image/x-xwindowdump', + 'yaml' => 'text/yaml', + 'yml' => 'text/yaml', + 'zip' => 'application/zip', + ]; + + $extension = strtolower($extension); + + return isset($mimetypes[$extension]) + ? $mimetypes[$extension] + : null; + } +} diff --git a/vendor/guzzlehttp/psr7/src/MultipartStream.php b/vendor/guzzlehttp/psr7/src/MultipartStream.php new file mode 100644 index 000000000..0cbfea35d --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/MultipartStream.php @@ -0,0 +1,154 @@ +boundary = $boundary ?: sha1(uniqid('', true)); + $this->stream = $this->createStream($elements); + } + + /** + * Get the boundary + * + * @return string + */ + public function getBoundary() + { + return $this->boundary; + } + + public function isWritable() + { + return false; + } + + /** + * Get the headers needed before transferring the content of a POST file + */ + private function getHeaders(array $headers) + { + $str = ''; + foreach ($headers as $key => $value) { + $str .= "{$key}: {$value}\r\n"; + } + + return "--{$this->boundary}\r\n" . trim($str) . "\r\n\r\n"; + } + + /** + * Create the aggregate stream that will be used to upload the POST data + */ + protected function createStream(array $elements) + { + $stream = new AppendStream(); + + foreach ($elements as $element) { + $this->addElement($stream, $element); + } + + // Add the trailing boundary with CRLF + $stream->addStream(Utils::streamFor("--{$this->boundary}--\r\n")); + + return $stream; + } + + private function addElement(AppendStream $stream, array $element) + { + foreach (['contents', 'name'] as $key) { + if (!array_key_exists($key, $element)) { + throw new \InvalidArgumentException("A '{$key}' key is required"); + } + } + + $element['contents'] = Utils::streamFor($element['contents']); + + if (empty($element['filename'])) { + $uri = $element['contents']->getMetadata('uri'); + if (substr($uri, 0, 6) !== 'php://') { + $element['filename'] = $uri; + } + } + + list($body, $headers) = $this->createElement( + $element['name'], + $element['contents'], + isset($element['filename']) ? $element['filename'] : null, + isset($element['headers']) ? $element['headers'] : [] + ); + + $stream->addStream(Utils::streamFor($this->getHeaders($headers))); + $stream->addStream($body); + $stream->addStream(Utils::streamFor("\r\n")); + } + + /** + * @return array + */ + private function createElement($name, StreamInterface $stream, $filename, array $headers) + { + // Set a default content-disposition header if one was no provided + $disposition = $this->getHeader($headers, 'content-disposition'); + if (!$disposition) { + $headers['Content-Disposition'] = ($filename === '0' || $filename) + ? sprintf('form-data; name="%s"; filename="%s"', + $name, + basename($filename)) + : "form-data; name=\"{$name}\""; + } + + // Set a default content-length header if one was no provided + $length = $this->getHeader($headers, 'content-length'); + if (!$length) { + if ($length = $stream->getSize()) { + $headers['Content-Length'] = (string) $length; + } + } + + // Set a default Content-Type if one was not supplied + $type = $this->getHeader($headers, 'content-type'); + if (!$type && ($filename === '0' || $filename)) { + if ($type = MimeType::fromFilename($filename)) { + $headers['Content-Type'] = $type; + } + } + + return [$stream, $headers]; + } + + private function getHeader(array $headers, $key) + { + $lowercaseHeader = strtolower($key); + foreach ($headers as $k => $v) { + if (strtolower($k) === $lowercaseHeader) { + return $v; + } + } + + return null; + } +} diff --git a/vendor/guzzlehttp/psr7/src/NoSeekStream.php b/vendor/guzzlehttp/psr7/src/NoSeekStream.php new file mode 100644 index 000000000..4b04b4c0a --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/NoSeekStream.php @@ -0,0 +1,23 @@ +source = $source; + $this->size = isset($options['size']) ? $options['size'] : null; + $this->metadata = isset($options['metadata']) ? $options['metadata'] : []; + $this->buffer = new BufferStream(); + } + + public function __toString() + { + try { + return Utils::copyToString($this); + } catch (\Exception $e) { + return ''; + } + } + + public function close() + { + $this->detach(); + } + + public function detach() + { + $this->tellPos = false; + $this->source = null; + + return null; + } + + public function getSize() + { + return $this->size; + } + + public function tell() + { + return $this->tellPos; + } + + public function eof() + { + return !$this->source; + } + + public function isSeekable() + { + return false; + } + + public function rewind() + { + $this->seek(0); + } + + public function seek($offset, $whence = SEEK_SET) + { + throw new \RuntimeException('Cannot seek a PumpStream'); + } + + public function isWritable() + { + return false; + } + + public function write($string) + { + throw new \RuntimeException('Cannot write to a PumpStream'); + } + + public function isReadable() + { + return true; + } + + public function read($length) + { + $data = $this->buffer->read($length); + $readLen = strlen($data); + $this->tellPos += $readLen; + $remaining = $length - $readLen; + + if ($remaining) { + $this->pump($remaining); + $data .= $this->buffer->read($remaining); + $this->tellPos += strlen($data) - $readLen; + } + + return $data; + } + + public function getContents() + { + $result = ''; + while (!$this->eof()) { + $result .= $this->read(1000000); + } + + return $result; + } + + public function getMetadata($key = null) + { + if (!$key) { + return $this->metadata; + } + + return isset($this->metadata[$key]) ? $this->metadata[$key] : null; + } + + private function pump($length) + { + if ($this->source) { + do { + $data = call_user_func($this->source, $length); + if ($data === false || $data === null) { + $this->source = null; + return; + } + $this->buffer->write($data); + $length -= strlen($data); + } while ($length > 0); + } + } +} diff --git a/vendor/guzzlehttp/psr7/src/Query.php b/vendor/guzzlehttp/psr7/src/Query.php new file mode 100644 index 000000000..99e093050 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Query.php @@ -0,0 +1,108 @@ + '1', 'foo[b]' => '2'])`. + * + * @param string $str Query string to parse + * @param int|bool $urlEncoding How the query string is encoded + * + * @return array + */ + public static function parse($str, $urlEncoding = true) + { + $result = []; + + if ($str === '') { + return $result; + } + + if ($urlEncoding === true) { + $decoder = function ($value) { + return rawurldecode(str_replace('+', ' ', $value)); + }; + } elseif ($urlEncoding === PHP_QUERY_RFC3986) { + $decoder = 'rawurldecode'; + } elseif ($urlEncoding === PHP_QUERY_RFC1738) { + $decoder = 'urldecode'; + } else { + $decoder = function ($str) { return $str; }; + } + + foreach (explode('&', $str) as $kvp) { + $parts = explode('=', $kvp, 2); + $key = $decoder($parts[0]); + $value = isset($parts[1]) ? $decoder($parts[1]) : null; + if (!isset($result[$key])) { + $result[$key] = $value; + } else { + if (!is_array($result[$key])) { + $result[$key] = [$result[$key]]; + } + $result[$key][] = $value; + } + } + + return $result; + } + + /** + * Build a query string from an array of key value pairs. + * + * This function can use the return value of `parse()` to build a query + * string. This function does not modify the provided keys when an array is + * encountered (like `http_build_query()` would). + * + * @param array $params Query string parameters. + * @param int|false $encoding Set to false to not encode, PHP_QUERY_RFC3986 + * to encode using RFC3986, or PHP_QUERY_RFC1738 + * to encode using RFC1738. + * @return string + */ + public static function build(array $params, $encoding = PHP_QUERY_RFC3986) + { + if (!$params) { + return ''; + } + + if ($encoding === false) { + $encoder = function ($str) { return $str; }; + } elseif ($encoding === PHP_QUERY_RFC3986) { + $encoder = 'rawurlencode'; + } elseif ($encoding === PHP_QUERY_RFC1738) { + $encoder = 'urlencode'; + } else { + throw new \InvalidArgumentException('Invalid type'); + } + + $qs = ''; + foreach ($params as $k => $v) { + $k = $encoder($k); + if (!is_array($v)) { + $qs .= $k; + if ($v !== null) { + $qs .= '=' . $encoder($v); + } + $qs .= '&'; + } else { + foreach ($v as $vv) { + $qs .= $k; + if ($vv !== null) { + $qs .= '=' . $encoder($vv); + } + $qs .= '&'; + } + } + } + + return $qs ? (string) substr($qs, 0, -1) : ''; + } +} diff --git a/vendor/guzzlehttp/psr7/src/Request.php b/vendor/guzzlehttp/psr7/src/Request.php new file mode 100644 index 000000000..89fbb1e62 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Request.php @@ -0,0 +1,152 @@ +assertMethod($method); + if (!($uri instanceof UriInterface)) { + $uri = new Uri($uri); + } + + $this->method = strtoupper($method); + $this->uri = $uri; + $this->setHeaders($headers); + $this->protocol = $version; + + if (!isset($this->headerNames['host'])) { + $this->updateHostFromUri(); + } + + if ($body !== '' && $body !== null) { + $this->stream = Utils::streamFor($body); + } + } + + public function getRequestTarget() + { + if ($this->requestTarget !== null) { + return $this->requestTarget; + } + + $target = $this->uri->getPath(); + if ($target == '') { + $target = '/'; + } + if ($this->uri->getQuery() != '') { + $target .= '?' . $this->uri->getQuery(); + } + + return $target; + } + + public function withRequestTarget($requestTarget) + { + if (preg_match('#\s#', $requestTarget)) { + throw new InvalidArgumentException( + 'Invalid request target provided; cannot contain whitespace' + ); + } + + $new = clone $this; + $new->requestTarget = $requestTarget; + return $new; + } + + public function getMethod() + { + return $this->method; + } + + public function withMethod($method) + { + $this->assertMethod($method); + $new = clone $this; + $new->method = strtoupper($method); + return $new; + } + + public function getUri() + { + return $this->uri; + } + + public function withUri(UriInterface $uri, $preserveHost = false) + { + if ($uri === $this->uri) { + return $this; + } + + $new = clone $this; + $new->uri = $uri; + + if (!$preserveHost || !isset($this->headerNames['host'])) { + $new->updateHostFromUri(); + } + + return $new; + } + + private function updateHostFromUri() + { + $host = $this->uri->getHost(); + + if ($host == '') { + return; + } + + if (($port = $this->uri->getPort()) !== null) { + $host .= ':' . $port; + } + + if (isset($this->headerNames['host'])) { + $header = $this->headerNames['host']; + } else { + $header = 'Host'; + $this->headerNames['host'] = 'Host'; + } + // Ensure Host is the first header. + // See: http://tools.ietf.org/html/rfc7230#section-5.4 + $this->headers = [$header => [$host]] + $this->headers; + } + + private function assertMethod($method) + { + if (!is_string($method) || $method === '') { + throw new \InvalidArgumentException('Method must be a non-empty string.'); + } + } +} diff --git a/vendor/guzzlehttp/psr7/src/Response.php b/vendor/guzzlehttp/psr7/src/Response.php new file mode 100644 index 000000000..36b85fb78 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Response.php @@ -0,0 +1,155 @@ + 'Continue', + 101 => 'Switching Protocols', + 102 => 'Processing', + 200 => 'OK', + 201 => 'Created', + 202 => 'Accepted', + 203 => 'Non-Authoritative Information', + 204 => 'No Content', + 205 => 'Reset Content', + 206 => 'Partial Content', + 207 => 'Multi-status', + 208 => 'Already Reported', + 300 => 'Multiple Choices', + 301 => 'Moved Permanently', + 302 => 'Found', + 303 => 'See Other', + 304 => 'Not Modified', + 305 => 'Use Proxy', + 306 => 'Switch Proxy', + 307 => 'Temporary Redirect', + 400 => 'Bad Request', + 401 => 'Unauthorized', + 402 => 'Payment Required', + 403 => 'Forbidden', + 404 => 'Not Found', + 405 => 'Method Not Allowed', + 406 => 'Not Acceptable', + 407 => 'Proxy Authentication Required', + 408 => 'Request Time-out', + 409 => 'Conflict', + 410 => 'Gone', + 411 => 'Length Required', + 412 => 'Precondition Failed', + 413 => 'Request Entity Too Large', + 414 => 'Request-URI Too Large', + 415 => 'Unsupported Media Type', + 416 => 'Requested range not satisfiable', + 417 => 'Expectation Failed', + 418 => 'I\'m a teapot', + 422 => 'Unprocessable Entity', + 423 => 'Locked', + 424 => 'Failed Dependency', + 425 => 'Unordered Collection', + 426 => 'Upgrade Required', + 428 => 'Precondition Required', + 429 => 'Too Many Requests', + 431 => 'Request Header Fields Too Large', + 451 => 'Unavailable For Legal Reasons', + 500 => 'Internal Server Error', + 501 => 'Not Implemented', + 502 => 'Bad Gateway', + 503 => 'Service Unavailable', + 504 => 'Gateway Time-out', + 505 => 'HTTP Version not supported', + 506 => 'Variant Also Negotiates', + 507 => 'Insufficient Storage', + 508 => 'Loop Detected', + 511 => 'Network Authentication Required', + ]; + + /** @var string */ + private $reasonPhrase = ''; + + /** @var int */ + private $statusCode = 200; + + /** + * @param int $status Status code + * @param array $headers Response headers + * @param string|null|resource|StreamInterface $body Response body + * @param string $version Protocol version + * @param string|null $reason Reason phrase (when empty a default will be used based on the status code) + */ + public function __construct( + $status = 200, + array $headers = [], + $body = null, + $version = '1.1', + $reason = null + ) { + $this->assertStatusCodeIsInteger($status); + $status = (int) $status; + $this->assertStatusCodeRange($status); + + $this->statusCode = $status; + + if ($body !== '' && $body !== null) { + $this->stream = Utils::streamFor($body); + } + + $this->setHeaders($headers); + if ($reason == '' && isset(self::$phrases[$this->statusCode])) { + $this->reasonPhrase = self::$phrases[$this->statusCode]; + } else { + $this->reasonPhrase = (string) $reason; + } + + $this->protocol = $version; + } + + public function getStatusCode() + { + return $this->statusCode; + } + + public function getReasonPhrase() + { + return $this->reasonPhrase; + } + + public function withStatus($code, $reasonPhrase = '') + { + $this->assertStatusCodeIsInteger($code); + $code = (int) $code; + $this->assertStatusCodeRange($code); + + $new = clone $this; + $new->statusCode = $code; + if ($reasonPhrase == '' && isset(self::$phrases[$new->statusCode])) { + $reasonPhrase = self::$phrases[$new->statusCode]; + } + $new->reasonPhrase = (string) $reasonPhrase; + return $new; + } + + private function assertStatusCodeIsInteger($statusCode) + { + if (filter_var($statusCode, FILTER_VALIDATE_INT) === false) { + throw new \InvalidArgumentException('Status code must be an integer value.'); + } + } + + private function assertStatusCodeRange($statusCode) + { + if ($statusCode < 100 || $statusCode >= 600) { + throw new \InvalidArgumentException('Status code must be an integer value between 1xx and 5xx.'); + } + } +} diff --git a/vendor/guzzlehttp/psr7/src/Rfc7230.php b/vendor/guzzlehttp/psr7/src/Rfc7230.php new file mode 100644 index 000000000..505e4742b --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Rfc7230.php @@ -0,0 +1,18 @@ +@,;:\\\"/[\]?={}\x01-\x20\x7F]++):[ \t]*+((?:[ \t]*+[\x21-\x7E\x80-\xFF]++)*+)[ \t]*+\r?\n)m"; + const HEADER_FOLD_REGEX = "(\r?\n[ \t]++)"; +} diff --git a/vendor/guzzlehttp/psr7/src/ServerRequest.php b/vendor/guzzlehttp/psr7/src/ServerRequest.php new file mode 100644 index 000000000..72c5566cf --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/ServerRequest.php @@ -0,0 +1,378 @@ +serverParams = $serverParams; + + parent::__construct($method, $uri, $headers, $body, $version); + } + + /** + * Return an UploadedFile instance array. + * + * @param array $files A array which respect $_FILES structure + * + * @return array + * + * @throws InvalidArgumentException for unrecognized values + */ + public static function normalizeFiles(array $files) + { + $normalized = []; + + foreach ($files as $key => $value) { + if ($value instanceof UploadedFileInterface) { + $normalized[$key] = $value; + } elseif (is_array($value) && isset($value['tmp_name'])) { + $normalized[$key] = self::createUploadedFileFromSpec($value); + } elseif (is_array($value)) { + $normalized[$key] = self::normalizeFiles($value); + continue; + } else { + throw new InvalidArgumentException('Invalid value in files specification'); + } + } + + return $normalized; + } + + /** + * Create and return an UploadedFile instance from a $_FILES specification. + * + * If the specification represents an array of values, this method will + * delegate to normalizeNestedFileSpec() and return that return value. + * + * @param array $value $_FILES struct + * @return array|UploadedFileInterface + */ + private static function createUploadedFileFromSpec(array $value) + { + if (is_array($value['tmp_name'])) { + return self::normalizeNestedFileSpec($value); + } + + return new UploadedFile( + $value['tmp_name'], + (int) $value['size'], + (int) $value['error'], + $value['name'], + $value['type'] + ); + } + + /** + * Normalize an array of file specifications. + * + * Loops through all nested files and returns a normalized array of + * UploadedFileInterface instances. + * + * @param array $files + * @return UploadedFileInterface[] + */ + private static function normalizeNestedFileSpec(array $files = []) + { + $normalizedFiles = []; + + foreach (array_keys($files['tmp_name']) as $key) { + $spec = [ + 'tmp_name' => $files['tmp_name'][$key], + 'size' => $files['size'][$key], + 'error' => $files['error'][$key], + 'name' => $files['name'][$key], + 'type' => $files['type'][$key], + ]; + $normalizedFiles[$key] = self::createUploadedFileFromSpec($spec); + } + + return $normalizedFiles; + } + + /** + * Return a ServerRequest populated with superglobals: + * $_GET + * $_POST + * $_COOKIE + * $_FILES + * $_SERVER + * + * @return ServerRequestInterface + */ + public static function fromGlobals() + { + $method = isset($_SERVER['REQUEST_METHOD']) ? $_SERVER['REQUEST_METHOD'] : 'GET'; + $headers = getallheaders(); + $uri = self::getUriFromGlobals(); + $body = new CachingStream(new LazyOpenStream('php://input', 'r+')); + $protocol = isset($_SERVER['SERVER_PROTOCOL']) ? str_replace('HTTP/', '', $_SERVER['SERVER_PROTOCOL']) : '1.1'; + + $serverRequest = new ServerRequest($method, $uri, $headers, $body, $protocol, $_SERVER); + + return $serverRequest + ->withCookieParams($_COOKIE) + ->withQueryParams($_GET) + ->withParsedBody($_POST) + ->withUploadedFiles(self::normalizeFiles($_FILES)); + } + + private static function extractHostAndPortFromAuthority($authority) + { + $uri = 'http://'.$authority; + $parts = parse_url($uri); + if (false === $parts) { + return [null, null]; + } + + $host = isset($parts['host']) ? $parts['host'] : null; + $port = isset($parts['port']) ? $parts['port'] : null; + + return [$host, $port]; + } + + /** + * Get a Uri populated with values from $_SERVER. + * + * @return UriInterface + */ + public static function getUriFromGlobals() + { + $uri = new Uri(''); + + $uri = $uri->withScheme(!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' ? 'https' : 'http'); + + $hasPort = false; + if (isset($_SERVER['HTTP_HOST'])) { + list($host, $port) = self::extractHostAndPortFromAuthority($_SERVER['HTTP_HOST']); + if ($host !== null) { + $uri = $uri->withHost($host); + } + + if ($port !== null) { + $hasPort = true; + $uri = $uri->withPort($port); + } + } elseif (isset($_SERVER['SERVER_NAME'])) { + $uri = $uri->withHost($_SERVER['SERVER_NAME']); + } elseif (isset($_SERVER['SERVER_ADDR'])) { + $uri = $uri->withHost($_SERVER['SERVER_ADDR']); + } + + if (!$hasPort && isset($_SERVER['SERVER_PORT'])) { + $uri = $uri->withPort($_SERVER['SERVER_PORT']); + } + + $hasQuery = false; + if (isset($_SERVER['REQUEST_URI'])) { + $requestUriParts = explode('?', $_SERVER['REQUEST_URI'], 2); + $uri = $uri->withPath($requestUriParts[0]); + if (isset($requestUriParts[1])) { + $hasQuery = true; + $uri = $uri->withQuery($requestUriParts[1]); + } + } + + if (!$hasQuery && isset($_SERVER['QUERY_STRING'])) { + $uri = $uri->withQuery($_SERVER['QUERY_STRING']); + } + + return $uri; + } + + + /** + * {@inheritdoc} + */ + public function getServerParams() + { + return $this->serverParams; + } + + /** + * {@inheritdoc} + */ + public function getUploadedFiles() + { + return $this->uploadedFiles; + } + + /** + * {@inheritdoc} + */ + public function withUploadedFiles(array $uploadedFiles) + { + $new = clone $this; + $new->uploadedFiles = $uploadedFiles; + + return $new; + } + + /** + * {@inheritdoc} + */ + public function getCookieParams() + { + return $this->cookieParams; + } + + /** + * {@inheritdoc} + */ + public function withCookieParams(array $cookies) + { + $new = clone $this; + $new->cookieParams = $cookies; + + return $new; + } + + /** + * {@inheritdoc} + */ + public function getQueryParams() + { + return $this->queryParams; + } + + /** + * {@inheritdoc} + */ + public function withQueryParams(array $query) + { + $new = clone $this; + $new->queryParams = $query; + + return $new; + } + + /** + * {@inheritdoc} + */ + public function getParsedBody() + { + return $this->parsedBody; + } + + /** + * {@inheritdoc} + */ + public function withParsedBody($data) + { + $new = clone $this; + $new->parsedBody = $data; + + return $new; + } + + /** + * {@inheritdoc} + */ + public function getAttributes() + { + return $this->attributes; + } + + /** + * {@inheritdoc} + */ + public function getAttribute($attribute, $default = null) + { + if (false === array_key_exists($attribute, $this->attributes)) { + return $default; + } + + return $this->attributes[$attribute]; + } + + /** + * {@inheritdoc} + */ + public function withAttribute($attribute, $value) + { + $new = clone $this; + $new->attributes[$attribute] = $value; + + return $new; + } + + /** + * {@inheritdoc} + */ + public function withoutAttribute($attribute) + { + if (false === array_key_exists($attribute, $this->attributes)) { + return $this; + } + + $new = clone $this; + unset($new->attributes[$attribute]); + + return $new; + } +} diff --git a/vendor/guzzlehttp/psr7/src/Stream.php b/vendor/guzzlehttp/psr7/src/Stream.php new file mode 100644 index 000000000..3865d6d6a --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Stream.php @@ -0,0 +1,270 @@ +size = $options['size']; + } + + $this->customMetadata = isset($options['metadata']) + ? $options['metadata'] + : []; + + $this->stream = $stream; + $meta = stream_get_meta_data($this->stream); + $this->seekable = $meta['seekable']; + $this->readable = (bool)preg_match(self::READABLE_MODES, $meta['mode']); + $this->writable = (bool)preg_match(self::WRITABLE_MODES, $meta['mode']); + $this->uri = $this->getMetadata('uri'); + } + + /** + * Closes the stream when the destructed + */ + public function __destruct() + { + $this->close(); + } + + public function __toString() + { + try { + if ($this->isSeekable()) { + $this->seek(0); + } + return $this->getContents(); + } catch (\Exception $e) { + return ''; + } + } + + public function getContents() + { + if (!isset($this->stream)) { + throw new \RuntimeException('Stream is detached'); + } + + $contents = stream_get_contents($this->stream); + + if ($contents === false) { + throw new \RuntimeException('Unable to read stream contents'); + } + + return $contents; + } + + public function close() + { + if (isset($this->stream)) { + if (is_resource($this->stream)) { + fclose($this->stream); + } + $this->detach(); + } + } + + public function detach() + { + if (!isset($this->stream)) { + return null; + } + + $result = $this->stream; + unset($this->stream); + $this->size = $this->uri = null; + $this->readable = $this->writable = $this->seekable = false; + + return $result; + } + + public function getSize() + { + if ($this->size !== null) { + return $this->size; + } + + if (!isset($this->stream)) { + return null; + } + + // Clear the stat cache if the stream has a URI + if ($this->uri) { + clearstatcache(true, $this->uri); + } + + $stats = fstat($this->stream); + if (isset($stats['size'])) { + $this->size = $stats['size']; + return $this->size; + } + + return null; + } + + public function isReadable() + { + return $this->readable; + } + + public function isWritable() + { + return $this->writable; + } + + public function isSeekable() + { + return $this->seekable; + } + + public function eof() + { + if (!isset($this->stream)) { + throw new \RuntimeException('Stream is detached'); + } + + return feof($this->stream); + } + + public function tell() + { + if (!isset($this->stream)) { + throw new \RuntimeException('Stream is detached'); + } + + $result = ftell($this->stream); + + if ($result === false) { + throw new \RuntimeException('Unable to determine stream position'); + } + + return $result; + } + + public function rewind() + { + $this->seek(0); + } + + public function seek($offset, $whence = SEEK_SET) + { + $whence = (int) $whence; + + if (!isset($this->stream)) { + throw new \RuntimeException('Stream is detached'); + } + if (!$this->seekable) { + throw new \RuntimeException('Stream is not seekable'); + } + if (fseek($this->stream, $offset, $whence) === -1) { + throw new \RuntimeException('Unable to seek to stream position ' + . $offset . ' with whence ' . var_export($whence, true)); + } + } + + public function read($length) + { + if (!isset($this->stream)) { + throw new \RuntimeException('Stream is detached'); + } + if (!$this->readable) { + throw new \RuntimeException('Cannot read from non-readable stream'); + } + if ($length < 0) { + throw new \RuntimeException('Length parameter cannot be negative'); + } + + if (0 === $length) { + return ''; + } + + $string = fread($this->stream, $length); + if (false === $string) { + throw new \RuntimeException('Unable to read from stream'); + } + + return $string; + } + + public function write($string) + { + if (!isset($this->stream)) { + throw new \RuntimeException('Stream is detached'); + } + if (!$this->writable) { + throw new \RuntimeException('Cannot write to a non-writable stream'); + } + + // We can't know the size after writing anything + $this->size = null; + $result = fwrite($this->stream, $string); + + if ($result === false) { + throw new \RuntimeException('Unable to write to stream'); + } + + return $result; + } + + public function getMetadata($key = null) + { + if (!isset($this->stream)) { + return $key ? null : []; + } elseif (!$key) { + return $this->customMetadata + stream_get_meta_data($this->stream); + } elseif (isset($this->customMetadata[$key])) { + return $this->customMetadata[$key]; + } + + $meta = stream_get_meta_data($this->stream); + + return isset($meta[$key]) ? $meta[$key] : null; + } +} diff --git a/vendor/guzzlehttp/psr7/src/StreamDecoratorTrait.php b/vendor/guzzlehttp/psr7/src/StreamDecoratorTrait.php new file mode 100644 index 000000000..093023b1c --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/StreamDecoratorTrait.php @@ -0,0 +1,151 @@ +stream = $stream; + } + + /** + * Magic method used to create a new stream if streams are not added in + * the constructor of a decorator (e.g., LazyOpenStream). + * + * @param string $name Name of the property (allows "stream" only). + * + * @return StreamInterface + */ + public function __get($name) + { + if ($name == 'stream') { + $this->stream = $this->createStream(); + return $this->stream; + } + + throw new \UnexpectedValueException("$name not found on class"); + } + + public function __toString() + { + try { + if ($this->isSeekable()) { + $this->seek(0); + } + return $this->getContents(); + } catch (\Exception $e) { + // Really, PHP? https://bugs.php.net/bug.php?id=53648 + trigger_error('StreamDecorator::__toString exception: ' + . (string) $e, E_USER_ERROR); + return ''; + } + } + + public function getContents() + { + return Utils::copyToString($this); + } + + /** + * Allow decorators to implement custom methods + * + * @param string $method Missing method name + * @param array $args Method arguments + * + * @return mixed + */ + public function __call($method, array $args) + { + $result = call_user_func_array([$this->stream, $method], $args); + + // Always return the wrapped object if the result is a return $this + return $result === $this->stream ? $this : $result; + } + + public function close() + { + $this->stream->close(); + } + + public function getMetadata($key = null) + { + return $this->stream->getMetadata($key); + } + + public function detach() + { + return $this->stream->detach(); + } + + public function getSize() + { + return $this->stream->getSize(); + } + + public function eof() + { + return $this->stream->eof(); + } + + public function tell() + { + return $this->stream->tell(); + } + + public function isReadable() + { + return $this->stream->isReadable(); + } + + public function isWritable() + { + return $this->stream->isWritable(); + } + + public function isSeekable() + { + return $this->stream->isSeekable(); + } + + public function rewind() + { + $this->seek(0); + } + + public function seek($offset, $whence = SEEK_SET) + { + $this->stream->seek($offset, $whence); + } + + public function read($length) + { + return $this->stream->read($length); + } + + public function write($string) + { + return $this->stream->write($string); + } + + /** + * Implement in subclasses to dynamically create streams when requested. + * + * @return StreamInterface + * + * @throws \BadMethodCallException + */ + protected function createStream() + { + throw new \BadMethodCallException('Not implemented'); + } +} diff --git a/vendor/guzzlehttp/psr7/src/StreamWrapper.php b/vendor/guzzlehttp/psr7/src/StreamWrapper.php new file mode 100644 index 000000000..eac653539 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/StreamWrapper.php @@ -0,0 +1,163 @@ +isReadable()) { + $mode = $stream->isWritable() ? 'r+' : 'r'; + } elseif ($stream->isWritable()) { + $mode = 'w'; + } else { + throw new \InvalidArgumentException('The stream must be readable, ' + . 'writable, or both.'); + } + + return fopen('guzzle://stream', $mode, null, self::createStreamContext($stream)); + } + + /** + * Creates a stream context that can be used to open a stream as a php stream resource. + * + * @param StreamInterface $stream + * + * @return resource + */ + public static function createStreamContext(StreamInterface $stream) + { + return stream_context_create([ + 'guzzle' => ['stream' => $stream] + ]); + } + + /** + * Registers the stream wrapper if needed + */ + public static function register() + { + if (!in_array('guzzle', stream_get_wrappers())) { + stream_wrapper_register('guzzle', __CLASS__); + } + } + + public function stream_open($path, $mode, $options, &$opened_path) + { + $options = stream_context_get_options($this->context); + + if (!isset($options['guzzle']['stream'])) { + return false; + } + + $this->mode = $mode; + $this->stream = $options['guzzle']['stream']; + + return true; + } + + public function stream_read($count) + { + return $this->stream->read($count); + } + + public function stream_write($data) + { + return (int) $this->stream->write($data); + } + + public function stream_tell() + { + return $this->stream->tell(); + } + + public function stream_eof() + { + return $this->stream->eof(); + } + + public function stream_seek($offset, $whence) + { + $this->stream->seek($offset, $whence); + + return true; + } + + public function stream_cast($cast_as) + { + $stream = clone($this->stream); + + return $stream->detach(); + } + + public function stream_stat() + { + static $modeMap = [ + 'r' => 33060, + 'rb' => 33060, + 'r+' => 33206, + 'w' => 33188, + 'wb' => 33188 + ]; + + return [ + 'dev' => 0, + 'ino' => 0, + 'mode' => $modeMap[$this->mode], + 'nlink' => 0, + 'uid' => 0, + 'gid' => 0, + 'rdev' => 0, + 'size' => $this->stream->getSize() ?: 0, + 'atime' => 0, + 'mtime' => 0, + 'ctime' => 0, + 'blksize' => 0, + 'blocks' => 0 + ]; + } + + public function url_stat($path, $flags) + { + return [ + 'dev' => 0, + 'ino' => 0, + 'mode' => 0, + 'nlink' => 0, + 'uid' => 0, + 'gid' => 0, + 'rdev' => 0, + 'size' => 0, + 'atime' => 0, + 'mtime' => 0, + 'ctime' => 0, + 'blksize' => 0, + 'blocks' => 0 + ]; + } +} diff --git a/vendor/guzzlehttp/psr7/src/UploadedFile.php b/vendor/guzzlehttp/psr7/src/UploadedFile.php new file mode 100644 index 000000000..a0ea59e09 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/UploadedFile.php @@ -0,0 +1,325 @@ +setError($errorStatus); + $this->setSize($size); + $this->setClientFilename($clientFilename); + $this->setClientMediaType($clientMediaType); + + if ($this->isOk()) { + $this->setStreamOrFile($streamOrFile); + } + } + + /** + * Depending on the value set file or stream variable + * + * @param mixed $streamOrFile + * + * @throws InvalidArgumentException + */ + private function setStreamOrFile($streamOrFile) + { + if (is_string($streamOrFile)) { + $this->file = $streamOrFile; + } elseif (is_resource($streamOrFile)) { + $this->stream = new Stream($streamOrFile); + } elseif ($streamOrFile instanceof StreamInterface) { + $this->stream = $streamOrFile; + } else { + throw new InvalidArgumentException( + 'Invalid stream or file provided for UploadedFile' + ); + } + } + + /** + * @param int $error + * + * @throws InvalidArgumentException + */ + private function setError($error) + { + if (false === is_int($error)) { + throw new InvalidArgumentException( + 'Upload file error status must be an integer' + ); + } + + if (false === in_array($error, UploadedFile::$errors)) { + throw new InvalidArgumentException( + 'Invalid error status for UploadedFile' + ); + } + + $this->error = $error; + } + + /** + * @param int $size + * + * @throws InvalidArgumentException + */ + private function setSize($size) + { + if (false === is_int($size)) { + throw new InvalidArgumentException( + 'Upload file size must be an integer' + ); + } + + $this->size = $size; + } + + /** + * @param mixed $param + * @return boolean + */ + private function isStringOrNull($param) + { + return in_array(gettype($param), ['string', 'NULL']); + } + + /** + * @param mixed $param + * @return boolean + */ + private function isStringNotEmpty($param) + { + return is_string($param) && false === empty($param); + } + + /** + * @param string|null $clientFilename + * + * @throws InvalidArgumentException + */ + private function setClientFilename($clientFilename) + { + if (false === $this->isStringOrNull($clientFilename)) { + throw new InvalidArgumentException( + 'Upload file client filename must be a string or null' + ); + } + + $this->clientFilename = $clientFilename; + } + + /** + * @param string|null $clientMediaType + * + * @throws InvalidArgumentException + */ + private function setClientMediaType($clientMediaType) + { + if (false === $this->isStringOrNull($clientMediaType)) { + throw new InvalidArgumentException( + 'Upload file client media type must be a string or null' + ); + } + + $this->clientMediaType = $clientMediaType; + } + + /** + * Return true if there is no upload error + * + * @return boolean + */ + private function isOk() + { + return $this->error === UPLOAD_ERR_OK; + } + + /** + * @return boolean + */ + public function isMoved() + { + return $this->moved; + } + + /** + * @throws RuntimeException if is moved or not ok + */ + private function validateActive() + { + if (false === $this->isOk()) { + throw new RuntimeException('Cannot retrieve stream due to upload error'); + } + + if ($this->isMoved()) { + throw new RuntimeException('Cannot retrieve stream after it has already been moved'); + } + } + + /** + * {@inheritdoc} + * + * @throws RuntimeException if the upload was not successful. + */ + public function getStream() + { + $this->validateActive(); + + if ($this->stream instanceof StreamInterface) { + return $this->stream; + } + + return new LazyOpenStream($this->file, 'r+'); + } + + /** + * {@inheritdoc} + * + * @see http://php.net/is_uploaded_file + * @see http://php.net/move_uploaded_file + * + * @param string $targetPath Path to which to move the uploaded file. + * + * @throws RuntimeException if the upload was not successful. + * @throws InvalidArgumentException if the $path specified is invalid. + * @throws RuntimeException on any error during the move operation, or on + * the second or subsequent call to the method. + */ + public function moveTo($targetPath) + { + $this->validateActive(); + + if (false === $this->isStringNotEmpty($targetPath)) { + throw new InvalidArgumentException( + 'Invalid path provided for move operation; must be a non-empty string' + ); + } + + if ($this->file) { + $this->moved = php_sapi_name() == 'cli' + ? rename($this->file, $targetPath) + : move_uploaded_file($this->file, $targetPath); + } else { + Utils::copyToStream( + $this->getStream(), + new LazyOpenStream($targetPath, 'w') + ); + + $this->moved = true; + } + + if (false === $this->moved) { + throw new RuntimeException( + sprintf('Uploaded file could not be moved to %s', $targetPath) + ); + } + } + + /** + * {@inheritdoc} + * + * @return int|null The file size in bytes or null if unknown. + */ + public function getSize() + { + return $this->size; + } + + /** + * {@inheritdoc} + * + * @see http://php.net/manual/en/features.file-upload.errors.php + * @return int One of PHP's UPLOAD_ERR_XXX constants. + */ + public function getError() + { + return $this->error; + } + + /** + * {@inheritdoc} + * + * @return string|null The filename sent by the client or null if none + * was provided. + */ + public function getClientFilename() + { + return $this->clientFilename; + } + + /** + * {@inheritdoc} + */ + public function getClientMediaType() + { + return $this->clientMediaType; + } +} diff --git a/vendor/guzzlehttp/psr7/src/Uri.php b/vendor/guzzlehttp/psr7/src/Uri.php new file mode 100644 index 000000000..a0d73917e --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Uri.php @@ -0,0 +1,761 @@ + 80, + 'https' => 443, + 'ftp' => 21, + 'gopher' => 70, + 'nntp' => 119, + 'news' => 119, + 'telnet' => 23, + 'tn3270' => 23, + 'imap' => 143, + 'pop' => 110, + 'ldap' => 389, + ]; + + private static $charUnreserved = 'a-zA-Z0-9_\-\.~'; + private static $charSubDelims = '!\$&\'\(\)\*\+,;='; + private static $replaceQuery = ['=' => '%3D', '&' => '%26']; + + /** @var string Uri scheme. */ + private $scheme = ''; + + /** @var string Uri user info. */ + private $userInfo = ''; + + /** @var string Uri host. */ + private $host = ''; + + /** @var int|null Uri port. */ + private $port; + + /** @var string Uri path. */ + private $path = ''; + + /** @var string Uri query string. */ + private $query = ''; + + /** @var string Uri fragment. */ + private $fragment = ''; + + /** + * @param string $uri URI to parse + */ + public function __construct($uri = '') + { + // weak type check to also accept null until we can add scalar type hints + if ($uri != '') { + $parts = parse_url($uri); + if ($parts === false) { + throw new \InvalidArgumentException("Unable to parse URI: $uri"); + } + $this->applyParts($parts); + } + } + + public function __toString() + { + return self::composeComponents( + $this->scheme, + $this->getAuthority(), + $this->path, + $this->query, + $this->fragment + ); + } + + /** + * Composes a URI reference string from its various components. + * + * Usually this method does not need to be called manually but instead is used indirectly via + * `Psr\Http\Message\UriInterface::__toString`. + * + * PSR-7 UriInterface treats an empty component the same as a missing component as + * getQuery(), getFragment() etc. always return a string. This explains the slight + * difference to RFC 3986 Section 5.3. + * + * Another adjustment is that the authority separator is added even when the authority is missing/empty + * for the "file" scheme. This is because PHP stream functions like `file_get_contents` only work with + * `file:///myfile` but not with `file:/myfile` although they are equivalent according to RFC 3986. But + * `file:///` is the more common syntax for the file scheme anyway (Chrome for example redirects to + * that format). + * + * @param string $scheme + * @param string $authority + * @param string $path + * @param string $query + * @param string $fragment + * + * @return string + * + * @link https://tools.ietf.org/html/rfc3986#section-5.3 + */ + public static function composeComponents($scheme, $authority, $path, $query, $fragment) + { + $uri = ''; + + // weak type checks to also accept null until we can add scalar type hints + if ($scheme != '') { + $uri .= $scheme . ':'; + } + + if ($authority != ''|| $scheme === 'file') { + $uri .= '//' . $authority; + } + + $uri .= $path; + + if ($query != '') { + $uri .= '?' . $query; + } + + if ($fragment != '') { + $uri .= '#' . $fragment; + } + + return $uri; + } + + /** + * Whether the URI has the default port of the current scheme. + * + * `Psr\Http\Message\UriInterface::getPort` may return null or the standard port. This method can be used + * independently of the implementation. + * + * @param UriInterface $uri + * + * @return bool + */ + public static function isDefaultPort(UriInterface $uri) + { + return $uri->getPort() === null + || (isset(self::$defaultPorts[$uri->getScheme()]) && $uri->getPort() === self::$defaultPorts[$uri->getScheme()]); + } + + /** + * Whether the URI is absolute, i.e. it has a scheme. + * + * An instance of UriInterface can either be an absolute URI or a relative reference. This method returns true + * if it is the former. An absolute URI has a scheme. A relative reference is used to express a URI relative + * to another URI, the base URI. Relative references can be divided into several forms: + * - network-path references, e.g. '//example.com/path' + * - absolute-path references, e.g. '/path' + * - relative-path references, e.g. 'subpath' + * + * @param UriInterface $uri + * + * @return bool + * @see Uri::isNetworkPathReference + * @see Uri::isAbsolutePathReference + * @see Uri::isRelativePathReference + * @link https://tools.ietf.org/html/rfc3986#section-4 + */ + public static function isAbsolute(UriInterface $uri) + { + return $uri->getScheme() !== ''; + } + + /** + * Whether the URI is a network-path reference. + * + * A relative reference that begins with two slash characters is termed an network-path reference. + * + * @param UriInterface $uri + * + * @return bool + * @link https://tools.ietf.org/html/rfc3986#section-4.2 + */ + public static function isNetworkPathReference(UriInterface $uri) + { + return $uri->getScheme() === '' && $uri->getAuthority() !== ''; + } + + /** + * Whether the URI is a absolute-path reference. + * + * A relative reference that begins with a single slash character is termed an absolute-path reference. + * + * @param UriInterface $uri + * + * @return bool + * @link https://tools.ietf.org/html/rfc3986#section-4.2 + */ + public static function isAbsolutePathReference(UriInterface $uri) + { + return $uri->getScheme() === '' + && $uri->getAuthority() === '' + && isset($uri->getPath()[0]) + && $uri->getPath()[0] === '/'; + } + + /** + * Whether the URI is a relative-path reference. + * + * A relative reference that does not begin with a slash character is termed a relative-path reference. + * + * @param UriInterface $uri + * + * @return bool + * @link https://tools.ietf.org/html/rfc3986#section-4.2 + */ + public static function isRelativePathReference(UriInterface $uri) + { + return $uri->getScheme() === '' + && $uri->getAuthority() === '' + && (!isset($uri->getPath()[0]) || $uri->getPath()[0] !== '/'); + } + + /** + * Whether the URI is a same-document reference. + * + * A same-document reference refers to a URI that is, aside from its fragment + * component, identical to the base URI. When no base URI is given, only an empty + * URI reference (apart from its fragment) is considered a same-document reference. + * + * @param UriInterface $uri The URI to check + * @param UriInterface|null $base An optional base URI to compare against + * + * @return bool + * @link https://tools.ietf.org/html/rfc3986#section-4.4 + */ + public static function isSameDocumentReference(UriInterface $uri, UriInterface $base = null) + { + if ($base !== null) { + $uri = UriResolver::resolve($base, $uri); + + return ($uri->getScheme() === $base->getScheme()) + && ($uri->getAuthority() === $base->getAuthority()) + && ($uri->getPath() === $base->getPath()) + && ($uri->getQuery() === $base->getQuery()); + } + + return $uri->getScheme() === '' && $uri->getAuthority() === '' && $uri->getPath() === '' && $uri->getQuery() === ''; + } + + /** + * Removes dot segments from a path and returns the new path. + * + * @param string $path + * + * @return string + * + * @deprecated since version 1.4. Use UriResolver::removeDotSegments instead. + * @see UriResolver::removeDotSegments + */ + public static function removeDotSegments($path) + { + return UriResolver::removeDotSegments($path); + } + + /** + * Converts the relative URI into a new URI that is resolved against the base URI. + * + * @param UriInterface $base Base URI + * @param string|UriInterface $rel Relative URI + * + * @return UriInterface + * + * @deprecated since version 1.4. Use UriResolver::resolve instead. + * @see UriResolver::resolve + */ + public static function resolve(UriInterface $base, $rel) + { + if (!($rel instanceof UriInterface)) { + $rel = new self($rel); + } + + return UriResolver::resolve($base, $rel); + } + + /** + * Creates a new URI with a specific query string value removed. + * + * Any existing query string values that exactly match the provided key are + * removed. + * + * @param UriInterface $uri URI to use as a base. + * @param string $key Query string key to remove. + * + * @return UriInterface + */ + public static function withoutQueryValue(UriInterface $uri, $key) + { + $result = self::getFilteredQueryString($uri, [$key]); + + return $uri->withQuery(implode('&', $result)); + } + + /** + * Creates a new URI with a specific query string value. + * + * Any existing query string values that exactly match the provided key are + * removed and replaced with the given key value pair. + * + * A value of null will set the query string key without a value, e.g. "key" + * instead of "key=value". + * + * @param UriInterface $uri URI to use as a base. + * @param string $key Key to set. + * @param string|null $value Value to set + * + * @return UriInterface + */ + public static function withQueryValue(UriInterface $uri, $key, $value) + { + $result = self::getFilteredQueryString($uri, [$key]); + + $result[] = self::generateQueryString($key, $value); + + return $uri->withQuery(implode('&', $result)); + } + + /** + * Creates a new URI with multiple specific query string values. + * + * It has the same behavior as withQueryValue() but for an associative array of key => value. + * + * @param UriInterface $uri URI to use as a base. + * @param array $keyValueArray Associative array of key and values + * + * @return UriInterface + */ + public static function withQueryValues(UriInterface $uri, array $keyValueArray) + { + $result = self::getFilteredQueryString($uri, array_keys($keyValueArray)); + + foreach ($keyValueArray as $key => $value) { + $result[] = self::generateQueryString($key, $value); + } + + return $uri->withQuery(implode('&', $result)); + } + + /** + * Creates a URI from a hash of `parse_url` components. + * + * @param array $parts + * + * @return UriInterface + * @link http://php.net/manual/en/function.parse-url.php + * + * @throws \InvalidArgumentException If the components do not form a valid URI. + */ + public static function fromParts(array $parts) + { + $uri = new self(); + $uri->applyParts($parts); + $uri->validateState(); + + return $uri; + } + + public function getScheme() + { + return $this->scheme; + } + + public function getAuthority() + { + $authority = $this->host; + if ($this->userInfo !== '') { + $authority = $this->userInfo . '@' . $authority; + } + + if ($this->port !== null) { + $authority .= ':' . $this->port; + } + + return $authority; + } + + public function getUserInfo() + { + return $this->userInfo; + } + + public function getHost() + { + return $this->host; + } + + public function getPort() + { + return $this->port; + } + + public function getPath() + { + return $this->path; + } + + public function getQuery() + { + return $this->query; + } + + public function getFragment() + { + return $this->fragment; + } + + public function withScheme($scheme) + { + $scheme = $this->filterScheme($scheme); + + if ($this->scheme === $scheme) { + return $this; + } + + $new = clone $this; + $new->scheme = $scheme; + $new->removeDefaultPort(); + $new->validateState(); + + return $new; + } + + public function withUserInfo($user, $password = null) + { + $info = $this->filterUserInfoComponent($user); + if ($password !== null) { + $info .= ':' . $this->filterUserInfoComponent($password); + } + + if ($this->userInfo === $info) { + return $this; + } + + $new = clone $this; + $new->userInfo = $info; + $new->validateState(); + + return $new; + } + + public function withHost($host) + { + $host = $this->filterHost($host); + + if ($this->host === $host) { + return $this; + } + + $new = clone $this; + $new->host = $host; + $new->validateState(); + + return $new; + } + + public function withPort($port) + { + $port = $this->filterPort($port); + + if ($this->port === $port) { + return $this; + } + + $new = clone $this; + $new->port = $port; + $new->removeDefaultPort(); + $new->validateState(); + + return $new; + } + + public function withPath($path) + { + $path = $this->filterPath($path); + + if ($this->path === $path) { + return $this; + } + + $new = clone $this; + $new->path = $path; + $new->validateState(); + + return $new; + } + + public function withQuery($query) + { + $query = $this->filterQueryAndFragment($query); + + if ($this->query === $query) { + return $this; + } + + $new = clone $this; + $new->query = $query; + + return $new; + } + + public function withFragment($fragment) + { + $fragment = $this->filterQueryAndFragment($fragment); + + if ($this->fragment === $fragment) { + return $this; + } + + $new = clone $this; + $new->fragment = $fragment; + + return $new; + } + + /** + * Apply parse_url parts to a URI. + * + * @param array $parts Array of parse_url parts to apply. + */ + private function applyParts(array $parts) + { + $this->scheme = isset($parts['scheme']) + ? $this->filterScheme($parts['scheme']) + : ''; + $this->userInfo = isset($parts['user']) + ? $this->filterUserInfoComponent($parts['user']) + : ''; + $this->host = isset($parts['host']) + ? $this->filterHost($parts['host']) + : ''; + $this->port = isset($parts['port']) + ? $this->filterPort($parts['port']) + : null; + $this->path = isset($parts['path']) + ? $this->filterPath($parts['path']) + : ''; + $this->query = isset($parts['query']) + ? $this->filterQueryAndFragment($parts['query']) + : ''; + $this->fragment = isset($parts['fragment']) + ? $this->filterQueryAndFragment($parts['fragment']) + : ''; + if (isset($parts['pass'])) { + $this->userInfo .= ':' . $this->filterUserInfoComponent($parts['pass']); + } + + $this->removeDefaultPort(); + } + + /** + * @param string $scheme + * + * @return string + * + * @throws \InvalidArgumentException If the scheme is invalid. + */ + private function filterScheme($scheme) + { + if (!is_string($scheme)) { + throw new \InvalidArgumentException('Scheme must be a string'); + } + + return strtolower($scheme); + } + + /** + * @param string $component + * + * @return string + * + * @throws \InvalidArgumentException If the user info is invalid. + */ + private function filterUserInfoComponent($component) + { + if (!is_string($component)) { + throw new \InvalidArgumentException('User info must be a string'); + } + + return preg_replace_callback( + '/(?:[^%' . self::$charUnreserved . self::$charSubDelims . ']+|%(?![A-Fa-f0-9]{2}))/', + [$this, 'rawurlencodeMatchZero'], + $component + ); + } + + /** + * @param string $host + * + * @return string + * + * @throws \InvalidArgumentException If the host is invalid. + */ + private function filterHost($host) + { + if (!is_string($host)) { + throw new \InvalidArgumentException('Host must be a string'); + } + + return strtolower($host); + } + + /** + * @param int|null $port + * + * @return int|null + * + * @throws \InvalidArgumentException If the port is invalid. + */ + private function filterPort($port) + { + if ($port === null) { + return null; + } + + $port = (int) $port; + if (0 > $port || 0xffff < $port) { + throw new \InvalidArgumentException( + sprintf('Invalid port: %d. Must be between 0 and 65535', $port) + ); + } + + return $port; + } + + /** + * @param UriInterface $uri + * @param array $keys + * + * @return array + */ + private static function getFilteredQueryString(UriInterface $uri, array $keys) + { + $current = $uri->getQuery(); + + if ($current === '') { + return []; + } + + $decodedKeys = array_map('rawurldecode', $keys); + + return array_filter(explode('&', $current), function ($part) use ($decodedKeys) { + return !in_array(rawurldecode(explode('=', $part)[0]), $decodedKeys, true); + }); + } + + /** + * @param string $key + * @param string|null $value + * + * @return string + */ + private static function generateQueryString($key, $value) + { + // Query string separators ("=", "&") within the key or value need to be encoded + // (while preventing double-encoding) before setting the query string. All other + // chars that need percent-encoding will be encoded by withQuery(). + $queryString = strtr($key, self::$replaceQuery); + + if ($value !== null) { + $queryString .= '=' . strtr($value, self::$replaceQuery); + } + + return $queryString; + } + + private function removeDefaultPort() + { + if ($this->port !== null && self::isDefaultPort($this)) { + $this->port = null; + } + } + + /** + * Filters the path of a URI + * + * @param string $path + * + * @return string + * + * @throws \InvalidArgumentException If the path is invalid. + */ + private function filterPath($path) + { + if (!is_string($path)) { + throw new \InvalidArgumentException('Path must be a string'); + } + + return preg_replace_callback( + '/(?:[^' . self::$charUnreserved . self::$charSubDelims . '%:@\/]++|%(?![A-Fa-f0-9]{2}))/', + [$this, 'rawurlencodeMatchZero'], + $path + ); + } + + /** + * Filters the query string or fragment of a URI. + * + * @param string $str + * + * @return string + * + * @throws \InvalidArgumentException If the query or fragment is invalid. + */ + private function filterQueryAndFragment($str) + { + if (!is_string($str)) { + throw new \InvalidArgumentException('Query and fragment must be a string'); + } + + return preg_replace_callback( + '/(?:[^' . self::$charUnreserved . self::$charSubDelims . '%:@\/\?]++|%(?![A-Fa-f0-9]{2}))/', + [$this, 'rawurlencodeMatchZero'], + $str + ); + } + + private function rawurlencodeMatchZero(array $match) + { + return rawurlencode($match[0]); + } + + private function validateState() + { + if ($this->host === '' && ($this->scheme === 'http' || $this->scheme === 'https')) { + $this->host = self::HTTP_DEFAULT_HOST; + } + + if ($this->getAuthority() === '') { + if (0 === strpos($this->path, '//')) { + throw new \InvalidArgumentException('The path of a URI without an authority must not start with two slashes "//"'); + } + if ($this->scheme === '' && false !== strpos(explode('/', $this->path, 2)[0], ':')) { + throw new \InvalidArgumentException('A relative URI must not have a path beginning with a segment containing a colon'); + } + } elseif (isset($this->path[0]) && $this->path[0] !== '/') { + @trigger_error( + 'The path of a URI with an authority must start with a slash "/" or be empty. Automagically fixing the URI ' . + 'by adding a leading slash to the path is deprecated since version 1.4 and will throw an exception instead.', + E_USER_DEPRECATED + ); + $this->path = '/'. $this->path; + //throw new \InvalidArgumentException('The path of a URI with an authority must start with a slash "/" or be empty'); + } + } +} diff --git a/vendor/guzzlehttp/psr7/src/UriNormalizer.php b/vendor/guzzlehttp/psr7/src/UriNormalizer.php new file mode 100644 index 000000000..2b9174a5e --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/UriNormalizer.php @@ -0,0 +1,217 @@ +getPath() === '' && + ($uri->getScheme() === 'http' || $uri->getScheme() === 'https') + ) { + $uri = $uri->withPath('/'); + } + + if ($flags & self::REMOVE_DEFAULT_HOST && $uri->getScheme() === 'file' && $uri->getHost() === 'localhost') { + $uri = $uri->withHost(''); + } + + if ($flags & self::REMOVE_DEFAULT_PORT && $uri->getPort() !== null && Uri::isDefaultPort($uri)) { + $uri = $uri->withPort(null); + } + + if ($flags & self::REMOVE_DOT_SEGMENTS && !Uri::isRelativePathReference($uri)) { + $uri = $uri->withPath(UriResolver::removeDotSegments($uri->getPath())); + } + + if ($flags & self::REMOVE_DUPLICATE_SLASHES) { + $uri = $uri->withPath(preg_replace('#//++#', '/', $uri->getPath())); + } + + if ($flags & self::SORT_QUERY_PARAMETERS && $uri->getQuery() !== '') { + $queryKeyValues = explode('&', $uri->getQuery()); + sort($queryKeyValues); + $uri = $uri->withQuery(implode('&', $queryKeyValues)); + } + + return $uri; + } + + /** + * Whether two URIs can be considered equivalent. + * + * Both URIs are normalized automatically before comparison with the given $normalizations bitmask. The method also + * accepts relative URI references and returns true when they are equivalent. This of course assumes they will be + * resolved against the same base URI. If this is not the case, determination of equivalence or difference of + * relative references does not mean anything. + * + * @param UriInterface $uri1 An URI to compare + * @param UriInterface $uri2 An URI to compare + * @param int $normalizations A bitmask of normalizations to apply, see constants + * + * @return bool + * @link https://tools.ietf.org/html/rfc3986#section-6.1 + */ + public static function isEquivalent(UriInterface $uri1, UriInterface $uri2, $normalizations = self::PRESERVING_NORMALIZATIONS) + { + return (string) self::normalize($uri1, $normalizations) === (string) self::normalize($uri2, $normalizations); + } + + private static function capitalizePercentEncoding(UriInterface $uri) + { + $regex = '/(?:%[A-Fa-f0-9]{2})++/'; + + $callback = function (array $match) { + return strtoupper($match[0]); + }; + + return + $uri->withPath( + preg_replace_callback($regex, $callback, $uri->getPath()) + )->withQuery( + preg_replace_callback($regex, $callback, $uri->getQuery()) + ); + } + + private static function decodeUnreservedCharacters(UriInterface $uri) + { + $regex = '/%(?:2D|2E|5F|7E|3[0-9]|[46][1-9A-F]|[57][0-9A])/i'; + + $callback = function (array $match) { + return rawurldecode($match[0]); + }; + + return + $uri->withPath( + preg_replace_callback($regex, $callback, $uri->getPath()) + )->withQuery( + preg_replace_callback($regex, $callback, $uri->getQuery()) + ); + } + + private function __construct() + { + // cannot be instantiated + } +} diff --git a/vendor/guzzlehttp/psr7/src/UriResolver.php b/vendor/guzzlehttp/psr7/src/UriResolver.php new file mode 100644 index 000000000..26cecd53a --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/UriResolver.php @@ -0,0 +1,220 @@ +getScheme() != '') { + return $rel->withPath(self::removeDotSegments($rel->getPath())); + } + + if ($rel->getAuthority() != '') { + $targetAuthority = $rel->getAuthority(); + $targetPath = self::removeDotSegments($rel->getPath()); + $targetQuery = $rel->getQuery(); + } else { + $targetAuthority = $base->getAuthority(); + if ($rel->getPath() === '') { + $targetPath = $base->getPath(); + $targetQuery = $rel->getQuery() != '' ? $rel->getQuery() : $base->getQuery(); + } else { + if ($rel->getPath()[0] === '/') { + $targetPath = $rel->getPath(); + } else { + if ($targetAuthority != '' && $base->getPath() === '') { + $targetPath = '/' . $rel->getPath(); + } else { + $lastSlashPos = strrpos($base->getPath(), '/'); + if ($lastSlashPos === false) { + $targetPath = $rel->getPath(); + } else { + $targetPath = substr($base->getPath(), 0, $lastSlashPos + 1) . $rel->getPath(); + } + } + } + $targetPath = self::removeDotSegments($targetPath); + $targetQuery = $rel->getQuery(); + } + } + + return new Uri(Uri::composeComponents( + $base->getScheme(), + $targetAuthority, + $targetPath, + $targetQuery, + $rel->getFragment() + )); + } + + /** + * Returns the target URI as a relative reference from the base URI. + * + * This method is the counterpart to resolve(): + * + * (string) $target === (string) UriResolver::resolve($base, UriResolver::relativize($base, $target)) + * + * One use-case is to use the current request URI as base URI and then generate relative links in your documents + * to reduce the document size or offer self-contained downloadable document archives. + * + * $base = new Uri('http://example.com/a/b/'); + * echo UriResolver::relativize($base, new Uri('http://example.com/a/b/c')); // prints 'c'. + * echo UriResolver::relativize($base, new Uri('http://example.com/a/x/y')); // prints '../x/y'. + * echo UriResolver::relativize($base, new Uri('http://example.com/a/b/?q')); // prints '?q'. + * echo UriResolver::relativize($base, new Uri('http://example.org/a/b/')); // prints '//example.org/a/b/'. + * + * This method also accepts a target that is already relative and will try to relativize it further. Only a + * relative-path reference will be returned as-is. + * + * echo UriResolver::relativize($base, new Uri('/a/b/c')); // prints 'c' as well + * + * @param UriInterface $base Base URI + * @param UriInterface $target Target URI + * + * @return UriInterface The relative URI reference + */ + public static function relativize(UriInterface $base, UriInterface $target) + { + if ($target->getScheme() !== '' && + ($base->getScheme() !== $target->getScheme() || $target->getAuthority() === '' && $base->getAuthority() !== '') + ) { + return $target; + } + + if (Uri::isRelativePathReference($target)) { + // As the target is already highly relative we return it as-is. It would be possible to resolve + // the target with `$target = self::resolve($base, $target);` and then try make it more relative + // by removing a duplicate query. But let's not do that automatically. + return $target; + } + + if ($target->getAuthority() !== '' && $base->getAuthority() !== $target->getAuthority()) { + return $target->withScheme(''); + } + + // We must remove the path before removing the authority because if the path starts with two slashes, the URI + // would turn invalid. And we also cannot set a relative path before removing the authority, as that is also + // invalid. + $emptyPathUri = $target->withScheme('')->withPath('')->withUserInfo('')->withPort(null)->withHost(''); + + if ($base->getPath() !== $target->getPath()) { + return $emptyPathUri->withPath(self::getRelativePath($base, $target)); + } + + if ($base->getQuery() === $target->getQuery()) { + // Only the target fragment is left. And it must be returned even if base and target fragment are the same. + return $emptyPathUri->withQuery(''); + } + + // If the base URI has a query but the target has none, we cannot return an empty path reference as it would + // inherit the base query component when resolving. + if ($target->getQuery() === '') { + $segments = explode('/', $target->getPath()); + $lastSegment = end($segments); + + return $emptyPathUri->withPath($lastSegment === '' ? './' : $lastSegment); + } + + return $emptyPathUri; + } + + private static function getRelativePath(UriInterface $base, UriInterface $target) + { + $sourceSegments = explode('/', $base->getPath()); + $targetSegments = explode('/', $target->getPath()); + array_pop($sourceSegments); + $targetLastSegment = array_pop($targetSegments); + foreach ($sourceSegments as $i => $segment) { + if (isset($targetSegments[$i]) && $segment === $targetSegments[$i]) { + unset($sourceSegments[$i], $targetSegments[$i]); + } else { + break; + } + } + $targetSegments[] = $targetLastSegment; + $relativePath = str_repeat('../', count($sourceSegments)) . implode('/', $targetSegments); + + // A reference to am empty last segment or an empty first sub-segment must be prefixed with "./". + // This also applies to a segment with a colon character (e.g., "file:colon") that cannot be used + // as the first segment of a relative-path reference, as it would be mistaken for a scheme name. + if ('' === $relativePath || false !== strpos(explode('/', $relativePath, 2)[0], ':')) { + $relativePath = "./$relativePath"; + } elseif ('/' === $relativePath[0]) { + if ($base->getAuthority() != '' && $base->getPath() === '') { + // In this case an extra slash is added by resolve() automatically. So we must not add one here. + $relativePath = ".$relativePath"; + } else { + $relativePath = "./$relativePath"; + } + } + + return $relativePath; + } + + private function __construct() + { + // cannot be instantiated + } +} diff --git a/vendor/guzzlehttp/psr7/src/Utils.php b/vendor/guzzlehttp/psr7/src/Utils.php new file mode 100644 index 000000000..86960dde2 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/Utils.php @@ -0,0 +1,398 @@ + $keys + * + * @return array + */ + public static function caselessRemove($keys, array $data) + { + $result = []; + + foreach ($keys as &$key) { + $key = strtolower($key); + } + + foreach ($data as $k => $v) { + if (!in_array(strtolower($k), $keys)) { + $result[$k] = $v; + } + } + + return $result; + } + + /** + * Copy the contents of a stream into another stream until the given number + * of bytes have been read. + * + * @param StreamInterface $source Stream to read from + * @param StreamInterface $dest Stream to write to + * @param int $maxLen Maximum number of bytes to read. Pass -1 + * to read the entire stream. + * + * @throws \RuntimeException on error. + */ + public static function copyToStream(StreamInterface $source, StreamInterface $dest, $maxLen = -1) + { + $bufferSize = 8192; + + if ($maxLen === -1) { + while (!$source->eof()) { + if (!$dest->write($source->read($bufferSize))) { + break; + } + } + } else { + $remaining = $maxLen; + while ($remaining > 0 && !$source->eof()) { + $buf = $source->read(min($bufferSize, $remaining)); + $len = strlen($buf); + if (!$len) { + break; + } + $remaining -= $len; + $dest->write($buf); + } + } + } + + /** + * Copy the contents of a stream into a string until the given number of + * bytes have been read. + * + * @param StreamInterface $stream Stream to read + * @param int $maxLen Maximum number of bytes to read. Pass -1 + * to read the entire stream. + * @return string + * + * @throws \RuntimeException on error. + */ + public static function copyToString(StreamInterface $stream, $maxLen = -1) + { + $buffer = ''; + + if ($maxLen === -1) { + while (!$stream->eof()) { + $buf = $stream->read(1048576); + // Using a loose equality here to match on '' and false. + if ($buf == null) { + break; + } + $buffer .= $buf; + } + return $buffer; + } + + $len = 0; + while (!$stream->eof() && $len < $maxLen) { + $buf = $stream->read($maxLen - $len); + // Using a loose equality here to match on '' and false. + if ($buf == null) { + break; + } + $buffer .= $buf; + $len = strlen($buffer); + } + + return $buffer; + } + + /** + * Calculate a hash of a stream. + * + * This method reads the entire stream to calculate a rolling hash, based + * on PHP's `hash_init` functions. + * + * @param StreamInterface $stream Stream to calculate the hash for + * @param string $algo Hash algorithm (e.g. md5, crc32, etc) + * @param bool $rawOutput Whether or not to use raw output + * + * @return string Returns the hash of the stream + * + * @throws \RuntimeException on error. + */ + public static function hash(StreamInterface $stream, $algo, $rawOutput = false) + { + $pos = $stream->tell(); + + if ($pos > 0) { + $stream->rewind(); + } + + $ctx = hash_init($algo); + while (!$stream->eof()) { + hash_update($ctx, $stream->read(1048576)); + } + + $out = hash_final($ctx, (bool) $rawOutput); + $stream->seek($pos); + + return $out; + } + + /** + * Clone and modify a request with the given changes. + * + * This method is useful for reducing the number of clones needed to mutate + * a message. + * + * The changes can be one of: + * - method: (string) Changes the HTTP method. + * - set_headers: (array) Sets the given headers. + * - remove_headers: (array) Remove the given headers. + * - body: (mixed) Sets the given body. + * - uri: (UriInterface) Set the URI. + * - query: (string) Set the query string value of the URI. + * - version: (string) Set the protocol version. + * + * @param RequestInterface $request Request to clone and modify. + * @param array $changes Changes to apply. + * + * @return RequestInterface + */ + public static function modifyRequest(RequestInterface $request, array $changes) + { + if (!$changes) { + return $request; + } + + $headers = $request->getHeaders(); + + if (!isset($changes['uri'])) { + $uri = $request->getUri(); + } else { + // Remove the host header if one is on the URI + if ($host = $changes['uri']->getHost()) { + $changes['set_headers']['Host'] = $host; + + if ($port = $changes['uri']->getPort()) { + $standardPorts = ['http' => 80, 'https' => 443]; + $scheme = $changes['uri']->getScheme(); + if (isset($standardPorts[$scheme]) && $port != $standardPorts[$scheme]) { + $changes['set_headers']['Host'] .= ':'.$port; + } + } + } + $uri = $changes['uri']; + } + + if (!empty($changes['remove_headers'])) { + $headers = self::caselessRemove($changes['remove_headers'], $headers); + } + + if (!empty($changes['set_headers'])) { + $headers = self::caselessRemove(array_keys($changes['set_headers']), $headers); + $headers = $changes['set_headers'] + $headers; + } + + if (isset($changes['query'])) { + $uri = $uri->withQuery($changes['query']); + } + + if ($request instanceof ServerRequestInterface) { + return (new ServerRequest( + isset($changes['method']) ? $changes['method'] : $request->getMethod(), + $uri, + $headers, + isset($changes['body']) ? $changes['body'] : $request->getBody(), + isset($changes['version']) + ? $changes['version'] + : $request->getProtocolVersion(), + $request->getServerParams() + )) + ->withParsedBody($request->getParsedBody()) + ->withQueryParams($request->getQueryParams()) + ->withCookieParams($request->getCookieParams()) + ->withUploadedFiles($request->getUploadedFiles()); + } + + return new Request( + isset($changes['method']) ? $changes['method'] : $request->getMethod(), + $uri, + $headers, + isset($changes['body']) ? $changes['body'] : $request->getBody(), + isset($changes['version']) + ? $changes['version'] + : $request->getProtocolVersion() + ); + } + + /** + * Read a line from the stream up to the maximum allowed buffer length. + * + * @param StreamInterface $stream Stream to read from + * @param int|null $maxLength Maximum buffer length + * + * @return string + */ + public static function readLine(StreamInterface $stream, $maxLength = null) + { + $buffer = ''; + $size = 0; + + while (!$stream->eof()) { + // Using a loose equality here to match on '' and false. + if (null == ($byte = $stream->read(1))) { + return $buffer; + } + $buffer .= $byte; + // Break when a new line is found or the max length - 1 is reached + if ($byte === "\n" || ++$size === $maxLength - 1) { + break; + } + } + + return $buffer; + } + + /** + * Create a new stream based on the input type. + * + * Options is an associative array that can contain the following keys: + * - metadata: Array of custom metadata. + * - size: Size of the stream. + * + * This method accepts the following `$resource` types: + * - `Psr\Http\Message\StreamInterface`: Returns the value as-is. + * - `string`: Creates a stream object that uses the given string as the contents. + * - `resource`: Creates a stream object that wraps the given PHP stream resource. + * - `Iterator`: If the provided value implements `Iterator`, then a read-only + * stream object will be created that wraps the given iterable. Each time the + * stream is read from, data from the iterator will fill a buffer and will be + * continuously called until the buffer is equal to the requested read size. + * Subsequent read calls will first read from the buffer and then call `next` + * on the underlying iterator until it is exhausted. + * - `object` with `__toString()`: If the object has the `__toString()` method, + * the object will be cast to a string and then a stream will be returned that + * uses the string value. + * - `NULL`: When `null` is passed, an empty stream object is returned. + * - `callable` When a callable is passed, a read-only stream object will be + * created that invokes the given callable. The callable is invoked with the + * number of suggested bytes to read. The callable can return any number of + * bytes, but MUST return `false` when there is no more data to return. The + * stream object that wraps the callable will invoke the callable until the + * number of requested bytes are available. Any additional bytes will be + * buffered and used in subsequent reads. + * + * @param resource|string|null|int|float|bool|StreamInterface|callable|\Iterator $resource Entity body data + * @param array $options Additional options + * + * @return StreamInterface + * + * @throws \InvalidArgumentException if the $resource arg is not valid. + */ + public static function streamFor($resource = '', array $options = []) + { + if (is_scalar($resource)) { + $stream = fopen('php://temp', 'r+'); + if ($resource !== '') { + fwrite($stream, $resource); + fseek($stream, 0); + } + return new Stream($stream, $options); + } + + switch (gettype($resource)) { + case 'resource': + return new Stream($resource, $options); + case 'object': + if ($resource instanceof StreamInterface) { + return $resource; + } elseif ($resource instanceof \Iterator) { + return new PumpStream(function () use ($resource) { + if (!$resource->valid()) { + return false; + } + $result = $resource->current(); + $resource->next(); + return $result; + }, $options); + } elseif (method_exists($resource, '__toString')) { + return Utils::streamFor((string) $resource, $options); + } + break; + case 'NULL': + return new Stream(fopen('php://temp', 'r+'), $options); + } + + if (is_callable($resource)) { + return new PumpStream($resource, $options); + } + + throw new \InvalidArgumentException('Invalid resource type: ' . gettype($resource)); + } + + /** + * Safely opens a PHP stream resource using a filename. + * + * When fopen fails, PHP normally raises a warning. This function adds an + * error handler that checks for errors and throws an exception instead. + * + * @param string $filename File to open + * @param string $mode Mode used to open the file + * + * @return resource + * + * @throws \RuntimeException if the file cannot be opened + */ + public static function tryFopen($filename, $mode) + { + $ex = null; + set_error_handler(function () use ($filename, $mode, &$ex) { + $ex = new \RuntimeException(sprintf( + 'Unable to open %s using mode %s: %s', + $filename, + $mode, + func_get_args()[1] + )); + }); + + $handle = fopen($filename, $mode); + restore_error_handler(); + + if ($ex) { + /** @var $ex \RuntimeException */ + throw $ex; + } + + return $handle; + } + + /** + * Returns a UriInterface for the given value. + * + * This function accepts a string or UriInterface and returns a + * UriInterface for the given value. If the value is already a + * UriInterface, it is returned as-is. + * + * @param string|UriInterface $uri + * + * @return UriInterface + * + * @throws \InvalidArgumentException + */ + public static function uriFor($uri) + { + if ($uri instanceof UriInterface) { + return $uri; + } + + if (is_string($uri)) { + return new Uri($uri); + } + + throw new \InvalidArgumentException('URI must be a string or UriInterface'); + } +} diff --git a/vendor/guzzlehttp/psr7/src/functions.php b/vendor/guzzlehttp/psr7/src/functions.php new file mode 100644 index 000000000..e4cc13619 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/functions.php @@ -0,0 +1,417 @@ + '1', 'foo[b]' => '2'])`. + * + * @param string $str Query string to parse + * @param int|bool $urlEncoding How the query string is encoded + * + * @return array + * + * @deprecated parse_query will be removed in guzzlehttp/psr7:2.0. Use Query::parse instead. + */ +function parse_query($str, $urlEncoding = true) +{ + return Query::parse($str, $urlEncoding); +} + +/** + * Build a query string from an array of key value pairs. + * + * This function can use the return value of `parse_query()` to build a query + * string. This function does not modify the provided keys when an array is + * encountered (like `http_build_query()` would). + * + * @param array $params Query string parameters. + * @param int|false $encoding Set to false to not encode, PHP_QUERY_RFC3986 + * to encode using RFC3986, or PHP_QUERY_RFC1738 + * to encode using RFC1738. + * @return string + * + * @deprecated build_query will be removed in guzzlehttp/psr7:2.0. Use Query::build instead. + */ +function build_query(array $params, $encoding = PHP_QUERY_RFC3986) +{ + return Query::build($params, $encoding); +} + +/** + * Determines the mimetype of a file by looking at its extension. + * + * @param string $filename + * + * @return string|null + * + * @deprecated mimetype_from_filename will be removed in guzzlehttp/psr7:2.0. Use MimeType::fromFilename instead. + */ +function mimetype_from_filename($filename) +{ + return MimeType::fromFilename($filename); +} + +/** + * Maps a file extensions to a mimetype. + * + * @param $extension string The file extension. + * + * @return string|null + * + * @link http://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x/conf/mime.types + * @deprecated mimetype_from_extension will be removed in guzzlehttp/psr7:2.0. Use MimeType::fromExtension instead. + */ +function mimetype_from_extension($extension) +{ + return MimeType::fromExtension($extension); +} + +/** + * Parses an HTTP message into an associative array. + * + * The array contains the "start-line" key containing the start line of + * the message, "headers" key containing an associative array of header + * array values, and a "body" key containing the body of the message. + * + * @param string $message HTTP request or response to parse. + * + * @return array + * + * @internal + * @deprecated _parse_message will be removed in guzzlehttp/psr7:2.0. Use Message::parseMessage instead. + */ +function _parse_message($message) +{ + return Message::parseMessage($message); +} + +/** + * Constructs a URI for an HTTP request message. + * + * @param string $path Path from the start-line + * @param array $headers Array of headers (each value an array). + * + * @return string + * + * @internal + * @deprecated _parse_request_uri will be removed in guzzlehttp/psr7:2.0. Use Message::parseRequestUri instead. + */ +function _parse_request_uri($path, array $headers) +{ + return Message::parseRequestUri($path, $headers); +} + +/** + * Get a short summary of the message body. + * + * Will return `null` if the response is not printable. + * + * @param MessageInterface $message The message to get the body summary + * @param int $truncateAt The maximum allowed size of the summary + * + * @return string|null + * + * @deprecated get_message_body_summary will be removed in guzzlehttp/psr7:2.0. Use Message::bodySummary instead. + */ +function get_message_body_summary(MessageInterface $message, $truncateAt = 120) +{ + return Message::bodySummary($message, $truncateAt); +} + +/** + * Remove the items given by the keys, case insensitively from the data. + * + * @param iterable $keys + * + * @return array + * + * @internal + * @deprecated _caseless_remove will be removed in guzzlehttp/psr7:2.0. Use Utils::caselessRemove instead. + */ +function _caseless_remove($keys, array $data) +{ + return Utils::caselessRemove($keys, $data); +} diff --git a/vendor/guzzlehttp/psr7/src/functions_include.php b/vendor/guzzlehttp/psr7/src/functions_include.php new file mode 100644 index 000000000..96a4a83a0 --- /dev/null +++ b/vendor/guzzlehttp/psr7/src/functions_include.php @@ -0,0 +1,6 @@ +get($ipAddress)); + +// getWithPrefixLen returns an array containing the record and the +// associated prefix length for that record. +print_r($reader->getWithPrefixLen($ipAddress)); + +$reader->close(); +``` + +## Optional PHP C Extension ## + +MaxMind provides an optional C extension that is a drop-in replacement for +`MaxMind\Db\Reader`. In order to use this extension, you must install the +Reader API as described above and install the extension as described below. If +you are using an autoloader, no changes to your code should be necessary. + +### Installing Extension ### + +First install [libmaxminddb](https://github.com/maxmind/libmaxminddb) as +described in its [README.md +file](https://github.com/maxmind/libmaxminddb/blob/master/README.md#installing-from-a-tarball). +After successfully installing libmaxmindb, run the following commands from the +top-level directory of this distribution: + +``` +cd ext +phpize +./configure +make +make test +sudo make install +``` + +You then must load your extension. The recommend method is to add the +following to your `php.ini` file: + +``` +extension=maxminddb.so +``` + +Note: You may need to install the PHP development package on your OS such as +php5-dev for Debian-based systems or php-devel for RedHat/Fedora-based ones. + +## 128-bit Integer Support ## + +The MaxMind DB format includes 128-bit unsigned integer as a type. Although +no MaxMind-distributed database currently makes use of this type, both the +pure PHP reader and the C extension support this type. The pure PHP reader +requires gmp or bcmath to read databases with 128-bit unsigned integers. + +The integer is currently returned as a hexadecimal string (prefixed with "0x") +by the C extension and a decimal string (no prefix) by the pure PHP reader. +Any change to make the reader implementations always return either a +hexadecimal or decimal representation of the integer will NOT be considered a +breaking change. + +## Support ## + +Please report all issues with this code using the [GitHub issue tracker](https://github.com/maxmind/MaxMind-DB-Reader-php/issues). + +If you are having an issue with a MaxMind service that is not specific to the +client API, please see [our support page](https://www.maxmind.com/en/support). + +## Requirements ## + +This library requires PHP 7.2 or greater. + +The GMP or BCMath extension may be required to read some databases +using the pure PHP API. + +## Contributing ## + +Patches and pull requests are encouraged. All code should follow the PSR-1 and +PSR-2 style guidelines. Please include unit tests whenever possible. + +## Versioning ## + +The MaxMind DB Reader PHP API uses [Semantic Versioning](https://semver.org/). + +## Copyright and License ## + +This software is Copyright (c) 2014-2020 by MaxMind, Inc. + +This is free software, licensed under the Apache License, Version 2.0. diff --git a/vendor/maxmind-db/reader/autoload.php b/vendor/maxmind-db/reader/autoload.php new file mode 100644 index 000000000..5875c65e9 --- /dev/null +++ b/vendor/maxmind-db/reader/autoload.php @@ -0,0 +1,47 @@ +class. + * + * @param string $class + * the name of the class to load + */ +function mmdb_autoload($class): void +{ + /* + * A project-specific mapping between the namespaces and where + * they're located. By convention, we include the trailing + * slashes. The one-element array here simply makes things easy + * to extend in the future if (for example) the test classes + * begin to use one another. + */ + $namespace_map = ['MaxMind\\Db\\' => __DIR__ . '/src/MaxMind/Db/']; + + foreach ($namespace_map as $prefix => $dir) { + /* First swap out the namespace prefix with a directory... */ + $path = str_replace($prefix, $dir, $class); + + /* replace the namespace separator with a directory separator... */ + $path = str_replace('\\', '/', $path); + + /* and finally, add the PHP file extension to the result. */ + $path = $path . '.php'; + + /* $path should now contain the path to a PHP file defining $class */ + if (file_exists($path)) { + include $path; + } + } +} + +spl_autoload_register('mmdb_autoload'); diff --git a/vendor/maxmind-db/reader/composer.json b/vendor/maxmind-db/reader/composer.json new file mode 100644 index 000000000..5e7ff98e3 --- /dev/null +++ b/vendor/maxmind-db/reader/composer.json @@ -0,0 +1,43 @@ +{ + "name": "maxmind-db/reader", + "description": "MaxMind DB Reader API", + "keywords": ["database", "geoip", "geoip2", "geolocation", "maxmind"], + "homepage": "https://github.com/maxmind/MaxMind-DB-Reader-php", + "type": "library", + "license": "Apache-2.0", + "authors": [ + { + "name": "Gregory J. Oschwald", + "email": "goschwald@maxmind.com", + "homepage": "https://www.maxmind.com/" + } + ], + "require": { + "php": ">=7.2" + }, + "suggest": { + "ext-bcmath": "bcmath or gmp is required for decoding larger integers with the pure PHP decoder", + "ext-gmp": "bcmath or gmp is required for decoding larger integers with the pure PHP decoder", + "ext-maxminddb": "A C-based database decoder that provides significantly faster lookups" + }, + "conflict": { + "ext-maxminddb": "<1.8.0,>=2.0.0" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.*", + "phpunit/phpunit": ">=8.0.0,<10.0.0", + "php-coveralls/php-coveralls": "^2.1", + "phpunit/phpcov": ">=6.0.0", + "squizlabs/php_codesniffer": "3.*" + }, + "autoload": { + "psr-4": { + "MaxMind\\Db\\": "src/MaxMind/Db" + } + }, + "autoload-dev": { + "psr-4": { + "MaxMind\\Db\\Test\\Reader\\": "tests/MaxMind/Db/Test/Reader" + } + } +} diff --git a/vendor/maxmind-db/reader/ext/config.m4 b/vendor/maxmind-db/reader/ext/config.m4 new file mode 100644 index 000000000..675e00c6e --- /dev/null +++ b/vendor/maxmind-db/reader/ext/config.m4 @@ -0,0 +1,40 @@ +PHP_ARG_WITH(maxminddb, + [Whether to enable the MaxMind DB Reader extension], + [ --with-maxminddb Enable MaxMind DB Reader extension support]) + +PHP_ARG_ENABLE(maxminddb-debug, for MaxMind DB debug support, + [ --enable-maxminddb-debug Enable enable MaxMind DB deubg support], no, no) + +if test $PHP_MAXMINDDB != "no"; then + + AC_PATH_PROG(PKG_CONFIG, pkg-config, no) + + AC_MSG_CHECKING(for libmaxminddb) + if test -x "$PKG_CONFIG" && $PKG_CONFIG --exists libmaxminddb; then + dnl retrieve build options from pkg-config + if $PKG_CONFIG libmaxminddb --atleast-version 1.0.0; then + LIBMAXMINDDB_INC=`$PKG_CONFIG libmaxminddb --cflags` + LIBMAXMINDDB_LIB=`$PKG_CONFIG libmaxminddb --libs` + LIBMAXMINDDB_VER=`$PKG_CONFIG libmaxminddb --modversion` + AC_MSG_RESULT(found version $LIBMAXMINDDB_VER) + else + AC_MSG_ERROR(system libmaxminddb must be upgraded to version >= 1.0.0) + fi + PHP_EVAL_LIBLINE($LIBMAXMINDDB_LIB, MAXMINDDB_SHARED_LIBADD) + PHP_EVAL_INCLINE($LIBMAXMINDDB_INC) + else + AC_MSG_RESULT(pkg-config information missing) + AC_MSG_WARN(will use libmaxmxinddb from compiler default path) + + PHP_CHECK_LIBRARY(maxminddb, MMDB_open) + PHP_ADD_LIBRARY(maxminddb, 1, MAXMINDDB_SHARED_LIBADD) + fi + + if test $PHP_MAXMINDDB_DEBUG != "no"; then + CFLAGS="$CFLAGS -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Werror" + fi + + PHP_SUBST(MAXMINDDB_SHARED_LIBADD) + + PHP_NEW_EXTENSION(maxminddb, maxminddb.c, $ext_shared) +fi diff --git a/vendor/maxmind-db/reader/ext/maxminddb.c b/vendor/maxmind-db/reader/ext/maxminddb.c new file mode 100644 index 000000000..b4f171113 --- /dev/null +++ b/vendor/maxmind-db/reader/ext/maxminddb.c @@ -0,0 +1,806 @@ +/* MaxMind, Inc., licenses this file to you under the Apache License, Version + * 2.0 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT + * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the + * License for the specific language governing permissions and limitations + * under the License. + */ + +#include "php_maxminddb.h" + +#ifdef HAVE_CONFIG_H +#include "config.h" +#endif + +#include +#include + +#include "Zend/zend_exceptions.h" +#include "Zend/zend_types.h" +#include "ext/spl/spl_exceptions.h" +#include "ext/standard/info.h" +#include + +#ifdef ZTS +#include +#endif + +#define __STDC_FORMAT_MACROS +#include + +#define PHP_MAXMINDDB_NS ZEND_NS_NAME("MaxMind", "Db") +#define PHP_MAXMINDDB_READER_NS ZEND_NS_NAME(PHP_MAXMINDDB_NS, "Reader") +#define PHP_MAXMINDDB_METADATA_NS \ + ZEND_NS_NAME(PHP_MAXMINDDB_READER_NS, "Metadata") +#define PHP_MAXMINDDB_READER_EX_NS \ + ZEND_NS_NAME(PHP_MAXMINDDB_READER_NS, "InvalidDatabaseException") + +#define Z_MAXMINDDB_P(zv) php_maxminddb_fetch_object(Z_OBJ_P(zv)) +typedef size_t strsize_t; +typedef zend_object free_obj_t; + +/* For PHP 8 compatibility */ +#if PHP_VERSION_ID < 80000 + +#define PROP_OBJ(zv) (zv) + +#else + +#define PROP_OBJ(zv) Z_OBJ_P(zv) + +#define TSRMLS_C +#define TSRMLS_CC +#define TSRMLS_DC + +/* End PHP 8 compatibility */ +#endif + +#ifndef ZEND_ACC_CTOR +#define ZEND_ACC_CTOR 0 +#endif + +/* IS_MIXED was added in 2020 */ +#ifndef IS_MIXED +#define IS_MIXED IS_UNDEF +#endif + +typedef struct _maxminddb_obj { + MMDB_s *mmdb; + zend_object std; +} maxminddb_obj; + +PHP_FUNCTION(maxminddb); + +static int +get_record(INTERNAL_FUNCTION_PARAMETERS, zval *record, int *prefix_len); +static const MMDB_entry_data_list_s * +handle_entry_data_list(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC); +static const MMDB_entry_data_list_s * +handle_array(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC); +static const MMDB_entry_data_list_s * +handle_map(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC); +static void handle_uint128(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC); +static void handle_uint64(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC); +static void handle_uint32(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC); + +#define CHECK_ALLOCATED(val) \ + if (!val) { \ + zend_error(E_ERROR, "Out of memory"); \ + return; \ + } + +static zend_object_handlers maxminddb_obj_handlers; +static zend_class_entry *maxminddb_ce, *maxminddb_exception_ce, *metadata_ce; + +static inline maxminddb_obj * +php_maxminddb_fetch_object(zend_object *obj TSRMLS_DC) { + return (maxminddb_obj *)((char *)(obj)-XtOffsetOf(maxminddb_obj, std)); +} + +ZEND_BEGIN_ARG_INFO_EX(arginfo_maxminddbreader_construct, 0, 0, 1) +ZEND_ARG_TYPE_INFO(0, db_file, IS_STRING, 0) +ZEND_END_ARG_INFO() + +PHP_METHOD(MaxMind_Db_Reader, __construct) { + char *db_file = NULL; + strsize_t name_len; + zval *_this_zval = NULL; + + if (zend_parse_method_parameters(ZEND_NUM_ARGS() TSRMLS_CC, + getThis(), + "Os", + &_this_zval, + maxminddb_ce, + &db_file, + &name_len) == FAILURE) { + return; + } + + if (0 != php_check_open_basedir(db_file TSRMLS_CC) || + 0 != access(db_file, R_OK)) { + zend_throw_exception_ex( + spl_ce_InvalidArgumentException, + 0 TSRMLS_CC, + "The file \"%s\" does not exist or is not readable.", + db_file); + return; + } + + MMDB_s *mmdb = (MMDB_s *)ecalloc(1, sizeof(MMDB_s)); + uint16_t status = MMDB_open(db_file, MMDB_MODE_MMAP, mmdb); + + if (MMDB_SUCCESS != status) { + zend_throw_exception_ex( + maxminddb_exception_ce, + 0 TSRMLS_CC, + "Error opening database file (%s). Is this a valid " + "MaxMind DB file?", + db_file); + efree(mmdb); + return; + } + + maxminddb_obj *mmdb_obj = Z_MAXMINDDB_P(getThis()); + mmdb_obj->mmdb = mmdb; +} + +ZEND_BEGIN_ARG_WITH_RETURN_TYPE_INFO_EX( + arginfo_maxminddbreader_get, 0, 1, IS_MIXED, 1) +ZEND_ARG_TYPE_INFO(0, ip_address, IS_STRING, 0) +ZEND_END_ARG_INFO() + +PHP_METHOD(MaxMind_Db_Reader, get) { + int prefix_len = 0; + get_record(INTERNAL_FUNCTION_PARAM_PASSTHRU, return_value, &prefix_len); +} + +ZEND_BEGIN_ARG_WITH_RETURN_TYPE_INFO_EX( + arginfo_maxminddbreader_getWithPrefixLen, 0, 1, IS_ARRAY, 1) +ZEND_ARG_TYPE_INFO(0, ip_address, IS_STRING, 0) +ZEND_END_ARG_INFO() + +PHP_METHOD(MaxMind_Db_Reader, getWithPrefixLen) { + zval record, z_prefix_len; + + int prefix_len = 0; + if (get_record(INTERNAL_FUNCTION_PARAM_PASSTHRU, &record, &prefix_len) == + FAILURE) { + return; + } + + array_init(return_value); + add_next_index_zval(return_value, &record); + + ZVAL_LONG(&z_prefix_len, prefix_len); + add_next_index_zval(return_value, &z_prefix_len); +} + +static int +get_record(INTERNAL_FUNCTION_PARAMETERS, zval *record, int *prefix_len) { + char *ip_address = NULL; + strsize_t name_len; + zval *this_zval = NULL; + + if (zend_parse_method_parameters(ZEND_NUM_ARGS() TSRMLS_CC, + getThis(), + "Os", + &this_zval, + maxminddb_ce, + &ip_address, + &name_len) == FAILURE) { + return FAILURE; + } + + const maxminddb_obj *mmdb_obj = (maxminddb_obj *)Z_MAXMINDDB_P(getThis()); + + MMDB_s *mmdb = mmdb_obj->mmdb; + + if (NULL == mmdb) { + zend_throw_exception_ex(spl_ce_BadMethodCallException, + 0 TSRMLS_CC, + "Attempt to read from a closed MaxMind DB."); + return FAILURE; + } + + struct addrinfo hints = { + .ai_family = AF_UNSPEC, + .ai_flags = AI_NUMERICHOST, + /* We set ai_socktype so that we only get one result back */ + .ai_socktype = SOCK_STREAM}; + + struct addrinfo *addresses = NULL; + int gai_status = getaddrinfo(ip_address, NULL, &hints, &addresses); + if (gai_status) { + zend_throw_exception_ex(spl_ce_InvalidArgumentException, + 0 TSRMLS_CC, + "The value \"%s\" is not a valid IP address.", + ip_address); + return FAILURE; + } + if (!addresses || !addresses->ai_addr) { + zend_throw_exception_ex( + spl_ce_InvalidArgumentException, + 0 TSRMLS_CC, + "getaddrinfo was successful but failed to set the addrinfo"); + return FAILURE; + } + + int sa_family = addresses->ai_addr->sa_family; + + int mmdb_error = MMDB_SUCCESS; + MMDB_lookup_result_s result = + MMDB_lookup_sockaddr(mmdb, addresses->ai_addr, &mmdb_error); + + freeaddrinfo(addresses); + + if (MMDB_SUCCESS != mmdb_error) { + zend_class_entry *ex; + if (MMDB_IPV6_LOOKUP_IN_IPV4_DATABASE_ERROR == mmdb_error) { + ex = spl_ce_InvalidArgumentException; + } else { + ex = maxminddb_exception_ce; + } + zend_throw_exception_ex(ex, + 0 TSRMLS_CC, + "Error looking up %s. %s", + ip_address, + MMDB_strerror(mmdb_error)); + return FAILURE; + } + + *prefix_len = result.netmask; + + if (sa_family == AF_INET && mmdb->metadata.ip_version == 6) { + /* We return the prefix length given the IPv4 address. If there is + no IPv4 subtree, we return a prefix length of 0. */ + *prefix_len = *prefix_len >= 96 ? *prefix_len - 96 : 0; + } + + if (!result.found_entry) { + ZVAL_NULL(record); + return SUCCESS; + } + + MMDB_entry_data_list_s *entry_data_list = NULL; + int status = MMDB_get_entry_data_list(&result.entry, &entry_data_list); + + if (MMDB_SUCCESS != status) { + zend_throw_exception_ex(maxminddb_exception_ce, + 0 TSRMLS_CC, + "Error while looking up data for %s. %s", + ip_address, + MMDB_strerror(status)); + MMDB_free_entry_data_list(entry_data_list); + return FAILURE; + } else if (NULL == entry_data_list) { + zend_throw_exception_ex( + maxminddb_exception_ce, + 0 TSRMLS_CC, + "Error while looking up data for %s. Your database may " + "be corrupt or you have found a bug in libmaxminddb.", + ip_address); + return FAILURE; + } + + const MMDB_entry_data_list_s *rv = + handle_entry_data_list(entry_data_list, record TSRMLS_CC); + if (rv == NULL) { + /* We should have already thrown the exception in handle_entry_data_list + */ + return FAILURE; + } + MMDB_free_entry_data_list(entry_data_list); + return SUCCESS; +} + +ZEND_BEGIN_ARG_INFO_EX(arginfo_maxminddbreader_void, 0, 0, 0) +ZEND_END_ARG_INFO() + +PHP_METHOD(MaxMind_Db_Reader, metadata) { + zval *this_zval = NULL; + + if (zend_parse_method_parameters(ZEND_NUM_ARGS() TSRMLS_CC, + getThis(), + "O", + &this_zval, + maxminddb_ce) == FAILURE) { + return; + } + + const maxminddb_obj *const mmdb_obj = + (maxminddb_obj *)Z_MAXMINDDB_P(this_zval); + + if (NULL == mmdb_obj->mmdb) { + zend_throw_exception_ex(spl_ce_BadMethodCallException, + 0 TSRMLS_CC, + "Attempt to read from a closed MaxMind DB."); + return; + } + + object_init_ex(return_value, metadata_ce); + + MMDB_entry_data_list_s *entry_data_list; + MMDB_get_metadata_as_entry_data_list(mmdb_obj->mmdb, &entry_data_list); + + zval metadata_array; + const MMDB_entry_data_list_s *rv = + handle_entry_data_list(entry_data_list, &metadata_array TSRMLS_CC); + if (rv == NULL) { + return; + } + MMDB_free_entry_data_list(entry_data_list); + zend_call_method_with_1_params(PROP_OBJ(return_value), + metadata_ce, + &metadata_ce->constructor, + ZEND_CONSTRUCTOR_FUNC_NAME, + NULL, + &metadata_array); + zval_ptr_dtor(&metadata_array); +} + +PHP_METHOD(MaxMind_Db_Reader, close) { + zval *this_zval = NULL; + + if (zend_parse_method_parameters(ZEND_NUM_ARGS() TSRMLS_CC, + getThis(), + "O", + &this_zval, + maxminddb_ce) == FAILURE) { + return; + } + + maxminddb_obj *mmdb_obj = (maxminddb_obj *)Z_MAXMINDDB_P(this_zval); + + if (NULL == mmdb_obj->mmdb) { + zend_throw_exception_ex(spl_ce_BadMethodCallException, + 0 TSRMLS_CC, + "Attempt to close a closed MaxMind DB."); + return; + } + MMDB_close(mmdb_obj->mmdb); + efree(mmdb_obj->mmdb); + mmdb_obj->mmdb = NULL; +} + +static const MMDB_entry_data_list_s * +handle_entry_data_list(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC) { + switch (entry_data_list->entry_data.type) { + case MMDB_DATA_TYPE_MAP: + return handle_map(entry_data_list, z_value TSRMLS_CC); + case MMDB_DATA_TYPE_ARRAY: + return handle_array(entry_data_list, z_value TSRMLS_CC); + case MMDB_DATA_TYPE_UTF8_STRING: + ZVAL_STRINGL(z_value, + (char *)entry_data_list->entry_data.utf8_string, + entry_data_list->entry_data.data_size); + break; + case MMDB_DATA_TYPE_BYTES: + ZVAL_STRINGL(z_value, + (char *)entry_data_list->entry_data.bytes, + entry_data_list->entry_data.data_size); + break; + case MMDB_DATA_TYPE_DOUBLE: + ZVAL_DOUBLE(z_value, entry_data_list->entry_data.double_value); + break; + case MMDB_DATA_TYPE_FLOAT: + ZVAL_DOUBLE(z_value, entry_data_list->entry_data.float_value); + break; + case MMDB_DATA_TYPE_UINT16: + ZVAL_LONG(z_value, entry_data_list->entry_data.uint16); + break; + case MMDB_DATA_TYPE_UINT32: + handle_uint32(entry_data_list, z_value TSRMLS_CC); + break; + case MMDB_DATA_TYPE_BOOLEAN: + ZVAL_BOOL(z_value, entry_data_list->entry_data.boolean); + break; + case MMDB_DATA_TYPE_UINT64: + handle_uint64(entry_data_list, z_value TSRMLS_CC); + break; + case MMDB_DATA_TYPE_UINT128: + handle_uint128(entry_data_list, z_value TSRMLS_CC); + break; + case MMDB_DATA_TYPE_INT32: + ZVAL_LONG(z_value, entry_data_list->entry_data.int32); + break; + default: + zend_throw_exception_ex(maxminddb_exception_ce, + 0 TSRMLS_CC, + "Invalid data type arguments: %d", + entry_data_list->entry_data.type); + return NULL; + } + return entry_data_list; +} + +static const MMDB_entry_data_list_s * +handle_map(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC) { + array_init(z_value); + const uint32_t map_size = entry_data_list->entry_data.data_size; + + uint i; + for (i = 0; i < map_size && entry_data_list; i++) { + entry_data_list = entry_data_list->next; + + char *key = estrndup((char *)entry_data_list->entry_data.utf8_string, + entry_data_list->entry_data.data_size); + if (NULL == key) { + zend_throw_exception_ex(maxminddb_exception_ce, + 0 TSRMLS_CC, + "Invalid data type arguments"); + return NULL; + } + + entry_data_list = entry_data_list->next; + zval new_value; + entry_data_list = + handle_entry_data_list(entry_data_list, &new_value TSRMLS_CC); + if (entry_data_list != NULL) { + add_assoc_zval(z_value, key, &new_value); + } + efree(key); + } + return entry_data_list; +} + +static const MMDB_entry_data_list_s * +handle_array(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC) { + const uint32_t size = entry_data_list->entry_data.data_size; + + array_init(z_value); + + uint i; + for (i = 0; i < size && entry_data_list; i++) { + entry_data_list = entry_data_list->next; + zval new_value; + entry_data_list = + handle_entry_data_list(entry_data_list, &new_value TSRMLS_CC); + if (entry_data_list != NULL) { + add_next_index_zval(z_value, &new_value); + } + } + return entry_data_list; +} + +static void handle_uint128(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC) { + uint64_t high = 0; + uint64_t low = 0; +#if MMDB_UINT128_IS_BYTE_ARRAY + int i; + for (i = 0; i < 8; i++) { + high = (high << 8) | entry_data_list->entry_data.uint128[i]; + } + + for (i = 8; i < 16; i++) { + low = (low << 8) | entry_data_list->entry_data.uint128[i]; + } +#else + high = entry_data_list->entry_data.uint128 >> 64; + low = (uint64_t)entry_data_list->entry_data.uint128; +#endif + + char *num_str; + spprintf(&num_str, 0, "0x%016" PRIX64 "%016" PRIX64, high, low); + CHECK_ALLOCATED(num_str); + + ZVAL_STRING(z_value, num_str); + efree(num_str); +} + +static void handle_uint32(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC) { + uint32_t val = entry_data_list->entry_data.uint32; + +#if LONG_MAX >= UINT32_MAX + ZVAL_LONG(z_value, val); + return; +#else + if (val <= LONG_MAX) { + ZVAL_LONG(z_value, val); + return; + } + + char *int_str; + spprintf(&int_str, 0, "%" PRIu32, val); + CHECK_ALLOCATED(int_str); + + ZVAL_STRING(z_value, int_str); + efree(int_str); +#endif +} + +static void handle_uint64(const MMDB_entry_data_list_s *entry_data_list, + zval *z_value TSRMLS_DC) { + uint64_t val = entry_data_list->entry_data.uint64; + +#if LONG_MAX >= UINT64_MAX + ZVAL_LONG(z_value, val); + return; +#else + if (val <= LONG_MAX) { + ZVAL_LONG(z_value, val); + return; + } + + char *int_str; + spprintf(&int_str, 0, "%" PRIu64, val); + CHECK_ALLOCATED(int_str); + + ZVAL_STRING(z_value, int_str); + efree(int_str); +#endif +} + +static void maxminddb_free_storage(free_obj_t *object TSRMLS_DC) { + maxminddb_obj *obj = + php_maxminddb_fetch_object((zend_object *)object TSRMLS_CC); + if (obj->mmdb != NULL) { + MMDB_close(obj->mmdb); + efree(obj->mmdb); + } + + zend_object_std_dtor(&obj->std TSRMLS_CC); +} + +static zend_object *maxminddb_create_handler(zend_class_entry *type TSRMLS_DC) { + maxminddb_obj *obj = (maxminddb_obj *)ecalloc(1, sizeof(maxminddb_obj)); + zend_object_std_init(&obj->std, type TSRMLS_CC); + object_properties_init(&(obj->std), type); + + obj->std.handlers = &maxminddb_obj_handlers; + + return &obj->std; +} + +/* clang-format off */ +static zend_function_entry maxminddb_methods[] = { + PHP_ME(MaxMind_Db_Reader, __construct, arginfo_maxminddbreader_construct, + ZEND_ACC_PUBLIC | ZEND_ACC_CTOR) + PHP_ME(MaxMind_Db_Reader, close, arginfo_maxminddbreader_void, ZEND_ACC_PUBLIC) + PHP_ME(MaxMind_Db_Reader, get, arginfo_maxminddbreader_get, ZEND_ACC_PUBLIC) + PHP_ME(MaxMind_Db_Reader, getWithPrefixLen, arginfo_maxminddbreader_getWithPrefixLen, ZEND_ACC_PUBLIC) + PHP_ME(MaxMind_Db_Reader, metadata, arginfo_maxminddbreader_void, ZEND_ACC_PUBLIC) + { NULL, NULL, NULL } +}; +/* clang-format on */ + +ZEND_BEGIN_ARG_INFO_EX(arginfo_metadata_construct, 0, 0, 1) +ZEND_ARG_TYPE_INFO(0, metadata, IS_ARRAY, 0) +ZEND_END_ARG_INFO() + +PHP_METHOD(MaxMind_Db_Reader_Metadata, __construct) { + zval *object = NULL; + zval *metadata_array = NULL; + zend_long node_count = 0; + zend_long record_size = 0; + + if (zend_parse_method_parameters(ZEND_NUM_ARGS() TSRMLS_CC, + getThis(), + "Oa", + &object, + metadata_ce, + &metadata_array) == FAILURE) { + return; + } + + zval *tmp = NULL; + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "binary_format_major_version", + sizeof("binary_format_major_version") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "binaryFormatMajorVersion", + sizeof("binaryFormatMajorVersion") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "binary_format_minor_version", + sizeof("binary_format_minor_version") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "binaryFormatMinorVersion", + sizeof("binaryFormatMinorVersion") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "build_epoch", + sizeof("build_epoch") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "buildEpoch", + sizeof("buildEpoch") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "database_type", + sizeof("database_type") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "databaseType", + sizeof("databaseType") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "description", + sizeof("description") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "description", + sizeof("description") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "ip_version", + sizeof("ip_version") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "ipVersion", + sizeof("ipVersion") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find( + HASH_OF(metadata_array), "languages", sizeof("languages") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "languages", + sizeof("languages") - 1, + tmp); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "record_size", + sizeof("record_size") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "recordSize", + sizeof("recordSize") - 1, + tmp); + if (Z_TYPE_P(tmp) == IS_LONG) { + record_size = Z_LVAL_P(tmp); + } + } + + if (record_size != 0) { + zend_update_property_long(metadata_ce, + PROP_OBJ(object), + "nodeByteSize", + sizeof("nodeByteSize") - 1, + record_size / 4); + } + + if ((tmp = zend_hash_str_find(HASH_OF(metadata_array), + "node_count", + sizeof("node_count") - 1))) { + zend_update_property(metadata_ce, + PROP_OBJ(object), + "nodeCount", + sizeof("nodeCount") - 1, + tmp); + if (Z_TYPE_P(tmp) == IS_LONG) { + node_count = Z_LVAL_P(tmp); + } + } + + if (record_size != 0) { + zend_update_property_long(metadata_ce, + PROP_OBJ(object), + "searchTreeSize", + sizeof("searchTreeSize") - 1, + record_size * node_count / 4); + } +} + +// clang-format off +static zend_function_entry metadata_methods[] = { + PHP_ME(MaxMind_Db_Reader_Metadata, __construct, arginfo_metadata_construct, ZEND_ACC_PUBLIC | ZEND_ACC_CTOR) + {NULL, NULL, NULL} +}; +// clang-format on + +PHP_MINIT_FUNCTION(maxminddb) { + zend_class_entry ce; + + INIT_CLASS_ENTRY(ce, PHP_MAXMINDDB_READER_EX_NS, NULL); + maxminddb_exception_ce = + zend_register_internal_class_ex(&ce, zend_ce_exception); + + INIT_CLASS_ENTRY(ce, PHP_MAXMINDDB_READER_NS, maxminddb_methods); + maxminddb_ce = zend_register_internal_class(&ce TSRMLS_CC); + maxminddb_ce->create_object = maxminddb_create_handler; + + INIT_CLASS_ENTRY(ce, PHP_MAXMINDDB_METADATA_NS, metadata_methods); + metadata_ce = zend_register_internal_class(&ce TSRMLS_CC); + zend_declare_property_null(metadata_ce, + "binaryFormatMajorVersion", + sizeof("binaryFormatMajorVersion") - 1, + ZEND_ACC_PUBLIC); + zend_declare_property_null(metadata_ce, + "binaryFormatMinorVersion", + sizeof("binaryFormatMinorVersion") - 1, + ZEND_ACC_PUBLIC); + zend_declare_property_null( + metadata_ce, "buildEpoch", sizeof("buildEpoch") - 1, ZEND_ACC_PUBLIC); + zend_declare_property_null(metadata_ce, + "databaseType", + sizeof("databaseType") - 1, + ZEND_ACC_PUBLIC); + zend_declare_property_null( + metadata_ce, "description", sizeof("description") - 1, ZEND_ACC_PUBLIC); + zend_declare_property_null( + metadata_ce, "ipVersion", sizeof("ipVersion") - 1, ZEND_ACC_PUBLIC); + zend_declare_property_null( + metadata_ce, "languages", sizeof("languages") - 1, ZEND_ACC_PUBLIC); + zend_declare_property_null(metadata_ce, + "nodeByteSize", + sizeof("nodeByteSize") - 1, + ZEND_ACC_PUBLIC); + zend_declare_property_null( + metadata_ce, "nodeCount", sizeof("nodeCount") - 1, ZEND_ACC_PUBLIC); + zend_declare_property_null( + metadata_ce, "recordSize", sizeof("recordSize") - 1, ZEND_ACC_PUBLIC); + zend_declare_property_null(metadata_ce, + "searchTreeSize", + sizeof("searchTreeSize") - 1, + ZEND_ACC_PUBLIC); + + memcpy(&maxminddb_obj_handlers, + zend_get_std_object_handlers(), + sizeof(zend_object_handlers)); + maxminddb_obj_handlers.clone_obj = NULL; + maxminddb_obj_handlers.offset = XtOffsetOf(maxminddb_obj, std); + maxminddb_obj_handlers.free_obj = maxminddb_free_storage; + zend_declare_class_constant_string(maxminddb_ce, + "MMDB_LIB_VERSION", + sizeof("MMDB_LIB_VERSION") - 1, + MMDB_lib_version() TSRMLS_CC); + + return SUCCESS; +} + +static PHP_MINFO_FUNCTION(maxminddb) { + php_info_print_table_start(); + + php_info_print_table_row(2, "MaxMind DB Reader", "enabled"); + php_info_print_table_row( + 2, "maxminddb extension version", PHP_MAXMINDDB_VERSION); + php_info_print_table_row( + 2, "libmaxminddb library version", MMDB_lib_version()); + + php_info_print_table_end(); +} + +zend_module_entry maxminddb_module_entry = {STANDARD_MODULE_HEADER, + PHP_MAXMINDDB_EXTNAME, + NULL, + PHP_MINIT(maxminddb), + NULL, + NULL, + NULL, + PHP_MINFO(maxminddb), + PHP_MAXMINDDB_VERSION, + STANDARD_MODULE_PROPERTIES}; + +#ifdef COMPILE_DL_MAXMINDDB +ZEND_GET_MODULE(maxminddb) +#endif diff --git a/vendor/maxmind-db/reader/ext/php_maxminddb.h b/vendor/maxmind-db/reader/ext/php_maxminddb.h new file mode 100644 index 000000000..d484ac6c1 --- /dev/null +++ b/vendor/maxmind-db/reader/ext/php_maxminddb.h @@ -0,0 +1,24 @@ +/* MaxMind, Inc., licenses this file to you under the Apache License, Version + * 2.0 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT + * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the + * License for the specific language governing permissions and limitations + * under the License. + */ + +#include + +#ifndef PHP_MAXMINDDB_H +#define PHP_MAXMINDDB_H 1 +#define PHP_MAXMINDDB_VERSION "1.8.0" +#define PHP_MAXMINDDB_EXTNAME "maxminddb" + +extern zend_module_entry maxminddb_module_entry; +#define phpext_maxminddb_ptr &maxminddb_module_entry + +#endif diff --git a/vendor/maxmind-db/reader/ext/tests/001-load.phpt b/vendor/maxmind-db/reader/ext/tests/001-load.phpt new file mode 100644 index 000000000..09810eec4 --- /dev/null +++ b/vendor/maxmind-db/reader/ext/tests/001-load.phpt @@ -0,0 +1,12 @@ +--TEST-- +Check for maxminddb presence +--SKIPIF-- + +--FILE-- + +--EXPECT-- +maxminddb extension is available diff --git a/vendor/maxmind-db/reader/ext/tests/002-final.phpt b/vendor/maxmind-db/reader/ext/tests/002-final.phpt new file mode 100644 index 000000000..d91b7d0ff --- /dev/null +++ b/vendor/maxmind-db/reader/ext/tests/002-final.phpt @@ -0,0 +1,13 @@ +--TEST-- +Check that Reader class is not final +--SKIPIF-- + +--FILE-- +isFinal()); +?> +--EXPECT-- +bool(false) diff --git a/vendor/maxmind-db/reader/ext/tests/003-open-basedir.phpt b/vendor/maxmind-db/reader/ext/tests/003-open-basedir.phpt new file mode 100644 index 000000000..26e978193 --- /dev/null +++ b/vendor/maxmind-db/reader/ext/tests/003-open-basedir.phpt @@ -0,0 +1,12 @@ +--TEST-- +openbase_dir is followed +--INI-- +open_basedir=/--dne-- +--FILE-- + +--EXPECTREGEX-- +.*open_basedir restriction in effect.* diff --git a/vendor/maxmind-db/reader/package.xml b/vendor/maxmind-db/reader/package.xml new file mode 100644 index 000000000..3ab095392 --- /dev/null +++ b/vendor/maxmind-db/reader/package.xml @@ -0,0 +1,60 @@ + + + + maxminddb + pecl.php.net + Reader for the MaxMind DB file format + This is the PHP extension for reading MaxMind DB files. MaxMind DB is a binary file format that stores data indexed by IP address subnets (IPv4 or IPv6). + + Greg Oschwald + oschwald + goschwald@maxmind.com + yes + + 2020-10-01 + + 1.8.0 + 1.7.0 + + + stable + stable + + Apache License 2.0 + * Fixes for PHP 8.0. Pull Request by Remi Collet. GitHub #108. + + + + + + + + + + + + + + + + + + + + + + + + 7.2.0 + + + 1.10.0 + + + + maxminddb + + diff --git a/vendor/maxmind-db/reader/src/MaxMind/Db/Reader.php b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader.php new file mode 100644 index 000000000..7367276ec --- /dev/null +++ b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader.php @@ -0,0 +1,365 @@ +fileHandle = $fileHandle; + + $fileSize = @filesize($database); + if ($fileSize === false) { + throw new UnexpectedValueException( + "Error determining the size of \"$database\"." + ); + } + $this->fileSize = $fileSize; + + $start = $this->findMetadataStart($database); + $metadataDecoder = new Decoder($this->fileHandle, $start); + [$metadataArray] = $metadataDecoder->decode($start); + $this->metadata = new Metadata($metadataArray); + $this->decoder = new Decoder( + $this->fileHandle, + $this->metadata->searchTreeSize + self::$DATA_SECTION_SEPARATOR_SIZE + ); + $this->ipV4Start = $this->ipV4StartNode(); + } + + /** + * Retrieves the record for the IP address. + * + * @param string $ipAddress + * the IP address to look up + * + * @throws BadMethodCallException if this method is called on a closed database + * @throws InvalidArgumentException if something other than a single IP address is passed to the method + * @throws InvalidDatabaseException + * if the database is invalid or there is an error reading + * from it + * + * @return mixed the record for the IP address + */ + public function get(string $ipAddress) + { + if (\func_num_args() !== 1) { + throw new ArgumentCountError( + sprintf('%s() expects exactly 1 parameter, %d given', __METHOD__, \func_num_args()) + ); + } + [$record] = $this->getWithPrefixLen($ipAddress); + + return $record; + } + + /** + * Retrieves the record for the IP address and its associated network prefix length. + * + * @param string $ipAddress + * the IP address to look up + * + * @throws BadMethodCallException if this method is called on a closed database + * @throws InvalidArgumentException if something other than a single IP address is passed to the method + * @throws InvalidDatabaseException + * if the database is invalid or there is an error reading + * from it + * + * @return array an array where the first element is the record and the + * second the network prefix length for the record + */ + public function getWithPrefixLen(string $ipAddress): array + { + if (\func_num_args() !== 1) { + throw new ArgumentCountError( + sprintf('%s() expects exactly 1 parameter, %d given', __METHOD__, \func_num_args()) + ); + } + + if (!\is_resource($this->fileHandle)) { + throw new BadMethodCallException( + 'Attempt to read from a closed MaxMind DB.' + ); + } + + [$pointer, $prefixLen] = $this->findAddressInTree($ipAddress); + if ($pointer === 0) { + return [null, $prefixLen]; + } + + return [$this->resolveDataPointer($pointer), $prefixLen]; + } + + private function findAddressInTree(string $ipAddress): array + { + $packedAddr = @inet_pton($ipAddress); + if ($packedAddr === false) { + throw new InvalidArgumentException( + "The value \"$ipAddress\" is not a valid IP address." + ); + } + + $rawAddress = unpack('C*', $packedAddr); + + $bitCount = \count($rawAddress) * 8; + + // The first node of the tree is always node 0, at the beginning of the + // value + $node = 0; + + $metadata = $this->metadata; + + // Check if we are looking up an IPv4 address in an IPv6 tree. If this + // is the case, we can skip over the first 96 nodes. + if ($metadata->ipVersion === 6) { + if ($bitCount === 32) { + $node = $this->ipV4Start; + } + } elseif ($metadata->ipVersion === 4 && $bitCount === 128) { + throw new InvalidArgumentException( + "Error looking up $ipAddress. You attempted to look up an" + . ' IPv6 address in an IPv4-only database.' + ); + } + + $nodeCount = $metadata->nodeCount; + + for ($i = 0; $i < $bitCount && $node < $nodeCount; ++$i) { + $tempBit = 0xFF & $rawAddress[($i >> 3) + 1]; + $bit = 1 & ($tempBit >> 7 - ($i % 8)); + + $node = $this->readNode($node, $bit); + } + if ($node === $nodeCount) { + // Record is empty + return [0, $i]; + } elseif ($node > $nodeCount) { + // Record is a data pointer + return [$node, $i]; + } + throw new InvalidDatabaseException('Something bad happened'); + } + + private function ipV4StartNode(): int + { + // If we have an IPv4 database, the start node is the first node + if ($this->metadata->ipVersion === 4) { + return 0; + } + + $node = 0; + + for ($i = 0; $i < 96 && $node < $this->metadata->nodeCount; ++$i) { + $node = $this->readNode($node, 0); + } + + return $node; + } + + private function readNode(int $nodeNumber, int $index): int + { + $baseOffset = $nodeNumber * $this->metadata->nodeByteSize; + + switch ($this->metadata->recordSize) { + case 24: + $bytes = Util::read($this->fileHandle, $baseOffset + $index * 3, 3); + [, $node] = unpack('N', "\x00" . $bytes); + + return $node; + case 28: + $bytes = Util::read($this->fileHandle, $baseOffset + 3 * $index, 4); + if ($index === 0) { + $middle = (0xF0 & \ord($bytes[3])) >> 4; + } else { + $middle = 0x0F & \ord($bytes[0]); + } + [, $node] = unpack('N', \chr($middle) . substr($bytes, $index, 3)); + + return $node; + case 32: + $bytes = Util::read($this->fileHandle, $baseOffset + $index * 4, 4); + [, $node] = unpack('N', $bytes); + + return $node; + default: + throw new InvalidDatabaseException( + 'Unknown record size: ' + . $this->metadata->recordSize + ); + } + } + + /** + * @return mixed + */ + private function resolveDataPointer(int $pointer) + { + $resolved = $pointer - $this->metadata->nodeCount + + $this->metadata->searchTreeSize; + if ($resolved >= $this->fileSize) { + throw new InvalidDatabaseException( + "The MaxMind DB file's search tree is corrupt" + ); + } + + [$data] = $this->decoder->decode($resolved); + + return $data; + } + + /* + * This is an extremely naive but reasonably readable implementation. There + * are much faster algorithms (e.g., Boyer-Moore) for this if speed is ever + * an issue, but I suspect it won't be. + */ + private function findMetadataStart(string $filename): int + { + $handle = $this->fileHandle; + $fstat = fstat($handle); + $fileSize = $fstat['size']; + $marker = self::$METADATA_START_MARKER; + $markerLength = self::$METADATA_START_MARKER_LENGTH; + + $minStart = $fileSize - min(self::$METADATA_MAX_SIZE, $fileSize); + + for ($offset = $fileSize - $markerLength; $offset >= $minStart; --$offset) { + if (fseek($handle, $offset) !== 0) { + break; + } + + $value = fread($handle, $markerLength); + if ($value === $marker) { + return $offset + $markerLength; + } + } + throw new InvalidDatabaseException( + "Error opening database file ($filename). " . + 'Is this a valid MaxMind DB file?' + ); + } + + /** + * @throws InvalidArgumentException if arguments are passed to the method + * @throws BadMethodCallException if the database has been closed + * + * @return Metadata object for the database + */ + public function metadata(): Metadata + { + if (\func_num_args()) { + throw new ArgumentCountError( + sprintf('%s() expects exactly 0 parameters, %d given', __METHOD__, \func_num_args()) + ); + } + + // Not technically required, but this makes it consistent with + // C extension and it allows us to change our implementation later. + if (!\is_resource($this->fileHandle)) { + throw new BadMethodCallException( + 'Attempt to read from a closed MaxMind DB.' + ); + } + + return clone $this->metadata; + } + + /** + * Closes the MaxMind DB and returns resources to the system. + * + * @throws Exception + * if an I/O error occurs + */ + public function close(): void + { + if (\func_num_args()) { + throw new ArgumentCountError( + sprintf('%s() expects exactly 0 parameters, %d given', __METHOD__, \func_num_args()) + ); + } + + if (!\is_resource($this->fileHandle)) { + throw new BadMethodCallException( + 'Attempt to close a closed MaxMind DB.' + ); + } + fclose($this->fileHandle); + } +} diff --git a/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Decoder.php b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Decoder.php new file mode 100644 index 000000000..e30aea02f --- /dev/null +++ b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Decoder.php @@ -0,0 +1,358 @@ +fileStream = $fileStream; + $this->pointerBase = $pointerBase; + + $this->pointerBaseByteSize = $pointerBase > 0 ? log($pointerBase, 2) / 8 : 0; + $this->pointerTestHack = $pointerTestHack; + + $this->switchByteOrder = $this->isPlatformLittleEndian(); + } + + public function decode(int $offset): array + { + $ctrlByte = \ord(Util::read($this->fileStream, $offset, 1)); + ++$offset; + + $type = $ctrlByte >> 5; + + // Pointers are a special case, we don't read the next $size bytes, we + // use the size to determine the length of the pointer and then follow + // it. + if ($type === self::_POINTER) { + [$pointer, $offset] = $this->decodePointer($ctrlByte, $offset); + + // for unit testing + if ($this->pointerTestHack) { + return [$pointer]; + } + + [$result] = $this->decode($pointer); + + return [$result, $offset]; + } + + if ($type === self::_EXTENDED) { + $nextByte = \ord(Util::read($this->fileStream, $offset, 1)); + + $type = $nextByte + 7; + + if ($type < 8) { + throw new InvalidDatabaseException( + 'Something went horribly wrong in the decoder. An extended type ' + . 'resolved to a type number < 8 (' + . $type + . ')' + ); + } + + ++$offset; + } + + [$size, $offset] = $this->sizeFromCtrlByte($ctrlByte, $offset); + + return $this->decodeByType($type, $offset, $size); + } + + private function decodeByType(int $type, int $offset, int $size): array + { + switch ($type) { + case self::_MAP: + return $this->decodeMap($size, $offset); + case self::_ARRAY: + return $this->decodeArray($size, $offset); + case self::_BOOLEAN: + return [$this->decodeBoolean($size), $offset]; + } + + $newOffset = $offset + $size; + $bytes = Util::read($this->fileStream, $offset, $size); + switch ($type) { + case self::_BYTES: + case self::_UTF8_STRING: + return [$bytes, $newOffset]; + case self::_DOUBLE: + $this->verifySize(8, $size); + + return [$this->decodeDouble($bytes), $newOffset]; + case self::_FLOAT: + $this->verifySize(4, $size); + + return [$this->decodeFloat($bytes), $newOffset]; + case self::_INT32: + return [$this->decodeInt32($bytes, $size), $newOffset]; + case self::_UINT16: + case self::_UINT32: + case self::_UINT64: + case self::_UINT128: + return [$this->decodeUint($bytes, $size), $newOffset]; + default: + throw new InvalidDatabaseException( + 'Unknown or unexpected type: ' . $type + ); + } + } + + private function verifySize(int $expected, int $actual): void + { + if ($expected !== $actual) { + throw new InvalidDatabaseException( + "The MaxMind DB file's data section contains bad data (unknown data type or corrupt data)" + ); + } + } + + private function decodeArray(int $size, int $offset): array + { + $array = []; + + for ($i = 0; $i < $size; ++$i) { + [$value, $offset] = $this->decode($offset); + array_push($array, $value); + } + + return [$array, $offset]; + } + + private function decodeBoolean(int $size): bool + { + return $size !== 0; + } + + private function decodeDouble(string $bytes): float + { + // This assumes IEEE 754 doubles, but most (all?) modern platforms + // use them. + [, $double] = unpack('E', $bytes); + + return $double; + } + + private function decodeFloat(string $bytes): float + { + // This assumes IEEE 754 floats, but most (all?) modern platforms + // use them. + [, $float] = unpack('G', $bytes); + + return $float; + } + + private function decodeInt32(string $bytes, int $size): int + { + switch ($size) { + case 0: + return 0; + case 1: + case 2: + case 3: + $bytes = str_pad($bytes, 4, "\x00", STR_PAD_LEFT); + break; + case 4: + break; + default: + throw new InvalidDatabaseException( + "The MaxMind DB file's data section contains bad data (unknown data type or corrupt data)" + ); + } + + [, $int] = unpack('l', $this->maybeSwitchByteOrder($bytes)); + + return $int; + } + + private function decodeMap(int $size, int $offset): array + { + $map = []; + + for ($i = 0; $i < $size; ++$i) { + [$key, $offset] = $this->decode($offset); + [$value, $offset] = $this->decode($offset); + $map[$key] = $value; + } + + return [$map, $offset]; + } + + private function decodePointer(int $ctrlByte, int $offset): array + { + $pointerSize = (($ctrlByte >> 3) & 0x3) + 1; + + $buffer = Util::read($this->fileStream, $offset, $pointerSize); + $offset = $offset + $pointerSize; + + switch ($pointerSize) { + case 1: + $packed = \chr($ctrlByte & 0x7) . $buffer; + [, $pointer] = unpack('n', $packed); + $pointer += $this->pointerBase; + break; + case 2: + $packed = "\x00" . \chr($ctrlByte & 0x7) . $buffer; + [, $pointer] = unpack('N', $packed); + $pointer += $this->pointerBase + 2048; + break; + case 3: + $packed = \chr($ctrlByte & 0x7) . $buffer; + + // It is safe to use 'N' here, even on 32 bit machines as the + // first bit is 0. + [, $pointer] = unpack('N', $packed); + $pointer += $this->pointerBase + 526336; + break; + case 4: + // We cannot use unpack here as we might overflow on 32 bit + // machines + $pointerOffset = $this->decodeUint($buffer, $pointerSize); + + $byteLength = $pointerSize + $this->pointerBaseByteSize; + + if ($byteLength <= _MM_MAX_INT_BYTES) { + $pointer = $pointerOffset + $this->pointerBase; + } elseif (\extension_loaded('gmp')) { + $pointer = gmp_strval(gmp_add($pointerOffset, $this->pointerBase)); + } elseif (\extension_loaded('bcmath')) { + $pointer = bcadd($pointerOffset, (string) $this->pointerBase); + } else { + throw new RuntimeException( + 'The gmp or bcmath extension must be installed to read this database.' + ); + } + break; + default: + throw new InvalidDatabaseException( + 'Unexpected pointer size ' . $pointerSize + ); + } + + return [$pointer, $offset]; + } + + private function decodeUint(string $bytes, int $byteLength) + { + if ($byteLength === 0) { + return 0; + } + + $integer = 0; + + for ($i = 0; $i < $byteLength; ++$i) { + $part = \ord($bytes[$i]); + + // We only use gmp or bcmath if the final value is too big + if ($byteLength <= _MM_MAX_INT_BYTES) { + $integer = ($integer << 8) + $part; + } elseif (\extension_loaded('gmp')) { + $integer = gmp_strval(gmp_add(gmp_mul((string) $integer, '256'), $part)); + } elseif (\extension_loaded('bcmath')) { + $integer = bcadd(bcmul((string) $integer, '256'), (string) $part); + } else { + throw new RuntimeException( + 'The gmp or bcmath extension must be installed to read this database.' + ); + } + } + + return $integer; + } + + private function sizeFromCtrlByte(int $ctrlByte, int $offset): array + { + $size = $ctrlByte & 0x1f; + + if ($size < 29) { + return [$size, $offset]; + } + + $bytesToRead = $size - 28; + $bytes = Util::read($this->fileStream, $offset, $bytesToRead); + + if ($size === 29) { + $size = 29 + \ord($bytes); + } elseif ($size === 30) { + [, $adjust] = unpack('n', $bytes); + $size = 285 + $adjust; + } else { + [, $adjust] = unpack('N', "\x00" . $bytes); + $size = $adjust + 65821; + } + + return [$size, $offset + $bytesToRead]; + } + + private function maybeSwitchByteOrder(string $bytes): string + { + return $this->switchByteOrder ? strrev($bytes) : $bytes; + } + + private function isPlatformLittleEndian(): bool + { + $testint = 0x00FF; + $packed = pack('S', $testint); + + return $testint === current(unpack('v', $packed)); + } +} diff --git a/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/InvalidDatabaseException.php b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/InvalidDatabaseException.php new file mode 100644 index 000000000..532310703 --- /dev/null +++ b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/InvalidDatabaseException.php @@ -0,0 +1,14 @@ +binaryFormatMajorVersion = + $metadata['binary_format_major_version']; + $this->binaryFormatMinorVersion = + $metadata['binary_format_minor_version']; + $this->buildEpoch = $metadata['build_epoch']; + $this->databaseType = $metadata['database_type']; + $this->languages = $metadata['languages']; + $this->description = $metadata['description']; + $this->ipVersion = $metadata['ip_version']; + $this->nodeCount = $metadata['node_count']; + $this->recordSize = $metadata['record_size']; + $this->nodeByteSize = $this->recordSize / 4; + $this->searchTreeSize = $this->nodeCount * $this->nodeByteSize; + } +} diff --git a/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Util.php b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Util.php new file mode 100644 index 000000000..15e6bc4d4 --- /dev/null +++ b/vendor/maxmind-db/reader/src/MaxMind/Db/Reader/Util.php @@ -0,0 +1,31 @@ +=7.2", + "composer/ca-bundle": "^1.0.3", + "ext-curl": "*", + "ext-json": "*" + }, + "require-dev": { + "friendsofphp/php-cs-fixer": "2.*", + "phpunit/phpunit": "^8.0 || ^9.0", + "squizlabs/php_codesniffer": "3.*" + }, + "autoload": { + "psr-4": { + "MaxMind\\Exception\\": "src/Exception", + "MaxMind\\WebService\\": "src/WebService" + } + } +} diff --git a/vendor/maxmind/web-service-common/dev-bin/release.sh b/vendor/maxmind/web-service-common/dev-bin/release.sh new file mode 100644 index 000000000..a5de03027 --- /dev/null +++ b/vendor/maxmind/web-service-common/dev-bin/release.sh @@ -0,0 +1,60 @@ +#!/bin/bash + +set -eu -o pipefail + + +changelog=$(cat CHANGELOG.md) + +regex=' +([0-9]+\.[0-9]+\.[0-9]+) \(([0-9]{4}-[0-9]{2}-[0-9]{2})\) +-* + +((.| +)*) +' + +if [[ ! $changelog =~ $regex ]]; then + echo "Could not find date line in change log!" + exit 1 +fi + +version="${BASH_REMATCH[1]}" +date="${BASH_REMATCH[2]}" +notes="$(echo "${BASH_REMATCH[3]}" | sed -n -E '/^[0-9]+\.[0-9]+\.[0-9]+/,$!p')" + +if [[ "$date" != $(date +"%Y-%m-%d") ]]; then + echo "$date is not today!" + exit 1 +fi + +tag="v$version" + +if [ -n "$(git status --porcelain)" ]; then + echo ". is not clean." >&2 + exit 1 +fi + +php composer.phar self-update +php composer.phar update + +./vendor/bin/phpunit + +echo "Release notes for $tag:" +echo "$notes" + +read -e -p "Commit changes and push to origin? " should_push + +if [ "$should_push" != "y" ]; then + echo "Aborting" + exit 1 +fi + +git push + +message="$version + +$notes" + +hub release create -m "$message" "$tag" + +git push --tags diff --git a/vendor/maxmind/web-service-common/src/Exception/AuthenticationException.php b/vendor/maxmind/web-service-common/src/Exception/AuthenticationException.php new file mode 100644 index 000000000..5b016ce51 --- /dev/null +++ b/vendor/maxmind/web-service-common/src/Exception/AuthenticationException.php @@ -0,0 +1,12 @@ +uri = $uri; + parent::__construct($message, $httpStatus, $previous); + } + + public function getUri(): string + { + return $this->uri; + } + + public function getStatusCode(): int + { + return $this->getCode(); + } +} diff --git a/vendor/maxmind/web-service-common/src/Exception/InsufficientFundsException.php b/vendor/maxmind/web-service-common/src/Exception/InsufficientFundsException.php new file mode 100644 index 000000000..283145650 --- /dev/null +++ b/vendor/maxmind/web-service-common/src/Exception/InsufficientFundsException.php @@ -0,0 +1,12 @@ +error = $error; + parent::__construct($message, $httpStatus, $uri, $previous); + } + + public function getErrorCode(): string + { + return $this->error; + } +} diff --git a/vendor/maxmind/web-service-common/src/Exception/IpAddressNotFoundException.php b/vendor/maxmind/web-service-common/src/Exception/IpAddressNotFoundException.php new file mode 100644 index 000000000..581db488b --- /dev/null +++ b/vendor/maxmind/web-service-common/src/Exception/IpAddressNotFoundException.php @@ -0,0 +1,9 @@ +accountId = $accountId; + $this->licenseKey = $licenseKey; + + $this->httpRequestFactory = isset($options['httpRequestFactory']) + ? $options['httpRequestFactory'] + : new RequestFactory(); + + if (isset($options['host'])) { + $this->host = $options['host']; + } + if (isset($options['userAgent'])) { + $this->userAgentPrefix = $options['userAgent'] . ' '; + } + + $this->caBundle = isset($options['caBundle']) ? + $this->caBundle = $options['caBundle'] : $this->getCaBundle(); + + if (isset($options['connectTimeout'])) { + $this->connectTimeout = $options['connectTimeout']; + } + if (isset($options['timeout'])) { + $this->timeout = $options['timeout']; + } + + if (isset($options['proxy'])) { + $this->proxy = $options['proxy']; + } + } + + /** + * @param string $service name of the service querying + * @param string $path the URI path to use + * @param array $input the data to be posted as JSON + * + * @throws InvalidInputException when the request has missing or invalid + * data + * @throws AuthenticationException when there is an issue authenticating the + * request + * @throws InsufficientFundsException when your account is out of funds + * @throws InvalidRequestException when the request is invalid for some + * other reason, e.g., invalid JSON in the POST. + * @throws HttpException when an unexpected HTTP error occurs + * @throws WebServiceException when some other error occurs. This also + * serves as the base class for the above exceptions. + * + * @return array|null The decoded content of a successful response + */ + public function post(string $service, string $path, array $input): ?array + { + $requestBody = json_encode($input); + if ($requestBody === false) { + throw new InvalidInputException( + 'Error encoding input as JSON: ' + . $this->jsonErrorDescription() + ); + } + + $request = $this->createRequest( + $path, + ['Content-Type: application/json'] + ); + + list($statusCode, $contentType, $responseBody) = $request->post($requestBody); + + return $this->handleResponse( + $statusCode, + $contentType, + $responseBody, + $service, + $path + ); + } + + public function get(string $service, string $path): ?array + { + $request = $this->createRequest($path); + + list($statusCode, $contentType, $responseBody) = $request->get(); + + return $this->handleResponse( + $statusCode, + $contentType, + $responseBody, + $service, + $path + ); + } + + private function userAgent(): string + { + $curlVersion = curl_version(); + + return $this->userAgentPrefix . 'MaxMind-WS-API/' . self::VERSION . ' PHP/' . PHP_VERSION . + ' curl/' . $curlVersion['version']; + } + + private function createRequest(string $path, array $headers = []): \MaxMind\WebService\Http\Request + { + array_push( + $headers, + 'Authorization: Basic ' + . base64_encode($this->accountId . ':' . $this->licenseKey), + 'Accept: application/json' + ); + + return $this->httpRequestFactory->request( + $this->urlFor($path), + [ + 'caBundle' => $this->caBundle, + 'connectTimeout' => $this->connectTimeout, + 'headers' => $headers, + 'proxy' => $this->proxy, + 'timeout' => $this->timeout, + 'userAgent' => $this->userAgent(), + ] + ); + } + + /** + * @param int $statusCode the HTTP status code of the response + * @param string|null $contentType the Content-Type of the response + * @param string|null $responseBody the response body + * @param string $service the name of the service + * @param string $path the path used in the request + * + * @throws AuthenticationException when there is an issue authenticating the + * request + * @throws InsufficientFundsException when your account is out of funds + * @throws InvalidRequestException when the request is invalid for some + * other reason, e.g., invalid JSON in the POST. + * @throws HttpException when an unexpected HTTP error occurs + * @throws WebServiceException when some other error occurs. This also + * serves as the base class for the above exceptions + * + * @return array|null The decoded content of a successful response + */ + private function handleResponse( + int $statusCode, + ?string $contentType, + ?string $responseBody, + string $service, + string $path + ): ?array { + if ($statusCode >= 400 && $statusCode <= 499) { + $this->handle4xx($statusCode, $contentType, $responseBody, $service, $path); + } elseif ($statusCode >= 500) { + $this->handle5xx($statusCode, $service, $path); + } elseif ($statusCode !== 200 && $statusCode !== 204) { + $this->handleUnexpectedStatus($statusCode, $service, $path); + } + + return $this->handleSuccess($statusCode, $responseBody, $service); + } + + /** + * @return string describing the JSON error + */ + private function jsonErrorDescription(): string + { + $errno = json_last_error(); + switch ($errno) { + case JSON_ERROR_DEPTH: + return 'The maximum stack depth has been exceeded.'; + case JSON_ERROR_STATE_MISMATCH: + return 'Invalid or malformed JSON.'; + case JSON_ERROR_CTRL_CHAR: + return 'Control character error.'; + case JSON_ERROR_SYNTAX: + return 'Syntax error.'; + case JSON_ERROR_UTF8: + return 'Malformed UTF-8 characters.'; + default: + return "Other JSON error ($errno)."; + } + } + + /** + * @param string $path the path to use in the URL + * + * @return string the constructed URL + */ + private function urlFor(string $path): string + { + return 'https://' . $this->host . $path; + } + + /** + * @param int $statusCode the HTTP status code + * @param string|null $contentType the response content-type + * @param string|null $body the response body + * @param string $service the service name + * @param string $path the path used in the request + * + * @throws AuthenticationException + * @throws HttpException + * @throws InsufficientFundsException + * @throws InvalidRequestException + */ + private function handle4xx( + int $statusCode, + ?string $contentType, + ?string $body, + string $service, + string $path + ): void { + if ($body === null || $body === '') { + throw new HttpException( + "Received a $statusCode error for $service with no body", + $statusCode, + $this->urlFor($path) + ); + } + if ($contentType === null || !strstr($contentType, 'json')) { + throw new HttpException( + "Received a $statusCode error for $service with " . + 'the following body: ' . $body, + $statusCode, + $this->urlFor($path) + ); + } + + $message = json_decode($body, true); + if ($message === null) { + throw new HttpException( + "Received a $statusCode error for $service but could " . + 'not decode the response as JSON: ' + . $this->jsonErrorDescription() . ' Body: ' . $body, + $statusCode, + $this->urlFor($path) + ); + } + + if (!isset($message['code']) || !isset($message['error'])) { + throw new HttpException( + 'Error response contains JSON but it does not ' . + 'specify code or error keys: ' . $body, + $statusCode, + $this->urlFor($path) + ); + } + + $this->handleWebServiceError( + $message['error'], + $message['code'], + $statusCode, + $path + ); + } + + /** + * @param string $message the error message from the web service + * @param string $code the error code from the web service + * @param int $statusCode the HTTP status code + * @param string $path the path used in the request + * + * @throws AuthenticationException + * @throws InvalidRequestException + * @throws InsufficientFundsException + */ + private function handleWebServiceError( + string $message, + string $code, + int $statusCode, + string $path + ): void { + switch ($code) { + case 'IP_ADDRESS_NOT_FOUND': + case 'IP_ADDRESS_RESERVED': + throw new IpAddressNotFoundException( + $message, + $code, + $statusCode, + $this->urlFor($path) + ); + case 'ACCOUNT_ID_REQUIRED': + case 'ACCOUNT_ID_UNKNOWN': + case 'AUTHORIZATION_INVALID': + case 'LICENSE_KEY_REQUIRED': + case 'USER_ID_REQUIRED': + case 'USER_ID_UNKNOWN': + throw new AuthenticationException( + $message, + $code, + $statusCode, + $this->urlFor($path) + ); + case 'OUT_OF_QUERIES': + case 'INSUFFICIENT_FUNDS': + throw new InsufficientFundsException( + $message, + $code, + $statusCode, + $this->urlFor($path) + ); + case 'PERMISSION_REQUIRED': + throw new PermissionRequiredException( + $message, + $code, + $statusCode, + $this->urlFor($path) + ); + default: + throw new InvalidRequestException( + $message, + $code, + $statusCode, + $this->urlFor($path) + ); + } + } + + /** + * @param int $statusCode the HTTP status code + * @param string $service the service name + * @param string $path the URI path used in the request + * + * @throws HttpException + */ + private function handle5xx(int $statusCode, string $service, string $path): void + { + throw new HttpException( + "Received a server error ($statusCode) for $service", + $statusCode, + $this->urlFor($path) + ); + } + + /** + * @param int $statusCode the HTTP status code + * @param string $service the service name + * @param string $path the URI path used in the request + * + * @throws HttpException + */ + private function handleUnexpectedStatus(int $statusCode, string $service, string $path): void + { + throw new HttpException( + 'Received an unexpected HTTP status ' . + "($statusCode) for $service", + $statusCode, + $this->urlFor($path) + ); + } + + /** + * @param int $statusCode the HTTP status code + * @param string|null $body the successful request body + * @param string $service the service name + * + * @throws WebServiceException if a response body is included but not + * expected, or is not expected but not + * included, or is expected and included + * but cannot be decoded as JSON + * + * @return array|null the decoded request body + */ + private function handleSuccess(int $statusCode, ?string $body, string $service): ?array + { + // A 204 should have no response body + if ($statusCode === 204) { + if ($body !== null && $body !== '') { + throw new WebServiceException( + "Received a 204 response for $service along with an " . + "unexpected HTTP body: $body" + ); + } + + return null; + } + + // A 200 should have a valid JSON body + if ($body === null || $body === '') { + throw new WebServiceException( + "Received a 200 response for $service but did not " . + 'receive a HTTP body.' + ); + } + + $decodedContent = json_decode($body, true); + if ($decodedContent === null) { + throw new WebServiceException( + "Received a 200 response for $service but could " . + 'not decode the response as JSON: ' + . $this->jsonErrorDescription() . ' Body: ' . $body + ); + } + + return $decodedContent; + } + + private function getCaBundle() + { + $curlVersion = curl_version(); + + // On OS X, when the SSL version is "SecureTransport", the system's + // keychain will be used. + if ($curlVersion['ssl_version'] === 'SecureTransport') { + return null; + } + $cert = CaBundle::getSystemCaRootBundlePath(); + + // Check if the cert is inside a phar. If so, we need to copy the cert + // to a temp file so that curl can see it. + if (substr($cert, 0, 7) === 'phar://') { + $tempDir = sys_get_temp_dir(); + $newCert = tempnam($tempDir, 'geoip2-'); + if ($newCert === false) { + throw new \RuntimeException( + "Unable to create temporary file in $tempDir" + ); + } + if (!copy($cert, $newCert)) { + throw new \RuntimeException( + "Could not copy $cert to $newCert: " + . var_export(error_get_last(), true) + ); + } + + // We use a shutdown function rather than the destructor as the + // destructor isn't called on a fatal error such as an uncaught + // exception. + register_shutdown_function( + function () use ($newCert) { + unlink($newCert); + } + ); + $cert = $newCert; + } + if (!file_exists($cert)) { + throw new \RuntimeException("CA cert does not exist at $cert"); + } + + return $cert; + } +} diff --git a/vendor/maxmind/web-service-common/src/WebService/Http/CurlRequest.php b/vendor/maxmind/web-service-common/src/WebService/Http/CurlRequest.php new file mode 100644 index 000000000..14d6bbe95 --- /dev/null +++ b/vendor/maxmind/web-service-common/src/WebService/Http/CurlRequest.php @@ -0,0 +1,136 @@ +url = $url; + $this->options = $options; + $this->ch = $options['curlHandle']; + } + + /** + * @throws HttpException + */ + public function post(string $body): array + { + $curl = $this->createCurl(); + + curl_setopt($curl, CURLOPT_POST, true); + curl_setopt($curl, CURLOPT_POSTFIELDS, $body); + + return $this->execute($curl); + } + + public function get(): array + { + $curl = $this->createCurl(); + + curl_setopt($curl, CURLOPT_HTTPGET, true); + + return $this->execute($curl); + } + + /** + * @return resource + */ + private function createCurl() + { + curl_reset($this->ch); + + $opts = []; + $opts[CURLOPT_URL] = $this->url; + + if (!empty($this->options['caBundle'])) { + $opts[CURLOPT_CAINFO] = $this->options['caBundle']; + } + + $opts[CURLOPT_ENCODING] = ''; + $opts[CURLOPT_SSL_VERIFYHOST] = 2; + $opts[CURLOPT_FOLLOWLOCATION] = false; + $opts[CURLOPT_SSL_VERIFYPEER] = true; + $opts[CURLOPT_RETURNTRANSFER] = true; + + $opts[CURLOPT_HTTPHEADER] = $this->options['headers']; + $opts[CURLOPT_USERAGENT] = $this->options['userAgent']; + $opts[CURLOPT_PROXY] = $this->options['proxy']; + + // The defined()s are here as the *_MS opts are not available on older + // cURL versions + $connectTimeout = $this->options['connectTimeout']; + if (\defined('CURLOPT_CONNECTTIMEOUT_MS')) { + $opts[CURLOPT_CONNECTTIMEOUT_MS] = ceil($connectTimeout * 1000); + } else { + $opts[CURLOPT_CONNECTTIMEOUT] = ceil($connectTimeout); + } + + $timeout = $this->options['timeout']; + if (\defined('CURLOPT_TIMEOUT_MS')) { + $opts[CURLOPT_TIMEOUT_MS] = ceil($timeout * 1000); + } else { + $opts[CURLOPT_TIMEOUT] = ceil($timeout); + } + + curl_setopt_array($this->ch, $opts); + + return $this->ch; + } + + /** + * @param resource $curl + * + * @throws HttpException + */ + private function execute($curl): array + { + $body = curl_exec($curl); + if ($errno = curl_errno($curl)) { + $errorMessage = curl_error($curl); + + throw new HttpException( + "cURL error ({$errno}): {$errorMessage}", + 0, + $this->url + ); + } + + $statusCode = curl_getinfo($curl, CURLINFO_HTTP_CODE); + $contentType = curl_getinfo($curl, CURLINFO_CONTENT_TYPE); + + return [ + $statusCode, + // The PHP docs say "Content-Type: of the requested document. NULL + // indicates server did not send valid Content-Type: header" for + // CURLINFO_CONTENT_TYPE. However, it will return FALSE if no header + // is set. To keep our types simple, we return null in this case. + ($contentType === false ? null : $contentType), + $body, + ]; + } +} diff --git a/vendor/maxmind/web-service-common/src/WebService/Http/Request.php b/vendor/maxmind/web-service-common/src/WebService/Http/Request.php new file mode 100644 index 000000000..994c46964 --- /dev/null +++ b/vendor/maxmind/web-service-common/src/WebService/Http/Request.php @@ -0,0 +1,19 @@ +ch)) { + curl_close($this->ch); + } + } + + private function getCurlHandle() + { + if (empty($this->ch)) { + $this->ch = curl_init(); + } + + return $this->ch; + } + + /** + * @return Request + */ + public function request(string $url, array $options) + { + $options['curlHandle'] = $this->getCurlHandle(); + + return new CurlRequest($url, $options); + } +} diff --git a/vendor/minishlink/web-push/LICENSE b/vendor/minishlink/web-push/LICENSE new file mode 100644 index 000000000..a775fc840 --- /dev/null +++ b/vendor/minishlink/web-push/LICENSE @@ -0,0 +1,19 @@ +Copyright (c) 2015 Louis Lagrange + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/minishlink/web-push/composer.json b/vendor/minishlink/web-push/composer.json new file mode 100644 index 000000000..c03a696bc --- /dev/null +++ b/vendor/minishlink/web-push/composer.json @@ -0,0 +1,39 @@ +{ + "name": "minishlink/web-push", + "type": "library", + "description": "Web Push library for PHP", + "keywords": ["push", "notifications", "web", "WebPush", "Push API"], + "homepage": "https://github.com/web-push-libs/web-push-php", + "license": "MIT", + "authors": [ + { + "name": "Louis Lagrange", + "email": "lagrange.louis@gmail.com", + "homepage": "https://github.com/Minishlink" + } + ], + "scripts": { + "test:unit": "./vendor/bin/phpunit --color", + "test:typing": "./vendor/bin/phpstan analyse --level max src", + "test:syntax": "./vendor/bin/php-cs-fixer fix ./src --dry-run --stop-on-violation --using-cache=no" + }, + "require": { + "php": "^7.1", + "ext-json": "*", + "ext-gmp": "*", + "lib-openssl": "*", + "guzzlehttp/guzzle": "^6.2", + "web-token/jwt-signature": "^1.0", + "web-token/jwt-key-mgmt": "^1.0" + }, + "require-dev": { + "phpunit/phpunit": "^7.0", + "phpstan/phpstan": "0.11.2", + "friendsofphp/php-cs-fixer": "^2.14" + }, + "autoload": { + "psr-4" : { + "Minishlink\\WebPush\\" : "src" + } + } +} diff --git a/vendor/minishlink/web-push/src/Encryption.php b/vendor/minishlink/web-push/src/Encryption.php new file mode 100644 index 000000000..e9fe1acbe --- /dev/null +++ b/vendor/minishlink/web-push/src/Encryption.php @@ -0,0 +1,321 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +use Base64Url\Base64Url; +use Jose\Component\Core\Util\Ecc\NistCurve; +use Jose\Component\Core\Util\Ecc\Point; +use Jose\Component\Core\Util\Ecc\PrivateKey; +use Jose\Component\Core\Util\Ecc\PublicKey; + +class Encryption +{ + public const MAX_PAYLOAD_LENGTH = 4078; + public const MAX_COMPATIBILITY_PAYLOAD_LENGTH = 3052; + + /** + * @param string $payload + * @param int $maxLengthToPad + * @param string $contentEncoding + * @return string padded payload (plaintext) + * @throws \ErrorException + */ + public static function padPayload(string $payload, int $maxLengthToPad, string $contentEncoding): string + { + $payloadLen = Utils::safeStrlen($payload); + $padLen = $maxLengthToPad ? $maxLengthToPad - $payloadLen : 0; + + if ($contentEncoding === "aesgcm") { + return pack('n*', $padLen).str_pad($payload, $padLen + $payloadLen, chr(0), STR_PAD_LEFT); + } elseif ($contentEncoding === "aes128gcm") { + return str_pad($payload.chr(2), $padLen + $payloadLen, chr(0), STR_PAD_RIGHT); + } else { + throw new \ErrorException("This content encoding is not supported"); + } + } + + /** + * @param string $payload With padding + * @param string $userPublicKey Base 64 encoded (MIME or URL-safe) + * @param string $userAuthToken Base 64 encoded (MIME or URL-safe) + * @param string $contentEncoding + * @return array + * + * @throws \ErrorException + */ + public static function encrypt(string $payload, string $userPublicKey, string $userAuthToken, string $contentEncoding): array + { + return self::deterministicEncrypt( + $payload, + $userPublicKey, + $userAuthToken, + $contentEncoding, + self::createLocalKeyObject(), + random_bytes(16) + ); + } + + /** + * @param string $payload + * @param string $userPublicKey + * @param string $userAuthToken + * @param string $contentEncoding + * @param array $localKeyObject + * @param string $salt + * @return array + * + * @throws \ErrorException + */ + public static function deterministicEncrypt(string $payload, string $userPublicKey, string $userAuthToken, string $contentEncoding, array $localKeyObject, string $salt): array + { + $userPublicKey = Base64Url::decode($userPublicKey); + $userAuthToken = Base64Url::decode($userAuthToken); + + $curve = NistCurve::curve256(); + + // get local key pair + list($localPublicKeyObject, $localPrivateKeyObject) = $localKeyObject; + $localPublicKey = hex2bin(Utils::serializePublicKey($localPublicKeyObject)); + if (!$localPublicKey) { + throw new \ErrorException('Failed to convert local public key from hexadecimal to binary'); + } + + // get user public key object + [$userPublicKeyObjectX, $userPublicKeyObjectY] = Utils::unserializePublicKey($userPublicKey); + $userPublicKeyObject = $curve->getPublicKeyFrom( + gmp_init(bin2hex($userPublicKeyObjectX), 16), + gmp_init(bin2hex($userPublicKeyObjectY), 16) + ); + + // get shared secret from user public key and local private key + $sharedSecret = $curve->mul($userPublicKeyObject->getPoint(), $localPrivateKeyObject->getSecret())->getX(); + $sharedSecret = hex2bin(str_pad(gmp_strval($sharedSecret, 16), 64, '0', STR_PAD_LEFT)); + if (!$sharedSecret) { + throw new \ErrorException('Failed to convert shared secret from hexadecimal to binary'); + } + + // section 4.3 + $ikm = self::getIKM($userAuthToken, $userPublicKey, $localPublicKey, $sharedSecret, $contentEncoding); + + // section 4.2 + $context = self::createContext($userPublicKey, $localPublicKey, $contentEncoding); + + // derive the Content Encryption Key + $contentEncryptionKeyInfo = self::createInfo($contentEncoding, $context, $contentEncoding); + $contentEncryptionKey = self::hkdf($salt, $ikm, $contentEncryptionKeyInfo, 16); + + // section 3.3, derive the nonce + $nonceInfo = self::createInfo('nonce', $context, $contentEncoding); + $nonce = self::hkdf($salt, $ikm, $nonceInfo, 12); + + // encrypt + // "The additional data passed to each invocation of AEAD_AES_128_GCM is a zero-length octet sequence." + $tag = ''; + $encryptedText = openssl_encrypt($payload, 'aes-128-gcm', $contentEncryptionKey, OPENSSL_RAW_DATA, $nonce, $tag); + + // return values in url safe base64 + return [ + 'localPublicKey' => $localPublicKey, + 'salt' => $salt, + 'cipherText' => $encryptedText.$tag, + ]; + } + + public static function getContentCodingHeader($salt, $localPublicKey, $contentEncoding): string + { + if ($contentEncoding === "aes128gcm") { + return $salt + .pack('N*', 4096) + .pack('C*', Utils::safeStrlen($localPublicKey)) + .$localPublicKey; + } + + return ""; + } + + /** + * HMAC-based Extract-and-Expand Key Derivation Function (HKDF). + * + * This is used to derive a secure encryption key from a mostly-secure shared + * secret. + * + * This is a partial implementation of HKDF tailored to our specific purposes. + * In particular, for us the value of N will always be 1, and thus T always + * equals HMAC-Hash(PRK, info | 0x01). + * + * See {@link https://www.rfc-editor.org/rfc/rfc5869.txt} + * From {@link https://github.com/GoogleChrome/push-encryption-node/blob/master/src/encrypt.js} + * + * @param string $salt A non-secret random value + * @param string $ikm Input keying material + * @param string $info Application-specific context + * @param int $length The length (in bytes) of the required output key + * + * @return string + */ + private static function hkdf(string $salt, string $ikm, string $info, int $length): string + { + // extract + $prk = hash_hmac('sha256', $ikm, $salt, true); + + // expand + return mb_substr(hash_hmac('sha256', $info.chr(1), $prk, true), 0, $length, '8bit'); + } + + /** + * Creates a context for deriving encryption parameters. + * See section 4.2 of + * {@link https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-00} + * From {@link https://github.com/GoogleChrome/push-encryption-node/blob/master/src/encrypt.js}. + * + * @param string $clientPublicKey The client's public key + * @param string $serverPublicKey Our public key + * + * @return null|string + * + * @throws \ErrorException + */ + private static function createContext(string $clientPublicKey, string $serverPublicKey, $contentEncoding): ?string + { + if ($contentEncoding === "aes128gcm") { + return null; + } + + if (Utils::safeStrlen($clientPublicKey) !== 65) { + throw new \ErrorException('Invalid client public key length'); + } + + // This one should never happen, because it's our code that generates the key + if (Utils::safeStrlen($serverPublicKey) !== 65) { + throw new \ErrorException('Invalid server public key length'); + } + + $len = chr(0).'A'; // 65 as Uint16BE + + return chr(0).$len.$clientPublicKey.$len.$serverPublicKey; + } + + /** + * Returns an info record. See sections 3.2 and 3.3 of + * {@link https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-00} + * From {@link https://github.com/GoogleChrome/push-encryption-node/blob/master/src/encrypt.js}. + * + * @param string $type The type of the info record + * @param string|null $context The context for the record + * @param string $contentEncoding + * @return string + * + * @throws \ErrorException + */ + private static function createInfo(string $type, ?string $context, string $contentEncoding): string + { + if ($contentEncoding === "aesgcm") { + if (!$context) { + throw new \ErrorException('Context must exist'); + } + + if (Utils::safeStrlen($context) !== 135) { + throw new \ErrorException('Context argument has invalid size'); + } + + return 'Content-Encoding: '.$type.chr(0).'P-256'.$context; + } elseif ($contentEncoding === "aes128gcm") { + return 'Content-Encoding: '.$type.chr(0); + } + + throw new \ErrorException('This content encoding is not supported.'); + } + + /** + * @return array + */ + private static function createLocalKeyObject(): array + { + try { + return self::createLocalKeyObjectUsingOpenSSL(); + } catch (\Exception $e) { + return self::createLocalKeyObjectUsingPurePhpMethod(); + } + } + + /** + * @return array + */ + private static function createLocalKeyObjectUsingPurePhpMethod(): array + { + $curve = NistCurve::curve256(); + $privateKey = $curve->createPrivateKey(); + + return [ + $curve->createPublicKey($privateKey), + $privateKey, + ]; + } + + /** + * @return array + */ + private static function createLocalKeyObjectUsingOpenSSL(): array + { + $keyResource = openssl_pkey_new([ + 'curve_name' => 'prime256v1', + 'private_key_type' => OPENSSL_KEYTYPE_EC, + ]); + + if (!$keyResource) { + throw new \RuntimeException('Unable to create the key'); + } + + $details = openssl_pkey_get_details($keyResource); + openssl_pkey_free($keyResource); + + if (!$details) { + throw new \RuntimeException('Unable to get the key details'); + } + + return [ + PublicKey::create(Point::create( + gmp_init(bin2hex($details['ec']['x']), 16), + gmp_init(bin2hex($details['ec']['y']), 16) + )), + PrivateKey::create(gmp_init(bin2hex($details['ec']['d']), 16)) + ]; + } + + /** + * @param string $userAuthToken + * @param string $userPublicKey + * @param string $localPublicKey + * @param string $sharedSecret + * @param string $contentEncoding + * @return string + * @throws \ErrorException + */ + private static function getIKM(string $userAuthToken, string $userPublicKey, string $localPublicKey, string $sharedSecret, string $contentEncoding): string + { + if (!empty($userAuthToken)) { + if ($contentEncoding === "aesgcm") { + $info = 'Content-Encoding: auth'.chr(0); + } elseif ($contentEncoding === "aes128gcm") { + $info = "WebPush: info".chr(0).$userPublicKey.$localPublicKey; + } else { + throw new \ErrorException("This content encoding is not supported"); + } + + return self::hkdf($userAuthToken, $sharedSecret, $info, 32); + } + + return $sharedSecret; + } +} diff --git a/vendor/minishlink/web-push/src/MessageSentReport.php b/vendor/minishlink/web-push/src/MessageSentReport.php new file mode 100644 index 000000000..c569952c4 --- /dev/null +++ b/vendor/minishlink/web-push/src/MessageSentReport.php @@ -0,0 +1,181 @@ +request = $request; + $this->response = $response; + $this->success = $success; + $this->reason = $reason; + } + + /** + * @return bool + */ + public function isSuccess(): bool + { + return $this->success; + } + + /** + * @param bool $success + * + * @return MessageSentReport + */ + public function setSuccess(bool $success): MessageSentReport + { + $this->success = $success; + return $this; + } + + /** + * @return RequestInterface + */ + public function getRequest(): RequestInterface + { + return $this->request; + } + + /** + * @param RequestInterface $request + * + * @return MessageSentReport + */ + public function setRequest(RequestInterface $request): MessageSentReport + { + $this->request = $request; + return $this; + } + + /** + * @return ResponseInterface | null + */ + public function getResponse(): ?ResponseInterface + { + return $this->response; + } + + /** + * @param ResponseInterface $response + * + * @return MessageSentReport + */ + public function setResponse(ResponseInterface $response): MessageSentReport + { + $this->response = $response; + return $this; + } + + /** + * @return string + */ + public function getEndpoint(): string + { + return $this->request->getUri()->__toString(); + } + + /** + * @return bool + */ + public function isSubscriptionExpired(): bool + { + if (!$this->response) { + return false; + } + + return \in_array($this->response->getStatusCode(), [404, 410], true); + } + + /** + * @return string + */ + public function getReason(): string + { + return $this->reason; + } + + /** + * @param string $reason + * + * @return MessageSentReport + */ + public function setReason(string $reason): MessageSentReport + { + $this->reason = $reason; + return $this; + } + + /** + * @return string + */ + public function getRequestPayload(): string + { + return $this->request->getBody()->getContents(); + } + + /** + * @return string | null + */ + public function getResponseContent(): ?string + { + if (!$this->response) { + return null; + } + + return $this->response->getBody()->getContents(); + } + + /** + * @return array|mixed + */ + public function jsonSerialize() + { + return [ + 'success' => $this->isSuccess(), + 'expired' => $this->isSubscriptionExpired(), + 'reason' => $this->reason, + 'endpoint' => $this->getEndpoint(), + 'payload' => $this->request->getBody()->getContents(), + ]; + } +} diff --git a/vendor/minishlink/web-push/src/Notification.php b/vendor/minishlink/web-push/src/Notification.php new file mode 100644 index 000000000..1107404c9 --- /dev/null +++ b/vendor/minishlink/web-push/src/Notification.php @@ -0,0 +1,86 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +class Notification +{ + /** @var SubscriptionInterface */ + private $subscription; + + /** @var null|string */ + private $payload; + + /** @var array Options : TTL, urgency, topic */ + private $options; + + /** @var array Auth details : GCM, VAPID */ + private $auth; + + /** + * Notification constructor. + * + * @param SubscriptionInterface $subscription + * @param null|string $payload + * @param array $options + * @param array $auth + */ + public function __construct(SubscriptionInterface $subscription, ?string $payload, array $options, array $auth) + { + $this->subscription = $subscription; + $this->payload = $payload; + $this->options = $options; + $this->auth = $auth; + } + + /** + * @return SubscriptionInterface + */ + public function getSubscription(): SubscriptionInterface + { + return $this->subscription; + } + + /** + * @return null|string + */ + public function getPayload(): ?string + { + return $this->payload; + } + + /** + * @param array $defaultOptions + * + * @return array + */ + public function getOptions(array $defaultOptions = []): array + { + $options = $this->options; + $options['TTL'] = array_key_exists('TTL', $options) ? $options['TTL'] : $defaultOptions['TTL']; + $options['urgency'] = array_key_exists('urgency', $options) ? $options['urgency'] : $defaultOptions['urgency']; + $options['topic'] = array_key_exists('topic', $options) ? $options['topic'] : $defaultOptions['topic']; + + return $options; + } + + /** + * @param array $defaultAuth + * + * @return array + */ + public function getAuth(array $defaultAuth): array + { + return count($this->auth) > 0 ? $this->auth : $defaultAuth; + } +} diff --git a/vendor/minishlink/web-push/src/Subscription.php b/vendor/minishlink/web-push/src/Subscription.php new file mode 100644 index 000000000..123289326 --- /dev/null +++ b/vendor/minishlink/web-push/src/Subscription.php @@ -0,0 +1,122 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +class Subscription implements SubscriptionInterface +{ + /** @var string */ + private $endpoint; + + /** @var null|string */ + private $publicKey; + + /** @var null|string */ + private $authToken; + + /** @var null|string */ + private $contentEncoding; + + /** + * Subscription constructor. + * + * @param string $endpoint + * @param null|string $publicKey + * @param null|string $authToken + * @param string $contentEncoding (Optional) Must be "aesgcm" + * @throws \ErrorException + */ + public function __construct( + string $endpoint, + ?string $publicKey = null, + ?string $authToken = null, + ?string $contentEncoding = null + ) { + $this->endpoint = $endpoint; + + if ($publicKey || $authToken || $contentEncoding) { + $supportedContentEncodings = ['aesgcm', 'aes128gcm']; + if ($contentEncoding && !in_array($contentEncoding, $supportedContentEncodings)) { + throw new \ErrorException('This content encoding ('.$contentEncoding.') is not supported.'); + } + + $this->publicKey = $publicKey; + $this->authToken = $authToken; + $this->contentEncoding = $contentEncoding ?: "aesgcm"; + } + } + + /** + * Subscription factory. + * + * @param array $associativeArray (with keys endpoint, publicKey, authToken, contentEncoding) + * @return self + * @throws \ErrorException + */ + public static function create(array $associativeArray): self + { + if (array_key_exists('keys', $associativeArray) && is_array($associativeArray['keys'])) { + return new self( + $associativeArray['endpoint'], + $associativeArray['keys']['p256dh'] ?? null, + $associativeArray['keys']['auth'] ?? null, + $associativeArray['contentEncoding'] ?? "aesgcm" + ); + } + + if (array_key_exists('publicKey', $associativeArray) || array_key_exists('authToken', $associativeArray) || array_key_exists('contentEncoding', $associativeArray)) { + return new self( + $associativeArray['endpoint'], + $associativeArray['publicKey'] ?? null, + $associativeArray['authToken'] ?? null, + $associativeArray['contentEncoding'] ?? "aesgcm" + ); + } + + return new self( + $associativeArray['endpoint'] + ); + } + + /** + * {@inheritDoc} + */ + public function getEndpoint(): string + { + return $this->endpoint; + } + + /** + * {@inheritDoc} + */ + public function getPublicKey(): ?string + { + return $this->publicKey; + } + + /** + * {@inheritDoc} + */ + public function getAuthToken(): ?string + { + return $this->authToken; + } + + /** + * {@inheritDoc} + */ + public function getContentEncoding(): ?string + { + return $this->contentEncoding; + } +} diff --git a/vendor/minishlink/web-push/src/SubscriptionInterface.php b/vendor/minishlink/web-push/src/SubscriptionInterface.php new file mode 100644 index 000000000..e3f18d637 --- /dev/null +++ b/vendor/minishlink/web-push/src/SubscriptionInterface.php @@ -0,0 +1,40 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +/** + * @author Sergii Bondarenko + */ +interface SubscriptionInterface +{ + /** + * @return string + */ + public function getEndpoint(): string; + + /** + * @return null|string + */ + public function getPublicKey(): ?string; + + /** + * @return null|string + */ + public function getAuthToken(): ?string; + + /** + * @return null|string + */ + public function getContentEncoding(): ?string; +} diff --git a/vendor/minishlink/web-push/src/Utils.php b/vendor/minishlink/web-push/src/Utils.php new file mode 100644 index 000000000..30c201800 --- /dev/null +++ b/vendor/minishlink/web-push/src/Utils.php @@ -0,0 +1,63 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +use Jose\Component\Core\Util\Ecc\PublicKey; + +class Utils +{ + /** + * @param string $value + * + * @return int + */ + public static function safeStrlen(string $value): int + { + return mb_strlen($value, '8bit'); + } + + /** + * @param PublicKey $publicKey + * + * @return string + */ + public static function serializePublicKey(PublicKey $publicKey): string + { + $hexString = '04'; + $hexString .= str_pad(gmp_strval($publicKey->getPoint()->getX(), 16), 64, '0', STR_PAD_LEFT); + $hexString .= str_pad(gmp_strval($publicKey->getPoint()->getY(), 16), 64, '0', STR_PAD_LEFT); + + return $hexString; + } + + /** + * @param string $data + * + * @return array + */ + public static function unserializePublicKey(string $data): array + { + $data = bin2hex($data); + if (mb_substr($data, 0, 2, '8bit') !== '04') { + throw new \InvalidArgumentException('Invalid data: only uncompressed keys are supported.'); + } + $data = mb_substr($data, 2, null, '8bit'); + $dataLength = self::safeStrlen($data); + + return [ + hex2bin(mb_substr($data, 0, $dataLength / 2, '8bit')), + hex2bin(mb_substr($data, $dataLength / 2, null, '8bit')), + ]; + } +} diff --git a/vendor/minishlink/web-push/src/VAPID.php b/vendor/minishlink/web-push/src/VAPID.php new file mode 100644 index 000000000..c741ec97d --- /dev/null +++ b/vendor/minishlink/web-push/src/VAPID.php @@ -0,0 +1,197 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +use Base64Url\Base64Url; +use Jose\Component\Core\AlgorithmManager; +use Jose\Component\Core\Converter\StandardConverter; +use Jose\Component\Core\JWK; +use Jose\Component\Core\Util\Ecc\NistCurve; +use Jose\Component\Core\Util\Ecc\Point; +use Jose\Component\Core\Util\Ecc\PublicKey; +use Jose\Component\KeyManagement\JWKFactory; +use Jose\Component\Signature\Algorithm\ES256; +use Jose\Component\Signature\JWSBuilder; +use Jose\Component\Signature\Serializer\CompactSerializer; + +class VAPID +{ + private const PUBLIC_KEY_LENGTH = 65; + private const PRIVATE_KEY_LENGTH = 32; + + /** + * @param array $vapid + * + * @return array + * + * @throws \ErrorException + */ + public static function validate(array $vapid): array + { + if (!isset($vapid['subject'])) { + throw new \ErrorException('[VAPID] You must provide a subject that is either a mailto: or a URL.'); + } + + if (isset($vapid['pemFile'])) { + $vapid['pem'] = file_get_contents($vapid['pemFile']); + + if (!$vapid['pem']) { + throw new \ErrorException('Error loading PEM file.'); + } + } + + if (isset($vapid['pem'])) { + $jwk = JWKFactory::createFromKey($vapid['pem']); + if ($jwk->get('kty') !== 'EC' || !$jwk->has('d') || !$jwk->has('x') || !$jwk->has('y')) { + throw new \ErrorException('Invalid PEM data.'); + } + $publicKey = PublicKey::create(Point::create( + gmp_init(bin2hex(Base64Url::decode($jwk->get('x'))), 16), + gmp_init(bin2hex(Base64Url::decode($jwk->get('y'))), 16) + )); + + $binaryPublicKey = hex2bin(Utils::serializePublicKey($publicKey)); + if (!$binaryPublicKey) { + throw new \ErrorException('Failed to convert VAPID public key from hexadecimal to binary'); + } + $vapid['publicKey'] = base64_encode($binaryPublicKey); + $vapid['privateKey'] = base64_encode(str_pad(Base64Url::decode($jwk->get('d')), 2 * self::PRIVATE_KEY_LENGTH, '0', STR_PAD_LEFT)); + } + + if (!isset($vapid['publicKey'])) { + throw new \ErrorException('[VAPID] You must provide a public key.'); + } + + $publicKey = Base64Url::decode($vapid['publicKey']); + + if (Utils::safeStrlen($publicKey) !== self::PUBLIC_KEY_LENGTH) { + throw new \ErrorException('[VAPID] Public key should be 65 bytes long when decoded.'); + } + + if (!isset($vapid['privateKey'])) { + throw new \ErrorException('[VAPID] You must provide a private key.'); + } + + $privateKey = Base64Url::decode($vapid['privateKey']); + + if (Utils::safeStrlen($privateKey) !== self::PRIVATE_KEY_LENGTH) { + throw new \ErrorException('[VAPID] Private key should be 32 bytes long when decoded.'); + } + + return [ + 'subject' => $vapid['subject'], + 'publicKey' => $publicKey, + 'privateKey' => $privateKey, + ]; + } + + /** + * This method takes the required VAPID parameters and returns the required + * header to be added to a Web Push Protocol Request. + * + * @param string $audience This must be the origin of the push service + * @param string $subject This should be a URL or a 'mailto:' email address + * @param string $publicKey The decoded VAPID public key + * @param string $privateKey The decoded VAPID private key + * @param string $contentEncoding + * @param null|int $expiration The expiration of the VAPID JWT. (UNIX timestamp) + * + * @return array Returns an array with the 'Authorization' and 'Crypto-Key' values to be used as headers + * @throws \ErrorException + */ + public static function getVapidHeaders(string $audience, string $subject, string $publicKey, string $privateKey, string $contentEncoding, ?int $expiration = null) + { + $expirationLimit = time() + 43200; // equal margin of error between 0 and 24h + if (null === $expiration || $expiration > $expirationLimit) { + $expiration = $expirationLimit; + } + + $header = [ + 'typ' => 'JWT', + 'alg' => 'ES256', + ]; + + $jwtPayload = json_encode([ + 'aud' => $audience, + 'exp' => $expiration, + 'sub' => $subject, + ], JSON_UNESCAPED_SLASHES | JSON_NUMERIC_CHECK); + if (!$jwtPayload) { + throw new \ErrorException('Failed to encode JWT payload in JSON'); + } + + list($x, $y) = Utils::unserializePublicKey($publicKey); + $jwk = JWK::create([ + 'kty' => 'EC', + 'crv' => 'P-256', + 'x' => Base64Url::encode($x), + 'y' => Base64Url::encode($y), + 'd' => Base64Url::encode($privateKey), + ]); + + $jsonConverter = new StandardConverter(); + $jwsCompactSerializer = new CompactSerializer($jsonConverter); + $jwsBuilder = new JWSBuilder($jsonConverter, AlgorithmManager::create([new ES256()])); + $jws = $jwsBuilder + ->create() + ->withPayload($jwtPayload) + ->addSignature($jwk, $header) + ->build(); + + $jwt = $jwsCompactSerializer->serialize($jws, 0); + $encodedPublicKey = Base64Url::encode($publicKey); + + if ($contentEncoding === "aesgcm") { + return [ + 'Authorization' => 'WebPush '.$jwt, + 'Crypto-Key' => 'p256ecdsa='.$encodedPublicKey, + ]; + } elseif ($contentEncoding === 'aes128gcm') { + return [ + 'Authorization' => 'vapid t='.$jwt.', k='.$encodedPublicKey, + ]; + } + + throw new \ErrorException('This content encoding is not supported'); + } + + /** + * This method creates VAPID keys in case you would not be able to have a Linux bash. + * DO NOT create keys at each initialization! Save those keys and reuse them. + * + * @return array + * @throws \ErrorException + */ + public static function createVapidKeys(): array + { + $curve = NistCurve::curve256(); + $privateKey = $curve->createPrivateKey(); + $publicKey = $curve->createPublicKey($privateKey); + + $binaryPublicKey = hex2bin(Utils::serializePublicKey($publicKey)); + if (!$binaryPublicKey) { + throw new \ErrorException('Failed to convert VAPID public key from hexadecimal to binary'); + } + + $binaryPrivateKey = hex2bin(str_pad(gmp_strval($privateKey->getSecret(), 16), 2 * self::PRIVATE_KEY_LENGTH, '0', STR_PAD_LEFT)); + if (!$binaryPrivateKey) { + throw new \ErrorException('Failed to convert VAPID private key from hexadecimal to binary'); + } + + return [ + 'publicKey' => Base64Url::encode($binaryPublicKey), + 'privateKey' => Base64Url::encode($binaryPrivateKey) + ]; + } +} diff --git a/vendor/minishlink/web-push/src/WebPush.php b/vendor/minishlink/web-push/src/WebPush.php new file mode 100644 index 000000000..aaa9b4bf2 --- /dev/null +++ b/vendor/minishlink/web-push/src/WebPush.php @@ -0,0 +1,412 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Minishlink\WebPush; + +use Base64Url\Base64Url; +use GuzzleHttp\Client; +use GuzzleHttp\Exception\RequestException; +use GuzzleHttp\Psr7\Request; +use Psr\Http\Message\ResponseInterface; + +class WebPush +{ + public const GCM_URL = 'https://android.googleapis.com/gcm/send'; + public const FCM_BASE_URL = 'https://fcm.googleapis.com'; + + /** + * @var Client + */ + private $client; + + /** + * @var array + */ + private $auth; + + /** + * @var null|array Array of array of Notifications + */ + private $notifications; + + /** + * @var array Default options : TTL, urgency, topic, batchSize + */ + private $defaultOptions; + + /** + * @var int Automatic padding of payloads, if disabled, trade security for bandwidth + */ + private $automaticPadding = Encryption::MAX_COMPATIBILITY_PAYLOAD_LENGTH; + + /** + * @var bool Reuse VAPID headers in the same flush session to improve performance + */ + private $reuseVAPIDHeaders = false; + + /** + * @var array Dictionary for VAPID headers cache + */ + private $vapidHeaders = []; + + /** + * WebPush constructor. + * + * @param array $auth Some servers needs authentication + * @param array $defaultOptions TTL, urgency, topic, batchSize + * @param int|null $timeout Timeout of POST request + * @param array $clientOptions + * + * @throws \ErrorException + */ + public function __construct(array $auth = [], array $defaultOptions = [], ?int $timeout = 30, array $clientOptions = []) + { + $extensions = [ + 'curl' => '[WebPush] curl extension is not loaded but is required. You can fix this in your php.ini.', + 'gmp' => '[WebPush] gmp extension is not loaded but is required for sending push notifications with payload or for VAPID authentication. You can fix this in your php.ini.', + 'mbstring' => '[WebPush] mbstring extension is not loaded but is required for sending push notifications with payload or for VAPID authentication. You can fix this in your php.ini.', + 'openssl' => '[WebPush] openssl extension is not loaded but is required for sending push notifications with payload or for VAPID authentication. You can fix this in your php.ini.', + ]; + foreach ($extensions as $extension => $message) { + if (!extension_loaded($extension)) { + trigger_error($message, E_USER_WARNING); + } + } + + if (ini_get('mbstring.func_overload') >= 2) { + trigger_error("[WebPush] mbstring.func_overload is enabled for str* functions. You must disable it if you want to send push notifications with payload or use VAPID. You can fix this in your php.ini.", E_USER_NOTICE); + } + + if (isset($auth['VAPID'])) { + $auth['VAPID'] = VAPID::validate($auth['VAPID']); + } + + $this->auth = $auth; + + $this->setDefaultOptions($defaultOptions); + + if (!array_key_exists('timeout', $clientOptions) && isset($timeout)) { + $clientOptions['timeout'] = $timeout; + } + $this->client = new Client($clientOptions); + } + + /** + * Send a notification. + * + * @param SubscriptionInterface $subscription + * @param string|null $payload If you want to send an array, json_encode it + * @param bool $flush If you want to flush directly (usually when you send only one notification) + * @param array $options Array with several options tied to this notification. If not set, will use the default options that you can set in the WebPush object + * @param array $auth Use this auth details instead of what you provided when creating WebPush + * + * @return \Generator|MessageSentReport[]|true Return an array of information if $flush is set to true and the queued requests has failed. + * Else return true + * + * @throws \ErrorException + */ + public function sendNotification(SubscriptionInterface $subscription, ?string $payload = null, bool $flush = false, array $options = [], array $auth = []) + { + if (isset($payload)) { + if (Utils::safeStrlen($payload) > Encryption::MAX_PAYLOAD_LENGTH) { + throw new \ErrorException('Size of payload must not be greater than '.Encryption::MAX_PAYLOAD_LENGTH.' octets.'); + } + + $contentEncoding = $subscription->getContentEncoding(); + if (!$contentEncoding) { + throw new \ErrorException('Subscription should have a content encoding'); + } + + $payload = Encryption::padPayload($payload, $this->automaticPadding, $contentEncoding); + } + + if (array_key_exists('VAPID', $auth)) { + $auth['VAPID'] = VAPID::validate($auth['VAPID']); + } + + $this->notifications[] = new Notification($subscription, $payload, $options, $auth); + + return false !== $flush ? $this->flush() : true; + } + + /** + * Flush notifications. Triggers the requests. + * + * @param null|int $batchSize Defaults the value defined in defaultOptions during instantiation (which defaults to 1000). + * + * @return \Generator|MessageSentReport[] + * @throws \ErrorException + */ + public function flush(?int $batchSize = null): \Generator + { + if (null === $this->notifications || empty($this->notifications)) { + yield from []; + return; + } + + if (null === $batchSize) { + $batchSize = $this->defaultOptions['batchSize']; + } + + $batches = array_chunk($this->notifications, $batchSize); + + // reset queue + $this->notifications = []; + + foreach ($batches as $batch) { + // for each endpoint server type + $requests = $this->prepare($batch); + + $promises = []; + + foreach ($requests as $request) { + $promises[] = $this->client->sendAsync($request) + ->then(function ($response) use ($request) { + /** @var ResponseInterface $response * */ + return new MessageSentReport($request, $response); + }) + ->otherwise(function ($reason) { + /** @var RequestException $reason **/ + return new MessageSentReport($reason->getRequest(), $reason->getResponse(), false, $reason->getMessage()); + }); + } + + foreach ($promises as $promise) { + yield $promise->wait(); + } + } + + if ($this->reuseVAPIDHeaders) { + $this->vapidHeaders = []; + } + } + + /** + * @param array $notifications + * + * @return array + * + * @throws \ErrorException + */ + private function prepare(array $notifications): array + { + $requests = []; + /** @var Notification $notification */ + foreach ($notifications as $notification) { + $subscription = $notification->getSubscription(); + $endpoint = $subscription->getEndpoint(); + $userPublicKey = $subscription->getPublicKey(); + $userAuthToken = $subscription->getAuthToken(); + $contentEncoding = $subscription->getContentEncoding(); + $payload = $notification->getPayload(); + $options = $notification->getOptions($this->getDefaultOptions()); + $auth = $notification->getAuth($this->auth); + + if (!empty($payload) && !empty($userPublicKey) && !empty($userAuthToken)) { + if (!$contentEncoding) { + throw new \ErrorException('Subscription should have a content encoding'); + } + + $encrypted = Encryption::encrypt($payload, $userPublicKey, $userAuthToken, $contentEncoding); + $cipherText = $encrypted['cipherText']; + $salt = $encrypted['salt']; + $localPublicKey = $encrypted['localPublicKey']; + + $headers = [ + 'Content-Type' => 'application/octet-stream', + 'Content-Encoding' => $contentEncoding, + ]; + + if ($contentEncoding === "aesgcm") { + $headers['Encryption'] = 'salt='.Base64Url::encode($salt); + $headers['Crypto-Key'] = 'dh='.Base64Url::encode($localPublicKey); + } + + $encryptionContentCodingHeader = Encryption::getContentCodingHeader($salt, $localPublicKey, $contentEncoding); + $content = $encryptionContentCodingHeader.$cipherText; + + $headers['Content-Length'] = Utils::safeStrlen($content); + } else { + $headers = [ + 'Content-Length' => 0, + ]; + + $content = ''; + } + + $headers['TTL'] = $options['TTL']; + + if (isset($options['urgency'])) { + $headers['Urgency'] = $options['urgency']; + } + + if (isset($options['topic'])) { + $headers['Topic'] = $options['topic']; + } + + // if GCM + if (substr($endpoint, 0, strlen(self::GCM_URL)) === self::GCM_URL) { + if (array_key_exists('GCM', $auth)) { + $headers['Authorization'] = 'key='.$auth['GCM']; + } else { + throw new \ErrorException('No GCM API Key specified.'); + } + } + // if VAPID (GCM doesn't support it but FCM does) + elseif (array_key_exists('VAPID', $auth) && $contentEncoding) { + $audience = parse_url($endpoint, PHP_URL_SCHEME).'://'.parse_url($endpoint, PHP_URL_HOST); + if (!parse_url($audience)) { + throw new \ErrorException('Audience "'.$audience.'"" could not be generated.'); + } + + $vapidHeaders = $this->getVAPIDHeaders($audience, $contentEncoding, $auth['VAPID']); + + $headers['Authorization'] = $vapidHeaders['Authorization']; + + if ($contentEncoding === 'aesgcm') { + if (array_key_exists('Crypto-Key', $headers)) { + $headers['Crypto-Key'] .= ';'.$vapidHeaders['Crypto-Key']; + } else { + $headers['Crypto-Key'] = $vapidHeaders['Crypto-Key']; + } + } + } + + $requests[] = new Request('POST', $endpoint, $headers, $content); + } + + return $requests; + } + + /** + * @return bool + */ + public function isAutomaticPadding(): bool + { + return $this->automaticPadding !== 0; + } + + /** + * @return int + */ + public function getAutomaticPadding() + { + return $this->automaticPadding; + } + + /** + * @param int|bool $automaticPadding Max padding length + * + * @return WebPush + * + * @throws \Exception + */ + public function setAutomaticPadding($automaticPadding): WebPush + { + if ($automaticPadding > Encryption::MAX_PAYLOAD_LENGTH) { + throw new \Exception('Automatic padding is too large. Max is '.Encryption::MAX_PAYLOAD_LENGTH.'. Recommended max is '.Encryption::MAX_COMPATIBILITY_PAYLOAD_LENGTH.' for compatibility reasons (see README).'); + } elseif ($automaticPadding < 0) { + throw new \Exception('Padding length should be positive or zero.'); + } elseif ($automaticPadding === true) { + $this->automaticPadding = Encryption::MAX_COMPATIBILITY_PAYLOAD_LENGTH; + } elseif ($automaticPadding === false) { + $this->automaticPadding = 0; + } else { + $this->automaticPadding = $automaticPadding; + } + + return $this; + } + + /** + * @return bool + */ + public function getReuseVAPIDHeaders() + { + return $this->reuseVAPIDHeaders; + } + + /** + * Reuse VAPID headers in the same flush session to improve performance + * @param bool $enabled + * + * @return WebPush + */ + public function setReuseVAPIDHeaders(bool $enabled) + { + $this->reuseVAPIDHeaders = $enabled; + + return $this; + } + + /** + * @return array + */ + public function getDefaultOptions(): array + { + return $this->defaultOptions; + } + + /** + * @param array $defaultOptions Keys 'TTL' (Time To Live, defaults 4 weeks), 'urgency', 'topic', 'batchSize' + * + * @return WebPush + */ + public function setDefaultOptions(array $defaultOptions) + { + $this->defaultOptions['TTL'] = isset($defaultOptions['TTL']) ? $defaultOptions['TTL'] : 2419200; + $this->defaultOptions['urgency'] = isset($defaultOptions['urgency']) ? $defaultOptions['urgency'] : null; + $this->defaultOptions['topic'] = isset($defaultOptions['topic']) ? $defaultOptions['topic'] : null; + $this->defaultOptions['batchSize'] = isset($defaultOptions['batchSize']) ? $defaultOptions['batchSize'] : 1000; + + return $this; + } + + /** + * @return int + */ + public function countPendingNotifications(): int + { + return null !== $this->notifications ? count($this->notifications) : 0; + } + + /** + * @param string $audience + * @param string $contentEncoding + * @param array $vapid + * @return array + * @throws \ErrorException + */ + private function getVAPIDHeaders(string $audience, string $contentEncoding, array $vapid) + { + $vapidHeaders = null; + + $cache_key = null; + if ($this->reuseVAPIDHeaders) { + $cache_key = implode('#', [$audience, $contentEncoding, crc32(serialize($vapid))]); + if (array_key_exists($cache_key, $this->vapidHeaders)) { + $vapidHeaders = $this->vapidHeaders[$cache_key]; + } + } + + if (!$vapidHeaders) { + $vapidHeaders = VAPID::getVapidHeaders($audience, $vapid['subject'], $vapid['publicKey'], $vapid['privateKey'], $contentEncoding); + } + + if ($this->reuseVAPIDHeaders) { + $this->vapidHeaders[$cache_key] = $vapidHeaders; + } + + return $vapidHeaders; + } +} diff --git a/vendor/paragonie/random_compat/LICENSE b/vendor/paragonie/random_compat/LICENSE new file mode 100644 index 000000000..45c7017df --- /dev/null +++ b/vendor/paragonie/random_compat/LICENSE @@ -0,0 +1,22 @@ +The MIT License (MIT) + +Copyright (c) 2015 Paragon Initiative Enterprises + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + diff --git a/vendor/paragonie/random_compat/build-phar.sh b/vendor/paragonie/random_compat/build-phar.sh new file mode 100644 index 000000000..b4a5ba31c --- /dev/null +++ b/vendor/paragonie/random_compat/build-phar.sh @@ -0,0 +1,5 @@ +#!/usr/bin/env bash + +basedir=$( dirname $( readlink -f ${BASH_SOURCE[0]} ) ) + +php -dphar.readonly=0 "$basedir/other/build_phar.php" $* \ No newline at end of file diff --git a/vendor/paragonie/random_compat/composer.json b/vendor/paragonie/random_compat/composer.json new file mode 100644 index 000000000..f2b9c4e51 --- /dev/null +++ b/vendor/paragonie/random_compat/composer.json @@ -0,0 +1,34 @@ +{ + "name": "paragonie/random_compat", + "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7", + "keywords": [ + "csprng", + "random", + "polyfill", + "pseudorandom" + ], + "license": "MIT", + "type": "library", + "authors": [ + { + "name": "Paragon Initiative Enterprises", + "email": "security@paragonie.com", + "homepage": "https://paragonie.com" + } + ], + "support": { + "issues": "https://github.com/paragonie/random_compat/issues", + "email": "info@paragonie.com", + "source": "https://github.com/paragonie/random_compat" + }, + "require": { + "php": ">= 7" + }, + "require-dev": { + "vimeo/psalm": "^1", + "phpunit/phpunit": "4.*|5.*" + }, + "suggest": { + "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes." + } +} diff --git a/vendor/paragonie/random_compat/dist/random_compat.phar.pubkey b/vendor/paragonie/random_compat/dist/random_compat.phar.pubkey new file mode 100644 index 000000000..eb50ebfcd --- /dev/null +++ b/vendor/paragonie/random_compat/dist/random_compat.phar.pubkey @@ -0,0 +1,5 @@ +-----BEGIN PUBLIC KEY----- +MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEEd+wCqJDrx5B4OldM0dQE0ZMX+lx1ZWm +pui0SUqD4G29L3NGsz9UhJ/0HjBdbnkhIK5xviT0X5vtjacF6ajgcCArbTB+ds+p ++h7Q084NuSuIpNb6YPfoUFgC/CL9kAoc +-----END PUBLIC KEY----- diff --git a/vendor/paragonie/random_compat/dist/random_compat.phar.pubkey.asc b/vendor/paragonie/random_compat/dist/random_compat.phar.pubkey.asc new file mode 100644 index 000000000..6a1d7f300 --- /dev/null +++ b/vendor/paragonie/random_compat/dist/random_compat.phar.pubkey.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.22 (MingW32) + +iQEcBAABAgAGBQJWtW1hAAoJEGuXocKCZATaJf0H+wbZGgskK1dcRTsuVJl9IWip +QwGw/qIKI280SD6/ckoUMxKDCJiFuPR14zmqnS36k7N5UNPnpdTJTS8T11jttSpg +1LCmgpbEIpgaTah+cELDqFCav99fS+bEiAL5lWDAHBTE/XPjGVCqeehyPYref4IW +NDBIEsvnHPHPLsn6X5jq4+Yj5oUixgxaMPiR+bcO4Sh+RzOVB6i2D0upWfRXBFXA +NNnsg9/zjvoC7ZW73y9uSH+dPJTt/Vgfeiv52/v41XliyzbUyLalf02GNPY+9goV +JHG1ulEEBJOCiUD9cE1PUIJwHA/HqyhHIvV350YoEFiHl8iSwm7SiZu5kPjaq74= +=B6+8 +-----END PGP SIGNATURE----- diff --git a/vendor/paragonie/random_compat/lib/random.php b/vendor/paragonie/random_compat/lib/random.php new file mode 100644 index 000000000..c7731a56f --- /dev/null +++ b/vendor/paragonie/random_compat/lib/random.php @@ -0,0 +1,32 @@ +buildFromDirectory(dirname(__DIR__).'/lib'); +rename( + dirname(__DIR__).'/lib/index.php', + dirname(__DIR__).'/lib/random.php' +); + +/** + * If we pass an (optional) path to a private key as a second argument, we will + * sign the Phar with OpenSSL. + * + * If you leave this out, it will produce an unsigned .phar! + */ +if ($argc > 1) { + if (!@is_readable($argv[1])) { + echo 'Could not read the private key file:', $argv[1], "\n"; + exit(255); + } + $pkeyFile = file_get_contents($argv[1]); + + $private = openssl_get_privatekey($pkeyFile); + if ($private !== false) { + $pkey = ''; + openssl_pkey_export($private, $pkey); + $phar->setSignatureAlgorithm(Phar::OPENSSL, $pkey); + + /** + * Save the corresponding public key to the file + */ + if (!@is_readable($dist.'/random_compat.phar.pubkey')) { + $details = openssl_pkey_get_details($private); + file_put_contents( + $dist.'/random_compat.phar.pubkey', + $details['key'] + ); + } + } else { + echo 'An error occurred reading the private key from OpenSSL.', "\n"; + exit(255); + } +} diff --git a/vendor/paragonie/random_compat/psalm-autoload.php b/vendor/paragonie/random_compat/psalm-autoload.php new file mode 100644 index 000000000..d71d1b818 --- /dev/null +++ b/vendor/paragonie/random_compat/psalm-autoload.php @@ -0,0 +1,9 @@ + + + + + + + + + + + + + + + diff --git a/vendor/paragonie/sodium_compat/.gitignore b/vendor/paragonie/sodium_compat/.gitignore new file mode 100644 index 000000000..0df5a6daf --- /dev/null +++ b/vendor/paragonie/sodium_compat/.gitignore @@ -0,0 +1,9 @@ +/.idea/ +/.php_cs.cache +/.phpunit.result.cache +/box/ +/dist/sodium-compat.phar +/dist/sodium-compat.phar.sig +/composer.lock +/vendor/ +/psalm.xml diff --git a/vendor/paragonie/sodium_compat/LICENSE b/vendor/paragonie/sodium_compat/LICENSE new file mode 100644 index 000000000..ce41e508c --- /dev/null +++ b/vendor/paragonie/sodium_compat/LICENSE @@ -0,0 +1,21 @@ +/* + * ISC License + * + * Copyright (c) 2016-2019 + * Paragon Initiative Enterprises + * + * Copyright (c) 2013-2019 + * Frank Denis + * + * Permission to use, copy, modify, and/or distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + */ \ No newline at end of file diff --git a/vendor/paragonie/sodium_compat/README.md b/vendor/paragonie/sodium_compat/README.md new file mode 100644 index 000000000..d09d1b258 --- /dev/null +++ b/vendor/paragonie/sodium_compat/README.md @@ -0,0 +1,347 @@ +# Sodium Compat + +[![Linux Build Status](https://travis-ci.org/paragonie/sodium_compat.svg?branch=master)](https://travis-ci.org/paragonie/sodium_compat) +[![Windows Build Status](https://ci.appveyor.com/api/projects/status/itcx1vgmfqiawgbe?svg=true)](https://ci.appveyor.com/project/paragonie-scott/sodium-compat) +[![Latest Stable Version](https://poser.pugx.org/paragonie/sodium_compat/v/stable)](https://packagist.org/packages/paragonie/sodium_compat) +[![Latest Unstable Version](https://poser.pugx.org/paragonie/sodium_compat/v/unstable)](https://packagist.org/packages/paragonie/sodium_compat) +[![License](https://poser.pugx.org/paragonie/sodium_compat/license)](https://packagist.org/packages/paragonie/sodium_compat) +[![Downloads](https://img.shields.io/packagist/dt/paragonie/sodium_compat.svg)](https://packagist.org/packages/paragonie/sodium_compat) + +Sodium Compat is a pure PHP polyfill for the Sodium cryptography library +(libsodium), a core extension in PHP 7.2.0+ and otherwise [available in PECL](https://pecl.php.net/package/libsodium). + +This library tentativeley supports PHP 5.2.4 - 8.x (latest), but officially +only supports [non-EOL'd versions of PHP](https://secure.php.net/supported-versions.php). + +If you have the PHP extension installed, Sodium Compat will opportunistically +and transparently use the PHP extension instead of our implementation. + +## IMPORTANT! + +This cryptography library has not been formally audited by an independent third +party that specializes in cryptography or cryptanalysis. + +If you require such an audit before you can use sodium_compat in your projects +and have the funds for such an audit, please open an issue or contact +`security at paragonie dot com` so we can help get the ball rolling. + +However, sodium_compat has been adopted by high profile open source projects, +such as [Joomla!](https://github.com/joomla/joomla-cms/blob/459d74686d2a638ec51149d7c44ddab8075852be/composer.json#L40) +and [Magento](https://github.com/magento/magento2/blob/8fd89cfdf52c561ac0ca7bc20fd38ef688e201b0/composer.json#L44). +Furthermore, sodium_compat was developed by Paragon Initiative Enterprises, a +company that *specializes* in secure PHP development and PHP cryptography, and +has been informally reviewed by many other security experts who also specialize +in PHP. + +If you'd like to learn more about the defensive security measures we've taken +to prevent sodium_compat from being a source of vulnerability in your systems, +please read [*Cryptographically Secure PHP Development*](https://paragonie.com/blog/2017/02/cryptographically-secure-php-development). + +# Installing Sodium Compat + +If you're using Composer: + +```bash +composer require paragonie/sodium_compat +``` + +### Install From Source + +If you're not using Composer, download a [release tarball](https://github.com/paragonie/sodium_compat/releases) +(which should be signed with [our GnuPG public key](https://paragonie.com/static/gpg-public-key.txt)), extract +its contents, then include our `autoload.php` script in your project. + +```php + + gpg --fingerprint 7F52D5C61D1255C731362E826B97A1C2826404DA + if [ $? -ne 0 ]; then + echo -e "\033[31mCould not download PGP public key for verification\033[0m" + exit 1 + fi +fi + +# Verifying the PHP Archive +gpg --verify sodium-compat.phar.sig sodium-compat.phar +``` + +Now, simply include this .phar file in your application. + +```php +execute(); +} else { + // Defer to a cron job or other sort of asynchronous process + $process->enqueue(); +} +``` + +### Help, my PHP only has 32-Bit Integers! It's super slow! + +Some features of sodium_compat are ***incredibly slow* with PHP 5 on Windows** +(in particular: public-key cryptography (encryption and signatures) is +affected), and there is nothing we can do about that, due to platform +restrictions on integers. + +For acceptable performance, we highly recommend Windows users to version 1.0.6 +of the libsodium extension from PECL or, alternatively, simply upgrade to PHP 7 +and the slowdown will be greatly reduced. + +This is also true of non-Windows 32-bit operating systems, or if somehow PHP +was compiled where `PHP_INT_SIZE` equals `4` instead of `8` (i.e. Linux on i386). + +## Documentation + +First, you'll want to read the [Libsodium Quick Reference](https://paragonie.com/blog/2017/06/libsodium-quick-reference-quick-comparison-similar-functions-and-which-one-use). +It aims to answer, "Which function should I use for [common problem]?". + +If you don't find the answers in the Quick Reference page, check out +[*Using Libsodium in PHP Projects*](https://paragonie.com/book/pecl-libsodium). + +Finally, the [official libsodium documentation](https://download.libsodium.org/doc/) +(which was written for the C library, not the PHP library) also contains a lot of +insightful technical information you may find helpful. + +## API Coverage + +**Recommended reading:** [Libsodium Quick Reference](https://paragonie.com/blog/2017/06/libsodium-quick-reference-quick-comparison-similar-functions-and-which-one-use) + +* Mainline NaCl Features + * `crypto_auth()` + * `crypto_auth_verify()` + * `crypto_box()` + * `crypto_box_open()` + * `crypto_scalarmult()` + * `crypto_secretbox()` + * `crypto_secretbox_open()` + * `crypto_sign()` + * `crypto_sign_open()` +* PECL Libsodium Features + * `crypto_aead_aes256gcm_encrypt()` + * `crypto_aead_aes256gcm_decrypt()` + * `crypto_aead_chacha20poly1305_encrypt()` + * `crypto_aead_chacha20poly1305_decrypt()` + * `crypto_aead_chacha20poly1305_ietf_encrypt()` + * `crypto_aead_chacha20poly1305_ietf_decrypt()` + * `crypto_aead_xchacha20poly1305_ietf_encrypt()` + * `crypto_aead_xchacha20poly1305_ietf_decrypt()` + * `crypto_box_xchacha20poly1305()` + * `crypto_box_xchacha20poly1305_open()` + * `crypto_box_seal()` + * `crypto_box_seal_open()` + * `crypto_generichash()` + * `crypto_generichash_init()` + * `crypto_generichash_update()` + * `crypto_generichash_final()` + * `crypto_kx()` + * `crypto_secretbox_xchacha20poly1305()` + * `crypto_secretbox_xchacha20poly1305_open()` + * `crypto_shorthash()` + * `crypto_sign_detached()` + * `crypto_sign_ed25519_pk_to_curve25519()` + * `crypto_sign_ed25519_sk_to_curve25519()` + * `crypto_sign_verify_detached()` + * For advanced users only: + * `crypto_stream()` + * `crypto_stream_xor()` + * Other utilities (e.g. `crypto_*_keypair()`) + * `add()` + * `base642bin()` + * `bin2base64()` + * `bin2hex()` + * `hex2bin()` + * `crypto_kdf_derive_from_key()` + * `crypto_kx_client_session_keys()` + * `crypto_kx_server_session_keys()` + * `crypto_secretstream_xchacha20poly1305_init_push()` + * `crypto_secretstream_xchacha20poly1305_push()` + * `crypto_secretstream_xchacha20poly1305_init_pull()` + * `crypto_secretstream_xchacha20poly1305_pull()` + * `crypto_secretstream_xchacha20poly1305_rekey()` + * `pad()` + * `unpad()` + +### Cryptography Primitives Provided + +* **X25519** - Elliptic Curve Diffie Hellman over Curve25519 +* **Ed25519** - Edwards curve Digital Signature Algorithm over Curve25519 +* **Xsalsa20** - Extended-nonce Salsa20 stream cipher +* **ChaCha20** - Stream cipher +* **Xchacha20** - Extended-nonce ChaCha20 stream cipher +* **Poly1305** - Polynomial Evaluation Message Authentication Code modulo 2^130 - 5 +* **BLAKE2b** - Cryptographic Hash Function +* **SipHash-2-4** - Fast hash, but not collision-resistant; ideal for hash tables. + +### Features Excluded from this Polyfill + +* `\Sodium\memzero()` - Although we expose this API endpoint, we can't reliably + zero buffers from PHP. + + If you have the PHP extension installed, sodium_compat + will use the native implementation to zero out the string provided. Otherwise + it will throw a `SodiumException`. +* `\Sodium\crypto_pwhash()` - It's not feasible to polyfill scrypt or Argon2 + into PHP and get reasonable performance. Users would feel motivated to select + parameters that downgrade security to avoid denial of service (DoS) attacks. + + The only winning move is not to play. + + If ext/sodium or ext/libsodium is installed, these API methods will fallthrough + to the extension. Otherwise, our polyfill library will throw a `SodiumException`. + + To detect support for Argon2i at runtime, use + `ParagonIE_Sodium_Compat::crypto_pwhash_is_available()`, which returns a + boolean value (`TRUE` or `FALSE`). + +### PHPCompatibility Ruleset + +For sodium_compat users and that utilize [`PHPCompatibility`](https://github.com/PHPCompatibility/PHPCompatibility) +in their CI process, there is now a custom ruleset available which can be used +to prevent false positives being thrown by `PHPCompatibility` for the native +PHP functionality being polyfilled by this repo. + +You can find the repo for the `PHPCompatibilityParagonieSodiumCompat` ruleset +here [on Github](https://github.com/PHPCompatibility/PHPCompatibilityParagonie) +and [on Packagist](https://packagist.org/packages/phpcompatibility/phpcompatibility-paragonie). diff --git a/vendor/paragonie/sodium_compat/appveyor.yml b/vendor/paragonie/sodium_compat/appveyor.yml new file mode 100644 index 000000000..9621e9abc --- /dev/null +++ b/vendor/paragonie/sodium_compat/appveyor.yml @@ -0,0 +1,27 @@ +build: false +shallow_clone: false +platform: + - x86 + - x64 +clone_folder: C:\projects\sodium_compat +image: Visual Studio 2017 + +install: + - cinst -y OpenSSL.Light + - SET PATH=C:\Program Files\OpenSSL;%PATH% + - sc config wuauserv start= auto + - net start wuauserv + - cinst -y php --version 5.6.30 + - cd c:\tools\php56 + - copy php.ini-production php.ini + - echo date.timezone="UTC" >> php.ini + - echo extension_dir=ext >> php.ini + - echo extension=php_openssl.dll >> php.ini + - cd C:\projects\sodium_compat + - SET PATH=C:\tools\php56;%PATH% + - php.exe -r "readfile('http://getcomposer.org/installer');" | php.exe + - php.exe composer.phar install --prefer-source --no-interaction + +test_script: + - cd C:\projects\sodium_compat + - vendor\bin\phpunit.bat tests/Windows32Test.php diff --git a/vendor/paragonie/sodium_compat/autoload-fast.php b/vendor/paragonie/sodium_compat/autoload-fast.php new file mode 100644 index 000000000..08724d1ed --- /dev/null +++ b/vendor/paragonie/sodium_compat/autoload-fast.php @@ -0,0 +1,4 @@ += 50300) { + require_once (dirname(__FILE__) . '/tests/phpunit-shim.php'); +} diff --git a/vendor/paragonie/sodium_compat/autoload.php b/vendor/paragonie/sodium_compat/autoload.php new file mode 100644 index 000000000..d7c777b00 --- /dev/null +++ b/vendor/paragonie/sodium_compat/autoload.php @@ -0,0 +1,65 @@ += 50300) { + // Namespaces didn't exist before 5.3.0, so don't even try to use this + // unless PHP >= 5.3.0 + require_once dirname(__FILE__) . '/lib/namespaced.php'; + require_once dirname(__FILE__) . '/lib/sodium_compat.php'; +} else { + require_once dirname(__FILE__) . '/src/PHP52/SplFixedArray.php'; +} +if (PHP_VERSION_ID < 70200 || !extension_loaded('sodium')) { + if (PHP_VERSION_ID >= 50300 && !defined('SODIUM_CRYPTO_SCALARMULT_BYTES')) { + require_once dirname(__FILE__) . '/lib/php72compat_const.php'; + } + if (PHP_VERSION_ID >= 70000) { + assert(class_exists('ParagonIE_Sodium_Compat'), 'Possible filesystem/autoloader bug?'); + } else { + assert(class_exists('ParagonIE_Sodium_Compat')); + } + require_once (dirname(__FILE__) . '/lib/php72compat.php'); +} diff --git a/vendor/paragonie/sodium_compat/build-phar.sh b/vendor/paragonie/sodium_compat/build-phar.sh new file mode 100644 index 000000000..380eee63b --- /dev/null +++ b/vendor/paragonie/sodium_compat/build-phar.sh @@ -0,0 +1,8 @@ +#!/usr/bin/env bash + +curl -LSs https://box-project.github.io/box2/installer.php | php +mkdir ~/box +mv box.phar ~/box/box +PATH=$PATH:~/box/ make -C dist/ build-phar +# PATH=$PATH:~/box/ make -C dist/ sign-phar + diff --git a/vendor/paragonie/sodium_compat/composer-php52.json b/vendor/paragonie/sodium_compat/composer-php52.json new file mode 100644 index 000000000..9547d0d17 --- /dev/null +++ b/vendor/paragonie/sodium_compat/composer-php52.json @@ -0,0 +1,87 @@ +{ + "name": "paragonie/sodium_compat", + "description": "Pure PHP implementation of libsodium; uses the PHP extension if it exists", + "keywords": [ + "PHP", + "cryptography", + "elliptic curve", + "elliptic curve cryptography", + "Pure-PHP cryptography", + "side-channel resistant", + "Curve25519", + "X25519", + "ECDH", + "Elliptic Curve Diffie-Hellman", + "Ed25519", + "RFC 7748", + "RFC 8032", + "EdDSA", + "Edwards-curve Digital Signature Algorithm", + "ChaCha20", + "Salsa20", + "Xchacha20", + "Xsalsa20", + "Poly1305", + "BLAKE2b", + "public-key cryptography", + "secret-key cryptography", + "AEAD", + "Chapoly", + "Salpoly", + "ChaCha20-Poly1305", + "XSalsa20-Poly1305", + "XChaCha20-Poly1305", + "encryption", + "authentication", + "libsodium" + ], + "license": "ISC", + "authors": [ + { + "name": "Paragon Initiative Enterprises", + "email": "security@paragonie.com" + }, + { + "name": "Frank Denis", + "email": "jedisct1@pureftpd.org" + } + ], + "autoload": { + "files": ["autoload.php"] + }, + "repositories": [ + { + "type": "git", + "url": "https://github.com/garex/phpunit" + }, + { + "type": "git", + "url": "https://github.com/garex/phpunit-mock-objects" + } + ], + "require": { + "php": "^5.2.4|^5.3|^5.4|^5.5|^5.6|^7|^8", + "xrstf/composer-php52": "1.*", + "paragonie/random_compat": ">=1" + }, + "minimum-stability": "dev", + "require-dev": { + "phpunit/phpunit-php52": "dev-3.6.12-php52", + "phpunit/phpunit-mock-objects-php52": "dev-1.1.0-php52" + }, + "scripts": { + "post-install-cmd": [ + "xrstf\\Composer52\\Generator::onPostInstallCmd" + ], + "post-update-cmd": [ + "xrstf\\Composer52\\Generator::onPostInstallCmd" + ], + "post-autoload-dump": [ + "xrstf\\Composer52\\Generator::onPostInstallCmd" + ] + }, + "suggest": { + "ext-libsodium": "PHP < 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security.", + "ext-sodium": "PHP >= 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security." + } +} diff --git a/vendor/paragonie/sodium_compat/composer.json b/vendor/paragonie/sodium_compat/composer.json new file mode 100644 index 000000000..cf55d7904 --- /dev/null +++ b/vendor/paragonie/sodium_compat/composer.json @@ -0,0 +1,63 @@ +{ + "name": "paragonie/sodium_compat", + "description": "Pure PHP implementation of libsodium; uses the PHP extension if it exists", + "keywords": [ + "PHP", + "cryptography", + "elliptic curve", + "elliptic curve cryptography", + "Pure-PHP cryptography", + "side-channel resistant", + "Curve25519", + "X25519", + "ECDH", + "Elliptic Curve Diffie-Hellman", + "Ed25519", + "RFC 7748", + "RFC 8032", + "EdDSA", + "Edwards-curve Digital Signature Algorithm", + "ChaCha20", + "Salsa20", + "Xchacha20", + "Xsalsa20", + "Poly1305", + "BLAKE2b", + "public-key cryptography", + "secret-key cryptography", + "AEAD", + "Chapoly", + "Salpoly", + "ChaCha20-Poly1305", + "XSalsa20-Poly1305", + "XChaCha20-Poly1305", + "encryption", + "authentication", + "libsodium" + ], + "license": "ISC", + "authors": [ + { + "name": "Paragon Initiative Enterprises", + "email": "security@paragonie.com" + }, + { + "name": "Frank Denis", + "email": "jedisct1@pureftpd.org" + } + ], + "autoload": { + "files": ["autoload.php"] + }, + "require": { + "php": "^5.2.4|^5.3|^5.4|^5.5|^5.6|^7|^8", + "paragonie/random_compat": ">=1" + }, + "require-dev": { + "phpunit/phpunit": "^3|^4|^5|^6|^7|^8|^9" + }, + "suggest": { + "ext-libsodium": "PHP < 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security.", + "ext-sodium": "PHP >= 7.0: Better performance, password hashing (Argon2i), secure memory management (memzero), and better security." + } +} diff --git a/vendor/paragonie/sodium_compat/dist/Makefile b/vendor/paragonie/sodium_compat/dist/Makefile new file mode 100644 index 000000000..f30a25dd1 --- /dev/null +++ b/vendor/paragonie/sodium_compat/dist/Makefile @@ -0,0 +1,39 @@ +# This builds sodium-compat.phar. To run this Makefile, `box` and `composer` +# must be installed and in your $PATH. Run it from inside the dist/ directory. + +box := $(shell which box) +composer := "composer" +gitcommit := $(shell git rev-parse HEAD) + +.PHONY: all +all: build-phar + +.PHONY: sign-phar +sign-phar: + gpg -u 7F52D5C61D1255C731362E826B97A1C2826404DA --armor --output sodium-compat.phar.sig --detach-sig sodium-compat.phar + +# ensure we run in clean tree. export git tree and run there. +.PHONY: build-phar +build-phar: + @echo "Creating .phar from revision $(shell git rev-parse HEAD)." + rm -rf worktree + install -d worktree + (cd $(CURDIR)/..; git archive HEAD) | tar -x -C worktree + $(MAKE) -f $(CURDIR)/Makefile -C worktree sodium-compat.phar + mv worktree/*.phar . + rm -rf worktree + +.PHONY: clean +clean: + rm -vf sodium-compat.phar sodium-compat.phar.sig + +# Inside workdir/: + +sodium-compat.phar: dist/box.json composer.lock + cp dist/box.json . + php -d phar.readonly=0 $(box) build -c box.json -v + +composer.lock: + $(composer) config autoloader-suffix $(gitcommit) + $(composer) install --no-dev + diff --git a/vendor/paragonie/sodium_compat/dist/box.json b/vendor/paragonie/sodium_compat/dist/box.json new file mode 100644 index 000000000..5f7827ede --- /dev/null +++ b/vendor/paragonie/sodium_compat/dist/box.json @@ -0,0 +1,32 @@ +{ + "chmod": "0755", + "finder": [ + { + "in": "", + "name": "autoload.php" + }, + { + "in": "src", + "name": "*.php" + }, + { + "in": "lib", + "name": "*.php" + }, + { + "in": "vendor/composer", + "name": "*.php" + }, + { + "in": "vendor/paragonie", + "name": "*.php" + } + ], + "compactors": [ + "Herrera\\Box\\Compactor\\Php" + ], + "main": "vendor/autoload.php", + "output": "sodium-compat.phar", + "shebang": false, + "stub": true +} diff --git a/vendor/paragonie/sodium_compat/lib/constants.php b/vendor/paragonie/sodium_compat/lib/constants.php new file mode 100644 index 000000000..b6a120e4a --- /dev/null +++ b/vendor/paragonie/sodium_compat/lib/constants.php @@ -0,0 +1,52 @@ +getMessage() === 'Argument 2 must be CRYPTO_BOX_KEYPAIRBYTES long.') { + throw $ex; + } + return false; + } + } +} +if (!is_callable('sodium_crypto_box_secretkey')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_box_secretkey() + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_box_secretkey($keypair) + { + return ParagonIE_Sodium_Compat::crypto_box_secretkey($keypair); + } +} +if (!is_callable('sodium_crypto_box_seed_keypair')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_box_seed_keypair() + * @param string $seed + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_box_seed_keypair($seed) + { + return ParagonIE_Sodium_Compat::crypto_box_seed_keypair($seed); + } +} +if (!is_callable('sodium_crypto_generichash')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_generichash() + * @param string $message + * @param string|null $key + * @param int $outLen + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_generichash($message, $key = null, $outLen = 32) + { + return ParagonIE_Sodium_Compat::crypto_generichash($message, $key, $outLen); + } +} +if (!is_callable('sodium_crypto_generichash_final')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_generichash_final() + * @param string|null $ctx + * @param int $outputLength + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_generichash_final(&$ctx, $outputLength = 32) + { + return ParagonIE_Sodium_Compat::crypto_generichash_final($ctx, $outputLength); + } +} +if (!is_callable('sodium_crypto_generichash_init')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_generichash_init() + * @param string|null $key + * @param int $outLen + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_generichash_init($key = null, $outLen = 32) + { + return ParagonIE_Sodium_Compat::crypto_generichash_init($key, $outLen); + } +} +if (!is_callable('sodium_crypto_generichash_keygen')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_generichash_keygen() + * @return string + * @throws Exception + */ + function sodium_crypto_generichash_keygen() + { + return ParagonIE_Sodium_Compat::crypto_generichash_keygen(); + } +} +if (!is_callable('sodium_crypto_generichash_update')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_generichash_update() + * @param string|null $ctx + * @param string $message + * @return void + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_generichash_update(&$ctx, $message = '') + { + ParagonIE_Sodium_Compat::crypto_generichash_update($ctx, $message); + } +} +if (!is_callable('sodium_crypto_kdf_keygen')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_kdf_keygen() + * @return string + * @throws Exception + */ + function sodium_crypto_kdf_keygen() + { + return ParagonIE_Sodium_Compat::crypto_kdf_keygen(); + } +} +if (!is_callable('sodium_crypto_kdf_derive_from_key')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_kdf_derive_from_key() + * @param int $subkey_len + * @param int $subkey_id + * @param string $context + * @param string $key + * @return string + * @throws Exception + */ + function sodium_crypto_kdf_derive_from_key($subkey_len, $subkey_id, $context, $key) + { + return ParagonIE_Sodium_Compat::crypto_kdf_derive_from_key( + $subkey_len, + $subkey_id, + $context, + $key + ); + } +} +if (!is_callable('sodium_crypto_kx')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_kx() + * @param string $my_secret + * @param string $their_public + * @param string $client_public + * @param string $server_public + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_kx($my_secret, $their_public, $client_public, $server_public) + { + return ParagonIE_Sodium_Compat::crypto_kx( + $my_secret, + $their_public, + $client_public, + $server_public + ); + } +} +if (!is_callable('sodium_crypto_kx_seed_keypair')) { + /** + * @param string $seed + * @return string + * @throws Exception + */ + function sodium_crypto_kx_seed_keypair($seed) + { + return ParagonIE_Sodium_Compat::crypto_kx_seed_keypair($seed); + } +} +if (!is_callable('sodium_crypto_kx_keypair')) { + /** + * @return string + * @throws Exception + */ + function sodium_crypto_kx_keypair() + { + return ParagonIE_Sodium_Compat::crypto_kx_keypair(); + } +} +if (!is_callable('sodium_crypto_kx_client_session_keys')) { + /** + * @param string $keypair + * @param string $serverPublicKey + * @return array{0: string, 1: string} + * @throws SodiumException + */ + function sodium_crypto_kx_client_session_keys($keypair, $serverPublicKey) + { + return ParagonIE_Sodium_Compat::crypto_kx_client_session_keys($keypair, $serverPublicKey); + } +} +if (!is_callable('sodium_crypto_kx_server_session_keys')) { + /** + * @param string $keypair + * @param string $clientPublicKey + * @return array{0: string, 1: string} + * @throws SodiumException + */ + function sodium_crypto_kx_server_session_keys($keypair, $clientPublicKey) + { + return ParagonIE_Sodium_Compat::crypto_kx_server_session_keys($keypair, $clientPublicKey); + } +} +if (!is_callable('sodium_crypto_kx_secretkey')) { + /** + * @param string $keypair + * @return string + * @throws Exception + */ + function sodium_crypto_kx_secretkey($keypair) + { + return ParagonIE_Sodium_Compat::crypto_kx_secretkey($keypair); + } +} +if (!is_callable('sodium_crypto_kx_publickey')) { + /** + * @param string $keypair + * @return string + * @throws Exception + */ + function sodium_crypto_kx_publickey($keypair) + { + return ParagonIE_Sodium_Compat::crypto_kx_publickey($keypair); + } +} +if (!is_callable('sodium_crypto_pwhash')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash() + * @param int $outlen + * @param string $passwd + * @param string $salt + * @param int $opslimit + * @param int $memlimit + * @param int|null $algo + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_pwhash($outlen, $passwd, $salt, $opslimit, $memlimit, $algo = null) + { + return ParagonIE_Sodium_Compat::crypto_pwhash($outlen, $passwd, $salt, $opslimit, $memlimit, $algo); + } +} +if (!is_callable('sodium_crypto_pwhash_str')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash_str() + * @param string $passwd + * @param int $opslimit + * @param int $memlimit + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_pwhash_str($passwd, $opslimit, $memlimit) + { + return ParagonIE_Sodium_Compat::crypto_pwhash_str($passwd, $opslimit, $memlimit); + } +} +if (!is_callable('sodium_crypto_pwhash_str_needs_rehash')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash_str_needs_rehash() + * @param string $hash + * @param int $opslimit + * @param int $memlimit + * @return bool + * + * @throws SodiumException + */ + function sodium_crypto_pwhash_str_needs_rehash($hash, $opslimit, $memlimit) + { + return ParagonIE_Sodium_Compat::crypto_pwhash_str_needs_rehash($hash, $opslimit, $memlimit); + } +} +if (!is_callable('sodium_crypto_pwhash_str_verify')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash_str_verify() + * @param string $passwd + * @param string $hash + * @return bool + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_pwhash_str_verify($passwd, $hash) + { + return ParagonIE_Sodium_Compat::crypto_pwhash_str_verify($passwd, $hash); + } +} +if (!is_callable('sodium_crypto_pwhash_scryptsalsa208sha256')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash_scryptsalsa208sha256() + * @param int $outlen + * @param string $passwd + * @param string $salt + * @param int $opslimit + * @param int $memlimit + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_pwhash_scryptsalsa208sha256($outlen, $passwd, $salt, $opslimit, $memlimit) + { + return ParagonIE_Sodium_Compat::crypto_pwhash_scryptsalsa208sha256($outlen, $passwd, $salt, $opslimit, $memlimit); + } +} +if (!is_callable('sodium_crypto_pwhash_scryptsalsa208sha256_str')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash_scryptsalsa208sha256_str() + * @param string $passwd + * @param int $opslimit + * @param int $memlimit + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_pwhash_scryptsalsa208sha256_str($passwd, $opslimit, $memlimit) + { + return ParagonIE_Sodium_Compat::crypto_pwhash_scryptsalsa208sha256_str($passwd, $opslimit, $memlimit); + } +} +if (!is_callable('sodium_crypto_pwhash_scryptsalsa208sha256_str_verify')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_pwhash_scryptsalsa208sha256_str_verify() + * @param string $passwd + * @param string $hash + * @return bool + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_pwhash_scryptsalsa208sha256_str_verify($passwd, $hash) + { + return ParagonIE_Sodium_Compat::crypto_pwhash_scryptsalsa208sha256_str_verify($passwd, $hash); + } +} +if (!is_callable('sodium_crypto_scalarmult')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_scalarmult() + * @param string $n + * @param string $p + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_scalarmult($n, $p) + { + return ParagonIE_Sodium_Compat::crypto_scalarmult($n, $p); + } +} +if (!is_callable('sodium_crypto_scalarmult_base')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_scalarmult_base() + * @param string $n + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_scalarmult_base($n) + { + return ParagonIE_Sodium_Compat::crypto_scalarmult_base($n); + } +} +if (!is_callable('sodium_crypto_secretbox')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_secretbox() + * @param string $message + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_secretbox($message, $nonce, $key) + { + return ParagonIE_Sodium_Compat::crypto_secretbox($message, $nonce, $key); + } +} +if (!is_callable('sodium_crypto_secretbox_keygen')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_secretbox_keygen() + * @return string + * @throws Exception + */ + function sodium_crypto_secretbox_keygen() + { + return ParagonIE_Sodium_Compat::crypto_secretbox_keygen(); + } +} +if (!is_callable('sodium_crypto_secretbox_open')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_secretbox_open() + * @param string $message + * @param string $nonce + * @param string $key + * @return string|bool + */ + function sodium_crypto_secretbox_open($message, $nonce, $key) + { + try { + return ParagonIE_Sodium_Compat::crypto_secretbox_open($message, $nonce, $key); + } catch (Error $ex) { + return false; + } catch (Exception $ex) { + return false; + } + } +} +if (!is_callable('sodium_crypto_secretstream_xchacha20poly1305_init_push')) { + /** + * @param string $key + * @return array + * @throws SodiumException + */ + function sodium_crypto_secretstream_xchacha20poly1305_init_push($key) + { + return ParagonIE_Sodium_Compat::crypto_secretstream_xchacha20poly1305_init_push($key); + } +} +if (!is_callable('sodium_crypto_secretstream_xchacha20poly1305_push')) { + /** + * @param string $state + * @param string $msg + * @param string $aad + * @param int $tag + * @return string + * @throws SodiumException + */ + function sodium_crypto_secretstream_xchacha20poly1305_push(&$state, $msg, $aad = '', $tag = 0) + { + return ParagonIE_Sodium_Compat::crypto_secretstream_xchacha20poly1305_push($state, $msg, $aad, $tag); + } +} +if (!is_callable('sodium_crypto_secretstream_xchacha20poly1305_init_pull')) { + /** + * @param string $header + * @param string $key + * @return string + * @throws Exception + */ + function sodium_crypto_secretstream_xchacha20poly1305_init_pull($header, $key) + { + return ParagonIE_Sodium_Compat::crypto_secretstream_xchacha20poly1305_init_pull($header, $key); + } +} +if (!is_callable('sodium_crypto_secretstream_xchacha20poly1305_pull')) { + /** + * @param string $state + * @param string $cipher + * @param string $aad + * @return bool|array{0: string, 1: int} + * @throws SodiumException + */ + function sodium_crypto_secretstream_xchacha20poly1305_pull(&$state, $cipher, $aad = '') + { + return ParagonIE_Sodium_Compat::crypto_secretstream_xchacha20poly1305_pull($state, $cipher, $aad); + } +} +if (!is_callable('sodium_crypto_secretstream_xchacha20poly1305_rekey')) { + /** + * @param string $state + * @return void + * @throws SodiumException + */ + function sodium_crypto_secretstream_xchacha20poly1305_rekey(&$state) + { + ParagonIE_Sodium_Compat::crypto_secretstream_xchacha20poly1305_rekey($state); + } +} +if (!is_callable('sodium_crypto_secretstream_xchacha20poly1305_keygen')) { + /** + * @return string + * @throws Exception + */ + function sodium_crypto_secretstream_xchacha20poly1305_keygen() + { + return ParagonIE_Sodium_Compat::crypto_secretstream_xchacha20poly1305_keygen(); + } +} +if (!is_callable('sodium_crypto_shorthash')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_shorthash() + * @param string $message + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_shorthash($message, $key = '') + { + return ParagonIE_Sodium_Compat::crypto_shorthash($message, $key); + } +} +if (!is_callable('sodium_crypto_shorthash_keygen')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_shorthash_keygen() + * @return string + * @throws Exception + */ + function sodium_crypto_shorthash_keygen() + { + return ParagonIE_Sodium_Compat::crypto_shorthash_keygen(); + } +} +if (!is_callable('sodium_crypto_sign')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign() + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign($message, $sk) + { + return ParagonIE_Sodium_Compat::crypto_sign($message, $sk); + } +} +if (!is_callable('sodium_crypto_sign_detached')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_detached() + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_detached($message, $sk) + { + return ParagonIE_Sodium_Compat::crypto_sign_detached($message, $sk); + } +} +if (!is_callable('sodium_crypto_sign_keypair_from_secretkey_and_publickey')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_keypair_from_secretkey_and_publickey() + * @param string $sk + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_keypair_from_secretkey_and_publickey($sk, $pk) + { + return ParagonIE_Sodium_Compat::crypto_sign_keypair_from_secretkey_and_publickey($sk, $pk); + } +} +if (!is_callable('sodium_crypto_sign_keypair')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_keypair() + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_keypair() + { + return ParagonIE_Sodium_Compat::crypto_sign_keypair(); + } +} +if (!is_callable('sodium_crypto_sign_open')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_open() + * @param string $signedMessage + * @param string $pk + * @return string|bool + */ + function sodium_crypto_sign_open($signedMessage, $pk) + { + try { + return ParagonIE_Sodium_Compat::crypto_sign_open($signedMessage, $pk); + } catch (Error $ex) { + return false; + } catch (Exception $ex) { + return false; + } + } +} +if (!is_callable('sodium_crypto_sign_publickey')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_publickey() + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_publickey($keypair) + { + return ParagonIE_Sodium_Compat::crypto_sign_publickey($keypair); + } +} +if (!is_callable('sodium_crypto_sign_publickey_from_secretkey')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_publickey_from_secretkey() + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_publickey_from_secretkey($sk) + { + return ParagonIE_Sodium_Compat::crypto_sign_publickey_from_secretkey($sk); + } +} +if (!is_callable('sodium_crypto_sign_secretkey')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_secretkey() + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_secretkey($keypair) + { + return ParagonIE_Sodium_Compat::crypto_sign_secretkey($keypair); + } +} +if (!is_callable('sodium_crypto_sign_seed_keypair')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_seed_keypair() + * @param string $seed + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_seed_keypair($seed) + { + return ParagonIE_Sodium_Compat::crypto_sign_seed_keypair($seed); + } +} +if (!is_callable('sodium_crypto_sign_verify_detached')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_verify_detached() + * @param string $signature + * @param string $message + * @param string $pk + * @return bool + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_verify_detached($signature, $message, $pk) + { + return ParagonIE_Sodium_Compat::crypto_sign_verify_detached($signature, $message, $pk); + } +} +if (!is_callable('sodium_crypto_sign_ed25519_pk_to_curve25519')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_ed25519_pk_to_curve25519() + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_ed25519_pk_to_curve25519($pk) + { + return ParagonIE_Sodium_Compat::crypto_sign_ed25519_pk_to_curve25519($pk); + } +} +if (!is_callable('sodium_crypto_sign_ed25519_sk_to_curve25519')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_sign_ed25519_sk_to_curve25519() + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_sign_ed25519_sk_to_curve25519($sk) + { + return ParagonIE_Sodium_Compat::crypto_sign_ed25519_sk_to_curve25519($sk); + } +} +if (!is_callable('sodium_crypto_stream')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_stream() + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_stream($len, $nonce, $key) + { + return ParagonIE_Sodium_Compat::crypto_stream($len, $nonce, $key); + } +} +if (!is_callable('sodium_crypto_stream_keygen')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_stream_keygen() + * @return string + * @throws Exception + */ + function sodium_crypto_stream_keygen() + { + return ParagonIE_Sodium_Compat::crypto_stream_keygen(); + } +} +if (!is_callable('sodium_crypto_stream_xor')) { + /** + * @see ParagonIE_Sodium_Compat::crypto_stream_xor() + * @param string $message + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_crypto_stream_xor($message, $nonce, $key) + { + return ParagonIE_Sodium_Compat::crypto_stream_xor($message, $nonce, $key); + } +} +if (!is_callable('sodium_hex2bin')) { + /** + * @see ParagonIE_Sodium_Compat::hex2bin() + * @param string $string + * @return string + * @throws SodiumException + * @throws TypeError + */ + function sodium_hex2bin($string) + { + return ParagonIE_Sodium_Compat::hex2bin($string); + } +} +if (!is_callable('sodium_increment')) { + /** + * @see ParagonIE_Sodium_Compat::increment() + * @param string $string + * @return void + * @throws SodiumException + * @throws TypeError + */ + function sodium_increment(&$string) + { + ParagonIE_Sodium_Compat::increment($string); + } +} +if (!is_callable('sodium_library_version_major')) { + /** + * @see ParagonIE_Sodium_Compat::library_version_major() + * @return int + */ + function sodium_library_version_major() + { + return ParagonIE_Sodium_Compat::library_version_major(); + } +} +if (!is_callable('sodium_library_version_minor')) { + /** + * @see ParagonIE_Sodium_Compat::library_version_minor() + * @return int + */ + function sodium_library_version_minor() + { + return ParagonIE_Sodium_Compat::library_version_minor(); + } +} +if (!is_callable('sodium_version_string')) { + /** + * @see ParagonIE_Sodium_Compat::version_string() + * @return string + */ + function sodium_version_string() + { + return ParagonIE_Sodium_Compat::version_string(); + } +} +if (!is_callable('sodium_memcmp')) { + /** + * @see ParagonIE_Sodium_Compat::memcmp() + * @param string $a + * @param string $b + * @return int + * @throws SodiumException + * @throws TypeError + */ + function sodium_memcmp($a, $b) + { + return ParagonIE_Sodium_Compat::memcmp($a, $b); + } +} +if (!is_callable('sodium_memzero')) { + /** + * @see ParagonIE_Sodium_Compat::memzero() + * @param string $str + * @return void + * @throws SodiumException + * @throws TypeError + */ + function sodium_memzero(&$str) + { + ParagonIE_Sodium_Compat::memzero($str); + } +} +if (!is_callable('sodium_pad')) { + /** + * @see ParagonIE_Sodium_Compat::pad() + * @param string $unpadded + * @param int $blockSize + * @return int + * @throws SodiumException + * @throws TypeError + */ + function sodium_pad($unpadded, $blockSize) + { + return ParagonIE_Sodium_Compat::pad($unpadded, $blockSize, true); + } +} +if (!is_callable('sodium_unpad')) { + /** + * @see ParagonIE_Sodium_Compat::pad() + * @param string $padded + * @param int $blockSize + * @return int + * @throws SodiumException + * @throws TypeError + */ + function sodium_unpad($padded, $blockSize) + { + return ParagonIE_Sodium_Compat::unpad($padded, $blockSize, true); + } +} +if (!is_callable('sodium_randombytes_buf')) { + /** + * @see ParagonIE_Sodium_Compat::randombytes_buf() + * @param int $amount + * @return string + * @throws Exception + */ + function sodium_randombytes_buf($amount) + { + return ParagonIE_Sodium_Compat::randombytes_buf($amount); + } +} + +if (!is_callable('sodium_randombytes_uniform')) { + /** + * @see ParagonIE_Sodium_Compat::randombytes_uniform() + * @param int $upperLimit + * @return int + * @throws Exception + */ + function sodium_randombytes_uniform($upperLimit) + { + return ParagonIE_Sodium_Compat::randombytes_uniform($upperLimit); + } +} + +if (!is_callable('sodium_randombytes_random16')) { + /** + * @see ParagonIE_Sodium_Compat::randombytes_random16() + * @return int + * @throws Exception + */ + function sodium_randombytes_random16() + { + return ParagonIE_Sodium_Compat::randombytes_random16(); + } +} diff --git a/vendor/paragonie/sodium_compat/lib/php72compat_const.php b/vendor/paragonie/sodium_compat/lib/php72compat_const.php new file mode 100644 index 000000000..6a4247aa9 --- /dev/null +++ b/vendor/paragonie/sodium_compat/lib/php72compat_const.php @@ -0,0 +1,90 @@ + + + + + ./tests/unit + + + ./tests/compat + + + + + ./src + + + \ No newline at end of file diff --git a/vendor/paragonie/sodium_compat/psalm-above-3.xml b/vendor/paragonie/sodium_compat/psalm-above-3.xml new file mode 100644 index 000000000..91328372c --- /dev/null +++ b/vendor/paragonie/sodium_compat/psalm-above-3.xml @@ -0,0 +1,54 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/vendor/paragonie/sodium_compat/psalm-below-3.xml b/vendor/paragonie/sodium_compat/psalm-below-3.xml new file mode 100644 index 000000000..0da3cd9e0 --- /dev/null +++ b/vendor/paragonie/sodium_compat/psalm-below-3.xml @@ -0,0 +1,43 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/vendor/paragonie/sodium_compat/src/Compat.php b/vendor/paragonie/sodium_compat/src/Compat.php new file mode 100644 index 000000000..ff76adbcb --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Compat.php @@ -0,0 +1,3560 @@ +>= 8; + } + $val = ParagonIE_Sodium_Core_Util::intArrayToString($A); + } + + /** + * @param string $encoded + * @param int $variant + * @param string $ignore + * @return string + * @throws SodiumException + */ + public static function base642bin($encoded, $variant, $ignore = '') + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($encoded, 'string', 1); + + /** @var string $encoded */ + $encoded = (string) $encoded; + if (ParagonIE_Sodium_Core_Util::strlen($encoded) === 0) { + return ''; + } + + // Just strip before decoding + if (!empty($ignore)) { + $encoded = str_replace($ignore, '', $encoded); + } + + try { + switch ($variant) { + case self::BASE64_VARIANT_ORIGINAL: + return ParagonIE_Sodium_Core_Base64_Original::decode($encoded, true); + case self::BASE64_VARIANT_ORIGINAL_NO_PADDING: + return ParagonIE_Sodium_Core_Base64_Original::decode($encoded, false); + case self::BASE64_VARIANT_URLSAFE: + return ParagonIE_Sodium_Core_Base64_UrlSafe::decode($encoded, true); + case self::BASE64_VARIANT_URLSAFE_NO_PADDING: + return ParagonIE_Sodium_Core_Base64_UrlSafe::decode($encoded, false); + default: + throw new SodiumException('invalid base64 variant identifier'); + } + } catch (Exception $ex) { + if ($ex instanceof SodiumException) { + throw $ex; + } + throw new SodiumException('invalid base64 string'); + } + } + + /** + * @param string $decoded + * @param int $variant + * @return string + * @throws SodiumException + */ + public static function bin2base64($decoded, $variant) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($decoded, 'string', 1); + /** @var string $decoded */ + $decoded = (string) $decoded; + if (ParagonIE_Sodium_Core_Util::strlen($decoded) === 0) { + return ''; + } + + switch ($variant) { + case self::BASE64_VARIANT_ORIGINAL: + return ParagonIE_Sodium_Core_Base64_Original::encode($decoded); + case self::BASE64_VARIANT_ORIGINAL_NO_PADDING: + return ParagonIE_Sodium_Core_Base64_Original::encodeUnpadded($decoded); + case self::BASE64_VARIANT_URLSAFE: + return ParagonIE_Sodium_Core_Base64_UrlSafe::encode($decoded); + case self::BASE64_VARIANT_URLSAFE_NO_PADDING: + return ParagonIE_Sodium_Core_Base64_UrlSafe::encodeUnpadded($decoded); + default: + throw new SodiumException('invalid base64 variant identifier'); + } + } + + /** + * Cache-timing-safe implementation of bin2hex(). + * + * @param string $string A string (probably raw binary) + * @return string A hexadecimal-encoded string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function bin2hex($string) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($string, 'string', 1); + + if (self::useNewSodiumAPI()) { + return (string) sodium_bin2hex($string); + } + if (self::use_fallback('bin2hex')) { + return (string) call_user_func('\\Sodium\\bin2hex', $string); + } + return ParagonIE_Sodium_Core_Util::bin2hex($string); + } + + /** + * Compare two strings, in constant-time. + * Compared to memcmp(), compare() is more useful for sorting. + * + * @param string $left The left operand; must be a string + * @param string $right The right operand; must be a string + * @return int If < 0 if the left operand is less than the right + * If = 0 if both strings are equal + * If > 0 if the right operand is less than the left + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function compare($left, $right) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($left, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($right, 'string', 2); + + if (self::useNewSodiumAPI()) { + return (int) sodium_compare($left, $right); + } + if (self::use_fallback('compare')) { + return (int) call_user_func('\\Sodium\\compare', $left, $right); + } + return ParagonIE_Sodium_Core_Util::compare($left, $right); + } + + /** + * Is AES-256-GCM even available to use? + * + * @return bool + * @psalm-suppress UndefinedFunction + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_aead_aes256gcm_is_available() + { + if (self::useNewSodiumAPI()) { + return sodium_crypto_aead_aes256gcm_is_available(); + } + if (self::use_fallback('crypto_aead_aes256gcm_is_available')) { + return call_user_func('\\Sodium\\crypto_aead_aes256gcm_is_available'); + } + if (PHP_VERSION_ID < 70100) { + // OpenSSL doesn't support AEAD before 7.1.0 + return false; + } + if (!is_callable('openssl_encrypt') || !is_callable('openssl_decrypt')) { + // OpenSSL isn't installed + return false; + } + return (bool) in_array('aes-256-gcm', openssl_get_cipher_methods()); + } + + /** + * Authenticated Encryption with Associated Data: Decryption + * + * Algorithm: + * AES-256-GCM + * + * This mode uses a 64-bit random nonce with a 64-bit counter. + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * + * @param string $ciphertext Encrypted message (with Poly1305 MAC appended) + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * + * @return string|bool The original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_aead_aes256gcm_decrypt( + $ciphertext = '', + $assocData = '', + $nonce = '', + $key = '' + ) { + if (!self::crypto_aead_aes256gcm_is_available()) { + throw new SodiumException('AES-256-GCM is not available'); + } + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_AES256GCM_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_AES256GCM_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_AES256GCM_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_AES256GCM_KEYBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($ciphertext) < self::CRYPTO_AEAD_AES256GCM_ABYTES) { + throw new SodiumException('Message must be at least CRYPTO_AEAD_AES256GCM_ABYTES long'); + } + if (!is_callable('openssl_decrypt')) { + throw new SodiumException('The OpenSSL extension is not installed, or openssl_decrypt() is not available'); + } + + /** @var string $ctext */ + $ctext = ParagonIE_Sodium_Core_Util::substr($ciphertext, 0, -self::CRYPTO_AEAD_AES256GCM_ABYTES); + /** @var string $authTag */ + $authTag = ParagonIE_Sodium_Core_Util::substr($ciphertext, -self::CRYPTO_AEAD_AES256GCM_ABYTES, 16); + return openssl_decrypt( + $ctext, + 'aes-256-gcm', + $key, + OPENSSL_RAW_DATA, + $nonce, + $authTag, + $assocData + ); + } + + /** + * Authenticated Encryption with Associated Data: Encryption + * + * Algorithm: + * AES-256-GCM + * + * @param string $plaintext Message to be encrypted + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * + * @return string Ciphertext with a 16-byte GCM message + * authentication code appended + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_aead_aes256gcm_encrypt( + $plaintext = '', + $assocData = '', + $nonce = '', + $key = '' + ) { + if (!self::crypto_aead_aes256gcm_is_available()) { + throw new SodiumException('AES-256-GCM is not available'); + } + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_AES256GCM_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_AES256GCM_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_AES256GCM_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_AES256GCM_KEYBYTES long'); + } + + if (!is_callable('openssl_encrypt')) { + throw new SodiumException('The OpenSSL extension is not installed, or openssl_encrypt() is not available'); + } + + $authTag = ''; + $ciphertext = openssl_encrypt( + $plaintext, + 'aes-256-gcm', + $key, + OPENSSL_RAW_DATA, + $nonce, + $authTag, + $assocData + ); + return $ciphertext . $authTag; + } + + /** + * Return a secure random key for use with the AES-256-GCM + * symmetric AEAD interface. + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_aead_aes256gcm_keygen() + { + return random_bytes(self::CRYPTO_AEAD_AES256GCM_KEYBYTES); + } + + /** + * Authenticated Encryption with Associated Data: Decryption + * + * Algorithm: + * ChaCha20-Poly1305 + * + * This mode uses a 64-bit random nonce with a 64-bit counter. + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * + * @param string $ciphertext Encrypted message (with Poly1305 MAC appended) + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * + * @return string The original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_aead_chacha20poly1305_decrypt( + $ciphertext = '', + $assocData = '', + $nonce = '', + $key = '' + ) { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_CHACHA20POLY1305_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_CHACHA20POLY1305_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($ciphertext) < self::CRYPTO_AEAD_CHACHA20POLY1305_ABYTES) { + throw new SodiumException('Message must be at least CRYPTO_AEAD_CHACHA20POLY1305_ABYTES long'); + } + + if (self::useNewSodiumAPI()) { + /** + * @psalm-suppress InvalidReturnStatement + * @psalm-suppress FalsableReturnStatement + */ + return sodium_crypto_aead_chacha20poly1305_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + if (self::use_fallback('crypto_aead_chacha20poly1305_decrypt')) { + return call_user_func( + '\\Sodium\\crypto_aead_chacha20poly1305_decrypt', + $ciphertext, + $assocData, + $nonce, + $key + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::aead_chacha20poly1305_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + return ParagonIE_Sodium_Crypto::aead_chacha20poly1305_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + + /** + * Authenticated Encryption with Associated Data + * + * Algorithm: + * ChaCha20-Poly1305 + * + * This mode uses a 64-bit random nonce with a 64-bit counter. + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * + * @param string $plaintext Message to be encrypted + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * + * @return string Ciphertext with a 16-byte Poly1305 message + * authentication code appended + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_aead_chacha20poly1305_encrypt( + $plaintext = '', + $assocData = '', + $nonce = '', + $key = '' + ) { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_CHACHA20POLY1305_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_CHACHA20POLY1305_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES long'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_aead_chacha20poly1305_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + if (self::use_fallback('crypto_aead_chacha20poly1305_encrypt')) { + return (string) call_user_func( + '\\Sodium\\crypto_aead_chacha20poly1305_encrypt', + $plaintext, + $assocData, + $nonce, + $key + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::aead_chacha20poly1305_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + return ParagonIE_Sodium_Crypto::aead_chacha20poly1305_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + + /** + * Authenticated Encryption with Associated Data: Decryption + * + * Algorithm: + * ChaCha20-Poly1305 + * + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * Regular mode uses a 64-bit random nonce with a 64-bit counter. + * + * @param string $ciphertext Encrypted message (with Poly1305 MAC appended) + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 12 bytes + * @param string $key Encryption key + * + * @return string The original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_aead_chacha20poly1305_ietf_decrypt( + $ciphertext = '', + $assocData = '', + $nonce = '', + $key = '' + ) { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_CHACHA20POLY1305_IETF_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_CHACHA20POLY1305_IETF_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($ciphertext) < self::CRYPTO_AEAD_CHACHA20POLY1305_ABYTES) { + throw new SodiumException('Message must be at least CRYPTO_AEAD_CHACHA20POLY1305_ABYTES long'); + } + + if (self::useNewSodiumAPI()) { + /** + * @psalm-suppress InvalidReturnStatement + * @psalm-suppress FalsableReturnStatement + */ + return sodium_crypto_aead_chacha20poly1305_ietf_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + if (self::use_fallback('crypto_aead_chacha20poly1305_ietf_decrypt')) { + return call_user_func( + '\\Sodium\\crypto_aead_chacha20poly1305_ietf_decrypt', + $ciphertext, + $assocData, + $nonce, + $key + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::aead_chacha20poly1305_ietf_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + return ParagonIE_Sodium_Crypto::aead_chacha20poly1305_ietf_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + + /** + * Return a secure random key for use with the ChaCha20-Poly1305 + * symmetric AEAD interface. + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_aead_chacha20poly1305_keygen() + { + return random_bytes(self::CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES); + } + + /** + * Authenticated Encryption with Associated Data + * + * Algorithm: + * ChaCha20-Poly1305 + * + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * Regular mode uses a 64-bit random nonce with a 64-bit counter. + * + * @param string $plaintext Message to be encrypted + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * + * @return string Ciphertext with a 16-byte Poly1305 message + * authentication code appended + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_aead_chacha20poly1305_ietf_encrypt( + $plaintext = '', + $assocData = '', + $nonce = '', + $key = '' + ) { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_CHACHA20POLY1305_IETF_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_CHACHA20POLY1305_IETF_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_CHACHA20POLY1305_KEYBYTES long'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_aead_chacha20poly1305_ietf_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + if (self::use_fallback('crypto_aead_chacha20poly1305_ietf_encrypt')) { + return (string) call_user_func( + '\\Sodium\\crypto_aead_chacha20poly1305_ietf_encrypt', + $plaintext, + $assocData, + $nonce, + $key + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::aead_chacha20poly1305_ietf_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + return ParagonIE_Sodium_Crypto::aead_chacha20poly1305_ietf_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + + /** + * Return a secure random key for use with the ChaCha20-Poly1305 + * symmetric AEAD interface. (IETF version) + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_aead_chacha20poly1305_ietf_keygen() + { + return random_bytes(self::CRYPTO_AEAD_CHACHA20POLY1305_IETF_KEYBYTES); + } + + /** + * Authenticated Encryption with Associated Data: Decryption + * + * Algorithm: + * XChaCha20-Poly1305 + * + * This mode uses a 64-bit random nonce with a 64-bit counter. + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * + * @param string $ciphertext Encrypted message (with Poly1305 MAC appended) + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * @param bool $dontFallback Don't fallback to ext/sodium + * + * @return string|bool The original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_aead_xchacha20poly1305_ietf_decrypt( + $ciphertext = '', + $assocData = '', + $nonce = '', + $key = '', + $dontFallback = false + ) { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_XCHACHA20POLY1305_IETF_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_XCHACHA20POLY1305_IETF_KEYBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($ciphertext) < self::CRYPTO_AEAD_XCHACHA20POLY1305_IETF_ABYTES) { + throw new SodiumException('Message must be at least CRYPTO_AEAD_XCHACHA20POLY1305_IETF_ABYTES long'); + } + if (self::useNewSodiumAPI() && !$dontFallback) { + if (is_callable('sodium_crypto_aead_xchacha20poly1305_ietf_decrypt')) { + return sodium_crypto_aead_xchacha20poly1305_ietf_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + } + + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::aead_xchacha20poly1305_ietf_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + return ParagonIE_Sodium_Crypto::aead_xchacha20poly1305_ietf_decrypt( + $ciphertext, + $assocData, + $nonce, + $key + ); + } + + /** + * Authenticated Encryption with Associated Data + * + * Algorithm: + * XChaCha20-Poly1305 + * + * This mode uses a 64-bit random nonce with a 64-bit counter. + * IETF mode uses a 96-bit random nonce with a 32-bit counter. + * + * @param string $plaintext Message to be encrypted + * @param string $assocData Authenticated Associated Data (unencrypted) + * @param string $nonce Number to be used only Once; must be 8 bytes + * @param string $key Encryption key + * @param bool $dontFallback Don't fallback to ext/sodium + * + * @return string Ciphertext with a 16-byte Poly1305 message + * authentication code appended + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_aead_xchacha20poly1305_ietf_encrypt( + $plaintext = '', + $assocData = '', + $nonce = '', + $key = '', + $dontFallback = false + ) { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($assocData, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES) { + throw new SodiumException('Nonce must be CRYPTO_AEAD_XCHACHA20POLY1305_NPUBBYTES long'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AEAD_XCHACHA20POLY1305_IETF_KEYBYTES) { + throw new SodiumException('Key must be CRYPTO_AEAD_XCHACHA20POLY1305_KEYBYTES long'); + } + if (self::useNewSodiumAPI() && !$dontFallback) { + if (is_callable('sodium_crypto_aead_xchacha20poly1305_ietf_encrypt')) { + return sodium_crypto_aead_xchacha20poly1305_ietf_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + } + + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::aead_xchacha20poly1305_ietf_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + return ParagonIE_Sodium_Crypto::aead_xchacha20poly1305_ietf_encrypt( + $plaintext, + $assocData, + $nonce, + $key + ); + } + + /** + * Return a secure random key for use with the XChaCha20-Poly1305 + * symmetric AEAD interface. + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_aead_xchacha20poly1305_ietf_keygen() + { + return random_bytes(self::CRYPTO_AEAD_XCHACHA20POLY1305_IETF_KEYBYTES); + } + + /** + * Authenticate a message. Uses symmetric-key cryptography. + * + * Algorithm: + * HMAC-SHA512-256. Which is HMAC-SHA-512 truncated to 256 bits. + * Not to be confused with HMAC-SHA-512/256 which would use the + * SHA-512/256 hash function (uses different initial parameters + * but still truncates to 256 bits to sidestep length-extension + * attacks). + * + * @param string $message Message to be authenticated + * @param string $key Symmetric authentication key + * @return string Message authentication code + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_auth($message, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AUTH_KEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_AUTH_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_auth($message, $key); + } + if (self::use_fallback('crypto_auth')) { + return (string) call_user_func('\\Sodium\\crypto_auth', $message, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::auth($message, $key); + } + return ParagonIE_Sodium_Crypto::auth($message, $key); + } + + /** + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_auth_keygen() + { + return random_bytes(self::CRYPTO_AUTH_KEYBYTES); + } + + /** + * Verify the MAC of a message previously authenticated with crypto_auth. + * + * @param string $mac Message authentication code + * @param string $message Message whose authenticity you are attempting to + * verify (with a given MAC and key) + * @param string $key Symmetric authentication key + * @return bool TRUE if authenticated, FALSE otherwise + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_auth_verify($mac, $message, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($mac, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($mac) !== self::CRYPTO_AUTH_BYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_AUTH_BYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_AUTH_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_AUTH_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (bool) sodium_crypto_auth_verify($mac, $message, $key); + } + if (self::use_fallback('crypto_auth_verify')) { + return (bool) call_user_func('\\Sodium\\crypto_auth_verify', $mac, $message, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::auth_verify($mac, $message, $key); + } + return ParagonIE_Sodium_Crypto::auth_verify($mac, $message, $key); + } + + /** + * Authenticated asymmetric-key encryption. Both the sender and recipient + * may decrypt messages. + * + * Algorithm: X25519-XSalsa20-Poly1305. + * X25519: Elliptic-Curve Diffie Hellman over Curve25519. + * XSalsa20: Extended-nonce variant of salsa20. + * Poyl1305: Polynomial MAC for one-time message authentication. + * + * @param string $plaintext The message to be encrypted + * @param string $nonce A Number to only be used Once; must be 24 bytes + * @param string $keypair Your secret key and your recipient's public key + * @return string Ciphertext with 16-byte Poly1305 MAC + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box($plaintext, $nonce, $keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_BOX_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_BOX_KEYPAIRBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_BOX_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box($plaintext, $nonce, $keypair); + } + if (self::use_fallback('crypto_box')) { + return (string) call_user_func('\\Sodium\\crypto_box', $plaintext, $nonce, $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box($plaintext, $nonce, $keypair); + } + return ParagonIE_Sodium_Crypto::box($plaintext, $nonce, $keypair); + } + + /** + * Anonymous public-key encryption. Only the recipient may decrypt messages. + * + * Algorithm: X25519-XSalsa20-Poly1305, as with crypto_box. + * The sender's X25519 keypair is ephemeral. + * Nonce is generated from the BLAKE2b hash of both public keys. + * + * This provides ciphertext integrity. + * + * @param string $plaintext Message to be sealed + * @param string $publicKey Your recipient's public key + * @return string Sealed message that only your recipient can + * decrypt + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box_seal($plaintext, $publicKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($publicKey, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($publicKey) !== self::CRYPTO_BOX_PUBLICKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_PUBLICKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_seal($plaintext, $publicKey); + } + if (self::use_fallback('crypto_box_seal')) { + return (string) call_user_func('\\Sodium\\crypto_box_seal', $plaintext, $publicKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_seal($plaintext, $publicKey); + } + return ParagonIE_Sodium_Crypto::box_seal($plaintext, $publicKey); + } + + /** + * Opens a message encrypted with crypto_box_seal(). Requires + * the recipient's keypair (sk || pk) to decrypt successfully. + * + * This validates ciphertext integrity. + * + * @param string $ciphertext Sealed message to be opened + * @param string $keypair Your crypto_box keypair + * @return string The original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_box_seal_open($ciphertext, $keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_BOX_KEYPAIRBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + /** + * @psalm-suppress InvalidReturnStatement + * @psalm-suppress FalsableReturnStatement + */ + return sodium_crypto_box_seal_open($ciphertext, $keypair); + } + if (self::use_fallback('crypto_box_seal_open')) { + return call_user_func('\\Sodium\\crypto_box_seal_open', $ciphertext, $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_seal_open($ciphertext, $keypair); + } + return ParagonIE_Sodium_Crypto::box_seal_open($ciphertext, $keypair); + } + + /** + * Generate a new random X25519 keypair. + * + * @return string A 64-byte string; the first 32 are your secret key, while + * the last 32 are your public key. crypto_box_secretkey() + * and crypto_box_publickey() exist to separate them so you + * don't accidentally get them mixed up! + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box_keypair() + { + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_keypair(); + } + if (self::use_fallback('crypto_box_keypair')) { + return (string) call_user_func('\\Sodium\\crypto_box_keypair'); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_keypair(); + } + return ParagonIE_Sodium_Crypto::box_keypair(); + } + + /** + * Combine two keys into a keypair for use in library methods that expect + * a keypair. This doesn't necessarily have to be the same person's keys. + * + * @param string $secretKey Secret key + * @param string $publicKey Public key + * @return string Keypair + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box_keypair_from_secretkey_and_publickey($secretKey, $publicKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($publicKey, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_BOX_SECRETKEYBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_SECRETKEYBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($publicKey) !== self::CRYPTO_BOX_PUBLICKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_PUBLICKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_keypair_from_secretkey_and_publickey($secretKey, $publicKey); + } + if (self::use_fallback('crypto_box_keypair_from_secretkey_and_publickey')) { + return (string) call_user_func('\\Sodium\\crypto_box_keypair_from_secretkey_and_publickey', $secretKey, $publicKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_keypair_from_secretkey_and_publickey($secretKey, $publicKey); + } + return ParagonIE_Sodium_Crypto::box_keypair_from_secretkey_and_publickey($secretKey, $publicKey); + } + + /** + * Decrypt a message previously encrypted with crypto_box(). + * + * @param string $ciphertext Encrypted message + * @param string $nonce Number to only be used Once; must be 24 bytes + * @param string $keypair Your secret key and the sender's public key + * @return string The original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_box_open($ciphertext, $nonce, $keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($ciphertext) < self::CRYPTO_BOX_MACBYTES) { + throw new SodiumException('Argument 1 must be at least CRYPTO_BOX_MACBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_BOX_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_BOX_KEYPAIRBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_BOX_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + /** + * @psalm-suppress InvalidReturnStatement + * @psalm-suppress FalsableReturnStatement + */ + return sodium_crypto_box_open($ciphertext, $nonce, $keypair); + } + if (self::use_fallback('crypto_box_open')) { + return call_user_func('\\Sodium\\crypto_box_open', $ciphertext, $nonce, $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_open($ciphertext, $nonce, $keypair); + } + return ParagonIE_Sodium_Crypto::box_open($ciphertext, $nonce, $keypair); + } + + /** + * Extract the public key from a crypto_box keypair. + * + * @param string $keypair Keypair containing secret and public key + * @return string Your crypto_box public key + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box_publickey($keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_BOX_KEYPAIRBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_publickey($keypair); + } + if (self::use_fallback('crypto_box_publickey')) { + return (string) call_user_func('\\Sodium\\crypto_box_publickey', $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_publickey($keypair); + } + return ParagonIE_Sodium_Crypto::box_publickey($keypair); + } + + /** + * Calculate the X25519 public key from a given X25519 secret key. + * + * @param string $secretKey Any X25519 secret key + * @return string The corresponding X25519 public key + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box_publickey_from_secretkey($secretKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_BOX_SECRETKEYBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_SECRETKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_publickey_from_secretkey($secretKey); + } + if (self::use_fallback('crypto_box_publickey_from_secretkey')) { + return (string) call_user_func('\\Sodium\\crypto_box_publickey_from_secretkey', $secretKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_publickey_from_secretkey($secretKey); + } + return ParagonIE_Sodium_Crypto::box_publickey_from_secretkey($secretKey); + } + + /** + * Extract the secret key from a crypto_box keypair. + * + * @param string $keypair + * @return string Your crypto_box secret key + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_box_secretkey($keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_BOX_KEYPAIRBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_secretkey($keypair); + } + if (self::use_fallback('crypto_box_secretkey')) { + return (string) call_user_func('\\Sodium\\crypto_box_secretkey', $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_secretkey($keypair); + } + return ParagonIE_Sodium_Crypto::box_secretkey($keypair); + } + + /** + * Generate an X25519 keypair from a seed. + * + * @param string $seed + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress UndefinedFunction + */ + public static function crypto_box_seed_keypair($seed) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($seed, 'string', 1); + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_box_seed_keypair($seed); + } + if (self::use_fallback('crypto_box_seed_keypair')) { + return (string) call_user_func('\\Sodium\\crypto_box_seed_keypair', $seed); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::box_seed_keypair($seed); + } + return ParagonIE_Sodium_Crypto::box_seed_keypair($seed); + } + + /** + * Calculates a BLAKE2b hash, with an optional key. + * + * @param string $message The message to be hashed + * @param string|null $key If specified, must be a string between 16 + * and 64 bytes long + * @param int $length Output length in bytes; must be between 16 + * and 64 (default = 32) + * @return string Raw binary + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_generichash($message, $key = '', $length = self::CRYPTO_GENERICHASH_BYTES) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 1); + if (is_null($key)) { + $key = ''; + } + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($length, 'int', 3); + + /* Input validation: */ + if (!empty($key)) { + if (ParagonIE_Sodium_Core_Util::strlen($key) < self::CRYPTO_GENERICHASH_KEYBYTES_MIN) { + throw new SodiumException('Unsupported key size. Must be at least CRYPTO_GENERICHASH_KEYBYTES_MIN bytes long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) > self::CRYPTO_GENERICHASH_KEYBYTES_MAX) { + throw new SodiumException('Unsupported key size. Must be at most CRYPTO_GENERICHASH_KEYBYTES_MAX bytes long.'); + } + } + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_generichash($message, $key, $length); + } + if (self::use_fallback('crypto_generichash')) { + return (string) call_user_func('\\Sodium\\crypto_generichash', $message, $key, $length); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::generichash($message, $key, $length); + } + return ParagonIE_Sodium_Crypto::generichash($message, $key, $length); + } + + /** + * Get the final BLAKE2b hash output for a given context. + * + * @param string $ctx BLAKE2 hashing context. Generated by crypto_generichash_init(). + * @param int $length Hash output size. + * @return string Final BLAKE2b hash. + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress ReferenceConstraintViolation + * @psalm-suppress ConflictingReferenceConstraint + */ + public static function crypto_generichash_final(&$ctx, $length = self::CRYPTO_GENERICHASH_BYTES) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ctx, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($length, 'int', 2); + + if (self::useNewSodiumAPI()) { + return sodium_crypto_generichash_final($ctx, $length); + } + if (self::use_fallback('crypto_generichash_final')) { + $func = '\\Sodium\\crypto_generichash_final'; + return (string) $func($ctx, $length); + } + if ($length < 1) { + try { + self::memzero($ctx); + } catch (SodiumException $ex) { + unset($ctx); + } + return ''; + } + if (PHP_INT_SIZE === 4) { + $result = ParagonIE_Sodium_Crypto32::generichash_final($ctx, $length); + } else { + $result = ParagonIE_Sodium_Crypto::generichash_final($ctx, $length); + } + try { + self::memzero($ctx); + } catch (SodiumException $ex) { + unset($ctx); + } + return $result; + } + + /** + * Initialize a BLAKE2b hashing context, for use in a streaming interface. + * + * @param string|null $key If specified must be a string between 16 and 64 bytes + * @param int $length The size of the desired hash output + * @return string A BLAKE2 hashing context, encoded as a string + * (To be 100% compatible with ext/libsodium) + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_generichash_init($key = '', $length = self::CRYPTO_GENERICHASH_BYTES) + { + /* Type checks: */ + if (is_null($key)) { + $key = ''; + } + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($length, 'int', 2); + + /* Input validation: */ + if (!empty($key)) { + if (ParagonIE_Sodium_Core_Util::strlen($key) < self::CRYPTO_GENERICHASH_KEYBYTES_MIN) { + throw new SodiumException('Unsupported key size. Must be at least CRYPTO_GENERICHASH_KEYBYTES_MIN bytes long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) > self::CRYPTO_GENERICHASH_KEYBYTES_MAX) { + throw new SodiumException('Unsupported key size. Must be at most CRYPTO_GENERICHASH_KEYBYTES_MAX bytes long.'); + } + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_generichash_init($key, $length); + } + if (self::use_fallback('crypto_generichash_init')) { + return (string) call_user_func('\\Sodium\\crypto_generichash_init', $key, $length); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::generichash_init($key, $length); + } + return ParagonIE_Sodium_Crypto::generichash_init($key, $length); + } + + /** + * Initialize a BLAKE2b hashing context, for use in a streaming interface. + * + * @param string|null $key If specified must be a string between 16 and 64 bytes + * @param int $length The size of the desired hash output + * @param string $salt Salt (up to 16 bytes) + * @param string $personal Personalization string (up to 16 bytes) + * @return string A BLAKE2 hashing context, encoded as a string + * (To be 100% compatible with ext/libsodium) + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_generichash_init_salt_personal( + $key = '', + $length = self::CRYPTO_GENERICHASH_BYTES, + $salt = '', + $personal = '' + ) { + /* Type checks: */ + if (is_null($key)) { + $key = ''; + } + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($length, 'int', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($salt, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($personal, 'string', 4); + $salt = str_pad($salt, 16, "\0", STR_PAD_RIGHT); + $personal = str_pad($personal, 16, "\0", STR_PAD_RIGHT); + + /* Input validation: */ + if (!empty($key)) { + /* + if (ParagonIE_Sodium_Core_Util::strlen($key) < self::CRYPTO_GENERICHASH_KEYBYTES_MIN) { + throw new SodiumException('Unsupported key size. Must be at least CRYPTO_GENERICHASH_KEYBYTES_MIN bytes long.'); + } + */ + if (ParagonIE_Sodium_Core_Util::strlen($key) > self::CRYPTO_GENERICHASH_KEYBYTES_MAX) { + throw new SodiumException('Unsupported key size. Must be at most CRYPTO_GENERICHASH_KEYBYTES_MAX bytes long.'); + } + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::generichash_init_salt_personal($key, $length, $salt, $personal); + } + return ParagonIE_Sodium_Crypto::generichash_init_salt_personal($key, $length, $salt, $personal); + } + + /** + * Update a BLAKE2b hashing context with additional data. + * + * @param string $ctx BLAKE2 hashing context. Generated by crypto_generichash_init(). + * $ctx is passed by reference and gets updated in-place. + * @param-out string $ctx + * @param string $message The message to append to the existing hash state. + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress ReferenceConstraintViolation + */ + public static function crypto_generichash_update(&$ctx, $message) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ctx, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 2); + + if (self::useNewSodiumAPI()) { + sodium_crypto_generichash_update($ctx, $message); + return; + } + if (self::use_fallback('crypto_generichash_update')) { + $func = '\\Sodium\\crypto_generichash_update'; + $func($ctx, $message); + return; + } + if (PHP_INT_SIZE === 4) { + $ctx = ParagonIE_Sodium_Crypto32::generichash_update($ctx, $message); + } else { + $ctx = ParagonIE_Sodium_Crypto::generichash_update($ctx, $message); + } + } + + /** + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_generichash_keygen() + { + return random_bytes(self::CRYPTO_GENERICHASH_KEYBYTES); + } + + /** + * @param int $subkey_len + * @param int $subkey_id + * @param string $context + * @param string $key + * @return string + * @throws SodiumException + */ + public static function crypto_kdf_derive_from_key( + $subkey_len, + $subkey_id, + $context, + $key + ) { + ParagonIE_Sodium_Core_Util::declareScalarType($subkey_len, 'int', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($subkey_id, 'int', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($context, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 4); + $subkey_id = (int) $subkey_id; + $subkey_len = (int) $subkey_len; + $context = (string) $context; + $key = (string) $key; + + if ($subkey_len < self::CRYPTO_KDF_BYTES_MIN) { + throw new SodiumException('subkey cannot be smaller than SODIUM_CRYPTO_KDF_BYTES_MIN'); + } + if ($subkey_len > self::CRYPTO_KDF_BYTES_MAX) { + throw new SodiumException('subkey cannot be larger than SODIUM_CRYPTO_KDF_BYTES_MAX'); + } + if ($subkey_id < 0) { + throw new SodiumException('subkey_id cannot be negative'); + } + if (ParagonIE_Sodium_Core_Util::strlen($context) !== self::CRYPTO_KDF_CONTEXTBYTES) { + throw new SodiumException('context should be SODIUM_CRYPTO_KDF_CONTEXTBYTES bytes'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_KDF_KEYBYTES) { + throw new SodiumException('key should be SODIUM_CRYPTO_KDF_KEYBYTES bytes'); + } + + $salt = ParagonIE_Sodium_Core_Util::store64_le($subkey_id); + $state = self::crypto_generichash_init_salt_personal( + $key, + $subkey_len, + $salt, + $context + ); + return self::crypto_generichash_final($state, $subkey_len); + } + + /** + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_kdf_keygen() + { + return random_bytes(self::CRYPTO_KDF_KEYBYTES); + } + + /** + * Perform a key exchange, between a designated client and a server. + * + * Typically, you would designate one machine to be the client and the + * other to be the server. The first two keys are what you'd expect for + * scalarmult() below, but the latter two public keys don't swap places. + * + * | ALICE | BOB | + * | Client | Server | + * |--------------------------------|-------------------------------------| + * | shared = crypto_kx( | shared = crypto_kx( | + * | alice_sk, | bob_sk, | <- contextual + * | bob_pk, | alice_pk, | <- contextual + * | alice_pk, | alice_pk, | <----- static + * | bob_pk | bob_pk | <----- static + * | ) | ) | + * + * They are used along with the scalarmult product to generate a 256-bit + * BLAKE2b hash unique to the client and server keys. + * + * @param string $my_secret + * @param string $their_public + * @param string $client_public + * @param string $server_public + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_kx($my_secret, $their_public, $client_public, $server_public) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($my_secret, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($their_public, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($client_public, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($server_public, 'string', 4); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($my_secret) !== self::CRYPTO_BOX_SECRETKEYBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_SECRETKEYBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($their_public) !== self::CRYPTO_BOX_PUBLICKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_PUBLICKEYBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($client_public) !== self::CRYPTO_BOX_PUBLICKEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_BOX_PUBLICKEYBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($server_public) !== self::CRYPTO_BOX_PUBLICKEYBYTES) { + throw new SodiumException('Argument 4 must be CRYPTO_BOX_PUBLICKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + if (is_callable('sodium_crypto_kx')) { + return (string) sodium_crypto_kx( + $my_secret, + $their_public, + $client_public, + $server_public + ); + } + } + if (self::use_fallback('crypto_kx')) { + return (string) call_user_func( + '\\Sodium\\crypto_kx', + $my_secret, + $their_public, + $client_public, + $server_public + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::keyExchange( + $my_secret, + $their_public, + $client_public, + $server_public + ); + } + return ParagonIE_Sodium_Crypto::keyExchange( + $my_secret, + $their_public, + $client_public, + $server_public + ); + } + + /** + * @param string $seed + * @return string + * @throws SodiumException + */ + public static function crypto_kx_seed_keypair($seed) + { + ParagonIE_Sodium_Core_Util::declareScalarType($seed, 'string', 1); + + $seed = (string) $seed; + + if (ParagonIE_Sodium_Core_Util::strlen($seed) !== self::CRYPTO_KX_SEEDBYTES) { + throw new SodiumException('seed must be SODIUM_CRYPTO_KX_SEEDBYTES bytes'); + } + + $sk = self::crypto_generichash($seed, '', self::CRYPTO_KX_SECRETKEYBYTES); + $pk = self::crypto_scalarmult_base($sk); + return $sk . $pk; + } + + /** + * @return string + * @throws Exception + */ + public static function crypto_kx_keypair() + { + $sk = self::randombytes_buf(self::CRYPTO_KX_SECRETKEYBYTES); + $pk = self::crypto_scalarmult_base($sk); + return $sk . $pk; + } + + /** + * @param string $keypair + * @param string $serverPublicKey + * @return array{0: string, 1: string} + * @throws SodiumException + */ + public static function crypto_kx_client_session_keys($keypair, $serverPublicKey) + { + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($serverPublicKey, 'string', 2); + + $keypair = (string) $keypair; + $serverPublicKey = (string) $serverPublicKey; + + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_KX_KEYPAIRBYTES) { + throw new SodiumException('keypair should be SODIUM_CRYPTO_KX_KEYPAIRBYTES bytes'); + } + if (ParagonIE_Sodium_Core_Util::strlen($serverPublicKey) !== self::CRYPTO_KX_PUBLICKEYBYTES) { + throw new SodiumException('public keys must be SODIUM_CRYPTO_KX_PUBLICKEYBYTES bytes'); + } + + $sk = self::crypto_kx_secretkey($keypair); + $pk = self::crypto_kx_publickey($keypair); + $h = self::crypto_generichash_init(null, self::CRYPTO_KX_SESSIONKEYBYTES * 2); + self::crypto_generichash_update($h, self::crypto_scalarmult($sk, $serverPublicKey)); + self::crypto_generichash_update($h, $pk); + self::crypto_generichash_update($h, $serverPublicKey); + $sessionKeys = self::crypto_generichash_final($h, self::CRYPTO_KX_SESSIONKEYBYTES * 2); + return array( + ParagonIE_Sodium_Core_Util::substr( + $sessionKeys, + 0, + self::CRYPTO_KX_SESSIONKEYBYTES + ), + ParagonIE_Sodium_Core_Util::substr( + $sessionKeys, + self::CRYPTO_KX_SESSIONKEYBYTES, + self::CRYPTO_KX_SESSIONKEYBYTES + ) + ); + } + + /** + * @param string $keypair + * @param string $clientPublicKey + * @return array{0: string, 1: string} + * @throws SodiumException + */ + public static function crypto_kx_server_session_keys($keypair, $clientPublicKey) + { + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($clientPublicKey, 'string', 2); + + $keypair = (string) $keypair; + $clientPublicKey = (string) $clientPublicKey; + + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_KX_KEYPAIRBYTES) { + throw new SodiumException('keypair should be SODIUM_CRYPTO_KX_KEYPAIRBYTES bytes'); + } + if (ParagonIE_Sodium_Core_Util::strlen($clientPublicKey) !== self::CRYPTO_KX_PUBLICKEYBYTES) { + throw new SodiumException('public keys must be SODIUM_CRYPTO_KX_PUBLICKEYBYTES bytes'); + } + + $sk = self::crypto_kx_secretkey($keypair); + $pk = self::crypto_kx_publickey($keypair); + $h = self::crypto_generichash_init(null, self::CRYPTO_KX_SESSIONKEYBYTES * 2); + self::crypto_generichash_update($h, self::crypto_scalarmult($sk, $clientPublicKey)); + self::crypto_generichash_update($h, $clientPublicKey); + self::crypto_generichash_update($h, $pk); + $sessionKeys = self::crypto_generichash_final($h, self::CRYPTO_KX_SESSIONKEYBYTES * 2); + return array( + ParagonIE_Sodium_Core_Util::substr( + $sessionKeys, + self::CRYPTO_KX_SESSIONKEYBYTES, + self::CRYPTO_KX_SESSIONKEYBYTES + ), + ParagonIE_Sodium_Core_Util::substr( + $sessionKeys, + 0, + self::CRYPTO_KX_SESSIONKEYBYTES + ) + ); + } + + /** + * @param string $kp + * @return string + * @throws SodiumException + */ + public static function crypto_kx_secretkey($kp) + { + return ParagonIE_Sodium_Core_Util::substr( + $kp, + 0, + self::CRYPTO_KX_SECRETKEYBYTES + ); + } + + /** + * @param string $kp + * @return string + * @throws SodiumException + */ + public static function crypto_kx_publickey($kp) + { + return ParagonIE_Sodium_Core_Util::substr( + $kp, + self::CRYPTO_KX_SECRETKEYBYTES, + self::CRYPTO_KX_PUBLICKEYBYTES + ); + } + + /** + * @param int $outlen + * @param string $passwd + * @param string $salt + * @param int $opslimit + * @param int $memlimit + * @param int|null $alg + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_pwhash($outlen, $passwd, $salt, $opslimit, $memlimit, $alg = null) + { + ParagonIE_Sodium_Core_Util::declareScalarType($outlen, 'int', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($passwd, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($salt, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($opslimit, 'int', 4); + ParagonIE_Sodium_Core_Util::declareScalarType($memlimit, 'int', 5); + + if (self::useNewSodiumAPI()) { + if (!is_null($alg)) { + ParagonIE_Sodium_Core_Util::declareScalarType($alg, 'int', 6); + return sodium_crypto_pwhash($outlen, $passwd, $salt, $opslimit, $memlimit, $alg); + } + return sodium_crypto_pwhash($outlen, $passwd, $salt, $opslimit, $memlimit); + } + if (self::use_fallback('crypto_pwhash')) { + return (string) call_user_func('\\Sodium\\crypto_pwhash', $outlen, $passwd, $salt, $opslimit, $memlimit); + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented, as it is not possible to implement Argon2i with acceptable performance in pure-PHP' + ); + } + + /** + * !Exclusive to sodium_compat! + * + * This returns TRUE if the native crypto_pwhash API is available by libsodium. + * This returns FALSE if only sodium_compat is available. + * + * @return bool + */ + public static function crypto_pwhash_is_available() + { + if (self::useNewSodiumAPI()) { + return true; + } + if (self::use_fallback('crypto_pwhash')) { + return true; + } + return false; + } + + /** + * @param string $passwd + * @param int $opslimit + * @param int $memlimit + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_pwhash_str($passwd, $opslimit, $memlimit) + { + ParagonIE_Sodium_Core_Util::declareScalarType($passwd, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($opslimit, 'int', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($memlimit, 'int', 3); + + if (self::useNewSodiumAPI()) { + return sodium_crypto_pwhash_str($passwd, $opslimit, $memlimit); + } + if (self::use_fallback('crypto_pwhash_str')) { + return (string) call_user_func('\\Sodium\\crypto_pwhash_str', $passwd, $opslimit, $memlimit); + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented, as it is not possible to implement Argon2i with acceptable performance in pure-PHP' + ); + } + + /** + * Do we need to rehash this password? + * + * @param string $hash + * @param int $opslimit + * @param int $memlimit + * @return bool + * @throws SodiumException + */ + public static function crypto_pwhash_str_needs_rehash($hash, $opslimit, $memlimit) + { + ParagonIE_Sodium_Core_Util::declareScalarType($hash, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($opslimit, 'int', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($memlimit, 'int', 3); + + // Just grab the first 4 pieces. + $pieces = explode('$', (string) $hash); + $prefix = implode('$', array_slice($pieces, 0, 4)); + + // Rebuild the expected header. + /** @var int $ops */ + $ops = (int) $opslimit; + /** @var int $mem */ + $mem = (int) $memlimit >> 10; + $encoded = self::CRYPTO_PWHASH_STRPREFIX . 'v=19$m=' . $mem . ',t=' . $ops . ',p=1'; + + // Do they match? If so, we don't need to rehash, so return false. + return !ParagonIE_Sodium_Core_Util::hashEquals($encoded, $prefix); + } + + /** + * @param string $passwd + * @param string $hash + * @return bool + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_pwhash_str_verify($passwd, $hash) + { + ParagonIE_Sodium_Core_Util::declareScalarType($passwd, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($hash, 'string', 2); + + if (self::useNewSodiumAPI()) { + return (bool) sodium_crypto_pwhash_str_verify($passwd, $hash); + } + if (self::use_fallback('crypto_pwhash_str_verify')) { + return (bool) call_user_func('\\Sodium\\crypto_pwhash_str_verify', $passwd, $hash); + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented, as it is not possible to implement Argon2i with acceptable performance in pure-PHP' + ); + } + + /** + * @param int $outlen + * @param string $passwd + * @param string $salt + * @param int $opslimit + * @param int $memlimit + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_pwhash_scryptsalsa208sha256($outlen, $passwd, $salt, $opslimit, $memlimit) + { + ParagonIE_Sodium_Core_Util::declareScalarType($outlen, 'int', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($passwd, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($salt, 'string', 3); + ParagonIE_Sodium_Core_Util::declareScalarType($opslimit, 'int', 4); + ParagonIE_Sodium_Core_Util::declareScalarType($memlimit, 'int', 5); + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_pwhash_scryptsalsa208sha256( + (int) $outlen, + (string) $passwd, + (string) $salt, + (int) $opslimit, + (int) $memlimit + ); + } + if (self::use_fallback('crypto_pwhash_scryptsalsa208sha256')) { + return (string) call_user_func( + '\\Sodium\\crypto_pwhash_scryptsalsa208sha256', + (int) $outlen, + (string) $passwd, + (string) $salt, + (int) $opslimit, + (int) $memlimit + ); + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented, as it is not possible to implement Scrypt with acceptable performance in pure-PHP' + ); + } + + /** + * !Exclusive to sodium_compat! + * + * This returns TRUE if the native crypto_pwhash API is available by libsodium. + * This returns FALSE if only sodium_compat is available. + * + * @return bool + */ + public static function crypto_pwhash_scryptsalsa208sha256_is_available() + { + if (self::useNewSodiumAPI()) { + return true; + } + if (self::use_fallback('crypto_pwhash_scryptsalsa208sha256')) { + return true; + } + return false; + } + + /** + * @param string $passwd + * @param int $opslimit + * @param int $memlimit + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_pwhash_scryptsalsa208sha256_str($passwd, $opslimit, $memlimit) + { + ParagonIE_Sodium_Core_Util::declareScalarType($passwd, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($opslimit, 'int', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($memlimit, 'int', 3); + + if (self::useNewSodiumAPI()) { + return (string) sodium_crypto_pwhash_scryptsalsa208sha256_str( + (string) $passwd, + (int) $opslimit, + (int) $memlimit + ); + } + if (self::use_fallback('crypto_pwhash_scryptsalsa208sha256_str')) { + return (string) call_user_func( + '\\Sodium\\crypto_pwhash_scryptsalsa208sha256_str', + (string) $passwd, + (int) $opslimit, + (int) $memlimit + ); + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented, as it is not possible to implement Scrypt with acceptable performance in pure-PHP' + ); + } + + /** + * @param string $passwd + * @param string $hash + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_pwhash_scryptsalsa208sha256_str_verify($passwd, $hash) + { + ParagonIE_Sodium_Core_Util::declareScalarType($passwd, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($hash, 'string', 2); + + if (self::useNewSodiumAPI()) { + return (bool) sodium_crypto_pwhash_scryptsalsa208sha256_str_verify( + (string) $passwd, + (string) $hash + ); + } + if (self::use_fallback('crypto_pwhash_scryptsalsa208sha256_str_verify')) { + return (bool) call_user_func( + '\\Sodium\\crypto_pwhash_scryptsalsa208sha256_str_verify', + (string) $passwd, + (string) $hash + ); + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented, as it is not possible to implement Scrypt with acceptable performance in pure-PHP' + ); + } + + /** + * Calculate the shared secret between your secret key and your + * recipient's public key. + * + * Algorithm: X25519 (ECDH over Curve25519) + * + * @param string $secretKey + * @param string $publicKey + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_scalarmult($secretKey, $publicKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($publicKey, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_BOX_SECRETKEYBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_SECRETKEYBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($publicKey) !== self::CRYPTO_BOX_PUBLICKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_BOX_PUBLICKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_scalarmult($secretKey, $publicKey); + } + if (self::use_fallback('crypto_scalarmult')) { + return (string) call_user_func('\\Sodium\\crypto_scalarmult', $secretKey, $publicKey); + } + + /* Output validation: Forbid all-zero keys */ + if (ParagonIE_Sodium_Core_Util::hashEquals($secretKey, str_repeat("\0", self::CRYPTO_BOX_SECRETKEYBYTES))) { + throw new SodiumException('Zero secret key is not allowed'); + } + if (ParagonIE_Sodium_Core_Util::hashEquals($publicKey, str_repeat("\0", self::CRYPTO_BOX_PUBLICKEYBYTES))) { + throw new SodiumException('Zero public key is not allowed'); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::scalarmult($secretKey, $publicKey); + } + return ParagonIE_Sodium_Crypto::scalarmult($secretKey, $publicKey); + } + + /** + * Calculate an X25519 public key from an X25519 secret key. + * + * @param string $secretKey + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress TooFewArguments + * @psalm-suppress MixedArgument + */ + public static function crypto_scalarmult_base($secretKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_BOX_SECRETKEYBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_BOX_SECRETKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_scalarmult_base($secretKey); + } + if (self::use_fallback('crypto_scalarmult_base')) { + return (string) call_user_func('\\Sodium\\crypto_scalarmult_base', $secretKey); + } + if (ParagonIE_Sodium_Core_Util::hashEquals($secretKey, str_repeat("\0", self::CRYPTO_BOX_SECRETKEYBYTES))) { + throw new SodiumException('Zero secret key is not allowed'); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::scalarmult_base($secretKey); + } + return ParagonIE_Sodium_Crypto::scalarmult_base($secretKey); + } + + /** + * Authenticated symmetric-key encryption. + * + * Algorithm: XSalsa20-Poly1305 + * + * @param string $plaintext The message you're encrypting + * @param string $nonce A Number to be used Once; must be 24 bytes + * @param string $key Symmetric encryption key + * @return string Ciphertext with Poly1305 MAC + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_secretbox($plaintext, $nonce, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_SECRETBOX_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SECRETBOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_SECRETBOX_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_SECRETBOX_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_secretbox($plaintext, $nonce, $key); + } + if (self::use_fallback('crypto_secretbox')) { + return (string) call_user_func('\\Sodium\\crypto_secretbox', $plaintext, $nonce, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretbox($plaintext, $nonce, $key); + } + return ParagonIE_Sodium_Crypto::secretbox($plaintext, $nonce, $key); + } + + /** + * Decrypts a message previously encrypted with crypto_secretbox(). + * + * @param string $ciphertext Ciphertext with Poly1305 MAC + * @param string $nonce A Number to be used Once; must be 24 bytes + * @param string $key Symmetric encryption key + * @return string Original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_secretbox_open($ciphertext, $nonce, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_SECRETBOX_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SECRETBOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_SECRETBOX_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_SECRETBOX_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + /** + * @psalm-suppress InvalidReturnStatement + * @psalm-suppress FalsableReturnStatement + */ + return sodium_crypto_secretbox_open($ciphertext, $nonce, $key); + } + if (self::use_fallback('crypto_secretbox_open')) { + return call_user_func('\\Sodium\\crypto_secretbox_open', $ciphertext, $nonce, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretbox_open($ciphertext, $nonce, $key); + } + return ParagonIE_Sodium_Crypto::secretbox_open($ciphertext, $nonce, $key); + } + + /** + * Return a secure random key for use with crypto_secretbox + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_secretbox_keygen() + { + return random_bytes(self::CRYPTO_SECRETBOX_KEYBYTES); + } + + /** + * Authenticated symmetric-key encryption. + * + * Algorithm: XChaCha20-Poly1305 + * + * @param string $plaintext The message you're encrypting + * @param string $nonce A Number to be used Once; must be 24 bytes + * @param string $key Symmetric encryption key + * @return string Ciphertext with Poly1305 MAC + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_secretbox_xchacha20poly1305($plaintext, $nonce, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($plaintext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_SECRETBOX_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SECRETBOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_SECRETBOX_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_SECRETBOX_KEYBYTES long.'); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretbox_xchacha20poly1305($plaintext, $nonce, $key); + } + return ParagonIE_Sodium_Crypto::secretbox_xchacha20poly1305($plaintext, $nonce, $key); + } + /** + * Decrypts a message previously encrypted with crypto_secretbox_xchacha20poly1305(). + * + * @param string $ciphertext Ciphertext with Poly1305 MAC + * @param string $nonce A Number to be used Once; must be 24 bytes + * @param string $key Symmetric encryption key + * @return string Original plaintext message + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_secretbox_xchacha20poly1305_open($ciphertext, $nonce, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($ciphertext, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_SECRETBOX_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SECRETBOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_SECRETBOX_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_SECRETBOX_KEYBYTES long.'); + } + + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretbox_xchacha20poly1305_open($ciphertext, $nonce, $key); + } + return ParagonIE_Sodium_Crypto::secretbox_xchacha20poly1305_open($ciphertext, $nonce, $key); + } + + /** + * @param string $key + * @return array Returns a state and a header. + * @throws Exception + * @throws SodiumException + */ + public static function crypto_secretstream_xchacha20poly1305_init_push($key) + { + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretstream_xchacha20poly1305_init_push($key); + } + return ParagonIE_Sodium_Crypto::secretstream_xchacha20poly1305_init_push($key); + } + + /** + * @param string $header + * @param string $key + * @return string Returns a state. + * @throws Exception + */ + public static function crypto_secretstream_xchacha20poly1305_init_pull($header, $key) + { + if (ParagonIE_Sodium_Core_Util::strlen($header) < self::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_HEADERBYTES) { + throw new SodiumException( + 'header size should be SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_HEADERBYTES bytes' + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretstream_xchacha20poly1305_init_pull($key, $header); + } + return ParagonIE_Sodium_Crypto::secretstream_xchacha20poly1305_init_pull($key, $header); + } + + /** + * @param string $state + * @param string $msg + * @param string $aad + * @param int $tag + * @return string + * @throws SodiumException + */ + public static function crypto_secretstream_xchacha20poly1305_push(&$state, $msg, $aad = '', $tag = 0) + { + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretstream_xchacha20poly1305_push( + $state, + $msg, + $aad, + $tag + ); + } + return ParagonIE_Sodium_Crypto::secretstream_xchacha20poly1305_push( + $state, + $msg, + $aad, + $tag + ); + } + + /** + * @param string $state + * @param string $msg + * @param string $aad + * @return bool|array{0: string, 1: int} + * @throws SodiumException + */ + public static function crypto_secretstream_xchacha20poly1305_pull(&$state, $msg, $aad = '') + { + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::secretstream_xchacha20poly1305_pull( + $state, + $msg, + $aad + ); + } + return ParagonIE_Sodium_Crypto::secretstream_xchacha20poly1305_pull( + $state, + $msg, + $aad + ); + } + + /** + * @return string + * @throws Exception + */ + public static function crypto_secretstream_xchacha20poly1305_keygen() + { + return random_bytes(self::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_KEYBYTES); + } + + /** + * @param string $state + * @return void + * @throws SodiumException + */ + public static function crypto_secretstream_xchacha20poly1305_rekey(&$state) + { + if (PHP_INT_SIZE === 4) { + ParagonIE_Sodium_Crypto32::secretstream_xchacha20poly1305_rekey($state); + } else { + ParagonIE_Sodium_Crypto::secretstream_xchacha20poly1305_rekey($state); + } + } + + /** + * Calculates a SipHash-2-4 hash of a message for a given key. + * + * @param string $message Input message + * @param string $key SipHash-2-4 key + * @return string Hash + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_shorthash($message, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_SHORTHASH_KEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SHORTHASH_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_shorthash($message, $key); + } + if (self::use_fallback('crypto_shorthash')) { + return (string) call_user_func('\\Sodium\\crypto_shorthash', $message, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_SipHash::sipHash24($message, $key); + } + return ParagonIE_Sodium_Core_SipHash::sipHash24($message, $key); + } + + /** + * Return a secure random key for use with crypto_shorthash + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_shorthash_keygen() + { + return random_bytes(self::CRYPTO_SHORTHASH_KEYBYTES); + } + + /** + * Returns a signed message. You probably want crypto_sign_detached() + * instead, which only returns the signature. + * + * Algorithm: Ed25519 (EdDSA over Curve25519) + * + * @param string $message Message to be signed. + * @param string $secretKey Secret signing key. + * @return string Signed message (signature is prefixed). + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_sign($message, $secretKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_SIGN_SECRETKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SIGN_SECRETKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign($message, $secretKey); + } + if (self::use_fallback('crypto_sign')) { + return (string) call_user_func('\\Sodium\\crypto_sign', $message, $secretKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::sign($message, $secretKey); + } + return ParagonIE_Sodium_Crypto::sign($message, $secretKey); + } + + /** + * Validates a signed message then returns the message. + * + * @param string $signedMessage A signed message + * @param string $publicKey A public key + * @return string The original message (if the signature is + * valid for this public key) + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress MixedReturnStatement + */ + public static function crypto_sign_open($signedMessage, $publicKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($signedMessage, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($publicKey, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($signedMessage) < self::CRYPTO_SIGN_BYTES) { + throw new SodiumException('Argument 1 must be at least CRYPTO_SIGN_BYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($publicKey) !== self::CRYPTO_SIGN_PUBLICKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SIGN_PUBLICKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + /** + * @psalm-suppress InvalidReturnStatement + * @psalm-suppress FalsableReturnStatement + */ + return sodium_crypto_sign_open($signedMessage, $publicKey); + } + if (self::use_fallback('crypto_sign_open')) { + return call_user_func('\\Sodium\\crypto_sign_open', $signedMessage, $publicKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::sign_open($signedMessage, $publicKey); + } + return ParagonIE_Sodium_Crypto::sign_open($signedMessage, $publicKey); + } + + /** + * Generate a new random Ed25519 keypair. + * + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_sign_keypair() + { + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_keypair(); + } + if (self::use_fallback('crypto_sign_keypair')) { + return (string) call_user_func('\\Sodium\\crypto_sign_keypair'); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_Ed25519::keypair(); + } + return ParagonIE_Sodium_Core_Ed25519::keypair(); + } + + /** + * @param string $sk + * @param string $pk + * @return string + * @throws SodiumException + */ + public static function crypto_sign_keypair_from_secretkey_and_publickey($sk, $pk) + { + ParagonIE_Sodium_Core_Util::declareScalarType($sk, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($pk, 'string', 1); + $sk = (string) $sk; + $pk = (string) $pk; + + if (ParagonIE_Sodium_Core_Util::strlen($sk) !== self::CRYPTO_SIGN_SECRETKEYBYTES) { + throw new SodiumException('secretkey should be SODIUM_CRYPTO_SIGN_SECRETKEYBYTES bytes'); + } + if (ParagonIE_Sodium_Core_Util::strlen($pk) !== self::CRYPTO_SIGN_PUBLICKEYBYTES) { + throw new SodiumException('publickey should be SODIUM_CRYPTO_SIGN_PUBLICKEYBYTES bytes'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_keypair_from_secretkey_and_publickey($sk, $pk); + } + return $sk . $pk; + } + + /** + * Generate an Ed25519 keypair from a seed. + * + * @param string $seed Input seed + * @return string Keypair + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_seed_keypair($seed) + { + ParagonIE_Sodium_Core_Util::declareScalarType($seed, 'string', 1); + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_seed_keypair($seed); + } + if (self::use_fallback('crypto_sign_keypair')) { + return (string) call_user_func('\\Sodium\\crypto_sign_seed_keypair', $seed); + } + $publicKey = ''; + $secretKey = ''; + if (PHP_INT_SIZE === 4) { + ParagonIE_Sodium_Core32_Ed25519::seed_keypair($publicKey, $secretKey, $seed); + } else { + ParagonIE_Sodium_Core_Ed25519::seed_keypair($publicKey, $secretKey, $seed); + } + return $secretKey . $publicKey; + } + + /** + * Extract an Ed25519 public key from an Ed25519 keypair. + * + * @param string $keypair Keypair + * @return string Public key + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_publickey($keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_SIGN_KEYPAIRBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_SIGN_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_publickey($keypair); + } + if (self::use_fallback('crypto_sign_publickey')) { + return (string) call_user_func('\\Sodium\\crypto_sign_publickey', $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_Ed25519::publickey($keypair); + } + return ParagonIE_Sodium_Core_Ed25519::publickey($keypair); + } + + /** + * Calculate an Ed25519 public key from an Ed25519 secret key. + * + * @param string $secretKey Your Ed25519 secret key + * @return string The corresponding Ed25519 public key + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_publickey_from_secretkey($secretKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_SIGN_SECRETKEYBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_SIGN_SECRETKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_publickey_from_secretkey($secretKey); + } + if (self::use_fallback('crypto_sign_publickey_from_secretkey')) { + return (string) call_user_func('\\Sodium\\crypto_sign_publickey_from_secretkey', $secretKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_Ed25519::publickey_from_secretkey($secretKey); + } + return ParagonIE_Sodium_Core_Ed25519::publickey_from_secretkey($secretKey); + } + + /** + * Extract an Ed25519 secret key from an Ed25519 keypair. + * + * @param string $keypair Keypair + * @return string Secret key + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_secretkey($keypair) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($keypair, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== self::CRYPTO_SIGN_KEYPAIRBYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_SIGN_KEYPAIRBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_secretkey($keypair); + } + if (self::use_fallback('crypto_sign_secretkey')) { + return (string) call_user_func('\\Sodium\\crypto_sign_secretkey', $keypair); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_Ed25519::secretkey($keypair); + } + return ParagonIE_Sodium_Core_Ed25519::secretkey($keypair); + } + + /** + * Calculate the Ed25519 signature of a message and return ONLY the signature. + * + * Algorithm: Ed25519 (EdDSA over Curve25519) + * + * @param string $message Message to be signed + * @param string $secretKey Secret signing key + * @return string Digital signature + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_detached($message, $secretKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($secretKey, 'string', 2); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($secretKey) !== self::CRYPTO_SIGN_SECRETKEYBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SIGN_SECRETKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_detached($message, $secretKey); + } + if (self::use_fallback('crypto_sign_detached')) { + return (string) call_user_func('\\Sodium\\crypto_sign_detached', $message, $secretKey); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::sign_detached($message, $secretKey); + } + return ParagonIE_Sodium_Crypto::sign_detached($message, $secretKey); + } + + /** + * Verify the Ed25519 signature of a message. + * + * @param string $signature Digital sginature + * @param string $message Message to be verified + * @param string $publicKey Public key + * @return bool TRUE if this signature is good for this public key; + * FALSE otherwise + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_verify_detached($signature, $message, $publicKey) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($signature, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($publicKey, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($signature) !== self::CRYPTO_SIGN_BYTES) { + throw new SodiumException('Argument 1 must be CRYPTO_SIGN_BYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($publicKey) !== self::CRYPTO_SIGN_PUBLICKEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_SIGN_PUBLICKEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_sign_verify_detached($signature, $message, $publicKey); + } + if (self::use_fallback('crypto_sign_verify_detached')) { + return (bool) call_user_func( + '\\Sodium\\crypto_sign_verify_detached', + $signature, + $message, + $publicKey + ); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Crypto32::sign_verify_detached($signature, $message, $publicKey); + } + return ParagonIE_Sodium_Crypto::sign_verify_detached($signature, $message, $publicKey); + } + + /** + * Convert an Ed25519 public key to a Curve25519 public key + * + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_ed25519_pk_to_curve25519($pk) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($pk, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($pk) < self::CRYPTO_SIGN_PUBLICKEYBYTES) { + throw new SodiumException('Argument 1 must be at least CRYPTO_SIGN_PUBLICKEYBYTES long.'); + } + if (self::useNewSodiumAPI()) { + if (is_callable('crypto_sign_ed25519_pk_to_curve25519')) { + return (string) sodium_crypto_sign_ed25519_pk_to_curve25519($pk); + } + } + if (self::use_fallback('crypto_sign_ed25519_pk_to_curve25519')) { + return (string) call_user_func('\\Sodium\\crypto_sign_ed25519_pk_to_curve25519', $pk); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_Ed25519::pk_to_curve25519($pk); + } + return ParagonIE_Sodium_Core_Ed25519::pk_to_curve25519($pk); + } + + /** + * Convert an Ed25519 secret key to a Curve25519 secret key + * + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_sign_ed25519_sk_to_curve25519($sk) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($sk, 'string', 1); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($sk) < self::CRYPTO_SIGN_SEEDBYTES) { + throw new SodiumException('Argument 1 must be at least CRYPTO_SIGN_SEEDBYTES long.'); + } + if (self::useNewSodiumAPI()) { + if (is_callable('crypto_sign_ed25519_sk_to_curve25519')) { + return sodium_crypto_sign_ed25519_sk_to_curve25519($sk); + } + } + if (self::use_fallback('crypto_sign_ed25519_sk_to_curve25519')) { + return (string) call_user_func('\\Sodium\\crypto_sign_ed25519_sk_to_curve25519', $sk); + } + + $h = hash('sha512', ParagonIE_Sodium_Core_Util::substr($sk, 0, 32), true); + $h[0] = ParagonIE_Sodium_Core_Util::intToChr( + ParagonIE_Sodium_Core_Util::chrToInt($h[0]) & 248 + ); + $h[31] = ParagonIE_Sodium_Core_Util::intToChr( + (ParagonIE_Sodium_Core_Util::chrToInt($h[31]) & 127) | 64 + ); + return ParagonIE_Sodium_Core_Util::substr($h, 0, 32); + } + + /** + * Expand a key and nonce into a keystream of pseudorandom bytes. + * + * @param int $len Number of bytes desired + * @param string $nonce Number to be used Once; must be 24 bytes + * @param string $key XSalsa20 key + * @return string Pseudorandom stream that can be XORed with messages + * to provide encryption (but not authentication; see + * Poly1305 or crypto_auth() for that, which is not + * optional for security) + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_stream($len, $nonce, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($len, 'int', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_STREAM_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SECRETBOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_STREAM_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_STREAM_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_stream($len, $nonce, $key); + } + if (self::use_fallback('crypto_stream')) { + return (string) call_user_func('\\Sodium\\crypto_stream', $len, $nonce, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_XSalsa20::xsalsa20($len, $nonce, $key); + } + return ParagonIE_Sodium_Core_XSalsa20::xsalsa20($len, $nonce, $key); + } + + /** + * DANGER! UNAUTHENTICATED ENCRYPTION! + * + * Unless you are following expert advice, do not used this feature. + * + * Algorithm: XSalsa20 + * + * This DOES NOT provide ciphertext integrity. + * + * @param string $message Plaintext message + * @param string $nonce Number to be used Once; must be 24 bytes + * @param string $key Encryption key + * @return string Encrypted text which is vulnerable to chosen- + * ciphertext attacks unless you implement some + * other mitigation to the ciphertext (i.e. + * Encrypt then MAC) + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function crypto_stream_xor($message, $nonce, $key) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($message, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($nonce, 'string', 2); + ParagonIE_Sodium_Core_Util::declareScalarType($key, 'string', 3); + + /* Input validation: */ + if (ParagonIE_Sodium_Core_Util::strlen($nonce) !== self::CRYPTO_STREAM_NONCEBYTES) { + throw new SodiumException('Argument 2 must be CRYPTO_SECRETBOX_NONCEBYTES long.'); + } + if (ParagonIE_Sodium_Core_Util::strlen($key) !== self::CRYPTO_STREAM_KEYBYTES) { + throw new SodiumException('Argument 3 must be CRYPTO_SECRETBOX_KEYBYTES long.'); + } + + if (self::useNewSodiumAPI()) { + return sodium_crypto_stream_xor($message, $nonce, $key); + } + if (self::use_fallback('crypto_stream_xor')) { + return (string) call_user_func('\\Sodium\\crypto_stream_xor', $message, $nonce, $key); + } + if (PHP_INT_SIZE === 4) { + return ParagonIE_Sodium_Core32_XSalsa20::xsalsa20_xor($message, $nonce, $key); + } + return ParagonIE_Sodium_Core_XSalsa20::xsalsa20_xor($message, $nonce, $key); + } + + /** + * Return a secure random key for use with crypto_stream + * + * @return string + * @throws Exception + * @throws Error + */ + public static function crypto_stream_keygen() + { + return random_bytes(self::CRYPTO_STREAM_KEYBYTES); + } + + /** + * Cache-timing-safe implementation of hex2bin(). + * + * @param string $string Hexadecimal string + * @return string Raw binary string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress TooFewArguments + * @psalm-suppress MixedArgument + */ + public static function hex2bin($string) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($string, 'string', 1); + + if (self::useNewSodiumAPI()) { + if (is_callable('sodium_hex2bin')) { + return (string) sodium_hex2bin($string); + } + } + if (self::use_fallback('hex2bin')) { + return (string) call_user_func('\\Sodium\\hex2bin', $string); + } + return ParagonIE_Sodium_Core_Util::hex2bin($string); + } + + /** + * Increase a string (little endian) + * + * @param string $var + * + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function increment(&$var) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($var, 'string', 1); + + if (self::useNewSodiumAPI()) { + sodium_increment($var); + return; + } + if (self::use_fallback('increment')) { + $func = '\\Sodium\\increment'; + $func($var); + return; + } + + $len = ParagonIE_Sodium_Core_Util::strlen($var); + $c = 1; + $copy = ''; + for ($i = 0; $i < $len; ++$i) { + $c += ParagonIE_Sodium_Core_Util::chrToInt( + ParagonIE_Sodium_Core_Util::substr($var, $i, 1) + ); + $copy .= ParagonIE_Sodium_Core_Util::intToChr($c); + $c >>= 8; + } + $var = $copy; + } + + /** + * The equivalent to the libsodium minor version we aim to be compatible + * with (sans pwhash and memzero). + * + * @return int + */ + public static function library_version_major() + { + if (self::useNewSodiumAPI() && defined('SODIUM_LIBRARY_MAJOR_VERSION')) { + return SODIUM_LIBRARY_MAJOR_VERSION; + } + if (self::use_fallback('library_version_major')) { + /** @psalm-suppress UndefinedFunction */ + return (int) call_user_func('\\Sodium\\library_version_major'); + } + return self::LIBRARY_VERSION_MAJOR; + } + + /** + * The equivalent to the libsodium minor version we aim to be compatible + * with (sans pwhash and memzero). + * + * @return int + */ + public static function library_version_minor() + { + if (self::useNewSodiumAPI() && defined('SODIUM_LIBRARY_MINOR_VERSION')) { + return SODIUM_LIBRARY_MINOR_VERSION; + } + if (self::use_fallback('library_version_minor')) { + /** @psalm-suppress UndefinedFunction */ + return (int) call_user_func('\\Sodium\\library_version_minor'); + } + return self::LIBRARY_VERSION_MINOR; + } + + /** + * Compare two strings. + * + * @param string $left + * @param string $right + * @return int + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + */ + public static function memcmp($left, $right) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($left, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($right, 'string', 2); + + if (self::useNewSodiumAPI()) { + return sodium_memcmp($left, $right); + } + if (self::use_fallback('memcmp')) { + return (int) call_user_func('\\Sodium\\memcmp', $left, $right); + } + /** @var string $left */ + /** @var string $right */ + return ParagonIE_Sodium_Core_Util::memcmp($left, $right); + } + + /** + * It's actually not possible to zero memory buffers in PHP. You need the + * native library for that. + * + * @param string|null $var + * @param-out string|null $var + * + * @return void + * @throws SodiumException (Unless libsodium is installed) + * @throws TypeError + * @psalm-suppress TooFewArguments + */ + public static function memzero(&$var) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($var, 'string', 1); + + if (self::useNewSodiumAPI()) { + /** @psalm-suppress MixedArgument */ + sodium_memzero($var); + return; + } + if (self::use_fallback('memzero')) { + $func = '\\Sodium\\memzero'; + $func($var); + if ($var === null) { + return; + } + } + // This is the best we can do. + throw new SodiumException( + 'This is not implemented in sodium_compat, as it is not possible to securely wipe memory from PHP. ' . + 'To fix this error, make sure libsodium is installed and the PHP extension is enabled.' + ); + } + + /** + * @param string $unpadded + * @param int $blockSize + * @param bool $dontFallback + * @return string + * @throws SodiumException + */ + public static function pad($unpadded, $blockSize, $dontFallback = false) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($unpadded, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($blockSize, 'int', 2); + + $unpadded = (string) $unpadded; + $blockSize = (int) $blockSize; + + if (self::useNewSodiumAPI() && !$dontFallback) { + return (string) sodium_pad($unpadded, $blockSize); + } + + if ($blockSize <= 0) { + throw new SodiumException( + 'block size cannot be less than 1' + ); + } + $unpadded_len = ParagonIE_Sodium_Core_Util::strlen($unpadded); + $xpadlen = ($blockSize - 1); + if (($blockSize & ($blockSize - 1)) === 0) { + $xpadlen -= $unpadded_len & ($blockSize - 1); + } else { + $xpadlen -= $unpadded_len % $blockSize; + } + + $xpadded_len = $unpadded_len + $xpadlen; + $padded = str_repeat("\0", $xpadded_len - 1); + if ($unpadded_len > 0) { + $st = 1; + $i = 0; + $k = $unpadded_len; + for ($j = 0; $j <= $xpadded_len; ++$j) { + $i = (int) $i; + $k = (int) $k; + $st = (int) $st; + if ($j >= $unpadded_len) { + $padded[$j] = "\0"; + } else { + $padded[$j] = $unpadded[$j]; + } + /** @var int $k */ + $k -= $st; + $st = (int) (~( + ( + ( + ($k >> 48) + | + ($k >> 32) + | + ($k >> 16) + | + $k + ) - 1 + ) >> 16 + ) + ) & 1; + $i += $st; + } + } + + $mask = 0; + $tail = $xpadded_len; + for ($i = 0; $i < $blockSize; ++$i) { + # barrier_mask = (unsigned char) + # (((i ^ xpadlen) - 1U) >> ((sizeof(size_t) - 1U) * CHAR_BIT)); + $barrier_mask = (($i ^ $xpadlen) -1) >> ((PHP_INT_SIZE << 3) - 1); + # tail[-i] = (tail[-i] & mask) | (0x80 & barrier_mask); + $padded[$tail - $i] = ParagonIE_Sodium_Core_Util::intToChr( + (ParagonIE_Sodium_Core_Util::chrToInt($padded[$tail - $i]) & $mask) + | + (0x80 & $barrier_mask) + ); + # mask |= barrier_mask; + $mask |= $barrier_mask; + } + return $padded; + } + + /** + * @param string $padded + * @param int $blockSize + * @param bool $dontFallback + * @return string + * @throws SodiumException + */ + public static function unpad($padded, $blockSize, $dontFallback = false) + { + /* Type checks: */ + ParagonIE_Sodium_Core_Util::declareScalarType($padded, 'string', 1); + ParagonIE_Sodium_Core_Util::declareScalarType($blockSize, 'int', 2); + + $padded = (string) $padded; + $blockSize = (int) $blockSize; + + if (self::useNewSodiumAPI() && !$dontFallback) { + return (string) sodium_unpad($padded, $blockSize); + } + if ($blockSize <= 0) { + throw new SodiumException('block size cannot be less than 1'); + } + $padded_len = ParagonIE_Sodium_Core_Util::strlen($padded); + if ($padded_len < $blockSize) { + throw new SodiumException('invalid padding'); + } + + # tail = &padded[padded_len - 1U]; + $tail = $padded_len - 1; + + $acc = 0; + $valid = 0; + $pad_len = 0; + + $found = 0; + for ($i = 0; $i < $blockSize; ++$i) { + # c = tail[-i]; + $c = ParagonIE_Sodium_Core_Util::chrToInt($padded[$tail - $i]); + + # is_barrier = + # (( (acc - 1U) & (pad_len - 1U) & ((c ^ 0x80) - 1U) ) >> 8) & 1U; + $is_barrier = ( + ( + ($acc - 1) & ($pad_len - 1) & (($c ^ 80) - 1) + ) >> 7 + ) & 1; + $is_barrier &= ~$found; + $found |= $is_barrier; + + # acc |= c; + $acc |= $c; + + # pad_len |= i & (1U + ~is_barrier); + $pad_len |= $i & (1 + ~$is_barrier); + + # valid |= (unsigned char) is_barrier; + $valid |= ($is_barrier & 0xff); + } + # unpadded_len = padded_len - 1U - pad_len; + $unpadded_len = $padded_len - 1 - $pad_len; + if ($valid !== 1) { + throw new SodiumException('invalid padding'); + } + return ParagonIE_Sodium_Core_Util::substr($padded, 0, $unpadded_len); + } + + /** + * Will sodium_compat run fast on the current hardware and PHP configuration? + * + * @return bool + */ + public static function polyfill_is_fast() + { + if (extension_loaded('sodium')) { + return true; + } + if (extension_loaded('libsodium')) { + return true; + } + return PHP_INT_SIZE === 8; + } + + /** + * Generate a string of bytes from the kernel's CSPRNG. + * Proudly uses /dev/urandom (if getrandom(2) is not available). + * + * @param int $numBytes + * @return string + * @throws Exception + * @throws TypeError + */ + public static function randombytes_buf($numBytes) + { + /* Type checks: */ + if (!is_int($numBytes)) { + if (is_numeric($numBytes)) { + $numBytes = (int) $numBytes; + } else { + throw new TypeError( + 'Argument 1 must be an integer, ' . gettype($numBytes) . ' given.' + ); + } + } + if (self::use_fallback('randombytes_buf')) { + return (string) call_user_func('\\Sodium\\randombytes_buf', $numBytes); + } + return random_bytes($numBytes); + } + + /** + * Generate an integer between 0 and $range (non-inclusive). + * + * @param int $range + * @return int + * @throws Exception + * @throws Error + * @throws TypeError + */ + public static function randombytes_uniform($range) + { + /* Type checks: */ + if (!is_int($range)) { + if (is_numeric($range)) { + $range = (int) $range; + } else { + throw new TypeError( + 'Argument 1 must be an integer, ' . gettype($range) . ' given.' + ); + } + } + if (self::use_fallback('randombytes_uniform')) { + return (int) call_user_func('\\Sodium\\randombytes_uniform', $range); + } + return random_int(0, $range - 1); + } + + /** + * Generate a random 16-bit integer. + * + * @return int + * @throws Exception + * @throws Error + * @throws TypeError + */ + public static function randombytes_random16() + { + if (self::use_fallback('randombytes_random16')) { + return (int) call_user_func('\\Sodium\\randombytes_random16'); + } + return random_int(0, 65535); + } + + /** + * Runtime testing method for 32-bit platforms. + * + * Usage: If runtime_speed_test() returns FALSE, then our 32-bit + * implementation is to slow to use safely without risking timeouts. + * If this happens, install sodium from PECL to get acceptable + * performance. + * + * @param int $iterations Number of multiplications to attempt + * @param int $maxTimeout Milliseconds + * @return bool TRUE if we're fast enough, FALSE is not + * @throws SodiumException + */ + public static function runtime_speed_test($iterations, $maxTimeout) + { + if (self::polyfill_is_fast()) { + return true; + } + /** @var float $end */ + $end = 0.0; + /** @var float $start */ + $start = microtime(true); + /** @var ParagonIE_Sodium_Core32_Int64 $a */ + $a = ParagonIE_Sodium_Core32_Int64::fromInt(random_int(3, 1 << 16)); + for ($i = 0; $i < $iterations; ++$i) { + /** @var ParagonIE_Sodium_Core32_Int64 $b */ + $b = ParagonIE_Sodium_Core32_Int64::fromInt(random_int(3, 1 << 16)); + $a->mulInt64($b); + } + /** @var float $end */ + $end = microtime(true); + /** @var int $diff */ + $diff = (int) ceil(($end - $start) * 1000); + return $diff < $maxTimeout; + } + + /** + * This emulates libsodium's version_string() function, except ours is + * prefixed with 'polyfill-'. + * + * @return string + * @psalm-suppress MixedInferredReturnType + * @psalm-suppress UndefinedFunction + */ + public static function version_string() + { + if (self::useNewSodiumAPI()) { + return (string) sodium_version_string(); + } + if (self::use_fallback('version_string')) { + return (string) call_user_func('\\Sodium\\version_string'); + } + return (string) self::VERSION_STRING; + } + + /** + * Should we use the libsodium core function instead? + * This is always a good idea, if it's available. (Unless we're in the + * middle of running our unit test suite.) + * + * If ext/libsodium is available, use it. Return TRUE. + * Otherwise, we have to use the code provided herein. Return FALSE. + * + * @param string $sodium_func_name + * + * @return bool + */ + protected static function use_fallback($sodium_func_name = '') + { + static $res = null; + if ($res === null) { + $res = extension_loaded('libsodium') && PHP_VERSION_ID >= 50300; + } + if ($res === false) { + // No libsodium installed + return false; + } + if (self::$disableFallbackForUnitTests) { + // Don't fallback. Use the PHP implementation. + return false; + } + if (!empty($sodium_func_name)) { + return is_callable('\\Sodium\\' . $sodium_func_name); + } + return true; + } + + /** + * Libsodium as implemented in PHP 7.2 + * and/or ext/sodium (via PECL) + * + * @ref https://wiki.php.net/rfc/libsodium + * @return bool + */ + protected static function useNewSodiumAPI() + { + static $res = null; + if ($res === null) { + $res = PHP_VERSION_ID >= 70000 && extension_loaded('sodium'); + } + if (self::$disableFallbackForUnitTests) { + // Don't fallback. Use the PHP implementation. + return false; + } + return (bool) $res; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/BLAKE2b.php b/vendor/paragonie/sodium_compat/src/Core/BLAKE2b.php new file mode 100644 index 000000000..930a0ede3 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/BLAKE2b.php @@ -0,0 +1,789 @@ +> + */ + protected static $sigma = array( + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3), + array( 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4), + array( 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8), + array( 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13), + array( 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9), + array( 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11), + array( 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10), + array( 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5), + array( 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13 , 0), + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3) + ); + + const BLOCKBYTES = 128; + const OUTBYTES = 64; + const KEYBYTES = 64; + + /** + * Turn two 32-bit integers into a fixed array representing a 64-bit integer. + * + * @internal You should not use this directly from another application + * + * @param int $high + * @param int $low + * @return SplFixedArray + * @psalm-suppress MixedAssignment + */ + public static function new64($high, $low) + { + $i64 = new SplFixedArray(2); + $i64[0] = $high & 0xffffffff; + $i64[1] = $low & 0xffffffff; + return $i64; + } + + /** + * Convert an arbitrary number into an SplFixedArray of two 32-bit integers + * that represents a 64-bit integer. + * + * @internal You should not use this directly from another application + * + * @param int $num + * @return SplFixedArray + */ + protected static function to64($num) + { + list($hi, $lo) = self::numericTo64BitInteger($num); + return self::new64($hi, $lo); + } + + /** + * Adds two 64-bit integers together, returning their sum as a SplFixedArray + * containing two 32-bit integers (representing a 64-bit integer). + * + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param SplFixedArray $y + * @return SplFixedArray + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedOperand + */ + protected static function add64($x, $y) + { + $l = ($x[1] + $y[1]) & 0xffffffff; + return self::new64( + (int) ($x[0] + $y[0] + ( + ($l < $x[1]) ? 1 : 0 + )), + (int) $l + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param SplFixedArray $y + * @param SplFixedArray $z + * @return SplFixedArray + */ + protected static function add364($x, $y, $z) + { + return self::add64($x, self::add64($y, $z)); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param SplFixedArray $y + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + */ + protected static function xor64(SplFixedArray $x, SplFixedArray $y) + { + if (!is_numeric($x[0])) { + throw new SodiumException('x[0] is not an integer'); + } + if (!is_numeric($x[1])) { + throw new SodiumException('x[1] is not an integer'); + } + if (!is_numeric($y[0])) { + throw new SodiumException('y[0] is not an integer'); + } + if (!is_numeric($y[1])) { + throw new SodiumException('y[1] is not an integer'); + } + return self::new64( + (int) (($x[0] ^ $y[0]) & 0xffffffff), + (int) (($x[1] ^ $y[1]) & 0xffffffff) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param int $c + * @return SplFixedArray + * @psalm-suppress MixedAssignment + */ + public static function rotr64($x, $c) + { + if ($c >= 64) { + $c %= 64; + } + if ($c >= 32) { + /** @var int $tmp */ + $tmp = $x[0]; + $x[0] = $x[1]; + $x[1] = $tmp; + $c -= 32; + } + if ($c === 0) { + return $x; + } + + $l0 = 0; + $c = 64 - $c; + + if ($c < 32) { + /** @var int $h0 */ + $h0 = ((int) ($x[0]) << $c) | ( + ( + (int) ($x[1]) & ((1 << $c) - 1) + << + (32 - $c) + ) >> (32 - $c) + ); + /** @var int $l0 */ + $l0 = (int) ($x[1]) << $c; + } else { + /** @var int $h0 */ + $h0 = (int) ($x[1]) << ($c - 32); + } + + $h1 = 0; + $c1 = 64 - $c; + + if ($c1 < 32) { + /** @var int $h1 */ + $h1 = (int) ($x[0]) >> $c1; + /** @var int $l1 */ + $l1 = ((int) ($x[1]) >> $c1) | ((int) ($x[0]) & ((1 << $c1) - 1)) << (32 - $c1); + } else { + /** @var int $l1 */ + $l1 = (int) ($x[0]) >> ($c1 - 32); + } + + return self::new64($h0 | $h1, $l0 | $l1); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @return int + * @psalm-suppress MixedOperand + */ + protected static function flatten64($x) + { + return (int) ($x[0] * 4294967296 + $x[1]); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param int $i + * @return SplFixedArray + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayOffset + */ + protected static function load64(SplFixedArray $x, $i) + { + /** @var int $l */ + $l = (int) ($x[$i]) + | ((int) ($x[$i+1]) << 8) + | ((int) ($x[$i+2]) << 16) + | ((int) ($x[$i+3]) << 24); + /** @var int $h */ + $h = (int) ($x[$i+4]) + | ((int) ($x[$i+5]) << 8) + | ((int) ($x[$i+6]) << 16) + | ((int) ($x[$i+7]) << 24); + return self::new64($h, $l); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param int $i + * @param SplFixedArray $u + * @return void + * @psalm-suppress MixedAssignment + */ + protected static function store64(SplFixedArray $x, $i, SplFixedArray $u) + { + $maxLength = $x->getSize() - 1; + for ($j = 0; $j < 8; ++$j) { + /* + [0, 1, 2, 3, 4, 5, 6, 7] + ... becomes ... + [0, 0, 0, 0, 1, 1, 1, 1] + */ + /** @var int $uIdx */ + $uIdx = ((7 - $j) & 4) >> 2; + $x[$i] = ((int) ($u[$uIdx]) & 0xff); + if (++$i > $maxLength) { + return; + } + /** @psalm-suppress MixedOperand */ + $u[$uIdx] >>= 8; + } + } + + /** + * This just sets the $iv static variable. + * + * @internal You should not use this directly from another application + * + * @return void + */ + public static function pseudoConstructor() + { + static $called = false; + if ($called) { + return; + } + self::$iv = new SplFixedArray(8); + self::$iv[0] = self::new64(0x6a09e667, 0xf3bcc908); + self::$iv[1] = self::new64(0xbb67ae85, 0x84caa73b); + self::$iv[2] = self::new64(0x3c6ef372, 0xfe94f82b); + self::$iv[3] = self::new64(0xa54ff53a, 0x5f1d36f1); + self::$iv[4] = self::new64(0x510e527f, 0xade682d1); + self::$iv[5] = self::new64(0x9b05688c, 0x2b3e6c1f); + self::$iv[6] = self::new64(0x1f83d9ab, 0xfb41bd6b); + self::$iv[7] = self::new64(0x5be0cd19, 0x137e2179); + + $called = true; + } + + /** + * Returns a fresh BLAKE2 context. + * + * @internal You should not use this directly from another application + * + * @return SplFixedArray + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + */ + protected static function context() + { + $ctx = new SplFixedArray(6); + $ctx[0] = new SplFixedArray(8); // h + $ctx[1] = new SplFixedArray(2); // t + $ctx[2] = new SplFixedArray(2); // f + $ctx[3] = new SplFixedArray(256); // buf + $ctx[4] = 0; // buflen + $ctx[5] = 0; // last_node (uint8_t) + + for ($i = 8; $i--;) { + $ctx[0][$i] = self::$iv[$i]; + } + for ($i = 256; $i--;) { + $ctx[3][$i] = 0; + } + + $zero = self::new64(0, 0); + $ctx[1][0] = $zero; + $ctx[1][1] = $zero; + $ctx[2][0] = $zero; + $ctx[2][1] = $zero; + + return $ctx; + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param SplFixedArray $buf + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + */ + protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) + { + $m = new SplFixedArray(16); + $v = new SplFixedArray(16); + + for ($i = 16; $i--;) { + $m[$i] = self::load64($buf, $i << 3); + } + + for ($i = 8; $i--;) { + $v[$i] = $ctx[0][$i]; + } + + $v[ 8] = self::$iv[0]; + $v[ 9] = self::$iv[1]; + $v[10] = self::$iv[2]; + $v[11] = self::$iv[3]; + + $v[12] = self::xor64($ctx[1][0], self::$iv[4]); + $v[13] = self::xor64($ctx[1][1], self::$iv[5]); + $v[14] = self::xor64($ctx[2][0], self::$iv[6]); + $v[15] = self::xor64($ctx[2][1], self::$iv[7]); + + for ($r = 0; $r < 12; ++$r) { + $v = self::G($r, 0, 0, 4, 8, 12, $v, $m); + $v = self::G($r, 1, 1, 5, 9, 13, $v, $m); + $v = self::G($r, 2, 2, 6, 10, 14, $v, $m); + $v = self::G($r, 3, 3, 7, 11, 15, $v, $m); + $v = self::G($r, 4, 0, 5, 10, 15, $v, $m); + $v = self::G($r, 5, 1, 6, 11, 12, $v, $m); + $v = self::G($r, 6, 2, 7, 8, 13, $v, $m); + $v = self::G($r, 7, 3, 4, 9, 14, $v, $m); + } + + for ($i = 8; $i--;) { + $ctx[0][$i] = self::xor64( + $ctx[0][$i], self::xor64($v[$i], $v[$i+8]) + ); + } + } + + /** + * @internal You should not use this directly from another application + * + * @param int $r + * @param int $i + * @param int $a + * @param int $b + * @param int $c + * @param int $d + * @param SplFixedArray $v + * @param SplFixedArray $m + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayOffset + */ + public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) + { + $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]); + $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32); + $v[$c] = self::add64($v[$c], $v[$d]); + $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 24); + $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][($i << 1) + 1]]); + $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 16); + $v[$c] = self::add64($v[$c], $v[$d]); + $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 63); + return $v; + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param int $inc + * @return void + * @throws SodiumException + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + */ + public static function increment_counter($ctx, $inc) + { + if ($inc < 0) { + throw new SodiumException('Increasing by a negative number makes no sense.'); + } + $t = self::to64($inc); + # S->t is $ctx[1] in our implementation + + # S->t[0] = ( uint64_t )( t >> 0 ); + $ctx[1][0] = self::add64($ctx[1][0], $t); + + # S->t[1] += ( S->t[0] < inc ); + if (self::flatten64($ctx[1][0]) < $inc) { + $ctx[1][1] = self::add64($ctx[1][1], self::to64(1)); + } + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param SplFixedArray $p + * @param int $plen + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + * @psalm-suppress MixedOperand + */ + public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) + { + self::pseudoConstructor(); + + $offset = 0; + while ($plen > 0) { + $left = $ctx[4]; + $fill = 256 - $left; + + if ($plen > $fill) { + # memcpy( S->buf + left, in, fill ); /* Fill buffer */ + for ($i = $fill; $i--;) { + $ctx[3][$i + $left] = $p[$i + $offset]; + } + + # S->buflen += fill; + $ctx[4] += $fill; + + # blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES ); + self::increment_counter($ctx, 128); + + # blake2b_compress( S, S->buf ); /* Compress */ + self::compress($ctx, $ctx[3]); + + # memcpy( S->buf, S->buf + BLAKE2B_BLOCKBYTES, BLAKE2B_BLOCKBYTES ); /* Shift buffer left */ + for ($i = 128; $i--;) { + $ctx[3][$i] = $ctx[3][$i + 128]; + } + + # S->buflen -= BLAKE2B_BLOCKBYTES; + $ctx[4] -= 128; + + # in += fill; + $offset += $fill; + + # inlen -= fill; + $plen -= $fill; + } else { + for ($i = $plen; $i--;) { + $ctx[3][$i + $left] = $p[$i + $offset]; + } + $ctx[4] += $plen; + $offset += $plen; + $plen -= $plen; + } + } + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param SplFixedArray $out + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + * @psalm-suppress MixedOperand + */ + public static function finish(SplFixedArray $ctx, SplFixedArray $out) + { + self::pseudoConstructor(); + if ($ctx[4] > 128) { + self::increment_counter($ctx, 128); + self::compress($ctx, $ctx[3]); + $ctx[4] -= 128; + if ($ctx[4] > 128) { + throw new SodiumException('Failed to assert that buflen <= 128 bytes'); + } + for ($i = $ctx[4]; $i--;) { + $ctx[3][$i] = $ctx[3][$i + 128]; + } + } + + self::increment_counter($ctx, $ctx[4]); + $ctx[2][0] = self::new64(0xffffffff, 0xffffffff); + + for ($i = 256 - $ctx[4]; $i--;) { + $ctx[3][$i+$ctx[4]] = 0; + } + + self::compress($ctx, $ctx[3]); + + $i = (int) (($out->getSize() - 1) / 8); + for (; $i >= 0; --$i) { + self::store64($out, $i << 3, $ctx[0][$i]); + } + return $out; + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray|null $key + * @param int $outlen + * @param SplFixedArray|null $salt + * @param SplFixedArray|null $personal + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + */ + public static function init( + $key = null, + $outlen = 64, + $salt = null, + $personal = null + ) { + self::pseudoConstructor(); + $klen = 0; + + if ($key !== null) { + if (count($key) > 64) { + throw new SodiumException('Invalid key size'); + } + $klen = count($key); + } + + if ($outlen > 64) { + throw new SodiumException('Invalid output size'); + } + + $ctx = self::context(); + + $p = new SplFixedArray(64); + // Zero our param buffer... + for ($i = 64; --$i;) { + $p[$i] = 0; + } + + $p[0] = $outlen; // digest_length + $p[1] = $klen; // key_length + $p[2] = 1; // fanout + $p[3] = 1; // depth + + if ($salt instanceof SplFixedArray) { + // salt: [32] through [47] + for ($i = 0; $i < 16; ++$i) { + $p[32 + $i] = (int) $salt[$i]; + } + } + if ($personal instanceof SplFixedArray) { + // personal: [48] through [63] + for ($i = 0; $i < 16; ++$i) { + $p[48 + $i] = (int) $personal[$i]; + } + } + + $ctx[0][0] = self::xor64( + $ctx[0][0], + self::load64($p, 0) + ); + if ($salt instanceof SplFixedArray || $personal instanceof SplFixedArray) { + // We need to do what blake2b_init_param() does: + for ($i = 1; $i < 8; ++$i) { + $ctx[0][$i] = self::xor64( + $ctx[0][$i], + self::load64($p, $i << 3) + ); + } + } + + if ($klen > 0 && $key instanceof SplFixedArray) { + $block = new SplFixedArray(128); + for ($i = 128; $i--;) { + $block[$i] = 0; + } + for ($i = $klen; $i--;) { + $block[$i] = $key[$i]; + } + self::update($ctx, $block, 128); + $ctx[4] = 128; + } + + return $ctx; + } + + /** + * Convert a string into an SplFixedArray of integers + * + * @internal You should not use this directly from another application + * + * @param string $str + * @return SplFixedArray + */ + public static function stringToSplFixedArray($str = '') + { + $values = unpack('C*', $str); + return SplFixedArray::fromArray(array_values($values)); + } + + /** + * Convert an SplFixedArray of integers into a string + * + * @internal You should not use this directly from another application + * + * @param SplFixedArray $a + * @return string + * @throws TypeError + */ + public static function SplFixedArrayToString(SplFixedArray $a) + { + /** + * @var array $arr + */ + $arr = $a->toArray(); + $c = $a->count(); + array_unshift($arr, str_repeat('C', $c)); + return (string) (call_user_func_array('pack', $arr)); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @return string + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + * @psalm-suppress MixedMethodCall + */ + public static function contextToString(SplFixedArray $ctx) + { + $str = ''; + /** @var array> $ctxA */ + $ctxA = $ctx[0]->toArray(); + + # uint64_t h[8]; + for ($i = 0; $i < 8; ++$i) { + $str .= self::store32_le($ctxA[$i][1]); + $str .= self::store32_le($ctxA[$i][0]); + } + + # uint64_t t[2]; + # uint64_t f[2]; + for ($i = 1; $i < 3; ++$i) { + $ctxA = $ctx[$i]->toArray(); + $str .= self::store32_le($ctxA[0][1]); + $str .= self::store32_le($ctxA[0][0]); + $str .= self::store32_le($ctxA[1][1]); + $str .= self::store32_le($ctxA[1][0]); + } + + # uint8_t buf[2 * 128]; + $str .= self::SplFixedArrayToString($ctx[3]); + + /** @var int $ctx4 */ + $ctx4 = (int) $ctx[4]; + + # size_t buflen; + $str .= implode('', array( + self::intToChr($ctx4 & 0xff), + self::intToChr(($ctx4 >> 8) & 0xff), + self::intToChr(($ctx4 >> 16) & 0xff), + self::intToChr(($ctx4 >> 24) & 0xff), + self::intToChr(($ctx4 >> 32) & 0xff), + self::intToChr(($ctx4 >> 40) & 0xff), + self::intToChr(($ctx4 >> 48) & 0xff), + self::intToChr(($ctx4 >> 56) & 0xff) + )); + # uint8_t last_node; + return $str . self::intToChr($ctx[5]) . str_repeat("\x00", 23); + } + + /** + * Creates an SplFixedArray containing other SplFixedArray elements, from + * a string (compatible with \Sodium\crypto_generichash_{init, update, final}) + * + * @internal You should not use this directly from another application + * + * @param string $string + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAssignment + */ + public static function stringToContext($string) + { + $ctx = self::context(); + + # uint64_t h[8]; + for ($i = 0; $i < 8; ++$i) { + $ctx[0][$i] = SplFixedArray::fromArray( + array( + self::load_4( + self::substr($string, (($i << 3) + 4), 4) + ), + self::load_4( + self::substr($string, (($i << 3) + 0), 4) + ) + ) + ); + } + + # uint64_t t[2]; + # uint64_t f[2]; + for ($i = 1; $i < 3; ++$i) { + $ctx[$i][1] = SplFixedArray::fromArray( + array( + self::load_4(self::substr($string, 76 + (($i - 1) << 4), 4)), + self::load_4(self::substr($string, 72 + (($i - 1) << 4), 4)) + ) + ); + $ctx[$i][0] = SplFixedArray::fromArray( + array( + self::load_4(self::substr($string, 68 + (($i - 1) << 4), 4)), + self::load_4(self::substr($string, 64 + (($i - 1) << 4), 4)) + ) + ); + } + + # uint8_t buf[2 * 128]; + $ctx[3] = self::stringToSplFixedArray(self::substr($string, 96, 256)); + + # uint8_t buf[2 * 128]; + $int = 0; + for ($i = 0; $i < 8; ++$i) { + $int |= self::chrToInt($string[352 + $i]) << ($i << 3); + } + $ctx[4] = $int; + + return $ctx; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Base64/Common.php b/vendor/paragonie/sodium_compat/src/Core/Base64/Common.php new file mode 100644 index 000000000..94b2e8f33 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Base64/Common.php @@ -0,0 +1,213 @@ + $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, 3)); + $b0 = $chunk[1]; + $b1 = $chunk[2]; + $b2 = $chunk[3]; + + $dest .= + self::encode6Bits( $b0 >> 2 ) . + self::encode6Bits((($b0 << 4) | ($b1 >> 4)) & 63) . + self::encode6Bits((($b1 << 2) | ($b2 >> 6)) & 63) . + self::encode6Bits( $b2 & 63); + } + // The last chunk, which may have padding: + if ($i < $srcLen) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, $srcLen - $i)); + $b0 = $chunk[1]; + if ($i + 1 < $srcLen) { + $b1 = $chunk[2]; + $dest .= + self::encode6Bits($b0 >> 2) . + self::encode6Bits((($b0 << 4) | ($b1 >> 4)) & 63) . + self::encode6Bits(($b1 << 2) & 63); + if ($pad) { + $dest .= '='; + } + } else { + $dest .= + self::encode6Bits( $b0 >> 2) . + self::encode6Bits(($b0 << 4) & 63); + if ($pad) { + $dest .= '=='; + } + } + } + return $dest; + } + + /** + * decode from base64 into binary + * + * Base64 character set "./[A-Z][a-z][0-9]" + * + * @param string $src + * @param bool $strictPadding + * @return string + * @throws RangeException + * @throws TypeError + * @psalm-suppress RedundantCondition + */ + public static function decode($src, $strictPadding = false) + { + // Remove padding + $srcLen = ParagonIE_Sodium_Core_Util::strlen($src); + if ($srcLen === 0) { + return ''; + } + + if ($strictPadding) { + if (($srcLen & 3) === 0) { + if ($src[$srcLen - 1] === '=') { + $srcLen--; + if ($src[$srcLen - 1] === '=') { + $srcLen--; + } + } + } + if (($srcLen & 3) === 1) { + throw new RangeException( + 'Incorrect padding' + ); + } + if ($src[$srcLen - 1] === '=') { + throw new RangeException( + 'Incorrect padding' + ); + } + } else { + $src = rtrim($src, '='); + $srcLen = ParagonIE_Sodium_Core_Util::strlen($src); + } + + $err = 0; + $dest = ''; + // Main loop (no padding): + for ($i = 0; $i + 4 <= $srcLen; $i += 4) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, 4)); + $c0 = self::decode6Bits($chunk[1]); + $c1 = self::decode6Bits($chunk[2]); + $c2 = self::decode6Bits($chunk[3]); + $c3 = self::decode6Bits($chunk[4]); + + $dest .= pack( + 'CCC', + ((($c0 << 2) | ($c1 >> 4)) & 0xff), + ((($c1 << 4) | ($c2 >> 2)) & 0xff), + ((($c2 << 6) | $c3 ) & 0xff) + ); + $err |= ($c0 | $c1 | $c2 | $c3) >> 8; + } + // The last chunk, which may have padding: + if ($i < $srcLen) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, $srcLen - $i)); + $c0 = self::decode6Bits($chunk[1]); + + if ($i + 2 < $srcLen) { + $c1 = self::decode6Bits($chunk[2]); + $c2 = self::decode6Bits($chunk[3]); + $dest .= pack( + 'CC', + ((($c0 << 2) | ($c1 >> 4)) & 0xff), + ((($c1 << 4) | ($c2 >> 2)) & 0xff) + ); + $err |= ($c0 | $c1 | $c2) >> 8; + } elseif ($i + 1 < $srcLen) { + $c1 = self::decode6Bits($chunk[2]); + $dest .= pack( + 'C', + ((($c0 << 2) | ($c1 >> 4)) & 0xff) + ); + $err |= ($c0 | $c1) >> 8; + } elseif ($i < $srcLen && $strictPadding) { + $err |= 1; + } + } + /** @var bool $check */ + $check = ($err === 0); + if (!$check) { + throw new RangeException( + 'Base64::decode() only expects characters in the correct base64 alphabet' + ); + } + return $dest; + } + + /** + * Uses bitwise operators instead of table-lookups to turn 6-bit integers + * into 8-bit integers. + * + * Base64 character set: + * [A-Z] [a-z] [0-9] + / + * 0x41-0x5a, 0x61-0x7a, 0x30-0x39, 0x2b, 0x2f + * + * @param int $src + * @return int + */ + abstract protected static function decode6Bits($src); + + /** + * Uses bitwise operators instead of table-lookups to turn 8-bit integers + * into 6-bit integers. + * + * @param int $src + * @return string + */ + abstract protected static function encode6Bits($src); +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Base64/Original.php b/vendor/paragonie/sodium_compat/src/Core/Base64/Original.php new file mode 100644 index 000000000..dc939eeaf --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Base64/Original.php @@ -0,0 +1,248 @@ + $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, 3)); + $b0 = $chunk[1]; + $b1 = $chunk[2]; + $b2 = $chunk[3]; + + $dest .= + self::encode6Bits( $b0 >> 2 ) . + self::encode6Bits((($b0 << 4) | ($b1 >> 4)) & 63) . + self::encode6Bits((($b1 << 2) | ($b2 >> 6)) & 63) . + self::encode6Bits( $b2 & 63); + } + // The last chunk, which may have padding: + if ($i < $srcLen) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, $srcLen - $i)); + $b0 = $chunk[1]; + if ($i + 1 < $srcLen) { + $b1 = $chunk[2]; + $dest .= + self::encode6Bits($b0 >> 2) . + self::encode6Bits((($b0 << 4) | ($b1 >> 4)) & 63) . + self::encode6Bits(($b1 << 2) & 63); + if ($pad) { + $dest .= '='; + } + } else { + $dest .= + self::encode6Bits( $b0 >> 2) . + self::encode6Bits(($b0 << 4) & 63); + if ($pad) { + $dest .= '=='; + } + } + } + return $dest; + } + + /** + * decode from base64 into binary + * + * Base64 character set "./[A-Z][a-z][0-9]" + * + * @param string $src + * @param bool $strictPadding + * @return string + * @throws RangeException + * @throws TypeError + * @psalm-suppress RedundantCondition + */ + public static function decode($src, $strictPadding = false) + { + // Remove padding + $srcLen = ParagonIE_Sodium_Core_Util::strlen($src); + if ($srcLen === 0) { + return ''; + } + + if ($strictPadding) { + if (($srcLen & 3) === 0) { + if ($src[$srcLen - 1] === '=') { + $srcLen--; + if ($src[$srcLen - 1] === '=') { + $srcLen--; + } + } + } + if (($srcLen & 3) === 1) { + throw new RangeException( + 'Incorrect padding' + ); + } + if ($src[$srcLen - 1] === '=') { + throw new RangeException( + 'Incorrect padding' + ); + } + } else { + $src = rtrim($src, '='); + $srcLen = ParagonIE_Sodium_Core_Util::strlen($src); + } + + $err = 0; + $dest = ''; + // Main loop (no padding): + for ($i = 0; $i + 4 <= $srcLen; $i += 4) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, 4)); + $c0 = self::decode6Bits($chunk[1]); + $c1 = self::decode6Bits($chunk[2]); + $c2 = self::decode6Bits($chunk[3]); + $c3 = self::decode6Bits($chunk[4]); + + $dest .= pack( + 'CCC', + ((($c0 << 2) | ($c1 >> 4)) & 0xff), + ((($c1 << 4) | ($c2 >> 2)) & 0xff), + ((($c2 << 6) | $c3) & 0xff) + ); + $err |= ($c0 | $c1 | $c2 | $c3) >> 8; + } + // The last chunk, which may have padding: + if ($i < $srcLen) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, $srcLen - $i)); + $c0 = self::decode6Bits($chunk[1]); + + if ($i + 2 < $srcLen) { + $c1 = self::decode6Bits($chunk[2]); + $c2 = self::decode6Bits($chunk[3]); + $dest .= pack( + 'CC', + ((($c0 << 2) | ($c1 >> 4)) & 0xff), + ((($c1 << 4) | ($c2 >> 2)) & 0xff) + ); + $err |= ($c0 | $c1 | $c2) >> 8; + } elseif ($i + 1 < $srcLen) { + $c1 = self::decode6Bits($chunk[2]); + $dest .= pack( + 'C', + ((($c0 << 2) | ($c1 >> 4)) & 0xff) + ); + $err |= ($c0 | $c1) >> 8; + } elseif ($i < $srcLen && $strictPadding) { + $err |= 1; + } + } + /** @var bool $check */ + $check = ($err === 0); + if (!$check) { + throw new RangeException( + 'Base64::decode() only expects characters in the correct base64 alphabet' + ); + } + return $dest; + } + // COPY ParagonIE_Sodium_Core_Base64_Common ENDING HERE + + /** + * Uses bitwise operators instead of table-lookups to turn 6-bit integers + * into 8-bit integers. + * + * Base64 character set: + * [A-Z] [a-z] [0-9] + / + * 0x41-0x5a, 0x61-0x7a, 0x30-0x39, 0x2b, 0x2f + * + * @param int $src + * @return int + */ + protected static function decode6Bits($src) + { + $ret = -1; + + // if ($src > 0x40 && $src < 0x5b) $ret += $src - 0x41 + 1; // -64 + $ret += (((0x40 - $src) & ($src - 0x5b)) >> 8) & ($src - 64); + + // if ($src > 0x60 && $src < 0x7b) $ret += $src - 0x61 + 26 + 1; // -70 + $ret += (((0x60 - $src) & ($src - 0x7b)) >> 8) & ($src - 70); + + // if ($src > 0x2f && $src < 0x3a) $ret += $src - 0x30 + 52 + 1; // 5 + $ret += (((0x2f - $src) & ($src - 0x3a)) >> 8) & ($src + 5); + + // if ($src == 0x2b) $ret += 62 + 1; + $ret += (((0x2a - $src) & ($src - 0x2c)) >> 8) & 63; + + // if ($src == 0x2f) ret += 63 + 1; + $ret += (((0x2e - $src) & ($src - 0x30)) >> 8) & 64; + + return $ret; + } + + /** + * Uses bitwise operators instead of table-lookups to turn 8-bit integers + * into 6-bit integers. + * + * @param int $src + * @return string + */ + protected static function encode6Bits($src) + { + $diff = 0x41; + + // if ($src > 25) $diff += 0x61 - 0x41 - 26; // 6 + $diff += ((25 - $src) >> 8) & 6; + + // if ($src > 51) $diff += 0x30 - 0x61 - 26; // -75 + $diff -= ((51 - $src) >> 8) & 75; + + // if ($src > 61) $diff += 0x2b - 0x30 - 10; // -15 + $diff -= ((61 - $src) >> 8) & 15; + + // if ($src > 62) $diff += 0x2f - 0x2b - 1; // 3 + $diff += ((62 - $src) >> 8) & 3; + + return pack('C', $src + $diff); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Base64/UrlSafe.php b/vendor/paragonie/sodium_compat/src/Core/Base64/UrlSafe.php new file mode 100644 index 000000000..64bf53b85 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Base64/UrlSafe.php @@ -0,0 +1,247 @@ + $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, 3)); + $b0 = $chunk[1]; + $b1 = $chunk[2]; + $b2 = $chunk[3]; + + $dest .= + self::encode6Bits( $b0 >> 2 ) . + self::encode6Bits((($b0 << 4) | ($b1 >> 4)) & 63) . + self::encode6Bits((($b1 << 2) | ($b2 >> 6)) & 63) . + self::encode6Bits( $b2 & 63); + } + // The last chunk, which may have padding: + if ($i < $srcLen) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, $srcLen - $i)); + $b0 = $chunk[1]; + if ($i + 1 < $srcLen) { + $b1 = $chunk[2]; + $dest .= + self::encode6Bits($b0 >> 2) . + self::encode6Bits((($b0 << 4) | ($b1 >> 4)) & 63) . + self::encode6Bits(($b1 << 2) & 63); + if ($pad) { + $dest .= '='; + } + } else { + $dest .= + self::encode6Bits( $b0 >> 2) . + self::encode6Bits(($b0 << 4) & 63); + if ($pad) { + $dest .= '=='; + } + } + } + return $dest; + } + + /** + * decode from base64 into binary + * + * Base64 character set "./[A-Z][a-z][0-9]" + * + * @param string $src + * @param bool $strictPadding + * @return string + * @throws RangeException + * @throws TypeError + * @psalm-suppress RedundantCondition + */ + public static function decode($src, $strictPadding = false) + { + // Remove padding + $srcLen = ParagonIE_Sodium_Core_Util::strlen($src); + if ($srcLen === 0) { + return ''; + } + + if ($strictPadding) { + if (($srcLen & 3) === 0) { + if ($src[$srcLen - 1] === '=') { + $srcLen--; + if ($src[$srcLen - 1] === '=') { + $srcLen--; + } + } + } + if (($srcLen & 3) === 1) { + throw new RangeException( + 'Incorrect padding' + ); + } + if ($src[$srcLen - 1] === '=') { + throw new RangeException( + 'Incorrect padding' + ); + } + } else { + $src = rtrim($src, '='); + $srcLen = ParagonIE_Sodium_Core_Util::strlen($src); + } + + $err = 0; + $dest = ''; + // Main loop (no padding): + for ($i = 0; $i + 4 <= $srcLen; $i += 4) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, 4)); + $c0 = self::decode6Bits($chunk[1]); + $c1 = self::decode6Bits($chunk[2]); + $c2 = self::decode6Bits($chunk[3]); + $c3 = self::decode6Bits($chunk[4]); + + $dest .= pack( + 'CCC', + ((($c0 << 2) | ($c1 >> 4)) & 0xff), + ((($c1 << 4) | ($c2 >> 2)) & 0xff), + ((($c2 << 6) | $c3) & 0xff) + ); + $err |= ($c0 | $c1 | $c2 | $c3) >> 8; + } + // The last chunk, which may have padding: + if ($i < $srcLen) { + /** @var array $chunk */ + $chunk = unpack('C*', ParagonIE_Sodium_Core_Util::substr($src, $i, $srcLen - $i)); + $c0 = self::decode6Bits($chunk[1]); + + if ($i + 2 < $srcLen) { + $c1 = self::decode6Bits($chunk[2]); + $c2 = self::decode6Bits($chunk[3]); + $dest .= pack( + 'CC', + ((($c0 << 2) | ($c1 >> 4)) & 0xff), + ((($c1 << 4) | ($c2 >> 2)) & 0xff) + ); + $err |= ($c0 | $c1 | $c2) >> 8; + } elseif ($i + 1 < $srcLen) { + $c1 = self::decode6Bits($chunk[2]); + $dest .= pack( + 'C', + ((($c0 << 2) | ($c1 >> 4)) & 0xff) + ); + $err |= ($c0 | $c1) >> 8; + } elseif ($i < $srcLen && $strictPadding) { + $err |= 1; + } + } + /** @var bool $check */ + $check = ($err === 0); + if (!$check) { + throw new RangeException( + 'Base64::decode() only expects characters in the correct base64 alphabet' + ); + } + return $dest; + } + // COPY ParagonIE_Sodium_Core_Base64_Common ENDING HERE + /** + * Uses bitwise operators instead of table-lookups to turn 6-bit integers + * into 8-bit integers. + * + * Base64 character set: + * [A-Z] [a-z] [0-9] + / + * 0x41-0x5a, 0x61-0x7a, 0x30-0x39, 0x2b, 0x2f + * + * @param int $src + * @return int + */ + protected static function decode6Bits($src) + { + $ret = -1; + + // if ($src > 0x40 && $src < 0x5b) $ret += $src - 0x41 + 1; // -64 + $ret += (((0x40 - $src) & ($src - 0x5b)) >> 8) & ($src - 64); + + // if ($src > 0x60 && $src < 0x7b) $ret += $src - 0x61 + 26 + 1; // -70 + $ret += (((0x60 - $src) & ($src - 0x7b)) >> 8) & ($src - 70); + + // if ($src > 0x2f && $src < 0x3a) $ret += $src - 0x30 + 52 + 1; // 5 + $ret += (((0x2f - $src) & ($src - 0x3a)) >> 8) & ($src + 5); + + // if ($src == 0x2c) $ret += 62 + 1; + $ret += (((0x2c - $src) & ($src - 0x2e)) >> 8) & 63; + + // if ($src == 0x5f) ret += 63 + 1; + $ret += (((0x5e - $src) & ($src - 0x60)) >> 8) & 64; + + return $ret; + } + + /** + * Uses bitwise operators instead of table-lookups to turn 8-bit integers + * into 6-bit integers. + * + * @param int $src + * @return string + */ + protected static function encode6Bits($src) + { + $diff = 0x41; + + // if ($src > 25) $diff += 0x61 - 0x41 - 26; // 6 + $diff += ((25 - $src) >> 8) & 6; + + // if ($src > 51) $diff += 0x30 - 0x61 - 26; // -75 + $diff -= ((51 - $src) >> 8) & 75; + + // if ($src > 61) $diff += 0x2d - 0x30 - 10; // -13 + $diff -= ((61 - $src) >> 8) & 13; + + // if ($src > 62) $diff += 0x5f - 0x2b - 1; // 3 + $diff += ((62 - $src) >> 8) & 49; + + return pack('C', $src + $diff); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/ChaCha20.php b/vendor/paragonie/sodium_compat/src/Core/ChaCha20.php new file mode 100644 index 000000000..806010c7f --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/ChaCha20.php @@ -0,0 +1,395 @@ +> (32 - $n)) + ) + ); + } + + /** + * The ChaCha20 quarter round function. Works on four 32-bit integers. + * + * @internal You should not use this directly from another application + * + * @param int $a + * @param int $b + * @param int $c + * @param int $d + * @return array + */ + protected static function quarterRound($a, $b, $c, $d) + { + # a = PLUS(a,b); d = ROTATE(XOR(d,a),16); + /** @var int $a */ + $a = ($a + $b) & 0xffffffff; + $d = self::rotate($d ^ $a, 16); + + # c = PLUS(c,d); b = ROTATE(XOR(b,c),12); + /** @var int $c */ + $c = ($c + $d) & 0xffffffff; + $b = self::rotate($b ^ $c, 12); + + # a = PLUS(a,b); d = ROTATE(XOR(d,a), 8); + /** @var int $a */ + $a = ($a + $b) & 0xffffffff; + $d = self::rotate($d ^ $a, 8); + + # c = PLUS(c,d); b = ROTATE(XOR(b,c), 7); + /** @var int $c */ + $c = ($c + $d) & 0xffffffff; + $b = self::rotate($b ^ $c, 7); + return array((int) $a, (int) $b, (int) $c, (int) $d); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_ChaCha20_Ctx $ctx + * @param string $message + * + * @return string + * @throws TypeError + * @throws SodiumException + */ + public static function encryptBytes( + ParagonIE_Sodium_Core_ChaCha20_Ctx $ctx, + $message = '' + ) { + $bytes = self::strlen($message); + + /* + j0 = ctx->input[0]; + j1 = ctx->input[1]; + j2 = ctx->input[2]; + j3 = ctx->input[3]; + j4 = ctx->input[4]; + j5 = ctx->input[5]; + j6 = ctx->input[6]; + j7 = ctx->input[7]; + j8 = ctx->input[8]; + j9 = ctx->input[9]; + j10 = ctx->input[10]; + j11 = ctx->input[11]; + j12 = ctx->input[12]; + j13 = ctx->input[13]; + j14 = ctx->input[14]; + j15 = ctx->input[15]; + */ + $j0 = (int) $ctx[0]; + $j1 = (int) $ctx[1]; + $j2 = (int) $ctx[2]; + $j3 = (int) $ctx[3]; + $j4 = (int) $ctx[4]; + $j5 = (int) $ctx[5]; + $j6 = (int) $ctx[6]; + $j7 = (int) $ctx[7]; + $j8 = (int) $ctx[8]; + $j9 = (int) $ctx[9]; + $j10 = (int) $ctx[10]; + $j11 = (int) $ctx[11]; + $j12 = (int) $ctx[12]; + $j13 = (int) $ctx[13]; + $j14 = (int) $ctx[14]; + $j15 = (int) $ctx[15]; + + $c = ''; + for (;;) { + if ($bytes < 64) { + $message .= str_repeat("\x00", 64 - $bytes); + } + + $x0 = (int) $j0; + $x1 = (int) $j1; + $x2 = (int) $j2; + $x3 = (int) $j3; + $x4 = (int) $j4; + $x5 = (int) $j5; + $x6 = (int) $j6; + $x7 = (int) $j7; + $x8 = (int) $j8; + $x9 = (int) $j9; + $x10 = (int) $j10; + $x11 = (int) $j11; + $x12 = (int) $j12; + $x13 = (int) $j13; + $x14 = (int) $j14; + $x15 = (int) $j15; + + # for (i = 20; i > 0; i -= 2) { + for ($i = 20; $i > 0; $i -= 2) { + # QUARTERROUND( x0, x4, x8, x12) + list($x0, $x4, $x8, $x12) = self::quarterRound($x0, $x4, $x8, $x12); + + # QUARTERROUND( x1, x5, x9, x13) + list($x1, $x5, $x9, $x13) = self::quarterRound($x1, $x5, $x9, $x13); + + # QUARTERROUND( x2, x6, x10, x14) + list($x2, $x6, $x10, $x14) = self::quarterRound($x2, $x6, $x10, $x14); + + # QUARTERROUND( x3, x7, x11, x15) + list($x3, $x7, $x11, $x15) = self::quarterRound($x3, $x7, $x11, $x15); + + # QUARTERROUND( x0, x5, x10, x15) + list($x0, $x5, $x10, $x15) = self::quarterRound($x0, $x5, $x10, $x15); + + # QUARTERROUND( x1, x6, x11, x12) + list($x1, $x6, $x11, $x12) = self::quarterRound($x1, $x6, $x11, $x12); + + # QUARTERROUND( x2, x7, x8, x13) + list($x2, $x7, $x8, $x13) = self::quarterRound($x2, $x7, $x8, $x13); + + # QUARTERROUND( x3, x4, x9, x14) + list($x3, $x4, $x9, $x14) = self::quarterRound($x3, $x4, $x9, $x14); + } + /* + x0 = PLUS(x0, j0); + x1 = PLUS(x1, j1); + x2 = PLUS(x2, j2); + x3 = PLUS(x3, j3); + x4 = PLUS(x4, j4); + x5 = PLUS(x5, j5); + x6 = PLUS(x6, j6); + x7 = PLUS(x7, j7); + x8 = PLUS(x8, j8); + x9 = PLUS(x9, j9); + x10 = PLUS(x10, j10); + x11 = PLUS(x11, j11); + x12 = PLUS(x12, j12); + x13 = PLUS(x13, j13); + x14 = PLUS(x14, j14); + x15 = PLUS(x15, j15); + */ + /** @var int $x0 */ + $x0 = ($x0 & 0xffffffff) + $j0; + /** @var int $x1 */ + $x1 = ($x1 & 0xffffffff) + $j1; + /** @var int $x2 */ + $x2 = ($x2 & 0xffffffff) + $j2; + /** @var int $x3 */ + $x3 = ($x3 & 0xffffffff) + $j3; + /** @var int $x4 */ + $x4 = ($x4 & 0xffffffff) + $j4; + /** @var int $x5 */ + $x5 = ($x5 & 0xffffffff) + $j5; + /** @var int $x6 */ + $x6 = ($x6 & 0xffffffff) + $j6; + /** @var int $x7 */ + $x7 = ($x7 & 0xffffffff) + $j7; + /** @var int $x8 */ + $x8 = ($x8 & 0xffffffff) + $j8; + /** @var int $x9 */ + $x9 = ($x9 & 0xffffffff) + $j9; + /** @var int $x10 */ + $x10 = ($x10 & 0xffffffff) + $j10; + /** @var int $x11 */ + $x11 = ($x11 & 0xffffffff) + $j11; + /** @var int $x12 */ + $x12 = ($x12 & 0xffffffff) + $j12; + /** @var int $x13 */ + $x13 = ($x13 & 0xffffffff) + $j13; + /** @var int $x14 */ + $x14 = ($x14 & 0xffffffff) + $j14; + /** @var int $x15 */ + $x15 = ($x15 & 0xffffffff) + $j15; + + /* + x0 = XOR(x0, LOAD32_LE(m + 0)); + x1 = XOR(x1, LOAD32_LE(m + 4)); + x2 = XOR(x2, LOAD32_LE(m + 8)); + x3 = XOR(x3, LOAD32_LE(m + 12)); + x4 = XOR(x4, LOAD32_LE(m + 16)); + x5 = XOR(x5, LOAD32_LE(m + 20)); + x6 = XOR(x6, LOAD32_LE(m + 24)); + x7 = XOR(x7, LOAD32_LE(m + 28)); + x8 = XOR(x8, LOAD32_LE(m + 32)); + x9 = XOR(x9, LOAD32_LE(m + 36)); + x10 = XOR(x10, LOAD32_LE(m + 40)); + x11 = XOR(x11, LOAD32_LE(m + 44)); + x12 = XOR(x12, LOAD32_LE(m + 48)); + x13 = XOR(x13, LOAD32_LE(m + 52)); + x14 = XOR(x14, LOAD32_LE(m + 56)); + x15 = XOR(x15, LOAD32_LE(m + 60)); + */ + $x0 ^= self::load_4(self::substr($message, 0, 4)); + $x1 ^= self::load_4(self::substr($message, 4, 4)); + $x2 ^= self::load_4(self::substr($message, 8, 4)); + $x3 ^= self::load_4(self::substr($message, 12, 4)); + $x4 ^= self::load_4(self::substr($message, 16, 4)); + $x5 ^= self::load_4(self::substr($message, 20, 4)); + $x6 ^= self::load_4(self::substr($message, 24, 4)); + $x7 ^= self::load_4(self::substr($message, 28, 4)); + $x8 ^= self::load_4(self::substr($message, 32, 4)); + $x9 ^= self::load_4(self::substr($message, 36, 4)); + $x10 ^= self::load_4(self::substr($message, 40, 4)); + $x11 ^= self::load_4(self::substr($message, 44, 4)); + $x12 ^= self::load_4(self::substr($message, 48, 4)); + $x13 ^= self::load_4(self::substr($message, 52, 4)); + $x14 ^= self::load_4(self::substr($message, 56, 4)); + $x15 ^= self::load_4(self::substr($message, 60, 4)); + + /* + j12 = PLUSONE(j12); + if (!j12) { + j13 = PLUSONE(j13); + } + */ + ++$j12; + if ($j12 & 0xf0000000) { + throw new SodiumException('Overflow'); + } + + /* + STORE32_LE(c + 0, x0); + STORE32_LE(c + 4, x1); + STORE32_LE(c + 8, x2); + STORE32_LE(c + 12, x3); + STORE32_LE(c + 16, x4); + STORE32_LE(c + 20, x5); + STORE32_LE(c + 24, x6); + STORE32_LE(c + 28, x7); + STORE32_LE(c + 32, x8); + STORE32_LE(c + 36, x9); + STORE32_LE(c + 40, x10); + STORE32_LE(c + 44, x11); + STORE32_LE(c + 48, x12); + STORE32_LE(c + 52, x13); + STORE32_LE(c + 56, x14); + STORE32_LE(c + 60, x15); + */ + $block = self::store32_le((int) ($x0 & 0xffffffff)) . + self::store32_le((int) ($x1 & 0xffffffff)) . + self::store32_le((int) ($x2 & 0xffffffff)) . + self::store32_le((int) ($x3 & 0xffffffff)) . + self::store32_le((int) ($x4 & 0xffffffff)) . + self::store32_le((int) ($x5 & 0xffffffff)) . + self::store32_le((int) ($x6 & 0xffffffff)) . + self::store32_le((int) ($x7 & 0xffffffff)) . + self::store32_le((int) ($x8 & 0xffffffff)) . + self::store32_le((int) ($x9 & 0xffffffff)) . + self::store32_le((int) ($x10 & 0xffffffff)) . + self::store32_le((int) ($x11 & 0xffffffff)) . + self::store32_le((int) ($x12 & 0xffffffff)) . + self::store32_le((int) ($x13 & 0xffffffff)) . + self::store32_le((int) ($x14 & 0xffffffff)) . + self::store32_le((int) ($x15 & 0xffffffff)); + + /* Partial block */ + if ($bytes < 64) { + $c .= self::substr($block, 0, $bytes); + break; + } + + /* Full block */ + $c .= $block; + $bytes -= 64; + if ($bytes <= 0) { + break; + } + $message = self::substr($message, 64); + } + /* end for(;;) loop */ + + $ctx[12] = $j12; + $ctx[13] = $j13; + return $c; + } + + /** + * @internal You should not use this directly from another application + * + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function stream($len = 64, $nonce = '', $key = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core_ChaCha20_Ctx($key, $nonce), + str_repeat("\x00", $len) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ietfStream($len, $nonce = '', $key = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core_ChaCha20_IetfCtx($key, $nonce), + str_repeat("\x00", $len) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $nonce + * @param string $key + * @param string $ic + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ietfStreamXorIc($message, $nonce = '', $key = '', $ic = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core_ChaCha20_IetfCtx($key, $nonce, $ic), + $message + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $nonce + * @param string $key + * @param string $ic + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function streamXorIc($message, $nonce = '', $key = '', $ic = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core_ChaCha20_Ctx($key, $nonce, $ic), + $message + ); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/ChaCha20/Ctx.php b/vendor/paragonie/sodium_compat/src/Core/ChaCha20/Ctx.php new file mode 100644 index 000000000..47a42b70d --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/ChaCha20/Ctx.php @@ -0,0 +1,119 @@ + + */ + protected $container; + + /** + * ParagonIE_Sodium_Core_ChaCha20_Ctx constructor. + * + * @internal You should not use this directly from another application + * + * @param string $key ChaCha20 key. + * @param string $iv Initialization Vector (a.k.a. nonce). + * @param string $counter The initial counter value. + * Defaults to 8 0x00 bytes. + * @throws InvalidArgumentException + * @throws TypeError + */ + public function __construct($key = '', $iv = '', $counter = '') + { + if (self::strlen($key) !== 32) { + throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.'); + } + if (self::strlen($iv) !== 8) { + throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.'); + } + $this->container = new SplFixedArray(16); + + /* "expand 32-byte k" as per ChaCha20 spec */ + $this->container[0] = 0x61707865; + $this->container[1] = 0x3320646e; + $this->container[2] = 0x79622d32; + $this->container[3] = 0x6b206574; + $this->container[4] = self::load_4(self::substr($key, 0, 4)); + $this->container[5] = self::load_4(self::substr($key, 4, 4)); + $this->container[6] = self::load_4(self::substr($key, 8, 4)); + $this->container[7] = self::load_4(self::substr($key, 12, 4)); + $this->container[8] = self::load_4(self::substr($key, 16, 4)); + $this->container[9] = self::load_4(self::substr($key, 20, 4)); + $this->container[10] = self::load_4(self::substr($key, 24, 4)); + $this->container[11] = self::load_4(self::substr($key, 28, 4)); + + if (empty($counter)) { + $this->container[12] = 0; + $this->container[13] = 0; + } else { + $this->container[12] = self::load_4(self::substr($counter, 0, 4)); + $this->container[13] = self::load_4(self::substr($counter, 4, 4)); + } + $this->container[14] = self::load_4(self::substr($iv, 0, 4)); + $this->container[15] = self::load_4(self::substr($iv, 4, 4)); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @param int $value + * @return void + * @psalm-suppress MixedArrayOffset + */ + public function offsetSet($offset, $value) + { + if (!is_int($offset)) { + throw new InvalidArgumentException('Expected an integer'); + } + if (!is_int($value)) { + throw new InvalidArgumentException('Expected an integer'); + } + $this->container[$offset] = $value; + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return bool + */ + public function offsetExists($offset) + { + return isset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return void + * @psalm-suppress MixedArrayOffset + */ + public function offsetUnset($offset) + { + unset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return mixed|null + * @psalm-suppress MixedArrayOffset + */ + public function offsetGet($offset) + { + return isset($this->container[$offset]) + ? $this->container[$offset] + : null; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/ChaCha20/IetfCtx.php b/vendor/paragonie/sodium_compat/src/Core/ChaCha20/IetfCtx.php new file mode 100644 index 000000000..4d63b9004 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/ChaCha20/IetfCtx.php @@ -0,0 +1,38 @@ +container[12] = self::load_4(self::substr($counter, 0, 4)); + } + $this->container[13] = self::load_4(self::substr($iv, 0, 4)); + $this->container[14] = self::load_4(self::substr($iv, 4, 4)); + $this->container[15] = self::load_4(self::substr($iv, 8, 4)); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519.php new file mode 100644 index 000000000..4402f9170 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519.php @@ -0,0 +1,3002 @@ + $arr */ + $arr = array(); + for ($i = 0; $i < 10; ++$i) { + $arr[$i] = (int) ($f[$i] + $g[$i]); + } + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($arr); + } + + /** + * Constant-time conditional move. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core_Curve25519_Fe $g + * @param int $b + * @return ParagonIE_Sodium_Core_Curve25519_Fe + * @psalm-suppress MixedAssignment + */ + public static function fe_cmov( + ParagonIE_Sodium_Core_Curve25519_Fe $f, + ParagonIE_Sodium_Core_Curve25519_Fe $g, + $b = 0 + ) { + /** @var array $h */ + $h = array(); + $b *= -1; + for ($i = 0; $i < 10; ++$i) { + /** @var int $x */ + $x = (($f[$i] ^ $g[$i]) & $b); + $h[$i] = (int) ((int) ($f[$i]) ^ $x); + } + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h); + } + + /** + * Create a copy of a field element. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + $h = clone $f; + return $h; + } + + /** + * Give: 32-byte string. + * Receive: A field element object to use for internal calculations. + * + * @internal You should not use this directly from another application + * + * @param string $s + * @return ParagonIE_Sodium_Core_Curve25519_Fe + * @throws RangeException + * @throws TypeError + */ + public static function fe_frombytes($s) + { + if (self::strlen($s) !== 32) { + throw new RangeException('Expected a 32-byte string.'); + } + /** @var int $h0 */ + $h0 = self::load_4($s); + /** @var int $h1 */ + $h1 = self::load_3(self::substr($s, 4, 3)) << 6; + /** @var int $h2 */ + $h2 = self::load_3(self::substr($s, 7, 3)) << 5; + /** @var int $h3 */ + $h3 = self::load_3(self::substr($s, 10, 3)) << 3; + /** @var int $h4 */ + $h4 = self::load_3(self::substr($s, 13, 3)) << 2; + /** @var int $h5 */ + $h5 = self::load_4(self::substr($s, 16, 4)); + /** @var int $h6 */ + $h6 = self::load_3(self::substr($s, 20, 3)) << 7; + /** @var int $h7 */ + $h7 = self::load_3(self::substr($s, 23, 3)) << 5; + /** @var int $h8 */ + $h8 = self::load_3(self::substr($s, 26, 3)) << 4; + /** @var int $h9 */ + $h9 = (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2; + + /** @var int $carry9 */ + $carry9 = ($h9 + (1 << 24)) >> 25; + $h0 += self::mul($carry9, 19, 5); + $h9 -= $carry9 << 25; + /** @var int $carry1 */ + $carry1 = ($h1 + (1 << 24)) >> 25; + $h2 += $carry1; + $h1 -= $carry1 << 25; + /** @var int $carry3 */ + $carry3 = ($h3 + (1 << 24)) >> 25; + $h4 += $carry3; + $h3 -= $carry3 << 25; + /** @var int $carry5 */ + $carry5 = ($h5 + (1 << 24)) >> 25; + $h6 += $carry5; + $h5 -= $carry5 << 25; + /** @var int $carry7 */ + $carry7 = ($h7 + (1 << 24)) >> 25; + $h8 += $carry7; + $h7 -= $carry7 << 25; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + /** @var int $carry2 */ + $carry2 = ($h2 + (1 << 25)) >> 26; + $h3 += $carry2; + $h2 -= $carry2 << 26; + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + /** @var int $carry6 */ + $carry6 = ($h6 + (1 << 25)) >> 26; + $h7 += $carry6; + $h6 -= $carry6 << 26; + /** @var int $carry8 */ + $carry8 = ($h8 + (1 << 25)) >> 26; + $h9 += $carry8; + $h8 -= $carry8 << 26; + + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( + array( + (int) $h0, + (int) $h1, + (int) $h2, + (int) $h3, + (int) $h4, + (int) $h5, + (int) $h6, + (int) $h7, + (int) $h8, + (int) $h9 + ) + ); + } + + /** + * Convert a field element to a byte string. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $h + * @return string + */ + public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h) + { + /** @var int $h0 */ + $h0 = (int) $h[0]; + /** @var int $h1 */ + $h1 = (int) $h[1]; + /** @var int $h2 */ + $h2 = (int) $h[2]; + /** @var int $h3 */ + $h3 = (int) $h[3]; + /** @var int $h4 */ + $h4 = (int) $h[4]; + /** @var int $h5 */ + $h5 = (int) $h[5]; + /** @var int $h6 */ + $h6 = (int) $h[6]; + /** @var int $h7 */ + $h7 = (int) $h[7]; + /** @var int $h8 */ + $h8 = (int) $h[8]; + /** @var int $h9 */ + $h9 = (int) $h[9]; + + /** @var int $q */ + $q = (self::mul($h9, 19, 5) + (1 << 24)) >> 25; + /** @var int $q */ + $q = ($h0 + $q) >> 26; + /** @var int $q */ + $q = ($h1 + $q) >> 25; + /** @var int $q */ + $q = ($h2 + $q) >> 26; + /** @var int $q */ + $q = ($h3 + $q) >> 25; + /** @var int $q */ + $q = ($h4 + $q) >> 26; + /** @var int $q */ + $q = ($h5 + $q) >> 25; + /** @var int $q */ + $q = ($h6 + $q) >> 26; + /** @var int $q */ + $q = ($h7 + $q) >> 25; + /** @var int $q */ + $q = ($h8 + $q) >> 26; + /** @var int $q */ + $q = ($h9 + $q) >> 25; + + $h0 += self::mul($q, 19, 5); + + /** @var int $carry0 */ + $carry0 = $h0 >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + /** @var int $carry1 */ + $carry1 = $h1 >> 25; + $h2 += $carry1; + $h1 -= $carry1 << 25; + /** @var int $carry2 */ + $carry2 = $h2 >> 26; + $h3 += $carry2; + $h2 -= $carry2 << 26; + /** @var int $carry3 */ + $carry3 = $h3 >> 25; + $h4 += $carry3; + $h3 -= $carry3 << 25; + /** @var int $carry4 */ + $carry4 = $h4 >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + /** @var int $carry5 */ + $carry5 = $h5 >> 25; + $h6 += $carry5; + $h5 -= $carry5 << 25; + /** @var int $carry6 */ + $carry6 = $h6 >> 26; + $h7 += $carry6; + $h6 -= $carry6 << 26; + /** @var int $carry7 */ + $carry7 = $h7 >> 25; + $h8 += $carry7; + $h7 -= $carry7 << 25; + /** @var int $carry8 */ + $carry8 = $h8 >> 26; + $h9 += $carry8; + $h8 -= $carry8 << 26; + /** @var int $carry9 */ + $carry9 = $h9 >> 25; + $h9 -= $carry9 << 25; + + /** + * @var array + */ + $s = array( + (int) (($h0 >> 0) & 0xff), + (int) (($h0 >> 8) & 0xff), + (int) (($h0 >> 16) & 0xff), + (int) ((($h0 >> 24) | ($h1 << 2)) & 0xff), + (int) (($h1 >> 6) & 0xff), + (int) (($h1 >> 14) & 0xff), + (int) ((($h1 >> 22) | ($h2 << 3)) & 0xff), + (int) (($h2 >> 5) & 0xff), + (int) (($h2 >> 13) & 0xff), + (int) ((($h2 >> 21) | ($h3 << 5)) & 0xff), + (int) (($h3 >> 3) & 0xff), + (int) (($h3 >> 11) & 0xff), + (int) ((($h3 >> 19) | ($h4 << 6)) & 0xff), + (int) (($h4 >> 2) & 0xff), + (int) (($h4 >> 10) & 0xff), + (int) (($h4 >> 18) & 0xff), + (int) (($h5 >> 0) & 0xff), + (int) (($h5 >> 8) & 0xff), + (int) (($h5 >> 16) & 0xff), + (int) ((($h5 >> 24) | ($h6 << 1)) & 0xff), + (int) (($h6 >> 7) & 0xff), + (int) (($h6 >> 15) & 0xff), + (int) ((($h6 >> 23) | ($h7 << 3)) & 0xff), + (int) (($h7 >> 5) & 0xff), + (int) (($h7 >> 13) & 0xff), + (int) ((($h7 >> 21) | ($h8 << 4)) & 0xff), + (int) (($h8 >> 4) & 0xff), + (int) (($h8 >> 12) & 0xff), + (int) ((($h8 >> 20) | ($h9 << 6)) & 0xff), + (int) (($h9 >> 2) & 0xff), + (int) (($h9 >> 10) & 0xff), + (int) (($h9 >> 18) & 0xff) + ); + return self::intArrayToString($s); + } + + /** + * Is a field element negative? (1 = yes, 0 = no. Used in calculations.) + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return int + * @throws SodiumException + * @throws TypeError + */ + public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + $str = self::fe_tobytes($f); + return (int) (self::chrToInt($str[0]) & 1); + } + + /** + * Returns 0 if this field element results in all NUL bytes. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + static $zero; + if ($zero === null) { + $zero = str_repeat("\x00", 32); + } + /** @var string $zero */ + /** @var string $str */ + $str = self::fe_tobytes($f); + return !self::verify_32($str, (string) $zero); + } + + /** + * Multiply two field elements + * + * h = f * g + * + * @internal You should not use this directly from another application + * + * @security Is multiplication a source of timing leaks? If so, can we do + * anything to prevent that from happening? + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core_Curve25519_Fe $g + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_mul( + ParagonIE_Sodium_Core_Curve25519_Fe $f, + ParagonIE_Sodium_Core_Curve25519_Fe $g + ) { + /** @var int $f0 */ + $f0 = $f[0]; + /** @var int $f1 */ + $f1 = $f[1]; + /** @var int $f2 */ + $f2 = $f[2]; + /** @var int $f3 */ + $f3 = $f[3]; + /** @var int $f4 */ + $f4 = $f[4]; + /** @var int $f5 */ + $f5 = $f[5]; + /** @var int $f6 */ + $f6 = $f[6]; + /** @var int $f7 */ + $f7 = $f[7]; + /** @var int $f8 */ + $f8 = $f[8]; + /** @var int $f9 */ + $f9 = $f[9]; + /** @var int $g0 */ + $g0 = $g[0]; + /** @var int $g1 */ + $g1 = $g[1]; + /** @var int $g2 */ + $g2 = $g[2]; + /** @var int $g3 */ + $g3 = $g[3]; + /** @var int $g4 */ + $g4 = $g[4]; + /** @var int $g5 */ + $g5 = $g[5]; + /** @var int $g6 */ + $g6 = $g[6]; + /** @var int $g7 */ + $g7 = $g[7]; + /** @var int $g8 */ + $g8 = $g[8]; + /** @var int $g9 */ + $g9 = $g[9]; + $g1_19 = self::mul($g1, 19, 5); + $g2_19 = self::mul($g2, 19, 5); + $g3_19 = self::mul($g3, 19, 5); + $g4_19 = self::mul($g4, 19, 5); + $g5_19 = self::mul($g5, 19, 5); + $g6_19 = self::mul($g6, 19, 5); + $g7_19 = self::mul($g7, 19, 5); + $g8_19 = self::mul($g8, 19, 5); + $g9_19 = self::mul($g9, 19, 5); + /** @var int $f1_2 */ + $f1_2 = $f1 << 1; + /** @var int $f3_2 */ + $f3_2 = $f3 << 1; + /** @var int $f5_2 */ + $f5_2 = $f5 << 1; + /** @var int $f7_2 */ + $f7_2 = $f7 << 1; + /** @var int $f9_2 */ + $f9_2 = $f9 << 1; + $f0g0 = self::mul($f0, $g0, 26); + $f0g1 = self::mul($f0, $g1, 25); + $f0g2 = self::mul($f0, $g2, 26); + $f0g3 = self::mul($f0, $g3, 25); + $f0g4 = self::mul($f0, $g4, 26); + $f0g5 = self::mul($f0, $g5, 25); + $f0g6 = self::mul($f0, $g6, 26); + $f0g7 = self::mul($f0, $g7, 25); + $f0g8 = self::mul($f0, $g8, 26); + $f0g9 = self::mul($f0, $g9, 26); + $f1g0 = self::mul($f1, $g0, 26); + $f1g1_2 = self::mul($f1_2, $g1, 25); + $f1g2 = self::mul($f1, $g2, 26); + $f1g3_2 = self::mul($f1_2, $g3, 25); + $f1g4 = self::mul($f1, $g4, 26); + $f1g5_2 = self::mul($f1_2, $g5, 25); + $f1g6 = self::mul($f1, $g6, 26); + $f1g7_2 = self::mul($f1_2, $g7, 25); + $f1g8 = self::mul($f1, $g8, 26); + $f1g9_38 = self::mul($g9_19, $f1_2, 26); + $f2g0 = self::mul($f2, $g0, 26); + $f2g1 = self::mul($f2, $g1, 25); + $f2g2 = self::mul($f2, $g2, 26); + $f2g3 = self::mul($f2, $g3, 25); + $f2g4 = self::mul($f2, $g4, 26); + $f2g5 = self::mul($f2, $g5, 25); + $f2g6 = self::mul($f2, $g6, 26); + $f2g7 = self::mul($f2, $g7, 25); + $f2g8_19 = self::mul($g8_19, $f2, 26); + $f2g9_19 = self::mul($g9_19, $f2, 26); + $f3g0 = self::mul($f3, $g0, 26); + $f3g1_2 = self::mul($f3_2, $g1, 25); + $f3g2 = self::mul($f3, $g2, 26); + $f3g3_2 = self::mul($f3_2, $g3, 25); + $f3g4 = self::mul($f3, $g4, 26); + $f3g5_2 = self::mul($f3_2, $g5, 25); + $f3g6 = self::mul($f3, $g6, 26); + $f3g7_38 = self::mul($g7_19, $f3_2, 26); + $f3g8_19 = self::mul($g8_19, $f3, 25); + $f3g9_38 = self::mul($g9_19, $f3_2, 26); + $f4g0 = self::mul($f4, $g0, 26); + $f4g1 = self::mul($f4, $g1, 25); + $f4g2 = self::mul($f4, $g2, 26); + $f4g3 = self::mul($f4, $g3, 25); + $f4g4 = self::mul($f4, $g4, 26); + $f4g5 = self::mul($f4, $g5, 25); + $f4g6_19 = self::mul($g6_19, $f4, 26); + $f4g7_19 = self::mul($g7_19, $f4, 26); + $f4g8_19 = self::mul($g8_19, $f4, 26); + $f4g9_19 = self::mul($g9_19, $f4, 26); + $f5g0 = self::mul($f5, $g0, 26); + $f5g1_2 = self::mul($f5_2, $g1, 25); + $f5g2 = self::mul($f5, $g2, 26); + $f5g3_2 = self::mul($f5_2, $g3, 25); + $f5g4 = self::mul($f5, $g4, 26); + $f5g5_38 = self::mul($g5_19, $f5_2, 26); + $f5g6_19 = self::mul($g6_19, $f5, 25); + $f5g7_38 = self::mul($g7_19, $f5_2, 26); + $f5g8_19 = self::mul($g8_19, $f5, 25); + $f5g9_38 = self::mul($g9_19, $f5_2, 26); + $f6g0 = self::mul($f6, $g0, 26); + $f6g1 = self::mul($f6, $g1, 25); + $f6g2 = self::mul($f6, $g2, 26); + $f6g3 = self::mul($f6, $g3, 25); + $f6g4_19 = self::mul($g4_19, $f6, 26); + $f6g5_19 = self::mul($g5_19, $f6, 26); + $f6g6_19 = self::mul($g6_19, $f6, 26); + $f6g7_19 = self::mul($g7_19, $f6, 26); + $f6g8_19 = self::mul($g8_19, $f6, 26); + $f6g9_19 = self::mul($g9_19, $f6, 26); + $f7g0 = self::mul($f7, $g0, 26); + $f7g1_2 = self::mul($f7_2, $g1, 25); + $f7g2 = self::mul($f7, $g2, 26); + $f7g3_38 = self::mul($g3_19, $f7_2, 26); + $f7g4_19 = self::mul($g4_19, $f7, 26); + $f7g5_38 = self::mul($g5_19, $f7_2, 26); + $f7g6_19 = self::mul($g6_19, $f7, 25); + $f7g7_38 = self::mul($g7_19, $f7_2, 26); + $f7g8_19 = self::mul($g8_19, $f7, 25); + $f7g9_38 = self::mul($g9_19,$f7_2, 26); + $f8g0 = self::mul($f8, $g0, 26); + $f8g1 = self::mul($f8, $g1, 25); + $f8g2_19 = self::mul($g2_19, $f8, 26); + $f8g3_19 = self::mul($g3_19, $f8, 26); + $f8g4_19 = self::mul($g4_19, $f8, 26); + $f8g5_19 = self::mul($g5_19, $f8, 26); + $f8g6_19 = self::mul($g6_19, $f8, 26); + $f8g7_19 = self::mul($g7_19, $f8, 26); + $f8g8_19 = self::mul($g8_19, $f8, 26); + $f8g9_19 = self::mul($g9_19, $f8, 26); + $f9g0 = self::mul($f9, $g0, 26); + $f9g1_38 = self::mul($g1_19, $f9_2, 26); + $f9g2_19 = self::mul($g2_19, $f9, 25); + $f9g3_38 = self::mul($g3_19, $f9_2, 26); + $f9g4_19 = self::mul($g4_19, $f9, 25); + $f9g5_38 = self::mul($g5_19, $f9_2, 26); + $f9g6_19 = self::mul($g6_19, $f9, 25); + $f9g7_38 = self::mul($g7_19, $f9_2, 26); + $f9g8_19 = self::mul($g8_19, $f9, 25); + $f9g9_38 = self::mul($g9_19, $f9_2, 26); + $h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38; + $h1 = $f0g1 + $f1g0 + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19; + $h2 = $f0g2 + $f1g1_2 + $f2g0 + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38; + $h3 = $f0g3 + $f1g2 + $f2g1 + $f3g0 + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19; + $h4 = $f0g4 + $f1g3_2 + $f2g2 + $f3g1_2 + $f4g0 + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38; + $h5 = $f0g5 + $f1g4 + $f2g3 + $f3g2 + $f4g1 + $f5g0 + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19; + $h6 = $f0g6 + $f1g5_2 + $f2g4 + $f3g3_2 + $f4g2 + $f5g1_2 + $f6g0 + $f7g9_38 + $f8g8_19 + $f9g7_38; + $h7 = $f0g7 + $f1g6 + $f2g5 + $f3g4 + $f4g3 + $f5g2 + $f6g1 + $f7g0 + $f8g9_19 + $f9g8_19; + $h8 = $f0g8 + $f1g7_2 + $f2g6 + $f3g5_2 + $f4g4 + $f5g3_2 + $f6g2 + $f7g1_2 + $f8g0 + $f9g9_38; + $h9 = $f0g9 + $f1g8 + $f2g7 + $f3g6 + $f4g5 + $f5g4 + $f6g3 + $f7g2 + $f8g1 + $f9g0 ; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + + /** @var int $carry1 */ + $carry1 = ($h1 + (1 << 24)) >> 25; + $h2 += $carry1; + $h1 -= $carry1 << 25; + /** @var int $carry5 */ + $carry5 = ($h5 + (1 << 24)) >> 25; + $h6 += $carry5; + $h5 -= $carry5 << 25; + + /** @var int $carry2 */ + $carry2 = ($h2 + (1 << 25)) >> 26; + $h3 += $carry2; + $h2 -= $carry2 << 26; + /** @var int $carry6 */ + $carry6 = ($h6 + (1 << 25)) >> 26; + $h7 += $carry6; + $h6 -= $carry6 << 26; + + /** @var int $carry3 */ + $carry3 = ($h3 + (1 << 24)) >> 25; + $h4 += $carry3; + $h3 -= $carry3 << 25; + /** @var int $carry7 */ + $carry7 = ($h7 + (1 << 24)) >> 25; + $h8 += $carry7; + $h7 -= $carry7 << 25; + + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + /** @var int $carry8 */ + $carry8 = ($h8 + (1 << 25)) >> 26; + $h9 += $carry8; + $h8 -= $carry8 << 26; + + /** @var int $carry9 */ + $carry9 = ($h9 + (1 << 24)) >> 25; + $h0 += self::mul($carry9, 19, 5); + $h9 -= $carry9 << 25; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( + array( + (int) $h0, + (int) $h1, + (int) $h2, + (int) $h3, + (int) $h4, + (int) $h5, + (int) $h6, + (int) $h7, + (int) $h8, + (int) $h9 + ) + ); + } + + /** + * Get the negative values for each piece of the field element. + * + * h = -f + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core_Curve25519_Fe + * @psalm-suppress MixedAssignment + */ + public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + $h = new ParagonIE_Sodium_Core_Curve25519_Fe(); + for ($i = 0; $i < 10; ++$i) { + $h[$i] = -$f[$i]; + } + return $h; + } + + /** + * Square a field element + * + * h = f * f + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_sq(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + $f0 = (int) $f[0]; + $f1 = (int) $f[1]; + $f2 = (int) $f[2]; + $f3 = (int) $f[3]; + $f4 = (int) $f[4]; + $f5 = (int) $f[5]; + $f6 = (int) $f[6]; + $f7 = (int) $f[7]; + $f8 = (int) $f[8]; + $f9 = (int) $f[9]; + + /** @var int $f0_2 */ + $f0_2 = $f0 << 1; + /** @var int $f1_2 */ + $f1_2 = $f1 << 1; + /** @var int $f2_2 */ + $f2_2 = $f2 << 1; + /** @var int $f3_2 */ + $f3_2 = $f3 << 1; + /** @var int $f4_2 */ + $f4_2 = $f4 << 1; + /** @var int $f5_2 */ + $f5_2 = $f5 << 1; + /** @var int $f6_2 */ + $f6_2 = $f6 << 1; + /** @var int $f7_2 */ + $f7_2 = $f7 << 1; + $f5_38 = self::mul($f5, 38, 6); + $f6_19 = self::mul($f6, 19, 5); + $f7_38 = self::mul($f7, 38, 6); + $f8_19 = self::mul($f8, 19, 5); + $f9_38 = self::mul($f9, 38, 6); + $f0f0 = self::mul($f0, $f0, 25); + $f0f1_2 = self::mul($f0_2, $f1, 24); + $f0f2_2 = self::mul($f0_2, $f2, 25); + $f0f3_2 = self::mul($f0_2, $f3, 24); + $f0f4_2 = self::mul($f0_2, $f4, 25); + $f0f5_2 = self::mul($f0_2, $f5, 25); + $f0f6_2 = self::mul($f0_2, $f6, 25); + $f0f7_2 = self::mul($f0_2, $f7, 24); + $f0f8_2 = self::mul($f0_2, $f8, 25); + $f0f9_2 = self::mul($f0_2, $f9, 25); + $f1f1_2 = self::mul($f1_2, $f1, 24); + $f1f2_2 = self::mul($f1_2, $f2, 25); + $f1f3_4 = self::mul($f1_2, $f3_2, 25); + $f1f4_2 = self::mul($f1_2, $f4, 25); + $f1f5_4 = self::mul($f1_2, $f5_2, 26); + $f1f6_2 = self::mul($f1_2, $f6, 25); + $f1f7_4 = self::mul($f1_2, $f7_2, 25); + $f1f8_2 = self::mul($f1_2, $f8, 25); + $f1f9_76 = self::mul($f9_38, $f1_2, 25); + $f2f2 = self::mul($f2, $f2, 25); + $f2f3_2 = self::mul($f2_2, $f3, 24); + $f2f4_2 = self::mul($f2_2, $f4, 25); + $f2f5_2 = self::mul($f2_2, $f5, 25); + $f2f6_2 = self::mul($f2_2, $f6, 25); + $f2f7_2 = self::mul($f2_2, $f7, 24); + $f2f8_38 = self::mul($f8_19, $f2_2, 26); + $f2f9_38 = self::mul($f9_38, $f2, 25); + $f3f3_2 = self::mul($f3_2, $f3, 24); + $f3f4_2 = self::mul($f3_2, $f4, 25); + $f3f5_4 = self::mul($f3_2, $f5_2, 26); + $f3f6_2 = self::mul($f3_2, $f6, 25); + $f3f7_76 = self::mul($f7_38, $f3_2, 25); + $f3f8_38 = self::mul($f8_19, $f3_2, 25); + $f3f9_76 = self::mul($f9_38, $f3_2, 25); + $f4f4 = self::mul($f4, $f4, 25); + $f4f5_2 = self::mul($f4_2, $f5, 25); + $f4f6_38 = self::mul($f6_19, $f4_2, 26); + $f4f7_38 = self::mul($f7_38, $f4, 25); + $f4f8_38 = self::mul($f8_19, $f4_2, 26); + $f4f9_38 = self::mul($f9_38, $f4, 25); + $f5f5_38 = self::mul($f5_38, $f5, 25); + $f5f6_38 = self::mul($f6_19, $f5_2, 26); + $f5f7_76 = self::mul($f7_38, $f5_2, 26); + $f5f8_38 = self::mul($f8_19, $f5_2, 26); + $f5f9_76 = self::mul($f9_38, $f5_2, 26); + $f6f6_19 = self::mul($f6_19, $f6, 25); + $f6f7_38 = self::mul($f7_38, $f6, 25); + $f6f8_38 = self::mul($f8_19, $f6_2, 26); + $f6f9_38 = self::mul($f9_38, $f6, 25); + $f7f7_38 = self::mul($f7_38, $f7, 24); + $f7f8_38 = self::mul($f8_19, $f7_2, 25); + $f7f9_76 = self::mul($f9_38, $f7_2, 25); + $f8f8_19 = self::mul($f8_19, $f8, 25); + $f8f9_38 = self::mul($f9_38, $f8, 25); + $f9f9_38 = self::mul($f9_38, $f9, 25); + $h0 = $f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38; + $h1 = $f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38; + $h2 = $f0f2_2 + $f1f1_2 + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19; + $h3 = $f0f3_2 + $f1f2_2 + $f4f9_38 + $f5f8_38 + $f6f7_38; + $h4 = $f0f4_2 + $f1f3_4 + $f2f2 + $f5f9_76 + $f6f8_38 + $f7f7_38; + $h5 = $f0f5_2 + $f1f4_2 + $f2f3_2 + $f6f9_38 + $f7f8_38; + $h6 = $f0f6_2 + $f1f5_4 + $f2f4_2 + $f3f3_2 + $f7f9_76 + $f8f8_19; + $h7 = $f0f7_2 + $f1f6_2 + $f2f5_2 + $f3f4_2 + $f8f9_38; + $h8 = $f0f8_2 + $f1f7_4 + $f2f6_2 + $f3f5_4 + $f4f4 + $f9f9_38; + $h9 = $f0f9_2 + $f1f8_2 + $f2f7_2 + $f3f6_2 + $f4f5_2; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + + /** @var int $carry1 */ + $carry1 = ($h1 + (1 << 24)) >> 25; + $h2 += $carry1; + $h1 -= $carry1 << 25; + /** @var int $carry5 */ + $carry5 = ($h5 + (1 << 24)) >> 25; + $h6 += $carry5; + $h5 -= $carry5 << 25; + + /** @var int $carry2 */ + $carry2 = ($h2 + (1 << 25)) >> 26; + $h3 += $carry2; + $h2 -= $carry2 << 26; + /** @var int $carry6 */ + $carry6 = ($h6 + (1 << 25)) >> 26; + $h7 += $carry6; + $h6 -= $carry6 << 26; + + /** @var int $carry3 */ + $carry3 = ($h3 + (1 << 24)) >> 25; + $h4 += $carry3; + $h3 -= $carry3 << 25; + /** @var int $carry7 */ + $carry7 = ($h7 + (1 << 24)) >> 25; + $h8 += $carry7; + $h7 -= $carry7 << 25; + + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + /** @var int $carry8 */ + $carry8 = ($h8 + (1 << 25)) >> 26; + $h9 += $carry8; + $h8 -= $carry8 << 26; + + /** @var int $carry9 */ + $carry9 = ($h9 + (1 << 24)) >> 25; + $h0 += self::mul($carry9, 19, 5); + $h9 -= $carry9 << 25; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( + array( + (int) $h0, + (int) $h1, + (int) $h2, + (int) $h3, + (int) $h4, + (int) $h5, + (int) $h6, + (int) $h7, + (int) $h8, + (int) $h9 + ) + ); + } + + + /** + * Square and double a field element + * + * h = 2 * f * f + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_sq2(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + $f0 = (int) $f[0]; + $f1 = (int) $f[1]; + $f2 = (int) $f[2]; + $f3 = (int) $f[3]; + $f4 = (int) $f[4]; + $f5 = (int) $f[5]; + $f6 = (int) $f[6]; + $f7 = (int) $f[7]; + $f8 = (int) $f[8]; + $f9 = (int) $f[9]; + + /** @var int $f0_2 */ + $f0_2 = $f0 << 1; + /** @var int $f1_2 */ + $f1_2 = $f1 << 1; + /** @var int $f2_2 */ + $f2_2 = $f2 << 1; + /** @var int $f3_2 */ + $f3_2 = $f3 << 1; + /** @var int $f4_2 */ + $f4_2 = $f4 << 1; + /** @var int $f5_2 */ + $f5_2 = $f5 << 1; + /** @var int $f6_2 */ + $f6_2 = $f6 << 1; + /** @var int $f7_2 */ + $f7_2 = $f7 << 1; + $f5_38 = self::mul($f5, 38, 6); /* 1.959375*2^30 */ + $f6_19 = self::mul($f6, 19, 5); /* 1.959375*2^30 */ + $f7_38 = self::mul($f7, 38, 6); /* 1.959375*2^30 */ + $f8_19 = self::mul($f8, 19, 5); /* 1.959375*2^30 */ + $f9_38 = self::mul($f9, 38, 6); /* 1.959375*2^30 */ + $f0f0 = self::mul($f0, $f0, 24); + $f0f1_2 = self::mul($f0_2, $f1, 24); + $f0f2_2 = self::mul($f0_2, $f2, 24); + $f0f3_2 = self::mul($f0_2, $f3, 24); + $f0f4_2 = self::mul($f0_2, $f4, 24); + $f0f5_2 = self::mul($f0_2, $f5, 24); + $f0f6_2 = self::mul($f0_2, $f6, 24); + $f0f7_2 = self::mul($f0_2, $f7, 24); + $f0f8_2 = self::mul($f0_2, $f8, 24); + $f0f9_2 = self::mul($f0_2, $f9, 24); + $f1f1_2 = self::mul($f1_2, $f1, 24); + $f1f2_2 = self::mul($f1_2, $f2, 24); + $f1f3_4 = self::mul($f1_2, $f3_2, 24); + $f1f4_2 = self::mul($f1_2, $f4, 24); + $f1f5_4 = self::mul($f1_2, $f5_2, 24); + $f1f6_2 = self::mul($f1_2, $f6, 24); + $f1f7_4 = self::mul($f1_2, $f7_2, 24); + $f1f8_2 = self::mul($f1_2, $f8, 24); + $f1f9_76 = self::mul($f9_38, $f1_2, 24); + $f2f2 = self::mul($f2, $f2, 24); + $f2f3_2 = self::mul($f2_2, $f3, 24); + $f2f4_2 = self::mul($f2_2, $f4, 24); + $f2f5_2 = self::mul($f2_2, $f5, 24); + $f2f6_2 = self::mul($f2_2, $f6, 24); + $f2f7_2 = self::mul($f2_2, $f7, 24); + $f2f8_38 = self::mul($f8_19, $f2_2, 25); + $f2f9_38 = self::mul($f9_38, $f2, 24); + $f3f3_2 = self::mul($f3_2, $f3, 24); + $f3f4_2 = self::mul($f3_2, $f4, 24); + $f3f5_4 = self::mul($f3_2, $f5_2, 24); + $f3f6_2 = self::mul($f3_2, $f6, 24); + $f3f7_76 = self::mul($f7_38, $f3_2, 24); + $f3f8_38 = self::mul($f8_19, $f3_2, 24); + $f3f9_76 = self::mul($f9_38, $f3_2, 24); + $f4f4 = self::mul($f4, $f4, 24); + $f4f5_2 = self::mul($f4_2, $f5, 24); + $f4f6_38 = self::mul($f6_19, $f4_2, 25); + $f4f7_38 = self::mul($f7_38, $f4, 24); + $f4f8_38 = self::mul($f8_19, $f4_2, 25); + $f4f9_38 = self::mul($f9_38, $f4, 24); + $f5f5_38 = self::mul($f5_38, $f5, 24); + $f5f6_38 = self::mul($f6_19, $f5_2, 24); + $f5f7_76 = self::mul($f7_38, $f5_2, 24); + $f5f8_38 = self::mul($f8_19, $f5_2, 24); + $f5f9_76 = self::mul($f9_38, $f5_2, 24); + $f6f6_19 = self::mul($f6_19, $f6, 24); + $f6f7_38 = self::mul($f7_38, $f6, 24); + $f6f8_38 = self::mul($f8_19, $f6_2, 25); + $f6f9_38 = self::mul($f9_38, $f6, 24); + $f7f7_38 = self::mul($f7_38, $f7, 24); + $f7f8_38 = self::mul($f8_19, $f7_2, 24); + $f7f9_76 = self::mul($f9_38, $f7_2, 24); + $f8f8_19 = self::mul($f8_19, $f8, 24); + $f8f9_38 = self::mul($f9_38, $f8, 24); + $f9f9_38 = self::mul($f9_38, $f9, 24); + + /** @var int $h0 */ + $h0 = (int) ($f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38) << 1; + /** @var int $h1 */ + $h1 = (int) ($f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38) << 1; + /** @var int $h2 */ + $h2 = (int) ($f0f2_2 + $f1f1_2 + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19) << 1; + /** @var int $h3 */ + $h3 = (int) ($f0f3_2 + $f1f2_2 + $f4f9_38 + $f5f8_38 + $f6f7_38) << 1; + /** @var int $h4 */ + $h4 = (int) ($f0f4_2 + $f1f3_4 + $f2f2 + $f5f9_76 + $f6f8_38 + $f7f7_38) << 1; + /** @var int $h5 */ + $h5 = (int) ($f0f5_2 + $f1f4_2 + $f2f3_2 + $f6f9_38 + $f7f8_38) << 1; + /** @var int $h6 */ + $h6 = (int) ($f0f6_2 + $f1f5_4 + $f2f4_2 + $f3f3_2 + $f7f9_76 + $f8f8_19) << 1; + /** @var int $h7 */ + $h7 = (int) ($f0f7_2 + $f1f6_2 + $f2f5_2 + $f3f4_2 + $f8f9_38) << 1; + /** @var int $h8 */ + $h8 = (int) ($f0f8_2 + $f1f7_4 + $f2f6_2 + $f3f5_4 + $f4f4 + $f9f9_38) << 1; + /** @var int $h9 */ + $h9 = (int) ($f0f9_2 + $f1f8_2 + $f2f7_2 + $f3f6_2 + $f4f5_2) << 1; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + + /** @var int $carry1 */ + $carry1 = ($h1 + (1 << 24)) >> 25; + $h2 += $carry1; + $h1 -= $carry1 << 25; + /** @var int $carry5 */ + $carry5 = ($h5 + (1 << 24)) >> 25; + $h6 += $carry5; + $h5 -= $carry5 << 25; + + /** @var int $carry2 */ + $carry2 = ($h2 + (1 << 25)) >> 26; + $h3 += $carry2; + $h2 -= $carry2 << 26; + /** @var int $carry6 */ + $carry6 = ($h6 + (1 << 25)) >> 26; + $h7 += $carry6; + $h6 -= $carry6 << 26; + + /** @var int $carry3 */ + $carry3 = ($h3 + (1 << 24)) >> 25; + $h4 += $carry3; + $h3 -= $carry3 << 25; + /** @var int $carry7 */ + $carry7 = ($h7 + (1 << 24)) >> 25; + $h8 += $carry7; + $h7 -= $carry7 << 25; + + /** @var int $carry4 */ + $carry4 = ($h4 + (1 << 25)) >> 26; + $h5 += $carry4; + $h4 -= $carry4 << 26; + /** @var int $carry8 */ + $carry8 = ($h8 + (1 << 25)) >> 26; + $h9 += $carry8; + $h8 -= $carry8 << 26; + + /** @var int $carry9 */ + $carry9 = ($h9 + (1 << 24)) >> 25; + $h0 += self::mul($carry9, 19, 5); + $h9 -= $carry9 << 25; + + /** @var int $carry0 */ + $carry0 = ($h0 + (1 << 25)) >> 26; + $h1 += $carry0; + $h0 -= $carry0 << 26; + + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( + array( + (int) $h0, + (int) $h1, + (int) $h2, + (int) $h3, + (int) $h4, + (int) $h5, + (int) $h6, + (int) $h7, + (int) $h8, + (int) $h9 + ) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $Z + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_invert(ParagonIE_Sodium_Core_Curve25519_Fe $Z) + { + $z = clone $Z; + $t0 = self::fe_sq($z); + $t1 = self::fe_sq($t0); + $t1 = self::fe_sq($t1); + $t1 = self::fe_mul($z, $t1); + $t0 = self::fe_mul($t0, $t1); + $t2 = self::fe_sq($t0); + $t1 = self::fe_mul($t1, $t2); + $t2 = self::fe_sq($t1); + for ($i = 1; $i < 5; ++$i) { + $t2 = self::fe_sq($t2); + } + $t1 = self::fe_mul($t2, $t1); + $t2 = self::fe_sq($t1); + for ($i = 1; $i < 10; ++$i) { + $t2 = self::fe_sq($t2); + } + $t2 = self::fe_mul($t2, $t1); + $t3 = self::fe_sq($t2); + for ($i = 1; $i < 20; ++$i) { + $t3 = self::fe_sq($t3); + } + $t2 = self::fe_mul($t3, $t2); + $t2 = self::fe_sq($t2); + for ($i = 1; $i < 10; ++$i) { + $t2 = self::fe_sq($t2); + } + $t1 = self::fe_mul($t2, $t1); + $t2 = self::fe_sq($t1); + for ($i = 1; $i < 50; ++$i) { + $t2 = self::fe_sq($t2); + } + $t2 = self::fe_mul($t2, $t1); + $t3 = self::fe_sq($t2); + for ($i = 1; $i < 100; ++$i) { + $t3 = self::fe_sq($t3); + } + $t2 = self::fe_mul($t3, $t2); + $t2 = self::fe_sq($t2); + for ($i = 1; $i < 50; ++$i) { + $t2 = self::fe_sq($t2); + } + $t1 = self::fe_mul($t2, $t1); + $t1 = self::fe_sq($t1); + for ($i = 1; $i < 5; ++$i) { + $t1 = self::fe_sq($t1); + } + return self::fe_mul($t1, $t0); + } + + /** + * @internal You should not use this directly from another application + * + * @ref https://github.com/jedisct1/libsodium/blob/68564326e1e9dc57ef03746f85734232d20ca6fb/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1054-L1106 + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $z + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_pow22523(ParagonIE_Sodium_Core_Curve25519_Fe $z) + { + # fe_sq(t0, z); + # fe_sq(t1, t0); + # fe_sq(t1, t1); + # fe_mul(t1, z, t1); + # fe_mul(t0, t0, t1); + # fe_sq(t0, t0); + # fe_mul(t0, t1, t0); + # fe_sq(t1, t0); + $t0 = self::fe_sq($z); + $t1 = self::fe_sq($t0); + $t1 = self::fe_sq($t1); + $t1 = self::fe_mul($z, $t1); + $t0 = self::fe_mul($t0, $t1); + $t0 = self::fe_sq($t0); + $t0 = self::fe_mul($t1, $t0); + $t1 = self::fe_sq($t0); + + # for (i = 1; i < 5; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 5; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t0, t1, t0); + # fe_sq(t1, t0); + $t0 = self::fe_mul($t1, $t0); + $t1 = self::fe_sq($t0); + + # for (i = 1; i < 10; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 10; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t1, t1, t0); + # fe_sq(t2, t1); + $t1 = self::fe_mul($t1, $t0); + $t2 = self::fe_sq($t1); + + # for (i = 1; i < 20; ++i) { + # fe_sq(t2, t2); + # } + for ($i = 1; $i < 20; ++$i) { + $t2 = self::fe_sq($t2); + } + + # fe_mul(t1, t2, t1); + # fe_sq(t1, t1); + $t1 = self::fe_mul($t2, $t1); + $t1 = self::fe_sq($t1); + + # for (i = 1; i < 10; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 10; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t0, t1, t0); + # fe_sq(t1, t0); + $t0 = self::fe_mul($t1, $t0); + $t1 = self::fe_sq($t0); + + # for (i = 1; i < 50; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 50; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t1, t1, t0); + # fe_sq(t2, t1); + $t1 = self::fe_mul($t1, $t0); + $t2 = self::fe_sq($t1); + + # for (i = 1; i < 100; ++i) { + # fe_sq(t2, t2); + # } + for ($i = 1; $i < 100; ++$i) { + $t2 = self::fe_sq($t2); + } + + # fe_mul(t1, t2, t1); + # fe_sq(t1, t1); + $t1 = self::fe_mul($t2, $t1); + $t1 = self::fe_sq($t1); + + # for (i = 1; i < 50; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 50; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t0, t1, t0); + # fe_sq(t0, t0); + # fe_sq(t0, t0); + # fe_mul(out, t0, z); + $t0 = self::fe_mul($t1, $t0); + $t0 = self::fe_sq($t0); + $t0 = self::fe_sq($t0); + return self::fe_mul($t0, $z); + } + + /** + * Subtract two field elements. + * + * h = f - g + * + * Preconditions: + * |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc. + * |g| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc. + * + * Postconditions: + * |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core_Curve25519_Fe $g + * @return ParagonIE_Sodium_Core_Curve25519_Fe + * @psalm-suppress MixedOperand + */ + public static function fe_sub(ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g) + { + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( + array( + (int) ($f[0] - $g[0]), + (int) ($f[1] - $g[1]), + (int) ($f[2] - $g[2]), + (int) ($f[3] - $g[3]), + (int) ($f[4] - $g[4]), + (int) ($f[5] - $g[5]), + (int) ($f[6] - $g[6]), + (int) ($f[7] - $g[7]), + (int) ($f[8] - $g[8]), + (int) ($f[9] - $g[9]) + ) + ); + } + + /** + * Add two group elements. + * + * r = p + q + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 + */ + public static function ge_add( + ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q + ) { + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1(); + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->YplusX); + $r->Y = self::fe_mul($r->Y, $q->YminusX); + $r->T = self::fe_mul($q->T2d, $p->T); + $r->X = self::fe_mul($p->Z, $q->Z); + $t0 = self::fe_add($r->X, $r->X); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_add($t0, $r->T); + $r->T = self::fe_sub($t0, $r->T); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @ref https://github.com/jedisct1/libsodium/blob/157c4a80c13b117608aeae12178b2d38825f9f8f/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1185-L1215 + * @param string $a + * @return array + * @throws SodiumException + * @throws TypeError + */ + public static function slide($a) + { + if (self::strlen($a) < 256) { + if (self::strlen($a) < 16) { + $a = str_pad($a, 256, '0', STR_PAD_RIGHT); + } + } + /** @var array $r */ + $r = array(); + + /** @var int $i */ + for ($i = 0; $i < 256; ++$i) { + $r[$i] = (int) ( + 1 & ( + self::chrToInt($a[(int) ($i >> 3)]) + >> + ($i & 7) + ) + ); + } + + for ($i = 0;$i < 256;++$i) { + if ($r[$i]) { + for ($b = 1;$b <= 6 && $i + $b < 256;++$b) { + if ($r[$i + $b]) { + if ($r[$i] + ($r[$i + $b] << $b) <= 15) { + $r[$i] += $r[$i + $b] << $b; + $r[$i + $b] = 0; + } elseif ($r[$i] - ($r[$i + $b] << $b) >= -15) { + $r[$i] -= $r[$i + $b] << $b; + for ($k = $i + $b; $k < 256; ++$k) { + if (!$r[$k]) { + $r[$k] = 1; + break; + } + $r[$k] = 0; + } + } else { + break; + } + } + } + } + } + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $s + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_frombytes_negate_vartime($s) + { + static $d = null; + if (!$d) { + $d = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d); + } + + # fe_frombytes(h->Y,s); + # fe_1(h->Z); + $h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3( + self::fe_0(), + self::fe_frombytes($s), + self::fe_1() + ); + + # fe_sq(u,h->Y); + # fe_mul(v,u,d); + # fe_sub(u,u,h->Z); /* u = y^2-1 */ + # fe_add(v,v,h->Z); /* v = dy^2+1 */ + $u = self::fe_sq($h->Y); + /** @var ParagonIE_Sodium_Core_Curve25519_Fe $d */ + $v = self::fe_mul($u, $d); + $u = self::fe_sub($u, $h->Z); /* u = y^2 - 1 */ + $v = self::fe_add($v, $h->Z); /* v = dy^2 + 1 */ + + # fe_sq(v3,v); + # fe_mul(v3,v3,v); /* v3 = v^3 */ + # fe_sq(h->X,v3); + # fe_mul(h->X,h->X,v); + # fe_mul(h->X,h->X,u); /* x = uv^7 */ + $v3 = self::fe_sq($v); + $v3 = self::fe_mul($v3, $v); /* v3 = v^3 */ + $h->X = self::fe_sq($v3); + $h->X = self::fe_mul($h->X, $v); + $h->X = self::fe_mul($h->X, $u); /* x = uv^7 */ + + # fe_pow22523(h->X,h->X); /* x = (uv^7)^((q-5)/8) */ + # fe_mul(h->X,h->X,v3); + # fe_mul(h->X,h->X,u); /* x = uv^3(uv^7)^((q-5)/8) */ + $h->X = self::fe_pow22523($h->X); /* x = (uv^7)^((q-5)/8) */ + $h->X = self::fe_mul($h->X, $v3); + $h->X = self::fe_mul($h->X, $u); /* x = uv^3(uv^7)^((q-5)/8) */ + + # fe_sq(vxx,h->X); + # fe_mul(vxx,vxx,v); + # fe_sub(check,vxx,u); /* vx^2-u */ + $vxx = self::fe_sq($h->X); + $vxx = self::fe_mul($vxx, $v); + $check = self::fe_sub($vxx, $u); /* vx^2 - u */ + + # if (fe_isnonzero(check)) { + # fe_add(check,vxx,u); /* vx^2+u */ + # if (fe_isnonzero(check)) { + # return -1; + # } + # fe_mul(h->X,h->X,sqrtm1); + # } + if (self::fe_isnonzero($check)) { + $check = self::fe_add($vxx, $u); /* vx^2 + u */ + if (self::fe_isnonzero($check)) { + throw new RangeException('Internal check failed.'); + } + $h->X = self::fe_mul( + $h->X, + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1) + ); + } + + # if (fe_isnegative(h->X) == (s[31] >> 7)) { + # fe_neg(h->X,h->X); + # } + $i = self::chrToInt($s[31]); + if (self::fe_isnegative($h->X) === ($i >> 7)) { + $h->X = self::fe_neg($h->X); + } + + # fe_mul(h->T,h->X,h->Y); + $h->T = self::fe_mul($h->X, $h->Y); + return $h; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 + */ + public static function ge_madd( + ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R, + ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q + ) { + $r = clone $R; + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->yplusx); + $r->Y = self::fe_mul($r->Y, $q->yminusx); + $r->T = self::fe_mul($q->xy2d, $p->T); + $t0 = self::fe_add(clone $p->Z, clone $p->Z); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_add($t0, $r->T); + $r->T = self::fe_sub($t0, $r->T); + + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 + */ + public static function ge_msub( + ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R, + ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q + ) { + $r = clone $R; + + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->yminusx); + $r->Y = self::fe_mul($r->Y, $q->yplusx); + $r->T = self::fe_mul($q->xy2d, $p->T); + $t0 = self::fe_add($p->Z, $p->Z); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_sub($t0, $r->T); + $r->T = self::fe_add($t0, $r->T); + + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2 + */ + public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p) + { + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P2(); + $r->X = self::fe_mul($p->X, $p->T); + $r->Y = self::fe_mul($p->Y, $p->Z); + $r->Z = self::fe_mul($p->Z, $p->T); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3 + */ + public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p) + { + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P3(); + $r->X = self::fe_mul($p->X, $p->T); + $r->Y = self::fe_mul($p->Y, $p->Z); + $r->Z = self::fe_mul($p->Z, $p->T); + $r->T = self::fe_mul($p->X, $p->Y); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2 + */ + public static function ge_p2_0() + { + return new ParagonIE_Sodium_Core_Curve25519_Ge_P2( + self::fe_0(), + self::fe_1(), + self::fe_1() + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 + */ + public static function ge_p2_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p) + { + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1(); + + $r->X = self::fe_sq($p->X); + $r->Z = self::fe_sq($p->Y); + $r->T = self::fe_sq2($p->Z); + $r->Y = self::fe_add($p->X, $p->Y); + $t0 = self::fe_sq($r->Y); + $r->Y = self::fe_add($r->Z, $r->X); + $r->Z = self::fe_sub($r->Z, $r->X); + $r->X = self::fe_sub($t0, $r->Y); + $r->T = self::fe_sub($r->T, $r->Z); + + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3 + */ + public static function ge_p3_0() + { + return new ParagonIE_Sodium_Core_Curve25519_Ge_P3( + self::fe_0(), + self::fe_1(), + self::fe_1(), + self::fe_0() + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached + */ + public static function ge_p3_to_cached(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p) + { + static $d2 = null; + if ($d2 === null) { + $d2 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d2); + } + /** @var ParagonIE_Sodium_Core_Curve25519_Fe $d2 */ + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(); + $r->YplusX = self::fe_add($p->Y, $p->X); + $r->YminusX = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_copy($p->Z); + $r->T2d = self::fe_mul($p->T, $d2); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2 + */ + public static function ge_p3_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p) + { + return new ParagonIE_Sodium_Core_Curve25519_Ge_P2( + $p->X, + $p->Y, + $p->Z + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h) + { + $recip = self::fe_invert($h->Z); + $x = self::fe_mul($h->X, $recip); + $y = self::fe_mul($h->Y, $recip); + $s = self::fe_tobytes($y); + $s[31] = self::intToChr( + self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7) + ); + return $s; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 + */ + public static function ge_p3_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p) + { + $q = self::ge_p3_to_p2($p); + return self::ge_p2_dbl($q); + } + + /** + * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp + */ + public static function ge_precomp_0() + { + return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp( + self::fe_1(), + self::fe_1(), + self::fe_0() + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $b + * @param int $c + * @return int + */ + public static function equal($b, $c) + { + return (int) ((($b ^ $c) - 1 & 0xffffffff) >> 31); + } + + /** + * @internal You should not use this directly from another application + * + * @param int|string $char + * @return int (1 = yes, 0 = no) + * @throws SodiumException + * @throws TypeError + */ + public static function negative($char) + { + if (is_int($char)) { + return $char < 0 ? 1 : 0; + } + $x = self::chrToInt(self::substr($char, 0, 1)); + return (int) ($x >> 63); + } + + /** + * Conditional move + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $t + * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u + * @param int $b + * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp + */ + public static function cmov( + ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $t, + ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u, + $b + ) { + if (!is_int($b)) { + throw new InvalidArgumentException('Expected an integer.'); + } + return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp( + self::fe_cmov($t->yplusx, $u->yplusx, $b), + self::fe_cmov($t->yminusx, $u->yminusx, $b), + self::fe_cmov($t->xy2d, $u->xy2d, $b) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $pos + * @param int $b + * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayOffset + */ + public static function ge_select($pos = 0, $b = 0) + { + static $base = null; + if ($base === null) { + $base = array(); + /** @var int $i */ + foreach (self::$base as $i => $bas) { + for ($j = 0; $j < 8; ++$j) { + $base[$i][$j] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp( + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][0]), + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][1]), + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][2]) + ); + } + } + } + /** @var array> $base */ + if (!is_int($pos)) { + throw new InvalidArgumentException('Position must be an integer'); + } + if ($pos < 0 || $pos > 31) { + throw new RangeException('Position is out of range [0, 31]'); + } + + /** @var int $bnegative */ + $bnegative = self::negative($b); + /** @var int $babs */ + $babs = $b - (((-$bnegative) & $b) << 1); + + $t = self::ge_precomp_0(); + for ($i = 0; $i < 8; ++$i) { + $t = self::cmov( + $t, + $base[$pos][$i], + self::equal($babs, $i + 1) + ); + } + $minusT = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp( + self::fe_copy($t->yminusx), + self::fe_copy($t->yplusx), + self::fe_neg($t->xy2d) + ); + return self::cmov($t, $minusT, $bnegative); + } + + /** + * Subtract two group elements. + * + * r = p - q + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 + */ + public static function ge_sub( + ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q + ) { + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1(); + + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->YminusX); + $r->Y = self::fe_mul($r->Y, $q->YplusX); + $r->T = self::fe_mul($q->T2d, $p->T); + $r->X = self::fe_mul($p->Z, $q->Z); + $t0 = self::fe_add($r->X, $r->X); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_sub($t0, $r->T); + $r->T = self::fe_add($t0, $r->T); + + return $r; + } + + /** + * Convert a group element to a byte string. + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ge_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h) + { + $recip = self::fe_invert($h->Z); + $x = self::fe_mul($h->X, $recip); + $y = self::fe_mul($h->Y, $recip); + $s = self::fe_tobytes($y); + $s[31] = self::intToChr( + self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7) + ); + return $s; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $a + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A + * @param string $b + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayAccess + */ + public static function ge_double_scalarmult_vartime( + $a, + ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A, + $b + ) { + /** @var array $Ai */ + $Ai = array(); + + /** @var array $Bi */ + static $Bi = array(); + if (!$Bi) { + for ($i = 0; $i < 8; ++$i) { + $Bi[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp( + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][0]), + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][1]), + ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][2]) + ); + } + } + for ($i = 0; $i < 8; ++$i) { + $Ai[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached( + self::fe_0(), + self::fe_0(), + self::fe_0(), + self::fe_0() + ); + } + + # slide(aslide,a); + # slide(bslide,b); + /** @var array $aslide */ + $aslide = self::slide($a); + /** @var array $bslide */ + $bslide = self::slide($b); + + # ge_p3_to_cached(&Ai[0],A); + # ge_p3_dbl(&t,A); ge_p1p1_to_p3(&A2,&t); + $Ai[0] = self::ge_p3_to_cached($A); + $t = self::ge_p3_dbl($A); + $A2 = self::ge_p1p1_to_p3($t); + + # ge_add(&t,&A2,&Ai[0]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[1],&u); + # ge_add(&t,&A2,&Ai[1]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[2],&u); + # ge_add(&t,&A2,&Ai[2]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[3],&u); + # ge_add(&t,&A2,&Ai[3]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[4],&u); + # ge_add(&t,&A2,&Ai[4]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[5],&u); + # ge_add(&t,&A2,&Ai[5]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[6],&u); + # ge_add(&t,&A2,&Ai[6]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[7],&u); + for ($i = 0; $i < 7; ++$i) { + $t = self::ge_add($A2, $Ai[$i]); + $u = self::ge_p1p1_to_p3($t); + $Ai[$i + 1] = self::ge_p3_to_cached($u); + } + + # ge_p2_0(r); + $r = self::ge_p2_0(); + + # for (i = 255;i >= 0;--i) { + # if (aslide[i] || bslide[i]) break; + # } + $i = 255; + for (; $i >= 0; --$i) { + if ($aslide[$i] || $bslide[$i]) { + break; + } + } + + # for (;i >= 0;--i) { + for (; $i >= 0; --$i) { + # ge_p2_dbl(&t,r); + $t = self::ge_p2_dbl($r); + + # if (aslide[i] > 0) { + if ($aslide[$i] > 0) { + # ge_p1p1_to_p3(&u,&t); + # ge_add(&t,&u,&Ai[aslide[i]/2]); + $u = self::ge_p1p1_to_p3($t); + $t = self::ge_add( + $u, + $Ai[(int) floor($aslide[$i] / 2)] + ); + # } else if (aslide[i] < 0) { + } elseif ($aslide[$i] < 0) { + # ge_p1p1_to_p3(&u,&t); + # ge_sub(&t,&u,&Ai[(-aslide[i])/2]); + $u = self::ge_p1p1_to_p3($t); + $t = self::ge_sub( + $u, + $Ai[(int) floor(-$aslide[$i] / 2)] + ); + } + + # if (bslide[i] > 0) { + if ($bslide[$i] > 0) { + /** @var int $index */ + $index = (int) floor($bslide[$i] / 2); + # ge_p1p1_to_p3(&u,&t); + # ge_madd(&t,&u,&Bi[bslide[i]/2]); + $u = self::ge_p1p1_to_p3($t); + $t = self::ge_madd($t, $u, $Bi[$index]); + # } else if (bslide[i] < 0) { + } elseif ($bslide[$i] < 0) { + /** @var int $index */ + $index = (int) floor(-$bslide[$i] / 2); + # ge_p1p1_to_p3(&u,&t); + # ge_msub(&t,&u,&Bi[(-bslide[i])/2]); + $u = self::ge_p1p1_to_p3($t); + $t = self::ge_msub($t, $u, $Bi[$index]); + } + # ge_p1p1_to_p2(r,&t); + $r = self::ge_p1p1_to_p2($t); + } + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $a + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedOperand + */ + public static function ge_scalarmult_base($a) + { + /** @var array $e */ + $e = array(); + $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1(); + + for ($i = 0; $i < 32; ++$i) { + /** @var int $dbl */ + $dbl = (int) $i << 1; + $e[$dbl] = (int) self::chrToInt($a[$i]) & 15; + $e[$dbl + 1] = (int) (self::chrToInt($a[$i]) >> 4) & 15; + } + + /** @var int $carry */ + $carry = 0; + for ($i = 0; $i < 63; ++$i) { + $e[$i] += $carry; + /** @var int $carry */ + $carry = $e[$i] + 8; + /** @var int $carry */ + $carry >>= 4; + $e[$i] -= $carry << 4; + } + /** @var array $e */ + $e[63] += (int) $carry; + + $h = self::ge_p3_0(); + + for ($i = 1; $i < 64; $i += 2) { + $t = self::ge_select((int) floor($i / 2), (int) $e[$i]); + $r = self::ge_madd($r, $h, $t); + $h = self::ge_p1p1_to_p3($r); + } + + $r = self::ge_p3_dbl($h); + + $s = self::ge_p1p1_to_p2($r); + $r = self::ge_p2_dbl($s); + $s = self::ge_p1p1_to_p2($r); + $r = self::ge_p2_dbl($s); + $s = self::ge_p1p1_to_p2($r); + $r = self::ge_p2_dbl($s); + + $h = self::ge_p1p1_to_p3($r); + + for ($i = 0; $i < 64; $i += 2) { + $t = self::ge_select($i >> 1, (int) $e[$i]); + $r = self::ge_madd($r, $h, $t); + $h = self::ge_p1p1_to_p3($r); + } + return $h; + } + + /** + * Calculates (ab + c) mod l + * where l = 2^252 + 27742317777372353535851937790883648493 + * + * @internal You should not use this directly from another application + * + * @param string $a + * @param string $b + * @param string $c + * @return string + * @throws TypeError + */ + public static function sc_muladd($a, $b, $c) + { + /** @var int $a0 */ + $a0 = 2097151 & self::load_3(self::substr($a, 0, 3)); + /** @var int $a1 */ + $a1 = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5); + /** @var int $a2 */ + $a2 = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2); + /** @var int $a3 */ + $a3 = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7); + /** @var int $a4 */ + $a4 = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4); + /** @var int $a5 */ + $a5 = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1); + /** @var int $a6 */ + $a6 = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6); + /** @var int $a7 */ + $a7 = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3); + /** @var int $a8 */ + $a8 = 2097151 & self::load_3(self::substr($a, 21, 3)); + /** @var int $a9 */ + $a9 = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5); + /** @var int $a10 */ + $a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2); + /** @var int $a11 */ + $a11 = (self::load_4(self::substr($a, 28, 4)) >> 7); + + /** @var int $b0 */ + $b0 = 2097151 & self::load_3(self::substr($b, 0, 3)); + /** @var int $b1 */ + $b1 = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5); + /** @var int $b2 */ + $b2 = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2); + /** @var int $b3 */ + $b3 = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7); + /** @var int $b4 */ + $b4 = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4); + /** @var int $b5 */ + $b5 = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1); + /** @var int $b6 */ + $b6 = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6); + /** @var int $b7 */ + $b7 = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3); + /** @var int $b8 */ + $b8 = 2097151 & self::load_3(self::substr($b, 21, 3)); + /** @var int $b9 */ + $b9 = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5); + /** @var int $b10 */ + $b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2); + /** @var int $b11 */ + $b11 = (self::load_4(self::substr($b, 28, 4)) >> 7); + + /** @var int $c0 */ + $c0 = 2097151 & self::load_3(self::substr($c, 0, 3)); + /** @var int $c1 */ + $c1 = 2097151 & (self::load_4(self::substr($c, 2, 4)) >> 5); + /** @var int $c2 */ + $c2 = 2097151 & (self::load_3(self::substr($c, 5, 3)) >> 2); + /** @var int $c3 */ + $c3 = 2097151 & (self::load_4(self::substr($c, 7, 4)) >> 7); + /** @var int $c4 */ + $c4 = 2097151 & (self::load_4(self::substr($c, 10, 4)) >> 4); + /** @var int $c5 */ + $c5 = 2097151 & (self::load_3(self::substr($c, 13, 3)) >> 1); + /** @var int $c6 */ + $c6 = 2097151 & (self::load_4(self::substr($c, 15, 4)) >> 6); + /** @var int $c7 */ + $c7 = 2097151 & (self::load_3(self::substr($c, 18, 3)) >> 3); + /** @var int $c8 */ + $c8 = 2097151 & self::load_3(self::substr($c, 21, 3)); + /** @var int $c9 */ + $c9 = 2097151 & (self::load_4(self::substr($c, 23, 4)) >> 5); + /** @var int $c10 */ + $c10 = 2097151 & (self::load_3(self::substr($c, 26, 3)) >> 2); + /** @var int $c11 */ + $c11 = (self::load_4(self::substr($c, 28, 4)) >> 7); + + /* Can't really avoid the pyramid here: */ + $s0 = $c0 + self::mul($a0, $b0, 24); + $s1 = $c1 + self::mul($a0, $b1, 24) + self::mul($a1, $b0, 24); + $s2 = $c2 + self::mul($a0, $b2, 24) + self::mul($a1, $b1, 24) + self::mul($a2, $b0, 24); + $s3 = $c3 + self::mul($a0, $b3, 24) + self::mul($a1, $b2, 24) + self::mul($a2, $b1, 24) + self::mul($a3, $b0, 24); + $s4 = $c4 + self::mul($a0, $b4, 24) + self::mul($a1, $b3, 24) + self::mul($a2, $b2, 24) + self::mul($a3, $b1, 24) + + self::mul($a4, $b0, 24); + $s5 = $c5 + self::mul($a0, $b5, 24) + self::mul($a1, $b4, 24) + self::mul($a2, $b3, 24) + self::mul($a3, $b2, 24) + + self::mul($a4, $b1, 24) + self::mul($a5, $b0, 24); + $s6 = $c6 + self::mul($a0, $b6, 24) + self::mul($a1, $b5, 24) + self::mul($a2, $b4, 24) + self::mul($a3, $b3, 24) + + self::mul($a4, $b2, 24) + self::mul($a5, $b1, 24) + self::mul($a6, $b0, 24); + $s7 = $c7 + self::mul($a0, $b7, 24) + self::mul($a1, $b6, 24) + self::mul($a2, $b5, 24) + self::mul($a3, $b4, 24) + + self::mul($a4, $b3, 24) + self::mul($a5, $b2, 24) + self::mul($a6, $b1, 24) + self::mul($a7, $b0, 24); + $s8 = $c8 + self::mul($a0, $b8, 24) + self::mul($a1, $b7, 24) + self::mul($a2, $b6, 24) + self::mul($a3, $b5, 24) + + self::mul($a4, $b4, 24) + self::mul($a5, $b3, 24) + self::mul($a6, $b2, 24) + self::mul($a7, $b1, 24) + + self::mul($a8, $b0, 24); + $s9 = $c9 + self::mul($a0, $b9, 24) + self::mul($a1, $b8, 24) + self::mul($a2, $b7, 24) + self::mul($a3, $b6, 24) + + self::mul($a4, $b5, 24) + self::mul($a5, $b4, 24) + self::mul($a6, $b3, 24) + self::mul($a7, $b2, 24) + + self::mul($a8, $b1, 24) + self::mul($a9, $b0, 24); + $s10 = $c10 + self::mul($a0, $b10, 24) + self::mul($a1, $b9, 24) + self::mul($a2, $b8, 24) + self::mul($a3, $b7, 24) + + self::mul($a4, $b6, 24) + self::mul($a5, $b5, 24) + self::mul($a6, $b4, 24) + self::mul($a7, $b3, 24) + + self::mul($a8, $b2, 24) + self::mul($a9, $b1, 24) + self::mul($a10, $b0, 24); + $s11 = $c11 + self::mul($a0, $b11, 24) + self::mul($a1, $b10, 24) + self::mul($a2, $b9, 24) + self::mul($a3, $b8, 24) + + self::mul($a4, $b7, 24) + self::mul($a5, $b6, 24) + self::mul($a6, $b5, 24) + self::mul($a7, $b4, 24) + + self::mul($a8, $b3, 24) + self::mul($a9, $b2, 24) + self::mul($a10, $b1, 24) + self::mul($a11, $b0, 24); + $s12 = self::mul($a1, $b11, 24) + self::mul($a2, $b10, 24) + self::mul($a3, $b9, 24) + self::mul($a4, $b8, 24) + + self::mul($a5, $b7, 24) + self::mul($a6, $b6, 24) + self::mul($a7, $b5, 24) + self::mul($a8, $b4, 24) + + self::mul($a9, $b3, 24) + self::mul($a10, $b2, 24) + self::mul($a11, $b1, 24); + $s13 = self::mul($a2, $b11, 24) + self::mul($a3, $b10, 24) + self::mul($a4, $b9, 24) + self::mul($a5, $b8, 24) + + self::mul($a6, $b7, 24) + self::mul($a7, $b6, 24) + self::mul($a8, $b5, 24) + self::mul($a9, $b4, 24) + + self::mul($a10, $b3, 24) + self::mul($a11, $b2, 24); + $s14 = self::mul($a3, $b11, 24) + self::mul($a4, $b10, 24) + self::mul($a5, $b9, 24) + self::mul($a6, $b8, 24) + + self::mul($a7, $b7, 24) + self::mul($a8, $b6, 24) + self::mul($a9, $b5, 24) + self::mul($a10, $b4, 24) + + self::mul($a11, $b3, 24); + $s15 = self::mul($a4, $b11, 24) + self::mul($a5, $b10, 24) + self::mul($a6, $b9, 24) + self::mul($a7, $b8, 24) + + self::mul($a8, $b7, 24) + self::mul($a9, $b6, 24) + self::mul($a10, $b5, 24) + self::mul($a11, $b4, 24); + $s16 = self::mul($a5, $b11, 24) + self::mul($a6, $b10, 24) + self::mul($a7, $b9, 24) + self::mul($a8, $b8, 24) + + self::mul($a9, $b7, 24) + self::mul($a10, $b6, 24) + self::mul($a11, $b5, 24); + $s17 = self::mul($a6, $b11, 24) + self::mul($a7, $b10, 24) + self::mul($a8, $b9, 24) + self::mul($a9, $b8, 24) + + self::mul($a10, $b7, 24) + self::mul($a11, $b6, 24); + $s18 = self::mul($a7, $b11, 24) + self::mul($a8, $b10, 24) + self::mul($a9, $b9, 24) + self::mul($a10, $b8, 24) + + self::mul($a11, $b7, 24); + $s19 = self::mul($a8, $b11, 24) + self::mul($a9, $b10, 24) + self::mul($a10, $b9, 24) + self::mul($a11, $b8, 24); + $s20 = self::mul($a9, $b11, 24) + self::mul($a10, $b10, 24) + self::mul($a11, $b9, 24); + $s21 = self::mul($a10, $b11, 24) + self::mul($a11, $b10, 24); + $s22 = self::mul($a11, $b11, 24); + $s23 = 0; + + /** @var int $carry0 */ + $carry0 = ($s0 + (1 << 20)) >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry2 */ + $carry2 = ($s2 + (1 << 20)) >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry4 */ + $carry4 = ($s4 + (1 << 20)) >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry6 */ + $carry6 = ($s6 + (1 << 20)) >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry8 */ + $carry8 = ($s8 + (1 << 20)) >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry10 */ + $carry10 = ($s10 + (1 << 20)) >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + /** @var int $carry12 */ + $carry12 = ($s12 + (1 << 20)) >> 21; + $s13 += $carry12; + $s12 -= $carry12 << 21; + /** @var int $carry14 */ + $carry14 = ($s14 + (1 << 20)) >> 21; + $s15 += $carry14; + $s14 -= $carry14 << 21; + /** @var int $carry16 */ + $carry16 = ($s16 + (1 << 20)) >> 21; + $s17 += $carry16; + $s16 -= $carry16 << 21; + /** @var int $carry18 */ + $carry18 = ($s18 + (1 << 20)) >> 21; + $s19 += $carry18; + $s18 -= $carry18 << 21; + /** @var int $carry20 */ + $carry20 = ($s20 + (1 << 20)) >> 21; + $s21 += $carry20; + $s20 -= $carry20 << 21; + /** @var int $carry22 */ + $carry22 = ($s22 + (1 << 20)) >> 21; + $s23 += $carry22; + $s22 -= $carry22 << 21; + + /** @var int $carry1 */ + $carry1 = ($s1 + (1 << 20)) >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry3 */ + $carry3 = ($s3 + (1 << 20)) >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry5 */ + $carry5 = ($s5 + (1 << 20)) >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry7 */ + $carry7 = ($s7 + (1 << 20)) >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry9 */ + $carry9 = ($s9 + (1 << 20)) >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry11 */ + $carry11 = ($s11 + (1 << 20)) >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + /** @var int $carry13 */ + $carry13 = ($s13 + (1 << 20)) >> 21; + $s14 += $carry13; + $s13 -= $carry13 << 21; + /** @var int $carry15 */ + $carry15 = ($s15 + (1 << 20)) >> 21; + $s16 += $carry15; + $s15 -= $carry15 << 21; + /** @var int $carry17 */ + $carry17 = ($s17 + (1 << 20)) >> 21; + $s18 += $carry17; + $s17 -= $carry17 << 21; + /** @var int $carry19 */ + $carry19 = ($s19 + (1 << 20)) >> 21; + $s20 += $carry19; + $s19 -= $carry19 << 21; + /** @var int $carry21 */ + $carry21 = ($s21 + (1 << 20)) >> 21; + $s22 += $carry21; + $s21 -= $carry21 << 21; + + $s11 += self::mul($s23, 666643, 20); + $s12 += self::mul($s23, 470296, 19); + $s13 += self::mul($s23, 654183, 20); + $s14 -= self::mul($s23, 997805, 20); + $s15 += self::mul($s23, 136657, 18); + $s16 -= self::mul($s23, 683901, 20); + + $s10 += self::mul($s22, 666643, 20); + $s11 += self::mul($s22, 470296, 19); + $s12 += self::mul($s22, 654183, 20); + $s13 -= self::mul($s22, 997805, 20); + $s14 += self::mul($s22, 136657, 18); + $s15 -= self::mul($s22, 683901, 20); + + $s9 += self::mul($s21, 666643, 20); + $s10 += self::mul($s21, 470296, 19); + $s11 += self::mul($s21, 654183, 20); + $s12 -= self::mul($s21, 997805, 20); + $s13 += self::mul($s21, 136657, 18); + $s14 -= self::mul($s21, 683901, 20); + + $s8 += self::mul($s20, 666643, 20); + $s9 += self::mul($s20, 470296, 19); + $s10 += self::mul($s20, 654183, 20); + $s11 -= self::mul($s20, 997805, 20); + $s12 += self::mul($s20, 136657, 18); + $s13 -= self::mul($s20, 683901, 20); + + $s7 += self::mul($s19, 666643, 20); + $s8 += self::mul($s19, 470296, 19); + $s9 += self::mul($s19, 654183, 20); + $s10 -= self::mul($s19, 997805, 20); + $s11 += self::mul($s19, 136657, 18); + $s12 -= self::mul($s19, 683901, 20); + + $s6 += self::mul($s18, 666643, 20); + $s7 += self::mul($s18, 470296, 19); + $s8 += self::mul($s18, 654183, 20); + $s9 -= self::mul($s18, 997805, 20); + $s10 += self::mul($s18, 136657, 18); + $s11 -= self::mul($s18, 683901, 20); + + /** @var int $carry6 */ + $carry6 = ($s6 + (1 << 20)) >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry8 */ + $carry8 = ($s8 + (1 << 20)) >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry10 */ + $carry10 = ($s10 + (1 << 20)) >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + /** @var int $carry12 */ + $carry12 = ($s12 + (1 << 20)) >> 21; + $s13 += $carry12; + $s12 -= $carry12 << 21; + /** @var int $carry14 */ + $carry14 = ($s14 + (1 << 20)) >> 21; + $s15 += $carry14; + $s14 -= $carry14 << 21; + /** @var int $carry16 */ + $carry16 = ($s16 + (1 << 20)) >> 21; + $s17 += $carry16; + $s16 -= $carry16 << 21; + + /** @var int $carry7 */ + $carry7 = ($s7 + (1 << 20)) >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry9 */ + $carry9 = ($s9 + (1 << 20)) >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry11 */ + $carry11 = ($s11 + (1 << 20)) >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + /** @var int $carry13 */ + $carry13 = ($s13 + (1 << 20)) >> 21; + $s14 += $carry13; + $s13 -= $carry13 << 21; + /** @var int $carry15 */ + $carry15 = ($s15 + (1 << 20)) >> 21; + $s16 += $carry15; + $s15 -= $carry15 << 21; + + $s5 += self::mul($s17, 666643, 20); + $s6 += self::mul($s17, 470296, 19); + $s7 += self::mul($s17, 654183, 20); + $s8 -= self::mul($s17, 997805, 20); + $s9 += self::mul($s17, 136657, 18); + $s10 -= self::mul($s17, 683901, 20); + + $s4 += self::mul($s16, 666643, 20); + $s5 += self::mul($s16, 470296, 19); + $s6 += self::mul($s16, 654183, 20); + $s7 -= self::mul($s16, 997805, 20); + $s8 += self::mul($s16, 136657, 18); + $s9 -= self::mul($s16, 683901, 20); + + $s3 += self::mul($s15, 666643, 20); + $s4 += self::mul($s15, 470296, 19); + $s5 += self::mul($s15, 654183, 20); + $s6 -= self::mul($s15, 997805, 20); + $s7 += self::mul($s15, 136657, 18); + $s8 -= self::mul($s15, 683901, 20); + + $s2 += self::mul($s14, 666643, 20); + $s3 += self::mul($s14, 470296, 19); + $s4 += self::mul($s14, 654183, 20); + $s5 -= self::mul($s14, 997805, 20); + $s6 += self::mul($s14, 136657, 18); + $s7 -= self::mul($s14, 683901, 20); + + $s1 += self::mul($s13, 666643, 20); + $s2 += self::mul($s13, 470296, 19); + $s3 += self::mul($s13, 654183, 20); + $s4 -= self::mul($s13, 997805, 20); + $s5 += self::mul($s13, 136657, 18); + $s6 -= self::mul($s13, 683901, 20); + + $s0 += self::mul($s12, 666643, 20); + $s1 += self::mul($s12, 470296, 19); + $s2 += self::mul($s12, 654183, 20); + $s3 -= self::mul($s12, 997805, 20); + $s4 += self::mul($s12, 136657, 18); + $s5 -= self::mul($s12, 683901, 20); + $s12 = 0; + + /** @var int $carry0 */ + $carry0 = ($s0 + (1 << 20)) >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry2 */ + $carry2 = ($s2 + (1 << 20)) >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry4 */ + $carry4 = ($s4 + (1 << 20)) >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry6 */ + $carry6 = ($s6 + (1 << 20)) >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry8 */ + $carry8 = ($s8 + (1 << 20)) >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry10 */ + $carry10 = ($s10 + (1 << 20)) >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + + /** @var int $carry1 */ + $carry1 = ($s1 + (1 << 20)) >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry3 */ + $carry3 = ($s3 + (1 << 20)) >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry5 */ + $carry5 = ($s5 + (1 << 20)) >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry7 */ + $carry7 = ($s7 + (1 << 20)) >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry9 */ + $carry9 = ($s9 + (1 << 20)) >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry11 */ + $carry11 = ($s11 + (1 << 20)) >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + + $s0 += self::mul($s12, 666643, 20); + $s1 += self::mul($s12, 470296, 19); + $s2 += self::mul($s12, 654183, 20); + $s3 -= self::mul($s12, 997805, 20); + $s4 += self::mul($s12, 136657, 18); + $s5 -= self::mul($s12, 683901, 20); + $s12 = 0; + + /** @var int $carry0 */ + $carry0 = $s0 >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry1 */ + $carry1 = $s1 >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry2 */ + $carry2 = $s2 >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry3 */ + $carry3 = $s3 >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry4 */ + $carry4 = $s4 >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry5 */ + $carry5 = $s5 >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry6 */ + $carry6 = $s6 >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry7 */ + $carry7 = $s7 >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry8 */ + $carry8 = $s8 >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry9 */ + $carry9 = $s9 >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry10 */ + $carry10 = $s10 >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + /** @var int $carry11 */ + $carry11 = $s11 >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + + $s0 += self::mul($s12, 666643, 20); + $s1 += self::mul($s12, 470296, 19); + $s2 += self::mul($s12, 654183, 20); + $s3 -= self::mul($s12, 997805, 20); + $s4 += self::mul($s12, 136657, 18); + $s5 -= self::mul($s12, 683901, 20); + + /** @var int $carry0 */ + $carry0 = $s0 >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry1 */ + $carry1 = $s1 >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry2 */ + $carry2 = $s2 >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry3 */ + $carry3 = $s3 >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry4 */ + $carry4 = $s4 >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry5 */ + $carry5 = $s5 >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry6 */ + $carry6 = $s6 >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry7 */ + $carry7 = $s7 >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry8 */ + $carry8 = $s8 >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry9 */ + $carry9 = $s9 >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry10 */ + $carry10 = $s10 >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + + /** + * @var array + */ + $arr = array( + (int) (0xff & ($s0 >> 0)), + (int) (0xff & ($s0 >> 8)), + (int) (0xff & (($s0 >> 16) | $s1 << 5)), + (int) (0xff & ($s1 >> 3)), + (int) (0xff & ($s1 >> 11)), + (int) (0xff & (($s1 >> 19) | $s2 << 2)), + (int) (0xff & ($s2 >> 6)), + (int) (0xff & (($s2 >> 14) | $s3 << 7)), + (int) (0xff & ($s3 >> 1)), + (int) (0xff & ($s3 >> 9)), + (int) (0xff & (($s3 >> 17) | $s4 << 4)), + (int) (0xff & ($s4 >> 4)), + (int) (0xff & ($s4 >> 12)), + (int) (0xff & (($s4 >> 20) | $s5 << 1)), + (int) (0xff & ($s5 >> 7)), + (int) (0xff & (($s5 >> 15) | $s6 << 6)), + (int) (0xff & ($s6 >> 2)), + (int) (0xff & ($s6 >> 10)), + (int) (0xff & (($s6 >> 18) | $s7 << 3)), + (int) (0xff & ($s7 >> 5)), + (int) (0xff & ($s7 >> 13)), + (int) (0xff & ($s8 >> 0)), + (int) (0xff & ($s8 >> 8)), + (int) (0xff & (($s8 >> 16) | $s9 << 5)), + (int) (0xff & ($s9 >> 3)), + (int) (0xff & ($s9 >> 11)), + (int) (0xff & (($s9 >> 19) | $s10 << 2)), + (int) (0xff & ($s10 >> 6)), + (int) (0xff & (($s10 >> 14) | $s11 << 7)), + (int) (0xff & ($s11 >> 1)), + (int) (0xff & ($s11 >> 9)), + 0xff & ($s11 >> 17) + ); + return self::intArrayToString($arr); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $s + * @return string + * @throws TypeError + */ + public static function sc_reduce($s) + { + /** @var int $s0 */ + $s0 = 2097151 & self::load_3(self::substr($s, 0, 3)); + /** @var int $s1 */ + $s1 = 2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5); + /** @var int $s2 */ + $s2 = 2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2); + /** @var int $s3 */ + $s3 = 2097151 & (self::load_4(self::substr($s, 7, 4)) >> 7); + /** @var int $s4 */ + $s4 = 2097151 & (self::load_4(self::substr($s, 10, 4)) >> 4); + /** @var int $s5 */ + $s5 = 2097151 & (self::load_3(self::substr($s, 13, 3)) >> 1); + /** @var int $s6 */ + $s6 = 2097151 & (self::load_4(self::substr($s, 15, 4)) >> 6); + /** @var int $s7 */ + $s7 = 2097151 & (self::load_3(self::substr($s, 18, 4)) >> 3); + /** @var int $s8 */ + $s8 = 2097151 & self::load_3(self::substr($s, 21, 3)); + /** @var int $s9 */ + $s9 = 2097151 & (self::load_4(self::substr($s, 23, 4)) >> 5); + /** @var int $s10 */ + $s10 = 2097151 & (self::load_3(self::substr($s, 26, 3)) >> 2); + /** @var int $s11 */ + $s11 = 2097151 & (self::load_4(self::substr($s, 28, 4)) >> 7); + /** @var int $s12 */ + $s12 = 2097151 & (self::load_4(self::substr($s, 31, 4)) >> 4); + /** @var int $s13 */ + $s13 = 2097151 & (self::load_3(self::substr($s, 34, 3)) >> 1); + /** @var int $s14 */ + $s14 = 2097151 & (self::load_4(self::substr($s, 36, 4)) >> 6); + /** @var int $s15 */ + $s15 = 2097151 & (self::load_3(self::substr($s, 39, 4)) >> 3); + /** @var int $s16 */ + $s16 = 2097151 & self::load_3(self::substr($s, 42, 3)); + /** @var int $s17 */ + $s17 = 2097151 & (self::load_4(self::substr($s, 44, 4)) >> 5); + /** @var int $s18 */ + $s18 = 2097151 & (self::load_3(self::substr($s, 47, 3)) >> 2); + /** @var int $s19 */ + $s19 = 2097151 & (self::load_4(self::substr($s, 49, 4)) >> 7); + /** @var int $s20 */ + $s20 = 2097151 & (self::load_4(self::substr($s, 52, 4)) >> 4); + /** @var int $s21 */ + $s21 = 2097151 & (self::load_3(self::substr($s, 55, 3)) >> 1); + /** @var int $s22 */ + $s22 = 2097151 & (self::load_4(self::substr($s, 57, 4)) >> 6); + /** @var int $s23 */ + $s23 = (self::load_4(self::substr($s, 60, 4)) >> 3); + + $s11 += self::mul($s23, 666643, 20); + $s12 += self::mul($s23, 470296, 19); + $s13 += self::mul($s23, 654183, 20); + $s14 -= self::mul($s23, 997805, 20); + $s15 += self::mul($s23, 136657, 18); + $s16 -= self::mul($s23, 683901, 20); + + $s10 += self::mul($s22, 666643, 20); + $s11 += self::mul($s22, 470296, 19); + $s12 += self::mul($s22, 654183, 20); + $s13 -= self::mul($s22, 997805, 20); + $s14 += self::mul($s22, 136657, 18); + $s15 -= self::mul($s22, 683901, 20); + + $s9 += self::mul($s21, 666643, 20); + $s10 += self::mul($s21, 470296, 19); + $s11 += self::mul($s21, 654183, 20); + $s12 -= self::mul($s21, 997805, 20); + $s13 += self::mul($s21, 136657, 18); + $s14 -= self::mul($s21, 683901, 20); + + $s8 += self::mul($s20, 666643, 20); + $s9 += self::mul($s20, 470296, 19); + $s10 += self::mul($s20, 654183, 20); + $s11 -= self::mul($s20, 997805, 20); + $s12 += self::mul($s20, 136657, 18); + $s13 -= self::mul($s20, 683901, 20); + + $s7 += self::mul($s19, 666643, 20); + $s8 += self::mul($s19, 470296, 19); + $s9 += self::mul($s19, 654183, 20); + $s10 -= self::mul($s19, 997805, 20); + $s11 += self::mul($s19, 136657, 18); + $s12 -= self::mul($s19, 683901, 20); + + $s6 += self::mul($s18, 666643, 20); + $s7 += self::mul($s18, 470296, 19); + $s8 += self::mul($s18, 654183, 20); + $s9 -= self::mul($s18, 997805, 20); + $s10 += self::mul($s18, 136657, 18); + $s11 -= self::mul($s18, 683901, 20); + + /** @var int $carry6 */ + $carry6 = ($s6 + (1 << 20)) >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry8 */ + $carry8 = ($s8 + (1 << 20)) >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry10 */ + $carry10 = ($s10 + (1 << 20)) >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + /** @var int $carry12 */ + $carry12 = ($s12 + (1 << 20)) >> 21; + $s13 += $carry12; + $s12 -= $carry12 << 21; + /** @var int $carry14 */ + $carry14 = ($s14 + (1 << 20)) >> 21; + $s15 += $carry14; + $s14 -= $carry14 << 21; + /** @var int $carry16 */ + $carry16 = ($s16 + (1 << 20)) >> 21; + $s17 += $carry16; + $s16 -= $carry16 << 21; + + /** @var int $carry7 */ + $carry7 = ($s7 + (1 << 20)) >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry9 */ + $carry9 = ($s9 + (1 << 20)) >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry11 */ + $carry11 = ($s11 + (1 << 20)) >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + /** @var int $carry13 */ + $carry13 = ($s13 + (1 << 20)) >> 21; + $s14 += $carry13; + $s13 -= $carry13 << 21; + /** @var int $carry15 */ + $carry15 = ($s15 + (1 << 20)) >> 21; + $s16 += $carry15; + $s15 -= $carry15 << 21; + + $s5 += self::mul($s17, 666643, 20); + $s6 += self::mul($s17, 470296, 19); + $s7 += self::mul($s17, 654183, 20); + $s8 -= self::mul($s17, 997805, 20); + $s9 += self::mul($s17, 136657, 18); + $s10 -= self::mul($s17, 683901, 20); + + $s4 += self::mul($s16, 666643, 20); + $s5 += self::mul($s16, 470296, 19); + $s6 += self::mul($s16, 654183, 20); + $s7 -= self::mul($s16, 997805, 20); + $s8 += self::mul($s16, 136657, 18); + $s9 -= self::mul($s16, 683901, 20); + + $s3 += self::mul($s15, 666643, 20); + $s4 += self::mul($s15, 470296, 19); + $s5 += self::mul($s15, 654183, 20); + $s6 -= self::mul($s15, 997805, 20); + $s7 += self::mul($s15, 136657, 18); + $s8 -= self::mul($s15, 683901, 20); + + $s2 += self::mul($s14, 666643, 20); + $s3 += self::mul($s14, 470296, 19); + $s4 += self::mul($s14, 654183, 20); + $s5 -= self::mul($s14, 997805, 20); + $s6 += self::mul($s14, 136657, 18); + $s7 -= self::mul($s14, 683901, 20); + + $s1 += self::mul($s13, 666643, 20); + $s2 += self::mul($s13, 470296, 19); + $s3 += self::mul($s13, 654183, 20); + $s4 -= self::mul($s13, 997805, 20); + $s5 += self::mul($s13, 136657, 18); + $s6 -= self::mul($s13, 683901, 20); + + $s0 += self::mul($s12, 666643, 20); + $s1 += self::mul($s12, 470296, 19); + $s2 += self::mul($s12, 654183, 20); + $s3 -= self::mul($s12, 997805, 20); + $s4 += self::mul($s12, 136657, 18); + $s5 -= self::mul($s12, 683901, 20); + $s12 = 0; + + /** @var int $carry0 */ + $carry0 = ($s0 + (1 << 20)) >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry2 */ + $carry2 = ($s2 + (1 << 20)) >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry4 */ + $carry4 = ($s4 + (1 << 20)) >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry6 */ + $carry6 = ($s6 + (1 << 20)) >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry8 */ + $carry8 = ($s8 + (1 << 20)) >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry10 */ + $carry10 = ($s10 + (1 << 20)) >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + + /** @var int $carry1 */ + $carry1 = ($s1 + (1 << 20)) >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry3 */ + $carry3 = ($s3 + (1 << 20)) >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry5 */ + $carry5 = ($s5 + (1 << 20)) >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry7 */ + $carry7 = ($s7 + (1 << 20)) >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry9 */ + $carry9 = ($s9 + (1 << 20)) >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry11 */ + $carry11 = ($s11 + (1 << 20)) >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + + $s0 += self::mul($s12, 666643, 20); + $s1 += self::mul($s12, 470296, 19); + $s2 += self::mul($s12, 654183, 20); + $s3 -= self::mul($s12, 997805, 20); + $s4 += self::mul($s12, 136657, 18); + $s5 -= self::mul($s12, 683901, 20); + $s12 = 0; + + /** @var int $carry0 */ + $carry0 = $s0 >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry1 */ + $carry1 = $s1 >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry2 */ + $carry2 = $s2 >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry3 */ + $carry3 = $s3 >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry4 */ + $carry4 = $s4 >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry5 */ + $carry5 = $s5 >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry6 */ + $carry6 = $s6 >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry7 */ + $carry7 = $s7 >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry8 */ + $carry8 = $s8 >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry9 */ + $carry9 = $s9 >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry10 */ + $carry10 = $s10 >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + /** @var int $carry11 */ + $carry11 = $s11 >> 21; + $s12 += $carry11; + $s11 -= $carry11 << 21; + + $s0 += self::mul($s12, 666643, 20); + $s1 += self::mul($s12, 470296, 19); + $s2 += self::mul($s12, 654183, 20); + $s3 -= self::mul($s12, 997805, 20); + $s4 += self::mul($s12, 136657, 18); + $s5 -= self::mul($s12, 683901, 20); + + /** @var int $carry0 */ + $carry0 = $s0 >> 21; + $s1 += $carry0; + $s0 -= $carry0 << 21; + /** @var int $carry1 */ + $carry1 = $s1 >> 21; + $s2 += $carry1; + $s1 -= $carry1 << 21; + /** @var int $carry2 */ + $carry2 = $s2 >> 21; + $s3 += $carry2; + $s2 -= $carry2 << 21; + /** @var int $carry3 */ + $carry3 = $s3 >> 21; + $s4 += $carry3; + $s3 -= $carry3 << 21; + /** @var int $carry4 */ + $carry4 = $s4 >> 21; + $s5 += $carry4; + $s4 -= $carry4 << 21; + /** @var int $carry5 */ + $carry5 = $s5 >> 21; + $s6 += $carry5; + $s5 -= $carry5 << 21; + /** @var int $carry6 */ + $carry6 = $s6 >> 21; + $s7 += $carry6; + $s6 -= $carry6 << 21; + /** @var int $carry7 */ + $carry7 = $s7 >> 21; + $s8 += $carry7; + $s7 -= $carry7 << 21; + /** @var int $carry8 */ + $carry8 = $s8 >> 21; + $s9 += $carry8; + $s8 -= $carry8 << 21; + /** @var int $carry9 */ + $carry9 = $s9 >> 21; + $s10 += $carry9; + $s9 -= $carry9 << 21; + /** @var int $carry10 */ + $carry10 = $s10 >> 21; + $s11 += $carry10; + $s10 -= $carry10 << 21; + + /** + * @var array + */ + $arr = array( + (int) ($s0 >> 0), + (int) ($s0 >> 8), + (int) (($s0 >> 16) | $s1 << 5), + (int) ($s1 >> 3), + (int) ($s1 >> 11), + (int) (($s1 >> 19) | $s2 << 2), + (int) ($s2 >> 6), + (int) (($s2 >> 14) | $s3 << 7), + (int) ($s3 >> 1), + (int) ($s3 >> 9), + (int) (($s3 >> 17) | $s4 << 4), + (int) ($s4 >> 4), + (int) ($s4 >> 12), + (int) (($s4 >> 20) | $s5 << 1), + (int) ($s5 >> 7), + (int) (($s5 >> 15) | $s6 << 6), + (int) ($s6 >> 2), + (int) ($s6 >> 10), + (int) (($s6 >> 18) | $s7 << 3), + (int) ($s7 >> 5), + (int) ($s7 >> 13), + (int) ($s8 >> 0), + (int) ($s8 >> 8), + (int) (($s8 >> 16) | $s9 << 5), + (int) ($s9 >> 3), + (int) ($s9 >> 11), + (int) (($s9 >> 19) | $s10 << 2), + (int) ($s10 >> 6), + (int) (($s10 >> 14) | $s11 << 7), + (int) ($s11 >> 1), + (int) ($s11 >> 9), + (int) $s11 >> 17 + ); + return self::intArrayToString($arr); + } + + /** + * multiply by the order of the main subgroup l = 2^252+27742317777372353535851937790883648493 + * + * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A + * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3 + */ + public static function ge_mul_l(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A) + { + /** @var array $aslide */ + $aslide = array( + 13, 0, 0, 0, 0, -1, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, -5, 0, 0, 0, + 0, 0, 0, -3, 0, 0, 0, 0, -13, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 3, 0, + 0, 0, 0, -13, 0, 0, 0, 0, 5, 0, 0, 0, 0, 0, 0, 0, 0, 11, 0, 0, 0, + 0, 0, 11, 0, 0, 0, 0, -13, 0, 0, 0, 0, 0, 0, -3, 0, 0, 0, 0, 0, -1, + 0, 0, 0, 0, 3, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, 0, 15, 0, 0, 0, + 0, 0, -1, 0, 0, 0, 0, -1, 0, 0, 0, 0, 7, 0, 0, 0, 0, 5, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1 + ); + + /** @var array $Ai size 8 */ + $Ai = array(); + + # ge_p3_to_cached(&Ai[0], A); + $Ai[0] = self::ge_p3_to_cached($A); + # ge_p3_dbl(&t, A); + $t = self::ge_p3_dbl($A); + # ge_p1p1_to_p3(&A2, &t); + $A2 = self::ge_p1p1_to_p3($t); + + for ($i = 1; $i < 8; ++$i) { + # ge_add(&t, &A2, &Ai[0]); + $t = self::ge_add($A2, $Ai[$i - 1]); + # ge_p1p1_to_p3(&u, &t); + $u = self::ge_p1p1_to_p3($t); + # ge_p3_to_cached(&Ai[i], &u); + $Ai[$i] = self::ge_p3_to_cached($u); + } + + $r = self::ge_p3_0(); + for ($i = 252; $i >= 0; --$i) { + $t = self::ge_p3_dbl($r); + if ($aslide[$i] > 0) { + # ge_p1p1_to_p3(&u, &t); + $u = self::ge_p1p1_to_p3($t); + # ge_add(&t, &u, &Ai[aslide[i] / 2]); + $t = self::ge_add($u, $Ai[(int)($aslide[$i] / 2)]); + } elseif ($aslide[$i] < 0) { + # ge_p1p1_to_p3(&u, &t); + $u = self::ge_p1p1_to_p3($t); + # ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]); + $t = self::ge_sub($u, $Ai[(int)(-$aslide[$i] / 2)]); + } + } + + # ge_p1p1_to_p3(r, &t); + return self::ge_p1p1_to_p3($t); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/Fe.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Fe.php new file mode 100644 index 000000000..64c489ae0 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Fe.php @@ -0,0 +1,123 @@ + + */ + protected $container = array(); + + /** + * @var int + */ + protected $size = 10; + + /** + * @internal You should not use this directly from another application + * + * @param array $array + * @param bool $save_indexes + * @return self + */ + public static function fromArray($array, $save_indexes = null) + { + $count = count($array); + if ($save_indexes) { + $keys = array_keys($array); + } else { + $keys = range(0, $count - 1); + } + $array = array_values($array); + /** @var array $keys */ + + $obj = new ParagonIE_Sodium_Core_Curve25519_Fe(); + if ($save_indexes) { + for ($i = 0; $i < $count; ++$i) { + $obj->offsetSet($keys[$i], $array[$i]); + } + } else { + for ($i = 0; $i < $count; ++$i) { + $obj->offsetSet($i, $array[$i]); + } + } + return $obj; + } + + /** + * @internal You should not use this directly from another application + * + * @param int|null $offset + * @param int $value + * @return void + * @psalm-suppress MixedArrayOffset + */ + public function offsetSet($offset, $value) + { + if (!is_int($value)) { + throw new InvalidArgumentException('Expected an integer'); + } + if (is_null($offset)) { + $this->container[] = $value; + } else { + $this->container[$offset] = $value; + } + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return bool + * @psalm-suppress MixedArrayOffset + */ + public function offsetExists($offset) + { + return isset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return void + * @psalm-suppress MixedArrayOffset + */ + public function offsetUnset($offset) + { + unset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return int + * @psalm-suppress MixedArrayOffset + */ + public function offsetGet($offset) + { + if (!isset($this->container[$offset])) { + $this->container[$offset] = 0; + } + return (int) ($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @return array + */ + public function __debugInfo() + { + return array(implode(', ', $this->container)); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Cached.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Cached.php new file mode 100644 index 000000000..39bf89777 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Cached.php @@ -0,0 +1,65 @@ +YplusX = $YplusX; + if ($YminusX === null) { + $YminusX = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->YminusX = $YminusX; + if ($Z === null) { + $Z = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Z = $Z; + if ($T2d === null) { + $T2d = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->T2d = $T2d; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P1p1.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P1p1.php new file mode 100644 index 000000000..a63d6ab23 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P1p1.php @@ -0,0 +1,64 @@ +X = $x; + if ($y === null) { + $y = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Y = $y; + if ($z === null) { + $z = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Z = $z; + if ($t === null) { + $t = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->T = $t; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P2.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P2.php new file mode 100644 index 000000000..aee4000d1 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P2.php @@ -0,0 +1,54 @@ +X = $x; + if ($y === null) { + $y = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Y = $y; + if ($z === null) { + $z = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Z = $z; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P3.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P3.php new file mode 100644 index 000000000..00f5b27a4 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P3.php @@ -0,0 +1,65 @@ +X = $x; + if ($y === null) { + $y = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Y = $y; + if ($z === null) { + $z = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->Z = $z; + if ($t === null) { + $t = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->T = $t; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Precomp.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Precomp.php new file mode 100644 index 000000000..59611c103 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Precomp.php @@ -0,0 +1,54 @@ +yplusx = $yplusx; + if ($yminusx === null) { + $yminusx = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->yminusx = $yminusx; + if ($xy2d === null) { + $xy2d = new ParagonIE_Sodium_Core_Curve25519_Fe(); + } + $this->xy2d = $xy2d; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/H.php b/vendor/paragonie/sodium_compat/src/Core/Curve25519/H.php new file mode 100644 index 000000000..37ad497dc --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/H.php @@ -0,0 +1,1467 @@ +>>> Basically, int[32][8][3][10] + */ + protected static $base = array( + array( + array( + array(25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626, -11754271, -6079156, 2047605), + array(-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692, 5043384, 19500929, -15469378), + array(-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919, 11864899, -24514362, -4438546), + ), + array( + array(-12815894, -12976347, -21581243, 11784320, -25355658, -2750717, -11717903, -3814571, -358445, -10211303), + array(-21703237, 6903825, 27185491, 6451973, -29577724, -9554005, -15616551, 11189268, -26829678, -5319081), + array(26966642, 11152617, 32442495, 15396054, 14353839, -12752335, -3128826, -9541118, -15472047, -4166697), + ), + array( + array(15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600, -14772189, 28944400, -1550024), + array(16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577, -11775962, 7689662, 11199574), + array(30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774, 10017326, -17749093, -9920357), + ), + array( + array(-17036878, 13921892, 10945806, -6033431, 27105052, -16084379, -28926210, 15006023, 3284568, -6276540), + array(23599295, -8306047, -11193664, -7687416, 13236774, 10506355, 7464579, 9656445, 13059162, 10374397), + array(7798556, 16710257, 3033922, 2874086, 28997861, 2835604, 32406664, -3839045, -641708, -101325), + ), + array( + array(10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885, 14515107, -15438304, 10819380), + array(4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668, 12483688, -12668491, 5581306), + array(19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350, 13850243, -23678021, -15815942), + ), + array( + array(-15371964, -12862754, 32573250, 4720197, -26436522, 5875511, -19188627, -15224819, -9818940, -12085777), + array(-8549212, 109983, 15149363, 2178705, 22900618, 4543417, 3044240, -15689887, 1762328, 14866737), + array(-18199695, -15951423, -10473290, 1707278, -17185920, 3916101, -28236412, 3959421, 27914454, 4383652), + ), + array( + array(5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852, 5230134, -23952439, -15175766), + array(-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025, 16520125, 30598449, 7715701), + array(28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660, 1370708, 29794553, -1409300), + ), + array( + array(14499471, -2729599, -33191113, -4254652, 28494862, 14271267, 30290735, 10876454, -33154098, 2381726), + array(-7195431, -2655363, -14730155, 462251, -27724326, 3941372, -6236617, 3696005, -32300832, 15351955), + array(27431194, 8222322, 16448760, -3907995, -18707002, 11938355, -32961401, -2970515, 29551813, 10109425), + ), + ), + array( + array( + array(-13657040, -13155431, -31283750, 11777098, 21447386, 6519384, -2378284, -1627556, 10092783, -4764171), + array(27939166, 14210322, 4677035, 16277044, -22964462, -12398139, -32508754, 12005538, -17810127, 12803510), + array(17228999, -15661624, -1233527, 300140, -1224870, -11714777, 30364213, -9038194, 18016357, 4397660), + ), + array( + array(-10958843, -7690207, 4776341, -14954238, 27850028, -15602212, -26619106, 14544525, -17477504, 982639), + array(29253598, 15796703, -2863982, -9908884, 10057023, 3163536, 7332899, -4120128, -21047696, 9934963), + array(5793303, 16271923, -24131614, -10116404, 29188560, 1206517, -14747930, 4559895, -30123922, -10897950), + ), + array( + array(-27643952, -11493006, 16282657, -11036493, 28414021, -15012264, 24191034, 4541697, -13338309, 5500568), + array(12650548, -1497113, 9052871, 11355358, -17680037, -8400164, -17430592, 12264343, 10874051, 13524335), + array(25556948, -3045990, 714651, 2510400, 23394682, -10415330, 33119038, 5080568, -22528059, 5376628), + ), + array( + array(-26088264, -4011052, -17013699, -3537628, -6726793, 1920897, -22321305, -9447443, 4535768, 1569007), + array(-2255422, 14606630, -21692440, -8039818, 28430649, 8775819, -30494562, 3044290, 31848280, 12543772), + array(-22028579, 2943893, -31857513, 6777306, 13784462, -4292203, -27377195, -2062731, 7718482, 14474653), + ), + array( + array(2385315, 2454213, -22631320, 46603, -4437935, -15680415, 656965, -7236665, 24316168, -5253567), + array(13741529, 10911568, -33233417, -8603737, -20177830, -1033297, 33040651, -13424532, -20729456, 8321686), + array(21060490, -2212744, 15712757, -4336099, 1639040, 10656336, 23845965, -11874838, -9984458, 608372), + ), + array( + array(-13672732, -15087586, -10889693, -7557059, -6036909, 11305547, 1123968, -6780577, 27229399, 23887), + array(-23244140, -294205, -11744728, 14712571, -29465699, -2029617, 12797024, -6440308, -1633405, 16678954), + array(-29500620, 4770662, -16054387, 14001338, 7830047, 9564805, -1508144, -4795045, -17169265, 4904953), + ), + array( + array(24059557, 14617003, 19037157, -15039908, 19766093, -14906429, 5169211, 16191880, 2128236, -4326833), + array(-16981152, 4124966, -8540610, -10653797, 30336522, -14105247, -29806336, 916033, -6882542, -2986532), + array(-22630907, 12419372, -7134229, -7473371, -16478904, 16739175, 285431, 2763829, 15736322, 4143876), + ), + array( + array(2379352, 11839345, -4110402, -5988665, 11274298, 794957, 212801, -14594663, 23527084, -16458268), + array(33431127, -11130478, -17838966, -15626900, 8909499, 8376530, -32625340, 4087881, -15188911, -14416214), + array(1767683, 7197987, -13205226, -2022635, -13091350, 448826, 5799055, 4357868, -4774191, -16323038), + ), + ), + array( + array( + array(6721966, 13833823, -23523388, -1551314, 26354293, -11863321, 23365147, -3949732, 7390890, 2759800), + array(4409041, 2052381, 23373853, 10530217, 7676779, -12885954, 21302353, -4264057, 1244380, -12919645), + array(-4421239, 7169619, 4982368, -2957590, 30256825, -2777540, 14086413, 9208236, 15886429, 16489664), + ), + array( + array(1996075, 10375649, 14346367, 13311202, -6874135, -16438411, -13693198, 398369, -30606455, -712933), + array(-25307465, 9795880, -2777414, 14878809, -33531835, 14780363, 13348553, 12076947, -30836462, 5113182), + array(-17770784, 11797796, 31950843, 13929123, -25888302, 12288344, -30341101, -7336386, 13847711, 5387222), + ), + array( + array(-18582163, -3416217, 17824843, -2340966, 22744343, -10442611, 8763061, 3617786, -19600662, 10370991), + array(20246567, -14369378, 22358229, -543712, 18507283, -10413996, 14554437, -8746092, 32232924, 16763880), + array(9648505, 10094563, 26416693, 14745928, -30374318, -6472621, 11094161, 15689506, 3140038, -16510092), + ), + array( + array(-16160072, 5472695, 31895588, 4744994, 8823515, 10365685, -27224800, 9448613, -28774454, 366295), + array(19153450, 11523972, -11096490, -6503142, -24647631, 5420647, 28344573, 8041113, 719605, 11671788), + array(8678025, 2694440, -6808014, 2517372, 4964326, 11152271, -15432916, -15266516, 27000813, -10195553), + ), + array( + array(-15157904, 7134312, 8639287, -2814877, -7235688, 10421742, 564065, 5336097, 6750977, -14521026), + array(11836410, -3979488, 26297894, 16080799, 23455045, 15735944, 1695823, -8819122, 8169720, 16220347), + array(-18115838, 8653647, 17578566, -6092619, -8025777, -16012763, -11144307, -2627664, -5990708, -14166033), + ), + array( + array(-23308498, -10968312, 15213228, -10081214, -30853605, -11050004, 27884329, 2847284, 2655861, 1738395), + array(-27537433, -14253021, -25336301, -8002780, -9370762, 8129821, 21651608, -3239336, -19087449, -11005278), + array(1533110, 3437855, 23735889, 459276, 29970501, 11335377, 26030092, 5821408, 10478196, 8544890), + ), + array( + array(32173121, -16129311, 24896207, 3921497, 22579056, -3410854, 19270449, 12217473, 17789017, -3395995), + array(-30552961, -2228401, -15578829, -10147201, 13243889, 517024, 15479401, -3853233, 30460520, 1052596), + array(-11614875, 13323618, 32618793, 8175907, -15230173, 12596687, 27491595, -4612359, 3179268, -9478891), + ), + array( + array(31947069, -14366651, -4640583, -15339921, -15125977, -6039709, -14756777, -16411740, 19072640, -9511060), + array(11685058, 11822410, 3158003, -13952594, 33402194, -4165066, 5977896, -5215017, 473099, 5040608), + array(-20290863, 8198642, -27410132, 11602123, 1290375, -2799760, 28326862, 1721092, -19558642, -3131606), + ), + ), + array( + array( + array(7881532, 10687937, 7578723, 7738378, -18951012, -2553952, 21820786, 8076149, -27868496, 11538389), + array(-19935666, 3899861, 18283497, -6801568, -15728660, -11249211, 8754525, 7446702, -5676054, 5797016), + array(-11295600, -3793569, -15782110, -7964573, 12708869, -8456199, 2014099, -9050574, -2369172, -5877341), + ), + array( + array(-22472376, -11568741, -27682020, 1146375, 18956691, 16640559, 1192730, -3714199, 15123619, 10811505), + array(14352098, -3419715, -18942044, 10822655, 32750596, 4699007, -70363, 15776356, -28886779, -11974553), + array(-28241164, -8072475, -4978962, -5315317, 29416931, 1847569, -20654173, -16484855, 4714547, -9600655), + ), + array( + array(15200332, 8368572, 19679101, 15970074, -31872674, 1959451, 24611599, -4543832, -11745876, 12340220), + array(12876937, -10480056, 33134381, 6590940, -6307776, 14872440, 9613953, 8241152, 15370987, 9608631), + array(-4143277, -12014408, 8446281, -391603, 4407738, 13629032, -7724868, 15866074, -28210621, -8814099), + ), + array( + array(26660628, -15677655, 8393734, 358047, -7401291, 992988, -23904233, 858697, 20571223, 8420556), + array(14620715, 13067227, -15447274, 8264467, 14106269, 15080814, 33531827, 12516406, -21574435, -12476749), + array(236881, 10476226, 57258, -14677024, 6472998, 2466984, 17258519, 7256740, 8791136, 15069930), + ), + array( + array(1276410, -9371918, 22949635, -16322807, -23493039, -5702186, 14711875, 4874229, -30663140, -2331391), + array(5855666, 4990204, -13711848, 7294284, -7804282, 1924647, -1423175, -7912378, -33069337, 9234253), + array(20590503, -9018988, 31529744, -7352666, -2706834, 10650548, 31559055, -11609587, 18979186, 13396066), + ), + array( + array(24474287, 4968103, 22267082, 4407354, 24063882, -8325180, -18816887, 13594782, 33514650, 7021958), + array(-11566906, -6565505, -21365085, 15928892, -26158305, 4315421, -25948728, -3916677, -21480480, 12868082), + array(-28635013, 13504661, 19988037, -2132761, 21078225, 6443208, -21446107, 2244500, -12455797, -8089383), + ), + array( + array(-30595528, 13793479, -5852820, 319136, -25723172, -6263899, 33086546, 8957937, -15233648, 5540521), + array(-11630176, -11503902, -8119500, -7643073, 2620056, 1022908, -23710744, -1568984, -16128528, -14962807), + array(23152971, 775386, 27395463, 14006635, -9701118, 4649512, 1689819, 892185, -11513277, -15205948), + ), + array( + array(9770129, 9586738, 26496094, 4324120, 1556511, -3550024, 27453819, 4763127, -19179614, 5867134), + array(-32765025, 1927590, 31726409, -4753295, 23962434, -16019500, 27846559, 5931263, -29749703, -16108455), + array(27461885, -2977536, 22380810, 1815854, -23033753, -3031938, 7283490, -15148073, -19526700, 7734629), + ), + ), + array( + array( + array(-8010264, -9590817, -11120403, 6196038, 29344158, -13430885, 7585295, -3176626, 18549497, 15302069), + array(-32658337, -6171222, -7672793, -11051681, 6258878, 13504381, 10458790, -6418461, -8872242, 8424746), + array(24687205, 8613276, -30667046, -3233545, 1863892, -1830544, 19206234, 7134917, -11284482, -828919), + ), + array( + array(11334899, -9218022, 8025293, 12707519, 17523892, -10476071, 10243738, -14685461, -5066034, 16498837), + array(8911542, 6887158, -9584260, -6958590, 11145641, -9543680, 17303925, -14124238, 6536641, 10543906), + array(-28946384, 15479763, -17466835, 568876, -1497683, 11223454, -2669190, -16625574, -27235709, 8876771), + ), + array( + array(-25742899, -12566864, -15649966, -846607, -33026686, -796288, -33481822, 15824474, -604426, -9039817), + array(10330056, 70051, 7957388, -9002667, 9764902, 15609756, 27698697, -4890037, 1657394, 3084098), + array(10477963, -7470260, 12119566, -13250805, 29016247, -5365589, 31280319, 14396151, -30233575, 15272409), + ), + array( + array(-12288309, 3169463, 28813183, 16658753, 25116432, -5630466, -25173957, -12636138, -25014757, 1950504), + array(-26180358, 9489187, 11053416, -14746161, -31053720, 5825630, -8384306, -8767532, 15341279, 8373727), + array(28685821, 7759505, -14378516, -12002860, -31971820, 4079242, 298136, -10232602, -2878207, 15190420), + ), + array( + array(-32932876, 13806336, -14337485, -15794431, -24004620, 10940928, 8669718, 2742393, -26033313, -6875003), + array(-1580388, -11729417, -25979658, -11445023, -17411874, -10912854, 9291594, -16247779, -12154742, 6048605), + array(-30305315, 14843444, 1539301, 11864366, 20201677, 1900163, 13934231, 5128323, 11213262, 9168384), + ), + array( + array(-26280513, 11007847, 19408960, -940758, -18592965, -4328580, -5088060, -11105150, 20470157, -16398701), + array(-23136053, 9282192, 14855179, -15390078, -7362815, -14408560, -22783952, 14461608, 14042978, 5230683), + array(29969567, -2741594, -16711867, -8552442, 9175486, -2468974, 21556951, 3506042, -5933891, -12449708), + ), + array( + array(-3144746, 8744661, 19704003, 4581278, -20430686, 6830683, -21284170, 8971513, -28539189, 15326563), + array(-19464629, 10110288, -17262528, -3503892, -23500387, 1355669, -15523050, 15300988, -20514118, 9168260), + array(-5353335, 4488613, -23803248, 16314347, 7780487, -15638939, -28948358, 9601605, 33087103, -9011387), + ), + array( + array(-19443170, -15512900, -20797467, -12445323, -29824447, 10229461, -27444329, -15000531, -5996870, 15664672), + array(23294591, -16632613, -22650781, -8470978, 27844204, 11461195, 13099750, -2460356, 18151676, 13417686), + array(-24722913, -4176517, -31150679, 5988919, -26858785, 6685065, 1661597, -12551441, 15271676, -15452665), + ), + ), + array( + array( + array(11433042, -13228665, 8239631, -5279517, -1985436, -725718, -18698764, 2167544, -6921301, -13440182), + array(-31436171, 15575146, 30436815, 12192228, -22463353, 9395379, -9917708, -8638997, 12215110, 12028277), + array(14098400, 6555944, 23007258, 5757252, -15427832, -12950502, 30123440, 4617780, -16900089, -655628), + ), + array( + array(-4026201, -15240835, 11893168, 13718664, -14809462, 1847385, -15819999, 10154009, 23973261, -12684474), + array(-26531820, -3695990, -1908898, 2534301, -31870557, -16550355, 18341390, -11419951, 32013174, -10103539), + array(-25479301, 10876443, -11771086, -14625140, -12369567, 1838104, 21911214, 6354752, 4425632, -837822), + ), + array( + array(-10433389, -14612966, 22229858, -3091047, -13191166, 776729, -17415375, -12020462, 4725005, 14044970), + array(19268650, -7304421, 1555349, 8692754, -21474059, -9910664, 6347390, -1411784, -19522291, -16109756), + array(-24864089, 12986008, -10898878, -5558584, -11312371, -148526, 19541418, 8180106, 9282262, 10282508), + ), + array( + array(-26205082, 4428547, -8661196, -13194263, 4098402, -14165257, 15522535, 8372215, 5542595, -10702683), + array(-10562541, 14895633, 26814552, -16673850, -17480754, -2489360, -2781891, 6993761, -18093885, 10114655), + array(-20107055, -929418, 31422704, 10427861, -7110749, 6150669, -29091755, -11529146, 25953725, -106158), + ), + array( + array(-4234397, -8039292, -9119125, 3046000, 2101609, -12607294, 19390020, 6094296, -3315279, 12831125), + array(-15998678, 7578152, 5310217, 14408357, -33548620, -224739, 31575954, 6326196, 7381791, -2421839), + array(-20902779, 3296811, 24736065, -16328389, 18374254, 7318640, 6295303, 8082724, -15362489, 12339664), + ), + array( + array(27724736, 2291157, 6088201, -14184798, 1792727, 5857634, 13848414, 15768922, 25091167, 14856294), + array(-18866652, 8331043, 24373479, 8541013, -701998, -9269457, 12927300, -12695493, -22182473, -9012899), + array(-11423429, -5421590, 11632845, 3405020, 30536730, -11674039, -27260765, 13866390, 30146206, 9142070), + ), + array( + array(3924129, -15307516, -13817122, -10054960, 12291820, -668366, -27702774, 9326384, -8237858, 4171294), + array(-15921940, 16037937, 6713787, 16606682, -21612135, 2790944, 26396185, 3731949, 345228, -5462949), + array(-21327538, 13448259, 25284571, 1143661, 20614966, -8849387, 2031539, -12391231, -16253183, -13582083), + ), + array( + array(31016211, -16722429, 26371392, -14451233, -5027349, 14854137, 17477601, 3842657, 28012650, -16405420), + array(-5075835, 9368966, -8562079, -4600902, -15249953, 6970560, -9189873, 16292057, -8867157, 3507940), + array(29439664, 3537914, 23333589, 6997794, -17555561, -11018068, -15209202, -15051267, -9164929, 6580396), + ), + ), + array( + array( + array(-12185861, -7679788, 16438269, 10826160, -8696817, -6235611, 17860444, -9273846, -2095802, 9304567), + array(20714564, -4336911, 29088195, 7406487, 11426967, -5095705, 14792667, -14608617, 5289421, -477127), + array(-16665533, -10650790, -6160345, -13305760, 9192020, -1802462, 17271490, 12349094, 26939669, -3752294), + ), + array( + array(-12889898, 9373458, 31595848, 16374215, 21471720, 13221525, -27283495, -12348559, -3698806, 117887), + array(22263325, -6560050, 3984570, -11174646, -15114008, -566785, 28311253, 5358056, -23319780, 541964), + array(16259219, 3261970, 2309254, -15534474, -16885711, -4581916, 24134070, -16705829, -13337066, -13552195), + ), + array( + array(9378160, -13140186, -22845982, -12745264, 28198281, -7244098, -2399684, -717351, 690426, 14876244), + array(24977353, -314384, -8223969, -13465086, 28432343, -1176353, -13068804, -12297348, -22380984, 6618999), + array(-1538174, 11685646, 12944378, 13682314, -24389511, -14413193, 8044829, -13817328, 32239829, -5652762), + ), + array( + array(-18603066, 4762990, -926250, 8885304, -28412480, -3187315, 9781647, -10350059, 32779359, 5095274), + array(-33008130, -5214506, -32264887, -3685216, 9460461, -9327423, -24601656, 14506724, 21639561, -2630236), + array(-16400943, -13112215, 25239338, 15531969, 3987758, -4499318, -1289502, -6863535, 17874574, 558605), + ), + array( + array(-13600129, 10240081, 9171883, 16131053, -20869254, 9599700, 33499487, 5080151, 2085892, 5119761), + array(-22205145, -2519528, -16381601, 414691, -25019550, 2170430, 30634760, -8363614, -31999993, -5759884), + array(-6845704, 15791202, 8550074, -1312654, 29928809, -12092256, 27534430, -7192145, -22351378, 12961482), + ), + array( + array(-24492060, -9570771, 10368194, 11582341, -23397293, -2245287, 16533930, 8206996, -30194652, -5159638), + array(-11121496, -3382234, 2307366, 6362031, -135455, 8868177, -16835630, 7031275, 7589640, 8945490), + array(-32152748, 8917967, 6661220, -11677616, -1192060, -15793393, 7251489, -11182180, 24099109, -14456170), + ), + array( + array(5019558, -7907470, 4244127, -14714356, -26933272, 6453165, -19118182, -13289025, -6231896, -10280736), + array(10853594, 10721687, 26480089, 5861829, -22995819, 1972175, -1866647, -10557898, -3363451, -6441124), + array(-17002408, 5906790, 221599, -6563147, 7828208, -13248918, 24362661, -2008168, -13866408, 7421392), + ), + array( + array(8139927, -6546497, 32257646, -5890546, 30375719, 1886181, -21175108, 15441252, 28826358, -4123029), + array(6267086, 9695052, 7709135, -16603597, -32869068, -1886135, 14795160, -7840124, 13746021, -1742048), + array(28584902, 7787108, -6732942, -15050729, 22846041, -7571236, -3181936, -363524, 4771362, -8419958), + ), + ), + array( + array( + array(24949256, 6376279, -27466481, -8174608, -18646154, -9930606, 33543569, -12141695, 3569627, 11342593), + array(26514989, 4740088, 27912651, 3697550, 19331575, -11472339, 6809886, 4608608, 7325975, -14801071), + array(-11618399, -14554430, -24321212, 7655128, -1369274, 5214312, -27400540, 10258390, -17646694, -8186692), + ), + array( + array(11431204, 15823007, 26570245, 14329124, 18029990, 4796082, -31446179, 15580664, 9280358, -3973687), + array(-160783, -10326257, -22855316, -4304997, -20861367, -13621002, -32810901, -11181622, -15545091, 4387441), + array(-20799378, 12194512, 3937617, -5805892, -27154820, 9340370, -24513992, 8548137, 20617071, -7482001), + ), + array( + array(-938825, -3930586, -8714311, 16124718, 24603125, -6225393, -13775352, -11875822, 24345683, 10325460), + array(-19855277, -1568885, -22202708, 8714034, 14007766, 6928528, 16318175, -1010689, 4766743, 3552007), + array(-21751364, -16730916, 1351763, -803421, -4009670, 3950935, 3217514, 14481909, 10988822, -3994762), + ), + array( + array(15564307, -14311570, 3101243, 5684148, 30446780, -8051356, 12677127, -6505343, -8295852, 13296005), + array(-9442290, 6624296, -30298964, -11913677, -4670981, -2057379, 31521204, 9614054, -30000824, 12074674), + array(4771191, -135239, 14290749, -13089852, 27992298, 14998318, -1413936, -1556716, 29832613, -16391035), + ), + array( + array(7064884, -7541174, -19161962, -5067537, -18891269, -2912736, 25825242, 5293297, -27122660, 13101590), + array(-2298563, 2439670, -7466610, 1719965, -27267541, -16328445, 32512469, -5317593, -30356070, -4190957), + array(-30006540, 10162316, -33180176, 3981723, -16482138, -13070044, 14413974, 9515896, 19568978, 9628812), + ), + array( + array(33053803, 199357, 15894591, 1583059, 27380243, -4580435, -17838894, -6106839, -6291786, 3437740), + array(-18978877, 3884493, 19469877, 12726490, 15913552, 13614290, -22961733, 70104, 7463304, 4176122), + array(-27124001, 10659917, 11482427, -16070381, 12771467, -6635117, -32719404, -5322751, 24216882, 5944158), + ), + array( + array(8894125, 7450974, -2664149, -9765752, -28080517, -12389115, 19345746, 14680796, 11632993, 5847885), + array(26942781, -2315317, 9129564, -4906607, 26024105, 11769399, -11518837, 6367194, -9727230, 4782140), + array(19916461, -4828410, -22910704, -11414391, 25606324, -5972441, 33253853, 8220911, 6358847, -1873857), + ), + array( + array(801428, -2081702, 16569428, 11065167, 29875704, 96627, 7908388, -4480480, -13538503, 1387155), + array(19646058, 5720633, -11416706, 12814209, 11607948, 12749789, 14147075, 15156355, -21866831, 11835260), + array(19299512, 1155910, 28703737, 14890794, 2925026, 7269399, 26121523, 15467869, -26560550, 5052483), + ), + ), + array( + array( + array(-3017432, 10058206, 1980837, 3964243, 22160966, 12322533, -6431123, -12618185, 12228557, -7003677), + array(32944382, 14922211, -22844894, 5188528, 21913450, -8719943, 4001465, 13238564, -6114803, 8653815), + array(22865569, -4652735, 27603668, -12545395, 14348958, 8234005, 24808405, 5719875, 28483275, 2841751), + ), + array( + array(-16420968, -1113305, -327719, -12107856, 21886282, -15552774, -1887966, -315658, 19932058, -12739203), + array(-11656086, 10087521, -8864888, -5536143, -19278573, -3055912, 3999228, 13239134, -4777469, -13910208), + array(1382174, -11694719, 17266790, 9194690, -13324356, 9720081, 20403944, 11284705, -14013818, 3093230), + ), + array( + array(16650921, -11037932, -1064178, 1570629, -8329746, 7352753, -302424, 16271225, -24049421, -6691850), + array(-21911077, -5927941, -4611316, -5560156, -31744103, -10785293, 24123614, 15193618, -21652117, -16739389), + array(-9935934, -4289447, -25279823, 4372842, 2087473, 10399484, 31870908, 14690798, 17361620, 11864968), + ), + array( + array(-11307610, 6210372, 13206574, 5806320, -29017692, -13967200, -12331205, -7486601, -25578460, -16240689), + array(14668462, -12270235, 26039039, 15305210, 25515617, 4542480, 10453892, 6577524, 9145645, -6443880), + array(5974874, 3053895, -9433049, -10385191, -31865124, 3225009, -7972642, 3936128, -5652273, -3050304), + ), + array( + array(30625386, -4729400, -25555961, -12792866, -20484575, 7695099, 17097188, -16303496, -27999779, 1803632), + array(-3553091, 9865099, -5228566, 4272701, -5673832, -16689700, 14911344, 12196514, -21405489, 7047412), + array(20093277, 9920966, -11138194, -5343857, 13161587, 12044805, -32856851, 4124601, -32343828, -10257566), + ), + array( + array(-20788824, 14084654, -13531713, 7842147, 19119038, -13822605, 4752377, -8714640, -21679658, 2288038), + array(-26819236, -3283715, 29965059, 3039786, -14473765, 2540457, 29457502, 14625692, -24819617, 12570232), + array(-1063558, -11551823, 16920318, 12494842, 1278292, -5869109, -21159943, -3498680, -11974704, 4724943), + ), + array( + array(17960970, -11775534, -4140968, -9702530, -8876562, -1410617, -12907383, -8659932, -29576300, 1903856), + array(23134274, -14279132, -10681997, -1611936, 20684485, 15770816, -12989750, 3190296, 26955097, 14109738), + array(15308788, 5320727, -30113809, -14318877, 22902008, 7767164, 29425325, -11277562, 31960942, 11934971), + ), + array( + array(-27395711, 8435796, 4109644, 12222639, -24627868, 14818669, 20638173, 4875028, 10491392, 1379718), + array(-13159415, 9197841, 3875503, -8936108, -1383712, -5879801, 33518459, 16176658, 21432314, 12180697), + array(-11787308, 11500838, 13787581, -13832590, -22430679, 10140205, 1465425, 12689540, -10301319, -13872883), + ), + ), + array( + array( + array(5414091, -15386041, -21007664, 9643570, 12834970, 1186149, -2622916, -1342231, 26128231, 6032912), + array(-26337395, -13766162, 32496025, -13653919, 17847801, -12669156, 3604025, 8316894, -25875034, -10437358), + array(3296484, 6223048, 24680646, -12246460, -23052020, 5903205, -8862297, -4639164, 12376617, 3188849), + ), + array( + array(29190488, -14659046, 27549113, -1183516, 3520066, -10697301, 32049515, -7309113, -16109234, -9852307), + array(-14744486, -9309156, 735818, -598978, -20407687, -5057904, 25246078, -15795669, 18640741, -960977), + array(-6928835, -16430795, 10361374, 5642961, 4910474, 12345252, -31638386, -494430, 10530747, 1053335), + ), + array( + array(-29265967, -14186805, -13538216, -12117373, -19457059, -10655384, -31462369, -2948985, 24018831, 15026644), + array(-22592535, -3145277, -2289276, 5953843, -13440189, 9425631, 25310643, 13003497, -2314791, -15145616), + array(-27419985, -603321, -8043984, -1669117, -26092265, 13987819, -27297622, 187899, -23166419, -2531735), + ), + array( + array(-21744398, -13810475, 1844840, 5021428, -10434399, -15911473, 9716667, 16266922, -5070217, 726099), + array(29370922, -6053998, 7334071, -15342259, 9385287, 2247707, -13661962, -4839461, 30007388, -15823341), + array(-936379, 16086691, 23751945, -543318, -1167538, -5189036, 9137109, 730663, 9835848, 4555336), + ), + array( + array(-23376435, 1410446, -22253753, -12899614, 30867635, 15826977, 17693930, 544696, -11985298, 12422646), + array(31117226, -12215734, -13502838, 6561947, -9876867, -12757670, -5118685, -4096706, 29120153, 13924425), + array(-17400879, -14233209, 19675799, -2734756, -11006962, -5858820, -9383939, -11317700, 7240931, -237388), + ), + array( + array(-31361739, -11346780, -15007447, -5856218, -22453340, -12152771, 1222336, 4389483, 3293637, -15551743), + array(-16684801, -14444245, 11038544, 11054958, -13801175, -3338533, -24319580, 7733547, 12796905, -6335822), + array(-8759414, -10817836, -25418864, 10783769, -30615557, -9746811, -28253339, 3647836, 3222231, -11160462), + ), + array( + array(18606113, 1693100, -25448386, -15170272, 4112353, 10045021, 23603893, -2048234, -7550776, 2484985), + array(9255317, -3131197, -12156162, -1004256, 13098013, -9214866, 16377220, -2102812, -19802075, -3034702), + array(-22729289, 7496160, -5742199, 11329249, 19991973, -3347502, -31718148, 9936966, -30097688, -10618797), + ), + array( + array(21878590, -5001297, 4338336, 13643897, -3036865, 13160960, 19708896, 5415497, -7360503, -4109293), + array(27736861, 10103576, 12500508, 8502413, -3413016, -9633558, 10436918, -1550276, -23659143, -8132100), + array(19492550, -12104365, -29681976, -852630, -3208171, 12403437, 30066266, 8367329, 13243957, 8709688), + ), + ), + array( + array( + array(12015105, 2801261, 28198131, 10151021, 24818120, -4743133, -11194191, -5645734, 5150968, 7274186), + array(2831366, -12492146, 1478975, 6122054, 23825128, -12733586, 31097299, 6083058, 31021603, -9793610), + array(-2529932, -2229646, 445613, 10720828, -13849527, -11505937, -23507731, 16354465, 15067285, -14147707), + ), + array( + array(7840942, 14037873, -33364863, 15934016, -728213, -3642706, 21403988, 1057586, -19379462, -12403220), + array(915865, -16469274, 15608285, -8789130, -24357026, 6060030, -17371319, 8410997, -7220461, 16527025), + array(32922597, -556987, 20336074, -16184568, 10903705, -5384487, 16957574, 52992, 23834301, 6588044), + ), + array( + array(32752030, 11232950, 3381995, -8714866, 22652988, -10744103, 17159699, 16689107, -20314580, -1305992), + array(-4689649, 9166776, -25710296, -10847306, 11576752, 12733943, 7924251, -2752281, 1976123, -7249027), + array(21251222, 16309901, -2983015, -6783122, 30810597, 12967303, 156041, -3371252, 12331345, -8237197), + ), + array( + array(8651614, -4477032, -16085636, -4996994, 13002507, 2950805, 29054427, -5106970, 10008136, -4667901), + array(31486080, 15114593, -14261250, 12951354, 14369431, -7387845, 16347321, -13662089, 8684155, -10532952), + array(19443825, 11385320, 24468943, -9659068, -23919258, 2187569, -26263207, -6086921, 31316348, 14219878), + ), + array( + array(-28594490, 1193785, 32245219, 11392485, 31092169, 15722801, 27146014, 6992409, 29126555, 9207390), + array(32382935, 1110093, 18477781, 11028262, -27411763, -7548111, -4980517, 10843782, -7957600, -14435730), + array(2814918, 7836403, 27519878, -7868156, -20894015, -11553689, -21494559, 8550130, 28346258, 1994730), + ), + array( + array(-19578299, 8085545, -14000519, -3948622, 2785838, -16231307, -19516951, 7174894, 22628102, 8115180), + array(-30405132, 955511, -11133838, -15078069, -32447087, -13278079, -25651578, 3317160, -9943017, 930272), + array(-15303681, -6833769, 28856490, 1357446, 23421993, 1057177, 24091212, -1388970, -22765376, -10650715), + ), + array( + array(-22751231, -5303997, -12907607, -12768866, -15811511, -7797053, -14839018, -16554220, -1867018, 8398970), + array(-31969310, 2106403, -4736360, 1362501, 12813763, 16200670, 22981545, -6291273, 18009408, -15772772), + array(-17220923, -9545221, -27784654, 14166835, 29815394, 7444469, 29551787, -3727419, 19288549, 1325865), + ), + array( + array(15100157, -15835752, -23923978, -1005098, -26450192, 15509408, 12376730, -3479146, 33166107, -8042750), + array(20909231, 13023121, -9209752, 16251778, -5778415, -8094914, 12412151, 10018715, 2213263, -13878373), + array(32529814, -11074689, 30361439, -16689753, -9135940, 1513226, 22922121, 6382134, -5766928, 8371348), + ), + ), + array( + array( + array(9923462, 11271500, 12616794, 3544722, -29998368, -1721626, 12891687, -8193132, -26442943, 10486144), + array(-22597207, -7012665, 8587003, -8257861, 4084309, -12970062, 361726, 2610596, -23921530, -11455195), + array(5408411, -1136691, -4969122, 10561668, 24145918, 14240566, 31319731, -4235541, 19985175, -3436086), + ), + array( + array(-13994457, 16616821, 14549246, 3341099, 32155958, 13648976, -17577068, 8849297, 65030, 8370684), + array(-8320926, -12049626, 31204563, 5839400, -20627288, -1057277, -19442942, 6922164, 12743482, -9800518), + array(-2361371, 12678785, 28815050, 4759974, -23893047, 4884717, 23783145, 11038569, 18800704, 255233), + ), + array( + array(-5269658, -1773886, 13957886, 7990715, 23132995, 728773, 13393847, 9066957, 19258688, -14753793), + array(-2936654, -10827535, -10432089, 14516793, -3640786, 4372541, -31934921, 2209390, -1524053, 2055794), + array(580882, 16705327, 5468415, -2683018, -30926419, -14696000, -7203346, -8994389, -30021019, 7394435), + ), + array( + array(23838809, 1822728, -15738443, 15242727, 8318092, -3733104, -21672180, -3492205, -4821741, 14799921), + array(13345610, 9759151, 3371034, -16137791, 16353039, 8577942, 31129804, 13496856, -9056018, 7402518), + array(2286874, -4435931, -20042458, -2008336, -13696227, 5038122, 11006906, -15760352, 8205061, 1607563), + ), + array( + array(14414086, -8002132, 3331830, -3208217, 22249151, -5594188, 18364661, -2906958, 30019587, -9029278), + array(-27688051, 1585953, -10775053, 931069, -29120221, -11002319, -14410829, 12029093, 9944378, 8024), + array(4368715, -3709630, 29874200, -15022983, -20230386, -11410704, -16114594, -999085, -8142388, 5640030), + ), + array( + array(10299610, 13746483, 11661824, 16234854, 7630238, 5998374, 9809887, -16694564, 15219798, -14327783), + array(27425505, -5719081, 3055006, 10660664, 23458024, 595578, -15398605, -1173195, -18342183, 9742717), + array(6744077, 2427284, 26042789, 2720740, -847906, 1118974, 32324614, 7406442, 12420155, 1994844), + ), + array( + array(14012521, -5024720, -18384453, -9578469, -26485342, -3936439, -13033478, -10909803, 24319929, -6446333), + array(16412690, -4507367, 10772641, 15929391, -17068788, -4658621, 10555945, -10484049, -30102368, -4739048), + array(22397382, -7767684, -9293161, -12792868, 17166287, -9755136, -27333065, 6199366, 21880021, -12250760), + ), + array( + array(-4283307, 5368523, -31117018, 8163389, -30323063, 3209128, 16557151, 8890729, 8840445, 4957760), + array(-15447727, 709327, -6919446, -10870178, -29777922, 6522332, -21720181, 12130072, -14796503, 5005757), + array(-2114751, -14308128, 23019042, 15765735, -25269683, 6002752, 10183197, -13239326, -16395286, -2176112), + ), + ), + array( + array( + array(-19025756, 1632005, 13466291, -7995100, -23640451, 16573537, -32013908, -3057104, 22208662, 2000468), + array(3065073, -1412761, -25598674, -361432, -17683065, -5703415, -8164212, 11248527, -3691214, -7414184), + array(10379208, -6045554, 8877319, 1473647, -29291284, -12507580, 16690915, 2553332, -3132688, 16400289), + ), + array( + array(15716668, 1254266, -18472690, 7446274, -8448918, 6344164, -22097271, -7285580, 26894937, 9132066), + array(24158887, 12938817, 11085297, -8177598, -28063478, -4457083, -30576463, 64452, -6817084, -2692882), + array(13488534, 7794716, 22236231, 5989356, 25426474, -12578208, 2350710, -3418511, -4688006, 2364226), + ), + array( + array(16335052, 9132434, 25640582, 6678888, 1725628, 8517937, -11807024, -11697457, 15445875, -7798101), + array(29004207, -7867081, 28661402, -640412, -12794003, -7943086, 31863255, -4135540, -278050, -15759279), + array(-6122061, -14866665, -28614905, 14569919, -10857999, -3591829, 10343412, -6976290, -29828287, -10815811), + ), + array( + array(27081650, 3463984, 14099042, -4517604, 1616303, -6205604, 29542636, 15372179, 17293797, 960709), + array(20263915, 11434237, -5765435, 11236810, 13505955, -10857102, -16111345, 6493122, -19384511, 7639714), + array(-2830798, -14839232, 25403038, -8215196, -8317012, -16173699, 18006287, -16043750, 29994677, -15808121), + ), + array( + array(9769828, 5202651, -24157398, -13631392, -28051003, -11561624, -24613141, -13860782, -31184575, 709464), + array(12286395, 13076066, -21775189, -1176622, -25003198, 4057652, -32018128, -8890874, 16102007, 13205847), + array(13733362, 5599946, 10557076, 3195751, -5557991, 8536970, -25540170, 8525972, 10151379, 10394400), + ), + array( + array(4024660, -16137551, 22436262, 12276534, -9099015, -2686099, 19698229, 11743039, -33302334, 8934414), + array(-15879800, -4525240, -8580747, -2934061, 14634845, -698278, -9449077, 3137094, -11536886, 11721158), + array(17555939, -5013938, 8268606, 2331751, -22738815, 9761013, 9319229, 8835153, -9205489, -1280045), + ), + array( + array(-461409, -7830014, 20614118, 16688288, -7514766, -4807119, 22300304, 505429, 6108462, -6183415), + array(-5070281, 12367917, -30663534, 3234473, 32617080, -8422642, 29880583, -13483331, -26898490, -7867459), + array(-31975283, 5726539, 26934134, 10237677, -3173717, -605053, 24199304, 3795095, 7592688, -14992079), + ), + array( + array(21594432, -14964228, 17466408, -4077222, 32537084, 2739898, 6407723, 12018833, -28256052, 4298412), + array(-20650503, -11961496, -27236275, 570498, 3767144, -1717540, 13891942, -1569194, 13717174, 10805743), + array(-14676630, -15644296, 15287174, 11927123, 24177847, -8175568, -796431, 14860609, -26938930, -5863836), + ), + ), + array( + array( + array(12962541, 5311799, -10060768, 11658280, 18855286, -7954201, 13286263, -12808704, -4381056, 9882022), + array(18512079, 11319350, -20123124, 15090309, 18818594, 5271736, -22727904, 3666879, -23967430, -3299429), + array(-6789020, -3146043, 16192429, 13241070, 15898607, -14206114, -10084880, -6661110, -2403099, 5276065), + ), + array( + array(30169808, -5317648, 26306206, -11750859, 27814964, 7069267, 7152851, 3684982, 1449224, 13082861), + array(10342826, 3098505, 2119311, 193222, 25702612, 12233820, 23697382, 15056736, -21016438, -8202000), + array(-33150110, 3261608, 22745853, 7948688, 19370557, -15177665, -26171976, 6482814, -10300080, -11060101), + ), + array( + array(32869458, -5408545, 25609743, 15678670, -10687769, -15471071, 26112421, 2521008, -22664288, 6904815), + array(29506923, 4457497, 3377935, -9796444, -30510046, 12935080, 1561737, 3841096, -29003639, -6657642), + array(10340844, -6630377, -18656632, -2278430, 12621151, -13339055, 30878497, -11824370, -25584551, 5181966), + ), + array( + array(25940115, -12658025, 17324188, -10307374, -8671468, 15029094, 24396252, -16450922, -2322852, -12388574), + array(-21765684, 9916823, -1300409, 4079498, -1028346, 11909559, 1782390, 12641087, 20603771, -6561742), + array(-18882287, -11673380, 24849422, 11501709, 13161720, -4768874, 1925523, 11914390, 4662781, 7820689), + ), + array( + array(12241050, -425982, 8132691, 9393934, 32846760, -1599620, 29749456, 12172924, 16136752, 15264020), + array(-10349955, -14680563, -8211979, 2330220, -17662549, -14545780, 10658213, 6671822, 19012087, 3772772), + array(3753511, -3421066, 10617074, 2028709, 14841030, -6721664, 28718732, -15762884, 20527771, 12988982), + ), + array( + array(-14822485, -5797269, -3707987, 12689773, -898983, -10914866, -24183046, -10564943, 3299665, -12424953), + array(-16777703, -15253301, -9642417, 4978983, 3308785, 8755439, 6943197, 6461331, -25583147, 8991218), + array(-17226263, 1816362, -1673288, -6086439, 31783888, -8175991, -32948145, 7417950, -30242287, 1507265), + ), + array( + array(29692663, 6829891, -10498800, 4334896, 20945975, -11906496, -28887608, 8209391, 14606362, -10647073), + array(-3481570, 8707081, 32188102, 5672294, 22096700, 1711240, -33020695, 9761487, 4170404, -2085325), + array(-11587470, 14855945, -4127778, -1531857, -26649089, 15084046, 22186522, 16002000, -14276837, -8400798), + ), + array( + array(-4811456, 13761029, -31703877, -2483919, -3312471, 7869047, -7113572, -9620092, 13240845, 10965870), + array(-7742563, -8256762, -14768334, -13656260, -23232383, 12387166, 4498947, 14147411, 29514390, 4302863), + array(-13413405, -12407859, 20757302, -13801832, 14785143, 8976368, -5061276, -2144373, 17846988, -13971927), + ), + ), + array( + array( + array(-2244452, -754728, -4597030, -1066309, -6247172, 1455299, -21647728, -9214789, -5222701, 12650267), + array(-9906797, -16070310, 21134160, 12198166, -27064575, 708126, 387813, 13770293, -19134326, 10958663), + array(22470984, 12369526, 23446014, -5441109, -21520802, -9698723, -11772496, -11574455, -25083830, 4271862), + ), + array( + array(-25169565, -10053642, -19909332, 15361595, -5984358, 2159192, 75375, -4278529, -32526221, 8469673), + array(15854970, 4148314, -8893890, 7259002, 11666551, 13824734, -30531198, 2697372, 24154791, -9460943), + array(15446137, -15806644, 29759747, 14019369, 30811221, -9610191, -31582008, 12840104, 24913809, 9815020), + ), + array( + array(-4709286, -5614269, -31841498, -12288893, -14443537, 10799414, -9103676, 13438769, 18735128, 9466238), + array(11933045, 9281483, 5081055, -5183824, -2628162, -4905629, -7727821, -10896103, -22728655, 16199064), + array(14576810, 379472, -26786533, -8317236, -29426508, -10812974, -102766, 1876699, 30801119, 2164795), + ), + array( + array(15995086, 3199873, 13672555, 13712240, -19378835, -4647646, -13081610, -15496269, -13492807, 1268052), + array(-10290614, -3659039, -3286592, 10948818, 23037027, 3794475, -3470338, -12600221, -17055369, 3565904), + array(29210088, -9419337, -5919792, -4952785, 10834811, -13327726, -16512102, -10820713, -27162222, -14030531), + ), + array( + array(-13161890, 15508588, 16663704, -8156150, -28349942, 9019123, -29183421, -3769423, 2244111, -14001979), + array(-5152875, -3800936, -9306475, -6071583, 16243069, 14684434, -25673088, -16180800, 13491506, 4641841), + array(10813417, 643330, -19188515, -728916, 30292062, -16600078, 27548447, -7721242, 14476989, -12767431), + ), + array( + array(10292079, 9984945, 6481436, 8279905, -7251514, 7032743, 27282937, -1644259, -27912810, 12651324), + array(-31185513, -813383, 22271204, 11835308, 10201545, 15351028, 17099662, 3988035, 21721536, -3148940), + array(10202177, -6545839, -31373232, -9574638, -32150642, -8119683, -12906320, 3852694, 13216206, 14842320), + ), + array( + array(-15815640, -10601066, -6538952, -7258995, -6984659, -6581778, -31500847, 13765824, -27434397, 9900184), + array(14465505, -13833331, -32133984, -14738873, -27443187, 12990492, 33046193, 15796406, -7051866, -8040114), + array(30924417, -8279620, 6359016, -12816335, 16508377, 9071735, -25488601, 15413635, 9524356, -7018878), + ), + array( + array(12274201, -13175547, 32627641, -1785326, 6736625, 13267305, 5237659, -5109483, 15663516, 4035784), + array(-2951309, 8903985, 17349946, 601635, -16432815, -4612556, -13732739, -15889334, -22258478, 4659091), + array(-16916263, -4952973, -30393711, -15158821, 20774812, 15897498, 5736189, 15026997, -2178256, -13455585), + ), + ), + array( + array( + array(-8858980, -2219056, 28571666, -10155518, -474467, -10105698, -3801496, 278095, 23440562, -290208), + array(10226241, -5928702, 15139956, 120818, -14867693, 5218603, 32937275, 11551483, -16571960, -7442864), + array(17932739, -12437276, -24039557, 10749060, 11316803, 7535897, 22503767, 5561594, -3646624, 3898661), + ), + array( + array(7749907, -969567, -16339731, -16464, -25018111, 15122143, -1573531, 7152530, 21831162, 1245233), + array(26958459, -14658026, 4314586, 8346991, -5677764, 11960072, -32589295, -620035, -30402091, -16716212), + array(-12165896, 9166947, 33491384, 13673479, 29787085, 13096535, 6280834, 14587357, -22338025, 13987525), + ), + array( + array(-24349909, 7778775, 21116000, 15572597, -4833266, -5357778, -4300898, -5124639, -7469781, -2858068), + array(9681908, -6737123, -31951644, 13591838, -6883821, 386950, 31622781, 6439245, -14581012, 4091397), + array(-8426427, 1470727, -28109679, -1596990, 3978627, -5123623, -19622683, 12092163, 29077877, -14741988), + ), + array( + array(5269168, -6859726, -13230211, -8020715, 25932563, 1763552, -5606110, -5505881, -20017847, 2357889), + array(32264008, -15407652, -5387735, -1160093, -2091322, -3946900, 23104804, -12869908, 5727338, 189038), + array(14609123, -8954470, -6000566, -16622781, -14577387, -7743898, -26745169, 10942115, -25888931, -14884697), + ), + array( + array(20513500, 5557931, -15604613, 7829531, 26413943, -2019404, -21378968, 7471781, 13913677, -5137875), + array(-25574376, 11967826, 29233242, 12948236, -6754465, 4713227, -8940970, 14059180, 12878652, 8511905), + array(-25656801, 3393631, -2955415, -7075526, -2250709, 9366908, -30223418, 6812974, 5568676, -3127656), + ), + array( + array(11630004, 12144454, 2116339, 13606037, 27378885, 15676917, -17408753, -13504373, -14395196, 8070818), + array(27117696, -10007378, -31282771, -5570088, 1127282, 12772488, -29845906, 10483306, -11552749, -1028714), + array(10637467, -5688064, 5674781, 1072708, -26343588, -6982302, -1683975, 9177853, -27493162, 15431203), + ), + array( + array(20525145, 10892566, -12742472, 12779443, -29493034, 16150075, -28240519, 14943142, -15056790, -7935931), + array(-30024462, 5626926, -551567, -9981087, 753598, 11981191, 25244767, -3239766, -3356550, 9594024), + array(-23752644, 2636870, -5163910, -10103818, 585134, 7877383, 11345683, -6492290, 13352335, -10977084), + ), + array( + array(-1931799, -5407458, 3304649, -12884869, 17015806, -4877091, -29783850, -7752482, -13215537, -319204), + array(20239939, 6607058, 6203985, 3483793, -18386976, -779229, -20723742, 15077870, -22750759, 14523817), + array(27406042, -6041657, 27423596, -4497394, 4996214, 10002360, -28842031, -4545494, -30172742, -4805667), + ), + ), + array( + array( + array(11374242, 12660715, 17861383, -12540833, 10935568, 1099227, -13886076, -9091740, -27727044, 11358504), + array(-12730809, 10311867, 1510375, 10778093, -2119455, -9145702, 32676003, 11149336, -26123651, 4985768), + array(-19096303, 341147, -6197485, -239033, 15756973, -8796662, -983043, 13794114, -19414307, -15621255), + ), + array( + array(6490081, 11940286, 25495923, -7726360, 8668373, -8751316, 3367603, 6970005, -1691065, -9004790), + array(1656497, 13457317, 15370807, 6364910, 13605745, 8362338, -19174622, -5475723, -16796596, -5031438), + array(-22273315, -13524424, -64685, -4334223, -18605636, -10921968, -20571065, -7007978, -99853, -10237333), + ), + array( + array(17747465, 10039260, 19368299, -4050591, -20630635, -16041286, 31992683, -15857976, -29260363, -5511971), + array(31932027, -4986141, -19612382, 16366580, 22023614, 88450, 11371999, -3744247, 4882242, -10626905), + array(29796507, 37186, 19818052, 10115756, -11829032, 3352736, 18551198, 3272828, -5190932, -4162409), + ), + array( + array(12501286, 4044383, -8612957, -13392385, -32430052, 5136599, -19230378, -3529697, 330070, -3659409), + array(6384877, 2899513, 17807477, 7663917, -2358888, 12363165, 25366522, -8573892, -271295, 12071499), + array(-8365515, -4042521, 25133448, -4517355, -6211027, 2265927, -32769618, 1936675, -5159697, 3829363), + ), + array( + array(28425966, -5835433, -577090, -4697198, -14217555, 6870930, 7921550, -6567787, 26333140, 14267664), + array(-11067219, 11871231, 27385719, -10559544, -4585914, -11189312, 10004786, -8709488, -21761224, 8930324), + array(-21197785, -16396035, 25654216, -1725397, 12282012, 11008919, 1541940, 4757911, -26491501, -16408940), + ), + array( + array(13537262, -7759490, -20604840, 10961927, -5922820, -13218065, -13156584, 6217254, -15943699, 13814990), + array(-17422573, 15157790, 18705543, 29619, 24409717, -260476, 27361681, 9257833, -1956526, -1776914), + array(-25045300, -10191966, 15366585, 15166509, -13105086, 8423556, -29171540, 12361135, -18685978, 4578290), + ), + array( + array(24579768, 3711570, 1342322, -11180126, -27005135, 14124956, -22544529, 14074919, 21964432, 8235257), + array(-6528613, -2411497, 9442966, -5925588, 12025640, -1487420, -2981514, -1669206, 13006806, 2355433), + array(-16304899, -13605259, -6632427, -5142349, 16974359, -10911083, 27202044, 1719366, 1141648, -12796236), + ), + array( + array(-12863944, -13219986, -8318266, -11018091, -6810145, -4843894, 13475066, -3133972, 32674895, 13715045), + array(11423335, -5468059, 32344216, 8962751, 24989809, 9241752, -13265253, 16086212, -28740881, -15642093), + array(-1409668, 12530728, -6368726, 10847387, 19531186, -14132160, -11709148, 7791794, -27245943, 4383347), + ), + ), + array( + array( + array(-28970898, 5271447, -1266009, -9736989, -12455236, 16732599, -4862407, -4906449, 27193557, 6245191), + array(-15193956, 5362278, -1783893, 2695834, 4960227, 12840725, 23061898, 3260492, 22510453, 8577507), + array(-12632451, 11257346, -32692994, 13548177, -721004, 10879011, 31168030, 13952092, -29571492, -3635906), + ), + array( + array(3877321, -9572739, 32416692, 5405324, -11004407, -13656635, 3759769, 11935320, 5611860, 8164018), + array(-16275802, 14667797, 15906460, 12155291, -22111149, -9039718, 32003002, -8832289, 5773085, -8422109), + array(-23788118, -8254300, 1950875, 8937633, 18686727, 16459170, -905725, 12376320, 31632953, 190926), + ), + array( + array(-24593607, -16138885, -8423991, 13378746, 14162407, 6901328, -8288749, 4508564, -25341555, -3627528), + array(8884438, -5884009, 6023974, 10104341, -6881569, -4941533, 18722941, -14786005, -1672488, 827625), + array(-32720583, -16289296, -32503547, 7101210, 13354605, 2659080, -1800575, -14108036, -24878478, 1541286), + ), + array( + array(2901347, -1117687, 3880376, -10059388, -17620940, -3612781, -21802117, -3567481, 20456845, -1885033), + array(27019610, 12299467, -13658288, -1603234, -12861660, -4861471, -19540150, -5016058, 29439641, 15138866), + array(21536104, -6626420, -32447818, -10690208, -22408077, 5175814, -5420040, -16361163, 7779328, 109896), + ), + array( + array(30279744, 14648750, -8044871, 6425558, 13639621, -743509, 28698390, 12180118, 23177719, -554075), + array(26572847, 3405927, -31701700, 12890905, -19265668, 5335866, -6493768, 2378492, 4439158, -13279347), + array(-22716706, 3489070, -9225266, -332753, 18875722, -1140095, 14819434, -12731527, -17717757, -5461437), + ), + array( + array(-5056483, 16566551, 15953661, 3767752, -10436499, 15627060, -820954, 2177225, 8550082, -15114165), + array(-18473302, 16596775, -381660, 15663611, 22860960, 15585581, -27844109, -3582739, -23260460, -8428588), + array(-32480551, 15707275, -8205912, -5652081, 29464558, 2713815, -22725137, 15860482, -21902570, 1494193), + ), + array( + array(-19562091, -14087393, -25583872, -9299552, 13127842, 759709, 21923482, 16529112, 8742704, 12967017), + array(-28464899, 1553205, 32536856, -10473729, -24691605, -406174, -8914625, -2933896, -29903758, 15553883), + array(21877909, 3230008, 9881174, 10539357, -4797115, 2841332, 11543572, 14513274, 19375923, -12647961), + ), + array( + array(8832269, -14495485, 13253511, 5137575, 5037871, 4078777, 24880818, -6222716, 2862653, 9455043), + array(29306751, 5123106, 20245049, -14149889, 9592566, 8447059, -2077124, -2990080, 15511449, 4789663), + array(-20679756, 7004547, 8824831, -9434977, -4045704, -3750736, -5754762, 108893, 23513200, 16652362), + ), + ), + array( + array( + array(-33256173, 4144782, -4476029, -6579123, 10770039, -7155542, -6650416, -12936300, -18319198, 10212860), + array(2756081, 8598110, 7383731, -6859892, 22312759, -1105012, 21179801, 2600940, -9988298, -12506466), + array(-24645692, 13317462, -30449259, -15653928, 21365574, -10869657, 11344424, 864440, -2499677, -16710063), + ), + array( + array(-26432803, 6148329, -17184412, -14474154, 18782929, -275997, -22561534, 211300, 2719757, 4940997), + array(-1323882, 3911313, -6948744, 14759765, -30027150, 7851207, 21690126, 8518463, 26699843, 5276295), + array(-13149873, -6429067, 9396249, 365013, 24703301, -10488939, 1321586, 149635, -15452774, 7159369), + ), + array( + array(9987780, -3404759, 17507962, 9505530, 9731535, -2165514, 22356009, 8312176, 22477218, -8403385), + array(18155857, -16504990, 19744716, 9006923, 15154154, -10538976, 24256460, -4864995, -22548173, 9334109), + array(2986088, -4911893, 10776628, -3473844, 10620590, -7083203, -21413845, 14253545, -22587149, 536906), + ), + array( + array(4377756, 8115836, 24567078, 15495314, 11625074, 13064599, 7390551, 10589625, 10838060, -15420424), + array(-19342404, 867880, 9277171, -3218459, -14431572, -1986443, 19295826, -15796950, 6378260, 699185), + array(7895026, 4057113, -7081772, -13077756, -17886831, -323126, -716039, 15693155, -5045064, -13373962), + ), + array( + array(-7737563, -5869402, -14566319, -7406919, 11385654, 13201616, 31730678, -10962840, -3918636, -9669325), + array(10188286, -15770834, -7336361, 13427543, 22223443, 14896287, 30743455, 7116568, -21786507, 5427593), + array(696102, 13206899, 27047647, -10632082, 15285305, -9853179, 10798490, -4578720, 19236243, 12477404), + ), + array( + array(-11229439, 11243796, -17054270, -8040865, -788228, -8167967, -3897669, 11180504, -23169516, 7733644), + array(17800790, -14036179, -27000429, -11766671, 23887827, 3149671, 23466177, -10538171, 10322027, 15313801), + array(26246234, 11968874, 32263343, -5468728, 6830755, -13323031, -15794704, -101982, -24449242, 10890804), + ), + array( + array(-31365647, 10271363, -12660625, -6267268, 16690207, -13062544, -14982212, 16484931, 25180797, -5334884), + array(-586574, 10376444, -32586414, -11286356, 19801893, 10997610, 2276632, 9482883, 316878, 13820577), + array(-9882808, -4510367, -2115506, 16457136, -11100081, 11674996, 30756178, -7515054, 30696930, -3712849), + ), + array( + array(32988917, -9603412, 12499366, 7910787, -10617257, -11931514, -7342816, -9985397, -32349517, 7392473), + array(-8855661, 15927861, 9866406, -3649411, -2396914, -16655781, -30409476, -9134995, 25112947, -2926644), + array(-2504044, -436966, 25621774, -5678772, 15085042, -5479877, -24884878, -13526194, 5537438, -13914319), + ), + ), + array( + array( + array(-11225584, 2320285, -9584280, 10149187, -33444663, 5808648, -14876251, -1729667, 31234590, 6090599), + array(-9633316, 116426, 26083934, 2897444, -6364437, -2688086, 609721, 15878753, -6970405, -9034768), + array(-27757857, 247744, -15194774, -9002551, 23288161, -10011936, -23869595, 6503646, 20650474, 1804084), + ), + array( + array(-27589786, 15456424, 8972517, 8469608, 15640622, 4439847, 3121995, -10329713, 27842616, -202328), + array(-15306973, 2839644, 22530074, 10026331, 4602058, 5048462, 28248656, 5031932, -11375082, 12714369), + array(20807691, -7270825, 29286141, 11421711, -27876523, -13868230, -21227475, 1035546, -19733229, 12796920), + ), + array( + array(12076899, -14301286, -8785001, -11848922, -25012791, 16400684, -17591495, -12899438, 3480665, -15182815), + array(-32361549, 5457597, 28548107, 7833186, 7303070, -11953545, -24363064, -15921875, -33374054, 2771025), + array(-21389266, 421932, 26597266, 6860826, 22486084, -6737172, -17137485, -4210226, -24552282, 15673397), + ), + array( + array(-20184622, 2338216, 19788685, -9620956, -4001265, -8740893, -20271184, 4733254, 3727144, -12934448), + array(6120119, 814863, -11794402, -622716, 6812205, -15747771, 2019594, 7975683, 31123697, -10958981), + array(30069250, -11435332, 30434654, 2958439, 18399564, -976289, 12296869, 9204260, -16432438, 9648165), + ), + array( + array(32705432, -1550977, 30705658, 7451065, -11805606, 9631813, 3305266, 5248604, -26008332, -11377501), + array(17219865, 2375039, -31570947, -5575615, -19459679, 9219903, 294711, 15298639, 2662509, -16297073), + array(-1172927, -7558695, -4366770, -4287744, -21346413, -8434326, 32087529, -1222777, 32247248, -14389861), + ), + array( + array(14312628, 1221556, 17395390, -8700143, -4945741, -8684635, -28197744, -9637817, -16027623, -13378845), + array(-1428825, -9678990, -9235681, 6549687, -7383069, -468664, 23046502, 9803137, 17597934, 2346211), + array(18510800, 15337574, 26171504, 981392, -22241552, 7827556, -23491134, -11323352, 3059833, -11782870), + ), + array( + array(10141598, 6082907, 17829293, -1947643, 9830092, 13613136, -25556636, -5544586, -33502212, 3592096), + array(33114168, -15889352, -26525686, -13343397, 33076705, 8716171, 1151462, 1521897, -982665, -6837803), + array(-32939165, -4255815, 23947181, -324178, -33072974, -12305637, -16637686, 3891704, 26353178, 693168), + ), + array( + array(30374239, 1595580, -16884039, 13186931, 4600344, 406904, 9585294, -400668, 31375464, 14369965), + array(-14370654, -7772529, 1510301, 6434173, -18784789, -6262728, 32732230, -13108839, 17901441, 16011505), + array(18171223, -11934626, -12500402, 15197122, -11038147, -15230035, -19172240, -16046376, 8764035, 12309598), + ), + ), + array( + array( + array(5975908, -5243188, -19459362, -9681747, -11541277, 14015782, -23665757, 1228319, 17544096, -10593782), + array(5811932, -1715293, 3442887, -2269310, -18367348, -8359541, -18044043, -15410127, -5565381, 12348900), + array(-31399660, 11407555, 25755363, 6891399, -3256938, 14872274, -24849353, 8141295, -10632534, -585479), + ), + array( + array(-12675304, 694026, -5076145, 13300344, 14015258, -14451394, -9698672, -11329050, 30944593, 1130208), + array(8247766, -6710942, -26562381, -7709309, -14401939, -14648910, 4652152, 2488540, 23550156, -271232), + array(17294316, -3788438, 7026748, 15626851, 22990044, 113481, 2267737, -5908146, -408818, -137719), + ), + array( + array(16091085, -16253926, 18599252, 7340678, 2137637, -1221657, -3364161, 14550936, 3260525, -7166271), + array(-4910104, -13332887, 18550887, 10864893, -16459325, -7291596, -23028869, -13204905, -12748722, 2701326), + array(-8574695, 16099415, 4629974, -16340524, -20786213, -6005432, -10018363, 9276971, 11329923, 1862132), + ), + array( + array(14763076, -15903608, -30918270, 3689867, 3511892, 10313526, -21951088, 12219231, -9037963, -940300), + array(8894987, -3446094, 6150753, 3013931, 301220, 15693451, -31981216, -2909717, -15438168, 11595570), + array(15214962, 3537601, -26238722, -14058872, 4418657, -15230761, 13947276, 10730794, -13489462, -4363670), + ), + array( + array(-2538306, 7682793, 32759013, 263109, -29984731, -7955452, -22332124, -10188635, 977108, 699994), + array(-12466472, 4195084, -9211532, 550904, -15565337, 12917920, 19118110, -439841, -30534533, -14337913), + array(31788461, -14507657, 4799989, 7372237, 8808585, -14747943, 9408237, -10051775, 12493932, -5409317), + ), + array( + array(-25680606, 5260744, -19235809, -6284470, -3695942, 16566087, 27218280, 2607121, 29375955, 6024730), + array(842132, -2794693, -4763381, -8722815, 26332018, -12405641, 11831880, 6985184, -9940361, 2854096), + array(-4847262, -7969331, 2516242, -5847713, 9695691, -7221186, 16512645, 960770, 12121869, 16648078), + ), + array( + array(-15218652, 14667096, -13336229, 2013717, 30598287, -464137, -31504922, -7882064, 20237806, 2838411), + array(-19288047, 4453152, 15298546, -16178388, 22115043, -15972604, 12544294, -13470457, 1068881, -12499905), + array(-9558883, -16518835, 33238498, 13506958, 30505848, -1114596, -8486907, -2630053, 12521378, 4845654), + ), + array( + array(-28198521, 10744108, -2958380, 10199664, 7759311, -13088600, 3409348, -873400, -6482306, -12885870), + array(-23561822, 6230156, -20382013, 10655314, -24040585, -11621172, 10477734, -1240216, -3113227, 13974498), + array(12966261, 15550616, -32038948, -1615346, 21025980, -629444, 5642325, 7188737, 18895762, 12629579), + ), + ), + array( + array( + array(14741879, -14946887, 22177208, -11721237, 1279741, 8058600, 11758140, 789443, 32195181, 3895677), + array(10758205, 15755439, -4509950, 9243698, -4879422, 6879879, -2204575, -3566119, -8982069, 4429647), + array(-2453894, 15725973, -20436342, -10410672, -5803908, -11040220, -7135870, -11642895, 18047436, -15281743), + ), + array( + array(-25173001, -11307165, 29759956, 11776784, -22262383, -15820455, 10993114, -12850837, -17620701, -9408468), + array(21987233, 700364, -24505048, 14972008, -7774265, -5718395, 32155026, 2581431, -29958985, 8773375), + array(-25568350, 454463, -13211935, 16126715, 25240068, 8594567, 20656846, 12017935, -7874389, -13920155), + ), + array( + array(6028182, 6263078, -31011806, -11301710, -818919, 2461772, -31841174, -5468042, -1721788, -2776725), + array(-12278994, 16624277, 987579, -5922598, 32908203, 1248608, 7719845, -4166698, 28408820, 6816612), + array(-10358094, -8237829, 19549651, -12169222, 22082623, 16147817, 20613181, 13982702, -10339570, 5067943), + ), + array( + array(-30505967, -3821767, 12074681, 13582412, -19877972, 2443951, -19719286, 12746132, 5331210, -10105944), + array(30528811, 3601899, -1957090, 4619785, -27361822, -15436388, 24180793, -12570394, 27679908, -1648928), + array(9402404, -13957065, 32834043, 10838634, -26580150, -13237195, 26653274, -8685565, 22611444, -12715406), + ), + array( + array(22190590, 1118029, 22736441, 15130463, -30460692, -5991321, 19189625, -4648942, 4854859, 6622139), + array(-8310738, -2953450, -8262579, -3388049, -10401731, -271929, 13424426, -3567227, 26404409, 13001963), + array(-31241838, -15415700, -2994250, 8939346, 11562230, -12840670, -26064365, -11621720, -15405155, 11020693), + ), + array( + array(1866042, -7949489, -7898649, -10301010, 12483315, 13477547, 3175636, -12424163, 28761762, 1406734), + array(-448555, -1777666, 13018551, 3194501, -9580420, -11161737, 24760585, -4347088, 25577411, -13378680), + array(-24290378, 4759345, -690653, -1852816, 2066747, 10693769, -29595790, 9884936, -9368926, 4745410), + ), + array( + array(-9141284, 6049714, -19531061, -4341411, -31260798, 9944276, -15462008, -11311852, 10931924, -11931931), + array(-16561513, 14112680, -8012645, 4817318, -8040464, -11414606, -22853429, 10856641, -20470770, 13434654), + array(22759489, -10073434, -16766264, -1871422, 13637442, -10168091, 1765144, -12654326, 28445307, -5364710), + ), + array( + array(29875063, 12493613, 2795536, -3786330, 1710620, 15181182, -10195717, -8788675, 9074234, 1167180), + array(-26205683, 11014233, -9842651, -2635485, -26908120, 7532294, -18716888, -9535498, 3843903, 9367684), + array(-10969595, -6403711, 9591134, 9582310, 11349256, 108879, 16235123, 8601684, -139197, 4242895), + ), + ), + array( + array( + array(22092954, -13191123, -2042793, -11968512, 32186753, -11517388, -6574341, 2470660, -27417366, 16625501), + array(-11057722, 3042016, 13770083, -9257922, 584236, -544855, -7770857, 2602725, -27351616, 14247413), + array(6314175, -10264892, -32772502, 15957557, -10157730, 168750, -8618807, 14290061, 27108877, -1180880), + ), + array( + array(-8586597, -7170966, 13241782, 10960156, -32991015, -13794596, 33547976, -11058889, -27148451, 981874), + array(22833440, 9293594, -32649448, -13618667, -9136966, 14756819, -22928859, -13970780, -10479804, -16197962), + array(-7768587, 3326786, -28111797, 10783824, 19178761, 14905060, 22680049, 13906969, -15933690, 3797899), + ), + array( + array(21721356, -4212746, -12206123, 9310182, -3882239, -13653110, 23740224, -2709232, 20491983, -8042152), + array(9209270, -15135055, -13256557, -6167798, -731016, 15289673, 25947805, 15286587, 30997318, -6703063), + array(7392032, 16618386, 23946583, -8039892, -13265164, -1533858, -14197445, -2321576, 17649998, -250080), + ), + array( + array(-9301088, -14193827, 30609526, -3049543, -25175069, -1283752, -15241566, -9525724, -2233253, 7662146), + array(-17558673, 1763594, -33114336, 15908610, -30040870, -12174295, 7335080, -8472199, -3174674, 3440183), + array(-19889700, -5977008, -24111293, -9688870, 10799743, -16571957, 40450, -4431835, 4862400, 1133), + ), + array( + array(-32856209, -7873957, -5422389, 14860950, -16319031, 7956142, 7258061, 311861, -30594991, -7379421), + array(-3773428, -1565936, 28985340, 7499440, 24445838, 9325937, 29727763, 16527196, 18278453, 15405622), + array(-4381906, 8508652, -19898366, -3674424, -5984453, 15149970, -13313598, 843523, -21875062, 13626197), + ), + array( + array(2281448, -13487055, -10915418, -2609910, 1879358, 16164207, -10783882, 3953792, 13340839, 15928663), + array(31727126, -7179855, -18437503, -8283652, 2875793, -16390330, -25269894, -7014826, -23452306, 5964753), + array(4100420, -5959452, -17179337, 6017714, -18705837, 12227141, -26684835, 11344144, 2538215, -7570755), + ), + array( + array(-9433605, 6123113, 11159803, -2156608, 30016280, 14966241, -20474983, 1485421, -629256, -15958862), + array(-26804558, 4260919, 11851389, 9658551, -32017107, 16367492, -20205425, -13191288, 11659922, -11115118), + array(26180396, 10015009, -30844224, -8581293, 5418197, 9480663, 2231568, -10170080, 33100372, -1306171), + ), + array( + array(15121113, -5201871, -10389905, 15427821, -27509937, -15992507, 21670947, 4486675, -5931810, -14466380), + array(16166486, -9483733, -11104130, 6023908, -31926798, -1364923, 2340060, -16254968, -10735770, -10039824), + array(28042865, -3557089, -12126526, 12259706, -3717498, -6945899, 6766453, -8689599, 18036436, 5803270), + ), + ), + array( + array( + array(-817581, 6763912, 11803561, 1585585, 10958447, -2671165, 23855391, 4598332, -6159431, -14117438), + array(-31031306, -14256194, 17332029, -2383520, 31312682, -5967183, 696309, 50292, -20095739, 11763584), + array(-594563, -2514283, -32234153, 12643980, 12650761, 14811489, 665117, -12613632, -19773211, -10713562), + ), + array( + array(30464590, -11262872, -4127476, -12734478, 19835327, -7105613, -24396175, 2075773, -17020157, 992471), + array(18357185, -6994433, 7766382, 16342475, -29324918, 411174, 14578841, 8080033, -11574335, -10601610), + array(19598397, 10334610, 12555054, 2555664, 18821899, -10339780, 21873263, 16014234, 26224780, 16452269), + ), + array( + array(-30223925, 5145196, 5944548, 16385966, 3976735, 2009897, -11377804, -7618186, -20533829, 3698650), + array(14187449, 3448569, -10636236, -10810935, -22663880, -3433596, 7268410, -10890444, 27394301, 12015369), + array(19695761, 16087646, 28032085, 12999827, 6817792, 11427614, 20244189, -1312777, -13259127, -3402461), + ), + array( + array(30860103, 12735208, -1888245, -4699734, -16974906, 2256940, -8166013, 12298312, -8550524, -10393462), + array(-5719826, -11245325, -1910649, 15569035, 26642876, -7587760, -5789354, -15118654, -4976164, 12651793), + array(-2848395, 9953421, 11531313, -5282879, 26895123, -12697089, -13118820, -16517902, 9768698, -2533218), + ), + array( + array(-24719459, 1894651, -287698, -4704085, 15348719, -8156530, 32767513, 12765450, 4940095, 10678226), + array(18860224, 15980149, -18987240, -1562570, -26233012, -11071856, -7843882, 13944024, -24372348, 16582019), + array(-15504260, 4970268, -29893044, 4175593, -20993212, -2199756, -11704054, 15444560, -11003761, 7989037), + ), + array( + array(31490452, 5568061, -2412803, 2182383, -32336847, 4531686, -32078269, 6200206, -19686113, -14800171), + array(-17308668, -15879940, -31522777, -2831, -32887382, 16375549, 8680158, -16371713, 28550068, -6857132), + array(-28126887, -5688091, 16837845, -1820458, -6850681, 12700016, -30039981, 4364038, 1155602, 5988841), + ), + array( + array(21890435, -13272907, -12624011, 12154349, -7831873, 15300496, 23148983, -4470481, 24618407, 8283181), + array(-33136107, -10512751, 9975416, 6841041, -31559793, 16356536, 3070187, -7025928, 1466169, 10740210), + array(-1509399, -15488185, -13503385, -10655916, 32799044, 909394, -13938903, -5779719, -32164649, -15327040), + ), + array( + array(3960823, -14267803, -28026090, -15918051, -19404858, 13146868, 15567327, 951507, -3260321, -573935), + array(24740841, 5052253, -30094131, 8961361, 25877428, 6165135, -24368180, 14397372, -7380369, -6144105), + array(-28888365, 3510803, -28103278, -1158478, -11238128, -10631454, -15441463, -14453128, -1625486, -6494814), + ), + ), + array( + array( + array(793299, -9230478, 8836302, -6235707, -27360908, -2369593, 33152843, -4885251, -9906200, -621852), + array(5666233, 525582, 20782575, -8038419, -24538499, 14657740, 16099374, 1468826, -6171428, -15186581), + array(-4859255, -3779343, -2917758, -6748019, 7778750, 11688288, -30404353, -9871238, -1558923, -9863646), + ), + array( + array(10896332, -7719704, 824275, 472601, -19460308, 3009587, 25248958, 14783338, -30581476, -15757844), + array(10566929, 12612572, -31944212, 11118703, -12633376, 12362879, 21752402, 8822496, 24003793, 14264025), + array(27713862, -7355973, -11008240, 9227530, 27050101, 2504721, 23886875, -13117525, 13958495, -5732453), + ), + array( + array(-23481610, 4867226, -27247128, 3900521, 29838369, -8212291, -31889399, -10041781, 7340521, -15410068), + array(4646514, -8011124, -22766023, -11532654, 23184553, 8566613, 31366726, -1381061, -15066784, -10375192), + array(-17270517, 12723032, -16993061, 14878794, 21619651, -6197576, 27584817, 3093888, -8843694, 3849921), + ), + array( + array(-9064912, 2103172, 25561640, -15125738, -5239824, 9582958, 32477045, -9017955, 5002294, -15550259), + array(-12057553, -11177906, 21115585, -13365155, 8808712, -12030708, 16489530, 13378448, -25845716, 12741426), + array(-5946367, 10645103, -30911586, 15390284, -3286982, -7118677, 24306472, 15852464, 28834118, -7646072), + ), + array( + array(-17335748, -9107057, -24531279, 9434953, -8472084, -583362, -13090771, 455841, 20461858, 5491305), + array(13669248, -16095482, -12481974, -10203039, -14569770, -11893198, -24995986, 11293807, -28588204, -9421832), + array(28497928, 6272777, -33022994, 14470570, 8906179, -1225630, 18504674, -14165166, 29867745, -8795943), + ), + array( + array(-16207023, 13517196, -27799630, -13697798, 24009064, -6373891, -6367600, -13175392, 22853429, -4012011), + array(24191378, 16712145, -13931797, 15217831, 14542237, 1646131, 18603514, -11037887, 12876623, -2112447), + array(17902668, 4518229, -411702, -2829247, 26878217, 5258055, -12860753, 608397, 16031844, 3723494), + ), + array( + array(-28632773, 12763728, -20446446, 7577504, 33001348, -13017745, 17558842, -7872890, 23896954, -4314245), + array(-20005381, -12011952, 31520464, 605201, 2543521, 5991821, -2945064, 7229064, -9919646, -8826859), + array(28816045, 298879, -28165016, -15920938, 19000928, -1665890, -12680833, -2949325, -18051778, -2082915), + ), + array( + array(16000882, -344896, 3493092, -11447198, -29504595, -13159789, 12577740, 16041268, -19715240, 7847707), + array(10151868, 10572098, 27312476, 7922682, 14825339, 4723128, -32855931, -6519018, -10020567, 3852848), + array(-11430470, 15697596, -21121557, -4420647, 5386314, 15063598, 16514493, -15932110, 29330899, -15076224), + ), + ), + array( + array( + array(-25499735, -4378794, -15222908, -6901211, 16615731, 2051784, 3303702, 15490, -27548796, 12314391), + array(15683520, -6003043, 18109120, -9980648, 15337968, -5997823, -16717435, 15921866, 16103996, -3731215), + array(-23169824, -10781249, 13588192, -1628807, -3798557, -1074929, -19273607, 5402699, -29815713, -9841101), + ), + array( + array(23190676, 2384583, -32714340, 3462154, -29903655, -1529132, -11266856, 8911517, -25205859, 2739713), + array(21374101, -3554250, -33524649, 9874411, 15377179, 11831242, -33529904, 6134907, 4931255, 11987849), + array(-7732, -2978858, -16223486, 7277597, 105524, -322051, -31480539, 13861388, -30076310, 10117930), + ), + array( + array(-29501170, -10744872, -26163768, 13051539, -25625564, 5089643, -6325503, 6704079, 12890019, 15728940), + array(-21972360, -11771379, -951059, -4418840, 14704840, 2695116, 903376, -10428139, 12885167, 8311031), + array(-17516482, 5352194, 10384213, -13811658, 7506451, 13453191, 26423267, 4384730, 1888765, -5435404), + ), + array( + array(-25817338, -3107312, -13494599, -3182506, 30896459, -13921729, -32251644, -12707869, -19464434, -3340243), + array(-23607977, -2665774, -526091, 4651136, 5765089, 4618330, 6092245, 14845197, 17151279, -9854116), + array(-24830458, -12733720, -15165978, 10367250, -29530908, -265356, 22825805, -7087279, -16866484, 16176525), + ), + array( + array(-23583256, 6564961, 20063689, 3798228, -4740178, 7359225, 2006182, -10363426, -28746253, -10197509), + array(-10626600, -4486402, -13320562, -5125317, 3432136, -6393229, 23632037, -1940610, 32808310, 1099883), + array(15030977, 5768825, -27451236, -2887299, -6427378, -15361371, -15277896, -6809350, 2051441, -15225865), + ), + array( + array(-3362323, -7239372, 7517890, 9824992, 23555850, 295369, 5148398, -14154188, -22686354, 16633660), + array(4577086, -16752288, 13249841, -15304328, 19958763, -14537274, 18559670, -10759549, 8402478, -9864273), + array(-28406330, -1051581, -26790155, -907698, -17212414, -11030789, 9453451, -14980072, 17983010, 9967138), + ), + array( + array(-25762494, 6524722, 26585488, 9969270, 24709298, 1220360, -1677990, 7806337, 17507396, 3651560), + array(-10420457, -4118111, 14584639, 15971087, -15768321, 8861010, 26556809, -5574557, -18553322, -11357135), + array(2839101, 14284142, 4029895, 3472686, 14402957, 12689363, -26642121, 8459447, -5605463, -7621941), + ), + array( + array(-4839289, -3535444, 9744961, 2871048, 25113978, 3187018, -25110813, -849066, 17258084, -7977739), + array(18164541, -10595176, -17154882, -1542417, 19237078, -9745295, 23357533, -15217008, 26908270, 12150756), + array(-30264870, -7647865, 5112249, -7036672, -1499807, -6974257, 43168, -5537701, -32302074, 16215819), + ), + ), + array( + array( + array(-6898905, 9824394, -12304779, -4401089, -31397141, -6276835, 32574489, 12532905, -7503072, -8675347), + array(-27343522, -16515468, -27151524, -10722951, 946346, 16291093, 254968, 7168080, 21676107, -1943028), + array(21260961, -8424752, -16831886, -11920822, -23677961, 3968121, -3651949, -6215466, -3556191, -7913075), + ), + array( + array(16544754, 13250366, -16804428, 15546242, -4583003, 12757258, -2462308, -8680336, -18907032, -9662799), + array(-2415239, -15577728, 18312303, 4964443, -15272530, -12653564, 26820651, 16690659, 25459437, -4564609), + array(-25144690, 11425020, 28423002, -11020557, -6144921, -15826224, 9142795, -2391602, -6432418, -1644817), + ), + array( + array(-23104652, 6253476, 16964147, -3768872, -25113972, -12296437, -27457225, -16344658, 6335692, 7249989), + array(-30333227, 13979675, 7503222, -12368314, -11956721, -4621693, -30272269, 2682242, 25993170, -12478523), + array(4364628, 5930691, 32304656, -10044554, -8054781, 15091131, 22857016, -10598955, 31820368, 15075278), + ), + array( + array(31879134, -8918693, 17258761, 90626, -8041836, -4917709, 24162788, -9650886, -17970238, 12833045), + array(19073683, 14851414, -24403169, -11860168, 7625278, 11091125, -19619190, 2074449, -9413939, 14905377), + array(24483667, -11935567, -2518866, -11547418, -1553130, 15355506, -25282080, 9253129, 27628530, -7555480), + ), + array( + array(17597607, 8340603, 19355617, 552187, 26198470, -3176583, 4593324, -9157582, -14110875, 15297016), + array(510886, 14337390, -31785257, 16638632, 6328095, 2713355, -20217417, -11864220, 8683221, 2921426), + array(18606791, 11874196, 27155355, -5281482, -24031742, 6265446, -25178240, -1278924, 4674690, 13890525), + ), + array( + array(13609624, 13069022, -27372361, -13055908, 24360586, 9592974, 14977157, 9835105, 4389687, 288396), + array(9922506, -519394, 13613107, 5883594, -18758345, -434263, -12304062, 8317628, 23388070, 16052080), + array(12720016, 11937594, -31970060, -5028689, 26900120, 8561328, -20155687, -11632979, -14754271, -10812892), + ), + array( + array(15961858, 14150409, 26716931, -665832, -22794328, 13603569, 11829573, 7467844, -28822128, 929275), + array(11038231, -11582396, -27310482, -7316562, -10498527, -16307831, -23479533, -9371869, -21393143, 2465074), + array(20017163, -4323226, 27915242, 1529148, 12396362, 15675764, 13817261, -9658066, 2463391, -4622140), + ), + array( + array(-16358878, -12663911, -12065183, 4996454, -1256422, 1073572, 9583558, 12851107, 4003896, 12673717), + array(-1731589, -15155870, -3262930, 16143082, 19294135, 13385325, 14741514, -9103726, 7903886, 2348101), + array(24536016, -16515207, 12715592, -3862155, 1511293, 10047386, -3842346, -7129159, -28377538, 10048127), + ), + ), + array( + array( + array(-12622226, -6204820, 30718825, 2591312, -10617028, 12192840, 18873298, -7297090, -32297756, 15221632), + array(-26478122, -11103864, 11546244, -1852483, 9180880, 7656409, -21343950, 2095755, 29769758, 6593415), + array(-31994208, -2907461, 4176912, 3264766, 12538965, -868111, 26312345, -6118678, 30958054, 8292160), + ), + array( + array(31429822, -13959116, 29173532, 15632448, 12174511, -2760094, 32808831, 3977186, 26143136, -3148876), + array(22648901, 1402143, -22799984, 13746059, 7936347, 365344, -8668633, -1674433, -3758243, -2304625), + array(-15491917, 8012313, -2514730, -12702462, -23965846, -10254029, -1612713, -1535569, -16664475, 8194478), + ), + array( + array(27338066, -7507420, -7414224, 10140405, -19026427, -6589889, 27277191, 8855376, 28572286, 3005164), + array(26287124, 4821776, 25476601, -4145903, -3764513, -15788984, -18008582, 1182479, -26094821, -13079595), + array(-7171154, 3178080, 23970071, 6201893, -17195577, -4489192, -21876275, -13982627, 32208683, -1198248), + ), + array( + array(-16657702, 2817643, -10286362, 14811298, 6024667, 13349505, -27315504, -10497842, -27672585, -11539858), + array(15941029, -9405932, -21367050, 8062055, 31876073, -238629, -15278393, -1444429, 15397331, -4130193), + array(8934485, -13485467, -23286397, -13423241, -32446090, 14047986, 31170398, -1441021, -27505566, 15087184), + ), + array( + array(-18357243, -2156491, 24524913, -16677868, 15520427, -6360776, -15502406, 11461896, 16788528, -5868942), + array(-1947386, 16013773, 21750665, 3714552, -17401782, -16055433, -3770287, -10323320, 31322514, -11615635), + array(21426655, -5650218, -13648287, -5347537, -28812189, -4920970, -18275391, -14621414, 13040862, -12112948), + ), + array( + array(11293895, 12478086, -27136401, 15083750, -29307421, 14748872, 14555558, -13417103, 1613711, 4896935), + array(-25894883, 15323294, -8489791, -8057900, 25967126, -13425460, 2825960, -4897045, -23971776, -11267415), + array(-15924766, -5229880, -17443532, 6410664, 3622847, 10243618, 20615400, 12405433, -23753030, -8436416), + ), + array( + array(-7091295, 12556208, -20191352, 9025187, -17072479, 4333801, 4378436, 2432030, 23097949, -566018), + array(4565804, -16025654, 20084412, -7842817, 1724999, 189254, 24767264, 10103221, -18512313, 2424778), + array(366633, -11976806, 8173090, -6890119, 30788634, 5745705, -7168678, 1344109, -3642553, 12412659), + ), + array( + array(-24001791, 7690286, 14929416, -168257, -32210835, -13412986, 24162697, -15326504, -3141501, 11179385), + array(18289522, -14724954, 8056945, 16430056, -21729724, 7842514, -6001441, -1486897, -18684645, -11443503), + array(476239, 6601091, -6152790, -9723375, 17503545, -4863900, 27672959, 13403813, 11052904, 5219329), + ), + ), + array( + array( + array(20678546, -8375738, -32671898, 8849123, -5009758, 14574752, 31186971, -3973730, 9014762, -8579056), + array(-13644050, -10350239, -15962508, 5075808, -1514661, -11534600, -33102500, 9160280, 8473550, -3256838), + array(24900749, 14435722, 17209120, -15292541, -22592275, 9878983, -7689309, -16335821, -24568481, 11788948), + ), + array( + array(-3118155, -11395194, -13802089, 14797441, 9652448, -6845904, -20037437, 10410733, -24568470, -1458691), + array(-15659161, 16736706, -22467150, 10215878, -9097177, 7563911, 11871841, -12505194, -18513325, 8464118), + array(-23400612, 8348507, -14585951, -861714, -3950205, -6373419, 14325289, 8628612, 33313881, -8370517), + ), + array( + array(-20186973, -4967935, 22367356, 5271547, -1097117, -4788838, -24805667, -10236854, -8940735, -5818269), + array(-6948785, -1795212, -32625683, -16021179, 32635414, -7374245, 15989197, -12838188, 28358192, -4253904), + array(-23561781, -2799059, -32351682, -1661963, -9147719, 10429267, -16637684, 4072016, -5351664, 5596589), + ), + array( + array(-28236598, -3390048, 12312896, 6213178, 3117142, 16078565, 29266239, 2557221, 1768301, 15373193), + array(-7243358, -3246960, -4593467, -7553353, -127927, -912245, -1090902, -4504991, -24660491, 3442910), + array(-30210571, 5124043, 14181784, 8197961, 18964734, -11939093, 22597931, 7176455, -18585478, 13365930), + ), + array( + array(-7877390, -1499958, 8324673, 4690079, 6261860, 890446, 24538107, -8570186, -9689599, -3031667), + array(25008904, -10771599, -4305031, -9638010, 16265036, 15721635, 683793, -11823784, 15723479, -15163481), + array(-9660625, 12374379, -27006999, -7026148, -7724114, -12314514, 11879682, 5400171, 519526, -1235876), + ), + array( + array(22258397, -16332233, -7869817, 14613016, -22520255, -2950923, -20353881, 7315967, 16648397, 7605640), + array(-8081308, -8464597, -8223311, 9719710, 19259459, -15348212, 23994942, -5281555, -9468848, 4763278), + array(-21699244, 9220969, -15730624, 1084137, -25476107, -2852390, 31088447, -7764523, -11356529, 728112), + ), + array( + array(26047220, -11751471, -6900323, -16521798, 24092068, 9158119, -4273545, -12555558, -29365436, -5498272), + array(17510331, -322857, 5854289, 8403524, 17133918, -3112612, -28111007, 12327945, 10750447, 10014012), + array(-10312768, 3936952, 9156313, -8897683, 16498692, -994647, -27481051, -666732, 3424691, 7540221), + ), + array( + array(30322361, -6964110, 11361005, -4143317, 7433304, 4989748, -7071422, -16317219, -9244265, 15258046), + array(13054562, -2779497, 19155474, 469045, -12482797, 4566042, 5631406, 2711395, 1062915, -5136345), + array(-19240248, -11254599, -29509029, -7499965, -5835763, 13005411, -6066489, 12194497, 32960380, 1459310), + ), + ), + array( + array( + array(19852034, 7027924, 23669353, 10020366, 8586503, -6657907, 394197, -6101885, 18638003, -11174937), + array(31395534, 15098109, 26581030, 8030562, -16527914, -5007134, 9012486, -7584354, -6643087, -5442636), + array(-9192165, -2347377, -1997099, 4529534, 25766844, 607986, -13222, 9677543, -32294889, -6456008), + ), + array( + array(-2444496, -149937, 29348902, 8186665, 1873760, 12489863, -30934579, -7839692, -7852844, -8138429), + array(-15236356, -15433509, 7766470, 746860, 26346930, -10221762, -27333451, 10754588, -9431476, 5203576), + array(31834314, 14135496, -770007, 5159118, 20917671, -16768096, -7467973, -7337524, 31809243, 7347066), + ), + array( + array(-9606723, -11874240, 20414459, 13033986, 13716524, -11691881, 19797970, -12211255, 15192876, -2087490), + array(-12663563, -2181719, 1168162, -3804809, 26747877, -14138091, 10609330, 12694420, 33473243, -13382104), + array(33184999, 11180355, 15832085, -11385430, -1633671, 225884, 15089336, -11023903, -6135662, 14480053), + ), + array( + array(31308717, -5619998, 31030840, -1897099, 15674547, -6582883, 5496208, 13685227, 27595050, 8737275), + array(-20318852, -15150239, 10933843, -16178022, 8335352, -7546022, -31008351, -12610604, 26498114, 66511), + array(22644454, -8761729, -16671776, 4884562, -3105614, -13559366, 30540766, -4286747, -13327787, -7515095), + ), + array( + array(-28017847, 9834845, 18617207, -2681312, -3401956, -13307506, 8205540, 13585437, -17127465, 15115439), + array(23711543, -672915, 31206561, -8362711, 6164647, -9709987, -33535882, -1426096, 8236921, 16492939), + array(-23910559, -13515526, -26299483, -4503841, 25005590, -7687270, 19574902, 10071562, 6708380, -6222424), + ), + array( + array(2101391, -4930054, 19702731, 2367575, -15427167, 1047675, 5301017, 9328700, 29955601, -11678310), + array(3096359, 9271816, -21620864, -15521844, -14847996, -7592937, -25892142, -12635595, -9917575, 6216608), + array(-32615849, 338663, -25195611, 2510422, -29213566, -13820213, 24822830, -6146567, -26767480, 7525079), + ), + array( + array(-23066649, -13985623, 16133487, -7896178, -3389565, 778788, -910336, -2782495, -19386633, 11994101), + array(21691500, -13624626, -641331, -14367021, 3285881, -3483596, -25064666, 9718258, -7477437, 13381418), + array(18445390, -4202236, 14979846, 11622458, -1727110, -3582980, 23111648, -6375247, 28535282, 15779576), + ), + array( + array(30098053, 3089662, -9234387, 16662135, -21306940, 11308411, -14068454, 12021730, 9955285, -16303356), + array(9734894, -14576830, -7473633, -9138735, 2060392, 11313496, -18426029, 9924399, 20194861, 13380996), + array(-26378102, -7965207, -22167821, 15789297, -18055342, -6168792, -1984914, 15707771, 26342023, 10146099), + ), + ), + array( + array( + array(-26016874, -219943, 21339191, -41388, 19745256, -2878700, -29637280, 2227040, 21612326, -545728), + array(-13077387, 1184228, 23562814, -5970442, -20351244, -6348714, 25764461, 12243797, -20856566, 11649658), + array(-10031494, 11262626, 27384172, 2271902, 26947504, -15997771, 39944, 6114064, 33514190, 2333242), + ), + array( + array(-21433588, -12421821, 8119782, 7219913, -21830522, -9016134, -6679750, -12670638, 24350578, -13450001), + array(-4116307, -11271533, -23886186, 4843615, -30088339, 690623, -31536088, -10406836, 8317860, 12352766), + array(18200138, -14475911, -33087759, -2696619, -23702521, -9102511, -23552096, -2287550, 20712163, 6719373), + ), + array( + array(26656208, 6075253, -7858556, 1886072, -28344043, 4262326, 11117530, -3763210, 26224235, -3297458), + array(-17168938, -14854097, -3395676, -16369877, -19954045, 14050420, 21728352, 9493610, 18620611, -16428628), + array(-13323321, 13325349, 11432106, 5964811, 18609221, 6062965, -5269471, -9725556, -30701573, -16479657), + ), + array( + array(-23860538, -11233159, 26961357, 1640861, -32413112, -16737940, 12248509, -5240639, 13735342, 1934062), + array(25089769, 6742589, 17081145, -13406266, 21909293, -16067981, -15136294, -3765346, -21277997, 5473616), + array(31883677, -7961101, 1083432, -11572403, 22828471, 13290673, -7125085, 12469656, 29111212, -5451014), + ), + array( + array(24244947, -15050407, -26262976, 2791540, -14997599, 16666678, 24367466, 6388839, -10295587, 452383), + array(-25640782, -3417841, 5217916, 16224624, 19987036, -4082269, -24236251, -5915248, 15766062, 8407814), + array(-20406999, 13990231, 15495425, 16395525, 5377168, 15166495, -8917023, -4388953, -8067909, 2276718), + ), + array( + array(30157918, 12924066, -17712050, 9245753, 19895028, 3368142, -23827587, 5096219, 22740376, -7303417), + array(2041139, -14256350, 7783687, 13876377, -25946985, -13352459, 24051124, 13742383, -15637599, 13295222), + array(33338237, -8505733, 12532113, 7977527, 9106186, -1715251, -17720195, -4612972, -4451357, -14669444), + ), + array( + array(-20045281, 5454097, -14346548, 6447146, 28862071, 1883651, -2469266, -4141880, 7770569, 9620597), + array(23208068, 7979712, 33071466, 8149229, 1758231, -10834995, 30945528, -1694323, -33502340, -14767970), + array(1439958, -16270480, -1079989, -793782, 4625402, 10647766, -5043801, 1220118, 30494170, -11440799), + ), + array( + array(-5037580, -13028295, -2970559, -3061767, 15640974, -6701666, -26739026, 926050, -1684339, -13333647), + array(13908495, -3549272, 30919928, -6273825, -21521863, 7989039, 9021034, 9078865, 3353509, 4033511), + array(-29663431, -15113610, 32259991, -344482, 24295849, -12912123, 23161163, 8839127, 27485041, 7356032), + ), + ), + array( + array( + array(9661027, 705443, 11980065, -5370154, -1628543, 14661173, -6346142, 2625015, 28431036, -16771834), + array(-23839233, -8311415, -25945511, 7480958, -17681669, -8354183, -22545972, 14150565, 15970762, 4099461), + array(29262576, 16756590, 26350592, -8793563, 8529671, -11208050, 13617293, -9937143, 11465739, 8317062), + ), + array( + array(-25493081, -6962928, 32500200, -9419051, -23038724, -2302222, 14898637, 3848455, 20969334, -5157516), + array(-20384450, -14347713, -18336405, 13884722, -33039454, 2842114, -21610826, -3649888, 11177095, 14989547), + array(-24496721, -11716016, 16959896, 2278463, 12066309, 10137771, 13515641, 2581286, -28487508, 9930240), + ), + array( + array(-17751622, -2097826, 16544300, -13009300, -15914807, -14949081, 18345767, -13403753, 16291481, -5314038), + array(-33229194, 2553288, 32678213, 9875984, 8534129, 6889387, -9676774, 6957617, 4368891, 9788741), + array(16660756, 7281060, -10830758, 12911820, 20108584, -8101676, -21722536, -8613148, 16250552, -11111103), + ), + array( + array(-19765507, 2390526, -16551031, 14161980, 1905286, 6414907, 4689584, 10604807, -30190403, 4782747), + array(-1354539, 14736941, -7367442, -13292886, 7710542, -14155590, -9981571, 4383045, 22546403, 437323), + array(31665577, -12180464, -16186830, 1491339, -18368625, 3294682, 27343084, 2786261, -30633590, -14097016), + ), + array( + array(-14467279, -683715, -33374107, 7448552, 19294360, 14334329, -19690631, 2355319, -19284671, -6114373), + array(15121312, -15796162, 6377020, -6031361, -10798111, -12957845, 18952177, 15496498, -29380133, 11754228), + array(-2637277, -13483075, 8488727, -14303896, 12728761, -1622493, 7141596, 11724556, 22761615, -10134141), + ), + array( + array(16918416, 11729663, -18083579, 3022987, -31015732, -13339659, -28741185, -12227393, 32851222, 11717399), + array(11166634, 7338049, -6722523, 4531520, -29468672, -7302055, 31474879, 3483633, -1193175, -4030831), + array(-185635, 9921305, 31456609, -13536438, -12013818, 13348923, 33142652, 6546660, -19985279, -3948376), + ), + array( + array(-32460596, 11266712, -11197107, -7899103, 31703694, 3855903, -8537131, -12833048, -30772034, -15486313), + array(-18006477, 12709068, 3991746, -6479188, -21491523, -10550425, -31135347, -16049879, 10928917, 3011958), + array(-6957757, -15594337, 31696059, 334240, 29576716, 14796075, -30831056, -12805180, 18008031, 10258577), + ), + array( + array(-22448644, 15655569, 7018479, -4410003, -30314266, -1201591, -1853465, 1367120, 25127874, 6671743), + array(29701166, -14373934, -10878120, 9279288, -17568, 13127210, 21382910, 11042292, 25838796, 4642684), + array(-20430234, 14955537, -24126347, 8124619, -5369288, -5990470, 30468147, -13900640, 18423289, 4177476), + ), + ) + ); + + /** + * See: libsodium's crypto_core/curve25519/ref10/base2.h + * + * @var array basically int[8][3] + */ + protected static $base2 = array( + array( + array(25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626, -11754271, -6079156, 2047605), + array(-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692, 5043384, 19500929, -15469378), + array(-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919, 11864899, -24514362, -4438546), + ), + array( + array(15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600, -14772189, 28944400, -1550024), + array(16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577, -11775962, 7689662, 11199574), + array(30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774, 10017326, -17749093, -9920357), + ), + array( + array(10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885, 14515107, -15438304, 10819380), + array(4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668, 12483688, -12668491, 5581306), + array(19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350, 13850243, -23678021, -15815942), + ), + array( + array(5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852, 5230134, -23952439, -15175766), + array(-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025, 16520125, 30598449, 7715701), + array(28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660, 1370708, 29794553, -1409300), + ), + array( + array(-22518993, -6692182, 14201702, -8745502, -23510406, 8844726, 18474211, -1361450, -13062696, 13821877), + array(-6455177, -7839871, 3374702, -4740862, -27098617, -10571707, 31655028, -7212327, 18853322, -14220951), + array(4566830, -12963868, -28974889, -12240689, -7602672, -2830569, -8514358, -10431137, 2207753, -3209784), + ), + array( + array(-25154831, -4185821, 29681144, 7868801, -6854661, -9423865, -12437364, -663000, -31111463, -16132436), + array(25576264, -2703214, 7349804, -11814844, 16472782, 9300885, 3844789, 15725684, 171356, 6466918), + array(23103977, 13316479, 9739013, -16149481, 817875, -15038942, 8965339, -14088058, -30714912, 16193877), + ), + array( + array(-33521811, 3180713, -2394130, 14003687, -16903474, -16270840, 17238398, 4729455, -18074513, 9256800), + array(-25182317, -4174131, 32336398, 5036987, -21236817, 11360617, 22616405, 9761698, -19827198, 630305), + array(-13720693, 2639453, -24237460, -7406481, 9494427, -5774029, -6554551, -15960994, -2449256, -14291300), + ), + array( + array(-3151181, -5046075, 9282714, 6866145, -31907062, -863023, -18940575, 15033784, 25105118, -7894876), + array(-24326370, 15950226, -31801215, -14592823, -11662737, -5090925, 1573892, -2625887, 2198790, -15804619), + array(-3099351, 10324967, -2241613, 7453183, -5446979, -2735503, -13812022, -16236442, -32461234, -12290683), + ) + ); + + /** + * 37095705934669439343138083508754565189542113879843219016388785533085940283555 + * + * @var array + */ + protected static $d = array( + -10913610, + 13857413, + -15372611, + 6949391, + 114729, + -8787816, + -6275908, + -3247719, + -18696448, + -12055116 + ); + + /** + * 2 * d = 16295367250680780974490674513165176452449235426866156013048779062215315747161 + * + * @var array + */ + protected static $d2 = array( + -21827239, + -5839606, + -30745221, + 13898782, + 229458, + 15978800, + -12551817, + -6495438, + 29715968, + 9444199 + ); + + /** + * sqrt(-1) + * + * @var array + */ + protected static $sqrtm1 = array( + -32595792, + -7943725, + 9377950, + 3500415, + 12389472, + -272473, + -25146209, + -2005654, + 326686, + 11406482 + ); +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Curve25519/README.md b/vendor/paragonie/sodium_compat/src/Core/Curve25519/README.md new file mode 100644 index 000000000..e8097fa34 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Curve25519/README.md @@ -0,0 +1,3 @@ +# Curve25519 Data Structures + +These are PHP implementation of the [structs used in the ref10 curve25519 code](https://github.com/jedisct1/libsodium/blob/master/src/libsodium/include/sodium/private/curve25519_ref10.h). diff --git a/vendor/paragonie/sodium_compat/src/Core/Ed25519.php b/vendor/paragonie/sodium_compat/src/Core/Ed25519.php new file mode 100644 index 000000000..16ae1d2e8 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Ed25519.php @@ -0,0 +1,480 @@ +X)) { + throw new SodiumException('Unexpected zero result'); + } + + # fe_1(one_minus_y); + # fe_sub(one_minus_y, one_minus_y, A.Y); + # fe_invert(one_minus_y, one_minus_y); + $one_minux_y = self::fe_invert( + self::fe_sub( + self::fe_1(), + $A->Y + ) + ); + + # fe_1(x); + # fe_add(x, x, A.Y); + # fe_mul(x, x, one_minus_y); + $x = self::fe_mul( + self::fe_add(self::fe_1(), $A->Y), + $one_minux_y + ); + + # fe_tobytes(curve25519_pk, x); + return self::fe_tobytes($x); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sk_to_pk($sk) + { + return self::ge_p3_tobytes( + self::ge_scalarmult_base( + self::substr($sk, 0, 32) + ) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign($message, $sk) + { + /** @var string $signature */ + $signature = self::sign_detached($message, $sk); + return $signature . $message; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message A signed message + * @param string $pk Public key + * @return string Message (without signature) + * @throws SodiumException + * @throws TypeError + */ + public static function sign_open($message, $pk) + { + /** @var string $signature */ + $signature = self::substr($message, 0, 64); + + /** @var string $message */ + $message = self::substr($message, 64); + + if (self::verify_detached($signature, $message, $pk)) { + return $message; + } + throw new SodiumException('Invalid signature'); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign_detached($message, $sk) + { + # crypto_hash_sha512(az, sk, 32); + $az = hash('sha512', self::substr($sk, 0, 32), true); + + # az[0] &= 248; + # az[31] &= 63; + # az[31] |= 64; + $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); + $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); + + # crypto_hash_sha512_init(&hs); + # crypto_hash_sha512_update(&hs, az + 32, 32); + # crypto_hash_sha512_update(&hs, m, mlen); + # crypto_hash_sha512_final(&hs, nonce); + $hs = hash_init('sha512'); + hash_update($hs, self::substr($az, 32, 32)); + hash_update($hs, $message); + $nonceHash = hash_final($hs, true); + + # memmove(sig + 32, sk + 32, 32); + $pk = self::substr($sk, 32, 32); + + # sc_reduce(nonce); + # ge_scalarmult_base(&R, nonce); + # ge_p3_tobytes(sig, &R); + $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); + $sig = self::ge_p3_tobytes( + self::ge_scalarmult_base($nonce) + ); + + # crypto_hash_sha512_init(&hs); + # crypto_hash_sha512_update(&hs, sig, 64); + # crypto_hash_sha512_update(&hs, m, mlen); + # crypto_hash_sha512_final(&hs, hram); + $hs = hash_init('sha512'); + hash_update($hs, self::substr($sig, 0, 32)); + hash_update($hs, self::substr($pk, 0, 32)); + hash_update($hs, $message); + $hramHash = hash_final($hs, true); + + # sc_reduce(hram); + # sc_muladd(sig + 32, hram, az, nonce); + $hram = self::sc_reduce($hramHash); + $sigAfter = self::sc_muladd($hram, $az, $nonce); + $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); + + try { + ParagonIE_Sodium_Compat::memzero($az); + } catch (SodiumException $ex) { + $az = null; + } + return $sig; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $sig + * @param string $message + * @param string $pk + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function verify_detached($sig, $message, $pk) + { + if (self::strlen($sig) < 64) { + throw new SodiumException('Signature is too short'); + } + if ((self::chrToInt($sig[63]) & 240) && self::check_S_lt_L(self::substr($sig, 32, 32))) { + throw new SodiumException('S < L - Invalid signature'); + } + if (self::small_order($sig)) { + throw new SodiumException('Signature is on too small of an order'); + } + if ((self::chrToInt($sig[63]) & 224) !== 0) { + throw new SodiumException('Invalid signature'); + } + $d = 0; + for ($i = 0; $i < 32; ++$i) { + $d |= self::chrToInt($pk[$i]); + } + if ($d === 0) { + throw new SodiumException('All zero public key'); + } + + /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ + $orig = ParagonIE_Sodium_Compat::$fastMult; + + // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. + ParagonIE_Sodium_Compat::$fastMult = true; + + /** @var ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A */ + $A = self::ge_frombytes_negate_vartime($pk); + + /** @var string $hDigest */ + $hDigest = hash( + 'sha512', + self::substr($sig, 0, 32) . + self::substr($pk, 0, 32) . + $message, + true + ); + + /** @var string $h */ + $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); + + /** @var ParagonIE_Sodium_Core_Curve25519_Ge_P2 $R */ + $R = self::ge_double_scalarmult_vartime( + $h, + $A, + self::substr($sig, 32) + ); + + /** @var string $rcheck */ + $rcheck = self::ge_tobytes($R); + + // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. + ParagonIE_Sodium_Compat::$fastMult = $orig; + + return self::verify_32($rcheck, self::substr($sig, 0, 32)); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $S + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function check_S_lt_L($S) + { + if (self::strlen($S) < 32) { + throw new SodiumException('Signature must be 32 bytes'); + } + $L = array( + 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, + 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10 + ); + $c = 0; + $n = 1; + $i = 32; + + /** @var array $L */ + do { + --$i; + $x = self::chrToInt($S[$i]); + $c |= ( + (($x - $L[$i]) >> 8) & $n + ); + $n &= ( + (($x ^ $L[$i]) - 1) >> 8 + ); + } while ($i !== 0); + + return $c === 0; + } + + /** + * @param string $R + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function small_order($R) + { + /** @var array> $blocklist */ + $blocklist = array( + /* 0 (order 4) */ + array( + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 + ), + /* 1 (order 1) */ + array( + 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 + ), + /* 2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ + array( + 0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05 + ), + /* 55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ + array( + 0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a + ), + /* p-1 (order 2) */ + array( + 0x13, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x85 + ), + /* p (order 4) */ + array( + 0xb4, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0xfa + ), + /* p+1 (order 1) */ + array( + 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f + ), + /* p+2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ + array( + 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f + ), + /* p+55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ + array( + 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f + ), + /* 2p-1 (order 2) */ + array( + 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff + ), + /* 2p (order 4) */ + array( + 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff + ), + /* 2p+1 (order 1) */ + array( + 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff + ) + ); + /** @var int $countBlocklist */ + $countBlocklist = count($blocklist); + + for ($i = 0; $i < $countBlocklist; ++$i) { + $c = 0; + for ($j = 0; $j < 32; ++$j) { + $c |= self::chrToInt($R[$j]) ^ (int) $blocklist[$i][$j]; + } + if ($c === 0) { + return true; + } + } + return false; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/HChaCha20.php b/vendor/paragonie/sodium_compat/src/Core/HChaCha20.php new file mode 100644 index 000000000..947df10fb --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/HChaCha20.php @@ -0,0 +1,108 @@ + 0; $i -= 2) { + $x4 ^= self::rotate($x0 + $x12, 7); + $x8 ^= self::rotate($x4 + $x0, 9); + $x12 ^= self::rotate($x8 + $x4, 13); + $x0 ^= self::rotate($x12 + $x8, 18); + $x9 ^= self::rotate($x5 + $x1, 7); + $x13 ^= self::rotate($x9 + $x5, 9); + $x1 ^= self::rotate($x13 + $x9, 13); + $x5 ^= self::rotate($x1 + $x13, 18); + $x14 ^= self::rotate($x10 + $x6, 7); + $x2 ^= self::rotate($x14 + $x10, 9); + $x6 ^= self::rotate($x2 + $x14, 13); + $x10 ^= self::rotate($x6 + $x2, 18); + $x3 ^= self::rotate($x15 + $x11, 7); + $x7 ^= self::rotate($x3 + $x15, 9); + $x11 ^= self::rotate($x7 + $x3, 13); + $x15 ^= self::rotate($x11 + $x7, 18); + $x1 ^= self::rotate($x0 + $x3, 7); + $x2 ^= self::rotate($x1 + $x0, 9); + $x3 ^= self::rotate($x2 + $x1, 13); + $x0 ^= self::rotate($x3 + $x2, 18); + $x6 ^= self::rotate($x5 + $x4, 7); + $x7 ^= self::rotate($x6 + $x5, 9); + $x4 ^= self::rotate($x7 + $x6, 13); + $x5 ^= self::rotate($x4 + $x7, 18); + $x11 ^= self::rotate($x10 + $x9, 7); + $x8 ^= self::rotate($x11 + $x10, 9); + $x9 ^= self::rotate($x8 + $x11, 13); + $x10 ^= self::rotate($x9 + $x8, 18); + $x12 ^= self::rotate($x15 + $x14, 7); + $x13 ^= self::rotate($x12 + $x15, 9); + $x14 ^= self::rotate($x13 + $x12, 13); + $x15 ^= self::rotate($x14 + $x13, 18); + } + + return self::store32_le($x0) . + self::store32_le($x5) . + self::store32_le($x10) . + self::store32_le($x15) . + self::store32_le($x6) . + self::store32_le($x7) . + self::store32_le($x8) . + self::store32_le($x9); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Poly1305.php b/vendor/paragonie/sodium_compat/src/Core/Poly1305.php new file mode 100644 index 000000000..330182177 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Poly1305.php @@ -0,0 +1,63 @@ +update($m) + ->finish(); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $mac + * @param string $m + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function onetimeauth_verify($mac, $m, $key) + { + if (self::strlen($key) < 32) { + throw new InvalidArgumentException( + 'Key must be 32 bytes long.' + ); + } + $state = new ParagonIE_Sodium_Core_Poly1305_State( + self::substr($key, 0, 32) + ); + $calc = $state + ->update($m) + ->finish(); + return self::verify_16($calc, $mac); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Poly1305/State.php b/vendor/paragonie/sodium_compat/src/Core/Poly1305/State.php new file mode 100644 index 000000000..4b64e0407 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Poly1305/State.php @@ -0,0 +1,445 @@ + + */ + protected $buffer = array(); + + /** + * @var bool + */ + protected $final = false; + + /** + * @var array + */ + public $h; + + /** + * @var int + */ + protected $leftover = 0; + + /** + * @var int[] + */ + public $r; + + /** + * @var int[] + */ + public $pad; + + /** + * ParagonIE_Sodium_Core_Poly1305_State constructor. + * + * @internal You should not use this directly from another application + * + * @param string $key + * @throws InvalidArgumentException + * @throws TypeError + */ + public function __construct($key = '') + { + if (self::strlen($key) < 32) { + throw new InvalidArgumentException( + 'Poly1305 requires a 32-byte key' + ); + } + /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */ + $this->r = array( + (int) ((self::load_4(self::substr($key, 0, 4))) & 0x3ffffff), + (int) ((self::load_4(self::substr($key, 3, 4)) >> 2) & 0x3ffff03), + (int) ((self::load_4(self::substr($key, 6, 4)) >> 4) & 0x3ffc0ff), + (int) ((self::load_4(self::substr($key, 9, 4)) >> 6) & 0x3f03fff), + (int) ((self::load_4(self::substr($key, 12, 4)) >> 8) & 0x00fffff) + ); + + /* h = 0 */ + $this->h = array(0, 0, 0, 0, 0); + + /* save pad for later */ + $this->pad = array( + self::load_4(self::substr($key, 16, 4)), + self::load_4(self::substr($key, 20, 4)), + self::load_4(self::substr($key, 24, 4)), + self::load_4(self::substr($key, 28, 4)), + ); + + $this->leftover = 0; + $this->final = false; + } + + /** + * Zero internal buffer upon destruction + */ + public function __destruct() + { + $this->r[0] ^= $this->r[0]; + $this->r[1] ^= $this->r[1]; + $this->r[2] ^= $this->r[2]; + $this->r[3] ^= $this->r[3]; + $this->r[4] ^= $this->r[4]; + $this->h[0] ^= $this->h[0]; + $this->h[1] ^= $this->h[1]; + $this->h[2] ^= $this->h[2]; + $this->h[3] ^= $this->h[3]; + $this->h[4] ^= $this->h[4]; + $this->pad[0] ^= $this->pad[0]; + $this->pad[1] ^= $this->pad[1]; + $this->pad[2] ^= $this->pad[2]; + $this->pad[3] ^= $this->pad[3]; + $this->leftover = 0; + $this->final = true; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @return self + * @throws SodiumException + * @throws TypeError + */ + public function update($message = '') + { + $bytes = self::strlen($message); + if ($bytes < 1) { + return $this; + } + + /* handle leftover */ + if ($this->leftover) { + $want = ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE - $this->leftover; + if ($want > $bytes) { + $want = $bytes; + } + for ($i = 0; $i < $want; ++$i) { + $mi = self::chrToInt($message[$i]); + $this->buffer[$this->leftover + $i] = $mi; + } + // We snip off the leftmost bytes. + $message = self::substr($message, $want); + $bytes = self::strlen($message); + $this->leftover += $want; + if ($this->leftover < ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { + // We still don't have enough to run $this->blocks() + return $this; + } + + $this->blocks( + self::intArrayToString($this->buffer), + ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE + ); + $this->leftover = 0; + } + + /* process full blocks */ + if ($bytes >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { + /** @var int $want */ + $want = $bytes & ~(ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE - 1); + if ($want >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { + $block = self::substr($message, 0, $want); + if (self::strlen($block) >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { + $this->blocks($block, $want); + $message = self::substr($message, $want); + $bytes = self::strlen($message); + } + } + } + + /* store leftover */ + if ($bytes) { + for ($i = 0; $i < $bytes; ++$i) { + $mi = self::chrToInt($message[$i]); + $this->buffer[$this->leftover + $i] = $mi; + } + $this->leftover = (int) $this->leftover + $bytes; + } + return $this; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param int $bytes + * @return self + * @throws TypeError + */ + public function blocks($message, $bytes) + { + if (self::strlen($message) < 16) { + $message = str_pad($message, 16, "\x00", STR_PAD_RIGHT); + } + /** @var int $hibit */ + $hibit = $this->final ? 0 : 1 << 24; /* 1 << 128 */ + $r0 = (int) $this->r[0]; + $r1 = (int) $this->r[1]; + $r2 = (int) $this->r[2]; + $r3 = (int) $this->r[3]; + $r4 = (int) $this->r[4]; + + $s1 = self::mul($r1, 5, 3); + $s2 = self::mul($r2, 5, 3); + $s3 = self::mul($r3, 5, 3); + $s4 = self::mul($r4, 5, 3); + + $h0 = $this->h[0]; + $h1 = $this->h[1]; + $h2 = $this->h[2]; + $h3 = $this->h[3]; + $h4 = $this->h[4]; + + while ($bytes >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { + /* h += m[i] */ + $h0 += self::load_4(self::substr($message, 0, 4)) & 0x3ffffff; + $h1 += (self::load_4(self::substr($message, 3, 4)) >> 2) & 0x3ffffff; + $h2 += (self::load_4(self::substr($message, 6, 4)) >> 4) & 0x3ffffff; + $h3 += (self::load_4(self::substr($message, 9, 4)) >> 6) & 0x3ffffff; + $h4 += (self::load_4(self::substr($message, 12, 4)) >> 8) | $hibit; + + /* h *= r */ + $d0 = ( + self::mul($h0, $r0, 25) + + self::mul($s4, $h1, 26) + + self::mul($s3, $h2, 26) + + self::mul($s2, $h3, 26) + + self::mul($s1, $h4, 26) + ); + + $d1 = ( + self::mul($h0, $r1, 25) + + self::mul($h1, $r0, 25) + + self::mul($s4, $h2, 26) + + self::mul($s3, $h3, 26) + + self::mul($s2, $h4, 26) + ); + + $d2 = ( + self::mul($h0, $r2, 25) + + self::mul($h1, $r1, 25) + + self::mul($h2, $r0, 25) + + self::mul($s4, $h3, 26) + + self::mul($s3, $h4, 26) + ); + + $d3 = ( + self::mul($h0, $r3, 25) + + self::mul($h1, $r2, 25) + + self::mul($h2, $r1, 25) + + self::mul($h3, $r0, 25) + + self::mul($s4, $h4, 26) + ); + + $d4 = ( + self::mul($h0, $r4, 25) + + self::mul($h1, $r3, 25) + + self::mul($h2, $r2, 25) + + self::mul($h3, $r1, 25) + + self::mul($h4, $r0, 25) + ); + + /* (partial) h %= p */ + /** @var int $c */ + $c = $d0 >> 26; + /** @var int $h0 */ + $h0 = $d0 & 0x3ffffff; + $d1 += $c; + + /** @var int $c */ + $c = $d1 >> 26; + /** @var int $h1 */ + $h1 = $d1 & 0x3ffffff; + $d2 += $c; + + /** @var int $c */ + $c = $d2 >> 26; + /** @var int $h2 */ + $h2 = $d2 & 0x3ffffff; + $d3 += $c; + + /** @var int $c */ + $c = $d3 >> 26; + /** @var int $h3 */ + $h3 = $d3 & 0x3ffffff; + $d4 += $c; + + /** @var int $c */ + $c = $d4 >> 26; + /** @var int $h4 */ + $h4 = $d4 & 0x3ffffff; + $h0 += (int) self::mul($c, 5, 3); + + /** @var int $c */ + $c = $h0 >> 26; + /** @var int $h0 */ + $h0 &= 0x3ffffff; + $h1 += $c; + + // Chop off the left 32 bytes. + $message = self::substr( + $message, + ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE + ); + $bytes -= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE; + } + + $this->h = array( + (int) ($h0 & 0xffffffff), + (int) ($h1 & 0xffffffff), + (int) ($h2 & 0xffffffff), + (int) ($h3 & 0xffffffff), + (int) ($h4 & 0xffffffff) + ); + return $this; + } + + /** + * @internal You should not use this directly from another application + * + * @return string + * @throws TypeError + */ + public function finish() + { + /* process the remaining block */ + if ($this->leftover) { + $i = $this->leftover; + $this->buffer[$i++] = 1; + for (; $i < ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE; ++$i) { + $this->buffer[$i] = 0; + } + $this->final = true; + $this->blocks( + self::substr( + self::intArrayToString($this->buffer), + 0, + ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE + ), + ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE + ); + } + + $h0 = (int) $this->h[0]; + $h1 = (int) $this->h[1]; + $h2 = (int) $this->h[2]; + $h3 = (int) $this->h[3]; + $h4 = (int) $this->h[4]; + + /** @var int $c */ + $c = $h1 >> 26; + /** @var int $h1 */ + $h1 &= 0x3ffffff; + /** @var int $h2 */ + $h2 += $c; + /** @var int $c */ + $c = $h2 >> 26; + /** @var int $h2 */ + $h2 &= 0x3ffffff; + $h3 += $c; + /** @var int $c */ + $c = $h3 >> 26; + $h3 &= 0x3ffffff; + $h4 += $c; + /** @var int $c */ + $c = $h4 >> 26; + $h4 &= 0x3ffffff; + /** @var int $h0 */ + $h0 += self::mul($c, 5, 3); + /** @var int $c */ + $c = $h0 >> 26; + /** @var int $h0 */ + $h0 &= 0x3ffffff; + /** @var int $h1 */ + $h1 += $c; + + /* compute h + -p */ + /** @var int $g0 */ + $g0 = $h0 + 5; + /** @var int $c */ + $c = $g0 >> 26; + /** @var int $g0 */ + $g0 &= 0x3ffffff; + + /** @var int $g1 */ + $g1 = $h1 + $c; + /** @var int $c */ + $c = $g1 >> 26; + $g1 &= 0x3ffffff; + + /** @var int $g2 */ + $g2 = $h2 + $c; + /** @var int $c */ + $c = $g2 >> 26; + /** @var int $g2 */ + $g2 &= 0x3ffffff; + + /** @var int $g3 */ + $g3 = $h3 + $c; + /** @var int $c */ + $c = $g3 >> 26; + /** @var int $g3 */ + $g3 &= 0x3ffffff; + + /** @var int $g4 */ + $g4 = ($h4 + $c - (1 << 26)) & 0xffffffff; + + /* select h if h < p, or h + -p if h >= p */ + /** @var int $mask */ + $mask = ($g4 >> 31) - 1; + + $g0 &= $mask; + $g1 &= $mask; + $g2 &= $mask; + $g3 &= $mask; + $g4 &= $mask; + + /** @var int $mask */ + $mask = ~$mask & 0xffffffff; + /** @var int $h0 */ + $h0 = ($h0 & $mask) | $g0; + /** @var int $h1 */ + $h1 = ($h1 & $mask) | $g1; + /** @var int $h2 */ + $h2 = ($h2 & $mask) | $g2; + /** @var int $h3 */ + $h3 = ($h3 & $mask) | $g3; + /** @var int $h4 */ + $h4 = ($h4 & $mask) | $g4; + + /* h = h % (2^128) */ + /** @var int $h0 */ + $h0 = (($h0) | ($h1 << 26)) & 0xffffffff; + /** @var int $h1 */ + $h1 = (($h1 >> 6) | ($h2 << 20)) & 0xffffffff; + /** @var int $h2 */ + $h2 = (($h2 >> 12) | ($h3 << 14)) & 0xffffffff; + /** @var int $h3 */ + $h3 = (($h3 >> 18) | ($h4 << 8)) & 0xffffffff; + + /* mac = (h + pad) % (2^128) */ + $f = (int) ($h0 + $this->pad[0]); + $h0 = (int) $f; + $f = (int) ($h1 + $this->pad[1] + ($f >> 32)); + $h1 = (int) $f; + $f = (int) ($h2 + $this->pad[2] + ($f >> 32)); + $h2 = (int) $f; + $f = (int) ($h3 + $this->pad[3] + ($f >> 32)); + $h3 = (int) $f; + + return self::store32_le($h0 & 0xffffffff) . + self::store32_le($h1 & 0xffffffff) . + self::store32_le($h2 & 0xffffffff) . + self::store32_le($h3 & 0xffffffff); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Salsa20.php b/vendor/paragonie/sodium_compat/src/Core/Salsa20.php new file mode 100644 index 000000000..515ccad60 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Salsa20.php @@ -0,0 +1,273 @@ + 0; $i -= 2) { + $x4 ^= self::rotate($x0 + $x12, 7); + $x8 ^= self::rotate($x4 + $x0, 9); + $x12 ^= self::rotate($x8 + $x4, 13); + $x0 ^= self::rotate($x12 + $x8, 18); + + $x9 ^= self::rotate($x5 + $x1, 7); + $x13 ^= self::rotate($x9 + $x5, 9); + $x1 ^= self::rotate($x13 + $x9, 13); + $x5 ^= self::rotate($x1 + $x13, 18); + + $x14 ^= self::rotate($x10 + $x6, 7); + $x2 ^= self::rotate($x14 + $x10, 9); + $x6 ^= self::rotate($x2 + $x14, 13); + $x10 ^= self::rotate($x6 + $x2, 18); + + $x3 ^= self::rotate($x15 + $x11, 7); + $x7 ^= self::rotate($x3 + $x15, 9); + $x11 ^= self::rotate($x7 + $x3, 13); + $x15 ^= self::rotate($x11 + $x7, 18); + + $x1 ^= self::rotate($x0 + $x3, 7); + $x2 ^= self::rotate($x1 + $x0, 9); + $x3 ^= self::rotate($x2 + $x1, 13); + $x0 ^= self::rotate($x3 + $x2, 18); + + $x6 ^= self::rotate($x5 + $x4, 7); + $x7 ^= self::rotate($x6 + $x5, 9); + $x4 ^= self::rotate($x7 + $x6, 13); + $x5 ^= self::rotate($x4 + $x7, 18); + + $x11 ^= self::rotate($x10 + $x9, 7); + $x8 ^= self::rotate($x11 + $x10, 9); + $x9 ^= self::rotate($x8 + $x11, 13); + $x10 ^= self::rotate($x9 + $x8, 18); + + $x12 ^= self::rotate($x15 + $x14, 7); + $x13 ^= self::rotate($x12 + $x15, 9); + $x14 ^= self::rotate($x13 + $x12, 13); + $x15 ^= self::rotate($x14 + $x13, 18); + } + + $x0 += $j0; + $x1 += $j1; + $x2 += $j2; + $x3 += $j3; + $x4 += $j4; + $x5 += $j5; + $x6 += $j6; + $x7 += $j7; + $x8 += $j8; + $x9 += $j9; + $x10 += $j10; + $x11 += $j11; + $x12 += $j12; + $x13 += $j13; + $x14 += $j14; + $x15 += $j15; + + return self::store32_le($x0) . + self::store32_le($x1) . + self::store32_le($x2) . + self::store32_le($x3) . + self::store32_le($x4) . + self::store32_le($x5) . + self::store32_le($x6) . + self::store32_le($x7) . + self::store32_le($x8) . + self::store32_le($x9) . + self::store32_le($x10) . + self::store32_le($x11) . + self::store32_le($x12) . + self::store32_le($x13) . + self::store32_le($x14) . + self::store32_le($x15); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function salsa20($len, $nonce, $key) + { + if (self::strlen($key) !== 32) { + throw new RangeException('Key must be 32 bytes long'); + } + $kcopy = '' . $key; + $in = self::substr($nonce, 0, 8) . str_repeat("\0", 8); + $c = ''; + while ($len >= 64) { + $c .= self::core_salsa20($in, $kcopy, null); + $u = 1; + // Internal counter. + for ($i = 8; $i < 16; ++$i) { + $u += self::chrToInt($in[$i]); + $in[$i] = self::intToChr($u & 0xff); + $u >>= 8; + } + $len -= 64; + } + if ($len > 0) { + $c .= self::substr( + self::core_salsa20($in, $kcopy, null), + 0, + $len + ); + } + try { + ParagonIE_Sodium_Compat::memzero($kcopy); + } catch (SodiumException $ex) { + $kcopy = null; + } + return $c; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $m + * @param string $n + * @param int $ic + * @param string $k + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function salsa20_xor_ic($m, $n, $ic, $k) + { + $mlen = self::strlen($m); + if ($mlen < 1) { + return ''; + } + $kcopy = self::substr($k, 0, 32); + $in = self::substr($n, 0, 8); + // Initialize the counter + $in .= ParagonIE_Sodium_Core_Util::store64_le($ic); + + $c = ''; + while ($mlen >= 64) { + $block = self::core_salsa20($in, $kcopy, null); + $c .= self::xorStrings( + self::substr($m, 0, 64), + self::substr($block, 0, 64) + ); + $u = 1; + for ($i = 8; $i < 16; ++$i) { + $u += self::chrToInt($in[$i]); + $in[$i] = self::intToChr($u & 0xff); + $u >>= 8; + } + + $mlen -= 64; + $m = self::substr($m, 64); + } + + if ($mlen) { + $block = self::core_salsa20($in, $kcopy, null); + $c .= self::xorStrings( + self::substr($m, 0, $mlen), + self::substr($block, 0, $mlen) + ); + } + try { + ParagonIE_Sodium_Compat::memzero($block); + ParagonIE_Sodium_Compat::memzero($kcopy); + } catch (SodiumException $ex) { + $block = null; + $kcopy = null; + } + + return $c; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function salsa20_xor($message, $nonce, $key) + { + return self::xorStrings( + $message, + self::salsa20( + self::strlen($message), + $nonce, + $key + ) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $u + * @param int $c + * @return int + */ + public static function rotate($u, $c) + { + $u &= 0xffffffff; + $c %= 32; + return (int) (0xffffffff & ( + ($u << $c) + | + ($u >> (32 - $c)) + ) + ); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/SecretStream/State.php b/vendor/paragonie/sodium_compat/src/Core/SecretStream/State.php new file mode 100644 index 000000000..2412f6549 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/SecretStream/State.php @@ -0,0 +1,163 @@ +key = $key; + $this->counter = 1; + if (is_null($nonce)) { + $nonce = str_repeat("\0", 12); + } + $this->nonce = str_pad($nonce, 12, "\0", STR_PAD_RIGHT);; + $this->_pad = str_repeat("\0", 4); + } + + /** + * @return self + */ + public function counterReset() + { + $this->counter = 1; + $this->_pad = str_repeat("\0", 4); + return $this; + } + + /** + * @return string + */ + public function getKey() + { + return $this->key; + } + + /** + * @return string + */ + public function getCounter() + { + return ParagonIE_Sodium_Core_Util::store32_le($this->counter); + } + + /** + * @return string + */ + public function getNonce() + { + if (!is_string($this->nonce)) { + $this->nonce = str_repeat("\0", 12); + } + if (ParagonIE_Sodium_Core_Util::strlen($this->nonce) !== 12) { + $this->nonce = str_pad($this->nonce, 12, "\0", STR_PAD_RIGHT); + } + return $this->nonce; + } + + /** + * @return string + */ + public function getCombinedNonce() + { + return $this->getCounter() . + ParagonIE_Sodium_Core_Util::substr($this->getNonce(), 0, 8); + } + + /** + * @return self + */ + public function incrementCounter() + { + ++$this->counter; + return $this; + } + + /** + * @return bool + */ + public function needsRekey() + { + return ($this->counter & 0xffff) === 0; + } + + /** + * @param string $newKeyAndNonce + * @return self + */ + public function rekey($newKeyAndNonce) + { + $this->key = ParagonIE_Sodium_Core_Util::substr($newKeyAndNonce, 0, 32); + $this->nonce = str_pad( + ParagonIE_Sodium_Core_Util::substr($newKeyAndNonce, 32), + 12, + "\0", + STR_PAD_RIGHT + ); + return $this; + } + + /** + * @param string $str + * @return self + */ + public function xorNonce($str) + { + $this->nonce = ParagonIE_Sodium_Core_Util::xorStrings( + $this->getNonce(), + str_pad( + ParagonIE_Sodium_Core_Util::substr($str, 0, 8), + 12, + "\0", + STR_PAD_RIGHT + ) + ); + return $this; + } + + /** + * @param string $string + * @return self + */ + public static function fromString($string) + { + $state = new ParagonIE_Sodium_Core_SecretStream_State( + ParagonIE_Sodium_Core_Util::substr($string, 0, 32) + ); + $state->counter = ParagonIE_Sodium_Core_Util::load_4( + ParagonIE_Sodium_Core_Util::substr($string, 32, 4) + ); + $state->nonce = ParagonIE_Sodium_Core_Util::substr($string, 36, 12); + $state->_pad = ParagonIE_Sodium_Core_Util::substr($string, 48, 8); + return $state; + } + + /** + * @return string + */ + public function toString() + { + return $this->key . + $this->getCounter() . + $this->nonce . + $this->_pad; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/SipHash.php b/vendor/paragonie/sodium_compat/src/Core/SipHash.php new file mode 100644 index 000000000..542b4cc2e --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/SipHash.php @@ -0,0 +1,306 @@ + $v + * @return array + * + */ + public static function sipRound(array $v) + { + # v0 += v1; + list($v[0], $v[1]) = self::add( + array($v[0], $v[1]), + array($v[2], $v[3]) + ); + + # v1=ROTL(v1,13); + list($v[2], $v[3]) = self::rotl_64((int) $v[2], (int) $v[3], 13); + + # v1 ^= v0; + $v[2] = (int) $v[2] ^ (int) $v[0]; + $v[3] = (int) $v[3] ^ (int) $v[1]; + + # v0=ROTL(v0,32); + list($v[0], $v[1]) = self::rotl_64((int) $v[0], (int) $v[1], 32); + + # v2 += v3; + list($v[4], $v[5]) = self::add( + array((int) $v[4], (int) $v[5]), + array((int) $v[6], (int) $v[7]) + ); + + # v3=ROTL(v3,16); + list($v[6], $v[7]) = self::rotl_64((int) $v[6], (int) $v[7], 16); + + # v3 ^= v2; + $v[6] = (int) $v[6] ^ (int) $v[4]; + $v[7] = (int) $v[7] ^ (int) $v[5]; + + # v0 += v3; + list($v[0], $v[1]) = self::add( + array((int) $v[0], (int) $v[1]), + array((int) $v[6], (int) $v[7]) + ); + + # v3=ROTL(v3,21); + list($v[6], $v[7]) = self::rotl_64((int) $v[6], (int) $v[7], 21); + + # v3 ^= v0; + $v[6] = (int) $v[6] ^ (int) $v[0]; + $v[7] = (int) $v[7] ^ (int) $v[1]; + + # v2 += v1; + list($v[4], $v[5]) = self::add( + array((int) $v[4], (int) $v[5]), + array((int) $v[2], (int) $v[3]) + ); + + # v1=ROTL(v1,17); + list($v[2], $v[3]) = self::rotl_64((int) $v[2], (int) $v[3], 17); + + # v1 ^= v2;; + $v[2] = (int) $v[2] ^ (int) $v[4]; + $v[3] = (int) $v[3] ^ (int) $v[5]; + + # v2=ROTL(v2,32) + list($v[4], $v[5]) = self::rotl_64((int) $v[4], (int) $v[5], 32); + + return $v; + } + + /** + * Add two 32 bit integers representing a 64-bit integer. + * + * @internal You should not use this directly from another application + * + * @param int[] $a + * @param int[] $b + * @return array + */ + public static function add(array $a, array $b) + { + /** @var int $x1 */ + $x1 = $a[1] + $b[1]; + /** @var int $c */ + $c = $x1 >> 32; // Carry if ($a + $b) > 0xffffffff + /** @var int $x0 */ + $x0 = $a[0] + $b[0] + $c; + return array( + $x0 & 0xffffffff, + $x1 & 0xffffffff + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $int0 + * @param int $int1 + * @param int $c + * @return array + */ + public static function rotl_64($int0, $int1, $c) + { + $int0 &= 0xffffffff; + $int1 &= 0xffffffff; + $c &= 63; + if ($c === 32) { + return array($int1, $int0); + } + if ($c > 31) { + $tmp = $int1; + $int1 = $int0; + $int0 = $tmp; + $c &= 31; + } + if ($c === 0) { + return array($int0, $int1); + } + return array( + 0xffffffff & ( + ($int0 << $c) + | + ($int1 >> (32 - $c)) + ), + 0xffffffff & ( + ($int1 << $c) + | + ($int0 >> (32 - $c)) + ), + ); + } + + /** + * Implements Siphash-2-4 using only 32-bit numbers. + * + * When we split an int into two, the higher bits go to the lower index. + * e.g. 0xDEADBEEFAB10C92D becomes [ + * 0 => 0xDEADBEEF, + * 1 => 0xAB10C92D + * ]. + * + * @internal You should not use this directly from another application + * + * @param string $in + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sipHash24($in, $key) + { + $inlen = self::strlen($in); + + # /* "somepseudorandomlygeneratedbytes" */ + # u64 v0 = 0x736f6d6570736575ULL; + # u64 v1 = 0x646f72616e646f6dULL; + # u64 v2 = 0x6c7967656e657261ULL; + # u64 v3 = 0x7465646279746573ULL; + $v = array( + 0x736f6d65, // 0 + 0x70736575, // 1 + 0x646f7261, // 2 + 0x6e646f6d, // 3 + 0x6c796765, // 4 + 0x6e657261, // 5 + 0x74656462, // 6 + 0x79746573 // 7 + ); + // v0 => $v[0], $v[1] + // v1 => $v[2], $v[3] + // v2 => $v[4], $v[5] + // v3 => $v[6], $v[7] + + # u64 k0 = LOAD64_LE( k ); + # u64 k1 = LOAD64_LE( k + 8 ); + $k = array( + self::load_4(self::substr($key, 4, 4)), + self::load_4(self::substr($key, 0, 4)), + self::load_4(self::substr($key, 12, 4)), + self::load_4(self::substr($key, 8, 4)) + ); + // k0 => $k[0], $k[1] + // k1 => $k[2], $k[3] + + # b = ( ( u64 )inlen ) << 56; + $b = array( + $inlen << 24, + 0 + ); + // See docblock for why the 0th index gets the higher bits. + + # v3 ^= k1; + $v[6] ^= $k[2]; + $v[7] ^= $k[3]; + # v2 ^= k0; + $v[4] ^= $k[0]; + $v[5] ^= $k[1]; + # v1 ^= k1; + $v[2] ^= $k[2]; + $v[3] ^= $k[3]; + # v0 ^= k0; + $v[0] ^= $k[0]; + $v[1] ^= $k[1]; + + $left = $inlen; + # for ( ; in != end; in += 8 ) + while ($left >= 8) { + # m = LOAD64_LE( in ); + $m = array( + self::load_4(self::substr($in, 4, 4)), + self::load_4(self::substr($in, 0, 4)) + ); + + # v3 ^= m; + $v[6] ^= $m[0]; + $v[7] ^= $m[1]; + + # SIPROUND; + # SIPROUND; + $v = self::sipRound($v); + $v = self::sipRound($v); + + # v0 ^= m; + $v[0] ^= $m[0]; + $v[1] ^= $m[1]; + + $in = self::substr($in, 8); + $left -= 8; + } + + # switch( left ) + # { + # case 7: b |= ( ( u64 )in[ 6] ) << 48; + # case 6: b |= ( ( u64 )in[ 5] ) << 40; + # case 5: b |= ( ( u64 )in[ 4] ) << 32; + # case 4: b |= ( ( u64 )in[ 3] ) << 24; + # case 3: b |= ( ( u64 )in[ 2] ) << 16; + # case 2: b |= ( ( u64 )in[ 1] ) << 8; + # case 1: b |= ( ( u64 )in[ 0] ); break; + # case 0: break; + # } + switch ($left) { + case 7: + $b[0] |= self::chrToInt($in[6]) << 16; + case 6: + $b[0] |= self::chrToInt($in[5]) << 8; + case 5: + $b[0] |= self::chrToInt($in[4]); + case 4: + $b[1] |= self::chrToInt($in[3]) << 24; + case 3: + $b[1] |= self::chrToInt($in[2]) << 16; + case 2: + $b[1] |= self::chrToInt($in[1]) << 8; + case 1: + $b[1] |= self::chrToInt($in[0]); + case 0: + break; + } + // See docblock for why the 0th index gets the higher bits. + + # v3 ^= b; + $v[6] ^= $b[0]; + $v[7] ^= $b[1]; + + # SIPROUND; + # SIPROUND; + $v = self::sipRound($v); + $v = self::sipRound($v); + + # v0 ^= b; + $v[0] ^= $b[0]; + $v[1] ^= $b[1]; + + // Flip the lower 8 bits of v2 which is ($v[4], $v[5]) in our implementation + # v2 ^= 0xff; + $v[5] ^= 0xff; + + # SIPROUND; + # SIPROUND; + # SIPROUND; + # SIPROUND; + $v = self::sipRound($v); + $v = self::sipRound($v); + $v = self::sipRound($v); + $v = self::sipRound($v); + + # b = v0 ^ v1 ^ v2 ^ v3; + # STORE64_LE( out, b ); + return self::store32_le($v[1] ^ $v[3] ^ $v[5] ^ $v[7]) . + self::store32_le($v[0] ^ $v[2] ^ $v[4] ^ $v[6]); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/Util.php b/vendor/paragonie/sodium_compat/src/Core/Util.php new file mode 100644 index 000000000..3bb4dafb3 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/Util.php @@ -0,0 +1,926 @@ +> $size) & 1); + return (int) ( + ($integer ^ $negative) + + + (($negative >> $realSize) & 1) + ); + } + + /** + * Convert a binary string into a hexadecimal string without cache-timing + * leaks + * + * @internal You should not use this directly from another application + * + * @param string $binaryString (raw binary) + * @return string + * @throws TypeError + */ + public static function bin2hex($binaryString) + { + /* Type checks: */ + if (!is_string($binaryString)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($binaryString) . ' given.'); + } + + $hex = ''; + $len = self::strlen($binaryString); + for ($i = 0; $i < $len; ++$i) { + /** @var array $chunk */ + $chunk = unpack('C', $binaryString[$i]); + /** @var int $c */ + $c = $chunk[1] & 0xf; + /** @var int $b */ + $b = $chunk[1] >> 4; + $hex .= pack( + 'CC', + (87 + $b + ((($b - 10) >> 8) & ~38)), + (87 + $c + ((($c - 10) >> 8) & ~38)) + ); + } + return $hex; + } + + /** + * Convert a binary string into a hexadecimal string without cache-timing + * leaks, returning uppercase letters (as per RFC 4648) + * + * @internal You should not use this directly from another application + * + * @param string $bin_string (raw binary) + * @return string + * @throws TypeError + */ + public static function bin2hexUpper($bin_string) + { + $hex = ''; + $len = self::strlen($bin_string); + for ($i = 0; $i < $len; ++$i) { + /** @var array $chunk */ + $chunk = unpack('C', $bin_string[$i]); + /** + * Lower 16 bits + * + * @var int $c + */ + $c = $chunk[1] & 0xf; + + /** + * Upper 16 bits + * @var int $b + */ + $b = $chunk[1] >> 4; + + /** + * Use pack() and binary operators to turn the two integers + * into hexadecimal characters. We don't use chr() here, because + * it uses a lookup table internally and we want to avoid + * cache-timing side-channels. + */ + $hex .= pack( + 'CC', + (55 + $b + ((($b - 10) >> 8) & ~6)), + (55 + $c + ((($c - 10) >> 8) & ~6)) + ); + } + return $hex; + } + + /** + * Cache-timing-safe variant of ord() + * + * @internal You should not use this directly from another application + * + * @param string $chr + * @return int + * @throws SodiumException + * @throws TypeError + */ + public static function chrToInt($chr) + { + /* Type checks: */ + if (!is_string($chr)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($chr) . ' given.'); + } + if (self::strlen($chr) !== 1) { + throw new SodiumException('chrToInt() expects a string that is exactly 1 character long'); + } + /** @var array $chunk */ + $chunk = unpack('C', $chr); + return (int) ($chunk[1]); + } + + /** + * Compares two strings. + * + * @internal You should not use this directly from another application + * + * @param string $left + * @param string $right + * @param int $len + * @return int + * @throws SodiumException + * @throws TypeError + */ + public static function compare($left, $right, $len = null) + { + $leftLen = self::strlen($left); + $rightLen = self::strlen($right); + if ($len === null) { + $len = max($leftLen, $rightLen); + $left = str_pad($left, $len, "\x00", STR_PAD_RIGHT); + $right = str_pad($right, $len, "\x00", STR_PAD_RIGHT); + } + + $gt = 0; + $eq = 1; + $i = $len; + while ($i !== 0) { + --$i; + $gt |= ((self::chrToInt($right[$i]) - self::chrToInt($left[$i])) >> 8) & $eq; + $eq &= ((self::chrToInt($right[$i]) ^ self::chrToInt($left[$i])) - 1) >> 8; + } + return ($gt + $gt + $eq) - 1; + } + + /** + * If a variable does not match a given type, throw a TypeError. + * + * @param mixed $mixedVar + * @param string $type + * @param int $argumentIndex + * @throws TypeError + * @throws SodiumException + * @return void + */ + public static function declareScalarType(&$mixedVar = null, $type = 'void', $argumentIndex = 0) + { + if (func_num_args() === 0) { + /* Tautology, by default */ + return; + } + if (func_num_args() === 1) { + throw new TypeError('Declared void, but passed a variable'); + } + $realType = strtolower(gettype($mixedVar)); + $type = strtolower($type); + switch ($type) { + case 'null': + if ($mixedVar !== null) { + throw new TypeError('Argument ' . $argumentIndex . ' must be null, ' . $realType . ' given.'); + } + break; + case 'integer': + case 'int': + $allow = array('int', 'integer'); + if (!in_array($type, $allow)) { + throw new TypeError('Argument ' . $argumentIndex . ' must be an integer, ' . $realType . ' given.'); + } + $mixedVar = (int) $mixedVar; + break; + case 'boolean': + case 'bool': + $allow = array('bool', 'boolean'); + if (!in_array($type, $allow)) { + throw new TypeError('Argument ' . $argumentIndex . ' must be a boolean, ' . $realType . ' given.'); + } + $mixedVar = (bool) $mixedVar; + break; + case 'string': + if (!is_string($mixedVar)) { + throw new TypeError('Argument ' . $argumentIndex . ' must be a string, ' . $realType . ' given.'); + } + $mixedVar = (string) $mixedVar; + break; + case 'decimal': + case 'double': + case 'float': + $allow = array('decimal', 'double', 'float'); + if (!in_array($type, $allow)) { + throw new TypeError('Argument ' . $argumentIndex . ' must be a float, ' . $realType . ' given.'); + } + $mixedVar = (float) $mixedVar; + break; + case 'object': + if (!is_object($mixedVar)) { + throw new TypeError('Argument ' . $argumentIndex . ' must be an object, ' . $realType . ' given.'); + } + break; + case 'array': + if (!is_array($mixedVar)) { + if (is_object($mixedVar)) { + if ($mixedVar instanceof ArrayAccess) { + return; + } + } + throw new TypeError('Argument ' . $argumentIndex . ' must be an array, ' . $realType . ' given.'); + } + break; + default: + throw new SodiumException('Unknown type (' . $realType .') does not match expect type (' . $type . ')'); + } + } + + /** + * Evaluate whether or not two strings are equal (in constant-time) + * + * @param string $left + * @param string $right + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function hashEquals($left, $right) + { + /* Type checks: */ + if (!is_string($left)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($left) . ' given.'); + } + if (!is_string($right)) { + throw new TypeError('Argument 2 must be a string, ' . gettype($right) . ' given.'); + } + + if (is_callable('hash_equals')) { + return hash_equals($left, $right); + } + $d = 0; + /** @var int $len */ + $len = self::strlen($left); + if ($len !== self::strlen($right)) { + return false; + } + for ($i = 0; $i < $len; ++$i) { + $d |= self::chrToInt($left[$i]) ^ self::chrToInt($right[$i]); + } + + if ($d !== 0) { + return false; + } + return $left === $right; + } + + /** + * Convert a hexadecimal string into a binary string without cache-timing + * leaks + * + * @internal You should not use this directly from another application + * + * @param string $hexString + * @param bool $strictPadding + * @return string (raw binary) + * @throws RangeException + * @throws TypeError + */ + public static function hex2bin($hexString, $strictPadding = false) + { + /* Type checks: */ + if (!is_string($hexString)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($hexString) . ' given.'); + } + + /** @var int $hex_pos */ + $hex_pos = 0; + /** @var string $bin */ + $bin = ''; + /** @var int $c_acc */ + $c_acc = 0; + /** @var int $hex_len */ + $hex_len = self::strlen($hexString); + /** @var int $state */ + $state = 0; + if (($hex_len & 1) !== 0) { + if ($strictPadding) { + throw new RangeException( + 'Expected an even number of hexadecimal characters' + ); + } else { + $hexString = '0' . $hexString; + ++$hex_len; + } + } + + $chunk = unpack('C*', $hexString); + while ($hex_pos < $hex_len) { + ++$hex_pos; + /** @var int $c */ + $c = $chunk[$hex_pos]; + /** @var int $c_num */ + $c_num = $c ^ 48; + /** @var int $c_num0 */ + $c_num0 = ($c_num - 10) >> 8; + /** @var int $c_alpha */ + $c_alpha = ($c & ~32) - 55; + /** @var int $c_alpha0 */ + $c_alpha0 = (($c_alpha - 10) ^ ($c_alpha - 16)) >> 8; + if (($c_num0 | $c_alpha0) === 0) { + throw new RangeException( + 'hex2bin() only expects hexadecimal characters' + ); + } + /** @var int $c_val */ + $c_val = ($c_num0 & $c_num) | ($c_alpha & $c_alpha0); + if ($state === 0) { + $c_acc = $c_val * 16; + } else { + $bin .= pack('C', $c_acc | $c_val); + } + $state ^= 1; + } + return $bin; + } + + /** + * Turn an array of integers into a string + * + * @internal You should not use this directly from another application + * + * @param array $ints + * @return string + */ + public static function intArrayToString(array $ints) + { + /** @var array $args */ + $args = $ints; + foreach ($args as $i => $v) { + $args[$i] = (int) ($v & 0xff); + } + array_unshift($args, str_repeat('C', count($ints))); + return (string) (call_user_func_array('pack', $args)); + } + + /** + * Cache-timing-safe variant of ord() + * + * @internal You should not use this directly from another application + * + * @param int $int + * @return string + * @throws TypeError + */ + public static function intToChr($int) + { + return pack('C', $int); + } + + /** + * Load a 3 character substring into an integer + * + * @internal You should not use this directly from another application + * + * @param string $string + * @return int + * @throws RangeException + * @throws TypeError + */ + public static function load_3($string) + { + /* Type checks: */ + if (!is_string($string)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($string) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($string) < 3) { + throw new RangeException( + 'String must be 3 bytes or more; ' . self::strlen($string) . ' given.' + ); + } + /** @var array $unpacked */ + $unpacked = unpack('V', $string . "\0"); + return (int) ($unpacked[1] & 0xffffff); + } + + /** + * Load a 4 character substring into an integer + * + * @internal You should not use this directly from another application + * + * @param string $string + * @return int + * @throws RangeException + * @throws TypeError + */ + public static function load_4($string) + { + /* Type checks: */ + if (!is_string($string)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($string) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($string) < 4) { + throw new RangeException( + 'String must be 4 bytes or more; ' . self::strlen($string) . ' given.' + ); + } + /** @var array $unpacked */ + $unpacked = unpack('V', $string); + return (int) ($unpacked[1] & 0xffffffff); + } + + /** + * Load a 8 character substring into an integer + * + * @internal You should not use this directly from another application + * + * @param string $string + * @return int + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function load64_le($string) + { + /* Type checks: */ + if (!is_string($string)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($string) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($string) < 4) { + throw new RangeException( + 'String must be 4 bytes or more; ' . self::strlen($string) . ' given.' + ); + } + if (PHP_VERSION_ID >= 50603 && PHP_INT_SIZE === 8) { + /** @var array $unpacked */ + $unpacked = unpack('P', $string); + return (int) $unpacked[1]; + } + + /** @var int $result */ + $result = (self::chrToInt($string[0]) & 0xff); + $result |= (self::chrToInt($string[1]) & 0xff) << 8; + $result |= (self::chrToInt($string[2]) & 0xff) << 16; + $result |= (self::chrToInt($string[3]) & 0xff) << 24; + $result |= (self::chrToInt($string[4]) & 0xff) << 32; + $result |= (self::chrToInt($string[5]) & 0xff) << 40; + $result |= (self::chrToInt($string[6]) & 0xff) << 48; + $result |= (self::chrToInt($string[7]) & 0xff) << 56; + return (int) $result; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $left + * @param string $right + * @return int + * @throws SodiumException + * @throws TypeError + */ + public static function memcmp($left, $right) + { + if (self::hashEquals($left, $right)) { + return 0; + } + return -1; + } + + /** + * Multiply two integers in constant-time + * + * Micro-architecture timing side-channels caused by how your CPU + * implements multiplication are best prevented by never using the + * multiplication operators and ensuring that our code always takes + * the same number of operations to complete, regardless of the values + * of $a and $b. + * + * @internal You should not use this directly from another application + * + * @param int $a + * @param int $b + * @param int $size Limits the number of operations (useful for small, + * constant operands) + * @return int + */ + public static function mul($a, $b, $size = 0) + { + if (ParagonIE_Sodium_Compat::$fastMult) { + return (int) ($a * $b); + } + + static $defaultSize = null; + /** @var int $defaultSize */ + if (!$defaultSize) { + /** @var int $defaultSize */ + $defaultSize = (PHP_INT_SIZE << 3) - 1; + } + if ($size < 1) { + /** @var int $size */ + $size = $defaultSize; + } + /** @var int $size */ + + $c = 0; + + /** + * Mask is either -1 or 0. + * + * -1 in binary looks like 0x1111 ... 1111 + * 0 in binary looks like 0x0000 ... 0000 + * + * @var int + */ + $mask = -(($b >> ((int) $defaultSize)) & 1); + + /** + * Ensure $b is a positive integer, without creating + * a branching side-channel + * + * @var int $b + */ + $b = ($b & ~$mask) | ($mask & -$b); + + /** + * Unless $size is provided: + * + * This loop always runs 32 times when PHP_INT_SIZE is 4. + * This loop always runs 64 times when PHP_INT_SIZE is 8. + */ + for ($i = $size; $i >= 0; --$i) { + $c += (int) ($a & -($b & 1)); + $a <<= 1; + $b >>= 1; + } + + /** + * If $b was negative, we then apply the same value to $c here. + * It doesn't matter much if $a was negative; the $c += above would + * have produced a negative integer to begin with. But a negative $b + * makes $b >>= 1 never return 0, so we would end up with incorrect + * results. + * + * The end result is what we'd expect from integer multiplication. + */ + return (int) (($c & ~$mask) | ($mask & -$c)); + } + + /** + * Convert any arbitrary numbers into two 32-bit integers that represent + * a 64-bit integer. + * + * @internal You should not use this directly from another application + * + * @param int|float $num + * @return array + */ + public static function numericTo64BitInteger($num) + { + $high = 0; + /** @var int $low */ + $low = $num & 0xffffffff; + + if ((+(abs($num))) >= 1) { + if ($num > 0) { + /** @var int $high */ + $high = min((+(floor($num/4294967296))), 4294967295); + } else { + /** @var int $high */ + $high = ~~((+(ceil(($num - (+((~~($num)))))/4294967296)))); + } + } + return array((int) $high, (int) $low); + } + + /** + * Store a 24-bit integer into a string, treating it as big-endian. + * + * @internal You should not use this directly from another application + * + * @param int $int + * @return string + * @throws TypeError + */ + public static function store_3($int) + { + /* Type checks: */ + if (!is_int($int)) { + if (is_numeric($int)) { + $int = (int) $int; + } else { + throw new TypeError('Argument 1 must be an integer, ' . gettype($int) . ' given.'); + } + } + /** @var string $packed */ + $packed = pack('N', $int); + return self::substr($packed, 1, 3); + } + + /** + * Store a 32-bit integer into a string, treating it as little-endian. + * + * @internal You should not use this directly from another application + * + * @param int $int + * @return string + * @throws TypeError + */ + public static function store32_le($int) + { + /* Type checks: */ + if (!is_int($int)) { + if (is_numeric($int)) { + $int = (int) $int; + } else { + throw new TypeError('Argument 1 must be an integer, ' . gettype($int) . ' given.'); + } + } + + /** @var string $packed */ + $packed = pack('V', $int); + return $packed; + } + + /** + * Store a 32-bit integer into a string, treating it as big-endian. + * + * @internal You should not use this directly from another application + * + * @param int $int + * @return string + * @throws TypeError + */ + public static function store_4($int) + { + /* Type checks: */ + if (!is_int($int)) { + if (is_numeric($int)) { + $int = (int) $int; + } else { + throw new TypeError('Argument 1 must be an integer, ' . gettype($int) . ' given.'); + } + } + + /** @var string $packed */ + $packed = pack('N', $int); + return $packed; + } + + /** + * Stores a 64-bit integer as an string, treating it as little-endian. + * + * @internal You should not use this directly from another application + * + * @param int $int + * @return string + * @throws TypeError + */ + public static function store64_le($int) + { + /* Type checks: */ + if (!is_int($int)) { + if (is_numeric($int)) { + $int = (int) $int; + } else { + throw new TypeError('Argument 1 must be an integer, ' . gettype($int) . ' given.'); + } + } + + if (PHP_INT_SIZE === 8) { + if (PHP_VERSION_ID >= 50603) { + /** @var string $packed */ + $packed = pack('P', $int); + return $packed; + } + return self::intToChr($int & 0xff) . + self::intToChr(($int >> 8) & 0xff) . + self::intToChr(($int >> 16) & 0xff) . + self::intToChr(($int >> 24) & 0xff) . + self::intToChr(($int >> 32) & 0xff) . + self::intToChr(($int >> 40) & 0xff) . + self::intToChr(($int >> 48) & 0xff) . + self::intToChr(($int >> 56) & 0xff); + } + if ($int > PHP_INT_MAX) { + list($hiB, $int) = self::numericTo64BitInteger($int); + } else { + $hiB = 0; + } + return + self::intToChr(($int ) & 0xff) . + self::intToChr(($int >> 8) & 0xff) . + self::intToChr(($int >> 16) & 0xff) . + self::intToChr(($int >> 24) & 0xff) . + self::intToChr($hiB & 0xff) . + self::intToChr(($hiB >> 8) & 0xff) . + self::intToChr(($hiB >> 16) & 0xff) . + self::intToChr(($hiB >> 24) & 0xff); + } + + /** + * Safe string length + * + * @internal You should not use this directly from another application + * + * @ref mbstring.func_overload + * + * @param string $str + * @return int + * @throws TypeError + */ + public static function strlen($str) + { + /* Type checks: */ + if (!is_string($str)) { + throw new TypeError('String expected'); + } + + return (int) ( + self::isMbStringOverride() + ? mb_strlen($str, '8bit') + : strlen($str) + ); + } + + /** + * Turn a string into an array of integers + * + * @internal You should not use this directly from another application + * + * @param string $string + * @return array + * @throws TypeError + */ + public static function stringToIntArray($string) + { + if (!is_string($string)) { + throw new TypeError('String expected'); + } + /** + * @var array + */ + $values = array_values( + unpack('C*', $string) + ); + return $values; + } + + /** + * Safe substring + * + * @internal You should not use this directly from another application + * + * @ref mbstring.func_overload + * + * @param string $str + * @param int $start + * @param int $length + * @return string + * @throws TypeError + */ + public static function substr($str, $start = 0, $length = null) + { + /* Type checks: */ + if (!is_string($str)) { + throw new TypeError('String expected'); + } + + if ($length === 0) { + return ''; + } + + if (self::isMbStringOverride()) { + if (PHP_VERSION_ID < 50400 && $length === null) { + $length = self::strlen($str); + } + $sub = (string) mb_substr($str, $start, $length, '8bit'); + } elseif ($length === null) { + $sub = (string) substr($str, $start); + } else { + $sub = (string) substr($str, $start, $length); + } + if ($sub !== '') { + return $sub; + } + return ''; + } + + /** + * Compare a 16-character byte string in constant time. + * + * @internal You should not use this directly from another application + * + * @param string $a + * @param string $b + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function verify_16($a, $b) + { + /* Type checks: */ + if (!is_string($a)) { + throw new TypeError('String expected'); + } + if (!is_string($b)) { + throw new TypeError('String expected'); + } + return self::hashEquals( + self::substr($a, 0, 16), + self::substr($b, 0, 16) + ); + } + + /** + * Compare a 32-character byte string in constant time. + * + * @internal You should not use this directly from another application + * + * @param string $a + * @param string $b + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function verify_32($a, $b) + { + /* Type checks: */ + if (!is_string($a)) { + throw new TypeError('String expected'); + } + if (!is_string($b)) { + throw new TypeError('String expected'); + } + return self::hashEquals( + self::substr($a, 0, 32), + self::substr($b, 0, 32) + ); + } + + /** + * Calculate $a ^ $b for two strings. + * + * @internal You should not use this directly from another application + * + * @param string $a + * @param string $b + * @return string + * @throws TypeError + */ + public static function xorStrings($a, $b) + { + /* Type checks: */ + if (!is_string($a)) { + throw new TypeError('Argument 1 must be a string'); + } + if (!is_string($b)) { + throw new TypeError('Argument 2 must be a string'); + } + + return (string) ($a ^ $b); + } + + /** + * Returns whether or not mbstring.func_overload is in effect. + * + * @internal You should not use this directly from another application + * + * Note: MB_OVERLOAD_STRING === 2, but we don't reference the constant + * (for nuisance-free PHP 8 support) + * + * @return bool + */ + protected static function isMbStringOverride() + { + static $mbstring = null; + + if ($mbstring === null) { + $mbstring = extension_loaded('mbstring') + && defined('MB_OVERLOAD_STRING') + && + ((int) (ini_get('mbstring.func_overload')) & 2); + // MB_OVERLOAD_STRING === 2 + } + /** @var bool $mbstring */ + + return $mbstring; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/X25519.php b/vendor/paragonie/sodium_compat/src/Core/X25519.php new file mode 100644 index 000000000..732bb65e9 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/X25519.php @@ -0,0 +1,327 @@ +> 25; + $h[0] += self::mul($carry9, 19, 5); + $h[9] -= $carry9 << 25; + /** @var int $carry1 */ + $carry1 = ($h[1] + (1 << 24)) >> 25; + $h[2] += $carry1; + $h[1] -= $carry1 << 25; + /** @var int $carry3 */ + $carry3 = ($h[3] + (1 << 24)) >> 25; + $h[4] += $carry3; + $h[3] -= $carry3 << 25; + /** @var int $carry5 */ + $carry5 = ($h[5] + (1 << 24)) >> 25; + $h[6] += $carry5; + $h[5] -= $carry5 << 25; + /** @var int $carry7 */ + $carry7 = ($h[7] + (1 << 24)) >> 25; + $h[8] += $carry7; + $h[7] -= $carry7 << 25; + + /** @var int $carry0 */ + $carry0 = ($h[0] + (1 << 25)) >> 26; + $h[1] += $carry0; + $h[0] -= $carry0 << 26; + /** @var int $carry2 */ + $carry2 = ($h[2] + (1 << 25)) >> 26; + $h[3] += $carry2; + $h[2] -= $carry2 << 26; + /** @var int $carry4 */ + $carry4 = ($h[4] + (1 << 25)) >> 26; + $h[5] += $carry4; + $h[4] -= $carry4 << 26; + /** @var int $carry6 */ + $carry6 = ($h[6] + (1 << 25)) >> 26; + $h[7] += $carry6; + $h[6] -= $carry6 << 26; + /** @var int $carry8 */ + $carry8 = ($h[8] + (1 << 25)) >> 26; + $h[9] += $carry8; + $h[8] -= $carry8 << 26; + + foreach ($h as $i => $value) { + $h[$i] = (int) $value; + } + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h); + } + + /** + * @internal You should not use this directly from another application + * + * Inline comments preceded by # are from libsodium's ref10 code. + * + * @param string $n + * @param string $p + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_scalarmult_curve25519_ref10($n, $p) + { + # for (i = 0;i < 32;++i) e[i] = n[i]; + $e = '' . $n; + # e[0] &= 248; + $e[0] = self::intToChr( + self::chrToInt($e[0]) & 248 + ); + # e[31] &= 127; + # e[31] |= 64; + $e[31] = self::intToChr( + (self::chrToInt($e[31]) & 127) | 64 + ); + # fe_frombytes(x1,p); + $x1 = self::fe_frombytes($p); + # fe_1(x2); + $x2 = self::fe_1(); + # fe_0(z2); + $z2 = self::fe_0(); + # fe_copy(x3,x1); + $x3 = self::fe_copy($x1); + # fe_1(z3); + $z3 = self::fe_1(); + + # swap = 0; + /** @var int $swap */ + $swap = 0; + + # for (pos = 254;pos >= 0;--pos) { + for ($pos = 254; $pos >= 0; --$pos) { + # b = e[pos / 8] >> (pos & 7); + /** @var int $b */ + $b = self::chrToInt( + $e[(int) floor($pos / 8)] + ) >> ($pos & 7); + # b &= 1; + $b &= 1; + # swap ^= b; + $swap ^= $b; + # fe_cswap(x2,x3,swap); + self::fe_cswap($x2, $x3, $swap); + # fe_cswap(z2,z3,swap); + self::fe_cswap($z2, $z3, $swap); + # swap = b; + $swap = $b; + # fe_sub(tmp0,x3,z3); + $tmp0 = self::fe_sub($x3, $z3); + # fe_sub(tmp1,x2,z2); + $tmp1 = self::fe_sub($x2, $z2); + + # fe_add(x2,x2,z2); + $x2 = self::fe_add($x2, $z2); + + # fe_add(z2,x3,z3); + $z2 = self::fe_add($x3, $z3); + + # fe_mul(z3,tmp0,x2); + $z3 = self::fe_mul($tmp0, $x2); + + # fe_mul(z2,z2,tmp1); + $z2 = self::fe_mul($z2, $tmp1); + + # fe_sq(tmp0,tmp1); + $tmp0 = self::fe_sq($tmp1); + + # fe_sq(tmp1,x2); + $tmp1 = self::fe_sq($x2); + + # fe_add(x3,z3,z2); + $x3 = self::fe_add($z3, $z2); + + # fe_sub(z2,z3,z2); + $z2 = self::fe_sub($z3, $z2); + + # fe_mul(x2,tmp1,tmp0); + $x2 = self::fe_mul($tmp1, $tmp0); + + # fe_sub(tmp1,tmp1,tmp0); + $tmp1 = self::fe_sub($tmp1, $tmp0); + + # fe_sq(z2,z2); + $z2 = self::fe_sq($z2); + + # fe_mul121666(z3,tmp1); + $z3 = self::fe_mul121666($tmp1); + + # fe_sq(x3,x3); + $x3 = self::fe_sq($x3); + + # fe_add(tmp0,tmp0,z3); + $tmp0 = self::fe_add($tmp0, $z3); + + # fe_mul(z3,x1,z2); + $z3 = self::fe_mul($x1, $z2); + + # fe_mul(z2,tmp1,tmp0); + $z2 = self::fe_mul($tmp1, $tmp0); + } + + # fe_cswap(x2,x3,swap); + self::fe_cswap($x2, $x3, $swap); + + # fe_cswap(z2,z3,swap); + self::fe_cswap($z2, $z3, $swap); + + # fe_invert(z2,z2); + $z2 = self::fe_invert($z2); + + # fe_mul(x2,x2,z2); + $x2 = self::fe_mul($x2, $z2); + # fe_tobytes(q,x2); + return self::fe_tobytes($x2); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $edwardsY + * @param ParagonIE_Sodium_Core_Curve25519_Fe $edwardsZ + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function edwards_to_montgomery( + ParagonIE_Sodium_Core_Curve25519_Fe $edwardsY, + ParagonIE_Sodium_Core_Curve25519_Fe $edwardsZ + ) { + $tempX = self::fe_add($edwardsZ, $edwardsY); + $tempZ = self::fe_sub($edwardsZ, $edwardsY); + $tempZ = self::fe_invert($tempZ); + return self::fe_mul($tempX, $tempZ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $n + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_scalarmult_curve25519_ref10_base($n) + { + # for (i = 0;i < 32;++i) e[i] = n[i]; + $e = '' . $n; + + # e[0] &= 248; + $e[0] = self::intToChr( + self::chrToInt($e[0]) & 248 + ); + + # e[31] &= 127; + # e[31] |= 64; + $e[31] = self::intToChr( + (self::chrToInt($e[31]) & 127) | 64 + ); + + $A = self::ge_scalarmult_base($e); + if ( + !($A->Y instanceof ParagonIE_Sodium_Core_Curve25519_Fe) + || + !($A->Z instanceof ParagonIE_Sodium_Core_Curve25519_Fe) + ) { + throw new TypeError('Null points encountered'); + } + $pk = self::edwards_to_montgomery($A->Y, $A->Z); + return self::fe_tobytes($pk); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core/XChaCha20.php b/vendor/paragonie/sodium_compat/src/Core/XChaCha20.php new file mode 100644 index 000000000..39e717b79 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/XChaCha20.php @@ -0,0 +1,117 @@ +> + */ + public static $sigma = array( + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3), + array( 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4), + array( 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8), + array( 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13), + array( 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9), + array( 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11), + array( 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10), + array( 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5), + array( 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13 , 0), + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3) + ); + + const BLOCKBYTES = 128; + const OUTBYTES = 64; + const KEYBYTES = 64; + + /** + * Turn two 32-bit integers into a fixed array representing a 64-bit integer. + * + * @internal You should not use this directly from another application + * + * @param int $high + * @param int $low + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public static function new64($high, $low) + { + return ParagonIE_Sodium_Core32_Int64::fromInts($low, $high); + } + + /** + * Convert an arbitrary number into an SplFixedArray of two 32-bit integers + * that represents a 64-bit integer. + * + * @internal You should not use this directly from another application + * + * @param int $num + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + protected static function to64($num) + { + list($hi, $lo) = self::numericTo64BitInteger($num); + return self::new64($hi, $lo); + } + + /** + * Adds two 64-bit integers together, returning their sum as a SplFixedArray + * containing two 32-bit integers (representing a 64-bit integer). + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Int64 $x + * @param ParagonIE_Sodium_Core32_Int64 $y + * @return ParagonIE_Sodium_Core32_Int64 + */ + protected static function add64($x, $y) + { + return $x->addInt64($y); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Int64 $x + * @param ParagonIE_Sodium_Core32_Int64 $y + * @param ParagonIE_Sodium_Core32_Int64 $z + * @return ParagonIE_Sodium_Core32_Int64 + */ + public static function add364($x, $y, $z) + { + return $x->addInt64($y)->addInt64($z); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Int64 $x + * @param ParagonIE_Sodium_Core32_Int64 $y + * @return ParagonIE_Sodium_Core32_Int64 + * @throws TypeError + */ + public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) + { + return $x->xorInt64($y); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Int64 $x + * @param int $c + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) + { + return $x->rotateRight($c); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param int $i + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public static function load64($x, $i) + { + /** @var int $l */ + $l = (int) ($x[$i]) + | ((int) ($x[$i+1]) << 8) + | ((int) ($x[$i+2]) << 16) + | ((int) ($x[$i+3]) << 24); + /** @var int $h */ + $h = (int) ($x[$i+4]) + | ((int) ($x[$i+5]) << 8) + | ((int) ($x[$i+6]) << 16) + | ((int) ($x[$i+7]) << 24); + return self::new64($h, $l); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $x + * @param int $i + * @param ParagonIE_Sodium_Core32_Int64 $u + * @return void + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + */ + public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) + { + $v = clone $u; + $maxLength = $x->getSize() - 1; + for ($j = 0; $j < 8; ++$j) { + $k = 3 - ($j >> 1); + $x[$i] = $v->limbs[$k] & 0xff; + if (++$i > $maxLength) { + return; + } + $v->limbs[$k] >>= 8; + } + } + + /** + * This just sets the $iv static variable. + * + * @internal You should not use this directly from another application + * + * @return void + * @throws SodiumException + * @throws TypeError + */ + public static function pseudoConstructor() + { + static $called = false; + if ($called) { + return; + } + self::$iv = new SplFixedArray(8); + self::$iv[0] = self::new64(0x6a09e667, 0xf3bcc908); + self::$iv[1] = self::new64(0xbb67ae85, 0x84caa73b); + self::$iv[2] = self::new64(0x3c6ef372, 0xfe94f82b); + self::$iv[3] = self::new64(0xa54ff53a, 0x5f1d36f1); + self::$iv[4] = self::new64(0x510e527f, 0xade682d1); + self::$iv[5] = self::new64(0x9b05688c, 0x2b3e6c1f); + self::$iv[6] = self::new64(0x1f83d9ab, 0xfb41bd6b); + self::$iv[7] = self::new64(0x5be0cd19, 0x137e2179); + + $called = true; + } + + /** + * Returns a fresh BLAKE2 context. + * + * @internal You should not use this directly from another application + * + * @return SplFixedArray + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + * @throws SodiumException + * @throws TypeError + */ + protected static function context() + { + $ctx = new SplFixedArray(6); + $ctx[0] = new SplFixedArray(8); // h + $ctx[1] = new SplFixedArray(2); // t + $ctx[2] = new SplFixedArray(2); // f + $ctx[3] = new SplFixedArray(256); // buf + $ctx[4] = 0; // buflen + $ctx[5] = 0; // last_node (uint8_t) + + for ($i = 8; $i--;) { + $ctx[0][$i] = self::$iv[$i]; + } + for ($i = 256; $i--;) { + $ctx[3][$i] = 0; + } + + $zero = self::new64(0, 0); + $ctx[1][0] = $zero; + $ctx[1][1] = $zero; + $ctx[2][0] = $zero; + $ctx[2][1] = $zero; + + return $ctx; + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param SplFixedArray $buf + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedAssignment + */ + protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) + { + $m = new SplFixedArray(16); + $v = new SplFixedArray(16); + + for ($i = 16; $i--;) { + $m[$i] = self::load64($buf, $i << 3); + } + + for ($i = 8; $i--;) { + $v[$i] = $ctx[0][$i]; + } + + $v[ 8] = self::$iv[0]; + $v[ 9] = self::$iv[1]; + $v[10] = self::$iv[2]; + $v[11] = self::$iv[3]; + + $v[12] = self::xor64($ctx[1][0], self::$iv[4]); + $v[13] = self::xor64($ctx[1][1], self::$iv[5]); + $v[14] = self::xor64($ctx[2][0], self::$iv[6]); + $v[15] = self::xor64($ctx[2][1], self::$iv[7]); + + for ($r = 0; $r < 12; ++$r) { + $v = self::G($r, 0, 0, 4, 8, 12, $v, $m); + $v = self::G($r, 1, 1, 5, 9, 13, $v, $m); + $v = self::G($r, 2, 2, 6, 10, 14, $v, $m); + $v = self::G($r, 3, 3, 7, 11, 15, $v, $m); + $v = self::G($r, 4, 0, 5, 10, 15, $v, $m); + $v = self::G($r, 5, 1, 6, 11, 12, $v, $m); + $v = self::G($r, 6, 2, 7, 8, 13, $v, $m); + $v = self::G($r, 7, 3, 4, 9, 14, $v, $m); + } + + for ($i = 8; $i--;) { + $ctx[0][$i] = self::xor64( + $ctx[0][$i], self::xor64($v[$i], $v[$i+8]) + ); + } + } + + /** + * @internal You should not use this directly from another application + * + * @param int $r + * @param int $i + * @param int $a + * @param int $b + * @param int $c + * @param int $d + * @param SplFixedArray $v + * @param SplFixedArray $m + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayOffset + */ + public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) + { + $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]); + $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32); + $v[$c] = self::add64($v[$c], $v[$d]); + $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 24); + $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][($i << 1) + 1]]); + $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 16); + $v[$c] = self::add64($v[$c], $v[$d]); + $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 63); + return $v; + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param int $inc + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + */ + public static function increment_counter($ctx, $inc) + { + if ($inc < 0) { + throw new SodiumException('Increasing by a negative number makes no sense.'); + } + $t = self::to64($inc); + # S->t is $ctx[1] in our implementation + + # S->t[0] = ( uint64_t )( t >> 0 ); + $ctx[1][0] = self::add64($ctx[1][0], $t); + + # S->t[1] += ( S->t[0] < inc ); + if (!($ctx[1][0] instanceof ParagonIE_Sodium_Core32_Int64)) { + throw new TypeError('Not an int64'); + } + /** @var ParagonIE_Sodium_Core32_Int64 $c*/ + $c = $ctx[1][0]; + if ($c->isLessThanInt($inc)) { + $ctx[1][1] = self::add64($ctx[1][1], self::to64(1)); + } + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param SplFixedArray $p + * @param int $plen + * @return void + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + * @psalm-suppress MixedMethodCall + * @psalm-suppress MixedOperand + */ + public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) + { + self::pseudoConstructor(); + + $offset = 0; + while ($plen > 0) { + $left = $ctx[4]; + $fill = 256 - $left; + + if ($plen > $fill) { + # memcpy( S->buf + left, in, fill ); /* Fill buffer */ + for ($i = $fill; $i--;) { + $ctx[3][$i + $left] = $p[$i + $offset]; + } + + # S->buflen += fill; + $ctx[4] += $fill; + + # blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES ); + self::increment_counter($ctx, 128); + + # blake2b_compress( S, S->buf ); /* Compress */ + self::compress($ctx, $ctx[3]); + + # memcpy( S->buf, S->buf + BLAKE2B_BLOCKBYTES, BLAKE2B_BLOCKBYTES ); /* Shift buffer left */ + for ($i = 128; $i--;) { + $ctx[3][$i] = $ctx[3][$i + 128]; + } + + # S->buflen -= BLAKE2B_BLOCKBYTES; + $ctx[4] -= 128; + + # in += fill; + $offset += $fill; + + # inlen -= fill; + $plen -= $fill; + } else { + for ($i = $plen; $i--;) { + $ctx[3][$i + $left] = $p[$i + $offset]; + } + $ctx[4] += $plen; + $offset += $plen; + $plen -= $plen; + } + } + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @param SplFixedArray $out + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedArrayOffset + * @psalm-suppress MixedMethodCall + * @psalm-suppress MixedOperand + */ + public static function finish(SplFixedArray $ctx, SplFixedArray $out) + { + self::pseudoConstructor(); + if ($ctx[4] > 128) { + self::increment_counter($ctx, 128); + self::compress($ctx, $ctx[3]); + $ctx[4] -= 128; + if ($ctx[4] > 128) { + throw new SodiumException('Failed to assert that buflen <= 128 bytes'); + } + for ($i = $ctx[4]; $i--;) { + $ctx[3][$i] = $ctx[3][$i + 128]; + } + } + + self::increment_counter($ctx, $ctx[4]); + $ctx[2][0] = self::new64(0xffffffff, 0xffffffff); + + for ($i = 256 - $ctx[4]; $i--;) { + /** @var int $i */ + $ctx[3][$i + $ctx[4]] = 0; + } + + self::compress($ctx, $ctx[3]); + + $i = (int) (($out->getSize() - 1) / 8); + for (; $i >= 0; --$i) { + self::store64($out, $i << 3, $ctx[0][$i]); + } + return $out; + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray|null $key + * @param int $outlen + * @param SplFixedArray|null $salt + * @param SplFixedArray|null $personal + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedMethodCall + */ + public static function init( + $key = null, + $outlen = 64, + $salt = null, + $personal = null + ) { + self::pseudoConstructor(); + $klen = 0; + + if ($key !== null) { + if (count($key) > 64) { + throw new SodiumException('Invalid key size'); + } + $klen = count($key); + } + + if ($outlen > 64) { + throw new SodiumException('Invalid output size'); + } + + $ctx = self::context(); + + $p = new SplFixedArray(64); + // Zero our param buffer... + for ($i = 64; --$i;) { + $p[$i] = 0; + } + + $p[0] = $outlen; // digest_length + $p[1] = $klen; // key_length + $p[2] = 1; // fanout + $p[3] = 1; // depth + + if ($salt instanceof SplFixedArray) { + // salt: [32] through [47] + for ($i = 0; $i < 16; ++$i) { + $p[32 + $i] = (int) $salt[$i]; + } + } + if ($personal instanceof SplFixedArray) { + // personal: [48] through [63] + for ($i = 0; $i < 16; ++$i) { + $p[48 + $i] = (int) $personal[$i]; + } + } + + $ctx[0][0] = self::xor64( + $ctx[0][0], + self::load64($p, 0) + ); + + if ($salt instanceof SplFixedArray || $personal instanceof SplFixedArray) { + // We need to do what blake2b_init_param() does: + for ($i = 1; $i < 8; ++$i) { + $ctx[0][$i] = self::xor64( + $ctx[0][$i], + self::load64($p, $i << 3) + ); + } + } + + if ($klen > 0 && $key instanceof SplFixedArray) { + $block = new SplFixedArray(128); + for ($i = 128; $i--;) { + $block[$i] = 0; + } + for ($i = $klen; $i--;) { + $block[$i] = $key[$i]; + } + self::update($ctx, $block, 128); + $ctx[4] = 128; + } + + return $ctx; + } + + /** + * Convert a string into an SplFixedArray of integers + * + * @internal You should not use this directly from another application + * + * @param string $str + * @return SplFixedArray + */ + public static function stringToSplFixedArray($str = '') + { + $values = unpack('C*', $str); + return SplFixedArray::fromArray(array_values($values)); + } + + /** + * Convert an SplFixedArray of integers into a string + * + * @internal You should not use this directly from another application + * + * @param SplFixedArray $a + * @return string + */ + public static function SplFixedArrayToString(SplFixedArray $a) + { + /** + * @var array + */ + $arr = $a->toArray(); + $c = $a->count(); + array_unshift($arr, str_repeat('C', $c)); + return (string) (call_user_func_array('pack', $arr)); + } + + /** + * @internal You should not use this directly from another application + * + * @param SplFixedArray $ctx + * @return string + * @throws TypeError + * @psalm-suppress MixedArgument + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + * @psalm-suppress MixedMethodCall + */ + public static function contextToString(SplFixedArray $ctx) + { + $str = ''; + /** @var array $ctxA */ + $ctxA = $ctx[0]->toArray(); + + # uint64_t h[8]; + for ($i = 0; $i < 8; ++$i) { + if (!($ctxA[$i] instanceof ParagonIE_Sodium_Core32_Int64)) { + throw new TypeError('Not an instance of Int64'); + } + /** @var ParagonIE_Sodium_Core32_Int64 $ctxAi */ + $ctxAi = $ctxA[$i]; + $str .= $ctxAi->toReverseString(); + } + + # uint64_t t[2]; + # uint64_t f[2]; + for ($i = 1; $i < 3; ++$i) { + /** @var array $ctxA */ + $ctxA = $ctx[$i]->toArray(); + /** @var ParagonIE_Sodium_Core32_Int64 $ctxA1 */ + $ctxA1 = $ctxA[0]; + /** @var ParagonIE_Sodium_Core32_Int64 $ctxA2 */ + $ctxA2 = $ctxA[1]; + + $str .= $ctxA1->toReverseString(); + $str .= $ctxA2->toReverseString(); + } + + # uint8_t buf[2 * 128]; + $str .= self::SplFixedArrayToString($ctx[3]); + + /** @var int $ctx4 */ + $ctx4 = $ctx[4]; + + # size_t buflen; + $str .= implode('', array( + self::intToChr($ctx4 & 0xff), + self::intToChr(($ctx4 >> 8) & 0xff), + self::intToChr(($ctx4 >> 16) & 0xff), + self::intToChr(($ctx4 >> 24) & 0xff), + "\x00\x00\x00\x00" + /* + self::intToChr(($ctx4 >> 32) & 0xff), + self::intToChr(($ctx4 >> 40) & 0xff), + self::intToChr(($ctx4 >> 48) & 0xff), + self::intToChr(($ctx4 >> 56) & 0xff) + */ + )); + # uint8_t last_node; + return $str . self::intToChr($ctx[5]) . str_repeat("\x00", 23); + } + + /** + * Creates an SplFixedArray containing other SplFixedArray elements, from + * a string (compatible with \Sodium\crypto_generichash_{init, update, final}) + * + * @internal You should not use this directly from another application + * + * @param string $string + * @return SplFixedArray + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayAssignment + */ + public static function stringToContext($string) + { + $ctx = self::context(); + + # uint64_t h[8]; + for ($i = 0; $i < 8; ++$i) { + $ctx[0][$i] = ParagonIE_Sodium_Core32_Int64::fromReverseString( + self::substr($string, (($i << 3) + 0), 8) + ); + } + + # uint64_t t[2]; + # uint64_t f[2]; + for ($i = 1; $i < 3; ++$i) { + $ctx[$i][1] = ParagonIE_Sodium_Core32_Int64::fromReverseString( + self::substr($string, 72 + (($i - 1) << 4), 8) + ); + $ctx[$i][0] = ParagonIE_Sodium_Core32_Int64::fromReverseString( + self::substr($string, 64 + (($i - 1) << 4), 8) + ); + } + + # uint8_t buf[2 * 128]; + $ctx[3] = self::stringToSplFixedArray(self::substr($string, 96, 256)); + + # uint8_t buf[2 * 128]; + $int = 0; + for ($i = 0; $i < 8; ++$i) { + $int |= self::chrToInt($string[352 + $i]) << ($i << 3); + } + $ctx[4] = $int; + + return $ctx; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/ChaCha20.php b/vendor/paragonie/sodium_compat/src/Core32/ChaCha20.php new file mode 100644 index 000000000..6f8c0bff9 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/ChaCha20.php @@ -0,0 +1,400 @@ + + * @throws SodiumException + * @throws TypeError + */ + protected static function quarterRound( + ParagonIE_Sodium_Core32_Int32 $a, + ParagonIE_Sodium_Core32_Int32 $b, + ParagonIE_Sodium_Core32_Int32 $c, + ParagonIE_Sodium_Core32_Int32 $d + ) { + /** @var ParagonIE_Sodium_Core32_Int32 $a */ + /** @var ParagonIE_Sodium_Core32_Int32 $b */ + /** @var ParagonIE_Sodium_Core32_Int32 $c */ + /** @var ParagonIE_Sodium_Core32_Int32 $d */ + + # a = PLUS(a,b); d = ROTATE(XOR(d,a),16); + $a = $a->addInt32($b); + $d = $d->xorInt32($a)->rotateLeft(16); + + # c = PLUS(c,d); b = ROTATE(XOR(b,c),12); + $c = $c->addInt32($d); + $b = $b->xorInt32($c)->rotateLeft(12); + + # a = PLUS(a,b); d = ROTATE(XOR(d,a), 8); + $a = $a->addInt32($b); + $d = $d->xorInt32($a)->rotateLeft(8); + + # c = PLUS(c,d); b = ROTATE(XOR(b,c), 7); + $c = $c->addInt32($d); + $b = $b->xorInt32($c)->rotateLeft(7); + + return array($a, $b, $c, $d); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_ChaCha20_Ctx $ctx + * @param string $message + * + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function encryptBytes( + ParagonIE_Sodium_Core32_ChaCha20_Ctx $ctx, + $message = '' + ) { + $bytes = self::strlen($message); + + /** @var ParagonIE_Sodium_Core32_Int32 $x0 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x1 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x2 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x3 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x4 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x5 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x6 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x7 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x8 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x9 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x10 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x11 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x12 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x13 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x14 */ + /** @var ParagonIE_Sodium_Core32_Int32 $x15 */ + + /* + j0 = ctx->input[0]; + j1 = ctx->input[1]; + j2 = ctx->input[2]; + j3 = ctx->input[3]; + j4 = ctx->input[4]; + j5 = ctx->input[5]; + j6 = ctx->input[6]; + j7 = ctx->input[7]; + j8 = ctx->input[8]; + j9 = ctx->input[9]; + j10 = ctx->input[10]; + j11 = ctx->input[11]; + j12 = ctx->input[12]; + j13 = ctx->input[13]; + j14 = ctx->input[14]; + j15 = ctx->input[15]; + */ + /** @var ParagonIE_Sodium_Core32_Int32 $j0 */ + $j0 = $ctx[0]; + /** @var ParagonIE_Sodium_Core32_Int32 $j1 */ + $j1 = $ctx[1]; + /** @var ParagonIE_Sodium_Core32_Int32 $j2 */ + $j2 = $ctx[2]; + /** @var ParagonIE_Sodium_Core32_Int32 $j3 */ + $j3 = $ctx[3]; + /** @var ParagonIE_Sodium_Core32_Int32 $j4 */ + $j4 = $ctx[4]; + /** @var ParagonIE_Sodium_Core32_Int32 $j5 */ + $j5 = $ctx[5]; + /** @var ParagonIE_Sodium_Core32_Int32 $j6 */ + $j6 = $ctx[6]; + /** @var ParagonIE_Sodium_Core32_Int32 $j7 */ + $j7 = $ctx[7]; + /** @var ParagonIE_Sodium_Core32_Int32 $j8 */ + $j8 = $ctx[8]; + /** @var ParagonIE_Sodium_Core32_Int32 $j9 */ + $j9 = $ctx[9]; + /** @var ParagonIE_Sodium_Core32_Int32 $j10 */ + $j10 = $ctx[10]; + /** @var ParagonIE_Sodium_Core32_Int32 $j11 */ + $j11 = $ctx[11]; + /** @var ParagonIE_Sodium_Core32_Int32 $j12 */ + $j12 = $ctx[12]; + /** @var ParagonIE_Sodium_Core32_Int32 $j13 */ + $j13 = $ctx[13]; + /** @var ParagonIE_Sodium_Core32_Int32 $j14 */ + $j14 = $ctx[14]; + /** @var ParagonIE_Sodium_Core32_Int32 $j15 */ + $j15 = $ctx[15]; + + $c = ''; + for (;;) { + if ($bytes < 64) { + $message .= str_repeat("\x00", 64 - $bytes); + } + + $x0 = clone $j0; + $x1 = clone $j1; + $x2 = clone $j2; + $x3 = clone $j3; + $x4 = clone $j4; + $x5 = clone $j5; + $x6 = clone $j6; + $x7 = clone $j7; + $x8 = clone $j8; + $x9 = clone $j9; + $x10 = clone $j10; + $x11 = clone $j11; + $x12 = clone $j12; + $x13 = clone $j13; + $x14 = clone $j14; + $x15 = clone $j15; + + # for (i = 20; i > 0; i -= 2) { + for ($i = 20; $i > 0; $i -= 2) { + # QUARTERROUND( x0, x4, x8, x12) + list($x0, $x4, $x8, $x12) = self::quarterRound($x0, $x4, $x8, $x12); + + # QUARTERROUND( x1, x5, x9, x13) + list($x1, $x5, $x9, $x13) = self::quarterRound($x1, $x5, $x9, $x13); + + # QUARTERROUND( x2, x6, x10, x14) + list($x2, $x6, $x10, $x14) = self::quarterRound($x2, $x6, $x10, $x14); + + # QUARTERROUND( x3, x7, x11, x15) + list($x3, $x7, $x11, $x15) = self::quarterRound($x3, $x7, $x11, $x15); + + # QUARTERROUND( x0, x5, x10, x15) + list($x0, $x5, $x10, $x15) = self::quarterRound($x0, $x5, $x10, $x15); + + # QUARTERROUND( x1, x6, x11, x12) + list($x1, $x6, $x11, $x12) = self::quarterRound($x1, $x6, $x11, $x12); + + # QUARTERROUND( x2, x7, x8, x13) + list($x2, $x7, $x8, $x13) = self::quarterRound($x2, $x7, $x8, $x13); + + # QUARTERROUND( x3, x4, x9, x14) + list($x3, $x4, $x9, $x14) = self::quarterRound($x3, $x4, $x9, $x14); + } + /* + x0 = PLUS(x0, j0); + x1 = PLUS(x1, j1); + x2 = PLUS(x2, j2); + x3 = PLUS(x3, j3); + x4 = PLUS(x4, j4); + x5 = PLUS(x5, j5); + x6 = PLUS(x6, j6); + x7 = PLUS(x7, j7); + x8 = PLUS(x8, j8); + x9 = PLUS(x9, j9); + x10 = PLUS(x10, j10); + x11 = PLUS(x11, j11); + x12 = PLUS(x12, j12); + x13 = PLUS(x13, j13); + x14 = PLUS(x14, j14); + x15 = PLUS(x15, j15); + */ + $x0 = $x0->addInt32($j0); + $x1 = $x1->addInt32($j1); + $x2 = $x2->addInt32($j2); + $x3 = $x3->addInt32($j3); + $x4 = $x4->addInt32($j4); + $x5 = $x5->addInt32($j5); + $x6 = $x6->addInt32($j6); + $x7 = $x7->addInt32($j7); + $x8 = $x8->addInt32($j8); + $x9 = $x9->addInt32($j9); + $x10 = $x10->addInt32($j10); + $x11 = $x11->addInt32($j11); + $x12 = $x12->addInt32($j12); + $x13 = $x13->addInt32($j13); + $x14 = $x14->addInt32($j14); + $x15 = $x15->addInt32($j15); + + /* + x0 = XOR(x0, LOAD32_LE(m + 0)); + x1 = XOR(x1, LOAD32_LE(m + 4)); + x2 = XOR(x2, LOAD32_LE(m + 8)); + x3 = XOR(x3, LOAD32_LE(m + 12)); + x4 = XOR(x4, LOAD32_LE(m + 16)); + x5 = XOR(x5, LOAD32_LE(m + 20)); + x6 = XOR(x6, LOAD32_LE(m + 24)); + x7 = XOR(x7, LOAD32_LE(m + 28)); + x8 = XOR(x8, LOAD32_LE(m + 32)); + x9 = XOR(x9, LOAD32_LE(m + 36)); + x10 = XOR(x10, LOAD32_LE(m + 40)); + x11 = XOR(x11, LOAD32_LE(m + 44)); + x12 = XOR(x12, LOAD32_LE(m + 48)); + x13 = XOR(x13, LOAD32_LE(m + 52)); + x14 = XOR(x14, LOAD32_LE(m + 56)); + x15 = XOR(x15, LOAD32_LE(m + 60)); + */ + $x0 = $x0->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 0, 4))); + $x1 = $x1->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 4, 4))); + $x2 = $x2->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 8, 4))); + $x3 = $x3->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 12, 4))); + $x4 = $x4->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 16, 4))); + $x5 = $x5->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 20, 4))); + $x6 = $x6->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 24, 4))); + $x7 = $x7->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 28, 4))); + $x8 = $x8->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 32, 4))); + $x9 = $x9->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 36, 4))); + $x10 = $x10->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 40, 4))); + $x11 = $x11->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 44, 4))); + $x12 = $x12->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 48, 4))); + $x13 = $x13->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 52, 4))); + $x14 = $x14->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 56, 4))); + $x15 = $x15->xorInt32(ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 60, 4))); + + /* + j12 = PLUSONE(j12); + if (!j12) { + j13 = PLUSONE(j13); + } + */ + /** @var ParagonIE_Sodium_Core32_Int32 $j12 */ + $j12 = $j12->addInt(1); + if ($j12->limbs[0] === 0 && $j12->limbs[1] === 0) { + $j13 = $j13->addInt(1); + } + + /* + STORE32_LE(c + 0, x0); + STORE32_LE(c + 4, x1); + STORE32_LE(c + 8, x2); + STORE32_LE(c + 12, x3); + STORE32_LE(c + 16, x4); + STORE32_LE(c + 20, x5); + STORE32_LE(c + 24, x6); + STORE32_LE(c + 28, x7); + STORE32_LE(c + 32, x8); + STORE32_LE(c + 36, x9); + STORE32_LE(c + 40, x10); + STORE32_LE(c + 44, x11); + STORE32_LE(c + 48, x12); + STORE32_LE(c + 52, x13); + STORE32_LE(c + 56, x14); + STORE32_LE(c + 60, x15); + */ + + $block = $x0->toReverseString() . + $x1->toReverseString() . + $x2->toReverseString() . + $x3->toReverseString() . + $x4->toReverseString() . + $x5->toReverseString() . + $x6->toReverseString() . + $x7->toReverseString() . + $x8->toReverseString() . + $x9->toReverseString() . + $x10->toReverseString() . + $x11->toReverseString() . + $x12->toReverseString() . + $x13->toReverseString() . + $x14->toReverseString() . + $x15->toReverseString(); + + /* Partial block */ + if ($bytes < 64) { + $c .= self::substr($block, 0, $bytes); + break; + } + + /* Full block */ + $c .= $block; + $bytes -= 64; + if ($bytes <= 0) { + break; + } + $message = self::substr($message, 64); + } + /* end for(;;) loop */ + + $ctx[12] = $j12; + $ctx[13] = $j13; + return $c; + } + + /** + * @internal You should not use this directly from another application + * + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function stream($len = 64, $nonce = '', $key = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core32_ChaCha20_Ctx($key, $nonce), + str_repeat("\x00", $len) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ietfStream($len, $nonce = '', $key = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core32_ChaCha20_IetfCtx($key, $nonce), + str_repeat("\x00", $len) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $nonce + * @param string $key + * @param string $ic + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ietfStreamXorIc($message, $nonce = '', $key = '', $ic = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core32_ChaCha20_IetfCtx($key, $nonce, $ic), + $message + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $nonce + * @param string $key + * @param string $ic + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function streamXorIc($message, $nonce = '', $key = '', $ic = '') + { + return self::encryptBytes( + new ParagonIE_Sodium_Core32_ChaCha20_Ctx($key, $nonce, $ic), + $message + ); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/ChaCha20/Ctx.php b/vendor/paragonie/sodium_compat/src/Core32/ChaCha20/Ctx.php new file mode 100644 index 000000000..3f47d03b0 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/ChaCha20/Ctx.php @@ -0,0 +1,126 @@ + + */ + protected $container; + + /** + * ParagonIE_Sodium_Core_ChaCha20_Ctx constructor. + * + * @internal You should not use this directly from another application + * + * @param string $key ChaCha20 key. + * @param string $iv Initialization Vector (a.k.a. nonce). + * @param string $counter The initial counter value. + * Defaults to 8 0x00 bytes. + * @throws InvalidArgumentException + * @throws SodiumException + * @throws TypeError + */ + public function __construct($key = '', $iv = '', $counter = '') + { + if (self::strlen($key) !== 32) { + throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.'); + } + if (self::strlen($iv) !== 8) { + throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.'); + } + $this->container = new SplFixedArray(16); + + /* "expand 32-byte k" as per ChaCha20 spec */ + $this->container[0] = new ParagonIE_Sodium_Core32_Int32(array(0x6170, 0x7865)); + $this->container[1] = new ParagonIE_Sodium_Core32_Int32(array(0x3320, 0x646e)); + $this->container[2] = new ParagonIE_Sodium_Core32_Int32(array(0x7962, 0x2d32)); + $this->container[3] = new ParagonIE_Sodium_Core32_Int32(array(0x6b20, 0x6574)); + + $this->container[4] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 0, 4)); + $this->container[5] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 4, 4)); + $this->container[6] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 8, 4)); + $this->container[7] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 12, 4)); + $this->container[8] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 16, 4)); + $this->container[9] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 20, 4)); + $this->container[10] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 24, 4)); + $this->container[11] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 28, 4)); + + if (empty($counter)) { + $this->container[12] = new ParagonIE_Sodium_Core32_Int32(); + $this->container[13] = new ParagonIE_Sodium_Core32_Int32(); + } else { + $this->container[12] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($counter, 0, 4)); + $this->container[13] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($counter, 4, 4)); + } + $this->container[14] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 0, 4)); + $this->container[15] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 4, 4)); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @param int|ParagonIE_Sodium_Core32_Int32 $value + * @return void + */ + public function offsetSet($offset, $value) + { + if (!is_int($offset)) { + throw new InvalidArgumentException('Expected an integer'); + } + if ($value instanceof ParagonIE_Sodium_Core32_Int32) { + /* + } elseif (is_int($value)) { + $value = ParagonIE_Sodium_Core32_Int32::fromInt($value); + */ + } else { + throw new InvalidArgumentException('Expected an integer'); + } + $this->container[$offset] = $value; + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return bool + * @psalm-suppress MixedArrayOffset + */ + public function offsetExists($offset) + { + return isset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return void + * @psalm-suppress MixedArrayOffset + */ + public function offsetUnset($offset) + { + unset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $offset + * @return mixed|null + * @psalm-suppress MixedArrayOffset + */ + public function offsetGet($offset) + { + return isset($this->container[$offset]) + ? $this->container[$offset] + : null; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/ChaCha20/IetfCtx.php b/vendor/paragonie/sodium_compat/src/Core32/ChaCha20/IetfCtx.php new file mode 100644 index 000000000..eea08de85 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/ChaCha20/IetfCtx.php @@ -0,0 +1,39 @@ +container[12] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($counter, 0, 4)); + } + $this->container[13] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 0, 4)); + $this->container[14] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 4, 4)); + $this->container[15] = ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($iv, 8, 4)); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519.php new file mode 100644 index 000000000..d6d700e0f --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519.php @@ -0,0 +1,3196 @@ +addInt32($g[$i]); + } + /** @var array $arr */ + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray($arr); + } + + /** + * Constant-time conditional move. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $g + * @param int $b + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedMethodCall + */ + public static function fe_cmov( + ParagonIE_Sodium_Core32_Curve25519_Fe $f, + ParagonIE_Sodium_Core32_Curve25519_Fe $g, + $b = 0 + ) { + /** @var array $h */ + $h = array(); + for ($i = 0; $i < 10; ++$i) { + if (!($f[$i] instanceof ParagonIE_Sodium_Core32_Int32)) { + throw new TypeError('Expected Int32'); + } + if (!($g[$i] instanceof ParagonIE_Sodium_Core32_Int32)) { + throw new TypeError('Expected Int32'); + } + $h[$i] = $f[$i]->xorInt32( + $f[$i]->xorInt32($g[$i])->mask($b) + ); + } + /** @var array $h */ + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray($h); + } + + /** + * Create a copy of a field element. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + */ + public static function fe_copy(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + $h = clone $f; + return $h; + } + + /** + * Give: 32-byte string. + * Receive: A field element object to use for internal calculations. + * + * @internal You should not use this directly from another application + * + * @param string $s + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws RangeException + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedMethodCall + */ + public static function fe_frombytes($s) + { + if (self::strlen($s) !== 32) { + throw new RangeException('Expected a 32-byte string.'); + } + /** @var ParagonIE_Sodium_Core32_Int32 $h0 */ + $h0 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_4($s) + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h1 */ + $h1 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 4, 3)) << 6 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h2 */ + $h2 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 7, 3)) << 5 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h3 */ + $h3 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 10, 3)) << 3 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h4 */ + $h4 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 13, 3)) << 2 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h5 */ + $h5 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_4(self::substr($s, 16, 4)) + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h6 */ + $h6 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 20, 3)) << 7 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h7 */ + $h7 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 23, 3)) << 5 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h8 */ + $h8 = ParagonIE_Sodium_Core32_Int32::fromInt( + self::load_3(self::substr($s, 26, 3)) << 4 + ); + /** @var ParagonIE_Sodium_Core32_Int32 $h9 */ + $h9 = ParagonIE_Sodium_Core32_Int32::fromInt( + (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2 + ); + + $carry9 = $h9->addInt(1 << 24)->shiftRight(25); + $h0 = $h0->addInt32($carry9->mulInt(19, 5)); + $h9 = $h9->subInt32($carry9->shiftLeft(25)); + + $carry1 = $h1->addInt(1 << 24)->shiftRight(25); + $h2 = $h2->addInt32($carry1); + $h1 = $h1->subInt32($carry1->shiftLeft(25)); + + $carry3 = $h3->addInt(1 << 24)->shiftRight(25); + $h4 = $h4->addInt32($carry3); + $h3 = $h3->subInt32($carry3->shiftLeft(25)); + + $carry5 = $h5->addInt(1 << 24)->shiftRight(25); + $h6 = $h6->addInt32($carry5); + $h5 = $h5->subInt32($carry5->shiftLeft(25)); + + $carry7 = $h7->addInt(1 << 24)->shiftRight(25); + $h8 = $h8->addInt32($carry7); + $h7 = $h7->subInt32($carry7->shiftLeft(25)); + + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt32($carry0); + $h0 = $h0->subInt32($carry0->shiftLeft(26)); + + $carry2 = $h2->addInt(1 << 25)->shiftRight(26); + $h3 = $h3->addInt32($carry2); + $h2 = $h2->subInt32($carry2->shiftLeft(26)); + + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt32($carry4); + $h4 = $h4->subInt32($carry4->shiftLeft(26)); + + $carry6 = $h6->addInt(1 << 25)->shiftRight(26); + $h7 = $h7->addInt32($carry6); + $h6 = $h6->subInt32($carry6->shiftLeft(26)); + + $carry8 = $h8->addInt(1 << 25)->shiftRight(26); + $h9 = $h9->addInt32($carry8); + $h8 = $h8->subInt32($carry8->shiftLeft(26)); + + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array($h0, $h1, $h2,$h3, $h4, $h5, $h6, $h7, $h8, $h9) + ); + } + + /** + * Convert a field element to a byte string. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $h + * @return string + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedMethodCall + */ + public static function fe_tobytes(ParagonIE_Sodium_Core32_Curve25519_Fe $h) + { + /** + * @var ParagonIE_Sodium_Core32_Int64[] $f + * @var ParagonIE_Sodium_Core32_Int64 $q + */ + $f = array(); + + for ($i = 0; $i < 10; ++$i) { + $f[$i] = $h[$i]->toInt64(); + } + + $q = $f[9]->mulInt(19, 5)->addInt(1 << 14)->shiftRight(25) + ->addInt64($f[0])->shiftRight(26) + ->addInt64($f[1])->shiftRight(25) + ->addInt64($f[2])->shiftRight(26) + ->addInt64($f[3])->shiftRight(25) + ->addInt64($f[4])->shiftRight(26) + ->addInt64($f[5])->shiftRight(25) + ->addInt64($f[6])->shiftRight(26) + ->addInt64($f[7])->shiftRight(25) + ->addInt64($f[8])->shiftRight(26) + ->addInt64($f[9])->shiftRight(25); + + $f[0] = $f[0]->addInt64($q->mulInt(19, 5)); + + $carry0 = $f[0]->shiftRight(26); + $f[1] = $f[1]->addInt64($carry0); + $f[0] = $f[0]->subInt64($carry0->shiftLeft(26)); + + $carry1 = $f[1]->shiftRight(25); + $f[2] = $f[2]->addInt64($carry1); + $f[1] = $f[1]->subInt64($carry1->shiftLeft(25)); + + $carry2 = $f[2]->shiftRight(26); + $f[3] = $f[3]->addInt64($carry2); + $f[2] = $f[2]->subInt64($carry2->shiftLeft(26)); + + $carry3 = $f[3]->shiftRight(25); + $f[4] = $f[4]->addInt64($carry3); + $f[3] = $f[3]->subInt64($carry3->shiftLeft(25)); + + $carry4 = $f[4]->shiftRight(26); + $f[5] = $f[5]->addInt64($carry4); + $f[4] = $f[4]->subInt64($carry4->shiftLeft(26)); + + $carry5 = $f[5]->shiftRight(25); + $f[6] = $f[6]->addInt64($carry5); + $f[5] = $f[5]->subInt64($carry5->shiftLeft(25)); + + $carry6 = $f[6]->shiftRight(26); + $f[7] = $f[7]->addInt64($carry6); + $f[6] = $f[6]->subInt64($carry6->shiftLeft(26)); + + $carry7 = $f[7]->shiftRight(25); + $f[8] = $f[8]->addInt64($carry7); + $f[7] = $f[7]->subInt64($carry7->shiftLeft(25)); + + $carry8 = $f[8]->shiftRight(26); + $f[9] = $f[9]->addInt64($carry8); + $f[8] = $f[8]->subInt64($carry8->shiftLeft(26)); + + $carry9 = $f[9]->shiftRight(25); + $f[9] = $f[9]->subInt64($carry9->shiftLeft(25)); + + /** @var int $h0 */ + $h0 = $f[0]->toInt32()->toInt(); + /** @var int $h1 */ + $h1 = $f[1]->toInt32()->toInt(); + /** @var int $h2 */ + $h2 = $f[2]->toInt32()->toInt(); + /** @var int $h3 */ + $h3 = $f[3]->toInt32()->toInt(); + /** @var int $h4 */ + $h4 = $f[4]->toInt32()->toInt(); + /** @var int $h5 */ + $h5 = $f[5]->toInt32()->toInt(); + /** @var int $h6 */ + $h6 = $f[6]->toInt32()->toInt(); + /** @var int $h7 */ + $h7 = $f[7]->toInt32()->toInt(); + /** @var int $h8 */ + $h8 = $f[8]->toInt32()->toInt(); + /** @var int $h9 */ + $h9 = $f[9]->toInt32()->toInt(); + + /** + * @var array + */ + $s = array( + (int) (($h0 >> 0) & 0xff), + (int) (($h0 >> 8) & 0xff), + (int) (($h0 >> 16) & 0xff), + (int) ((($h0 >> 24) | ($h1 << 2)) & 0xff), + (int) (($h1 >> 6) & 0xff), + (int) (($h1 >> 14) & 0xff), + (int) ((($h1 >> 22) | ($h2 << 3)) & 0xff), + (int) (($h2 >> 5) & 0xff), + (int) (($h2 >> 13) & 0xff), + (int) ((($h2 >> 21) | ($h3 << 5)) & 0xff), + (int) (($h3 >> 3) & 0xff), + (int) (($h3 >> 11) & 0xff), + (int) ((($h3 >> 19) | ($h4 << 6)) & 0xff), + (int) (($h4 >> 2) & 0xff), + (int) (($h4 >> 10) & 0xff), + (int) (($h4 >> 18) & 0xff), + (int) (($h5 >> 0) & 0xff), + (int) (($h5 >> 8) & 0xff), + (int) (($h5 >> 16) & 0xff), + (int) ((($h5 >> 24) | ($h6 << 1)) & 0xff), + (int) (($h6 >> 7) & 0xff), + (int) (($h6 >> 15) & 0xff), + (int) ((($h6 >> 23) | ($h7 << 3)) & 0xff), + (int) (($h7 >> 5) & 0xff), + (int) (($h7 >> 13) & 0xff), + (int) ((($h7 >> 21) | ($h8 << 4)) & 0xff), + (int) (($h8 >> 4) & 0xff), + (int) (($h8 >> 12) & 0xff), + (int) ((($h8 >> 20) | ($h9 << 6)) & 0xff), + (int) (($h9 >> 2) & 0xff), + (int) (($h9 >> 10) & 0xff), + (int) (($h9 >> 18) & 0xff) + ); + return self::intArrayToString($s); + } + + /** + * Is a field element negative? (1 = yes, 0 = no. Used in calculations.) + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return int + * @throws SodiumException + * @throws TypeError + */ + public static function fe_isnegative(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + $str = self::fe_tobytes($f); + return (int) (self::chrToInt($str[0]) & 1); + } + + /** + * Returns 0 if this field element results in all NUL bytes. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function fe_isnonzero(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + static $zero; + if ($zero === null) { + $zero = str_repeat("\x00", 32); + } + /** @var string $str */ + $str = self::fe_tobytes($f); + /** @var string $zero */ + return !self::verify_32($str, $zero); + } + + /** + * Multiply two field elements + * + * h = f * g + * + * @internal You should not use this directly from another application + * + * @security Is multiplication a source of timing leaks? If so, can we do + * anything to prevent that from happening? + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $g + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + */ + public static function fe_mul( + ParagonIE_Sodium_Core32_Curve25519_Fe $f, + ParagonIE_Sodium_Core32_Curve25519_Fe $g + ) { + /** + * @var ParagonIE_Sodium_Core32_Int32[] $f + * @var ParagonIE_Sodium_Core32_Int32[] $g + * @var ParagonIE_Sodium_Core32_Int64 $f0 + * @var ParagonIE_Sodium_Core32_Int64 $f1 + * @var ParagonIE_Sodium_Core32_Int64 $f2 + * @var ParagonIE_Sodium_Core32_Int64 $f3 + * @var ParagonIE_Sodium_Core32_Int64 $f4 + * @var ParagonIE_Sodium_Core32_Int64 $f5 + * @var ParagonIE_Sodium_Core32_Int64 $f6 + * @var ParagonIE_Sodium_Core32_Int64 $f7 + * @var ParagonIE_Sodium_Core32_Int64 $f8 + * @var ParagonIE_Sodium_Core32_Int64 $f9 + * @var ParagonIE_Sodium_Core32_Int64 $g0 + * @var ParagonIE_Sodium_Core32_Int64 $g1 + * @var ParagonIE_Sodium_Core32_Int64 $g2 + * @var ParagonIE_Sodium_Core32_Int64 $g3 + * @var ParagonIE_Sodium_Core32_Int64 $g4 + * @var ParagonIE_Sodium_Core32_Int64 $g5 + * @var ParagonIE_Sodium_Core32_Int64 $g6 + * @var ParagonIE_Sodium_Core32_Int64 $g7 + * @var ParagonIE_Sodium_Core32_Int64 $g8 + * @var ParagonIE_Sodium_Core32_Int64 $g9 + */ + $f0 = $f[0]->toInt64(); + $f1 = $f[1]->toInt64(); + $f2 = $f[2]->toInt64(); + $f3 = $f[3]->toInt64(); + $f4 = $f[4]->toInt64(); + $f5 = $f[5]->toInt64(); + $f6 = $f[6]->toInt64(); + $f7 = $f[7]->toInt64(); + $f8 = $f[8]->toInt64(); + $f9 = $f[9]->toInt64(); + $g0 = $g[0]->toInt64(); + $g1 = $g[1]->toInt64(); + $g2 = $g[2]->toInt64(); + $g3 = $g[3]->toInt64(); + $g4 = $g[4]->toInt64(); + $g5 = $g[5]->toInt64(); + $g6 = $g[6]->toInt64(); + $g7 = $g[7]->toInt64(); + $g8 = $g[8]->toInt64(); + $g9 = $g[9]->toInt64(); + $g1_19 = $g1->mulInt(19, 5); /* 2^4 <= 19 <= 2^5, but we only want 5 bits */ + $g2_19 = $g2->mulInt(19, 5); + $g3_19 = $g3->mulInt(19, 5); + $g4_19 = $g4->mulInt(19, 5); + $g5_19 = $g5->mulInt(19, 5); + $g6_19 = $g6->mulInt(19, 5); + $g7_19 = $g7->mulInt(19, 5); + $g8_19 = $g8->mulInt(19, 5); + $g9_19 = $g9->mulInt(19, 5); + /** @var ParagonIE_Sodium_Core32_Int64 $f1_2 */ + $f1_2 = $f1->shiftLeft(1); + /** @var ParagonIE_Sodium_Core32_Int64 $f3_2 */ + $f3_2 = $f3->shiftLeft(1); + /** @var ParagonIE_Sodium_Core32_Int64 $f5_2 */ + $f5_2 = $f5->shiftLeft(1); + /** @var ParagonIE_Sodium_Core32_Int64 $f7_2 */ + $f7_2 = $f7->shiftLeft(1); + /** @var ParagonIE_Sodium_Core32_Int64 $f9_2 */ + $f9_2 = $f9->shiftLeft(1); + $f0g0 = $f0->mulInt64($g0, 27); + $f0g1 = $f0->mulInt64($g1, 27); + $f0g2 = $f0->mulInt64($g2, 27); + $f0g3 = $f0->mulInt64($g3, 27); + $f0g4 = $f0->mulInt64($g4, 27); + $f0g5 = $f0->mulInt64($g5, 27); + $f0g6 = $f0->mulInt64($g6, 27); + $f0g7 = $f0->mulInt64($g7, 27); + $f0g8 = $f0->mulInt64($g8, 27); + $f0g9 = $f0->mulInt64($g9, 27); + $f1g0 = $f1->mulInt64($g0, 27); + $f1g1_2 = $f1_2->mulInt64($g1, 27); + $f1g2 = $f1->mulInt64($g2, 27); + $f1g3_2 = $f1_2->mulInt64($g3, 27); + $f1g4 = $f1->mulInt64($g4, 30); + $f1g5_2 = $f1_2->mulInt64($g5, 30); + $f1g6 = $f1->mulInt64($g6, 30); + $f1g7_2 = $f1_2->mulInt64($g7, 30); + $f1g8 = $f1->mulInt64($g8, 30); + $f1g9_38 = $g9_19->mulInt64($f1_2, 30); + $f2g0 = $f2->mulInt64($g0, 30); + $f2g1 = $f2->mulInt64($g1, 29); + $f2g2 = $f2->mulInt64($g2, 30); + $f2g3 = $f2->mulInt64($g3, 29); + $f2g4 = $f2->mulInt64($g4, 30); + $f2g5 = $f2->mulInt64($g5, 29); + $f2g6 = $f2->mulInt64($g6, 30); + $f2g7 = $f2->mulInt64($g7, 29); + $f2g8_19 = $g8_19->mulInt64($f2, 30); + $f2g9_19 = $g9_19->mulInt64($f2, 30); + $f3g0 = $f3->mulInt64($g0, 30); + $f3g1_2 = $f3_2->mulInt64($g1, 30); + $f3g2 = $f3->mulInt64($g2, 30); + $f3g3_2 = $f3_2->mulInt64($g3, 30); + $f3g4 = $f3->mulInt64($g4, 30); + $f3g5_2 = $f3_2->mulInt64($g5, 30); + $f3g6 = $f3->mulInt64($g6, 30); + $f3g7_38 = $g7_19->mulInt64($f3_2, 30); + $f3g8_19 = $g8_19->mulInt64($f3, 30); + $f3g9_38 = $g9_19->mulInt64($f3_2, 30); + $f4g0 = $f4->mulInt64($g0, 30); + $f4g1 = $f4->mulInt64($g1, 30); + $f4g2 = $f4->mulInt64($g2, 30); + $f4g3 = $f4->mulInt64($g3, 30); + $f4g4 = $f4->mulInt64($g4, 30); + $f4g5 = $f4->mulInt64($g5, 30); + $f4g6_19 = $g6_19->mulInt64($f4, 30); + $f4g7_19 = $g7_19->mulInt64($f4, 30); + $f4g8_19 = $g8_19->mulInt64($f4, 30); + $f4g9_19 = $g9_19->mulInt64($f4, 30); + $f5g0 = $f5->mulInt64($g0, 30); + $f5g1_2 = $f5_2->mulInt64($g1, 30); + $f5g2 = $f5->mulInt64($g2, 30); + $f5g3_2 = $f5_2->mulInt64($g3, 30); + $f5g4 = $f5->mulInt64($g4, 30); + $f5g5_38 = $g5_19->mulInt64($f5_2, 30); + $f5g6_19 = $g6_19->mulInt64($f5, 30); + $f5g7_38 = $g7_19->mulInt64($f5_2, 30); + $f5g8_19 = $g8_19->mulInt64($f5, 30); + $f5g9_38 = $g9_19->mulInt64($f5_2, 30); + $f6g0 = $f6->mulInt64($g0, 30); + $f6g1 = $f6->mulInt64($g1, 30); + $f6g2 = $f6->mulInt64($g2, 30); + $f6g3 = $f6->mulInt64($g3, 30); + $f6g4_19 = $g4_19->mulInt64($f6, 30); + $f6g5_19 = $g5_19->mulInt64($f6, 30); + $f6g6_19 = $g6_19->mulInt64($f6, 30); + $f6g7_19 = $g7_19->mulInt64($f6, 30); + $f6g8_19 = $g8_19->mulInt64($f6, 30); + $f6g9_19 = $g9_19->mulInt64($f6, 30); + $f7g0 = $f7->mulInt64($g0, 30); + $f7g1_2 = $g1->mulInt64($f7_2, 30); + $f7g2 = $f7->mulInt64($g2, 30); + $f7g3_38 = $g3_19->mulInt64($f7_2, 30); + $f7g4_19 = $g4_19->mulInt64($f7, 30); + $f7g5_38 = $g5_19->mulInt64($f7_2, 30); + $f7g6_19 = $g6_19->mulInt64($f7, 30); + $f7g7_38 = $g7_19->mulInt64($f7_2, 30); + $f7g8_19 = $g8_19->mulInt64($f7, 30); + $f7g9_38 = $g9_19->mulInt64($f7_2, 30); + $f8g0 = $f8->mulInt64($g0, 30); + $f8g1 = $f8->mulInt64($g1, 29); + $f8g2_19 = $g2_19->mulInt64($f8, 30); + $f8g3_19 = $g3_19->mulInt64($f8, 30); + $f8g4_19 = $g4_19->mulInt64($f8, 30); + $f8g5_19 = $g5_19->mulInt64($f8, 30); + $f8g6_19 = $g6_19->mulInt64($f8, 30); + $f8g7_19 = $g7_19->mulInt64($f8, 30); + $f8g8_19 = $g8_19->mulInt64($f8, 30); + $f8g9_19 = $g9_19->mulInt64($f8, 30); + $f9g0 = $f9->mulInt64($g0, 30); + $f9g1_38 = $g1_19->mulInt64($f9_2, 30); + $f9g2_19 = $g2_19->mulInt64($f9, 30); + $f9g3_38 = $g3_19->mulInt64($f9_2, 30); + $f9g4_19 = $g4_19->mulInt64($f9, 30); + $f9g5_38 = $g5_19->mulInt64($f9_2, 30); + $f9g6_19 = $g6_19->mulInt64($f9, 30); + $f9g7_38 = $g7_19->mulInt64($f9_2, 30); + $f9g8_19 = $g8_19->mulInt64($f9, 30); + $f9g9_38 = $g9_19->mulInt64($f9_2, 30); + + // $h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38; + $h0 = $f0g0->addInt64($f1g9_38)->addInt64($f2g8_19)->addInt64($f3g7_38) + ->addInt64($f4g6_19)->addInt64($f5g5_38)->addInt64($f6g4_19) + ->addInt64($f7g3_38)->addInt64($f8g2_19)->addInt64($f9g1_38); + + // $h1 = $f0g1 + $f1g0 + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19; + $h1 = $f0g1->addInt64($f1g0)->addInt64($f2g9_19)->addInt64($f3g8_19) + ->addInt64($f4g7_19)->addInt64($f5g6_19)->addInt64($f6g5_19) + ->addInt64($f7g4_19)->addInt64($f8g3_19)->addInt64($f9g2_19); + + // $h2 = $f0g2 + $f1g1_2 + $f2g0 + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38; + $h2 = $f0g2->addInt64($f1g1_2)->addInt64($f2g0)->addInt64($f3g9_38) + ->addInt64($f4g8_19)->addInt64($f5g7_38)->addInt64($f6g6_19) + ->addInt64($f7g5_38)->addInt64($f8g4_19)->addInt64($f9g3_38); + + // $h3 = $f0g3 + $f1g2 + $f2g1 + $f3g0 + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19; + $h3 = $f0g3->addInt64($f1g2)->addInt64($f2g1)->addInt64($f3g0) + ->addInt64($f4g9_19)->addInt64($f5g8_19)->addInt64($f6g7_19) + ->addInt64($f7g6_19)->addInt64($f8g5_19)->addInt64($f9g4_19); + + // $h4 = $f0g4 + $f1g3_2 + $f2g2 + $f3g1_2 + $f4g0 + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38; + $h4 = $f0g4->addInt64($f1g3_2)->addInt64($f2g2)->addInt64($f3g1_2) + ->addInt64($f4g0)->addInt64($f5g9_38)->addInt64($f6g8_19) + ->addInt64($f7g7_38)->addInt64($f8g6_19)->addInt64($f9g5_38); + + // $h5 = $f0g5 + $f1g4 + $f2g3 + $f3g2 + $f4g1 + $f5g0 + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19; + $h5 = $f0g5->addInt64($f1g4)->addInt64($f2g3)->addInt64($f3g2) + ->addInt64($f4g1)->addInt64($f5g0)->addInt64($f6g9_19) + ->addInt64($f7g8_19)->addInt64($f8g7_19)->addInt64($f9g6_19); + + // $h6 = $f0g6 + $f1g5_2 + $f2g4 + $f3g3_2 + $f4g2 + $f5g1_2 + $f6g0 + $f7g9_38 + $f8g8_19 + $f9g7_38; + $h6 = $f0g6->addInt64($f1g5_2)->addInt64($f2g4)->addInt64($f3g3_2) + ->addInt64($f4g2)->addInt64($f5g1_2)->addInt64($f6g0) + ->addInt64($f7g9_38)->addInt64($f8g8_19)->addInt64($f9g7_38); + + // $h7 = $f0g7 + $f1g6 + $f2g5 + $f3g4 + $f4g3 + $f5g2 + $f6g1 + $f7g0 + $f8g9_19 + $f9g8_19; + $h7 = $f0g7->addInt64($f1g6)->addInt64($f2g5)->addInt64($f3g4) + ->addInt64($f4g3)->addInt64($f5g2)->addInt64($f6g1) + ->addInt64($f7g0)->addInt64($f8g9_19)->addInt64($f9g8_19); + + // $h8 = $f0g8 + $f1g7_2 + $f2g6 + $f3g5_2 + $f4g4 + $f5g3_2 + $f6g2 + $f7g1_2 + $f8g0 + $f9g9_38; + $h8 = $f0g8->addInt64($f1g7_2)->addInt64($f2g6)->addInt64($f3g5_2) + ->addInt64($f4g4)->addInt64($f5g3_2)->addInt64($f6g2) + ->addInt64($f7g1_2)->addInt64($f8g0)->addInt64($f9g9_38); + + // $h9 = $f0g9 + $f1g8 + $f2g7 + $f3g6 + $f4g5 + $f5g4 + $f6g3 + $f7g2 + $f8g1 + $f9g0 ; + $h9 = $f0g9->addInt64($f1g8)->addInt64($f2g7)->addInt64($f3g6) + ->addInt64($f4g5)->addInt64($f5g4)->addInt64($f6g3) + ->addInt64($f7g2)->addInt64($f8g1)->addInt64($f9g0); + + /** + * @var ParagonIE_Sodium_Core32_Int64 $h0 + * @var ParagonIE_Sodium_Core32_Int64 $h1 + * @var ParagonIE_Sodium_Core32_Int64 $h2 + * @var ParagonIE_Sodium_Core32_Int64 $h3 + * @var ParagonIE_Sodium_Core32_Int64 $h4 + * @var ParagonIE_Sodium_Core32_Int64 $h5 + * @var ParagonIE_Sodium_Core32_Int64 $h6 + * @var ParagonIE_Sodium_Core32_Int64 $h7 + * @var ParagonIE_Sodium_Core32_Int64 $h8 + * @var ParagonIE_Sodium_Core32_Int64 $h9 + * @var ParagonIE_Sodium_Core32_Int64 $carry0 + * @var ParagonIE_Sodium_Core32_Int64 $carry1 + * @var ParagonIE_Sodium_Core32_Int64 $carry2 + * @var ParagonIE_Sodium_Core32_Int64 $carry3 + * @var ParagonIE_Sodium_Core32_Int64 $carry4 + * @var ParagonIE_Sodium_Core32_Int64 $carry5 + * @var ParagonIE_Sodium_Core32_Int64 $carry6 + * @var ParagonIE_Sodium_Core32_Int64 $carry7 + * @var ParagonIE_Sodium_Core32_Int64 $carry8 + * @var ParagonIE_Sodium_Core32_Int64 $carry9 + */ + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt64($carry0); + $h0 = $h0->subInt64($carry0->shiftLeft(26)); + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt64($carry4); + $h4 = $h4->subInt64($carry4->shiftLeft(26)); + + $carry1 = $h1->addInt(1 << 24)->shiftRight(25); + $h2 = $h2->addInt64($carry1); + $h1 = $h1->subInt64($carry1->shiftLeft(25)); + $carry5 = $h5->addInt(1 << 24)->shiftRight(25); + $h6 = $h6->addInt64($carry5); + $h5 = $h5->subInt64($carry5->shiftLeft(25)); + + $carry2 = $h2->addInt(1 << 25)->shiftRight(26); + $h3 = $h3->addInt64($carry2); + $h2 = $h2->subInt64($carry2->shiftLeft(26)); + $carry6 = $h6->addInt(1 << 25)->shiftRight(26); + $h7 = $h7->addInt64($carry6); + $h6 = $h6->subInt64($carry6->shiftLeft(26)); + + $carry3 = $h3->addInt(1 << 24)->shiftRight(25); + $h4 = $h4->addInt64($carry3); + $h3 = $h3->subInt64($carry3->shiftLeft(25)); + $carry7 = $h7->addInt(1 << 24)->shiftRight(25); + $h8 = $h8->addInt64($carry7); + $h7 = $h7->subInt64($carry7->shiftLeft(25)); + + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt64($carry4); + $h4 = $h4->subInt64($carry4->shiftLeft(26)); + $carry8 = $h8->addInt(1 << 25)->shiftRight(26); + $h9 = $h9->addInt64($carry8); + $h8 = $h8->subInt64($carry8->shiftLeft(26)); + + $carry9 = $h9->addInt(1 << 24)->shiftRight(25); + $h0 = $h0->addInt64($carry9->mulInt(19, 5)); + $h9 = $h9->subInt64($carry9->shiftLeft(25)); + + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt64($carry0); + $h0 = $h0->subInt64($carry0->shiftLeft(26)); + + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + $h0->toInt32(), + $h1->toInt32(), + $h2->toInt32(), + $h3->toInt32(), + $h4->toInt32(), + $h5->toInt32(), + $h6->toInt32(), + $h7->toInt32(), + $h8->toInt32(), + $h9->toInt32() + ) + ); + } + + /** + * Get the negative values for each piece of the field element. + * + * h = -f + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedMethodCall + */ + public static function fe_neg(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + $h = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + for ($i = 0; $i < 10; ++$i) { + $h[$i] = $h[$i]->subInt32($f[$i]); + } + return $h; + } + + /** + * Square a field element + * + * h = f * f + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedMethodCall + */ + public static function fe_sq(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + /** @var ParagonIE_Sodium_Core32_Int64 $f0 */ + $f0 = $f[0]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f1 */ + $f1 = $f[1]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f2 */ + $f2 = $f[2]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f3 */ + $f3 = $f[3]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f4 */ + $f4 = $f[4]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f5 */ + $f5 = $f[5]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f6 */ + $f6 = $f[6]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f7 */ + $f7 = $f[7]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f8 */ + $f8 = $f[8]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f9 */ + $f9 = $f[9]->toInt64(); + + /** @var ParagonIE_Sodium_Core32_Int64 $f0_2 */ + $f0_2 = $f0->shiftLeft(1); + $f1_2 = $f1->shiftLeft(1); + $f2_2 = $f2->shiftLeft(1); + $f3_2 = $f3->shiftLeft(1); + $f4_2 = $f4->shiftLeft(1); + $f5_2 = $f5->shiftLeft(1); + $f6_2 = $f6->shiftLeft(1); + $f7_2 = $f7->shiftLeft(1); + $f5_38 = $f5->mulInt(38, 6); + $f6_19 = $f6->mulInt(19, 5); + $f7_38 = $f7->mulInt(38, 6); + $f8_19 = $f8->mulInt(19, 5); + $f9_38 = $f9->mulInt(38, 6); + /** @var ParagonIE_Sodium_Core32_Int64 $f0f0*/ + $f0f0 = $f0->mulInt64($f0, 28); + $f0f1_2 = $f0_2->mulInt64($f1, 28); + $f0f2_2 = $f0_2->mulInt64($f2, 28); + $f0f3_2 = $f0_2->mulInt64($f3, 28); + $f0f4_2 = $f0_2->mulInt64($f4, 28); + $f0f5_2 = $f0_2->mulInt64($f5, 28); + $f0f6_2 = $f0_2->mulInt64($f6, 28); + $f0f7_2 = $f0_2->mulInt64($f7, 28); + $f0f8_2 = $f0_2->mulInt64($f8, 28); + $f0f9_2 = $f0_2->mulInt64($f9, 28); + + $f1f1_2 = $f1_2->mulInt64($f1, 28); + $f1f2_2 = $f1_2->mulInt64($f2, 28); + $f1f3_4 = $f1_2->mulInt64($f3_2, 28); + $f1f4_2 = $f1_2->mulInt64($f4, 28); + $f1f5_4 = $f1_2->mulInt64($f5_2, 30); + $f1f6_2 = $f1_2->mulInt64($f6, 28); + $f1f7_4 = $f1_2->mulInt64($f7_2, 28); + $f1f8_2 = $f1_2->mulInt64($f8, 28); + $f1f9_76 = $f9_38->mulInt64($f1_2, 30); + + $f2f2 = $f2->mulInt64($f2, 28); + $f2f3_2 = $f2_2->mulInt64($f3, 28); + $f2f4_2 = $f2_2->mulInt64($f4, 28); + $f2f5_2 = $f2_2->mulInt64($f5, 28); + $f2f6_2 = $f2_2->mulInt64($f6, 28); + $f2f7_2 = $f2_2->mulInt64($f7, 28); + $f2f8_38 = $f8_19->mulInt64($f2_2, 30); + $f2f9_38 = $f9_38->mulInt64($f2, 30); + + $f3f3_2 = $f3_2->mulInt64($f3, 28); + $f3f4_2 = $f3_2->mulInt64($f4, 28); + $f3f5_4 = $f3_2->mulInt64($f5_2, 30); + $f3f6_2 = $f3_2->mulInt64($f6, 28); + $f3f7_76 = $f7_38->mulInt64($f3_2, 30); + $f3f8_38 = $f8_19->mulInt64($f3_2, 30); + $f3f9_76 = $f9_38->mulInt64($f3_2, 30); + + $f4f4 = $f4->mulInt64($f4, 28); + $f4f5_2 = $f4_2->mulInt64($f5, 28); + $f4f6_38 = $f6_19->mulInt64($f4_2, 30); + $f4f7_38 = $f7_38->mulInt64($f4, 30); + $f4f8_38 = $f8_19->mulInt64($f4_2, 30); + $f4f9_38 = $f9_38->mulInt64($f4, 30); + + $f5f5_38 = $f5_38->mulInt64($f5, 30); + $f5f6_38 = $f6_19->mulInt64($f5_2, 30); + $f5f7_76 = $f7_38->mulInt64($f5_2, 30); + $f5f8_38 = $f8_19->mulInt64($f5_2, 30); + $f5f9_76 = $f9_38->mulInt64($f5_2, 30); + + $f6f6_19 = $f6_19->mulInt64($f6, 30); + $f6f7_38 = $f7_38->mulInt64($f6, 30); + $f6f8_38 = $f8_19->mulInt64($f6_2, 30); + $f6f9_38 = $f9_38->mulInt64($f6, 30); + + $f7f7_38 = $f7_38->mulInt64($f7, 28); + $f7f8_38 = $f8_19->mulInt64($f7_2, 30); + $f7f9_76 = $f9_38->mulInt64($f7_2, 30); + + $f8f8_19 = $f8_19->mulInt64($f8, 30); + $f8f9_38 = $f9_38->mulInt64($f8, 30); + + $f9f9_38 = $f9_38->mulInt64($f9, 28); + + $h0 = $f0f0->addInt64($f1f9_76)->addInt64($f2f8_38)->addInt64($f3f7_76)->addInt64($f4f6_38)->addInt64($f5f5_38); + $h1 = $f0f1_2->addInt64($f2f9_38)->addInt64($f3f8_38)->addInt64($f4f7_38)->addInt64($f5f6_38); + $h2 = $f0f2_2->addInt64($f1f1_2)->addInt64($f3f9_76)->addInt64($f4f8_38)->addInt64($f5f7_76)->addInt64($f6f6_19); + $h3 = $f0f3_2->addInt64($f1f2_2)->addInt64($f4f9_38)->addInt64($f5f8_38)->addInt64($f6f7_38); + $h4 = $f0f4_2->addInt64($f1f3_4)->addInt64($f2f2)->addInt64($f5f9_76)->addInt64($f6f8_38)->addInt64($f7f7_38); + $h5 = $f0f5_2->addInt64($f1f4_2)->addInt64($f2f3_2)->addInt64($f6f9_38)->addInt64($f7f8_38); + $h6 = $f0f6_2->addInt64($f1f5_4)->addInt64($f2f4_2)->addInt64($f3f3_2)->addInt64($f7f9_76)->addInt64($f8f8_19); + $h7 = $f0f7_2->addInt64($f1f6_2)->addInt64($f2f5_2)->addInt64($f3f4_2)->addInt64($f8f9_38); + $h8 = $f0f8_2->addInt64($f1f7_4)->addInt64($f2f6_2)->addInt64($f3f5_4)->addInt64($f4f4)->addInt64($f9f9_38); + $h9 = $f0f9_2->addInt64($f1f8_2)->addInt64($f2f7_2)->addInt64($f3f6_2)->addInt64($f4f5_2); + + /** + * @var ParagonIE_Sodium_Core32_Int64 $h0 + * @var ParagonIE_Sodium_Core32_Int64 $h1 + * @var ParagonIE_Sodium_Core32_Int64 $h2 + * @var ParagonIE_Sodium_Core32_Int64 $h3 + * @var ParagonIE_Sodium_Core32_Int64 $h4 + * @var ParagonIE_Sodium_Core32_Int64 $h5 + * @var ParagonIE_Sodium_Core32_Int64 $h6 + * @var ParagonIE_Sodium_Core32_Int64 $h7 + * @var ParagonIE_Sodium_Core32_Int64 $h8 + * @var ParagonIE_Sodium_Core32_Int64 $h9 + */ + + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt64($carry0); + $h0 = $h0->subInt64($carry0->shiftLeft(26)); + + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt64($carry4); + $h4 = $h4->subInt64($carry4->shiftLeft(26)); + + $carry1 = $h1->addInt(1 << 24)->shiftRight(25); + $h2 = $h2->addInt64($carry1); + $h1 = $h1->subInt64($carry1->shiftLeft(25)); + + $carry5 = $h5->addInt(1 << 24)->shiftRight(25); + $h6 = $h6->addInt64($carry5); + $h5 = $h5->subInt64($carry5->shiftLeft(25)); + + $carry2 = $h2->addInt(1 << 25)->shiftRight(26); + $h3 = $h3->addInt64($carry2); + $h2 = $h2->subInt64($carry2->shiftLeft(26)); + + $carry6 = $h6->addInt(1 << 25)->shiftRight(26); + $h7 = $h7->addInt64($carry6); + $h6 = $h6->subInt64($carry6->shiftLeft(26)); + + $carry3 = $h3->addInt(1 << 24)->shiftRight(25); + $h4 = $h4->addInt64($carry3); + $h3 = $h3->subInt64($carry3->shiftLeft(25)); + + $carry7 = $h7->addInt(1 << 24)->shiftRight(25); + $h8 = $h8->addInt64($carry7); + $h7 = $h7->subInt64($carry7->shiftLeft(25)); + + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt64($carry4); + $h4 = $h4->subInt64($carry4->shiftLeft(26)); + + $carry8 = $h8->addInt(1 << 25)->shiftRight(26); + $h9 = $h9->addInt64($carry8); + $h8 = $h8->subInt64($carry8->shiftLeft(26)); + + $carry9 = $h9->addInt(1 << 24)->shiftRight(25); + $h0 = $h0->addInt64($carry9->mulInt(19, 5)); + $h9 = $h9->subInt64($carry9->shiftLeft(25)); + + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt64($carry0); + $h0 = $h0->subInt64($carry0->shiftLeft(26)); + + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + $h0->toInt32(), + $h1->toInt32(), + $h2->toInt32(), + $h3->toInt32(), + $h4->toInt32(), + $h5->toInt32(), + $h6->toInt32(), + $h7->toInt32(), + $h8->toInt32(), + $h9->toInt32() + ) + ); + } + + /** + * Square and double a field element + * + * h = 2 * f * f + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedMethodCall + */ + public static function fe_sq2(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + /** @var ParagonIE_Sodium_Core32_Int64 $f0 */ + $f0 = $f[0]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f1 */ + $f1 = $f[1]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f2 */ + $f2 = $f[2]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f3 */ + $f3 = $f[3]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f4 */ + $f4 = $f[4]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f5 */ + $f5 = $f[5]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f6 */ + $f6 = $f[6]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f7 */ + $f7 = $f[7]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f8 */ + $f8 = $f[8]->toInt64(); + /** @var ParagonIE_Sodium_Core32_Int64 $f9 */ + $f9 = $f[9]->toInt64(); + + $f0_2 = $f0->shiftLeft(1); + $f1_2 = $f1->shiftLeft(1); + $f2_2 = $f2->shiftLeft(1); + $f3_2 = $f3->shiftLeft(1); + $f4_2 = $f4->shiftLeft(1); + $f5_2 = $f5->shiftLeft(1); + $f6_2 = $f6->shiftLeft(1); + $f7_2 = $f7->shiftLeft(1); + $f5_38 = $f5->mulInt(38, 6); /* 1.959375*2^30 */ + $f6_19 = $f6->mulInt(19, 5); /* 1.959375*2^30 */ + $f7_38 = $f7->mulInt(38, 6); /* 1.959375*2^30 */ + $f8_19 = $f8->mulInt(19, 5); /* 1.959375*2^30 */ + $f9_38 = $f9->mulInt(38, 6); /* 1.959375*2^30 */ + $f0f0 = $f0->mulInt64($f0, 28); + $f0f1_2 = $f0_2->mulInt64($f1, 28); + $f0f2_2 = $f0_2->mulInt64($f2, 28); + $f0f3_2 = $f0_2->mulInt64($f3, 28); + $f0f4_2 = $f0_2->mulInt64($f4, 28); + $f0f5_2 = $f0_2->mulInt64($f5, 28); + $f0f6_2 = $f0_2->mulInt64($f6, 28); + $f0f7_2 = $f0_2->mulInt64($f7, 28); + $f0f8_2 = $f0_2->mulInt64($f8, 28); + $f0f9_2 = $f0_2->mulInt64($f9, 28); + $f1f1_2 = $f1_2->mulInt64($f1, 28); + $f1f2_2 = $f1_2->mulInt64($f2, 28); + $f1f3_4 = $f1_2->mulInt64($f3_2, 29); + $f1f4_2 = $f1_2->mulInt64($f4, 28); + $f1f5_4 = $f1_2->mulInt64($f5_2, 29); + $f1f6_2 = $f1_2->mulInt64($f6, 28); + $f1f7_4 = $f1_2->mulInt64($f7_2, 29); + $f1f8_2 = $f1_2->mulInt64($f8, 28); + $f1f9_76 = $f9_38->mulInt64($f1_2, 29); + $f2f2 = $f2->mulInt64($f2, 28); + $f2f3_2 = $f2_2->mulInt64($f3, 28); + $f2f4_2 = $f2_2->mulInt64($f4, 28); + $f2f5_2 = $f2_2->mulInt64($f5, 28); + $f2f6_2 = $f2_2->mulInt64($f6, 28); + $f2f7_2 = $f2_2->mulInt64($f7, 28); + $f2f8_38 = $f8_19->mulInt64($f2_2, 29); + $f2f9_38 = $f9_38->mulInt64($f2, 29); + $f3f3_2 = $f3_2->mulInt64($f3, 28); + $f3f4_2 = $f3_2->mulInt64($f4, 28); + $f3f5_4 = $f3_2->mulInt64($f5_2, 28); + $f3f6_2 = $f3_2->mulInt64($f6, 28); + $f3f7_76 = $f7_38->mulInt64($f3_2, 29); + $f3f8_38 = $f8_19->mulInt64($f3_2, 29); + $f3f9_76 = $f9_38->mulInt64($f3_2, 29); + $f4f4 = $f4->mulInt64($f4, 28); + $f4f5_2 = $f4_2->mulInt64($f5, 28); + $f4f6_38 = $f6_19->mulInt64($f4_2, 29); + $f4f7_38 = $f7_38->mulInt64($f4, 29); + $f4f8_38 = $f8_19->mulInt64($f4_2, 29); + $f4f9_38 = $f9_38->mulInt64($f4, 29); + $f5f5_38 = $f5_38->mulInt64($f5, 29); + $f5f6_38 = $f6_19->mulInt64($f5_2, 29); + $f5f7_76 = $f7_38->mulInt64($f5_2, 29); + $f5f8_38 = $f8_19->mulInt64($f5_2, 29); + $f5f9_76 = $f9_38->mulInt64($f5_2, 29); + $f6f6_19 = $f6_19->mulInt64($f6, 29); + $f6f7_38 = $f7_38->mulInt64($f6, 29); + $f6f8_38 = $f8_19->mulInt64($f6_2, 29); + $f6f9_38 = $f9_38->mulInt64($f6, 29); + $f7f7_38 = $f7_38->mulInt64($f7, 29); + $f7f8_38 = $f8_19->mulInt64($f7_2, 29); + $f7f9_76 = $f9_38->mulInt64($f7_2, 29); + $f8f8_19 = $f8_19->mulInt64($f8, 29); + $f8f9_38 = $f9_38->mulInt64($f8, 29); + $f9f9_38 = $f9_38->mulInt64($f9, 29); + + $h0 = $f0f0->addInt64($f1f9_76)->addInt64($f2f8_38)->addInt64($f3f7_76)->addInt64($f4f6_38)->addInt64($f5f5_38); + $h1 = $f0f1_2->addInt64($f2f9_38)->addInt64($f3f8_38)->addInt64($f4f7_38)->addInt64($f5f6_38); + $h2 = $f0f2_2->addInt64($f1f1_2)->addInt64($f3f9_76)->addInt64($f4f8_38)->addInt64($f5f7_76)->addInt64($f6f6_19); + $h3 = $f0f3_2->addInt64($f1f2_2)->addInt64($f4f9_38)->addInt64($f5f8_38)->addInt64($f6f7_38); + $h4 = $f0f4_2->addInt64($f1f3_4)->addInt64($f2f2)->addInt64($f5f9_76)->addInt64($f6f8_38)->addInt64($f7f7_38); + $h5 = $f0f5_2->addInt64($f1f4_2)->addInt64($f2f3_2)->addInt64($f6f9_38)->addInt64($f7f8_38); + $h6 = $f0f6_2->addInt64($f1f5_4)->addInt64($f2f4_2)->addInt64($f3f3_2)->addInt64($f7f9_76)->addInt64($f8f8_19); + $h7 = $f0f7_2->addInt64($f1f6_2)->addInt64($f2f5_2)->addInt64($f3f4_2)->addInt64($f8f9_38); + $h8 = $f0f8_2->addInt64($f1f7_4)->addInt64($f2f6_2)->addInt64($f3f5_4)->addInt64($f4f4)->addInt64($f9f9_38); + $h9 = $f0f9_2->addInt64($f1f8_2)->addInt64($f2f7_2)->addInt64($f3f6_2)->addInt64($f4f5_2); + + /** + * @var ParagonIE_Sodium_Core32_Int64 $h0 + * @var ParagonIE_Sodium_Core32_Int64 $h1 + * @var ParagonIE_Sodium_Core32_Int64 $h2 + * @var ParagonIE_Sodium_Core32_Int64 $h3 + * @var ParagonIE_Sodium_Core32_Int64 $h4 + * @var ParagonIE_Sodium_Core32_Int64 $h5 + * @var ParagonIE_Sodium_Core32_Int64 $h6 + * @var ParagonIE_Sodium_Core32_Int64 $h7 + * @var ParagonIE_Sodium_Core32_Int64 $h8 + * @var ParagonIE_Sodium_Core32_Int64 $h9 + */ + $h0 = $h0->shiftLeft(1); + $h1 = $h1->shiftLeft(1); + $h2 = $h2->shiftLeft(1); + $h3 = $h3->shiftLeft(1); + $h4 = $h4->shiftLeft(1); + $h5 = $h5->shiftLeft(1); + $h6 = $h6->shiftLeft(1); + $h7 = $h7->shiftLeft(1); + $h8 = $h8->shiftLeft(1); + $h9 = $h9->shiftLeft(1); + + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt64($carry0); + $h0 = $h0->subInt64($carry0->shiftLeft(26)); + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt64($carry4); + $h4 = $h4->subInt64($carry4->shiftLeft(26)); + + $carry1 = $h1->addInt(1 << 24)->shiftRight(25); + $h2 = $h2->addInt64($carry1); + $h1 = $h1->subInt64($carry1->shiftLeft(25)); + $carry5 = $h5->addInt(1 << 24)->shiftRight(25); + $h6 = $h6->addInt64($carry5); + $h5 = $h5->subInt64($carry5->shiftLeft(25)); + + $carry2 = $h2->addInt(1 << 25)->shiftRight(26); + $h3 = $h3->addInt64($carry2); + $h2 = $h2->subInt64($carry2->shiftLeft(26)); + $carry6 = $h6->addInt(1 << 25)->shiftRight(26); + $h7 = $h7->addInt64($carry6); + $h6 = $h6->subInt64($carry6->shiftLeft(26)); + + $carry3 = $h3->addInt(1 << 24)->shiftRight(25); + $h4 = $h4->addInt64($carry3); + $h3 = $h3->subInt64($carry3->shiftLeft(25)); + $carry7 = $h7->addInt(1 << 24)->shiftRight(25); + $h8 = $h8->addInt64($carry7); + $h7 = $h7->subInt64($carry7->shiftLeft(25)); + + $carry4 = $h4->addInt(1 << 25)->shiftRight(26); + $h5 = $h5->addInt64($carry4); + $h4 = $h4->subInt64($carry4->shiftLeft(26)); + $carry8 = $h8->addInt(1 << 25)->shiftRight(26); + $h9 = $h9->addInt64($carry8); + $h8 = $h8->subInt64($carry8->shiftLeft(26)); + + $carry9 = $h9->addInt(1 << 24)->shiftRight(25); + $h0 = $h0->addInt64($carry9->mulInt(19, 5)); + $h9 = $h9->subInt64($carry9->shiftLeft(25)); + + $carry0 = $h0->addInt(1 << 25)->shiftRight(26); + $h1 = $h1->addInt64($carry0); + $h0 = $h0->subInt64($carry0->shiftLeft(26)); + + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + $h0->toInt32(), + $h1->toInt32(), + $h2->toInt32(), + $h3->toInt32(), + $h4->toInt32(), + $h5->toInt32(), + $h6->toInt32(), + $h7->toInt32(), + $h8->toInt32(), + $h9->toInt32() + ) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $Z + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + */ + public static function fe_invert(ParagonIE_Sodium_Core32_Curve25519_Fe $Z) + { + $z = clone $Z; + $t0 = self::fe_sq($z); + $t1 = self::fe_sq($t0); + $t1 = self::fe_sq($t1); + $t1 = self::fe_mul($z, $t1); + $t0 = self::fe_mul($t0, $t1); + $t2 = self::fe_sq($t0); + $t1 = self::fe_mul($t1, $t2); + $t2 = self::fe_sq($t1); + for ($i = 1; $i < 5; ++$i) { + $t2 = self::fe_sq($t2); + } + $t1 = self::fe_mul($t2, $t1); + $t2 = self::fe_sq($t1); + for ($i = 1; $i < 10; ++$i) { + $t2 = self::fe_sq($t2); + } + $t2 = self::fe_mul($t2, $t1); + $t3 = self::fe_sq($t2); + for ($i = 1; $i < 20; ++$i) { + $t3 = self::fe_sq($t3); + } + $t2 = self::fe_mul($t3, $t2); + $t2 = self::fe_sq($t2); + for ($i = 1; $i < 10; ++$i) { + $t2 = self::fe_sq($t2); + } + $t1 = self::fe_mul($t2, $t1); + $t2 = self::fe_sq($t1); + for ($i = 1; $i < 50; ++$i) { + $t2 = self::fe_sq($t2); + } + $t2 = self::fe_mul($t2, $t1); + $t3 = self::fe_sq($t2); + for ($i = 1; $i < 100; ++$i) { + $t3 = self::fe_sq($t3); + } + $t2 = self::fe_mul($t3, $t2); + $t2 = self::fe_sq($t2); + for ($i = 1; $i < 50; ++$i) { + $t2 = self::fe_sq($t2); + } + $t1 = self::fe_mul($t2, $t1); + $t1 = self::fe_sq($t1); + for ($i = 1; $i < 5; ++$i) { + $t1 = self::fe_sq($t1); + } + return self::fe_mul($t1, $t0); + } + + /** + * @internal You should not use this directly from another application + * + * @ref https://github.com/jedisct1/libsodium/blob/68564326e1e9dc57ef03746f85734232d20ca6fb/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1054-L1106 + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $z + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + */ + public static function fe_pow22523(ParagonIE_Sodium_Core32_Curve25519_Fe $z) + { + # fe_sq(t0, z); + # fe_sq(t1, t0); + # fe_sq(t1, t1); + # fe_mul(t1, z, t1); + # fe_mul(t0, t0, t1); + # fe_sq(t0, t0); + # fe_mul(t0, t1, t0); + # fe_sq(t1, t0); + $t0 = self::fe_sq($z); + $t1 = self::fe_sq($t0); + $t1 = self::fe_sq($t1); + $t1 = self::fe_mul($z, $t1); + $t0 = self::fe_mul($t0, $t1); + $t0 = self::fe_sq($t0); + $t0 = self::fe_mul($t1, $t0); + $t1 = self::fe_sq($t0); + + # for (i = 1; i < 5; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 5; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t0, t1, t0); + # fe_sq(t1, t0); + $t0 = self::fe_mul($t1, $t0); + $t1 = self::fe_sq($t0); + + # for (i = 1; i < 10; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 10; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t1, t1, t0); + # fe_sq(t2, t1); + $t1 = self::fe_mul($t1, $t0); + $t2 = self::fe_sq($t1); + + # for (i = 1; i < 20; ++i) { + # fe_sq(t2, t2); + # } + for ($i = 1; $i < 20; ++$i) { + $t2 = self::fe_sq($t2); + } + + # fe_mul(t1, t2, t1); + # fe_sq(t1, t1); + $t1 = self::fe_mul($t2, $t1); + $t1 = self::fe_sq($t1); + + # for (i = 1; i < 10; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 10; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t0, t1, t0); + # fe_sq(t1, t0); + $t0 = self::fe_mul($t1, $t0); + $t1 = self::fe_sq($t0); + + # for (i = 1; i < 50; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 50; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t1, t1, t0); + # fe_sq(t2, t1); + $t1 = self::fe_mul($t1, $t0); + $t2 = self::fe_sq($t1); + + # for (i = 1; i < 100; ++i) { + # fe_sq(t2, t2); + # } + for ($i = 1; $i < 100; ++$i) { + $t2 = self::fe_sq($t2); + } + + # fe_mul(t1, t2, t1); + # fe_sq(t1, t1); + $t1 = self::fe_mul($t2, $t1); + $t1 = self::fe_sq($t1); + + # for (i = 1; i < 50; ++i) { + # fe_sq(t1, t1); + # } + for ($i = 1; $i < 50; ++$i) { + $t1 = self::fe_sq($t1); + } + + # fe_mul(t0, t1, t0); + # fe_sq(t0, t0); + # fe_sq(t0, t0); + # fe_mul(out, t0, z); + $t0 = self::fe_mul($t1, $t0); + $t0 = self::fe_sq($t0); + $t0 = self::fe_sq($t0); + return self::fe_mul($t0, $z); + } + + /** + * Subtract two field elements. + * + * h = f - g + * + * Preconditions: + * |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc. + * |g| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc. + * + * Postconditions: + * |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $g + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedMethodCall + * @psalm-suppress MixedTypeCoercion + */ + public static function fe_sub(ParagonIE_Sodium_Core32_Curve25519_Fe $f, ParagonIE_Sodium_Core32_Curve25519_Fe $g) + { + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + $f[0]->subInt32($g[0]), + $f[1]->subInt32($g[1]), + $f[2]->subInt32($g[2]), + $f[3]->subInt32($g[3]), + $f[4]->subInt32($g[4]), + $f[5]->subInt32($g[5]), + $f[6]->subInt32($g[6]), + $f[7]->subInt32($g[7]), + $f[8]->subInt32($g[8]), + $f[9]->subInt32($g[9]) + ) + ); + } + + /** + * Add two group elements. + * + * r = p + q + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_Cached $q + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_add( + ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core32_Curve25519_Ge_Cached $q + ) { + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1(); + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->YplusX); + $r->Y = self::fe_mul($r->Y, $q->YminusX); + $r->T = self::fe_mul($q->T2d, $p->T); + $r->X = self::fe_mul($p->Z, $q->Z); + $t0 = self::fe_add($r->X, $r->X); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_add($t0, $r->T); + $r->T = self::fe_sub($t0, $r->T); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @ref https://github.com/jedisct1/libsodium/blob/157c4a80c13b117608aeae12178b2d38825f9f8f/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1185-L1215 + * @param string $a + * @return array + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayOffset + */ + public static function slide($a) + { + if (self::strlen($a) < 256) { + if (self::strlen($a) < 16) { + $a = str_pad($a, 256, '0', STR_PAD_RIGHT); + } + } + /** @var array $r */ + $r = array(); + for ($i = 0; $i < 256; ++$i) { + $r[$i] = (int) (1 & + ( + self::chrToInt($a[$i >> 3]) + >> + ($i & 7) + ) + ); + } + + for ($i = 0;$i < 256;++$i) { + if ($r[$i]) { + for ($b = 1;$b <= 6 && $i + $b < 256;++$b) { + if ($r[$i + $b]) { + if ($r[$i] + ($r[$i + $b] << $b) <= 15) { + $r[$i] += $r[$i + $b] << $b; + $r[$i + $b] = 0; + } elseif ($r[$i] - ($r[$i + $b] << $b) >= -15) { + $r[$i] -= $r[$i + $b] << $b; + for ($k = $i + $b; $k < 256; ++$k) { + if (!$r[$k]) { + $r[$k] = 1; + break; + } + $r[$k] = 0; + } + } else { + break; + } + } + } + } + } + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $s + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P3 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_frombytes_negate_vartime($s) + { + static $d = null; + if (!$d) { + /** @var ParagonIE_Sodium_Core32_Curve25519_Fe $d */ + $d = ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[0]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[1]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[2]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[3]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[4]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[5]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[6]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[7]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[8]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d[9]) + ) + ); + } + + # fe_frombytes(h->Y,s); + # fe_1(h->Z); + $h = new ParagonIE_Sodium_Core32_Curve25519_Ge_P3( + self::fe_0(), + self::fe_frombytes($s), + self::fe_1() + ); + + # fe_sq(u,h->Y); + # fe_mul(v,u,d); + # fe_sub(u,u,h->Z); /* u = y^2-1 */ + # fe_add(v,v,h->Z); /* v = dy^2+1 */ + $u = self::fe_sq($h->Y); + /** @var ParagonIE_Sodium_Core32_Curve25519_Fe $d */ + $v = self::fe_mul($u, $d); + $u = self::fe_sub($u, $h->Z); /* u = y^2 - 1 */ + $v = self::fe_add($v, $h->Z); /* v = dy^2 + 1 */ + + # fe_sq(v3,v); + # fe_mul(v3,v3,v); /* v3 = v^3 */ + # fe_sq(h->X,v3); + # fe_mul(h->X,h->X,v); + # fe_mul(h->X,h->X,u); /* x = uv^7 */ + $v3 = self::fe_sq($v); + $v3 = self::fe_mul($v3, $v); /* v3 = v^3 */ + $h->X = self::fe_sq($v3); + $h->X = self::fe_mul($h->X, $v); + $h->X = self::fe_mul($h->X, $u); /* x = uv^7 */ + + # fe_pow22523(h->X,h->X); /* x = (uv^7)^((q-5)/8) */ + # fe_mul(h->X,h->X,v3); + # fe_mul(h->X,h->X,u); /* x = uv^3(uv^7)^((q-5)/8) */ + $h->X = self::fe_pow22523($h->X); /* x = (uv^7)^((q-5)/8) */ + $h->X = self::fe_mul($h->X, $v3); + $h->X = self::fe_mul($h->X, $u); /* x = uv^3(uv^7)^((q-5)/8) */ + + # fe_sq(vxx,h->X); + # fe_mul(vxx,vxx,v); + # fe_sub(check,vxx,u); /* vx^2-u */ + $vxx = self::fe_sq($h->X); + $vxx = self::fe_mul($vxx, $v); + $check = self::fe_sub($vxx, $u); /* vx^2 - u */ + + # if (fe_isnonzero(check)) { + # fe_add(check,vxx,u); /* vx^2+u */ + # if (fe_isnonzero(check)) { + # return -1; + # } + # fe_mul(h->X,h->X,sqrtm1); + # } + if (self::fe_isnonzero($check)) { + $check = self::fe_add($vxx, $u); /* vx^2 + u */ + if (self::fe_isnonzero($check)) { + throw new RangeException('Internal check failed.'); + } + $h->X = self::fe_mul( + $h->X, + ParagonIE_Sodium_Core32_Curve25519_Fe::fromIntArray(self::$sqrtm1) + ); + } + + # if (fe_isnegative(h->X) == (s[31] >> 7)) { + # fe_neg(h->X,h->X); + # } + $i = self::chrToInt($s[31]); + if (self::fe_isnegative($h->X) === ($i >> 7)) { + $h->X = self::fe_neg($h->X); + } + + # fe_mul(h->T,h->X,h->Y); + $h->T = self::fe_mul($h->X, $h->Y); + return $h; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $R + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $q + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_madd( + ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $R, + ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $q + ) { + $r = clone $R; + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->yplusx); + $r->Y = self::fe_mul($r->Y, $q->yminusx); + $r->T = self::fe_mul($q->xy2d, $p->T); + $t0 = self::fe_add(clone $p->Z, clone $p->Z); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_add($t0, $r->T); + $r->T = self::fe_sub($t0, $r->T); + + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $R + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $q + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_msub( + ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $R, + ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $q + ) { + $r = clone $R; + + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->yminusx); + $r->Y = self::fe_mul($r->Y, $q->yplusx); + $r->T = self::fe_mul($q->xy2d, $p->T); + $t0 = self::fe_add($p->Z, $p->Z); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_sub($t0, $r->T); + $r->T = self::fe_add($t0, $r->T); + + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $p + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P2 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $p) + { + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_P2(); + $r->X = self::fe_mul($p->X, $p->T); + $r->Y = self::fe_mul($p->Y, $p->Z); + $r->Z = self::fe_mul($p->Z, $p->T); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $p + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P3 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 $p) + { + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_P3(); + $r->X = self::fe_mul($p->X, $p->T); + $r->Y = self::fe_mul($p->Y, $p->Z); + $r->Z = self::fe_mul($p->Z, $p->T); + $r->T = self::fe_mul($p->X, $p->Y); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P2 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p2_0() + { + return new ParagonIE_Sodium_Core32_Curve25519_Ge_P2( + self::fe_0(), + self::fe_1(), + self::fe_1() + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $p + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p2_dbl(ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $p) + { + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1(); + + $r->X = self::fe_sq($p->X); + $r->Z = self::fe_sq($p->Y); + $r->T = self::fe_sq2($p->Z); + $r->Y = self::fe_add($p->X, $p->Y); + $t0 = self::fe_sq($r->Y); + $r->Y = self::fe_add($r->Z, $r->X); + $r->Z = self::fe_sub($r->Z, $r->X); + $r->X = self::fe_sub($t0, $r->Y); + $r->T = self::fe_sub($r->T, $r->Z); + + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P3 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p3_0() + { + return new ParagonIE_Sodium_Core32_Curve25519_Ge_P3( + self::fe_0(), + self::fe_1(), + self::fe_1(), + self::fe_0() + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_Cached + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p3_to_cached(ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p) + { + static $d2 = null; + if ($d2 === null) { + $d2 = ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[0]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[1]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[2]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[3]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[4]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[5]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[6]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[7]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[8]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$d2[9]) + ) + ); + } + /** @var ParagonIE_Sodium_Core32_Curve25519_Fe $d2 */ + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_Cached(); + $r->YplusX = self::fe_add($p->Y, $p->X); + $r->YminusX = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_copy($p->Z); + $r->T2d = self::fe_mul($p->T, $d2); + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P2 + */ + public static function ge_p3_to_p2(ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p) + { + return new ParagonIE_Sodium_Core32_Curve25519_Ge_P2( + $p->X, + $p->Y, + $p->Z + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $h + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p3_tobytes(ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $h) + { + $recip = self::fe_invert($h->Z); + $x = self::fe_mul($h->X, $recip); + $y = self::fe_mul($h->Y, $recip); + $s = self::fe_tobytes($y); + $s[31] = self::intToChr( + self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7) + ); + return $s; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_p3_dbl(ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p) + { + $q = self::ge_p3_to_p2($p); + return self::ge_p2_dbl($q); + } + + /** + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp + * @throws SodiumException + * @throws TypeError + */ + public static function ge_precomp_0() + { + return new ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp( + self::fe_1(), + self::fe_1(), + self::fe_0() + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $b + * @param int $c + * @return int + * @psalm-suppress MixedReturnStatement + */ + public static function equal($b, $c) + { + return (int) ((($b ^ $c) - 1 & 0xffffffff) >> 31); + } + + /** + * @internal You should not use this directly from another application + * + * @param string|int $char + * @return int (1 = yes, 0 = no) + * @throws SodiumException + * @throws TypeError + */ + public static function negative($char) + { + if (is_int($char)) { + return $char < 0 ? 1 : 0; + } + /** @var string $char */ + /** @var int $x */ + $x = self::chrToInt(self::substr($char, 0, 1)); + return (int) ($x >> 31); + } + + /** + * Conditional move + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $t + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $u + * @param int $b + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp + * @throws SodiumException + * @throws TypeError + */ + public static function cmov( + ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $t, + ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $u, + $b + ) { + if (!is_int($b)) { + throw new InvalidArgumentException('Expected an integer.'); + } + return new ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp( + self::fe_cmov($t->yplusx, $u->yplusx, $b), + self::fe_cmov($t->yminusx, $u->yminusx, $b), + self::fe_cmov($t->xy2d, $u->xy2d, $b) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $pos + * @param int $b + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + * @psalm-suppress MixedArrayOffset + * @psalm-suppress MixedArgument + */ + public static function ge_select($pos = 0, $b = 0) + { + static $base = null; + if ($base === null) { + $base = array(); + foreach (self::$base as $i => $bas) { + for ($j = 0; $j < 8; ++$j) { + $base[$i][$j] = new ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp( + ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][0]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][1]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][2]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][3]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][4]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][5]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][6]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][7]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][8]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][0][9]) + ) + ), + ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][0]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][1]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][2]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][3]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][4]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][5]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][6]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][7]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][8]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][1][9]) + ) + ), + ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][0]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][1]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][2]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][3]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][4]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][5]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][6]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][7]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][8]), + ParagonIE_Sodium_Core32_Int32::fromInt($bas[$j][2][9]) + ) + ) + ); + } + } + } + if (!is_int($pos)) { + throw new InvalidArgumentException('Position must be an integer'); + } + if ($pos < 0 || $pos > 31) { + throw new RangeException('Position is out of range [0, 31]'); + } + + $bnegative = self::negative($b); + /** @var int $babs */ + $babs = $b - (((-$bnegative) & $b) << 1); + + $t = self::ge_precomp_0(); + for ($i = 0; $i < 8; ++$i) { + $t = self::cmov( + $t, + $base[$pos][$i], + self::equal($babs, $i + 1) + ); + } + $minusT = new ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp( + self::fe_copy($t->yminusx), + self::fe_copy($t->yplusx), + self::fe_neg($t->xy2d) + ); + return self::cmov($t, $minusT, -$bnegative); + } + + /** + * Subtract two group elements. + * + * r = p - q + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_Cached $q + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_sub( + ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $p, + ParagonIE_Sodium_Core32_Curve25519_Ge_Cached $q + ) { + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1(); + + $r->X = self::fe_add($p->Y, $p->X); + $r->Y = self::fe_sub($p->Y, $p->X); + $r->Z = self::fe_mul($r->X, $q->YminusX); + $r->Y = self::fe_mul($r->Y, $q->YplusX); + $r->T = self::fe_mul($q->T2d, $p->T); + $r->X = self::fe_mul($p->Z, $q->Z); + $t0 = self::fe_add($r->X, $r->X); + $r->X = self::fe_sub($r->Z, $r->Y); + $r->Y = self::fe_add($r->Z, $r->Y); + $r->Z = self::fe_sub($t0, $r->T); + $r->T = self::fe_add($t0, $r->T); + + return $r; + } + + /** + * Convert a group element to a byte string. + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $h + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function ge_tobytes(ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $h) + { + $recip = self::fe_invert($h->Z); + $x = self::fe_mul($h->X, $recip); + $y = self::fe_mul($h->Y, $recip); + $s = self::fe_tobytes($y); + $s[31] = self::intToChr( + self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7) + ); + return $s; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $a + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A + * @param string $b + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P2 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + */ + public static function ge_double_scalarmult_vartime( + $a, + ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A, + $b + ) { + /** @var array $Ai */ + $Ai = array(); + + static $Bi = array(); + /** @var array $Bi */ + if (!$Bi) { + for ($i = 0; $i < 8; ++$i) { + $Bi[$i] = new ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp( + ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][0]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][1]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][2]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][3]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][4]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][5]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][6]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][7]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][8]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][0][9]) + ) + ), + ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][0]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][1]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][2]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][3]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][4]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][5]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][6]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][7]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][8]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][1][9]) + ) + ), + ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( + array( + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][0]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][1]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][2]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][3]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][4]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][5]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][6]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][7]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][8]), + ParagonIE_Sodium_Core32_Int32::fromInt(self::$base2[$i][2][9]) + ) + ) + ); + } + } + + for ($i = 0; $i < 8; ++$i) { + $Ai[$i] = new ParagonIE_Sodium_Core32_Curve25519_Ge_Cached( + self::fe_0(), + self::fe_0(), + self::fe_0(), + self::fe_0() + ); + } + /** @var array $Ai */ + + # slide(aslide,a); + # slide(bslide,b); + /** @var array $aslide */ + $aslide = self::slide($a); + /** @var array $bslide */ + $bslide = self::slide($b); + + # ge_p3_to_cached(&Ai[0],A); + # ge_p3_dbl(&t,A); ge_p1p1_to_p3(&A2,&t); + $Ai[0] = self::ge_p3_to_cached($A); + $t = self::ge_p3_dbl($A); + $A2 = self::ge_p1p1_to_p3($t); + + # ge_add(&t,&A2,&Ai[0]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[1],&u); + # ge_add(&t,&A2,&Ai[1]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[2],&u); + # ge_add(&t,&A2,&Ai[2]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[3],&u); + # ge_add(&t,&A2,&Ai[3]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[4],&u); + # ge_add(&t,&A2,&Ai[4]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[5],&u); + # ge_add(&t,&A2,&Ai[5]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[6],&u); + # ge_add(&t,&A2,&Ai[6]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[7],&u); + for ($i = 0; $i < 7; ++$i) { + $t = self::ge_add($A2, $Ai[$i]); + $u = self::ge_p1p1_to_p3($t); + $Ai[$i + 1] = self::ge_p3_to_cached($u); + } + + # ge_p2_0(r); + $r = self::ge_p2_0(); + + # for (i = 255;i >= 0;--i) { + # if (aslide[i] || bslide[i]) break; + # } + $i = 255; + for (; $i >= 0; --$i) { + if ($aslide[$i] || $bslide[$i]) { + break; + } + } + + # for (;i >= 0;--i) { + for (; $i >= 0; --$i) { + # ge_p2_dbl(&t,r); + $t = self::ge_p2_dbl($r); + + # if (aslide[i] > 0) { + if ($aslide[$i] > 0) { + # ge_p1p1_to_p3(&u,&t); + # ge_add(&t,&u,&Ai[aslide[i]/2]); + $u = self::ge_p1p1_to_p3($t); + $t = self::ge_add( + $u, + $Ai[(int) floor($aslide[$i] / 2)] + ); + # } else if (aslide[i] < 0) { + } elseif ($aslide[$i] < 0) { + # ge_p1p1_to_p3(&u,&t); + # ge_sub(&t,&u,&Ai[(-aslide[i])/2]); + $u = self::ge_p1p1_to_p3($t); + $t = self::ge_sub( + $u, + $Ai[(int) floor(-$aslide[$i] / 2)] + ); + } + /** @var array $Bi */ + + # if (bslide[i] > 0) { + if ($bslide[$i] > 0) { + # ge_p1p1_to_p3(&u,&t); + # ge_madd(&t,&u,&Bi[bslide[i]/2]); + $u = self::ge_p1p1_to_p3($t); + /** @var int $index */ + $index = (int) floor($bslide[$i] / 2); + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $thisB */ + $thisB = $Bi[$index]; + $t = self::ge_madd($t, $u, $thisB); + # } else if (bslide[i] < 0) { + } elseif ($bslide[$i] < 0) { + # ge_p1p1_to_p3(&u,&t); + # ge_msub(&t,&u,&Bi[(-bslide[i])/2]); + $u = self::ge_p1p1_to_p3($t); + + /** @var int $index */ + $index = (int) floor(-$bslide[$i] / 2); + + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp $thisB */ + $thisB = $Bi[$index]; + $t = self::ge_msub($t, $u, $thisB); + } + # ge_p1p1_to_p2(r,&t); + $r = self::ge_p1p1_to_p2($t); + } + return $r; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $a + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P3 + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedOperand + * @throws SodiumException + * @throws TypeError + */ + public static function ge_scalarmult_base($a) + { + /** @var array $e */ + $e = array(); + $r = new ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1(); + + for ($i = 0; $i < 32; ++$i) { + /** @var int $dbl */ + $dbl = (int) $i << 1; + $e[$dbl] = (int) self::chrToInt($a[$i]) & 15; + $e[$dbl + 1] = (int) (self::chrToInt($a[$i]) >> 4) & 15; + } + + /** @var int $carry */ + $carry = 0; + for ($i = 0; $i < 63; ++$i) { + $e[$i] += $carry; + /** @var int $carry */ + $carry = $e[$i] + 8; + /** @var int $carry */ + $carry >>= 4; + $e[$i] -= $carry << 4; + } + + /** @var array $e */ + $e[63] += (int) $carry; + + $h = self::ge_p3_0(); + + for ($i = 1; $i < 64; $i += 2) { + $t = self::ge_select((int) floor($i / 2), (int) $e[$i]); + $r = self::ge_madd($r, $h, $t); + $h = self::ge_p1p1_to_p3($r); + } + + $r = self::ge_p3_dbl($h); + + $s = self::ge_p1p1_to_p2($r); + $r = self::ge_p2_dbl($s); + $s = self::ge_p1p1_to_p2($r); + $r = self::ge_p2_dbl($s); + $s = self::ge_p1p1_to_p2($r); + $r = self::ge_p2_dbl($s); + + $h = self::ge_p1p1_to_p3($r); + + for ($i = 0; $i < 64; $i += 2) { + $t = self::ge_select($i >> 1, (int) $e[$i]); + $r = self::ge_madd($r, $h, $t); + $h = self::ge_p1p1_to_p3($r); + } + return $h; + } + + /** + * Calculates (ab + c) mod l + * where l = 2^252 + 27742317777372353535851937790883648493 + * + * @internal You should not use this directly from another application + * + * @param string $a + * @param string $b + * @param string $c + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sc_muladd($a, $b, $c) + { + $a0 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($a, 0, 3))); + $a1 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5)); + $a2 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2)); + $a3 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7)); + $a4 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4)); + $a5 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1)); + $a6 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6)); + $a7 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3)); + $a8 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($a, 21, 3))); + $a9 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5)); + $a10 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2)); + $a11 = ParagonIE_Sodium_Core32_Int64::fromInt(0x1fffffff & (self::load_4(self::substr($a, 28, 4)) >> 7)); + $b0 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($b, 0, 3))); + $b1 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5)); + $b2 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2)); + $b3 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7)); + $b4 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4)); + $b5 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1)); + $b6 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6)); + $b7 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3)); + $b8 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($b, 21, 3))); + $b9 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5)); + $b10 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2)); + $b11 = ParagonIE_Sodium_Core32_Int64::fromInt(0x1fffffff & (self::load_4(self::substr($b, 28, 4)) >> 7)); + $c0 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($c, 0, 3))); + $c1 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($c, 2, 4)) >> 5)); + $c2 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($c, 5, 3)) >> 2)); + $c3 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($c, 7, 4)) >> 7)); + $c4 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($c, 10, 4)) >> 4)); + $c5 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($c, 13, 3)) >> 1)); + $c6 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($c, 15, 4)) >> 6)); + $c7 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($c, 18, 3)) >> 3)); + $c8 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($c, 21, 3))); + $c9 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($c, 23, 4)) >> 5)); + $c10 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($c, 26, 3)) >> 2)); + $c11 = ParagonIE_Sodium_Core32_Int64::fromInt(0x1fffffff & (self::load_4(self::substr($c, 28, 4)) >> 7)); + + /* Can't really avoid the pyramid here: */ + /** + * @var ParagonIE_Sodium_Core32_Int64 $s0 + * @var ParagonIE_Sodium_Core32_Int64 $s1 + * @var ParagonIE_Sodium_Core32_Int64 $s2 + * @var ParagonIE_Sodium_Core32_Int64 $s3 + * @var ParagonIE_Sodium_Core32_Int64 $s4 + * @var ParagonIE_Sodium_Core32_Int64 $s5 + * @var ParagonIE_Sodium_Core32_Int64 $s6 + * @var ParagonIE_Sodium_Core32_Int64 $s7 + * @var ParagonIE_Sodium_Core32_Int64 $s8 + * @var ParagonIE_Sodium_Core32_Int64 $s9 + * @var ParagonIE_Sodium_Core32_Int64 $s10 + * @var ParagonIE_Sodium_Core32_Int64 $s11 + * @var ParagonIE_Sodium_Core32_Int64 $s12 + * @var ParagonIE_Sodium_Core32_Int64 $s13 + * @var ParagonIE_Sodium_Core32_Int64 $s14 + * @var ParagonIE_Sodium_Core32_Int64 $s15 + * @var ParagonIE_Sodium_Core32_Int64 $s16 + * @var ParagonIE_Sodium_Core32_Int64 $s17 + * @var ParagonIE_Sodium_Core32_Int64 $s18 + * @var ParagonIE_Sodium_Core32_Int64 $s19 + * @var ParagonIE_Sodium_Core32_Int64 $s20 + * @var ParagonIE_Sodium_Core32_Int64 $s21 + * @var ParagonIE_Sodium_Core32_Int64 $s22 + * @var ParagonIE_Sodium_Core32_Int64 $s23 + */ + + $s0 = $c0->addInt64($a0->mulInt64($b0, 24)); + $s1 = $c1->addInt64($a0->mulInt64($b1, 24))->addInt64($a1->mulInt64($b0, 24)); + $s2 = $c2->addInt64($a0->mulInt64($b2, 24))->addInt64($a1->mulInt64($b1, 24))->addInt64($a2->mulInt64($b0, 24)); + $s3 = $c3->addInt64($a0->mulInt64($b3, 24))->addInt64($a1->mulInt64($b2, 24))->addInt64($a2->mulInt64($b1, 24)) + ->addInt64($a3->mulInt64($b0, 24)); + $s4 = $c4->addInt64($a0->mulInt64($b4, 24))->addInt64($a1->mulInt64($b3, 24))->addInt64($a2->mulInt64($b2, 24)) + ->addInt64($a3->mulInt64($b1, 24))->addInt64($a4->mulInt64($b0, 24)); + $s5 = $c5->addInt64($a0->mulInt64($b5, 24))->addInt64($a1->mulInt64($b4, 24))->addInt64($a2->mulInt64($b3, 24)) + ->addInt64($a3->mulInt64($b2, 24))->addInt64($a4->mulInt64($b1, 24))->addInt64($a5->mulInt64($b0, 24)); + $s6 = $c6->addInt64($a0->mulInt64($b6, 24))->addInt64($a1->mulInt64($b5, 24))->addInt64($a2->mulInt64($b4, 24)) + ->addInt64($a3->mulInt64($b3, 24))->addInt64($a4->mulInt64($b2, 24))->addInt64($a5->mulInt64($b1, 24)) + ->addInt64($a6->mulInt64($b0, 24)); + $s7 = $c7->addInt64($a0->mulInt64($b7, 24))->addInt64($a1->mulInt64($b6, 24))->addInt64($a2->mulInt64($b5, 24)) + ->addInt64($a3->mulInt64($b4, 24))->addInt64($a4->mulInt64($b3, 24))->addInt64($a5->mulInt64($b2, 24)) + ->addInt64($a6->mulInt64($b1, 24))->addInt64($a7->mulInt64($b0, 24)); + $s8 = $c8->addInt64($a0->mulInt64($b8, 24))->addInt64($a1->mulInt64($b7, 24))->addInt64($a2->mulInt64($b6, 24)) + ->addInt64($a3->mulInt64($b5, 24))->addInt64($a4->mulInt64($b4, 24))->addInt64($a5->mulInt64($b3, 24)) + ->addInt64($a6->mulInt64($b2, 24))->addInt64($a7->mulInt64($b1, 24))->addInt64($a8->mulInt64($b0, 24)); + $s9 = $c9->addInt64($a0->mulInt64($b9, 24))->addInt64($a1->mulInt64($b8, 24))->addInt64($a2->mulInt64($b7, 24)) + ->addInt64($a3->mulInt64($b6, 24))->addInt64($a4->mulInt64($b5, 24))->addInt64($a5->mulInt64($b4, 24)) + ->addInt64($a6->mulInt64($b3, 24))->addInt64($a7->mulInt64($b2, 24))->addInt64($a8->mulInt64($b1, 24)) + ->addInt64($a9->mulInt64($b0, 24)); + $s10 = $c10->addInt64($a0->mulInt64($b10, 24))->addInt64($a1->mulInt64($b9, 24))->addInt64($a2->mulInt64($b8, 24)) + ->addInt64($a3->mulInt64($b7, 24))->addInt64($a4->mulInt64($b6, 24))->addInt64($a5->mulInt64($b5, 24)) + ->addInt64($a6->mulInt64($b4, 24))->addInt64($a7->mulInt64($b3, 24))->addInt64($a8->mulInt64($b2, 24)) + ->addInt64($a9->mulInt64($b1, 24))->addInt64($a10->mulInt64($b0, 24)); + $s11 = $c11->addInt64($a0->mulInt64($b11, 24))->addInt64($a1->mulInt64($b10, 24))->addInt64($a2->mulInt64($b9, 24)) + ->addInt64($a3->mulInt64($b8, 24))->addInt64($a4->mulInt64($b7, 24))->addInt64($a5->mulInt64($b6, 24)) + ->addInt64($a6->mulInt64($b5, 24))->addInt64($a7->mulInt64($b4, 24))->addInt64($a8->mulInt64($b3, 24)) + ->addInt64($a9->mulInt64($b2, 24))->addInt64($a10->mulInt64($b1, 24))->addInt64($a11->mulInt64($b0, 24)); + $s12 = $a1->mulInt64($b11, 24)->addInt64($a2->mulInt64($b10, 24))->addInt64($a3->mulInt64($b9, 24)) + ->addInt64($a4->mulInt64($b8, 24))->addInt64($a5->mulInt64($b7, 24))->addInt64($a6->mulInt64($b6, 24)) + ->addInt64($a7->mulInt64($b5, 24))->addInt64($a8->mulInt64($b4, 24))->addInt64($a9->mulInt64($b3, 24)) + ->addInt64($a10->mulInt64($b2, 24))->addInt64($a11->mulInt64($b1, 24)); + $s13 = $a2->mulInt64($b11, 24)->addInt64($a3->mulInt64($b10, 24))->addInt64($a4->mulInt64($b9, 24)) + ->addInt64($a5->mulInt64($b8, 24))->addInt64($a6->mulInt64($b7, 24))->addInt64($a7->mulInt64($b6, 24)) + ->addInt64($a8->mulInt64($b5, 24))->addInt64($a9->mulInt64($b4, 24))->addInt64($a10->mulInt64($b3, 24)) + ->addInt64($a11->mulInt64($b2, 24)); + $s14 = $a3->mulInt64($b11, 24)->addInt64($a4->mulInt64($b10, 24))->addInt64($a5->mulInt64($b9, 24)) + ->addInt64($a6->mulInt64($b8, 24))->addInt64($a7->mulInt64($b7, 24))->addInt64($a8->mulInt64($b6, 24)) + ->addInt64($a9->mulInt64($b5, 24))->addInt64($a10->mulInt64($b4, 24))->addInt64($a11->mulInt64($b3, 24)); + $s15 = $a4->mulInt64($b11, 24)->addInt64($a5->mulInt64($b10, 24))->addInt64($a6->mulInt64($b9, 24)) + ->addInt64($a7->mulInt64($b8, 24))->addInt64($a8->mulInt64($b7, 24))->addInt64($a9->mulInt64($b6, 24)) + ->addInt64($a10->mulInt64($b5, 24))->addInt64($a11->mulInt64($b4, 24)); + $s16 = $a5->mulInt64($b11, 24)->addInt64($a6->mulInt64($b10, 24))->addInt64($a7->mulInt64($b9, 24)) + ->addInt64($a8->mulInt64($b8, 24))->addInt64($a9->mulInt64($b7, 24))->addInt64($a10->mulInt64($b6, 24)) + ->addInt64($a11->mulInt64($b5, 24)); + $s17 = $a6->mulInt64($b11, 24)->addInt64($a7->mulInt64($b10, 24))->addInt64($a8->mulInt64($b9, 24)) + ->addInt64($a9->mulInt64($b8, 24))->addInt64($a10->mulInt64($b7, 24))->addInt64($a11->mulInt64($b6, 24)); + $s18 = $a7->mulInt64($b11, 24)->addInt64($a8->mulInt64($b10, 24))->addInt64($a9->mulInt64($b9, 24)) + ->addInt64($a10->mulInt64($b8, 24))->addInt64($a11->mulInt64($b7, 24)); + $s19 = $a8->mulInt64($b11, 24)->addInt64($a9->mulInt64($b10, 24))->addInt64($a10->mulInt64($b9, 24)) + ->addInt64($a11->mulInt64($b8, 24)); + $s20 = $a9->mulInt64($b11, 24)->addInt64($a10->mulInt64($b10, 24))->addInt64($a11->mulInt64($b9, 24)); + $s21 = $a10->mulInt64($b11, 24)->addInt64($a11->mulInt64($b10, 24)); + $s22 = $a11->mulInt64($b11, 24); + $s23 = new ParagonIE_Sodium_Core32_Int64(); + + $carry0 = $s0->addInt(1 << 20)->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry2 = $s2->addInt(1 << 20)->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry4 = $s4->addInt(1 << 20)->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry6 = $s6->addInt(1 << 20)->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry8 = $s8->addInt(1 << 20)->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry10 = $s10->addInt(1 << 20)->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + $carry12 = $s12->addInt(1 << 20)->shiftRight(21); + $s13 = $s13->addInt64($carry12); + $s12 = $s12->subInt64($carry12->shiftLeft(21)); + $carry14 = $s14->addInt(1 << 20)->shiftRight(21); + $s15 = $s15->addInt64($carry14); + $s14 = $s14->subInt64($carry14->shiftLeft(21)); + $carry16 = $s16->addInt(1 << 20)->shiftRight(21); + $s17 = $s17->addInt64($carry16); + $s16 = $s16->subInt64($carry16->shiftLeft(21)); + $carry18 = $s18->addInt(1 << 20)->shiftRight(21); + $s19 = $s19->addInt64($carry18); + $s18 = $s18->subInt64($carry18->shiftLeft(21)); + $carry20 = $s20->addInt(1 << 20)->shiftRight(21); + $s21 = $s21->addInt64($carry20); + $s20 = $s20->subInt64($carry20->shiftLeft(21)); + $carry22 = $s22->addInt(1 << 20)->shiftRight(21); + $s23 = $s23->addInt64($carry22); + $s22 = $s22->subInt64($carry22->shiftLeft(21)); + + $carry1 = $s1->addInt(1 << 20)->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry3 = $s3->addInt(1 << 20)->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry5 = $s5->addInt(1 << 20)->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry7 = $s7->addInt(1 << 20)->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry9 = $s9->addInt(1 << 20)->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry11 = $s11->addInt(1 << 20)->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + $carry13 = $s13->addInt(1 << 20)->shiftRight(21); + $s14 = $s14->addInt64($carry13); + $s13 = $s13->subInt64($carry13->shiftLeft(21)); + $carry15 = $s15->addInt(1 << 20)->shiftRight(21); + $s16 = $s16->addInt64($carry15); + $s15 = $s15->subInt64($carry15->shiftLeft(21)); + $carry17 = $s17->addInt(1 << 20)->shiftRight(21); + $s18 = $s18->addInt64($carry17); + $s17 = $s17->subInt64($carry17->shiftLeft(21)); + $carry19 = $s19->addInt(1 << 20)->shiftRight(21); + $s20 = $s20->addInt64($carry19); + $s19 = $s19->subInt64($carry19->shiftLeft(21)); + $carry21 = $s21->addInt(1 << 20)->shiftRight(21); + $s22 = $s22->addInt64($carry21); + $s21 = $s21->subInt64($carry21->shiftLeft(21)); + + $s11 = $s11->addInt64($s23->mulInt(666643, 20)); + $s12 = $s12->addInt64($s23->mulInt(470296, 19)); + $s13 = $s13->addInt64($s23->mulInt(654183, 20)); + $s14 = $s14->subInt64($s23->mulInt(997805, 20)); + $s15 = $s15->addInt64($s23->mulInt(136657, 18)); + $s16 = $s16->subInt64($s23->mulInt(683901, 20)); + + $s10 = $s10->addInt64($s22->mulInt(666643, 20)); + $s11 = $s11->addInt64($s22->mulInt(470296, 19)); + $s12 = $s12->addInt64($s22->mulInt(654183, 20)); + $s13 = $s13->subInt64($s22->mulInt(997805, 20)); + $s14 = $s14->addInt64($s22->mulInt(136657, 18)); + $s15 = $s15->subInt64($s22->mulInt(683901, 20)); + + $s9 = $s9->addInt64($s21->mulInt(666643, 20)); + $s10 = $s10->addInt64($s21->mulInt(470296, 19)); + $s11 = $s11->addInt64($s21->mulInt(654183, 20)); + $s12 = $s12->subInt64($s21->mulInt(997805, 20)); + $s13 = $s13->addInt64($s21->mulInt(136657, 18)); + $s14 = $s14->subInt64($s21->mulInt(683901, 20)); + + $s8 = $s8->addInt64($s20->mulInt(666643, 20)); + $s9 = $s9->addInt64($s20->mulInt(470296, 19)); + $s10 = $s10->addInt64($s20->mulInt(654183, 20)); + $s11 = $s11->subInt64($s20->mulInt(997805, 20)); + $s12 = $s12->addInt64($s20->mulInt(136657, 18)); + $s13 = $s13->subInt64($s20->mulInt(683901, 20)); + + $s7 = $s7->addInt64($s19->mulInt(666643, 20)); + $s8 = $s8->addInt64($s19->mulInt(470296, 19)); + $s9 = $s9->addInt64($s19->mulInt(654183, 20)); + $s10 = $s10->subInt64($s19->mulInt(997805, 20)); + $s11 = $s11->addInt64($s19->mulInt(136657, 18)); + $s12 = $s12->subInt64($s19->mulInt(683901, 20)); + + $s6 = $s6->addInt64($s18->mulInt(666643, 20)); + $s7 = $s7->addInt64($s18->mulInt(470296, 19)); + $s8 = $s8->addInt64($s18->mulInt(654183, 20)); + $s9 = $s9->subInt64($s18->mulInt(997805, 20)); + $s10 = $s10->addInt64($s18->mulInt(136657, 18)); + $s11 = $s11->subInt64($s18->mulInt(683901, 20)); + + $carry6 = $s6->addInt(1 << 20)->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry8 = $s8->addInt(1 << 20)->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry10 = $s10->addInt(1 << 20)->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + $carry12 = $s12->addInt(1 << 20)->shiftRight(21); + $s13 = $s13->addInt64($carry12); + $s12 = $s12->subInt64($carry12->shiftLeft(21)); + $carry14 = $s14->addInt(1 << 20)->shiftRight(21); + $s15 = $s15->addInt64($carry14); + $s14 = $s14->subInt64($carry14->shiftLeft(21)); + $carry16 = $s16->addInt(1 << 20)->shiftRight(21); + $s17 = $s17->addInt64($carry16); + $s16 = $s16->subInt64($carry16->shiftLeft(21)); + + $carry7 = $s7->addInt(1 << 20)->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry9 = $s9->addInt(1 << 20)->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry11 = $s11->addInt(1 << 20)->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + $carry13 = $s13->addInt(1 << 20)->shiftRight(21); + $s14 = $s14->addInt64($carry13); + $s13 = $s13->subInt64($carry13->shiftLeft(21)); + $carry15 = $s15->addInt(1 << 20)->shiftRight(21); + $s16 = $s16->addInt64($carry15); + $s15 = $s15->subInt64($carry15->shiftLeft(21)); + + $s5 = $s5->addInt64($s17->mulInt(666643, 20)); + $s6 = $s6->addInt64($s17->mulInt(470296, 19)); + $s7 = $s7->addInt64($s17->mulInt(654183, 20)); + $s8 = $s8->subInt64($s17->mulInt(997805, 20)); + $s9 = $s9->addInt64($s17->mulInt(136657, 18)); + $s10 = $s10->subInt64($s17->mulInt(683901, 20)); + + $s4 = $s4->addInt64($s16->mulInt(666643, 20)); + $s5 = $s5->addInt64($s16->mulInt(470296, 19)); + $s6 = $s6->addInt64($s16->mulInt(654183, 20)); + $s7 = $s7->subInt64($s16->mulInt(997805, 20)); + $s8 = $s8->addInt64($s16->mulInt(136657, 18)); + $s9 = $s9->subInt64($s16->mulInt(683901, 20)); + + $s3 = $s3->addInt64($s15->mulInt(666643, 20)); + $s4 = $s4->addInt64($s15->mulInt(470296, 19)); + $s5 = $s5->addInt64($s15->mulInt(654183, 20)); + $s6 = $s6->subInt64($s15->mulInt(997805, 20)); + $s7 = $s7->addInt64($s15->mulInt(136657, 18)); + $s8 = $s8->subInt64($s15->mulInt(683901, 20)); + + $s2 = $s2->addInt64($s14->mulInt(666643, 20)); + $s3 = $s3->addInt64($s14->mulInt(470296, 19)); + $s4 = $s4->addInt64($s14->mulInt(654183, 20)); + $s5 = $s5->subInt64($s14->mulInt(997805, 20)); + $s6 = $s6->addInt64($s14->mulInt(136657, 18)); + $s7 = $s7->subInt64($s14->mulInt(683901, 20)); + + $s1 = $s1->addInt64($s13->mulInt(666643, 20)); + $s2 = $s2->addInt64($s13->mulInt(470296, 19)); + $s3 = $s3->addInt64($s13->mulInt(654183, 20)); + $s4 = $s4->subInt64($s13->mulInt(997805, 20)); + $s5 = $s5->addInt64($s13->mulInt(136657, 18)); + $s6 = $s6->subInt64($s13->mulInt(683901, 20)); + + $s0 = $s0->addInt64($s12->mulInt(666643, 20)); + $s1 = $s1->addInt64($s12->mulInt(470296, 19)); + $s2 = $s2->addInt64($s12->mulInt(654183, 20)); + $s3 = $s3->subInt64($s12->mulInt(997805, 20)); + $s4 = $s4->addInt64($s12->mulInt(136657, 18)); + $s5 = $s5->subInt64($s12->mulInt(683901, 20)); + $s12 = new ParagonIE_Sodium_Core32_Int64(); + + $carry0 = $s0->addInt(1 << 20)->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry2 = $s2->addInt(1 << 20)->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry4 = $s4->addInt(1 << 20)->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry6 = $s6->addInt(1 << 20)->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry8 = $s8->addInt(1 << 20)->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry10 = $s10->addInt(1 << 20)->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + + $carry1 = $s1->addInt(1 << 20)->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry3 = $s3->addInt(1 << 20)->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry5 = $s5->addInt(1 << 20)->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry7 = $s7->addInt(1 << 20)->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry9 = $s9->addInt(1 << 20)->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry11 = $s11->addInt(1 << 20)->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + + $s0 = $s0->addInt64($s12->mulInt(666643, 20)); + $s1 = $s1->addInt64($s12->mulInt(470296, 19)); + $s2 = $s2->addInt64($s12->mulInt(654183, 20)); + $s3 = $s3->subInt64($s12->mulInt(997805, 20)); + $s4 = $s4->addInt64($s12->mulInt(136657, 18)); + $s5 = $s5->subInt64($s12->mulInt(683901, 20)); + $s12 = new ParagonIE_Sodium_Core32_Int64(); + + $carry0 = $s0->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry1 = $s1->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry2 = $s2->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry3 = $s3->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry4 = $s4->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry5 = $s5->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry6 = $s6->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry7 = $s7->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry8 = $s8->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry9 = $s9->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry10 = $s10->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + $carry11 = $s11->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + + $s0 = $s0->addInt64($s12->mulInt(666643, 20)); + $s1 = $s1->addInt64($s12->mulInt(470296, 19)); + $s2 = $s2->addInt64($s12->mulInt(654183, 20)); + $s3 = $s3->subInt64($s12->mulInt(997805, 20)); + $s4 = $s4->addInt64($s12->mulInt(136657, 18)); + $s5 = $s5->subInt64($s12->mulInt(683901, 20)); + + $carry0 = $s0->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry1 = $s1->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry2 = $s2->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry3 = $s3->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry4 = $s4->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry5 = $s5->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry6 = $s6->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry7 = $s7->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry8 = $s10->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry9 = $s9->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry10 = $s10->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + + $S0 = $s0->toInt(); + $S1 = $s1->toInt(); + $S2 = $s2->toInt(); + $S3 = $s3->toInt(); + $S4 = $s4->toInt(); + $S5 = $s5->toInt(); + $S6 = $s6->toInt(); + $S7 = $s7->toInt(); + $S8 = $s8->toInt(); + $S9 = $s9->toInt(); + $S10 = $s10->toInt(); + $S11 = $s11->toInt(); + + /** + * @var array + */ + $arr = array( + (int) (0xff & ($S0 >> 0)), + (int) (0xff & ($S0 >> 8)), + (int) (0xff & (($S0 >> 16) | ($S1 << 5))), + (int) (0xff & ($S1 >> 3)), + (int) (0xff & ($S1 >> 11)), + (int) (0xff & (($S1 >> 19) | ($S2 << 2))), + (int) (0xff & ($S2 >> 6)), + (int) (0xff & (($S2 >> 14) | ($S3 << 7))), + (int) (0xff & ($S3 >> 1)), + (int) (0xff & ($S3 >> 9)), + (int) (0xff & (($S3 >> 17) | ($S4 << 4))), + (int) (0xff & ($S4 >> 4)), + (int) (0xff & ($S4 >> 12)), + (int) (0xff & (($S4 >> 20) | ($S5 << 1))), + (int) (0xff & ($S5 >> 7)), + (int) (0xff & (($S5 >> 15) | ($S6 << 6))), + (int) (0xff & ($S6 >> 2)), + (int) (0xff & ($S6 >> 10)), + (int) (0xff & (($S6 >> 18) | ($S7 << 3))), + (int) (0xff & ($S7 >> 5)), + (int) (0xff & ($S7 >> 13)), + (int) (0xff & ($S8 >> 0)), + (int) (0xff & ($S8 >> 8)), + (int) (0xff & (($S8 >> 16) | ($S9 << 5))), + (int) (0xff & ($S9 >> 3)), + (int) (0xff & ($S9 >> 11)), + (int) (0xff & (($S9 >> 19) | ($S10 << 2))), + (int) (0xff & ($S10 >> 6)), + (int) (0xff & (($S10 >> 14) | ($S11 << 7))), + (int) (0xff & ($S11 >> 1)), + (int) (0xff & ($S11 >> 9)), + (int) (0xff & ($S11 >> 17)) + ); + return self::intArrayToString($arr); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $s + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sc_reduce($s) + { + /** + * @var ParagonIE_Sodium_Core32_Int64 $s0 + * @var ParagonIE_Sodium_Core32_Int64 $s1 + * @var ParagonIE_Sodium_Core32_Int64 $s2 + * @var ParagonIE_Sodium_Core32_Int64 $s3 + * @var ParagonIE_Sodium_Core32_Int64 $s4 + * @var ParagonIE_Sodium_Core32_Int64 $s5 + * @var ParagonIE_Sodium_Core32_Int64 $s6 + * @var ParagonIE_Sodium_Core32_Int64 $s7 + * @var ParagonIE_Sodium_Core32_Int64 $s8 + * @var ParagonIE_Sodium_Core32_Int64 $s9 + * @var ParagonIE_Sodium_Core32_Int64 $s10 + * @var ParagonIE_Sodium_Core32_Int64 $s11 + * @var ParagonIE_Sodium_Core32_Int64 $s12 + * @var ParagonIE_Sodium_Core32_Int64 $s13 + * @var ParagonIE_Sodium_Core32_Int64 $s14 + * @var ParagonIE_Sodium_Core32_Int64 $s15 + * @var ParagonIE_Sodium_Core32_Int64 $s16 + * @var ParagonIE_Sodium_Core32_Int64 $s17 + * @var ParagonIE_Sodium_Core32_Int64 $s18 + * @var ParagonIE_Sodium_Core32_Int64 $s19 + * @var ParagonIE_Sodium_Core32_Int64 $s20 + * @var ParagonIE_Sodium_Core32_Int64 $s21 + * @var ParagonIE_Sodium_Core32_Int64 $s22 + * @var ParagonIE_Sodium_Core32_Int64 $s23 + */ + $s0 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($s, 0, 3))); + $s1 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5)); + $s2 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2)); + $s3 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 7, 4)) >> 7)); + $s4 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 10, 4)) >> 4)); + $s5 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 13, 3)) >> 1)); + $s6 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 15, 4)) >> 6)); + $s7 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 18, 4)) >> 3)); + $s8 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($s, 21, 3))); + $s9 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 23, 4)) >> 5)); + $s10 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 26, 3)) >> 2)); + $s11 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 28, 4)) >> 7)); + $s12 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 31, 4)) >> 4)); + $s13 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 34, 3)) >> 1)); + $s14 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 36, 4)) >> 6)); + $s15 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 39, 4)) >> 3)); + $s16 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & self::load_3(self::substr($s, 42, 3))); + $s17 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 44, 4)) >> 5)); + $s18 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 47, 3)) >> 2)); + $s19 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 49, 4)) >> 7)); + $s20 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 52, 4)) >> 4)); + $s21 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_3(self::substr($s, 55, 3)) >> 1)); + $s22 = ParagonIE_Sodium_Core32_Int64::fromInt(2097151 & (self::load_4(self::substr($s, 57, 4)) >> 6)); + $s23 = ParagonIE_Sodium_Core32_Int64::fromInt(0x1fffffff & (self::load_4(self::substr($s, 60, 4)) >> 3)); + + $s11 = $s11->addInt64($s23->mulInt(666643, 20)); + $s12 = $s12->addInt64($s23->mulInt(470296, 19)); + $s13 = $s13->addInt64($s23->mulInt(654183, 20)); + $s14 = $s14->subInt64($s23->mulInt(997805, 20)); + $s15 = $s15->addInt64($s23->mulInt(136657, 18)); + $s16 = $s16->subInt64($s23->mulInt(683901, 20)); + + $s10 = $s10->addInt64($s22->mulInt(666643, 20)); + $s11 = $s11->addInt64($s22->mulInt(470296, 19)); + $s12 = $s12->addInt64($s22->mulInt(654183, 20)); + $s13 = $s13->subInt64($s22->mulInt(997805, 20)); + $s14 = $s14->addInt64($s22->mulInt(136657, 18)); + $s15 = $s15->subInt64($s22->mulInt(683901, 20)); + + $s9 = $s9->addInt64($s21->mulInt(666643, 20)); + $s10 = $s10->addInt64($s21->mulInt(470296, 19)); + $s11 = $s11->addInt64($s21->mulInt(654183, 20)); + $s12 = $s12->subInt64($s21->mulInt(997805, 20)); + $s13 = $s13->addInt64($s21->mulInt(136657, 18)); + $s14 = $s14->subInt64($s21->mulInt(683901, 20)); + + $s8 = $s8->addInt64($s20->mulInt(666643, 20)); + $s9 = $s9->addInt64($s20->mulInt(470296, 19)); + $s10 = $s10->addInt64($s20->mulInt(654183, 20)); + $s11 = $s11->subInt64($s20->mulInt(997805, 20)); + $s12 = $s12->addInt64($s20->mulInt(136657, 18)); + $s13 = $s13->subInt64($s20->mulInt(683901, 20)); + + $s7 = $s7->addInt64($s19->mulInt(666643, 20)); + $s8 = $s8->addInt64($s19->mulInt(470296, 19)); + $s9 = $s9->addInt64($s19->mulInt(654183, 20)); + $s10 = $s10->subInt64($s19->mulInt(997805, 20)); + $s11 = $s11->addInt64($s19->mulInt(136657, 18)); + $s12 = $s12->subInt64($s19->mulInt(683901, 20)); + + $s6 = $s6->addInt64($s18->mulInt(666643, 20)); + $s7 = $s7->addInt64($s18->mulInt(470296, 19)); + $s8 = $s8->addInt64($s18->mulInt(654183, 20)); + $s9 = $s9->subInt64($s18->mulInt(997805, 20)); + $s10 = $s10->addInt64($s18->mulInt(136657, 18)); + $s11 = $s11->subInt64($s18->mulInt(683901, 20)); + + $carry6 = $s6->addInt(1 << 20)->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry8 = $s8->addInt(1 << 20)->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry10 = $s10->addInt(1 << 20)->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + $carry12 = $s12->addInt(1 << 20)->shiftRight(21); + $s13 = $s13->addInt64($carry12); + $s12 = $s12->subInt64($carry12->shiftLeft(21)); + $carry14 = $s14->addInt(1 << 20)->shiftRight(21); + $s15 = $s15->addInt64($carry14); + $s14 = $s14->subInt64($carry14->shiftLeft(21)); + $carry16 = $s16->addInt(1 << 20)->shiftRight(21); + $s17 = $s17->addInt64($carry16); + $s16 = $s16->subInt64($carry16->shiftLeft(21)); + + $carry7 = $s7->addInt(1 << 20)->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry9 = $s9->addInt(1 << 20)->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry11 = $s11->addInt(1 << 20)->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + $carry13 = $s13->addInt(1 << 20)->shiftRight(21); + $s14 = $s14->addInt64($carry13); + $s13 = $s13->subInt64($carry13->shiftLeft(21)); + $carry15 = $s15->addInt(1 << 20)->shiftRight(21); + $s16 = $s16->addInt64($carry15); + $s15 = $s15->subInt64($carry15->shiftLeft(21)); + + $s5 = $s5->addInt64($s17->mulInt(666643, 20)); + $s6 = $s6->addInt64($s17->mulInt(470296, 19)); + $s7 = $s7->addInt64($s17->mulInt(654183, 20)); + $s8 = $s8->subInt64($s17->mulInt(997805, 20)); + $s9 = $s9->addInt64($s17->mulInt(136657, 18)); + $s10 = $s10->subInt64($s17->mulInt(683901, 20)); + + $s4 = $s4->addInt64($s16->mulInt(666643, 20)); + $s5 = $s5->addInt64($s16->mulInt(470296, 19)); + $s6 = $s6->addInt64($s16->mulInt(654183, 20)); + $s7 = $s7->subInt64($s16->mulInt(997805, 20)); + $s8 = $s8->addInt64($s16->mulInt(136657, 18)); + $s9 = $s9->subInt64($s16->mulInt(683901, 20)); + + $s3 = $s3->addInt64($s15->mulInt(666643, 20)); + $s4 = $s4->addInt64($s15->mulInt(470296, 19)); + $s5 = $s5->addInt64($s15->mulInt(654183, 20)); + $s6 = $s6->subInt64($s15->mulInt(997805, 20)); + $s7 = $s7->addInt64($s15->mulInt(136657, 18)); + $s8 = $s8->subInt64($s15->mulInt(683901, 20)); + + $s2 = $s2->addInt64($s14->mulInt(666643, 20)); + $s3 = $s3->addInt64($s14->mulInt(470296, 19)); + $s4 = $s4->addInt64($s14->mulInt(654183, 20)); + $s5 = $s5->subInt64($s14->mulInt(997805, 20)); + $s6 = $s6->addInt64($s14->mulInt(136657, 18)); + $s7 = $s7->subInt64($s14->mulInt(683901, 20)); + + $s1 = $s1->addInt64($s13->mulInt(666643, 20)); + $s2 = $s2->addInt64($s13->mulInt(470296, 19)); + $s3 = $s3->addInt64($s13->mulInt(654183, 20)); + $s4 = $s4->subInt64($s13->mulInt(997805, 20)); + $s5 = $s5->addInt64($s13->mulInt(136657, 18)); + $s6 = $s6->subInt64($s13->mulInt(683901, 20)); + + $s0 = $s0->addInt64($s12->mulInt(666643, 20)); + $s1 = $s1->addInt64($s12->mulInt(470296, 19)); + $s2 = $s2->addInt64($s12->mulInt(654183, 20)); + $s3 = $s3->subInt64($s12->mulInt(997805, 20)); + $s4 = $s4->addInt64($s12->mulInt(136657, 18)); + $s5 = $s5->subInt64($s12->mulInt(683901, 20)); + $s12 = new ParagonIE_Sodium_Core32_Int64(); + + $carry0 = $s0->addInt(1 << 20)->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry2 = $s2->addInt(1 << 20)->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry4 = $s4->addInt(1 << 20)->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry6 = $s6->addInt(1 << 20)->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry8 = $s8->addInt(1 << 20)->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry10 = $s10->addInt(1 << 20)->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + $carry1 = $s1->addInt(1 << 20)->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry3 = $s3->addInt(1 << 20)->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry5 = $s5->addInt(1 << 20)->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry7 = $s7->addInt(1 << 20)->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry9 = $s9->addInt(1 << 20)->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry11 = $s11->addInt(1 << 20)->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + + $s0 = $s0->addInt64($s12->mulInt(666643, 20)); + $s1 = $s1->addInt64($s12->mulInt(470296, 19)); + $s2 = $s2->addInt64($s12->mulInt(654183, 20)); + $s3 = $s3->subInt64($s12->mulInt(997805, 20)); + $s4 = $s4->addInt64($s12->mulInt(136657, 18)); + $s5 = $s5->subInt64($s12->mulInt(683901, 20)); + $s12 = new ParagonIE_Sodium_Core32_Int64(); + + $carry0 = $s0->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry1 = $s1->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry2 = $s2->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry3 = $s3->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry4 = $s4->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry5 = $s5->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry6 = $s6->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry7 = $s7->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry8 = $s8->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry9 = $s9->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry10 = $s10->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + $carry11 = $s11->shiftRight(21); + $s12 = $s12->addInt64($carry11); + $s11 = $s11->subInt64($carry11->shiftLeft(21)); + + $s0 = $s0->addInt64($s12->mulInt(666643, 20)); + $s1 = $s1->addInt64($s12->mulInt(470296, 19)); + $s2 = $s2->addInt64($s12->mulInt(654183, 20)); + $s3 = $s3->subInt64($s12->mulInt(997805, 20)); + $s4 = $s4->addInt64($s12->mulInt(136657, 18)); + $s5 = $s5->subInt64($s12->mulInt(683901, 20)); + + $carry0 = $s0->shiftRight(21); + $s1 = $s1->addInt64($carry0); + $s0 = $s0->subInt64($carry0->shiftLeft(21)); + $carry1 = $s1->shiftRight(21); + $s2 = $s2->addInt64($carry1); + $s1 = $s1->subInt64($carry1->shiftLeft(21)); + $carry2 = $s2->shiftRight(21); + $s3 = $s3->addInt64($carry2); + $s2 = $s2->subInt64($carry2->shiftLeft(21)); + $carry3 = $s3->shiftRight(21); + $s4 = $s4->addInt64($carry3); + $s3 = $s3->subInt64($carry3->shiftLeft(21)); + $carry4 = $s4->shiftRight(21); + $s5 = $s5->addInt64($carry4); + $s4 = $s4->subInt64($carry4->shiftLeft(21)); + $carry5 = $s5->shiftRight(21); + $s6 = $s6->addInt64($carry5); + $s5 = $s5->subInt64($carry5->shiftLeft(21)); + $carry6 = $s6->shiftRight(21); + $s7 = $s7->addInt64($carry6); + $s6 = $s6->subInt64($carry6->shiftLeft(21)); + $carry7 = $s7->shiftRight(21); + $s8 = $s8->addInt64($carry7); + $s7 = $s7->subInt64($carry7->shiftLeft(21)); + $carry8 = $s8->shiftRight(21); + $s9 = $s9->addInt64($carry8); + $s8 = $s8->subInt64($carry8->shiftLeft(21)); + $carry9 = $s9->shiftRight(21); + $s10 = $s10->addInt64($carry9); + $s9 = $s9->subInt64($carry9->shiftLeft(21)); + $carry10 = $s10->shiftRight(21); + $s11 = $s11->addInt64($carry10); + $s10 = $s10->subInt64($carry10->shiftLeft(21)); + + $S0 = $s0->toInt32()->toInt(); + $S1 = $s1->toInt32()->toInt(); + $S2 = $s2->toInt32()->toInt(); + $S3 = $s3->toInt32()->toInt(); + $S4 = $s4->toInt32()->toInt(); + $S5 = $s5->toInt32()->toInt(); + $S6 = $s6->toInt32()->toInt(); + $S7 = $s7->toInt32()->toInt(); + $S8 = $s8->toInt32()->toInt(); + $S9 = $s9->toInt32()->toInt(); + $S10 = $s10->toInt32()->toInt(); + $S11 = $s11->toInt32()->toInt(); + + /** + * @var array + */ + $arr = array( + (int) ($S0 >> 0), + (int) ($S0 >> 8), + (int) (($S0 >> 16) | ($S1 << 5)), + (int) ($S1 >> 3), + (int) ($S1 >> 11), + (int) (($S1 >> 19) | ($S2 << 2)), + (int) ($S2 >> 6), + (int) (($S2 >> 14) | ($S3 << 7)), + (int) ($S3 >> 1), + (int) ($S3 >> 9), + (int) (($S3 >> 17) | ($S4 << 4)), + (int) ($S4 >> 4), + (int) ($S4 >> 12), + (int) (($S4 >> 20) | ($S5 << 1)), + (int) ($S5 >> 7), + (int) (($S5 >> 15) | ($S6 << 6)), + (int) ($S6 >> 2), + (int) ($S6 >> 10), + (int) (($S6 >> 18) | ($S7 << 3)), + (int) ($S7 >> 5), + (int) ($S7 >> 13), + (int) ($S8 >> 0), + (int) ($S8 >> 8), + (int) (($S8 >> 16) | ($S9 << 5)), + (int) ($S9 >> 3), + (int) ($S9 >> 11), + (int) (($S9 >> 19) | ($S10 << 2)), + (int) ($S10 >> 6), + (int) (($S10 >> 14) | ($S11 << 7)), + (int) ($S11 >> 1), + (int) ($S11 >> 9), + (int) $S11 >> 17 + ); + return self::intArrayToString($arr); + } + + /** + * multiply by the order of the main subgroup l = 2^252+27742317777372353535851937790883648493 + * + * @param ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A + * @return ParagonIE_Sodium_Core32_Curve25519_Ge_P3 + * @throws SodiumException + * @throws TypeError + */ + public static function ge_mul_l(ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A) + { + /** @var array $aslide */ + $aslide = array( + 13, 0, 0, 0, 0, -1, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, -5, 0, 0, 0, + 0, 0, 0, -3, 0, 0, 0, 0, -13, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 3, 0, + 0, 0, 0, -13, 0, 0, 0, 0, 5, 0, 0, 0, 0, 0, 0, 0, 0, 11, 0, 0, 0, + 0, 0, 11, 0, 0, 0, 0, -13, 0, 0, 0, 0, 0, 0, -3, 0, 0, 0, 0, 0, -1, + 0, 0, 0, 0, 3, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, 0, 15, 0, 0, 0, + 0, 0, -1, 0, 0, 0, 0, -1, 0, 0, 0, 0, 7, 0, 0, 0, 0, 5, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, + 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1 + ); + + /** @var array $Ai size 8 */ + $Ai = array(); + + # ge_p3_to_cached(&Ai[0], A); + $Ai[0] = self::ge_p3_to_cached($A); + # ge_p3_dbl(&t, A); + $t = self::ge_p3_dbl($A); + # ge_p1p1_to_p3(&A2, &t); + $A2 = self::ge_p1p1_to_p3($t); + + for ($i = 1; $i < 8; ++$i) { + # ge_add(&t, &A2, &Ai[0]); + $t = self::ge_add($A2, $Ai[$i - 1]); + # ge_p1p1_to_p3(&u, &t); + $u = self::ge_p1p1_to_p3($t); + # ge_p3_to_cached(&Ai[i], &u); + $Ai[$i] = self::ge_p3_to_cached($u); + } + + $r = self::ge_p3_0(); + for ($i = 252; $i >= 0; --$i) { + $t = self::ge_p3_dbl($r); + if ($aslide[$i] > 0) { + # ge_p1p1_to_p3(&u, &t); + $u = self::ge_p1p1_to_p3($t); + # ge_add(&t, &u, &Ai[aslide[i] / 2]); + $t = self::ge_add($u, $Ai[(int)($aslide[$i] / 2)]); + } elseif ($aslide[$i] < 0) { + # ge_p1p1_to_p3(&u, &t); + $u = self::ge_p1p1_to_p3($t); + # ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]); + $t = self::ge_sub($u, $Ai[(int)(-$aslide[$i] / 2)]); + } + } + # ge_p1p1_to_p3(r, &t); + return self::ge_p1p1_to_p3($t); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.php new file mode 100644 index 000000000..5fe10f72d --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Fe.php @@ -0,0 +1,185 @@ + + */ + protected $container = array(); + + /** + * @var int + */ + protected $size = 10; + + /** + * @internal You should not use this directly from another application + * + * @param array $array + * @param bool $save_indexes + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromArray($array, $save_indexes = null) + { + $count = count($array); + if ($save_indexes) { + $keys = array_keys($array); + } else { + $keys = range(0, $count - 1); + } + $array = array_values($array); + + $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + if ($save_indexes) { + for ($i = 0; $i < $count; ++$i) { + $array[$i]->overflow = 0; + $obj->offsetSet($keys[$i], $array[$i]); + } + } else { + for ($i = 0; $i < $count; ++$i) { + $array[$i]->overflow = 0; + $obj->offsetSet($i, $array[$i]); + } + } + return $obj; + } + + /** + * @internal You should not use this directly from another application + * + * @param array $array + * @param bool $save_indexes + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromIntArray($array, $save_indexes = null) + { + $count = count($array); + if ($save_indexes) { + $keys = array_keys($array); + } else { + $keys = range(0, $count - 1); + } + $array = array_values($array); + $set = array(); + /** @var int $i */ + /** @var int $v */ + foreach ($array as $i => $v) { + $set[$i] = ParagonIE_Sodium_Core32_Int32::fromInt($v); + } + + $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + if ($save_indexes) { + for ($i = 0; $i < $count; ++$i) { + $set[$i]->overflow = 0; + $obj->offsetSet($keys[$i], $set[$i]); + } + } else { + for ($i = 0; $i < $count; ++$i) { + $set[$i]->overflow = 0; + $obj->offsetSet($i, $set[$i]); + } + } + return $obj; + } + + /** + * @internal You should not use this directly from another application + * + * @param mixed $offset + * @param mixed $value + * @return void + * @throws SodiumException + * @throws TypeError + */ + public function offsetSet($offset, $value) + { + if (!($value instanceof ParagonIE_Sodium_Core32_Int32)) { + throw new InvalidArgumentException('Expected an instance of ParagonIE_Sodium_Core32_Int32'); + } + if (is_null($offset)) { + $this->container[] = $value; + } else { + ParagonIE_Sodium_Core32_Util::declareScalarType($offset, 'int', 1); + $this->container[(int) $offset] = $value; + } + } + + /** + * @internal You should not use this directly from another application + * + * @param mixed $offset + * @return bool + * @psalm-suppress MixedArrayOffset + */ + public function offsetExists($offset) + { + return isset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param mixed $offset + * @return void + * @psalm-suppress MixedArrayOffset + */ + public function offsetUnset($offset) + { + unset($this->container[$offset]); + } + + /** + * @internal You should not use this directly from another application + * + * @param mixed $offset + * @return ParagonIE_Sodium_Core32_Int32 + * @psalm-suppress MixedArrayOffset + */ + public function offsetGet($offset) + { + if (!isset($this->container[$offset])) { + $this->container[(int) $offset] = new ParagonIE_Sodium_Core32_Int32(); + } + /** @var ParagonIE_Sodium_Core32_Int32 $get */ + $get = $this->container[$offset]; + return $get; + } + + /** + * @internal You should not use this directly from another application + * + * @return array + */ + public function __debugInfo() + { + if (empty($this->container)) { + return array(); + } + $c = array( + (int) ($this->container[0]->toInt()), + (int) ($this->container[1]->toInt()), + (int) ($this->container[2]->toInt()), + (int) ($this->container[3]->toInt()), + (int) ($this->container[4]->toInt()), + (int) ($this->container[5]->toInt()), + (int) ($this->container[6]->toInt()), + (int) ($this->container[7]->toInt()), + (int) ($this->container[8]->toInt()), + (int) ($this->container[9]->toInt()) + ); + return array(implode(', ', $c)); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Cached.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Cached.php new file mode 100644 index 000000000..970481fdd --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Cached.php @@ -0,0 +1,65 @@ +YplusX = $YplusX; + if ($YminusX === null) { + $YminusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->YminusX = $YminusX; + if ($Z === null) { + $Z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->Z = $Z; + if ($T2d === null) { + $T2d = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->T2d = $T2d; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P1p1.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P1p1.php new file mode 100644 index 000000000..ff10b1d70 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P1p1.php @@ -0,0 +1,67 @@ +X = $x; + if ($y === null) { + $y = ParagonIE_Sodium_Core32_Curve25519::fe_0(); + } + $this->Y = $y; + if ($z === null) { + $z = ParagonIE_Sodium_Core32_Curve25519::fe_0(); + } + $this->Z = $z; + if ($t === null) { + $t = ParagonIE_Sodium_Core32_Curve25519::fe_0(); + } + $this->T = $t; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P2.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P2.php new file mode 100644 index 000000000..8a45a913e --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P2.php @@ -0,0 +1,54 @@ +X = $x; + if ($y === null) { + $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->Y = $y; + if ($z === null) { + $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->Z = $z; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P3.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P3.php new file mode 100644 index 000000000..c9e4b16d9 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/P3.php @@ -0,0 +1,65 @@ +X = $x; + if ($y === null) { + $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->Y = $y; + if ($z === null) { + $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->Z = $z; + if ($t === null) { + $t = new ParagonIE_Sodium_Core32_Curve25519_Fe(); + } + $this->T = $t; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Precomp.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Precomp.php new file mode 100644 index 000000000..b590b75de --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/Ge/Precomp.php @@ -0,0 +1,56 @@ +yplusx = $yplusx; + if ($yminusx === null) { + $yminusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); + } + $this->yminusx = $yminusx; + if ($xy2d === null) { + $xy2d = ParagonIE_Sodium_Core32_Curve25519::fe_0(); + } + $this->xy2d = $xy2d; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/H.php b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/H.php new file mode 100644 index 000000000..48c999a9f --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/H.php @@ -0,0 +1,1467 @@ +>>> Basically, int[32][8][3][10] + */ + protected static $base = array( + array( + array( + array(25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626, -11754271, -6079156, 2047605), + array(-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692, 5043384, 19500929, -15469378), + array(-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919, 11864899, -24514362, -4438546), + ), + array( + array(-12815894, -12976347, -21581243, 11784320, -25355658, -2750717, -11717903, -3814571, -358445, -10211303), + array(-21703237, 6903825, 27185491, 6451973, -29577724, -9554005, -15616551, 11189268, -26829678, -5319081), + array(26966642, 11152617, 32442495, 15396054, 14353839, -12752335, -3128826, -9541118, -15472047, -4166697), + ), + array( + array(15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600, -14772189, 28944400, -1550024), + array(16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577, -11775962, 7689662, 11199574), + array(30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774, 10017326, -17749093, -9920357), + ), + array( + array(-17036878, 13921892, 10945806, -6033431, 27105052, -16084379, -28926210, 15006023, 3284568, -6276540), + array(23599295, -8306047, -11193664, -7687416, 13236774, 10506355, 7464579, 9656445, 13059162, 10374397), + array(7798556, 16710257, 3033922, 2874086, 28997861, 2835604, 32406664, -3839045, -641708, -101325), + ), + array( + array(10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885, 14515107, -15438304, 10819380), + array(4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668, 12483688, -12668491, 5581306), + array(19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350, 13850243, -23678021, -15815942), + ), + array( + array(-15371964, -12862754, 32573250, 4720197, -26436522, 5875511, -19188627, -15224819, -9818940, -12085777), + array(-8549212, 109983, 15149363, 2178705, 22900618, 4543417, 3044240, -15689887, 1762328, 14866737), + array(-18199695, -15951423, -10473290, 1707278, -17185920, 3916101, -28236412, 3959421, 27914454, 4383652), + ), + array( + array(5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852, 5230134, -23952439, -15175766), + array(-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025, 16520125, 30598449, 7715701), + array(28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660, 1370708, 29794553, -1409300), + ), + array( + array(14499471, -2729599, -33191113, -4254652, 28494862, 14271267, 30290735, 10876454, -33154098, 2381726), + array(-7195431, -2655363, -14730155, 462251, -27724326, 3941372, -6236617, 3696005, -32300832, 15351955), + array(27431194, 8222322, 16448760, -3907995, -18707002, 11938355, -32961401, -2970515, 29551813, 10109425), + ), + ), + array( + array( + array(-13657040, -13155431, -31283750, 11777098, 21447386, 6519384, -2378284, -1627556, 10092783, -4764171), + array(27939166, 14210322, 4677035, 16277044, -22964462, -12398139, -32508754, 12005538, -17810127, 12803510), + array(17228999, -15661624, -1233527, 300140, -1224870, -11714777, 30364213, -9038194, 18016357, 4397660), + ), + array( + array(-10958843, -7690207, 4776341, -14954238, 27850028, -15602212, -26619106, 14544525, -17477504, 982639), + array(29253598, 15796703, -2863982, -9908884, 10057023, 3163536, 7332899, -4120128, -21047696, 9934963), + array(5793303, 16271923, -24131614, -10116404, 29188560, 1206517, -14747930, 4559895, -30123922, -10897950), + ), + array( + array(-27643952, -11493006, 16282657, -11036493, 28414021, -15012264, 24191034, 4541697, -13338309, 5500568), + array(12650548, -1497113, 9052871, 11355358, -17680037, -8400164, -17430592, 12264343, 10874051, 13524335), + array(25556948, -3045990, 714651, 2510400, 23394682, -10415330, 33119038, 5080568, -22528059, 5376628), + ), + array( + array(-26088264, -4011052, -17013699, -3537628, -6726793, 1920897, -22321305, -9447443, 4535768, 1569007), + array(-2255422, 14606630, -21692440, -8039818, 28430649, 8775819, -30494562, 3044290, 31848280, 12543772), + array(-22028579, 2943893, -31857513, 6777306, 13784462, -4292203, -27377195, -2062731, 7718482, 14474653), + ), + array( + array(2385315, 2454213, -22631320, 46603, -4437935, -15680415, 656965, -7236665, 24316168, -5253567), + array(13741529, 10911568, -33233417, -8603737, -20177830, -1033297, 33040651, -13424532, -20729456, 8321686), + array(21060490, -2212744, 15712757, -4336099, 1639040, 10656336, 23845965, -11874838, -9984458, 608372), + ), + array( + array(-13672732, -15087586, -10889693, -7557059, -6036909, 11305547, 1123968, -6780577, 27229399, 23887), + array(-23244140, -294205, -11744728, 14712571, -29465699, -2029617, 12797024, -6440308, -1633405, 16678954), + array(-29500620, 4770662, -16054387, 14001338, 7830047, 9564805, -1508144, -4795045, -17169265, 4904953), + ), + array( + array(24059557, 14617003, 19037157, -15039908, 19766093, -14906429, 5169211, 16191880, 2128236, -4326833), + array(-16981152, 4124966, -8540610, -10653797, 30336522, -14105247, -29806336, 916033, -6882542, -2986532), + array(-22630907, 12419372, -7134229, -7473371, -16478904, 16739175, 285431, 2763829, 15736322, 4143876), + ), + array( + array(2379352, 11839345, -4110402, -5988665, 11274298, 794957, 212801, -14594663, 23527084, -16458268), + array(33431127, -11130478, -17838966, -15626900, 8909499, 8376530, -32625340, 4087881, -15188911, -14416214), + array(1767683, 7197987, -13205226, -2022635, -13091350, 448826, 5799055, 4357868, -4774191, -16323038), + ), + ), + array( + array( + array(6721966, 13833823, -23523388, -1551314, 26354293, -11863321, 23365147, -3949732, 7390890, 2759800), + array(4409041, 2052381, 23373853, 10530217, 7676779, -12885954, 21302353, -4264057, 1244380, -12919645), + array(-4421239, 7169619, 4982368, -2957590, 30256825, -2777540, 14086413, 9208236, 15886429, 16489664), + ), + array( + array(1996075, 10375649, 14346367, 13311202, -6874135, -16438411, -13693198, 398369, -30606455, -712933), + array(-25307465, 9795880, -2777414, 14878809, -33531835, 14780363, 13348553, 12076947, -30836462, 5113182), + array(-17770784, 11797796, 31950843, 13929123, -25888302, 12288344, -30341101, -7336386, 13847711, 5387222), + ), + array( + array(-18582163, -3416217, 17824843, -2340966, 22744343, -10442611, 8763061, 3617786, -19600662, 10370991), + array(20246567, -14369378, 22358229, -543712, 18507283, -10413996, 14554437, -8746092, 32232924, 16763880), + array(9648505, 10094563, 26416693, 14745928, -30374318, -6472621, 11094161, 15689506, 3140038, -16510092), + ), + array( + array(-16160072, 5472695, 31895588, 4744994, 8823515, 10365685, -27224800, 9448613, -28774454, 366295), + array(19153450, 11523972, -11096490, -6503142, -24647631, 5420647, 28344573, 8041113, 719605, 11671788), + array(8678025, 2694440, -6808014, 2517372, 4964326, 11152271, -15432916, -15266516, 27000813, -10195553), + ), + array( + array(-15157904, 7134312, 8639287, -2814877, -7235688, 10421742, 564065, 5336097, 6750977, -14521026), + array(11836410, -3979488, 26297894, 16080799, 23455045, 15735944, 1695823, -8819122, 8169720, 16220347), + array(-18115838, 8653647, 17578566, -6092619, -8025777, -16012763, -11144307, -2627664, -5990708, -14166033), + ), + array( + array(-23308498, -10968312, 15213228, -10081214, -30853605, -11050004, 27884329, 2847284, 2655861, 1738395), + array(-27537433, -14253021, -25336301, -8002780, -9370762, 8129821, 21651608, -3239336, -19087449, -11005278), + array(1533110, 3437855, 23735889, 459276, 29970501, 11335377, 26030092, 5821408, 10478196, 8544890), + ), + array( + array(32173121, -16129311, 24896207, 3921497, 22579056, -3410854, 19270449, 12217473, 17789017, -3395995), + array(-30552961, -2228401, -15578829, -10147201, 13243889, 517024, 15479401, -3853233, 30460520, 1052596), + array(-11614875, 13323618, 32618793, 8175907, -15230173, 12596687, 27491595, -4612359, 3179268, -9478891), + ), + array( + array(31947069, -14366651, -4640583, -15339921, -15125977, -6039709, -14756777, -16411740, 19072640, -9511060), + array(11685058, 11822410, 3158003, -13952594, 33402194, -4165066, 5977896, -5215017, 473099, 5040608), + array(-20290863, 8198642, -27410132, 11602123, 1290375, -2799760, 28326862, 1721092, -19558642, -3131606), + ), + ), + array( + array( + array(7881532, 10687937, 7578723, 7738378, -18951012, -2553952, 21820786, 8076149, -27868496, 11538389), + array(-19935666, 3899861, 18283497, -6801568, -15728660, -11249211, 8754525, 7446702, -5676054, 5797016), + array(-11295600, -3793569, -15782110, -7964573, 12708869, -8456199, 2014099, -9050574, -2369172, -5877341), + ), + array( + array(-22472376, -11568741, -27682020, 1146375, 18956691, 16640559, 1192730, -3714199, 15123619, 10811505), + array(14352098, -3419715, -18942044, 10822655, 32750596, 4699007, -70363, 15776356, -28886779, -11974553), + array(-28241164, -8072475, -4978962, -5315317, 29416931, 1847569, -20654173, -16484855, 4714547, -9600655), + ), + array( + array(15200332, 8368572, 19679101, 15970074, -31872674, 1959451, 24611599, -4543832, -11745876, 12340220), + array(12876937, -10480056, 33134381, 6590940, -6307776, 14872440, 9613953, 8241152, 15370987, 9608631), + array(-4143277, -12014408, 8446281, -391603, 4407738, 13629032, -7724868, 15866074, -28210621, -8814099), + ), + array( + array(26660628, -15677655, 8393734, 358047, -7401291, 992988, -23904233, 858697, 20571223, 8420556), + array(14620715, 13067227, -15447274, 8264467, 14106269, 15080814, 33531827, 12516406, -21574435, -12476749), + array(236881, 10476226, 57258, -14677024, 6472998, 2466984, 17258519, 7256740, 8791136, 15069930), + ), + array( + array(1276410, -9371918, 22949635, -16322807, -23493039, -5702186, 14711875, 4874229, -30663140, -2331391), + array(5855666, 4990204, -13711848, 7294284, -7804282, 1924647, -1423175, -7912378, -33069337, 9234253), + array(20590503, -9018988, 31529744, -7352666, -2706834, 10650548, 31559055, -11609587, 18979186, 13396066), + ), + array( + array(24474287, 4968103, 22267082, 4407354, 24063882, -8325180, -18816887, 13594782, 33514650, 7021958), + array(-11566906, -6565505, -21365085, 15928892, -26158305, 4315421, -25948728, -3916677, -21480480, 12868082), + array(-28635013, 13504661, 19988037, -2132761, 21078225, 6443208, -21446107, 2244500, -12455797, -8089383), + ), + array( + array(-30595528, 13793479, -5852820, 319136, -25723172, -6263899, 33086546, 8957937, -15233648, 5540521), + array(-11630176, -11503902, -8119500, -7643073, 2620056, 1022908, -23710744, -1568984, -16128528, -14962807), + array(23152971, 775386, 27395463, 14006635, -9701118, 4649512, 1689819, 892185, -11513277, -15205948), + ), + array( + array(9770129, 9586738, 26496094, 4324120, 1556511, -3550024, 27453819, 4763127, -19179614, 5867134), + array(-32765025, 1927590, 31726409, -4753295, 23962434, -16019500, 27846559, 5931263, -29749703, -16108455), + array(27461885, -2977536, 22380810, 1815854, -23033753, -3031938, 7283490, -15148073, -19526700, 7734629), + ), + ), + array( + array( + array(-8010264, -9590817, -11120403, 6196038, 29344158, -13430885, 7585295, -3176626, 18549497, 15302069), + array(-32658337, -6171222, -7672793, -11051681, 6258878, 13504381, 10458790, -6418461, -8872242, 8424746), + array(24687205, 8613276, -30667046, -3233545, 1863892, -1830544, 19206234, 7134917, -11284482, -828919), + ), + array( + array(11334899, -9218022, 8025293, 12707519, 17523892, -10476071, 10243738, -14685461, -5066034, 16498837), + array(8911542, 6887158, -9584260, -6958590, 11145641, -9543680, 17303925, -14124238, 6536641, 10543906), + array(-28946384, 15479763, -17466835, 568876, -1497683, 11223454, -2669190, -16625574, -27235709, 8876771), + ), + array( + array(-25742899, -12566864, -15649966, -846607, -33026686, -796288, -33481822, 15824474, -604426, -9039817), + array(10330056, 70051, 7957388, -9002667, 9764902, 15609756, 27698697, -4890037, 1657394, 3084098), + array(10477963, -7470260, 12119566, -13250805, 29016247, -5365589, 31280319, 14396151, -30233575, 15272409), + ), + array( + array(-12288309, 3169463, 28813183, 16658753, 25116432, -5630466, -25173957, -12636138, -25014757, 1950504), + array(-26180358, 9489187, 11053416, -14746161, -31053720, 5825630, -8384306, -8767532, 15341279, 8373727), + array(28685821, 7759505, -14378516, -12002860, -31971820, 4079242, 298136, -10232602, -2878207, 15190420), + ), + array( + array(-32932876, 13806336, -14337485, -15794431, -24004620, 10940928, 8669718, 2742393, -26033313, -6875003), + array(-1580388, -11729417, -25979658, -11445023, -17411874, -10912854, 9291594, -16247779, -12154742, 6048605), + array(-30305315, 14843444, 1539301, 11864366, 20201677, 1900163, 13934231, 5128323, 11213262, 9168384), + ), + array( + array(-26280513, 11007847, 19408960, -940758, -18592965, -4328580, -5088060, -11105150, 20470157, -16398701), + array(-23136053, 9282192, 14855179, -15390078, -7362815, -14408560, -22783952, 14461608, 14042978, 5230683), + array(29969567, -2741594, -16711867, -8552442, 9175486, -2468974, 21556951, 3506042, -5933891, -12449708), + ), + array( + array(-3144746, 8744661, 19704003, 4581278, -20430686, 6830683, -21284170, 8971513, -28539189, 15326563), + array(-19464629, 10110288, -17262528, -3503892, -23500387, 1355669, -15523050, 15300988, -20514118, 9168260), + array(-5353335, 4488613, -23803248, 16314347, 7780487, -15638939, -28948358, 9601605, 33087103, -9011387), + ), + array( + array(-19443170, -15512900, -20797467, -12445323, -29824447, 10229461, -27444329, -15000531, -5996870, 15664672), + array(23294591, -16632613, -22650781, -8470978, 27844204, 11461195, 13099750, -2460356, 18151676, 13417686), + array(-24722913, -4176517, -31150679, 5988919, -26858785, 6685065, 1661597, -12551441, 15271676, -15452665), + ), + ), + array( + array( + array(11433042, -13228665, 8239631, -5279517, -1985436, -725718, -18698764, 2167544, -6921301, -13440182), + array(-31436171, 15575146, 30436815, 12192228, -22463353, 9395379, -9917708, -8638997, 12215110, 12028277), + array(14098400, 6555944, 23007258, 5757252, -15427832, -12950502, 30123440, 4617780, -16900089, -655628), + ), + array( + array(-4026201, -15240835, 11893168, 13718664, -14809462, 1847385, -15819999, 10154009, 23973261, -12684474), + array(-26531820, -3695990, -1908898, 2534301, -31870557, -16550355, 18341390, -11419951, 32013174, -10103539), + array(-25479301, 10876443, -11771086, -14625140, -12369567, 1838104, 21911214, 6354752, 4425632, -837822), + ), + array( + array(-10433389, -14612966, 22229858, -3091047, -13191166, 776729, -17415375, -12020462, 4725005, 14044970), + array(19268650, -7304421, 1555349, 8692754, -21474059, -9910664, 6347390, -1411784, -19522291, -16109756), + array(-24864089, 12986008, -10898878, -5558584, -11312371, -148526, 19541418, 8180106, 9282262, 10282508), + ), + array( + array(-26205082, 4428547, -8661196, -13194263, 4098402, -14165257, 15522535, 8372215, 5542595, -10702683), + array(-10562541, 14895633, 26814552, -16673850, -17480754, -2489360, -2781891, 6993761, -18093885, 10114655), + array(-20107055, -929418, 31422704, 10427861, -7110749, 6150669, -29091755, -11529146, 25953725, -106158), + ), + array( + array(-4234397, -8039292, -9119125, 3046000, 2101609, -12607294, 19390020, 6094296, -3315279, 12831125), + array(-15998678, 7578152, 5310217, 14408357, -33548620, -224739, 31575954, 6326196, 7381791, -2421839), + array(-20902779, 3296811, 24736065, -16328389, 18374254, 7318640, 6295303, 8082724, -15362489, 12339664), + ), + array( + array(27724736, 2291157, 6088201, -14184798, 1792727, 5857634, 13848414, 15768922, 25091167, 14856294), + array(-18866652, 8331043, 24373479, 8541013, -701998, -9269457, 12927300, -12695493, -22182473, -9012899), + array(-11423429, -5421590, 11632845, 3405020, 30536730, -11674039, -27260765, 13866390, 30146206, 9142070), + ), + array( + array(3924129, -15307516, -13817122, -10054960, 12291820, -668366, -27702774, 9326384, -8237858, 4171294), + array(-15921940, 16037937, 6713787, 16606682, -21612135, 2790944, 26396185, 3731949, 345228, -5462949), + array(-21327538, 13448259, 25284571, 1143661, 20614966, -8849387, 2031539, -12391231, -16253183, -13582083), + ), + array( + array(31016211, -16722429, 26371392, -14451233, -5027349, 14854137, 17477601, 3842657, 28012650, -16405420), + array(-5075835, 9368966, -8562079, -4600902, -15249953, 6970560, -9189873, 16292057, -8867157, 3507940), + array(29439664, 3537914, 23333589, 6997794, -17555561, -11018068, -15209202, -15051267, -9164929, 6580396), + ), + ), + array( + array( + array(-12185861, -7679788, 16438269, 10826160, -8696817, -6235611, 17860444, -9273846, -2095802, 9304567), + array(20714564, -4336911, 29088195, 7406487, 11426967, -5095705, 14792667, -14608617, 5289421, -477127), + array(-16665533, -10650790, -6160345, -13305760, 9192020, -1802462, 17271490, 12349094, 26939669, -3752294), + ), + array( + array(-12889898, 9373458, 31595848, 16374215, 21471720, 13221525, -27283495, -12348559, -3698806, 117887), + array(22263325, -6560050, 3984570, -11174646, -15114008, -566785, 28311253, 5358056, -23319780, 541964), + array(16259219, 3261970, 2309254, -15534474, -16885711, -4581916, 24134070, -16705829, -13337066, -13552195), + ), + array( + array(9378160, -13140186, -22845982, -12745264, 28198281, -7244098, -2399684, -717351, 690426, 14876244), + array(24977353, -314384, -8223969, -13465086, 28432343, -1176353, -13068804, -12297348, -22380984, 6618999), + array(-1538174, 11685646, 12944378, 13682314, -24389511, -14413193, 8044829, -13817328, 32239829, -5652762), + ), + array( + array(-18603066, 4762990, -926250, 8885304, -28412480, -3187315, 9781647, -10350059, 32779359, 5095274), + array(-33008130, -5214506, -32264887, -3685216, 9460461, -9327423, -24601656, 14506724, 21639561, -2630236), + array(-16400943, -13112215, 25239338, 15531969, 3987758, -4499318, -1289502, -6863535, 17874574, 558605), + ), + array( + array(-13600129, 10240081, 9171883, 16131053, -20869254, 9599700, 33499487, 5080151, 2085892, 5119761), + array(-22205145, -2519528, -16381601, 414691, -25019550, 2170430, 30634760, -8363614, -31999993, -5759884), + array(-6845704, 15791202, 8550074, -1312654, 29928809, -12092256, 27534430, -7192145, -22351378, 12961482), + ), + array( + array(-24492060, -9570771, 10368194, 11582341, -23397293, -2245287, 16533930, 8206996, -30194652, -5159638), + array(-11121496, -3382234, 2307366, 6362031, -135455, 8868177, -16835630, 7031275, 7589640, 8945490), + array(-32152748, 8917967, 6661220, -11677616, -1192060, -15793393, 7251489, -11182180, 24099109, -14456170), + ), + array( + array(5019558, -7907470, 4244127, -14714356, -26933272, 6453165, -19118182, -13289025, -6231896, -10280736), + array(10853594, 10721687, 26480089, 5861829, -22995819, 1972175, -1866647, -10557898, -3363451, -6441124), + array(-17002408, 5906790, 221599, -6563147, 7828208, -13248918, 24362661, -2008168, -13866408, 7421392), + ), + array( + array(8139927, -6546497, 32257646, -5890546, 30375719, 1886181, -21175108, 15441252, 28826358, -4123029), + array(6267086, 9695052, 7709135, -16603597, -32869068, -1886135, 14795160, -7840124, 13746021, -1742048), + array(28584902, 7787108, -6732942, -15050729, 22846041, -7571236, -3181936, -363524, 4771362, -8419958), + ), + ), + array( + array( + array(24949256, 6376279, -27466481, -8174608, -18646154, -9930606, 33543569, -12141695, 3569627, 11342593), + array(26514989, 4740088, 27912651, 3697550, 19331575, -11472339, 6809886, 4608608, 7325975, -14801071), + array(-11618399, -14554430, -24321212, 7655128, -1369274, 5214312, -27400540, 10258390, -17646694, -8186692), + ), + array( + array(11431204, 15823007, 26570245, 14329124, 18029990, 4796082, -31446179, 15580664, 9280358, -3973687), + array(-160783, -10326257, -22855316, -4304997, -20861367, -13621002, -32810901, -11181622, -15545091, 4387441), + array(-20799378, 12194512, 3937617, -5805892, -27154820, 9340370, -24513992, 8548137, 20617071, -7482001), + ), + array( + array(-938825, -3930586, -8714311, 16124718, 24603125, -6225393, -13775352, -11875822, 24345683, 10325460), + array(-19855277, -1568885, -22202708, 8714034, 14007766, 6928528, 16318175, -1010689, 4766743, 3552007), + array(-21751364, -16730916, 1351763, -803421, -4009670, 3950935, 3217514, 14481909, 10988822, -3994762), + ), + array( + array(15564307, -14311570, 3101243, 5684148, 30446780, -8051356, 12677127, -6505343, -8295852, 13296005), + array(-9442290, 6624296, -30298964, -11913677, -4670981, -2057379, 31521204, 9614054, -30000824, 12074674), + array(4771191, -135239, 14290749, -13089852, 27992298, 14998318, -1413936, -1556716, 29832613, -16391035), + ), + array( + array(7064884, -7541174, -19161962, -5067537, -18891269, -2912736, 25825242, 5293297, -27122660, 13101590), + array(-2298563, 2439670, -7466610, 1719965, -27267541, -16328445, 32512469, -5317593, -30356070, -4190957), + array(-30006540, 10162316, -33180176, 3981723, -16482138, -13070044, 14413974, 9515896, 19568978, 9628812), + ), + array( + array(33053803, 199357, 15894591, 1583059, 27380243, -4580435, -17838894, -6106839, -6291786, 3437740), + array(-18978877, 3884493, 19469877, 12726490, 15913552, 13614290, -22961733, 70104, 7463304, 4176122), + array(-27124001, 10659917, 11482427, -16070381, 12771467, -6635117, -32719404, -5322751, 24216882, 5944158), + ), + array( + array(8894125, 7450974, -2664149, -9765752, -28080517, -12389115, 19345746, 14680796, 11632993, 5847885), + array(26942781, -2315317, 9129564, -4906607, 26024105, 11769399, -11518837, 6367194, -9727230, 4782140), + array(19916461, -4828410, -22910704, -11414391, 25606324, -5972441, 33253853, 8220911, 6358847, -1873857), + ), + array( + array(801428, -2081702, 16569428, 11065167, 29875704, 96627, 7908388, -4480480, -13538503, 1387155), + array(19646058, 5720633, -11416706, 12814209, 11607948, 12749789, 14147075, 15156355, -21866831, 11835260), + array(19299512, 1155910, 28703737, 14890794, 2925026, 7269399, 26121523, 15467869, -26560550, 5052483), + ), + ), + array( + array( + array(-3017432, 10058206, 1980837, 3964243, 22160966, 12322533, -6431123, -12618185, 12228557, -7003677), + array(32944382, 14922211, -22844894, 5188528, 21913450, -8719943, 4001465, 13238564, -6114803, 8653815), + array(22865569, -4652735, 27603668, -12545395, 14348958, 8234005, 24808405, 5719875, 28483275, 2841751), + ), + array( + array(-16420968, -1113305, -327719, -12107856, 21886282, -15552774, -1887966, -315658, 19932058, -12739203), + array(-11656086, 10087521, -8864888, -5536143, -19278573, -3055912, 3999228, 13239134, -4777469, -13910208), + array(1382174, -11694719, 17266790, 9194690, -13324356, 9720081, 20403944, 11284705, -14013818, 3093230), + ), + array( + array(16650921, -11037932, -1064178, 1570629, -8329746, 7352753, -302424, 16271225, -24049421, -6691850), + array(-21911077, -5927941, -4611316, -5560156, -31744103, -10785293, 24123614, 15193618, -21652117, -16739389), + array(-9935934, -4289447, -25279823, 4372842, 2087473, 10399484, 31870908, 14690798, 17361620, 11864968), + ), + array( + array(-11307610, 6210372, 13206574, 5806320, -29017692, -13967200, -12331205, -7486601, -25578460, -16240689), + array(14668462, -12270235, 26039039, 15305210, 25515617, 4542480, 10453892, 6577524, 9145645, -6443880), + array(5974874, 3053895, -9433049, -10385191, -31865124, 3225009, -7972642, 3936128, -5652273, -3050304), + ), + array( + array(30625386, -4729400, -25555961, -12792866, -20484575, 7695099, 17097188, -16303496, -27999779, 1803632), + array(-3553091, 9865099, -5228566, 4272701, -5673832, -16689700, 14911344, 12196514, -21405489, 7047412), + array(20093277, 9920966, -11138194, -5343857, 13161587, 12044805, -32856851, 4124601, -32343828, -10257566), + ), + array( + array(-20788824, 14084654, -13531713, 7842147, 19119038, -13822605, 4752377, -8714640, -21679658, 2288038), + array(-26819236, -3283715, 29965059, 3039786, -14473765, 2540457, 29457502, 14625692, -24819617, 12570232), + array(-1063558, -11551823, 16920318, 12494842, 1278292, -5869109, -21159943, -3498680, -11974704, 4724943), + ), + array( + array(17960970, -11775534, -4140968, -9702530, -8876562, -1410617, -12907383, -8659932, -29576300, 1903856), + array(23134274, -14279132, -10681997, -1611936, 20684485, 15770816, -12989750, 3190296, 26955097, 14109738), + array(15308788, 5320727, -30113809, -14318877, 22902008, 7767164, 29425325, -11277562, 31960942, 11934971), + ), + array( + array(-27395711, 8435796, 4109644, 12222639, -24627868, 14818669, 20638173, 4875028, 10491392, 1379718), + array(-13159415, 9197841, 3875503, -8936108, -1383712, -5879801, 33518459, 16176658, 21432314, 12180697), + array(-11787308, 11500838, 13787581, -13832590, -22430679, 10140205, 1465425, 12689540, -10301319, -13872883), + ), + ), + array( + array( + array(5414091, -15386041, -21007664, 9643570, 12834970, 1186149, -2622916, -1342231, 26128231, 6032912), + array(-26337395, -13766162, 32496025, -13653919, 17847801, -12669156, 3604025, 8316894, -25875034, -10437358), + array(3296484, 6223048, 24680646, -12246460, -23052020, 5903205, -8862297, -4639164, 12376617, 3188849), + ), + array( + array(29190488, -14659046, 27549113, -1183516, 3520066, -10697301, 32049515, -7309113, -16109234, -9852307), + array(-14744486, -9309156, 735818, -598978, -20407687, -5057904, 25246078, -15795669, 18640741, -960977), + array(-6928835, -16430795, 10361374, 5642961, 4910474, 12345252, -31638386, -494430, 10530747, 1053335), + ), + array( + array(-29265967, -14186805, -13538216, -12117373, -19457059, -10655384, -31462369, -2948985, 24018831, 15026644), + array(-22592535, -3145277, -2289276, 5953843, -13440189, 9425631, 25310643, 13003497, -2314791, -15145616), + array(-27419985, -603321, -8043984, -1669117, -26092265, 13987819, -27297622, 187899, -23166419, -2531735), + ), + array( + array(-21744398, -13810475, 1844840, 5021428, -10434399, -15911473, 9716667, 16266922, -5070217, 726099), + array(29370922, -6053998, 7334071, -15342259, 9385287, 2247707, -13661962, -4839461, 30007388, -15823341), + array(-936379, 16086691, 23751945, -543318, -1167538, -5189036, 9137109, 730663, 9835848, 4555336), + ), + array( + array(-23376435, 1410446, -22253753, -12899614, 30867635, 15826977, 17693930, 544696, -11985298, 12422646), + array(31117226, -12215734, -13502838, 6561947, -9876867, -12757670, -5118685, -4096706, 29120153, 13924425), + array(-17400879, -14233209, 19675799, -2734756, -11006962, -5858820, -9383939, -11317700, 7240931, -237388), + ), + array( + array(-31361739, -11346780, -15007447, -5856218, -22453340, -12152771, 1222336, 4389483, 3293637, -15551743), + array(-16684801, -14444245, 11038544, 11054958, -13801175, -3338533, -24319580, 7733547, 12796905, -6335822), + array(-8759414, -10817836, -25418864, 10783769, -30615557, -9746811, -28253339, 3647836, 3222231, -11160462), + ), + array( + array(18606113, 1693100, -25448386, -15170272, 4112353, 10045021, 23603893, -2048234, -7550776, 2484985), + array(9255317, -3131197, -12156162, -1004256, 13098013, -9214866, 16377220, -2102812, -19802075, -3034702), + array(-22729289, 7496160, -5742199, 11329249, 19991973, -3347502, -31718148, 9936966, -30097688, -10618797), + ), + array( + array(21878590, -5001297, 4338336, 13643897, -3036865, 13160960, 19708896, 5415497, -7360503, -4109293), + array(27736861, 10103576, 12500508, 8502413, -3413016, -9633558, 10436918, -1550276, -23659143, -8132100), + array(19492550, -12104365, -29681976, -852630, -3208171, 12403437, 30066266, 8367329, 13243957, 8709688), + ), + ), + array( + array( + array(12015105, 2801261, 28198131, 10151021, 24818120, -4743133, -11194191, -5645734, 5150968, 7274186), + array(2831366, -12492146, 1478975, 6122054, 23825128, -12733586, 31097299, 6083058, 31021603, -9793610), + array(-2529932, -2229646, 445613, 10720828, -13849527, -11505937, -23507731, 16354465, 15067285, -14147707), + ), + array( + array(7840942, 14037873, -33364863, 15934016, -728213, -3642706, 21403988, 1057586, -19379462, -12403220), + array(915865, -16469274, 15608285, -8789130, -24357026, 6060030, -17371319, 8410997, -7220461, 16527025), + array(32922597, -556987, 20336074, -16184568, 10903705, -5384487, 16957574, 52992, 23834301, 6588044), + ), + array( + array(32752030, 11232950, 3381995, -8714866, 22652988, -10744103, 17159699, 16689107, -20314580, -1305992), + array(-4689649, 9166776, -25710296, -10847306, 11576752, 12733943, 7924251, -2752281, 1976123, -7249027), + array(21251222, 16309901, -2983015, -6783122, 30810597, 12967303, 156041, -3371252, 12331345, -8237197), + ), + array( + array(8651614, -4477032, -16085636, -4996994, 13002507, 2950805, 29054427, -5106970, 10008136, -4667901), + array(31486080, 15114593, -14261250, 12951354, 14369431, -7387845, 16347321, -13662089, 8684155, -10532952), + array(19443825, 11385320, 24468943, -9659068, -23919258, 2187569, -26263207, -6086921, 31316348, 14219878), + ), + array( + array(-28594490, 1193785, 32245219, 11392485, 31092169, 15722801, 27146014, 6992409, 29126555, 9207390), + array(32382935, 1110093, 18477781, 11028262, -27411763, -7548111, -4980517, 10843782, -7957600, -14435730), + array(2814918, 7836403, 27519878, -7868156, -20894015, -11553689, -21494559, 8550130, 28346258, 1994730), + ), + array( + array(-19578299, 8085545, -14000519, -3948622, 2785838, -16231307, -19516951, 7174894, 22628102, 8115180), + array(-30405132, 955511, -11133838, -15078069, -32447087, -13278079, -25651578, 3317160, -9943017, 930272), + array(-15303681, -6833769, 28856490, 1357446, 23421993, 1057177, 24091212, -1388970, -22765376, -10650715), + ), + array( + array(-22751231, -5303997, -12907607, -12768866, -15811511, -7797053, -14839018, -16554220, -1867018, 8398970), + array(-31969310, 2106403, -4736360, 1362501, 12813763, 16200670, 22981545, -6291273, 18009408, -15772772), + array(-17220923, -9545221, -27784654, 14166835, 29815394, 7444469, 29551787, -3727419, 19288549, 1325865), + ), + array( + array(15100157, -15835752, -23923978, -1005098, -26450192, 15509408, 12376730, -3479146, 33166107, -8042750), + array(20909231, 13023121, -9209752, 16251778, -5778415, -8094914, 12412151, 10018715, 2213263, -13878373), + array(32529814, -11074689, 30361439, -16689753, -9135940, 1513226, 22922121, 6382134, -5766928, 8371348), + ), + ), + array( + array( + array(9923462, 11271500, 12616794, 3544722, -29998368, -1721626, 12891687, -8193132, -26442943, 10486144), + array(-22597207, -7012665, 8587003, -8257861, 4084309, -12970062, 361726, 2610596, -23921530, -11455195), + array(5408411, -1136691, -4969122, 10561668, 24145918, 14240566, 31319731, -4235541, 19985175, -3436086), + ), + array( + array(-13994457, 16616821, 14549246, 3341099, 32155958, 13648976, -17577068, 8849297, 65030, 8370684), + array(-8320926, -12049626, 31204563, 5839400, -20627288, -1057277, -19442942, 6922164, 12743482, -9800518), + array(-2361371, 12678785, 28815050, 4759974, -23893047, 4884717, 23783145, 11038569, 18800704, 255233), + ), + array( + array(-5269658, -1773886, 13957886, 7990715, 23132995, 728773, 13393847, 9066957, 19258688, -14753793), + array(-2936654, -10827535, -10432089, 14516793, -3640786, 4372541, -31934921, 2209390, -1524053, 2055794), + array(580882, 16705327, 5468415, -2683018, -30926419, -14696000, -7203346, -8994389, -30021019, 7394435), + ), + array( + array(23838809, 1822728, -15738443, 15242727, 8318092, -3733104, -21672180, -3492205, -4821741, 14799921), + array(13345610, 9759151, 3371034, -16137791, 16353039, 8577942, 31129804, 13496856, -9056018, 7402518), + array(2286874, -4435931, -20042458, -2008336, -13696227, 5038122, 11006906, -15760352, 8205061, 1607563), + ), + array( + array(14414086, -8002132, 3331830, -3208217, 22249151, -5594188, 18364661, -2906958, 30019587, -9029278), + array(-27688051, 1585953, -10775053, 931069, -29120221, -11002319, -14410829, 12029093, 9944378, 8024), + array(4368715, -3709630, 29874200, -15022983, -20230386, -11410704, -16114594, -999085, -8142388, 5640030), + ), + array( + array(10299610, 13746483, 11661824, 16234854, 7630238, 5998374, 9809887, -16694564, 15219798, -14327783), + array(27425505, -5719081, 3055006, 10660664, 23458024, 595578, -15398605, -1173195, -18342183, 9742717), + array(6744077, 2427284, 26042789, 2720740, -847906, 1118974, 32324614, 7406442, 12420155, 1994844), + ), + array( + array(14012521, -5024720, -18384453, -9578469, -26485342, -3936439, -13033478, -10909803, 24319929, -6446333), + array(16412690, -4507367, 10772641, 15929391, -17068788, -4658621, 10555945, -10484049, -30102368, -4739048), + array(22397382, -7767684, -9293161, -12792868, 17166287, -9755136, -27333065, 6199366, 21880021, -12250760), + ), + array( + array(-4283307, 5368523, -31117018, 8163389, -30323063, 3209128, 16557151, 8890729, 8840445, 4957760), + array(-15447727, 709327, -6919446, -10870178, -29777922, 6522332, -21720181, 12130072, -14796503, 5005757), + array(-2114751, -14308128, 23019042, 15765735, -25269683, 6002752, 10183197, -13239326, -16395286, -2176112), + ), + ), + array( + array( + array(-19025756, 1632005, 13466291, -7995100, -23640451, 16573537, -32013908, -3057104, 22208662, 2000468), + array(3065073, -1412761, -25598674, -361432, -17683065, -5703415, -8164212, 11248527, -3691214, -7414184), + array(10379208, -6045554, 8877319, 1473647, -29291284, -12507580, 16690915, 2553332, -3132688, 16400289), + ), + array( + array(15716668, 1254266, -18472690, 7446274, -8448918, 6344164, -22097271, -7285580, 26894937, 9132066), + array(24158887, 12938817, 11085297, -8177598, -28063478, -4457083, -30576463, 64452, -6817084, -2692882), + array(13488534, 7794716, 22236231, 5989356, 25426474, -12578208, 2350710, -3418511, -4688006, 2364226), + ), + array( + array(16335052, 9132434, 25640582, 6678888, 1725628, 8517937, -11807024, -11697457, 15445875, -7798101), + array(29004207, -7867081, 28661402, -640412, -12794003, -7943086, 31863255, -4135540, -278050, -15759279), + array(-6122061, -14866665, -28614905, 14569919, -10857999, -3591829, 10343412, -6976290, -29828287, -10815811), + ), + array( + array(27081650, 3463984, 14099042, -4517604, 1616303, -6205604, 29542636, 15372179, 17293797, 960709), + array(20263915, 11434237, -5765435, 11236810, 13505955, -10857102, -16111345, 6493122, -19384511, 7639714), + array(-2830798, -14839232, 25403038, -8215196, -8317012, -16173699, 18006287, -16043750, 29994677, -15808121), + ), + array( + array(9769828, 5202651, -24157398, -13631392, -28051003, -11561624, -24613141, -13860782, -31184575, 709464), + array(12286395, 13076066, -21775189, -1176622, -25003198, 4057652, -32018128, -8890874, 16102007, 13205847), + array(13733362, 5599946, 10557076, 3195751, -5557991, 8536970, -25540170, 8525972, 10151379, 10394400), + ), + array( + array(4024660, -16137551, 22436262, 12276534, -9099015, -2686099, 19698229, 11743039, -33302334, 8934414), + array(-15879800, -4525240, -8580747, -2934061, 14634845, -698278, -9449077, 3137094, -11536886, 11721158), + array(17555939, -5013938, 8268606, 2331751, -22738815, 9761013, 9319229, 8835153, -9205489, -1280045), + ), + array( + array(-461409, -7830014, 20614118, 16688288, -7514766, -4807119, 22300304, 505429, 6108462, -6183415), + array(-5070281, 12367917, -30663534, 3234473, 32617080, -8422642, 29880583, -13483331, -26898490, -7867459), + array(-31975283, 5726539, 26934134, 10237677, -3173717, -605053, 24199304, 3795095, 7592688, -14992079), + ), + array( + array(21594432, -14964228, 17466408, -4077222, 32537084, 2739898, 6407723, 12018833, -28256052, 4298412), + array(-20650503, -11961496, -27236275, 570498, 3767144, -1717540, 13891942, -1569194, 13717174, 10805743), + array(-14676630, -15644296, 15287174, 11927123, 24177847, -8175568, -796431, 14860609, -26938930, -5863836), + ), + ), + array( + array( + array(12962541, 5311799, -10060768, 11658280, 18855286, -7954201, 13286263, -12808704, -4381056, 9882022), + array(18512079, 11319350, -20123124, 15090309, 18818594, 5271736, -22727904, 3666879, -23967430, -3299429), + array(-6789020, -3146043, 16192429, 13241070, 15898607, -14206114, -10084880, -6661110, -2403099, 5276065), + ), + array( + array(30169808, -5317648, 26306206, -11750859, 27814964, 7069267, 7152851, 3684982, 1449224, 13082861), + array(10342826, 3098505, 2119311, 193222, 25702612, 12233820, 23697382, 15056736, -21016438, -8202000), + array(-33150110, 3261608, 22745853, 7948688, 19370557, -15177665, -26171976, 6482814, -10300080, -11060101), + ), + array( + array(32869458, -5408545, 25609743, 15678670, -10687769, -15471071, 26112421, 2521008, -22664288, 6904815), + array(29506923, 4457497, 3377935, -9796444, -30510046, 12935080, 1561737, 3841096, -29003639, -6657642), + array(10340844, -6630377, -18656632, -2278430, 12621151, -13339055, 30878497, -11824370, -25584551, 5181966), + ), + array( + array(25940115, -12658025, 17324188, -10307374, -8671468, 15029094, 24396252, -16450922, -2322852, -12388574), + array(-21765684, 9916823, -1300409, 4079498, -1028346, 11909559, 1782390, 12641087, 20603771, -6561742), + array(-18882287, -11673380, 24849422, 11501709, 13161720, -4768874, 1925523, 11914390, 4662781, 7820689), + ), + array( + array(12241050, -425982, 8132691, 9393934, 32846760, -1599620, 29749456, 12172924, 16136752, 15264020), + array(-10349955, -14680563, -8211979, 2330220, -17662549, -14545780, 10658213, 6671822, 19012087, 3772772), + array(3753511, -3421066, 10617074, 2028709, 14841030, -6721664, 28718732, -15762884, 20527771, 12988982), + ), + array( + array(-14822485, -5797269, -3707987, 12689773, -898983, -10914866, -24183046, -10564943, 3299665, -12424953), + array(-16777703, -15253301, -9642417, 4978983, 3308785, 8755439, 6943197, 6461331, -25583147, 8991218), + array(-17226263, 1816362, -1673288, -6086439, 31783888, -8175991, -32948145, 7417950, -30242287, 1507265), + ), + array( + array(29692663, 6829891, -10498800, 4334896, 20945975, -11906496, -28887608, 8209391, 14606362, -10647073), + array(-3481570, 8707081, 32188102, 5672294, 22096700, 1711240, -33020695, 9761487, 4170404, -2085325), + array(-11587470, 14855945, -4127778, -1531857, -26649089, 15084046, 22186522, 16002000, -14276837, -8400798), + ), + array( + array(-4811456, 13761029, -31703877, -2483919, -3312471, 7869047, -7113572, -9620092, 13240845, 10965870), + array(-7742563, -8256762, -14768334, -13656260, -23232383, 12387166, 4498947, 14147411, 29514390, 4302863), + array(-13413405, -12407859, 20757302, -13801832, 14785143, 8976368, -5061276, -2144373, 17846988, -13971927), + ), + ), + array( + array( + array(-2244452, -754728, -4597030, -1066309, -6247172, 1455299, -21647728, -9214789, -5222701, 12650267), + array(-9906797, -16070310, 21134160, 12198166, -27064575, 708126, 387813, 13770293, -19134326, 10958663), + array(22470984, 12369526, 23446014, -5441109, -21520802, -9698723, -11772496, -11574455, -25083830, 4271862), + ), + array( + array(-25169565, -10053642, -19909332, 15361595, -5984358, 2159192, 75375, -4278529, -32526221, 8469673), + array(15854970, 4148314, -8893890, 7259002, 11666551, 13824734, -30531198, 2697372, 24154791, -9460943), + array(15446137, -15806644, 29759747, 14019369, 30811221, -9610191, -31582008, 12840104, 24913809, 9815020), + ), + array( + array(-4709286, -5614269, -31841498, -12288893, -14443537, 10799414, -9103676, 13438769, 18735128, 9466238), + array(11933045, 9281483, 5081055, -5183824, -2628162, -4905629, -7727821, -10896103, -22728655, 16199064), + array(14576810, 379472, -26786533, -8317236, -29426508, -10812974, -102766, 1876699, 30801119, 2164795), + ), + array( + array(15995086, 3199873, 13672555, 13712240, -19378835, -4647646, -13081610, -15496269, -13492807, 1268052), + array(-10290614, -3659039, -3286592, 10948818, 23037027, 3794475, -3470338, -12600221, -17055369, 3565904), + array(29210088, -9419337, -5919792, -4952785, 10834811, -13327726, -16512102, -10820713, -27162222, -14030531), + ), + array( + array(-13161890, 15508588, 16663704, -8156150, -28349942, 9019123, -29183421, -3769423, 2244111, -14001979), + array(-5152875, -3800936, -9306475, -6071583, 16243069, 14684434, -25673088, -16180800, 13491506, 4641841), + array(10813417, 643330, -19188515, -728916, 30292062, -16600078, 27548447, -7721242, 14476989, -12767431), + ), + array( + array(10292079, 9984945, 6481436, 8279905, -7251514, 7032743, 27282937, -1644259, -27912810, 12651324), + array(-31185513, -813383, 22271204, 11835308, 10201545, 15351028, 17099662, 3988035, 21721536, -3148940), + array(10202177, -6545839, -31373232, -9574638, -32150642, -8119683, -12906320, 3852694, 13216206, 14842320), + ), + array( + array(-15815640, -10601066, -6538952, -7258995, -6984659, -6581778, -31500847, 13765824, -27434397, 9900184), + array(14465505, -13833331, -32133984, -14738873, -27443187, 12990492, 33046193, 15796406, -7051866, -8040114), + array(30924417, -8279620, 6359016, -12816335, 16508377, 9071735, -25488601, 15413635, 9524356, -7018878), + ), + array( + array(12274201, -13175547, 32627641, -1785326, 6736625, 13267305, 5237659, -5109483, 15663516, 4035784), + array(-2951309, 8903985, 17349946, 601635, -16432815, -4612556, -13732739, -15889334, -22258478, 4659091), + array(-16916263, -4952973, -30393711, -15158821, 20774812, 15897498, 5736189, 15026997, -2178256, -13455585), + ), + ), + array( + array( + array(-8858980, -2219056, 28571666, -10155518, -474467, -10105698, -3801496, 278095, 23440562, -290208), + array(10226241, -5928702, 15139956, 120818, -14867693, 5218603, 32937275, 11551483, -16571960, -7442864), + array(17932739, -12437276, -24039557, 10749060, 11316803, 7535897, 22503767, 5561594, -3646624, 3898661), + ), + array( + array(7749907, -969567, -16339731, -16464, -25018111, 15122143, -1573531, 7152530, 21831162, 1245233), + array(26958459, -14658026, 4314586, 8346991, -5677764, 11960072, -32589295, -620035, -30402091, -16716212), + array(-12165896, 9166947, 33491384, 13673479, 29787085, 13096535, 6280834, 14587357, -22338025, 13987525), + ), + array( + array(-24349909, 7778775, 21116000, 15572597, -4833266, -5357778, -4300898, -5124639, -7469781, -2858068), + array(9681908, -6737123, -31951644, 13591838, -6883821, 386950, 31622781, 6439245, -14581012, 4091397), + array(-8426427, 1470727, -28109679, -1596990, 3978627, -5123623, -19622683, 12092163, 29077877, -14741988), + ), + array( + array(5269168, -6859726, -13230211, -8020715, 25932563, 1763552, -5606110, -5505881, -20017847, 2357889), + array(32264008, -15407652, -5387735, -1160093, -2091322, -3946900, 23104804, -12869908, 5727338, 189038), + array(14609123, -8954470, -6000566, -16622781, -14577387, -7743898, -26745169, 10942115, -25888931, -14884697), + ), + array( + array(20513500, 5557931, -15604613, 7829531, 26413943, -2019404, -21378968, 7471781, 13913677, -5137875), + array(-25574376, 11967826, 29233242, 12948236, -6754465, 4713227, -8940970, 14059180, 12878652, 8511905), + array(-25656801, 3393631, -2955415, -7075526, -2250709, 9366908, -30223418, 6812974, 5568676, -3127656), + ), + array( + array(11630004, 12144454, 2116339, 13606037, 27378885, 15676917, -17408753, -13504373, -14395196, 8070818), + array(27117696, -10007378, -31282771, -5570088, 1127282, 12772488, -29845906, 10483306, -11552749, -1028714), + array(10637467, -5688064, 5674781, 1072708, -26343588, -6982302, -1683975, 9177853, -27493162, 15431203), + ), + array( + array(20525145, 10892566, -12742472, 12779443, -29493034, 16150075, -28240519, 14943142, -15056790, -7935931), + array(-30024462, 5626926, -551567, -9981087, 753598, 11981191, 25244767, -3239766, -3356550, 9594024), + array(-23752644, 2636870, -5163910, -10103818, 585134, 7877383, 11345683, -6492290, 13352335, -10977084), + ), + array( + array(-1931799, -5407458, 3304649, -12884869, 17015806, -4877091, -29783850, -7752482, -13215537, -319204), + array(20239939, 6607058, 6203985, 3483793, -18386976, -779229, -20723742, 15077870, -22750759, 14523817), + array(27406042, -6041657, 27423596, -4497394, 4996214, 10002360, -28842031, -4545494, -30172742, -4805667), + ), + ), + array( + array( + array(11374242, 12660715, 17861383, -12540833, 10935568, 1099227, -13886076, -9091740, -27727044, 11358504), + array(-12730809, 10311867, 1510375, 10778093, -2119455, -9145702, 32676003, 11149336, -26123651, 4985768), + array(-19096303, 341147, -6197485, -239033, 15756973, -8796662, -983043, 13794114, -19414307, -15621255), + ), + array( + array(6490081, 11940286, 25495923, -7726360, 8668373, -8751316, 3367603, 6970005, -1691065, -9004790), + array(1656497, 13457317, 15370807, 6364910, 13605745, 8362338, -19174622, -5475723, -16796596, -5031438), + array(-22273315, -13524424, -64685, -4334223, -18605636, -10921968, -20571065, -7007978, -99853, -10237333), + ), + array( + array(17747465, 10039260, 19368299, -4050591, -20630635, -16041286, 31992683, -15857976, -29260363, -5511971), + array(31932027, -4986141, -19612382, 16366580, 22023614, 88450, 11371999, -3744247, 4882242, -10626905), + array(29796507, 37186, 19818052, 10115756, -11829032, 3352736, 18551198, 3272828, -5190932, -4162409), + ), + array( + array(12501286, 4044383, -8612957, -13392385, -32430052, 5136599, -19230378, -3529697, 330070, -3659409), + array(6384877, 2899513, 17807477, 7663917, -2358888, 12363165, 25366522, -8573892, -271295, 12071499), + array(-8365515, -4042521, 25133448, -4517355, -6211027, 2265927, -32769618, 1936675, -5159697, 3829363), + ), + array( + array(28425966, -5835433, -577090, -4697198, -14217555, 6870930, 7921550, -6567787, 26333140, 14267664), + array(-11067219, 11871231, 27385719, -10559544, -4585914, -11189312, 10004786, -8709488, -21761224, 8930324), + array(-21197785, -16396035, 25654216, -1725397, 12282012, 11008919, 1541940, 4757911, -26491501, -16408940), + ), + array( + array(13537262, -7759490, -20604840, 10961927, -5922820, -13218065, -13156584, 6217254, -15943699, 13814990), + array(-17422573, 15157790, 18705543, 29619, 24409717, -260476, 27361681, 9257833, -1956526, -1776914), + array(-25045300, -10191966, 15366585, 15166509, -13105086, 8423556, -29171540, 12361135, -18685978, 4578290), + ), + array( + array(24579768, 3711570, 1342322, -11180126, -27005135, 14124956, -22544529, 14074919, 21964432, 8235257), + array(-6528613, -2411497, 9442966, -5925588, 12025640, -1487420, -2981514, -1669206, 13006806, 2355433), + array(-16304899, -13605259, -6632427, -5142349, 16974359, -10911083, 27202044, 1719366, 1141648, -12796236), + ), + array( + array(-12863944, -13219986, -8318266, -11018091, -6810145, -4843894, 13475066, -3133972, 32674895, 13715045), + array(11423335, -5468059, 32344216, 8962751, 24989809, 9241752, -13265253, 16086212, -28740881, -15642093), + array(-1409668, 12530728, -6368726, 10847387, 19531186, -14132160, -11709148, 7791794, -27245943, 4383347), + ), + ), + array( + array( + array(-28970898, 5271447, -1266009, -9736989, -12455236, 16732599, -4862407, -4906449, 27193557, 6245191), + array(-15193956, 5362278, -1783893, 2695834, 4960227, 12840725, 23061898, 3260492, 22510453, 8577507), + array(-12632451, 11257346, -32692994, 13548177, -721004, 10879011, 31168030, 13952092, -29571492, -3635906), + ), + array( + array(3877321, -9572739, 32416692, 5405324, -11004407, -13656635, 3759769, 11935320, 5611860, 8164018), + array(-16275802, 14667797, 15906460, 12155291, -22111149, -9039718, 32003002, -8832289, 5773085, -8422109), + array(-23788118, -8254300, 1950875, 8937633, 18686727, 16459170, -905725, 12376320, 31632953, 190926), + ), + array( + array(-24593607, -16138885, -8423991, 13378746, 14162407, 6901328, -8288749, 4508564, -25341555, -3627528), + array(8884438, -5884009, 6023974, 10104341, -6881569, -4941533, 18722941, -14786005, -1672488, 827625), + array(-32720583, -16289296, -32503547, 7101210, 13354605, 2659080, -1800575, -14108036, -24878478, 1541286), + ), + array( + array(2901347, -1117687, 3880376, -10059388, -17620940, -3612781, -21802117, -3567481, 20456845, -1885033), + array(27019610, 12299467, -13658288, -1603234, -12861660, -4861471, -19540150, -5016058, 29439641, 15138866), + array(21536104, -6626420, -32447818, -10690208, -22408077, 5175814, -5420040, -16361163, 7779328, 109896), + ), + array( + array(30279744, 14648750, -8044871, 6425558, 13639621, -743509, 28698390, 12180118, 23177719, -554075), + array(26572847, 3405927, -31701700, 12890905, -19265668, 5335866, -6493768, 2378492, 4439158, -13279347), + array(-22716706, 3489070, -9225266, -332753, 18875722, -1140095, 14819434, -12731527, -17717757, -5461437), + ), + array( + array(-5056483, 16566551, 15953661, 3767752, -10436499, 15627060, -820954, 2177225, 8550082, -15114165), + array(-18473302, 16596775, -381660, 15663611, 22860960, 15585581, -27844109, -3582739, -23260460, -8428588), + array(-32480551, 15707275, -8205912, -5652081, 29464558, 2713815, -22725137, 15860482, -21902570, 1494193), + ), + array( + array(-19562091, -14087393, -25583872, -9299552, 13127842, 759709, 21923482, 16529112, 8742704, 12967017), + array(-28464899, 1553205, 32536856, -10473729, -24691605, -406174, -8914625, -2933896, -29903758, 15553883), + array(21877909, 3230008, 9881174, 10539357, -4797115, 2841332, 11543572, 14513274, 19375923, -12647961), + ), + array( + array(8832269, -14495485, 13253511, 5137575, 5037871, 4078777, 24880818, -6222716, 2862653, 9455043), + array(29306751, 5123106, 20245049, -14149889, 9592566, 8447059, -2077124, -2990080, 15511449, 4789663), + array(-20679756, 7004547, 8824831, -9434977, -4045704, -3750736, -5754762, 108893, 23513200, 16652362), + ), + ), + array( + array( + array(-33256173, 4144782, -4476029, -6579123, 10770039, -7155542, -6650416, -12936300, -18319198, 10212860), + array(2756081, 8598110, 7383731, -6859892, 22312759, -1105012, 21179801, 2600940, -9988298, -12506466), + array(-24645692, 13317462, -30449259, -15653928, 21365574, -10869657, 11344424, 864440, -2499677, -16710063), + ), + array( + array(-26432803, 6148329, -17184412, -14474154, 18782929, -275997, -22561534, 211300, 2719757, 4940997), + array(-1323882, 3911313, -6948744, 14759765, -30027150, 7851207, 21690126, 8518463, 26699843, 5276295), + array(-13149873, -6429067, 9396249, 365013, 24703301, -10488939, 1321586, 149635, -15452774, 7159369), + ), + array( + array(9987780, -3404759, 17507962, 9505530, 9731535, -2165514, 22356009, 8312176, 22477218, -8403385), + array(18155857, -16504990, 19744716, 9006923, 15154154, -10538976, 24256460, -4864995, -22548173, 9334109), + array(2986088, -4911893, 10776628, -3473844, 10620590, -7083203, -21413845, 14253545, -22587149, 536906), + ), + array( + array(4377756, 8115836, 24567078, 15495314, 11625074, 13064599, 7390551, 10589625, 10838060, -15420424), + array(-19342404, 867880, 9277171, -3218459, -14431572, -1986443, 19295826, -15796950, 6378260, 699185), + array(7895026, 4057113, -7081772, -13077756, -17886831, -323126, -716039, 15693155, -5045064, -13373962), + ), + array( + array(-7737563, -5869402, -14566319, -7406919, 11385654, 13201616, 31730678, -10962840, -3918636, -9669325), + array(10188286, -15770834, -7336361, 13427543, 22223443, 14896287, 30743455, 7116568, -21786507, 5427593), + array(696102, 13206899, 27047647, -10632082, 15285305, -9853179, 10798490, -4578720, 19236243, 12477404), + ), + array( + array(-11229439, 11243796, -17054270, -8040865, -788228, -8167967, -3897669, 11180504, -23169516, 7733644), + array(17800790, -14036179, -27000429, -11766671, 23887827, 3149671, 23466177, -10538171, 10322027, 15313801), + array(26246234, 11968874, 32263343, -5468728, 6830755, -13323031, -15794704, -101982, -24449242, 10890804), + ), + array( + array(-31365647, 10271363, -12660625, -6267268, 16690207, -13062544, -14982212, 16484931, 25180797, -5334884), + array(-586574, 10376444, -32586414, -11286356, 19801893, 10997610, 2276632, 9482883, 316878, 13820577), + array(-9882808, -4510367, -2115506, 16457136, -11100081, 11674996, 30756178, -7515054, 30696930, -3712849), + ), + array( + array(32988917, -9603412, 12499366, 7910787, -10617257, -11931514, -7342816, -9985397, -32349517, 7392473), + array(-8855661, 15927861, 9866406, -3649411, -2396914, -16655781, -30409476, -9134995, 25112947, -2926644), + array(-2504044, -436966, 25621774, -5678772, 15085042, -5479877, -24884878, -13526194, 5537438, -13914319), + ), + ), + array( + array( + array(-11225584, 2320285, -9584280, 10149187, -33444663, 5808648, -14876251, -1729667, 31234590, 6090599), + array(-9633316, 116426, 26083934, 2897444, -6364437, -2688086, 609721, 15878753, -6970405, -9034768), + array(-27757857, 247744, -15194774, -9002551, 23288161, -10011936, -23869595, 6503646, 20650474, 1804084), + ), + array( + array(-27589786, 15456424, 8972517, 8469608, 15640622, 4439847, 3121995, -10329713, 27842616, -202328), + array(-15306973, 2839644, 22530074, 10026331, 4602058, 5048462, 28248656, 5031932, -11375082, 12714369), + array(20807691, -7270825, 29286141, 11421711, -27876523, -13868230, -21227475, 1035546, -19733229, 12796920), + ), + array( + array(12076899, -14301286, -8785001, -11848922, -25012791, 16400684, -17591495, -12899438, 3480665, -15182815), + array(-32361549, 5457597, 28548107, 7833186, 7303070, -11953545, -24363064, -15921875, -33374054, 2771025), + array(-21389266, 421932, 26597266, 6860826, 22486084, -6737172, -17137485, -4210226, -24552282, 15673397), + ), + array( + array(-20184622, 2338216, 19788685, -9620956, -4001265, -8740893, -20271184, 4733254, 3727144, -12934448), + array(6120119, 814863, -11794402, -622716, 6812205, -15747771, 2019594, 7975683, 31123697, -10958981), + array(30069250, -11435332, 30434654, 2958439, 18399564, -976289, 12296869, 9204260, -16432438, 9648165), + ), + array( + array(32705432, -1550977, 30705658, 7451065, -11805606, 9631813, 3305266, 5248604, -26008332, -11377501), + array(17219865, 2375039, -31570947, -5575615, -19459679, 9219903, 294711, 15298639, 2662509, -16297073), + array(-1172927, -7558695, -4366770, -4287744, -21346413, -8434326, 32087529, -1222777, 32247248, -14389861), + ), + array( + array(14312628, 1221556, 17395390, -8700143, -4945741, -8684635, -28197744, -9637817, -16027623, -13378845), + array(-1428825, -9678990, -9235681, 6549687, -7383069, -468664, 23046502, 9803137, 17597934, 2346211), + array(18510800, 15337574, 26171504, 981392, -22241552, 7827556, -23491134, -11323352, 3059833, -11782870), + ), + array( + array(10141598, 6082907, 17829293, -1947643, 9830092, 13613136, -25556636, -5544586, -33502212, 3592096), + array(33114168, -15889352, -26525686, -13343397, 33076705, 8716171, 1151462, 1521897, -982665, -6837803), + array(-32939165, -4255815, 23947181, -324178, -33072974, -12305637, -16637686, 3891704, 26353178, 693168), + ), + array( + array(30374239, 1595580, -16884039, 13186931, 4600344, 406904, 9585294, -400668, 31375464, 14369965), + array(-14370654, -7772529, 1510301, 6434173, -18784789, -6262728, 32732230, -13108839, 17901441, 16011505), + array(18171223, -11934626, -12500402, 15197122, -11038147, -15230035, -19172240, -16046376, 8764035, 12309598), + ), + ), + array( + array( + array(5975908, -5243188, -19459362, -9681747, -11541277, 14015782, -23665757, 1228319, 17544096, -10593782), + array(5811932, -1715293, 3442887, -2269310, -18367348, -8359541, -18044043, -15410127, -5565381, 12348900), + array(-31399660, 11407555, 25755363, 6891399, -3256938, 14872274, -24849353, 8141295, -10632534, -585479), + ), + array( + array(-12675304, 694026, -5076145, 13300344, 14015258, -14451394, -9698672, -11329050, 30944593, 1130208), + array(8247766, -6710942, -26562381, -7709309, -14401939, -14648910, 4652152, 2488540, 23550156, -271232), + array(17294316, -3788438, 7026748, 15626851, 22990044, 113481, 2267737, -5908146, -408818, -137719), + ), + array( + array(16091085, -16253926, 18599252, 7340678, 2137637, -1221657, -3364161, 14550936, 3260525, -7166271), + array(-4910104, -13332887, 18550887, 10864893, -16459325, -7291596, -23028869, -13204905, -12748722, 2701326), + array(-8574695, 16099415, 4629974, -16340524, -20786213, -6005432, -10018363, 9276971, 11329923, 1862132), + ), + array( + array(14763076, -15903608, -30918270, 3689867, 3511892, 10313526, -21951088, 12219231, -9037963, -940300), + array(8894987, -3446094, 6150753, 3013931, 301220, 15693451, -31981216, -2909717, -15438168, 11595570), + array(15214962, 3537601, -26238722, -14058872, 4418657, -15230761, 13947276, 10730794, -13489462, -4363670), + ), + array( + array(-2538306, 7682793, 32759013, 263109, -29984731, -7955452, -22332124, -10188635, 977108, 699994), + array(-12466472, 4195084, -9211532, 550904, -15565337, 12917920, 19118110, -439841, -30534533, -14337913), + array(31788461, -14507657, 4799989, 7372237, 8808585, -14747943, 9408237, -10051775, 12493932, -5409317), + ), + array( + array(-25680606, 5260744, -19235809, -6284470, -3695942, 16566087, 27218280, 2607121, 29375955, 6024730), + array(842132, -2794693, -4763381, -8722815, 26332018, -12405641, 11831880, 6985184, -9940361, 2854096), + array(-4847262, -7969331, 2516242, -5847713, 9695691, -7221186, 16512645, 960770, 12121869, 16648078), + ), + array( + array(-15218652, 14667096, -13336229, 2013717, 30598287, -464137, -31504922, -7882064, 20237806, 2838411), + array(-19288047, 4453152, 15298546, -16178388, 22115043, -15972604, 12544294, -13470457, 1068881, -12499905), + array(-9558883, -16518835, 33238498, 13506958, 30505848, -1114596, -8486907, -2630053, 12521378, 4845654), + ), + array( + array(-28198521, 10744108, -2958380, 10199664, 7759311, -13088600, 3409348, -873400, -6482306, -12885870), + array(-23561822, 6230156, -20382013, 10655314, -24040585, -11621172, 10477734, -1240216, -3113227, 13974498), + array(12966261, 15550616, -32038948, -1615346, 21025980, -629444, 5642325, 7188737, 18895762, 12629579), + ), + ), + array( + array( + array(14741879, -14946887, 22177208, -11721237, 1279741, 8058600, 11758140, 789443, 32195181, 3895677), + array(10758205, 15755439, -4509950, 9243698, -4879422, 6879879, -2204575, -3566119, -8982069, 4429647), + array(-2453894, 15725973, -20436342, -10410672, -5803908, -11040220, -7135870, -11642895, 18047436, -15281743), + ), + array( + array(-25173001, -11307165, 29759956, 11776784, -22262383, -15820455, 10993114, -12850837, -17620701, -9408468), + array(21987233, 700364, -24505048, 14972008, -7774265, -5718395, 32155026, 2581431, -29958985, 8773375), + array(-25568350, 454463, -13211935, 16126715, 25240068, 8594567, 20656846, 12017935, -7874389, -13920155), + ), + array( + array(6028182, 6263078, -31011806, -11301710, -818919, 2461772, -31841174, -5468042, -1721788, -2776725), + array(-12278994, 16624277, 987579, -5922598, 32908203, 1248608, 7719845, -4166698, 28408820, 6816612), + array(-10358094, -8237829, 19549651, -12169222, 22082623, 16147817, 20613181, 13982702, -10339570, 5067943), + ), + array( + array(-30505967, -3821767, 12074681, 13582412, -19877972, 2443951, -19719286, 12746132, 5331210, -10105944), + array(30528811, 3601899, -1957090, 4619785, -27361822, -15436388, 24180793, -12570394, 27679908, -1648928), + array(9402404, -13957065, 32834043, 10838634, -26580150, -13237195, 26653274, -8685565, 22611444, -12715406), + ), + array( + array(22190590, 1118029, 22736441, 15130463, -30460692, -5991321, 19189625, -4648942, 4854859, 6622139), + array(-8310738, -2953450, -8262579, -3388049, -10401731, -271929, 13424426, -3567227, 26404409, 13001963), + array(-31241838, -15415700, -2994250, 8939346, 11562230, -12840670, -26064365, -11621720, -15405155, 11020693), + ), + array( + array(1866042, -7949489, -7898649, -10301010, 12483315, 13477547, 3175636, -12424163, 28761762, 1406734), + array(-448555, -1777666, 13018551, 3194501, -9580420, -11161737, 24760585, -4347088, 25577411, -13378680), + array(-24290378, 4759345, -690653, -1852816, 2066747, 10693769, -29595790, 9884936, -9368926, 4745410), + ), + array( + array(-9141284, 6049714, -19531061, -4341411, -31260798, 9944276, -15462008, -11311852, 10931924, -11931931), + array(-16561513, 14112680, -8012645, 4817318, -8040464, -11414606, -22853429, 10856641, -20470770, 13434654), + array(22759489, -10073434, -16766264, -1871422, 13637442, -10168091, 1765144, -12654326, 28445307, -5364710), + ), + array( + array(29875063, 12493613, 2795536, -3786330, 1710620, 15181182, -10195717, -8788675, 9074234, 1167180), + array(-26205683, 11014233, -9842651, -2635485, -26908120, 7532294, -18716888, -9535498, 3843903, 9367684), + array(-10969595, -6403711, 9591134, 9582310, 11349256, 108879, 16235123, 8601684, -139197, 4242895), + ), + ), + array( + array( + array(22092954, -13191123, -2042793, -11968512, 32186753, -11517388, -6574341, 2470660, -27417366, 16625501), + array(-11057722, 3042016, 13770083, -9257922, 584236, -544855, -7770857, 2602725, -27351616, 14247413), + array(6314175, -10264892, -32772502, 15957557, -10157730, 168750, -8618807, 14290061, 27108877, -1180880), + ), + array( + array(-8586597, -7170966, 13241782, 10960156, -32991015, -13794596, 33547976, -11058889, -27148451, 981874), + array(22833440, 9293594, -32649448, -13618667, -9136966, 14756819, -22928859, -13970780, -10479804, -16197962), + array(-7768587, 3326786, -28111797, 10783824, 19178761, 14905060, 22680049, 13906969, -15933690, 3797899), + ), + array( + array(21721356, -4212746, -12206123, 9310182, -3882239, -13653110, 23740224, -2709232, 20491983, -8042152), + array(9209270, -15135055, -13256557, -6167798, -731016, 15289673, 25947805, 15286587, 30997318, -6703063), + array(7392032, 16618386, 23946583, -8039892, -13265164, -1533858, -14197445, -2321576, 17649998, -250080), + ), + array( + array(-9301088, -14193827, 30609526, -3049543, -25175069, -1283752, -15241566, -9525724, -2233253, 7662146), + array(-17558673, 1763594, -33114336, 15908610, -30040870, -12174295, 7335080, -8472199, -3174674, 3440183), + array(-19889700, -5977008, -24111293, -9688870, 10799743, -16571957, 40450, -4431835, 4862400, 1133), + ), + array( + array(-32856209, -7873957, -5422389, 14860950, -16319031, 7956142, 7258061, 311861, -30594991, -7379421), + array(-3773428, -1565936, 28985340, 7499440, 24445838, 9325937, 29727763, 16527196, 18278453, 15405622), + array(-4381906, 8508652, -19898366, -3674424, -5984453, 15149970, -13313598, 843523, -21875062, 13626197), + ), + array( + array(2281448, -13487055, -10915418, -2609910, 1879358, 16164207, -10783882, 3953792, 13340839, 15928663), + array(31727126, -7179855, -18437503, -8283652, 2875793, -16390330, -25269894, -7014826, -23452306, 5964753), + array(4100420, -5959452, -17179337, 6017714, -18705837, 12227141, -26684835, 11344144, 2538215, -7570755), + ), + array( + array(-9433605, 6123113, 11159803, -2156608, 30016280, 14966241, -20474983, 1485421, -629256, -15958862), + array(-26804558, 4260919, 11851389, 9658551, -32017107, 16367492, -20205425, -13191288, 11659922, -11115118), + array(26180396, 10015009, -30844224, -8581293, 5418197, 9480663, 2231568, -10170080, 33100372, -1306171), + ), + array( + array(15121113, -5201871, -10389905, 15427821, -27509937, -15992507, 21670947, 4486675, -5931810, -14466380), + array(16166486, -9483733, -11104130, 6023908, -31926798, -1364923, 2340060, -16254968, -10735770, -10039824), + array(28042865, -3557089, -12126526, 12259706, -3717498, -6945899, 6766453, -8689599, 18036436, 5803270), + ), + ), + array( + array( + array(-817581, 6763912, 11803561, 1585585, 10958447, -2671165, 23855391, 4598332, -6159431, -14117438), + array(-31031306, -14256194, 17332029, -2383520, 31312682, -5967183, 696309, 50292, -20095739, 11763584), + array(-594563, -2514283, -32234153, 12643980, 12650761, 14811489, 665117, -12613632, -19773211, -10713562), + ), + array( + array(30464590, -11262872, -4127476, -12734478, 19835327, -7105613, -24396175, 2075773, -17020157, 992471), + array(18357185, -6994433, 7766382, 16342475, -29324918, 411174, 14578841, 8080033, -11574335, -10601610), + array(19598397, 10334610, 12555054, 2555664, 18821899, -10339780, 21873263, 16014234, 26224780, 16452269), + ), + array( + array(-30223925, 5145196, 5944548, 16385966, 3976735, 2009897, -11377804, -7618186, -20533829, 3698650), + array(14187449, 3448569, -10636236, -10810935, -22663880, -3433596, 7268410, -10890444, 27394301, 12015369), + array(19695761, 16087646, 28032085, 12999827, 6817792, 11427614, 20244189, -1312777, -13259127, -3402461), + ), + array( + array(30860103, 12735208, -1888245, -4699734, -16974906, 2256940, -8166013, 12298312, -8550524, -10393462), + array(-5719826, -11245325, -1910649, 15569035, 26642876, -7587760, -5789354, -15118654, -4976164, 12651793), + array(-2848395, 9953421, 11531313, -5282879, 26895123, -12697089, -13118820, -16517902, 9768698, -2533218), + ), + array( + array(-24719459, 1894651, -287698, -4704085, 15348719, -8156530, 32767513, 12765450, 4940095, 10678226), + array(18860224, 15980149, -18987240, -1562570, -26233012, -11071856, -7843882, 13944024, -24372348, 16582019), + array(-15504260, 4970268, -29893044, 4175593, -20993212, -2199756, -11704054, 15444560, -11003761, 7989037), + ), + array( + array(31490452, 5568061, -2412803, 2182383, -32336847, 4531686, -32078269, 6200206, -19686113, -14800171), + array(-17308668, -15879940, -31522777, -2831, -32887382, 16375549, 8680158, -16371713, 28550068, -6857132), + array(-28126887, -5688091, 16837845, -1820458, -6850681, 12700016, -30039981, 4364038, 1155602, 5988841), + ), + array( + array(21890435, -13272907, -12624011, 12154349, -7831873, 15300496, 23148983, -4470481, 24618407, 8283181), + array(-33136107, -10512751, 9975416, 6841041, -31559793, 16356536, 3070187, -7025928, 1466169, 10740210), + array(-1509399, -15488185, -13503385, -10655916, 32799044, 909394, -13938903, -5779719, -32164649, -15327040), + ), + array( + array(3960823, -14267803, -28026090, -15918051, -19404858, 13146868, 15567327, 951507, -3260321, -573935), + array(24740841, 5052253, -30094131, 8961361, 25877428, 6165135, -24368180, 14397372, -7380369, -6144105), + array(-28888365, 3510803, -28103278, -1158478, -11238128, -10631454, -15441463, -14453128, -1625486, -6494814), + ), + ), + array( + array( + array(793299, -9230478, 8836302, -6235707, -27360908, -2369593, 33152843, -4885251, -9906200, -621852), + array(5666233, 525582, 20782575, -8038419, -24538499, 14657740, 16099374, 1468826, -6171428, -15186581), + array(-4859255, -3779343, -2917758, -6748019, 7778750, 11688288, -30404353, -9871238, -1558923, -9863646), + ), + array( + array(10896332, -7719704, 824275, 472601, -19460308, 3009587, 25248958, 14783338, -30581476, -15757844), + array(10566929, 12612572, -31944212, 11118703, -12633376, 12362879, 21752402, 8822496, 24003793, 14264025), + array(27713862, -7355973, -11008240, 9227530, 27050101, 2504721, 23886875, -13117525, 13958495, -5732453), + ), + array( + array(-23481610, 4867226, -27247128, 3900521, 29838369, -8212291, -31889399, -10041781, 7340521, -15410068), + array(4646514, -8011124, -22766023, -11532654, 23184553, 8566613, 31366726, -1381061, -15066784, -10375192), + array(-17270517, 12723032, -16993061, 14878794, 21619651, -6197576, 27584817, 3093888, -8843694, 3849921), + ), + array( + array(-9064912, 2103172, 25561640, -15125738, -5239824, 9582958, 32477045, -9017955, 5002294, -15550259), + array(-12057553, -11177906, 21115585, -13365155, 8808712, -12030708, 16489530, 13378448, -25845716, 12741426), + array(-5946367, 10645103, -30911586, 15390284, -3286982, -7118677, 24306472, 15852464, 28834118, -7646072), + ), + array( + array(-17335748, -9107057, -24531279, 9434953, -8472084, -583362, -13090771, 455841, 20461858, 5491305), + array(13669248, -16095482, -12481974, -10203039, -14569770, -11893198, -24995986, 11293807, -28588204, -9421832), + array(28497928, 6272777, -33022994, 14470570, 8906179, -1225630, 18504674, -14165166, 29867745, -8795943), + ), + array( + array(-16207023, 13517196, -27799630, -13697798, 24009064, -6373891, -6367600, -13175392, 22853429, -4012011), + array(24191378, 16712145, -13931797, 15217831, 14542237, 1646131, 18603514, -11037887, 12876623, -2112447), + array(17902668, 4518229, -411702, -2829247, 26878217, 5258055, -12860753, 608397, 16031844, 3723494), + ), + array( + array(-28632773, 12763728, -20446446, 7577504, 33001348, -13017745, 17558842, -7872890, 23896954, -4314245), + array(-20005381, -12011952, 31520464, 605201, 2543521, 5991821, -2945064, 7229064, -9919646, -8826859), + array(28816045, 298879, -28165016, -15920938, 19000928, -1665890, -12680833, -2949325, -18051778, -2082915), + ), + array( + array(16000882, -344896, 3493092, -11447198, -29504595, -13159789, 12577740, 16041268, -19715240, 7847707), + array(10151868, 10572098, 27312476, 7922682, 14825339, 4723128, -32855931, -6519018, -10020567, 3852848), + array(-11430470, 15697596, -21121557, -4420647, 5386314, 15063598, 16514493, -15932110, 29330899, -15076224), + ), + ), + array( + array( + array(-25499735, -4378794, -15222908, -6901211, 16615731, 2051784, 3303702, 15490, -27548796, 12314391), + array(15683520, -6003043, 18109120, -9980648, 15337968, -5997823, -16717435, 15921866, 16103996, -3731215), + array(-23169824, -10781249, 13588192, -1628807, -3798557, -1074929, -19273607, 5402699, -29815713, -9841101), + ), + array( + array(23190676, 2384583, -32714340, 3462154, -29903655, -1529132, -11266856, 8911517, -25205859, 2739713), + array(21374101, -3554250, -33524649, 9874411, 15377179, 11831242, -33529904, 6134907, 4931255, 11987849), + array(-7732, -2978858, -16223486, 7277597, 105524, -322051, -31480539, 13861388, -30076310, 10117930), + ), + array( + array(-29501170, -10744872, -26163768, 13051539, -25625564, 5089643, -6325503, 6704079, 12890019, 15728940), + array(-21972360, -11771379, -951059, -4418840, 14704840, 2695116, 903376, -10428139, 12885167, 8311031), + array(-17516482, 5352194, 10384213, -13811658, 7506451, 13453191, 26423267, 4384730, 1888765, -5435404), + ), + array( + array(-25817338, -3107312, -13494599, -3182506, 30896459, -13921729, -32251644, -12707869, -19464434, -3340243), + array(-23607977, -2665774, -526091, 4651136, 5765089, 4618330, 6092245, 14845197, 17151279, -9854116), + array(-24830458, -12733720, -15165978, 10367250, -29530908, -265356, 22825805, -7087279, -16866484, 16176525), + ), + array( + array(-23583256, 6564961, 20063689, 3798228, -4740178, 7359225, 2006182, -10363426, -28746253, -10197509), + array(-10626600, -4486402, -13320562, -5125317, 3432136, -6393229, 23632037, -1940610, 32808310, 1099883), + array(15030977, 5768825, -27451236, -2887299, -6427378, -15361371, -15277896, -6809350, 2051441, -15225865), + ), + array( + array(-3362323, -7239372, 7517890, 9824992, 23555850, 295369, 5148398, -14154188, -22686354, 16633660), + array(4577086, -16752288, 13249841, -15304328, 19958763, -14537274, 18559670, -10759549, 8402478, -9864273), + array(-28406330, -1051581, -26790155, -907698, -17212414, -11030789, 9453451, -14980072, 17983010, 9967138), + ), + array( + array(-25762494, 6524722, 26585488, 9969270, 24709298, 1220360, -1677990, 7806337, 17507396, 3651560), + array(-10420457, -4118111, 14584639, 15971087, -15768321, 8861010, 26556809, -5574557, -18553322, -11357135), + array(2839101, 14284142, 4029895, 3472686, 14402957, 12689363, -26642121, 8459447, -5605463, -7621941), + ), + array( + array(-4839289, -3535444, 9744961, 2871048, 25113978, 3187018, -25110813, -849066, 17258084, -7977739), + array(18164541, -10595176, -17154882, -1542417, 19237078, -9745295, 23357533, -15217008, 26908270, 12150756), + array(-30264870, -7647865, 5112249, -7036672, -1499807, -6974257, 43168, -5537701, -32302074, 16215819), + ), + ), + array( + array( + array(-6898905, 9824394, -12304779, -4401089, -31397141, -6276835, 32574489, 12532905, -7503072, -8675347), + array(-27343522, -16515468, -27151524, -10722951, 946346, 16291093, 254968, 7168080, 21676107, -1943028), + array(21260961, -8424752, -16831886, -11920822, -23677961, 3968121, -3651949, -6215466, -3556191, -7913075), + ), + array( + array(16544754, 13250366, -16804428, 15546242, -4583003, 12757258, -2462308, -8680336, -18907032, -9662799), + array(-2415239, -15577728, 18312303, 4964443, -15272530, -12653564, 26820651, 16690659, 25459437, -4564609), + array(-25144690, 11425020, 28423002, -11020557, -6144921, -15826224, 9142795, -2391602, -6432418, -1644817), + ), + array( + array(-23104652, 6253476, 16964147, -3768872, -25113972, -12296437, -27457225, -16344658, 6335692, 7249989), + array(-30333227, 13979675, 7503222, -12368314, -11956721, -4621693, -30272269, 2682242, 25993170, -12478523), + array(4364628, 5930691, 32304656, -10044554, -8054781, 15091131, 22857016, -10598955, 31820368, 15075278), + ), + array( + array(31879134, -8918693, 17258761, 90626, -8041836, -4917709, 24162788, -9650886, -17970238, 12833045), + array(19073683, 14851414, -24403169, -11860168, 7625278, 11091125, -19619190, 2074449, -9413939, 14905377), + array(24483667, -11935567, -2518866, -11547418, -1553130, 15355506, -25282080, 9253129, 27628530, -7555480), + ), + array( + array(17597607, 8340603, 19355617, 552187, 26198470, -3176583, 4593324, -9157582, -14110875, 15297016), + array(510886, 14337390, -31785257, 16638632, 6328095, 2713355, -20217417, -11864220, 8683221, 2921426), + array(18606791, 11874196, 27155355, -5281482, -24031742, 6265446, -25178240, -1278924, 4674690, 13890525), + ), + array( + array(13609624, 13069022, -27372361, -13055908, 24360586, 9592974, 14977157, 9835105, 4389687, 288396), + array(9922506, -519394, 13613107, 5883594, -18758345, -434263, -12304062, 8317628, 23388070, 16052080), + array(12720016, 11937594, -31970060, -5028689, 26900120, 8561328, -20155687, -11632979, -14754271, -10812892), + ), + array( + array(15961858, 14150409, 26716931, -665832, -22794328, 13603569, 11829573, 7467844, -28822128, 929275), + array(11038231, -11582396, -27310482, -7316562, -10498527, -16307831, -23479533, -9371869, -21393143, 2465074), + array(20017163, -4323226, 27915242, 1529148, 12396362, 15675764, 13817261, -9658066, 2463391, -4622140), + ), + array( + array(-16358878, -12663911, -12065183, 4996454, -1256422, 1073572, 9583558, 12851107, 4003896, 12673717), + array(-1731589, -15155870, -3262930, 16143082, 19294135, 13385325, 14741514, -9103726, 7903886, 2348101), + array(24536016, -16515207, 12715592, -3862155, 1511293, 10047386, -3842346, -7129159, -28377538, 10048127), + ), + ), + array( + array( + array(-12622226, -6204820, 30718825, 2591312, -10617028, 12192840, 18873298, -7297090, -32297756, 15221632), + array(-26478122, -11103864, 11546244, -1852483, 9180880, 7656409, -21343950, 2095755, 29769758, 6593415), + array(-31994208, -2907461, 4176912, 3264766, 12538965, -868111, 26312345, -6118678, 30958054, 8292160), + ), + array( + array(31429822, -13959116, 29173532, 15632448, 12174511, -2760094, 32808831, 3977186, 26143136, -3148876), + array(22648901, 1402143, -22799984, 13746059, 7936347, 365344, -8668633, -1674433, -3758243, -2304625), + array(-15491917, 8012313, -2514730, -12702462, -23965846, -10254029, -1612713, -1535569, -16664475, 8194478), + ), + array( + array(27338066, -7507420, -7414224, 10140405, -19026427, -6589889, 27277191, 8855376, 28572286, 3005164), + array(26287124, 4821776, 25476601, -4145903, -3764513, -15788984, -18008582, 1182479, -26094821, -13079595), + array(-7171154, 3178080, 23970071, 6201893, -17195577, -4489192, -21876275, -13982627, 32208683, -1198248), + ), + array( + array(-16657702, 2817643, -10286362, 14811298, 6024667, 13349505, -27315504, -10497842, -27672585, -11539858), + array(15941029, -9405932, -21367050, 8062055, 31876073, -238629, -15278393, -1444429, 15397331, -4130193), + array(8934485, -13485467, -23286397, -13423241, -32446090, 14047986, 31170398, -1441021, -27505566, 15087184), + ), + array( + array(-18357243, -2156491, 24524913, -16677868, 15520427, -6360776, -15502406, 11461896, 16788528, -5868942), + array(-1947386, 16013773, 21750665, 3714552, -17401782, -16055433, -3770287, -10323320, 31322514, -11615635), + array(21426655, -5650218, -13648287, -5347537, -28812189, -4920970, -18275391, -14621414, 13040862, -12112948), + ), + array( + array(11293895, 12478086, -27136401, 15083750, -29307421, 14748872, 14555558, -13417103, 1613711, 4896935), + array(-25894883, 15323294, -8489791, -8057900, 25967126, -13425460, 2825960, -4897045, -23971776, -11267415), + array(-15924766, -5229880, -17443532, 6410664, 3622847, 10243618, 20615400, 12405433, -23753030, -8436416), + ), + array( + array(-7091295, 12556208, -20191352, 9025187, -17072479, 4333801, 4378436, 2432030, 23097949, -566018), + array(4565804, -16025654, 20084412, -7842817, 1724999, 189254, 24767264, 10103221, -18512313, 2424778), + array(366633, -11976806, 8173090, -6890119, 30788634, 5745705, -7168678, 1344109, -3642553, 12412659), + ), + array( + array(-24001791, 7690286, 14929416, -168257, -32210835, -13412986, 24162697, -15326504, -3141501, 11179385), + array(18289522, -14724954, 8056945, 16430056, -21729724, 7842514, -6001441, -1486897, -18684645, -11443503), + array(476239, 6601091, -6152790, -9723375, 17503545, -4863900, 27672959, 13403813, 11052904, 5219329), + ), + ), + array( + array( + array(20678546, -8375738, -32671898, 8849123, -5009758, 14574752, 31186971, -3973730, 9014762, -8579056), + array(-13644050, -10350239, -15962508, 5075808, -1514661, -11534600, -33102500, 9160280, 8473550, -3256838), + array(24900749, 14435722, 17209120, -15292541, -22592275, 9878983, -7689309, -16335821, -24568481, 11788948), + ), + array( + array(-3118155, -11395194, -13802089, 14797441, 9652448, -6845904, -20037437, 10410733, -24568470, -1458691), + array(-15659161, 16736706, -22467150, 10215878, -9097177, 7563911, 11871841, -12505194, -18513325, 8464118), + array(-23400612, 8348507, -14585951, -861714, -3950205, -6373419, 14325289, 8628612, 33313881, -8370517), + ), + array( + array(-20186973, -4967935, 22367356, 5271547, -1097117, -4788838, -24805667, -10236854, -8940735, -5818269), + array(-6948785, -1795212, -32625683, -16021179, 32635414, -7374245, 15989197, -12838188, 28358192, -4253904), + array(-23561781, -2799059, -32351682, -1661963, -9147719, 10429267, -16637684, 4072016, -5351664, 5596589), + ), + array( + array(-28236598, -3390048, 12312896, 6213178, 3117142, 16078565, 29266239, 2557221, 1768301, 15373193), + array(-7243358, -3246960, -4593467, -7553353, -127927, -912245, -1090902, -4504991, -24660491, 3442910), + array(-30210571, 5124043, 14181784, 8197961, 18964734, -11939093, 22597931, 7176455, -18585478, 13365930), + ), + array( + array(-7877390, -1499958, 8324673, 4690079, 6261860, 890446, 24538107, -8570186, -9689599, -3031667), + array(25008904, -10771599, -4305031, -9638010, 16265036, 15721635, 683793, -11823784, 15723479, -15163481), + array(-9660625, 12374379, -27006999, -7026148, -7724114, -12314514, 11879682, 5400171, 519526, -1235876), + ), + array( + array(22258397, -16332233, -7869817, 14613016, -22520255, -2950923, -20353881, 7315967, 16648397, 7605640), + array(-8081308, -8464597, -8223311, 9719710, 19259459, -15348212, 23994942, -5281555, -9468848, 4763278), + array(-21699244, 9220969, -15730624, 1084137, -25476107, -2852390, 31088447, -7764523, -11356529, 728112), + ), + array( + array(26047220, -11751471, -6900323, -16521798, 24092068, 9158119, -4273545, -12555558, -29365436, -5498272), + array(17510331, -322857, 5854289, 8403524, 17133918, -3112612, -28111007, 12327945, 10750447, 10014012), + array(-10312768, 3936952, 9156313, -8897683, 16498692, -994647, -27481051, -666732, 3424691, 7540221), + ), + array( + array(30322361, -6964110, 11361005, -4143317, 7433304, 4989748, -7071422, -16317219, -9244265, 15258046), + array(13054562, -2779497, 19155474, 469045, -12482797, 4566042, 5631406, 2711395, 1062915, -5136345), + array(-19240248, -11254599, -29509029, -7499965, -5835763, 13005411, -6066489, 12194497, 32960380, 1459310), + ), + ), + array( + array( + array(19852034, 7027924, 23669353, 10020366, 8586503, -6657907, 394197, -6101885, 18638003, -11174937), + array(31395534, 15098109, 26581030, 8030562, -16527914, -5007134, 9012486, -7584354, -6643087, -5442636), + array(-9192165, -2347377, -1997099, 4529534, 25766844, 607986, -13222, 9677543, -32294889, -6456008), + ), + array( + array(-2444496, -149937, 29348902, 8186665, 1873760, 12489863, -30934579, -7839692, -7852844, -8138429), + array(-15236356, -15433509, 7766470, 746860, 26346930, -10221762, -27333451, 10754588, -9431476, 5203576), + array(31834314, 14135496, -770007, 5159118, 20917671, -16768096, -7467973, -7337524, 31809243, 7347066), + ), + array( + array(-9606723, -11874240, 20414459, 13033986, 13716524, -11691881, 19797970, -12211255, 15192876, -2087490), + array(-12663563, -2181719, 1168162, -3804809, 26747877, -14138091, 10609330, 12694420, 33473243, -13382104), + array(33184999, 11180355, 15832085, -11385430, -1633671, 225884, 15089336, -11023903, -6135662, 14480053), + ), + array( + array(31308717, -5619998, 31030840, -1897099, 15674547, -6582883, 5496208, 13685227, 27595050, 8737275), + array(-20318852, -15150239, 10933843, -16178022, 8335352, -7546022, -31008351, -12610604, 26498114, 66511), + array(22644454, -8761729, -16671776, 4884562, -3105614, -13559366, 30540766, -4286747, -13327787, -7515095), + ), + array( + array(-28017847, 9834845, 18617207, -2681312, -3401956, -13307506, 8205540, 13585437, -17127465, 15115439), + array(23711543, -672915, 31206561, -8362711, 6164647, -9709987, -33535882, -1426096, 8236921, 16492939), + array(-23910559, -13515526, -26299483, -4503841, 25005590, -7687270, 19574902, 10071562, 6708380, -6222424), + ), + array( + array(2101391, -4930054, 19702731, 2367575, -15427167, 1047675, 5301017, 9328700, 29955601, -11678310), + array(3096359, 9271816, -21620864, -15521844, -14847996, -7592937, -25892142, -12635595, -9917575, 6216608), + array(-32615849, 338663, -25195611, 2510422, -29213566, -13820213, 24822830, -6146567, -26767480, 7525079), + ), + array( + array(-23066649, -13985623, 16133487, -7896178, -3389565, 778788, -910336, -2782495, -19386633, 11994101), + array(21691500, -13624626, -641331, -14367021, 3285881, -3483596, -25064666, 9718258, -7477437, 13381418), + array(18445390, -4202236, 14979846, 11622458, -1727110, -3582980, 23111648, -6375247, 28535282, 15779576), + ), + array( + array(30098053, 3089662, -9234387, 16662135, -21306940, 11308411, -14068454, 12021730, 9955285, -16303356), + array(9734894, -14576830, -7473633, -9138735, 2060392, 11313496, -18426029, 9924399, 20194861, 13380996), + array(-26378102, -7965207, -22167821, 15789297, -18055342, -6168792, -1984914, 15707771, 26342023, 10146099), + ), + ), + array( + array( + array(-26016874, -219943, 21339191, -41388, 19745256, -2878700, -29637280, 2227040, 21612326, -545728), + array(-13077387, 1184228, 23562814, -5970442, -20351244, -6348714, 25764461, 12243797, -20856566, 11649658), + array(-10031494, 11262626, 27384172, 2271902, 26947504, -15997771, 39944, 6114064, 33514190, 2333242), + ), + array( + array(-21433588, -12421821, 8119782, 7219913, -21830522, -9016134, -6679750, -12670638, 24350578, -13450001), + array(-4116307, -11271533, -23886186, 4843615, -30088339, 690623, -31536088, -10406836, 8317860, 12352766), + array(18200138, -14475911, -33087759, -2696619, -23702521, -9102511, -23552096, -2287550, 20712163, 6719373), + ), + array( + array(26656208, 6075253, -7858556, 1886072, -28344043, 4262326, 11117530, -3763210, 26224235, -3297458), + array(-17168938, -14854097, -3395676, -16369877, -19954045, 14050420, 21728352, 9493610, 18620611, -16428628), + array(-13323321, 13325349, 11432106, 5964811, 18609221, 6062965, -5269471, -9725556, -30701573, -16479657), + ), + array( + array(-23860538, -11233159, 26961357, 1640861, -32413112, -16737940, 12248509, -5240639, 13735342, 1934062), + array(25089769, 6742589, 17081145, -13406266, 21909293, -16067981, -15136294, -3765346, -21277997, 5473616), + array(31883677, -7961101, 1083432, -11572403, 22828471, 13290673, -7125085, 12469656, 29111212, -5451014), + ), + array( + array(24244947, -15050407, -26262976, 2791540, -14997599, 16666678, 24367466, 6388839, -10295587, 452383), + array(-25640782, -3417841, 5217916, 16224624, 19987036, -4082269, -24236251, -5915248, 15766062, 8407814), + array(-20406999, 13990231, 15495425, 16395525, 5377168, 15166495, -8917023, -4388953, -8067909, 2276718), + ), + array( + array(30157918, 12924066, -17712050, 9245753, 19895028, 3368142, -23827587, 5096219, 22740376, -7303417), + array(2041139, -14256350, 7783687, 13876377, -25946985, -13352459, 24051124, 13742383, -15637599, 13295222), + array(33338237, -8505733, 12532113, 7977527, 9106186, -1715251, -17720195, -4612972, -4451357, -14669444), + ), + array( + array(-20045281, 5454097, -14346548, 6447146, 28862071, 1883651, -2469266, -4141880, 7770569, 9620597), + array(23208068, 7979712, 33071466, 8149229, 1758231, -10834995, 30945528, -1694323, -33502340, -14767970), + array(1439958, -16270480, -1079989, -793782, 4625402, 10647766, -5043801, 1220118, 30494170, -11440799), + ), + array( + array(-5037580, -13028295, -2970559, -3061767, 15640974, -6701666, -26739026, 926050, -1684339, -13333647), + array(13908495, -3549272, 30919928, -6273825, -21521863, 7989039, 9021034, 9078865, 3353509, 4033511), + array(-29663431, -15113610, 32259991, -344482, 24295849, -12912123, 23161163, 8839127, 27485041, 7356032), + ), + ), + array( + array( + array(9661027, 705443, 11980065, -5370154, -1628543, 14661173, -6346142, 2625015, 28431036, -16771834), + array(-23839233, -8311415, -25945511, 7480958, -17681669, -8354183, -22545972, 14150565, 15970762, 4099461), + array(29262576, 16756590, 26350592, -8793563, 8529671, -11208050, 13617293, -9937143, 11465739, 8317062), + ), + array( + array(-25493081, -6962928, 32500200, -9419051, -23038724, -2302222, 14898637, 3848455, 20969334, -5157516), + array(-20384450, -14347713, -18336405, 13884722, -33039454, 2842114, -21610826, -3649888, 11177095, 14989547), + array(-24496721, -11716016, 16959896, 2278463, 12066309, 10137771, 13515641, 2581286, -28487508, 9930240), + ), + array( + array(-17751622, -2097826, 16544300, -13009300, -15914807, -14949081, 18345767, -13403753, 16291481, -5314038), + array(-33229194, 2553288, 32678213, 9875984, 8534129, 6889387, -9676774, 6957617, 4368891, 9788741), + array(16660756, 7281060, -10830758, 12911820, 20108584, -8101676, -21722536, -8613148, 16250552, -11111103), + ), + array( + array(-19765507, 2390526, -16551031, 14161980, 1905286, 6414907, 4689584, 10604807, -30190403, 4782747), + array(-1354539, 14736941, -7367442, -13292886, 7710542, -14155590, -9981571, 4383045, 22546403, 437323), + array(31665577, -12180464, -16186830, 1491339, -18368625, 3294682, 27343084, 2786261, -30633590, -14097016), + ), + array( + array(-14467279, -683715, -33374107, 7448552, 19294360, 14334329, -19690631, 2355319, -19284671, -6114373), + array(15121312, -15796162, 6377020, -6031361, -10798111, -12957845, 18952177, 15496498, -29380133, 11754228), + array(-2637277, -13483075, 8488727, -14303896, 12728761, -1622493, 7141596, 11724556, 22761615, -10134141), + ), + array( + array(16918416, 11729663, -18083579, 3022987, -31015732, -13339659, -28741185, -12227393, 32851222, 11717399), + array(11166634, 7338049, -6722523, 4531520, -29468672, -7302055, 31474879, 3483633, -1193175, -4030831), + array(-185635, 9921305, 31456609, -13536438, -12013818, 13348923, 33142652, 6546660, -19985279, -3948376), + ), + array( + array(-32460596, 11266712, -11197107, -7899103, 31703694, 3855903, -8537131, -12833048, -30772034, -15486313), + array(-18006477, 12709068, 3991746, -6479188, -21491523, -10550425, -31135347, -16049879, 10928917, 3011958), + array(-6957757, -15594337, 31696059, 334240, 29576716, 14796075, -30831056, -12805180, 18008031, 10258577), + ), + array( + array(-22448644, 15655569, 7018479, -4410003, -30314266, -1201591, -1853465, 1367120, 25127874, 6671743), + array(29701166, -14373934, -10878120, 9279288, -17568, 13127210, 21382910, 11042292, 25838796, 4642684), + array(-20430234, 14955537, -24126347, 8124619, -5369288, -5990470, 30468147, -13900640, 18423289, 4177476), + ), + ) + ); + + /** + * See: libsodium's crypto_core/curve25519/ref10/base2.h + * + * @var array>> basically int[8][3] + */ + protected static $base2 = array( + array( + array(25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626, -11754271, -6079156, 2047605), + array(-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692, 5043384, 19500929, -15469378), + array(-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919, 11864899, -24514362, -4438546), + ), + array( + array(15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600, -14772189, 28944400, -1550024), + array(16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577, -11775962, 7689662, 11199574), + array(30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774, 10017326, -17749093, -9920357), + ), + array( + array(10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885, 14515107, -15438304, 10819380), + array(4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668, 12483688, -12668491, 5581306), + array(19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350, 13850243, -23678021, -15815942), + ), + array( + array(5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852, 5230134, -23952439, -15175766), + array(-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025, 16520125, 30598449, 7715701), + array(28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660, 1370708, 29794553, -1409300), + ), + array( + array(-22518993, -6692182, 14201702, -8745502, -23510406, 8844726, 18474211, -1361450, -13062696, 13821877), + array(-6455177, -7839871, 3374702, -4740862, -27098617, -10571707, 31655028, -7212327, 18853322, -14220951), + array(4566830, -12963868, -28974889, -12240689, -7602672, -2830569, -8514358, -10431137, 2207753, -3209784), + ), + array( + array(-25154831, -4185821, 29681144, 7868801, -6854661, -9423865, -12437364, -663000, -31111463, -16132436), + array(25576264, -2703214, 7349804, -11814844, 16472782, 9300885, 3844789, 15725684, 171356, 6466918), + array(23103977, 13316479, 9739013, -16149481, 817875, -15038942, 8965339, -14088058, -30714912, 16193877), + ), + array( + array(-33521811, 3180713, -2394130, 14003687, -16903474, -16270840, 17238398, 4729455, -18074513, 9256800), + array(-25182317, -4174131, 32336398, 5036987, -21236817, 11360617, 22616405, 9761698, -19827198, 630305), + array(-13720693, 2639453, -24237460, -7406481, 9494427, -5774029, -6554551, -15960994, -2449256, -14291300), + ), + array( + array(-3151181, -5046075, 9282714, 6866145, -31907062, -863023, -18940575, 15033784, 25105118, -7894876), + array(-24326370, 15950226, -31801215, -14592823, -11662737, -5090925, 1573892, -2625887, 2198790, -15804619), + array(-3099351, 10324967, -2241613, 7453183, -5446979, -2735503, -13812022, -16236442, -32461234, -12290683), + ) + ); + + /** + * 37095705934669439343138083508754565189542113879843219016388785533085940283555 + * + * @var array + */ + protected static $d = array( + -10913610, + 13857413, + -15372611, + 6949391, + 114729, + -8787816, + -6275908, + -3247719, + -18696448, + -12055116 + ); + + /** + * 2 * d = 16295367250680780974490674513165176452449235426866156013048779062215315747161 + * + * @var array + */ + protected static $d2 = array( + -21827239, + -5839606, + -30745221, + 13898782, + 229458, + 15978800, + -12551817, + -6495438, + 29715968, + 9444199 + ); + + /** + * sqrt(-1) + * + * @var array + */ + protected static $sqrtm1 = array( + -32595792, + -7943725, + 9377950, + 3500415, + 12389472, + -272473, + -25146209, + -2005654, + 326686, + 11406482 + ); +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Curve25519/README.md b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/README.md new file mode 100644 index 000000000..e8097fa34 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Curve25519/README.md @@ -0,0 +1,3 @@ +# Curve25519 Data Structures + +These are PHP implementation of the [structs used in the ref10 curve25519 code](https://github.com/jedisct1/libsodium/blob/master/src/libsodium/include/sodium/private/curve25519_ref10.h). diff --git a/vendor/paragonie/sodium_compat/src/Core32/Ed25519.php b/vendor/paragonie/sodium_compat/src/Core32/Ed25519.php new file mode 100644 index 000000000..927d11e10 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Ed25519.php @@ -0,0 +1,481 @@ +X)) { + throw new SodiumException('Unexpected zero result'); + } + + # fe_1(one_minus_y); + # fe_sub(one_minus_y, one_minus_y, A.Y); + # fe_invert(one_minus_y, one_minus_y); + $one_minux_y = self::fe_invert( + self::fe_sub( + self::fe_1(), + $A->Y + ) + ); + + + # fe_1(x); + # fe_add(x, x, A.Y); + # fe_mul(x, x, one_minus_y); + $x = self::fe_mul( + self::fe_add(self::fe_1(), $A->Y), + $one_minux_y + ); + + # fe_tobytes(curve25519_pk, x); + return self::fe_tobytes($x); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sk_to_pk($sk) + { + return self::ge_p3_tobytes( + self::ge_scalarmult_base( + self::substr($sk, 0, 32) + ) + ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign($message, $sk) + { + /** @var string $signature */ + $signature = self::sign_detached($message, $sk); + return $signature . $message; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message A signed message + * @param string $pk Public key + * @return string Message (without signature) + * @throws SodiumException + * @throws TypeError + */ + public static function sign_open($message, $pk) + { + /** @var string $signature */ + $signature = self::substr($message, 0, 64); + + /** @var string $message */ + $message = self::substr($message, 64); + + if (self::verify_detached($signature, $message, $pk)) { + return $message; + } + throw new SodiumException('Invalid signature'); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign_detached($message, $sk) + { + # crypto_hash_sha512(az, sk, 32); + $az = hash('sha512', self::substr($sk, 0, 32), true); + + # az[0] &= 248; + # az[31] &= 63; + # az[31] |= 64; + $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); + $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); + + # crypto_hash_sha512_init(&hs); + # crypto_hash_sha512_update(&hs, az + 32, 32); + # crypto_hash_sha512_update(&hs, m, mlen); + # crypto_hash_sha512_final(&hs, nonce); + $hs = hash_init('sha512'); + hash_update($hs, self::substr($az, 32, 32)); + hash_update($hs, $message); + $nonceHash = hash_final($hs, true); + + # memmove(sig + 32, sk + 32, 32); + $pk = self::substr($sk, 32, 32); + + # sc_reduce(nonce); + # ge_scalarmult_base(&R, nonce); + # ge_p3_tobytes(sig, &R); + $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); + $sig = self::ge_p3_tobytes( + self::ge_scalarmult_base($nonce) + ); + + # crypto_hash_sha512_init(&hs); + # crypto_hash_sha512_update(&hs, sig, 64); + # crypto_hash_sha512_update(&hs, m, mlen); + # crypto_hash_sha512_final(&hs, hram); + $hs = hash_init('sha512'); + hash_update($hs, self::substr($sig, 0, 32)); + hash_update($hs, self::substr($pk, 0, 32)); + hash_update($hs, $message); + $hramHash = hash_final($hs, true); + + # sc_reduce(hram); + # sc_muladd(sig + 32, hram, az, nonce); + $hram = self::sc_reduce($hramHash); + $sigAfter = self::sc_muladd($hram, $az, $nonce); + $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); + + try { + ParagonIE_Sodium_Compat::memzero($az); + } catch (SodiumException $ex) { + $az = null; + } + return $sig; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $sig + * @param string $message + * @param string $pk + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function verify_detached($sig, $message, $pk) + { + if (self::strlen($sig) < 64) { + throw new SodiumException('Signature is too short'); + } + if ((self::chrToInt($sig[63]) & 240) && self::check_S_lt_L(self::substr($sig, 32, 32))) { + throw new SodiumException('S < L - Invalid signature'); + } + if (self::small_order($sig)) { + throw new SodiumException('Signature is on too small of an order'); + } + if ((self::chrToInt($sig[63]) & 224) !== 0) { + throw new SodiumException('Invalid signature'); + } + $d = 0; + for ($i = 0; $i < 32; ++$i) { + $d |= self::chrToInt($pk[$i]); + } + if ($d === 0) { + throw new SodiumException('All zero public key'); + } + + /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ + $orig = ParagonIE_Sodium_Compat::$fastMult; + + // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. + ParagonIE_Sodium_Compat::$fastMult = true; + + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ + $A = self::ge_frombytes_negate_vartime($pk); + + /** @var string $hDigest */ + $hDigest = hash( + 'sha512', + self::substr($sig, 0, 32) . + self::substr($pk, 0, 32) . + $message, + true + ); + + /** @var string $h */ + $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); + + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ + $R = self::ge_double_scalarmult_vartime( + $h, + $A, + self::substr($sig, 32) + ); + + /** @var string $rcheck */ + $rcheck = self::ge_tobytes($R); + + // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. + ParagonIE_Sodium_Compat::$fastMult = $orig; + + return self::verify_32($rcheck, self::substr($sig, 0, 32)); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $S + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function check_S_lt_L($S) + { + if (self::strlen($S) < 32) { + throw new SodiumException('Signature must be 32 bytes'); + } + static $L = array( + 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, + 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10 + ); + /** @var array $L */ + $c = 0; + $n = 1; + $i = 32; + + do { + --$i; + $x = self::chrToInt($S[$i]); + $c |= ( + (($x - $L[$i]) >> 8) & $n + ); + $n &= ( + (($x ^ $L[$i]) - 1) >> 8 + ); + } while ($i !== 0); + + return $c === 0; + } + + /** + * @param string $R + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function small_order($R) + { + static $blocklist = array( + /* 0 (order 4) */ + array( + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 + ), + /* 1 (order 1) */ + array( + 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 + ), + /* 2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ + array( + 0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05 + ), + /* 55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ + array( + 0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a + ), + /* p-1 (order 2) */ + array( + 0x13, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x85 + ), + /* p (order 4) */ + array( + 0xb4, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0xfa + ), + /* p+1 (order 1) */ + array( + 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f + ), + /* p+2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ + array( + 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f + ), + /* p+55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ + array( + 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f + ), + /* 2p-1 (order 2) */ + array( + 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff + ), + /* 2p (order 4) */ + array( + 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff + ), + /* 2p+1 (order 1) */ + array( + 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff + ) + ); + /** @var array> $blocklist */ + $countBlocklist = count($blocklist); + + for ($i = 0; $i < $countBlocklist; ++$i) { + $c = 0; + for ($j = 0; $j < 32; ++$j) { + $c |= self::chrToInt($R[$j]) ^ $blocklist[$i][$j]; + } + if ($c === 0) { + return true; + } + } + return false; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/HChaCha20.php b/vendor/paragonie/sodium_compat/src/Core32/HChaCha20.php new file mode 100644 index 000000000..551d995e4 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/HChaCha20.php @@ -0,0 +1,127 @@ +toReverseString() . + $x1->toReverseString() . + $x2->toReverseString() . + $x3->toReverseString() . + $x12->toReverseString() . + $x13->toReverseString() . + $x14->toReverseString() . + $x15->toReverseString(); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/HSalsa20.php b/vendor/paragonie/sodium_compat/src/Core32/HSalsa20.php new file mode 100644 index 000000000..39287f2d3 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/HSalsa20.php @@ -0,0 +1,141 @@ + 0; $i -= 2) { + $x4 = $x4->xorInt32($x0->addInt32($x12)->rotateLeft(7)); + $x8 = $x8->xorInt32($x4->addInt32($x0)->rotateLeft(9)); + $x12 = $x12->xorInt32($x8->addInt32($x4)->rotateLeft(13)); + $x0 = $x0->xorInt32($x12->addInt32($x8)->rotateLeft(18)); + + $x9 = $x9->xorInt32($x5->addInt32($x1)->rotateLeft(7)); + $x13 = $x13->xorInt32($x9->addInt32($x5)->rotateLeft(9)); + $x1 = $x1->xorInt32($x13->addInt32($x9)->rotateLeft(13)); + $x5 = $x5->xorInt32($x1->addInt32($x13)->rotateLeft(18)); + + $x14 = $x14->xorInt32($x10->addInt32($x6)->rotateLeft(7)); + $x2 = $x2->xorInt32($x14->addInt32($x10)->rotateLeft(9)); + $x6 = $x6->xorInt32($x2->addInt32($x14)->rotateLeft(13)); + $x10 = $x10->xorInt32($x6->addInt32($x2)->rotateLeft(18)); + + $x3 = $x3->xorInt32($x15->addInt32($x11)->rotateLeft(7)); + $x7 = $x7->xorInt32($x3->addInt32($x15)->rotateLeft(9)); + $x11 = $x11->xorInt32($x7->addInt32($x3)->rotateLeft(13)); + $x15 = $x15->xorInt32($x11->addInt32($x7)->rotateLeft(18)); + + $x1 = $x1->xorInt32($x0->addInt32($x3)->rotateLeft(7)); + $x2 = $x2->xorInt32($x1->addInt32($x0)->rotateLeft(9)); + $x3 = $x3->xorInt32($x2->addInt32($x1)->rotateLeft(13)); + $x0 = $x0->xorInt32($x3->addInt32($x2)->rotateLeft(18)); + + $x6 = $x6->xorInt32($x5->addInt32($x4)->rotateLeft(7)); + $x7 = $x7->xorInt32($x6->addInt32($x5)->rotateLeft(9)); + $x4 = $x4->xorInt32($x7->addInt32($x6)->rotateLeft(13)); + $x5 = $x5->xorInt32($x4->addInt32($x7)->rotateLeft(18)); + + $x11 = $x11->xorInt32($x10->addInt32($x9)->rotateLeft(7)); + $x8 = $x8->xorInt32($x11->addInt32($x10)->rotateLeft(9)); + $x9 = $x9->xorInt32($x8->addInt32($x11)->rotateLeft(13)); + $x10 = $x10->xorInt32($x9->addInt32($x8)->rotateLeft(18)); + + $x12 = $x12->xorInt32($x15->addInt32($x14)->rotateLeft(7)); + $x13 = $x13->xorInt32($x12->addInt32($x15)->rotateLeft(9)); + $x14 = $x14->xorInt32($x13->addInt32($x12)->rotateLeft(13)); + $x15 = $x15->xorInt32($x14->addInt32($x13)->rotateLeft(18)); + } + + return $x0->toReverseString() . + $x5->toReverseString() . + $x10->toReverseString() . + $x15->toReverseString() . + $x6->toReverseString() . + $x7->toReverseString() . + $x8->toReverseString() . + $x9->toReverseString(); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Int32.php b/vendor/paragonie/sodium_compat/src/Core32/Int32.php new file mode 100644 index 000000000..c3a17900a --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Int32.php @@ -0,0 +1,871 @@ + - two 16-bit integers + * + * 0 is the higher 16 bits + * 1 is the lower 16 bits + */ + public $limbs = array(0, 0); + + /** + * @var int + */ + public $overflow = 0; + + /** + * @var bool + */ + public $unsignedInt = false; + + /** + * ParagonIE_Sodium_Core32_Int32 constructor. + * @param array $array + * @param bool $unsignedInt + */ + public function __construct($array = array(0, 0), $unsignedInt = false) + { + $this->limbs = array( + (int) $array[0], + (int) $array[1] + ); + $this->overflow = 0; + $this->unsignedInt = $unsignedInt; + } + + /** + * Adds two int32 objects + * + * @param ParagonIE_Sodium_Core32_Int32 $addend + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function addInt32(ParagonIE_Sodium_Core32_Int32 $addend) + { + $i0 = $this->limbs[0]; + $i1 = $this->limbs[1]; + $j0 = $addend->limbs[0]; + $j1 = $addend->limbs[1]; + + $r1 = $i1 + ($j1 & 0xffff); + $carry = $r1 >> 16; + + $r0 = $i0 + ($j0 & 0xffff) + $carry; + $carry = $r0 >> 16; + + $r0 &= 0xffff; + $r1 &= 0xffff; + + $return = new ParagonIE_Sodium_Core32_Int32( + array($r0, $r1) + ); + $return->overflow = $carry; + $return->unsignedInt = $this->unsignedInt; + return $return; + } + + /** + * Adds a normal integer to an int32 object + * + * @param int $int + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + */ + public function addInt($int) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($int, 'int', 1); + /** @var int $int */ + $int = (int) $int; + + $int = (int) $int; + + $i0 = $this->limbs[0]; + $i1 = $this->limbs[1]; + + $r1 = $i1 + ($int & 0xffff); + $carry = $r1 >> 16; + + $r0 = $i0 + (($int >> 16) & 0xffff) + $carry; + $carry = $r0 >> 16; + $r0 &= 0xffff; + $r1 &= 0xffff; + $return = new ParagonIE_Sodium_Core32_Int32( + array($r0, $r1) + ); + $return->overflow = $carry; + $return->unsignedInt = $this->unsignedInt; + return $return; + } + + /** + * @param int $b + * @return int + */ + public function compareInt($b = 0) + { + $gt = 0; + $eq = 1; + + $i = 2; + $j = 0; + while ($i > 0) { + --$i; + /** @var int $x1 */ + $x1 = $this->limbs[$i]; + /** @var int $x2 */ + $x2 = ($b >> ($j << 4)) & 0xffff; + /** @var int $gt */ + $gt |= (($x2 - $x1) >> 8) & $eq; + /** @var int $eq */ + $eq &= (($x2 ^ $x1) - 1) >> 8; + } + return ($gt + $gt - $eq) + 1; + } + + /** + * @param int $m + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function mask($m = 0) + { + /** @var int $hi */ + $hi = ($m >> 16) & 0xffff; + /** @var int $lo */ + $lo = ($m & 0xffff); + return new ParagonIE_Sodium_Core32_Int32( + array( + (int) ($this->limbs[0] & $hi), + (int) ($this->limbs[1] & $lo) + ), + $this->unsignedInt + ); + } + + /** + * @param array $a + * @param array $b + * @param int $baseLog2 + * @return array + */ + public function multiplyLong(array $a, array $b, $baseLog2 = 16) + { + $a_l = count($a); + $b_l = count($b); + /** @var array $r */ + $r = array_fill(0, $a_l + $b_l + 1, 0); + $base = 1 << $baseLog2; + for ($i = 0; $i < $a_l; ++$i) { + $a_i = $a[$i]; + for ($j = 0; $j < $a_l; ++$j) { + $b_j = $b[$j]; + $product = ($a_i * $b_j) + $r[$i + $j]; + $carry = ($product >> $baseLog2 & 0xffff); + $r[$i + $j] = ($product - (int) ($carry * $base)) & 0xffff; + $r[$i + $j + 1] += $carry; + } + } + return array_slice($r, 0, 5); + } + + /** + * @param int $int + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function mulIntFast($int) + { + // Handle negative numbers + $aNeg = ($this->limbs[0] >> 15) & 1; + $bNeg = ($int >> 31) & 1; + $a = array_reverse($this->limbs); + $b = array( + $int & 0xffff, + ($int >> 16) & 0xffff + ); + if ($aNeg) { + for ($i = 0; $i < 2; ++$i) { + $a[$i] = ($a[$i] ^ 0xffff) & 0xffff; + } + ++$a[0]; + } + if ($bNeg) { + for ($i = 0; $i < 2; ++$i) { + $b[$i] = ($b[$i] ^ 0xffff) & 0xffff; + } + ++$b[0]; + } + // Multiply + $res = $this->multiplyLong($a, $b); + + // Re-apply negation to results + if ($aNeg !== $bNeg) { + for ($i = 0; $i < 2; ++$i) { + $res[$i] = (0xffff ^ $res[$i]) & 0xffff; + } + // Handle integer overflow + $c = 1; + for ($i = 0; $i < 2; ++$i) { + $res[$i] += $c; + $c = $res[$i] >> 16; + $res[$i] &= 0xffff; + } + } + + // Return our values + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->limbs = array( + $res[1] & 0xffff, + $res[0] & 0xffff + ); + if (count($res) > 2) { + $return->overflow = $res[2] & 0xffff; + } + $return->unsignedInt = $this->unsignedInt; + return $return; + } + + /** + * @param ParagonIE_Sodium_Core32_Int32 $right + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function mulInt32Fast(ParagonIE_Sodium_Core32_Int32 $right) + { + $aNeg = ($this->limbs[0] >> 15) & 1; + $bNeg = ($right->limbs[0] >> 15) & 1; + + $a = array_reverse($this->limbs); + $b = array_reverse($right->limbs); + if ($aNeg) { + for ($i = 0; $i < 2; ++$i) { + $a[$i] = ($a[$i] ^ 0xffff) & 0xffff; + } + ++$a[0]; + } + if ($bNeg) { + for ($i = 0; $i < 2; ++$i) { + $b[$i] = ($b[$i] ^ 0xffff) & 0xffff; + } + ++$b[0]; + } + $res = $this->multiplyLong($a, $b); + if ($aNeg !== $bNeg) { + if ($aNeg !== $bNeg) { + for ($i = 0; $i < 2; ++$i) { + $res[$i] = ($res[$i] ^ 0xffff) & 0xffff; + } + $c = 1; + for ($i = 0; $i < 2; ++$i) { + $res[$i] += $c; + $c = $res[$i] >> 16; + $res[$i] &= 0xffff; + } + } + } + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->limbs = array( + $res[1] & 0xffff, + $res[0] & 0xffff + ); + if (count($res) > 2) { + $return->overflow = $res[2]; + } + return $return; + } + + /** + * @param int $int + * @param int $size + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + */ + public function mulInt($int = 0, $size = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($int, 'int', 1); + ParagonIE_Sodium_Core32_Util::declareScalarType($size, 'int', 2); + if (ParagonIE_Sodium_Compat::$fastMult) { + return $this->mulIntFast((int) $int); + } + /** @var int $int */ + $int = (int) $int; + /** @var int $size */ + $size = (int) $size; + + if (!$size) { + $size = 31; + } + /** @var int $size */ + + $a = clone $this; + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + + // Initialize: + $ret0 = 0; + $ret1 = 0; + $a0 = $a->limbs[0]; + $a1 = $a->limbs[1]; + + /** @var int $size */ + /** @var int $i */ + for ($i = $size; $i >= 0; --$i) { + $m = (int) (-($int & 1)); + $x0 = $a0 & $m; + $x1 = $a1 & $m; + + $ret1 += $x1; + $c = $ret1 >> 16; + + $ret0 += $x0 + $c; + + $ret0 &= 0xffff; + $ret1 &= 0xffff; + + $a1 = ($a1 << 1); + $x1 = $a1 >> 16; + $a0 = ($a0 << 1) | $x1; + $a0 &= 0xffff; + $a1 &= 0xffff; + $int >>= 1; + } + $return->limbs[0] = $ret0; + $return->limbs[1] = $ret1; + return $return; + } + + /** + * @param ParagonIE_Sodium_Core32_Int32 $int + * @param int $size + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + */ + public function mulInt32(ParagonIE_Sodium_Core32_Int32 $int, $size = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($size, 'int', 2); + if (ParagonIE_Sodium_Compat::$fastMult) { + return $this->mulInt32Fast($int); + } + if (!$size) { + $size = 31; + } + /** @var int $size */ + + $a = clone $this; + $b = clone $int; + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + + // Initialize: + $ret0 = 0; + $ret1 = 0; + $a0 = $a->limbs[0]; + $a1 = $a->limbs[1]; + $b0 = $b->limbs[0]; + $b1 = $b->limbs[1]; + + /** @var int $size */ + /** @var int $i */ + for ($i = $size; $i >= 0; --$i) { + $m = (int) (-($b1 & 1)); + $x0 = $a0 & $m; + $x1 = $a1 & $m; + + $ret1 += $x1; + $c = $ret1 >> 16; + + $ret0 += $x0 + $c; + + $ret0 &= 0xffff; + $ret1 &= 0xffff; + + $a1 = ($a1 << 1); + $x1 = $a1 >> 16; + $a0 = ($a0 << 1) | $x1; + $a0 &= 0xffff; + $a1 &= 0xffff; + + $x0 = ($b0 & 1) << 16; + $b0 = ($b0 >> 1); + $b1 = (($b1 | $x0) >> 1); + + $b0 &= 0xffff; + $b1 &= 0xffff; + + } + $return->limbs[0] = $ret0; + $return->limbs[1] = $ret1; + + return $return; + } + + /** + * OR this 32-bit integer with another. + * + * @param ParagonIE_Sodium_Core32_Int32 $b + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function orInt32(ParagonIE_Sodium_Core32_Int32 $b) + { + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + $return->limbs = array( + (int) ($this->limbs[0] | $b->limbs[0]), + (int) ($this->limbs[1] | $b->limbs[1]) + ); + /** @var int overflow */ + $return->overflow = $this->overflow | $b->overflow; + return $return; + } + + /** + * @param int $b + * @return bool + */ + public function isGreaterThan($b = 0) + { + return $this->compareInt($b) > 0; + } + + /** + * @param int $b + * @return bool + */ + public function isLessThanInt($b = 0) + { + return $this->compareInt($b) < 0; + } + + /** + * @param int $c + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + */ + public function rotateLeft($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + $c &= 31; + if ($c === 0) { + // NOP, but we want a copy. + $return->limbs = $this->limbs; + } else { + /** @var int $c */ + + /** @var int $idx_shift */ + $idx_shift = ($c >> 4) & 1; + + /** @var int $sub_shift */ + $sub_shift = $c & 15; + + /** @var array $limbs */ + $limbs =& $return->limbs; + + /** @var array $myLimbs */ + $myLimbs =& $this->limbs; + + for ($i = 1; $i >= 0; --$i) { + /** @var int $j */ + $j = ($i + $idx_shift) & 1; + /** @var int $k */ + $k = ($i + $idx_shift + 1) & 1; + $limbs[$i] = (int) ( + ( + ((int) ($myLimbs[$j]) << $sub_shift) + | + ((int) ($myLimbs[$k]) >> (16 - $sub_shift)) + ) & 0xffff + ); + } + } + return $return; + } + + /** + * Rotate to the right + * + * @param int $c + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + */ + public function rotateRight($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + $c &= 31; + /** @var int $c */ + if ($c === 0) { + // NOP, but we want a copy. + $return->limbs = $this->limbs; + } else { + /** @var int $c */ + + /** @var int $idx_shift */ + $idx_shift = ($c >> 4) & 1; + + /** @var int $sub_shift */ + $sub_shift = $c & 15; + + /** @var array $limbs */ + $limbs =& $return->limbs; + + /** @var array $myLimbs */ + $myLimbs =& $this->limbs; + + for ($i = 1; $i >= 0; --$i) { + /** @var int $j */ + $j = ($i - $idx_shift) & 1; + /** @var int $k */ + $k = ($i - $idx_shift - 1) & 1; + $limbs[$i] = (int) ( + ( + ((int) ($myLimbs[$j]) >> (int) ($sub_shift)) + | + ((int) ($myLimbs[$k]) << (16 - (int) ($sub_shift))) + ) & 0xffff + ); + } + } + return $return; + } + + /** + * @param bool $bool + * @return self + */ + public function setUnsignedInt($bool = false) + { + $this->unsignedInt = !empty($bool); + return $this; + } + + /** + * @param int $c + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + */ + public function shiftLeft($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + $c &= 63; + /** @var int $c */ + if ($c === 0) { + $return->limbs = $this->limbs; + } elseif ($c < 0) { + /** @var int $c */ + return $this->shiftRight(-$c); + } else { + /** @var int $c */ + /** @var int $tmp */ + $tmp = $this->limbs[1] << $c; + $return->limbs[1] = (int)($tmp & 0xffff); + /** @var int $carry */ + $carry = $tmp >> 16; + + /** @var int $tmp */ + $tmp = ($this->limbs[0] << $c) | ($carry & 0xffff); + $return->limbs[0] = (int) ($tmp & 0xffff); + } + return $return; + } + + /** + * @param int $c + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedOperand + */ + public function shiftRight($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + $c &= 63; + /** @var int $c */ + if ($c >= 16) { + $return->limbs = array( + (int) ($this->overflow & 0xffff), + (int) ($this->limbs[0]) + ); + $return->overflow = $this->overflow >> 16; + return $return->shiftRight($c & 15); + } + if ($c === 0) { + $return->limbs = $this->limbs; + } elseif ($c < 0) { + /** @var int $c */ + return $this->shiftLeft(-$c); + } else { + if (!is_int($c)) { + throw new TypeError(); + } + /** @var int $c */ + // $return->limbs[0] = (int) (($this->limbs[0] >> $c) & 0xffff); + $carryLeft = (int) ($this->overflow & ((1 << ($c + 1)) - 1)); + $return->limbs[0] = (int) ((($this->limbs[0] >> $c) | ($carryLeft << (16 - $c))) & 0xffff); + $carryRight = (int) ($this->limbs[0] & ((1 << ($c + 1)) - 1)); + $return->limbs[1] = (int) ((($this->limbs[1] >> $c) | ($carryRight << (16 - $c))) & 0xffff); + $return->overflow >>= $c; + } + return $return; + } + + /** + * Subtract a normal integer from an int32 object. + * + * @param int $int + * @return ParagonIE_Sodium_Core32_Int32 + * @throws SodiumException + * @throws TypeError + */ + public function subInt($int) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($int, 'int', 1); + /** @var int $int */ + $int = (int) $int; + + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + + /** @var int $tmp */ + $tmp = $this->limbs[1] - ($int & 0xffff); + /** @var int $carry */ + $carry = $tmp >> 16; + $return->limbs[1] = (int) ($tmp & 0xffff); + + /** @var int $tmp */ + $tmp = $this->limbs[0] - (($int >> 16) & 0xffff) + $carry; + $return->limbs[0] = (int) ($tmp & 0xffff); + return $return; + } + + /** + * Subtract two int32 objects from each other + * + * @param ParagonIE_Sodium_Core32_Int32 $b + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function subInt32(ParagonIE_Sodium_Core32_Int32 $b) + { + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + + /** @var int $tmp */ + $tmp = $this->limbs[1] - ($b->limbs[1] & 0xffff); + /** @var int $carry */ + $carry = $tmp >> 16; + $return->limbs[1] = (int) ($tmp & 0xffff); + + /** @var int $tmp */ + $tmp = $this->limbs[0] - ($b->limbs[0] & 0xffff) + $carry; + $return->limbs[0] = (int) ($tmp & 0xffff); + return $return; + } + + /** + * XOR this 32-bit integer with another. + * + * @param ParagonIE_Sodium_Core32_Int32 $b + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function xorInt32(ParagonIE_Sodium_Core32_Int32 $b) + { + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->unsignedInt = $this->unsignedInt; + $return->limbs = array( + (int) ($this->limbs[0] ^ $b->limbs[0]), + (int) ($this->limbs[1] ^ $b->limbs[1]) + ); + return $return; + } + + /** + * @param int $signed + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromInt($signed) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($signed, 'int', 1);; + /** @var int $signed */ + $signed = (int) $signed; + + return new ParagonIE_Sodium_Core32_Int32( + array( + (int) (($signed >> 16) & 0xffff), + (int) ($signed & 0xffff) + ) + ); + } + + /** + * @param string $string + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromString($string) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($string, 'string', 1); + $string = (string) $string; + if (ParagonIE_Sodium_Core32_Util::strlen($string) !== 4) { + throw new RangeException( + 'String must be 4 bytes; ' . ParagonIE_Sodium_Core32_Util::strlen($string) . ' given.' + ); + } + $return = new ParagonIE_Sodium_Core32_Int32(); + + $return->limbs[0] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[0]) & 0xff) << 8); + $return->limbs[0] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[1]) & 0xff); + $return->limbs[1] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[2]) & 0xff) << 8); + $return->limbs[1] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[3]) & 0xff); + return $return; + } + + /** + * @param string $string + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromReverseString($string) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($string, 'string', 1); + $string = (string) $string; + if (ParagonIE_Sodium_Core32_Util::strlen($string) !== 4) { + throw new RangeException( + 'String must be 4 bytes; ' . ParagonIE_Sodium_Core32_Util::strlen($string) . ' given.' + ); + } + $return = new ParagonIE_Sodium_Core32_Int32(); + + $return->limbs[0] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[3]) & 0xff) << 8); + $return->limbs[0] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[2]) & 0xff); + $return->limbs[1] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[1]) & 0xff) << 8); + $return->limbs[1] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[0]) & 0xff); + return $return; + } + + /** + * @return array + */ + public function toArray() + { + return array((int) ($this->limbs[0] << 16 | $this->limbs[1])); + } + + /** + * @return string + * @throws TypeError + */ + public function toString() + { + return + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[0] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[0] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[1] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[1] & 0xff); + } + + /** + * @return int + */ + public function toInt() + { + return (int) ( + (($this->limbs[0] & 0xffff) << 16) + | + ($this->limbs[1] & 0xffff) + ); + } + + /** + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function toInt32() + { + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->limbs[0] = (int) ($this->limbs[0] & 0xffff); + $return->limbs[1] = (int) ($this->limbs[1] & 0xffff); + $return->unsignedInt = $this->unsignedInt; + $return->overflow = (int) ($this->overflow & 0x7fffffff); + return $return; + } + + /** + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function toInt64() + { + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + if ($this->unsignedInt) { + $return->limbs[0] += (($this->overflow >> 16) & 0xffff); + $return->limbs[1] += (($this->overflow) & 0xffff); + } else { + $neg = -(($this->limbs[0] >> 15) & 1); + $return->limbs[0] = (int)($neg & 0xffff); + $return->limbs[1] = (int)($neg & 0xffff); + } + $return->limbs[2] = (int) ($this->limbs[0] & 0xffff); + $return->limbs[3] = (int) ($this->limbs[1] & 0xffff); + return $return; + } + + /** + * @return string + * @throws TypeError + */ + public function toReverseString() + { + return ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[1] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[1] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[0] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[0] >> 8) & 0xff); + } + + /** + * @return string + */ + public function __toString() + { + try { + return $this->toString(); + } catch (TypeError $ex) { + // PHP engine can't handle exceptions from __toString() + return ''; + } + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Int64.php b/vendor/paragonie/sodium_compat/src/Core32/Int64.php new file mode 100644 index 000000000..dd06a3fbe --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Int64.php @@ -0,0 +1,1066 @@ + - four 16-bit integers + */ + public $limbs = array(0, 0, 0, 0); + + /** + * @var int + */ + public $overflow = 0; + + /** + * @var bool + */ + public $unsignedInt = false; + + /** + * ParagonIE_Sodium_Core32_Int64 constructor. + * @param array $array + * @param bool $unsignedInt + */ + public function __construct($array = array(0, 0, 0, 0), $unsignedInt = false) + { + $this->limbs = array( + (int) $array[0], + (int) $array[1], + (int) $array[2], + (int) $array[3] + ); + $this->overflow = 0; + $this->unsignedInt = $unsignedInt; + } + + /** + * Adds two int64 objects + * + * @param ParagonIE_Sodium_Core32_Int64 $addend + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function addInt64(ParagonIE_Sodium_Core32_Int64 $addend) + { + $i0 = $this->limbs[0]; + $i1 = $this->limbs[1]; + $i2 = $this->limbs[2]; + $i3 = $this->limbs[3]; + $j0 = $addend->limbs[0]; + $j1 = $addend->limbs[1]; + $j2 = $addend->limbs[2]; + $j3 = $addend->limbs[3]; + + $r3 = $i3 + ($j3 & 0xffff); + $carry = $r3 >> 16; + + $r2 = $i2 + ($j2 & 0xffff) + $carry; + $carry = $r2 >> 16; + + $r1 = $i1 + ($j1 & 0xffff) + $carry; + $carry = $r1 >> 16; + + $r0 = $i0 + ($j0 & 0xffff) + $carry; + $carry = $r0 >> 16; + + $r0 &= 0xffff; + $r1 &= 0xffff; + $r2 &= 0xffff; + $r3 &= 0xffff; + + $return = new ParagonIE_Sodium_Core32_Int64( + array($r0, $r1, $r2, $r3) + ); + $return->overflow = $carry; + $return->unsignedInt = $this->unsignedInt; + return $return; + } + + /** + * Adds a normal integer to an int64 object + * + * @param int $int + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public function addInt($int) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($int, 'int', 1); + /** @var int $int */ + $int = (int) $int; + + $i0 = $this->limbs[0]; + $i1 = $this->limbs[1]; + $i2 = $this->limbs[2]; + $i3 = $this->limbs[3]; + + $r3 = $i3 + ($int & 0xffff); + $carry = $r3 >> 16; + + $r2 = $i2 + (($int >> 16) & 0xffff) + $carry; + $carry = $r2 >> 16; + + $r1 = $i1 + $carry; + $carry = $r1 >> 16; + + $r0 = $i0 + $carry; + $carry = $r0 >> 16; + + $r0 &= 0xffff; + $r1 &= 0xffff; + $r2 &= 0xffff; + $r3 &= 0xffff; + $return = new ParagonIE_Sodium_Core32_Int64( + array($r0, $r1, $r2, $r3) + ); + $return->overflow = $carry; + $return->unsignedInt = $this->unsignedInt; + return $return; + } + + /** + * @param int $b + * @return int + */ + public function compareInt($b = 0) + { + $gt = 0; + $eq = 1; + + $i = 4; + $j = 0; + while ($i > 0) { + --$i; + /** @var int $x1 */ + $x1 = $this->limbs[$i]; + /** @var int $x2 */ + $x2 = ($b >> ($j << 4)) & 0xffff; + /** int */ + $gt |= (($x2 - $x1) >> 8) & $eq; + /** int */ + $eq &= (($x2 ^ $x1) - 1) >> 8; + } + return ($gt + $gt - $eq) + 1; + } + + /** + * @param int $b + * @return bool + */ + public function isGreaterThan($b = 0) + { + return $this->compareInt($b) > 0; + } + + /** + * @param int $b + * @return bool + */ + public function isLessThanInt($b = 0) + { + return $this->compareInt($b) < 0; + } + + /** + * @param int $hi + * @param int $lo + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function mask64($hi = 0, $lo = 0) + { + /** @var int $a */ + $a = ($hi >> 16) & 0xffff; + /** @var int $b */ + $b = ($hi) & 0xffff; + /** @var int $c */ + $c = ($lo >> 16) & 0xffff; + /** @var int $d */ + $d = ($lo & 0xffff); + return new ParagonIE_Sodium_Core32_Int64( + array( + $this->limbs[0] & $a, + $this->limbs[1] & $b, + $this->limbs[2] & $c, + $this->limbs[3] & $d + ), + $this->unsignedInt + ); + } + + /** + * @param int $int + * @param int $size + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + */ + public function mulInt($int = 0, $size = 0) + { + if (ParagonIE_Sodium_Compat::$fastMult) { + return $this->mulIntFast($int); + } + ParagonIE_Sodium_Core32_Util::declareScalarType($int, 'int', 1); + ParagonIE_Sodium_Core32_Util::declareScalarType($size, 'int', 2); + /** @var int $int */ + $int = (int) $int; + /** @var int $size */ + $size = (int) $size; + + if (!$size) { + $size = 63; + } + + $a = clone $this; + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + + // Initialize: + $ret0 = 0; + $ret1 = 0; + $ret2 = 0; + $ret3 = 0; + $a0 = $a->limbs[0]; + $a1 = $a->limbs[1]; + $a2 = $a->limbs[2]; + $a3 = $a->limbs[3]; + + /** @var int $size */ + /** @var int $i */ + for ($i = $size; $i >= 0; --$i) { + $mask = -($int & 1); + $x0 = $a0 & $mask; + $x1 = $a1 & $mask; + $x2 = $a2 & $mask; + $x3 = $a3 & $mask; + + $ret3 += $x3; + $c = $ret3 >> 16; + + $ret2 += $x2 + $c; + $c = $ret2 >> 16; + + $ret1 += $x1 + $c; + $c = $ret1 >> 16; + + $ret0 += $x0 + $c; + + $ret0 &= 0xffff; + $ret1 &= 0xffff; + $ret2 &= 0xffff; + $ret3 &= 0xffff; + + $a3 = $a3 << 1; + $x3 = $a3 >> 16; + $a2 = ($a2 << 1) | $x3; + $x2 = $a2 >> 16; + $a1 = ($a1 << 1) | $x2; + $x1 = $a1 >> 16; + $a0 = ($a0 << 1) | $x1; + $a0 &= 0xffff; + $a1 &= 0xffff; + $a2 &= 0xffff; + $a3 &= 0xffff; + + $int >>= 1; + } + $return->limbs[0] = $ret0; + $return->limbs[1] = $ret1; + $return->limbs[2] = $ret2; + $return->limbs[3] = $ret3; + return $return; + } + + /** + * @param ParagonIE_Sodium_Core32_Int64 $A + * @param ParagonIE_Sodium_Core32_Int64 $B + * @return array + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedInferredReturnType + */ + public static function ctSelect( + ParagonIE_Sodium_Core32_Int64 $A, + ParagonIE_Sodium_Core32_Int64 $B + ) { + $a = clone $A; + $b = clone $B; + /** @var int $aNeg */ + $aNeg = ($a->limbs[0] >> 15) & 1; + /** @var int $bNeg */ + $bNeg = ($b->limbs[0] >> 15) & 1; + /** @var int $m */ + $m = (-($aNeg & $bNeg)) | 1; + /** @var int $swap */ + $swap = $bNeg & ~$aNeg; + /** @var int $d */ + $d = -$swap; + + /* + if ($bNeg && !$aNeg) { + $a = clone $int; + $b = clone $this; + } elseif($bNeg && $aNeg) { + $a = $this->mulInt(-1); + $b = $int->mulInt(-1); + } + */ + $x = $a->xorInt64($b)->mask64($d, $d); + return array( + $a->xorInt64($x)->mulInt($m), + $b->xorInt64($x)->mulInt($m) + ); + } + + /** + * @param array $a + * @param array $b + * @param int $baseLog2 + * @return array + */ + public function multiplyLong(array $a, array $b, $baseLog2 = 16) + { + $a_l = count($a); + $b_l = count($b); + /** @var array $r */ + $r = array_fill(0, $a_l + $b_l + 1, 0); + $base = 1 << $baseLog2; + for ($i = 0; $i < $a_l; ++$i) { + $a_i = $a[$i]; + for ($j = 0; $j < $a_l; ++$j) { + $b_j = $b[$j]; + $product = ($a_i * $b_j) + $r[$i + $j]; + $carry = ($product >> $baseLog2 & 0xffff); + $r[$i + $j] = ($product - (int) ($carry * $base)) & 0xffff; + $r[$i + $j + 1] += $carry; + } + } + return array_slice($r, 0, 5); + } + + /** + * @param int $int + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function mulIntFast($int) + { + // Handle negative numbers + $aNeg = ($this->limbs[0] >> 15) & 1; + $bNeg = ($int >> 31) & 1; + $a = array_reverse($this->limbs); + $b = array( + $int & 0xffff, + ($int >> 16) & 0xffff, + -$bNeg & 0xffff, + -$bNeg & 0xffff + ); + if ($aNeg) { + for ($i = 0; $i < 4; ++$i) { + $a[$i] = ($a[$i] ^ 0xffff) & 0xffff; + } + ++$a[0]; + } + if ($bNeg) { + for ($i = 0; $i < 4; ++$i) { + $b[$i] = ($b[$i] ^ 0xffff) & 0xffff; + } + ++$b[0]; + } + // Multiply + $res = $this->multiplyLong($a, $b); + + // Re-apply negation to results + if ($aNeg !== $bNeg) { + for ($i = 0; $i < 4; ++$i) { + $res[$i] = (0xffff ^ $res[$i]) & 0xffff; + } + // Handle integer overflow + $c = 1; + for ($i = 0; $i < 4; ++$i) { + $res[$i] += $c; + $c = $res[$i] >> 16; + $res[$i] &= 0xffff; + } + } + + // Return our values + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->limbs = array( + $res[3] & 0xffff, + $res[2] & 0xffff, + $res[1] & 0xffff, + $res[0] & 0xffff + ); + if (count($res) > 4) { + $return->overflow = $res[4] & 0xffff; + } + $return->unsignedInt = $this->unsignedInt; + return $return; + } + + /** + * @param ParagonIE_Sodium_Core32_Int64 $right + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function mulInt64Fast(ParagonIE_Sodium_Core32_Int64 $right) + { + $aNeg = ($this->limbs[0] >> 15) & 1; + $bNeg = ($right->limbs[0] >> 15) & 1; + + $a = array_reverse($this->limbs); + $b = array_reverse($right->limbs); + if ($aNeg) { + for ($i = 0; $i < 4; ++$i) { + $a[$i] = ($a[$i] ^ 0xffff) & 0xffff; + } + ++$a[0]; + } + if ($bNeg) { + for ($i = 0; $i < 4; ++$i) { + $b[$i] = ($b[$i] ^ 0xffff) & 0xffff; + } + ++$b[0]; + } + $res = $this->multiplyLong($a, $b); + if ($aNeg !== $bNeg) { + if ($aNeg !== $bNeg) { + for ($i = 0; $i < 4; ++$i) { + $res[$i] = ($res[$i] ^ 0xffff) & 0xffff; + } + $c = 1; + for ($i = 0; $i < 4; ++$i) { + $res[$i] += $c; + $c = $res[$i] >> 16; + $res[$i] &= 0xffff; + } + } + } + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->limbs = array( + $res[3] & 0xffff, + $res[2] & 0xffff, + $res[1] & 0xffff, + $res[0] & 0xffff + ); + if (count($res) > 4) { + $return->overflow = $res[4]; + } + return $return; + } + + /** + * @param ParagonIE_Sodium_Core32_Int64 $int + * @param int $size + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + */ + public function mulInt64(ParagonIE_Sodium_Core32_Int64 $int, $size = 0) + { + if (ParagonIE_Sodium_Compat::$fastMult) { + return $this->mulInt64Fast($int); + } + ParagonIE_Sodium_Core32_Util::declareScalarType($size, 'int', 2); + if (!$size) { + $size = 63; + } + list($a, $b) = self::ctSelect($this, $int); + + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + + // Initialize: + $ret0 = 0; + $ret1 = 0; + $ret2 = 0; + $ret3 = 0; + $a0 = $a->limbs[0]; + $a1 = $a->limbs[1]; + $a2 = $a->limbs[2]; + $a3 = $a->limbs[3]; + $b0 = $b->limbs[0]; + $b1 = $b->limbs[1]; + $b2 = $b->limbs[2]; + $b3 = $b->limbs[3]; + + /** @var int $size */ + /** @var int $i */ + for ($i = (int) $size; $i >= 0; --$i) { + $mask = -($b3 & 1); + $x0 = $a0 & $mask; + $x1 = $a1 & $mask; + $x2 = $a2 & $mask; + $x3 = $a3 & $mask; + + $ret3 += $x3; + $c = $ret3 >> 16; + + $ret2 += $x2 + $c; + $c = $ret2 >> 16; + + $ret1 += $x1 + $c; + $c = $ret1 >> 16; + + $ret0 += $x0 + $c; + + $ret0 &= 0xffff; + $ret1 &= 0xffff; + $ret2 &= 0xffff; + $ret3 &= 0xffff; + + $a3 = $a3 << 1; + $x3 = $a3 >> 16; + $a2 = ($a2 << 1) | $x3; + $x2 = $a2 >> 16; + $a1 = ($a1 << 1) | $x2; + $x1 = $a1 >> 16; + $a0 = ($a0 << 1) | $x1; + $a0 &= 0xffff; + $a1 &= 0xffff; + $a2 &= 0xffff; + $a3 &= 0xffff; + + $x0 = ($b0 & 1) << 16; + $x1 = ($b1 & 1) << 16; + $x2 = ($b2 & 1) << 16; + + $b0 = ($b0 >> 1); + $b1 = (($b1 | $x0) >> 1); + $b2 = (($b2 | $x1) >> 1); + $b3 = (($b3 | $x2) >> 1); + + $b0 &= 0xffff; + $b1 &= 0xffff; + $b2 &= 0xffff; + $b3 &= 0xffff; + + } + $return->limbs[0] = $ret0; + $return->limbs[1] = $ret1; + $return->limbs[2] = $ret2; + $return->limbs[3] = $ret3; + + return $return; + } + + /** + * OR this 64-bit integer with another. + * + * @param ParagonIE_Sodium_Core32_Int64 $b + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function orInt64(ParagonIE_Sodium_Core32_Int64 $b) + { + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + $return->limbs = array( + (int) ($this->limbs[0] | $b->limbs[0]), + (int) ($this->limbs[1] | $b->limbs[1]), + (int) ($this->limbs[2] | $b->limbs[2]), + (int) ($this->limbs[3] | $b->limbs[3]) + ); + return $return; + } + + /** + * @param int $c + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + */ + public function rotateLeft($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + $c &= 63; + if ($c === 0) { + // NOP, but we want a copy. + $return->limbs = $this->limbs; + } else { + /** @var array $limbs */ + $limbs =& $return->limbs; + + /** @var array $myLimbs */ + $myLimbs =& $this->limbs; + + /** @var int $idx_shift */ + $idx_shift = ($c >> 4) & 3; + /** @var int $sub_shift */ + $sub_shift = $c & 15; + + for ($i = 3; $i >= 0; --$i) { + /** @var int $j */ + $j = ($i + $idx_shift) & 3; + /** @var int $k */ + $k = ($i + $idx_shift + 1) & 3; + $limbs[$i] = (int) ( + ( + ((int) ($myLimbs[$j]) << $sub_shift) + | + ((int) ($myLimbs[$k]) >> (16 - $sub_shift)) + ) & 0xffff + ); + } + } + return $return; + } + + /** + * Rotate to the right + * + * @param int $c + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedArrayAccess + */ + public function rotateRight($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + /** @var ParagonIE_Sodium_Core32_Int64 $return */ + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + $c &= 63; + /** @var int $c */ + if ($c === 0) { + // NOP, but we want a copy. + $return->limbs = $this->limbs; + } else { + /** @var array $limbs */ + $limbs =& $return->limbs; + + /** @var array $myLimbs */ + $myLimbs =& $this->limbs; + + /** @var int $idx_shift */ + $idx_shift = ($c >> 4) & 3; + /** @var int $sub_shift */ + $sub_shift = $c & 15; + + for ($i = 3; $i >= 0; --$i) { + /** @var int $j */ + $j = ($i - $idx_shift) & 3; + /** @var int $k */ + $k = ($i - $idx_shift - 1) & 3; + $limbs[$i] = (int) ( + ( + ((int) ($myLimbs[$j]) >> (int) ($sub_shift)) + | + ((int) ($myLimbs[$k]) << (16 - (int) ($sub_shift))) + ) & 0xffff + ); + } + } + return $return; + } + /** + * @param int $c + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public function shiftLeft($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + /** @var int $c */ + $c = (int) $c; + + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + $c &= 63; + + if ($c >= 16) { + if ($c >= 48) { + $return->limbs = array( + $this->limbs[3], 0, 0, 0 + ); + } elseif ($c >= 32) { + $return->limbs = array( + $this->limbs[2], $this->limbs[3], 0, 0 + ); + } else { + $return->limbs = array( + $this->limbs[1], $this->limbs[2], $this->limbs[3], 0 + ); + } + return $return->shiftLeft($c & 15); + } + if ($c === 0) { + $return->limbs = $this->limbs; + } elseif ($c < 0) { + /** @var int $c */ + return $this->shiftRight(-$c); + } else { + if (!is_int($c)) { + throw new TypeError(); + } + /** @var int $carry */ + $carry = 0; + for ($i = 3; $i >= 0; --$i) { + /** @var int $tmp */ + $tmp = ($this->limbs[$i] << $c) | ($carry & 0xffff); + $return->limbs[$i] = (int) ($tmp & 0xffff); + /** @var int $carry */ + $carry = $tmp >> 16; + } + } + return $return; + } + + /** + * @param int $c + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public function shiftRight($c = 0) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($c, 'int', 1); + $c = (int) $c; + /** @var int $c */ + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + $c &= 63; + + $negative = -(($this->limbs[0] >> 15) & 1); + if ($c >= 16) { + if ($c >= 48) { + $return->limbs = array( + (int) ($negative & 0xffff), + (int) ($negative & 0xffff), + (int) ($negative & 0xffff), + (int) $this->limbs[0] + ); + } elseif ($c >= 32) { + $return->limbs = array( + (int) ($negative & 0xffff), + (int) ($negative & 0xffff), + (int) $this->limbs[0], + (int) $this->limbs[1] + ); + } else { + $return->limbs = array( + (int) ($negative & 0xffff), + (int) $this->limbs[0], + (int) $this->limbs[1], + (int) $this->limbs[2] + ); + } + return $return->shiftRight($c & 15); + } + + if ($c === 0) { + $return->limbs = $this->limbs; + } elseif ($c < 0) { + return $this->shiftLeft(-$c); + } else { + if (!is_int($c)) { + throw new TypeError(); + } + /** @var int $carryRight */ + $carryRight = ($negative & 0xffff); + $mask = (int) (((1 << ($c + 1)) - 1) & 0xffff); + for ($i = 0; $i < 4; ++$i) { + $return->limbs[$i] = (int) ( + (($this->limbs[$i] >> $c) | ($carryRight << (16 - $c))) & 0xffff + ); + $carryRight = (int) ($this->limbs[$i] & $mask); + } + } + return $return; + } + + + /** + * Subtract a normal integer from an int64 object. + * + * @param int $int + * @return ParagonIE_Sodium_Core32_Int64 + * @throws SodiumException + * @throws TypeError + */ + public function subInt($int) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($int, 'int', 1); + $int = (int) $int; + + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + + /** @var int $carry */ + $carry = 0; + for ($i = 3; $i >= 0; --$i) { + /** @var int $tmp */ + $tmp = $this->limbs[$i] - (($int >> 16) & 0xffff) + $carry; + /** @var int $carry */ + $carry = $tmp >> 16; + $return->limbs[$i] = (int) ($tmp & 0xffff); + } + return $return; + } + + /** + * The difference between two Int64 objects. + * + * @param ParagonIE_Sodium_Core32_Int64 $b + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function subInt64(ParagonIE_Sodium_Core32_Int64 $b) + { + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + /** @var int $carry */ + $carry = 0; + for ($i = 3; $i >= 0; --$i) { + /** @var int $tmp */ + $tmp = $this->limbs[$i] - $b->limbs[$i] + $carry; + /** @var int $carry */ + $carry = ($tmp >> 16); + $return->limbs[$i] = (int) ($tmp & 0xffff); + } + return $return; + } + + /** + * XOR this 64-bit integer with another. + * + * @param ParagonIE_Sodium_Core32_Int64 $b + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function xorInt64(ParagonIE_Sodium_Core32_Int64 $b) + { + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->unsignedInt = $this->unsignedInt; + $return->limbs = array( + (int) ($this->limbs[0] ^ $b->limbs[0]), + (int) ($this->limbs[1] ^ $b->limbs[1]), + (int) ($this->limbs[2] ^ $b->limbs[2]), + (int) ($this->limbs[3] ^ $b->limbs[3]) + ); + return $return; + } + + /** + * @param int $low + * @param int $high + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromInts($low, $high) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($low, 'int', 1); + ParagonIE_Sodium_Core32_Util::declareScalarType($high, 'int', 2); + + $high = (int) $high; + $low = (int) $low; + return new ParagonIE_Sodium_Core32_Int64( + array( + (int) (($high >> 16) & 0xffff), + (int) ($high & 0xffff), + (int) (($low >> 16) & 0xffff), + (int) ($low & 0xffff) + ) + ); + } + + /** + * @param int $low + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromInt($low) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($low, 'int', 1); + $low = (int) $low; + + return new ParagonIE_Sodium_Core32_Int64( + array( + 0, + 0, + (int) (($low >> 16) & 0xffff), + (int) ($low & 0xffff) + ) + ); + } + + /** + * @return int + */ + public function toInt() + { + return (int) ( + (($this->limbs[2] & 0xffff) << 16) + | + ($this->limbs[3] & 0xffff) + ); + } + + /** + * @param string $string + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromString($string) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($string, 'string', 1); + $string = (string) $string; + if (ParagonIE_Sodium_Core32_Util::strlen($string) !== 8) { + throw new RangeException( + 'String must be 8 bytes; ' . ParagonIE_Sodium_Core32_Util::strlen($string) . ' given.' + ); + } + $return = new ParagonIE_Sodium_Core32_Int64(); + + $return->limbs[0] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[0]) & 0xff) << 8); + $return->limbs[0] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[1]) & 0xff); + $return->limbs[1] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[2]) & 0xff) << 8); + $return->limbs[1] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[3]) & 0xff); + $return->limbs[2] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[4]) & 0xff) << 8); + $return->limbs[2] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[5]) & 0xff); + $return->limbs[3] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[6]) & 0xff) << 8); + $return->limbs[3] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[7]) & 0xff); + return $return; + } + + /** + * @param string $string + * @return self + * @throws SodiumException + * @throws TypeError + */ + public static function fromReverseString($string) + { + ParagonIE_Sodium_Core32_Util::declareScalarType($string, 'string', 1); + $string = (string) $string; + if (ParagonIE_Sodium_Core32_Util::strlen($string) !== 8) { + throw new RangeException( + 'String must be 8 bytes; ' . ParagonIE_Sodium_Core32_Util::strlen($string) . ' given.' + ); + } + $return = new ParagonIE_Sodium_Core32_Int64(); + + $return->limbs[0] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[7]) & 0xff) << 8); + $return->limbs[0] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[6]) & 0xff); + $return->limbs[1] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[5]) & 0xff) << 8); + $return->limbs[1] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[4]) & 0xff); + $return->limbs[2] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[3]) & 0xff) << 8); + $return->limbs[2] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[2]) & 0xff); + $return->limbs[3] = (int) ((ParagonIE_Sodium_Core32_Util::chrToInt($string[1]) & 0xff) << 8); + $return->limbs[3] |= (ParagonIE_Sodium_Core32_Util::chrToInt($string[0]) & 0xff); + return $return; + } + + /** + * @return array + */ + public function toArray() + { + return array( + (int) ((($this->limbs[0] & 0xffff) << 16) | ($this->limbs[1] & 0xffff)), + (int) ((($this->limbs[2] & 0xffff) << 16) | ($this->limbs[3] & 0xffff)) + ); + } + + /** + * @return ParagonIE_Sodium_Core32_Int32 + */ + public function toInt32() + { + $return = new ParagonIE_Sodium_Core32_Int32(); + $return->limbs[0] = (int) ($this->limbs[2]); + $return->limbs[1] = (int) ($this->limbs[3]); + $return->unsignedInt = $this->unsignedInt; + $return->overflow = (int) (ParagonIE_Sodium_Core32_Util::abs($this->limbs[1], 16) & 0xffff); + return $return; + } + + /** + * @return ParagonIE_Sodium_Core32_Int64 + */ + public function toInt64() + { + $return = new ParagonIE_Sodium_Core32_Int64(); + $return->limbs[0] = (int) ($this->limbs[0]); + $return->limbs[1] = (int) ($this->limbs[1]); + $return->limbs[2] = (int) ($this->limbs[2]); + $return->limbs[3] = (int) ($this->limbs[3]); + $return->unsignedInt = $this->unsignedInt; + $return->overflow = ParagonIE_Sodium_Core32_Util::abs($this->overflow); + return $return; + } + + /** + * @param bool $bool + * @return self + */ + public function setUnsignedInt($bool = false) + { + $this->unsignedInt = !empty($bool); + return $this; + } + + /** + * @return string + * @throws TypeError + */ + public function toString() + { + return ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[0] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[0] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[1] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[1] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[2] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[2] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[3] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[3] & 0xff); + } + + /** + * @return string + * @throws TypeError + */ + public function toReverseString() + { + return ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[3] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[3] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[2] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[2] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[1] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[1] >> 8) & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr($this->limbs[0] & 0xff) . + ParagonIE_Sodium_Core32_Util::intToChr(($this->limbs[0] >> 8) & 0xff); + } + + /** + * @return string + */ + public function __toString() + { + try { + return $this->toString(); + } catch (TypeError $ex) { + // PHP engine can't handle exceptions from __toString() + return ''; + } + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Poly1305.php b/vendor/paragonie/sodium_compat/src/Core32/Poly1305.php new file mode 100644 index 000000000..b9dfaf3c0 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Poly1305.php @@ -0,0 +1,63 @@ +update($m) + ->finish(); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $mac + * @param string $m + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function onetimeauth_verify($mac, $m, $key) + { + if (self::strlen($key) < 32) { + throw new InvalidArgumentException( + 'Key must be 32 bytes long.' + ); + } + $state = new ParagonIE_Sodium_Core32_Poly1305_State( + self::substr($key, 0, 32) + ); + $calc = $state + ->update($m) + ->finish(); + return self::verify_16($calc, $mac); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Poly1305/State.php b/vendor/paragonie/sodium_compat/src/Core32/Poly1305/State.php new file mode 100644 index 000000000..d80e1ff98 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Poly1305/State.php @@ -0,0 +1,451 @@ + + */ + protected $buffer = array(); + + /** + * @var bool + */ + protected $final = false; + + /** + * @var array + */ + public $h; + + /** + * @var int + */ + protected $leftover = 0; + + /** + * @var array + */ + public $r; + + /** + * @var array + */ + public $pad; + + /** + * ParagonIE_Sodium_Core32_Poly1305_State constructor. + * + * @internal You should not use this directly from another application + * + * @param string $key + * @throws InvalidArgumentException + * @throws SodiumException + * @throws TypeError + */ + public function __construct($key = '') + { + if (self::strlen($key) < 32) { + throw new InvalidArgumentException( + 'Poly1305 requires a 32-byte key' + ); + } + /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */ + $this->r = array( + // st->r[0] = ... + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 0, 4)) + ->setUnsignedInt(true) + ->mask(0x3ffffff), + // st->r[1] = ... + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 3, 4)) + ->setUnsignedInt(true) + ->shiftRight(2) + ->mask(0x3ffff03), + // st->r[2] = ... + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 6, 4)) + ->setUnsignedInt(true) + ->shiftRight(4) + ->mask(0x3ffc0ff), + // st->r[3] = ... + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 9, 4)) + ->setUnsignedInt(true) + ->shiftRight(6) + ->mask(0x3f03fff), + // st->r[4] = ... + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 12, 4)) + ->setUnsignedInt(true) + ->shiftRight(8) + ->mask(0x00fffff) + ); + + /* h = 0 */ + $this->h = array( + new ParagonIE_Sodium_Core32_Int32(array(0, 0), true), + new ParagonIE_Sodium_Core32_Int32(array(0, 0), true), + new ParagonIE_Sodium_Core32_Int32(array(0, 0), true), + new ParagonIE_Sodium_Core32_Int32(array(0, 0), true), + new ParagonIE_Sodium_Core32_Int32(array(0, 0), true) + ); + + /* save pad for later */ + $this->pad = array( + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 16, 4)) + ->setUnsignedInt(true)->toInt64(), + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 20, 4)) + ->setUnsignedInt(true)->toInt64(), + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 24, 4)) + ->setUnsignedInt(true)->toInt64(), + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 28, 4)) + ->setUnsignedInt(true)->toInt64(), + ); + + $this->leftover = 0; + $this->final = false; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @return self + * @throws SodiumException + * @throws TypeError + */ + public function update($message = '') + { + $bytes = self::strlen($message); + + /* handle leftover */ + if ($this->leftover) { + /** @var int $want */ + $want = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - $this->leftover; + if ($want > $bytes) { + $want = $bytes; + } + for ($i = 0; $i < $want; ++$i) { + $mi = self::chrToInt($message[$i]); + $this->buffer[$this->leftover + $i] = $mi; + } + // We snip off the leftmost bytes. + $message = self::substr($message, $want); + $bytes = self::strlen($message); + $this->leftover += $want; + if ($this->leftover < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { + // We still don't have enough to run $this->blocks() + return $this; + } + + $this->blocks( + self::intArrayToString($this->buffer), + ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE + ); + $this->leftover = 0; + } + + /* process full blocks */ + if ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { + /** @var int $want */ + $want = $bytes & ~(ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - 1); + if ($want >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { + /** @var string $block */ + $block = self::substr($message, 0, $want); + if (self::strlen($block) >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { + $this->blocks($block, $want); + $message = self::substr($message, $want); + $bytes = self::strlen($message); + } + } + } + + /* store leftover */ + if ($bytes) { + for ($i = 0; $i < $bytes; ++$i) { + $mi = self::chrToInt($message[$i]); + $this->buffer[$this->leftover + $i] = $mi; + } + $this->leftover = (int) $this->leftover + $bytes; + } + return $this; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param int $bytes + * @return self + * @throws SodiumException + * @throws TypeError + */ + public function blocks($message, $bytes) + { + if (self::strlen($message) < 16) { + $message = str_pad($message, 16, "\x00", STR_PAD_RIGHT); + } + $hibit = ParagonIE_Sodium_Core32_Int32::fromInt((int) ($this->final ? 0 : 1 << 24)); /* 1 << 128 */ + $hibit->setUnsignedInt(true); + $zero = new ParagonIE_Sodium_Core32_Int64(array(0, 0, 0, 0), true); + /** + * @var ParagonIE_Sodium_Core32_Int64 $d0 + * @var ParagonIE_Sodium_Core32_Int64 $d1 + * @var ParagonIE_Sodium_Core32_Int64 $d2 + * @var ParagonIE_Sodium_Core32_Int64 $d3 + * @var ParagonIE_Sodium_Core32_Int64 $d4 + * @var ParagonIE_Sodium_Core32_Int64 $r0 + * @var ParagonIE_Sodium_Core32_Int64 $r1 + * @var ParagonIE_Sodium_Core32_Int64 $r2 + * @var ParagonIE_Sodium_Core32_Int64 $r3 + * @var ParagonIE_Sodium_Core32_Int64 $r4 + * + * @var ParagonIE_Sodium_Core32_Int32 $h0 + * @var ParagonIE_Sodium_Core32_Int32 $h1 + * @var ParagonIE_Sodium_Core32_Int32 $h2 + * @var ParagonIE_Sodium_Core32_Int32 $h3 + * @var ParagonIE_Sodium_Core32_Int32 $h4 + */ + $r0 = $this->r[0]->toInt64(); + $r1 = $this->r[1]->toInt64(); + $r2 = $this->r[2]->toInt64(); + $r3 = $this->r[3]->toInt64(); + $r4 = $this->r[4]->toInt64(); + + $s1 = $r1->toInt64()->mulInt(5, 3); + $s2 = $r2->toInt64()->mulInt(5, 3); + $s3 = $r3->toInt64()->mulInt(5, 3); + $s4 = $r4->toInt64()->mulInt(5, 3); + + $h0 = $this->h[0]; + $h1 = $this->h[1]; + $h2 = $this->h[2]; + $h3 = $this->h[3]; + $h4 = $this->h[4]; + + while ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { + /* h += m[i] */ + $h0 = $h0->addInt32( + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 0, 4)) + ->mask(0x3ffffff) + )->toInt64(); + $h1 = $h1->addInt32( + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 3, 4)) + ->shiftRight(2) + ->mask(0x3ffffff) + )->toInt64(); + $h2 = $h2->addInt32( + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 6, 4)) + ->shiftRight(4) + ->mask(0x3ffffff) + )->toInt64(); + $h3 = $h3->addInt32( + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 9, 4)) + ->shiftRight(6) + ->mask(0x3ffffff) + )->toInt64(); + $h4 = $h4->addInt32( + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 12, 4)) + ->shiftRight(8) + ->orInt32($hibit) + )->toInt64(); + + /* h *= r */ + $d0 = $zero + ->addInt64($h0->mulInt64($r0, 25)) + ->addInt64($s4->mulInt64($h1, 26)) + ->addInt64($s3->mulInt64($h2, 26)) + ->addInt64($s2->mulInt64($h3, 26)) + ->addInt64($s1->mulInt64($h4, 26)); + + $d1 = $zero + ->addInt64($h0->mulInt64($r1, 25)) + ->addInt64($h1->mulInt64($r0, 25)) + ->addInt64($s4->mulInt64($h2, 26)) + ->addInt64($s3->mulInt64($h3, 26)) + ->addInt64($s2->mulInt64($h4, 26)); + + $d2 = $zero + ->addInt64($h0->mulInt64($r2, 25)) + ->addInt64($h1->mulInt64($r1, 25)) + ->addInt64($h2->mulInt64($r0, 25)) + ->addInt64($s4->mulInt64($h3, 26)) + ->addInt64($s3->mulInt64($h4, 26)); + + $d3 = $zero + ->addInt64($h0->mulInt64($r3, 25)) + ->addInt64($h1->mulInt64($r2, 25)) + ->addInt64($h2->mulInt64($r1, 25)) + ->addInt64($h3->mulInt64($r0, 25)) + ->addInt64($s4->mulInt64($h4, 26)); + + $d4 = $zero + ->addInt64($h0->mulInt64($r4, 25)) + ->addInt64($h1->mulInt64($r3, 25)) + ->addInt64($h2->mulInt64($r2, 25)) + ->addInt64($h3->mulInt64($r1, 25)) + ->addInt64($h4->mulInt64($r0, 25)); + + /* (partial) h %= p */ + $c = $d0->shiftRight(26); + $h0 = $d0->toInt32()->mask(0x3ffffff); + $d1 = $d1->addInt64($c); + + $c = $d1->shiftRight(26); + $h1 = $d1->toInt32()->mask(0x3ffffff); + $d2 = $d2->addInt64($c); + + $c = $d2->shiftRight(26); + $h2 = $d2->toInt32()->mask(0x3ffffff); + $d3 = $d3->addInt64($c); + + $c = $d3->shiftRight(26); + $h3 = $d3->toInt32()->mask(0x3ffffff); + $d4 = $d4->addInt64($c); + + $c = $d4->shiftRight(26); + $h4 = $d4->toInt32()->mask(0x3ffffff); + $h0 = $h0->addInt32($c->toInt32()->mulInt(5, 3)); + + $c = $h0->shiftRight(26); + $h0 = $h0->mask(0x3ffffff); + $h1 = $h1->addInt32($c); + + // Chop off the left 32 bytes. + $message = self::substr( + $message, + ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE + ); + $bytes -= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; + } + + /** @var array $h */ + $this->h = array($h0, $h1, $h2, $h3, $h4); + return $this; + } + + /** + * @internal You should not use this directly from another application + * + * @return string + * @throws SodiumException + * @throws TypeError + */ + public function finish() + { + /* process the remaining block */ + if ($this->leftover) { + $i = $this->leftover; + $this->buffer[$i++] = 1; + for (; $i < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; ++$i) { + $this->buffer[$i] = 0; + } + $this->final = true; + $this->blocks( + self::substr( + self::intArrayToString($this->buffer), + 0, + ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE + ), + $b = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE + ); + } + + /** + * @var ParagonIE_Sodium_Core32_Int32 $f + * @var ParagonIE_Sodium_Core32_Int32 $g0 + * @var ParagonIE_Sodium_Core32_Int32 $g1 + * @var ParagonIE_Sodium_Core32_Int32 $g2 + * @var ParagonIE_Sodium_Core32_Int32 $g3 + * @var ParagonIE_Sodium_Core32_Int32 $g4 + * @var ParagonIE_Sodium_Core32_Int32 $h0 + * @var ParagonIE_Sodium_Core32_Int32 $h1 + * @var ParagonIE_Sodium_Core32_Int32 $h2 + * @var ParagonIE_Sodium_Core32_Int32 $h3 + * @var ParagonIE_Sodium_Core32_Int32 $h4 + */ + $h0 = $this->h[0]; + $h1 = $this->h[1]; + $h2 = $this->h[2]; + $h3 = $this->h[3]; + $h4 = $this->h[4]; + + $c = $h1->shiftRight(26); # $c = $h1 >> 26; + $h1 = $h1->mask(0x3ffffff); # $h1 &= 0x3ffffff; + + $h2 = $h2->addInt32($c); # $h2 += $c; + $c = $h2->shiftRight(26); # $c = $h2 >> 26; + $h2 = $h2->mask(0x3ffffff); # $h2 &= 0x3ffffff; + + $h3 = $h3->addInt32($c); # $h3 += $c; + $c = $h3->shiftRight(26); # $c = $h3 >> 26; + $h3 = $h3->mask(0x3ffffff); # $h3 &= 0x3ffffff; + + $h4 = $h4->addInt32($c); # $h4 += $c; + $c = $h4->shiftRight(26); # $c = $h4 >> 26; + $h4 = $h4->mask(0x3ffffff); # $h4 &= 0x3ffffff; + + $h0 = $h0->addInt32($c->mulInt(5, 3)); # $h0 += self::mul($c, 5); + $c = $h0->shiftRight(26); # $c = $h0 >> 26; + $h0 = $h0->mask(0x3ffffff); # $h0 &= 0x3ffffff; + $h1 = $h1->addInt32($c); # $h1 += $c; + + /* compute h + -p */ + $g0 = $h0->addInt(5); + $c = $g0->shiftRight(26); + $g0 = $g0->mask(0x3ffffff); + $g1 = $h1->addInt32($c); + $c = $g1->shiftRight(26); + $g1 = $g1->mask(0x3ffffff); + $g2 = $h2->addInt32($c); + $c = $g2->shiftRight(26); + $g2 = $g2->mask(0x3ffffff); + $g3 = $h3->addInt32($c); + $c = $g3->shiftRight(26); + $g3 = $g3->mask(0x3ffffff); + $g4 = $h4->addInt32($c)->subInt(1 << 26); + + # $mask = ($g4 >> 31) - 1; + /* select h if h < p, or h + -p if h >= p */ + $mask = (int) (($g4->toInt() >> 31) + 1); + + $g0 = $g0->mask($mask); + $g1 = $g1->mask($mask); + $g2 = $g2->mask($mask); + $g3 = $g3->mask($mask); + $g4 = $g4->mask($mask); + + /** @var int $mask */ + $mask = (~$mask) & 0xffffffff; + + $h0 = $h0->mask($mask)->orInt32($g0); + $h1 = $h1->mask($mask)->orInt32($g1); + $h2 = $h2->mask($mask)->orInt32($g2); + $h3 = $h3->mask($mask)->orInt32($g3); + $h4 = $h4->mask($mask)->orInt32($g4); + + /* h = h % (2^128) */ + $h0 = $h0->orInt32($h1->shiftLeft(26)); + $h1 = $h1->shiftRight(6)->orInt32($h2->shiftLeft(20)); + $h2 = $h2->shiftRight(12)->orInt32($h3->shiftLeft(14)); + $h3 = $h3->shiftRight(18)->orInt32($h4->shiftLeft(8)); + + /* mac = (h + pad) % (2^128) */ + $f = $h0->toInt64()->addInt64($this->pad[0]); + $h0 = $f->toInt32(); + $f = $h1->toInt64()->addInt64($this->pad[1])->addInt($h0->overflow); + $h1 = $f->toInt32(); + $f = $h2->toInt64()->addInt64($this->pad[2])->addInt($h1->overflow); + $h2 = $f->toInt32(); + $f = $h3->toInt64()->addInt64($this->pad[3])->addInt($h2->overflow); + $h3 = $f->toInt32(); + + return $h0->toReverseString() . + $h1->toReverseString() . + $h2->toReverseString() . + $h3->toReverseString(); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Salsa20.php b/vendor/paragonie/sodium_compat/src/Core32/Salsa20.php new file mode 100644 index 000000000..d8c8073ce --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Salsa20.php @@ -0,0 +1,306 @@ + 0; $i -= 2) { + $x4 = $x4->xorInt32($x0->addInt32($x12)->rotateLeft(7)); + $x8 = $x8->xorInt32($x4->addInt32($x0)->rotateLeft(9)); + $x12 = $x12->xorInt32($x8->addInt32($x4)->rotateLeft(13)); + $x0 = $x0->xorInt32($x12->addInt32($x8)->rotateLeft(18)); + + $x9 = $x9->xorInt32($x5->addInt32($x1)->rotateLeft(7)); + $x13 = $x13->xorInt32($x9->addInt32($x5)->rotateLeft(9)); + $x1 = $x1->xorInt32($x13->addInt32($x9)->rotateLeft(13)); + $x5 = $x5->xorInt32($x1->addInt32($x13)->rotateLeft(18)); + + $x14 = $x14->xorInt32($x10->addInt32($x6)->rotateLeft(7)); + $x2 = $x2->xorInt32($x14->addInt32($x10)->rotateLeft(9)); + $x6 = $x6->xorInt32($x2->addInt32($x14)->rotateLeft(13)); + $x10 = $x10->xorInt32($x6->addInt32($x2)->rotateLeft(18)); + + $x3 = $x3->xorInt32($x15->addInt32($x11)->rotateLeft(7)); + $x7 = $x7->xorInt32($x3->addInt32($x15)->rotateLeft(9)); + $x11 = $x11->xorInt32($x7->addInt32($x3)->rotateLeft(13)); + $x15 = $x15->xorInt32($x11->addInt32($x7)->rotateLeft(18)); + + $x1 = $x1->xorInt32($x0->addInt32($x3)->rotateLeft(7)); + $x2 = $x2->xorInt32($x1->addInt32($x0)->rotateLeft(9)); + $x3 = $x3->xorInt32($x2->addInt32($x1)->rotateLeft(13)); + $x0 = $x0->xorInt32($x3->addInt32($x2)->rotateLeft(18)); + + $x6 = $x6->xorInt32($x5->addInt32($x4)->rotateLeft(7)); + $x7 = $x7->xorInt32($x6->addInt32($x5)->rotateLeft(9)); + $x4 = $x4->xorInt32($x7->addInt32($x6)->rotateLeft(13)); + $x5 = $x5->xorInt32($x4->addInt32($x7)->rotateLeft(18)); + + $x11 = $x11->xorInt32($x10->addInt32($x9)->rotateLeft(7)); + $x8 = $x8->xorInt32($x11->addInt32($x10)->rotateLeft(9)); + $x9 = $x9->xorInt32($x8->addInt32($x11)->rotateLeft(13)); + $x10 = $x10->xorInt32($x9->addInt32($x8)->rotateLeft(18)); + + $x12 = $x12->xorInt32($x15->addInt32($x14)->rotateLeft(7)); + $x13 = $x13->xorInt32($x12->addInt32($x15)->rotateLeft(9)); + $x14 = $x14->xorInt32($x13->addInt32($x12)->rotateLeft(13)); + $x15 = $x15->xorInt32($x14->addInt32($x13)->rotateLeft(18)); + } + + $x0 = $x0->addInt32($j0); + $x1 = $x1->addInt32($j1); + $x2 = $x2->addInt32($j2); + $x3 = $x3->addInt32($j3); + $x4 = $x4->addInt32($j4); + $x5 = $x5->addInt32($j5); + $x6 = $x6->addInt32($j6); + $x7 = $x7->addInt32($j7); + $x8 = $x8->addInt32($j8); + $x9 = $x9->addInt32($j9); + $x10 = $x10->addInt32($j10); + $x11 = $x11->addInt32($j11); + $x12 = $x12->addInt32($j12); + $x13 = $x13->addInt32($j13); + $x14 = $x14->addInt32($j14); + $x15 = $x15->addInt32($j15); + + return $x0->toReverseString() . + $x1->toReverseString() . + $x2->toReverseString() . + $x3->toReverseString() . + $x4->toReverseString() . + $x5->toReverseString() . + $x6->toReverseString() . + $x7->toReverseString() . + $x8->toReverseString() . + $x9->toReverseString() . + $x10->toReverseString() . + $x11->toReverseString() . + $x12->toReverseString() . + $x13->toReverseString() . + $x14->toReverseString() . + $x15->toReverseString(); + } + + /** + * @internal You should not use this directly from another application + * + * @param int $len + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function salsa20($len, $nonce, $key) + { + if (self::strlen($key) !== 32) { + throw new RangeException('Key must be 32 bytes long'); + } + $kcopy = '' . $key; + $in = self::substr($nonce, 0, 8) . str_repeat("\0", 8); + $c = ''; + while ($len >= 64) { + $c .= self::core_salsa20($in, $kcopy, null); + $u = 1; + // Internal counter. + for ($i = 8; $i < 16; ++$i) { + $u += self::chrToInt($in[$i]); + $in[$i] = self::intToChr($u & 0xff); + $u >>= 8; + } + $len -= 64; + } + if ($len > 0) { + $c .= self::substr( + self::core_salsa20($in, $kcopy, null), + 0, + $len + ); + } + try { + ParagonIE_Sodium_Compat::memzero($kcopy); + } catch (SodiumException $ex) { + $kcopy = null; + } + return $c; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $m + * @param string $n + * @param int $ic + * @param string $k + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function salsa20_xor_ic($m, $n, $ic, $k) + { + $mlen = self::strlen($m); + if ($mlen < 1) { + return ''; + } + $kcopy = self::substr($k, 0, 32); + $in = self::substr($n, 0, 8); + // Initialize the counter + $in .= ParagonIE_Sodium_Core32_Util::store64_le($ic); + + $c = ''; + while ($mlen >= 64) { + $block = self::core_salsa20($in, $kcopy, null); + $c .= self::xorStrings( + self::substr($m, 0, 64), + self::substr($block, 0, 64) + ); + $u = 1; + for ($i = 8; $i < 16; ++$i) { + $u += self::chrToInt($in[$i]); + $in[$i] = self::intToChr($u & 0xff); + $u >>= 8; + } + + $mlen -= 64; + $m = self::substr($m, 64); + } + + if ($mlen) { + $block = self::core_salsa20($in, $kcopy, null); + $c .= self::xorStrings( + self::substr($m, 0, $mlen), + self::substr($block, 0, $mlen) + ); + } + try { + ParagonIE_Sodium_Compat::memzero($block); + ParagonIE_Sodium_Compat::memzero($kcopy); + } catch (SodiumException $ex) { + $block = null; + $kcopy = null; + } + + return $c; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $message + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function salsa20_xor($message, $nonce, $key) + { + return self::xorStrings( + $message, + self::salsa20( + self::strlen($message), + $nonce, + $key + ) + ); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/SecretStream/State.php b/vendor/paragonie/sodium_compat/src/Core32/SecretStream/State.php new file mode 100644 index 000000000..6f2048629 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/SecretStream/State.php @@ -0,0 +1,163 @@ +key = $key; + $this->counter = 1; + if (is_null($nonce)) { + $nonce = str_repeat("\0", 12); + } + $this->nonce = str_pad($nonce, 12, "\0", STR_PAD_RIGHT);; + $this->_pad = str_repeat("\0", 4); + } + + /** + * @return self + */ + public function counterReset() + { + $this->counter = 1; + $this->_pad = str_repeat("\0", 4); + return $this; + } + + /** + * @return string + */ + public function getKey() + { + return $this->key; + } + + /** + * @return string + */ + public function getCounter() + { + return ParagonIE_Sodium_Core32_Util::store32_le($this->counter); + } + + /** + * @return string + */ + public function getNonce() + { + if (!is_string($this->nonce)) { + $this->nonce = str_repeat("\0", 12); + } + if (ParagonIE_Sodium_Core32_Util::strlen($this->nonce) !== 12) { + $this->nonce = str_pad($this->nonce, 12, "\0", STR_PAD_RIGHT); + } + return $this->nonce; + } + + /** + * @return string + */ + public function getCombinedNonce() + { + return $this->getCounter() . + ParagonIE_Sodium_Core32_Util::substr($this->getNonce(), 0, 8); + } + + /** + * @return self + */ + public function incrementCounter() + { + ++$this->counter; + return $this; + } + + /** + * @return bool + */ + public function needsRekey() + { + return ($this->counter & 0xffff) === 0; + } + + /** + * @param string $newKeyAndNonce + * @return self + */ + public function rekey($newKeyAndNonce) + { + $this->key = ParagonIE_Sodium_Core32_Util::substr($newKeyAndNonce, 0, 32); + $this->nonce = str_pad( + ParagonIE_Sodium_Core32_Util::substr($newKeyAndNonce, 32), + 12, + "\0", + STR_PAD_RIGHT + ); + return $this; + } + + /** + * @param string $str + * @return self + */ + public function xorNonce($str) + { + $this->nonce = ParagonIE_Sodium_Core32_Util::xorStrings( + $this->getNonce(), + str_pad( + ParagonIE_Sodium_Core32_Util::substr($str, 0, 8), + 12, + "\0", + STR_PAD_RIGHT + ) + ); + return $this; + } + + /** + * @param string $string + * @return self + */ + public static function fromString($string) + { + $state = new ParagonIE_Sodium_Core32_SecretStream_State( + ParagonIE_Sodium_Core32_Util::substr($string, 0, 32) + ); + $state->counter = ParagonIE_Sodium_Core32_Util::load_4( + ParagonIE_Sodium_Core32_Util::substr($string, 32, 4) + ); + $state->nonce = ParagonIE_Sodium_Core32_Util::substr($string, 36, 12); + $state->_pad = ParagonIE_Sodium_Core32_Util::substr($string, 48, 8); + return $state; + } + + /** + * @return string + */ + public function toString() + { + return $this->key . + $this->getCounter() . + $this->nonce . + $this->_pad; + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/SipHash.php b/vendor/paragonie/sodium_compat/src/Core32/SipHash.php new file mode 100644 index 000000000..079946dcf --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/SipHash.php @@ -0,0 +1,238 @@ + $v + * @return array + */ + public static function sipRound(array $v) + { + # v0 += v1; + $v[0] = $v[0]->addInt64($v[1]); + + # v1 = ROTL(v1, 13); + $v[1] = $v[1]->rotateLeft(13); + + # v1 ^= v0; + $v[1] = $v[1]->xorInt64($v[0]); + + # v0=ROTL(v0,32); + $v[0] = $v[0]->rotateLeft(32); + + # v2 += v3; + $v[2] = $v[2]->addInt64($v[3]); + + # v3=ROTL(v3,16); + $v[3] = $v[3]->rotateLeft(16); + + # v3 ^= v2; + $v[3] = $v[3]->xorInt64($v[2]); + + # v0 += v3; + $v[0] = $v[0]->addInt64($v[3]); + + # v3=ROTL(v3,21); + $v[3] = $v[3]->rotateLeft(21); + + # v3 ^= v0; + $v[3] = $v[3]->xorInt64($v[0]); + + # v2 += v1; + $v[2] = $v[2]->addInt64($v[1]); + + # v1=ROTL(v1,17); + $v[1] = $v[1]->rotateLeft(17); + + # v1 ^= v2; + $v[1] = $v[1]->xorInt64($v[2]); + + # v2=ROTL(v2,32) + $v[2] = $v[2]->rotateLeft(32); + + return $v; + } + + /** + * @internal You should not use this directly from another application + * + * @param string $in + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sipHash24($in, $key) + { + $inlen = self::strlen($in); + + # /* "somepseudorandomlygeneratedbytes" */ + # u64 v0 = 0x736f6d6570736575ULL; + # u64 v1 = 0x646f72616e646f6dULL; + # u64 v2 = 0x6c7967656e657261ULL; + # u64 v3 = 0x7465646279746573ULL; + $v = array( + new ParagonIE_Sodium_Core32_Int64( + array(0x736f, 0x6d65, 0x7073, 0x6575) + ), + new ParagonIE_Sodium_Core32_Int64( + array(0x646f, 0x7261, 0x6e64, 0x6f6d) + ), + new ParagonIE_Sodium_Core32_Int64( + array(0x6c79, 0x6765, 0x6e65, 0x7261) + ), + new ParagonIE_Sodium_Core32_Int64( + array(0x7465, 0x6462, 0x7974, 0x6573) + ) + ); + + # u64 k0 = LOAD64_LE( k ); + # u64 k1 = LOAD64_LE( k + 8 ); + $k = array( + ParagonIE_Sodium_Core32_Int64::fromReverseString( + self::substr($key, 0, 8) + ), + ParagonIE_Sodium_Core32_Int64::fromReverseString( + self::substr($key, 8, 8) + ) + ); + + # b = ( ( u64 )inlen ) << 56; + $b = new ParagonIE_Sodium_Core32_Int64( + array(($inlen << 8) & 0xffff, 0, 0, 0) + ); + + # v3 ^= k1; + $v[3] = $v[3]->xorInt64($k[1]); + # v2 ^= k0; + $v[2] = $v[2]->xorInt64($k[0]); + # v1 ^= k1; + $v[1] = $v[1]->xorInt64($k[1]); + # v0 ^= k0; + $v[0] = $v[0]->xorInt64($k[0]); + + $left = $inlen; + # for ( ; in != end; in += 8 ) + while ($left >= 8) { + # m = LOAD64_LE( in ); + $m = ParagonIE_Sodium_Core32_Int64::fromReverseString( + self::substr($in, 0, 8) + ); + + # v3 ^= m; + $v[3] = $v[3]->xorInt64($m); + + # SIPROUND; + # SIPROUND; + $v = self::sipRound($v); + $v = self::sipRound($v); + + # v0 ^= m; + $v[0] = $v[0]->xorInt64($m); + + $in = self::substr($in, 8); + $left -= 8; + } + + # switch( left ) + # { + # case 7: b |= ( ( u64 )in[ 6] ) << 48; + # case 6: b |= ( ( u64 )in[ 5] ) << 40; + # case 5: b |= ( ( u64 )in[ 4] ) << 32; + # case 4: b |= ( ( u64 )in[ 3] ) << 24; + # case 3: b |= ( ( u64 )in[ 2] ) << 16; + # case 2: b |= ( ( u64 )in[ 1] ) << 8; + # case 1: b |= ( ( u64 )in[ 0] ); break; + # case 0: break; + # } + switch ($left) { + case 7: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + 0, self::chrToInt($in[6]) << 16 + ) + ); + case 6: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + 0, self::chrToInt($in[5]) << 8 + ) + ); + case 5: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + 0, self::chrToInt($in[4]) + ) + ); + case 4: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + self::chrToInt($in[3]) << 24, 0 + ) + ); + case 3: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + self::chrToInt($in[2]) << 16, 0 + ) + ); + case 2: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + self::chrToInt($in[1]) << 8, 0 + ) + ); + case 1: + $b = $b->orInt64( + ParagonIE_Sodium_Core32_Int64::fromInts( + self::chrToInt($in[0]), 0 + ) + ); + case 0: + break; + } + + # v3 ^= b; + $v[3] = $v[3]->xorInt64($b); + + # SIPROUND; + # SIPROUND; + $v = self::sipRound($v); + $v = self::sipRound($v); + + # v0 ^= b; + $v[0] = $v[0]->xorInt64($b); + + // Flip the lower 8 bits of v2 which is ($v[4], $v[5]) in our implementation + # v2 ^= 0xff; + $v[2]->limbs[3] ^= 0xff; + + # SIPROUND; + # SIPROUND; + # SIPROUND; + # SIPROUND; + $v = self::sipRound($v); + $v = self::sipRound($v); + $v = self::sipRound($v); + $v = self::sipRound($v); + + # b = v0 ^ v1 ^ v2 ^ v3; + # STORE64_LE( out, b ); + return $v[0] + ->xorInt64($v[1]) + ->xorInt64($v[2]) + ->xorInt64($v[3]) + ->toReverseString(); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/Util.php b/vendor/paragonie/sodium_compat/src/Core32/Util.php new file mode 100644 index 000000000..f32e5adc6 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/Util.php @@ -0,0 +1,13 @@ +toInt(); + $f1 = (int) $f[1]->toInt(); + $f2 = (int) $f[2]->toInt(); + $f3 = (int) $f[3]->toInt(); + $f4 = (int) $f[4]->toInt(); + $f5 = (int) $f[5]->toInt(); + $f6 = (int) $f[6]->toInt(); + $f7 = (int) $f[7]->toInt(); + $f8 = (int) $f[8]->toInt(); + $f9 = (int) $f[9]->toInt(); + $g0 = (int) $g[0]->toInt(); + $g1 = (int) $g[1]->toInt(); + $g2 = (int) $g[2]->toInt(); + $g3 = (int) $g[3]->toInt(); + $g4 = (int) $g[4]->toInt(); + $g5 = (int) $g[5]->toInt(); + $g6 = (int) $g[6]->toInt(); + $g7 = (int) $g[7]->toInt(); + $g8 = (int) $g[8]->toInt(); + $g9 = (int) $g[9]->toInt(); + $b = -$b; + /** @var int $x0 */ + $x0 = ($f0 ^ $g0) & $b; + /** @var int $x1 */ + $x1 = ($f1 ^ $g1) & $b; + /** @var int $x2 */ + $x2 = ($f2 ^ $g2) & $b; + /** @var int $x3 */ + $x3 = ($f3 ^ $g3) & $b; + /** @var int $x4 */ + $x4 = ($f4 ^ $g4) & $b; + /** @var int $x5 */ + $x5 = ($f5 ^ $g5) & $b; + /** @var int $x6 */ + $x6 = ($f6 ^ $g6) & $b; + /** @var int $x7 */ + $x7 = ($f7 ^ $g7) & $b; + /** @var int $x8 */ + $x8 = ($f8 ^ $g8) & $b; + /** @var int $x9 */ + $x9 = ($f9 ^ $g9) & $b; + $f[0] = ParagonIE_Sodium_Core32_Int32::fromInt($f0 ^ $x0); + $f[1] = ParagonIE_Sodium_Core32_Int32::fromInt($f1 ^ $x1); + $f[2] = ParagonIE_Sodium_Core32_Int32::fromInt($f2 ^ $x2); + $f[3] = ParagonIE_Sodium_Core32_Int32::fromInt($f3 ^ $x3); + $f[4] = ParagonIE_Sodium_Core32_Int32::fromInt($f4 ^ $x4); + $f[5] = ParagonIE_Sodium_Core32_Int32::fromInt($f5 ^ $x5); + $f[6] = ParagonIE_Sodium_Core32_Int32::fromInt($f6 ^ $x6); + $f[7] = ParagonIE_Sodium_Core32_Int32::fromInt($f7 ^ $x7); + $f[8] = ParagonIE_Sodium_Core32_Int32::fromInt($f8 ^ $x8); + $f[9] = ParagonIE_Sodium_Core32_Int32::fromInt($f9 ^ $x9); + $g[0] = ParagonIE_Sodium_Core32_Int32::fromInt($g0 ^ $x0); + $g[1] = ParagonIE_Sodium_Core32_Int32::fromInt($g1 ^ $x1); + $g[2] = ParagonIE_Sodium_Core32_Int32::fromInt($g2 ^ $x2); + $g[3] = ParagonIE_Sodium_Core32_Int32::fromInt($g3 ^ $x3); + $g[4] = ParagonIE_Sodium_Core32_Int32::fromInt($g4 ^ $x4); + $g[5] = ParagonIE_Sodium_Core32_Int32::fromInt($g5 ^ $x5); + $g[6] = ParagonIE_Sodium_Core32_Int32::fromInt($g6 ^ $x6); + $g[7] = ParagonIE_Sodium_Core32_Int32::fromInt($g7 ^ $x7); + $g[8] = ParagonIE_Sodium_Core32_Int32::fromInt($g8 ^ $x8); + $g[9] = ParagonIE_Sodium_Core32_Int32::fromInt($g9 ^ $x9); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + * @psalm-suppress MixedAssignment + * @psalm-suppress MixedMethodCall + */ + public static function fe_mul121666(ParagonIE_Sodium_Core32_Curve25519_Fe $f) + { + /** @var array $h */ + $h = array(); + for ($i = 0; $i < 10; ++$i) { + $h[$i] = $f[$i]->toInt64()->mulInt(121666, 17); + } + + $carry9 = $h[9]->addInt(1 << 24)->shiftRight(25); + $h[0] = $h[0]->addInt64($carry9->mulInt(19, 5)); + $h[9] = $h[9]->subInt64($carry9->shiftLeft(25)); + + $carry1 = $h[1]->addInt(1 << 24)->shiftRight(25); + $h[2] = $h[2]->addInt64($carry1); + $h[1] = $h[1]->subInt64($carry1->shiftLeft(25)); + + $carry3 = $h[3]->addInt(1 << 24)->shiftRight(25); + $h[4] = $h[4]->addInt64($carry3); + $h[3] = $h[3]->subInt64($carry3->shiftLeft(25)); + + $carry5 = $h[5]->addInt(1 << 24)->shiftRight(25); + $h[6] = $h[6]->addInt64($carry5); + $h[5] = $h[5]->subInt64($carry5->shiftLeft(25)); + + $carry7 = $h[7]->addInt(1 << 24)->shiftRight(25); + $h[8] = $h[8]->addInt64($carry7); + $h[7] = $h[7]->subInt64($carry7->shiftLeft(25)); + + $carry0 = $h[0]->addInt(1 << 25)->shiftRight(26); + $h[1] = $h[1]->addInt64($carry0); + $h[0] = $h[0]->subInt64($carry0->shiftLeft(26)); + + $carry2 = $h[2]->addInt(1 << 25)->shiftRight(26); + $h[3] = $h[3]->addInt64($carry2); + $h[2] = $h[2]->subInt64($carry2->shiftLeft(26)); + + $carry4 = $h[4]->addInt(1 << 25)->shiftRight(26); + $h[5] = $h[5]->addInt64($carry4); + $h[4] = $h[4]->subInt64($carry4->shiftLeft(26)); + + $carry6 = $h[6]->addInt(1 << 25)->shiftRight(26); + $h[7] = $h[7]->addInt64($carry6); + $h[6] = $h[6]->subInt64($carry6->shiftLeft(26)); + + $carry8 = $h[8]->addInt(1 << 25)->shiftRight(26); + $h[9] = $h[9]->addInt64($carry8); + $h[8] = $h[8]->subInt64($carry8->shiftLeft(26)); + + for ($i = 0; $i < 10; ++$i) { + $h[$i] = $h[$i]->toInt32(); + } + /** @var array $h2 */ + $h2 = $h; + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray($h2); + } + + /** + * @internal You should not use this directly from another application + * + * Inline comments preceded by # are from libsodium's ref10 code. + * + * @param string $n + * @param string $p + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_scalarmult_curve25519_ref10($n, $p) + { + # for (i = 0;i < 32;++i) e[i] = n[i]; + $e = '' . $n; + # e[0] &= 248; + $e[0] = self::intToChr( + self::chrToInt($e[0]) & 248 + ); + # e[31] &= 127; + # e[31] |= 64; + $e[31] = self::intToChr( + (self::chrToInt($e[31]) & 127) | 64 + ); + # fe_frombytes(x1,p); + $x1 = self::fe_frombytes($p); + # fe_1(x2); + $x2 = self::fe_1(); + # fe_0(z2); + $z2 = self::fe_0(); + # fe_copy(x3,x1); + $x3 = self::fe_copy($x1); + # fe_1(z3); + $z3 = self::fe_1(); + + # swap = 0; + /** @var int $swap */ + $swap = 0; + + # for (pos = 254;pos >= 0;--pos) { + for ($pos = 254; $pos >= 0; --$pos) { + # b = e[pos / 8] >> (pos & 7); + /** @var int $b */ + $b = self::chrToInt( + $e[(int) floor($pos / 8)] + ) >> ($pos & 7); + # b &= 1; + $b &= 1; + + # swap ^= b; + $swap ^= $b; + + # fe_cswap(x2,x3,swap); + self::fe_cswap($x2, $x3, $swap); + + # fe_cswap(z2,z3,swap); + self::fe_cswap($z2, $z3, $swap); + + # swap = b; + /** @var int $swap */ + $swap = $b; + + # fe_sub(tmp0,x3,z3); + $tmp0 = self::fe_sub($x3, $z3); + + # fe_sub(tmp1,x2,z2); + $tmp1 = self::fe_sub($x2, $z2); + + # fe_add(x2,x2,z2); + $x2 = self::fe_add($x2, $z2); + + # fe_add(z2,x3,z3); + $z2 = self::fe_add($x3, $z3); + + # fe_mul(z3,tmp0,x2); + $z3 = self::fe_mul($tmp0, $x2); + + # fe_mul(z2,z2,tmp1); + $z2 = self::fe_mul($z2, $tmp1); + + # fe_sq(tmp0,tmp1); + $tmp0 = self::fe_sq($tmp1); + + # fe_sq(tmp1,x2); + $tmp1 = self::fe_sq($x2); + + # fe_add(x3,z3,z2); + $x3 = self::fe_add($z3, $z2); + + # fe_sub(z2,z3,z2); + $z2 = self::fe_sub($z3, $z2); + + # fe_mul(x2,tmp1,tmp0); + $x2 = self::fe_mul($tmp1, $tmp0); + + # fe_sub(tmp1,tmp1,tmp0); + $tmp1 = self::fe_sub($tmp1, $tmp0); + + # fe_sq(z2,z2); + $z2 = self::fe_sq($z2); + + # fe_mul121666(z3,tmp1); + $z3 = self::fe_mul121666($tmp1); + + # fe_sq(x3,x3); + $x3 = self::fe_sq($x3); + + # fe_add(tmp0,tmp0,z3); + $tmp0 = self::fe_add($tmp0, $z3); + + # fe_mul(z3,x1,z2); + $z3 = self::fe_mul($x1, $z2); + + # fe_mul(z2,tmp1,tmp0); + $z2 = self::fe_mul($tmp1, $tmp0); + } + + # fe_cswap(x2,x3,swap); + self::fe_cswap($x2, $x3, $swap); + + # fe_cswap(z2,z3,swap); + self::fe_cswap($z2, $z3, $swap); + + # fe_invert(z2,z2); + $z2 = self::fe_invert($z2); + + # fe_mul(x2,x2,z2); + $x2 = self::fe_mul($x2, $z2); + # fe_tobytes(q,x2); + return (string) self::fe_tobytes($x2); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ + * @return ParagonIE_Sodium_Core32_Curve25519_Fe + * @throws SodiumException + * @throws TypeError + */ + public static function edwards_to_montgomery( + ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY, + ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ + ) { + $tempX = self::fe_add($edwardsZ, $edwardsY); + $tempZ = self::fe_sub($edwardsZ, $edwardsY); + $tempZ = self::fe_invert($tempZ); + return self::fe_mul($tempX, $tempZ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $n + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_scalarmult_curve25519_ref10_base($n) + { + # for (i = 0;i < 32;++i) e[i] = n[i]; + $e = '' . $n; + + # e[0] &= 248; + $e[0] = self::intToChr( + self::chrToInt($e[0]) & 248 + ); + + # e[31] &= 127; + # e[31] |= 64; + $e[31] = self::intToChr( + (self::chrToInt($e[31]) & 127) | 64 + ); + + $A = self::ge_scalarmult_base($e); + if ( + !($A->Y instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) + || + !($A->Z instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) + ) { + throw new TypeError('Null points encountered'); + } + $pk = self::edwards_to_montgomery($A->Y, $A->Z); + return self::fe_tobytes($pk); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Core32/XChaCha20.php b/vendor/paragonie/sodium_compat/src/Core32/XChaCha20.php new file mode 100644 index 000000000..1dfc8591d --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core32/XChaCha20.php @@ -0,0 +1,64 @@ +update($ad); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($adlen)); + $state->update($ciphertext); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($clen)); + $computed_mac = $state->finish(); + + /* Compare the given MAC with the recalculated MAC: */ + if (!ParagonIE_Sodium_Core_Util::verify_16($computed_mac, $mac)) { + throw new SodiumException('Invalid MAC'); + } + + // Here, we know that the MAC is valid, so we decrypt and return the plaintext + return ParagonIE_Sodium_Core_ChaCha20::streamXorIc( + $ciphertext, + $nonce, + $key, + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + } + + /** + * AEAD Encryption with ChaCha20-Poly1305 + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_chacha20poly1305_encrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + /** @var int $len - Length of the plaintext message */ + $len = ParagonIE_Sodium_Core_Util::strlen($message); + + /** @var int $adlen - Length of the associated data */ + $adlen = ParagonIE_Sodium_Core_Util::strlen($ad); + + /** @var string The first block of the chacha20 keystream, used as a poly1305 key */ + $block0 = ParagonIE_Sodium_Core_ChaCha20::stream( + 32, + $nonce, + $key + ); + $state = new ParagonIE_Sodium_Core_Poly1305_State($block0); + try { + ParagonIE_Sodium_Compat::memzero($block0); + } catch (SodiumException $ex) { + $block0 = null; + } + + /** @var string $ciphertext - Raw encrypted data */ + $ciphertext = ParagonIE_Sodium_Core_ChaCha20::streamXorIc( + $message, + $nonce, + $key, + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + + $state->update($ad); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($adlen)); + $state->update($ciphertext); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($len)); + return $ciphertext . $state->finish(); + } + + /** + * AEAD Decryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_chacha20poly1305_ietf_decrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + /** @var int $adlen - Length of associated data */ + $adlen = ParagonIE_Sodium_Core_Util::strlen($ad); + + /** @var int $len - Length of message (ciphertext + MAC) */ + $len = ParagonIE_Sodium_Core_Util::strlen($message); + + /** @var int $clen - Length of ciphertext */ + $clen = $len - self::aead_chacha20poly1305_IETF_ABYTES; + + /** @var string The first block of the chacha20 keystream, used as a poly1305 key */ + $block0 = ParagonIE_Sodium_Core_ChaCha20::ietfStream( + 32, + $nonce, + $key + ); + + /** @var string $mac - Message authentication code */ + $mac = ParagonIE_Sodium_Core_Util::substr( + $message, + $len - self::aead_chacha20poly1305_IETF_ABYTES, + self::aead_chacha20poly1305_IETF_ABYTES + ); + + /** @var string $ciphertext - The encrypted message (sans MAC) */ + $ciphertext = ParagonIE_Sodium_Core_Util::substr( + $message, + 0, + $len - self::aead_chacha20poly1305_IETF_ABYTES + ); + + /* Recalculate the Poly1305 authentication tag (MAC): */ + $state = new ParagonIE_Sodium_Core_Poly1305_State($block0); + try { + ParagonIE_Sodium_Compat::memzero($block0); + } catch (SodiumException $ex) { + $block0 = null; + } + $state->update($ad); + $state->update(str_repeat("\x00", ((0x10 - $adlen) & 0xf))); + $state->update($ciphertext); + $state->update(str_repeat("\x00", (0x10 - $clen) & 0xf)); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($adlen)); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($clen)); + $computed_mac = $state->finish(); + + /* Compare the given MAC with the recalculated MAC: */ + if (!ParagonIE_Sodium_Core_Util::verify_16($computed_mac, $mac)) { + throw new SodiumException('Invalid MAC'); + } + + // Here, we know that the MAC is valid, so we decrypt and return the plaintext + return ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + $ciphertext, + $nonce, + $key, + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + } + + /** + * AEAD Encryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_chacha20poly1305_ietf_encrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + /** @var int $len - Length of the plaintext message */ + $len = ParagonIE_Sodium_Core_Util::strlen($message); + + /** @var int $adlen - Length of the associated data */ + $adlen = ParagonIE_Sodium_Core_Util::strlen($ad); + + /** @var string The first block of the chacha20 keystream, used as a poly1305 key */ + $block0 = ParagonIE_Sodium_Core_ChaCha20::ietfStream( + 32, + $nonce, + $key + ); + $state = new ParagonIE_Sodium_Core_Poly1305_State($block0); + try { + ParagonIE_Sodium_Compat::memzero($block0); + } catch (SodiumException $ex) { + $block0 = null; + } + + /** @var string $ciphertext - Raw encrypted data */ + $ciphertext = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + $message, + $nonce, + $key, + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + + $state->update($ad); + $state->update(str_repeat("\x00", ((0x10 - $adlen) & 0xf))); + $state->update($ciphertext); + $state->update(str_repeat("\x00", ((0x10 - $len) & 0xf))); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($adlen)); + $state->update(ParagonIE_Sodium_Core_Util::store64_le($len)); + return $ciphertext . $state->finish(); + } + + /** + * AEAD Decryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_xchacha20poly1305_ietf_decrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + $subkey = ParagonIE_Sodium_Core_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core_Util::substr($nonce, 0, 16), + $key + ); + $nonceLast = "\x00\x00\x00\x00" . + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8); + + return self::aead_chacha20poly1305_ietf_decrypt($message, $ad, $nonceLast, $subkey); + } + + /** + * AEAD Encryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_xchacha20poly1305_ietf_encrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + $subkey = ParagonIE_Sodium_Core_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core_Util::substr($nonce, 0, 16), + $key + ); + $nonceLast = "\x00\x00\x00\x00" . + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8); + + return self::aead_chacha20poly1305_ietf_encrypt($message, $ad, $nonceLast, $subkey); + } + + /** + * HMAC-SHA-512-256 (a.k.a. the leftmost 256 bits of HMAC-SHA-512) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $key + * @return string + * @throws TypeError + */ + public static function auth($message, $key) + { + return ParagonIE_Sodium_Core_Util::substr( + hash_hmac('sha512', $message, $key, true), + 0, + 32 + ); + } + + /** + * HMAC-SHA-512-256 validation. Constant-time via hash_equals(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $mac + * @param string $message + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function auth_verify($mac, $message, $key) + { + return ParagonIE_Sodium_Core_Util::hashEquals( + $mac, + self::auth($message, $key) + ); + } + + /** + * X25519 key exchange followed by XSalsa20Poly1305 symmetric encryption + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $plaintext + * @param string $nonce + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box($plaintext, $nonce, $keypair) + { + $c = self::secretbox( + $plaintext, + $nonce, + self::box_beforenm( + self::box_secretkey($keypair), + self::box_publickey($keypair) + ) + ); + return $c; + } + + /** + * X25519-XSalsa20-Poly1305 with one ephemeral X25519 keypair. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $publicKey + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_seal($message, $publicKey) + { + /** @var string $ephemeralKeypair */ + $ephemeralKeypair = self::box_keypair(); + + /** @var string $ephemeralSK */ + $ephemeralSK = self::box_secretkey($ephemeralKeypair); + + /** @var string $ephemeralPK */ + $ephemeralPK = self::box_publickey($ephemeralKeypair); + + /** @var string $nonce */ + $nonce = self::generichash( + $ephemeralPK . $publicKey, + '', + 24 + ); + + /** @var string $keypair - The combined keypair used in crypto_box() */ + $keypair = self::box_keypair_from_secretkey_and_publickey($ephemeralSK, $publicKey); + + /** @var string $ciphertext Ciphertext + MAC from crypto_box */ + $ciphertext = self::box($message, $nonce, $keypair); + try { + ParagonIE_Sodium_Compat::memzero($ephemeralKeypair); + ParagonIE_Sodium_Compat::memzero($ephemeralSK); + ParagonIE_Sodium_Compat::memzero($nonce); + } catch (SodiumException $ex) { + $ephemeralKeypair = null; + $ephemeralSK = null; + $nonce = null; + } + return $ephemeralPK . $ciphertext; + } + + /** + * Opens a message encrypted via box_seal(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_seal_open($message, $keypair) + { + /** @var string $ephemeralPK */ + $ephemeralPK = ParagonIE_Sodium_Core_Util::substr($message, 0, 32); + + /** @var string $ciphertext (ciphertext + MAC) */ + $ciphertext = ParagonIE_Sodium_Core_Util::substr($message, 32); + + /** @var string $secretKey */ + $secretKey = self::box_secretkey($keypair); + + /** @var string $publicKey */ + $publicKey = self::box_publickey($keypair); + + /** @var string $nonce */ + $nonce = self::generichash( + $ephemeralPK . $publicKey, + '', + 24 + ); + + /** @var string $keypair */ + $keypair = self::box_keypair_from_secretkey_and_publickey($secretKey, $ephemeralPK); + + /** @var string $m */ + $m = self::box_open($ciphertext, $nonce, $keypair); + try { + ParagonIE_Sodium_Compat::memzero($secretKey); + ParagonIE_Sodium_Compat::memzero($ephemeralPK); + ParagonIE_Sodium_Compat::memzero($nonce); + } catch (SodiumException $ex) { + $secretKey = null; + $ephemeralPK = null; + $nonce = null; + } + return $m; + } + + /** + * Used by crypto_box() to get the crypto_secretbox() key. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sk + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_beforenm($sk, $pk) + { + return ParagonIE_Sodium_Core_HSalsa20::hsalsa20( + str_repeat("\x00", 16), + self::scalarmult($sk, $pk) + ); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @return string + * @throws Exception + * @throws SodiumException + * @throws TypeError + */ + public static function box_keypair() + { + $sKey = random_bytes(32); + $pKey = self::scalarmult_base($sKey); + return $sKey . $pKey; + } + + /** + * @param string $seed + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_seed_keypair($seed) + { + $sKey = ParagonIE_Sodium_Core_Util::substr( + hash('sha512', $seed, true), + 0, + 32 + ); + $pKey = self::scalarmult_base($sKey); + return $sKey . $pKey; + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sKey + * @param string $pKey + * @return string + * @throws TypeError + */ + public static function box_keypair_from_secretkey_and_publickey($sKey, $pKey) + { + return ParagonIE_Sodium_Core_Util::substr($sKey, 0, 32) . + ParagonIE_Sodium_Core_Util::substr($pKey, 0, 32); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $keypair + * @return string + * @throws RangeException + * @throws TypeError + */ + public static function box_secretkey($keypair) + { + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== 64) { + throw new RangeException( + 'Must be ParagonIE_Sodium_Compat::CRYPTO_BOX_KEYPAIRBYTES bytes long.' + ); + } + return ParagonIE_Sodium_Core_Util::substr($keypair, 0, 32); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $keypair + * @return string + * @throws RangeException + * @throws TypeError + */ + public static function box_publickey($keypair) + { + if (ParagonIE_Sodium_Core_Util::strlen($keypair) !== ParagonIE_Sodium_Compat::CRYPTO_BOX_KEYPAIRBYTES) { + throw new RangeException( + 'Must be ParagonIE_Sodium_Compat::CRYPTO_BOX_KEYPAIRBYTES bytes long.' + ); + } + return ParagonIE_Sodium_Core_Util::substr($keypair, 32, 32); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sKey + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function box_publickey_from_secretkey($sKey) + { + if (ParagonIE_Sodium_Core_Util::strlen($sKey) !== ParagonIE_Sodium_Compat::CRYPTO_BOX_SECRETKEYBYTES) { + throw new RangeException( + 'Must be ParagonIE_Sodium_Compat::CRYPTO_BOX_SECRETKEYBYTES bytes long.' + ); + } + return self::scalarmult_base($sKey); + } + + /** + * Decrypt a message encrypted with box(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ciphertext + * @param string $nonce + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_open($ciphertext, $nonce, $keypair) + { + return self::secretbox_open( + $ciphertext, + $nonce, + self::box_beforenm( + self::box_secretkey($keypair), + self::box_publickey($keypair) + ) + ); + } + + /** + * Calculate a BLAKE2b hash. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string|null $key + * @param int $outlen + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function generichash($message, $key = '', $outlen = 32) + { + // This ensures that ParagonIE_Sodium_Core_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core_BLAKE2b::pseudoConstructor(); + + $k = null; + if (!empty($key)) { + /** @var SplFixedArray $k */ + $k = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($key); + if ($k->count() > ParagonIE_Sodium_Core_BLAKE2b::KEYBYTES) { + throw new RangeException('Invalid key size'); + } + } + + /** @var SplFixedArray $in */ + $in = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($message); + + /** @var SplFixedArray $ctx */ + $ctx = ParagonIE_Sodium_Core_BLAKE2b::init($k, $outlen); + ParagonIE_Sodium_Core_BLAKE2b::update($ctx, $in, $in->count()); + + /** @var SplFixedArray $out */ + $out = new SplFixedArray($outlen); + $out = ParagonIE_Sodium_Core_BLAKE2b::finish($ctx, $out); + + /** @var array */ + $outArray = $out->toArray(); + return ParagonIE_Sodium_Core_Util::intArrayToString($outArray); + } + + /** + * Finalize a BLAKE2b hashing context, returning the hash. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ctx + * @param int $outlen + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_final($ctx, $outlen = 32) + { + if (!is_string($ctx)) { + throw new TypeError('Context must be a string'); + } + $out = new SplFixedArray($outlen); + + /** @var SplFixedArray $context */ + $context = ParagonIE_Sodium_Core_BLAKE2b::stringToContext($ctx); + + /** @var SplFixedArray $out */ + $out = ParagonIE_Sodium_Core_BLAKE2b::finish($context, $out); + + /** @var array */ + $outArray = $out->toArray(); + return ParagonIE_Sodium_Core_Util::intArrayToString($outArray); + } + + /** + * Initialize a hashing context for BLAKE2b. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $key + * @param int $outputLength + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_init($key = '', $outputLength = 32) + { + // This ensures that ParagonIE_Sodium_Core_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core_BLAKE2b::pseudoConstructor(); + + $k = null; + if (!empty($key)) { + $k = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($key); + if ($k->count() > ParagonIE_Sodium_Core_BLAKE2b::KEYBYTES) { + throw new RangeException('Invalid key size'); + } + } + + /** @var SplFixedArray $ctx */ + $ctx = ParagonIE_Sodium_Core_BLAKE2b::init($k, $outputLength); + + return ParagonIE_Sodium_Core_BLAKE2b::contextToString($ctx); + } + + /** + * Initialize a hashing context for BLAKE2b. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $key + * @param int $outputLength + * @param string $salt + * @param string $personal + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_init_salt_personal( + $key = '', + $outputLength = 32, + $salt = '', + $personal = '' + ) { + // This ensures that ParagonIE_Sodium_Core_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core_BLAKE2b::pseudoConstructor(); + + $k = null; + if (!empty($key)) { + $k = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($key); + if ($k->count() > ParagonIE_Sodium_Core_BLAKE2b::KEYBYTES) { + throw new RangeException('Invalid key size'); + } + } + if (!empty($salt)) { + $s = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($salt); + } else { + $s = null; + } + if (!empty($salt)) { + $p = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($personal); + } else { + $p = null; + } + + /** @var SplFixedArray $ctx */ + $ctx = ParagonIE_Sodium_Core_BLAKE2b::init($k, $outputLength, $s, $p); + + return ParagonIE_Sodium_Core_BLAKE2b::contextToString($ctx); + } + + /** + * Update a hashing context for BLAKE2b with $message + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ctx + * @param string $message + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_update($ctx, $message) + { + // This ensures that ParagonIE_Sodium_Core_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core_BLAKE2b::pseudoConstructor(); + + /** @var SplFixedArray $context */ + $context = ParagonIE_Sodium_Core_BLAKE2b::stringToContext($ctx); + + /** @var SplFixedArray $in */ + $in = ParagonIE_Sodium_Core_BLAKE2b::stringToSplFixedArray($message); + + ParagonIE_Sodium_Core_BLAKE2b::update($context, $in, $in->count()); + + return ParagonIE_Sodium_Core_BLAKE2b::contextToString($context); + } + + /** + * Libsodium's crypto_kx(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $my_sk + * @param string $their_pk + * @param string $client_pk + * @param string $server_pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function keyExchange($my_sk, $their_pk, $client_pk, $server_pk) + { + return ParagonIE_Sodium_Compat::crypto_generichash( + ParagonIE_Sodium_Compat::crypto_scalarmult($my_sk, $their_pk) . + $client_pk . + $server_pk + ); + } + + /** + * ECDH over Curve25519 + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sKey + * @param string $pKey + * @return string + * + * @throws SodiumException + * @throws TypeError + */ + public static function scalarmult($sKey, $pKey) + { + $q = ParagonIE_Sodium_Core_X25519::crypto_scalarmult_curve25519_ref10($sKey, $pKey); + self::scalarmult_throw_if_zero($q); + return $q; + } + + /** + * ECDH over Curve25519, using the basepoint. + * Used to get a secret key from a public key. + * + * @param string $secret + * @return string + * + * @throws SodiumException + * @throws TypeError + */ + public static function scalarmult_base($secret) + { + $q = ParagonIE_Sodium_Core_X25519::crypto_scalarmult_curve25519_ref10_base($secret); + self::scalarmult_throw_if_zero($q); + return $q; + } + + /** + * This throws an Error if a zero public key was passed to the function. + * + * @param string $q + * @return void + * @throws SodiumException + * @throws TypeError + */ + protected static function scalarmult_throw_if_zero($q) + { + $d = 0; + for ($i = 0; $i < self::box_curve25519xsalsa20poly1305_SECRETKEYBYTES; ++$i) { + $d |= ParagonIE_Sodium_Core_Util::chrToInt($q[$i]); + } + + /* branch-free variant of === 0 */ + if (-(1 & (($d - 1) >> 8))) { + throw new SodiumException('Zero public key is not allowed'); + } + } + + /** + * XSalsa20-Poly1305 authenticated symmetric-key encryption. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $plaintext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox($plaintext, $nonce, $key) + { + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $block0 */ + $block0 = str_repeat("\x00", 32); + + /** @var int $mlen - Length of the plaintext message */ + $mlen = ParagonIE_Sodium_Core_Util::strlen($plaintext); + $mlen0 = $mlen; + if ($mlen0 > 64 - self::secretbox_xsalsa20poly1305_ZEROBYTES) { + $mlen0 = 64 - self::secretbox_xsalsa20poly1305_ZEROBYTES; + } + $block0 .= ParagonIE_Sodium_Core_Util::substr($plaintext, 0, $mlen0); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core_Salsa20::salsa20_xor( + $block0, + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + $subkey + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core_Util::substr( + $block0, + self::secretbox_xsalsa20poly1305_ZEROBYTES + ); + if ($mlen > $mlen0) { + $c .= ParagonIE_Sodium_Core_Salsa20::salsa20_xor_ic( + ParagonIE_Sodium_Core_Util::substr( + $plaintext, + self::secretbox_xsalsa20poly1305_ZEROBYTES + ), + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + 1, + $subkey + ); + } + $state = new ParagonIE_Sodium_Core_Poly1305_State( + ParagonIE_Sodium_Core_Util::substr( + $block0, + 0, + self::onetimeauth_poly1305_KEYBYTES + ) + ); + try { + ParagonIE_Sodium_Compat::memzero($block0); + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $block0 = null; + $subkey = null; + } + + $state->update($c); + + /** @var string $c - MAC || ciphertext */ + $c = $state->finish() . $c; + unset($state); + + return $c; + } + + /** + * Decrypt a ciphertext generated via secretbox(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ciphertext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_open($ciphertext, $nonce, $key) + { + /** @var string $mac */ + $mac = ParagonIE_Sodium_Core_Util::substr( + $ciphertext, + 0, + self::secretbox_xsalsa20poly1305_MACBYTES + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core_Util::substr( + $ciphertext, + self::secretbox_xsalsa20poly1305_MACBYTES + ); + + /** @var int $clen */ + $clen = ParagonIE_Sodium_Core_Util::strlen($c); + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core_Salsa20::salsa20( + 64, + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + $subkey + ); + $verified = ParagonIE_Sodium_Core_Poly1305::onetimeauth_verify( + $mac, + $c, + ParagonIE_Sodium_Core_Util::substr($block0, 0, 32) + ); + if (!$verified) { + try { + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $subkey = null; + } + throw new SodiumException('Invalid MAC'); + } + + /** @var string $m - Decrypted message */ + $m = ParagonIE_Sodium_Core_Util::xorStrings( + ParagonIE_Sodium_Core_Util::substr($block0, self::secretbox_xsalsa20poly1305_ZEROBYTES), + ParagonIE_Sodium_Core_Util::substr($c, 0, self::secretbox_xsalsa20poly1305_ZEROBYTES) + ); + if ($clen > self::secretbox_xsalsa20poly1305_ZEROBYTES) { + // We had more than 1 block, so let's continue to decrypt the rest. + $m .= ParagonIE_Sodium_Core_Salsa20::salsa20_xor_ic( + ParagonIE_Sodium_Core_Util::substr( + $c, + self::secretbox_xsalsa20poly1305_ZEROBYTES + ), + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + 1, + (string) $subkey + ); + } + return $m; + } + + /** + * XChaCha20-Poly1305 authenticated symmetric-key encryption. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $plaintext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_xchacha20poly1305($plaintext, $nonce, $key) + { + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core_Util::substr($nonce, 0, 16), + $key + ); + $nonceLast = ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8); + + /** @var string $block0 */ + $block0 = str_repeat("\x00", 32); + + /** @var int $mlen - Length of the plaintext message */ + $mlen = ParagonIE_Sodium_Core_Util::strlen($plaintext); + $mlen0 = $mlen; + if ($mlen0 > 64 - self::secretbox_xchacha20poly1305_ZEROBYTES) { + $mlen0 = 64 - self::secretbox_xchacha20poly1305_ZEROBYTES; + } + $block0 .= ParagonIE_Sodium_Core_Util::substr($plaintext, 0, $mlen0); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core_ChaCha20::streamXorIc( + $block0, + $nonceLast, + $subkey + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core_Util::substr( + $block0, + self::secretbox_xchacha20poly1305_ZEROBYTES + ); + if ($mlen > $mlen0) { + $c .= ParagonIE_Sodium_Core_ChaCha20::streamXorIc( + ParagonIE_Sodium_Core_Util::substr( + $plaintext, + self::secretbox_xchacha20poly1305_ZEROBYTES + ), + $nonceLast, + $subkey, + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + } + $state = new ParagonIE_Sodium_Core_Poly1305_State( + ParagonIE_Sodium_Core_Util::substr( + $block0, + 0, + self::onetimeauth_poly1305_KEYBYTES + ) + ); + try { + ParagonIE_Sodium_Compat::memzero($block0); + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $block0 = null; + $subkey = null; + } + + $state->update($c); + + /** @var string $c - MAC || ciphertext */ + $c = $state->finish() . $c; + unset($state); + + return $c; + } + + /** + * Decrypt a ciphertext generated via secretbox_xchacha20poly1305(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ciphertext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_xchacha20poly1305_open($ciphertext, $nonce, $key) + { + /** @var string $mac */ + $mac = ParagonIE_Sodium_Core_Util::substr( + $ciphertext, + 0, + self::secretbox_xchacha20poly1305_MACBYTES + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core_Util::substr( + $ciphertext, + self::secretbox_xchacha20poly1305_MACBYTES + ); + + /** @var int $clen */ + $clen = ParagonIE_Sodium_Core_Util::strlen($c); + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core_HChaCha20::hchacha20($nonce, $key); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core_ChaCha20::stream( + 64, + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + $subkey + ); + $verified = ParagonIE_Sodium_Core_Poly1305::onetimeauth_verify( + $mac, + $c, + ParagonIE_Sodium_Core_Util::substr($block0, 0, 32) + ); + + if (!$verified) { + try { + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $subkey = null; + } + throw new SodiumException('Invalid MAC'); + } + + /** @var string $m - Decrypted message */ + $m = ParagonIE_Sodium_Core_Util::xorStrings( + ParagonIE_Sodium_Core_Util::substr($block0, self::secretbox_xchacha20poly1305_ZEROBYTES), + ParagonIE_Sodium_Core_Util::substr($c, 0, self::secretbox_xchacha20poly1305_ZEROBYTES) + ); + + if ($clen > self::secretbox_xchacha20poly1305_ZEROBYTES) { + // We had more than 1 block, so let's continue to decrypt the rest. + $m .= ParagonIE_Sodium_Core_ChaCha20::streamXorIc( + ParagonIE_Sodium_Core_Util::substr( + $c, + self::secretbox_xchacha20poly1305_ZEROBYTES + ), + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + (string) $subkey, + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + } + return $m; + } + + /** + * @param string $key + * @return array Returns a state and a header. + * @throws Exception + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_init_push($key) + { + # randombytes_buf(out, crypto_secretstream_xchacha20poly1305_HEADERBYTES); + $out = random_bytes(24); + + # crypto_core_hchacha20(state->k, out, k, NULL); + $subkey = ParagonIE_Sodium_Core_HChaCha20::hChaCha20($out, $key); + $state = new ParagonIE_Sodium_Core_SecretStream_State( + $subkey, + ParagonIE_Sodium_Core_Util::substr($out, 16, 8) . str_repeat("\0", 4) + ); + + # _crypto_secretstream_xchacha20poly1305_counter_reset(state); + $state->counterReset(); + + # memcpy(STATE_INONCE(state), out + crypto_core_hchacha20_INPUTBYTES, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + # memset(state->_pad, 0, sizeof state->_pad); + return array( + $state->toString(), + $out + ); + } + + /** + * @param string $key + * @param string $header + * @return string Returns a state. + * @throws Exception + */ + public static function secretstream_xchacha20poly1305_init_pull($key, $header) + { + # crypto_core_hchacha20(state->k, in, k, NULL); + $subkey = ParagonIE_Sodium_Core_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core_Util::substr($header, 0, 16), + $key + ); + $state = new ParagonIE_Sodium_Core_SecretStream_State( + $subkey, + ParagonIE_Sodium_Core_Util::substr($header, 16) + ); + $state->counterReset(); + # memcpy(STATE_INONCE(state), in + crypto_core_hchacha20_INPUTBYTES, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + # memset(state->_pad, 0, sizeof state->_pad); + # return 0; + return $state->toString(); + } + + /** + * @param string $state + * @param string $msg + * @param string $aad + * @param int $tag + * @return string + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_push(&$state, $msg, $aad = '', $tag = 0) + { + $st = ParagonIE_Sodium_Core_SecretStream_State::fromString($state); + # crypto_onetimeauth_poly1305_state poly1305_state; + # unsigned char block[64U]; + # unsigned char slen[8U]; + # unsigned char *c; + # unsigned char *mac; + + $msglen = ParagonIE_Sodium_Core_Util::strlen($msg); + $aadlen = ParagonIE_Sodium_Core_Util::strlen($aad); + + if ((($msglen + 63) >> 6) > 0xfffffffe) { + throw new SodiumException( + 'message cannot be larger than SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_MESSAGEBYTES_MAX bytes' + ); + } + + # if (outlen_p != NULL) { + # *outlen_p = 0U; + # } + # if (mlen > crypto_secretstream_xchacha20poly1305_MESSAGEBYTES_MAX) { + # sodium_misuse(); + # } + + # crypto_stream_chacha20_ietf(block, sizeof block, state->nonce, state->k); + # crypto_onetimeauth_poly1305_init(&poly1305_state, block); + # sodium_memzero(block, sizeof block); + $auth = new ParagonIE_Sodium_Core_Poly1305_State( + ParagonIE_Sodium_Core_ChaCha20::ietfStream(32, $st->getCombinedNonce(), $st->getKey()) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, ad, adlen); + $auth->update($aad); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, _pad0, + # (0x10 - adlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - $aadlen) & 0xf))); + + # memset(block, 0, sizeof block); + # block[0] = tag; + # crypto_stream_chacha20_ietf_xor_ic(block, block, sizeof block, + # state->nonce, 1U, state->k); + $block = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + ParagonIE_Sodium_Core_Util::intToChr($tag) . str_repeat("\0", 63), + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, block, sizeof block); + $auth->update($block); + + # out[0] = block[0]; + $out = $block[0]; + # c = out + (sizeof tag); + # crypto_stream_chacha20_ietf_xor_ic(c, m, mlen, state->nonce, 2U, state->k); + $cipher = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + $msg, + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core_Util::store64_le(2) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen); + $auth->update($cipher); + + $out .= $cipher; + unset($cipher); + + # crypto_onetimeauth_poly1305_update + # (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - 64 + $msglen) & 0xf))); + + # STORE64_LE(slen, (uint64_t) adlen); + $slen = ParagonIE_Sodium_Core_Util::store64_le($aadlen); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $auth->update($slen); + + # STORE64_LE(slen, (sizeof block) + mlen); + $slen = ParagonIE_Sodium_Core_Util::store64_le(64 + $msglen); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $auth->update($slen); + + # mac = c + mlen; + # crypto_onetimeauth_poly1305_final(&poly1305_state, mac); + $mac = $auth->finish(); + $out .= $mac; + + # sodium_memzero(&poly1305_state, sizeof poly1305_state); + unset($auth); + + + # XOR_BUF(STATE_INONCE(state), mac, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + $st->xorNonce($mac); + + # sodium_increment(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES); + $st->incrementCounter(); + // Overwrite by reference: + $state = $st->toString(); + + /** @var bool $rekey */ + $rekey = ($tag & ParagonIE_Sodium_Compat::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_TAG_REKEY) !== 0; + # if ((tag & crypto_secretstream_xchacha20poly1305_TAG_REKEY) != 0 || + # sodium_is_zero(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES)) { + # crypto_secretstream_xchacha20poly1305_rekey(state); + # } + if ($rekey || $st->needsRekey()) { + // DO REKEY + self::secretstream_xchacha20poly1305_rekey($state); + } + # if (outlen_p != NULL) { + # *outlen_p = crypto_secretstream_xchacha20poly1305_ABYTES + mlen; + # } + return $out; + } + + /** + * @param string $state + * @param string $cipher + * @param string $aad + * @return bool|array{0: string, 1: int} + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_pull(&$state, $cipher, $aad = '') + { + $st = ParagonIE_Sodium_Core_SecretStream_State::fromString($state); + + $cipherlen = ParagonIE_Sodium_Core_Util::strlen($cipher); + # mlen = inlen - crypto_secretstream_xchacha20poly1305_ABYTES; + $msglen = $cipherlen - ParagonIE_Sodium_Compat::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_ABYTES; + $aadlen = ParagonIE_Sodium_Core_Util::strlen($aad); + + # if (mlen > crypto_secretstream_xchacha20poly1305_MESSAGEBYTES_MAX) { + # sodium_misuse(); + # } + if ((($msglen + 63) >> 6) > 0xfffffffe) { + throw new SodiumException( + 'message cannot be larger than SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_MESSAGEBYTES_MAX bytes' + ); + } + + # crypto_stream_chacha20_ietf(block, sizeof block, state->nonce, state->k); + # crypto_onetimeauth_poly1305_init(&poly1305_state, block); + # sodium_memzero(block, sizeof block); + $auth = new ParagonIE_Sodium_Core_Poly1305_State( + ParagonIE_Sodium_Core_ChaCha20::ietfStream(32, $st->getCombinedNonce(), $st->getKey()) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, ad, adlen); + $auth->update($aad); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, _pad0, + # (0x10 - adlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - $aadlen) & 0xf))); + + + # memset(block, 0, sizeof block); + # block[0] = in[0]; + # crypto_stream_chacha20_ietf_xor_ic(block, block, sizeof block, + # state->nonce, 1U, state->k); + $block = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + $cipher[0] . str_repeat("\0", 63), + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core_Util::store64_le(1) + ); + # tag = block[0]; + # block[0] = in[0]; + # crypto_onetimeauth_poly1305_update(&poly1305_state, block, sizeof block); + $tag = ParagonIE_Sodium_Core_Util::chrToInt($block[0]); + $block[0] = $cipher[0]; + $auth->update($block); + + + # c = in + (sizeof tag); + # crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen); + $auth->update(ParagonIE_Sodium_Core_Util::substr($cipher, 1, $msglen)); + + # crypto_onetimeauth_poly1305_update + # (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - 64 + $msglen) & 0xf))); + + # STORE64_LE(slen, (uint64_t) adlen); + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $slen = ParagonIE_Sodium_Core_Util::store64_le($aadlen); + $auth->update($slen); + + # STORE64_LE(slen, (sizeof block) + mlen); + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $slen = ParagonIE_Sodium_Core_Util::store64_le(64 + $msglen); + $auth->update($slen); + + # crypto_onetimeauth_poly1305_final(&poly1305_state, mac); + # sodium_memzero(&poly1305_state, sizeof poly1305_state); + $mac = $auth->finish(); + + # stored_mac = c + mlen; + # if (sodium_memcmp(mac, stored_mac, sizeof mac) != 0) { + # sodium_memzero(mac, sizeof mac); + # return -1; + # } + + $stored = ParagonIE_Sodium_Core_Util::substr($cipher, $msglen + 1, 16); + if (!ParagonIE_Sodium_Core_Util::hashEquals($mac, $stored)) { + return false; + } + + # crypto_stream_chacha20_ietf_xor_ic(m, c, mlen, state->nonce, 2U, state->k); + $out = ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + ParagonIE_Sodium_Core_Util::substr($cipher, 1, $msglen), + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core_Util::store64_le(2) + ); + + # XOR_BUF(STATE_INONCE(state), mac, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + $st->xorNonce($mac); + + # sodium_increment(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES); + $st->incrementCounter(); + + # if ((tag & crypto_secretstream_xchacha20poly1305_TAG_REKEY) != 0 || + # sodium_is_zero(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES)) { + # crypto_secretstream_xchacha20poly1305_rekey(state); + # } + + // Overwrite by reference: + $state = $st->toString(); + + /** @var bool $rekey */ + $rekey = ($tag & ParagonIE_Sodium_Compat::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_TAG_REKEY) !== 0; + if ($rekey || $st->needsRekey()) { + // DO REKEY + self::secretstream_xchacha20poly1305_rekey($state); + } + return array($out, $tag); + } + + /** + * @param string $state + * @return void + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_rekey(&$state) + { + $st = ParagonIE_Sodium_Core_SecretStream_State::fromString($state); + # unsigned char new_key_and_inonce[crypto_stream_chacha20_ietf_KEYBYTES + + # crypto_secretstream_xchacha20poly1305_INONCEBYTES]; + # size_t i; + # for (i = 0U; i < crypto_stream_chacha20_ietf_KEYBYTES; i++) { + # new_key_and_inonce[i] = state->k[i]; + # } + $new_key_and_inonce = $st->getKey(); + + # for (i = 0U; i < crypto_secretstream_xchacha20poly1305_INONCEBYTES; i++) { + # new_key_and_inonce[crypto_stream_chacha20_ietf_KEYBYTES + i] = + # STATE_INONCE(state)[i]; + # } + $new_key_and_inonce .= ParagonIE_Sodium_Core_Util::substR($st->getNonce(), 0, 8); + + # crypto_stream_chacha20_ietf_xor(new_key_and_inonce, new_key_and_inonce, + # sizeof new_key_and_inonce, + # state->nonce, state->k); + + $st->rekey(ParagonIE_Sodium_Core_ChaCha20::ietfStreamXorIc( + $new_key_and_inonce, + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core_Util::store64_le(0) + )); + + # for (i = 0U; i < crypto_stream_chacha20_ietf_KEYBYTES; i++) { + # state->k[i] = new_key_and_inonce[i]; + # } + # for (i = 0U; i < crypto_secretstream_xchacha20poly1305_INONCEBYTES; i++) { + # STATE_INONCE(state)[i] = + # new_key_and_inonce[crypto_stream_chacha20_ietf_KEYBYTES + i]; + # } + # _crypto_secretstream_xchacha20poly1305_counter_reset(state); + $st->counterReset(); + + $state = $st->toString(); + } + + /** + * Detached Ed25519 signature. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign_detached($message, $sk) + { + return ParagonIE_Sodium_Core_Ed25519::sign_detached($message, $sk); + } + + /** + * Attached Ed25519 signature. (Returns a signed message.) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign($message, $sk) + { + return ParagonIE_Sodium_Core_Ed25519::sign($message, $sk); + } + + /** + * Opens a signed message. If valid, returns the message. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $signedMessage + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign_open($signedMessage, $pk) + { + return ParagonIE_Sodium_Core_Ed25519::sign_open($signedMessage, $pk); + } + + /** + * Verify a detached signature of a given message and public key. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $signature + * @param string $message + * @param string $pk + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function sign_verify_detached($signature, $message, $pk) + { + return ParagonIE_Sodium_Core_Ed25519::verify_detached($signature, $message, $pk); + } +} diff --git a/vendor/paragonie/sodium_compat/src/Crypto32.php b/vendor/paragonie/sodium_compat/src/Crypto32.php new file mode 100644 index 000000000..34c0d7a39 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Crypto32.php @@ -0,0 +1,1654 @@ +update($ad); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($adlen)); + $state->update($ciphertext); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($clen)); + $computed_mac = $state->finish(); + + /* Compare the given MAC with the recalculated MAC: */ + if (!ParagonIE_Sodium_Core32_Util::verify_16($computed_mac, $mac)) { + throw new SodiumException('Invalid MAC'); + } + + // Here, we know that the MAC is valid, so we decrypt and return the plaintext + return ParagonIE_Sodium_Core32_ChaCha20::streamXorIc( + $ciphertext, + $nonce, + $key, + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + } + + /** + * AEAD Encryption with ChaCha20-Poly1305 + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_chacha20poly1305_encrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + /** @var int $len - Length of the plaintext message */ + $len = ParagonIE_Sodium_Core32_Util::strlen($message); + + /** @var int $adlen - Length of the associated data */ + $adlen = ParagonIE_Sodium_Core32_Util::strlen($ad); + + /** @var string The first block of the chacha20 keystream, used as a poly1305 key */ + $block0 = ParagonIE_Sodium_Core32_ChaCha20::stream( + 32, + $nonce, + $key + ); + $state = new ParagonIE_Sodium_Core32_Poly1305_State($block0); + try { + ParagonIE_Sodium_Compat::memzero($block0); + } catch (SodiumException $ex) { + $block0 = null; + } + + /** @var string $ciphertext - Raw encrypted data */ + $ciphertext = ParagonIE_Sodium_Core32_ChaCha20::streamXorIc( + $message, + $nonce, + $key, + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + + $state->update($ad); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($adlen)); + $state->update($ciphertext); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($len)); + return $ciphertext . $state->finish(); + } + + /** + * AEAD Decryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_chacha20poly1305_ietf_decrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + /** @var int $adlen - Length of associated data */ + $adlen = ParagonIE_Sodium_Core32_Util::strlen($ad); + + /** @var int $len - Length of message (ciphertext + MAC) */ + $len = ParagonIE_Sodium_Core32_Util::strlen($message); + + /** @var int $clen - Length of ciphertext */ + $clen = $len - self::aead_chacha20poly1305_IETF_ABYTES; + + /** @var string The first block of the chacha20 keystream, used as a poly1305 key */ + $block0 = ParagonIE_Sodium_Core32_ChaCha20::ietfStream( + 32, + $nonce, + $key + ); + + /** @var string $mac - Message authentication code */ + $mac = ParagonIE_Sodium_Core32_Util::substr( + $message, + $len - self::aead_chacha20poly1305_IETF_ABYTES, + self::aead_chacha20poly1305_IETF_ABYTES + ); + + /** @var string $ciphertext - The encrypted message (sans MAC) */ + $ciphertext = ParagonIE_Sodium_Core32_Util::substr( + $message, + 0, + $len - self::aead_chacha20poly1305_IETF_ABYTES + ); + + /* Recalculate the Poly1305 authentication tag (MAC): */ + $state = new ParagonIE_Sodium_Core32_Poly1305_State($block0); + try { + ParagonIE_Sodium_Compat::memzero($block0); + } catch (SodiumException $ex) { + $block0 = null; + } + $state->update($ad); + $state->update(str_repeat("\x00", ((0x10 - $adlen) & 0xf))); + $state->update($ciphertext); + $state->update(str_repeat("\x00", (0x10 - $clen) & 0xf)); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($adlen)); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($clen)); + $computed_mac = $state->finish(); + + /* Compare the given MAC with the recalculated MAC: */ + if (!ParagonIE_Sodium_Core32_Util::verify_16($computed_mac, $mac)) { + throw new SodiumException('Invalid MAC'); + } + + // Here, we know that the MAC is valid, so we decrypt and return the plaintext + return ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + $ciphertext, + $nonce, + $key, + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + } + + /** + * AEAD Encryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_chacha20poly1305_ietf_encrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + /** @var int $len - Length of the plaintext message */ + $len = ParagonIE_Sodium_Core32_Util::strlen($message); + + /** @var int $adlen - Length of the associated data */ + $adlen = ParagonIE_Sodium_Core32_Util::strlen($ad); + + /** @var string The first block of the chacha20 keystream, used as a poly1305 key */ + $block0 = ParagonIE_Sodium_Core32_ChaCha20::ietfStream( + 32, + $nonce, + $key + ); + $state = new ParagonIE_Sodium_Core32_Poly1305_State($block0); + try { + ParagonIE_Sodium_Compat::memzero($block0); + } catch (SodiumException $ex) { + $block0 = null; + } + + /** @var string $ciphertext - Raw encrypted data */ + $ciphertext = ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + $message, + $nonce, + $key, + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + + $state->update($ad); + $state->update(str_repeat("\x00", ((0x10 - $adlen) & 0xf))); + $state->update($ciphertext); + $state->update(str_repeat("\x00", ((0x10 - $len) & 0xf))); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($adlen)); + $state->update(ParagonIE_Sodium_Core32_Util::store64_le($len)); + return $ciphertext . $state->finish(); + } + + /** + * AEAD Decryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_xchacha20poly1305_ietf_decrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + $subkey = ParagonIE_Sodium_Core32_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core32_Util::substr($nonce, 0, 16), + $key + ); + $nonceLast = "\x00\x00\x00\x00" . + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8); + + return self::aead_chacha20poly1305_ietf_decrypt($message, $ad, $nonceLast, $subkey); + } + + /** + * AEAD Encryption with ChaCha20-Poly1305, IETF mode (96-bit nonce) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $ad + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function aead_xchacha20poly1305_ietf_encrypt( + $message = '', + $ad = '', + $nonce = '', + $key = '' + ) { + $subkey = ParagonIE_Sodium_Core32_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core32_Util::substr($nonce, 0, 16), + $key + ); + $nonceLast = "\x00\x00\x00\x00" . + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8); + + return self::aead_chacha20poly1305_ietf_encrypt($message, $ad, $nonceLast, $subkey); + } + + /** + * HMAC-SHA-512-256 (a.k.a. the leftmost 256 bits of HMAC-SHA-512) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $key + * @return string + * @throws TypeError + */ + public static function auth($message, $key) + { + return ParagonIE_Sodium_Core32_Util::substr( + hash_hmac('sha512', $message, $key, true), + 0, + 32 + ); + } + + /** + * HMAC-SHA-512-256 validation. Constant-time via hash_equals(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $mac + * @param string $message + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function auth_verify($mac, $message, $key) + { + return ParagonIE_Sodium_Core32_Util::hashEquals( + $mac, + self::auth($message, $key) + ); + } + + /** + * X25519 key exchange followed by XSalsa20Poly1305 symmetric encryption + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $plaintext + * @param string $nonce + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box($plaintext, $nonce, $keypair) + { + return self::secretbox( + $plaintext, + $nonce, + self::box_beforenm( + self::box_secretkey($keypair), + self::box_publickey($keypair) + ) + ); + } + + /** + * X25519-XSalsa20-Poly1305 with one ephemeral X25519 keypair. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $publicKey + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_seal($message, $publicKey) + { + /** @var string $ephemeralKeypair */ + $ephemeralKeypair = self::box_keypair(); + + /** @var string $ephemeralSK */ + $ephemeralSK = self::box_secretkey($ephemeralKeypair); + + /** @var string $ephemeralPK */ + $ephemeralPK = self::box_publickey($ephemeralKeypair); + + /** @var string $nonce */ + $nonce = self::generichash( + $ephemeralPK . $publicKey, + '', + 24 + ); + + /** @var string $keypair - The combined keypair used in crypto_box() */ + $keypair = self::box_keypair_from_secretkey_and_publickey($ephemeralSK, $publicKey); + + /** @var string $ciphertext Ciphertext + MAC from crypto_box */ + $ciphertext = self::box($message, $nonce, $keypair); + try { + ParagonIE_Sodium_Compat::memzero($ephemeralKeypair); + ParagonIE_Sodium_Compat::memzero($ephemeralSK); + ParagonIE_Sodium_Compat::memzero($nonce); + } catch (SodiumException $ex) { + $ephemeralKeypair = null; + $ephemeralSK = null; + $nonce = null; + } + return $ephemeralPK . $ciphertext; + } + + /** + * Opens a message encrypted via box_seal(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_seal_open($message, $keypair) + { + /** @var string $ephemeralPK */ + $ephemeralPK = ParagonIE_Sodium_Core32_Util::substr($message, 0, 32); + + /** @var string $ciphertext (ciphertext + MAC) */ + $ciphertext = ParagonIE_Sodium_Core32_Util::substr($message, 32); + + /** @var string $secretKey */ + $secretKey = self::box_secretkey($keypair); + + /** @var string $publicKey */ + $publicKey = self::box_publickey($keypair); + + /** @var string $nonce */ + $nonce = self::generichash( + $ephemeralPK . $publicKey, + '', + 24 + ); + + /** @var string $keypair */ + $keypair = self::box_keypair_from_secretkey_and_publickey($secretKey, $ephemeralPK); + + /** @var string $m */ + $m = self::box_open($ciphertext, $nonce, $keypair); + try { + ParagonIE_Sodium_Compat::memzero($secretKey); + ParagonIE_Sodium_Compat::memzero($ephemeralPK); + ParagonIE_Sodium_Compat::memzero($nonce); + } catch (SodiumException $ex) { + $secretKey = null; + $ephemeralPK = null; + $nonce = null; + } + return $m; + } + + /** + * Used by crypto_box() to get the crypto_secretbox() key. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sk + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_beforenm($sk, $pk) + { + return ParagonIE_Sodium_Core32_HSalsa20::hsalsa20( + str_repeat("\x00", 16), + self::scalarmult($sk, $pk) + ); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @return string + * @throws Exception + * @throws SodiumException + * @throws TypeError + */ + public static function box_keypair() + { + $sKey = random_bytes(32); + $pKey = self::scalarmult_base($sKey); + return $sKey . $pKey; + } + + /** + * @param string $seed + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_seed_keypair($seed) + { + $sKey = ParagonIE_Sodium_Core32_Util::substr( + hash('sha512', $seed, true), + 0, + 32 + ); + $pKey = self::scalarmult_base($sKey); + return $sKey . $pKey; + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sKey + * @param string $pKey + * @return string + * @throws TypeError + */ + public static function box_keypair_from_secretkey_and_publickey($sKey, $pKey) + { + return ParagonIE_Sodium_Core32_Util::substr($sKey, 0, 32) . + ParagonIE_Sodium_Core32_Util::substr($pKey, 0, 32); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $keypair + * @return string + * @throws RangeException + * @throws TypeError + */ + public static function box_secretkey($keypair) + { + if (ParagonIE_Sodium_Core32_Util::strlen($keypair) !== 64) { + throw new RangeException( + 'Must be ParagonIE_Sodium_Compat::CRYPTO_BOX_KEYPAIRBYTES bytes long.' + ); + } + return ParagonIE_Sodium_Core32_Util::substr($keypair, 0, 32); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $keypair + * @return string + * @throws RangeException + * @throws TypeError + */ + public static function box_publickey($keypair) + { + if (ParagonIE_Sodium_Core32_Util::strlen($keypair) !== ParagonIE_Sodium_Compat::CRYPTO_BOX_KEYPAIRBYTES) { + throw new RangeException( + 'Must be ParagonIE_Sodium_Compat::CRYPTO_BOX_KEYPAIRBYTES bytes long.' + ); + } + return ParagonIE_Sodium_Core32_Util::substr($keypair, 32, 32); + } + + /** + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sKey + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function box_publickey_from_secretkey($sKey) + { + if (ParagonIE_Sodium_Core32_Util::strlen($sKey) !== ParagonIE_Sodium_Compat::CRYPTO_BOX_SECRETKEYBYTES) { + throw new RangeException( + 'Must be ParagonIE_Sodium_Compat::CRYPTO_BOX_SECRETKEYBYTES bytes long.' + ); + } + return self::scalarmult_base($sKey); + } + + /** + * Decrypt a message encrypted with box(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ciphertext + * @param string $nonce + * @param string $keypair + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function box_open($ciphertext, $nonce, $keypair) + { + return self::secretbox_open( + $ciphertext, + $nonce, + self::box_beforenm( + self::box_secretkey($keypair), + self::box_publickey($keypair) + ) + ); + } + + /** + * Calculate a BLAKE2b hash. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string|null $key + * @param int $outlen + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function generichash($message, $key = '', $outlen = 32) + { + // This ensures that ParagonIE_Sodium_Core32_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core32_BLAKE2b::pseudoConstructor(); + + $k = null; + if (!empty($key)) { + /** @var SplFixedArray $k */ + $k = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($key); + if ($k->count() > ParagonIE_Sodium_Core32_BLAKE2b::KEYBYTES) { + throw new RangeException('Invalid key size'); + } + } + + /** @var SplFixedArray $in */ + $in = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($message); + + /** @var SplFixedArray $ctx */ + $ctx = ParagonIE_Sodium_Core32_BLAKE2b::init($k, $outlen); + ParagonIE_Sodium_Core32_BLAKE2b::update($ctx, $in, $in->count()); + + /** @var SplFixedArray $out */ + $out = new SplFixedArray($outlen); + $out = ParagonIE_Sodium_Core32_BLAKE2b::finish($ctx, $out); + + /** @var array */ + $outArray = $out->toArray(); + return ParagonIE_Sodium_Core32_Util::intArrayToString($outArray); + } + + /** + * Finalize a BLAKE2b hashing context, returning the hash. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ctx + * @param int $outlen + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_final($ctx, $outlen = 32) + { + if (!is_string($ctx)) { + throw new TypeError('Context must be a string'); + } + $out = new SplFixedArray($outlen); + + /** @var SplFixedArray $context */ + $context = ParagonIE_Sodium_Core32_BLAKE2b::stringToContext($ctx); + + /** @var SplFixedArray $out */ + $out = ParagonIE_Sodium_Core32_BLAKE2b::finish($context, $out); + + /** @var array */ + $outArray = $out->toArray(); + return ParagonIE_Sodium_Core32_Util::intArrayToString($outArray); + } + + /** + * Initialize a hashing context for BLAKE2b. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $key + * @param int $outputLength + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_init($key = '', $outputLength = 32) + { + // This ensures that ParagonIE_Sodium_Core32_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core32_BLAKE2b::pseudoConstructor(); + + $k = null; + if (!empty($key)) { + $k = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($key); + if ($k->count() > ParagonIE_Sodium_Core32_BLAKE2b::KEYBYTES) { + throw new RangeException('Invalid key size'); + } + } + + /** @var SplFixedArray $ctx */ + $ctx = ParagonIE_Sodium_Core32_BLAKE2b::init($k, $outputLength); + + return ParagonIE_Sodium_Core32_BLAKE2b::contextToString($ctx); + } + + /** + * Initialize a hashing context for BLAKE2b. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $key + * @param int $outputLength + * @param string $salt + * @param string $personal + * @return string + * @throws RangeException + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_init_salt_personal( + $key = '', + $outputLength = 32, + $salt = '', + $personal = '' + ) { + // This ensures that ParagonIE_Sodium_Core32_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core32_BLAKE2b::pseudoConstructor(); + + $k = null; + if (!empty($key)) { + $k = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($key); + if ($k->count() > ParagonIE_Sodium_Core32_BLAKE2b::KEYBYTES) { + throw new RangeException('Invalid key size'); + } + } + if (!empty($salt)) { + $s = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($salt); + } else { + $s = null; + } + if (!empty($salt)) { + $p = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($personal); + } else { + $p = null; + } + + /** @var SplFixedArray $ctx */ + $ctx = ParagonIE_Sodium_Core32_BLAKE2b::init($k, $outputLength, $s, $p); + + return ParagonIE_Sodium_Core32_BLAKE2b::contextToString($ctx); + } + + /** + * Update a hashing context for BLAKE2b with $message + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ctx + * @param string $message + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function generichash_update($ctx, $message) + { + // This ensures that ParagonIE_Sodium_Core32_BLAKE2b::$iv is initialized + ParagonIE_Sodium_Core32_BLAKE2b::pseudoConstructor(); + + /** @var SplFixedArray $context */ + $context = ParagonIE_Sodium_Core32_BLAKE2b::stringToContext($ctx); + + /** @var SplFixedArray $in */ + $in = ParagonIE_Sodium_Core32_BLAKE2b::stringToSplFixedArray($message); + + ParagonIE_Sodium_Core32_BLAKE2b::update($context, $in, $in->count()); + + return ParagonIE_Sodium_Core32_BLAKE2b::contextToString($context); + } + + /** + * Libsodium's crypto_kx(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $my_sk + * @param string $their_pk + * @param string $client_pk + * @param string $server_pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function keyExchange($my_sk, $their_pk, $client_pk, $server_pk) + { + return self::generichash( + self::scalarmult($my_sk, $their_pk) . + $client_pk . + $server_pk + ); + } + + /** + * ECDH over Curve25519 + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $sKey + * @param string $pKey + * @return string + * + * @throws SodiumException + * @throws TypeError + */ + public static function scalarmult($sKey, $pKey) + { + $q = ParagonIE_Sodium_Core32_X25519::crypto_scalarmult_curve25519_ref10($sKey, $pKey); + self::scalarmult_throw_if_zero($q); + return $q; + } + + /** + * ECDH over Curve25519, using the basepoint. + * Used to get a secret key from a public key. + * + * @param string $secret + * @return string + * + * @throws SodiumException + * @throws TypeError + */ + public static function scalarmult_base($secret) + { + $q = ParagonIE_Sodium_Core32_X25519::crypto_scalarmult_curve25519_ref10_base($secret); + self::scalarmult_throw_if_zero($q); + return $q; + } + + /** + * This throws an Error if a zero public key was passed to the function. + * + * @param string $q + * @return void + * @throws SodiumException + * @throws TypeError + */ + protected static function scalarmult_throw_if_zero($q) + { + $d = 0; + for ($i = 0; $i < self::box_curve25519xsalsa20poly1305_SECRETKEYBYTES; ++$i) { + $d |= ParagonIE_Sodium_Core32_Util::chrToInt($q[$i]); + } + + /* branch-free variant of === 0 */ + if (-(1 & (($d - 1) >> 8))) { + throw new SodiumException('Zero public key is not allowed'); + } + } + + /** + * XSalsa20-Poly1305 authenticated symmetric-key encryption. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $plaintext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox($plaintext, $nonce, $key) + { + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core32_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $block0 */ + $block0 = str_repeat("\x00", 32); + + /** @var int $mlen - Length of the plaintext message */ + $mlen = ParagonIE_Sodium_Core32_Util::strlen($plaintext); + $mlen0 = $mlen; + if ($mlen0 > 64 - self::secretbox_xsalsa20poly1305_ZEROBYTES) { + $mlen0 = 64 - self::secretbox_xsalsa20poly1305_ZEROBYTES; + } + $block0 .= ParagonIE_Sodium_Core32_Util::substr($plaintext, 0, $mlen0); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core32_Salsa20::salsa20_xor( + $block0, + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + $subkey + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core32_Util::substr( + $block0, + self::secretbox_xsalsa20poly1305_ZEROBYTES + ); + if ($mlen > $mlen0) { + $c .= ParagonIE_Sodium_Core32_Salsa20::salsa20_xor_ic( + ParagonIE_Sodium_Core32_Util::substr( + $plaintext, + self::secretbox_xsalsa20poly1305_ZEROBYTES + ), + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + 1, + $subkey + ); + } + $state = new ParagonIE_Sodium_Core32_Poly1305_State( + ParagonIE_Sodium_Core32_Util::substr( + $block0, + 0, + self::onetimeauth_poly1305_KEYBYTES + ) + ); + try { + ParagonIE_Sodium_Compat::memzero($block0); + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $block0 = null; + $subkey = null; + } + + $state->update($c); + + /** @var string $c - MAC || ciphertext */ + $c = $state->finish() . $c; + unset($state); + + return $c; + } + + /** + * Decrypt a ciphertext generated via secretbox(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ciphertext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_open($ciphertext, $nonce, $key) + { + /** @var string $mac */ + $mac = ParagonIE_Sodium_Core32_Util::substr( + $ciphertext, + 0, + self::secretbox_xsalsa20poly1305_MACBYTES + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core32_Util::substr( + $ciphertext, + self::secretbox_xsalsa20poly1305_MACBYTES + ); + + /** @var int $clen */ + $clen = ParagonIE_Sodium_Core32_Util::strlen($c); + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core32_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core32_Salsa20::salsa20( + 64, + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + $subkey + ); + $verified = ParagonIE_Sodium_Core32_Poly1305::onetimeauth_verify( + $mac, + $c, + ParagonIE_Sodium_Core32_Util::substr($block0, 0, 32) + ); + if (!$verified) { + try { + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $subkey = null; + } + throw new SodiumException('Invalid MAC'); + } + + /** @var string $m - Decrypted message */ + $m = ParagonIE_Sodium_Core32_Util::xorStrings( + ParagonIE_Sodium_Core32_Util::substr($block0, self::secretbox_xsalsa20poly1305_ZEROBYTES), + ParagonIE_Sodium_Core32_Util::substr($c, 0, self::secretbox_xsalsa20poly1305_ZEROBYTES) + ); + if ($clen > self::secretbox_xsalsa20poly1305_ZEROBYTES) { + // We had more than 1 block, so let's continue to decrypt the rest. + $m .= ParagonIE_Sodium_Core32_Salsa20::salsa20_xor_ic( + ParagonIE_Sodium_Core32_Util::substr( + $c, + self::secretbox_xsalsa20poly1305_ZEROBYTES + ), + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + 1, + (string) $subkey + ); + } + return $m; + } + + /** + * XChaCha20-Poly1305 authenticated symmetric-key encryption. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $plaintext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_xchacha20poly1305($plaintext, $nonce, $key) + { + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core32_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core32_Util::substr($nonce, 0, 16), + $key + ); + $nonceLast = ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8); + + /** @var string $block0 */ + $block0 = str_repeat("\x00", 32); + + /** @var int $mlen - Length of the plaintext message */ + $mlen = ParagonIE_Sodium_Core32_Util::strlen($plaintext); + $mlen0 = $mlen; + if ($mlen0 > 64 - self::secretbox_xchacha20poly1305_ZEROBYTES) { + $mlen0 = 64 - self::secretbox_xchacha20poly1305_ZEROBYTES; + } + $block0 .= ParagonIE_Sodium_Core32_Util::substr($plaintext, 0, $mlen0); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core32_ChaCha20::streamXorIc( + $block0, + $nonceLast, + $subkey + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core32_Util::substr( + $block0, + self::secretbox_xchacha20poly1305_ZEROBYTES + ); + if ($mlen > $mlen0) { + $c .= ParagonIE_Sodium_Core32_ChaCha20::streamXorIc( + ParagonIE_Sodium_Core32_Util::substr( + $plaintext, + self::secretbox_xchacha20poly1305_ZEROBYTES + ), + $nonceLast, + $subkey, + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + } + $state = new ParagonIE_Sodium_Core32_Poly1305_State( + ParagonIE_Sodium_Core32_Util::substr( + $block0, + 0, + self::onetimeauth_poly1305_KEYBYTES + ) + ); + try { + ParagonIE_Sodium_Compat::memzero($block0); + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $block0 = null; + $subkey = null; + } + + $state->update($c); + + /** @var string $c - MAC || ciphertext */ + $c = $state->finish() . $c; + unset($state); + + return $c; + } + + /** + * Decrypt a ciphertext generated via secretbox_xchacha20poly1305(). + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $ciphertext + * @param string $nonce + * @param string $key + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_xchacha20poly1305_open($ciphertext, $nonce, $key) + { + /** @var string $mac */ + $mac = ParagonIE_Sodium_Core32_Util::substr( + $ciphertext, + 0, + self::secretbox_xchacha20poly1305_MACBYTES + ); + + /** @var string $c */ + $c = ParagonIE_Sodium_Core32_Util::substr( + $ciphertext, + self::secretbox_xchacha20poly1305_MACBYTES + ); + + /** @var int $clen */ + $clen = ParagonIE_Sodium_Core32_Util::strlen($c); + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core32_HChaCha20::hchacha20($nonce, $key); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core32_ChaCha20::stream( + 64, + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + $subkey + ); + $verified = ParagonIE_Sodium_Core32_Poly1305::onetimeauth_verify( + $mac, + $c, + ParagonIE_Sodium_Core32_Util::substr($block0, 0, 32) + ); + + if (!$verified) { + try { + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $subkey = null; + } + throw new SodiumException('Invalid MAC'); + } + + /** @var string $m - Decrypted message */ + $m = ParagonIE_Sodium_Core32_Util::xorStrings( + ParagonIE_Sodium_Core32_Util::substr($block0, self::secretbox_xchacha20poly1305_ZEROBYTES), + ParagonIE_Sodium_Core32_Util::substr($c, 0, self::secretbox_xchacha20poly1305_ZEROBYTES) + ); + + if ($clen > self::secretbox_xchacha20poly1305_ZEROBYTES) { + // We had more than 1 block, so let's continue to decrypt the rest. + $m .= ParagonIE_Sodium_Core32_ChaCha20::streamXorIc( + ParagonIE_Sodium_Core32_Util::substr( + $c, + self::secretbox_xchacha20poly1305_ZEROBYTES + ), + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + (string) $subkey, + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + } + return $m; + } + + /** + * @param string $key + * @return array Returns a state and a header. + * @throws Exception + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_init_push($key) + { + # randombytes_buf(out, crypto_secretstream_xchacha20poly1305_HEADERBYTES); + $out = random_bytes(24); + + # crypto_core_hchacha20(state->k, out, k, NULL); + $subkey = ParagonIE_Sodium_Core32_HChaCha20::hChaCha20($out, $key); + $state = new ParagonIE_Sodium_Core32_SecretStream_State( + $subkey, + ParagonIE_Sodium_Core32_Util::substr($out, 16, 8) . str_repeat("\0", 4) + ); + + # _crypto_secretstream_xchacha20poly1305_counter_reset(state); + $state->counterReset(); + + # memcpy(STATE_INONCE(state), out + crypto_core_hchacha20_INPUTBYTES, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + # memset(state->_pad, 0, sizeof state->_pad); + return array( + $state->toString(), + $out + ); + } + + /** + * @param string $key + * @param string $header + * @return string Returns a state. + * @throws Exception + */ + public static function secretstream_xchacha20poly1305_init_pull($key, $header) + { + # crypto_core_hchacha20(state->k, in, k, NULL); + $subkey = ParagonIE_Sodium_Core32_HChaCha20::hChaCha20( + ParagonIE_Sodium_Core32_Util::substr($header, 0, 16), + $key + ); + $state = new ParagonIE_Sodium_Core32_SecretStream_State( + $subkey, + ParagonIE_Sodium_Core32_Util::substr($header, 16) + ); + $state->counterReset(); + # memcpy(STATE_INONCE(state), in + crypto_core_hchacha20_INPUTBYTES, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + # memset(state->_pad, 0, sizeof state->_pad); + # return 0; + return $state->toString(); + } + + /** + * @param string $state + * @param string $msg + * @param string $aad + * @param int $tag + * @return string + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_push(&$state, $msg, $aad = '', $tag = 0) + { + $st = ParagonIE_Sodium_Core32_SecretStream_State::fromString($state); + # crypto_onetimeauth_poly1305_state poly1305_state; + # unsigned char block[64U]; + # unsigned char slen[8U]; + # unsigned char *c; + # unsigned char *mac; + + $msglen = ParagonIE_Sodium_Core32_Util::strlen($msg); + $aadlen = ParagonIE_Sodium_Core32_Util::strlen($aad); + + if ((($msglen + 63) >> 6) > 0xfffffffe) { + throw new SodiumException( + 'message cannot be larger than SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_MESSAGEBYTES_MAX bytes' + ); + } + + # if (outlen_p != NULL) { + # *outlen_p = 0U; + # } + # if (mlen > crypto_secretstream_xchacha20poly1305_MESSAGEBYTES_MAX) { + # sodium_misuse(); + # } + + # crypto_stream_chacha20_ietf(block, sizeof block, state->nonce, state->k); + # crypto_onetimeauth_poly1305_init(&poly1305_state, block); + # sodium_memzero(block, sizeof block); + $auth = new ParagonIE_Sodium_Core32_Poly1305_State( + ParagonIE_Sodium_Core32_ChaCha20::ietfStream(32, $st->getCombinedNonce(), $st->getKey()) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, ad, adlen); + $auth->update($aad); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, _pad0, + # (0x10 - adlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - $aadlen) & 0xf))); + + # memset(block, 0, sizeof block); + # block[0] = tag; + # crypto_stream_chacha20_ietf_xor_ic(block, block, sizeof block, + # state->nonce, 1U, state->k); + $block = ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + ParagonIE_Sodium_Core32_Util::intToChr($tag) . str_repeat("\0", 63), + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, block, sizeof block); + $auth->update($block); + + # out[0] = block[0]; + $out = $block[0]; + # c = out + (sizeof tag); + # crypto_stream_chacha20_ietf_xor_ic(c, m, mlen, state->nonce, 2U, state->k); + $cipher = ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + $msg, + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core32_Util::store64_le(2) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen); + $auth->update($cipher); + + $out .= $cipher; + unset($cipher); + + # crypto_onetimeauth_poly1305_update + # (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - 64 + $msglen) & 0xf))); + + # STORE64_LE(slen, (uint64_t) adlen); + $slen = ParagonIE_Sodium_Core32_Util::store64_le($aadlen); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $auth->update($slen); + + # STORE64_LE(slen, (sizeof block) + mlen); + $slen = ParagonIE_Sodium_Core32_Util::store64_le(64 + $msglen); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $auth->update($slen); + + # mac = c + mlen; + # crypto_onetimeauth_poly1305_final(&poly1305_state, mac); + $mac = $auth->finish(); + $out .= $mac; + + # sodium_memzero(&poly1305_state, sizeof poly1305_state); + unset($auth); + + + # XOR_BUF(STATE_INONCE(state), mac, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + $st->xorNonce($mac); + + # sodium_increment(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES); + $st->incrementCounter(); + // Overwrite by reference: + $state = $st->toString(); + + /** @var bool $rekey */ + $rekey = ($tag & ParagonIE_Sodium_Compat::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_TAG_REKEY) !== 0; + # if ((tag & crypto_secretstream_xchacha20poly1305_TAG_REKEY) != 0 || + # sodium_is_zero(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES)) { + # crypto_secretstream_xchacha20poly1305_rekey(state); + # } + if ($rekey || $st->needsRekey()) { + // DO REKEY + self::secretstream_xchacha20poly1305_rekey($state); + } + # if (outlen_p != NULL) { + # *outlen_p = crypto_secretstream_xchacha20poly1305_ABYTES + mlen; + # } + return $out; + } + + /** + * @param string $state + * @param string $cipher + * @param string $aad + * @return bool|array{0: string, 1: int} + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_pull(&$state, $cipher, $aad = '') + { + $st = ParagonIE_Sodium_Core32_SecretStream_State::fromString($state); + + $cipherlen = ParagonIE_Sodium_Core32_Util::strlen($cipher); + # mlen = inlen - crypto_secretstream_xchacha20poly1305_ABYTES; + $msglen = $cipherlen - ParagonIE_Sodium_Compat::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_ABYTES; + $aadlen = ParagonIE_Sodium_Core32_Util::strlen($aad); + + # if (mlen > crypto_secretstream_xchacha20poly1305_MESSAGEBYTES_MAX) { + # sodium_misuse(); + # } + if ((($msglen + 63) >> 6) > 0xfffffffe) { + throw new SodiumException( + 'message cannot be larger than SODIUM_CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_MESSAGEBYTES_MAX bytes' + ); + } + + # crypto_stream_chacha20_ietf(block, sizeof block, state->nonce, state->k); + # crypto_onetimeauth_poly1305_init(&poly1305_state, block); + # sodium_memzero(block, sizeof block); + $auth = new ParagonIE_Sodium_Core32_Poly1305_State( + ParagonIE_Sodium_Core32_ChaCha20::ietfStream(32, $st->getCombinedNonce(), $st->getKey()) + ); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, ad, adlen); + $auth->update($aad); + + # crypto_onetimeauth_poly1305_update(&poly1305_state, _pad0, + # (0x10 - adlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - $aadlen) & 0xf))); + + + # memset(block, 0, sizeof block); + # block[0] = in[0]; + # crypto_stream_chacha20_ietf_xor_ic(block, block, sizeof block, + # state->nonce, 1U, state->k); + $block = ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + $cipher[0] . str_repeat("\0", 63), + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core32_Util::store64_le(1) + ); + # tag = block[0]; + # block[0] = in[0]; + # crypto_onetimeauth_poly1305_update(&poly1305_state, block, sizeof block); + $tag = ParagonIE_Sodium_Core32_Util::chrToInt($block[0]); + $block[0] = $cipher[0]; + $auth->update($block); + + + # c = in + (sizeof tag); + # crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen); + $auth->update(ParagonIE_Sodium_Core32_Util::substr($cipher, 1, $msglen)); + + # crypto_onetimeauth_poly1305_update + # (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf); + $auth->update(str_repeat("\0", ((0x10 - 64 + $msglen) & 0xf))); + + # STORE64_LE(slen, (uint64_t) adlen); + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $slen = ParagonIE_Sodium_Core32_Util::store64_le($aadlen); + $auth->update($slen); + + # STORE64_LE(slen, (sizeof block) + mlen); + # crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen); + $slen = ParagonIE_Sodium_Core32_Util::store64_le(64 + $msglen); + $auth->update($slen); + + # crypto_onetimeauth_poly1305_final(&poly1305_state, mac); + # sodium_memzero(&poly1305_state, sizeof poly1305_state); + $mac = $auth->finish(); + + # stored_mac = c + mlen; + # if (sodium_memcmp(mac, stored_mac, sizeof mac) != 0) { + # sodium_memzero(mac, sizeof mac); + # return -1; + # } + + $stored = ParagonIE_Sodium_Core32_Util::substr($cipher, $msglen + 1, 16); + if (!ParagonIE_Sodium_Core32_Util::hashEquals($mac, $stored)) { + return false; + } + + # crypto_stream_chacha20_ietf_xor_ic(m, c, mlen, state->nonce, 2U, state->k); + $out = ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + ParagonIE_Sodium_Core32_Util::substr($cipher, 1, $msglen), + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core32_Util::store64_le(2) + ); + + # XOR_BUF(STATE_INONCE(state), mac, + # crypto_secretstream_xchacha20poly1305_INONCEBYTES); + $st->xorNonce($mac); + + # sodium_increment(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES); + $st->incrementCounter(); + + # if ((tag & crypto_secretstream_xchacha20poly1305_TAG_REKEY) != 0 || + # sodium_is_zero(STATE_COUNTER(state), + # crypto_secretstream_xchacha20poly1305_COUNTERBYTES)) { + # crypto_secretstream_xchacha20poly1305_rekey(state); + # } + + // Overwrite by reference: + $state = $st->toString(); + + /** @var bool $rekey */ + $rekey = ($tag & ParagonIE_Sodium_Compat::CRYPTO_SECRETSTREAM_XCHACHA20POLY1305_TAG_REKEY) !== 0; + if ($rekey || $st->needsRekey()) { + // DO REKEY + self::secretstream_xchacha20poly1305_rekey($state); + } + return array($out, $tag); + } + + /** + * @param string $state + * @return void + * @throws SodiumException + */ + public static function secretstream_xchacha20poly1305_rekey(&$state) + { + $st = ParagonIE_Sodium_Core32_SecretStream_State::fromString($state); + # unsigned char new_key_and_inonce[crypto_stream_chacha20_ietf_KEYBYTES + + # crypto_secretstream_xchacha20poly1305_INONCEBYTES]; + # size_t i; + # for (i = 0U; i < crypto_stream_chacha20_ietf_KEYBYTES; i++) { + # new_key_and_inonce[i] = state->k[i]; + # } + $new_key_and_inonce = $st->getKey(); + + # for (i = 0U; i < crypto_secretstream_xchacha20poly1305_INONCEBYTES; i++) { + # new_key_and_inonce[crypto_stream_chacha20_ietf_KEYBYTES + i] = + # STATE_INONCE(state)[i]; + # } + $new_key_and_inonce .= ParagonIE_Sodium_Core32_Util::substR($st->getNonce(), 0, 8); + + # crypto_stream_chacha20_ietf_xor(new_key_and_inonce, new_key_and_inonce, + # sizeof new_key_and_inonce, + # state->nonce, state->k); + + $st->rekey(ParagonIE_Sodium_Core32_ChaCha20::ietfStreamXorIc( + $new_key_and_inonce, + $st->getCombinedNonce(), + $st->getKey(), + ParagonIE_Sodium_Core32_Util::store64_le(0) + )); + + # for (i = 0U; i < crypto_stream_chacha20_ietf_KEYBYTES; i++) { + # state->k[i] = new_key_and_inonce[i]; + # } + # for (i = 0U; i < crypto_secretstream_xchacha20poly1305_INONCEBYTES; i++) { + # STATE_INONCE(state)[i] = + # new_key_and_inonce[crypto_stream_chacha20_ietf_KEYBYTES + i]; + # } + # _crypto_secretstream_xchacha20poly1305_counter_reset(state); + $st->counterReset(); + + $state = $st->toString(); + } + + /** + * Detached Ed25519 signature. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign_detached($message, $sk) + { + return ParagonIE_Sodium_Core32_Ed25519::sign_detached($message, $sk); + } + + /** + * Attached Ed25519 signature. (Returns a signed message.) + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $message + * @param string $sk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign($message, $sk) + { + return ParagonIE_Sodium_Core32_Ed25519::sign($message, $sk); + } + + /** + * Opens a signed message. If valid, returns the message. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $signedMessage + * @param string $pk + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function sign_open($signedMessage, $pk) + { + return ParagonIE_Sodium_Core32_Ed25519::sign_open($signedMessage, $pk); + } + + /** + * Verify a detached signature of a given message and public key. + * + * @internal Do not use this directly. Use ParagonIE_Sodium_Compat. + * + * @param string $signature + * @param string $message + * @param string $pk + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function sign_verify_detached($signature, $message, $pk) + { + return ParagonIE_Sodium_Core32_Ed25519::verify_detached($signature, $message, $pk); + } +} diff --git a/vendor/paragonie/sodium_compat/src/File.php b/vendor/paragonie/sodium_compat/src/File.php new file mode 100644 index 000000000..867da3b9a --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/File.php @@ -0,0 +1,1567 @@ + ParagonIE_Sodium_Compat::CRYPTO_GENERICHASH_KEYBYTES_MAX) { + throw new TypeError('Argument 2 must be at most CRYPTO_GENERICHASH_KEYBYTES_MAX bytes'); + } + } + if ($outputLength < ParagonIE_Sodium_Compat::CRYPTO_GENERICHASH_BYTES_MIN) { + throw new SodiumException('Argument 3 must be at least CRYPTO_GENERICHASH_BYTES_MIN'); + } + if ($outputLength > ParagonIE_Sodium_Compat::CRYPTO_GENERICHASH_BYTES_MAX) { + throw new SodiumException('Argument 3 must be at least CRYPTO_GENERICHASH_BYTES_MAX'); + } + + /** @var int $size */ + $size = filesize($filePath); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + + /** @var resource $fp */ + $fp = fopen($filePath, 'rb'); + if (!is_resource($fp)) { + throw new SodiumException('Could not open input file for reading'); + } + $ctx = ParagonIE_Sodium_Compat::crypto_generichash_init($key, $outputLength); + while ($size > 0) { + $blockSize = $size > 64 + ? 64 + : $size; + $read = fread($fp, $blockSize); + if (!is_string($read)) { + throw new SodiumException('Could not read input file'); + } + ParagonIE_Sodium_Compat::crypto_generichash_update($ctx, $read); + $size -= $blockSize; + } + + fclose($fp); + return ParagonIE_Sodium_Compat::crypto_generichash_final($ctx, $outputLength); + } + + /** + * Encrypt a file (rather than a string). Uses less memory than + * ParagonIE_Sodium_Compat::crypto_secretbox(), but produces + * the same result. + * + * @param string $inputFile Absolute path to a file on the filesystem + * @param string $outputFile Absolute path to a file on the filesystem + * @param string $nonce Number to be used only once + * @param string $key Encryption key + * + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox($inputFile, $outputFile, $nonce, $key) + { + /* Type checks: */ + if (!is_string($inputFile)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($inputFile) . ' given..'); + } + if (!is_string($outputFile)) { + throw new TypeError('Argument 2 must be a string, ' . gettype($outputFile) . ' given.'); + } + if (!is_string($nonce)) { + throw new TypeError('Argument 3 must be a string, ' . gettype($nonce) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($nonce) !== ParagonIE_Sodium_Compat::CRYPTO_SECRETBOX_NONCEBYTES) { + throw new TypeError('Argument 3 must be CRYPTO_SECRETBOX_NONCEBYTES bytes'); + } + if (!is_string($key)) { + throw new TypeError('Argument 4 must be a string, ' . gettype($key) . ' given.'); + } + if (self::strlen($key) !== ParagonIE_Sodium_Compat::CRYPTO_SECRETBOX_KEYBYTES) { + throw new TypeError('Argument 4 must be CRYPTO_SECRETBOX_KEYBYTES bytes'); + } + + /** @var int $size */ + $size = filesize($inputFile); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + + /** @var resource $ifp */ + $ifp = fopen($inputFile, 'rb'); + if (!is_resource($ifp)) { + throw new SodiumException('Could not open input file for reading'); + } + + /** @var resource $ofp */ + $ofp = fopen($outputFile, 'wb'); + if (!is_resource($ofp)) { + fclose($ifp); + throw new SodiumException('Could not open output file for writing'); + } + + $res = self::secretbox_encrypt($ifp, $ofp, $size, $nonce, $key); + fclose($ifp); + fclose($ofp); + return $res; + } + /** + * Seal a file (rather than a string). Uses less memory than + * ParagonIE_Sodium_Compat::crypto_secretbox_open(), but produces + * the same result. + * + * Warning: Does not protect against TOCTOU attacks. You should + * just load the file into memory and use crypto_secretbox_open() if + * you are worried about those. + * + * @param string $inputFile + * @param string $outputFile + * @param string $nonce + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + public static function secretbox_open($inputFile, $outputFile, $nonce, $key) + { + /* Type checks: */ + if (!is_string($inputFile)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($inputFile) . ' given.'); + } + if (!is_string($outputFile)) { + throw new TypeError('Argument 2 must be a string, ' . gettype($outputFile) . ' given.'); + } + if (!is_string($nonce)) { + throw new TypeError('Argument 3 must be a string, ' . gettype($nonce) . ' given.'); + } + if (!is_string($key)) { + throw new TypeError('Argument 4 must be a string, ' . gettype($key) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($nonce) !== ParagonIE_Sodium_Compat::CRYPTO_SECRETBOX_NONCEBYTES) { + throw new TypeError('Argument 4 must be CRYPTO_SECRETBOX_NONCEBYTES bytes'); + } + if (self::strlen($key) !== ParagonIE_Sodium_Compat::CRYPTO_SECRETBOX_KEYBYTES) { + throw new TypeError('Argument 4 must be CRYPTO_SECRETBOXBOX_KEYBYTES bytes'); + } + + /** @var int $size */ + $size = filesize($inputFile); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + + /** @var resource $ifp */ + $ifp = fopen($inputFile, 'rb'); + if (!is_resource($ifp)) { + throw new SodiumException('Could not open input file for reading'); + } + + /** @var resource $ofp */ + $ofp = fopen($outputFile, 'wb'); + if (!is_resource($ofp)) { + fclose($ifp); + throw new SodiumException('Could not open output file for writing'); + } + + $res = self::secretbox_decrypt($ifp, $ofp, $size, $nonce, $key); + fclose($ifp); + fclose($ofp); + try { + ParagonIE_Sodium_Compat::memzero($key); + } catch (SodiumException $ex) { + /** @psalm-suppress PossiblyUndefinedVariable */ + unset($key); + } + return $res; + } + + /** + * Sign a file (rather than a string). Uses less memory than + * ParagonIE_Sodium_Compat::crypto_sign_detached(), but produces + * the same result. + * + * @param string $filePath Absolute path to a file on the filesystem + * @param string $secretKey Secret signing key + * + * @return string Ed25519 signature + * @throws SodiumException + * @throws TypeError + */ + public static function sign($filePath, $secretKey) + { + /* Type checks: */ + if (!is_string($filePath)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($filePath) . ' given.'); + } + if (!is_string($secretKey)) { + throw new TypeError('Argument 2 must be a string, ' . gettype($secretKey) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($secretKey) !== ParagonIE_Sodium_Compat::CRYPTO_SIGN_SECRETKEYBYTES) { + throw new TypeError('Argument 2 must be CRYPTO_SIGN_SECRETKEYBYTES bytes'); + } + if (PHP_INT_SIZE === 4) { + return self::sign_core32($filePath, $secretKey); + } + + /** @var int $size */ + $size = filesize($filePath); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + + /** @var resource $fp */ + $fp = fopen($filePath, 'rb'); + if (!is_resource($fp)) { + throw new SodiumException('Could not open input file for reading'); + } + + /** @var string $az */ + $az = hash('sha512', self::substr($secretKey, 0, 32), true); + + $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); + $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); + + $hs = hash_init('sha512'); + hash_update($hs, self::substr($az, 32, 32)); + /** @var resource $hs */ + $hs = self::updateHashWithFile($hs, $fp, $size); + + /** @var string $nonceHash */ + $nonceHash = hash_final($hs, true); + + /** @var string $pk */ + $pk = self::substr($secretKey, 32, 32); + + /** @var string $nonce */ + $nonce = ParagonIE_Sodium_Core_Ed25519::sc_reduce($nonceHash) . self::substr($nonceHash, 32); + + /** @var string $sig */ + $sig = ParagonIE_Sodium_Core_Ed25519::ge_p3_tobytes( + ParagonIE_Sodium_Core_Ed25519::ge_scalarmult_base($nonce) + ); + + $hs = hash_init('sha512'); + hash_update($hs, self::substr($sig, 0, 32)); + hash_update($hs, self::substr($pk, 0, 32)); + /** @var resource $hs */ + $hs = self::updateHashWithFile($hs, $fp, $size); + + /** @var string $hramHash */ + $hramHash = hash_final($hs, true); + + /** @var string $hram */ + $hram = ParagonIE_Sodium_Core_Ed25519::sc_reduce($hramHash); + + /** @var string $sigAfter */ + $sigAfter = ParagonIE_Sodium_Core_Ed25519::sc_muladd($hram, $az, $nonce); + + /** @var string $sig */ + $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); + + try { + ParagonIE_Sodium_Compat::memzero($az); + } catch (SodiumException $ex) { + $az = null; + } + fclose($fp); + return $sig; + } + + /** + * Verify a file (rather than a string). Uses less memory than + * ParagonIE_Sodium_Compat::crypto_sign_verify_detached(), but + * produces the same result. + * + * @param string $sig Ed25519 signature + * @param string $filePath Absolute path to a file on the filesystem + * @param string $publicKey Signing public key + * + * @return bool + * @throws SodiumException + * @throws TypeError + * @throws Exception + */ + public static function verify($sig, $filePath, $publicKey) + { + /* Type checks: */ + if (!is_string($sig)) { + throw new TypeError('Argument 1 must be a string, ' . gettype($sig) . ' given.'); + } + if (!is_string($filePath)) { + throw new TypeError('Argument 2 must be a string, ' . gettype($filePath) . ' given.'); + } + if (!is_string($publicKey)) { + throw new TypeError('Argument 3 must be a string, ' . gettype($publicKey) . ' given.'); + } + + /* Input validation: */ + if (self::strlen($sig) !== ParagonIE_Sodium_Compat::CRYPTO_SIGN_BYTES) { + throw new TypeError('Argument 1 must be CRYPTO_SIGN_BYTES bytes'); + } + if (self::strlen($publicKey) !== ParagonIE_Sodium_Compat::CRYPTO_SIGN_PUBLICKEYBYTES) { + throw new TypeError('Argument 3 must be CRYPTO_SIGN_PUBLICKEYBYTES bytes'); + } + if (self::strlen($sig) < 64) { + throw new SodiumException('Signature is too short'); + } + + if (PHP_INT_SIZE === 4) { + return self::verify_core32($sig, $filePath, $publicKey); + } + + /* Security checks */ + if ( + (ParagonIE_Sodium_Core_Ed25519::chrToInt($sig[63]) & 240) + && + ParagonIE_Sodium_Core_Ed25519::check_S_lt_L(self::substr($sig, 32, 32)) + ) { + throw new SodiumException('S < L - Invalid signature'); + } + if (ParagonIE_Sodium_Core_Ed25519::small_order($sig)) { + throw new SodiumException('Signature is on too small of an order'); + } + if ((self::chrToInt($sig[63]) & 224) !== 0) { + throw new SodiumException('Invalid signature'); + } + $d = 0; + for ($i = 0; $i < 32; ++$i) { + $d |= self::chrToInt($publicKey[$i]); + } + if ($d === 0) { + throw new SodiumException('All zero public key'); + } + + /** @var int $size */ + $size = filesize($filePath); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + + /** @var resource $fp */ + $fp = fopen($filePath, 'rb'); + if (!is_resource($fp)) { + throw new SodiumException('Could not open input file for reading'); + } + + /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ + $orig = ParagonIE_Sodium_Compat::$fastMult; + + // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. + ParagonIE_Sodium_Compat::$fastMult = true; + + /** @var ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A */ + $A = ParagonIE_Sodium_Core_Ed25519::ge_frombytes_negate_vartime($publicKey); + + $hs = hash_init('sha512'); + hash_update($hs, self::substr($sig, 0, 32)); + hash_update($hs, self::substr($publicKey, 0, 32)); + /** @var resource $hs */ + $hs = self::updateHashWithFile($hs, $fp, $size); + /** @var string $hDigest */ + $hDigest = hash_final($hs, true); + + /** @var string $h */ + $h = ParagonIE_Sodium_Core_Ed25519::sc_reduce($hDigest) . self::substr($hDigest, 32); + + /** @var ParagonIE_Sodium_Core_Curve25519_Ge_P2 $R */ + $R = ParagonIE_Sodium_Core_Ed25519::ge_double_scalarmult_vartime( + $h, + $A, + self::substr($sig, 32) + ); + + /** @var string $rcheck */ + $rcheck = ParagonIE_Sodium_Core_Ed25519::ge_tobytes($R); + + // Close the file handle + fclose($fp); + + // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. + ParagonIE_Sodium_Compat::$fastMult = $orig; + return self::verify_32($rcheck, self::substr($sig, 0, 32)); + } + + /** + * @param resource $ifp + * @param resource $ofp + * @param int $mlen + * @param string $nonce + * @param string $boxKeypair + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function box_encrypt($ifp, $ofp, $mlen, $nonce, $boxKeypair) + { + if (PHP_INT_SIZE === 4) { + return self::secretbox_encrypt( + $ifp, + $ofp, + $mlen, + $nonce, + ParagonIE_Sodium_Crypto32::box_beforenm( + ParagonIE_Sodium_Crypto32::box_secretkey($boxKeypair), + ParagonIE_Sodium_Crypto32::box_publickey($boxKeypair) + ) + ); + } + return self::secretbox_encrypt( + $ifp, + $ofp, + $mlen, + $nonce, + ParagonIE_Sodium_Crypto::box_beforenm( + ParagonIE_Sodium_Crypto::box_secretkey($boxKeypair), + ParagonIE_Sodium_Crypto::box_publickey($boxKeypair) + ) + ); + } + + + /** + * @param resource $ifp + * @param resource $ofp + * @param int $mlen + * @param string $nonce + * @param string $boxKeypair + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function box_decrypt($ifp, $ofp, $mlen, $nonce, $boxKeypair) + { + if (PHP_INT_SIZE === 4) { + return self::secretbox_decrypt( + $ifp, + $ofp, + $mlen, + $nonce, + ParagonIE_Sodium_Crypto32::box_beforenm( + ParagonIE_Sodium_Crypto32::box_secretkey($boxKeypair), + ParagonIE_Sodium_Crypto32::box_publickey($boxKeypair) + ) + ); + } + return self::secretbox_decrypt( + $ifp, + $ofp, + $mlen, + $nonce, + ParagonIE_Sodium_Crypto::box_beforenm( + ParagonIE_Sodium_Crypto::box_secretkey($boxKeypair), + ParagonIE_Sodium_Crypto::box_publickey($boxKeypair) + ) + ); + } + + /** + * Encrypt a file + * + * @param resource $ifp + * @param resource $ofp + * @param int $mlen + * @param string $nonce + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function secretbox_encrypt($ifp, $ofp, $mlen, $nonce, $key) + { + if (PHP_INT_SIZE === 4) { + return self::secretbox_encrypt_core32($ifp, $ofp, $mlen, $nonce, $key); + } + + $plaintext = fread($ifp, 32); + if (!is_string($plaintext)) { + throw new SodiumException('Could not read input file'); + } + $first32 = self::ftell($ifp); + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $realNonce */ + $realNonce = ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8); + + /** @var string $block0 */ + $block0 = str_repeat("\x00", 32); + + /** @var int $mlen - Length of the plaintext message */ + $mlen0 = $mlen; + if ($mlen0 > 64 - ParagonIE_Sodium_Crypto::secretbox_xsalsa20poly1305_ZEROBYTES) { + $mlen0 = 64 - ParagonIE_Sodium_Crypto::secretbox_xsalsa20poly1305_ZEROBYTES; + } + $block0 .= ParagonIE_Sodium_Core_Util::substr($plaintext, 0, $mlen0); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core_Salsa20::salsa20_xor( + $block0, + $realNonce, + $subkey + ); + + $state = new ParagonIE_Sodium_Core_Poly1305_State( + ParagonIE_Sodium_Core_Util::substr( + $block0, + 0, + ParagonIE_Sodium_Crypto::onetimeauth_poly1305_KEYBYTES + ) + ); + + // Pre-write 16 blank bytes for the Poly1305 tag + $start = self::ftell($ofp); + fwrite($ofp, str_repeat("\x00", 16)); + + /** @var string $c */ + $cBlock = ParagonIE_Sodium_Core_Util::substr( + $block0, + ParagonIE_Sodium_Crypto::secretbox_xsalsa20poly1305_ZEROBYTES + ); + $state->update($cBlock); + fwrite($ofp, $cBlock); + $mlen -= 32; + + /** @var int $iter */ + $iter = 1; + + /** @var int $incr */ + $incr = self::BUFFER_SIZE >> 6; + + /* + * Set the cursor to the end of the first half-block. All future bytes will + * generated from salsa20_xor_ic, starting from 1 (second block). + */ + fseek($ifp, $first32, SEEK_SET); + + while ($mlen > 0) { + $blockSize = $mlen > self::BUFFER_SIZE + ? self::BUFFER_SIZE + : $mlen; + $plaintext = fread($ifp, $blockSize); + if (!is_string($plaintext)) { + throw new SodiumException('Could not read input file'); + } + $cBlock = ParagonIE_Sodium_Core_Salsa20::salsa20_xor_ic( + $plaintext, + $realNonce, + $iter, + $subkey + ); + fwrite($ofp, $cBlock, $blockSize); + $state->update($cBlock); + + $mlen -= $blockSize; + $iter += $incr; + } + try { + ParagonIE_Sodium_Compat::memzero($block0); + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $block0 = null; + $subkey = null; + } + $end = self::ftell($ofp); + + /* + * Write the Poly1305 authentication tag that provides integrity + * over the ciphertext (encrypt-then-MAC) + */ + fseek($ofp, $start, SEEK_SET); + fwrite($ofp, $state->finish(), ParagonIE_Sodium_Compat::CRYPTO_SECRETBOX_MACBYTES); + fseek($ofp, $end, SEEK_SET); + unset($state); + + return true; + } + + /** + * Decrypt a file + * + * @param resource $ifp + * @param resource $ofp + * @param int $mlen + * @param string $nonce + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function secretbox_decrypt($ifp, $ofp, $mlen, $nonce, $key) + { + if (PHP_INT_SIZE === 4) { + return self::secretbox_decrypt_core32($ifp, $ofp, $mlen, $nonce, $key); + } + $tag = fread($ifp, 16); + if (!is_string($tag)) { + throw new SodiumException('Could not read input file'); + } + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $realNonce */ + $realNonce = ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core_Salsa20::salsa20( + 64, + ParagonIE_Sodium_Core_Util::substr($nonce, 16, 8), + $subkey + ); + + /* Verify the Poly1305 MAC -before- attempting to decrypt! */ + $state = new ParagonIE_Sodium_Core_Poly1305_State(self::substr($block0, 0, 32)); + if (!self::onetimeauth_verify($state, $ifp, $tag, $mlen)) { + throw new SodiumException('Invalid MAC'); + } + + /* + * Set the cursor to the end of the first half-block. All future bytes will + * generated from salsa20_xor_ic, starting from 1 (second block). + */ + $first32 = fread($ifp, 32); + if (!is_string($first32)) { + throw new SodiumException('Could not read input file'); + } + $first32len = self::strlen($first32); + fwrite( + $ofp, + self::xorStrings( + self::substr($block0, 32, $first32len), + self::substr($first32, 0, $first32len) + ) + ); + $mlen -= 32; + + /** @var int $iter */ + $iter = 1; + + /** @var int $incr */ + $incr = self::BUFFER_SIZE >> 6; + + /* Decrypts ciphertext, writes to output file. */ + while ($mlen > 0) { + $blockSize = $mlen > self::BUFFER_SIZE + ? self::BUFFER_SIZE + : $mlen; + $ciphertext = fread($ifp, $blockSize); + if (!is_string($ciphertext)) { + throw new SodiumException('Could not read input file'); + } + $pBlock = ParagonIE_Sodium_Core_Salsa20::salsa20_xor_ic( + $ciphertext, + $realNonce, + $iter, + $subkey + ); + fwrite($ofp, $pBlock, $blockSize); + $mlen -= $blockSize; + $iter += $incr; + } + return true; + } + + /** + * @param ParagonIE_Sodium_Core_Poly1305_State $state + * @param resource $ifp + * @param string $tag + * @param int $mlen + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function onetimeauth_verify( + ParagonIE_Sodium_Core_Poly1305_State $state, + $ifp, + $tag = '', + $mlen = 0 + ) { + /** @var int $pos */ + $pos = self::ftell($ifp); + + /** @var int $iter */ + $iter = 1; + + /** @var int $incr */ + $incr = self::BUFFER_SIZE >> 6; + + while ($mlen > 0) { + $blockSize = $mlen > self::BUFFER_SIZE + ? self::BUFFER_SIZE + : $mlen; + $ciphertext = fread($ifp, $blockSize); + if (!is_string($ciphertext)) { + throw new SodiumException('Could not read input file'); + } + $state->update($ciphertext); + $mlen -= $blockSize; + $iter += $incr; + } + $res = ParagonIE_Sodium_Core_Util::verify_16($tag, $state->finish()); + + fseek($ifp, $pos, SEEK_SET); + return $res; + } + + /** + * Update a hash context with the contents of a file, without + * loading the entire file into memory. + * + * @param resource|object $hash + * @param resource $fp + * @param int $size + * @return resource|object Resource on PHP < 7.2, HashContext object on PHP >= 7.2 + * @throws SodiumException + * @throws TypeError + * @psalm-suppress PossiblyInvalidArgument + * PHP 7.2 changes from a resource to an object, + * which causes Psalm to complain about an error. + * @psalm-suppress TypeCoercion + * Ditto. + */ + public static function updateHashWithFile($hash, $fp, $size = 0) + { + /* Type checks: */ + if (PHP_VERSION_ID < 70200) { + if (!is_resource($hash)) { + throw new TypeError('Argument 1 must be a resource, ' . gettype($hash) . ' given.'); + } + } else { + if (!is_object($hash)) { + throw new TypeError('Argument 1 must be an object (PHP 7.2+), ' . gettype($hash) . ' given.'); + } + } + + if (!is_resource($fp)) { + throw new TypeError('Argument 2 must be a resource, ' . gettype($fp) . ' given.'); + } + if (!is_int($size)) { + throw new TypeError('Argument 3 must be an integer, ' . gettype($size) . ' given.'); + } + + /** @var int $originalPosition */ + $originalPosition = self::ftell($fp); + + // Move file pointer to beginning of file + fseek($fp, 0, SEEK_SET); + for ($i = 0; $i < $size; $i += self::BUFFER_SIZE) { + /** @var string|bool $message */ + $message = fread( + $fp, + ($size - $i) > self::BUFFER_SIZE + ? $size - $i + : self::BUFFER_SIZE + ); + if (!is_string($message)) { + throw new SodiumException('Unexpected error reading from file.'); + } + /** @var string $message */ + /** @psalm-suppress InvalidArgument */ + hash_update($hash, $message); + } + // Reset file pointer's position + fseek($fp, $originalPosition, SEEK_SET); + return $hash; + } + + /** + * Sign a file (rather than a string). Uses less memory than + * ParagonIE_Sodium_Compat::crypto_sign_detached(), but produces + * the same result. (32-bit) + * + * @param string $filePath Absolute path to a file on the filesystem + * @param string $secretKey Secret signing key + * + * @return string Ed25519 signature + * @throws SodiumException + * @throws TypeError + */ + private static function sign_core32($filePath, $secretKey) + { + /** @var int|bool $size */ + $size = filesize($filePath); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + /** @var int $size */ + + /** @var resource|bool $fp */ + $fp = fopen($filePath, 'rb'); + if (!is_resource($fp)) { + throw new SodiumException('Could not open input file for reading'); + } + /** @var resource $fp */ + + /** @var string $az */ + $az = hash('sha512', self::substr($secretKey, 0, 32), true); + + $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); + $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); + + $hs = hash_init('sha512'); + hash_update($hs, self::substr($az, 32, 32)); + /** @var resource $hs */ + $hs = self::updateHashWithFile($hs, $fp, $size); + + /** @var string $nonceHash */ + $nonceHash = hash_final($hs, true); + + /** @var string $pk */ + $pk = self::substr($secretKey, 32, 32); + + /** @var string $nonce */ + $nonce = ParagonIE_Sodium_Core32_Ed25519::sc_reduce($nonceHash) . self::substr($nonceHash, 32); + + /** @var string $sig */ + $sig = ParagonIE_Sodium_Core32_Ed25519::ge_p3_tobytes( + ParagonIE_Sodium_Core32_Ed25519::ge_scalarmult_base($nonce) + ); + + $hs = hash_init('sha512'); + hash_update($hs, self::substr($sig, 0, 32)); + hash_update($hs, self::substr($pk, 0, 32)); + /** @var resource $hs */ + $hs = self::updateHashWithFile($hs, $fp, $size); + + /** @var string $hramHash */ + $hramHash = hash_final($hs, true); + + /** @var string $hram */ + $hram = ParagonIE_Sodium_Core32_Ed25519::sc_reduce($hramHash); + + /** @var string $sigAfter */ + $sigAfter = ParagonIE_Sodium_Core32_Ed25519::sc_muladd($hram, $az, $nonce); + + /** @var string $sig */ + $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); + + try { + ParagonIE_Sodium_Compat::memzero($az); + } catch (SodiumException $ex) { + $az = null; + } + fclose($fp); + return $sig; + } + + /** + * + * Verify a file (rather than a string). Uses less memory than + * ParagonIE_Sodium_Compat::crypto_sign_verify_detached(), but + * produces the same result. (32-bit) + * + * @param string $sig Ed25519 signature + * @param string $filePath Absolute path to a file on the filesystem + * @param string $publicKey Signing public key + * + * @return bool + * @throws SodiumException + * @throws Exception + */ + public static function verify_core32($sig, $filePath, $publicKey) + { + /* Security checks */ + if (ParagonIE_Sodium_Core32_Ed25519::check_S_lt_L(self::substr($sig, 32, 32))) { + throw new SodiumException('S < L - Invalid signature'); + } + if (ParagonIE_Sodium_Core32_Ed25519::small_order($sig)) { + throw new SodiumException('Signature is on too small of an order'); + } + if ((self::chrToInt($sig[63]) & 224) !== 0) { + throw new SodiumException('Invalid signature'); + } + $d = 0; + for ($i = 0; $i < 32; ++$i) { + $d |= self::chrToInt($publicKey[$i]); + } + if ($d === 0) { + throw new SodiumException('All zero public key'); + } + + /** @var int|bool $size */ + $size = filesize($filePath); + if (!is_int($size)) { + throw new SodiumException('Could not obtain the file size'); + } + /** @var int $size */ + + /** @var resource|bool $fp */ + $fp = fopen($filePath, 'rb'); + if (!is_resource($fp)) { + throw new SodiumException('Could not open input file for reading'); + } + /** @var resource $fp */ + + /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ + $orig = ParagonIE_Sodium_Compat::$fastMult; + + // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. + ParagonIE_Sodium_Compat::$fastMult = true; + + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ + $A = ParagonIE_Sodium_Core32_Ed25519::ge_frombytes_negate_vartime($publicKey); + + $hs = hash_init('sha512'); + hash_update($hs, self::substr($sig, 0, 32)); + hash_update($hs, self::substr($publicKey, 0, 32)); + /** @var resource $hs */ + $hs = self::updateHashWithFile($hs, $fp, $size); + /** @var string $hDigest */ + $hDigest = hash_final($hs, true); + + /** @var string $h */ + $h = ParagonIE_Sodium_Core32_Ed25519::sc_reduce($hDigest) . self::substr($hDigest, 32); + + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ + $R = ParagonIE_Sodium_Core32_Ed25519::ge_double_scalarmult_vartime( + $h, + $A, + self::substr($sig, 32) + ); + + /** @var string $rcheck */ + $rcheck = ParagonIE_Sodium_Core32_Ed25519::ge_tobytes($R); + + // Close the file handle + fclose($fp); + + // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. + ParagonIE_Sodium_Compat::$fastMult = $orig; + return self::verify_32($rcheck, self::substr($sig, 0, 32)); + } + + /** + * Encrypt a file (32-bit) + * + * @param resource $ifp + * @param resource $ofp + * @param int $mlen + * @param string $nonce + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function secretbox_encrypt_core32($ifp, $ofp, $mlen, $nonce, $key) + { + $plaintext = fread($ifp, 32); + if (!is_string($plaintext)) { + throw new SodiumException('Could not read input file'); + } + $first32 = self::ftell($ifp); + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core32_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $realNonce */ + $realNonce = ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8); + + /** @var string $block0 */ + $block0 = str_repeat("\x00", 32); + + /** @var int $mlen - Length of the plaintext message */ + $mlen0 = $mlen; + if ($mlen0 > 64 - ParagonIE_Sodium_Crypto::secretbox_xsalsa20poly1305_ZEROBYTES) { + $mlen0 = 64 - ParagonIE_Sodium_Crypto::secretbox_xsalsa20poly1305_ZEROBYTES; + } + $block0 .= ParagonIE_Sodium_Core32_Util::substr($plaintext, 0, $mlen0); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core32_Salsa20::salsa20_xor( + $block0, + $realNonce, + $subkey + ); + + $state = new ParagonIE_Sodium_Core32_Poly1305_State( + ParagonIE_Sodium_Core32_Util::substr( + $block0, + 0, + ParagonIE_Sodium_Crypto::onetimeauth_poly1305_KEYBYTES + ) + ); + + // Pre-write 16 blank bytes for the Poly1305 tag + $start = self::ftell($ofp); + fwrite($ofp, str_repeat("\x00", 16)); + + /** @var string $c */ + $cBlock = ParagonIE_Sodium_Core32_Util::substr( + $block0, + ParagonIE_Sodium_Crypto::secretbox_xsalsa20poly1305_ZEROBYTES + ); + $state->update($cBlock); + fwrite($ofp, $cBlock); + $mlen -= 32; + + /** @var int $iter */ + $iter = 1; + + /** @var int $incr */ + $incr = self::BUFFER_SIZE >> 6; + + /* + * Set the cursor to the end of the first half-block. All future bytes will + * generated from salsa20_xor_ic, starting from 1 (second block). + */ + fseek($ifp, $first32, SEEK_SET); + + while ($mlen > 0) { + $blockSize = $mlen > self::BUFFER_SIZE + ? self::BUFFER_SIZE + : $mlen; + $plaintext = fread($ifp, $blockSize); + if (!is_string($plaintext)) { + throw new SodiumException('Could not read input file'); + } + $cBlock = ParagonIE_Sodium_Core32_Salsa20::salsa20_xor_ic( + $plaintext, + $realNonce, + $iter, + $subkey + ); + fwrite($ofp, $cBlock, $blockSize); + $state->update($cBlock); + + $mlen -= $blockSize; + $iter += $incr; + } + try { + ParagonIE_Sodium_Compat::memzero($block0); + ParagonIE_Sodium_Compat::memzero($subkey); + } catch (SodiumException $ex) { + $block0 = null; + $subkey = null; + } + $end = self::ftell($ofp); + + /* + * Write the Poly1305 authentication tag that provides integrity + * over the ciphertext (encrypt-then-MAC) + */ + fseek($ofp, $start, SEEK_SET); + fwrite($ofp, $state->finish(), ParagonIE_Sodium_Compat::CRYPTO_SECRETBOX_MACBYTES); + fseek($ofp, $end, SEEK_SET); + unset($state); + + return true; + } + + /** + * Decrypt a file (32-bit) + * + * @param resource $ifp + * @param resource $ofp + * @param int $mlen + * @param string $nonce + * @param string $key + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function secretbox_decrypt_core32($ifp, $ofp, $mlen, $nonce, $key) + { + $tag = fread($ifp, 16); + if (!is_string($tag)) { + throw new SodiumException('Could not read input file'); + } + + /** @var string $subkey */ + $subkey = ParagonIE_Sodium_Core32_HSalsa20::hsalsa20($nonce, $key); + + /** @var string $realNonce */ + $realNonce = ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8); + + /** @var string $block0 */ + $block0 = ParagonIE_Sodium_Core32_Salsa20::salsa20( + 64, + ParagonIE_Sodium_Core32_Util::substr($nonce, 16, 8), + $subkey + ); + + /* Verify the Poly1305 MAC -before- attempting to decrypt! */ + $state = new ParagonIE_Sodium_Core32_Poly1305_State(self::substr($block0, 0, 32)); + if (!self::onetimeauth_verify_core32($state, $ifp, $tag, $mlen)) { + throw new SodiumException('Invalid MAC'); + } + + /* + * Set the cursor to the end of the first half-block. All future bytes will + * generated from salsa20_xor_ic, starting from 1 (second block). + */ + $first32 = fread($ifp, 32); + if (!is_string($first32)) { + throw new SodiumException('Could not read input file'); + } + $first32len = self::strlen($first32); + fwrite( + $ofp, + self::xorStrings( + self::substr($block0, 32, $first32len), + self::substr($first32, 0, $first32len) + ) + ); + $mlen -= 32; + + /** @var int $iter */ + $iter = 1; + + /** @var int $incr */ + $incr = self::BUFFER_SIZE >> 6; + + /* Decrypts ciphertext, writes to output file. */ + while ($mlen > 0) { + $blockSize = $mlen > self::BUFFER_SIZE + ? self::BUFFER_SIZE + : $mlen; + $ciphertext = fread($ifp, $blockSize); + if (!is_string($ciphertext)) { + throw new SodiumException('Could not read input file'); + } + $pBlock = ParagonIE_Sodium_Core32_Salsa20::salsa20_xor_ic( + $ciphertext, + $realNonce, + $iter, + $subkey + ); + fwrite($ofp, $pBlock, $blockSize); + $mlen -= $blockSize; + $iter += $incr; + } + return true; + } + + /** + * One-time message authentication for 32-bit systems + * + * @param ParagonIE_Sodium_Core32_Poly1305_State $state + * @param resource $ifp + * @param string $tag + * @param int $mlen + * @return bool + * @throws SodiumException + * @throws TypeError + */ + protected static function onetimeauth_verify_core32( + ParagonIE_Sodium_Core32_Poly1305_State $state, + $ifp, + $tag = '', + $mlen = 0 + ) { + /** @var int $pos */ + $pos = self::ftell($ifp); + + /** @var int $iter */ + $iter = 1; + + /** @var int $incr */ + $incr = self::BUFFER_SIZE >> 6; + + while ($mlen > 0) { + $blockSize = $mlen > self::BUFFER_SIZE + ? self::BUFFER_SIZE + : $mlen; + $ciphertext = fread($ifp, $blockSize); + if (!is_string($ciphertext)) { + throw new SodiumException('Could not read input file'); + } + $state->update($ciphertext); + $mlen -= $blockSize; + $iter += $incr; + } + $res = ParagonIE_Sodium_Core32_Util::verify_16($tag, $state->finish()); + + fseek($ifp, $pos, SEEK_SET); + return $res; + } + + /** + * @param resource $resource + * @return int + * @throws SodiumException + */ + private static function ftell($resource) + { + $return = ftell($resource); + if (!is_int($return)) { + throw new SodiumException('ftell() returned false'); + } + return (int) $return; + } +} diff --git a/vendor/paragonie/sodium_compat/src/PHP52/SplFixedArray.php b/vendor/paragonie/sodium_compat/src/PHP52/SplFixedArray.php new file mode 100644 index 000000000..c333ad4fa --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/PHP52/SplFixedArray.php @@ -0,0 +1,189 @@ + */ + private $internalArray = array(); + + /** @var int $size */ + private $size = 0; + + /** + * SplFixedArray constructor. + * @param int $size + */ + public function __construct($size = 0) + { + $this->size = $size; + $this->internalArray = array(); + } + + /** + * @return int + */ + public function count() + { + return count($this->internalArray); + } + + /** + * @return array + */ + public function toArray() + { + ksort($this->internalArray); + return (array) $this->internalArray; + } + + /** + * @param array $array + * @param bool $save_indexes + * @return SplFixedArray + * @psalm-suppress MixedAssignment + */ + public static function fromArray(array $array, $save_indexes = true) + { + $self = new SplFixedArray(count($array)); + if($save_indexes) { + foreach($array as $key => $value) { + $self[(int) $key] = $value; + } + } else { + $i = 0; + foreach (array_values($array) as $value) { + $self[$i] = $value; + $i++; + } + } + return $self; + } + + /** + * @return int + */ + public function getSize() + { + return $this->size; + } + + /** + * @param int $size + * @return bool + */ + public function setSize($size) + { + $this->size = $size; + return true; + } + + /** + * @param string|int $index + * @return bool + */ + public function offsetExists($index) + { + return array_key_exists((int) $index, $this->internalArray); + } + + /** + * @param string|int $index + * @return mixed + */ + public function offsetGet($index) + { + /** @psalm-suppress MixedReturnStatement */ + return $this->internalArray[(int) $index]; + } + + /** + * @param string|int $index + * @param mixed $newval + * @psalm-suppress MixedAssignment + */ + public function offsetSet($index, $newval) + { + $this->internalArray[(int) $index] = $newval; + } + + /** + * @param string|int $index + */ + public function offsetUnset($index) + { + unset($this->internalArray[(int) $index]); + } + + /** + * Rewind iterator back to the start + * @link https://php.net/manual/en/splfixedarray.rewind.php + * @return void + * @since 5.3.0 + */ + public function rewind() + { + reset($this->internalArray); + } + + /** + * Return current array entry + * @link https://php.net/manual/en/splfixedarray.current.php + * @return mixed The current element value. + * @since 5.3.0 + */ + public function current() + { + /** @psalm-suppress MixedReturnStatement */ + return current($this->internalArray); + } + + /** + * Return current array index + * @return int The current array index. + */ + public function key() + { + return key($this->internalArray); + } + + /** + * @return void + */ + public function next() + { + next($this->internalArray); + } + + /** + * Check whether the array contains more elements + * @link https://php.net/manual/en/splfixedarray.valid.php + * @return bool true if the array contains any more elements, false otherwise. + */ + public function valid() + { + if (empty($this->internalArray)) { + return false; + } + $result = next($this->internalArray) !== false; + prev($this->internalArray); + return $result; + } + + /** + * Do nothing. + */ + public function __wakeup() + { + // NOP + } +} \ No newline at end of file diff --git a/vendor/paragonie/sodium_compat/src/SodiumException.php b/vendor/paragonie/sodium_compat/src/SodiumException.php new file mode 100644 index 000000000..a3176d7dd --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/SodiumException.php @@ -0,0 +1,11 @@ +Client ID and Secret from there. + +```php +require __DIR__ . '/vendor/autoload.php'; +use PayPalCheckoutSdk\Core\PayPalHttpClient; +use PayPalCheckoutSdk\Core\SandboxEnvironment; +// Creating an environment +$clientId = "<>"; +$clientSecret = "<>"; + +$environment = new SandboxEnvironment($clientId, $clientSecret); +$client = new PayPalHttpClient($environment); +``` + +## Examples +### Creating an Order +#### Code: +```php +// Construct a request object and set desired parameters +// Here, OrdersCreateRequest() creates a POST request to /v2/checkout/orders +use PayPalCheckoutSdk\Orders\OrdersCreateRequest; +$request = new OrdersCreateRequest(); +$request->prefer('return=representation'); +$request->body = [ + "intent" => "CAPTURE", + "purchase_units" => [[ + "reference_id" => "test_ref_id1", + "amount" => [ + "value" => "100.00", + "currency_code" => "USD" + ] + ]], + "application_context" => [ + "cancel_url" => "https://example.com/cancel", + "return_url" => "https://example.com/return" + ] + ]; + +try { + // Call API with your client and get a response for your call + $response = $client->execute($request); + + // If call returns body in response, you can get the deserialized version from the result attribute of the response + print_r($response); +}catch (HttpException $ex) { + echo $ex->statusCode; + print_r($ex->getMessage()); +} +``` +#### Example Output: +``` +Status Code: 201 +Id: 8GB67279RC051624C +Intent: CAPTURE +Gross_amount: + Currency_code: USD + Value: 100.00 +Purchase_units: + 1: + Amount: + Currency_code: USD + Value: 100.00 +Create_time: 2018-08-06T23:34:31Z +Links: + 1: + Href: https://api.sandbox.paypal.com/v2/checkout/orders/8GB67279RC051624C + Rel: self + Method: GET + 2: + Href: https://www.sandbox.paypal.com/checkoutnow?token=8GB67279RC051624C + Rel: approve + Method: GET + 3: + Href: https://api.sandbox.paypal.com/v2/checkout/orders/8GB67279RC051624C/capture + Rel: capture + Method: POST +Status: CREATED +``` + +## Capturing an Order +Before capture, Order should be approved by the buyer using the approval URL returned in the create order response. +### Code to Execute: +```php +use PayPalCheckoutSdk\Orders\OrdersCaptureRequest; +// Here, OrdersCaptureRequest() creates a POST request to /v2/checkout/orders +// $response->result->id gives the orderId of the order created above +$request = new OrdersCaptureRequest("APPROVED-ORDER-ID"); +$request->prefer('return=representation'); +try { + // Call API with your client and get a response for your call + $response = $client->execute($request); + + // If call returns body in response, you can get the deserialized version from the result attribute of the response + print_r($response); +}catch (HttpException $ex) { + echo $ex->statusCode; + print_r($ex->getMessage()); +} +``` + +#### Example Output: +``` +Status Code: 201 +Id: 8GB67279RC051624C +Create_time: 2018-08-06T23:39:11Z +Update_time: 2018-08-06T23:39:11Z +Payer: + Name: + Given_name: test + Surname: buyer + Email_address: test-buyer@paypal.com + Payer_id: KWADC7LXRRWCE + Phone: + Phone_number: + National_number: 408-411-2134 + Address: + Country_code: US +Links: + 1: + Href: https://api.sandbox.paypal.com/v2/checkout/orders/3L848818A2897925Y + Rel: self + Method: GET +Status: COMPLETED +``` + +## Running tests + +To run integration tests using your client id and secret, clone this repository and run the following command: +```sh +$ composer install +$ CLIENT_ID=YOUR_SANDBOX_CLIENT_ID CLIENT_SECRET=OUR_SANDBOX_CLIENT_SECRET composer integration +``` + +## Samples + +You can start off by trying out [creating and capturing an order](/samples/CaptureIntentExamples/RunAll.php) + +To try out different samples for both create and authorize intent check [this link](/samples) + +Note: Update the `PayPalClient.php` with your sandbox client credentials or pass your client credentials as environment variable whie executing the samples. + + +## License +Code released under [SDK LICENSE](LICENSE) diff --git a/vendor/paypal/paypal-checkout-sdk/composer.json b/vendor/paypal/paypal-checkout-sdk/composer.json new file mode 100644 index 000000000..0676fb4c9 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/composer.json @@ -0,0 +1,35 @@ +{ + "name": "paypal/paypal-checkout-sdk", + "description": "PayPal's PHP SDK for Checkout REST APIs", + "keywords": ["paypal", "payments", "rest", "sdk", "orders", "checkout"], + "type": "library", + "license": "https://github.com/paypal/Checkout-PHP-SDK/blob/master/LICENSE", + "homepage": "http://github.com/paypal/Checkout-PHP-SDK/", + "require": { + "paypal/paypalhttp": "1.0.0" + }, + "authors": [ + { + "name": "PayPal", + "homepage": "https://github.com/paypal/Checkout-PHP-SDK/contributors" + } + ], + "require-dev": { + "phpunit/phpunit": "^5.7" + }, + "autoload": { + "psr-4": { + "PayPalCheckoutSdk\\": "lib/PayPalCheckoutSdk", + "Sample\\":"samples/" + } + }, + "autoload-dev": { + "psr-4": { + "Test\\":"tests/" + } + }, + "scripts": { + "unit": "phpunit --testsuite unit", + "integration": "phpunit --testsuite integration" + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/composer.phar b/vendor/paypal/paypal-checkout-sdk/composer.phar new file mode 100644 index 0000000000000000000000000000000000000000..801b9a95b72d6002754f0db7db19a54da42f0af7 GIT binary patch literal 1874955 zcmdqK34EMabv7QtmIx9cA?zh%NA`?tOR}8}WLu6R%eIIYA<0gN<%qE~vL+eLC^I83 zi9>1Fn||agOB>SAu&)hUfNnscl&vH{3w)tK17Rz)gf&20w(oh)J?FmnU1lUZq5tpq zPpOaQeeXT@oO91T_uO;Oz3(~8dKVh?-UH=oZ>f4HH$OYyv2ip1?OoN8Ta_E1EjMyA z&oyUDxtWDZB{x-@KUyyz zoNeZc)#+TNJXNYTKv#99hDMv^T6IlszEUdU*`adjFsrkwm21uxn`EL=n<_R-(>eU& z>jSlBvo=Srn#L;G>h0+0?ad7ws+Fg610#dEsp3MTTs@epqiGbMDK?9hT&Z5K)ghKr zJvZBI&Nupcdk>bIvkM1$rfPG&_?2n1JFHLsX<)R zg?w>-D&Lh`xe`p3Cl8jI@}#F!EgqVXR7#rU*G&%~zmlo?)NUu*sxp7m@HJO_$9u>i&e?xg5o-I{#^@S>{ zpwpcc`3F>My3v#G8QDHEIkbC+ww~4Cp808XGMihIg9?F(9Aq0vl27?0$yKgd%dLg@ zb4P0nb&iG}bVaJk>pHIM=opzT*8BSAiu3%VkT*hm=J7KR+R!28YN?PP+`V&T_t?5?FMQhhs8BCmy-==~a(QBaF2yj)2(>5q z4ILemliLS&j878#@Q$I;Lf3}e=Kj+48KoW zjsI`dr+NoXK?fF^HL75*{jsf7E!B(7S{-%fHFBqw*hl#L_iX;q`+=SRwMH{o zDK;8Ai}NuwH=Njj$A%Z(kb_fV>f8D@QLy&KYpguKQK2!=&Og+}2AbjJs5C5T|=xl}JV%VRc{y#s$ z)hB$*DIfS_tKZYE{+7~wsXAS%P8|&}{rCwE6X9hCxBkd5t!ss8aJDpc)kvk-qW@s0;9%+2PnB{MU#4RiEK$sdht0 zN>f4os~+y^6Mo?3AKqv6TlUPhO6@?g5@7hXVj%qd_#Z#mFtns#du=Y1#6O(wC?NdA z!?!P9f4Eu>JM@*8xcY?8KYGfo)_%T~B!{aF%*i1OkJqtFxbG>a-fSpZcIXc0QiMve zLD?XD_^WQ*vnY<;3r$Wv(}5`8t({5ufd}pQyy56-#R}AWwtS%63<Fm=qpcP0^9)CZ0#zHeN~w2XejbY&S@E#`m(O*~5I*A9E4Enuj5){E-`nCnc1~JsB;5AS@_)x0I&JTxc|i=$VglhzK{| z^cS6mDCMbSB9c|iNDUkwC9;#zjZ{p+pZ)8h-#28v$*#&kCjMu6YILC@o%Oy4J5+>E zyyxw2FjW0ZK(!l-Jdt>>&NKc2i5yflAbjt{&sG^`cmZ+WHiJlysCQ?vewA1`ZK5>o z-?5QjXd{F_{LI&XVU1vdJdsBBV0k4oW}=y2YcqsTJolUzS~C|NS2LdS*l_tgaIiB8 z|K%Gizh$^L9T)B~(K+7&W%JiqlMpfC%GZ@T4Dm(Bh1iQEhI?2ALb&ypfBz}NeSAba zdl^GKtNKXz^RX}PH^dmni*~3RATiV6lZ@=N-EUK48cWJQ+ zKWnyFuCf!$s+NSaKfHO35qDhJw$+RCv&43f(nk1_`hABC+futzXxmkrmI>jZs$YaR zZkxW)kgZw*qs|DCq&0m``h@TK=5uZ_EEg;p%f$-^hmK5@<{85z##gDx2roP1;01

u59s7$m+*Wb%+SJ#?eNzG#68;4&{%q zr~9cl7^;--8Bx%?wbp2qE71dzbp0b7NrYehgWr>%;Z#C<-mF%H@Egy2^ji#5Tiy`Rj)-JmeOon|@a|8Y{cnb)U5Ae*k^H%mLU_Tc z=lbAGJ0xR=s&PuTVXaB6A>4V+mA|(XO2(6vd{fyWyz^z3Z8jwB#49G1HY_%xHmSEs zc==~O>0PI%19PiR-#gV9EY5S2C}J&UhQ6TW5kC9P_x;?+YbPimjj*xHUW-UQ1w~jm z_3QnHq}{-{?3y@^H|vZ`cxmT`dkjZALM~5^(C=!G5q|#ZFaE6|S(y~k(4kVbxux8g zr$d5Os{AG^uTdcrzWY^I`lx|GWmUSpDL;Mop^2GI5P99B3dwb|7Ks z->Mx(IQy3m^3&p?NL{Rq(clHn)iKpNq(})5U;eZ)qckOaU#oXlZLCr8KgsTlA|d?r zy*poRNa*Ru^mD7&9$CYWVyQ&UA)J24$=;AXDOqQDcQ5x(hIg~2KYFyQMOe7L;#=8@3MC8#45?SrttxOSq z|JIAPnTS$OuCHssp~PtZrkWeVE1vgq-_NUoI5uV?L_5j{>d7u!p>~h(k$-!m_bO6; zTZCq3sfmd}+yVcPy?={p9^uE&_?X|PO4)K>3#Onp?|%`;YSnqd5C7%P>r6cP)?Arq zLc2^9C5?a(Zg^MjNrs{g86gVkrN2@alyLgMml}qnjq1@!$`}&=`ADZVgscAJl~)<2 zcGLh*T4Ut3`ZNy8>uWDELUS#ZczOteAGW*_B6xNMqzYIG=}E)6b<33 zwHJ*Tn)6!skZui>rd7@jx6E=2qdsMh@cQ@e*=zWon#9L2x5T=+Y+y(KK-Y_e2fCm0 z5UY7k>zZL``XR~);UC}i%#T|26)mg7qLk+su=(xW-2y$jFq5tr0Z_LS@H zL~;(DP;DdZx$LK3ZAppBuU7)P`h${qsMXL@ROiwh6?R_|sEc?-r#n!JiKieNd+&!o459-n$N+t@vX%DpC%pm8ZF(P59*e z+5c+tNm*PYg#CtGxVq#&@eg8o+9?hT;qFJS_f({8e~6`0LMn=zU5VpYDiXrq?ELim zjgpo|dJz5arD_TXFJw$L6soI#Whg zPAG#g8h-aHZuT22sfAtG9}$Y)y)L0MdP2corrZ;reBHBso?A;@*};5M)fM+Q(VUHW zoRcJB^*OivnQ`1&hz`wg^$@r6m15YOD3U#-QxoBl18087P_`VLN*Sl&h_L@s{s@;n z=f&3=mXzb`h2{uz7-EX@9`qi0Bz)6#|NR+5)pCp~L8G-=Q?W;MJ?8Na8DaPJulIDF z-%>>!UFKU<56Wnb5Z-oyLr6Gr@^}2qky?R9j80wU4A>i&xvGS{n~wMpPp%a$ih>>g zDJ)Yd6vC;G-sq>8)SAnhRTz`(Yt%U;{N*RE@DpiEBot}VJ39MRM+xDnlh6H6>z9er4 zlrG^NfB!Y_`?j2O6R1Xtb;a~X<&N;a_df3H#$8LVEP-jPR6*9H^N26eiGlDv8z1#a z!SF0~sH~3XpDH%OU+(^f z4>G1lK!DAyF@9gG5`O&ZvsN1+Y2DGPu5}+Y_=egl!rMRoiAxu&@78TmxZvm7KH)v< zHeF-&^Y|TG<-3Z#w(f%?YUxDxDGI`_{HiY*iWO~91ito@!7Mw2@P?Bwd8;8v+gm3C z1asho%pqSInR;Flq3_Z6qv@v_mNl)&sLPVXLcJc(vsI#mCq2E}8{5?S^O@Z7$5N|z ztXVHJuNTQudZxo(QPrNR`cIhex&6CFS8AT)qP0P1Da+Tz0`~z5!1ixAR;Wj=}|8>Oet|k)g-_f{Unw{>cJ8||Eo{fVOZMHV~dYC zrqAthoDu%&w#xr9Oew1sRnt=dNOFjtk*E#o5EH)PonvPks?;8IR87<57V2E1Mvr55 z^##xbDk$N*Z=HOKp-q{vsD7_3cV+J}dPovGRUHUF^wE1>V7OB16;<;Ax@nntqZh>Y zdZmr9_vg>?wkPGAMb#pFt%wYf?(KM`pOK!1Mq*YW3u*K$Cd3yhp@dI({nO`-ad-`F zaEg-_VT}1{RmDj7^_Tz0O@=Ww8$|VcbqbB1P=;4xzGVLrzVW`F_!woo5y73$IF>(o zgu_C3=~qrZ!^la^DN!}q`IN!M^nhxqGFqaKOPYpNPY9<@x!`ugmNI8aY>H_ZC(MZF zAJh#c>>FS8DZ|rloHEoX2@5fb?$wnd;pR_1%WqM%)7&_wMswZTh{JcN+eG-P|MQjq zHp-3*-?|9jO2tR`lRXDcF?=bXF9gqIgE( znQ`MwHSJ}}BVq03f9T_#ZATF_E$R;H>)Vto!meAN=L7U@_0^vjvKf?^PSNZE!t+)> z=a2Q9rH*50V!ZCt zMLFR^j=bSlhN_)P5tU}ycsy@X$rFC>zz?Pk&-yl85)VR>8C3ndnpDD%zVvT>id5I) z*do?GfUQT)6@-8I*3bRBk+c|VAZh!;fe6oQ;r|g2;jf?d%Z}r~v!fW`x$_){hwy8= zzVEl`Qn7)k_j@U#?FTa?^evSTVfoK~<=1MdfMN<+#MoXH5aIAgwt7?7ZUB>@5v(XA zamV+5UJW|ozx;IjLrp}B^%t{cJd&4a-WcJXU;D&gEENezijaIqM;l@3u6O!lB8%yv zM-npvVNU!fF5CB#C6W}$oYw8MWv<@|rylmjOAJYBgCeTddnv{|-P{Z}@=-bo5PoRe z<5wBFcJ{>3MJ>eGe2LmR!awe9_QIfU(;8(KP;QOBM)(1L-?W_AL2vmIpB+V z&j@Yk(X8G}N=K#ct5s-(kNCkq?rPn3R96EgQa{Y;xbuB~?9b(-+TPPFS9o-Kc6+IU z5Ij}t)2ai6{ns4%6Kgva#*n(+e6Z?@vmDEW)lCOKZ&gzwm#Vf7+*#&b1g!sV6&c}e zANOL{EWlRH7X{A;I-2c<}yw@thNX1n|$aQlE>wQ)Y5#dL^ zH1X|4>tU{7y;nWbwMY2)i+60bdZ`2`X>YrnH+u_WqGXKlUDti#nN}xT9dHsh(xh1( zfrJ~jp5piLJ2TnaRYNfC$Wg4Q5LJ>~@(<}!gYfdz@0zow;Z9_T$7T*PdOhYn5>2?~ zmIFr?si}@5YyL`gfUt4fj8E=dk=_()<&C3H zvL-J;9ZYT0wYqP$w*dv}#$iX^Wz*;-MtM@QU9^T!ahgWs2><5M?|hVD1W!xFXl)3- zTW@p}5Mp3;%hNiatg zGT|%#*BcKReH^gLaS~tR6zlcyO~l#&eq-bwA3f*DX@Nn#9P@UlEk9oFun>Of^!pxf zbkJj71Ph0QVkD+7sd^K3KIf58t#NEAHRR+ylr0doJ=K#&pHtchU-i=S-(`3ij%^_?!vMU|pOn~3 zRbqtS`_a>GHCzmz9uKaV=ld&ECgX(fe&)m9XGq&9YDAT!phZ7PRHw+)wBa72`*<2-# z?$;W;A?(<;?(Ym;8xe})F`Uoj=;UJJU22gDAHM9Q*v?@K@?!Y>;^1RC(-Qvkk*`b` zVS$-U8jUz2vymR-8R~Wu-t)Ni-#cE6NO=32ANakQO|ARFM}o{S z?W*CR{Q{O_MlTid3o1pzPyQn35ns3z#2!;@tiaWgu|oLTfs5Z}+%Jh%P2w1+A6%Hj z>dUu4THmCI3IER>AH3WUZ@}+XJ#M^WheS3WcFXC;mT1rX^j+HxZ5uuJ^?P^J4wk3< zPg40ZrIPT@-4otMp1%|-vHjUB&oMnPN?!RBMM(HB_pZ6X=xZ}@{Dlg=85b<9S35yC zddIV74PTr7X^Ah^@qeVcMEH{*|M!~Ejb;%tvJ zM)LEOWWry3@XXizz#HMd7yg}JdbhDE&J)IT20zvF5V^-kbdn_8 z_0}(az{JatRSWg^7;O%YupL(V2tT&{M?HqEXK`%hVx@L4!t~!dPY~voKg}=guwGk) zt_&upbj?Qi@?XE*M@tHeB8vzLm$|ppetE93wm3l!M@&P$jfOe%6Q2EtuX%zYLy&h7 z?i?~bYyTb|NEF>>s^#6tjoE|jZpm) zLb2qJ@S=Br^A8La_f*NM}B(IlhCI?^ryy!R=0F2%i6be8rJkv4~b4&_DoU!U*w=W^Rj zn2Kx6tz^D#Cl8_Cp^aU0h2A#bBu-i|Oa8 z<3f1H4_19;>B=BzA}O7&(J8{`ExaR^xZhr@1kqRtsnOPZ{|GUVH^SmIXFtV=TC+6q z_?hJF4u^+um6q*>hd)HHiMR-F`PR&PjJ7tGF2EHd>$R%f zgln2t_)Xt7dK92?jw8kO7}agUzxsaR9q`zYbp1OMD(cnCw#*ny};+jwdpJ8QtDY(+}b2p zcoEm6&Ps$gyr$pBh})2*xO9mZp?a52mxTMTdQQzaY_mSjLKW-(ud7-TzUYM?_xq}C z`b}~2sBA>rXH|~~-*M9oei_onMNvEvj+<2MglEss_%&x67bS)x#@OSPAi|Tr|FD%N ztTvWFkwGI7`HjfBO)UZ8XBrpWW|-P|DK?!UyQqfnq5Y&j99Dx%xc;o>!wg%SPPFP& z)Xdz=f7699;c2)1#D~S(bfU*;e~`9MYX=bi^VRPgHQI6zVT%cBY*uHthe!U6sX(ZcE2|&#=RMnaaf-@0C7!0Q zB2G_xOL*lwj(NGX@w~>7G|N*Q(RG0C3B~+bWs$J)=T9%2sM@fo=rr6Dp?aI@CgJ;f zzEL++8N*H@{c50KaU*NjR0~D8>7?1O8jcK;>u|_gjEp=?#~9)1H|77qYIdddC8(L$ z19&Yqx+z@3=Ev?FHzX@sAxZ9Pp1Iv2AiVz29nUZX87pi@g%2dS?TE|}(4VMK2+J?| zj`wIXhG`0^+cOd}eNz(2seNIyRqbrggr^oh%HOpz#o&} zdmiUHnsED1{>g8&WUMlh=wQuv&+NorWIZm$=RnD*e1!k;mYNUeW`uo`DEHtzE-#Uv z-nvkgySHMr-mKk2_y<3Jh7bE>gymWy#svYhwRmJQRH5q6|J^4Lv>b7ss9=w88SECB zCVb>)ug+OV54Rd|k-{jJ_`pfMX5U|UhHHfIpRVlnS*1fuZzP2`X5GW>+<*A%i}xBA zJD1)-stZ#sl9Po~94Ca|yYj(Lw1zG@frea{W;U}+X9dDf)Vlq~JeJhS$=7MjB7SdQ zy55YxD6H4(Mf6upx@FX+ju3X{e*0&}bjHBQ#LDE6OvCyC9TWmQXeE4sk zY~*Du+7j3=#NxXgpWJ?8}D*ujzLk2sDAGjcP)5;?i@u&__%kS z?U&1~6(c~mYhex-Y()>KX~z^H;qdq;?lkddcy!9Dw+X!iQw-&9LHOFF zKh(IzkY>!tX{1iywie5kg?fA=>MzvCAw2xlC-}8Nh98zf>#2?@a!BY?wq4V0gbrkx z4e1?^r`O+M4BLx*u{j(ai%X$P?Iq!nv)}AD;x1YOa#`!4r7i5TV`um^o*#a3WHD$;|afwa@gje44?y9w#;W}$gyL7mBaG`;ZaA9V{v|tZO z%s%aH!rLD5ZGR*;)9;Wjvf5%oMtM(c8tW0oO8BVz9_+(qtw(8u6}!W;EztfzrB3*( zJ70aZ@juW~>K-iy7w>7=g0F4xeD={a&G)Ks39AqN*>*#o5h_j!7szl+NprSg%~7&B zRer)NK62Go!`IsUS#3FvIev6LL$H^tU+mmhIfg?R*Q2P#MZUD2%D!o$zNd8+HVOZkWkc*DuskMuYTX%Mq#Ea8|PfE9>Fy* zBU5sUI)S)b`Eu+!YJBF)O87i;`ByyFiJ>heI z_TDRud&Gs33m_dvi@3`9mK9|tvlJkrdk6V1nb@wqOnCdNzxc0)B7=zp z3Ke9hGC{ccMU6f~usSV;1cF#v@UXgXgg0(k=6#HewUb9P$MpunlD!#y`tAqc>(>Su zvD-9`or+9Ue^6B)@QL5~Paki;s0~k^m?*Dyp~~;!6niVR!|+yd9F(}%4>;U}AAHQF zx0t+65ck47PN*2}*D7wp)4zPG_klC^FVX^tb;qY4?WiRD>BdjL&Zx|o`{!LEL=+Q< z{))M%GZ3D5R)G6|-tQL>874K2vRyXYTNE+j=RUmJo74=Gl17Y>b|UTU6^f29cl$Sg zY^-N^6KQlKP8jrb6HfFIRdB+$+;NS+(`iZUE81~nv~ioz`|ebzvvmLx{{9b7_leCJ zGfJA?tTefsQ~-ppd-9jsj%eTayq}oHd8>CkZ&tbp$6t24&&M6DGm$a z+g@4r+dx^?(qtp7U5YNQ9d39;FVT6B@RScP_qJj=^d}Lq_vAQ)l*{W!9T|il`RW(_ z=6%rzM#kcg!_=w=B5tf0c03F*dYUX-5-2 z@s;!56oo^35!}3ZZNy(V)r&A0Z7|_&U%Tn&CZ{mowFtr;I2|HsY7f&jF5!ybp1aF% zg?4fgTqF$hcZ}z!D$j&3dC#Lg&*8#o5wt!;PyOmgKagd@-(G#I_tFYc|6GaHYPrg5 z4iD50O9$(LA?xFu_A%k#{M*CcYODrUpf!$Z>>%~>A5!yU<&JRX$!822rd>;+hML3v z9Fx;bl7iwcXT(JV@GhA9;eNBF*Q#Sj_`<_?RIH`(``OZ9t-?#k5Ppfb*L9kcGvPUJ zeXL*8J>!127jpGxZH4g9_I~LJ#?{yZ)=JFMh8qvR%{|k{|L$*h4OJI-OfcxK{W{SQ z?tST=jmFrv`^i{v3h|qdbUj3P&)N--vnEFFZxeE}bDW(QJl3^E`10{vzWhM7Ws%=d zbT_N!Xixd=b9&V;?y3K(*zDbX(|+dcfL} zMN_=3-&YGq_{PIGzsTCU?0)J7<4W?~YMk%DmzDibTBxG7N%)9UulASXJnI2#b4+fZ zi#0m0@dv^)>SzClF*@;pHR_v-S(5O^hnK%^wT~;`UrQpb#VpB6otFvEyXmcdoppar zq@PvenzIIO9_LrWh04G94a==3AkZP4*};93;z3;C7#c!;={b*lT2d#algva9%8-K37ou%n=kpscM zC!-6>DB-5re|xw!eCY$yupFJ@(@9tPZnb5E z6MuDDhc$QqIJEdxW+p~WIV7CF_bWc)cp_#j;xH=;@d9m$@RSuV_)}x<3j98Cz1dU6 z-XT6W%P>J;W;`iWoabuGgbUs0th1J}K)pXL*UOYFzpfl>?MiKp@Y_%7_d(!i-mlj5 z0vLGdvBqY!F~Yxi!}I-MyyOHLvoL(G^ONi+CHR|%Ix9-J^Ty}@%p@2r4VOITM`xza zJ@?$F6D_~)MdM63bKWm*H?#vMK)tgZW7wR-m-UGJ7F}5op8V~Z-G=-b_ZNB04S0~Q z{|IY;xY}RgcOupv)~9#01Q(|Sor)q({t>yl2h>w!g!_Io;Nw>(vaCq7H@M*L4SA!w zafDxZ^Ns^1xDy#Ji6*$$v8}}GgSn3=VVV`HT7>5>fAnh}z}80UCC$#1OTZ|;HL7uh z>t1=jA1^237AJVaPv2896?unt8R2hl_{g`7!$JH$Uc<*Wr6Ff{$kIbKT1WW$Tf4q) z=(pS-^s0o!zw%6{afBcE!Sy~Gxc$WNo6U@g=y||JttLF<8P7f2c%avI0wT)phZkrg zg!g{u$$m#F2-q*#h{f*XI-)8}SbF?Ny;7}+sGmaW6_!i&#BDMfa(s%8IKqcrJbSOP zkD#8h-vWWe9-|wMWJGPp5}m>%yz?dF{_sQ)r;o6e=3r|qEY^ySt}HrSO%i}?pdb~1|5C$y-eSagym5SQ)94A|Cw5=> z9>W)?!y_+rZZH4sGk6RsUxRome#IXcEz);GH|6vPgGfSu6VIvA}eS8o+E+qA0P1?e~e{i29_g|d)+ousoPYOAy%!dk6ss|U zn%KSd!#_Hlv_X*&{UZmT!R+%eNe9YRe;MFUF;S9B!u@;hc&@btrcY8|u17nOF!#k% z9&AN6ZU&nj!GB(Ha)as|PS_2J8#+1`8l~tt91TSMHpCyw4Or2at|t<|6Q%uUMIK3R;fJAG6!CZOBkqe&vy>9WqN|jRrqXou%$ue}E$;76a2@H6 z*d*S%>xn1ATZ$n}{wL!kXA<64s+Qy$jgD*iavoP`<3vNQ6E;5lAi1mS-LyY%Ta+!%Pc5`~RbRjcalJg>Yy<`77Y^XQ z$lQz`JIqZ^PRXXh!c?=6(1a9MYjQ#N<~qwY;H||Q`3QCb_7GkjjN%0msGo>E1miZnG zTHBfLBT6zj96;X{I@yCkGuoksl|S1eLC92lxzHKw@r1Bq?+knNFtZn?@#V>aGa|W8 z=n0GobO7t3BDVgs#$2wmQkyE`3oY}tHM!(4&UMZqvqGPGJfS^-PC4Y^!!^0iX0d({ z3Q?}(@5WTII?|}GRXkp|`3m2PFCRgdPR+U=DTL;vuWw{@XmViB`0gFM2ewRZ*|T$moXMzBMP8FD@*AIpF8iY+ zU&G~kb4a4j=Qj0wO-qVkO-EOk^k1jU$#PXPhi2(;E;4up6basAs8$;|j^s1GhmPQK z(*}ltbaQt<1YXEHueN)-T+g$KjvW85^MHJ(wK>bt9ktlqU*-OP1=KP@y}%hB!U+BV z%BjQCg)aODS{!Z`JzhL*XcWwt19^0%SQ)O$=?iVcls?8G%66Asv2IeECuumxGmqPR z&FGivq%c-ZOLQ024J<)GxlNnYp652_@?zNYxxQSU+LQ-Yuf@a`ao>~g&G$qvm)1)j z7kec@Ht1%RShq0WeGC&x6W%RF!7@?rL@h(@0!(XiVnAXY#hT}@2l>cXnS_ign4Amw z$;mClqmz^QHMu+#h3-jVa&qhNj-koPE<6lyvVOel$7|y@wwFwLfN)LDYgvpBCA|a2 zb)Fef(DD;Q?{z&AM+#*tVJMwwn^K5ZlWy~#T!X_DV%@lLkIO_eqj*f|_&A5`ep4)%|9K0Zjuj3>^k?N)9LcOY1sG|e4P`kLySd>6p zi~Nt023s`mzS4~8oE$lGdVu+$IzQk=p~b8cn~kE0OHAKjv0AI*y1R-^Gq7413f3Q- zb+j==FdHSa6tJHWLFn|L3HEqLZl(r>otnkOugiPN_^37srlkQzo(>UG z&+@J{6IEaUg&8=yHpt6%U2xw2f4jgB;YEZWD|g&tkJUDTJHL9aIKQX~5ho1=xvu}8 zHY0vMb)Of2QgdMgb>s-P(aqr#jA$_w_KxnAxQodGets)-4g|xZvnbw z&{nXBs&I@q7I=053p89|9FEeYrfAbT1Gfc3wnXId!6bb>3E>y~ z$`GbZN|Pp?7{Y<>Uiwjfo%*bkSK%W)E!m?D)d^^8y*B6RT>9kfJ1S{H6c;9(vUW+~Yvo^7o9KjJ!_IF>dJl!XA*c`t+6^NwdWe8H`JXr4 z6aFpDxBa5vT|xIR)oX2T8JtXL1$G6E+%-{+WEEC~--@JmE@(nz*TsIJNf=SE=veKE zw4)c6)+tAW-he}-$*bMq4=fQ5!C&AxLsv|zHvH{`tzP$qz z&B>0CeGzH<#WOJqIGf9IS30i&TAFBFpC~1i1*CCRy#c2va5@?eHzX2Jnru14&pKGI zEzFCf6*1_ZNn!aj&b~Z?;TCEg=P(i?ay1sMSH^+E)!koi;DlJMvd}DzQ2S|Wy0Cr} zlhYTuV{Vnmmu{X}R&GqUjL$jt({(#PR1f;gIJ8%6j#K@*->Ti}WPDSaAsKrl3Fc=4DVsG4q9a=Ep{R@e5dVFO3tkRGc?1T;34#-rr$x&5gcGV1(fPDT)E!{~ zA`q80iD0?;S7Mbk^u?y!?^v+H1X-$gyAT=1HCz#B5UlVtGaw7Wni`sB6~vA^Lq_#N zh#QioUQc5Ez`(I&W3{d9v=!6gL3kI4j1}_N+P1}jkDcJVXwAaDEBYoH`&W1M^<789 zsMztB)N@q$2%menZ{2>i1W74GvA}rT#yAT_vAHidH+_BqhqSLQPZ#oNT-*s&$`0Wd z7sdztdM_i8Rbq)w7QDjC!iV}o(JcWL9cht0keE|_9Mw%%42Aus@&OH&!#*s=N3=UK zf-DjPuEH5vHYhRuP{zr+gQ^432!v(~NBD*F#G;r|aGNk-uhnuhijUFeoWCAL3%jJFodj3=L(_5>*e(gpEm0g;_yI zM^q;f83hH-__b)v(;c)$^Ddk0F}AJ2QM{B!Y3h(iVIr5=@^5}_>4 zFLf`(`HvhzRM52zH}WDk%SMfC!k469;gyOL47F(EY`TSvOoTqLDvsGa%obHMW?*T8 z_%IB*5Wntw;m=5~@q;+JdX~HJqj)0a1~#yxE#-aA|I;<0Pyw>-DVsJj!ud#*5c}kC z*1WIlYcUYu>q%%S=4JI3xZiUO;U2{FOUFt_iin<;jy0MK2f7-Yd#@`)bFmC>VhNEX z2;L`LPm+Yim#p#`LUJCM>w$8uyZDh8n_T=$rM?QBL%gh;mNiA2d<_^^0kKj3DU$)7li^E`hqbD~( zS8aKoV)r|yv5vtuFnTA+9pV$qbI8CHD##>$!{wVT!LzMnxqld!Bjpa1aP7fU0p&8VrQ%Xq}9~7O9+1g<*N0lt9iF=B1p^*%0!RMy*_2I@b zq@}bN8ktzJ;CiZFY$iU3j>70KO}j69(h`}(@K;xl$)(NzsQQN^dO!qJ=tEkSa_ z$Ek(;H;jTpZ{3Daf z63d81ff$KI$$G%gmm*OFZ7>zkB)c%M><ubt2v+$w@+dIp0DfH;3y_a>#pd z@+n5Iat-@>6b4qbtj*`9YuHPu)|zW*EyGtJQN^QS9hZ%jG9HQDQyC?G$Ybm*l0_tH z8|=8ChK;q!#%y^8bFg+A-UOQE%IPqk5m!Wq2Hu2qFnWPaZD`z6&$9 zh&Xp@d_OUx{7-K*W%f-(y3AV|hHuu7az+n&MN|Pc%F-_v^@Z1{$0<8|jBs3+!>1;h zCo?gc_Q%0O63iH~)I5*$ySi^Xm+IbdmvX+5adkf~Y6U%-iM%LV1Qa~8ZtBne6vyblb~ zvhcZhch2^Uy2ajUEFzD1do%^nu_(rN)g3og78tWtp-KEHnH=qFo8q$bH zNh(26+n1et*(W%$#GT_yOiXc&4)h!MZ3pjG3sKs9=H|-Z&A1iZnf)nmq$By)@H95o z$}?roq{#WR#oJcA5*3c{_>DvKO}KR!$D;dJOdBA=e8>IJgg7ywM#!?q?JOM_#)*lEC5yjORMut|%HdqlXG=UJk!S2|kE zwZ4-{!2&&2z9(03-6t!5mFMP|6$lu{)U@11ClHuSMTIaS4CvlF)jQn3Z@KFPjqb#1 zqd5qgsfUpsB&zH)C!uADu3UGH8~5yz<%q@d*hGZ;*s&af!tsYPNLu0pIi{;E%Q$~y z9h^X)+z{=K_4w8ydasKuaphEZvrvgXn<2z(Y3F@1a{9Ry)za)~2HRu}!N@kk#z0d= z$xf=!J;S~}ba}8eGpa<>+AE0PCFK5``SloG_%$4PUwGg*AYD7LBGfV@as^7mDFYAU z-Yy=vJx*6Sb%qCzm$DlOeYkKf{uAe!<^m7U72AgfwhWDCbc9!gmc1eC9)HZj#tx6c zmzzp5#s^b+Z2!#dP$B`*mKE-;JLRY^ZEnr6jEGjd$Z{&BPLu=6@shWGp74i$Cnkcr zZr~UKm{byF|5;k3?u^PT6V#Qx(TtQxR&S9x8>m$Vv3^a_C{LJzIt*M+U~X=RILD zml~X9sY=S%$Bbx<#p=uY391p#>kY+_d}qn%Bx-VOXk=h?V0`x|#(TKFp~KP95z;UA zOI#w_WNkuYdP5Ur_+i2(y&TozyAs3q)^H0&7d?w5UiUxzaiUAu^V7KT4aVE-+JXoiG; zN94AQQ5t=OAh|>2EklY*7|!>pt{L1hFgCVxU?kBy)~}0ok(5IRWN<7^8=j=zlhW)s zqpy+b2_rRbE93;4Fg{Ur2g9Uc7gRK4?bXu|!9kgVh9Ve zG{MNoL=^Rdqe*TFfMUXBnpzmKlXvR(a*=Ssd1`J7S;?%H)9U=-bD^-I*&G-d+~ZZ& z2DRw=fN!mk51MAktb?^8GGS6u4qHlZ)OaW6o?vY4iMf?tL_xi%#e~P1Y;1IB+wj=< z(CFm&!05K2amfZV$JaA^|2zt_Igu-2ecI8k^|&fx+VX{YH2{26DklGny25)3nZ8O# z)SSbh_BQa+#RX4_$mUWW)*kb%E@=vyu&G%PW59ba2udzDBek1HCR`jN8mxZSaE!Zu zQ*E@h`*d+apqS>G4x8=E3HfdN^pGX3_|PjqhEvHRkI9b@}&QGj8Kym;xg{QiAO8M@6e>qqN&R|-7Y zixb5Th2>B+d4gldyL3xC!34#!7tYRW+6tK-UsmzTlm{y7*OXhjDR=(b3)ZgneZI)r zHgW`8u5P_IlODrpMJ7Z4Cgl^NzoYes&Up}S)`oDx4~jHZ7NTZLljkVHeUSD(TR7vk z*p%gY-q3+;MML0@dBY)9TYHRQ>n&X_=$TI&44kA^WQgn|KPlxK`8ICK_e2bb_;u% zjnSZQ6s_uEyS-Se)#@xvKEl@3rwaC0kR;1(Ll+Q4v>UO6i3!HcB}}ipS%i_CX&VE{ z%SSwiE!)s=?;!?}`Ph6RSCq90OScD$nsmQp2QXTYU<$JHlt?Hd)IF3_z=h{xmM{`xt!;vG? zKq$4^oGHjkEgpXCTtOvU(ZH1+Si4CVN>3UA>~vE;mnDx*5#Ki)HWI}*KLXHvtnPm8 z#MYA@W0_LOT`CgG3g?i3VSqQqDAe%4j^WGIpNli$JuC#u!kCJz72QDfBqc8-Ft2d1 zQsW(7eSNrVayq!Vp-a*+qwowAEwmWkd%~p+jM1(MbGMK@PE&!tplpP-fDxHeG8~^) ziGGZaSf(U8iYK|3lG16;Kx9m)8_{r!kjl6}&U_btb{$$|^hrL6EnOJ070cn)-geI* zEQl3%`%_^WC1q@61FuVSoGantIw-$>UOPIdN2PUwk%qUF4n=LFaoCm)cV$8%gKnRQ z5Q)|dDB=LG%N_I$+iNO&n6OS}d^A4Ra*&rz3u*6M0(X+XAlrqrhNd3}Pft9p$3&+b zv|DCfYe!|~Y21o6`R#6&->=sw=V(Yqgiik-cB0lU52?)Mhg zX^8CkGjW{xwTglDTk+$r=p)G>Aj^(ldj*o6Je56pp4sMk99I@-_3#i64&jaXOVDeZ z+T|dJOL_>$L8y(X90&{wHz<9tw(2O(t3m>Zk550>_O2F6xho$COeQKwji;eJ>EsCH zyMNv0gU1?57|gB0|5&_d^=1G;fl+KEBnz|TzAJk7#|o3=g?aQXXy#Cjs)rm*GJJmk zmIG(5uDzmA*xZNzQ3WO@db+M%w`Toyt9!dv?*f!bUQ(>2yMd^HaesYoZIT2QVSZ zHIa~#KYS+mJN3R8xdaVj;_+5C63Z-fPC5QnE+I#=EiSPy=yum$3~kt`I{3uJW;Vo3 zY6q(E@Xn!<5}&~$uGlcniGT@&c^s}o-k|%Ll|blPN@}_|+E{S}lS~7qQf?20ytcyW zh~iH^LDN)G9M_QC7%MU+6C=x;#zd3tF~NO{WF76SxcgmV@?w9++$LX7dOE|yNOL*j zCeYycn3@t}8?gyhNruEB^XN#^E;(vMUFq|ARyyxu>cxK<6rc~V-K?$dM0RsV0&tq9 za1I4QPR`-2uQCC+m8z%LXhkbd^Og3PKV%VDj09)o!NB4^lA%T|$^YHA7O6PWSA3F| zk=P*-92AbBB2fV?=ZHh}0d>7YTSyB*i+clv8q!G)@0#372%}nr7c8p8}B!3u7m+ zLLt-u^pL8gbQ!manZiJ0>D}beay!o!dn?h^8^W~~C)+Htcqdx3NnuEjisr}EKTH1; z=bKX6FY!u~2PpGO3FZ=)R$^lUIr%%>?OMKEy62()Z5@1PMpX#+M~xkcF$I^4!@MrK z?h=1KZb>4&j5OMO`skfYPG6eRM#Aw5=MIapubg%viio&8PE+G>V<>3%6emD49u6ar zUzgLZcpD8?8Pk4XDuSpi$EI&9`cdNe^_@tSbn6vWFQY>RDjtREy<#g(>pL+a8I{3W zMs38s8PoI>MLp(5ZRg=q`QR+CDPn{?7{i{{5UKCoh!sP~SPru!WV9*L?oGLM$XzrJ zA|c6UIdA5YDGjIhFJ2x`TF100C)~INUUxoSmc%h^f!YP8k_&$%V17kg6A}4TyFQDguuUUsi>-qKCZiLtSFi3Yvk?CO5IcY^X`|V=u0^~IZ#oa{ zI~Nll%7Z&MxDOXAxY$Sj1~yL;uolU-zT!{b(mok4u5B6#fw&5RaPd0x1gYbPZ@o&o zM%-k zZenyhR`QI($AM}b7P2yVT#*h<^YgX7cE90vA6_k41@OsvHRKeoaG7k@Cf&~ni?xJp zp(#YaYDig-KWddq?eGpb zu=0~+7xFkmP(Y6OF}SG5W@o!_k^oi8a{NwG&U`Q>IPIT2Er~F}U~Qo?%|rS*UJ%L* zICmop&QT*qRmSEQuVW#NxQS(X?(l3G=PvDFe-2Up5;FdqHC~BQl*|8stIj`b6%2>y zS`_xK7ZgXjaMya{u@j4Yl=q8xTlU9wS7gV@nAk*`{A0vPR33`6#Rnoa)MiI6D_1o( zN(5!;DyxV9G}26mcWvE0Ids|h&@N_yBFf`>7>6?E8Q_4>31;y@2+@u(n(A5z_)DMd zv9_eHlr)mbwGVAsF_o5;;bV8`D0S7d)!>MM+8MGX&LyME1eKJMj<69)#K z1e$|Ug)p#Sk?;5JtW;f?V`P;h7SUObFnA@T z?;_YNna}1YVZCwf7Z%|*hp9RA#fe%BBn9lZ_l0k16>bri=D?cYiW0eEGq-$2V|g?o zNV5By9OB7SSLKev*K@N8q@5Gqk(YoEijh!1BXXk(Mni9!UA!$^*Td<`s#s%XFpDdC z<}kKWO`s>ZwJ&je;S94$aAB)!(~b2o{=yhhWJX)@j@^5mK`{r)PUkcY2-IRtuH4Mc z6_0Xq#2#!BHz9C(t<~!b^SC8Ox~sEPujApSoItrb7dEPC;VHEg@^W8ZNwDj~jUp%j zm2hbH4$d9pysJz+2Co0DjFK^1s?5(UR3xk!)p0}w_^C+k{04LBIu$)^o)e;Kpy*J{ z2u&QoR)pA8cq|BN@ymU@g~5-co_yCtL++i6w2@ts>JVzUF9N|O<}_@rPc&8)Ci0uR z3KNG{cTG&J<0eRbqI!(~t9Rj7&nmo(J)D?WU)a1UDs^l_*L4jJINE(c-ykQ9=vTV= z<@>H!&i$7Ct5z3e-zECpwQBY9V-wihnZV9Ptb~7nA`|&G4O6bRv1&tHc2(DRxhtSH zZg$%M_A*W271)K^II-C^g5m*hYjW%GOE1-%qxk^0Y%=ythLW5GPInE=PdnjEZ0_$_ z?Hk|RA8+1?7AKKGG<*qnCfOK4S8VR*5|H%B0av#P&ElBx+>;=GCoQE;6yh>dEiOt-oeSUsDzr>oaJb)H8Jg>LCfy0Wy*;aP$8xdsT!swVzW)87 zcw{5Dz55p#iMff!>eawEvXS0S|Gr}PH3Qw3Pfi@UaHf0W$jnUNetopI`{}{ciEgO9 zOGlBm-9N|DG*lb?-i_*V?KGq%wwr1#voQ`Z4B-Yw4F3aMay^W)uFYU^)#}{7iEB6P zj|nXz|GF}J!S^Emw4GAefWWZsUJ-8%FYFn{jf*ICvr3NJ^hae8N;-$GhG(L^59@`<|qEB9fF zZUq>LMX_=Y!Okl5&95N%7U+%tefg+3&7qhGR|c~zZkB@UF^#V@FmEDyT;>g9+ZzZYr!4t155D;KJbqdEG^;77b}RPg#i04dOFpC4@^7esd>2 zemq+mg!kdDn$)`;Hu!S#MOUlTS+CWa!MjqGQDiRrUAW$t6Tg+$6$ORq$Jxhv9c30H z^3Hqs_1Z)bh~t{1ZjtX$c>HKO4_gPT#ykePxar$HP=-!{ECk#Zd-SbZ-E${jD5m-n zHH4rIw7@O!VJ=+lu<=g+!@rLB1V&jBDoOY-0Rv7Ek@OkGVnnk9W{AQS$8?zwf2fm` zAKSHO$FW|dt@R2Y1$}+2lZhdbT-+q-XpDMBCR()P=6H-GjsuG`ijk-{<2J!376# zrWGBXL!;2i8hmis(vMKGJJ!%Kk4oqg!wBffjnr#XrP4GVYTgc7TL5xmjo%rj9HoRM zgI)ueUOCH+A*b#IYLdEAaSS5eWIZfhMj_jbT5dGaOGtb!nM)-X@~{YJyd4oK^$Z%8 z@TT`kB9|m2c-8F5?-y?;Popau3B?n)3@H4fF(zPFs!i98f<#J}X=Bow3?V&ZfKUWK zpX5Z2HfbGVUz_gh+cI?Vo^8~B6(qSye1;^AH(`%ewKD`LmsvXra)9XC`gbQxGYv@v zzZ4^)os_V$sx3)M?oz%`R*CP9r1~J_8+wUW+y#6?T)qw+nJVE^#I@=Yuix8RME6WH zY%G#Rq}k}k2XWh9&DXZ~sf01(cZKLd$lF9=qN^{ryIMJ#E9`@v$0ucSxX;=Dec&h} zBtjOP7_oZ>M+X;K44u{yAk^k>wXz#3!7Db|Ft8vEg(bYHW_0CTa0PRmy?MfC46p(l+PxBU23 zKtBxK&f)KF5Gq^LAd9wVe-zuxBqk{}c{(L86GgPo$0+G-?BPa<`1E5ixUw*Te$&Nb zY}l^hESDTY8+)}b&0FN|I^x(#<;IrMfrW#5)pqn;5XpEh*s7~JfbYfd6vWV(PQ_W5gd=QxSj-P*2ZOSgGdI{zPNjmkj@ z2rW$8DP?IgoT^|;R%DkwG+H1Ep)4A<^1 z?6C*Y)d(^iyn zDktAjm|m1SN!g42>P>>^Ju6Idn6cTFxKt6V2o!3)o)Gl;us zvc%g>kY|`+Y5hjf&Xj<_GBzS3QcYU-@ni z;uS!~b$g|T5Li^AjFl#qZL&>{6D3z7J_QW;!b+ulpkA!wbx+3_mUOet=6nNJ!NSU- zO>AS8>OHmk!Cs+g4hghjPvE0eMwpZ3i7KUv!_GpHl_nR zVBaQkO)ja5SNP+ovs(u5VinxL$+k7#+SI3Jai9&|NR#)#*&Bz}EJn=Y3?g*Ncnp@h zMOTaih9=va5c}?uH#u8ya|Q3es8!t&tU?DJOcA_^ynrurOA0(@n%IlJzTG3^NcbDr zfejueQfN7bs*C_0-9@z05mL&j7lgp63}9?HWwoc-J#E_?$Z09?hBlBk1fzq7>E?>n zO%oGq&Gj_yHV~tXrt&k^o_p2Tw|8L2o}tOnp=a(H9v#|(5?iIL@q#qmU>t*{$?` z8NcemwfFhlE=-Le0ZB~!nwJxs|G*zpTVcnip;tkVnvBZ_k>*riGbkQy;0!1C$;XhBI%I*bNcgQ*8P*l4qyaayWeX5mgq~KrL)GUvm3a_%C`l@B z^gyQ;Bo|;hrGiZ3;2U1!xIcbyR*EBVGTf?Dg(gwp9v-tMUR2tI-vo(?P`TKts}KZY z?6nAWz$w4JmRO2U_(682Y?V9HDu8cZ`2BKYEguP#8=xAFTs3uKOkre(nKW? zB*+5I9I%vG9CKtB!cGv~vB|)Po)8~`hcV)OJ|!vWIUv_A15zmVNz6DQM!sW3X@8S{BJrHhMe)3Hj&Z3yz<4HX4R?pV~x>X>m)BaHz!^nXI4 z`0kzSSAPzf8YXi;We9Zqtr~|vW2#2%GfcmXCzjx;EcmU(nMV4)zXBJhhY>IYP8AJ{ zYfcBFwMq7!Z$FJ4U-h2Yx-Z0AYLK0T-6Mt?h^hr)7KZ4uvnc=j4^dl(eFa~gGETLY#=P< zKO0WJ)0S$O*W7{wXA^xdX`kRr<4iSSjt~H1|cq(G}Cw zt@3I0Ij;PWp^2!KTn9wiXciyrkYW){8o`Ka9vyQhB=OChP>rJjtW6AXxl@&!aIokp zAy$>|$r3D1hy+*Eb;^Z&I&wSbGn$1ABTLihA{k;FQ-cxuAW^yzY>Odzl406nPJ(8- zjG0O-x97_^x`H@fd1eOWVhOIi2Z1%V6l|?~5#O&4K#Zew1oN)z0Pa~WRp`-xN^xIe zdJZC#c0@&D2}NVcHANd0wMKoDK6O=Pr%gK|+MxG6bP>UQbrmQ0zHWm-d~Be(KcHaFL%Lt8{VBjr6EG7JV>0wk_<;^ zWu4TboJ16*fCd{M*tlM+FkSo22PHiaKDQ8XvB3dGnV@lQHzC+K@WDN;ihTn7=ksx= z)W)J4!^h>Cd%$Oj6vWUug0+(mlvtuK#xYivOjdHz76$~KVP0*t7;{siwJ!D!VH(qd z*rXX~2d6q&Vuxkr0zM=^Bb*o%B}!X=Su;c%)D&9;vB=EFlQE8$6cce1Va3=$yMtBX zfo$hc!xUL-8Xw2f-Kbx~%>(yk_Hvc`2N=j5`C1h_0#TThYRiw@Gg%0V;y>UXpmm#6 zfgpSf(FtxF^YKoQxh$i@`CSVWlKl~RD#3=#l$N5H?eA7dWlA$_(e4%29uX313#K~n zJq1kBEl;4ZmPC&eI$Lfa?f1x0v_}bsJBg7Y%-~$z6HPKnDsQ>=J62nljGk0jMiRiQ zU%fc-NLhM+&i1*5O0>nQLgcWzvEV^ov;dE~AI^mIdi2ToY7gpiRJFgA@Bwa?m!#wbT8z(cH;riZax zgQE?Ov_>HrBpN31e(NskiK|Mb`MpyOy9Ugm8}s+$Fd0_H5`>C&;xAy~++*~VT)E^@ zXFD3$@!*Hi(WgP2(-j4!-7<0DM5~BwiVkt!C79;>45M$z<;xsESm!F-2q|ST+L}>G zZ9AhJ?`uRkUG?saB!~TGJI$|GTCvsRFI3a?%o&)=6Af^C4eu^g_|tt1@cumq)+Fr$LOC;I1QV zGBHxCVP=l`XRXkB;&*SIo%wiLus znd~Kqt|ru`KS1k2Opu_ zE7<%k@ySx-qeD^v7o(N%E|{w@2UKcxtV8)HhVvJGFt!dz9(N@`aXt3F~!4ZDx!lm7zJw)lS zUyuL64@4dc5<}SUkfbKQJ3Y?q@9Emm31!cT^9aGRHQkG%Um`a>wAm>nLI%J=jmqI7u0(g5gSx8usAb8U%mJE&`un+i7|_qCjp8QRbakd3qb4-NGSS zcYX)ist_aNPtfizpcJ`H&f}zN2h#st;Jpt6BXDb4*$6ed6v_J7c6F-?kx_9c*x2hD zcV}lih7Kb!2mydYQ~~Zr@wg%0Z;UGG?F?359L6BRGhCHKdZWajlq}epz~BZx z3C=1acdruiYQpSLio=P}MmtUgk%(o1vc>ihj9OG|#zih`rf^%Ljgm$k>({hl&BU74 zB;#&apg_aI$3tE;f|B~hMR4|b!M&ddf4R2Zc9R4zOmG~{Zit#BH8@zVIul2^z~3w3 zcsG_&)~#|Soc<8Wxo+^-?4C@0Y}-ZgT@8A=91em#imrE z9jqyQNGXQNMd29r;pP_4P1i-d`%}p$Bk+~=-~sI zuhPJ`s$|cN`!Fk*O9&2Kv%Ex(QCqo4jxQ48$8NWL+|9>y80L#z%V!PZz2Aw41Lj#OR#Fb?T zMC>Cga_tBE)drWlpFWF;$Vxi$Jv|VV%8Cw`bms^LRP(40MJ1lA=1YEpf3+nz-Qf0d z9TC{*s5YsvWJ}ZsogQg=Sjb&a;dm1*@x>FF2hK6eaKl|=g2ydR{Nl%sF9dkucj4?S z)?bjHGh-Yr(=~*y#ZmFkrfakTS1*(pbPI~sd4wZ)5Scm~C_MP){$@w=KR0)4Z-E$E zEC6ITRHiXDIeTjj(6Uf1qg6cOoC#IpH~3_APc6~w?3CVpTG-uWgpuMe1Tv0%3E*>K zCNojm00y)-(t#EPy`4u+07erp1;mav79A3U#QkL$TiyD#71?Odst$fAu#AhdgVJ8* zv>BCdF z3MH-Y<(1PZP8_U&*}_#wl@ny>Zrn>ygyl~$#SO-R&;?N0vO&mK1dvb}SzOMRE&SrF5voHN`rSj3l<; zmnOKFih;KBG^-$uD`MIdIc>6z%Vu$zibx5t>$=m4aUU*hBWWv)m{7)D_&fj^IW(AA zwV-vonU>QULAkL5mwlq)0>4y120??cPDNLHGLHF{MPN_wpSfFtwNoRnO}Y!L%!kNt zT+!&~49q)A`gQshQL#_m`l*dsBu*|3#NcTI9yJD_$G$$o?rmejjz*G4)4q^7(BZQT z0}2wR%Jr#*O0j-vvCb>`{8T1$gKYb8dMH@2=*Zqt9#)h{2py>|=a>PZQw=%kK)+!} zxr(nJ%YC!PB77Ci!B#kOa5l0+k&&XHE1AG(P#ILI?=p zERVA-Q&(Y^-)-A;Bl89ueHo{j2jz}xIsRpZ5zv)v9=W9wx`d-n$S-T~{FFal7(3A{ zI2fD788Qjf;C!&0;Kd-tWkK*c8|HjAG_Q|A;_UY1WFyb=%5HMBEW;__mWQJfVlQiL?*lYWd&q(m1L3TM}dHVH~;lZ(;ez7a-3ou#|VeYD63mR>Wp zWIus!Ni@-66m?w`CDyejC99d$BU)PJDS{4>CiWYMZEaeCdABndjC zYqG1MC46xqvz8F+)^_qy!|YOSHZe!kI$Okvd%6(g#urrF=f+}8nA|hFP`+c#=@C=& z!AXe?VWT9u4ULm>I|jzL?jGG~yN=i~+%|NX3;N#qk8$32(oDaZXQZ1VLI21Jzy+Az--sCr7<~QFM{tn|D zD*s@e-byFav^oz_7xBki%`=Ly7}>z`Os{Tp7y0?i*krwi!7YN-{6R+2yo%tepMw9b zmle}fp@^j3|1*p-wo5)Gpx9WD8;7DWp_sTRR`!3{d)KwLvNK)uKUblmsg|f%!mb?p z39((F09TRNh7H*1Y;Y)nWY985ED6~~l3LHcjeUFjO7{DHhcU*Sb4*EqD@i}yS*y!v z&N0XF8{hemI~fBu^f6qcL@PTtffg|Co|JJIo)@=o)_#4h;|gz=a=W$qxuAddGpM7K zpFuxIMM@w9m}tBbjyNh3tm)i}2sOez{t|GbAl|*10%L%tX=fyKMV%D{)lxq}wzSPp zRnw4B^#4~BRO%TfD%5ag%Ys>Wv7j&}Ds0R`mm#+V8mdLqQUA?UP7m_N+GMg~$iwEr(gF#&2?0z}C$qwQ9?box>5C-&U0bp3Jj*PU7_zgNsKBR*sGc=&|4ied^$RcAWikC1kTDF%R((EviXN5UiBHJ8lw!7) zm9B2GuXy;S?5|)6Fa;zsjt5{6w#<2Bx1%XVM#GGRjbg7JlkKxD&WrhBLuPVW)~pFy zSc&D(yu-9=*UigE3#3ka<~nupi2mR=rkF2pr?Dv;e&2Af*%|`9vn*Kt1Ebd@2b44D zB`mv8p#^fc_stTQctE<7$vkCF^2x)TCJWjhECO1Y((?7;@gES2tA8pFQEHXT1VZ9Au;Ww@>nOy?klf+&83%c zlE2VR$$lGO=f4k?1kS4JumVAp*G>yleyw@Xhclsm-WW-qut}h4GrT~}fwFmiIXdmK zI#%->{}HIlx=blWiEp*KfK{n$q*lBO3UkyO%AtBIlu$V9<0m<1|%RdUPRMYg7f zHO}?J-DEG2H)iy*ftX(e(Xnwlvqnp@tpnU8k5Z%E){$1TQ7O)U0?aWI@V((#5Q`nN9*})NkI=VzY#|3t4UsC3PbFxpsijnJ(JX-IOdqPqz zd`0%bPY#ZEQ?Odpr&_+YaUXIJGJzH5;#jlQOb@`1k9UNd*C?M#^)ngI&&FS`ukRcn zozecrpRvc@m$t-d)TH~;^mf7)gHfdL$S_Y_9D*H|XZlyWxi)QV4V36)k;Lf~=@ypY zWYkBw5~ymab(Y)>;cGo3p1!B`D%{BU8rtWL9>xVEVKTSO;{_g8rzG>a8Uf;f^bi|x z!|Y*}3@kGox;h-u3j@V}5#^Gm}P9TY3PJQ*TX?Ms$Wl;g#}Ye|wzb_s3^ zMHlbiXVM*~q1KMcy7BQC(3l08zbu*?TC-t`tfk%7kCTD94miB8zfDk}d>bV5n6rO4^wq04|T0hp@N2y|r_= zyT9D%4?nVs`hYvCbAyEyhe&F{ypDR$oD>9{D4lTfi%pZgrIU=i{i%D4!mHG4N>UA& z!iMl31X2-xqSM$QUSehomVZM<)FKh_eO#(J9IR+AUhqu>S*~2FB%5%7GYia95(6qU zHRw3Z&va%^Vfe?+4fDpWAWAT?lyR=M69Qd!E3Z^?Zz4M)aXD##?}OY2 z`j4XiERX=u7>dq{xI^iS8pB||Q6b`3+=49Zdn!Q~?(w)E(4{X!_iEg{5`0uXd+o-tlttpk(WW%$6O=_miicm$Mp->a%NoB z38Gt)lEiTY6mI<6@$jc(lxfYZ2`!E%9f%W@lpb#0t|;nZncpW$~LCzY-?s}fM*>Q1^RyT_^|*WFV=#qEN<0|m6jWZaWP`{oJ%V{ z9o(Ew&pz~T+9P(AT{_tBbMV5`)46R>H*29bH=_^m)}$V=yv-PkIosQ(-O1oA+hT!( zsNIz0FifFX1&9JrUBDisbF7dJ_fFGt?o!JgT!zt%*~!xgG7&_%Aom503Xni%@9%D6 z|9!4>ug|M0)V?r_9^ky%XsB^4IKKeoCz zV4)hH2e+x!gqt;jkC2ipz86Jom`i-|yQPp=fxA!7w)em)d15SgL-Hl&aA$&Km_@M) zQ{h(rZb=KG!Coz#E-Pr_|5@oN{F~oTx>Sl&A(GYofKZJelJ7;HN$UG1R8OA}*}%}SCX$`Ou~7PfkKwqhQ48HqsGr5ivjT)Df1%KcTL45; zX=0$ISTS)oYOei7^a|gg#yW*rO8)%&xYO$VVs-VKHOwV}FZ?iX9XU?9#pZNm&rxGi zbGpRe;%tpL4I07p6rVx=fOBohRF9geW}}JEaRIr8@{4%!aPE$p(<$UWI`Ro)V(Rs@ zNYE~8LWKA^An3RlloJTky@i<i#B3szhWb48!-8W+=5$^!U3|TNnH4mmh0A(1VX&6tY z2cSheJ5T(O`(&II8ZZg+F@ef*0jmOwRB^&GO``d5^WXk-#jl=H`IMV<{gW-u{>|*B;iYEgPm#?|VlJ!wIS^F+s0l4?7**Q|x6D3maP$$(er0 zTa;{dEot~&1BZW#WC#83@GYz3Sv9`E2O=>)L_14xz@@DNnM+9uRzqSJETc5ev6ekiiOQ9dQD-)C4@R zc3_(oNx@Nw*kVi)O1lrI;IkmiV5)=R4LYR_r3s4|Qi`2jPJ8_}?J>zmz5I zEQ)qn0%tSL`Yai8jXO?Tnm|tvs?ZMeDbC1oSlk9I3kanjoEZO}-XX4#}o`Ft0WI`lG51oy; zzI>ieC=5pTsC%B1&WG&H=b2RM8TOzlp(bqUtnz3|7odA_pKsus&5EVTSoMgY$V4Ac zzLL`N9n_iU-`}jajy_zSzgs0={mtp>H>=;^@yZ(Y1bWGzGsN|$MbQ+m5Y^QMpsk-= z9!ojaq^(tC@`Z;7c0KEkd+jq=ea`z2!IY4ICgPw`L77$ZnA;pdnc7JfW9qB>AWZHK zYn~tueKLKIfXxI97ROgA?9k5B1m`C99`L_F>zI8C^|zA^PfXpU$Ur!9gur%t8pl93U_N%31#8L#Ku22S*6Jq(iVV|? zv9>?gd`vSBSr#ru?F%@R&=!Pr4lqLa zdkR#gZ47~2UtkxN((znTt|AHvC_;v`r4-{aTc`{KMMb%q%|))}(c>%Pxi9i)9P=W_ zE7fB8#{>vfaCZ>aeZ7HCAF0m>a+KgRP9n0FDs5MYf~?NEmSqWK z5}DZ!^+s1+cwZ$)@VWNKM!nC(Xx;gjn;1Z@&P~7+k0R2Ubgn6OQs^uS>NIOx(+V6H zTc&_mP#vl%lsfdQ5lg;OmvNw~iBv~HWF!+`aApbI+i+kUkP+|z&Nr9+w-ia!?!gny zS*vnQ5M%-GaGokmR8N0vM{+`3mq}voxe}D*AM6>XuTiM2T~$1lr%vicV10Z%O2-b!bk~#Do7{ZT(zqb1@T$s>00&k z%wm<=&L(Kpj%Loo%-lt_hnT_&wnH@>&Nmy@!$5+XXRs>!?*ER%6O#`xHB65LF=14` z7U9UUi-8{o>yX)}Gi7*0i(F1Un{?|s{e<9>5k{XH%sw5fe###{L4>XIez6wvG~|8d`wHTBYln*qn$JoM;1vaY+SXb5)GFnCU@5zE+}X5%O)$QO z1-K*L`nsf&)eOo>g#b~ zuXF43^aB5=B^KEHJFm0$>&jwz&k|~>dKF)6la&6U=&E)uim`H=-Gb3P^>+NbN!#N3 z$RELf(SL}e;@_i3;_Bx)C&R+Dk=Zf~UuK2Ih%(dzz<+;DG%y39mv+cMd-5*RjX`)o z_6e%ivny?#_@3~PzZUChl`70cEZe5CY217QyE8tAg_MOFT4#vnrL~lSe2<7h^cVDq zKz1-io-?B}qH?A~*!!IXan7G<7i!O?EFh;8vb>v4+N3^-uSSG0n=&b!Rxgpay1GIG zkX=G?#t$JLVi+a`Vk)mvI8J`6&#l{Yox(l2&+#21R0<(>$mr-t_b6!L5WxcGm0>J4 z;J@DS#A7IIas}k$wf}jb9WDUkxc^A#D<#PPav<(YC_t}(H(3TQsqn_&+IbhjHaSE+ zIU5hIZzi7y+0NpV6yN5^w^ET=-vTG(J|x~s@e}Jy)BjG<6W^0$@KbK)2$*%k9;ZFGseXlvvpl9D49_x3LaK9J3OZ^FHd1+ zgTm0B=t4mIQ7ZCc)MFN6`r`^}4xTGPyEB$dOQ9F##qWiG+^tnmjqs+#H!_<=SW+xK zb=PV9@-bY91QvsIAOU6QkgH%EINY4<*GLUIDyWG3GmFxBkib$?0t6T%I)r{e`qBwE zJ7K#x5FEYXz|!&2@CaH8&6Nx7WCR@-h73Ttt0%mSC-fe%bUhiO7|#lS$>FZV^Kp_& zhE?~Y7D!S#_-BU^k=GVEkvkm6mk73g;9*q#=q3nCE8vaKdMws8Q(^FbnX{=n!~50M zobB=E!UYlBA@jK7nZ|4<;hX9ePY40v)8H=o#bMGu|08b#@?hqJAfxRKtebQ$_BQ|s z)sPCj&UmnIIF^e!AJRZ#n2YelB=_P93a%!VBh5C)K?cJq5}W{wu3$-T;ma2sXOkr! zsUIw{aOEiwGUs4cq=K<=ir^AV4MxM@#Mi>)?3w`BU@Q`MS>=!mGvtS|Hc=jYuw;uL z8l7iQ8zMC&8nZ4nMI={VCr?Ft#0Cn`AbI9>tJW2*@I4)B%a>u*2p!G_Qv<%kW?~{?jOJ0ZGeBH3 zolv>%(5TaVr-odcCiO0H$CFtiavK(Z(l~n^Jrz}7g*mE297>T0Y-r6={TpnrPm4_dCmPAWf`ChVr!Jfh?CtxSD24a{u~=4Ho)NyT%3J|9e0V z?oGL93ndrYu`J70^m5ZQ(x_Mo8xM-&pj_#A#E{AGpww-6?w<&aeWj(>YTF)6&*3Kp zJHKTlLiJx^a4OT-JxF)|PpLD22`EfUi#N z1;QwCi}at;c2Eyom)T42@Vty+vZ3*4O8xr!_YlqL|B5Y}z&8t>sIj&QhZ zbsYp-4%?gNlY-lp+(m@kgfy23OOi}J#$3mITMlXPJJ+5-%mhOG#rk?uZ`C%qK|clB z_K;v=;A!h?k}HMT%;go$%91a<{L_k$p`0iTaVfMr%66 zdcd}OWdQQq%nIfWIKX6h}sA8foA$y6|fkMKFE{^j<$pI zX4IzfZ?RczZSSFK;l|QKPognI^}D?2WEGlm)=D zz;=|k8{J%APS1hBW^XpynM!YgLH=|BZ4wi&jVLMsq^aD3C$T7Eu=l_Q9wpkaUNO4h zyR?LK?ZScnQ7vq;(0WIrTT{sjiDW+w>CR39B0ba&kvcxl0AvF)J5O0b@}*rPO9#~e z8wGwB>8hY!*J^S`H;8h0y9$e!+u)^DFz?2AF!?~&6KxH=`TnwttX)K=r&tn7^>*{i z`OxoQGb8c+PEN8m`wW?0?fvKy%uRkM)yCd^FkGuMWc+1OJ0z}!-7#nu4xvu+oq9@*b+7KW^M(ya7kerRS?#3Lr<~4)Q(voo{=KAlmq6Ubj<^cEot@MH}*Fl z;nz(U7K}?csjv?;TGix#e#+tO8n9n|kaUZ_9*%C@wB7>QT|Xh+M{cjOh@y5g2w}7} z(U569{VQFj*!=!#6L-#DUZotps|V9-xag%?6kZi;t%n$ z`SFB-6JHJ}-Un@>xQu0- zRRAWIP9i7|x5s0chni16p`0L&_&M(*OQA);03pEjWw|~l>&xh8xzpH68A*O)Cys`Z zn*=lR3CY*J`{>P>nO>H|69Y-qKi+G;xsI`bH^8XNcxU|JvMhkycX7TxQ(QI|(Bem+ zy0rBaOel76wjFya;;S9cmbrs+`Q*_51F(AmSb6_EU(%`q^9B;y-~8mwGEsu=&NQ|5=Iz07zK%I)ao9bMO;$?ibU;;tr|VD3?H6r&4m8M&Se)J zHKHVV^fgp6xc&hifHqVz_6Bc_jE3jo=+P8;4@fHj!vz??8}T9yj|mIOLt6vx|DMi* z!7Tno1OPm=x%5=}+cUWtjhc2a9O1^uu_e6@M>~r8l4p84QO*0m(_Zu}zDF1* zzK|QrV(MVzH$V081h+|Ycf!7dOc}(6l#&!{TlQSXu3`gHR9ve9M2}>^YW4k|MU@63 zKN%jKcrtO5#F%CK+V8yp&;J&JN1y@rW*_XHZ8>|y`2+$`0}nhxJtG4IJO~gF&NoAV z@UD8yco>ftKZ@sy2jM*BZ$C%;sGb!b#xvqwiMA%!EyisS;8L5ZGu7Cf63x{u$$}jE z$5tsfF1TpRwi#>246ZmdOryuPknQvhl` zDRdXxOIdPdgcMwHkrM97bl%#43-H&n7%vF>@s(r{%IurAfIqn*BsqNh+xk|)HNiJi z$Ti{xig}Aro4kWxg%(n;vl@8PzgnDP9grY0(tjfa`a5D0KyEchnN$GuyHF+&utgMa zsJDP-#sYcCTQ8~u1c4%RgdN)`c(*Fk2f|A=JKd?C-flMiwe znEwUp7x2H5^nGh2nb*DMh4v}(lDMi-1frt6)q%h2qef@)aoFjsHsGiR!SnVTmpP&} z{?Ct4N&xqdK=S+@{G^OoT+&R?NZv`SS->g$AtHl5$MN*9kp=j%pa>PAp^PEM7z~-~ zRI^XxmjEAT*3x_CPqs!kf~f3qQi)L9CE&A#6<|)y6Z?1b?ScI4Awv$8XUz^%>XY6S5O;+gz7{i~E};cm$93l@fHcHU1e&ptpw!XGCub`K7AUY>v%gp|Gl{T9id zfT1sv@;uxj?2X{BoAE6@9Kh8O3SsXR(f;ISe zQ48s>M&sujNR!V$8lyAO`9QC9K@E}g?!q>q4UURP2yxS0rz0gYNaNsNK^2Vjk}YV) zLd{H>NOI{S$yAK|h22Nld*cZzbY`rD;#vbyT5^?w7z!pW{HsAf!Quty$ zN=JI_f2ug&wvvMRDCkRZ9DT3VQs$JSnCgT{R zCAnzT#|6mnXXg+$_qSnEI@#Ob{loU=;mPK!tr`5m*##iCW!x~&TJ?6Dc7C`T3K?`{ zGb*DkBqJ1{E+ox|-xHSxza{Ch(vSKt@zxC{=yn^bY&xTfnlKqou3tG-`S=Qb0*Pdr zhbhmSYHoV?X4bU$nlLnHI&5Z?&Kz1bX)a{WvVO_PU&_7DmHQmx|GNlyRR#(mC^!rN z5CsK1bYV^rdVD2_O)qeL)@LJp`c=&Gqjb}}RoOA62tg8wz#{`p#3sKFi>={Ah2nxw zQj4$EyD5k$rrMM@fz9Rpl0k#)Q|La^4OOTIH!PW0=mdK-4r8VoDS*)!76_ZGp(gc= z5l+L5!Wzp2hEJQfpUc05z3>TWvHNHn&J#*b>_G~S5rADo{A$`Se6x=z$sb7Rz1v@S`d)kP%q+zw{xdT>pje62;RDvM)R1E65ODbRB-JM}K*AJbCxkH@^pO z6kI+34jiQZrSNi{v`VBb=7?COp=#wPN$yshCXPpfpmYgg4%jn&j+kZ4H3EU>lt6>9 z|2#$utUd7eL6=~y93e#!zuH6aolklRGeQS?K=aaJ#1Zsdl7NExfDn5FK(YMSG%$UH z85eFcAnD;T&5atw8_XbNe!_u(uUzy*WJjRVghwv6g6ztkIOm43&_Lc+;=bce+YAt>ze8pb%jly^pr6~lPy>u6lJ;vfi&~m&5<_11l)s5{)M(-99inc^`7d3&_!s{eohA3USRx-Yx3@2QCVMHIDc6);R|d_1eIiVqug8> zvE(DwRbV5S^u@hNZE@Djp90pI;+8Xt3n+c5>-ZKq4*z2ztjaN~l3OEIBXf0tPpp)@Fb&X;Y*<@qebjJX^pk<5p6fCx_MIRION zCo1gOT~=-yvM`!prA03AN?{wAGMi>^Uy*S+VtiEV5lndF#@_dPp$RT|8A=$5iX{RN z?lS}bwut0=F4`Hz7#C8fFRv}*z)72o2$p><1nf@hH1SX}gbkNqp&UZVn57RWgt73>ol!1;R z8&#v-%*)LF;qR898o6mb`K8nglHH*0ry}%zkw(|`rNDmk4OltG`6-?G1L_D-3P8ze5eA7Sb4!xPayE!B&*8)$e(0DXAY zhnGa^;cmbtW*MBB-+ft}wA+1e3O1hZW8p5rGJ#VJctYA1*9lCH>JlH@pao=-LUQ+X zcT^as9L)kD#^Rb%209rFE8~w>dRJVZnnYA_ zTUMv1#tFG%SD!(BJ5M_gW}*cLYJb$x0mGt_3+Ld?v+)JeB5F}Um*~-eRD5Gp2F8IV9fbId05UuiOuzjcnki)Z zwt)arUbfH9saDM_%Q3?hi136)mpz5_I0!i)TTg18YATb2cxl#KNrA`aA={_GM%b^z z3!A_u^e?cjBwZ2w5HU0Exv5u4ElhtAUQ5?N)BA6?_m7&JyRTq0+1^*H2_7Bn?7nWk zE8ocyd;?{oG%>43Wxsz0+BI(kPQ!EomE95&hxL_p1Nr+iM?E01jqjn=28bAxo1iJX z>~pXd?dSPHN|zL9yLNu*afaIfgQ|^`Kxp~G+%Lwf8el^09cnRX1dIMRSjF!f$^v7R z1%+sA)C978B^*Rw0ZT%GC~vWB{4cjvqCE774{!(2`oppnpYj3_Yo>7^Q1LVJ#A7yu zP(a6TNc__UQGi>oCK7oh_KJfG)``~AVRr8jE#EcoG7AZ@7vdUtYJC zo<4m__bAxOAYGukYY&=LsB`Jm2>q)XNKl8H9*^py79G0aiYq2K(vaQ^&pTUWaEJ`* zL%Y*UONoOPcNhQ5Z1Da4v?b!Tl+)Jn^7XzJj;)fw76I3NM8!*)1(S z1#CkRRC?$n6;V}(z2+H?+n$kc|q7p+WP4+Lo*M(&uzvRnlevM@aDIOw zLcV`<4I4`T_>a)wlzK_tzEz>B++t_<_%#^Non8I%AC8;`T^RT#{Ty~ma8kT5E93WA zLVAVBq%eO(=_y(FO?r7gV;O?nl}oS}{bwrJ%ckZSWh>S}Yc;p*rFuGRR3&i{bRGzT ze~)yLfI-;FM5?5Zc?K&T!Yfp5vpwt0t*rc*uGes)Kz@&6UmOKBA+LeUPGNtiynzjX z8T@KO-&8si>wYi=3Cql33nVxU`lcu3KF+#u4FrF0Zj0*V{k6ox*lf!vEAGBaf$lKg z+M%&J5Gxwh1=A=yn><$(B(xoi6VGw-EXrqtA;($E!(h$@0WUPrvd${3cn>0#*j~w9 zHhuw}h5L^Jjtq!#j}!1euQp!8euQ#53VAfb6cHs@ouXrjd`ucrb!(x&LL4j+_Rwqk zM!2{jID!x3$@1*bNER-B^w0#xEQGc>x^oDAM($?!s}Q)rD&@-q{JQFzNiMrV#K7E4 zA4{gGC{Codpq$kkfu@FQ+;=5u3o@^*9$<$EJpiyS2FPUgW_ew|-ZGI7Lk2Xxjx1z@nGwjRzOhl@K`@ z!ZNwj;W;UjV@pJb1TrAxdTGeJ_5B@m78ITG-O{ZbP&XVxIWzc(LXAWyVW01`2znsu zdGQh{Sj--nxa{+eOxKOV&~Oq?l&q`Q*XwDeeG+Ht}?SHa-eJctTUO&2GmUjlAS0NC1<1} zIie9kaV;<3ptZC`tr*=d^b7H#k?IbT6GxKd30=vZBIIN(xB&gIeJ&+B?zFqOo~Yfu z%Vd*K*T~QSVI3Gi2If5A004|euveO_nFt$ZqKA~*?)h7!|qVkf3m&%l4BqA`&wZHR0`@#4J@Ohn4Qbo$6v1f z8>iovvmuoyGsh^fQcn&1&%=Cxf1ExO;jHyWXKPTx4-n)wSwmnOeC<&T98S{cuXEM= zx9;_z9S3P+1TFR67D$>z-@GPb87jvXp2-xO?<`SPy{ng8G842_KU|gEsKqreE^^-H ziu9|;PXtIZ;MELAPrg-eluTbxSlm(2L9n-AUXg8Q(0kN?zh-0EcZ(#23{JakIoYjv zGE2eWM08h@<5?!b6HhdTEGGNJ%NMR*X14HoQ`xy-1V|`06zmAD9|JtVDxUQVmvSCA z2ln#A0l#t&SRtg`b(k!><8{?TnlAg~fRfPybi;Ru^`%=)BG_+t zUT^IG*`^i&x-bgr1a_errpd5=q}Uk;!kk@gtk>Fg1M=#6JordL8f4q7bVUt;U>_@$ zOJLX(#1phcE}a3BQ(DEq8i$}#^`i!;yvy7Y0vWn%Kes>otsr;_JF1W`4ya+n)KEQP zvb&@^%hnP|f65C=`_VxYzK@Yp3O$oqn%vyN zlUF=hC+AW}C25E!;_Z4hITxI79TK#jiq%8E1`&NOKhch6&Zldcmqu|F<@y1R;U9Jd z?prjPg`*{_GUGhKTfj#i+oTWxR$Ow9K6kw!~<9g^_sIaKqdStS}Gr zx$Rzlf|40nBp44Ofdj)bCPl&++PTYik~0TYNzzr0#4)8-{ zs!8MH^l}KleXN-Mz3L9zJHs|unD#5+Ry^$9pmyJfNg8WQ(5zqn7m}oljzT9=pcD8I z*$Re}396WqtNJ2Yw_GgUTU)Z+?dSCirsbr%*v2V%Ver+6e3p@zm;!%b4um}h19U&a zSi)6eAv%V_j0qTelc0TZeUhXY^|V`2X`^t%d!AM6tf}$=fX!4Ai2^JzqZv+9;}7!m zuM|fBvS*bml~KxU-4W3bFz$(@QERbt%=Vqq!cupNuflc|flnX589HcOju>1{M|rc2oT4tHO?jQ0%m6r_+)h%LZr&Y;62on zy0_TzyX>f-anNXC<3r&E*yfH3^ReJ zQsIYECY?U;p|yO}OI1l>rG{L_rp_-hRo}Us9FEKOQw8HO%Us{bMg>SafAH z^|R~%-RLmEs0J6X;H+A{2+Yz4U)5+mzE0qzxkJqGgeZ8dS?!c;$D0w!B8duE zU%^}mOqhz727Ii$x3G8x#Wr;+Jboq(6OZf?T8D|Qz!0S{#Pp5$6utp!Xw$qsf@ZG=0&c=Ph*oBf?-(FsX|gSr;**cpsRLvm{% zAmag1GS)e2EX#&17bYAyxVa!WL!k;7Bo>~aDL}%D1SCwZY)JqKSAtIm+_E2Oi zop%cC6F@r@T8WlM>_3w=7_fWY{)aW9I?$(^wZ9IoPvLpC_N4Q;^B5h?flzSCrj;Xd zi{MF`GZ)nE+4sK)=GVwVdfV!&x82_ms?i8 zgKPQGRH&!j$>5ASaf1Lw%ciVX(Io*a7KtF1b0AKv1dwZuh2YEd1)!aJVnDEqwsllA z+6W@}I*2Vn6^}VeiTn0@aO;q9B1UD2K1`07fzx<1^wQkwmcVQ1cc4P%L{@o-zSr?| zPzD_mN6_kl^ZsCoQIj3{3_9MVw^}7{$~>+J4F~6`|Equ*U`K&$A56U3OyXhaA~arx zGO%ozJQM*)&XaNnp z$BW-X(E~N<5tb=h1cj`LJ5P7)2%5eZeBsJ$Fssx zv2Nv+I5=2J)f9kO70+$vl4|#33pwo`u%Os4>BimGgKy_7$2LYzA+twFUIQ(jS%N0; zd2CO`=@C{x{evY6g*T=a1!VrJF}*HsngP25C-S!imN^giZ`ETm*r*8iI1_5fCUoHh z{L>0x&4R@Yd}a{G2>GxW!4ZR(CH+`*W-sNH__gy$U4s`4SSsCW2S*_v{5xs{^KF~I zH)Yz1jrIFlZ8YSuzG(SiOr|Zi3hsV6BA@+ydxk%w`J0irt zR%VM%AQEDn%Hkl1&C^kXTvtv^_4NDZCTIF1o>&&~aJPjmlHd+&UG`*g+ItDFDONWl9M)w=Q06?7R&3n%7J3np^a+tzW0;Deb_FUC;BLDV2Vngw6Gx zz(VJ3L}Doq`@?=@eHEZp@`@{fZsA!)a5ak=pabkVe_=(zGKn&$lXKt~v7%X+(dVW}#5QEeD4ITQ=gc1_qOy zBiviSPUF6%Pi=&b{~Mg<#osPKH2O?F!|c6%b4Ri@LrNJ6u2SWlpelSI^)wzyS}Qh? zG|O}i`2k^Ojkc$BeFok8v@ZzBKIf&Q^u4&>K0FXPB z)a3H`X*kc)O!!#?a3f&yMuM{frI8-0y5~K(c$B`S*T+KNg13Rnzx1^|q)BYv*i@dD zzLrOed^><;4QY49L{(kY)hP_7AT6cd<)f4EvN{gVhYp*qCKNrRPbUz8PTtcX=BA|WRCj1$MRGdxo}!1x4)6Cv^NUV7U2)#JyHe=C^CkJMVr$&|hf z9|puhFg9P5lbtQ}_v^>MeEfBxKY*(Al{5{XqtKn``F(6@D|1d-$Bus`9s7-iVPIC* z)x8M@$HM&l=>nVUO=X6=d)u#Ja}3LW{pQuT+xysp$3H&7rsDtJm!@l@H%IZ&7)PvfH_$x`> z5{%@SNRqmxhPH>+pziIqZfYAL`DaMpkP&@|=iU`jmVM-D1914t(3+({;{IH(ATJ-%cP2yQ& z_x*b;B+Fnc8&|wrlPUCkgJIno?R7_e+~Cq?9s(W2R^RmLoEX*(M1Ys-CH6ViOmyMH zlihA@Yb=fUZ8na8!WtrC0Pj7ALvAE-zopftTcAA{ATi3@nR@$1en zJ705eE(YgFklm?3ZJDR7f!Irs%I&KPQ z#v!tJ8_-_CVT3jR)GWWp(DJP{w`SFk1jHlB)-x-0lf<4$7?*q!^}!{{~x zrvjF*303!2wP>Zd0)+d{!#4Z@!dbtCe+9OH5a~{L&l+pf$#@NXrCx@wA$mOi&DX#A z#pV0ST1nKvluigslhIxF+!^%Do|8AQ*U4UE@rJWeVDe%BX5$K+DP1k#R-<_)%{3Bk zG{Xrp?!Zfe&JtAAN*%`h8SK1ocmt8%t%i>>WVOr&I1S+jZJzP&{3MDGIAUQl!Hx<$ zWXk_UBVv3|l&*~Ta{j->efeYIzwAdX2WIah59Xpo+-hOJ@Hi1b{^8fQH2j_EjmS4~ zNliixpA|uduA|EEnkzGvDiaV&b-r<3F#KsQM+mOU@SRlqIDnx1l)6*a@t_VCGP$I) zoR%s}L|tf!3tJ|x{sbMT@w-|V4Fi?r9J>@;pXMh~4{d6dCNz+F#77M(+7J9R)<)1K zJ1rGg6god$CXuUw(jN}!E} za}xclgctw^irjMrY>h-P`8fxeW{EO7kYn*e>wh8Uyen8^8`u32w2APxRkv%P$ty4c zH>4;1-Z`q{F)xDxP?awzD@WF;ueFD7Rbd5D59&7je^@pUBVm7+^)QFq|A}OIO{A7% zJW$Bm56WHXt^5S4hFot{`kJUIIBpl3I%s}CHcwF=^R@vdsn|7mC8$`XkQO(*H-b|e zafXL4!zcga6J?Y1&nNj^Pmn}PMV#gGd4L+5X0Ab}u_ruRr2P5VukLbDT2Jl+5uLs) zqPhjq+~DR0diXr(Y>Dtp03;H?O|kN10i?XDyu3=E8t*ePIA)*E=l2IcTxEw1Yc=< zhAC@;x0Nv-I^NT7fSJt8Nd94lPH{5{c3e+dgxf^>gP%Tf9x;81zm-fRr5r!jBF%I1 zbL8@oOfQ<8Y*!)@<_)qdF85m zE+@fvo{>zkA+aEXEC?MPO^3ZT(6F}r<+IC=VkHLWkE4_U zi*(qN^5)|yMO*HwC(kRSy3>SGKsUi%1{@$HV#0d351yJX$xN5IVICSO5ECwN$d**P z*kDIAD3exfpiIe4L{owq)?wFhoF@J*Y!Z?*p_#_h#z*yeo6?2gwEkhqo79 znzD@=Pby6|1zGCG`z2tb0n>F!C%pVD7UgeYIb(#e_9rdky8uTtp<+SEX+f^xH-jRO8fW z75hzGhty+^wj*%Eif2FDu$5sNe{;VWfYJi%DXt>z4!r%jt{Yr)8Spl2@wPLlwM%FS z?ZxLFPKU1;C0A2c6pn$AL@Hlx(vbP8OYR^-R;vhT)vq>i+GvFTR^P#aFjl{-f_*}$ z%hMs|bRR&Vn{bzDN7b7rNJtVQr`SO`M?r%`Q{mL_%MyOx)Qp1EKL`Htcr-x=);aIc>I!=mq?m-w z^A1`|&F=UdZ03^8#viY*?;MCB}HPsW#L5C=Ktuh5qqmq(^vg5>fEu>#Nv5Qz)H8=zYLT@ zitL%+^70Cd5Q2PGAp!pcjN;o}WCG;Zw*+gcrx@~vd?5po<|M@^fEDT87IN>lmS2zb zPT*r@Ypb#bC;`%lV%pp{%o2ZLpI2GUgApq^LK-qLhiIS;&n*y!gO3VUM6h|TDU*RH zqB8_{NmTLpgNx9r6y_iWADNGX(RA`H-!UKqjVy0_d;?AMX&09VAA_p_9k+ZT2qq3+ zlf>a$&?D)gfj}^5M_9uVze!YPFHSs$+tP(y5?={6#?DbIsj)vQ#|k`H6{N5QqNdQq zqZI;NNlc0vQthqHCHwtL;3*RDR`Ue5ral~;6y1^}=^U^uWlMy87w~~b@sw;S(hkZt zmRNo9PycrJVCV49C$D$+U%`zDn`->OQ2p4!j8FfsH#^&h3N-GUpHANYRN1^+Y+D#K*jte=L7ou`OPMW74NeHmdd$CUr#HUg|pZ9@o{wx*DcfeEK zORV>^l3-257O81Mgg59h0hPK19T+sy`#{8aOW}scDnBZQ2~`We-+i^sN@R1%v~Q^t z?&R9qyv9|k%cyMB!eK(-JXtlWTBe-~P*v?QE2L9{Kuki4DH|^t56#1kbQRmvfY%H} zOdO5wgzwZ6jSJ=7lDwr<78Q01`JiC}5$9=gX)+=@2PS3lj>hK8oyHV#EKp$q+3U_< z-hve29W2@s*}a5G;*+j9ycD`$Q!Z+asFLS|c47$M+c^9lS{Fq8bjO%N;TziQ&(@Ez z0prQ>Q_O1o{CMN~dJFM>$NQr$Lg>z^>(nJf|Me%7paQ%skwIKz(Ak=Pw8pHJp%u8I z9~+v4n@O-?7?6orT5gO&MG@lE`;!khqiab8z~~H=0`7tIVxN)nh88$1{5@&`B3}~I zGcWz;)^{hHyRTpDe0M^?qv60x9dfPZ=`aZ)DVWS^Y3VgImg|~ND7X$_Ly(h2sv=O~ zkM*5RQC}HKHxV3UtFfCxR|i9oDeX*Ed>EaI$RsI1_cEjfhzE}xY9}b~gl$N*I~vCp zSPQ_{JyLhWB`6+fCJW#T zB2kH-vF<(Q;X!pSOs^*R=o0RN_Pa#kF}mFNB(#(3PljUOvbpWSPLEeTDv z@`ObbmAcV)xvCTkaWzg(=P?`!Q={_m9X=>+RsFo?b2Z2i|g_ zvQF-WEd|m?SA1f*{^FwZ!@(Eq6Nd^b$PWc8PlHX1nzuhnNrN8F(;pQs6%NYYdG?e0iFKA^$kZR3ZKGHa|?>S<-?frH5nXHRknr&U^CRrQ4 z@^2adAnOeQZS0L5bP~}s5A75Op%1$UBY=QNKrg6^$-`m>MTWb-_V@Wh)WF%eTYPvk z9W#R(YqGfhRC*GECA88()-wtAA<8L*{~~-LTtEo!H0lZ6g`F7^F!#?8Jl}^eE_aXI zR@g2&9}6@hnYMo*b_~Ben4a<~QQUVVYvvihKx(Yf@{TIWM&2g$M()Obu%%2L6ds8p zdl<r+d!M_!oOAzAK~@j&&Dx$Yc&OzRf3$rUX-1FMFk8f<`cN z^*IWt3>pNP_H$j(Ua7cV2?wCi#mIL7 z%n-yILvo$TGH=c2He0e(wrFk^LeuGuB$nJ__Ie8_`T{Y^a(Z_ds@XAiQXss#6U-sx zC8PnK=5-rjR?-M%-V00wD$-1Rtx>xySu3k1G-I8C12_lErK z=Pod{L^iv77qEuyw(P~h^qS?r1ZQZn8&m38d*m*JyZsq*zc824O64hX+Z6kg)^Enh zRNzR1-O`wu&Q8uw$18m9v**|0ysd*TG=S#>Vq8mei6IU9A&N1+-FUgPwQ;z80!%D` zYw%}x*!q$2WjiRs1O_;<&$U9PYt^+g!MSqv*i1}9G+G|XZ#@vbeJhNKPDy;@4jp0KESfh+*riBuervy`&8s=HiTsL;=lEpw_shWYK!UW8B1d;mz;7|oL zrXiA40uia9WJzf<`O}if)G})A9SB}=QUpo@Iyz0gLu6+xe`)T5)$`$Bps8eHnW z4bR2=f`JPcGQ7PF$^+vE$r!eDugq4d{*Ds(a$1n zW1IZmJW!rqSk}F>KwT#sQvqBRsSRx-Lk&d%A_t_oLS_Wr#QOI39aT;EpSbKmXk@{~ zS%!o}1n#7NHV73QL1FDTXnLfyNcjYtQ1Ot zad$Ap7Rb)LAC1;dQ5{IK;ZpXu2hYNTWqTsA5095;ErRZ)Ki5Jim7sgp%A$q;AG9!V zkEgV6-C|jF3Z>)#UIAZRO|K9}W1j*3SnZD+J3Alp(^Fh)zi?a^X`*pXVB2+reVu_6IP%Bkb ztzk_7K-eL{j6;rp!XlOJ@J9 zBIu>1ItS=vq=IQoh)pHB-~qa^tm12FCC1#lcByG3qFKc2&47uUhB+nesH^oC9gn=c*|4M&m$j1?+@7$F$#XD! zr9Dnw%IE=vn3GpvP7bj=oA6FFHR%cO>sR6vn4D$u!MgAb$CI0$`2Olasa&T%NO9`P zS2((`qVO2&q>z~OWeS*@`O5t%@1OOi@3?b|FUR^@Uux(#bE?0xK6*y(u3p|t$YWziX?ETvr_o`o+NjMX0>fMls{sMQSZ+%+R5 z4gB_JBw0!xF^FDQ;*zQsWI@s<)2<_A^#7hi!gMZm9Vopei3BXCG*D;0q`Z(M4R#eC zeBGN+r)nl)&ws#KmdnOVaa-58%QCPd+zX%%;SKs6*CMTSn%EN~iqgJJlb!e*b5l9GPMj-xT9jMMXHr$}M?yZ7hM zg!^)=i1lL#VZ-S07~)z?HL4v|a|xx7?xsw@{HURzxq5g=}GY6+>C0=wgi?(S?634rbVVb5w#?QtPPO z{_DHd*3m}$|9-dncl%fW(O0YDt8{$)=FwB0oGp!{D`Ijbuf*)$5IP6@?`sM#m(Ku$RWaZ47&FS+@{b>JeV#>M7ai z)>Gvjp07RS@8_!t6Bkw&13Hl94TvMSpSD;^cM4AkYNcCx32~Y{2x>KzS+XY4I>><{ zBXp+&)4q6Z?|)*_$G_B(IeV+SiLF6g7`6{ohg-#Cb>0FZ^sb4+e3c+Y1dK$ja-JJW z8h|rJ78o;YSH4tc51^8&og`KNQ|nKdKS!|G>Y&)ms)MVLaKa6 z(bjGM3N@l;&)7bjIbrFhuIo5uYZm5g)Gk?~Cg9dA*Xb0M!s-)DH@HQ7IcYroa`K#K zpY#%c$%p}+(SFUvQn%HxQNH}lN3~8cOlOdG~A;h2?Ol_H($dPx`tD=foB5;bxeF zMg2Y=sWS3inDJ554;d2)ct!W4=5p%Gcs9I}EQ&-u)Im_GXW7E2a1sPVEQS?kzf~kt zJUUn0$59Gcr`%6^p0f|J{H34c3@TOrBtXAqbFZ}$9O)q|9$1V_xks3dnHVmXfozRn zEq5BP5M?5H#;VqgrTdsOlw)wH(t%PiDeplIz{FDr*pH1EZgG zUr(UIH-uBF$da#&4Fo}dX{M*bwX&9(9kDkxn__RdFZQRLbyj|*f)VTl5-o|eN+Tki zmU_@%LiG-T)YOg?1YEE;O)aDdk?KW*17;D)Ns*8`VhBK08RUpx#foy-XYmz;+ndu0 zPe{5i_}Icf8To-R1;lo%%MsA*&8>aIahHOw3q4fSaL5u{v#>_X)X&IqOY@8>V&U-~ z_rIbk#f0snJUqF29MkfKqK-#vRTbcckSOnk9+L(E1x0RHQ>wqSkGw}a1Ln6LW0(8; z1^vI=W}N;=B98HgeT~23p7TfL)G$X-MZ*ROQ)?X%q|%w(`3OE1;42&hmGSpFiY?SV z%c3uvrD*wiA{byl*`vBcVSjfzmukQFI~ol9;M0-CqLzh55MvvN!&ZFb&zrFkk|9Q>-yc+&=-2DIkpZ|BcwfgQCsO-X~!r(mb{NkI{ z=PPSW{AIiq{t&S_NC&oMgUMS;!`tMcQHhB`_K`~>mNqWSHE+V!Q)4OlIQ;`-_Mu8s z21{}Z7dwMa&#>{`*Z|!dW&wr7-)RK0Z`N|vKhlL^sriS|#jtU3#XO}?{}=xLeP8pl zGpzQxX#^5?tsuDr5%-L&!d}a@@F;BI70kg-o`{jYsW#8dWUimmtee_z!88j zhsByp6l}vjE2V4+9V}Wn zk))aS&o=yvJVA-kaiMIf`9>UQtSfVn2_XOy*ii`!DA4j`PS62mR;fVj0R;c-9W9@P zExZXK6fQBy3%0;+l4DhP)Nt_3qNzMqzxl$;Fq&Lnzt-B9Jn}PDk7XPnvCdod#M5W> z#zB~AU>H_q<`>U!_SYI1MKEx#x_KbDQO-4}ZGoLt_aPKPU0U>F7BR2&$1Nhlw1{^5 zNP7TAKf8HFD#f|0M16KK0w;|W8;R)moOMv|u^_)4flo=jXs6{T|i?J~PZd9sQ|Ck8SwcI+#r-39%Bm4l~CQ5lC(41xmw8 z{Eq+H<9xWTFB$o|d<4&DJ%V@3l@$h@6=sN0xVNR9aNLtXpqyU;G?K_VP8E~YED2w% z#AfnU32!-@1I2z=&6Q$VvrYHMTW?I zHXfX{($?ZcB93e}(oqYN-D=XK>3?n2n65I6{YkYYF1_O`Ywqehfi(g`${7FcFUOOw zB5!y%s30%L zr}tzDBK>NcO1$I(1ai5qntDWX%?fq%l6O2t3-0 zdI$%ZptzaofR4t+LpqsAf>UK%7u{HWRMJb|E-IVH)sl!yu9bqD;X7D zr;H85Zjlo%hl~j`jK02wwgLA=+p4~_Mc)=-=U2|I=rzRe_cYcwhCGAy0W2bkR-?^W z2z#%?jK(nlS;r9Xb9RR$Lr58f%~u9Uo(v`j(=$dAzn>xuT=u)Pp!CQitvo^MGrE7Y zj{fotH1Zj$r>?GO$yDhV`>Are$lzB>4l&jJ?eCyrKRnsp-`d_Uz=5?9xmW(qP3FjS zLr>nx!ArZNuiq7px-|b;@6xrAn=AbY7LTHL)bwRn}NC-!snb-{1+QJcgQa?Fl z5(i`tm3$=2%PL~bI`g!>w8Mo#!cpxbJvG0s%g4iIN$fV6vR1gH*_HtxH6A}|w2@p4 zhZTEeNm_hCaKb8O1aKwU5wIv97zzLbrH*`#!Sj1mRPc&=mY{Cpkn2Dl;F}m9@XTxw zDzh8JJH*&`EIU`J0shMjg!yqt>Kg|@Dqw1z1=tG-C&XLB7gWmbfX!#Dcbz|U)%>Mu z0wIlv1;Rb8Hlc;g)TEG+Y;*uY0tD?@geoJZ8Uag@1((aEjT1qCW9e$%(*J zdBhCTm1Me&3f&}%ULJx3WbkD&Qv-$E6#izz)QT`YKx8N)o z#c|R@MLNWV@O!O99`3Gm=@vgnp>C4)ZjPE}Qcc5-3Jagv((biwl54KzaEdg{qr?45 zB5UUy-Ea2XfFmex;h#A?I=07WgT}^~Ayh%5a`oEag)Kg{F_YO+9O5$Yfh9FC@V8F< zX#%=(cNL^EeJkuot>Q((-&Ks|NP|xybPITAY21a5PRLdA#2}8 z?+E;4)QmSK*JRFz`No3e;}LLYR9$H@1|F1m?{lvYw~RL^s0aEm z7;ojQtz~jQO6Wusr94w^4ayW7r7=WnpF1JBGt`&%Bc5W+ZoxZH+>HuRY7o>r2*?$g zTysCe5{@#i%rV8fVPRjvM7jAAli->#-EL4|JQ+F@AMSSnJOnBcj4tb{d;Z#+@cdVRpw$2x{k2XnmYL zD_nS~QcVq^Zxl4D-B5Nya6mXcFK?|Py~aS*fX#i**;pFA3qdEBIE_)NgHizoiyR%7 zlDLrX5S3{#`&OF;RW36v=brLGJ|}s;-FRm z!BazRTn>=N%nrZR96+4Uq;a-WvrNvKiKyr<7>iNbiFO$4DW&1aD1q%mH5sJtfiew3 z{^bP8r|=pv+C)+=8A-(DT@p|x&$rCV9S-|rjEjlUo)8LgC ze+jsUIM&x%nA9XBy|9ed&Ba5sl5F6QvWh37p!cwbar!wG6q{WVgQEteMf>OOY0!re;?8)nhD8Bh3p`P;6=cjG4>fel#59%fQ7aM8|r%N3B&DYG~M2Rx**FSlYmItNx+ zXd_2rPFA-<6kY!`WFcRsRFfWRchP)e7T7{0_~2b(mR*NX_o(5G%8y`I2HiJ5{{18W zKQBpgl}m`?0KJ31hi4&h?+tXKgab!R!~(#haBH13t|5ZJK?!W07FEB78whW%VY!;= zjKJ5h269?76jNKQaB`>y3WZv4N*AZ%ldJ12C<&=U<+oC8R1EtMDTbUZbw*v}q}2kT zz?=Gj63JOL(fn(+BRNnSu8MM$sYciq1mDKL;{x8a0}PbVqO&eZ;`!Pt3Z6I3zbO=O z1duX}o3{a>+_+*Nk!=B9A9Pu8I`6XsgleLHbq#@H;v7kLKzL2JhsXYjvjz)fRTH+! z6SeS4KnsWwyQr^OU^XIyLgoc3C`@pQKpA-4g>*2Icahdqat&Z#*p=fCaPIhJ7#%-= z(a;AxDNe^yfKVGJF*^+)AllgEW{QMH%`yshYx+z6K<5|2fpzGX>_U zupc%ZS=Izn6bc{Jr+`bhrH}^b;QH?qPB|xWE zuad8ur#tePKlCIuHq(rR%$Fp!kpS3Qvvb+^Du7#(z%XsTT!ur(lXSJIrUZe%BjTw> z*2;n1X&LATv))R%J1*UsrIf|P z-S|{m2CYQlsDl-kt{4@(8_`Z|8K02k$L3B+;MSh84t2Giowa~C z1zDTZBNo~Qa-$;|Y4v9EsJ7s{?EpbrCXauWiQ(xLCM#WUh5DDwz~n_FX<3fL%hF8c zB6U>5#AK#6A||=xk~&iL0ejLZ!IBeMs&ZYJc&%X93$uZs3uhME=G3oD1)>8HuCNCE ziP=KqksjEd8wYG`y+1JXLlcSqd>3S*&aJS6>cRTklyqlmq-UF9Yt=IgDdU+0EnO@<%e?uVLU1(U0bh%W6zr$*_`jLU_l&ZT-&JtRF# zXrJWB^p|N4v;j}oU&~3mT48~j=++d)$2Wo;Q+Ly%*b-D1So47-i=Nbdq`9P___Zlh z0yg{PyQpa6iDPy;1CPq_%3R{<( zX_kA$oN-r$23K!N0R>VkY7iv&gU0hc$t*2}jeu#5+{ISrfkv;C2juE!Cdb-*`!WIM zyAP;J6>NAS7JOG8>P!U_BIgAe&e%dZ%Huu#H?S_HX3>wLzK&frGrX(yH2>Z4A$M(_ z3UG(CNVSHg$<+6sd_(XXp;j{&S^t63s=S_2uu|it2DeXab15P~)jnx3Q-eK&zC6Pr zDn_m?7e^&B6072d`Lz$}+gnYQV-qb}1NkfAVeKDLKTwQy54}L6FR?jR_F}1``%=vu z2xjv={v$i4d*!mUCx1o@Xaiv^<7i~Bl(4QhZm+Dk6?u zZ?rFL@y{p`oY^%kkb1wF;=Nj6P|$2){>T@HLr^B*=Vy?{tejTncMPp?F|fj1OGKzI zTZm~yED1LW7WL)mta}+>%5Kyn>d0>g2_>*kkRIWYXY|1%*2F{dnkgkYZOkr4gjIX! zUNgOfEycc+$%jXt4%?l|KB#rcyW;Az;@{E)g_|W9Rv|RcQQ6fMxk$3V>D60LLIhe( za<1!*kTe%g{9Kt%6SV2(R$1FLF$cx87$Vhbg4bbHmYQB(Kz9ZXCQW8BtFxDe=nB1w zhCJrUk5jbP^vk9<;SlC%7A}j~z{+#oO4JAI<(DFVt{}TmNQf+?2dRxkM&YvMrIe*V zxVeQRT$50V*huM0UdnU1n(Rk5Qk#a)<)@dnzd?oD%Wp?xIK!hMX96^Qlxzp5~qzIt2nLwR{74lwNHRdG+ZJ{mz?Gy>) z6oM6bfwiWeB4koIo5~vLR&Ta<_^=D)OV-%J2icW3FBP_{&BMao@}68Ta&j*~j}Ww= ziMD<4A#SdAmA$bDbu3ITG+JP8p=~lTxa!7iIXZ6ogy)nTiW!jBQ%5w25#aIr!Qvmo zHQo%Z6d$OlVy(t9{6>&=;-HVpsvzB>t1CB>q&)~zCD-Am^x)i?@$1YY^hhiM-$=_p zk^EkXxrLyuPk{eVr)MAfBwPkzqN_75BseIjAAo-)pkxFE>_2uZT$h&+?ucm1U+O5l z<2G_^p!BJw^iiQyC&wxaX?jfi(xX#-j#z`e34`;-n>-Sot*nuZptOM0PraRx_yLYt zU(9J-8HUa!vih)z<|$UDnD!+KgxG%bs|9Xyx!*ao+=fX34?o)|KE~%1%+BaPWsX1+nUa z5vx<09)Tu;?^)_g0r6yj&{j4GPKOYJTw<)1_56f_*#L}!?5n>h7^L+C^ce%ibB23b($J;^2A>WuYi89ZHDJvA&1R1NSo9cFJQij|D@8 zx^vWhdoPU^Jro%bO<^whIh;aVhU$$zHJ~?Wk1Hy+A#6N&?Tf|_6LkJVR&Ir%ik#JK z1FOu9Cauiz$^f~;gSemb{eZJ5I8F??xBgQKz^YLSC;hoN$@32;kD z``uue9Ud;M0~vmvAI`pp$pbJ(!}eeM;}Px?ykQv?qIPr)hn+5*j)Q!5WH?cd#%(T$ zi@%z?_}tp%7D-3oEv~>Aw}pdOUv|4)YVh$>K@Ic(JR?yP<-HG-58=!{x2B|4hY{w5 zH3-52SpP5P=R^*e@#x1}f#M&yKnctt2qPf&2h@|tL7%~)g)rU|A0+%afwHrEE-3?G zq*Hve@%ms#TS76SYM0)sbQ_qz;5RO}3eK04>Dk5l(o)+pbHF8}KXmhP>luRTx15u_ z)tu#W6^m#~O~Di3JK`DQybe3$I&npx-$Ec7eTrgUqxFA^{c7L>^&Z9qM~taBLGctY zDgEY{`Fyg}z(O^wLF&Arv~9op0jT!u4B{C#2{W1Wuh8Km__bkb=VM4)3d-EDGx$mq zj|^_m)m0aZ8-8S&)W)aL_=8OUVsL(OiT}HKj`WdF*Wyn^i_Dw9&;XpT&LD+aQYwy* zA4#09%k8_WjVB< z;dz3V$PPcZEiM_var3-+&AQ_jB(UGV8hvz2UEzkudz}HW;-#)!-?8-SceijkbwF?# z;f@5)f8)$)JF`D&9}8D;iwU3e#yj7TK;h`rD;wr-*4Mo(Yt{KMvFPm;@dL_k#ngvtSZ`qJ;ox&v%=Sv{5LLwIJ|5Rr~s;ueU| z4SLyv;f8~p>j}^YX`$8L1#&R>BrB1=Hj*B@*S})lcauqDN z;`ZRLzXb_~76d6r@xGKuC4L6ihdmaJRjU%8;|m`*Rg3QB&7pRX6Ydx3A@AN$BURTTR~3>U<}+Q_IjoR}rZLV?g6WvA`_K{2 zK>qGtE(#)gpo2Q$>gr`kI6qPih!apC(F-Y3zp8)s5>;?&yBCmUWpc?s09f@ug>MdVMxMXE7gzS_Fx$lB~%o0Qq@Og*G#J|LvkOBwIaDU_6%HLrgp8x zoLW$mB$z789r^W0zD9o8voxGXu{HeH@Es?H_o_i8THL1b@j79bz$y^kO<|x2p^bC7;RRWm?ZOtV3p#|TNj1R&+MncLCCB^l$G#Ac8O|a@55D2A^0o7}|g#v}TS3%w9980*>s%12Fz++AtIepA*O}kM@ zqE$fNM6E%CwrN8Cf8Fp2-9FMop%?g9wI8ISerbe={F9<56o+s1#U&nlpQB2K=T#UH z_bKN}^K{VPraY?$CFn($6)TMmg}Sp}kzz`&+J^)})Q|aD<09&ZnI9$rtJ`FKuXj@}~<(k`{4enh<**-W-m*L*~~17*)U!?6by>fJ@p{ z@z9xcm9!ojoghwwkjW1gj@qEo8G$Z0Q)8JW=tZ^sPGsygv;966dSAlS%%%zIq@jHK zB*EQF!b-vTRHhkI+;I!v8szF3Gd*F zJwT{DOC*#P(|UW3ff?v3?EmgbGTL(6&k&vxo%*N@hiV=7I6f;47+)apMKce^N4OaL zpGJ4=E0c{b3+_QXP{Z1@d$|WW?;bpLlGu)o9->FALC8A?=apO_Z83ftI>9R_0PgPn zb0=l-?%v_f?(2=0kUJDOagp8HBT@o|9uya#vk*OlpvDO%d0cqN2i*bl*z`N+9SAj} zwNs>ygT~wbTz}Ge+<&L;u=DW?Ut4O^hTr7|%TrX#lM!UYs64u;V&KkO;| zqmW`nEyTfb-LFNsf|Ze7J87;$Vqh-Z72t%%01lzO0gSb9Wp*b_MAQM%n&Wn&ng1CL zPLxxjKbmC{stM&>!ICa-H=)g^(Hc4{5qTwB5n@L9!v*j{L&n`?gkwHJ#lOEDqek&? zxyCMH;&l+j3o2>NP0}k!;qI;{NqML#MV*FnF@T&(z_kHU<_~&XEhI31lut0`6OwEz z?lg*jTR)1Z&$(w47?{1P0jrydhGYKzikd-m-#9tKCS~Cl=r5dH(2LHqs?WNYh)R zdUD-boY5=fLMQziR54 zVeV;gHI&RLKO4Ksmyj-L@?Etr(2%p2qe0C2&L5s)C~T8}jZNW?TKeUF)@8LeEZjwE zoEF<>?M|p4^u8){EcHveXIw$K(4^gOQ(&p$iZ>+MO4A<1f*I+gU@aq``f09iWzt^p z3fWCN^^zxp%iBeUbiP@l)E?^;Y;M4&QV!AACh8+1%toCBaLVc0;!hln{Ghc}|4wJD z*T^qj^j0K9QimIT9cJv|wO&&xY;PMVn_2CadA)^$!Aug1D@U^rq4q-x6(mv0e{8Er zzLk4vb0sYSRK{j5!oSVgu8Q=u)A5q5?c4)#xN{b4`iuCPq^KF zXN0EwlPtp~L#Q$wNPJQIB#0~2yq=t`O2?G^xf<9dM*Rx9K_HvjZ+dv01Z-#;x8kKW z<^7#3d77N$UpN2So4K}Db;A3=5(QqElgel{-( z6@_%B3k~8@?YvLwqQz#Xh@`T(KlYrJiR*xS<6z$bG%>eGF*77Sh@S8(6Y<}Xqo4q& z%9N#a|JT=1(&A+2^}*rB%a)9fVrjK1Lc0Is`v zcW7^5(Rb+O>bIbf+C?Et6S>eNFfGO1`9}!cN0@lEtNNJ2#7!h?;9_Dh_>!W_+910m zEb*WZvzo4_VPC?q3QGt!z6VPOOd*fyArF--WdFQLcQMxx8Hv$#XpTxDJ@~EFgzPQW zU%_8scAqrTU_Y8nE+a>#n9lRAT9Owg@A61LnVU196|0qn`vlmlg!~Zf=7AjYdel`! zh)~T!Pd6S4hhq00to?K4qNvf0$Ofj=-PBxsu8fOur}Sof@jh)K>?z>=`l1n)U+bNL9r8Q;CGE zmfK+{qlF5Is=IJ9e~^%r_4Q^4mONN;ptMJkx@Md3c7p#%*v1t3OHoE$`$u*^GWW^K z=hl^N>R6J>kI7Li@*i-b0hpY=+fXrP7)Uvqs5jsSRh{UmS-=H)#cV=_9dz9&FQjNh z)ARI~(3{D7bOIC+iU=gT;|muiRQE7!IT*d2U8LD-_zXB1X!v*;`$M=da7Hc!)Tuqt zUJfmMgu?8c3i?t$Htq01dv8X!gpA168~?umv2gYz z9JvSR{NjwkE+;)W{z5}yugmaNy;+A!BpPrmp7tA8Omu{x-XThtAhC)#KZ>U(OAKHK zZMg|Gpq?4@z^-4T#HX&WLs@4-v|8ZHSHrTf-b8+zcd$_Gpg8i`g#uFoM}RnjE5L@k zsGVlGhZH|46B^R)g@6mnc6u=d)-u<_!>qrhD)gaeo zACAdM3%YLWW!%@oqA^5BL>FlHZ_sfx8nuYlWkCdfe6bCxF`#z7Ux5?jt4px-m4<8nx)vk z4~dHXfvh*?D)z?_miK>?DcK9TpF$^L-wK@z-$vTieXq!f3k!Dt4W*C3 z=f9Z=yi$)bG9pjp zTNG>gM7`v}|IgmLuC;Y+>B9eY6^ffI$;%dCd}d`i&B-<~Cv)&2CQS=TfDA}j5@4KU zKl}Nvp?~hH>nr)*cN}WgJPDjQ{dDhVXLToN&YD%DMvWTh8YNe#*!QKPq(4F#CZs3A zc@M?51GjIYw@x60v}$+Vy9xsmiW-di$GE&E^+?r~^dlsktVv;j=-VKc#xw1jCczfE z({zSNT%$wCY#vrdx%Oa`?;#ePZBRu8@2;)kUqVp&Hsg)av9#_i98&U8k-v!M4|}77 zr=Yi#tE)Lc-9EyOv|7mwhP1Y6RHdJI0N)e!nj+o%_vbgP`=uWFOqdMygEJT_pUq+=BcAMRB!y$lgkuoAL5^k}YO6n}Q z69Q^Yy2}7u=ufe`LgMO7-zJ&=439$~2W=DMS6kE4U3$GjF##CkL7jro6c#&+ zO&k4__T<@7bAU#FNaHylL(D?+NkUT4Vq*H&Yf4?>f)^noz)JEt5-{9|UKeBeO8-)?$`&gJYea z-Q+mlBJ+%JCJ9B-?W1b@Tnh>ItTyDN7W+DF9z%H{9{dJ#K+0XlQ&SF;yeHSS-l7uo z%>%GqdG8Al-Q(coTn`sCs}#K?ca`D+EB!Sp;VZfUgEd>Qbu z^QamO93JVX4vPFnaMa8f&goXaueOd5Z|b19e1vx=P-MPcbUUb4 ze=YPSV^{}c2O0L7XQ-DuHll4fDjCIl7(YyB)Udhw#TeHu$vP=^h#DO{1`PsNOi=*y zC%kS=h+8?hN5+R|J#fFST-jNw{%cH_498efHn*5AFOgMv-X+JFc0QzEK#YHGf zr?Bx8T_8V|%}fjAl=2=-osnp`zJ%0k@ICFPH>R8T%<(~XBz~GNXBgN3O5gi#t@(}s zwiq=s$|b@Cxrq{LJ3X`zoW|fu++jf}AF$~krWKZS1{XtSs};n{q#ElYE@2YeELv-M z(ZJml5*Bk2S=17DoiszkqrMspDZ1f9=|)UJt{GKh42d(OCoofv>JxigOPg<&HpQcN zQTye?H1%S5&GXNJ{bJ&~%QdnPv$Aky0LjI6c$Z;iRaa!>nWe1huaA zq(hF*f5hc7g|F!9cccoT5Lli*4Sm{30%4M!kWg~aYLi?D7ou963O5vk@7+QWLSde) z-6Aw_c=ZPmRaUIC-M{Re^qayEai#GoZX^Wap$qWJ70YZOOo;zme7Qo_Rd)y0o}K8e z(Zv4DI<9Az=Up80;SGA_jXKgs=-0U74n^rdnPL-lQx8A+fmDH=AepRRA{!y!nxJDo z%ZM!o@mHD}P|*I@g7Z>dk?}olvOzS5$!9&L(ImoP zD2o)K!2!UE-NiLLTn{cI2jn6m?SYe&o2~r0ASC+k=9M6Q&uRvcJM7g{k$$A>o$6UAHyHDtFMy-O z{lPP?G^;~#_XM>z_Hu5$oNL@u#e`)AXe*&2HE4rhB!vX1SNishYsY!~SWc}AfiIY8 z2CwbX<`(K!iPTL`q6p$4^7MP713%U0B-%V-wPx~&6rtL3R=*!s>-c|{E;!Sm$N93D z#Bcj#NYN?Ufy*YjR2BTRgh!_>AmM?=p5=|6Kj1N%6g39-;!1Nk(l$m2sg~*{aV%=h z(+RRZXWS%5e)v6% z40sqL@GHzs8`P7f++12&n%i31V-7RMsm_8_YkLi<{zB03TWNONum4sLH2wJZ+u`r~ z_m#eD6Zi0G(y`G9`ccIzW5eqerb4(_{_XyD^AJ<`?&~%Yc3zTB6E4KPwZlVFBq~^Z zPEM+0e?N59Iz?MxfN3(mmZ%~{%+v?0g=(E}v1w;vUO!fEP5Bm^`ZYb$@8MD&S=3u} zv85l0vLd(3jgS*fs>v#WO7nhpBCY3QCP{OGI*F{s?je>+-Ra~{;#&&CEf_e%~G&RuvwJbLLyyNEhw8NJwLS`x4~H#_Ni`>;{R#LmVj`6p)R;m}>CZ zdNQ)0GJ@PKBT*N}%!R-vTH|g(&LI$NGgl{|c!8i=g!EpDpY&v4p~`h5IwvY1Qq91+}!%Y+~JcszF#-o~*mzCDXJ7+(y zK79A+)7$fz^)Fu@T)h2!|EKr;dsEG+m+#x_=Wm~O?w?$4J$W})7+h%C-0`` zDn~!}=1*Uoos3={tv@;1c=ht|_@~kF_Ri;pqt13~|5NY5<%^dmPkx@+LJ6eB*2ebA z<)_Ybo_xHa%-Tt!h_~lRg4<1c_ zyn5R?UtPMmynnd1e74k|`S`y1v~srk=27d-r`}fc&gFV*dhzku!qeuX{a$B!|6-+e zdVlNA<)h_?-NpI)CqEDO@6SEm8EtmAHXb)$Z1o>6KAx#O87(}y(^@|KxwZWG`02&R zi}g=0@3bEe+v__sR~rkx&G(NkpC3J%nL2#3zu4P38$5i}`+4o&iziQCT&_N7Kd20* zws#)Szka>^W%%>qT=&!Zi+2}qj!%{k=T^IKrn~2@!-M;SwfU8gA3JMHmpIC`{o?8K z>4nkjJCA=_xoj>~F1MD>=gv1z@0@LZ>OPs@?7g0P@oJ~FFn75$H~0FV|I}@;w6>Vr z1j$aJ7`kqgh5akLYG(aA(Rcls%h&VoPp{sbygQwl>P`JTeD~;VVdeeC>+P3UgNGmA?H|AXGJpAG>(!@? z_Q_G@V(#(U+5Tz=+x79~#?)MY|6=Fe>XXl}&)>b;UtQdOKXd-`gZ0P5)jJypFZRzy zuQujitaP6I{G>fI-05wvSN7kH-aT3we7tx6@_2L9e>@ybT~56}yMKT4W#{SE$*1FP zck99G@a4Ua^T(~_z@xQz5c@L^X2vP z2N%b~R}Wu){^|4Q!P@kT_0t!pmv3HwTwfo3KECW8uXX#QpI>ZjK6o{J^YO`AZ+@`y z?s5Oc`D&&2`r<{a+daSYs=qKZxc_o-esH$fnSaw>fBSjy%l5;~2i@iASN)YQ&yQx# zUVXaUe}AXHzqYY8v;XnVO#ASs%HYlYHxGaMIJkN+^Ll+@e(iqi$&<^SdmFC~M(Zmd zXO)9?$A^dW$M1iB zJJ(sCnwdMC?p)nJoY_BojMcp}e7W@L;Z<+>UHjq5(Z!?D!o!XE_DitJv&C1H(aFs6 z=k8Lk^Rc&nI``$po9@NZz4tHL=kMn~uH8BP_<8Zo)st5*<_8~pU+(?1aX5Ez*uMN} zrv3i%!RD|v)v16HJb(M*cE$o;Z})$C*dI-AEO#F?PmiY`FZW0D?-t)) zep>9l-oCs#f3a|N`f%yf+t)Mmi%%a`HeXykc{;zbcxPsDrT5d-uy;7Tc+=du!8VJw ziiuE2LCCExGu2Iq@15a++~1=aw@9v4F^ey7-NqqPPAuiMUR&Q-T7#~$H@EU)eGg{v z{U;Bgcl}r`cusZOT9}XxCx!eujzFmHCc~e$k&A&csBNSkX1rzv`j2+)s>={(f>4x5 zeJW7VplfK)iEhMVh3*p*1?Wmt8PSl)fZ)a-bq?VvL#0cq8$?47RR_c{;DPkLHjeS} ztaf-2F4s&R0a>(G9zDpn{(!rPn?x8B8EIKVuLQvVtlkrA-%+8k)rBX*6~{M#^Sdm4qi!-HYOu5ljjasUEu>!20^4 z2A(1uDw;DCQqAh7?j#-)B)9MqZIoeTSQ3gN4Toq=7zG{-&d)|up->S{I|}A>nZ&Eh z=@cZd`~fe7EWMy-0?I2E$J`dsRwZ3&1J*&tO`NmGBHw|~@xOYZh|~fW*kpD`0c|Oz z$S`{#s198hAc;k~+8GYz_zYCzR7r}QnP**YAR-M<)u7XW`%-XBBhzAHG}0uQK=f_Y z_dINNd#P^S*OGXwggm_%Wa2APPfy0|O}r;?!rJBQ!7hy9Xf)iR;=TkxWFAfYg`FWr zPPlEIJ_o{%!)edpj#jKp{xb5Dc!Q=DF@xXoKC^zN@K0Y zjcEJ1U57cz=%6vChN1u(IU#F5@W2|+7NbO~(GQ5nu`K-3TAdirjNA;672v?O+Kd%4 z_UEfUiSuV>SxO(oqC%3R- z_siKkGBQC<+Sw(BSD`f~{$pH!e(D`$1PO{7l zUgF1QVM|oMGPT&5WDG$~?{t%w5TQLkNoB{W3&Gp)t z2{DLswM$&+>LQMiPgS=pF`#NRLP&Aikar`{ErL=v$UI@8aoj0~e{Ms(W2mqiV4OB1 zUfL$kG!iIAtTV9<3**zDWIUM|XS>^mAFf*TR3swqjmJL)^M%UsYh@n}qhktc{!iFZ z%1oaC#jqX^S$IK|aXM4%9VkHb8;Bat&PI>x zJ~kb1NScKA;jdhF>p#8j$)IBvew!JZf7x<72>-3tn?Q-@$Ij9x z*t1kJ!4h|ZBXUn3fw!M2VV@J;Ctk~E~V5K)z?SpAoe&cL9f zusGu;Q16ly40Yx0)+UyQf`A&&nDEaeBR;-lhJ26Xe~n5VW1>u}rJ}3~nCi=y@XwpM za8rdjt=XFVwrdnM^R{3^jyDDn_8_@1A_P<@eA~?db{b?6li;Yr>6!6=Z5=_slDezO zC!|9ZxHv_4G##D?gHVd;b!jl;wqO_|lUz|Id#aG-aS;YEG|g#O&6NluN+d*GFay|w zXsArb;%5P3ncKrO0+5sWM;p z2yd^Sw3j2s_gq?}L)@Z+q(0)28$3Pm6D=edPtcFfE!c3(L*w#seni-W0mcv+pNkne z51UX{Mk9_H)~Km}_96R$%tFNGT<|2F0KPh+-rx!-Nx@!Y%}LpZ)f?Vqc{{X&#^lxg zJ?lUx1UBuzFUmATov`LyV|H{sF28_-mB2k;KU?-X+*&--W_|MMfiVaRX9H;p4f`+U%^I z=;C2RT=9a`ylMU^VAuJVkOfM)hwRQQkZ9Azp>yZ-5Y9w_L2dX~?fl!HWeJ5)uQofw z{t5g7yNjA0ywOL^fUE4G60e(@G~ej=aY*SL?g$s+a*1HsO@bR*?R%FS#{SNH?Jd|H zllkp;(A7$s->{j<(ec+48jP8?TR2<5jKM4b-}W-Yxxt_b>@wRAV`Ud0d0|JAJA>p= z2C(GCf5q|T;!{x(49TBmOS#oKB>}=q16Byf*(mz+ns4;e3<9>!+Mjp%ua#~Ki48o{ zoT5`Xo#p30^TF9s*d`X*tKI$Q$?)T6XN`W&_qDNqC4piuvm2OS%s4` z;WE+Z!CwVYI<62S4rpAK9G+sTUh%Q1EqsJ~hwz?j&ND&HeYn^CO!keAmM2-6XUb0C z5;~DVLWObcqX(&AaiTjS4ydJ9EY7XGV{`+kfWQC1J z@Nwj@*@j;`Iw0eN-|S$LF+fHXurbAB40PM(j9^U-;b(Ag_LzQLXz7Iq;N#+kXc}-^ z*q0f%oi=)`bsdvBQs#U7HNSuy z#u#fpB|jHUD0o4OtYe-^9ZSv~6Pdwd1YfLn9H+h!{4)5Cb|wSWEe330ktNktQymb5ix zK0Hx{kRUUw!vIAy0$cA7!h)V&KfZ3B)F6`6CmmHGmcc_BEvRzfqs)2JEb!rEl>sdA z0&@n9hC^iuYsLGoEoU}}nZ;`%Q|d~#N0`5Mf-N7?`;bCMAY#HVTpAi^t(zS8+w36N z4WS_+pf8<4Uyj$op@Kq|aziAB!%D=f5dbY5Sp^X%&YfJaiKB8Ns+jN;D<=iKLi4}@ z7-UG2k2Czve)yY1m7e#b-~_}f&5?=-W`;mBZkUqm-ebmK!m;U7U^&K$%A=UEC+Yk+ z()U-@i8arFZ7|g>U~Dpf7KBI%=K6-1@?ENBV!%7+(Y;O^-MYd}UL#TQ;6zen!a9RD z16qm}=192~p#DH}$ElkraXHmMeGlqL$d8`LIgRsVJcvo0^}QXT(Q^r0Xs|6DXwn1# zxkA2rEA(~?$^?a6c;HK=nFCzv9urCZWN5E{Ia%G7eaRKlVy1G{BMOixBv#oR$=Hmvm(uK@ygW@)iIeLR`Q7R#cE9$k5Uj zF2Dh(P(*e)6h#U{wcc2~?WnSHtmkt26KLl~+K0w0x}-(^0NPzJJ|6?$pW*uf9tFVg zta+QbbZ@s}x@97s-V=NC~lW+f_D zFJq^3VDff5qiR3m-5gkY55d9j+RUlpEf*(V2@QrKjYw7^1# zmRI2%e%yj5l}Q`}TZdAx;*a=2mbI_-$+HD=DM_jo3dqVSY(1?>SwGx#a6m&GGN>0Y zn#kA#RLGG0hAups%zNa`^IsdLOCq(6ddq}&HV3QShFQE4D|;N9L+K~lpw zr$fWi$TMB+Y&u!Lz9JrY6qN#zc=&IyXVSdl+tkBz$n)Y=wJWFv;9v9)>Je>BO4zMz z%0Iom^za-R@+}?imMN`NrxgKGAtYyVxZy?<&xHSTb+Ll_lDQ;~RBI$^x<>zz51`a& zA7Yx)tIQKl1WYs21o8lPJ?kk^E2V8+h!#Q$D0oa8J9LEQG^=-raC5X#Hf(34cLbWt zo^@)FT~IKolJ_(FqJF=buDLya)9+8t(*IOlMe$ zU&W|$5&)Kx%hqL~N=8haCS;otC-Rju@1&mHPEUp(q@D=jmS+*PFopC_g#e>F~)`yx^SDw0>SST++GzGh>E*g!R4U| zO9eAE*RJHbk8OygZWr!U%Kbauu5=-$zpO@#kgfB>L##G+fi(FdJKbueSqn?cxdmWB z@0})UJcl{U0wi5Yv8$ne2k#ol9Nd|Q_%mZnByGsF!to7ZIQj({Omvn*NQyU*;1D@( zq-T+n9JUa8z38Hbs))vM4H;`iR>981xj`n z)yL?CSl+fqCT$`bQeLS-P{htTGm^qe;4ZluwodExOr{_B3Pw|oQM7y#7;-7XH6ocL zzMhy~)|juy0=e;2?6{k(ZWvMShp~k^l;H@H?zbTiEzK}(> zmDfB_*-WB#s4H4i4i`l6OSugMG1?HaNB)py+;pQs`~=SS*)0o(>3V5%-JRY=>WvYf zFCQsJ-(#iOm8hgKBUCj`V6v4B8X<}(p;SqH!P@Tb-^ocP|NbNXBZp@`oulqvpf~Fb z5$1{CyEwcO>6wg>hMrR(6|j5ve8*s=ItY}M+bbB7^OU3wPfD$oCzW`%hq;K5Z6L`X zKpVX){#G{OWw)*8M7)u#+FL&5`ygy9lCMyokoIYHHFMV!wz`k7h`Yh0UWx4D-;=ds zT}AKeS0v@ax9Navyxc%h-tE2Bxpzc0r@aA*Lj7ZQwmW zzYYF6*^9~a1=yHD#hG@Zf)S|3GaRPfQ29A9I!dEg#gDb1FhDC2_e_CsjDP3M$hJSw zC9Fe^pJiAF@F1VY8-Msg=JU%3dBuCib5esjzYSE5g9fE5Tl|~#Ry3e?CxRndJ@0-c z?8nq-zSjEM8%HJn|13NtNl37Ds~xdn;sD*s+VHh+L8D^43On(}bmvR>reHghHf~Cj zkxwSQBWyFKhyj}*=ECagFv=+*`5S*vLKC9S(@n-vlj>5IKlMb2y2!~QN^J~(QKK7q zVxr9@Ub5@qh9oPH3+`YN#iN*L$T^9cAkBQiy&f;9r*u(3-c)P?^P|okJ&`M`PdYd$ z6JsS_RXPG?a`7G#Xzhyx8e_aQVIgsU1y}}LSw1bGr5+YTSJ0byDBWklB?w7% zQU+%hEfJ3^#svITetB?y6{D}k?u_tFnNZxLaA*<)2pzYh)!|RGTI=qt72ucEijiEd zbm-FFaD+glyc_A(?f{i5fHX6_(`YT?33+cSj14-}SfB+Ef?sks_6{>kBmlzT@}{=v={hLqs=YFnC5d_#ti>+D%2`gTdC^BDB+Y2-;{3z+%wP(=%GBcB&Z5D|Oj)Ye0Z6vF@c4b2H&tr! z&eR^_CrAS}&Y2fy&h>>%3%I`QrL?aF*$>;>u=^k3|qu(4M0&-80hN`7g70*j%|+;#aOA{ z`Db+|;gZzw+@j@zQnaV+H@f|3p~-3|al~3WEFv~sDkw5b+cx+jqX?uOu@)Ygd?qE` z^&4{Vga)13vQ}2qquax%nE@y9SraFg?JL)aAXO7&!xXI|E8h$w-IHlMGrAQ(4VRp* z6CpyleSTmg^V%;MJ4N!@;Z?`Y0-#IAd-$ldM1&~opl{zK)ltHH{X0;vCcCJXL2}Eq z391R24tc#j+o*~Xf4SYaVI)7_N*0^$VhjzI*ch@)pd^w^npj#UE=OsM`VCfhqCbBq zXHy%)=0V4=WW!U1rh$YGDNx3xGvC8M`O$a$*Z<4 z{ER=ta;6ZC5%jmR3k(Z7(okTwkA%94mp7$YMQa>!2wCW;9hL`RQD;h4GI~uy3px;l z_GuG`Dv+6jMO8n2Bi;j5{JK!`G2YjxK8O|j72$dUL(*3Roy8a+F3B(e*9mQg2%Oth z39lLyMRPgd$7iW;?pEpikA|z>7xYd}PKw_++Va3W5FZbC9mZAhRFgDbe(5J{4Q&Ns zt+s^BKQ%uR9)Ok_GYrXu)`Ysg$C_my;;NIgdWG@b5zZ9j5;7>1`a;rftxX3NWmtb9 z3}tGxrv!54GcPkqfz+RXmf~5Zn3O>pPINof+Vi{Be1kKcKWp819Q}G;_>~5o!tckq z%VuJ*)nP4I?q)QP;6vrxyHTQc)CMfJkAS;KJp9MDIaZdA9Zpc*I6ILQQx^c>LyjUW zFR2TF29X71y|8$$2?=|mN4=2sfJIiiA&a_murjh3rgfUJx7vHW%YM7!uv& zA#{7msu#H4t#cu6a=t);zP4Po?1}F(R}!S%sNOd0u?Nf+6S9%h4sZ$is0&}ay~M#y zi!cFl>I%SIf(wk0Xe9nIm1270KT9f!6A*ML%ek;8Lg#Df5g{oFc(ZphL@R4#-F?u$ zSk5oO0PCrA>Ow~+QX1!EyKnuV8}C_5?19r5BT!`{19P&mhBh_b*9F`uNyZ{WEvmK> zuw~N-`vu$hCTzgw5b*$&()QdogKYh4im3V3Or%jSZ;D%B7*nFWJyY_^xe0)RSTJdd zmT3dXwie~SsE@_OzXbP5Q6~@~NLFo!+j4b!qcuZfTEC_$r@lb9hP}dhYFkGY5&i>8Pss?As*{@LWosHO zLD-0}?#%q^(KJiIDWrgHG|^>?Q0rx25*AdntV7g1Z$UkXg&E8GAo$zd_|>PMSoCP;+kGzymmDXybD7XBEV zi|DHmO1>z9k9IaXLxQsml9^l2!YzgvAO6 zNalFEBu@#?0xEb)LvNAO6gMKXV0`tY&+@rd+A%nkkHp(aQe)87L2nUukOU!OPWVNN z+O*z3uuh*@Vtz#Fta2fMk=nRyR%vJ1E!?A`e4wnc-FTbyeXWOv40+NDQ4?%8Iby)) z&Z*PGqf!bv)>K+t3wqL(xN-vQ-huiPzXE=0g-XHN7d%z9v*DmI4WsF~jH@ zkiPAoG9@jj1%HjAMg{B~3Fl0VzEHiIiP83_r)G(<mCnroEA{@{s5q zrT>jF34)6AMgfWRfg;rcG8~#%fM(cf4sg3^q9|D}V21%HRh#rome@V$K-izR_`oh{ zR+vZl?W;+Ms-h9%z#rHj;2fd3s7_p(;Azm(CaRF~Kn7n1(*L!F zxz;AnTL;|%Pp$c=w|_6^-?ymOD+rU-TM-wJI4JwkY<&Kekzq25(2Q0MhHN6^OveZK zT|`%jpFmruH@W$=1p8%MHK>`_VqeUjVN{?HD5L8ku30EPElfl!7^ZLvjM`Y@o+z}R zQmC>%=pC>Qm)n9e`^Da4a0D$j#QfDVGy8a746kibc<}i@sw(MlB1oS}he(29XQ3HH zjmPke8`!H4_pr?%9yR9ek~xGsJ_s;)M|=MWqgkML_#IH%d|2g zFslN;Qai-a4AgU~)UG-waF_9~)>TuUoZ?y=D29Br4;2jmCF4naMX4T164JS>o?DNk zMFr})SHCp-QQLwCD2PHRp$!=t4t2&&u_n^#b=ZJW1GO60O|*^yzMLE1Ciz0II(yLG~78eEP5+8l8wRobh50h}E$Vju^d_SLt z;F~Oz|Bl$ghj56ELFNgbrJ9#2=C%L)kN?9gjgM%|)Y?&h)TBGp>MVO#7&^hDKNK|D zk9c4jY#iHOIlef`ojc~7z<3g<<#6(C3Z(zg@W}}j2LgkWf=Y+%HKx!H6VilJqP)dx zUq9X?{h$Bwzwv)Rd_R0f6A1qi1`%eDR1qOqNf{BZJ^{}^jn0(o5Uq&Xw3aeAkE551_|O4Q8aP(}XCS;cl@#FT8ryOkTb|BBmSDkwLv6(B-x zepw2rO*O4eK=N&dnhgJ_SiZG4CAwQjsFMo+NkB9nj;Cv-WeE)mi3qKx(HlB*vs4$d= z)F(w*zTF!S5dgbU1UTP3s0>UKP$EA>1LhEl@$X%B#)3+i4+~hcUHsyM${^`O z(!W~WLF@daIe3eFNi+^;hnUwW94N>H?45JOoO&Zp@h)yWIqzVp;kvAQA4%C6TspX~ z_jj_!=PEk$YyE6P+dhzlY--fE6r zFuEA4<0WU<$AzJBXSf=^=3Z6(^&82^5}u&D-5C%lNHq!&;0Xk52y$Sa?odddwB4|P zEH$dgGXwBb@*q2@hz+M~W$rAbNu3-_+Hf@n2OPyieQj~VI97qoF^KhQj)ROkRf6*qeWOnP^b0=MJM(} zEX+A8lQTPLffLmsFImL3`Ti8zMW*apswl8pO!cs zurCF(lFxuSWZpEa9zpUPbX-F@hG+l|STeOR7SmPq`jFY#Ax?D+;o(B`J&%m=1tmwA zgD|5&Dn)ssGV7#8HfOYWc{4^QoRppNBnjaU;%g{Ku*R1_OaTp>p-N3m^g)`?t{EnY ztpDENv)|<3`lnE+0Ho`ggh}9o1DHDBATe|MFn^*nPrF86ys}rT!V%^A7Y&r7Gg}P& zkORneK3NZx%Kr6CvJ`=--2nD?p@zYhUFib^(br|2`qR2`MQk<6_X;2|ssVpibH9sR z9flsl8x@WwShYMX&cSw1&rh*UwYm6e4^DVt==cxA7th(4pK+bdB_ti#aetMEF+9Sh z_B<34x4m19ZeE(54YL5v+hKHF)P2-A3IGt$(7l2&ZpM)1$X(#qxCT;z%XJqskT4GC zNK0|l?G{j@>knJi(4&fUaRv1O5J#-olE-7t+&{T|N zUE4CZMVj=qSn)j2y@0sB-X`o>ekowGbe}@0A}+VpoO1KKh|EOUhDv^B zs_DGM+r*zlJT^s|^lwDq!XS0G7PJq`ZFJ4elmL;)$%-0KYf1&FVL|y*Tfn za%Ao@HtRLh*e`uZUH`T54K8lmk~65g`X8yAT71dappRl`!==xi7IIPmwESbYX31Gw zOqV5HaZv~ofZ9Xh()J8HRn(2@(!1sDy@mC~rM;!i&GpSKY*6^iv+s7+Hg>jNE-mgY zyqsHmvBXw5RF!S@W@&S4d3`NvgfkZWryxXyZ^vG-rRRuw*CC=lu_vvzg(F;u&Puf> z-bf<#sc{hnu4-iJpISp_M|LrQ4)UH)kOVWkv^hc4M8{%a#c z0{E~ZFuqL%;*4Vh8zDVP62M5G<1Q#c4TJeK_q{W@@HM8<%{N;vIxx=7mH}tXq?Nza zV>UB8yRo^nx3xXDy|cBqu(}wuH&ou_b<@-?gF~n|UOI7(RTv(1+A0^)Ux4=;6D@d4 z4;S)${BmS#=v;QIrR;7S?e}W&oXu zZztu@5{iOy)$es%%@Y$RUWLn8j;KEEASt=j?Nj;C7r8Td-XGXfcKp0TaI%RGBO2ji zS3JL6{n|cYR$1IujnZg50obaI6$xp=r`rD>Y%BzjRW-z5s$c7pU5u{7Qm8w$9i^6fiY$#GY@zW49IpcA_$Yfs)XLhfneRLf;Dd1V|53gzI$wu zdRzb~x=3=8T@%j%I>h}uxl*jQPEyoC^RLx#Y2lh$cr_)ByEdByVGIDH9zjzsZTlY; zI|#3x(5ZS&7mMkv>d=AJ-Or7$c9F!^G(KP(k+`uv2++70?FG&>$_7F>8UGE7$vu{= zCRmf0LLNurTzT}xoO?b-{?P{(=RWO@P&Yx#XIg9t9mxL5v6KwGD!Z!Gd|(OF`NIn} zoARMM^&I;IA&QXzabV3703f09#->o-ae9s)2nyWNdp`Itaqro-K6x2REDahJ<7mD_ z!4A~!{JDVEchamoEM;mX1?%34?cfZ~gAC9e3V8h>lt~dR^LL?<^+9s@ZX&mwGFUfjY6N%0RH`-m81A1eO_7#8=2UNhc=Z(Vk$+YB2)PJUj`I*!#h*FTC zbuoo6z)BkRth~4xJIT;*hKP!n#*ZF^#qqCv)p6lx>iV4hL9+)|eBIi4znRtZ-km6! z!$#2m-!iiH9XUd78E?2{9pPaijsI0InuD&$NSbKlH=Os8S+pDke`@zph0aMn+rf}V z`l|Lz6qM%a2j51i78DxHE_2~y0)?zMbm;HK^cXj>E>!|>w{|Iqd1C`@Q&lkXGnh#OlVml(b`vvwcLPy5i0{+n(RD6Tae?g0zvl*r z=d7Rh6`uqj$ya>y=UlfHa|+ryL?B^|TksF~>a5?yl{WM$dUf;GnN8zIA>n1a(S7%> z9qnJ?Y?NegV}H{?8RvF;G3cM4;ihKEbLS1TcK(tIoc98~J?GxTAl_20GybFFBpyim z@N&cSQ2z%d9sSNw5@C~r4BrV^mRA_UZ&FWEh(@QxgZIyC&js?_2p zr4enncCix?Cec+@o98%9bJ_vvbmV^JdW~OGaDXXyPH|&MX+ot{i_V2Q^*ayurL zRv1&2bm0$bM0o0%X7^Y-&oA^Tr7u6DSuQu$_%Vpw;C7*80+rigIM$a`R!H?DlNS7C z2OH=~?>{|Q)Q`%5n+fW65nY~Hbyt-mQk;}U&X*J zxw6+**!OkDv+R#q5GDAVZ?N#T(#*&pjpY`eOHu#M)E>)%+CnzfNDbLIs7FYd`DiH#wJB<~$u|PBWDuxF%+@G< zLvhp|j9e}Pl#pKlQpnO0KLQneh(5F9KsGKsWuaaUk%Ma?5{Sexth0dW;9s;;P10X; zdHe%CM`8r&9}ie(Ci4sj1BEXj(#Q2>j(6diElw?BFa=tK-pCour^IxckiLJDAgHBz zC7deiD4DxujQMw3YtqgmDxg?NsLIi~cOhxJq}S(*^M_<(Nxx}#NIe)v1t-g*kANZY zSykfY&lr-w;n+?LhmVG}jRz-#=Jf=s)=^h0g@s}p+OM3D^1oeJ4`(B??I5Or#Y=WZ z)O$R3eoI6)WWWK+`DM^BTh#-XNw?TCN?=~!Ku{C)R#W*W#*|Qutk&PEGn{P!+M-V_ z@vYMw)oaXOd;COf%KY@8u%uTt#w^hOb%;f<#pZ{8_pf670&m3#E?(P&$bHM*lO zhgH}zgOod;nlUT$K$v1yRd`~Cpz%InS6=Y3SV3fVT|*j2ODhN@~$!|LS`a#4@~B2{hyozzMprr#`V;TJ>&D%)WV z#)2gQ&~E?~`>A#=01?IoVO%%`XeLh1if<3D8n}5I1b3aAK=+nXNFSWST;2O9W^mcX z3UEoxlmtaxL8%4`>SDsSP&(tP+M$^Xj0X20uK6oks2h3}tT$8nbbVl97daJRYD#Mg z8{p)id47WYntl&JfhvX&{DQ6dg%XHv?CL;_TIYBZsETLLJ$IAUAn@^~4SN-#zu^&g z`4GjcFgp;a-8q1>Z&)m04!*ImueeNn4&3p?L@`vrKYp}T#U9WXa~;hrE+G$R zVQzbAakk0}7SPR^$S&PixI3YAI4?@Xvb5KZvvu5sr!4uTYFC6}*A#fo*P3J zC_R*7(bTLPpwLEO-C}2^uB2hYCENqqB1dqGoFOX{)%f75y1_tmZF1~kKP|O@(90u4 z=IFADykjoS!aGKN=@SAOBTN({o>hn)@?v}lv{<%33^A8Ho-N5BKsFxgL@N9Nz&+&h zH3^$Tq(=^jAf#iSaJ$h7%e_t!03t;y3M%Nq1+8Q&LQMDx+qg6>#$z8Yxzp~KP9xcH zSoa!FZHdmN5;v1X%7^?Y-lgqxUel6(a(Y%gsMj*%peRPzMYd%3LULG9#bwO6b5`fB zDjh)lNYbpRIVa8G5V;2;2qvq`bhf4?)xS3y1#|uPVgQ?Gt@AWSuH%m6h;thY=c1C~ z25cP1>!0`9Q;?($`O9H09%_QL4hm>szd<$2IFIu;>8muQ)}FCVK;%B z0WTnz5wutKFD8Oi76UhcxFAzVIJS)IHbyQ%TfGz7mq#VYJZLh&_C_v#%3ugGFYL04 zg{-R~Pn;J&OTs^uYp7w7^>G({o}z{of?fll6Qpti)$p^aasNms-u9Mus>$dsQFauEdceLonPT!}HeB>~#Qv z3UQtCV9I*ChrQmPI=!-=)epEV;TOYjrScvTs?#Q_6;Mv{Tn6B2LNE@x!{ciG@3#RH zYN4Vs0^lD%y9jt;d`NOV>$Gsbpk)C4F~I+x0T@^|>b3!gRffeVcfxLh!WuS4Bib39 zpDt#jYZypp@`GMRC?O6(6|%(sM9k`IJgtRlZ*k&7s8Y+d!%e+Wkz5e&pwohG-L6uc zfEnB>>iE{A=*WC$O7bn)1k{qF(zS5^xlb4;N>tX?Ysp98S8~uj#B97Z!gJo5Cf2u@ z2KoWii&6YmrtUUEY;Qq-z06F5fi&N{^rPqFFq{ZHba~HpG+l8QdbmSke@S!qJVZVT zdT&eo>JhCPb^yG2;CvSIowDNbz4))bWSU4}W@R;=e6}Az}EsK4#7WJ+ZUh zdzHwP!DAuU%~0V1<8Y!yIXpmLLIO4fSMkQ9pmAy-uZa+PIJJ926dKGv86}y&N3a5B z#EtB~LSM2j!_>XmNr&t$|`rD>+-j;s;yBl?MkpvuN5`}YE#w&XO|zL z#L_4jq^u>!fi+Oveb!DW=r`Adgl6k!&fvinQY4CkgYM9CmF|rtR2EFs%}Q^oTC=Vt zGGwEbH5art;OhEoS!wrAU#udYS+;GI-&j+euW-8zyRU>pQGwR8xxojHId4fy*0Ag& zckB3^=)Bp|0ALZezzE$%;$M)^NPZE36HZNrhXq=Wt4+=!F-7ZX+Ono|po6$4F0H-V zkqRYs5!Q+qee%}*AVmO+dywU=G@YPkzmtMN&{E~7Y3OAedE~fu2gdSZr1lr}o%iNA zPC{pMCnq=R1v-1$%i=w$^_iq9N-Zz3J&PbJG;zHvBUi1YP(a>Fz`QOG24^54{c1%l z$)X|cD>F4QR=K{AQbG`G^(`v(C^@L|eyL6og4yIaV%RjE!S8NG9SUm`6sj3fP!K&q zNy29UQ@H9T&?9Et}*DgUDt|owi@sj zhwrK|su&|+Bxk5jC!9J=wLn|ck$}+yqg2#a7vkacrR6SVL}Zx;#3E}J>JqV#ZkN(w zq@*c14nN>sKZ7^Cn;{I$g-U|{rp#!zf&CEOMGuOR@!L}wce}}w9qfWUB0IzfnC*50 zn;%`&Tbr~qMT8MeI9w@;ZfbH#+Ha)QVAz#D4t6FlO-(dZ2yG_w%8!ywNh^ZiHQPu5 zkwhBP#uW8Px&4)T^9=0^NW+%O1x8Et?!u~-rO#la~Q7?pZ8l|;A6 z`|FWDFE3?rU&5G2MBW4aTjCJ}Gj!0zs7UssKbGVh`(bJ1_@lZFxC@nu(_E+WR$ zI&MHYHlZ{waAg76(AozXcQ^G*0WdyOxh0W^ruh(5HK>dOgRGKQ#* zm$;XLti53Ju1(i#%)j!<`qSCj=x~c1>%}?+!VFOu&cv;yTxcht2j9u|@&_dQLzs)% zT!tL+2v1hv|i!WIa^Y_@9RVs;kq z!L)=;Jja)!`4`3=R5M}kdms~>)~WMoNvFg&FR0Mls0APv3#UmX!D2Yq?LGB7lcD#C z5!dw`Z(ltI7KX$4_vIs@cBHZ=tc?3YQ}PO0Des5CkzFuCI1|!1)x9ji3}r0jlvER@ zac9h%A~6e(>dU2tS9^0SE8gpdG9&a{;#W%ZtN;z{B%Wm&`;jnJe$gFnDb1#6!r?b& zfrdI_&J4s^8c^4GW`9D7P7{6(-T!YugB% z@>!52B%nl|Xe5x)Rm)SgW8}g{T)>i#A)ith0|IDb?ZMswKW~m0)vm&UQvG+Ig9Uz( zogrMntV(sNBQ%bbKN25sX(*M=!uz&;5gg4%K=_$mE?EU)1MiXvhj<%`OMxFQ=%J42 zz%@*fc-^&L3^#y{B=(jf+?G|!$FKzl;|7?K8wvx}@x6nMxA*XtXNhH}M?A{uF)u-t z!C(&R8UV?pJtc|1;2LK_>=g;!sl{&wF6bufM9@MMnIU5xK0TRHQV;kY?|B5`_*I_S{skMgoC3`P$~i_rR$oh%!VnN({v%X( zQ?iQ5`n35Ob&_;Ef@=g1F!c13c-*K?NZ1N=b>o1T^E~J}8P^5Znkmg;Yxz100>4ds zEX)KT%N)ai=~=p94ef>5xgE4||7Gnp1K#tDgahh)gX73-6 zJ4CIq|8jDHogm3>w1p8)o4Bpm+b1<{mE@GUrw5cuM$Tu%?+_elp{x$;`f_SsMNO75 za+7IrR#XsYiPCLqq;%iH1ji3>x2k#P%(IgG9fvX+S)^Ec^2OuWx6iha8g(=poegKF zrl7$&l}+{shg0o-YijxdvWAJq$y21FK*jOoN~U)~l{l^4V3BBBa>8RIYww#qZJU^Sh1ucmZHQjh(^vl?uSvmI#nMFjwm}( z7w=eEP(!Nwek}n)pJul**=0ytaMH!jRJXBx>d%WlPJ=-{a1$632Jy83q`!m?irg*| zViF&z)MTn!Th3-(so5O#X_ycVwJ4er`l6m-*DK=O=IQWI&J`x^P(Bf50)G^5BH2IM z1r!2ZeKaO>`e7>jl1Q-s-Jk*sK&G#4!E}t>4f6tSB1O~w4q>>g_b)gMsbObcCaP9c z%*7O-OjA>Ya7wR0S<1B4*rOd4Ebh*;V9=lcS==xqVs|sYGb1yA!MOdd|M8+Dcjvjc zGKaxA+(`_71M6JN9{~upkM=De4_7|bbbwmph|I&m zoSJdy%8z*zzwJgo@8TAkMOge!{i7LxMCU!w7qkxHy%gO_@Z@F_ALNY z-+EpDL+gaDi{L(PJktk+L;ou4O1wY(R(#KCD8_#YAjr#Mh3kLR%*2`V1RF|81j1>G zGN}+3)>R%AZ@SYl;1PQz+JrnvuEn%x{?Dw2%|#9T9it z4dKo_DjOG^EHh5Q3~tyLHfByCsOO&GF6*qAiDr^}$GPMlj+sqvyn^`@_IIN&GQ??0 zMO+XGVli9It1MFyotLlz0~7Xm3rWbN$|zW4YePts*z@aDzPkcNkrdP?s5W!k%WszU zHs-cpZUK+DEyD#W_VEaE6@DH$Dy`E%6ZJK-2DKdEX)p>8Plsst_ot^({~6OqMwirk zL#4aXk-SoGhLo zUY?_?;>+#(h(#C94-UGYrBfNTf~xU@k=H^@f7ZAB+c?3S)n>fglBDanNj85veuw-{ z9)8RAo+h()|Fj7j6@ZP%lmI8;a}nCw?~eA*p{b1;s6vgC$PFAv9?{Pr-&k+JjwIoX zj9z^TILm;{ga+w0Zr*B=G-52ZaAA;bBEy^QgE51m#YuC&Q9K2_2~)svegJ`0I?{=9 zTc4iccqMkKohgkFzzt>U0S>1!b4Xs+kfg{j{8iX&lYDwKLfsK~3S{5n07o=iy+l&~ zO?QCl@)_2%=_V4(AVv&Gj0D8i=$ngxtkgzVXGXm49U~m)1KktKDt?52k6UX}O#<(R zvtWVrz2Wd=kD8m-Um@}6dNP_$NbT;-U$E3$-47yc1?U$gx1Vx0i$ST;|g8>3B;CTztuyl_=uS~N#Vbj0^ z5*@`a3hJp5g|8t*@J81OcjTpH1RV9+E}nNm>v&niH#u zp?Aa>HS;bbjp28aYb+vNL#L|kFa>K+I7Be`v~___5qDPDg=$BswZAc>S)#cf+PMsw z6+oQr)Rn5RQ^Q$Ib64sVm0HBxZ5gEcoY!BFbWmlGkp@KNl&{(*ieA&Pm$>}0UyJ(> zg(|r#nQXw;94$#M#Y-z_S%=tiF5TyRs3RByjenC}W`B?R#~oJ15suLSsdZb(%~a5_ zR(|`Xfj5Cct;}G&Pd>u%;-z{AU_0L39zz{@pq$`T6jvB&G75R3#A3z|^m zJ3)FL1PKV+XN(f`4(kGwxLMJGPojWR*CyRKNi~p ziAvu#F&{47dYMMDHX#*a0%2ca^7*fdK?`3dTR(Kcuz-Yc zxaR{%SA22NVp=m=8~owj8L8yVP(9CSrAwq4*%X>Q~qY1xu;d z=Q402I+j&Nb%%A-b?LYHPe}K^p97eYW_KgfVjo4S4TSJ!q-_<5w0KBvuJBJ*Wk6ST zGFtFuxgHoqJWatCZpXqqu7TcNl~|9s!Ac*|T%soIzq1CjKMz)c80~5ovb{^7)`5%Y75s7ujhbsq%!Yq2d-mDFx{|(o~;y z7@*_eRCU4ZGasq%!43IYl?zZO4)XF|9JaHJf4_h@tcAH@ld+z3`K1icQm7NYe9~bF#S)iMU=QZu!+-ENEJ>w zCIZOSUke8P{g&qUPS8I=0y7Xk+(S)v)j~uz`{Nmv>%M1&ba|>1Yn^GL7(WE2weP>f z88$t`D__AH_2ucfm&f^+;gl4(jFS-IE?g>Ivj<`0aH0a8KZjbU;eGWJMnUTb?LYNb-O65VC^(9dTM(`fx|+BtTbX%qQVx z^UJv07mRIgTVXFCH$cS|`7SXmglL0l0egZ4&uRxSk-_-LE5`2wJ0{E2cEAWVry6_J zW~isp5fTQ>27o~HDsal<-kYiv2wEcSi= zLiFm|5$8Oz+U|Tt*J>{hJM=2n#h(ujAU#9ka1G54(?=ilyI*KP%cezMIyE@^Ko(!@ zcxt<2cd4YU(=E#yWin;isEP)jPoWrVUZA3)oIgRCTNYWoYpLg2X-)N#-5L+Gq+=FL zu7i`SdP@Qpxc=}KTHNBg+(P8ymYsQbN>u2>Qkdb;pf5S71Zmu=x1of3$E8Z<9s z!$y5*Uo{Q)!-*3oCJLEhFp9DRBfV6>r5R+)6_60J>BSgG(WK7G3@vwM2hU+xSre_Q zQ;QE)SJ}Bt5XQqjH5No$HW}j^MmmY1{DPm;BNsYHTw`02m>anKMep*o1!Jw)PMaqDCASW zeP}km{4y*5QKcOLjN8A9axP!S!0|zh1X~VwmWv(+ZA{KXNV~)ewzx)sFQYPGPLha3 zAg$N5%RT}FpF&)6l?Exo7G^KQ=7=Hh8Bu44p(VvZ;%%#r3RU(~?zy5y7&^FE$M{3a z`$=3U>K2jNmF^l4_)!;5Xyo0`UoD6O9ATFMuYF4{cVHbC5PA}8A%ayZ^70&*b0|!) z2TaDmb~aZcE~;yaa0N5fsSAtMwTD6N^Np7q{A6znC+Aj|06&LI zv|RnpRTveU&|V;^MAt*alDf=A&vf317|79Tu`J1Gfcdpj4x`9_HlXT;AFCTZKnPsM61~;GWGu@0!gH~W$jPi;@TzDfP;z9 z4kj4K9fP%(xNp*M_Fal3qbS@5>BQX1nY{E{p-$vmt;#-Ios$qL3nA;^sH-pt>xXI= zyaX6&&pj4{l)!ONPNI5>G8y-+6nr^$q>TY9 z$c~c9++>jSM@j!hQ(5WuP{4(;Y+$NzBDt>=VYv^(IN4RfZe7Dl@M!Xla+?xrpb8su zxPQV)yIub4IZ_ugc}n3O^6R=NHQq$RL8gghD{bM^Ud!{1u~3?@#Lr_&tI7cwty3L8 zUv|1w3Ut9D#{-qT!lNXp>2#OFV;mv(dBF_~5U~`=_t;RvqD5IzHHvNU*v2&pnffC7 zUfFbBV-3rK$+%*ZbZ-YM;VqP9BTZ-5b?k0Krv?|Ya&<{MoMgS0`V1`Isjek#G}e;- zW?L6+C}HhCx*+7Bbef4s8Hy369q=~gNYhr{7}V(y1Wq@SSg)Cc>1eMTiV%+i1jofd zA(W%z@AYt{Eh-C`T`AF9Q5?l0RNXm|=c4}WnpWjTWV)y^K(<{-InlPUIa)l|$UH5X zs9#j+nJA2$Nbmnh$}Nd~Q}(?eA;epBEkI$VL{h?C%gH1AK|&!xTdZdYgKJ`XR2g2l z++wwt0t&L!*=!ZEbpo8;VY*k6XNWcEqXL3Y^_v| zIS9X*S3nXD_#DdS%{%zbv$1aPPX10XX&1)4&F0ISZdJU<|g*KIcm&m5H76cMi z)v28GfCKn9$*SFSi|U3&trCyO#q+zZ&sbbRLa z7$!V{lCZQJ)G2b-$1SyN%{O?27tS3&m~&Fz!bO@0LFt{j4*0`)iQ5?H;{%_YQ4xOn zh^h~Sp~8Er8GQOd;EVRF6F`a!pf}t8*X~hYlW(;>y}x9Q%XjAgrK_syp0AjYOllo% zuO_R>edgwJF=;xPw(A+beJ6WR=lW0(o2!g`j!t0JR$;OI0;jN%$Y?8`&epMj<) zo=Gt!_zX)=c=limAWQO4YP427CUVq0fa92tF<|)C`M{oV9(ya=h^ap`P8!dw#*}Ce zR8_!U_AYssk`$~gv@l- znX(nXuHv8FTNo9dtle9Pf$sMB2w&NUJc#dx9KuLiZG{HiYVuS(+0rWrrozO$=W3{a zS4bK(jKzM-O@P5VBVLuCS>;@Xq>?vap-t)g%`0K?SOqsA$ex=$ud$MJKTN}$POVkQ z+)10R_SDC=gW!AT))Pipi1-}bMGB#;P6B$GTl^K!6J|#>V-tIDs|@yJ--E+9ue_*h zw7!_ILWm%;asWat)QKA4%!Jj?UrKVoe2PT4d8Cw` z8Ce8#r#B==+U&5H^0=n!uxJR>u+xn!*JCxJM}PeZhG&nZIE+m>vuEBpRwYWL(RG zKyYp>P30nP{SG7y?Af>2Qtrx0Wc-btZo@tuYw3f9I03kZVCnLDkvq*(-iqEi>hxWC z-PpM^UWRA&bhYAY^ys>;qpGvPIrkOcXxXysK3JFAT6Xn6nPGx^5`Tc`+uB$B6watz zC63~1zhh5Z;w3f_mngRuWW(YaeG@9SmL2F6FX$4B0=@*WCpo|}XK;7*4veMGhz2k) zQr2yFzPr}n8lHroWbyisI$EQZP1V?qoLQy=oD{UvX_sXyJT;FBrzzz?gt^6!5Sf9Y@e_a0v9`@N|O zK0&|yH$RU4r@!&#)u~xyb}sY z=XoBsuc2`99(=VB-;nT9WSOPz_gL$r)2`P(w>$gihn5$nP5t2{uZu-Lypffkz@BbV zxt8I;a;@j2IqOlLMh%R+=Rji3;XO+s+2b+eFDSa60C~gqkO2yIX?JyJh%QTtTWUul zu|;j3$Rk-4i2P&VUIT9s0lFT0-bjQ!(H2&uidu=ksw+Xb0X~*WN}_zy!9eM&T0MVh z8){|Y*N2)FQ>rnys>0N2a5~hM^yX0m#Bt{sVg-Sm;@ZW*6$pUIL$Y{Pctt=`W54FQ zcUX|K;Bzq>I<2FA^%itoWF0K9oaNZ^YRv(71&&QmjRt)bc0p}XR8~SLk1<>wp&@r2 zHUuZQ$Q2r|+;PjIWGKpC<<-Rq5#uN_c&OiLtzTMAVyz8orkbf88hppi5-L#z#fX_h z_n)1O_gKxv2guj|MA_-3&8_A2HBm2wMP^FU@QxP|he1MFbwjKzBmSi~wb*;l3SnE( zy8T)K5{gzCM9WOQSCxtC6LQtVr$m7A^%bd#f@5WXZ}(yC6@y<2cN7pS=V=N+;~6<) za{xmCe9DWJHX8B0I-qw=kI1f85WCsgK(ADN5}Q^p6hZ6&hT}gfvR_QX&d&ON#P=*o z>{bu#qqqIRF^=&9uSrj9`WWPhH#Vfu_(cDt%@6bqzQM4qOVN{CM>qol2U+M5!{qAJ zEy&6Fc6H(HB8iu$EW8KLZjEw9W@i_d=67Bgxlz{^{f3cT3|+IDr(#>Bz&FVw5nn~V z+Vz7g(own>n>6a#x6QjJ+O&MjfsqoAV+7SYijYAyF1YvyXGh4#RNq!xl35U$TZAZV zzKf6}zmq(a2&RyXf}K}m(1ZVFwSE3qF16<$y!(XzZFifv;aD@0c?6@O7q#-$;YokL z$=drht&7ZK=^uG4-LrB91~I72QxY~7)&w{dt?@bR3v)zFV1a>W{F~Nn-4~AQ%)ENM zg1pn?9eBr#sOu8unMsdKdGr8+w5v|Mdyb|oTE->g=lJB=G8~aE0-pW~n*du(qQl8+ zW+Ij|S1EfpNKNm^SFVdl#w9$U66>n!rd6x3|4 zO)5A)S|Q2k(vbIeakmcF934KBOGA<*^6R%45ku)5j$H_1l7-<yFSV|l#r%! zk-YMTmrhBF`-oJz1S8p0iC;f(qqGueb&>63Upw1;l5T0QqTQz)CzDcC3n@i9051Zd z(L;3SyFk1H!9h^to+$scw52s~`L15dSsf-I4Z66mpcw>R=#%{dI1~xR{QyH;u6NdH zXDXh$AHk*qFHkZF7YYA!7LvA0jBiw`SfvCHX{=#Oc_I@w$V7LzG3b9rYMstFD7r$< z+>>9=1(Po#4u}nHcp@8QlRRe0+_T_>nafSSO=P*?(33&CJCAY^4mme-=rY}n$gY60 z8*yD#Qq$d#!m`rGou!o;1bq)8tcsg_>ffX6CQF9%2h^(XSzHEi3iAsZPy8q@lXw^R zbOUiT9A3VBv+C6qL0q^Ah)+P4@e3U2t05&3Pnno#>eSszPQ%AV-+QQ0i^EFnDf~jl zAs#@#gl$LJ8NC?b1v=m99pmcZUUhvd+%l9(zf44`FwY2zz2(K~57md$_oruykeBQ` zM-H%sORoEJ7kll%}MTd3zg}6ZALPRQRMzn-mkC^a_!f*n$~oS zQXHfpr#9`X2A=+h)f!V3bnZPI`@`=2z|D-mSDv%30@=OnsvI?~t?w|Ch?(i*?)cz$RWJGt4XYj%oFaf;!E(ZW^3|W7> zx3#mew8;~T=H4iBkAP&mpJ{@hciY-q`~*WYnP55yaI6HSZ<;7v3B8tViU=Yh1iP&X ziDeTBM(-Y^3Uo=c--MM{$G-dbQCMO$oSm&r zLZ~AyZiliPv|sn|FFf^P3^?sE=$?&096ql^f3Am@1qxuoTIO(l0sD~qQ^j`B->?_H ztyR$OXvYvC*ox!?pb+AtY$;HYJA5&$Ax%VoSt?ZY($sPxhpkX<&7?+4fV>e`#V)79= zGim)hjZ5>c9&yh4*SjG!XYGCWc6sN`=_x{da$^|ErvSoI@U;HGgq`vM+r>W~gbHF2 zJTdLdEc8x`7xyxDYr4x8-)9M0IdQGgun(ko3Yb&_>Js4PcF>rDc&egaDdoV);hd>Y zB#+fIc{G4GpPMqDaa8kC3ieGT<%X!7&^_pOkX{AvN75&_SX%bM+hJ?1=l+wX^0)|d zNBPz8z?Yz__=3MgN1`!^wUcx%WfZaSvLy$4vEstQ6lo@~6pi5n*>jpB5pzAy>Oj7b z#4#ptW$_k_s1B}bBX?n0lj`5Cx(U|>b!^%PcmYS)@!kO%?VCC@7=2aS`Py5R`3H z7j&)QiNZa9xH?$n?jKttP<6aMs1I~ZsfGZ$gu_@+)QDoCWg{4&~-4={QgjF z!Rs^G9kt-pJjkMgGILE>kT3Lm!P z{UfR`Qvw?jS+!%GNs=6xUWTBDWC#o#KGG4QaJw%o;8m*%41{`2=6ew6@_JlEBv=?S zVnK7cI+_ES8moovaQ_UFy5MoQTnY564Fll$RCu&m^g9K_t^%f+vJcQ{WpSZInY6;L zQP;W8JSbd=4Y#>{q(ne}5|a%zTjF;}7yutCdATS>;e)l8`4llGDdSM~ei^aol8%@4 zrh}5V3kVO7I_REJ=#n-&;-)Qmxg{l%N?zK&=#;$PLcUDdD_EE?g39K*scfy}W#(?WXDqoV8&wS%+3~F z$41HE{02sBZ*+iiO`41Fz29_MwNOO$2ZF%N0SjLysRSCmOpGhKYtPBc588(t(Y5R%+5BX(%$1k>gGR?#3}qG1b8dnft=LLE)X^MU>y*p3&&WF>~KQ zuqB@$-=p2O%quRrv`#Xy+)w3VKYEQo@Z8GI(%#zo+7e8JMcf*90<#A`7ixY?6ENLS zFD#`yh?hnHY;g+Q9EK^MDr@y%b8*OuG5hz$bNDLuFWno>><~u|Ps~34F5U$C&EfhAVpa@2xiXs2U-VB!N%J2dvW#}9Jkw8|P)GFc%z_aORD3_)iS&4O zioVEo1U}LBbXu!=u^iz~yz6JDQHurKi?ZK60o8Yg^^llpmtF3Lw^vBc7hM1n_5ukl zxT!?-3!E9TVYTR+|H3ME`*9sOqy}nDH{Qe|BZ~W;X=~Osb(V?btpMq-I0K@TPA&^q zL>~&*jcSJO^l-2kdO)WQ!F}EdKEZlT(E^p%VSwWSoGE1Rgy(RZy7`A4VC)l>gJkgP z0q%EUFxSCT7g&Pg2sQ~^04r3axL7g^mk`(FvatQPpO#Jrrj!&ylEgzTrFs{4_3}uz zV2*EfvYKZjq~%nQO1SCoQ|B_5FAhoDWV0%0cn%98!VeZ!Y``KB_(x9ml%K?TE^HI| zAa>Fv{AOIuOXa*Aot|jYZ+IO}a%7%E-FAioCySiU2n8+iapzEc^b6451_2lK3NAcF z@%`F9?S5nf-A65a{Dfu8A2agf5Z=Qcf8Lj$R~_b-^Y;V$l+|J@_aDlyQ+V!sqb46b zk_WA;rhNQZej)L3#MVG_DX{YZr5M-;X<#43z&=O=`yd1CgA}k2vcNt_0sG+Qz^c%Q z5UMckBgTSh>YxaXKtpO_4e%(r7^%R7i__AT+V$Gxr2pGg4O|(Bo0}U#u1MwyVzB6} z#djbSmsqJZ(DWH=5+^!FwjBs^0{Q#R!4mESJL@pYL4ax~VR--PZx5dSHvQYo%x^Of zew%st+sxzNW}e*UDH+>A#kCr7Mt1uC{oM~zto$D+R(@Ka{QHl$?ctBJw~*nO8FBK~ zKW_j1$HEtJRXqBQ0`t zb<+9gEzAzhJFpj+Y-MFx{y|rR*B{5pRb#Ym$(SaW)$p2`*rhx31Nc(AVirf9yz}%t)(>**I&GH>_Vd=y6MYJEI??%X*LrfXlRFv6SX@&HSPSk<8 z>jP2D<_W#e` zyZ6O)WM`xQ^C?<-aT>(}OP-mWgt6tL3mP-Qf`DWvK^oo`G^k_fCfy*Jnaug@=Xutp zYE|vMn?^#Dnf#*UH>UTlU6)nszE-W;et}nVMPxEimd|lL7a8>ALS-)$SDnBQgY(ws z|8hB$^6W~2Ah8DTiL6Tc7wS^S7>C0oY*_bx<{|Meb=<<%I5{}}mZ3EQAoO9LGLa7d z{qXK83E%5GYx>v zyVn5^MQtRh*krb+J7CCAu{Mv0C58xoH&k=!5p&|VQdpr$q-1%drRxSn0vc;%e)4!W znz>TDR@u4#aYdOdERCf(x!lj9M9`{5IcjZ@$$a9RvtG~w%s5|~Ubfq^r}I}Q^S0*T z`W-xz5@q+2IeG2amB+7mPzCp-3sq}Sp}@LVBkKN1h`8Aq`-cNl*5$z6Z|AnE7um{E zhjn9RyC}gGEx8mqsd>)eV*B`5_~w67is_F)U2Ut{Uk+_$poYK`L-v}ULnpmQ5YXh| zv1g=T$eDqf)C97o$W|^{o(J9?4iG#O-;sl=#25K~e@@qksXcr%2ds_Na@Z{uMz=n$ zX)x_zmY|soX=myZR=C!nm6KWkpw98~1tsBPh{!S^LR&4=C6jtN@!g*Yei5Z?j`JW7 zLeciUFMAJ3DmPeALy5Vq zAyYJD%D5N$1~lY1{l&5MMC1)RL8-||3H;f{N!qCx4nu{t(Jzc>)Z8!OK8Fbi?}?-5 zR1;s@;+>6V8zSx_G-z(L&qvQp=zb*oA>}B}Rl%=Q^>FRW@cn3VIeTWN0Vr@WVUMfX zO4!v3@45xnDUX}O+_6(2E+_ZoT04wxz0!VJePlxPF&$v6~i$Mhlt9S^i`W2aftTIW{$tdTYMzt)@>t z&7fxB1|D+t92>-6+kfR)(lHVwtAaw_Oj5?}M@JJL`fP8pH#`Fam3l&`qk@QM_|pu1 zt=D6by`2ecAf(43qXjoTuvDEsNs|Pnxc8LUitB_CcZc;)+kEt%8DaK#3q?R?NM~-y z>(U$#T>wReS-^VMp0x{qOeWx1Uw&0hq-d1-DEe$=+5i->fcu2>la+dVP#*1mulevT zrpwCxbcb+?f|-hm5kAzfB)R_WW0K-PVmbsJBTit~ngFXUp0LH+MvI_`hYiPd>F~LG z;0gyB@Z<3tsBhP_d7?@Ue17oR2x?$dL?eKw{$M373~SW+{OIv^vK9ka^Sl1H-_j+i zi;SPRArVGheIyR7Jx#JkU3Kd<=W5O%M9=Yw_+TR z0gjJG%*IHj335O6i53E|?u5blZ1hsz)R5Q=D7nJzty+;Bp}L*vXo7-xR|U*=%((Y^ z4-%sevRA+>>q=b|tKIc-{KV(h(P3J_t+ylOi$ISJy1?#<7MBDKD*}2Nr1e20w5&&; z6F1Fx0sYA5W+b2x7PmzwVfH`W4%|!hTVjpNU4}K{zALnFgUYP;cexE!=5ytsHZ&PF z4r?drikT;k1jP+8-djIXs2}1<`$Ves24-MGu0BGzk(}$vm2c02Yg8;wN`yfa(_{3a z>*ZU%tR|IdR<}P8N;kl4+^}2cIEy-bIr$!bbchgN%=Yv~o0WDYV}bSi1f4ola$x%; zxXoQ(G85}!DB>6y0xe&H2A37XC8pI{s93@XdmR0W@R+rrgusPcUK{h^$dn~!G@`dhp zITCc_w;i3RI<07NT_ z+Y5Ew+Yf9kU-LwswTnHyPzinj zSNDRF>+jzJ6^dyC4E8Tao0D#q(6q^CW+<9-h(mSFH#qr=nNhT4DWa`K27qOd(Xg-x zBNHsoz&#U8=MQQ0Qu;s>*%s|FND#~zb!AgPhM6}d>lOMCAh)clMFEP8)|tPhpO{fg zJ{9d*v#3#d>6<=lAu-!v`7Ly+Ep@_YTPgL2%GIDKX=G4ir(K$*i4>M>$5$DY{#>A^ zaUFZ)U__1 z;Dn)b=8VC7!SQKv=b?Qk=85RIV}dV0t!|W=ql-rjGBYi*fn<*R_KE7{${wJT6dLT3 zS*CcZF|)4S5Bu&rvH(W;*0!>qbKN5{I#a=XjujLO#3H6hDzYG+&!6}g7c++~*|6OD z0`J;boVSHz0Mui!;#jFfVYWZ2NuzV)p~*t=P4C|J(%@;?=VD7ym0}BLLQh3)!EP8Q z`aD~hc3n_SOW;NQNy3?VOJ}<%P_&~vEY0X}!yeUhR(_hmXJI+(X&8J<%kRMOLY4P6T;V6AlzoZ^d<()6Tp9n=SN*%;m{%||fgoih^9KZP=3q(q z=$GVfRlGVnqK$F+c7nYl$r6$5^vAQo1-0A%n7lRSL^jrz4BP!7+0Rn1bO-U7aR(op zjLiQQw5sO~*05!wHU`?NZn{4GelWw8H<0iB&je6MGcCO z9ScHvN-9JvP>2H8t5!wTuT^=$(-iHq0hxgNUy{rTtdc3+79#rc!REBs${3W?Vi!WKeS0?iLP$x(XWDy%BaC#Ko7f+koq zYL0ZTQ`0yud455g2Gz$zeR^&!y7gZ`-yz#j&wV1$it_Z5-?UUGYSEo!X4Lv4FMo~@ zzN#v&k%(jDFTZiRUx_=U-MM|8q7z1c!+J$xU^nHd3E;P{Q+#Gcw%$gkR6``Gw{t@* zl8PLIQ|p-tcIi-@#s$(F<)KaKH{V#Y{<|X?ACH0M)M-uG6S%1Y5c)<~O&eHvK}&;NKYgi6sT*mvH^KT&;rKY9b=t5cL4+ zebqd!&yz4m-2OPVsB5!A;%SFTAMNOlCMN%1+kbZk)8^f(^OBpBhFSGL@0)9z%4vk0 zA6vCYd>6Mm@Xo5&`OmI-6G+vF0-jTe|suKeZ8sb*ue(~`e# za!6&K#EU{AdCN)hA0EGa`u)L+$3JX90x&l~wAh|KMiD4HMkYddiU(D*o!#vpH=nWP z*G0>N-Hn~C$4~j$mKR+Fu%!*gW6rH$QmMN9# zI)+BIc^G!PTDPz4SZb~CRy};Gk=)R?Tmyn#Y%sg1uCVs==$S9OJ+`dkVs+^3Lo zxwJgZ)S#SVZXjNLRYVFHaJoo=ub7T$7pDmG16!nt;0N20BT28K>7_AQ z@QikLO8E4)$^hjHvBN`DOPes5#lHdu$_q+C^r}e+d;)4;MxAY(=JP4UIX6WPsvc<1 zvDtiiHV+(8UP@{J=cHG~8b4=w-b_Zmox22DT!ldon8u6(+ZDK6@(%#Y8p%;yS2T}G z5N9gUndDfKr-z-Zl#odg$7S#Ap==+8f^?c`m9ULX_MG*5(Kz1&LRTpt_xb5SkCPzL z3tD-`A~6AlP3juU-%O`kM@L_N$wg~_*2aKlzv{O^tfk!Nw5FANxQ-0O#Dxgt@ zoI-^tXxk+TjO9F3$f7^p=A$>dnQ2}mPvs$DlrWXw3RYRdP}pVTC}E=5K@%HTfWm7a zaSM`MMvrSg)bV`z5&5IeEJ$H%sOK&17!DzWUzREC=nkVLgomRqTOVjI!I0d#6H9yA$!SC3MN@mI_{lA9jAhYl@ zT*9Hm=%@sT$SzM3!`2Hg$8GlmR6?eYSVW7`EPsgM0+yYQ@Cf2-wsj-7EgukWUZisO zsoeL<3ms7YemI4;g3B6xge#o+)zfFZo3VJo1Ht^t@6g5>8r;&ra;MDLT+>_KJXd5j z<-ZYH_OF)e=MHXS9MYQ`zHDnS+s9j}JK>$xJhWP+1sGXbQV7uY$DB1Le z@~SPQF7qtqlwdhYCx*_x1Q?>pcTeC2IL|GN9lH@4^jd_ZF{3~^Rvir&2xS6Oo;$7= z0yV&)iE1Jzw~wFtwxI{h6lZZ$F^JOlbG4_IjxsXHraq>&;fj=^mhNM+{^WqRWPj_i ztAY{py#Lb5ov?e|^Wo(o5YgJ&L**?i5nv`-YMkSl=K*RykP-SgJ9HYQx%$LTd(f~b!f5v54YZhX<&*wImS z{shRXCTASioQdeIMBl}GFs~ze5Ma3tyvX40m&|ZMVfg_PPuCYKeVuE4$ns? zVk=c%kdV6QsAI5Bmu%r2h2zz*p{<*wJp1^Vfz8McyKqYWub~eL6$RD}(2^Q&U;>ny z75 z+=~MbXm;-jkTEaY;UwnW-|(_MTswE!#%&8^M3`8RF^K4dBto1jZNPYML}2P|fNO|o z@Z((CCNCu}DMfs7`PPBnXoLI8acEG_ z>sf3a7pL*~p5AN3zwR&faX2#n7F0rR94|(*YG4YvYE3EE7^0%#pjFr+x4@Uu0Ezg* zgUT;jX{qi5Ao3Jknktj^iKmMcXi_@})jv`A4&|y9%+`e*fh60p^M(Fcgorq~Bn0Rg z*{mvJqjPXC>*`-&zXihFKYg~ZAjXMGJ9nC%6ViAbnE@W{vM(^ z=?)Ryj^ojEcJcTgwoUrkaCSHy zo$Fy<5fM?-k0z^w=t0AbB)_-;)t7 zyJZ8htO3JYGF28=#XU7#nHUyb7@bhHIUKke0%(_GoEAbgUV`Jp2p6a0`e3;#kt1_H zHcIpRsWf$DL!K`(gNz)QC%owNRcqJMD~M!`5KA<`78HznOaS?+!j4PU*dpr~;j8YC zdIhw@_A_{hD)zWR{zw*r-f;^niMbsK`n?%S5TD{Qc>PlD(1xvmyNxcU2d2W{1UJ&l z`l~$l-rN#khe4Ax2W+&PPg|Pa@BNx=MDB`4!!)@A-eAjelXxO$$01rJ$oXN4>r4~w zU^i9*N3zy9T>hXhN!-Z^C0-$H{TYaqcp&%j2`=hY@>psEGMS}90#b1>hYq71=v%~sO<12tfg(*dT{P6r>im%^#$BhqIW{Tk>Ks}_aqM8GHzP8f$| z1bQjBaihqM@4%Dl$%y?w{bB#{>c0vptb2FQv9!lN8 z5)KI8`8ep4YKO?pP#;TH$vqOj_4bN9OI1Ny9jaJwNycbevg;2>TS3GN3z0jeR4@xy z4&on2+Na>#lIFac{LQxnN&2w<8(}y61#pq_$Tx+VC^bXgqY5+w%mr#0BMdyBf(31K z0py3$bmj6Fki(77LvZFRlFopkG-lZf`*0j1;_GxoJsr+wxE-sohYB|xZEAstS#iQF zXgPyPB*RW@>T3)>N;ml!bSFbf13#{p2bTfcxlQd*(jeI~9_Iiu%u6b3Vq=?+b$3C2VC?107B1y?K*)4%wEqtaH zG7WmJri?e~J9=c8*ky*W&bWF7&}%Hm=vrUH>8GvDKVwOw`cl`|@I&z0ls$Flh##Zu z;ma?DJ?iqZe<-c4+BK{yMcze~IiwBEttcHU?F<7AboJ5VjNZU) zmVj=Do%UQ$u+qB;ZWkPCdgy=_Kh6WPQXho(ZI76Ry14)p8UNdzOpX=5hkFsE@vY;U zkjWafDLs{%o|ia?_f9q6?sto)ywh*A3Q};;CcFd0fr#~F*UwVu|tO%yu3PCV9(kJcIP#Hn4LfC$5eX^lDtYC{ipXN z&K!gC(aJME?Q7!nWADD8wLbR3B?OgXFnQ}?zn|v|!h54=X-H6iVlcl(oHQ9weiGf# z`6-P-GPV39z}>{+J(_wlyW5IU%sZ}H1u8U5v8z52pkEd?pxyBqInEqBnWkqul1iWf0Wz?4KkIoY=dC(;n)p+KQ0xhmL*@9| zX&6^uU>3@bKhG?T)wj&Tbfw1LAo=L?OvSa1VlHNxiLlNXm-u7r4ljdGFN!S~3=0w- zniAV1zF;?_gc%8A(K1v9Nmohtj zE`N4iwXEp$`1CZYhtYB~K|3mC#XlA;Y+4)7((%>U_MeKjKA$~g+4$M`hv^i2G3Cu4b}-}3 zmj|)8hb2_DHXiT3ki+f|OOW_DkGD1-b4?EcmIU@En=hYlZfrd}c=>NT1X&tCz3>ah zdugTV)w9jL$4|C&On@>jR`1;hBfLALIdf$9wsZ)*BBWnqX+B#xOGlict z`uaD&X=y;ntJF&rQiB0ZAeP0=q}0;zd#U@&-Dn2jf6p*Ih|W|hTd1$Qb9ks4RWaZ8 z?sprP0(&4m!4k>x?NBf<-RnJqktP}93DEjVB~NorIw+B-Woa1?x<8jNonKKVeF%yu z5&-hPDhVv;)Do*PdJp!q!L%B9u^ydLodM13R+LgLZbWlKJTdi-rWJWvaY~HDBMR;; z**(lVKoeSt*?vynGIjO(;^5Gbq?=eCJUnY$tP&UH)x#kn<6>0MB&TCqfHOI=9PvE` zM%Sv9C7)DUEg)Tg88o%j{_dtlig9f63}>E@*#OtLCY^D$_wIIdq-tI6M|@$7y)531 zGgwyvvtJeU<29QuT(WEmaXQ{%7uC2`^7TTWJme|*Byi2%c-Z1nfPWI2u!NB;!6Uh> zn0|wsN6qDg+KEVqfaxbrc}2}Mr+enGY;1)u-DL}wu2&Wr>S8gP0yld%Iu7?(V)oY1 z#-F$9qDQV9YLO-EBqHjh2O|z*VERlW9$e|1eNmiVzEFxYqRaxg3F~q}_*}%ZPgN!$ zossU^oW?z5&?x21+nKb8duXruBq^y*{g$*|2~O>+nsJuxI=%P_a%uW0N3P{X%#EvG zr$i&ozgQsgNnxR&_{8j|&dDT=l$!`}5$qW2W~on31@vkebF9ugOEE}u8hC3owj4gA z&KVOzQrc#IxZVqyI>c_G4Gw-QGbX4DIrc$+cJU|d2pyb!%5~uve@pgE`dy0sZk*db66k_ z-Z>%yR$>WwkWlym$;CgW)5$dD&0PbToY4iy;Kv-uB-t6+P&uh8AqkT~mzdS9W)-~~ zyw|*~ynM|DX=D}o2_;R8QQ_6ahoGLda{s5v^@zOsj?|c9o9Yaf1!a^j0okAsQkoI_ z$r&wed~Q6^qsoMpvrCCCmuVidq89bfm6zoHN?KshK5ON3jxTPJ&wb3~o=YF~pAN>o z$@uh2IX;sfQTk?bjF`}ZPdgxd!4xQ%r!k2FnxcVvJ7o$vwknV=oa@-CNaoSZ zji3q{U8Q zaei%f&rHSH(X3|yi5%Q=6B>T@=0o_{{a@|mDxB7aTMxnL?a#0Ar|SCY4|*^01CCe- zLU(1~{L(pMy^jJPRUT2bI-DFxR+QMgJ~x_1`MXT5aT6K2;__ewx z3$J!|SeZpzjs@rx5588TuLeE3RR4GGuKeyHvPQtM%DzOG>)Oqx^BaAu?Ie6Ls{M4D z5Z1C0#TXBzhKziW_kc}}kLJ1p&2PVM`S$D9Z>=*gTd?GtC5E+%m zml#L*_EE3@>cv05*#7B7|NfG?9n1Nkf$1e>1DP0J;=kpKG&{VsztMmed*I_F2gJ|A z6Q*`j2vl>I70sSpk+HCgDg+g|eTcE-&J>`*3#{m3p%AYisj(E`qP~^cAw3oFViJ|Y zOL<;wp|h$Q)H6hGMmPdYPHN#G(~=M-T2Z*`{@Ad>0zw7I?aPbp<0m{^Fx&Wr#mJ#f zuJm7xe;!XhjMaQxO+ zpIx4xjt+s#!qmDxQqBeq(4@(E^K)5W_RY7nP_44@W#aJ4QB6R=;Z)BsFi{nONsuwT}2sc#MU;xVQRGc zpqjI9+3&86bwmO{!~sM|=56l!N_HZ`r5G`;J#Eo4DqEk7#)H#cfPtfS^f?m{8=>99TF2JCuQ>d8Vk;yFHR2O<`$;fP8=LvVX$i-pM6GFrT(`Ut0t2 z*R0aY>&La~ls|rDF9}KuehXCL2bB~LT_UVDE9uXd`%nsE%uE>g0cyqKv~k$l7QE>Q z>SBN0q(X_aDP2%vALUWC2kE&j z9>@k3Phhc^I%JHs7cEnzPsu4LUO_*zhYkK3mCNexD@M3DWn5>4d1|~X=%4x$m~PFI zl;W!NF;@rqQ~t{!NiMrXcq=Z3OgP6;`dy&zO6_+^KD(4afo|mb9F`Yuadt$SbQ2KI zR9QpKZ$I#WV%`P2O5LhzW`mHF%p&&&lC0(Z@V#>{WP}UZ_^1|Pww_oZRe<8nA;<(_ zMu)QSWKg#+OBrPZXeT%=3u1db+&-4BW$g)&1>AsTva>$t1SyOc6j;j-P|)ZPVKV-i zEj7dT#w*1{s(LMe17}wwQs=TYY2!L1$|z$?@7Rtue2F`=@O-gl-BSj}CvRa3>O-Bq z98TMAm2+f_Q_4~PKm&%n+LNJfz-?c>;cmiZ)3Wm9R#94!lOY=4@3D5iQlb9NP|cI5 zcCJy&61+(fpQ87^D0QfWIQ+neVF99?`SVO}f)*xHruYK>M;fEv5O86)I)@hcC!YCy zIyp0*)3O1^ErdiqOr}5o%jNJ=CI|Su-a9{)-{61g-Rh&^7%4Q8L}PRUE`!mSh;%2m zLq407FH-x#2Ew{ynUIj)*g$E!wJsY7Ck-z5}ROe}nPx3SA?xiG5Fa!zCXV03UNvu3hryfc)9+e(4 zm$rRigc;IBP=P7fkgF3pgkTsPH2Ag&CxHR=p6MN&F?E)7Y9-9C*)=EVq{10;8`Fb^ zBq_FxO;dO&x`Ly|qJ@*<9OW%*jyH)tqE<#z=LV!G{l7MbWz;%@<+P)S-Ayjo($NX7 ze;H=2=|45(miC7P{@+hSt{yE&J?+gul5PYOnqXofECeRKbV!CE$V~2NnRAa>q9dm* z;VlJHL1p_a)Ji%vsy9p#zaXsi_4Vj-C0`bgPgC=Al?qMjNvd>MUoTFsc)Fo65UHdW zRF-<3AHga@Z?4&Z34lpyDkVsaoi-R@YH&-Ou$>3yQ8)=~vP??2phEaY`%ow%VJE!b z)*bL%*RTT;jYHziXl7cd9J?#ra?y^d2(M)J0p_s8tj2E%@+QN*9pO`gygAAzvh_Pg z1m5u`Z*LVL3ic`tJTZP!gL7!vTvf1$S`o(IiT-31GABI+RzCHsij-3FOETqd1$lhp zSVJ<@gj!4%QyQD-@_f}O$yC~6N)D!-8%b<_uA=%g?`GPo+Y!u@ zBrMrD#4%G=xiiW6eJg01prcz1ymhn?HBdL1X|XMMnG&Sh(YBew^!f2O0&0%BrojRplBvVg9zP4Gk zer~viGOQg#+sD4D1v@Oqx+hUtvv0$S#c;%wt@d(qMJ3aS7UA!)f8tfnDu9wD%zpLU z(|Z7YJ{@-ve}EJZ;bTdp&%PawetYfjPN_Dwhn5>Ot~my-2X)zTXdMeho(#K5(~ zkt~b>=%UlPHUU1MYJd?V4l3ho!bk7Y$I+sYZcWK)RA1}gvl<~tmUiGhMKB*_ejKEy?#6#T>K z>u1CB;TUIX4zG5H@P^@x4SK}CBAn&%_13(vGQ?%WXR+$x*C0xk?cCG$@iF$K2vgY` z26MZf`&V=0SQhAz*@S?VW491>MtTYP0;Ah z@=P@|4iK+Zl_`o)Ygs_=QOf)bDB9U$xfGom_6GTaOGguk%JMyDGI#p2XDx&2M@2oy zuoW0^71@YE11J{8QON=I;Wa}5I6bf@`uz*}ea&a$(7j`)2CoGicc5j%9YbkW6e}p; zTE61q(rZGY`P#tqzZ*hn*@9d^t5&L&n#hrE3xp7s)7sk-44=iCR-ZeTD|&p2K&Yg` zPrMWoWvNldR?e#7Yy-n!&nDo4S6c|<43AjNxD*Z(VfaSO(qYZkX2apnE6dt0^6kWE zp|Bxtg0co+2+%-y06|;x*Oy;H_fa%gPN%ydBjJDQ!Bn$Uewe0a-wS_DsIPBdX$Fza zF1;+~d`p0i0$4!(yXoNkT?x$(X$z>ZX_%VADgLXM43%pLdA19@m2O{5j)sV};(rNk z;o$rs1~eP3+(TG*_ISpxn2IZQkxDZ`@T5QM@X{0RgW=408b$k(pEyjQK60juqgIHH zR@T}LE86!gh=N16Ho)RtTm314L}q7u+4|M$BP4`r83I|pZd`<2{JVxD^qcbmlijyQ zvYwUYqv7EQDx>|z+D~!K4+|Re1y99E+>17hoJN(eF!R;wL+oGE(raBn*a`_l>WUAA zB$H@r{Ssp=OS{!aE+2mDk!gQnoJtHy!Ut3JS4pt}1x#4lTAQ&ui2oIzX6@-(=23p>f*t1&R(HQi$z5_s?1 zmIx=^;XMV?`&Y#+-rfWR?wX&q&8KW^5UjU=BCjxsOXK?j9v+9$ zVkXuL`J4k78KaG5avS|}pq96Zm7(yj@`bc*_j8egwtlf(qaMsFCm9GMNr=DtC{H>= zD&lXA6N<~B1EsEr1Q^*VtlD`3BV)J<0(oS6!I-`LP6VE1{HwWh%xIK`QI!CJlUI?R$p}xCh=qmlnTS5yVsj!`lczYA z!tx5HlKY1hwBw0I{o+yY0aI?hJ&vy-hyimZ?vd2_DaLu!dsuw+(7pm{`@eeG0=BQW z$KQ`maAU;9$}^Wdl@Ll(Asn)0(OkKvjMeLf&h;y0C>NJg+*3$mlcBdL@z5ttwWJv2 z!7A~uL58io6##xT6DTUWZf?Kc-0nJE9TKnep9?f@X3HqAP`?lF}QrS@#6;Tz=9_gOvn?uBV(eo5zPXtN`B7rF}V$VP_ZQ+AyX!$ zkC$)NQCobVrG0T#1}2v+fH1b~n-~veUy0_*$7!nQ5^v(%(5b4toA4L@QhtUjqQ-~d zIbE~Bx4iGP^Zn^?FdYw%b~J6gbs^T|r*~JyAaRBx;H~|ui8D%s1#;Zs%ugBr3EP6h z`+hH=ES^t-fEi6NK|D$fe!(nx<1%Rnq!%q?H$=X8U_uc?(8`UU_!u!gOWemFD9z|h zqlSxdJAAq~`Xj78(1h_EJiL9<{9<*Y;45CAdsc^rE}44$cS1&pQ1Vs43tM|@zF3Vx=i_N zd4Cdy=)$QUaLBYSbfKOLbfhO!N7^n_3ccR|trt_32YgXQLUYsS; z>cK2L67(FgN3K5aJ3_eX;Tedth%ZSBf?D}eNh>6wJIm$U#7GofO615*w}RT9pEgw3 z(7Am2BLgR^#XQNdpanh?AGQZG8?K_O>~Sv3Rton;tcQ8EU_zZMp-rwI(c)^2>?q+DEy)XD z=pUO352d*}PA0&~kv)#-`HkfAA9vVl&;t4Hv=RGE2)$0YXyGME1d1>rc`LH;C!|O+d89u|4`wX6 z^rhuPYgSCri1w|M&QQ83cSw^={MCf)Gk2xdS0?YgY^87l zAh5*T6=bDGYh1yX4(TdW->=0OT_nuY!XeuncoX3F6vA_Zr8HOin)Si+>PMalGJ+k) zk}Q`e?|OTWU*hg8GK#|FSzmv)@#NL-2!TUQs^$vI z!`6}NU+7iF!v$onuw%&KAGMMiR!>hK%KwgM zgF^waYRWJ3lT00YYTWw;TW#$#JxuE)jFZUtCv<^;A{)R-m2^W*)?o7@jBy^Qg!=t7Lov7Ttt>wUz%abeumhQfs zUQrLgRlJI|{L8L!?QD*_PE@ybfGg;Qs1;{yOfXx03J^Ll$bog!N>&w~W5h=J08SVRYU$p> zy1cXOnBJeApISBG1Jzv8l}#9?`{~_rah*9!kiP2abIEsDFu2NBe{=RFw0AMVl1GA1DxXi>c``wO?4fT0r$dCh}j?gh`!y|&=9tVR5)pT^P-$YG~W139$IS}4zeW)M7 zJA)&N`=%qM3?FQt^2+92CRQiL_^`1lEwpDdai%KOQqW-&$dKu?S@)qH-7O&<@vXZZ>~{bvH?9^23dz{M5SZbGL?ryac3Eujh9qq96{JJp zlG;TUXBAg;K*u)lm+KwtWb5YYA>j54r=(_)MAsv5v(X4ZQ~wV30e>6fg<1HYvUi|Q zl}CgaM`w&0UrC~#ZX~5~=H<>_b0h3^ZX&Bk8wu+y3^w$3b^G+UaESv&dXCw`J*a75xCZg60Uq@ijwL zQd+Udfa^IGs(4)XpQP0+`+U^Rqt#UaIw;@#La+Ji@(eKx6hn#W*1}5ZSSIE)tt6gxOM0iVo76u@qwqeuv=4WWAIJSnY`I7`!VD~Txn1Xa}*|+^C#JE*-}{Zt|W z`GL@=3chwY`M>~k=tro9W`piQVT2P&w2<_| z&f2Xce~4_9%)!*9(R-wO_mY39u`DZp9Vd&$Ma5QKz4{8{6(xzIIx!_B3X} zX(RbVyT$l%IwS_e1Zz--52)qVdYXzML5|p&Y=ld8@y%q+Fwv#{ZTq2{BKvuBg=nsV z0|L!MSA7dJcg`wE>0(E)L$n_BNitrLhO~8( z*|J-B_SdvY*e2DfH1k8)2H{rkT|&)5M)_0K$z@x$l8kJs?Yj27<20oW_WM)NL|-Mb z15|?M>J1m%H5nn{aTgdcVU+hbSbvqp!KJ9Qq3a5ls7AYuYC~DwrAbTyN$q4!=3}F$$#$pOkZ~+wwF;yIPr_3^QkKh}}YH981 zXKvZzp$goMNi7?ddY?Bk zT1=79tQLOYJIC$S)dqpu5Xkbyf+7~^K-s!1*OeK7X!e>7lV@*aAW+j_Qz>(W!a}1m z-$oWtkD<0yRLiB4vKdS#Lo)d8{r2S!JPTEWx;ybj7D-{chr~2P*0zndcw!-00V;9! zX7mLN8Yn7)T>mFAW^w*RWKD1OF3;_flSUi#Q4b%GUA#BwlFpFX)$C$;=I#-wQp}M5 zQeGu*)Xs$L8YI+ag1Q~fZX!b7a>I^m&FvB)C<*4Crw!re@K9-KvLHL8as)D zN8=&F)1%q(ND9=M&m>cvc37Mx6T%B>O@O5j)aB)AjAs;{$WQum9fc=HNO=v89Kyyv z4}q=^FYBz_En;O#_vM-~fJxfoYl)!oup&PxL~%mgdq6G!R;QRUe>7ft4q6=^HGrOh zTa4HS*6w_#!qm5eRbjkp@mxgFSDI;?Zw>l$oOoghvXW30fFLbj60O6>%E*-17Ki%s zq+}T2BhFI{71Y_=;$AOjQ;{xy3ax0&dgzMmR)|J~+ zp8?|7yoEXB58c-I6jU7Q<||wT$T5k3MAgffqnJZ%(X@wT z3-s0eEdG*JMeSD4bnE|S)|Q5*h;k-vTkF4*Q<<}9$&=ui$PLOdG@+bRVXjUu@Lq#S zgC70BmaIsD;&X;Hx=B~}3l?K$ehw_qIln~=YNr0p7R8}E zGY4O8>DD*(1`G!hhsJ>7ZKKiUEOp17DGp32;$}_t-nT^cTl+6M= zus-P)PXI2X4BBjPB98dB8*rDr0dGKhiKJtUWS0?2Ldw|$dDEw(pNF`f`*48MtVg}K zSBQ1Iy*y!<&Wo$9;ijaurMo-u63lqN{W(gBNemCEsb>R3N3JH9J&-gM3k3FtzaXo! zCpX;di{arAl`0_4t?3lHwpMLh`w#3dE(GtrySO-?t$+2^39j?He7lDCUwNDS2lQSf zdV}OIpdb9qzVBdSl9~hk^`keYIK=zvVs!d?b3FQfc#0%VU`n-Z=99~pI?ms_l$+q5 z?0FX;&E0CT%TtU2Jk1^?BL*i=#4oReX08)a82s-t*OP6Fi^@>f5YxlDa7P-X->F6;-y(FwYejKs8V;RR&Bl}78I$!Hinlau zZ(Ty^^?1iG;8en&t-l_FvL5$P%#GP{Ldo6*%Pq?5mmqI{2xh|Q=-~ZebShy{hC?wS z{=GUJOV&M@J$JV^I6Rz8k0e20Lb{zIaeX{GyF6QE`w@ib6_VO75Oz4hI6eG5?0u7X z!tla*!P;bc^3~Dg@T&*EUY#L5;cT#WcJzN5eLa%QgEOY{9}O=szZp0fR=0Tp<6?jl zI2r=;l{g23&U=CtAzKhZG_*UsoLwL%ko-8A#}ip;BFN$lr?i+5x{iJ7jiW1PpQr{aL;(oCh3hS1L- zh#%5RWC_CZm{(+Tu_~N<{l2QzqzYvuz23`7Pu;D`iHUFEj=;Rp@f9V7NGb?5AcMA( za}jyX9IY!2JH+K(Haxgzv1Ljn^JWRQ3WGH`K?R zzCDZ`@@4#;8l_>_BK=6O!+Ovl1sAZJ_1eH3;<*^I5F7A^Ax`SNIzK|%f}Yy7`H>at zW2{soV zCUdw0HhTCo3>Wgo3zS?LPL6w#`~#8f}yaPIU9*m~17 zbWGPg+?k*M^af^H5+%<5< z=Qw%-&c=iOdddJlz`+wX^Y6f|=)f>pXuKfwWm;MzCq6W}>2PGl|7q7m3I{(pLs5mL zqynOvp&w`@-TKth!*p!D4}aUAamr6IknEe)4tCN}hxXO$wI|E(QGAq#V1pF#IJ2KA zlS%64*>-wsJqV`nL6G(q>C3>pu=4;c(aSN!hD@8kd1Uc9=}04U_O*TKoz3NI&96lv zN>|bVNX`y2)uvfOPFj5kNIeTRe%^a4iEm*d*Ih#wmdB&@xTumiDVD8oVuEM~7YwRp z#)m*_kvPQj{cVkm0gp53F<}p}Xs*wV+#X@?m^B85~KFt_b1nD6@NQ|4n62q1PdLxp#GTJQ-iT ze##K!80QgRKZhNH3#9Zv+DKmVR;jwCufzlKKSGGQ#9ZDFpQSmasNi#W zm-AzQP5#xsuOs_#?gixZJOf21mlx-k^nTNGpbq^y=9tq@zO49FI;!)mZ7j z$K6FUvF+P}Bf&mq%L$sA* zGmsOVK#%r+Mi2nux8BO@6v6K;OS=710t(_mgXtD>6rS>c?N2OWl{gTG#0lCD_$acV zIPuFd?;FmOAPAXDjX>%}vH!3WpHEJK*-!N)V~NFN%{{2;c@~Sw9f=cvG&=ywtmwIk zFp7mTb89Ngx^azRSAbsFwR?!8@$^N}i!3r$q6$4S&dY@hQt%Iqk@}K1z)Kx7!e@#g z4@!4Q18fk{t+&?ef7QqTzD4>%ersjNTKixD@`M}>$O+0ehi2a0bmQ#&;>yFySk3}8 zs2+=Ee|ob)oCY#D^bU&a37gocwAJkR1{1xlxyf|qk;fw2z|BNQi!^P=^~A>*zb~B6 zuV3Lr1EEqp}Sg`{J~IpME~DM=f>|5gO`qk$v$PMP{Ww7bCdP;jopJ6 z+yB0~Gl#kLv8aGkb%0dzqMPQ4*NzP%M z^;$Vdxo4W)6zt`U9Q5KHBwHV$_21a9#z`hq%GOJh+@9J$;#Vb4n@DP$cc(uEAu=Duk_xy?fY`%EDeX#MbFE?JWh8Z5BOTtwJJpVW82rX+Z zWQnmUd~N?cK_NLy8cY?ZcBUfxY2zV(;M<<6FYD`?b^~J?I3$;+{`honMdW0D^lT!K zp5^DrnI_Sqbz6ffSbJdiI@`-+2Nk_LFO&(QSXVsc>Cq0UCY@cFbj z1rpL5hSOuY0#vfaS?7Lwk(52xv|8hgTa&}VDeinjlKJdTuNWl}F$7BjA`i8jlw2qGN_1E-G?zRwABhx(O>K+^`*MU?Zr5Bzt~sM?@l z!e~r8RyA3qXY*DAfl2DF=)OhPphwXytpD%UrKm$5-EwYpX|XRxdAtd5OdI-WRjA-s6;U z$Y(Qo2wTuV>PcI8g8vs*V;3PerUxrVM3oD)PIv|y16|i-Rsik!WSSgz=78vyFhUvT zLzH^3feR_6h$3Pgh88J>u8%`g15;X%sK5hQQH6O40I3S8XetZgmi3Q7HUFZ7x46Y#*4wEG2$MlWF(4@7T(MweL9J;WCCug>}B2x>q_ zJT$CZswgV=Skh2~h`eDpv5>+CQ)1v~+SCG)l#ikkh|A{|zzU+47t$3C*B!&-Q*c%5;L)lk+;b#9|heg)@4RPr$O!$Mxwn+dlM;D1gzWs$vavfb22BX zjD!SBh%xg=`ZgjnTWS^;E(Kdl1?Z(dleH71pCkRh;)(sW#IJ3=Vo<4B31=g7%oUW>MC>DDP8B!{!;F!XUs#d0~CN}S#DTJs1 z>Sz2dfc9y_o@wJ2E!)$=IdH*)gmRgoXqbB4^cEp@KPpZV9?irCVvOg#DXo#(+ljsZ zjhr)lM3UEFGu#?N@a=xkZ@$v@WTiyZIDx_J=cn}7PjQ5bW%Y!Q{3Hjja9Tu;Ns?KU zt4@aoHin~k=F!w2Q5<a994d*!3+8 z6Nqa6>h?~%b4?fq9dZ}9t00tp*V9{op67S4m_zJydCC>&VI$uk&gN`ptDEN4`22E) zqSk*w*S|=VlPar3BLCI1=Ma2IM5vzD`6oq4054y_yxrWcJ~Cb=DK0qnI8A?aw6pe! zAUc};sE2u9+kbZ$HNy${VoE!wmnWm~YyHm#vQ92=;JvlQbV#4M@1QiTTFNtMdB92} zN=#o@zpK`b_((CTyxkq1fw5*+eOnI*_%R0&|KTTz*1dK^oHI0UIvadjWbHWq;IAtxmy{LGsXl2c$_XdZ}Y z?t=C8)EWk4w)1883A?q)6sA1*!I zAwAC3S7DVUj$s?08{*YShP{G2a5^FX8y>w947S1SDW1iT6eXA6p?1&! z8~T2G@1>2?RC_=PHGeAkf0--~Q zg~2gg;QW>R3VT_-fjieUE-blaM#03C0h@Cs?jvDX#Bp~Q4M9lon8O*Q&6TKcf_@(37G61 z?srTDa?yqYkCRK_bw5=8JvyA6U%i~5cT2Bo$ZcBtk~jv26NZb?L2pjR zG9gkOdsXqzoQ+Nl6)jf4^$x16N0gk5%4qon z(#VG;b#|#TZOiD?X=r)Mwg(wO=2jH1ScEb~c0|g~p(X8lp-$lbz_sj147|}d?q{z} zuulqYisr`6F@?%vOMx4K0SPa_M#WHJWyg?BO~kU0(3yPSXtK1-7}I2I8e-wjT3;Wb z($L8i=gLy3OL|GB5@liTJUzaLl#;$gpeUAmFbXIu*b#px_F2grG4I4c3sZtE7VSI% zNw;MuP$|qe#ve-S4=^cOlm?!w)>F905P5U>igc$2?nZ;*iL;3ipHy4T+j)Q0THQ)$ zAzT}|lW@{h+KunVX1Z^VQye7T1MAx02!EbMeezrx8NV2c#Pu7?O@eE$&9iBgcPaPdoD&;CioBsdhbUAt#})Cf%BkB)3>tARDH>LQg)BI zfwR3*$MpKT^4qeZiv;mvf@owpg^pgfuafo9+~iz!MO?I~=E1!%v9JMNP(B$+Sb$nh zMav*-BM``+S9n?#nC*I~9NcNF$a6Xj(QDC!=`VcZLwP$0Q{2R`fZuO!i$F2&95^{2 z?pV%we$`MPY%|2iOg+s*HR(C(NkGeeDw}nQtDBf}Q0yShTb0da=NQxuXZZWflMR4L zN?|2y{R46fM1q12%`>C&jAw^9y{Gn5jcWTLIcAy<_+y%Wt!}p`frH4m| z*nU7ec6K*U3Czo?gs=Bl`rF5`A@CpX^J5`V1m}#UbR5_x!c2G;Ut)M5JUZ$&eirDKf{yqeTUIS)eSJ7P93Wp`x(9wD_hMeF$SRdYqr{N!&nMhd(iep^ zbin@Fu>h%CA$@u}VS*}(XBS+ybpQ~pRDTCkN4#)+alF#k?r~rir4^Wa&U|x|L!HZI zePzy*(un$!xquX604ety&R*GZK*vT!w|c(uXj@JJiIAKtt#c-*^`)7%z6xl_Eb1)U zcr`Y7(#CW;nd(T0kdgjl_eChyP{p#v?h-=f10E5rGdU~P;r`%<_JdtAZ*8~n# zRSXw^)t|J_|NSdfEu-ekM-vl$#?4YTMKW0DCiimF{#rOouy0%G-g#LSsg(7Tcfi~P z`?#hTb>JCagzxJI9ArX;-vN^)wA#93a`N1Yx2vgzGxoZ6JUc!78PZu@S|Ru<_HnR{ zSb4jvWII{G=wcP8p7qp>RFH2*Zs$<`IggvbtS~-!dHz2f>u;i33txiRj5hIg8*kPo z(>la7F??xAg(P_NP&b8+s%lMk(V^1ym{j4zP(x^1pHxi+LvU&fr%j1jN#tU{i%Ic!)>6)t_LEu8#3PZ-+d3qNvj;IKprgNH-ImUBJ24198hj6eZ>+ z%(r1-|7A&Q<&UpkAH6H%P%cL7AOn zC_u{axUjDhKhtYInhg$~Z}07GZXK9!{^qtwp@FNeTIIvd%{{z{&Ylg6Y6Q{fe>cJ< zBC{U;qZxO_#8l@$9b7PbrtRyBJb(@OrzRG9bfq4tdTv}5#z2w4*O^e7lHstMdlv}P zqzqCZt6Ac)4V)~8gDLL2vpmz5R=DR#S3B3fyEcigT0QMDQI|1dOD5cP7NC|_P-6yE zV141Q;~5x?v0j@wM}XJBcFp}3lE$V)n7S!wl5A2uDa3bmhKe%HU2AGozI`{a$!tQ% zw?mn&@x~Yjbue`@W6apb9y1f`6e(#tSzksY@iFmHZmElq0D$MT0ZURDHPnzH_eh!i zf7<`UVD*m=R{v@34HEX@NnADSN4!`V0?IEtpKH3I+41RsOmWBXoD_HC2r~H~;e)y?*w+<97vFYt=e8vXH zxaj9ydWXf4KgZRf-FrT|u25u9^{hx1!2y*e48QX+8CB1rlFh_rWbk!*)hl1+Z&!i#v)SZugljlp*HDhtSV7|h=I$o1Qmg>SkXNm#K)hc3hamhoPRM}h&+ahmP!A37-&gr zlxy3*_5c!=+AK<1FrXzvj&5y-$Oo5&qwoActJZ87kbIUXH06Bl{sa zXdF0LHRgi5up^ z#>aMAGRZRJ8K^6>P#y9mJ=U-a(}+NPS&ZCY(iUN^-tHnihq{B$KsHzrmn3X0PP~fB zH0yXY&2T~{b%CXoUD#S=aYeJbquB5-;Me$_^0HDo6C9odH&0)_);1AG0NKk?OwI8u z?9br{sIU^aW9lH+v}E^^E2)?^l^vPFdyUJjzNez#Mw#IDy(O^GV4UFGpt4C=Lo46y zd;{El^m^~hdw)JFKGilq(4J}O0gOm}>2v$=R@O^G+0gfXALAn%S}M*I?fngAPo^Qm zNk{%d6De~Fg`yxX?u< zs%TU7q5Q|(&AA;n$|aVs3<94@kIJ<7t5Qi2!V$M#AnR*&71|1Kp+h5{w`8kQ$MJ9V z>FVmm-~_jy8`SPmz4LiEHzkU-iW-|Q&*SvQ$#}!R>IOjF`UF-khPaJ4; z@n=2G@d=^;Ko&-LBeolyiaS_fIKqI1hnF2pH?$}jrq=C@J=C1igpuLhe2(kGpjF*X zWVpKi3g5YP*T_8Yo`@?o4U~9{L|QB%R%LuLr6c=8_+Q7xO z-1tOl*UpH{5Y8w(t=+`EiKLykeeWh8sQ+Wr-m%!h>e1iWPLV~@8B%POvZFht$X(eV ztRBOlfAi(N-uD}ipDq9SjE22*fd7c!P&mU9%-f60=~(fdVA)kkB~A7p;^r%Xe(wGN z#>0wK16a1^uvIv*ulRHJ)ymqJ_u7UV>T#-KKsW*P_I6@`j5wTOOx&IdNp@MDdPWoV zbHjB2uNtfrRNU!3_$}g8J={O?kbiuM<^D?Y~r;xQFZ>`PPaayw6-R!PKfX6_1JGgY$FLen%0v z30(ZRL{Lwo(<)82iivT|KKU9{qdg|MF&C6qCX;)j6yn;N1ep~f>0Hq{0x@-hCSw0q z7-$Qo78F`AQ{ThJM^rquh7>NlOtQ3H{hp_dDSj5pwa7-HaKoQ^a1Izz%|t@oOuJ}} zF^Su9(fS0~Xw@E=jnXQx7ZMAZMUZHcQe4X>HzYBt0fID?)<#`6`+*zve5e6i--TBd zP9-|a;ZT%v%!qf;KoBnhp*c6BL$#k^?g?>natxyIL`5R9p7rmfbS^=CwpQ<6li3f2Ytj5+(o1~@E5$gvM47T%msQIu`p+aD( zC06#5r{Rz<->XYQR>~>%!B}SR`dvNgDh%J!0*h-c#x{L+Ebb9Qm5ir?`A!vzX)ba z-~XA+z>t9<*RZ8L|1*>vAuStaWvS?qFi;3K;y!OFm8iFVug7Xs?VaiTXSmOcnNNy` zax2Tj2c9lvXLx;HxRw|1us`h`YH>U{BTi!RJJ{3LsI!N!Nj;MMAgVa8A(v_22Ng|_ zi`TpR{w{^s`w>Dw6m`c;dpJeXvK>FSykbF-OBehaPLO!83CS_4x`BDMb0u3!FOO_2(#V zD+9d80D_#3xk_;U8YYXrKIKIKhTeKIZq{1?t{>whrIfNIGPsPLPg5{wQKK6Sv;Yqy zIY1vI=bfJ`oX&cKV^j%~l^c+R-_0S{@6fe)aRd!XTehK$RG8PcnXO`DK2@e+xBxvt zgm)G&-Ik)ws1fuI%%$-T{h9}K&U*9!&hBtkfI@$q01oFajSU4Z!VQ?Ozq&^OkUyUQ z18P4ir#p`d?`A)MZc;Uwb;$~KXJOJKVZ1kULa`YcYR1f3(g1YNV2SV_daRGRC|Vrv=`$SPQK?%>CACwrrh&H-vIQP-WLy-`3^Qtwot|1%RzG(g?~62zF++>{PBA2mwVqK0q_0t zJ&mAqKa(-zeGEO5LG_;n{OsCAZ*|&^A2x*aYi@Yq_8MF_OCGklg1=$PN0awYzkcxN zWziH;dvV04A)0=Dc=X*WuB_qQ1#19`r(ahBC%}@>VTZlgvPY{==!c%OQ(x;&&G7)+ zMs&C6hjq|LqVRG}W&S?7ldzS5vouft}AIQ1;K#Y$XkWCFp?Yt1}~_WfdLGu>fVRC0m3r zmo)qD{tGyHZ~ZGswzL6275x4E<=bbIGX#HTyTg;=FOE>^@nFW>%Kjg|g5%x(``ta! z57^sxDqyiZEH3-tnXz~=Ih<&%GF@ZgKf$-}F5j-EW>lq@>4XI)n0E930t4M;kJ?`8 z*Vk|KAgaFm6@IOuH;a4Z>NNcsJSdn{8p6&m3d0X0`3VGJ{63y!{$4*Kj~<=j;`-7< zT;T^|YgkvxteT4^Hm~5)!1U`=S7#_cR-U-xGMPn0iKQAXS1ng4<`^}$nsNte*f+_U z7Z+agMYfwLEgVwRQzn$tH!dO)IEf(fx6B?MT&&;y;){2%rM~!LFvhJxxK?Ez@f7L( z^Wx$mDV-oR&Z}t-5{zqsrix-fup~{Q$vj)-Ho2838t#hIX{gTIZj-cnP;O#QE?~t) z=}RiQ8F23A>ImAAS(CKi)>F1e+KgIWDfgahzIh@_m)+Ll6}n{zsfS^8bu>Oay*wJ` zp!p|(OMCq^aP8HJ@z(*X@>1P0pySJ)I@}?O!E1I=%$~G@e-X@nkFZ*YDsjdGK zl@B%Q5t#XtCY>IjY|y*WF)|{p*ZbjOW&ccsiT}W`NXcXHawU%<%!aE=k0kQoLpf*C z1yCdAU+78id(FpPeGu_l%QesG3b?Ph`8G*#a8!~|=r{UqXL)dvbe>9F6kRA zK$8&Vp%WFrn#yE+v!e|iJXum>Nl5*F3!l7RNK)!x`^a2C{=%CsquAhJSHNe@+anBx zh)8-lpMFH~gW_DzQ>l7U9q4(=|l);1}3vk2B>xzKyXxM47N&+`IRa8t~4khi% zX@<_DP4(d^5gC3k370kd(Ux#B$u5=7Z?N5&Pxx^hC>V7fQLN$+&J#dg!*!_&Y35?G zwDqUf-QFqv4Wj5$Qv_Y=fukBMpubd@yJ_p-Ghdek_YqF2MnHB7YbJOUFfO$^u2dB= z1?5W)J2`-yUjhrs&`i-l91BC%8F(2ZU1&@C)Okv#ANSYzj`E+i-m}f!ji)cScmM5R zZ)4~2?qmE3#hqM87@QN6_V?g^Z}nHA6`BL8m6eNikPZI+32*aWK@H+sQH4v6hQN4&Vgo`1?3xwfj3Jm{qc14RwHq#Muq|U6)R$I{E`9QoLuPLkwZM~ zK$ct7e}6ky(Jls7K7I3*%rlC(8&crNSXL+(P{z)Qj8R^R8A_DA)tXy=e6gmB>$Zzx za4KA@&Gik8>qq zocq0BKlrDAkW{T>3BAL4kVXI%>$mWer4w|nDd`(hsouuVJ; zYSVF7&b7xu0a!RQSS%(xrxOY`PEwIgy2@f%?frKrRk4{)c1dU09M7pRer`0UWUE4* zzId)F%o8}K-Y5BtpFlkV5IRRUqL%YQbxyeG%9;Hqw;$H_KfZv(t(Hykeftz_)P0@CI!(C|LD(>>i z_N_A}XMJ;0Vp}!bkMqFh4UX)HzSY$!+^g&2U7cNALFS_=xEp8Rxr={UUuq3IV&Y$c zSM|K<9lyrIVCWNl2NEL?{JIS@+;tK&J*Thr51whJIyZZcssqhCzRbvec6o-Y(ecT2 zaHW4&dW!d6lTk-At6|{xi~a7B7jiT%7_-5v#yf47k%^wO@RwFvW5?RM|#?07Q1l8e@$%#1Hy=N7pXkcst-SEjk|C zhsWV=GSobIIymR9=J(0qfHnx<0Pf@7dkJH9<9D!Y|LupZ%@_X+Df;liZ|j#oZ0_#D z;{CSwHQw=GQ;*aFjEfZQP;Q6LBt?|Q1h_PQ!q(2mtKt1&MMWv(LDI(GXp)H>pFjkV z4{MBC5(~T`@&)c312E~90DGagLpWvm!|OPO^TMURrJj>H_wFK+#8CBkg7ck|OXMl? zT#YS3LbS3joT87*66+6HJQQDQk;67&U_Gx)SU)Jf#pM7|;Y)0NuLl~%AMA--^H^YB zm=POKj%Op(86Dx$yO|t6WZ?_K06CK_E4&ZERg@+~E1SA6o~Ctm zc}R@}>E4iZxk&Fzz4IM;>sM!}*z_|p*B^-&3J^s|df8I^_t5pl@Prq{%!a4O>+3b1 zL!Cp0%;dxH$eNCZ^k-@IYx^hn>#me4IPmhB6y_j}N+~<^1PMGuA)5Zv?H_iw_cnG9 zwDrNx~7#0ZDetUS057}uV06Dm(Yl`q)GfWQ1=t4-YnL$ae|M45V2YgHC1%^ z$y4&hF1}}JZ$M_^=G#+#t|n{dvch0gu_wovU#cBDEgPmBOrY6n6J)|_y~*thTn;Un z@8M1tKBM{tG4cqN`n#yAAhnh|-B7keb8)#9Sovu7+!DcnlENt!=h`tG2-Kh;;f`{P z8<*~awWv9CzYB>^laYL=1ol3X61HBee|P z&L*dq7ef*t7Ag&Np&mAgU5;jtLwk6F!Y@4u7@sIDAAUHJ8}nMYGI+HOh$M{}>nWlB ztIwo~TE|eYB+z56%JDOc#|}!j7+<4b^6P%@?pM5Jpxqcv(1vb8?l>RVgo%;`s(9-M zE5!l=sB;CKpwEPR_|jEP6=o?NqN4`4RYk7wV!5)s*$QO&__Uds&l@hvC0Ckg>p5y zM$W6Y0DLa*FYD=6_iakWa9LetepRs7jV3{$uc!M>PjEvgE`0>qG8&VpHb zXa@*DjV&{$WgMM?h=$6f(`~gu0?n&n7N=Q6TixQ&&WI#+FVO5*%;&kBMD*iMUP%{7 z3zr+soIhGzpFDLTStGZ}FaRgloH(}>W%RG-&XbnKwUaki)9a5o<366wCFCU4AAdz+O6C^{y!qX7c+8Fmw;-dr=^dhKl zK(cwGN1rkr>YTg1NZ)Cry|540sxf1>ZICW|2YRPS|>hip{2Ka1cxSt}8T;HQ6+zcs2S(mIe$=ly#9 zosGx4$qr@*rIifIMYgL9q$+ByAsOa8FXdKlMLgi=@^u1qy)277^BztO>DjH32IUf( zv>}lvl!2-b-j2p{$@P1dZ*cJ66T-6YaeGTr^duAsKQM-S3q=H3!hW@>MH+2kuXk`p z3WebYPCy0=4@k0DnBWNKUXF9$@-4)1g8s{GQV;>PF>mZz{b~Ozqo=iB&TtP>y`gno z#FhT$_&o}y9`)jeuJtxA^!6igh6~p437yJ$OS^tbjjpG-YxJ>{NF)G_<-ffgo#F~0;15W#Rx>DPz?VfOw#RrzJG?A zsaH1K@6#OYzma{`d;BEMmJm5DREFLc;@|J{NB_;7uaE|1O)nDLqb;` zU3bQp5`AW5ax%aTX}IeYcRlG9ryIY(2Rp;bXiMU}m{9!|ro+=%EP^veN{;|YjX5CD zNb*gINdXo@K*Lj*WWWhB4i@2nKLWdd06!V(`pP3KuTMmR!ho%g-n8(EI%An8jin3DH^LV-$rb~~E~ zSJ0)u_I7ZgVZdSyylYn`#|w5PUo#(tea&y=aEsjMRLz9E$3YjNQuHX)n5VC3D!0`* ztTD+86b?2>1D|7G+*Z7@&6908zl_@=lwjX-GZhOm2<+pE4>m+f3;!dgBz{M0IMJT^ z$Roo_x=i9&O;O^kMRX+-_D;PZ!K8v>8)gzLfiRRy0uKNomDFx-SDzXsbGr=)R+pZeBkDAYbTBbYiMM(qR_h+Iv9iCKzi0L z&$Oj!8q4O6&vYNbi^8O2EL163jV70MEIea|>K1IT8z#uHC&7v>%>Us77E{rc691`e z8OIk0yI?Rim|_1F#O*nXVNyoVgq*$5J#XqZ zx~Z9h^8vSPbtb}+8(K**=fATHkcsncvo2J**g#}#cpxleIz+YG>F{Vo55#^O+`VV%tz)A&%W&=y*)wXdRPEGaw2s56R3kY`a%Ht z^0-=(=4hTp$9&w`Qe{5QM-t|nns|W zrJj0cLgAYZ6`+&LtL?B`@OltHVN&3C5N2ZDD^+3P=5~gDBy}^*(s3~&TPQ!cgNhpR zGi(|~Zy!3e9Hm0Vx2evRK<&^gGGa?#zO#@+{QRZ(8Th%qEsxPpFlEJ42Vd=Hc9$? z_V;<#rEa^nBy4w*x%6C&_O4yEYSp^es#WSZNh|)TZ5~0%3oFl8ohkhWG&**}-0&s< zs(-Udfo6=GWBKHAIDy}4PxU(iD^tKa>k_|YK}9hC;%Jy~1CN}p;fH@__J2Ys>S3}I zV+!{9ltL%z(`*S}96_fp$QSTQQEF6t&xLC(t=KnLm*d3c&8ed?nK{c2+&ReTmK-0? zs>>VB&9fQQ5NeA$s$Z7_mM{xK?}(c*5FeXR7uh1dXh5w(iXz2=nd191+$KFJzF>(# z?u3Vm56FR4aSxS7kTu@Y#t^zYAQeY1G=odt9(q3?{vW0(Yn@1qncBv6?`S+I^ zU6Q9Nt5QA-UisQ4+#uP;%o7!w&_`8jEad;jXmQmdM{yZiq(KlvbJi1qz=gwTU@U06 zXvP@2s!guT(nI-O0uZjZld76;qL0uH(g{-Eg7F>nMct8Xx+3?2p}aJFuK!`!{5^7Ae1n;bz%m**-U%Kz#KvpF9F*l+B^0^~yJGTBL4u{jM`n@Y>Ym5W`dlHpQ_0DvB^% zXbecSS4RbMjBvtzhTVco8hISJ(c=1-s2DT4N|N&8*K*|V;FsGMBLszyu7_vUR`AuX z5Wdz{)fQ9SqqYsf^eyb>o?@#8iWC{Wxz2|}G_v7kFGMhSWDR78wL_3hifCc>V1(az z0;q-z^-iqulmgRu%8wOGd+FonoiBxLy+t@=Qj%DBkwu_xbXv zC73^>Cl4RLd99*>N6{*=d}F$jd?RzpN-0~p(LPW z;4|Xjb4+Av@>JM8`CO?0VyayDPkXjbr{!e$ z8t?kLbOy+0KuXJC49k;=>Ij^jy^(Y$?sr{yHCew-8CgS<$!LJcK7zZxZ?5bm)JY6B zkLUpKZAlTiO93kn$r)Lgc$9@(vNJ_wxuPt=7GvJGaHnA{SFG%;3%LxJNW*f!&QWEMal=an~{cX zA!OX0f>#^376q63rf?w177rQfONq#E|5-cjd?FAD5eJW$5fwLYgH5rcI&}?`GPwnG zMT~E5#=<3NDa(`W;K#3MU?zjLrg$aU!|b_ph-64x1MEI=2ErU_8N-p8=()25J~0?} z^$pG95+?ho0I0dWm?lqi7^F`pz<#8_WsZ=3m!!ED0$9ldZr zmWep1hXD#My!P7b%H%Al`ir9-9 zXsHWZL22)FJjNy7$p<((S?$&G#yx&f#7&x4&R!=6o68uC9BEOPArwLvFLM=RBgbwP z8#RbIT+LqfaB%1W&JO9S$;@6MwyOrM@?bFgizM$)>J-kU6^)3?sx@Zn%EBDwd5*|J zVe$;RZG#xX=7y##GF|E?z4jRb0YuJ|5QYJ%RfKhLk2U;xCP564{o1PwUhWG8y{bH5 zDLBY@MEQ&fq6;_Zb^Rfd3j34W-)iPo4~vSdtzRLOjz1oLZRv#C)dqHxakYlpFzdMU z5T^(yx4cad=70l|xy~gyQU_(>w+h+mrA?x6W!ObDIG_4HBn%*S(vpN?j<;H~5f5gk zB$scKUU=9-uAwy)(g;F=>xJYC=_wqnqZ^jiwPb8c#ctmE(fQenKm4xqvh(xw8t!{Y zNwGpMolT2g0haW?DA7X#W57N4Z=OqVDH^I8Y{JP?k{xVggUfzN1c2mI5@qbl>7hcH zN_Pk?Y_tAmqFX%fR|-f_Gw(GDu}P!cFo6o#25%Uha&p8|J6gJw${pnfxXBMk1#!OS zJWe!k$2ozHo|p(pF?-v`My7?>5=v*B$?u61*J|zHGQf} z0YB}{e}B`v`m!7N>NKkR@49IJt?u3{F0<2X_L8)|R(bqEfp`khOk;2S>^HsR0dLl( zL%8Fmnk+;soxEBt=g+xQtS=;2@gWcQ>b z$W6XTCm@EE-Eb~-;h$?gD0?n)`b;Pg(q#|} zAq$%abM=HI-i{;~);OS(kxzH+%O(*~5RVUscj+J{EI3BKuq9P#@jb7-hZ`Uu!=ah` z7XYG_p3>>SnP_bnVWt8@y{dl@Yf?51d00up&L9=8R`7J)s{O>qWO^oZc!q=`4c9rh zOZ-!Ai*BLhpqUv01?9X6rKKmX~%?DVydmnp@ z*{($=DL)$bG9-e*g~z=l5+dN%z+{#@UPus$5E+drJffu0&`16Zuer^gKcqDEq9_g8 zx>L5nL5@=Pi^M-ea&^VtCErDJ(35_L}x^oiA>G5ua5OS)4z6`>L6N(UZ}Tg~_laJY~@ z|LYaMhJ)^s9nm?lYrpuh?(v3Vkdc~L4pNME_=B(Y3J0zei_orJ4Tl3cN+O3acqb^J zMx8kD2pCDO?!;I!ANPP6+4Njlj0-bVJJAh11#!bZMWzslm0vW!JG=JWc;a&!oL7CGDI(EXZjo6=FI0tJXmu_1>8@3Pwj-0QtHhl zo3_3@!R@hOJzNq(=7H8NR<3D0Yp5GQhSen5W8``~M~?2vqX{Vf-FWimBzzV*X$=P1 zj|zP1T*72Z9Ksg^U*2_xlowy4p=`CyvL?~I+ zIZWc0>X|Wp^Oju3w3aK_rk&@9kCi7zfdZWxF>QWDVXtWfyCR&BXu`dAc+a|d z8`Kpd`*H-+)`z0dqW1Fm(@CvlEA<0~7Be-;@JUZ9_>|F@Ov5<}$T~#Wf|N68$#=zT z(hg^xcCDi1+3hv2r6UW|pR`k%h_4WkbUATG5nikhK-@ZC*V@Sr0l&youmU5cyS6R(=!TFPP$UE7qY4`?P@a+u$|B5BBEzo zEG_6q5&Zo6d;(t#*QX^58Liuy~Cplklzv>)>6yrLJdtJ}$+SR2Md2V^DU5{5+!(=l~W19q;8@TsX{ z7Uqr9{Q#BW{e4>1;k^bG;txbfg>BrQOqGb9Fp|eAU0+|^+74Vaq-fTt$d3q&WnGJ1 z?oNC&FMuUx!ll-31Mzha;4x6yp~9X84>!q+2nQ<-3r`liBPrKcq*==Swb!&{fLGOK z2wdWr7Kc-#D*+7$Wd*cTD8}W1Yj9m6`9a%@U^n0(1Bv+(Izx-!0n1EPtM_

_P)_ zIg)CjA+ax5q!>0CUxApBD*OKWg7%(vV@M!oV9nY{uo+K~Sat!gw%7d%fzs|V|G&1S ztz8wGG8z_2RM2{iYLW;^nY0)h_!o5e<)&)&U7Qf ziF+GDP6-s!^#yj5PzQK`azES{pi9Z{GKlOHp$ssp)#Xv-H@s+s_V#aPsHp~z=Nv&m z7|9w~_uq*_Eu_PRKTr;c^3Alk@v@~dZJwxftFQX%-JE7>c!C_&Dw zv7VIajGQXdxLKHKRmoui1=aMXUMfg_u=crZ(RmU;y(w(&+pg_p=P(HDi(TX zpif9mk=r)pya5Ycnk5OKr)0aOD7;alpo*3JprEU}vcoEH-J2&q5D#L%@HBYqNci9Cj-iOKp65orUKEhLPX{euk8o4L)nNRt*kvQn)($yM39;|HUn&@Ol)Ir#V&dLfF7B7lu0xVjkQs`N#I0{y7Z0Zk$y zG3ZSCOk%3aj*DEBSI~vTC3t03xJIN&pL#=4@gYX>16BGtD+yl>dfgk6n{BJLj34Qa z!^iI9bM!785RQMvS4r2ORX>FnoxDhRfP=xshka>rCX5oqMtS%)p1oxjIi{2xr|si5 zNSP+D$-U$+tbXSdm(zGk7Y@|C8C_q~ajYC{ov%gYM6J?84S#_#6WoPom{IkpE|^mM zXG2(QKNnf`D938Jzh_I%AY|Z>Ido zT^}A?&M>`^U+c37o@WTQbT0e1*g|8X!^keU;0eJA>dd34%-MJ{xw)o`V~2Ke2Sc*K z>oZ^SBb10CXqN>f5{9uDle2!{)WZ1-j2U=b3}8so(%Z5mG8Su0$TlmEfzGfM z+n>%DwLFWLxzsqp={;!=`Uv}^DM94Qf-%j{@^OT9R)Cb*4Jz>4LL~4;{w%VoY+(Kt*1fIH*o-}c2dXLIw4p?GJ>3F&P zf0bNONNFaqb8K!!worY>{)@E5yD^dZ&WSf1Vl~TjlrO7U2=le&a?&H2=-q`!yRcg% zJre7a!b6z>DkQT=Jv%DG$jxXw?nnmbD6*r?+|U{BV_;vg7gQKWsRt`Qq}wHiYovnO zl>}*Pd&&EqT$p5|AjU5#cKS7$D;q47MsPw261(KrdT3iKHLik%pqbyH+Cl%SBQ^ys z7&*3L>h}Nc9SHH?$FK>YJxhg8kH@6cS*|W6z&vktyMIv zn4~TjykQY1W|a9FK+{PWVT0Q=@LX+aD9}=o#+yQSeSgFH{4L!mS9x6@31LK;#0bp6)~LHv4j1vF2f4dNliI5yJKlcAqx8+wNa=XB{a~ z6rt1NB6Ak?aCd8`*%z0Tq+wcQ3Cthu?*2!;pXqS;rrr;3N9seFHb2WTqjwf^PKKZR zopYc}6&%wzd6}LsL7_F4+>R;s1z;-3e;SgLmy{qWyGs6;wu?NBb3Nybp5-m2-iAN5 zt2^<{b^lxwuxI1zYq+N&V^+Rr7e!ns3pCLV4i{i@SbVRCjiET@5Ad>;DzWEDCIG*t z#lwGt`D?w{B+Rn%KD0Bj{{_AhI7qFh=q$}6w;ps1-+Zimw`B~Dd}Uxc_cs-xb3T5= zIaWS2q_=%JnjSP(pwdfonH&SL1q)X|`5YX%dsCNr*xj1~2KC@#TJ40Bj@RQDN zVPK9g;9MUcj4wuKw;{!~*q^I@FfOZORazb58XeT9DY~U(MbxT8EiD~39f>vxNXVM1PPtU570Pl5S=D`kJe zM@46{bqXp;cM*#w3dFIDB6Z6IsASOgZH9x_*Ud<-3lse}5okMM(-TYw5;Ze~M|6QR z7AH*}@?cBylhNs-1>WibowS+ge>+HMf^WzT*P|KYfGQCQSIJAMpmVa2L;3>P{Z2we zh#uie&x0JLaa*-vBWZp`7r*)&hz4 zL=Oe&{f?};?IEBa#?B}o=~spTzqS`6R=#9AxMA{X(wTTrg=9sZM?R`HQaY)viUX+> zn)D8pI~cxw0!57B#mL2z{y^^v>t8^;XUeIjmU5w=fX3ORERheZ#<#B{M%4$h31c8N zK*0mi4dTnj+1g)iD`Q(RC1TN87^jf9AQ=(CpiUH_93qDaJqT7!&Tu{w!8)4pn$9kB2au#pnS;yYk@MJF zJ2~1t{O#_cTvq!U&0b2qmEt9i>dju`dPb2n{ z;ET2U9#^DbBhyyLfrDI?uh0PlrrfMEH7o&cHamg0FgYRfM>K}dfXgqj--eZqNBLZl zPE}tGC$98;P-Qt+w^>@b$C1?qzX1mh1KJ!4%gOF_TTX1F@!3b2y z=39)u2sao!8{MqHUf_geU6frAq@V{}Ec$;w-`jnLsU|$DP^n*o8aW~E-|NZ_LPvK! zCBCk+42S@VrHSv0lHd(Y48a`*+sF`k6xY((ZQ4sr=}3diq4ZsUa)n*Nhrb`+Kn!4^ z`oNzbM#nB;AGIy7)+O#rfuh|5*D?EnXHT5S=VJ?EUU#k|``c{XWJl?dz(Xjy)Uc`3 zx5-jD^Rs+y@_27QeK4BtsPQik8LvU(Xkq)-#*zB5k_nftBRc*N66Gcru>*2^JL(JK zl!{ZdWl%3ecf|qYaI)DMXbL{pi9|W792PW3RYXCSOzom5Us9Yef{LM`hOmHi!GWA*E+qs($3!Pt$u4mPVd4oqg){`#|`WUeE)? zx9C8nq>PH^@HzGf!Zpl`tb(cxi?etlNE9V*Qm3Yof6^H=xKIlcBt=~*l3~8>(soEm zi7UYM2f;>SaO$P86BM);*9~&e`Ns~Rf&5mLLfZwoR?$P6lZkR}7W;PUD(JBV)5c#L zuHXI48{mvYornozxJ)I?p@oe1Tr|60_hW!is^$&LDL{>_;9!@Atd48(HGI$=qI~W( zt`l~YiXoC12*QT0)O|8g#626IC*QkFO_IbU5*g(jxQ|4e;43YKyjbrpu#Z%KyH&Pa zca(nNJLX@Fr_&L5S57K@%h;q{PN8e;W{u#(VglxJd1K~H$SkW}QFKRtpxQ)k)W+sp z|6-R02|i$VnY(p-n!8rM0&uRhzGwVgbOql_@~QxdAh(83CYzg~M5MmimWDj^>cfM) zZJh-Ite(FuTkjI>k}A-x^gbY>f1yl!eq5wVqTB0MY2n(kw-N3UsDb1wD7vH#2<==SIHn$wPmuk}q})^4$Y9AzQm@p`+(@iQ zrM@-r*Z3WZEj&Uv@`?@>ppk4#dBIaEC$A9nyZU;bFNEyu6Ck43Ek07~2sW&ooPhJn zBAL^46niJ0t-M@roW^HvhoN}(?c>qqXqFCgiKA|l+mj1EU#|c33+dWJ?`_^-Tq>k@ zHgSrFRV?7S4i#V)I+IX#h1hH%m$g2mo!R{o7aU6LBe=bCO`|(Yd2B-Ua+L;w<`Nr3)^bb?>iqq4OD|;Ga-|>r4$<_dIqyG*?qR z2bW>esgPFiGhbckv0+R5L*)lP0Dm6zS(XYWrWX=|;uCDQS+31N)@CR;gu`w#iZ*!7 zI+RRGd=-(eoc3q2rEH;CfvgCOG^hNl41$snK84Utf;iA-CUyx zR3Z&6Ca84l?tcjiLgF8Qpwcz@NeN2#m@u60E%o}C6G zXzE4~o^>Edt$ZYZQ8oX9hJaX0$)4gV_YC=B?TmjyV?b<&eMNceG>@%Fgkqt%5c`!E z93y}DW#|hXg_srMytG75Wtz%A*=L!pb#^L-mKiK>`!E#V^DH9=4cDE!3E51YLfVa+ zGstIgpprZ1GaX)V0OHovug`GVL9`^f^OTe3x>Du6f& z`>H*mulPHp>Y>S-z4V9zYO59xpo78309VC?#2p z0bx2FIzCa<&*qEaVki94WPv0?7hT{&Cqz*n%c~xTDBH7wVO(HmR;Rs+SV)v@MYtkJ zUD=j~Ml~rAw;?NA$=rs39iwg1+Ub-Xy6r0))r&ybHXmE*E7=~8aCCpu6+?^)c82&+ z9D%tu0!H^Y2wEe8EP&LS*|vv^q>#2A#6e77Ye<11y$&@PO#39FSNWv~q_HuUUDsMZ zm&|ox?s*|~4<4>=k0xg~2-Zlh0)y!)Uo^vpIcGeD$4x8db@2#OfYJEPmQY1D=jKEo zp~=3A%TythxIqyY#d;nGZi*d)Y`K-SOgXz79m0XU_d37WNGHRvfGhmsNi5IPS?~gO&=y*@Z zM^o&HG7^X3cvAc0MnT`%p&-qmJ^uIU_)7oO3cGANssl40Yf@eK{lOm| z&2F9Sng^SFSRD*uT!BJ=Ei>;_AZ1u`{eJ9!1jDK5)``5J;sYtaTeRKrTdF6=&70Q@ zLD>?J^}MGb{Zuv>L7P~NqP!vtzaL++6tW&Te2pKlMj#@YBObF$zu$kd>$&r5Y((47 zbc_5Jy+MnyT1$$pC3Ni_Zyg-$Y(3k;<|f|E(}c3WVXZr`UqiktA?g6g(PVtZ%K5(Op6AXtmb_TXQ%ss zNkIJn$nNPraHBl(CVC=4%LJgC=laO)X}JD4g@DUptR*|yZ~zq>j@5dTfM*>6 zjea+<3t3PW>HXkbMRl@-2iM!eX;aglUH2m^pJ`Vs(= z8s`$7lt(4iDKUXgVa;LpQnBag4~xCMwf+6>$SD5c}wtG5XzLU#>n zM!U2l5;#AVxf3j1--YB|o5SP%?XAZdxyM$#JtU){u%+x%p=TgGS%6||kkV}Ewn?js z5GN?)z)M-bCUxpil5gmZa{{%9rI2s|R_d@;K_>Q^L@SggwQ{4>5sH-+ZzWh;l#E`b zmv(Y3;1!%Kq*LCynUks0Mg;e+WF;fdr6pTkl|_QgbWQKJn)HN9Zr9z+E?2X@BAj-@ zI9w2l>sA3G`Ed`Xud%CKND=92{-VT{&@gbRqtqQ%xz;O=?gB`jWrYiK_Kp=0{E(~t zlz$-ZKpfL`(D?Zt(#m9lGI<=_mqRY%>+mQo5zEYU;#;Y(T0v$uo zG6WBQ;SY{1MgmhxLM}R9h#cN*Q7g8(=zscq>|JwQ3v!s%rX<$EDXkPgRN5)b_wT$}L^gM}tL z=XjBrMv54C0IxGVP^{FEW5lN-h6Id$R1~w57F%WOIZn_DDXbAwB2T~W5ML*L2Vv1m zpmE`*c+}rNCs`#XcWcG9X#Eq0x~(n6Q!nVu4hP7_c`Y}j!1nIL9KRS1I{$vO|FokA zFqKg>s(fdHChUQ#c}ZAMx{4p_kgzIkf;k{i$vYSi$}OUX+CxU$wp7B>+-@`_E%y$A zv4*L?#07)e>23tmSt)$p7^>#B2440+JX=VCI8;z9qx07n_`jKG7t&kdP0OdfE>gT8 zqgT3imTW=mQzWv#p^I}nWKu4_6k?~16!wYhx><);4{}O}oN7b$TidLlM@cpP8G->O zD2hq+yb^@=NUkxIo8o3f!A1rH#$SH+bMM*jPoC}{KG}MVBWr3TgdxMsS{7Wv-qHF} zA?Sm%53L4>$^ci0oRSO~zP+_@6fzQd1)v)$Hl^6iJa-;Nkm6SI2G{qYu7eRc{+L{b z3Fz{~6$)WaH=9(#lyIXHG1?4l2N#-BvZXab#AWnVi1rmeeTBJE*Wf)(CrJX(1{I4d zx&B66i)37iq5=-3Fe$B_vz+h_rDn2yo^~aDxhN!;0=Tqq+DcWmlynjZMQ%=3YsBP# zLn$Yp$*x3$**kyzYX*R}atKZ35drb&RXB;n+>?ue9F}8lKICckooaSm1c!uA;2o$5 zp5qdo@l>wLJTF1Fks}JSl!;lB8_k#pBD>GV$TyU$K}Ub4c!w3q%Ki5{xCe{5no4bT zIAPxnaDs}bM;;?Dwd&NjICDkGFnza)gM(lP$DgqpsC38xY~z-Q#YS&>Y*W zKfGpeuSZhjsf1uo+9@JsIM~M=PJ7wh+}VA$yZ!9sKX!jFp_<2g+s}>&svmx>23xV& zBQ%fgACwZ74OJMA7;;A+(A^Q6F}M$TDjm))Tu`;1mbR7CPt}$xPMPoQe*648B3I#-jc^`&6?PcgdeaysO(zvLY43`xy!+hqXpl~;b0I72Fj__gy^Q6M z*J`a5-I`-k;GM%R#(h4|Xorj2wuZgO!Po+~VNJnDy{^9T!Z8dC_;T4&Y@1amyyou` zf^g>#P^;zZnv`WmNe5^o3)bF0|JmN@UUtEb?TE4OFi-RDXx{?tZ!P#l{yJ3I<3b z<{i1VzvEhA?OeAhjY{&pOJ82FBTRRMUD9fPTuKH{w0Fz|q{~`))|2likr%Oxb~qlx zqnC6PeS%8ZL`6Wlc7rDd5Iek%$xPa}l3=Ev;08Epd)>lxFve6gSe7rL!4k4wj8aB& z>9ww*iuP)jjYw2ASA_&?jn+mqeXG1QXpG`JYJr~aNRf^22QoMoKO_~|x2fn1*%z61;<#Fs0BnJC2n|6@4+Mm(f)08W9+W*eU}ZAi8_Fm`zyd3 zCFXSlZ|ctkv>6?Q3FZ*gy3J8rbayRefnk-C9F+s}qNp60+$uLjN8btZ$g)peaYSPU zLg%YWtD~`}z zVX>>^H6yJX@&-IcrTL~JdH7J5Av0;Dxxy2T7@$%F5-I8xU@a`-bZpu?0T|)`$1=Xi zB@C%Zl(3nLbfF%)C8Dg173FViLo?Gs{+@1b?mgXOS)inQsP|ICp;VmfC``|LO;Wtb z3H}(pVL@$4Cs=rN2zc`xMS)Mn-t`TVaZNme!`i;!5Xzf-AsFjK^t`|J5M`M&> zDh_|nD?pd{_Ts$1(gYYoq4q1=B@Tl%Sbx~glx@a4)mc7th)|L%IGtu1UPaXxTR*IG ziBowaChizx8?i-0fcwfsHC%#naY(zdgHU&PKnm8YUEAO(8gTVKuk1yiP0!m(sgwP3$oe#)#Q05Y`5K>O^vrqcI&3NHS@VP))zF} zkoq8lz_=h~_ib^zp{KB!LtA=kvA#eOf>4ni!XotxGAiX_+oZwrn+KD%93C z{hWJd;Ms0}{m);l|J%t1l3i4-ih)JGaXi2R^*CcoeiST#sX>GcAZFMx!`tU*XwotXl55{);6oMZy}m$Z6gbGXm*mkgbzPXe zV;D-ed(I>H;x@#m$KQ=+@mIFE;5hG*%r_MkYg0%*=}zBXHM>1}dzG|F<-xMuzGCs9 zi)PP{n1%LAGNJKA zcr(X2-Dl8<^GDKKchcvMcfqBH{YlcMT+5Ff5pmk)h|fN3#5of?uj2AMJpJjW_WsY! znWeXnH@NL1QF)CFn&yZHc={o8oP$g%isnERMW1*ex-89sn1%2W0|m=?fE;SGAzM^- z;RKgvR0N{bWUyK3MfyG+{SN*uei&Y<>oGRHibVIPc*&v;;L1foJ?%NOyBv;0jgs>{ zpoclGNicwX?FsXqIUl~!7(gF76V|i065G{(97FW@--L8-TasPUI3T^BAiZk4t3{jp z$Q4sb4QI~M{cyKF5nsuiep?4%B)59;Jh(8)-ms2rS?&QlclY^~vMSDrPSD)^{G?di zt>;pCBp}>tk~dC>x9I`tAkFB^+&<|(`XvEy-4omv3m``2NJ%C1D6|rO9X}qOLYu_$ zctP6vdI@s~#n12PVA#h|9r%YVyVvNYdyUuY7djZMKyuK6{=~U&>v5SLQ0=pCanRTe zKQw7lS@hh4pK~Atw!2)z5IT0}GF^P}^Fb^yH-<3nkqg9+#2OD#0zIZ~U{c^v2;q`l zAO}bGG>Yqk473BVh_@FBrJdqlV%&FYU!=iV?ti%aTo6^L#1m9JEyJ8^ca1N&BnZSp zZ?eJvalIA*-`FrIxPdGq8FMCbj7OiD?1w9#_qWN%v(!FbQ!@Loyr_oWD3pX*1NaZ`R1Vy#4T6we|xW3 zEh^L*9$v|T5av5HM!Fwb8cvXwfL^7l7D~ig*(n^!=}bn`H}^ZIw@5_L%mns#OdplK zbLoz|=wI-QBPPTZE_{{eDSJwhe223EhAORH+#eI7v2W=d3SQoI0j0BfaQy zOZ_{~PIZb~;~m{`rf4`9kAUA=($l-V^@DqNDU3 zucaFZtKM9nPgn>aEXMkx|Ge=pKkw*0-7LzjXP~uKoQ7{Z0G%{1HOP@@$T9&Jw;5#2 zbAryzXHNV{kILVlR4k-O|IwtR-JtG)_LBI>C>lA|3(!pWgvg|y084ENNfbRnMh~J> zcC(Ax5_m)!H46T}LmABQtaWD40`qYR)#)RM_n;k{1uSl&?qDv$ExxD$oOGT;4M#pd&y*}o9=rf$gQ0m0EYuHA4eREp>RNu9J2XCYGJG`6s-LvtV zA+OfTJwS}d?`C{i!pS6Qh;S4yDZk>I^;5noz5x%#kU~I%f-L9k#+QBM^zu|90!*5J zqx_9j!8SG<$VZS4`~ zVncT#U;bP#bI`VhxzK)!3HIEiqeFLu8el4IC9lmZ&>;&R!!;Z1sGE3!y%9MYhFejv;WcN%k z@d-z>iknW(GQ}05+Jan>qKiR4m>8pw4TR`I)G2VKOtReEgwT2h>vDWE>!JAh>|Vi? zFoT$sxlRidZ6qk!h?5101=9-2J-9p@#k%kns+NTtS4mWel?2@=;UiP;wwM>=^BxQ_ zvEVj0cc1JYez*H{`}del=!_DB-2|CQO^N?X(b-3M71i&;cOvm*YIg%->+$a4vn2p1 z$Hx&5akD-F2-}By&-PF`VKEdX5aPdn0tj{w5BCoj58qq`J8t(0K=@(n@af*u?-l}4 zq5z?>(HVjzA592P_pu1O3&(HbK(iD-di=eokMwn#hsLP!L1dfwOb9uCQTW~)`XZ%fY}=vhk2 zpis$H=PA~09M7m$>}OSy*?7ht5AzYjQ$I9vw=tDa+lC}H7USuoe6V# zEKt^6q%0uKb8iRLhQWL^0)^dkGE42JnQj7BFjHvs6ONDDg! z0TUEKeWaK ziew?u%$sO8!x7-n1OTq!WC>zDo10Dip=X6o(~!bC^~?dYZPrq3!?{*0O5ErbZua1% zCD@Z$f2iHbmYFUD&z7;6b%F;hA#hOSm$!bNe~S#h^RU^#FtOa2vig_aH(!1Ihrb?Q z{q^|$7yo*%xAF6D?)CWR&+q++TARWCgRYU2R#H8j>3~>jfHS&2nXx{-zeNph4ohi| zx2Vr2se>AJ^#|6`i(hCVc(W9{e(1=4YuTr?-;LGdt5rzmfP0SQcBZ0_w)h<-h3~>1 z|0j+!F$ySbdZxudcz7R={MFsL7M6QwkysFc5V&d47)n2Roxi(&tbHu~l~4b8`}G($ zm;YP@skaN5#d7I?D#wD@3W7{Sxs+l_j8>!sK209^VyDkui^Nn>nKZ?%p|dCIu;hIt zFLo!WA;|$W%D;x~hl#jO@`XJNk`h&p*;@ZA89bE~`MUC41*F-1t78$69|cJeA}FTh zlSyKe@;SIp`+@jO8K2J`EA}Gv!FSaID7*$I8aNn zR^b_OAAV@00EAX-1&pRb4W|FtjY~CMVp(~rtgKmkZ@AvdHCv-EC6Yq_wRiPfu@8oo zZ4U1UDoq=~h=3-2`1L%ZvE`gQ-tDI!GY~@iz_Os9YMMerZDWa}5L`E21P=2?Y7J;& z3?2mD1o>n>0_`fLiNW{>1R|pUoAd*%-M^T!CU@uun$mVy3(`xx7PrBZo-jN!J<^^& z5Tdf101(8e%iUmW%$*z938#Wl>MWTZ(K3A%$dF8@SPBS$(0&m=cxhW0={E=#rvgBqbJ&0z56pNVny@{BEnJ}Jc zOJ2>;%Ey2;S!n=fgq2$yz`tL96a>IG9h$iCM(CT>rf4`6;wZ@VW5D?!Sn2}Bcj2m% z3FDX`n6ko-I*UM8U{gG5m3RASHFuKe@-Ct;Kq~7R2)Qc$ell?9$;FyrTn-5>G7@L{ zon1a?#qD&r7nmSYBvTIk8iLHlOC3XFLU`ZGg9R7haCYOlInVya)d6~?1B-h@daLwM zc@>1f5LdmT8)&PSJq0u@{!)sBBE<@aB5aoH^n2;qrn7Xs5_Ae7mH@i&1{(Rr*r|Oa5eDI*?{38}YHnoREPfjuZRSL4x07xyb&xWCZ#T_JAOj`>VA< zu&l1XYz!PgAv`*axpwvo`Zv=RfYpamHASPRFvQRqbkVDkMI34{08B0l{ezF2=n>*J z^#Dh0*uTZpk@@ml*3v{cE(5`;myK!ev5ev+FXRns<8Mp=VG$){Y4DD5)+0a(ROOAH z^xtn8*u5};zY#*e9}R|ESJQVqjS|T3qiLtfB#lX9-~q&=(CSakHn0|u^&ck)IysXd z71g-WM@~B~W8p)LCr>mo1d{4vJz+Plem-4g?yu!Xh(&sHF&pVPXs6NXk49r2Nt+LU z1Ho0QV)l>7!C$kiwJ*4kst6;SD$ZXg6K{4MCku-x{vgdFMQVyCK*Gn0K+S+bjZ2L> zS;t~an3EvN_39iMy^~4*_GF6FQ)jr=Ng+rV*{BRU&0Ypag~t>T&9|fsqYAkI62&Hm z?->R%TA>1?MvNC*X={w*1IjR>==8}{F8T~mA|{6}sTcu>2XCyUsLPt0TdD~VmFQ(v zDe8DE=d1XL>6fDLGBqTC)S4>XciLYIQFBpR$o19#M&S~x3x5)#f}LL`k3#$gwD+(6+=6+XFaO0yFLi1oV5UGeo2j1L(!_GT7F zn%5x2=DbnU7-)5KFn>}a2(#5?TF|Rd#C&IGiLM*wOK_&Us<}xkL zlJ;?$-!?|7BugvGn%{n4PBBD)s(I_ToczMnVoLj^WxWhySMkZ=|H@unb83a)g#s|O zBi2(;h=mI@ng%(1moK7NUizy>uzvwu)eV)o-+YV&$297(HR*H-xz{SdTYJ8n`2JU1 zMcS@_77wz-6ijq~;7ALkcBB(`5!y)d4kG+co!(KD3#kF;O^4UbIeRl_9vHGJ+auf* zD{US8og{n&&gV`5my%x)+DyI(hAK3IR4-k4o#75bjIidB>U=oFg$rP&;~l-G;9!i~ zAj=ChE6w+jx+Qrd$Iq`B(g?pbV${(AQ7;lQ&xzqy98> zGaP(SN8zK8?64RCisL(dFb36TOI^Y1A($swmX=NaftqM z8qRr^AI3{DiyApa!=lulUR=5pD(w}mje+q|! zw3~}7K3ehX^q-g!~00eWw$lu z8t73s!59A?#%IOw@r9Go5OtS;o%o{t3%@9JnYOXb5^%@Hb$X8PkAGPDT4TMI{aF8T z@;5VEZQwxgP)ztQ$uk>`)k{boA?P8;po^B*TGXb|d|*-_OsM#75>~CP1u7??hH#_f zk?Mk+`-{$z%AZ!`YxIE=hI#F8v`D6^lBBmZ=;mQ2xjB$===(?%*aoFVyh;GY$4P+~kKaKmR~t;;SKo^h zLP3SM4Jfq|XEb=?R7h_b$tbRVcn#Tep=6=j;HYn38VuK|Sq~^KRKF7r`O##6yQ?VdZsd2wk7$B8Oo=)T8k^ngc zp39CTQ4*KrVLO4s)AmkPX!4CSLf)9o4R zCo>?1hgR!H!(&pq|1+DQi87qx_a}-0W{wK|@B&Tjo8--1BzTH}Zb+y!O*PLdwxz zY(>B6r1s6`=E33a$#Y&*zk9O%WCyut&DVQRkDhHke$4k_;sxo(YX$UkY%|iLAOwh8 zWYbV2__JJs$#&&|)S9-+*48dHFe3H~E>FIurQyq<-|~qe2b8P}7Ln5s0kVCTuPoA= zEx9K}s4N^xc+Gfni0N4q?7LG-8RRO)Ed9jW6$K4qYK%9ibOfkj-APAo2833G427Qj zYpN$eK)Us&e55wNA5p@(c>B-~QEU7#6eX9;13Rg+p)-ZNwA*ypbk#9Zldt+Ez6&u1WW${B*ZAcV;%t(iHa|Qu!G*t+ zZByJl!G$K5Hr2f6b!mCsY;y>+7^F$#OZ9a_cZ>Bg z&whz`OR$|tnt~O&U&%3hMwv*}Tns76_!Vx;;fZ_^G`ZE68>H+ylX=Zx$imUh+adt| zwG_P)ze~WGrtlP*xb+z&eY)$>>?sHcZxZ}IF~&e4jIlV&fU5YDJfe$O|7sg)#M3g& z<9$?PK#O|ZLO94f$U{SmzB~+38UH@9+2_rJi|n5$&4J569cp>v?~IJY?}}Px@l-1x z&wNDv&X;-1T*d6}Fl|!R{vV?8Y{&{|xJ?yhvL?fCM_2s`JRdOPlsCrY^|x2BS)ANH zs?cS8sPFv_QZgSjAnxc%?xC`i1}mN4%*Hp&1q^*wI4oHs;jXpdjYP58<`3;3J)7$g z@%>NX5vdIL3_H0jS=Z}+|NU>Dcs*IINDPNvPoJu}?@1M3h*xPLs2CCpXS6=f7G(al2!||A2Q_{#sjiM-&IBt|dqBW_GCh0*+v|H~m zJGHn5LaB)|B6VHM#(HE;6iS1ysawIMbu<{u0UQ$@_IiBbs~LEi1*K2(_n?tv0@2R zC4j2x3q$O=W0{!RM25}^l|;D&EmMBs%>q!pd#osLfl*rkUM5eBHK#!1opGM+u+7}- zeoZqWoz-vk_GioqR4DY~^YY5z>eiVpE0TsxJ@8Z*kZE_rm)k^V2Yx4W=Fcu}L;?_0 zxGL*-eXlELSaAbu%IHo_>kpL{uv5c@h7iMcJiR3KS@f=S12CNhsZM<%Oi$M(eVqv| z_8Zwv2OyvEFIx^FVGxQg9+nQTWD#(!7ZithMd4Y3UOS!W`pqEGDJ5DAOOAs6tRHj` zsoNT(`|bQ)Gde-`Ly7i*9Eu9qDL6wAm(44F@}fDTl&}zpbA-0El zM5gSiV8{I)!iHc`NLg(Dz$2U?q$6wyJ{oLkqzPdI#45v>r^qms1hfjAXx9NV2xq0!!B_X>WGCT;f=al% z=*OZ;vdd_zBBC)|kx40u|5?gYHu?W)BxdK;WPDi-BVF++6eC2_`J6-G(yr9Yo-nD1b7-SIFan2^S1Kxfa)M;^^OY zPKO;xH3@;>Wa?w115di6Qj){?U$2LkNeB?6M#YCM>9|$Cxhdy{WO))%q(pug zOgW{z)~GG>mF4msFi$F(0x4XTB3=6Rpe7V7kFuBl#C7f5ciq`N*nPT#O2~V=M<+-7kAJI$aJ6ScTMD<$qlDL%lPjwU z%SJw$eF~e==iTzXOAT~juJzb6m?e0vor27m^~!xO5v~BtK5V2Wp`+kcD-Z`|3at6o z-bE>~u#GyNJe0EL91iMAul6__-&_pjS}X`02tGnIpgh6#IEEH#Zn+m|{HkMQ&0PlV zalU}5L$g*~W`x-_{F-!wD$x64fee|5RPA$@hT<--uV0O6M0W;bNL=0kb~(iC3=Q&z z2b2ZrgZtP<>HLv5A+gaE7x@gsq#?!O46_5^D$vYEXYUmx^IPvw@yZL5*&miKb<$hqY3S$wrS=~Y&+bwiXXLSS2bOqaw zQsLglYNVTFty2#W^;Rm%*-q>ND|PNk2Q={{s`?O#_Ndl)1pU|J=o9<~{YEmo%g~U= zWXaD`6tvqzPsbo5()rlgg4ZqSV(WelYOZDyP{~d%n3QWdr_aWZCfL92CGCiTwy(lT zik1%nf3^jru!uit8AB4R8wgJEYg&Bc*o*j-;io%% zah6I1x`)4~eTLa(5XhPT_+4sovLG1Epk&K>qq~Xn-(lQJ>qnS&VVzNN4pF=>M??zY z^ZZDW0BC5b!Kc9tqo5_BtbOxgu=*P1_>4&tdoBmmZrHHEnzq-y|QdgmO~>!d9ubYNXAJUN*e)9Lyp7uN%M^b-skRw4X4AHUnq%xe#e> zDF1fJk&VJShENnQ#xhBV4iT7UQEw`(=3{v#p=QGYwOUS14O|O?vX64q zAk}6z3Yk644)?P6j-IumN8m7oMU-&!eudIQ3vQDz88e-Vw9pLRfIJiiRL(^vhyv{t+wkgmgp=ey*&Ee*-G&hO@B75jfXq zM7zs0ZwqG}Y;FI?)_1!n-3^3Pk)?4B)!Pd~PbH$KH)!AKW`CZuVUuX}u+rgs5;*JA z9GCWx_4fHdty=tE6a$GtjlhBo4TT@6Z1uf@MuH8a0CKoMxCThTK6BzCi z0)eNeX+V!9V<3%fjH$M;oHhK@r~zMza7agqNQQi-wXB&u$$7~D&i%^i7ifYk9Acf? z&J9l{5^XNwuhnK2j^8P>y|QSgO$dqy$!(8)?*Y2=>;ftONkAq|0}Ap;lYqj{Oz4EC zx%vo#CkVbx6-3=juixRydeGhUS*5_OKSb#(TaZ#q`D4FQE&mQDV!eS)F9*_JYN~`u zAcHQrWB^KpQiS)pdwbXsqddw7)lGNrI%;M?i$CUw#dzY1-nGBdP)4^#7dcSv7<`u6 zxy-x~&piKn5gyAv$k;wRtN62NNry}*;0@}dvruKE*L{BV<_ZVwIy3mHqDb;(3eKt! zuY}tfhm8CT@@2n)j<)i;4}OvipW~Z8u4S+fq@7mJkoybN*=I9mMd!_SnYYf)b<}RO=7rxQ7jnql%K6%}}TS@b2WFiEY8Pp`TWR)fIVeq! zWit7E)33IyX?J+;SA(0=`L_Fba&J! zUw1q2wB-s(_QAWXi@cPM0puf8R4qxRF=kB z6%!SV2xR-O)F{S13%U>itYC8N`!>M`z#`Umn$H-?BcXF&aN@s(+|^V;fZrPw1^_eL z?bBfJs9|Ce&IVm1^4MrY43RY0vyx*40|>J?6FJJ9gM^Lhyj0mAH6Drx5q`MVP1L93 zongro`sRnx>~+gKS1T#QMAJdW!!02Ulp$3mj%y}}tjB1e)xR_OlkTyZ*bFowByG4& zmM>X@Y}YRB>Um|muGv$u&cL-N9%d^A+YCwPf+B)p{Ro|NI|7=P0nBh(Y+do(mALD| z#?Czx9{aW3=r9_bPu=rU1dmwfdn%Rp(|$=}mQyc4`dX>=3+N{r=?H@GM8&Tfk|%G5 zxAZ&{n)MDOGb9{nk`yGaiPI>$m4ou-%-8$ZqpqapT=Vu*xp=e}Q`OveL^9Unt!Iz+ z51)h>!{P3CyT5}@L(dR4KT@xiC_ymlGusFBX$fzwSROm9%GaY;%&$nPUGyZo^aTc1 zw1Lmn3H!tn;q$i&ljOk@sFtyuf5K=ehN(twnLR&^dGfrSRUJk?N+#E)6O9Dmg?vA0*iy*pziv}Ll zT`=*YZb0v2V;GdEblWH#R9B*7L=X>@k3df5qibB%*elhbNo&a^bxKVAyIR-M80xpu zUXJUJ1E1?jHOt3bS;D8RP6g><@O{$o4bP_~P1UPn_qt(`)itEl0LSACv1Sw-b8CBv z*pCy(*A1s@nO?|YK~!bk$s00F3!xmq&ugWR>{ugKnMpJrzcRl-VvidxGp-Yo8S?T(6dMr%5H>Ei5dG4c}-IX2q zbXZ}O^Z}Q~Bv&%H<`y)9P$hht!Bmc<&?F-T>|`V9(^Q;uDYN3>u=Wz5Xfw%A8z9L0 zHi1t~%5Yqwk&}%Ll7dN-#akQVXptj%en+K?_l|W+1&FjFWW0pdk+>^;Bpb-*5v$#hf0!ts3!(s%l&&Z-rKV3-5e`ePIgMwD&4Pw;loVqUF*hHR9dhnH z&vlV?i+B>C!v3BhC3Ge4$_-9b^7+#Zl4t{!qy7Qd4*mP4tR;!&-OL-psF_LU&AvGS zpEa+4D>D|N5t5mV#hOZN$Cf)kx$SaJF&`0%bHLe|eC|WUv%!wmloj@kLOA&5y#X00sFrWypjh!f4pKq+X{z4*?bq!3%idg{bWG69~XpFcfFa zZ{nNAM?uGwH*!L2>(p$dN+t<4Hkv5? zm%|mAptZruCXJzr2BvEQW9i+J6sgbi;BnwhSPOBb#Xx{)vcv#kBXv2)|d##-oeLbhDTj!GYxD2=1+Nl{6$*W&odQ>P#> zh;|susDI7AGDU~gwr@3w1e9Sd<9ed7A~eIrv$4IwHH>}aEW*eC zg1E7eS5=${aIsIKBF5k|=@J_)FI|dnmXa>TH-S#)NSET1T)OD=kx*33-(`yw`iVVA zLi zhFE2I7{Y!ag9O`*Iv$4iwCbeGB~NS!R$}*6gWvp#xuPC4kMQ}O&|*P#Q>uWQf;U7a zQyZ=s6-@TrtJ2ppW~6kTF*H#rxYpk6X>ObpubRg=3|OJmPhf2{$6LzaXnwYoRA_#- zj9_SfmCJ@CmA*wfIOfGEL(n~-9{6qWvJhl*%x1d=uQr;PSZH=uaCOU&Wvj-3MS~9# z4H!oEZd|;J0-V!4` z7S3XCRt8Y43tU!ucv0qf#7eC~#L^@{|3=?91;#yU3k0>cC!J@J_Pb{_yOL-|`kYkd7eU%u#? zwCcWm86LgW5F{RjF;=vi4!l#`=Pun^eVy*h`}Quaw9{yozQh-@E@8K>0bHcqW(fCM zt5O&R-7$^6NIX~5ga}dsk#QyH2W83am&Ix{n&eozq<~^;Dy@4{;$Vy zu9ZsuhjCLz?v2yW(_8RSERbJLI+KctZ!Q5lF)yAPkum|Jtb`qFc z&y7TgKypRZ`qLAJP2iIuG!nyr`kY=ML;-5}ilEQ^LK#*yk1}(V3#lKUA`gyU6&;$} zrEdcS&Bj#dvL;v*wH0mJ>9!{mBa#a;#dwH=&S@#aI^Yq0VZ6?wgxV}D27ztTi0ZR2 zaU6&WJ9Z#3AZFLQk&f;;n;B~ruV=IC={K7X9`wH1#Q(l~_wIP(-Z!VC z+35`uHfF~gj04n0u_1Hm2UwxBY39}0ezz3>R$IRy>Gty z`oUkPulrx$d(mHi^~L(Xz5L5Bzxc8D4W6#uQ>qKo2d%U~1x|<_X4xi!$G{#F_(BU4 zfU!k}YY|vg_el(3&u~3(XTu*vk0;+?1^i~5lOm$wXb;nkW3ivj44)F|v9&*y=Jq3+ z+vx&{0h@2zS3@Fz%lZL<#eoboi)TMv_@wuxidP|yVA5)iPLcrya)`f z*fDf!ieya1kP&*~K~k0`>4}mpXkYcRK8&5)*D;eH)S`bLYNwPm%o(@dM z=-35KzH1nMUoA1q~ zqsGE)?1`LxQYBV*yp8AL*`yfC3}uytVGh5JFS9?A4x#k z%98UhqPSR@gM>RY^fD*+o_&Z1p{FDK3~dU=yvpSoM8S&AZV_Mfv`XVV$6ms(f0BFk zWWB@xYoJQjg4h2&m#sORQNhhNs5OK=DofhfpD?;aNgFaQ)KSnq+U#MHJG}%er)oLv z5*#CI;c5HnI}ksArUQX=piH#lgh>|Caa&HOxJ3%PtgL-1j9cqQ^XctPwtPZ>YrJ3D zhRuc~rMUGJuv}c`%t0fyrSoinmJTB+ncN}Iz)7pogZ1T5ttk!3&g>3`Z{?&JH{%+K z-x5=aYfXk+n+_o@)7Y1}i0!zxBQNPp*i)QiyHHI;P$^B%-t^Ch|9LaKk*rUq<{VvL z$ZtY97^e8Qv&7Zt4#`3$c7;El=zij1PC1xv+{#TrBHiUJg~q}`@Q@AD-nCFzpafGK zOX-LN4uBt#nV{LD_yUy@PbBp8WkraoK&BALfHGDq5X1p&+jbrjRR<+o_@GE~gdH$S z){JMoI$x--(T+TM-?B0)xN*P|#C3H}mBZLB|GiXy8)rTR`AU3ceXFm$n!IswXEnWf zlJjL9tJMw>1QP=2_hQ0UXFi0wQHq#Vi~&SiL>Nn!*%is$WufA40n!#*$eY)ZAz|+Z zN;7FC{eh5>1Puw3w;xS+PLXGcrmL7rBkL`f$+7 zU)fX(QV$%ILnd5F8#(waFp?VPQT;mf=ypEoUqLlZuzr_nQksXFYRzQfF9jd4r*!+m zHtWirG@(3W-Bct@U-V%0LAu-v>`a}XZ`@Nj#1X9*^(=85RWxhTHOa#9mBva_FH=Ae z_Y#9OAdneJb3K&qy&-yy@d#h5*NP_6?aRWW`K{;W7tasG_6=`s1%Z0;U`wpdKb052 z#5S?WQ!|mTZ%#pY@MBQ@?W_|{=;}GgUQ%fg$zU*uy^bK<6}!=rWMEzwC$1ggxFA~d zjKU?hXzkMTZKN!YP~Wb6Zv5PQv6J5|-)zvJ%VrZ`3CGBq&n@7V*1T&r+GTA-#FyZX zA{DFBi(lRuE=|Q2ZbYx)HXxNT_rU-KKF26xU;t!S8^-x0p@Mj?`pODQc-}jO!T|T`gVr(1A+SZHBP7I? zbv++E@C}bm$>tZhJ^9rHwRr0Qr;l5~UMb7Fk}r|Xs(9YdS3{e zRPGwC%(bnZPq+GBXKbWbZJ~3v7MSsVb1j59=FPT3M!fGhUC#W@iBoV38Dhg^n+hL=Bxho8WFE7(Q=@>8CDP(r3|n zlEs_{+5ArHZxd)uX1{Z1J%s|zd~tQg_1;?0*-C~1AB7L^h$tS<0k+vPhqrj&4rm3z zYQpHLb2nnb8T7)^Gdsyos5=np;|~~HPh0!g`m2cy9VEQX$JWQ~V^Di^xKan z78sw8FMagnY5Ta~k8&UvH9>(BAZ*=0C(*jR3QIx<*RS5Utg;f(f`jlF}%>TVQ|24 zSQoA~_IM}g;RfZ)-7`Pl+sFR~{}EM@(wF9Id-4CaX3uA%i{nQKxK3{|>&v1OdFu+Z z`c4yRmAJ=%FoQupKSJjyJxJ*7KQXU6-=e_ZR|&zl>!1C?tUktr-M2HJ^&Wmk7S#I zQJ_f#4t{*0ec3yohrJ$2fmzPP9%O^0Ln1Sep_d2{!`v{3$~hV-Z%;6ScICx5N>+_Aco#PBMziF{U)^+2x<)A z`Fn{8;)ev|@Gk-35D8ox-3O>=k9XEL@pCeK5APXL)IOQF55fxmVK0P&?;12_{foHi z;MNcH!vg;JXQL}yA>cyp&herBnZ$f?WtiT`%b4yf+|I`i{U(5~9{9!!cO^k?p~{VT z&Eh#5*qAAxNX}u5`w{Qx5u#^EYptTFKm5>0j!Uq&Oe`3dO zwSO}kuR4}o`fYBGra#~W>-ZhERnobsbmpaNSR!RNr^$dbKEMwnBdkm~eHPYPWc<lJpK7~u#H2pGJNBrE!#K4U)g&2;hr{XH07 zz3trl1`l5R;lazFKe+d^-p0@Gt^Igu;*x3Qay&;C(O|?z*QFi$e(|MN^$g&{8dT_` zi4!7QskWWVNA8`cT1(JQQ$S=$VnK!OO&=~JC+3c>#AmC?qm0RNsgZ#dZ3<8n|9pRY zFd4tU4WM$x%q$_l0P^36E>gy+X(CmP8z`(RtfS^agR!#FKTtKXe_pKo{&qQAq2Ecq zc!z!Q{sr{@;MUC$+@qn=U9G1&%<}a5W=0Ekh7Bu_E)f$r@qBp2qBBF&Q-V#ot+~Xc z4K;@h7HJ}5THhi_WyxfS)IkJ*tP5ehbQwQz?PWK+!WKriOVAHsUKWF~w|4y1u_w3s zCAtfPRy4ryYI-vnLgvEX8BcC^&6X_$Y9?SaOR;E3#T%Tbz|nKb0YoEAMfi-*qUuYR zlj+_^ujx2T78T4?qd9y9I$EQ|m3u-^BIDKO<{UvEJ>b>f>~4R*-`Rik=y-B`wYssg z3V;2A$pf98y`!yfAMft$KHmC0{{Qa|ww@mC?LYN)N4w8D-|jsn|RxZiq|;z4NYdcSbiihtsn@YHj=caM@gU^|;%`9oF96Ukv;oJIAY^$9_LQUhRDT zGifBcWDasGl=7)iD+>b}!Me0f4T?Az{Nyn?Vugiy1ZxAIWe$P7r)z=Pyhoy~Y{7i> z)mI0H`@j4B3iMj4)TXajR?zv^$7{VaTtI%j_Lna{fAQcL|GoU#kE@-Bod?*Pc|ZsF z*Bvw?yB7oGJ%=K%&gdvJDpKA1oxbY8N>ix(Yqi*PJ%YJ^^TxHS75EPS)cIkEc=(Vm*Y^4CJN$DaRm)89vDf<@zH<}L~b;qF=9pcR}2w-E4I{uWci;BgLe;>mjBAAfC?S?2$q0< z)*c)XE%8xP`4kZKlZ5Mz2N^y{;s~HG*(t%UK%Wp8q{` zxcpagEwX(a$CG$JQlPXDC>u`bL+dUf3S{Yp25KibYA3uWHTz#2XYT5hvI# z#%;qeC*iyZsBF?c8YU3GRppuKE#T^@&&O$*?kwHjLsj73FZp>mYDmO;<3< znTLqNN3Nhl#1HF1ocr&TFjBpi;(}e~_dZ@LOlb_K0;s{_L*-elqS6a==j3C9$Y(rt zj$kJ%07OI-{cDeP(RF8o18CBEKyl4U07`@l;lz@5&X~a2>9tn4?X1Z?!7GTm&u%8z zP@qJRa9J{>(2TNei;2aBiXZSW1O2&%Y2}L`ND8v2l<>BZ+pE|vPFX=GCUSr5Tgk%h zm&4iXvDBLm&t(lm+1DWL*R-i#vH_VJ+Rs}`W21R68i@o@)1E1hjIy|(VMqbd*hcm? zY#ebYmtXgEDIC%!omzjqboJ4A@>H}r=!J#S9k_WY(EN~j7$~fXNe4h>x-5o0 zUlnUel`k`8YwfVQJfTs!agqy#ba;l@OIon^aj^XJWVVobs>1@CL=Z$~h{P*7IgU7o zmxHPM_vVxct*?q}m_#|2Q{?i9%Gz^#eI7^5aT7}JSVlaUfz_@Wg-Z1`>}D4%`8g8d z@m66R<`!Y=Ch+1#7g;kB$Lqf2S+Y$zrKxYOk@Nm;JQ;N91xV}f z5hjyW>vC9}$^5eby4m@*KgGcwWGmQUiERTP0Fy}O-~HU!?Q`8H5piNqb@pXBXmNU6wTBK(CERc|Tc1G> zZg%?DbU_8_58kh%EYdo#cexJy=%QjL2ff%9jda6dPfl+}7lRWVPMzG++#nVZkH$t} z_y5QTIN32A-^}EL{}0s-rNCk0sBu+w?Ue>Ovllv}m-ttKeyL~rV_P8tW_vSUg7pIt zHsU9no1kHt<9nQC!92t$obdvq-^hjuUME{l(m>Lt(aw5CQ%F?)7+qB6;G9S9Rl_3RD%*hm2S+L4DrYi*D>hC#&78bQuSie%mQAP*Ag7PBxg!r==WP zP&wuNaSEC*355@XXz(esQA!;D@^>VTAV38@Ed&x8Rf)vRJd2JA-FWOR>|E7szytTl z7dh7=22$%Dq9;q)X=;?>_;%tM$hW9!nhGYBYdiqzk2wqe&qoEznS#V4l#AoP2XeK2 za0M5C5DbzJ3RSbl#^Ny!dGMa+*|HSS;$Y>m{4Uze-6c2->i1X?l-(5Rq2DaU$k>ZhCNfIrZVj6AR^Y;*^3Wz>PHs$YTfZYPPvqp9o}&dxXALWH|pDs$Jd1M)Iu9 zjE%$MSzDc&@U2WTbi!HcV=kfh><$h|kZ+6C41!Fi%LZXd?Nv7O81x9$i^?SxHLP?g z`vyf=G?1)1FO{$N_AB3!rt4owfmS(`$MwiZ3%IL)3Q(1DDg!E-+Xj^{aan3}NM)eb z@yyAvyLg+Q7t7Pyj}dAGfUth8-v&XdCA@Q##pPCga93?0{9cn}Qx#q+4`5_rFZjyt2ogX^%wsXRELNSfK#h_5#AJM`7dKJDY?q0)|Vjin|qN0!T0{^x51=x++JoXx)dwA7Xn=lPv_%Ot&@04I#S^8`{>0%0vGv2Y~dk zo)^SO$ijDJ;EZ-vXEw~aWsRMA^DpeDC7Ef7qduPLTMSSf12WXAq3WoU9Z) zbXFW#a$}0Ni~k+Wp8|_%8}YDq%9<_V%Z5p2Q;{hFNoE~IRI~5oSM`*WeH4fQ-%K=< z+94OHwypGx{OBQKM4DMg5*K{!4vrB)GFVT=;t_`Okpc2;zRV%_0Cw~eAfVH9e2JM< zYULQfY|RNV@t;H>)vF_J0Dj#zsjI2Ps!Oz&R?*k4WodABAzm69pSO+m=`LziFM%x>}NM1lMxIsF}Gzvwj%5K z?CxR_4xHj#$aY_xQyHiq z4W7&4A>(&K&$6o|$qbdRRtR7^JC@Q}$S83>{- z2g`?!$T=wu%8muvKpL$ZFvHAhV;S(wER1P$=7TtO5m|E05NQZ8qYU=NM*Nlrd5|u?DQ2)l0sEE}Ed|+2wvRz< zLfgQY;9digq9qNR!0xf{_!Ha7#$7EcB%J*!5y~#e>N`ND5pFjMV3bwa_}6B45saf@7MQvlQ_Z3=M5s^UML`vuJEY_sW5U*y- zOynvtc@P8*df@L!Y3)J<)kM8DF%9~z`AO+UIqzzCEfGoWU5R?k2XUrq)|`b)*r25~ z<>E>Mo?=1Y$L@NVZY1ZLZ zKIt92YSg3(&5B|`gS1TS(m*F;SK&}AmGT98jJ$|J43YM3|L=&fgsku6`;5H}sKl+r5Yp<8Ol zErY6xD27+)8rF=Koesr1Xl~~3s0GYH8eijO1sV6_gT}1!T-*M zpi)C;wy`UnE@D%1p0!ac$j-W(>;LhkQI#sw800p_yG?|?OuPS)vdN{>^NWkiUsWsx zS6*$_C+ArliTB&1gUI|JAbe(7=C@9{l>b_0o!p@Gp592C^tIDbHrYYLwhp+&pauD{ zeO1-T=nb~}{|sqj)JoDsinUPmBkgl`kj{to2+DJ@tFd}!c_K#yax)|+L*Q`A|4QRD-B+Fee(XfVip)f8fwxTp(1+;*+b>d>1?L{$di_LEG; zURN_I6D9FbF&b)fW%b*Yuh;iCo^S80JbeoMB@oI*!&nXdBnB#pfU4DH@YB@Fh{E!^ z-)*j~?5vl~s&(JpYEm<8w5@8|=JS@`20M95%US)baaT}cNq$fuOs5pIVXZ7>Gf6r_ z?8;`I{l_JTaSw70$nJt4J;DhZ4-YQhbNaa)GNxe=Pk0yB|K0+av`Z>AqCG5E4(4J2 zg=ct^DM*L7E$T@%&I1M%IuXQXaE@x;hpNO7(Ez}3eB>=8(H7C^5jxAMAAVr1R`@;m zIbbf5q2khnwimi~W}g+$CGeBPj=7IIv@bf{dY!wgc~nZ0@PS1&bOVh6IXhRP7971m zX{y-Jlx**WgD1?Yo1{VBz!`%f5_3uFs8Hozt;q87x9k78zp}mmWaH`j^Oa}oy*48*oV8VpSbo|zk)2_1ddW$jK7KJbuEXGP z$R?04O1yO2IGMehCoFSjYJOy1BoH*uL8ttImcVE5-@9&FWHLkWoqqOYWH=^?Jbx#b zn68?H3f+o{{klOlQ_tQG8%YY-z{s=Zy$4PPu!$F}{_3RY$j=A7K1xD1GEPS>O4eB{aC zE^j6$hrK2LiL_>tUe13bn~$6umE2!nezLmu$=+Vd>tqHm%baOTg+>bb=nj1Y8B<2~ zg_4AHY$WEPvsUf`bduRw>ckv&mlv0Z-tH$n*eVEq(wWf?{Q16Q_;2c(4dv3^&VB_o zoot!rb1s|Z(Dl?DI~U(eSQIszN+8M=&(_;afS5|DAWnixj5p^hiRTJV>!s-qu?2*9 zv_quKe1re~e97BWF3x2*t(>sK+QydVI?TR&kMRE&Tl?~nOoIpTr?O6FfQ z)QvQXn%;7IYgLBn@5qk$cYS38_T}GA9Q5WN*q1m6NWW;skmFLbSx!zyr>EE&6w|~9 znF2)8XbQRa?&5#)6ZTC{`I4y;_vRzy`=9=~cX*+tI98CBlCKdp&A3AfOiQ^KOR*$j z+PX-AY6B%e7Uf?G*s8Tb)(So486xtQ-Fdf+2dnwcJLX0C@6k9%@bKb%6yNyQ_!bP- zU@lCWy?M3<+~)s++GyH+TX2KPfobZ2ja2vm!R3A2h7XrA_{T{_vYOh zx^74og<6QT|Ei4o=4$GF;=O06qf_Yp!^C4RO&!sr<5qm;B9kSdTP-Y%QwI1a0|1Sf zo*MwH7AN+vzAa$dICwKcGM?zBw<5M)3H-0Mw_{(QY zc2@)zr;s@NAZj!(@B?cl@lMD33|;e);o3R8ple<`Gvy9J=E<#v~G_Zy{Yb2!ryg4g7-_QxL|JBO2I1Vtd^CV4>_GpO` zi^8Z>1Ocic)u@Y{ngXa5dOsD-VGfB+?dUdq%SXjzrOX=i|uvxqG^BoZ5d_*#2(Yp@j)8e zbxEP!IvtiDTj%DQQ*K4uu&D1&-5LCmHh&}^O*rxPaWre|Rz#siknF}zG+jyul2cX{ z>^Ol!1*T83{-!-(sBc~A+&&s9v}MTgsumY-J95a5-hoicFvf+NZ75iY_uLORHWuqd z<|yf5FGWVk{3ikE!5E!gUL#+S6x{8LeT7s|#h&hW=U6$)&1v7$eYpPf!3dWVBduY7 z{pt$lI#R789lW8DHmuv{TIVdws#2>o;=Y-;&;M5v&p?qU@nVj5t~T>={5+5Cl}nD4Ijpn0$b|q=+_# zKpnYw3{o*H!DB+uK$MUHv_)WPBTg-0N`z;FfQK;uE>5A`j*-Oc;79hyt%Ih4l62?f z>f$FfN^YvN^sgTQru-wCOQK5ug?y%lSfX9^h{eB(&5X9rWo9?h@D)NtjdM#z)9R7W zK2#NLsuePAAIyVzu|D+2AoH`;+xw}hDeJnci+@1MYy|bxdDOeIk476W*-0w`fs-$B zIl^^Jal?1Mo>64Pdh8V>LG=BZh*=dSCUIC4GeK8nh&Ja%Q^_Y-IeUAwb#MYm|4VZ& z7$ybIoKlClHM3#1;6uLJbY%j~Ty|)hO8Zwwvc+?@6=Yp*I~Tln*j!3=ujy|yR?C=hZ=mi zLG>YMRWOUTDM!9Lp{j4VHe`+J{SR8FbS_9{)EtRIh>u0E7;fx3x;THMiPp}MoC{Cq zNFFrWdx8v?!)sVtdoOOTvHKf-Lq5x&+JdbYE330FZizOpNrngr8~215*EdYbR`N`$ z1Bw8PRN{w=b?b%~O-j|fwRBF6Yo2|&X^)#oB}aYdCl@zY2lTADp#TeHi0qCDb`AKl zqwii81)wep1BNt^VzlT>13cGP!1_|3C3UE8@QH9qP%lXdtZmq^VwgO+x;QhMbo0CQ zkdphd;XzRwuaekP>_BS{G?(}X?TAD_7>&3Ot@9`$>73IP--HbJ7=KHe&WR9i>u-a1 zkYp7cT+iuj(pBB))Zw_`N`|a4SW#tVTm(}fz;ND5S(|G*$+cl;<>c6yHHWMccT}(7 zM)vX^@;qK8Hp0oQ)^*@yp{fmvxCUD>+CLjz9ghYToI%`lSUI4aBSL9RCTs$Ya8C|) z*c*sS>-H8LMFiMsIPa9Ty#~JRIzzw2L}?%?Jw}jTl2X=$Ywlv2KvbMxA0eCXCs?5> z-6p<%<7(}b$tM%I{j!E_dcDMJ1**GiD&0b_G8~bIwN|#@m%D8;=*pMK<_ym$qcN%< zu_CsU(Q^!e0aa5S5@xIm!m!C%V2Y@S^JDU;)h+~dh&piO{fOWBHCD5$CrCt$E7z}( z92&N;KvG;%8629PS~p;k9R!~1-{0L`K0u47%P(KTyEuo_y>scoVD4AK+U~*d&hePd z!}nK60cZ)XfcUtL8=TIDdvJz~;imL$v+dF8;T}If1-r<@CNqQErds}$UqFoDG$=fT zvQF9>o#DRvCm~XxDATF5eWe10y2C5!cp*;Gm}wYQszjNsV2Cwj_36rg>~F7rv;J%a zlI5XXFpi9X+dEqut2^<-=OBod|LgXP=lkD1U*BF`*<4@S-+sEX{muF|>i*$(URjDD zr{K=cet(gRIsGO(1wHz<^^AymE$^ka$;NcC|0lbWa{H z-@pHEOg2PSRrnw>)q-TZ?mM~m-`-XuKAjqL607$t*X;ts+A%$ZvMDhFs ztjjUb5kaR!Q^BaT+iT-U(NdBHARA5cA$WvW0vz;+`InfqpJ_~A-5gtdq=Mo5pRRBy zK|G*?{uXehE|A@@*pkS)c|((Z--k9&a-A0?gFCS~Y0a&etU$JIpt{ZyZ|wX?y8jG! zln$YF;af)JPi9`e%D8_Q)Dhk{<+h%X~T7zI%_nrRxnrF(f9e$2^; za%Ld3$Oa>-15Dg<+6svWqS$)~9h_k3m>HawB*y)Bzx$&YPgnrs7yf%L=iMWcfX#so zYiAUZ8ON708pfl%l(U?Qtxj(oPG=k{{Lt_X;~s-^1QO|*eHhpDOMSIvr1`(t8Xfhr zwRzz(nA+mu1p<)8Il!i+<%2Lp@Pr>=m~i!|w~dJj3l>^e!j^yg=Q;J$a}QfyE-nfJ zS8rfK2{meAw>n>ZApKg2d?*%p49bV)-w>C@i+Y zAY*{SKBK|*_hsvPY3aWHA5!ASt$ywI5^;t1(e5Y{&zxkzfboR*Atw)^!hC}2vb057 z+ZyYWF#Lw*5;R1z+wV1{%;4e`U0+z2U0n^|4Eo^2BU^&XFc6?qDvS(v&y*O^E)n6c zI1uvUBdp_a^!ws`cna?t?k&4ko>$Lif&;g7M0@fkGerXJaiSQdv74oy)nMFlr!0P5 zd;~-fenfI6w2NVgNDyz2oCv_EJOq*{j}iCFVz2}1gq4m;xdm=`n^`H+T=a`CWu>}w zUIEF99=mshx{KpT()Bm8E@-}l$imdq=?Af`b+GKBvgp4g6{2#XtTqaOszGTC`ge0B z(7%f)KNCuD;9$kZE0KM-utyotQxehQQKXgNwwg$N&!nFz0F^hrurP4BV^nup6I1|2 z1w)gu(a+nw_czvhkG|~v{=x4cC@`5^1Ix^;!va>K734BevEf*lm6iE~HtTY$&N@jq z5LifralJ3yl4AxGJCcQ_z~u{~^7$XRGh9UzB8@gjrPl8se!d{pY#VgY7rDCXJw?Ph zDq6q^3=5p_xf%@+{9>;Lec~xw4G))oyYvU{JbZykoKhuQOZD&X?e0xJ+v75-*WZ1~ zaT7{l7Vuw8kFxw*mVYPZ-!iq5mj^X$l;w@iGlRi@!c8O`)sIDgT$Rncfi}5j2d;xx zNWH%>i+TbA^EcjN+kZ~Rht`TAn5XgQA zon`hz2?VDzch>ixZEQbV*;!4XeRqC{Yt2uwR}L9ZDRl<4CcU%qLJZRl|wJ!X8!*f%1Z4Peh@z&hr<~*TqjJf+Z8n zL4=!P9c`O2r7cKos`k@o4dG`U2eZQ!13%UwnGtulMa|R!G@$?%`*a2I4I=LTimq+S z3o$NWmtg?$%}OmkLJ)|}N+6c^T?>67qBWNqmGEY^pr zp98xDrEd!!;aSG>_&QO#Ne?ZXwul^~YS8qtG14IQf~k4oZ3M%DQ*4OvRw1=Q*7FE3 zA4$1#)tkOvL#n9pDeNa1;ahq8oa+-WneS5Rc9R!qGg@vfT>;i`2Qx6o4i4GVSbTsd z801e!)V_F-1a=%qbP9g$Lo83WFOL4d8*niJnqBY@`dj89Sv`9zwG90wOdNt`w__I=Wsx-b7|JtzT{Z%c zvFtuM@dL3Lceg8WpJxq4NUQ_-FeEW4<=&oHLi~@FP~k%00gM|MpoH7Feu}t%_KFT7 z*l(~bX>VeN=&B2}4o#*u*gj7uGGuJfzdzW+-)9RqgWU&CB>2teV`2IO){|B7v6a( zMm-sYU2?t!BHrN{v9lA<)d`!AChLN(0F#YM0i2I2K;o%=}`n*qXAZ*7Gis$k^% zyTwaI45*n#U^i_h%R&)D_Ya$l|KMZ<9+-*$(3zN43NnGSCtPV90eg6o)iK!^gioAN zpp!0W`u7qd2vyLdKv8*t-h>xIrdltAv-;EPqHCXhCUakf(EIe8ri-g|#YM<5Q%pBi zH0D8D%$uLYh@lQBjK8QW5H>fyygB9e5X5?6EYGj4KiR;B2?n!2cs$Tw3v-m-_!~U_ z;{4|9)#&OGek?x5?=O414;TOR@|OpL$9MJ)7kUf5y~EFNa&ig(ETF*dX#Hhx_p`;9 zkNE*_QdnF8AwHhKDA$ocK;1lcDMMNmGaS-}C3|-P^@qEZCNDo_$^rcKcIEf0qw}ll zz56fy?M*L{HNAyTQ8k4rUKRn_+uLR5mieE56ZO^Gn|vy7?&Yrlq=#O}=e?I1xXa;K z=mHeA^1mt4APHbC7jP1is_RJ**?SxDAiM?rDM;Aw41;$W2E?3T9Cvg^hYJgJHgEK{ zUyhx85?a^?cZFdz1%5^f9#z?0*t96AiQW(NQn55oJH3G(G z!K26{7NViNw9I8@)rO*r?|OZ#@HvZE)}!O7i=NT>GwA>3hrPFhrB4_3-p&68d*Tel zx5f!5T7G-&8(lkCnvulfZtb1jz|jrY_VB!?1nUjnzFSbs(sm<^E|^Qo*Nl7s)geJ* z@9x14;xXd|?3n8lSj9{u-7auM0VW`=G(eBJ&kmUd_of#1CXpcoAD3edCuYvD60Pz zi=KlY;ewO^9dy}HwU7m9sN>PkKnnC&zL0jDWV<1K;#6)3o&~}6LHNM>0+d;+rQ-xrc|Bg2ufE9e@dwcWnv(IUFWcSyJmGrT$MqF$BdU&d|33{v1AoLiu3M^)dEwK~Dm`~M( z8TGP%rWf!Pd!07AtWAlcZKe>o^&G3SjE}t)c9%&}3}_YdGLwX&0)&a9bactCueBMn zJ;!T=i|rw*MRu0nDO&OPbAvssnzL?*=IZ^MGYjRiDl@rwnCrr$F_l)RopqdaB$b7` z1)*>aSX@smFK<3w*+Dv#XCVXN*811$|AEPv5GPd@0?x$MU{3KtWZVzf41(O})5*!} zGke4#I(tGo1AE$A;{#aO>pobVf54g#?cdMs-{0E5ztexo^a)ORxNQITix7^_Ee94awMGaD+%xpR!-*(GWVp$GFr9u)Q;uf%kquxc8{5E+rg zgL%e_peE+@(KwB9G-gBT?VDH6xsQ)1Xc&}Z$a3r~)3D8}RvXi3#ZdFM)nD{B z^~~5xu;v^>x=nbDuo}c-P;_V8;?IduE&z>7xCAt3PID1xr_D+Grn@Be4Fg(V52gw} ztOjE^XStheQJpf>8V$NimQgu|`0KBc4P^D(oh|%l|LMlFjUC;2Pb6q)M4dGnPzM(f zj`$zqLLu;>+E7Rqpp!(bC<%JG^Ot{M4#mhft5WR(nQkb1p6s`-VWo|(p_Vn3EcdbC zN`_3h6Bhej45%%$Hor(lhiEN?vAOqn;a&UMG$Mg9@m}N63`glqcn@j_8fJCHMWU9F zzGRk-L$Rfv&2E4f0VP~8M0lLa^DxV@$$D^e_5G0hHW{&lT^mLv+dF3jtW905Z~bss z`b~t%ycXE?)?aeS1wEMS@-JU#p>)nVg|M#V5UJhGL0)|1R=ssnc8p?iv&6Z~bb1q! zLY9!u&)mrq%#~Z>Ft8ae>}mWe8k1~LXQqfBn^sf;8BQ%w&vy$8H=4! zmPY5egCrByl4D3QoFz(uT9S;sq5^D`6e?8!hM|(dkU8tRCL3`ldaLY}1|TY(eCR{U zmRL*w1~z!?<5C~gfME~QhO#Cw>&9OiKYBaePMQ)lF+QE+cO8fB5J$NZ+eC4OxLa^f{NF~%>Kmdfl z)RHWkL05IGqBiJ8$rV>B$o^Yy4COXuYzgX;0W@-BtkdpZZxQhw@EqX~7Gx&1(?dO{ ztFMTQmu+dXy*c1=?=k+QV8+oVGd{N$utZHqhcEh@wp^~zilLsaQ`JH2npMGKq^;#dP-!>lOO6Jw z*%gjAlx?sjxKmtlK-28aF{TQ($z3%E>k9xM(_r@BoQr&MYo3P6%S5JtgxYN46f9La z8C+HfF2#gDNR;4_nucaJ29DBC`_-7IcwtPGDAL>qLOtq*cKc|d{}ReX z-F&5p_W5We&G-7Fg!yX-&hXd-c3O8U!#Gv=$hk1Fo@GhZ6!p75AduoEw{9hjhq^o$ zP~LI%A>`kR>26C;p%ZpV5kT?YE6DpT^VMaJFV~nA(iA~yJ~G{d0>-&l*zQ#q-qHlVKF^yH%0|0snx(9zZSV1Nmt zCxmtB7MD13atX&{IE5tO4Zb~DxA4O*--^3cd+cbTj7&G4fBOva_Gu>(L%zf`nX)m2 zH3|z7rzJ$KOF5pUfcUC8ykG*3PDf`+^g?nRS+%>uOMnFr>w6c_k`Su_~-MHW_6JN*4FipEB3W1A20Z zQ}(BxztAnIlS8V}{UID{K2awD=K5 zCkN#yOkucXdMezoVm8M#qZZdeiB(=Cd*-w5p3sHr!pBM8}dJQ}ie|f@}8SvsTt(=aB6Du9Y<|`xu@OMel?^UF;IK@E<`?P_eoU0@3 z(dHv)nJ$}&A>>;0qC@xgWR8dYD9k)R-lVpcle+F!{QDLa*P>&+X& zU@oJYvRR}Rm3@^nt)`r{ehzP(oTzr6g#iQY9ByzgW+TA@*^5xjz_UOgs!g3he0;PK zRkpJ8Dce3c18*D?#_EFV1gWNA0tkjlAKzf;#RNQR?jX=pB9s~A$s#^z{27LdKYW1r z?8AakL|V*pT7)|QA-XwG?`OkATFbW)<@??#YFVO6Ya%)9i1d>BM*Xvr-mAW?eqA==p;{cJnY&BMnNk{$7 zbTU^kC^)L#2PW}*U8#&A?r7Razf#fpq@(t#Pwh(ez)KzVH%$gqsyp{})ZWsQD_I6c zqq_5JM{Q86qw~qca2Ucl4YtE7d8?4Hn5J?Gb%PfwqSynEbW9u2$CC!|CX1C|6NEv< za{V@Cx`~jmBP*D6oZve=8-~ts;S=LR{fkFX<XL&2T&S{bS4GTm=hd4WGEYQqK|2 z^qd|o*_5>N*eoGpTjvp&5-UBP2DF@H@H;-`K`dF)<42FbRIW(1ZAmrGbdu7TyxWls z*?h+e3CRAJkcY-)hK5%pox-yMf95ehuLnNPr$GEGah?R82ipVWD6*u&oi2$-pX^#(RogQo0HjBUu)N!^v9c z7@zKX-Az3k>w;?jOdn=xrctNbL>Lq=-T}Hy= zjiE!SHmshG4@L;bnZgXAR2!I;o9m0y3rmWgucK0t9gDRAf^i=UbL*nPD@RE{k;J)Gw)?9sevsf(F2I$+- zo1ZSO4yOT%#o7R^A$Qx=Sa0R*Mk*`W2JV}SGb9IK68TQUCDE3JB5_la0wRc=+FZi(MdFDpY~*?_XbROZKT0V)R7DuSjD( z5NX%DIEq&ir1CHLs&JrEwsL3NV6YzT*&xtsO>a0d;lS;@f&Y(Jy=)@s8)ONRgj&Wg ztuuUes`s^Mo#5WiL10FCb^+cbkgf1*-nZcauiF)}NdC>}8U%qi&d(!qys{Rthul}7 zu`WBYM@Zx&S6Fa0C!q%FWn{~mJ{;Zv9F;=iaTZ07OtFO6VSf?gDasWif(_SsjW8FC zP8s-lK_e{NC*nPjTVzxEpbS-Hg4)EvCjMqsbdw7JQboO7qUUC-hKU?ddwZ6)o7c;9;2vTRlr-c@9P3b)ARqI_7Sun(^!=yU4>+N041-vY~BQq5IKU^O#!(2^XKTb`Gz+wQKTxKv5|Z7`Rg$+M{57>BVR8BA~-#e z2}4au^Ghg^feVq)0ap?zmL%8B`2jC3Kr+8%td+4n2Hhy4?9R^dY2uzO_E={4Q@ZUW zCJfU?vY+V}NC|$5F1tWtIj|rJ@*8s=3nb(&9KV)90iN*J9fzri^MpU-rxyZ>IBAI3 zBOWf~6) z;|S^KSa0umi_l2MZD%7`8HXXzQGr3$yuxhRxzNB}YbtG2KTD45%J|Pg{vx%2Gd6xY zlGYU#kZJV&>bB(GSqN{|F0P+&`V4el0nMlrv4wzf$5pC5&O%(5UzzHScpg+6V@GWT&F7XjQQU z#2APs*UFJ0Kn(t+nqXvTihbex8uP`azht1W=`lZ43o;Rxq%!`JG8b^;%QZ~GhZsg3 zTPf9%cCw%y!V)ijI_Kimu;jwRxUKj?HY{F=$w;({24Q))wKnjFKwRu3TlbQ-{FT~1 zp@cV3>lOSbFESe7uA}UC0zUu1p5$*L4@=*>n#CM6&LZJy5KXx-l|`^Ijw`8L_hmx6 z|C`+(hKv71TIj|7m%ot%ZHqLaE;aT;q=s$mlL@GMrM?FHAzE=4>7-E`8Kob*V+OXo zD%~lG%T7#9-N(7SnVe`o6Tz;#UgfKLI61?8+h-QIn~)VD0z@{i(vFtc%0P&@k(SyP zQzY#b4b(tqje*s)=M(t+LN=>p+bpdt_pw=Ml|aEjh1gw=h4$;nG+1aSJM(=>#piO+ z4$obZI84CeA5yy+x64C;$xss_i;~Nezs9W6Y17Vb7$gnX#RHC*gHvJp^CcLSEQEeB z{0VO|;|;Habx2wp_6kZECJ8fZPZ0Y=vhat@u#?Nt0oLMv&mmLB+)TIeG7;4UQ7y|{X_E?4d$X2zKgaP0?rfOEvB zTt=qfm%#oZHz!+MLYgJqV<8klWj5a37#7OssOLasnvpVoWIq@1JtlYp%wR$)s>0ni zYYk!PZYpy0N@47u!LLy>7KHF>MAB?dJIvHkfamfNQy?pc4$8fgSe#z&qdxugbqi9nP&|WA2uYDKQhi8Z)Bzkl*2#6>Ygczcr# zu*^KyB)R)%!^^>304Py&Blp`SK)7z;PoNAEmO-@N;09}eiNePW@26?5wb=b~n%9!;3sH$m1oAc5}W7SEtJC9~OC zv_i(?5%wU!K$|v+F!DFBs$^MgO~f@RfJKg#a$5|fv)P+ zK+yRd|0z&$=PudDdf4NQML*ofzE%fZnPyGUxRWSjFcKXM=9l`WEwnd)lPQaFF0&D# z*lhr-t&=ooq)`v~-q)uWua=juFSeLY!iasZ_c_{?)1vOtMge<)pzrw-R$rLnID`~KF3lBj2 z&)k=^-M0R$1l+t&y6qJmOQjjpq=czJjHrunMX^vOK~qkLonsZ@LoBFMRLqLWCC+gn z%K`2zmZS=)B9;@0T&JQuQ|9(Q7a1?Vk-bEPJkl^DfMn5GC~D^VG&69}5t+hr-TK}$ zj(g7CX0lJmV)L_eHp-S#@0+jpH@<%UVrzY0t{i~wdMJ15;VP#1>FcL2zQUK!)uc{$ z3{0>;!x?@1_>m`g;ASz}*$&k!PChIzNBjhJ)7u?W?c~@;Qnc&`3WEr(I(NP~Zi<2_ zjGb1AJWaKmSjpIroyeuONSq-z9vwr4{vs#hFLCt>J%4IUhJ*U-EP?ooz}~E>28WA` zE+Uf&pg4kAKT91O81&m_zRv|kr~;xnxNMhQ$YqBy-jl0~GujZT>}V}$Muv%jWH7=m zSumLE;AuR%DFf3CnRYv^8EHtZnTN7d4#gd-!xRj=?ET#z?!V;anf)cXLeok?jCi+m zvj^J*+%^ws%#ywo+h$2e((a=taN|W}*cV|kI}^q0MUm%`H%akt0oNJv-^UBTku8S3 zhkKvne|v%5tb4O!``)53vCSBMlgJ{8xYbT*6RDmQoL!C(Uh`kK`ue6i^$B7)Lj}y<=DPcv>ch&5y@vd~=Rz!K>@s zwFlnSxsCAcyXfwdU1~H;ah;I6G_@*c@33&b%UJ#6qX)sf&DFFL_laIj$V9S z#Mco{R#HUx?Wj#H1Q#wKA$W0k&eavi2CHID%4wrD)Be~hZjU^_fWOdSb9=0PTWqe^ zU`LUQis9_&3HP<}lH>wao)DKs&`-j8RH+CqJ~%;GSlfl{aO8@`VyP)G^1dH9cXu^h z$bNv?h~zjn?|c1ECjH(KhFqSOL4~_q97v;hup!5jULNrb1EEpioWotTo=-Al$o9A1 zI|1fUXRs=xQXF+Vk>lE+;Hb)6`hc}7E$P3FFHLO}(L0Th97I0!bE1cN2>p~AaC?4<6GIj z5XF>P)RYpB9*#i0*^7^1+prL5vBX~6CFa!~HruI7C7rzrEuphED5|?*Lg;Cmk=#to zjltBSwFDYs8S6?0`BuUyCV8DDW6{{$;ypGrLS}_dNbqcEnjOx(6jb~`STM<%cBd1R zm5~fFDWve8fNagw3CPMc0EPDoNb=DvBIU*uV4AlE{`iY4WbS%BI=#5$Nu7nV$4T-I zURVl-o>RXMGJ$=y@pNP7KbaHktEcOj_z&Fi6TfY(;{ETN@4s5#S;3cwl`1PwH@}f@ zm1=A2-=o&&sMX*eOYDP#b||4NGRI`=n1(_Mb@@ch6l)NFYqk1)YZc#Kjjo5)uf!kU z5kquRFCe`@2_K2FdGsXcZtu(d_>dh7&IF13%iqAqMPs(tK#i3|tj5*>$FMX1nlHPc3vul9CoV^%GBlhzX~w)Qd=b9E zx^)K`&t9bmx)R78wKfAqDs>~m9T3>A9-kAG6aFy_0&ZO0)6US5iw1)B5XCk_5+2#8 z((=3qJX6!^^GCK=Y~lzW?OG8>#104G z!eq#0*n}}##|?E@Ay@?x!$4N9*Fe-0x@Futh>t-vFdejiCt$Hbl*I9aXx`)}v-sO^ z#kZt=VkbPkI36EhCk`j%prr@>m7YZ$Vf}R8yWo=e6_!7ThoeKT`fv&o{t3rKb#J2y zPJ~#ft#_b3*(8~ z43!QS1WBW@yjCPwdm8}r9Rd+=MlG@f-}TE9f|@=5FJ6AHnFrlID_ovP>IUa%dq}fT zh60^*AYi%tSUC-`N1;Wzf1kHi3od7z%TO z5P^1T*3Z>OA()a{pp?1;lvQyY4E0hhgc3e1@l5PUjBQm8U@qd?5SBRYhz^zr zSRqO%NYPpv?=Sm>ze~^8MY`u5Wxnb@{)Z&h?&B1R3v{#-30U!a{<{kNX~+k#vEc^1 zwo%9OOmkjtUX5|<_4S){%B$&vcrh&l3vD-P!fQeqR-wZlIfWz^fL1L^OH4rB5V9|c zk#Vb45^|NEVdplUagEU%d<$0cHJmNW{~TZ3Tpoh!k{1Uj!}H^jm~w?+fzVZwy012o zu@hlHN)&yn5(5Cflja8V+H3+qUl4#}1pQl?p{t4>d@FW{9#w2J2tgj$@#Z9=v8ItQ z=sPZ+kscAYvT*1kW!4?r3b&W(Oc4<5iO9AHos%h=I}V;6mI;FQp`4M#LejF~?B3b7 zzRK$)AH+1`@3fN0TLX-ni~>|#Yh*=fd&x7C1VA~&GBFhZD5%zlkt)aGSH~Oc7aq6o zztjLXBEEEY?`rS-E@=vHbCt^uFKjyKqzjy>t17_3bsiJk zAuky%K*jhzx)epn>t0Hpf;%!}jIyV&`f!!dTH67K#ZA z##|`Yyb#nJ%-L zA+LnL>FbkHC&S4J8zU~^TB0x-yMzWFXYu4FZ&uP9=MtRrvH+P+Zd}@|)85$+km-z6 zr=~Dqv6UZKPOp?XY_EtRiKIwSlCHi#J^Y?TC2rn7(yZ*DnEIVqQiNWOU(>7zrn9jj zDa|_&g!|pvm_MXPn7(U##kC&eD-nmdz!t-&o>qK^WBE|OYmlT;&Bg{4IXnFQJ|UG*gv~_Ov8}9ky+?>pg>hw* zK>OK$V5e;CM!V!KK?Ms=-luP3=jLv47Qvk;(OgJUkcZ%@O+DzAx@2jE0_72pAis>3k}!6WT|XL{0hyDX%{hGbf_qA7vOT&}a}FG}h1UUjyTHtGI*} zD6@CPRX%M4hY2?Rij?x_4txT{CPHQHDn_2-%Mh|Tkl)?*5YJ?l#4$SY?8OcDEZkzqZDovvkHtVb|E|4yifiFFMma({J8_80IP{kS-XnM zw&h)O8K6HCe4?=NU84?c99k0@1JhPF%W@V4$l%q*1@7T8?HMFn8x+X2m{V;&6i<2+ z-U%1Fq;z;q3aRwy$gKurSQid%Qim26dXF23_m*u9eao;2*L~w~3b9S8m5MOcc5QPl zNN#VYjSflfM=#nX*gDEYVbf74n{6HC;vDco)eZ!a;-xCM2L^5{lQC*rp%$(oo87|T z*;~6gyA(G`wySIw&R%jiOR<&gCG6k80xiYbSgECW?FhUPLQS)ktE=G~#hoTr;g>l? zr>3}jp>Cq-gN;E;>M5Ip{KX_z*Vwe?zqm!{YRCt1;+`_M)W!L>_;<8?`hHOtD=ZEz zA}L$>jD17!hW_NbFMO1}T@*l!TAEc-0jDn)Z>~-i3CUK*s1(F=5!6^yur4y@10`U{ zVMVXU+ePHkoRk;4eQp@_#Zz*bq<&F{q`GiJQ6!Y$Z9Z+K-A@}~TZR3Q(+vwoiomp` zq?USO(vP}}wicpa*oR$4+=AB^u|R5qOKOOG<)R{MPe)1Jz_JL-+LK)QvW{j{z|g*F z1iUtGgNZ}`!VHc6r0@gfVkHh)OC8A^TB&m7dCuD^ChlO{r#RD$)cnAGhDWjfE3a^ShKFHeL zq&w^7dA+*{&+;|0dpoxwx5ed*R+0NV_o=D8idoU zy1gFXs?=Idt~6oaew;AHua2w&f`n=?bdEUWOH4vc91VzZzl2%a%+Zv_8J)3|uT7UN z+(sJGPA8*A2TE37Hv6*DND?S#00wIajNIRPvijTK{`ODOjUd?F*#k}YJ#W;(g4VEw ztB1-B{}5%=$^>n?pV_9A1=&JD+WMLb$d-(FRS5HG#xRF;j)wBsVX%JE2fHj#r z{E%q^D>4cueiqlYM)-;B!#fg;luRyrMwl#eLmbq$vkSFo+-L>~8yP99+uSA$(E}M(`C>y^()Cu0 z2jG{j8oI8G41(_6h z_Rs=~Te+UdV(1h*h*!nuUUCCg=p?r5f?C4h>v5pe|3i+DEVT%4yuRT6SBZ~ROZ*Dj zFy6x%5Q6gbC0NBorXp1o(wDJNhFpSbfRYdnpi;y`kqW+zKFA#4*cR(E%!+K?9i1^Q z_@g_m1ID&2!P3wKtFA=psJUbDdX0vaQXMrT!&KUhbae=|t~c!#ph3AJ6P?LKtQ#eX zDSwjix3Q$NOB4c4rup4i$FDLO55#d+BQ(8Qa^ped#dAe1~7AZ`nS$ zO-a73#|@h5L6NZcsb4YsAa+^?35Q%~$2)W|a!D29d)!*UagK}$Nj60+uQOwRtUy(# zvb*>INFdqqF%k^Pt-^!;&dEqZmG<|auRL4d-dtH--`{7X(Oyy2@^c}8?r;P~kr;#5Y2a6<@w1!L>v3#2 za(VILHiR##z89C5FlOfRvZ51LxxD!B~ETbU~|SM^i^qEkaddCPO8t$ z$<3CXz9}?@RPYefr1#Mn7&+)$cRO14BGPc}mLf#2@^rB>QUKNc`8K8*jnBMH3PYkEX!W&K7r$rd|}4_7kc;rt(0b2x~Nio zGrYKHXAVYN2VsSjfWu1(JE5&c%b96lC1E2h}k#u=qe0QVgE^doq2Ui<$Xy?p1GpjtRzKn`nUr`Rx3wa95)&kIK>$;h|HsY=K?_8TTo#Nq z6E40E1%v1f*{iHDx)$OalPbEDuoue2$+bjI zp54Bc00o4LE-eO3b8hHR$HKbJ1{SbdWCk136b_i~;78i3A=xcD$=}be+hPNeU#A631m$>WjMjFma?9ww%AJ{3D zHAuvYLO2g1=k_5OQXIeXOCIY@wUVT^6RgN*;5T?0DBDPm{jGy&qmHgnjX<@T>jix0 zZ9z}WOfnkBLbBU7rA)HLHnV7QpTykVO`AE$Ml$JX!#$4L6=Q%H;#JH_*tKcI7>*AujOLKQ`%Sq%l-4gyF)-p=f7;6n! z?=T1<41yEI=vJ@@%V#X*#j6a((vh92(IZvzcsn zyrm`IU9UFdA7dL8?sl9ae>QXrk!f&tv!3yFP$(vo(s-v^ZinZcwvA^&FYF5SA#!oi z#=#M8--LcEcE?kyzO`+ocLO(9#X99OV}e&f&cL&&K|2t0=}UD|e(#53@l_j3T&w+; zQ8X&HbC#aAKHn$4@hz7O#@#39m-wBX4ulQ-6uyg=R`Ws>HO@}J8f7JpIB0ZwwB$CD z9HLZJZN-G5jW%)qP)wLcs7*l#9rj2n3`p4bZ(`c2Ab>tr*RenkfR*(t%YO)mS8Ptzp~$rz`P1&pXU*MapWqMTM1l?@oB2` zGRh~=x>`Ln<})FUJ8)6h6&zBL%^n}pwi<}vTjYbD>_9*OY`%FUusOdL@xbdUc*TIk z9ffWMXuDdJ6F*q$p$hxig(^b6y-3IV z`S6rG9QS(gTOsnNH++481I)7S#;H%ZAY1k^inYhK9dc>*HcF(DA2Z4BBHDw-ed6VX zM3e@tfvK?;H(evI=5+$+laNOHgr5UXF`-#rQaUS9_Z*1T}cd80WArbs)#Z_Fp=QruVmR1Wb*uw z`8b|4QjRxB^N71S_h1)&g+xgQC*pZ^Kw+^`6MHoWY)U!PJEc1}jk+t)ff%4Bw2g>C z|LtIJ=}&L}{oTT6yg#$Q^fPs0QAY+mc&Ti1TGP@Olg__Jv%b(X8m11=cq-G`s}jl8 z9Lh#4SKyIab>TgaFtD!6J9SVu{Ktt&Y=_4|Ph9|;<%{2m_`T>q z(O%>rI4a-{{fdVYg$5s$4LR4My@X@SJ%U0iWxEBw0Wjb}k;T4*`*}JTv<3%#;(?Yd zFuxPQ-`CWDJZ9ceeDQa3*C|j(ST? znP_7T0+A2g_zP1{78uC_ZT~4Ib=*X?VvWK-G2b@ zL^--X?W*MF`160aISlty_BpZO#Gh{7*-gZzcH{C842_f!liprR4T!hiWw$#rONu%6^!9ZB_~0>+W)a(sZ?}4m5ttuiL$tfzrxA2$NxM*R*aOx z_)hsQ1DO9iR9+m)G^@5 za~hfJ}^I53_%G%3~>{_Mu8QRCI95%c5@iQ|mxY?o)^}@WW67->{ir zClG#OfXTNUts3+IqYPwKVlO^YA}EH!o$oI_unQYP@rq%>Fxy{s5Ny($0gRsCB8q^+ z`{Ar=!Y*}&7vUvdLKTMY=M_a(#b_yBdcE3Wt0=k^(rYGpt)JlHSKI_%6m_U(^?P8< z*Ekdf56x_aH)~NeRUDoT&#_})f|aWRHm@!Y(B}HjqXQiEMG^ngAxwI$ED_GpukbXp zzEke-(=E86$yy_*@K#w=;fI%IFNAJ4=6EVPV%MxcIP9ZM$$19Yo9>3amxs`JpbTcP zo@y|vTeBhJ!GCKp3YD5pQB(U0lg;&zVL{0f`fkEZd(AK2fBTU4oCS(EIB`XLKS$Nw z0_r<1#!l`te4NQoF08xa7_lTh6r3ekqm{Wp0r?EMoeUMSn54giP#&GX9`sjVJllN1K$fI>VBGFp=ibQmS} z)Y*U_6ZMd+q}Wi>?k-Zma{;{{x&ZsA=vEd})Tp0VG)m@8D1rNu9TVDkrXeX7fM~Y= zaOuI)0}OU!s6+l~A%V7*^jWcpS57@KfNL>~(Mq zD5D_wK&~yIJJcR!ExjOq0ea#X96^ecm2-lKFOQ$iCC$?qB*^)98HyZFe!4q{h?aisdxgYB!qqc&Km91)_GmyCx=N^!9qXsj_$ zgG*DGAaH+RFG`NEhts`2UU}8P5b`-f$g2Tl#&V!qgXPFHISb@1ZF$g1f@kCyR1Q9V z8+4BS&xxfD6X>Vz+zlP1dHy1a(;lTlJ4LN5(-y7W>#M`SL)p2NR zc*JAC$VyMgfov3-WP2>S-#mQUFQ0N5nK83PG;wH?AuY?4W0;Sf4oeWQ65N)KMK%VN zNk{dFa3PToxQ4@~UWo(UHlr(Ig8Yx3UCW2Agut<`wWQ_Sn!pT!i5dl0C@tW?dT=U1 z5=1N4Ru0R{*o__HT#$T`1DD`uweu84_-WQBNEW1)!Q}=uTaX#8b*-@6kQW=(9D~Bn zs8EvKE+UXzgee9x;{y@CqViGQbcl;$3}OiJc>BX(_lJ9Xli$4jYylU9{$}@w9-bceJ_DG~^b>y1bI*&2 z7$p3V5E0d3hL2=Lb{oR_DTYYu9t8|y#@lgBl}ZsCM0=&mE{o%q=5W((h6bTX;|fE| ze2&m4eVf{PLW;_Ypwb8cq_z1t`NL-y88MAH$2${n>#o6=!_akb5By3ww%ncdm_7PlMk{j&GVWBf~A z@~ALpD9(|HhQlB$UtB?2SYt9}aqPL;!r<{2cYgR~IQeDw%ST`I?!oW=DPJuv?B46W z96ZJYU);IJBJ&Hv&>8F$fzSpqz>fljr2Co*JS#%Bpr6j>2q5!yiHmYKht>Y?{UoBnyZXwua)D6k3Wc+)OH? z@Y2^*rmIYL6(AG-i^HLLMB;DaG1tS;Mp+2>!s*Z{JhF&L0TZczf#BrmE`28Avp@eZ z9}uuS4dYxIi!esbQsU}%A!*19w78=bhg>e80vg5O$m(P}TfO=O*f_&*DVVd(|mzC8SSkN>eiH0(9`K@33r!T*I{?&``p0Dk%zIeX9v$eAEd}kYla3Ne;6JIt~ zcZxEf12s2Y!^Tv2k(qGJSbmF5RWyxtK~f3)G(M0Z`Q+sh-4(>4NK2DC$cs%I-&=zY zj3CinDu!tu@_A_wg|UYXPFEX}ZmfJ~u4cialDWv4H7xOAtNxV4o(eC+D!~y-Oba*? zij7LFqW|JrGa03nM0ano{SPQb((cOQ--e6-q_~QY`%8;2KfND+m!HI@#5Gf(OmIn?xo@p(OQcn3hC|QN z=E5B@r-~$@fYC?rhI%sE@s1hcQ$T3^l2a7gDZ|7~) zDvH4in^jh14v$yHF9LPSxChGz%m)*b81)T6qlp4!mjFc4PlOL#ahrI95P1BWP;UwZAf`Z zPNf2vmGE%?g+J4BRzy7L$Ge}zOIC=)Q*$vVWs^P$Iw206wBNgY`}`gL^YmSBY2WBi z*JeoV33@ON62$nB8Q1NMFTTbyM(KpF-)a(*M>q}h;cZO~u*T;x(VX%j6Zu_bM&i59Y2bYZl}uK<_U7*C4W74)Gd{R1w`>?J`HSKdbr>j#Oc zaj;*G!ojI8H-4~$iDU<)N835!WE$CPv-^<$MvqOU_MztmwS18dXhB+%n|SVcdjZVi zBcFEM9uQn`FbAXLziK7bRpZ5Rb&;(em9%aVh|&tD#F4sAZ^Xe-?z0=5?WKzzgLMs; z5q;=a2z-WzaD*(LXTu+HWE=_Yc*iT-(p*3JIq$Y%WY*ajv!tw{0f*kB3A;BVC4?zv z?Uv*zy6z3Bma&tty}9-uJtI<2_7ji}euNvTCZkdB15an?gL;AR3m{51ZNZh22wf+r;y z9>!M({Bn44AXTnFbd?W~VI)w(O1bO|NEkIm<0T@ZyL2+4QWk(O@3bPCi^yj`HiA~vz-Z_Zy`+@yP^ zwt86&KJ`KWONcs`x^12`IZJmoL;`^;O$5PRo6}JQ(*oCGE5RmlOHU-S?vzf8FH`nl z$Wj`<=E#~eQSDzWGQ1R48MW1LC{bt#0|)bwX9Hs?F@G&~!U8sZBf@pSonpf)mR8Ef&*a&TJg*VgxbLwXba%vR-rBBnBhx|Pli{?iVlWo@8TTMQ_(#u zxWH%#=?H_tiaMw+hjEkHk*J;-P{Wdoe*4lqP4U6HO!<>qS=0l{9F>yqrS8kz%pI@jbZE*rD495(MGjudXUa1#gI+sCm<2N5pFTFBTx z*mgJ%F<`{N?Z^X^!^+3pL33_M>1M^hVeNZ*w7lH9-z0|!J#;j?az@d{ER)wA zWHwYP>^2cP$Dsv@({(7bi;NCAM*^dPj$I^d?#4}{pr3!u8B-1*KU7ZM!n+I9*ap75~>90jP1$zLbd2t*=MCzxh4T5A(jP}GI zo(l0qPCD#1`Q0WY6*9c`$Gx9U-ei=6Ps@5Pj9FbkIcW-E*-FuEbyQS>(>sW35g>Ua zyRCuj08F9AV-Os&iJgomi;pnzs9P%yztl0aaw$n0?apBFHtO_WX0{oUS@kZC;B5+_ zTUg~~v0JTOVN_go5GrkoRouzcSas_KmK}r-Wt>FV#fl+*{maSK;sdTy`S3eF$o}%# z@RH9wGb(G>(a&JxR#o1yg0StrDUW`#}RtzBSooT=(9-sg)j&Y8hyAzP5Xhjmm zwmIT}>*I);vka9r(J~g^1icx=MHAhwuAPMv9G{-^Ug zmO+;(9(Zg(HYH%q!uNiN%?DURxPU-AM|I-kYNWyrIsebi_mRP z^x#(^Hs_vaW!XfG_lWT9uXNX0Fyo(?B+7BGEJH<-k* zgz#otXGjZWlqA&L|CudsN+ZA$Ro7?9)M6o@;aHRGkRyka#`)ozL2PqhUBkPCP!L4^ z;a@D&5Z{X25a>&BGl=%oLD*^{g%RqC&0}H2cH+Y9;nXpJ@O;Q*X?UqW|Lz8ct8uU` z7y@jwCgAv@i-aTOm}h=6S!byPPnA(9oU8`Kf58YnXV&BPLhDu_);3%rJkHIWr zv7Dv!2udtg<^PBdH9><)_QDTJgs|Pl7)zSTMN9dfl)0k7Me_^3j`>9-Qt_d4^9~A zw;NCJ2~Ti_RV?h9_?yy`nTOx}-i|}p)SYqk#WUYdot8=A2$X|g3+`went#pU-?0F# zHY`5MxXWFjU@eKS8eaDp-*^q5{0JgL?%?{>86z%I0;{=vH~rMbD|bxpxtQ-@v$~Xr z9-Yunp#m&fW7kEptOz`APXxFRLmFFS9~eLeF=b{4(vooZp=E&`IcXkV zEA7s&Ga02|XJ*O}g5+H{m6u!j;)W1yBT)hQ){!fspa&a0%T-LAbX?YW-?Eq?(Srge zI#x=p*Dasg`XwG)lT*@VwQkyM4T&Fegm1%oT?($wd!h!6fs^2+t_g3Y+sIq>%e26Y zbmppN#(m(xrggxwsCRDM0irFC91D%5|=y4 z*T6mOnLipTH@=Xx(DV=hht6~njmvajY> zT$6W_oLi%QhK=@3{#Ms}NwGtrVDbV|jCtvjH^h?RpsPc0e&`c=Rxb9^BXJ3-dh_Fp zdm)7*565Y*?GBMYGD7MMyX$3__x=DgiWww~8}wnX4;* z4sOjx%PiG+8H!gBV1>%-P=zCeGG~Xs=N^0o(@-)QJXFw)ZLEi_OB~Z_5OknXndbmy zekj{p8WTH@W|~2nAT6wuDLIR0Y++?K^W=pCjIeqbjNy$lFhtxD4a>Tjy1;{h)_=6d zbe;Q$BfovJNi>s~;7bhF>F6~!VZTL+0#qIH^eXa|abJL$%G_mxM;v9o8DGg;dlWYu zzM$nJ1h3=v4VJ>8tOF^9?!U$cI^Q;T!|)QOPLk_J>*_p49s|}=hmfQ~i-_8I23)yV z4%VcgzYn>Bo$=8D4%DUH%XajfTre2ygovzTyu7udrViTj;`)My4Rxd~pp5do?Sva) zvTKl^!V7pf+-lLZooWFwsD7Ma-yrtPASONo&J|$+zksypl%+oswkyTac=D7I_fQh{ zre>2*{l!P4pK)UhbLQ0at)w?*KU8>tc?pk_kn_Uzv(XI>r6Kl@)IG6q1(}D)4VXx$}AQb|nbI;);>wZZ5&svd`!>aFGlQG3RqE2RQoX_)NGo5+a>jVX%Z{ z5~-6@2dBQW1g1eGmIFy?$G(ZUbDSivmW{Q0dQ=;_n_H^r1aSqKIh33G8Db zYc1H#yrmEcX(dPOK2@bAD-|88NyhN9IRj%`yeKJ|P2mI9wQ2&`U4^<7Os2OuDH5j5 zdy&p<%nXPonhZ`0QwkrqGuC9iL;5lA6itZ?txV>m-ym^{PUI6HEi03t)TWTT&x%Yr zQG=0kafAyIU1-WUR830?i|TAJDoQ807X?vavC8 zjJ;WuKvORKGaMV=;}EqGl3TJPPkJbMKAb4+=rO>wYZY=e_JD0c!s5~0I@)-)!HL_Y5E<XBN3k=LL2ABDKyQNz%T!7ECH3kBF;o>YQKhJHb^L8Vl2p|P$b9>kyM10NQUrJ zCu6AO?S)woBnT*>8V?GU6u`PyVwz+j41*C?h!CE1nn*0};Rt8Ik&pI(xgHS;CCO;9 z*!>4qoHRm)y&umnemch)3|Jym&RZNJS}wgI&fQ$&_4^ zTzoa0j1LxXxUs!-cK92!CE+TAPK)gme8dsB{zXh692pVIih*pjVGo!(7fxQLDC%C}(L`Grz}l~{u8pS%;Tn!NX!73s!yntDhYYmDohsHRj~NV#H|OLu{k$woeu zFu|CVFlJybg6J#oEWfh;x9&cXEdYztrWK(Qe1j3)-+jUR}-7Uf$>sy{hha@ zlqNxyM=Qr$qFYj-rp3}csjOk`D?IxV2S{IAm&AP{%MH=zaUCZ4=@Z%DQ#M?E$S{^% z_$3oN>9Dhk8CzlTPjW<{XP6q8}K(KK5P~0Z{s9qyhZ^d z(OMLOjXFVGCq`~cGzrbFepB=+-$M`Ezgb;Ul_XDwrKu@y&Uvb%Sq6e+b9fCONoJ+S z?G!r#6rICSY8;_18AarXFhyk3K>#8)tH%mE6kI-mlq%XbTz)l zAr@8y9tj0#D2pE*P3B=#AsD9NM{)mu@SqTEU`E$T=6MRb04mhA0Z>Rpg|m1nE5caW zM|BX?FGQfs^&}J_6{D~0lMM9F;dT`Vau6`!P{lGS^}U|^iLNe9?g+Bq@tZJ+T)RaP zv%nZhdUrpW-0i_N1$T&t_R^n0H?T%7#9(Yv5{FN4yS-sHXACz#xf~rtu2Kj2;v@bW zWD3Y?o69U5^0#I3jihH5DrQRh($8#aalSKaGkpzFE=BoPW=iJMUP;5WH-=YZY!iUMIGS+4 z5rT_Oy#CCs{mP%&4zYirb2(Nd9Crl8w}L@fb0v^nVHxo76Y$@$4F{!YD;P0C8xy%8 zxG`|pV+>>J``C9}1o&NP%=&b&&pbYQt&TMv)^`{}9G>`+hV>~QUC^fEV7q5BCyj4J z^oHR_pDen2M^2aow4{o%7r)44KZLEuu}7mO-$Vxp9^lfr1Fnq7dS=)T`p0tVdH>|t za&TFzTcaaDb99nM@nM9k2Zg!GqUj7+gJVDW{^z*~96tvqP)D(0j{5=cUYC}a=WO41 zdHDblP3P;l!YH!Lmpq26VxBa|4k?#Byt@mT!+~(2?t}ziprWU|S0f0e{7gpth8-<84%St!-Q#oQz*{*X{JC?5oYL z(w&qB!H6vjscsxY`7XM__=IX5whQ)h^UHIk8pp#Fj#Z};w8yZf$l$R+_9B7^EP^uD zx{49IQFYs$+~FQPv~SIWl7y_vF9F2Eq4=h5cu=FHgc+ykq+3J^0(IOdDyzU3CzgZ= zAz8|3m1{FR_-|WX7*kT0)$#_VHVlOR=@=*AkRP)HL?lELPUw4EeWLHe5~h|vrXBHj zLQ((G29I6xGP(aY(aEuyV8#kOqrs`z0APz_xCEi0<<5v6F5mg#mt7u{z0Z3i_LlaR z9`mKY!ks1jS$)6o>ARm9WO+XxW{Eh+d+?4rUMu6f&U~Dj02Rw{{z%B=A5 zN^^(=KwCWw&sQc{9RZiL2@d{>BjnF*5P?a6*hFSpZQx@Dw+Ly~qTm}ad4f+<(F*T$ z&x8uxCVoxGZT$qMik-}`62qwLXTU6h)5Iu3nu-Zj8Zxt7ohFph+W0^;@Tm<3MoqCG zj5Z|jt*w5bMldQE!enca20oz>u?of7U+VsbvGeBuHUpnD9mEt7OvPQTXDTM*yE~ghu$m+dbMR-GH%J@PUk?f)@#KzZJ{}K z2}mEirfCh1^2L)|GQOb8unX%ej}yWQx&tpQUKs!f?zO8Jt@@JDQ3`9w1gG$h^a?*5 zZaE$p*$A~st494QUYoX3b+mltnqcLxh?GBf;1nP>Q7UU!F+zMQ4e^O%E&1v2D`S{KZz5QMQN?jv)1(Eexql$R z&R-EVf9}95Kx`sa)~;gY4hAQgyCf2f{1q|s=MIbl#3n{%?J7o~bO2#HgCMWJO7KeF z+BkZl4(w9sO#~B=4x@_W#<_S?#P8yiOMNj3mg#Gvnf~@RD*TqU&_uKbrHbkE+=Yg$ zSNV$s)8Y$}EnaotTej0gxdm1g>y_MTiSsOoaVKvoZa~-we`{R0ML8oX-yGi-6CL@uQ>w!SD8LptTlPUR7Fk@sBB}>` zgcw#tGrUB6a$h)QA29?c}5a@6gJDGAGsaLfkzD}@Kqk$5=g26uol=V)6AcBB~}qE5ZGI_z4rPHR_DTs>@4 zdz3ihI@%7UI>slo8CId4q*Rd4bfw){at#aDsr_IfPV_F4SefoVu+VHhV9C_|FtzPj zI_rwKs~Ivd)^9u6_bvwttBzb(Ml;JsWOu$r8Ykc%`tyWN>>v>1#{L%&ZS!Du ze-LGV5cuh_`Y>E26!aigjeV#Ti#srF7y;II=i~pn8RcrA0;^$(w}IT>zrL{KEnQtu z&Yz)R!>Dd+7=79CjH@r?u%^h9+v;bqg2shxU0htR@U%)9Ad4!JDc0XL`?a7|;QJS9L{umc_#JU`0Tj%8l7119C~_;?C_UZ@RDyNfhg zOS)f^hO}-gU8!phiCvCN!L21nRJa!+PEzb5d0qOnJyaqPFm2uIpj_Seio&VTk1Er!KX7Mof_!*4JL;hdFb~hf+q#|- zeASzj8%{KOsSD?zzYS$9Y9*p6!PsBTjAv)Ie1g>(yy{(~ z)AgryL?Uup@YjMC1ti#(`WjZmDKa03E=WuPeOF2WFus&_xoABg;P)_(QUj^9jpz?M z9bJ$7{S4+&@Cd@&ay~x0ISYdawBw0(2n`R!g)J0RE6UgjrKCVU+$bU>r>&e6qSPE8 zw|tZq7(pLBiFs`yVg8kih~|O=I;>&eG;vNP= z&8=yZutE7^>UmowI|K8gr6%4vY=>0EI<;{rP&$1LHpq%O^a`FC>?W2eREJW< zky;tXoKaM{F~Kgdr)&m~j~!M8BZJh$MPYc&Di&KLjWD`n5?MdNCcY%4;xC6?!772= z#HB-MMh|UuMF&xj!{if5)0jxdubbVl>?&}E%VErrGpSDck8RyoT zM2LCq!tOaIjlAfp6>L<)5qd>U2Tj^fn4#fc(6G6aHTCySIliv*`(5Z>&4e=ynm z=6DV1jvEJ!kOuWRT)G=CirU+wGZgj)^>6`q8}+@drS)}Db9(C48B)hek?q&W$c`po zpKJbB9ZPd`846$Hl58BGQd#u>v-kFWZ5_#;`2T(tvO`wFv4ovuv%g^ydoacccd+3H zP9`&uaAgpn4MP$8@|z zCy;@~unWM4D7bW|y544BuQJ%#Aba3Cg*do+4dD<^+@2C^hCyeyOFf0G(}Nd}XFLfX zgUTNEZaS#y10%sMEgZ#B5WDq({6uFygoe3!x>OJH+8m@S95JnZ5l(0G#C2&YV(&S# zH3-LF*c&(#4x2fkeslV-0_pSdbUHl$SAiA`{9g%F35dH?aLR6_RAVANp+skdwp7EA z3?5(yn+)E6A1$wUYaBY(=afjxlt3d{~G6_-?X}Kh@-s$=1;kIGAMX z7@QDvvZ!+Mxr1wlcv|azYq@p5bI?KI3vG6={Pv)8>{#IinXQApPvq%08*9&6;T38) z*^50K2fN?d?{`lgcK^h)VLdx^t~~+^@vyZ3BtQ2b{h(PoaqQ(b3*&S_@Py! zh_KCR{J*?$39{zk7*PVra)o=l)iV(HKm7q7qLNsgobal;Oj?8mFA_?!!Yp2s)xXDh zbxO7Sc*Ihx=fhuZ@sS|aN8te=2qqd+IYTDp5e!n+OaENQQUsa+^#NKz1e zJ_RNS0jieZ$ne!U1%xetNFC!ilM11DNiZFZOhCUrFz|N@IRp0Yo+Fi_^)YVgJRTk+ zG2!E0?_+KCG1*=W8>~yDGy@?K-!*F+8Yu}zft)NuC~`wyN$5^wOF2&)|2fzglJga7 zTRLpAq}pCS{X;-i!7TmrPu8^s(-DVK{K5-g-23<&RDD1x3{nts%?R6k0W747?&?Ks z&<9yH3l^o(3L`?(rlLgQbn0u0F@i+Rq9w)jZ_q%oI$mlm9w$-$s_44L)!^1bs%p=l zv>?u|#~wi0$gSjE5f=D0!|K+n94md5tgtE)d!YM-L=1H@v|%#tC!LS08nl!hh5A|t zp}?b6)=HPe7b)zkf(0df8*S(tjD>}8igF~%xb?U*-Ur!cbIEyoK02R@O7B=tl<9?# zLgzP$Yhj7@pY&fe5M98K!){B@#Bx0`tCHwNfK9lv$XRBleAr>bWJEhbY9EU?0oY+R zYj-Z_Ua}*}!^(NwL~3=Gm*QsVus)71iSBsAPqUo31TNCiyHL>~u8V?j)FCCGLzj&e zW61#@REc;AoJs2*()3Yc44Zje;4ZeB+>leo;+Q;l}-|<(> z8ee=twKA?>Fp=#A_U&Gb>SfSUo7)N?;{GmN za4>nxJky`v9uH3XFch(S;!NG#cGz2V2nxw|z(ZwN8<+puZjLMo^cwh`7TLia3h2$Vea{HIeSlsWG->K;X;jE;Iv|eF098WZXx7i6WLl zqC!Q1T8m~NWTRJ2w(_Pqytg@8 z!E}L(#jH%@Mq9?bm~dwJx5=gNMOcY<@&>B1Kt%4}T8xCI2xah|5|{CL1g^UeYp-#fLPac(e-RKyR>+X#1lt@%wS_{z^wwTEsLo*;{?)PzrQ> ztSud0s=Sp>@BZ@gmn-b+BaT9@lQmG4nGBi=2ziNQIZA7OVQXuT;nxyJvF||!h97E= z*hCx(5qbGb=@~|FlzIz_d+-0VMZ8(??R*BG(_*qd*_+>nMH{4t!>L}kg{KLofMN=T zB)C;rNKw5T@Tv+wKsYyv-0p_+mm1Oy645^j@$V(Qzgi-75CCAr)c(BE;N7wrj)86;fA8JeA)CfWV zV@hql`D2SdH7dEOQ`NnkpZu$xB+sY>qzsEZ$6tU?UL4BZw&Drodq~XS zHdLKRB8H`p%C|#&^AK`I?g+=Br9g zk6*2}5Fgm*e<VJ( zx%Z$A5G2dr1I<8?ET`Gq;+c<=;rBF}P%}VJLYoXiECWnp8@3kpx_)FJo;mSC7I@39z>!0+&q1ZSvz!RqdNzy3N7&Lh5hSP5^PbYnBGO?w#@WwIy z(11Tacr|uL^r%mKr;R~<2y(J`p=}M42vKbN3fIM!Es0NKGU#G00*M;R6PB#~$`U75 zSEXLKPCJ7u1CyYL7s&dvZgA_IZf+wWY^mt_075#PBe~ukOvmS-hl8E*7-hJ!%$yxf zsyIl>^ER}wmLa>Yp_yL$I_KtNA5pJ-opYD6$^R&X58|JYG5Rl43VW!fbOcveBKnsu zWzInrfc&+Zv6Eh)xip1_hythJe?F8%jjs_7oxQ^nij|y3ux<}u@4Ds!s2a^m5^hrcm(=o+h@F_$khii*qnM3LO0wP-~PzvVp)9G@He1tz! zs02gbC@CPT%CGWkH{-h?PzI=TV_j6h%kLZ46bN7w|L!!Mm1%@1GT&>fV2Wr(_l z#4QLo`t5ExL}g$Ol21*^KCD#)_RkB9{21(CKf4kI?>Z=1)y#}T>_{L$;x1p7!o-(^ zR01gFoA#G_mxM1O#a3us7!O9bd|Lji6T!Q<$NK^|Xdd(OUpYtV5Sio+%8X`_u!P7^ zn-n3j$2rjEPmeFH)JDQ?CWo-w7)`+t7e26Wfg!2Vu6H08!ZuLwmA(yp;P(^Z`VtsN zw3EXf#Hx28;p9THM6#1*^gfxixoThGCpj_2x%%az`1q+r9VJU1VJ+N3GnkaO(V$=UwKpjd))yzO10 zk9N`%zIHRNaYbxMADWh;=D0++@w~MXV!TAKkrgI_j+ndf>0)D^uzvN%PZA%c$kKFx zYzJ&vjcTBzWycx}`5sYaRLUu;Y_t7U-N!V7Tc1}0C=U;wJ&~N7x{u&ZF~^N8bZrwe zV%ra~8~QC=zEcA}I|Hgbt;ug2s%!Zv%R1GLrhTMggAj}ol+=Bcj_MXTC^WL0N)yST zh)aP~-)L81W{&L^w`YIB_AD%#eQsU1e-y8rtxY{`B+Q8gSA$2mR!lH(HP(ujpisNn zo?@mM14pVrVmVnjA=I=vUo4oue|~j3938CpFO3p|eGOm9U?N45;!6PizTHxKCtYiH zkC}{<;MK{76oFq#d7yG#KfX;>3Yl$~VhRWma6TX#R{qru?f8N*r0cNIzRicvHewrZ zVADJsPA{35hP|5n);-qV^~K3}bdBxL#U&1>j%KnE8lMjiHb=O|NB=jdvYWoymb-rr z^gqd0I$_;U8BPU;up079QRCtc7QEzTaaW`G3~z=6t$3ypsfc(CSzvuJyd~RjRQH&i2J@W?)E=MkN@nnlZqgB{Zz%C$UK93$zU3=0mg$TH0P4x)XJ{f& z@ukh%zEmLj+~@9=OF3~+@+MJMQ-;F2ob%{_C<|`nnjg!hVhAsS`zFpsb@nY@eGd3`As%>_5Hx8d~ZfzVs+y2|j zt!?BQqcy~Qmlx1>k8!6gt(*GqtpCH^Z(sUXHcl52eSC8pX$R;tz6N^Xs;fKJw7Fg3 zz9+vOcAoP_3hW2FAvvtHV?ns*xlRQ7PuevaFczUVM$>9qnX$!9fwE=Szvq6 zN?-vAk42}vyDak&3Kx+qektPiu3k@%Cd1c*NtkT$8BTyD;1w@-%ztJ7ZFp-MGe0d> zv`vB<@y{lhd|0uN=Z|e~Z|VsdAGi%IBb_}x;fzft)`ki>D0b zQ*SNhsK7Yp_63r8;;Q!0|Xu8i05PfJG`t6Qw$s$X80#KaHCZ$N>g7I7?<)V zVtUqSamre&-x!ucluKgl<~`BYRTEnJgdglurmv{**~&INa;K3ey_Zm*TVq_+9bd}c zR^^V5a)c7G$MZHm;y%lHLBcL z$JeZCdjW@EXE>ats_UHv7a=55{ovbO@iy{Na z6^oLNw7XQbAd9HAG&Kqo2uYD4n^yW<*l3?+RR};CZKVjus z0w4_(5sqCQpxeJ3A~}fJ5NxOLNKsX|a=5Lm89TO&lApvJau>1soaEig$Luk=xp)_n z4VOuTWckiLC63lTMi<51B>>TS?=1K3AsX7cQ2e+0@C*x9kb?-v2ApWK7NffTc*XHa zYj!q3P`5H+1hS>`-aVo6=&=>qy>>Y?ag(ql0ujYaVPE%$`n!k_6I}5@?*Gq(TzWVm zxLCbQgGB;#LOSJ&2#VA{w}&Y62!-O5mSAnc-l9*%1xwv5(zXeM565a@T7 zxjz}9^T)4%(|h7Ws4fwXnziq>l(Kw%rnM^|upy`dw?gaw-!`|l?jt)8_pKtwOIGdV zipK>dK^(_vrf1`;^W)ZQ_^*b)Ai%k{x3<&jI05{K&SdRzVuWRgmU~~WIJDv@3uU#d z6q$r9n%7b}!Ij?o;^k+Y$e;c+yu8FjUJs7?w3Fo6l`=Uf*th`Zb0Fr9qI{9H=Nc>n zi8#V|Jcfv34!*=?TGzNDDjEanZD%d(zr=wvg7n#I{e66euCAey0sCy+!tNuiZtLoj zN5xvWR`^Vo@SdC(Rbs#e!#^*sRPYelPF@%-Kf?8o|QyEOS+#-8o zwea*~6(o@5x|S~eg9#uDooada7-t}C$c=p%iR_45erMMm_08fW0@Z>grze8$+YvmY za-HmV{qw6t;I)OjT0fs*6R3C0pF<3vYI;Q!fXdw_2H{#QWSYw}(3LXES^o`q2gSbt z4bHS8+Kcs4&O-8vP6{VNxP;)TE3s;O>Qi2lk3_Q#r-y2rma{`W_2LoCi~6Qm4qj!h zc2AV2VFI*^qUrHp&|X5qkA~H0hVJ0cj{D!`MfY+4IJ2F?WQ{(|%H$k=3bBj+C6N>`W|<3X1|3lD-N2J4RHcgy z!n(S+xMqMzw4+3c^iKpJ0g`a$mIv0-0gj+LX9Io3^VOF{^X_98bzGKY1)SN5c=?;? zrdX37UaUl4A;F-3J{_nsl=qmXrnSj0zcsLo+_SW@Sw4?Q{wY|NvE2kkQt7&S@@gRXENAJpy zz~+|+PdZ3ES$?u2_`=K*Bn*({$&^>?L=+t(UpM3O&v$ANoTM(+7$HJA!NvfMk!y8A z9?zzmB}iG_aBy~NXJp#WM3&reo9H`e1bf4@o-i0`Fqp4GFga5yH=4zr0Tzcx*J?~* z9c5P$U%6Na7LXPnFv*{6zEUu1cf!QcLKctNb&^0DEgZLPVA{~qr_Bn>gzomC)Q-SW zcx4y9Ie|;;7-unhL6p$r5PS~76BvTs5H31w+}owD1AP}9pv;La{nsMe-RoZo3PlVT zT|tQ|#^E0@VkkFOl-e};v>_%Xl8^))mP;8gbAqp~KHGTu?bmT7^>Zs8p+6{zWpo%R z?prS?G7zn})J5{!H)@UI=Jad(K@IO%LtmpNxhtu!2IiY--R=|VC0Ny;<2 zNlDP-d}gKz1*+R?cUqCbW7k0dyl3wzV-UmcVh*fPXA{!Q1?A#@LzvQ<4Zw#shXnsV z84|hgP$4D7Xga(YOil+K8U>Ntcg>-NIB5RjSuE!c1_gCzYw8hG}tGP|rFvl+^+;6L$f$bf}?|Ij;3M5P@~UaTzvEd~VJhHv9M z>`|@l9-4!li_U;TVKK}8h&|^5tx6XScuPrx$XBo5BRBatfo0(-hczzj04?p=FMN^?Zk zh&>ym)a=FZ4!*2R(VY&z?jB2Sj^CwI7o}b~J1{%?izzFc^p(+XDgdujN1je{?f&k&F3M8@Dnq~xm!M1C)!ZG0KCt-&p7k)#vg=72iPL0?XOCjMxAiCD8SN+Rh>r8|XW#G;Ax^vZNfR>PS1+@>!I^ z3o(#cQ0aO@rhX}(5>(fKRZej+`uhJ-v3rJU z=vX_(b(=GzL(&7Xqs4@RDRMBOR=brZ^9|J2)Nu!u&NoI|9ES{Quc2rG64{Q6D{{(El)`fE=y(6ljRU z;6X7OUbI(!yoNs=Hu94tas5`t)kdSSyl*7xIBMrLHv8CP*x%+ARpC{Wg z>ygrjR*1#neHc1z?2(O?Zbuy#BD(msgdZeH0*H4!03z!y8J2HrKa0TEekZTxL$mp8 zODvCME$1v{vi4X>>!1d?YLIcmSixG{OEk%wPJ8Ek(1*~{Nw=;C&>z^hju6^F+;?ON z0zQ1iKc}#mbd26xlaE2Wnp5T=b-ota#@?j#-!wF1*L9cfG&HwNm$@0(^YWd8kyZ3R z?;97`Dz4WilRiozz}gr>09*$d&Ew7SG1eaf**!b%OrjYvPXvo?A3bN_aI^L)J)^yU zY2I?l8?+x{jH@_cm_u8n4s0>SYg7OOzM=UDJ0I``eChDdu)vMzYd!@mcoa_H^AQEK zY>|`pnS&|x60j~%W=VDEmm5%9SIy=YITvA|pv%6gD>4w911y*m5nDm3+bqNO$b9?0 zKhjw;#nMokIEw{t9K?r~HpCd*@qs4}rXSm^CcLz$Wy2UT6jdD=p2gFUjyuDTr3U!o-92 zZ?O2M8Tm0Lw8%Owz~q>7vhIR-3!E=wB4kVlEUz#ICQ>%TC;RtW>5B(0LF&nn?f zjRzIA=A^xbc!1R`Fqj$cm12g=ihE^z1sNxl_V(H z;^tIdug2KEX25_!mQsq&b)CMN2K` ziTo+6i1D+}EHP7Swqltn*-{LJrP@~%h84S$6=aG*!W{^u+4V~xkYPe(-373;n&oYf z6{ALigKUZxLwcYtxhM>Uo`n2Tqlp^QZ7d>N^gz-(6;9GbCZ3MLZ%ppHQ5z>8&DC0EkXQl+LH%q4-H23Dg=run zmWNG=K8krB)X+$}vNpH`CQT33O%YnyXWmmGt};xdyp$T3GCFo!Fs|H60Y%1v;UJLa z+b0AmpGW?gAT}Ckc5b3-G38&$JjHa1)?BdYHJ?w$H}uXunIb(y*gzhDW8^cEnk#i! zL0MNm$tKh!F;0GL^H+~EK6qDFQE@pcVyPm@(zQ6@A&1<0bHxkm&2gUb7ndJH! z!b}+zfEQl|k#5Ajh(k6q4rE?-WOVMa+JBplM+f{LI$Vn_m*Mt6^I;dL^kxn9KS7WI z9{lsY*=&d+6G^Ii*q*Hw+qMud;=QlDk??B5L!)t?VE~%S5yw{D2BT)rn7vXQA-x=H z$BAc-hcFk}08$_5$5}R+9H|C4b+G`Ges^(dU@+oEkB3aj8XR}pzYZ_8GE(#{98`jA zZJrlGc^E+-&IE<+ttF~VTeu?NpgnD&H^nK((6b0mUov1_F(JTaB&g{sl;ClS`*Mp0 zFOV`VQ=V6iP4f?hgUanRn07Z{uf|^-JJZj@9z96)f_WU->0_*-0Xs#Bsb|B9lncc9 z5}kq0QW>=3E-Jo|6l(IQ9@BLca0I0FYQLB^_s9pRLv@8qJl_n$h?_WatbR!L^I%?+ z)z#=L~acGk+OH?XZJB~dck8=)wz*+se+jVp(w+;yO(Mc z^~cSV-qC*5GPvtnQG|7o;CYWDwZ1$;gbd#O$G;f_=$4Kh?hiW4zkj*n?c*S*?YP!w5sy1lmn4CIqRgbH^JBQpRytmjOc^=?{UvX=VekEdU* z$RDjv0Fcidm}QsfZ@>m2-Jc)5msE4ZMw1i~^{xIki* zz?(JrW&33Bj5SuLvllFb1H77{Y}ZLt-*+E@<3KiulMm7Sp_diL2srk6bwTQwCgp{B znw7*S@A+esZlK1^#=kA&4^!xGU!;#gIteZQT~j>2)UJ0APSFl-Wvz0JIE z(z|?9bnlQbwHpK{|N5^PnK+tRK4Bh?is^Avq@cKQA0XitC;eArRC`7{kNxpn`FS2E z0c_}bTFZA6d`~IFk)e~lJ(R)@Fkh5sgt;wwcikOIK&Cb4vJEH)G2k9YEvvV zy63H`;Uf`fny?uC>_*2rqR61^2|%+sNnRQwBa^tsHnr4j4JM~8L{mt~MoB$5b;KhO zqLuD>#BwU8aTInO8j{quWV*LXGE*RWH z^#{1FXd~w9B9TES_x%XGe-N)u@DI@iyY&;n`L@FwO?B1PIa`4O40b$#nQ@Fwkx-Iz zb1Zi>2q)Dk8!9~@GeHD{iGxB0=-_l&seHIDOgc5=w5#uRO(4Y{M z8?^|oBMqfZvDhbYE@G}(-JXQvlr!@{Y(R^js?m=T`W0rf@HRyaHu?!YwWSz6nh9-$ z9T=vVQ*iQ0N`ls}(qGEGCN*W%74uFH6{1m0*5NXtaK^b7L@k>pUq*(hpL()4jnkjA zKD*)2T3S{~(3J$@Zgs^oeUV)OBIv->5QvTh}%lE^;4 zwKg;{eKR-N(Dy}0bFW9@#=j{Jwhnu~jE#W{;Dso_dXC*4G7gKUbK`Ffry;Tco}G}= z|Hxqo?1E}rOa{-f`OeNw6fJ9yvj0FeCc0p!Q%x_PkoOtX2RY8 zAIzjc8#YHi;?wJIak90(k@~B$ekqBC_jw2{>92o|%cb_F=OjwGGY(x==Q+sB>t{Vo zW#{%{$V!ZP-}LAu&+VMX@j%8oexZqXVK945K%ezzeU4#|Bzp-#T6*gw151Xnm+&yA zZ=Om{7G!ei%t_CD2x6%X8sp6@OH9%glO6wkpk+oPPs8Ju;{qMGPlvK+7uWM4e%DOL@Eu#Hp%^=vVLk1)r%+T9zoI?3kSEs; zF|^P{>l7h7geehYb9tNO8Hhi(f;pXv8s|7|he}y#6O)uy$FcquRx$_=J%M70qG?CM z`iH>x;juG6?@@#8N^gZag%)W4TZnMhh!Xas3!_^RRR{o&TVYWRw%fB=@l85rm@GD5 z+5>S~G{U1cZ!T8nQnK9z4|SgGd`WRPek}C#WEmWxhAo8CL2o=cU3s$fJ8O8w{_(eX zvy^tTVdXhan6t_`yA?R>{ZaysDjyqujrm7v!_qe@&I6u+q%%bE zV=GMF;-OA_hX~yWQEpM?{9nnl+?JGIc-r!>M3Ctt{aE^Vvf47M5tq43^}$jodp}ua zG!kT>1BWZ1xhn5V6%d+63dVF2dKS7U6%zt`yFn2xkh)Wxd|(c0)a`!#aH8%dKfq8F z8wz0Yr$7b{DuGMfc{Rr>*tLi$Tb0ya()1PE8M)58p*!W95nK%bFGfIgWFwz{nFAMQ zsF~wL4=p9n+_@n6<|=I6w&N$l4=Pop{()gQD_TVUX2~Nf`U=v`dPqYzp(n-z>_;60 ziQ7^4>I%ny_7R|@cso6^bLo_kIv`NxT?k=>QyuS0uXWw3qMmo4NZ3PSCvx-v64)UU z7g6#%tt%2*h26X?gL&F^=H6zO_?XG#**A-vAam--LyN)BW^@RlwUZFDM+GwagG3j3 z&(&xk@NiS51X)x_y(@_)ef=j9xvcXacETy)f#7g*wr)}^JGNgEwIYk5IIarn#ID^M zpAL_LL!#5J+N~_fA|>3Vl(#QBYWnm?QXG>efK*vOvSY3-UasCku|@~@f!zOFQjxge z2mRyXFt2M5HV+eO(pa}R-=(-9u+*S?g9(_0t{w>yC)f(k0Wn+VpOg|tRT~wY9&XrF zYrOrjoDln%Cf&zOZ}}K$DrTvN18IDYr^aYuY{;5BOK0QhOxX#TM0SC0Z!jDRAAYlQ z`0ei2;WyiRudsi@VF)~iMPdm&)}5GBz~j2*k#$0s7*YE1kOB%0^Pn7L$h>SGd_us8 zEZa8eXZwh1NP>cGQ_K!XHYFjLf)T>wC}t|%hyvA4iDR|(ZA^W<-+nWk%&z*_4EU~7 zK+qVkwjtF(gVZ=|RaP~z2aLE%z6GAW=lQ@mT^+aN2aC0G#W`nUIoaLl_*gf2FN9}M zCjRZ@_?k4EgMh+T(-p`MN~*#ujl?S0%;LL|yP~+%rY=X!EhZC+ow&NOw_ztx$G!?? z!oj6GPARB{D3fm-9QyXyK5c!712q8xZ|HD~WJ+6GRtVae7cV5;>yGSdGBCLo{K3B6 zvFE`Kh{hXG9LdMTs%-7xqnZI^SIOj1qa6q&$#KP_AYW{Is-bet#|@ofYf%BnmNo8< z3@=JoV6Boka#eF9VHnoYuP&pJ}8Av9vjWjlGD{xU8Z%$flXOMz*<%~4U`Be z2DE_OL%>#>q`_jgi^wZ1=>g|oiRxg zs`+$^S=tF!apc@x$~s8M*bwZriz1X15AdP@)`SVT0J(#eIQR4-dJKMzwggU-^R2g!JF8 z7Mn}%snTzAX_3sbf;lsyU3LI=!vp2oPX0DXoMxG~gb3DFA8z;Y@$h6gI9@*+9R1{U z^XGJBOOeQR^-97yMHy@tN>?T?KUXzMsJYq#aV5Y{N32WJ${ zexn!q)+DCV#bpDU=u4c6&kO$pPgAe0S=Su6ezxXy45jHyVuyH)RI>1-Yec%^p%@^? z7(B>l{ZIer7xYoqpvq0d1YzxuiQm*XR20Z?(Kd8UiH3T2EQSDi-2@FP${t;85e~jy z#G*29?Ml$gCzQfJboJHk_*gN*>WsSZma4_ZA~%v@X}}&H4|tn`^S^Zh&mPjTLl<@f z1VmU|_&Ts0XzrB5VTug8qGN$5X`Dgi&%@}%he>9Cx8FvY#aS0S2Vu&@KE;jHk|S)` zIT;|GoLi91laz})YMO_sf~A_fRxVFn_=qrLloGF@iwt2aNxHI<8R#H_A>l<>-egGd?OMf<+} znqm$#=3Mv|12teae6%Qr!v`iOU0x^?WY)M?Ty`135X3L34Qoe7gUcDu$J1tKN12oLD5tiMGa7EG?(y&+;AESgdO@!H(nrJYtlH@ZOG30dPjyZ2;m3= zMhn8K=Z<7v@5m@&%y$`(fL_5SU}}K}0hx3I@h?l1iQUkGR~4j-@e+1ghU2=kD07d;^`(Il=p|st7!-dk8~jdwq%jW$4dPXpEX5! z96hkCvhVlXLhXkmuK^2%*U$!1!x`;;*(?Y~!Ylw(nXQ&r>OKqxsQG0h9!kqbc+%{{ zO#0@wOTn~m7SY&&L7NiheG~q>+da+Fg9YQ{o!pknlz{+rlS>W6b1ATDL&wTWAQA2n%TlnY4Su zN?%?w(vB*_dbg*~J!$WxPHHtECB0~lXEpf*0M%f;&dFkqH}T?VEje5fjr%Jh)+&^8{6y#-R?M3=olSt;k4sh(&mcy65=P3cp{TfW&g@m4J_8bDYN3cTI>7crGK;&fc_ciyGDFUBga@J0@o0#vhljrofEJXf zsO!V0B-Wz^yV8d5H;hPkQ#AQhH1?DCuFnALjgtspCseN&Q7h~hnk#JGM@dw?m3^eP z<(j8B(5L(D)8VX(l`jBI6OyG(`-e0l#t%fIS9;+>PX;H0$%Kc%uVg3zsOF~MN?v&#n86imnJz1W zEr?G5lR4BSeU<6lAPN4he`bQ&e#DH^#XImYU;xr7-=^Uxs;);s?;?^RG`4=`FT;HL zAjT1kX##XOIy%3?X~|qR)Gjy1sRWFWI;;u9mf?F4Q+yk;hBe@3LRyzG=7H|FA?A(- zO49)gIc$(iSadZ2n(~S(OT19?#d&5 z2APX~TDl~nOaWL>5mUUd4q{{y4{ZdjaELPj)U*c+jd(wd#X=b|z#G5iLK-mhLw!{k zWO=P8*|K7ITHx;z{3B+Ht_-TgyjKqM_+c$xl-}*rdKyoMk>(N(0$r6tgP(8a+(f=~ z3&QDBw&!{1!6+*PVN}&*3}sNbx{FlAZ-s)a=tg{l2S}MyH!?l@-2eNk$XYmLnn35T z$PLh#E-AcGV3G_he`{|35$T!W@pX#o-90=cp*6U=Rkw=35b!EA}u=^n|sN%dXe5rV2*Obx%gT2^$Xo6 zyF6XEyL4%#JEjB{oh6$;N_+(v!66)hTFhxy3IGi1ar%QYK0nu4wLZQ=4Ow7by-$V) zxO*I#wrmJCkXulJDSd!aEy68>ktT@n9dF>EcPsT74dWoNw_%1NgzsZV^1dWaz8#z0FXy-O`X4vKa2 z@gs?v2_VP$!fPRC)hURYjOnt2VwYr4?*W<|`dl=N*r{^T5eF3GHpuML(5c3E{CjqJ z#bSI~U{R3*cO{3DyF5Pr^m8#uDvbo7PjI`kG947lMDKk4?9X?8J_CYbQP{(7m*UcM zOlk@<5ZOExRrAU&VwPGB)790T-HpTNn_C-)&$j>ea%+3-89-GoK#n~A_IVj&+q>cr zpa^gMs(90V3=V^rlUL0EpU*K3ulpbnoktJ(kLWHU z@=;dqB9^1Kt?jXvB*OYZu6Cqwz2|`OU=8G$j|<^xI$m! zliAORKcSP!@*EsgS5MYwjW395cQvSv0GNcutWTqcqBMB> zOKbJ`Z`!&V^svIKMW4O)mn;6M0$c@vv6LG|mlEev0l5-v$;Q>LIH-JKC=&8={kX; zgykPdmQUFloJx@Z2CFJ_YK5?;mzi2+_n7+W5=9hw z^9eb-Gy_nvK8MRQCa(f8ht=zc@)f81K}v2emdMJ^IJzg>r?psQ#Z-7Ua!A!$Dw*IW z9?NYqlS4HAUJqI)Fq^K$3LG5chBey^lG;5S`7`#YVuK$mlR{kKH=<}*Y$Otkkh$nz zv$HWO|3NN-1P3LX8jR`WL3!%>pDS`);07&Y)4ObQENzB9Uf zC9>$hMdGGUHcz@PpSye5Xb+@DOl5hw?RJ?NMD=>zsZO7R8ET-Fcz8=BkxE`zY3(+} zNmK_(CUqEME7b<-()jG*=ae0gepi!`u@Q)TE+=tJK;p3dKdQVluKm~1#wI^a`27sa z6y`!Ai@3Oye?}2P2oQ7swH5Mzt3)I+)v82aM?XX$?q7sV=^N1^Y~eg>Oh;p8P*Si> zlGY>*5oCUI7|JLNX+>!#daf`CQ;=A6411zg<*b665j;iV-eWO!!V9`WLZY=j&HDDw zQm1obE!9F9+rrmkq#1yPTzWy-vTzAx}4VjG) zlkzVu$q9KHHw2+3=TlU_jE`a7@t<=bOg(cJz;$MQmid)w!9jDor(cQ1sP=#QxPjf0 z;bfWkNkUo3&D`}SIE^50m1qR)$|-SL(B2+15OLw^qY9JQ%$$8u3rq5K&`p2wY2$KzQ;|ILqdT2%0q=CK*+C!_-r_Or`0^pr0`-()jDzeN^#L2ZzCs5Ea&Z0Zf4FO&%)82Q2sCK8~YORAaY}f)9Dl3>pNKB zs@_t@m_CI=00CXCKk~82v4*w$ZevhHu!iVY@GeW#q-GFj#j#S-;%|}{%z8OulePyp+17+3fMF7v z=XXxrHU7M~HJW#TCw0zpi0=CJ_rdVIzBKT%vii9|yH6$#I2~@RnClj{VY;+s~r< ziXV~byu+^tHSE*N{mSYwUNru%y3a1WrZPr6Sx9Y5l0P~$S3=@Vl-ObD zX&{(9g~VP+!$4d02b*MzQWEoI!2Wc1t@0?qp@voHG^M{lriJ~it{kz&1lx%nwsb5! zo8m(`w>V9vKwweUJw3!S7e8TdqWh7JzSh1>E{+eqd{_`6tAfItH$(-S9~KP9)EgYlO7^fp zHihA1meaef3w9KtBz!niuQFzV>t3uOVzooiFJjz@h;q%RQ!)OFSPC;J$TU@;h;&JH zcBSu9>ZB^MPc7`V#c$S|+A%e!{uTUnNdcG)grqyM?b{en5ZXIKpGknT_Fk?=@Y+&j9?;3 z$M=Lomz|hdqceRm{koQDY=%i?<9W~ezX$a>njvWeDH$WETww**t*zq$ya+=I;kw&s zd-o1T2P0SC)?xb1!RVfx9y#=kJ)e|Hdt2CM75EMkFypj!qwMVA+}ngcsOf7?SifB9 z>nmL2JD3zV1nsEG^hW;Q9jWzEw3WM#yu4lQyU7?glTJ5&K@t(tLR>hQ=4$wli;mgZ z&2l4EUy9wU3GMUvWvan2U@+5_x)q}E&^*ZjGlVd_L|RwTe1dJ8uW8m4HaO>9G`HAi z#KHoyEe`RZwYeQ8gJTc4RYAvgapwC{FB%j-O>b<8JbEza@b>g_aD=OhN#J|y>6cKYA5&2OZB}wsA!Fo;m}%oDLs-|akhh@Zl1G(ts+PH-30Lz z3%yw0;oWb~{KB_xpg3Yu3Edu1HtEIFMyNL1a9GD;Yg)U<7y`WjZG+Jp?AW(o>}>CC z>>loJZ@)VHZew?EbNeMyySeK0FWh;k=MyvTqN9Nd0(a8jP(7&PO;`8(-)yWsqk|i> ze}w-KH_LYrq<(TS6!88_0G37Tiv+eHN1 zLlZP`1XBB2-(lD3lZ<3m0F-pi$n9V@yFRpMI8cDf>+NG;?*fT3gNa=Qgk-c!_jGq{eS@bMLI-cH2YExgd2l`*@I$x@-~x7jg-}Fl z>u*3d)77;k2@aRnHTpem#F6G|^H)&ND7`X~Jz7im+(^$xOovI2)2mC#h>pOwaN+?~ z_mK^4_n#uu(eymEbGzrlf?}Nf09j!QMfO047yZjlz$@yv^+noS6TN~8vkF=CHPRl4 zV3h&+RQ~2T4_c?^yJi*^IgfJ1J&Rk6bB05tbeoi^5w?X;mbWToz+XY#F#x+yBQ5;D@Xci_fhX5 zcv8Pw+uAx@UwgIj_4e-O#@?Kdk7viY_iH-q!QI0I`qMFwtb~57kG~)8tgZib?Q3+k z`SSVpBK=ussQN9UP;$Og=t76h6H8&UZX#ry;qJ!P#@gP(^Mi|V0940542Fg0WIzBr zk@J~Ph~G7aPU>4IkEcKxoJ_?%sk#flD3hcwx1D5=iupul!g{T%Rnb|(dYulLfvEZn z;)2}eceI7qU<5h4B!{WbRWR}kXA3$pXr>T~0FnflY$OPnFqFs`J?o`PK(4al=Ys98Z9ptK!wpdMzJyq7OmD>UZj#Tel1gwrbC61 zDT+{JEaPu|)+T?*b@*4amWK83FHqkopusVYQi;D@$e|wbE#mJ(s+B_k33rxDn)wU& zpmlFgzW)Bj*2Xz*X&lY&J!oxhKE?0Dm)je=yW6{fQZ$7Mbvapwu@*)76kE^H>|_q= zbz*{jNbT2?@lS(MuhnrE2q57q(Xeg(`^VFNU#4gk94PvHHvpK_ym>c4Dodb((S+hA z^5(fy@LN>%#9;UdbF~i^48L7ekW2Zm+{dJR>1iC&hh1R9Nr}u#8I)s^H*{>b4mdKO z8VL5-Kj$0&TNPX#IItLAqVt+WAsx%bK{*Y4x5n{nJ~VLVe7O@s89=NroSD(~>V4Mm zHp(ztYSn+iuUo4b!$LDOIGDWXUsC=S0ibk|8-*|S1>m#Q)wHn)W^@R1 zp^U#;cs}AQ0(N-A*Hy~n5NVEnm%p3qfQzh zjnAhH4lBN?E?65L5BRJKt{Su?P4Y>calp-f-As}_BCmNc0ro8T%GFSjE>SO1=%WU| z`)xaRiY-1U!9+~LL=@_9iKy*L0>KngQozsZ(CEsA8r5`>vt6^2)+30t7DFWJ*o4zL z#YS>4`F;nc5rM+NXI^eQngYY<{$zDE+T)y8bW>H(FD@$EO_Ms7;DVf;y#fhhCGL%; zt8lgO^$PyH&;KFI^1nnJ7;6773}t-P{>?M4e{cVA4+}CwGf?Z*x!7tc^fCab*T=~L zOul2V2BV=10tWL%e*mt?qWVZF9^3F!Y{z&6+>g=2qSCvDtsiz|i>z|Y>#?ZFF+6}$ zoh)2R5eQW^<}1>Ct7MwXt;a37&*|3v$JxZmvyhdI=R}D#h!3Xh{AfIqf~sdRK`_a` zLh(hNGFSaM)h`_naL4#Dym;5U!i?yAo)Yv8$6TGK7C_lE=z@%EHp8poL5ZN)mfIpr-Yn~|m5w65>l=*F;Cy&A(2H-Pu#vAJQcyPnMFO4;rbm;ZT>6~}SZRfQ z3mAD$gJTe}%c;nNqCA7@B6JS|ZP+gZ49`m_@F*D)zihuB`D)i3C5`I~v z>o+G&U?(!JWd#CBfr=(x2(Fom;KXt#&mT)nh4*P5i{nQ6oW%{oXoyD2A(wX_zX4HL zBOF}SdoVK6(Pnfz8Jdi@{VVI5E^rENTLL4RvgbJj5JWu>veZi!$eDaT%Xdf|p43s* zfhb1s3oiyi)&&I~4eI#B98PlK(cQ0FxbKK<)GZxbk@)2Q{t2Tv^O^X(HQg_ULNkxV zA$WW3OMbqbo!y2}@Bwxbki2eOQV92Ezsx9qtFFMp=NPqP7#NG5SR`wbO7)f8%n{;= z)-75Fq?U8-K7M^QJU@OGObp#6#Aebl2@L=D9_}StVO8_X_UQkQnP2O=1*@7=DXqKJ z8R9Xt0vf-ZV~jy01$`rq?Cq z(Mr3AovG)$`Foia%CudYAwPt5dJFaI-B5lJIbs+svJ=<%Ry8&?Z_zJ@<*FOhlr(Wc zC1b$QkF$QX&cm|Z(uA(CPTqGiyomqg_d=VE#t0n&ZnAH)K`y(G=b5@?+a{~GY|+Tv(MtL3;JYQl0nol^9{4uu1?97rra@BApsOez)~uU zeeKE?eqr^Obcwm|M@(ENreE@u!-_a}V=cp1c<9hIpsg=nDrV)0)n<0zlwZ+Ii)c^Z z{9(3lfO_BmO6IVG#tAxiM>1I^7(pYk_1s4))C3$P#yq7A>NL>^`xIVYIju zPaG=5Unk>LnB=wux8KY;?tQ@bu#(h5iZeqbn0X6`B0^)hSd){!N%Rd?o;6AzMmKNr zG?^o~ME}ioVbLK<^%#cWkJvSSC0!=bbvuk~pql*=d!g8mzaTbsL!9(1E#g3-NirOp zBtM1Q%E=&PXEqbpwI*T>E>hJ;Ih983Fnqjfh zyEa%2vSR1zMJa*C*W0o~#=L4i&qn_M2sfIDjINGdU|#=~;5F^hbaRH!BuW;KYC^*5 zD{6_vnH2{V5m=F#M6L$hlp%-HZ&-bmdTo*ZjExIuA3c=8Vkc2X%VN4KREI1+{m-6b|UVX_|$ga_bcfX=eFLx!yaY#qH=yUwo#F1uq;P`!B z`jlCiyvR!Kv=Q(R5t$7s)b_2l0xMRhEoqN;H?*ptmPg<5Ek6(9?;%dxzOwUIg!?2U~A+zG=&=n_eug<3Y-oGIN@p&{J zD^R}C!vO>mnfXdzvKO##gs>Idq$wc056~E;i`}mWIS+Jnj5sQ=asis=A-TBd+0kS$ zaC-NBS_LtRnW^vzDt@5*D8d97r#}x7BZNZ_PqiV{0w;{?dJ)ycrDSK9?Nvckq6jeu zd7%rCXehqG+^zbg_3+baZ4VW6n=UnU2Z+LB7;fz}Da_VCA3n}x1dYv;eHkzVILvCN z!xweaxuL)D6y51Or+sWyYx}P4IKdMViTjAEzSFnRN0hjzp9uFWflZc)s|dZwu(51` zbF(*+By3rHNM4mlgR?|zppTQD^+AGpH(p&^*szJTbps$cqzXA(k<^g0)(fc0R1H?h zMMu6NG86_SoPH9wIhdvBAs2}%o{)TF)Bk!hzPfZ7$)lh;Z2nq!BRN1K=npc<*;BeE zJ3G9AaruUQWMJ{3jP9V38&mN3n_rb2>%C>%dfPQmMBAqiO|Zn(57GfAN`&q4pEegf z8=Oow2MlG>lL@0oFPE2)*Oa&{f(EAEjd~Ntm&da{vVua%PPiPP{;RB7P_tacowq08D@eTbv+U?6-zt{3JsAloVef zO_H?fyTpVGG^&RjQl9a}k`;~Zg#B-(bJF#aK*C)X`f|F!bl`us% z3K5w+3Crw+q|04M7TU`hak3wgzgVniDw(|3ME9ZdcB8crzl;P+ASyzYRDP4#jhz8f zmy7=#P2Q}>o7ZtM0so)1in1@QY;M|aU4m>Abjz~G-}|ANFh=?Umt)Y##4Q0><(x{A z4wDWHs~fCb}WGdE^h%G zTQ3OQmp20^V>@t}32rOJ%)T+4II&@*B;6)AMUW;vYOh{+s(P%+98EVM0N?MC_E6S3lgDZiUw+=5RAKFK)h^*0q(y8KO{QnMvqf3s1Gr_==qCY}?UJ9NiO+%W{coXA;IWJ#+&U0e-$!Eh)PzZr z)tCdvvzUEb(?>SZ#$e4}vA#7ORWaMx+m@yj*K`t=u<_en&)iLz+txc>lMfIyvXM%D zg~vb>RuiUz-msGjY;CMnl0?Qwl^y`E}LL;HvIIhh%A62O~?P)Geqz!8pBJX=n zPkRnlO(y|FZR1=)zG6-Q8sH)-< z(2$MUP~;(NgO8>9VD|7iN9_m_N9{6@u%6y~4GlL0F4#9`v zm6RO_zs$OTIVkiHp2MYBU!Uv^xO+U21Du%CJjND_f$G6~y0Hw|gI2MWP(ERq!PHvA zw)TXty`{u}{a88ZYulo`x%tQf8`CE|-A3ay0_vs0#73+<#!y~`0N27*UW0zBmn zmS3UH8BlwO-+G^f5{ZwXyEO}`+Bb0cq3)Gl8;mGG`I0xQVjD!*k`gY>#TWcUKYDMS z4zYYvnWZ?9N^`b46*bdM#Pa)4X`(V~_zzKZBG?B*Nv|Z`xk3sxFIZ~Gm|}HRZ`CeW zG&qn^sE)}x;HublLV$qBwumV_+Mp|Eh%F%4{F)hEVoe*I89$(Z#=SC`Nzb3pDNr^V zCfE}SC^?cypUZtp3Oz>+zFP!!qj*7%8v^XLnY^Kdhu)`&%CCD|Gj?&*@S90Sb zMXB|4%!3Z)P1)t$kG3x&+TE-!Lr~OQycE`S38GKQltH5kd`3IKPTb93TC%ik=j}%_ z>zfKsHD#Jqz_O*1g~&my(f(mOuEJl8tvr5~d%2S-%h8>H3_bE>(|Q)pj&p()6vWrk zM>JtmPlp{BmI6MUi^w`HGCSg>njqs)5r71jAs)2`ybXLyYVKe$BIz}W%K4PI9*B#S zMY5_)IK>Kgt1Rx$h6aRPi(9$3ofnj4s&RD{)$g9779PNc^h?SOdTBsIJqO|ZmHZ?q zUXX-<(EzCti$V$_USK`|2)QZ9PBB%5!4vhCa{7|$Ff?!%vVD?jH#i$alS%>)=22-v zcSMNKN}V0nOhaL^(R6ywf@#QL5hdQHlSOW+gmh+oxNk*U-TTep_#I0Aw}u&Jc=&w< zg1WJ3g7?ny@7;J>zc)Mm^`1&j%{s)y#r_d>VRbEnH&-4~uVIfTHbQI)HE@n91X)u- zIh|iAOAE2-+KF4Se)Y1siNq;LNDR3}XsG0V`H(j&H()hG73fCG=D_-~gkg*+$|XGL zXto>9Ulbh9j~y)`l0a)d7THV&6N@2})&eOWLu~Y?5r8z3`XH%=P&C8n+<X?NgOm?;_Y8+ z;i3XEmk9NV@XoW$QPEj8eWdJbMQ7vIKhlkGQGAh*-Xd%iKa4%f$Qh@CS{oZC18O1R zqrgH0pwNXPp5suOH)9T(_*fwb{b;}Eyy9NDbRM@wKoiJ>3!T;H&4z(Pks`61`Cz3< zO!f27F1bva*c9@skR<2H*c#*D42!H7Ak)%4(K`HSZ0>T2xkLVUO=F3O+>#WxV^X-- zMv|l=mQfw5rkrmap|**1Q}^b-97(&vwA7qloANV4o)DU4o45;a4((8mLz25Z4Pq?w zNj0gIic$hiN88f->^?@!RLD<-{`v6rq(8ZqeetDk0i;RlhW2j@!#Hgs<-*hN-D#|5 zLqiYV2o;ne#M95=Ix{F)-meOsnokHa>mTLkYpBOh8`#c0wI!s3`mGYwR*>4P+gyyg zIg;Qo4}MPlQ@9MuX1jipBJgV20&A=+%Ehuj%QkyjNetr7NvUkHYlfD1WyIuSizNHe zQD$`G;W%v}Mu9ua@~os<3*2-+)jBB07K6XI>yj8TlcizEL4qf3$(T0qJv4we)~LNC z5zTE4s~P5LGSKhxaqJD=M>I&rN=yO*rtRO?Q@x{9e}n7STiJiZRRx8+)|-8&o4VY^ zUA8^HLZ#G$9r;gFhvL-T0}r4&I?DQHe%tSl2d}SAzrjTU=kTUyzqkqVk^+9~0LaOU zyUB*-c&fK=#phUPkShv;?QE^RdcM8;!pjDsvhCL!-$Ndu+*aqwD%KhQ+x_D6*TdP{ z?(p)>7jL`2&Zcj>0?_i4w`XT>F5aRE#(4_~v)tYPai#UcC(BC+bpte~N|#T%yH}VA zcX&UB0GkXE^uo|#1G0!m_tL!?;k!^wv!+i{cvMWWfmA}04Q!qs!cD&zt?D!G`(!g0 z@u8M^n5?L1|3&V%jYs0Q*2;ACL`QR~3zB8(yEK({@KOHlQ;A zcoDA7A(DB89i{E?wCC@|XIvRhFlh*ZUu#>545iDAdr?x?=uVNogsGtvz2OO1D_C}Q zb!Y3_uQy*FuI+64tpE_z=!3XM`#R)jKA>y>3<|Ab`$G{9YnMY?D@yJpKGg|#M078u zWtXQkqT;6@Phqd^x}xvfEUoT3!Y13o+!E(`>JF^HN)qy06w}d(xo>tp42Bl>m1PJ3 z2>5*(inO;s`mwYBU zOx78$t%Bx)_B%!4{)^WrBianS>J;Hw&H-uL!x3FXADcU_WCD-ncCE~>w&JZBp?i5l+Bl~4)-?yu_5--|L3##;`4cv z5bb;OG`{$J!C7d3jWqPd=L#}?tJylNJx9IzjaOe_A>bx*Qw4D|6hG^Dd)0aCg>lCle$Ivj20yHM zd~ur8j_BZkv}n+%KQ+vgeCTEc5kOQ9M}88EYRu37wvmr9I_^)7iMjRh1iK(nlu&Vr zyB&ADoTF>Q-@z_^A_Es{Cyb|8!*g9rNrCXoVwlaN{+=1Ero8#4A|9GAb0Pl;pJrrqrl}OBvS)jGGx|kB-uL*DG&N`8nlE; zEE+M}upkw%EcTjYUIE#nBC+A;SBRic68ld2&+!nO_o+^vBg78qgyDaqEx})Y$&DaC zn*fGN+b6YlmZddA<7OE$8sswAv6ruvKka@68S znWi9F`k} zq3RHBmn1yfe)VeOnPaV7E)NjZESSu}JavbZqOY-;VWDGesBjj4w70kQb_;Hs0sdHi zaxlH$*?-vmQx6tQXTRV5^@sbgWF)0HZ2CKz7VPrILIg6sedG=EIe77EGP3+(WEhKj zf~*%>C~{JMy)WY|NlHrAOSmxy*WJ_Z!L}7kj@=RdFd#S}kkm7NLNr6?qHARCGlm}<@)Z11Awt}p1ism9@qAIc4@@iX-k{R zm%kw5SVK@G$i1yshfNd-lS&V0#}WsvPh|nkiVr+=`<=|fc6zSXz+EOQDmxy$qN|k> zYrfsghV*u(e#&%_Nrpj}gsmUG!V9y_g0cC{H{ZSR1ycdou)#?iqW^ye<|-0DC%>j0 zP6{be@jjq}d+73MS~9+))U_e-7eI_VYL3n(mDLh0OE_D0nP;mbR_bzt!NyKx@o1Gm z85EiF$*#zjJ9yoK!;`KcHE1ktODV)10yv3lt|c*=UV;ca%YKj+)1$L0x!C|)6|W5* zZox}FggCe_Q}OPRkyH|F@(QXhrDdjWbdb7v)jt4CE zCIlxXQ!}9*2T>?3_$q_4Ma$}Z#TOVoUzjK57x@L5eUjF63-)s~B-S9YW0-4TLLCr^ zjRA}9e#;nhe%}?mw|8{8TJ{~5xb+_aqm@1v?SAWPWH)(8f|KT#RhK@phUO#u+Z|0Ynhrznfz6ZM6y!H=?inpNXtPABUCued$ zIyGS;31midA{T_LN&Q&2CdxPBVEc^L%Td`!mBQ%^&3AfeX5~1LxLJ@3L8%%QXr;6A z$VQMB4HE(-nmNljTGy^Ch;B>Xu!D%R$r0)MedA!^6hIbZntP68UA*l@RI132zv1Y^ zB8L`=YvRe?dPXlst_*l8Z~bSwANxp_G7IQdQS*E+d6ch+8gBR6DXlY?y!t}9j$>vE?N1MGPJibO?Vk8f zqUUjM@+o_^ylOnACm~eAk^|VrjHr2{1=(yf%Fp-V0+0ZF{Y%8Y-q5`2CauI3aeI8W znN@&%OXI8AqyyiOUDh2}4Vi=Og9EOECILjemvpcI7#vZFh8+@1y0ZK$tSL6)$$^Q+ zIM_XpgGE?d-|lX~rxqV9>q&|peA2i)k)y}^yubxBlud2*TR0ewdo4YJgUcK_)lCU;J8iA5LXS@e{F#3FA?6Jhsh>A$Gqz^q z7V_--ExAEmkO1%MsKqSY7C(eXs^9vzz3rE+@$3H$50%Z@Wv`&qg`DmwC|w$43-kRy zxKv3%0C%Z4gKu2~Zz9H)5_Y^nW&!CwztA11e>T{~;&*B~QUnM&+#pVlV!SfvGgU*JUh zC-wwl{caL!WZvbA1?3I);glg)BZ(|PN>~E<0HHi=cfnEVB!#Ie)8G~WM&Tc}!eCFc zn5tBb94judp-ML30Y22wmR!;s+1tr6ovM&#zK}Hs1P4gBo*|=69Gc=DPzor|lwqai z2wK<^>cY#7IWCutC<>-nDu$p4kke0?w^+1cy4UNx;ydOIP#JlsA8vUcMzW!JoG3n$ zJzP_FZ;lvIt?lW%qv?X3m}$_|k(vFAc82V+#-6fst#c=KI-E82viQW%Nf)V7udj}N z8hn`U&aPg65U|esAE2M<8;S1Lkfo2KJEAV5jzd{f*r&)WQFSe5X<}11oviD$@5$KIyif`ES}2gg zqnb1yVJOS}QMmaww7EtK3%t8Hv5JJr2d(kw{2Hd@6yw6sPFnp8D^!j&tNs%$94oJ~ z;o=bP2Jzgw2aklzzt_Hp>P=$b9{N2v(kpyHHFJQB?!mFj-KOCOPUI?l!P?nx%f|E; zXSr_;ENDuCr_FW1IdJv7CSg&F#`sWIX%@O}mY{^D0m`B>7 zKD*sz9I%Ho-;gQf1N(0Xrl6hu!;(Q9tg?0DAzKv!I8) zjkVqNZw{Y-yS2smEar`fa`x)w+6$yhwI0R6%5V=#)Ei`-62cH>ppEbU%I~w_4Obrs z6%gdgkp;hm=~?-dbU|@pd$CPA_EB-6p{GSA|p*$`B8E-}$g!Oh+YD^C9fC*9z-C3@pbp{4WsdU+e~^7xeO)y zE;^k$2_O-_OXKmB_$sr6EZ9v5)ee2exrmY}d-9^<{@fIT`gXI~*8(ToiR3KbZir#KWh zm<*03K*&yYHfkLU2+G*|Z6y#ix1yydxZnpWM2>igC@Y%498u^Si=ZSx(MBa2>P%Dx zfO!cp{lLC;pEux8JmK}JY^_vD~@*LTsD;iv-- zQ5ElmolqW4eRdeR&#)JKFD;#Lc=ZfE5cqT@CjciZ0j55|9AQe1XNW2djzM_}Yw`qu z@lOGobUppG%5+g3aQw5EE=jF>Jj9tX+;ya#1Q6mAQfT-Usq?`dzdy7N=MbWp zhm?;KABpy!FJYpVZ1nuSz$(3npv#3sPve@{L}up^+Y5lM7C9ZG)Bq3qB*cXV0c zBO06^+x2-}kTN6B54u7-Tn`Bj-D&?1TtdWah|~kbDFA4fR#`w@F^svcBd!mLF#Q|i za@(kZaJCLBkRpQjHio&|AskSzV*{fsvQ%On65+OHuwABub+Rv(N(Q(b6VClMtCq;E zHnLVQE;$VaGe|Sc#xp~RV*LZN3OdeTusQZ^l44_%^jYmG;ETkS;G#V4W1A z(gw6F`*cLx2CPu3dr@=W-AN`EqzZs|1waCV3 zRpBm@oAP@)IZC9r>)n8P5yRnE5dPP41z>Q>zu))-<4J$^Ri;N4h6KP75%`ZRh2Kq> za$_xcL9WX7vXI6?pL0K(k5%hDAZ~GMLgBB6o?`eCNkGm(5y1EcaAh^`OyDM$nz}GY ztVd^UO+<*5A_&cMGSC4gJ0oM(Zut6%gCSa7G(ejnJ=-F^gMb zmuMwdpd&2rhpn#fGjamZa*q}J}mK`*!U^Wz5n9W z^eGEt^kt?!y{($pt1`fBJ$MeUJe6Bt07}{4;0?@GcxzGLNk2?@bq<%aK-!0$V5LW; zJHTDb#Q8=^wJRnC((3&>L`f4jznk@9Q+EwE2S}01K zvzBQ;diW66*rppzy#lN!!D#y%XY8?JJuxOmaA0B4V6eh)Wl~MMYp+d0R5zxyLSEuC zfUVmV%b@V*I%U8O7XDCs*FsVxF+m##XX4~mI^3(qm>_`f7pTXz;j%|1CfYw}aYlKd z^Ob!a%qzY2kjv@TMHoSFWhQ;Zf$xrkjhHN}*w;h@&fF2vG@tQ*?A`2%uqj0BrH#xp z0*zo5vyLMXAsYv*rJ^tT-jfD%NIhEJ@4Y#UT{V)t+wuwS{n4#S-#`2#$=^8Q3>(eq zgFlKFbRz!@Zipi_@PnTIZJ<5w53*x9f)=yE;Y>`*&nRvB3cV|9rQp5;b5%cA_NuUm z!|80I_Cs*er*6aft~60WODOVmgfmyCyXL+EWs4A?v7v`W%{YLg3|=@XY2*ENSV^9$ zsddCk7_Cko9mzz9M53e<-aM*#10q301X*33^7aa7;CK~5A8tsxATdp3 z_?_a|5u(k@(%(bb%X93z1{=f5kf?NB+Bf3a(ussErIa#X%Fxn%%yH1-*MT@b9WBW> z6h#ZHhq)XQfQC~E)gktSNRI_)%cV~`w=Z$EH+e|hqtCsFi`XI{OHD{!5*MEb@Y_YHuH6uZ?+IhG7=;mSFXc z%K4375P(M#dtE#`3jN}3neIv2)HwHZIhHXe$Q_qdjNB|r9QAF|YSJ9Irni+aW}P5h zdGr(Nbv+yA(emIJOASf_UdBs`ATZ9T8nv@you8)Jh8Ke4?qdLbHiVji$bEVZ#SN|M zk`gQ&6sjDs6E-5lMI5iL4yTfe!Lt;}hnBs5i12Irl)RWirc=h`>>-AvxiDac7FtRQ z$4l&C&?4v4-}Zk*88DOt`$4LJX_)|>vPvH7(6JqdP|KkqP)yk?2d0yud3Ti^+`&FJ zL2C(oP0!fzXau^U;}t}{z0a#l?AZn(uZ7D6fnoz<59=H7_(bIi&-S^o7fCQEOd&0& z0NWNllmeC35x$}A)O|b*3%RGOW8)&b9j zFk9~gsqe=RS^|k`DR|Y8$wxB@DiyjBMIfo#L|ySXKh)Qo-ofYq=l*+68v#z>VuOlR zp|OLFjk33bR^VVsk08RvjFe0y;yKU&?Kl~L6Q!CTa(v*0g8f%nc(fPogXrKP{ol;( z?||O9=dNphBih>Q(A&h9s592%2n3A-EHEGXM_i~-51PWk0;45Z2&i;2 z#5zZCcw4Wp#T-F86Rr0aB<=+Hib_sW0u_@xfwb}oIX~6#cOt{&t=5USiO4t!QW%&C zq!r{%+L^2Q#i;fYHrWCl8eE0VRyEm_e2T?*P`3sxxeJf@Ppr4rMgN-Tt1vxs_c6~g zl_)9c84D21F^6K;6Lf)!Y6!U)Z-E&88Nn6nOrO9$e_!eckGgT8}~<8#xYpgQENMopTAH$=(7p zr3%7-E?`9)?CnRGO8x+Yg2v_7MS;}eFhbby_!g(paKU!piQyl$ADPM~37qgSE8`to;zLWAbdRsC(({?z>DuO1rYy{;%Djg zc>L2vfAZ7qu%=!8L5S1N6OaM0P*}c`Tlw+ezIa#y0osSc$3EHpCH+f~uYaca_huNv z8rso?d>y=5u@>dge#>pEl(l()3q!a;7U7}pXNY$4)nLH8FM?y7dPrs|Dbk(xM;+F+ z7T3~~w^QVIArTi3=wO0>34g)Gj{9W#mzM`UBptlf{nJ5jdHEx`=>(&s(kCQNmgC%A z(Jxot9@v)kE*YZfa}AKhEl{zU_s{q}W|y{u+VUHhbmPyqnqbTAknH;Xb6WyIj;@)B zW%Nl2Qdl+OrjV@%3g|ZMOe>oPj%Dt4_zi4CM-voR3Bw0DnNjDZYIZVxJ)DJrM&W8I zob>%Z)Br3J1tTjWqO>Y|b8Vzl*J%e=8f7Z|sx?jnxxuj_If1 z;XOFadFZEq-U>mPq$}~8(_KSv?9<@qr94s<02GxjVC>QKU2b0D8_yZfJ9Fo@Wc}5@ z;`PfHeV&ZGwHf<|2*JCV6ukK~O7D{=%W@J$PoXr55TQOfj>Oxi>TaZlSyk@s<)#e= zQ3AiAD#)yLtcROm7;u-b^z(Xf)F*8)RAbi>$o&^#NYcaw@LfaTui8f=-(KSL#Gq!Yb1Q>hn35rd-2Rtjj~JqxbfK=MFPJ6yf7yG}#x|}aUHH3x z1x(WcXbGgYWHO8`iKZk=6WQV`N_KKdi5Db55-|zz0;HDMp5OjHPc3KbZUEHccoxmX z61q>HrA}?9s!r7^%(dw;Q%~loiGW^&1U?3*|6tdHbbxK4LW#flbB=Q&bA8Ayg5m?! zM4+JKk9slCaUoZJNbc!jOPjChseYO?iHcJ4FlSSl|AHrcSWL5L6w)$tpk-9#G2J=7 z3(|I~Ycx0*M6pyH1Xg2=T&?_hXLon)rSOuqyHdqN^5TRKfSk^Kb?)fF9-uqClxrC; zq-R{su)L}1=fNu1)Q=KX=4q(<1Ik&OTVu7}uR$6RpMhZ!vShL>%!AQuQJdbwu3Z?c zZ6m3B&oyp`w)153$1rR+%=5ji+r+X|IQ{$zdO6f`b^7kST7P*J`Z*m;S0#aX-1%a) z&AAI`lAr2LJSMIUdt3H08f#o~VMTjyrEC z{KlXuY||l7fn~-~2orTNiYQ!!oj7NkX{RZV1`U>pTqYzuIe&q5MZFYmWCISct#Ca8 zt6D02X!ss?4^ZNoDK1N+j-vt?waco=z(cn+HXT2thC*&%!bKwrGY0Xlsu+!SnN64&k6{RqeA7 zVqzW7KL=sW_~vp(Y3v&I=)aUjItg43eycC0>%WB&I*dnT#~rITYWfZ#@^o%NcgU>M z5#LoT|7$JNzJe=M)>|jzqgM9@=vCd(Uw`ohZ2EHTZ>!1YmssKGts!k@ zYVNe}wO0#cb=KhH+M;0s=-x34Z&YMwvM}x{@(&yWDDq(!MP}m_7_76fQO5;GuG8q# ztl?^@rCQh$My>KBmd-n*O7rvW>%XqRdT}^i^5FSr-_MIui0pS^vs*VnD?>zUFe zZiiy#EYUJsJY=SjpI^1Ulnfkej~;B?ZzVE9L=U$x7bmP|^JQ!0ZtF`CD)`Iy5)~0~ zc^Xw8ZQFFY`OZ1eeBW-Q`^F3%wr_^h-kcKE|1BGsOOWhUJlA~^LsAM2Sku9FpsT~m zjep>H_Y3|46vpu23|8*m`(Zf!v1@mJBK1faORfyBSQ5tZ@fhXGB z6(=v3;B(FjIN}GE0sdf*xJ$7p5CLd0*>|+&;`qFBB(g3CkWUBgU4w zB`8vG^03q^(^oW=AbdIN6?YjPS5r6DT7QzRhSM!etZjZXg$Jxdae5$Pg^9kKV>ilJ z1pRIJe{;E^BXPM|(j&5qdkF8w8GmIR1!XN25{=LJ#xfy+pMFldQoauq4J{kS57qO@k+*B`Lw2T`jh7aJhyfgX}KZ{Cm<8mkj$ zNwuLkQoIT2%bI+glV>?zYMB*4r4J&4x}gcS^mq@DuhqZ_pU1e1yY#r2MSaEwsed1g z0%AD-){)20(d05fB;{Np&a5}N=klzGCXxmv#+jc>clJeotco`T+#VhFC|&ssP{@!` zj)n+cj#|vlPUE%!?7Y%R!qCfC&Hg@T<)(UPBh8qSFJIM7(UBLPhkPr2+u#v+uyESc z1NhYF8KAn5*&kp`I7tf1jk94ob&61@3B3TOa0sJ|)(H&6M>zLmM<@>T2SGaz1nCVwCJ*Yw13ldb}L=JMtC%!RDq(WAUU4Q8CvYJcYcc7??or0vl=Qn0rj~xdm$QSasIm>zb#Wy<46)OeDInAY2|pwt zY9G1#{&c&|R-c9VWXwdL@AU@DYnH5NtTx*BC#=f9vjYM5IWN@8JB4sjo z#27m_U1N*qUi&8$ZePExx6#ro`Lf%|Eo4riG~k4dU@7$%d^e=+O~ zKNuWt30xY0|6Dwx?|F#Pj|p1tRB0@xjYEWlLYhAT_h2dxtNTcs!T#@}9NQif6Mc=0 zL{RXrz^Bf$C|=Q6f{`xGA@XfVjL_aE^ZsCfVx-wAObAnHA02mzEK^>yG*r>~er#k(dL_E(Pk|DzsA57>D|4)G zc6j1yzeJhi8z!JW8@iX=>pN-7uqf4KmD2PTOMI~RBu;;)t#yYp{9}NGGaAg~Lom<> zF0k;ExFIqp&gZW>AIHQf=Uuh)A!jdl$WF?MRX%8{fL06-hLsQyznK^f?zG>Jn zCo=Y98OZD~fNM~Smt`6tAfVvoN6r8RsRbwx7VR-3JOs!xj~ zEOB{yfSbAMqu~wAs0-L5^Sx z{?6=B#&DBdP{0tDca{3*lD0}X0OH$*uc6r|mtJru=DY`Ozt`$~MZ3eDJjC^@HF>yV z`6P^s%|Lvo!CUJpu?(#kG%*)7L!$zKRC>*r6j-&g1I2Mp=3^&IgDM2TJ{jW7 zCWL5WKdSu&0ZO2WA`PjA(@UM7Kfn50_nCLteKw%9hVfv%_2ugLFhf z+9f2nnoB~+F9cercE~xY)MjN-tDzIbOAkjZlV>-D!erAZ;Y?yM(%Gb3DJ|wwYv?@% z#RFK3EX`Z}1PP&D>x5ZwC#~4UT!M9_V?Jf1$SeCAa4AX#%pzc<3t^QDh>Qj=Oej6U z1vf^AOnMch=zP(Kk?G_Fr!W}e5mKLE3AmeZvfc?xYoKzqCr|8in;H8qVfNU>H$C7N z*e;^kk%wS^K*B>{Jg+%>WNkMM#8j#DXiR z=-0bAIbY9o35oBWr4%Oc69L|G0Zlb5&L+tBD>f~0u-#?WW1Ug>O$ih^jEf*16eDM` zf1=ZjW$1xIxRkg|Jw>K|D6&25c2^}k4Uof;)_c*M1k551p(sgdvrGi*JcM{xH!;ni zyh)iyFg#J!pg_bygm<>r6F`J*!Q?wgnYdz0(DD9q#bT?gT|JYH%e%78L|2e@I5Yjd zd)n={9<2}8=?|%Pk4Y!7+fGVxm;9(&>!YqcOXSuQKS+?=RII9|=g(i{zS{RSHUdL} zW~V0?KwxoOmVSb{q{W!RL%@i#rL^Dq5-82(9Sz<#3oy?z&Oz6$l0@83m|-zz*dG`& zK=T74m4_o5z>+30Ovja2ouZr3A`pU49Ao$qy!^(LBr$(-d6|>c*9H@*@_;?HU7&R$ z5cBw}y7iP_0|*j?Fk?WyRM>6(SD5K!Qn*lwvNh@PP^{P1_ z*B^Dr1$8p%HmM?Gjw34E63U?M>Z63pi>YLjfyCUQF(*%Kz*8($-4J1J&>j;3=gLl0 zXf$V5rp1&q`jje7kZ@Rb6j>siYIdT8AoMMfMhf2y3dr*S;jPpgYQ&-ar@EFL2Cuo1 zT(c7BC(-mxRC0NkaFaZvw3x)6;O5XHKNkOGt~e!q=88IN$gS^AzwF4x_vx3ap9kru zHbG?$Qf>|i70#m9C?`Gi9{UxAxi+OJ=fB8WDkFa-Bi{K->&waDl8FnGhmN7q(^(FCu(Bi1$fvAIw4jge%y1 zs927Tf=|7umg;9{*aD6Rr;-C!57lBcpQ2QC`i%0z!+1GN_!=0@dWt%Fc&bjg%-xlJ zrLLOnQM8@&amsFaQqhI@8pAj>3^xCi_e8&!YpeJcnjgF$xZS$J^XFTHWNUngGadLTkc}S_7vjBK995=+{(UjhC$d&K zMO#6}5QDqUJ;Jl#Hh_X6pWhT+2|EZM0CJ*Qr(zS-CF`r`9zd8+bPqty0!X&FA1U8r zvM1vvDCdHgqAa?5Q|WBsL?59oBx7?ht-Ekf>^qQM+zw zJ4WQUnNyvS*&)Xg?u8E~!-Gx$r8XnCkN0Z>A!3SpOv#(4>NDMT!hz5>E3}(V(AF6_ z6B_6Kq|ddKu+|ZloC~%Nev@tWr;j@iOG+cKMH_h9V9NPCIS?Cig-XU(X=R=Lm2M$)zt# zm-=yK9XyF8Yv9ku`SWG%-1%b0yj|j97nW6<|6ZfMYz;wsg+3b(Y?wx;R?9Sg5)?{E z_q*}7facAxo?~w-)SDR*nR6x8+gIDT!VN|dC%2kR1pKAP8&kK}3<(?Mw9YK3dJx%P z+PL-h{OTEOw<85Ip7cyMNT8a88X4e(d~#TrTBIIFF3tHL4^BW z8bfHIjv=aNT)is0eQ?}k;U+lZpu@x_ssnv?K=;O8?*xiH&JEsFPAoBYE55j9fgDo$ zq`lWhv=%o`wXX0v=lBJ~x80Z4{^I)0zkxj=vr{^X0Akq}wu8CNA4njiv~#V6j)-BOl31hK zb?HGls%=}>OW-ON8p2tvwC(_y1{a%{t|kL=v~{ABaDOq`4~sy6ov$tkIFNH(wM?c4 z7xHrzcoEK~$vD-02VN*ZjO;P*#XU~C)YRQ%TbUg*vi?y!ayUf+B&3db2R$<3%2D|X z_-S*>ztJlhdQRl^PKReWg{K`wz}AvZqi;hG8;NR|bP5NVbSrZQ(@M8mV+pt95bH{! zPmt&OYTNBlevfMNEQbj`2iq`Y;KHrS<8S00!SEl?6_SKM&G3P!&Qr(nJ}_o8NH4Ix zAiAQMO7fZ3Gu+BHgVLO3E4rIqjX6{ybs-Rp%z_#qmtn)$A2y-?qK+X^0_wzBJkJB^ zV6hXf25o=}{e8XSp%e(P$4hFUtr^iXV(P2(BsBaFI5V2~9+;<^3`u(VwNrl9;93?X z+U}caGfJQ)ZWox8869|_u9j}?w7*pgG^2{9gTd*P2_%_x8|Lb?A}Y#z!KRHw%fr6B z_QPPSI8|I@Ag(AP@hneak+7EPEWAP|4qdQ@=i$S6;3w(dbNH~$y9@~PsRs&`?K0ra zKr8?+Ju}q=EE36b?ocmxDAbKjRPt=T=}j0^m=rhdBh2Dt-0P5ne}*%$ z+HG@3P_>iyaMfYPTMPQz$RlJW8p0<&&C-3<5!=>^*E?zO^MSw`U0MlJM6hvabEnDR z4o3LqKKqc1L!g7-!^NSBApr;Cc;ccx=6|D0a2qEjsoLlg(YB*qrepvmvRYUy{4w)9 zuG;bs(XWX;Ax_5YjwL=g!nMX&V6h{#>Q#{88;ZNy{rJ*T{ zJS^?BSX)xCJ>f;B5#;ZMy_Frxb`tcmmtV(V)I3a+eY4eXRTAg;=p$9ciDhk~N_MHb zIMB&{?-g=YZJq^}e z38%vJVguD$Olz0d-B5rg*x8eALk~E43sU8gT|e(wahf@`Y2Kp>jaJ*iRksu~vAP5}-00q}rZeBvrDI8)SyEy>958?00pRA!ouTEQCeVNOgc?I?*SIo)jdA%Dx7 z;yw$Y5?DL~KLfo)8d0gH*J!O(qR3~6VXx&`J*jLS_eMtpc%G0^BT2(YkOb#;P77BY zK3B+trD97;4Tv2W{4zN_xOMB+zw_U}E-3(UZ+I)$+1A$w(}UhwF))itnq=@P*wR@l z(pA|!FjHZnUx5s>mmjx)i-uQeoSw+k1|ShM5^gn%Da0_4qL=q9%YxF-JFj-9IP2|B zukQA*u6Iz&V|j(L7IVRWqy1S@%FV3daWRtcBQ9d64W5_9+w-X?hxj`~I9&)|&%n7D zmIpMeGl+Pgok(#1f$;*|FI%J>yW!o;&^*$MZwu~-_UbB&9RsKdrLpbReeq!Tt1GfQ z+DpDcKHr&}_FVQGXfP+@$g(Hv6U`dq(z&2=~!gAvF039Txn z&Evf+DqDjIWEL-$@{bzc{n=uMlRoSo@IU~zdEprJm^?$&VKPps;1_o)jgX~h?wfLM z>I`}yW*iF!O>#9T&7&=2ZUu2Ho~8P!HqGN(!sj(Zd3#|e_MY=~DEVnSPLC*O!p2tJ zy>oW^3DZj?Cm)AM_YQ9R9{jY86zaWGzOQ~PNddNQZ=MXHK5m~44(huZk4CubsjZ}= zf~K$^dY?F)9P)J}D=;bUj_Z6irD_UITTEYZtDvO9(^GF-DuX=?e+r19F9$Hn7y~ra zX5$1wcseIP`{04iBD^wc55L7^@&N}5C+{2>vdB57kwOv$@MH4L%DN3V=Nwdeq_A=M zJQaOs%;1}F-LCR&L{ZE%wwuw}bEt_m2hpq}Z8M{j_dgYGOKf)K*b{=BRolFh+%fW* zF$WS@x@Mfv9gf(xBd?IdsrgC{-kseB2cD!oc;|v6FYvO1qfja-bYe3=A*bugzF?wF z-ylf}>@!k(f=F2b1@sGf`4}1bBE4o4_3zolYlpP6uux^pZU;^enc#fs2#@<u0Lp?taH%_{-VtmEHZ% zhg8uy$3(f=GI0QoCM7zKGdVp);H&TtEc*siw zO$kB7Syk*o@wqf<^hL?r?bjo^yYLr(7T?d*+~y=CN%S;yK0`$#9Ymc>yf?X)hQx$m zFWECajK4BS*No&X?BltEaWiWMO7^>EkmMsDKyYvGr@^~D z9LC6A+tb&huIzm`3G5}0E`_}?Y8%$>DzIaYEfPbnA|cjnOq|CB!wLSCAfkK{W3U4XS^Sxf7*X5H1L$)g z^0n4=Kofnc_)Z~+@hI4YG5ClT=VW$TAhveLp#vL=x^}sMUqnmW8WWL*N*N zlU(dMWHB$qB{E7<`4Kj_<^v$@I+E^AG%NLwH~w_}`i)!ZcT}jed?&Hw8CFdLka4{^ zo5g-ogtO#}b=!2U#ogM|`_1C`#wtk^U57%XPj5g7 z!aVbuNa^i}Z-W!$#>RZTb(~&kZ`&E~&B+O$9r2@8$-{%j>L}!6C1W@2QYaIxqo8*Q zhC7b#nx)Xg?68@_4>H$da(eSqQJ|BitE@5Vs7gtm-#QSEqL3qnuEV##<|Nf@FZyq| z>$A6&^j5pCf=*#iFYS^=lFI?NUHCnJl+M4OUoo|3OShumqNg1>=5}6n;HLF7nap0T zWRhYKl%QQUe?B~gX~v0Tj(Z#2%+SLzuULqx*au&%+Z5$OMx8!@QJifv2YK(!Vlq=6I+b{33zeMpMX5`` zefec)cl+uJoNw|sek-Hnr`g^SFm?d*4U@DR*)tYd!We9zk=9PFZy;i`A^L>SsB z8`ffMQYCx;VtCSj9L#2&E46@&HgspF2(j?l(ZWc#lmDM%PXhcI4Cb5E9L%+sh~!7Q zWM%%Sf>0{wlY0?CFV?Ts7%;(6JhJY{pt1B+O4zqETGyOjWTmtDNCkD{to|D#C^w~@ zBdBj9fO%1xpQ&E~GUT&pSYBTrPM?fX!h~?sC}8qU(*}gO zDu06kl@WdOLm?K3g}AaroterNB>HGP>Y_fzfSIX~!msr+A@l1J=-lESo?e`vU7U+k zOEicW`@orAL3Nb#i^<4Ltk7gMNJQlVi8dSnizSFPNQ(aG2=JV>+FqokcRoZ8jKdxd z!~JzVLo*l6M;&Ve1z~6+#^E6j);v~aPpG5ePc&_pNSfP&iB>$i9ny9{V_C!knt=tj zhf`LU+Ss3tPcF{Iyj{VG_8|=f>Z}83&nMCXpxfQ0B}fd-QJ>^yIw_UY4OSaJO7RrS z$aE-2HrYDufQIu#GvH5K(6+il+=LRWP$ncQ_CSoIjNUKrI z+SyfX9cl6ngaqm_@REzGJkb3{tFP}Ze&)_(d18W zAM6Jc#s!t$blM7+?j(6QiW?yRaeOHGSq@R&030ykn982g2O&udhKZaNSm2Ri`Sam8 z|9xN=(9>@XJM)Isl-ubi!O#cJ77x(Le1!j?$MEM6%-{r{#_pwkt zB7`j#M$LSc$LKHZ14fB0T&ZCkiK;M_50uY1H&!odrBUGgVgE5svg@mduSHNbUwok8%*%sKp6z1^hJ2!f zDklqjSJI;|=xB^0l7f8+Usy=Mk;x$5$; zBz*DM5f82=AnWmK8wxJWALdl)efIuCW z!1*Xz?xOj8#DYNmu0iF4GFPZZX_Qq^q{>DMA*SnKH6JHruLV6a;wQV&KQ*5=kg|VL z^FVU(Aa6{ zwltc2Sdtwg{^e@YVM^J->@tVAXW@9fi{lUfr_q{0t1nJcTY5CzHJgF|jg)-|HE3x2 z1SvHKliiKUr1wt$J-gu#h(N>@UgYLn_!Fy6X0r?D|Jmc{T$)z;;5E*FK+v-uGQDB? z#qXl)nbERflaf=6WDt&;5%QtVo-8+c&Kg#B4Am|!CcXWWL2MD`4izTKCq0rTzb)+U zdsI)z;#kcUnmyxrBl+~erk*^)SF~pMmM3qR;6D4BRwANB(q@tzgOkT?c;6`MhC(dkNBkE&L4VkE%qC!@&hhlW_os&gEijhwCpjZGJ>CgJ?rb~ zB*2eMACK+Br#NOwXRufy9og~4zC^pVH%-&rje9P1`mGdUS5oDz5PWmeoBs{cOJ?76 z!+p=W!-f1>SqF1Ji>;5379FjUQ;#b|Y6mI&-2@TOkj1us%VG8xe$gRL@o+qy4)uCX zBjg`SoAAw*7Nd7&4+NufXiuTEs3Djh|mgP$~szm5O@6)a-PKdZ;+EJOZtuU%+BUw)w$zrqQr4Zvx1P51bKiAiT za?>=MFi$#Q6FJCRzThichuWuSsRNEn?@)KT-2v!2B z21%zUpG4ZFkICl}KBG{v2YjapKw8yTU=#O+0Ns-aXLBIP#3|KWhxYq%%=?HaUZ(Pg ziKBml1Ks8}{I0crAkYrrWplvvqGn^53f35(sgLtBYi|69K@z%#z<)@`iSFuXp7pOI zt4SlFu8AXnR0G)El>dM*E`B-(^ts?op z_NLXxGDeW}rl(Y4dI*1`mXR9txV@)SJZ{04*z0pLZpIR88%r5~MO*D1`YwH|Qz*t8 z7i5XF*L}4nAGA7Op)2~CXFWNOCI;Tfw zm{AmDP7^MhVGb+=c>)_q2iGoe!D~9`60-Ooo1nSbHn}T<{&V@tX-5xj13Ux_&^Snr z1@_!aB>1l5d+sOx;?537uh}^h8?{)DAup-$E9-OPuy}!^2X;6T6d1^Ybdi{EKi;fI zc7>@vX=Y=7}q zI_w>RBV;csg9a=Rz}NOu-icc6zP#HXyk3?{yMkBQ5LoQIQHvfsuh3ohmmTkTrJ?6+ z@}t>8h3!*p=%UAZ}rExki)nMi8pK6PD#7wDe^-^P-N_A zCYlK^k;{f)V`eOg=mQ6E-yS-~klflYLH^B?_?UzaPdw}m@IS-x{szZj#E9Vk#|Uzo z2=xoiZb6edk8v!73sl&BdK^wrw&C5VQh**H(13!5;ABgjr+GF^L zCNyHn%$=Lf-%*uSu2S^+aZ6GqqkD(SMvyj>!InnXxuR}chQCtgMuz{v0(v&HZm;6@ z2tWy==;&Yo*;wOiK~4ISJ4)P;-oAo1Q3l}Pg5|6&0ox~Lf948jp%}{wgzLjc6!%b& zazxL?i)l0MuSz7du|P)pFX{yc;0|P&!bp|cbu0-jlNp8dd*laTBkw9q;otR77h>cx z4B#_k-`|KEB=S(vRB(AlpCccfy#F8`sa=qJ>AzBy==ZD+)y=yk`&m>C5uNjERdux6 zd1^woJwe9b>Vso(qR;0)!nR$vi3_zUYB2X0=jQHxC$>!dJ#c|-L=mnW$EGC z ztYBj4w7(y>^pKn#2I9_vARrYX{#0He6D5x!P|v8C%B4QoCPb))sAyt!s|V>Sh}t@w zj87564GJd%f#MXscOkGZA@8au8B9?OdRF#Zd1S7j!j>4Az8*ay{o6dgX9;*(RFuPN zD>qD-?xC;XuS51lp=4{UPuQjJAFYmPmR_fq<;jj@y=fM-ygz?d^jI6J0D!r`u%8zXt6AV97$CY{%@7xFx>#~YXND0{rFaln`v@lK7idQQ`h4N9-eW#$w= zyySE~G#J8&X?Npf*h4xd!DZ?L{G&daA1A|ey46eXyTo$!r)tQJM3)AK`={}3>XF9? zr6FDzo;aR>4>j*$b>p#)(5-I(gx$o6c!VoIxNs$_(OiZuFq5<%87mPTC^Y)!ozPJd z8XjFFMrczph}sXget2xGx6yufyk8Nb?76doSTm?m{$e_#VJfTBT@oE@fq_VU){ImI zxS`@n0V1?f_d2K>ET+0x0|-xb$&#%Io8 zSNCDDL0gJ5yY_cLS0@Rvfk+hG4BQR@E0@K4AEhLVMC&Oh7Wbp+V@4*v9@uxC%YR=_ zQaV~WQKwIC#UdNAeSlmuEPW_{l;3RX6*Y-336PXuLiLyGHjDd0#}bx&nb4#n%0;7` zNcrEu_%APg^2ROmX@^#rI{vum2tmyTMaX@ei5YEBJivMEJCrdAV@M}60(q7x?|I3@ z5(tHXYHp(7vZ{0riWGBC&^vk)sUlzuAv``jL9}9I6is0~Hic#O0_{b<0&$y6cJ+&F z!2cayRsuTW41Kb~B?MVY)FYbOvTLF!;#ev-s-g$qKYm*CCHJK1o8k1n!m#GMuyu>Z z=>}TJkoGYxg}4tmah9YAW*BJHoFSr8QTirO5z#Syae0Cg&>O1jgk|ih;y2&oB!Ijs zThAWsJ^p_C`Noqcdz;_g$9A`&{Nft2tfqT#+K21T|JWx_x1U$O8Bfn=e}r*fY)M3Y zGK`i{Y96Kdf`iQZ1Y=+&&tGh(OJP*&#k6^h;tP&3>l2Kz@#6W@Cr>x-@7;g#-IhZP z*QLkQdAj|J)3bV*Rlnn43w-$O>C@+XTN|5y-S{@_mW<2qCn$1+M1-P3`4%MO`#y8i zHlIDZnPyge=CVtv}vlq?!-NjkxA4qFn4=pbJ+2*6iKRgJZ0#$mGgJVQ9)_=lL z%Wq`SwI5|zS+`ycx7bSSKIXXdzs4f{W5qt-VE1=)<`oJSFLd@PY| zhz4OATG%SjQ9TWjjU7Hgs?g)!%|HGL#yzl|qv*E(d3P#yKfIvRc@JEl7dR~)we*Ty znP5$J7-fht1aPO_!WSwLuee>31Bq4g&&UX#Km7BxR`ubHKh-_Gd0U^-?Q$j9Jhksz zH|xH*jU1iT-f!2A`9~X5v)sMM=48T1?g^Lo8w+)6v+hDkafg|VU$^`R4Ih$icP(gg zD5;7~C&KPXaCp?65VbTKAm@Q2N-z(k(Zo6p56!H-Mte9F3{vwB1_c@|%h*9z;mCaI zbATRDr*`OsLd4X6sj(w zv|msw2NNu|{J3dnYS*!$(6gklsX=*b!SRVB>@pTfx0jCjZIC1k0YFp=^Vh?{8~$@T z>Yd>-ANQ<(WYiTlEA10Ig>^h$bH4!NVQ3g_LNHf&3nu}+O>C^ zqv`Ao5;({%(@tprq?PdW0y+@VCXA8KY<##5_C&x5Ga}fK3L*gQ!_mNz#%4l%bs)=z zBezS!E-h-!4^b}qK98B^FST*c`LNGLJjt|Dn2{Pk8A00GOAW57w z{1-6R&10ms+H1Oj7zO!3#LAi5n1ZYDt0=t$5W~S^)8GZqwY8$fni=AzXsX_9a`kA~ z@Yf!ijL$a>sa9T!X~!*jpkJYC`wfTfaMV3JM&-5ES151-!2R&x+4ke7-|s!XpAx&Z z=l+6kBuK>~G6%uZ*l9mU_y$4(7~c{CTVQ$i(@d-P8cA}9KeWqOK9EOSp(%nsl1T&) z(_*}y9361UxV*B?f~}Vqcp?jDlAT9`6Np~Q?hp(shuP$(^Uw+hO}X}*bO{N+uACLM ze_=5uF>1K=6v;ORoN#A3y^9$h%K-8V9og*~7mLK;<(>Gd*L+3$1PjC9u#;9+OyaDdW+#eH9;NCz| zK1BBDfJx4D!6dM(00ar|5hfcs1$}w@1j+l#-LQATcGBRLN)4-jb+HxN-zYop&pU zTLIB@Mk`}+%v`%7HhSG50EK3f*N_Z;?9BX5PJ~fYDuaR#9Z;bI`2=)mYQM?EzhU^IaeklGYHq9gcl@c zt*E}0`W%p(dCzzY&f1rEsgqadM5w3Poo~$7S(qL`e!&cl}>m6`DdoomdCi)Q0^)VB@K=yI5 zSPXIbay-#c&tQ%&C`P$l`V4C_qCjMuNUkQG`FP1tYz$kKtWMM-;8l$-@|-vjv~72} z=rm>1cG}q%s*lrDP0K}{E1tDq`3!0%K|BHL{O8~)i8muzQx*ba)g-bRvI&Q=37Cwb zfl(?i&Z*RndyEnSiepLaQWvY}3f!F{lW6Bd=f~;)1 z8exFhR;N!e8370RFd6*63#g47LQv0T+aez%;;M^u`5#DeMO>^$wOkd99YBkQ8DV|B zf!Iy&bD_ezUl>kS*k#(mi^%|yOLxrpt?XJJ*fGC-I>0XX^qZxbfQ}cDblS;ID=-M@()(5KZX8SUW?$u{YyMpRwCa!pCHFGlsYs zhq#dIFo=B2mwBzV5ACEs?2mTaPC`Hc#BX$9SUr8Wf@PhY?8DsILZAnSDp5QrXYqKP z?t`P*?d!L$wQgU(kyTtNLGqPeyZHz^LdY`C6Gf25E$AT3B8UW!7mU(wA!`>lc>f*X z$~fyKKS4PQ>2{A!#`{QW))lIV8_^X>xEfguL}UwhaTH~`D9Ljt`8gc`?a%Kl)j`b< zKFg5Jk!=Jv0;ZvVN;XeSi5ynku$sN}pV{Mr2}*c@U-N;`Lm3S0 zH0H&W0I70-r5-}DMTGWh4>!kg?YTE%S>LENsIt&SYSjRx?!n3UqTjuF>(AG3{@d+a zH&&0&PfvL0ja)dHKqy!HaC`!FnbEi6KW8R6U^~>-kyfwe+{i}ebOSYCjqSi`->KEs z<8x3MlE}jrA&RP`lwA5^x+Eun!wV#K9gysZC4S(f0mB9(9IOT?rN?G+IOwb-$Ajki zwI2X!Fb0n!AbsFtueG%4v<97QsnwyP42^8?w#S4HgfmaWu=nC*0p%SiEo)#bGgDFW zhB;5e$%;oUl`$<5GOZ3Fo>6qx1J>K;f}I{DCX+d?6u)7H1}>-wj9aH?tVdv#8*;el z;0nC4P=3%k9`=#(eFXuj!t;rROmY>vY(~Wx&5bBE|DpvVYaPJ>G6HAW*P9Yx(H{3b zgBkw*SwaBIws4Ni0o%Tr4R399S&%Cu`)>>Nh|9B;!LU8RYj6U`NP{UPqvE!9H(SNy z4pdb|=PtsL9*-ht$yvJ(+%ye@Lh2mQa2A)+0GLhXU3NOp4(GU38nsG_{(4s1)@!Wj zNHr&8sM8BkZx3-6dj|^DtFDOxQ4w~ftTPan`f&pKS_rtwJ1decTD*pqDQsY1kd7b1 zgrp!yfSegvw7qmt9-vf4Y6I#rABI2gg+6v}vz_@s%rTU-&YG8Ox=DGg`H<1EYgMc@ z+|1bYaAD1bvyiqQgPte>^7AvP!kowspl=p z?Ja*oJWSpzzs#E`mq05$mFlrlo6JD4qJ4Mp_G~y2t=~T78m>CM+lEP_!E|pp!WB%h z=2amZd5fE7YfN?RS)fhG5K!hp9e*k(-PvTuO{Yey`y5ZYfU7gEPB{tDrb#MS+`5LbGcPZD6;*M=&%=fB91+4om!IetoLSiK*x6-CU@CWyAkc)r<2 z#LiwXWh9kN4B>_n75Lq7G8u~tL*whp@B_1xyI2c=sM{fbnJ@|^P@3_ zZ!d#wq{>S%tjtBTWkKps5EuBnNE{i$d&~t1`$h0?U&i+o`eAfJ@!|Ga|LrdS^JI81 z7)@Eu-2ONpr!2JzC?j`&l7v;4TK5dMbFE9oBtOS2yMk+z2{~cSWxNFlU6`WoPK3xq zi=XxDe9yEV8%IAYFb+$Og0_-_8lcCfNGHy(y>Cs=1_#5#A#1n5lm^4t1ilBRRf5%@MzlTx1jehahcLCl zf(hGLcd7+ir{lwO^s2_Y(;n@}gVqxG9n{~!IV$5U5zscwDlDBby^=j7N@`gQR9ml^ zIcYe#Z4|!Z{^9f?I-xz}ws9XB4B_L$4FjJ&O0Wqa*usjzj9vV<|{)iBSY8(|%ZcGWor83wOkH z&8gu3`PI(Glb3hD-Fnj9xpDK>OWbGQxqjp2%H3TQ)*e#L@OcWNXISAj=PPZSTT4vA zK#5+fKfoxUI^e|i*8RWvwzgt^lxw>G?bTFxx35y;ONU);cgK^i_#T$Tq77yNXP8e* zRJU4{rg3Gz)w+C&T*2rB*bNL>f-YtNU3g(+9Um3$)4`zS>K-vf6g`{ObgcxgAUoIw z5zOxBM$$9Yyq;+w5-o(4fnlKh6Ho(aF@@#6fq5X_2ChKx6}X+rrs&47vw(ce!_@Q` zNCkI>>MgiWEWE<(h!wU*2Oy@$3Yp#6p|hWrU+i!FOJ7OhUsPGUvAcV#ySsaHclS0CyD}U^Sw0vDg10mn^OU{; zkr!fHcypvenX8ask>83?+^5JrlcIe{y5AYB9<8=yjP3!h@$}c|J?-`pgFcw9thRoH zgGT}2-aa~c7}*cWe$5!)gUTWwh+81J-ChH(Ch z6oZ6AWG?+ndgTGp=Va|?Cl^O}qIdX5aK?>CtF7&X=wRM)XOYlee|)gkL-s1fZmo8L0+Lr8i0q0Mo^@0dd(C(PPX>NQ&95+3_56ju!X_J z2D{w(9t0n&Q>*H>gWv}nBSUC=YFz_e(|s%l(K9QSH-XC-avcTYcon14taYb_JS_f(uL8ouT<4rIEEARPfZR){S*hdx3gtx>0tX(`mmzI~J&>eE_HV8S z=TDDT0FM$y=VAntAz(xA-vA*D!|_D+MN}*w7%OYq0d5csBsD;Vu|!omki2(n`-~UsF?;6KBP+JM8p)HZr7<%G1fkZOi5Z$$-<5{ zOSP0hU86V~0~aN|8v+yPY6XAk!WLxv0&3mIt_1$ZYKIJDIOtKyykJ^Zh#kcGVKWdz z1fO)sd7~^xH*G2xh;a>5{~?a^nhmsO0Bmem+0FV!*)~{{x_z}*O}!#oJi(EuVcKWe z0=QNBT!k5SOMfP1kr4`a%#Ij9B;Tyc z2asf%15tDc$$g4)6cCmW{!AeydM&XGEV8G(c`yO!LBIzCq5Op=cKfmuyZzx4^T;?} z{gh~Lp4I&zoLLS!Win;EhI7qoFw8JU*dfH71(B~6N@C3mP(b^}>h;y@JoPCeRyH_Q z&SDq(l;2C>)tdZQdaaJk;Jvy;`Jd$+YdJRKEsm(GT5)06J#Xn}jDh=nj z0E2wso#m6k>j5p}W)i`_%&;X@&tU*ni^OLg0WF;Y8lVEp3(m0eb>dnUI18nXhP-gu zX}|3c_AicB!7B#6Q&@&6T5PP=>epJ})*!tu!GjWSn0TNX;4?T&0?esP9ro` z><^Y!ub@(HuXQqj34RFc`T!wuOwSL&!T=zdJHAHgUD1kp35Ov@lEI%1s1^?frn+(d zx-yCAeXw``0q(eO;@B0RYG&_q`pzRs2{;I_|c4aINQP^Ua|cLaI&7%M7EV=}v&2=^3zB6g-( zB!=6_IFVp|#Z@P;9}i$ebj6+$meQlaqO-TR`D6pv8TOzv>l<;ZXwyi8xK01$N$Zyu zlNLOCy!jmS3gE^l!VBKR`|xalvO`k@q@idtbZ8VYevD=G@DDZAhxh*2|JK*r?@kZL zqj$TT%+WD|Vv*Dvjz-ko$4>)gG=B%fqcbqH?_p<&-88)VjTbNqy+fNf}8f1ARx92xfw<7>EwTHxJHJe=tZsIYChe6WCyql>UfnnMCY;@D_B)^AueX4)qLfTpM{iwn8Dr2V_9D{|-Pt4v?=O zCi$v%8otzEwbRWH1AbEQ#>0pWqen#~Scq#i6z$NMGCG1WUs5G-)sf@XB1;8Pu_k37 z4s-W4O~E1v=RyCzHxaN{Yfi=xG=u-_uj0N~^xE`4E=CeyJ-ct6c3s=hV~Q5lIVQ+q zFT;nQl~`sCm=F%Sc-Z=CrylDfA}}+KGE_l~nCmNdch+|C=cT&?BESj4L=mapp4_lN zW7tw!y>sxqFJW?H`3yXy>WDU$H&c%i&KaGB(dTopH$EHiQfLJa3KZKqK1=sDfZdCjvnu+J zU{~WemO*qG*@(ag{5;&AoMMTswe8m0|ECf7g-lpqhZUiBHt29gq=R%gQ3J%iLE@?O z-0DsaXLm}L>N_uUhh=AaaU$MV#bKz>HY3L1tH^=Ujv8V@P^1qSH70#RhB!BFGGZNwPllyxQA3xis?wEK((Kkhd=o0{oU=e?? zL>{(8vqBql79vvRLJrPbpc5Yb(TI>AoPhW%l2kh*erK(DPA~9|B${kG`wXXA=N>pB z)=2#HE8y6SUE`|;Ry~iCA_KCcC{9{xm=gmvOj2Z!aJRk>|MqYH z20rVFRc7(;eAM7llHp}^Xi)I!aRRtUqql|nt8x)Om*b^E<-$yaz60%ECWes-U2Cz5 zzrzwVDe=h4YPl~ZUdQO@)*pqAsBnF@NZ0IpSG9!@SK z0RfE^CUoFfVs5k6V@Sxiu*RkotfFu&xM5Y!b}&AB2dB&EndEkb(^&#`ApQ}R z11gXsnJNoxS$$tfEB(CgY-4Z2Axv=4S-cE>-x-<6@6aCT*MM&IGjgut`foBNWBv8t z>4X*%sM=*B`oh$s>`V27k0DF9A3S*&M5)28K`hzU0n}0BQ__tGv_b;gc2in{3ED3( zwEK@?ntcBB+28lJA8c(r+rU40$7wPYQM`Sz&oAg(BBvyK7MWfr#%Iozy^z-gX&yDz zs9fr{)kyY$t=>&4=Jk8o+zPvbGe!b9&gz(jtBhzwFj-W$2@|p{T=75rXz?!0Vc@C7KT@piE)3F zIh^IjuJkaWlZyumpkt z>*GM-%dk5F+QrwclY_${POe@?Cfo=}W>2if2=m%r*R6?OSJ1i0 ztr+B$Q}5&+xtF*or3ZANjD>C04jCR9#7tzhS8(r9*OMWCRM0w8bLTVJk?GKF&jlHR~kH5)>5XLs? zgtf$XU@r)Z!)!Q%z}&9O@adGZ>1v%QOj2TWlgFCK^MMLk1*S)-l5>Oz#BQf)XIDa5b`y*eCuo&|ea_3|vXRa;ge|Z2R zJx-9NN%=*}1C-_&JC3IbKBiDb0NdUkG^xEk31ZuW8u#P@e$-&B;PJnJgoO>j!0;JY z66rD-Z6iw!gST{86J)R#QyURcxGs>scfHLWhS zX(R~hctio~5ikqv&Dne%k6U%9wXe_Pmpje(fmy>6JP%{sV3^YMmnIOu8JJSpu zN+2n4Y8Can0`5@s@jToQzD`no+|^=9#XiTuz~eISetsiTG1vAS_=6<|FgZ^$57;t<)p4J1hsy zFkDx&IHO#n>9lrm)s(UPKi|Ce>(%uZTwkrVHTg@moz}`-{{Js6|M~0C$~I$4#T=Ii^vVXEQ986YN-JGqAh zmZ@3jMI#Z2izWWx_+s=EN8v=EusG}GW6A~u%(%7<{9V2{lT~Y&&Dj`kGTAeXj8_;I z@m%WF*T>4vtyB2(yg6qoJVr-#@#BNG(+2_q=}vFa$&7tGnX$?)eoUlGj!X(^luHh4 zfJ6o*3X!jd0CEEfa8DtqRA@-6EVkvRd${tSjHNOdPfw1yuFma`$H>-RAR7q-m#jN? zKU-T{`9=Q5Uw0L=cIaqbd-==mDlTE!zxl?lLSMCKT6A5<6Uu6s9UULIH^m6mEs#!} zApz}gs_si8GnqJ)*As+WN&bMl>o)l{yZW+zcg^a*+l%EJ>k*@5W(JG0FKZu*#|!Lq zEg|D`fO5fX!cQ?vE@Y|;pZvDgy2A6dOpXY;fFHHd1jnrj*0YB|7W0D1r&pnt5p-&H zBj*(yO^}?;n!reOPy>x5JGHH;P12ekCOq&dY=?SpY8^CYb*;rMGLTHF*aMA)5dquTS$Yuz0xQ<>AES>}UgD4c>*Bnq#=im*kWdIBQK}d?;As>-k@XCZ; zd3r+NCb~dR!NhuS3=E4WT^Ru#Mg!TssRpC)hK0_HL-=GcwDz!!nQ$To1p9v0GKX`* zTuM85pafyvHjc>$>^esrpS(ttMp(T)sm8?w$i_b7)UngLvEHFzsxi|t0g`TNb%esV z`q3t5`|7wz56xLEp(_BxYWfqkPf(`GX^-l||d#pnd0t5o_f{1%F zA#X%t;cO5BR8>97Kx(9yPaui*j0VI_6x4u++84wyY`If}&;!U0pHAvPkCZK1yQeTv zR~W%q#Nk|NpZ-K-Z>{}@+nBF3na}OWq(YU#vc|W9@qM;1E;V))!-X6e^!$qeQG0pH z@KalS7T805NwWRMeXIrJL!>y?Aa+X&>QjsWJr}^rQL>6h4WKOIV5rij%b$U?!zA?1 z=Q1B#OOBTzRp^GQYT#huX+ph`WBMtLLBm;KRCOsu1GT3?N>Hl=zdhmK$lz?mlE{J2 z;Pb#c1Qfumh?`%3XkCB1sZl~fQkOKX&XWHKlpVTt=F~{gC5Xa|Fh}K0mqp@QEH_+@ zzJi*$E;yLM3no(85y`9;mR*Ot=GD9s)!}G!-S9B|PN zeFRY+8p`BKStE_oD!`C1o@W-RSNajEups>q5XFU{oqPO}C&WBnjn5HR2$rC?fs)^v zh7OIAXZWX9Wk?@Vm(>7!Hl9(3w7A^BilofWLn9^su6QdEPpsozYf*>RF`zrA6}lFv z_+ooxeNiO}%LuAr=$*Pbk_dqy%au$nMw{yYR1-h2lNpP7-w0@^si2_v;orEGcs}f% zY@V>tlbzei(<-S+F^}UR(hMTa)Hm-G7#-_L@k&zds4z%7B|%BDzfIA7sc(V-;lCKo zE~ltlD?heQr^h(7?!3D9^6I^vSL-jYuJ63Uq4ecd$)A7~h#C?l$c#c)@N*+Q%*6!P zDp^583~%UwMo9|e;pjE9AHhI^I(%q=JOjrPZY5W?ddSv{@ZQnI={_?*AL7PHYiWH+ z?0LAHwZvXtAQDjLi+fu4k|faUH*X>lJQRDR;rIs&YL)NhB?JPmZy|{d8HZQA0lb;j z9)Wftl|0ki=;eRTDT_DG_K_eD`)BwQDZPzJAZqy(#MJ7(CR@^oTl@pNVmvb64A`e& ziIpUSzi3^EmEGx8%_>LJ!s^wPb^hm`rEdFmc$)Q_*sB~@YE!Uk0=Zi+ueBz2%{LKSYdn}F8=sppXEHI0@#$^K$pmB_lsSWC{{6P zGJ!Uk0uTrx8%t&1OQDJygXt!d9+D9sVT*}@(3F@60u~aViCN?%Q&I)|c?Lgrpf{q> z&9}qzM;H6|$EQ6cfOs}I8oYH*uM1xxieitxl;j}Q6n+*77%t}XTpEo9VR~Y&^Iya; zLahz7H9_ho8hlSbMtW{=3ZzF_JD=JM20CE%FQt`K=eBzWT8`ySG!sgl8Zoj?L#5Y`!^ zAKHnwEwUhEldp$8Syr%FV&<5(?>QnR$V|h}B;h-|0RR*P{y8Cn&mHp!XHdILk&J8q z9a-M?^!VX;qSy^Q%1MGqb$Kcvle)Vi87(cEfWy)%^jWBhAt;@$EqK$IYS;sw<|C0V zNVDb!Q75}tvpgvO8jDb3LcALh!kL;dQg1YWGB9z!g4;njrp=YPMa_mi|`jSvSQ0k2WrPQ!vlQIO6BKBo()B@=_#XxuMAnja_& z4#mbuY$}vdQ$*_iu+dJNjFdJdW(@%kSZ`|QN{qD=;tfmWm+BDJMc*WMZ!_^My=s@C zI-5BlMIg-<1l}m|zOr zPNyRV4u-E1;`nBGzJGD>6A}%CJ;P^n=)>^z5_sWv061rArH1;GPl-FGFw;dP37BNl92t zKC*Dr*~?=dB?MUN5(A9^fy(Z~ql7q38*Z5&H5o~?;g1I{9$WusF|ywaCrc0&^3wP` zxYWHsCd?2goZPS{=f{!5B$+Ru$hMHBBUa$bN~OW#u5ums*OANbAyjaRZ>d%W$%|>o zY1TP1XlK5HrE~wZoZivB&~B(JV_{7g;#VB=ZO@DCM!yR9k zLPQ9Pc5%fShi@~5el3bo5_;0h}`f6Acz8eY^V?{M!VL^z_(8DCEp7C4C`^j zurkxw)~yK5D87Nci&`b@D3;5wqosAI{vcRnI@p7#H~e62YuJ_c9-#uGC`ndgXGLoc za-sm28XvAig-TKf$BCeNS4W7f)p8&sjsy!W)&uuVJMi;r9~+~7S^=6aJ-))>%e0<C2o;Blz^)=s;_tIHN|` zfZDc|D}_82!jNVk7R+k;x+~O;dXo^CUGzr^4E9s@&m*8-#L&kUVF~#L?q&G^>_p=x zd9ri&SIbn{)O=#WqmA+0YK!zrU91~cA%;k?cp1}_=ux6O(mY$^_ zSU#YT1ww#GC8A8BSHlnxU}dIrpJ6orjU z_Mjeo$PEv0bh}!F#U1Cf!7>AC97&<(r-%i?7A;B!qX3c;g%1%abo^{^_;j*ehs?k| z#Gkqg+C!ZL0>Fsh0-={Rkw_nN1Qs_U7-qTJe)Ti)et72Ho_&_v5~Psm^e%iVUWbQ9glMb8!h*8t^kkYK=T2E+!$oucmG)up zymzuLf+J4LY-h-Lip$ue~{xBxGQB@9ZCl^VGw7Al?b|?|tdNJaVVhUr1 zd>`pTG8;ylTJkC;a6m9gKd3Tj0aCJb2x|5QK9z`pgL`HdPaPH6+L`1dc|d+jmhXzW ztUyNrM6-qrP7#PEJlM$-Ag(YqqgZoS2PB|Ze)M4UIuv=Q68OV|XWNgTe!utle(S5& zAFre4H5oUgtmc%Q_6`So5^o_wMAczB;%(a1hI=?iA!mDkZ!mhjhua0v#h@vF`}q0Z z#`a&gkZDhK=EO@{bzy~3=?k@#lydJeyr_&4WB75XJBQn;l?-`}5fI|ZgqT8yuX*i3 zt6TF0vYAW9_Rza#nqBJl!;`PCFCl{j5+{S5ij@~^Lwt{Rb5D&Wzy);P$ycielfl99 zSi~({Hf5Wy^(9jCq3{UKVz^)a4EwT^^`rGR%qo)(gwQDkY1*?qtnZMov@@b#+S89u zpZ#_3`LhQPs{JLe>U)h1YA5<+MyWiS){)m?|N;p*-*#bQVp`-*X`rE39ax;sjAU8D1YU7Zz+Hyxx`xkI_jrM0A zO=Qs;9PRzT3%IVy@ztb|J9hi(2L)8+sI{UOTNb>y zqd|i93IwK0H2v0BWRQ0xLg6ml-*>mZaxQs?UZ#5tR0#Y4-8&P?IX;5z4;k0+^9@`D z(aLzIxWpl6T?Yxq`|`^#*YUr5x}4+%p|#8}@OL{jp`1v322~+d=;YoS-%+8K_>Us6 zi0qk2JljttYO)CCDe|pxlQPq~ENd1!Qm=NpFEbsJ@TWs9X7)CQPDpZZ@So!WleRJ~ zu7+EBsRV>#AxaDEO6=T3aPlV)IdMA7=KjC%Ig~si6OFny5e;R{X#C3J!6bq^r+9dO{AQ$i zvUi_PdZQ_0Y=VCr$d5moq*d7&XawidG$1YcshsIAX$!p7aI~bEDqb;OOh>6jk2J$; zvM|sWT&FoVtsGfG5E%fkp~cTc0HS7(Gi zY_B~zYq^ZfAfkIlwwpsELRJbre+ZBzghYOkrown)m#=h zmucT*ZU|OdRVR$p3?@fS2sUg@t@ldp0}yUJa1KwgK#5|Zj`+4KC78QN?Jzu`BH;4Z zbzT3ROkQA!|CF372V>!%OXlEQ(6G>tK>nEQB3V!3TL>*gUs(pLXQ(2AuS_kp<6ZN% z@WS?V&^;bc&&5}*HW@CJ3izD;2wxSTmuVo^dz*!!D26i_bE-O1X~OqXV6px8?rFE* zdNdTEQ`&MV?n6dew*W9C%YcT;0wmKl+571lNa*eqDOd*6uNj^2hkh&u@-;`uqNKmL zc^%jy)y;CdD<@7#R1fTM=ze51XY_PUwP5}?@Z~@^L2W(cuh3WgbwCo%Y`v?MAq3N4sAY`w-G$Ulp$qtW~j(CKNU!x@MDbE&P59;>c z5%$SL5du&Ue$oeE&XM|mbOBZKT?@BT5NisUXmksTnk%}SCyge^6J)GC!9PfW#w?Vs z8FWC-fp1!0$pr5#rBoiNI++=;jR1}&f`lWI>k(eHti!CDy|W>B4Pft4mK@%q0|QoT zS*5dKGDEo$8}Xis>>B!7dwq*pMjTB`5g|JdWWWjU97UJH0GMH6)pb&xp%HqIdJ1oF&W49U=D0CH|KLs`G9zCMNZa`+$`Hd3su}BBogrz^vw;^q+D0D?9OV7rUN_Zjn~wGr}}O zyPK6=gqRDi+D46rnJh1>)v!HXL6R~{^F*i;)QlGGZ{Yb!g0J-^QwY$hMU(b-y|=^D zi&MXeH9kbzX?nj6itt^$Js2RK8{uVEIF+F49nn1@s-?fW>wGz>`+{_5ziR#oF-q_1o-Amyg9slAoVaF%Vh?P@lR zcu#u!DHgW=*g}yt6{{ZF3-78hK=7VU#AM_{+<{%iZHXVp5JDD!qVu{fSO(v4EEqI0` zZt)00`~}z79W*+iGEY11`nrTF@h7hMQsJ&+VKgsKEAi;?=m^M9?Zd9q z=$-BK0U$0NX01$%1`tX!<43W8e^SMb@)TZiAAZ&d4L*{UL>&Y_=QS=`DBJ)^t`Oy`i?2wu5+Z{@Dt z3ht~SmgVlRr$g#ym>mAA!7MbwCMe%{pXra64`RkAU}Ds)&8#)(tBp#BcE2g)H_T4C znUo);@tN;^zv++k%_gHwMxpn*)Omc z`=jQ)$D^S}lB=kecMYL3I3{nLoTO>|vYyx1wE=n*A2Q8dj4k4y<{rP(7!~PNQi)O3 z3yBS6JQH9cttT?>?_5_opm9Od61}(${GU!gv zdZ)NOGeiX{#skU(rmHPP>$UzbCIwo-)BlUJCv%g$A^SvfeSxsC8{xh_eQ?h{9Y?TB z)Q*Vb#wvlt4ladf*i1#7@5ft{@!NM>JbX_^uIPnmh{*+V)c6(<6%sTEAyKJ5$L(WJ ziEiY52qT@sc5>cXTHD#3UVC|UjmZQ2i->0d)4~v}Gobxk@_!i#20;h^&cZWDOr11%sxr!;DhxEb|NGNqYR`Im(Rxu<_*aeN-Xed%P8% zJ$$n9Eq?!STVQ2gS-VCy)EvOe!!t}6T!-7b|Bff@j%=}V9xmI%eSIo0RIvU8Emg8m zu~4Z(f>SU1!yADWR}I8+la$-VLK}{meeL${_(g!J^0VP+^YQ&>->_7gZU=_|8e=s| zhH)@pY7aG_S$P~gCgEx7&E}|B1Fw=msUibd9>L@Vo+0f#0wGzhG}V^AP5@=d+llxa zHcf!c#=_a#A8DrmJ>j7RidE^iH9=iZL5nHjCY!{X2C&LCJuHuN*&=yhis5>r+|T11 zEIs9!u`v$>LWiH(hG-ukVqb;>oKi+mTwcVZ3IYJs+J*Oq?%@+*NBSQ>otD~Nwp|Cq zKFcp-tH|kEdIeE&m{-e@{UlkOAV0qlwr7od_9q6i~k{`_L`pyTT8BLz9?6aMA##p){!_bU&cBED=Msw%jOJ1_4)Ze0!BM9QIFA+&U%(nzJaS84`4|*cJlZ~oAUG`^>M+}9gM;FQ z%!$^);`ukQ%^egAsEJ#=7!6?sbO`7u48qBJd!rSKAD;AJG)h))D$p~j2@HrPuZAe5 zlm4b2wotY{*oV)?YM=szk#q1b>_u}dBpQS&%GX*&NM)jjB+C%G@yg2}K0DmpCUfFD zjvF3BzhYuNM3--29+n9`yv3r4Sn`zv*!qhfGIg^r3k2xzSu9GdX|zbI4XR{cs+y+X zFAkO(P#8%{1gD|>tiIh94&YmA-7MuhA#Zi0nx@YP?(M+@9=!)rlHCya6al| zYQ}*~-4|t_O7PMia{|(BX9kCoH02)N#aR@DYHLs`;MBrqX%lvXB>SRNwXGGxb!j48 z)}MF}WZ5zijxJ2COzgIyQ>AIN)l)wXY3LasPdbQv-E3o_t;tC?(2*&}vnl%|_(CR5 zdAW_F!{9V)_b`ajqLts@M-oI~3+xEv5siXM6ELZ1ev!>(k{vT(O&s4jrxIn@k?lIz z02SSetP`6|;b;LCY|4DYO&R39mpB~l;>%{r`nsy5C5uJlHU3@9(=}b0}Xe)7NsY(&0_&4zJP!t!P3lhuXinn}C)-GChP?tDLB6Ug`A!3z!7SlZ(2itid*r3j^o^7b&<+}RBImxf zq*j6u%W}rWSF2~YSEpdPfsB`226l*4L!bXKnv5m`U1>kw4)K%(ikZcAVENj|4I5h7mTn~UidS#}R!fds{4AyApc08suc<}TI1fzBVN{Qy^(4Mwv zdOHN%hr_{1pTfiYXn)OM0C^wqOIReAi#PfKJw9UHl1@s}w>FZcQ39!CzpYhD{mYuC z8`u~=Nq5!XIx7f`N^TJPQHaTRSbSh`@_^eKnVz0S@!RzsVjNQuw3bEabGaXFv%*Al zUlhR#xoOnyCySs-6^fL<7m4EB(`nydasa3X>Z!-VnuwhlDSo`~{MpIfKU`_SvL|(6 zYWk`Vgi})Y4kYWZ8>J+DiR$fv^(bp2=hc9_giZNUID79e+0po@M%4QOCeibae1O1U zx61O-GfmRMlcAu7I3DsH(rNlE`GLuHFB;duF9qAfFhU_S`Z_53O63uI<4z{COMY-B zW*-R+a!Br-}n}?Nt^9P{cdx8qZtPgr|KVrWba&zptIH z;rjLZa2-+j@zeOPY9|{KZ@WMz)lZ+k0oJag#sm6~Sg3p<4jKPd?csjB;w>3@ZPC?+ zt(MY{M1C}k*KSGKcrXOsho6XRc>yRs8;{S+eb@s3SacVjY8W@*FdE}(vurc|iFADX zEUJTlVM5SV5DJ3~9LRg#Zy^m9t$Hmf%E{F%FwO0YePox5g8>x>lXE0iJnoGkV;1b? z33Sy5qdq2!sq{{ozDmv%`RTgAz->9Q&fB_tzx12@=xcn!4$TSX0u#c)#KuPYR*)28 z+J6`h-c+zpdzZayqYV3M3#F&?@e>-;76}l@GHVUZva30NC0joThQ%ma3^gwnv7$543L{Vn9ax@K!Wf|w{+XsotE-UiK zj)5$N3DCK!DvBlu%fiJ2_bJ6_+wM_ydjzw4)G*~FUrQ*GZ12FmC3rT1MsqTsOn{S<>xNs~34gaStawui3=4 zqmSfyCs@x{d1Zyhfuu8_8JGH5U60(_Xn*n}Fgw}vGGaCJ2&q`>SC`HVMgysym&`}> zRtUn%YD7BLe1HWkbjD#38UV=A=YH8m`H=7AOhIz=PJs)SdWvm8+HL%uet zrC-~!rbQAerHv*6ZJvo1Oho}2KLMqwgyIgQtOhM*g8q$LZsMn@>4p>=`@yfe<~nmy zo`Emj+bVr?M$@=Y36(2Zz5jOUL~deu9BahHtvdqvjSvQWfuK(gjtdiVu~k@rKpmf? z$3*StR$V`;80BZoTX`Jc^4akO#~OSsh~p6RsaWTd8A#1#Xc=sKS|dz406-nHypIJp z$xbH07{?8dXd3KlrQ;Vks_u%xRBT%a&Y4b!aK-ymOjMnGn3^&b-LYJot9-U&#O3bo zm*^+RR&!d2*sGBup<4mUG79%=xHLJKNzd9b05Kui(bA#;A3U86GJW% z{f-cPZ7t~{KsX~fgT?~j%k+j!r;Spd8{PlY>;4nTFk3Ih8%ySIpYPn3dtBun?pSZK z3EuPu%L&T=Ekwdf1fb#cgjVXvm`boU{YG1`eA1gzy5dMf6vOId-(U&{Z;J2mu(}K3 zOY*VU_Iq5PM_2IyK9&TGzAH)4ejAach}YKZuvNG#5F!x(NAD4Wv2P5P5WQ{GpuSu! zi1m5z$Ov^2zKeU}gOl_c{Ri+_hin2yJ8UZc!8t-Oo@0V&(xVfE1U}EzQA$9P26(r4 zGM(k3%C7E`1=S|oFXod?WVqnYpIQ)`BG2iP9xqrkG#fV~Cvu-dWQ3A_v!CJUs@q83? zeGI$6AnDxvT%CP4V}KIVvI#r3;kE%B5)q4vM%Mu!>4!!y)r1zrD(c5L?J7daAdx3# z0LJ5MdXP^Rwg~bC6wvJ{Ft7PcsX^_*>1y}Lv=cc}ND!Z#&ur)8Q$UKQnTI@iNHdS} zu_HX@9rfeN*R>2EaSus%@tIm)m@$vWfpZ>TVs+N57 z;_(v+-q3!VHX90&1c>2p(yGxj;~>7!x_A&R88tVw-n8iPOS$iwLB!f+f3Zrii5e#vb*qU3{apN;-v3$@wV}@o85Xf$F zC1DTQbG^n@1RSN;y^AYGh7gH6Am*AkWRvBTHXc(76YsJSn{2L%Rpx&cG0#GxkcftBSAxgL(|)HOvt=T*=cgv740++qY5j8XU%1@LkzIf3IU z2Vc<2z|D?h@XF~_d;p!xt)zhANS4?srYlP7VI1h9QbCV(q!-8l z7H(?eUy>PQMfs7qYs`z1ZDM7Rv49L%n7E?HRrH`pGPIDt0VkV>j5m4&aN20Na5)DE z7BBWIB-I{(Sq>Rw(k1Vlc#g0!m7?atKlwL)YjZTzNGf*)TZLy(>O5>=4`M}cy{rJ@ z%IIQFF!u(dbxUD|$8d1$T~9)qz>%~8qB?^Oa-wAsYbA;0pAJV~9S(R!kM(2wrPpHo zN(CjNp#dY;Z;>VfC6!Z(ubV$;>qsC#zsHj^9Li0fE#upKcM`Dic4>l(jWm!{0eY(V zZyeV?d9ty;uUjoKka;&Ckpys<<(8b>Bbu~FZn_L2XiBZ4S`G9oBB!CPmpg6?3MuGz zCqEN7rx*llp6eJ-p4c<;aR^N|k4m)k-azEskIpBTRNH|YNv)*=y_PrIz6*w0R)9?h zPVe_}4CAIkwrIP4(;5aC2o2mPdVYyvrcG^tuGC&iw#tt&QfAy+d5h)4L)d$jtt zx8{Ybb!}zouGCckT$!VLS>pk+i}yF4AGP5Z=sd4IuOHlv(cxibxKXvj845RS?`{~j@KlZ(Vqd2}?y?L8!INz@VOXgzz*2mHE|5)O08#16OTgr_kaL%omsTN{^N`GChGcR~{3Yk0 zRWy|EDvNO>v<4SYk-6xI^mOawA%Z|nK}Q2Qs!1Cad3XfZiKu-1Fn<_*)5y$w^yOEm zrsUR@{KIgc@fGfp%C&edV~E>Gv)3X7HB~aBFXk!K-|9RC$Mw61_KSA3Hy$0ru*m?c(%rktwMYrz1DTDi+@h2E1C*JXxlkshUoGTAjK z3!@LPaR>Nl36{Ic z386VEp22*e>DN#T?Q5ZLKGh&|48*2jK7Pq{TF(o;G5J_8vxO}7Rei%@01L%-JPmX`li#LbhSh`Y9*grCPs3Z_-*770ayCXL{$O*Qa98FAfg&*2Gfc5Els4 zP!p`fC?I|18KjIb?d#66#-`mE=mx=`ml{^UAz%9L_Z=#Gz{Dw1x++0 z30Ja71)oDGi@SP6RzmZa92CYB4yiaJZmKu|l|ztm=wOP0)sRwE(h2tjppX);UT|yN zmN2i`5&=xHi-(D{!4obzPOoU~&bSnaz~$f$GMEZ@@bNjwzS&*WPkZ3>ZT}FkX`6C4 ztf@k5hbR*`x}|&svkR;)D)ysoN6aB|=N0Tg`Bgf1`GwlVh!C_>v5EPvamGLmLpECc zx*p^`;fUc+TC<=fA^}4NuIqBcvIzz)t7K?~EigMCYZU|jPtfm9*fgqX=`NfO-|Nod z@KkLSAaMK{caKo33I24|G;t(^)-)V1sb zkoj1yWiKA03YAFiJ1ARoh3iiWtNl(v1pG;sw52MSefFyCriiHCRSB_Ij)z0UNt7c} z4w1({y-2oZ;B?8`65kPjR#ubgCdw`J*^ z*DM7MJ8k^%>EY_#Pat?8*bjMm<(e3XU2iJG+#fW%tQ5txdkZ1`l^CD#4-C(|&4jTl z;k7w`h7MJMF;|15NJR^!e!weXJ8ma(&5$w3FNJc@k)OgUL}Z1RAxwc}i29H9;j3l6 zjp9gr4r4|>ppl&3WB9ho66SI67x# z;GZBfjk(a7lxId`h6aJLS$@|Q8isU9zn3X4bp4Q(d{AmljR1SrVK|aIC)cb;)Rqu% zIjg<9_V--d@$DV-BR?Kv9ABmiH~Olf19}onntyS7gU|=OXr8C%UAWVv4(uJ=nT}g# zU2nVI5`cXiap*_TU9P+DuIW%ea+3lt)Ac)!MXHs<8uN~&K&;w%8Ms$k-TH@DxW5jq zG0E`8EW2vw@<;=-X8M+^2zr*A@x*1hVq_1*gd~0-;@nUAGJ7{$8@-#dGWT&fl0PKG zCHS5ZFZob4O(-f8`sB&_#?zP2K@wZ5xr~D9Q#LBJb(`|a?~2|T=ZFiN!5g^o4#tZTp?}>^g-hY0>2CPqM(apmY2fGTltdCX~tgx5tb6bBqB%R%Qbs^7ba#Q zk@l=b4%}ghOPkCja)n1iJfKzxv!hnRahox;9F;vsh)#vob+qD-|8xPL(zJ6qKEKP@ zn{4IxQ6Hus7am3rxQ*cI5ix%kUI>d=ox0_p{zvVxlcPfW0Q>Fm_A**IlawTP&!H;r(MUgX0Tpq7iG5QR(EhNNqKd1&LD=o(-&fS zQe#wUmjPiBGlnieTD=KLHTARn1Y4EFnJH~iJV>m#Ikub(y5TtM2;C^&dAZ`R z$#cWI?2YBDf^$muqze=BDMDN-J4EpWIaFrw?q|4-l2;lbSQVm3zKc-@L3u$q1d7rG z%dTwMQgQ8io3?aT% zW`TE{qG5d@pkQP=3iTo%)QVuS;ai%zj-)__1{uT(19Y0CRdzW+?g(x~?hY7fCf6t1 z6+sB;i$3Q<BXq`)K(~QU3lyGKeMC zW3syZ<(hkk3M#IdY_3!xaKX<-W|*)_4Fs27OF^C;Lx+ck1sxPdTh!O#vGR0yvW7T~ z9?B4p*RByUf~mkIPB^haW4%269|P7PFezboi3yO>^8q4qY6Gd|W(*w|IFSTYD}fjd1q&rU7V;3jc5!{#KRi~mY%p*&;ul1Th}vLf2Js7`p6V;i zbgDT*otAmW%sX;~GlZ4<`2J(kz>xr$AV`FQpyze;A{%O}3Rj2IhjWKVC?7n{mOG=9 z3n*hkvR`!2xC&|fY)DDlg*L6G&Rj+dVFQxjVj6_XlK|n`Kncr7Uwn~1<-i`@e=Lt} zZp>T@y;UEDVIMM8<>)w%fZsyg*Lp%Vw9D1Y3TdFAbkP^5J{cf}{kU}4pMCK~x(h^G zgTvEg3~6B%ex#i~$c@qgw^D>Nkt2vwPmBR7u+KU;A)lJmELZ?2xGGKp2T>Y2K+8f-?hW z*anjpIbthxN?tDSc)frq$aaOR>{&JSzba>i$|=z!y3q3jgE1r)2{lZuaZ274|9gqF z;##mMb;seg2i#KG5612y#2`B!4PSQ$Fgqd@OjU5OU}vCqbA)H!$5WkLWkF|Hwu77+ zn}3V8WF!@-tEa}6Y*PT2r+UamG=yKP-s=t%j_7}yewfr5rXh9a)j!8BO;rK=10@C4 zo3RT5)@1nw=WLNeUgs?!#f>88MSpk=0N~^*=8@16BM0O}9y>!7#SKG+ru`o|*aEzn z07joZ#=EqUapzJL+2eZm8X{4h{^o!WOi8T)EW^+IjU%Lk#(X++lHX7QSh8WL zoTQ;BfQBe)D}RN3}qu7Uibhkn&9l-NF&oh!g$r>8mLj}B&D zt(U-!yER!s9~dw6hTgE?KEzDs-@zJAOB27dFN)_!-z4V({|FsBGJ&Qlmray-&7!cL z1^H<{fjMMMeiA516^vYXfX+pr&IMiPI#JAK@)3BoNvA5(RLbR5Y~uQ_vF*2QY@3-~ zbpGS8z|s?`EQpddBJsHV502&T3R~~uhNzj*Rjkn>mRRz83N6ufov(`$0-75mah+G% z!gV1Kynqv(0)2Xo#M{!GBOhx@jzjNQjxF~!9Pq$E`!<#w*HHe(7tF9XDo+#CT(n)8 zt&#yNrR0Q@(nnv);?6bG;(1~k*-Hr@gzK!_2}64*O+bY)>zZTJ#jlq*jCIcW(Ea9` zh-XrKEJ!g%XdoI`1T3e)?x`<8CjsT=`S!v7Mspi!l?R*8zCU`_+}uJ2bNK2Hhu&E%jMj6+sBY1#BOhoN6OFuWXXtZ1xmDuHz(xH+QK03zf?=?2d zGQ?5z=BT~-4_q$aeqwrrQG&aw{q7@>%b=io&h!0^HXv|iI^^w3-hCD9k!If#ac+N5 zA^CHLGA%2xbHKgKv{B?vGm9>mq-@Oy<6(c2;RCV#v*(rk4qJ(xA=r!k#LZ~85EzX zWmiWk%MfOHMz-OgqYDNu1kKW9EZJDBYisMQ@V%eJCos9O+=P#! z6p)+p5r%=8#))L40hS3fL)`y2KXhc^qW|1DN<$5 zTan4Qdl^XyB9;zBnwk|N*bHXmHifqcv$?=FGOE^R8o&b&ZsXRx{7(6-!ME^a{Div9 z=7SDoGrZ2~m$p?LbP^^Ffrw9+e5z&2T&$jE6XAQ`gMD?k;f@<@kXSA;f~^ zQH$TSBcQ7FLbItW-8zI6$tk8As-#2)%I6H41&1)TyW8IM1N4$(mRQ4u(iW&q^5%jz z2#{FL@bjf>#xOVcE5qCTQ=!R}@0woHHcP(3d_$+*8ql93V+*l3hm+Dc!7IFnu9Ujr^C6A zbMnlx4|&|cJk~8yP$;4C**%Jmgz{dtZ@HWRhFaGO%N?;5rf^JUr{(>PgZ=NFE3xGC z3ypSH6Sm4yEDPa&Qs3aZ4<{167xWb6rYk3*bZkk*3N@YMR2=v)(tvAqydNRKUGB;= zMZz(GssYTJL#H!x3d}g z7>CpHC*d2)6`3$kD<5jz+BwolXYp(CYjQ-fU3+Kq2%L+9_K{QTa2C<#NSq7&WjP~b zHm5n#96c;0SX_K%Ubzss4{xUfODi8aF0B0$-MOaRheL5PJxss+qufLHa?Cgyl^P$9 zoiJccf!2PsvvZvbf_0_G1r54oCkHVu`0E6qLT`DXqp%7g~NLT6bjes`w?@G2KV6$ZyL{Xu?<54GTv?WpBm` z$u?-Y2L^qXvNk#2Qp-;B?IG)kooOSXZ^@RQbs8mjUgHwa{*m*(N~-RIRn}IGM$&S* zdc(n!Os-cBA;Q2Qt$Nc;o9a1DC#DMKv(D;V~$dGUwh*s*I zXed^}C?J#LeCKJRIT0d&@K}dQn#D}y5y6b;n4(<;!mS_H2nh^CLOSi$b}KVo$Y>tw zF*2HkCXhsrKZ-m1N%j;$F0dCtMVN|xc_&5tNIc_v`lSHyMN!<5jSZ`CjpU` z{Sk=4^KKSAd4l+3J4f-{{L~J_PoC^HUmm=8c+_mQV6Q)tUa5w-2^J%&o~}g~FN|0U zqlEn5tB&;6iHi3+UF&YymXn#Mhm@8gD|{dX-?p!Lty2;>my!;kmgQ#I0zhgkQ|FvK zZc~oFOjvo=rryk4qce$zmhGMDgDh;;qa%&nrd0SwJ7&H&mKAFbtHMzf8@^$@tgLT) z4MHHDsSoGZ%F^Ko=5+FZ?-HdYRHez~kbS|Mzu8bjE?|G_c3^YI`Ps>076R4Zr}r!q z=~{}sHD8|VS)Q4_-8)W`P;42!o}2`J$O-3)N$R8R(07nRx@5v>KG zRNW6Ra}+rqH({cfD2h}IUd*d~A_6uXW}1VIVrMHXpY!j(-o@!>)IC3v`n4<87mhl3 z|AbY*zQXMvPhPDZe)R(`|M=>TSd+L~lXwbX%gmK|ohdlR9Ou zpx>|}kFR2ruOj~t1GGi1ya{j5tAySiz0f`iqUme!JOdZnPgf{JinJwcTjH zXg>Vx4-DVd*ZA-B2JU-&WZysf{Bg# zvbyeHnk3!}C3nMy{uXIC$!&rTBt?5^|L`chCbkj=<&J22V@* z0}t86F^!{wYnk`&T15}YYj{As^VjY#{?lr1Z)|OCN`v){cBA#Q^~gT>U1#Uz))rg+ zuIqo>_-=1^|3Dt1z5Ki15+?lJ_WEb?_g?$&@^6Q1Ex&<>gu@Cw@CB!;@Z#_LPd`ha zN<@mTP^6-0Enh4+)$=}*1ogZM(MQW}Nn*GD3l7P;J~0+XF`d0X;#pc=$*J8x#(k1- zg7K3-qAe{eE{!>C>#q3_7)LyQ2QTm5`v_vHR8y4jQIs8|lco^hUIA5r zBEWGQht}xUV%+%_gF9^)RNxZelTzJz;S4mh5*R{Z*`1xLonQd_M~B-RBg*ua;?rjGLsemJzlPoj3y`O5jIiF_9~?$k<)HT0_`+V zZOX9Ju|&;nOPq-SD?DsK*FV*ZRZ8e!)MAWDK71G4-EDQAftsZR)DJP`@$9mKQjK?D znJy1K&f^xPQ=}&mR`wQW5XPKK-x(qVBF6^@ffPco5mXP~%`A^vGJKhql95|Gj=YXa zuI(aYSg2PBb^kk5R^I? z(8`{1+^bYWj*hlB4qoi8A04@@0hjXrj+S&B*OBc8QyR0wOAEzC=$q=}D~N=WnQ|-q zdzw5g$ZOHn?jh^lCSy2Ub*li4$)S8<^L+mD%Nr@$NN>B~(Kj4tTDRRqK|3ZOAZ_>)z{IVM~RP znhyh9unh#5#ARq=gmiDEzXa>8Y*oDsoEvs?Nu2;YDi;L zara5n;`P zA^Vz95_Tx8Kmuhm*BiF;0T(i!N_*Tjhsp`urt@d79>Ko@2ahEZjl~@@*R7JWt?B(P zZ4ej5l}6aE@MDV-3MXpMNR5h<*FaiDf{aJLb(Q5^GjGEjPp)KhVEsi*^W`;K)PBAzd_j@N@scb35C1K;m)rhrUYk;N?eJxoSnUZbr==9qr&? z-QH`qHja+yFbThd6B4l^%n!wB6Gi_J6pvIHP%OXWsnC@i;zT{a2Obwb&KZ@wgdevc za|E?o#pyT;k;WV@PJ))JF{K@%Pxt{keK(*o6;Z{4pl6rFq>G;WzbZ;jNfV~^8^>-M zLE_yPwl$e1=7fxhdUrmbkudAGHEsE%SbkBc$S|{^eA&r4yYL^Pu@?(O&fub zl2e5An4RGs=V4DD7Wpj%A96+hJQ`PkttvUzUE?oE5rZ1R8RGQ2Qq#hjkTs%y2fGmS zt=_#4xRy=#g%)ZiLcM2c#iI$8)RxyW_ED8`%hx9?I}b&X)=~b3R~{g@4NhZx znTmDizR}V~zbnQK4YfRkI(CC&O7Y%!AL6T~R0;5PU+49d7~ab*u!Br8j92rIEYGxRdATzfSwfOGb#HhAogMncznz5ntgQI7#jlbOABz7cX`YEPctr3h1Ou%y2kbps6{Nt-GMUC!iYKDN& z-NoG!61Nhz_V!>S4B9Zw0{U0KKNV{(mxbSyh}eT`*jk z;ciQ*mmdKGUdb6y?C!53?*K#Ql*ELbSQdjKETurw;LR$=m3_g4){drNziM2%(=dL_|LKM7ra_PYXvPR;|i zU@s)PM%JlfHw#2TQ1)U2XoIso0{{AJDV>mj_>YIgxlu~XZta>?Oo??=e2uR4+;!G_ z_X6@+9rVw7-9A#ztAWZM$L@g??q5HJq~Y9{&k8KmPCIF)E;c zWT&|&Ph4qpJ<$AB?*ZvrTY92?);q-qw(c@mo=B>YD`IueLf(L_c(FRFA)8^Q< zTrGw>L4tGPoeSVDJnsz)kFdoTo}D0Av)jVCpXq5#P`3@82nQ(OSEjfYzW>+tdu{*+ zqh6Qay6cmJ4>3@=;9B8nwFI-1x(Id!%KoI#b3V`Eh0Cg-1Vqhnk#>6RGBg;)bK@QM z0N4&i?I+^E&8(^};0x5iLxRQGOT*6)4uB`5oO__i^PvsHy>R5<8~YVje-?8{5Rf%k zWoJYUiUBlkv2T8qp~fGz?xpqbx7LrgHlOY{_rE`)L3{};>kgyd~V z%TAv;WWGf>99d{z?^MY#15O@4qJ%#jF2#{n43r^uH0AoyIyljAO9$x0rkn1WP?bx8 z$`Cc_>E%~Bxbd3-;DL%bK(uXOuq~=#0ZiCT;*U%5x_4XomdJyk2~$&Bb8&u}^V;?&CzvdqdsFH(U0C%(St7wEUKZGNW=c*qq)VXIIOo z=M2S)=}teyUXcn<9Ensfg+#-@yc5Kz;$|!nA5v7UJvoMik-De4OtO`qTysd; zpYOs2E_Nt}pXGYh6K>+BRyf83oz!^ZJ`b9Qd2P8|B05amUgBAY#|)Hfqoi=tkoOkX z)-kc>K9BRbm-c)HcZgy-e+493)ayoYa)6pEOKn87!%rO0MgY+03DqGO*jL%gd)&=3 z7~ah!wFsAngD&B28*mDFv&bysIg@=7TzMJm2td=Td3c9E^8+Hzf;_vA@;j7To%RG58~!NO?ByP`yqONk;a`pbGAkJZ!s zW4Ar$2R42elA?kT1q88r!nG60I7eoB8}g2F0)aA(2G8GQE&P!+8kXnCzaq*|O13Bx z;J&UVi83Y#X$%WlJ4~fym(AiFc;2EbU;41_e^aeNAzHR%cnOd+lLrgk!+zD%8@O>)w7wylcd%XiAn|c zo(m#e>%Q8U04Lw(I!lfXloGPrGgKlJsdFCf*bpv3gO|7lJDM&B#vw3u5a82*tuc}q z)q+TbxkXGZ6e5!7+EAgV%ggO`dgAq(bd0SH$5G7^!R=TDq}5#S@}vU|*krmJ7X+P9 zPR1v;R|TDmZG(wH#xS`p(Vd8bEL< z7xP&@^JbMu_p=fJCaG8qAep$FM&=HxY>*Rimgy5_!`wmi_bSK-UL;$)2ne+Eeu&Do z5YJ^TF$0*|m-*-A1<7KbjS^5f)yOHq7s5y}|Cf+aiIiAvju9L)djE~;NO|m*YRWvq zQ+ML%Nf>u@Qq&+=XsgN3UCR{4jfVS1Y{zndl7+y}qezPtWP&m?bCnsPpWc=GVYdG5p0d!{@If!hB8TV12dt^R5`R%2(T%B!blJEH(IAtP#{!%`#WvT_eu zeuRfxk2J9h9LY8o;*w{f$K5d(ooKUjQO;!MQINp~YA?4LXD62eS!+Ng!zr)e3kH|E zuVJBfbd)hGC2cH38{fL6WCAGXv79tIn^n_UI|XhJ$?fgo{K#Ng6$&E_Ck{OAV?T^B zr`&?!AhxAuw zo(>Ca;<|BVZph2(hcI4^aPom35SAW8_o<1`B0!NoAe{m05SlnvWQsH|_J@n6YqW;jb%xZG(pM%=Q43$Q^a zs0D(tYs3o(p~t`YgIC5-@ndq;11Th;Bi6obF#Fx}?mKiP($-Y~3Gnw5W9`s~g@UXs zA0B?fIKWq(#*g9x5J7!s zq99V`;iOEj3DS|!M7ov_L03$=SH^BMGIxvb+Ulo=t1C82IT@Y*$m%#f zE&`p--{dGk-a|LtI(16msS}9dVZ6VE(FL;@aDJRQmoPrrJ8m#Dhx^YC|F8yI1FK+;y*Lma>mg?3J+6?KTd*r=CNksjtMNtW&#Rx# zyqNNFtqBs3a}0{aEaDPUPlbsfU<8iIncuBKDUG!r8UIu!mS3f!a!!N~aOfj;2`8Hs zC*VYWuIYchSfK=C@vUI-E#G+n(Z`)a#SAwzKh?FkRaIYfGPrq2;SP_cD z#?CiK&8@B7Z@H_scDMI-nY1cTj=o#pc>3}=4m){MAE+5L)@Bx=isq)=c;ze%A5#i@ z(jo{|4T;o=P?8ftqff%-v`pZfgurqrkBvqLmtSi_Mu`E?_tzVo^e3m?&9jYn(4=q{ zX7Ld!OHPmHpB5^r?+};hKFZ_)yh6D>h zQGi;{{(p^v!cGtp|GT_OPr}CT)+$O2b-NkEz?me3jl$Z>-eMWrYvQ+O8K2Qa;y%Z$ z-63Ut`hA8B$vWa38DJzIzk@C20R>LJQk8&zvW2?#$wxS-9-z9jUO10`!2#F2#MA(; zq6HhRoZQWJc;jmmM^pr64YDr>xQw2^{?&e2J?;L5ZTa)J;pnuNJsqB(_d0`N_T~Sr z9=qTF3OnlQ>ajFs>t~2afNvZTR`8RZ46oi}onIhW0jGOr2qVoF1BDe6>KTmX{<^9+ zJwzDtJD3GFcG?>RMXtiL&b5?+LBSTtjAMino@OjGhc_6YMlqwK(=Nxh_R&YQ6^#+` z9K@_P9q(Wzt$iZnZ&8eFft_%gX8;mX*?5@jWP9!X2JTklKacfNSGI(q%1It2xsj2i z$$5}Lk}3i*b%)mJVbB*Hcsc?6a%~L}73UZhkPx{B7L$?rA&f}|{*F4N3ZpJ0|9L10tX4C!bI6}LaBhX6B|`wxCp>< zIb&m#3x+Df@HoISQNdUNxRlOUWr6H%H21;5C$AASKfYV&1*;WaBpMS#to8Sj z5G2Kh2;U7pdpW?hYol?e-^y2(f%z*&j5xaNS?9P16!#D$MR_{PzC4pBe;up(K;>5? zj(sqj)X5-%x@2UET}WMO)7T^$INOWVy&8|!@V~}=A>NFQAG7hA3v3U@gguX4VKIn^ zkUz}ohJa~gy}aA%4$iMH#(U$@W9)6-G|$hHmg}%NO>JhgS=KPb<9-<)UBZSJvI2z! zcGNHi2MsS+WdP`Q@@PcDCVEXk`H-yvDJU50&FNFJiFt(0?8j+3rNuCo1wD23 zL8v+}e*{hkNMP8%6PVH9+-qmf@)}q$5^_voG-gl@M`B!~eOCj1=41xj*8onLW**Qp z;GKYfTnAnl1WZ?hwXt3VPBa0|#3$Kbp(b@Mb)DcyNeM0%xVs;jQuPe#C1rGlu+#_d2K7%T*^AthAq#+21mz9FnT(zh3h{Jz7$j( z(*(4FEm|}dDofOtu^o!el69`AS97~TQ#7%^ z+_r^{7Ru|W`=&RXjIrmiCj#Y|9YpLd0?Ht|Nu-hpsQTk1at5Wi>pn}G%PjrdeI%ic zV|>cyI;s&0S%yPPK4%iQ>kCSn8%Or-1#0(k>mJ(BWG_CI^4E}kUFdcEspcZMltdU| zR;d%QShWH7*(!vPGmMBc_f^VBd}rUM?+C>)TC)25j^G$hac2AAM?JZB4b9Rv72peP zsk#L}rM%1c74VYv5y3LB6`w*kEBT4XR%nu%gS&h#UM zCQyFEy}7J3iMQuUQTw zw_$d1Q9SlAPiZ$*ZbeU9&}`y(JJ}li!RD9Q8XhYRP3Yj?U>Wmi=~Cv48=zb9X>sAQ zpDBx%uTymWcogv}8E*=EwRE30)g8&wt(fOK&|q;Yg(!orqmeJ7U?i9lGcG+1anMcV zm3?cW3>;zj6Qpic)-+veGApSeVU*6grqH#FF?2x{02qX~-;KM}%i*_@JcY2wpFKhO zG?Kr;>D$PN{Wae(x$P<~Vr?S=QkaO69n$3o()AO} zK7Eqh`8op>%i{6jHV;7aoqzJ<4~zeVLvZMpZ*DlGrRSEiQ}6HG=9ivC+=L}t4NoEQ z)a2{7l=-50HwD;9vP2M6!kurDXHmKqn&(swz;(eNuMw4=b@QpdxprlYP^nybgl?o2 zfpN;TqMI`h^_0p<7RP;Xf+lHgtNZUZdF$I`#hN;pjBuSW+@DiCLbUvdaZ4<5lE1 zbIvMCi6QifU;U&X<2PhV9T{ju=&OfB6%W159EW>GZ<5I_uiYjoT6ro_XxQdyhNy7PTR3?i5g~~6z zOCrxGgWObQq3qJ-d;n@vB1mu!%4P`b%NgozZ`_?a#ePiWoxns3l zXr@f2L6wN@@Oz4`RYZvS4Qo}20y%ThyAEs^ew2J1NHIR=kI{@wmSf5{x!uh%Djymu z$?{fGwVyfhzQC@XQzIBZ8D{p0lL=!KUtx;#>2gBD5Ka0@Mx4$d z=(&$@#>-=g9fSTXyQwaz(;?_83IOAHos@9hIDE>v8PYEmSAG_X?BWo%XeU#IFs~{( z%UR5EcKZq!1{>nhXXE0*l%MeDq(K^^g zwaNCzUUR>RU+*$e2|WcI2u48e9|gR8TyV!mt6fhqk(F6KFNz+f`w~A7IOiUc{4D|q zyH*xP);u=3>%F05VP20knbm>N@f2c`2qx&ol4AWw2xPtEfCj9~ulRFEPuxV$Fhw#8 z=oaJ2rUkjHRLHHw3aUs0e#{?2vzs0BV zll-qhF!+T6>7W6iz}TrwfSHoWTG-O+%-dH{(2g3WJcxKB848Wjm7L1e#{S8u5fDx)I9%jY<=6gGto5S` z(Ur4*spXqIfRO1%zxUcyLXI%PrEEa4;H>JL6Dx9)!{JZBeHHS-tnU>9GG$6#xA8~9 znEFCWD3Ghm7BDfu>}X+j%!1zt%-K-(5l4|DLC{s}fGzFkHrB-b0y`RX`?q?1SPTA} zua)Uf<97L9!5lgXaz8T8%`8FgS5fYlqgFMArjIW)tD5Z;)FYy91BvaNOf|B70E?K# z=5ZO_u>YoewgrfZ#<@|LsGMm7zOx#$@w7&P@sP8O6n zxP?BUhZ)h9%wai^s^B;%%4pVD=Ll&4!%O=D=2z<1{BX@z>$jKB@G4L5B2yW;gak}K z(%o}OuQlx~p;D&{y#K#3Jp6JmR7caDMxC?k#{I`@`s{y})akl(in@}xJc0Q?{JMz) z2UhqP*h@|j5B-+)kzJx#2{QOQtM)O=HS??CF_T>FDdI(U&+zz_7j{2oODtE4kjqm( z&z212QuagkbMF2vw$sA0qw%Z_QDjqQVvMq%OUN5zS=!OKfiy~iAQ=7NhK|=)EH2d@ z11TjWX`CY$K9x6ays!L#vn4UjEIE*D#GfKnQPu2%XXu=qy5V6))rNp1EWZ3wGwlAd zh7_>N?q7`33KoEISm|-DplwIkXG=_kL)ffqTQU?w63)W#y@PtHF175;X z!#4}Zr85XK6ZTY@tu!JppRF{ zwacqZo^b-+@TlffT#0VPk5%Y4;mpV<#jy(V;>On)>iEW#w}IDEK4Ly1yHvWYW*dek zXnh#osv9BBw!O3WC@Kjfd-WjaW-VrYWDsUJQeRH`*FEHuY!en4X+&4OcqM9FdS5sdg0<@kO2$YI#BIc+B*jaQ|2T`t!#q>^yq^@$bn7 zfBu;N{kRI@x1AA)8iLpy%VoS1qCg}U?6n_}4Ecv%;PSg4{9ge;+Z9DKKFY+idGU2NYM^tajBT{t&*K^#{ zU+@Boj)nVtku?p6Dq<|?N@srXL{%-ky6(}^$-BvYzb-2Z61?yo}AVL;`C=4cjRxbZSf%%`n22P1A%1{ur zJD6Nzs$XSG;iyW9L-Ll)D<9WSoZt}bC;W;(@f?)X+iRBvV!M&~Ls&GSb<1Q41(hCt z_J_hsR>T$+_%Cph$fP!@s!){gL3A13^jP{%j(W6L@V37)$sP?Qr;`3g`-6&~8=Uvu zMvVJ7q?Ci5*-L3!B__ot;ttW}i#Oa4vma{C+ol^tgEt*uwxg#TjhuTBk0dq#Iw_a+ zINe|uC=;f(%Yg6!XIqDffDcE4)3tR(dRg)o!by6^BNQWF7OyF`bW|JmM-rHjr3eVh zkTkCPlk*F+oLEC*{)Uuj~7)6UQWtvd)K8(+h2#E!F-ywK!b^RQA+e+%^; zhi)eEO4%{+8+399h-tpiD-abjEF5la`rYp7XCk6c2gS3m8?ek47EfyLSl`%#udjKq zvHpZLXkY^q&NoD0AHd@92Q>WVA}KUh1!j440)rB&Y5@7`i`DEvf{KW`{a$tME5Y=M-Nti1kd#t{vL`Bdc>IWGO1Gp9ZjH16N9CI2Qw9u#= zy)1qceOIXqrzkhG>(2R_LqsPg;>b~#=2PWJ&vWc55Pdm%OBcgSWFeiG96#nFHz zZh|8-F>1%Hn8F;B4La1PmT+xBxz&IvL#l>GWAJ1yC09zSeUgGjILM#0pb;sBoShC& zCaj56G0~~*puVf8fvVINgO7SQoTVEzd zXPCLm320jU4ajHMgQL2VCIi0WMu381_-Sl!H`dqT$P4~L^vaX%?I-Q_GUaRV;=o?~ zL!>cgzXEMnLaQhZ9XG!6d)JI+;w@K`i@ViowhJkTP|MM%gB&Ep(*-Z92nneOAyHht z6@~+A?&%(i``~=&-$znlCL^l}?v5B+Q}cJW0@(l;BE!&)gQOfEGLPv#SdyT%uh}x7S?W+MJF0hG^TX_tCmHYBQ`}8eQ@$Pozo$PLQ*KL6>R?>lse(j zKcco5iXWal&Kluz+kY*}1SXE(2w_4d$<5Ueowj^*H_8>sWsS}FpbX`tQRB4xrc&Nk z90&tViQD*XN~DN%4n@@?foHcryrO!Fl5i_fa_Ch8C5NcO*@y82bCIXyyM~P2Y z8=+Y+d%9|1yim~8s>WT68lmvio?XwV?a0f};hV;Z6;7TG+(6Xqvq$&uXDgpwVuCO) z5$Cb9K;`g#V_wb4i>o28i_Sye()51jo8Xr783(h8L5`YwbLRN~GhYAMzuS5rY4gO_}S3 zPOppMX+BmNpd!O50>R@sBP~QsIi*7K;E_WphAT9Mi5c}S(a0Gm=t-w?_tPOv<=1e{ z4h}Ig{2}AzMGuEdKhHS(&TT9grp`vArTL~mpYeWw_;$>Qm*JQt+0{7W3@R|W2qwI( z8cfZ@BJQ=}xlF>iyYDktLtGQ)Kf)O*rk9RCqD!2QH1|EcXVRCO6!=KhuA!bG)SeJ* z-VZ075|FraY$bP(yYOqH`r0U-B{K1hM0M5Ju~x5#C)k5(`L5JBVC>6rL?slarGfBGOrU5{H`+Vszq>y*gaNM~4XFIh25=asKP!(hupj>CvjT zUHB#@G0HT3Ym{3b{FCC6BZ3!`C zX3!^C6BAOKC{mDTFAfg&+T1g8^_2l}uCNl{$~FMYp=`4#<38wKivrx|$pJ~hC!_Zg zF~A)Injh_u+%Yx=*cRj{;Y{MJ{D~BE3er&zx6n%!>T$NSdw`7%A{U0kQ{8I1u)1?^ zMgWiOL%>&akHyxAD$PewF$d!@dbd8m1 z(3C%0{llk1r18aY(m%~mNQ@;}6$FOMnQ-5(D%JtxLDB3(d!3wL_z(3j*I zb#?-{?@`A8GILmnp2`~zWPhBQcC#Hk=As?sgpE!!|HfC{6U;jJ3+E`ryz@MgZ~_wq zwcG+p1~r{+0{0jLZXI*K2XvVYP*fud@q#Bbh=>Vld{dnaps!lO+$Nl_foXtgf!A;%FC82ajM%rY z3f<)%S&3E0@sjSkG?d)dp?qCq1c=%iB`S#@wNBKza>_(slo$xC%iK*XV)JQdjB7Tj zCc}s2j#I_satOR+Qx9L`jOmD#y1c?x_Pe)uOkJzin*XLU??A+yc6sx$6-*%3b@AB2 zH^rwV)Pbi7PPYbWTz|9+O$xRH&uCNlRt~?Awy+LJ1U5MG5^4%ILJ>649K$vsS9Cm4 zwFuX|0!P%_&=kQH=c3oA6o51r5E?efl@2r+9;dO@!0LpLLW`0%n^6pzFTZjfc>b8W zdW$>(DU1J~-LVxrv&^W8H6!-S%OURxA)~>DNoCK>2vUzr45pV-HwGvE^40mP9^zb_ zO<8b=vA3u5)OA>-a~DQ9XM@oq8`Q6z%MbJyU$fYW80sIg$suA0d0o}v(u}Nv8{N`#^th{w4x(z9z$Wt`OSv!!xOI{HF%A_c z-7DNtFvz}Jf1Y7e=w|Ca%m)V*1SfS6^gJ2x+K(A$ObSzdnDLV9q&pp}@MLky{@)tS zT(Bp0M{Cj=1ILIz!Jy=1cDVHM)^4l0)!f@#Zyq#1KFsf^l7??ll>s)%xrQ$j@L`Cc zbIn^B{XvTEdvLG}wlMcU-SIQ@^O}4-GbihZw48pJp|PiI1*WsLi*qpvJ6q+ zNB8Dr{9y)%j&PznLqa@9=&i8MoQS(EF@OC&?1(6cwyKFej6LGM&QHaDJu@Nj#hi4w zzV6p=&+|L1+-9J>DT+kndWektH;K37!DpX+_V7O4RDZ}2x(OX>R!@~OsV=}@Xb{px zguJL)(r3KiQG3uBWO!l}GvKsGc1l7;(q?ByMUpDDjtre4(d9=8#}oxf zWsJOx$9K2{SK@Z>>CDW<{hZQR;`hpJ**+9rGH7@ZV~}XoA*@U}(GFaQC|w|&2HV`z z0nlY8>Mj2DCW-8Pg7mxYsm4J$kK3Uj!nW1{PVeFuKSnXN>|5O@WKY3$Z|@|V1W^TI z`Iwn~VXrzt1Z?BvqBB5jz+4kP=gEN+ZtHP;{T_n>snG4I7&D0JO7&93G$pjxT2B4bFs=s2erLlQUd3Ry%kf%~yJWOIc&r(!EsMrNs;;7SZ-4 ziBdb2rA&rVgC8w9EvG*C5N8xwWCcYyfq08&2gWm~2uK#k*~$(P{_7bRJ3Wq7H^rxs;F?jyUgnMx^0OW;MxQ5NFuuG_^t2FxMUR zxBycnI8AbxONWmh-*6+WM)>5zO8A)kI^#&C{tc=H$a&sh&v)B1gwg66;%rPEEQExs zQb1K-jjKHF3!V($rd5DSU~a5*VG>%&2SbSkp-_27Vz5TrFFWTs6-w5gPPvwc=9r~| zE2R;ZGDEwtu5}+1BWva>VB3m9vSbz zJkXcC<5$BMU<47dM(RB8UB8$d!_xs@1)PE)5p4XEt7IvtcOTAko|S%U{`~GcuKEVA zw5K7tp0e}F#r42}C?X;79tOf^w+T}kn2X;1>;$^FGxD1Yid%-nABYcI_5mq<&|#eo z&8?wt(WxWOa+KMiW?Xvc0iN4mg~#YsuHZ432nAN#LZfQ_@=oX9NW6&LvHYfs;@K{v zq(UQ|$rPWe8wX$rQ?IlmXOo4NsUnE78HQ69#E}bwkz*c9pTni=&g`}_8_h3c@r#Gz zoQzU$VuoSB=QAUNUtH^YYJf1;tYB2-Pw=+OTVL#c%aJwA(dlZ>Rt-64V6z?7v=Um? z?&;nG4=FYzDX@d-ki`mqwMcyXsnBjAjDJ0^TSlT;t^$f^7z(IVOv5zE z?4t3RLx*dES&kApw7l8AlQA-1+~eJ1)HtNV^q6a2WL}_5!CP=czY^zh4F14af^;cr zl)+->iG}`uNjukg0a#>U(9{en3JQ58Y9Nkftm;NPmu3mYr?CnpF(>ifbh@Mj2+c&L z<SylHC(#F{678_=U1yOm(DV4$^CbFZ#KPl z%&wo|c@9qp7MB;~ZpKpxjSSfnl9%pJ&@Llh5(@I0V<_kwoN8y_VH`Sy5)(bjcD>@l zT@qvJFF!!F*?K!bM~y!g>_QKiI`jDi0=EqLXa(o%Ggy}hNyo)0Z;D5!k zR@(By?sk!WoUN1N!;uvzN69q0SObe{*rSd5DMR@!HBCoRQbK2=QcQ&iE^^Ew)#Smnww-rz+tPvM za>zPL=EQ#$$|>N{yPRA$;E~YEAybxy3x=tYSUlc4sHk1;po*2+F9M0;lp_M90L;@a z%c#My&(&-XWleev09AdE*4igjiy2&tC=P@xqaNVBY`=vZCy5j-tRv`)3_!+Emi~zk z|1IDBo1guAbn@^07A^y4S9kK$SV$601QUvsgd`j9yz-e`HS~b(T7ri);@)u1C4xCd zv|HrcQ8WVUpanfDI0y(;;P*zTkVW7YrcXo2VdiAc9*Jl~52R)|Sa|>HXMAp9=sdnS z&LEx_I~MTZBSr*6qsSwoSrwbsLb#dC4Jr14@%u{+GXiUnMKst6S1hm`wI;C^k3ds| zjO|{IgZ)b2O3BwvNEeqdS)S9G^T14dL|9@d-xEVc3wL_p9tuYn3AaC`=?gmlM7>l2Hm%y-YG2I8r!Zc2R4B} z6UR(Djbg$IOX^mMt7W{4KHQwH?i^aPwAxY*Ts#0wLU7(4TTq(h3o;&eaj@>LX%r~a zA!G?%LobbmZmpICdNoW|om{d$cx;g|!JCi6sY|E}s8y+x0r?LSkL2zN(qynE1aXm_ zmK_UY%O$51o(vlw4$P{eGyD?1YSfKoRht$y@+VJRIxS;nC=bvENe36qTz8;mRnH-S zu0QDLb-rjk_zesmGp{cH#s{8w?bRmh*P8baIQD$nfBm6j*0GIVPsSg5*0tAPd)7bT z*z;Nc^@omGcUqIlyALJl^Mrgx>}%Nt2JU`10so-~uJiuujysrd6*<4kbZghY%4C0_ zQJ2j12Oe}d)9^(>)F6QJ18H$Nk0W6bsvQn-$RGGM*SPQg7bihF^S>qqzyo&BX)ws| z7ax3}#aqXS)PsO$?;lpWTmK(s;Q5|z{r+0x9u095{I9dM@%$2Y&x!w4R=vh*Fnoj; zV0{pUHfMmi^ADxh&S2+prU-cX{oP_Ww@U;Lf9JW;g4lNAh7s^$_?BT1)a+2b0o7}} z{i}jKVs?MP{01&(EGkGpvt5+i#%oO^UDN=o-%`yS65C&@tRWkO$*>8Sx|E&{`IKND zfR9^SQhXvtV5`8?=Rd-Ay>R#y2;$!-G@cE2lvSZ=POKP&k2q$;FCk7ou|4@-a@31}L5b;+owS zc3Nx=qmw6VYY62>Liw6&bep5e?@lSK39^`9{mx!F7n2{4kPa#aNUK~Ue6L*=tgXh; zOABy3s*L}F3)O0vi_7^oi9Z_uf>`gj+u0fF|16Af#1Q3PkpU_lp21}^ff9{tBnHSe zD2~W@=+&GabY(f(r$?yv`3{~d@#3k(XV16^raMA;4(-`p94H%+FH-xNHz6HD@4B=NN{0Sm29(0Rxu%4B=5L_Xwo%1)GCYskDUJTo)+g1O+-O zNb3($zH`(o)H}OC3g^HlN%PYuWAxT2-sJ*JhLd1_LaJ6?fQv4@45JW&NWfTYR77{+R=OK&kOiv%^ig8i^Ud1cG0 z0ae~RV&M6&tw@tWQ;+EU3efH?TG2%0ck^k5ffd9sbdudvx&G}`JY-wdd@V5{nUfffW z#w9`44MwpwKHO~ia}+db3%Qm+I_%q0Q9+aA*%l?YZj+OYV;aYlGe0t zrTjj&KMwGMfBcZE>NWwf2+RKpL>8{=M7R-ywci)kte@oaEfWW@d2hMJ!3DkH&cmSB zGIaz&zvW@otc|qjx6Ex?_~Q;M@pfR%U$}SN^uGAVs&~ZSN9xTF{;zOy%jlh|;5D-x zo>8oDXapTD=PnzEc=ydbo*Zj$Xm8gV#RB z+IJeNV1{-1(laCEO<>^OPh6u4F&rU2I}YYoE`YG(b?Fj9Qut78Wq#CCo9jR$45zk7 zYzNZUj*PXAP(lIIb7TgY**d*?jIeOILU-2oVYTCuZ)T7M>3;Z|76vlq<(&CzYzi}& zv*;SmmIN{K8J~H_n=*YK0JqI?ezj!+urw3lP z+E7zoN}zE4My$hS$e)^|N;auH%k&1wyz&9im1&{^qqK9r;g45jrya(%DH{9yqN+1i z0k6u=b1pFG{P%}K`?y{HS15y$UQ>emF_tRpIK}>Jf+9C`2)9)-`Lh& z7zan^5t-^oN$tsd&Tvf7yyuMO2|5Iq-NNJZwPlx)U1AUqC`BarV~A8RW^%|XjHMJ} zXM~iv>BWZ=n@*T<_l##1riOXP937r{)+zjUl4QsR=SbPdjggaMOU^?U9Tdadljp0) zneBw+V(p9j=Jj()Xzs=U7r4*fdni9npOpf9i9iXQqTZsUX*Nct798mk3vx2Tu>h5H zTw#5lJQ0SVsky0FP${0%+!Vr@s2Wr37N-lfet0>^3@6-af*}_Oh0)ABY&Oi7wS88` zVzpi~V{0REakC=$z;##Z<|^yj#6c=r4BfQn0y)Zn@*;}r-C>bMSapGXisq{Ve!j(2 z(Zp6RUZfO4iTEzg0sU;HZhntLx&6*QEA(7OTPM`($y>T7cuXn`IOPjbs8cs>Y&09Y zLlf$wNYj7v5Fl93z>~#j6Hj0x*Kc zT7mw93i(uinlBf{;#{ic?n+s#-_0b9tI90-VK^z^$NfVQRkp1=wRw2XfmS&x-_XR5 zDmjJ0Si7RY=9}WvvYn``c89?=wIMWPDk@bJh!w&mU)bo^sO8~D;g5xt1hj#gW>(s8 zHhNC2`QcIW95oj?!xPDWXbligfe$(v&C@0Pb>F%;O8V%K#Sh|o4WBUcgD{dUQv3gm_ zcU4mOzpOUpTvC{QcciRjm1#?8jM(`pX;Zh_*RRIb5oHo;%;d1qo%839e*Q?M+R~%X zzi2=S!u5CvV}KfzANctyxF)YHIZWAxZ!5SszF%r0_K0V=99HAuDnm~Lc-DqdOWI$? zHg#|w%>ajOA~;WbV`P~4j)2U=7#V30Ve&A6fE;6YOOFSWfbcCqCbF&;>#QP?6mX)o zFhVP#k#7{CmJF`7wb|aA3WW`(L0Ipd_x4evy76qc-OeG!yIJ`i-c?cUvKL6$7}f0#eGO6@a8rDK*|W*uM1s?*u-F;C?sXbphdlovWe;hS zeSMv6VJ334GB%7zvD<1LWRS<|(R@Jrw#yJ_&|YS7@nh?C2~#$;so-|X#V{I}iS$}x>c`}NzHYKa)f>uI=5 z8VG|50TlMimyM@r5x^+yl;6H{7xCpIX%rT>Zv^qJf?~t(z4_Aq=x3)4+<)3$kI8`t z*+06YA+N(BE;~P>05|t|R87jL-C=_tF9iJA z7M6Rmtu#*%f_jPUUT$~>HG9K$ITdPWSRf~wTP5U&b3!gGx(di_Hy_RqXQT$(%?G)t z442cH?dE`d2DkKRoNRtg_ta)D09e21v0D`Pfacj5Wyy0^cLme!O^*BE5L-52ju7dj z4{xdVM-JCTgLQM0B~#lEN~_|doI*)wCBnw{HbS5@@~P+Vag^zY^Y&Vp^XJg7YDhV4 z{>v$eFG?smTURMHYu7c2DIJy)bJk9a1g-73Pd`X<&TZ;Ll~gfL&cz|y>w8;!&4e$u z*O8BU)xYW-At7hgGy8miQ`voWh5Xj-%>!FH^FiBdwi6^phP-DE>h@6XW!Qr&7DXYl z<_P)utWVrNLA){d2WklOF!0X7)_!9z(JGpJnze^#*9e&DX8XPK3-kl^8e7m@&=EOz z(JhfP^4zE+I_5k$8`N}5OQFssycKA1&xwJ~x!3G9pKYhiA?m^&syk~1tPD+z5_8eE zRDhp$U?{>}VDU0ZC|tV=_u6HfgK)J2?9?jT8seQ{M)-y4oLYM1G!#nG)dH+cjiP@?`OOz?`)c9QL!< zm3*yGV=n7xh3)Px(n)b9Quyx~BuJzyt5ar(A53(+5tA67!PH%JO@_b#vcy|Z5T^l+)9qq_A7 zrNH;o;DN8yj^O)qElN77r+wJdPWO6xN7~@V{p>;CmqJM4dz;+@4mqm*Ne}VL2U%am?H1J#XZj%%66G+V_vTIy|nsFA&D0Z zc-!8?x`g*7q??H!3`%3`=}w{yZFSy4`oKQ(v^#p;?c<)x9jO9`!zXTV7Ht;S5{-Ht z81@%jxxV+EVPj`Y~Va4>PKil!=)A5gg>|H&iR4*c_85{qzM zFMpV)7w`!(?s+40u)(;8i_C1R2?t||O}2&XlL<^$^p^}zdf3&**}(|4jFB@#e}~Pu z(Q7_qEu5B5zc1=}E#3*nBO`jhM5Tl*U?mYP$Mt z@vaKizNuZIb@p<=Yr>G0HV0$tWIcw#HD__uJvS9UQXeV)q0K zs4eR#SNleU+4#ns2y|}5j0rk73mV^>{od>DjoBHv+=!h+TyDzCg3AqfImYE?j0{|E#K<8oH|Am>b0aPek+}^P zo?jy0q6nT}{zjeOj7iz~d>oo|eiN>oU$#b_-;fRGm!whex4?H;2J>kGA>ZHV#3GVu z9+f-n`9>TkJ+2=f6+LES&AjRMhgXb36Jtmep`IV`!+@JQJ9SI@OPnk7^*5KJrM14*Y`|@IiK~1- zpAw4VWQfXWu(qvtt~+Kb$$b1>mVZnQXRh-q`zAl2BFF+AyD#VNb)&VpRW_+zKGz79 zg5fM5?z~R3mUWlT>CD~DH=o*FQBj<+JAOEijl;TIaCGxU=Q&zFO$;hBw8qoAsas%N zi6OeBJ+*GNr#=FJBvc?7RUhku-a-Zl$$MLSbB$wXf3xwo_bBm^1Z1`FBGVTO!`-Wb zt1n96)`~x(t6w)5zXri4wS43{gV1nG>|HORRTbaRl;yrL1ae_D7wLw$nq~yKl(M!w zw;&f2^AHR3t<$|`nG6#9t-%hhxYkcBVr%JH7GUIdlN*H>wf1%e{Ukm|{1|YV@VZ1b zcL#Wf;W@Q_nHGyWu_#iqD(tb%?OZcDLUehj-@Zl-uQa%{6}?*s`pafxx0K#5o7wIe z98*3r%7~KeCAG6TIZj+iEj(ES*Ap$Z8LTKiSp?F0<5^jt*?M<^*f^92LmWa6Vf_|{ zxYhfyJNR*)NjvSGon3ZDuVX&2r;B)$*LM@Kjt2`3eRw_Y{wtBI>-umZc}xzx=IV+`vS6hS#D1crk_}0qNKTv^;96W&_>9*~8pWBJ5h_=87!z;-;c~!pk^;#A zy(G4(E6-L>hL^Vc*i2$$i_oqW-5c;;iRriV~lsqF!P_q?@`ZEc;-(~D0meO32 zOV19{0f6c(r^A>fQNSJiU_NW<^8A_DyOPz&WFgLJwmv+;g`&8HQ8HKzf6QvQ9+OVU zL(zt5eN?1E)pV5RK_$J(pB3FzCPLMAS|lWpU)P7hN>J_eYt-mI5xY7i@^CFVe&{`A=Bmj=bFpCF;vF61D$x{j0sCf~IOGGV-LsYV9UKFMl zbea>Rg6DpkXrZ${DXTEUlE+tbh!*K%A<=>_=M*iq<0)V1(ov=ARJ8%jG_dLpZ!B8a z|1F3X4qk9skcAbESy{M-z0TXa%{^Eb9v#PPNS>D*|Iser2Zh$jpV8UvMQ4nZvi?3U zejBl{XrOtySI99NoKIkZ$h6TSn%IlIouqie3piYdquvP%s5m3 z6bvUORgsZ4pKdp@_oE)LSrtNRRGI%I=&Y7@o2{2I z#qeMe>TLe)c>-sEi}On~BBCo-PLQy4z2u z50A=nk%Dp8axzT({YJC3w^;_8&kI)P#hmbx3v=8VmjovHS0z#=bhFeil(eAC=3Wz? z8*q2gfL2SGGJCnK@PeH`#IY7^J8@ZVw#!_WbzuJ18AF^E{T%wdWVp4o`&)Z=CuRXY zSp?FS#6u)YNhSb(bA-SE<}pI)AE3x=vSTEFMjMDiO-x5+P^TD+ih_I#X?^b=CYA;F zaG|lIRPS(r?ItGWmOWkwChZG2g~TAKTbjVDQj-dX!I-W1S4?BqQ;CW>LsxSvnk9lU3~5on&864k!2TcfUC9o@9p;RKa-U4^>E6 zx1gKYhZt`;B{L$u?=RN-zT$JzyBZ-y|62dL86sDxPIH^coH5&cVU$>Kn_;n=Nu;!v z+WvcYG{6bq8&{JB6$!QN>TqzqPZBNqYtT8!cb!e&rjv^$VgD0gbkR=N-V zFjqti5Nx!z6RQ;-lu)sjT?wl@7$n@vCyPQm>n26R@nAt%JI|Ui0Xa3F4u%aGR-+@; zz{ZQnV$_x$j`6<)yn9-LZr!|JUiD5c61k$!N`TeRN|~_T9{$+t_dDrcG2b4sT_$5I zA&0`Xjsk>SI7e4NX1iRz%?KHHVl+;MSMU4Xv*5mhbOuXlg#NOX!7#JWbJtwB@M`gB zH};ZPvh5ykxKhtrTzv_4D3k2VIm{glz^e z)uvm7UC*MEKFYQxHu`OSxCpM3t7Ik@GnMZ&k!cGzOAL%pBU7$7Vnf9WOj~C*LiZzYfofvsM)yq+jXxSzX zfl&o~K6$anf_<<6B{aqzb_ke014p<_QdcqG)L4Eo`<}j&?s<5y5Sj!)s?AEWZ? z$wdM^$=9kQ$?p1bNjBT=dQ0b@5{3>(qfnZ)RX>2Te6aTBmVyuciisIyM#zaBp$c-i zHfl-o{2&!QGO_B|Kj^ZQ=mcpIMw4JZYe8?VOMFOzwSecVbS|go5(tT6u5|E|Bg!=R zbD2GM9sES`ng&1AyXxoE!B1)lPlNwBApeZ;3+I<=_;RGc&U=OY>mKfgb z8XhZV?>jXSPwjnLE=kq=7cPUE)P^X+1G`18;xu9`7NAG3}EgIH`B zGcS{e(eY&FA{aJ-?)yW8G4fb|6yrgVqI zi^AsU+$Zt+uib*n3N#4r7FK8!NfeUV0H=6sk?TZ>j=g*J(+8Bx_pAcSY?jO0Sx_#L zx)kO4iCj2aloNTr1I1ox1v09uj`P-sxF;C5Om_$g|67-bzZnswEcB*2+yAz8Rp=(tMS>W zlXy$?SqZS(`MDZTu6zAt^zPvz@LZ*(!b*$lH_dsz`ubwh@5h2y9xa04*JWb&YvX)7 zq0i?j*gx%!6aS(-S_HrS7gAQF5CgG~4DuHp+%3!-*^4{GTpYh&W)unR=Lz^&($>jC z1)gX<(}0IsPd)ImooBz>>BFXjssyh+ZKhvLRof3tVN-#Zyz*ewoP?GRFTQ#f1_YhnBO zW<~M8r*j*M086?^w#S+-=8_%SMM1t#?IKpF>Pg?b6!kSF6mL5#7=&Zkb?dsl32i;$ zy~zMcGN-stW%SsA23Nvl6r}*#yONQ_-tYSP z{5Iup)Goa2X5aQs&&2?t;RGw~Z@2E=QfAXZE9nvs)(-w|3^~sXAGG!wZ%3W0E3ELC zLU@yX>)tE`8HsdBn#%znnX7Ek{rX^c|Ld0@(!J20+f3w>@*x%ib+15Qw<(vgs<_~P^Xe|(rIpS2zGv&Q{D zV(o?<)@~E*k?ZvSXAhFCsH#URm}aby$vSV`|E%%g(R^KZu2Gw_5B0j=CL5rC4D4qN2`s1}-#tinDLhz&7~geA!zAcj9xVimCF?%_LvaWFPG1;I zSoG&om*4dU-Rq>5s6I1@^GwQj02WKK?^a>@DFIct*56%SC4lz4ReCOr+ON}-*LQqW zf>NzC_`XcB{=RcD9R4n0gWwfW_!6Kvo2TU$S9}S-xG^%mo zzEMlifAlV~M#0nnAA9ct9rtzK2M#4FmSM@(X~o2@o#sz?=oyFvh!-Ua1VMnn(4C8y1yLL=vzO{YVDeopSU%bLO#+ zrS43nQoHfHwUtV}gunDN$^W+h=O$ji^+*22TT{RE=HJ@;(yr6LwRe84Tn~`ozKR2Q zgXKb{Qf&k{s=tP5H?7sp&IKEoKMdS^Z%pF#rASPaMPFcNHG~#9{nB@^jOlxSOAUUdw+;|NbujMZ9{AV45DB%cWAM zciolx1Rj$Lor_2yKn2Ty)bo*w?2_}OJ--{g;SL8?cU`LF#$4^toOO{LD!he?3`0s0X6!OP8Ec(yl{dROF?|Mf85Px=pn zRO-wA_sHh~9NEyov$vp|j2HElnC<-psnin#wIVVAQ>lMLcxyekRfMfD}u8 zjD%(ozo1R(?fCV6CR3@G2Ws`&GM;f?@gQ|Ke*YGJy`M>fSHoRWDENh4ctHdrc)j@b zekN0?KYsgU>gF}@=gB|Y+H-d>nR>SL#ng@0p3i;p+{LXuDLlB5 z`{J{&{sn#8jc?DN`FC4;9_4bcr=HLKyK`HIPU73vp40gE(xt6Ki&Ti8Kf%vu`1y^` zZ|ymUPtTrteTzZN;X;ADK*j zZg+YVueT1Z;meEkaV<^%Wa*!P-t75Vg8Z5LUmV1@kG}lO-A~?q^H(6EmtJ}DzO}o1 z0qjShbR)n2+~wDcFOaz2*xdcx<*)quM*wi{;v-vo22uaWD~)#?`E2vp*uDyn`YhS@XH-8S6 z;?kv$zTEhs&*fhK_SV+cOR%n~ul^zadG63Sur$!#x%Mhm`Z85o=SrWui(uV>k`G`0 zO7reHpm!K=AO7K=#N)<0*67d8XF(hS-!u2*9dlcI=-CTIlpFW{E0le1*VZBWwsnYT zv~`Gxbn`x-@$6^rdGRp5Jp984@Ne^>b6a~}M)@1Luiv=)#+#oz^Xj<|-2AVpZc*#@-1Q=%zqMyGm`pvnwY6s*e=l8n@y9@g7k>i( zZ0-31p4_;%fzQv~y|w2j_}eCbd*SElOX|gI_;&N+9jVmKPXgst%zdt-q{~kI_{~jI1zbikv=L!CE?>ztc;X(d$*8%>sFUx=W)A;i-TmS@{Cz%m_lt}4{iCnGzP0tayZ#|?+lBvLpqDS6#<$PiHHm-UygT*s=kA)} zw@@QeujfAcWmI`#H-G#CeB9deE_CO`kKw_SyKWvsk1jolt_OIy_O87|g)}}sdz1>K zns=kjJE_bX!QR@F#XE?@0sQ%mSC|Sna(CYVcbDrMuQnfe_S$`SHq$pI?>`#c^>^RV z*mHC*{dw!rUi$N?4+V@ZJ;mP~gvc2Ha z(j6%XF){YWp`XO_tuI}AF87sZzqQr8XR8VJeg@AjeQgy=|KE`8K3jTSi*J1i<+cuy zT%Zmrz50Ca)pO71zH$!rZX8+{Sm$nDK(*&`f3Vg3%GQ@efSRvveTfVTRaN=ENn_)U z+#lS0JJ5LrjlF{!ldc2Y&9k8BH^2POm%sVtOD8Ym@x_;3-#eN5HTvg~8{aze+4|dV zya^h6$JQ60{oL*&->&_~{Nr3|H@f(1^iRuDTl+o_Ouv91q4Sx$Rl#sn*{HNNRZ#;VUoxgYFFKRuD6JL!ZcL^>b@NBQiD77$GULXX*NV^GOJFVmsT=<AsVn$z9U`DNX43aPx1PT5dHn8w)pg}{bOk-w zYJTfR?sWzIT<%-8cdz)Z2x1>F5_11m^FEQ-wg2)ykc)Kk=AWRkXFv0HmKSvUPNK@L z)X1M*y!m_l<{ota-i!2e^V9s`{>NW|elQ=O{rY`O;b%+V!l3ZTzo$FEvV}_x_YDe`bhIzTYK)o=aJX8_S~m`@8`eh z3(CEn%H_T>l6!6BwIknbzUkLy0r_ih`RJcE-*n@%pL+Gax4ib;A?m<4zx3Q8YT)tw z!f!xp8>qIm?;8L6H2?b%{`bfD-;eRXe~3cx!=dw3$ za@UC5x!1OuL~Dq{*7Lb?E;34P|Zk>9%cKYw#;>#KiAh2g2}n@0;b=F@jS zfBc>s@B6~Y=Wl)tuW!8Xb$t49e0piUcQWejE7xas2*mJbNpCQ~3Qj ze*X@B*YW!}e$V6g1b!#z7i9YkS4RJ3luw_uD`Di}(G~Pwjf& z&+q-SFMRFvV^IH8YI$t2iPO&Ni}liaaj~cukkl8ilF*cyFMWR#X!cJ0(vNxn z1@ApQAA_S#Kj!_Hz4!n62Pad1gkL<``a?`IXym896?-S~Z~TYez1r)Ze;sm_3R0;w z{nejuK&EB_$cp#uZ-D=6c$W0@{VLyof7g4lmAYD~V@vrN#8gtLU%qoL^5n=JC^Oe6 zp2U*tI!e4hcm8bd^vLi)aUEj*gQ;W3(#Ia0xo|AKjLV4gjas4Hs87yJ)*Hpi$&1I* zD)QADo()aP<4aRhQ+S2Nm-2ERnZvbGVPmod2&fMV58>bAwhC$>ZKhR?NTb7(05SPk z>ZgC;*mAYm5DZ2vtWM1jO-`j!??c^kC0Z57leNX1s(za2gERG zDmlXLh)O?v=doiCcFP(@^8-^kFbETna}N?*@j?Ebd<;ZS~3tNGHkGQwp4IF-+X z<+QV)P+P614(!S=%bTZnNs*OQ{?X;l22vT2Pm%hGYWE%d5wAB= zce&5`QfeH~s+E=UYGV!3SEK<2YWe@5ZoSkXYrlb{(^9R5XdSRBK8bX{{7SKWC6)Tu zD6^SI?G1{brc(b_zOTr)CxKgq5;O9f)iRDKuBBcTn0X|}Bl@}4S&cs$D%9M|`jHs*2a`c$1# zXy{X_4t`8uyT;eqiG8n)B#nQap3!{ae|g8R&(Ii6KQxZhIGl!m^4C9qbtr(i4u0-1 zOCKL07x6IMV0ubF@}2@snB2E`zLxMDp&|#wgG0|hhVMT+i8;WXsnl1bfz;=xQz?qc zneW*zq!tAJL<44?$amDEbAiZT>=+J%LVQT#s4f0uaK<2O?uz;jc6 z26gJGWrni}cxBXuS;NnHyeXuLcpCs>4bM05sg5#5ZZk+-#oq>I{nb)qI6jzqi`SQn z47U!rrVm4@1E@O~`j_e*PThlgL@U9if_B!ylLD~9kb^#zflm>iD~zRJMDp{4sCOFA zSGmSCTG~uqXX>q@76#(f`|zyBGzzfzQ$@*Dz@Q!y4f^pr42*{GFXjS}+Fg(X;v$t2 zJPdE>TRVIPfX6k)cPw=;;G6@TDq3!WW(}`5)Q;;pI$dwOkn)?hPuqj`nD;JzQ?!;xzoL>GSiw=BV4Fy$=rz4h#S(n#g=1gfRW3KM>)>ebHDv1to4oDn{iW;kaG)w++RF0brIDqF3qz%$!zJ7^ z1F}T1Q9Q>FCilQS=f1l76X&MRP0h@lI{V&7AJq?k{r&rk9yH)j?n2yo@V>#lg9ir> z51tr2Jvcx3_+W9cGWg-a=LY}5;0uF4Klo1ve{t}o!CxKx^x)?Qzc~1n!L7l&hu%HZ zKQuY?zM4EowTdFVer z^q(KP>+rpY-*Ncp;oRYKhc6ypJiK&x?QrFA31`SjgDUl|Dzu#>?`Qr-u(W%W7G+k?87Q8syY-~0g_Isy_Crj(td4kSjMr|v}!!E0CtFTTAw^avI z(mIW(-BmhOLH8H=->#`Ab*5^oSNKz>j+^4O!u4&G=b|&E6^gK+H{CVDm1cQXzl{p$ z3E%X+ohnxme(0KDB4mrln=31&TB#^sJGG{jr45mfE6ipc(={6SQw6INP&XBs_&TkNW<0;0=?pw~Elqh8-urTN0rda1h_ zxhtOOR+{m%PWXi?TD!Xasx}(eT~!l`Gg5?&Gba#9b1}M(cv}dktGHs%V&1AA8*n#p zES^9f0yeBz5~gQ?9;?DyhT#hwrM zY+`;yn+(&-qCfTEXi%uZRA&2*xR+P4XM{LUZ+RZ%y+fWYmj70*W>|V63TfE6vI>jS&F_%PUy5Xf8LhY3e=@&s;eB{oXs2v z(nwB|q%8CZgJm0clyPtBKCaNs)121k#g zU9R01fLs<1cG_DnfaDb&57!ZpT**O4t%FANFMr^GOcT10f}U%8&I!1=-buV`8+*~j>qZ=iIxTxs;7r}|!M4vJWqhtWDi zL>7mwDF$frMnpw>VGIocA*^gu!9*~8=ui|k9x>4gs4FY|tzlKIR`HPqa}%wFh)JT7 zwA2ox7Gx+rwdkK%!*!DdY=9`iwuu9p6*Hdc?^hcF3zX@o-2AE8vs0&` z;0|Y2$av*Ger_hi7~8UasK(4V(9_q$#O$#)Amjm9%h+R`3P%`Br;0K(f+#KP8)pP` z^Yqp*fUK*^T-KBXax4(mcoEIjLbbpyQBkAA7+7`EcokXuDM*t@m1=M`ykXKlqwd-- ztTc)G5B^$+S)tg3=TF%+V7tAZX;Tc%ZmR)4fPlewWZoPh44^+;?AEyxuwy zB5d5Zw*7TbV;y!7ydJxUNnMU0s^fUL;|@Yw#E5!~Qn+^18n%W3L75H@(b@EpT)p8D zE$;DVsSw6CE!(z%DRqaFAe#{kbm|%;ddEha5DfR56um7fTuQ7A>SNdr@>QU*63W0j_LOhzh=m276b zjK!^qef9B!{K2fl1mk4UF=6Ic<}=L~B8~e`TtiH&4oxKhgMkExw4S1--Xcy1sIDuL zGM#AQ!PIbx2p#dF7CpwzLa~^o5z1O?k}DlMT7X0qEv-YN9YpHH=anjwn8<}Th95_} z)NK*Za!}Kz40qLtBifCcKPsz@I#6g#=}+@MvMoIZo{Zpb8ZEvPl@OnWScp(m|3tZ- ztI&MD2tSHkX8VFX0IxpHB&fP@gBe4R+}y`jgwXmnl%UEqfXEyUJ!GxinZC*Vzjt4~ zH^7cr+9tbPMRwA10}Hs``r5SYzntjD5^=%{O(MEo+d+c9QZ1R@qyax9_~Iuu603@TP} zY7wyr4p6;8*spZvd;iRLpnX|wJ5R5$EQIJ@xp*ya6C_dNscu`#-A8Y^!IoRZ}TRFD|J z2bFlm6#8EOG zxH+$J-RpE+Mh8d(9ia<=)^fuv;N(YGTbKf4AL;@7v^YrwryGzpW_w|IZ%u{4RRS6X zN*zYVEl%O`NJ?y&^4@qz#gHdaC+vq1cK|NPGtHuV4r;g)14o12#mZu3rd$lJ19%T2`A-X<7_-tLtsU=($ex=Oue;n#ar!`XmTvb_>-0KTe`G6Qi zV*x@hLv~&0bIc<}Fa{mtankF*Z<^UcM~%N1C5XFW5IXh(zz1umNzZhkA?X%_^;GFP z#*py%OuG9Ww;I%_+Hb;+txZdFVY(497N&k*@buHFeaUdrYqiZMHLlisjIR1WhZ3y$m?S7`5|c@^vsU zB;uifiBor`*zpJ+Pj}|p!XtIs&R8-nZmd<&7NZFI>>(H%5d7wy+vvs|S|g#6Q%43j zC`2l%yPhyZhu`gn9T13T%<-{-$?c}i#Cvgrpa$yeMFs@nw7~?x@9+@9b5DXy zYYRq-iHF2$A4!rvsj5Cd2_>UrOsE)CEE=;jWw8}Q9PEes`ig^jGZl%>YdwOSZukSN zj;&Y`#8u1A4UUMG4gnlvNf+2fumdT@J{&O^OG^X75AV?Nb=;lG0}4J!|N4#u{B$B1 zJQDQx(`W9EfTzN-@q~(y&I#?$aAX^6RrucIhGPUqL>HcTy^Q5n zlbnbD+^cF#Mlfnp` zD4-KgWaM?E&@y&7p(`8yIyQDOcmDY7+^P9X`Lna<&(OlpUg|JW*frHZA)l8p_YvSw zb`o3l`mz}-m%N(hBphN2XnCo`?`RE;=dDK9%p&7T2~#eO&s!yr#as$?Bw!}8sZhtY z8sEi?3MGzmtdNZXqfIhz=;4!{G|R=ZQM(r4XyExhn@1nkXn*;)$ z%o`Cf>&zL5|19Sd*mMM6Qa^CvRBoQMp;!go(%9C3n=L$_G6)v-)h`DDpn!lT-Y8P1 zHb_>&#>U{QvMpj51TuZKT*T3h)+__SyzJUs$Kmr02q=wEVzLw7^<&mH7T`v${He3^ z`7=|G0wgeFU3Cr@5HlZV#LVVyP8N8`OVNfW;D@c?HoQ>P3X`i%ISrVZc87MI=p zI&!uUg*&)d!xZ=+IuAp&fnk+>r85#ZpqLRGW`d=LS%c-$Ck8Udo8gaNmmYJwkTyZ7 zKNt-|z(jz6oi0_deHes`l2%&UAB@7Ja1Yp0%MfZnI{?fBumpfM3fC}XSkS;gOg~$9 z<3ES!VIRt1z%i850N@M9IGb%=Mv+e-6r_M+L!|=9M^eKLk;3SNrOxo|QsM>IwE)+3v=TqlPSce_Lv00zB>JS*ogX^FgfI7V;DDZBe)QBVem5i zv!q@FLnb+ewm<*~U5Er}OVTKDGFSvM2FOboF}1tXXEKOw^j^lQTrdvpG$sQ&h-I#& zY8`u?DyLWbXDE{nO0J%*7aiAmFLG_)13PA}rM<*BJ`h)UdGG^J(pICB{d5SbGj zVEV_bo(?m~2(d*HOQ%VCyMCA$B^*!^@;5Q7|2BRfhXYP%?{)uvwTW&z!>+J&rCVaio zxGqjyNY>`?c)GgY+(0a!!v+cXB44;Zz}Oxc!2MxVR=*xBlTC7M(1odJ7==_j*;=fcu#~GiOaTfa0}QB5zP+<9cFOGPL1Lm42@XJ zD|g!lU#a$YY(YXXOp=|zN1{~;4hb!3L7+4J71JHg4&{UeCLtBMQp(!aY=?~bql1^~ zje0hNC64m7e7TP8n%8wsXNM!14$UDy0{OC(v5?_Y2dHt0+;OW=RvcIsQr1vK*ekyx z4}Z*TsYpWxkz((pkBVkmOA(%G%Hj?gQ)2+O(u zZBB(bmdsQ>T|ha-`{L|!Ch+E_ef+(RUuG*z+d}o}n|?`qYxf$Y)rD1%FnxXFEyxFFTeh}-Q;a<22qU_hXMgv~Smpu<8!mK4sq=^Fw zJ6|ys1#Ob}WI5Y`Qy}p*`eh}N?PdhAdsgKhozC%gnHaOKN&bZL3{q%uGW_C>lZ=7$@|_19|10F=$a zNUIM<_$?nQ+JXXTi*|K0rWf0y7@}>#EytO?87&&%X$)A?7B&L(h$d4MLa}cF%uI_q z!2_s}<=8~13sET4pJF+%m2pR_o6$%_xxH$u(y4|c65+H>C*aVzlP-mvVk0EN zlm(=fU`9I`5N(Cv@FqOJ8G`0scU+d8b}cu!V7QOh-8{p~bK7XHN2@$GtW|CBDJ`VR)QL29h&9MC zAlI7n@{w5#lqshLZLr0`vEiH0KPuhdkT`!_1L!}XzJb%Lj9*XTG{JpA(7jfV1 zOMmWe;PZ4HCogR9^xL(|m9f@|HY6xYsdo@Q zC&GxCjLiM?Ipz0A(3MvBQHe9@El@OI0Cdq`nk;j~nNpBCkcRS2u0Ubwk53SV&_!zz z>XO~UAZCTi<7rq<6Ua&Og|4b-a@dJVd1Mp`R2s$!Ml}I|OC_LgG$B#;_$8+ygh?iq zDBr~=6!kGgTcg2wEV)CZ!~2;+N$-Hu7f7{>JzJjg1F`3FS{Fq@($`FHK<9IJ{ zh;zgUeosLE5v$#rLz*vxKtZ&#v4m?GXbD?xh`>W=ok9_3PkcFOtIqQAHZLh|wxBl0 zc&3|;mBVukLBK=FF~>`SpP`~O));(1Nlv8*CzEOF2j!_)sb_~lu*e)d*d!pXUCE21 zJ8MWrrT6G35NEPT?$rQaY6H)ik-*j)&|Ij7I+AXJEg@VeWYPdnaFkp$5M#4|?dyc3 zrMq^6*$6CzE>uDi*mO+i2c!^0(Krw`8mI#S1oDQ8R|>T<%`D*}8>*Q;pm_o5L{=U+ z`AisJllQo?hO_vzaSsjz{X@huD$Kd^A-*|gDF_<7$l?-HNFbFAuC~ky+;^rh&b;!{ zjA^&r7<@T`gKpUvYNV2RPl{=RQ?3ZpBc@Msbbz}38h-S4+7s4pZWezJW|O9X_Et!> z5S+=d5x`WNO|_~xLDr%PCm}r3vx5_O&Dn^+=KJU*UJkp-`LiG>^X9wmuvZ%%ZFMB% zw5&7eVZz^$b6&mWnod|r$fNtiP;JB5kT)mNYZletA;)1DK*`DtXsdJv)1vqa4{5H(XtQM5We#2o4o;;e0WdGtB8%3 zE)p4d%WjS~rjSkKq1P+uq3#6v3>_;*vzKj@ex%%31I3ftSVpYCYqG96dWl_b(q8tE z@eXyI<93E0(RpUlIhuBAsf#$4qG;U)!ClWe(T+w0o!SWbu&fK`U&-C6H5W+q;UJhlrj{L(M0 z^DD1Fm=R(kD3Qjm627A2AbK97@WmCz;Eg#F~5(&o9%K1f{`2V&0O ziNXfMEJQyLt;4Sc*A{|D8i&)vRmm0Ch{41QI%r?p6RBl1G_JOa1JnSU14tCCrBRQTe2%-3%rT+2&I7 zvjxrtU+dm=M8B*1acC4|TvNFg@8v~nct;kr2?8xdf zn4wsDq>m?SMDh{@Ie+vfxIB&31Dx&p$?|%cu1Cyk;XLo;k!&xg>dN}4a+L}tk z3$39b^nj;0nfgp&d3J7~+dVOfsa>E|A|i>sCNqWq*jgu27}O;)d4%{42*>+4*s&XY+uXP?QBx z6&Y-Zmp~XmPy-3sY0?n8!GPU#WC&Y_NsE)i$iQj)d9zNLE*Plkh^9P=YMvHH46msy z+F>;CSD3~I#GE)C0-`OLAtIrkou>O|Ogk79CDG)6_YeURIp)|{WBD7k$siK-g(7e0 zAVxN}3TTJAMuMSlsPAsjYc-w8X7mkHhUE&9bOobekpxWVDcH~|t(tL;+9X2)fu{|p z`BO8&#L?i;;OO8WZ#^a4LitzISo6fe=FAW}H;epN+}gdOOCBfG3M%g6vpET>Nivnd zn8(;6`A!K~j0X=5;)mK1Va1@r$Q%tO7Zr)IF_X{7Tqo%Y@mkAwD9%>Kj0IYSo5DzD zVl)KW_nM--Y%|bdgCyopIvL`@Q(5h(B5L6|XtYq^W!=Z#yD5rJ&ajGLRKNohEoNtB z0KeDaMO%K2r^lUCwQxgl{{#X+k{qN{3OsRMJTuibMv3guaZ{euT#S~b1WOOD+oKa8 zjiI1vUP8kFWJ{1`NGRf2o9?mmfF?slk6oE`6j_op>p*yya6hd&k+o4q6D0?n$PR zh8F4SZ z&5PN9&Xf*Dw5GH}GOuPaJjxPQNh6?qKrS=VKH=cEwiRx~!Dr3%X%*>9QfD+p(16Fv zcCCTiFBMg7(0#jw&S^_FF4LmrTkRuQ7nK93k{8v1JgLz!9*Xx8rcGZ`SO@)P!n7GV zSW*%iJSV9^91w&lr?{XOPf(|j-%=y|zGW*>@Q_$>xMHe7Nc&8W)?}k12g)F%NZM?_ zc-VPQ2|4fUc2JyguoJ=;A)ro+6A-3AN|u8z9*Pt}A>8Qic93FVag!ooEE-WPKyc+} zsc0dvWH9r1PA#NImJ6LYO8FtkH^p0t`}Sn^X;@-_%I%|V{r1TUY(m~Vrol^(Ev17B zJP@LyJ!$NQJrDP8Awz!NT<-LV4Dya}B9Xoa0Anv{y-#5wA;!ZCI_9^5uVRkSPw8H8 z44DM>S%{M|Qd$EUB^3?cdLpwqrj5vLd|@GneM3I!Uh~Z##TIeS0%h!y<4Z$WHx9Ff z!$BjOja7vF0kVnl*=%{CWMdz`hKSs9nu*%eLLz_m2GOw1khh_M&>lo-&~f}=iaPa- zk`B~2q>D?a;^b<_%^d36s7{&tcqXGu# z3$)CTP4jAl5xzlA(}6~CLJq&O2oZKN*XHNwjLniu?uS73+0IX7)m_@%4%aX6vPgoF z6sUf06Gk^xTK~j-Vq|nWLMD!*;$d|PFNQe=PRn`(yop*FnNqyR0C6N3R+~=_;N=2IFr`pqCR?5Z9tW z7*!{m<7O{d^p^A3j`5lGSXc=P>vac`ESxM46w7+heF&6&ZvoK~3|m)?aQH43_V^lj zEY1GXks8UUo)_fkIg-ptQ1|=!Y&jELHluwN0R#Em`e?aZIzKK>Yd${i`}C|hjRJ+w ziPNd9#L8gH$l(s30?703E?DBZ687Ab#8dmsDz43I4v&&-UyTzGO2K}7;qgTr$G$(i zIHsTa9*{#btWEA>A~x!_W07WBn(89n5N!uWWtMB5$^_SdC)0KfhT>EdSa%2 z+o&Q_s%=!T%SWB+NNin`NxWKO;v{#1dT2O+Y%e5K)lHld%r`P(5)Lsy;s+C<=(#rG z#YY|glh=Saw9F-XI8bpG1G%}DLY{atfAz%e{L|3ahR4|lhp7)uy!|WELRU}f>H^**wg^kyt~uR`=z4(ic4VjC5YWCp!w5Um%$nVcx^oc-1_e_w zqvc7Mvg709ncVD&OwT+IG>=Q@A}nv<7WG2qh@F9Ly}-wNS;E8tpv=`Tg|kM*F87Gd@tzC)jYl7KaJ4;euI3?Q=dvM3 zv3~+H5u|;VWxbjvV0!I(#3-oa$3b6LSR+^&(sZ6bB)N0_{lq$9cyJZ^?Hv&e0isDR zLNPcW_#wk{d~|RFLkFK(=yAnhOa@8! zL&gP;yh6d*U4g;;lUf%jpf0%@IT}*1{=Z$=@!TbP(xGi zY|xVj7T=H?SiGUVfJj7Xxx9i?+R5MGHIl?mavSv?Ew19jGA~200plby48=B@Q~#|RDm|a0=zxQ$gfelwp`*_32N-9qh727NVaz% zJpJtCp-fB1-A<$Skli*9t$4QDIDxxViuQ$}pad;EOpLdS0TDbAQoZ-|?D477`Lk1J za&zaVrgKEG{OUTcL0u=x8ZGuS)V<9RR==c8TiQNH5)%E`7s}=6W4rhh8=m}K5nfk9 zN%Zwt_R2cp2`9x>golDqz3Z5iV)OG#mAJQ6p(N!h-Q{YsDl6?oQZx zb2H(HyQ|v<2W7t;H$$uuup5&WW6R(qsWQT=$OqAE!%x*Cdav=vbA`c@x&}*yMB+-!; zLWxYdC^LVm$L|oEFqnC7c!i^d8x`UPgSF_%MOGGeaXLxT#I`5Bf|HSS%{ak}vdFBp zCy1GDgFb6|Xp+cigR^iJEA7mfFeVFj*ty)ENAdp2;(cN*jPy^*Sp@NFq<8VBhFRt| z<1m)~P-E#!0`7>H021!vdyEX#=SsYBThTJyr>87Q*xP^*mOb8pivzwHAmY%e*7vYK zbBaQfJ6;fS^My`sme-C%+d5T{=xlsNs9X1}RpPsNL_IwPx>uAg2oyifIA>TZp!0xA zk{sop+K899(`L}obxQ#no!b{VLk%m@Eh5d3=IYXua7c6piLdM-d&7_CNNH#V=1@MN z&HB|c?l_awZ_?>yI`~jw+H@oYIGFfm$~b0*JA+>6EiPnJlngS^3*6pYcnYUSv;!|( zO$M&<)t!QNQkD$fz26D;YKvo__4!UfdY*C&toN=R=%S?bj&+lnX4j`@nROJ>;(Ks7 znMQYJDYGfxEwbZR_#N5vo3wDsSDKJzSZ(rKL;go!U~- z=a%HN(em5bil+hGlKald;hGM2n_4uAp?|IabDO~X3gUeZO&!}d^@fkeB98H)iKVco zY}Q7C8O>0x)*_<^6?`KG3-U#Fl62w_g?zUkU_Fj>8o^aQx{a)`;Qr-!BEq;H>@~$1 z2*LZ1zThZgSC`x);{wD|ONu(+hwO@Mq&A~(S60T&R@vsx6dDCHV?^*d1YO=4%SE>i zRmF#}hVc!tP+eds)=uyfoOXhpvt&X?_q|KY)&-^xreIsN3B=pPcn6lTJ$edI&{~%H zx~A z6kNQ8-3ChY!OGlOGr@(N+qs>YJaXQan-Y4BahyV_nsj`X(pWRC#g&1|CGtTc4@D>^ z+D#x*&oL8sFi<7NV7?*vV5gJvCQj(S9zA!|CXC3z#J0;m5brL=JTfGkbhuiy@0M<~ zl@_!!lL61rP>&MqhzldzNSmvqkr1h>UsM9TDU5iKlpZFh^dX5}YD9&}6~O|mUfXB| zD)JISHK_SBG^{2Zfg3lNp(oBH6RJAXmxxghb4ZwDY^)dRLP`mr3XRk6YbA{>xnkw| z`I5Y$L$;|T1C2r}VFU-A#fu#L~d{#J1eLF(WvR2Q~n8jq4 z?`B+TM`B!0fNe&?=P;Gcwn3qtS7J{06AJRE?(a#;JWVuux*z}gP+c84ff#fzEYsqY zC{4Hxd2^Ap$#9WX3mcz&t{arfbuJoZ{0693MpPjT`<6LxTJ4(ep$Z9HPkN6W%Z@yc zjG)YS_sk!u*&387=rpCXEic;P2fy7Q%%WgRgVTuTapaK0qDGWCrWpq8g(R&dXVeTZ z7E&wf(oM;Kn2iQv+MuRoqlgJD9a>tfB~tQUP|~_g_mDx#nC|K@5biLfU26JowcWN% z^v5^-Y^Qb1F&(p*6?Q`vK$>x=e?s=EyTRJAU#}~`SQF}sZ(DuvG(xee@$Mwn7`B@l z5f;Pj+J)>pgvdAYVVRvzk;hZIgAliL#%*p0K**e;FeN9768p`Zlg+qh^Ckl|d(fnG zSpFPsgxx-@cs3A_WafPj&+RAyu2j?G7(2}ySw+7aCW2=QwWo^JtKVId!E8_Ffd?>5 z8bja>lsHnBUiB_k7Aw6y1DOW`(j{!b9KgDvT3fF;ZNklrSCD!+k?EsaQs-11Crr!O z7Om=gG~_H?FTv2DP^B6Hz)Bjgt&UFXs-C)0?GEk_P!57#=ys@c9t`pd04Lr@C?GjB zW5E+)kAa8)BMOHB=M&>(E;`IALOZPr3xzGIP3-F&$UKqphsgF(0kOtOo>7NMm{<_; zpj8CK)_WXnB>+z(J643b@^xg z5d$hVlN=gf&-6<%F|22;j!E9*_4VXV&5Aqebtz7f);J**A%qrFKtZV$b#)^yuF71!%J|Iqh=zi(IF-FY+4A<1h|AiM+x_Wm*1~J z*02fk^EiD61XS-eF&I{*qY0|yg>=2T5{~pux!uueOL5YciQ86e2pGI45%IX-Dcsmt zEXmd$&CT!@C@%~_>&Q406(Ajb*!i|iOI`81L{>xgCK-mgaEgefHZZ?Y*v$HhC?=B( zji-k2=%IY72=orZ32pVT(RX$9M`NO`2|BI$X&SiDs$J3{GCU|OYn9yC@IAX8d4hK@ zA<N+ve#|E=rZiZ& z^U8Q@I)s{dB^_RgBxZ@Gx0;>x(V3X)j3vW?f{@C?{nWGbY#NQ-Ssg6s+c6|KUv~Se zDWEKVBD4!z+%TLF3=aLaM2O6T&2)9G(se-W;8k(-?<3`6V-166bUma&FY|n@PjodT z^a|6gsNWLmJlPC5q41%|@?mYoG?->E@~z)qMwVPRG!l^5xO8x{_kCYocfSREk02e@ zgf!}S2;xAG?{)=5S06D%zIt%aXKB?QGZtS1iH$f6#p}-gV3eGqQ0qpjX@!x3fJO>> zsHAwed^9Xcd{Qb@(Vr2hSIpuspAC%8!fw|k!V_MIxKjhcr@ay+mGM;|@%vEgC&S~(Zj(Y(=kz${N+3hOi-g9Whg7BIN- zmx0V>*2>$dmufI@So3mo9UG_St-fPm5sd1_wHJIvPu+bd);`JAoIQSrLopg#u%9mS zB&9M0pkTROG2_**06$PpR|R$CWHqmjkP~p2I^yex6qWpaPv!b!R;aGsfa%$Z`49tQ zfP4q7hDU@}HUrkflnTX)+$fSYktGRM@t*GL)l#v~8&N1ghA^V#RrlrxgOBF-?L0o? zGmluwCr-8(RWh0WF?+K%#IfUejMWH;(?;PMQl9LS_W1LxUd1iL8{cT%1A zqC7l;Wh}RB$uW;RA+{)acs{_DX$V5o@C9@ON9)F0MWI3iib27-5_XnAXM-C{2i@kd zKsLj4QulxtMIGUI8qf-3p4oOF7a!{$>5$`fWYXl5!_3>;)+I}5tRJ{8{Yf+ujzijd zOa8RvgGDJeFi(}mm+=w^1u4VRTV(Vz zo)G$|MmqeLh+h}M6f>99zc!N8-kUPhVqu*QH+(2Q#3}iuWn3ARV4=G?W80X^om4dBJFRbv%UXzTnQ7l87SD*-2W&_HIaYVo zuta4ru6^&m{twH|z|YX($+T`BR!mO22|t_(XA|0Pl1YuaP*zK9l!L}qzQ0_~Q70;R zQo;QoiEpLEypq7V3?cR8Nf|q+o(E>#x2Oqb(Kp;lL_4tOe=NvYUcVeH6pX)kIgWto zx{+I+_rXqZ@{d#lEirD3lsq@RdRX27$C zp6cvy1)}|+5m=E&)WXu$tVgu+LC|y8Z?BeG0<0UbJ)t*=#>9*{ew2EU1u#NFJ0aFvwE*{`wGUY6p#{bG! zFimmmq)r!ML3J}E`*hYmf+RYX;p|DzRAzg2Fp?nk1mk&mGv6qzBBx&)rTC5cd>|35 zY{HZgbFVRiGDMkIfI)7iOJI_SXQaoFnOK+`4jTo%se@!RY;L)E4vV3y$DCBoT1N#D zxu?!lR@nh#5G-n152S19g&NQ%l&Ii@)Z`>uXimrtSV|h^D+(q|7z+qS@R9JAkByvd z&<-c5L%m~RB8ZET8`8$*f;57w6!EIXa5gtLJ#{WOlb<_1HFq*M7d#z(apCN#>Dif_Ea|aEB<`~C z{TkHxl$16>LUUk%$hC?$3Jg8jiTQ$N{8v=5#seawhNo2*>O2GWN609{A46r(Pm33uFY zM<()gsj|vTMngb|@H5nrl1v;gka2+G7+4X(Z_$BTP-s*FbMOPxiEjC|1c#A zrcscuBE;eG(`)5*oXreVs-X%Tj1C}DL{3Z0$vGfd?8`ERa1b*sVYmmV6@h5y4s8J1 zG7Qh@x`WG_>jgT*a_O{$l~241%&5>A+hx1XSx4*eb?mg0Noe53i>q~S+c8m60^EvD zTB3cYX3a`L#G)y#(GIy*W8D!*t}{|pyJFNEEH`#Ky62u}<9zO+g)uEjF?Je!tKy}j zP#c%;aOa^OXI!Gj-ZK)1p1=U9b=9q;X!Pe&+QQE zYjCvM;7qRtSuJ?mu#84g6KpM6p0G`uv9{SNvEhokh7H`%;7W05t%a>|BmtkDEoM$Y zQ*=D2AHP0dSY;LPa;5`e)%zzbXBBw3V zfM<@{L?iTdC*xnOT5VvwZe`Kya!9)%1C1QEXh`ohAeD`_jLALSDf?3hVMWsD zRMf9fII(g%3R741dRT=7BSdS9c{^&mLPGD>{X1*)B$h7hae+zeV8$)3eK$pW^xGIk zTTm>c{c7q(wLpepTg<~r(~(2r|KxH;CZa(*TiP`qqO{g)(;F=zeR0LRF!ao7;XTJg zlDx3^olHePpUya`J4+!|%g!-6CzRnK!?fVu7mQ;qYD1Q~1D4`@3XbyG%wjt%cL^$O z@oVeXc7dBW*tMBC-8!DG9Y;wwYN`cjkMFdYq3!MsYEMK3>X1?q?g}H%Uhi~8vpsfR z0}ewds2L3p+{)so-^EA}S8RZ7l4i=}K?do~LJhaC(B}g@f0n1%rGVY9rQ$h$OYX9AdLlnA$ zNo@;>XM15R{6xwm7$V9#$CSb2jh|_G-2}tE5gVdGUYp;^2!gyY(ax`d)ugox+!#dE zGT$JUo%cE5xN%2+MvOsWSI-zPwk%bvIHWwe2p##u9|bw?VQ@8Al^Wt4-+x2#sox$ZZ-g6_rO>n zogVlWDjN$}?nwEotP9<#ev31gND6Uf5^zL(fv>a{pll%AdIDmrPg7i#ynN24lSv^e zF!x&8ow_EWL+i2GcA(y*!2>{NOc5>ttJA~i;HwV2#OeOH|KP0gN#)o zJ)i*8pB67E#hV&x(+gQ*(SxYGRzgcJXeG%ghG&H^9K1f_4yy9NB^`{=6-blG?o;5q z(^z}_iJNMkV4D&l+J>x7$o`t*zKJFK=`(vq%y`81wyGJoyh$aE*TZ%FLgnSjyo7*ajQ`{*g0er{!8DorrJ& zyQNa!@k2O*_(4Jku1z|ho4;`WY@XKI^E0RBrjDP^%|HT&hDHRoIoi-fVqk`w>&5fU z3JQt$Di}m#jJW-ej{P<>EgFB!h$h~y&W?O|Y|P12C4($gwhd7*Yy~ii0^jS?9!r@8 z>}0Xl@T>hv$4ajq9A9itd+xMTSSBCwgQSxYW3*>*191U|{$pFR=?1eXBzFA9${T+J z(_KWvND$=83RRiT+4Us75Y7^yo4a;(%B2zjS$5dzD@Ki8 zD31DAFr?=O*H+R6ldYJxmaEpnZd|*Bx{6Snc7??WRUOW^W^|HeMQw}`Uh}t;K%R29 zfmj}Psv|v&3$a*^uw0ru;KBkLF^ETjrEA`oIPbPLiJ5x7tW z0WzZ!z!)3zRl-Owin4T&*VUx^BjNd(@B%zF3q9+glYc7~*)#&-&Xy~8*}HAWGAaeZul_y|9W< zFHb)ZJn|qwlQljAv$YH}iwBr}`<4L5F2s&^E(x0M1nO>|mtn5Guw@ zMf(CPGUZ{MU`c$aw~?o?!*b_&kjRl8j^bg-5xHq873NTuoy*N_!O~omp?J=6xXBXb zHc0nv!BS{>y1H6kPQWeloQ`DDJHKpUU*B#cMwqZQ${QuyjH6fV%^QQ&3A4Qu)~dbt zXmM;QaAAWduAqhQTd~M1pSE^jv-e4P{$9OteI2Vx)-FX~%{2ybO9H&qh*F!5hBdwR#SIpkn`C6g8 zj@=B$fkz$p$E@Ml0&2zBFTt!WUadgD&QqX@a`^e!eiJ4o_y>aiA=&)8UZMbiN&D8e z83#PBA@6TPFhYN5Zvpw3()n=a*dS8I=-^v}y_6bY$dq74TX1?8sZ^R;bcY0Si_%>? zVMhaA|Dz^6G#pu`16#cuOb4bY>pj=guau<)4tU7+8Th2W0(^-%lAmm*RI62M=pCg< zMMP0cTwO!*7BQV}a^O(2c)1Qnxw2Ai3u3iaDpiu}((D#NqPEqqm)6&-SCi|15SMv0 zknz+Oz!G-*K1E$vzFrVKyjYx4lNMNL)sK&f;Ab51jP#X@fYVZdS!qa0^kk(2zgkg~ z-_s>5GBJ+wA0(YISI1H8P;Zgzp1;Xp%XJ4e?&aBL+F&K3pq)<=6Kl2%X`Ejw^j&~b zHL74E9Y{oU?xX8xg^sNnUMtkShCR%6rJ~ zcqBlB%WHYM)VcTF<5`$Zt%j4df`i`IV|^3vE?*;4=)7F6Tf&(v=g#Neo1Z;#VlFqI z$IdFmbaNnx3yN#Og+bYBS!PY-hpdUR>XzmQ3qzNkxzKI`W zTHw{Y{$PlAp(DQRu5HHdn<@t+0vLDIYODmTU!QK)C=Wzr#*8(tgF;^PnK0}J5GJ=Q z${EV@yZzC@2z!-u!G(va%t6W>m4OC56#G+H1#hH_r8=H2q|289wVr(8wv0!Lv#324iH=r3B059=U>Kmv2P~ zi0P3vU-TGqfhAlPElNTk?B!k?mkD-}R(SQb%rdDEiNEYp#J}TwTSjJ_2SFg|D%%`) zE`>3U{W1YZeP=f-I?xyksN)fgwe?UUv@{S1jPXb9ajeNa207UTsh5^ythETvVg*+c zn#MKd0)*sTD7rUdh%yJ^lpejjzwapi9>L%2k*Cvr7`DhR6oZo}bB` z_c3s5J0cMf=2inaX+g|#af%nWL)~Id=Id+a6*AV;x)F}d$}0J-iW8KXrI@9a^NBD| zD6Q72%?fs5aYZr)zSd=y+5;e$yCndi)~H=4ZE!8hOf}LPQqbuR<(5+%#5O(lS>lD3 z54nl9G8DJ4qUtf340$nRs=!+~+&ZhE6Y*)yIj-T5bv58w94NufnL5}ePEI=Ex3hUH zI0XhF`~kJ+9~TRmWrel{tb>Gp@lRAGTlszla)b1; z_(($WC0tm-Xhty^O(?v9XltcWNGyLSp*+vtk}!ENp|DI_lS)67P}-!#C6#|TULMxC zB~zX8?VhQlVWy6@W9n#_sZzEjQ%A#0mC~)5IvQrG6mP}U(J)h`a2uwMhM6kmTQPMs z%v34dlBuI%rb_8HOdSm~mCLtdstk}J1+A{j#g-9C4|8XDnA8&^Ire2?HlL^)VJZ&e zP-as9a^gEn?dVE`9VW~0LsT4-p5;}9EcP--~aoAtT{G@pq8aIJ>{I6cpL7+L^&#JXZA^Bmi_ijzs~lrwF`RVN}vDFkEh zqq|Ilg_0uFVV;NaTMt!70IdQ}h|A4>8BhPjN0;$wY^?PFwSYA%v@L%7HliXu84aB9 z;Zow7;&d_UMt!riTwW=cier2d)&Lff@C4f{0^GkARKd%A^*%Z!or~i*A1p}F?gt9z z=~7)D$Jf*m_@K~sJM8;#Kr{2lOaw!u>0ICRp6S*?n87MvFr<%eMbOG-BCDLJZJ$-H z)oJ!646-bFJ7SfG%^S|DDE2W{dB{-YJ<956ebf66tP(vmYG`x`cPN032?C{RyP$UG z7Suq@LifTi<+mmMimaogXnIAjhltZK+B;ZYF<8>La z^oW@-L4!~GFj zMX>-$7kIHZ{NAxk2Krl%B=9ibGO81s>T~e~)jDAvXF8tEbKi_xoKVM&Y2DX}>6o}F zQRqyk#In(nptzLNJ2;GLlgny;qIG=TB`yE%h~`MzOC&7E44k7>35maHZVuVu{pv9yYVHQ^&IKUFHukyKG@goKH| zi@IP39GlKiQ4_DmOCCP_o*K60>)0P3LxQ#ja`U98W`)JaLWkcjW(JtMA#_p0q-^~< zq_9qNGv;VO3y&+bPB9?c_mYi`AAr~C`HmQ8df^jcAvErZ%=KXrmez-pWf>Zhvl`e* z=$z)qiPzpSdzmgilDrtG&uR>&4)Px24siM2I6Rt4F!l6UYGx#t%*e<9I@E zCg>Wt2|0mX0758^bK}$nI*M5^cbyRfWcZ1{F&ka0f+2ORG&2pBnky@%8tQX`7rLk^ zWC|D$GP4)v$*1B1=PaRe=g$kFl!{amX&_>;xU8{Xk%e96AQN;UQ*F}u|7@}h801vY zDQws@Lu(h#X2z?L*pq$KX}Gn+en}vb(12k=MwkFOjq`xI+=AvFB|z@h?SdqB)1DDF z${E3eq+N}d6Xy&<_|^s`%9rT^C6p4bk}R0y4MkLdzBO|0*H;hQ;wCT4pf-S|i zSRvxyiVNK6EpVX)K5h7*_=H&C##NPZqL=p*)zEr_yo!j0syCOHp|vYb3Uo^=q;cnS zb84OqkG3c6c6TPYezfujNr-B?sj8@lu==?QB=b=z^Oy9j*VWTMfz`t@<_|U8%!eC- zB9_?%ld==oUhBOIDZGOn0=4ZL@^$vhp@-oiGDh^qzW- z!hmPyM`y?7!g_TzVg-5M|I}5S^cSBW^Dg$e29`f?kg+k5a0+OHRl2^0O)CkH8;$E7 z>}49+v#YB(^REQwNR9!{(Iy?}4$V49FgbeEq8MrPq`u3;DXGHP_Rh&+#dO-iCYIGJ z4ScH9tLvpj>DJ#fr&v!J`67XW2!;m^1%*m6xLQVr#ZoD#l{TtZP^w%B zMg|54f(vzAY1Og459qcXX&x=&oR?Aoaijx5E`MPzcRoLp!+wG3srlRtYj()9X2wOe z3wzHHqH1H7%~m0ps^zsRVrEDNHV2x4xSDK2>70lUk-0WgW~Sm9*&U3>nTrL?;pN^g zP^v6jmB|9~Ay9&csczXNqXT!e0D2;^Az2rA(yWDHE#(uR{KZlrI-oILd!rfM=^-)6 zjlyO&Bbl+lNS<+egz2*$$*0~abyI3$$A}@2pW3XH;&5i{mLTJ&*JT|TI#6k>WP5{P zVVw4aO?VgU>9zNl^@2Ts0=@VgE-~D;qkK%|I?{R#hU8zQ5!t{gfIwDL=9l^Yf^$eBOjwl`+en`Mf-_620u=)_FJcb}(W&JhE!`9auN!fhB_1x@?Y`wTV1 zy8^WVAjw+kiGTp&NCq@{HIHEj>%5tRkJBETss6`kn@#`a{n=w<2f|PK9!OIjdlUsi zQ9U1&O&Bk#z+* zN^@FC78wCgh>#o`wQO9Fm)rJYqU4Y!gc=_I6jxco;4<8uBsQA}ZoD>EF|UR0cmy68 zJA;oJ5hYrfk|OV1*^E;3H)`{s2HhDvZ34^{Gsn~i63s>xJ20`u8`rpnvy@cPc#zYL zLA;v64{#1`ok#D&G99o0&lwCdxNBRESZ|2wGlr4vMb_FbBBGoxBO^0<<@ZD%VmWPY ze&*C!)mqLLPBTVQ<%de6t3qXN&^_qu~(TYgQ!;d+4Fe%y_QJB6H8a1Hk%fNgEMg{w4LQEMF)QKs*i$f1RggsWY4QH8nLJuW*!KV+lnb3AZ6e?4p{{D0s zy?4X1NS~xG49(DG_i$7^P+SW;0&kfsj_o1tVMix2XF$-nV;St3gGsnFL%mivLTnrWahol+^LgZA! zNGCk1xh_&EdH`B5F2*6&@`o5g6nbWSZGFNW*K4sPUb7YsWX2Ct5o$hK znc*H5+ri50nN}NkVdE=X$&Go|@Cu05tW_+rn1;F;4xgbD#=j6#L2iWnBsde8lB|>| zK0Vrht??r5R^5vrhcmO-`<%e0oJYaM}wJD zn2FENp1+iz%blA#KZTFX5x51wC66;%&*$?4nS%oZ2hpQyvxcel!KHHL;2QUmhu{Ge zre$PN|IFrEp*AK%h8n(n{=})%xqP0-twX}{#>Qrj+o)f!=ix%&V)>2De6d{1_My2r z^yTU%&fG;y5KO5HaiH%&Qy+*$jF>t@WGc;e1m)#`7*7=m4qN3=Wz1Ch>}nP{v+~Ah za~GNw+Q@^|Zh7R3leA>TwY{SmYBS>P8hZewJ#<6vTKu_j(rka#i4}L(^O^$VD_ft| z1J=nrMHNvjIn=Og57;q8oM3?fK7}Y^xnR`Wjs_kEJSsEtEDr3~L#XB`Qm6iW2xy4R z7@G>k=?zLz$t>5`)Y}ngINKclY_M^Cvrw;Jg(E@mv11=cEKseWzvjJz5+DPV&%Yyv znV8AJX1&HbQ>t8{bdmmL0A+`pICTV%j=)600hh1zZ?KqlO=f8En$f{u#kIXSD-vx) zI+>VhV~5BFm?9!JG#ypO01Hp6V3ON$`~shv95ku{bh;EY)+nqfrcvfWo-s8a6O5`K z5t`-2m=1#%q=e!}Rmzhw^KmeRM-Du4V_P?qW+*ULL&(tZ5&+FYvC?&=T#~`iuKMB( zbO}a@uz7@XO%gud)Er+4c$naY2C@Sa3EmP84UVwEVWue&N>dv6q&bsC9H1BA#HVQKQ<87K)b;wcEc{=iFMB1UFC#j1_7)Vct|K^vYX@S$^J z{5%ywFcD|bnS~fgssF%exy}Yw5Kcgp18dWD1ZX`|EP1zZ*&E1vMWtTO7gM?bI7e$v?XJ!e9;E_xFA^G!^{GrjLkLO7BHA0_VFM>uh&6pQr1`I|B za)mnLA4htJ7v3C@=S0dVzaXjp`;BB+sh7i76uBZvERo_9 zq;Y0BeSHHHj%-vhx)e+^68e!PU|URR7tf8B!uU68(}bFHSb(INGuB1;0|Z`Iu}D+- z*bumnd|aYuIgLtZ#*yoV4N#ZI4^q;Xne1c70M)h-8IFS-8G(}#Q#LCywC-u3tmFPG z5=WLmvsj7DTiqpU@Yl_s1^_DPLXUYOXz&S`5*5O{C%jt^B+_LbQ-_V7ej%AKjRCr7 ztL29|Q`D{sqPaA;5L$UmOK;$h2V|S^2QD~$BGY3UqMCf%8ZDZ#vxacA2H8xRU_a*7 z2G}T|;1~x!-c!42dw?O+6cd5~k~tKV*9fUC%mnTAUOXxQxCHD?uBLPaC%g3>2`J9y zQ$rS4wYMlTkkka7J13fNy5c}G&KxOVRO7Id07^%}vly~OSQ=G3V|MmYtkbbij!Gasj7mC8Ud*i!wIqx8muF(^9K_g~0^R9_g|k46 zj@laPt{${3Pi#F5Mcxf1Yq(^*RD)RujcG6ts8M3T?-M9w|LvzB9j)zog8nO4j_B5c z+7_&zOsZ07ftmUq3{8=-o}H0c{H2pCb>#Ji#1i%&74Zr^-dM^Pu~xa<$eV}k)8Zwv z`uMaE_Wnu6jk}|&t|^9;^bk#}@rOym(A+JiE5a_EpP_aN0C3O33JiQ2lu z^bn7z=!1jy`N)HVQhE)8y(#?AFh5+YQDG`!-yD8$RLd6&*Ik97hlUUHb3COwTnv>! z8ZXxG_m@`e-L5yG5;23#5A`URfXS5Sdhi{+%9_ZTBOS~O@1EPwM|IMo09PM}ol7o6 z;Cjeu()R7rrdOV~hV>YPhAHl=>z|6MCpZR6-Abl1v$9@AMwQ@l(DnrDVgoSu1K~R4 z)IfXMiqILPPt_2#+~B`P`1LChYiMwIGoTgpM_8z2N`ilz-k8fOl zVB;W$XikR`sHoTy1-}>6fRbGCxeenqk5^@TDTNGEmbfs~_}TGz355A43Lre;YEw#l z6zb+1INw2@=LV8AyS?4YPR?4M^=UffyDa2`cwWomDM%s(Q>Rw37ibk}c}i-tc|d#u zHztDlW)g2A;?hi%w*GDc9x{y|~y;#Su*I;ZtcvQX@dN?{n^i4=6x z;_*VQbN;y_QiCq|+%ARYsnV^G#{=-4pba9YPG_3`!;MZ*oMBL1353Y zU{pqCsU2B5?UwQC@Xi&lqS)t10D{YVdt4%6Pk)SeMJ-U!8g_%G z^ISd4|JwRm$KyJ~Aiq?By}_|z@xsl982M(g>qKj<++{789NO&dZjD>iCns=KQmJU& zuvV>_`uexaV#k~1^`bkXTwFK>AvP((aj?|?iE2x&*)BJ1d4rDN;O!OQp~Pg;v}T~G zOZo&S=PXt0WnSuuP;YGPV($F$*|}5mm-6_;|KMwmM1-fVRbJcoN9o(JmB!APNbx5&#^!joXeB5yrORs@#fUf`m;cwWONCeV9N=@B6gu+sL_#eS3hVpg9Nrw`-|A^KsM(zFzsF}bx6Z*%;@uMC^n7soOyWSo z2jtN~_K9bg!@r;h+^0$KRn&z7T-m-r9o+m#b#SI0eu;^&i{qN2YI0EUmakA5jy2LO2-7(U^4gD8abC4uzQyR`C=#=*NQ zzxi|0^(u;P%1%j(8!XI6cmL;=r>aeL!qA&ZE*J~?0b8+`gCBP=eQ@&uA(t}lm(zyT zsRA_>1L4H~7fCE<3gmSE2=Lp9iLP;;%JVG@n@3S9G8_+@kmL_e2mX^&mjYT+=0^P_ z&;kB6k04I)0>|)D`4_zWl)k@_#^2C&Wdfa^7bo@?7Gjp?n1gB*0vjzOytb|;hG?Uu z`9n!^%3}7NrEcedAT8T^sR#6Pjlu-I`ggmAM1!{L8_Zeir#MnK#9HP~C#)V^(z)%U zl2s#4wv6n}m-*yMfUZu!Yl&Uu751o`xpKCVmmwmB$Lfl}^6)ac5}KhaGG(2&l{R6tH4V|vmhYqBTJ=8zB~ux= zbm{GQdBGe;Qxo+QIpL zAD&daRtG~!ZWQ{8?Lq2!zIuVLaJfN|C_}Ogf<;nk;7r!RiX;j$KDb1O@1e&=umeB? zSyTm6Awp2$=;g&2%&B%r@xgK>ru6S%}Lyr;befE!~T4eSuT1bZ62r)ILwcXAgDn$z+|Ty8KxFhKVu6QGa9PdTnD?Ave28fz_YeqpFgphns{Y0Y zH`l%H%409VN2}}7U@3+K9=Q8)>DFIwFEORr{>lL#=Kf}Ne-)2(-^Sl}zPbJP5n=_C zK&58@Y0-w*;OVVcqKVClqJuxYb5cdvL5YNs%2JR(O&Y&5JOb7WU(#0kB8M*k)E?9X z96cA9kWtdXoP|O;YI{BgKrg{3?29T63L|oR%+b4#)G$~@9H@7q?d9h`arR^D$Z#Z?otpaF+Te=4$TzkVL{< z-5WcE8J(xs#K&O1f*rV;6nWvm;#=~-vWIJ4UpcU_`N&Yqk{~HbROtPdnRr?F9We>k z5vh;s9k5MtZ^3K;`~ozqK>6=p^3dj+o`x{2t^zB44qhn2w$O3ElEDazH?T>}oSY=C zq6~hj;IhYA#l6TZPhL-zSauT=`Ne*`FZsZxRCw@Y@1bTSQckpPbrv$sk<3R|z6`AF z#!hF3ct9OJ0^ox+`48Y$%RRx5xmjU&|6@Q$p_pK=F5UnL$#^Z1;}ya_uMLvH=~Z$h?0%fBybfZxei-qs51nk zAgT}71?_KJ+F#*}Z6@Rtq0$Zh<3ZI&Dww;YryEb+{Jx_H2}%+4H9SS-(pL*d!{Y(+ zrgpSCr(nZ7&=|G;nQ+m2E4F-V-{=&tI3~@Mj$M1gop*gtCrRTa-+{oVz^9#Y|Du{V zSN_6>h}@Ixl&DRQuU)@EGvR}mE=}%860dIrpnUOOU}p1Z30tLK?0R zWWdKwbDr$<8r(x#S#wteDnEIww4{ehq?O|x9L($+{oq>804#m}ZjPQffnOw8nfr)E z_l7j5w{iBN(>L`iM_)aFW+^1n= zfy?=9jt+|-F8OrZ(hMTu)GiG;cY@W#SI--(Fi<*IHcPX6nvk%_=D_9z`XVApLU;7fk@7_>&f69Rw7f^ zTMu+FKqk-M1!e68v$;CQW!?(XYsW1_NnpV{|2wMgi+Bm)n1ror#sHc7tvn~8K*T38*u)vcuK zWHfzp|MzYuc3)k|_$0t)0nLq+8D1sD=B7rCP4Bj@8>dt>=H@}EYA=lRvtCb7%WeM^ z4hHnku8?#Ol(Gix@!E4XuFS<*tx{C|e(5M?#ESnb!?U`A;t!Fl^Q!l3Yy0Ke?tyvz zxKeC2VJTs|5bL~RRleIcd#N-V+m>a{*1ZiimsZolX<#E5AH3Rnx%S5rXgk_%HIpo; z25PuYYtoJ&cE`RQq_Fi3ep?tEasE1nw7C&UYn2~w8VrXvboS&hFPI@^=v(q&Aj!+b zLmnnChUf3DPC_#vP8_!IZp#P}b;?+2SYz3hI=7`_6U~is2zI%#Wsu??Oogl~0^ zpRl+Ber!?I*F(`WqJ(_zH) z8J;AgC4a_)hyTkHZWIYLesljo3-Jb|ipBh2He|mDz9o zaMLpLxgWQ8o?xX~x6@B7#Q~x0SiQ849T1@CPWf|VKNMEp?beYEwy?p3GlB*HsJYRt zp;hu~Hb|#hH-Z--_+c(Aby-b|Mu<+}t_iqNyg`UH5W`k=Zq5B7;-*~FfCMvnot(5P zSmOn$cC$j1~q}L^Q z!V{uG>d+QzNzb5y%62mb>+|cis62I^`Hg?RZjYGp2JK*lNXASIO9}YR5w+4BvX-PU z53;_WAUAo;t1W6Q%Rh&$9Er?RcB}?;3h59s4_o=W;W=~jARG#S=|&|a$ro3kiz<(_N;X9w}Dl6{S6sUJ)tN1qzF zp7#s6LPV#u7(uCpuLa)=rqjEq3bH6yby#daAqXfF2jTp-xmVTq{Unr`1Q8A4FaOBH zKuQ4xkMIJp;rqcQxUd=fz|Q#|;3ZQaxfH{K7O|mVXr+}Fhi+r{WP2>Ble8jOzltPC zH1rlGtNNjpe?m8XM)9Nz`K{9kERFOw;i-!T1H^qpC8p{Ci+Y`-m#lU{oV;bn{4CnW z9F;s2ut}&~r-~?SNNbFn*u~f-1(&&FPdpGB$kZ`0#hGS0?{zG2hMTA5hJqeSTG0@O7aVF`^Us|;{*&jF^vZ7~uF zx(oj4%m^-NypDJ$NEES+f`!uJWymS=T0X*Z)V^9wM_H5BV`7sg48{!p`0zf=NRr>(M?J(aNOiB!opbs~e!^CP_aikzR|J72*zH{pCFNbpoi*I}q+ zyb?-~$60}Y%k2rIMQWVBtoz2Y<c6Ca=Vb7H*h4lM1i$0gL->}hyPhD>JA~~e z*E}b_(=#fiDVrJgP3ul6n}EZj3#>}gcYJC#O*5XGXi=(~79ZfMX_eJ(E%4yDdRg5Y z4_ss`l=!8^>SOWEC`Q-qMS(nZ@C2Lmp9XAe$1~dR_?^Qjl#QNgq%&Zc&=5McfJwAh zLhdzYOJxpXM2i^ss@WaA$RRSbL1w#DsUs#S#6(f9kWmbeO13Q{7nb_3O$!AE9h_pf zee_XXl*6NnKilRml1(I@ZkuB<4e7u)H7T+LB~vK=m}Da`8*iS!9G#wyV113xj}WlL zYnD^FKk;p%r$Ivx*rj&zTTNqkMLTuf+48C6MRGd{!2F1$*Kdb-KgIw#ojHTvhdWw| zgC0((a=fso`$Ubxa}m#kUC}h{@)EuBq|{wjgwGW@dxy%_g3s(p!Xq^mG@GU=Q`B^; zn%m69$v~q@YJTq1R73~&8LjN98^h!(o)JSUF)q%RTLy9qgLP5cOe%A z{mx$A95~hu2S;*uw?V@dy@V8HBNS1C_of?Y*)G?c2xp^1WcQ{&RnD2@B_a(}&!B77 zFhyWz@E)a@?3RvT`pvWj%Uhgm*o3W;MD&;yVzxa61$ zj?xU&TP|Y=q4`Kv9;*y%CvSTwQDjhjH>w&_pi2q-rM@zy(dF&8GD=C+Hl@$zy>*bL z^fm+1C%per-ZIctMxr4wI@D;~FKC0*TZ$J7?l7P=-zaE>+-%W)n_zZt%Q3>Vbin;mp>U1w;XTu#nq&llxd1T;*4<~Gid;K4p zIQ9?lYVl&@zW*_6TwZT~{bW2k9QsdeyX2n+*LrE!MF!UikTQ6#VMpEs&puFF`~Gsa zS5C$9ytDP!@Nn`)dZB&t8&j5{m(FXx%RNW8xA+$$hi?@;G!pL{UNNH+u0wu)jHhnZ z1u3RD6-43G8@*>1dbcMXlOnvdAh~GtLn)Fwy52(dkd`xEF8R5v?p_+D)Wi;uSG1SR zVdS<;0WH;`P8WOkixLR*oxZ`WBXA&U03D6jFeye#7^n_fB|glEB7HVy3ybyrX!t>F z>8#Z}L5o@@0gl+b%r)c=4!U@l>Uvtofi8;WdmX}X?dpoh%i`-zh@gu`w~D^=VS^E| zKNUVy?v@wr?B#oze>~TK%uwTN+zwCQID&ax#R8Y7HxtHUsM7u^)ojH|^|Lm1#jTs`fBWP4Xo@Vkj1kWK3l9DCI-*^*$a_b%C`QJx(Nvxf+nT{ zig9efPZn6B_;T-8_y5;#u%y^svt3>lHI_^LwYTF--qe=$SkQuGDXQZX61}pg*f9Kw5_pga=P153aC5O-gZn{X#+-@wTKiHZUl~r*43>Ant6Ag9J^gTlBgR{ZKl2M(j8%KOfT3p=HGr)r% zh9AL#1*O!a!3vgHNx`Vpt_lq4?1}~vXE;*j zo}7*kVa~{lEwUJ2>K0RO{Y$Bc zq7uqnzocvomkz=~~#y0xAU?=fY%_ zT=7{Pfk$`|X?)COvV!*-JR2ODCt`vxNGkGD)5+nZonD&zQrK<+)Bff7h(~^tlOf&~ z8U8ptT*A`DGhHk1NLIw;G`}E9;~cqJR)(-}tx_T$W-)E#mhjdU%re=(E%i@Maq`a_ zPb$GuE&Kcyk>@`!HsHevL^+s7I>(RGAx_$ku@zu6KvG~D2zLm~k<^x{BEmOKaSPNb z)^6=T`0a0Rsa8C61#1^00)4>E_azj0al}e1D~lr_;AW_=xm$b#dGCQF`ZA?!prqAL zF)LYl2JB?cX*;TV!gNViHc=$YJ&6ecy|k$g8hFM*qv0XrK--A*P)W^pmV@w+*$276 zq3z*vLcrW2i+Zr7`cFcEOaj}L)zEO|fi?r1iXEct3dSv|mWRk%I5WN)o%8(;S&rcF zFQEwv*wp-hy~>A5jM{inHnTZSGNns|`Q}o>%d{C^f?L1|k9xm+==^YN|H`SwLEhRw z_n%%PfRofyI!2L>K1Lc2qF5xqwlUHv56Kqs=mBrP*@6Ca{+ z3NozLyAnIlG)c%xj}VB+7{&=7ezkzJ-VyMQBaSkMr}B`@rhKEs5tW-%tu8-Z9vGX% z_sd6!J&sZM!VgnIXJ39PLH0>^s%yS|C2BT35-I@bn4iW($YTEOEsVbLssHHY6q>%0 zRI97{aMJE2o^Qm(uP2aL69gWfEcu+K;c)IL-tUM-Kwxd%2nPQ_3~Z1=)~1A?B8_iP zAR3W~Smm_{#}?DEOF>c9$~Go#PjqB0TfHbp-4I~pmMrI|o7)@fyIXjoacAT8+V&d$ zlv#w@0OubZ;5%=c-@AMF9(t0^_T=8%(fPd->0LzhT~vm`1WZ2Alijz%!C(Onbz;rIgfKY9Yuv@K}N-&~+tph8Bt z4274nn+xP;Wm%fVV)2xSvI#I@Y4Ayi>vOOLY?ag{ zFE`6w8>`icrpK7}j$L19J(JHkO<{*9p!^p9Yqp8yf>H;; z6a$gBf;^y^*^W`}(0I|^7DUV7XdUlpB5M3_a$?F#n;`Qe%#q&N$BV&a@&S5)Kpx2v zBU|-WF2gtQDDPb0dI76Bm2Ta;o?Hq`56|EC@RsAsA-6iTmq`DwQ1lf%Mfj~h`M;%o@IMV>7l_jJ z*yXqD6f8~iS8Q9cz(HVcHb4gM80Zb;%oO{&mxCXZrx5fqyD<2Cydm$3I+T?aGAbE3 z?`5Pzky^S0MU!qYF+gxfXeAL5>hm!Y*O3ARir;3ZEao=2Rl%76HN)={JUU*pxiiCP zL{oTWqAgg;j5X#eFAZ!X3Nly>jW8mKVdIO%0yh?5PGl8Ac#BMcWsVKQXaXVAkIOxvs-8899aw5=d3!wq{0AL2mQky-PPR6=nftU8yGqE+>d8e< z;|y*3fn;trK1b$b*mgL$^TN6NoVS5&gZJ%{##~39X$RdrX%+UgM<@-X<58Uvmc?LK z{HqTZe!4S0syRKlY6$osJ)sBwV%|w{AmmTU<+7v-)6b|9SQiFa-WQ*en$3tfB&-wP zAgO8kMSkHMFnC`cdp;KO=@W0ovb4n!SF+Y69$5*O3j;e^yIz1?On8y!dW19wrg~cp z#<0*Y2F#Em#6?|gj6x`U^fHXCM2-n{m|zfWiY8y`PRQZ%-d+_FcU1Ha-}TKup+ z^*rBxiPL2S;GbgVm+k;>SfB_TXj)Y3`N%q<^L20d0r07d;BCDdFy{K8vlA(V&=rnLCFqoTpA&bxQ>H2e$zl?=X_HV&q>5tZ1@?Y@k!kC zf#Cjb;ANxvG$x&&H@hh6U5hc><}UXYM&q!3VHJ!^5xMBcF*uFUBOf_Q^24L~&yF&8 z=A{6klX$%2G-zDyKwX5~;&G2J+}kUQe-%9c4uRr@NUA&GRt{W_|23hnwpO*VUFyRj z#ic!6DC-tPiQnRvY3>Egv^2{w3b1HI2$g-9@V@g|2uU>NWwO<2JzgP)sr@UsyYiW_ zVftBZO(jqBrs{MU7 zAN=!O*W%^)1Ep;H$HVdI_1XD%Wgbm~5MaP*jWqCE$LmtvE|#Vqbk3@7CmJ4CprXBr z6pmJ~*V(ZvVZS&1>b5-{5x`|fAsLd0KlmcJ)28$@hTOWcmG1CeRAXa28;h3Mu zro$tXaCsS#@R}*ohLTJiKXH0mUA0;6$)rj@bfp3%cW{0(p2hgWH57sFD_&-%9anD9 ziAas>XCp@H7Z-vAqjVpLQlZ+~$`siU1oLdZcCDHv7ngk*1oHJvZu!Fnm@r5hn6;3O zycc9zgS5cEn%jKN;KpZNEIj7`qD8(^K7*rbeENPU-C14mu8l+!c~ocp37R{gi7wFyWv(2Au6&)lGH4v zmcCn4aqPuR1R^T20-DPs8Jx%lKbt_(1+8=ZA%oS$qwR2JjMBy&P3cKnxVeGW(biCzI)rh+;H%IZk=PSv z#$Rn@lS#{aY+}XcbBG=6pNWNJXk;Yjx$4~B_!3c>B|-^RcWt{MaqNVMiKU1{8?N;f zfMK`CA8?E;%gfAErFWKH00x1pRi+VwOE>?kyTXniR)+{J7afDs!|PMH;9r%-f|zye zG|S7k*Q3)Tp$O2$S&&Il{EcBcPtU5J*I5!?j={Q`DPq>R{XV?J^B)cy!jTxsZpC|- z0Rf*K=Ncm3wuH$JnX7#m8h5-=ANIYVxB5wM~(p)0< z#rgGx8D7GNZX_m?N_i0d2INg1n73Jii!visW-RHTVot=2pxc<9=i|%K{~!WnaQXyC zb3;k7uVH2$zZ<6Vay*&f1fIFk^xQ9iM?lo&57!qNo33_p+Q3w-!o{e6|0@JQ=nvep zmoa_SLpX$%$!r?z)~so{pZ2k&`BZqi8AuZ1&fNw{){9{Z?W~TP+4<s*M$t_e4D14zpr`)BHc8u#g`MTs>tPE2R2~6piVK0L#$;Tlv^^U{=xpi zSW%Lp47W(GG#jr`NLjiu%5VT>6=AxdcdZBsO86oKbPk0l0(^$h#C1oR<7-)4l*mI0 zPitLI0>@+UYYqr-3X*nER1nJ+1hJCNO7z60#SpMI%u)olnPVkfIusx-i&2Wnt7E7t zM{<1O|*KNy!5xe(w@7j}c=vUK<4n6batmcF}<;7wASe%fdV+?yQ_@sH^IX zfE&}1qyUkrg+La1wWtARxN~zM*(`IdPSGf%aOYy03O%mMuf6)n%kq}T4|Ns#D#5T- zTp%D>ojGRUqr!i453gaA zCp}hw+5LFID{5&uH@X0Nt&MG!}gSPhNq3qECsrZj92u(ppO-E^;ZeJ%r)y%<2r z*l8kx8fx_YCvO&r!GJdW@yG+L1%{Xn`bAbS3-cm8MvkOckUiTd743iv6C4oWppPiq zSc*-Ae)~Qs9=X;aY-pC~7vMMizl#Beu!TfBz_2~HB z*XDEk>TUY-@&5Uvdynb%mYySb7-&jWb|U0qzDWE{0*I~5Mh)SzjzS?3tAa#~5Em<& zAC?4w?XQ;lU=3;kgn0lop_RHpR|>l_tJE+_Gmr?GR2b)kwZKV!`nwqCKD01k-?z1e zTIT;jH`8y-X$9cOG!`w(+4S|{Btn@Wn40RYSvjAaLPD73p-R(KaVwr?`qyY2_`3BE zn8Wt=TvHf{iTOMrS!LZsPxl{dJRPPZ~^Rb(#8BMk1|ES|r8 z0c>O?Cicm-U>86m5Z^p~%IQk?jun<#{A8;t;Ayuu1SuLn>C-pW%j_JFy~xh%Yc^6y z6B8kXQ1EWcLYu%nc9X?+jhl|R^eM>Ev!*;!a+c3DO#w<6{1>UmCcJ&E8ilN*Fkr6H zb~Dr+kvmK~9C@b@JMn|8tWe-9EELH~lhZojW$Q@Mk6o}Ku7wH7fxY7P=+%`Zio1f$tmOeEnm5~qjQXln>N(tp06Y2 z4paEXXH&d2DlxNFI-7K9YrHPgIQfpg9hItN1Kr0d7~onuep{(nJAyS6el`?q9!hq8 zqAD3HB(`ZD6~wJt-gl?fimSi2?MWa>xdzO26v{$mK-PNlZ@9^1ZSN(dK)`u+?LM+k3=%?SvP<_A=xeDEY=yWGxoJdJAcbEu@yg){+ z_U`TDw7wns4Z8Lwt&60O>#}zih?#Kg@2`2$t(7+U`!xJkytf-5m`MiqERLNMcE(O> z4K4J|-zMIzdK!`RFi*4kzw&Q}r2a1^e|m_;a;EE{SAUDR#yaaAg}P6=V846!aFh0VK~O{QcTqtK3@`TOQP{DN@*uzH?vs*A5ut0HX_Ql$tw%+U> zJl%M<_U6SdmI6$U;>(k*?WY^tFE(~|@DX0?;^X?(%hzk`Yz9Ly%M&?ZV1dRWCqZ9` z1Mt+lcf-r4L*#EqqB;m1xtIW0avW`fV6meb7yj?;+kxIJ=yPTD?;aeizgXMZVS0$3 z$~;_tJF;GILk-b9hv|)~-ov}UMp)lb?*n|pczy%7>^wndrul=?~}2`QHtawD3~lUo=h zkjTiE2~d+OMd8{}H7BA$SFh?pi|E9qqSWo`f?_W^;97x8C2_>f1-2u&x5U{i-4tv< zwux&Q9y~7r+_z&+z3gYJnHO}(b%}T@Ic!O_%x8?0Sj20C9yZY&2=trSqLzNFvtipT zclY1AYg#;M30jRG)%-u}<<^*#y+=`v!A|4q?0h}}OnbP!zIMiD) z+26;_*=$^9gSa_PSR3Zv5ropuPsAp-|0Gn_)lXJoRFuwz7|c-0f6VN;(O^n{B7ti8XO{pfYu0buN&k#@rkS$8Jv`>! zZ&+@~9*PHguaF5V2xH_@fnkEw8#EpkFT}7|JH!R?$q1n<`szpe@GTF7s^)gZkMkDc zt~~ae3chQp2LZX<$WJZG-p;{3Yd0Wd3!CZW`%EVGE<;~@k3Gc%HqT_WRfEk3)4}h+ zMw40gdU410PxmX#dmFY)OM&^+f02sx>2TbB2NoRfiWmF_2Vn3|wCO@tT8WjK>WEeT z7OOi-RA1nFG3RSv?x_T0atP9UzK)FpIu@*CX#d=ZBG@+Onz=z^d<3!NLjtlz( zhy*9(Qfwd;C=d`Kv5L*{Yi#2zX z;k6*q99*;G8AF?5p5@_Gi@GoXZ!(0UvnKMfn^|aAl0?mu4r7plB7VYJZ`h7E8b$@L z4e>67)58zl@hy|fi^^a!`>AgH9GgF79j6g#Y1~s55CxV zw!2(v#r*Th*6wpS@zXVztl>Hn4)ongWcsCdg--AGHh#R&JXi1m_HYYxY5xAJd%-pi zvXT9H6Oz9+LN%$KfHAD#Qw&|nmIqwswe9M6JJ7WApBj8fit=81NfxvG0%IoY?`r(R z@EjhuQ~-N;GCVTawQ`R}vKiF_^a0xH{U!nbG-c_KBuzZq#?Hm+kd9iN zkWLPHFu?|l*_SI5&AQmE>qwz^nvGT-58yJmxKjUsOa=43%6SDgHpNh^BV04GHw#$6 zCmOi0(xsa)k)ibtuNTPBxCraoZ9VDbNm;Y`gk~neb3Y_G2ug}a%1WFW)`~vAf$YAx z@5Oo&6*%H5AQ(a(t8m6G8dX$b4IBkNZY6rTm>ByD$h;{d{kAMEES5+BMJLeCt%G*j)dG!_Ux zpG&5D!}-ZKhfL2v#rkX&0qtDaqO}vSuujr21%Bt^Z0t37%Abcf=p@;EViQU|+n#b}<@a6Kh%`CmhZ)#HBejsFSYB4Mt)~OW3NE2bBgk#5 zAj`>UmU#tpXl3?RN9Uw=5D^`~0^$?Z7@oiohlZfpN>-g>elmrmya0NeQ{sNkjiH}Z z5Euf&4GdzKg|TfMIuV!Q|8JocbiV%W~N!C?h)Si z^I;nMq9^lQ}og56j$S6Rc4jPg&d=w~A_*84Mf|5;4zak#SMoSl_2mpPDY}|Ov zZmIv*KQFE9{rT(fzx?{n(%mob{GH*=hQB^P8JST__8xqHSKzHYwpY`L#*%%+`+_o_ zFpuE(q*?^FD4aB-ZLp-80&-$W5kM0`4WIPMch*Ses3eA$`eZng{2$?%?ecBkIMP^U zUkX6x9>D*(Ll@hh86I7j1u97?A8X0q;=s-ImwWU1Z*3ZKLvm*R#cu6Yi`ZSm|B9j2 z=*^{=a!+#O8QTuI3n=2uIbB{cF!mE^f?CFWtqRH{`OmMQYUCAlN1OL9@XFNE;tyt7 zk+MIeWt9(S-eWPS{Eo{s>kMBR|0s>oP{h;6Sq_sDWA33PGc>pOp_LemI0*PWp(|sc z78EI4W-L%iRE<)8Iy3s5>dGkWC8=lZD1)E)p&RB@CbUqM!sdELq9~~~D1YBw62%2> zfOP`1#4}D70vc_Z#!p3}o9Bv`-GZ%P4Nj*)1CBG`E4S)bz!wh$f41b~}y|e8WTc zt*rgLshy8PKc8=fSc|))G{{*T_O9Pf+n3*b2(xzQN>nPwv7DdKCo3o@A?MtJ`}$BA zzRf07NF95x+HJ44m5~>fodQU+8B<+0YM*ScldQmMLGa*cU{2buqoZmyxJx&@W|0Q@ zuVNwB4&-PXFDwk+V$a3v>S`vdg-nGofB5P% z(DfZg+>i(%CmMK4?Xrfo8?EE{EbnqbW{E~yqao(dF{8&T$dVO2*#Igp@t!jtP!Hg^ z#T1XTB4=g(SYmDmv#G?2tYJIpFH%?j$SaT41W-#e?4G*t z2?$X7W}hr304A4cJ9Aanqi4dy`@|`0xq4}5f%giBK*RI#^}CZK@+Q3{1Gy^aLwGDa z+|-5EZsjcGilRvTC|gH$m!jj^>+3tO8Kncd-BEUn#qE<-C$GiZoSW$=FTncAD+Aga!i_IA&gJXWyc-%jLF}QTQa(cb#FE?)JU? z4=dk)xtJa8DxK)d#tbSTdAxmaiL5Kx5B{%Wp_g}<+&&Kmxyu9)2tHV(#Ms{W!<)_R zji*qDDc{A`>)p+*S8Fd&hD;Y)Z*%8hZF_s|Pbm8p;QDq2*dE`}; zOb#zcvT1bmFsC)IM5|o7phW@D=$(6E{5ry985|U9VwiNk#yY+Y%zI}75F_0nX;udx zEI2H=HIoZioBZu>*8Ah$Z+WDss61lw$!J5()~`(+OSh zOSxE=`s;&p$&EC;LQsUYuoumTKQb(sZ?ouD(iv%W)!A2A%5PnWb4YP1!WtS|SDAev z<(z;aisH{3R5syq&|Qm+B7G5<#-P|OtlR#;OkiHVi=jj6~F>KK2o;XJ8cAL@##-=8iA-cM*7$f6h8&%{BM`cy^k9&1$C?^Y@=zA0H1dhe!Hz zR-@#!o01}K-s?UkV+V!B$q8x|tY_C+FmXvYI;Y30J?2?GS|4AZN4-e%9&QXAE&JNW zTC|hH1TdLU1BBA0QnSNCi96AG`iy@y6GiPR>pD6avIq$KW|f9E#ONYPs-y0sY|-dN zU?=+IKB3BNII%3B#9<}-T_#2ljjo1gRKguIlqI58q^NxZtOs|jjFp_6a0!>< zGretDZ~Dx@NtCLC0J(y8hR@bjqE2%TK%X{ndDMaWsk8hw^;+-~z9XZV;S-nz<;F_+ zTPL?!6`bF+Avk479W64_t~s+_Oe5n2Si5ATE_a6GA-g!Wis~CDrM$?Fl{LPlYHIJp2(O`uO(zE6;Pet+^cA_HEQe#j%X#(c+fD9E9?PDR%A~-g+HxkkGUWS2ew$F zq(NmYeA9dV{Pn@+tKEZ_Yk!032|;?mXoNmEx>i?7YuO+j>%0=l`@)0Jvn zJHw|pDLj)tN-l2{+uy(hF+zy};-ESS<`w+hE?dG11~>#Vm^lR2w9>Cs-G(YV zKOtp}eH_O~kBmZ?Y_4^;3{_gS$n7ohO12+LB&Gj3s&-}mC?OYB)iR;74LPG_DD_Bc zRIy&?IN0cxh7jXQnKpf<^NW3^`(;`ccA9#5TvBU zVS9?pKo2>%q&)(!zsEaLI2~C)Y}VBnS@#j_(v;hGW`X%$!SLw=>H(j;O4jZq z36K4N-w z3VI(%^>0(64<>Xf%Wmg)9l7pbZtOnadMe58aZmANjLh{@v)%u4TDE&2)|RiHXCdnA z$DxHr@0HGO3SmpuYTrx$^iuhAbrpG(o^0)G?*8fE)zw@3@C zd1OI0$|O(y)xR8kIIs+}yxl;r24$z~c5Air_;|>xWx7zE)C~{tU;;lpJZF=q<1-8* ziOT=Y2wxl)a7-$-1#K=7*BX(ISe{iJ=ae=D`lomAgatWHN?j;(3vTy|9NLb z^PW(2Y2*1%N$Su)j7t7h=Tqsd33h}0tL;t@zPixtkhFe-31O(d_Iq+$W_zniL&_Ha zTKei}ie-Z{0-hBnzE)s0h?xIV}#v;_ND~BTktsHco zQ>$)6Pf_V4^bYEpKw2jOrjOU@K-njYR(h;kgG_#uo1ohYyoOu_j5@w`H6S2tYk{RP z&=Yw7t1QsclkZ~S9?a?nOkU#=_BBT^O z@pbP%(0e*}3UQk3=GY zk{*Gkfj@bbVFKoe9DDHV&k7yWHU1L>j-}DVRp)dZg7YzTxG+ZyVmFOh|A~SNm6x5iN%~6e+TXTiX@%YxLVl$Rj+abJ@6&*WF12 zOztQ$dsZGfw60Ps$&(_BW@eAd)x0j)-eXoub&u)G{5{&{xV@*uN?h_5lvpuYS5HlS z)xugPtUUxGl2tWz-K~_CU21JHCXuwBjO11B-6 zqk5sce#x>jAmxh+Be$coT2N}S*Q?ZLJ(8(0g)SPd5z!1i3Sl9z4R@?b!`#pVN>)%T zFLpYKXs@5&Xa3_~QXmvv0ooJs7*cwD;%z$@gD= zb7$$B)&0remcDuP#XkPsxt0Ii@BeL)&c6uY4{x^cU}J>y&FU?{y2Zxd|AN5q?`|r% z^9w-Sm)`nym3=Ego&7#LvVXNwE$n)UV4XMpjhG!+&7Mpg=2@HXipx303)()Ine1sS z@bS!94#jDYW$qwOo0_(V+pJLG45N~hRl*kM!kwNwDQCWr2@tp=y}B9+VnQ=ztaTX% z<+3Zum)!1>YbvAvf#*<2C|*I*r%)AvP$pqoE*w`!r1eo!-4R%@%7P`nQRL};hY+`% z>RHi(k$HH1IT5caq7*HQnU`taXS8#j5-;xD+n;=SZ;hU0V-ihwrKCZr!W9LQP4NN% z82Rg4U`t&XUt@9f@2U>o-r({nxc_ed%R6&+XXDqPQOW8h3A*&Jhu`1DvCHVAz{0&8 zf3U0h;?Q$1S&AOd!JBW+`NSD_B3P!#=O#Rewu8&wEgXsPQ7in1^XHT0T&jGDDZ8H@ zthOcaWnLXlHQju;Ls{0EoU8wRVSRk@5$^||T;WLTPVeFU`@dRwc>lqF^qvjgj$p&R zM!tme!_n|^Vd3@gQZ8QOsRszA69mn_{n&eVIl#37q`p4B9LhT$hbK7gftLd#V!C0R z2~N;p{Pt=9DFJhEfatM{j|(Cv0cJ8jzT)KsIZPQ$Cga1=0PqkjsD5>M&bWtdJs$U7 zqV&79V=ZohiP6c?aBzz24kC5^lgLVV%@GAkW|D{XaEbi<@bvnKI8c=G^XcepbfrBI zw2)!40HAP?FAJW_+!2nBk^Dz)t1kCM%S=v|dq;?)SN+gsmmKE-{&TWdS`eQUY* z-6js*-t6{JV|(q@?w@*F&w6XG{?z-=%~wxxg!V_g^^E7Tx3(8HU%q~^xq-6HSL-j{ zJf%7E1npjJ?e<=5zTAX$(c9hXu|os3xq)`idM`J&*PjFO+LO%}I3-(Nc(%FwiZGvT zZTHrCuh+JBH`m|1SljNsezX00Yi9%9KLyxVo3EbH=-GI=@oM)jdPP}p<6Hdb?L1$5 z@q%3~ti1vD+r+Q8zV-S~+nc|CzT11g^#ad)@ARH*0JF6xFE+F*3<|GlZ@ygaJzaab z_IqNt-NS1-8`}%4rr7nqdyZ4cjcxX~hW}sZT}cjOee2ckHhwN+l-s+h>35qu8_T`5 z?adt$GA1M zVWb19WNw-nZMAeP*^n-Vn5=2=)E2Gi(fRQ>S;!mP+n5NH%G>L-XOj~gG71;3f=e6k zyuBSyMpqwY_%8<+Xs4#!g41Mm6)d~``;AxYxK8`HSE1i>U>sVmz1RSA-L%#E_9oU4 zZ}i@Im_QFPK~wffUROVg(tPu|QzRO&1< z_$5s{0)3#j=bmCUHHDZF?=+bm-{Z7(R7n%m@jXn1)*!7S4w>fd-<`JYUlaM_XAr7! z(iwL)6~n{(AdARC9T3RVxrAU($Xe>&`BeDq_VY@syKODj) zYZvfxc9myW-QD_IoLw82m*dMV;VB7(akD=MeH0ublOYa;0OMQdK_ruZoQBX%Tb>Vj z^ADG}U3hw)3Hj*ugT=|?z1t5LC*SvO|8jBi=$@2d%P^HT`0UJJK7HN~z8Igv{zl4Y z=Z{6>4BKS5w@{oeF0oQPsDyPiK$I*-CnEB(+g3F*+*cvM(YcX9?;$&RJ7zi=6xnHgnzK*2N-Yd^(v{I($-K~tprcQ~;#;}J3}Q0iQ~%Y=-(t7u zR}u1_bFmwTX!9g_N@%`ov{p&Hq*Quo`j5unkvk(*kf82#bRM5uH{gi*bK(JGSs`AR z?5-@C>+%B9#?}j+h0i4KbffW^XkRRaeI;}H-C_eOrFE{>qrI4>YUc_!FwYc{oP%4! z!lHJ99H(@0bp(sBYc`|G%jyL)s`9ZJ76@^g3!?uGuy>qKmqV z;kg3S;Yu2^B+ejcQs4MnB{g7ElP@BA26uLz2HXthXp#!W@uv)-L?Kp4d>Co#{>m{> z5fMEHCJGW~6={kQt!vB}Po0czA}b6Hp0HRkA|0zS@T4H3%kb%3UA39Y(Rz)_* z52s5!*pu_b@(>E4mvp#o?fmNgeX&$bFLZ+j4xbHr^d2H6XR<`xd4UFpet0rG{2|}a zTyXW_db)pca&d6Y$b~-d{-$3`{Rs;6#sTJOc>aE=zqPabr`H?sXD?7eZ0*QK%BM_; z!W=mhddkO>r4)$t6|EyhguZYglBQ25m0YblW{CZ$1sn&0slfJJ1r6s=IixvF7zD?( zdhZ_ACK}0o2Q5$#)Y-;nzdL4M9;dCaf#3&{0>{Sk(STW7{pzgKin{Qm3q)cr+}4hG zWP$>5e3*u~;T<4n#6DABE8~i7DJgB*b!Sq!TQV(a)nUByua>p-QpX(BRpwjHB>ku4 z#Zf%b?I+qJv%FtP(9UDXs15T9!H$Ynv{hOO+Cr<;;gYsUztdbq?az7XbxPsXR-|0A zx~cXn;90h{pp?~awm~R=yLv7ZHR{=_EW$Nfx@qW_DP4f?a&_Wjebk2AAKq+k?51U1 zDVovb57#5ShZowXR1_3ojq2KE5h6BqP>66CUVglJtEa=a*Y6@)Q+x5vtnUPHBgLXc zs2`Lf@Mph%vuoE|rp=uIOM4H3vJC}52^RAL|K}{{v`9XAT|<-<|5BE0UEK35Y*!z7 zOVRL4!gBYHYBu}4O^MA>wY(Eqg6zPA(mp3Mn9_ak9u@nfrcf@$l|jTYHND?3C*n{I z+Ocl|0WDjzRKOkbr*8L;vA*kG3v9b22gFY)TTA;k4ZW*<*R~?hMFMeiDs+h7dZ5*Y zY6_|R-HM_nTieo8oI;Ex3pG5O?S5uI==+_wd)~+rAbI2-xWYpM9Y42zj}! zRCopDK*axjo*2AOFRT7*1%%@*UmN9)AUCYr!7TaKZ9v!c-br1zTD;6n9d&Hkb_a*r!}Ftw z31ckLw8eqI!_kaW86fHzE4DLQ8x}#<9!-VlIT*6D0n3J4mF3!Nk%kaA7DiuGiO6KSvh}8ojZ&Mt#ieLjcLNV z;=udQ!GLfR^X?63EH3)pjqR5Qi2VHh_S#FFxC3X~aVCcqTRz1*5$lL;{L{hC27)rz z@TWk*We>Q%Q=9Y(b~-GW3@%0oAMn1}_`~Gj{ndl}_YWq@JpDVo?(@6u3f0K(EMPKp z>Ud`0_^-X%*+dv6pmFKpk79K2MQ@y4vyN4OxVbzl>yQF=xFFndeJ&Bnc?hz?4n~u~ z)z!y>M8DHXu}>Ag!lJDJanv#Tu@zqY(gqF-cfh!S-yQRhMvdf$)q3Cb?%zkm_{q*V?;wc z_;iHe1yNlbN>yyfk^(tHB9IX_P7K6ONwCvbESobttALOUyoiPqp7cSENM0t>zyB?7 zp=ksZqP<7w2sRlVb%t>iO6e~~mmJ2WNQy}GL?!MjBddIYLobeaQYr_=<&F*$@o=?M zYV{nxKBu5}r4cqi96$#==qae);Qe59%3BOBS6aojgUYDU2sD{%NKp^ipWLp>mWYO( zCPf(|+(yf=H0}0Z{={ST++^+gYJ3R#pYrOI5E#1}106(Mt?>bPUFp-J7!qb_C(~jx z0Nt0FEnvpxAHnw&N;&56GY%pTZpOG>qDnQ_TurSvnncuyPU-tA(C|UFkm$8=b_<1+ zca5x2i5o{~q4IZxBx?0jBPWu%)sTN;R?I)#ueZQ@hXE6oN zl^nNncjB`Gx%@p20Vs!A%XLB_s^I=BZ`S0`RuGqj(>k4bL!66f8y@*1l!h2qa72OD zOlETYGT>^RBp|k~fCF?|x~L{8+$4WW>dcJB2vk9d{3@<>{dw=t%in*A+oQ|!$DLm+ z-s8ExgR(A(-~jF!2)$D3%?whl$LWAIgs1KYLra-_ms{|l+)2@*4l0vHo<303bWq9s=- z#0Fbfc0}u!Z-UHS-JZzx9@1l6pC0kP z67u=;uGMXM=pco9^l%%Cv*Ebt>#Lfr%+Z!x?DY~A_b3OGWOfi(bq<{A;` zPU9dL)|JbIS$J0!p-DJ#(Md_jM0O`0uAiE4q=|jTwMX7?E|jfx$5q6tpKW%E(P%c~ z_#C@nh!hy4ZYWN*9J$e169(QMz8n4sj*@@1X6>--u(@?h&dww%c;J=(y+41vH^L4C z?v0k)-iz7z@@HucDB0W8P7~^4RRm3vY_eB$Wu4+;c#BaMz8NFvc)L|%Y(brvhipA& z?J2>am!u=th~m@0(-|iyGnF8&%B%ws3jpPU4)0Fz*)J)j*f6^xw#wD56^Io_3hyB2UH->L|DxYL--1z#hYz9Ngd0G=ToSUz3->Vs8`?@8o``>95hDDNanPRm&QCsZx40=lYr=R`;-e~e% z=B1@;ofqM86N|03y|rJ|>XdV0m+0~zH0Q2VVkNI3M_y0i>8%b|iE>2R-&iFCvZ|G*Z%*sq zuvp;~uo~t;NpB1#=&ROJ3sQZV6!M@rx8)s9twH%+-cQ2N?VS><5$>Sv?_MGS-Q|St zlagmUHz)mqO8SQ9gy{xp0uPbdAUwIX-1{%$_g}Pu2fhCaouNoBOF46gfcxlYbas7)L#MO1U<7Q3638=8V1|?pxI;cd zS_q8bI=Ss^?WFpc694-KlLDH>u{NoeVY;#*(OO6rjKamNTEpz-LQZe~bu(;3H%(+C zP@s$b=oP%Z*pMd6GKm@yDglBSg}M_~iDTJGqxjKQ2$hFm(_N9IHvPmM3r0S#{Z$_p z&5AnR&r2G(vyAr@007%=@G+B+Xs_spImJGI7CKR zO3!CF0?Lu8x(?Nv+&N(`mcM4pZE$gcbS<)f3)UNyHViyCF_ML+r)8l4$6nibPmvcI zLn)Yo$ZsNBgyxb-)~8@mb9UV3tz}HG*zymuQCrF}rWHdLk)0iRra*@WpUBY=TMrBf ze2J8c$nLW9@$7hv>^l$d{)c3G`7qLqE|%I3?&r2 zo`a(U8>F9Q*iS%kdLG!p1>6eaaR+Xe4Rf5jYIP5Nn66&nD?r z@e5?C0${p(M~9=U(~lKAV^1K#N7oM-(EwM;5mF*y(Du-c<){<(A(b6-tQ)17^8?9P zyXvg6Oiw$7Z|$GoVnd4>gz}n$LGd_W=1=bT za(sRU*WkB<%Mq1?tya{*a(J!1K_-AqcA1Y|M|yIlXtkBclpnqxnU@-&4sh_mEiiDe zl1{r!O3m((B&Aa$RE@PLUdLG$G#{=De4H0ro|%j?0-yj7CIRzPx~6 zspctci%=6;+kh%|WGojO-H*_n&J$)&8$-Y#KO7N|an$|)`Duo!q9t!cz*@DXiY~$O z7>8)V9Lf>-T^2?TQ@jH~E-{O)McT=IS3(?=%i25MvV7-9s)ECI*A3K-ox8dtlAGs6F6sRa=@2CnsGz9`E&O_#J3Yiarui-p4XygS|c? z4Ex`6Ws8i}vWqeF2;yL5!NqFX<*PnOEKN;q1J4coPmG}4sYc-QHo{o_tO3fxM;)`(g@w}B4*o-01w2A>? z3HM8}a^{f+hd2uelXa^~j0LBRnPYrmgvG^mkj{C_#Z?3YmQ5V+F^VTkJG)46$lRU} ze+6*#v|y>GHFO4}6M3+-bkikBbGp#}DRpPBy9pu6nu zf<1aQIvXa&j**mVmL^LQcTZqnQbzlx>$Q#(+Y;-K#whJT@%x>g!Vc7Ez)#%dV-x=I z6jRu-JGR}>ev;x-u79`huN}g3EK{Vx!Fb-`oObeL(77Y`7Aoeg!xZ8SROMf~_@NtD ztt^9?a@%|v77m7+fW?ix8d(5evvS;HYd5LACu|Gcr(kIMIY3IxCRCVPFR=P)W`RFY z|3L$YZM!@f^AItV7Ox9kAt(dwG^A%xJ?Fwh%E+5?_*-e*T9$Y}HxRicPNFK9st z)H(u_KNfx5ennbr91m?TE{t@J*29?tKw6+MmZoD;-SfD4&n*BtdxT7am8a=5{e}pr zTG%17!Ee;+q9z1pt{Y~k0$En;0tWQDk`+|&x@vYoE-t2IKB}M=wYor|>m*j@y2H{+ z;0&TASifG%pkA&&mB^tQ@&B}t50|a7d|<%YO|OOwYF%Dea0TS-XW&HrR}X0d7cw^+ zzHF>wU5y3{qGZ(d1JlYL8tw#3d##4q6k?O>L+a((6=e@MyBd;r({(euA~fI}v^j*O zJ_l{Y}64e)&lIg zo^D5wH-P|`76XbpP;&pGF;jCi8b%gd8yzgZtTDhentCWL3a*QXFU%;|xf&o7RZ>&4 zs;?crXZB5A6&TV1`M_|gF>&zl>Lc~J_(VSGmYXl<>4r|&V|JZ6xP_BU!u{GtoYgXk zr`jHy)zHi^{m-10gMlz-3$tE5O5{ep?b5e4s~FI`euw=W0X+&fVCd`0}xXD?P;#9!>#&tm2YQJcpXN5Q3eCrz+@Y!TS!U3>Y?> zzjl04F1Zsm4<8-D`x*B9yXp=-{cd!01u=zZNHmqm^!sdhzd^FmRP)9@Tf;ZU;yuG> zwd&iginpiZL#VZ2+nYUYI&H#j6e*=D4kw1kBknEq74-}F+M&krTc{&5;Gj^L!*0Bg zz6SL_Nf1FcC=l#oF*6w%j?89`p19Y@l?#{I6TukY>{E4OrMn@mR1XU}O~!-&>OlC1 z4gp?Lp2%geuGJF#YGqTIZP{j>16Luz(n5BbyZ87u@-RP!2V7Y^3IEkqyv#PZ7$OvB z1ipIr1ks4{f=?pW9V9dC1_xgpFHdk|+5Z~gbp@}kq8v{neWwqb*hWI^DBT^FRy2rZ z(}+u?NSSy8S~YCfe;I16{1d3vWx}@-ZI|{tr@}3LtUFy{XM>A)@?_tGt2OZpjzMov zc<$nLAT#nWv5M=(=Dpp33Cf+u)WM`ACp^__NRdt<(v%@U?>OCdaUmoQVP|E!x0Tyn zkYutbQM@K#h2yB&38P0vc|CG`sl(46gyT4eY_ZXF$U&9k`oH~0$M3%OAmF#@&&R!c z_j(jVH(KHK1~JcXsbX+2vGt$ewLbcOi)Y7v_zFG4dKjLwkauou>(cIvs`i&tdXZ%R z))7w4uZHaCa(FaXH;w)2l#c8@i%;#U+~H2?2hU<`SSKHGJ~{p%Bl!ZyJg(wv71h`l zPl3LUXNmA^P}eBX&5W6uy}4%ZZcnHgC0l^iRp=QpO~V;Zf1+mWiZobxca7)`2^rGg z%u~G%B4}`m>dB?P9`aI$^5hH*ECvL(84x41^`t*F#PDrVP!{iqsWBJoLeBzY18w5r=O4`+4i=20n_gtNw*6h}^mNkn z=6)I=#gjyE$G-|Qs+sVpHM7B|`^a?mzBBEN@ehk7fH5y?7hy$vV=-xro@syE((0ZNsy*zXt zL^st;*zTm729ZbF>d2}D$-~xhQ4V0%yOw7=h0sV2isCLFWxl0sZ-nlJ$(U$Gn5-=m z3(uM7O6?N67U8skc$1Hq-Srbh&>?dAa;g9S{y+a0rrlGs2*YRNh@@!GPj1wI6UunkciE&_GS z7TT5{IQ5V>t^PQ5gyPihDbpdm6{LWg+<%YtDJlk^C4==)@wLJ z5OeVe@gs;-hJO|nVtw&6I>@J~78@npa$|(J=Jc$Uzpx$Q=Ejl;^I2YEV!>TDP4ZZD z3Q({KQ@K$u9(z6t%VUKqOC?)MH~`=b#^nr^W|VV}2z;=g>v%7J2$!kigs^u+RnUY1 zu;rcz5_E(%jX4QJRHq3?C(5dild#WFh(h3D~Z1^@$m5GA`~D!8;^)3N@5 z(*l&7k)zd-BPLv+nPVd5z=N@0aNk(lA>LKiBTrxX9V5gXX+0!ZaL0w&Xbn1RdDs?v%nD8$3T)N83bLzWkd8K`ir@GNa!(!V5rVJ| zxS_*=qx3JCRG9N{2E80)S;;fn;U9@tAih$z%5 zXr)Z=U$huc>NVJ~Wg0(qoe?XF5oJzwm5{DBxa4eobbIpHPe0NrjWo7tbPd5WxfT9t zp*p+B378(2Hgh=yd1AxP_nY^FVxDy#E2otEYnPXUkMiey^`+|E=ghi(n<0|ZBNVLF zPDs;=iOB!-z&H$5i31(v5Mf>mpF zAenOAmMCgRf@6pyOhb#Uh+o_A-+OpuC**vLp2r?r$;f?qD*-b9aLTnTOuSyJa+yss zC*7kX0u^-E(#8|mJ3JjtE=~t{-y>bsMnB2yxEwMytlLXYBk@ur*7i)_dt5wH7-$Ij ziQ)rPfH?|oI7ckLA=lAZGXlAz6((yUXtT2zcUIoBR4lFtUO$A!;gNthVg6*Rs~ZdS~mX zd8A4>u7dX$_ukhm!TD0^_s)W>ZNbJ7HoIDpPc>-~wxFR`lIUI%7`pDG-~-fuX=PQ( z$s$a>*0fO_(f)1IQ=T@uLk~v16I8XbzUaZ9NLwXdq6HEs?Eh%0f#m$u#b2-d|Nm(! zd9eysFirK>lS?Me-d}qQlL00p{(hI!kEj4w*D`{<^kWL)EZamI{dD}U^k39OMFqRN z0_L+lbBcQxi{(c~O9pXj3`@wem(@@D)LDc9nGSmg*Gt9rsQW!c&hK*!1D7!AYco6p zYdb<=l~S+FYJ$OG*&Trp0$Cc ziryabO=V8j@cr#QL+f24ZZS-2@T| zQ}$0tQcUwv@oL4Bv*mY9>-unG3L2tJ_ebXkIw!P4ch+8S8rwj_osPKiK%Rx8x9{+j zvc*r*n{hruUR*>P8W9ep3&xl6A)XWp{~X51>F{!O6-h5~XGP;Ba<*GHuQ!y0)ZSkZ zG6cj@A6(&3<&JauprgTO1TT>qFbX=c(SdTDWnXM3y*4qVrj4H@mqN8*VJ$@Z#_Dmb zE05(+V(n@P7s7MMld$RfDKdq;7&Gq*B0q&e^$hQ3Hgd5FRNRKO5IPCVVo_>n-@y_b zO>kTdbVAW7@#DHli#8dO9|n!;zTEf@**c%{&XD|5$Vb!y)N6s^e!D%K3@@3H$m?+r zPHsE~Qt}7$v9bVS7K@XAk;GDkVch(KD~TRE$J#qM8eC%cw~nXV=zP<`_3z=n^yB=) zSAk45DO*dv=;DYZ4Tfp z6Q>C_dHHvs0o9DIm?e3+hbf_6ZtOnadMY`gw3D7Bd^#WZ5aN#dDYFf-L=8vpK}TeT zvIKz4b~BczeIiC6kiPJP&(l&x8J1zFiP8}q21q6oMit+x>I&yYwBe)%S=I_SLQMK5 zz{ugH0iPM9$Ej6CeQaq&Vyelif%=Py+0`qAL~e52i~sn19vnQ|e6ewGz>rq|8y2iy z!^dXw^kRS;0)1TlUhcJoSb%-u2^I&0rhZ@-oi&d}443iaBCQJH^Pu-7b{7O?2$nVS z=PS5QwX>@+k{&@~ON%?2;awWz#oVjQD`YN0-gWo~DkGdE6pd88*OUf+I3&ty#K%GiI2!{d2zWQl0^*&(;O)=Aw0oxJpj=_D4XVYh z9q@um4b2F!U>7y=`~$0p4oI|82ioEWQAu4(6zDx!2r8OeyeVnT%gKP8!vu!ri7?Ix zY@eHD46u^^rW-pHTMM}Q0=49v+i&{LMc?d4g~wG}wsH&j#aK-y*6@{MrpBV1T5|Gy zaeBamTMB}d*9`Wgtf*i$@03Ij zX z(0|QA^F(6Q6-Q37u!INZCv^L2b;WG@oa<+PHH-+9U<=i`8GrpLxf#XE)y1FW1XBtr=n_}_*i=UBTcty!MmoSY{!#>yJ9UDP#m-oMVPvjL zZBq%lbtXP4DTGtynnowMnvRVsa7i$BStfz)nmp+SFpy1`Zne9r8FpVNo z1yfAD>wEbP+Xeu@vBC;EDyfZIjIvpW*xld8-~CX2=Khi4Y>y$vyTmS;Zx;-usDNY0v5(YDx?j)*kop>r2+1oz-yqRg!(Zf zCGNOH?N*X3VU6ywI{5l0694E1O(`RkVvav#Ji@Swfett%gsTWq474HS3NB*e(T(KJ-4kTL2cJmCaJ)!(9J-$T z!n^5x`ET5DO01B=+IzsnZ;CXaa%LVP#03sEK0`s1o5_GAo11cwzG%rO*URDqb97is z21rTlV4u-1F1WPFmxcml8anhQ>jRfy`4kR%hLw4sKMrK-@@h~c&1+)u1CeuOaYhJh zBZEmo$&xd;SQ*8>C{jN{LW#_On@%#x z$ClA?BDe{n(~xUNVo#Nc#+%^AIT%vqk6jly9w6fh{Q??b!k>N?(8pE|4p?ZbkOGZz zGm$9??>y83W?4wAXx)`7Qbhk%7ke@KW z5z%=K9sU+6Du}ra7v<0mM0UiSvFQT`#+Nwq01;mYx;*H=hpF1f-^t%3KOgmX?9u^~VHTz5!<$uhA93 zu^2I^C(bGVVw02w_cN?V%52#>ac&=K-dD9riW!E6qGOPj1m{y0DB*ISra-Cod7v=`_k6vbZZhU_rsyM=>O+noLIRQ!!n6paxp2U^Kd$X2sqv!TIu6wMlo z7)UK_3u2e*`Gj$E_(Af^AD*BDH+r>O`7em&-|?sbtS763io}fWNmQ}HEb=X|MfLSaMA<05Kf`C4TTul(Mb!`4p3l?E|rK>~tnf zsw18|eQ+wUf*@`i)N95c$cqtBqfQMIfGhG}NF*mlf1*07=b#X2(#n9v*#z z{j$2p@swxf{in%A(qG2cH+Y02fwU@b;3eu+^^oOcbA3Y~fIcwH za_jI(T88gCyW5-VyVA-sEcU`z%g`d9ztha48EX6}U}KH-t(UKPKpQK;Gju`0Q`XzA zE5U^vYsmN|Cyk&XJqh^*6A*d}Pn4`ZL0`F&JQ^fkUYTJHJ(2p3SEy@PWtgwmws(|} zuW>hW7+U96x%T=NMvyK_%;95{%-4D4H_!cBCbNP%h0@S2tfh+d|f`Rz{f7 zBF}q!MVp)q{U!}E=gbBkxL|f=neZF6@JYR4qmuLHL@dp8d;Rt8O)SH;7edok=A5IQ zkLM^&2B!SQ0SoXb)n+u#53!Lw)2n2I8;iOJ#kVt6#I2E#pz8o&MR zvnLe{*feKFonQaDs39va^wL&VuIzw;|(hqQ14c*xLw@Q}uUV@_l612}zhnY1ne!sszbv;?tz z68CR^?t2Y2?Y$*oJL&HCZTC4rd+!=nty)v9TD1!CRhKX!5k=3~M~`ClnjT8!+W@N0 zV|D*7J6*|$by^ar>k3MwW$hTf^yP3*!oGt2fUz;!s|o;b%Hbh3#fa)h9|VkOcm}%f z%2|zCv>|39?#rKQh@*8cehS$gzza2~)lDujopOPTE}n98|kVt_pV2~$V ze)^gV+&<_Zj{?%F7&KY(i@1B>;=_b z%RK3hUOCqiq~TMQN)k$*ksXMlN*k(u!-@~Px}uIDfr6;zs50$i-k4wHOh#tSqjwp6 z1|l9Zm?gDC ziVnvFkigU-pla^{V#o0V7{%LIqC?+L8@&&o@(a|b0|vqA568ECvcW^a2YTGn)f_la ze<)`<@m1p5L496BQ0zU9C9s`hLOwGxKb=oAS^*b}6dy-8;4^=6b~Qf5hhPFGNH)+K z(d)inky1)vLavFUadUv|IQ?Tkpc%v*ujqO`fPrN9QF5NJw~9by&Do+y-qC?;TEL=C zTl@&%5_v?NNI=mFGK>y#m3Y__o#tM5Cb+g4hEG=D<+DE{`{}V7X9dL?@ql6zQuH;# zA0D>;AtOm)BN&CY+meog2oaj9Y3^4}D)8d1flp={iXp##JSp5r2c^?T3IUk#)vD^z zw{D6mXf?7x^k+f^!W1+!8f(ZvF0r-6b)vGMZWPcPeqt&N=&p)%VDP2pGKY#i^>BQz|`4%{e7VlTmd z+>0?uY`%78P^~17Fl+c`?I*+&zlMIo5A9GSa!}~RFXdGHSEB&~|GF*Xc7W?{k?FG4 zWp)HfgKW$gPKkgHH8`AvjKK^2qtL#dmg%`^g&lV}v=**(?zTj(ND!MhZTIvQqAs*y zAVcOUmdX#DZR-XE?*Y0Mw3JwpAw(0ZLEW<%cA#CSbQ|DFU!rKR$*2OWo*=%Bu1%~# zTK}lJ_~fO#lQ-7ga!xGW8h~09H$H6pUNR!|vV8$rzj99kSumuGD_8L~JzWRQ;_102 znp5vkKy&(%XzmYiN2}Qf%?QeBr3ktPq0mQk%@L&Dt1yD}RhhR zO-e?y#%eR%%)e84u9)8}EQ3qWi0FyXwX0f+)X7zJXzJ%+Y1oy8+r=z+7K}?=cF&`5 zHB8)qn#5MQRv%&q>n?oMMDnW?ygGXEBdMJa@WL5;iDRI8WfnB7E0w`PX6j>t1hiw? z=x=_ET_w0|Xgupay~$oK9LyfI`XIOI!dMn9QR>QLu?vSzAvn=rjTH4>QAX8cD3xgl zgDos>Se!NsY)=Q)ThDpMtT|+CWpS*2;Bz7{RMgs|*fOR7Z$#|SWuskiK{b3uYhhjl zV;o2(C#}47_%+f8&JV86u@;~gnGD&%BMf}zDG=i(rbMuIziY`k2FdV*atmLBQT)0h zR0%&Z_(L3U5gCWJze&5oCCluJ5!P(t8&;#4LKlDZoy4xgN+@emYS26)=b8OybzZi= z-`aV+y0wRFH)0735@bMPLRvBQhch2IMnB(6s(?tXfM(f_fXK-c?J$~EahP#BK$Eg1 z!!DVRC+J{hk?3Y#Kynm>YT_V2=MjGEwlNHUGN^-p$uj&KdJ?~u>pAxa3LcDH&@HhN zfHbdpWjjDn;xye2WZ?jM*#fS?GL1%Nl^#E*g=j%IvB*iY2A0O$*I}{J)H>vp5-9H+xKyD_emL7?4eX6GV zT6fUJCHA^;AW}N}kZdBPhO7%eA(cRZXeD7rNC2H6IUBT3vq}OpvEGB#EYX+u?c77G z#kf>3n1t6Ey&4yXURdO1+YN;_S7*gH;hOS2!w$20lC-Mb={Nx+g#i_G(N^q-;a%;e zNA<tq6FsiF~ODs1Gx$!gmr7@d?M zj2%KR-5WUw#4YZ~{M)_(qui|pb(M`iLDuKT-z?nx zMWn?0+rNmp!oL(3?+@PIx$}#gH1Cm|UG^@i=SlLYtg=|ff5Qb*X6Bm$)>JKHQ9UL} zWYs3D1J_T_f{p)K>xoa@Yk|py6jlwUqiqq*pk0ZkB}EDn5-W&xQG+BSnvP zU_+1F;$$_#(p8#bAr$4=O)VApgQmi9@9^qXC%jr%-+27u`_ALlwZH7|uC8r#p6~Ab zu(`g`*?Iim8*BS&d`9ge2yxg%z2%%-?R{E*o8NCU-e-09`#pB%7>=&004lvvf0#cR zAvA&AnB^ePFWa=4L_q0xvBZe58Z7V||0iT(iUjt*$0W!Q)E3S2H|UnQv}lXBEzxzX zV7fc~n5C;q=q0+L==V}XJ=mO7Pct78wmFzREQjjIVWzag1bGmK(IH(6ysE~AAE!(M^f zh$5q7Cl!G55$VW*UtO%ssXfmCM>RO-)S8zUIp9yAS#Y*?PR;z90$VWuwE)>2w!ow6 zniG0EfvTyacOD%2r?u8B#A@D+}LY7ZzM!IJrW)*FwzxUhkk z5yhn=gE`1m(N8(PUMlkNHWflHoX~h%Xo%ZcIr2j8GIcnr^$-KlyZRUsCf+n=$jHh#1CsSzB*O#sf#TUmy zkekt7P<+6-5xaP*3ot)mY|uvbBK6zLV9Sz=z^eR16uID&HC}uazDX=<+7Xc7jV%jvAf~_$%FG~T*=#IiIv@Ckk1#<-e8&}LXbROr z`j1$o($F=jrQl4lD{WFjCv4J8EqHY$v4ci*I=N3$Yj^6%}6#cAPm*MVJe;QCr+c846~>r{b^g53j~X zT(R^RCbPZV>Yw)+VSATHDB{UL4=ONpSoSD;qW^tz6rVV>oq$4kSmx{xUieBepj^aV z2;?MI!WwmYJ)grEz?L9^ZD|Mu)(d(`ij9i7B7C^uL+5V3FJh4#HL`X5?10R!SC9!fPul zm0UoOtaU;susIP)_qD6BU>PNX%gWfwPuUepM`8Df2JRPN87xOuxTmbK{rr_g?(3tT z$VoiSj=H*(s=-NNUN-6eW#UwZubfsjHBR>0z4HpTotw1WD^}WcITyg~RbI%9tsA?N zLs)rgB`DYy0(8BOP;)>n=@~xQIwc$gX!OMzNb08h$vnVSIOz(`ipFQNFvEB8zhh|k zEEf|>svp8Rle||#8^v>=|KA%}dZSWUDdM9(cQSB!D3*osM!EcpbfvtR3@MD;@h7|; z_@D+2z-z$>i0S%*UIVMXQ`TH5w<}Vg0Y8P&PG`yNneEik_^@5GkE7iM1kmXK-pkE6rwHNi&af^ zF}(0x88V*S+hp1@nuFp-)X56+H*V+Z)+aEi_Lb-f-_8A?(JAeesM19QDV+Uiz-=S) z&4`w10?0Mx5Qtg#7KOuRWa3{JU^H)zkT$jxLjYJ$qsn@SStEzM{7OR004PAUe+X;5 z)D$X#FdLQ+m@6~1&CNi$IQ@(-7tvYChO@g~Zt|I2b0sA3UmYTENaQN$d{L-2&E$h3 zVbz4p%XyZnGUem9lTtpmaFkTi#fS-xsF+(&D9jlx)?=@G%-k@Qm@FC>As8WA7DClf zh$W%Xy`;rqsi;x!-RbMFD=-m3>*s1GX9`paSJ);!z z3$$k>a?=-1mJ`#P&PMA2W_lOkc*Apkvcj1F8M1H^Y9bey;VmMuj6%v5Q*IBSPIjSD1g#S_ca?wDBA3E+x4Q>D^g3ai}Sy;!-wuXa}q#f8P}YF?#p^{}t` z&fOlf`{QH|o~E%gpb?K=H9?+h8IThV2pAM4#?k|LBsJ>KU~8DAnQ1V}vby(_xKr+N zfu5^&e~k00qbmfOWxY!VBg<2j8YJw!xtlt;KrMBz14hWeA8=<&+?54V<)5Z&$t={c z8uhG@twj8d9zvNHMYOLoDYT9`>e5x?YbV z(Z9C~-i&HiPmwT6PgI-iX#_y|D%ro4Siad~z2LXU0gMYuV9L*dW9(Nc(namw~lsW2z1hB+`g8 zHc)*9%=kFHKC=!824Lg*!UD1?0i;nhjwxhNmewe+R%Hdw`l0+AwpGO=#r13M4R4bvCjaebe z!nSE%KWK|g#3c&{A3RnH`Xww8^wHM__BCGuR9QhQ?UU+ozKf835)-T5=vil=cQlR; zo}6_raUn%u7{(t+neu}hI*HL%R3%A{`agFsaW|2<=;DIGR^~3a;3i>A(w>O@1CbN z*LIM)cV*>sICar9RXzvNJGQ$>c<|G^69ThUL>_%*K{YBJXE=dXPDC;&N0@Y0vyKLE zO}I6Mr+Wc5TdLHuSKx07*;1s~K@+eka-pMs zyA?;lM&v+SD->UvlK9pxWcV@=cGxnBTx<)kqKlw%>LEy3+$8S($n;$FCy#FOC$B^m zC(i;z@=PglHKw3VUY=ri1cp%ZhQ5U4k&z(Hl7`Os%U*txz@sZL$FWP&I=wk+xIl(! zzj$qy3mU`i=y&SHNMqM255Y}+Q$pTQr+Elp6$W1v)L~l%&fVo>eI}50QI)W&SIMz{x zJ|tF0+nEdJvuh4oIA8L}g05?83Muihh^`iDikN|>hZ(}zpa>oWR1JbKriAi|rrfm{ zIjFWeS~!$E23L7lxvY4@i>N zLi?s-N~IFJ5a3aljE6r3tH@VOm?{A(a1{>nK2s0Dc!!4(S3ls2g7%nKiR!{Fz7(+% zAH_==YWUhUekWM+qyVOe1qmv85!WDFFc?L91dV8}GSPAa!~hE+xM<@InR0ih-WmtD z3|`QU;~~PVfiq|nfbOb=gHi6qE$&UjRgGy;wCkM+SRICz^1jB)F_9RM1=RW#VZ7cG z6X0dQtTW;|wpN341p^-<-s=Y^A@JEC5br0`7^Wz%D6cJaUhC-_ua?baUNwBms>in$ zcn_$<^cM|~D)P$mCRQYI2;Jlr<#kq3-^7Z6obrn5fKE<{pXjn~l_`VfZT7uTNCsq< z37&d*d%+;?a3& zJTrsmZ|v;@r>ncWt3N6lL;UCD`i72-P6VDnD7c{zzh!b&%*WMBTtDg%nsLIC zKtBJJNI;fSIJY7W8nDV@z3zZBsAZuF)9Jx5hgTzBuQ;_SFN(G}MgG{KWC_*1`Q|Yp z;s^V$xV7 zx2PA(j8)Orq#T8Ig-C1OhH$%73@Ek2%V4FLZ=w8Rc3AXZBxab0F8xb~F@>2?$Nhii zC0|7R=HX@F()ukWx+UeFIC!pbr{6BFIUZu$yUAN!uwP{dYSwyna>6A^CQt&USkx#v z&G)H}xgD0ck`WD#P0`EbP1wl_bu^!ZUf7Tn)YrI;^3~;O@|s5CR)6sN$#8VuMZ*;r zS|%t29*AZQ(c!TMf=o|#6I>e)Q$okmcv=YN+(rLq zxhSd_3)VFGEC6rb9KJ;)YXj70X5aX9;D&gi6MLQ1@SjM9z|dSM<^>#ukUKOw_N^_+ zINLAwpDg`}YdW&XstNT#@!0g8@md+swJ(c3T>3V|pwvP!Yfib^QimHVd-lrQGX-=A|fsRMT~5opzFSnQ=eva^LHo^q$H=hQyaf zK2X2~Z}X{Eq1e*u#am|W7#?=O&7;c&qe>P8NlM}a0CRB#X+esf-oGVe5W-7_oT@$2 zAUf;~jyrO>gXSe>MwP@tm4d3;5}YJ422HSXrIx_jJ31ZaBX*@*q6H073L?TB%2(qO zGE8YbiX^B}AWP5N=W!XHbAlQVcp>O%6= zR`eKREVHEY4&8 zMPmL3l8~e@jmEI|2A3xbH}_9_67`eA9?me&VgcbK>SgP&2kKz75Uiqi=e)l5&1r9- zX@h8hb#cd!>mWCfkj%7#5BSn6=if@Hp{&QDKR>;wM^U7)ia?xD&n(S`gk0rLi_Bac z)WcR;AntRAQWy$A6MnJ%#17!W46!kN6T`Hg?(aXpeRuhe-l!fKR@S!3#_27JzUY$- zok_Vs9pa{>_dEAfTBqX4w!|gkuyHmaz*eSh^t7}OpU_H+cbnfny*x(_b+daO^6Dl? zX3(}8LOR@3(jCL<9x-CY3WDdHO5*^tP4m6WcW1rvX-`t7I|-@N%?*xV@dX!ePR=R& zV2%r3_~65p`3hi!Tho7z)<5J-Eg`F{40Duf)slWboWRUDaNdZ7sIvp4KgGPIXh{`9 zg}y2u15w?Q;Gi{~ZJ*O@@*8Zz8W4Uj?sLmYaq$}vWN8N`G+s_|s)jNC@teLRhK;OH znF|ud5to%;-}!n422cM|&m8X!N27N*0}Xk8fgF~tcf%{JZF{)(YxtT181ezxnXh2$ z4zP-ZxIV!q2eMOyM1HoeOWXYG>2P=fJBw|MTW9^(z1Dch7*IC&hKuGmqv7Bc8-Y}V zI~)lkW#hy*^Nh)5xkbR$G70-D;y+KQPzIarKSO}bUk)$3+?ug!aJ@H3yAZA;q7E*C zK3z5^0aRY{Rn2i+C^d*E9`M^j{{s^!2k00I~pDbbJ(YrL-yy+a}?`wGQ!Rg&ciX8Cs-6}u( zJmnqARFEHK#>BR$(YA@nI7Q*cu~h}}vO|yjY&d>)xzf6O_u_5qhu-KIx0)=rR!99V z;;F~o!FUOIS^FojgNJ9s(Ms#HufF;U-hvcWv9V>5+-Ot&t{e{GP;Z^~`pDwEa_7GE zv^4JjZ;ub8+okwza+6dBE9y@ErDcg7Rzw7*?Weu|+{f9l{uwfuublRek9z~;otp?X zy8z_gcz+-OS|3eSzi4rh(9&^R3pS>^pI@`b$z3hB5;RLu0DBIh(;px%`WrIpYA^ez8)A4c0TcPhMZmT80*8z3;dyq7mhJBRcHHdg7PwDtJy(YJTM`L8$_ zGyEpi?VqzZ#m>rLhyw}D9j%;75X&#JK3p>M8g>}cn*z5anC8m8b05^0tG<;!EWiFy zbNN$5VZ6&O>ib(RY^r$hRNRh1n=TfHG9t$;{1(dZvXHrkR57?mgnb7+|G^r!pAR;3M8okSQ*wKXOZpiSM3BS}in zGJ;tApGQK}cM$P!U>B$rRbly$ATlcMD7;Mh7PbRDv8kq=RYNzm`_*0k@BW8qaIB_( ziK1L&D(t2v4m!P?jm{KmMKrhWe$ybETQf0HkjGTEmC31+w5jDvNf$yc-fNrFLTWrV zNwoK23FC1$zJ5l;i95(`F@;s^5kh+59gK?=F2o+(Sl?OO|MB^TnAeZy9?;6xb<_ho z?BkN^0bF+7;G^e7bE%L1{ms_xvMjd=9^M=cp#jHO%&A}R;myGiE|A{a#li4o$c*cG zP0`e`B`V3=U*O`*i+94v*s;5X>AH&u>mR#tEZ%4#ym+|Kc%A`WAb$9)#*1X?`l_s)*77G6B-A^+v^Vt;_$=|!?A+_Bxoi$yU>{(go0 z%Zrz%iZ;FCg}`aJnExc0rvQ0u-H3a)U^a5L4?gOx@-~Kd%#G8v-|SKmKgTx{aODP zI?2>FQ<3!EJGeakMZ^&d_g8}zs*?NfD=4#m#Q3{&=kwZ5{=Rb9144U?f7eAV=1bhm zD{wBq=X!0idxT}syYo0&ffd8(cd=S`U=f$~3j{PGfx2f)3Y7o|eRTi*`0B9sqndvA z-xrgIbc5ImR_ITV6X@*SN`G+5JHT`ZvTo1b80P$4LxW!=%SGbjz0yufqHwU2qx_#x zb*33wpY?iJS~(5L%Aydw*)pzGk;|XC!^1EQ+5Dz|e0jR^Uw@QUiqokqrAwhsAr&Bm z3zsxx(&%;+M-RwYQAT7=o(H$}Bm6-k$=u6R5s{f=Ufi$}P}6WcNDG9(li+-BKafSg zES(SBqN_UBN#gz_1Cs<5GNnrUc9O!!%kuU(FxiY$3k$ z@azbR;Pu0s5DTr7htzz_eI(N!J>7q{bw7X9uhNo!(MC`1*TI*}M+TqocUD4MC{8cM z8!q^a*`| zi&ZA0i*d8H&WdHbzO~%0=?nxV$9`r8+AHL3)f3X?h_{EFF`v^-Y@Hwq58^3>u!7cj z6v*-G&Xei8AyC}dGe>H&{42o7Le{^L@EENf=d3Fg_X}3RAM8d-W*@ROV&M; z7z_apaVXpSo&WPA8Geh8{6^QDK0Sp>LR&FnG|HQ&L({@GqD&?n9 zloZAY-Iq$CHyEA3Q{W=&Tp3A{59;zvK-3c#7$rNfUD2d9k2$qAsPmJr90NvSvk?aQ zVF%jc;WQ2F9RXYQM`qTGENrruygj^>V>Ds=bJmkEvELc1O83&|){wcCw4*hgkR4)u zd9aFoAo$~t50WC>V)p{c>n0GBB4sO<#w{r^OCv7^eJoMN-Ls?~VY1fhJ_Gym?}&TC zEve@yju^9g2CGdb~*4lSittVz0srU6FUlq_z1QHea;QrEHg%ew#Hd^9H@shQ5RQ5bBf< z*dXci;0xwn?r`QAR59qVG*HA`9i8+?xMVPX#!00E$}1k{K$#ph`p!^d<7>P}&sq@B zxd!YHt~4>y{0Xd@cmL-K%V+o*j+NRZl(eP7tQJcFo_YkSOpC|5Vlsuj9x&fU$n_@O zO-ed? zeYC_RU&Rjd`2}~Gu_B^qf>G1rinMitL-?)Gn7rc&u`u`eDRji)rrj#E?Cuf~^<*b( zNRMDyAlLw>%|eUc1tXQVUT6vxno#yZBVbVCtFz%D!uUehjpIn67WiysdxXOz{bPg< zGYyTYaYj~B{;h>?3vm=m4u$~XI$g)dhG0G4WEY~mlh;H>hPdAHtL4_s_Hr;8VRPQ( zL?o5a7VknrDX9ygBG!MUt)u|Mk(?eFbaXIS#|9W9H!)inTdUhTxCtG5a8nZUi3Gpt z&AVFXIW%R+Qo}Mkrd((aK*LTp&?`oPY7de4)j|5436kFMLh|w5HdWrosqCJ50L)LPn`;7Vmsk5`0o_EZ^2FfLsulA|P6mRDMiE-^BV zNTWy^p2^W(gQU$_fGr7`md(L)RAr_g@xDnpl+u1RYF*Z*SUjCQ|@ zzN+*7YBlK5IHQIGooK7VYz)MV$w?$FM;eVf`E zhk$FU9QQ}m67(9-Iayn^rmk>}Ep>u00Tz73feA5maVxSDGPz)6xxIXGdI4P!Xj1Zr z?DiP)1><}ZMw(b8_IDxwyxt$l8L@X>&gl>d1FVHgk(Cu@{pqal?C)Wj9SeFB{&!_% zYh(3?jlIs!_STQeOzH(zF_?^nY8(DiVZSH%u}w7USz#F@M{8@;;edN0EVMsd)38!w zoX`T6r?N!M>aXLF^JlmZ;eV>^1eNuB(E+LHi+*g)b;9={h0aJlR> z{l-eQ1yZmy*;t!wP_`u2=2O zwO?!;S_5}qUX2E={3`CyOq^qECYeBL&EbE62V>isWh+!Ar~GbwmOZ;Oa^Qi%}X z23r056_~a&92_B|JEu7_Jwi{Px?@Nr`B!C#Yz%y$xn&p>j`G8<%5#1|kIFl&A)AXV zxHaHKbggMmSaKrjURIy}J?}-P=R-0PRs0P=^K5RTSTpz+Xmasi7;oZ)FkeUE&XD4t z%%?%xx&ECPaUj?AoQ14FPt2}NF!9kyRFzQaq5|!|qxT3`7(mNcoHD8*&gg~8zk$3( zoaArmO8IB{j7;YM>h>BASLatYI6t>IQWd$M$n~Q#N3=Jr`qc5`WJt4sxHR`l>Cp>< z9RU4SzMm8nQ`e%u94!Ti&ErVb@W(lUa*#gK55&{-@p|)#-k@~I>1dvd#X`v)JP~P8 zOyGp+1yQ+cqRCa&1Y)DRC+%JJeN@X?a^YYAz!ia8pRgRkH6&i!SCotim-VC-cw#b= zGhZw(>q^LKv*v@F7T0r3)-;q-WzFZuIK)c>HsPb1Qt5owQfHjon%YSp$WbI{OtB;^ zE^@EtW30=qen&o$TiA)R4p0-brWy7j4kzg+npJEBXKCQbPTqm&VEBYwtJm?@#a1XT zuj#O3rzxA{jnQLgB_dPg{MpyC*Oz1t%c<;Zmq2FzXuBkx8`qi zAy=aTC5{V%NG*#S^ZpFFPZg}7#FUknLDY?iUv^i1x`$7Z3MYzYkmOZ)!xJUWv2HF5 zPxP2(+*Z&5vPTRl0EQ8Wadbo83_mv@~{t+|2aal2S@$hXm0L#Z*-2R3#O4kHc0H9^$y>)UX2i6+(Rya zlTokNA{!z9$t&;-6acaxwGfLwMup)a_K*flm4V=UM8VIYB;6GVdOW#&!`vM3r@#ss z4-v4#-M{1Ek))!OOrtHjB*v`;8dEp-tj0~aq|nJR{H$05OGvzbLZ~ii{pu1d1#;`l zw#6bG14n09k^$2{pY_jis!|eTuxSmwpF^WqPc90ai>>qFasLF#MC9_M#g;6e#|UY~ zIX^Ugc!dyh+Wr<{j{woZ@oj8|o*%T-9PI9%!O6%w_cdbfdMm^JM?8 ztGgSm&Arz1-JKsc*O7+&=IS1vv2pmb_Izt|1MfDs*S21)Z*G6zdW?G8JNvDz&1aj;ZN9(LVu#k$CL+Ah z*t3n@wWnx#_3`G`=Khb1b5Az+kqdpV^<-zawc3LJbANN~#n$R>>-me_=R12F=zbl| zZf|Zs*+nlK&k!-Tj9&4swebTUT6<4dx3<{T-0BNJzf1U9Ydg<>+}-^C>3-|!&er+{ zUOwIcWUG(2Hnb}YYHe$E^Vwo+ef8Pu_k?b@wS!i6=U7akYyI^pQm$_7vcFaQ-`f7> z&Nhd!wzIvzi$@&R-Pzp_RsXuVw}Hd=yPJDN$dlcjXNz-0Cu*Q|G=h5DaQ3nlqFN9X zW&}luuooD#!_r#cSlvQfn4axy`j)Td>v=+ceK*EdeoR~Ec2D$I1^JZvsjlZ#n$(fs zI1X60%kAKh;(K!^KmiY9=^V>4_QoY36+Ep1p3ISJ65=SuH~urP)xsAmN3Xj*`L1zl zBFMHhbrx3z@dIm#7L5J2Ib85^UFM>=_KD>~ptIDIb#q;13`IIKZCaO{+}FQ0YSuu) zRSq++d>z|-;@sKfCDRk8>|hr+Qs5AKn7Gs_msCip%00|}K46xKwy}P|4BN(%&3ot* zYOYNB-i%lE3BYArf(lFWIY>h;VzaeW(x1-Zr<#Vyt95t{GZJPZMR~2aIRH;MKMYF9 zk$QJ;9X%Z+a5pX7YU}Z3MQXSR6GOfg>rrx8;E07s%Nluu!F^sw(82$d^GS1PVSWhh z+#j$>kR49P0a5nA6SZ$}s;al$L;SmR3X&9qn$pB-ZjQHxSa9PD%#vRByn{dtWXb9x zv0ZFhRwrQtsxNkU{0bk<3Hrw|LSC~XE(-nVZDUu25gII%wMr=!FMB0~70ks%j!zJT zrO{m+xURkqdx#T88aK8K3kN3C0D0Nu#&ZdciZH_FgD=tKYVw-ogg7M$7CwKCUGoLs zIZu!&XL9C`himLuGq3xCv<}G_Zji>1iQ``9YLuaKvBkSGUhHmlp6=}JTdpQUPn<&8 zd5gVrjOP?z84BTAPd+4-Wnk)-61a(LjkM7vm0r#%Cmb-OKcC?6CzfpyGnmwo1_Q1V(Ft|7HI4C(7 z-OG8sw^(cg5Tw@Bjqmo!<%OKkvd1vp@=~sYM`Tt`#~+L(16YW;2}@+?kHOOX;X4HX zfshe_8hM@^)wvuZJv2oCPCN)*1l-ddaCC;iZ~v0KP@wSw$@`gIv|3gD9)bVkEPN#1 zKA2Lf5=xol&qt?Nv>_-sk)oUou5_5rIJ|~9#8nFMOXM2xa_i3ByLUxmNIxmQB}cow z*b%9X31BNc@S3vT2jGQkIjjN2$kY6hSUU;}Ix8-G{)+2K{8s?r!VV;W;7!bOgg;FA z6TpRs1bTl`&?m8?`Kn!Um3m9X>^$TwZ9rgLY~ert@sHF>(e0!%`EuwHJh*TGH8gYw zzc^(?Fz5?Lu3+=7>?n`u0;))*SUz)}D$LZ6hk@>v6nD z6qybtq7#%00F_o#C4~~;s`rV4oF-UeH#WpM%u6)Xw0DXjp?QI-7Po>i!%#_)dU`LR zNJ6FPf`5tLq@x}L+rj>*E60D3@_|5F3EWRwj#t{oPvzF4@ z!kVEE`GT`(1OTF3XCn2X%bN-dK-TbtwpI}7rPAicLL#%Sm>=*pIa=^Xr#SZsWlm}$ z^7uWeJvs;9hst7VvY9Fg&ur!Ce6+^zaC8&r-#NQMsCmzH76c{5seGR ztFSEn08J7^lpApD7VV2^@rTwwwBKu5RWt=vpUfb?L?p%GU`{d`CmB(+6wK~n#A0<$ zqlZ}_Q3-5ZmnzWm%v2FPt2q<`-tPy5nj?W#s}%BTgsYvM zLYS2E;$MSA2-j2+F?c_KM$mi%jRb@M57NH4zZPucd7=IE=?~93KVYi{yCWL&dxJ^v z-|~W?S3GvHVAZZmTcPYb(YiaEL|V{5sj?wVmIT|y1lh!} zp^0N&t@WXt)IP=1UA~0+tH*uP5b*eA_+Kak2}de`_1&Y^Jw0TAGKaI5&pS$)lGN0&Ppnl*y zErbr}O~O_bvx!-1FOi(mlLnT@j9!((w$(U!&23s4nL7{(^s8i8!6mD9GpZ$-N=NZh zi)B~y#J;kx+35X?&Qe{CU*^92QX3b}RRMBW%G=zfaEK4E?UU}r3lx&^z|jbny%0w~ zMiW-B;bm=uxCKm5VBPb2Bk_cq;XvtxJ=F!!n#6fa2SWBXn%&+xf;^FB3Pc>TgRrR5 z*_bhsfr(|ZwLi!I$Yd%f98JXjmlrTlA;n5hNR(K<<5_z+!P~TGoGKkrSr^~o)Uy-? zRjV{-&pP^`0K$)Q#XZr+!5Q|%kuB*OMFnD5wk0r>9K^{j!-l+doKScNpgP=@Q5C#tE zEKp!EG$|Xw+SARg_0E&cUBrKoaN=y`C=czTRFvuk_>$NK)|TKvCy9s))3xkMlnX4) zD*}4u0%L)m#n1=3MmJRHH;Q@HrbPA^1~8kH5r{0$4SN7#TVia}WMY_h2|5@KI&XA& z!Yj=vezK*33_}SXcLy>`A*~=B7p!L?3MZC~9Evu-n?fH=I|om8wzhWu+S&W@86sW( zvIkKymChWTPe5T|HfN-;y^XCW34!UlOFa(Gt)a|ID(ljk6mq~S%~vOvqw$4pu$cao)#2S+ zbFiE<*VHYzrM{wdovnD-9u2R#WXY6D>%|ss=R#}v3@u#k>z;g--hvAui8*BRG1_o% z?J15W+?o@)*=V0Ij~;Y`gw#OR=&5)b8N99l_B5g`042g3x)at` zBk)qIx?BkevoXmMm0jxMC3NWv6a^Redn3>l3FNdf!KIf--__GBd?bV#*LRQJsjnXv zb-YhlT`jm#Sf#FHalvw|kI~|$0sMV{D+%tmXzz0r^dSdyFsMn=McI@sGh0>vc;WoA zgR@r0lmNC(f_kW_NlA%E3;wjGK*w*t6dPDgJVl^rSFOUHvoNbUG-2_9Rsz`n&2Z94 zxW`wDi|9WEIY?ON;1a()((K!BzZH`i=)&OfUonJ4(3{UyO(53*C{d#y`BvthGLf6R zjLg){39nF30pV;#)Cdx#?MJf2356!q!t`LV%(ou;PG?^kFt7y5EaJ{1Jsux1B15=SHXS85mTk`T0R2+tH?B}*r) z%DeA&4tchad-Sq!SE@ru8q6+f9fnr+K^e#eg%pvIHG$ipU3|R4)yz1IyEU1mIdRuf zWP_N!q&gB^MBPhWC9yu?HgMxh=xSjK?}T?dgkh0(^RLkCG9t&kI;o;(k5Q?T7J{&s z9(xRcE#99yfJNI8e|tye>u90V!J)vty-o+}XhmOca2t_w+b)O?e!&AKROm3;LDGMO z$pKGckt##%sE_49_zY+^KBIAg1`p5_-0&b-b`fB}7e}GF_ekTCGaec8_fJQ|H?oB= zFKisYgi}9o!I0+PPwGHr&U^@>Gy|TpUP}VJfG@aTJdL=VuO03ECe$If$crub;w}KSNrD zcyv(I+Wl~n&SYDXwu|e{Elq12+L)pQ-`Le_(-S+ z#AtAf*=wrVd_ql3BjE`x42kJw-sky~@zNvnri2QjEWNF0QHSqT7gMZI<}L{4v$|Pq z3)Z;wxwagGE3#|ktoydv^EF#nC;?bE*f@^9Ux z|Gl&HUkA&brJugM-ACc}5^I<#eA*r3o-)Xsd*6H;UIROBvT+K_31nxuHids^-WFjU z2DK_g;>+wSuKjdaqQ!%8fyH3eya*Pe+(|G%;t0{E%x}?J_=9HZVcYr(ZJ9<5q>w>D z5cPbaE>eh5;9-PSCes(!ev7ervo!Tqi@WhGz6kB*4wrivcW~^vYg-ZY;hT56c5{WPFqJ;p7eyfCM-I;CW4FLydTov`Vv0r+0Y4t3f)Z``VpC+wOTQ9(*Dgn39o7~ts<{)=$y7w!(@CAV}$Qw`Y6C*R#GL;Z!6K{%3i3}MnAtjAsG^h5Wp zf8aT^O&s~aS+uM!4tXJ44<)uP-Z1e=0~EUir1snJa(lvOdPlHLJ)!p6#SuFQn3_K!n9VahiAHmYFMc6#@Q<&#P z4i$$n)G4q2I209@7Db4*jjdr=a1P{R2$4?GSO*u;1%C;rFdQ;UyB2f97SZYZm(s^i zu@hwcdfWq-z$cnYq2{Vmszx?JaXyLkjg@?S5EIH|ZhT7^l0py??)_lV3Eezn)RDL_ zlZK6VXNSs9+D62#u+IJUKq+rrvnq42_Zy5%8PGU zc6J&QIqFT5VN(i|XL5r4xJIKUpF_L$oWKmZCS6PG_IvgYTz-28F7cBN{1rR!-?MkH zJ-jUY0L1<(=_Yw=L-9hhceY1$<3kbMlXT#^XkLEI-sn2-j`BuDX(f%i5}TJFvp4!g z6`VI~`YvfWYCx`asSIatd{6S@QcETcn$kqJiV|kUCDM}l>Bw2QEGwL?&5Z8{oK%V#cYf=S6E9H zYWI3soIc97rUCq~VqZ7;gJggZ%FxHiig>Vkbc8UG_1*wkI>OuLOjJ_a!_}q~+e0k= z*@66bO3974aA!!4M|i3H=af3yIy_zHa8ykxOMjRe3J2R)=ZC#fd@*}Xilnq&g%ow& z<13hy7J6@yq!bAu{F~8;_}0Q=1Q|5B2~%;yq<*wS5J+*b4Lx3h3o|ln%}2&hY~sQ? z+wIjz33LyC0#tN22**k@Y&i2K;?P!Z~{S5|n(nx{jmgtcZ0)~P)B1x>QScWBx z2GShaTZ8d`c-22U=KNSuF&SA0?k5|5;sHqPXc~~x*3zTy@$o`?NxxYXMfL^etyrq< zTUyo)TwihOot5IxOjei{KO%l5x5O%);zMoIZnLKCyrAkC7Cg?xRe0lkL0ee%$SxC8;?^xa|JWo!tQliQ|PVQ6^H{QqCH%Q z`pi3=p_*&f+HS>^s&=a#s%e#XNSQQlsvy=8d6_5BzlX0la)1brrAMd?t5Dcwq5TRa z^q8@Yu&&Ts21amh*d|RLvispU?`+OzrCE3S|Jju%eIPdg27CQAR;~AQ@Qqt`0|@K*A?|?GS_z>jZUmF- z$b*sHJTl{jc!y574$*6bBAkxC#qFctDSAWU zs}=IL@|4+VY7piTSEuW)MU_@u^ugXWK*E%HqcUqG;~Rk!uSv(=bln(9nt^gBK;tAF zz)PqTcyzi{T0GI^&qREzU10~|d@2^asnCUBfpnfq2|Q+Py@Gfvhs=r$_n0tJ zW0f!=q)5kLXjgngp%F!ZyEMG8fJ}obxQqjzB#R8#QC`s`H7&V9x>8x0PE*6Nrp=07 zVzN2#iji*8p)t{%NjB{TPhy_%snx#4#}V`;O&kBTG(Zx+F10MSXE62h&!dOJAnVj_ z6((_=nwJF-f~k4=_f#W$)i%TSG@G-=o~iJ zf+&S}Mn#$vcOaryk=~8ZLPo3uQ06tIvs5Av7Oei0V?3YjP0 zmL6fLgv6#uC27yt<=w;igv%#5pM-$`gL={o+rzhi`a&oHDkB!LNfJdOZ~uGv8ka}v zdVT2;T0g^G_wo{IlZ_DhD#>D(8-ru(kcNHsUfWB?qdIGFtRJ+0kmrRALwW$1#18P| zG+{K0sN_f37$jLB{>-VuKNc9A`wp7S->t#tyN5eNkkS+fq6IHY0;U|pTY@|Xrh%Q6 zDRoF%Rz-f^nhU(8T_HUOlq#%1Xo3Nzu^?@sUz~>5*`L62g&kRCIr6d{Th!d>%zibE z@zi4dWQ-@xC5*@CX^baj{skCMY)U7O-A~MP5}NV%D=h3)=GI+k3-WC*gVb|=xRG;@ zauvzN&*d0NJKwjZ1?L{)oPRyO;jA0q$j^`Fn|ei6te&b|V~R=_Qcz7%iO8#jmia8S zZ2DCdY9fK434#a$J%_y~R&3mL(p{UZ$@UU!w3gb-u%^9ky6=R{xkr>3HM>uB4SiYP z5O$F28{$S(LpxP?>Oi?6J5hB_U`&lod|aR0K8rh9*X>&)E+$CdVo|-OtB%A7Gdj}s zbw)?>Dxo7jUx$tuk-#1B1uUpT(L<{Z-#0Fi2O)cO)Yb zT40xO?d6zhEuEwF*3uo4li%hgswhw|!Mz^!N|Qo#0y*hyCSp}kNUTziE~`qt8rt+~ zQmd>`ONtJl)Ih=r*ba^e&?h@Do0&*mS#zkF5EGXP{hzsF$?az@Sh%9E(vfTnB`#gH z|CyrW(kuBKLcQCn#*Fn4H`BO|$l7V@9F!pcrZ!jcbW~e3wn)~QsYOCuebiQrzzM$S zjZR>cwrawGq(m9TI4O3*M_*GX353v6HD$~p;9GTZxlcf9%FD)j+||^Gh{o2pxt;B8 z)7~VdHnhBL&dgBUo||iMJ{e`?HGI~ZYoL#^66V)mHP_pNS_|D!$4wZ=I@l+a6=B-k zt~wq<>F8z>;zVt(G%7m`0=mI zC5Aq@i^#n@(H0AWy_J>yAD?e@9`E7$y!6HT>h51Rx8Xg2M+W=1aB{+hQ^eHO!&IY5 ztNJRa-(dfUXz(Dha*kG3_Heab=kbpcSex3-6r*j{_07IEa-+*5SkIkY5_s0!CNY3E zu_S@^hXvUF{OLZho|^s5l~>o+aAn}edS`$0S^WmEm6Zz00kOUa%eB9!henaqOdo!NX#t*{r{oBxxB zb&Yj*GnjH8YMo)&W|P&qMr5t|0+l3V{*tnGFWG@@QsDpcx-!v- zOQZikD#hog7ylMZNMG#v^4r&G3H+tTnYcb{Z~?$J(@c<9G{j7h>mH=yP+;})m(Ay$ z^_~4a03`cg7U>aB4T%*eStVP)PHC*jQ79H@h_L`9StQP`=ew*xB^zY$ZAz#3t02`m zN@(^bP`j^<0hu1HQFd$YxzOpcCn%FD)>Q#e-Q?%H`N=s$) z;@V7x4MSaApHsVJ#i_%T*25S>+a(ZTQ4`URvQ!3il1>GM)x!#_jxG!V-c1Tn=%j>6 zeWjBqoUYZ`X50O)`OK<^by5#>$j;V-du#I^PJY8UGQ+8OX>NUU|M+_t%hIRgZK6zwL()0lNOH@o4%+ zX@uLT24Pabgb%vv4aK&R)wS-EeLAg+&I4qMx@s%vA|5}jz~IA(P*ht09HE6UZjYGUNrrfswo< zH;A)>59(W#aF4uTLyNL=ot3;%DT%qvO5hHcVjSFy{s5;`Xfo4}X36;L%SHzx%a&g3aAu zB~Rk7hdoB;{E90f`e(PkW6|X=zq^IM^Pe%fjkJqD(inCWIp5dvCa>e{Tl*40=LpzC zegOo^N~+Dq$_ym@4cYwtd z+$88IKtI5w3|#?++4x1}2@(=)BZ{hrT&c*<6b-7vPHxFpiKm^jGkQxSyDk;g|=STN;!gFmoE5E6@? zOCW?SAdhvVO5T6aAaJZ>3Y-8#t-vvE$6{N?j7#ujW=-m>h{UmXOOO8Vu#Zzk5H~Z6 znKf;$M$81TK3L3P^pdh;W*(1GY`-0$f}xd!lFkwxCFVewXmBkYvTzAV_}T8p_eewu z;|@8#;@j`Hb{^y9JtfdUSy*f_&8hw~35sPTGCN04o8_O7m=d}wOwMy_gel-O*rZWO zq!b#Oumz}UHGu)J$@!&txRD_&Y&EPgn?kE>$!SKNw?^>f(4%%r4WQnwQcrX`m%}|= z0f*4`WOUY=o`h>oN#frlT2e50^pJ+jwEFPJ>PfrF&4gkc4F8ow>5td)BZ5usRSGt> z2oO%I8IG(n6gxK zRSA)a>7>|c0@Tmq*0!oFIla;9JOk-^o)_(MU6_C>jmm{Q33DZo77nJZ;j8{pPz4KZ z;X!bmIF%0JJ;GHuWBPnxI^q)JS2$Vhm+hnzwe-jYNj+TxUOSvviwKig&6uE5Cm9aB zI_V=$sN1RJk6E2vTMcjqemey)(d3Y>;o@UZU2nuE72&EfSxGz9J)IJHBUB zCxdf=R*Nr6LR^R?%cL-fj}d&{5?*D^V|a45Ffnvgd}(LDtCTT;j8RX!hiPJx>n3*# zrbLB?_A^Ops4=;>zly^HPqtRS2hQ7ngCkqtZ*1dwR(m@i-ag)Wv5nIYKeFsU!rTAe z`OC&GU*Y6M#x8mI~oBv$BkVk z{9)4+63`#BY#g<}NB)ZeFPFEa8*eB>mB|U*~C-md+pi~BVkd*>Y)BH`aKjNJn z;~hzVy3oc6k*0=bF@(efZ))J*%A`T=Aj63Dz#yNrT~KP+*iUr{zO)&)9 zh6J6g1|oaH1Pu=j9h8zPPxln9Py;t$E#oWyHW_I|z^@NxV zy3o`F*aUeZC=7e@yF{N#633rB%?@DFMHNQDpfxxFObk*A!J}ut5)l0r6ryLi_E)n* z8G5L~7#nNS5NQ%GSmN?{j%ZZ@(w+fbh!6y>ujGc!TY3*uRtHMkKckNS#C4T0v|?MD z@J)>uT=$Ay!_cUzid(JE#i!~V>{X$p5+&0XM|T1;STVo`XNLU-0|J#sSJ9pjW6~;j zcsJ!?7Z(t<|M5~xxGxS4mj6NCwi1EMqj6EobiuD*V|aiYDcwp|1kNg2m?@JL zRSRynnDHtSFb=3vh(;`Cz3j*tLVL1RLqjL`)PkPS$-PP^AUV;?plIzPDCXLsz+|OO zZAE>(LSwKpprw0a;ZB9=jua~g@2o&pn>zL--0V9mR9~SxAZprl5Gun~g&2Ki3G)Z; zsk+q;TAyuG^#^WJgxwBYvg=#HA93r`gavVIKkpcK14*n3R{ zgFV+&Ah*|=N)>MM51C9fJ<(73fjg>REkD;fCAWlE%F{>8SSg-mnos1{Q$>7U549P>oPF3=H$f8)tMdWBkE)L6Ot9r3I$L0z)w{@ z+j5--s^@fOt=(|GW#;NQn2~2$F-c>8)PtuE&{pEYJ8%LB2QIMhzeX#DtwEfr>u&S= z?Va6?&JSyQ9m{MV_m1rwj@yNA+(LHaL9Wt*nnLtncqJ#5@JK!T(#q}FbuX#PgOD|7)Iswb+Jw8riPDoM;Ifq+Def^+)AQUCHC>5k)SGMS!j>_6RE=M|Z)^WNp@@R&|fFbA$m0VN){ zB>3HLR&L!}{-EswGY9*F{^hz}!DgV3Ib2`5I2FFE2{Pohg376LZ7T=gG0w8s!{S`q zN38Gt2_Ik!OE9c_5T;#}eEq)oGVdRxWeSxqc&lCm*e;K8I>HJ|^vAyecH#35ahH37 z5ri8G`e(%h39_Wd*ye(!75^6}HF3FF(6-LI5zyGKuas5JEV~KeqH3c9JwS6jg!JZ~ zLho(g4$x4s+pq*0!kdet3hK!gAOMJCM09Qd4qA*IYH zRjX8prOm(GfSQDzjY))AN5Wq$ha)!rE*650@Fa|e7p}b>8}{mD5QK0(y$}8yN2HNl zs)s`3us$FWp&yWKGEsVV(W#q%lW#LhZoO)psZv_NAp3|O#ma2#%hY9!j1p6CVg9W5 zbMGt}ty+LD$x>9maZOgaB+cv2(05(;(4$E7fd8hQ)6A>uo9m_siq)H;;}X@BI>Dco zbS!4JbR1nWfwCwOQ$DM58bsT6Q_E(i&)#?~ZMq>_2fTm#$Sx9dxUQGv^EErF;*0ik zT_0jse{}1Bls0%>2lh#6Y^JHMoei#q;Je0u6B?2Qk^n!Iair!{@-2zi7Il&yCB37w zSnPFhe(n{(Q$=nc7h5Viag`<)S(DTVM_hKThCd>Sxb{Z?Q~pdOh`YIX&20gN!WIrl zATwck5biU`>ipqh>mL&;HLJtsabR)oL%`1hdcK(f@UXy#WSAN7v{EzRhWv7Uge4B@ z+lnwFZXSy6@|No`$6zGJB1$&K3l2v;-|3Rl*h~al^{X2ke$7_31V|_@2I_E4<7?qy z?QA&4VK*Fk&>tzopaA;uFBAEpBuF;?_?-ydYKuWt@1a!c>&dgVen5vIeB0=nU|i5*s%PRFRXto4rNJoyKWHOsX(1%@Ul)=rr}=p%qgQ}s=Op?jgz*dO$8ix>l# zJCAo)*EZxb!uW_7`8&6e@>kyQc3YVFRVaK^u7FbrEwzfQW_0KxLEx`T;cYXFj}Xc- z#nsBS*4@mqE-4^@Em_UHYt^j2iC7Wf5aA}u@G8uUk3ccXFR~>bCvdX;P|_h5qAnqY zx;YWq?QgLk*?z70)^|5=>4_-MT>Ln^YMtW_LL9q5x?i|GTf-AE&ka<9|`YWiR84Xh3mrWYgDaQld~^2h@c78tRcY@$chH# z!K&Pc77=+ra!xvhILSb!6C1{{7A{kBwN-y{fOZ_L2`lW4C`=}l*n zrM9j8Q5O_7rV+xFCXiyr{a#wdNS{`O&hlu~eV0NTr^Bm=Xr$A?<~Ys)UuHwuyEuD- zcbkKgA&>pYcifyva!Nk&)?~CM^H)x~8t%1XgUdm*SQYP0mhtM(2#4?<4e%qhvNfrsfEmh(a8MZZG`HL_9X)lR5xw{E7Im5FCCKaB+xh2E$T5%TRO_7YPeXf>{2i4OEA<_H*^_NhG&4z z)Pl~=3F3ljl*I(H>u%M#iug|o-*?b((C&_qn)I0_gH#Jt?5dE6*jwQ7TIhzei(LIkKW%7D_S&qmZQC95YG5ZR zYoFIFe9J#O`^DO2iIg9;Z}M2^TUk;+a8EIOkN`7lR_Q8yIU#cdOr2N0MhG@VmtJw{SyzOxG}= zXN&L)D~?zYG#l8>=#X1YFsCaEui8KWTZPEEP@Wnnz!$LUN5pl#lm=pxSTL@1^T1~q z-PIy_m~(BB7}U&r>XyDi_?TSN?M8Z=>9YMEC^|#=uQKY?*{9CQ$fhG4+CMj+Wczk| z`M_fde(daRJYU^i-QU?2WPV_9xq?*wH)gp2B=MiEx^?Xp7r!AF0G*VWYE35)QviTE z=v5A1vP=N+V>s@MSMAS$Hc;vbyo}h=L6Th$=9%w}kGdE1$_1L6?+@0lMrR;VyyJpJ zjwrJgtlDHlR`PXln{jm3gZo*Wsp2Wav75eBf;`6M38C=))|X$-_l2~O5&n=3NP9jLrh# zfokoQQ}Ksr=`g3j&cw4|F&3_Ja!M&j36dsm&2ga_Xfk^5s&rY-M>>CD1T|Edw3);) zByTy1$>Z-rB0~S1+K$8~!|L~WmPHz^buL(76OvoXX{XtOM8H5ZVb5wl(?EslE?qLh z#D6M&SrzG80M`TXk^zN>J=6m5>FG}B$H=GQxY-Q!<9;ci1!kK5n@Bf}UbvKyQa>ur z)drUrdP&^X32`N0gt{;keT^*^{4?`;FCM#Vgl5Z7ZQ zAWGhv>!1=S67;1P0B=H3S;DuoLrb>y-yj^FsRZuyd$#i$Mz(2= zAk@B4fHR32Ra63q$OV6XCstK>LXUB!s1Y8BBDqb&Sj9&bMl1|ezsd1>%Rv_!)Y{UC z11Oumk}2WuS3`-@_H73g#(FI^%(Oe7lXa}(UNZhbA&Vz7xS>J#0urRdys}LwMu<(h z?^d`ihd=FQp2DQp3AQMh-ho8UV}4Hd>^^}(As|*U2G3b8BPxV+(QGVv|zwbEh(-OAeH@K z1s0MyF?o~FhT{B`LeIcYGoe}g1@N&>RYO%+6)9`hPLYxjcAHprxm--SEy1a=)zYJ^ zHf3U^eauYO{``^kh7r?4#NB6i-Z`@iLSrqz8jC>^q59GzA2rE7PE-1}wz$o3wT69& zm=1k?3Ss|ec$i+jf@RwqjfSIzHea&f#=Lmb_fk)X7Aq9^$071LW2UsV^6ge{@apok_=a30?5F-MIlcH|{HSj$ zbeO6niz2xoqQNW%TB3pM4QV96ZMI-~G5gRBlftbX*&VpvRi ztd1NxFxJc$Nfy&&kxhkU!r+J~MmENlA`GQb7$h3zE|&uVw+en)@pbQAjqtEag)Ltz zC2&2AE-D>&`XXq3*>`y!eB>0HHL_;ZdxJc}0*SZducowwNh!w!!L_FpSTnRhoAvmJ zbyXu(@M-mxiaC-pRH!mwG%?>jL=@=NrLZ4J&&L?14YZf2v_Qm3UZ1oDNoiC^)w0;J z4+)^?@l4$0cn7LSXiNeQC`@TD;|~yC`!-Y=1vl&xw1EE#N~+DXj5c9?qI7VnvNF7p zbc(Sd%zkiUm38t)*clr#_ix4@cux(K$hw6JO2fDesPdWZ3o(AI%R$6~E(R!JdDvm5 zMF8jmE<42BGBi4*wg^`y$Xnmc*xcB|m@8>7W{{Y*t_8`Nkw{JMNTPjt-6RHG#VZ5L zpi9P^*~LU!*Wk74C_(d0--2nVu^BXLPJnTGvKS&p?AO|h!4I4CX=z4^-t_I1e%2e! zQWL$O%9*7KCz2LDyp?#1u*7_Jb#~dmfQm;-h@1dHY18J5GvetZC28<3v)EpYX^;E+ z!SER)bzd?%K(V+Q~%dz2Sir8(X8fs`!ya5IP_$ znZO!+j}E*^o&K0dhAtRj=tZ7) z&GNsW3ilj+l9`XyfI_R{u8JcZqL5VS4H)H00jn@yCOB_atQfa{P=K_2KtJ0L z8@qd(JKLSjbp$qlbLZPTe74l5;Sg7u)jQjG_}g@_TNWUdtf*J0;?3G}k9Ow5q!M4Jh27IeoLmbSIWBBlg_ z-sQSWnYD^lmM^a4uCNTy^xFZNT>iQlVj)3s>R)V6zG)$+P~}biFK%CeJ%Srk+;@in4ZOIOym-kMKP4~p&U;*N zFY^3jv@RWogYK`{x!86R*D zr%QF{DgCEP9@3ku_^*_2<@(8%z-FNaXF-G48jum$bU@2SoUa|zKsX>( zOlE5t_^5SUpO{goVx-xO%ggDY{J+!Y0Z1qtPMC|%dO-J2H<&m4Fwg;w*YSA0H^6E7 z@ODc2%)~+AbfaX`Y|I4miDxG&29MH@d!8({|MIh)BskkTRW#UO>)HQDXogDAdrL}DSKiFvQbek z!R#ePJM+y`cGeciMy~KizpQ$YMbcU9Xwp=rXyg|J`IGVy*47475bL_<){EcA3m4sKoOFyaEcsadY z$10<423p6ROl=gotLc82X4p`-ggdXJgsIgFxV}QP^fSFi9#KOstn-h?~N9)mv;Sx#NPXy*2ZMI$=A z&BU8SY~zY|S?M%Ix?z7l_2su@kl0vAumZBDP|5s;72*S(g~dpMTnR&myzO<*QR2@y z)G+`b`v!MxnSfzge=_9OwU+PTE0TX)b~}hT>&of?tzdqc(55G?XhFPER+RcYAkuqH zrQA-<-8z7y3EYU3bXdQs4{-c15;k!efg*xgk_P)Ft^;Yi zl zY@PXgW)H)AY@6lfv(#QF@KsqLO}mBfUzgvroLDIE4G2FFubY;M1MnQT$3*ij&+vPej2fwD`bDIZZgxHhmUjBX?;hfO_1*3tO| z-rIV!dqzthF_qt8D_38-1t$vau&$iGjOD2G@PEaQoI|Som`146X$dS9jlqNF10M_<+biYV zW%o4><#ic{EvG#C4ui1QbP3v7a&$Vunb>EOY1JV1~OG#+zH*~`#N&?G@uh4Zyh95!v0U(Zi8w* z(=cdUaF=z*%ShGnkj`v-cO77`b8#wj15or04Pw;*fdRi9jXI9tosfOeZEc9t{1sP! zg56Fv=CNwh3F7yG+*Q0Rh`OTH>SC( zM!dyO;PG1#Fz8fw&^z0$1mJV+-5KNlvFBBH^BA80UK28bv#lRAwlrm$FJ~^bT>MV+ znWi(Dmm4obe)&k|gJ%3L#rv%pT+z~aq4mSe#j}~l3m;~_-F)H9kxbKfFSRsXzMQ$( zQrCR`(z)g)lr>*CeeV4;_FK@WaNmWCt(kMp=bKwmY3s#|Jy2EIz8q9`zNy6mWozT9 z=5x)hA0DYY+uVA=>O6a~CDWL}XUMJ1r{6!<*pj*Qe#@ncmz(hTGpP1L^M$i5cuLcG ztZp5{Q&E;_`VNH5<@XxTowG;PHNKD5w^;i!r!QXmu%-Fk_gXXWT|9RNFM~6un$WVw zQ|FreQRvj^bB)dCk7Uj?o^O2DTGx`fh+10e>@sg%=7aa}Lml|}Ydo(J|9`p_@06_@ zr!QV;1&?Fv5%jX9HM#YJ=F3e-GL0?GmrWsOTP~hIQfKPK9jG0Z;Jyn@UW=)k3Q7>c zC8n_V(dlSQ=1f!LIn)JsE>ysG>_t8-ynG#AfKc>&`*ctD_4HU2@F@xmA2bbkpUiOZ zrTjigDy`MC(lZ;MFQ-z&tGU67FB_6H65kbOyDLsv&BCW2L-0HxePAa3z z_y)kf@k8{tX?H4{Ov-hI#ccn#x7q`K(E0m)#u&Nh=IXEE^@}z8w<Ew2FUhY#uh4J^ zV5ih>(EEE{9F@mXj<7YFmQ*#^hpb#xagYVwbpCp-D`D8MiY=KZx#XT{p$yArggoR= z-(dG`_NHYz`0(0Cc)#o;zs7zQA{p$T*+8lU|EbkipPopqcFh;)IH3cS`_~)z+eHUd zoWPyv6icG`Wd?IOtK8-k6<@AYD&v{&7?R&}IcGIGvut~}5enbJ>IcU3Jb#VVpXYWh zts8W-3D=W+g(q=cO=#fH6$GnR#bIY+i}WmAdCfW;Upf6=?I4Y;(#}g?wt8yN?WWZe zQyI5SYU$Y>sg7P)(PI{D@Rnayc$JDVmD&8>mq(|OqF4rms_^P4V=L9rz7HwZh2AUm zgP9&=^~lYTsl_{^%I5pC$}V2rPP}-)M-}PK>w5u?yQ}ZDpP{zzR5UcC$hXrYM#_WI z#W1BqX?Y(Ps(vQSqvDxXdu5L+D~-`*uc2jc;?qWaIu}k@Mk!r`HPcZ`ms<3)`(w%0 zha<#6icv3{5iM*+xh@z<2@&C z*ooI_pRgr=tH79j)FM7Td#x?s-<=!8k101?8MxB>!z%+nywZEveoh&wKbDcXxU7Aw zh*7NLBkYf`pY1(@WVh+vw#&#`TiY&NY->7ysr5rVz!#aR96aQJdS3gUzZ6XC5$`U{ zfJ|Qi$kfASY&_bP<|hJQSFWuIxx)M`BT2QHI3Q))NIp=^ptC-ZVG4#N;f6YwDu2X? z;~6lHCnE@?ci=@nfsF$=bMzg58a5Dcth5F)>p`!QNh~Afk-B6M@KH7MgV+&7>*IR? zT={n9)4Hmisns1c3MG7vjFFTz;W<96qRZYPL%Jhj`?AN!HU3ElO441jF#sDOT(RDL zEWP0(gE-V+j$lx|&~oe-%bj`kKT77zCqZq#ZfnbeZT21;#+)qjvhYk}%LkZ%q}F&@ zeEP$8y*OFfWiiUmT>RiNE>Bi;S$^vB8I;)~F8(DMwvjA*(cUV`(HoU%)j9M;xO^#0IcOQ`Eg;&)ti)}S1$}$v zo2m=VtH=Ic5a5a=#}klBz1jMk2i|fA%gymBuwr9Xpaao5lvn59(QfEhA-i17vA7Su z;n4*L9e8b;vU=ybXQ{2-YIszj$KGhLCxiwA&rnS!rG8l0p?Hrs*w@{61F^^USzo+t z&oW^B#cTQt@ILr#eaEe9_+YI}S<+HQ%{kBVg3Y-L5W- z1O0s%LfC@?9xXTF-LlP8=gbf7)QiNMa3{SVOwp_-U!tbAOaYw$4;xF%A8Ds%&*@^@ zN)ivKj?C%lFkha*q|*0RiB^^QlqYIcTsyW*2=kC5q-!x3Ps=qgiXAWM3%%)Ku{Fa@ zOG*Lh%&5p-_|wTy1ZuVFdA;CLU-vCEzx&E*kL`k{4!@s*l}+~ro`Uw0f3o1}1&$7@qOHBV zcL=11gYX(NQyxG^?xkoQemr5YE!R6}tNXT8-iBAhZM;=C!B5ngD|q2yYs|e^#bA9F zPqC|lX^$0{T(z_KpEVx+o%W-@cl_u#zV|9pH@`1!b&1{W*ZltL*e3BSZvKn4y`vW# ziNC_OU%7ew_|YpjPjp?m`Sq?B>q2J^zhnI??7|D%4PFEF8(-|N%Ise{`v1I`#yzw6 z)ioT>`eF^o_zP0FUtPm9FRJl=u+aS~8~)PKE3aNTdGxoge021mU-`j{_9EZk>T> z%HXf$U(9T-~7Y-jDa|{diw^KVCBK zo;Ug%tRu!6e6p1JoCoRU(5MTGn^?}oryl1|wViIf+|+g!`yR2d5GnOms-)}v8^ey|CxB9+r{95}^`!#!2SKpf*0+~-Y-egr@ zg((YoLE5{U^c1_=tK567{bD12I;t~ig}(@HsQ*8ISAV2_=~4ZWm#^GBedfx|x4!oB zk^1%9E}y+}^Bc!s<|#WoQ9i^~c7v6^nH-)fUwf*2?J2*u>BN1X{%b~s^&Yf~)v3IF^1EScf)AMhBR$e=x}^cz=hHsa}42Wp0P zV^3oBEVbtsdMBQ~3O_Yoi?KO< z33_zI6Ta&Ded!!c>&zO>S6gMv(skH$HQ7g!K7m$xEw&v-wtPEGCvL5HHZDm$IGN&C)|`5B`Hit^ zrbbk=)(7g}YdwGND0VA1w_+o7e2H1^9q`~Kd(POh0Q*&|f^_!`(sUK+b6i_U7odyv zA7IBt-;F$$EWY*{-$L^-?w{1fPqyqgCecc6>E;+>tuAkQ&!mz>ecC9rL{y9%$$~0H~K0 z+J8FiKlq*muOIC{UFK+q`aZ_B{&geoXuHwg{W17az;j?^`wfSzy7X^azjEl4)Y^N_%d@f42EV#d$m)uorke`xgT|7X$3qms5m=-eUSJ%2%qtI?uW{cVfeF`)Ybs} zuG%$tPH!zWDTrFHlF{g;)X*+{a8!TEHUgM-tg*VWY{?cY%gRZ#XYZ}kI*Jp&Y>!|6 zC3_4;<4hf9;XZDc*Uzzwk5ONvCE2so*C0WTF2FKsq#AM7f|fE2t_1d1GjANu z{D$q@v+o(~)dZS!{B69GuwNy_tvtkA23+<7vYEKS*e?>=%ZD%^$oO6K*RbEcvgE`* zR|QP_jrFhCPi`FljfRixmCaWV|L~@c@e&8Ga!`UF+j!}f!*74f5`koe&>2OH4$gPM zSO+ZRm5uz6jdj{%-}4c+=^~al*vk@p5_uEO*>K29u^+StyMg)f|Fg7WHi3HWCvo&7 zY6pIT(%-Bowcn0Ub5c|eRQBSg!#<=fS3{*T_gACUmtP{d@B6HLnSACzaBU&svtgVec{j$KASn;p0_046MkDM zIsUSJj)CM9!kM(t zH`&H2T*NWenu`k#;fJ3vME#~U@GUgsTga#o)T1*W>HI5p9?i6YYY1=7aVI~Iw%pI+ z75-OvD_d&S_ z&UdWuwm;L>1|2>7IRo^Kk)$&3|Fx&5*ImpWV<8x8PWb5EK1lE%gZP1`)BELVSFT>^ z|G~NLPnp*4U68>v4BLwhkv6_^OO|2?z`m89`p9Y>`qchA_$gL_eDmiV2aXH2bgr#alP~!o2pP7qw+4Qz)ugakD!-D0lDyTT&51RD9LN zy4fEKNSXSf-dz33IzNtAeJ7)@QK|LOj(^Gi;Vooh7Wi!%yv35Xe54Ri&q^CY+4%S) zhb~|ZJxZ*`yt>XVGp47`o7%jqSn7W(>9?=@pR8)l&|nu|j>47H%;y2I<9fE^ zv!L7aRG^eni(XS(r%{S?;F3bW_AWhCL=C&kRFgDY)kqy-99C*!8C)`1Ty5G-ud=2u zqkB|WM;mR!0Mby8hV>x7!5XmtuIv#@$SW%_rB@W8AE_G3*16|a!c}IlOjm1r`K(gw zZP}BUcBS$wwZEYEHT*6*(c5XNAL8ro9LZX z!+}6~(a!r)`O3%3OskbI{G6Z-;j!~2Qs*R%u+fH@gyj*v zeZ5%SNk!#k_>iiYSM$s64&dTIVIh_GaaccKn9)xMn?4Ya2kd<%Vmf%Lgh;B7DU8y% z{R0j^;XSF=v9CUJ^k#l5W%IVg?yXPxJ-dZEZR!cZ6x^a_r)BnINPUutAcy8NZ$ z0nVov2gG}tz>!L1o~eVhWe)6XnrY=#`rDUnm-{!Nob;u@OuJfmLRt_1S4OA(6S-QM zCI*B95`w{jFCjYZH_4L=dy2wQ9HA$b*(5U?j*u3RQYXU=0~XJvtpX-FkvD2oD_>>K z>6h%^ZCD*XobT$x7G`X61mN{x1g*Ec44Y27`cUAjx^?xjh@Y&AVp{#qeyf#7>aZz% zu)obI%y?yeKbY$4D^D=T<7E zJI~rc(LT`KhfS;2j^ov(ZQU4cyu#kTOmZzQ>uJw*Ga1EeeZRn0j^mVX60YoKd{+?H zTg)B#U+n6#PQ@}k3q6`}x!ykE!RhoOSo)Hv z*H%Vx8I7eX;r7QcEw(GTBCECIsz$(Ee5^4m@YNARCS{B?3$r`3RK2G&OZkWf0D98@Wy}-tv85QfYanmka_)fZcBq%fWE_^f_o$XOQq6By-ww|1fXj<$HIs?%h$~ zA9wuV#EIj_Kg9&IVjvVzx-zu^UqZ=B{Gji*(` znXfm#ZdaWBh6>I$p5+y1n@;#GIAG;xn_iECH~osUam(2^kF$=mO}gT2)0=F^ar|RT zUpssD>=|!K6ur)(?{OKs-qz!h+8L$nAz+c_T5MoJ<~M&cbHe5oduAQa`Toj-G6L9; zF$$%EZX^n6kgKQo4AuMI`>dGlCY|un+3q9!-U!K8F*O<-N`KvuoP37OGHJ4Jt!k$P z=IqC@p$lA;sIfDf`3jb6ZsLbe@Gr5%D@i5RgJdGiW!Rl;QVue7P6(i5-Ms@0x`ty`@6*$)k8Q|r!FKH#l=9&qBd1D^2Q z4XAwo&E<{=0?&vaiLz5u!nn0EI7QU(%`}miY6tWFk&Zj?Yzh^%rlKpSEVUxnFWYE2 zXzHo%Fm6Ryvt(Et>IK;pK3_Zi8;AvwL7}Ob!@OZ%iP#S^W2ZS{IuNKYAld%^m%zFxF>0 zwP{b~l~0YzlSh^-hkHGv^3z^<)REN8co74+DS!o49}g#A0DPgzi@tk(!DKjge+H)I z&}-9vpV5aox?!jnZ{DxRwZC~Re+j`18m10{XVi!#Q2S9M-#~lF zevz}nKCQC2$UcRz4QI8!c0`k6YgTNLvhB89BTa|s9+q0ridr++iR$s$&VBW(-$PY4 zZsdB0h-`%ilyA3%TG+Ynsp$jhbJcE8+OO+7b<1mw$u$T1OKO8AH~59!q=)XrUMr{Gd0I!T;^|#L zWzsT``vgA#gm2g|$>=D5rjvT8zYXBj4spI&_neS;JF@($iNMoq$!T|ezM>C zFNfeOW!qr)%}iSxey`hJ3BKBr&G!ur;0Fy}#kMB<3EEe&G1{&=R)4JjdVj?$fr0Gr z4&nFQ@nI;=Q|0PNYJ#wjI%?zTZr}CeYgYcA zA78iQWLld(67}i+wV)xzoGQ+B>hiH|6bDHQu-rFW0dYn8mIJ` zB#>@E6T^}wDg6gY4=MdeNub`qmH$c7|DyC?B!RR8=SC!f(*x2yNuck5^j{^-Qo1h* zG$1%PDruh514#=eJr+ifLH_|ss5}N=2qfX~_zop${_(${BwauLLrT)_<9|&_`h5Iv zDM^Em|2-w??D1Vn($eE$O47^Y|42!ic>JF!NfVDpD5>v{|0^Z+_VFks_3!b2qx8q# z+sCxJ$Dd20ojv|jNwloT|6LMo>G5AkqV+ufD@nAM$NxhTE#&e4lti0&JmwOe`SFBK z5%$LqB@yVy|4Y*UW;3TH5zNQ4k_g}9c}Wh~BbS!I-BMS-B&S-sO-XLF^kYhLoTZ;o zlB+EJOG*N4iGVE$uq6VvB*2yk*pdKSB4A4bY>9v^39uyswj{uo2-uPUTOwdf0&IzZ zEeWtC0=6W;mI&CA09ztpO9E_(fGr8IB?7i2z?KNuk^oyGU`qmQiGVE$uq6VvB*2yk z*pdKSqT4PBu_Yq5B*d18*pd)iB4SHZj>94te}IGVTOxi-!f%QAEeXFR;(N9`^P_hsU~EZmpF6XR?XqY1T5QD;aiIgzXBwaYeo< zN!YIZq20Hl&?-sTt`N-?VJk^P)ylu)eZqF-k0=Sv6}D_eXs*zfRy5?S(0W#c-^zdC zeHvs|?oraPvT~o2JavVhx+26@h}en{TOndALTrVItq8Fddg_Wib%oZmB2QhRr>+RG z6(Y7G#8zlME5c}nzPTcdB*{}(XiF>d)Mdt{6=AeYPhAm4E5vAJ#xYvqu(=|{RvfVf zo#TD0zwgrOADAXq<+rP}vsGccO21u|->!0?ToszD#CBC^uF|qr6?az|cUR@9tBkv= z^37Go-BrciRYr|fdE+Ykw<>R3rT4GO|5oXLtBSj;^zc=A<0@mps?b~|nycY|57JToszDL~~VWt`f~vp}9&lSB2&((Oeapt3-2Ead(w*cU5Sv65CawQX2OM zDx9t|oUSUIF4I6)1yX683E`87t{e}aXgpkIq-5gGpGu;4uE~1WnH8=5na!Er2+PJdjNCf4bX>+1VD{c&Br zU8g^;NB}-P`w;_+)AVwRqx(#BqA&=W|jAVlw z^tcUq+y*^vLl(J7kK2&PZPMd5WS^UiyBqSqP5R%4taX$Aw;})Ar2lQmb~ovN8}h$R z`rn2ud6WLPA^+Q?|82;wH|c*H^1n^`--fJwlTmTwZ`?OG85K8V^P7x{8-J^FjNY5k zKYH9|^oSm}8GWF~ZAPon;I=PX(5{$EjDQroASm@ zTEV8qj!ojeIi*$;=}md#Cb8X|(>bEKDR0~)ep~XtEh4rh57?s4wq)~L)Y6u$e2aS7 zl3j1nQ@3QvTlCE>+3ps-aZA>^MgQB9eQwd?wq%i8^sz13;1<1VOIEiP~Y!Qbo;jl#~j%~-enV@Zr| z+dq-Sc((m7B{70+%m23Nf7|lEZTjD~{BN5UvMv0!iQl&H+a`Y7!f%`SZ419`;~_-zZnZQ{2r{I-eTw(#2~e%r!toA_-Dzir~TE&R5L-?s4ECVtz( zZ=3jS3%_mRx2<{Ijz3TM?R;)y|F-7dJN|T`x$~zyrfR%5-+T53-3J=H=VUbavRI9a+c@Gl3m>_zvxJ zNA|MAOkhX;zC&x>k@f5_6WEdW@6dL4WJ^2D1a=e)c4)~vvaB6u0y~NfJGAQ^+1U;= zfgQz(9a{O0tZs*yz>cEE4sCu%Hn_t~U`LtG4n1H;7WoTi0z1ldenEfOk$wJx@oYz# z&M)X4JF?baFuLt1)A6RYqc}hJ>59zDL+cM_TLq^-;ZKWTjhxFd!ZJBrJ zA>(iHwo;JNL;7>^whX@XkP*3fTWLt?Aw9f!TP{#~$QWI`tyHA+kUn3$t)NzV$ZWZI zTTW7X$S6>}EjKAWWX4>)Ek`LmWLzlTmaCK=GHWj0ma~)|GEx+8%UwzjnK>74%VA0n z89R!%!BTn(Q z+^6)AnRM~C9H{h=F{t<>xlrlhADdqmerRNo=+`gt%e{ss~X-e){ zoO1h_l1mn+++L>ShQ%qjk14rcamwvsO72#ia{Q;{V#O)PdrEFqoN|1pV zQ=D@ArWE{(Q;ye^!hdnf@tM*9P@Hl+rZfZ;r(FM2^1tGg>w8N6R-AJEPRYNDQ?Ab` z`BQPq^*JT~DNZrU7N_Jd#VJPC;*|WOI3<0{ABt0qpv5WKe{qUYvp6MtFHSL17N=z2 z#VJO|;*{*UIK_xqoRa+(rx*o`Q?l3M6eC}8O7>ZtVzetx$sUVSjBv&2z<=8DpAP(| z9slXTf7A-*5@t+R-ryc+4z<=8DpAP(|9slXTf7A-*5@t+R-ryc+4z<=8DpAP(|9slXTf7A-*5@t+R-ryc+4z<=8DpAP(|9slXTf7A-*5@t+R-ryc*9z<@t+C& zXB_{Tz<;Zi4&O|`H{;Zi4&O|` zH{+sD6e6tSUY`{0`@XZE%vku>Ez&Gpg%?5n44&Q9RH|y}t27I#) z-)z7)>+sD6e6tSUY`{0`@Xdz%&bs@~hWpOC`_6{@&bs@~hWpOC`_6{@&N}|Hf&Z-I zKO6YZI{veP|E%Lb8~D#U{;4|mx(VWuL;+*3>7kJHidNil>v^eMZ&jo&So*vC9 zJuS|;Jz-Qj^nGbyC9iREYXWsFd4}9hwpZUON z-tn0aeC8dW`M_u1@tF^N<{h7f(9eSFXCd^n;QCnz{VceC7D7J@uAha_&w}e`A@sB0 z`dJA3UvT?h2>V}f`(FtAUvT?h2z@TNJ{Q9N7u^0ALca^H--WRM1-Ji&(D#Dtdm-Z8 zf=^!-LjMb{|Ao;1g6n@F^uOTxUkLp#xc(PH{|m1Fh0ywh8izu@{`2>ma({ue_3 z3(|l1$AbIELiopm`^Q4~$Gpymf6VKA_{W0#%cH<^-u>xO;5o1Jf#xO z;Q7e$eH8dSa(o^IK93xqM}g10``@F$XWsqqQRw%P>-SOU_mS)OQRsJ`%MQgyq2GCr z-;YASk6fRRLSOS-!YDopea(CPf0XEpOBKaOiM~AkKMH+4qCQGL)_CS`>q(!(8MQM#kHmF`ftr8}|oaEH1r-H~ofcc_cf9qG1ohq@@;QD;hbsN2#Vb*FTP zx-H$2ZcBHltI{3WZs`tnRk|bFE#2YLPU((pw{(YNXXz&~mHr8Rzx0{L=F%{2rSw@W z6%5l>N}mb4(lC9w^qH_L4G&Y@p9#CtFnzi7nXoGj)0a!13A@rTeYy0R#)8r?eYy0R z#)8r?mm*4^#ZtjAbEDF*a=p?pmm*5Tu~ab3T&Xmy+^;murHImS^lzBCQ)yVaU}>03 z5vAc+Di~%iRT@@qSQ@6Smxg2MV3@XE8kTRCh8asr!}872Fk?w+SiV^rW-KWU%Qs8I zZhyn_&C)PqNoiQIwlvIGQW{pQEe&(|vNWt%TN-9=RvL@`kGZ{$MgPa#UdN*UV{Wfw z(f={G*RkmTnA_`E^nc9lbu9Wn=Jq-k{U39C9gF^txxJ1>|Hs^3$D;pZZm(m}|1r1M zvFQJp+v`~Lf6VQ5Ec!p@_Bs~*A9H&hQ?6Ya=U7)7(|TlSoMT;SOu2VyoMT;SOly** zamK>Zm~!#bxZC@f)+I~hcWA$3%FRpT9P3JBdJ9_`=U7)7Q!FiwbE&X2rdV1U=iH$* zrdV1U=Tc#5OtG{y&bdTsOk-VXoJ)nJF^zSlan3DDV;bv9;~t;JG}e{IIoBwSMZ6k! z{~U{WHSYd77V&D_{c|kh)wuiTSj4Mw_s_A2SL5!VV-c^$-9N`7UX8ndjzzp0cmEuV zcs1_+ITrD1-2HPb;?=nO=UBw6are)$h*#t8pJNfP#@#>1lm5E@jjMl8I5jDat9!-2 zbMqNj_nt^hTJPR8p0t)P07~OY>$vD&8dqzcxH8Apm?!RA@!p|n$t|r2-CcNtt;YSm0HxuDE6K*FH;U^Pr7Zc$Z6K)3+;Rh3r z`$X9NgyTFBc0S>8cOr0}aGWQ?jwd{>PK4b~cpRMwJDu>jIT3a_;c;>z>~O*jWg_fu zf^*o?MA+E`=dh&-fmxbxtS17^2}g56bJ)^^$H|EpCnr2EPQI{uS^|D@wT8Td~+{*!_Kq~kvs_)j|ilY#%F z<3AbrPdfgSf&ZlAKNI{uS^|D@wT8Td~+{*!_Kq~kvs_)j|ilY#%F<3AbrPdfgS zf&ZlAKN+4n>7F_nabuFN2r64 z`rI9nK6gi`&)pH}b9aRL+#QiVcSoqt-4W??cZB-f9g#kFN2t%;5$SVxg!2r64`rI9nK6gi`&)pH}b9aRL+#QiVcSoqt-4W??cZB-f9g#kFN2t%;5$SVx zg!Bm^8u*PmexrfksN**p_>DS# zqk-S3<2M@kjXHj#f#0a(HyZejI)0;p->Bm^8u*PmexrfksN**p_>DS#qv0>3?k}U^ zFQe`+qv0>3?k}T(_o(AN8hDR7-lKu{sN+2vc#k^Xqk;FR<2@R9k2>C?f%mB6J*s)s z?kMx--BHb(c1M{f?~ZDoRQx-~cQo)Db^IO#eh(bK2Z7%M$L~Sl_rURc5coZC{2nMz z-+jQmboYVs@+aQi2LaCmhvz}S^T6SG5O6$jI35HX4;+pM0mlP}<3Ygjz~Oiha6E80 z9t0c@9F7M8#{-AsLBR1q?F%>_I2;cGjt36M1Htixv##9-8cm)s3Eh1laGvO4kp*(7 z*?lnPTX}xQjCA*bUe5oFihGJRSbh-s)E6V4VhvU@Cm>I;1}m9BJjEKUWKKYyVhvU@ zfq9BGSjn7#JjEKUWIazkdx}+2tZzJx#o(t{6{W16KE+0?W?K9dYrv9eDNnHmESVFK zr&t4)OviqTHDJk{fIP(-uw+`+(^!mtI?oBn(^!mtid9^;UxDxGJSQN3|3`l$&%hBU z0r;yqGmdB-_$zP05hn)tt9dhy=)m|Z55f`c0)I7k#u1$wf8|v;Vp@W~nm^-+j*h>I zlsMuP9)C55#?iR-0e=-eal~mn{>ndb!~p?+6;W}-sXYG5XK}+LZ17j^jw6OA{MEb~M;u`AR}mUV3|aWAxiyYB=-{uy1dcep z$6w8_al}A|zX~0H|3`N@HA0Ez*eGFeLy5u(O6X-M(L5U^^fQzw#Gr(ph7!%SQ9@rs ziNX#_=xr#`d>bY7HjI;o`({-K1%3& zD3SA{gx-e|xj#zie}8}X^JvfApSphTeje?)`%~A?-Or;vcYo^ox%+vv=k8BkKX*Tm z_T2rc>*wz0(Vn|Mb^YA^Jlb>jr>>v7pGSM{{?zqz_j3iLzrXua*U#P0HOoec>*wz0 z3Q8z({oMUrVF@L!pSzzcFrmctbN6$FCX~2-?tZS|gc8@!-On{AM@i^M0SYCIP|%n{ z6iOJQP@*7(5=JSMC`_S*aSA00R48GjLWx2ZN*Jq9qF{v*Mk|ykT%m;V3MImJVa!5_f)+|VYTf-@<3CC`V&WQQa46xZg%afiDB&oI5@iJ_;b4UlEi<6RMph$K ziC@+GCVt4z*bm;W8|no$U;_oaAXsqXcl4gYn9%M4y3s<{RX;vu#~prr+KxN@_>3KA z{kX}FyZrd99bfa~ckTGPAHQeEIX`Z;5kAK^a2mH9jj`Mze*^USOxYdq_{P=x4{=|>JW5+lA_yaq>>Brx- z<6D0Gp&kF8AODUW{~wtXK8k__-UN!MtBk&e13H(jKYF3Lq0>7a{p z&qX@tqFi&4j=3neT%=Pj$|V=+kc)E1MLOf6ToF79rWd*4BAswiI$NXzF3SDDqhMFc z(H7}ui*hpXDA+kU7Ga!6Z4>qT?W^0*`{7lS3`io$&cLwTsWeaSkjBl)$QB z(vKt&Bd{p=Iidm<1(%2eSQK2M=E0)i5_Jt01(&E@uqe1heS$^7C29~X3NBG+U{P?1 zS^|rLOVkTk6kMWSz@p$1H31d{m)Li(D7eJlfpsJLHn4w%42~E zRs}mJ_`s?F2`mcUA!Zt2QJ@4?1v~d+Npvc(DEK+L5m*#lqT_%?!6gC)76q3G7+4fs zB4A)qaEX9{MZqNk1{MXE2pCutTq0m#QE-WXfknY30tOZZmk1bG6kH-;U{P?1fPqE9 zB?1N(1(ygISQK0$U|>;jiGYDc!6gC)76q3G7+4fsB4A)qaA}Mh6k=diFntO!uqv1& z#K5Xxk`M!rf=NOQJPIZWG4LpuB!^=R#)rLp96t2LDUc{o0;z&Y@;8twm?XeJqhOK} zWl$xUq*N9J2qp;zd_-=N6c1VhlkWKw@C~v_4+mv2MPkKMX?PO1STn(Ei>{gD@HBP@tl-|Pv3E6LN-86fO3FO z2O)u-lU`P+7f=rPIhSPCD>Q3R4){5jG>uqcln3R2pJQAH<$z1nCnyJ8V(bRxfJ=Rk%NH1C2Af71TInYARuswng;=aOEhv2 z5V%Am2LXXgG;$CSxI|PyK;ROMJfR*Krv_!@peHbW%E(t}Q9Owu?4(gBl%A4msG5`L>h3?u_yC&Lm*23(>( zK{DVH!xBgaTw+)P$$(1?OCT9=iD3yO11`}!Kr-MG!xBgaTw+)P$$(2l4736+5hKtF zxI~OVE8r3_0y1x2s{EVF}&dA8>JH7 z#zAR#`6iJ=!V?V%AQrHb(l+P-i7hsaK{e;>EJpii#U4WgFwm}zQlDwsaw}&Q5 z`Sz;OM0rmMFB44^7~qXDNzMdr7?b2oV1qG9&@6icB5=_q!SKT7fbqqylxx|dmx;{aHK!_WEE>{H`f=TKXSRzc4 zNrEN9B#nk(i7-il0^in~By(M-ed1esJ_6s?;~W?xD1kx3Bsl~aBurB34F(C5q+u{f zn54FV7s4bd7`zZBsb%1WFiAtu8u14Ygg=kr8$1v$5n=E^xJ2~9Bj6H419%`@q9(ut z;SvJ{cpzM2pa&0xOSA;=K)6Kc!2{tEg9vyaT%sYY3;8t;0^ou0bAMueSeFxn7s4c2 zg(PKpV2QAEf!Lo>(ohMO2sAFxE2B=Z4Fgh?_VaCexb zFahoklQgJ;yTc@f2}fmJQ35<0c1}TAEmIs&-xUYILt$4c4uFTkB*g*nP?)3;4IT=U z6r#aHVUofCcqmL#6aWu}Ns0pCp)g4S8$1*y$?L&GVUoNaJQOC$KEXp_k}MKD6ecP0 z0au7gVV{nl>=Qf`b}l@J9IN!?%=PmE5nawOad{F zQy#EEY&Ycr8}xupdB6sd-joMy&;vH*0UN}9Qy#EE57?9kY|sie`Gbr z=0i%dYw%FmIaxAzC`^*=f``H+Su1!bOp<+Wa^%{QMQ#y4@J{e~;Gw{k;GJ-ZIs@;7 zOVkp0CtRZ6f_K6tdMbD)T%vD+cfuulBX}oVqW^(+!XC3@ACaM&Ua zTf$+BIBW@rE#j~x9JYwVmT=f24qL)ui#Tivhb`i;B^ zuq7O}h{Kj}*dh*F!eNUzYzc=g;;=@hb?w0`V&dzXI_q2)_dHD+s>= z@hb?w0`V&dzXI_C?*y?04+ZQDyb~@FKk!btMEt-z;S%u!?}SUl54;mD5kK%wxJ3NG zJK+-X1Mh@O#1Fg^E)hTQPPjz;z&qg*@dNLKOT-Vn6D|=y@J_fy{J=Xw2|N_&5qKwD zV&vOa^ac-wom0F94~0pJ(BPpkN&W{O3X|l2;Gr-{_<@JQB;f}h3X_B%cqmK~e&C@n zN%(<>!X)7b9tx9$A9yHC5`N&JFiH4VPWU-4$AEXjC1MNS z3743MfOoqvR3d=n50YxJQOC$cELkok}@6eP?#i31`mZv%5=a(VUp|` zJQOA=(*X~KNwRYAP?)4l2Rsxe$>zaBVUjW(@KBf}4*(AZB=Amn|7elmop6bn9C#;O zqJ4sQ!X;*M;GJ-Z)(YMUmzc?ccfuvwuI;IzXuE9iMB7YE*|ry(3|aunMif9<4=REv zfU+ttf+&EpT(JnE0LpU4B8UPg%N>g#3ZN{9EP^P2vRtwVq5#Tr$|8sYD9bI2APS%? z$1H*8D#S)&Dz{uyaQNOt@|3n1C?2Q7eP#~-u+k{y500!ViJK?@++@dqt{WXB)0 z0FoVl&;m$y{6PyK+3^Q0fMmxXv;dMFf6xL*cKksLAldN;Er4XlAG83H9e>aQNOt@| z3n1C?2Q7eP#~-u+k{y500!ViJK?@++@dqt{WXB)00FoVl&;m$y{6P!gGKc~Uf6xL* zcKksLAldN;Er4XlAG83H9e>aQNOt@|3n1C?2Q7eP#~-u+k{y500!ViJK?@++@t;ZX zb-cg}p!1RgKQINbKY<^Z0w@Q5U<#ld_<<>aa^MH10Lpo- z<-iY20h9wjFa=N!{J<1IIq(Bh0Oi0BOaYVwKQIMQ4*b9rKsoROQvl`gUoZtw4*vyH z0Oi0JOaYX`f58+$Is6w)0h9xOFa=N!{J|7JIq(Nl0Oi0ROaYVwe=r454*bCsKsoRS zQvl__A4~z11Aj0DP!9aT6hJxf2U7s$z#mKjlmmY-1yBzB!4yC_@CQ=><-i|I0VabN z!0`uD0Oha;Fa=On8c_sO0Oha`Fa=OnDp3Se0Ohb3Fa=OnI#C2u0OhbBFa=Q7Vnz{6 z0hGfYz!X4P3mQc*1yBzA08;>EEov0O6hJxb1xx{y|2X>R_{5&nA~uKeywcp_oZ}UH zQj2qc?dO&17Uvwl*pphE`x`&6bhikm0M-}wfz6?mm4X(rIg@hWjm?>qm4+6<6hJxf z2U7rLrJ_YJ1yBxq08;>ErK3eK1yBzA08@a;;017eeNSu=TX7{jzTgFr?D)V!^%eLmxc>2-xu3_E=R6rSM5np~&4u8g%-;_0NDB??U%HiMmlAN-p4n=$! zPC5J?Uxu3u-UIc|+YjCY$=-hO9!U1~gZDtPw;#L*k{y5W9!Pfo2JeAn_iykXNOu1Q z?}23ZZ}1*Sc6$Nufn?VYcn>7Ie!zPm+5H>52a?^Mzya$q9zu-NP?DhrT1Icb*;60G+_66Pp$!=fZJ&^49g7-kO;|pE`$?o3^ z@oLA_1DXOq4dMcW6Ep>qU7esQkgV&YyC5du_0e4r6Ht!kgLr^)JRZaWknPid)@Nh@ zl+}DA1E8$t8yNs)xrdPfP*#0L20&TvQ34qNWx0ou0Z^8E7#RR%xrdPfP?mcb831Lu zhmiqLmU|c(0A;y{kpWPadl(r2Wx0ou0Z^8@jSPUYhDRdpe%DXG62dlXCnikEORb>Mt8MO|Goat=&ttZzhuW_SmtbG0K8vo@kRzfS?Q0F z0Z`U@ypaJ=Ryt&40F<>RZ)5WB`<9Uq%K%S?*+H z0F>oUMg~Ax?qp;Dlx2@b20&TvR2rte+o%7ok70%z`}AKj!;O9VFPY({G#2(c=KUWF zdj%PQ)jt;YI_CYyr~iIG$N+dg>~+lhKNj{1G60?rdmZ!skA=O041njuUO@&xIqVf= z0F=XCK?XoM>~+lhKNj{1G60?rdmZ!skA=OCdH?b0zuNEpA6K|9jWM0JPycnEi$eD4 zzhtJ@_UXT5E)3bH|B{(*+o%7Mxj1B>{!3>1ZJ+*2=BqyY^j|XLlYROxneoX!{g=#e zZ=e24X1KRc|0Ofr+o%7M8Sd@Vf5{B@_UXT5hWpZZ_~)3%tMTy9F^^Z{;h$q3ukh)= z?)P|wPyZ!*yc!Sx9P@aEPycn^lbYY89!^Ssts z?c;yS;T`yZpK@3~KHxVQALM)M@QFUPdTgypXgH#Yr!Y_l*2mki9Y4927IDV zInc)^`ji80e4z0X~L}mALL8l zjy^ufm(0my2_NK3cDyDcdf^j&wl|{HgpXbm5uGM{w3>)$G~wnm5zz;q==1)FHWO}7 z_#oe(H|h9K2L6+d|774l>G)3u{*#XXWZ*yP_)iA@laBvn;6Lg3e*`pUYo+W$z;CPno(F+{UlHK0G@hsV+ z7dW0JyZwRVS+d6ia6C(Pdj!X`WRDNvc$Vz;365vU-al|WOLlt&$FpSbFF2khyZwUW zS+Zwa;CPno_6&|^$$TYc9M6)aFX3&h&(xQqx3NA`7XHTiOj*&}Sf44&9*p&wvZA-K zK2w%`80#}-MQ>w$rYw6g)@RC!-p2Y&S@vVB&y*FtjrEzb?8#W4DM$AHBljn8JbQn^ z`pok&Spn-aW!amtK2uh9WvtJX6@QHNnX=-Ku|88)d@K$5kXma7)1nS>E9?KC`;c)5kXn{HHrwz(x*{GP?kQ8B7(Bwxlu$=Ry;R~ z2+Gp8QAC&wLI~G4C?Y6_zCjT|IrI&R2+E;vP()A;eS;!`a_Acr5tKvUpopLx`UXV= z<tuwD2M()5kdKHr9V(aP*yxOiU`Vo7v~udj1a>04T=b!pAMP+ZiEmzPyaST z2+8zkBZQDl|J@x8{6G<5^^FF8popLx_<dSMh@h<5lTk!a4!l4K zVKN9H96wM(P!7C62|+pV0wo0HzzdWRlr_HXf)avq=pP&qltcgEfS?@u1_uP?&^I_B zD2Kkm0YN$R4Gsv(p>J?NP!4^A1A=ns8ypanL*L+lpd9*s;Q9vRgZfW>8!rQ8V`{+l zPh&CIm>MWcKgQHRS^0%AHBgqmjH!XL@(W{Xpe+3vQv+q?7fJOA zZ@dg@AM*?2WsppJFkS}9%rA_WK{D;bco`%!zj!*Y{KA+T_&nifObwKkUl>yZW#MT| z4V0B%7*hjf`Ij*@P*#3nObwKUzcDpXR(@ej4U}aM#?(Mr`NdOz8GujRHDSXMEf#+T zA&!_6;IAfeIHDEfuiOYn%nR^Wi71X}+4w8h!Vz-={8e&_BU(HD%H43pd;x#8yn-V} zEc_jJ731g+tq=ICB^Depis7%qGLGms_^V|W95J%tuR=ABn2X@ACYv~7w8LM8Zya&8 z1An#Lf+Kn${wk#7h$|lWs~~|RdL{lU%;Siw9{8)kfg?sr{8i}35m!F&S4%HAqBrBO z!V8YL`T-&WCGaSrhoeL;h7zuTphQVLO6c_{k(;4}s~{+mqoIV603~uYlyD^kC2}^D zFgl<_?uHVshM+_ahZ05%l*r{!LZ3&8oDL=QdX&iRP(r^)i5w3l^n8@a^-x0JM~R#d zCG>uj$o)`4|Hp^+p&z4aFl#Yd2D&Id$M^OaEkl%edyJMLO1wQr%Mc~r9;0Q55^s;u zGDL~D=Pqa&q9ocA`Z1~oZ%^pQs2aQ^^kY;FUK08-ss=9!{TNk)mxO+ds=-S_KStHy zC7~aqYVZ;TC}@Kb3i?rqLJ4CON))6}!YG9jg(;LUPN77B3MGtGC{d_F31byX6s%Cf zXoV7mE0i!^p+o@-C5%`oQOH6GV-`vjv{1sV2_+iVP{MH-C7KwagqajdG}NJlb0d^! za)c6&)+o{NhZ36~{W1g%b@6W~pUqsp)zj72d+W-jzV2IHx$f>O=db1m2XejFGVS?H zKUf}eU73cLx`ui?26KJAZP}Z-{9wMJzUOKiF6++r)*n8c`9WQ0wky}0ZKywgs_k^+ z<)*gxFI{SCsXvlAj&@d`J9qH|o;y+FTx)adxhCBAn)NRpn!&?5`g%Xf4h*(sdpr6% z(Yl61`6HP_gMIi<*FaxS=9`(`q3&)pB_mdf{-h%(Pd@wp!*6Fkt$1E%7SGAH_2hc8 z*R$=N*#SIo|JrL_U0o%cUR5QU-*LTt0JIwFfpu!2y*J;L9cb$9C>M5jm5+11o!Q>F zVgE)Q{JhEsLF(?pf4u7bw9z}%lO4!);NiK!TaJL?($n6LTk*JOq98pztDZg2S67~O zUrI&!w(HrOkh|Ku^Vw(W=vft;W?18%mW5q*wCA&~ksjF1bE@N@oA*2^*E^UU=xy&# zxxn+Ny!LH-YVU6Ey*AW-4SleqX98Jy`QF+PB$9UK8}`?Kch!Y8eFpB{*4~|ihVu<( zW()xP*BMvTxTm`Mj_cWukCTQr9Qvevplm}?&oh-#qZT&+Z)o*HJF|n?j1G z>(44f@F|3B6FJ zePE#dR)dWrnaXQ)$)1`}2Sy%uH?;Pd099RItG@m|*p>|`z1eJMw>fZMSC@z7;||XA zJY~OHyoOrO9qjAwyTQ@r`JYmKPwje#`uo3dy_NUut#=5yL2htpFxzIMR(l5`QUeFD zXDeslTWdeXjRXeUJ}?N)0Pbsp*YT9sPQ3B;H{N>v%{RXOy!x^S*Q{-SP;&d>hz5KC zYuLA%1D>3;HL*juMB@L?+h+ug+7<2pCyXDvwyE^+XjrAgN)zzY>yrss9n!K&%Kr%Y|Hg_^)(zCyw#sY_4V!D-SzvA zES1;qi4xZb2m9Olh6ekGz)1HzgFy8Sdul{)Zsa-#uYaL&rSguwbu#*3_A=CqW?pZ< zg@D%aF*KAo+4D3#|2(zqdA2L3?RtAJ1~iM)eaIkt2W^l;D+Y%Sn9n@>*6O5&+RgP6 zjllN+aH}uh)A&e@k&)%vuXbDJH`v#t+z&mlNncrf=1@BtcoqNa!2de&KT9XN*u_uxpH3qP`dm6a?L|uV{N|Xxc&|b& zyxW}C+VdPa6Jv7u`aSjKI|hcX)@oa-_RKfG`AvV?w`>l-cPer?bCT!Zj#>M@Gj%lC z8!k19Ycf_c>U!IIvibh@j`D)W>As%+zFrvol}iJC9oc;TO4H4bY`?8yU~Pf_*q|=E zDLK__vn(sB`$65ObzjO;I=b8Q`Al=~Cz!)@HV$0FB)WGnd0-}c6JFVw&s^E}id;{B zch+vo|0A^XT;H`^M~&81mH)%HDZMzg7fWFpNV<+yc(y&)o$cJ)hZY23tmh;r0CE37 z?vwVxZ01nE+X(9GAG+F|>&PTt*k)@_7#oH<1{?H%gzS4W8 zx9MhXFmoC~;bi73`G&9L4_n~}eFGoc`d?>m0FCM!xMe3_K2lfiB!*@nVwIk=Rlmbk z=d4z%bl(%Lu=zbF_1H7<)P}=cW`O&%jMUMGra(NpTI$g)=__1=&**(AXWbSaaZJs`IzVysw2TNjG4bP)fWm-SH)YSHF(}kv% z#&b}?iMQ)g<;`c#HKFh|bILt_nv|GJ_YDoUBB}g>-irYxb+f7U08Df$b%Q~c67AtN z01sEJqb~;9^u;X3qiiRf-TYfMW%|0{ZJ9ilpD`#L!%Bac#nE?axSivV6Q*;ktJSq( z&LbmyK||UT2Xpy%v%T4Y_U`f{5f5c&2i;rIYut|)CGA7q zgC|o%#+Axpw;`;l{{7yMd;4zmCT7E&`{l26z6_J8p?5ciFC#oKaq{7|+N%?Hzq04d zKS;U&mH9t!PSee7$IzgS3TN###z1;_&kuEV69Lelg!P|9*P*duOZ`XD84P@Kt zi>aEC)*R}`Bg`A?GS;Nu!iyK&iWJL=t(-NvN~{bD$z<`82WRYhYqa%WH(&~a$u{K7 zE3ag%F2F7;NmUt4_NtHLXi{rM%iHh<3~x#5_EP|~m+k$eq23gO`R}(*W|9)L6{XQVOiVMg|)cprY#UA&%u+MzT0Xw?5S9- zr!MWTZ^3120~wcahUURCY#Ejnha6&3K!%qYjIw6HQoevTU?*{4%@2U_;u(P1f6dTw z@>q@j9wUy&l8OQ7f%?h(@P~U4w?`bN6$Rv0;)xSRrYMx>c=_qR{#ygNYu5)e4IPIw zuN^=B#?jY~pLi>Cw*6`jDfy*7Al{Kfys5jC9q7sB^O#{~a{0{l>_GPFt;{vN&P8f} zB-1sJ&D!v8OXt_%pM!mw_TF0=tkUOkL*LcGc6g7ycSpwFf2$5xn%*<{zOKO=NGxzM z<_GzFUq=ozmd;FPUk7KB?KY#$SU2*S2FoN~zN|Z5KFo)7X4|{#au_ObE>2}I4qivr zgn2inHh9B?I?Q`Jx`*uTdUCou*OS9qkv+j~ryBBgXgRXPBW&l93|@HVx^CgGdB%|p zgJ%Bv5zHT~YRq3yh!reMsKB$aO{63~Hc8^`&)z^&|E!H(lta8?){K>kyR-9_T z+V_dgk^<%4zCkpV>Lvhegrllc`RiD^%v{Y%VE_Z_MN!fn^v;&-0DP{!JJa7cz~@zW z^BA80UQ_1s#j~v+G`2KlnlEQAwOss8^O>eInU@@sg%=7aZ|tjM0%i2py`+I;bXb>sBK3#}~>kD!+=t;ww)G+%Byl4)#dzHACP z+j8;zkvdZ+?m+FR1ovG)WVKpM)l^V|2re;&y^l^uTQX;w8qc9Fz;mGjzGE-4T2z(7 zT)N(WP!>}jyFA0e-PI{ddajwuB&zSUoB%5l)emc6Kxdv(BmME@!h=K>3t2XtV_hW6 z=OCt;ti;+bjioNU|Hn`i=hL?%f_wS5GWE#BEJ?Ja0>>C*>;@Zs>g!EO%msWWQD;N_ zd+&YceA{ad>{`AQ! zH`{yq`|Zg{vMO}u`A)e@?rlfkp#vDMfHz*1S&b>LsrJVzN3b;p7&Zs)ifow8Kfu1r zcX{)V9<^qm)y#d_cNCbtFF6`QaBJkPcyo?1d<2eQ|Ys$~b-^4Et3 zJF%+J7K`5v^+Ubgx!#X09$Q7YnC-+us|9SK^8R41JAd+IHs8_SpKX+N`(x||e~y%% z^vxzVFV&vdSg?|0gZgnK;E*O>#VcT`!zweV*Qj0(=NWW{7+7I6dSpPhpCgwO1UL79?xH zJe88KcK3CBjI`YIlhg^kiW}roy*IcT?20JDN&_IQ9AK){H#E?JiK?GrY;{9m0iNb( zU;;^0#(g#mvJK0%?@BsUd9TIoRNcu{4PM*f@}u^#+m7x&>`1ldm#5!ep{tlHEl{@g zqRTI)@@WZr^d2zWMGO;6dilaCB1PtUd;T(ZH)MNG!@^Hxv%N%jV5lE+RW<_~OQm~L zls6?QLYSy3!9^Ym;rYsC$}u6i&q9UAS&Jp68}5cl&La-uMHpU-u^kx%O0+OzPN-LA z=J9(wGt^59V!O>fUsCI2SEe&>6TSV}3P!`S?LBRXC2g#N_F&re9r7OT%iT)>Z;z^Z zcj}s`By?D|{&G54yPr1(a)WLp>?PJN?DrkLYJ&gK@$aSbFzcr^ ziRT`=kx125n)fmFE{~DFmGrV3mep{`w#44R|4c>J!F_dp!#-5Nj+V|`uU%susptnA z=>8MEIb{9DV2Jj0xeEM#8yNUfE_Dz5VQ(RB^gTJDtkezGZm%An zrBcHx)nhRuG?A*I(nKO8R{28m8>oBA%OU@zLpRFCDtFiiR`bfLmtnqLi(?dw3okXH z;hy}pRMwFMH}u&~8F*j9&pT`mQn^h3 zo)WCMS{mrv5b&((u2!Tsst{^aML1IUzzTe-qLk_B9;m$GYF{5dw>p$GD=gd_mAWEn zrmm={J9S+}xi!AV%XEc6!>UH-I&Cf6w&|o=oI-aW`>U{1rQ@}l%4ll=#Rn=gJ9|sk zQ2%OY_LEob1ebvL?yw@L)p=yEw*l2I!3#CK1S;25CBTj&;Cqmfiuc5nsMjWDRxjIu zi<4*QxwX#Uur@sF{GOHwN(-Pe=#wXN`AdVhF5|-iEON(ooZ8(-%gPT$ReL3WVC}op z%BxbSbp~_8+NECSfuRSWS3GmyTb?rzp*|TH=0ww*SiOr(EswyTt!kmQ96&MGlqwFMHqhr%dVr?9 zm#7I&BGjlvE3lVYwVzr}(Fd3=nlD=AOd||~k78Fk>qn+;FS{|{$90H{sU~PO*WSo; zWg4%W_GDpxSB)f$E%irzFM~xCB|)F!wHBN>Nn9g&GL$e!x0#&bmd@U)E6*IwoIt8> z8m4-6ZMkdTi-b=<;+{I=%Cy_`EHe(~TU3+jDbgVpB-WTxi#o-sY9Lc9_9o+U+5eJJ z#ka;m`B+&%b@5LFnr&ZCZ_(^PXE2YEbtW6>VnDOuK&E0#c78Xo^(~*aXR{Tbvm%D1 zixAaV6hmU_Y9C+Ely@Ln8~;(Vhl7)h=UZddBI^fOC+fSAzhpXocJ^UoNX4>Dl9$+- z_wY)0zw>5ir)~|V?ygIs$mP~E_Ac(5?_i2oQQFkfqEZ-C@~Ax-LRIQqk=|5XoVElx zbH#Z$bC_O5d3aN;dm?=JvLw|Q(W#;@>S5Ap$Td5gT!7B=`~E|NJ^iQc168z66L~8- zle5ub?~*TunDop5E4RKw3;Q@it7%h^mJr*zWNyIfwxrxIritQfBmNsn3y^`;0Ge>Lt%JJ8} zd+aNDq%!KVA&CFkP98j#GeQ_%&=L6JG$(exV6D|>dycJp=X!^-wvQCc7xodMCvLn6 zBjwGjvD@aQL)>_jY@;rB+8LhC)ln8OG|B6DRxWPl!>dsrd8}p&tT67UIy5XZqqFj2;Up% zgYtD7XJWN0<=P){B(y=VQg;K;-CiYIT@`CE3?Hh4*9S^If>fL)N_)%kXaZ)ZlQoNd z2YiefU-JAxAz&cegWV!$Egaf}(#NLic~>o2^2&Jy{K zFKIquQ7TzT^&BelfAi7(<_u~@t?5Gg)Ipk%uF7MuG)d6+)1ZwS&oSjkrK;^&nRb$B z?_H;KY+_l#03ldh#5s6XG6~uHq{F6`mA7wn;~omf-BU?@of zYuQ0!@U>M?|MCt&)|BffXkf8$=gZJA&#Je9e(90S(GwPMnS3SVb~&@7UeZaZ7Kit_ zBlA_xEcm6qH2{66$bZY}uPdB+t~EE3%~U65*EbnS7Euu! zp^#er_hi8E<4`VVGr3|c=SkDdZ^cNF++xb9P)|i(`htl#620fmt@ry(4KD(?x|6dDUm{Iblb`RNWM%aEE>F*9 zfTjLvJBg=0Fi2m;=Hwz%kK6}Iu@^B%&(tG1LXpZYw>GxEf4QxtsqxH*aJ_m9h_{kE zbQXVFY-c6T^No78v-*nGrk3;Aho+10DzXP#39wR@eh@ZmqK4zqnwS=qKZinzx7xmi zsf<8tbL zPkzs6;*R?@txE33TSQ!wx&sBUlT<;r7csgcD|<69$3w2>xGHkhAgi6GEdqRQ&(XtB|LR4-Cs;7YieKBRQ^b@=A~FXPThzl zT3B168$`FWNmgNPlk&<}s2_Ct^qt+X_xvEV0QRa>xpfk&IEV65kD0dpt6b#4rYZlL zv>fK^j+43Y;GI(tf8 z=EQ5?;3degt_@+|VBLw=z4eTTwk?5W-i_ZLviq@rr*o*MA59uy177#uG5Ia*ulKD@|-DYpCL-r#wS9k$us*6DfY*Lda>42^m_nR&UL zpDx?X5gjC@AHGEP-Rq{t9!!2PN<6`b4Y{> zVV~kzhqJfy(w8Fp01>u}4&1VQP!#X=U&&&S(+WQgh9En`(Wi>?tmY%u{8aHSo<)wD z@}Hc2fGS-9Y($>)PB1PhtJ9!lT#b4I9FD4RzN2^68=Xr5n+Y2L&rGyO{eNA9_StqA z7zYEw_*BuqM$Qn@CqmMn>EvS7L2eaPNkdiyK!E^0(`iEDO&wJq2mCoAesb)e(9kF0N}BRh7^M8C zv^iwPPvd6X1$swtP!I=w$b2(0c#DWUMw$y(gmfTF-eVn2g-VctF(C(vFme@u zyokgJ6H(lR#8lE8Ktfc~DH9^K|Iyi6@9uv~DG>qJ&pJ3b01MjGICRm-Rms+wfj*8O zYEB|bIS(593PCI>4FhfmXA2q2s!EtakM|pzdB+vB_+eis69!)WK_y)KuI=a3fDW}F z6vVCHS~8gki>EH;ps=(%CDhki8H~Mwjs&v`LhM@+l8sQz%QNhEdI-1O8pHhzQy>m^ zQotEYVq=P8u%Eq@z}>DW_TfEUJz3mueK9q~5|G8VnbDTk#k%j|3>!uodH{$*(uQ@| zKcc-bu44UFHa5COazmHhfk6^P64M|8cq{;b+`VP!`nfki5QJMSVsB+X=hx#asC2QZ zq%T?9x0&E*EoqoRQtxyIfK|=)3qLSS*9ghO^1KA2KGAJ>aS?U`gtRPTXAI9;GY;A&@i=`2~j_Pne#IO7;EoL6xIr~#JU>p$|3ub%F?Ki zsYSNqq?gZLZnkK*ROg5@XLfB!E;?rwgjrx8Tp9Uqcm|X604WmZTTPGinJ|!=7L0uo zM3IF7MfNIJIr08{aEwS^lxcJAV^XZ3_ZF*C5ja^hAR_g%3f8?xt;O=CJs%4$-9}=; zY;O^(<}{{Cq#KM=)JoX^l7`V+3%Lra2j8tA?BYR3{<~g1SgU5+I1!PQ1bSg*D6MeZ zp1~_cOOq59l#AfZ5HFo4Jv9@u+vw6(8Mna0AC@3>srBSG2SLnn2g6+gpfoj0ONelr z%w=T!`LOl!?Ilh<<7^64xRypE8`35e0fJNyhb=Hz-`%HG?0U5sXk;VFL`~pvIGK`A z&f#Nv%G6jJ!oJ``5#b_308sf0j;$>@sYclZlUM!es5k z6e(ME_y)l!{D#~Ue#h^dL}JBe@ytkdxLT!65y{)qHgdZo_PclTgFP1nCJghw?-=p<7ToBiENu zo%(wMwH`<#lhd}vHSO}DHW@_)`Blmbbhl1B#bgZ+#=qHy6|x@zJ@BhQBbPof2AiJ6 zCk03tNRWoCOw(>$4oyU+DKZxod1!Y#$~-s5K&iw#Vlf>5koc-L>8)?0j4nR zWS>MASW%Lk2flfAqR?XD41@$OlDPRxmmfYfK|EOnHrim*j}5amRkR5l7Wo_?o6XV%BMbSke-c1-R6KpW#a+V z5Zes$g{*UtxHWQ0nIJa9(CqO#E;t(~_`t?OYA=8THOIPk2BX01V4y6y$deIBiq8_A zDx#|h{{h$(RsF+|IdMepUq}fz4yhbaJuxI4ereUkCppeyQy}TGHLRNiH%4WF+dT`Z z9!vI5$`H8q+&B8i)L3{m+DyVOlxo!Bq=6S6Iemp}HWFKmMePH?zZtyEAa9foq1+r{ zym~V9h
=Jp`_@+RW4Ur<}%gIx3 z3A1DUXNZqXP1u()eAOY<`yV~vhw_su`U|8MwBUfo&rGA^DMCR)LreG~VR^iUZb0 z1NiWQec8}xlinoVtDH>b&af`MT9GfS-oX-w=}g~2BnjI>_T z9ywSE#h(Hc0;fxOfepeu5FKk`@-D#ffg_Lamk}_DG^e=K+z`KHzKlkLuW&{?jH$gg z7b|oM8a(NS4wHgGg>dK)dY-6`+O|s}k(ldLg;dn0Bh4{7A|dFTeQh(%TGK+c*XjJV ziy#Sr>A6-EB3FI2FMMrMyBxt26-+mLHI62gynllssVqKyNK$6fko2PtKMCGUzzkZ9 zkE>)kVE$|BP}!8LH)=+X#N9G&u3=G1+ey7N$-F0xQG87v3#yD=H2@rZ3^iZ_i*f_OC+BMzkSQr))gnlS4N>bni@ZMm0t4v^+>YETesAp@c zMv0`zymZ%%wTuRmAXh|iRu-sTAztW;A>oMySKz=V#66L5$Z`xkWU|04huINfH~-AJ zC~5#*c8K`DD50qPvn8I` zxv!7mR){q%V_ZF8suMgYF5YCfTkCr}@lL0?7 zNM4p6&ml|V`NvBSm#PDaalNZ+W>AgWbM&TQDVrG zHHgTSOYfnyk(!+VNwU40YD`ixjkw(287Pb;x1)g!mb%wv9fdH`CX|eUo%zh@Bo4Qn zS56&AD;Yd2Dc*EeS2kv>3}EmV6$4i;LR0A9TV;bRlea5VruB{c7bfpjLH z6(g4uAQGlLr6Ua0_b)3|EZhi5!-NgSLtv)w7aDp?ElH`|b|!BrobSG= znNmPW+Yxak8(qPlP`J!fJt?A2x0fFGMuGUNnK|gncv6Oe6XJN2gpvmYV@Yb3R>^Up z$&=7RPwpSEfIeUcjge@Gdu^EgprS3G-qqrh#Qr92VK5TEtVpyHiLt0H>EoIfxx>lE z`MZm-=aFRfkJ0X&u>^2p?p?C0coPw$4am$)&LL4C_cV_4y;yBdE=edFrh;=X7aeeE z!}y(-1tL6*&?hlmubQ-T*h+i_PMsmNCj>G|xS%J6xm#4DPO_4HZqrR-5N#iC-u4of zTzAzO#Uz)IH_YsOIMR;S3&Ju3ZANgvs>AQH5UiH4!cfcXBjJ#T*RKAAG^8jR)u>5HTT~slPAk#%^>7(f>>i(S zf&%l4`{Hm#9K!SaP~IAua`Pj5_S_=j3(a{#00q^U$a6W zi%(d4a&jyZZn{xf6Oo@si->iTWscHaOd0rNi-q=W%G(H>UDG#8C;-ZYkQAmo?$b&RPk2IAZf28~nsGGU@Dna-*bNMi95K80BjcX} zm~2Q|A)hH(7WT@)jI6oNf)8<{jix)H2iq#@E{AH_MjBnlwn*}53~z_@FTzF!b;9*i zEOTFah*gshA}bt1CD?HA+j?&RlF2ZpY%+(f&_YTFjw98Ef9u^a8>7ca-)4{)&mt}( zS1OY8;8x3*017Dg@lC=9V$&#_7$~sD5V7WpQ^AoCWkVwS2(3@*wdk!ZpRXr;RV4yc zX%*`fST>>VS-iC@=h!1x9z0;`hX?1qH<}4#rM1*ve)#B9CV$31-1mNdd7nF-b%RD= z_58p_4Av4rjrj$|;Cx54sSZVW`=Vfuxw~d%gPQX_Z)=evx2xqOz20vFg?<>&Z}}7$;slD3(GH>IVIyj z1(y;}XeS>p>9st3q^BGeufrcdaN1?{nw^}hfk#$sLHys3#{XANVHpmH(T0f*GH}6n z^w6eZAux`d0Z-e8%96gLicrHn$QVIcF6^d}SEP_ZHZWTCv(PT1H|$7x3}X=got(Cq zblKE7r*Y7(X$eJyXTgI4)$FJxDM;6{*TI4HvQK$bQUY*NJ{rqhWL?XQL`Hk#0QP;+ z;6kLVq1qUdlJ7Z;ut4uJlK09Lj~QhGh1(>UoTTmCluI%2%cFc2(KY_EY>H2rLIHQ4 z{}Lpec+F^%Lry%*K4Gc1SJZA(7S+d;)N*}{8HkeC(eD$)nb7p$0@tk%=%U7YP?8Vd z;8Hyuyutf=HRbN>wTyrqZ|U1eGb~97Cf}PH!{_9V!pwAn;d?17^l{0H+CDxnVYxh@3%j&QDN)c4?~0jmo>?1di9>Ys8^l=D=O&Wz0BQ4> z&h9&;&0}~Ctex?r(RhN~>|0WDI{umvh$YmPJp0(&#UPUOf)I*B`NkLt4~>|Jvv)7Ya714MKO3H?*EUK6l{CsLZl>~-Sg%HN9 zHXmx7+1J1trwc@_kcNxf$vo3`NqW>!y%g+H*j(52@C`B(CG8l`5%wSMp1Syvit$xA zv8($9R=-vZ{elO?8>cf>&Kl`mTH3g7cWd=|XK!b94asblpyH;B9hyxGZqwvKYx-g% zP~oN}>p${eF4Q8j&C}J*ArSsMw9-Ws)^{D+MHP6kG49yG*@x$d5$$c9T|!d#{rkh*_%KRI9XP&Z`K;pSP3t{1+Zls093m2 zIWND$Y7FuZo)@ZF5*dGlxtw3Z2dU>PL8!i2%W&76i9ob$_i+k6%0fX7 zk*FtOBOD%IXMPd=l2ETUK{%|eM$@ME_d45UOV&dlK2Jv{eS3?jX|~tq`!AYMTrgWZRpE1q%Va z9KY^~liH^A5&TH#U#@*Y0l8{Y$^>SIn+V0W%Zl-3R)@D4k}BTKtPL;UB7pk!Rn9-0C)wL8 zq=aQk%8R!ZGLYk1G)(hVZ@@EvOiPKbW{{wg8zB-*pI-fpj8_tM4YC*>GZi^fvk#9& z<(Evua{1O6Nz0KvXm-zP%tBB=Cnx>h8Lm{8%$NR2(m!E`<#b?*j+vkw2Iq_8v+EPW z@G~-`^Rwiz)*jfjjDI|XMqvS35I7fjG_M z0))=0eHy<8i(>G*A`FuO^x{<*4n}wV5=0B*KYT)#xE`w@ALbJJ|F%=@Z9m)p+v;wo z+StQBxBcD5I_~k9UERYoSnA(45S8mOT7_XWL~-YRDKDLJzj=-+8k*s|T|=ZVva;oWibP_Ss1g&f-bb_E*~g4_ z|JwP!i`jj)xv{pt2VoR04E+w`-2Pj4{Q&EQhfi3L-*I7$eh10#b-Mf8-POIl?KOP) z6kWT-K6eHmBQ9czFHX;TuK-*qfOUWTWAglyzJT*S6v5TqEK?<|jNhKW93~Sr!+U{{ zE`=wA9xcqY{<62dwWksTUp>aFy?w4fDeK=bu{X|)mMc27yU^<-|0^W^Ld|PPn+0h^gUr@1NvUx zJtCwl`jb#D=ud)os6PqT3;pRpbz?B@rBMV@aJQJ;E+GHjTiWtjRI=)39hi`KADUI1J@Bf zUZ|GCCF)3(5Fh@SJ|I^?{E|H^KU%0Bg%*~x_I{%$fR*%sr^lf`kVW#eoI{4ESaSLE ztQ9=PZ=j20czk+1pJP!Dqy{oD)Dib6D~Q)u%L~hZw353z(1Q>}_=5f_nOopUCf2`v zi4Sr=$EN^8=)}J)Kg1^`mhcMmfY2!R4fS+c2mn*CEPZm$q|-0(L;4EU7)+z&5?+1A zGrjs$33=)7$LZ^QaGy{3^l0Iagen=8zEM)uX6;SVAm1bqWM96hwZ}Jkd-A5JHK{$~ zIERmK^7iCS*4~#B;nSJP1}v}g7WGxuBwkH|aapD|ZWGl6kbyFi$K~w1Zc^-m)+CNsdr zj8UVq@z{qgQ6G>f0~SQ4>97|#8L>#`A5d&B?*>;9!cGetYJd-h4_G?Fv){u&2N=l< zemIBJaG`_Fq6g&F{34C_sG!~-VAVqp@I9e5G`rVyYYk3hfC@K954Ws><5sv! zlKvIRyz>gV)Wn-UhL1t==g^CAGK3}AKcMsI$QBQ~45i)rWp?TQ*X<+x9sV%;^7LYK z^?(o8FXrFT@18*i^XG=kPQgfyXolqZ=x4eIJqM#=g{nobH8 zsMX-Y*S4|7xEf#tV&d-Ejx%50Xf!;Vs8KRir!A=*K@H9dv=G7S5fVFY% z9M@JEqpxs9yU`ek%;O#+w6oP>wUMs|CopWtqaLEFAs2ABl~^yC2j4$MsOU(3D;vLS z&NDdnXU6Fq*}CrW8P{)Lh(Y%ruN7u`Knb2s8Bqg6PS~4$1qO|C!%EC)mqznWogP?X zc&r6vzs3unC4K8pkOFn@Q2w6qZ?GKL9WmoVA8{X|&9a1k&@$768y{5CfbFC+c9ur3TEu7- zJ+gy!;nWI|7b=qlhLUZh!bIfCa#FIQQH2yr#UF@58}lU+Wz*@?UZ%8nCjo{`rY5r) ziNS~D)JFX3DD|a@S=Rq_8Of!EKf|4#h)Efi4z2Ym@`!f-BFZBfnO3*}aHa|(N{qfw z#1n`I#;o+^JVXVss;N|Ld{>tJiZbp??2g*Nn8)Vj&Lr@8@N$T_Aa?Lnn}a2?GFkin zT7)iLYh%PgP|-2;m;iO$gV?vcLd+|RP~1u=x>71;Sih*&q4IdP-|C_X9e=4t|VHojs|z+i1@C<@-q z*osEt8O+xsnJ?8vd`TuQu0x;VWTxXqTCjB|PZ#bMgQ3vMFVQ}5W`GFpk%*oZ=P zJUqKT*NxEdWW<>bcsg9xMu6Fx zbJmoZ*q3ApD-fxtH6z1^y0lYJU9-n%jV>Emh!L(39ttE%w*g^{U7KzoJ9#y~_y~(3 z13RMuD})sjfJg@CoqmM9%!l|ts+GmLj4WA>9vGescZ-79kYgfGOxvG^%_Uf zH5k1Jn!!DPv82qE#zwodKEz)m$Sa{IH)I$KKvz=<>+M^Nn_+Gr&k3&>6DX{IF4%ag zf%4^;D;c(+u(4QGQjTpai9jU^lEv(IJ>diNI;cuik`5E4?!~WsbA8xbJY8LU_Hgmb z7r%V^PV_ug=4BQkwyWB+frvz;3&J^FXc%&yK*z^LRx&-`sf?Q%GZmUgW6U`ekkjfT zArfPB#Trq;^iV6&NlVCjDf*LyHXv_rm21ZhEhTKV)*-cu03!07 zB#Lxsk5_6a(ETJW^l812Qf^x4vw9)3(xjz6U-8vYj?QT5kYpr=EF};CDEvm(t{QJY zw#+PfFUW)A3m&=8ngNzL=$&tO zx;U@0x3Rs|MJ|UwReyYl3s_~GU>I1#lIc5Zi7~#k$>5B`*ND3o)vnv3j+XX^QYoEH zX^iypTi`#NZJ4+Wd=Vlu$fC`JyGyZJ^2y4+EWX0>_WBb@P zz(=5b)%qoti9FY>bLwr1+f&1x=_FYfnj%~6Kc>cFmVajxj4RAEgN5+T3PTkmSAv5V zLQzrm4uugU8A3W;|1O9hRo!Zl*bm%f025N+iIZ{J6ytb1T%LGT>KYEh(Eow$N-ua0 zUoZwvEoT_&6Y_>bn+hML+Wq@nPIiH^tCYp`g&JrMruRrP=?5;ig0@0#^z^+7?Gu?= zT2#pM25!QkQPzwgb3*UVNSfPm9`ai(gT*Jma3bFQ??PzC=G_)Tj?F-bzwc52rw%<~ zE!<%#pk@<=$(E6`_b=+gNDu|Go%YLm!E_mjAd*&i^sru`zQdOr`lDskN>&%vq!~Yw z71tn)=2e1_03FN}2yTc$Q!^W3P1tV`f?-&v|A&Hmkj>={mVFS;am)<|-GaczQ*VeF zr*)x)^Mvs|kJH)fm+|%S>rwj)usQp3ntwsuT=;YmKdI&4s*KY2quEgYDt&(y-#*I4_i3e_!X>X zaFw+V_Ma_&p(#Z%2{lXytLNMWQJd5mql_eMX$7iyddQ%Kvu)KlE~aS;hLvC}o1 z46VR$9VammBfJ@1Bb|v8Mtep=8e0#3I2zx_!Q>eU_QT`i*X=_p)W04s+7FUH|p)hogs!M{kx-Ssbp=`}3dN zpM|e>Mgpk_*)MEZB82$#j!zQa#HT|(NfbAqUhqjmx$(5X2Z>|C!wMfHkP{D7TNPZ5 zAjd0FQth4NfGV)P(qTRLVUEpc962g2@d*#h) zdGl}q@qi1D7d~D1Y~k~TKQ4T+@Z|yyoGddel@XE)GqXZOW2C~BY8(SPpVa?eaUMqq zGC7}f4(n|4cmh{w@+i!&k9&^%^p$QDD4~b3pmVtwD|sWHvG}Z>u=uPteQzQdp#q;t z44oHnqH!Oiz>27iTUsRDKB;R}+EoTooFFR$jUtcMWeXYD&}AH$$ijS@A;Vr0Wwn=% z7ksc{!SfLFTB>m=7BOrWFYqWqSUQ?OSTeErrtG3+w3TH2M28wPWhDx;JAwo2Hg9ff z(JXGqCG<^V#b#hxpO;dDqV+(9_SH75H5^4OG{8a;kAR& z52LhRFHrVRaW$Up&K9F){m zXlz+}HGZ-396}hT_EsOJj_Ca?<41|r0i!bPlv&c*vxqumH--+bZjL(VDF`kgI7vC< z7-DNn1O;Ob!LlEOC^f4pI|cIX5sNH7kh5}w)^ElGje0EL%zzAxBw-XndZ^7;AO+kh zpxeDw0RgWe-3R2~U49^w)gqgz*?#S+VqT*HWs*YBz zoPT3bExOl*FN#gd8~8$2+hlzlOR6mFjz{lzNv&MKkM?C4`VrWr! zxSa5UVF#}+2LH`qKTOIJ_Cs!TT0W1v^P{dwoF|7s~l-Kswbzq2%yJ2>4K#tum*5TQJ zc}&J2kng|m%JpQKZDdk;PN7&UU=~WvM6mbR_&yI-8!7jQh9Fz1vgpcPRXIDNas#dE zGFzm<#2dv4eQ6EOG3#dekM;^KD}VKcy@FH9UOjqjuc907k+%hph?in&0GfGVMe|q8 zCcsy)mwEFLYvt84#_sRD*m6XGL$QpZdok~GISv5w?03jCu`Zj}-Lzm!kX!h|LuQF6 z3V`aOqusMY0IQ{}H$5Q)*on$1yWK7%ht`9or3XJD707V(pm%*WM0m-`60Rr#*G8J1-W3l`{Szr_ z+`i6B)b)n0A!2YYuEy;aOD(YsQo*6t4AU78@Dln4G#~ggnBry+Lf(1r=sW);+Da(6 z_(ZN4)qD6BD%=9b+*e4B$V@8j79uN8ML>ZRe%8nBDfHOl@}{%P-qq`NYbst^W+M0Kx_$_%yuCf>5fs7kZlz3KdlCFv!J{2vVX+a$7v>$euE=m>g zLny=R>9I(xuDkq-UXUBOBd0=$Oq&p#Lj(D9jZusbM`-X1k~TCh&MdytG$-o_CDi!I z^5V@BT%m|AvzbU(awslH?Km5HmGrxDaW&kraGxD6K!wA`krYH;R-XQCT`B>|3O3K& z)d)-BhKg0|4+!m>X*p>NQ1*b=ageIJ#Ap3TVLa7p4E1u=so)Ys#4)65gf&(92}AMl7WV}l;LP9GTzCoG$181 zdhOH54uh_7AH;faT}E7mvM@?EmImy(PN7(n*|86@xVzXm!Nc98r==!hCj->+lfA4E zF;~M>1jdb}ijG!(yUtwlk&3fjt0eCxdePkq;K^U9^g19U+Xn4ZFwbu?z`PAaF=Y3s z2o3EIHQC*6|M(iI9e+a1gS?lmjrVy;zm**zb>(qzSc*i_O~>#3=RvbqyT zjy_4qiAP#f+6p49v~0mCb9^v9k*ARSZ3Hx%M3s})U;~2?4fzbq%f$igcaoelz5)T` zucRFn$3NDaNx*|u3dWSEtnru0Qpmsxkt#Hl#6m^1iNz;4qP>CJ4{?$po|S_zz}yIM zO4Lh*&BAvV6&v6Mga{9J|Ra}+qSGm15r>(aQKy2~%f@4W52@JY%OdvaEv_?9W5cmkK5zhLb zp-h&vm0%?Vnl-KrAx)Jxv}?dZMOsnaE*2vONckWC42-4N@=vv$fU~@*4_(+ckE*8Q zjFK(1H~>|_i2h_3kho!c>3OeZTS4ad;-F=ybpJbCwQ zIBK_8MdCVa8pJemb3Fru2=Re1ZomdEK0@LWifLwIxW?JxF~Zxqurbp@%RhEaS+rge zfi#jNu~CBqCH;uD^6>@B%uo27;e*AcQKP`b?sNM}?`E!%QynW8_qHJL!+`T82l+5V zcGTTqH4#uncuI-~{FX(7>E=dEVG}XSOq^R6rNqfD6e1nVE*T8*7(@e(Y>g7LwjY|< z8T;YJH$fH!H{e1k7E(#Kl9a|Lr}!Apvngj8!-06A#stcnhVg8G_HNqficT=@WSkU8 zvyCz7GG+HEC{uBeaAT1k1@N>scznpp;<&n1rwk08i2BBE#u-HYLKOaJGadgLEI(OEL{*yy=q0 z8^~6MUU!WCrixOJfqpR6R<1GC^rYO_EH_%qt~suv1_gU44qwB#4viEM#7z5TQx z!vM;HYulY&+}p4 z9M2Wt0}~fno4hP0f^ns|2f#$?W{LJ^F>oFiACUT346fz^VJ9v4&ZWYw!b)m zL3GYVrD>|KSVFjd(YkOg9;$E;m|5*<6o-(NmRfwm>uQ`vc2IxZHe;q*M76kxG+`JvgtR^#a zahtGdOuh=ifRS7@eL`kE`YG2nbt+rbnbzA-!Wc<*H!CBmwcQcDaX3JE(>Qb{@&T}D z4*B~}5&+NxI?<#rWV#Ox=)EQ=HB{Y|O6&UE?@6DNh8{JK_aRUpKPKsPG(0!j0trc6 zr?9d+5?0veNn4HTpsn44MxlJ@Hn|5kE3N=)&o4gVHEU--^>_QH`pKnGrgbC>!#{%@ z^534c_9QoEX?OAEEZ*`7u2{$I`(P1#8!o{+F3%6(ev_zcORnPicaPp|8<@TENq6-^_Vqq95T05u?#hhR8aZdpG#)`sprgUH^b}a&By#6TK5_+v zQp&%s2P34^i;I!?G`oETBBZ1UzmyJuB1*IhdLv}}8UlzPVsqphav6*>Ho=eT=`Lk_ zlmYmRQqpUn6N5r91Bl(#{RuF0=@oStDz1U^&S0Ey-2l9WroZ6D_7TuIBQ^2?L!A^$ zAxA5R?Q^hMIQ?Gh=ceX^aW^SA0T6&<`0@1}{Ke~jhF{Y$GXM)_S##GB4Y*X0{&F!e z(p4WK8PcgD*JI&m8kDEZ9>_Ol1pM&D6=EhQMIh7yC-=Y?&U+?JPyZT>SG8gXqrnmW zx7!E%?_(otDiA(SZst4J|CN=grR|x0epRlaR`2f&N3*BLbWaqts-ZM-@e`}T8Y zWB7BjOJt#XTQn|hDinU2NEU?b`M%XM>Z9mZTn<=ZcDg4F$YVy=x7QAMhiunOOo#@o zwQ(Gn-}4@?mQeM5#@8VeEl?KFi93qSXpG-(5Q%S*ssNFA{$3-a?^xXyI;nP2&uaY0 zd*uS3+8^0gUL|UU(>e>fY+l)vp=mW$OUtWa`Qc*Cseo=tk-S=1$dgdgLBn|!lUt_& zr~-9fO&Q8m0F@TD^(BuNduZ^GENc} zx$ncaP|>EIBuv>wQaD|=q3rFKZ1Bp9&lTQc;Dno9Y=L7jreE|mmpz*`HU(48A*hV6 za}vjtb0at9W*G5!%Cr{%r|EafEr?V)vcxj^zj##7x14;x6iCK>tPdNwyJXhJ` z03qZQ<0~fyu;fHhQvlN$md+ZQ$VsEFL}mmwsS#nIK?@}wTozR#AO~LK_i(J%w?4c6 z=f+|{v(s&gqX|?PCCHht#g`EPJlY%%$NlgKty!HN;mr|Q^Kq(IH%!x%@knXejcf6V zx{^$vSVLSXLPh8rgo+>%29d8)|2=sQ?r!}`f%F!Uovnk5A1{VKU%;OlbQkeBvnyTa zdRbApnP<|*5s@4CBIHK}jheMO6~WRt6uqtIHt?B5X#UF_G+!bCbVweDf+We&Dm{U3 zri&&)IM7~Fcs;HuIcTy)jM&1>2{z(R0EmyQqBMJ(p-!5Lygi+i`l`wHz{3LWY~f5V zNfrfvGw1_eo!1X+dVyg{P^*gD%y}I2>n*2Y!%Lk13AVW$O#&VSy(KNfqbB8 zAtg2C?~6}VCKOYFp)hznTjN*zFwzOe+v$V)qsVu1@!0cQd@)I@sLo;xN~<)s4-A-OjCM9QBPbv6?=R7%>KB30Sdx0*{M$ z#sML$*xzMvdJzk0-_zlRb%n%+xE@q)Z9uL9aAw{BCEFB7j0g)kj48;~^C+AyB?2FKDKhV5T5K@TMEIk;jR6J&@p$=fVR z;zEzijU=eG8(KmY$spHS!C1mQEwb|^*d+}+QlRJEfOs9RWR!UC0mrECv@?T4Z5a_h zcu@Fd%6=U<;)kt|aP^5T3Ah9XXIKhzN`BAm25Ot!V*M)mEh4zxvO>=`SHI~ZdU9j4 zd$6^!h7<6*(}KLyMqyDBU8sj^x~ElTx@kR}bvM2v5HR{j){zY4R{TaW@WHHRaJh(0 z3_kF2U^j!ypFVvrF0-*SiGxaHZ|r>c>8%F2vBSW2f$ldL=}({k?!)^0-##pI zxJBAKc&5HkLDiKxhrqI>8LPW)adIi^v z=xU$xp-zVKw22JyaBLfS22;ECj_8aDoA$&duiEt=1#6$p=*2ZNmWl3 z5C%y6Gm|WD=4xF-Fz`yk@p0X5MF)LMG|D8SOGhX7|G|Xb38XSbW_Jml*mH!pA#TUf zXR@})&%{?+S77Lvb*`*C1&z>l|mo_)n$&@{1z zw+vZ7{GrXO-sGOQ$M1d(zdwIBKlfmOCT+Z8y_zydCeVwJE;Nm@G3+`B7rgCZBwiBQBFJ!{mtiB_5xm?KNCZq^>=JZ^O!}W3F7_7x`^A0yTEYL8?i+ZqpM`2? zxART+o88V%7by=ryZc-uHfXzvIqwDErxS%K1R~@ol$T@hhIC=||shbT=t>?_e zV9_;J+@fq6axyTL0TyD}KbER`sF{L+WyIHAgMy1F=sgkM-yK{B>h@43+Q9_09U%7_ z5L99UDefe^3|BxyoTDPE1}Vh~P*c@j%L9K zlw6d<%>tyF@HtRU*+7PfCn=#@3%4b7%gO<{0pVmdLf5Yuq3f%J(CtNL0}tb9B=p2s z?gf8iaIM)pK=~eoZm4S}^nj*7==SCYLf29n@n{wW9FYxl@c$0JnhE`6@Dp-ZzdY+d zeQQyh68Lg@K0FEf2ev+E%UN;cG0__yCUBY!J0tB~R4?D=xpI=$K(fhGq=WQjMzP5U z4SsAM-#PS|0YuB~)7uO$Eq&AIWc$%nK-NcnIfl;3Kf^;DUGgp)Tzqe1vprBkC|q9( z_A8qmOcO0v_-Eikp9W=xSbm*VHRLiwxc+)1BAC5}@P&iQh;I;U?=l)f7Qd5g?E3gJ zsXhu}(>RtS=+?l)B|laCP#QTIoSx!STdowIM@)#fic8=f3{&?Olg5ywNorC|kRNyv zx=Q4KbSGjb(q|tJ&U2sh zJK=NIZg^{*C{tp_BiUlSc1MFE(yBHP)YE+@fii6rmPgB|L1K9aL#aX!NQ!Nz6TnQJY}sSK*0{Wr;8K!jtF z! zMEnZvF(rzbpu`I2El*V4m|evXP|b=hE4130Wo{L-VGx)41-}g6_AEHk-(-Do0bC6( zu5lUNyX4f13uMF(j>$qU6S>(j#Ohs{rFJ%$X=B9ZDsy6!tI2E!*cp_ng>{Aa^4h^h z3kq&b!h$2l!5Am!jT?D|^LZF`%Gd(?+K1E8!OFEpW(*D}x(;V*66ATpZQ6 zRz$kUmppXH=e;*EYARj(*^0-+-flKAeWy&8!~-=U6bbQ9#+u&ZSWbW!D}e%%$&2@L zoZGaju$VKLNZO*z>5v)|uh3fvdV|n%F9A%*#^%&BY@5U;>4pqKlaVFm&yX?38^z9g~+pk-=#~^94!9jpS~Njk~L< zjT6W#(jRc`8YZzU=<&LOJ{?m=oKeuRlFDPI5=%7F@aBLf;&CvLeG~z6<}wf?4;eO6 zNREfhWeP3`d(Rb##A_IN_@dG4-DTIF05;HR3@}6=)+2aZ@pKNk7%_uG#CkX=EKuC& z9f`(yR*hlYi{)<=z`o|5CCutAvlvEPr*kF?5kS$n3)X6XrC{pt>;z_#NvUzg-N-?O zD+YW-Rv5|amWa$aWCB3LmKV_wGn!AC&j#p#poF1CShH3l5YB0fnT~juxegLxxrVKw zw`e9-dEX@*C$-Uy`Efdgj}szEfPh$Y_7Wa2n_NzzjZ8%ouO*uYNE()_(S=4pE9`^0YS{)Icxg*M|l683}tVzK?&IJV4a#ML?S@?8d z&EZ%H)5AET)}V~X8I=suH?4J``?H^AUa zB=bfK5eHFT&R>fVd_&tVV%~)F-kaFpZE&8Ie@~o4gl~X8Yx%Y~M?z(}qXfI7p2EJV znrvNGiFFM2gP2l0PKCnE1|jQXi>{b zrtICME9_E@tf}*6Fvj&*342vm)})^JrrXrQ(#NBBjl;6fMsMDNUw!GR@4K;Z$A*LttE z6;#rSh0@U&*-;*kr7dSfsfb~ctxw4+ksLw~EoKLazEOBS3{9}=rv#7<1APP8G>ZP>KqwQhu?29jIGdcM>X_FvvvfP~bZT_T^5 z4Smiv0we4;5jFAC`m{XOvMeb?DnV8p8sdJ3n&G~O|dF>%y@8T5zhe=&7x@#0een;^klf-q3p!4+JY~luWW?qA$XLtmJ z;?)c~U>=L$6(-X~aBE*dI)+#!W}{k{A_^bB?lGZte>ARe)c6(2C%_bBVO*)_a2Byu z{u(#pIWdqYmk~CD3kQ12DD%sFyuz(UdDidMhUtAy9HtjYhZ)|9ydO~Jucr^wydkPa zC4LEbmH-51wTmcGgx~ht>T5bWqRYt`7*tgC@XZt8KS&(26Tmbc5OP$B)msDy^*_09 zCYyYFiCMN^$>9A>HgvDx^P4X9_YY!l3dg@#lx~EP70FB3yS!Ake}X%em~R~=R8lbm zhI;sAh3Hqf)L-JdSsE}j0T*gu_tv(ZEUhx$CN+772o974_QQz&Y1f_}1$hrUl&Uv* zPKz|*dng++IKT#C%1L=&S|&OoLqAF?z%z*n1YDHK`+xm)hBntIKJz8km0eim?lJf; z9@0vs`}|aU99-U`~nod{S~ID@N%U}gdY_ihA1WWWg!xaG!0PsuUr zFP(I1SmKg#gO}iK@yRd29QIE7%Rc88xu8Ur^W^>RL5qqxl>IFhGo=3BRG<{=88j3R zS&!mN{|up>;CTXb0#s6lw(T2m<*KB#0;n9osgM~yylk*G)*4B%Cp0k01}Zgm0p0+x zndP(sh)g$;VEohf$(-ta6_DSo2#-cWb+&RTfcec9#GU@PgJ?s@vkv70VuED&AHrbvz{irDIKMfEfq$~Vv!HLngaJD#^9cNatzgKweA^~r zS|d(k6PI+hG_$pGn`UoZoYU9f2d%EVEuslXcKnp9!WzGs_}`D-n8ZNy=6=Z5g`IK2 zunO9lT+qkgOdmJbn@#{X*PqBfZ?2k68Hx4xNR|7ZhTww>Pr&jWC5fQCGW2K<8UIdt zqmxNxFmnAm zGp(1yA;kR)|KN|PVFohFuWZX6@j-gC3h>jAO|b`+5WOLLlAh1b{4I^VEZe(yE3Y)x zVFscVdhrMFc>WpLhfrNNJj?wi^)#?h_-53lTv?AN1+nlY`C7@gDMy#yF!(fv`J1 z8^Dqi3NBPQX%5t$4n|`u%HtOQ#El6_V5&vH)+N@3Z)7=$b{zvV9q$>|eLw0d>x2n70&;jf}6bpx-2Fv}Zhn+)Qh0SlQmf zXlZ00t9m~nDM=59osxWORsHHRLn+nbBRyF~B8e0tSOlrxpt`PD4rCT)<`s z$eQMaU3^m7mcl+5Ea2ZgOK{z(} z$$IiF0EZ_-pI1X#*>H2S@0~JAU*Y2}8qK~)PeH^?5pZKiTOx{Pt;K%OB%I#I{#D|K zAylYv>2Ko%wGTOGXu9xtwfiqcM_OtHDq)Lt?u7UGVm60!+aBp_iPVh9&<68sy> zYgo=#!vep)yGS20sumY7^J6tGW(7tI$~lU(q`XL}Q%m0nQ%-gU5=g6{xCABx<9_u} z&D;)a(qZH1i?SYVW@eI|od z6)k)Tu}-Ko;eJ2z5urG)Uu{_Lx4}zYis5x6Lm_O@1|zr5Z%EaT%{QM?V8PBHOgVu{ zwg9Syi%;OAW_nWup)&6gBO@qoVjF!u7%x5n8bo8Bs33_#Sk z+#j~GQc53a+Y(b5ETa2wYv7dmJ#f>QQWvirn$2t<;AWo7M=c<= zicq|hLX8YFf$~0 zR|;gloLI!jGQ5l&%~vV504LLc#!y^%lTC=|9bPn+;KW1|NdbdcOB|j8;bC`)ShtdZ zBVldOW`dJ3S>g@Vi_UA!kjru~_oR8GY)iRtLSUrxx5l2oqv$q?7dq<}X0Nc_q|2}y zfx$+d9weeJDvt4D&fOGd-`s8G!wsL=c6vy+EFiNHN;@DEIIOXzx20<#)K3xS#|(T$ z-D$fFEy8LoXLOY*+L1*6Dp4_+U65(p^m0165lHMdiS0Jyzg|*9U9e~hY7XBOhcclx z^f43&%SLWggNFdwiV*6mlLlVm2-^Ywry<3N32^1TeWJm9W`BF^JZH=+P}B1WeB@a~5bWTp8owT1pGib2tz7`+jtFv-d`^P>ODr*@ z7Zdp_M)ci=SsT)PyIfD2D%Zo}lau6Yq^{f^=V2Vd>!w3qEjOLEAO1brzBuD?#IWcX z^o7-<`VrU+GJxCl;`TO55BIW0xTwt(5^Q<0BhJXJIpL7V3{YfLmbRYU2C5~Ti%u(a z;e`mb;3R^ZHaHQsg4~^#-N?zQ><95D)@s0jp(NTlObZ5EEe)p)qCqL$`Md`S&QD)7 zSQ*v&oZMzwgtSMbxRU4tAx%UMdYh)Vw>H1;?sopq!NzW9y=&(h_Q3oac#3T(zFcmh zA~gygu^ACPj;}|Y`yJoknHs~2P~4K(?%{>(JoVSjgVlW^9Izlki78{Zf2yD2zMAx) zW1hKJj>~&3Wu5}?c~ZZZ4N+(QBK89YcA`o?TZoA%_8k{RY32Xs|f06!lGJ|oW z-UgYJ7#?KPn1q2nDz73LpodzYcFEJU#zC*XtG!u7sZk1ub@Nn! z8mJvfZqA{XV}?plivS=YO(_j(R0-17&%}x@nP?wb1A#foH%C|ld^k+I5kNEOO{W{IejR45z7RviedtqHg{di!mug1IxL~a5Qdw<8sM6yHB2pU>1nOy3ah=ty zwqYzZi5Z@JJs6u~_Ko5dv;(SA&6e2P*?2PRYFz@T8LdHsv~8w_oe7Fp5Yc40HE;tc zQ^+f+iz-B9s5n=*!$@J-e6<>>Bq|kg8D=Wj4SIsKgaL^}ay@XQ1i>lys&&>?VaS5J}vE>kBYGl75^qK29fdGWT6ND~5a7z5Y0OjT6pj(gXy zUPq4~kV%RBs|ITrV)3?dC>ESje(Br=J#xY<)K3#O=xownJ{KHmG9P!I140*5v-$DF z@9N$pJExfR6(r~nnZ>J04@dDHNnNT^BSXrZZc&F)}hx__VO znX3)ItMNMVgU9~Jwgek!eHl|GxS2v2C`TPwC^LseR8CxY0k)K{@^M@D^g2xGWJvr` zUNNLPDcM8+4UP>$X#yG(x)P+`k*;pHMKoIqatp!qeIn9ST1!X@IebLY3LlV2Sq;l^ zmT0nD^Ozc!)l1a|4W(j=2UR5PvSGKI2MV}V+eIVA4EsdQ&T%kWc8u9!_?($*kcj~y zbLle-z?KpokzvrTqFu*0ePRH1!$T;gBTYrv_(`yO;z)Fry)+O_!s3bU$IX=3FhCm@ z13#t@r#Tuqg6$HL_B@Gm#PT`&5R*BjdW@^IbYRhoAG*mugm<>v(b5DHlZFrQ9b#1R zb=TgAu^Z+U+&qHR8j*FT_6jL(C0KrD?w?4TqP)s_Q87RC!w50ikK7xDCUgRHzt~`y zrB7AR&-ELqW`NsZ(*Sftn}_i8tZQ^=aM7-yKfTM16QEL?WbfptZdyy=*L~;~Cn_|u z1A~8$lM-sJ(vXdWq0s*1wnp9~)~5juJ;axeBJnr?Wnm*?i?M3-lA(-k@!DtU`R{g* z<%q@gv0D#FA0p5teoEO+WWH_@M%98P$1LdQym~`&pIc;@VtsCWc{aFWF*s8Eu01)Y zEFJNpLhRtWKpYJy8mi&GJ*6+*aFXn3Om*#zrwhEqn>CKC*tq9!$E;g|R8Wfn#}Hnn z21DJbNR!@JJMBpw=(6A_c~dkA6Bc%gfB+^42F1dqU2g+x0CzUd3(I3uvikj?K4$H*}Y&7684I0rHwpF+&M6i$-i2@) z^{A3+i@u#+So)SDS{>^GOL3zYYPJ3#cV~tuY`KI@DXfuP5#7%9HL2fj_i9-0Dw1rR zB)Gie>l9@X)=8a|<{Xf+Pjtr4gBwUGw3w1C1;w>U7Z zzwF^M>CW!%_HK7;d#kfhr7570jpe7oP%c2BRf+6y49>|+Q8-j^BF8e0dq};Iw6fmW z+5Z-|-(vZVd#~7q#M2-Z4zG(sJ{P8ug)V@N{xytIFL7rg$ndz|N9q!!A~d5<+3Mc@ z>VBvDd}HtV>i$~Mydk^7Nf+FI0x9Gi2021Bxw*Cd-OcXWx2wB3pjaMPqv2T<()(0m zA6ckyNhYrfdJEh0@euw)(czWvP67I0|JfIL2hRh1__p{(><9<8-mj0n@3;0>|DN~4 zu~*}_$glcFlsoS<;=|0+d9^*QAwx#dcQfiyUs=iM#^x1LDJg)eoDqphmbcL}JUpC= zfU`|%Yg|uT!>eb^gm^0oe}67rE|^Y{Ox*yUux7t)?1=T0{Bmo34Tl_beP^PI)<;L2%$eSwE=?k=Asd*>K zSmve^fzd>w2!U8KT<6ht3HhNF1jmu#$yr#g#1cegKETlcV5za?q7}91HZ=onc5*90 zN>=zBrb*+4Iz2eKxiyQ|nKI^yqVcHz^8lfcw;eX72(+Qr*b;wg6`$CW4?Q!UODd$$ zV5y*|bBlQqt43{d#DZvVjZ*FD<@Mm~WE~_xH>)ldx2PKh1}jDEiFE8Dx?7!VYGh-} z2~~s5;hYItife{8bWJJGGv#}iXM21WYn^<7hIKuL>K`DRL4e*_pN={EJ{Wh-FRwsc zqVn5P;F|IJ!%H@2MgwgJl8bt_rIJ9?)qWI2ZfsUSW+7NL4294^9f4peFl~5gwPcv# zWlN&tlF%aXK%TzSDN9_)t~1(qWFCug!TC2CqYq3FlYb|){6D8ES}K8ZC#A@ug6dxz z$^Zi*wYss)F(&UBn!?obI)UQP7Zj#e5n?++kPK5>__{)udG0Cw0QWe5=nzbTXwtaA zgmp{VJw1N>`0XX9W&4CljU0GMf~^CJN@tBe)Zy)<#+OCCHe1sTW&O; z|GNE;U)zWG7hlM?`4wFF%*yk)AQ^Iy|JmZk3|tM4tAIqk?1Ssc^l1=Znx5}olG0Ek z?F7~ZW;VPUUSHzq4GeTz1+=H0DLq}KB7W0Z~!fBJ#}?<;Zy)JuH!0*30= z{f7@%9zJAiU@-k>a*sXQ!#KdeadICo4N%x2_F?J{*KY9u>i3K1izn5$D}$Bs()CV@ z4a%z{Xb$$yTDGAcVafIRdu1i!TYJ^c^f&OA^i0b|h80>eZ0txmL8jx)5*_W3_;2F+d5mlMD$KlrK9$m89|Ko5JpmE9Rp;N zz=D?5PRpXv1BH?j3u&81Is!D5H*7~ZQy63uRN+OchK9AKJ*E})mGR#OQ4WkZ?*Obb zmkd)FebXof8gIpWYi>lpPHF?E6qIrhAQJsohF;%&uyqjI?&y-ZNE8<%zjD!Oi=|w3RR9$vO3{vSI?z6oQC-=Ee%*C2@aq+^KO9x7DxTlKH{T~`?LTAKla@^ zejKirc+ZYQcZL>$^_LbTn$y<1sSs282&b6ghl1-KPC4vIife2TGSRNk=-crj-ZIG1 zN;&0n8I=Nf(&opp(U&xWDT8ndPH*9{iS}uXLR9hr(_r^w>Pw1~AH#}v{<4o;nZG#1 zN&of{V`BG0zCreqA&}gr6BbDi(5U#~NFrJ2f|Ft4Hs~-P`~XmFxapG8H6KFX)3#Co zMYNm@lgzO6-2jynfG$SRg5O-K9{*ATlD z^!`>e*37NXGtRO%hK#WwcGF{jJdKOip^K|>!yIvHNyw4FXZrKsFC$I39rE&Fu`^p zDhI;8`jrmCl$s#MgSY8l$pkY_iuE-X=8VBoNEKe!Trc4UDtAn1KQ0GlvgDrnS3(j? z>JXAC;hN17=Qd%1I^a>zrVz_ue?8tAfY?+VVBj4rtM(X5rive$2=8mS11-AV20ai- zASA7t_frlB2!e*}rNro(Yb9A5iS}(^-)@M7P9D4vHD6CnD>m0f>1SBG9-Rf(Obu5c zqXY})Fnc;Yc?&F*2uRgXU+4GSxa8VE3pU0xBx4)kATqf+ZuxmV8vZOcjM7chZXF-& zZpv*s1DGBVU=6=&xUpdpQK?4Mrg|wmJY2kpdGTJUR?f&17Ul2~adpQCL0UsU+dKPR z{DURInz)RdRhkNY+gV-j>{>R#Ddl!M`v<#Q`@5@Kd(UoD{@eZi9dBDzw$|$LG2F|r zDZu~~=5J-itPjsS>l>?G-n>LMBXOgbu+dO_7vTGE`p83f{2Cv*|4OK#Sg*k3#!`|q z5b-be8eNOgb&eG_!JFA`sdrWx2#%KP-ei$FCYPP|;bVWU4s_BD7rFHfW~=g^lu6f4 zT1MvqXOYIpmmp&)l>Lk-sWUaGI#Zw!3J*8P&pv2>y>c`^bf@ASFvL%EQH3{h%bg}%7_6EC+lJLCuq_MT!x=T28FD&kG}h4{=r}Z zXd*2sY7?FV;IK4cZFibhjAhAPC|20Nd&lC zv4+VlHZy_B?<&`kU?~X5anvyRw0PVRDVKpn8L`}u_D9;+s}^wrYif&HeO3fHa;3ln zqgLH5|Q(pIG(_9ln+FnSvsk1)6?B~s17tRcal~Bwcwc%W}lNFs=k*97xs1Mfry9kR>EGCD4k^^6f}Q3P+XiV4Bv#vgKUosB}UrOXW*T9Wb}s{?X#Z zJzs!Tn`+QjYRXAcD5zl$rpg3KiJAhZt%r)BNc$^Ch%i8kk=LpkB=S}3*B{#L!yi^2 zeEo+P_vcsOM}P1D&wTu39#4lq$glPhf7-i0P(Gah`d6G7V2goy0B#WYIRtD8e@@~= zNWh;#u(K!`6(mJgXef{CNhn$OCC&pC5&tL@%gSHgSlO+TY5gxX8p~Hi9AjMbby9uRzhF3AU(c(O z6FDYDn**ZBU*g+CN0U1EAv4UtIi7xx_I%)1pT@n+>Z$!v_FR*rI1a9o#50m94h>?d6e=!$-j zgX|ch`uJw({NYB|_9C>u&D?{42A?-?T?-!&j`(b26P|Lv$hSj%T8rmP4GZhVeTa9z z$|aZ9wPxHQQqUviztFJaG(s4q!zEb7duN=*SQrCN&Algs2;totV!#Of_u3pJ0>=Od zFa-f@^Y~{(*=c!(Y8a?Qy-U8FItsRFBJi|a!7^<7Nca`DQjW7E{)~d}nRJ>GoH3E? z!VA(TffE4M!UAL4x{X@DJ~QZ>KXcdz{l0r1-r=So}f^xRht(4$P+*2>?Oa_-Bi$lud6O z-zXWmEjl7WI9vKHVC;e(ZARd-7;PsJbB3JkT{DTXE(btdX2o$-)0C-1;LS?NxWjzx z^~LkVXq4<=WGDcbVD1Q33+$>75P`OIv?OMgr3dq$%zq;LWjYWbLU%%t8IlHX;%M{P z!6i{(Y*u%phcD)<2ajQGUskF}%RYg{i;>XE1vp*@RmdYsf?#n}6v6mLK^O_%w%LOV zhEg*FigCw^0Y3Dz!Rt0WuSodvs1~6(7wKFotpt=fAQ+D_d%HHq7nFY&?RPO56x#6> zFDMOH2Pa4cVjZO|iXkalITyC|=11+yo)gA(X_VrW?lA);p%-MyYC^;Ofq@qAw%cF- z>E6-OygXeE6#f|a-+%Z)9ZWe1Z}1Mp-9$089;b@nN9d0UYk z4NVk+?aafT*h=e%yK3@qAWl(TYDcA}lqY#N9zLnn!CFY%Cr8h6quWizWhJRGZ4@N$ zrb@dW?-okYv_PJJyC#D23H-`mq7PXAsX{QZVbuzvVPOtVqKh%t@bKb!kNif~XB#dF z@GY8Z#$Q85p_kNx`Id&GR}W4`z0<43_QS)+pT3y)=pZNoa+dfKQQtTzhHA)1du3nK zCKk2&-0~9Jl|0KFQvwx8GGGiasf|Gg?yJ$X>$M)JDS%Bn_P=sTK>NmZQRji~L<0)F zfN!8vTPneUg@*Y$l#(!l)P}?kO&}3SUR{qaWT{HYkh?S~>gT`1G&k57 zzz8H){;^D!;1k}XxMzhPGE*UL)Oz$-t%Vb!%S0G+FvG!s#3ORUvJE>&OHivf&A?5M z%@OD7;H+A>(QA{473Hi!u1r^mcoZ{)tE`qzk_tm+3Mr~HO1N0#IBg)P(|K~?FKsZg zS*NWA+k)(;7DUsQuma_C31QiO%9JI9L&l}sFwG3$=+Mh~I0HMFzD96g)YWyvH{n*x z9=4(&mr#Pn=4kfoJevk^llqn3 zS*&4U*m5}0hUUbjV87!^v0vsy@s7!#;fv^vc7O*tM-gkt42dh2qA*)WY2_`VYFVY) zBC}AIrq5W#&Co@i%BrC&aye6G+UFj&10%G zYmko{kxWcQFagcZ94S2C9i5U|zu-#WH*yYq^ycY+}L})Hxt)Qb`5p7VmDx4a`tc8D)YT z7G<-#3l`qs-`uRjUP}H4CcGc50uVW1^`qoAOjxZ;Bx*LmE{ihaG`ku)(Ur}5mFRkm z;TDPzFJZO_7)YdD$w`Xd>3radDokq;J^+dDhCcaSmW53tS|?~*b0@dEGCmqp9|``H zZg+iSx7!t`#?sOQ`F|+gp`$RPMvS+yl7YnVH{fYW30+R8Dr|9Trjddr8cmLxuxyF^ zo4wVIAe3gTsW42F@?`>U1w>&fT)X|*+O%l=t>Y53seLTiQ$ondQ(5+Yh8JUm=!6WA zwO~?EPG)XVapyi|8+gO4R?M@6;t$_Ev_FKyN~8LDb#qg`KC{34>-zTE!Sl}6zPk%I zkm@IC3ugYbEd%qr)y<9d)%~LEqh$ECMg5ayUQI6M)*+!cQ_UdI9sl@T(@6Oq5Y9NN zSerGI`@?Oy!*aKe;M?(lu2n4-R;A^kSW7yyttHLhiaAAMGnz%XMMB_W)*Frc{WK-0M4sHP1;&pF!z)fy}|HxXn-_Cz$c z!w4%Y(@wT>y_Um(j*+#{o?m>D99U4$0Svg14FeO;#Q#jKi=AGx=_!c-V0dwiv@;qFN1m(u z`eFc)N$!o&@re!AihvXEZSU^m2BL2cHdl9P$qOtwAS70J-W&g@5k2G)C1=&a>kSGK zw_p)2Q7JaUN-9fE+W7Qh_}aqbZhE_x5t<)3J|2Sm}wW_-Rt)&Tt3KbX|Iq83?4uv$gi+C z!1Q1yx+voeYoV_Hr>-OMLIR zYG1)vKf7l&W-)!}F&bs6~>jnWCVAaE{J=g6>kio4Dv>pSwYQKlN>yaT-xqruDTE0l!I{A_UC$GHKR z;xA4fU>Sj{A#>dD5{H#%fRz+FDMQeK8}x4|V!zeTui+w1%gS*zH~`Qkkiy{(XU2$} zMvwo5eVlJt{B+3c3^_FL`x8myG+vpR*~h2e%i&Lb8H-LVqV52ypj#$DfIvPw;J`kO zU*nhvvl=VH&@ar4c!j-$!(nDUaS~wS2f+R1a6}B^eLl=3^#5%KE9}|+-&S`!)y7`s zxgV<8)jd4J1^l;-{cpDq_A8XYA&>pelzwUpKba7pl(RcXm5_d)4;t%*OMb z&5aJ;ZEUS=9;|O{eN#O}y{+y2YIEcH#(rnL+TX6&p*6M9LA__y^Uf|Z`yngd(~ZrI z{qGlMo^9-JvCU`OyVYv7v%0&#vBuS3?HugxZ0~i@{W_Z6+Sq!wi(We1UYF1--c_CN z@KEi2%S{6gIe2M-FUuG zt*<^`{f5x(R@-Q0cZS6jy6SJ=cKC|@t>XXJWS7P;*0y;HW^I1~qukvORsXiJ*IB4m zcQ^KkkY~Hw&lhHhPSil_Xax1PI@$_REeHxTf+9rN0S4``RO=l`2V37@dbVVUUU;bx z3}=!YsLmpgwdv#yc&JKGeAv`gF{U&K%7m!2xv|#S+Ux9f5$DvwX44v@*rKhTvAXoo zgv%{|Uqb>(NGe77zUK@~YKY)w{|RnBZM=&KP~SlI^z#hT-BL+*Ljv;O0mq zapAUr=k-3248LRF2fTs20YS{j`vEAntC=TRo5c-5S+g^u>yP0iCi#d{+1ruC$O&ZB zzLs8Jo&SIAy?K8dH{toRA70f8Uby53 zIVF5jdK}GZG~OC>@&0IfA*06tpbBG>y>QDr<{;Nkn-I z_R@#tlHHiQi;My)1miuWP3U1YKB0pem~fUjKWSlc_|%5*HKsZ5afntOsUroeIb-9{ zMnS}2En)~h)|4$`kx5`rg>Q`q-hnO@WNc0Fwp~Ag1J~I^F7g2I3nJ_SVrc;ejBQ0> z%qWoBez;H_*s^2E9DOvT{JqW8fszyJVKG4Vd}K<$kc&ud%+U{VNSdh`YrbV(O*zz- zGeg2YD(dKt5FQJb#c~K{)qZ&OA3k+gh%};XG*&wOIF&7x`4`jKup5aMrL7iKxAD@N zHNJ<|3Kml~oNv^##rM)%)da=a^v9L{9%(J>ZebajDvF8mG28C2^RZQwAuE|e65(-- z%Sukz&gAn7=c=J|xH^QPr><0!mB=ZA75v;%JG4zKRS+?;(qAkpS=HO)cMB_2QUI8w z9iFeO3QAo#^KXGZhFS_(<&RQG(On}aqmlLEyQpMU)99o<1QD!Xd$h7%5lNjqWp#(> zWtBZZG3%vONz#lNvQE0auAS9HduTa;IZhc7VzAHj<$)CgsK%J^=e;|^&rUK~rHzB5 z3n4~CNUysA8Jm+z?^;3;OK7@nHKEYl8Y{1S(9JsgImx7{RPRbALrUHG%Qi!5RmOe zuFZkbe~MbjoAc%Tll!aN_Q>`dkj@k~*k_&5{Q(jmh7JfL#?BzJ}D>!>8tw-Rr`rRs>ZC5J7e#@a2ZpQcA%gQH}#&5lmjnhHYLpP z7rwc#xdK6@p9fnM2r3S+MoY32X#?-+fq_3nO@*|8<6ujLs@`YDo%;l)(|P}JcX53r zmJ0kty36(NQ@Uscbj;?$#i9XkB)0H$_SPCi3ToHyn}LhzJJNydR1b6@o6Fe`3P^-r zw5&MHENs=};fq~X$g;oW-FYxS$S~H@+o*!t8e%`WP=P7oCw1#FkptH9)qI7u0-6R~ zF}GXk3jW?>Kq%?odklZ?G5o#9@Q3yox?`L?gjS>QkEqz3{8D63ahD7B7+8LF?JLUi z9SJJkWcS3tSd^b*E(k>Nz&BJv@*?aWV-pjm0bRZ+zWOwm1Yhlw>cc*!UijoAxpPzv z-6EI1UI&=;9mTIu_&CePpr`y=pxSQVc!v% z5*0A6?8Na!s}YMGI7F!voqG=OJUnO}BfwTS2~*L${+Qeh`tM_~;e@ckRvqU)3LS)I zDIaK%H6U4@SJrP*6(qpL1AmyU!7g&@Qo_jA*Zf-01LH|ETbu2)=N=x7JZOUZsMLdW z2@h0MAWE=3c!d6`5(z5d*B{U>eL#DF)ygmKpkg)QS`rf(Ka7-{fge$dyP91mzp$gd ze4b)xA<+)RpPbnChdjbLP29h2M z>9qC`96f^kSv}IQCO}M=xzt0VG9F?g)SiKA^bAVddPu~^LzoHLGhPs#(H;`bQIJ$V zM^sY)QWevPXpe;^ay-?UTMeNjO#Cm@7IxwITUW5d+|n7kuPbPJIA)I`tP|Hm!4co> zZ{J9qtC!90td(sZ@u)T_>W5 zTXM0RrH5m?jqlYCq?_)in!>-yQ?kpl?_Fx|0b92SitCzBA3i|6AEFezFPscQkxL*D z>esrY9P>h+P+Z#Ja(>}d-6N~0z!x1@7c^mDweU|ijIY8Riy(#);iI&f!aOkl=P2Gx zE_ff&!;?<;!f2sEip&4P4vCtphHFPtR`?9pVoxdhLw0z=sPj=$VMyHgwCA{EmrDUI8j;MSGIUl*|4BaMBFC_^5-Vm@5r6CauCs zp~2u5l&k;@28--;a-aguhDRzq2xIm@Ei#6v);?~mDOvONCJ$AHO)O4g+Ylyp87%g} zYK-%PMi4L?{gmZJ2V4Y&6UM1eEL6lBu!XH82Ai)D9co4}pG4YDcI{3rJ~SjP8b|3A zRGgu8N&0!YeA@6)n(z&nf15@3g@BzaQDd>!h|V*DVk~t zf*3|E6m&ggfh4aR^n*&9;Dj+)0EBGlFbMhf7#axX9xP-b9mEe78uGP-vCmWAwen@E zS)Wui;*pA1A$=AGk`OGI55>iADoqxsHYA##Oinub@pUQm*8ZwBQG9>9KfJwR)r{4$ z#O08Z{{N8z(r9Q4?fkys(4l;$Bk?NsS9`-4SSdU`hS*{?$?OznjQ`R7H!vk({A+NK zYzLOWcPmUNr|;i;;~R8P)Qs)~21T|VFvL$xx(gqa|%oe2F7PK`(!YNED+jC$}I~oY+s;{lE1gNM|2&eYV5f10#qe>a7`a>=aeLw-p-nhsCXMqMSbP9lof|2ychqRBS zHECeD%kUV%JCQ9<-J!4%lao|{Y*rHFRMMit@#PB~DrNH_g0ie0^SfenY&CnDbJ>Rv z-yC`LhU`kwckVmGiG!8KD-`DnEhj$5dQ6eAVk(wsQ|AO=KJY6ZKP%tM1vuk($iQ3L z;UTzxrXdn6y(NciDN1u>9W6m^An+asPO%Fvy;Cas_z-vhH%g6?0!j?V@FcNgi*QTV zN?Nm-mK}cksCbcZ!;)5Hh3+sl%i%a>M-{Tz50n5nPDnAXsuZ1qRtzgBXm+2lcPM_a z6S(5GBaNVP`lqrypESgnm8I}-ycOJpog6SEX)L~!rd`_)AFLgFQ6DI(%3AFUt3?J! z%Doy`ArnaSM*NEHO^v)3Wv$-wBMHmym=ToMVZ@YVq??rS8YivzNgvrFFG@&!hnbEc ze)FuO7M?trE>Vk)upfvLaV+P)S>CZK_-1)a@e+&Dhc6>5`m`aJ$GpJ)w8xI1<5VY) zwu1}x^X22kub&VP3G0B;ZGUZbm(8!OuZ8GWr1I}Kzc#-jk5aq;b!L8@ogsJhhtG&+ z{`94De)iM(*(bV;gMPykd-jR)k?c*h1a@HJ9657JbKyAQZIKVL5T*Z8qx6?GNnZeu zg8t;^h{~MN>|GQM;4(WQs```w&ciyXXL&Av`^V+^yWa=Y2>z)mXp5xbfJ<2b74BkY z`dkot%wCs%XI1DTpc~h$A526T5^Pa$dh(lfu;-n9Kwv|G!e7pDmB}ZLB&InPBQLuL zv>7B2h;WuEPua82ep>{+g}{DEFE7cu%?5z4KsXp2X(S`B#k(mkJV6ahh44Y6&M^pl z=njBrz5;?*QZVN2SIUA@xSUHJCb@{wmvPDwHc@&;V-?AkTgEKv7uZFoxOz^!sC15G zIM&${LK>Da(1U6GPSvom(os`NUE!p-7Nh!v(_|Gc&On4^mw`Y_9>pVsX5h*|$p?J+ z)#RyHXL{5QPFCZHv3#F4ru;YV(s}=7@$30HF3~+l&a3lt>&d&{HDOWw$668C06WDc z$D8={f%a^mH9mb9BlTl<{uOJ!$>=L$n49pDoN=a?sM z4IUxF1X0|1C;Gv6kH}g(N}_Y3(UzIY?b`bGvhxx(iIEu1kmdz*8L013&YzWIt)ecj-AfJ5(6jMlbCD^|iuC(XJN` zsKQuz3??0R28W_S+&r5RsTDhiavBAGXS2`;HVxro&@)i&+V;%*-v2x1roVz%j>+Ro zj0E9?g0d8apcSOolKTEOZ6%kRU@N~32@EVr!#4D9A!ojP@AR&D18b9YdKNiL}%;c}Tdj&=fPLh!Z%4 z1M*ziT2ZQxJU0|3h!k5;(Bl=dpdh(UbAs>&3Pu#9qj^$Yx@05XzhA?RW6u=5*6N=@ zkl%fA6i);~K2abP(}`^NcDiyekafxI5Fwui8y+!<+f10!W~`ybhLjOC z$y5ASXx(kdgMOzfBt$Ad%?3KWDEF$vhE|=}69$&Og6s`82GZDIPla_nP*+CKQ?V93J>fGs=|wh~(-$$H z+wO&sd&;U|k$re0rOHfzsa-K8q(psqhSZTBK+4XLKdCo;1fLH zU}|nNLM8vpo`HhpH03@}X%b@v$T}g7JPo$wb3QuS3*aCwnqWkyd$P&c{)ySz^3f3n zIwfVn@cY-V=byf+ZxA)2b-mo6V5}xfi?JUI=5&=o<~NR#SCj*Eb(xV@ypjQ zUq9h5X;eOiY8_+l*6BPkpRQ)gZAsoI%ROR;Pf2L?`k0vBVQPN`1-j?y-(Q=Hub+SU z__O;xDEAXRx;Xp%-u>(8Cw!p?KfI?R@6MRs*BjvTo5+D;Z|Tg9tRqY~tO`8c=8>-0 zs~_02vU<&DYNlbWzUiLkGgh4y(0YFu8}37LmZjmt|5VD%L!A)z(;go7p2(aF%oOl4 zi%k%052ll~?b0Qv2Y5j40AeUjTLccDkxmu?fzMmuP0m@I02VSzRBXt~(uZ)A?=;j% zSNrtN$})6P)4p{8Ik{tLdDUTIPgkYVR6D>x(EXn@WD40u1OKx2utLM z!A>~b611D%5)V=QR!b4BCDgFBB$vSyG{}&G5&quIZ*8}NCQ&QE3q+8~AV`OcpptA(#}zyX=VSBam);6viy$zcx|yywS>Dyc&VYL`2Y6p&j0$z?+F%m7srP!-NA|00=#{1HloZqd>@6bpQxGwgVxzj8Y;R zh6oN|y|f&+#nlt7IQi0m2G!o8JTPFFcp*e@t&3G`*tAbU0x58ZUh2QMMO$Brn|OTHF1|y>lkLG4OxVp4l-LkU2)Ezq4;-$V>py$R7Y73EzhL`30PZxL zyks{XdJa-Ei{zk`93t9s%1LI;rUz^Zp1?zcN!?L4AU)5p9UmE+#Nt7uE$e0ZOVuxy zz*PP6Q94ug3lraWTOO))0CMmhqw6PR_5DC=;6G=I>&IU{ef=5#e)$DaKX7YeBhKkGw5YNt`x(8Tt1+#T1ZGgV-Dl8`Q@;IIoc&hS)K1W{hkOJ=b-iz&d zM|XO`E2JWNBoC3qNO;m9vEIqhBXTZrhyQ-pq`l8JD{V^LVPY$iqi4v5hlC0kH9;lr zYI%Jhbd0P%xKtgZ`3F|0T+xb2zsrSQ0;J^=TfIUem`6`+wu(sTw=A0930NfPa@&jl z-SgLc$3zbL;QA6IYQZ%K=r$rraFsJHUPx0C&AQN)C@3aMEOhdlu2D5@}o81cJ&^(KC%)!1($%OBhQx0(f} zvK`bFl{o^;$IqFGD9ZmQO$42huqL@=6Sr&>ON6~=2oBkM7T|j+VzBl`X>SRwg!k=X zTMJy#L;L#HYJ*78#`SB6H$3?uyCY%`k)4FSX=!g*aGZQG!wX(yW@=?vkR%KV{t7W+ z7GM^*CN@OXQwtkO*}Y_j*D5F3-xnsad!Sf&-`^J|(LTiA7bg9EVG=G7)zTJ5n-RFw zOgisL{@jPf{7ZV;qkl+d=7?f1ZpTm4$rgzX#l5;;9_G_FCiX86{h9bma{)dgXOsYr z*-q+c@E~sgf01$yGr%QcbYl>Ahhb`VLIAqC8E!mVm=6@sEgI&{ zzw+NB!M>EUWsAttakN>OPM4f0gyN}#6tsRK+5j~fX-ku}ID*2v#r)gsEv5`%RoMz~ zLxUWY-N{R|J6}?#0TEc>!Rbk{n0|~JxEPS`s3Ko3vj_CDnA&ku2y!)c$Y{j{=N24h z@p3wU_#iJai8iSTTR9jcyerJ0I)ol zxK6IR%l6f5G`L!ti>o$R8UJlww3t%4Y|nAg71*4Y!a!Ihs3>LZ!>+*MP&ox-)*TBN ztHu1voVJ_h6)p&zcP&_RNbCj1S%X7mZSC!0G@UK&&{lJxhyPq0!hf&rZ6w<%r?k}8qsnvrnld@rAq?DouQ%PM+#a`hA93SZGE5~x7%h~klo73ziK z)rpEm*=%w4Pq4eSiab8s9IQ<7bP^3QC5UT=fIe>T#x+BbE)pF!&NSztIT}8mU0sHb z=r9o5fdg4{+*HTAPm1tywpt=L6tbfrDFW`x#k@C@-4N~4BM|#^v0bpMhv+vWGDRl} zjQpKRk*JLiBcE+)v_~PPadVi@l<`02Na!X(dhkaH8BU1 z5iSXI;7qG`VtQMfG=n({GJPgS*H)Olkfy_tk#o+c)Mp+l`fWQw+CI2#cEYA95p2uk zk9#+il|Z8)tsq=aFIwRaPbX&{Da*P;lNuXkP=cV?uaQ!KiExsYevmAV+uk$-tJr+% zBI-h@iyz*JUO>>K8G%>g>%~WUiuUeE;h z`9>?o1@8UzUt9-#9(GG?yE&nFh6NBn`~h}Vp*zNIZ31zNQNh{Z_wIF}MU~xjSFFauhr<=H-24s`2MM+6wH02Mrik-Hm zQ}c`>A;{u*+yp(LM;3y?3=1{}RFfYVJVdfix3%h>oIf-wmNw=x>AJPU&f|IYk!YH#LStVNL*CS&f8$olHJ_AsB6T?QNg&=o5u2o$8`Y}cs+B0{!30S~kE9B)`# ze&6jG8JOO$jvYE=$xJq&?>Gi&Q*(& zy&ogxWIDzb|F^+f!T(SjEO8)m+CY}XF7yLGRAJj9f)^WMFR%dc-)=_~q!CuvBc1&A z?~_aB>=p-Gc$Krulhe2rpMEWR5f zWjf?Y7v8`* zMEPcgYBz7I<-hcLF1#z4sLPd~4vB@R-Z$k$X9R8q{J_@TxUdDow!kv-4GZ=|HqpK~ zNdod&f=d+t{*Lr8FgZyVJ4 zY%E_Y1RI{XzgSL18XogLU!GleO8sqiQuZ~0D`vb<@KpT8QKeWhDyW-!DR_)crCf>SYn^f>;R$vtvt)4` zYF2z3Zz4(OGoHsd;4*8MH>;K=E!CX&9+V$!tXPwQRO9UTm6) z)Lknv>sNN8O>~?M=0}BQ)xfTDxshwdN4qlWW`>18u~LXMMxt)nn=N?Swz_ry$lEn% zwN5MoSf;mXqU~xnn5{1Et7akIE_-7QPbXIP$M4D>bCB^A3Wf44QZ~&&eU~k^;xG_I9NC0icF{e?uQQHVDRW$kAqpfzpK7(WX4Y4RY!^~ZGxFR>^q-sI z>AF?kOfqIATiR8E?O3Fm-HrSOUuT!AZgQPiMO26YRG@E|Nb1jl78~shTn$0$i z#$Brv2G`cTdC%r06R&T}iG1+hvy8NS%Y5663`@gGx@0WP`ef<{j_c;GeqZ)@%|fOB zQ1pg9%_?+5tsg9xIuBW2BibqVvyEzDSFZNG_x{MXTFUO4rEIiPGt&(-?kUGAvFbQj z&x}*+%v~p4yzAF9rIb+(PdBY`BT=m7gXqIuXVfp({pLfb9GJJv8E{T5GyX=cn+STk zWi!<=8_@0EDCF|4X~v&1zS(?r$@sfrRQ%;~Hj8)u=%@mLn>C7+SqeNj$j0N7LOB)9 zSK^SRj+uvU2IrA(9u@97&}lSpG+v;K%3Ox~CFptszti|VX+wt=%Juua86V==bG{sm zHhfFy(&enMGyNGO6)9IL3AFuy`HA4&WfF~MwPMC9iPWe$jMuBx%sf-cu3El$zC2j^ zilu%mXJq?@@HBA0i&U!B{-`wpGbB2bdMOgkSF=Xj90ePtk*86vL^`ELvt2WXg<&Jn z9Bnq$cz=|yre4~2ky^`_1^?!K1y6p{jb(Ou-*OQJt=f~>UD~q@l&hgB-ffHH%BJb- zr%Kh0(ehz#F>d`$pRvmomk;$)f0mgvYM9G{O|u-xS7yG72XvZLlJ!y{4m}Yp?ArIO zczc_##wYc1BV8C}x4BATRgD+MklO%cI$odD{Y7u1kR7AniMF>LtCX6PNUaz%=B1jk z&iE_EjCWSY*ftt>W;GYfY;yV8OD3_Yf=+-r+G0M>qpp4p^P20Sx9flk~t#@-?N70VPuo01Q5 zRSs^_yGXe^nawMsjxT4>te%ZEeDTV?w^DDE3iXn=;cNP`!$viA-x{Vyjh!bH9gscZ zS%MBm(#XckW+7D=nXx?P1a7N%?qPSnTeRnc8Cfv6$MeLTEyby z3knVIT&{zmn?G01^jfB5sr8H;w9o8(b>?yY>C1#-KKW@!g#kQCIaUE)2SSaF3V#9+`-P49d^%S(#EJsh{$N$( zx*!ILAE@y217z$8j%l%=2}wMhaG|r_r~iR#AL$|hpoJ&2J)kW_-~!Ws>EI9^BZ7$- z7#~&uKf>Mh)SO&`^xgTt7Tpo$Fze#X+GVHv5_CeTqR$DeGiA=2a_{5@e{w!Zv}>3Z3n6X`-r+^6h#O;ObN5p0KJHywC`T;kp*`3muc97vBQaf^cAhZ zb%*xp53ZG`D=6LT{&dVxk!9fxbUm%$J6!ZZ6zc92Bx6VYhHw$m6T?^?XB(2vso}S3ae|>;kQa|scjo-0 z;os2{e@9Q)qbF+2XL|?sHuZF{Jo-UIL_nEYpCfv&*}<7~tUYow;$)f5vpMhatflIW zJQGU!lGQ`yT z-SNi2Dle_$Fa`_bMxS{&p-j-k^!DST+nl%I$F}1AE>D^(gk?)qndgv@midjK*>!yW zDdPbo3hKBKn*f z{esU=XFn48Pu_XodB1!idy2!npmTT~)*j`#W$s_rS;hjQ*RlXLs2f68|MB_X|MBbj zf5?HA0DiC_$exHU0f4uRni0Jwv=VZBM~HJtT7C^TrZiviY=lvUN< zj#c6{vaqObMixO6vT=C@Bo?})ub23u#LVj2VW^*f6g~QnUzr%6{QI5Pf{eixgHM1N zP>UOnFyew=_l4Z}&^5}07MncZ$#QCQS2?E_&Dr1)Q#kg37mqJXugCK!8bo+B2z~s$ zLWOBI&XF{RSTG=3>GUL=EheM6EWlvYPw<8DseBv7jXvWQl@SFt*o_|B%an{lhC*z_ zZk^niws2o!Pj37;K$hp_*6u;q-zY=@Nio(QFbbpI9D=34&_O{?X^R$O`b2-VS86rJ z3w&~WJU$OTi~uZ@dHMMSI;4B@tNTCQuy*MsC1O)NteD~$Pjr_CXw32kL4dJJT~Xi~ ztIvX~R}+}<@(F8~7ZM`=0~UZZNbh(#99*W|b6~*!UgBKAB`>efHx_oZcf+fa1Tq+> z?;df>DSSVl83;NNVr|dbUjZ$N%T;!3DmKY=?Y4!<)#!p+{()c zG+(us$KpG|-1gQPceCCDU!hF+B2*g`FrP5{kOH2I%AqpiJQCpuU?i;AL;K`LR;Nkl z^mIIEM~KCoh4mm}0aYXjy*+WSf@+ZaXDF&? zgKXvROcDe%#e!(T{h~*_s}~>f_f(X@VI)M}Fv0oofr$gE6BMq#C4;DjIJ!(A0D`d* z>l;tLz#kB)B!`KX1%6zTXx)hpi+l|>9(}b{CU1y-B}bLksDQ0pP+7YEne)Wye=N>u z66aOkYhA5|3t7n4tL>2_BSr-O-EWOQWMoQY5L&i=A@e5**W+YUHu7D3W<#c*7 zYl+4Lgng}-ybgdGf~G9X3+enHguor9xdoq2gSnZ?z$zZWM9mozt0Be|t12iKWIW|f z=-kFAh>89P6@=pYP8xhu3B0#bMmfa&)e#lgbUPd$i(M7z9OD6-(n)v)!woN|d%QTi zWVf2i90#O$NCLTNpuUtvK|9grr+r?;EY96*2dFG%`YpYKcu~yM7>DgToN*njBd9B- zgv3z_ilT#!g$^JDL?mTS;OC}bHIix3EWL!c4!1{g545IH*yOy&EHe z%*uI{p)E~$s3FG?lX?_`0=>l>RD-0%O+2yFi9ckScqzh;|Ae3j?Aa~$8|LFcs#w@< z%xeZGCJ4pL5~6?Da?%VR`(YCzF*ko~HkGo1isg7bS$hnp)43{C$_fAW$gLq|Ux-r4 zY_iA-9r7k2r4f zUz7Z+^6czCVttpmslomb_d%=T8c4Qs(9Zorx=E)U$nUF+KxA@7s3vHSK8bao*k53) z6Xp+DBIPE0$2t;9O8_s;PDP)z+L!#h&a-+weIQ<|NK6ZI3;EW%i%RzKmqkpR#%23d z#qdLtyK2BS#HB=QCC`t1%ui3ap!3x%B{fEE+9&){=subJ;vGZk0IRU-3Wq|-pej3v zErJ10ks<=Ysz}#AL9{oTXW{>hZ=4JRiy5{YbipyBTr*>IHWZi^8E2AJM=;0?WGdV~ zID7&+)_ew;Ad74>RBeh{)~DJj7W<`^mR3^W>=7>2ZjW@^fp#OFwx=A`4+UQh7 zFpIYW8M3W#PK}e&fxXb3Kv=i=;HZNzbtP0Lj&fcl{@|d{gD9WkX^Z()_|Ur`ku(TY zVPH<{Cd*Wy@!&HT8yVtqE_=F;rvvhWy0rHTYKR?T@eoJ9esLpt<~Mt7#Him+Lr-*M zkLQF!P^uq<;GPGWM1d$H@uF10;4y@~cRQq@@lKA7EaF2EMs#_-q!=!Sw`fdE8w6Qo zYEX31q4T~HwPc0`&V2Gt7-tt*oH5kVV=)@eKGI=7jE=;MWi?U$mv2`E4Y@v$e8E@E zf_aKaEsfa#$xtNEoh9WYwrM;fdVx+dBA|qRv4=)W?yV4Z4CiYUm+}H zUPwHtBb;kh%S=GWjDW$T!x;;v0SFComOu;;O)gwKKt3QQq*{AxpFC&|kR7tzoo&ZzIjOSOq z-~pOy>@EhGyI@==+{T3S8ks^YaPM6wn!K>LPW^!mEnWx*Xjy@iA4JkW2?oI^@Xl(# zgqIlgz#&`$K+O;p0`qmHK#=Ti z2AD28l$Q9g!XxJ`oNr+G3O*E!qyQxWY~hQA|jntjKc8i$Y*!6c9>u zf0mLmEN4s@!%Sf@-x?uQo`?-7(2HzlI$}j}Ui2NkS35XA*!I2`#xf=3dW~TK;`&>-GM?@^l?1xXz+BOTVeJvg>AuyBVA#e95#Z zOSeu(3yFP6o^ZOB-G_x32+Fm#>rOh@v=p8jJo)AFC%()>7Pfa+W40Q!PGU>g?5YHs z{F!{PU_!@zh`b>voPV-SW-5E&WGM^V#3Gwv2-hszNnj#n#Q%Fx!Lc_$UJ*9sXbo4wF;@>^-e2jyB_fb-#Ow zQ@vogM<|J3JX{ShoaG$!FV^&7mq6HWg2ubSbyY`rprYU4abc{_V zSXqi6rWhHvXQp3>!n#W-5AcOCG(lt=1sGR8OMdvE1>Nv&N{ax68K){8abTK*x-u+n zbyV*iP#_{oN}u8|hH{g9Zw~wARrMjO3ED$}>dqzRbsmhlH(_saAVr@i6cnA;^^>#& z)tHM|TWKvPW5^822c4U`?_J_}rq(%T{BiZIJtel)mNWDQ^8^hQPmmKP*98l%60dY^ zF5?M!(`15L8^*RSGY5+71!*Q_y6lOiaC2C@pXjvQiDZjO-WVCJ(i6%UYya`Z$NimD zYFV|-*=i4iebptHhtrm;Gj*#o29G~s{xPY|_>`a}+R*DV70;cUbT2i9ad3jODNS>% zidQ0jitZ($S`c&TE@YlXb|#w|9!yqnV555i4n%{^SsXtZqQL^l6xQM?Ulch|;iwUZ z{LrR=_Q$3>R^h`D(5 zB}H2f5Doo{8!5Vw1LOm4O=W2rn7HxTKt~D%p(R-z>0}XZDlwueLehqUy3!4cUE~>A zEIWe<(Y}a;bDid#;;HG}N1FnVxPq}&=f3HS3m7oYe(WnE5|};Ga|P^N`s*tPCK*C~ zpqH;M5_De?6T4H_!BzZW4aYSZOT;PLLv{wNuIZXzuG-$aq#kB&kHae;tfB4eTdq9S zjK%xx@Ni0>1%m&Drsrx8g_-wD*L(X^)E!8a$nH6n5+guFrEC06V3*DQ(n2SeX z!t0awfkkX_g<;W743OXx$5h4`*JarRf)s}fA0q|MV38XGCN`5XJFQ6&WY>YIaAlBN zmWzwS5iVBWVr+0+3g>Y;?9>GuP7qnzT%L=N4hfd;GyT4Q1jR?2HtslWN3Eyxk(*`V z!^xjHzY%@wW_NV`#mPPY7oSgY|8)mc-0DaNoyPgYCsf@3JC3Nhz-DyNg&n#1`;1CD z?JnIJuK(L-R9xtyyO@iY5dURdx_+j^pDq`fWD9mQMZ{Flx|V;MNc%dcTYh;!MOggg z`>br1U>T|x6waeZVL;!@k8@KK6>v0c(#D3o$egV#QD%Fxtz$lM;^sOmYq`$Ewk+-I zicmcxV-ylbHd@D8PeI{!nT*|&?c=W#g(lA1z_3&m#ccKV=EI1WExn~_XUj0&u+h^r z|4if2Lb8;MhSP6o-`PBKXZ@MBrC&^u?#(opDZTy#)kV3{hBr_kd?} zAi44FmiKv$;wS%1%iK7yP(Ms?XODR{Fss&gcUZ>4Dw5gSRY6;aR0mfTNuEXwt8ZLc zJz1*w8JINiYjqaxFULwi=3j*mf#yv}b$|*GU5am)S^)+aPR0v8gM|Tq&7_uIG5J@I zr99CaDWB@4igstBqaF)Zq$+~3)ho^_^oFyYdLbj^i6hiQMrSI_MhuU?)pZtQ_C#5j zxylXGabRZT(L+n`IynM{Bd>5YI_BGL(^aQSz1g?*9XBrzACltw*-;0kE&YRW0 z4Vyjse1|I606CF)yHeJG{BixN0dZpTW@V|t*dq#9UK}dWXNjYF_uIn87)qBoo3P=n zvm4*Vwl)d-+pxlU5rotIZCD+i?v+AyvfSHc_!z(aZCKe1D@AFST6sBX{@YPm2o!Q%AD_&>l;HD%%B5qHM}z$xFWK@?scA(+WiRS$R06NM z`2}9H@?@}lRGza(dLKn@Cf;WS%h_%C8ac@*64m;Aqdel>P}&I#+3c4|xL%>kDYdq? z{6$m`)~rcbxy?ztn|ngO*29-=Si7ehVrswYP=mmJ5vF)UMm+2fup>LxEXJ?^*9kj} zFUK|DaBK3n7axD)b$@pnDyJuOsE0HxN5*(w;o^4+ZsNFs zd^({hypg8-y%C4e{4(ftIqAcbP6m0NaMKwdd$E7PjEGYg#)%dC@WHUwIUmJ&$^$R4 zg|bHuWg|GK@f*?kcS^%<0TRol{T77xV;?%RcHaP5PP7zw$UA4XD&HN#UfRKLXhN*p z_TdW;#y;}QIDP|Uwe;JEtsE5l(1p$X2KaLQxDQ^=mHW{7Jp2aWd=0t}T5Lh=@e8e0 z-vCyuV)x++H^M%~{8*S>BrPUHb279`L4%ZU2 z+Zdlt#o3)hIx@=DMxi@1vC3xgY2Tq1nGfjXHzC{Z-!NQ#Z0h{(<~?@*_B5Sdwwm+b z-AziQ#zn%RGJ&EfCDdpWXN^Fo1L_c+!>Ao-4m!^rY0jyYze<16jFoFqaxF}i%hI&S z4`2~-Xb&G}qWV(`BC~d$(GeaO_<-XVgQl68wnscLOnf%o9ZfJ^NnVEsjN6OFB4{AhDR-w-Vt zo@^QOa)}euDaK4pQYUne0pm~>PvttH_yzWxzEEH{V-U{6By%hve93-$@cjv4CgRs+ z5WgqD0cjnqnc{@$j45L|4i~4)6em#VxZ~ZI7-CRMbS&A0Yy%72Bhl`%icgde@f6pa zP}IS=JD$$BqzE8Ze6Req(Kw0Do4c*FCRoNq)YVM+Lt-gM=|J7TQXIvQDUa)YcZ=bR zbk&30JcsSeIpaTJWI`vt!Mu}>pOXS2Gmv^uOc$2;bvNxUOG3s7d@`NRcrsIEAj%p1 z6yehC=Bn3+(^l5`;TRltjt~~YpsmWDp2U&&6jF0oAY9Tb>vm%5QZ8QiAq?nvff)Di zvg=^k@im6xL?}S#L}F_@mFTu5N7R!hign_a`VNr%I-=mO!{*;1uyg|P&6bRnj20wgYwmUMQK)?J`?g2vi zyud9#o%1mGj<_pH{(WS3$vr+2z28y7T6;08E{%uXZ2g~TL)}&I1S`BRGSAPOAo5_- zqoCrHEN}i6NKdTfD}WFx&u%k(8!%b=D8Lw9P4gC5d=JD%dW}}lYm2G*ChB8aqM{t5 zuGs;hAp_;*z+AkF2Z~T2;NpuZRcZ?IL zZv(}O9)Kb5CwmhVb%oynK)N!Kijed)jkQFXX!}2*_Wmc@IPv>D?M~O{d%C{vbOKMo zj{m81?elj0-P_w%==O;b|45 znlK#FbTkmj9$2e#ErhG<`F#9EHvdH{jIPq*a$bYQbq$0;v=FT_|XFv=Z2LUE5SUn$o2b81TY;3{zTK5#REs1XA+@LXU__ZGmfnueW4p z>`NqmRiXs}{KD!pei5r1H5o9nN=b%Cfa~}_1Yf9WagZ~S&PBrM;%9i0BveZkGg{yR z5Jz9-6`y?WU@u8${UJ~oYk49>ZPMw%qLOw>F`y;JkcvgVr68;|GFL&I%<2pyF4}vW z^`WnqFR_`!>@nxk?$4MYZ))H*JH%lz;Gz_|_%O|`)>x2w0I}JmN_{RevxgttWxvHm ze8(5JzUyx&;dYfw8Vt(a|n=_B8qydaQI5gb^Y1YBP{`a(xa>Z?Lu;7B3+ znvdgla6RW`2pw9dc>$XiaSslvg6jG*?3R~GIZ9azCb4qxdU?U9qo9(8gG(t!e5;7I zG$QmY%kWE4U+Z{jSgl%)HH;T1Yi}7oAU0on9A-FpZT7kCo7|;15t*Pr+GgmZ!X{+_ z?p?Nk-fu(qr2K&fxLd^mUE@}9m_`iRcQhcpEXN_+Rebfjd;kx53UF z?i>zgPq%y<(3`zGyah{l)Yw3ZyGGtD6>VY7Tpe)sI9t$k+PC|m0Pp*L_TcIo@p~X! zt{^8!ha&wBpmxuY6Rv$qIG`=Bl)}`#MGOqBEsrnc^;Hxz?#1F$uBc#13A+?Nh3R57 z?|%5uf}2-eoZv5BtUp_6T?@7auujZQl8AxUw$j z^ZR>tkp8_}Bf*Cc%;ps98*!q^3d6G2g|cDYT(!#We-oyx<<0?(T}X^Hc%hs&`<<2+ z962H!rDPWl7Qv}iv(;>m4i(yOuuJndI7{re>TNjy*$P=0feDg)LHEF~K4Yh5HI!Mu z`FfPQdGt2qOL%( za5A{goj?GIYr}p3h;uOC0_F%l4p4z(px9uM(|{b7_Abd`XH_98&i?2w2Sz;M$Rx)D zfH7YMCys=~JQnsxlBs3ZKl@wST^C*rl696nigcL06kw=gge(S7eh%P_%z`qhFiR3h zej#Msz&qj%0S4oV#Z zg$x61Fl3uNcb*tpHk5D>%n<|&qH#j7lo8ZFBu8d0GfrLplFJ%-98d?I2mX|M91cj- zUO_Zt#|LuH*^F>GLe*EBcGAHPUS*Vd6~-ZYzgofB=v%secqBCDJSb93o&}kSHF*|H zdhjh46$v~<$>U6_+z#Kzq=7?3b1>;1XhA1uu_L5m5^#(YrEazJAkzJayGmKcZMt<; z5DyB2Kp~rp$WqA%__Hj3;r6l=6k6KvV}}z@e+=W|$H@ir(YYUrg^K{)Ee2peWeEKd3(tR)3t` z8Q>~^omhwD|Z|)x)xST23#$vzH6PZ9s+Z@m{7Z`^!D+oyKMLQ2JC<*jXXWU z3z4yrc3P3QSc4;PrIF+3>@S8dtWY`7OAFNTuBp8^siX;e94F~g*KC{GswCrL9#5=q ztXo^^5)_+oi1nO^Yy0DS&1mnAHlzR_fK97^#s-cM2(}?bOvUFh@`=)hfh@(WYiqZW zZ^NM-DGk<|c`Vjp794H)fp+wibFmC3x60uLA`(8#b^QUQ4rLhAS4{d+qYxNs z5e$7~II1`(WyrLzVr;-UBUZ)GA z2Ns~OQG*b);5jfS^pu%$c*sC@$$NWrRIU}NZ;;`bv-RQ5;fUCh1dhyAifL||00-R*-km7C}QXx_-gqurM+3;I7hTG5|#3598V`CyhK5*kOy2TfM6() zAB|E4Qj@ZE?AoHgoM{hWZ`ql=s#ti^s>omq_5*YRnIs+#T3g7t&)t+0*9s{)Y-5W? zS+Gfm=NBd3B+il(j1nijrvVbE>E0<;gi9YuAWbT`jUEx*AcbUL5Z&$&q>zTUHF=l> zPCh$=kWH@Hm}8Xn@fNy;Mu~yg<6yFwkJ6jQp8yiMT^JX}=|@YeqTsH_BSHW=O1t(j zDt2Ky21dyeMuUd*0PjfyUlSVVsM%KnydYy1{(=ReU=SCiZKxH{3StE+Fj10fn-^x( zwHlym-@$ipVgk<*CU`4Xdj6*n5?p!M&c>W0g$|UYOO@$_kNMI?nr{}g^hh#Ddmg%? zJ=}Mx*qP1~6C^V;lwQ~3jD%?dH7*`7ow2%h#etvKh1HfCNtgP07H`qJbn7$t|Av?28Z_CH*QbhgV*=LbM5wdytnQ| zrX=8$aMJ=T4|mhuQq9&bgPxGPtu;!>2qRE$Seh`%14xLUM#H$$vDEKkvuNF&cil~# zDH&6|Bh=EC&dXCiIN+q?da}Unv*@GV906m7!6`kZH1L;8%zT$_00*w@6%v}dTU}^C zpp7)IEUV&Jbf2Hp!o1tY26+;rR5tw1}_ya|SGnz!w1k3ZDHec~7mueW<0c=C6jJlCFJ zGt~A61O86n*5kiz25$%nmn&gTTTQb#=uL$1gk4aVj*shtJ`n@=GPWYNxrSK>f&lE=M__`je?%r zm#$^|nL>CS>#;IvW8EpXd?8QL$VM`S#X6C%$6Tn4wo~@Xan+S|uV)N0VNW7jd`=XT zEq^R;M8f%UI2=euV(T!yzYkAA>wK)~imjTBVf%U*@SNX2y}WD&fsENapC#|EjORsq zTru*+&~4(O5EysHyUnh%+bom!=hxXm{Tf$=jKhuQ%WSjt6t~xlHu6@6@1`ZseJ10n z49i#Gmtv+IDYtLDvDGGeNN(- z%CeQM1md&m;JV$r&*fgWsYv$0)%F%kMxcD1xLJ3z>1sMs-v&E@)yB8E?Twm?RM~f( z-%S?&PTE`-g2td+%~ZS1>&<**jH8)e<31EmJdcLeMs!|t^>(GJbaWnRMa)>S*Nq25 z+1t<{KD{}gZ_BgL)hHNy2=_AJ%2jX9vOxo7;D@WQ1I#2 zh?K&yaQ^Np6Y=oEy?iwiDfGI&db5!C)wWYJpZ0rk{@@=H=%j$d0Hr@ zTW0h=x7!ZA{Zc2Jh_*84>+9IiRri)#xAXbSyfo?OZ$^RXdHrQDsNdXNNAi`INh12< z3GCYWbUU6Xo57ypzs)|G*>YuDC`2ZiLZ?&BS7J}0N+!2WxQ17^*_-V)SogGi&o8^D zm&7EL?x&KC)VyatMaMVW@k6*}RF?U5XZ94Fr4yr3H*&q3Z8n?w>gIl%>Mr75-~IZf zf9L9t1J9dyePebalR>>aKd)}bwQ{o)yMK-bQ)aBcR(vLCHYO&xEew=KHu-D##o>}4)#0;Rbwe; zfcF^38PQFqR`6|JT=j8$QTCaW)*zx3N;2x{m50fVu?rWt>YJ9LP<@)_)81v&JD1R@ z>$`qCn~Bw-@(gb#)`KbxudDQINUBkLHjHF4#qj!0YPC&ADK8gOeU|p>rHhdwDwi^t zF-W^d`P-?tu8;p_AC_;xxj zSE8Hy#d)$)Y(+!atNvZ=+GWfi(l3F|(`Is>@Z2QVwQMUie~RDubG1M{RZorjF|Q~7 z&^`Ar&)b2)qCD;26rWr7#b%@XeBaGf`-$7`G(CTr?q;sV^|qSIcWcGj=sB`I_uNgo zSA*WUH#}Ll%=s|BDoqzJ*?Mu+T{fP&>3n3`c&d%e=Vi(44q~On%Uv%MO%06J{V?k) z-V}RJ`Ax9&6b+=?i~e?5SycW0{xmu^rcaZSX-v|o#C;)|-gTm(T4VPxc}^kEcsqEP zm=sovZRTYfxQ}_#!D!l5dRncs{TE-N_8f;|-qs7bWG!{o8?9#rGcarJp3mprr|xsK zIqSW2c8yvnw0*9IOSN7&vMtZAAFfN!k#(jYo?b^?+ulQT9Jq~!*G4$p%ta=#Xk=XC zQ|?{E(`vew+@{AU6bnDGR*M-U5erv)5RyQzQ)_J2-F0G`@S9`Lc;J8XN5+Zt zFr0Nc6|dC0<9fW*-)yF4pjo)dMebKdKK&d>EK;7U>bliy=lz3SEH%Hq9;|O$W203n zFJ`V#<2HU*Y(-YNaV(rj#h1^c8+R+0$GaUoJjYx4r`l7nT8P1$RLM18iqqw}e-Mg=dy!GQ z&<-z$xnUsPEO;uTNj%c3Jj6S}RpG7|>|giKS6A6!B9*vtg%anT^;0yHt#3NvrMj_~8Ih6k(#2(0 ziBh`vy57YFf`bK_p;23iT-EZU{M;MA9hmjDQOz6vo547d57z3vb-_qHK?qyVEw9TcCvxWl z-|~JOZ_E={!t5oPsWt9B@xje5U(H-+hYz*+t&vJagT7kI z*WR{PiPdORZoAs)b+1&st@~&9$?L>6UfCGU>)OpQ)sL5_qiVHMf4I*iCsTiRFvLV0 ze(;BajY|7GUW|;R(euja=KQ&^J)ah4PivR4N}sQL(|Nhu@CE0c#PU3uoh`Q0wP(|) z)FwP!t^JFXZ})uVZ@#3j^UdZUvni#5wb{_+2?ht*P&M9Y z1ad($GwMW^-Md1nRK0C4f`M!*x2diM<3X?zM8|1nEbZIwatd)7g<^HxTot1a?W^?d zczd-%b`)Q!>)Xa3`m>RzGi=oSop2?6TU|bF%1>EeYWJ`#O=`D+S~#@uo)2DH^Km#; z+XSCnL*MmHbmxDr_A}jBBJ#3qN4?2yaur#>q@Qc0bm3;vS$Dc-^LG8>8KpzTj&Cw( zhf44!g{yFg?%!hYZvCX>O zt!EGRZvK~J|=E%mP!mH6t}J748z*QF5_8M$Ek78En`ug@XI1e-^T<>dtTQa;SPOaOG;$@|%1td@dAvIqUEEJKLbynsCi8te#joo_&JX!jp?eX037dr9BD5 z@sJ88?^0%C5a`_}HZxbNYI@q+$f8+|57L9tCRGX#i2yL6SLNFQaZ8Nca z;9mM$O2#%b%x_%TU3r}?#ks?!1g(#U*%($Dr4+P&!UH>GZSYmby|G@#ZQYN>!| z7v=pfP{Ceyx8WM;{j5yWiT(?K+=j`;7K!%mnO|UD_NJc;_ld>od6*2hEAesu`QGzVcv&y+ zOZA&&@2+V!ZaRT{CbG*f`qOoGS-KB-yQ{lqJ=@5oU5T0Z*4RyRcixr%4*uCxB;Q@s z6SHB>7l44K!&gQ$mfg;0+-VMSp-oC%vskHs0wg0Bp92e)VexaB! zE2~<@jJ!Ow2iJ|>Zg`dU1&ZysZ%`gJuG-Nl)_udq_9`*C*=!P3EO)x2#kLXgH72Wa z;5iiVjw_{FX;*bk(&>l${6jE(UC1w%h2*YR-d5`K&|+N3#8$<6#9wPYh0cS~c%|1b zg=gorWpb7nCjzii@1_l$L!MS%y0_tBzdUeNBJJ=f+AO_$-A%@JuD3?1V0dHFG&~m5JEk-VflWV^F%zM;86m?R?yxJZxR1tH5UbArsdmaxYy6s&k+LYGd-c(c5oHy zmkVYxnYkIBSLU0O>J(93hnGz;_CvM`CgRD!M5)$Q=c*K2Gy z_a#@#yN;!+xA1FS`x4K)ZuRA<@ci7H%wB@QUb_&4B~e@T@7K@WNVJuDxUVd4&Rg|- zI+|Rb54-c)IC_`3J#XK3i=nP-l8tBLb$|aRn)L5dvsg6v)b6FC*@ds$YI%Cec%}95 za%Es`f8Fe?%*H5Fx$W)Bg+|4A)!P$kVow4I>ALRdw$+`NX!>A|@Z(F0Z><+%ogHQb z^IUp-jBqa;UL7(Q;C6Pb5mJScQG_#*=@b|ICaFBUKF}RY7}92@kXajiK>@e&EY_{2 z%(lsAhYVaM$uL`NfECOr*2*4O=P>ijy}aKXKp~~de6Hc{BlwqUu@YI}W%Bd{va$L) z6QAN)5}qJ>mfU4aBYL*34(+abSFv2)7{hR$Pbu&@mEoqp!z@q@Z5t)c^8@b=wXPbE z!LJ?V-Gj<(Q158Hz`BP;MzD@0QH9S(J?63}Z_k^(K^eof+TPE{F>mcU+Srcgm7q5| z83ek6N-v#Q2fVA?{dU}JWY7Dxt`Cc|%F?&(t#;%4LH*_0GssSh*Sq07+3<(+#YMzb zo~)9cP^LY+?Ow0y18=i8nY7P)h5Y?fVV9W=hDE%lt zTwK-0vGe6~J${ugbt2wT)Eghw$B75;toqO!g*PErt(8o4Uvly5)k`^i9qjgF!KbTD z4cGndFlRNkop#7y9{G3MMtHF*`OR%HTYA{sj>ge=I}#ktUfT8Rn_OqrAI|13(_a{7 zZoJb(>~7sndVMcf+wRcxJoleF*->^qNeoBA8w4pdGB6RD(*)Qxzq+Nomqr{EoC z<`2`Ps}gG_y1Qp@#PF|$tJ*)oF3if2u_1{`gBQa_e1rg#<*TK?+S?3A zyW(OU_uR~b-deAdgu8ovwQ02bnMlypZ}s9=we#~vAu){IhNH`eelfcn8Q$h-)9nwg zrqQ{_m`(gs4`#gGrWy3X^y_ufUH?qixJW=i}cep5Wne%;Nr)SKE$+(Q$^ zQJKtw;UFOvH?w{`q@#VhSOLml{|1ILY5G|b z1yHH=_o)82+W5D^DCi%pGWk^)+277kJUjhT6m2MqKef$>=~>lRl`tLorIbwdy}Nae zRrnn&ad)ZcE-{oD`Di%~$DTvq+CnkyzY69zF0N)n(fTToM;QG8dD$27n=u45`;9dI zP%z(Z-@9{L&z}YJT|_?~L%uyY$G?!94(7a$JahS8FtH!6^2lkIU{*fM_epr+9~Xms zE7w0>jpH7f+=fOyg|0SQf2pQF{8}u(z@X|r18;tlqdD@wuBNB!RxFK%&Kcok-*da3 zMu~b2JWb%p=5{95k&FfV>~~zPUBmNravpTG!Fcg`Hr9+9tm&Wm0Zoc?^eCqte zQ+uHLnvYTmEnbAr?f`SVy`rtw?XhLJneO>6`txCT4?D(S$RUWj>?m)tf;>JPef67) zoY?r>B;h4VV%-dwUJ~}$j@<>^YL*alHN0?o` z$n7(Bj@P8_UL2o6YvNU2#5p>eFsFITRrgbb@x_7=uS;tsR;u2K?Wo5B^;mTQyKI-s zl$tY~@r}5Tye^Pm;DpN)v@pn>uw44(8pG@7Vel zhC;&r2QPp3k9|x8S$V;f=}Nx1(4pq@VaM4gmu+Y66K^-5A^obD^t)I1s<20m`Jf`_ zJp3TmQ+d9ymCdnb%lz?$p;dkq32D7Fk^atif6(1E)cc>uu^;ae)+~hvc>AxRDSh9T z$k%=O;|I_^TILsU`NrK~*vUWd1kD!zbiV>$j>sRZ(&at){7MMDH3Xln^NEXhvQy7v zQ10@L$98IJhPQ+WtbLwVnfEd!c@1l%r1&7Eo`dPVq(IiK!KfA^y8`bU*smSqb@3rW z<*SiN4Un4s&1Mp{C_S1U_tr~Sz47qc*w6ipTJs(u=b3XXb1Zwz+iB9(y8CxU-3|vq z#fng$1u-M$zJZtf<`x4N>3L%c!YwV>~hpC00U-kSYmFXHObHScK1ZYji@!U zagtW)WeKauO1hFZjPXKmhvSazPtUt%GyABySBA{APdwZM{Y8I)4LOzR5!y|w?l~l z#mfTl{H&E4hG_Li8~^=5-PSO8Y|dlmm;2kbH7l5pp9c@XE%-lh%QxBp(O?G9KlLsr zVPyeuNuKaFzvET_bWA4B+5oixobnBB0T2j4p*rN)8%)FSYkBh#?h^?J=VylF_5no! zR>KhTKTy>7Kg^pF{3;a6KVSbC4UiNLXE@?u%n7@IIKsaVPg(fRZeZE_WAk6m4hVCK z+_BQR%@6|AeUP_%OFO&Cks9>9;6TIq+zyal%$B6EQ;l^i2w`)ouuSZQ$R1*ARy=vo z?x+?FE5aO}+k6XLv}|Qmtaz$=-R(}msoB@#f+gpA>7bUYZczBKb-3dgHvw5YDZNc) zw*EBpBZG3mLtxJHjBq6ufY{=o0=**d9seYFnMCYi`olC|DK{7OdX%v=@hAMbf05Xs zDUMhW@gAwFWh|9yz;6^^l>3;Zk&=8}>gxG$f^8+NLP!dG{eE~31JSz^UpqwxL=uFEA>NBZ?9p1M8ilAG*EQoW=Nt?X_HNiXkh zZr(Pj5fR$({j?k4{_Ow2BqM*Il0W|ZlEnxL&)jn64eK%AKiKb2yH-C~{^OGmDh68y zJdwc>Z8aCK{FM>5+UjiGJ2kX(Efd3s{W@UK9PciN_?I&{QsAwUm&V!gZ>dUD(bx23 zqEBJ+u=n`$P0SV^SWIA87J!{%kliwQYIchOy$sXL#r$=ec@Hzlw`s=4d2YsMEmuc= zA8c+G&p7$RrNiYuF7|kN5eLrO;8rAFW{oqlWs<%2?jOc8uCD4h-EsM%Apsf~%M!4a z%MOPl?d&=oo7r=w@twJ&to&uIvs_*D#DS%37EdGJ^6v3N!{cl^8lgOXuS@Ngc!W(Q#{e+L!2?asKR;UYiu+d_Vdc8^i z+cYC)?dLS}DS8CK@Ndqiznwxxk}(8vCtpD>U6A z-07=rd!I@O980mreo8apRJ#25gfAh_ho12-!1WuqM!tY+Vwi(qPImwg?-ikLz8m_JfsoJwN5= zi=r}{OiAN0N6%x|Nm8TLoX9)QJ%Sdnlb<%-zY5G?kDcqETz*3%5@I&)K-cvH3c0?a|eH9(g7bD}kTdm6Xa8H@Y3Ol^4&7B<{wy|}Dh;_*Lve~OK?p}uFQs{Hv zhf?r3-PRSgN4z?rWRjMWVP7w!32brSG~2d1==WiVq}a{x)gUhyvRTZP13M?MMc1?7 z3OD)5)np&I7pAVrdT*pgax{iab@DYn#!&ymsebiGCsOZa6mkU8JRIYBs!&-Xo|oR+ z-Opw^KBlHtefG6Gj|A%6i+Lx+x({SBn^Hk~8JEFj9=m%h1nTj`bp@ zO{NCX=6~lvzZW@JviDY(17`EvItLB--%8yvdY3w!`zm#R0&I?dD=^591>{@bn`!L) zMV+}ne%fVsR6_qT536L9Le#x2OU7i6&zsZPtK3Sh$zO5 zPE0XlCztkL6wBAXn(w<%Q+MIAvT~gPV7=R7m#$mFk{s)V&yP6|WD?zLCgs;h+cwK{ zuCrK%Sbm(^bQ|cK<#_blkTX{IwO?oYQ9T8`U zWQDgqXB)6*XMgoavle90^p4OU*+)%}bjn2@cSWxVg5$?$G9?>~#$Tx`bsZPR9`Tac z()Zd?qxXxpqbJUy_svP&#rUD4a6dGs3cdN`*i`10%Ok|C-04Ez_^lV3sQJJ6f6>M)tjmx@|kQ@GU2PdS&u96%AEYpZ07}1O{=Tt4c+-6HcC=#tXLm6_u@IeUWavic^RVTAFg|y z5jg5XpD`K%exx;;s?lhd`jWf{D>yQk-$P43q5t{=wCN8Z`fjpPA2GxiF&?A&pxpM* zVtl>;@TnjRiJ0RrPyXq-ztPtt#eZ<(-_Dm@V1S8iUX*`*Di*W&lJMaD!78>~an)K+ zj%E&B&O-@+%hBsY*-DTox|>az)0-#gZ8BHb?bv-S-l`{k0mug`w9Se)-0bVfpAPFL zEDQ|a5A^Fbz8({K_2s!Nnj^(~c|jnLD4Nn`vkgwTU^V?zqldLl#51WF6l#lG>X=x9 zbYDW%am+bo?#wm!O|xUB>4db3WL@=`zt%heh_{Vtm;KXs=wsT% zi}T<;=ye?wTc2wXG&=`$p4;asdJz?M519a$L4raZ?3+lZgNnR*LTDGA-Hzcl-uX^p zy+DMqw{HDIH$Xf71g{cZZ>|)v4|y{V)K^wv_gDYKX-BMXhFF1z0!xyzdL0pU0oq+h z?_0Aui)tB}GI0T^mJL$Cl%%%zmw+Vcc=;PMCg%_I0 z%#lCtl$g2sS5-S)6$3R$!9hBDgZtSO6R%ZBK}GhA@go~LaX-Dps9L7W**Jp%?s9!j zO{~0(-0R3tT_|Jp@5?rLz9PU`-NoeTNk$B`2eqZBi^Qhdw^XpX)befEujp<5S2*pr z=l1{nANvlD@yFSH`PLVR=o#v?$cT&zpYgOIdiLfJh6*SEkwG! z9QbglS@xPSr`@Mli%LNHMv9MA8vPz?8&ofG|B*h$bi@!|pmA@NPfTXSByhZX_IP-3 zDv;{YuMN&@x0Y86Kq0*LAdPz-mHUOu@)yyHhc}5hwxAL|9yf4o;uHd=o2WM2z zc@`VFG85>^xqUsIfn%guT?>=tIzPGsJv|O*a+hR^lsFS$AyY2m=cxXwIJkT|N3EiD6^s20po5`YNS74@E z-mL@PWKoIbZhXUJO|byLbj0332n@hlo7ygDSRaV>RbO-NyeeK^)}%*a)6IIKZEUyb zcB7X%&C?!x_SmCFk{ZaLo_v!ZS0c2=f?@7R_*myeU=*`cM|%%adb73^{dU34rxV1g zG(5LxQ~GG(+A8H(e9sPmXpHhDZxd6_uhjsb1ja|{A?J|Gg&0tsju&4bv3;yRQXc08-7n_GkARCms`l9lp>=m=t+*H^90MNca`8Ut~ zjbbVQhsbxZ?7Q<5SQ}`M#h88FjFre3(D|e7N|N)yxw?wxl&6f0!lw}!61~fHvx08B zTHDKEOxOggu6tOziVn@j&GJX>N(-9cM?n%MayXW|K~KUG)n}8OiSjYB^r}lHoYK!1 zYeie|7a}{G5?9si_6sRI@?g%S&`B2XaM~pZb?_U8DF->+JPrGy;n!}y(o|EH%JqAoY0HbL3*{jp@hwr>tpfB=W}TfyyYjl;t`^BX`>vKM#HpU zXDg=6{?aL_rarMLW>v+w3im|q9zX)f#U10?5a$;fZ?D?}T^`2Q&VELLjXR{XF(%-D zuCMJHcq-k=T?Vi+VV!!Gcy}D@hVCrG=nB8fkziw`+OF~mTYL~>yo$WLth=N?5n5Rs z38CZap(5xxV)n+58Gv4w!PjAq-*E~pDX%Y%m4|7gN|mP z&r1eXy9TMOu9$dGU24G9OP1d@dC~3CO0TyX!A8T2lJBOXxM%LBJ05iWM=`Zy>6j?3 zrKj$LxHhc!aENiUhqXkgrW2{^yV5l>EOonMsflBvVH0=~8J&`Ty9ZPxN%~HduMw4N3Y2Ct)K3D{o;fU?cC32x0-!GWEJ&%IYm`r6Ps0cT^Plu zvTJWIts8{~@wcGhsn$p$<3-|Ln?9F4td8OHliJqicKJ7O(Y+1P|74JT++?u#^p84; zzs=ly`xZ&GkFRsv6m|h_TNuhtCwAjGM?7Sb;CGEN&%)UEkK+X3Mdgk3=^8V9GPH#z zxK(YNwlHbjheP$vPk|z~UV{smMDCxOhYzLdhhXBZ@O@J&PL7yh{)h>^`zG~$NjwvM zjm!cbcHqm-Lr0%t4+o}4uRn=f^BX8yKYc%%3~`>?smJ?uTHAq%46K!0~VA;-fY89VN1)3;ns2XV5)SCSdptz zTaxGvHJ9)l6{;{dWTMzfTf<#|W@2kS=ORD>N+%s| zT|l^R8++;yT4^B=E!}ViG4EBUah=#=^y87PFXM|b1bQ2Ob^{{2w;;kN%pO@{pJ z!v<}MtQp2KqY1BNs}pb7-JI|AD?k3mhy8_P`sk6p`mY4xPF26ty^Do*cVBhv8T^vX zGHN#`HUO1S(1**6jiGOSp{+eA#@uDVFl$Jn9Vq?>zHRAXTq^RKIUW)m^_`({(=jl% zB`&YZ2@d@I^?5_Dv8Wbf5*ynSdo@$e1vC1-Hau=t6M(SrGxr!x$6R z^agBy^pME*XAk*S&}-s5_~Y_3X&+u#8%TTtoP%}p7Eb>cg#D+%?X+j^SL?aUIs*K< zy5(HXQx(hk9HsN6--ztyyk|}%O^#rF0?NdEMqt1>CfrHCTyQ6#7b0#75#ey-v0!sG zpI(do>|e)-!d#`jaDz?`rJnD`hvHtfn`ao=Rzs(J7u`z5GVVmVGzu#g+*L|@v|M>- zKyLU>3c=(s3%B{9Nc$i>5b}|0t0Zm4Y}^I8?$L4^37huSzR0|}V!Oi>+_k!xSk&#G z#^9*r2G~^aLj?F?E%o-;MEUNa4SvRlR)21?gOrnHLK}p0x;4zwpZ4^bf!qDQuNC^T zz4nr&i~AdH(SEI_(!OF#2?@Golha9)t)!|XSAa9Ojqc^9tPlpFQN@@eP(Mb!KIlAV2O*{%pHnR5b8 zR&askx*ROOc)!cf+vQLOfKtZgEc-HP=2?F*Sj&UA_?7pZZYJWvHXuD7k7+lX5wPf*i@S_q+Zp9Su0d{T?59` zmS*f{=i=o;`YaoSs<#7^A9B3K!4FI~b}p6so~x;TL#IcJozN{U^rd9uJ$Cb$hvX7b8FlKoj>Jg9ToV;`09aP!Rp6Afj=X)dO zQG*(vHOJ~L5Bs5< z*FPG{zVe6uO|XPyw(!)r@3dI`;|u>cFOYqj?cV3X`W9}z+wE0b^$)Y%`$5f4zCWf( zzo-7~z^5aSMA9g_PvYSue>?w$_ zxZhtHUiiOzfj>wMzUAf6;JE+CBL_(scUz5-i&R)~VBKBjDV5MjOrnRS@AfyGauvi z+Myj@ZHIh&>0ZPdP(Y9umsUI)wX+|MC^WMZ60FGuKkx%Mm_Z|aDXHX{A2&y^BkapFSa9bqoXxg9#^6(7mk!e3I= zcDEdU5tYw&Y@Nkxtk0whf`)x^J}Z~WCn!X{kb&QT=%tnq&c z7J;8=weR~bl^GBPTf#dCOaJ)GzhS2LMKI#VV;C0l11PXfN}&79K|=O!JQ7gtaO~^# zU|&b21_x*X?%De7+?OS*g+An8Kap#cKf;{=S7hdJLc!zp zhnx`}o5CB5CxkP|;!n-s$1RpfN`VAh3x;%eg`|g%7x?(8$0Hu&VF53+{%04-PVXzp z;GUH8AO3i`;33E6`+4~x_5A0rq&HnlG z<+({BW6go+;G;?YH6ZMdt;20Jo$*RxO{d<)^io~#a!?-X76CD5we`~J?DxW>-W_)J zZMJoy%S0MS+k>@<9nn zypUYpDK6MfMKGuNiR5SFY-Kv{`H8s2BW!6*jl2ynM}dPU_Xk_9Mbc`P;<<;oG4Z7U z$zfo3qhERMhU}kRD7V*LjXGyE>$U0uvizeQkT>Z(T&1RvrTY13MAcAu@S|Vu(VP)c zS#!dF}$OXv2o;aR7Iwz4rxBqnLWuEQC)R(qYsuqUy^hivwfd% zQF|mGj>qqEzj?Ybi`0B(T%=XIw1a=1BFfsVDFi#+M(v!53sQ&9Xtq}$kI$w_rGtPC7*A zpOX-#Wf5$BY6R z)Rb{)dv8OxizgKiL-Lj?u(N$}*H-vW?+*Da`NPukOf9e&K)AglwM$}AMPO#s>v*Y_ z1z~j+{%Zb#KT2muY-KRtTSUGX;SpMj^>LE4fC3<>kMrF32Ct3$WmSsB51T9=}tM z6>(+jXWQS8DPV~c5^e(93Jd|LfOX~qjgMU^JZ^WRbW*H`!;4(%-u&W_J|CVgGrp{^ z_Z+?HD3k4o`kET z2FP0!508=wK-ufM-r3zWs1Mc|;A|uVIvi@uq_GC&FGZpv8->5Pq#QbtGuD_CvDl__ z^oLo39~cP6xi&Dcrv@=QKE*S@0s2J`5*=@U;;v8=?9pEZnDUs{CXO{h`a9h)`YzJKHMu8)q z86k}^t z`BrRiTR#l5yLO!vLY9$TCxpI!ddVq49x;`xw<7DTVs}Tw1EhQ`yXb67$)YNCtDJTI zjL!sf?5$mAKO|cw)Gl?!8kGkD;vNx5&SMyt?aV!e4bQ{4Ij<3&onO>pW0ko1;1-`% zio4(x%rQ(o4kmm~OR(qX$^QH3&;Mu*eitnFx7I+sgYAd~$KE$+fn$^3vfzKccmMBN zgU_tBA6kQtcHjdE_@_0n8A9i+=>Ox^K>Odc2D}C#L@*q$O`{vOolzSq$*$&Ft6^-k z$2P}^84oMpHmW`sOcmoUtJqI6VMThLBYe@ayP~5&U7GIN$JPMZ`I?QzgI4Me9QGqc zY)gpVO=SAiirI#VlyKcj4ZqY7vwQS1$LXd0o^;Q*5>aip?U0z9Mr+8&-WXsXBTEjPj(Z|B-M;jM4j~!nv1)pLVX&hV=rbAKZr58KittW zqqMn0x;^08jy6%~@v1yU*}fK8JYK`2xC=F+xu16zrJ^m{wa$g(7tH2VLNM5#de#b; z?{^Mmx)-mmy>5R6HK|RjYFZ}tUN{TX3bADN^|o&|y)vw~^9Ii&8rn0(UW{0xy2KeE zs3kj|WLn!lQ-Tw^XZ1*L{OB=)k7$a~iS3jpgb_xa>RcQW>z&8(rD`|Lm=(%{Z3AQ^ z^GB!fG`~1^^kbX!MRn%GgdB(bRJI&(v0G))5D}ClSiTO`C6aFa`L^>pPz?0->fx=E zO_4FX=xv1#2!HixePDLC6O5}?WgjB)>g1b;SZO%*6qBT0kta`6_ltWXrUOHMZw+L& zetQl>Fe`t8+rI>(a_sIiIwNOgDFk@JgMaLI6zLnI5SVx$Fbv!-i30|1P5h3aK=>r| z93sS+@*r=3q%RN)Up|ll$lLmP!2gC*!0~(6F^IT=tjB-BCVm_~ejF^8Pm%^^fKO{B z{4^8fksY`O^V7F4etqr3b_rRKfd@YjSR5d!us2u&pvW`j0QUQa552=YBuM%2WbaQ9 zgZ`283XugLFg;|y0${|PKDr_k;{`81#7TIi5%%Q|%^EG{N1^I1T|>*{wkX zS-$o6iDZ|3I9E|AzACA`6Fbwofgn7^+Z|4A2BetQrw>wg7W}FyF&Od1oG#mL=;jPE z3eLivB;?zR=#MQPhXoXX>2k{TQ@S}R#EgR5g>1ELrF1Gmt%z}cGRk4XyUNt>c;|ZN z^2G+nqUrUyb7^%iKS_zKZ}3~*#q>R1@bqziN@(7v z7m$u0E^!s#Sq|c;jX?vmQbkME;#HB6fQ9v@jMQTc>?AhLMCi$iz7#msgP>wKggJ+i zeBcJH*jUZ2g=hdxA%|7+pGXc7!a;dA;^XyZ>nixd_PEMEqY1?#6P45y9jKBJchMz> zWL7JK@U%ouZ^kahN^ik2Q#pmftJ0GL-XW8yNYk0cRO-}U<2@@J`#1>1eSZsVD4-hQ_E-Z9gOQQqzYk`cy#$M8;hla%$8x^l-j~ zonv~TGOl2Nf$;yXJ4oF&y^5D=i(L{kp+Z&)uSV{KJvD?kI=A7cfaHMs*b2KW zTKuYk&_SPiKrbye?8Pe%N}>0!QNg3k-B8SYj1StdsfYkl;SQPpFpNNf??d(yvpbvu za#S#?2B|_ziuA>;7n{@OVm=0kirh$I;e`-JW4c=zbUF{$fm!g-X1j_xfXWphc$K;H z*A(HEu)3!+6pG7fOGw!ZNg^&u*X#2Ca_sMu*TYAGDCuqbFh< zbq%#9eJHJINFWMVtY2~_V`UCME0ivIf;C~JFGr66d&`nTrrzeDQL}X6|MM99lVkpm zkaHw(-QzS>HV(#?*~5>No(r2vtmyS}{iZP?7zRL$aZxKS!Z zcU5My%){Dl*6bc#G}B!+_dPprE{@QsTU+#f`rheeOL?B>*ZfIAhCRJGH%jnwnlZ@t zug+Ed_S8ot*UzQALRPyVjs4K_7ohR!4E__bWP^h1tIVgKjOx<+k0UTyxspo z6!ejzsWASf^wMQw^m<5zO%ZGnRJa``f5V&rZ`*mBHY6LA0l`oy(u;L)*+?~QRugbu zc?c%@N~G&X88*2uYJ}yZPi41xpmvSZ;u71SM8A*w)-K(RH>!z^!I*gO{HLHptwP;B zF-6+gq-WECkrNaqtpK`;rdC~$kY$3nPZs8Ab-K2`Cl}9F49Ipvdy{6eFWT%JZ&K3`N+L?C2s6* zZAZ1qPCC9Q7*unYC4F(ktek|EM#OgtzI94_l$<=%KN8Y zXN*ypdsOD9Xt!AY8iIoLxr(p*<8YEK)H}Yc6Wv1DNheC@No9j>c|k^!m`lqv0Jno` zz8a@GkgR$ISiW5A>9~6>V~n2`soz18Bd-c%!hxa8pcIhUO#BfNoc35%RVkCg0;K{u zXNP{j9C0?k210KFfyHu3AVr4K64N7$d9NE9Fl1)v9WW~ug00DHg^sq?*U$=I86`ls zK~k8XTwaJUuIic0pLffOSl`=HdRp%K79ZgkTV-W*55b<&J3-Gp8W8wk+Ch%z)I!Db zapuT&iN}ey!C*?*Ckd&+Ytrin?ccC3--?>f!HknA!rnNF9m!1xBszc!%77IBb{lNG{-TK^g7tW3I&Lp z2Bp>%!`3g2`<|{Hdq)T*^_kou+!Aiw&qW0Af0h(7t3%N0y!~U^1)D)Q@Ltlu3yT#v z?-%C2)_OtM#{2o-HXD2><6*G@yx8~624D6z$ew``2J#xPsAC`99^_nqJOth~lA1_^=pL*h=G_ zt$L6SY6En@PSaknLzd~sV1*DoF#V4Fsci!y0Ju(*m67l$lYc>68o2aq;uz6q8$iJ6 zF4<2S++A3-VA%Dn$bq$-Y2qj#tGLN8kH#5);R+hUkh zZJk2H&Q6m9~vK*Q`6`HMmD|QYs zT#W81mqqH5e2hPK=R4dP8D$pZ{Q=H%E6@s5la#CO-i)bVkk@5vqp4MYwTyX4128nt z!u(zB!s#!QgRs7gWmujOgkLJH2$`y%@=Nf8e5@|}9ufGHk6R0kw!|P}+Enh^{ zL+LI!&<`=>mVHQWq}hDydS;bmI;7v_vE z1?I;qcR;VBaS%}QFX?^|`*nsabCI}Gmtx&>4I8&iXQdx6@N3TL-=In{=1ZcjW%!VoA>RK?cmk7I!?vl)y@|*q21(*^j_&PjS>Th8(XQ zK|*GNaanF;^V**`kvKAk2m;d|+zp(O%L=gxGJskK+C0bU9@7u)n3H4F=yZ93I%}Fc zGd^&EX`VNfU>o+JY+u}bx9GeDFf=xKCH{*Yx&0p=c74O({;`gS_(O=u-?~-dBNF5J z{WSQ~h+h8Et-hU0-{tVotp|&fR!{KntBKtga7{Fu{rprsR!HM z=K{<3S@orNe`k$|#}8TAk5?ik%>hri@8N$hjr&ymgAuC*D`t*ZA_T+2!kll-cm8gH z|4lRc8FKfTEdN8W{KvYqw@zOF_yd^v=e{(ZOz}2r+X24LeXCWM$y8pa<`rZ#Ub%LhX%IbaAlT(+o`(%L3dhlrt^ zJX#J9m6DEtQiAIeax&B6s1Tcnj+fhFiG7eYLx6&nZKbVD*pI+B2rsC{0kY%?$W1PD z?yv`i0Oszp>2x0boA8kBQ+hl1IDIi9MrO?$;j3t3p`A^|#yQ zZ+8o*ga7;6W| z4#uZr`Dc8>d__6=ZVuUch`g=4GQJUZLK(K!uJR^NZYnTL*ztKBsvH96v(=uW#7H;I z1sronvwjf!waB7a4ly;B<@3WRIo@bZL~0ffuq*w=9Euxc2A!`q9Vly3p+`X}Eb&`c25BBdnOj-T6iQJ;%VnNq(>_x| z&$4_6;qlxE`Bq)4ue%%fvSn@0Js}Dv(C^DF8RF{UL4uh+Zzjn{V`K{He}`emsK4H_ zI{iyI|9f}OzlCoTT=u7M{!jJ1{mlpTA3c1bC5W@Nilhm<(0f&o&0T}#=m`|l6cTlv zEZ-~SJMZxmvH*|nPv7%>C7BHN)ZcXJUv2EWi~Y)=0LSSbn)DUwIPuw}n{OBDKaZ7c zi~Q}u=Ut!E7*e1ZZ}ka&_WC z*{)6Zp*=F8mX$=1oPmqkzzvejW*t7qEg%@-t9pcpVp$Hk#1g%wL)>QPlHAOYIRi_> zhmL|x)Q|iEVR!ca7C9KCSn^dM6HxZ)A-?VNiAZ3Tp}FwW#DX0e$+{sF`7N5b0^kn& z>r~=f$dO9fX60o(iqsu&bp<5q^hRaO#KcJrL^eQlR=3)Ee5RwM$5&%HoScSUM5>~8f8?(J;-qG#Lv2-!cVci6@pS&~%7K$LQm_N-p+@Ufe2s3NqC*aJ1k zw*aWT73JJ7m@Vp4unc0vuEk`b64`jx zwSJ{Qg6Z}|$=Rx<88AY8L5e03xrl38;P!+&HbbyhVz1? zU~x+KB%k%q+Y5EDjM#+Z&9KW}w0@5J z`&);8Ox`3K{@oU9N_#x?#$B+y zl2uMeOv66o(0d<-8EQF_*9ys(eE{ba}X09)7L4h|yNN9J#iuF-)j z#PeUcfY0rODEki9Qwn+-;Z9KiTxw6Rde|8a$q((eOD7<`Q%Dug4rC2Ug_Ei-L#58U z@!+=lB_y{-LeVIGY!0v=*W5zefgU+m1YV0F#(Gm<{O8?`?x!r8k~m;(tjjJ$;$;tM z14{vtBL^$W?$EsKPFR8_AuL9`NNRAwM}#GB!WA@G&c%NPdoDw>qkj`8Sh=o`1BCq> z{}VUhDeXU@+|_tUP~GwRIZYTz^E zS%ZV6>wLZdJ}&&#|y%yyys?M9HiSbuq(Hy)LU4VrW9KY}?FXr#WJ;dr(7qgK;1 zY`OkIlp<(&em>A_Z9Su!>T%VX5-(%9l3Jr0J?FUR6_!i9WAq_W=$~Epd?m7C0_&rh zFXtDGLd<*d?Gb+GJX1jTz%!uRcke26G7MP4nEf=%g#n9^ast5)O9uIYlx9Cv$8&z? zqWDxB3qS)+knWc3Gfl^h0&0tAc+X*{t(j_(DVv0d{j4uze9yVNb$c|WnyIYTKroNI zP;OMn)pW30Y}cEFvRok>NZXdh#$8Lg%oM}Vm+NDlF6h?t7t$_~a4y0B#(1NXv)Amt z2N!O<_quM{<`8kE-es~8AKTC)nVohhj8ttRH5A~^EpAf9T&`vfgeE<0EbK@idWNEm z6c84;rCtz)>t}K`uvB?bqQJ#6$MsvojE{n17%W>etOOx4*jfMxF2LU*stg@){& zsX6Pz6LK=Ti|n7COJ$d@-Oi2g5RGNd%|$=^S4D0uS=+LziEtt7RHjB-8{b{L|A)3W zTXNLuqIK_iivOP2AwVFBOL~xKL@&6b5r{?zBpSifpQ-FBt6X;3XP@H;hizF|Ns?%- zx#k?>8>bxDg!C3N0Uy%?y@y*f1>(nMi(B`EKdTzgL%BSHOR+(#I16-;VAZvm+IpK% z#*CmqUxqI7HAzU58OWwooYh@$bpfAwZD8s)2p-wd{6}CAU*yFr)cSwS;{oBM>Hie| z52N8Xb~jAYup?upWjI<1}3z>o4>I2_oL5iKYz91JdORx z#k^>mCDl#jzPf1U`}pL?>=<&3KGGpx?|I=I8uLxZr`f^9madw8I`(J>I(W~hUB$@yc!5MAZf&i-;# z{pUfk51^^aAYzpl*WIx?%m->+gWf?B4r6e<@(PhY7I0?Hx7$E>=q%5W|0HM4%%5cR z@FX%a2zABw@fGE>IX()Resf|fTCdy(pTp5@h5pjyfs9cP3$i^6GFsPLGRxOHu|e$kg>zN*hXDdXPX(F*F@LuOjF*pRg((rX zH)M?I$K8U}QvxEJo%)Q)SVFJXZ9@uuZS-8f>NL5>3k3E^6Y^(aGJkx^#6#2b#Lt!# z_Nu-=kAiJoIUb)AVXQ`@-fsC2vQUH+WvFRd!u!tQEo*=-LKZxkGlJeQh)=;EB|sa_aOb(I>yq4vxyL3q*6VeZ5+5YVr3dX?SbUObZuDL)1lE2p6^!u9o6(sSAlrTTA z5pO=y50ubPHd1))ox1)?ER}?xeWdj(M96*3Bwq_Wga|>V`;P_wm1^6O<-G}A^iG;QZdL&>RtiWND&)n|#2a2Ra)tTI9Ztk6`crk(m7LgY_da z`8y4QEXRv*f|}>xI5+&Qb_RE8e^X)2Ioc?JIsvkZQNKFqK@kVc(%fbBTq2ZC@Z9dz5!*5wvF*tFX(H1FfrZNe8jP zostpgsdV)IwxB|#1j^{1w&v!dqL;2}wakI`Hcmg%dXwAB*=qU;Oc!fIWIF>yGUyU( zZpda}sl1-G`)WqEEbJE}#LtO$3{9E37h8_nUl9Pu z719&3h_(uic`#vm{{u>v%_s53xZmIW>wABlJAmcjBO^{55`EJGnMygJJuWl?Z9gDI z;+{iC>QpJW*$h^~;||dCen^4SJvyw6m+Bx9$+>ZwD|fvkLVPNd11LD%S-FOWR-O0) z06fXq!V#S~dK8o9*v42j-ebQ@eS^f07!b%e$4wUZ5>%1b7;wB4TV_g+^ye0EA1J&{ zx%&yrC_v3SD0}hP)NWNo0RRS-j?c!O9#R1d(Zoh>EdJ(Uv9EJy6Opcq9_|$cG4D2r z3xqaxCXn8#O@36uf^^>VBxf|G4@-UlPHN_?$_YO!tJ$mYZts2l${vMo|^i>F?n_kN=-m z-^YX;-nHYPD%yWv5EWSWZV*$pBp_XS(c{2dBYMTRwe3Cc;uUiB>SVnYxgTIR?Nttc zy$FNpDgI5bSablw_}2D?v^(MZLJH|@kog5%#CLcR%q2{aQ?1qO+nYcWwZ}e$RCkU0 zivKBoD*9i={a4*CzD2s_mKS{W)&7%SQ;Rj~biAUpy`^ldN3<@^s6bfF30B*2_&hw0 zUd>yOCU#36BHgwX_k617xdd%Pd#G98xjXB<;~(`NGY-~a5wJQR(?jcNHUa~~1xnm! zb)w3?8?L9FQC*IgV^B*ds+}IhQUC!ZuDQLSJ-G|(WuxlfDi4miH$A5HB(LbPypgWh zuMy1}^v5o#tgvhD62^$)P3X5bXM;n02H<6simC%p;g}wGJ$v(heW?!~?G99pCGPx0 zuNoGym#B*5qlxGYh?5WE6T{n`m-gq-5Z0H41qQWi^&EWIMv*dtqF^rK4$ye(LQTot z<96uy;?7+iZY09A4jlGoyJzGAX`?Q*x`oG+9SBl&or1J?pQ&ql2^;orxNJX!LEm*j z2&6Or9Pg|O=tNXJs?su(+QI&EQ<#A+Lv92p|GTp2E8pRl_aZ;N`ELcEOd2eKpJnBW5vzL!}Z*a&wNfR#zedw80XjbQ1E?2&${zU@bRVx(Y8B~735#5%4Ruh z+nB_4DoNv72~C!$fyi1|6@6>3i@r(p9dXlDu|=-)QE8gIIILNo#64N_g>Z|P;>D&7 z4HB3j6|tO+tO%`OnYX)0+AuV#wdZ1y)PO1WfVz`T;$i)SvlnvJ1@A=d?6H}MU@2(p zV67-FxN{Ht6q(>TH^8DMp2=Ab?8-aMw$ub8cjNqt7I2VC5-S^|rD0l0+!+~#$BDC1 zY<^OFq=Cq2C)=lE)+up)6WVFlsOWj6u*sD;>RaL5?d`O=@!7&Cd)m{_EowlZ%SK;s zSn!z6Qd_dvT5Kp!fMJP3@a2=Z|Y~^_nI$U(*DOQGD879Rp&} zTe@{X-fz?v_%MFms$r*|j^A|SZ|YAVE#BS6bn_l%A5C!3Qm z5b3j@R{m;Owv{#G_?kQ~ZI;_Q{&SK$j=)amJHtfcz|2P3(p>qUwOLZ@OdKd6e>c{xrSd@Lv{dkjjHQ8ddOQ}HMS}5`@^(9gngxq zLNc@|=n~g6O`VZ5in=@NfkIpVG9`Y%bX`H${rbA{;8^QovXr*dQRGPM{8({$64vfl z24x8JpT&__tF=b@(O0Wz#x7@Wdp>?1O}_ZvgOZ(D!JDBH8`9O3^Z3_qnev5 zS>DH+rc{#v1TrL0LWK!p(uCjUm(-nq+ig?OPrgQDlX_sf8&^pCUr1YTXQB5;>#c2u zsF-d$99_PRY8Pb)*89h&6yQ?{@IyDxHJ*kl7TbU+#ab~s?Q6sVr*VO;jFCrY7E~;1#E`}X*q@ zD&Ndpzd2!ay+V<#%UzoQkYaI@$T!y~iYmT96K#%%eRkb21&}yI6%>nye2yn0vgTYw8obv7s@w!WC`0U)Beot@b_8nBhm-s`^R0bahtL^ldGiPPqcA z1_`g4qvV99GLs6`lA_}#0dB?ZBaH|__qRyBMT_!ox&O3|^0xC?%Kq>4D=*@YtEK%~ zEz2(hqiG$`Dc7TNzwP!Kf0fkn!bHEVTw(SKZPkzd6p%0be-4u@yzlFATB zY_p&Fl6(wNXW|0TjJMiQbNC88{ofANikQDqgL7Q4H0}$f%*1I}>Dq-SPWGX%=8{}$dVQXRW&j#Ix4&(!o9ziEDETC5 zH>1dIH&@dz>t+a@q1F^v$~5At1QVv{+Vu^7HV#T~Zq*==AMSOaZo^)ciXyWQ21K0R z_GL+))XO$ibQ)L)-JzQ|ASGXef9FNH*R z+GbOdu0u;#P~O?l5aN|1DZ4TR<&dQ8EzR0IS|<<3-fFpJ*w!Xlc3E_aqv3>7Furqo zV$JX!o(R`*H=ORw2noZtM>tdF=2VpeBC%8;0hofR0Zn$4o_9F4`az_|!_}f8@&&!u zS8W5@wcWO8pW$Nd9`|K`opcP4M0lvuKxgJ~iA*gyPHDfhw<+ej8lD(YZ!>HFB` zG(Wv{+&$yqX2d%$v=)VK&VH14dOD48iyuOnXYm1IzP2sF>5gmu(^_Uv#p7WYIfzJZ zFR38&zyI?;>F*M#{j-ixT%v}cGqCUwpe%gx$T=*BJM%VDf;J}1lt4wM@vzwO z8vd>V{N=UsFBk|O?65x#!rXNVRNS@xw$QISlheyc^bCKxQc%IXlv?0|V0uMJ zX6Q~ry6w*+xR(p!Jv}vlgV}O#xw)XQy`#>M-5wQx*$=Ob0kJZ-Rl85-`z5{X_na_y zyU;sxCQqIA8g3Sl8HYeX=?-$5%!%E>@%HA_w_Pcq!Ods5(%L0bOPb|jJJ5B}ue@Yd zCojnW;$QPL1}cemAvy|;;|_!>6o-_c4eLp+)=CQXs4J;XC! z^0i+8V;o4cpzreL3z}?VZFks>3u758|FL3w6LM+Bl)$gPeWxo3xR7(qbJ zbvL6;ccObwz2^)WJJ;@1Lnnm*!o%4Kw-={9JiWsnwVkFpo!fk*J^A24uHtAROySIr zId&uZ285my%RSOwpf&mHmO6OMwG4>vQ5t^3PQEuKD$`!%JMOubXU7Uzh?)0 z6bKYvg9;9?e4B6@G8weR+UX^i`m|T%;m=#C;(2)tv<>>U>N$QMSgv=^)AKCS$+oxO=ipHb$&UStZ%~Af&mFq+aEu{f~_F`B+(-(Bt9e(y@1sa zp7?4=;L{Hu{^eEWymid%-S1Ac@4^-Cydf!Tw~MyS`jTA{DlI+QvnNOt+%6s|o-s5_ z{b)QI7e5=H^O?_i!tM)c;waRp^9A(E;PjMTUK~ibMJ32k^W%UHArK8ANkgEDgIqT2 z95lNju+z`9n%@i10KgnOkiY) zR-HF)pR!!e$`)h9#_6E+0j$|pA z*Tv`6m~O6!G;9Vn>y`AGp#wUP($VeQjG+Kc=fx5kPxC0Gu+c&u<6%#)Akh^hvzSMl zz|4Hi(;19(>0G;;+x`g+o7*bdZV$l40htL4Y{?Vj!QnjGYxJnux+#;-V>uuBR1iy9 z^lu=MMM)6zFDuCI5CfySbKC{EQuDm8kdY(Eed@W8;wo)A!frV`pMnU7!08TtPXmWX z;N=;OYY({mLo^eZpj?V{O%tHC1HZqaZBMDk%+*895J*WYY#l~lPF|lPr#*!$sg_S* z9mJ*@GoV5AI6T3T76@&trknb#ClYb(&h|pBje>EMTsB9dI0poKM|2lcVcESL6V4&! zUHQO4i3y)XYiw+BK&KFdSIy8IZlG4GCD04#OB0~~oUi2U$FMlXi_uxw4ouAc?mA&&#=h7(WSH&$U727PHAGDR zp-}i2In(2-fxr1e<|)o|bXDBms@UUqAFIjwMf7Q6`SaEFegjUw8b#pF{$2{O@C9FP zGO+0euig7=^M>P6EJMok3pVh%L4Qb4Ve0^gwgUn$(EaN5n*{aO*Z%fuzIyO*G03;V z)+G}MZ*RUl>-jty=4)3E7LzYwwgFl^c=EU6kr8l>{R1dhf1Rd%4w0x4^93#wpHX z6Eo20SEInhWyfc^d%KsBjiN`cShfYw=1!5Eti$>sFW`d2$|~Om>kXD~?i1aV0BzVX zkiAIUo)_9-`tj-}r@jf*f~eeWPQhi?S8&nYcZr+ysa^>%kW=%gAHxs9j+bL*l$+E*f5X-o= zI_cYy6z%c_KrKr(U^qX?tNt9Q5vUh$jhRWYBts$!bY1L6-2gjxuq7ueb#ZvGYp`YQ z6uG@7NOG>BiF8_9PbEur5#}%eb?ubWWcr1`hAXw!B$zMcn?wxn0zd_e6}haX#JUpH zll65&u6WBW$EUbHA)K+14f`NHa_r~}$8{3biaM?VrU>S_|5z?SoY2=9^rvz`-0=Ez zw%ERG!3fgBbA=^STLLdE|4X^>`CjCAZ~ljJf&Zs+0ZDj>IQYLQ7v!UqpP2?Lup>h5 z-HB{lHp7|638z64eU+kX74WjP$7@2^RH6+|`QYxcz5-#$qkU=py$oY20q-23U9epp z?6-lurbVRkn=rfgWbzOse!hd{#)DmN&KGka4Z8;B^=K9 z30&~(AkN`%Kh=pX(<>EOpM03d<5Z2F7a>YKEsn z^hVQV(xsIvi1Hk6YNA~$zP^%~y<(rpYS5dc6ZZ?MnEFj;H-AkC5iOSJK^JaELURPlc`0V&R0ByoYo@(MkxM50<_4jVY-yl zqbJ}gclUND5TVcA*4Se8uy3OyaC9mulDGNdJE>`MN>4w%{>b00Jy`KEA}vnEJ{$}I4h(MYC@BvyHPjT zPTxdhT_l6HchDgQIJE$na&(*NOA@ovX&H3Y0$kib z;;_F@f{=f9aepWICvP+VPX*Q+S;+w(`r=Z$Q%9PZKM`(W_V4ut#QeS~u!2eah?o;5 zTn>Huv+w&-U=1%B?T0%a1PPb#|KEfbZQaB02Q2k3(Jp8KfR6&b+qZ;~?^dwys;eJr z#-Bx3$XnY2#wX)F_dxURW-{K~1HC%$F2HMCXY|cfzzOHWe&0313+_)7tI$K2t1t~~ z*fggD&G_+Qd+~K7-Uw5p5|>N3ag9;;3xz!7JR2jngugS&7LT_5s&Bidlk z4@gH16)zE8LV0fC>?NPtyXn#h2v7F5!EFy(&XW%3gd$~6Vm&FPcPf(-%ihD z60q%=mXb3Ic%2;N$;0VN#QFSuQYSi(SXiGCYf`U`&leyFXV*ItuX+>>cWIyE)wZP8 ze#QFkC@7eq3D8Lqnq#x|i{>OgIusgr>iLS=!Pu-Xn?M3F&=t}-r)@;?_QYH5nnE?@ zYS01N&Hw_6#;Hdikb7pb4diBiMm%FMcjvzbSu9NM-%J^AE!w|HBl&5oRCSQ+g^5?J zxTAgrZp+x;2{1`&l=4+{gGcduY%`1~#dgZ(CG8jMNC%3 zGv|7iYBJt}FG31*r-OX8Zn(RLxsq1-iW7B2_qC;P8~=)J4^OCVq5rie9@%*H4`I5E zJf+?oZU=x1%0)1jd3a6gxoJw>-oQ~bVi%!U@1{!Ht6Z#%h#u*5w%y&a#1E^in;Qre#P5Z*iUR%c zytzPh1v1Pb2k*c+2AG|{DFvq#3!%gD zu|VE5NPl}_GC*;Zy(#~HCMvzf_W^7emLH&YM5kAta6QJQKtj9r^9x4^^J`y0Bk<}u66C+!lRw=OMEt`&`48rX2XZ@tOG#|p zMmtvvMO^%owig6fnSf&Dz^;Y3_>{?W46N>4$xrT=tB4&Ivk|f-x!!$m{f63lck6Y9|lZ)v(EM zgPR-tc!P={lM)09vn0D+tIa_U65rKtK*HSK7hAb9`T)%8_4dAVy@z_Iig{yiTh_P~ z7n;1!dTLBApq2Yq&_c1XtJMLCm?Q;g?BUtFW0gF2$qA5=3EONI6;e|7Nv(I{v>#Tl zTxBk^wI&p@nrQ8rCil>70;1?3yMp5#uVf2W=?7)o!I_JE=8Q4@2F)7~vY1R8(=5#J|&Lz=~mII!7P9^Df~(HGF2{H;wCH)SB`I?tZ40_c@D}5sP(ge z42xQu@CT*zbqV(CyF{O?7>+Dm6tG*+LPE3@c~U5Fj?9Sx)Uf*jUv!cj&*E%GLKX%R z4+zJERtn~XJdcULNt_@V8zosUnON++&e_sYaVBo(J{sCQ!_T@NGF>X{E|+0+DOou~ zZxV-K`W3P2z-Vyx;Y_rnk@DG7>1`DBt#$zrey!*HJ(#%=TKcFq*;_LyS!S#ScXi z*durVy-16g&oLp|AE#9>i4e=;U(w#O-=n8;8Fj&u>Q5se*O0! z_Y&+iuip+|;#*0-TTKzt8<^54Ua2qAWBYsS1INz4!~Ok`C_o>thQ8djejBoVF7@9A zZD2VIeWMHwotw_lx}_auK7 z9#(9)u4}8qf|RR*^5XNe$A)Efqfr*m9$V}fhgStWaCFW`POu)!e1ZU+Bg_akSaa|_ zTig%sy?hSYX60Wh@PXLrg+~I|7i{`)+{mouq|!b*jdF5~0MWX~h;^UZcgi0641K3@ymGWq zww}zqHY*7_f8a_+?_6s?$(6?n4fIHKx!^(U|8g&Hu{)AgE65`OUSaB3=8kO=RC76b zTOTQU8F=jgnS(1`Is3&xIUBHwe{NEF47qR-%*I}ym=71o_uk!a^&|05fufTDLg(z} z0gY>6LrqL3&jQRhC_F>rl{ZCz5`zQ3=<@QIyLUdOSot=cTt4 ziF<;jot*Zd?)@C?sc*=k-S9$0yqfecWx<>LPF;sfEYXk*K!Ka}7gdYAa>59l{$~&e z^UQvSX^;hY7_|jp6(2(9FIdkviJk+a_~}HbM}qAFby;^n6zs=SMzp7@FpNcLH!LZ1 zc)?d5%z92uO$7awsZrzv56Z$_>Rm2%9NWrk2>Z_V`-qdOoKGt>_Q@UZZv!fiEEDY2 zD46lqbkBAJ=PO#HgZY`vL5j8Q4gxq69!^YdV_wH<@VivSvlg&Q+^~Lq@C7=bn++G` z53VcRlM$cd3_S~>-Fd~Gkk<8v6>nNEfa`u06&!N7VmEoh)TeQ3q#_8(%(UVshu7Ki zqHWB?Zj-tmdFxvUeZt4FJ>jA$AB=vY;FlF|wZ&7CxJdWpC?KJ?(=SbwSn{0!cM5TG z6h+%uZhy&Fk+{re)rp2^^Cw!qsmH@ZNFyMH>)k(&tIi47tDXDs=>IBi{?qox53gQQ z$9-*Y{E;(&DeJcp&Sfk9zJFdq>^Bt?!?ViodPzAT20wdArx%$P(5>}H>;UNF=o!Y$ z^GEaLXSH7aPP+{~5QxF4275_cK6r&Nk`i8r5(*x`r}4%sd@-#c_|Xw40Mgu#VYI&}_dWs{y!4Xl-V8zwSZ%AjwAGr}EAhfF7@CC}AhXbD6VqjSe z>W%?=8-`aa80zjU&Q8d+vCtd(q+-goiE3;BWYn%2AzSe&b4vuB_Ne9diLb-3HXP3k ziQUPn{V-UFB4e-R%MJ7qFcc_j5uA+dg%kkS0WOqZVg-IN?0sLV zf9f59c!&_ko3P5L)L!5DRhDWdi$~^WH|ei(%fd4D#fn{+7ErPIJ_t(W$C9hhF-LuH zVm&Nryye3LIzkTZKeA$9Xpxt70Qttcgly*zmmkmf4tBrzd}}B5fVZ7qONVIdI{kVR zt~-pP6H@T%^91r>bU%S(*kvtyKmbJp$kfD6C=2B|fbhnXnGs-lZdClrY#v*+Uae2< zcuKW|KB5XNlw4@;$8FGRy)g3z0^1#grMFa6Z}`bn!RQ zM$J%RqWKhECBaM-#My!>F*Znf-7ByQt1I&e0z@g4*xJ7CO63sD!4y#-a9S(9JPZdQv*QI>;?1i}wWg?!TvmLQQTU&g!&hl2$H0?wbV=mSTQgX!+yuls*@MV}Xhyo@b> zDs;csxw^d#?$XnX%z4m2bVCeyX}A9$$lM27V6{D)RRvFAB*hHN<09X$%i{`j&$qGE z%URNE++#XKOao+YUs8y#gtZc=+e7kEXS_O9$@-njqT;#?kI}oUgk>bo2JZ`u81gdl z;Ggi53CuqzwAoV1FH8mmQ+L9li`5OUBG9!0e)|OXhyi)Vb>WB-XFYCCQV1IqF@oC$ z(qT9_K(YGPxbF|9$F~aZSFLcWs1w?p3>hnpa5Q%&7ui>7inm}s<=OM%cBi-n?DMi@ zKpILKu(=R zKhW2Znxa42#$Ut;gvef`O!V%VAVA09uk7>gTq0%zX8+KIu@&2mP=I6FYNhz2g z<0^rDYO+g+j}SWfAumLL8+(Hbzr1&riP5@)S;sd?x9}q=eZMgEr=>-%AT-pa1?P7e zg@TA9uh{@Jl(6#;?Yf zTOj#>vi+qZ(_gOc2x1o@dU4h)C|KS(95O)foWOrxp)ply)@_nL2ewa|YB7ORi?v!-*0^>PA@&$M zz#t=MI!8dHgIX8e4$6|ROLf^v^~e0u|Ls{?S{ifXS*K_`i0^k|$OzPqJ+w-9B zWfYf`t0Y9x5gl1H128B$JfPFB0)c0WuCa%ZLR12d`36K9!B*<^`hIFrBJIudb!UJY zlJFI77fZLJPp%t78Oh!#_P0?QM2{~Fp*(gcd(VTsc=KQo{2(ozeF8@b+Q=}2fP0~~ zdiO94+H*Nmgsf*r7j}IattFfjLhQCZu#hanu63CTZlQ3;1PAC~%>n4nclB|lzj8q( z1K_Xf&zwC|^$lNrR+Fc1ET(g~R*5M{G->@`eKk;pL;4OFYrc0;eh8r0Hz9y*?S!|H z0KdtP2WE3AFSk^-CZpJmFXP~wO4+9?BqsFByJVS$$h+4wNB;#d|9$8W@15h{9dIGC z^5t1zj%{&<2+DYqCRD#J2Kl4}z?hQ(Z3X4SYTu3itv}OV#))>AH6DK!A2h$wsrDHdsyJtp)qoIo-C$`}4c1e65n((geatLt}CC6Ad(1B9wBg9aP z@eQIpu7jSFhQ8|}8nYKISs~Ul)ou?(s`JJtR^;j^gzOqG3oqa8jGd5F%PBO(!(;m> zA8N@OHSc44mR8SF1Hw6lT=pK!cUVB6feucQGGRMjRgaLdstM^MX#=k$yHU~N?J~#; z>%s`7nB-0!@07K;A(f_}FG4xexQe7fY3w0?I-1AEm5!jhL`;WcVBgj|ojsS&Lb#1D z$BDI-&nguJPVq3{j1iij-S^**1oU%1-R{-@Y_NB|LKVTv{WSzQ|L;G`YW}o4@YKuC z^VocKLcHB$iFf-%970*VWM##RH{d<~W_MtV@5|?>s^&|O`-*pfNGvRc?neZ{$>7_8 z87|C!8!dM@N>i(seubITPn^-5e)XpjFguQ52Y+i&!0`B|M;XkI>}MnY2L&8j>m@9v z-&^Y+H9Yde3jXsYe-!cm>52hT_xnr!FIW6o<0G8iNuQqI7eSK&J`4{oydOnAUybs{ z)}*yWDCC{n!sa_LP2F$LXm+!)Wm=LgC|tMCCsG=I)))KySkvi}H>*6K;%hCMQW5Rf zsdqV9O(NvGp6mAf$;wQ9ujHHNcr>_4+UNBq8MBSctK`%k9VCjBa;c;zFx4TeEVjTg zOP12H5XHLPnrkN`#@oOgYli^OoTRrlw@V3TVJWeb(6Ru)6V(6JA+;s5}L z29jV*u*>5lU+>5*!`kwG&5&I{4Uah`t|G9w&tM9E-o1;h><+OX!AzRzj`lWMAQ&18 zxZ7ROlmX1J(6fU9s01RC1d4p~XM-d3p63iK_!vmbZoru8xkkN7hoZyh&) zsD5d7UJe*dd`qr^V%}0Up_;5$pH(m<^OuyJ7(OWp_{l)N{(MpKM8+pB}ZP*6=QPSdo_YjF}r7*Ti?S5ck%Bmb#PP4NOqgd3d7SG2VQkl z+AcxL-AOG=#v?fX%0zs#t%>uMG7(bk6!i#QOtzS=(6{7=DTVl>)dgn~0GO5}e_+N9 zqguO?*Uo4dE(gYWCYQ7MY)?9M1_c1u+i~aW^a_zA_c3Stl8h>O)jVHpxn(ci&TN*5 zP$+i7;{h@)S-lsflRXYt*b3LvG7WoirTWb3elWmq62=hr-jB$1I4e7_3qF9Zdhf^^ zQM!+Ku|#Z+FYDnMJ9By$o0+y?+s*IB{%j>?;^3RxB{XPL)?4XWM+b4A)=wUp(_*Jz z(?=WHIIhhU>~}Z}vCo8dyra9J3WRy`A})tJHvfy_Uf{TIEBPxe_rI*=e_F=5;#K75 zKk%S3b{>IN&m^TNvV}HGhHEfI0DF$^Yw*`1%QvAC!;(_h*_B#Sn-~>?& zwk7uVJ!nA?1NwXRL9vXCo)FT!RYw+MS%ajp8@8{fB~Q=J23?;IhtcH&;XxG7pcFf7 zpJdj7<}PM`+$gd{u3~OCa$X&`Aezyrra-2J*rWdKvE8Z;J6y}R!t`hP37$j=?9bO- z1C3eJ%^-f&Qc|jM;AHmGRPYbg?=KJPq~BojQZuE%Y$rWFck}wpv~y3E83gu7h{#k2 zwBxUtSxT^Y(9+=o$mjSFFf%aFuGxZ5N6nB>k(WEBWL$c$?d&L7&MhlhTfKyndhFcO zQR2@G;;z8MZ!q|^jIHM+QB)6{%hfJb`J3<2SKCN~f9#tYitPyh^A-DiIM1K$(>H0K z#Qb$s_48r=Ur00f-Rq;?Lt4RmRtrS(;`4K5-DME$XPImtL??ssz;7xxV5Iyi&3JjN z1pfVZ^Rig6c)ExAl^UL^Z|8jAJ68Ib$Tcu{(p$ZvUJlx z1)D>b!O&AXN|!x7hR6!w2*qB?Nns~HxC=Dq^SH)r1B{%xNNk(KfF2DK9Akl6mbf5~{@e_R^Z*jrwb7;y(|X3^GUMJpcghvfw91?>go3WkP$oTbj9JK2tB9;0 zafb)EvrEU;Zgt~kNQP&xX{veh6X1IMW^##T!4hh2Suhi?Ws5}6F~K1_8*gr1l zZwK(aiM|@Kf2zj#?lt&ozvKmb=D1DB3H&;4x%yO+e4hJWLK0~C|4iSlLK`+tfMk61 z5_zT;B4{6;eHx1ZQuYI%rh!c6!`}gLpbzE1Tf!kUJaPEoOrR2gj1}djcYcdH{CsiJ ze~}KnaoOIgj<-N>Xi-`>P~=eY+G>;K2QrPBCgn4mtBJwj@p+#87spv8I>NM~j}~2a zuQ~XRdUe|&CquYyEm026QUL>S(&XeS*i+Fg9WPH+@~d$d#C}zh;Gd`Ib)gri#cpe5 znYNEJgacBGr6x>X-DkjrCkwK#(Ij{dmZ+!_^ZS z5E?z6_gS(0qBL4+Ry_9^PYatpJeY7Hx4a8DST#@7b6g8$c`>1p*+rXX^Hj*`I@2q2 zUe_cxUY_L1-N#E#79~cQ_!?Z>s-~(^w<^n>D+E=J@J#}4HNxeTY`wR(-s8$JTWQxF zIBz(VWDq=)`nXVn!U7rjk=Nk0IrK(asz*Zu3<`QWJ}fCOS?hYp5CxQG(+zLe$J@qd z;_Pc?6;F^>Sp7{~@n`axG^|n6xtd7NS>c$=v)g+jUEioRD*zq&ZQ>6-ENt>g#{GQr zU*9WTjDrbv`1?crp*#Tx)5lZ%UmxN;ub5T8z>~PzBlZz=X77-PUv$rc#QB_LGm?bD z9fRT43+~3SzvF5_Q}fl+L@p-C)*G2HyVd1JNaxK8xKpb`jq9C9^${9D+*k(oMF+y! zF>`l`y-n?2kA^Uo;{lSxHp^>DugdfCKoR9SMuAPOa2Ze<4u1hF0wV>}5r?NSUm#jT zY?3UAD4wgen`0CkBH4t2i(z23YkJiSAvO%?FEF!_ihg;6doaMGq8z&hRzv=<6X45InDxnmE>zy_tFp z*alq8+;Mkm%F)w{TgV=*L>^Z#sLfW`k&sPR_5|D5+8T4|BJ-wZn1`yYaacjbgFi#6 zV<=z{jXRzx;*@46*hM+t=T_Z-#is#vLiJBz_VWNKLYMRZoO6AyZr3li+TUS_URCiQ zSJ~#JQNDfQ+1dSXi(Z&MeKY?-At*rIk!bAgQ?KPfI;)4LvJTT7fSO4VzvlO23|&Ux z3uGVd{g=nZ_c$D4*`D=F;057^^M{-Y0;t{wUL`EW?}acFw$b1Gp>|BrZz8Xk=jEje z{(xA%gk3Ln@bo4>c!yY0AFWGxvHbIo@i*V_>!9$O#{T{u%;9dFwX9>&g=HdAu#Zwhjl-3Eot!dl7sW`4rV3pyY@i|X>iHRZ$r zlLaU81#}(L{Vwtm{y3g<$~kn*9BMhK*kTw*;~0_NB|sRr&XP*l0o#r(YohNUE2`Is z^JbIXq5`*d{Q>bZPe{?b$Gb(Qwv7~M5Me61riO;Sw~f}B#1#3Bj1CASOgn6_3myG* z283;lU2lomjUoDYQ@CkeP4UPv4N4 z5c&EhYXM~DTe|osHuJA%%8!+`maOpZ)D<;1KvZ8*(L_ER;7dU85eo!zHYXwIdlOu* z`4;taFpc1vMsKMN6WWcXo_)Vw9slqF-)|*1SREGIf0up;<3Fz|RG^F2~qD(GhU64WR$PD;??wAfM)O8l}t(taLWl2Q23|JJ?h zg*q|fbs|fTy1EE=B{qhy-7c-VfJG%hY5B-{A#4+$3*qm_McfP!`Tk7>`z`e1t5W^B zyYR;q6D>uKy|p81e{f%ksqZC#5H*_vE~c{ zH$bAK3Tr3z_WX5=N4LyJup1D_c5$&*lR*?J^dO8YG0OmLn}kpW;)tZ&YY;NX=Gi}DYa-ef$A10LTBp3PE6CgSFlwa~4YH$?EqMqzc zm=`1g3AB$G3ZU>=%)Y*eJ=5~owY87j(%sX?GfF1IWz+k^DNc6iAUlmrl<9Km;OmFn zDokU_44GXEdH8G>COFw{(|(@4NvVcj4q#({yBz(^$mOS&q)l-0Lq9*D(ICu{SMJZt zrXMag=xY~d^=d%BX6y#f5b&JYxz;h$rJ%ls>@SeMR!~#w?;nw`^*?E?h?nA(F4NcF z@>|H&hwf_kRtBU$5bA+)p1`Vcm~ux6eXZUeJ7OcMC-(Ha5K22OYIh11)F7SembV1S?f1JPkkW1O#AhyXpC_ZH8j_Wd5pm(B#67y%ih&jo z&-4OCXmz_rXBesw$i=`)y20cQDn^V(ml3@}U?g$7U6Z@p`|A+UV2)(u)#>WEIqj|k zW82Wu5!U5p+KnsCcud%tUo_-o6CVRq4AMsV(2WP1vB>9C@HLLPZF<`$GNLuvX z7sB7KsORHB`KV972JioIT=S=OR(!nr1JnPwxbZDRgC>TBiPb}ofCyassOZ1i@tSP={ z+87*9KZAq*719ED6EJX}-bAux`rd{8_8L^KDKIU_pW7O>b<%8YQr^jOulzk)UXQ8D$Oh@7PD9=Er3 zT<|&`?ucGqV;kp6q}aT3cZ813lW>X3thHVxTY_*!8O)4Y zr9e}X)+&3N$s@@`)p2zpPEv2(*%o{DO2b@=Ql9Izz2_|DD(|-k!a5X4?JUv8Kd-n0 zTLBK3>#@^VuN*KzpMhfMa=uIizR>5Rwm$LU&Cx*T6J#~mdsFg3-4=S{q~!vB555?Y z&UljUi8}!Cl6P%+EjSoO!cX}U-(i@NmEBDCab)Si9m$f&n zvM{hStQGQ6h7Wy(hM0#Lh;MfHD9a$+!h$$i6D)0%L*Gvg1efh@i)?opc>$8M2!op` zH4~|3ZPrVIhGHaOj{__@J)`z&aD5p^5y3H@=9m^STl&jX-;NFapf8)_|3lq-q`8g1 z+kbPcqKEdw=Wh~V#1J_U01=498FCH;h{RoZ30{CV;OTw5FTboRNhP&H_r1S~2i=lb zB_Dmsgk%!Mt$7~tY>P3fj#BgYmidI zU?SImP52wgTp7^^JtWG;5V?IK#DaUqfbg1{)mFEd#rA zK{$jzBEzW7DyLK0fr6?*b2_sWRIk9fR&3kl99r}jBByc(T-Wyk1`^UskGJ|Xa0ZAw z*a^{ZYVNm#TdLEowQ7~lD!8OA z6=`iXZfT!)TMRi#7j~$560?D60a*>u(XNv=-X8MpVKq#TyOEg} z)DJf$^YZNA6lu#LDr`Vi;dhE0<`ttNiZj4`x@;*-Of-tX^27S547&%#G(a9*`OeE2 zp$`eLc42mXOyo(Ay>nBitL+WIaKX{v<{mT|F23pzPN@$2p*$Z->P%zYl^=u$7YP$+ z-wa1PVC3O+1KKNKuvkedwvc-+8B{5p*?o87I&j$xCJ9+zTfv+eWELNKr8AdcKXEy# z4egSG6Q$y6Ov^n~i`9`4_>s*68th_ykGj

X+`QYlE`kP z6tG1r*Z{7<4aakm=9bKUyLatFw##+3ZLueZ4NqZ z{&>k3q*o6HpSovmeBMs$q<-`jKtuKZCX#C$X5BU(Y`a3ZY(35Mw=l<*P1_&XgGU{~ z6?RfudJ!+%tiDzk8X+l0xa~lnTGX1o#^$HCqEkg%34*gV@=aH(8*m4f%Aw(R%x(JZ zdLV!@!4Np*Fa2`4{%pbfr*eS4yvl*>>$-r0B_qq$1ogApP^SAIuBoCb>yQNmUfkEJ z6O#JU{B;F4Hzj|~ncL@BsJAc*RuT2hE-?#Sg`9wId(|9*RA7Xw08?9ry(;ortinL* zyBmM^=)Ze#14G;gg^cj-i09|{CVxC7j2*ETLL(4E^q4%7) zRI33-CiYf2N@PSO);^QY40ZD__-yn<++R!wxEd`epvoRvnM-PQ|A&#qjGyB!XziY8QQT&xg zHbU}z)K4b_3T3LWz=}5a09PT-7hqSyfJMryFc%&Jn@*$H2-x^hy-&}6^M%#;eJ;Qkg!2c%`Ky5Al_v$z zDA@Z4KRBo_lw9FGgnX%UEciAAwDTbO?HZ*ne)hxsYIHztOsqCA^OADswBj95ivYh| z)t9SW^ypK(obb&pG9x_CAF$TIHN()Z9`wV(a1u8MF5PVamL3JJTx%!9;C5=g8BKgX zUW*;fPsA_}O4_o5^+6D2s%b}B*ee&dw6KOJ_kOTR`O|5X{OPvaCG(0cyafIU0W-8g zW{d`*^6ccDh^}>@C5Mljzdc{QIGD8%S_x^z_ua;h;_AMa;Qm826&E>pKpZAXdmFB$ z@CF?DrcgeRk-X;g&Kpi%znTw(_yl6$CZhe@B{CktY77cx${_qSrKjt?J{T1mUW;`* zfd};>1E2JUZrd_XBj>0*k!zD!0ON?ll*|Nx8F)8~CTMWg4Ts4t_M*<}uCqDQziV{< zDZ%eW8~HH;<@>qP-~RN+6L0-e9S`1D4GZhd;ODBA$b0~hFlwhcQNjEF!@RMF%z3cB zep*|8LsfyQ=e?l;Jcb#TKKf<21nGE?kOI-z+mD9lDt{Ao>_CF?^?N~&@%GJ$^d{uQNQh^-l4>A*({(&1u6&x z3B5Y1_sJHlY-O+{!dVQ4Z$tqfBILEan%y5x|5r@wpCEydlJ(9u0ayyrAYW)H7mEB$ z416OB{z%;V8C?pLH=FnOQobV6=QsOvNY_s!e4kX?ulJb$F%;$tm+t4*a^;yhmFV&? zJ-@(v0s)v(x&s0f(?K{$4tUYsT%FBbK^`F8ZJ#6OHOWCT@sfEwaVBOlpg60>Ao3Ij z#6)FQX%Akum_DF8BMHv9%C*6oEUwlPJr;)Ff_x`G@*EtLM93h)UI0#JKxf<%x~J5@ z+N9o3sT|OU&7w=>Y)7-4thX{#>nYP3uCJna#2zctNy-+oR0mI3aL|zN`8(veFkN~++1KkO z1f{QXC7VJd3e?8RsFJ!;3{J~#f1cSd}1d)Gos);mYlD&<@%DaA0VwTf4&E-PEWr^K}pq>AG$pY!{Z?9QjQ@!B1`ClFks8(Nt6~7DsU%Y&{ z7(${Ad>}x*!N0H!&m6*|G?zW^7--@JpfwUq^RR=Y9;`ZMjYx=BS?aCH2rN{SsM5eA zCs+NF{zDbCm6_&T&+JFJfPC+z6! z>@1+@8N#k(>@f|ed3DeB$Z6dRbIa?{>|4z*c&TsRi=S@|zC&Ih)gytq1`W~kE0((e z-mE{IX*JPzem_w#C;NEmumP264=@$bO3#F{-R;sdM=>6@=RrCrh|( z&+`5CY9fHM?|PLi18@WrB_zDA*KTt?-e68R6A*9#YM;QwrJ!~ao1e|6fGWlgZDt4V z0s+#~^=yJo2OXL{mIcfhy6UoDh%(Ca17rS4bn)wt_;0JZKYhfR^Q(57za~IwF2OmE zjaMH!V^ckDlC+LA(4_vfcI$rBAOC}o`B%B{e+V<0{Ox@B@p$+tX7rz)4_}Xm=lk)1 zz*zvMw#3XmLatux~btB353c_c= z046bfxL4LE_x8+!qmY$43mI)|=8@u#Pc*DeNrF;LhxqL1&z(1B=a3;%WfM5^St|<) zS%Gxc+eok-T^+pLIfLUL z>bn^5;P9+-kt4;5jyPh`0P=+^#GJzUSM23_*`JRGAXrY~npz38>cqOYmG_(U?yh{| zaa}shcmkO|7+e|RDB2lNFUSbmMtkjVJ@FZcx+Oq-PM1cliDNJVj@O05H+vc{)q1 zU^mo*9t>Mkw^S=H)9WM?9hTTyI>wjHlaQY}py#r+w>-*j$;WR>A{sFkE9b+NYt%e5>naRF$6teu^+ipFo8ij%&HLpto@D9ql~@{a;Otr z1u-`H2_?Kk?;eQXPAmUS*Z(_p-rsuuFFF;H;RNL`3RHFiD^SFhd8JkVuh%D<>Rwll z{2Pe^K8_oMXo%f->_i$amNY=MoMEb*YV1y>hWi$y}xz*If;QxjUyK@KFd2C7D60C8Uw^C6B&Vle3!K6gSw$v zQ!Ts80DUBz9q}`*lp?NMfn+r3(W3i)%l^Khy?7#_>V-|EN`SN)zZMln(D`q4uwkuMe8^{yQ&1d}t>o4l-pQ=WX z_gSyL|5JJT`udmZbjFyi(=nu?JTi2){WS_A5lYSxw4yErBmh-{a@d#2?E?8g_+S;O z5A{wwg2KG^o+jYn<>V0@9Nu#{AT1Q9zR>vkl3XA&^*mF2e6~3ikuxz(dYk95gB-Ib zTVPpc#3E}DpKR4~uz!aR4Qta0^^1ID%#%^ zgCd>;SOv*2*96tx1G3AUw(=k{_I8I*R$Lg8k)MuJeb?o}@&M_%F`VO$-3Mq6Q>W+!kZ)+B+753g`b;4xDAI; z5N!pkJ(ippnFI$Ycqqb#?I-&Rsyj%Qp=`*E-8t|!z=0<|9OdA5jqnujYeKj>r& ziN6Ipz>kHyZi-d4&^Z%@7fgLtps|o!TkoCd)QR_14=e^D@W|4-d3489sKiya_XKF* zY1n}W_*O7*q>^sKqxXSP2hs!pvoAk^%CDmC>hjzzyeQIjyVfo6^@74MB$eO*YUi=Q zk6s$PkL!%6YnWNHLC1l#;~{GeaIl>gE(tJcY{;Fn+K9Q=d#?+qmJpWyVrF#S+Ye3(ps5hC{G{R@9f ztuSh5RA^}&LOV~*Wh=js}fqo)}8 z@L*_g-rpzy;nj)EaZdz99b~&5qgXn>2Er*JcmoEGZXhi`t~z?FfMPT<5wR8b*|e_m zpTXQ^ra>Ru^wxdmK@#T6jz7D+fBbrH(<6mquV8-;OFw zS2hRZ4&-<|;&dfL9Gg!Gy?r-7i6i_Q@_6)f)i-K zcpsoF`@M&i=}o>oz2)_4zGnx$0#M$P$lg=8ikGM8`OzxK(x*3HgRoD(E|N2&^sWOk zI3^r@PHP3mXTg~E_Mph;NBviA0;Na6aWDD$m2To|Uhc^O*?_m2&!58$FN+;{hYw#f zEsdHBGN0o#`03b_7qbsYWg^v-im`ge#ZmTd6lfXgwYAoE+SWxmDY{z|0)e9L(*?Lf zpm4xUo1CzF5;r1WGrQ^T98(c{g%xV2M#@DQQ&((DuR%hFqp)O#>$@9+2RqNUH>=Zk$1_I^>Ebl^ z`zf9)ofD*RLgME$GL*qKkHJ1%Y2L06>=gPPds!Vh-DX!@#p1ULqGW|ld#FHKp`QGm zivxrLBgIFz0{aj_UwNr5QKXJ+fjG3vick#=@};>Kj`N&J%?1*Do&?nAFGtTigzb}~ z5gbr|w-6y@{=FamskU{orm#Vw%85Ka%{3;Q_=-mNfawH2{U<#Aw?X##u|B4gjofe3 z$<(N1BEgRCMYnx*A~P0#Zboj;ozXK;*GP@Jn9>>$Y}BbSFrk12qlClikLM0M7i?Ea z46)ePhljY2i+KyK>Au3K6?G~DNl3+>T}*u?OY(&&WW~#mor<5svW*~aHtyNJxS_0} z-2I)E%K|;2klJz9pA_Q5leH~Ovmv9GzS8QrMc2=f3lj+K)~j98j%8~4O)71NRjXTh z6B<^!=At3Kh^HsU4pQ!qoedZjfM6(a;2AfKPMK>xZshs7wIwm+H*IxAi_z;KsuMqW zrleF7%yMtB(hQiBbG!2hxX_x9b;^t83q*(d8i-eJHeuSWB%i&>y>r*oZFHZ#o`+Zb zrXT;nr+;|fXiuoUwU;I)nA?EAX@t;f{X9$09}WSLt%bsa6a0YX@Sqv!Q2#7hA&$Qop$pU&^b7@DR;ND5-p zkRppWvNFUi!Gxy=1aWb*ci*f!pOfw1MP%}#ydBTUte|h)4;U}QZ2(MyU+0%)(*CrA zeVe9(*?i`6B6vR(8=19~jSEa?fqMfVUv4)1TFogSoJvS<>}2Y_{m%50q$c;33v}=>xS$x9MrgAT#)QtC+;9c8X^X;bO*_`KXc6hD4I}*4S~Bu=fi{W6$Yu z0Wbj_-4%Ra*hb4)D_t7mWE(3cw%^g@V^jhAI@kyK=*&rb-Ea@F94|RSP1e>>gL3as zJ>&={Vx+7?t1AsPy+o7Dlj@yj)FOQuL>#~V(q zoE6y|!A95zMQ=NqaetgTmjl&;b=V`jQwOPy6sO*W4F}g8fG6tw<(dxG1bI}=qRzQ& z@2)6#uYlVkZg$Z{YM48?son8#-=J7VUo$~WPo$6`kM60V-nH*gLl6z^)B?IF$cnXE zMpca3qo4U4JWp9;XI&SVbENFgPms#-p>u0+|6Xw0KY506i3B7kcV)XgOl09i!bu4o5aqEw=l>sIAYCaa~#xQ|2L-SFWAoS zS1E&Fj3+6|47h4oGZYA70s$coh{ldg7|1^f0L84k^VftG@S=vxeu8Red<9zpjJ&-; zOgDH?C!p)X&Z&f?ReX7&8NgZ!#Y>q-1`2-AcfK3KL&(=J)q9{Bl$*ff-8y^3T(4xw zCf6P(x5>Mo)x0mJDCmKxMl;*`+yYp#B!^uXyZy5`o+iPfEK)x%7%qYzCC$hELs|^# z=I!yGf{7X+DcwoGmb?+U#1mQVQDGcrQrj_cT!aLFu@01czh_(f!OB?fumS0Gd(FC9LzvE}O*s;;4ba$3p6MS$-Q?DVVQlyvFal2aQMgqx z7?$>z!VP@2R-*l)J&mlL52ZC6=1k!Pl-cy=rL^h6^%SJILp%o&l$Jc%)-0Zr8qgm~ z;Ut;+a10`jyyFVx37c(g8lz3X!H8j~Pxh=U)^iifA>_gtkK@#z;{u^tS6Usm)Go7` z{;@4aXMgj>aXKkEWX3>!^8|MpglDaQgy3HB1$*9gj57gJh&{}+?ojnCjp959OUojr zUa?Q%i0cP18|m;f2szp8k!{8Pe2>`BpG~aZ-*zkuY>U2JC5E0U%B84$CW-DZ-R5-D^3W&Z06y=z(gHw1peSOyDSSaYDGajej+O>q8 zdj~KZFcck90r6aI*=gWB#slZcOZC{w0zRj>J9GpuaZ$V~7xv=6^Hs&MR-Ggy* z?l;iF;m<;wjpQykji2>evAUkDMQkht0`@Go^&kFC(Z-8$kIviMGPPxTxK&eNkj*wY z*yK(+HW#VZkA``_%DlarDh@Mc-`NFP7Yy+XArf?j91g29@rOYl-_%I~|NW&lkS+EG zZls96&|l5){!~HG^6RRWel`12#OmiD1)$A*m*izI{mgz^awD{v!VnBVBiJ51CXnC- zog@^$(ML0LWjBBO`q%vs6bkbPSm6oX=R-kBUSHOou$}x|gJxy-l{#hYI?e_UFOUun{{RHjJ zDN$`KQvi3}NbK-{0;1u;UYzic@k!T)}-qw%rz z_N_L+4sfFZ04KfgP2IsZrv{ys1Ra+ir1FW-OX-&|0|=7>f!o`4=>>y%yG(p)pXi^p zPxH@sOCM_ry6`Rae9Vv(FQdfmsfuBQ98|2>V;sbJp!QhH9!XES?(F1r6sOU;+e6*!^5Q4@V=uOTzXDjS*5F-QiIMHF~~@Yj6nN952$cbs$uWcU_Afd#&aG zZ1iT7K6t=EVW7-vTnGjVO0vmhGNe;0n^t?NiZVcXYFn(Gqz$mCcf!hvuKJiV2}oOI zf1m42y=Ny}AfuE~sdFgyOnQZ)5$hR|ic*$3p2XXz-&W_-sqK;L8sLSgY3aSH@H@qq zOvX4`WUc8kND2lsySJBE=H}HQwjV|?mH?pu1ZB3-r=H(jv$b^4o7?km{K6lBD<%1Z=!fr$Au&8qY`I zPn^Kk1KLWEGtwre&~F$52zvScHktjwGgGwMtJ#9U%=eKKvxsMy%%$**emhM2vXGYb zY2vQ)7Z+XV=JrBg)y*jR69C1H8;nq$BmfuAqucL%q#r~P0jj4Orx*&ah zi^hhaQw6);#+?Ec`0DD%YTR#+35~V7ySC6J7N)f`v2{q=_HGhRDLxF##9feSRI0fF zt{)+Bm(I%i`}$Bzt788!2wBXZwC`Q>Lv3O}i0IYjyktwtUN4p$b_BPU2Dhy^_qkec zZ}J^U4k*hAEjbvr6 zdj_Mn&P|648YH5o&Q4&ju>*K|j+QMl&>kK@DLiKoQ-(#rNoKhG|;g;U!1{MdjJ(!6w6YS$rt-A>)?ULfzb zUu~p{6Hyjp;fh4VGIhmoq@)iNcJ6JaJLb?mI(su1S6C->R@v|DL!GR4U1S}&U8^CN z6vJtMK3Xgx4d!{YJi<*pw5+1lYA-J9S+G0J7fm0ZO2`A+?HVAfYo)lgm7`r%Hj#17 zXo7`=`T^pJi ztC#oX)gk|hm-pq>A^(Y&7rw4;FP`@gQ{A6C4=?pDUn@B)}@VjDEicjlsBjwxW0Oszb7qhqrnwKO!KuODf)&EfaY^&<#C{sX?eCT`Y+ zG-J!12fB+CrTgosR%XkA`&+)n0hKc8V)-;41kOx&losS@B=qpQw@0S6e22oJ2~G`ad$ z5})rVUss7f`7xpus;mYBYEYMytMAph>o>rxir${r3d|!yqiw z!--C|eg)Bm@UaR$K2}nd!bbJ)Tflc}7cFkIeIz{`x!+E!Wj*2RX#x*0;cVQoKMHmjruGD}A+XQD%bMf>Hc_x~i_@(_HolGer1urf!u zPBGwiAjx5mfZ0_Cl{{(HR1Ns8hje&sN0TKX@6aHuoJ$dOqgRoAg-v)8fL2PjXuGzNP8d5Fzi2`fY^bJN)o#*$WsB@G^o5 zuU)i!>Nr-}#Ua9lnM%b@y&;;ZDZ#m$z4AGSHh`1Hoe<@#IgSoey zLu!+lkS+^uZ2e>Cex-^J3L^U^tNipe7=L|y4e{T<__2vCApQiRPCgXm@0-{kZp%p- z%+3@4#YH&7#`G=zc7}*2IO;!NBEXStz#U#?Q1HL8#8UbEdI?`&LH_M)aQ1)qHN<~i z5&tR2L!QbIsQhG|Wb6pB>qn1SvMgF_7RChj1Ic*lq$eUhAJ1p#pkh((2V=zo7uruv z@OFTEdGZysfQ%bdI?HO3Z{+jg;Gjp>OjB|XVXD`Jk7Vk?iU_a>Gik=7ReNi;yP__y zfEWkh!V>hAt)Wk_lL!aHy(F{49nnGBBzm$G70{w??Pcvt3zg~n8+LZBV2gCTW^Vaw zavAoEv>bvJPJw~L#EA>T$*YVyANJQ4Y{$Xw8EV=tx%3pQH2JnKRvPSGlYY2XyYzT=r7w_~-6~Fsu9Q&Giu9q(bvS6;J<8d4ogMGJzeOjcy zdZo$yq|kruBz16qzd*(xEO}YJm@hdypg3$j1r!I6<-hCI^OvttU~X+tL2@v#IB%8p z=5>4z`Yt(vVF2)%yAT;eU?3L%GCg>udxMZghGW!vgBXGy=M@wC^){IWv;ZWmyr0uA zs67xjOsE{S_h<$hrZle*wpada;o7g=uKC@p1GX|Sx*<8w5g#yRfb9&ZgkQJ8g#j)G zqMm^iN67_D2Kk|qCy=Hf0Pytt`T}&!uW&%>JseOt6U}S+LZ87fcsY#u@#G2Uj>lze zplOiTh4>?-1)@AWwWVXO*nL^jIXsK)4s4*UZNY%hAgR63tNRBOY01Tq)~3GaBuB29 z9j0k=;Ptra?0~R}<2h+P+i|atlTlHVbcMwVO{&uHP&RF_jI5+2yW)Oa0|GzB?<~FP zqnML$;bFVzfhrERX9?6j_rUL{J`b!Q%gVeKi#%MTJLa(u4A`{pHtQH*Nu_w(MXR{L~;+Rk1Cq%CROt7Hkk$u>7vYCm9p zb*eO6W902z;Pi916HdjLPfwi~cfJ+gE*oKU>Ncz5v_3#OfXvoTAvD3mL1f1`sRkdz$3~58BO0z)5hYMlb9geGQ-CryH1NKf8W?SNH2MmKZuk-w_~g zvO)k9K6r&kz!Ft1U?;wE(iJ(dK;Xjv5bc;8LmuOD~?grSgzSsm{9gr#Ck$Nfaf^6d3zLv zCGZ7qM?gjqWQaFvwb=#^dpMwyDA_4-AH&v7&wYYh#`17-dMxE|yP9cfM)v5VD06q=E=wub zv9sG47)Y7!iB!NRV}Gjf%VRC8cC)$_XXmN!u1S<+<66Y*aWz9~6t$nzi;b?=_X5$6 zXd!naCb~u@ZX{HYXb21Z!;Ts3z)SKQ92lKeuEjfM458#Y?$N_fEu|ZILex=KIs*OqbrRYWKU6UKJ2p z$Cgyt(HQV;x89n*Cc7Ac+;e3sU6i9@lYw$H;IqM=u=#?Uvj_#EzQzSfG+*8ij+u+| zm=ITW!|w|tx-Q#;)b}PR>CY4|Zd<$3zc1dQj1jFrBrrw=Z5&JEdS$IZu8~q9Ph!^juf*-&PwhITsMQejqKgV1qM14lD-bT#{k6?6rg?A}d2tzx&*? zfkp}ta`t|@8T;JFHs6c|IrD@NVfm$=-Mu>tz-<6G!Wv@%(J5+!HSY5x11jdX4~+cj zk^e)_KkJCcH`5$Q?J2Jr5e4Qxe~95TSB2SCzsBkMnXUNBv^@TCfJb zetbqY+&vzdMS%JWLRYl5BQ71_cG6MY!q92ru!Vn)Ymx#>(MV z;lzvM=hraku7HT{8322uVD!oIGV>v~2W~C$!-x7MT%--tO(1`AmY=}n%iT$`M5sN* zTqiWcdCbRY=A;9&;TQB5G!D2TK;tn8bNMKM9 zftDM%vjxPRrN5Bu>keILCT=#2ldc*(0k9##g98Pfw7vIEBLx>eX!iBebDB5w>%VoX zBX7huaueLNLvzZk<3r@ty~NG?4z)sV0(<569mof;4eBy-*CrE)C2={UJ7Sp*CBoKN zJeX{LSk@UJIw6lD$i-4A1aD|j!e1+Io(WdHdVyx-CvPWtMJh%rBx?K-9I0#vA zmFYl(xiswIIfW%qek&)h*j;$Cy?{QxoRY+Jncl-7(mKdW+-)ApAJ+&d)F!-<1*uO z+Ye-{Wws|3y&-mYxh-7TYl}-Nwvt#b3{`5!9g6N|sq10e(5@6RJJbS}_CCec>Io`O z4}K=T&`EwiLZMPnwgS}PuO|MBYN{&gg6Mr=_`m*wec_)cC4Z_z_$$nl$?Mm7GF%;1 z_$(ZX-aC3fe$>cUBBa3m2!vv-D@y~R@qIcAd0>YtxPV?`2XFyBZ?>7ZTWbLw!T_@I z^v3B6cx#>l1k(!qn{YIDZ4`vu??aN;8TbmB|N4z!6*69Ej@Rgy)MZfve4X;to^qaS zWxb!cFKUTdB(;U4Ki}D_0D7xK&R3#-Kj#2j$|wzd6NKN0@GS5O{yh3`&p;`^%$?zE zdu8kHKBQ^8mzD#tC<}~g3KYcZFA6H$2*jvY>hJq)aHRhbD^Y-P)s!dg{TcGivsGMM zhgp%9oOz{uxkvL5PFSeNK-A6_Hy+Z5!0_~v;=cl3;Jrve7QKKwbb(dHM|b!2``T9& z=SPSk3yo??LhZIyKvsXDgHI{R4WuNqG`!5ucb1sT9s*841WpBS?=4(KU_O+>_lPAJ zK4l=v!o>yp$=5S*fiU}ybRZtDfVkKD@lWeFxC~MwAwPifG7xsr9DF`AV^3Lg=^9f) z8^=z)qVodOBWKO*+WfMlu79wf{>`XPI9kxGgW*HG06B_4oPo_|2o&GBY=7$3WqcLy z)|r3^9l!|eMn{G0#njNp9lQbIbC;Ak#JL@10dt7qrbbLrsy5wGTGn(q0*q#EbHp@y zINut5;OGZ{E4yBDErK&gE`kva;JMZspKR6YO5nV#vkaT{=tFJL72r2Dz;=NnWS=N& z1di77YNzNBLCiQXo`V?h-TV3Bl7+N7EnyfgYq7`FVw>zEM~Ou3cy=xi2pEc`8^iKJ zd+AJB?I`C~Ac`XFA6r+aG!)YVqwR9^-W@IcW~@vo9D0Xe#&|emoKkDmX73px>=7V< zLzQ3Vnke8S^^%vD6&da!-xC{4?$NJzD_GhZHF=64_m>rX!qjz@?@RP_EzME~HA4(} zVxZ=TAjPz9gmqhv$-&c!j_j4vy6?AJP(Td+ISD=IbTjBfgiXB-%0m6nuTZR=Z+ZIw zCT!I0@TSlXE?S$^;zZnLg#)S~dWJ#^872<6*T!*LG-NZCF&16UN-*#3VsisAJm?0w zN4M7ZB1ldMZJ0ZBu}?ckZr{L|y*pPVkA z@9ek7%b!n|46gPXm1BjtY9(&KKAZwS8U@tX$*OM>IQ2nlM=W1wXjC(u34mlyue@xN zM}X&K^IW#^^UOI)wL`izizZR~sAiB5#Q4!NPYAtJ};xIQ^`)0f$Q7RBXzGN49rK z^;|uXSBXaJmsY?jcJJGf(y* zpI1@gn}}|=97GVH37F3Az#sNV`H8oi>BODti=n}kipC47Ku@h2D`$tp*ZG(ecxKeg zuvuH?O2DwH^mw)r4v2h!@pY1Kldii<12lb|f$ET*biwODDlFo%>VkNc91l1Tl&S=6 zX&S;{XQ%EIAZn1umA*fdwm`O7iXyHU8MM7yU9TZc-vkS;#@W;2ZVgpgxsIZE^ zS?PCX2UwU~pl0?AnIlrrXDr1%TH-`ObUe|>&MSbRpM}jcI3rI|09s--sSw)fnd3&G zNW6bu?|Jcn=Jts9i&C?o?Hp9%F=?f)O5k^lA*ck8=@y7HH9GWwWZS*nrgNADXz2%Ci4)zV!ct z%JP%q?aF`ANPX@9qZLnAOs1H&x(bq;hLfqlIYtUy2TQ3;IV4ENYp zqn#%!f9Kr=?g+_9yD(HqWSx*Ok_pWN6={kN5w!=*S&P9?3C3EIp(DkiE!M9Ocb%Ur zA$8e({QwM+6Xy%ZgTG)L&w480z@<+Jq9kw5jVY51`K(FF3zJ z(anMOX=`er^%JphvbWks!u9<{-A&H~>i~}tMjrSYl(5(fvX{gWa+xs~G_?H$nyltP zlu|d@LWQ>BqUW9(T#ZcBD(jZ+ zo8$?r&|)dnZ$8X~y}wlW!1wwU89@F>_zpj)Tze|G2mE8a`gGfM18SbE;R>Vxb8rA_ zv3swCa#G-LFm41jq4Cqd@b>+8j_mIS*+KQ$ed61{AqaKL{4^B|u9pH$p)UnPC((e^ zwS+(^G^jT&tM^6mT>4;0sQ+>Q6Zm7s`1-57Bllk;(3i6%`0VsPAm^L z@>AF;PsW$YcLz5ZGz`sr^`r0Q*~guMLb71MkRD7hReDi5;OyLg2*;+c%_|`FKxPa< zQWZXi)R%rWqbQ9QpP||!DCBTH|A!Ujmx2=cA61kBCB$1gDzf}W-gFLG?@8w#Gvjt{ z6mQ+0=yVoEzNj(AyZcLdGn;gR__k1uZQn$p$+fBMPE`Bj1tQ=8Dt3Ya`5|WOy|+3b zI*k3deap}%!J+F&*PZ6+petMAGHEg+wGw+Aa*8E9w5g)e(2c*tF6?cQtp_i8jni_9 zewZ4vbJjfo5unu2*K<6d=ONOI7>jLT={5shhSeoW+ZBharr?Dl*Z{D!2U(2xT(6H{ z6{;jAc9Ls*BP7tiU~+=sIm=RXalv_VrSYVvLKKsBFE^@@j6{W^L2HW8w&##S0x8tz ztCKrq9v5ePfsm8*iFM91Y=I&7=pZL6Zp>w0IXf^`p`)xumm1PcD!3DnJM{shBB z%yJ~?o4dY|H&Ux>EeM0pTx6_49#`U&Tb}y=kGnVNauZ#)zvucCXU@8dMu5Z+1PBm) zD>0)-2!UuMnos`^W!f&=WtY!6_r8;NQub1%ZKb4)=ZT2De;eGg*V8VWa#JINU96>% z+dm+heDOO7dbujW+CBxc$X@${Q}b3#E|BvzQ!ndvq@;01)IK^Xmu# z>f!j34n^LMQx&=hM|X6%!I)xNXH9o!V9TgW;~ci6cF?y3L^Nl?mZ%Jj&Iuqno9+XW zF<^|vVTCTJ)&u4K@kZJHi;rN=@x|2eEvGj77l^@1P=k%jAEP|JlXHC?j{Y9q%+GJZ zeD@89^p1x7JE9Q6nTnrGtZ$?oq(Oc}hjDBHg%lItc}gIEf(`gL{cGYLYQ2iLHkJ@T zOgVbv8;$HoN4YF_%XKjwDtP7;(C2ks-R2==JLq<(^fcws3eSf2>*8VD%n&x_!X z)Ux^qDC&qOHVI#6lGDS5rw)y=4l1#^*6bFzAYc4vvna(F=-Q4pI1}Gtz2Dq$?+vs&DaZFHTD%a4U>qs6s-mH-XoQ6e=#?{6XyPN#*)g+mjb%n`i3#{OF5p* zZ6VYb+Bxw89fMXw;|$WBsn%DTCGR#&3*At6z#!H9GOsc>SRTRw3xP2ori$Mn4i_SF z{IDlmRzl%wkOEvCT>3QvVR@-QKdOuDQtAcmEC^*px)UUb_+8GB>a@FrB6~j3gVAy@ z!Lyrb;d2nwT;Y-j;7%PJ%11SKhjK1PzM|Q7H82K0attU5o@2VnwQ`T_*xsWZ2exUp zV)^Cq27}HD+$$O}6PBS4<)=T1g@KCd~cc zWi0VsR9cA@F5r?B5A@^vNENXBbXA zPxGk-G+()d=>W`oF}(0WTU?q@;KT&$X$7flXP}> zmh1L(&vy#lN8Bm&_mL@7t@2QD0W@^}M&BP}ia%957Xn<5?y5?phr&*)*>6#fD9*%k zvWx?utWpu?G);8|;YwEFyTj8w<@lbWGWZS#pE&ZSu~A{|=bj*KDa#F)u7o@G@VLQ8 z^VE}poSC2vd4}&PV@3-S3^j!pz$Z*RF;F7ZOVdG!lp?(9bxW5k{!dlf8KXYG!e{IM ztW1Bgy!}I+-oESf@SSbR6{`Q zf+OZjS`qZz?8lNGC_nD$O&j{_5B;%jL$Ds)HQ(Vx90}_omiqVV_WqZ38&JF-HTYZM z{$t&Cyh;9osuSk%CXu|Mwv zs0WTH=xsqLk=79Tcz&HN@`a#X0etUb+@i3TJ?$Qp0FEH?YdX0%m)6CSyLH z8?=mlUAuIsE=^K0L30R`?rr*Kg&o^fcKt1X;5kvU*QHaIN zH=)auk6o&#b(^I%3I6bF;6LuC0p-w#2F73@7Um#yAjQ3n9G{)zul7B3?e?ix!Bi8Y zA6`js#H0|0yvhg>*dnZbSkj#4elx#CZXf=WtUTDw{S=lbO`29BkVnX&vxK)T zacbLy?m2vDeqYB~JILF5<4*dkR&Kj{i5yC|@zNsj&QGDe5%~3NHHY?8d4uGUd&m!H zGAF;bm%Eo;1}wRZ@xv>ehs^EN>nYq0^M<@9&r0!ld8O7jP`P3 zPu9z~$%7-#7$Y)LdJ6_HZks9C8xQJ!-oDgBV2g)!WQ#mya$d#n+T&6+Shss{A(&%b zN^k5;i6lHMyl1}N{Lbk?WCAHIL4*B!h1`MI@N1F{|92Jr+co@8gI<33wxo^UBm}>` zg5SRzHN3qP|MeC8zbfs<%2Hny09yS+Y5$JG`RnWXkD&$sO_~2L9(BX9u)F)s{ro>I z^PBJM{O`;BFd1J5ChG^m@7vh`B#Q;|w<Xm3*iyZ(tt8G3%aY3>GYG zcULAR!x~47t7t$j1FEjnz7PoPVGM_A5Hv$+@GY@bZkR@lwmRDV-xPU}@}`*L(1>mr0l!0UXf?KX}aZ+SS? z|GK+#s@_FHN;Ii4-*Xrn$?*ifl^k*>MD(J!k`8ozP7N90|0hudH7;)B@_I1M4cxl< z6_K%Fa#Cr5q%yS379GfN8STWYg6$v20|Y`Gtfm`JeNyBevCnGHnaXqb%G0iPs3BEQ zQ&Qb!1IcAonR1KS;cGWNcT@Tsg(t7K@ zO61*EGQqZ)E!-{LTm|0DfkBAQJBdtosLZ^MNQ?V!cRNs6V%yaYLt}h*a-v-qfGq?1 z9o6XxK@M*VV9>xZusxkQimp~*r7l5^2G^}-%oDN=P9uRA;ZDvLwRsSy^2N4e!+Y4> z-%1h4ZaJqu=!0{m|Ec7&c@Ew=w|@cx?297o8r9z^&%f1e_{|?nxBC`0RL(a$91L)e zaFuxs=jmqy$A^>H{zVCY+tI&h5+D%~6Yn2tCI2(#TC?|`S-dc-ZmBT8?1w|?Uorfy~0w9IW2U6wgb_T zDb4ip7-ik)5Y%}hPE&`7`uVn~@sM1qd>Q=lWG20y_~^sxX^+;b3~>}W)Z)6^U-~%0 zL;zm;o5LQ7s2p;qEf?o*`aL=1hZ@AoG?gXrw8{7allAxb2G&iY=jshwj*|q!gB~9k@QqvB;NDm-N zoZ$Y>Bz({26V zCp;tDlm5V8h=t`fp?UPkFO$8N$m0dl=B~_7O1=!)-u+F)zPVEaJ3E2%bm%HE9jpaXXLQ0d)_xtERJW- zJZ{P>i9m4UJ@*i|0}%b`(e-kectc8S82wblx1j|Fu41>lJjB(@@uRV`3vLMY>J_gf zU|%C>MGULqubb|S9hEcIv^n+K!F#0WaDL!k#PT3L<6j}H*CzBLfMXn5x$A2T_l~i6 z;O0FJ{?$6|FR$4E%k~O3q!(zcx~pfHgn<-5NK)glx;`{Kl=lG^Ya|5p@l2spTX(tR z$eR%cNLS)IKl9{;JGv)|ECg0Uq*s(+w{kOhwPbr4h~`>MNNOE2lfsd?0N?FlgmK{Y zkZyR2*Qzu5Pqq6z=f?gY`8eO#H$5Atw!dAQ;{U3?<-#5)D64mO zu%GMOhu!ygRpq~}Z{Gql0AUZqj}z!t&_(?F2ak;JF1lV4tU(h)Y&b-P>?Y;uQ1C^LCjXF5Zx zsMod$ZUgPFE?Y)_mNY+BzDBmM3ZWSYOY(l z!?k{^j)eKpHP8!aQYTlEZg-FhMc*yq83$+e1)F)_fiOA2nU73fPVJf9mMm&!1i68m z!z|-w@*;wB%rulG9rZjWd|acERwNsl*)fliy@Q|eL9g?1&*Q~wWh`u*?v{VdM1YEN zCw=niBHok;HX_aIS+RZ91(9-0Mh;1FLBB&k-=xPy+5&9$#ObeXtefJJzcfwk2~7N_ z`o;m6jG|Vs70_2pb-?%vPHPFY#wvVp{}=V`i5BT8xkP_`bS_2BP;w zfoL8&I=nhSZ3$+4b8}$r|y-4>c!UDbOj?%Yo=}#a&;wKv)x7rg|7z++7(ec)Y zfHkHJqh>MmAJ^MseOec6CXfW9>syIiBE7*0hYa~fUozsg^9J5IWyRe(vfE=&=^a%E zUTGG$mmKEeS<3uSEm}0zE1StYWjxN{IqwV6BcwDSwwnN=J+{HtVNX1E$F9h8`_s)$wBKBlh5mMPi!YOB_s9F;34pjCp>KczXD7h^{Qz-&H{XA_x%~wb$Wmh1T;Cu zNahkQK%4KCS=G>K_&{vufYqxUne-&9T#e@!=Wuh!=MlMi+q|@9_o%d)a#G9+JzPuc zr80*a#X9@4y8e`IzL!_#}IFtArD!&2;zm~}Y3zQkl78&R;aYlEw&jJ7F>MVp^ zK}o$v%zZ{0^aRHKUhkb@Z1b_@NxH>miEnyJvT4 zb!}urTGJp@0l|)Lm{F2u%_qjsU!vxS)DrqjeNPFY)U4#Gc=vR31eU^n8Rtq3Xv0dC z6v7$Q$I0TrWu$J?-3~KQ9f~wz*6U+g7fb|2x-Yd%9JQ(3R zvt45d9s3%5l=;y>q)hzqB8@&G0mQ`q(AGnnam^*z|B#j3$mNoE8_&Bh~Rjehd zoaH{xNjW;;jS#pXv)Ii= znK;Qf)zvVFV$Qhting{<$hNw_l)9`I+ExS~J?q1kv&5uibezltY~NyzQ*&j=x`nZm zK2m$0xVhJpkL!;@ehhKmYr87Yqpdm8^d1>7OTS)=+$YTi^&j~fwxgYKEP3v8irX6y z()fA^MWr7$^Z~yxc%)q_gtmIHY>6|X-o5)-)S=x`$h?D-*&*~NM;Ks}pU{A}v=dyP zS^L^0?x?2}T_c!bh_tg&DSdiG_avrMMwoGAE=qausfNY{S;?Ba0?gb~cucUWUJqiP z-K_`%FAuO2qyvP%kdn|IU=nUko^;wExMv=k_(brPcEE1$ zHfL&aV__Qz9%cOs2#3S#af zk9QkpohPF1pP4uwa(C`(jyNEsB?df9u!C3cw zoAKos{+Dn#{HD+N;~<4Y-^cOg+j>(@m86ES2{fy%=>TCmZ?4c^{`M%A1)qngp*KPZLRH?z+zL{q-fpeRelvt%pz^^G`t}(3i+{0w zv_5?zcw?KtsUKkJfYF7mKI_0HqSsv;$h{V>#CLbdV2=CP! z=JdVL68y(b)Wc*05F=of4sDI)`RGNlc(e;l{xc`+D~OzPL2hJ8=&vB;5aD!!wz23+ zNT4%e`~@lJ4S=a{Y{i}rxglLeF6#FnhU^*XjQT^=#=wJ4F^Vr;eDcxb>Q?g==mN!U z5AFGRL+#4rJ|{}D0SudhPpfO7!$>^gM2Yli0enkF_Y2)*~DC&%_cUGQ* z+_kR*=CAYR4<~^1laI1~(*orQs52i?Y#U*&eF&STA-JZ`T@{R0}NE6e~)4NUYs<;HM01;k81AG`$(63f1W=_mPh~g&PRIZMMGS40k)7Y z01Zf=<7Kdi!bV*OGyWIo;fIL-+hY}wM889K06@b6G~*R|*sol}&=05wWMg6=81pt? zWeQ(Z3STW%0A~1t1(>z$gFvDqB(R<6>BTFeoa50X8e~AR-0m?dIF2&-Fb;Sxd5{bJ;7|9t)dbU(9(|C$k;qPBNb@X{0a7Gc9cR4NR>*gT(7mOosF{t#LIa!(9ccSyM^Gw+Hy2kJZQ&)SAvzb^})54kRA zQOet5fNCUr6W`n&TrB0jwu{C6=5kW)2GhtJ(HM3pO^zy9UM2h@Hv5A~_cPy1O?xFk<272-`AM4POYsXwRq<2YM|D6a5(>Y903XDcd3Lt*DfHK&j}cp9lv+f~ z?Tjc{b%oW4BrfI#;@;|e4VQP(MQsI)&Wyawg8|(I3KCd!?azdBDU|q>YIsW-kww_W zIaX=y1;zfv=+?2PX2g8SDBf=t#51pJq3?=*j~2+KS=o6T%ubl!)gmUZq&;8QU1uN3 zoAkEXu4F?tt1NdF}JG%d^E z)~A6=T?ZQrtxrL+clvEi6;2EEE&G{JmccdCj&4j6t$C@ z#}c&0ng!@u%9Nh z84Qi$ce_;fZuVa4|IpKYB+R@W2JgN2v$-bG_^z6tX)}My-27v~Oy30)(#pOS%wGyv zx%8)k`OclGH3+nR<4eHSlx#fA=UogdzV%Go`pst=;o{1>3pu!=EdZC}hg;s4yqOR2 z{0EZb>^~tkxcpi$KPoL;M!(aZdhfiMcU1fe{s7pk%b-X7;j!ubQy;oFXMMvz&0cTNvwsI;H}3S+gAXqp81GKOOCN|DXpo`2v}a(50e5D*r4j~c z#suUFl%sd-*SJQ~2ZC%6mn8HPyPNXMEWlZGTk&(DovCZs0DN`qaP=HnA!|)(99V60 zctM`A@bEPs6ovZJ7K`oRg=w6C{Mz1Z8&c~)fhfi#?RQ}mZ$p5?*Yq=~`sndUy^$Rc z_W>7+n+5*G4(_r?;5q5f}O!Ls= zh&#>{O}aHX*j^lAKLt5>X+HdZu*h~|cTQ_AEcY8rmPnpT2E!CiJAO5P)A9bgsQxrq zgpAUU$s!a@PBS`P=+#;rlFZGALOlQ_7DQCZuC9lJ+9_wEKRJ&e%i2ApJ3PdsRc5~G zo%M(`<4LGCPxNwY_QM%%m-{-X4zXW!RFd}W(r~eet#HN=q5D)~fO=%+IcaZ2esmGz zhP-B^%%7{bt2j=9ET8jjv&{#DJFi#C-yI*jM4a5IP=Pm{~N+>a#C^|8Bb zVd|V#CouN4LYtpbMnML)Z?WxXJ^M9PN;v!v`)$_sr@|-t@Po?n-!@Gags3t!W0l*| zX)oO*?3u0b>kzI3xBpJf|HWOZ&3`E|TUWb@4bYE3|0BH3o)GW*j`Mvp=>86?2AY)d z2HttFyx)LJ9&UaK0R+N_=D9^gsM^hx}1MD*fs&e8<9TuuR>6 zlT;O!IS7NaP9eE5m24pBwl7$6yn{{OwF?B2z>B>@>wjPf_a8m>?fepAR8@yiMb?SlsfL5P}{|DwW$Xh;ZGrzv?7H@y7 z2ClT5&#RvJb*u-$3h-^iB^Z7M1{3#527dzp-;Y%urMoo%1AsR8fF7JWM7Y= z#e#1&zUz+*Pz1mJ>+t(u@XH}WP@vv4a9edhaRvH%88?n|n@>D@|9q-Y`0@9*6$1DV zVh|)BQf})Cjh2JIJ53VYP0K$UZyZnJ?;a20ie|?2trN{SQYCU5ZiKtuPli$TR zNNj+QLIp@KP=tNHgJ0gj)BBBqL8XYlKTkGH;^7p6_W##!KfDnoY%Sj5)pfE8P}3m& z7fxw-HIKHZjh3ea*6cS@iC;yf4T~zd$mwi70@)^k6JBEHJ@}dxj5X^-3?JC;&!6G1+UTJlXC#jhBRY+Z{M)DyvXQS@96EBG=pgnHUiE+N^Ps?8h36ad8^shDxH3i+4K4 z*Op*w93)Qy{X|uMC@^?p*E_qA0_6}6vQ8UJ;Tz>II5z~yOK`jYc&AdqvI32BIN|PB zXF{wl8297P>QD39&9{-sFPZ`v*#3~g)@p`opW5xi3(%V6A}kll_VIe0FW8iSRE;-y zNCIVD#bI0l*YQFSSXfc9mc|__4sLzZPZ00lSC-A+N(;~8KLWhj$MFhp-M>+yHb2#< zp9KNm4R|;?0KOG-!(}jX`+B&rS#5;4-=o7>*sc6c*??X!Af5;UOXd`tcNg@Gn`^{z zK)rBZpiC|w)Ash@0!d$i-*&ENAV%sba^hk22Vr-QuB~c40pj>wk2Zk*2d`s6mjRkI z(5*J%%9Xp4zF5^Goklb{jr2CXpVgz4mB8Xkm8hJyt+QjNC~h^)G|I((pgTwRvrUae zbDLMU9d@Z}*n|_rjfAk~gs)>M^rhO9uks61{Szz^khsg#-aIjq;jqOMagT8?n>4lT zf-pxS;C-QR(ZIIhuGWuS^*Xv8;RdaU#D|9(6~0)Ra{1toR!PitqY(8)@o29>aV#3- z_+>r=^e&rcnv4mO-#`fbKTde0tgbWYQ2xcj9SlSu$-e-H@h>|YvZznWf62`-UPoBp zx6P-c1Li>lhW|1!^XtUtpML$*881MT&jBJ2|Dm~ghiV?U`lpt`#^u@OIj~p1&#M-Y z!&nKHvl)(-8ZzPFCo+I`A%Ne%54Qv70Qs?ogRzRf+VZ}4NZa)3b2 zGvv_&Yxbjs&^!nq|2*4y0X$z}Fb{BHcw80$#S(x*3?O6<@DuSJwoibf2m=vdg+<{6 z6m(TJ25z+nm@3vU102Y|{2)65UguM743`L)*aPNT=K<{aDK`Fi48+D?ADfEs$35AG zy`_%kSrZ^IJ~k4v^jUIw;4c_VRY}dcCZhUoa zY*>(NvWE72ydnd+^A{C}&d6cvd|{_QFLqgrC9n+$l@iP~z1(##b9tRPovs2-NqypM zJ)Lyg&Y{Ls-ryE;Gp@Cu$A!e)i_}jr2#Y&_jTMqKNK?r(I4=+^$|&rN#71g}tof)P z)a`P3=`?-ER%tgn7o~CMXtTp5@x&m(IU5$KP@_a>hPYVedzI-7Di9Z8xU2Fh!z9QN zwV3K53KN;%dS#X+!swXe@pKu)+cuAP&&__}Y^(109c2LQ@H}50M1FVghc-?zwS55( zW!$MKFCWI1$*eBA%}affl=bEr(Ss57^5Rh4*)c_d2cDZw4_06gBX^J4yFMyM$FxDi$KEG`MVf6W7XudiQUTs(364 zxM*z^u=xetx39Clex2~w*ICwc^ZA9J=8*4qcb{Q%Y`)vp@B=nJAxKm!Dg>r}fc^>O zwYcw3M?V!?K+91^6$tI)-ZNAlUg@&fZ`_V^n^>kB;|YaY2*w+6AlXTDPW8YfE4fg( zGMen+k>eAKfO;hg0ICrx)2gp8XgpJSINMIBiH{?{LGLL8L3mY&_Hgq)1sNOZLy(VE zg&+;K2SU20sHm=$%)VPFf6pe%pf?@bHag9a0Hg}L67o$<00!!t-J&L8^Auj52RsvO zzx4H1mr-B|>`~3#Rae7c9S1DuyCA(kYJGrk7pFKtz&w!~-pf{)jQpp*4njsEP#t{i z39@GVegO85i`$Q*<44VtAlVGX1aU;QQU80aOwJvjaD>3<$|e}49G z;QaaN|GUo~%KFDf_8&El(5f81N*n<$BRrh@O*J4dL<=VGq`y4(3E0A3*-W>BJPdNu za$u{A1L^6p=oZjr(sbo(Q+SI@2alB64KxtxrG#diL<3Mm7-K^0r!WY`wh4!e%f^Hpu=Rg})3 zQj)TpYXzZr^k&UDM!<9SoSygyE4BIb%nR`m8$FOi78xxLpbVMl?X{RwZcXHcSe*=_ zN^JftuG;jhMsU@}AnGjed~@-It8c$58+3?Z$Hgy?KJI5%4roccLZrHOi1)2B)qiVNQmuFm%cGp!!=0Vg46JLCN}L{z^it#C^*JC{y``L!pR9F)l4dRqkvwl zz7U+WsMV5eVHwcbihzw*i>qd&Lo& zC%vD9&U79oX&B zJYhW{P@4(@eh$mQ+cr=BX`+?i5?hEy*j46fo_s(ru%mWj?#s~(@CN%fiL5l(H2xrQ z6xGWHnErCJE$=(n{A6o6)!GfLYq9mc#_@ZJqx5mw?M)lPq!~qO9&cZ)ognLo7ds)co5MQ7?<>FCSE99?}S*K_}kvq z(>*Sw?#NY=T)0$+r`YaTsm~ja+1Pc5RfArsS8&f9GbG-{tgzNa*U8vM33c2X>86P= zqa7UPCJ`3pwN)z++{=SZlGbXS2MU09M(#zeo| z4E53MfDF4i*LjY^Al{XaH|z#is;NF4YRMnk*BG1f&sN`oM^aJdxq_|um03-)VWm4~1P6NFtG8Ru&GELS~ z$oiSF^0o@^=$h47JbK|_Rg|5t-WsY#8Equv+IUIG&2o+wqz>FS2Hanor;%gF@Wp{y zEp2Etnxlf=!Hix}Am3rImBrg;!fZ!9zpi4Lilzu`zB3A-XkxfvpgNx|yVsb_Yl5h_ zof7&&0zNJH$Nb2JsE97SmgH(<-itn%5EwzK?QRj}UZZ1wj}S}BpU!1neAQ?DdL;az z^Mb2`XgXh%2fq}0{ppgxhwm-f?c0{jI?l*ALTHKtT-ylErTt|og1^NYy_-u;{C;Nn zUfxSqC0sP_@^xluevvA@&v`9^z7Mu$x9$_)r^h6kne&7f>-ukWs+kBTd`D?(~$;XTW_`j~B2=S>m4C z2f9m;Le^lylERASZf$H&M_8i+rd-RvTx@%X_4|kfC%=u{=2)r`>u5JhJD3&k=xcku zTy9C}QB1`IuM8F?`L&d;u9WaiecMP>;{>}N$%z9By!FQ9i$`=t>zg%#bz*)6x;HK< zrG?EA0&x-nBmsA+tg4rDJ9K87kp7c`IS=QkQ?yAg+vf80#^L$Oa}A9neG6L_Ubr z8?DjR=>j+T@&-dnqjyUZRq4HUJGD0{?J~eglZ9{0t9N|3=Z3IDU@LueU>ms4yYL)- zXR7)sq1&O6MyRvPc!mzEEQ@ibcc27o!AZ5U>Br6Xt3&nqdd$lCuKJiz%a@CqWX~l8 z__!SWE*lR_SrTLHhbXf}Gmc|o;aB8#{>Bg1=R72b%m*ON? zZ~OgK_ZPz4dd+#d2kSdA>BeejSZpDRao8-^=5dDi*(V25f2HE_2He+>;+_T$VJptf z(yrui^7`n^3ejLf=(W5c){Y<2X(M;>jEX*`{CS}y#5$2SDX`Sw_~uLW$J)L<(tg+Pj7Cn^{8DeO z91Q{4$K+%QdYFyyk=D<3Kg#Px_{Vu1_go&)F#HRG!Qj8dKb63Dv-GDjC9&!zJ#=QzgRA{cbsri(|J`_u|4Zplkd zi8uZEOmRpCih#@&a6lgj-~QlcRs`Nx=Bb4lwq3bA5sfEeKX^6I_l zYm|%}4-Ae&G>4Ns{T{cDv0fY@`zPL@h;WCT5>`<=E;-*VTjW~c1LRK?I0;V8T_T-Z z79hYU(yW2w(``_!e3(P28^%j`qGwh#KoOsaa_4Oho!f!qUiC7V`OFo~zl0tGpAB$S zN@i!lygj|1o4jbj=sAuxBwl%RkGZ2W1mOK@o80hmobFX6%kxb%^)X=YT(<*R&Utw5 z>l>)k6a5JvvAi9~<67Mhbp`<{WJ#Y)oaf>coR%2e0y~LieUSw6HKR<;T*#Z%7F#^2 zdvDkZc8exsZeIMYmeHXF-8|}U!TL6e<`CJ-H6I)kl3J%eKV6ahwH5F7Jqj7ci&R*P zmEg6zJy1MYa5vUg@+kG^7%187e!*v4H4jw8`X~F4t2y0nA!voGx>CBKgSKr-+c8o1 zx|&LPVISiFM0{!4G4*JNsS$gBdF z-$SPxnRn8cbe{3+WuG(KP#QKGvcu!perm@G=p~o?Ao*Fgvm{x$mavm2-C+IzKL4de z+kXu6z9h(1y!7P{cMsn zF>F`@dnRDMm1*%0BiMMOpjm|&!`L`nf_^Y(E{GkB?kXR11&4LBN?Q=CO6sh@Tbr@fD_$HQg{ z3d)V0OK=RYtI%2J!K9VRnKRqR?#Y7m4xcG^Hlgv*espF>oiy};GUe73BR7~988e^# zse0~it+P3}bDAV4B+L6lNfhY;#gizRj+pXbeC5_H?kze-FcY|$aI=P`ydl5Hd3yu; ziFFtc;PcG5LoO-va?v-vQUrd-{s-su_Wvj6^p`f}W5)NlbGj;UqBCxZs*j|Q-Hk{T{A9>i4aNnnh^c1-Ql6G}Vv;Qgq?6XQul9!OA-?8? z&+3^)C>VZTpC%*#y&w|w3S^elAF9?xRfzgtGjQ4(t-JKEi#jml+VFfKN+2+CTxR5v zIx9E3{GPr_5zK6Z3+~%gY`aOHA=$<|qgUkuGKtrT+m5f2FwYpTba;&eSNFKaRda>8 zF<2zoM$}1iGNy17wikz1@I@^3n+M4W`n)nl#e*}rNSPBmcUy#4u9!r(ybTN-52-9ksrLLB14 z^}OQfsxEOvrQLoD!81}6_PZT`3SJr0o-%)fM*02fz`aeLu-K3*mAN^`>yh$-fpDNi z>S!&1nk>}BP-v{!T_WMSD@u)mz3ziJw9;IvaiG5(1NWf$oIF2-9QfnWxZBlU;cII- zgMsw|K8PL3w**szS-#x{K!Swj?-oDq6;DZ+h1>F5auzi)hT)adhc6RC-X2g!_U>!i z&i!?LP#_*w)^&TmhDf0aPuL|do+8}=ga3TkK>=%h9_%}-8pYMg36$}jEPH_%Bp$zZ zn~FZ}xyZk_!#+;?6Cln-&G1zgW|mVW42MCDwm&My|DAJM$jCKE>loRQ!*hDM0L4&Z z@b(^G08RT?+``uGBRc-;=I;0BGz64hOfv#R*v;NiLdn424ZK+ z`m#Q5n!1=~acY<=N5x}IT)hDbzrRTwYhge^x$ox=dcI*O^23=z;}v#mT~Bo}A}WG5 z%{Y13L05Tc3+m=0-IYmB5F~hZih={T9^%TTgFRN8Ms!#?4Z z=(15!T#s~e#vC}<51ekyFKoMw91-nD1>%^aTXLYM1do&!H1PudTIOm&c1|VeAY4pn zAPsCz4kR;=m9TGoPz=-0^sb+>8&}`RoRr#wRz8Cx-tG-l)P{>u1Q)xznm2v7x^>|n zdkFrx-Pzy@{1SQH(ArJ7#j>q)0z!`*m<9Iyjbb$v7Z@M4x%ermt-9-%zyz!7dPDfA zixem$K5UKNJt|Wyo?H+nyv{!N7e7XLE;W2+L zqFQD52-6wS8oK_&a%Jceia zI~BdANg_@9q5PA z>CfNZ*Y6Gt0w2zT|JAqm71jra)c^k5``H);JwFV*AW`496tFJe7QubRJOzT%g>~kWnC!%AA13(+dP~2QiEX=oo zB+bZtoF1zpKB+Kc2VW}-jJTXlh!FRA9nzd-`q41Ew7Ns`b3_;?8ebG0kk2$V8h+6@ zOt8T+zCYKaCN!)T3s%w1(uLs~AgIocj^y+>$g_dQ^FvQhp0StN73vz5Wwoa(4DdTYSQ(^80A-6usJ~9 zYhx^dNfS0i`F$uKcERN@A zmw{Dq;lha%bkTt9Ei;Szn2}@|0<~9d&uO6=9u4jKDsI`aqN3qx_q=G+xu+XX`Ce}_ zCcBzpbX-mOt{?F3_8=n21DwbjH#n8cuM2?0_5xF1RNH>EJ5#!nF%1^iz`16ScJ4k* z{vldk@CRd*ApGlX=fCD(6(I*uhxA{9r2om$|EVebQ%x4wcTIkNtI3ux^HeLDqd9Tf z(l!@zE8U&HeJ(zhKKS<&(D%|u1UklFj`(5vw(z7@;zv4I2HgUk{qc4_zNLix9yDlq_KKe?3aT ze+#?r;-dVuRl0FvQBM(3vk5UgA&VPQn}2Um-TYXGd0E!@fz*7pn^LmQbz%1!RNiE; z>VDh}f!fK;wQmD&$(~O`#E^hsAG=$mRI!$68}~p_FZw2;$2zGm_!WW5xJz_9PY*72 zUwch>l`n}vy~oRlo3Y+k*Lgb0%Z@lLk-?STULfim9cr~DHvMBt9;<9p=LMVZ42GVE z3w@f;JL^(_0(}a^7qdpyz0K$8CDTsAKuq6uD*I~7G2T^*4;j-eKG^PpX~S&Kgc;el zhzU()b9*mjD1Mu&o zzA*_cwl!VA4?eN8tnwS+PfsQwDllGqWZNC7ngP_F0c^# z6f3v@R*+B#Mw|X^b~C3gLAC4razR%s8uqzRFK{EoL23(uE+3o-h;_CQjsISZuE7nW zcnj7+3Z4MM1OPQ(l5)XT@||d16TW`k=KY0$xcTl2Z@<@-OAyhZv3gh5(um>b7Ny7M zPVAsyW&~naoB2YQ9t@P~z97L~ehopFBOZ_bi{Ygc&`QiL)($g33WHwgcbt>XRauWE z$UV(eugUa*b6%@?FrDhOO)WoQKz~Nl&N>Rz5k%7%Yx9hck@EgH`teJIM7%3>vm``P zAGWK|7rTV(Zgqc)dNSpX_x8eDp*gSAbMtg+o%imFa7mT`303eZ-p)pdB|wG{9|fow zb~|Dx3X}^uXMEaIy|yOTN*VC1UD>(Bg_w@OA6uphBPH(S(f zZxY_0a=;30;4&+yfcSe8{=VL?|1y!nmHEA72CRUGzeU~e6hDp!r66p<*!LcZg9Q4| z995UiHUKu7fIA3f*#ky^hU;$mwne=O(my=*r)TwkQk(yqX9X`4)coIUwS>>D);Bu7 zu{dC;vk?ZrFD7kV(ZCY|AO-g@Iej4nNOU`c!qj#Z`!tc<` zJ6FT0+OCdJT4vGbb{(h+vE>B;({H}Q6EY;7c;x@%?#-4Q#j>s4dp*Uz$9@x?09}IU zB@mtH?f{7%glI(b^k>Q=GBYwVDzoa}d!J)=$}G#%B? z;xSH#75G9^XL59?KOGNZd2PA0B<19AohV&xfMwkHV+YcPy_Fa;8yv0GhRObmLf>Mb zrVFsHFVcH=4%zeS`Wk&bW~Pe(sK`=60X!72e&nF3lXWIbULNtJ z#{p!bVPK+%DL%T(3G<0)f1z2EPj06V0iR`~>xqR>GpKvszuNKsNo-~i5tQsy)5-j8 z9ZuJD?SoZUccdW+zwYduIP}~4okIHN1q@0GWcIR8nF0i9NX3$sCp?%5ajOIGT6zCi z8y@zdy7=GjfbZ5H-YK!qU17VfepA7f@a-=jG_T($r=Q2P_3Lx)>)(ry9`>_2;j6*f zzW(E{Tk7*g3nEwS)504!OEmD$an|Yp%>J=Qfs4+?WBmKh2>g*i?wVmD#yxrH{21Qv zDd}H%p5X~Yza0P%pcpsb0ig~T+#K&;$S*5RKKG}1EWhqgi~$*mp8K1cexj6iSBO+k znqTUJzfrbj#K$*YA)sKVwn$|%e-$~kgUPiU2qxEGE}aIFu$!hfJ6xu8?E<)PaLzLpJK+Iaf<2JFYns;fC-S_VZZF+* z$Uqg`-QB^s{i>x>k`ENAI@}q!xhGXGgO%FqaihUcc#{aL6@5BNG<+sk#!$Q_nx731 z#4xh;1`;Y#0oevM{w>a^9M!0wJ{X z>H79(VWSVlTWyb7m)g5W*0pt+smGkV*0#De0jz2^(Q?3SN!Bw_b{YHT=VN~s2jmzY z)EkH%wWY$J8FG#@<8;@6Z*O41DCaQGZ#z2A4M!{{GN(OW99(bAs7W(}kfTeDK106K z{mNhVVJ!_#jWafE`NEe8(y9l5QTcd0$rEvm5obqx!IF`ilsLBRKDAWI{MIb&nI>630dmpTr^I|H3vyGHZ9Q`Sd#j`K^%4%CKD0$ zyE6xBxcR9X*}qja^y{stmO@yc;bj0oYVz!k`uK=seE~xa`Q63y<2(TJl0T*g3;k3L z7pjI0RYQI%k^uj3d3zi}Nra#<=DiE0dIcC93Z@$f;{0vx{cej!^{es69Z+lKxAWkq z2z*xp!DB4M{=ny;MFW!qyM9#&H~4%3N(g&^iTTkwVc%mpJ|*U>={cBCRV?TDWq$uX z%+psP^7r@!^!UVy4$v|Er~)$U%$@S;o5%GJ6ZcP7i|cEAI{se!eBy&uveE!FOS^>7 zQw@VxcA3@3p(_sOI;d^ar{w%<<@oM3LTP`DjI(_!u1qBO06(M+WM>%9$IXuWd>?eg z#4nf@RM7X}HtZIUJP1|u9^q=K5hHMS(dy;BvQMA{TU{9v`Zccz?7RrceR~Y(VF&rX zV+o3AriSS4Bf~hg_a4ChA}Y<{&I~UtrVS9c8!=kkv?_cb2uXXMBSCT!naOnVWKYuF z-%=m1eSn#a6Mha?r5a7>IR);B5E7&ho7ic3R2I$1wS}SDu{&NlbkC~}-9}6IkWl5q z9|U#W_k0lw`p&L*a^HDCrK}_r#mK>#w&i6cTgl7cLC=LAfy0b%|E;I`~4KT zDcJT@i)CC#>)1v(mzUMSCU=jSG&Z^MYR7mL=sLFJY*DQ-_9D=U->%! z)HZ_SA1rv-?;<&sRnM>lOmi`a<*$C-nyCD_P}Dl;rnGtYLze9c2mxR!{YcHiA9HTc z!rTe)co%|K^wMgRW>vHJ?K}cFL{Q~|i~RHT9X#P%KSczc@HfK{+#<;Wh2sFYfld21 zjQ{zu`S#Pm;f6wn-JgPlD;1a!um^-c_4}VfhM&%<`aE8@aPxy>lUyW+^}m-lNBA6g z1gnFjIC#Q$3>gG!z}lqzE7aKOTO&s~Lqi=53#a1AnC$5uiN1}2@+t-$2yuPriMqHx z#lf^nx?On=dI#j;H6A>Ei}u8vz=+X@5Dz3m1%bLr$9JX;aI3yU-R}KJmkrO3DX)lj z%P_|V{X&N4fU*S@xK_)Q67m9hy|z^-uS7eKTIb>spp#kMv5Rx z!f5)`un_m_iitM_1AsFG-3wk*N^9a!<8sZKOJber)N`4IY4g+q8v>G7WObz&rQ3A3>m1R7}Kc@F}+>hwG;@|fLje6bH(?*TrUTsjg7!h*T^SetU5 zSQxJ~NB~F2cV(UPI1l@RsC#$WSCl1%mjkcf(yKMJ7wu|Tk76iI8*8ccB{VeZKcD7> zDt2PNPY-;O3cf*CY*(9zLP5rT40Ax~7anjr|SM36M4k5iE zIuNTSZEp=|V_%P2$9Gj+zwh}35>PmKlfV-%<2`>wY4x$YTL7_)fY~$lIW*a5ph zP_*8?rt^st?L{n(YDXNG^#SUVDI>Y6$ffD>LPxkI+$`FY>=h86&B#=8%+l}uRxZ0n zmW7dEuHv1oBdDCM{T{g#!p5m>oDKeVMJ@x~g>eP5eHpU8DVl!+PTT`82E|lY=`Pvs zdde|kL9yL5Dnz#B&Xo`74c|J%8?LA^2$XOnF#N_n6u7}lG7sJmPDcpZ8bZbZm4P_L zL*l1^U<}_&hs;ReaIhPmJy=qqy@DU8VSkUFCUDMgXPd#(_xm@Ql4*qwZ6 zUJ!ekxDK0kttpQ=mjIUrca%6rSD5547tIasIYUa5AcXn*X6BQo9Pio@QF)(|+2q=6 zXt7Srav|42=pm!-R5D;TPC@x=gazcxFKs6mmAj*na0E5s819KJ=0?nV8MU3KU8g6P zZw2?){vO~xxfZL0KOiLjsXogn9N<8-@Y|?e@gc;ltMq+$1;gB*BSt<%ks0hdHgFfe z3@|W>Q9t|~w^q5G?LL>E(4eM`)|`pzo@S!+>3d(0XRYs#{fRjW@S^Wba{$^wvjf_E zjz(x3l(QNAHi6lM-yhQiWf6d?{oCpA^r0tVp>5uPj0DT~_szI)nrC?jzSM7*38E0~ zo7euMyBEGL{ilL%x!T{B-0#Da-)nCCihxaad-?r}_+i(f{*e#sH(|hmr=b@nwKn5q zosF~^$#is`yXY^SZi(-S$+R6zG6H!l4BUzsLCA35;L72^MgGYoFv{@OxrT@?flHqD zoZd$rf)*I)eW-~3!ujXLwgT@d;l#+*kh z0sQJ@qNUq1f^)C@oGXA*(6O~_^jmiD4FCsUJM{c?@BA)`7C#2@`s3<-vdDtBuZA9T!$Yp96ea@Ct;ShG;3?l|$WFXRIe(NOyycw6)T>&mOK(P(vc4G( z3)}IsA83F=X!x=xY4R-899r~iP^0^~FtW>@ts8%%r{xk|@OuFa)&b=gO55Yt%aj~+ zagSZypdmI2Gqh_%c%V+aboK>;s?pTfy}V_nEXEP+{Ddx`K&0hiR7UfO9*QD8$*S?< z%|Vip@djsD5W@Lg6^&3OAR8NJ4(je0plPL4D*#tFlP+zqyGp@5&hKUqMC=eRgyRCV z(HaB8)}u4(={EQ#i!39=`4QDVAureAy1?dFvCcaar$R+zyTt4P(F2weljWYIa#}y# zn<1IgA7?|RAS4d=)`TBsNgMn7p>OxcsSn66MDW3xy`kv{z!njF=Jj+zKX8`3gX80N z`LQYKS?^>$u7Oumfv1-s8J%`;>O(b-`C}Tjv0R?(UvRe1H-Zl426%uxz;zsEwcBq{ zC>{VQ9Ou|M?LbRBX)6ru+wSz@K=%xXV{-p?eofo>e6tU11J21{JA`B>9a?QyBZZVI z$4x_zdIH>XShby8BF7IGEcw>;%{ch?=!3KL0$3r$g3BydwpsS`9Pi^`0d3vs1g;){ z#B#H8`aCXj6ttyTc4wL##>yre&)mvN6&u1&$x0@xun-j>-98`r&&MR=(66t<(T$ZL zwcP|52t1#e!BKT$*;~ftJNAmQ5X78)ULZ6-A7^+Xd;~I;Il~Ky0lXml{CpnHT+K=( z8_b^<6n^}Mx6e1+!51c0V%V7F-mH|cv zH%QoKzkWpc2}~Aj6FYe2uS-4K!h%3BQ1#+C{R3e)Z?S!Tx^#d%6JV2?7N+Xlw(X5XQ;4Ho;U7sg9uwLd6lUvh zLWNL*yMj>j$nU-`VyC&s3e;rZ`yapRA$>a~%9bDqJnXQ*lJvP7Ot|9jx8LuDdiNdl z^PT+#TU<3+*bai2ZhC7&!8@E9nZC`>a6B3Mz0-sEey&j*!w-;}Zj;xgZB3@TcRY;> zJL}jWIDPBz?j828CdBR+HolgDgzLI8k}r2rkU)fuBR>( zK#VyWJ_D#P9N6`9Sy5?{@3Xl37Mo*zPbugQn0-Rwsg}xP5$|DUZDuuJJ z!4?#dvu|1vKF8-DK58Qi-#fr)}K~V@r)KX3k1x za6o3Q_V0>3bwNOw%B=?zHkZ$jPR4cqPPXQw81dXAcEicIpQ+Np3s0sY0>=^nh|Pyc zu6Dq>Pp%L@b;SS=ggq_OZ01bJ(H9m|4AY*tPUf^v7u{%xuakN<8O|G>Fi@&0K=eHV$& zzfZq+=C`>8h(K8!%%6ZPQ^3Qi|F{JPtmbzSk|_MtD6`;pQD7MQef}=Y^$qsJz6lY! z&=X!hi^sS9^5AgTchEgN4*2ru_cjz}`S9G#f}EA05r^M8QK0S?{&rvdQ!8rb?x4>h zHz9sLbDBKptt^~nOr3!;c-pmU3b`1|)w)3#rEtcC(i)^hMLS-EWWBRbe?$niVYkY9 z9l`sBuWvVcpReKIOy^mUtI^(2_LAO=(B1WTa9t5j4!~swG7jukKA+h>rvdpHOwz@( zR?phrY$#Ot2v|eMAl&o}a&(QGUr)7Y#F&`&R)sUyv$caz2x=VzQ$=fyJ`x-gxO2nw zuNOpE>?K@^35X*_y$)6#c~f#s?#F?9BXP8mJ}pVF#NQ-2x&Rgjj&Y*{01r>bgftQ3 zg*XZ^4F{9-bdFioDdL2rz`5={)43DHLfq=+k}sWg3jvsp3CS|w1!im(+_DVJ+nvum zGLhkHHM-=4fibum@%20uxDRZA)QZ?=wRa9=kxf)_7qyq+YHeg;Ls=?A$g)j<3%K*r zrExnRcf*Pgad;}~=yKhTuhU^p0A3My(@A=reX6-$sO$Om%)_=y2j+^My!3&Mrfj{n z7d{1rj`M)y4~!?f?{=%|?%$Yaaei+Yme0mVQia0JW1AUo!l`C1MI0WzpmL@b&;x*} zx1tjW815I?h4NcEarTwck*@TXc2||!eZHhN^y-y&*6aZlEylCjw-ds=AqU!HII~2> zISC$+f0hWZz%I2HGSSW87xa1AH(OpQtMXC-Mz_JqdfjW%hQZHRofkPj5Eqil4xMu4 z-m|ETN<#vPJ#{V#{~LXDg{A;lbv}2*j~OZ;+6sPGaQ!6U`itk|TOg&t`kT$&C&ZJ% zA3ffyQ$U*D98uXW5vBHsF0!6v7i`U-1uKWIQs=1LjN=n{Nu=c@`BWOY5I-~`1qyw= zRJ{WjmWQrIIdxtoH0I0hUPHUPg8E*n*{vVPv)b0^D3i#Ot-EsHE?u<#0;#Kjy zWt;^65xOEb9MVl+q{7pmmV!G+2xNQm`2EcK{MA2^K|5r-{lkeVv&bivJf4!ffvg)@ z5g|v^myC2%yEU)O{XipaQ9q81Xa(H4PbVZ@i z0&|;q;YBpN0$jlDaOtz9NTYs;Rf*jaZ5v>xw}H{%kUkJNqS2}XunIc&?7_h;XN{z{ z7Xmiecy;GPIY-zrXElH`$-vnq+Hx_Bl~Zq7UtCYnT%uU%yaz~iMY<1aSt#>Ft`C4gNU~`aQKz_ScX;+DLd~5 zu+lDY^*7+F*T50d??+U)iDz&3(^dUm>Y@DOUzAQTT>kXq{hEuQosk{2rZY@gw#W|M zv?D~<0+6LaycMuoXYzAIJ4p*Rd8SX!JX5}%w6htfCNUy@lgjN2B3@4gbpZd*%6zySQ1Vd^D!rnN4Xq6wV)}MgW zhXb$7tPTc97^Zk^@o{k`KMeH_;}15U!L19>Zq)*I)ixbb_d-F&VRol?*)701CB8o# zU#{($9?qJtKU|=xT8a1AN5JT*A4G4a2V@%ohjArNmj;^-FeV#@TCi(O>%7sKg`7`z z&U~hYPI(8TxsPr-!{1}ZlW$z1Vu4t_9}{ebtXWbyAoTe3*@U$BQ_I?YUGC3Hvp=RXj9VVgz9eKJW*_kKmy?1qT(j&@ zX>2c-)02eexDNWbTwGv-cRW1|s$EUYq%vH%gUE{}b!Tb&Jzt0F<$0vAY-?1^DIK%R zlIEgUX6o&_c&{|xdtA7-d7+;cg!|SW>SQO`{{CbEogQ=~ALHN-b;#vD>)hiGJY--g zZ7^JnNSH{!{ac{J+v@HlstftPPD(RWdf%3PCS^1@wFt;XR!r(aa->cs9BqR9-n668q8SK5v>?3I)hqHLMyJVM;*!X}Q^*SBIJ`2HLyE%gkn1b@9T*2vS)s%n6 zoa+robbESuNPk@T>U>EJ^a$u3_Ui1^q3n5JY7`gP5d&!B4Sd79Pjn}R zlC*U>+~>OM0?7R!PLMGF87HVQ4-4Hk-%GUN zk7n3;o(N`;6+jR2nT)HXN%9jofY>_ zrC72*V<7$y?rYR!NGnS5ifKRBr>}Ey7XK{Mux!m_zU0s!`8OOYLoRMc;8hC?+}Oys z6XsLX(c9?CzR*Gs3_>$b*2c#K0B1 zKy9xw)279?fJ~y2t-c>=;k5mEVYh{E_=lCqg9{+O(&qHfi}j)3{TL+jWxN43E*5@W z&7TCcz`y*1QV!_1!*`ts%%VVz0vZ7jhg9e{YJ>9i;1_W2+hg;;dViqS|K;u3{olSn zzj}Li|F`eYuil>B$C&hQzdt~xg;>>})@0#ZVp_(qpOlT?(Y56Jwy$Q_lAmtjiU;bn zzXcq5ozmBlIUenEM7bp-cpmIMOrjfGH9~W86*wt6m29K$`z|-{c+RZ*%fZz)8E=gk z8X1RtMwC^QTl-oyXl&{dB(#rMJQQ7Y=-Hf?-fLxC;7$Y@CgMl46l3P$ygQw{xN2?D zJYL!UB>_B^+Nheoh`?g8v?4#&)^i&vqh2SSzppQ#*3uUE3(&X$C5Ljn5Yt4Tix^-_u#al6Szeh)7M(CHz4 zVq;n+ARp-3nL94hT|9ZWSJz-0mC{`4d{KLzNCS*HXwf6AAib|j+o3M>@SVu%iG=+x zq>lpSLe;!|UfmA^Q6)#LM|T3U3<$q3JPUE@3TQJC{?wkX3Ybd-vX%^QfSf=f0Zgq# z5NjqVFaE}3MDe)oU$Npz@2F_D$)RRM+IIa&GLT<*5r~;fN%QKv(yh%kZ7itTF{(qt zhwplL!V$@Gm!zkB6U+<8uqwsZ#+t8gG&@<`LsRv}0=?k{UW8H#fU(PLmr-?LOElfN zylIYge2w{aJ79K7869#~7cT`yN8mW6h=Z+SYjd&AU*n!$h#LZd(z{;lk`Y!_U-YkT zY!-<-#-}}R5N9qAudfcnvvWYD8Sfxjf4siXmVVzNzPZ_>Tje+Z#!N(*9U8|d54$_y zV-JfuFX(TYQ6RJZjIKS=B~Gg z--N240$~AqAH`1l+d<3s<#p$uUx76HF!l-0z;&xNa)2EtN}|VoZA>kKVC_8!ECa1= zPrwDocp_{RQ;tQ07wD))(}pE9t)DCgrGc5HNdw!)d(XhH&+OcIM}$ns_=a}^)L8%^ zPmG71i#V9_~zdSDCs z?7s;!3`tje5l2!ND{jyi!R?(ocB^#M_fJxcf(Lv3Xq=GF90KqiG7>g*ht zRY0zDhov<>cKk}3=#D8$focf!Jng|$9Y+X3(YdqPH%8Upt(;qT`KaKDE)YJ5a@K0>6CY*lpFPfh$C?0<>N5rr=vF=a$T#fbP^C44 z=Wf8>?(ECn8m!&q=j*MX35HKD;m+pTDGK(gV$As~1GZeuC1AageFO!V*~nb1w>R|- zJLknod^%Lvv&vGNW%h9N=>}=9)p63%?0IGP;_f}&pNWAUYLu{-Lt)*{JxuttGIeU1 za@7LM&yL?GOARqE2obgN%fROM);$Jyc=@714I}xMPVePNqdPpAkhHwkacA=k5V)1- z{VLmYW`M{?6W{N=!d@`jW-{*Z!Ec#i&`LU{i>tcks6 zgA71!pj@bZsrwKfdk22EHl6;;6aepS()%@sJjQTDZukQ!&HxG(y^X=? z7J2oRRgt@%>KHKSZsY5!gLCEz46Lq0vb>H^goXWH0Z}2-d&w0f*qV)_qAe^Q6tE0Q zD+nK#_)PY#>S{z#>*)@_kz7zTMOWOHL-_={rTB&@s#y`B#)6c1zj*8+?)}G@$9I1g zA4M&vpv8q@HnH7UdK5+Z0a3;znn1K@hc&43c3ml^GR%Lan$kgTK?h!gE17x1YBR_~ zfuy~mPG=uNR>YEpY%Q&E+P>4~X!Pr-w7dl8OnrB3pR&s&1wds-Lmg@eXb%Re=E0|@ zyl~s#U)O!hO?ORyM<`cKuX0T{w_QuJ{|yYhC>s0`yRWDab@bFzjgGbAEvj z{$08c6I>Yde$yN7zF^@W!Qtmpe+o`=^sc!ccu zOnV){TSl;o%ey3uY_~ESBy0(>>g27Z7iO}`BynAg5Z5RUCdg^^pfX979^6PEl-F4X zEW%(BIJ%QBb#eBB=h~-vwfCx;y@rzyYTHMsP*2R<>+NHc7?~f@OVZ&iAmruRVStHF zi1*vk!CE^4z4laQFxK6OSZtPqdsiXWB$i>oD1iC%;?{YVGNM^Lp7ZZ3S?X}~pL>vY z+nKP*ItOZSr7Z}gtLMI-Y02ASm=yjx4fki2+4)g(y)blHozWvq_Iy}w_#xcI`T&z? zP|ANKX{>3%apChge?;!G&3$v? zS}35!E!{7WF;+>uP@Z8-a>>%ke>>dPR!DiEhZ4KeAydA?bc?VJpobXSjYz($DB+w# z=&_=62R6pY1U+f2C^&1;(A0%Jh5U%5Y2A4pAqx8ht$w?G~4@<@T#0jQs8 z-{(6AlKQSp^Nu44ogb@u>`h2N_lr=U>y3(I>Hx0kNES~zeLRf4ivh`)*KA^j%yODG zt^G{8W9nl#6CHOH_G%e1C|=G|yIKGdD!9}R5OUt+R1!!kX})tR7vhL5wI~EP1mrAR z;Bt6OXZh3$M+&i`PQS!ULP$HJ;r3Ii8y1+u&V3RXuOtNH^Ko$QoY|kKfFss@R#}5_ zk{{IL{%t+`^(NJvo^Eu9fQ4@)H1@x+|C0U%3GJVjMKSoy#vnfZdlLEWA?7Ja?FRrb zl{x_LfcE_y!}u14zi!ak{5QP!*W&X@W-=@E2glLV5kwI5VgI^<56^*>4FbVT2n7eXB&b&)o%Un0{fJdysZ$o9e-k=yeZ(s0&yQ(B_Ght5rRuvM z+*xOEXIXa-R01A&r2drrK*Fv0)iZRjH@UgalQuCr89Fqf9>b=Z)DY zBnh=ca)sOarHcfKQH-BXGnLE=E|X+N=3YwejN#Ff+%@5>BG?WFHiTz%e=?ly=nE>^ zW^D=1%QM_s_A@7q`S7ZZDD|O2WVQ1aQIXRSNOVRn_ot%oAXd{}7K`u>EY6WqY-BNY z17rLW1?>Licei}B#}LkMnWhFk4)B<8>PEDlGrb{FKy84p$azlEQQFtLjAEe^Lke^1 znIOJBE?49k#WUGZc2$pJfj2G7hS9V#mZe{x8aPn$vTh8!-l`ycwdhp69tsAc!Y4Q& zUTRpr>Vz2lLv?~uAh-(=f<#4rr3MV%Qjx~rdH8&a)O1=6#>pv)oRC%b9zZ24!X0BHGJ6k~Z zHs)y@F0ph$A2(C0AaANzS;`QqR3qJxzrQah-{s*%K}UpmWc0n@$b|G~-8u z<-5D3+wC`j3JTKYpCWHRiML-=p$o?3Mza@zyJP(MHA%gXSvS|}va)+brneNK11xd#1-TTO z6DixHr5D!rY-QjU5`~fNuyGyyN?U;YAp|$}4a$4677(<5X&+jh&o2ef``o?b39mW( zNi@1bCw7wYjLK_q3=_aV>>X7+Zv8@oZ2UxyR&ngYL5s^hJph^PTwjj(skrGce>ll! zP@7=P1-9wntZ?!-m5e*5$Mi+dx}{J8RP%-;JD&{dNj+g(UvKjL1hFS~%RU6BZ1nIl z6JK?cLDT8@7#*CK;s??Y?d{zcVC>r=03#}@YAz9Cp_UfCFV961u-27k(6RdmNJ}1+ z$MQHDHuTXrNa7Wj&~Ogj>&ihW&6cF6>LDJleW2w)6|&Uw0d72%Snu@{XL1AW5m2b& z!Yek?tc{=x1CGFWrKeGD^$HlE0})fllp9)8GLeolkKM9vXd3NiaP#Rl=Pl@bZo_`t21|f*6F^kVhMl4^m*>0jFwif((V%;otXI^$>{$~!zflh{ zZqS{0gGs30K{vY|C~t-SQ(gMKIWQ;mNV{E4o@+?|Qk5nU$2MoAb2;0iG8he|RLnWj zv9`}_I;`sE3R`1MJ#WBEP?ZFncs~Ch)oT2Iu2x%Of&u}O0~`*<04wCYjd8ce^Bp4W ze-e9q4b%RYYjyG0S`8_S2W?aTRI7h`?0>mdEB|q=&ile!S*uK3GTU3z`vASrULoY7 z8O3}T7GnB(F)ei7Cuxaq7aubRQ77JhMg>iR@K_K906ON^1NkV6GY%0(%C_&ap}v8)Q_N&{rNNtOuH|*l=VZD>enPQ{N02sv zC9m|0#7Gug+K_=p8=~K^FD-&hTqMh`9rE011;k@QA~AZPu712|4al*jCZ}of+EA8> zJ&$`mgSZ{r7?PtQ?Lo0kVZpN4Lz4FC0i+sN-cQehJ0bPXMUCq@!nGIX?H6N=**jV) z(Z@CdI~eKd(3VjGT%9GPw5j8ZE*I)_e&-x!T+Sl<(2M$JFHMV0O8DGeF#R#;=a-Ve z{HEl~5cA~*rv@p?-LASx=t-k+WUOIJVhJgvCqhop5mIUr5K^!rC`is^87S_?JWO*p z*xrPNAU|OQjpW;CgwVV8n21Ph`m+EmtoNJf@uWioHn5iR5}`cCr7d zT1`LhZx}P|gX^MtOjO_LaTQxBUid$3&3~=cstm)eBM)G3z$B*qKo$n+O6!})FvQO9 z>tziaV!Xd5c{)yuF2rYqf4{EM1J9Y3$|s|eoBg-*xmJkFBi z%rHQzyrRw_2x$MzC1_a6=jM)Br~X-#CYB%47k%D!uBN{nXl2@L7(~`^H5Oi*WX{@y z=gtr;r96ABcELTo@g6G+-5M$K_F*Uml~?1EOHwL7A@kEk#-P4cO??h%i1&QLas4_4Z+VfU8_7Zp7}e_*A1n3o zwYU@n&g_+y%^++GD`99C2pl;FqXcU#~!gv}TS{0@|q0gyQxX17MWI5hjV1=teonQ_)t zwtg$>BQ9LN#2&#zlilkI`*4~oOZj4yBq&$(o%(Qz+uP)2h`_vwh@$Y^1lg+mYs3Bg z3cI*f=A4-+nrB3Mc8^;d8WtzwnLnflt=yET7YALd?zE8gyDL$S;b31MUc(bDqWwp; zn)siq)t9#yvqjP3M8C(PYe)Ae|I`>ef=tW*4{9|u(tbKuLmyMYf2!5LKlZ;|tF`~Q zR&VP}njuNQMD@{X#q;b!s&*u7@_;kcP63tOeyR6e@*3z~$6LSeie>7fO^%Ulbe!{E z?5yr!D4n*aHc-4Du6UrVC)9bY zSu`FRO-WlbCsxbDh$2X9tq1#6?6mu#;f$1p>B~ZVcoNC#srmVmhpsQZ#{O=Of?)|y zLmu-HIU6CmuW5eK0*G{nNP`FKPP+RjWtg}D_;l4!+jp5`ms!+GJm?!FfIxH cOy)A-T@APmpTw~C(4wQen|uG^6b*#qQh=z><#K1Vte-ORcll@Bhf+fuhbX` zBHESSyYI5EM_@p?Pv~r5L_;~R$HAfTXVc2(4DdGKLQ-U)B)>Go^EYl905f#s^0mEq z$$7JPZv6np*r9yCArF*)rY zhEm_!SpYMO= z6#+8y#RcJXu%}M^0euw+eC3>zD`bVW%Tp@iosv`F4H-;M6&J8gr^K0eCO2xyLpG-5 z^$u;9zU9wXt#fA9nTs<7aLfhGH=qT+%5TQcfOxvsR<&*TU2eoRqluOX>WP65g$_3Po>s zw`C5THHXI}X6^kta$Jd~*YQ!2N5?Ld4uKkMRJhcO<9>xdR?p)hEzEPvn`0dbV3rWa zWB=qa4qfq`(Jc!keF^p+3y=^{6aVM)zhC#j`64SmBGvz5hXIIt_y1D(Z|!jDZ*>~~ z)DP$DkM+K#e(Q&ur-PPU$KVhmu?zs6>LRaoX1m z5uAXUCDknm-GQHKX0~@If9Om@-Z1xN^oBlp3#9qabEW`4jv9aicgklhW17&K9)-xe zcOND_aEv*C++hGuh9e1Il}0j*B}nvKP)y&xjRY1X4K4osg9*;0O{h0!DWN;*}}- z`Uuh_Yx(BnTl3EKn)eeg()SU^p$EIRKHGsyt>1&q3M?rsm^fiFf2C0}drb#?pVXa~ zIKv(T-{a{`K55FB@UVHa$E&dmF6mmmq>qnQl{a3WsbC7qE8LGNVTpa4nNOxeO=$LJ zd+q`~2PMrV>S&b%FW&Ey2HN-Gdxv&}^x(656h=kWRG__I z!E)r>3J`T`&f~n=GI&Ney;#-=>!BW$YBR$zoLL!)X5hG?N)igk4i-Y%c6a=E2Bqsr z6tN7szV9=7fr-zhw2R@iVBCe2z$w_wR|}eymV%7j<4r!IwULmF(7{EqdeZAzpWk-N zdb@m3sP!T^2_FX=LZheBaXoZ9a)-5;#)?boZ3A-So$rN&PptC&B2dwoRQjxPe6?vS zAgfS`^m~-jzgSB@ zOX+tb-+zBC{Vb)sJCRJkDgpo5TB^-=pjJVIc=G*CRX8rY_0Xa`^zYpRBM-C^%r9uCPHtWjmuxMJ1axbYt(sK4KdKjJ6;^{(ch?m)i$ z+R;S6-+?U5u@0}qdPOJtEZK`}w$$O5!Dlee|KHis0L)$feMfWuaYyqrt3rke|F`M? z1~KCwr4^9iHOQm=(AvK3Zf+2A_WeN+%>Q}(U%SqaSrNj#{P@k(xY2&lDh!Sw-{B5i z57lRn^+nS;9m*I-e@sVrL=@onc>NWk19=lejH`Kk`p$V3AiW2GOuzY4c6n7u-!j_2 z8&pi@i{x~I-Wlj^*lA03U5B7zrdcEPG}^7dxB6#(g6ZGUs&8vLDfs>h5sNQ%S2+uH zcny-&yp0|jUVc_p)}ohee5Wd!k z_BR*F?-GM+02Ot2oa(B~b{p$SSK~WIko!@!X?t+ZM^_#^u!3G`N5VwLh`OP>&7*+< z#&B-!I=Q9F`M&vA8(l)E0zkyN>5?I54I)xg9Npup|o>lA3S9wXnc$aFD02b4up?Md(-FNSC=y&1~nSDYh z&ZXj91Fa+N|K(9QF6s4huN zpxl%(ARt!e%7m8H1MeN2Dap#kO zNFOM?W$*fq9dWu`^+m)0nQ#fihT3!|1>AW5_x8nKubuyL2lG#B=gIhh>k{wxwUcvQ z?`^1neY#;YWg1vCib?sG-OHcW&CikQe`xo@&YxxT`|jl**3I8kQ-8B=ewIx@U~e>;LIc2%muVe zdktExFGj!ikENR!RP}L2+sqT)Qw%T&fe)^=xl?DBa($ zl_*yDLq&NLAx!~aR^mk|9VPbT&A5igx!liM0wEa4Z)*wcs{qq>rThX7ZqSEiCP%tx(?j;hEE65BZhu_QEU^WKffj_Jn_fHmb=DjeU8(W{$g9$5+ zYe$!HIc}EiGeFWQmHc_Ueh8i~_0<)FZ?PAG+_^BkJ-8z?tcm~aR{4is%y+5w_eKo) zFC(J<>An-Ik1CP)U6p8Z;Sjt34|Q+0q&U88ectOS>K^+H34}nGNNAqWJlttUBWOay zv$R=1!}kn*9;}@ls*kwr!j5CL-kyRY?Iu#pxlxzO~Kd>s?ayZt~={2)t?dY`_qfsLg*zSX%^tGQ&A5f6)!Rl{m{1S`ryqIyLTyTF>jcVEic@8dBmfrYSn^{J7;5+FYp`Sn@~Ev6`b2ra=7S{=BeF9nA!yx_ zy~Av55(p};-u$ps^U^QM9=Qj`=z;{C}S}7yJpy1uf(1dKm3AD$cx3>dw(}SybFZ5x#N2XC$0cRDpomJ z3;rbJX`I6$u-%TDImh#6WJuHR(?c@Rbiu6kE|>T^e#+KTdWZD z4#GOr1_e~D&+eZ9NoaebJVurqXKW{7oq#u)iWhrBMGGhoxiyvI$mgD*&Xm3)=Zy;F z?wrS&=$^RFi%y~*1)&=95NKQacA7`4C|8hhb@OPM!wautgab=UsatNLkn2fiw441&NCl&Qv7_aqbJ$l?;A!ui2hq2cA(ClOa6ehTUsRPxJt>cm0XwUno zc!a4LnJ?*4)TEH&6Ig%GFa_D$iF8ZIHh^pb7v*(rXQA3&hu={9o@@PThqNROt(HQX zGx3CUd-<;QXe0D{&1`_*cWM|wl-So3cKyUQOipVwk11G}=FD9AX|LZbEOS$ z2-yw+ca_miE`jc~*Des$WF= z-Lzj|w)5Xbg~0sqAKQS#rwzFL3hvS^sXwjbSVp^R280~noi(og!|3AE2GG>w2cjnO zF(!Z+df_&}g+TL0U4iRUC6I%}ej?U$%VlBN@&F+?1lpCq(KV?LUGu;WK|`*=jR`*% zny)r1$b->QQngUy{v|~62WP`?$?&jcsnoj#2wDq*U~Dind|BN5kR^;n1w|#E0sDLL z1r!E9~q)^b|kO5c%;bes47Xg+9X| zSknZ>kvoK-9#W6&hQgL25vyJ$R8lxzuW__k$BRWs59w|mFS^qovKTBDK8UT%`Qp8{ zV>w)n$N7CR>PrSAJX``lQoIZ9jmq}{!gBAnm4UA!z`mg)mrBisy?!KGZX+Pmk0vQ& zw~K&NRgm}WRPVvsy4(j{`9AHb zH@6;&y`q&tUp0s2)npIcyiqI`9v?SrVg38O)-}_U%cu7Cpp3;-{+P87~zJqCw?1J!N%IF2`P}t2B zm6_tGGwYwpQ7iCz0+eyC7xv4&R)_XkR!e;en49bYpM2`%V6k7JBhV9>Wj6P6jDDAc zM&^+nZ~9C~oeUsRDGh;kc&pAdq4 z_0$`A3ri*O5O4Bsvy-khb}qOqzhUpc&YgZuk3ra6wX|QP;lF5KVixJdxC#Lz&*<2Q0&ObYYw-Nas8{ zrdM4h1Ndj2yd zul5H$i~u9r9RifXP6m0_RSCqf5g}F7{S8asxJm&JM*be2%Zi`+a6`63ft4HqoHm=T{WSSJZrN09O{wIE0o11NQ|~ z?G6dVg}_bW*1=sy^QpEDD-ZXzMcwTL{)kA|9&j8=6SHrx$;zpFJX??bs+^ZB8_`Ne zGjW3SlJHiY4#*ieIb>S9LwndS2UM!?wMG^Cz(+V?z03lD?gM?1r0o98A;=DBJgC|! zlTr2T<&i>g7L+;&5NWsgEFf|i7%;b?R0m>Nt5?zzhckzfe=GB_P4G?k(=h%ITaACE z+cQ>q}NF4hKJoUBPD8AVszf{goEp{Ab`7N+5hfuat zovf4u_^U1Os)fCM?Dd~cB(`Yu1#%CyPC+^Ng#c#!YDSbmVBy#yXXg;)%i6W^CD2!3 z;LiBu9XG=wm)GIz9VwRRIF{jv-;x*q*l{3`4)FfVj^pF6{D+R?|Hn`B-{?B7Ok;a$ ze!d;%Vna}A@oru;Ze|9;Q3w$~@I_ZpDs6(@JlV7&*emz29mru%9q+s~B*9r-A;1zG zQCb{cv`2$_L`Y`Ap+tOCIwWuDrLB{()5JHb&8`4ph4)E*CQ9XxB5(VR6=j6NUHse+ zU)SO;Z#xD+ku3i{oT#0KX$BYt*cLJJhq2sLP+k!n+kl42h-HJ-)qRuIviy=IymZ4I4uHUg(s!xlep>4 zqi{P)*(#uYi=RWzrwlNLT2){*o0^j+b7ya<9;1-oKB(52oH}IR8d?}9eaX?*aj^KC zx_>C$S*f8Krz?^+0bMmk}m?c`4)l z3W=O8BxDm726e`)X=)gW9g@n~C0M-2>ZA;xlO;p|f_@~(9P`|HivNUtVXZ~ECIRTv z662WKE~@?Z#`C&^@!apbj;|AH9cMmWhkb1JZujgV8Q#t{-fu2+a_NOzFbsd<_XjfS zPdj~;7%YrppLPT2)idx;K};d|L!i<(?)TSp)#K6$%xRP->RL((O1^i-m^#1tnv|4t| zCkOUgC#9cj4tz!tK= z=R<$KsF3lolxf&R3pu=6wpfx<&yND|&D|I#VQb8w%c`oo3z(I%uH_Rvs$qgNo1W{1 zZzncKI3?_NUTV3%VZ*7UpJs1_uBGy~)XdI_>T!^JXr?x=kRUJ(&k>=*l$A|RBS6*G z)05jKy5Ft00Qc;MWzivmct)Y!XU9AMMz7@4gsDp>MO~jT$4?4my`BapV&I;0Sv;bsyNM}eAc}XH(mTxjfM6gE> z%zmSG0M8wb-~rjldf;^=18(rfpg{fw4im{ax>5py*U2p&=tFX&@pJ=pXO@wEbx3Zq zD=FNJ4A*zwGTV(;qYHj$Far%KnULs?R7-;gu0(bj!P`ET#|evtV!A)tJA~W$d!^7P z><|Fn#yr&}%j5Zi=sQB-lZ-3N!%@@mtry(DeUc!0|71 z9d!9wF+P4Umk^j~yzNU6LdEJAuz(|I8fw%PetUlwivCzA3PNC)?BsTyHoGW{NY2ToR@}Kz0$fG-}zDU&AVpAJZ!SCamK3 zioRKW!fvhx1=b-T7?)PJs-9sk#M{IUcNJ>ercQsb)l)p!nl2crvz+@A4KWLnTqNaB_+Q72*_nTm0wr@7Z^pIEm>)+i#sQ%Mme$T14Ky3vXXJ5_)UvjEJSOW?y$gbWL zOP^Kj`TzDKW2>2&e^Us+tMB{999Hl#ECsI2qy#4vCkIg{GP$e*{;E~|tFIAFk41KP zl~5nKodC0QC)4!zYkOu%t-mkntkY}MD%$=MKTbwbbz{BUiPD~80yIu44Sb|uyQMD- zj9)?WKebEWyCwdEU^Y;VqI_WBm~%>C?4*g;Y(GfRd)g_N>hi=b2imJAB>Hun31kFN zL;{W{zbcGP3;HbvWp~a1;phs^kWW-gb${B(_gOi|Ap5-&3_Kqq513U-)CzP zr~PTdyc6A~Qk>P&ft!DN{VV^iR~h!hYyAIPumAtSBl}4q^Rqz4Ky9sl!%#PZSlxtq z?8J*aj?S5X2?S!YRea%uMUE)~5_rNFwr=CFdMDJg-Ft5&2kiC)d`V#G5`XLyVw<;T z>?T%dy!F7wvrCo2v2K9d&s=z|z+on{$dj?|O?>Kff$~6Ub=Jiy7+aaPb!e^4=&s$nf3%5aKNg>2=s8 zP$5OnbY*93@)LGStbDq)?0AsEt0)$1=jTAuP9&_vwoZeL4I1KZlR!Abf^;KINQzHr z=}BwiwAih-%ZCUc!mO;wXxAMYV#iD?V^-uGvFIJ`SN0AIDPBiNW+TkbW#<7pa!}s(& z;GFd{Zu)$L@Ji68JCkA#v-A}(f4kA5m2m6>+(@5z$=m`r63n;;-#t} ze>F1)g0_)ot>5GOFnDa+M~Ye5K#!36yJD8sIovLHln|>tU?)e4E)jk{)dpY}{ge&|eqWm+ zW6K7)nuO2iVRO$!CPUrXvO|brcW>>XD{`%y@&OKqPOm9$V2k z?8i-Fw{?0nn+@~qJ(;Eoeb7B0Pn`790*7H@JP6&WEWBDONRMRUF z)YW$W%q95&>OyXgA~q0ZDGOeXpPMT~0AsPG_6f1m((s5;H^e^0-93I@j8i`0hI76I zGNi9`x@ZLTERwdT<2MZ(kMR0s#{A#|$2`#vcY0n6YJSZiG;WJkfe_~M-XT&47XrOJ z25!b}$=(`^sRcl)acik;qVL9fVm1102`NM%`CCL`>i#0UvZK!)JIN&dp~rj(*LAIh z!jL!mINu$Pe_9JF4Dy9K?jWnn9QF-J%WgE-?@lkgSYCOcixYs?teC!)q5;}gKkrX- z1~U%Kv8%T+T36&E(e5?BY>UTlEhzqLIU}`E5%bx9?Az2=(>8wW9!(^#RHc zFnf0QlR|DT!}-r;H$xKAaTmdzNnr>!VROPLp8`=#2;r~I86w35hQ0(fXeP~s?5OZ8 zJ$E^SPeIg4&C=F*W4HbGa8$1f+wyJpD7-gI?3xWg>`BCFcgW|nw#sc*i)!!;WwqIA zt9AI7e1z7zmUlK8SucQ;mhp+sO-VkHs=0}_dmxV)lSrmm)&7|9fO;_O zQu?AEOHBo$r*OixFxScRY^y5RvpkJ?L4ZzE6rN?ZXFN5@jEkaFKtztrtI(t$&gjC{ zOE;vkW6ozoW{V?Js{R1FyCZeSAZUHBvpi<)ZQ>l4EO8N1-Uyv^NOn3XjiPFR?9A|)?u5Cgkyg?lyr9&q-fts!yhEVyy2u+`tT%zs|t8RvVE|GU2VONsx->JG0h zsP4Z?Vn5a0E&sf_`~So0Ud`e+-6-g2{=T{!fY150!hZ)Ge^|!19Bi2&VJYj6RcBSo zUvHb0@)0WR&!Ene0-(;{_Fgv%I0b**S1gisZNII(6oLI?7XbM*-`W5;A3Mc&dk)}C z{~PthDt(=~?_QjT~C9`^_>=`>W6O<1Bx zok_=qX}-C!KAhl2vZd|9#|z1F0c=M%^MLMw{cR1HZo6PM!(fN==nj>CB;&_E)J{ce z21{zfWqLTOL6d05B-jJRz{g5!-bHXRpW%(!Bk1FzKkqG@Ex{|-RmfpGJxfn|Sdq{y z{cG?JN4F=rg~5qepQ&jG#eut>C~0N)=jWJEbC~EC{Y4k=3nG;Sw{GhV^c~_Y=|6&y zOUf`CM0D(B>{!3Vhkm2H1P6L;wmkrsBsFQ58A^ohiaG}cu0|*)-g=#K2Z0!*28D6* zAzP?MjCWn(0X|8X27XXHn6GzMc505!%K|~WnDox&A8G?X>fDVAm+1>*GVz)G} zcW+3w&b9j+^1x5^3CQS8f}C-nJw;m)Lx8Lh020(nZ8W)vnsaOgq6_)>HFnpId-xsw zt^^)?3wYk%!w2@RAr3W#ALY3P+R*^y2qXh><@LQgKU0sm@)ZCn0;*t_+yPTJ9h<~H z=mC-dX>;ed;^r^M+y*?UIo!u5riL6Wh;O5>;G%%kbiiSLCKjJJvVmG(dCv9>e@X4P zKgP~}4rsp{Slo&JD$;&iSeGuIL!@{Q?Id63sLRhk1EIh1pkYCEyC>^1IsHi+06cXS z&EB|FD%wW;<8?_W5}I3i5Rg$MUny@&2?aN2qR$#(MmB@doimM z?i-@$Ta-QW$1S>3yVvtL9g<9QsqERA&4k2g!JkfVDJq&rz=C>cpH9@{wzuOjvK+g% zPFlcRSu4pHYa7x=w|Vo87j=eumtHO)@ljFo!8%j>phHfO6ywbiV6puZlZ^i6#b;R& zl^aHc_@3_X4HMb4MbCF@;j*hCL4-MXl_Kn*DzUKe&sn{Ba-A66RYhQ#7?eHCaF6oM zUEf*Bf~ZqpxJZ;%x>FU05q#DV{C5H=M6EIHFWlkDS$^k`PX8j~5I_(IUTq)yQAILr zo5J|DG51O8vP1f|eB87fp1k7rMQix!wrj29D=gdAu6E`*WF@BOw$}y1svJ*Pcb3^p zXoEpiaDkj|FCsW-fO1*J9@sB?kvurhd$Xvk2Sn>U@Qj46);F zx}2==et!xfR}%s-|8c}kr5g;)WE?eOJa7+TK!+^1^ZF-$54By;^aOU=vHRWqX&FnP zY#b`+S}La;sRQv^zaM1to=(q{^cgj!WfJcZV3nj$4t`R!>-mz0)GquRy8+VCVi29Rng0 zGn=X6^R#*LKV%RHa8&=QK%t*allE~D*59l8FMkzD`~B4Zk5&CA{I*W#EXZBqAKNZh z#>75GvLq{<%ZFHTk@I*{lWRqG8bBwtV>`bUroNwQGYOJVyO?()-ZCH1>U^v%a&BL9g; z^!))L0z9IBL&?$FRGZ#U6^Y$c?&6Y$?@McE@9qI!L$;e*TSt9oWD%8#_ysEG#mNSB+tXDNCg6C zd;7}8Sk!9!YhBJS^;m;uuSthKS35gk-yS*ccGDfbVUhD>_A!pGg%u~X5_uN~qXcL2x-l&j^gUNs+m;ycLsPRhm&)=$`8FK}#qAAbOGzwol58S5Vrv z9DC-&hQfI_dtrj_)Ci<%yW4x}UoM?2;_+nnwEXt7Q@IW$4T0_2KHl)Sx?T<~9OdQQ z>X%)$HBfaR@r^(4D6FrCa5Fe%TM9K!52S?OAY#VP=sSul9xJ2w3>dg?zIzfdz_avF zx~s4-1>opZrVt{Kc;{XwsPhU~L_p>8ph)!I@9s7#^9a4eHAfaM87|lS2HLl4h6Y;Q zWhh^sALN*exTRLo;qEClk?kPR^mYWx>Up)AcM~%&3QwP))k%`|v%pRG0%npEJH=O% zun6cl6!pA^?BsYu$(rsK8fCQS{iGJ0)2Eh({)F`W!zA_Niu|jp{;SyZqxv}8dN8Z^ znR>pb7eDRv2|z(gp{Xr={kNd&KVrhJhpD;&SD_j&2JZ*Hfwz)^rH*!~-x`3;@6`(< zPB0AR>?>Qo<>IunF-aNgnFqFAK{Sx%3l1qdSIGyh(^jv;8)7)aIXtyfnaV(EUBu_& zP6Z0S`RHzt%k!-4mdiAc5Ot)$Mk5@ESB~V5Vbm@fb9YjyhP;I&DxpqeIW1^9il6L@ zjWsiip;zFooSzO@gUDlhjh=HD`=GsX&T*TF!D-xeEf8|ICyKK5`2c2@%jWLS>0nzH z&--@^#2;ylS7osb_Hj4+`mS|?05k+r@;WpR5LI^IvFvMu#PhOg8VB*qt%f|O1BU7J ze$SntL$JZ4?;Ac0lMddy(6@w@;v9l)YZ0;`cRD{mM;QgI9Yn7&ohh8^!*XZv0%X}) zI_)0V;0df@ROrjP&hNpCpWE4$Nh6NmF1h$m;R^jt?}3EMeogSQVP15iTDJsfI-5^& z@7l)C`yT9ZmfY1CB+_gsb*iOMEFGg$8H!)oov1ZrUrzf?&mT znh&{Gj`QvTzMLR1csoT7o(n=kRDX!r!&k;+7sQ3-!*pX(_hdbt`{5{=Pr%~k?+sET zP-$21L?R0sy9Q*9dp)f7o#)h|7^)2k4#R~JJ~7?Ib2CD%%&xo&)Za_@zUY}p6}$PW zVyJksiR*daf#5FZUdAZl$&Aa^7I(`|=SD|rKfx$5w*foO@OD%|0LqB}yUF`+)%!j{ zAWZy=na1O@|Cb9m6!L$p;lXFEh5mpH`=N#dn)LEFHC+8SYxr}PzK2w-?C)y04FgAr zo-g4nT>F5JLSP*JV{*k$bv(utAP@b%j(@wYq<;6PK6U(KU;mrV;$MGMp9l53?&9C5 z@zLj^%JdQ)M*!wN^M5Tz^~68P_F44usV4;^aP}jAxT!!7f7`B-N{tBQwKCI zRJr8OO@oU7{fegxrXD97WM;l4s|5`m?jej0m|$|eWT~WuhNSss%na#Pvd@q5JMnKJ zRYH-E%g~3#))p>}0oabKivo8$zGucBj!(uI)64WMc^<_+nu=kY+1T%oHRBCIqS&_sB;nK-%0ovX zv9IqLM5xdDbbi&_O0M!!T@TiQcrmscDVgWrh(q_3${a?Iz8d1M$1d6+EG;5q`khGD zhSQHzq(4>}G#d`LtPe!)J)WH+yen4|uC|A3%wdn$LA=caUb7aU)z|cHx)*zexZQ97 z7>aYXShF8`D>!7O7monj;SOZr?B7Unv%8?!Ph_vwmz$<$;)4po7^5%CYxkNkl!J)a z_$418dewk?azmDP=xWN>N5(@J)*S^8PSTo@t}=p`3Yn450I;e>Jlr#3h*oE`67K}O zbr%CW8c-PbM^@@?hj`T(Fh_tR_;;$zUu!w?g&XkM^#6;s96$1TI~J`zwox3geGMGD znE-jB1QF5Si}^QI=5J9NOhz2_Ze{`o?`@$gIpHmk3$NU@{>F`u3s)h3uTabQ<6(mVo5Z*Fz>C^#ny7sC?WE-M$F9?q_Z zSnQi|8#7zJmb>#6Y4Xz1lOVpq#wB{fnf&2hCuPr?hG=dw4onYy(ym^rW@rYU?Q1CJ zq!r#Io%782xM2lZNwu~2@34_VxRL2Zstq2I;+>C=sdGw0An!c0!&cEF6IiIsD1YJV zxnU%qdVqQ;-5<5#slnowS{62rQpLNNM~xkkhS;}+2uvqt?TvB@xBkL%ET*#7>^6@Y zsGS`o(2{k5iP@da8Hx6;0VIrP@D5I*D(nQ_jUVZ@=*ohq1`8>-a!y#ZlHs?^RWFyR zNL~DSMWa;n(SzRhu#K1aBwh;VA;S6f2H9N8O?bb6Uv;|YV07}`Lq|aH1Aw4|9IB|sI%5=L4 zNLZG)=yiUmOVm*=$(^ z&o(kdgSw${HN=6IT~5uUBS*I;!wkJToqO!%a2zj?&71DxzpLd;JAQS7JfGuVi86or zU%&h{D(m~H{I`$)RNI;Rr?#)ZdO{ep))eUv;EB&pou=MDZL2?mOh{3*KVxcyx<0L& z?M%tnGxq?*&dFc#1@5f*I>!c?Jf_xx`3(c=p3t~;wuC-Sfv3MC&VjcptWaPNk3^pG zkzpObf1yG@N}vS7)ctybu=}6C$!DY8L`Oi#c@7$KwP%lP%X|Jp==Lj|~34JkY#-r`#1`(q9c))4#zSH?~UC2O1hV!~-Uejf5S{Y=TQ88ol)HiYLh2NPVd-*f1& z0V|x4oeu+Vh)UDAoU7Gt8I8!&9cGZu`3zKpGkkM_pfRto#oSdMYAhcg?i@=t0z<~| zM5iIR7rbTK^kxOe=w+i9#$!t{A*g2P7%;2S%}LM>`v{|$K!2xq>b%EnY!~0(x+iPF zt7kxNVR7P-=(Fc38qhb@fKp*GPUmDdI@+SFavjCwe5ZN>e~s<tH~>Q$%hUt3w*Xhk z3#4^n;4$dr8-gwaYuDVcL$}x5m5n>B2iMa*p&3GZa&b?onkC}z4L92BRJFnLaoN)m zy;1n#!p9HvzC+%e7OsOw^GeHu$p6gLxp3-z^2|R6>pk7-0axx^!$Y_uh}a}+k1={r zIrcRvFI2>dPY>EJ0LEgF28X2hONj81CI4Zt`!ALghW@7^?{DSgpAU=l?xO*I{)#kE zuTm(dX7%NaXhRhJ&ibR&|NT>z>!+|F-z&?1qOc&}E6ZOO76w#c|5{-|zE_rSg$2}H z%$JcgRDkZ^EiA~F%3>?aH`&=e9YIE`Nf7^k;s0HBhEk0byBf4wslHpU|YzbQzvqYj_RJGFil7K7@B zqs)nd3te$N2vH8A3v) z6DHL>1+XYV`n{<7>x%LdIr~Qo+Mj8v5mrvh)6yqpS_!Y(y}dN517J+e*rNE8ruue0 z#8-vWX@z4?2hE`k@)Gy87O>~w4G{bX@?JO_)iszGnQ9T5QUa}el1?ps-R%dE$lR4bW#UNYy;Xn0&m&Zhl<*A{bYgny*gY zkCeboIQMs5F3r-{Up~SSO|yQd8u_PQl`TJ)mgBEZB8CI~+f3 zh5l0dn2-Lm)enzX)G)cxK%WYz`p{*eXZ>L5|GEqO0kwJq@chlFRO<6$bU|Htx4^ym zb(aJ*y4wfls(iY{<;x5TxDNm}0sHZ{+sZ$Ggvj@Y_@8)$$oGf%<0Jgn=TSG$bKfd+ zyJVEpLVs_gN61(i8hX-L<49EK;N`HoXIL5Z)yB*Yq7&K&jdc&%d!D0tq5&%GE4^|l z`i?w0^h>s2!UamK8*+wu)o^5hPf;iL6dFI`4$!_$6c()O7WmEV`Ry#hVqdv9+fjJ) zuI3S93kWH#f>>C^9u2cwPq3c3smR3cc6X9^tQDGLvz3XoR7B4)ib#>mp{*O6swvLMs?YPWnISLejRo#~ z56L5T%S;-&n>8qKUAl*!3&unCd7(HH8>04da<4&^&)hA)sA@H$>+(!1byvAt_Z&m% zA|bhJ6S2ZYFgF<;<=M&h#ByitdTJ^5=8iD2p!V9ih)-8zE)1cr$fwkpkYd)TU?=vu zh9Mww7foE@StE}`<^uyC!FrO7L-fe-Cj+3WS8~7ZT9F3X_IWAFQ`kWP;)l$+OZO4t zK2r7m#CLiQP7f-P@VntaKo2r@pq+*6Kc$Juyd_Z-QiI3b$tUj?mHGR`U{FWQ6x31Y&<-Mse-0kY-lvVDFBPpq1|NY@Mlr9$#KiMGZO!pM71aLC7wdLPXYRCZ*s+>OyEve*J}H2Dla~9@ zUhXsEAJd7Xs?rK2UjtPy&<%i(lPopC_iKt|2KJ0`C##^f9qA>`3p_!u2=F3v5sv{D%tNSKe^Y7!yVVi?0)*}&0NcvK$b3lwq2w1Uvoa|XP!@g{kxq6O(auY251UGYhkEfVr%LKo-r6OFZd2swF! z4|%$K!RuiK3JCwAFbQSXWw<36?VC3({C0o{#}8XTiO zJ*0|aHkVep2}JTl$UZd>2XU7ODFiA5-qrH%k5yMmX}#=%>-Bl17tT4<0mLZgQhUgB z%xjiTz^)L_L?dZ+BQ6+O87En`&&}D5PxpOtb?lkQ|1cyth?~|gOr2I^|7?p2mQnp!WJMMJ!WUbU zj=z}UfBm0zxc=Awj{oa_5C8SQf8qbuaP{NC<9C1lr&fUxKc?e(_uVSOUj^LT7kZxm zsh|`91wX*lK1K|O6_y(uYQJ1T0AZp~6+49ocJ(b*RhZ#Rzfb22#NTMKU5&O4BzA|U zXh`d5L&%{WxTQ|GmTeF9DDXioFyae|zTd!Pw>R7vHOp%e$(O)9UTK5D7c9_mSGjJU z*|xx!k97T8qpWC-1)d&JcEIv)1Ed2n+@%hW#tNs9SGZEv_pTW%wm`hA2@t%Xu>ESN)7neqy+W5l6AYH9}6S`4a*Urj9;a!pBu~k)5LtaO%b@|r*;a&JIwtv z*7;&wnP*OS;W+Dwu)sxU#Qb_#kZz1&&%h}(vF}tD@fC5&OHj-i#(iiQyIJU>dD7Uq z-oT9D+y5IE?UKN$1b$o$(jKZ`pALM{8k!U(4{j=#kXXZfo9NB+>8D==3!mG=Eb<*S zHLS_L_H_u1_j(_mKg2y3J zr6a!Z(+ro&`}VrZ>}y{cTvKDwpd77ChqBL_ZYW5sT4~kHVXUC+@PiAJxSg1g)}w&* zr@KjB=6aXxR*sl2+sRh%2#mwA$ZP_*9)&u&mp!EyPFA^O<$$&N9tAJ|W4kMPPFohp z6r2g-VH-fDnr8)lXcuO>M`8r_vU?vmuw@dC-hP26wpX#&nHOYIUAlRnIF}eKDRIVC z*D&BqVF5F1i737g@&h`TnmlKfWKhzAu-4Qi=fL zUOcf$J9y?zUNvEOy;H(9D}v%=P%^AH6@_Gp+t3Erq!PEG2##D{GazZWboVDh-A^kW z$8z^TYsVwprcRI301WvD9I%c!`OwdhAdA1`U3QAt+;y;PO_um{@A@%0a$WaoTm!O^ z%4zNp8+5UyFL+8W;Ix?Uz~i!=PIh4G%E+BrLyqW zHTpi^V80zHqlO$q4{|_ZRq?BA;Ww)wtTwFc2^I3k^B`(5nk9yV+M&R) z>2E{^)V}s<;8j(+_|{I_WCX65)pC*g#7lc3z=Dx38jL{cW3Ny<>=38dmJ`~_hZOr~ zn;eC*VehSTUHAJsnaFkr-kXOG1_fJMsswVUA<%P%_hcKsknNJZM;2%I)0wh+5mTPo za5f?Ley>XGQ-(f&}1fhMn#pqW03A{S~u026V7 z*lutK9^0XMT9bT*6t+h)NL2**WYO*TAgJiBvkwi7L&pbCtipvqOGD6-H}e1o=T1S% z1uL_@bNLvA+%$|e4FlTA=(J2Dc@|XKf zp&}!YAa|+Dag%HIb&i6ru+s0AFM&JZ9`r!OzLIKaW;g7N*_H8v-MP990>hILO5L}2; zaE2&awM){;^*9NxiKo^+hvJSBL}WdXraP~(JN(J64wCV11_CxU;{)*XKCU+{Vonc; zuHWld6ELKh+}@bWZi_YmKKSixz0!4hod}p0P{zfH#&AASZI0Y#aCgz*B=O&{l_C>! zP_OmzKCUgczp3|Q zt03{(-?CaWu;z@D*`0^DG_|az+THm9yS?39Z({)>2g<&Mp3)5sdnUzW!$A4-9ZsTWW z{Q51PFX@@wZms#@C)}{lOYR-f^PlP+sPV_f;Nw5I!MRTVc70%=GvFPxwgL!+f^B&L zVyEv-L14k{4r9Y?nZ&@U4>?j_sFW=H`TgNwB7oX{DzyLQ3t*9wegA@A?+_gN5l0rV zw)$R%dA$I}z_)W7a0NgM!7Ol&gMgb&{F)Z_MdR?f5k}n`3!yjY@3%yiDk#P`$cwJS zk|^;^N3G3+b5cw&(ZcfR6TJi5q52MgVH+mJMMnpa2;cWGpFfjpd~m8Cwn^|f$nT&3 z>m7cA!$5iQV{%wRe=HaO%F*ik$?8C*N1l0B60}ap5cdTS@DEMf`D7#jXC7}SicL~d zsB591Su^Okjf2GW;USoB|ArEo`{ovRGEP_t1!c!tFiK@Te!L@nwC*41Q#Jt^+uZ?$ z!DHuJj6SGwm$Df~6;*K*?&c$Xj2^~f`u_ZC540BWmwbY}y0H`$_gXv=f_3wwtUNX+9@7&Fj2!Bc~oE z_V^QlH`u;4m1uzVa8Btwq+{Gk(w5j9RDYFn%nB890M#pmt1D8{X$^EyFWuw|ieT|w zZDGM%C}y=xwRetipr@WdS*aWhzap^L8^1(n9LDV5g?kt?TN@}rKgCUlte=l&&;N7% zJp#76-_1Q$eJ`kun&RDk*jZ!4#wWv`G@~iePtK7D9y8d+akRSF@bM!CgxB7m3-jR{ zGZY+0)3xzAJ$oJ5LB2Md|2Rt!lO6T>BX$Ze3vtjNUUsK_3h0yLAr6Xwl3q6iOb8{8 z){lFuDOOKD^9<`GUY>NgIRW;PrTQHw|&>a^&w%&*++w}D^BL&ZjHEm7^Q&1O}Pi; zbypUE1@2DKb!4Uj;e#|y-{Pc$(j>gIwH2RW*bU3qu&FOH=TZFCF>=kvRB7+XfU)2) zGa_HE*vR$)!i*I65?^SUMh`-as32et4F@>kv=7J0)VsWnU@Xw?w)$$tmygo=`M8YN zy2Y{H=XtB;h=Nl7_WElER|u8(vW$bv?H{70|MB`7e-2souZJxA{(L3WZgJ2OXf!+R z;LUt5CtHP0Kmh;t%l|>hIosa`Z(l+OK9e^aG7Nvyj6D?|9arCdy_3&a%X<|tzJb*5 z*8n+duvtF6qGR$9SY^^peEE#|KQCnvqbcBMR72ekL>na87E0P*E2MYH*ELi5itKZZ|BwIsJVXodwq(1Pn`l0 z1YD9qB$30N2nqxdL=gJ)=h4ixw>_S1`ybA6m0eRk?e3OZdfz9k^;^vW2JfH4`tVVy zmoUD9)inV>t#8x-?SkuD{)#peIo6MAS@A;c8r19w=7w;xYacDt{U2(jpgEzO-5@QN zW5jk+mJo&I-2h{7f1ZYYNhDlBf&+@cyW4YZgVMR4lEB6AXtf+s+fVNjxWB$xk6h`RceBWQLkSMkUL!qn)wlW5vuBU?FX8_aLD{N<^?eHshUC=(;4t1pI7?s%MQe@eqq2APK*&~qVXBh~hiP3lh72uGj%V9>pobPv>y$z&d&bu_vggtjP_DdGuBc05Xx?3@osHsk zwgG~}7EwEE24Ja=s{6*fhwf~o#!889VB>tz2j)h#kTMe2DUFu2C`Qgoj+4Kl`!{c- zy?CH^-D$lxA$vOB8CN4MyKq3PMgif2Cwhs4MOQ1Fx_TqW9KF>XYK_-XjpLaJEF(xR zV<;C({2&WAwC83=BFpi1<{C}B&=u&OEX}{2G-WF=FzqI{%dIVMr}B)&ih`e}1(~)= z?yluL<)dDCokvrbX|05M^ZLUMK`l#r&EUE9uErAe!W#|ZQa#;(0jcC5M4pnXI$Q7Q zZ_=SZQ>VH8*Eb(*SpdaqTERF3C*r^UbR_<+`uyASQ^r2WBmLX)=x9aez(v%EOubp? zHpDmG0;%Iq4IlPRZhQS1x&ApCA$axrIpRL5C?$kL29&Oa!dycotj-E_JZ{H zz8{IlHym5vJ|E<_-zP--T?QQXuXVvMMK+Kf^TlI?@-+K408>N2E`FC3eH1;w!NMSB zeA~h9;iEU);D1O&kjR2L^MhH(fsg^SrT~v_S9tYvnDtR$hzYC}Ov-`_5Y`HiA@*E_ z@1|V^3T$Twn67_U(l;{=;e>~?6w5X~NF%F*;TGi47JUk%G}sdJMkPJq&iJal%in%d z7`yHMQp({0komWW-s#)ZQNS+ZyJgt@sE6$|b_s~B89z4%7;`@dwDzA4=$`}RSR}4U zYKk~f@rv7Rj#4E@wW@=*T4r}NI^`+(KECDGIHYPj2L^12V8GZ<^qe*Yp3a=dmXaep z9~g2!n8p(k+~MJUKpq4FEE)V?M)654@~nq?M&I4lp^1~_ieW)u$^Kb zv@OA67j_ZmBM?l`K^~vCk(wrGIo+|B0aAt`iGxNW5T51>4Xp>)YM#Z#_iKGnL=H`)d#y(90|`=beiyu&~aCJwIFI zemYJg2+V7Z>rWLt0&ae>zzv!sySNY=D489=ZH3f{P<2Gd=;;W_Winqbh@z9}6yQ%sMqka% z%pETk!NmrPQt}F_e=*u|4M}w;AdOJxeeYWN)paKkn4^+A>;5x6fmq zhK00-W@e;NlXJwsN0Sv{yeb0gd**fqMVX1_k|zL4?w5&IU)K}GH2WMp`mse~w>QN< zIk4Im2`adDBnxQS-u93Zo!OQ@K;$uR#k1Knp4sj4ro{(FH`9BP7u(tvRb=SkyzNdk z&3dQe=JMETy(IKACVO6&D(B6Yf+Yj8MenM2zT(t}J1|_rbc%~4~ z(098ds@5XyOTHf7YV;mUTt1jW1Y=!@r?J`YE$k7t9CbwQFA@X^dncS3wok#5|wau#@TMVT|{f_@lD|x zd8PDQe!DO(eZC6Y`}MLYU~t}s_`R$}d!l!5E_wFP>@JS5Cb@g3@7>X_Gh@}VY03u} za=H9mlr8)LpqT%1%V&8W^V`3)$8)+*^K|bX&u?q4PpN_J|9f(Xe=rDBgpVQuwg0^h z`&AhVGM4@)lMf`We^WwyFCub(2TBO=*o1TbmL*gA0d2mSw5Nnm7^Fhm1BCR*x&eS= z`uzC=$^?C615=}0-dY_9-)1m$LKs|#L7p-@=TJa=suAOlNpUYw$|B#ttLawC5) z`CR!JsGVxC3kh->mc_lZTE7b-G&8n62n{d{5Ex}}bSGhf?M5}&QCy9wIX#ix;lw#< zxyMKkd0cenVHwXJ!nX1E`p~Gt)KTr$fFMLCR0w4?fz#x^gQ@dOUlvbi?a)PMS~y|{ z0nlRwBz!m*ls*#sBwvP>0&MB!@p?X6YL1a~Eh=0JEW+>8)Nhiq*VDYh^P7Cow5$qQ z0U~*0m`D(J5|X|~SYUyKG&{Lx@J-7q1#}M-(qkabK9N$3&0WDL+GT>3erLrT2;i=l zYrIh!9v4c5g9C?5o*+%{H3ulFJH0^dJP{b9{<|E-npi$HD-DO5oCY0Tahqas1qyR#Fp2zE8-5?aK z5m>YH5QBYf`ywyo`ck`iay_A5^g1J8dL0^(=xf%&k{b&UtGg8+Zl-itmAW%7ngsx* zfrMPX*WfwgAQAVsRJn`vu4dx~Q*UW8ksXo6DEDYtLtJ_ai>L6pX@IN|D21t1@?!VGl$udk zY&VhDuV8mWb|Qc&a@^fs$W5-Mt!M5D`g*kHGc+}mRMzljBUB@UV(+Q@*qn!rDI5Y6 z7b9`-gJXD5*G%(NUx5l|SD-pspXBa^HfMC{Ce{EZRuE+G>gwnfY+uecMy}2CmYjW* zY@;J_=PR(ByAL<0AjIWdg1|@u9tnzUy8^+(l)8Z7H5wPZs}7bIkhRk#PuCz95jcR& zs62S&s3?AkF`{`7EZ1|!W^|SF$m&os0l{5)D$no%QLK=P450did@u3{JXj2s)45Lky(&~1Si8*qYjeV(xMc56TFgBO=`6OmA=OYLcjX14cURaAqO#&!P0;SHoqeiFIL)A2d~2>1TUW(HUJ@HeH+=PHL_nE##9=5v+9I`!A3jVtoPS7~GagVN@6mG6F4+PHxw zen)$|--j?C=h$}u`Q8+BC~-c!!2IjACUZ$EVhAg6y9WMF~$bw&1{Dv)ne8iBkzzuC22$_$*<`I?YR?@5Ch z=<_q+Pc{gcz-54~?>~PA^f~A@+wcw1#sGA?UcHEVL#2m70x#IMsrSbm=0F-Tv}@Sz zgFF9t)vUjBiyif=Q{Id#Tp8p7y56)^04s4kdPw1Tj6PQ331WGp4XiF>6)o+F5JH9v zCHIhSkoJf-4xl0i2x?vG$?qSFA>9^V2>OEs%?HaAYa9@hbvcwoFFce^--S)joShk7 zv2~rPG`MSjxW)b(K+D~?2oA%!3#6VNImvz)OD!%qictBrrt0A*w-_vXzT9FLTW&S7 z8(w$!T=tCz%x2|Y=4Q1(EgT(&@l&CyoAl=oag zb+p%Apqd1TJMr`m`&!;WW?$r#4A}ge%slUob1)_9O16zVwaj?G*dY88boZ~$o6lgj zZ|3hk(q|s4{L-!ZcjtqA{+ti{-`XE=FYw_Nai&w_MmG-^EjkB7QsVx+e-S~AVT$B$ z?-8iJVG~rRp6N>8F=enx7rEQF4klM#dk_eMTD<$d+Fw`y`$Up|7N3dbZ&3lf3Qb12 z19C8A1aM&XOuom^h~IZnAiajJB>3%PzyAsT(+}`XzxQAJ3E(OD54ye`%w$f$d;pj^ zczHkb8CWvk=WtU2!(mVKbh1amrjnme z7#N%qP?JBCZ9_NCovX0g@ky#ClKHMrsoGtwQv+#jKBEqYe!HWUGZW)QSBP^x9q`NH zTm_}bk|+Rff#6qQw?x?NbvWzjzUuvDXSmiu1#Oz@2CwnD!kF!K%TeACa;t*!}We5<{l5gwpR2^A*AJr+k=-#6J82 z;)5XU+Rdm-P9ZL`>oP24fQ}`;_uc)Ls9(Fh|BkNjvyd*tZ{P#3TS13epKqcJl^K68 zF>v@M%{qf^vDeT?_YDJ)C8IO7c zq-``nY1A{V`V?dFbW&hwf&(Xv6X-%;-Vg{u3~GOG?T^(E zkoZ$oPMg2;Wok&-#wSxD8GUcwEc7zXmf?L9%jnKRs@AwZj0 z(Z>6uRlpE|kI)^`D!jgNtR>tAC_xVOc$&JQ4Wtz-&Cdu~8aIsFQMs&K@gZ_M5Q%ANf~KC=7Yy0brH zPryC?7pjKpuc-$+-o#GP{wxqEFDuh|0%+)}LX37ZolC!8FB3R(x9*H)ml+JhaifIq zmg=H=rULP#7C-{dh=DSm2BNl>n4o4 z0!&q&`4m>gPFtPCq+e)1n<=U^obx1<7#Lsdi|i8W08}FKt^C#_C8{~h2(U0f<^}4*(O#UE1o9l`PbG#46B#^crk2~P*)6Ar zIu{!l)E8o^rl`zxOD*Ol+zw#IVyt@QmZ zl@Z=T!n>9O>Jl?}7WqO?v139~kDp855A_}#cE2ipwU5B>(;q_V+njP}nSY?RfA4(( z0TsJK2lrcA`==xO?9w463+C(JyHv~+gUzZq(h`F`L}GosFW*uaKhoB(m@MaaN{Ej} z?Bjirs!#anHz9<%6N2A;Cs8U){<}kyTR~t(@V`OAzqiT&1c$Z|y!^kMe8Zme8=mT? zjlM{h0kH6&!5Vk{i`({)!85O5(ahgv0#IY2mOKKwAjsJ9aTn`~C)khAyQDv4>)nql zRL%M!yMQDZhED*px;cr@5UZ$F% zL25x{7vMElDm3}IF>-Daw!CL!DGwGH6t>STS^DGZdH%gg)jaV%uaaGire(I`)Vr+` ze2n*(qoLcoTxTktZC>E2UMpY zM{3j__cBD<+site8LwF6Ti=5u?zP!F_KlfH0*-Rir_FazG5PzYKTBZp3itOyfkbW3 zD|pg9`|QvkNZlW6%EY|90F#k=s;-Z_(>SP-X{0{vh;6+-trhpL_WQya0rhyEhc5S* z_W@k+b0*FzS5s)*E15pOo;3LuF>~MQ@QjMEWO$#i<|}KFNI`6XLLCtAg%EpZ%o|^P z`n<{H&A{Xu5c!7{h*7*&1=E{_RoLUflK^Gi3mW^ZuKa0TWVrN?UR%6rr;rsEe0`2) z`xirfd%bzwdjK>DLGyng_5lYyPh@2B(TjC%h>UnWC5hy?a9F$a8<*Ge;?f4>Zq>`X z0j1fv^C6F;^Dc9r(Wl(Agt?z^n)fX3yH3x59G-S0p7Yfk<<1?czfKQI9S6UdNa^q~41eE<_lit#6= zhe-O#q3+)KiD8(uI~lX8`3%9Tklb6(2iW)v5aEZ@1z4$-C?;FBhIw#Ax1z3YC)&+M zwA%c28|v2u6cAU#oXoMWQ(RbfpeVEmplV@mTa z)Sh;L8Zdlio*W-9Mm>-F6 zgLIH!LH!6C6f}b{rgYB1o2;Q$2~vkts2~tS6f?#~qR_bQV$wTZPX;FX=cyR&YAWTr zsQQFZ_oui?pHvv8;UT^-N#B~$v7yCaId1bS~m0aKWnHqEX%5x_fV^)qHiM$hrm=}GpTWMBrn z$5@YgFA}=TRx$@>1(cL`wQy?`R8S?rb+IuMb!ra$;>x^ay|sDu&ju6c1gJC1=3E(rxoTcl*G``J5y%JeBcP(+^-AUV8V ze>JxH#qIse`uD$ed*99wr2@uwHt5eM4Y_H{_8$gU|Br6(?dRM3>!$wyd3*m_j`yE# zZy@-WjY&BmTs-;&E+Zn5P;bbE42Yoc;vupv{GQ|ED`Tm$YX&O!6l7;j?F}{FbEe-I zi|=2`d<6&uW4l~7^@#Y!TFD?q9Wr(#5)ziqoD29@{dGFnhoky{wG_>iLYCm?CVTHl zaF7E7rRHbfa;jb@N(h!TJ;BXR$abFc%g6Qh$`=t{ZQ~G~Hhpb`7Cr2PD8Z`W$bx;h zIRVdW6T)4Y2+4hFk5)Fh%E2Knmo2pq3%VRY!hqSYHU?j+N){P*k>rE{;NVq($4=g? zq*#th>wp1o9}U`xUZ-79C}mahkmYp&?tYlyw0AmcRefh+aJKiot2b}&{%EK?s~|Tb zsh<;`(!sHH9u0&724O5JC!LQ3xMO#OqNN0L-*}}B5k`% zKD}&tH&sFyyIMEH_pJ72LY*PDXg)^0p*^KjP*?}REuxtN2{K2P0bfJvVmsJ3APSwW z)CB5#R%5n9Rk3dM)?9X`F;Fgnz$cC<@qW%YDJSU=jF z;_o&>73>gGq)Q4w&?_POt#tfaT>npRZ%9l!ICq1fx|;JtiZw~NMHPy;4a}cz@1H++ z_xn%&>GuA&cJEjj1I95Fc)uHhnQn*kX)jayNMB2eo?Zya*GCxe?Uah@fPCHdbO)0R z7yz#zX?v0Pf?xVtM%U3qQ6Ik@Y~67(4u8E4E^+1WI1KZoV#u)v408;oPq7+e65Bw! zgM~CnB9a~StDF_mWtE}GdVsvcF^agq>dyRxIB@*d?iC0=9(=d;WlnvR8XyzGgP`nJ z5D=)mvh&F4O@P*`@abI5A!Y?*->L?|G7t8?9m8dsEV?p!e{GS>g?J&1->*-$gs@9* zgMbv30;RdO9$E-`>37nj&~T4cP=8rb)m>{iU2G22YNCKc{0eOit5XfUXX19jy~F4g zwe0I|osX1{_q+jt5GK=w=O$*8ba#M!X92S5-d<6^kN(-O;nGG#Y7K2p9p?$b3ebrz zY_~j0@vajm-%2yfFWEFu%3QUk=hBaFG1r5!Rza=L#+A_&ihmZaVLaE{V;<4GYr2dR*%4-keU4sX2qr zyuJDFGM+uHTwHZz4Iqp?&7g&d+=gnapH~LIr@#G48vU7Z{ZSe1ss&>Lu1%wWShkQM zZ(*>bC61An{h3Smm!GWj*Xxhx2?UX=)pH`>a+SnYhbn($9f-X7%Rw${*4S#kfdDGG zvbY+5Gf4S~mq3P!ou#!~_Ez30gyJq|KD$+vLVdmn4l4GIF&qJc^gw!d-Vwq6a^&Wf z6QqVFkp~aK+2rHZQz3pvBtf?&i@EdKa}|o?Dj*3 zN(eYjAX(s#BGqC8>+|}1;wMZhI?)|fSdWUAcT17u4g$6F8%^gE%aApgt4?5q>0pUe z>DJZ@ zfA7-QIe^&Db~|0F*SZ|AUb|**0Ox>xguZ(uLbNg5MigM(se%DCSQQ{wa;$+`nUUs< z1x;LOJT^_;f{Ayl1U9kePJ5=}7^FjHqUbA-Z$&<%+fpzg?{(==I)rE$K&4>g6-G3T zs0uLL-db3pK$bawO6gmRN`|FZB60+wm`e42L#H zzPR&*6Jh$4@`v-v7k!|MY<1b~Gt5)p!J_lU6YDE};F`L?Db=D!dz72sg$i_whrp1*bvk034=zc=QHGh!lFI^o*6ps?2}a!&+8~U zU5BEVjJ$=yUND^Fp16VR1UxB%HUhH{2m0V^!X80Hql@D2P0TudZFaxAGyypLZCm@v ze*HJ3^Pe2k)FeOJl7>7IPJUnEEwk}`vSa5q%YGF~`D0rfx@O-nH1Yd$KZ;~1149UKa*RswXO~V*&W6$#uRr;rSpV4@av`csA z?FGeSbf~@O{psd*h3dK`PYDh=d0XgFGpHBu-SvGBpzXVfn?N9kC|sk1VJyVUxTt4+##Al|Bg-@J9}y`|{;`8~yUcU*Tq$SC2aFobJi zW%jM8o{!}{Eb2@LqhH67H-Vww4!7-k8^FF-$!C@5Z31?RkgJ9wPo2}|Wh&?y0gVUP zUL$NRO1H5XYXy3Ob&{I?9ky98kjLN*M(NoXYxVtnslBX+Iz5ocf$+?|#ZvCx%8Kar zgs{jA2${R%JIuT7PVgl0sC?U@Hv59?g}jVj%06?#Cj>`b;8|=yzZKjubl)sD1RSQf z6Ilc zSS;*Q{SyaEY5?P@eEx`}<$C0uhJEag(mlXZc%rU33NMq>HFjMx9tb+cDiXSh;Az@&grQD9Y7O7*0WdTx#BGrwGyXT&J#ME7z z#!?aTzueYx!oT2-P5%XKOaK44g88Rn_iu0P>u1S?&tH4mQ=HnCspR;^eLyQka8qja zmkTEG`P+i&N1+?~KWVEJzupHB1tI#r1S`NF_vN}eP5_#!T0Ta1{&%0ll_0AEo9Rd8 z2;6Oe=6~~>!UsY62)Zixi*Ji1&{~;4eRr<@&)qzei?^azPxjP6^B3`}C zuu39W3G%p{6JuB5VRo|Gb1=<&fXyoJH!;>uAgsspR>1E@Iwo|zK-l_6?b+24xM&>|GENvTjYDwzE6@QVy?YPTcn^*_WQFE5{uPa)v>;L>_`W zW3n8QEliE`bx-6&Y|`)MotFhxzL)q)={1+M$pNQuKbUyB$5U^6h9t|fTp8?1N!T?F zUh&u?{3Kf;?(%^1W!*SCSF$+4e6z42|&uW=3_ zXh8?LCK8AVuAu53O`%o<0rtC2AoGCZmT!9?1j3lbzB9}BK#LCu(V5ehnjl@O$v3vn z73&R<@1OKn5Nq}0MhEqq4l1e2Uqo^DkmUxP&G!z(OMPSM@$PuL@$qrSuRL zt&FmqdxHFj{(eX@WNHmBgS;Sw;rDL*YQ)ohvl!&L6B)$H&>GYR=u=&eD}X2T*+vMI zNQk0Y@T{xeBd%>)4^hAEV9QEk8li=SI7EzPMxl`s-A74v#Pj2>LS$m7PgV-a>U1b4 z=$ufH(5T*YCuHI?-P?!SX50%+YwzYJB@@%YWmes~10(=L(}&Tk-@coJWsLsLxhw~> z>xOBY6#;KW+n^!Mlr(Z3w~nyfR+oU+*D>AqWtPoCr?~4uOP;0*CIt?;6zPM8wFqZ% z$UWL2$x+^m4?u$R#h$9#3y`IA#y;yyIo=P_LADuekv03C-p{-QV2_xR&mj4F&x?)7 zJmbG!GcVa0QY7?FdsRJ%w_HCsTMS_J&d=e1Y&OxNL&|v#L^X61i9UkNA=?px+%03> z5N?%`HmdOVlelh1zn@;4iSCOXa~D|11gh|RMZh}%;)DEpMJ_{1n9PQ_`1!=B#!{wZl4Bis#h)uvDX;!}8VIN6g6M;RLC5 z4CGB0Hk?UoSG$9xjcj&y-8S0GW)YDt#h4=DB8X8jfwCKW7&i9=>cU(eW5DMmgdF4$ zM#Hnw6D?WhnOO@2!mY-;)P{F%xYzcHhMo(9b5 z{jF?SVB^%Q{MjNqp!0a~d=|-v3@5*uSrOn8U+Fme-4D6QpT|}}vHp^a*gwO(VF2)f zdH;}$_~7%HlDG%IV)gHO0=|dy^%H$H_}|AOhU=>)jZfnsGG z$*T&s94oH!Gpk-@9=k-KK_+iFdu%#(f4wEA2D@?6GIH8z&^siU*I8hVSI(Wm=rPl0$<30+t15OBj&)FZ*|VIH%&QEz2NwpEaG>#aTC z+~|A&TuZf5D&<*k6f3W*0kNoX(sKJfd97KBmZIoD=VTr;)lt!nn~02gF#t@0=^2>X z?hTfZ^SA|IO&@@t`mT=+M`r9o8!!fY<$1XaZJ8hykP1_qs<8>`2t2B3qI8v3#NM2? zg3VI~0FL2`0nS~5u+sl*lK7|={w#3-n3?(kjJTNn%_N~Y$y*CB+E~rz=*)uL<}Vte zg07wR`|=b*MN%A4nW%%xO1Xn+v-d5w$IYk+l z3MXcDzl}reUa}4%mC~m|4pig=E`sr#Wl^ZVnjijjhW&Yg{~Sq$X!MkLDN&7Zt(J&b;#-YsWeyt!Sla+hHYQItY4gAA7j=x8QlM)Gweel`Um5{ z?_G(GM~@B9Jy26zjgZCzy@c?zFqgU|iZF&9K|<8P!!UaI_x0bO2lU)dceHD~=qZY~r#L=-%@heYG`NT`sc%x-d6OU#MZ z4+5F8BOb*5jPjQof-#2Jf=3i6St^)oi5A{QOR>8c!a+4@hNzi+@nlYjdcB+>deOZX zw+Ly=H!9r2c+VV@elciY24lypqZr^dp?%*o*#gYT*O{bSPI~R?1@_A*sGY_pKAe|D zj5A0>ps{xc>BI_bJruzD;}6_q(%$HE|1m`BQ_f+te>n!UO<&Nnhox^vIeCynJ`JLO zNUJv38e~r|kV10MWcHbAz?^wQL^vGj`Yp>jkKFKzGT4+nu(yJPeEYI??g}ze)gX5e zWj2A6j*7ua-gwqC?=$oja{KjyPzVc3|A!Zpp@1EZ+O;{7r|<^rcGT$l4Kk5abe|uP zIM_Ojy3jV(B~xSVa?~)dZgHh^VkE5j0Zj|Sjl>pmw*VIHli;m!C=Ce~`nMp;HEiC` zmzF`XI}Q=zO}kMX)wohw2p42Wl=FXy+V-VL=B|qJ$E}SAVbdpo{GA**;*J{XpPFD` zjhk%&IOi89#E<3yP>>v4lw^kpAbTKMHiZ>7(s4VE7Gg+kW1^wL4Gr?Y5A6&5PH!}_ zUZoyE#4@vz4(2>>);UWIV91=g$AOatyaG4CMIYMad;HOIBC>|QYC^I^-} zE>xO=q$XihXheGD}tWfGl2V|HAKA#qL{FZRXJhlRs~7U@t0UhGZLcXwmN3 z-PB<4u!mAduaQ35xkGS~ltnu*A{hZQztMK$-+_!=g7tJ!k5t(_thny%@i_NjP@^t} zkG+kSAj;0)%cO=oaL?84f)?UO;KNsDq0AAbDyU89cM%x?q zaZTIXvkQ&;v9?jYNF)SW#`JU5ZrM3XG$csfP=?mvQ$=A0Vsr7_|O0F`Ufy z$)zFYmpiXmAzw6CRFR8)02AMXXX4lXdGX29^Oz{>UylR-*gX7s_x*PlFAtI$feU{d z2Y$PF_pujSZGze>BHvr$^N^I!?%4mth>Ps9c(*T$bDU~ zpj7+sU%H>Z0VHtW2a*4=ad?0H3g#aIDh1(3Smi3I90nnkLL2u?%I_`=beG7Lhk>-h zK-~F!$2V!NJY#|>Odcmgi(PV<1lZJVwBz;N=b;TrHEiJ{7%$ZEuOCMndy<7G{I^dV6Vw#vK%!ZSNPF z5t}(KJGReTei*DwJKp5j%`&vSI$3Gwq;0b?>E3q?!Pn+NG>!rb%dPuOANV~2?D*uG zN$|R+vU|I#OEZ~#I8Sp5Cy{&v8z{x@>&=l0J!Jzwv>$)4{U{y3k* zWzHEgokAqyf0p2U>_WS5ej#xHafrfRZpwt&Y|`A(=s@j}TEoUSo`&o8u5`Uwg*vwx zu}GzbncCFp{Cj`00_+`K!7gO?dnh|$v@1e{Yp))`0aR$Nwe{pZzt67eO>?w|(6=)_ z9i_&6kHw{ihK`w>9^dN`zzn}27{A7i8T0EKyz~zU{Xch1pUKbH7lMcz&H5KW@_bF! z1kRWK&*z^V0NTMh2=9i&Z^w54Sh$wJCPv4$vh8K==NG=IXnP9u%rHIU6a3lE*tOm186n?c z5qy0U1PvaSSGzw#IM&e}Kr6<*o{JskwX<$T9VSM|eqS z7nGB`SCy|x?RgE}uucU|7m%skqp2dE@r}R^y{x=^Qc-R8mM^NmvDEzt7M{}{L~^%c zehtJkd=k_d3u|83t%?pS3Tcu*aUOR-yGPWJfwOp`>3{*q&P7{Vf9ybk^L)g8&B%Kk zcACul6hJBcg5*jOT~E?$pDlX3+o#0Ya6kzL5Wz$0F+R*VL7(hx*3z951AI7crh#j{ z2TzB`L0%h7WjFIyBk;RtZM6gia)IwZMuxiG$?miCk6I52uVLN6d^YA%_TV=)HZuhd zp*8NCHDk__soF%Gl~TMeo_zil7Qtz3s@ut9u$DnC?Bg!)*4{eg6^Ov7HIgFX^yr!e zv>R7<-_hc+f7}^Xft4`Xq55O7v*;E*-$#|Zd(2a7q0K@#t%n^s@O#hb?o5{1bL(5D z3c+DC97Zsjlt|-*uJc-G6~fVRZj7!qg0~~2(fN>6`G7!K4ow<_sZXv{FiYyO^}AsL z&=M%9nc-?F16?e+gEtv4$dFh9jPc&1V!v1{(3tJPHG3ER3tq+41Usu2rL2@-rr;ns z%}{s-@RyzgS;Ge?J^5+sz2~A$_MQ-#mw&fYz{&c4>%5<>dXsOj-!?wyE8t>+@6-zy z`@`uA!?*858`T5+$mdQJbEte~SRlYu)ah13)Tc_$aZx>lZ57i<^i!PwX> zjrk?V8w_~6)Xr$(-LL+LFNZ(>hfJQIBXv+kxZy|uxk7&0xq=|X{6kUM6 zu3fP-8t-klagj!4o3{YH85hI+)p_>aqoj1{PPX@RnM=sYx;$Lymz3ae|s4Arg) z@Rfor%Y?TjOt)hY|2AZGV)=K<_4APQe#r)O8oE=6)wZ)A2$07Dv5pbub<=Q!`);|+8e zyEH-Si9MnzOK2EH<-^d{oe%_kzdU_{oCJa?ii`BdZNi=b41H>5s^zhl7-osHGHab_ z(wW^yOCNE&Fe(w;#6{e#X5)$|Myi)Ne|i#)dUS}Z&FKu?gn}c%=wf-;MjDG z12d%hQ6J0q_|Op_@iVlo=6PsNeLL;Y3rn|`u%Q<|)s;(JAER0#y&j@ny7!aX*SL9J zM6eh{&cy)qxSeNWR2h>?Ns&0NU=c2Y_iJ8j<%U`4nt4uwcUN=%{MqFXNY=wO0=st zpo2Zy>_~Do$@K`ujNvxl<*-6L{<= zWY;H`^(*B8Vp;v2h!qVaEj6FOIuB<73>rSq{=cI^VbMf|DhNFBhDyC}`K)~guu!Na zU|Ifwicf&uel3v4F@88!TM~cZp~nf58^A+w+-Grch0MMn435VT!p=<(TOrxxv#l~D zm>?$6e*cv(`Ym2Gwy4kcYUhJpFlvDJUe7za)}z`8!a1>DMRbH={`=!bLk1h&`l_QAa7?fwQ2f1f`>czEzs$iF@0 z7pS@6Liiq0c!Z~D_w6~t;o&JwdyXdf0^fp@ED*(xY21H%_`f|*z66ZY_79OVm?Kk|{FaAy7>!&K_zha3-0u%{{ zfj+Z#YVaCy`=sE2u>r&B2TDy&1JR{Tm!yG%$0#*jE`rV0a9daT!W_Qpk>b`lS zF`V`m;&RpP+LVd4SKkYo>6HweTXM1?r%boU4BP@LkZx%F&b|?EcrSd&9yDyPS))a) z`3@wsdk%TU?{UMXJf1j67lFRQVkO4BqO_8Zzh?wcGx)bYaM<7bqQA%Ha#t0qP7o(7tY zvkdkQ$e4KI#B|CH1*2ato83j8`K0EkX4$JjmxJR-9$Zzkzb^#NGE$}F0B3Tv6tbiN zvG6*{Uyi3=1itQ4A64&=)ONBkfRe6zL>#B!`cgv%sE9wYCjJUF@o86fdY5W{^dLi( zB6KKuk+y08HL(0L;wL+*ZFj`(dM`bTG9>mOK=inqI`|aVQj&>Z^!w$u<5YlXgVkox zlnZ5CpIgk>Pk^OZdt#W2z=$i4WmU6>?37kcUx*;vdZZDKw^f%lJ6)jkr%1#+5DcJA z8|wyO4QrI?3z5(FDXr}NF|ViWdW7^J6A8v^SNGFq{s0>H^8TR`VbC2ir{*GM_+A8rb^ zKI461?UxyV0~?aFnFy{Pw(KajW!K>+8-Iht>JukAt6Etl34|p2bhXV@fIuKXLeSljfw+sS zxCn%!U+fougCqPU{wcrt)f4TVS$kJyU5>k>Bb-rHSwc&T#RArvmodkPd-=p30M!81 zbuZEu48l-0uZ_$XuP*QNN8ruwLCk2>Ci+5#0TOPoKa3u2zdwy+7!ag11Q3H|VQEhm zP~+brzcl1mc*CDHV%YM&KIGpVu>g3xpX5ZK_LhA`Q~_fUGj7|1ojpAT4^T2D&?o}>o%_<;VWdg99cgH2sWb3-Bd7zj zx2I&~sYbx;LV44nhgpGnHzErs+1> zLr=SWuVHhmQt`~dwmGR*r-(Qfsh!~ASV*PI@QK`Im2ls(>(!O0FOhZ5SO(Nf}|kXj3X;sDycoV zj;6Y~1ohFi_qjCpb`2Ond|VDL3w3#m>LFoJkZH|fr_3JK;LCf|8FXQ1i1nSDH6`#{*XGp6r*5}fw&e?A30x8OAPBhY*r4PuaUbH7djG4SYC+lr~aZyNs*Ef7> zf*Z|QRe)(gqT?h!Zg3`4KONG=rMex?+L9fHAmDFNR$D_RY=LQi#zu-KMs)Q^?-B@u zO)*TfuWURB78zs?1B6NQJFx$Bpf6->%Bh>oC0BT4y3}TcW{ipayBBAmmzIa86UG9Q%!!Xw#g`3lwK#8*%GWou0Fy6;S^((*)Gl?vGC$u$rF)-; zpTo*uk54~0c)F-wv@U?u6}Vi#`z5dPw|03}9(VcvOSVQN_qWTMhXC@Lw7>RRf!0*= z+5LHq0v`?rtHS#_e~AK<-S!B{aPa0LKst5o_`U-DF+(;75U_|YCL10gJOxUxUzD-v zu)DmLa$meQr9Yh~R9ZL1fTk)dAsu-N_G1x4490nRb) za+KkM_7t!f7Z3w00cV%=?;_&qOFZlVnp-ciXYKjpkx)y5!o!z7 z>sXoCiwqfmwmY_qw{BN6_)xEEkjK)s2f1Af93u{PWpsQR3mRHrzCHz zK(Mvm*}L|5(ScCHpVc#^xZ1-U%7*IOqRf0kTthG%R_WH2(v#{mXs9IYuy&a#Fu*>J zo5#ho(5y`N;lZd+JT21pw)gg}*|%$yKC#v^0&u8F6ufH9B@ydcAVP^RYdg2mDQN|k zIag1v$uvD>x}n9Ffzoe7nX}22XBL$i<>W=&uctepNdorP4w><{7?VVtDVmh|?9ILK zSG?0wSc4L~$`>=nS9<#5?;g9_&N1NnQrs_;6j0av!YK7?jhSD`1inoKB2QJ@pJ%Ed zvO9WyM{6N&Rd%{kL9AUn5=EoYiCs{5CENHOOj4+f>8T5Tti&CMBN+o4nfG=LOriqp zl85zx9b2)TN7!*DhXe=63MAVI*?tsx z4)pFQ&#Y+V#@&p2eL2|T79EHT-O9l9*Z}f)bz!fO+XDgQ)NAg*=e-Br5FqrvHnp@M zU7Wb1Ht=H+*6x&re$MTtDv+;)k=^C`B3U>*mAKd3b36QysD@bS*!t*;I&;5z`yrk2 ze6rju1;|nyYPB>ZQ{_rrqLN>QnS6Cm_8 z{I2p0bP}nN`5vIZ&!t*mfadCT?e95;)L+&)SEd)QizBEgj&#_k?h-1gF(25R8_ zWeI#zSC)%=R^Xgcqd086KP*?!ngX`$5%3EJ&6_(8>(r?c=yxa&bIm2Ta+Pfw#6Zg&rjnBq8yiF=M!`7lk`F~#$FDI;mnF4kmFvKhYDQSWrR zH+<{OE};2Nkor!-`t`E+B4o3li#MGS?qQb9d7SOmLZ@Hj8>q=xusqW{q6JF#7+hj% z%dH0W{GRFY-Cm2J!7@5*SI4}1TvWR!GMcn;tLv-^U=%O==NIxrpN>y)l;D4Ia3ZPuwdP80<|5TmL zLf@g(&e;+vab_1?@0@X9@VdrU?vX)NV?kabNf}&f)}}YaKE9RbscgDO=M*34TOqBl z?zLY~8f@d!yamT~YRHGH(CCLjn#~hA>p?f!#M`teaS|BTfXFRW%$R-{&zcS5v!C<3H~S)`a0hUlx_j;Nck z@i582ASn+FKvFQYhoA^+X)O_BIX)1*Mu+Kot@p!iicOQ;a%`Ts03EJK4f{29-DoA( zcZe#SNdUj>%UFG(|T zJ@%l~2Q9uwYwwOQ%uRjNGZ&&3F)+TSGmG*cTMDxCwR2qD)_@4c?$V82X?VSDv;=K5 zW(NFg`V1Bo%{nYZS&D&y5Ct}51jff_k1$y;Jl#lpI^R{8?sxf$C4G?U7KME0f*#n= zaPd`U?%rZs9+UMF{CUMl)nF5m^(>+(cTetFr1x&k9kN4Yz439|us2J{szEJ$?)MS5 zu8(qhkfA!w;L9B-9?$ML(6<1Kf(PO-tpo+dBqtd?FazOWcOlyDpzH(|xSY@E1qEn> zYn-G_H`nyDdN|OgdMw(mbSz_z?{d+{&>jN%^>xN9AoJdK;;&{=tF~@N$CmwyL;IVK zEC??^py`bxE9kVuZCtAX6x3JZL$Fc1{~tQC+(4dQ%qLl9-dQ`K)iXM5FJ#b=&l7+_ zhXp?s9N5Je{}%Aq_%|kB!w%UmiY~OfuNrQDuHAy)j**bfH*<}kUku%(HQkQCAG$$7G8e2U_d^x#`f2p zwQIDEb9G?#fUxB9u;9z>Re_kK=7%2OQb0GCDt(a6u2uHL+uojDnxQ6LD+7w z&3Q}CoYmc*M!vQquG@-Q^?8&~3)|0DA&MbAcML=zqoemHlz#wZV@~3j5pnGKe8_;J zZz;|84^Hq}*p!(|yzavR1z`#kczu~fBTh_j*4gtZ5z90fy(62UUH~K2$u23T;QzW^) zB2W6ScUs39n**QGuw4j?9VG=b+!pC615{y7bp5Fa$osa)Pa1!nm*y)9gwXL%s?ur> zc~-0+Sduc9i!*iVvQ5srC7rS-$gE9lc(0hCH&Bw7YxBZJRLid`Dn2ngb(Yx|Z1?al3*C@;52KWpwls-h zaRvtfp;FrPfbt}_Q5PUS8M!ovKTI_Rv8&DS2)5a(d$h8*Yg5^p6^Ug^CYrBMemg8k zaFut>;*>z?D|>V|Qi{*(LWs-r!rojt83c<+WQBxCX-ZCHseD}{h zn~ScL!MsZ>r-FH4#*H{TSq*{AIEY-`XQMY^*@um|s$w{^J1(&kiY<$yXiQ;3vVok^c-}>p&Fugj&EOe$rBZ%MG#y z^bKDEogSni!0!SPaan`F%gb@#_a~lclrik+ZV7WMPO|F2W zp`ZDi5%pUf7ke3?i2M5mhWn~r@OFtG=iyz962h{^OV#|(A`Z`T@t=!osfmg?auvAu z!|o2*gQc0_kL9J!gJ?Me^qexR0J*F6oX0zTggMydF|*-EhZ&7<eUZS0t1m6Wi8n0Y`6^P%%y1@-JVRI@W=AxR8oKcV1wB-v z>Qr-;QN;?Rh4)#@t+X{+6BsM*ALOp!sEd67E(%6O!Xr!O>1q~ijzYE*EQuAtf=%xV z?MX(#%vFoymqN5zMT63uPwr7)x;t#+xbZb7rL*SAmoqL-8wygA$ZW=xQDGuz{; zWduTII(?5r3*_U|QoO16cw?W;3w8(ihHkMl`skGLseEk2=8+Gvd77Rp`jgbD(Gem~n)6R0^a>f_YHS5tMso zQfa&EMvJw!Ujb(yYW&p%l+Tzt9pcp42qRu`WYoZCwZjx;J4Go z)u7__?Z{vSr?r9*^`3UUA%1n3yDfPYfzGihnOhW}pxP4jwKi=KR;yT0?`WgX9lYLg z_4%MqH&II7U_Uzs9&CNoow!!c3N$d<{)))Gi3wc{ykt;geX4--&BU+M6Q^R=OWO#S zgTznW<9xOhwsD)T=4+sQPCx^O$JWuwP9#v2H1ZILt!{e}xf@nDYdx%n;-7SVY(gtM z+d6}xB}wL+R0k=v9q`30VDYndM6eLEL8Pv_$+cx?YQ@7pCsI>H;IxSXqF#s^-HEK! za7u%T)_j>5X@Il0+4UUvO`A(yU2yjk=-}SZLl7;3;y~lE8?|nB-K@LycC|ZoEx81~ zZlv2$SIeeXCo{yn?F~(uHYlu-e*Ks;?E}r{Vu)`8y75Yi-WW!VvX{GB1c`n>Yk*sB zt7F;|1R4DRCoWyY!CW6+8&Yq z#rE+0OYqomg}DklI<$llNH<*PuwM$@FWDWVl>oAt|1x&RXm-3BGXGC@2X~muZ*rw$ z9NY*;4bI`c-SK+t&#*g2v*UGS|9rb+G&_*rZFh`{x5KX&?;#X>YHufoEn^wY(@g_6|!UNE#BI0tyXRs)w<9o;!o$?6e^PvZ)otKKR7+N)hgK)4piI%nJYfM?kOBR z+e72I*EM?!A)>l|tmvuGiE6XCSkwu0x2GXF9}wJhuJuY;m!2tIyQD7D#dLWmd3qZG zxoKZs(pi9;W%_Hurq2rid-_fPW1{_1Chg}g$nV5fu13&4@kK*dI8|0T82ZLnt*<&F zus-}GPy_6Whb3g#UI68gVFO6&If_6t7ovI3-JOMfmDjh#2nrZ2@-F~&KwGGzMGkS6 zy9;urP%8t#3DDREzoFZ|0xcODAH9{cNMUEYYv96_6~ zOeMf69&d?m4)LU~gEp^&ogNh4G+gG~DCri>?l*ZJ?12=62rerELfIXPT_YsAo$WSE z&yKPAhl|J&dFxL3+*riOcr0!kp(#L8*8 zOEwDcBv!EsmDBp>Z3vI#GS!Z|DMGDwS4y`u#|~~lnxdv*BRyCqI!Z+w*LRG;ix|hI z&c0Xon`CZ421@JXF5cWg>Dk=h z_fVO#GclRm|H<84HCxz-uREaZ$;A5b;ZQ1!%V*MTH zkf6LbgppDC4`D`~lPttCSYWUr0p%p>a8k{k8(qUKxwUkhOHngbNwSP%mTn3}1GtOt zE(bk#Zsw9Tw`-7o*psBcz~crIS5YP_WeA{LAbXCNu~CEgGgK;^E|u%f_bdAZM+h3~ zynv>`AR}QQSgD1g4uoX{dyS~iMLSqtV_cLhoMS=3`*pO${ zAOhtu@R*WjNEx^#-2w7@oD_(eVa! zZkNbS1X_eY3*kwb^>QuI|>|)9DH9=9|CKjMa@$b|6xv?JVLt zme}7;2Z&j$j3}PrdWP}m`{_J&OPIjjRO>cq?-93#Xck@KrolSz5o;C|(h2s~Q5S4y zsCTCKdF+~(4jH-)jHHSnEm^ zXJySY1EO&HFuQogV_$8r3wBfATMeUzJOg2xrdvF&(;W~{rOT;b9|48KP_CFNIxvpb z3SF0T?w*~SG$m4x8P*7G99tg;1z@dK&#u>mMrkse4w6ftodVz@tp;_29n_2MZKz&e zwh%bYXrIk?0eEuRc2%F%8TfN9ZuU1MWj4o0LYk>%45pLS=XoC`C;b)YNhCc1SqVs#1eLpwKSz=7dwNYx$Jw(Ex%iQik1#3a=HD!R-0 zeM?|o#U8qu%WZ4MtS~LsDGy7s>|kkwpIX%XBy22RRtJ)xXC=E|AQ1#o{jg|htwVF1 zCqj4yb%Irn^w|T>V42%w3`qiA(GlInQ>-IPEt6Pn_P~#M8u<-v&~=lu=Sxwa0r%XA z3wjPb?x%jfI2fqO48*a?j9JyMV^Y6f^!l{sIBNy`&9|JM{ssrf@3l?-9RCCiliv!D z(&?B&i*8?B6p7AUv%fR|68yP~@ZF^KeE6V%dXA=x5XjIV-)jXDDgePUs8aK*L?%zd#hqz0Q1^@|3+Rzu%6cGJ zG_@D<0MxR80Y_PrTChZL>iFYSUMRv44ED^H!o{wMlGe;AhicL3X1DDg4Jq!N_pS;+ z5iOPjUd1!;nE*HR4OBrJo7*xpaG@bN;DqXwg5YNChH73 zfGTDsMyo4MO{q95dRPDTT*=@5r!p!LBn~FusJ!|~Cskqcmp}Y4`QWDUhi@nU1)0Df z-;IjN2h*wYI1m43LKj(C)P6OoqoPf{$;F?<`MpSdZ*q^FNfY@KS`sF}DqN2#mm-)z z*B>W&(LBHV@crjAeg9!Hp77-Wt4M!B{s}>9AF5kiC-uLP=uf01eVlxtKYaTq1oBC3 zT=|nvpBO>=^y&K#v+uv3)s;H~Bd4jG$|=8xOZo681Qak}0Iy^G2fE1XBK7})EX(vY z3G}D;EzS@yX+z%0z0|M%;oT?b%&)4V`c(O40coT>{N}p_j0Ks^CYoP24q)WF7&1z2 zGwGk*Ab))Md-B61_q)lv-oE+pc~l?ZqQ3ji$!nP7KYjkmcYo(bzMFglN7@`_;hWd4 z#`BH$Cunnb%wc`<`?zlEZ$89%{0Z89`1bRC`p>UNzWLzA;JZ4HPtVcUaJuKH$9wt5 z%+HGIA>`Df@oO07=WZw8{PFIjt^c{RXX7@H8)yU5+d!VS^Q&*__5zF1Z=jOx9cc0SnOL#h7<_qRX$X%Es znB=z&Ch%-QA8|c--e7n|oqV$R9^X>W6OB*a>ofCmvcLQRZu;b}{^}=B(z{0APX6|J zrzU^>Y!|QtUW|bS)k+&_r`#b1sJc!Uh`&q?d)WEy)?PMRP^#mf| z74)BfoQOr`#S^Ls!`R6S1X1COxPC6=@Q6fyMpE zOq~2NDPid!SN;oVM2vgJ#F@BoQUqEy5p+`*LDK<302;$3)pg;<4)izi3V3<_ym`sh z2XP83)HmaP@(2C(7k~Knc@ht%4vAl;=JQuyR^kd)<|=-!l^fjK+m0_|0B=5=()Y%Z zc?C?_^Nd&Dghlac`*q20;wy$+;A;{Ec(|a-(7Ig`qyD`*{PN zgLt{CuV2-Xlcq0Q`8Z*4Ghlk*(3i`Bs~eYoxbd-*PM+H#obRWX`8}MUXD7PC878T* z6G5M-nsNfZaAxucQisof_&6~IgIA8m1X^h1-moSLHzD`dWGC#Ij}!I`j7qvb0az3u zwk3guW5S-6j*PJ1PAK@@UNI)mcNjV~l*xF)*RBK>e#cE@R-<|7nWO|sFszRVCm8#& zPfpP$}7Nl z6F8;d(0D!){-F&)*^ie&D| literal 0 HcmV?d00001 diff --git a/vendor/paypal/paypal-checkout-sdk/gen.yml b/vendor/paypal/paypal-checkout-sdk/gen.yml new file mode 100644 index 000000000..b6f3f794d --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/gen.yml @@ -0,0 +1,6 @@ +--- +projectName: PayPalCheckoutSdk +language: php +sourcePath: lib/PayPalCheckoutSdk +testPath: tests +apiVersioning: false diff --git a/vendor/paypal/paypal-checkout-sdk/homepage.jpg b/vendor/paypal/paypal-checkout-sdk/homepage.jpg new file mode 100644 index 0000000000000000000000000000000000000000..9b7aa61fc97854518fb7a0aaff71139471b72678 GIT binary patch literal 165333 zcmb5W2Ut@}w*Wc`3B=F>1{6d{5Hvv$j993K01_f41W-Ulj)smN1+h^KCG-*?h#)0G z=mC9;0ur$A_raPUOBH~Y`@6y50tlp_5Hu(Yf$^jL9s@rIzdr^d0x$r_2w(t!eZ~DV z{;LOv0Wui{<5{n#UDw2v^GPtWgfN-HLQ59Zi{|ZCmAWTaon)lx)x>stWMIG!R&&`( zHzJDC*$5I4G&e4kzDl=QZKv38E{Tn_!Lo5NQ83^DZ}24Z@n#RC5;1v)eNkvb<=8#6 zbtah0GK84(mpF#xCIC;R-cT`aLLnSDEDRgEh9ZQyi?c7M#~ewrTML)AZJl&w+^~9N zkvIEc+gZDT9`k)V;q~?}JvCoxTdm6Mn0TZW1rssZb7NGb!D4IoV`_lP=kBKmjJ3@B zUwX6^s!S?Va*+TdMP*P}Zt~B5f&0%V46twrJX#dH8fPb&YUgIOWzSZ60@bbEP04{( zrDP?El-x#ZbGd3r4ki?N6-x7>DaLIMyf9H?HIxVo2E*@BbL&P2tF2h2Ou%2rRYRee zsArVaXgaDIfuux87Lb^`3Yc9aW}icONic?w&@@B}MvzhDR0lxitF3?~*JpEEoVpx1 z7&xZ6w{obsE~Wffs+ynG()#U5CBC_ne=BS+`6~E#rMmN9Av3kE!5u4e*OXdc_f8*e zp~&pW=`1A~Y247+b5`>HQlZ}lcRz_Hx3H$P>^_juXOA8nQ3_G#!e5xj`kZKD7Zybulm$TUz%@x$9%UIs7k{~({MDBreLnG-u zSSqI8yo(ps19(8umb3c^wLC#3jpWvx4ae}X&1kd>p#+FDwA$RKMDYQegr~!0l^mMQ zIBdKDicXOw8L3jnmGEd|HWkGbXwVnD#2s-I5G?uZKQ&QVrn@`Vb!dD1wT90dh~k<3 z{@C{$Lnm4vRdS}+Xjxc0g^9?!-$f}uKDo+tQa->h{F;3FfTq_VnpP;PhSP8-pbf}G zs{NhdB^V!) z;@QzdV`ca#6%4$=BMl#1XG@}BcoK?13^g21Q5wN(Qn{N4v1!Q2-eIpHt+*}grzR^t z%e`w!sc~)oTRuGi`%wF;zhh;$?mgB-Yp1K*G&kHD=0X z*IM;Qt?g@wqB2EzTcR{(eN#2wfQ*;MaFpE>)Nzbx7Gh;{14Cux*7yOBWNvlUAbxq(Ksy02k1ZqSB!!*j$8)aiIak0d$ee zF+KRi^x$mcyuavtO|qd8E>^Nq78}8!W3C{Xd>o#K5*5I)Nh_qw8Q5kjoLOuT%96E% zNn%+|iu{KB`vc+X`$u-f;vNPjWcYc1d6sc{VO7=X$63NY-9mPgt<4Ae<^Vp2+}v=& z;zE>ziQdUoRT*dYoXTwp;176>#!*-*xuhySLXm;JWJ;rOSets%^wNF<`cH?90|=5d z{1W*RKAFXjqUEt*K+UX_V=P5dW=K&D-4nUdR6`t_Xk~yI$&@I#vGVb{k&<8;!6-7F3Gq@Sy%0-w zG2e$u-erv>SaEEc$r|V@xrUlgh-$|)dbOBfJ=AhoJnV_Nh2{?&j#VD3B zTv}N~z{-sh%wkojpf$5&UaOqce0ogIIg+gB1XUqOhdlA-K>8BA~lnrSq`>;H6VF4L5JJDvI30SB%6wBU7t@vK?K7%cs?B zV^MZ{@ac4hN2pAv83UL|vUkS1*`n8^jG~XqA3S^87e=Pany1!^8hOLzOm-bu8}jaW z882nq$&I(NMDA$a@?NdIVV51s>)oI^D)~uDW{1G_Gttw|b5qabJl4lb{3UsTm`xOx zOr{Dmu*HDV*PZl~_YXP$?!n1$_$C8J37)J(lfjgvu|3q>(Rf}k2g?E!H7YNeilMH)lr%CBP*&{KD3sA;MCBQfksy@F2SB4>O$C;XIB$zWSS1+|fsz4(xY39x zl14;98~|wq8GvDh5)cR^j*2ykriQ4HSY*R7Uww#2J6-Yh>MvSn_5_srF1l3CdDg3U z{+&58s(CDvd0nW?b@J)iFPkby2UG)A%-b&Ne`xX*i&WfXVR+M(^s&;fXHm98b!o-v zc(L}@de?`IWm{ip1-lhXsFtZN#8r9QqivgLbbcOcX@$ViB1w=wNQekK&hj0n!0F&d=j0=eHdgTI2ffOE#PBs-KK7+}^)|*NFHM(I;s_txKk6ieJL9q|LJH&Lf za;LGgamd$^t~svHT=(x^^6l+DXs_>g`ctgMm36{N*M00O6sQ5>o9?V}eXOwMmfzx? z?S&H?GH)X@nghcQX6pzh8R0FYW-KqqBi;;F<3b&{a1J&XPow*3{$Y(Qz7iea6FI8H z3z$4lvP`6nZ0w#yEMQTJ{72dN-}B13Cd)52RP{N8 z(HOv52|-Y#U_goH+)A7_Lih?W$Ew{B(E^JjqVQ<_8-$7*;aDow14L zPI3dz)RaB&yZnPml~4bB4wC<+dES3Nem^vh^$JA*Y$(9MWr!k>DMG}a7HZ6ATo!Mn$Ii6opnRnir8qe4d0b_4O<+KE7m zBBy!r!uEG%n+vL`sg64)CIcM*Zq1k+q+-w%7R(?U(_K06hh-on4A5j4herV}BnRUy zHsr8q2ThiS5#Rq&R zOcOUz$znd&Y&A~$TyBkZ?bSK`f?e{#L+M$7=55-Esfg~Hz`BplBbdvII|gDV-v;Qb zw`Rs(#0k>@fb0RH!StUtlX9QWfKfx~D$YirnTn$37Kvg3=8~{vku=GpP;@;F3rAHG zIpsY7_hTz%2>%V&|9XPZ1iCwxjE9H?T)bHtk*i9gU@>`&QaUr&YUTR9oBJzYZq-fo z+a-dXR>(aZFjR8-abxW^3+|omCC4&tGaP0IidW-dl~w5rZ#2D@90RmQWVLXi@89};f>PeiiKF?Yuc$q0Q~Z5_;#`fmW?knaB3 z@Z?`T00f%10bS~n6b}OjbczfNwu{CIqmlVxt4tgGjWbE}7L?VRXYWw{ZxE-LU7|h1;iBvjT6vJC^`)4)3dw4Pn0h(<%$OtPq7DZlX z!xl#GDnSMTq!bYirAYnXPYuXeLXjbD?o<<~6;2S=;X<^}U*Wef{msoEJE; zbgX!9iuP~^3o}&NGPkH_A)nzgV=kuVnxYMy{a=_Q%I9Z2RF$?hlI4n&ZjFm~Tzfm< z%xsU+c2(uH6ydRtGx3J;IW$GvKHjf|&BOw6N&QH7$SxA$LOPsPUaHx(pC@&Q*)nXh zVrbz0V852xo}vEAcZ+k=kK!&L&von;OA}vzN4v6Ye|MWl3+$<$-F)8d`0a@=;;)aS z%}T*#_#K2NVpF{Bbw@ey5P797KY>mI(QA2~+9odAjGT?z+s~x8cD{*N%rpG$EbH~Pd8|F{DPcD89IGXAUENFEQulmc%eit zU(@-JaTvvA|K2Rud-7I;#I%LObN-%1wKsRfA)a~DNXIr<++JtR*6@wPS##!d#y^0G43Pcp#hcH)A?>1Pa7bJQnc-EQ@B_Mg8z_f9r7 zAma#vL6CC%%^kni1bt$%Av2aQ5*(renK7sb9%^h#sFGVX9hJ?K@Swwhogo##gE^r; z1k4&e07z-j?!dS`ED&Zb+qvx|bd$J0cG<>4S(n`oi1FeX`-*cUcDa z&6FNHCdVW`PnoVPJG;-7U9#X)8u@DAvB^otqHpI)P8>b;x8{kqfdKumgA5(dR@owv z#2ub5RmUHt^i;mBJQEun9Lz!kqCs|M?Y~y_yNg1@&>TEKQ|=}Z?5Hf+BC<#tL50lc zGi=!?0v9WPe%P8Cmin z-Nh^|W%5H=ndkY=t;E!``G-0WIj+m|7p&ZLHri_}C4Yb60%NIXL6nOMvylDr&i(fwi4J*RnW9*+)HO%F!O4 z+X+wmRr5Ce!Up6a{BCG6SUQ*V@vEbJxlp*mt|}I*4njB@iKiaVRk@3hIz%ZI;ai1t zRF1729SBay>8gC^Q|95wAK03qIZ_!jzL%nx^QvSGoe|LQ+taUS{Iqt$y>_hT zVoyr3EBRBb>-i4k>zECtXT6uECgj*#(M>UHeP$1ga^^d)wT~f@0E_9Sx?y?Y)#RVc z61$x*#q!XxfB5rO=%7DqP1;CD9SkEKE`6oZr#0i9cBq{-PQV>?gS&Frp{rX~K51wmm4l$IXE^DZ$Inz z>Gf~q{ktQcx483M|EsBGmZBkWcoc+L6=NAn1j?p`Wp=?%WbKJhq87JmwcD&sie32u zO1De5Kh)~DF`}h9QaQUu+r6VU)&I$g$+D+D6RLAw^GU5~b(IPJ*S~zWKW{T?dq{iY z-QFweITs&QCU{6oZQdlVeMhJNOiae?yV)~b8y;jdvlt=d{43<2i!%Ihr}*`(wiEhx zzFuJJ>{rJ-YOLiEfsQvLpVZ6VgEc9Gvwng1M!#m50}S|d?(%#8ER&>Zeb>Q{x>;l< z0jxVoQ6uA5ZQku5NCgB!G}DT1YRd;OKmanDDA~7j*^NkXpUx zYklTK{*I}bPubwonOw6-^lSb&>*#QN@BMdj`I8q0R0rrIm1Ubeucr$ceKL0q9W^i1 zt}YCyT3S*1q2&lZXX6Sv-!B&|I1aNC6*2$ioYL@l|hnVFawmE4Bmj-WM>nFPgD|GF+9*d5G%Jn z?yQMkmepE^rKeLV+Os8#+V6P*6u*@R@vcv@F1|y4Bz;aTF+ZZ!!OmJ!GFMXHeO|_b zHmtX$E9GJQE=P}HMSAw?n7v~T88#qb*iW*{O%?$lhYjt<*NghOIDw|A_{PBeh`@(4 z0nfg8&fLizUM&4md(`i1{D|M_>6sfYnPqCe^Y|wnH`1Ekx{{9#))#hOoYnshl4dhs zq)r~24|vi1RYjK5ep zck9yx>O{(lj$04#*-}L5T$0N^2g~#N>BZ|5gOO_PP}IV~h7BN-lI+I9EUNr}#pVwK zdn*f$!N3L9$6}zMJ&u&NACpIC3TzAs{qnYBosgZ}m_&B^RqHT&g4{x2n78Y}l_j4F zi~3H9=Q>W;8a}F=ot$i5wUw&$M!hsMajE-J%K1V`S$oM#uM~t!W`Okz{l@LPt1cO7 za(MvF;L1Pvi9y)R?aZAQ0>sr19ekp1ax<*6>2`j6$Me8z?N27ZJUh4bBpG|GUaZ$${L3&dfUWw4QtdS*`i(4tT(1gWv{(gCUMF^<5V1K>2Ocn%&cj#DayFd z<+^xBbtXVDviQ3PVi=Cl zd#8HwcIl$`n1AB@$B4`n@x8gD3tt-VjGT129sOYLbahtd!k4G{-Jfn}or}*I3e37c zfBNjVvEi?ChU~y2`j0)i=#`lpwi3ma|-B51qnE+a6PJkVg-Z9t>R z{%k*f{TuR=eBO?3&ETDXP(0DeT|FQ+@HNz;kWyMwY&ViwkFKwfqNe zj(io5p9nbB@mUhzbx=!hB>%#(4X}`i1+kzxq1Mca*8<#mam_hPY`ELPz;MznUrXmR z;&=@|CEcV7zXx<0-B4MRfdMdM|Dd-l$d3a8BR<}AH02lm|MLmwbaUK70iOsnfKj1m z))Vtu0Q_{tVvS-RE+;|}Gz=DwZAJk_Yhi9n7YlwbX4Vq6qgwaD_%0F77}4uZ{*g1N zGeRY&EcmA%)`_yi6%Xytck7wWqMSV3cOd-%Xcoy^HB_?rL<``M_>T#b?QUHvZorKV zc?Zmef}cwfZ`3b~Zk~w0^-Gk?sg+|XAw$33zNQB4Z&i{J|XggSmWB-{Pz*bzWTc zqh+REh!9Myc__19Tyu&2*gs)TC?Wu2@DSJi^KBVhs!qn6Iz{aR-6%>h6q$w1Nc{)X z%@eKZkSi^O9v>zHBG{z*=5RpF`2WKEkK5*?pG5wCXhPbEhbQB3I0TY}Hd4jW$|IBT z?%X^Zcj1s`OYK|MZCYYi?lW`MGG6+TMh|YZf7?20--{#`I3%hc*F(QCDc<@t&L{1v zhjD=owf4lP0888>91@9d3Jh60aT$?I;&*8>^MYvNF03DK7Lv+}3^*r_%qsMMcd&PH ziKV}8;NI+uQx`qwz6I7EaIJgOp^$w#V5jHs+ntaE4>WvuKOiOL&iFTR>ie&b;xS9- zR$kQks_^>TMFz{V^LFFd4L$#_CBF0i-|nd2Nr8fnDRT#-mkzR*?g-=#gg^7ox-)s^ ztCRn$$uh5*-cB83oiVfdy<^r9OG%^RPR0EeHP3VpPwtJ>_nMDOc)NRSFRa^=w?oXj zQEz@s#rXu}N#PA(5W7M+hN2P?K%ix!_2F0_5VWXbuFp|!%=S5G*Puhw8TTkh&4 zzfNg1+ti`GK3eKzM$vS-_vd^UotXs-Yg-z-%_ZA^K5N~6mmnC7494_d>&cWF_1y2K zqUmU~+XCU|3QnBLY6{GcgKVxlt~s$_N6DAg@iT!wceDdGh-JE(&HL`OT6|vS6L0Wd z{>9F_pLM_G>wT-A`I=r4pT6*=^CI-mFeT^Bx4qASxX!hU%My8VZlpbS>D#%#6UINB zJU;ODw&jaY;#U@*4t~6&FsJ)zT&OL5SKP$3+{W4FoF2Wyyj#tWw1pzP7UBsXSG8C~ zHu;5feLJ>X_~`thxHLWg#vT1ET2%o7Zvcoe9vM=KdzY0W4v25eS2yf@kuyBi7z?(z zuTQ~HWr*FIAsz(ZYs(F1hWmB2UToWL4p2S<8zh#W{%GNwlT2v3oe9%d z{j&BoZ-i)E>4zX6P~IY2#GsUW)uYK|C}2z@b66~7A;-8dSw_2gY_Ef^!>riXbcwN2 z^9^gOH>>L%yHB{B&wS~4_w4b(gS+&Q({dls9tG4}?z8hV{U_RkG4)9xFV4^@EWSiP zX?@MJgIf?d2Fh5L25?pvs>ue}EKR?}=}=8CtgM7~c34tkJ^&q2%6_ zbL}sh7N2K2rcQl$no>PJ);D{iKmYIU&fJkHuh$JVH(cXopYyl6md$_h_iZ@k^|D{* z^s*4pZl1~bw4nWd?)1lzp%>{5SDvInQ5@Bq4U2tFd90rZ1d}E%<=z*xkEi-)g}>d~ z{k0Qb1BqqxamKW4Wi8NC>B?H> zvO;-Tf2jvL8X6JNZgB2zhwI0(1c;Eo@bJT8#+Hw_)lHtB{`_OLDAsa-6U8UMd2nnr z-j-xrm>k}o-@UtXJ=HDGTvm-?Togj;$>pixDaHuACFe(+j11)WS{(Qewx3%$vUKCi zS?{@y!>b1lUtRH_bAJY|L0#Q!)aID?3)gEqO{PD6T28?IhrMCneQ{< zDVx&!YJ5}>#`_Q6@JSmsheVN%4;@Gf*s?5KmAVkRc1x!2X?aj+AJc>*CK=&~i5wXM z-s}?9fvLo>R#LnlUFU1<*>L8hQ}b{}>$c;qWAfSFYmMg)SGi4>xs3+hSbrXlo5(yq z(eCemN3Udb%=cMJzuxM%P!2)Px7SktR#JOq#9*cKPUE=Y{zNW3n49~{fcv>Dfv_f@ zmLFXxv4;Y9;J{`TqRaU!l&uuIs5ZFR)u2nmt-DAWQ`F&{oJ`YRk{9iPJRg|?kqIJbRzS|Dcmi_1+g7K)oO zhoMMxG+A6)Kf%kTFcFHWZ9zi?Es1~|4X0b+?4R$jr{VDyr*FUu^*1GmuUP^i7NFCWuzoOD$u`=w|{r6rUCiiah zT{v^rv)Sjdrg1JU8?s^lRN4Tb1SnjBd`U4P*_4`%LbFM3ZDcF^*dEYCEb4)r?A_6_r46;QlgY{#n3s4;6|;2m_d66uV%HN+=OvNR*&GI6;U_0%B%U&t`t|+^_MbWn+!DoMmt}x^zLBPoTD= zL^;i7ELJ&tMY57g1RJMHM&N)9Xf}X~cbsAFMlL*rcF(Be8r`(lu6+k7TILKj$SUN9 z5|hKkw(v91_RsX=9Q%D=M`!x-WRV7Mx_-Uu-=9zh0TYD-a9%OW9;?Ws@gp3XkR%2- z!Q4Kv)tHMFkQ~2?Rv`oN_%bhExawI=Aix^?_XPjD|5HatJcL1Hnr2ItEaZrASYc5V zK#>wg(T(5)7Ot2Jn2`5|AdtvT-DvtMBOKn~Zsz_M=9(G3*L`Hwk`LL+5EG$%f#EJ{ zdA-=md{?uDjWw}u57KDW!sbePH~#lKm+ynnFn~`Ei$KG;yWO$L7pjPgFskI;aRFs~ zK^6W`b^(C1074kyAD4d>XjvKoSlzMJS{(xEuY~YVg=}8qbCmQjz8y7{H^d6>GUW2T z)~>{LXRk)$+fD}c?ua`aBdftkAJe*jnyKLx&dlF0=d5Y?T#F0(Kbx2+AxNW3D-p366fBX0WrHSs1DeiAI6=X(@nWeKZo_J93B@iOLZ~?$ zBdd5H(=4_wVtg-sA@1#|2R0rhhur<@yIq3kwOt6ffdgVQCo zmMs)THJG@pexkz)dnAcU?^D6B@rl8~N>(r`1*e8UQm+6$2nBLXO%#LEMTB>eVE{qP zmO#Qxq1YAVJK;#xicy?L1cx-eqJLKXy9Wb7fPf&CV{%ojRg?@V1!lXcC`K1cCdku; zjBlc>XGs>=@B~Ojl!T&BpY_UNEoaF=uhkIA)yQVfZlJVvk#(JWY210axgTx=02lm--zvK5L8)ju_$8GsHk6;5#iX_toQ z{jpXFDlRdCifKsMTviVyb)RH{sjXsD#6D`WD4-Z$PNi0bMKPfwASVJ09n%+0t)7wg za}xNm0jsA%TsK!1kPSJ_D7Ub{^c3BnPUm<-FzoFNiQ>rI49^x(a+aJdw-a zVz{{o6B@;Y(fLR`+K83ApMyUnoq$G=k%9&}>kSN0z=4a6f{I|E0tj1~6;ya4MwY|? zkk8BD@Ew9V-PAu7k3v*y1X$2wQFiY5Y#DYHf`~_#@A3$au!*qRgDl~8qq!1fh!Ycb z(-+tLdmHcuP=JFGj1>^9gEH8Vj)F4itbc*XPsFF6=hT%tjd!ytgrH?e*K$jVar%bK>(9>v;H6gG|D5O7o&4T& z>g|5FogQ>}_0?3At@r(SaN}DR_~BDSz{u*S*`XZxKvIgsWGm4mNVb3h=df`APM~Q)JcLKNjb#7jr4m9VRl!4$LQVE>SYp<_032Hjtn++iLAcjMMpBXYTJMac zJn!_pjzV$r+%J%Re#);Zz6T}0E{dA`opto;;>_5A7~c=Ij^aJHH%zd8YK}O7A8PE~ z4MRdDVn!w0=EMjayur$iWFjmvSXR(nhF|~?cR)EO0{IV?Uw z(16D5PQ*e9QRs`H3;9QZMP`s8Qu#9Yluxw;>lxO$l)&pQ|*)f8>v$|wpP3Tl&JR5~Eh zVP?sAvtSM+=Qu68gEE1f|2nb7W~Kp7v}1KoRHmX4PT2_ z1`maZgWBQ8T1ZrecFJm^?I!$;yjO z+n+|MgVMxQ9;9Ot5VJAEAoUArGZuhl%OdfAG}TZzG62ncRx2G%Kzpz_70ZTR-d_|W z!DuRv%VtV%rw_$q_Z+r0fHXQ^sBv(biy70?fK-1Meo%W%=J}2|#nsykZ-@z$y1iYy z&PA;LzM&FP?8Cq6w*=OU(INA7!{~QlGJ5vb%?}y+w*uddeUJs7-A{tVfYTr5W?sq?VJe(FDw7?zZddX82p45*BOF*RnC7wZ z5Q;UdBTpaR6)Q_Mesp<#tSUY`7=wsXG43(O8&M%|f+7H&lIeztqzT4^7!y%`+}~^a zr-R`DmJC6dAF3E63J;cod9x8w@U8X|W*4Ol6!+lJ9u)|f$6dZCRPb&+RI)%8a{9r2 zL>@E+v)+QdJd;rJ?ANvG>W;de&p+#LYBakGtk(yLE{{MoAM)d^{$)pZrhopTU_Le% znEZMnCKd9SK2U+~g(Y`yLt_$}#>aC+9tgT)o1{eHa7=v@42sw)iiE7E+O{BWlr)$t z7ghDRGaaxPRvwxmg}32^66}KEm^Jw2a={QLkR^bH@t?2!_Z5bK&QigHBuf)9L2gh{ zSsES-5lfU?y|Eqksz_^E8zYT}Puvy3NY%8WU={GL6+o+#4!IZJklW0h$W%R@PrcjQ zZRuUxn-0w@00ouCPTzc@cP@YA`Pkj`FtP5Zx=E9kW&zXN% zYFM_+PxFDiSpX?pvPy*8jBscYG{xFRs2CM2NBl_?E`Pap6f@+I>>-T{b8b%JuHk!> z9I8sQLct_AMKF}1ShO7{ECzFTh6fqX9BiHeJjs~&rz$Bp8IFNVxS<@l7zrP!mIcir zifZ)QDoR~W6$LXN*4=? z>Ecm#dz|PL8zPk<106qL0x~<2RjpXZp=nUo2-X)FRqoElhOUt2uD6i{1LOq(0td#4Fq zBmaKuuMQk5i36edy~?1Qent2~Xwix_%20-LS5WpKd4GesP0&Uo&=k!Ogtd@iIku)~ z1sT^Wpd<93T|AzZVG^(I(eY|P_rd3t<-TH}r#7})mhIF&c*U|DGVCEhn@3Z%EFkM3 z!->foyzi5~L90(kNTzat0Gb>8)r&h{JeY1j;hR~Se@Nrj$&<5zy`4|NjyU?yEoOo< zo9BA&MkSciyHO~#3wDciLSo`2D!`+Rdb&_3kz9PTlAYw`AXSVssfw4~;(mgO;ZyFb z(P~gQ0v__>I4oJHf>ep1Nhb3j{mJCP@Ff5Or}%OZjb0&LWZbl6jhdk%KJC6WbK7ps zYQ=HjlnZHHDyvD$43ih(g=WXc^)0Z3oaO;!6%cvMPfd#jpC>1>@G2d#fpy-&3R@L2 z%O)ZR^jDlSs9Y8iun-gShz3eD-Bo4~iVZ}_g$k``a_fE!WHeM~eKU1*B;W5@d2N%$ z8ZBp84a1&>MS~ylD?AWNP_R@bsIA*dMHtWpl()cxF)(_bfms5YfQuR2gKfSLd4vbY z6d=$nwKRv|5`u~`D-ye?vIseBBAQNSs2QLc*gwfC13-qslEcgqiIbO1*IY`( zhM60eKnE&P1)FGt6}k9a76!`yty9vZaECPA!h%FGi=vip@U=;O%epi#sBfo6e5p=j zbL*0Pep(~yL$3kdqa|#oc0o`JZ^G!MKoNQT| zadU8LtiUcRMV4sbX%rvd2Pr7#e+a=p)c?{_fWP$Lj|V6Ec4CFb^RxY}K7N&Cyn;G2WB zk^X@f=8l(c6z=ZVIWth%8BkNY?x+3uT4q_mE8Tz+xKtV&5Bc~KNlJp|nB+r!BsA=h z4Ni~>xp6!t304ld8}1NvB4jt*Hg|^wnaN&u0XP^8n`jWi;gbxF6obi()NSNH=xP*n zrWZPpRzpNFq_;D+IvAj^OiV&ZOdi_M1fSg>A)0QQI~3)?Hr=$FT5p~T$vLqtvi<{VT-0??eAT$WtHhxKHm8kDe(BkrSIq8$@Z`$7u z^Zg|!4RHd^@%iUvNuq$3AWXlK21H~d43PyCmbDU2)yfdZ$}`1Cs3ESX)G?cL+(-_6 zH_Cyq`RZusbR`~g@G*Q%AXqQL5=ro&u;{By|6rxz5E9TqBl0ab#VAHYQEIFmLmCr` zzaS$d0c-P0&XyHSis`;@f5fXhm{N)9=816gEDrTMZG?;%8tSB_%?};Fqq99nNPB5) z&^~0Ovvd7dvB1(s%ME+8DqE&refD`5^d7>7zxy-&$1DJL9QE!LLYLmId235HdXQ1# zYoea7SK_;j5s`G)l0 zKW!g9Hztkb5KQEtnAM6QICK*f#$`tt*lQZdNClH^*lEJ3i|642P==%!iKmPMCI%s( zL;#pvya5N&Qv%A6LzOMRY$X5B28Y8i&18h)T?{xX<)o4T;Wk)Bjx@i%Yel zi{F7o&6jiXrJ1*8#^$UiJ3~??R}PE$ymN!ZN!VC%r-H)FmzU5=0Bq%Euev`cXu75WK2*#rr z7)+5F0ph4bYl@8Sj$`ga2h%(^hio9G^`RUd8;4?uH#KfhYl14lAjhq~?P!y;yJa+F z3aw3g_(PD!t(^I^WSIWRu)ow$sB`y|vA1tM?K%A@i>{>4{$x15c@U4Ss~= zF6^Gq!?E~;#lUl(4+o+(jvYFA*0Zovw|a1*RL*i^_|A&YdY@~imzTI&|KQ;4^|Qy9 z`>-T3iw92npEIfMEEi~r&rjK9Y$u?pD#B&4l5w;v0A2xA-$$_MnAI`CoM4W${pl9E z8|Gp1A^J@ySZbH-E~2a$0UhP(7J*KjLBRufDiMtW#GL=Onc#rRV&zd`xsgz1H$j#0 zki^C|Nko~*v@xqAy6~c@(zf+Eo0}ZENT~-dL^*}yIo`IhlB@*JA+H~@l)S7|vlTK; zR_{>$x|1%>-Kn$E@A{B_UGuD~(Zaf7^{4jpzwy9X3=FWfO5J*t`S6P1y6JD7fp7hm z;T4j3udwgsiO-8*w9~?CZt7jiwzIw;TT^si4d@T(KRms)Gv02r(ZcIpaqoGr(S}dg zg3gnd#G!&=d8lAGS;0yb3TCN9z-=Ugv3$G%igLb!`A7*Sg2rUy2`(CL+*ovIkU`=a zHMb^OwI&6MJEB6?b1_UPi-&C%6@UzAz+=Io8k;}h2au^47N$6nQ%_^Ic}Z8wB`>>5 zIG0Q7){n1?7$&liUTsbz%68RM=B|>qTe~bMYe?R*mmly1En}8xCTE#uOw`;Ilof;_ znrOR2%^VTe{9-rPd0GGTxLjk2uQ*|7Ct1G@Lc{BtSBLYL^DnTc^A^u_mN6qJ-udlX z-NeTk*!YL}d*S;(@0fZ#_9W30DxiHc`{tsK?$QU(wMWyNUkr^y+38KEqP5oFvfSJG zYGCubFIjiS-_NsjuP>$gP`d=7<2;F}fE8Ki7@k6%*^=}t;=_8hWCL&Iow5|2&*AeQ>2$`_FM1VZ5_Ksy0BjEiO5-yOY z@xOC(Lb)`|Mku zGbr_BeZgfl#V5D>3z#xw8p#1`!9$R@hS-O@1=;R~ZUc8LC+J+D5ITie~jH6@x)sopE} zt^uV>kB7CMX3TZ^H$2QH;)0 zSQ2vaF+h5woY$^d8u+I0xcx-mT#bF6RnJaKD4bO^;JEN?uF)$^{?5@<1K|TMSD(40 zBJ=Ur%pRYpc5vsOx@KGD{=ym-dp$kX?W5F{cfOm4GncP^tflU*ahx?zGmb+|7dUmFnRkGb)e4C>|)Rh#2b#lSd&s;rEC{VtG zd*(Mr2k;KV18R$wWcw$R?iU8L-^^E4J<0p4uQzS%q(SjPJ;^J28+mQ_)`^-edV|&1jPnipKk992 zHO}6coP6=Q)a%{hp1n1t&ihMm^lP>GZhL4uYpnTggNdl_%|oulqV*S*;&0boikh2P z=kZ$h;uf((Ht|iXPIL!c-md+ZPn!CUGn*S^vbj{*stJ*_Z`(+o0fU<+V?s;6ii&sZ z1*pCm=+%!naiY@k{EgvvM}ulb#dl2^XWY=9%Bs%48exAqx$pXGWADAHE51H#nNoP$ zge{{qJ>m^o`mL!fOuMx$b@JLF>4@iteRHW__FVtd%(lHuH_gU7hlUV~X19l`>< zCq4z%TJ*bf7p6S_Y9a}rSUQ|yvQOymoNT#D$MC@FML}}h5oB$H^&{tj$*C0EOV@Uz zd-8TQ3Y%<hrHLzrO7J#;=f>JSx~zxNd; z=W*yk+sf3)Biq9E&|{ys`&`-SyyHdnrj>3OVe~1bp)(IDo8r=RC646l#Qp7(qIQ02 z@@mL-F8#|XXg!zjm)7Xq!uqs{b)*Ybw;g-Cc#7Sx)b&4zBHAFld! z`>)Zw+W+z8Jm|~+8vXTK&!4|t9?hONUY@E*-Nx~Mefj6D@vry(adhj+o>>UCm-rDhr!Z}^R-=X@@ltm>>od;Wv6L9Jfg~3_58|)HT~@_Z=QTKnyfMFo%U#W zJGro*L~Z(uA6Il>w#&dB-z>DFAnR7RN9A|m=Rl98ZxOj^@LF5H{#{Gc^hVd-sI=N# zI?-PA#GAmLpb9c_6xC9)eZ8R)>z$%c?T4oEc4cd41Cb8f(S^I4BEJKTFJ7ZHo?mTk zrt`zlr)+l4Y`9Xfy|a=pxG;HSoab5#tmW{*%^@d>>t7g#-m5~@UCK{%Hm9r}y_ERYS>A&ebHwM^_2BnaUznFk zI#;H{=Nv{0zJuPXJ4$|tn8Ck&Ogu$DJ|-P-2^~CVl&!UJ&0@rCVb|l9g%*BA@&K(- zW^L7encZAmS&d%ZAbSTcEt@ML*rO&|IM^xK=QUc?Ub1`tFs;^+RjVmD;u)d&g!xyJ zXKztap~}HZc^NCY4^Pe@f42JgZ ztKnYQ<|!-NU-L=6M?qs>Kljs+_pRW!?)C68^VB!{=A7+XZueiELk_;%`{C_n+EwooZS}-R``Xua-Gf@`Q^~k*4Gye~H zZvhq8&-Dw_QVPW>3{bQ{u|bMc+?~PQ-Q6ixpimr&yTjn_Qrz7cV4%2Lixlmh_Ak%# z`unZ#zH8mP?mB1XB){Y&J2|nP?44s7dpCDwX&gWlBjkpsWfRYSTpI37bNZ1Y&RlWR zb=X1onT^8CEBpfqc-0psij8p)4=9-VolfQWyxxbFQIMcsRW9yCfyo>o9s|s1XqzL} z+M~#SKE7>X9R?})GK6OqQ}8XzIVC234}UgNhNA0NI1NoneDrnQ)%!o;c0s%GOA^#I zr$cC@tG%uj#%)Mgh1yIB)NA+7SYc_=1f3Q}NZ_JO*P(4Nnj+L#h98M zPsoXyqET`%(Kj2?h}zq}5{?|M_DT=y*|X3wNTFO@Byx>Tw$!1rRz4jA0}uXcN3LZR8IfuqE_auL@WxZn0H#1 z&{=n|9tX=yI45*E5z9Ein9`)pR?3By#SGk!zsm-AW3>O(!E|rw32k+0*%S809ITdr zESyHV_=V?3MU{zTjqsu&FR%F)5^@v-;5TSZt{T3NF>nqJz00S_XW<{7jFH2F@+?!FF^@Yi z^Tvg|{;I~Y=Aj-G+DHaXVEinl^rQbZ0TD7IoDm-0lPkZ&7~gO7$CERAx+zD-K_DDP zWv05i?_%f|%J?ON-N}k_$Xopp7U5mCgY^~IOb9&gPAk%wP34oXjIDy1azolj4UCnc ze8w3d3XL1hTH2Hbv-lo9?fH2N+c$wp7G>tF?x~lxSs`qO<7$ham*;~ZHv8LafiOkr zKK2Ewj%k~52-(eXQMRkvbY{@x>=394GN~lreFm~&04JwfWD(P)k#_+j`0q#{&&o1R zz3Cn7*0NnlfcB`rrf=V zk4F`^!@`Q`E$_5GygmtbvUwxAN3`oOj6Z@?r#QsC1?i&qef81TGwV6^Ss!=$isgz( zPH&S@@g~C)j*SJK`R3$xZ@kuEPKT48o~HV?PYXZcD&%)?Q!e+T78cb~!W_5hDpjBH zt8gs>o_QRchzy_Xfe~ai>D{p2lW#L^Ys{bP#C;y@^2)Q_$wcI3jx<)>d5y2NQ0>=f zInP0}pFF@mT#M>RavmjbX(D#eUhU+W?3<)ZOdK{7Oy!y|p+X;c$2^H%HMA>T+mQQSjT#ab9LJJSH#Ot0( zTJT6EXK3S|q!D#D6wJj=&LB&Aay`)8=|F5i ziIMxW<81g};49gtze2{3L=@_nvTV{O{oe;NAAg1jBoC^4-@4R|ER*4tgn5{=C%-Q9_R71>MS0?m z=irplHJ4*}KWFKk&l_TKm^DQgV@pi+$|4kl3_Gd@-};-4-lUi{L=UhFOrnQsvo?SV zzH6PjVUVLa*I>d2U8z=J_m|INKM# z!^&0=Ar>Esl8Tw(-zI93(w!*Ofld6~N(T>nBovf|;xWN$RUrU9It`@$PK<3kA{U%$ zQCF24S-^{+$o~WCL4GKlU*y9a`^Blj$D@cb8rcTbxT^l0jzU}Z3NRORv?!!F^9l=c z`J}b}149;OY@r6x7P$vKIJ5_;Q+wxaGn0`r_w_ueXJ$o;5-z~&t+EsS3x6?49tXHu z)xJxP2O@mL&V03Jc^z$=LmOKGlP15s#N;ubuc;Bp(b*XG_8&)1Z9ZZk8{4zR(^qOx z;K}^3kJ@t(RWUlE{w!{+Q>Ef*fdhbcnWN$-99pT~E44P3at~9jv*G&n1nVB)La=Hj z>Yp%Lma6-w*-DIJJyNAM{sIpl>9gB}^-H>*1NHyg;i63!#jQu<_8_9vT|Tt;u?jOU zZ!NS+j8Hj(v+p7tzyE|YBkXcG`3dJ_9H=%|fsPytugE8poeeHr!Ww)im!2Vr?B|>w zg&2QcsZRLfpfs`_?Y->@j zBW2+8^}@RC1^$+U{LFVNXq&f84Q3j?et*nKG80oSCknO8Uu=O<#!LspkC5+(7~6m1I?>C3tkkoo9ufmM&o=b~a!U*{w$Yu*@R!am1R^tSx*hXljhwFsB{6V~tz2^2DJkrd%N3-F3ayt2sW?$}QOOhnO%?-sD1nnZlIHTRsK zz?&^jCB`~wkf`R@SZrEy84k$||3J7mV`3ct3Dvym6sd&{BnskHp{?mZX_rqeZ?F02 zdo_9-OPY1wal7?sXn6%HoUT{bYcwbUukmP7#BDNEk&Tg<=o%AUQOi)&^w8zTW?2cb z>MM#NRhDf?<0`9yo|w&l!XT6nTGqlXoD(O1!?gu)?Y(Af*ER8QsG@1crRO9wD_VZP zq-?j}uNz05(RRCemF7Wm;h_v| z$;lqCmiD&W$|L!2KdZZ+%`h>bx$|8p*KQvX*+^k}C#^UO*v5l+9#S{{>6yQ8EOoKDuLj}OZM z{ghLq)GLC7#$s(Rrqyt}LF5j;gLMlDR$pbP?ocwL0i!TgF}X7i>Q6WsZ6}Le+Z#6L z9&J_TOj{P_e$MWzFT8=bZ@)==7mV>}`M6JVM`4`rZEH6I`8K$(S9HZ&%YOGF*=paU z;IlF(&hc?$HgxXo`F_=C!<^ltYV}@IN>HZ?kunwEsJJEasVOm6DhSMvnHxFX!k02^ zn<@xvi89`I3ecyJ<32^3;Jv+|@0$9UPlFbEs}aDjE30DYf#)V)hDn@rD{)upw-k15 zHwVy-r@Bg5}$wVklm!aA8S)BjcHEh-z^ zTS%ZjEJTF^S1#_U4JYdz$U9r&I+Q)hviKRQAbHt96*+H49{yMlYi;=_Peg=>RoO1S z2_EHero^p;ZsmZGF;g*-w45x|rb}0w%pt1ydR%F2W8mfGi9U_g>CK+;AWE5dLh=eR zk=l)X(k-R$+Aq^V%H}sH1eS>dcHDD~hO5&+E_ZewqgH3+0{=^FrOqV}Q%>wD&sZ96|idpX~w1lt72{l1ew&u>-lpRM6RnX_-L`M}r-2ABIm99I2 z(nGcrUjT!-eKH@dJW;=MqGG0)6*(7!E%J*TToqf;(g9+EA?V~e+%Gm&=BU08mBpd< z)nkJP*nqJCY5l7GkG-*GI+!j3Y(P^`%xs}%pb_}F=AE<3c6|&+CojR{@ zWkiehbeHM|rw*$TE94uXyA~2*edy;3#!ZTJ~WBGT&_bKg={{k*&>4d z3ZoJ=Hgs&PD%7M6cAuHMDrz&>={7DOIVI{R@k;m570(x4?31o$qJ|jJX+rPA&oT|t+e zgtH-#!Vu(v=o6|l;kNdRBt_VwCRxB0Ra5npZE7M1*lKo^9#+1lQ<{%L&tDuZy6_BW z))TuRlX*v8ZIwn0a0gqG@l!I)$iJEAY@IlpS%PIIO?Hfv&&Q*QhUsa>E1~;cuGQivP7NE@Dp}q-|@CNP{NR8#e*_Bl1{CSGg+1)OhTVjTP=u0ULfB1C4 z-W2&3jT@&nP6T%+?M;MDL1;bEF&z@w!4og=>0CO`O{o9pk8S6eUZSA1f%tusl%qt+OrPpImY;A7 z)ZcLdl?%kI2@m78w;?g$ix@3h`(5M-`UJzq`jou@Iz z3(kJp$}G198qn4rH$-GD}lVODYrd&~VJM z4=McI`ZE_Lgi-icG?Cwq=J})YKb@X+>0G)Y-){`D@d7W1J-SqJ2uyUmr+&>8ZlBZe9X^FQ)Sh=&7f~~ z69HH1o0$ggj!w+V9Azv58?%lR4X#>jlv-rAT?OfU$2O@L$nyq)jL+4$(&ba?;n?J! zyhNLOYm9P!7BZuk|6|`zemZWM-m9yLwr)&3r9c85eti@REzM;G#X(uI;T6UZtRQ&5 zRK9^jx(_WeOX9dmJS9x-XXaTZt$q98n%-$aTqBkH3AfLw zSU&6Ltkq`O4kI!gYb!Wh0VaillPm^Sopb)B@M_P?&@>3D*#C3qbN`Ih#fKC>*fMT7 zV{LnjhO_SUam*#VmaYLD_WNc74MsV8YR=@S?=4#zRn9inE>*9W69GYNPD4x6g{d^+ z+$C}HwVRQ81XQKQxKr`t@KVgmFO3VDIjHJ&s&<+&Gw{i!?Ubg$Z1wPF!#U5XyWU81 zX>DO_B2wO&I`M%f!|Yy!0V`J-{1zzcoWz*?0$Nbbxmsu z+@i$mIVWe&=XA{^i>lotEeIgSJt4{6ma{oNZ3?B?5po;*_c$Mdm7WcLP=|HiW({tG zibp@Xl$8-_4Hy(TiQ?;Da}J-gv+7lPi*ld;SRYrnWiGD#DOO4ri^XaqFbu{x%l&_3BF0NDmt;zAQr0|MbOwM4qwq#|ULKrtY0_M4aRs zoQUHac|UH;UMo|pJCeWo5$|R45o7TZ;)|k;V;ecAsPt#^hU#=>@MOA^gA6ncm-HyX z+x}A_Rz!VhGH>JzfEJumQGGw$I#eq5zQc1gPbiyh2kwkv)SfMP8DE(SFbduE+jaN2 ze!8WYUMM@6mVC?THDehH`tWR?Ubn(IlLhB$r;p{YPZueI^B6 zc&a?q}R}_Rvd8B%-?l(@avjgzXvDa5; z5ju)q%#660p9g2c#CG%E7d8ec&AOAv7n1U(`%{>KOvzSKVj(1+ z_V=u?jqOlD=Q|!wdQuJxpDZt=yGBiq4hAUo-!Waq)ARA~UAW#6C2YPPq~|lvJPB?f zS|A@83T2*V=C}|*-k#+nk4)WKAUnO_u+!kTnaZLfuLgvai5byhX@vEv{ZBYv+WbfH ziuLb3q{xrN_?`vjF4ugo(yru>YPpEkJ49>o>6#%r;y`dv_r+ez$t6Z}idR7Sq7bb2 z6Heq;MH!v2UkAgcm*8#K+PU`Qe23C@LB@B~zz*5VfvqLWEKxM@;n7OnPdE-UFZU?z z0ji~-zIrPrTk!cOj=8OpB1;)qTt7u64eKX=IG062X>soKlua9GynARyX!aMg-te-T#9|T=c7hD3KTwuCW%9%#`{) z1hVe&kO}b4f@|1GNR=CkDp*9Pm4`uKEcIR{?F@Y!aE(e zOuL`G!)|cO)|eE;v9cp7F+x4OWqLN0ro{X0i)O572~P2?^2-3iH<-@V8mBhCqp0<7RE{d&zbFj>WvA36w}A2h z%{NmFTRRe}gYecQS-g{A*{`%#q%4{460|AZ6@~5+Y_3rZQPN51K$&HB(a2zRsW*VP z3DYBFDRVDj607}7#hm2T*HW6VJ&S$sJe7NWW|joZC9I}ShO?n~;}BYtf{X+#QlBW; zAUJ%Q^!fpcnv{GRw$V(+>ZOUU|1H7*L<9#LB@(Qe-R`Kd_=1XhivyzL8< zNYUQdo4k?g)*3e&&z5L7=br96!AQ1}6g8w7d5zGjkEYs441bgP63l z9(d`?pT0<;SDEfL3))eXwvUbBJIN&+qN(npq>s{}kMP|)Cv}0fx+!OoARlTJ#sf|f zlt9BUWf2}d2*WQ{OWnH}@nokbsY6~arE2$ds)Ly>rB=+f<$>_q^(fCH1z5x9Nmk?B zZ!#zE{h%aMcigI&H6Bsi+@X#e3}GG|tgFLm#IRbPum&5az6eKqryp}PWlJHsBI@LR zXnfi0FGLaoC-CkNMH&~QSI$S>>$#)p)j)p2-YjGprWbr?Kf1 zdby;2T_=k8j98ah?^h+sm{A~f260eFaA-HQY63W@W8`{C939w(5r4<+d~p3UehNSL z!>pWgs8e%k!XOG<)%CWY&f@!>3m#X-d(ox$?j}Sv`eunvLk0PlZhxg?_U4H?$3~_P z_(lG?W|Nf`B*%nZX}Tq`LCe$9EpAyAROb-}J@Q)3kd=eY+`@y?P=)u_!qLz`5_mFo z)GlLXCBfX92Pu3eaUg`e=ILEh^8e2OZN|o3sbf8qBP}$ zRgpH0w_LOd)DdmO7)MJZ(d7g3h1A9Bh*eeR?9J==${?acxT9oKHk}J1wX$}J!4i2j zJz~5J0i?f)YR(zU%VqOY8~8P5yN`VCXx*7#Zdux%o|@(w%a}qEFmJ-&=I8< zl<|GFa$n!+%g9NsHe;jgc0=0RT65FFU$v&OL4uUFq9m2kDU~m#AKXHq;nr@EVlzZ* zxo6=PPKrKJz5(J>aUQBG(p2gsQYP73s{snezRFE@SzbPd)n`I|x%Cizb{D2WlId!8 zW2@ff?M#}y{+Z;vqrY3oUb*Y2?@iqWTE+tV_@fVqHL76cmN@2K15#)`pL9{Thx)Nx zQMc^XmAg&+8i&Ofj;s0!YmolIRt!L%62!tIS3Wg+Owi(w&%)0ap&nQ-RlWTpx5j^& zr8u%^t;&`!rxv2LP**+6Uah25y$G4Mw|s%hj?v+x^u~BsJXf_Nxk#T@F}1M1W_+DN zHd5TPH&%vyYK%2*JDp~YpIV+vF43&~Qplus7?Q=?XAkau+e&s!+P`ROnICzt6W{NX zy~7g?eb*rE{T6emoo&|zw*Avcd%gH~U+U#DRA_wdwPVj8a(odzBM^cfx|`L~a>v8i z({f~At5=xlF6K^AL*v5ncLu9srW$mg9e11fkW2)m)Yx*Hi^xc@E0@w7&=dqXqn@|% zB`(-3uFkLE4rfa3U)5t4MSGF4d5P7txTGzneJC*$_85#RQLL?e}$PNbAQFM0j0C=MK1;VMEPdyKKMfwo};Dl#;2t`UiWwd*#sZw+NLlEXW8 z2PN(z1RcmIi zm8-~dm#fG?bF%)?VOIfe9)c3(=#Rb(;9`S`tyWy2zyv+Uk7Ltz#_;-A=Rx$SBpSiJ z1ziAB$AUzftU5Zf(3pYx*K5;8p<{~xg8{qwrO2Ra0-tUAxISY31uq2STpzXZvUSv# z_C|Y+wW&l?AS7$c+!yiZ)%-~5jaY`ZeEihH15e~Jb$Hd!rl@+b#kZ5+c~sdMH(#7L z-?M4RGAEr)Vj6^wt#7o6ciQ6xpuwhj;|MFZx;%xcKwwc`Y^*$r&zrt!MLAg&B@T@} zN-UPtB96jLDPYN_Glu}0+E)(m+)7~ z-I_QwasT4-o>RY&fq3H0>L3d8GrdX?fj820GN6oTn{}HL2<;cx7-f5Gwz3Yz$-T+% z1Ms;zAM_!-D+Je65RVzexl`iK1&D*{Xvu7SA+c(o5^6ZSN)l%vQ+*^Oc~Qm7BIevF zY%2%A9aWNWFUc1s4s!Dj6N=(j*m4(^+iV*t3q#L>#tUOl2yBFD&xGWDbOsnfdkZA6 z7fEF(cV2L^h`iIGt44bBqHcQAmdjdK_7Vr(_=qp>N)?cA!= zsU>t7)*-MFP&@7EJ~m5?f?RU&G=$_0vRehUA5)F#4n4!FRV}y=mfP4a8iD+yR7}0G z#Oj!#l)CQd(DWJAI)E%VHWPH+Efj= z5>xiZ6l&+CnB7$32G1`H*BY)yiH?8hh}d-`o)=eI9>Th&SAz2um<~!dXV+(-HI-=& z^B!69MDFJ`ntRKvYl1{qQ_TJs%pWWfE*xqy*?g{kt+dcR+C)CAQQIt-qsZ62htm+Z zzCq#f)v`TK1{8|KXhU$O6?Bj0EX@t-Xh?+IYqhm7b&`0-QW>|jSI07zDc{28c9HGz zkr*a1NI**(sG=15B=h7?xM=?%uCCk;>mC$in`of{Pel=JY^`;LDW{)sgbuc?Lir#G zoGFR=ezct00&qZH9!wrxMiUQDuBpVeEl>Ma=Hu)K`{K9QO7QJ@9iEafv~Q-^%T?au zk#F-PqD>M)+RDQ9ZE(ZTD|4Fi{Y&ZOYlqYC1Zj<*mWl5MiLTlH{&0kM?Jb%Wy8K-o z%p*k&7rJh?wx^~KK61LOtCc#Z_v(7ViPtqJ?;ERNa_>3r>Y4@M4$ATGOF!Y>IuG9= zWR$o3QznmCM1N$VromsN>DG-FgG(}>J%BYSfM`N;Fck!P#>Hw{mHZuxUGKZ9;^x1{b4DENlX^)lB|GCy5T@ z%YYkfVg%#7#2=3fozrBOAS3&hrX$L6%4Ut3iCIdg!#olFGh-z4X=uTnm12N3YG>O$ z6RuyKY{&0WMCnuVp>a{L-}$azrCo@JN1sT_*STnG4%9ACwHZ>42I+QsoZ8+vBDZ8t z?5iSTq}Z=TS9$w$vQfq5rm|JjBNT;6CdxtrlK0NOpR=1i9~n#AYt*?pJ;E14+W!k9u<{(Q66^gr9$6g`;y;HLqPj4#KiTb|EC_sE zv!#}DsilFNQc-0-Kd%0L&)S}MH(PO^v|r9~map2RWn5FjfKmN>l}<&iwhK~PoUWG* zaaTK*FefTjk zIz31(bIYqNld0ZpIjauU;TzCm= z7hHYJBC;=5SkRc5BL8D`BO#P9&7_L|^&raP4p&7Jw8g_~e`P9Ycq0Qlm63DBN#UOB z)m?`**ESt&#E^s(6ppJAwIq}WHk8Weyys)^!y@lVcj+7&LqV!qEk}JpO2e;j$@ptVP;0|cq0qpKnyFhZ50Y!pm3u_th~5Jox$?>v7oTzJD%YBW^^DT^ zWUYXMK#HQ=H*$O7M(GUU>`cTYNBAb;0bm^f_t)YD1i2=lYnO5ba)yJ-;h*4al55s+ z$xXTSGKFYYSjLz!q&aAL=P6YLw|W0TYEtiyub*>~c7w0RNH(P43ta_S#1ux&#J^(q zr_gCrm`D3CVpGNopu=iunq10Ih@}3#pjiA+bi;Xtg4Ghb;$Kh^$e*l46tF_Ic4c-%RJ=A)yxX*?bg5}y+ zT-W0&Q8PSD4*%QW0TL8xZ~{722k{k2Ph&h-i#-Z#)+$#kx|-FnrOSBuuAf#jJvB+3 zm?F)`YPu3^XARS#V#WHcLxq6&mkQNy9V#r$m)JPW&t8)$DgnruSOkSWAh0SJ2pc+3 zI9B~up@QjK2|W4nk`uZ7gB|Iogf+taduh9Mp1DicAL8zP>71qJr0Vh?RnM#qYZBGh z9{{{EBhh^h46nWUpS;8^`XNYOYPor~l(vq8-G*fdK%FBXTnM+dG=GQN^5qMMDC3zP~$!Y1M?P2xtd_F;8*reinc=$;` z#n5c7nlvJW(WelXt}h=S&G+LFbV4?5-`vYMH7tj&~9D+h!r@n?hoQNY6_V zdKC>40+jK!q|?k^p37QTWNS-&mLu$1-H+g;QT!D2wA+zQL%b9*2=@gjDyk$EizYXW zjL?Gq+cg)(K=T+^{fnulvZqzJFNDbnMGfD~8PGsn1x&27-VgZ~2)n)kzZw62iiVwA zT+&I?HH0tiqN;%)+&$IbB~0_xgIWRJ1zSbaGhQyZz<_`rTkM0SDBA-QDM@BgcJvJc z;s-HT4cqPY7^EDboZP@ZW~S87x9zG5JateC->}5lQyiZcKjCn_Bg~V_Ms;Oa@svjU zW^1v&Yn=ZVw`Ounq8VdBN_erE(ZT;a4v>RG(fx-rI>R-RR~OXx+6VdrjxBU;bOx5( zcDi(tk$|d$57eSs!Z|9G%u$}%>cqJ@Dl|_OEUEmtqAYXNLBK#M4ZBuPU8kngaT|RD zUqRv}O)*idRa{3Xjkf;8EM1o#@|pUl{C;!xh;i#z>GP~y*;g4D!MpV>WoFJG2e+(j zANe0AtfIT>ZCI|#CM|OjIML`&L+IV^%GAI-?J6^>6qPux3SW-Zcsz6JkPp&m4d2k{ zA&A6eWGfn19jGzwN^_njdg-v5pOsF(ps0pk7Vfh>R7nTGQ%6|&{ zFT8%g{x|Y(Z>R4QZ)yFSW z)Rd<6jRC$T8s5Y#x7#B9AdTGiU3uNSHh(5hZ%I)7F`6|Ed!vczU{g8RmS2rrYJNd( zmu0`!5RhOi{+W;r;34vG@knlM5734y`Noc|O^8K@z*W$|sZEK)A?yL6JM12WD4XXP-;~q?K zK>noDro6T-s?#4u3#-^=eab@XImQY;-;~9xXv_%b`yfODXmkB}r}A^HY)~Di3?~pj(4YC3@6A8}?aT}|Ro2)=E~BRZ4=?g=_7!fL z`@G&Sv*r;FB_@%+Ss|#_h&Vg!8+n(*kMI2z?D-bN%50}vg}!2`ejJx%L!-}b2+PXP zYDy`wUy^mKLlYH+Zq2&#WttUwk*rN|-hF zD%|Y~B}7yx^6aw5k7vor3<;EqrxrwwHWecD4%VM%mysa#DMe_NW*ijzG@^$I&|JK; zMl;BJ{3;;NWOz;Rh9bRy*_|L zFEJWQ80S=UOCVd;Vi?aLIXFOCExP{jmxOI_XUT94T2hVoCdp4AcQhHL0 z+L}AYQk>}*@=Y9qus~MTi?wJ(M}|BoT!Wcc)r*KA$%V7>Jax)kf)b}2#7||b;Ku=} zWpBw)iDYiYq}jp%kYZB@9F`tcAS)KPAz;2^ESh?XRP-b9D-n$B;O`R}B?d`W$nv8O3UnRI5~y~!Y#>hFr6M_D@pp@}?QiZ+k-ADMYMRiox2 zhUebRJ_0Qsx&!q?*W=xL2{*dWIHlmfwyUc8k-8K{(KJ-(4=Jl?6;)LFglM#fc1edna-&yS3PhYsj*d5OSQYgQ7AZU|7*CFRmh1V zY=E{%ozWA3O-)aZg*(JN=I|5>TZ$`+<$Q3-zl0BWbiwNfDE8l=;RB-vn65-IEqsX2 zs-L!Zm*SSLsJt|)68OqbadXRQ(GgUyTGOC5455zqxHDgM`x@HU*d8AphR z!U&X`VhdQJ=P3JkF7SCa2|wgIqiKlXjNsHXf>4Pah#1@&W=3Q}FlWq$rLOW_W3&?c zsKASu!6*JSa%>?iSdijr4vWQs-zA5d;b)bbC!Z@ycmz9y3RJvAtfct&2AAusi%SN~ zpUS_1Xc4cvDr6*002oll7#6>D{@~C+FGXuhB=n@`_@-gIRkb{1*cjVmPZ_)_^A{|X zZMk_&h`kll#5kUmtef$csg+yL(9NZ-`)J=Y2r~U0rM6%P&s=8o|DQKQCM%I4_}U)E zMl%0qBN3lIe+uIaVJDXTK8gbib{5AkK2q^D*&j@#f&r_cgD?ex{~t``(_c*F?KAEP zSsi)7ThC8r7yg&X-hq>dDqc;u;@o4<+q~6@X_{}KPTCHPnX_t7hpLJ-)sgrWjG2ub z+wGODyW7iD(A(t}^9z4mZQKNDwfx|G- zl2F#tF`#d_2iLy%s3kU8m6_d15wC&z?L)i}GI9_y^6T)8okpyWa6Hd;?t>77G(eNt zs|RGQ@k?aO0OEDwfb61&0F~@k+AAR(fqp`Dgm;96bBQsVP{fTQrX1DW?5_+$jHfm1 zTFf4es;fjNP{Br2980)2;3jN{S*T_y8+8Y!N@=Q3T)K`)34ehM9(bLr2j?U3TJwXu zroY*BLMnC^IRIFglAx618Rz!+hQ}jL7l{`k71wGEX*Nk30C!ZY45dx{#NK3A=v6pE z9e;}A5Dyd#N)6Ievk=awpDcMt81)eLQZhC$XF5m{g^hl)R&-b(kEG}te(|HiPdLh~ z*Z3OHiNqI#6j#O+_*QpAg3&)ku%fMpAgygpJUkPez+eJwZzlA0DQerXB6&0SBH%vPcg* zKuj~S3BLx^^b^rck)lxFY0^x`);;7Z<_HL+!=!O&?<2_HMm1|xa>`3SpvM`uGv+S< z>%uXrYeW5{EP&<7JWZlP(Nv>kN!l3U7bpyBHI59b>?MWuDpPeVYB}KweMLsI%vSjI zs9M1cBDjA5xFy!AAgki?KLXB|q|Pa8{T~nMc1^tTb>rU6#qnaE_QRZ_M5}N$tLqYO zMY~+4zv2+uNDGZRR0gq>>egR1^niy7$#M^cQnU8Ys&a7vq(Q{g=QyHYZi97QlSdfK z_c))>D0+&AcZX;YRdFAoYYCA61C3jBYX<0orpkoTwwc!UKPlz^8+t={`_`{uN$aRtn??OQru$q+g*60^ef1FO6kl{WtTP1;RJzt z(jLh3o%@DtxTfTj(DCe-OESdK38YdmeD=eIl|DYBBfrFmFwrB@@^EgtvQYkD1@HkwTQz$ zWq!lX;SmX-s!7JWFS>Y;(V9cUb2|K+mPId#JK3A+ZLA+w!mnJ5?p+{0oLXs1_O;6X zRELVk4ou3jp-o6F?KXfy^?VAsLtEPzBvgoa!&&G+G z5SmUeyKZETg8fb-rMq_=m&&1HSo`7))(OMdtId~Ey(YppQ+oMm^$`dUl8P}!QJ37q1TOBQe_m70~0v3Zr} zsyyr0XFL(zHFJp&SxTrXVdQcV_*@vQ!{Z7RF1A2}aAcDiTU8v%9s4AFnsb%-`Z6?* z6M}?I$J|zO`5e83J(49&wPIo?&o;B55xwE;gUbsRf>X2a?^16hr$NDR6gIirw)?*xfl(U&ajf|OBo*;X2`ks~uGcY5I z&;*CR26~rcW@$%nHBx)~946p@V@U9g161D`qFS<}|Dm^tj&_QUVa=ahl!_>+C$8hl z15Hry!O17xR}g56W|d%3`V)@g^8DVavOwJzMVu10Z&heiYKdWonPt(ZAn@^EMw!5; zj5MgkjMqbzN6PZt9aR5=DJIPt?g`R@aavH9H4khlEwPI58P(DU2Id+-u%NLH+%JB)(H|2L|AI_gZ#C^66SaT)n>JnT5td};?P%_YMFm8rW=;lWW=_`CB_^g$ zPitve%YgWYNBKJZqOAos7(DGp*#EoNV9IxT-}+T`Pu1jIlEIlGQ@)P_mKs2L(J@6O6;a(s}kzeu_A1tB{w^a*uOz1y3Wyp4F$|c0? zNz7alN7J+5mgLTOs2sohyZ#_WBjFby7Lp4AO10Xc-RYS0;+>fp4a_tDy52Vk=QgkzL* z9vCjzBMm9Mf364)pQ#xk?kKRlcp&=;`%4fRayL(@2-5jIKxR?^Tf7h((Yl-@E1#o; zu>{U)a#jo2d==gr4grsh3(@90^XctR>{|Lhf{WZuYcLEo)3h)8UigX*4vi@;F zkfyx=F~TFpLpWP(1FMJ7 z)FDl4hUW-LYc&pm7m_iYnvqw@(w!>qK}p>>kGSwmHDPRD-8HRgpdWIl`GSoGHhP03 zHSUD1*YPAjT1g6>1&KwP0V25;BOcI*pLNF1PdH^$te^13KzRq8Y9YfD=5#8nY6Y#s zvyGlwh2J8J!P{18!*h)Znd53+Tq<{WND`*VJY+4%I0(d(pr)hfDdfy}#^QYudn4$a zPjre5M1HE%!Htf&ggNEM6$q-nm`znl5=*-^ zY#-f*mZU7{VUo#xEwbS$bhQwtI+282qH@e_i%)c-T>pJgRnz~6Z(!$@?XOhxKkCTs z#k#l1jhIOB6azuCZFijK=mBS_RI{0VFewCSTR~Y`p|2~${>#)VftZ2*FAI#ZXzPWP zaI(+blyIWL<-cX+iMT4pEtb>aCWK4(6><6Tx` zKpapsEn#wGPbfSh@Wix*=UIOf3jlUx!*Wg0Oq3ya+8qUG(H~@p=J1i$!wWpk1c&k@ zb3;wJ0X|+s#tTV2t*TItf-(b3t$qe$ z-0E|30tr+4JW}2ncXbVVvTxy+$l}%$H=$uUS}y z6hC8=GZ{KMJ);m5R`BndQZjIk&A~BpsO}Cp6Io|7&aL_L^v34`Pwz8u2dXpR&&bXg zk7562H|T~yZOYi>B8tUOC}bgF(Z-SQYCA;V9kMTKM+M4^dte|$-BEf}1Shg{W_9Op zsB83Sr#?+?MSjsefYA*%IRJUv`czyC-`AC70$D|qG{(GY3ei`%l!Gwi;@++_-X69gAa+Go&vWJ1w0$1 z{QGpXdsNO>GQ>Bvx%xjQ@b`VKlmh|{)D^!zItCG^Yx8}yoTvp=FA5{O->G;B_$2QM z56H2#&hCrF9qAFL)YzoG(m=C8kI*T8_(T~D_Op9 zG_D%@57j+=>=FHG<|G^jxjhEXvY1UO1Y=dotM~VKQnHdr>-Z47)7C&oU5W??B0QfM zhPWhC_$p_201_d*eDv-p|JzS>hB<4C6NaDcpUB&9eU|h7> zrItFvpKyslQn4(0EWbR$wIyc-r>RJMjXifu{zpzZzcgmWo0k8@-dh02)oTrcc4B7c zHZ#S{5Vx6`A!cTVn3 zNjhR093lZZiLTzWw(M{j1(DHUnyshbzyT2QT_s>E8xeM_o21u76NHm%&unflkUhA5PaBBF<1$Y?AX37B*YQTpay&!-@l`tFnX=^GV;r;v?>qqde#%3>--Q_c1)Aw`BjX>iK^H+n;&{LMr6xlN(lWygM2w8vAqUGN=qsrg#npYhI& zKpX;I&O6H$x;E26iJ?L;STx(n58Y@}4!CSrD8OB@K+Ap9ML7QKmUUycqUN%RqO#{= z^aWy8j09QSAZ}fEuOQ%R8tkS26tfI|C?Doh9cRSIU(R}eJWs`{Nm{?us#wZHrrkbh z=1Ml?QrJV*>kCCks6j*#pUQshp~RCyp{ujVmx=1)^Q>}D)~2#7KKkL&il75-Qegel!lM;nj?%Cd=Z0$5@62Ng8K?)MXZH(d+>U3H+|COOizaGf}(a} zf>>`;CQ#49GH;aCRga&OI-sI5qF(y2V>+9$C0I7wV@RayI9M(fSCDp$I(@nKE_{-e zBj3n%d!>vB7uP-f@w+K^o>ue$IdI-F+223}3Nlq5UT9nOZ1*aHqP-0f46k20`AU*? z5JJLCy~DA$lAy~QtJMJq(`#l^{-I6io3yIQ%1$8`^|0EytB&(f^>y7y&riS!QP~Zv zVp0a7+fNw}`uanSyd!{N;LHgDNLHilt;o@x$hYVntdY9>*$~@>Eiu~8uO*lr#M=k z%%>-n4s;yAzIp6iy%+d7`ZDj#SS!fe(JLb!1mnG5C{n{`-~d@z^Or(}MO&+y<8Dr= zlyC05m4dVe2Z{ddcUn6 z`oudcs4V)X_UcUI$yrbr<2866;q^*+Ko`@&>aRRkPsu8Wy*3NA*9ERv{FFd40u_5-YD<@{uf*a1!KrP8zF zFR+A8dn}oT=Bdz<26@8Vk8>}qL;r;z}c|uYPtXU+I~8)TLQkCKKqTLT$~2J;?JxpMMCIM zkqvoj-la5W=DbWI?zO2@DOa7SHe?S3@DnbcOVWmxTD|9;%h*|BQ6LsO0Ey!qTPAZs zhLO2e7=z~l6xXD%e(VtVM7#A{grj*?fd^fU?eo5_Ek?b-v28dOk80zTwu7LL4tOMeZ zzyVJTBmPP%0<&}LmQDQRShn?Kq(Ois8&8}GA(QcT+IwyZ z8h~^_GZ@v&9}9J(uEkUvOaLd4^c^F;Y-_Wpg=8J`t1$gHOq_t6Utkhv{38o30YO@h zdv+1z`&bno^k8sUc&3Y}Z%B8s^E1B5J-YNC`EzuGQ0WvqJGkuQ^75grC^OCK1i`8f ze}Tp43(88-T4TwjHG47Jx%%Zpykn+y)>}=3wv#EvtW`(8l=Tz8h|ywO{2o}pA*p?Ola8DCgbl2ORPT<ZE#<|)g`2M9YoOg5nH1)kFekR5pC87&p$(o^dJ^qCVeP?&Rodu?AOw68XdWt= z_Z$)~&^xf!t+omlgh{l;BbaemMqtKZ@E_V^PQbYi@R7A3oIo9HI!FUv^JyRkq=gI zq@I8@TyTj4jIx>da{-&KQpNbw*W=BXJqJ~X?S@%)qJ+-jrl>1*tLC%TOKNAEQ?}jj z3A@(j+Znu-9ZI>7XiK4P5EMWw6?o<$6GFH%H&@m^bi45#g-1WNh0eu4E=;Z32Y&me z{v~)FdIDa720yJGX_=pPf3$}%j=5_uV8Q%a0b1*>WM?Np-^%F5eOWp~j+76*bqa!$ z{OE|vGct-m9+FrLbvM9GiyXLUnQ-_efub(L-lI2{q7`&ZL$5(AJt6eiCtK}QDF-?N z6`ejyUut2VULaM0))xY|Oc4+Is|SP*?ztS8)-cvo*LWwxlPP5hCwmrR#+cl9B`-?r z@eC7(d+Ca~I=jS%%BK!=6sOC3+ci3$86McvU}a3!q3BR|yUdX;*Qg zJSrJ1wqrfBVa^HNqoID%=27{CKuUO!`71HmPk6zH&GaT?GFu|y5)KUn2i=@AKmEpb zVk^)Q;Z>Zp3NjW57IP1qpxMi})|<3nQYw5M7wj&zs$R!cd)h2p9vRf$4*q)NQKdL( z8Dpi|xmbGGB+g#GY4ukLe}uWK)V}{w;$Pw4)BlyI;?Mklh5sc{%Wq)(7tdq_ zRr)_w@-Kz{m5Ja_aJl~gU&Tq@=sVIgBI>ixH~v!fc0PGezoC$_>D12w5^xCqDDRzExAT|&zIB)Qy1kM#~Hz+Iq~ zrN_X>;pBaPPV7(*Wu@w}W?{E;uIF`bSHIyfB=PhC)K8H=tDfI<{veB6R83Pk@Q7d= z&+03qm6}U$*j0riEkATAIJwvAHq7*LuW^zzXdJxb{bz ziR!r@=_Xl_Zp^bJL@P53G=E}?idjtKh+}$Y17~X%!o&LXizm+gFu3bMCqUG0EQ`jF z(T7ALI}?G{h&QKQ)^2Q4ekFUUOyz=vDpjBjW*`oR%GDMtTW^lm7CUxXf49o+LI7uF zZ4(1c-So!cl7-cN+DSuU6%5|T^+;wU?iz$`*pz}q*hd8UClmNIp8PwzN!&JESC!*T z$qNpP<~EA_40opD@Z-4Yoarzfjuut+WuRWP?@s$b9hWq2uSa+xOAvO<<)l;4Prckz z+UUAY6i-foi*mk3EmQYNxQK@<)5OH$=f|}@{h3IoGhXn*Q<0;vr;h}>M)-rdROC93 zL8qB5nzOc+?VC-a?1Zw#XSHM$EPhF=UYAt0Swfn5+%50`#TAIt7y)=TD*=R(1G>~1>}zjI#(g45TsTQxKKFgcEFUCr`xLVPAcniyzx6P-`H z?Tt(?f&vO9#;|e+1ryA6=L*gk)`1)A5J7m1gdywDSTU4V=}!V}{5VFgYt7`!Abj0$ zh3-+qVq`KD@Agz)IG5#R9P>_Yy;LkqIi@tup`R}|s&bvBSkLyOd*qgamA-Pr+X%8qUzMjp; zVrW^nucuH^AdKmC(G_^o4EZ`XY7{iPMoCmNdy1UGRlIXp02I&C(DmbQf(%@Pv z=BmC3h^6(ue}w6(QPH5UZTaZBZgLlW*$w{#*O&t4BeKRBp^bj@DkKp;K7J*mgPbou zUO{jSpPV0@4aU43bt;0IC|i@zcDLpBM8y$HuwX_QYnQR=p$RpFPMre%Kt#@g`#!xr zhje{17>;PIqAU!dz_-7Ls&$F%PM79awT+%So3$6L|MY|5JnIfcLl`G$xYqK((Bb=E z{!o?Joy#~iknKVKjVD*s>-Tw%4&Q3G^B#=c%dO~_?KUluTSID8D2(V#Fu;T$^#K@PvRn5#}q zjZ1u8v;ql_0b{Pw$XMY3n@FXYpUq5nV&xor!!rn3@F?-o#U@YE-JJzI4M;=udO4B2FPgrgvx8i}~^1`g~< zf3L)zM6N*cJt?->@PMf#?+bmZD%P+T`m$7nuA491y|}!Ucjzy$CNd4Lp7#~blEL+k zG2vrT+{Y<=(o&Rh-9wR5A&tqNHHzVrHdG(AsVJLv0ohe|uDfF7%Q!5XnX&<3O{pSP zz)S|_qP_vrI-6{@B)#)beU=!TWuM4BgDo)@AI)(r6etX(Qg>_nu#)HBFmTnsL{<*4 z;n2SwASN$zG2REt5c4LVS{^4a(c)#G>rI;AR4iZsdt}9EE!%{FnZ;DA{2&$LH)T@p z%gL)^uyfm)=9yOhqUWL~NUx`;ysx~kQZ&8y_gpM(Drc~a)I45ys@==If|MU$NwpU$ zn9YzBEt!P~lI7{^HEs5{sxql;N~sSpomHz})EWoP?)@JAPq#?~&L5b&gnpJ9_*Hj~ z)^+2l{-M&n$ao=;)`<=4;b3|!v+I+5!i_o~z>Jib=_?VV=XkXqubuSl(YV@i*$4$s zt<^IK2&8k-9dXe72~S*q&Ro2(U?iGOAKbI)2-7x#7N|v@1l{e#!|jR_T#EH>qH4VH zi^2Ogj?srJiC0J?af)0bU*pc*fdHR6w0AwTVOs&^8FT6Ds5a+uXbzWh*D61| zGFJwHM!&#H`IWh;dY;1)%2|uLJPZ_26PSL`<)84(!HJ4}*9H7^ls%g`fbGUg;!hhR z3xI8I;VlW6T%SP#41x8vV~_p$szrXzKs`r4$DwzI%;DIt(|zDeo*#2jqrTQi!0*yu zxlvC~@T(sZ4(R9tH?UB5qVi62b^G9Q=tW;OF2|n!By~#I^8V(Xa@Jwac9YaweucxM z_+XQaW@yW^_^El%*RASo!MW%B8hc%;&;9M-I8zo)WDMhlS7}-$T2AWEeCpb$D1kaG z+X|>bLh3qWWTYiHVL{-w#9|g9m!(06Vy3Dhv~byWh+jY4Lu{ZX6)bUWyrFku3Vtw$ zJPzX7L)!m<3vLBmTCZ*{sZ8%y1XRL2ldV6ZPZ#pA|zUs zm4ujKY~AJS&HO}94hN;Tx+`5F1ouq)20BMgdJNz|Eo5OprWe;!NUm1kZmagl+F#>d z_DjjVBHj9a*Oc^s_f=5N#|GFg`{DIbV}`uHQ)ikFbNeuU8zkqnBy5bCZc209$|428 zY9Jz{NK+(?8P{vl|6gyQ(toEZzgZ9XvI|e-TcVL6#G;PfmsL)H$sgRtJtG*7SDsob zzMXZ1Yfz{2y*o2yfy1IUu!XK2lh82Bdlglay--k@8|uXNMZTu`Q}RA(>@>s@&lvr# zNoYkjY3xxM%N~DN&$swrN98W=^NRh5qo^l^b`S{}M)CR@%GH7!-^CPiUt>g~a<)!B zxs65Yu-)FvTM+`AV;6w2g-E+;mka8XZ4b(SeQgPT`}FbDk3D0|9p-H5X>E zc%>!3Ro7qt(9%)=0loj0?e{JqxBr`rpXV7}!<mM<6Qi znWG~}zq97HA~5sm4}vN~D%r0F5kJIQmGOgen5(*>x?m?@@Uj_7p>`)i0LCT8iq8lG zoFlSRaRgR(&b*@sGQ1tznS^oOkB=d|&mri#u0|deZb|U5y@=!;u+#sB%FNM zOkG?l=Ex#c<^cR_nKxx=8L0#}5?=%d*)vpHU86{mv_2-5f*d(}Qgj3~{F(qGCm;M; z$3?1k&iuEut?cmvr*OCmUBOk7cZAYoL#dA9<(@TXA0HK+$8E2bscLL|;d~<0=;rPX2`&A32)e3BFK1Uxtuj#|zC9#slhgmLRKqi~65* znJ95>r$~G94v*p1RpW)qCEnUgfGEdk^+xeR^%vM5=HY%E2Te#+i;)j5B9JKc3P$8_ zWaK2h-yFGY72neUKMsk&8`{Ru;b__>f$R~){*6M40i&N6X0hDga1`P6>7fU-|Ej__ zv1Ik^?RO>iBxV!YfH@}Vvm^+_&s#$ITU0-=i30v7xYYlEYq?VKiSHL!RK=e;V`Ik= zaDzP-M&Z6&C19%+#0IRkeJtHoo3E-!G%egKR{qRZ{-Zlkv|HZb%S~n36Q-}gZ))>N z(3^i{`vAbsL%Bn~(sK&helr*cfS*pXaay%lD=OAhc+Iv7>3!oZOv1+G6nHIwRyl{4>yZ9b)>@IrbW9Eda%q)0JWC=@7@2N~!-;WZ3 zNF1$o=ErywtVZ3%o{@lJ$YFGnr52R5#R$hwt`ECk#7e<0Mi9cDxV{tHZuawGqzt3( zM(TQTpXMP1da6n?f)Cpv%wr|Sh@TJ@N57j| znZ8V`B3j+Buw08QoZZ`o%h|~;`r#daMMYywm_zMj&V`zTk`}wum3(AQdAd?1(CgJ( zK8-@R)H~fEx!4P^!Cr(4yBsX{<4HH#padTCC{DY(6a<(TzZ7*wIMsyAGa_M&fvd99 za=dKoGlBDD6EC8#2Y#9XcPFe+ms$pEhJmYfnYF}C8{_Vq&t|Tie^9E#8`(=?xE7tK z1$Q_4EI+A4u~a?A!bUa7NL;V<62BXk6J%rh&1j?J%_JVtSN(d1)%pwU zunGB6EA){;_$A&AcqF!c@C$5j{`Hvm*==WNT;HR>p;l~Ht@O~3p%KLDRKI&efw(-Y z8NB_IGrezbL37SHve93d=^_I^oj{TzMpj#LQpMSmqZvM5K=({+7skd<(JogozpEla;6RPN92^L<+3&`rCFG0AC*l z`EhQ=Cz-b{Fs{fmr|KlumfBU9pLv02AUNBmq#fyQOUjsSiUCH&Zo*#nA7tbV3X&V< z3vz9Dye4+k{)LKiXI0zg;#v|}=tg+|E`vT*57!T1wAL2j=fs;q%L1+V8&sZFrX;=9 z8IhN*VJu8E!QVR19yiF?j+!220+w+xj?^nYV{Q16o|eomcCLEXqHBAmo4>8A@)@2L zDOd31hRKwUaA?7V!hY=f9?pmw0`l$atFn16byBj?0W({ocY)?^h`u3LVB5M6?3*9A zldGmyD}1R5V~tl?e@-2B*&}27`O#=sn*j6Fbk7)#5B=mWZg+S45~fiVn}Eg1ln<3{ zeU!O+1=w`uc<$vOT+cu%^y#g{Sn*gIudn>(@-d;EIe6xb;N15PgK)qn@Vm<900T!7 zi1T)XIImq|YPbwilwPRH_l8E8XsqKA@wnx2I}6ks8@MH2#rATSeEdOqtK!}4Ql(!n z?xRsRFHcmDXjg_&ViRUFcZ&WXpk6Q|$bnzJ&0X}5J@CAF|1OWixH`^}wc*D=A?Qa6 z`;!T5bkm`urv>|RbaFG~Sxd}UVJya&(9ggnZek5=R~d4{ox3Zix`}#y4KG{%thv=#iVZaES#ym zS)f>p9AIpV?#ejwzDwb*J=s%i2}%>Mlf;usTDy=i36_-oGxl9$1)fmjRVsLf z6~1;peUW<{dqk1u>Y&lN3DWYjDhcRy2oR8#0$exyUtsU$2P^*U9g@Q5 z7CT*Z_&kfy`2ivqXXHw~;R86DIjTOMf^i(MECmyeRK80%D^Eg~Qdtq!WHcYY zNIJE1q|C;bmUVh6+PF6FeZlKvefGR86lUZa+=NZiET179R=9}NA;+*i&l+(3r$>F{ zzD&hm;5?*(JOvae|28s(Mf&6mAM200lsHL*XHH(fBHabLzo904@cU}BjZz{xCt>Kd zBc)iUu zuzdhYoLwTGa*syAlNtD&uk*2&1PN!iDPWOcUJnhm^eD1`jb{Krx%&6`kOeJi!8cfS zd*FK5t8|w_w=&f2wui+no>rfa?Yp54Wm-ahuCw}6b9tc``H*D<92ri1oDd;kJ(coW-ryFFVEZG8sp z{V%W>-7|taDY(dBPT`8oWw*n!=N9P3o+1a_Yt@0QhdFw5!dq)ah7J`3C_}Cq>0)rV zkMP=n0~Pv05tR~G!DKDrXL-%bLq1gn>g+%Su^%!nJaWz{+uEt_JpV$Kvy*&d_vCm# zTj%umd=V=FO_4GM7bb$y@}mcqPhrdLZ;9r`@O_24c>WSrUg@QS#Ly~ciNl2d2q~9a zhWw~E&rh80eFB<`5EojYj;z^ft;zUMewZpJ?8uJ8Z{(ZQf27BDn?%!`*cTZpeLJs#e@`U0op-}MO$BnrMqKDpbiw{C#g92neAZ%M_+W;!eAi*X zL*6Mc6S*D2G;K2xI~<1!|A(8|c4z>R(jF!7-l%tBb*ABNtC66TZwPgGQ`#QR%juVwr2g_W%y0Ahz^ALPPsOK3c zyCWqQPJD>vCUY(G$S2_^De5fz6!7lWRMr*TexKwze*UBp?Qyq9^)_Myul!y z>WlrhU7E$nVMi-o{v5^F@09#XC-EUzA+pP|(ruJ%!OE{v5ArxpfoZrUkAA>GgeREv zV@LSn%Lj3XP%ITn*ijP2I=6f$AM;tBNqrnDmD7OR6?1OCGNug_LgY!j0(dCykA^HV2 zdtx31RV!Dav)QrG-YzB5o_agKggC5dWzmZI1!=Oct-oUy!R=ZcDnOiIKBw+x49CY~ zH}bv2!cF!JUPWP2m*$ZqPd`7`mjQ+I30#P1V2 zg3so1tO%QqCfN0Q_h_qm1`t%*OVrMR_DGZZLV(5V$yQgu=19QbW7Eo$;nfX-_S$8CB!bb4fbx2jOm*O8Dp>4Vk*8IJ9`|Q8JO-Yt z%@F7$Uc4DFDyDrPhPFy=Yn*|z97R7F;N*_?TINn&|Hsj)-F}U&uIW)6Y;_d!b$DRN zJ_PPZHXPo?vMH>Jq^h4uu0s%88lFWX8E*+Uk#*D^MfOnVu@JOdymIl}mmcVHyWY}+ zn_!NzZW6o0tzDJds_NMBvn;zVLJFY?1jsNl_o3y0oFB3l)!L`eA242;#&x#0cARaT z_b7+|h2Y~n?R!D_X3Lb;vq2`*HGai21F}(xV`~4&n}8!s`y#Y=SDT2Y5amt&XPlHb z@^@y<4=8heYP{E2(qZqru%_>m-R$9u7&BsBsTFg_=Q?iOl4mpYW6#&CQ^x&zZ!`@n zlzFCDtuD=G-)&_?EVPUJ7A_$jXf_#CGoH3Si0W~{XnzD*Mj;??z;(MxWUmXkXgX2u z(-6nav8E|o9WEl^?!SLN+=OXtZPm$Aa4*&Qo+ec3gJYb{j`%&(oiXO6?n>6>$0gBA z#L_#b5%OC~@k#dlJTH@CHJh}twRtwMUGX$pH?V$F&g$09%zu&a@cCn?UCCm59mc;C z(&58_4z7+EuMdtjpiujMJpbF&A4=VX)i~^9$ia#8DbM#n*4^ww@qD*WTXv9hvsRfh zJ6;arOY5v1ke*eJ*Ix7Ts_;3dXICf~S;=Oz^F0Awa4&KsI+eEF(ZUJlX#Qsme)bd;*jtN+-7sDYHG(Gy=#&4x@()P; ziPb$0H2ob#m$=cV6}$&VZbei`G~FR1o5ga78coqTR1}M4W70altL=w<>#B!oJ`V@q z;qxoBiY9kh!Xli9A+FU4hQElLhs>KAIM0t(2;V@=GV?|tdUSrftC_Vp6CFJ5&RDFC z$~~i6^s$w9(QC-Cw=-7mEM+rQS(S1SP$HuY zl^H^bsq;Y>pb)JUZH`C?R-Vz`4~rgf7ppeoL@cJpda#D+xXrxTY?QGQV`a)+m3H`F z+?o?cIcYObT92?d5X?LOTNaB2m~hYvnU=AYy_J#XA&@%hUpK>Hk`iTMWab)WzGwSx zboz3(>My2ZUUqW0hXg(`ghlk3E`Zp@>@|r1;E|gD;9m)?8AjxS)oq|>OB@6cI>kTL0R|_>{})|vT4h<@gSD%X;QNuJc6|wDya?V-S1cslwlGS{u#Q1GO`{JgPxwZR8^q?^NkC z#wH+l4+rS$Q8z}3SsFnsqC$=h^2c;!&m}DIrAX<9+@qL?0Nx*hbeg)@8zQ&5DgT&$ z75Y2g#v-X`1XkTs`hnWN8)!4El)*48G$d6`8#&nl_eFHU^`W9#pe_yH>f4U+brN-5 zz3=Q=s(voMS^2W}WNb~^9sUt9hr??a6U<}R+d$UFKbffb@FrAyWsy??7{Xd^QDIZl?n_0-llo zatnsO9)@V7^(h>GZvC|T?F|lBg9SDoZ>;EBS4Ak~8C^sO0&jquX70z42nXBB)z7O8 zx0*b9fFLh1cmQ}_aQ1^)QLJ5T-OdjVURGwp9WtD1qliF{$;A<$6f$8vCU)ZbUGZsrGt&|U&%D!vO|ERM3yx1gQ^}qbU zVtxY+(9!#wK4kttqkLf^-|P$W5kZFn+Vt}d{Qdj)kl-LE5x@O`qmnQSDWVuS_{ZlF z*WEBF^vzuFeANGQpAWbo$?GX}OxE3U`z%4L5tB&CjE14sEczxwnZyqy-b|J+P;wC4 zJf9rVB}#Y2jyJ4h00ivsG_60gcn7=RGi9SF1cTi8jxMgT8}EvJ%IzM$pz5P(BProF z*Y;#!G_Menh&N6)t(lI3`vuk=5!)gryxfRl?wqF?AwtawRah)pBC>!|E7Hd1Iukja zolr*=pUkr#As@tKLz{LYz4EOG7_SijaQp)mOIUL{2`Q^iNg^1*L;PBra-K?rB1NQ~ zn+V1sN$L_`@>8AHrsyh$rzkHG6|=P+WIPwXJDP(hekY*WbZ}oM?24R=Vsbka5tX)H zrtv0^Z=Xis);nxCu)!!4^hTNRreg%j=SEPN31@f4tzr{Gy&!6*gu=QmXE=x{)(4%d zr;MuI_`JT~bH{uFU_VPlWW`uVv+2`BU~LNfr_gh-J3gUJMjo+u2zjH|k=y}AuHgmdD!B9&BOl=8?^pQB~>F71L(8DURFc*Z#uA%7EEa!J@ zbqo;aDVc=v^@^#0fNwBVP7Pxqb+@qQJz0bXW%U6=U0wK-;5h!{#6>+^8~>nv^ZF0G zBq|y-Nf?oqBj20~tbyx3jpVr<$(VSgX(iq+E z@4`r#J~;N&4NgUpMjge(8%;qk4*&-^ED@bQleJ9W@}T?lD~-P1DI1oV85T~a-Z79| zE9RBXI4w`%W{~sp&*NbsCY0g0SJtPv=1#!PUW=0nnr^z_}x7d^$ZS z=ZaN=wKp2ajwA_|fu-0hkdw0<4f9$)VN;sGZQ)`miC5N14blOkE33)SjWg$y&7Y6> z-`p>+-jYfs{r=uBk#nlECF^Zk5osW^g4T>P@fgG&UT(+@s1`&Q5jn1M^zz}H$ zMh?q7pvP!pCFsH%6{a6(v#jT zn`WKxxSvjME;=?K*$)jn=qQI%sDnxhK^~Dwft`sQe-t88NYMi}W-7ZcQLZ(np^yW6 zJh+3lWiY{cN8**T-kFB3jUr#V97JWDAhCphT*;;jr@$RcZa`|D(7)14IvsCd9w>(y zUTiY`;(Sga*RItU!IC{wPTwD3lxN01<4$$Uxg_>|!Mk1hvC73r<77)L_NeG?VhSqy z8UCG)VwSOr#^EOtdsxJwhv;S!FBs8V>vaM6G*4axa_ZjN&O6)EphUYwJ{bE}rX!eK z8!7}vK2jf%j@~OTE(y6Tq)dRs4Y@EW!MTliZ`!#SvAQ;vJP&#W#ktfEXWOwXe6&3K zk0bFFx?$xhcD9|xG&xn_>}Da9jz9`W6-PS^IViLFv4W;SUk4SlIx zSQ&(}V#E`aZnLD)9-Gh#gSYV(pK-`?#Mg{dZy@(f&4>%D; z_jMJ^fm*W?`cjSZZ_Z^+Mr&WkhTbXxs5^jXR^Ro$_Keyb z1!|@m8D&hH;&2oBH!1WpveOp~+MXGrjQfP+gZXR?&w}W|b3T1k-(;K&@ktpslk>toyh~tp4l5mxp4J}lG);sne zV!n(;*nhf!EEYOfJEV)Y3OMc}c0KMNnjjP_9yavAc2d({ z6^R&I;q|6SO(f*u!!vESDmbnHkgml)5!?jPSV}$N4GDo5!0sdo(4o%3K30mGw=z*e zb6>85tX4h>n-3Ym($wD6*j+)ic{4b4tPUlxSM5@ZZQGWkSp+yvTngJoY*mYGXFo-XCiroqwdUD&m6dO@>FvcKH$NfjI=7RrTOJnHcnGq~h0 zFv?6ic@shZ*2yWDWPGL?4?(}8alpV6UR}d-j}vxXvj(tKhs8Ipw#eGfC;OQYQBi8N zR6m09d^IlY-k${_Wj9#5}X4 zi@e!ul=OvgM*TZpDl+>LSoCQ0*BrQ2de7+Ql(qdq>4C9$Xi?^T3??B6SQoofvJO(9 zW)V63clCnW=gZ$3?=RgH;KD;=Fx`P3~jvz!85P zW|{G`c#WU>pL0G`_}di%3mmuwju<1z!&cD@xl2S|U_7%Y#zmizbTl5YmP99CVSJ#O z*QcOoeqhP=L1gmP?T%zQm!pz%#{;Ce@yq+7>&{;xD{$I|G36y~ z-_>5|o015Oig-Z<9zNCHp}RZn11)PuPq!4QY8+VbUfa+lfvD$n{DU}U_#X%oFpS3u z!Y(E2C#izyIjCpWU7v-mwfW#7gs}I8+7cr@R~+rZp_oVAnKF7x1pyL3 zl#vVA%~+%}X$Vk*^T^<#qNPneAK177q$f$k=BsStttSXq4L;&w$H$5>Q0BL`Y%<>r ze%`96jWYFC;mQrUE!CEfFpGsdP}exz%-k$TCucAs>}LsNhpLIeL}QPk8!gH6Q;az5 z4!b#f1dXdaBXU$2TbM$xz@eA86P!R$qLKFJaE@!U-g52FxJFD! zdkYb}W+Z+amw*j5pSgq|$8$?!%wZTToC^r~6JKFKriptji;(cw<-8(nC6*uPvH0%1Id##nqBiME z>q#=z%m;c?7N)BSpaXc&6S-ZxBJ^;WYAqUQ3SGHGbEyg?6Ae|!>P#mI!X&H^+yxNg zh)b0TWk@5i#C;&>$5NzLN=Pm8mYqw;dM~+XmV;xmqa#1#`#ahslSScNb4rO7s!Nis z6;pH)kW2HztRLU9tbZ{`&DG+)wiFK&=-(H2^t8E|GaY&F)1M5hpN=$Wy+!W4ew?gW zSC3}Tqsd*+BEx*=9wfV!n{a{x+7w++7{*TPPBMGRI9T#P#e(ah%}ORqI^Q+fPryv0 z>M!yIg`t(nEiVIxsKoVjc8wt!xd`rn23kiO$F#;1 ziDsCj??CO83LZURnPuu6v3I^SI~Mkvm`zqPOjo}tQ-TT&gwktNBJXr{7ScDSp(tT1 zhJNBJNQzT&s#JP0$=d15A84lvWhU3mvp-PB_6(&NWh_~+n$4x;z|RQZ&Y3J?VMdas zD{{og7LfBG>0`FkWKK{k_0vzFkm1b6DeXsm6IWJXlc@lM=5x)mu;zP`(0ln<2tvFt zGRt>l7vx|1tV;ZMN20I;Raov516<|+j&5fMFMA{Ew=`iGEoM%VKM6gH^%Ioq%JXPK zH%;iD$ z!aBW&ETL%lqZ+p!qy)F#!JYu)F@E-$hI84z=zRJkQm*5e7g9%ag$#Leoo1V4lu%ic zYW?OMXe8n^#MG&F_C`mlegOJ{QDGvP1A;}(aip9GpY!eHSk_&Ddb1mJlAFMh6Z7nY z8xC+~P23T51T#NZcTmFtk)Z(%=kmG%asXc1m`D_B#s|NO=_og5iE*~NOvFvTq}-%T zU?nfVd1e8GgCv$zAD@+QPY0o*9l7$k<%6<%G~mG!D;j-2JZCuM6*?>5tky0VX1(G4 ztb{F4HWqukpQtVE5v@Msa;4rqQ{ZQ~!6m;Kf)dsIdiX@}*DRdOc)D)t?X8sXLH+f3 zyKc?qFKohtk{7L(p=B~@TEO{glwpNT5flxGD4{`)pF%nYY%AuP7vxJT*vwQZ!sIqG zSsEQ9w1oZj>C(QWy?XfqFh)2UxQ?PfVEWU~S!o*cFN8U^D3A;)YL{XFJ!~}ajIXLm z_aP*?>)lno52^m7K-OfFZ$WZ+*G51)ny`$_U~ZC=Q_+^uB)Boy+68-Df~a~uC?_1E zfOD0?Mhn05UbUuN<7VJc=k20@0B{_U$WqWVO#-f<6k%yUG|Q z_bUyxQp0k0Zu>#m={ANC3DR{I)|P-<9S?SxV4$1eJ5)|IagEY6u9GZ;s1+J~4u**7 zAB4oV(+&Li-I)Z}T-E`yoj8=#2_e8RO>ENfEIxD=paP!LvR9A?eky1)MhGtE!_57H zs;WG&3{EPpkmf{{AFgKsS|B3VTx{c9T&xVvSF60dJOlIrCKS?uobXC2VI=d@78dq@ zc@p^r)=%|@N&?FKiU&$ju846@Te+_jofY}2Ac^6!pu7kw2akuDV}F_r5u7}E4g(?q z4=Sc|$}jUSgcv^y2ppm*rbgjw~~A&N}~Ww5DykgD&!bD;b4qQBBKbi931-G zgtjfcoGGU4AaurvYJTCgFO9NkC0yF!anjpAAf-}9?b0wo}M4bi8%j^`XvBg6LV(;B|)#C-Z%4I1>pi|Gnvz-;uphvIaU*u4AQmifHgCa>_Th;@ z7|WfMs_ipDWR?(1_O=aOJLFdZ(Q%4|sRoVJi#zsFCl{esYNbR0-R^?qGswk|D{(g6Z~jNpf%WEm!SQ#er{ zr4j8GvRq<^krAAR5SA-S6tq%;r^hca(k7aQ^@y+qOSH?8as{_6p=(NMU~y5=HfZy} z7l?87Qwg2OL4-_N&05^d!7!$69gQ}^=vXR)Ec3c!kq^UcOmPA{ z*LI{$bJKa-PKrw%M0MPxuS}wuRBb=QjPc^Pb zcEa$LSWZ4CxZVPjIM-X_so0mBFIMamEgxj65y(Vkf4`|gyP#lB|36tQrFQe{b1>daHS0ruFQ-vd1-pt6Po0H{ysJMy`W(n?Idcu zfJpwfZON=#)JRS^Ry; zmP(?*Eenenj+S*67s)vzO4=&n-g_4SCjr?D!mB+87Q|=g)`S((3d|Mr=t=zl!P0J;6l}_kMkX}saQY3&>MLGnKY6*f65G5cY zB8oIUdB6XB&nfqR?)~q%ch6+@tUYBvPiD=Ywbsm9ON$>wS`>bvh}KMT>({EmKPIG; zdIb$Q;GGVgKJ|8YR5GUqM=+iKflv$|uU2NLMkuqPR(h&bBL4OXmj`s9#0@gH?PISz zm}hJ_K^78V%T=psH}2)!**($h`@D2N5`~V^3#F%HE&jZ55bzhmar@m5fkA5~tRv9% zP_!I?_yy=A+HXh)zT1Eh9aK@U_t;>m$^r~*CNc^{$3`)ln=hE&Y6j7&5P~hglS}hE zMhtbQPgc=R6CdEaLk2Qg!k+lJyNykz;%+{^u94aC>L*QJGg~TBx4`B-SkH4cz?pJ_ zJ3VJ$U(_4HO7|$g1E1DamPjkmR$i*7(Cb}g75YdeIFU=f(OG}*Syf&4Q62&TFna&6 zOst;6Bk8~wo}d|R!+&Am+!nzPDL3;ybQSSzMg1a;Edm>u0W8uFrG4l|56$N?{5wRr zx}bcRNdK&_Zv$BBj-A9#&duiGyrkKiu3u1#>J|Lq_S7=NtS7{1Lj4*aprt0W5K8G#gAe-$-;kDKhC{PS=?t zOk@lh=h8t$4TkZ&$Y&xV`ZF?g_HU~Ejq`(Op%Xcy-<%R7dY|zc=)E!k|GWT+bvwbaCG{HXOOU3l13aX4}86fphd zbB$7@1McG3MTg>swif5o_8R-2E5lW1N-;{xv?<0M#u2n{VEWaz;w7j;Af_zkRNhTV zA>Ng7I5kwskGgK1@v)jfziwV-v3cz7>J!4b5cccRPc;d%X%A++IR6{ z@x%}C)Ky}S?AErw~Mp`a={0~D{33pgTr}WYu@4c;1k^~AHhZI?+P3`a%l`gCe?Y@ zZhRF}K8X}ho{@e7*OwOTq~>8K><43$b)K_%qAx)Xbbws(fRg7#Ev8_sfb!@rO+;>qzvMQ z<8D>Cq{SuopDR~3Xc(GrCkyDwEve;0h$-aln!wV+r@jN6SL2d;ZwK#>_bH2y>_Spw zg-r_e^SF(v&+hP*k@^RFYliS)+M-yX3#S+^W4TjUZ25PX?wM@rN6X#%D%~5sHh->| zEA8~`Gi)VF*Pcv$JuuI+xCQ=TMxv;N?&)Ht+gZOm7;Nv4@FAKW)xVEvAD~`=d(JL!ywZuv=#ibS7zZ%`B4SI z1h?dO6Szey`sK$$GFwZtEMv^+y!*&5&xMAU-H)sNsOVgm4}#o!L94|>>2J{QBvaRb z;oBaxBcyZ{8gujw9JXT6Zm9lHp2xo}7yH~&O?fev3zn!^<5R(QD>O5I<2*XC+OQ}v zkKri>Q#Jg#vn0lB3VY6LZ-HkDVDmrNEpk6&N2&1=@-$+(6Eg3m=D6O@cGIk!fw=KS z5BNuZGs>;@j5`zdC^@_TW{1>iwO;$kyQR2rU)VtI>AB^kL?Z*d(Q$|6PHmt;Axj}o&87YDbTvL@X*aO2o#bPInQ zDR1JW80GmS7HFubXm=ppBRwuVAbv0@hVk8ZlJ|Wo}R5 zpN2LrlE{nVPM5KcX{D)MOe3?o()6GnsDrWit4k)@l0R2AA@~#;FGaB<2`+)pwN~VK z=;fX+J!x2~kieEeuAW_En?Yf_Y`oeatgSpr67wnDdk?E_pj_$vq*MK)?@U(K<7Ti5 zbpZGPPyaSVX_ytO@yeLI5Ge41ZpnZ$2;GqXQ29Fi6e_*_$^78Od zr2xqlYT-mjdH6X4sew9ZSn6d(T=7 zB+{EZWo}HATdx(G17V9Iex=1ah6Xi9A{CD-KH#`*pRy_(aREth)(*9;CpM0RML9*9 zJ;9uW(PI459em4UtrLL})B8gp*jU|@OJVQh>TtdLW-e6Fb?t_Qma0xHIfZqNvVz+4)F86IK0Oz~2OdVUR2{6E9AcRcYmxPvnJAvXM4(yW$16yG95f z$WSikGr@bIKZdnm`Z)hL)hA1BRq&^9BT5T10IZ6!u zb`tQCuItgNu!idL)Z`B_HDTk|8OCGQI0jPW{v93f-9J}cs+&0-Kbl@DHArX=4nVSU z%HgnpI^{D%#KFXE-omllY^g8IeGA&*-#UmeQ9AugTK-6~P1bYaS`W3LVX~bX3ZHrn z*i)Yk3I|lku=UDzX@X$t`#7ChL}tMNEIwo%^!uWmB?1o_T9 z(%^8BUePzitIl+S@MZNOXd9!=7$z~V#ii!oVbn`nSauR!6s4`3W~Yxz=i8ZPEuy+B z$fL<2#zNUF59MTN-SC4U+fOxrc#DsZ;V#D(HuQ~-RDb8Qx(q#}wFcMqV2bnxS9oLD zO<#M#zI018uP2ef1!TEz>nroUQ^6{^=iXT4z;p05@@5X+UysamN>Crp(FW%}CB zz5wF`soc0I3_+M%8sM~jLhq23dh(t4jk-q4KnlaI^sDizl-niGNxH;Y5?jcsScm0?LDN9)-W@j%7qCqnVd6Cs090u}z{J)hKj zs4cCE0i+$jY~SzmY!OPX7^>*y6ij_x{Rqdhw&5?*5==ahHf}O#*uIOlnA{h;I)de* z&k@4fRMyxOqE#L;^PBqDgpN|*;KgQf$Lf8~r3v5Z)o2vxC|K^eW+o%$cJ`4yR(HZ8 zjez&j)ufS7a9j>anGN=yk)^|>Bac(IWgh}5MZ8Cjb6!ymJu>u++D>XR2AlNfb12Wu zC?({+1~DG9OYkTAGPbwb>hpZ92KI`N!Mu9E+)VVJq@;W^W$l7jkzT0oox2&hfAgVW zzAPg(_$9|DdSfd!J#ShkWEqx8n6P*sOKWbn zZ#0&n5Jfbx_-TeIJ5lE!s>e4a@{s)wuW)M%{MZ+{mqi>$tzaf*E2nlEqLQj6XA^Z< zPVU1|WylYMX)m!(0f~Tx8ijVL@K#)Xxw(Opp`o4lPomL3S>p-twKa*v^d)vs%1=Ou z3Oc~22%!sm^!rXJ0)tTlM*A- z9as1%`ICO+wJM7jm>RN^X~PVchbzdFR2`bkoRCXyEgq{ZkL$SW2o%%XH;-mxS>x3K zU)Q{1F^oI1u;OrPReHjoE9Gw-H)gCl7*!az5|AUNQT*&?9GIZ05W72M{Lgl;D>E# zfB6R6rRrfj6K8*oWw8V_sj5T5|6IY~O20f!;9jpCzst(|+~ZIp@zI|vHE?;zpDT{M zxmsQGzlKxZ5exM=o{lC(nxV(M$m_qi^CMdL*o+TVBE!`U-)ix?Evib6hJqcDFTdnVk7e~x z`$SxI$Cg)-Hy!b+&cXy#J#>acWlxLy#?~E?o)V`B?;3rE2dT|IbFHl$EuM06hJrar z&bs`+@=JdV?}dE*g_tILfR#2el2jf8T%CPc$N!Y3lI=@vKrVYg|B)=$MThs8FS_hr z346J7nHN>dcH_bj&=4lgrm#?ZnxUitZq?+o%|&#E3F?iJ_E z&!qVKss%tznKpYopLotrw7#|kLHxOLtxr3@p~ULr<*{g|Eha)+YAp@i#GWO^(OgH( z!FB+*#_<9=sQz4eh$)%PyM{>U@Q^N^;Wy)MZ2EHr@c`@YqXjq>Ju=%ap89G3gR64= zolp+efz<7tbREfLwEI&fIF|Ald2wb>9eL&rUSsbz%@&SwRt{<_B^K*wc)+v#{QA}9 z5_4}`oLQU=<6cCikH2`Vilg=Mi16;qK<~O`y>ksY{`#TeLk;uWPF;Ro#{X*o7=E)H znID}WC8y;3ztVql{|f&r^uIkF{Wtv2{hylu{QmP``F~UPpSB?PJq~?Hh&rxLko5Ko z^N8dG!d1OW!*go;#0aj9!(4ZUy92vzBO?<>Llo2f;(*WSHp`1UWY-PRza&1;MD(y7 z*>f>5u=-?3<}}!uW(*IGT4Yb1$U3kVndp-b3aj06OUE1=NIAOoML^2L0Re@5H32$ zHX*soNIWJ#vgDkld*Y2dyg8N8#NJJDaau{<*0mf&DPoXvhl}0)60nxVB0FZfd{JDaD_SZ(y?lmnY+~q`tI?tHW8(UJV=KaIU@6oodILi|@Gn<`e zSl9K1SCwB#NoSYBK;AXyihPo&pqvrm3nx{VOxl4=oOs5NO{FE(QJi=wSrfC>bLbP8r*g|%qMe73TMMm z9kLaPPR32Ob%wvWg!#K1Y-vdFMz5y3ps4uGD5S4@6@cN;$%x1bBkm08*hVwUslmPg zty3{hFpRe7Cr_!5^-34rOW91xE#^20uMTMiEtoHdVLpC^be^B$hFEB24G3&0yYZ7M z@A*XchZP2?T;>4m=M>)>@;s9s-nN+=oxIlxo;T9)_zhK_)o2nHLK=#@%o{%@Wq}4{ zhdeS5u8JL^(k)i#2Ri4qA_^x}hQ$k^8j$lcnpMde}Ld!)B=QC%d9q3=Y*q5HK}km>8tnGgkf zSN6xW;nB(l5Wlc8Opy2<~w(2ul_+pRx_)h?ThO)0K$m z2CvR9VtFY4!q6RWl3qzy{8Yx*+#3r?Z78tkkOo?Q)$CNqdF~N3OXD7+TA?8`mtkQxunXF<c}B7kHt4!TszF}&*3XF!Fs2+FF8n|Paf~B9tH28gDFs_lHXB%1ChMzh5-CY-6uN-q6h!2hlEKLKn0X*({QDX#nALJvOs9{{oi+wwUw`dq=ecj?A;P?;fD+^D27y-kecwUza@odZ zODeC}lxoKvsKCe_km)L?Ugb~teeW2BYc?*t=+|ocRw*wNdGP@P-E=5)Wj4XW$E8%p zYwpo3UDLj}|D+LaS?ov}Mj8C#q9AgaWE(A7ud=fyXjzdcoYZLYU}7&J-8Ik!5Hiwj zCNMF1JO`Xi9VLA{w-#{)GCx(^sH25AAeV|v*F8_717lU!fG}}`xjfYJOcIA~ct}@| zHhBDYhvPWqm{U$HPi*5d&zOOmb{j~vDxZI_#gXA>hUr9Cg}k1-u!ZRUw&9+b67E?Z zW!{qVB30KjL_=_OGAHdgp0pO=X&suk zAFmpRBasE44v!@i?(rPm4TC!w%y6_UKIYqht;RQyI~1TFJc^W%hN|M8)js<>Z+C{X zSJ8Ia12ioGLpDPMQ!eC=ez97?oNcSdB%wu4D(K)rDh7#os-n`)u@5c3@|*YXArrm_ zlV|i7fW5es(lvViBaA$ebZVhJl4D9I8oAErz+xAKQJ$#bcthx_X97Z%b`s!kQ zWjTkJYki&ksos4KE>DIBWGYx;Njqywhdr?*Mb)O)+rm5Xrj?RBTGK+CrBFg1qlr{~ zp(KqhDQrw%<&?9<-3d{~s9j_QFx-xG!m}_?#r};ICREVs7lPZuU1D55iM^VU>^PiE zdW}}Jy&A28VH{DBncDw`i^Klpw8iLHCvwpvgoRHNm7-D1l=rSgFrP77ObWgg9wB9P z-hbl285o_WYGZl)b zAe~i2qwUWX_gD|uTklV9V50aQ-U8f<*-oa*UG-fB$jjoSe4{PXXJGvBqPvfos=|`` zIh{96l7~>|`Fla_{xCIoAzG;c+7rU9mH)9FVct~S-VeBt|B-Mw`ScStOqGSQ+nrtT zW$#A-$m&Zw0#PiMaZ(t`sl(>f32DnDlCqGajuyag>oAcs!9{*so>)vw-vfm1q~=)S~8|Pej9O^ z+K%tO%sAniWOv_*#H&M1Rq!67@2d3#UT52)*g&CS0W{!ev|0Phya8>GE3Ubv0qTZJ zD${$i*~`o0c%>?qO?PF<927w9rK|8o|*zmHbI{I~6FU2FbdoT8g7#F1O! z9p0~6X}!Dekll@Ql1+gvp%)sAiK`>QU!LcUe3m+M)G!ZfneHswu$Ye*oh}^n3Bsr( zuuVQ*TCN|PP6W3MQ6UN4sSFVqt8so2raWI3i`cBGJ(qomh_xv z$fsQO;ed;TO9L#>m^mYiIxvQ>nVX_tZFk+V@7?%}8{1$x>E&_YOljGfdP)^SU-S6i zc=2GovuE~x(`EJE{aa_%E593l{x1O3===gH`8DC5}w@~9C5aD5Ip z=#`981Sr!*j=z+H-lduY=@UXrzC+&;L(JcdeYu-yT7005mR0@ugMoC1=atyJmzTi? zPD%^CHhZF&Bpl&(XcvuqH`E^NPI>(z+Z(g~Hj$&XdN;7;1EF8zs@y_v{Soi}QA*GC zh6L-k6o!MBF}IpmKYx;~1+cA>VjkUnttwSp+h&~<3zG15jfOc$?-P$2EIvm5M*P|- zlHikhbZE5jF3hVx9D%$RPVsRK;V0Abi??qK=``~O%D!O+uQ~Rl(rS&!x*{xRcuvSvbmR-;?fJaR4@6NG{ICO*_E?rUwvHyeqCcxTijA2{7qgqTL1dKE+S`T}OE=-H)(LYI-S9!Vcan zrViyn<=|5d@Xr7!iecGs&2aBZ-Hvd6R}mm+*NuCjn60Ii&Wx8I7-gJJm*%+J%$^FV zAY}UJQ6Ad^g?}p>U7`pON@>$(nDe zT@12MHwQCA5f&dmQ?1Z*)(43@O{xH9%z}?6~nW{r>Q`DkK=~2L=hoZ!HH3O zMvH;&E{%jpRVz(FCfN-t19hD56J-n_3(Vn=Y%R9tJN-OU_j4vMz}LuLW$bMdpn)Md z@`>lInO+CU(;{d&IMH$82>d0R-<)zO)}~!mc@I7A#c^ z+qtD)Z-t}c_6ie&>V+&DE<*3Un4<|+lK&kMevk3uuV3tk-f=2^IMAUO(Q<@on*S{m ztq9eKF_C3N_<`ZT~B1BQNLC*Y1Ln=vl0)9HwnmW2q zF(48Iy{N{k3u!2QN;mwJ%gng5;GY$FX>l$4z^fzNclHUZMl`OY-El_HSbmVol#YnX zg`=`cIi;ja7S`XJ1t;6730U(zu8z{@lP2nktAh!orxH!p9Omh&{u{=>TCJWn>o4O=EKySGJU;2ieT(9C$xYhE+~1lTgA3DZ zr0oil-4Kptyhy!Qp4f0{k6nE;y?Rq{p-OE!bd$CDN%(i;HOF1uQ{i;LVb#W?->&zl z0m~hv_l5T|KJ@o1ed;Kx5yd^_OGPr;c9P00#cqO&xZfnR&X1JfqW39LBWAT~bpFK- zi*GW4z6zcSlHdroVf+wchvEzBLvOui`7VkhzBtq;Z+y~Xm)F<(mgneQuydcBuUL#@ z!Hj;WKqI?YONpKNr28ee$!Ce|U8gg-qeR^gQ9pi1VSxIgO4XikYGE$=?7`=1j;BB5 zV%uN?C2Y9WLe}IS@gtdZLrrElr`&x}Itv>m=O(%BCTZL~x}0dz34|^@lQeBgytT?m z^~}ErvcuMw6;Z;Gjc^I0!B-2O#en@HK+i~?y#zlmc|uNU^IxF&Z-aSmwqywMY6q-CJ;o>U>!V4 zPXmUb`86RWO}tZmMm{UdGTDz+|N2NPtM4UIeW*^fOq}qMwl;py(9i%qS?rcYo(o3F z)l=EmZZU$srQpi>{#;ppft5L)Q_}AYChSbTb5au^y^h{z_Zn8E2!kFItlE{r{3y$y z;LZXZqlqTm>a~Rlf7f7cG1C0l2N4OWntRVp8sJZZ{QH{{4epT;6H2+~pHw;n>vJ4r zn+o%!kavdh`WZo36yvyD46hRHUU#JuIoADu`oL0w!R)Cbv!?>XBg&TEarp%qF)7!B zBW0i7PGEMxwI8q#vD5ss&}eN{YAC%0+P~zuyc`oOSc}@uT$HEv*)uI+@Af-vkR|1> zeb#y`KquJ_zDH}?TaT5gruy+~OHmro2W_*KDm4B0U&|OjDu1YLG6NxFj>$DF_&6&e z76yTXb^bc6w*5txxqSzT56|G#nwBvxRku=7v(M1q`cB<(`D= zrHXNjAy5&ktzYXk%zhfZmGz+cFov>v@l$a*G0zY~mj2m_@_$waIlvcC=yzN;)8UII z_$)!afW-(SPO9(VW^f;+wHYMKSm9BZY!>fecA`w62Nd1obXGh6A7V}Z>L=ev^h7{G z#bRd%|8ad9+iob~#ETau^nKf?Uor`_?(xy)6F)jqvi^8eY%B4a<>)DSeow? zXPQwx|Bq4Li&U7Xd*zp9(*=3wS-L`^+o*nycB-XpMAY{yMP+nful>a5B<}V$#{evSQ z*>ENE5kVL*l#Y3eHm4-1jrMpu$3WsY?PwvopFc(AuP)^Ut4VPCo~+Sze6$rDvI0g+ z_q{~>!Gx;{EGb{Ce_Ot9oRWB#abNo9?g;5s+eqNu61`$YlH`FoY!j_-SDI9r``N4P zgZG^v6e)+N*Xll`Kuig|nbkHXefvOm!>kILXM%rB+A!AeJ2d|HAhy-tW`a}*7gzt6 zLhhdM3(izYz@<$kLcc62yxcJuI-1-F2@z{78L|yZ(tqyPxLPrPsItYHYE3WC@?yXG zKL)S5m*~PD9453C-Q>YHKT*DpdaDTmY+xE5m@vGY&_sXkstMO?B zhb&F@2+9UgEN!PNyib+OR;A(K zMUzRrmz3UQ3V&|rbLXt+Y_WnXKI;GAhG?A*GLkyyee&gpwYBXnZMpxWUjF@d`6@q_ z)U)d0v#^2P+UbU?Yt7f(xgnnNJD?)G%}){}L6{RIXF*&&xL@0q$EWT~v^Tn(gYm}b zqB+d9J8f}uL6l9ogH`E`@zR+`fr+$!+Xs_LbZ+TUX~~;&(FP`=Xn&Wxa(r-iXehei}TaI*stU0Pq2Rpv;Nk#Cjd_B?sb zxYtYSl&8rw27+h2VH)9EfmNg*6U~&)o<-h3N|q{#Zzs-!RSgy5057hp(Kp4(sX=`u zf*oNWhNEA$HXvQ~Vrj$6;(67&J+3ZBLim-$cXt}XHoQrRD#3?hghXyNt<1!6lX<_1 zCA>wR>%3u3iRiSo3u&{sitNx*f*4p$8^B(yc<7pL?KoT6?^*m|G2wXIji;m0@x>Ba zSatdLiS9*f0>!4zlccjSB$w!ZLwbyg#1Hg14|oRtl`^egE?!e|2kQY|O5uvMIJ?7d z!O~X->fMs3G9T+!kC*jiQOL}Zd{eSw}Y=(a|uyjH%@JMy&6+pLa|hkyT=> zlJsN2cbNq7{dW2T$8FRYBBrpU83+&Xv$R&mfd;dCy$RlU2jJojZhj_T?!PK;Hcd}P z{B@E$@o*zA53$=;ReiyH=Krb;)I8Eo1$YkyKfM{LP zcqM>o)8swZc>l+ZVV}Ry>YM83&d`iWLYehr9ojDp-=2Pp0HC!It*T>#8=iOv` z%rqiREaEZ~KhzIAFsV8U_X@_-Wjbl!T}=O5BJFmN1Kn9Jd^H@qmRTRt)q-8bh&}{H z!?1)<<99ZjJCA8X_ZG$;&+w%heV1-h+k4NS)qcuB{qxntqJ(NzOQkjgvQs*3yss z-icyzrA^$%uZ66tD(SEX3_RMlp6ao}eMFF%m{z(?5t8@&He`%bgS6GUoh=asTB>;4 zL-04bp@K?GWvc@*v^M+7!PLW&7}DP;Z=8dl7mpcyVM6^v8bZ3eQ0!3Co~ye(a7$CJ zVTsYVRK`VXsF*4ep&(F%&wJZu`=c@G;@{|`W3C~0AROUk97i~+HCKO1VP(qzaS@t| z5L+wuTUzWvX%22L5d+k%m*+vXCd8t>e&<{TKKNk&cVv@0rT;Bes3A>?rZ7LCF-fHM zLsFZZSj*A)MB19ngo)*E`ox@<3n=noK(NXB%iiQ&tLCJe-^9{@MLR~bxzP#7egcE# z<1A*AP3|uu*Tau@9YXX{dr+RcgJ{g}_f$=~%K?^^S467(Rr7hv%;v zZ}vuPU{yBX(+?o4Rc06g~p>N>-tY05gdpnu-OoZ(X8*P3)HzknPm5vJ_0?$ffNT!9d>I1oV z|Houa9(>P3u)QnSDYBYZ@j|~y<)%|e3-Or$oOQ;ZHT({UI!3EBj|s+eM<#FI3HPqc zLoV-Xg9o}(uyV4~BubXlAWistz(SLF07pCs^)9bRJk-tDvC#2Fw~Nd~r4|F8e`-oTRhp%BH;9hSd{S~L&-f67u9Stnp({4(2;f%=JGe9}ag#;INIu*EIrI&^a4UsD ze%Tx0gA{_3s=aOc<7uW~$?`yVvQlDS&Crv?Yw#Bv4$J7mg;!_%PfczqE>={I=^vOn z`{i4dc61J9XU2>x_}Kkj$~Vha41U%V4=Cp{fb8j*8H?YbV-YJ<|8pgMGKPi)Oe(6I zOtqUEJ0c>^Aipz~t^99%IrzC%7ivtLDCst0Lyi}9MRSpi|dQ5Si^d^LgW z6GEH0*S3@39Dx6)z?q0I{f-ekuP*u^aI8Ius>VJ_bf_(i2H8pzEw|Zn?Bonm-B+zi ziQNym%uSr%eiMH)Cpz44s>-O1^@9|01}~Q-U95%WcV|F{B2q;R5zne(#Is{eTsuUv zF8FC`c#XKV1qXJ;Yd+ZTg|Kce*s#h7F!oEWfl z54Q;NxL{C`kk<<#nlevnpUK*gURm!cDc|ypmGlqLsyK2jBbeD$vJuv{rbLM=wCZEQdIW!b`rs0lo}O7FzV_QMo*>LE7g z6Lko`)no&mQt7^^IiH_69Q(KFrs2X~w$l5`Q^7hZt*AwtItg4+hR?pmJ4{r2!yYZ5 z=-ZH$PdPk2s9>#e;Ki!K9Ub<)UmNw%SEsoe&MF(jv?shwHw5UMI;*zBMWGH+mMN@m z^hfc^e4KU*=hUIFKCec>B^jNmUo3!yHUX5Fyio1Oqu9M24ibgva7%kRLo z+YdrD*+ZDsAWcrtJW_0sJgz$41rx@+@$ncnd8u#LFV1@O&$4Yl?z5 z=isp{RO34-2p^9q#){}0DXQ8Gp^5p{J;hgVLyTg*Dj)OiJPxWA9NQt?A=R}pRJ?_* zjq$_{R)6oi3_af6eYUjLT%&qMcGgj9Ie;eC45)sDUvPLEA#GxGq(Y_iM96xatj&M?n&zCCH!gj%w zlbL_YH#-U$#uzfY49(r)$nKDUakThPK+M)@GeO}}F`j61h0iGmu-OiqkX)*Ruv)9> zI8eGeUy{hjGIjZM|Li2YXgv3=sJ_l;%q=mgp6nC!nW}_Iv79 zG-&==SSi@~4vyG;L=@|uMe3Sleuo8_2keLTPS!>wygLzr8T^v|_# z@8$L>`_7qN^Rx9kgK~N1wab2Lk8$HFPWCD19i*;p@jo1|+IfH?#Xd(K!~oxkjp6irf%i8(|Ips(h)~0&n8tdMW?WkDezd`3uX666mcuxwZmMy z@HM7OaUV6+nbN~y*3boBV_`wYaV7_R{rrn8e)JGN-cYc{-kz3?(+^qCT8SsR?oUZA ze4(@t#_ogL_XF>D)C2SM1`c#NEWNNEn9=R*NW&6M798+A*Z5fZddk#0bF%7VE`uPM zBoJma^IBvlh?>+?F)n;r-l9q|O=D*?Q>A%GC1jeVLoFmU#XFJHwr%E`T~qH{P3?%I z`*9ni-iDlqDtm)R#3vOO3A@pU;)GSCm@JZDu?@lh3 ziD0|5Fwtv8Z)qSStjt`$dX^@u)$fr~>j0~@xA?KUoS5F=#PsJDR{@H_)sbVZ zv9h+r7`L29aOE|!VHt@s-e!`sqZ+>`%32=1FpGRsxEt-c^UuO^EI%C+^RdV~nHE?) z`R9uM7^ZJ!KSxfz>nE+xP|Rf7_QSfaQ{(*oioLcfVM0;Ku= z`pnQ+uSCG9w^dmva+>H5KS!q(5of}S|5{pyWAA!nOuLG2t-(MbLfsnHu}<_LOC`vkn6l_79ZGYY7F&k?K3vO1ZXsM1(}a8$ zY2hC*!Pa%oRtGihm#R2YRu&TwY0%DgT_GFL{8CX!?^om@?Je}nRvd>? z>!oT2^48un7Mu*2W74a;I?J3EQ<^RF@r;*j-H>9FZs?6gxW?)+H|rMTo+n5B+(91k z=xllcrw!JJ+;n9gYi=M+&XW(aJfA1|oVl{A#(C;6*;sV-=omW6)Rs<;Cb_uv2kj{) zwLy>7WGL<6o}_4%Pr_DpvlUD!<*DfHW{x-I{P4%YqtgoaNnrShO`!FtD+BC?tXsO5 zn2Es9s73{Gb3c&YiDROqSclhIHqw;{qKM#DRh7`ADmL|*EM?~XOD27AlS;=-pG!G| zlZn=nimZneaBpG_GQN%Y!J6+4?I^4kS179dow9y>Ujn^kHo9s$a*s=&`NoDe-IeK> zYL5pAVy_R$8j44dtD}O}G)Q&7fIO;usXgvVJ+1k)lWUR=Vf#v5jY(UUpq%Z%-#cX0 zdm+h{-M4)ZzA&%m4Kt`X`g)HA3(cYT(9=Xk8{6GP$V@))WoAw9bnw0^be$^lxev@2 zFZhK)7--{Kjs|Xl)V%o`x~zQKQPY#T`b~0%EnK%hiAj>n66K@m$ZZ zR37G)6CI^8Hx~|G9>S?ZvSQW8xU+~^e-o~Sspx(lUC8zhQ zPx>xtpRSxJh{d^gdn|mYRZK4xy97{VhD9C=mPJJ#@ao5pyQ$(n47+Zs!PwILIvy%K z%NYxBck4U!@K|o(HD`hD#w&oz<0!gBk@}A4qi2&8HQQf?H8{&nN&&`RHP8E2CqAv;QT??~}C_k4)X_$RG+9$nPyDKS4I~_Y? zNf9Eo=2|1OJoWw0m4Oe!!pHS@7JI;%V`x{2;m@VXE-Z}If{UBCki#dJ_sH^khtW&b z>D;GIJkw5&jv^3G;fPeFpYf#ee#Lkx1@mD=OzbYA->-HOp~<#B@!X&gBeH90!n=(& zPHFEEyLx)Y?`)`t6N!wV@dT=q%1foRXRXZyIa~Bq=V_jyP(_eWF`i!8`TMEH)VB!d zmBnz`$_=czY$@^ajef6Frb@_? z|9+|aHR_C4-fe{^0+5Poj10NVnq37rrvACoLAS!ciF_?)6zkp1GfCMYUx8TUPvz~C z7fO5U4E#OT6Ix0`^|wVq_m=3H;8`V4RLQeQjh;^c5w8apCJ)M>d~6I!2Ho3BRyHHS zn*$b~qOZzT+4yKS^_lA@ONpCb4qy8W6X!>E1DwqaOg;HUF&yP0Q8JC0m`^E`M$E<1#(jr(NK(05}L5Y4v`y3z!>VCSx3hF<1$LgyHD zLF3Ir14wTp@A}L#2r*Q{Gp_=oT>;wHz!?~uGf??Y{{V-pLA4OmB}v;ywVRP%jidBN zZ|NyN4u`I+ygy@mC^_bhSK)T3QSe{OPPB)xX!9x|<>DQ87yUF$3y~@S2)hxQuoYqk zuv!)WE=N`q$j{+41jak%u&r$vYihQY&6|KuR>ZI8RTg9dML%+4)kWxEk=}ZnxD=WO zrnfzG8*43)Muvo-4I-QTTWEMl&p5+d*`iP~)g01Jw)pEozG7M>MJtvI(;g7^;lo=( zDX~s+Ra2EhG%E3e=@t$aQ-zS~B!jM?nvANFxZnSp%MbBVC}y&44`o>Tq~a7Dq*rR?n`czUNb~7qn`U^M(D~kK zc%OKH6QMqX=%}U{u~<1PR_~&aw^h_`m~+R-Jm2TK{-G%;tVlUABRhF?i!Rbjw7jhx z>)^b7r^auV9inlEE&0!tgblbtJa39NP@=4bgD-4YA?NQ@gm*C`Uc0}w+mxCVeh0I~ z%gI19bORcIk?HLmHc{HjEh{4xt?-c6cseu0`vTA{3>0w0jpHzrqsS#?O)=lTuti?| z_P#D4bc2t>*f8&t(EWcTjRv5Alx|J$|5DUhqwat!dQXYAY#7bipoD_hW+ITzUV~KRo1zKUZibbaeN$4W(W@ z_%c?_?q5)9x;XWb=|JOO(!9L0TN$yX1*gGDIQK{!z@n5`CF+NduYZn^wJw;>l|g}& zm{W)4P$BNfFVqb_#X9qSECp5kzQUxcCbMnpchODs2m{*vwYclU*War9 zuF&;SSsChms_D_oCx_EQG|R7!xzMWZwyPctfOX=lcC3Y&^n-b};h6LsVRqg+-EsL{g62FZL@*CvPI-K8#HU`i*ol;)r%;K?7H*3 z6DV{zN|3*wT7TpmV94XrY)pgc6A5t0m zDCM(BesuV&+wI&}Ixinh)(ulXOQ~+NR^1=6@@$Q2CFNQCgh)271JyGuJbyOMTe z@6T;^HoUM~q;PVPsnwsZpA^dC{%^5$SmIPC^RD_WM^WI|>~1t;osjEm_o&d4QS7=Fn#xIPe+NX_YFV z$*O$ZeK{F+Qb;JraNfDOXZ6+yow;xDo}MqVvkm7;g9T_W$h7N^M-Ezxo!zLCGL!Xy zb%G-hF4*p19MAJGc!LTpiht(KtT4KB5j#hlVfKEUSy44%SvTX9w6ub8+Wl%y+ZTv( z%24?w+CSr+UuFAvPvX!|e^P&C2F}oAafl^gA_4jmV11Z<` zC|XU93u zofgGCj14s+V63$IgX)Rh>N>@2QW`HmJim?4?C zloeKD%-CX~CVSpuon1=&%R})~TdPkvE0rCHKB3ohv1t=A>g93J-T1Axpt;E^pOnCY zc3weWQm#+9&lN$6OY}>}Q-uN7*qR}2yeLf>lLCzWMH8G)@?1y1&pab|c30xL&uaGB zeS?mrt*iqPJ~^@S5{92P2&GM{rfdx}W9}3kw|**1^ox4=#psm|?p2}z;h3lDxb3%( z+AI1^X`Y74QO5Y^GqgJsVR@YwJKIb-G_ByV^tQE`;Z8R|Ynzr;F5>Sj-&s>!#`;5! zN$*}6&CFwPLWAGhP0Ze;C!gAOvau%;->)s&=oDWZkuPaSyGpj--SzAo&fHeCNFSc* z9_xL%r}>MH#W55+s6Eu5A$A_}dQD?z5KvEaE43oUv}6u#9zJz*NtK>{wguO?w3y;E zwbju{p*}mX{5mR_U-9`=CS>LEFz@~)3lHJ5beS6x8K^wFZx&+eA`Sb527Umot1Ks{ z$~#B54fl_+UA`T!tlIvjDk-^3c{oMz!?6M{6li!dbYbP7*6R1Db%f0i;cX8A&+0fg zEz38A$_~$t6%|`aud;BT?HF-X>pZvB(`%jO=@8qUqh3Oc%Dj`mDbxkQyVLd3Rcn3# zYb2F7$83@Lbaub!fGRfQRx;%=UySoU}T@_9DK2Ov=PkFL-%REt-0G$5PN3e;?Dze=?s(EoS;ANv^XWZBNgL}7bm7ERpQk$FKqPejuLaOuB#`V6T1b8QSc#o-NexdobYG1yC;ivUC*poZ0Q^M<%Dh2_pwmjyKy~rO0u%8 zS6p5V?3Fv&B1X3L5FqiP8( zc2+xvZIc#~u!U?-z6EK0?UfU9#?bmWUsLOp!fSzVCbv`9Y>rfoA)YmBNjM@V-I{%4 z@7$&*H;*{PUU#A(^q}84fb+uH#07a z7DIeky~+yK22a9}as)EsoMuppy~~%Le7=3%)8f5VCD%(f(N&-Sc1rslIpVW^LC6iO zn_5F=jRw7XWL@Q$J2Um&B`)Rk z7+jncYl_xGxqHs{yhc~=2{jihIlQkGuEWJ;--$lkUTKcb2EOe52y+}~c_)N&4|dA{?L<#5Q> zre4%&?RlwjM%?GuGbJz!4@bl-HJ3UvGNC_EC{hE4BXZ!iHSy zouX&KD~|D(Qi8vSs+3oLE;{$^rwg@1@Q{PE!Opsqox8!->puX?uT`gWo5JR-t}ZA# zD6T0u_pY+ZF<#-tgNQF;Yd@BK@7nsI?zW#}p@Y1+ikdhoFw>{H(V{@#IPH>uMn?6$R8Qo~Of zl!3Jr3kQv>uoS&>KXo6ut@G9eTy_b=l9I2Rmwnrw=b30UDZeGTK1mQYb{IE%UW2aB z8VY{Ra1!UHE@0ejRCX!T(9vrSvvk8(ld`@x+StzsryG;11rB^c?msGM!!1 znH#pQ$G~{q&N<^`|K4oxW60~9thST{)(tw99Y|=h(wq`ixfb`hEA92hmtXr9v{uJ= zHc+EvJ5$z0Nhy?t348_}HA_p+m|E9HN-JGD^}gf{v)Ey$Lx^RB-itjkB2zv0gd6bN zi+t5j*U%!Bq#q1VD%-UtdRtd2zv~@qk_hb328oKVUs`=Qw9SY=bDtSVx-0yrv zNS!vAQ^v5f?a@6J?aRw%=w$8B`hRyJv;dA>89#c4Ws)hurx+X9df7ss4t&U$CJ}+AW03 z4}k6Uz`yrApym8o!nD2UQ{WW`)ag`m&ApiMb9$&VEB9~MqV&mjgp@fxnR4i4likb; zjHje)^bsPV=YoiXwrx(so}Sced~_>MLt|tM~wzlsy!c9u2QzoMJHIz!l(NP z-d!T|@yr29tMIZLCmvM`f}s6r47Y9Na~In^pA;^MvCFDc1N1(BPu^e9IW1*4_R&oD zeVeeDd2vhgfSc2A)(+Nz0sS#<>$@{# zbnDVjaYu~78qDOW(8FNk#$y6+i`JU`0IoJJKV#ic@ws^)!87nh_1Vq_R9#c(sKQ2j zzTD`#J(k8;_u%Rl>ETZH)~sHFS3=g;%=Fut>AI29M^i>L&`If^)&;FVy{v3}&$k)N z3Z+qbt(cP55oCw>imbMg3~19*+DhM`Cad{5C&efk-+O6^9!-~Mfd}}?uHkVv^h`$9 z-aC<@))8i?q?mWZB5KXj{NgovL!++sV1JXUM=9E%-&sBb+qKJ#@m}`EBkx}ZCl-iZQ*jb_q~PT% zlvvPLSo(2|%`h{>)$rns#MIGwxwRGh2vPCWAyS*g8Mrc}j7U zw@ITk*Hx|qlPa9lRTl)&&c+E5iB7vD`;Q6jKoKpbjuy=?PqKIIayk$=U7{aE-*@1l zM{Yg7me6LiFgx1C?+Cpb!#HZV-yFIcDFBZ;7#;d}o3+N5d>csS^qy(Rk z8Dk}ATVCSM$pYuQ4vJ6xuSgWlwDFr9gft~`m8&fyI(;1b8=7M>PRhuARE(Be!>VNO z-OPsc2Y0e&EQ@AZWHvwfUe|86@zG$o_2~@}RU(J$BO+(bdgcrdi!%;o-6+*5ej8vl7t>ivgkOnZ zRhv)E$aHUYyH)Ku5lW3Pp1#1Vu9u$kOw{#jDgxD#n?CfbMg9O1Q(h*2v`SrJv|{Yx z(WjAp3-8DJe1enrMjR2iIdZVt#kWNTS0&Ya+}ZStoZ&Xjvu zbtXL%+Ld3%vkrPWmTL+^E+h5d793uK$Hvz0b=1tK)QUqYd5o!;%`A)myQY6QAZ!j>@*!Za7-Gkb0Kb=TE=yf7J&kdB4Z#tLuSH-w02-by}rB z=-RCP!}t1T?}&z*i?_CCXPwF}HXG0&1j%Z9gm_k8|JwL9YzwNxv(w_+zVv7pQR0yD zJ#)t_HT=*$WtJ>`a;2$)TnstM!co zns0BObvAijrg3B1x7pV)L7TxtDUXyDg$tuM-A|I1^XBie$p9%jwK`@m2?9<~sl_VPlnV*5?g6{2Fq164jSGovD8oghsoUq_o^(>_$3eQB7{yhqmh$&j zhO}Q*sXA^DH>V=<17PJP4(+>myG;eh>N(85j5rgx<2#i zbn2V;=R{n#@~<8s4xLlwbkGmECr+)x;6Aj5#ccCJqkMQ()($b@+eeC3d%ew=FJa%M(TT2wcW(qUD9ZYd@RD=?aDH6fSHOH6 zb+qVq&fb$r4XENn2QG3-flp@IPP1KEYN^F-cjF^t)R8 zO6)GuNuQnaR&&lMMk3>#Qi056+Bp0GtcusP^ZRR4581It$+kN+F&1xKhfmjbfHqmS z%x@mW8-`K5HydF=}_&qa6EdoJ<(9Yd~*E}o;{WE?pt0`wJr;XCZl)zl&+Ckjb z!Qd24tr_FZ%CS7Pn_9#V{m1;eCY+8ZOnxt#{W*?EwsqB(f0dS;nz6hyc^9bwN=bPV zsoN**rQG#&MOWx_a`N8Zjho=C1+5^iv7-XtMZxG5{Y)X$8)3e|gKF7uX^-7aaWsRt zCGwt5ZQFJE_{PjFP5u&Qeu*lR=QE#vThIKm2hEgCPn>kjy0{|URb_2kr~aGFXRgQ8 zsct8?JnqmArw(i`)TTVsFi=PrYuj{33v*1tU+egxZnJ%_*O{Ppmj>8O9iKWr3I8mI zzkYw^z+nO-{?K~%`U27OSMvy=O8(6wlIvM8@+7z$<o-9;)ts#DP+Em{B+KfiMglv4hfzSjk*i#{+h>&hWJ!7TyK$KR$0k?bB zBvWXdaMR4RZFST1Qb#Yf=)fH5y@d)&^Im$SFGE;#6?-D2r8UjaXrl>ckn^^&w_13R zi5n612X#DfbsV1&e%Z}{ItHiV@Z2cP4*c({)<(_ASeR6MqgUVXO4; z%vIU-mN$>d%_Tu)zQYhrYpW#pv}6B1x{*D!i%j;$thl z>l$S`OK&JLG9vj+m6E zf=EynwNl!Fr>4o8QtZG^*K^kk#AhPi__vjHAitZc;i!T$llLSvPZUEbwf8jZn+nmC zGah@44Uk6yr)tVxes-++;|{&A+i-^CvJ z=>tbLH_oReYi`xK-|m*H)MbCE*5*Lu=FGJ(BW6PS-gmaq-nf?yHGb%SX(UYB_C=;W zvG5FbNYeXB)5+}F(3ImQavWbhb`!(J>Bd^IcyU@<*}8SfExyTyX`Jw`7T;JOU$?Zi zKKZ7UgrPLz#6XI*NowffGt~LyX$y{`xFKoQL>ygUk%t|sm$sSNT(Y$8Tox^N>CBgR zFZ4wR_38mL3E~)4N!4vvekr`03ou{I!J*$L@fc0vw5&Kui;?1HF1=R_`^ zr;TgwPc4jpou&R+VEmG*YkT_9^OOe9$hQg+d83WD-b9$*n|Ydv_UO?t<;Jw#F@NEU|uZwNvkgT<4JSv!a5zioTUhpVJ@S6-6(-7&n_DNe zcw$N_cMscFkyksTf!VyPGPZWpz=ev-v+d)f(u$bsE6>4XHSU3D0wIMtTFf<}8+M4K zUygSoUcC?5Mjj8|4DZFvzkFT(^&EUo;Ma*$bp|N=3NeOlxQ0Yi{QVsJnGKRnub_f; z8MBd+4at*lC2y*&iqz51Qmpk&dNCHb8)Fk5JQtiAoyJt{oYXjw)qU1zL5F(dw0w14 z9u;y@+AW-X#%kb{q?%}^_)zc@%~RqvD?K~kIXZE09(zUY3+QRl^Lt$b^X1>VhKBS_ z+HZFnrmidhe%PBG$e*ziQyrAjtO-e?iZ_Lgh1yiwF7ybUp=F-%UCVMEnI(8vT1-rl-CoL72BLMQX|mc{{}?&1k=xxsDGjH)`FO4rM^cyM3{7 zS|z(2n>gJ@2@_Oy|D*h|gsh5wRNLZz_r7G*)7PoV6YLCTmzvH=lSC`21CbPWf?Z<28iq;Pq9mDSo^yh|IzxGUKAGV;)(rcF7)V zvNpl(Z2WBI2p`zyS9E3mHieaT_2$9c19!MDA{uYBZ=EjkHQ#C`@KkB<{&3e+Pm5`3 zb(LiPL#%bYOb$a^y1#tLK=tT1_FYx-oZ`NhVG2OvX7R(@R=ZYW)SgG}$5l87QbzC& zESs$%6BQfgr6g88*E(IzU;DQ!Irp_nxOtXm4t#vhT<^=T*S>7g{C=W)%m3#@$&2eR zjt@llkJ$%OhO*b(x4gFzXKOhVdqAs1L9KC`+@ZL3<7AV&k)XD9Szl;af4{+I@%288 zRGM#ROGbvBe7SR)^YH^YIa%>$36@_nRLgyBGFMWLG4>N%CLPviUGRop?k_x#`_}SU zX+Rmt)zZ&V7S#^UrIuu-^WwPcGUl6i9}n)!9?=_EXWzWmaHm}`X;aDYG%Hy()QBK6 z9kVLG#8IhIZLnU&UV32Cl?T5pT0{T=AOQjRh0<6y1pecSqp)Asy)hjH72!huKpaIA zi|ZRe1C0U@{B@aLgg1_&h$g3Gk%(K#U?+ylR0Wa2C=S9qD@$*H#KKa*II=fhm;&+{ zHGGET*Bn98P|!AL?+o2&z^l8ey-U+7&l~~^Rcj0E{{amr0sEZs2DOmB^K1}{p&@eO zy(=u4Y>X63HW(EM62SuH#UK}pp<^i`Ju*6RXaI)*aWp{$UB3?l$N+e_VN3uOCu>1x-2bS~xg-$_bRPbNg0g^m(bBuDW zlYLTUar~$^+`kk6fpk)CR6t?Tpp3Z|6Jo?sigR{>ECdSjKhtPc;Y-rQ3g7{}2zI}! zQ~@e!lp%TPr0b_0tkLGF*VGD|?uADOK5A5f1EjR&R?CZSsDMyjwNeoq_| z&4@tKxt)qQ87U53g6W0=d=a$}7Wo9gIZGgs7(#k^d6N;#7HCSZvGuu)C86TTBs_%2 zkx^0ufk?K!z~!eZ5AT&%$_sb|YJj@h&e{6Of>L~|3Ky!*O3|ACKnJ?FydlN|>=?st zU#qihsD?}=b<;)>@$3|QoV%!z9SD%|1^ALUcS$ZNQjRKalm+u3K->m}qo9yTfK3Ki z1t>)_C5az=V^5$a#H(dImZ%Kr*08IQmuY4T){gin4%4w>)PIRQ$OcyMxTs<>5~)h; zYZ83Rfg-vEB?b&(?FJwaTSz4~Rd~WWPDZf`sU?2*&XO4{G$=1J6GsAJ3lc{`VJUbf z0s}Ns&afTaw4D2h47)YGwP_xmOi1n-DJQkUY*e}287l7%{x>=c#eG+Uz>#p~cmTD9 zUpsh&kU|I-D`isHq6>@eP>nnH;nJ4zZ}55D?(~{nZ@9hS;JwAWOAGvWb^LF4`7!TN zI0ywm3MjIDDM!ZfMsv_b+nxp!>+Tw52GL)pxcxXLF+qV)2vrsSTi@XpZee_Y+s5Ub zC!FfuC0JH*C-$(d?Vw&j!5D_ed2s||c2`Ya@%-98zds?#{=a-6&=&==gi$OsnlK_No0ZcM*0e1G=doH% z!xFRc5d~vweMU*G;_kF5-*N8W=l~$BY!nwI0?5wCk$}eY@szCfRe2iwcjTA;PhsGX zCgcBz{N61rNC`^<*%%N6sDu_DQwFz(_r62Xd6?~{di-qdt9pu$girzH>_Sv6JLn&E z;ba^FfV3V-Qr zA?^=!Hl+~@fk;^Hgy~X{YoYS$h3leE#Tf>3h`zLyC9@I;pX4=JRB)7Tl1uwHIzY;S zR=pumP=IQ>xqS&}OF74wWz8^R{7`U@X2K{`kZoVihVWcCPEvp)e^ zua#Bi<8{}CYU#_;f0IwXvQH0ZTr4iQ)vypE4!+xP_xIcN*XjVO9BmL)nxd7UQjVh_ zs`4$R&V4<839XIv6aN#3v%gPr;!)US5f)kvC$EJ~Q5sY%PtQL=C@i$)UoU7KXNf98 zscIE`hGEfkEbkXXc);LS1i|PBguMl>CWEYD#-N(&Fap0Sc~!So{PZ+cCk2fCdU4{A z!tI&)9^r};|AYE}kAay0fFl9eMsK97pbq72nqPkaXhGOq1@(R3t0Gjx3&pt6Dhi_r z19Sp>hnFwu?@m7>l&Mh;fC2R*l0oZksyqpgOV(u%Vfn#FJoO%$Kq|4<>tg4>|DW!V zJGdW0vtci^5fI{eGjV(QVb`0@3utGmr+&*FyMn51Je!zECpHI_FZSyFLZ{yH8u^KC z@nO6V=vE(BY!U*UZBs{3Owr^rdRlkTm+r8v(*Lr6f0Zma&VdwhBpMq5U=jFQTOfCk zV5@ll0pmHi$?Vpe(~4^Zt3-WjYp5XKy$(#dN5LH-FV;1hhmE=@CgZc4 z9VD@}rxh6$aStEe94D0J!*<~xSpStYfxTfSdb#rz$@B^e&Xabco~rrcTKH*5?rDiA zntH6lEii5%#%!_nS9R8hn8~~I!k87p(bt|{HR>z}mqbWGsijt|i9ZrJwQ9Xb8kX6DedxBnibLDOcn%bT+KqwIQbBh$DFT z$YDURBsG{M32pS8OdNc(=XUuo^n~LL_bwg&&~*FIi_KgUldtyz;!E(#9Gm^gD(hcj z481-OZx1pq7sDys*^M6={+uG7?Qz?qdi zIZFC~v55Hz>!Y;!BY7f%>+bwzp?-!AM1JG^wL{OFQ z&@Hyb9gY6G!?WwZ*7sW;a=i_|WwYTk`tC@Y@n{l%SwrA~1{s8bP4VP^$lOo4%m=IB ze<3Mgl^wdgnZ`yVc$!(pGg_bdt3A=?$6sLx@}fJPpzm{x-yH$UDz@DM!CkuDu7_=9 zQ#7^rUhGUv7USy;zSj4a_sK!Th9}px(!Rpz6l9RH^9bWQZUxMV%0_r@2Y2@GA5dr) zoQa>K;s*eLg#d8o5SS1MpBX;>=6OF2BdCIOvlW3SxQh!A@*?%_=+fMBb3nGuBs_!N zZ4Iy`C)rl7dJcbykf#wjv_@N>pqmlhD;b1}YQFNJ30TfZ8~s7&`AKz_FRHQlSO6DdoUYgk5DU#Enw5Bd4@N~cv}7{{lrJnxIpUK9VQL@Pir~S8QG+%h z>ko7`q{o7*BQ`f;@BkW?F91tHS6OIr#Z2Nr+g&~ODdxaA<<~c>rP4#VI^9sk7q}aK z=Nyh?Dg2BhaCX5woj5J5KuH|l+B3XvmgA)2l5H0=1S>pCU}B1&xy6JN6x1PW+> zMgJ9#L*RDJ(13VoJ2V0rdj75MPjoy0)R{)1 zq--(f7*+nEDV{&8oXOsz!J*$l#X%tYcLDqP2SbAA^MC!o_aZK;*u$HM1c01)L{c1C zZvZ0lsVW0d1v!qjyG7O#K)TS`D^BQ)fN{TumcMlVvb6xSM*6@wJ5oAp_=GSRCwRV# zeXX0eg_Z@R{=?h(TSd4baC_s#U$T&7JPQM6lMn=qTF&4jkYo3CfT2hM*GO@#W${T_ z^kPJ*yq$;;?_X`F02o@%{Z0V4O-c^&0OJNQ6%=WM^dpRX0Sw%+C>#k7ui&r|U>ta9eTFS?a; zz8-ZJ6oUSR4glicuZ5FQ_`uM3`)qiOw(tfTk~efn1pqJ*1&@VCZZwL8fmbmAEE<4^ zQX~Z6$Z!b4GRbxaCRG8nARdW?OCq==K)Yai^5H!qhsw;tGX(%5R`d-&=;&j!=kip& z|3DY=s>>x%03@v{&6_K%d6NwsuO+Q{H3(u6F#ToGa974bme~*ps|MRe6VA!;3}5y` z*$QA*oDv;_8i42FBta$up@T-hec1aI_OTzst04ext3r71GIjt|&?-IH|R13myRCYXATP#&h{G4g8oo_!{50utepqhxPx>IezTqvcKUA zfq?ZD76c#>#aN4A76t{7sm!!q+9-p|Qe|VwOb=>B&bzC8D7X%)$o*Hx!$YHBUCevH zuo1(}!z1Y+OJ2XZ5}$+7<6j41J1V+tYYKn)HX(4Q!(Ip6>0Ey7w}m$iXGz;}e?s|3%%>jA^wY-WtK6ejafdJUcGf3E51DO=m zvc~_74V|%ydKelmbNWhooF#z8<8xrWgnb{ET_HRw$g!6|gV`7wI1qE_+P&gY29fWn z{Wl6f2?C%zcbt)I#TJGV2kz-9X9J8u7iC>s6TIpJvMD-ouxSAREC%&gbQbXD`zviE ztnLv0&GoBssxTXjfV?c zq5wNo4IY)mgvtk~hHPcn_yA3Guz*@SK!+FEYYTS$wE@54ae!j%-SI$2sZc5%Y$|tD zsF8tM;g_Jo-HJsouYa)Mp%cC!Jn}EB;~Jw&nE$KZs1BPU|7fiNqH!qH`_z7Mn;raKn3CF zIJ7z*@jpg)JfOO?@0LOmS(!Bl-9d;CV%P-?AP%=PXDc3nmF9mS6<$GjHt81!C>Wk2 zFo}bEeAQyN8UP4p$I;>82f!kf2?YT>v+Q#CU$Uw?jSO(qPJ6(MHcF-O|K$G92!IS3 z|H?P5f`^kl?-~>#hNJ`eAcw2^%t^~F$HC~NWh~gQg-5lxU(CP)0Xs%(m%9L->ntgt z0ISACwOQDJ%TwW0MoXapAa3tpc3HnC_UXPC$ud>);xB|!? zMsc)$8xcR(NkMuo458pL25u~jBBz9eQ79 z((6A_z}(R|CIDl>^o2H6Oy2%k824vI%uhOS4^RM+@>UiJkHxb`NwC7fF12W)ZK$Vm zl`Dk8n+qBisFim)CJs!Saj1kptN#&+!|25>d}X64;(#ifWatryOGQgHqmZ$SIm2)n zm_FGr=kC{af0X~#c9zlj4xQ-Ns#BaWRV|gs@>DN%$PtByu#f{i&wlbv?3Rwv!g@W0nsb zQMtu1>4$!?{+AFyqHl$a!nULY@CU!B%#|j?1{QDsbdhd~jDtyGz|&77*^XOsU~~$K zi9z9jWlvLZK$kGk$AZ-kkfRIYQ^+X!;F@L(po1`AiA=D`kb=K|4TU5$>R16U%YXRB zWm75!cm4(U*PR2z{l~)_5se~1T0B}P1;bNL`zLqS+UAy17)<{xzipuoYLI$&ywXE&3DLmLqkio&|%j3?n z-cum3q(?h zg+JR1SNZcofSB0v8j46il7WP{_QYD`N<-Wm$!^WwF12Od#*xFE(Y9==z;czNWwD}T z%MpsPd+8%TG9Fe5Rz%V3rRxOVx`J;J z@(ix*Uyy&Yz`}rD-@gf^2qn0YSk#(_w^3PxTiM=M_>3=WQvf!EXA6*Uj$=3xHyE}~ zq*GMnCk4t;LCyEl7!;cVh<{oA4$0+vvmw|%P`FsZM2a8nyfWLdIl5z}k1n_FR4p28dp z|AIGRk^vk776YK@)0QaZ9J_d~ISP*ivzcNQ7OK~}@VLH0Q6`{ut`Lg;0mKj&qsm9= z%YN|RE<6@<_sx<|9D*<*19URPqrnm+ZAL-s0Z#-f1>nYkadnet`1tq>aK#m_*-E$F zmnme${?8)f&$Z1)fbKnhQmbZ|A;m)gag0QEFxSNwem+WuJ&PpBK5Ml5`2sbX{f1iz z)%=YEm>fPX_y=&5t=UHwN5t+0z76a6AL0&@8f-cA$5Ah;M3m#-iwv1kvl70Ms*>%Q2{ z=TOT>|Mm2a0wnDD0lY%s(+;$55>&ai7VCc1#84f5)UwC*^juL&RZo48TdjNop)$poRG&L@MC|p z0-9pWyB1I=L6iXErvL!}LJX^*>x0)JXOXr#c^}wc(mz|>^gjLxyv+fPfJ<$`E^MA% z9N91|+#0Z_a|lY;^B!`RS4rJaB7Ew55;vzjzX5DYS&a!GtE8>ZyLgDh9WlB%4C%YF*G8N&u{#y*dArR z&|qPy5;>1`-A7h;mbY{I0!6+!*06Z{*rbO1vmLl6yRE;PzQ2;PQ}q3I!yU!^gKhiA zl$ytdTHAV~#m9D>j%I#3#Jl~u%|z+L_D|;opYK(vtm(U2*`DCisPMEeSA5~wY}jet zo#LHWIlJYj!W(28B&uzgPGS{0~k-EYhQRJS9qT4$Rv(Kv8Wjs0C4F9#=sb=fE{MR{`W7lDq(fs81 zWG#ef{j~&oy2YuuRKWZ=8D)X)d0@ zO4MtbRh$jf^jg_?{O!ki$uKW9KTL<)lz#k5f~CZe|Ni^F*iJo1-HWapCvF?xu&KPh z{??1*^;;seX|riUt?zKEc_V)M;<9Ms?!7d7V^&WmWu!!@sX$lV+H=abT&YN|+ z8?gZ&xnnmmyuAR;Y{L%MI-_l1?I5L1Ws(Xu+}WV+7g-c{I8p5i^R(3$_3|2( zvs3zlca_uJRivdXZFi|HNq^72Pp=J9D0MyIMC|-1?nr)333$-%Q4-Xra6apmP35Vl zzVwrBhB>A5X{Ml}-ksPN69-rw8@#?KXyCT%`zsCI&n`Ael++`Z(qGzK!PHy!n5EDf zVz)kdY4#faU%$+m=RGH!N_p1^{ls~h&lm3fCJnz-_&4heJ)En7`eSq7^OFX9zlOe- zmhP~AC+!qyA}4dre4S3@V-VDoyJQ-yDN@%iz{-Wgj4=n+`6Y%crr4CjZHV5fK1Mf4~0NR=f)4!&)?7;sD$6) zYZ|3c7G07zm0{oNsc>si{#5T}Go^SbabDQjztc`ES;h1p)UB zFI;`WXm?!2y}#kvoGB(;-{Tr?Z6!76+c1=J-RxP{?QW$Xz-d8Ym7>b7J28TL(=L33 z*G!0&)fMXbn}37%c6m}t$AVt=4AEGIWwA?h3eGWNx3|)U53gjdJgjo$i)^0wg+uj| zW-YkEt_Y&^=XZ1T3*WxCk8W8S+McyV?ly7iF_>zQ&@1*tDA~-mwKZvji_`haQA$Yi zDa;3p#hN)o&hxVYxe6FuiSp3t8~Z4gEXAqTl^{EI|pGmZQXZIGd4C z%{6QvUM}(fTQu>-(5D?)&xgWNeJtDpqYL)0Pf^D|7J&*@=_UKRNei1l&m|n$9(8y! zHg?`QI~qQAQ+h~Azv-MScweF7lz-?HaWFl)jnd~YXV{t$R00g@D^>I#O`v3H1z00P ztgRE1Zl|YTlvtbjHyArlLE}!pqKiRDpR@+!n*_V-V2lL8F z$YP7QYR+-Ns>*lu^#~#TG-!$A29(?8H@UH%< zzh_H_2W$T=`{W~ejhlx5%Kk;30n%qek^S9B1=CbQBg$*lba~xI%2Coo1Uxz;2V>^I1 zoYM8No41O5!8?^lQDIK_K;;LUQ$-ZcpOeGipuRsimz1}?RLT~uvB5;cyhh8$;C8rJ zwMU>}uvO%%2h}cfZ(37* zs}eUDd_JXsHpeFZzX-(hZl5`ED%rvQS-o=4zVzC;L;c>TjM{s5%JgG24$AyC!LGi< z%TQ`kNB73;PxrB;Cxy=wtrk87)f???VNA_>?jwuC%YO$09A{-yL;~T10J9WR4o2GX zkNLKB)n6@1>ryzUU7CaOt)jJ_dfr+eIId(7OQ@aT9F|AMT6lDRZm~nEzPBn8Jf9Ra zotWbj_wNjA z5}nlz8_yc|zluL~ju(VZCYL!~B{$F%j2UwtW#MysuFMY6cG^n#a?{n^l($w@1wV@1 zMz0cerfSs+^J)kL5T`Fsw z)^htwzRN<{-+$)I=9hDne&+rPm(wMv@mZOQ1;x1=8IuYkc@B1Mp(S?Rf%c#03{x{a z1#?@r#T%YB57O7}P`K^q*6;SU1+CSVTrXGYm#&uAowYj1`?{EJb6T zVcA9xoS{(L)8ibWMsurFic93Co?~q<=lk{{@2t=%&^HyDHP>P9D1OatfgPHY9mc(w z#3ojcolw=Oj;FOpw^X}$SmF%(xf!*LGP-;q-+J`-1VcX1mwoAz!3pm3I!WKK?7(6C z)#x+Q8t%A`d%G=XBO6rBy+@+z(Du?=A66gB!F-95u$(js$JM%-YwoBw-G~J3xSz~M2PCzv*U19wT3fv**%9i zM0dI=DWy1FIa@(V(-N*MGEg2GvY$!vb;tUb7+apWm~bhkPD`DsW@S{V*2Pb~;-mEH zph@Ql|E0>dIn*+AYO(clijDNvl?PASDHQXselClq%Jg%&Sf zph%D+p}2d{5(q9uf)#fPEkz5|{)ax#bI$wTG46+R$GGRi$M_ zb1qo^XEIy%%v_05&%6}R(&<@f$z#17E0^z*7qApp;rf)kP;kSazZd09G*e$pRi~uj zjg0Ltn*0l)5ciWQ%e(vmyIWp7UIBYBGe%h)sc`=n^-=NV64ULoWs4g@O1^y3qCkDs z`|)k(MX;jY;n>>Uqat4az0U%Z5e zZ#Vh$ZNyaA=bc%3qYQUe;E1lbZRB%}1wc0CeqxkY79v|nca z=Ko=IRqO9U*K63O5juL4fOsB<;DMTpyfG$<1T zgB9Z3;p;6G#qX1f%0o}i8&}gEuHplhd&5w$cW1RvlT9*67f1ENm^jqXlkgSSuen;7PL_9lPb(niPKNyW~$TXYR-2 z-#0Ib?qj=$57fLk^P8$qBrjHrBh%(TG+?wOwCXIAxK0#X6t2B7u%iuq|zmBbZAt2lbqy5%wxdj#aWMVC)uNBPx${n8T>8VrB~)8D2IEh-@h%gH7<&LDZQ-?jo~dg)X@w5;VxU$ zcuE+pszx&mGqg92CLB*pOpM8DZXoW>?%n7qxgA4`JDT%GUu4D=?(%{zORWQ8{pqKcjD#5}v|@nc@dXevOqYGAHe~b?Prtwewg?&0`Gl z-~J?C)EAC&*OnjRXMFUX$vns6AFQ$kt^2*`tEh`=S<#ngL|~q{uU9{*@YKUPhUU;Ph4XsSZ}8o(wDzHPz{r)LGq8uRXp4P60fB zQ`HvXFwSRBJyHXDF&{MiNokgjcVS|xQgJU4`T%aKy|CpuM=CtMw!vxZOvaFAXKss~ z)(*Q1n6@hAmr9y}QXK2lObnc_&q$8*&%@=CA;N`CiaWR_A>vofA8z@1O>ZfOCYElW zG)SD%M?K9n*L9Xa)rD_AZtlsc5F&-}$sbJ-Ee?MEbs+^?wB&C8#lN4l@BZrnMyn_7 zONEB+R2@Ty_`Iro9+e6Ro_PI?bef5%AziLQS8>~ae!+k5Q?T=VxAeP}*3+qqAkRlF zuIu@FU;g)*FVuzpJSSe7GE07WYyLs#{vr|kE>v!m!Y=MavKr1_fu&niJYA$in_3pK zj(9Q>rT`yJO)tvqZ%B%6ik5KWGJlVHwP$xf9$GjUJJBlFJCN+MNZ=>#D^YoHS$YL5 ze(Nvu4_0)3?IOZ&ENzi+_f(uyqv^;CZ{Ki?NEq_=RH`R8p&l6aVCvo^UphW{DQ1Tr z?op8*1CBIxdF7XX{+~r@wZ+D(jaLvxipLc1H!rv^fmYnVlk<$8g&B6b&#U!XFQhXK zrwAAI;>DW4ghMwiUVWiuR>%%yIhLHWc)}$pxjJQgq%G_=ebB8qsLN@w*9^PS{|Y#s z)BY;O;>5L**I6A*V=W#1EKPpG>L9%MjIlC0GlP>Gv zU|(U#;ZrEpaGL-f^hN5)B>6m7ZoycQStiVd;79S@r%|Wm4&mD%HIg9OFt1_aa&kO` z07d?=W3(#Qw;aGOk97z3-1hc%fdv&j=aP%&l7`zbr^gx-d;hV#MgPB8;QwW=!)TZt zf`P+4r0yKj685|tZc-Xi!h}(KN5Il&ZzV*%ah1WuQWGwBhYBgrlTh~B5Rr%F_~0Ho z4wMgsx}-g~KzpR*x_>5{EGHvwruB}ckLRUIrGbKZ4xNAq2@P8a=T$bB`5G@18y)UU zt}`ep2~tPus;c=>b58*8O(bGxjlHhfNrsV9JG~x1g+F9fm;yw@1}YHpV}p}ghF!f> zB?Nhad^zG-kc{?n$Ih&|L|+_g4Q6uiqr);8T5rW+JGV`D)RS($Vre?!d0b4?{Ay#9 z^VkZ+lA{wA2spQ94ldI^yzg;X+qvTf*OJP)RDV{L9_`SCv>2g6Y)mXjghq8&MMXAR zcREb5XFFakuI_nt`gkn2xR+sU4n|Vo6C?J)!cKbq%ZkshZn^X-7t)!1l9Q9~9dZ4{ zuk|aZYZuZPRc$Jh-xx|uE)uVluU6>qX{Nt7^WJh)lT2YWr8_ch)bj-mrz6D5+XM-) zgSvhk3~{w?eh~*TwW-m?I6Tjjc+cbxVGl2VR5(wAB+EuPCXngfThk&ezY>XjK=Kq| z1w%?o2w+)lI+r)lB8)F=gxmae=X@o5W9m_KLVu0lGN(E3`@av@qJwwNyPj z%CtH`l0<63UW~l9#uWDZ1CC@FwT0OYpXass(FMzU={I849IQB_8rNyL?*Q*?-pqJ* zn7<#}H)f1qL^)P9%vh@ZAZm|!{rt~;wxuth*oNS*UGv`Qm{vIQX^Ci*ygH@_B%l1e zlKA3aOn*M(wCXOEnbUX~tWiGOGXEe7$jERIeWVp^^$zP(3rl1e@{R4F1S2}$Hp^KZ7v1>8B>A-2=tQo5O zUZE-SB+8t+kU%rLys96|Wr0kpA;xMq%sa)x@A9hr_60Spd+#4C+Z$Bn(I?YZ*dd;&^?k z((;i|9*`Izyq;kEWZ+i`p(O{QB)m&f`LP1AX)d7(QxuI$)3hf{Q0JOGu4d}Fh?rE- zO7|D9pUi!OSGisH^`GHyO&|Wn82$(AKh%Jr+45$1%FX|+1#s=B&j)S{BpCDn$9&EZ zZx_`QFTRDGsY$zYc>+>aL7N*gCLJQ-E{4t(%VBw;h7 z#CIPP$-yd0UpeLo*k!g%Qs4kI!r$|x$ZiU4c}FU6ou!E(&YYdeL~~1s1T3{VYQMPG#X@_8l$Nt+(gu>>YAk!BEt=1={lpO0WLB9 zvBb0vqY8M@)P9Vb<2nfkJ&2`fO{nzpG>0I;BJTJV5Ith1qQxhhMQ;_uO_(B6Pp(4j zq83WbwS`W?lu$8(T-lqyqp3hl`ryw@>7@C6^3BZkXLE1IZC}?SniB>25Q%*MsmK3C z|A%#7)&3PF3jSLqaeVw<-rW4ROYMEn=0v^*_^(1D|3dZMk4!Qn8WR&b35*Y-`)D3w zzsESE5FlWyxS+D1-3d6;xoKPdjgd^iKw_`xHPLofo3m$zx$7~POH9T*+2Xi)xfPGA z5JFjU!5lhNL);@mt4Kd^9@0SBWb?3|uh5E6k3X41wuDd*f8r%r?GAj!9;53UnZXUO z$=8h8E8!n?%YaD=E&=9D@}u=i)dR*`HH-#Eg^^9-196N`>S+nyCjr`-z5}bN`Qy|! zXbhDDshcY&RZtv%(jE5J_~Iu*ID7CE3`QZgWNZ{nQmN*WAYl@cX&Y*)^uMpPv^qiG$EtLseXyD(zm%$jC^j?6;X&8>6S< z>`0^Pq6C$Z^196OCplxI&JI7C$?w?mp-R7h3NJRsMs!4g+3|8-pdi~jHB z|B^Me=WK9{9SUaus#ADQCrqk~DHxg5PSCS-2w~n@L{M`Myd4B=;&C}1H$SlO?Q-Z^ z7t5(i2@(x$s!_z_*T+xS{i&AgDT6Rs}MXFdLm6HsOmenLG*)E#3+6H+P=#7nYJDV)oYel%QXp7`9M#$$tesg$SJ!O8s?e}e+JG(bi_hmiiHqFore|~K@0BeH-!c(1720_zhF@y=q*#7OfUw&U`AOs5>c8qE(wsP`|v;dcAR?tjBgoT%BZ)x z421~Ozas&xilYb(FJ{%w9Z?M<^!@cx;FNEUFP1mH%k=(l5%*K96k7?aBklLQ9mfe7 z>(jrf40425Q`38jyOpwY)3D%*j$ zZ(UEk!Y${fK7Wdolm}hj9DGc;mZui!TbmQ^{eAKaKNw@yrhf-< zXPyQhacXK6t$BFur8)DwiDNr`HPCkUu`yTel6#%wJ_2)$%4qA4FAApaORsFlKo{4c3qNNp z<8SGOK40YiqC_sGxVKJvnm^Ilv=%87;92l`f%L@wawa--<6S&G&5 z@J3mdPDSb3l1ydaNQaHlaewKHzoT3(_*H3x#V_+z#;#?SkjGg8lP|0dFB(oLKJ<5b zA6D-{oGD|5@1~Wje1xs;j*+L7Gak>B#pJ=YMi=Ed((gkP-T0|8H7f_W%=rB_?=MOx zVR@+$HDd{_JITIKmJEW)K|o;^g@l#9&;2d* zF6HSHiKkvn7X}ki7x8n(hVRU0>u3sx9cGk8N^dy+@Y*-*Yw$};&IYRMED&GOzO_kO z3w~13IK6XLZ*`Z}!*u4K;v=@ToVhP4BA^QEUnTXRfWqrFduN8TR*=h#cwP zlxbkvRu#e3svHib0GC!h^<_eDTAYG&_`3|kS< z(uwQoLuk|Ctpk(1&8zkqXf89@=v6vnHzQ6}flRN?bqf&4 z^jaVaFZjqI#-^LZS9pA3JF~!(*JTvqQsD7I!u^YrrLq<3dl7Wt>XzBZ>BU>+H9+=+GSQed*Cb@~0 z46Bf}&DVJ;Q)zYi0WUmJ4)1Gc3a8rU;bv;SpR~;>_1-E@Ep^c zIB)mnU`)yTE|!0@^DFnRHBAIwC%D)I(>2xDL6CJ+cz9?Zb$n=y<+>Y-Y27B+QaFCu z-+(rH>esG^xdV~cpXG7R=;%(r-02^gqAl4>q&tswbcJaJu}kx;PWZRlX}fZ94s(1d zw>2NE5xY=U%W}|@GM(cLMm7%&ad8H!U&f^AcjM9i)*zI-s>CwB@!D29BAv8?3jT z5~(VW_{AltV}i(-%@L}5llI=N!u|PTAN@WXLkqXkOG|=1iZxo?23B9Q4;SwyfM_KR zdYbdgJ-bslnS(L-xN0Oe)`K7Nq~eYdIG^INuQR25H~sNR6tAgAU+q1McB&A~i*t0( z5N+XH81F{4Z?7mf13e0Ba@C`y^b=GaZkVKt;mYO*#4JljoP8~7tLjR`ri*~c;t$5! zcm_?EIE_8^K#|90G&HXncSux~1T5JGKS|P+?J!oY5myNOcE}R1LDPC>!Hv`{t|BCY zVNlQn0}t-IL-D+dEY=C|*9_mdeKi~#zbj1@!k&Jy^bUXSbs}e3G>=E@qgp!d$^y&U z=8Sj~*s&d%C5p_eZzbS$^*WVvelJUNbj*0qxFl6%2#=J_V1FVP%|}Y5mi}{GW^1`b zb~D_l2R^z=?^$qjtq}Vbo}Jbq@dI0a7{9O_gG_@5O$>xH$lpTcp)IiU(cIRYPrWSWpbS_&d(B~GBe4O9j9(~9}F`bK8pqmI(o92PFYlNh}4IsXPPKO{4REeiZ z7UYVGNgTc467b;qK;DFGxc)8l8}jRC3!@9T$cECB2Yg9F@7xcVFr{D17)dYIbRQ|1a>Ub6nq^k;K#aATpv|n{48p*!&fAlo+`o%KYGK$ zu`40g`DVvjz{p*QGS|<=Jk}|R6>WBC(N<5%f%lFkzSLy`2V4N9NnhPU!rHE7u`2oY?rh2u z_t41Zh#g29?os5vtVFYXlWq-nT)l;%&!!R1_?B$cd-01)y8Mma=Q?q}RF&K~48PG+ z(#_JVSX^eQ*NQ4_EE=rr+B^&nFoAe37ILWKN^p>oXhry%iGeq12-2#Ff3Au*!tQkO zm!{nt(o}rE5G(eSw@%xldNni7*4kz1=$IsE&dIRaR zlEgL}_MU*&$do4v>H91I@?}~hKu-%9Sz{_Yl18lQp7n%1j9{ik$JHBJUy zB-&8mX5OrDdrHy6NqL59>B+}~9O$0rnZsOX-mH`=gdY>3?Doc{RTq61yt&KNq;{fWluXh%uPx6Nq9Qy~11G9@90UAIVQ8PVlFH@?@ zw(r?>B};ylh#{Sb`q2U*Hv`~XQPE;~?|4E$Yt`G*D872;*teQyJNSOPPTKbGWJchP za;pH_r$#F!x?DcQN+RxzKo9*AHm)&&fbAJK2S7rCG)m(xVs4>&(~<8BkQ|;Z%ICDj zX2y0V>cv(`Ot`OLxT*fb_;Kh=aFULGc}~r-K&aTy&9gf+t4!>tAmi&)LMYzHN@aF~KwvM={z10W+TNj$n?}8D0MfUT!z2niV7otPky_}e)Y(x)y#*kdPH@*2AHcP%kVrCpr^ZxWnd1l% zp9w(g9Ngy=5g7-deeV<9xvpIled$cz-8$X6>HG-atA?+pI?O1})zrk3GP_yNK7?L1 zdbq|Bg$8!QT1d@5z=E*Q?^{K^6bYQY3`*s8NS;UYP9oowtSONaP<8RifzkL$o|BNO zRScbHtgQi-&g9+#a7fz`OKChz05>+lTgzF7k%|NyGTCi!y@cP7%OCj<7BnlX$4FMr zh`MIwXA8SedT?+6^o64dzD<}$g!Jwtzu+LT8qtkExP(h4kv4LX9hPg z!2qyCXht^v`W~!zf_IqyM(kN>-zH}F+c}d-f=!SY3Kjkl^k~kKvi_)!O}-lK*)H<} z9;11njB_(-(I#thKWpWC;b9_~8YbC~aO61b{38Xni zu2DU7s+a+$L_9^`lI#Y*=x)F6Y|d7ue1Tu(%)-q1suPr9J!PrBOTMZu8e7C`ZY2qV zPLZlw&n_uva`G4x@<1OYm;|Pa>!f$$s|0m_j0n)f!np@M({NBTnSzH1VP-KRR6V$J zd@I4;n;}yW_A;ipBAAaL2VQLvhyteX)Y|}_HA-j=Z^=+aLqD%cLo3DUcIn7dsQN{;A0VdZQ#*fgs@Or3FQPD zq!LFhV((x9`Qzi{#hVQHO@8QjWMBQ%#i@2j2Q7QuOj^hb)JDt%*}~sA`N}qB#PJK1 z1l>J!2D-^UbaNR}I(V(n$VFT2yB2`zQ$SPgwazySonw%jF@C9{``I4CO;W3Ln5nF= zfn}GH9r?Ps9j=@agWzIts)M8jsH4gmey{;ubrobYXiLMb-%67cGRpNb>}-!`K^2hK zAPL)dsZoKNVjV(3RwYxYHcKPFC%jk3hQxmo>&V>t zdWUD?c}r?BKrYS(x*+w8zT88;=LT0ZjJ>JnZLdn6&d;GK*8|S@RdHAFZVq~e&bHsT|I2qa5UNI?L}rLW3dD4%Kg!RVuAkeh5woR7iy z^=?AQuD5w*dCug}1DA(gZ4GKN^(DjR>@ZySvU5DQL_P}jW6;~Uly?M$j%A&ioj5Z= z(w(+|O-c1BCM!qNzQ#6e$o%Y#u4lUo5}DYKAb8Up`Kc>ABkJy#-}t;krIm~g?3`XP zqa|2RHtv-#P?kU|mMx|RjnkA+m4I348B!;blRBZ}2JCYAqL_7Z`1dnrPZ(yMEne#K zFqTZJ4a~gTrD9UjzFnp2nSM}xE@-t-<8tAV1(;~N%c_nIK?@gF(#p9GBJxoJP!>R18(1=>+T#F@9ivj}D zE*9{bCTMBS(k%5hr@8JH!x9UHequ={Pi+sxIdY>Z@mY%##8c@~3hqqm_cD4TGO_x* z^7?kA zVGvolv2^ww8Vn;)gpyomXCIq04YEj~ALj&4`T?eT)gbP<0TgfdCtFz+FNSudQIdXx zh-{m;t+P>d#x*Wm5z;@%OQSEz*(+!~+=5E|KAPy*f(#Rsip&SW8g1#{sJ-2#T|J$b2gNR>;D z${b5s7@V|iql3>#VSsTit1C{W;MZi`>8atO$3X}mk2%w1`?Gf;k?xwER$>NLl-;Ws z1H8GP!`Yn=)yI<6H`s*}1Et@)CPEBb+k{WR#h>+IFb=(k2KXDlAHD}%15OJY2O@K* z=oF-Ng=mH7>4a0SLGAfv&9wr_Wy;%?o#fLi={QrEZXt`r1l$Q8Cm$2iGSO}4BU0+* z*9s$ansoR?9WU*;S)Ti?$98~~Y=fkfCCmWofx_462lQ{v!J>DMi(|kYR8bBK=o(qT zWDvjW8!>?-8_r6CF+dDmDVkCire;~MJ|dYclAEgQwqJtW5?lL71{cY7GnGv_gXrKt zKuC`-w%kN`(#l_A3olic1knwG=s9OSg-uMZ)mDZzpw;B&^!+WFJro+PiOx4~!{;+i>3}38k)iQ5M&0hykn>9qg(vP#>sh z?a|f4Z{Xr=!?>~Tk#rp=v0~D7kJU^>8AG#u$Z_TCw;h@nlV-F*dmoHlkquhzO-*+R zamhJ-oJ|Y}gnulPKOPn;O1medi5(|OlJzbzH%R<0`uPhoUwpxe))t(fc-E0hZI}Fn z2KK&~?$PQw`I4w)&Ey&h(AuYWL-oql1hNkVrXV(z#8;METIO@eP>*7}?;Vfy&aMdkMKkfO ztXYA!9T1-0zcXi+33^pw;|{d9=o-d866h6->g*$JB>au4E~6=;Dmr42U22NSnJ%OO(LTh-MpVz zJTJ3aqC(ch$Y(Y-J7Yh;7+5+*mIDYY$2}D z(Qp;gV8Co_m-E!`)b(v{TH@Due5kd9u<=r18Q&emCulRYHuUg&x9^*~^Kxs34SlRKu5o?fzeoWf1I zx}w&S+^a+6>`5tXF*1RX@k(^!kh1Ax5U94ljhg^69vK3%w~`VyHW})@%_M6L=iH7) zF`EDi=TInBFn|rTL!J3hyjj+)6^7G-Hql`0ThXTh zHcBBV z4re-17P&w2Wjy)L`GZ=OAK;;{tCW2iYxw$8Y5%X^We#RD^H z0yoCP4{ESs|1`-;iJwwp%co?xR!`@Z^A?1y#6bK5)jpI@3DC`}-&U_b&9x(?L{{tn zP+|90VUEq$@v+vyvIw|M<*v+4#3Ij`d~d5<|CE?d>dlXY#CB0|LogadkX*Nh2V8Qj zbm<79I@sQAmDH3`=1Z=flq+d-J&dv;GHX0wsK)h+9pBS!{_ffhUNY>!>UK7rXy?&% zRYERcaE{xPE}6-9%^i+H=8XA3p6hDx4v4yTXG}XX+-)tb}IOy~2H_cOzGR6i`hm`jd_%wkU zDoF<%O{-$+!Y8y!O#WSVjEi73Pr(6;{KC*o@g4qA$2Zi26fD6zzzMnUxvus35krSg zl_I*@Ua9g~cy(P-4)aoIG9jv2YE&H_VdttD?QFT57qJ2w_0t|xtvRMdIFA#1DBjce z57yTQNkvcJet3U3&HX9nK{a>dRfAZUsb!V%e5SJnG{d4)(x1=De5QxUlhw-<98ZAH zIv(M-V`G?B$sh1Od`rCG%P}GTEXK<4d>k8Yw?6Vn)B&#;xnmCdgP3cr=ZTer#q-LJ z12uh9=6YmfioULoTk=@TO=@Dd0Ra7I!s`lRzVsY}4AZ*g>auo`-ls%8O0- zTSMZp1ro;-I0P=-S*`~LDs`0%CRlJPWaoaI5MhuM8u6@05E-kQ+5yK2peCUU zS{T?;o~64Sf@t7^X3+-2rf&T8Kofudr>JaLZX6qU&|eNL$+>Xure+nn0h4mWs?V~?4+S}1XcaRj0GkInlc{!giM6M@3Q=k z5EkvS4ME*y;chijAG{Z0=J$^)F5tfHPfBL`tW$sicA2h8HbxYXJrU(D5_@XjA7@i+ z=~upW?;7;%>9}yo%%zx*kTVy5?2xiS_LeGs^=bokB#DT^lrc!u*T)5bB4J>{NJij? z!g4xgI{UxWF7ieBJ?l!yBCVCr$$7~7^{r^jxB%Q7i$^;a8)LjLX@>4nT*SqemZhkr zHhZC|$O9fFi8~1$G6Or)Lr(eUT5Zz7D$Fl(S~Gyf_-t<15(xp7X9v`Yl3B$EoLkbd z*2Ui0_R013tlcJO2M`n;c48(&sYuc7Pvz}y!Qyq6HM6ZYSZ=@YZ+m?|S)c{0MzF{{W+d+_F&0ePWP>mK zEuPNm;M9Uw_cp;r_VYnt$T0U8xV=g6ofF<>m&mx#a4l0@6 z0pIsktF@nG=xwCcXo9zL1{yRO&YP@>vx`hNh`jwXcKd{U-}GTj&o5!tgD$w!RcA4v z+|yHv$W$((#13$ilms$M(4#k1GGr!03r(%b^?v_FYoUc zgm;sM8-kPwZ%z zeU7aBUgic)f;J9~`O~4ap^%7xvlPg~tw9G8ydk!@}&u zwHKn2m9W@Y80%ds$$~G7c`}7>da!9%yd9rY{EC&z$2$@-c~*^urg?n2VO1nbVB2)8 z)_6e3>RbY2m=j4W6ru7!wii;YtjE^4MkIX9Egj3&oG29$%5C)2B{b28i9)OZE0cR@ z!G?2`R^qv+;3x29L|0~V*~PPW8pCgtCkeM0(C;M+R}_Tx5C(t=Z#e4@$|NBcdtgn6UQDNb=p+*eQ7luf|~RT51R89qX% zcvce1Xspog>gr>2q5{lN^?28#+z1b;6pd(gLcB@^vzN|vmbo6W`6|1Nj{5ebLKVjJ zlOXFa$$m?&UTo@j*#Qldxao=4=K#W)U&lng=Fvei7O7*Y)Z|cF*Zat^Oyy&1^~8R0 zWNd!4rf@HJET3m|DDh`Zc}T0EjhLXRCsmQwIUL#xGCB$7GoWsMJsC57`i?@R#aC`` zZ~ZrCJhxE=vPea`>)p579&>dwk%4oh30B(Lr+Lxrbja)&a3#g+o zR5?cgQY%r-!moT0H%j(wkDEfm)YGa{t!g>l7OpmHb+cCtt zcIIJzVXv_hXJ_`1q`tJ+NVK@&$y0j|=uVbpVz;BIshD4!x@8Ln_;itn%;apyRL3of zm$qiwnGh?^%`Zz0wd&d52~OdNX6}T(BaF@c=$~;uY5iCjID?cG{`R}OvWTKJloK?~ zITuLXW-{5>Um>0y5_i-Nzfku*kqa7#S{RRa6`R~xsoV_xF<#{wUXljd0d$BcvJ;wx zqX&4M#vg$yqRffv{E-I2xTT!|(X9T$Z=d^fXr!398EMruZoLVC<27=)50?f2IzJra zzBT=ZX2w0)hl7p#0k2s`h$RZf$5u>m1{})0i3MrwyaslnzY$S>OfWHn#0zz8N3;S@ zL_H*7(efiVgq~}(k%f=VFH_#hMU36C3w%o$)ehvVdxsf6V?*!-GzI(7emLtO*%t2CDnht}{EkiI^($2sH|ppLCHi_5-{tj;l1 zbI6CkO5MO~7Yim_STbVw-Gt+Mlj32`qVU%hYrBM|iJr-sZ-cJb@4eR1bGX59+|X%+ zurz;8m9rp>5ZkQG0_#WAsRx22b*m~FmL2(W)X6Bye)Js;cPgG+%dk@&Zr*|Ur%*A* zvOt&^cr-3`i+ccXF>*cphOG+l_o>qM78I5A#RnO! zRegLB5$UMfsi~<~u1?lm->4vipGiT7v1&!ZwEB)tdAqkl|&I(a`8IjL$B~X0pK%R(^epkN~ z#W8+#IKl5F;HfZyIJ>{wJ76dOLOHoeg*CxyQb&nXabtiCoi004?7CK4NzYu}Uipn5 z%tS!kRk*qbwG;Rktr7*eB@7sGE@4s0{q%=oKIj8%BWJUQrz_-mXgX8{RWxG-%eYj; z(8@npEl%GzvoJ7?_4&>CIfmpoteZA{ZHjz@81r=LsVSDwYf4Pr9{K|lX*UrJm-EdA znE=+0%^P_^4%SCiZU_Glp=5(qJKR(k9tDt}*M#0j6p%b8Cl8hi(G^Wl>&^=oh0=g~T1sT`Q6bB}HPIU_1JtAXRM zJDclD@jReIkhY=RNfC{{OClqVO1g|q!+E+~CGK+{lcqoOBWLxT?y{+)fPK79FV54d z*g79H4*$`CnCeF{Y!f5tnR9y4Ny+ciWqdi-A*n*7i|n-0kZK#lBUasZ6K5=&2G*%5 zB!_vU+{s)>xy*ruloUwi)|iBNVUm`hx_IY^TwkoWu+A4R$5K5_U;!J8STMdA8oT|? z$Ddr-dUlEJxuY|$>DPBsQm+>+1a+>mO7r+HaTqTu@g~ghR_akoGsDCb*7mwU zoCtC)7fmXl=mo9S1AodHpXYGyrgJl}iF#|=W=-z`@kLt?PT5_}4g~z=ky);$ z2z-YE2-@j_MNBCn>bHYo=NwMlq}qclh(;}gT>NH=3av9% zV%#X>w}i#D+rS4B@RMRqRA0uJvZ{K8&~rUDqzXm<%+ zM*u$ZP7Ws-Chg$ZyKGx1(LGL>aL&2RLN4ymQ&PE;2|0hH@;y{cuMF06DAfw1WKt)M z5uZw1MXPs9E`fw1H8vRT7;F0nO+DEh?3*mfp$5`sr8JPJ<{txTj+GmXwRid789H^d zIZ-xzDSjLKO02PVs-X>YoI@uSK8tHSxNw)`=SP`3a$fuymG7Mt=HZ>Q++bpp5bH-g z)Gh|6Mx1lS+yI5P10JC}1)U*5&m%Zx{D*v&I#Rj`K7zNezLTB~IPDicm1Brak%<$S zo#l)eVtnzeu3VZX$wC=IrNVt-W}c6;__mT(D04GYp4${NL1tPJW|#qg5=uiqE|SX)d#WCvxnJTUJq5NqV)XA!HSIt^PvCpS(snQh=Jt zQt;9T1{+0W=1dVNSZGh>3y%?yr(cT z%v~xHwZY1jvCBD9xnrdl(X-8bzM&RAS5CGgum2M}kOV>n%HK2o?*ENX8_Oz$Z0%E= zS(2;6&_mpOm_sYK$r6049JD?EnVN3iyLOb9qjAkGf>{cqW8M<&q~T7+G3kl&a`?8V zeN};nwJCVO;1&{#s3_<0H|224$$8grA?UvpZ#*TeAlg%~#5(aPwE{n-5L&`Sho;W2O((hZeAZ>tQ`R_5+XgWA`@>COkUdcn=92{bl@a<%RS8KaxAftZsg{W#bL!MbZ7I&j)2ON2&jb2f(V`H`R}NJcUE_r9Gi+y$1Q#MBjVPFoz&8Jnth^H+#&)xgmU|h^zvtE~X9!)%ELC$?Jg*nOJP)w>tr*tT zV%f*Tm^UQi^E2>dbAit8CICZqPmR2eoAt%@OblZW!?{Q1=@ILdhBx^AtLlTp@5%}0 zh|d9)gb!$m&A7=3_C`1ckJQ(zE{N zJ%1}rZIY*2X;)(Y*Lt>W`cc`>*|3K%|0n?$Ti+h-@ow9nYp?I{d|Wj*9!Fh#&HW`9 zqr3{_09_BNeWs|?s(|(2`E5fe#;9aM*b&6m(m~eO4*o;I5l9i@s;_UO96RzenQ02h zjPN1!?|c-K^0M|U8!FPIKH!&T#)MvXDvxpcV|oOj)&y4I5~j{z=v2(Ot!1_gpZ=UL z+98V_a7xyzC_Kb3#8`l}?<+cwZXlX|w&6?Qwm|e<@MjZK`G=(ir#vj-^NpeNT&3Wj zP@?HJZ9~HvfLRoYdxXQ07$vjN&zfow3vR448)q%$k7J(+u?r^!S3swjH(q&wg2g?5 z%BSR%thy{r-QGiw+>~nHkg*p|j8sQ#pH2wP$@aMN5{eKxgkm^w3HkbIIXg?5olD6? z*SvZ`(Vw$kJ7n6Q;Q5aPt(eVi9o%BKEw@OF!h%UV0lMxN_cJMV4x&I^gIO|`d#)0ntC$5;77yJ|ZLrDEy&Zn5&9O9a9%12eaAVAddJ{!qVKV zW{J?nQl^{oC1PXH^pgZ&puqIzjxTM1t^MHI?gdAB8Uxv{mRURmZL}y&GM9uQ(_r>g zJ!_Jy>N1_c`sXocQ42h6)e!$V8J-bFxSJ)}TNQv&ZQtX87yZIzJp9o*s-IM`KmpA4 zDu}Pp_2{B2LVObqV0(fp2DqnqiIa@y?g+0wpwgAI>e8@??i{-F-jCD-Q2j{1VANs` z{_*plmL0C=ECR=P3c`RT(}i-!f`5@-279?Qq-Qb_Pa**~&Xi3F{LUOPj zDH6E$5fLBxBx<=TO5l6|l?4Ar>%CVYmEsiyaB69jMIs^9I0bUZBU4G?myWWL2Bz&M znUMp*i$-@Wd69YA8p7j}vV%3sZI-)HdR&=w#^39lDzZCVvC{5Az}CM;Oy$r!s&~9` zbjGhbhec(oMD#~}s7WDpv5^^aW`AGHfc#_D1T5^49TB`O4o%rp7pX}Fjf2CaDWSdO z6migF-ArNAO5^g|!My)g-iU1es~q1#Pj8WrasOxiznlH9J-1j7_`fN)Tgmu6I!={U z((7lL%ua*fnS3JuKs-9HXJwCXp%rm`wIc=*fmV6}gUiTXQ3Vf9?0v8=pfirYRz9Ik zM?ZZ#&f(Y)BDF!`ORHB3B(DAXfrYqIn?0Mf^^dEC`>*kPl_wJOkKI3u7Sp31NRmh> zJU~E(KRfaQF>A;rZ>*1F|}-H z=;5NPUjg(M$A_!wnA4n&U_M#iA!NX?RgRWIJ>nj3(!KF_b5_2YHg$x1u0jKSr^vN^ zenl4dC^%af4k5A zoB52Uj9|u$FmwR{bIQO}thcLA!5+DhH|IKcIJ=MI1h(V_o+1dZpPQjQup1Mdgc#OAnp z`sDc9J>IUi5-@m6IE>!I=2dGxDj>1cx=o@qAH^f2?etAkF7@RSQF7Ha&E0XnKN%tjUNSy0kCNRIr* zML8_6=d|L1HGT&&@iuL#+8)#--ZUO$YUHfbl7B2WEpb;fX*FUC2d!GZ%;l{|Yr(`& znR=NStyKXqZw1?}x00*=!dU3oDj|_N#`x@<_j9;1$BPdie`+T(DJwq|P}qO`WBK`) zRi)%5t64Be^p(hC;CsnCa^4Xs1L&{ca8MM1*MT@wW2zv}v=7Z8xIxNsz^pAtv`t-T zj7Z<_9kK+A;25iyWG1_f{1*_ho5YX&W__B(oE&bJ6e^2w_L-IFjB&2;YN(Gm%2C zH)?h1jec>ZCC=n&o`PayyyF#{kn$#8(!e+xZ;f5xcM_~9_l@>u#?Uoqlb|6?%YB~} z!G=MMO->lu(}^p(sDFAs>+w`l=Pq`?yX_2eLf|Ww8N?S>ALr+U4rYgBGNj+sjDeOO zqGy5bEL*&OaP;oNqo$pt*qjkG@65QX=Psiu9;Z^_;>PThey$FIzP4~9{hQlc8h>H% zY-wk_5w3@*xt_YlmbGsmT46f#v}$Z6AS7=f@-JNs!qLiC+>bn$uP;aY3l`Rrzn*PV zx3`8wJVmi+@Ov0j9Sq>{S$)KVnJQZ4A`^M8{EvjJ>wtOLHi8n4BcwBuLnGhlPkq?5 zpBAcnv%w)6CiZvyFQ+ul(=&iZS{_d%;)(5$BN_=D6CJGonlv7O-WvcPKx!dD;y)T^ z9F1&3+GA$Da09xea(nzFeq66DG}+GXmy41b|6yspMk?PwW5U0j#dcO}i;~pZ+F7)e z8;df}CuN8QYn@wJWu}Fi)`)YAnlC&})PFy^L(pJ4ah2^=2H!CwJ_J#qH^4d?tX18* zmN}VE)n+>pqb2o)cPK2yH@??G0f&wmi^!SrOVAVQL>&qG1|ODF&EjPtn6~8s%-3F!TvL5qEOQC{6`ty=9t7Mq zofCPR`Pmuxp2x4< z2*21(D`S~lOdIF3V@wXuMjKb==4QLdo2OI%FdI~v4&0VKi`Dr-Zp3qNLL5p}3C?<* ze~}@o3TKr1$-{Q$Ow5}1@YxVqKP=kflQ4dy+VYm}wTg5SPVe$_4cT8<`%ytHC&M`v zo?n$E?D=a_)b&CHAl8=CbcoAGglPnBNxEx4nnO=*Qud)I>j+ep1BH&IjRfQFlIR=X zC_{zw;$Giu6xS1dN@|rEWcE_WHsxSiPz7rCA0cUx-GdTX&K;BYT_W$hJV-!K+5T?6 zI3>?w#&St|YrLgDOqWd_YY-*xiw&b?*goZeQXnAR_e;l$9G-0elNy`Q)C9U8% z4-lTkJ!VZ#DeFBSCFP6Oh3EHje`c>9D)EQsvYP9_61vrXD5j{68=!OAox}^YDVsel z8>n#CBnK$b4})Q1F%Bhs9&l01i*JdKiN#iZ=xPMS)-5&(g_l??kY779@_q4+uXcI7 zc?DUpmeg8Wyp3Ns>Qy)&TavOJq9@pB?|7h#B4&;r+kgVvF z2|XZ(Yhq(;#4(97x`dN{(Yw`N8V)FN=WePD?#AxLkM<8X(>15IyZ9URKS`DPr@pQkvpAhmY|~yi;^BUT(z#Mzx85u{qi1KLw>QVhrJssHz*3HsuXM-p4$O z+xy#S>maJOC7UC4Uyc00z*&7Dr*JBat`jA8{N$EIS?@1_kY+!mWoyH$Yp7`zZ)YSC zSWB~(Nl*%Rr#2q`#z8w0V^iLDfc$P9JX||O7oVT#;FIIh9!zx^!Xbyz*0R=Lb=8-( zgE_=_0(`CqM|`q4TF=AdH)FYaToxfuJ_}BC-+wMiARo$}v}EO?+4F$DxtdhNpT~P} zv_gO9X23uiAY_w6#oKF^~+Csh2 zb|fmV3zzpbD|I)VmLI|yyZn>qCP`%7N-1C zb(#zEBQv}00`s=GyF!G!a@86ihs3k=0tW;D&$lS2&9yE?Rk5+wN~58Bfgrr{5AV{Wm1)Kl3QS z|6}&wY`_|i%P8aw1h`(rqSL$o0ca3AyeiaD6?vf}Xhb1+!XY#BIUbCzn1oQ=mv$!j zlwXR&t;|;HTTPL}I<>zuwei8RWQufVTexOZGs3xy&(noVulLVU>Y7bRRt_dvaptLl zUxQsA1ATw&9ciE|X2Ya|>5s(5Xl+!jwU*d@lP0|#{K`W}#2*`SssZ<^d!ba;?U6{6 z-j~j+#<9PXXC0enx&CBXwVRQ7$f zPTnFOHshYIo07y3#e#&)R{BCoGBIt!LOZ=z^BEw%=bMC{jcXuWw6a=7M%#=zT$rUL?;&Pot&socVKXg-@31__AFRK3ve>XGocqfK z!$orkFWAa_<^H)`^o4Fqj*@y>vC>EStEOI|l#)#0HPP%Cx7RC*u?CVR#d9sb1zyUJ z17pnz>}T7Hwz6|`%pVLyFDsMvObZhDta>@_hX6$$r1vk{{wTJIPxLky2qO6z#ALSo z#+5_!Qvgxt_!*MDWtf4ckPK*n>mS??U_x!ddKGGP)fFG$WmazbK<8cK-Q+2$KcBv! zx?zpvceIvlwRWz#858B0Bb3&|Iq(-2Q7Hu&k&ReKWP>|OVFnS^J-iupkp8SI{;xtD zEOT;dik!D37lqH%MI8dZb3NW8fQ8_AxJk>tMJ?vc*|V2Wh!A5%{g7?XjwFkp_IA@f zK@xY-*NSO+0!v%XhBe%Od}C1UA)u`xZ=wj$(6@fatG_A!Mk^|% z3TZh#ad{vjF_q~rS}l+`PH5UoB?HF_e8-w@_FQFL9T3lu_#sIKmBj(P3)13%navYA zcK}FP4|!^j->{1I31dr>AmRlXs_-ONTsTv9glaHTE?Er+X@>rirc38~l0`*@N=#=F z!Fi(`w_m#pyrsLFS2Zj(#+$&^m__fSm>`QPbb%u5>Luxw@`qp7<@cdEa7I9;%| zV&!?6qL*S6M4D>ZuJC4J0jist_a(yq&JTheC6gI9tz#jj(1mxie|d<}&e_^LtB>i# z#>z5>l{M@&=$4wF21brLz-tDRD45rBw0VQ_{%*8lVx-?(SlC_`WDtlk(3{OkderS)v+(`^3 zdgd}eL`q$3Z_BZ&vG_@ZslK0YsCIfzrseso^6gWea+Cm&Do8w`7?WjcK9?fOS|2Wo zpe*yL)Vd17WOc9$eBOgM(QzmIwpHO+JTZ)|fFWQaDwHj2@i%ogQ%{MmMjQHdjex`k!pJct5tZ4gekA_ z*Y+r45+1xamf2;2pE$_qmR$1v#*@F4{1@*wb??#vzeY-KedH0J_y=HuIPQmshK?Ny zIZ-X_F|udyujqTO5v->P#FIL-L}A{})^F)=7-V`ZKQu{343&w<`UUCAwr_oW8bljrS(4S|=SMa~GcN9c#O8fD>cSlM+!<;c0qgS#GB&SN z@9KJc1+X=Kn831U!)+}-l35WE6`j^x?2{Dxz$0RosfYg3t7+&iGnWr7H_-lI1SeI$ z@PUe{btcnX6Y(E|MmiFf%r;KFle7p3=|p2QJK~T!puScfmWII1SPZ4is_EMoIs)lA zbk*+@SC*L1L1_x-aD z;SViB{G^-ql%WmQG`9&HNNdW-@whVrqm`}@jx4L&GNEU^Gk-to;3y317_U=D^d!CY z?s&6BK_4g^`~wIwuIV-+oV+L7{g<@PpR6wE|d%eIyw{*uFM9oqBv$}m8VyQkKDXQuU*LjO!Y+4 zA*H5@iZ+Ab$1qD85!i^WfU4Il;R@mR=!aLTy{+CK(~?l0DW6w|vkszyr&Mz7SEYv#qF}GeZ5d#^kB0TNl}FcxFHPSrJ8?IM1R2S+&5@ z(9A*1hEGpqQsd_tNO9fPW)aVV`6HYtMRJAmj=VZ6jukF~6@M>;9rxqtMGvE=EOWAJ z;5)o|!#M~W^8j}N9e=H>j9`v&LbCSr1Yl)EmZhl>MW39kR~BQ@T6>JcbGMD#4+6?6 zd0(IGA$8Gu{ZMfBNaj1bK}%Hz?XJR;us#FQgH})BQqNq~ z{6H-6c^%p=&vlF@7hRKi>RUD!X%fbi4K`a?8K!?n6X$|Ku5>k8r};Yy#=CmY zS{Dk7jbtG|-sL}@1KWB2DVZ1KTjc&NiBAioB?CI1q+3l_IexP<6N6e9PmII}(pwP% z7wknE%%-jjpE0;x(JM*7EXYiPB^dqtk`SFTv-=VD`<#!>JC*Vs&9-lu_P34lO$~mumFD|Aimgn3j0>$PEY|78>Q>zL$*QV7YhK6~3xm%t%Gx*-X zR5ZN$=Y7B2oWGJRd*)JA&?kyn1_GbEkc-IOHm5-gP_MXSXxLds`pYuF7FR=Z>1(L$ zld-aPi@QbLDkCAUX}E7`^PK8RHR~Rhi1W7VO(_Ooq2lA;DphNkatrfFo;KS1J8W_` z!1NF>;Rz%|Li&Z&=Xman2C5)cB9Z4@t}&Uk)SFOkk2%c^p;u>Q*1Wz*hSy4x<4V6j z3{c~MR<5t~2^K?1N&RgzKxu2bhfI6>%!0D0ZCe*q%TqgADNy&FhN&=G8{er*u!Q5D z4Zo!^o_`7U;qojOy8Gf&A%3{Ip8yc4(JYauEvd$)Iu3rJ^VS^;`m(M9JM4(mxbsqk z-}9m%!c!Ovk}hr9c>ybOnxX|sf<0c$nVYCPy|14{NPTw9P(p)5Qt7u@8B*zJ4a?8? zjTsFtebo8d#gG3M_ZkvCa$xev-?3(o+n2?&an|9qfB`7KzAr1R^plw@r@c8k#!vax zspIt#Rh3BsqCk;R)*tY_`<3>hq<(8Z5DUOEqmz-_xl@4}(e&7LP=`GrwaI zS!1~VSx^NJSuGBJs+buelL_;DlbfwHumf!AdDX(}hTJ>Ch9sMc{n?ohEr2$*b{+zH ze#8U5<@!#(_$j(|b#h#Jd!8aq%*U4wGYe@fra~muMS@c01shh~YbecZ*BgxN*mJY` z!fhQvgbu2!2yslJ3n5l_*40-mjTvO5n^lzX@KJbw%XdLv9Xx=w%9J{kjDn%_(VH#r zV2@4WCz_Zdz;HlPSLAI46%IA+H%1`h9!LE(%-gyfec%z5T@^vi0HNL_1NBeU3CyZ& z5PM1!R;okQ4JL$Wh-c~a#Y891=`y0%Sa&E1Sl)+d%v?a^voRcx`3!TQb!KzAHH{bV zqK|GIQA9=zh7tb&7zF!&zJO?aMW^o>i9UyY9z<%qz}D@4O}OjMByDZP$i1b;QN~D( zye4-K+F!j35TxSXaAR-~hW$-kG)n&E{WFU3Aal}4RQjs2(a6*Mp0pm3oq>3fqZ08K z=c1Q#@&RR{J&x`E<$J-aZ_+=^;>o?3Xr=0vZ>tC`Xb15>*{H#v;)d>w{&&om8ffj(r=tHjqK^e!B2C+z`rF$iws=iGucb z>Ku`{tFC*PG9hvghsemVeQ{0C<6pfp1xazs(o?%>kmcopIqHP*JL2IRN@ghot13*( z`f|FF?uuc5w=l27J7^>c07-s zeKKZ7w{w%EPB%SAtcD~;RmPG|q4HvISMR>$v}nY$RIp#52!%U=na@f)7g9qHPS2Rr zDlea=kqcFAA`RU@jkj@f4IRmI!j9PUe2RcSTU3aN3&7WsBMg1)El;GMq9(R=!Xaa|p8dBK|@f7;%$iEi)Bu`Ac6cR-Hz2-?$GR zg=;aPN67_Zo6yF05?}g-&@+M+K5`7kLma89IO&J2HR!z_ck)g^;&8<8!Z%9x*lf*J z-jJ9JVetvF5{g@N;?M7W-1>18@nZE|%H)9CW+M;zklSX{@$!}Tjofqghg9$4|Aqep zu+R-J{1-I*KcOH0+vdN3|98{>w)kI9`TrG|5Q-B>{`IbJZdZc*JFs3!Ck{cjEJbzf z^tXRaqt{8JH*@1E#nhY3jDEdjQ#A|&uX!ld+p_OXO#h|1%Or5HI^}PJIBDTb8r32h z{h9(Pl7hORKXa+RCc-btoL0?d$_y{P9)6x90-6Sus}*QE89q{H0B5X*#@oJbV4)dJ zwg};f$b8bbN6$>ajAhiJ;o_}Sby9}fn|P2J(QQ}iE!u0Hzb_a>@W=>UkV!dKc{E2t3tOp7)Zny=ZwA0Jvi3+q0TJL$kLL9_?&-TrO z^MhWO=V{?{MvcV%GdIOrmFF?c;ES<86AuiQug7CVc9fF+)QI;e+``Qp$;6G7zU#1k z5PLGWY$QP(_nNa6{3QWtX)v7@qBkc33SN5hbhzoW<%b0^a9STTAn91%)|y*EpItSi z-OD!pa`KXim;^qp_{|yX)!OiG)sU~m?30-O%XW#DueqyU8eNo%@{s<6&=cBaZ=6Oj z<*(7TRNNs;q!z%ctM*LtWg675L<3`X`!0|4H*)42e zQ|6l^Bj3}pSJ8_sYy{|OeVb$s9JC2we4JRUw3rA_bcCBrdkT0m`Q^I&l=bJYuGHY- z7r3$DlB{Ih!QmcE=~e!0(5(pO~?1r z2I!!boQC9#Xyc zJZ@Q)X)KZ&BAdJKO7k|(<~J1hnUrwOcQz|+0q^knn*aQ#T0OdCdp_(Rz}UMB&oxa= zIo+0?E1VclSfpkdjg0P@3!NWK6spcl1q8~l$An6#yaH1(6F^60cP!FSmzqWj_$qhU zCuaaSHanh=m}6Pea@rf8R1YxW@#&@LCNt zT;>gOA@zO;h`dw}oQV(a)8k!**J&AD*ZfX+gH->hXVma(kbt>c(kpMrMfbV(a1J00 z;gpl{1_>`+kSAor6n?D_5OsQ7WRh={kQw(CS;@4E%U|WVO~buJ&F+(pX_iwc<++Y|v-PtM4cD{X51p=KSANA)ByFP10g4 znxk9YjEz(AH`bqoh?+@3z|3I#x)`1PD_++_j`qqP&Ki@|zixrlnV$A4v7F*8G?S9D z0geUE3V|TX(}a~jO8#tEcUsqN_u#Sb4;(%;uZ-de8ekS^wxMjHxKZwYJ73QP}V=#+XsMZ(z{}Tf;+}KyRiatF)av6Dh_kHM zW^T%fsjB0(acRz+fViPmtoT7$I{D zydP;PfLonZfZD0qy&63}l!K*8UVrZYek%DZt#-3_!Mz2+K+2W@VxKRMdE@dY2;|kK zzSQ_I4%c+&Q5nS495P$rUBq~%1Z*ADJ0nuXcG`riE~QncTRmXkC8_2eOOK5#r-k|U z3Ef-OQXUxv?Sr;4HYn_jxFS_rF{FFP!gE|+GO3enovzml6ZI52ka%7A4`85nlaWg4 zsZ_#7qqiW93U~NzcwTQ0KVMp+DihoCM`>m0T?wEeqly>(X!7Li_zROv zPZ;3J2v|Kn3mLdC4~pR5)y0K!^nQg9n_RG-C&Ft;3Hgd5v#NZoIHzm^hc=L-Oiz{X zX9?aF0iOQd?4z7A^)8d8z*w<{!nY@90MQd#%^%fZ+3sb`?%cek3>~5XcO1Dw6@@}A zof{oH#akA~618Pd({PbBN;-C9<(#n{E+b~CHe2JeULbUs-__ijC%Mivj-qAp_aEO1 znrqYGA7aM5+iBS))N1X@8u_zjhLIl z6F!3+F{*Qj)+60fYXJE*vx{u|Gs~+MZpAFF(N61H`Z@y*7RxwtC5eS?A(6VG-!d|0 z0;?@Dc)k`rKNdz67TxhvPV0TTZeJwK|W!Yh8X0qH%i z`Wd?vO&(?Xt0F}k-2wB2uAX3QQy9bz_!+Mf1=10yuM*$SSzTYBzbzvpce?1NV2e29F3FA$! zUXS298@Vjh?)u1#6&v<2VhIDD;H482@!{FikK-o!)`jQ$Sk~lMeS2k6gu?eMTq}2| z^`Y?l?Di!2OnZz{vU$jW$9>Fj3Zp3Ng5GkDi1^E{v8pa{eu%%7r2C*f|7haacX4pW z09K5^ZCAJT!bEWhFF`l}93oAHILjS~AHI6fAEy}4xphX{$MG$PV5Ax9(It=7f#$H) zjMW@32AS1cM3tX?7gJB#%3+>trd&@cwr6d}@!#{x2h1`MjGta)v^?^IEV#H1^@!U^ z;s7-giMk8q&dqg2T_o2T^oopnKbBT+CSMH4FI(C?Id|Lt!mV8TDB!P9X^O%YwZg&6 z3XY)$;6H$q?9X@4K0P~|R6a9QKKt@-pPhW#bgPa(oxPQl%9pp&=HJQx)yI@$X>^H; z-)Ubd#koM6RMKLQUGM0M9G)YpD)!-X035fgD8cvK!2uWmL7464Bp4h@alyjM`TDTsX3kr0=xj)!w-&%C(p`bP4bK$VLY8U$2UY0Y2=e&Z>FYRYN>2)h9 zP+tD>%!7;U8Exh7hLaLGMSF?bdM}LYDPl00r-(1+Ah9I1s8D(GZn}uC7t}m9dBVR0 zKAC7#1J3diwNYJF7{JOde-{2z$`{bI2#GGq;HQ-5(;d{PU*SF*89dG3?K1-LM7vC* z2N?iPP-33?*GIA6$)zcUnn-{)+IP5fk(ZsIYozW_0jpJ(R{|1X>Gc^)7zFt>q|1;I zgoo#}_~smxwx%IFiGPGJM_T?&!b$avXfdsF#=i?mC@ggkqxIWmi6bCM5#kqWr{8ik zqpvLhjGPIToyrnzPF!#^I+1g_S01oj$L21V5Dsq7(hqQv5a*h@T0QIDX3o0WQ(&^3 zhRBtoji~FT<$Io|zsmVruH1E7yo2JVzHEFkX#aTYB>>|#G?(4T&Tb^c9e3}q@rx_> z#SQ-RDF)A;%)+~8_h#{vl^NeBFK@J{f5ab(Nst%%PR6RZd<=FAtcvNjuObzYW89}d ztbE6Dl`8|sd-uB00*c>+5LI{H^KsqLY$KkWA$}=!c*mAX)yF|!Eqg`9$jyt=Rnlpo zR+j>9XcW>Ul8Pm6bkcK9mET;vfFdNYVbCHTA|d#N4IDoi2PqU(^H zt%Sia$JHa|_g3OEK!Fz&tbDb4U33e3%sHk< zg({`K>iYap`pYf9AmcuoNai&&DaCe_sl~u&im1AHF`Bl3VoQy=rzGvfh9g*r6FLB8Czi0V*2!B}Tyn0=vNE*3JE=j3}r_wK-w(s=kHFd@nz8M3M#VWX<} z@RXp!4FWFyFtK$FU~rgpIaecI`*~-ys~;_(8L{-cJxRb&WD#e4On(pcus!C!$nf^Y zv7S0wY%G8t#Mf!?G#+%Vyp(7+M#yHhU=jX+FaIL`j%8@{g&UDsjj#91cpIThe!~al zFWKsEP`-(zv<<>qm3UL%jU2_14)Lf}yU62M&}10WWql!`{QWnQ#wZ?T4efh;g1Bv4 zUJr9DTb&Z(sLtq+R8oILT>z!qRF7jM!KT}&ek?O^S=4mXj5L*H z^X+wAH7^(S-8vrCpc?y(770<)kLdR-#Bs4Kz6G38H9$BU@Dif{dKX9SMi&9rL5sci#_4d|Jlc!g=z z9mZW#M0+nLr+ng>fSCMKfjiUTT6Byul0ku2hoI?KQU@k=E&yA8#oLr-g0;qKcxW%s zq0YhCLl4o+9S#q)H+Ya_?s7k#j2_+(#ILf|xf&RY>I|D1{S}*jWvXjdn%X09_sSGgf!_^0H(K6V@Ms9obJZ1)pZy z6mhGIUopMCSEI@6oD@Ja#8pmSUj`+blx$K5(+KgWX6PH6S=ZOBpZG4d<6Vq`QuqN* z74PPlb=V&&lW(F}mLlmgM!f^9W&Anl{FIXDFtVX1r5OK(b-$6VZ3eTb2J~AG^`=D-F=Pq>6Q8Z>vYkOx0(J?mI_o2;9k!|Q$W|CnXpPh`H`Vj zbSRPEM;)#;|AGeM#6JY~BNJXhFKuXssAHy!QPx>4b(j?I50^2&lK?*DiuN9E2f~7F zsMRjw(GrT+Gr=lp+311`Do5k5b73ql0)0Q0&s1h(wS_Ws_1NopyrnkQ1`W#FvkAXu zo0UP_;qybgtk&5=VTMA{245g;#BCQDOZTUw1*)fw4+jIjE1tl3e&j@t6#Evz>+Cr7 zh_gl?-lSRs>KSjS#Gah$GtHio0ekkcaPNgBZkduF=4(h2{M;JPlFg@527;}u>`R^W zy&2)T!hf6&7pzMZ-AQ1x_G>`_ZjUUW(^QJh>er4fSMX?Qb>L?R)hEZ-s?H!6gFduWjzC6+DzVKhV;w)4>Z)92EFGvrvonVfY>=}E{f6-NG z=IC@7T?I$-+=D_n&qTm9l{O*3X6pJ0BLWpyqn`~ff522l*xIfjQr93@CuDtFPB|dp z?pF=b>pKPI6q1v@NisV`;FP6+1_3Q3*R%s_b4NL+RHM29I1(bMl@0fUfy=e$nFUbj zB7*6>#8lv98TI3a&bS1B9%5G)v2$(I;$0aMe!^Gmhz`Q^txZ7@KO7kl?eXT-uuFh+ zn2TwPh;epk8?8(DuR*)f;_&(cFsWyifN*Dt$|o-F(;{xkcZ;-Y&$GJ@@W|382_gNJW!SM66u z2CPh6-L$U^|Ft{t&NPhMzH7lEaYJ*fcZK^OTA~H2KmEODqf2Kg|FnXFDYZ+J+4E^# zxPSGT9D$RczotFuBh1bFd%58p?I*;b=QMO|j}P;rKMmaznPtYVQ1jQht29zmjdi+3 zCK}mqCxt|D4zdwGD%b-Ix;!g}#~f=Mx2xDU#4IqN88IDBuRVGy*jBq8UVl8HRm*-+ zS!2(gFUW4|*-jS3Qh3Je;S(uf28T^b1NRt=OY`NEdtQm^R?=w>nTzcFIpk-5<>W)D;iSb%44hkmO1B1!74 zb{-X}W~{`M0R~U9X=lCnfr3-b3h>A{^~Kw3m6Yn)jY;Oy9R8#(uLb+x2x<#|m}Pa` zP+jAbxI}31(^57W!G$h^dtk=_!naZ90-EepNJg;@8d^+UH*l^j>hs1l8L-ergI}S0 zfa>rz9Dx3zX~2%9Mo7=qwJY;b#ih}3x1fdt7w9G6S8*xRclQ<0ZcJur_myow6R#XkT?U^&2i6ifzQI{I!$ z+@GS{PX~~yaeZ18FnYrdD1Tq1Dr!ln%ISJ?>sKV6>9h)P++xOdT3yKsIW%7-8LP$* z#I7jqD090<_NonRc-p&JMm*!Qhw}{_dy6tY8NSaeGCXis9Fg0>D}Dqk*|77-Y7CPa z^g@g-k!yV2l;07%sf%H?@>hD`KZOmcQTi!T61(WRx_ z6WE=n?HxE0oc2NExGx>Jf>UkD^Ck43HK!;3q75O~zn9Z;#NPD5=Dj|)kw)tK=yH~U zdcoL1HCFvsoC`XygOfhvf-T(lcZ`hVR_7o`#Fbw_7yh~1$CFXFolX>BA46hhb1HZ- z77&i^i020i)+Mfb##&3Y&CWd7(Gj>?*nwVMMT1mm@Tr#naxc0xr7y> zP9k;W^{WW?Z_i7A(AKi|FRmtWA^*NPToy0XU2OcrM8|$mJ7~IB2ab&^?D%;oa30i>9!E1Rj?H!0DwFp>7tq(^}2H zMVr>0q2@aJz1p%R8$>+}G6ju3L?*~FZtvYEXcw;#WJy}mQe%DF#7-z}`1Yn>ZehNT zmqIzc9-&cOJL``I*JAw#X9`{D)P2VA0IHYDs(Erd?HQCP`z84iWnWG!FNYwG21>FB zI=(hXc!T%GGl7Oz2hW&p)_GynnQ5mn3UF%%Z&we>iw~K%e6^+r5o=1Ibl{u_wTw_as?${)yv^S4jr-sG?7#^QFNL{&$HsEsM)@wbFLRHVHG=FBoj8*+n58zO-i zR&APr`%`JlG$0>NtcIpRHO{!m$SKWXmXvQtnrHr~Ogl8S&prXdOq7&RSlL|_q&;6Y z&Dx?pGJHY55p(qP&M^m%i1`bO<@5^iXZSC~wZr`i`iCZ!a5=_^{9`z!s$0k_9Q|3O zy$uftPf7O4kH{$N2`$)kEkEkrgOE;Mn_iw1oa~7B_ztT}l~`l~$I{#Dn3EA^VKCoN z^h#gReR%IE#dya3Qi9Dcej-X}_Ut~G*=JW{*VSw<6}4V_KA>-=!dsme{h3S8Rnw9B zZV*DVcGvckn(8xd$@_+nY-89E_d{q9et@qYyjJ&YtnV6swa0}k(qkKIHC^SGSG}2L z!IAC!IYDwavKAt^au*2Pmq6^chEN$=1HX5_a|H6k%zl^494+SlR1#nro>l%cc|jh# z)&8%ScvxsoXBYUgJxOO8k*jFC^fQU?m5q9*GLo0+gh1L6nY^#w3z6Wx1Q!=(u|p@$(X`*!xugM zHUZ_4S~{8a?zlhJf1bL3_?-AFyu}ixnfKR>IEp~;;>_y7+|95ZK4gyhYAF*SoO8z< z&f6%+!H*Zx%y|WE7H_9(d+_>%{*9z<1A$EKEDL&}B!NSB$t<;B2>9B@mcRrmxUQIF zdSBo+=%!||7+Duy#n<7%Q8s8Th6cz~9f}FTnlK0<#^$g5$qwv}W_l|N#E=x|BO!9r#E*(4JRJg`dgK+ z4e&8S*PBky4p9W+lpESGr@MV0qDZGWk_*%5sRgNgOS7Q z?U{Lrj-b3RrCKa7n3&Jsvp?jwh5p%evhvfeG1N{trh(`)ygqQUHfoq8<{E2dR72wh zM(!wJI&a;7jSnqdX11UEtw35oohLD0020ddMI^t_QQ0U(L=|WDo`}92Z6;OW6MOlo zU-6!vnc-cNES@HV;fiB-gD`+>wPGBG&Q$7>s)dwetVq4nF*a0t5>Z+$mBZxI3l6Db@rH?i6>5wnYjAm*UVCX>iw|#Whf%Sg}H|0tE_` z7O1?J_xC^N9{Y0dIGJN)t+993%KotD-fKN`&gZc;*Aj^H`wS^<9+#D@*VW-B2&uLr zdd?;5td*v+ydn8Dm^@A5@@F9qsBCg5=~=9ZN@wQfze_?Q|NNK?Pm}dcNldumMS+_0 zjvpe(ZQp{t5Q!&k$c#RCHC)>Xy59(m&is5mJtZERI5jW~>v)2Zq9EAwVYAZUYXyUY zY|Y;&{{#5#J`;=m^J3O)0Ip9G^tr#^wU-h_Sr$JySnFYW^$ku3lWB}Q;H-_8W)4qK*H1{_SABDoX(M!+8}j@^3z)qJsA$6(p8eu@ z=lo3wvD^=*xHv`11S%*qn!fVv`qB{H*+V8I@p(v33oJ1x)v`wwcX}Qm5|q$R9TUg7 zN3#I|`7)?ePF|6daO+>O%?!=k89#_gXm-pPVD0R+m9V@b!oGmd1w&=V;7U#R0K~ye zHiX3WW_$^H8r8RQF#s`q0u@>5yl_+`tCl&f`9*fO47)Q!WKE^E%f&g$mrFh`l`Di( zl(bR<92u$_<2IhhGTrDFu!rN#Z15F~JeLrdmB7@XNNmLXlvwN&gQ4pyB#!Ph7z%;I zHIe2moD)c4p{K%#k2%g$RtCBl)gdiw>Qamt0NjJN=KTvS?_?e3BkDAuECSC9@0E`o zHr;yuza3LG2)KSNCU_45Vxh_UBlA!{?W5z>%75#8|4%2nhL>&&qmk`W`uXQQtGAKI zHxCDv5x+&sb?xJvyo~oSZjKQ}25Ocy%5&_NCU4|ZjN=Mb?;E-FOp;$gM)zAn@&rSUWGZM~5GIT3fOatzp^aSXSnzI=YIN@;v8C3M zxI<&AN%~J5{c-AnibjKWlKx(UCsKvAjiY(huXSB z112KvO)yh$vQOmgBy}|Y?%C0ysYtD2`aHx^@%u~sO&BXjNjnHe$4QAx_yIyKCXxms zT;J`wrbK*uuZaW+_$<#J;^^o9aFpF7RQ_bH%5F}zFZ!CDkR{f7P<#^Nh_GjRlV*^w ziI>PUXW;iE=E?Iki6o0uq|j9JAD$BXJqqtLN(L4|Q8}D7JXQnfLS~;*CQ5@}*s)5| z_77ksITB^{5nFawG43T{Ueh43$)ZW)$Vt_@KO7R2uvZznGOk^RtgQ=Sb&I8R{w6MxU^f zH(Ho(3vS^3N`@C_CRA9SHR2YRQTTr(E6|MV)cKdpv)DM z45P9of{_juO&AZqm2VLbX+B?%D7+Xjq?$2#+^=(-W9&@qUw+gROl&ILAF#RLjazIYF6jKxcrsF8N3EXFQ)OsuuCxl;atLW0T%AjJQaV@&vgI9K!~SR}xe!>v$G0EUXkejz}UR|JM1Xe*m3(FwiB{V*xwPM~*LC zSDwmDw+N;vdes(kEiu-h#=OydoK`2+{{Zw1qR;1M{T`^YDQ5uBSta#)T>|llXnv%8 zs1?k_DVSQb@xjF&y^h&wW(k$|KozJd>lNE7-^6I|D&&9ZfCF~&`?G8Ey<1LLaX5sO z39TM7X?fzS4ziVZ#g#el_i^B5-t!qaCR3#a!j#|Bm+6!qZ;h2cC4)d4cILJI zlKE_sj&giFQCr&dfOvYGe~2M=rUiLY|zGJHMY!4NDu@PBW1Zkdg{U|{W?lCUW$`o*XO_R6UK|EDBCf;}_ie;|X z{Di6Ct{(2U%j*aUBqLA`JJPTrguSPGPCaz!=xc0llOgn;%|!^gkrA18%Xf}X?D_Ks z&Eyh4_Fo>CqVXO^-ssl9#>`C-%v{KQ%WQ0kwZfmp(v!@RUG%=1{P9@ulTw3Ix0}Md z>yp^Yg@{a%loz+$jHBYoj{ogTelm%gQ~NE!lV*+5ol&Q`mFs)R{Q|gxOh)>w<;uJ! zIl7|tKW@$5_4eDF%&*<&+jzz3jVqyYyF;vnDbw~vtdzy-cQr`@pDe02@P|JM9o~-Z z?o|?WrYA|jZNVieIQn3i*XiswI>!soB+9voS-1+zk1_;?@b>RHl+XS_?Fly*BuP7x zmmX^LGnTf8+q=kYrxMRq6ou(pjP?x7D%(nom|IWLFZNo|-;wn^*9bTSNzf~wx1@^@ z`A*&lSa}K|;R4V|o!#Ey zS`ot=DbEoxFz9M`ZniAxIWdg07670$;Pqr>iE_3O=#q>5YPh|X(_B+R{qa5{iZLi= znBI=3nCMN}C|j9HgJ_m1TgS_Y&YOOT_}YIJ=)X4Z>`^=4&hTEp*+JdOpd=57UtrNQ z&NFi-BSF55VmCaH>*tG)go|e9lz!amqz?A}-T_7WhUB=cU5dmrqa*3srY8eAn>LZN z!kgi77R={jslYShNHfFAYU>BQ9HSlUpYQ!Ht!oeC%8_k+Aw`}3Sp33_KQdaL5g3`U zy3xpDr<{he0*A}4dp+i&-zITyIwd=K!2U3jmf+&?(zICEy_r__Ox$z_Ebv8i*`tRD zWfakX=|ZSG$zV8f@qPqOpFuoqc@u8=WVm`iBdgzJL!DDVR!;P}3ux{mR%f5K%0#ku z!Oa_GW>+CbXu{#NCn}WnjAOCfi1rP6|xU}RiCC6Y|2&H269K<)uvTAYuFfW-`A`bwzl zh_dx6>04;-x6T*Xj}39Q@MqiO5H>MszmC9ZmVGpk zuPZ-J`)iD&$|z(J534*Eg|*#Ty44l8nTu5%H7{8vnVi_|Hj7#vDbUDP9OPo@D~pIA z-Nc2Fx+iJxzN}!y>}d+S{fPzj7Y2STUm$_X_;)4A|9Su<&)1#Xf(EJy670J^i?Lf8 z@86au9^z}5?#*EVC4<`qhTm%>F-ic?_Y(U@NEr=^52*V<$ z^Uv`c_J8b6C82Bt`h2wG31oA83c=u)mg)Yd*4*x&>bIB(E#w`bLanA=6P2~z&5no_ zCQm{u9*VKD;YUHa_wQ(eAGC-&Pp${E;tMG53%B^t7@n+$_-hgJWGg%D0wIK1vvPK; z@;Ba2s`vr{RA{`Pa|}@xW($qO!hKDE>ecZ|yj85Zi-&SLQ>e_c#Dzd^RyOB==o0BW zev3FAyEPnr>J&oEo#IMX$hQ)TcmnKmfosUr4t^TqkRsGo- zMRkcA*Uy`xHhd%rOqxivnTXZm`V8zaM74>LRx0H|)nysHncMEGn6w z^e+j7tL392B58F|E-uv9q$RverYWCMb*sVqc$E2x-L5ueOvHb-BML`UH*h7E;iVKn zEWC!WI--J1q_j+2gSzRxI4QT~n7BH=;T0+O+`1{PJx73f3c=2{nk~^VnKPEPNw2Z= znhzHqe_f|=?R*u#$@%yVq$J4VzLH)VJ%5-2_g%_ceQ{&G87J;RbMBG>1!}zk{{vUq zf{#ry3%L@>NQPG4kN4cf;VadC&(q0|u7seOP{xZNx$kg3x#C7o!ee9+v|^9PRd(CQ@iG>DN~MSaD0ZJ~D|v5Qk(Gu#?>5W+KGY;}atK1xniN4aTDpWoK% zW*g=In)v@{;|(5HRSD6yz(WY&&d2>^Z%frQ>Btp2e~talPT(;SIC)=0C)6HiTlAlm zKF;FEjCtCYKZrX=Nk!MIEkmlfLqsruS!$3HYu@7G!1gFD7>y_&gDVHC1^ecK?F5nQ@ZA(RG{L%2c`Pwqp zcVzBoS};sg@p4e*u|m1hW8W_mUjWhoDxbcSXfKz)T98Ue!_}Q7(n_ z#Z_;kO$8L4;Igs{dpnJA?W9K16iuZ7{nsaF{Ohl?iQ_e2ZiKwl@4dciUr6pJeBc1lC_cZiy8p@W z6ff=4uVfI5RhyF_{vhZG(i#- z{tq^Se+L={XM00#)bApU&xV}D1n7awlrxOi4zKHodOTZ?4QI8aoH+=idMAsPzOfCh z^|C8OmqR84QG2i%sY$2mPKilvM8RI=c`$4JI`)xBPU%)dLE3J4CKLIkuSJia#JoFw zHZpnf^jh<=S6ic%I9_${3Qxm5bC}K*oa`%04$xY*)BIBQwb`a8Ya4L)oF5ojJ8rAZ#MtM$#2GwLQ;&YV-<>KB+vD(iOO8&p(oAN>I*w~1N#!GS z2<)Tjd(H`~v~86}kdh%7VSPqqj)~0yA>)TyZ)`%*Af{jHYcBXzp5;BsdOHbx2T>ly zsukvaQo$$IdX-50&PJbv*IhU}cE;RB^` ze4>0iv6=}MTHor0YW~1UKUTcnkeqDyN~KG38pA~0lHrZQ9wCfCGf+8fBa5vPxW)P&1-LaY3*tGEYd+QnW@R<1-2}w25oE7-+P~;`#yFi zu8$*~f2PtxjglAIgyKnH)*LoC(z=jy>Kr7F89OG8fjD_+c{amk91*l{Q0vWDmat?` z%|DQ6-t016<|NfNG{zXi>m#X{SHe++U+x>i6CD)Phn6smZZ9_If|8B+<{5nU&g96G+X$oi7;}*5jqj`r>LRfR{xNYtVsQwR2*oiGacBGii7B0 zsS{kd z*b0eP{jOxWbhYJIMlR^4eF<~9l`m%S9L}4v?BcYI*$?IuDZTdYv`{9#?D9O(-a>PS;dTAG;Q3He4@tg0u_jr3D0!*GoNd~v-) zxBl4oit>?rTvH#HX;j~@D4RdTpbg`TbG)^17*WLg4GayWppCjt=4C z;pua&KOe^L;ET5O zZ#9<;2J4?8V8FCF)bwLLvc}Tiookn|I!C3ng9<@dv1u6NnIBbRN9TMtD0}CL70hZWkjpdNz?=*83s+2lzugg&LWS!IUGPTFu^Ni*(LmZlyOSfH z%)1iy%9q7*9mf*RQPpQyo;xb5^}$`89pLS*Lwf1weBMdug&G~0NZ3D$;R0J zbDf#%r3ci1mD|8nkz=s|>5xdN@tKO|QT1Z2Wqh8wN{}NevX~stx{q-83RUaHYilZl z5=nV${s_k8;mKaC>6Sw8M0V3N^uMfb{s znH9f5lFs@4JJX5RtdopJVh$_h6z;Yi>@D(m=8E5w>TlmU(|?b*eE^#US(IpKawxxg zq$a0F@Y3~Z#5i$Bf2~@v*IHOCy2uMfspVh!p-7EMY6oL~#Z~Rym5e5r9Q*nY!2ddj zjDZ2fK}g-l+<_v;h4J9K?_zZyrEvKX*f@w%nHx`!4CVClDf74@pSIv}TJvJ^RR_Q|>b14Kl2d90!d@>Xxra zUWBgBh-Dnm^qEIMt1DBvSEqOhl@)ve9D<8RM7SCI@ObBC@w%f%Np@FpM?(@S_Jq8w~>+;l}>E1cUEnk zum*9%f)0eRWbJV4mwa0~DZc$XMhf-{_#kJ|?}HP*|4ZYM=ZI(%VR<&EwUA8yytd@x zZ5`j?qucrCS#Rrjq(T-*-M9Y%R6TV2zc+>r`Mb!@Z_5qU)fZem_|ZRfn~gQ1*HZ_1 zYb>1%r;*_r^g3QeLmuX(?YdkWoA~(wfj-tM?f(Eig53ia+M)*%vtA0Q&r9TA#XTjy z{3z~g%TpL={W*ieIm#&0(MZSH)^(TuS^Y3i+y4qx}&?y zsK=6o2)64Sq_uK7hm1tMc6#&H_dM28RtNwsH^mA!^rk;VPQo;V=|WO~&jZT)_BnFC ze5iGM*JEu(pzbBTAVkH@<75>e8T)bwV@wqh<5UdoZo3rzcKI$dclibkUF)vcV%Gm71= z0eG)f-)rr~uB+Eg%*)uM;sm{xFx>k=?I6vUKuy zXfSfTg~U=m5hjgSxJuxcs;Q5K z%DnyIthzc&6}sK=B_w73InCcek91DCuT%H;m7dg|=%9_b1oaZ-L-KzP-s@*MvpbXLf@yE;>r? zVc%KQ%^aa=t=}Ojz0mQmJkR6j_CbWr>+9rh$x)b+tJw4-9;w3+bxj7#@7&r$Q`pT| zWy9<{_70Ryoa`}0%9M6+1G37gq(P#t*!_|by(kM8>6QdE`gq!0=GSvWGT-pR24cIp zEkoie@^T`;2irl>i2diXmvdqHdj^^u-{+DGqguo*~F@XAd3bH3aP6>7ejp)D;#JOY%F`F)Vgum;$C6nVL&R`aWk=~Jf$)Hgq=nK*Jf=S9xhFQ~ z$~ZOq8ErorIdruk3g3-w0j^gxl5YKm110U4>hd7+c9_AG!d_**H3(cX)F3I=mVcGx z=n{~(1?8{6%r@12A60BghE$hJd=^6QmlupE zj=}G74-xp!B@_4RC8&j+1MSVgURoo1Yl>Oqo|k`jNAFR%^9@$ZCfFry+NXGl4%bqS z;;k%R4cq(!kXOOrKRb-v2+GT`4v_akH?eXD7o={5aa!lD8{0V??h91`^X?QghD`yu z0ifrfQm!exI*nq<2A}|zxR4W;&KcE1fu2iCljxVQ+LtgviO+l)GfZq;DuMv{O&vYx zzN`toG>Q}R((|dL!z!uFM-oxj`=7I#uj8w{0$0i}|D7yZ%g)*mAo-cNJhnvtcXqR3ulMW6-M^+ZmK3qM zR(^SQM#RKqg)4%`EP4Aq^0GVk1=_;!PVSa2Q8z-5%~iP;o#R2*V|Bx-D`G*5&sr`b z#Zf|*<{r2TS7=zx5`6+tmBTb}aZEr^Qj}pefUujG5h6}sr6K{P)JDvwa7@JReUBfw zbK>j^UOSgp_d{ddF*2-a4KL^$IadyCWJUMshJJ|p%DNd@b}ZyVcvk9)0@&yR8fhy2 z0VqqQ*5TqqU;a>PsUMnmKH>@VUzj+C5qyrAYW;*Ublf1!qQ@xhyhnnf)KFs|d@JRv zx?ogQmJIRJKSlA8Ly7gc4TZMK!^7)WbR^?!J9*aP1YH!zs3@=McY92gtXruZE}l$ZTq{pl;cy!n0jmJ)b}Wnw#Fp7j4}U7{qo;5c@*(< zfLOZEDv%ZVoVvCNRG?*t|BCs@t!nEap#i$^fnsEI>kZ7zp}s5YJ7@~7GW9^~{+7fM z*UMI1DUV*hJ&dbvA079oh$T`**GBG~URDDHQpGHx1zFtXr*xQY>|wS9t(HXuZ7S9K z*1+n~U?94r{cAMTM=-9VNWe(IPC_%It5-+(J2p1QEYEzx%$EldUS&MJHlh!Ae*efs z-nwJK!a8-PIPsf58g2MiQuT|AEuo=MqxukOVpUjn8I|cM4~@OyfUZam zpvIwP%&%2N;_ku2sJTbwu){Xw_B1a$E~~#|80Zh|cAivlpuKNven!D$nHvw82+miR zQ_`!7B&R-Fgq7xWePk1rMlLi|pViyf*KW7>43P$C$|XRzyZ3p4q^E|61Nr=ekQqCM zUSJqXq$ndwa}mKJY}P~7T(fS4x0?`Ml&r#lDy?hATD2Mbw&!o}3Lam?Pi-H|RpohafAgMDV?CoHa%LN# zb-NwWXsFca6}yLA0pR34=$qt4J+7kb&H?~(QZ2*4#FWL5ifB3E?-8ZeX7suQtBk1D z@K>DHgAV;3dt&tF19TXk+G`H2x@}%Sp1oqKT`-C(F}4_G_GwzZx)D6znb21IUR$Sv zq;DJbRTc*~qJ-1(>fNMrNqzDYh$`;WrX{>ShsNCPHJVIvpJ$kRh4DOjwV;jZepVWj zGNALZQ=_Q5tmqZLz8b9PGtF!DWjB>l-2PDogJn`qLbiJIo?mdD9CF$6?d#KfxbH{L zK5xRaky#)FG%FAW0#H#5-01L#eCa#hfrDmU5DTS7!c6D1cg!H}ocshAItqV@byObk zP-)Ko$coS{pEB@9EKCI2z5|%h9YU)krHCf)h8UhEotCo29Ko3JXRqe~p1|)}-KBqc zsEF)o`ANU$izIzVJtb?{B8)0r=+83h(QzbH(p%O&MQ00cuw)6)Um`p~KP~MY<~Mfy z^9NpI=`_N00>gCz4Kk13k6a~OQ@kI3{T6iuv{t?5)Mu#-17L2kQkoPiM*Qxsvn&4HJ zst`S3;J#w^)a6&KDC}0ZpRs+$5lW(ANz$V<={f68r?a|vlLI@D$vk9TdjyJ$-iobK zAyrayw6MPfdaF;4x^~P*^mgYK#53;;RC$0~)wf8DgIYUP=d zD)@+3C+DGcH0Kl_rFS=sjz{9ne~c3!=YIP;*YLVO_6JY}k(+p0`e>x0N~dLk21ryB zbr(8ZMFM>DI9~d`)*~PR0!M@PEn015N%4{(c!LMnHakC`S}VS}Ll)9I#aA=DrR{8; zEcVP-{&?qPs%zKIAXDOPd!$CA1gjXI;*txjoXP%u#$B1HykjP%cFxpwX!hZpubH z!&&MYY%NvS4NRu+xbs?24bV#CVTkW50<(i|@?B6KSakNLP8#n_LfB$QL{+{4J00Lstp5=eX{cCF16aRf`zFjW-mVbTc)vLSL*OTpA6kyF*JTE$yod}C( zM#MI$>y<=|*PLJBS-M|{aVm~e_QPwze*ziE03Y}=uC@@%((ju&r;@IwCvwCZ6*@+W z)Z}FwJA9=yHGJ!u<85xNhFoXzV~TFIP-^~8XRPx{+Rqx~UMQcJo&qM7_U!=4twXTMeMZu?#-cO|gRPal zBZ0wHX^DVtWNZ8G^p7!sM9QLyvoqRySQpJ5Aiyc|hg)T3i34c8TpLQUes7)j>*Vpg zybEWB)g*w~e;q7+BBtLlJV|EeN1mqk**C?4E{K|BNjl$wQQVv}orU%Fj1hMh2iflQ zpOTGbaviQy|5XOKd*xh9UNeOU-uVNho{)re&hfm($UDVsKhYvBl9+u)pcRj93OzY& zuE#8J;61s9TJ#x$a3$t3uU$UfZkCD(xqeMd(7wY#ghup=-sy_clxnu7L-}Rc70S7{ z&_QJiKG}MSGreGMZXm6hT4+y6>k)Ef=MkHh^mSdWULe7;Y()$J#e+9-co-)x8&^IP zKjPBg>Rj{Jk>m!ffA(S31N^&VVqlIM_GqW0Ue4a*B`eyn=B^iQxM2D|I$MGwcLIUa z(3}egw<*j9=DQ>MxW3$^Qc9J)FWMPIYdqm$t6evj6cu>B??qw%n2f^xVu*NVa3r$h zd#VgZ(28w{k$K+^F^15twUpF1%!@TBKjnxrBSM(i&)gGFx~i<;ojl2h7Ay=JTJbO> zeoW;;=$cvUD1PMOn(0BaE9niI?9DORSJ3Ym#wfo2DQoYSn!%AZDhd~FZFzY_>b75| zV=8M#g^pL>WF-$GM;Ih)YaaQBM&bpNT5U_`2?;Ld(kg>j{Zs8A-Bs;ig%#0+Kqj9% znRD+uma_BPAm!t;zv=$~Os@FvZs?KM+2eB=H?ZaZc{^feL2lX-XRoq2Jjdytb=vyZBQ@aNdd{eueM*ZV zmhqm?`L31|!QxDjr&nx|c7jT}3~nX)a6q6C_K~x!xZleWg-AsyZ|kzBXT!CXbA9vK z$yI>349%DFVvJToy5-&9^GCjnjQF>wDyGVZmMZF$Zt(~-Sn1Knzf$*5$vs(6A#6TC zi9J@s7H_o+RF`IS1uwr7*qD3l<44itp`_lLok&uYU0MP&mxz1&NFRL6uQ9?B7dK^e zR~kmF*t1UR{YJb7-DbLV>+UPul{0^4ilWuAg^u<;`^MVLxZR>a8ySQZ+~AW+SpXqSKk zznU>5A`Qo)=WTPmywRnT-?)l5X-W|Su=e$^!4q3I=T=|~mR#J4CBT2`>AoRZKwg&a z2Q!-H*E+95!}D2{17}1|L$tiiS>DSc_Y zfaEz-g+~@=?HoKA2IyGQ#1j}aBrB$j9JW=pFC$>sJP0Tw6rn|wJ9lnf3J^>>4r?^; zICWbyXbA~KJJk--;(aMIfg)M!nMr&QIfZT2-wUJ}m60p<2Uvl~sA0=KM!BXI$tNN} zR8DbOgqlWm`#BBU3~36>77plWVu((6Sr%KM8_4h4&DST2jD^s3h?4~>pGzSu3%hpy zLn$aJ8O__k9=)H zP__`5lS((}k5(kSTQ?Vv?6sD>mWz4-84Gh=M$Vhj^A*_2De0GbQxi2`jNAK1Nq9wS zpow{I#s$1nXonfGnm z1y(ml9qlv~z*A%3QJF(JN`%k`l(Y-4lC|wiQy@S>Guc#aZv9ty^YQYXx&Z2t3CWC$ ztK72bPG_FtRwbuIQ1A!%IDNg6dUBI4h1+z65wMo_N55e*^g{mGAfsOb>!3I23Q&^n`{;=5m82XYI)Wy6DBJ=Vd zxk~~vp$?3!r{z=P-T5R>Q*;5fO9}QKMkMcx%4zE}ENmZ3;^hiri#g-{e5Ar*u)2Z- zgxNYVp-3}z7RR#C)=!C^I_u`n+HOYwZ_Ih^HPZCL0i<14y0Fq;aV*_2nd5x4RJ>;- zsG8tARVuyu{U*YtHi1H}^E>*|P1+=la~u?OX5^8h$!=#9t+)S19LlWJJov3nhwRv? zks*zWesY+C#!+b1Z|fw#*t4BdFsyQG=+!X+^`!L}SAq9ui8&aZYobv-HpuBB9kfva zMqxGs#ELPORJz_j!LlPqI~l@F;{g&&CM{JaYUoJWe_VMh>{?s1yS=!rC>~DsR%*{s}-)w_2L6Rz6S=MvU7D|_ro-XaZ*vfLxUeu8%H^uw|p!%D1 zWONsnLv>f>Jr9x@nYvX+_%H-e)gw`5g`SbtbUP9;6wl|VRL{Svsg*iC;`g|dVvp9L z5FrdgH%VKVXv#U{#-*awI7BD%M6^oHH1@0q8%2?60F`|j7_BiW9*Plj=*%?`qsDy( zB^52iaZG*$bb1lnPhefqg!EjoxDM*sA(oth8nCd+goi-3d-y)_F)K__YypPHfS2JM zb`s;9vp+=LxEYw{S=|j)xTYH{}3a{ij*LxXBy&SWPXNI1jPrK zSHM>&`=p%YbD5GIW#=B+93yVwC>meS&oVepZIf#hJHhZSnvYdAokG!e*m8E*trpYm(Ybd52+Gp9kjxNx@it{x;-%>^q9W zznSX~n4+uf*TvwKL$xwkk(7a$D7kO-uvwukV~{%x!^y^n>z~mp|Vy z^nB|*h&@vh4c!j^0NxC-x$OV>2LIo7@PC}74Bh%~C;z8|{~7VW|B|TZ{C}J7e;@Im z{}}uq(-HN2d+>i;!2fjc!NJ{C(rku24&DA=y8p{H5B`h~6j=Xo7pf5WI{r{0&I2k9 zCzfw}iDzT8$z9<@C$u%(L|^-f{WDJvvW~+9LPhtfp~rA3()p6G!h+Ln+=xww$l+^` zm@bfI9c!5xBMp!es)zSKQM~FW^>s)ki5;z4I}`KpG^5;kt?Xks!WS7 zEX%C%M@nXL{kFDc*aHVVbNA24zF-D%16E~cz}M65K#@))pv?2et`)ri(_AkaXoG4! z2qrdvPUuN4C6R*#e;{ZBuYOYfLR8O5=e1AFpSX3&?55$%)8ZIsGma5XEe@ti)^s!p zN_Bx!_-l-G{~G?Z;Ud}%4G9a>FA-c43yI|t< z$Zkbic#z(;fS`l=8ff*%L7i>bV#($4I^iuJ!+hmT^I@>3Sv@oE&t_$ zy5$6z`|@2BjNh>^Z+x9@O0kc_Fxf03^Vf^DhoI{)HOahg)Wx~H__0#D;Z&wTPVSJX zWxFteXN;PaF5w*gtt0__)tkh_gl#W`Ls?H(1T80RBIYgg(a*i718ktz0rg@=$$59s z?%O{9^v;l6NVBUemSe9~nmW7mR((|;N8Z%jBug@H4!CxRZ5f7P8a;Up+f;w>KtS6m zU6De7vjcvEF*<5fA2o?p&t`RcAuB{>vXt^AfenRub*eur)^)#^GrDu3oC5rehrY8W z+ZbT@843E4na3YqWiRM(1h+5=U$`)`tyN>XD5WEa=ucIkWN};KFl7tll5E z{U_k|qkN!HE$k9?Y_|mpE&G*fFQsx&Us|R*KO0;r?G;vR{Y#5*t^KV)0<^$W?VdJW zcz=T?w}qiN-bb?B-+fJYOS{X4yIig4e*pN@RXsioW z=!VWC3%RHLc&F=nQO=G^!+;-^w`3EP_$j)Zn@IWZIh7skJm3csIPUg%vGUQ!wdhBnFp{bb55X6@5`#ik#uq@ zYr2OsCf|r-)Ql1CRVN~K%v5dJ>iUb5qg@YVxJW&Vc`Gpy-9Zbhx3RNpF=6sdaA5Ar z4l_>(6^|_vSJ9o1*n5pHcaE3n);rZ6k!gnGBFTT84GzG90}1fxOhZ5>BKBC%wphNKZ$>)SX~ay zR`D9q>}usHB15B1%rB+D12Q%)rsp~G&Oa7=gNX>N7gd7bVhN6V;ndYQ-HIv)sXuTF zOA2=h{OnV76bY#AXp5Y|<*_(0=4nX${h>Zi6W49*fSCn}8GeeHf9=aUD;Q!gfMw+C zbV|r4ldI%lvN;^QqnTeb8k0u&^?hi9Y0ut5m#ahDx*lg}t)Eyc__(TNSXZI_zRW&T z3GJ|Jj~~$FjMeZsfAOr-L#FzHgA_wLmVPz5?#b3K`@h@<6`Ox{m}5ES_=|Cy+VyqK zOKpWZW}&HGu%*d4X7s%*e>Z~Gid*iK6*khfq|gOjkGGid6Gj6I)z+UsnM+S7H|Zo5 zmkE_VQ5(Obu8)U*Y~-_F>myTjX_ zDsvibaFm$sGRF@UKo+a6A|Ig$1eCC(buQAA`JPq94mFT?Mtl`LeagN6!0IE`3%J~g zLxT2#0LV*^_}e5GjEF*ml^FqjRDqzSnO(coqCMk7I9fRDbJy$LowmPE5VY%0C8{4a+S7Sdlm1oVHGET zKf2t4B=V7ySNWOfw$|#Bz|L$B)iP}|H|rU^kNx^{9SQE9-F^$>Xy8E+44{pdKxE-LADQN3h>;~S0s%X*x1uhn<|p) ztrCbTg{cJUKHn|3c7eX(nV(h;&6^x!uawfM*vzL0E+t$ zJWp40Mu-<_KTv5Hn8N25PeHXbEGfITj>5v-V`3u^QTgaDSqWW{ODLktS10jvCZ`>% zqr`EqeZcF7h6giMgm%NA#q8PICB63)A?RiIzu>1s?OVIp0@Qe3cxqx&~EQI7y*QKsgZ-QDHW`Z&H_+=M}Qz85X*@ zrTbRkP+psl6h}$#>IUhDk^J#+WSh%ktjcl3WIqqy`Y8Wslu*4aIFk02?1T`MkIaqU zuMBl`j=PVbNhRjt6~rt;VM5Wo<@(3H3J-Z8=|5OMW<2^~p6kH$|vsQY0b+}*;E+~g$u zlgY^9LiwUxQT^3}g8W}9hF?T>_4oG}U&$xot$D3B86?WWbXdfpfWGFFChX!Z+LSE- zSqLe#%)2V5)OXByr&WNd2GM#Eh^Gkn!^uO@e*k=U8biBbcQ-FhMx|hD?IVXsuXPv& z%SV2W6xsD~{;s)YG2`ex3!T!$$KpCuEuEZ~WAw)~ftY1aJE5DweRZYArCiMNo=8WWDtWm+!|91Os-I+<7LD5V=6pCFmF;r{cJ5rVHzbd<(R~N@xwOa3L%Yg6ZRFS2$gm|?c2S){ z-pfTOBDhZ!wKjxlgok4xujOrt8dZMh{I?RylG=9^CwIPf^%YZ_w{JewP{#&l!*-x_qL*f3H!95V-1TbXyKXk^cEq^`3zJ+#p44}{^V z-c5#qDZM@(Sg0tN$&^AETw_)pCPvBIMu&-&Vwxe>`L;y|6S#ZpeR&Z)pI!SGr&tn# ziVsCZvCLe=y0T{i@Tc~3+gFAc@zQ(Ft7xhSykyzdS9$tEu9eb)|E}=f-y|NiGFI+a z`@eu;%Qez%kfE?O8pAWDf9PgJm*pP;d#uAB?HOt+XrP)_P2M1Ur3WU$M+>{W26oFM zt2hy!J4qCu0NPP`8wakzUz@uN`3n!ATCvX^p13g-mPr65zg!b8lq;SeGQ!y`Q!T#XUaP8EE}iwooL%$YK(9Nkuh%QlcHuC}IT`L*K9Y1B z%DQcVkEp`?w^*{}n6B~5zkr_O8v$p*CT`tSY>A26PqqDwyvy8zU7D>nustb$FRG6z z1g-`WHR>PBtVKQf&msJ0O2=0LJrpe@(uIm$M5z43f9NO1yj>>>-NJ_D(0(phH+nb%vSsM$D z+d*+=&zAbI`CYjRInTwga>-ku1UR@aUobRDIX*pzPmH~Yz+pb(L(*x7tdgfF+QoJH z$)}4AD3WOVu01wsi`1O z%BT`+zB}1wHX?bjp1ZL2+$rn?d($u)>GLfLZ>^AyW$smWn0xE6PF+C2%mtUKB;3M=FLrG-Ip*PIyNM$ z0>$92Nb2T&3qa&1kyXic+5-7Sp_RR$>alaC%Pvu1`@SrM4oBi+kXuIcIPIz|Z=a&Y z_TRjauux%Eu)WqC}xV%qPWKBFxA z`Z7q-|25j5aKPH%)JB^_fpzVKMUh?rmZ$taETp43XGi9sIQw~fNu-v+ZtgzEm=;CW z$Vi%Ei?ztt;3IRg7bH-3!_9K%R%-MCe%lH$v*d<(8LelN!tXgL}h2{;K`w zWWGPWrCnQ)LcydOz2v@$4tTwgDS~yoUkuQ$wQsvEAWt8_Q3PeM@)s7WmUC>bNOme= zc(DV0Q)soHY&67AH%t>#o-2u1pubrTZ*=MDntzG7{er#<{w?{PYJA_4zGd@ol48-_ zd<|V~kX5DfZe{nnmhdY^k>;gM*)8g2dpivImDBHJKiAj6{eR0!IzuELt2KwmO@8)d z9}G0^OIn216yTu=d;OFp473nb_Yb=rHV5n*`aIL$k@|1o_#u10a}U*MSm^rs?~S4k8$x%+8d1cmpn=@fiI zvLvnyW*r+#f3x^_HT)iSW>>wo>3MGL?C=WcOj|$6E_?0R(K@t8qIlGtMgBeQS6=k_ zQB}R&P;3PG<$+|v-Tq{Edbv<4?&t{!GB16Yf3*cdXB_B^o8tx%suK?2xe<8|Qc{m% z+B?7078@s7VGgzjDCYSK`%QBqfWi7@9zpU|2ZRKASMlvK`qrDiq^j|NTo(o3vRsI2 zkmVR3a(%<_+21;!>M!|10zZ?apMAhG`W_Q2wPiGjGGYXIkUmP`rjzl!T5>s}ZiDr> zq9=$=d9`^hcseP8&+kQAoRUBi(yc*HGGopTFNJ&}U z#U}PGd5ozbcuppGCa96QIX3tz2s|CY7t^8`$d5fF4V!K_pzeVSopzPP1>lNEad+JM zh7^Us3^}(VSZXTxGwL0zgODK!=;0vt-hGsskqfL0e;Rsp~G67Gwu=igC;^`CCTD+b_Wz~!is7RAu;LQ6~-)G1y3?QUf0 zcgWL%=k8};A6>x%AQ3)EWYFuIJWca;7g_6`xj7wii1{+V4ROREtLHsw`F(bMi6(fS zP+QH9s2UYbFMpCKh$*3;c|r|SYI3@z3a;~Nt=~&-h0jq=8roEYE>uMLOj&@|)4}@l zj(NXLGljhTHd@1d$ViCA#4QF(yYOAULS%+HCtm~6#@W*%b%-F_<;eP3pU$@p0oEC7 zTC+A!sZDjdI0bz#A1%rUJM4!FwEC#(j=U~hg2F{Dq_nqO{U~&878$2sJE5uKfWKNv zk}2KIm&`OmKBUd-7CP4~fI+ae4!3Cj-Ez#x2+n?;WE>VlRuv1??Y~HW#Uyu~H~jNS ztu*Av^IQKBV57fi{8!|?)^i2_qX7R`fc^jY@xyf_@j8*n@Gs!dsNhW=c!{I2uDY3XR`;oGN5Wc=#J zK+#dX_JUrwog5a4gH{y+Gsp{+OT|%W{Bi6D<$6Q+ZkcnS9)sc+d3GA+H!6R(TlD6C zG51&HWobF>4jaGzSwx|8674=ix6$a;umRk+nV4okh2d~*LruSMPH*g7#JcJRke|-6 zGNX#D;J4!F0cmQErI(3A_{kX#a#t21*j6Z5#e*=^xIO6F-B585u^QItU+;|D#+GS) zsKudWB;AF)J(CruvhdKYctP}>6+DL3L(vM*O(>jH_OkAht9z<4mz_1y=x2`uzqt8g z(Lpm)T|Ycc{Wff@EfUKh108>6YG@?Rlb9E(K)uC1pwM^3!{CF@<*>ms)J>SwHfm@K z+dbNUlo(4u$~hizx;XBxC_I)X#9PM>C0sWi6#;S47|_?@t`$1kaK=k#LQEMy2~^dn z$0hR%Qb9UGLh0UW1FJvI4u7MU@%6X8*urqy+%cjMcO+VU#zy<)q0dQd&J*TCuD#2b zc>DJ-$beYfxVvZ29iHnZ)_(yaJxaR3?1n;X8OpY;(<&T$OQYo)BFi)Fsd=A&InpPk z7cG*Uzdv{9YrM5*kQKL3k-LFI7Uy!hdLh-;j!&&z$rw*+s*#=Rv*P*XAn@9DhBhNj z9?L5YxS**P=ZY_$4ljFamgHMLp3nPs*@%l;Icl{3p0rETBDJ&#*?@J_#C&u^$^+Yk z?d`=<+1YvKYx=QhoHWQOAT!U?tui~m0lP4_oxLM*S)YTerb2YV8B0M<}n zI|JwsM6UCuR%h;@T}iquUP!@}34oj#Ac|Vws*ieyYD->;GgKSS+=z z(zZQ8b+}v@lT-Foe6$vHp=yY@V1o2&v46Ve(8gXLZNFXKkj%LkKtI4BHo(2q%C3K4zQE+?Rk+cEDjII%`?B5fkq88l!YfQ~h(WG3 z%J{ygqtnB^WWNQ!%OcUj0JpAa@1~?%%)j5z4{%GV3Ji)>;GbmIQx!KVvUg30)1z_@ z!DXLkzs-yrv?vlMKXV-ej8};>B}KRc<>ss*h=;uBotpu~uVDui&+m1jBs2WWb>r{9 z7`W)3v1t36=o}O&TEY@412|NT7ZiYf@F|6b;2g(ZGudV}bj5~+e@KEd&I8ONR8!Mn zz7CypjqSwu(>kraba}c+Mp5Rnn81#kYpWl7B z%gOzxA#Gx0$SG8lD?3YEYjC`djQs9wDlmM1Y z3mdmYlu*eif~SgWhY=vtX|A*r?4cP9!pGqx)G-ys(rEuMc&x0?p8Eo;@heo2jO`fQ z%A<r^mlGnP}Z|vwM51bD>4vEeQE>>~&+L`@I?~MuzvyT>%aV znrGK&>Hvo@?p4Q`Siet{sB_DgsRI}T4|yr!p(9bzgvS9 z8w1o8iqdR_bLd_s>~kJw7)dXEa=70(&BEJLdqPGLm4iWUGH44s|E&^4y&<6m01!oD$TFM?P3&aL-9 zSJg`O-c&qI1~h2rxtlx}iM(lp^ZupFGL%176%!=$XJqC)NxT&Rb!e9PBr!JtI?;?~ z4&$PP>usQJwHM2ULacxAt1LN)4O!i+{>r(Y?sC+Evd5fqQ!(T_%HE_!*{^R*_AbA< z_3ApJ@c7m2rj>rnZ?Q2xHkvcYjqx}CP1Il4-F|luveX*crYDOvErBn{;=hgM3+Ls< z7#9-D+j6!*%I+F%Qh6Soe6c<@4)7l5SDph^;RgAgz8DA4Ub0q`aZz%bML``@ms*$z zh`ozbE6}e_h(4gMuBt_*L?$D+Itjyuf#81F>W_qOr=U+t_oij;SL zx1U`v9Qj@=_XL>wq*iF|$P>D#=jVx*w9{&DNCkt`2sncEkuC7fcWHwFlU1@}hxV@Y z^!;@QnFXOaiBknX4bApsw1R`tcuqREFMl*!hFxp-j~#gcBeQBE7V4SMl{e#G?Hd;% zWg%g|e#g#y-rh$fVOw{D&LA~6e~#RB%Ok6_bGD%VN3`j)^z`pqYb1P~Hh5z?)!G&Eaur9gQ>$3F{k(x`#y26l&__w01w{$T_gK@C%af-XRY;wbdwLKkV1u$OAPEcn zw9ys-eKdiR5JKM6KgIN@wXkl){4q>1`B_+T&|$I#IH*_w$>#%)Q%+poySWmae~5lm#Q*(+_4iqKriW(!bNp zXFFMONsQ_k@>o;2NWK%fTPCiu&aX?gkq;Ki$InHS!|O-ng}&|>baotGa@d|K5@E<= z)*54^PR4I-xLVld(#IKy@%65TtV;BZmw_vN(p|H0^shch+OkHKk+1r8wwiKb{~quv zW*@LARWW8X{waOBr+4(2O*8q=506-ig9%vI15LWz^$6pzC|3fk72^xP6bo@0DEnP` z_;c`;AgA0+D^np+)uYnai?Ja{@mhM+oga2EZhc(h@b1P3ZQ${n_po|9`{}{GJ|&I@ zVO67P@X()KkfQ(t@APQ}b=@s#MB{dR$am*Q|3v8nk$#i6~VFZ)fAmw^Om~ zq5$AlTj#l~pN0jJUG3U&nQ^_xod-MkMQ3zmBo>D4efas0%Qa8xEDR&(7!+x8=JqWX zXwF#~FULUpkfUcoh}^k;w+j4R(}MZ{iWA|9cs0Nv;GBX8S?^8bc{qedQr$0>%xG!U zzsHMr?-whhe;!!?jW~5m8E~fgO|_e#6ar4DOQ07?85iH^7~b_Vtjn!NmfC5dMeRBK zaww$?Z+xSguIe`vHn?pY!^nQab`$hqkjF1<{_GQ(H+C~er;Y@!ED)R3&wFnxfxuLxbMTe5};9EJuyL-=7gmKwJT7HjneVo zp?TjscTMssY^ER*;QGe**LIp6M9kX`Pk)pvCV*hk&tR+~;$wkOd0J}=Ck>Tk@~I}| z_WQImF)+{58XwT@zCEywaAm3ZHq9s(l616A>isCD)l4XqjOk6Hg&o!+K`Bqpg*vE? zAWXMzYa^_4@B^Ru`G+%`qzDVraxFY|TA#1Rb5jge zf?nK^J@pF<R z;ALS|-4$~#XNm?KMgE0;7SXbAdGSf{d^lV`eJz*c=Q3G1Gp|vTK97P90Ud>z(vYER3 z!U}w{Lu+3Oe?57>eH{fftC^SoSURQM;{EI_u;fFn6c;>$^eLHqVoAjWMr|A8g6KR`r^Tc_sEg+#P@VJev^uI&yON_0tDt{`v)Nl>Y)` zHlKX;wBD%Beioh*571eWoH4v%oBAsOfDh4*n-d~m;i;XE%w1b!f+~7myE{xG7B-mf zF}JDdsl9#a=;_Ug{odr0ck(Y_?`mTG&z}@Z#pqpCD)on`i~noUc`Rp4v$q$NZ#c9d z&giUpxIW47TdmSkX@^Qg`1OU5KwW%uY!B#aE}3OJ39n$~4dc{7Mr~YcVi^!<7OOP7 zj5_o0_E`}RrE~h+`S7Hlh52EwVDrz-)>6$rb@>w|2zG-u+XGRoTdc}x7#F5&DiATD z`o`CAMwLQl7{)B{>&W2HbzE-B|LEkR@+`?NUWa z#5ozVt!b9iq84zTirw#Mm#+_ephTI@+CqH~A z%Oev)1{jy7Qb=JJ!e-dVBE(nnPlxBp8m3GK^d!a76&c~H?rn+&#&cY{F)gxt0C6d<&-bZdo|XVu&8Iqz_0f~ zv}3`Vk-7g-EH_0MuTIBz_`^zbk-6$1iD=^km*@gWyVSA|!L!_KU|0hFDW3+aZ-Ww2 zGTo!L=#x-3lm+y#+B2eRaiET|Q)b??r08lNI?iVR=0<`mx%ru@HCy0WP^8Hl?x?+P2{%P$$lHckd=jfZbgi73UV`Pa}GBVU|xl4HqRP#Zg+ zLO(w&HevhB!z>#)QKaaXK3e+W@vF}NS)GS}_y2I$-Qg`{pu**s`2ZsF`C|~H)e#d5 zlwSD(NjTl84R~GCI^-QMsm#Ym?TT2N*MkR82tRs;T(?HBY;$<{dRn|ZB&@kA_^W8~ zy-BK_NxdIPP#1qd$Ec3yoAT!ezYo;-;v`0=JYB)b!FtHZLFOWFTY&8>wR?CyQ?olA z3x^q~W5iPmLH^|p@Cg_@Gz`WSO5}k;Ni0ouQ;;rs3J)r8GWLcxer$QNKZ_I#Bw+Z+ zmTr$3*cBJ;>|H_>S&uZ^wRr_}LL;q=3Bp-cg=NVLefdHCAM9MHCCA063dxW0&K!z^ zg12N!Xh{|7&*0q*Q97IyG0w%`T)CD2NTPGXM73RG0%qEC%Eoe@4>Zh?U{lJb6uEOM zB-c;!`WkgEITSKj;o>@j|3FQ}Fyrr~=r&-1TSAq4nyI2~%v@>}H@w9!yUB%INr;7o z3wYzQ0*<^h7kidn=J*^#8CF6N&`)^vPWze4f9$AhxR{ zU*8(S+BO5pk&FEJS{2#!80LNVjddo(DI!0r%KiLkxN0yGm)B+&KQR3Iqq3s+hKmf9 zP{@0>uI)wT2X{U*eZ8^0s|b_))K^>KJT|dU_1T54r=_vMcW$Op=@ew}%iodF?2BcJ z=aHpo+|{)6F$=x$FcwhXyoWiN&9RyxCy1p`2N?CRv<;S=F3Z?w;~Em2INF7QxxS>izmhlS~v1qUyi^>P>q_n`Q{Q`|{BRY~4h+`0rf$V(C89 z3mNTd+R0;kNeght@Z`_&{hQTKjJh&FRcj^%j4Ug zW5N1w&4HBY-+Cq&)5#EZ5#BLSvObcz^*X)WxB-R14O?ECar*-eX0CLRPHb~ENLqsk z?sL!?`OF1l@4FUU921L#W_G>^4mCUZ(ZJwbkX%!_1|sW0Qnq10 zxHRm;x>a~%3rk$x8|0$!OS2?v2tFgp>A-MT=cm!b;c9gPHGcB=4lD;yXcIA%0@<}sqe5uCPy7_RR z*DggIfbGu*w&N~<`To6Z-&<3xpP;$Ya7C-~Hx(vrn}3O~jyK zfppKBM*Yl9p*f)Nb&$u#^a}NhvVKIeB9iE8MsTs=E>*tz@iXMBYl5<@>mftr$QRf~ zpML3%CDhgtShHXM+iu<;`&>FbG& zcwiN}b&WgTyVoah47IUWxBrIuqaP^xxHl8*d>0L{Bcy4KjJu-1l-Q8_D)D8~$q7t< zjXkv;mUlV${dc1=Mdlkm_SX{u3hBzMg_djw9wxb?K*o$D#%X~OGOIVq=A0+xP18b> zM9%s=myhT!<)Kjin~;51ErNM?ZEoMyjO^;8bG1*Xl%QRac!#syTVKQe$o#6fR(wnK zes=0WwUip$Q<%$q6|^7Mo-zfbrku$uHKbk$ur4dO6)K@`W2k-AzD7hb`_nKkqNvSW z5?Jf4?#(-6AREbFYyZr|L0q;i>_d>F9||oZEh{T1**kRR)QbRM-d_-&J03OE zt2$L&N$4GFyD}wFH7B29gGdjIK;}*<^{-e24#=AbEvMI=fi_haOi4g4KGPrb9|{|a zKo@%#I;O*ZNJpRG%6w`mv)9)sNzM0+SCc&@_XpZ!Hv>4S)ni`H#%hs;7Q_hBKhman zs%qJC8{ENw8pmjS;o^^PZZ8gzr4dQ33x^>#j|+*P^OeXT&Gc1rJG64bVNp@rnLxcK zV99CeE6aN89_wRRVpJT&Lxr9Gr&E$|Kt0@m9VkRVdz>kAL+Nr>Qqp?$QSgh6^e0y&*W zo;3PxpVoiFjN;)wqmcEt>d8i-2Cov_eo}OX*x6+vUq&Mwpxb;9kkZa#+7L?jaNcxm z>gN7iQfo+xE0$8%w$KWV(8tXlf!mcUS=YlfX3}|Kfvs$s_c}P6_w%>eolP_8q# z+Pjjv>zfY+)pE(vKP+=AL-ACF=K^#)%u`+IkI_0!?kn?IW<3f{_zz#5%rNz{k*_~6 zL=JP}m6HiPU&lIOE$CwGWEr?l+O6u|?BrF}pZ^(RpHRj3b#8g1bdKHN zs7a!O9>wDk<1rNy#{^0Bb_;hq`E;4*t^#(oQjWv9^^j%z15@q_XVV#ff@yaacg)EJ z7Qh}c53Iu3O}PQz!);0HWG&3cC3grtdqSOLL7I`MraN zux1Jq_%2*`N8W_4b9t1udnCm$na&ac9#v_-Vw^J|{FU+X^zelZMj9F8a)$J?>Zuym zZ5YGpp4VisJiBFaYL?<&WO8p$_?O6FUjGWFv1`*~f=f(e_uf zJ0as>-|GDUo##Lc504-hvp7M{ZwK}b+Bu@8-p7STBCUw9oll(pLqAvh*({!|q)0ft zd*Uiz=>B_#@|I5UY$a#Sz5CZv{2)COX`TJS!P9xNexR)#^@^bcKF z5p(e5S((<19B`S0(~rVD@?r<*WvTJ^|DBl$e}34vc$5!<5?TpX1xeXGWQIWix~(bK z624q^g=?^5W>?QBA+y9BAv?{A>v6A)1O_`*F_t*vWfU7HyjO7t;?w!N(p=L-IyOVi zHcAQx*(y=0rc?4Y>1Ru;4$F!%?h|GhOXKQl!B}PKg^~3GK3UA%mXXq8tlE($HKQcD z3MxV$?7FN`Q97V6_Ii=X4(#+xrs;I>@haDry>G^w$}SKjQJEoY zrQ0l|5p&12-xicCR49DjnEL{#mBwG+cmQ1aDU{21`&q4%0N=7WJKf5L5#POfH@$Wx z@-^!No+{OL@;r@~aD8Y^hj|-hc$D;*A0f92uXOSp_5>us8 zA!J%xEU|8?6f!$ymzb)YbC_%W)^=IZ(B@P27--^j;qr>XV=6pYze2tr0VdTkjSl^Q zdPN19K(gwvT{=UJ8KAWoQaaXcP3#AW9bEp#vfV~rq04f3d`I8(mzeaK8BCxmcQ`|L zLy8L*-RvUSi*YM)Q46e>$D2bR5^Mem`AfGSo4Dm9tr#YFXmzG)PV{Mk1^29J?3JC{zFy0f*#tKJKeNP?RvEDSvwz!AS)N z{im2Y5ny|?Cnk)jv*ido-o2^yPBa_5>%baql@MM)j;V){r~L|L_0XCOQ?S2pyOPlT z3s)oD!yVmTxHeX4KR5AB0xao+Bq^!$2_A92IFal+@C=9yPkCv}<9@>`!7>abtD>UA z7EvHw7RdrW%x)QjgG(2b_Cr~7L;TE5_>taX+k=u6n76<04gL6Yyv@)Tx*$u5iC2TTTe9_qA?9q%y+sqe^)V*%IO_m8EiHG?9@{RR}leoxZ=! z&1lF`kAogo^!ayHklC@*f9p}HN$N-RK8LE3rcTSD%M(S|)@$lwx=rmbL^gT&&N;w$ z14nBX{;HU51aJIybeJhfYu((eB)GdI~g)>ts=fA3m&8}@QZ zTkli@Gd8I~u4x_RD>m;_!bYUgTM6)^s&98_x#s%MDI_WqBYC}f(bT%y9m(FOlpN@$ zIgWgxr5jveDV#F<$0Xs8*6pq=l>8R@Dwuw$v9X2BdI&&PVzB&yOF{vKPe$UxKQ$Bo zG!)jiKunbYLni!58VON$S z>vVq(pykQyDvA2aN4d7j;aE1wlQTJf?5-Qu^Hx4aYGC!BAqY2#S#FTNk6)oLJPm;A zq3?3i`y{T{DZ>)%U*IU~Qm8SlrS$Qc5UicrsChT!73;Kxl9)_#n4i<{cz154_bfO+ zms5px%^W~=Ff*HWcGcEWZGCWALcH6WK72wI_n^|=-4CRC&N4F4M!8dV5iRW3-zf{G>Zym@2Ir9G_Y9d*VTS2p6R|a zR=;}M{50Y423?vdbjblBJ5r#Y!lcOYxSp3<@v=~9MUDjFmySTC9NAI?q7H0*yF2)? z76JR*PLD8j&MAa7o(Q9afipn{aUKPI3$G_R?GvvL#xIGZ3yT&gba|<5Dwi=B_$J#T zsm%oDVyqWGi)$D#zKrD}7g<~K2Ln|c#;dfQv)^(VW0RquVkE4oVNVKFHY}5Dx#{r2 z^K^XX!wd4k!9rrH9{U0;x=Gp`fw5)@A__e@fDbayc4>tAuOloY*)K&~xVUkAwwQBh zd#tXajIG4}5ub3wPzdN)aaKP@_LFNl96i3QR-SOqAjOyp(OKIGml!)T=am~LU&M>7 zA2I{e;-K5-D3-5vTj;58MhjN_4j;mZ){{w$~k`-isB6 zHp2|VFr9`s!KEePw|U|fgJJh2GqS%%Jem6!KsX{Ri=DgqOO#sTENXdeNnP@dPMxg| zxixk*;KfwHx^chiW#Z2#zklGq4EfjejNlD)B~{KOYQ-{NvPVBv`7V9s)t`d099nle zPxV*6|19+bciD>Y8PWnPZ~B5>EN?lZfH@fTKzL%L`1Wa>&*9&I>r)HE{Yi+2x~5H1 zvnCABu<3onv^L?;%cETSR|foX8mV?>TY{?x_M@gECg(gCu)`NdXVMvg6_aHTeC|B_ zxtb;Jh3Uq(IKf9(enVR3tlUlf_<*_?vv20iU1i;}j~suxcPCK)zy1p3IKzwubD;Zk zk1Fr8jgjO>N0bl|^Xa)RKRR#E2BCI^_$#e$#^^*07iYaq(k#pPnz(dOTA0Le?2Eu= zDzj>9SxM!Q#nnJ3gQNG%6sc^=l&wP3Kl9nEE_B*|(0qvLQ7(XSb@P`HtxfA=>^$lA z`RMl(mS^p!y^dLs0YUmna&S=J6}*7)V%B3Hk@*8dey`Da zsQ68dA$@75t5eK#Q(dX-9EZ?8Ar5H2OY<05M4L}Y%)Nyt%aF8 zaMX^_dk@Uerx`Z(rTFL))uO|PonQYZR&Xod@dR|1yxirJBv3Hgd zewRJgX50VjO1jy_60np&ahcWA+e8_2zQdlMw6OG&*Hyhb zCei>Xxc>#@{xQD7)$BycUQcqDH5XQtX@e!uT+db=`|}jCy=vbXD01kgfo-Vr23>8` zQ$dRj6Vr0Z`}+K7Nb}~n%XoW(7)ek9qnV5#$&Et1*lMGtTeit`HvLZb*REIxwd=S+ z-TQ)G4AwqLotf7R*O$~5stMp#8)rZJqWW{1QC?+hzTyT(G%cFZKJ@=qU36DQ>hCn) zETCrvogK(EH2D7wT1z@gWT}tIl>Q;<;7`$u)RpEd@J~y5&8kTW37H+@tzudRrYDrj z(;Tn>%B7FOhCLSSTt1WR`P&8245MbYm=%F8qA`{6brv1j$!Dzq`9i^LYm(@la56Mz zWdh~Wt#v@sK71z4++zr_a1P1Ht#lqMVAfpL<5iZx%5cyHa_rTiB%Unf4)UURtiPv= z<$fjAZv+P#WZGiw>w`9UdHL!w%g!%<(7LRSg#oQ&`tFAF-|~H7q1~6{sd|FT1Ie|I zeeBd_6QTlRHv!h-ZaO zR?A+;xmL1cW13~YDeD9KW{EbCzSPdhazf(3d73>Q@SPu?#<)`JD2P#4-Kc>q8v$XT z01j&e!f8BT?X>45C`Ea87B&|mgSoL}OrEgaBSwxT%DQrKcVXVVm}_?G0kfA>NCJxn zt99N6K@;p6tz08hVgM-}EwbG#5#qez$|1rofAj#JzjS(Sc~q5|SE8jr@1KZ}v#)|Z zn5uNWyNF{=9U1bJQV>di{IEmEU36r+)?OHQjH;u4pVrm6bo{MiW5;XLB{$ReC{x(S z6x?BwZ}0@@KnnQ65oTolWmqoj6+Ox;2O7lsxoZQ!;lAx)?bF+~0!BFS>y7Px50Ck% zaK;nw_Ric6NxIB&*tjk`)dzFenCNdct7zwuy!$S~(~A|Rt0dn+$TtiRau;eI5kN8q zQF;$q*0m~nqg^J4Hz<}em?^W@%GtndqAa{=hY9|-nA`y6k!H#Q;Qn%cxGB6zQwXjy zYR+!qdhXywIU$Grc5}AO9q^JfQkbRuK?^g7EN?!%yiR8!7R*O4n^<;StW~)?~*ng1=G1)u?5f0u%6Ei zb+_|Z_v{z=ji`G{*n0e3CGiR@SyS1J=Qt9uKr9{-qL@M0zo{&oZ*qHPg}#4Pm* z)gsxy887e+Ng4eB#NhLt3!l}>nRV9v*$BtCYcvxoW5(`qEqftwOZ{;qvy}qZY-5K@M{WJ zc~0hkplBmGNKs2>fYN24F+{7NsJr^hA7b z|4?jHcdi;ZQBsu z{3tzot6B)z!c~XPUL7pcb9@J(N%VQ+IP*-V~O{k8F9sHva;IW;JXq%2Bp6EO>5o zU7@|T8hSneYAsH$**!yFC|3j#lL6SMq=Z>_P<8bL6Hw#(V%C$nYW|Mwnr@(L+gxj~ zzjOzOva$HWTg(H!PP>8TYCf1<(q??gE<3R43z3t78q(xckQ6_2l*-@Vi<>bt2L~l} zJ3^KYl`ctsIwyh3$R*#NF!OdkMjpRm=#e@0#z6f{wbZj_-UB&sR}jtQ?3y>{rPiiF z(6!(mV=LiE$6>#S@5 z%P^N77G0xZ52l{rtz0~+y?Wa?yI4rAstc5yM$Q(gF8Of*loN<3S`&R1}3e-WT(;+MMcaq{E8*y`-d(uWFa+ zx&oSWl`=rgzkn%|AF&{3L$U!9im$!PNrcl^Ma5u$?aKn-9>V;agkEd?_)6w7VG!MF zDvciYyDxwKa`cZ@$-N4Xc}=GFnyi{!q|(i*iJqh{i%c~C0G21r)> zJ7r=ptJdeJ7r8@?V+{?WWp}ubM=$V+?Do-FmnkP&#tE>I@ItK{<$`nVxyGD#h0Zc( zcv~$&>TxCFwAlp>Z>Mh=Gs{S|t4qdl;*|e}*+xF~oE)d3JNX-w@XWcI*E!+(wLI{d zJ;S??(VEl;YQ5TLkR3H~lEavnt$+H%?V08jkh?_Lyq1KQ^WcI=MZ(mphKVft^&kS? z4Ox#TGjAwhO{DGa&109}>HQFvh5HJr7|fpLcatH4&`Ml&l_u6MZ}b0_Yki-bS(&@> zPyt#fe9V^QHptIz?XI#bP30g)|ojPHmaU^-qtrk4u%E7&lEQ}UfpfaeaDvL`P$aJaJD>>UPsoB z*luh(ziCkJhibmc%RQPt1=vWVowUE;&0nzD5LN(+NwzF*tkd!2wS(omWTT4c_epCm z#UL9Qk3$)@M}gD(bzMuF>#FCVvKc8tQDfU@y)rMgV6E1(S9cL!%+dsDbAsa$D<`Lw z6@{S&nfpT+wo9E=@tZ>DlAg0I9?po zpd6T~va1nG@nGOrG2?0)(ngWsDn(EbgC5u}RElh$6P21nWgx|C2jpJporLDIp)nuH zpA^A+c6=h}?({$Krsr|B5rG@62}-xhS}y-YNk$zer9a8s!gSfr+|V!>?X=Rav+=Ir z;oqqSO3z=S88n|~p%m`b40GJlNL!DJnxAlojy zpFTaFw@$|Wb}=6_YIX|Xg}e`x=dIob1kP-{kY0$6Az1SE$GS#5N#Y`Jkc%!}DABLW zlEP=`uf3Fe(WE<>umFR5p2?JJZ`S5YRydZ~vol;I(Sk;SMT}bh+h~2>$fTM76JHCU z^kb+}D%h@O4nv|M`8uDC?jPa=>U|SFiSXh$V)bxx(H6^Ta$lH7s@UO6CVJYzmPbQ> zNkWVwoCkq$M8AoO81T)D?xUmtFsFjx#v2xK#`h~;$NNdeO4nzq0%7)!*|1NZ8ZVkJ z%y1S+U*)S$Xcya}cy%YF9wbte)SNy_iL5<~t=5M7bLEZ~R2D>sQ-MGp124`W;%Dag zf~_!=pE%<)X^)y^y^Y&=>I@223J-ap#myeB<6X{3zEf~mD4#MmXl+_7J}Xq(6|8uH zibPf>hq&nVKK}scch!E==zh=O5hcpeeMV+#Rsqd8ClOa|0m{4)`0J@U8wLW>1cmuT z)>d+Z$y=MWUa2X$V%x|SSWiUNxB5}F~k@yFqKc7ujnoXX)-b5WL88m zc!RVu7gpDLnhMa9)bS{2#!m>C_lbsD8@J^&5Fx4Re}LNp;Z0x_ODtAx8jUSlvBSZ4okoB!0YMP}FtvV@ zI?gzS*&K$hIV~3JvY};KJKrru3`C9afv-b{KtPv9Vo16E1W{6vDfEh;WIHBM_}; z=>cjx1glAl%nmpM0);bp^1)j$DT>)mIP`!tjOc~`XgYO>%$udhA%ZNrVYKt;Ko6#mQvS<4$08s#Dd)^4EWQMpP6?T$H z=`=z*JM#*)&n_m4nj2y*`0FGjWV^Z24YSNm@HU1Haf>c4=YVctR~s=YaB^cPP}_N% zYXNbPWiI+Vg;1>F)Im)K9%AKIm0iFF$FT?nwx=kfp2V?B1A;FF8KH?y5^NVHA_ZYP z+`Q2MqAiq&p{+-ZWrLl!EC*r@u;gTNT*U@(CIF2SZB9FjVbZI%fwK8g5`7|ttSXT5qC!?^ zH)vqvyy8$y$er@5j&TfDsNgk0pGJtg87E4}Dx6}PsYvxo6uE0Fd6$q<1+jFc_!@*t znyr&)OT6=xb9hP$d9UD4J@!9^psfZRT982zcEBct2NwcCR}L(e3Ze|?O%*(78!*waTZm{zjG-Ro%ZWUUn z;i@u0z�Rj0O~zM|C=o7tm&*U9AmqPSU21Y0fWqFkwK%x)K=c(L_6+e z1^mHVWuW3P28SsDz{21%RF>ZJyPP`hr(7yxT!z-VNiTC6=qVFvk#p={y~z)cP^ z`O5`PG&`4JLA%D`5{qlpsBW^xa|yfPS#p{qOu$0gd6sqlw~5EW-FzL*T}K)2IHGpS zwYcc=&C$)pSqeWXV}s}jHu{FUs^&oQ98 z0|n|WuPBKNS1XBJwpKb8ZH(C{FsH2#!6?nFS9}Dx$gBKO5ip%sPu|18JztY%AgsmXUD7ivri7ElU~*w{dF}iUzQf zx6B7(wrp!3IEuBEFI$P@1{VY2L*ZdbN*w0sU3i43#%o_#I=7@2tOx1vLA@2ucZ2vQc?}9kTsnrF6EEjnPQ%1rv*0YZSaCINHQAg>6jdm58!eO-9-+ zwTNRq8Hv-Y%xo!uxX@d<_HdmhJh}JY)Wz;52HY*fR=N=(!j)4ap7kh!CihCkq1)+jG z8or{j=~4Qf$0j}3e!1UN)JR8DJ>f31+z`!iZ~jYBELG+*0_LnvBaOFkrASn}6#CpospB}APtoken = $token; + $this->tokenType = $tokenType; + $this->expiresIn = $expiresIn; + $this->createDate = time(); + } + + public function isExpired() + { + return time() >= $this->createDate + $this->expiresIn; + } +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessTokenRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessTokenRequest.php new file mode 100644 index 000000000..5c3e26e5e --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AccessTokenRequest.php @@ -0,0 +1,27 @@ +headers["Authorization"] = "Basic " . $environment->authorizationString(); + $body = [ + "grant_type" => "client_credentials" + ]; + + if (!is_null($refreshToken)) + { + $body["grant_type"] = "refresh_token"; + $body["refresh_token"] = $refreshToken; + } + + $this->body = $body; + $this->headers["Content-Type"] = "application/x-www-form-urlencoded"; + } +} + diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AuthorizationInjector.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AuthorizationInjector.php new file mode 100644 index 000000000..0b38bba94 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/AuthorizationInjector.php @@ -0,0 +1,51 @@ +client = $client; + $this->environment = $environment; + $this->refreshToken = $refreshToken; + } + + public function inject($request) + { + if (!$this->hasAuthHeader($request) && !$this->isAuthRequest($request)) + { + if (is_null($this->accessToken) || $this->accessToken->isExpired()) + { + $this->accessToken = $this->fetchAccessToken(); + } + $request->headers['Authorization'] = 'Bearer ' . $this->accessToken->token; + } + } + + private function fetchAccessToken() + { + $accessTokenResponse = $this->client->execute(new AccessTokenRequest($this->environment, $this->refreshToken)); + $accessToken = $accessTokenResponse->result; + return new AccessToken($accessToken->access_token, $accessToken->token_type, $accessToken->expires_in); + } + + private function isAuthRequest($request) + { + return $request instanceof AccessTokenRequest || $request instanceof RefreshTokenRequest; + } + + private function hasAuthHeader(HttpRequest $request) + { + return array_key_exists("Authorization", $request->headers); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/FPTIInstrumentationInjector.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/FPTIInstrumentationInjector.php new file mode 100644 index 000000000..898a7505f --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/FPTIInstrumentationInjector.php @@ -0,0 +1,16 @@ +headers["sdk_name"] = "Checkout SDK"; + $request->headers["sdk_version"] = "1.0.1"; + $request->headers["sdk_tech_stack"] = "PHP " . PHP_VERSION; + $request->headers["api_integration_type"] = "PAYPALSDK"; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/GzipInjector.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/GzipInjector.php new file mode 100644 index 000000000..202b6b1d5 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/GzipInjector.php @@ -0,0 +1,14 @@ +headers["Accept-Encoding"] = "gzip"; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalEnvironment.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalEnvironment.php new file mode 100644 index 000000000..252864bb9 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalEnvironment.php @@ -0,0 +1,23 @@ +clientId = $clientId; + $this->clientSecret = $clientSecret; + } + + public function authorizationString() + { + return base64_encode($this->clientId . ":" . $this->clientSecret); + } +} + diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalHttpClient.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalHttpClient.php new file mode 100644 index 000000000..3b3c20574 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/PayPalHttpClient.php @@ -0,0 +1,27 @@ +refreshToken = $refreshToken; + $this->authInjector = new AuthorizationInjector($this, $environment, $refreshToken); + $this->addInjector($this->authInjector); + $this->addInjector(new GzipInjector()); + $this->addInjector(new FPTIInstrumentationInjector()); + } + + public function userAgent() + { + return UserAgent::getValue(); + } +} + diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/ProductionEnvironment.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/ProductionEnvironment.php new file mode 100644 index 000000000..20a47b2d5 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/ProductionEnvironment.php @@ -0,0 +1,16 @@ +headers["Authorization"] = "Basic " . $environment->authorizationString(); + $this->headers["Content-Type"] = "application/x-www-form-urlencoded"; + $this->body = [ + "grant_type" => "authorization_code", + "code" => $authorizationCode + ]; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/SandboxEnvironment.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/SandboxEnvironment.php new file mode 100644 index 000000000..92c1f7afc --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Core/SandboxEnvironment.php @@ -0,0 +1,16 @@ +path = str_replace("{order_id}", urlencode($orderId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + public function payPalClientMetadataId($payPalClientMetadataId) + { + $this->headers["PayPal-Client-Metadata-Id"] = $payPalClientMetadataId; + } + public function payPalRequestId($payPalRequestId) + { + $this->headers["PayPal-Request-Id"] = $payPalRequestId; + } + public function prefer($prefer) + { + $this->headers["Prefer"] = $prefer; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCaptureRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCaptureRequest.php new file mode 100644 index 000000000..8af8a60fb --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCaptureRequest.php @@ -0,0 +1,37 @@ +path = str_replace("{order_id}", urlencode($orderId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + public function payPalClientMetadataId($payPalClientMetadataId) + { + $this->headers["PayPal-Client-Metadata-Id"] = $payPalClientMetadataId; + } + public function payPalRequestId($payPalRequestId) + { + $this->headers["PayPal-Request-Id"] = $payPalRequestId; + } + public function prefer($prefer) + { + $this->headers["Prefer"] = $prefer; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCreateRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCreateRequest.php new file mode 100644 index 000000000..0d9f5a913 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersCreateRequest.php @@ -0,0 +1,31 @@ +headers["Content-Type"] = "application/json"; + } + + + public function payPalPartnerAttributionId($payPalPartnerAttributionId) + { + $this->headers["PayPal-Partner-Attribution-Id"] = $payPalPartnerAttributionId; + } + public function prefer($prefer) + { + $this->headers["Prefer"] = $prefer; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersGetRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersGetRequest.php new file mode 100644 index 000000000..3d1c8f128 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersGetRequest.php @@ -0,0 +1,26 @@ +path = str_replace("{order_id}", urlencode($orderId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersPatchRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersPatchRequest.php new file mode 100644 index 000000000..4313c423c --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersPatchRequest.php @@ -0,0 +1,26 @@ +path = str_replace("{order_id}", urlencode($orderId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersValidateRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersValidateRequest.php new file mode 100644 index 000000000..0a68f90d3 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Orders/OrdersValidateRequest.php @@ -0,0 +1,29 @@ +path = str_replace("{order_id}", urlencode($orderId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + public function payPalClientMetadataId($payPalClientMetadataId) + { + $this->headers["PayPal-Client-Metadata-Id"] = $payPalClientMetadataId; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsCaptureRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsCaptureRequest.php new file mode 100644 index 000000000..68d5e81bd --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsCaptureRequest.php @@ -0,0 +1,33 @@ +path = str_replace("{authorization_id}", urlencode($authorizationId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + public function payPalRequestId($payPalRequestId) + { + $this->headers["PayPal-Request-Id"] = $payPalRequestId; + } + public function prefer($prefer) + { + $this->headers["Prefer"] = $prefer; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsGetRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsGetRequest.php new file mode 100644 index 000000000..e088224ae --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsGetRequest.php @@ -0,0 +1,25 @@ +path = str_replace("{authorization_id}", urlencode($authorizationId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsReauthorizeRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsReauthorizeRequest.php new file mode 100644 index 000000000..7547ece5b --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsReauthorizeRequest.php @@ -0,0 +1,33 @@ +path = str_replace("{authorization_id}", urlencode($authorizationId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + public function payPalRequestId($payPalRequestId) + { + $this->headers["PayPal-Request-Id"] = $payPalRequestId; + } + public function prefer($prefer) + { + $this->headers["Prefer"] = $prefer; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsVoidRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsVoidRequest.php new file mode 100644 index 000000000..f5c0f74fc --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/AuthorizationsVoidRequest.php @@ -0,0 +1,25 @@ +path = str_replace("{authorization_id}", urlencode($authorizationId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesGetRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesGetRequest.php new file mode 100644 index 000000000..5b9b33572 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesGetRequest.php @@ -0,0 +1,25 @@ +path = str_replace("{capture_id}", urlencode($captureId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesRefundRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesRefundRequest.php new file mode 100644 index 000000000..7624c6b20 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/CapturesRefundRequest.php @@ -0,0 +1,33 @@ +path = str_replace("{capture_id}", urlencode($captureId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + + public function payPalRequestId($payPalRequestId) + { + $this->headers["PayPal-Request-Id"] = $payPalRequestId; + } + public function prefer($prefer) + { + $this->headers["Prefer"] = $prefer; + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/RefundsGetRequest.php b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/RefundsGetRequest.php new file mode 100644 index 000000000..cdf1b8af9 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/lib/PayPalCheckoutSdk/Payments/RefundsGetRequest.php @@ -0,0 +1,25 @@ +path = str_replace("{refund_id}", urlencode($refundId), $this->path); + $this->headers["Content-Type"] = "application/json"; + } + + +} diff --git a/vendor/paypal/paypal-checkout-sdk/phpunit.xml b/vendor/paypal/paypal-checkout-sdk/phpunit.xml new file mode 100644 index 000000000..4e64bcbfc --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/phpunit.xml @@ -0,0 +1,9 @@ + + + + + + ./tests/ + + + diff --git a/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/AuthorizeOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/AuthorizeOrder.php new file mode 100644 index 000000000..06cc7755a --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/AuthorizeOrder.php @@ -0,0 +1,61 @@ +body = self::buildRequestBody(); + + $client = PayPalClient::client(); + $response = $client->execute($request); + if ($debug) + { + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Authorization ID: {$response->result->purchase_units[0]->payments->authorizations[0]->id}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + print "Authorization Links:\n"; + foreach($response->result->purchase_units[0]->payments->authorizations[0]->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + return $response; + } +} + +/** + * This is an driver function which invokes authorize order. + */ +if (!count(debug_backtrace())) +{ + AuthorizeOrder::authorizeOrder('1U242387CB956380X', true); +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CaptureOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CaptureOrder.php new file mode 100644 index 000000000..9dffd386b --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CaptureOrder.php @@ -0,0 +1,55 @@ +body = self::buildRequestBody(); + $client = PayPalClient::client(); + $response = $client->execute($request); + + if ($debug) + { + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Capture ID: {$response->result->id}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + return $response; + } +} + +/** + * Driver function for invoking the capture flow. + */ +if (!count(debug_backtrace())) +{ + CaptureOrder::captureOrder('18A38324BV5456924', true); +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CreateOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CreateOrder.php new file mode 100644 index 000000000..e8f96cef7 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/CreateOrder.php @@ -0,0 +1,237 @@ + 'AUTHORIZE', + 'application_context' => + array( + 'return_url' => 'https://example.com/return', + 'cancel_url' => 'https://example.com/cancel', + 'brand_name' => 'EXAMPLE INC', + 'locale' => 'en-US', + 'landing_page' => 'BILLING', + 'shipping_preference' => 'SET_PROVIDED_ADDRESS', + 'user_action' => 'PAY_NOW', + ), + 'purchase_units' => + array( + 0 => + array( + 'reference_id' => 'PUHF', + 'description' => 'Sporting Goods', + 'custom_id' => 'CUST-HighFashions', + 'soft_descriptor' => 'HighFashions', + 'amount' => + array( + 'currency_code' => 'USD', + 'value' => '220.00', + 'breakdown' => + array( + 'item_total' => + array( + 'currency_code' => 'USD', + 'value' => '180.00', + ), + 'shipping' => + array( + 'currency_code' => 'USD', + 'value' => '20.00', + ), + 'handling' => + array( + 'currency_code' => 'USD', + 'value' => '10.00', + ), + 'tax_total' => + array( + 'currency_code' => 'USD', + 'value' => '20.00', + ), + 'shipping_discount' => + array( + 'currency_code' => 'USD', + 'value' => '10.00', + ), + ), + ), + 'items' => + array( + 0 => + array( + 'name' => 'T-Shirt', + 'description' => 'Green XL', + 'sku' => 'sku01', + 'unit_amount' => + array( + 'currency_code' => 'USD', + 'value' => '90.00', + ), + 'tax' => + array( + 'currency_code' => 'USD', + 'value' => '10.00', + ), + 'quantity' => '1', + 'category' => 'PHYSICAL_GOODS', + ), + 1 => + array( + 'name' => 'Shoes', + 'description' => 'Running, Size 10.5', + 'sku' => 'sku02', + 'unit_amount' => + array( + 'currency_code' => 'USD', + 'value' => '45.00', + ), + 'tax' => + array( + 'currency_code' => 'USD', + 'value' => '5.00', + ), + 'quantity' => '2', + 'category' => 'PHYSICAL_GOODS', + ), + ), + 'shipping' => + array( + 'method' => 'United States Postal Service', + 'name' => + array( + 'full_name' => 'John Doe', + ), + 'address' => + array( + 'address_line_1' => '123 Townsend St', + 'address_line_2' => 'Floor 6', + 'admin_area_2' => 'San Francisco', + 'admin_area_1' => 'CA', + 'postal_code' => '94107', + 'country_code' => 'US', + ), + ), + ), + ), + ); + } + + /** + * Setting up the JSON request body for creating the Order with minimum request body. The Intent in the + * request body should be set as "AUTHORIZE" for authorize intent flow. + * + */ + private static function buildMinimumRequestBody() + { + return array( + 'intent' => 'AUTHORIZE', + 'application_context' => + array( + 'return_url' => 'https://example.com/return', + 'cancel_url' => 'https://example.com/cancel' + ), + 'purchase_units' => + array( + 0 => + array( + 'amount' => + array( + 'currency_code' => 'USD', + 'value' => '220.00' + ) + ) + ) + ); + } + + /** + * This is the sample function which can be used to create an order. It uses the + * JSON body returned by buildRequestBody() to create an new Order. + */ + public static function createOrder($debug=false) + { + $request = new OrdersCreateRequest(); + $request->headers["prefer"] = "return=representation"; + $request->body = CreateOrder::buildRequestBody(); + + $client = PayPalClient::client(); + $response = $client->execute($request); + if ($debug) + { + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Intent: {$response->result->intent}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + + print "Gross Amount: {$response->result->purchase_units[0]->amount->currency_code} {$response->result->purchase_units[0]->amount->value}\n"; + + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + + + return $response; + } + + /** + * This is the sample function which can be used to create an order. It uses the + * JSON body returned by buildMinimumRequestBody() to create an new Order. + */ + public static function createOrderWithMinimumBody($debug=false) + { + $request = new OrdersCreateRequest(); + $request->headers["prefer"] = "return=representation"; + $request->body = CreateOrder::buildMinimumRequestBody(); + + $client = PayPalClient::client(); + $response = $client->execute($request); + if ($debug) + { + print "Order With Minimum Body\n"; + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Intent: {$response->result->intent}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + + print "Gross Amount: {$response->result->purchase_units[0]->amount->currency_code} {$response->result->purchase_units[0]->amount->value}\n"; + + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + + + return $response; + } +} + + + +if (!count(debug_backtrace())) +{ + CreateOrder::createOrder(true); + CreateOrder::createOrderWithMinimumBody(true); +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/RunAll.php b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/RunAll.php new file mode 100644 index 000000000..708be9d68 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/AuthorizeIntentExamples/RunAll.php @@ -0,0 +1,82 @@ +statusCode == 201) +{ + $orderId = $order->result->id; + print "Links:\n"; + for ($i = 0; $i < count($order->result->links); ++$i) + { + $link = $order->result->links[$i]; + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + print "Created Successfully\n"; + print "Copy approve link and paste it in browser. Login with buyer account and follow the instructions.\nOnce approved hit enter...\n"; +} +else { + exit(1); +} + +$handle = fopen ("php://stdin","r"); +$line = fgets($handle); +fclose($handle); + +print "Authorizing Order...\n"; +$response = AuthorizeOrder::authorizeOrder($orderId); +$authId = ""; + +if ($response->statusCode == 201) +{ + print "Authorized Successfully\n"; + $authId = $response->result->purchase_units[0]->payments->authorizations[0]->id; +} +else { + exit(1); +} + +print "\nCapturing Order...\n"; +$response = CaptureOrder::captureOrder($authId); +if ($response->statusCode == 201) +{ + print "Captured Successfully\n"; + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + $captureId = $response->result->id; + print "Capture ID: {$captureId}\n"; + print "Links:\n"; + for ($i = 0; $i < count($response->result->links); ++$i){ + $link = $response->result->links[$i]; + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } +} +else { + exit(1); +} + +print "\nRefunding Order...\n"; +$response = RefundOrder::refundOrder($captureId); +if ($response->statusCode == 201) +{ + print "Refunded Successfully\n"; + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Refund ID: {$response->result->id}\n"; + print "Links:\n"; + for ($i = 0; $i < count($response->result->links); ++$i){ + $link = $response->result->links[$i]; + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } +} +else { + exit(1); +} diff --git a/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CaptureOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CaptureOrder.php new file mode 100644 index 000000000..931d5d95d --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CaptureOrder.php @@ -0,0 +1,60 @@ +execute($request); + if ($debug) + { + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + print "Capture Ids:\n"; + foreach($response->result->purchase_units as $purchase_unit) + { + foreach($purchase_unit->payments->captures as $capture) + { + print "\t{$capture->id}"; + } + } + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + + return $response; + } +} + +/** + * This is the driver function which invokes the captureOrder function with + * Approved Order Id to capture the order payment. + */ +if (!count(debug_backtrace())) +{ + CaptureOrder::captureOrder('0F105083N67049335', true); +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CreateOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CreateOrder.php new file mode 100644 index 000000000..37a8e6347 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/CreateOrder.php @@ -0,0 +1,178 @@ + 'CAPTURE', + 'application_context' => + array( + 'return_url' => 'https://example.com/return', + 'cancel_url' => 'https://example.com/cancel', + 'brand_name' => 'EXAMPLE INC', + 'locale' => 'en-US', + 'landing_page' => 'BILLING', + 'shipping_preference' => 'SET_PROVIDED_ADDRESS', + 'user_action' => 'PAY_NOW', + ), + 'purchase_units' => + array( + 0 => + array( + 'reference_id' => 'PUHF', + 'description' => 'Sporting Goods', + 'custom_id' => 'CUST-HighFashions', + 'soft_descriptor' => 'HighFashions', + 'amount' => + array( + 'currency_code' => 'USD', + 'value' => '220.00', + 'breakdown' => + array( + 'item_total' => + array( + 'currency_code' => 'USD', + 'value' => '180.00', + ), + 'shipping' => + array( + 'currency_code' => 'USD', + 'value' => '20.00', + ), + 'handling' => + array( + 'currency_code' => 'USD', + 'value' => '10.00', + ), + 'tax_total' => + array( + 'currency_code' => 'USD', + 'value' => '20.00', + ), + 'shipping_discount' => + array( + 'currency_code' => 'USD', + 'value' => '10.00', + ), + ), + ), + 'items' => + array( + 0 => + array( + 'name' => 'T-Shirt', + 'description' => 'Green XL', + 'sku' => 'sku01', + 'unit_amount' => + array( + 'currency_code' => 'USD', + 'value' => '90.00', + ), + 'tax' => + array( + 'currency_code' => 'USD', + 'value' => '10.00', + ), + 'quantity' => '1', + 'category' => 'PHYSICAL_GOODS', + ), + 1 => + array( + 'name' => 'Shoes', + 'description' => 'Running, Size 10.5', + 'sku' => 'sku02', + 'unit_amount' => + array( + 'currency_code' => 'USD', + 'value' => '45.00', + ), + 'tax' => + array( + 'currency_code' => 'USD', + 'value' => '5.00', + ), + 'quantity' => '2', + 'category' => 'PHYSICAL_GOODS', + ), + ), + 'shipping' => + array( + 'method' => 'United States Postal Service', + 'name' => + array( + 'full_name' => 'John Doe', + ), + 'address' => + array( + 'address_line_1' => '123 Townsend St', + 'address_line_2' => 'Floor 6', + 'admin_area_2' => 'San Francisco', + 'admin_area_1' => 'CA', + 'postal_code' => '94107', + 'country_code' => 'US', + ), + ), + ), + ), + ); + } + + /** + * This is the sample function which can be sued to create an order. It uses the + * JSON body returned by buildRequestBody() to create an new Order. + */ + public static function createOrder($debug=false) + { + $request = new OrdersCreateRequest(); + $request->headers["prefer"] = "return=representation"; + $request->body = self::buildRequestBody(); + + $client = PayPalClient::client(); + $response = $client->execute($request); + if ($debug) + { + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Intent: {$response->result->intent}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + + + return $response; + } +} + + +/** + * This is the driver function which invokes the createOrder function to create + * an sample order. + */ +if (!count(debug_backtrace())) +{ + CreateOrder::createOrder(true); +} + + + diff --git a/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/RunAll.php b/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/RunAll.php new file mode 100644 index 000000000..e576ff06e --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/CaptureIntentExamples/RunAll.php @@ -0,0 +1,74 @@ +statusCode == 201) +{ + $orderId = $order->result->id; + print "Links:\n"; + for ($i = 0; $i < count($order->result->links); ++$i) + { + $link = $order->result->links[$i]; + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + print "Created Successfully\n"; + print "Copy approve link and paste it in browser. Login with buyer account and follow the instructions.\nOnce approved hit enter...\n"; +} +else { + exit(1); +} + +$handle = fopen ("php://stdin","r"); +$line = fgets($handle); +fclose($handle); + +print "Capturing Order...\n"; +$response = CaptureOrder::captureOrder($orderId); +if ($response->statusCode == 201) +{ + print "Captured Successfully\n"; + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Links:\n"; + for ($i = 0; $i < count($response->result->links); ++$i){ + $link = $response->result->links[$i]; + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + foreach($response->result->purchase_units as $purchase_unit) + { + foreach($purchase_unit->payments->captures as $capture) + { + $captureId = $capture->id; + } + } +} +else { + exit(1); +} + +print "\nRefunding Order...\n"; +$response = RefundOrder::refundOrder($captureId); +if ($response->statusCode == 201) +{ + print "Refunded Successfully\n"; + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Refund ID: {$response->result->id}\n"; + print "Links:\n"; + for ($i = 0; $i < count($response->result->links); ++$i){ + $link = $response->result->links[$i]; + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } +} +else { + exit(1); +} diff --git a/vendor/paypal/paypal-checkout-sdk/samples/ErrorSample.php b/vendor/paypal/paypal-checkout-sdk/samples/ErrorSample.php new file mode 100644 index 000000000..8daf96b5e --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/ErrorSample.php @@ -0,0 +1,94 @@ + $val) + { + $pretty .= $pre . ucfirst($key) .": "; + if (strcmp(gettype($val), "array") == 0){ + $pretty .= "\n"; + $sno = 1; + foreach ($val as $value) + { + $pretty .= $pre . "\t" . $sno++ . ":\n"; + $pretty .= self::prettyPrint($value, $pre . "\t\t"); + } + } + else { + $pretty .= $val . "\n"; + } + } + return $pretty; + } + + /** + * Body has no required parameters (intent, purchase_units) + */ + public static function createError1() + { + $request = new OrdersCreateRequest(); + $request->body = "{}"; + print "Request Body: {}\n\n"; + + print "Response:\n"; + try{ + $client = PayPalClient::client(); + $response = $client->execute($request); + } + catch(HttpException $exception){ + $message = json_decode($exception->getMessage(), true); + print "Status Code: {$exception->statusCode}\n"; + print(self::prettyPrint($message)); + } + } + + /** + * Body has invalid parameter value for intent + */ + public static function createError2() + { + $request = new OrdersCreateRequest(); + $request->body = array ( + 'intent' => 'INVALID', + 'purchase_units' => + array ( + 0 => + array ( + 'amount' => + array ( + 'currency_code' => 'USD', + 'value' => '100.00', + ), + ), + ), + ); + print "Request Body:\n" . json_encode($request->body, JSON_PRETTY_PRINT) . "\n\n"; + + try{ + $client = PayPalClient::client(); + $response = $client->execute($request); + } + catch(HttpException $exception){ + print "Response:\n"; + $message = json_decode($exception->getMessage(), true); + print "Status Code: {$exception->statusCode}\n"; + print(self::prettyPrint($message)); + } + + } +} + +print "Calling createError1 (Body has no required parameters (intent, purchase_units))\n"; +ErrorSample::createError1(); + +print "\n\nCalling createError2 (Body has invalid parameter value for intent)\n"; +ErrorSample::createError2(); diff --git a/vendor/paypal/paypal-checkout-sdk/samples/GetOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/GetOrder.php new file mode 100644 index 000000000..f89ac9d56 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/GetOrder.php @@ -0,0 +1,54 @@ +execute(new OrdersGetRequest($orderId)); + /** + * Enable below line to print complete response as JSON. + */ + //print json_encode($response->result); + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Intent: {$response->result->intent}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + + print "Gross Amount: {$response->result->purchase_units[0]->amount->currency_code} {$response->result->purchase_units[0]->amount->value}\n"; + + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } +} + +/** + * This is the driver function which invokes the getOrder function to retrieve + * an sample order. + * + * To get the correct Order id, we are using the createOrder to create new order + * and then we are using the newly created order id. + */ +if (!count(debug_backtrace())) +{ + $createdOrder = CreateOrder::createOrder()->result; + GetOrder::getOrder($createdOrder ->id); +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/samples/PatchOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/PatchOrder.php new file mode 100644 index 000000000..cba8152e6 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/PatchOrder.php @@ -0,0 +1,82 @@ + + array ( + 'op' => 'replace', + 'path' => '/intent', + 'value' => 'CAPTURE', + ), + 1 => + array ( + 'op' => 'replace', + 'path' => '/purchase_units/@reference_id==\'PUHF\'/amount', + 'value' => + array ( + 'currency_code' => 'USD', + 'value' => '200.00', + 'breakdown' => + array ( + 'item_total' => + array ( + 'currency_code' => 'USD', + 'value' => '180.00', + ), + 'tax_total' => + array ( + 'currency_code' => 'USD', + 'value' => '20.00', + ), + ), + ), + ), + ); + } + + public static function patchOrder($orderId) + { + + $client = PayPalClient::client(); + + $request = new OrdersPatchRequest($orderId); + $request->body = PatchOrder::buildRequestBody(); + $client->execute($request); + + $response = $client->execute(new OrdersGetRequest($orderId)); + + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Intent: {$response->result->intent}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + + print "Gross Amount: {$response->result->purchase_units[0]->amount->currency_code} {$response->result->purchase_units[0]->amount->value}\n"; + + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } +} + +if (!count(debug_backtrace())) +{ + print "Before PATCH:\n"; + $createdOrder = CreateOrder::createOrder(true)->result; + print "\nAfter PATCH (Changed Intent and Amount):\n"; + PatchOrder::patchOrder($createdOrder->id); +} \ No newline at end of file diff --git a/vendor/paypal/paypal-checkout-sdk/samples/PayPalClient.php b/vendor/paypal/paypal-checkout-sdk/samples/PayPalClient.php new file mode 100644 index 000000000..397b8d2d8 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/PayPalClient.php @@ -0,0 +1,35 @@ +>"; + $clientSecret = getenv("CLIENT_SECRET") ?: "<>"; + return new SandboxEnvironment($clientId, $clientSecret); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/samples/RefundOrder.php b/vendor/paypal/paypal-checkout-sdk/samples/RefundOrder.php new file mode 100644 index 000000000..fc9428fd5 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/samples/RefundOrder.php @@ -0,0 +1,60 @@ + + array( + 'value' => '20.00', + 'currency_code' => 'USD' + ) + ); + } + + /** + * This function can be used to preform refund on the capture. + */ + public static function refundOrder($captureId, $debug=false) + { + $request = new CapturesRefundRequest($captureId); + $request->body = self::buildRequestBody(); + $client = PayPalClient::client(); + $response = $client->execute($request); + + if ($debug) + { + print "Status Code: {$response->statusCode}\n"; + print "Status: {$response->result->status}\n"; + print "Order ID: {$response->result->id}\n"; + print "Links:\n"; + foreach($response->result->links as $link) + { + print "\t{$link->rel}: {$link->href}\tCall Type: {$link->method}\n"; + } + // To toggle printing the whole response body comment/uncomment below line + echo json_encode($response->result, JSON_PRETTY_PRINT), "\n"; + } + return $response; + } +} + +/** + * This is the driver function which invokes the refund capture function with + * Capture Id to perform refund on capture. + */ +if (!count(debug_backtrace())) +{ + RefundOrder::refundOrder('8XL09935J2224701N', true); +} diff --git a/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersAuthorizeTest.php b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersAuthorizeTest.php new file mode 100644 index 000000000..981ce2656 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersAuthorizeTest.php @@ -0,0 +1,26 @@ +markTestSkipped("Need an approved Order ID to execute this test."); + $request = new OrdersAuthorizeRequest('ORDER-ID'); + $request->body = $this->buildRequestBody(); + + $client = TestHarness::client(); + $response = $client->execute($request); + $this->assertEquals(201, $response->statusCode); + $this->assertNotNull($response->result); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCaptureTest.php b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCaptureTest.php new file mode 100644 index 000000000..683f70c59 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCaptureTest.php @@ -0,0 +1,26 @@ +markTestSkipped("Need an approved Order ID to execute this test."); + $request = new OrdersCaptureRequest('ORDER-ID'); + + $client = TestHarness::client(); + $response = $client->execute($request); + $this->assertEquals(201, $response->statusCode); + $this->assertNotNull($response->result); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCreateTest.php b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCreateTest.php new file mode 100644 index 000000000..d2d6dad6d --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersCreateTest.php @@ -0,0 +1,69 @@ + "CAPTURE", + "purchase_units" => [[ + "reference_id" => "test_ref_id1", + "amount" => [ + "value" => "100.00", + "currency_code" => "USD" + ] + ]], + "redirect_urls" => [ + "cancel_url" => "https://example.com/cancel", + "return_url" => "https://example.com/return" + ] + ]; + } + + public static function create($client) { + $request = new OrdersCreateRequest(); + $request->prefer("return=representation"); + $request->body = self::buildRequestBody(); + return $client->execute($request); + } + + public function testOrdersCreateRequest() + { + $client = TestHarness::client(); + $response = self::create($client); + $this->assertEquals(201, $response->statusCode); + $this->assertNotNull($response->result); + + $createdOrder = $response->result; + $this->assertNotNull($createdOrder->id); + $this->assertNotNull($createdOrder->purchase_units); + $this->assertEquals(1, count($createdOrder->purchase_units)); + $firstPurchaseUnit = $createdOrder->purchase_units[0]; + $this->assertEquals("test_ref_id1", $firstPurchaseUnit->reference_id); + $this->assertEquals("USD", $firstPurchaseUnit->amount->currency_code); + $this->assertEquals("100.00", $firstPurchaseUnit->amount->value); + + $this->assertNotNull($createdOrder->create_time); + $this->assertNotNull($createdOrder->links); + $foundApproveUrl = false; + foreach ($createdOrder->links as $link) { + if ("approve" === $link->rel) { + $foundApproveUrl = true; + $this->assertNotNull($link->href); + $this->assertEquals("GET", $link->method); + } + } + $this->assertTrue($foundApproveUrl); + $this->assertEquals("CREATED", $createdOrder->status); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersGetTest.php b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersGetTest.php new file mode 100644 index 000000000..12fb9b0f8 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersGetTest.php @@ -0,0 +1,48 @@ +result->id); + $response = $client->execute($request); + $this->assertEquals(200, $response->statusCode); + $this->assertNotNull($response->result); + + $createdOrder = $response->result; + $this->assertNotNull($createdOrder->id); + $this->assertNotNull($createdOrder->purchase_units); + $this->assertEquals(1, count($createdOrder->purchase_units)); + $firstPurchaseUnit = $createdOrder->purchase_units[0]; + $this->assertEquals("test_ref_id1", $firstPurchaseUnit->reference_id); + $this->assertEquals("USD", $firstPurchaseUnit->amount->currency_code); + $this->assertEquals("100.00", $firstPurchaseUnit->amount->value); + + $this->assertNotNull($createdOrder->create_time); + $this->assertNotNull($createdOrder->links); + $foundApproveUrl = false; + foreach ($createdOrder->links as $link) { + if ("approve" === $link->rel) { + $foundApproveUrl = true; + $this->assertNotNull($link->href); + $this->assertEquals("GET", $link->method); + } + } + $this->assertTrue($foundApproveUrl); + $this->assertEquals("CREATED", $createdOrder->status); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersPatchTest.php b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersPatchTest.php new file mode 100644 index 000000000..1eaa30710 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/tests/Orders/OrdersPatchTest.php @@ -0,0 +1,73 @@ + "add", + "path" => "/purchase_units/@reference_id=='test_ref_id1'/description", + "value" => "added_description" + ], + [ + "op" => "replace", + "path" => "/purchase_units/@reference_id=='test_ref_id1'/amount", + "value" => [ + "currency_code" => "USD", + "value" => "200.00" + ] + ] + ]; + } + + public function testOrdersPatchRequest() + { + $client = TestHarness::client(); + $createdOrder = OrdersCreateTest::create($client); + + $request = new OrdersPatchRequest($createdOrder->result->id); + $request->body = $this->buildRequestBody(); + $response = $client->execute($request); + $this->assertEquals(204, $response->statusCode); + + $request = new OrdersGetRequest($createdOrder->result->id); + $response = $client->execute($request); + $this->assertEquals(200, $response->statusCode); + $this->assertNotNull($response->result); + + $createdOrder = $response->result; + $this->assertNotNull($createdOrder->id); + $this->assertNotNull($createdOrder->purchase_units); + $this->assertEquals(1, count($createdOrder->purchase_units)); + $firstPurchaseUnit = $createdOrder->purchase_units[0]; + $this->assertEquals("test_ref_id1", $firstPurchaseUnit->reference_id); + $this->assertEquals("USD", $firstPurchaseUnit->amount->currency_code); + $this->assertEquals("200.00", $firstPurchaseUnit->amount->value); + $this->assertEquals("added_description", $firstPurchaseUnit->description); + + $this->assertNotNull($createdOrder->create_time); + $this->assertNotNull($createdOrder->links); + $foundApproveUrl = false; + foreach ($createdOrder->links as $link) { + if ("approve" === $link->rel) { + $foundApproveUrl = true; + $this->assertNotNull($link->href); + $this->assertEquals("GET", $link->method); + } + } + $this->assertTrue($foundApproveUrl); + $this->assertEquals("CREATED", $createdOrder->status); + } +} diff --git a/vendor/paypal/paypal-checkout-sdk/tests/TestHarness.php b/vendor/paypal/paypal-checkout-sdk/tests/TestHarness.php new file mode 100644 index 000000000..66b4abe20 --- /dev/null +++ b/vendor/paypal/paypal-checkout-sdk/tests/TestHarness.php @@ -0,0 +1,24 @@ +>"; + $clientSecret = getenv("CLIENT_SECRET") ?: "<>"; + return new SandboxEnvironment($clientId, $clientSecret); + } +} diff --git a/vendor/paypal/paypalhttp/.gitattributes b/vendor/paypal/paypalhttp/.gitattributes new file mode 100644 index 000000000..ec6c2f559 --- /dev/null +++ b/vendor/paypal/paypalhttp/.gitattributes @@ -0,0 +1,7 @@ +tests/ export-ignore +.idea/ export-ignore +.github/ export-ignore +.releasinator.rb export-ignore +Gemfile export-ignore +Gemfile.lock export-ignore + diff --git a/vendor/paypal/paypalhttp/.gitignore b/vendor/paypal/paypalhttp/.gitignore new file mode 100644 index 000000000..2efb91fec --- /dev/null +++ b/vendor/paypal/paypalhttp/.gitignore @@ -0,0 +1,32 @@ +.DS_Store +/vendor/ +composer.phar +composer.lock + +# User-specific stuff: +.idea/**/workspace.xml +.idea/**/tasks.xml +.idea/dictionaries + +.idea/codeStyles/Project.xml +.idea/codeStyles/codeStyleConfig.xml +.idea/* + +# Sensitive or high-churn files: +.idea/**/dataSources/ +.idea/**/dataSources.ids +.idea/**/dataSources.xml +.idea/**/dataSources.local.xml +.idea/**/sqlDataSources.xml +.idea/**/dynamic.xml +.idea/**/uiDesigner.xml + +## File-based project format: +*.iws +.idea/*.iml +.idea/vcs.xml +.idea/php.xml +.idea/php-test-framework.xml +.idea/modules.xml +__files/* +mappings/* diff --git a/vendor/paypal/paypalhttp/.travis.yml b/vendor/paypal/paypalhttp/.travis.yml new file mode 100644 index 000000000..4fddbb983 --- /dev/null +++ b/vendor/paypal/paypalhttp/.travis.yml @@ -0,0 +1,16 @@ +sudo: false +language: php +php: +- 5.6 +- 7.0 +- 7.1 +- hhvm +matrix: + allow_failures: + - php: hhvm + fast_finish: true +before_script: +- composer self-update +- composer install --dev +script: +- vendor/bin/phpunit diff --git a/vendor/paypal/paypalhttp/CHANGELOG.md b/vendor/paypal/paypalhttp/CHANGELOG.md new file mode 100644 index 000000000..f55b90762 --- /dev/null +++ b/vendor/paypal/paypalhttp/CHANGELOG.md @@ -0,0 +1,2 @@ +## 1.0.0 +- First release diff --git a/vendor/paypal/paypalhttp/CONTRIBUTING.md b/vendor/paypal/paypalhttp/CONTRIBUTING.md new file mode 100644 index 000000000..3810a58ed --- /dev/null +++ b/vendor/paypal/paypalhttp/CONTRIBUTING.md @@ -0,0 +1,10 @@ +# Contribute to the PayPal PHP HttpClient + +### *Pull requests are welcome!* + +General Guidelines +------------------ + +* **Code style.** Please follow local code style. Ask if you're unsure. +* **No warnings.** All generated code must compile without warnings. + diff --git a/vendor/paypal/paypalhttp/LICENSE b/vendor/paypal/paypalhttp/LICENSE new file mode 100644 index 000000000..c689d7426 --- /dev/null +++ b/vendor/paypal/paypalhttp/LICENSE @@ -0,0 +1,23 @@ +Copyright (c) 2009-2016 PayPal, Inc. + +Permission is hereby granted, free of charge, to any person +obtaining a copy of this software and associated documentation +files (the "Software"), to deal in the Software without +restriction, including without limitation the rights to use, +copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the +Software is furnished to do so, subject to the following +conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES +OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND +NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT +HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, +WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +OTHER DEALINGS IN THE SOFTWARE. + diff --git a/vendor/paypal/paypalhttp/README.md b/vendor/paypal/paypalhttp/README.md new file mode 100644 index 000000000..c4bc95848 --- /dev/null +++ b/vendor/paypal/paypalhttp/README.md @@ -0,0 +1,76 @@ +## PayPal HttpClient + +PayPalHttp is a generic HTTP Client. + +In it's simplest form, an [`HttpClient`](lib/PayPalHttp/HttpClient.php) exposes an `execute` method which takes an [HTTP request](lib/PayPalHttp/HttpRequest.php), executes it against the domain described in an [Environment](lib/PayPalHttp/Environment.php), and returns an [HTTP response](lib/PayPalHttp/HttpResponse.php). + +### Environment + +An [`Environment`](./lib/PayPalHttp/environment.rb) describes a domain that hosts a REST API, against which an `HttpClient` will make requests. `Environment` is a simple interface that wraps one method, `baseUrl`. + +```php +$env = new Environment('https://example.com'); +``` + +### Requests + +HTTP requests contain all the information needed to make an HTTP request against the REST API. Specifically, one request describes a path, a verb, any path/query/form parameters, headers, attached files for upload, and body data. + +### Responses + +HTTP responses contain information returned by a server in response to a request as described above. They are simple objects which contain a status code, headers, and any data returned by the server. + +```php +$request = new HttpRequest("/path", "GET"); +$request->body[] = "some data"; + +$response = $client->execute($req); + +$statusCode = $response->statusCode; +$headers = $response->headers; +$data = $response->result; +``` + +### Injectors + +Injectors are blocks that can be used for executing arbitrary pre-flight logic, such as modifying a request or logging data. Injectors are attached to an `HttpClient` using the `addInjector` method. + +The `HttpClient` executes its injectors in a first-in, first-out order, before each request. + +```php +class LogInjector implements Injector +{ + public function inject($httpRequest) + { + // Do some logging here + } +} + +$logInjector = new LogInjector(); +$client = new HttpClient($environment); +$client->addInjector($logInjector); +... +``` + +### Error Handling + +`HttpClient#execute` may throw an `Exception` if something went wrong during the course of execution. If the server returned a non-200 response, [IOException](lib/PayPalHttp/IOException.php) will be thrown, that will contain a status code and headers you can use for debugging. + +```php +try +{ + $client->execute($req); +} +catch (HttpException $e) +{ + $statusCode = $e->response->statusCode; + $headers = $e->response->headers; + $body = $e->response->result; +} +``` + +## License +PayPalHttp-PHP is open source and available under the MIT license. See the [LICENSE](./LICENSE) file for more information. + +## Contributing +Pull requests and issues are welcome. Please see [CONTRIBUTING.md](./CONTRIBUTING.md) for more details. diff --git a/vendor/paypal/paypalhttp/Rakefile b/vendor/paypal/paypalhttp/Rakefile new file mode 100644 index 000000000..33a443c3a --- /dev/null +++ b/vendor/paypal/paypalhttp/Rakefile @@ -0,0 +1,2 @@ +spec = Gem::Specification.find_by_name 'releasinator' +load "#{spec.gem_dir}/lib/tasks/releasinator.rake" diff --git a/vendor/paypal/paypalhttp/composer.json b/vendor/paypal/paypalhttp/composer.json new file mode 100644 index 000000000..05728a340 --- /dev/null +++ b/vendor/paypal/paypalhttp/composer.json @@ -0,0 +1,23 @@ +{ + "name": "paypal/paypalhttp", + "type": "library", + "license": "MIT", + "authors": [ + { + "name": "PayPal", + "homepage": "https://github.com/paypal/paypalhttp_php/contributors" + } + ], + "require": { + "ext-curl": "*" + }, + "require-dev": { + "phpunit/phpunit": "^5.7", + "wiremock-php/wiremock-php": "1.43.2" + }, + "autoload": { + "psr-4": { + "PayPalHttp\\": "lib/PayPalHttp" + } + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Curl.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Curl.php new file mode 100644 index 000000000..08e6eaf8f --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Curl.php @@ -0,0 +1,57 @@ +curl = $curl; + } + + public function setOpt($option, $value) + { + curl_setopt($this->curl, $option, $value); + return $this; + } + + public function close() + { + curl_close($this->curl); + return $this; + } + + public function exec() + { + return curl_exec($this->curl); + } + + public function errNo() + { + return curl_errno($this->curl); + } + + public function getInfo($option) + { + return curl_getinfo($this->curl, $option); + } + + public function error() + { + return curl_error($this->curl); + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Encoder.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Encoder.php new file mode 100644 index 000000000..b7158a78f --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Encoder.php @@ -0,0 +1,114 @@ +serializers[] = new Json(); + $this->serializers[] = new Text(); + $this->serializers[] = new Multipart(); + $this->serializers[] = new Form(); + } + + + + public function serializeRequest(HttpRequest $request) + { + if (!array_key_exists('content-type', $request->headers)) { + $message = "HttpRequest does not have Content-Type header set"; + echo $message; + throw new \Exception($message); + } + + $contentType = $request->headers['content-type']; + /** @var Serializer $serializer */ + $serializer = $this->serializer($contentType); + + if (is_null($serializer)) { + $message = sprintf("Unable to serialize request with Content-Type: %s. Supported encodings are: %s", $contentType, implode(", ", $this->supportedEncodings())); + echo $message; + throw new \Exception($message); + } + + if (!(is_string($request->body) || is_array($request->body))) { + $message = "Body must be either string or array"; + echo $message; + throw new \Exception($message); + } + + $serialized = $serializer->encode($request); + + if (array_key_exists("content-encoding", $request->headers) && $request->headers["content-encoding"] === "gzip") { + $serialized = gzencode($serialized); + } + return $serialized; + } + + + public function deserializeResponse($responseBody, $headers) + { + + if (!array_key_exists('content-type', $headers)) { + $message = "HTTP response does not have Content-Type header set"; + echo $message; + throw new \Exception($message); + } + + $contentType = $headers['content-type']; + /** @var Serializer $serializer */ + $serializer = $this->serializer($contentType); + + if (is_null($serializer)) { + throw new \Exception(sprintf("Unable to deserialize response with Content-Type: %s. Supported encodings are: %s", $contentType, implode(", ", $this->supportedEncodings()))); + } + + if (array_key_exists("content-encoding", $headers) && $headers["content-encoding"] === "gzip") { + $responseBody = gzdecode($responseBody); + } + + return $serializer->decode($responseBody); + } + + private function serializer($contentType) + { + /** @var Serializer $serializer */ + foreach ($this->serializers as $serializer) { + try { + if (preg_match($serializer->contentType(), $contentType) == 1) { + return $serializer; + } + } catch (\Exception $ex) { + $message = sprintf("Error while checking content type of %s: %s", get_class($serializer), $ex->getMessage()); + echo $message; + throw new \Exception($message, $ex->getCode(), $ex); + } + } + + return NULL; + } + + private function supportedEncodings() + { + $values = []; + /** @var Serializer $serializer */ + foreach ($this->serializers as $serializer) { + $values[] = $serializer->contentType(); + } + return $values; + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Environment.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Environment.php new file mode 100644 index 000000000..4eb0ce097 --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Environment.php @@ -0,0 +1,18 @@ +environment = $environment; + $this->encoder = new Encoder(); + $this->curlCls = Curl::class; + } + + /** + * Injectors are blocks that can be used for executing arbitrary pre-flight logic, such as modifying a request or logging data. + * Executed in first-in first-out order. + * + * @param Injector $inj + */ + public function addInjector(Injector $inj) + { + $this->injectors[] = $inj; + } + + /** + * The method that takes an HTTP request, serializes the request, makes a call to given environment, and deserialize response + * + * @param $httpRequest HttpRequest + * @return HttpResponse + */ + public function execute(HttpRequest $httpRequest) + { + $requestCpy = clone $httpRequest; + $curl = new Curl(); + + foreach ($this->injectors as $inj) { + $inj->inject($requestCpy); + } + + $url = $this->environment->baseUrl() . $requestCpy->path; + $formattedHeaders = $this->prepareHeaders($requestCpy->headers); + if (!array_key_exists("user-agent", $formattedHeaders)) { + $requestCpy->headers["user-agent"] = $this->userAgent(); + } + + $body = ""; + if (!is_null($requestCpy->body)) { + $rawHeaders = $requestCpy->headers; + $requestCpy->headers = $formattedHeaders; + $body = $this->encoder->serializeRequest($requestCpy); + $requestCpy->headers = $this->mapHeaders($rawHeaders,$requestCpy->headers); + } + + $curl->setOpt(CURLOPT_URL, $url); + $curl->setOpt(CURLOPT_CUSTOMREQUEST, $requestCpy->verb); + $curl->setOpt(CURLOPT_HTTPHEADER, $this->serializeHeaders($requestCpy->headers)); + $curl->setOpt(CURLOPT_RETURNTRANSFER, 1); + $curl->setOpt(CURLOPT_HEADER, 0); + + if (!is_null($requestCpy->body)) { + $curl->setOpt(CURLOPT_POSTFIELDS, $body); + } + + if (strpos($this->environment->baseUrl(), "https://") === 0) { + $curl->setOpt(CURLOPT_SSL_VERIFYPEER, true); + $curl->setOpt(CURLOPT_SSL_VERIFYHOST, 2); + } + + if ($caCertPath = $this->getCACertFilePath()) { + $curl->setOpt(CURLOPT_CAINFO, $caCertPath); + } + + $response = $this->parseResponse($curl); + $curl->close(); + + return $response; + } + + /** + * Returns an array representing headers with their keys + * to be lower case + * @param $headers + * @return array + */ + public function prepareHeaders($headers){ + return array_change_key_case($headers); + } + + /** + * Returns an array representing headers with their key in + * original cases and updated values + * @param $rawHeaders + * @param $formattedHeaders + * @return array + */ + public function mapHeaders($rawHeaders, $formattedHeaders){ + $rawHeadersKey = array_keys($rawHeaders); + foreach ($rawHeadersKey as $array_key) { + if(array_key_exists(strtolower($array_key), $formattedHeaders)){ + $rawHeaders[$array_key] = $formattedHeaders[strtolower($array_key)]; + } + } + return $rawHeaders; + } + + /** + * Returns default user-agent + * + * @return string + */ + public function userAgent() + { + return "PayPalHttp-PHP HTTP/1.1"; + } + + /** + * Return the filepath to your custom CA Cert if needed. + * @return string + */ + protected function getCACertFilePath() + { + return null; + } + + protected function setCurl(Curl $curl) + { + $this->curl = $curl; + } + + protected function setEncoder(Encoder $encoder) + { + $this->encoder = $encoder; + } + + private function serializeHeaders($headers) + { + $headerArray = []; + if ($headers) { + foreach ($headers as $key => $val) { + $headerArray[] = $key . ": " . $val; + } + } + + return $headerArray; + } + + private function parseResponse($curl) + { + $headers = []; + $curl->setOpt(CURLOPT_HEADERFUNCTION, + function($curl, $header) use (&$headers) + { + $len = strlen($header); + + $k = ""; + $v = ""; + + $this->deserializeHeader($header, $k, $v); + $headers[$k] = $v; + + return $len; + }); + + $responseData = $curl->exec(); + $statusCode = $curl->getInfo(CURLINFO_HTTP_CODE); + $errorCode = $curl->errNo(); + $error = $curl->error(); + + if ($errorCode > 0) { + throw new IOException($error, $errorCode); + } + + $body = $responseData; + + if ($statusCode >= 200 && $statusCode < 300) { + $responseBody = NULL; + + if (!empty($body)) { + $responseBody = $this->encoder->deserializeResponse($body, $this->prepareHeaders($headers)); + } + + return new HttpResponse( + $errorCode === 0 ? $statusCode : $errorCode, + $responseBody, + $headers + ); + } else { + throw new HttpException($body, $statusCode, $headers); + } + } + + private function deserializeHeader($header, &$key, &$value) + { + if (strlen($header) > 0) { + if (empty($header) || strpos($header, ':') === false) { + return NULL; + } + + list($k, $v) = explode(":", $header); + $key = trim($k); + $value = trim($v); + } + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpException.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpException.php new file mode 100644 index 000000000..5f4d2dbc6 --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpException.php @@ -0,0 +1,23 @@ +statusCode = $statusCode; + $this->headers = $headers; + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpRequest.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpRequest.php new file mode 100644 index 000000000..89b74801b --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpRequest.php @@ -0,0 +1,42 @@ +path = $path; + $this->verb = $verb; + $this->body = NULL; + $this->headers = []; + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpResponse.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpResponse.php new file mode 100644 index 000000000..ef8fb351d --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/HttpResponse.php @@ -0,0 +1,34 @@ +statusCode = $statusCode; + $this->headers = $headers; + $this->result = $body; + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/IOException.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/IOException.php new file mode 100644 index 000000000..7bfc91cea --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/IOException.php @@ -0,0 +1,13 @@ +body) || !$this->isAssociative($request->body)) + { + throw new \Exception("HttpRequest body must be an associative array when Content-Type is: " . $request->headers["Content-Type"]); + } + + return http_build_query($request->body); + } + + /** + * @param $body + * @return mixed + * @throws \Exception as multipart does not support deserialization. + */ + public function decode($body) + { + throw new \Exception("CurlSupported does not support deserialization"); + } + + private function isAssociative(array $array) + { + return array_values($array) !== $array; + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/FormPart.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/FormPart.php new file mode 100644 index 000000000..3779a9b58 --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/FormPart.php @@ -0,0 +1,25 @@ +value = $value; + $this->headers = array_merge([], $headers); + } + + public function getValue() + { + return $this->value; + } + + public function getHeaders() + { + return $this->headers; + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Json.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Json.php new file mode 100644 index 000000000..3f66314aa --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Json.php @@ -0,0 +1,38 @@ +body; + if (is_string($body)) { + return $body; + } + if (is_array($body)) { + return json_encode($body); + } + throw new \Exception("Cannot serialize data. Unknown type"); + } + + public function decode($data) + { + return json_decode($data); + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Multipart.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Multipart.php new file mode 100644 index 000000000..a4202051e --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Multipart.php @@ -0,0 +1,134 @@ +body) || !$this->isAssociative($request->body)) + { + throw new \Exception("HttpRequest body must be an associative array when Content-Type is: " . $request->headers["content-type"]); + } + $boundary = "---------------------" . md5(mt_rand() . microtime()); + $contentTypeHeader = $request->headers["content-type"]; + $request->headers["content-type"] = "{$contentTypeHeader}; boundary={$boundary}"; + + $value_params = []; + $file_params = []; + + $disallow = ["\0", "\"", "\r", "\n"]; + + $body = []; + + foreach ($request->body as $k => $v) { + $k = str_replace($disallow, "_", $k); + if (is_resource($v)) { + $file_params[] = $this->prepareFilePart($k, $v, $boundary); + } else if ($v instanceof FormPart) { + $value_params[] = $this->prepareFormPart($k, $v, $boundary); + } else { + $value_params[] = $this->prepareFormField($k, $v, $boundary); + } + } + + $body = array_merge($value_params, $file_params); + + // add boundary for each parameters + array_walk($body, function (&$part) use ($boundary) { + $part = "--{$boundary}" . self::LINEFEED . "{$part}"; + }); + + // add final boundary + $body[] = "--{$boundary}--"; + $body[] = ""; + + return implode(self::LINEFEED, $body); + } + + public function decode($data) + { + throw new \Exception("Multipart does not support deserialization"); + } + + private function isAssociative(array $array) + { + return array_values($array) !== $array; + } + + private function prepareFormField($partName, $value, $boundary) + { + return implode(self::LINEFEED, [ + "Content-Disposition: form-data; name=\"{$partName}\"", + "", + filter_var($value), + ]); + } + + private function prepareFilePart($partName, $file, $boundary) + { + $fileInfo = new finfo(FILEINFO_MIME_TYPE); + $filePath = stream_get_meta_data($file)['uri']; + $data = file_get_contents($filePath); + $mimeType = $fileInfo->buffer($data); + + $splitFilePath = explode(DIRECTORY_SEPARATOR, $filePath); + $filePath = end($splitFilePath); + $disallow = ["\0", "\"", "\r", "\n"]; + $filePath = str_replace($disallow, "_", $filePath); + return implode(self::LINEFEED, [ + "Content-Disposition: form-data; name=\"{$partName}\"; filename=\"{$filePath}\"", + "Content-Type: {$mimeType}", + "", + $data, + ]); + } + + private function prepareFormPart($partName, $formPart, $boundary) + { + $contentDisposition = "Content-Disposition: form-data; name=\"{$partName}\""; + + $partHeaders = $formPart->getHeaders(); + $formattedheaders = array_change_key_case($partHeaders); + if (array_key_exists("content-type", $formattedheaders)) { + if ($formattedheaders["content-type"] === "application/json") { + $contentDisposition .= "; filename=\"{$partName}.json\""; + } + $tempRequest = new HttpRequest('/', 'POST'); + $tempRequest->headers = $formattedheaders; + $tempRequest->body = $formPart->getValue(); + $encoder = new Encoder(); + $partValue = $encoder->serializeRequest($tempRequest); + } else { + $partValue = $formPart->getValue(); + } + + $finalPartHeaders = []; + foreach ($partHeaders as $k => $v) { + $finalPartHeaders[] = "{$k}: {$v}"; + } + + $body = array_merge([$contentDisposition], $finalPartHeaders, [""], [$partValue]); + + return implode(self::LINEFEED, $body); + } +} diff --git a/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Text.php b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Text.php new file mode 100644 index 000000000..e2ce0cade --- /dev/null +++ b/vendor/paypal/paypalhttp/lib/PayPalHttp/Serializer/Text.php @@ -0,0 +1,38 @@ +body; + if (is_string($body)) { + return $body; + } + if (is_array($body)) { + return json_encode($body); + } + return implode(" ", $body); + } + + public function decode($data) + { + return $data; + } +} diff --git a/vendor/paypal/paypalhttp/phpunit.xml b/vendor/paypal/paypalhttp/phpunit.xml new file mode 100644 index 000000000..ea8427851 --- /dev/null +++ b/vendor/paypal/paypalhttp/phpunit.xml @@ -0,0 +1,10 @@ + + + + + + ./tests/unit + + + + diff --git a/vendor/phpmailer/phpmailer/COMMITMENT b/vendor/phpmailer/phpmailer/COMMITMENT new file mode 100644 index 000000000..a687e0ddb --- /dev/null +++ b/vendor/phpmailer/phpmailer/COMMITMENT @@ -0,0 +1,46 @@ +GPL Cooperation Commitment +Version 1.0 + +Before filing or continuing to prosecute any legal proceeding or claim +(other than a Defensive Action) arising from termination of a Covered +License, we commit to extend to the person or entity ('you') accused +of violating the Covered License the following provisions regarding +cure and reinstatement, taken from GPL version 3. As used here, the +term 'this License' refers to the specific Covered License being +enforced. + + However, if you cease all violation of this License, then your + license from a particular copyright holder is reinstated (a) + provisionally, unless and until the copyright holder explicitly + and finally terminates your license, and (b) permanently, if the + copyright holder fails to notify you of the violation by some + reasonable means prior to 60 days after the cessation. + + Moreover, your license from a particular copyright holder is + reinstated permanently if the copyright holder notifies you of the + violation by some reasonable means, this is the first time you + have received notice of violation of this License (for any work) + from that copyright holder, and you cure the violation prior to 30 + days after your receipt of the notice. + +We intend this Commitment to be irrevocable, and binding and +enforceable against us and assignees of or successors to our +copyrights. + +Definitions + +'Covered License' means the GNU General Public License, version 2 +(GPLv2), the GNU Lesser General Public License, version 2.1 +(LGPLv2.1), or the GNU Library General Public License, version 2 +(LGPLv2), all as published by the Free Software Foundation. + +'Defensive Action' means a legal proceeding or claim that We bring +against you in response to a prior proceeding or claim initiated by +you or your affiliate. + +'We' means each contributor to this repository as of the date of +inclusion of this file, including subsidiaries of a corporate +contributor. + +This work is available under a Creative Commons Attribution-ShareAlike +4.0 International license (https://creativecommons.org/licenses/by-sa/4.0/). diff --git a/vendor/phpmailer/phpmailer/LICENSE b/vendor/phpmailer/phpmailer/LICENSE new file mode 100644 index 000000000..f166cc57b --- /dev/null +++ b/vendor/phpmailer/phpmailer/LICENSE @@ -0,0 +1,502 @@ + GNU LESSER GENERAL PUBLIC LICENSE + Version 2.1, February 1999 + + Copyright (C) 1991, 1999 Free Software Foundation, Inc. + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + +[This is the first released version of the Lesser GPL. It also counts + as the successor of the GNU Library Public License, version 2, hence + the version number 2.1.] + + Preamble + + The licenses for most software are designed to take away your +freedom to share and change it. By contrast, the GNU General Public +Licenses are intended to guarantee your freedom to share and change +free software--to make sure the software is free for all its users. + + This license, the Lesser General Public License, applies to some +specially designated software packages--typically libraries--of the +Free Software Foundation and other authors who decide to use it. You +can use it too, but we suggest you first think carefully about whether +this license or the ordinary General Public License is the better +strategy to use in any particular case, based on the explanations below. + + When we speak of free software, we are referring to freedom of use, +not price. Our General Public Licenses are designed to make sure that +you have the freedom to distribute copies of free software (and charge +for this service if you wish); that you receive source code or can get +it if you want it; that you can change the software and use pieces of +it in new free programs; and that you are informed that you can do +these things. + + To protect your rights, we need to make restrictions that forbid +distributors to deny you these rights or to ask you to surrender these +rights. These restrictions translate to certain responsibilities for +you if you distribute copies of the library or if you modify it. + + For example, if you distribute copies of the library, whether gratis +or for a fee, you must give the recipients all the rights that we gave +you. You must make sure that they, too, receive or can get the source +code. If you link other code with the library, you must provide +complete object files to the recipients, so that they can relink them +with the library after making changes to the library and recompiling +it. And you must show them these terms so they know their rights. + + We protect your rights with a two-step method: (1) we copyright the +library, and (2) we offer you this license, which gives you legal +permission to copy, distribute and/or modify the library. + + To protect each distributor, we want to make it very clear that +there is no warranty for the free library. Also, if the library is +modified by someone else and passed on, the recipients should know +that what they have is not the original version, so that the original +author's reputation will not be affected by problems that might be +introduced by others. + + Finally, software patents pose a constant threat to the existence of +any free program. We wish to make sure that a company cannot +effectively restrict the users of a free program by obtaining a +restrictive license from a patent holder. Therefore, we insist that +any patent license obtained for a version of the library must be +consistent with the full freedom of use specified in this license. + + Most GNU software, including some libraries, is covered by the +ordinary GNU General Public License. This license, the GNU Lesser +General Public License, applies to certain designated libraries, and +is quite different from the ordinary General Public License. We use +this license for certain libraries in order to permit linking those +libraries into non-free programs. + + When a program is linked with a library, whether statically or using +a shared library, the combination of the two is legally speaking a +combined work, a derivative of the original library. The ordinary +General Public License therefore permits such linking only if the +entire combination fits its criteria of freedom. The Lesser General +Public License permits more lax criteria for linking other code with +the library. + + We call this license the "Lesser" General Public License because it +does Less to protect the user's freedom than the ordinary General +Public License. It also provides other free software developers Less +of an advantage over competing non-free programs. These disadvantages +are the reason we use the ordinary General Public License for many +libraries. However, the Lesser license provides advantages in certain +special circumstances. + + For example, on rare occasions, there may be a special need to +encourage the widest possible use of a certain library, so that it becomes +a de-facto standard. To achieve this, non-free programs must be +allowed to use the library. A more frequent case is that a free +library does the same job as widely used non-free libraries. In this +case, there is little to gain by limiting the free library to free +software only, so we use the Lesser General Public License. + + In other cases, permission to use a particular library in non-free +programs enables a greater number of people to use a large body of +free software. For example, permission to use the GNU C Library in +non-free programs enables many more people to use the whole GNU +operating system, as well as its variant, the GNU/Linux operating +system. + + Although the Lesser General Public License is Less protective of the +users' freedom, it does ensure that the user of a program that is +linked with the Library has the freedom and the wherewithal to run +that program using a modified version of the Library. + + The precise terms and conditions for copying, distribution and +modification follow. Pay close attention to the difference between a +"work based on the library" and a "work that uses the library". The +former contains code derived from the library, whereas the latter must +be combined with the library in order to run. + + GNU LESSER GENERAL PUBLIC LICENSE + TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION + + 0. This License Agreement applies to any software library or other +program which contains a notice placed by the copyright holder or +other authorized party saying it may be distributed under the terms of +this Lesser General Public License (also called "this License"). +Each licensee is addressed as "you". + + A "library" means a collection of software functions and/or data +prepared so as to be conveniently linked with application programs +(which use some of those functions and data) to form executables. + + The "Library", below, refers to any such software library or work +which has been distributed under these terms. A "work based on the +Library" means either the Library or any derivative work under +copyright law: that is to say, a work containing the Library or a +portion of it, either verbatim or with modifications and/or translated +straightforwardly into another language. (Hereinafter, translation is +included without limitation in the term "modification".) + + "Source code" for a work means the preferred form of the work for +making modifications to it. For a library, complete source code means +all the source code for all modules it contains, plus any associated +interface definition files, plus the scripts used to control compilation +and installation of the library. + + Activities other than copying, distribution and modification are not +covered by this License; they are outside its scope. The act of +running a program using the Library is not restricted, and output from +such a program is covered only if its contents constitute a work based +on the Library (independent of the use of the Library in a tool for +writing it). Whether that is true depends on what the Library does +and what the program that uses the Library does. + + 1. You may copy and distribute verbatim copies of the Library's +complete source code as you receive it, in any medium, provided that +you conspicuously and appropriately publish on each copy an +appropriate copyright notice and disclaimer of warranty; keep intact +all the notices that refer to this License and to the absence of any +warranty; and distribute a copy of this License along with the +Library. + + You may charge a fee for the physical act of transferring a copy, +and you may at your option offer warranty protection in exchange for a +fee. + + 2. You may modify your copy or copies of the Library or any portion +of it, thus forming a work based on the Library, and copy and +distribute such modifications or work under the terms of Section 1 +above, provided that you also meet all of these conditions: + + a) The modified work must itself be a software library. + + b) You must cause the files modified to carry prominent notices + stating that you changed the files and the date of any change. + + c) You must cause the whole of the work to be licensed at no + charge to all third parties under the terms of this License. + + d) If a facility in the modified Library refers to a function or a + table of data to be supplied by an application program that uses + the facility, other than as an argument passed when the facility + is invoked, then you must make a good faith effort to ensure that, + in the event an application does not supply such function or + table, the facility still operates, and performs whatever part of + its purpose remains meaningful. + + (For example, a function in a library to compute square roots has + a purpose that is entirely well-defined independent of the + application. Therefore, Subsection 2d requires that any + application-supplied function or table used by this function must + be optional: if the application does not supply it, the square + root function must still compute square roots.) + +These requirements apply to the modified work as a whole. If +identifiable sections of that work are not derived from the Library, +and can be reasonably considered independent and separate works in +themselves, then this License, and its terms, do not apply to those +sections when you distribute them as separate works. But when you +distribute the same sections as part of a whole which is a work based +on the Library, the distribution of the whole must be on the terms of +this License, whose permissions for other licensees extend to the +entire whole, and thus to each and every part regardless of who wrote +it. + +Thus, it is not the intent of this section to claim rights or contest +your rights to work written entirely by you; rather, the intent is to +exercise the right to control the distribution of derivative or +collective works based on the Library. + +In addition, mere aggregation of another work not based on the Library +with the Library (or with a work based on the Library) on a volume of +a storage or distribution medium does not bring the other work under +the scope of this License. + + 3. You may opt to apply the terms of the ordinary GNU General Public +License instead of this License to a given copy of the Library. To do +this, you must alter all the notices that refer to this License, so +that they refer to the ordinary GNU General Public License, version 2, +instead of to this License. (If a newer version than version 2 of the +ordinary GNU General Public License has appeared, then you can specify +that version instead if you wish.) Do not make any other change in +these notices. + + Once this change is made in a given copy, it is irreversible for +that copy, so the ordinary GNU General Public License applies to all +subsequent copies and derivative works made from that copy. + + This option is useful when you wish to copy part of the code of +the Library into a program that is not a library. + + 4. You may copy and distribute the Library (or a portion or +derivative of it, under Section 2) in object code or executable form +under the terms of Sections 1 and 2 above provided that you accompany +it with the complete corresponding machine-readable source code, which +must be distributed under the terms of Sections 1 and 2 above on a +medium customarily used for software interchange. + + If distribution of object code is made by offering access to copy +from a designated place, then offering equivalent access to copy the +source code from the same place satisfies the requirement to +distribute the source code, even though third parties are not +compelled to copy the source along with the object code. + + 5. A program that contains no derivative of any portion of the +Library, but is designed to work with the Library by being compiled or +linked with it, is called a "work that uses the Library". Such a +work, in isolation, is not a derivative work of the Library, and +therefore falls outside the scope of this License. + + However, linking a "work that uses the Library" with the Library +creates an executable that is a derivative of the Library (because it +contains portions of the Library), rather than a "work that uses the +library". The executable is therefore covered by this License. +Section 6 states terms for distribution of such executables. + + When a "work that uses the Library" uses material from a header file +that is part of the Library, the object code for the work may be a +derivative work of the Library even though the source code is not. +Whether this is true is especially significant if the work can be +linked without the Library, or if the work is itself a library. The +threshold for this to be true is not precisely defined by law. + + If such an object file uses only numerical parameters, data +structure layouts and accessors, and small macros and small inline +functions (ten lines or less in length), then the use of the object +file is unrestricted, regardless of whether it is legally a derivative +work. (Executables containing this object code plus portions of the +Library will still fall under Section 6.) + + Otherwise, if the work is a derivative of the Library, you may +distribute the object code for the work under the terms of Section 6. +Any executables containing that work also fall under Section 6, +whether or not they are linked directly with the Library itself. + + 6. As an exception to the Sections above, you may also combine or +link a "work that uses the Library" with the Library to produce a +work containing portions of the Library, and distribute that work +under terms of your choice, provided that the terms permit +modification of the work for the customer's own use and reverse +engineering for debugging such modifications. + + You must give prominent notice with each copy of the work that the +Library is used in it and that the Library and its use are covered by +this License. You must supply a copy of this License. If the work +during execution displays copyright notices, you must include the +copyright notice for the Library among them, as well as a reference +directing the user to the copy of this License. Also, you must do one +of these things: + + a) Accompany the work with the complete corresponding + machine-readable source code for the Library including whatever + changes were used in the work (which must be distributed under + Sections 1 and 2 above); and, if the work is an executable linked + with the Library, with the complete machine-readable "work that + uses the Library", as object code and/or source code, so that the + user can modify the Library and then relink to produce a modified + executable containing the modified Library. (It is understood + that the user who changes the contents of definitions files in the + Library will not necessarily be able to recompile the application + to use the modified definitions.) + + b) Use a suitable shared library mechanism for linking with the + Library. A suitable mechanism is one that (1) uses at run time a + copy of the library already present on the user's computer system, + rather than copying library functions into the executable, and (2) + will operate properly with a modified version of the library, if + the user installs one, as long as the modified version is + interface-compatible with the version that the work was made with. + + c) Accompany the work with a written offer, valid for at + least three years, to give the same user the materials + specified in Subsection 6a, above, for a charge no more + than the cost of performing this distribution. + + d) If distribution of the work is made by offering access to copy + from a designated place, offer equivalent access to copy the above + specified materials from the same place. + + e) Verify that the user has already received a copy of these + materials or that you have already sent this user a copy. + + For an executable, the required form of the "work that uses the +Library" must include any data and utility programs needed for +reproducing the executable from it. However, as a special exception, +the materials to be distributed need not include anything that is +normally distributed (in either source or binary form) with the major +components (compiler, kernel, and so on) of the operating system on +which the executable runs, unless that component itself accompanies +the executable. + + It may happen that this requirement contradicts the license +restrictions of other proprietary libraries that do not normally +accompany the operating system. Such a contradiction means you cannot +use both them and the Library together in an executable that you +distribute. + + 7. You may place library facilities that are a work based on the +Library side-by-side in a single library together with other library +facilities not covered by this License, and distribute such a combined +library, provided that the separate distribution of the work based on +the Library and of the other library facilities is otherwise +permitted, and provided that you do these two things: + + a) Accompany the combined library with a copy of the same work + based on the Library, uncombined with any other library + facilities. This must be distributed under the terms of the + Sections above. + + b) Give prominent notice with the combined library of the fact + that part of it is a work based on the Library, and explaining + where to find the accompanying uncombined form of the same work. + + 8. You may not copy, modify, sublicense, link with, or distribute +the Library except as expressly provided under this License. Any +attempt otherwise to copy, modify, sublicense, link with, or +distribute the Library is void, and will automatically terminate your +rights under this License. However, parties who have received copies, +or rights, from you under this License will not have their licenses +terminated so long as such parties remain in full compliance. + + 9. You are not required to accept this License, since you have not +signed it. However, nothing else grants you permission to modify or +distribute the Library or its derivative works. These actions are +prohibited by law if you do not accept this License. Therefore, by +modifying or distributing the Library (or any work based on the +Library), you indicate your acceptance of this License to do so, and +all its terms and conditions for copying, distributing or modifying +the Library or works based on it. + + 10. Each time you redistribute the Library (or any work based on the +Library), the recipient automatically receives a license from the +original licensor to copy, distribute, link with or modify the Library +subject to these terms and conditions. You may not impose any further +restrictions on the recipients' exercise of the rights granted herein. +You are not responsible for enforcing compliance by third parties with +this License. + + 11. If, as a consequence of a court judgment or allegation of patent +infringement or for any other reason (not limited to patent issues), +conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot +distribute so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you +may not distribute the Library at all. For example, if a patent +license would not permit royalty-free redistribution of the Library by +all those who receive copies directly or indirectly through you, then +the only way you could satisfy both it and this License would be to +refrain entirely from distribution of the Library. + +If any portion of this section is held invalid or unenforceable under any +particular circumstance, the balance of the section is intended to apply, +and the section as a whole is intended to apply in other circumstances. + +It is not the purpose of this section to induce you to infringe any +patents or other property right claims or to contest validity of any +such claims; this section has the sole purpose of protecting the +integrity of the free software distribution system which is +implemented by public license practices. Many people have made +generous contributions to the wide range of software distributed +through that system in reliance on consistent application of that +system; it is up to the author/donor to decide if he or she is willing +to distribute software through any other system and a licensee cannot +impose that choice. + +This section is intended to make thoroughly clear what is believed to +be a consequence of the rest of this License. + + 12. If the distribution and/or use of the Library is restricted in +certain countries either by patents or by copyrighted interfaces, the +original copyright holder who places the Library under this License may add +an explicit geographical distribution limitation excluding those countries, +so that distribution is permitted only in or among countries not thus +excluded. In such case, this License incorporates the limitation as if +written in the body of this License. + + 13. The Free Software Foundation may publish revised and/or new +versions of the Lesser General Public License from time to time. +Such new versions will be similar in spirit to the present version, +but may differ in detail to address new problems or concerns. + +Each version is given a distinguishing version number. If the Library +specifies a version number of this License which applies to it and +"any later version", you have the option of following the terms and +conditions either of that version or of any later version published by +the Free Software Foundation. If the Library does not specify a +license version number, you may choose any version ever published by +the Free Software Foundation. + + 14. If you wish to incorporate parts of the Library into other free +programs whose distribution conditions are incompatible with these, +write to the author to ask for permission. For software which is +copyrighted by the Free Software Foundation, write to the Free +Software Foundation; we sometimes make exceptions for this. Our +decision will be guided by the two goals of preserving the free status +of all derivatives of our free software and of promoting the sharing +and reuse of software generally. + + NO WARRANTY + + 15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO +WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW. +EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR +OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY +KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE +LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME +THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + + 16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN +WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY +AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU +FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR +CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE +LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING +RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A +FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF +SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH +DAMAGES. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Libraries + + If you develop a new library, and you want it to be of the greatest +possible use to the public, we recommend making it free software that +everyone can redistribute and change. You can do so by permitting +redistribution under these terms (or, alternatively, under the terms of the +ordinary General Public License). + + To apply these terms, attach the following notices to the library. It is +safest to attach them to the start of each source file to most effectively +convey the exclusion of warranty; and each file should have at least the +"copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + This library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this library; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA + +Also add information on how to contact you by electronic and paper mail. + +You should also get your employer (if you work as a programmer) or your +school, if any, to sign a "copyright disclaimer" for the library, if +necessary. Here is a sample; alter the names: + + Yoyodyne, Inc., hereby disclaims all copyright interest in the + library `Frob' (a library for tweaking knobs) written by James Random Hacker. + + , 1 April 1990 + Ty Coon, President of Vice + +That's all there is to it! \ No newline at end of file diff --git a/vendor/phpmailer/phpmailer/README.md b/vendor/phpmailer/phpmailer/README.md new file mode 100644 index 000000000..d9cbbaaf9 --- /dev/null +++ b/vendor/phpmailer/phpmailer/README.md @@ -0,0 +1,215 @@ +![PHPMailer](https://raw.github.com/PHPMailer/PHPMailer/master/examples/images/phpmailer.png) + +# PHPMailer - A full-featured email creation and transfer class for PHP + +Build status: [![Build Status](https://travis-ci.org/PHPMailer/PHPMailer.svg)](https://travis-ci.org/PHPMailer/PHPMailer) +[![Scrutinizer Quality Score](https://scrutinizer-ci.com/g/PHPMailer/PHPMailer/badges/quality-score.png?s=3758e21d279becdf847a557a56a3ed16dfec9d5d)](https://scrutinizer-ci.com/g/PHPMailer/PHPMailer/) +[![Code Coverage](https://scrutinizer-ci.com/g/PHPMailer/PHPMailer/badges/coverage.png?s=3fe6ca5fe8cd2cdf96285756e42932f7ca256962)](https://scrutinizer-ci.com/g/PHPMailer/PHPMailer/) + +[![Latest Stable Version](https://poser.pugx.org/phpmailer/phpmailer/v/stable.svg)](https://packagist.org/packages/phpmailer/phpmailer) [![Total Downloads](https://poser.pugx.org/phpmailer/phpmailer/downloads)](https://packagist.org/packages/phpmailer/phpmailer) [![Latest Unstable Version](https://poser.pugx.org/phpmailer/phpmailer/v/unstable.svg)](https://packagist.org/packages/phpmailer/phpmailer) [![License](https://poser.pugx.org/phpmailer/phpmailer/license.svg)](https://packagist.org/packages/phpmailer/phpmailer) [![API Docs](https://github.com/phpmailer/phpmailer/workflows/Docs/badge.svg)](http://phpmailer.github.io/PHPMailer/) + +## Class Features +- Probably the world's most popular code for sending email from PHP! +- Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more +- Integrated SMTP support - send without a local mail server +- Send emails with multiple To, CC, BCC and Reply-to addresses +- Multipart/alternative emails for mail clients that do not read HTML email +- Add attachments, including inline +- Support for UTF-8 content and 8bit, base64, binary, and quoted-printable encodings +- SMTP authentication with LOGIN, PLAIN, CRAM-MD5, and XOAUTH2 mechanisms over SSL and SMTP+STARTTLS transports +- Validates email addresses automatically +- Protect against header injection attacks +- Error messages in over 50 languages! +- DKIM and S/MIME signing support +- Compatible with PHP 5.5 and later +- Namespaced to prevent name clashes +- Much more! + +## Why you might need it +Many PHP developers need to send email from their code. The only PHP function that supports this is [`mail()`](https://www.php.net/manual/en/function.mail.php). However, it does not provide any assistance for making use of popular features such as encryption, authentication, HTML messages, and attachments. + +Formatting email correctly is surprisingly difficult. There are myriad overlapping RFCs, requiring tight adherence to horribly complicated formatting and encoding rules – the vast majority of code that you'll find online that uses the `mail()` function directly is just plain wrong! +*Please* don't be tempted to do it yourself – if you don't use PHPMailer, there are many other excellent libraries that you should look at before rolling your own. Try [SwiftMailer](https://swiftmailer.symfony.com/), [Zend/Mail](https://zendframework.github.io/zend-mail/), [ZetaComponents](https://github.com/zetacomponents/Mail) etc. + +The PHP `mail()` function usually sends via a local mail server, typically fronted by a `sendmail` binary on Linux, BSD, and macOS platforms, however, Windows usually doesn't include a local mail server; PHPMailer's integrated SMTP implementation allows email sending on Windows platforms without a local mail server. + +## License +This software is distributed under the [LGPL 2.1](http://www.gnu.org/licenses/lgpl-2.1.html) license, along with the [GPL Cooperation Commitment](https://gplcc.github.io/gplcc/). Please read LICENSE for information on the software availability and distribution. + +## Installation & loading +PHPMailer is available on [Packagist](https://packagist.org/packages/phpmailer/phpmailer) (using semantic versioning), and installation via [Composer](https://getcomposer.org) is the recommended way to install PHPMailer. Just add this line to your `composer.json` file: + +```json +"phpmailer/phpmailer": "~6.1" +``` + +or run + +```sh +composer require phpmailer/phpmailer +``` + +Note that the `vendor` folder and the `vendor/autoload.php` script are generated by Composer; they are not part of PHPMailer. + +If you want to use the Gmail XOAUTH2 authentication class, you will also need to add a dependency on the `league/oauth2-client` package in your `composer.json`. + +Alternatively, if you're not using Composer, copy the contents of the PHPMailer folder into one of the `include_path` directories specified in your PHP configuration and load each class file manually: + +```php +SMTPDebug = SMTP::DEBUG_SERVER; // Enable verbose debug output + $mail->isSMTP(); // Send using SMTP + $mail->Host = 'smtp1.example.com'; // Set the SMTP server to send through + $mail->SMTPAuth = true; // Enable SMTP authentication + $mail->Username = 'user@example.com'; // SMTP username + $mail->Password = 'secret'; // SMTP password + $mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS; // Enable TLS encryption; `PHPMailer::ENCRYPTION_SMTPS` encouraged + $mail->Port = 587; // TCP port to connect to, use 465 for `PHPMailer::ENCRYPTION_SMTPS` above + + //Recipients + $mail->setFrom('from@example.com', 'Mailer'); + $mail->addAddress('joe@example.net', 'Joe User'); // Add a recipient + $mail->addAddress('ellen@example.com'); // Name is optional + $mail->addReplyTo('info@example.com', 'Information'); + $mail->addCC('cc@example.com'); + $mail->addBCC('bcc@example.com'); + + // Attachments + $mail->addAttachment('/var/tmp/file.tar.gz'); // Add attachments + $mail->addAttachment('/tmp/image.jpg', 'new.jpg'); // Optional name + + // Content + $mail->isHTML(true); // Set email format to HTML + $mail->Subject = 'Here is the subject'; + $mail->Body = 'This is the HTML message body in bold!'; + $mail->AltBody = 'This is the body in plain text for non-HTML mail clients'; + + $mail->send(); + echo 'Message has been sent'; +} catch (Exception $e) { + echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}"; +} +``` + +You'll find plenty more to play with in the [examples](https://github.com/PHPMailer/PHPMailer/tree/master/examples) folder. + +If you are re-using the instance (e.g. when sending to a mailing list), you may need to clear the recipient list to avoid sending duplicate messages. See [the mailing list example](https://github.com/PHPMailer/PHPMailer/blob/master/examples/mailing_list.phps) for further guidance. + +That's it. You should now be ready to use PHPMailer! + +## Localization +PHPMailer defaults to English, but in the [language](https://github.com/PHPMailer/PHPMailer/tree/master/language/) folder you'll find many translations for PHPMailer error messages that you may encounter. Their filenames contain [ISO 639-1](http://en.wikipedia.org/wiki/ISO_639-1) language code for the translations, for example `fr` for French. To specify a language, you need to tell PHPMailer which one to use, like this: + +```php +// To load the French version +$mail->setLanguage('fr', '/optional/path/to/language/directory/'); +``` + +We welcome corrections and new languages - if you're looking for corrections to do, run the [PHPMailerLangTest.php](https://github.com/PHPMailer/PHPMailer/tree/master/test/PHPMailerLangTest.php) script in the tests folder and it will show any missing translations. + +## Documentation +Start reading at the [GitHub wiki](https://github.com/PHPMailer/PHPMailer/wiki). If you're having trouble, this should be the first place you look as it's the most frequently updated. + +Examples of how to use PHPMailer for common scenarios can be found in the [examples](https://github.com/PHPMailer/PHPMailer/tree/master/examples) folder. If you're looking for a good starting point, we recommend you start with [the Gmail example](https://github.com/PHPMailer/PHPMailer/tree/master/examples/gmail.phps). + +Note that in order to reduce PHPMailer's deployed code footprint, the examples are no longer included if you load PHPMailer via Composer or via [GitHub's zip file download](https://github.com/PHPMailer/PHPMailer/archive/master.zip), so you'll need to either clone the git repository or use the above links to get to the examples directly. + +Complete generated API documentation is [available online](http://phpmailer.github.io/PHPMailer/). + +You can generate complete API-level documentation by running `phpdoc` in the top-level folder, and documentation will appear in the `docs` folder, though you'll need to have [PHPDocumentor](http://www.phpdoc.org) installed. You may find [the unit tests](https://github.com/PHPMailer/PHPMailer/blob/master/test/PHPMailerTest.php) a good source of how to do various operations such as encryption. + +If the documentation doesn't cover what you need, search the [many questions on Stack Overflow](http://stackoverflow.com/questions/tagged/phpmailer), and before you ask a question about "SMTP Error: Could not connect to SMTP host.", [read the troubleshooting guide](https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting). + +## Tests +There is a PHPUnit test script in the [test](https://github.com/PHPMailer/PHPMailer/tree/master/test/) folder. PHPMailer uses PHPUnit 4.8 - we would use 5.x but we need to run on PHP 5.5. + +Build status: [![Build Status](https://travis-ci.org/PHPMailer/PHPMailer.svg)](https://travis-ci.org/PHPMailer/PHPMailer) + +If this isn't passing, is there something you can do to help? + +## Security +Please disclose any vulnerabilities found responsibly – report security issues to the maintainers privately. + +See [SECURITY](https://github.com/PHPMailer/PHPMailer/tree/master/SECURITY.md) for details on security issues. + +## Contributing +Please submit bug reports, suggestions and pull requests to the [GitHub issue tracker](https://github.com/PHPMailer/PHPMailer/issues). + +We're particularly interested in fixing edge-cases, expanding test coverage and updating translations. + +If you found a mistake in the docs, or want to add something, go ahead and amend the wiki - anyone can edit it. + +If you have git clones from prior to the move to the PHPMailer GitHub organisation, you'll need to update any remote URLs referencing the old GitHub location with a command like this from within your clone: + +```sh +git remote set-url upstream https://github.com/PHPMailer/PHPMailer.git +``` + +Please *don't* use the SourceForge or Google Code projects any more; they are obsolete and no longer maintained. + +## Sponsorship +Development time and resources for PHPMailer are provided by [Smartmessages.net](https://info.smartmessages.net/), a powerful email marketing system. + +Smartmessages email marketing + +Other contributions are gladly received, whether in beer 🍺, T-shirts 👕, Amazon wishlist raids, or cold, hard cash 💰. If you'd like to donate to say "thank you" to maintainers or contributors, please contact them through individual profile pages via [the contributors page](https://github.com/PHPMailer/PHPMailer/graphs/contributors). + +## Changelog +See [changelog](changelog.md). + +## History +- PHPMailer was originally written in 2001 by Brent R. Matzelle as a [SourceForge project](http://sourceforge.net/projects/phpmailer/). +- Marcus Bointon (coolbru on SF) and Andy Prevost (codeworxtech) took over the project in 2004. +- Became an Apache incubator project on Google Code in 2010, managed by Jim Jagielski. +- Marcus created his fork on [GitHub](https://github.com/Synchro/PHPMailer) in 2008. +- Jim and Marcus decide to join forces and use GitHub as the canonical and official repo for PHPMailer in 2013. +- PHPMailer moves to the [PHPMailer organisation](https://github.com/PHPMailer) on GitHub in 2013. + +### What's changed since moving from SourceForge? +- Official successor to the SourceForge and Google Code projects. +- Test suite. +- Continuous integration with Travis-CI. +- Composer support. +- Public development. +- Additional languages and language strings. +- CRAM-MD5 authentication support. +- Preserves full repo history of authors, commits and branches from the original SourceForge project. diff --git a/vendor/phpmailer/phpmailer/SECURITY.md b/vendor/phpmailer/phpmailer/SECURITY.md new file mode 100644 index 000000000..fc3e61c20 --- /dev/null +++ b/vendor/phpmailer/phpmailer/SECURITY.md @@ -0,0 +1,30 @@ +# Security notices relating to PHPMailer + +Please disclose any vulnerabilities found responsibly - report any security problems found to the maintainers privately. + +PHPMailer versions 6.1.5 and earlier contain an output escaping bug that occurs in `Content-Type` and `Content-Disposition` when filenames passed into `addAttachment` and other methods that accept attachment names contain double quote characters, in contravention of RFC822 3.4.1. No specific vulnerability has been found relating to this, but it could allow file attachments to bypass attachment filters that are based on matching filename extensions. Recorded as [CVE-2020-13625](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-13625). Reported by Elar Lang of Clarified Security. + +PHPMailer versions prior to 6.0.6 and 5.2.27 are vulnerable to an object injection attack by passing `phar://` paths into `addAttachment()` and other functions that may receive unfiltered local paths, possibly leading to RCE. Recorded as [CVE-2018-19296](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19296). See [this article](https://knasmueller.net/5-answers-about-php-phar-exploitation) for more info on this type of vulnerability. Mitigated by blocking the use of paths containing URL-protocol style prefixes such as `phar://`. Reported by Sehun Oh of cyberone.kr. + +PHPMailer versions prior to 5.2.24 (released July 26th 2017) have an XSS vulnerability in one of the code examples, [CVE-2017-11503](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11503). The `code_generator.phps` example did not filter user input prior to output. This file is distributed with a `.phps` extension, so it it not normally executable unless it is explicitly renamed, and the file is not included when PHPMailer is loaded through composer, so it is safe by default. There was also an undisclosed potential XSS vulnerability in the default exception handler (unused by default). Patches for both issues kindly provided by Patrick Monnerat of the Fedora Project. + +PHPMailer versions prior to 5.2.22 (released January 9th 2017) have a local file disclosure vulnerability, [CVE-2017-5223](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5223). If content passed into `msgHTML()` is sourced from unfiltered user input, relative paths can map to absolute local file paths and added as attachments. Also note that `addAttachment` (just like `file_get_contents`, `passthru`, `unlink`, etc) should not be passed user-sourced params either! Reported by Yongxiang Li of Asiasecurity. + +PHPMailer versions prior to 5.2.20 (released December 28th 2016) are vulnerable to [CVE-2016-10045](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10045) a remote code execution vulnerability, responsibly reported by [Dawid Golunski](https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html), and patched by Paul Buonopane (@Zenexer). + +PHPMailer versions prior to 5.2.18 (released December 2016) are vulnerable to [CVE-2016-10033](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10033) a remote code execution vulnerability, responsibly reported by [Dawid Golunski](http://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html). + +PHPMailer versions prior to 5.2.14 (released November 2015) are vulnerable to [CVE-2015-8476](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8476) an SMTP CRLF injection bug permitting arbitrary message sending. + +PHPMailer versions prior to 5.2.10 (released May 2015) are vulnerable to [CVE-2008-5619](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5619), a remote code execution vulnerability in the bundled html2text library. This file was removed in 5.2.10, so if you are using a version prior to that and make use of the html2text function, it's vitally important that you upgrade and remove this file. + +PHPMailer versions prior to 2.0.7 and 2.2.1 are vulnerable to [CVE-2012-0796](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0796), an email header injection attack. + +Joomla 1.6.0 uses PHPMailer in an unsafe way, allowing it to reveal local file paths, reported in [CVE-2011-3747](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3747). + +PHPMailer didn't sanitise the `$lang_path` parameter in `SetLanguage`. This wasn't a problem in itself, but some apps (PHPClassifieds, ATutor) also failed to sanitise user-provided parameters passed to it, permitting semi-arbitrary local file inclusion, reported in [CVE-2010-4914](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4914), [CVE-2007-2021](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2021) and [CVE-2006-5734](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-5734). + +PHPMailer 1.7.2 and earlier contained a possible DDoS vulnerability reported in [CVE-2005-1807](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1807). + +PHPMailer 1.7 and earlier (June 2003) have a possible vulnerability in the `SendmailSend` method where shell commands may not be sanitised. Reported in [CVE-2007-3215](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3215). + diff --git a/vendor/phpmailer/phpmailer/VERSION b/vendor/phpmailer/phpmailer/VERSION new file mode 100644 index 000000000..4ac4fded4 --- /dev/null +++ b/vendor/phpmailer/phpmailer/VERSION @@ -0,0 +1 @@ +6.2.0 \ No newline at end of file diff --git a/vendor/phpmailer/phpmailer/composer.json b/vendor/phpmailer/phpmailer/composer.json new file mode 100644 index 000000000..7388bd98b --- /dev/null +++ b/vendor/phpmailer/phpmailer/composer.json @@ -0,0 +1,61 @@ +{ + "name": "phpmailer/phpmailer", + "type": "library", + "description": "PHPMailer is a full-featured email creation and transfer class for PHP", + "authors": [ + { + "name": "Marcus Bointon", + "email": "phpmailer@synchromedia.co.uk" + }, + { + "name": "Jim Jagielski", + "email": "jimjag@gmail.com" + }, + { + "name": "Andy Prevost", + "email": "codeworxtech@users.sourceforge.net" + }, + { + "name": "Brent R. Matzelle" + } + ], + "funding": [ + { + "url": "https://github.com/Synchro", + "type": "github" + } + ], + "require": { + "php": ">=5.5.0", + "ext-ctype": "*", + "ext-filter": "*", + "ext-hash": "*" + }, + "require-dev": { + "dealerdirect/phpcodesniffer-composer-installer": "^0.7.0", + "doctrine/annotations": "^1.2", + "phpcompatibility/php-compatibility": "^9.3.5", + "roave/security-advisories": "dev-latest", + "squizlabs/php_codesniffer": "^3.5.6", + "yoast/phpunit-polyfills": "^0.2.0" + }, + "suggest": { + "ext-mbstring": "Needed to send email in multibyte encoding charset", + "hayageek/oauth2-yahoo": "Needed for Yahoo XOAUTH2 authentication", + "league/oauth2-google": "Needed for Google XOAUTH2 authentication", + "psr/log": "For optional PSR-3 debug logging", + "stevenmaguire/oauth2-microsoft": "Needed for Microsoft XOAUTH2 authentication", + "symfony/polyfill-mbstring": "To support UTF-8 if the Mbstring PHP extension is not enabled (^1.2)" + }, + "autoload": { + "psr-4": { + "PHPMailer\\PHPMailer\\": "src/" + } + }, + "autoload-dev": { + "psr-4": { + "PHPMailer\\Test\\": "test/" + } + }, + "license": "LGPL-2.1-only" +} diff --git a/vendor/phpmailer/phpmailer/get_oauth_token.php b/vendor/phpmailer/phpmailer/get_oauth_token.php new file mode 100644 index 000000000..560d36458 --- /dev/null +++ b/vendor/phpmailer/phpmailer/get_oauth_token.php @@ -0,0 +1,146 @@ + + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + * @copyright 2012 - 2020 Marcus Bointon + * @copyright 2010 - 2012 Jim Jagielski + * @copyright 2004 - 2009 Andy Prevost + * @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License + * @note This program is distributed in the hope that it will be useful - WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. + */ + +/** + * Get an OAuth2 token from an OAuth2 provider. + * * Install this script on your server so that it's accessible + * as [https/http]:////get_oauth_token.php + * e.g.: http://localhost/phpmailer/get_oauth_token.php + * * Ensure dependencies are installed with 'composer install' + * * Set up an app in your Google/Yahoo/Microsoft account + * * Set the script address as the app's redirect URL + * If no refresh token is obtained when running this file, + * revoke access to your app and run the script again. + */ + +namespace PHPMailer\PHPMailer; + +/** + * Aliases for League Provider Classes + * Make sure you have added these to your composer.json and run `composer install` + * Plenty to choose from here: + * @see http://oauth2-client.thephpleague.com/providers/thirdparty/ + */ +// @see https://github.com/thephpleague/oauth2-google +use League\OAuth2\Client\Provider\Google; +// @see https://packagist.org/packages/hayageek/oauth2-yahoo +use Hayageek\OAuth2\Client\Provider\Yahoo; +// @see https://github.com/stevenmaguire/oauth2-microsoft +use Stevenmaguire\OAuth2\Client\Provider\Microsoft; + +if (!isset($_GET['code']) && !isset($_GET['provider'])) { + ?> + +Select Provider:
+Google
+Yahoo
+Microsoft/Outlook/Hotmail/Live/Office365
+ + + $clientId, + 'clientSecret' => $clientSecret, + 'redirectUri' => $redirectUri, + 'accessType' => 'offline' +]; + +$options = []; +$provider = null; + +switch ($providerName) { + case 'Google': + $provider = new Google($params); + $options = [ + 'scope' => [ + 'https://mail.google.com/' + ] + ]; + break; + case 'Yahoo': + $provider = new Yahoo($params); + break; + case 'Microsoft': + $provider = new Microsoft($params); + $options = [ + 'scope' => [ + 'wl.imap', + 'wl.offline_access' + ] + ]; + break; +} + +if (null === $provider) { + exit('Provider missing'); +} + +if (!isset($_GET['code'])) { + // If we don't have an authorization code then get one + $authUrl = $provider->getAuthorizationUrl($options); + $_SESSION['oauth2state'] = $provider->getState(); + header('Location: ' . $authUrl); + exit; +// Check given state against previously stored one to mitigate CSRF attack +} elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) { + unset($_SESSION['oauth2state']); + unset($_SESSION['provider']); + exit('Invalid state'); +} else { + unset($_SESSION['provider']); + // Try to get an access token (using the authorization code grant) + $token = $provider->getAccessToken( + 'authorization_code', + [ + 'code' => $_GET['code'] + ] + ); + // Use this to interact with an API on the users behalf + // Use this to get a new access token if the old one expires + echo 'Refresh Token: ', $token->getRefreshToken(); +} diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-af.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-af.php new file mode 100644 index 000000000..0b2a72d52 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-af.php @@ -0,0 +1,26 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'خطأ SMTP : لا يمكن تأكيد الهوية.'; +$PHPMAILER_LANG['connect_host'] = 'خطأ SMTP: لا يمكن الاتصال بالخادم SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'خطأ SMTP: لم يتم قبول المعلومات .'; +$PHPMAILER_LANG['empty_message'] = 'نص الرسالة فارغ'; +$PHPMAILER_LANG['encoding'] = 'ترميز غير معروف: '; +$PHPMAILER_LANG['execute'] = 'لا يمكن تنفيذ : '; +$PHPMAILER_LANG['file_access'] = 'لا يمكن الوصول للملف: '; +$PHPMAILER_LANG['file_open'] = 'خطأ في الملف: لا يمكن فتحه: '; +$PHPMAILER_LANG['from_failed'] = 'خطأ على مستوى عنوان المرسل : '; +$PHPMAILER_LANG['instantiate'] = 'لا يمكن توفير خدمة البريد.'; +$PHPMAILER_LANG['invalid_address'] = 'الإرسال غير ممكن لأن عنوان البريد الإلكتروني غير صالح: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' برنامج الإرسال غير مدعوم.'; +$PHPMAILER_LANG['provide_address'] = 'يجب توفير عنوان البريد الإلكتروني لمستلم واحد على الأقل.'; +$PHPMAILER_LANG['recipients_failed'] = 'خطأ SMTP: الأخطاء التالية ' . + 'فشل في الارسال لكل من : '; +$PHPMAILER_LANG['signing'] = 'خطأ في التوقيع: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() غير ممكن.'; +$PHPMAILER_LANG['smtp_error'] = 'خطأ على مستوى الخادم SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'لا يمكن تعيين أو إعادة تعيين متغير: '; +$PHPMAILER_LANG['extension_missing'] = 'الإضافة غير موجودة: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-az.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-az.php new file mode 100644 index 000000000..552167ef6 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-az.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP Greška: Neuspjela prijava.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Greška: Nije moguće spojiti se sa SMTP serverom.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Greška: Podatci nisu prihvaćeni.'; +$PHPMAILER_LANG['empty_message'] = 'Sadržaj poruke je prazan.'; +$PHPMAILER_LANG['encoding'] = 'Nepoznata kriptografija: '; +$PHPMAILER_LANG['execute'] = 'Nije moguće izvršiti naredbu: '; +$PHPMAILER_LANG['file_access'] = 'Nije moguće pristupiti datoteci: '; +$PHPMAILER_LANG['file_open'] = 'Nije moguće otvoriti datoteku: '; +$PHPMAILER_LANG['from_failed'] = 'SMTP Greška: Slanje sa navedenih e-mail adresa nije uspjelo: '; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Greška: Slanje na navedene e-mail adrese nije uspjelo: '; +$PHPMAILER_LANG['instantiate'] = 'Ne mogu pokrenuti mail funkcionalnost.'; +$PHPMAILER_LANG['invalid_address'] = 'E-mail nije poslan. Neispravna e-mail adresa: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer nije podržan.'; +$PHPMAILER_LANG['provide_address'] = 'Definišite barem jednu adresu primaoca.'; +$PHPMAILER_LANG['signing'] = 'Greška prilikom prijave: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Spajanje na SMTP server nije uspjelo.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP greška: '; +$PHPMAILER_LANG['variable_set'] = 'Nije moguće postaviti varijablu ili je vratiti nazad: '; +$PHPMAILER_LANG['extension_missing'] = 'Nedostaje ekstenzija: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-be.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-be.php new file mode 100644 index 000000000..9e92ddaaf --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-be.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Памылка SMTP: памылка ідэнтыфікацыі.'; +$PHPMAILER_LANG['connect_host'] = 'Памылка SMTP: нельга ўстанавіць сувязь з SMTP-серверам.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Памылка SMTP: звесткі непрынятыя.'; +$PHPMAILER_LANG['empty_message'] = 'Пустое паведамленне.'; +$PHPMAILER_LANG['encoding'] = 'Невядомая кадыроўка тэксту: '; +$PHPMAILER_LANG['execute'] = 'Нельга выканаць каманду: '; +$PHPMAILER_LANG['file_access'] = 'Няма доступу да файла: '; +$PHPMAILER_LANG['file_open'] = 'Нельга адкрыць файл: '; +$PHPMAILER_LANG['from_failed'] = 'Няправільны адрас адпраўніка: '; +$PHPMAILER_LANG['instantiate'] = 'Нельга прымяніць функцыю mail().'; +$PHPMAILER_LANG['invalid_address'] = 'Нельга даслаць паведамленне, няправільны email атрымальніка: '; +$PHPMAILER_LANG['provide_address'] = 'Запоўніце, калі ласка, правільны email атрымальніка.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' - паштовы сервер не падтрымліваецца.'; +$PHPMAILER_LANG['recipients_failed'] = 'Памылка SMTP: няправільныя атрымальнікі: '; +$PHPMAILER_LANG['signing'] = 'Памылка подпісу паведамлення: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Памылка сувязі з SMTP-серверам.'; +$PHPMAILER_LANG['smtp_error'] = 'Памылка SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Нельга ўстанавіць або перамяніць значэнне пераменнай: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-bg.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-bg.php new file mode 100644 index 000000000..c41f675df --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-bg.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP грешка: Не може да се удостовери пред сървъра.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP грешка: Не може да се свърже с SMTP хоста.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP грешка: данните не са приети.'; +$PHPMAILER_LANG['empty_message'] = 'Съдържанието на съобщението е празно'; +$PHPMAILER_LANG['encoding'] = 'Неизвестно кодиране: '; +$PHPMAILER_LANG['execute'] = 'Не може да се изпълни: '; +$PHPMAILER_LANG['file_access'] = 'Няма достъп до файл: '; +$PHPMAILER_LANG['file_open'] = 'Файлова грешка: Не може да се отвори файл: '; +$PHPMAILER_LANG['from_failed'] = 'Следните адреси за подател са невалидни: '; +$PHPMAILER_LANG['instantiate'] = 'Не може да се инстанцира функцията mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Невалиден адрес: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' - пощенски сървър не се поддържа.'; +$PHPMAILER_LANG['provide_address'] = 'Трябва да предоставите поне един email адрес за получател.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP грешка: Следните адреси за Получател са невалидни: '; +$PHPMAILER_LANG['signing'] = 'Грешка при подписване: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP провален connect().'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP сървърна грешка: '; +$PHPMAILER_LANG['variable_set'] = 'Не може да се установи или възстанови променлива: '; +$PHPMAILER_LANG['extension_missing'] = 'Липсва разширение: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ca.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ca.php new file mode 100644 index 000000000..34684855a --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ca.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Error SMTP: No s’ha pogut autenticar.'; +$PHPMAILER_LANG['connect_host'] = 'Error SMTP: No es pot connectar al servidor SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Error SMTP: Dades no acceptades.'; +$PHPMAILER_LANG['empty_message'] = 'El cos del missatge està buit.'; +$PHPMAILER_LANG['encoding'] = 'Codificació desconeguda: '; +$PHPMAILER_LANG['execute'] = 'No es pot executar: '; +$PHPMAILER_LANG['file_access'] = 'No es pot accedir a l’arxiu: '; +$PHPMAILER_LANG['file_open'] = 'Error d’Arxiu: No es pot obrir l’arxiu: '; +$PHPMAILER_LANG['from_failed'] = 'La(s) següent(s) adreces de remitent han fallat: '; +$PHPMAILER_LANG['instantiate'] = 'No s’ha pogut crear una instància de la funció Mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Adreça d’email invalida: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer no està suportat'; +$PHPMAILER_LANG['provide_address'] = 'S’ha de proveir almenys una adreça d’email com a destinatari.'; +$PHPMAILER_LANG['recipients_failed'] = 'Error SMTP: Els següents destinataris han fallat: '; +$PHPMAILER_LANG['signing'] = 'Error al signar: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Ha fallat el SMTP Connect().'; +$PHPMAILER_LANG['smtp_error'] = 'Error del servidor SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'No s’ha pogut establir o restablir la variable: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ch.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ch.php new file mode 100644 index 000000000..500c95267 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ch.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP 错误：身份验证失败。'; +$PHPMAILER_LANG['connect_host'] = 'SMTP 错误: 不能连接SMTP主机。'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP 错误: 数据不可接受。'; +//$PHPMAILER_LANG['empty_message'] = 'Message body empty'; +$PHPMAILER_LANG['encoding'] = '未知编码：'; +$PHPMAILER_LANG['execute'] = '不能执行: '; +$PHPMAILER_LANG['file_access'] = '不能访问文件：'; +$PHPMAILER_LANG['file_open'] = '文件错误：不能打开文件：'; +$PHPMAILER_LANG['from_failed'] = '下面的发送地址邮件发送失败了： '; +$PHPMAILER_LANG['instantiate'] = '不能实现mail方法。'; +//$PHPMAILER_LANG['invalid_address'] = 'Invalid address: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' 您所选择的发送邮件的方法并不支持。'; +$PHPMAILER_LANG['provide_address'] = '您必须提供至少一个 收信人的email地址。'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP 错误： 下面的 收件人失败了： '; +//$PHPMAILER_LANG['signing'] = 'Signing Error: '; +//$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() failed.'; +//$PHPMAILER_LANG['smtp_error'] = 'SMTP server error: '; +//$PHPMAILER_LANG['variable_set'] = 'Cannot set or reset variable: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-cs.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-cs.php new file mode 100644 index 000000000..55bdd9c89 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-cs.php @@ -0,0 +1,26 @@ + + * Rewrite and extension of the work by Mikael Stokkebro + * + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP fejl: Login mislykkedes.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP fejl: Forbindelse til SMTP serveren kunne ikke oprettes.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP fejl: Data blev ikke accepteret.'; +$PHPMAILER_LANG['empty_message'] = 'Meddelelsen er uden indhold'; +$PHPMAILER_LANG['encoding'] = 'Ukendt encode-format: '; +$PHPMAILER_LANG['execute'] = 'Kunne ikke afvikle: '; +$PHPMAILER_LANG['file_access'] = 'Kunne ikke tilgå filen: '; +$PHPMAILER_LANG['file_open'] = 'Fil fejl: Kunne ikke åbne filen: '; +$PHPMAILER_LANG['from_failed'] = 'Følgende afsenderadresse er forkert: '; +$PHPMAILER_LANG['instantiate'] = 'Email funktionen kunne ikke initialiseres.'; +$PHPMAILER_LANG['invalid_address'] = 'Udgyldig adresse: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer understøttes ikke.'; +$PHPMAILER_LANG['provide_address'] = 'Indtast mindst en modtagers email adresse.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP fejl: Følgende modtagere er forkerte: '; +$PHPMAILER_LANG['signing'] = 'Signeringsfejl: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() fejlede.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP server fejl: '; +$PHPMAILER_LANG['variable_set'] = 'Kunne ikke definere eller nulstille variablen: '; +$PHPMAILER_LANG['extension_missing'] = 'Udvidelse mangler: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-de.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-de.php new file mode 100644 index 000000000..e7e59d2b6 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-de.php @@ -0,0 +1,28 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Error SMTP: Imposible autentificar.'; +$PHPMAILER_LANG['connect_host'] = 'Error SMTP: Imposible conectar al servidor SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Error SMTP: Datos no aceptados.'; +$PHPMAILER_LANG['empty_message'] = 'El cuerpo del mensaje está vacío.'; +$PHPMAILER_LANG['encoding'] = 'Codificación desconocida: '; +$PHPMAILER_LANG['execute'] = 'Imposible ejecutar: '; +$PHPMAILER_LANG['file_access'] = 'Imposible acceder al archivo: '; +$PHPMAILER_LANG['file_open'] = 'Error de Archivo: Imposible abrir el archivo: '; +$PHPMAILER_LANG['from_failed'] = 'La(s) siguiente(s) direcciones de remitente fallaron: '; +$PHPMAILER_LANG['instantiate'] = 'Imposible crear una instancia de la función Mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Imposible enviar: dirección de email inválido: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer no está soportado.'; +$PHPMAILER_LANG['provide_address'] = 'Debe proporcionar al menos una dirección de email de destino.'; +$PHPMAILER_LANG['recipients_failed'] = 'Error SMTP: Los siguientes destinos fallaron: '; +$PHPMAILER_LANG['signing'] = 'Error al firmar: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() falló.'; +$PHPMAILER_LANG['smtp_error'] = 'Error del servidor SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'No se pudo configurar la variable: '; +$PHPMAILER_LANG['extension_missing'] = 'Extensión faltante: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-et.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-et.php new file mode 100644 index 000000000..93addc9e3 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-et.php @@ -0,0 +1,28 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP Viga: Autoriseerimise viga.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Viga: Ei õnnestunud luua ühendust SMTP serveriga.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Viga: Vigased andmed.'; +$PHPMAILER_LANG['empty_message'] = 'Tühi kirja sisu'; +$PHPMAILER_LANG["encoding"] = 'Tundmatu kodeering: '; +$PHPMAILER_LANG['execute'] = 'Tegevus ebaõnnestus: '; +$PHPMAILER_LANG['file_access'] = 'Pole piisavalt õiguseid järgneva faili avamiseks: '; +$PHPMAILER_LANG['file_open'] = 'Faili Viga: Faili avamine ebaõnnestus: '; +$PHPMAILER_LANG['from_failed'] = 'Järgnev saatja e-posti aadress on vigane: '; +$PHPMAILER_LANG['instantiate'] = 'mail funktiooni käivitamine ebaõnnestus.'; +$PHPMAILER_LANG['invalid_address'] = 'Saatmine peatatud, e-posti address vigane: '; +$PHPMAILER_LANG['provide_address'] = 'Te peate määrama vähemalt ühe saaja e-posti aadressi.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' maileri tugi puudub.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Viga: Järgnevate saajate e-posti aadressid on vigased: '; +$PHPMAILER_LANG["signing"] = 'Viga allkirjastamisel: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() ebaõnnestus.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP serveri viga: '; +$PHPMAILER_LANG['variable_set'] = 'Ei õnnestunud määrata või lähtestada muutujat: '; +$PHPMAILER_LANG['extension_missing'] = 'Nõutud laiendus on puudu: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-fa.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-fa.php new file mode 100644 index 000000000..295a47f95 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-fa.php @@ -0,0 +1,28 @@ + + * @author Mohammad Hossein Mojtahedi + */ + +$PHPMAILER_LANG['authenticate'] = 'خطای SMTP: احراز هویت با شکست مواجه شد.'; +$PHPMAILER_LANG['connect_host'] = 'خطای SMTP: اتصال به سرور SMTP برقرار نشد.'; +$PHPMAILER_LANG['data_not_accepted'] = 'خطای SMTP: داده‌ها نا‌درست هستند.'; +$PHPMAILER_LANG['empty_message'] = 'بخش متن پیام خالی است.'; +$PHPMAILER_LANG['encoding'] = 'کد‌گذاری نا‌شناخته: '; +$PHPMAILER_LANG['execute'] = 'امکان اجرا وجود ندارد: '; +$PHPMAILER_LANG['file_access'] = 'امکان دسترسی به فایل وجود ندارد: '; +$PHPMAILER_LANG['file_open'] = 'خطای File: امکان بازکردن فایل وجود ندارد: '; +$PHPMAILER_LANG['from_failed'] = 'آدرس فرستنده اشتباه است: '; +$PHPMAILER_LANG['instantiate'] = 'امکان معرفی تابع ایمیل وجود ندارد.'; +$PHPMAILER_LANG['invalid_address'] = 'آدرس ایمیل معتبر نیست: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer پشتیبانی نمی‌شود.'; +$PHPMAILER_LANG['provide_address'] = 'باید حداقل یک آدرس گیرنده وارد کنید.'; +$PHPMAILER_LANG['recipients_failed'] = 'خطای SMTP: ارسال به آدرس گیرنده با خطا مواجه شد: '; +$PHPMAILER_LANG['signing'] = 'خطا در امضا: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'خطا در اتصال به SMTP.'; +$PHPMAILER_LANG['smtp_error'] = 'خطا در SMTP Server: '; +$PHPMAILER_LANG['variable_set'] = 'امکان ارسال یا ارسال مجدد متغیر‌ها وجود ندارد: '; +$PHPMAILER_LANG['extension_missing'] = 'افزونه موجود نیست: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-fi.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-fi.php new file mode 100644 index 000000000..243c05489 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-fi.php @@ -0,0 +1,28 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP feilur: Kundi ikki góðkenna.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP feilur: Kundi ikki knýta samband við SMTP vert.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP feilur: Data ikki góðkent.'; +//$PHPMAILER_LANG['empty_message'] = 'Message body empty'; +$PHPMAILER_LANG['encoding'] = 'Ókend encoding: '; +$PHPMAILER_LANG['execute'] = 'Kundi ikki útføra: '; +$PHPMAILER_LANG['file_access'] = 'Kundi ikki tilganga fílu: '; +$PHPMAILER_LANG['file_open'] = 'Fílu feilur: Kundi ikki opna fílu: '; +$PHPMAILER_LANG['from_failed'] = 'fylgjandi Frá/From adressa miseydnaðist: '; +$PHPMAILER_LANG['instantiate'] = 'Kuni ikki instantiera mail funktión.'; +//$PHPMAILER_LANG['invalid_address'] = 'Invalid address: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' er ikki supporterað.'; +$PHPMAILER_LANG['provide_address'] = 'Tú skal uppgeva minst móttakara-emailadressu(r).'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Feilur: Fylgjandi móttakarar miseydnaðust: '; +//$PHPMAILER_LANG['signing'] = 'Signing Error: '; +//$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() failed.'; +//$PHPMAILER_LANG['smtp_error'] = 'SMTP server error: '; +//$PHPMAILER_LANG['variable_set'] = 'Cannot set or reset variable: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-fr.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-fr.php new file mode 100644 index 000000000..b57f0ec66 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-fr.php @@ -0,0 +1,32 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Erro SMTP: Non puido ser autentificado.'; +$PHPMAILER_LANG['connect_host'] = 'Erro SMTP: Non puido conectar co servidor SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Erro SMTP: Datos non aceptados.'; +$PHPMAILER_LANG['empty_message'] = 'Corpo da mensaxe vacía'; +$PHPMAILER_LANG['encoding'] = 'Codificación descoñecida: '; +$PHPMAILER_LANG['execute'] = 'Non puido ser executado: '; +$PHPMAILER_LANG['file_access'] = 'Nob puido acceder ó arquivo: '; +$PHPMAILER_LANG['file_open'] = 'Erro de Arquivo: No puido abrir o arquivo: '; +$PHPMAILER_LANG['from_failed'] = 'A(s) seguinte(s) dirección(s) de remitente(s) deron erro: '; +$PHPMAILER_LANG['instantiate'] = 'Non puido crear unha instancia da función Mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Non puido envia-lo correo: dirección de email inválida: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer non está soportado.'; +$PHPMAILER_LANG['provide_address'] = 'Debe engadir polo menos unha dirección de email coma destino.'; +$PHPMAILER_LANG['recipients_failed'] = 'Erro SMTP: Os seguintes destinos fallaron: '; +$PHPMAILER_LANG['signing'] = 'Erro ó firmar: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() fallou.'; +$PHPMAILER_LANG['smtp_error'] = 'Erro do servidor SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Non puidemos axustar ou reaxustar a variábel: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-he.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-he.php new file mode 100644 index 000000000..b123aa5fc --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-he.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'שגיאת SMTP: פעולת האימות נכשלה.'; +$PHPMAILER_LANG['connect_host'] = 'שגיאת SMTP: לא הצלחתי להתחבר לשרת SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'שגיאת SMTP: מידע לא התקבל.'; +$PHPMAILER_LANG['empty_message'] = 'גוף ההודעה ריק'; +$PHPMAILER_LANG['invalid_address'] = 'כתובת שגויה: '; +$PHPMAILER_LANG['encoding'] = 'קידוד לא מוכר: '; +$PHPMAILER_LANG['execute'] = 'לא הצלחתי להפעיל את: '; +$PHPMAILER_LANG['file_access'] = 'לא ניתן לגשת לקובץ: '; +$PHPMAILER_LANG['file_open'] = 'שגיאת קובץ: לא ניתן לגשת לקובץ: '; +$PHPMAILER_LANG['from_failed'] = 'כתובות הנמענים הבאות נכשלו: '; +$PHPMAILER_LANG['instantiate'] = 'לא הצלחתי להפעיל את פונקציית המייל.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' אינה נתמכת.'; +$PHPMAILER_LANG['provide_address'] = 'חובה לספק לפחות כתובת אחת של מקבל המייל.'; +$PHPMAILER_LANG['recipients_failed'] = 'שגיאת SMTP: הנמענים הבאים נכשלו: '; +$PHPMAILER_LANG['signing'] = 'שגיאת חתימה: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() failed.'; +$PHPMAILER_LANG['smtp_error'] = 'שגיאת שרת SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'לא ניתן לקבוע או לשנות את המשתנה: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-hi.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-hi.php new file mode 100644 index 000000000..d973a3596 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-hi.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP त्रुटि: प्रामाणिकता की जांच नहीं हो सका। '; +$PHPMAILER_LANG['connect_host'] = 'SMTP त्रुटि: SMTP सर्वर से कनेक्ट नहीं हो सका। '; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP त्रुटि: डेटा स्वीकार नहीं किया जाता है। '; +$PHPMAILER_LANG['empty_message'] = 'संदेश खाली है। '; +$PHPMAILER_LANG['encoding'] = 'अज्ञात एन्कोडिंग प्रकार। '; +$PHPMAILER_LANG['execute'] = 'आदेश को निष्पादित करने में विफल। '; +$PHPMAILER_LANG['file_access'] = 'फ़ाइल उपलब्ध नहीं है। '; +$PHPMAILER_LANG['file_open'] = 'फ़ाइल त्रुटि: फाइल को खोला नहीं जा सका। '; +$PHPMAILER_LANG['from_failed'] = 'प्रेषक का पता गलत है। '; +$PHPMAILER_LANG['instantiate'] = 'मेल फ़ंक्शन कॉल नहीं कर सकता है।'; +$PHPMAILER_LANG['invalid_address'] = 'पता गलत है। '; +$PHPMAILER_LANG['mailer_not_supported'] = 'मेल सर्वर के साथ काम नहीं करता है। '; +$PHPMAILER_LANG['provide_address'] = 'आपको कम से कम एक प्राप्तकर्ता का ई-मेल पता प्रदान करना होगा।'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP त्रुटि: निम्न प्राप्तकर्ताओं को पते भेजने में विफल। '; +$PHPMAILER_LANG['signing'] = 'साइनअप त्रुटि:। '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP का connect () फ़ंक्शन विफल हुआ। '; +$PHPMAILER_LANG['smtp_error'] = 'SMTP सर्वर त्रुटि। '; +$PHPMAILER_LANG['variable_set'] = 'चर को बना या संशोधित नहीं किया जा सकता। '; +$PHPMAILER_LANG['extension_missing'] = 'एक्सटेन्षन गायब है: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-hr.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-hr.php new file mode 100644 index 000000000..cacb6c37e --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-hr.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP Greška: Neuspjela autentikacija.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Greška: Ne mogu se spojiti na SMTP poslužitelj.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Greška: Podatci nisu prihvaćeni.'; +$PHPMAILER_LANG['empty_message'] = 'Sadržaj poruke je prazan.'; +$PHPMAILER_LANG['encoding'] = 'Nepoznati encoding: '; +$PHPMAILER_LANG['execute'] = 'Nije moguće izvršiti naredbu: '; +$PHPMAILER_LANG['file_access'] = 'Nije moguće pristupiti datoteci: '; +$PHPMAILER_LANG['file_open'] = 'Nije moguće otvoriti datoteku: '; +$PHPMAILER_LANG['from_failed'] = 'SMTP Greška: Slanje s navedenih e-mail adresa nije uspjelo: '; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Greška: Slanje na navedenih e-mail adresa nije uspjelo: '; +$PHPMAILER_LANG['instantiate'] = 'Ne mogu pokrenuti mail funkcionalnost.'; +$PHPMAILER_LANG['invalid_address'] = 'E-mail nije poslan. Neispravna e-mail adresa: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer nije podržan.'; +$PHPMAILER_LANG['provide_address'] = 'Definirajte barem jednu adresu primatelja.'; +$PHPMAILER_LANG['signing'] = 'Greška prilikom prijave: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Spajanje na SMTP poslužitelj nije uspjelo.'; +$PHPMAILER_LANG['smtp_error'] = 'Greška SMTP poslužitelja: '; +$PHPMAILER_LANG['variable_set'] = 'Ne mogu postaviti varijablu niti ju vratiti nazad: '; +$PHPMAILER_LANG['extension_missing'] = 'Nedostaje proširenje: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-hu.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-hu.php new file mode 100644 index 000000000..e6b58b0db --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-hu.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP -ի սխալ: չհաջողվեց ստուգել իսկությունը.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP -ի սխալ: չհաջողվեց կապ հաստատել SMTP սերվերի հետ.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP -ի սխալ: տվյալները ընդունված չեն.'; +$PHPMAILER_LANG['empty_message'] = 'Հաղորդագրությունը դատարկ է'; +$PHPMAILER_LANG['encoding'] = 'Կոդավորման անհայտ տեսակ: '; +$PHPMAILER_LANG['execute'] = 'Չհաջողվեց իրականացնել հրամանը: '; +$PHPMAILER_LANG['file_access'] = 'Ֆայլը հասանելի չէ: '; +$PHPMAILER_LANG['file_open'] = 'Ֆայլի սխալ: ֆայլը չհաջողվեց բացել: '; +$PHPMAILER_LANG['from_failed'] = 'Ուղարկողի հետևյալ հասցեն սխալ է: '; +$PHPMAILER_LANG['instantiate'] = 'Հնարավոր չէ կանչել mail ֆունկցիան.'; +$PHPMAILER_LANG['invalid_address'] = 'Հասցեն սխալ է: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' փոստային սերվերի հետ չի աշխատում.'; +$PHPMAILER_LANG['provide_address'] = 'Անհրաժեշտ է տրամադրել գոնե մեկ ստացողի e-mail հասցե.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP -ի սխալ: չի հաջողվել ուղարկել հետևյալ ստացողների հասցեներին: '; +$PHPMAILER_LANG['signing'] = 'Ստորագրման սխալ: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP -ի connect() ֆունկցիան չի հաջողվել'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP սերվերի սխալ: '; +$PHPMAILER_LANG['variable_set'] = 'Չի հաջողվում ստեղծել կամ վերափոխել փոփոխականը: '; +$PHPMAILER_LANG['extension_missing'] = 'Հավելվածը բացակայում է: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-id.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-id.php new file mode 100644 index 000000000..212a11f13 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-id.php @@ -0,0 +1,31 @@ + + * @author @januridp + * @author Ian Mustafa + */ + +$PHPMAILER_LANG['authenticate'] = 'Kesalahan SMTP: Tidak dapat mengotentikasi.'; +$PHPMAILER_LANG['connect_host'] = 'Kesalahan SMTP: Tidak dapat terhubung ke host SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Kesalahan SMTP: Data tidak diterima.'; +$PHPMAILER_LANG['empty_message'] = 'Isi pesan kosong'; +$PHPMAILER_LANG['encoding'] = 'Pengkodean karakter tidak dikenali: '; +$PHPMAILER_LANG['execute'] = 'Tidak dapat menjalankan proses: '; +$PHPMAILER_LANG['file_access'] = 'Tidak dapat mengakses berkas: '; +$PHPMAILER_LANG['file_open'] = 'Kesalahan Berkas: Berkas tidak dapat dibuka: '; +$PHPMAILER_LANG['from_failed'] = 'Alamat pengirim berikut mengakibatkan kesalahan: '; +$PHPMAILER_LANG['instantiate'] = 'Tidak dapat menginisialisasi fungsi surel.'; +$PHPMAILER_LANG['invalid_address'] = 'Gagal terkirim, alamat surel tidak sesuai: '; +$PHPMAILER_LANG['invalid_hostentry'] = 'Gagal terkirim, entri host tidak sesuai: '; +$PHPMAILER_LANG['invalid_host'] = 'Gagal terkirim, host tidak sesuai: '; +$PHPMAILER_LANG['provide_address'] = 'Harus tersedia minimal satu alamat tujuan'; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer tidak didukung'; +$PHPMAILER_LANG['recipients_failed'] = 'Kesalahan SMTP: Alamat tujuan berikut menyebabkan kesalahan: '; +$PHPMAILER_LANG['signing'] = 'Kesalahan dalam penandatangan SSL: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() gagal.'; +$PHPMAILER_LANG['smtp_error'] = 'Kesalahan pada pelayan SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Tidak dapat mengatur atau mengatur ulang variabel: '; +$PHPMAILER_LANG['extension_missing'] = 'Ekstensi PHP tidak tersedia: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-it.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-it.php new file mode 100644 index 000000000..08a6b7333 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-it.php @@ -0,0 +1,28 @@ + + * @author Stefano Sabatini + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP Error: Impossibile autenticarsi.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Error: Impossibile connettersi all\'host SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Error: Dati non accettati dal server.'; +$PHPMAILER_LANG['empty_message'] = 'Il corpo del messaggio è vuoto'; +$PHPMAILER_LANG['encoding'] = 'Codifica dei caratteri sconosciuta: '; +$PHPMAILER_LANG['execute'] = 'Impossibile eseguire l\'operazione: '; +$PHPMAILER_LANG['file_access'] = 'Impossibile accedere al file: '; +$PHPMAILER_LANG['file_open'] = 'File Error: Impossibile aprire il file: '; +$PHPMAILER_LANG['from_failed'] = 'I seguenti indirizzi mittenti hanno generato errore: '; +$PHPMAILER_LANG['instantiate'] = 'Impossibile istanziare la funzione mail'; +$PHPMAILER_LANG['invalid_address'] = 'Impossibile inviare, l\'indirizzo email non è valido: '; +$PHPMAILER_LANG['provide_address'] = 'Deve essere fornito almeno un indirizzo ricevente'; +$PHPMAILER_LANG['mailer_not_supported'] = 'Mailer non supportato'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Error: I seguenti indirizzi destinatari hanno generato un errore: '; +$PHPMAILER_LANG['signing'] = 'Errore nella firma: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() fallita.'; +$PHPMAILER_LANG['smtp_error'] = 'Errore del server SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Impossibile impostare o resettare la variabile: '; +$PHPMAILER_LANG['extension_missing'] = 'Estensione mancante: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ja.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ja.php new file mode 100644 index 000000000..eee798988 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ja.php @@ -0,0 +1,28 @@ + + * @author Yoshi Sakai + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTPエラー: 認証できませんでした。'; +$PHPMAILER_LANG['connect_host'] = 'SMTPエラー: SMTPホストに接続できませんでした。'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTPエラー: データが受け付けられませんでした。'; +//$PHPMAILER_LANG['empty_message'] = 'Message body empty'; +$PHPMAILER_LANG['encoding'] = '不明なエンコーディング: '; +$PHPMAILER_LANG['execute'] = '実行できませんでした: '; +$PHPMAILER_LANG['file_access'] = 'ファイルにアクセスできません: '; +$PHPMAILER_LANG['file_open'] = 'ファイルエラー: ファイルを開けません: '; +$PHPMAILER_LANG['from_failed'] = 'Fromアドレスを登録する際にエラーが発生しました: '; +$PHPMAILER_LANG['instantiate'] = 'メール関数が正常に動作しませんでした。'; +//$PHPMAILER_LANG['invalid_address'] = 'Invalid address: '; +$PHPMAILER_LANG['provide_address'] = '少なくとも1つメールアドレスを 指定する必要があります。'; +$PHPMAILER_LANG['mailer_not_supported'] = ' メーラーがサポートされていません。'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTPエラー: 次の受信者アドレスに 間違いがあります: '; +//$PHPMAILER_LANG['signing'] = 'Signing Error: '; +//$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() failed.'; +//$PHPMAILER_LANG['smtp_error'] = 'SMTP server error: '; +//$PHPMAILER_LANG['variable_set'] = 'Cannot set or reset variable: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ka.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ka.php new file mode 100644 index 000000000..51fe403b4 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ka.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP შეცდომა: ავტორიზაცია შეუძლებელია.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP შეცდომა: SMTP სერვერთან დაკავშირება შეუძლებელია.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP შეცდომა: მონაცემები არ იქნა მიღებული.'; +$PHPMAILER_LANG['encoding'] = 'კოდირების უცნობი ტიპი: '; +$PHPMAILER_LANG['execute'] = 'შეუძლებელია შემდეგი ბრძანების შესრულება: '; +$PHPMAILER_LANG['file_access'] = 'შეუძლებელია წვდომა ფაილთან: '; +$PHPMAILER_LANG['file_open'] = 'ფაილური სისტემის შეცდომა: არ იხსნება ფაილი: '; +$PHPMAILER_LANG['from_failed'] = 'გამგზავნის არასწორი მისამართი: '; +$PHPMAILER_LANG['instantiate'] = 'mail ფუნქციის გაშვება ვერ ხერხდება.'; +$PHPMAILER_LANG['provide_address'] = 'გთხოვთ მიუთითოთ ერთი ადრესატის e-mail მისამართი მაინც.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' - საფოსტო სერვერის მხარდაჭერა არ არის.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP შეცდომა: შემდეგ მისამართებზე გაგზავნა ვერ მოხერხდა: '; +$PHPMAILER_LANG['empty_message'] = 'შეტყობინება ცარიელია'; +$PHPMAILER_LANG['invalid_address'] = 'არ გაიგზავნა, e-mail მისამართის არასწორი ფორმატი: '; +$PHPMAILER_LANG['signing'] = 'ხელმოწერის შეცდომა: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'შეცდომა SMTP სერვერთან დაკავშირებისას'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP სერვერის შეცდომა: '; +$PHPMAILER_LANG['variable_set'] = 'შეუძლებელია შემდეგი ცვლადის შექმნა ან შეცვლა: '; +$PHPMAILER_LANG['extension_missing'] = 'ბიბლიოთეკა არ არსებობს: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ko.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ko.php new file mode 100644 index 000000000..8c97dd947 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ko.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP 오류: 인증할 수 없습니다.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP 오류: SMTP 호스트에 접속할 수 없습니다.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP 오류: 데이터가 받아들여지지 않았습니다.'; +$PHPMAILER_LANG['empty_message'] = '메세지 내용이 없습니다'; +$PHPMAILER_LANG['encoding'] = '알 수 없는 인코딩: '; +$PHPMAILER_LANG['execute'] = '실행 불가: '; +$PHPMAILER_LANG['file_access'] = '파일 접근 불가: '; +$PHPMAILER_LANG['file_open'] = '파일 오류: 파일을 열 수 없습니다: '; +$PHPMAILER_LANG['from_failed'] = '다음 From 주소에서 오류가 발생했습니다: '; +$PHPMAILER_LANG['instantiate'] = 'mail 함수를 인스턴스화할 수 없습니다'; +$PHPMAILER_LANG['invalid_address'] = '잘못된 주소: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' 메일러는 지원되지 않습니다.'; +$PHPMAILER_LANG['provide_address'] = '적어도 한 개 이상의 수신자 메일 주소를 제공해야 합니다.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP 오류: 다음 수신자에서 오류가 발생했습니다: '; +$PHPMAILER_LANG['signing'] = '서명 오류: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP 연결을 실패하였습니다.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP 서버 오류: '; +$PHPMAILER_LANG['variable_set'] = '변수 설정 및 초기화 불가: '; +$PHPMAILER_LANG['extension_missing'] = '확장자 없음: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-lt.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-lt.php new file mode 100644 index 000000000..4f115b1c5 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-lt.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP klaida: autentifikacija nepavyko.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP klaida: nepavyksta prisijungti prie SMTP stoties.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP klaida: duomenys nepriimti.'; +$PHPMAILER_LANG['empty_message'] = 'Laiško turinys tuščias'; +$PHPMAILER_LANG['encoding'] = 'Neatpažinta koduotė: '; +$PHPMAILER_LANG['execute'] = 'Nepavyko įvykdyti komandos: '; +$PHPMAILER_LANG['file_access'] = 'Byla nepasiekiama: '; +$PHPMAILER_LANG['file_open'] = 'Bylos klaida: Nepavyksta atidaryti: '; +$PHPMAILER_LANG['from_failed'] = 'Neteisingas siuntėjo adresas: '; +$PHPMAILER_LANG['instantiate'] = 'Nepavyko paleisti mail funkcijos.'; +$PHPMAILER_LANG['invalid_address'] = 'Neteisingas adresas: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' pašto stotis nepalaikoma.'; +$PHPMAILER_LANG['provide_address'] = 'Nurodykite bent vieną gavėjo adresą.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP klaida: nepavyko išsiųsti šiems gavėjams: '; +$PHPMAILER_LANG['signing'] = 'Prisijungimo klaida: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP susijungimo klaida'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP stoties klaida: '; +$PHPMAILER_LANG['variable_set'] = 'Nepavyko priskirti reikšmės kintamajam: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-lv.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-lv.php new file mode 100644 index 000000000..679b18cf9 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-lv.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP kļūda: Autorizācija neizdevās.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Kļūda: Nevar izveidot savienojumu ar SMTP serveri.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Kļūda: Nepieņem informāciju.'; +$PHPMAILER_LANG['empty_message'] = 'Ziņojuma teksts ir tukšs'; +$PHPMAILER_LANG['encoding'] = 'Neatpazīts kodējums: '; +$PHPMAILER_LANG['execute'] = 'Neizdevās izpildīt komandu: '; +$PHPMAILER_LANG['file_access'] = 'Fails nav pieejams: '; +$PHPMAILER_LANG['file_open'] = 'Faila kļūda: Nevar atvērt failu: '; +$PHPMAILER_LANG['from_failed'] = 'Nepareiza sūtītāja adrese: '; +$PHPMAILER_LANG['instantiate'] = 'Nevar palaist sūtīšanas funkciju.'; +$PHPMAILER_LANG['invalid_address'] = 'Nepareiza adrese: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' sūtītājs netiek atbalstīts.'; +$PHPMAILER_LANG['provide_address'] = 'Lūdzu, norādiet vismaz vienu adresātu.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP kļūda: neizdevās nosūtīt šādiem saņēmējiem: '; +$PHPMAILER_LANG['signing'] = 'Autorizācijas kļūda: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP savienojuma kļūda'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP servera kļūda: '; +$PHPMAILER_LANG['variable_set'] = 'Nevar piešķirt mainīgā vērtību: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-mg.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-mg.php new file mode 100644 index 000000000..8a94f6a04 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-mg.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Hadisoana SMTP: Tsy nahomby ny fanamarinana.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Error: Tsy afaka mampifandray amin\'ny mpampiantrano SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP diso: tsy voarakitra ny angona.'; +$PHPMAILER_LANG['empty_message'] = 'Tsy misy ny votoaty mailaka.'; +$PHPMAILER_LANG['encoding'] = 'Tsy fantatra encoding: '; +$PHPMAILER_LANG['execute'] = 'Tsy afaka manatanteraka ity baiko manaraka ity: '; +$PHPMAILER_LANG['file_access'] = 'Tsy nahomby ny fidirana amin\'ity rakitra ity: '; +$PHPMAILER_LANG['file_open'] = 'Hadisoana diso: Tsy afaka nanokatra ity file manaraka ity: '; +$PHPMAILER_LANG['from_failed'] = 'Ny adiresy iraka manaraka dia diso: '; +$PHPMAILER_LANG['instantiate'] = 'Tsy afaka nanomboka ny hetsika mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Tsy mety ny adiresy: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer tsy manohana.'; +$PHPMAILER_LANG['provide_address'] = 'Alefaso azafady iray adiresy iray farafahakeliny.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Error: Tsy mety ireo mpanaraka ireto: '; +$PHPMAILER_LANG['signing'] = 'Error nandritra ny sonia:'; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Tsy nahomby ny fifandraisana tamin\'ny server SMTP.'; +$PHPMAILER_LANG['smtp_error'] = 'Fahadisoana tamin\'ny server SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Tsy azo atao ny mametraka na mamerina ny variable: '; +$PHPMAILER_LANG['extension_missing'] = 'Tsy hita ny ampahany: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ms.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ms.php new file mode 100644 index 000000000..71db33834 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ms.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Ralat SMTP: Tidak dapat pengesahan.'; +$PHPMAILER_LANG['connect_host'] = 'Ralat SMTP: Tidak dapat menghubungi hos pelayan SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Ralat SMTP: Data tidak diterima oleh pelayan.'; +$PHPMAILER_LANG['empty_message'] = 'Tiada isi untuk mesej'; +$PHPMAILER_LANG['encoding'] = 'Pengekodan tidak diketahui: '; +$PHPMAILER_LANG['execute'] = 'Tidak dapat melaksanakan: '; +$PHPMAILER_LANG['file_access'] = 'Tidak dapat mengakses fail: '; +$PHPMAILER_LANG['file_open'] = 'Ralat Fail: Tidak dapat membuka fail: '; +$PHPMAILER_LANG['from_failed'] = 'Berikut merupakan ralat dari alamat e-mel: '; +$PHPMAILER_LANG['instantiate'] = 'Tidak dapat memberi contoh fungsi e-mel.'; +$PHPMAILER_LANG['invalid_address'] = 'Alamat emel tidak sah: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' jenis penghantar emel tidak disokong.'; +$PHPMAILER_LANG['provide_address'] = 'Anda perlu menyediakan sekurang-kurangnya satu alamat e-mel penerima.'; +$PHPMAILER_LANG['recipients_failed'] = 'Ralat SMTP: Penerima e-mel berikut telah gagal: '; +$PHPMAILER_LANG['signing'] = 'Ralat pada tanda tangan: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() telah gagal.'; +$PHPMAILER_LANG['smtp_error'] = 'Ralat pada pelayan SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Tidak boleh menetapkan atau menetapkan semula pembolehubah: '; +$PHPMAILER_LANG['extension_missing'] = 'Sambungan hilang: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-nb.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-nb.php new file mode 100644 index 000000000..65793ce2b --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-nb.php @@ -0,0 +1,26 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP-fout: authenticatie mislukt.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP-fout: kon niet verbinden met SMTP-host.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP-fout: data niet geaccepteerd.'; +$PHPMAILER_LANG['empty_message'] = 'Berichttekst is leeg'; +$PHPMAILER_LANG['encoding'] = 'Onbekende codering: '; +$PHPMAILER_LANG['execute'] = 'Kon niet uitvoeren: '; +$PHPMAILER_LANG['file_access'] = 'Kreeg geen toegang tot bestand: '; +$PHPMAILER_LANG['file_open'] = 'Bestandsfout: kon bestand niet openen: '; +$PHPMAILER_LANG['from_failed'] = 'Het volgende afzendersadres is mislukt: '; +$PHPMAILER_LANG['instantiate'] = 'Kon mailfunctie niet initialiseren.'; +$PHPMAILER_LANG['invalid_address'] = 'Ongeldig adres: '; +$PHPMAILER_LANG['invalid_hostentry'] = 'Ongeldige hostentry: '; +$PHPMAILER_LANG['invalid_host'] = 'Ongeldige host: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer wordt niet ondersteund.'; +$PHPMAILER_LANG['provide_address'] = 'Er moet minstens één ontvanger worden opgegeven.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP-fout: de volgende ontvangers zijn mislukt: '; +$PHPMAILER_LANG['signing'] = 'Signeerfout: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Verbinding mislukt.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP-serverfout: '; +$PHPMAILER_LANG['variable_set'] = 'Kan de volgende variabele niet instellen of resetten: '; +$PHPMAILER_LANG['extension_missing'] = 'Extensie afwezig: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-pl.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-pl.php new file mode 100644 index 000000000..23caa71be --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-pl.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Erro do SMTP: Não foi possível realizar a autenticação.'; +$PHPMAILER_LANG['connect_host'] = 'Erro do SMTP: Não foi possível realizar ligação com o servidor SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Erro do SMTP: Os dados foram rejeitados.'; +$PHPMAILER_LANG['empty_message'] = 'A mensagem no e-mail está vazia.'; +$PHPMAILER_LANG['encoding'] = 'Codificação desconhecida: '; +$PHPMAILER_LANG['execute'] = 'Não foi possível executar: '; +$PHPMAILER_LANG['file_access'] = 'Não foi possível aceder o ficheiro: '; +$PHPMAILER_LANG['file_open'] = 'Abertura do ficheiro: Não foi possível abrir o ficheiro: '; +$PHPMAILER_LANG['from_failed'] = 'Ocorreram falhas nos endereços dos seguintes remententes: '; +$PHPMAILER_LANG['instantiate'] = 'Não foi possível iniciar uma instância da função mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Não foi enviado nenhum e-mail para o endereço de e-mail inválido: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer não é suportado.'; +$PHPMAILER_LANG['provide_address'] = 'Tem de fornecer pelo menos um endereço como destinatário do e-mail.'; +$PHPMAILER_LANG['recipients_failed'] = 'Erro do SMTP: O endereço do seguinte destinatário falhou: '; +$PHPMAILER_LANG['signing'] = 'Erro ao assinar: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() falhou.'; +$PHPMAILER_LANG['smtp_error'] = 'Erro de servidor SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Não foi possível definir ou redefinir a variável: '; +$PHPMAILER_LANG['extension_missing'] = 'Extensão em falta: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-pt_br.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-pt_br.php new file mode 100644 index 000000000..d8638098c --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-pt_br.php @@ -0,0 +1,30 @@ + + * @author Lucas Guimarães + * @author Phelipe Alves + * @author Fabio Beneditto + */ + +$PHPMAILER_LANG['authenticate'] = 'Erro de SMTP: Não foi possível autenticar.'; +$PHPMAILER_LANG['connect_host'] = 'Erro de SMTP: Não foi possível conectar ao servidor SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Erro de SMTP: Dados rejeitados.'; +$PHPMAILER_LANG['empty_message'] = 'Mensagem vazia'; +$PHPMAILER_LANG['encoding'] = 'Codificação desconhecida: '; +$PHPMAILER_LANG['execute'] = 'Não foi possível executar: '; +$PHPMAILER_LANG['file_access'] = 'Não foi possível acessar o arquivo: '; +$PHPMAILER_LANG['file_open'] = 'Erro de Arquivo: Não foi possível abrir o arquivo: '; +$PHPMAILER_LANG['from_failed'] = 'Os seguintes remetentes falharam: '; +$PHPMAILER_LANG['instantiate'] = 'Não foi possível instanciar a função mail.'; +$PHPMAILER_LANG['invalid_address'] = 'Endereço de e-mail inválido: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer não é suportado.'; +$PHPMAILER_LANG['provide_address'] = 'Você deve informar pelo menos um destinatário.'; +$PHPMAILER_LANG['recipients_failed'] = 'Erro de SMTP: Os seguintes destinatários falharam: '; +$PHPMAILER_LANG['signing'] = 'Erro de Assinatura: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() falhou.'; +$PHPMAILER_LANG['smtp_error'] = 'Erro de servidor SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Não foi possível definir ou redefinir a variável: '; +$PHPMAILER_LANG['extension_missing'] = 'Extensão não existe: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ro.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ro.php new file mode 100644 index 000000000..292ec1e48 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ro.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Eroare SMTP: Autentificarea a eșuat.'; +$PHPMAILER_LANG['connect_host'] = 'Eroare SMTP: Conectarea la serverul SMTP a eșuat.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Eroare SMTP: Datele nu au fost acceptate.'; +$PHPMAILER_LANG['empty_message'] = 'Mesajul este gol.'; +$PHPMAILER_LANG['encoding'] = 'Encodare necunoscută: '; +$PHPMAILER_LANG['execute'] = 'Nu se poate executa următoarea comandă: '; +$PHPMAILER_LANG['file_access'] = 'Nu se poate accesa următorul fișier: '; +$PHPMAILER_LANG['file_open'] = 'Eroare fișier: Nu se poate deschide următorul fișier: '; +$PHPMAILER_LANG['from_failed'] = 'Următoarele adrese From au dat eroare: '; +$PHPMAILER_LANG['instantiate'] = 'Funcția mail nu a putut fi inițializată.'; +$PHPMAILER_LANG['invalid_address'] = 'Adresa de email nu este validă: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer nu este suportat.'; +$PHPMAILER_LANG['provide_address'] = 'Trebuie să adăugați cel puțin o adresă de email.'; +$PHPMAILER_LANG['recipients_failed'] = 'Eroare SMTP: Următoarele adrese de email au eșuat: '; +$PHPMAILER_LANG['signing'] = 'A aparut o problemă la semnarea emailului. '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Conectarea la serverul SMTP a eșuat.'; +$PHPMAILER_LANG['smtp_error'] = 'Eroare server SMTP: '; +$PHPMAILER_LANG['variable_set'] = 'Nu se poate seta/reseta variabila. '; +$PHPMAILER_LANG['extension_missing'] = 'Lipsește extensia: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-ru.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ru.php new file mode 100644 index 000000000..8c8c5e817 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-ru.php @@ -0,0 +1,28 @@ + + * @author Foster Snowhill + */ + +$PHPMAILER_LANG['authenticate'] = 'Ошибка SMTP: ошибка авторизации.'; +$PHPMAILER_LANG['connect_host'] = 'Ошибка SMTP: не удается подключиться к SMTP-серверу.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Ошибка SMTP: данные не приняты.'; +$PHPMAILER_LANG['encoding'] = 'Неизвестная кодировка: '; +$PHPMAILER_LANG['execute'] = 'Невозможно выполнить команду: '; +$PHPMAILER_LANG['file_access'] = 'Нет доступа к файлу: '; +$PHPMAILER_LANG['file_open'] = 'Файловая ошибка: не удаётся открыть файл: '; +$PHPMAILER_LANG['from_failed'] = 'Неверный адрес отправителя: '; +$PHPMAILER_LANG['instantiate'] = 'Невозможно запустить функцию mail().'; +$PHPMAILER_LANG['provide_address'] = 'Пожалуйста, введите хотя бы один email-адрес получателя.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' — почтовый сервер не поддерживается.'; +$PHPMAILER_LANG['recipients_failed'] = 'Ошибка SMTP: не удалась отправка таким адресатам: '; +$PHPMAILER_LANG['empty_message'] = 'Пустое сообщение'; +$PHPMAILER_LANG['invalid_address'] = 'Не отправлено из-за неправильного формата email-адреса: '; +$PHPMAILER_LANG['signing'] = 'Ошибка подписи: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Ошибка соединения с SMTP-сервером'; +$PHPMAILER_LANG['smtp_error'] = 'Ошибка SMTP-сервера: '; +$PHPMAILER_LANG['variable_set'] = 'Невозможно установить или сбросить переменную: '; +$PHPMAILER_LANG['extension_missing'] = 'Расширение отсутствует: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-sk.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sk.php new file mode 100644 index 000000000..a1cfb2889 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sk.php @@ -0,0 +1,28 @@ + + * @author Peter Orlický + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP Error: Chyba autentifikácie.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Error: Nebolo možné nadviazať spojenie so SMTP serverom.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Error: Dáta neboli prijaté'; +$PHPMAILER_LANG['empty_message'] = 'Prázdne telo správy.'; +$PHPMAILER_LANG['encoding'] = 'Neznáme kódovanie: '; +$PHPMAILER_LANG['execute'] = 'Nedá sa vykonať: '; +$PHPMAILER_LANG['file_access'] = 'Súbor nebol nájdený: '; +$PHPMAILER_LANG['file_open'] = 'File Error: Súbor sa otvoriť pre čítanie: '; +$PHPMAILER_LANG['from_failed'] = 'Následujúca adresa From je nesprávna: '; +$PHPMAILER_LANG['instantiate'] = 'Nedá sa vytvoriť inštancia emailovej funkcie.'; +$PHPMAILER_LANG['invalid_address'] = 'Neodoslané, emailová adresa je nesprávna: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' emailový klient nieje podporovaný.'; +$PHPMAILER_LANG['provide_address'] = 'Musíte zadať aspoň jednu emailovú adresu príjemcu.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Error: Adresy príjemcov niesu správne '; +$PHPMAILER_LANG['signing'] = 'Chyba prihlasovania: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() zlyhalo.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP chyba serveru: '; +$PHPMAILER_LANG['variable_set'] = 'Nemožno nastaviť alebo resetovať premennú: '; +$PHPMAILER_LANG['extension_missing'] = 'Chýba rozšírenie: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-sl.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sl.php new file mode 100644 index 000000000..c437a8862 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sl.php @@ -0,0 +1,31 @@ + + * @author Filip Š + * @author Blaž Oražem + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP napaka: Avtentikacija ni uspela.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP napaka: Vzpostavljanje povezave s SMTP gostiteljem ni uspelo.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP napaka: Strežnik zavrača podatke.'; +$PHPMAILER_LANG['empty_message'] = 'E-poštno sporočilo nima vsebine.'; +$PHPMAILER_LANG['encoding'] = 'Nepoznan tip kodiranja: '; +$PHPMAILER_LANG['execute'] = 'Operacija ni uspela: '; +$PHPMAILER_LANG['file_access'] = 'Nimam dostopa do datoteke: '; +$PHPMAILER_LANG['file_open'] = 'Ne morem odpreti datoteke: '; +$PHPMAILER_LANG['from_failed'] = 'Neveljaven e-naslov pošiljatelja: '; +$PHPMAILER_LANG['instantiate'] = 'Ne morem inicializirati mail funkcije.'; +$PHPMAILER_LANG['invalid_address'] = 'E-poštno sporočilo ni bilo poslano. E-naslov je neveljaven: '; +$PHPMAILER_LANG['invalid_hostentry'] = 'Neveljaven vnos gostitelja: '; +$PHPMAILER_LANG['invalid_host'] = 'Neveljaven gostitelj: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer ni podprt.'; +$PHPMAILER_LANG['provide_address'] = 'Prosimo, vnesite vsaj enega naslovnika.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP napaka: Sledeči naslovniki so neveljavni: '; +$PHPMAILER_LANG['signing'] = 'Napaka pri podpisovanju: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Ne morem vzpostaviti povezave s SMTP strežnikom.'; +$PHPMAILER_LANG['smtp_error'] = 'Napaka SMTP strežnika: '; +$PHPMAILER_LANG['variable_set'] = 'Ne morem nastaviti oz. ponastaviti spremenljivke: '; +$PHPMAILER_LANG['extension_missing'] = 'Manjkajoča razširitev: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-sr.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sr.php new file mode 100644 index 000000000..0b5280f75 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sr.php @@ -0,0 +1,28 @@ + + * @author Miloš Milanović + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP грешка: аутентификација није успела.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP грешка: повезивање са SMTP сервером није успело.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP грешка: подаци нису прихваћени.'; +$PHPMAILER_LANG['empty_message'] = 'Садржај поруке је празан.'; +$PHPMAILER_LANG['encoding'] = 'Непознато кодирање: '; +$PHPMAILER_LANG['execute'] = 'Није могуће извршити наредбу: '; +$PHPMAILER_LANG['file_access'] = 'Није могуће приступити датотеци: '; +$PHPMAILER_LANG['file_open'] = 'Није могуће отворити датотеку: '; +$PHPMAILER_LANG['from_failed'] = 'SMTP грешка: слање са следећих адреса није успело: '; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP грешка: слање на следеће адресе није успело: '; +$PHPMAILER_LANG['instantiate'] = 'Није могуће покренути mail функцију.'; +$PHPMAILER_LANG['invalid_address'] = 'Порука није послата. Неисправна адреса: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' мејлер није подржан.'; +$PHPMAILER_LANG['provide_address'] = 'Дефинишите бар једну адресу примаоца.'; +$PHPMAILER_LANG['signing'] = 'Грешка приликом пријаве: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Повезивање са SMTP сервером није успело.'; +$PHPMAILER_LANG['smtp_error'] = 'Грешка SMTP сервера: '; +$PHPMAILER_LANG['variable_set'] = 'Није могуће задати нити ресетовати променљиву: '; +$PHPMAILER_LANG['extension_missing'] = 'Недостаје проширење: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-sv.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sv.php new file mode 100644 index 000000000..9872c1921 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-sv.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP fel: Kunde inte autentisera.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP fel: Kunde inte ansluta till SMTP-server.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP fel: Data accepterades inte.'; +//$PHPMAILER_LANG['empty_message'] = 'Message body empty'; +$PHPMAILER_LANG['encoding'] = 'Okänt encode-format: '; +$PHPMAILER_LANG['execute'] = 'Kunde inte köra: '; +$PHPMAILER_LANG['file_access'] = 'Ingen åtkomst till fil: '; +$PHPMAILER_LANG['file_open'] = 'Fil fel: Kunde inte öppna fil: '; +$PHPMAILER_LANG['from_failed'] = 'Följande avsändaradress är felaktig: '; +$PHPMAILER_LANG['instantiate'] = 'Kunde inte initiera e-postfunktion.'; +$PHPMAILER_LANG['invalid_address'] = 'Felaktig adress: '; +$PHPMAILER_LANG['provide_address'] = 'Du måste ange minst en mottagares e-postadress.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' mailer stöds inte.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP fel: Följande mottagare är felaktig: '; +$PHPMAILER_LANG['signing'] = 'Signeringsfel: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP Connect() misslyckades.'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP serverfel: '; +$PHPMAILER_LANG['variable_set'] = 'Kunde inte definiera eller återställa variabel: '; +$PHPMAILER_LANG['extension_missing'] = 'Tillägg ej tillgängligt: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-tl.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-tl.php new file mode 100644 index 000000000..d15bed1c8 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-tl.php @@ -0,0 +1,28 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP Error: Hindi mapatotohanan.'; +$PHPMAILER_LANG['connect_host'] = 'SMTP Error: Hindi makakonekta sa SMTP host.'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP Error: Ang datos ay hindi naitanggap.'; +$PHPMAILER_LANG['empty_message'] = 'Walang laman ang mensahe'; +$PHPMAILER_LANG['encoding'] = 'Hindi alam ang encoding: '; +$PHPMAILER_LANG['execute'] = 'Hindi maisasagawa: '; +$PHPMAILER_LANG['file_access'] = 'Hindi ma-access ang file: '; +$PHPMAILER_LANG['file_open'] = 'File Error: Hindi mabuksan ang file: '; +$PHPMAILER_LANG['from_failed'] = 'Ang sumusunod na address ay nabigo: '; +$PHPMAILER_LANG['instantiate'] = 'Hindi maisimulan ang instance ng mail function.'; +$PHPMAILER_LANG['invalid_address'] = 'Hindi wasto ang address na naibigay: '; +$PHPMAILER_LANG['mailer_not_supported'] = 'Ang mailer ay hindi suportado.'; +$PHPMAILER_LANG['provide_address'] = 'Kailangan mong magbigay ng kahit isang email address na tatanggap.'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP Error: Ang mga sumusunod na tatanggap ay nabigo: '; +$PHPMAILER_LANG['signing'] = 'Hindi ma-sign: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Ang SMTP connect() ay nabigo.'; +$PHPMAILER_LANG['smtp_error'] = 'Ang server ng SMTP ay nabigo: '; +$PHPMAILER_LANG['variable_set'] = 'Hindi matatakda o ma-reset ang mga variables: '; +$PHPMAILER_LANG['extension_missing'] = 'Nawawala ang extension: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-tr.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-tr.php new file mode 100644 index 000000000..f938f8020 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-tr.php @@ -0,0 +1,31 @@ + + * @fixed by Boris Yurchenko + */ + +$PHPMAILER_LANG['authenticate'] = 'Помилка SMTP: помилка авторизації.'; +$PHPMAILER_LANG['connect_host'] = 'Помилка SMTP: не вдається під\'єднатися до SMTP-серверу.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Помилка SMTP: дані не прийнято.'; +$PHPMAILER_LANG['encoding'] = 'Невідоме кодування: '; +$PHPMAILER_LANG['execute'] = 'Неможливо виконати команду: '; +$PHPMAILER_LANG['file_access'] = 'Немає доступу до файлу: '; +$PHPMAILER_LANG['file_open'] = 'Помилка файлової системи: не вдається відкрити файл: '; +$PHPMAILER_LANG['from_failed'] = 'Невірна адреса відправника: '; +$PHPMAILER_LANG['instantiate'] = 'Неможливо запустити функцію mail().'; +$PHPMAILER_LANG['provide_address'] = 'Будь-ласка, введіть хоча б одну email-адресу отримувача.'; +$PHPMAILER_LANG['mailer_not_supported'] = ' - поштовий сервер не підтримується.'; +$PHPMAILER_LANG['recipients_failed'] = 'Помилка SMTP: не вдалося відправлення для таких отримувачів: '; +$PHPMAILER_LANG['empty_message'] = 'Пусте повідомлення'; +$PHPMAILER_LANG['invalid_address'] = 'Не відправлено через невірний формат email-адреси: '; +$PHPMAILER_LANG['signing'] = 'Помилка підпису: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Помилка з\'єднання з SMTP-сервером'; +$PHPMAILER_LANG['smtp_error'] = 'Помилка SMTP-сервера: '; +$PHPMAILER_LANG['variable_set'] = 'Неможливо встановити або скинути змінну: '; +$PHPMAILER_LANG['extension_missing'] = 'Розширення відсутнє: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-vi.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-vi.php new file mode 100644 index 000000000..d65576e2d --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-vi.php @@ -0,0 +1,27 @@ + + */ + +$PHPMAILER_LANG['authenticate'] = 'Lỗi SMTP: Không thể xác thực.'; +$PHPMAILER_LANG['connect_host'] = 'Lỗi SMTP: Không thể kết nối máy chủ SMTP.'; +$PHPMAILER_LANG['data_not_accepted'] = 'Lỗi SMTP: Dữ liệu không được chấp nhận.'; +$PHPMAILER_LANG['empty_message'] = 'Không có nội dung'; +$PHPMAILER_LANG['encoding'] = 'Mã hóa không xác định: '; +$PHPMAILER_LANG['execute'] = 'Không thực hiện được: '; +$PHPMAILER_LANG['file_access'] = 'Không thể truy cập tệp tin '; +$PHPMAILER_LANG['file_open'] = 'Lỗi Tập tin: Không thể mở tệp tin: '; +$PHPMAILER_LANG['from_failed'] = 'Lỗi địa chỉ gửi đi: '; +$PHPMAILER_LANG['instantiate'] = 'Không dùng được các hàm gửi thư.'; +$PHPMAILER_LANG['invalid_address'] = 'Đại chỉ emai không đúng: '; +$PHPMAILER_LANG['mailer_not_supported'] = ' trình gửi thư không được hỗ trợ.'; +$PHPMAILER_LANG['provide_address'] = 'Bạn phải cung cấp ít nhất một địa chỉ người nhận.'; +$PHPMAILER_LANG['recipients_failed'] = 'Lỗi SMTP: lỗi địa chỉ người nhận: '; +$PHPMAILER_LANG['signing'] = 'Lỗi đăng nhập: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'Lỗi kết nối với SMTP'; +$PHPMAILER_LANG['smtp_error'] = 'Lỗi máy chủ smtp '; +$PHPMAILER_LANG['variable_set'] = 'Không thể thiết lập hoặc thiết lập lại biến: '; +//$PHPMAILER_LANG['extension_missing'] = 'Extension missing: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh.php new file mode 100644 index 000000000..35e4e7000 --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh.php @@ -0,0 +1,29 @@ + + * @author Peter Dave Hello <@PeterDaveHello/> + * @author Jason Chiang + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP 錯誤：登入失敗。'; +$PHPMAILER_LANG['connect_host'] = 'SMTP 錯誤：無法連線到 SMTP 主機。'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP 錯誤：無法接受的資料。'; +$PHPMAILER_LANG['empty_message'] = '郵件內容為空'; +$PHPMAILER_LANG['encoding'] = '未知編碼: '; +$PHPMAILER_LANG['execute'] = '無法執行：'; +$PHPMAILER_LANG['file_access'] = '無法存取檔案：'; +$PHPMAILER_LANG['file_open'] = '檔案錯誤：無法開啟檔案：'; +$PHPMAILER_LANG['from_failed'] = '發送地址錯誤：'; +$PHPMAILER_LANG['instantiate'] = '未知函數呼叫。'; +$PHPMAILER_LANG['invalid_address'] = '因為電子郵件地址無效，無法傳送: '; +$PHPMAILER_LANG['mailer_not_supported'] = '不支援的發信客戶端。'; +$PHPMAILER_LANG['provide_address'] = '必須提供至少一個收件人地址。'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP 錯誤：以下收件人地址錯誤：'; +$PHPMAILER_LANG['signing'] = '電子簽章錯誤: '; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP 連線失敗'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP 伺服器錯誤: '; +$PHPMAILER_LANG['variable_set'] = '無法設定或重設變數: '; +$PHPMAILER_LANG['extension_missing'] = '遺失模組 Extension: '; diff --git a/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh_cn.php b/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh_cn.php new file mode 100644 index 000000000..728a4994c --- /dev/null +++ b/vendor/phpmailer/phpmailer/language/phpmailer.lang-zh_cn.php @@ -0,0 +1,29 @@ + + * @author young + * @author Teddysun + */ + +$PHPMAILER_LANG['authenticate'] = 'SMTP 错误：登录失败。'; +$PHPMAILER_LANG['connect_host'] = 'SMTP 错误：无法连接到 SMTP 主机。'; +$PHPMAILER_LANG['data_not_accepted'] = 'SMTP 错误：数据不被接受。'; +$PHPMAILER_LANG['empty_message'] = '邮件正文为空。'; +$PHPMAILER_LANG['encoding'] = '未知编码：'; +$PHPMAILER_LANG['execute'] = '无法执行：'; +$PHPMAILER_LANG['file_access'] = '无法访问文件：'; +$PHPMAILER_LANG['file_open'] = '文件错误：无法打开文件：'; +$PHPMAILER_LANG['from_failed'] = '发送地址错误：'; +$PHPMAILER_LANG['instantiate'] = '未知函数调用。'; +$PHPMAILER_LANG['invalid_address'] = '发送失败，电子邮箱地址是无效的：'; +$PHPMAILER_LANG['mailer_not_supported'] = '发信客户端不被支持。'; +$PHPMAILER_LANG['provide_address'] = '必须提供至少一个收件人地址。'; +$PHPMAILER_LANG['recipients_failed'] = 'SMTP 错误：收件人地址错误：'; +$PHPMAILER_LANG['signing'] = '登录失败：'; +$PHPMAILER_LANG['smtp_connect_failed'] = 'SMTP服务器连接失败。'; +$PHPMAILER_LANG['smtp_error'] = 'SMTP服务器出错：'; +$PHPMAILER_LANG['variable_set'] = '无法设置或重置变量：'; +$PHPMAILER_LANG['extension_missing'] = '丢失模块 Extension：'; diff --git a/vendor/phpmailer/phpmailer/src/Exception.php b/vendor/phpmailer/phpmailer/src/Exception.php new file mode 100644 index 000000000..a50a8991f --- /dev/null +++ b/vendor/phpmailer/phpmailer/src/Exception.php @@ -0,0 +1,40 @@ + + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + * @copyright 2012 - 2020 Marcus Bointon + * @copyright 2010 - 2012 Jim Jagielski + * @copyright 2004 - 2009 Andy Prevost + * @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License + * @note This program is distributed in the hope that it will be useful - WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. + */ + +namespace PHPMailer\PHPMailer; + +/** + * PHPMailer exception handler. + * + * @author Marcus Bointon + */ +class Exception extends \Exception +{ + /** + * Prettify error message output. + * + * @return string + */ + public function errorMessage() + { + return '' . htmlspecialchars($this->getMessage()) . "
\n"; + } +} diff --git a/vendor/phpmailer/phpmailer/src/OAuth.php b/vendor/phpmailer/phpmailer/src/OAuth.php new file mode 100644 index 000000000..07fde4c81 --- /dev/null +++ b/vendor/phpmailer/phpmailer/src/OAuth.php @@ -0,0 +1,139 @@ + + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + * @copyright 2012 - 2020 Marcus Bointon + * @copyright 2010 - 2012 Jim Jagielski + * @copyright 2004 - 2009 Andy Prevost + * @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License + * @note This program is distributed in the hope that it will be useful - WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. + */ + +namespace PHPMailer\PHPMailer; + +use League\OAuth2\Client\Grant\RefreshToken; +use League\OAuth2\Client\Provider\AbstractProvider; +use League\OAuth2\Client\Token\AccessToken; + +/** + * OAuth - OAuth2 authentication wrapper class. + * Uses the oauth2-client package from the League of Extraordinary Packages. + * + * @see http://oauth2-client.thephpleague.com + * + * @author Marcus Bointon (Synchro/coolbru) + */ +class OAuth +{ + /** + * An instance of the League OAuth Client Provider. + * + * @var AbstractProvider + */ + protected $provider; + + /** + * The current OAuth access token. + * + * @var AccessToken + */ + protected $oauthToken; + + /** + * The user's email address, usually used as the login ID + * and also the from address when sending email. + * + * @var string + */ + protected $oauthUserEmail = ''; + + /** + * The client secret, generated in the app definition of the service you're connecting to. + * + * @var string + */ + protected $oauthClientSecret = ''; + + /** + * The client ID, generated in the app definition of the service you're connecting to. + * + * @var string + */ + protected $oauthClientId = ''; + + /** + * The refresh token, used to obtain new AccessTokens. + * + * @var string + */ + protected $oauthRefreshToken = ''; + + /** + * OAuth constructor. + * + * @param array $options Associative array containing + * `provider`, `userName`, `clientSecret`, `clientId` and `refreshToken` elements + */ + public function __construct($options) + { + $this->provider = $options['provider']; + $this->oauthUserEmail = $options['userName']; + $this->oauthClientSecret = $options['clientSecret']; + $this->oauthClientId = $options['clientId']; + $this->oauthRefreshToken = $options['refreshToken']; + } + + /** + * Get a new RefreshToken. + * + * @return RefreshToken + */ + protected function getGrant() + { + return new RefreshToken(); + } + + /** + * Get a new AccessToken. + * + * @return AccessToken + */ + protected function getToken() + { + return $this->provider->getAccessToken( + $this->getGrant(), + ['refresh_token' => $this->oauthRefreshToken] + ); + } + + /** + * Generate a base64-encoded OAuth token. + * + * @return string + */ + public function getOauth64() + { + // Get a new token if it's not available or has expired + if (null === $this->oauthToken || $this->oauthToken->hasExpired()) { + $this->oauthToken = $this->getToken(); + } + + return base64_encode( + 'user=' . + $this->oauthUserEmail . + "\001auth=Bearer " . + $this->oauthToken . + "\001\001" + ); + } +} diff --git a/vendor/phpmailer/phpmailer/src/PHPMailer.php b/vendor/phpmailer/phpmailer/src/PHPMailer.php new file mode 100644 index 000000000..c8fc1a824 --- /dev/null +++ b/vendor/phpmailer/phpmailer/src/PHPMailer.php @@ -0,0 +1,4881 @@ + + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + * @copyright 2012 - 2020 Marcus Bointon + * @copyright 2010 - 2012 Jim Jagielski + * @copyright 2004 - 2009 Andy Prevost + * @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License + * @note This program is distributed in the hope that it will be useful - WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. + */ + +namespace PHPMailer\PHPMailer; + +/** + * PHPMailer - PHP email creation and transport class. + * + * @author Marcus Bointon (Synchro/coolbru) + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + */ +class PHPMailer +{ + const CHARSET_ASCII = 'us-ascii'; + const CHARSET_ISO88591 = 'iso-8859-1'; + const CHARSET_UTF8 = 'utf-8'; + + const CONTENT_TYPE_PLAINTEXT = 'text/plain'; + const CONTENT_TYPE_TEXT_CALENDAR = 'text/calendar'; + const CONTENT_TYPE_TEXT_HTML = 'text/html'; + const CONTENT_TYPE_MULTIPART_ALTERNATIVE = 'multipart/alternative'; + const CONTENT_TYPE_MULTIPART_MIXED = 'multipart/mixed'; + const CONTENT_TYPE_MULTIPART_RELATED = 'multipart/related'; + + const ENCODING_7BIT = '7bit'; + const ENCODING_8BIT = '8bit'; + const ENCODING_BASE64 = 'base64'; + const ENCODING_BINARY = 'binary'; + const ENCODING_QUOTED_PRINTABLE = 'quoted-printable'; + + const ENCRYPTION_STARTTLS = 'tls'; + const ENCRYPTION_SMTPS = 'ssl'; + + const ICAL_METHOD_REQUEST = 'REQUEST'; + const ICAL_METHOD_PUBLISH = 'PUBLISH'; + const ICAL_METHOD_REPLY = 'REPLY'; + const ICAL_METHOD_ADD = 'ADD'; + const ICAL_METHOD_CANCEL = 'CANCEL'; + const ICAL_METHOD_REFRESH = 'REFRESH'; + const ICAL_METHOD_COUNTER = 'COUNTER'; + const ICAL_METHOD_DECLINECOUNTER = 'DECLINECOUNTER'; + + /** + * Email priority. + * Options: null (default), 1 = High, 3 = Normal, 5 = low. + * When null, the header is not set at all. + * + * @var int|null + */ + public $Priority; + + /** + * The character set of the message. + * + * @var string + */ + public $CharSet = self::CHARSET_ISO88591; + + /** + * The MIME Content-type of the message. + * + * @var string + */ + public $ContentType = self::CONTENT_TYPE_PLAINTEXT; + + /** + * The message encoding. + * Options: "8bit", "7bit", "binary", "base64", and "quoted-printable". + * + * @var string + */ + public $Encoding = self::ENCODING_8BIT; + + /** + * Holds the most recent mailer error message. + * + * @var string + */ + public $ErrorInfo = ''; + + /** + * The From email address for the message. + * + * @var string + */ + public $From = 'root@localhost'; + + /** + * The From name of the message. + * + * @var string + */ + public $FromName = 'Root User'; + + /** + * The envelope sender of the message. + * This will usually be turned into a Return-Path header by the receiver, + * and is the address that bounces will be sent to. + * If not empty, will be passed via `-f` to sendmail or as the 'MAIL FROM' value over SMTP. + * + * @var string + */ + public $Sender = ''; + + /** + * The Subject of the message. + * + * @var string + */ + public $Subject = ''; + + /** + * An HTML or plain text message body. + * If HTML then call isHTML(true). + * + * @var string + */ + public $Body = ''; + + /** + * The plain-text message body. + * This body can be read by mail clients that do not have HTML email + * capability such as mutt & Eudora. + * Clients that can read HTML will view the normal Body. + * + * @var string + */ + public $AltBody = ''; + + /** + * An iCal message part body. + * Only supported in simple alt or alt_inline message types + * To generate iCal event structures, use classes like EasyPeasyICS or iCalcreator. + * + * @see http://sprain.ch/blog/downloads/php-class-easypeasyics-create-ical-files-with-php/ + * @see http://kigkonsult.se/iCalcreator/ + * + * @var string + */ + public $Ical = ''; + + /** + * Value-array of "method" in Contenttype header "text/calendar" + * + * @var string[] + */ + protected static $IcalMethods = [ + self::ICAL_METHOD_REQUEST, + self::ICAL_METHOD_PUBLISH, + self::ICAL_METHOD_REPLY, + self::ICAL_METHOD_ADD, + self::ICAL_METHOD_CANCEL, + self::ICAL_METHOD_REFRESH, + self::ICAL_METHOD_COUNTER, + self::ICAL_METHOD_DECLINECOUNTER, + ]; + + /** + * The complete compiled MIME message body. + * + * @var string + */ + protected $MIMEBody = ''; + + /** + * The complete compiled MIME message headers. + * + * @var string + */ + protected $MIMEHeader = ''; + + /** + * Extra headers that createHeader() doesn't fold in. + * + * @var string + */ + protected $mailHeader = ''; + + /** + * Word-wrap the message body to this number of chars. + * Set to 0 to not wrap. A useful value here is 78, for RFC2822 section 2.1.1 compliance. + * + * @see static::STD_LINE_LENGTH + * + * @var int + */ + public $WordWrap = 0; + + /** + * Which method to use to send mail. + * Options: "mail", "sendmail", or "smtp". + * + * @var string + */ + public $Mailer = 'mail'; + + /** + * The path to the sendmail program. + * + * @var string + */ + public $Sendmail = '/usr/sbin/sendmail'; + + /** + * Whether mail() uses a fully sendmail-compatible MTA. + * One which supports sendmail's "-oi -f" options. + * + * @var bool + */ + public $UseSendmailOptions = true; + + /** + * The email address that a reading confirmation should be sent to, also known as read receipt. + * + * @var string + */ + public $ConfirmReadingTo = ''; + + /** + * The hostname to use in the Message-ID header and as default HELO string. + * If empty, PHPMailer attempts to find one with, in order, + * $_SERVER['SERVER_NAME'], gethostname(), php_uname('n'), or the value + * 'localhost.localdomain'. + * + * @see PHPMailer::$Helo + * + * @var string + */ + public $Hostname = ''; + + /** + * An ID to be used in the Message-ID header. + * If empty, a unique id will be generated. + * You can set your own, but it must be in the format "", + * as defined in RFC5322 section 3.6.4 or it will be ignored. + * + * @see https://tools.ietf.org/html/rfc5322#section-3.6.4 + * + * @var string + */ + public $MessageID = ''; + + /** + * The message Date to be used in the Date header. + * If empty, the current date will be added. + * + * @var string + */ + public $MessageDate = ''; + + /** + * SMTP hosts. + * Either a single hostname or multiple semicolon-delimited hostnames. + * You can also specify a different port + * for each host by using this format: [hostname:port] + * (e.g. "smtp1.example.com:25;smtp2.example.com"). + * You can also specify encryption type, for example: + * (e.g. "tls://smtp1.example.com:587;ssl://smtp2.example.com:465"). + * Hosts will be tried in order. + * + * @var string + */ + public $Host = 'localhost'; + + /** + * The default SMTP server port. + * + * @var int + */ + public $Port = 25; + + /** + * The SMTP HELO/EHLO name used for the SMTP connection. + * Default is $Hostname. If $Hostname is empty, PHPMailer attempts to find + * one with the same method described above for $Hostname. + * + * @see PHPMailer::$Hostname + * + * @var string + */ + public $Helo = ''; + + /** + * What kind of encryption to use on the SMTP connection. + * Options: '', static::ENCRYPTION_STARTTLS, or static::ENCRYPTION_SMTPS. + * + * @var string + */ + public $SMTPSecure = ''; + + /** + * Whether to enable TLS encryption automatically if a server supports it, + * even if `SMTPSecure` is not set to 'tls'. + * Be aware that in PHP >= 5.6 this requires that the server's certificates are valid. + * + * @var bool + */ + public $SMTPAutoTLS = true; + + /** + * Whether to use SMTP authentication. + * Uses the Username and Password properties. + * + * @see PHPMailer::$Username + * @see PHPMailer::$Password + * + * @var bool + */ + public $SMTPAuth = false; + + /** + * Options array passed to stream_context_create when connecting via SMTP. + * + * @var array + */ + public $SMTPOptions = []; + + /** + * SMTP username. + * + * @var string + */ + public $Username = ''; + + /** + * SMTP password. + * + * @var string + */ + public $Password = ''; + + /** + * SMTP auth type. + * Options are CRAM-MD5, LOGIN, PLAIN, XOAUTH2, attempted in that order if not specified. + * + * @var string + */ + public $AuthType = ''; + + /** + * An instance of the PHPMailer OAuth class. + * + * @var OAuth + */ + protected $oauth; + + /** + * The SMTP server timeout in seconds. + * Default of 5 minutes (300sec) is from RFC2821 section 4.5.3.2. + * + * @var int + */ + public $Timeout = 300; + + /** + * Comma separated list of DSN notifications + * 'NEVER' under no circumstances a DSN must be returned to the sender. + * If you use NEVER all other notifications will be ignored. + * 'SUCCESS' will notify you when your mail has arrived at its destination. + * 'FAILURE' will arrive if an error occurred during delivery. + * 'DELAY' will notify you if there is an unusual delay in delivery, but the actual + * delivery's outcome (success or failure) is not yet decided. + * + * @see https://tools.ietf.org/html/rfc3461 See section 4.1 for more information about NOTIFY + */ + public $dsn = ''; + + /** + * SMTP class debug output mode. + * Debug output level. + * Options: + * @see SMTP::DEBUG_OFF: No output + * @see SMTP::DEBUG_CLIENT: Client messages + * @see SMTP::DEBUG_SERVER: Client and server messages + * @see SMTP::DEBUG_CONNECTION: As SERVER plus connection status + * @see SMTP::DEBUG_LOWLEVEL: Noisy, low-level data output, rarely needed + * + * @see SMTP::$do_debug + * + * @var int + */ + public $SMTPDebug = 0; + + /** + * How to handle debug output. + * Options: + * * `echo` Output plain-text as-is, appropriate for CLI + * * `html` Output escaped, line breaks converted to `
`, appropriate for browser output + * * `error_log` Output to error log as configured in php.ini + * By default PHPMailer will use `echo` if run from a `cli` or `cli-server` SAPI, `html` otherwise. + * Alternatively, you can provide a callable expecting two params: a message string and the debug level: + * + * ```php + * $mail->Debugoutput = function($str, $level) {echo "debug level $level; message: $str";}; + * ``` + * + * Alternatively, you can pass in an instance of a PSR-3 compatible logger, though only `debug` + * level output is used: + * + * ```php + * $mail->Debugoutput = new myPsr3Logger; + * ``` + * + * @see SMTP::$Debugoutput + * + * @var string|callable|\Psr\Log\LoggerInterface + */ + public $Debugoutput = 'echo'; + + /** + * Whether to keep SMTP connection open after each message. + * If this is set to true then to close the connection + * requires an explicit call to smtpClose(). + * + * @var bool + */ + public $SMTPKeepAlive = false; + + /** + * Whether to split multiple to addresses into multiple messages + * or send them all in one message. + * Only supported in `mail` and `sendmail` transports, not in SMTP. + * + * @var bool + * + * @deprecated 6.0.0 PHPMailer isn't a mailing list manager! + */ + public $SingleTo = false; + + /** + * Storage for addresses when SingleTo is enabled. + * + * @var array + */ + protected $SingleToArray = []; + + /** + * Whether to generate VERP addresses on send. + * Only applicable when sending via SMTP. + * + * @see https://en.wikipedia.org/wiki/Variable_envelope_return_path + * @see http://www.postfix.org/VERP_README.html Postfix VERP info + * + * @var bool + */ + public $do_verp = false; + + /** + * Whether to allow sending messages with an empty body. + * + * @var bool + */ + public $AllowEmpty = false; + + /** + * DKIM selector. + * + * @var string + */ + public $DKIM_selector = ''; + + /** + * DKIM Identity. + * Usually the email address used as the source of the email. + * + * @var string + */ + public $DKIM_identity = ''; + + /** + * DKIM passphrase. + * Used if your key is encrypted. + * + * @var string + */ + public $DKIM_passphrase = ''; + + /** + * DKIM signing domain name. + * + * @example 'example.com' + * + * @var string + */ + public $DKIM_domain = ''; + + /** + * DKIM Copy header field values for diagnostic use. + * + * @var bool + */ + public $DKIM_copyHeaderFields = true; + + /** + * DKIM Extra signing headers. + * + * @example ['List-Unsubscribe', 'List-Help'] + * + * @var array + */ + public $DKIM_extraHeaders = []; + + /** + * DKIM private key file path. + * + * @var string + */ + public $DKIM_private = ''; + + /** + * DKIM private key string. + * + * If set, takes precedence over `$DKIM_private`. + * + * @var string + */ + public $DKIM_private_string = ''; + + /** + * Callback Action function name. + * + * The function that handles the result of the send email action. + * It is called out by send() for each email sent. + * + * Value can be any php callable: http://www.php.net/is_callable + * + * Parameters: + * bool $result result of the send action + * array $to email addresses of the recipients + * array $cc cc email addresses + * array $bcc bcc email addresses + * string $subject the subject + * string $body the email body + * string $from email address of sender + * string $extra extra information of possible use + * "smtp_transaction_id' => last smtp transaction id + * + * @var string + */ + public $action_function = ''; + + /** + * What to put in the X-Mailer header. + * Options: An empty string for PHPMailer default, whitespace/null for none, or a string to use. + * + * @var string|null + */ + public $XMailer = ''; + + /** + * Which validator to use by default when validating email addresses. + * May be a callable to inject your own validator, but there are several built-in validators. + * The default validator uses PHP's FILTER_VALIDATE_EMAIL filter_var option. + * + * @see PHPMailer::validateAddress() + * + * @var string|callable + */ + public static $validator = 'php'; + + /** + * An instance of the SMTP sender class. + * + * @var SMTP + */ + protected $smtp; + + /** + * The array of 'to' names and addresses. + * + * @var array + */ + protected $to = []; + + /** + * The array of 'cc' names and addresses. + * + * @var array + */ + protected $cc = []; + + /** + * The array of 'bcc' names and addresses. + * + * @var array + */ + protected $bcc = []; + + /** + * The array of reply-to names and addresses. + * + * @var array + */ + protected $ReplyTo = []; + + /** + * An array of all kinds of addresses. + * Includes all of $to, $cc, $bcc. + * + * @see PHPMailer::$to + * @see PHPMailer::$cc + * @see PHPMailer::$bcc + * + * @var array + */ + protected $all_recipients = []; + + /** + * An array of names and addresses queued for validation. + * In send(), valid and non duplicate entries are moved to $all_recipients + * and one of $to, $cc, or $bcc. + * This array is used only for addresses with IDN. + * + * @see PHPMailer::$to + * @see PHPMailer::$cc + * @see PHPMailer::$bcc + * @see PHPMailer::$all_recipients + * + * @var array + */ + protected $RecipientsQueue = []; + + /** + * An array of reply-to names and addresses queued for validation. + * In send(), valid and non duplicate entries are moved to $ReplyTo. + * This array is used only for addresses with IDN. + * + * @see PHPMailer::$ReplyTo + * + * @var array + */ + protected $ReplyToQueue = []; + + /** + * The array of attachments. + * + * @var array + */ + protected $attachment = []; + + /** + * The array of custom headers. + * + * @var array + */ + protected $CustomHeader = []; + + /** + * The most recent Message-ID (including angular brackets). + * + * @var string + */ + protected $lastMessageID = ''; + + /** + * The message's MIME type. + * + * @var string + */ + protected $message_type = ''; + + /** + * The array of MIME boundary strings. + * + * @var array + */ + protected $boundary = []; + + /** + * The array of available languages. + * + * @var array + */ + protected $language = []; + + /** + * The number of errors encountered. + * + * @var int + */ + protected $error_count = 0; + + /** + * The S/MIME certificate file path. + * + * @var string + */ + protected $sign_cert_file = ''; + + /** + * The S/MIME key file path. + * + * @var string + */ + protected $sign_key_file = ''; + + /** + * The optional S/MIME extra certificates ("CA Chain") file path. + * + * @var string + */ + protected $sign_extracerts_file = ''; + + /** + * The S/MIME password for the key. + * Used only if the key is encrypted. + * + * @var string + */ + protected $sign_key_pass = ''; + + /** + * Whether to throw exceptions for errors. + * + * @var bool + */ + protected $exceptions = false; + + /** + * Unique ID used for message ID and boundaries. + * + * @var string + */ + protected $uniqueid = ''; + + /** + * The PHPMailer Version number. + * + * @var string + */ + const VERSION = '6.2.0'; + + /** + * Error severity: message only, continue processing. + * + * @var int + */ + const STOP_MESSAGE = 0; + + /** + * Error severity: message, likely ok to continue processing. + * + * @var int + */ + const STOP_CONTINUE = 1; + + /** + * Error severity: message, plus full stop, critical error reached. + * + * @var int + */ + const STOP_CRITICAL = 2; + + /** + * The SMTP standard CRLF line break. + * If you want to change line break format, change static::$LE, not this. + */ + const CRLF = "\r\n"; + + /** + * "Folding White Space" a white space string used for line folding. + */ + const FWS = ' '; + + /** + * SMTP RFC standard line ending; Carriage Return, Line Feed. + * + * @var string + */ + protected static $LE = self::CRLF; + + /** + * The maximum line length supported by mail(). + * + * Background: mail() will sometimes corrupt messages + * with headers headers longer than 65 chars, see #818. + * + * @var int + */ + const MAIL_MAX_LINE_LENGTH = 63; + + /** + * The maximum line length allowed by RFC 2822 section 2.1.1. + * + * @var int + */ + const MAX_LINE_LENGTH = 998; + + /** + * The lower maximum line length allowed by RFC 2822 section 2.1.1. + * This length does NOT include the line break + * 76 means that lines will be 77 or 78 chars depending on whether + * the line break format is LF or CRLF; both are valid. + * + * @var int + */ + const STD_LINE_LENGTH = 76; + + /** + * Constructor. + * + * @param bool $exceptions Should we throw external exceptions? + */ + public function __construct($exceptions = null) + { + if (null !== $exceptions) { + $this->exceptions = (bool) $exceptions; + } + //Pick an appropriate debug output format automatically + $this->Debugoutput = (strpos(PHP_SAPI, 'cli') !== false ? 'echo' : 'html'); + } + + /** + * Destructor. + */ + public function __destruct() + { + //Close any open SMTP connection nicely + $this->smtpClose(); + } + + /** + * Call mail() in a safe_mode-aware fashion. + * Also, unless sendmail_path points to sendmail (or something that + * claims to be sendmail), don't pass params (not a perfect fix, + * but it will do). + * + * @param string $to To + * @param string $subject Subject + * @param string $body Message Body + * @param string $header Additional Header(s) + * @param string|null $params Params + * + * @return bool + */ + private function mailPassthru($to, $subject, $body, $header, $params) + { + //Check overloading of mail function to avoid double-encoding + if (ini_get('mbstring.func_overload') & 1) { + $subject = $this->secureHeader($subject); + } else { + $subject = $this->encodeHeader($this->secureHeader($subject)); + } + //Calling mail() with null params breaks + if (!$this->UseSendmailOptions || null === $params) { + $result = @mail($to, $subject, $body, $header); + } else { + $result = @mail($to, $subject, $body, $header, $params); + } + + return $result; + } + + /** + * Output debugging info via user-defined method. + * Only generates output if SMTP debug output is enabled (@see SMTP::$do_debug). + * + * @see PHPMailer::$Debugoutput + * @see PHPMailer::$SMTPDebug + * + * @param string $str + */ + protected function edebug($str) + { + if ($this->SMTPDebug <= 0) { + return; + } + //Is this a PSR-3 logger? + if ($this->Debugoutput instanceof \Psr\Log\LoggerInterface) { + $this->Debugoutput->debug($str); + + return; + } + //Avoid clash with built-in function names + if (is_callable($this->Debugoutput) && !in_array($this->Debugoutput, ['error_log', 'html', 'echo'])) { + call_user_func($this->Debugoutput, $str, $this->SMTPDebug); + + return; + } + switch ($this->Debugoutput) { + case 'error_log': + //Don't output, just log + /** @noinspection ForgottenDebugOutputInspection */ + error_log($str); + break; + case 'html': + //Cleans up output a bit for a better looking, HTML-safe output + echo htmlentities( + preg_replace('/[\r\n]+/', '', $str), + ENT_QUOTES, + 'UTF-8' + ), "
\n"; + break; + case 'echo': + default: + //Normalize line breaks + $str = preg_replace('/\r\n|\r/m', "\n", $str); + echo gmdate('Y-m-d H:i:s'), + "\t", + //Trim trailing space + trim( + //Indent for readability, except for trailing break + str_replace( + "\n", + "\n \t ", + trim($str) + ) + ), + "\n"; + } + } + + /** + * Sets message type to HTML or plain. + * + * @param bool $isHtml True for HTML mode + */ + public function isHTML($isHtml = true) + { + if ($isHtml) { + $this->ContentType = static::CONTENT_TYPE_TEXT_HTML; + } else { + $this->ContentType = static::CONTENT_TYPE_PLAINTEXT; + } + } + + /** + * Send messages using SMTP. + */ + public function isSMTP() + { + $this->Mailer = 'smtp'; + } + + /** + * Send messages using PHP's mail() function. + */ + public function isMail() + { + $this->Mailer = 'mail'; + } + + /** + * Send messages using $Sendmail. + */ + public function isSendmail() + { + $ini_sendmail_path = ini_get('sendmail_path'); + + if (false === stripos($ini_sendmail_path, 'sendmail')) { + $this->Sendmail = '/usr/sbin/sendmail'; + } else { + $this->Sendmail = $ini_sendmail_path; + } + $this->Mailer = 'sendmail'; + } + + /** + * Send messages using qmail. + */ + public function isQmail() + { + $ini_sendmail_path = ini_get('sendmail_path'); + + if (false === stripos($ini_sendmail_path, 'qmail')) { + $this->Sendmail = '/var/qmail/bin/qmail-inject'; + } else { + $this->Sendmail = $ini_sendmail_path; + } + $this->Mailer = 'qmail'; + } + + /** + * Add a "To" address. + * + * @param string $address The email address to send to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addAddress($address, $name = '') + { + return $this->addOrEnqueueAnAddress('to', $address, $name); + } + + /** + * Add a "CC" address. + * + * @param string $address The email address to send to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addCC($address, $name = '') + { + return $this->addOrEnqueueAnAddress('cc', $address, $name); + } + + /** + * Add a "BCC" address. + * + * @param string $address The email address to send to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addBCC($address, $name = '') + { + return $this->addOrEnqueueAnAddress('bcc', $address, $name); + } + + /** + * Add a "Reply-To" address. + * + * @param string $address The email address to reply to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addReplyTo($address, $name = '') + { + return $this->addOrEnqueueAnAddress('Reply-To', $address, $name); + } + + /** + * Add an address to one of the recipient arrays or to the ReplyTo array. Because PHPMailer + * can't validate addresses with an IDN without knowing the PHPMailer::$CharSet (that can still + * be modified after calling this function), addition of such addresses is delayed until send(). + * Addresses that have been added already return false, but do not throw exceptions. + * + * @param string $kind One of 'to', 'cc', 'bcc', or 'ReplyTo' + * @param string $address The email address to send, resp. to reply to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + protected function addOrEnqueueAnAddress($kind, $address, $name) + { + $address = trim($address); + $name = trim(preg_replace('/[\r\n]+/', '', $name)); //Strip breaks and trim + $pos = strrpos($address, '@'); + if (false === $pos) { + // At-sign is missing. + $error_message = sprintf( + '%s (%s): %s', + $this->lang('invalid_address'), + $kind, + $address + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + $params = [$kind, $address, $name]; + // Enqueue addresses with IDN until we know the PHPMailer::$CharSet. + if (static::idnSupported() && $this->has8bitChars(substr($address, ++$pos))) { + if ('Reply-To' !== $kind) { + if (!array_key_exists($address, $this->RecipientsQueue)) { + $this->RecipientsQueue[$address] = $params; + + return true; + } + } elseif (!array_key_exists($address, $this->ReplyToQueue)) { + $this->ReplyToQueue[$address] = $params; + + return true; + } + + return false; + } + + // Immediately add standard addresses without IDN. + return call_user_func_array([$this, 'addAnAddress'], $params); + } + + /** + * Add an address to one of the recipient arrays or to the ReplyTo array. + * Addresses that have been added already return false, but do not throw exceptions. + * + * @param string $kind One of 'to', 'cc', 'bcc', or 'ReplyTo' + * @param string $address The email address to send, resp. to reply to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + protected function addAnAddress($kind, $address, $name = '') + { + if (!in_array($kind, ['to', 'cc', 'bcc', 'Reply-To'])) { + $error_message = sprintf( + '%s: %s', + $this->lang('Invalid recipient kind'), + $kind + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + if (!static::validateAddress($address)) { + $error_message = sprintf( + '%s (%s): %s', + $this->lang('invalid_address'), + $kind, + $address + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + if ('Reply-To' !== $kind) { + if (!array_key_exists(strtolower($address), $this->all_recipients)) { + $this->{$kind}[] = [$address, $name]; + $this->all_recipients[strtolower($address)] = true; + + return true; + } + } elseif (!array_key_exists(strtolower($address), $this->ReplyTo)) { + $this->ReplyTo[strtolower($address)] = [$address, $name]; + + return true; + } + + return false; + } + + /** + * Parse and validate a string containing one or more RFC822-style comma-separated email addresses + * of the form "display name

" into an array of name/address pairs. + * Uses the imap_rfc822_parse_adrlist function if the IMAP extension is available. + * Note that quotes in the name part are removed. + * + * @see http://www.andrew.cmu.edu/user/agreen1/testing/mrbs/web/Mail/RFC822.php A more careful implementation + * + * @param string $addrstr The address list string + * @param bool $useimap Whether to use the IMAP extension to parse the list + * + * @return array + */ + public static function parseAddresses($addrstr, $useimap = true) + { + $addresses = []; + if ($useimap && function_exists('imap_rfc822_parse_adrlist')) { + //Use this built-in parser if it's available + $list = imap_rfc822_parse_adrlist($addrstr, ''); + foreach ($list as $address) { + if ( + ('.SYNTAX-ERROR.' !== $address->host) && static::validateAddress( + $address->mailbox . '@' . $address->host + ) + ) { + $addresses[] = [ + 'name' => (property_exists($address, 'personal') ? $address->personal : ''), + 'address' => $address->mailbox . '@' . $address->host, + ]; + } + } + } else { + //Use this simpler parser + $list = explode(',', $addrstr); + foreach ($list as $address) { + $address = trim($address); + //Is there a separate name part? + if (strpos($address, '<') === false) { + //No separate name, just use the whole thing + if (static::validateAddress($address)) { + $addresses[] = [ + 'name' => '', + 'address' => $address, + ]; + } + } else { + list($name, $email) = explode('<', $address); + $email = trim(str_replace('>', '', $email)); + if (static::validateAddress($email)) { + $addresses[] = [ + 'name' => trim(str_replace(['"', "'"], '', $name)), + 'address' => $email, + ]; + } + } + } + } + + return $addresses; + } + + /** + * Set the From and FromName properties. + * + * @param string $address + * @param string $name + * @param bool $auto Whether to also set the Sender address, defaults to true + * + * @throws Exception + * + * @return bool + */ + public function setFrom($address, $name = '', $auto = true) + { + $address = trim($address); + $name = trim(preg_replace('/[\r\n]+/', '', $name)); //Strip breaks and trim + // Don't validate now addresses with IDN. Will be done in send(). + $pos = strrpos($address, '@'); + if ( + (false === $pos) + || ((!$this->has8bitChars(substr($address, ++$pos)) || !static::idnSupported()) + && !static::validateAddress($address)) + ) { + $error_message = sprintf( + '%s (From): %s', + $this->lang('invalid_address'), + $address + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + $this->From = $address; + $this->FromName = $name; + if ($auto && empty($this->Sender)) { + $this->Sender = $address; + } + + return true; + } + + /** + * Return the Message-ID header of the last email. + * Technically this is the value from the last time the headers were created, + * but it's also the message ID of the last sent message except in + * pathological cases. + * + * @return string + */ + public function getLastMessageID() + { + return $this->lastMessageID; + } + + /** + * Check that a string looks like an email address. + * Validation patterns supported: + * * `auto` Pick best pattern automatically; + * * `pcre8` Use the squiloople.com pattern, requires PCRE > 8.0; + * * `pcre` Use old PCRE implementation; + * * `php` Use PHP built-in FILTER_VALIDATE_EMAIL; + * * `html5` Use the pattern given by the HTML5 spec for 'email' type form input elements. + * * `noregex` Don't use a regex: super fast, really dumb. + * Alternatively you may pass in a callable to inject your own validator, for example: + * + * ```php + * PHPMailer::validateAddress('user@example.com', function($address) { + * return (strpos($address, '@') !== false); + * }); + * ``` + * + * You can also set the PHPMailer::$validator static to a callable, allowing built-in methods to use your validator. + * + * @param string $address The email address to check + * @param string|callable $patternselect Which pattern to use + * + * @return bool + */ + public static function validateAddress($address, $patternselect = null) + { + if (null === $patternselect) { + $patternselect = static::$validator; + } + if (is_callable($patternselect)) { + return call_user_func($patternselect, $address); + } + //Reject line breaks in addresses; it's valid RFC5322, but not RFC5321 + if (strpos($address, "\n") !== false || strpos($address, "\r") !== false) { + return false; + } + switch ($patternselect) { + case 'pcre': //Kept for BC + case 'pcre8': + /* + * A more complex and more permissive version of the RFC5322 regex on which FILTER_VALIDATE_EMAIL + * is based. + * In addition to the addresses allowed by filter_var, also permits: + * * dotless domains: `a@b` + * * comments: `1234 @ local(blah) .machine .example` + * * quoted elements: `'"test blah"@example.org'` + * * numeric TLDs: `a@b.123` + * * unbracketed IPv4 literals: `a@192.168.0.1` + * * IPv6 literals: 'first.last@[IPv6:a1::]' + * Not all of these will necessarily work for sending! + * + * @see http://squiloople.com/2009/12/20/email-address-validation/ + * @copyright 2009-2010 Michael Rushton + * Feel free to use and redistribute this code. But please keep this copyright notice. + */ + return (bool) preg_match( + '/^(?!(?>(?1)"?(?>\\\[ -~]|[^"])"?(?1)){255,})(?!(?>(?1)"?(?>\\\[ -~]|[^"])"?(?1)){65,}@)' . + '((?>(?>(?>((?>(?>(?>\x0D\x0A)?[\t ])+|(?>[\t ]*\x0D\x0A)?[\t ]+)?)(\((?>(?2)' . + '(?>[\x01-\x08\x0B\x0C\x0E-\'*-\[\]-\x7F]|\\\[\x00-\x7F]|(?3)))*(?2)\)))+(?2))|(?2))?)' . + '([!#-\'*+\/-9=?^-~-]+|"(?>(?2)(?>[\x01-\x08\x0B\x0C\x0E-!#-\[\]-\x7F]|\\\[\x00-\x7F]))*' . + '(?2)")(?>(?1)\.(?1)(?4))*(?1)@(?!(?1)[a-z0-9-]{64,})(?1)(?>([a-z0-9](?>[a-z0-9-]*[a-z0-9])?)' . + '(?>(?1)\.(?!(?1)[a-z0-9-]{64,})(?1)(?5)){0,126}|\[(?:(?>IPv6:(?>([a-f0-9]{1,4})(?>:(?6)){7}' . + '|(?!(?:.*[a-f0-9][:\]]){8,})((?6)(?>:(?6)){0,6})?::(?7)?))|(?>(?>IPv6:(?>(?6)(?>:(?6)){5}:' . + '|(?!(?:.*[a-f0-9]:){6,})(?8)?::(?>((?6)(?>:(?6)){0,4}):)?))?(25[0-5]|2[0-4][0-9]|1[0-9]{2}' . + '|[1-9]?[0-9])(?>\.(?9)){3}))\])(?1)$/isD', + $address + ); + case 'html5': + /* + * This is the pattern used in the HTML5 spec for validation of 'email' type form input elements. + * + * @see https://html.spec.whatwg.org/#e-mail-state-(type=email) + */ + return (bool) preg_match( + '/^[a-zA-Z0-9.!#$%&\'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}' . + '[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/sD', + $address + ); + case 'php': + default: + return filter_var($address, FILTER_VALIDATE_EMAIL) !== false; + } + } + + /** + * Tells whether IDNs (Internationalized Domain Names) are supported or not. This requires the + * `intl` and `mbstring` PHP extensions. + * + * @return bool `true` if required functions for IDN support are present + */ + public static function idnSupported() + { + return function_exists('idn_to_ascii') && function_exists('mb_convert_encoding'); + } + + /** + * Converts IDN in given email address to its ASCII form, also known as punycode, if possible. + * Important: Address must be passed in same encoding as currently set in PHPMailer::$CharSet. + * This function silently returns unmodified address if: + * - No conversion is necessary (i.e. domain name is not an IDN, or is already in ASCII form) + * - Conversion to punycode is impossible (e.g. required PHP functions are not available) + * or fails for any reason (e.g. domain contains characters not allowed in an IDN). + * + * @see PHPMailer::$CharSet + * + * @param string $address The email address to convert + * + * @return string The encoded address in ASCII form + */ + public function punyencodeAddress($address) + { + // Verify we have required functions, CharSet, and at-sign. + $pos = strrpos($address, '@'); + if ( + !empty($this->CharSet) && + false !== $pos && + static::idnSupported() + ) { + $domain = substr($address, ++$pos); + // Verify CharSet string is a valid one, and domain properly encoded in this CharSet. + if ($this->has8bitChars($domain) && @mb_check_encoding($domain, $this->CharSet)) { + $domain = mb_convert_encoding($domain, 'UTF-8', $this->CharSet); + //Ignore IDE complaints about this line - method signature changed in PHP 5.4 + $errorcode = 0; + if (defined('INTL_IDNA_VARIANT_UTS46')) { + $punycode = idn_to_ascii($domain, $errorcode, INTL_IDNA_VARIANT_UTS46); + } elseif (defined('INTL_IDNA_VARIANT_2003')) { + $punycode = idn_to_ascii($domain, $errorcode, INTL_IDNA_VARIANT_2003); + } else { + $punycode = idn_to_ascii($domain, $errorcode); + } + if (false !== $punycode) { + return substr($address, 0, $pos) . $punycode; + } + } + } + + return $address; + } + + /** + * Create a message and send it. + * Uses the sending method specified by $Mailer. + * + * @throws Exception + * + * @return bool false on error - See the ErrorInfo property for details of the error + */ + public function send() + { + try { + if (!$this->preSend()) { + return false; + } + + return $this->postSend(); + } catch (Exception $exc) { + $this->mailHeader = ''; + $this->setError($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + } + + /** + * Prepare a message for sending. + * + * @throws Exception + * + * @return bool + */ + public function preSend() + { + if ( + 'smtp' === $this->Mailer + || ('mail' === $this->Mailer && (PHP_VERSION_ID >= 80000 || stripos(PHP_OS, 'WIN') === 0)) + ) { + //SMTP mandates RFC-compliant line endings + //and it's also used with mail() on Windows + static::setLE(self::CRLF); + } else { + //Maintain backward compatibility with legacy Linux command line mailers + static::setLE(PHP_EOL); + } + //Check for buggy PHP versions that add a header with an incorrect line break + if ( + 'mail' === $this->Mailer + && ((PHP_VERSION_ID >= 70000 && PHP_VERSION_ID < 70017) + || (PHP_VERSION_ID >= 70100 && PHP_VERSION_ID < 70103)) + && ini_get('mail.add_x_header') === '1' + && stripos(PHP_OS, 'WIN') === 0 + ) { + trigger_error( + 'Your version of PHP is affected by a bug that may result in corrupted messages.' . + ' To fix it, switch to sending using SMTP, disable the mail.add_x_header option in' . + ' your php.ini, switch to MacOS or Linux, or upgrade your PHP to version 7.0.17+ or 7.1.3+.', + E_USER_WARNING + ); + } + + try { + $this->error_count = 0; // Reset errors + $this->mailHeader = ''; + + // Dequeue recipient and Reply-To addresses with IDN + foreach (array_merge($this->RecipientsQueue, $this->ReplyToQueue) as $params) { + $params[1] = $this->punyencodeAddress($params[1]); + call_user_func_array([$this, 'addAnAddress'], $params); + } + if (count($this->to) + count($this->cc) + count($this->bcc) < 1) { + throw new Exception($this->lang('provide_address'), self::STOP_CRITICAL); + } + + // Validate From, Sender, and ConfirmReadingTo addresses + foreach (['From', 'Sender', 'ConfirmReadingTo'] as $address_kind) { + $this->$address_kind = trim($this->$address_kind); + if (empty($this->$address_kind)) { + continue; + } + $this->$address_kind = $this->punyencodeAddress($this->$address_kind); + if (!static::validateAddress($this->$address_kind)) { + $error_message = sprintf( + '%s (%s): %s', + $this->lang('invalid_address'), + $address_kind, + $this->$address_kind + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + } + + // Set whether the message is multipart/alternative + if ($this->alternativeExists()) { + $this->ContentType = static::CONTENT_TYPE_MULTIPART_ALTERNATIVE; + } + + $this->setMessageType(); + // Refuse to send an empty message unless we are specifically allowing it + if (!$this->AllowEmpty && empty($this->Body)) { + throw new Exception($this->lang('empty_message'), self::STOP_CRITICAL); + } + + //Trim subject consistently + $this->Subject = trim($this->Subject); + // Create body before headers in case body makes changes to headers (e.g. altering transfer encoding) + $this->MIMEHeader = ''; + $this->MIMEBody = $this->createBody(); + // createBody may have added some headers, so retain them + $tempheaders = $this->MIMEHeader; + $this->MIMEHeader = $this->createHeader(); + $this->MIMEHeader .= $tempheaders; + + // To capture the complete message when using mail(), create + // an extra header list which createHeader() doesn't fold in + if ('mail' === $this->Mailer) { + if (count($this->to) > 0) { + $this->mailHeader .= $this->addrAppend('To', $this->to); + } else { + $this->mailHeader .= $this->headerLine('To', 'undisclosed-recipients:;'); + } + $this->mailHeader .= $this->headerLine( + 'Subject', + $this->encodeHeader($this->secureHeader($this->Subject)) + ); + } + + // Sign with DKIM if enabled + if ( + !empty($this->DKIM_domain) + && !empty($this->DKIM_selector) + && (!empty($this->DKIM_private_string) + || (!empty($this->DKIM_private) + && static::isPermittedPath($this->DKIM_private) + && file_exists($this->DKIM_private) + ) + ) + ) { + $header_dkim = $this->DKIM_Add( + $this->MIMEHeader . $this->mailHeader, + $this->encodeHeader($this->secureHeader($this->Subject)), + $this->MIMEBody + ); + $this->MIMEHeader = static::stripTrailingWSP($this->MIMEHeader) . static::$LE . + static::normalizeBreaks($header_dkim) . static::$LE; + } + + return true; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + } + + /** + * Actually send a message via the selected mechanism. + * + * @throws Exception + * + * @return bool + */ + public function postSend() + { + try { + // Choose the mailer and send through it + switch ($this->Mailer) { + case 'sendmail': + case 'qmail': + return $this->sendmailSend($this->MIMEHeader, $this->MIMEBody); + case 'smtp': + return $this->smtpSend($this->MIMEHeader, $this->MIMEBody); + case 'mail': + return $this->mailSend($this->MIMEHeader, $this->MIMEBody); + default: + $sendMethod = $this->Mailer . 'Send'; + if (method_exists($this, $sendMethod)) { + return $this->$sendMethod($this->MIMEHeader, $this->MIMEBody); + } + + return $this->mailSend($this->MIMEHeader, $this->MIMEBody); + } + } catch (Exception $exc) { + if ($this->Mailer === 'smtp' && $this->SMTPKeepAlive == true) { + $this->smtp->reset(); + } + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + } + + return false; + } + + /** + * Send mail using the $Sendmail program. + * + * @see PHPMailer::$Sendmail + * + * @param string $header The message headers + * @param string $body The message body + * + * @throws Exception + * + * @return bool + */ + protected function sendmailSend($header, $body) + { + $header = static::stripTrailingWSP($header) . static::$LE . static::$LE; + + // CVE-2016-10033, CVE-2016-10045: Don't pass -f if characters will be escaped. + if (!empty($this->Sender) && self::isShellSafe($this->Sender)) { + if ('qmail' === $this->Mailer) { + $sendmailFmt = '%s -f%s'; + } else { + $sendmailFmt = '%s -oi -f%s -t'; + } + } elseif ('qmail' === $this->Mailer) { + $sendmailFmt = '%s'; + } else { + $sendmailFmt = '%s -oi -t'; + } + + $sendmail = sprintf($sendmailFmt, escapeshellcmd($this->Sendmail), $this->Sender); + + if ($this->SingleTo) { + foreach ($this->SingleToArray as $toAddr) { + $mail = @popen($sendmail, 'w'); + if (!$mail) { + throw new Exception($this->lang('execute') . $this->Sendmail, self::STOP_CRITICAL); + } + fwrite($mail, 'To: ' . $toAddr . "\n"); + fwrite($mail, $header); + fwrite($mail, $body); + $result = pclose($mail); + $this->doCallback( + ($result === 0), + [$toAddr], + $this->cc, + $this->bcc, + $this->Subject, + $body, + $this->From, + [] + ); + if (0 !== $result) { + throw new Exception($this->lang('execute') . $this->Sendmail, self::STOP_CRITICAL); + } + } + } else { + $mail = @popen($sendmail, 'w'); + if (!$mail) { + throw new Exception($this->lang('execute') . $this->Sendmail, self::STOP_CRITICAL); + } + fwrite($mail, $header); + fwrite($mail, $body); + $result = pclose($mail); + $this->doCallback( + ($result === 0), + $this->to, + $this->cc, + $this->bcc, + $this->Subject, + $body, + $this->From, + [] + ); + if (0 !== $result) { + throw new Exception($this->lang('execute') . $this->Sendmail, self::STOP_CRITICAL); + } + } + + return true; + } + + /** + * Fix CVE-2016-10033 and CVE-2016-10045 by disallowing potentially unsafe shell characters. + * Note that escapeshellarg and escapeshellcmd are inadequate for our purposes, especially on Windows. + * + * @see https://github.com/PHPMailer/PHPMailer/issues/924 CVE-2016-10045 bug report + * + * @param string $string The string to be validated + * + * @return bool + */ + protected static function isShellSafe($string) + { + // Future-proof + if ( + escapeshellcmd($string) !== $string + || !in_array(escapeshellarg($string), ["'$string'", "\"$string\""]) + ) { + return false; + } + + $length = strlen($string); + + for ($i = 0; $i < $length; ++$i) { + $c = $string[$i]; + + // All other characters have a special meaning in at least one common shell, including = and +. + // Full stop (.) has a special meaning in cmd.exe, but its impact should be negligible here. + // Note that this does permit non-Latin alphanumeric characters based on the current locale. + if (!ctype_alnum($c) && strpos('@_-.', $c) === false) { + return false; + } + } + + return true; + } + + /** + * Check whether a file path is of a permitted type. + * Used to reject URLs and phar files from functions that access local file paths, + * such as addAttachment. + * + * @param string $path A relative or absolute path to a file + * + * @return bool + */ + protected static function isPermittedPath($path) + { + return !preg_match('#^[a-z]+://#i', $path); + } + + /** + * Check whether a file path is safe, accessible, and readable. + * + * @param string $path A relative or absolute path to a file + * + * @return bool + */ + protected static function fileIsAccessible($path) + { + $readable = file_exists($path); + //If not a UNC path (expected to start with \\), check read permission, see #2069 + if (strpos($path, '\\\\') !== 0) { + $readable = $readable && is_readable($path); + } + return static::isPermittedPath($path) && $readable; + } + + /** + * Send mail using the PHP mail() function. + * + * @see http://www.php.net/manual/en/book.mail.php + * + * @param string $header The message headers + * @param string $body The message body + * + * @throws Exception + * + * @return bool + */ + protected function mailSend($header, $body) + { + $header = static::stripTrailingWSP($header) . static::$LE . static::$LE; + + $toArr = []; + foreach ($this->to as $toaddr) { + $toArr[] = $this->addrFormat($toaddr); + } + $to = implode(', ', $toArr); + + $params = null; + //This sets the SMTP envelope sender which gets turned into a return-path header by the receiver + //A space after `-f` is optional, but there is a long history of its presence + //causing problems, so we don't use one + //Exim docs: http://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_exim_command_line.html + //Sendmail docs: http://www.sendmail.org/~ca/email/man/sendmail.html + //Qmail docs: http://www.qmail.org/man/man8/qmail-inject.html + //Example problem: https://www.drupal.org/node/1057954 + // CVE-2016-10033, CVE-2016-10045: Don't pass -f if characters will be escaped. + if (!empty($this->Sender) && static::validateAddress($this->Sender) && self::isShellSafe($this->Sender)) { + $params = sprintf('-f%s', $this->Sender); + } + if (!empty($this->Sender) && static::validateAddress($this->Sender)) { + $old_from = ini_get('sendmail_from'); + ini_set('sendmail_from', $this->Sender); + } + $result = false; + if ($this->SingleTo && count($toArr) > 1) { + foreach ($toArr as $toAddr) { + $result = $this->mailPassthru($toAddr, $this->Subject, $body, $header, $params); + $this->doCallback($result, [$toAddr], $this->cc, $this->bcc, $this->Subject, $body, $this->From, []); + } + } else { + $result = $this->mailPassthru($to, $this->Subject, $body, $header, $params); + $this->doCallback($result, $this->to, $this->cc, $this->bcc, $this->Subject, $body, $this->From, []); + } + if (isset($old_from)) { + ini_set('sendmail_from', $old_from); + } + if (!$result) { + throw new Exception($this->lang('instantiate'), self::STOP_CRITICAL); + } + + return true; + } + + /** + * Get an instance to use for SMTP operations. + * Override this function to load your own SMTP implementation, + * or set one with setSMTPInstance. + * + * @return SMTP + */ + public function getSMTPInstance() + { + if (!is_object($this->smtp)) { + $this->smtp = new SMTP(); + } + + return $this->smtp; + } + + /** + * Provide an instance to use for SMTP operations. + * + * @return SMTP + */ + public function setSMTPInstance(SMTP $smtp) + { + $this->smtp = $smtp; + + return $this->smtp; + } + + /** + * Send mail via SMTP. + * Returns false if there is a bad MAIL FROM, RCPT, or DATA input. + * + * @see PHPMailer::setSMTPInstance() to use a different class. + * + * @uses \PHPMailer\PHPMailer\SMTP + * + * @param string $header The message headers + * @param string $body The message body + * + * @throws Exception + * + * @return bool + */ + protected function smtpSend($header, $body) + { + $header = static::stripTrailingWSP($header) . static::$LE . static::$LE; + $bad_rcpt = []; + if (!$this->smtpConnect($this->SMTPOptions)) { + throw new Exception($this->lang('smtp_connect_failed'), self::STOP_CRITICAL); + } + //Sender already validated in preSend() + if ('' === $this->Sender) { + $smtp_from = $this->From; + } else { + $smtp_from = $this->Sender; + } + if (!$this->smtp->mail($smtp_from)) { + $this->setError($this->lang('from_failed') . $smtp_from . ' : ' . implode(',', $this->smtp->getError())); + throw new Exception($this->ErrorInfo, self::STOP_CRITICAL); + } + + $callbacks = []; + // Attempt to send to all recipients + foreach ([$this->to, $this->cc, $this->bcc] as $togroup) { + foreach ($togroup as $to) { + if (!$this->smtp->recipient($to[0], $this->dsn)) { + $error = $this->smtp->getError(); + $bad_rcpt[] = ['to' => $to[0], 'error' => $error['detail']]; + $isSent = false; + } else { + $isSent = true; + } + + $callbacks[] = ['issent' => $isSent, 'to' => $to[0]]; + } + } + + // Only send the DATA command if we have viable recipients + if ((count($this->all_recipients) > count($bad_rcpt)) && !$this->smtp->data($header . $body)) { + throw new Exception($this->lang('data_not_accepted'), self::STOP_CRITICAL); + } + + $smtp_transaction_id = $this->smtp->getLastTransactionID(); + + if ($this->SMTPKeepAlive) { + $this->smtp->reset(); + } else { + $this->smtp->quit(); + $this->smtp->close(); + } + + foreach ($callbacks as $cb) { + $this->doCallback( + $cb['issent'], + [$cb['to']], + [], + [], + $this->Subject, + $body, + $this->From, + ['smtp_transaction_id' => $smtp_transaction_id] + ); + } + + //Create error message for any bad addresses + if (count($bad_rcpt) > 0) { + $errstr = ''; + foreach ($bad_rcpt as $bad) { + $errstr .= $bad['to'] . ': ' . $bad['error']; + } + throw new Exception($this->lang('recipients_failed') . $errstr, self::STOP_CONTINUE); + } + + return true; + } + + /** + * Initiate a connection to an SMTP server. + * Returns false if the operation failed. + * + * @param array $options An array of options compatible with stream_context_create() + * + * @throws Exception + * + * @uses \PHPMailer\PHPMailer\SMTP + * + * @return bool + */ + public function smtpConnect($options = null) + { + if (null === $this->smtp) { + $this->smtp = $this->getSMTPInstance(); + } + + //If no options are provided, use whatever is set in the instance + if (null === $options) { + $options = $this->SMTPOptions; + } + + // Already connected? + if ($this->smtp->connected()) { + return true; + } + + $this->smtp->setTimeout($this->Timeout); + $this->smtp->setDebugLevel($this->SMTPDebug); + $this->smtp->setDebugOutput($this->Debugoutput); + $this->smtp->setVerp($this->do_verp); + $hosts = explode(';', $this->Host); + $lastexception = null; + + foreach ($hosts as $hostentry) { + $hostinfo = []; + if ( + !preg_match( + '/^(?:(ssl|tls):\/\/)?(.+?)(?::(\d+))?$/', + trim($hostentry), + $hostinfo + ) + ) { + $this->edebug($this->lang('invalid_hostentry') . ' ' . trim($hostentry)); + // Not a valid host entry + continue; + } + // $hostinfo[1]: optional ssl or tls prefix + // $hostinfo[2]: the hostname + // $hostinfo[3]: optional port number + // The host string prefix can temporarily override the current setting for SMTPSecure + // If it's not specified, the default value is used + + //Check the host name is a valid name or IP address before trying to use it + if (!static::isValidHost($hostinfo[2])) { + $this->edebug($this->lang('invalid_host') . ' ' . $hostinfo[2]); + continue; + } + $prefix = ''; + $secure = $this->SMTPSecure; + $tls = (static::ENCRYPTION_STARTTLS === $this->SMTPSecure); + if ('ssl' === $hostinfo[1] || ('' === $hostinfo[1] && static::ENCRYPTION_SMTPS === $this->SMTPSecure)) { + $prefix = 'ssl://'; + $tls = false; // Can't have SSL and TLS at the same time + $secure = static::ENCRYPTION_SMTPS; + } elseif ('tls' === $hostinfo[1]) { + $tls = true; + // tls doesn't use a prefix + $secure = static::ENCRYPTION_STARTTLS; + } + //Do we need the OpenSSL extension? + $sslext = defined('OPENSSL_ALGO_SHA256'); + if (static::ENCRYPTION_STARTTLS === $secure || static::ENCRYPTION_SMTPS === $secure) { + //Check for an OpenSSL constant rather than using extension_loaded, which is sometimes disabled + if (!$sslext) { + throw new Exception($this->lang('extension_missing') . 'openssl', self::STOP_CRITICAL); + } + } + $host = $hostinfo[2]; + $port = $this->Port; + if ( + array_key_exists(3, $hostinfo) && + is_numeric($hostinfo[3]) && + $hostinfo[3] > 0 && + $hostinfo[3] < 65536 + ) { + $port = (int) $hostinfo[3]; + } + if ($this->smtp->connect($prefix . $host, $port, $this->Timeout, $options)) { + try { + if ($this->Helo) { + $hello = $this->Helo; + } else { + $hello = $this->serverHostname(); + } + $this->smtp->hello($hello); + //Automatically enable TLS encryption if: + // * it's not disabled + // * we have openssl extension + // * we are not already using SSL + // * the server offers STARTTLS + if ($this->SMTPAutoTLS && $sslext && 'ssl' !== $secure && $this->smtp->getServerExt('STARTTLS')) { + $tls = true; + } + if ($tls) { + if (!$this->smtp->startTLS()) { + throw new Exception($this->lang('connect_host')); + } + // We must resend EHLO after TLS negotiation + $this->smtp->hello($hello); + } + if ( + $this->SMTPAuth && !$this->smtp->authenticate( + $this->Username, + $this->Password, + $this->AuthType, + $this->oauth + ) + ) { + throw new Exception($this->lang('authenticate')); + } + + return true; + } catch (Exception $exc) { + $lastexception = $exc; + $this->edebug($exc->getMessage()); + // We must have connected, but then failed TLS or Auth, so close connection nicely + $this->smtp->quit(); + } + } + } + // If we get here, all connection attempts have failed, so close connection hard + $this->smtp->close(); + // As we've caught all exceptions, just report whatever the last one was + if ($this->exceptions && null !== $lastexception) { + throw $lastexception; + } + + return false; + } + + /** + * Close the active SMTP session if one exists. + */ + public function smtpClose() + { + if ((null !== $this->smtp) && $this->smtp->connected()) { + $this->smtp->quit(); + $this->smtp->close(); + } + } + + /** + * Set the language for error messages. + * Returns false if it cannot load the language file. + * The default language is English. + * + * @param string $langcode ISO 639-1 2-character language code (e.g. French is "fr") + * @param string $lang_path Path to the language file directory, with trailing separator (slash) + * + * @return bool + */ + public function setLanguage($langcode = 'en', $lang_path = '') + { + // Backwards compatibility for renamed language codes + $renamed_langcodes = [ + 'br' => 'pt_br', + 'cz' => 'cs', + 'dk' => 'da', + 'no' => 'nb', + 'se' => 'sv', + 'rs' => 'sr', + 'tg' => 'tl', + 'am' => 'hy', + ]; + + if (array_key_exists($langcode, $renamed_langcodes)) { + $langcode = $renamed_langcodes[$langcode]; + } + + // Define full set of translatable strings in English + $PHPMAILER_LANG = [ + 'authenticate' => 'SMTP Error: Could not authenticate.', + 'connect_host' => 'SMTP Error: Could not connect to SMTP host.', + 'data_not_accepted' => 'SMTP Error: data not accepted.', + 'empty_message' => 'Message body empty', + 'encoding' => 'Unknown encoding: ', + 'execute' => 'Could not execute: ', + 'file_access' => 'Could not access file: ', + 'file_open' => 'File Error: Could not open file: ', + 'from_failed' => 'The following From address failed: ', + 'instantiate' => 'Could not instantiate mail function.', + 'invalid_address' => 'Invalid address: ', + 'invalid_hostentry' => 'Invalid hostentry: ', + 'invalid_host' => 'Invalid host: ', + 'mailer_not_supported' => ' mailer is not supported.', + 'provide_address' => 'You must provide at least one recipient email address.', + 'recipients_failed' => 'SMTP Error: The following recipients failed: ', + 'signing' => 'Signing Error: ', + 'smtp_connect_failed' => 'SMTP connect() failed.', + 'smtp_error' => 'SMTP server error: ', + 'variable_set' => 'Cannot set or reset variable: ', + 'extension_missing' => 'Extension missing: ', + ]; + if (empty($lang_path)) { + // Calculate an absolute path so it can work if CWD is not here + $lang_path = dirname(__DIR__) . DIRECTORY_SEPARATOR . 'language' . DIRECTORY_SEPARATOR; + } + //Validate $langcode + if (!preg_match('/^[a-z]{2}(?:_[a-zA-Z]{2})?$/', $langcode)) { + $langcode = 'en'; + } + $foundlang = true; + $lang_file = $lang_path . 'phpmailer.lang-' . $langcode . '.php'; + // There is no English translation file + if ('en' !== $langcode) { + // Make sure language file path is readable + if (!static::fileIsAccessible($lang_file)) { + $foundlang = false; + } else { + // Overwrite language-specific strings. + // This way we'll never have missing translation keys. + $foundlang = include $lang_file; + } + } + $this->language = $PHPMAILER_LANG; + + return (bool) $foundlang; // Returns false if language not found + } + + /** + * Get the array of strings for the current language. + * + * @return array + */ + public function getTranslations() + { + return $this->language; + } + + /** + * Create recipient headers. + * + * @param string $type + * @param array $addr An array of recipients, + * where each recipient is a 2-element indexed array with element 0 containing an address + * and element 1 containing a name, like: + * [['joe@example.com', 'Joe User'], ['zoe@example.com', 'Zoe User']] + * + * @return string + */ + public function addrAppend($type, $addr) + { + $addresses = []; + foreach ($addr as $address) { + $addresses[] = $this->addrFormat($address); + } + + return $type . ': ' . implode(', ', $addresses) . static::$LE; + } + + /** + * Format an address for use in a message header. + * + * @param array $addr A 2-element indexed array, element 0 containing an address, element 1 containing a name like + * ['joe@example.com', 'Joe User'] + * + * @return string + */ + public function addrFormat($addr) + { + if (empty($addr[1])) { // No name provided + return $this->secureHeader($addr[0]); + } + + return $this->encodeHeader($this->secureHeader($addr[1]), 'phrase') . + ' <' . $this->secureHeader($addr[0]) . '>'; + } + + /** + * Word-wrap message. + * For use with mailers that do not automatically perform wrapping + * and for quoted-printable encoded messages. + * Original written by philippe. + * + * @param string $message The message to wrap + * @param int $length The line length to wrap to + * @param bool $qp_mode Whether to run in Quoted-Printable mode + * + * @return string + */ + public function wrapText($message, $length, $qp_mode = false) + { + if ($qp_mode) { + $soft_break = sprintf(' =%s', static::$LE); + } else { + $soft_break = static::$LE; + } + // If utf-8 encoding is used, we will need to make sure we don't + // split multibyte characters when we wrap + $is_utf8 = static::CHARSET_UTF8 === strtolower($this->CharSet); + $lelen = strlen(static::$LE); + $crlflen = strlen(static::$LE); + + $message = static::normalizeBreaks($message); + //Remove a trailing line break + if (substr($message, -$lelen) === static::$LE) { + $message = substr($message, 0, -$lelen); + } + + //Split message into lines + $lines = explode(static::$LE, $message); + //Message will be rebuilt in here + $message = ''; + foreach ($lines as $line) { + $words = explode(' ', $line); + $buf = ''; + $firstword = true; + foreach ($words as $word) { + if ($qp_mode && (strlen($word) > $length)) { + $space_left = $length - strlen($buf) - $crlflen; + if (!$firstword) { + if ($space_left > 20) { + $len = $space_left; + if ($is_utf8) { + $len = $this->utf8CharBoundary($word, $len); + } elseif ('=' === substr($word, $len - 1, 1)) { + --$len; + } elseif ('=' === substr($word, $len - 2, 1)) { + $len -= 2; + } + $part = substr($word, 0, $len); + $word = substr($word, $len); + $buf .= ' ' . $part; + $message .= $buf . sprintf('=%s', static::$LE); + } else { + $message .= $buf . $soft_break; + } + $buf = ''; + } + while ($word !== '') { + if ($length <= 0) { + break; + } + $len = $length; + if ($is_utf8) { + $len = $this->utf8CharBoundary($word, $len); + } elseif ('=' === substr($word, $len - 1, 1)) { + --$len; + } elseif ('=' === substr($word, $len - 2, 1)) { + $len -= 2; + } + $part = substr($word, 0, $len); + $word = (string) substr($word, $len); + + if ($word !== '') { + $message .= $part . sprintf('=%s', static::$LE); + } else { + $buf = $part; + } + } + } else { + $buf_o = $buf; + if (!$firstword) { + $buf .= ' '; + } + $buf .= $word; + + if ('' !== $buf_o && strlen($buf) > $length) { + $message .= $buf_o . $soft_break; + $buf = $word; + } + } + $firstword = false; + } + $message .= $buf . static::$LE; + } + + return $message; + } + + /** + * Find the last character boundary prior to $maxLength in a utf-8 + * quoted-printable encoded string. + * Original written by Colin Brown. + * + * @param string $encodedText utf-8 QP text + * @param int $maxLength Find the last character boundary prior to this length + * + * @return int + */ + public function utf8CharBoundary($encodedText, $maxLength) + { + $foundSplitPos = false; + $lookBack = 3; + while (!$foundSplitPos) { + $lastChunk = substr($encodedText, $maxLength - $lookBack, $lookBack); + $encodedCharPos = strpos($lastChunk, '='); + if (false !== $encodedCharPos) { + // Found start of encoded character byte within $lookBack block. + // Check the encoded byte value (the 2 chars after the '=') + $hex = substr($encodedText, $maxLength - $lookBack + $encodedCharPos + 1, 2); + $dec = hexdec($hex); + if ($dec < 128) { + // Single byte character. + // If the encoded char was found at pos 0, it will fit + // otherwise reduce maxLength to start of the encoded char + if ($encodedCharPos > 0) { + $maxLength -= $lookBack - $encodedCharPos; + } + $foundSplitPos = true; + } elseif ($dec >= 192) { + // First byte of a multi byte character + // Reduce maxLength to split at start of character + $maxLength -= $lookBack - $encodedCharPos; + $foundSplitPos = true; + } elseif ($dec < 192) { + // Middle byte of a multi byte character, look further back + $lookBack += 3; + } + } else { + // No encoded character found + $foundSplitPos = true; + } + } + + return $maxLength; + } + + /** + * Apply word wrapping to the message body. + * Wraps the message body to the number of chars set in the WordWrap property. + * You should only do this to plain-text bodies as wrapping HTML tags may break them. + * This is called automatically by createBody(), so you don't need to call it yourself. + */ + public function setWordWrap() + { + if ($this->WordWrap < 1) { + return; + } + + switch ($this->message_type) { + case 'alt': + case 'alt_inline': + case 'alt_attach': + case 'alt_inline_attach': + $this->AltBody = $this->wrapText($this->AltBody, $this->WordWrap); + break; + default: + $this->Body = $this->wrapText($this->Body, $this->WordWrap); + break; + } + } + + /** + * Assemble message headers. + * + * @return string The assembled headers + */ + public function createHeader() + { + $result = ''; + + $result .= $this->headerLine('Date', '' === $this->MessageDate ? self::rfcDate() : $this->MessageDate); + + // The To header is created automatically by mail(), so needs to be omitted here + if ('mail' !== $this->Mailer) { + if ($this->SingleTo) { + foreach ($this->to as $toaddr) { + $this->SingleToArray[] = $this->addrFormat($toaddr); + } + } elseif (count($this->to) > 0) { + $result .= $this->addrAppend('To', $this->to); + } elseif (count($this->cc) === 0) { + $result .= $this->headerLine('To', 'undisclosed-recipients:;'); + } + } + $result .= $this->addrAppend('From', [[trim($this->From), $this->FromName]]); + + // sendmail and mail() extract Cc from the header before sending + if (count($this->cc) > 0) { + $result .= $this->addrAppend('Cc', $this->cc); + } + + // sendmail and mail() extract Bcc from the header before sending + if ( + ( + 'sendmail' === $this->Mailer || 'qmail' === $this->Mailer || 'mail' === $this->Mailer + ) + && count($this->bcc) > 0 + ) { + $result .= $this->addrAppend('Bcc', $this->bcc); + } + + if (count($this->ReplyTo) > 0) { + $result .= $this->addrAppend('Reply-To', $this->ReplyTo); + } + + // mail() sets the subject itself + if ('mail' !== $this->Mailer) { + $result .= $this->headerLine('Subject', $this->encodeHeader($this->secureHeader($this->Subject))); + } + + // Only allow a custom message ID if it conforms to RFC 5322 section 3.6.4 + // https://tools.ietf.org/html/rfc5322#section-3.6.4 + if ('' !== $this->MessageID && preg_match('/^<.*@.*>$/', $this->MessageID)) { + $this->lastMessageID = $this->MessageID; + } else { + $this->lastMessageID = sprintf('<%s@%s>', $this->uniqueid, $this->serverHostname()); + } + $result .= $this->headerLine('Message-ID', $this->lastMessageID); + if (null !== $this->Priority) { + $result .= $this->headerLine('X-Priority', $this->Priority); + } + if ('' === $this->XMailer) { + $result .= $this->headerLine( + 'X-Mailer', + 'PHPMailer ' . self::VERSION . ' (https://github.com/PHPMailer/PHPMailer)' + ); + } else { + $myXmailer = trim($this->XMailer); + if ($myXmailer) { + $result .= $this->headerLine('X-Mailer', $myXmailer); + } + } + + if ('' !== $this->ConfirmReadingTo) { + $result .= $this->headerLine('Disposition-Notification-To', '<' . $this->ConfirmReadingTo . '>'); + } + + // Add custom headers + foreach ($this->CustomHeader as $header) { + $result .= $this->headerLine( + trim($header[0]), + $this->encodeHeader(trim($header[1])) + ); + } + if (!$this->sign_key_file) { + $result .= $this->headerLine('MIME-Version', '1.0'); + $result .= $this->getMailMIME(); + } + + return $result; + } + + /** + * Get the message MIME type headers. + * + * @return string + */ + public function getMailMIME() + { + $result = ''; + $ismultipart = true; + switch ($this->message_type) { + case 'inline': + $result .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_RELATED . ';'); + $result .= $this->textLine(' boundary="' . $this->boundary[1] . '"'); + break; + case 'attach': + case 'inline_attach': + case 'alt_attach': + case 'alt_inline_attach': + $result .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_MIXED . ';'); + $result .= $this->textLine(' boundary="' . $this->boundary[1] . '"'); + break; + case 'alt': + case 'alt_inline': + $result .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_ALTERNATIVE . ';'); + $result .= $this->textLine(' boundary="' . $this->boundary[1] . '"'); + break; + default: + // Catches case 'plain': and case '': + $result .= $this->textLine('Content-Type: ' . $this->ContentType . '; charset=' . $this->CharSet); + $ismultipart = false; + break; + } + // RFC1341 part 5 says 7bit is assumed if not specified + if (static::ENCODING_7BIT !== $this->Encoding) { + // RFC 2045 section 6.4 says multipart MIME parts may only use 7bit, 8bit or binary CTE + if ($ismultipart) { + if (static::ENCODING_8BIT === $this->Encoding) { + $result .= $this->headerLine('Content-Transfer-Encoding', static::ENCODING_8BIT); + } + // The only remaining alternatives are quoted-printable and base64, which are both 7bit compatible + } else { + $result .= $this->headerLine('Content-Transfer-Encoding', $this->Encoding); + } + } + + if ('mail' !== $this->Mailer) { +// $result .= static::$LE; + } + + return $result; + } + + /** + * Returns the whole MIME message. + * Includes complete headers and body. + * Only valid post preSend(). + * + * @see PHPMailer::preSend() + * + * @return string + */ + public function getSentMIMEMessage() + { + return static::stripTrailingWSP($this->MIMEHeader . $this->mailHeader) . + static::$LE . static::$LE . $this->MIMEBody; + } + + /** + * Create a unique ID to use for boundaries. + * + * @return string + */ + protected function generateId() + { + $len = 32; //32 bytes = 256 bits + $bytes = ''; + if (function_exists('random_bytes')) { + try { + $bytes = random_bytes($len); + } catch (\Exception $e) { + //Do nothing + } + } elseif (function_exists('openssl_random_pseudo_bytes')) { + /** @noinspection CryptographicallySecureRandomnessInspection */ + $bytes = openssl_random_pseudo_bytes($len); + } + if ($bytes === '') { + //We failed to produce a proper random string, so make do. + //Use a hash to force the length to the same as the other methods + $bytes = hash('sha256', uniqid((string) mt_rand(), true), true); + } + + //We don't care about messing up base64 format here, just want a random string + return str_replace(['=', '+', '/'], '', base64_encode(hash('sha256', $bytes, true))); + } + + /** + * Assemble the message body. + * Returns an empty string on failure. + * + * @throws Exception + * + * @return string The assembled message body + */ + public function createBody() + { + $body = ''; + //Create unique IDs and preset boundaries + $this->uniqueid = $this->generateId(); + $this->boundary[1] = 'b1_' . $this->uniqueid; + $this->boundary[2] = 'b2_' . $this->uniqueid; + $this->boundary[3] = 'b3_' . $this->uniqueid; + + if ($this->sign_key_file) { + $body .= $this->getMailMIME() . static::$LE; + } + + $this->setWordWrap(); + + $bodyEncoding = $this->Encoding; + $bodyCharSet = $this->CharSet; + //Can we do a 7-bit downgrade? + if (static::ENCODING_8BIT === $bodyEncoding && !$this->has8bitChars($this->Body)) { + $bodyEncoding = static::ENCODING_7BIT; + //All ISO 8859, Windows codepage and UTF-8 charsets are ascii compatible up to 7-bit + $bodyCharSet = static::CHARSET_ASCII; + } + //If lines are too long, and we're not already using an encoding that will shorten them, + //change to quoted-printable transfer encoding for the body part only + if (static::ENCODING_BASE64 !== $this->Encoding && static::hasLineLongerThanMax($this->Body)) { + $bodyEncoding = static::ENCODING_QUOTED_PRINTABLE; + } + + $altBodyEncoding = $this->Encoding; + $altBodyCharSet = $this->CharSet; + //Can we do a 7-bit downgrade? + if (static::ENCODING_8BIT === $altBodyEncoding && !$this->has8bitChars($this->AltBody)) { + $altBodyEncoding = static::ENCODING_7BIT; + //All ISO 8859, Windows codepage and UTF-8 charsets are ascii compatible up to 7-bit + $altBodyCharSet = static::CHARSET_ASCII; + } + //If lines are too long, and we're not already using an encoding that will shorten them, + //change to quoted-printable transfer encoding for the alt body part only + if (static::ENCODING_BASE64 !== $altBodyEncoding && static::hasLineLongerThanMax($this->AltBody)) { + $altBodyEncoding = static::ENCODING_QUOTED_PRINTABLE; + } + //Use this as a preamble in all multipart message types + $mimepre = 'This is a multi-part message in MIME format.' . static::$LE . static::$LE; + switch ($this->message_type) { + case 'inline': + $body .= $mimepre; + $body .= $this->getBoundary($this->boundary[1], $bodyCharSet, '', $bodyEncoding); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + $body .= $this->attachAll('inline', $this->boundary[1]); + break; + case 'attach': + $body .= $mimepre; + $body .= $this->getBoundary($this->boundary[1], $bodyCharSet, '', $bodyEncoding); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + $body .= $this->attachAll('attachment', $this->boundary[1]); + break; + case 'inline_attach': + $body .= $mimepre; + $body .= $this->textLine('--' . $this->boundary[1]); + $body .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_RELATED . ';'); + $body .= $this->textLine(' boundary="' . $this->boundary[2] . '";'); + $body .= $this->textLine(' type="' . static::CONTENT_TYPE_TEXT_HTML . '"'); + $body .= static::$LE; + $body .= $this->getBoundary($this->boundary[2], $bodyCharSet, '', $bodyEncoding); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + $body .= $this->attachAll('inline', $this->boundary[2]); + $body .= static::$LE; + $body .= $this->attachAll('attachment', $this->boundary[1]); + break; + case 'alt': + $body .= $mimepre; + $body .= $this->getBoundary( + $this->boundary[1], + $altBodyCharSet, + static::CONTENT_TYPE_PLAINTEXT, + $altBodyEncoding + ); + $body .= $this->encodeString($this->AltBody, $altBodyEncoding); + $body .= static::$LE; + $body .= $this->getBoundary( + $this->boundary[1], + $bodyCharSet, + static::CONTENT_TYPE_TEXT_HTML, + $bodyEncoding + ); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + if (!empty($this->Ical)) { + $method = static::ICAL_METHOD_REQUEST; + foreach (static::$IcalMethods as $imethod) { + if (stripos($this->Ical, 'METHOD:' . $imethod) !== false) { + $method = $imethod; + break; + } + } + $body .= $this->getBoundary( + $this->boundary[1], + '', + static::CONTENT_TYPE_TEXT_CALENDAR . '; method=' . $method, + '' + ); + $body .= $this->encodeString($this->Ical, $this->Encoding); + $body .= static::$LE; + } + $body .= $this->endBoundary($this->boundary[1]); + break; + case 'alt_inline': + $body .= $mimepre; + $body .= $this->getBoundary( + $this->boundary[1], + $altBodyCharSet, + static::CONTENT_TYPE_PLAINTEXT, + $altBodyEncoding + ); + $body .= $this->encodeString($this->AltBody, $altBodyEncoding); + $body .= static::$LE; + $body .= $this->textLine('--' . $this->boundary[1]); + $body .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_RELATED . ';'); + $body .= $this->textLine(' boundary="' . $this->boundary[2] . '";'); + $body .= $this->textLine(' type="' . static::CONTENT_TYPE_TEXT_HTML . '"'); + $body .= static::$LE; + $body .= $this->getBoundary( + $this->boundary[2], + $bodyCharSet, + static::CONTENT_TYPE_TEXT_HTML, + $bodyEncoding + ); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + $body .= $this->attachAll('inline', $this->boundary[2]); + $body .= static::$LE; + $body .= $this->endBoundary($this->boundary[1]); + break; + case 'alt_attach': + $body .= $mimepre; + $body .= $this->textLine('--' . $this->boundary[1]); + $body .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_ALTERNATIVE . ';'); + $body .= $this->textLine(' boundary="' . $this->boundary[2] . '"'); + $body .= static::$LE; + $body .= $this->getBoundary( + $this->boundary[2], + $altBodyCharSet, + static::CONTENT_TYPE_PLAINTEXT, + $altBodyEncoding + ); + $body .= $this->encodeString($this->AltBody, $altBodyEncoding); + $body .= static::$LE; + $body .= $this->getBoundary( + $this->boundary[2], + $bodyCharSet, + static::CONTENT_TYPE_TEXT_HTML, + $bodyEncoding + ); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + if (!empty($this->Ical)) { + $method = static::ICAL_METHOD_REQUEST; + foreach (static::$IcalMethods as $imethod) { + if (stripos($this->Ical, 'METHOD:' . $imethod) !== false) { + $method = $imethod; + break; + } + } + $body .= $this->getBoundary( + $this->boundary[2], + '', + static::CONTENT_TYPE_TEXT_CALENDAR . '; method=' . $method, + '' + ); + $body .= $this->encodeString($this->Ical, $this->Encoding); + } + $body .= $this->endBoundary($this->boundary[2]); + $body .= static::$LE; + $body .= $this->attachAll('attachment', $this->boundary[1]); + break; + case 'alt_inline_attach': + $body .= $mimepre; + $body .= $this->textLine('--' . $this->boundary[1]); + $body .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_ALTERNATIVE . ';'); + $body .= $this->textLine(' boundary="' . $this->boundary[2] . '"'); + $body .= static::$LE; + $body .= $this->getBoundary( + $this->boundary[2], + $altBodyCharSet, + static::CONTENT_TYPE_PLAINTEXT, + $altBodyEncoding + ); + $body .= $this->encodeString($this->AltBody, $altBodyEncoding); + $body .= static::$LE; + $body .= $this->textLine('--' . $this->boundary[2]); + $body .= $this->headerLine('Content-Type', static::CONTENT_TYPE_MULTIPART_RELATED . ';'); + $body .= $this->textLine(' boundary="' . $this->boundary[3] . '";'); + $body .= $this->textLine(' type="' . static::CONTENT_TYPE_TEXT_HTML . '"'); + $body .= static::$LE; + $body .= $this->getBoundary( + $this->boundary[3], + $bodyCharSet, + static::CONTENT_TYPE_TEXT_HTML, + $bodyEncoding + ); + $body .= $this->encodeString($this->Body, $bodyEncoding); + $body .= static::$LE; + $body .= $this->attachAll('inline', $this->boundary[3]); + $body .= static::$LE; + $body .= $this->endBoundary($this->boundary[2]); + $body .= static::$LE; + $body .= $this->attachAll('attachment', $this->boundary[1]); + break; + default: + // Catch case 'plain' and case '', applies to simple `text/plain` and `text/html` body content types + //Reset the `Encoding` property in case we changed it for line length reasons + $this->Encoding = $bodyEncoding; + $body .= $this->encodeString($this->Body, $this->Encoding); + break; + } + + if ($this->isError()) { + $body = ''; + if ($this->exceptions) { + throw new Exception($this->lang('empty_message'), self::STOP_CRITICAL); + } + } elseif ($this->sign_key_file) { + try { + if (!defined('PKCS7_TEXT')) { + throw new Exception($this->lang('extension_missing') . 'openssl'); + } + + $file = tempnam(sys_get_temp_dir(), 'srcsign'); + $signed = tempnam(sys_get_temp_dir(), 'mailsign'); + file_put_contents($file, $body); + + //Workaround for PHP bug https://bugs.php.net/bug.php?id=69197 + if (empty($this->sign_extracerts_file)) { + $sign = @openssl_pkcs7_sign( + $file, + $signed, + 'file://' . realpath($this->sign_cert_file), + ['file://' . realpath($this->sign_key_file), $this->sign_key_pass], + [] + ); + } else { + $sign = @openssl_pkcs7_sign( + $file, + $signed, + 'file://' . realpath($this->sign_cert_file), + ['file://' . realpath($this->sign_key_file), $this->sign_key_pass], + [], + PKCS7_DETACHED, + $this->sign_extracerts_file + ); + } + + @unlink($file); + if ($sign) { + $body = file_get_contents($signed); + @unlink($signed); + //The message returned by openssl contains both headers and body, so need to split them up + $parts = explode("\n\n", $body, 2); + $this->MIMEHeader .= $parts[0] . static::$LE . static::$LE; + $body = $parts[1]; + } else { + @unlink($signed); + throw new Exception($this->lang('signing') . openssl_error_string()); + } + } catch (Exception $exc) { + $body = ''; + if ($this->exceptions) { + throw $exc; + } + } + } + + return $body; + } + + /** + * Return the start of a message boundary. + * + * @param string $boundary + * @param string $charSet + * @param string $contentType + * @param string $encoding + * + * @return string + */ + protected function getBoundary($boundary, $charSet, $contentType, $encoding) + { + $result = ''; + if ('' === $charSet) { + $charSet = $this->CharSet; + } + if ('' === $contentType) { + $contentType = $this->ContentType; + } + if ('' === $encoding) { + $encoding = $this->Encoding; + } + $result .= $this->textLine('--' . $boundary); + $result .= sprintf('Content-Type: %s; charset=%s', $contentType, $charSet); + $result .= static::$LE; + // RFC1341 part 5 says 7bit is assumed if not specified + if (static::ENCODING_7BIT !== $encoding) { + $result .= $this->headerLine('Content-Transfer-Encoding', $encoding); + } + $result .= static::$LE; + + return $result; + } + + /** + * Return the end of a message boundary. + * + * @param string $boundary + * + * @return string + */ + protected function endBoundary($boundary) + { + return static::$LE . '--' . $boundary . '--' . static::$LE; + } + + /** + * Set the message type. + * PHPMailer only supports some preset message types, not arbitrary MIME structures. + */ + protected function setMessageType() + { + $type = []; + if ($this->alternativeExists()) { + $type[] = 'alt'; + } + if ($this->inlineImageExists()) { + $type[] = 'inline'; + } + if ($this->attachmentExists()) { + $type[] = 'attach'; + } + $this->message_type = implode('_', $type); + if ('' === $this->message_type) { + //The 'plain' message_type refers to the message having a single body element, not that it is plain-text + $this->message_type = 'plain'; + } + } + + /** + * Format a header line. + * + * @param string $name + * @param string|int $value + * + * @return string + */ + public function headerLine($name, $value) + { + return $name . ': ' . $value . static::$LE; + } + + /** + * Return a formatted mail line. + * + * @param string $value + * + * @return string + */ + public function textLine($value) + { + return $value . static::$LE; + } + + /** + * Add an attachment from a path on the filesystem. + * Never use a user-supplied path to a file! + * Returns false if the file could not be found or read. + * Explicitly *does not* support passing URLs; PHPMailer is not an HTTP client. + * If you need to do that, fetch the resource yourself and pass it in via a local file or string. + * + * @param string $path Path to the attachment + * @param string $name Overrides the attachment name + * @param string $encoding File encoding (see $Encoding) + * @param string $type MIME type, e.g. `image/jpeg`; determined automatically from $path if not specified + * @param string $disposition Disposition to use + * + * @throws Exception + * + * @return bool + */ + public function addAttachment( + $path, + $name = '', + $encoding = self::ENCODING_BASE64, + $type = '', + $disposition = 'attachment' + ) { + try { + if (!static::fileIsAccessible($path)) { + throw new Exception($this->lang('file_access') . $path, self::STOP_CONTINUE); + } + + // If a MIME type is not specified, try to work it out from the file name + if ('' === $type) { + $type = static::filenameToType($path); + } + + $filename = (string) static::mb_pathinfo($path, PATHINFO_BASENAME); + if ('' === $name) { + $name = $filename; + } + if (!$this->validateEncoding($encoding)) { + throw new Exception($this->lang('encoding') . $encoding); + } + + $this->attachment[] = [ + 0 => $path, + 1 => $filename, + 2 => $name, + 3 => $encoding, + 4 => $type, + 5 => false, // isStringAttachment + 6 => $disposition, + 7 => $name, + ]; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + + return true; + } + + /** + * Return the array of attachments. + * + * @return array + */ + public function getAttachments() + { + return $this->attachment; + } + + /** + * Attach all file, string, and binary attachments to the message. + * Returns an empty string on failure. + * + * @param string $disposition_type + * @param string $boundary + * + * @throws Exception + * + * @return string + */ + protected function attachAll($disposition_type, $boundary) + { + // Return text of body + $mime = []; + $cidUniq = []; + $incl = []; + + // Add all attachments + foreach ($this->attachment as $attachment) { + // Check if it is a valid disposition_filter + if ($attachment[6] === $disposition_type) { + // Check for string attachment + $string = ''; + $path = ''; + $bString = $attachment[5]; + if ($bString) { + $string = $attachment[0]; + } else { + $path = $attachment[0]; + } + + $inclhash = hash('sha256', serialize($attachment)); + if (in_array($inclhash, $incl, true)) { + continue; + } + $incl[] = $inclhash; + $name = $attachment[2]; + $encoding = $attachment[3]; + $type = $attachment[4]; + $disposition = $attachment[6]; + $cid = $attachment[7]; + if ('inline' === $disposition && array_key_exists($cid, $cidUniq)) { + continue; + } + $cidUniq[$cid] = true; + + $mime[] = sprintf('--%s%s', $boundary, static::$LE); + //Only include a filename property if we have one + if (!empty($name)) { + $mime[] = sprintf( + 'Content-Type: %s; name=%s%s', + $type, + static::quotedString($this->encodeHeader($this->secureHeader($name))), + static::$LE + ); + } else { + $mime[] = sprintf( + 'Content-Type: %s%s', + $type, + static::$LE + ); + } + // RFC1341 part 5 says 7bit is assumed if not specified + if (static::ENCODING_7BIT !== $encoding) { + $mime[] = sprintf('Content-Transfer-Encoding: %s%s', $encoding, static::$LE); + } + + //Only set Content-IDs on inline attachments + if ((string) $cid !== '' && $disposition === 'inline') { + $mime[] = 'Content-ID: <' . $this->encodeHeader($this->secureHeader($cid)) . '>' . static::$LE; + } + + // Allow for bypassing the Content-Disposition header + if (!empty($disposition)) { + $encoded_name = $this->encodeHeader($this->secureHeader($name)); + if (!empty($encoded_name)) { + $mime[] = sprintf( + 'Content-Disposition: %s; filename=%s%s', + $disposition, + static::quotedString($encoded_name), + static::$LE . static::$LE + ); + } else { + $mime[] = sprintf( + 'Content-Disposition: %s%s', + $disposition, + static::$LE . static::$LE + ); + } + } else { + $mime[] = static::$LE; + } + + // Encode as string attachment + if ($bString) { + $mime[] = $this->encodeString($string, $encoding); + } else { + $mime[] = $this->encodeFile($path, $encoding); + } + if ($this->isError()) { + return ''; + } + $mime[] = static::$LE; + } + } + + $mime[] = sprintf('--%s--%s', $boundary, static::$LE); + + return implode('', $mime); + } + + /** + * Encode a file attachment in requested format. + * Returns an empty string on failure. + * + * @param string $path The full path to the file + * @param string $encoding The encoding to use; one of 'base64', '7bit', '8bit', 'binary', 'quoted-printable' + * + * @return string + */ + protected function encodeFile($path, $encoding = self::ENCODING_BASE64) + { + try { + if (!static::fileIsAccessible($path)) { + throw new Exception($this->lang('file_open') . $path, self::STOP_CONTINUE); + } + $file_buffer = file_get_contents($path); + if (false === $file_buffer) { + throw new Exception($this->lang('file_open') . $path, self::STOP_CONTINUE); + } + $file_buffer = $this->encodeString($file_buffer, $encoding); + + return $file_buffer; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return ''; + } + } + + /** + * Encode a string in requested format. + * Returns an empty string on failure. + * + * @param string $str The text to encode + * @param string $encoding The encoding to use; one of 'base64', '7bit', '8bit', 'binary', 'quoted-printable' + * + * @throws Exception + * + * @return string + */ + public function encodeString($str, $encoding = self::ENCODING_BASE64) + { + $encoded = ''; + switch (strtolower($encoding)) { + case static::ENCODING_BASE64: + $encoded = chunk_split( + base64_encode($str), + static::STD_LINE_LENGTH, + static::$LE + ); + break; + case static::ENCODING_7BIT: + case static::ENCODING_8BIT: + $encoded = static::normalizeBreaks($str); + // Make sure it ends with a line break + if (substr($encoded, -(strlen(static::$LE))) !== static::$LE) { + $encoded .= static::$LE; + } + break; + case static::ENCODING_BINARY: + $encoded = $str; + break; + case static::ENCODING_QUOTED_PRINTABLE: + $encoded = $this->encodeQP($str); + break; + default: + $this->setError($this->lang('encoding') . $encoding); + if ($this->exceptions) { + throw new Exception($this->lang('encoding') . $encoding); + } + break; + } + + return $encoded; + } + + /** + * Encode a header value (not including its label) optimally. + * Picks shortest of Q, B, or none. Result includes folding if needed. + * See RFC822 definitions for phrase, comment and text positions. + * + * @param string $str The header value to encode + * @param string $position What context the string will be used in + * + * @return string + */ + public function encodeHeader($str, $position = 'text') + { + $matchcount = 0; + switch (strtolower($position)) { + case 'phrase': + if (!preg_match('/[\200-\377]/', $str)) { + // Can't use addslashes as we don't know the value of magic_quotes_sybase + $encoded = addcslashes($str, "\0..\37\177\\\""); + if (($str === $encoded) && !preg_match('/[^A-Za-z0-9!#$%&\'*+\/=?^_`{|}~ -]/', $str)) { + return $encoded; + } + + return "\"$encoded\""; + } + $matchcount = preg_match_all('/[^\040\041\043-\133\135-\176]/', $str, $matches); + break; + /* @noinspection PhpMissingBreakStatementInspection */ + case 'comment': + $matchcount = preg_match_all('/[()"]/', $str, $matches); + //fallthrough + case 'text': + default: + $matchcount += preg_match_all('/[\000-\010\013\014\016-\037\177-\377]/', $str, $matches); + break; + } + + if ($this->has8bitChars($str)) { + $charset = $this->CharSet; + } else { + $charset = static::CHARSET_ASCII; + } + + // Q/B encoding adds 8 chars and the charset ("` =??[QB]??=`"). + $overhead = 8 + strlen($charset); + + if ('mail' === $this->Mailer) { + $maxlen = static::MAIL_MAX_LINE_LENGTH - $overhead; + } else { + $maxlen = static::MAX_LINE_LENGTH - $overhead; + } + + // Select the encoding that produces the shortest output and/or prevents corruption. + if ($matchcount > strlen($str) / 3) { + // More than 1/3 of the content needs encoding, use B-encode. + $encoding = 'B'; + } elseif ($matchcount > 0) { + // Less than 1/3 of the content needs encoding, use Q-encode. + $encoding = 'Q'; + } elseif (strlen($str) > $maxlen) { + // No encoding needed, but value exceeds max line length, use Q-encode to prevent corruption. + $encoding = 'Q'; + } else { + // No reformatting needed + $encoding = false; + } + + switch ($encoding) { + case 'B': + if ($this->hasMultiBytes($str)) { + // Use a custom function which correctly encodes and wraps long + // multibyte strings without breaking lines within a character + $encoded = $this->base64EncodeWrapMB($str, "\n"); + } else { + $encoded = base64_encode($str); + $maxlen -= $maxlen % 4; + $encoded = trim(chunk_split($encoded, $maxlen, "\n")); + } + $encoded = preg_replace('/^(.*)$/m', ' =?' . $charset . "?$encoding?\\1?=", $encoded); + break; + case 'Q': + $encoded = $this->encodeQ($str, $position); + $encoded = $this->wrapText($encoded, $maxlen, true); + $encoded = str_replace('=' . static::$LE, "\n", trim($encoded)); + $encoded = preg_replace('/^(.*)$/m', ' =?' . $charset . "?$encoding?\\1?=", $encoded); + break; + default: + return $str; + } + + return trim(static::normalizeBreaks($encoded)); + } + + /** + * Check if a string contains multi-byte characters. + * + * @param string $str multi-byte text to wrap encode + * + * @return bool + */ + public function hasMultiBytes($str) + { + if (function_exists('mb_strlen')) { + return strlen($str) > mb_strlen($str, $this->CharSet); + } + + // Assume no multibytes (we can't handle without mbstring functions anyway) + return false; + } + + /** + * Does a string contain any 8-bit chars (in any charset)? + * + * @param string $text + * + * @return bool + */ + public function has8bitChars($text) + { + return (bool) preg_match('/[\x80-\xFF]/', $text); + } + + /** + * Encode and wrap long multibyte strings for mail headers + * without breaking lines within a character. + * Adapted from a function by paravoid. + * + * @see http://www.php.net/manual/en/function.mb-encode-mimeheader.php#60283 + * + * @param string $str multi-byte text to wrap encode + * @param string $linebreak string to use as linefeed/end-of-line + * + * @return string + */ + public function base64EncodeWrapMB($str, $linebreak = null) + { + $start = '=?' . $this->CharSet . '?B?'; + $end = '?='; + $encoded = ''; + if (null === $linebreak) { + $linebreak = static::$LE; + } + + $mb_length = mb_strlen($str, $this->CharSet); + // Each line must have length <= 75, including $start and $end + $length = 75 - strlen($start) - strlen($end); + // Average multi-byte ratio + $ratio = $mb_length / strlen($str); + // Base64 has a 4:3 ratio + $avgLength = floor($length * $ratio * .75); + + $offset = 0; + for ($i = 0; $i < $mb_length; $i += $offset) { + $lookBack = 0; + do { + $offset = $avgLength - $lookBack; + $chunk = mb_substr($str, $i, $offset, $this->CharSet); + $chunk = base64_encode($chunk); + ++$lookBack; + } while (strlen($chunk) > $length); + $encoded .= $chunk . $linebreak; + } + + // Chomp the last linefeed + return substr($encoded, 0, -strlen($linebreak)); + } + + /** + * Encode a string in quoted-printable format. + * According to RFC2045 section 6.7. + * + * @param string $string The text to encode + * + * @return string + */ + public function encodeQP($string) + { + return static::normalizeBreaks(quoted_printable_encode($string)); + } + + /** + * Encode a string using Q encoding. + * + * @see http://tools.ietf.org/html/rfc2047#section-4.2 + * + * @param string $str the text to encode + * @param string $position Where the text is going to be used, see the RFC for what that means + * + * @return string + */ + public function encodeQ($str, $position = 'text') + { + // There should not be any EOL in the string + $pattern = ''; + $encoded = str_replace(["\r", "\n"], '', $str); + switch (strtolower($position)) { + case 'phrase': + // RFC 2047 section 5.3 + $pattern = '^A-Za-z0-9!*+\/ -'; + break; + /* + * RFC 2047 section 5.2. + * Build $pattern without including delimiters and [] + */ + /* @noinspection PhpMissingBreakStatementInspection */ + case 'comment': + $pattern = '\(\)"'; + /* Intentional fall through */ + case 'text': + default: + // RFC 2047 section 5.1 + // Replace every high ascii, control, =, ? and _ characters + $pattern = '\000-\011\013\014\016-\037\075\077\137\177-\377' . $pattern; + break; + } + $matches = []; + if (preg_match_all("/[{$pattern}]/", $encoded, $matches)) { + // If the string contains an '=', make sure it's the first thing we replace + // so as to avoid double-encoding + $eqkey = array_search('=', $matches[0], true); + if (false !== $eqkey) { + unset($matches[0][$eqkey]); + array_unshift($matches[0], '='); + } + foreach (array_unique($matches[0]) as $char) { + $encoded = str_replace($char, '=' . sprintf('%02X', ord($char)), $encoded); + } + } + // Replace spaces with _ (more readable than =20) + // RFC 2047 section 4.2(2) + return str_replace(' ', '_', $encoded); + } + + /** + * Add a string or binary attachment (non-filesystem). + * This method can be used to attach ascii or binary data, + * such as a BLOB record from a database. + * + * @param string $string String attachment data + * @param string $filename Name of the attachment + * @param string $encoding File encoding (see $Encoding) + * @param string $type File extension (MIME) type + * @param string $disposition Disposition to use + * + * @throws Exception + * + * @return bool True on successfully adding an attachment + */ + public function addStringAttachment( + $string, + $filename, + $encoding = self::ENCODING_BASE64, + $type = '', + $disposition = 'attachment' + ) { + try { + // If a MIME type is not specified, try to work it out from the file name + if ('' === $type) { + $type = static::filenameToType($filename); + } + + if (!$this->validateEncoding($encoding)) { + throw new Exception($this->lang('encoding') . $encoding); + } + + // Append to $attachment array + $this->attachment[] = [ + 0 => $string, + 1 => $filename, + 2 => static::mb_pathinfo($filename, PATHINFO_BASENAME), + 3 => $encoding, + 4 => $type, + 5 => true, // isStringAttachment + 6 => $disposition, + 7 => 0, + ]; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + + return true; + } + + /** + * Add an embedded (inline) attachment from a file. + * This can include images, sounds, and just about any other document type. + * These differ from 'regular' attachments in that they are intended to be + * displayed inline with the message, not just attached for download. + * This is used in HTML messages that embed the images + * the HTML refers to using the $cid value. + * Never use a user-supplied path to a file! + * + * @param string $path Path to the attachment + * @param string $cid Content ID of the attachment; Use this to reference + * the content when using an embedded image in HTML + * @param string $name Overrides the attachment name + * @param string $encoding File encoding (see $Encoding) + * @param string $type File MIME type + * @param string $disposition Disposition to use + * + * @throws Exception + * + * @return bool True on successfully adding an attachment + */ + public function addEmbeddedImage( + $path, + $cid, + $name = '', + $encoding = self::ENCODING_BASE64, + $type = '', + $disposition = 'inline' + ) { + try { + if (!static::fileIsAccessible($path)) { + throw new Exception($this->lang('file_access') . $path, self::STOP_CONTINUE); + } + + // If a MIME type is not specified, try to work it out from the file name + if ('' === $type) { + $type = static::filenameToType($path); + } + + if (!$this->validateEncoding($encoding)) { + throw new Exception($this->lang('encoding') . $encoding); + } + + $filename = (string) static::mb_pathinfo($path, PATHINFO_BASENAME); + if ('' === $name) { + $name = $filename; + } + + // Append to $attachment array + $this->attachment[] = [ + 0 => $path, + 1 => $filename, + 2 => $name, + 3 => $encoding, + 4 => $type, + 5 => false, // isStringAttachment + 6 => $disposition, + 7 => $cid, + ]; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + + return true; + } + + /** + * Add an embedded stringified attachment. + * This can include images, sounds, and just about any other document type. + * If your filename doesn't contain an extension, be sure to set the $type to an appropriate MIME type. + * + * @param string $string The attachment binary data + * @param string $cid Content ID of the attachment; Use this to reference + * the content when using an embedded image in HTML + * @param string $name A filename for the attachment. If this contains an extension, + * PHPMailer will attempt to set a MIME type for the attachment. + * For example 'file.jpg' would get an 'image/jpeg' MIME type. + * @param string $encoding File encoding (see $Encoding), defaults to 'base64' + * @param string $type MIME type - will be used in preference to any automatically derived type + * @param string $disposition Disposition to use + * + * @throws Exception + * + * @return bool True on successfully adding an attachment + */ + public function addStringEmbeddedImage( + $string, + $cid, + $name = '', + $encoding = self::ENCODING_BASE64, + $type = '', + $disposition = 'inline' + ) { + try { + // If a MIME type is not specified, try to work it out from the name + if ('' === $type && !empty($name)) { + $type = static::filenameToType($name); + } + + if (!$this->validateEncoding($encoding)) { + throw new Exception($this->lang('encoding') . $encoding); + } + + // Append to $attachment array + $this->attachment[] = [ + 0 => $string, + 1 => $name, + 2 => $name, + 3 => $encoding, + 4 => $type, + 5 => true, // isStringAttachment + 6 => $disposition, + 7 => $cid, + ]; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + + return true; + } + + /** + * Validate encodings. + * + * @param string $encoding + * + * @return bool + */ + protected function validateEncoding($encoding) + { + return in_array( + $encoding, + [ + self::ENCODING_7BIT, + self::ENCODING_QUOTED_PRINTABLE, + self::ENCODING_BASE64, + self::ENCODING_8BIT, + self::ENCODING_BINARY, + ], + true + ); + } + + /** + * Check if an embedded attachment is present with this cid. + * + * @param string $cid + * + * @return bool + */ + protected function cidExists($cid) + { + foreach ($this->attachment as $attachment) { + if ('inline' === $attachment[6] && $cid === $attachment[7]) { + return true; + } + } + + return false; + } + + /** + * Check if an inline attachment is present. + * + * @return bool + */ + public function inlineImageExists() + { + foreach ($this->attachment as $attachment) { + if ('inline' === $attachment[6]) { + return true; + } + } + + return false; + } + + /** + * Check if an attachment (non-inline) is present. + * + * @return bool + */ + public function attachmentExists() + { + foreach ($this->attachment as $attachment) { + if ('attachment' === $attachment[6]) { + return true; + } + } + + return false; + } + + /** + * Check if this message has an alternative body set. + * + * @return bool + */ + public function alternativeExists() + { + return !empty($this->AltBody); + } + + /** + * Clear queued addresses of given kind. + * + * @param string $kind 'to', 'cc', or 'bcc' + */ + public function clearQueuedAddresses($kind) + { + $this->RecipientsQueue = array_filter( + $this->RecipientsQueue, + static function ($params) use ($kind) { + return $params[0] !== $kind; + } + ); + } + + /** + * Clear all To recipients. + */ + public function clearAddresses() + { + foreach ($this->to as $to) { + unset($this->all_recipients[strtolower($to[0])]); + } + $this->to = []; + $this->clearQueuedAddresses('to'); + } + + /** + * Clear all CC recipients. + */ + public function clearCCs() + { + foreach ($this->cc as $cc) { + unset($this->all_recipients[strtolower($cc[0])]); + } + $this->cc = []; + $this->clearQueuedAddresses('cc'); + } + + /** + * Clear all BCC recipients. + */ + public function clearBCCs() + { + foreach ($this->bcc as $bcc) { + unset($this->all_recipients[strtolower($bcc[0])]); + } + $this->bcc = []; + $this->clearQueuedAddresses('bcc'); + } + + /** + * Clear all ReplyTo recipients. + */ + public function clearReplyTos() + { + $this->ReplyTo = []; + $this->ReplyToQueue = []; + } + + /** + * Clear all recipient types. + */ + public function clearAllRecipients() + { + $this->to = []; + $this->cc = []; + $this->bcc = []; + $this->all_recipients = []; + $this->RecipientsQueue = []; + } + + /** + * Clear all filesystem, string, and binary attachments. + */ + public function clearAttachments() + { + $this->attachment = []; + } + + /** + * Clear all custom headers. + */ + public function clearCustomHeaders() + { + $this->CustomHeader = []; + } + + /** + * Add an error message to the error container. + * + * @param string $msg + */ + protected function setError($msg) + { + ++$this->error_count; + if ('smtp' === $this->Mailer && null !== $this->smtp) { + $lasterror = $this->smtp->getError(); + if (!empty($lasterror['error'])) { + $msg .= $this->lang('smtp_error') . $lasterror['error']; + if (!empty($lasterror['detail'])) { + $msg .= ' Detail: ' . $lasterror['detail']; + } + if (!empty($lasterror['smtp_code'])) { + $msg .= ' SMTP code: ' . $lasterror['smtp_code']; + } + if (!empty($lasterror['smtp_code_ex'])) { + $msg .= ' Additional SMTP info: ' . $lasterror['smtp_code_ex']; + } + } + } + $this->ErrorInfo = $msg; + } + + /** + * Return an RFC 822 formatted date. + * + * @return string + */ + public static function rfcDate() + { + // Set the time zone to whatever the default is to avoid 500 errors + // Will default to UTC if it's not set properly in php.ini + date_default_timezone_set(@date_default_timezone_get()); + + return date('D, j M Y H:i:s O'); + } + + /** + * Get the server hostname. + * Returns 'localhost.localdomain' if unknown. + * + * @return string + */ + protected function serverHostname() + { + $result = ''; + if (!empty($this->Hostname)) { + $result = $this->Hostname; + } elseif (isset($_SERVER) && array_key_exists('SERVER_NAME', $_SERVER)) { + $result = $_SERVER['SERVER_NAME']; + } elseif (function_exists('gethostname') && gethostname() !== false) { + $result = gethostname(); + } elseif (php_uname('n') !== false) { + $result = php_uname('n'); + } + if (!static::isValidHost($result)) { + return 'localhost.localdomain'; + } + + return $result; + } + + /** + * Validate whether a string contains a valid value to use as a hostname or IP address. + * IPv6 addresses must include [], e.g. `[::1]`, not just `::1`. + * + * @param string $host The host name or IP address to check + * + * @return bool + */ + public static function isValidHost($host) + { + //Simple syntax limits + if ( + empty($host) + || !is_string($host) + || strlen($host) > 256 + || !preg_match('/^([a-zA-Z\d.-]*|\[[a-fA-F\d:]+])$/', $host) + ) { + return false; + } + //Looks like a bracketed IPv6 address + if (strlen($host) > 2 && substr($host, 0, 1) === '[' && substr($host, -1, 1) === ']') { + return filter_var(substr($host, 1, -1), FILTER_VALIDATE_IP, FILTER_FLAG_IPV6) !== false; + } + //If removing all the dots results in a numeric string, it must be an IPv4 address. + //Need to check this first because otherwise things like `999.0.0.0` are considered valid host names + if (is_numeric(str_replace('.', '', $host))) { + //Is it a valid IPv4 address? + return filter_var($host, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) !== false; + } + if (filter_var('http://' . $host, FILTER_VALIDATE_URL) !== false) { + //Is it a syntactically valid hostname? + return true; + } + + return false; + } + + /** + * Get an error message in the current language. + * + * @param string $key + * + * @return string + */ + protected function lang($key) + { + if (count($this->language) < 1) { + $this->setLanguage(); // set the default language + } + + if (array_key_exists($key, $this->language)) { + if ('smtp_connect_failed' === $key) { + //Include a link to troubleshooting docs on SMTP connection failure + //this is by far the biggest cause of support questions + //but it's usually not PHPMailer's fault. + return $this->language[$key] . ' https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting'; + } + + return $this->language[$key]; + } + + //Return the key as a fallback + return $key; + } + + /** + * Check if an error occurred. + * + * @return bool True if an error did occur + */ + public function isError() + { + return $this->error_count > 0; + } + + /** + * Add a custom header. + * $name value can be overloaded to contain + * both header name and value (name:value). + * + * @param string $name Custom header name + * @param string|null $value Header value + * + * @throws Exception + */ + public function addCustomHeader($name, $value = null) + { + if (null === $value && strpos($name, ':') !== false) { + // Value passed in as name:value + list($name, $value) = explode(':', $name, 2); + } + $name = trim($name); + $value = trim($value); + //Ensure name is not empty, and that neither name nor value contain line breaks + if (empty($name) || strpbrk($name . $value, "\r\n") !== false) { + if ($this->exceptions) { + throw new Exception('Invalid header name or value'); + } + + return false; + } + $this->CustomHeader[] = [$name, $value]; + + return true; + } + + /** + * Returns all custom headers. + * + * @return array + */ + public function getCustomHeaders() + { + return $this->CustomHeader; + } + + /** + * Create a message body from an HTML string. + * Automatically inlines images and creates a plain-text version by converting the HTML, + * overwriting any existing values in Body and AltBody. + * Do not source $message content from user input! + * $basedir is prepended when handling relative URLs, e.g. and must not be empty + * will look for an image file in $basedir/images/a.png and convert it to inline. + * If you don't provide a $basedir, relative paths will be left untouched (and thus probably break in email) + * Converts data-uri images into embedded attachments. + * If you don't want to apply these transformations to your HTML, just set Body and AltBody directly. + * + * @param string $message HTML message string + * @param string $basedir Absolute path to a base directory to prepend to relative paths to images + * @param bool|callable $advanced Whether to use the internal HTML to text converter + * or your own custom converter + * @return string The transformed message body + * + * @throws Exception + * + * @see PHPMailer::html2text() + */ + public function msgHTML($message, $basedir = '', $advanced = false) + { + preg_match_all('/(? 1 && '/' !== substr($basedir, -1)) { + // Ensure $basedir has a trailing / + $basedir .= '/'; + } + foreach ($images[2] as $imgindex => $url) { + // Convert data URIs into embedded images + //e.g. "data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" + $match = []; + if (preg_match('#^data:(image/(?:jpe?g|gif|png));?(base64)?,(.+)#', $url, $match)) { + if (count($match) === 4 && static::ENCODING_BASE64 === $match[2]) { + $data = base64_decode($match[3]); + } elseif ('' === $match[2]) { + $data = rawurldecode($match[3]); + } else { + //Not recognised so leave it alone + continue; + } + //Hash the decoded data, not the URL, so that the same data-URI image used in multiple places + //will only be embedded once, even if it used a different encoding + $cid = substr(hash('sha256', $data), 0, 32) . '@phpmailer.0'; // RFC2392 S 2 + + if (!$this->cidExists($cid)) { + $this->addStringEmbeddedImage( + $data, + $cid, + 'embed' . $imgindex, + static::ENCODING_BASE64, + $match[1] + ); + } + $message = str_replace( + $images[0][$imgindex], + $images[1][$imgindex] . '="cid:' . $cid . '"', + $message + ); + continue; + } + if ( + // Only process relative URLs if a basedir is provided (i.e. no absolute local paths) + !empty($basedir) + // Ignore URLs containing parent dir traversal (..) + && (strpos($url, '..') === false) + // Do not change urls that are already inline images + && 0 !== strpos($url, 'cid:') + // Do not change absolute URLs, including anonymous protocol + && !preg_match('#^[a-z][a-z0-9+.-]*:?//#i', $url) + ) { + $filename = static::mb_pathinfo($url, PATHINFO_BASENAME); + $directory = dirname($url); + if ('.' === $directory) { + $directory = ''; + } + // RFC2392 S 2 + $cid = substr(hash('sha256', $url), 0, 32) . '@phpmailer.0'; + if (strlen($basedir) > 1 && '/' !== substr($basedir, -1)) { + $basedir .= '/'; + } + if (strlen($directory) > 1 && '/' !== substr($directory, -1)) { + $directory .= '/'; + } + if ( + $this->addEmbeddedImage( + $basedir . $directory . $filename, + $cid, + $filename, + static::ENCODING_BASE64, + static::_mime_types((string) static::mb_pathinfo($filename, PATHINFO_EXTENSION)) + ) + ) { + $message = preg_replace( + '/' . $images[1][$imgindex] . '=["\']' . preg_quote($url, '/') . '["\']/Ui', + $images[1][$imgindex] . '="cid:' . $cid . '"', + $message + ); + } + } + } + } + $this->isHTML(); + // Convert all message body line breaks to LE, makes quoted-printable encoding work much better + $this->Body = static::normalizeBreaks($message); + $this->AltBody = static::normalizeBreaks($this->html2text($message, $advanced)); + if (!$this->alternativeExists()) { + $this->AltBody = 'This is an HTML-only message. To view it, activate HTML in your email application.' + . static::$LE; + } + + return $this->Body; + } + + /** + * Convert an HTML string into plain text. + * This is used by msgHTML(). + * Note - older versions of this function used a bundled advanced converter + * which was removed for license reasons in #232. + * Example usage: + * + * ```php + * // Use default conversion + * $plain = $mail->html2text($html); + * // Use your own custom converter + * $plain = $mail->html2text($html, function($html) { + * $converter = new MyHtml2text($html); + * return $converter->get_text(); + * }); + * ``` + * + * @param string $html The HTML text to convert + * @param bool|callable $advanced Any boolean value to use the internal converter, + * or provide your own callable for custom conversion + * + * @return string + */ + public function html2text($html, $advanced = false) + { + if (is_callable($advanced)) { + return call_user_func($advanced, $html); + } + + return html_entity_decode( + trim(strip_tags(preg_replace('/<(head|title|style|script)[^>]*>.*?<\/\\1>/si', '', $html))), + ENT_QUOTES, + $this->CharSet + ); + } + + /** + * Get the MIME type for a file extension. + * + * @param string $ext File extension + * + * @return string MIME type of file + */ + public static function _mime_types($ext = '') + { + $mimes = [ + 'xl' => 'application/excel', + 'js' => 'application/javascript', + 'hqx' => 'application/mac-binhex40', + 'cpt' => 'application/mac-compactpro', + 'bin' => 'application/macbinary', + 'doc' => 'application/msword', + 'word' => 'application/msword', + 'xlsx' => 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', + 'xltx' => 'application/vnd.openxmlformats-officedocument.spreadsheetml.template', + 'potx' => 'application/vnd.openxmlformats-officedocument.presentationml.template', + 'ppsx' => 'application/vnd.openxmlformats-officedocument.presentationml.slideshow', + 'pptx' => 'application/vnd.openxmlformats-officedocument.presentationml.presentation', + 'sldx' => 'application/vnd.openxmlformats-officedocument.presentationml.slide', + 'docx' => 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', + 'dotx' => 'application/vnd.openxmlformats-officedocument.wordprocessingml.template', + 'xlam' => 'application/vnd.ms-excel.addin.macroEnabled.12', + 'xlsb' => 'application/vnd.ms-excel.sheet.binary.macroEnabled.12', + 'class' => 'application/octet-stream', + 'dll' => 'application/octet-stream', + 'dms' => 'application/octet-stream', + 'exe' => 'application/octet-stream', + 'lha' => 'application/octet-stream', + 'lzh' => 'application/octet-stream', + 'psd' => 'application/octet-stream', + 'sea' => 'application/octet-stream', + 'so' => 'application/octet-stream', + 'oda' => 'application/oda', + 'pdf' => 'application/pdf', + 'ai' => 'application/postscript', + 'eps' => 'application/postscript', + 'ps' => 'application/postscript', + 'smi' => 'application/smil', + 'smil' => 'application/smil', + 'mif' => 'application/vnd.mif', + 'xls' => 'application/vnd.ms-excel', + 'ppt' => 'application/vnd.ms-powerpoint', + 'wbxml' => 'application/vnd.wap.wbxml', + 'wmlc' => 'application/vnd.wap.wmlc', + 'dcr' => 'application/x-director', + 'dir' => 'application/x-director', + 'dxr' => 'application/x-director', + 'dvi' => 'application/x-dvi', + 'gtar' => 'application/x-gtar', + 'php3' => 'application/x-httpd-php', + 'php4' => 'application/x-httpd-php', + 'php' => 'application/x-httpd-php', + 'phtml' => 'application/x-httpd-php', + 'phps' => 'application/x-httpd-php-source', + 'swf' => 'application/x-shockwave-flash', + 'sit' => 'application/x-stuffit', + 'tar' => 'application/x-tar', + 'tgz' => 'application/x-tar', + 'xht' => 'application/xhtml+xml', + 'xhtml' => 'application/xhtml+xml', + 'zip' => 'application/zip', + 'mid' => 'audio/midi', + 'midi' => 'audio/midi', + 'mp2' => 'audio/mpeg', + 'mp3' => 'audio/mpeg', + 'm4a' => 'audio/mp4', + 'mpga' => 'audio/mpeg', + 'aif' => 'audio/x-aiff', + 'aifc' => 'audio/x-aiff', + 'aiff' => 'audio/x-aiff', + 'ram' => 'audio/x-pn-realaudio', + 'rm' => 'audio/x-pn-realaudio', + 'rpm' => 'audio/x-pn-realaudio-plugin', + 'ra' => 'audio/x-realaudio', + 'wav' => 'audio/x-wav', + 'mka' => 'audio/x-matroska', + 'bmp' => 'image/bmp', + 'gif' => 'image/gif', + 'jpeg' => 'image/jpeg', + 'jpe' => 'image/jpeg', + 'jpg' => 'image/jpeg', + 'png' => 'image/png', + 'tiff' => 'image/tiff', + 'tif' => 'image/tiff', + 'webp' => 'image/webp', + 'avif' => 'image/avif', + 'heif' => 'image/heif', + 'heifs' => 'image/heif-sequence', + 'heic' => 'image/heic', + 'heics' => 'image/heic-sequence', + 'eml' => 'message/rfc822', + 'css' => 'text/css', + 'html' => 'text/html', + 'htm' => 'text/html', + 'shtml' => 'text/html', + 'log' => 'text/plain', + 'text' => 'text/plain', + 'txt' => 'text/plain', + 'rtx' => 'text/richtext', + 'rtf' => 'text/rtf', + 'vcf' => 'text/vcard', + 'vcard' => 'text/vcard', + 'ics' => 'text/calendar', + 'xml' => 'text/xml', + 'xsl' => 'text/xml', + 'wmv' => 'video/x-ms-wmv', + 'mpeg' => 'video/mpeg', + 'mpe' => 'video/mpeg', + 'mpg' => 'video/mpeg', + 'mp4' => 'video/mp4', + 'm4v' => 'video/mp4', + 'mov' => 'video/quicktime', + 'qt' => 'video/quicktime', + 'rv' => 'video/vnd.rn-realvideo', + 'avi' => 'video/x-msvideo', + 'movie' => 'video/x-sgi-movie', + 'webm' => 'video/webm', + 'mkv' => 'video/x-matroska', + ]; + $ext = strtolower($ext); + if (array_key_exists($ext, $mimes)) { + return $mimes[$ext]; + } + + return 'application/octet-stream'; + } + + /** + * Map a file name to a MIME type. + * Defaults to 'application/octet-stream', i.e.. arbitrary binary data. + * + * @param string $filename A file name or full path, does not need to exist as a file + * + * @return string + */ + public static function filenameToType($filename) + { + // In case the path is a URL, strip any query string before getting extension + $qpos = strpos($filename, '?'); + if (false !== $qpos) { + $filename = substr($filename, 0, $qpos); + } + $ext = static::mb_pathinfo($filename, PATHINFO_EXTENSION); + + return static::_mime_types($ext); + } + + /** + * Multi-byte-safe pathinfo replacement. + * Drop-in replacement for pathinfo(), but multibyte- and cross-platform-safe. + * + * @see http://www.php.net/manual/en/function.pathinfo.php#107461 + * + * @param string $path A filename or path, does not need to exist as a file + * @param int|string $options Either a PATHINFO_* constant, + * or a string name to return only the specified piece + * + * @return string|array + */ + public static function mb_pathinfo($path, $options = null) + { + $ret = ['dirname' => '', 'basename' => '', 'extension' => '', 'filename' => '']; + $pathinfo = []; + if (preg_match('#^(.*?)[\\\\/]*(([^/\\\\]*?)(\.([^.\\\\/]+?)|))[\\\\/.]*$#m', $path, $pathinfo)) { + if (array_key_exists(1, $pathinfo)) { + $ret['dirname'] = $pathinfo[1]; + } + if (array_key_exists(2, $pathinfo)) { + $ret['basename'] = $pathinfo[2]; + } + if (array_key_exists(5, $pathinfo)) { + $ret['extension'] = $pathinfo[5]; + } + if (array_key_exists(3, $pathinfo)) { + $ret['filename'] = $pathinfo[3]; + } + } + switch ($options) { + case PATHINFO_DIRNAME: + case 'dirname': + return $ret['dirname']; + case PATHINFO_BASENAME: + case 'basename': + return $ret['basename']; + case PATHINFO_EXTENSION: + case 'extension': + return $ret['extension']; + case PATHINFO_FILENAME: + case 'filename': + return $ret['filename']; + default: + return $ret; + } + } + + /** + * Set or reset instance properties. + * You should avoid this function - it's more verbose, less efficient, more error-prone and + * harder to debug than setting properties directly. + * Usage Example: + * `$mail->set('SMTPSecure', static::ENCRYPTION_STARTTLS);` + * is the same as: + * `$mail->SMTPSecure = static::ENCRYPTION_STARTTLS;`. + * + * @param string $name The property name to set + * @param mixed $value The value to set the property to + * + * @return bool + */ + public function set($name, $value = '') + { + if (property_exists($this, $name)) { + $this->$name = $value; + + return true; + } + $this->setError($this->lang('variable_set') . $name); + + return false; + } + + /** + * Strip newlines to prevent header injection. + * + * @param string $str + * + * @return string + */ + public function secureHeader($str) + { + return trim(str_replace(["\r", "\n"], '', $str)); + } + + /** + * Normalize line breaks in a string. + * Converts UNIX LF, Mac CR and Windows CRLF line breaks into a single line break format. + * Defaults to CRLF (for message bodies) and preserves consecutive breaks. + * + * @param string $text + * @param string $breaktype What kind of line break to use; defaults to static::$LE + * + * @return string + */ + public static function normalizeBreaks($text, $breaktype = null) + { + if (null === $breaktype) { + $breaktype = static::$LE; + } + // Normalise to \n + $text = str_replace([self::CRLF, "\r"], "\n", $text); + // Now convert LE as needed + if ("\n" !== $breaktype) { + $text = str_replace("\n", $breaktype, $text); + } + + return $text; + } + + /** + * Remove trailing breaks from a string. + * + * @param string $text + * + * @return string The text to remove breaks from + */ + public static function stripTrailingWSP($text) + { + return rtrim($text, " \r\n\t"); + } + + /** + * Return the current line break format string. + * + * @return string + */ + public static function getLE() + { + return static::$LE; + } + + /** + * Set the line break format string, e.g. "\r\n". + * + * @param string $le + */ + protected static function setLE($le) + { + static::$LE = $le; + } + + /** + * Set the public and private key files and password for S/MIME signing. + * + * @param string $cert_filename + * @param string $key_filename + * @param string $key_pass Password for private key + * @param string $extracerts_filename Optional path to chain certificate + */ + public function sign($cert_filename, $key_filename, $key_pass, $extracerts_filename = '') + { + $this->sign_cert_file = $cert_filename; + $this->sign_key_file = $key_filename; + $this->sign_key_pass = $key_pass; + $this->sign_extracerts_file = $extracerts_filename; + } + + /** + * Quoted-Printable-encode a DKIM header. + * + * @param string $txt + * + * @return string + */ + public function DKIM_QP($txt) + { + $line = ''; + $len = strlen($txt); + for ($i = 0; $i < $len; ++$i) { + $ord = ord($txt[$i]); + if (((0x21 <= $ord) && ($ord <= 0x3A)) || $ord === 0x3C || ((0x3E <= $ord) && ($ord <= 0x7E))) { + $line .= $txt[$i]; + } else { + $line .= '=' . sprintf('%02X', $ord); + } + } + + return $line; + } + + /** + * Generate a DKIM signature. + * + * @param string $signHeader + * + * @throws Exception + * + * @return string The DKIM signature value + */ + public function DKIM_Sign($signHeader) + { + if (!defined('PKCS7_TEXT')) { + if ($this->exceptions) { + throw new Exception($this->lang('extension_missing') . 'openssl'); + } + + return ''; + } + $privKeyStr = !empty($this->DKIM_private_string) ? + $this->DKIM_private_string : + file_get_contents($this->DKIM_private); + if ('' !== $this->DKIM_passphrase) { + $privKey = openssl_pkey_get_private($privKeyStr, $this->DKIM_passphrase); + } else { + $privKey = openssl_pkey_get_private($privKeyStr); + } + if (openssl_sign($signHeader, $signature, $privKey, 'sha256WithRSAEncryption')) { + if (PHP_MAJOR_VERSION < 8) { + openssl_pkey_free($privKey); + } + + return base64_encode($signature); + } + if (PHP_MAJOR_VERSION < 8) { + openssl_pkey_free($privKey); + } + + return ''; + } + + /** + * Generate a DKIM canonicalization header. + * Uses the 'relaxed' algorithm from RFC6376 section 3.4.2. + * Canonicalized headers should *always* use CRLF, regardless of mailer setting. + * + * @see https://tools.ietf.org/html/rfc6376#section-3.4.2 + * + * @param string $signHeader Header + * + * @return string + */ + public function DKIM_HeaderC($signHeader) + { + //Normalize breaks to CRLF (regardless of the mailer) + $signHeader = static::normalizeBreaks($signHeader, self::CRLF); + //Unfold header lines + //Note PCRE \s is too broad a definition of whitespace; RFC5322 defines it as `[ \t]` + //@see https://tools.ietf.org/html/rfc5322#section-2.2 + //That means this may break if you do something daft like put vertical tabs in your headers. + $signHeader = preg_replace('/\r\n[ \t]+/', ' ', $signHeader); + //Break headers out into an array + $lines = explode(self::CRLF, $signHeader); + foreach ($lines as $key => $line) { + //If the header is missing a :, skip it as it's invalid + //This is likely to happen because the explode() above will also split + //on the trailing LE, leaving an empty line + if (strpos($line, ':') === false) { + continue; + } + list($heading, $value) = explode(':', $line, 2); + //Lower-case header name + $heading = strtolower($heading); + //Collapse white space within the value, also convert WSP to space + $value = preg_replace('/[ \t]+/', ' ', $value); + //RFC6376 is slightly unclear here - it says to delete space at the *end* of each value + //But then says to delete space before and after the colon. + //Net result is the same as trimming both ends of the value. + //By elimination, the same applies to the field name + $lines[$key] = trim($heading, " \t") . ':' . trim($value, " \t"); + } + + return implode(self::CRLF, $lines); + } + + /** + * Generate a DKIM canonicalization body. + * Uses the 'simple' algorithm from RFC6376 section 3.4.3. + * Canonicalized bodies should *always* use CRLF, regardless of mailer setting. + * + * @see https://tools.ietf.org/html/rfc6376#section-3.4.3 + * + * @param string $body Message Body + * + * @return string + */ + public function DKIM_BodyC($body) + { + if (empty($body)) { + return self::CRLF; + } + // Normalize line endings to CRLF + $body = static::normalizeBreaks($body, self::CRLF); + + //Reduce multiple trailing line breaks to a single one + return static::stripTrailingWSP($body) . self::CRLF; + } + + /** + * Create the DKIM header and body in a new message header. + * + * @param string $headers_line Header lines + * @param string $subject Subject + * @param string $body Body + * + * @throws Exception + * + * @return string + */ + public function DKIM_Add($headers_line, $subject, $body) + { + $DKIMsignatureType = 'rsa-sha256'; // Signature & hash algorithms + $DKIMcanonicalization = 'relaxed/simple'; // Canonicalization methods of header & body + $DKIMquery = 'dns/txt'; // Query method + $DKIMtime = time(); + //Always sign these headers without being asked + //Recommended list from https://tools.ietf.org/html/rfc6376#section-5.4.1 + $autoSignHeaders = [ + 'from', + 'to', + 'cc', + 'date', + 'subject', + 'reply-to', + 'message-id', + 'content-type', + 'mime-version', + 'x-mailer', + ]; + if (stripos($headers_line, 'Subject') === false) { + $headers_line .= 'Subject: ' . $subject . static::$LE; + } + $headerLines = explode(static::$LE, $headers_line); + $currentHeaderLabel = ''; + $currentHeaderValue = ''; + $parsedHeaders = []; + $headerLineIndex = 0; + $headerLineCount = count($headerLines); + foreach ($headerLines as $headerLine) { + $matches = []; + if (preg_match('/^([^ \t]*?)(?::[ \t]*)(.*)$/', $headerLine, $matches)) { + if ($currentHeaderLabel !== '') { + //We were previously in another header; This is the start of a new header, so save the previous one + $parsedHeaders[] = ['label' => $currentHeaderLabel, 'value' => $currentHeaderValue]; + } + $currentHeaderLabel = $matches[1]; + $currentHeaderValue = $matches[2]; + } elseif (preg_match('/^[ \t]+(.*)$/', $headerLine, $matches)) { + //This is a folded continuation of the current header, so unfold it + $currentHeaderValue .= ' ' . $matches[1]; + } + ++$headerLineIndex; + if ($headerLineIndex >= $headerLineCount) { + //This was the last line, so finish off this header + $parsedHeaders[] = ['label' => $currentHeaderLabel, 'value' => $currentHeaderValue]; + } + } + $copiedHeaders = []; + $headersToSignKeys = []; + $headersToSign = []; + foreach ($parsedHeaders as $header) { + //Is this header one that must be included in the DKIM signature? + if (in_array(strtolower($header['label']), $autoSignHeaders, true)) { + $headersToSignKeys[] = $header['label']; + $headersToSign[] = $header['label'] . ': ' . $header['value']; + if ($this->DKIM_copyHeaderFields) { + $copiedHeaders[] = $header['label'] . ':' . //Note no space after this, as per RFC + str_replace('|', '=7C', $this->DKIM_QP($header['value'])); + } + continue; + } + //Is this an extra custom header we've been asked to sign? + if (in_array($header['label'], $this->DKIM_extraHeaders, true)) { + //Find its value in custom headers + foreach ($this->CustomHeader as $customHeader) { + if ($customHeader[0] === $header['label']) { + $headersToSignKeys[] = $header['label']; + $headersToSign[] = $header['label'] . ': ' . $header['value']; + if ($this->DKIM_copyHeaderFields) { + $copiedHeaders[] = $header['label'] . ':' . //Note no space after this, as per RFC + str_replace('|', '=7C', $this->DKIM_QP($header['value'])); + } + //Skip straight to the next header + continue 2; + } + } + } + } + $copiedHeaderFields = ''; + if ($this->DKIM_copyHeaderFields && count($copiedHeaders) > 0) { + //Assemble a DKIM 'z' tag + $copiedHeaderFields = ' z='; + $first = true; + foreach ($copiedHeaders as $copiedHeader) { + if (!$first) { + $copiedHeaderFields .= static::$LE . ' |'; + } + //Fold long values + if (strlen($copiedHeader) > self::STD_LINE_LENGTH - 3) { + $copiedHeaderFields .= substr( + chunk_split($copiedHeader, self::STD_LINE_LENGTH - 3, static::$LE . self::FWS), + 0, + -strlen(static::$LE . self::FWS) + ); + } else { + $copiedHeaderFields .= $copiedHeader; + } + $first = false; + } + $copiedHeaderFields .= ';' . static::$LE; + } + $headerKeys = ' h=' . implode(':', $headersToSignKeys) . ';' . static::$LE; + $headerValues = implode(static::$LE, $headersToSign); + $body = $this->DKIM_BodyC($body); + $DKIMb64 = base64_encode(pack('H*', hash('sha256', $body))); // Base64 of packed binary SHA-256 hash of body + $ident = ''; + if ('' !== $this->DKIM_identity) { + $ident = ' i=' . $this->DKIM_identity . ';' . static::$LE; + } + //The DKIM-Signature header is included in the signature *except for* the value of the `b` tag + //which is appended after calculating the signature + //https://tools.ietf.org/html/rfc6376#section-3.5 + $dkimSignatureHeader = 'DKIM-Signature: v=1;' . + ' d=' . $this->DKIM_domain . ';' . + ' s=' . $this->DKIM_selector . ';' . static::$LE . + ' a=' . $DKIMsignatureType . ';' . + ' q=' . $DKIMquery . ';' . + ' t=' . $DKIMtime . ';' . + ' c=' . $DKIMcanonicalization . ';' . static::$LE . + $headerKeys . + $ident . + $copiedHeaderFields . + ' bh=' . $DKIMb64 . ';' . static::$LE . + ' b='; + //Canonicalize the set of headers + $canonicalizedHeaders = $this->DKIM_HeaderC( + $headerValues . static::$LE . $dkimSignatureHeader + ); + $signature = $this->DKIM_Sign($canonicalizedHeaders); + $signature = trim(chunk_split($signature, self::STD_LINE_LENGTH - 3, static::$LE . self::FWS)); + + return static::normalizeBreaks($dkimSignatureHeader . $signature); + } + + /** + * Detect if a string contains a line longer than the maximum line length + * allowed by RFC 2822 section 2.1.1. + * + * @param string $str + * + * @return bool + */ + public static function hasLineLongerThanMax($str) + { + return (bool) preg_match('/^(.{' . (self::MAX_LINE_LENGTH + strlen(static::$LE)) . ',})/m', $str); + } + + /** + * If a string contains any "special" characters, double-quote the name, + * and escape any double quotes with a backslash. + * + * @param string $str + * + * @return string + * + * @see RFC822 3.4.1 + */ + public static function quotedString($str) + { + if (preg_match('/[ ()<>@,;:"\/\[\]?=]/', $str)) { + //If the string contains any of these chars, it must be double-quoted + //and any double quotes must be escaped with a backslash + return '"' . str_replace('"', '\\"', $str) . '"'; + } + + //Return the string untouched, it doesn't need quoting + return $str; + } + + /** + * Allows for public read access to 'to' property. + * Before the send() call, queued addresses (i.e. with IDN) are not yet included. + * + * @return array + */ + public function getToAddresses() + { + return $this->to; + } + + /** + * Allows for public read access to 'cc' property. + * Before the send() call, queued addresses (i.e. with IDN) are not yet included. + * + * @return array + */ + public function getCcAddresses() + { + return $this->cc; + } + + /** + * Allows for public read access to 'bcc' property. + * Before the send() call, queued addresses (i.e. with IDN) are not yet included. + * + * @return array + */ + public function getBccAddresses() + { + return $this->bcc; + } + + /** + * Allows for public read access to 'ReplyTo' property. + * Before the send() call, queued addresses (i.e. with IDN) are not yet included. + * + * @return array + */ + public function getReplyToAddresses() + { + return $this->ReplyTo; + } + + /** + * Allows for public read access to 'all_recipients' property. + * Before the send() call, queued addresses (i.e. with IDN) are not yet included. + * + * @return array + */ + public function getAllRecipientAddresses() + { + return $this->all_recipients; + } + + /** + * Perform a callback. + * + * @param bool $isSent + * @param array $to + * @param array $cc + * @param array $bcc + * @param string $subject + * @param string $body + * @param string $from + * @param array $extra + */ + protected function doCallback($isSent, $to, $cc, $bcc, $subject, $body, $from, $extra) + { + if (!empty($this->action_function) && is_callable($this->action_function)) { + call_user_func($this->action_function, $isSent, $to, $cc, $bcc, $subject, $body, $from, $extra); + } + } + + /** + * Get the OAuth instance. + * + * @return OAuth + */ + public function getOAuth() + { + return $this->oauth; + } + + /** + * Set an OAuth instance. + */ + public function setOAuth(OAuth $oauth) + { + $this->oauth = $oauth; + } +} diff --git a/vendor/phpmailer/phpmailer/src/POP3.php b/vendor/phpmailer/phpmailer/src/POP3.php new file mode 100644 index 000000000..235e6372d --- /dev/null +++ b/vendor/phpmailer/phpmailer/src/POP3.php @@ -0,0 +1,448 @@ + + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + * @copyright 2012 - 2020 Marcus Bointon + * @copyright 2010 - 2012 Jim Jagielski + * @copyright 2004 - 2009 Andy Prevost + * @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License + * @note This program is distributed in the hope that it will be useful - WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. + */ + +namespace PHPMailer\PHPMailer; + +/** + * PHPMailer POP-Before-SMTP Authentication Class. + * Specifically for PHPMailer to use for RFC1939 POP-before-SMTP authentication. + * 1) This class does not support APOP authentication. + * 2) Opening and closing lots of POP3 connections can be quite slow. If you need + * to send a batch of emails then just perform the authentication once at the start, + * and then loop through your mail sending script. Providing this process doesn't + * take longer than the verification period lasts on your POP3 server, you should be fine. + * 3) This is really ancient technology; you should only need to use it to talk to very old systems. + * 4) This POP3 class is deliberately lightweight and incomplete, implementing just + * enough to do authentication. + * If you want a more complete class there are other POP3 classes for PHP available. + * + * @author Richard Davey (original author) + * @author Marcus Bointon (Synchro/coolbru) + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + */ +class POP3 +{ + /** + * The POP3 PHPMailer Version number. + * + * @var string + */ + const VERSION = '6.2.0'; + + /** + * Default POP3 port number. + * + * @var int + */ + const DEFAULT_PORT = 110; + + /** + * Default timeout in seconds. + * + * @var int + */ + const DEFAULT_TIMEOUT = 30; + + /** + * POP3 class debug output mode. + * Debug output level. + * Options: + * @see POP3::DEBUG_OFF: No output + * @see POP3::DEBUG_SERVER: Server messages, connection/server errors + * @see POP3::DEBUG_CLIENT: Client and Server messages, connection/server errors + * + * @var int + */ + public $do_debug = self::DEBUG_OFF; + + /** + * POP3 mail server hostname. + * + * @var string + */ + public $host; + + /** + * POP3 port number. + * + * @var int + */ + public $port; + + /** + * POP3 Timeout Value in seconds. + * + * @var int + */ + public $tval; + + /** + * POP3 username. + * + * @var string + */ + public $username; + + /** + * POP3 password. + * + * @var string + */ + public $password; + + /** + * Resource handle for the POP3 connection socket. + * + * @var resource + */ + protected $pop_conn; + + /** + * Are we connected? + * + * @var bool + */ + protected $connected = false; + + /** + * Error container. + * + * @var array + */ + protected $errors = []; + + /** + * Line break constant. + */ + const LE = "\r\n"; + + /** + * Debug level for no output. + * + * @var int + */ + const DEBUG_OFF = 0; + + /** + * Debug level to show server -> client messages + * also shows clients connection errors or errors from server + * + * @var int + */ + const DEBUG_SERVER = 1; + + /** + * Debug level to show client -> server and server -> client messages. + * + * @var int + */ + const DEBUG_CLIENT = 2; + + /** + * Simple static wrapper for all-in-one POP before SMTP. + * + * @param string $host The hostname to connect to + * @param int|bool $port The port number to connect to + * @param int|bool $timeout The timeout value + * @param string $username + * @param string $password + * @param int $debug_level + * + * @return bool + */ + public static function popBeforeSmtp( + $host, + $port = false, + $timeout = false, + $username = '', + $password = '', + $debug_level = 0 + ) { + $pop = new self(); + + return $pop->authorise($host, $port, $timeout, $username, $password, $debug_level); + } + + /** + * Authenticate with a POP3 server. + * A connect, login, disconnect sequence + * appropriate for POP-before SMTP authorisation. + * + * @param string $host The hostname to connect to + * @param int|bool $port The port number to connect to + * @param int|bool $timeout The timeout value + * @param string $username + * @param string $password + * @param int $debug_level + * + * @return bool + */ + public function authorise($host, $port = false, $timeout = false, $username = '', $password = '', $debug_level = 0) + { + $this->host = $host; + // If no port value provided, use default + if (false === $port) { + $this->port = static::DEFAULT_PORT; + } else { + $this->port = (int) $port; + } + // If no timeout value provided, use default + if (false === $timeout) { + $this->tval = static::DEFAULT_TIMEOUT; + } else { + $this->tval = (int) $timeout; + } + $this->do_debug = $debug_level; + $this->username = $username; + $this->password = $password; + // Reset the error log + $this->errors = []; + // connect + $result = $this->connect($this->host, $this->port, $this->tval); + if ($result) { + $login_result = $this->login($this->username, $this->password); + if ($login_result) { + $this->disconnect(); + + return true; + } + } + // We need to disconnect regardless of whether the login succeeded + $this->disconnect(); + + return false; + } + + /** + * Connect to a POP3 server. + * + * @param string $host + * @param int|bool $port + * @param int $tval + * + * @return bool + */ + public function connect($host, $port = false, $tval = 30) + { + // Are we already connected? + if ($this->connected) { + return true; + } + + //On Windows this will raise a PHP Warning error if the hostname doesn't exist. + //Rather than suppress it with @fsockopen, capture it cleanly instead + set_error_handler([$this, 'catchWarning']); + + if (false === $port) { + $port = static::DEFAULT_PORT; + } + + // connect to the POP3 server + $errno = 0; + $errstr = ''; + $this->pop_conn = fsockopen( + $host, // POP3 Host + $port, // Port # + $errno, // Error Number + $errstr, // Error Message + $tval + ); // Timeout (seconds) + // Restore the error handler + restore_error_handler(); + + // Did we connect? + if (false === $this->pop_conn) { + // It would appear not... + $this->setError( + "Failed to connect to server $host on port $port. errno: $errno; errstr: $errstr" + ); + + return false; + } + + // Increase the stream time-out + stream_set_timeout($this->pop_conn, $tval, 0); + + // Get the POP3 server response + $pop3_response = $this->getResponse(); + // Check for the +OK + if ($this->checkResponse($pop3_response)) { + // The connection is established and the POP3 server is talking + $this->connected = true; + + return true; + } + + return false; + } + + /** + * Log in to the POP3 server. + * Does not support APOP (RFC 2828, 4949). + * + * @param string $username + * @param string $password + * + * @return bool + */ + public function login($username = '', $password = '') + { + if (!$this->connected) { + $this->setError('Not connected to POP3 server'); + } + if (empty($username)) { + $username = $this->username; + } + if (empty($password)) { + $password = $this->password; + } + + // Send the Username + $this->sendString("USER $username" . static::LE); + $pop3_response = $this->getResponse(); + if ($this->checkResponse($pop3_response)) { + // Send the Password + $this->sendString("PASS $password" . static::LE); + $pop3_response = $this->getResponse(); + if ($this->checkResponse($pop3_response)) { + return true; + } + } + + return false; + } + + /** + * Disconnect from the POP3 server. + */ + public function disconnect() + { + $this->sendString('QUIT'); + //The QUIT command may cause the daemon to exit, which will kill our connection + //So ignore errors here + try { + @fclose($this->pop_conn); + } catch (Exception $e) { + //Do nothing + } + } + + /** + * Get a response from the POP3 server. + * + * @param int $size The maximum number of bytes to retrieve + * + * @return string + */ + protected function getResponse($size = 128) + { + $response = fgets($this->pop_conn, $size); + if ($this->do_debug >= self::DEBUG_SERVER) { + echo 'Server -> Client: ', $response; + } + + return $response; + } + + /** + * Send raw data to the POP3 server. + * + * @param string $string + * + * @return int + */ + protected function sendString($string) + { + if ($this->pop_conn) { + if ($this->do_debug >= self::DEBUG_CLIENT) { //Show client messages when debug >= 2 + echo 'Client -> Server: ', $string; + } + + return fwrite($this->pop_conn, $string, strlen($string)); + } + + return 0; + } + + /** + * Checks the POP3 server response. + * Looks for for +OK or -ERR. + * + * @param string $string + * + * @return bool + */ + protected function checkResponse($string) + { + if (strpos($string, '+OK') !== 0) { + $this->setError("Server reported an error: $string"); + + return false; + } + + return true; + } + + /** + * Add an error to the internal error store. + * Also display debug output if it's enabled. + * + * @param string $error + */ + protected function setError($error) + { + $this->errors[] = $error; + if ($this->do_debug >= self::DEBUG_SERVER) { + echo '
';
+            foreach ($this->errors as $e) {
+                print_r($e);
+            }
+            echo '
'; + } + } + + /** + * Get an array of error messages, if any. + * + * @return array + */ + public function getErrors() + { + return $this->errors; + } + + /** + * POP3 connection error handler. + * + * @param int $errno + * @param string $errstr + * @param string $errfile + * @param int $errline + */ + protected function catchWarning($errno, $errstr, $errfile, $errline) + { + $this->setError( + 'Connecting to the POP3 server raised a PHP warning:' . + "errno: $errno errstr: $errstr; errfile: $errfile; errline: $errline" + ); + } +} diff --git a/vendor/phpmailer/phpmailer/src/SMTP.php b/vendor/phpmailer/phpmailer/src/SMTP.php new file mode 100644 index 000000000..ab7f46e4c --- /dev/null +++ b/vendor/phpmailer/phpmailer/src/SMTP.php @@ -0,0 +1,1431 @@ + + * @author Jim Jagielski (jimjag) + * @author Andy Prevost (codeworxtech) + * @author Brent R. Matzelle (original founder) + * @copyright 2012 - 2020 Marcus Bointon + * @copyright 2010 - 2012 Jim Jagielski + * @copyright 2004 - 2009 Andy Prevost + * @license http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License + * @note This program is distributed in the hope that it will be useful - WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE. + */ + +namespace PHPMailer\PHPMailer; + +/** + * PHPMailer RFC821 SMTP email transport class. + * Implements RFC 821 SMTP commands and provides some utility methods for sending mail to an SMTP server. + * + * @author Chris Ryan + * @author Marcus Bointon + */ +class SMTP +{ + /** + * The PHPMailer SMTP version number. + * + * @var string + */ + const VERSION = '6.2.0'; + + /** + * SMTP line break constant. + * + * @var string + */ + const LE = "\r\n"; + + /** + * The SMTP port to use if one is not specified. + * + * @var int + */ + const DEFAULT_PORT = 25; + + /** + * The maximum line length allowed by RFC 5321 section 4.5.3.1.6, + * *excluding* a trailing CRLF break. + * + * @see https://tools.ietf.org/html/rfc5321#section-4.5.3.1.6 + * + * @var int + */ + const MAX_LINE_LENGTH = 998; + + /** + * The maximum line length allowed for replies in RFC 5321 section 4.5.3.1.5, + * *including* a trailing CRLF line break. + * + * @see https://tools.ietf.org/html/rfc5321#section-4.5.3.1.5 + * + * @var int + */ + const MAX_REPLY_LENGTH = 512; + + /** + * Debug level for no output. + * + * @var int + */ + const DEBUG_OFF = 0; + + /** + * Debug level to show client -> server messages. + * + * @var int + */ + const DEBUG_CLIENT = 1; + + /** + * Debug level to show client -> server and server -> client messages. + * + * @var int + */ + const DEBUG_SERVER = 2; + + /** + * Debug level to show connection status, client -> server and server -> client messages. + * + * @var int + */ + const DEBUG_CONNECTION = 3; + + /** + * Debug level to show all messages. + * + * @var int + */ + const DEBUG_LOWLEVEL = 4; + + /** + * Debug output level. + * Options: + * * self::DEBUG_OFF (`0`) No debug output, default + * * self::DEBUG_CLIENT (`1`) Client commands + * * self::DEBUG_SERVER (`2`) Client commands and server responses + * * self::DEBUG_CONNECTION (`3`) As DEBUG_SERVER plus connection status + * * self::DEBUG_LOWLEVEL (`4`) Low-level data output, all messages. + * + * @var int + */ + public $do_debug = self::DEBUG_OFF; + + /** + * How to handle debug output. + * Options: + * * `echo` Output plain-text as-is, appropriate for CLI + * * `html` Output escaped, line breaks converted to `
`, appropriate for browser output + * * `error_log` Output to error log as configured in php.ini + * Alternatively, you can provide a callable expecting two params: a message string and the debug level: + * + * ```php + * $smtp->Debugoutput = function($str, $level) {echo "debug level $level; message: $str";}; + * ``` + * + * Alternatively, you can pass in an instance of a PSR-3 compatible logger, though only `debug` + * level output is used: + * + * ```php + * $mail->Debugoutput = new myPsr3Logger; + * ``` + * + * @var string|callable|\Psr\Log\LoggerInterface + */ + public $Debugoutput = 'echo'; + + /** + * Whether to use VERP. + * + * @see http://en.wikipedia.org/wiki/Variable_envelope_return_path + * @see http://www.postfix.org/VERP_README.html Info on VERP + * + * @var bool + */ + public $do_verp = false; + + /** + * The timeout value for connection, in seconds. + * Default of 5 minutes (300sec) is from RFC2821 section 4.5.3.2. + * This needs to be quite high to function correctly with hosts using greetdelay as an anti-spam measure. + * + * @see http://tools.ietf.org/html/rfc2821#section-4.5.3.2 + * + * @var int + */ + public $Timeout = 300; + + /** + * How long to wait for commands to complete, in seconds. + * Default of 5 minutes (300sec) is from RFC2821 section 4.5.3.2. + * + * @var int + */ + public $Timelimit = 300; + + /** + * Patterns to extract an SMTP transaction id from reply to a DATA command. + * The first capture group in each regex will be used as the ID. + * MS ESMTP returns the message ID, which may not be correct for internal tracking. + * + * @var string[] + */ + protected $smtp_transaction_id_patterns = [ + 'exim' => '/[\d]{3} OK id=(.*)/', + 'sendmail' => '/[\d]{3} 2.0.0 (.*) Message/', + 'postfix' => '/[\d]{3} 2.0.0 Ok: queued as (.*)/', + 'Microsoft_ESMTP' => '/[0-9]{3} 2.[\d].0 (.*)@(?:.*) Queued mail for delivery/', + 'Amazon_SES' => '/[\d]{3} Ok (.*)/', + 'SendGrid' => '/[\d]{3} Ok: queued as (.*)/', + 'CampaignMonitor' => '/[\d]{3} 2.0.0 OK:([a-zA-Z\d]{48})/', + ]; + + /** + * The last transaction ID issued in response to a DATA command, + * if one was detected. + * + * @var string|bool|null + */ + protected $last_smtp_transaction_id; + + /** + * The socket for the server connection. + * + * @var ?resource + */ + protected $smtp_conn; + + /** + * Error information, if any, for the last SMTP command. + * + * @var array + */ + protected $error = [ + 'error' => '', + 'detail' => '', + 'smtp_code' => '', + 'smtp_code_ex' => '', + ]; + + /** + * The reply the server sent to us for HELO. + * If null, no HELO string has yet been received. + * + * @var string|null + */ + protected $helo_rply; + + /** + * The set of SMTP extensions sent in reply to EHLO command. + * Indexes of the array are extension names. + * Value at index 'HELO' or 'EHLO' (according to command that was sent) + * represents the server name. In case of HELO it is the only element of the array. + * Other values can be boolean TRUE or an array containing extension options. + * If null, no HELO/EHLO string has yet been received. + * + * @var array|null + */ + protected $server_caps; + + /** + * The most recent reply received from the server. + * + * @var string + */ + protected $last_reply = ''; + + /** + * Output debugging info via a user-selected method. + * + * @param string $str Debug string to output + * @param int $level The debug level of this message; see DEBUG_* constants + * + * @see SMTP::$Debugoutput + * @see SMTP::$do_debug + */ + protected function edebug($str, $level = 0) + { + if ($level > $this->do_debug) { + return; + } + //Is this a PSR-3 logger? + if ($this->Debugoutput instanceof \Psr\Log\LoggerInterface) { + $this->Debugoutput->debug($str); + + return; + } + //Avoid clash with built-in function names + if (is_callable($this->Debugoutput) && !in_array($this->Debugoutput, ['error_log', 'html', 'echo'])) { + call_user_func($this->Debugoutput, $str, $level); + + return; + } + switch ($this->Debugoutput) { + case 'error_log': + //Don't output, just log + error_log($str); + break; + case 'html': + //Cleans up output a bit for a better looking, HTML-safe output + echo gmdate('Y-m-d H:i:s'), ' ', htmlentities( + preg_replace('/[\r\n]+/', '', $str), + ENT_QUOTES, + 'UTF-8' + ), "
\n"; + break; + case 'echo': + default: + //Normalize line breaks + $str = preg_replace('/\r\n|\r/m', "\n", $str); + echo gmdate('Y-m-d H:i:s'), + "\t", + //Trim trailing space + trim( + //Indent for readability, except for trailing break + str_replace( + "\n", + "\n \t ", + trim($str) + ) + ), + "\n"; + } + } + + /** + * Connect to an SMTP server. + * + * @param string $host SMTP server IP or host name + * @param int $port The port number to connect to + * @param int $timeout How long to wait for the connection to open + * @param array $options An array of options for stream_context_create() + * + * @return bool + */ + public function connect($host, $port = null, $timeout = 30, $options = []) + { + // Clear errors to avoid confusion + $this->setError(''); + // Make sure we are __not__ connected + if ($this->connected()) { + // Already connected, generate error + $this->setError('Already connected to a server'); + + return false; + } + if (empty($port)) { + $port = self::DEFAULT_PORT; + } + // Connect to the SMTP server + $this->edebug( + "Connection: opening to $host:$port, timeout=$timeout, options=" . + (count($options) > 0 ? var_export($options, true) : 'array()'), + self::DEBUG_CONNECTION + ); + + $this->smtp_conn = $this->getSMTPConnection($host, $port, $timeout, $options); + + if ($this->smtp_conn === false) { + //Error info already set inside `getSMTPConnection()` + return false; + } + + $this->edebug('Connection: opened', self::DEBUG_CONNECTION); + + // Get any announcement + $this->last_reply = $this->get_lines(); + $this->edebug('SERVER -> CLIENT: ' . $this->last_reply, self::DEBUG_SERVER); + + return true; + } + + /** + * Create connection to the SMTP server. + * + * @param string $host SMTP server IP or host name + * @param int $port The port number to connect to + * @param int $timeout How long to wait for the connection to open + * @param array $options An array of options for stream_context_create() + * + * @return false|resource + */ + protected function getSMTPConnection($host, $port = null, $timeout = 30, $options = []) + { + static $streamok; + //This is enabled by default since 5.0.0 but some providers disable it + //Check this once and cache the result + if (null === $streamok) { + $streamok = function_exists('stream_socket_client'); + } + + $errno = 0; + $errstr = ''; + if ($streamok) { + $socket_context = stream_context_create($options); + set_error_handler([$this, 'errorHandler']); + $connection = stream_socket_client( + $host . ':' . $port, + $errno, + $errstr, + $timeout, + STREAM_CLIENT_CONNECT, + $socket_context + ); + restore_error_handler(); + } else { + //Fall back to fsockopen which should work in more places, but is missing some features + $this->edebug( + 'Connection: stream_socket_client not available, falling back to fsockopen', + self::DEBUG_CONNECTION + ); + set_error_handler([$this, 'errorHandler']); + $connection = fsockopen( + $host, + $port, + $errno, + $errstr, + $timeout + ); + restore_error_handler(); + } + + // Verify we connected properly + if (!is_resource($connection)) { + $this->setError( + 'Failed to connect to server', + '', + (string) $errno, + $errstr + ); + $this->edebug( + 'SMTP ERROR: ' . $this->error['error'] + . ": $errstr ($errno)", + self::DEBUG_CLIENT + ); + + return false; + } + + // SMTP server can take longer to respond, give longer timeout for first read + // Windows does not have support for this timeout function + if (strpos(PHP_OS, 'WIN') !== 0) { + $max = (int)ini_get('max_execution_time'); + // Don't bother if unlimited, or if set_time_limit is disabled + if (0 !== $max && $timeout > $max && strpos(ini_get('disable_functions'), 'set_time_limit') === false) { + @set_time_limit($timeout); + } + stream_set_timeout($connection, $timeout, 0); + } + + return $connection; + } + + /** + * Initiate a TLS (encrypted) session. + * + * @return bool + */ + public function startTLS() + { + if (!$this->sendCommand('STARTTLS', 'STARTTLS', 220)) { + return false; + } + + //Allow the best TLS version(s) we can + $crypto_method = STREAM_CRYPTO_METHOD_TLS_CLIENT; + + //PHP 5.6.7 dropped inclusion of TLS 1.1 and 1.2 in STREAM_CRYPTO_METHOD_TLS_CLIENT + //so add them back in manually if we can + if (defined('STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT')) { + $crypto_method |= STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT; + $crypto_method |= STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT; + } + + // Begin encrypted connection + set_error_handler([$this, 'errorHandler']); + $crypto_ok = stream_socket_enable_crypto( + $this->smtp_conn, + true, + $crypto_method + ); + restore_error_handler(); + + return (bool) $crypto_ok; + } + + /** + * Perform SMTP authentication. + * Must be run after hello(). + * + * @see hello() + * + * @param string $username The user name + * @param string $password The password + * @param string $authtype The auth type (CRAM-MD5, PLAIN, LOGIN, XOAUTH2) + * @param OAuth $OAuth An optional OAuth instance for XOAUTH2 authentication + * + * @return bool True if successfully authenticated + */ + public function authenticate( + $username, + $password, + $authtype = null, + $OAuth = null + ) { + if (!$this->server_caps) { + $this->setError('Authentication is not allowed before HELO/EHLO'); + + return false; + } + + if (array_key_exists('EHLO', $this->server_caps)) { + // SMTP extensions are available; try to find a proper authentication method + if (!array_key_exists('AUTH', $this->server_caps)) { + $this->setError('Authentication is not allowed at this stage'); + // 'at this stage' means that auth may be allowed after the stage changes + // e.g. after STARTTLS + + return false; + } + + $this->edebug('Auth method requested: ' . ($authtype ?: 'UNSPECIFIED'), self::DEBUG_LOWLEVEL); + $this->edebug( + 'Auth methods available on the server: ' . implode(',', $this->server_caps['AUTH']), + self::DEBUG_LOWLEVEL + ); + + //If we have requested a specific auth type, check the server supports it before trying others + if (null !== $authtype && !in_array($authtype, $this->server_caps['AUTH'], true)) { + $this->edebug('Requested auth method not available: ' . $authtype, self::DEBUG_LOWLEVEL); + $authtype = null; + } + + if (empty($authtype)) { + //If no auth mechanism is specified, attempt to use these, in this order + //Try CRAM-MD5 first as it's more secure than the others + foreach (['CRAM-MD5', 'LOGIN', 'PLAIN', 'XOAUTH2'] as $method) { + if (in_array($method, $this->server_caps['AUTH'], true)) { + $authtype = $method; + break; + } + } + if (empty($authtype)) { + $this->setError('No supported authentication methods found'); + + return false; + } + $this->edebug('Auth method selected: ' . $authtype, self::DEBUG_LOWLEVEL); + } + + if (!in_array($authtype, $this->server_caps['AUTH'], true)) { + $this->setError("The requested authentication method \"$authtype\" is not supported by the server"); + + return false; + } + } elseif (empty($authtype)) { + $authtype = 'LOGIN'; + } + switch ($authtype) { + case 'PLAIN': + // Start authentication + if (!$this->sendCommand('AUTH', 'AUTH PLAIN', 334)) { + return false; + } + // Send encoded username and password + if ( + !$this->sendCommand( + 'User & Password', + base64_encode("\0" . $username . "\0" . $password), + 235 + ) + ) { + return false; + } + break; + case 'LOGIN': + // Start authentication + if (!$this->sendCommand('AUTH', 'AUTH LOGIN', 334)) { + return false; + } + if (!$this->sendCommand('Username', base64_encode($username), 334)) { + return false; + } + if (!$this->sendCommand('Password', base64_encode($password), 235)) { + return false; + } + break; + case 'CRAM-MD5': + // Start authentication + if (!$this->sendCommand('AUTH CRAM-MD5', 'AUTH CRAM-MD5', 334)) { + return false; + } + // Get the challenge + $challenge = base64_decode(substr($this->last_reply, 4)); + + // Build the response + $response = $username . ' ' . $this->hmac($challenge, $password); + + // send encoded credentials + return $this->sendCommand('Username', base64_encode($response), 235); + case 'XOAUTH2': + //The OAuth instance must be set up prior to requesting auth. + if (null === $OAuth) { + return false; + } + $oauth = $OAuth->getOauth64(); + + // Start authentication + if (!$this->sendCommand('AUTH', 'AUTH XOAUTH2 ' . $oauth, 235)) { + return false; + } + break; + default: + $this->setError("Authentication method \"$authtype\" is not supported"); + + return false; + } + + return true; + } + + /** + * Calculate an MD5 HMAC hash. + * Works like hash_hmac('md5', $data, $key) + * in case that function is not available. + * + * @param string $data The data to hash + * @param string $key The key to hash with + * + * @return string + */ + protected function hmac($data, $key) + { + if (function_exists('hash_hmac')) { + return hash_hmac('md5', $data, $key); + } + + // The following borrowed from + // http://php.net/manual/en/function.mhash.php#27225 + + // RFC 2104 HMAC implementation for php. + // Creates an md5 HMAC. + // Eliminates the need to install mhash to compute a HMAC + // by Lance Rushing + + $bytelen = 64; // byte length for md5 + if (strlen($key) > $bytelen) { + $key = pack('H*', md5($key)); + } + $key = str_pad($key, $bytelen, chr(0x00)); + $ipad = str_pad('', $bytelen, chr(0x36)); + $opad = str_pad('', $bytelen, chr(0x5c)); + $k_ipad = $key ^ $ipad; + $k_opad = $key ^ $opad; + + return md5($k_opad . pack('H*', md5($k_ipad . $data))); + } + + /** + * Check connection state. + * + * @return bool True if connected + */ + public function connected() + { + if (is_resource($this->smtp_conn)) { + $sock_status = stream_get_meta_data($this->smtp_conn); + if ($sock_status['eof']) { + // The socket is valid but we are not connected + $this->edebug( + 'SMTP NOTICE: EOF caught while checking if connected', + self::DEBUG_CLIENT + ); + $this->close(); + + return false; + } + + return true; // everything looks good + } + + return false; + } + + /** + * Close the socket and clean up the state of the class. + * Don't use this function without first trying to use QUIT. + * + * @see quit() + */ + public function close() + { + $this->setError(''); + $this->server_caps = null; + $this->helo_rply = null; + if (is_resource($this->smtp_conn)) { + // close the connection and cleanup + fclose($this->smtp_conn); + $this->smtp_conn = null; //Makes for cleaner serialization + $this->edebug('Connection: closed', self::DEBUG_CONNECTION); + } + } + + /** + * Send an SMTP DATA command. + * Issues a data command and sends the msg_data to the server, + * finializing the mail transaction. $msg_data is the message + * that is to be send with the headers. Each header needs to be + * on a single line followed by a with the message headers + * and the message body being separated by an additional . + * Implements RFC 821: DATA . + * + * @param string $msg_data Message data to send + * + * @return bool + */ + public function data($msg_data) + { + //This will use the standard timelimit + if (!$this->sendCommand('DATA', 'DATA', 354)) { + return false; + } + + /* The server is ready to accept data! + * According to rfc821 we should not send more than 1000 characters on a single line (including the LE) + * so we will break the data up into lines by \r and/or \n then if needed we will break each of those into + * smaller lines to fit within the limit. + * We will also look for lines that start with a '.' and prepend an additional '.'. + * NOTE: this does not count towards line-length limit. + */ + + // Normalize line breaks before exploding + $lines = explode("\n", str_replace(["\r\n", "\r"], "\n", $msg_data)); + + /* To distinguish between a complete RFC822 message and a plain message body, we check if the first field + * of the first line (':' separated) does not contain a space then it _should_ be a header and we will + * process all lines before a blank line as headers. + */ + + $field = substr($lines[0], 0, strpos($lines[0], ':')); + $in_headers = false; + if (!empty($field) && strpos($field, ' ') === false) { + $in_headers = true; + } + + foreach ($lines as $line) { + $lines_out = []; + if ($in_headers && $line === '') { + $in_headers = false; + } + //Break this line up into several smaller lines if it's too long + //Micro-optimisation: isset($str[$len]) is faster than (strlen($str) > $len), + while (isset($line[self::MAX_LINE_LENGTH])) { + //Working backwards, try to find a space within the last MAX_LINE_LENGTH chars of the line to break on + //so as to avoid breaking in the middle of a word + $pos = strrpos(substr($line, 0, self::MAX_LINE_LENGTH), ' '); + //Deliberately matches both false and 0 + if (!$pos) { + //No nice break found, add a hard break + $pos = self::MAX_LINE_LENGTH - 1; + $lines_out[] = substr($line, 0, $pos); + $line = substr($line, $pos); + } else { + //Break at the found point + $lines_out[] = substr($line, 0, $pos); + //Move along by the amount we dealt with + $line = substr($line, $pos + 1); + } + //If processing headers add a LWSP-char to the front of new line RFC822 section 3.1.1 + if ($in_headers) { + $line = "\t" . $line; + } + } + $lines_out[] = $line; + + //Send the lines to the server + foreach ($lines_out as $line_out) { + //RFC2821 section 4.5.2 + if (!empty($line_out) && $line_out[0] === '.') { + $line_out = '.' . $line_out; + } + $this->client_send($line_out . static::LE, 'DATA'); + } + } + + //Message data has been sent, complete the command + //Increase timelimit for end of DATA command + $savetimelimit = $this->Timelimit; + $this->Timelimit *= 2; + $result = $this->sendCommand('DATA END', '.', 250); + $this->recordLastTransactionID(); + //Restore timelimit + $this->Timelimit = $savetimelimit; + + return $result; + } + + /** + * Send an SMTP HELO or EHLO command. + * Used to identify the sending server to the receiving server. + * This makes sure that client and server are in a known state. + * Implements RFC 821: HELO + * and RFC 2821 EHLO. + * + * @param string $host The host name or IP to connect to + * + * @return bool + */ + public function hello($host = '') + { + //Try extended hello first (RFC 2821) + return $this->sendHello('EHLO', $host) or $this->sendHello('HELO', $host); + } + + /** + * Send an SMTP HELO or EHLO command. + * Low-level implementation used by hello(). + * + * @param string $hello The HELO string + * @param string $host The hostname to say we are + * + * @return bool + * + * @see hello() + */ + protected function sendHello($hello, $host) + { + $noerror = $this->sendCommand($hello, $hello . ' ' . $host, 250); + $this->helo_rply = $this->last_reply; + if ($noerror) { + $this->parseHelloFields($hello); + } else { + $this->server_caps = null; + } + + return $noerror; + } + + /** + * Parse a reply to HELO/EHLO command to discover server extensions. + * In case of HELO, the only parameter that can be discovered is a server name. + * + * @param string $type `HELO` or `EHLO` + */ + protected function parseHelloFields($type) + { + $this->server_caps = []; + $lines = explode("\n", $this->helo_rply); + + foreach ($lines as $n => $s) { + //First 4 chars contain response code followed by - or space + $s = trim(substr($s, 4)); + if (empty($s)) { + continue; + } + $fields = explode(' ', $s); + if (!empty($fields)) { + if (!$n) { + $name = $type; + $fields = $fields[0]; + } else { + $name = array_shift($fields); + switch ($name) { + case 'SIZE': + $fields = ($fields ? $fields[0] : 0); + break; + case 'AUTH': + if (!is_array($fields)) { + $fields = []; + } + break; + default: + $fields = true; + } + } + $this->server_caps[$name] = $fields; + } + } + } + + /** + * Send an SMTP MAIL command. + * Starts a mail transaction from the email address specified in + * $from. Returns true if successful or false otherwise. If True + * the mail transaction is started and then one or more recipient + * commands may be called followed by a data command. + * Implements RFC 821: MAIL FROM: . + * + * @param string $from Source address of this message + * + * @return bool + */ + public function mail($from) + { + $useVerp = ($this->do_verp ? ' XVERP' : ''); + + return $this->sendCommand( + 'MAIL FROM', + 'MAIL FROM:<' . $from . '>' . $useVerp, + 250 + ); + } + + /** + * Send an SMTP QUIT command. + * Closes the socket if there is no error or the $close_on_error argument is true. + * Implements from RFC 821: QUIT . + * + * @param bool $close_on_error Should the connection close if an error occurs? + * + * @return bool + */ + public function quit($close_on_error = true) + { + $noerror = $this->sendCommand('QUIT', 'QUIT', 221); + $err = $this->error; //Save any error + if ($noerror || $close_on_error) { + $this->close(); + $this->error = $err; //Restore any error from the quit command + } + + return $noerror; + } + + /** + * Send an SMTP RCPT command. + * Sets the TO argument to $toaddr. + * Returns true if the recipient was accepted false if it was rejected. + * Implements from RFC 821: RCPT TO: . + * + * @param string $address The address the message is being sent to + * @param string $dsn Comma separated list of DSN notifications. NEVER, SUCCESS, FAILURE + * or DELAY. If you specify NEVER all other notifications are ignored. + * + * @return bool + */ + public function recipient($address, $dsn = '') + { + if (empty($dsn)) { + $rcpt = 'RCPT TO:<' . $address . '>'; + } else { + $dsn = strtoupper($dsn); + $notify = []; + + if (strpos($dsn, 'NEVER') !== false) { + $notify[] = 'NEVER'; + } else { + foreach (['SUCCESS', 'FAILURE', 'DELAY'] as $value) { + if (strpos($dsn, $value) !== false) { + $notify[] = $value; + } + } + } + + $rcpt = 'RCPT TO:<' . $address . '> NOTIFY=' . implode(',', $notify); + } + + return $this->sendCommand( + 'RCPT TO', + $rcpt, + [250, 251] + ); + } + + /** + * Send an SMTP RSET command. + * Abort any transaction that is currently in progress. + * Implements RFC 821: RSET . + * + * @return bool True on success + */ + public function reset() + { + return $this->sendCommand('RSET', 'RSET', 250); + } + + /** + * Send a command to an SMTP server and check its return code. + * + * @param string $command The command name - not sent to the server + * @param string $commandstring The actual command to send + * @param int|array $expect One or more expected integer success codes + * + * @return bool True on success + */ + protected function sendCommand($command, $commandstring, $expect) + { + if (!$this->connected()) { + $this->setError("Called $command without being connected"); + + return false; + } + //Reject line breaks in all commands + if ((strpos($commandstring, "\n") !== false) || (strpos($commandstring, "\r") !== false)) { + $this->setError("Command '$command' contained line breaks"); + + return false; + } + $this->client_send($commandstring . static::LE, $command); + + $this->last_reply = $this->get_lines(); + // Fetch SMTP code and possible error code explanation + $matches = []; + if (preg_match('/^([\d]{3})[ -](?:([\d]\\.[\d]\\.[\d]{1,2}) )?/', $this->last_reply, $matches)) { + $code = (int) $matches[1]; + $code_ex = (count($matches) > 2 ? $matches[2] : null); + // Cut off error code from each response line + $detail = preg_replace( + "/{$code}[ -]" . + ($code_ex ? str_replace('.', '\\.', $code_ex) . ' ' : '') . '/m', + '', + $this->last_reply + ); + } else { + // Fall back to simple parsing if regex fails + $code = (int) substr($this->last_reply, 0, 3); + $code_ex = null; + $detail = substr($this->last_reply, 4); + } + + $this->edebug('SERVER -> CLIENT: ' . $this->last_reply, self::DEBUG_SERVER); + + if (!in_array($code, (array) $expect, true)) { + $this->setError( + "$command command failed", + $detail, + $code, + $code_ex + ); + $this->edebug( + 'SMTP ERROR: ' . $this->error['error'] . ': ' . $this->last_reply, + self::DEBUG_CLIENT + ); + + return false; + } + + $this->setError(''); + + return true; + } + + /** + * Send an SMTP SAML command. + * Starts a mail transaction from the email address specified in $from. + * Returns true if successful or false otherwise. If True + * the mail transaction is started and then one or more recipient + * commands may be called followed by a data command. This command + * will send the message to the users terminal if they are logged + * in and send them an email. + * Implements RFC 821: SAML FROM: . + * + * @param string $from The address the message is from + * + * @return bool + */ + public function sendAndMail($from) + { + return $this->sendCommand('SAML', "SAML FROM:$from", 250); + } + + /** + * Send an SMTP VRFY command. + * + * @param string $name The name to verify + * + * @return bool + */ + public function verify($name) + { + return $this->sendCommand('VRFY', "VRFY $name", [250, 251]); + } + + /** + * Send an SMTP NOOP command. + * Used to keep keep-alives alive, doesn't actually do anything. + * + * @return bool + */ + public function noop() + { + return $this->sendCommand('NOOP', 'NOOP', 250); + } + + /** + * Send an SMTP TURN command. + * This is an optional command for SMTP that this class does not support. + * This method is here to make the RFC821 Definition complete for this class + * and _may_ be implemented in future. + * Implements from RFC 821: TURN . + * + * @return bool + */ + public function turn() + { + $this->setError('The SMTP TURN command is not implemented'); + $this->edebug('SMTP NOTICE: ' . $this->error['error'], self::DEBUG_CLIENT); + + return false; + } + + /** + * Send raw data to the server. + * + * @param string $data The data to send + * @param string $command Optionally, the command this is part of, used only for controlling debug output + * + * @return int|bool The number of bytes sent to the server or false on error + */ + public function client_send($data, $command = '') + { + //If SMTP transcripts are left enabled, or debug output is posted online + //it can leak credentials, so hide credentials in all but lowest level + if ( + self::DEBUG_LOWLEVEL > $this->do_debug && + in_array($command, ['User & Password', 'Username', 'Password'], true) + ) { + $this->edebug('CLIENT -> SERVER: [credentials hidden]', self::DEBUG_CLIENT); + } else { + $this->edebug('CLIENT -> SERVER: ' . $data, self::DEBUG_CLIENT); + } + set_error_handler([$this, 'errorHandler']); + $result = fwrite($this->smtp_conn, $data); + restore_error_handler(); + + return $result; + } + + /** + * Get the latest error. + * + * @return array + */ + public function getError() + { + return $this->error; + } + + /** + * Get SMTP extensions available on the server. + * + * @return array|null + */ + public function getServerExtList() + { + return $this->server_caps; + } + + /** + * Get metadata about the SMTP server from its HELO/EHLO response. + * The method works in three ways, dependent on argument value and current state: + * 1. HELO/EHLO has not been sent - returns null and populates $this->error. + * 2. HELO has been sent - + * $name == 'HELO': returns server name + * $name == 'EHLO': returns boolean false + * $name == any other string: returns null and populates $this->error + * 3. EHLO has been sent - + * $name == 'HELO'|'EHLO': returns the server name + * $name == any other string: if extension $name exists, returns True + * or its options (e.g. AUTH mechanisms supported). Otherwise returns False. + * + * @param string $name Name of SMTP extension or 'HELO'|'EHLO' + * + * @return string|bool|null + */ + public function getServerExt($name) + { + if (!$this->server_caps) { + $this->setError('No HELO/EHLO was sent'); + + return; + } + + if (!array_key_exists($name, $this->server_caps)) { + if ('HELO' === $name) { + return $this->server_caps['EHLO']; + } + if ('EHLO' === $name || array_key_exists('EHLO', $this->server_caps)) { + return false; + } + $this->setError('HELO handshake was used; No information about server extensions available'); + + return; + } + + return $this->server_caps[$name]; + } + + /** + * Get the last reply from the server. + * + * @return string + */ + public function getLastReply() + { + return $this->last_reply; + } + + /** + * Read the SMTP server's response. + * Either before eof or socket timeout occurs on the operation. + * With SMTP we can tell if we have more lines to read if the + * 4th character is '-' symbol. If it is a space then we don't + * need to read anything else. + * + * @return string + */ + protected function get_lines() + { + // If the connection is bad, give up straight away + if (!is_resource($this->smtp_conn)) { + return ''; + } + $data = ''; + $endtime = 0; + stream_set_timeout($this->smtp_conn, $this->Timeout); + if ($this->Timelimit > 0) { + $endtime = time() + $this->Timelimit; + } + $selR = [$this->smtp_conn]; + $selW = null; + while (is_resource($this->smtp_conn) && !feof($this->smtp_conn)) { + //Must pass vars in here as params are by reference + //solution for signals inspired by https://github.com/symfony/symfony/pull/6540 + set_error_handler([$this, 'errorHandler']); + $n = stream_select($selR, $selW, $selW, $this->Timelimit); + restore_error_handler(); + + if ($n === false) { + $message = $this->getError()['detail']; + + $this->edebug( + 'SMTP -> get_lines(): select failed (' . $message . ')', + self::DEBUG_LOWLEVEL + ); + + //stream_select returns false when the `select` system call is interrupted + //by an incoming signal, try the select again + if (stripos($message, 'interrupted system call') !== false) { + $this->edebug( + 'SMTP -> get_lines(): retrying stream_select', + self::DEBUG_LOWLEVEL + ); + $this->setError(''); + continue; + } + + break; + } + + if (!$n) { + $this->edebug( + 'SMTP -> get_lines(): select timed-out in (' . $this->Timelimit . ' sec)', + self::DEBUG_LOWLEVEL + ); + break; + } + + //Deliberate noise suppression - errors are handled afterwards + $str = @fgets($this->smtp_conn, self::MAX_REPLY_LENGTH); + $this->edebug('SMTP INBOUND: "' . trim($str) . '"', self::DEBUG_LOWLEVEL); + $data .= $str; + // If response is only 3 chars (not valid, but RFC5321 S4.2 says it must be handled), + // or 4th character is a space or a line break char, we are done reading, break the loop. + // String array access is a significant micro-optimisation over strlen + if (!isset($str[3]) || $str[3] === ' ' || $str[3] === "\r" || $str[3] === "\n") { + break; + } + // Timed-out? Log and break + $info = stream_get_meta_data($this->smtp_conn); + if ($info['timed_out']) { + $this->edebug( + 'SMTP -> get_lines(): stream timed-out (' . $this->Timeout . ' sec)', + self::DEBUG_LOWLEVEL + ); + break; + } + // Now check if reads took too long + if ($endtime && time() > $endtime) { + $this->edebug( + 'SMTP -> get_lines(): timelimit reached (' . + $this->Timelimit . ' sec)', + self::DEBUG_LOWLEVEL + ); + break; + } + } + + return $data; + } + + /** + * Enable or disable VERP address generation. + * + * @param bool $enabled + */ + public function setVerp($enabled = false) + { + $this->do_verp = $enabled; + } + + /** + * Get VERP address generation mode. + * + * @return bool + */ + public function getVerp() + { + return $this->do_verp; + } + + /** + * Set error messages and codes. + * + * @param string $message The error message + * @param string $detail Further detail on the error + * @param string $smtp_code An associated SMTP error code + * @param string $smtp_code_ex Extended SMTP code + */ + protected function setError($message, $detail = '', $smtp_code = '', $smtp_code_ex = '') + { + $this->error = [ + 'error' => $message, + 'detail' => $detail, + 'smtp_code' => $smtp_code, + 'smtp_code_ex' => $smtp_code_ex, + ]; + } + + /** + * Set debug output method. + * + * @param string|callable $method The name of the mechanism to use for debugging output, or a callable to handle it + */ + public function setDebugOutput($method = 'echo') + { + $this->Debugoutput = $method; + } + + /** + * Get debug output method. + * + * @return string + */ + public function getDebugOutput() + { + return $this->Debugoutput; + } + + /** + * Set debug output level. + * + * @param int $level + */ + public function setDebugLevel($level = 0) + { + $this->do_debug = $level; + } + + /** + * Get debug output level. + * + * @return int + */ + public function getDebugLevel() + { + return $this->do_debug; + } + + /** + * Set SMTP timeout. + * + * @param int $timeout The timeout duration in seconds + */ + public function setTimeout($timeout = 0) + { + $this->Timeout = $timeout; + } + + /** + * Get SMTP timeout. + * + * @return int + */ + public function getTimeout() + { + return $this->Timeout; + } + + /** + * Reports an error number and string. + * + * @param int $errno The error number returned by PHP + * @param string $errmsg The error message returned by PHP + * @param string $errfile The file the error occurred in + * @param int $errline The line number the error occurred on + */ + protected function errorHandler($errno, $errmsg, $errfile = '', $errline = 0) + { + $notice = 'Connection failed.'; + $this->setError( + $notice, + $errmsg, + (string) $errno + ); + $this->edebug( + "$notice Error #$errno: $errmsg [$errfile line $errline]", + self::DEBUG_CONNECTION + ); + } + + /** + * Extract and return the ID of the last SMTP transaction based on + * a list of patterns provided in SMTP::$smtp_transaction_id_patterns. + * Relies on the host providing the ID in response to a DATA command. + * If no reply has been received yet, it will return null. + * If no pattern was matched, it will return false. + * + * @return bool|string|null + */ + protected function recordLastTransactionID() + { + $reply = $this->getLastReply(); + + if (empty($reply)) { + $this->last_smtp_transaction_id = null; + } else { + $this->last_smtp_transaction_id = false; + foreach ($this->smtp_transaction_id_patterns as $smtp_transaction_id_pattern) { + $matches = []; + if (preg_match($smtp_transaction_id_pattern, $reply, $matches)) { + $this->last_smtp_transaction_id = trim($matches[1]); + break; + } + } + } + + return $this->last_smtp_transaction_id; + } + + /** + * Get the queue/transaction ID of the last SMTP transaction + * If no reply has been received yet, it will return null. + * If no pattern was matched, it will return false. + * + * @return bool|string|null + * + * @see recordLastTransactionID() + */ + public function getLastTransactionID() + { + return $this->last_smtp_transaction_id; + } +} diff --git a/vendor/psr/http-message/CHANGELOG.md b/vendor/psr/http-message/CHANGELOG.md new file mode 100644 index 000000000..74b1ef923 --- /dev/null +++ b/vendor/psr/http-message/CHANGELOG.md @@ -0,0 +1,36 @@ +# Changelog + +All notable changes to this project will be documented in this file, in reverse chronological order by release. + +## 1.0.1 - 2016-08-06 + +### Added + +- Nothing. + +### Deprecated + +- Nothing. + +### Removed + +- Nothing. + +### Fixed + +- Updated all `@return self` annotation references in interfaces to use + `@return static`, which more closelly follows the semantics of the + specification. +- Updated the `MessageInterface::getHeaders()` return annotation to use the + value `string[][]`, indicating the format is a nested array of strings. +- Updated the `@link` annotation for `RequestInterface::withRequestTarget()` + to point to the correct section of RFC 7230. +- Updated the `ServerRequestInterface::withUploadedFiles()` parameter annotation + to add the parameter name (`$uploadedFiles`). +- Updated a `@throws` annotation for the `UploadedFileInterface::moveTo()` + method to correctly reference the method parameter (it was referencing an + incorrect parameter name previously). + +## 1.0.0 - 2016-05-18 + +Initial stable release; reflects accepted PSR-7 specification. diff --git a/vendor/psr/http-message/LICENSE b/vendor/psr/http-message/LICENSE new file mode 100644 index 000000000..c2d8e452d --- /dev/null +++ b/vendor/psr/http-message/LICENSE @@ -0,0 +1,19 @@ +Copyright (c) 2014 PHP Framework Interoperability Group + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/psr/http-message/README.md b/vendor/psr/http-message/README.md new file mode 100644 index 000000000..28185338f --- /dev/null +++ b/vendor/psr/http-message/README.md @@ -0,0 +1,13 @@ +PSR Http Message +================ + +This repository holds all interfaces/classes/traits related to +[PSR-7](http://www.php-fig.org/psr/psr-7/). + +Note that this is not a HTTP message implementation of its own. It is merely an +interface that describes a HTTP message. See the specification for more details. + +Usage +----- + +We'll certainly need some stuff in here. \ No newline at end of file diff --git a/vendor/psr/http-message/composer.json b/vendor/psr/http-message/composer.json new file mode 100644 index 000000000..b0d2937a0 --- /dev/null +++ b/vendor/psr/http-message/composer.json @@ -0,0 +1,26 @@ +{ + "name": "psr/http-message", + "description": "Common interface for HTTP messages", + "keywords": ["psr", "psr-7", "http", "http-message", "request", "response"], + "homepage": "https://github.com/php-fig/http-message", + "license": "MIT", + "authors": [ + { + "name": "PHP-FIG", + "homepage": "http://www.php-fig.org/" + } + ], + "require": { + "php": ">=5.3.0" + }, + "autoload": { + "psr-4": { + "Psr\\Http\\Message\\": "src/" + } + }, + "extra": { + "branch-alias": { + "dev-master": "1.0.x-dev" + } + } +} diff --git a/vendor/psr/http-message/src/MessageInterface.php b/vendor/psr/http-message/src/MessageInterface.php new file mode 100644 index 000000000..dd46e5ec8 --- /dev/null +++ b/vendor/psr/http-message/src/MessageInterface.php @@ -0,0 +1,187 @@ +getHeaders() as $name => $values) { + * echo $name . ": " . implode(", ", $values); + * } + * + * // Emit headers iteratively: + * foreach ($message->getHeaders() as $name => $values) { + * foreach ($values as $value) { + * header(sprintf('%s: %s', $name, $value), false); + * } + * } + * + * While header names are not case-sensitive, getHeaders() will preserve the + * exact case in which headers were originally specified. + * + * @return string[][] Returns an associative array of the message's headers. Each + * key MUST be a header name, and each value MUST be an array of strings + * for that header. + */ + public function getHeaders(); + + /** + * Checks if a header exists by the given case-insensitive name. + * + * @param string $name Case-insensitive header field name. + * @return bool Returns true if any header names match the given header + * name using a case-insensitive string comparison. Returns false if + * no matching header name is found in the message. + */ + public function hasHeader($name); + + /** + * Retrieves a message header value by the given case-insensitive name. + * + * This method returns an array of all the header values of the given + * case-insensitive header name. + * + * If the header does not appear in the message, this method MUST return an + * empty array. + * + * @param string $name Case-insensitive header field name. + * @return string[] An array of string values as provided for the given + * header. If the header does not appear in the message, this method MUST + * return an empty array. + */ + public function getHeader($name); + + /** + * Retrieves a comma-separated string of the values for a single header. + * + * This method returns all of the header values of the given + * case-insensitive header name as a string concatenated together using + * a comma. + * + * NOTE: Not all header values may be appropriately represented using + * comma concatenation. For such headers, use getHeader() instead + * and supply your own delimiter when concatenating. + * + * If the header does not appear in the message, this method MUST return + * an empty string. + * + * @param string $name Case-insensitive header field name. + * @return string A string of values as provided for the given header + * concatenated together using a comma. If the header does not appear in + * the message, this method MUST return an empty string. + */ + public function getHeaderLine($name); + + /** + * Return an instance with the provided value replacing the specified header. + * + * While header names are case-insensitive, the casing of the header will + * be preserved by this function, and returned from getHeaders(). + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that has the + * new and/or updated header and value. + * + * @param string $name Case-insensitive header field name. + * @param string|string[] $value Header value(s). + * @return static + * @throws \InvalidArgumentException for invalid header names or values. + */ + public function withHeader($name, $value); + + /** + * Return an instance with the specified header appended with the given value. + * + * Existing values for the specified header will be maintained. The new + * value(s) will be appended to the existing list. If the header did not + * exist previously, it will be added. + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that has the + * new header and/or value. + * + * @param string $name Case-insensitive header field name to add. + * @param string|string[] $value Header value(s). + * @return static + * @throws \InvalidArgumentException for invalid header names or values. + */ + public function withAddedHeader($name, $value); + + /** + * Return an instance without the specified header. + * + * Header resolution MUST be done without case-sensitivity. + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that removes + * the named header. + * + * @param string $name Case-insensitive header field name to remove. + * @return static + */ + public function withoutHeader($name); + + /** + * Gets the body of the message. + * + * @return StreamInterface Returns the body as a stream. + */ + public function getBody(); + + /** + * Return an instance with the specified message body. + * + * The body MUST be a StreamInterface object. + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return a new instance that has the + * new body stream. + * + * @param StreamInterface $body Body. + * @return static + * @throws \InvalidArgumentException When the body is not valid. + */ + public function withBody(StreamInterface $body); +} diff --git a/vendor/psr/http-message/src/RequestInterface.php b/vendor/psr/http-message/src/RequestInterface.php new file mode 100644 index 000000000..a96d4fd63 --- /dev/null +++ b/vendor/psr/http-message/src/RequestInterface.php @@ -0,0 +1,129 @@ +getQuery()` + * or from the `QUERY_STRING` server param. + * + * @return array + */ + public function getQueryParams(); + + /** + * Return an instance with the specified query string arguments. + * + * These values SHOULD remain immutable over the course of the incoming + * request. They MAY be injected during instantiation, such as from PHP's + * $_GET superglobal, or MAY be derived from some other value such as the + * URI. In cases where the arguments are parsed from the URI, the data + * MUST be compatible with what PHP's parse_str() would return for + * purposes of how duplicate query parameters are handled, and how nested + * sets are handled. + * + * Setting query string arguments MUST NOT change the URI stored by the + * request, nor the values in the server params. + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that has the + * updated query string arguments. + * + * @param array $query Array of query string arguments, typically from + * $_GET. + * @return static + */ + public function withQueryParams(array $query); + + /** + * Retrieve normalized file upload data. + * + * This method returns upload metadata in a normalized tree, with each leaf + * an instance of Psr\Http\Message\UploadedFileInterface. + * + * These values MAY be prepared from $_FILES or the message body during + * instantiation, or MAY be injected via withUploadedFiles(). + * + * @return array An array tree of UploadedFileInterface instances; an empty + * array MUST be returned if no data is present. + */ + public function getUploadedFiles(); + + /** + * Create a new instance with the specified uploaded files. + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that has the + * updated body parameters. + * + * @param array $uploadedFiles An array tree of UploadedFileInterface instances. + * @return static + * @throws \InvalidArgumentException if an invalid structure is provided. + */ + public function withUploadedFiles(array $uploadedFiles); + + /** + * Retrieve any parameters provided in the request body. + * + * If the request Content-Type is either application/x-www-form-urlencoded + * or multipart/form-data, and the request method is POST, this method MUST + * return the contents of $_POST. + * + * Otherwise, this method may return any results of deserializing + * the request body content; as parsing returns structured content, the + * potential types MUST be arrays or objects only. A null value indicates + * the absence of body content. + * + * @return null|array|object The deserialized body parameters, if any. + * These will typically be an array or object. + */ + public function getParsedBody(); + + /** + * Return an instance with the specified body parameters. + * + * These MAY be injected during instantiation. + * + * If the request Content-Type is either application/x-www-form-urlencoded + * or multipart/form-data, and the request method is POST, use this method + * ONLY to inject the contents of $_POST. + * + * The data IS NOT REQUIRED to come from $_POST, but MUST be the results of + * deserializing the request body content. Deserialization/parsing returns + * structured data, and, as such, this method ONLY accepts arrays or objects, + * or a null value if nothing was available to parse. + * + * As an example, if content negotiation determines that the request data + * is a JSON payload, this method could be used to create a request + * instance with the deserialized parameters. + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that has the + * updated body parameters. + * + * @param null|array|object $data The deserialized body data. This will + * typically be in an array or object. + * @return static + * @throws \InvalidArgumentException if an unsupported argument type is + * provided. + */ + public function withParsedBody($data); + + /** + * Retrieve attributes derived from the request. + * + * The request "attributes" may be used to allow injection of any + * parameters derived from the request: e.g., the results of path + * match operations; the results of decrypting cookies; the results of + * deserializing non-form-encoded message bodies; etc. Attributes + * will be application and request specific, and CAN be mutable. + * + * @return array Attributes derived from the request. + */ + public function getAttributes(); + + /** + * Retrieve a single derived request attribute. + * + * Retrieves a single derived request attribute as described in + * getAttributes(). If the attribute has not been previously set, returns + * the default value as provided. + * + * This method obviates the need for a hasAttribute() method, as it allows + * specifying a default value to return if the attribute is not found. + * + * @see getAttributes() + * @param string $name The attribute name. + * @param mixed $default Default value to return if the attribute does not exist. + * @return mixed + */ + public function getAttribute($name, $default = null); + + /** + * Return an instance with the specified derived request attribute. + * + * This method allows setting a single derived request attribute as + * described in getAttributes(). + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that has the + * updated attribute. + * + * @see getAttributes() + * @param string $name The attribute name. + * @param mixed $value The value of the attribute. + * @return static + */ + public function withAttribute($name, $value); + + /** + * Return an instance that removes the specified derived request attribute. + * + * This method allows removing a single derived request attribute as + * described in getAttributes(). + * + * This method MUST be implemented in such a way as to retain the + * immutability of the message, and MUST return an instance that removes + * the attribute. + * + * @see getAttributes() + * @param string $name The attribute name. + * @return static + */ + public function withoutAttribute($name); +} diff --git a/vendor/psr/http-message/src/StreamInterface.php b/vendor/psr/http-message/src/StreamInterface.php new file mode 100644 index 000000000..f68f39126 --- /dev/null +++ b/vendor/psr/http-message/src/StreamInterface.php @@ -0,0 +1,158 @@ + + * [user-info@]host[:port] + * + * + * If the port component is not set or is the standard port for the current + * scheme, it SHOULD NOT be included. + * + * @see https://tools.ietf.org/html/rfc3986#section-3.2 + * @return string The URI authority, in "[user-info@]host[:port]" format. + */ + public function getAuthority(); + + /** + * Retrieve the user information component of the URI. + * + * If no user information is present, this method MUST return an empty + * string. + * + * If a user is present in the URI, this will return that value; + * additionally, if the password is also present, it will be appended to the + * user value, with a colon (":") separating the values. + * + * The trailing "@" character is not part of the user information and MUST + * NOT be added. + * + * @return string The URI user information, in "username[:password]" format. + */ + public function getUserInfo(); + + /** + * Retrieve the host component of the URI. + * + * If no host is present, this method MUST return an empty string. + * + * The value returned MUST be normalized to lowercase, per RFC 3986 + * Section 3.2.2. + * + * @see http://tools.ietf.org/html/rfc3986#section-3.2.2 + * @return string The URI host. + */ + public function getHost(); + + /** + * Retrieve the port component of the URI. + * + * If a port is present, and it is non-standard for the current scheme, + * this method MUST return it as an integer. If the port is the standard port + * used with the current scheme, this method SHOULD return null. + * + * If no port is present, and no scheme is present, this method MUST return + * a null value. + * + * If no port is present, but a scheme is present, this method MAY return + * the standard port for that scheme, but SHOULD return null. + * + * @return null|int The URI port. + */ + public function getPort(); + + /** + * Retrieve the path component of the URI. + * + * The path can either be empty or absolute (starting with a slash) or + * rootless (not starting with a slash). Implementations MUST support all + * three syntaxes. + * + * Normally, the empty path "" and absolute path "/" are considered equal as + * defined in RFC 7230 Section 2.7.3. But this method MUST NOT automatically + * do this normalization because in contexts with a trimmed base path, e.g. + * the front controller, this difference becomes significant. It's the task + * of the user to handle both "" and "/". + * + * The value returned MUST be percent-encoded, but MUST NOT double-encode + * any characters. To determine what characters to encode, please refer to + * RFC 3986, Sections 2 and 3.3. + * + * As an example, if the value should include a slash ("/") not intended as + * delimiter between path segments, that value MUST be passed in encoded + * form (e.g., "%2F") to the instance. + * + * @see https://tools.ietf.org/html/rfc3986#section-2 + * @see https://tools.ietf.org/html/rfc3986#section-3.3 + * @return string The URI path. + */ + public function getPath(); + + /** + * Retrieve the query string of the URI. + * + * If no query string is present, this method MUST return an empty string. + * + * The leading "?" character is not part of the query and MUST NOT be + * added. + * + * The value returned MUST be percent-encoded, but MUST NOT double-encode + * any characters. To determine what characters to encode, please refer to + * RFC 3986, Sections 2 and 3.4. + * + * As an example, if a value in a key/value pair of the query string should + * include an ampersand ("&") not intended as a delimiter between values, + * that value MUST be passed in encoded form (e.g., "%26") to the instance. + * + * @see https://tools.ietf.org/html/rfc3986#section-2 + * @see https://tools.ietf.org/html/rfc3986#section-3.4 + * @return string The URI query string. + */ + public function getQuery(); + + /** + * Retrieve the fragment component of the URI. + * + * If no fragment is present, this method MUST return an empty string. + * + * The leading "#" character is not part of the fragment and MUST NOT be + * added. + * + * The value returned MUST be percent-encoded, but MUST NOT double-encode + * any characters. To determine what characters to encode, please refer to + * RFC 3986, Sections 2 and 3.5. + * + * @see https://tools.ietf.org/html/rfc3986#section-2 + * @see https://tools.ietf.org/html/rfc3986#section-3.5 + * @return string The URI fragment. + */ + public function getFragment(); + + /** + * Return an instance with the specified scheme. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified scheme. + * + * Implementations MUST support the schemes "http" and "https" case + * insensitively, and MAY accommodate other schemes if required. + * + * An empty scheme is equivalent to removing the scheme. + * + * @param string $scheme The scheme to use with the new instance. + * @return static A new instance with the specified scheme. + * @throws \InvalidArgumentException for invalid or unsupported schemes. + */ + public function withScheme($scheme); + + /** + * Return an instance with the specified user information. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified user information. + * + * Password is optional, but the user information MUST include the + * user; an empty string for the user is equivalent to removing user + * information. + * + * @param string $user The user name to use for authority. + * @param null|string $password The password associated with $user. + * @return static A new instance with the specified user information. + */ + public function withUserInfo($user, $password = null); + + /** + * Return an instance with the specified host. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified host. + * + * An empty host value is equivalent to removing the host. + * + * @param string $host The hostname to use with the new instance. + * @return static A new instance with the specified host. + * @throws \InvalidArgumentException for invalid hostnames. + */ + public function withHost($host); + + /** + * Return an instance with the specified port. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified port. + * + * Implementations MUST raise an exception for ports outside the + * established TCP and UDP port ranges. + * + * A null value provided for the port is equivalent to removing the port + * information. + * + * @param null|int $port The port to use with the new instance; a null value + * removes the port information. + * @return static A new instance with the specified port. + * @throws \InvalidArgumentException for invalid ports. + */ + public function withPort($port); + + /** + * Return an instance with the specified path. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified path. + * + * The path can either be empty or absolute (starting with a slash) or + * rootless (not starting with a slash). Implementations MUST support all + * three syntaxes. + * + * If the path is intended to be domain-relative rather than path relative then + * it must begin with a slash ("/"). Paths not starting with a slash ("/") + * are assumed to be relative to some base path known to the application or + * consumer. + * + * Users can provide both encoded and decoded path characters. + * Implementations ensure the correct encoding as outlined in getPath(). + * + * @param string $path The path to use with the new instance. + * @return static A new instance with the specified path. + * @throws \InvalidArgumentException for invalid paths. + */ + public function withPath($path); + + /** + * Return an instance with the specified query string. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified query string. + * + * Users can provide both encoded and decoded query characters. + * Implementations ensure the correct encoding as outlined in getQuery(). + * + * An empty query string value is equivalent to removing the query string. + * + * @param string $query The query string to use with the new instance. + * @return static A new instance with the specified query string. + * @throws \InvalidArgumentException for invalid query strings. + */ + public function withQuery($query); + + /** + * Return an instance with the specified URI fragment. + * + * This method MUST retain the state of the current instance, and return + * an instance that contains the specified URI fragment. + * + * Users can provide both encoded and decoded fragment characters. + * Implementations ensure the correct encoding as outlined in getFragment(). + * + * An empty fragment value is equivalent to removing the fragment. + * + * @param string $fragment The fragment to use with the new instance. + * @return static A new instance with the specified fragment. + */ + public function withFragment($fragment); + + /** + * Return the string representation as a URI reference. + * + * Depending on which components of the URI are present, the resulting + * string is either a full URI or relative reference according to RFC 3986, + * Section 4.1. The method concatenates the various components of the URI, + * using the appropriate delimiters: + * + * - If a scheme is present, it MUST be suffixed by ":". + * - If an authority is present, it MUST be prefixed by "//". + * - The path can be concatenated without delimiters. But there are two + * cases where the path has to be adjusted to make the URI reference + * valid as PHP does not allow to throw an exception in __toString(): + * - If the path is rootless and an authority is present, the path MUST + * be prefixed by "/". + * - If the path is starting with more than one "/" and no authority is + * present, the starting slashes MUST be reduced to one. + * - If a query is present, it MUST be prefixed by "?". + * - If a fragment is present, it MUST be prefixed by "#". + * + * @see http://tools.ietf.org/html/rfc3986#section-4.1 + * @return string + */ + public function __toString(); +} diff --git a/vendor/ralouphie/getallheaders/LICENSE b/vendor/ralouphie/getallheaders/LICENSE new file mode 100644 index 000000000..be5540c2a --- /dev/null +++ b/vendor/ralouphie/getallheaders/LICENSE @@ -0,0 +1,21 @@ +The MIT License (MIT) + +Copyright (c) 2014 Ralph Khattar + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/vendor/ralouphie/getallheaders/README.md b/vendor/ralouphie/getallheaders/README.md new file mode 100644 index 000000000..9430d76bb --- /dev/null +++ b/vendor/ralouphie/getallheaders/README.md @@ -0,0 +1,27 @@ +getallheaders +============= + +PHP `getallheaders()` polyfill. Compatible with PHP >= 5.3. + +[![Build Status](https://travis-ci.org/ralouphie/getallheaders.svg?branch=master)](https://travis-ci.org/ralouphie/getallheaders) +[![Coverage Status](https://coveralls.io/repos/ralouphie/getallheaders/badge.png?branch=master)](https://coveralls.io/r/ralouphie/getallheaders?branch=master) +[![Latest Stable Version](https://poser.pugx.org/ralouphie/getallheaders/v/stable.png)](https://packagist.org/packages/ralouphie/getallheaders) +[![Latest Unstable Version](https://poser.pugx.org/ralouphie/getallheaders/v/unstable.png)](https://packagist.org/packages/ralouphie/getallheaders) +[![License](https://poser.pugx.org/ralouphie/getallheaders/license.png)](https://packagist.org/packages/ralouphie/getallheaders) + + +This is a simple polyfill for [`getallheaders()`](http://www.php.net/manual/en/function.getallheaders.php). + +## Install + +For PHP version **`>= 5.6`**: + +``` +composer require ralouphie/getallheaders +``` + +For PHP version **`< 5.6`**: + +``` +composer require ralouphie/getallheaders "^2" +``` diff --git a/vendor/ralouphie/getallheaders/composer.json b/vendor/ralouphie/getallheaders/composer.json new file mode 100644 index 000000000..de8ce62e4 --- /dev/null +++ b/vendor/ralouphie/getallheaders/composer.json @@ -0,0 +1,26 @@ +{ + "name": "ralouphie/getallheaders", + "description": "A polyfill for getallheaders.", + "license": "MIT", + "authors": [ + { + "name": "Ralph Khattar", + "email": "ralph.khattar@gmail.com" + } + ], + "require": { + "php": ">=5.6" + }, + "require-dev": { + "phpunit/phpunit": "^5 || ^6.5", + "php-coveralls/php-coveralls": "^2.1" + }, + "autoload": { + "files": ["src/getallheaders.php"] + }, + "autoload-dev": { + "psr-4": { + "getallheaders\\Tests\\": "tests/" + } + } +} diff --git a/vendor/ralouphie/getallheaders/src/getallheaders.php b/vendor/ralouphie/getallheaders/src/getallheaders.php new file mode 100644 index 000000000..c7285a5ba --- /dev/null +++ b/vendor/ralouphie/getallheaders/src/getallheaders.php @@ -0,0 +1,46 @@ + 'Content-Type', + 'CONTENT_LENGTH' => 'Content-Length', + 'CONTENT_MD5' => 'Content-Md5', + ); + + foreach ($_SERVER as $key => $value) { + if (substr($key, 0, 5) === 'HTTP_') { + $key = substr($key, 5); + if (!isset($copy_server[$key]) || !isset($_SERVER[$key])) { + $key = str_replace(' ', '-', ucwords(strtolower(str_replace('_', ' ', $key)))); + $headers[$key] = $value; + } + } elseif (isset($copy_server[$key])) { + $headers[$copy_server[$key]] = $value; + } + } + + if (!isset($headers['Authorization'])) { + if (isset($_SERVER['REDIRECT_HTTP_AUTHORIZATION'])) { + $headers['Authorization'] = $_SERVER['REDIRECT_HTTP_AUTHORIZATION']; + } elseif (isset($_SERVER['PHP_AUTH_USER'])) { + $basic_pass = isset($_SERVER['PHP_AUTH_PW']) ? $_SERVER['PHP_AUTH_PW'] : ''; + $headers['Authorization'] = 'Basic ' . base64_encode($_SERVER['PHP_AUTH_USER'] . ':' . $basic_pass); + } elseif (isset($_SERVER['PHP_AUTH_DIGEST'])) { + $headers['Authorization'] = $_SERVER['PHP_AUTH_DIGEST']; + } + } + + return $headers; + } + +} diff --git a/vendor/sonata-project/google-authenticator/LICENSE b/vendor/sonata-project/google-authenticator/LICENSE new file mode 100644 index 000000000..0135e0b6a --- /dev/null +++ b/vendor/sonata-project/google-authenticator/LICENSE @@ -0,0 +1,21 @@ +The MIT License (MIT) + +Copyright (c) 2010 Thomas Rabaix + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/sonata-project/google-authenticator/Makefile b/vendor/sonata-project/google-authenticator/Makefile new file mode 100644 index 000000000..4ae0c63d8 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/Makefile @@ -0,0 +1,60 @@ +# DO NOT EDIT THIS FILE! +# +# It's auto-generated by sonata-project/dev-kit package. + +all: + @echo "Please choose a task." +.PHONY: all + +lint: lint-composer lint-yaml lint-composer lint-xml lint-php +.PHONY: lint + +lint-composer: + composer validate +.PHONY: lint-composer + +lint-yaml: + yaml-lint --ignore-non-yaml-files --quiet --exclude vendor . + +.PHONY: lint-yaml + +lint-xml: + find . \( -name '*.xml' -or -name '*.xliff' \) \ + -not -path './vendor/*' \ + -not -path './src/Resources/public/vendor/*' \ + | while read xmlFile; \ + do \ + XMLLINT_INDENT=' ' xmllint --encode UTF-8 --format "$$xmlFile"|diff - "$$xmlFile"; \ + if [ $$? -ne 0 ] ;then exit 1; fi; \ + done + +.PHONY: lint-xml + +lint-php: + php-cs-fixer fix --ansi --verbose --diff --dry-run +.PHONY: lint-php + +cs-fix: cs-fix-php cs-fix-xml +.PHONY: cs-fix + +cs-fix-php: + php-cs-fixer fix --verbose +.PHONY: cs-fix-php + +cs-fix-xml: + find . \( -name '*.xml' -or -name '*.xliff' \) \ + -not -path './vendor/*' \ + -not -path './src/Resources/public/vendor/*' \ + | while read xmlFile; \ + do \ + XMLLINT_INDENT=' ' xmllint --encode UTF-8 --format "$$xmlFile" --output "$$xmlFile"; \ + done +.PHONY: cs-fix-xml + +test: + phpunit -c phpunit.xml.dist --coverage-clover build/logs/clover.xml +.PHONY: test + +docs: + cd docs && sphinx-build -W -b html -d _build/doctrees . _build/html +.PHONY: docs diff --git a/vendor/sonata-project/google-authenticator/composer.json b/vendor/sonata-project/google-authenticator/composer.json new file mode 100644 index 000000000..4fbb160ac --- /dev/null +++ b/vendor/sonata-project/google-authenticator/composer.json @@ -0,0 +1,50 @@ +{ + "name": "sonata-project/google-authenticator", + "type": "library", + "description": "Library to integrate Google Authenticator into a PHP project", + "keywords": [ + "google authenticator" + ], + "homepage": "https://github.com/sonata-project/GoogleAuthenticator", + "license": "MIT", + "authors": [ + { + "name": "Thomas Rabaix", + "email": "thomas.rabaix@gmail.com" + }, + { + "name": "Christian Stocker", + "email": "me@chregu.tv" + }, + { + "name": "Andre DeMarre", + "homepage": "http://www.devnetwork.net/viewtopic.php?f=50&t=94989" + } + ], + "require": { + "php": "^7.1" + }, + "require-dev": { + "symfony/phpunit-bridge": "^4.0" + }, + "config": { + "sort-packages": true + }, + "extra": { + "branch-alias": { + "dev-master": "2.x-dev" + } + }, + "autoload": { + "psr-4": { + "Google\\Authenticator\\": "src/", + "Sonata\\GoogleAuthenticator\\": "src/" + } + }, + "autoload-dev": { + "psr-4": { + "Google\\Authenticator\\Tests\\": "tests/", + "Sonata\\GoogleAuthenticator\\Tests\\": "tests/" + } + } +} diff --git a/vendor/sonata-project/google-authenticator/phpunit.xml.dist b/vendor/sonata-project/google-authenticator/phpunit.xml.dist new file mode 100644 index 000000000..492b036db --- /dev/null +++ b/vendor/sonata-project/google-authenticator/phpunit.xml.dist @@ -0,0 +1,40 @@ + + + + + + + + ./tests/ + + + + + + + + + + ./src/ + + + + + + + + diff --git a/vendor/sonata-project/google-authenticator/sample/example.php b/vendor/sonata-project/google-authenticator/sample/example.php new file mode 100644 index 000000000..50366d2fa --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/example.php @@ -0,0 +1,41 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +include_once __DIR__.'/../src/FixedBitNotation.php'; +include_once __DIR__.'/../src/GoogleAuthenticator.php'; +include_once __DIR__.'/../src/GoogleQrUrl.php'; + +$secret = 'XVQ2UIGO75XRUKJO'; +$code = '846474'; + +$g = new \Sonata\GoogleAuthenticator\GoogleAuthenticator(); + +echo 'Current Code is: '; +echo $g->getCode($secret); + +echo "\n"; + +echo "Check if $code is valid: "; + +if ($g->checkCode($secret, $code)) { + echo "YES \n"; +} else { + echo "NO \n"; +} + +$secret = $g->generateSecret(); +echo "Get a new Secret: $secret \n"; +echo "The QR Code for this secret (to scan with the Google Authenticator App: \n"; + +echo \Sonata\GoogleAuthenticator\GoogleQrUrl::generate('chregu', $secret, 'GoogleAuthenticatorExample'); +echo "\n"; diff --git a/vendor/sonata-project/google-authenticator/sample/tmpl/ask-for-otp.php b/vendor/sonata-project/google-authenticator/sample/tmpl/ask-for-otp.php new file mode 100644 index 000000000..f3e06d477 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/tmpl/ask-for-otp.php @@ -0,0 +1,23 @@ + +

please otp

+

+

+ +
+ (Set $debug in index.php to false, if you don't want to have the OTP prefilled (for real life application, for example ;))
+ + +otp:
+
+ + +
diff --git a/vendor/sonata-project/google-authenticator/sample/tmpl/loggedin.php b/vendor/sonata-project/google-authenticator/sample/tmpl/loggedin.php new file mode 100644 index 000000000..2a19032ca --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/tmpl/loggedin.php @@ -0,0 +1,19 @@ + +

+Hello getUsername(); ?> +

+ + +

+Show QR Code +

+ + + +

+Logout +

diff --git a/vendor/sonata-project/google-authenticator/sample/tmpl/login-error.php b/vendor/sonata-project/google-authenticator/sample/tmpl/login-error.php new file mode 100644 index 000000000..8d23fd33c --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/tmpl/login-error.php @@ -0,0 +1,6 @@ +

+Wrong username or password or token. +

+

+try again +

diff --git a/vendor/sonata-project/google-authenticator/sample/tmpl/login.php b/vendor/sonata-project/google-authenticator/sample/tmpl/login.php new file mode 100644 index 000000000..fd8162300 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/tmpl/login.php @@ -0,0 +1,8 @@ + +

please login

+

+

+username:
+password:
+ +
diff --git a/vendor/sonata-project/google-authenticator/sample/tmpl/show-qr.php b/vendor/sonata-project/google-authenticator/sample/tmpl/show-qr.php new file mode 100644 index 000000000..774a298de --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/tmpl/show-qr.php @@ -0,0 +1,11 @@ +

Please scan this

+ +

with the Google Authenticator App

+ +

+getUsername(), $secret, 'GoogleAuthenticatorExample'); +?> + + +

diff --git a/vendor/sonata-project/google-authenticator/sample/web/Users.php b/vendor/sonata-project/google-authenticator/sample/web/Users.php new file mode 100644 index 000000000..fb169def9 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/web/Users.php @@ -0,0 +1,155 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +class Users +{ + public function __construct(string $file = '../users.dat') + { + $this->userFile = $file; + + $this->users = json_decode(file_get_contents($file), true); + } + + public function hasSession() + { + session_start(); + if (isset($_SESSION['username'])) { + return $_SESSION['username']; + } + + return false; + } + + public function storeData(User $user): void + { + $this->users[$user->getUsername()] = $user->getData(); + file_put_contents($this->userFile, json_encode($this->users)); + } + + public function loadUser($name) + { + if (isset($this->users[$name])) { + return new User($name, $this->users[$name]); + } + + return false; + } +} + +class User +{ + public function __construct($user, $data) + { + $this->data = $data; + $this->user = $user; + } + + public function auth($pass) + { + if ($this->data['password'] === $pass) { + return true; + } + + return false; + } + + public function startSession(): void + { + $_SESSION['username'] = $this->user; + } + + public function doLogin(): void + { + session_regenerate_id(); + $_SESSION['loggedin'] = true; + $_SESSION['ua'] = $_SERVER['HTTP_USER_AGENT']; + } + + public function doOTP(): void + { + $_SESSION['OTP'] = true; + } + + public function isOTP() + { + if (isset($_SESSION['OTP']) && true == $_SESSION['OTP']) { + return true; + } + + return false; + } + + public function isLoggedIn() + { + if (isset($_SESSION['loggedin']) && true == $_SESSION['loggedin'] && + isset($_SESSION['ua']) && $_SESSION['ua'] == $_SERVER['HTTP_USER_AGENT'] + ) { + return $_SESSION['username']; + } + + return false; + } + + public function getUsername() + { + return $this->user; + } + + public function getSecret() + { + if (isset($this->data['secret'])) { + return $this->data['secret']; + } + + return false; + } + + public function generateSecret() + { + $g = new \Sonata\GoogleAuthenticator\GoogleAuthenticator(); + $secret = $g->generateSecret(); + $this->data['secret'] = $secret; + + return $secret; + } + + public function getData() + { + return $this->data; + } + + public function setOTPCookie(): void + { + $time = floor(time() / (3600 * 24)); // get day number + //about using the user agent: It's easy to fake it, but it increases the barrier for stealing and reusing cookies nevertheless + // and it doesn't do any harm (except that it's invalid after a browser upgrade, but that may be even intented) + $cookie = $time.':'.hash_hmac('sha1', $this->getUsername().':'.$time.':'.$_SERVER['HTTP_USER_AGENT'], $this->getSecret()); + setcookie('otp', $cookie, time() + (30 * 24 * 3600), null, null, null, true); + } + + public function hasValidOTPCookie() + { + // 0 = tomorrow it is invalid + $daysUntilInvalid = 0; + $time = (string) floor((time() / (3600 * 24))); // get day number + if (isset($_COOKIE['otp'])) { + list($otpday, $hash) = explode(':', $_COOKIE['otp']); + + if ($otpday >= $time - $daysUntilInvalid && $hash == hash_hmac('sha1', $this->getUsername().':'.$otpday.':'.$_SERVER['HTTP_USER_AGENT'], $this->getSecret())) { + return true; + } + } + + return false; + } +} diff --git a/vendor/sonata-project/google-authenticator/sample/web/index.php b/vendor/sonata-project/google-authenticator/sample/web/index.php new file mode 100644 index 000000000..c039674c5 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/sample/web/index.php @@ -0,0 +1,119 @@ + + + + + Google Authenticator in PHP demo + + +hasSession()) { + //load the user data from the json storage. + $user = $users->loadUser($username); + //if he clicked logout, destroy the session and redirect to the startscreen. + if (isset($_GET['logout'])) { + session_destroy(); + header('Location: ./'); + } + // check if the user is logged in. + if ($user->isLoggedIn()) { + include __DIR__.'/../tmpl/loggedin.php'; + //show the QR code if whished so + if (isset($_GET['showqr'])) { + $secret = $user->getSecret(); + include __DIR__.'/../tmpl/show-qr.php'; + } + } + //if the user is in the OTP phase and submit the OTP. + else { + if ($user->isOTP() && isset($_POST['otp'])) { + $g = new \Google\Authenticator\GoogleAuthenticator(); + // check if the submitted token is the right one and log in + if ($g->checkCode($user->getSecret(), $_POST['otp'])) { + // do log-in the user + $user->doLogin(); + //if the user clicked the "remember the token" checkbox, set the cookie + if (isset($_POST['remember']) && $_POST['remember']) { + $user->setOTPCookie(); + } + include __DIR__.'/../tmpl/loggedin.php'; + } + //if the OTP is wrong, destroy the session and tell the user to try again + else { + session_destroy(); + include __DIR__.'/../tmpl/login-error.php'; + } + } + // if the user is neither logged in nor in the OTP phase, show the login form + else { + session_destroy(); + include __DIR__.'/../tmpl/login.php'; + } + } + die(); +} + //if the username is set in _POST, then we assume the user filled in the login form. + + if (isset($_POST['username'])) { + // check if we can load the user (ie. the user exists in our db) + $user = $users->loadUser($_POST['username']); + if ($user) { + //try to authenticate the password and start the session if it's correct. + if ($user->auth($_POST['password'])) { + $user->startSession(); + //check if the user has a valid OTP cookie, so we don't have to + // ask for the current token and can directly log in + if ($user->hasValidOTPCookie()) { + include __DIR__.'/../tmpl/loggedin.php'; + $user->doLogin(); + } + // try to get the users' secret from the db, + // if he doesn't have one, generate one, store it and show it. + else { + if (!$user->getSecret()) { + include __DIR__.'/../tmpl/loggedin.php'; + + $secret = $user->generateSecret(); + $users->storeData($user); + $user->doLogin(); + include __DIR__.'/../tmpl/show-qr.php'; + } + // if the user neither has a valid OTP cookie nor it's the first login + // ask for the OTP + else { + $user->doOTP(); + include __DIR__.'/../tmpl/ask-for-otp.php'; + } + } + + die(); + } + } + // if we're here, something went wrong, destroy the session and show a login error + session_destroy(); + + include __DIR__.'/../tmpl/login-error.php'; + die(); + } + +// if neither a session nor tried to submit the login credentials -> login screen +include __DIR__.'/../tmpl/login.php'; + +?> + + diff --git a/vendor/sonata-project/google-authenticator/src/FixedBitNotation.php b/vendor/sonata-project/google-authenticator/src/FixedBitNotation.php new file mode 100644 index 000000000..3f5ff558b --- /dev/null +++ b/vendor/sonata-project/google-authenticator/src/FixedBitNotation.php @@ -0,0 +1,296 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Sonata\GoogleAuthenticator; + +/** + * FixedBitNotation. + * + * The FixedBitNotation class is for binary to text conversion. It + * can handle many encoding schemes, formally defined or not, that + * use a fixed number of bits to encode each character. + * + * @author Andre DeMarre + */ +final class FixedBitNotation +{ + /** + * @var string + */ + private $chars; + + /** + * @var int + */ + private $bitsPerCharacter; + + /** + * @var int + */ + private $radix; + + /** + * @var bool + */ + private $rightPadFinalBits; + + /** + * @var bool + */ + private $padFinalGroup; + + /** + * @var string + */ + private $padCharacter; + + /** + * @var string[] + */ + private $charmap; + + /** + * @param int $bitsPerCharacter Bits to use for each encoded character + * @param string $chars Base character alphabet + * @param bool $rightPadFinalBits How to encode last character + * @param bool $padFinalGroup Add padding to end of encoded output + * @param string $padCharacter Character to use for padding + */ + public function __construct(int $bitsPerCharacter, string $chars = null, bool $rightPadFinalBits = false, bool $padFinalGroup = false, string $padCharacter = '=') + { + // Ensure validity of $chars + if (!is_string($chars) || ($charLength = strlen($chars)) < 2) { + $chars = + '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-,'; + $charLength = 64; + } + + // Ensure validity of $bitsPerCharacter + if ($bitsPerCharacter < 1) { + // $bitsPerCharacter must be at least 1 + $bitsPerCharacter = 1; + $radix = 2; + } elseif ($charLength < 1 << $bitsPerCharacter) { + // Character length of $chars is too small for $bitsPerCharacter + // Set $bitsPerCharacter to greatest acceptable value + $bitsPerCharacter = 1; + $radix = 2; + + while ($charLength >= ($radix <<= 1) && $bitsPerCharacter < 8) { + ++$bitsPerCharacter; + } + + $radix >>= 1; + } elseif ($bitsPerCharacter > 8) { + // $bitsPerCharacter must not be greater than 8 + $bitsPerCharacter = 8; + $radix = 256; + } else { + $radix = 1 << $bitsPerCharacter; + } + + $this->chars = $chars; + $this->bitsPerCharacter = $bitsPerCharacter; + $this->radix = $radix; + $this->rightPadFinalBits = $rightPadFinalBits; + $this->padFinalGroup = $padFinalGroup; + $this->padCharacter = $padCharacter[0]; + } + + /** + * Encode a string. + * + * @param string $rawString Binary data to encode + * + * @return string + */ + public function encode($rawString): string + { + // Unpack string into an array of bytes + $bytes = unpack('C*', $rawString); + $byteCount = count($bytes); + + $encodedString = ''; + $byte = array_shift($bytes); + $bitsRead = 0; + + $chars = $this->chars; + $bitsPerCharacter = $this->bitsPerCharacter; + $rightPadFinalBits = $this->rightPadFinalBits; + $padFinalGroup = $this->padFinalGroup; + $padCharacter = $this->padCharacter; + + // Generate encoded output; + // each loop produces one encoded character + for ($c = 0; $c < $byteCount * 8 / $bitsPerCharacter; ++$c) { + // Get the bits needed for this encoded character + if ($bitsRead + $bitsPerCharacter > 8) { + // Not enough bits remain in this byte for the current + // character + // Save the remaining bits before getting the next byte + $oldBitCount = 8 - $bitsRead; + $oldBits = $byte ^ ($byte >> $oldBitCount << $oldBitCount); + $newBitCount = $bitsPerCharacter - $oldBitCount; + + if (!$bytes) { + // Last bits; match final character and exit loop + if ($rightPadFinalBits) { + $oldBits <<= $newBitCount; + } + $encodedString .= $chars[$oldBits]; + + if ($padFinalGroup) { + // Array of the lowest common multiples of + // $bitsPerCharacter and 8, divided by 8 + $lcmMap = [1 => 1, 2 => 1, 3 => 3, 4 => 1, 5 => 5, 6 => 3, 7 => 7, 8 => 1]; + $bytesPerGroup = $lcmMap[$bitsPerCharacter]; + $pads = $bytesPerGroup * 8 / $bitsPerCharacter + - ceil((strlen($rawString) % $bytesPerGroup) + * 8 / $bitsPerCharacter); + $encodedString .= str_repeat($padCharacter[0], $pads); + } + + break; + } + + // Get next byte + $byte = array_shift($bytes); + $bitsRead = 0; + } else { + $oldBitCount = 0; + $newBitCount = $bitsPerCharacter; + } + + // Read only the needed bits from this byte + $bits = $byte >> 8 - ($bitsRead + $newBitCount); + $bits ^= $bits >> $newBitCount << $newBitCount; + $bitsRead += $newBitCount; + + if ($oldBitCount) { + // Bits come from seperate bytes, add $oldBits to $bits + $bits = ($oldBits << $newBitCount) | $bits; + } + + $encodedString .= $chars[$bits]; + } + + return $encodedString; + } + + /** + * Decode a string. + * + * @param string $encodedString Data to decode + * @param bool $caseSensitive + * @param bool $strict Returns null if $encodedString contains + * an undecodable character + * + * @return string + */ + public function decode($encodedString, $caseSensitive = true, $strict = false): string + { + if (!$encodedString || !is_string($encodedString)) { + // Empty string, nothing to decode + return ''; + } + + $chars = $this->chars; + $bitsPerCharacter = $this->bitsPerCharacter; + $radix = $this->radix; + $rightPadFinalBits = $this->rightPadFinalBits; + $padCharacter = $this->padCharacter; + + // Get index of encoded characters + if ($this->charmap) { + $charmap = $this->charmap; + } else { + $charmap = []; + + for ($i = 0; $i < $radix; ++$i) { + $charmap[$chars[$i]] = $i; + } + + $this->charmap = $charmap; + } + + // The last encoded character is $encodedString[$lastNotatedIndex] + $lastNotatedIndex = strlen($encodedString) - 1; + + // Remove trailing padding characters + while ($encodedString[$lastNotatedIndex] == $padCharacter[0]) { + $encodedString = substr($encodedString, 0, $lastNotatedIndex); + --$lastNotatedIndex; + } + + $rawString = ''; + $byte = 0; + $bitsWritten = 0; + + // Convert each encoded character to a series of unencoded bits + for ($c = 0; $c <= $lastNotatedIndex; ++$c) { + if (!isset($charmap[$encodedString[$c]]) && !$caseSensitive) { + // Encoded character was not found; try other case + if (isset($charmap[$cUpper = strtoupper($encodedString[$c])])) { + $charmap[$encodedString[$c]] = $charmap[$cUpper]; + } elseif (isset($charmap[$cLower = strtolower($encodedString[$c])])) { + $charmap[$encodedString[$c]] = $charmap[$cLower]; + } + } + + if (isset($charmap[$encodedString[$c]])) { + $bitsNeeded = 8 - $bitsWritten; + $unusedBitCount = $bitsPerCharacter - $bitsNeeded; + + // Get the new bits ready + if ($bitsNeeded > $bitsPerCharacter) { + // New bits aren't enough to complete a byte; shift them + // left into position + $newBits = $charmap[$encodedString[$c]] << $bitsNeeded + - $bitsPerCharacter; + $bitsWritten += $bitsPerCharacter; + } elseif ($c != $lastNotatedIndex || $rightPadFinalBits) { + // Zero or more too many bits to complete a byte; + // shift right + $newBits = $charmap[$encodedString[$c]] >> $unusedBitCount; + $bitsWritten = 8; //$bitsWritten += $bitsNeeded; + } else { + // Final bits don't need to be shifted + $newBits = $charmap[$encodedString[$c]]; + $bitsWritten = 8; + } + + $byte |= $newBits; + + if (8 == $bitsWritten || $c == $lastNotatedIndex) { + // Byte is ready to be written + $rawString .= pack('C', $byte); + + if ($c != $lastNotatedIndex) { + // Start the next byte + $bitsWritten = $unusedBitCount; + $byte = ($charmap[$encodedString[$c]] + ^ ($newBits << $unusedBitCount)) << 8 - $bitsWritten; + } + } + } elseif ($strict) { + // Unable to decode character; abort + return null; + } + } + + return $rawString; + } +} + +// NEXT_MAJOR: Remove class alias +class_alias('Sonata\GoogleAuthenticator\FixedBitNotation', 'Google\Authenticator\FixedBitNotation', false); diff --git a/vendor/sonata-project/google-authenticator/src/GoogleAuthenticator.php b/vendor/sonata-project/google-authenticator/src/GoogleAuthenticator.php new file mode 100644 index 000000000..145739c54 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/src/GoogleAuthenticator.php @@ -0,0 +1,173 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Sonata\GoogleAuthenticator; + +/** + * @see https://github.com/google/google-authenticator/wiki/Key-Uri-Format + */ +final class GoogleAuthenticator implements GoogleAuthenticatorInterface +{ + /** + * @var int + */ + private $passCodeLength; + + /** + * @var int + */ + private $secretLength; + + /** + * @var int + */ + private $pinModulo; + + /** + * @var \DateTimeInterface + */ + private $now; + + /** + * @var int + */ + private $codePeriod = 30; + + /** + * @param int $passCodeLength + * @param int $secretLength + * @param \DateTimeInterface|null $now + */ + public function __construct(int $passCodeLength = 6, int $secretLength = 10, \DateTimeInterface $now = null) + { + $this->passCodeLength = $passCodeLength; + $this->secretLength = $secretLength; + $this->pinModulo = 10 ** $passCodeLength; + $this->now = $now ?? new \DateTimeImmutable(); + } + + /** + * @param string $secret + * @param string $code + */ + public function checkCode($secret, $code): bool + { + /** + * The result of each comparison is accumulated here instead of using a guard clause + * (https://refactoring.com/catalog/replaceNestedConditionalWithGuardClauses.html). This is to implement + * constant time comparison to make side-channel attacks harder. See + * https://cryptocoding.net/index.php/Coding_rules#Compare_secret_strings_in_constant_time for details. + * Each comparison uses hash_equals() instead of an operator to implement constant time equality comparison + * for each code. + */ + $result = 0; + + // current period + $result += hash_equals($this->getCode($secret, $this->now), $code); + + // previous period, happens if the user was slow to enter or it just crossed over + $dateTime = new \DateTimeImmutable('@'.($this->now->getTimestamp() - $this->codePeriod)); + $result += hash_equals($this->getCode($secret, $dateTime), $code); + + // next period, happens if the user is not completely synced and possibly a few seconds ahead + $dateTime = new \DateTimeImmutable('@'.($this->now->getTimestamp() + $this->codePeriod)); + $result += hash_equals($this->getCode($secret, $dateTime), $code); + + return $result > 0; + } + + /** + * NEXT_MAJOR: add the interface typehint to $time and remove deprecation. + * + * @param string $secret + * @param float|string|int|null|\DateTimeInterface $time + */ + public function getCode($secret, /* \DateTimeInterface */$time = null): string + { + if (null === $time) { + $time = $this->now; + } + + if ($time instanceof \DateTimeInterface) { + $timeForCode = floor($time->getTimestamp() / $this->codePeriod); + } else { + @trigger_error( + 'Passing anything other than null or a DateTimeInterface to $time is deprecated as of 2.0 '. + 'and will not be possible as of 3.0.', + E_USER_DEPRECATED + ); + $timeForCode = $time; + } + + $base32 = new FixedBitNotation(5, 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567', true, true); + $secret = $base32->decode($secret); + + $timeForCode = str_pad(pack('N', $timeForCode), 8, chr(0), STR_PAD_LEFT); + + $hash = hash_hmac('sha1', $timeForCode, $secret, true); + $offset = ord(substr($hash, -1)); + $offset &= 0xF; + + $truncatedHash = $this->hashToInt($hash, $offset) & 0x7FFFFFFF; + + return str_pad((string) ($truncatedHash % $this->pinModulo), $this->passCodeLength, '0', STR_PAD_LEFT); + } + + /** + * NEXT_MAJOR: Remove this method. + * + * @param string $user + * @param string $hostname + * @param string $secret + * + * @deprecated deprecated as of 2.1 and will be removed in 3.0. Use Sonata\GoogleAuthenticator\GoogleQrUrl::generate() instead. + */ + public function getUrl($user, $hostname, $secret): string + { + @trigger_error(sprintf( + 'Using %s() is deprecated as of 2.1 and will be removed in 3.0. '. + 'Use Sonata\GoogleAuthenticator\GoogleQrUrl::generate() instead.', + __METHOD__ + ), E_USER_DEPRECATED); + + $issuer = func_get_args()[3] ?? null; + $accountName = sprintf('%s@%s', $user, $hostname); + + // manually concat the issuer to avoid a change in URL + $url = GoogleQrUrl::generate($accountName, $secret); + + if ($issuer) { + $url .= '%26issuer%3D'.$issuer; + } + + return $url; + } + + public function generateSecret(): string + { + return (new FixedBitNotation(5, 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567', true, true)) + ->encode(random_bytes($this->secretLength)); + } + + /** + * @param string $bytes + * @param int $start + */ + private function hashToInt(string $bytes, int $start): int + { + return unpack('N', substr(substr($bytes, $start), 0, 4))[1]; + } +} + +// NEXT_MAJOR: Remove class alias +class_alias('Sonata\GoogleAuthenticator\GoogleAuthenticator', 'Google\Authenticator\GoogleAuthenticator', false); diff --git a/vendor/sonata-project/google-authenticator/src/GoogleAuthenticatorInterface.php b/vendor/sonata-project/google-authenticator/src/GoogleAuthenticatorInterface.php new file mode 100644 index 000000000..70219f209 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/src/GoogleAuthenticatorInterface.php @@ -0,0 +1,44 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Sonata\GoogleAuthenticator; + +interface GoogleAuthenticatorInterface +{ + /** + * @param string $secret + * @param string $code + */ + public function checkCode($secret, $code): bool; + + /** + * NEXT_MAJOR: add the interface typehint to $time and remove deprecation. + * + * @param string $secret + * @param float|string|int|null|\DateTimeInterface $time + */ + public function getCode($secret, /* \DateTimeInterface */$time = null): string; + + /** + * NEXT_MAJOR: Remove this method. + * + * @param string $user + * @param string $hostname + * @param string $secret + * + * @deprecated deprecated as of 2.1 and will be removed in 3.0. Use Sonata\GoogleAuthenticator\GoogleQrUrl::generate() instead. + */ + public function getUrl($user, $hostname, $secret): string; + + public function generateSecret(): string; +} diff --git a/vendor/sonata-project/google-authenticator/src/GoogleQrUrl.php b/vendor/sonata-project/google-authenticator/src/GoogleQrUrl.php new file mode 100644 index 000000000..7e9a537a4 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/src/GoogleQrUrl.php @@ -0,0 +1,94 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Sonata\GoogleAuthenticator; + +/** + * Responsible for QR image url generation. + * + * @see https://developers.google.com/chart/infographics/docs/qr_codes + * @see https://github.com/google/google-authenticator/wiki/Key-Uri-Format + * + * @author Iltar van der Berg + */ +final class GoogleQrUrl +{ + /** + * Private by design. + */ + private function __construct() + { + } + + /** + * Generates a URL that is used to show a QR code. + * + * Account names may not contain a double colon (:). Valid account name + * examples: + * - "John.Doe@gmail.com" + * - "John Doe" + * - "John_Doe_976" + * + * The Issuer may not contain a double colon (:). The issuer is recommended + * to pass along. If used, it will also be appended before the accountName. + * + * The previous examples with the issuer "Acme inc" would result in label: + * - "Acme inc:John.Doe@gmail.com" + * - "Acme inc:John Doe" + * - "Acme inc:John_Doe_976" + * + * The contents of the label, issuer and secret will be encoded to generate + * a valid URL. + * + * @param string $accountName The account name to show and identify + * @param string $secret The secret is the generated secret unique to that user + * @param string|null $issuer Where you log in to + * @param int $size Image size in pixels, 200 will make it 200x200 + * + * @return string + */ + public static function generate(string $accountName, string $secret, string $issuer = null, int $size = 200): string + { + if ('' === $accountName || false !== strpos($accountName, ':')) { + throw RuntimeException::InvalidAccountName($accountName); + } + + if ('' === $secret) { + throw RuntimeException::InvalidSecret(); + } + + $label = $accountName; + $otpauthString = 'otpauth://totp/%s?secret=%s'; + + if (null !== $issuer) { + if ('' === $issuer || false !== strpos($issuer, ':')) { + throw RuntimeException::InvalidIssuer($issuer); + } + + // use both the issuer parameter and label prefix as recommended by Google for BC reasons + $label = $issuer.':'.$label; + $otpauthString .= '&issuer=%s'; + } + + $otpauthString = rawurlencode(sprintf($otpauthString, $label, $secret, $issuer)); + + return sprintf( + 'https://chart.googleapis.com/chart?chs=%1$dx%1$d&chld=M|0&cht=qr&chl=%2$s', + $size, + $otpauthString + ); + } +} + +// NEXT_MAJOR: Remove class alias +class_alias('Sonata\GoogleAuthenticator\GoogleQrUrl', 'Google\Authenticator\GoogleQrUrl', false); diff --git a/vendor/sonata-project/google-authenticator/src/RuntimeException.php b/vendor/sonata-project/google-authenticator/src/RuntimeException.php new file mode 100644 index 000000000..4d3cf5f63 --- /dev/null +++ b/vendor/sonata-project/google-authenticator/src/RuntimeException.php @@ -0,0 +1,46 @@ + + * + * For the full copyright and license information, please view the LICENSE + * file that was distributed with this source code. + */ + +namespace Sonata\GoogleAuthenticator; + +/** + * Contains runtime exception templates. + * + * @author Iltar van der Berg + */ +final class RuntimeException extends \RuntimeException +{ + public static function InvalidAccountName(string $accountName): self + { + return new self(sprintf( + 'The account name may not contain a double colon (:) and may not be an empty string. Given "%s".', + $accountName + )); + } + + public static function InvalidIssuer(string $issuer): self + { + return new self(sprintf( + 'The issuer name may not contain a double colon (:) and may not be an empty string. Given "%s".', + $issuer + )); + } + + public static function InvalidSecret(): self + { + return new self('The secret name may not be an empty string.'); + } +} + +// NEXT_MAJOR: Remove class alias +class_alias('Sonata\GoogleAuthenticator\RuntimeException', 'Google\Authenticator\RuntimeException', false); diff --git a/vendor/spomky-labs/base64url/.github/FUNDING.yml b/vendor/spomky-labs/base64url/.github/FUNDING.yml new file mode 100644 index 000000000..726574c1f --- /dev/null +++ b/vendor/spomky-labs/base64url/.github/FUNDING.yml @@ -0,0 +1,2 @@ +github: Spomky +patreon: FlorentMorselli diff --git a/vendor/spomky-labs/base64url/LICENSE b/vendor/spomky-labs/base64url/LICENSE new file mode 100644 index 000000000..506ff4857 --- /dev/null +++ b/vendor/spomky-labs/base64url/LICENSE @@ -0,0 +1,22 @@ +The MIT License (MIT) + +Copyright (c) 2014-2018 Spomky-Labs + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + diff --git a/vendor/spomky-labs/base64url/composer.json b/vendor/spomky-labs/base64url/composer.json new file mode 100644 index 000000000..1f3941b9e --- /dev/null +++ b/vendor/spomky-labs/base64url/composer.json @@ -0,0 +1,35 @@ +{ + "name": "spomky-labs/base64url", + "description": "Base 64 URL Safe Encoding/Decoding PHP Library", + "type": "library", + "license": "MIT", + "keywords": ["Base64", "URL", "Safe", "RFC4648"], + "homepage": "https://github.com/Spomky-Labs/base64url", + "authors": [ + { + "name": "Florent Morselli", + "homepage": "https://github.com/Spomky-Labs/base64url/contributors" + } + ], + "autoload": { + "psr-4": { + "Base64Url\\": "src/" + } + }, + "autoload-dev": { + "psr-4": { + "Base64Url\\Test\\": "tests/" + } + }, + "require": { + "php": ">=7.1" + }, + "require-dev": { + "phpstan/extension-installer": "^1.0", + "phpstan/phpstan": "^0.11|^0.12", + "phpstan/phpstan-beberlei-assert": "^0.11|^0.12", + "phpstan/phpstan-deprecation-rules": "^0.11|^0.12", + "phpstan/phpstan-phpunit": "^0.11|^0.12", + "phpstan/phpstan-strict-rules": "^0.11|^0.12" + } +} diff --git a/vendor/spomky-labs/base64url/src/Base64Url.php b/vendor/spomky-labs/base64url/src/Base64Url.php new file mode 100644 index 000000000..260215ae4 --- /dev/null +++ b/vendor/spomky-labs/base64url/src/Base64Url.php @@ -0,0 +1,56 @@ +setRiskyAllowed(true) + ->setRules([ + // Rulesets + '@PSR2' => true, + '@PhpCsFixer' => true, + '@PhpCsFixer:risky' => true, + '@PHP56Migration:risky' => true, + '@PHPUnit57Migration:risky' => true, + + // Additional rules + 'fopen_flags' => true, + 'linebreak_after_opening_tag' => true, + 'native_function_invocation' => true, + + // --- Diffs from @PhpCsFixer / @PhpCsFixer:risky --- + + // This is just prettier / easier to read. + 'concat_space' => ['spacing' => 'one'], + + // This causes strange ordering with codegen'd classes. We might be + // able to enable this if we update codegen to output class elements + // in the correct order. + 'ordered_class_elements' => false, + + // Keep this disabled to avoid unnecessary diffs in PHPDoc comments of + // codegen'd classes. + 'phpdoc_align' => false, + + // This is a "risky" rule that causes a bug in our codebase. + // Specifically, in `StripeObject.updateAttributes` we construct new + // `StripeObject`s for metadata. We can't use `self` there because it + // needs to be a raw `StripeObject`. + 'self_accessor' => false, + ]) +; diff --git a/vendor/stripe/stripe-php/CHANGELOG.md b/vendor/stripe/stripe-php/CHANGELOG.md new file mode 100644 index 000000000..935912c7c --- /dev/null +++ b/vendor/stripe/stripe-php/CHANGELOG.md @@ -0,0 +1,1311 @@ +# Changelog + +## 7.66.1 - 2020-12-01 +* [#1054](https://github.com/stripe/stripe-php/pull/1054) Improve error message for invalid keys in StripeClient + +## 7.66.0 - 2020-11-24 +* [#1053](https://github.com/stripe/stripe-php/pull/1053) Update PHPDocs + +## 7.65.0 - 2020-11-19 +* [#1050](https://github.com/stripe/stripe-php/pull/1050) Added constants for `proration_behavior` on `Subscription` + +## 7.64.0 - 2020-11-18 +* [#1049](https://github.com/stripe/stripe-php/pull/1049) Update PHPDocs + +## 7.63.0 - 2020-11-17 +* [#1048](https://github.com/stripe/stripe-php/pull/1048) Update PHPDocs +* [#1046](https://github.com/stripe/stripe-php/pull/1046) Force IPv4 resolving + +## 7.62.0 - 2020-11-09 +* [#1041](https://github.com/stripe/stripe-php/pull/1041) Add missing constants on `Event` +* [#1038](https://github.com/stripe/stripe-php/pull/1038) Update PHPDocs + +## 7.61.0 - 2020-10-20 +* [#1030](https://github.com/stripe/stripe-php/pull/1030) Add support for `jp_rn` and `ru_kpp` as a `type` on `TaxId` + +## 7.60.0 - 2020-10-15 +* [#1027](https://github.com/stripe/stripe-php/pull/1027) Warn if opts are in params + +## 7.58.0 - 2020-10-14 +* [#1026](https://github.com/stripe/stripe-php/pull/1026) Add support for the Payout Reverse API + +## 7.57.0 - 2020-09-29 +* [#1020](https://github.com/stripe/stripe-php/pull/1020) Add support for the `SetupAttempt` resource and List API + +## 7.56.0 - 2020-09-25 +* [#1019](https://github.com/stripe/stripe-php/pull/1019) Update PHPDocs + +## 7.55.0 - 2020-09-24 +* [#1018](https://github.com/stripe/stripe-php/pull/1018) Multiple API changes + * Updated PHPDocs + * Added `TYPE_CONTRIBUTION` as a constant on `BalanceTransaction` + +## 7.54.0 - 2020-09-23 +* [#1017](https://github.com/stripe/stripe-php/pull/1017) Updated PHPDoc + +## 7.53.1 - 2020-09-22 +* [#1015](https://github.com/stripe/stripe-php/pull/1015) Bugfix: don't error on systems with php_uname in disablefunctions with whitespace + +## 7.53.0 - 2020-09-21 +* [#1016](https://github.com/stripe/stripe-php/pull/1016) Updated PHPDocs + +## 7.52.0 - 2020-09-08 +* [#1010](https://github.com/stripe/stripe-php/pull/1010) Update PHPDocs + +## 7.51.0 - 2020-09-02 +* [#1007](https://github.com/stripe/stripe-php/pull/1007) Multiple API changes + * Add support for the Issuing Dispute Submit API + * Add constants for `payment_status` on Checkout `Session` +* [#1003](https://github.com/stripe/stripe-php/pull/1003) Add trim to getSignatures to allow for leading whitespace. + +## 7.50.0 - 2020-08-28 +* [#1005](https://github.com/stripe/stripe-php/pull/1005) Updated PHPDocs + +## 7.49.0 - 2020-08-19 +* [#998](https://github.com/stripe/stripe-php/pull/998) PHPDocs updated + +## 7.48.0 - 2020-08-17 +* [#997](https://github.com/stripe/stripe-php/pull/997) PHPDocs updated +* [#996](https://github.com/stripe/stripe-php/pull/996) Fixing telemetry + +## 7.47.0 - 2020-08-13 +* [#994](https://github.com/stripe/stripe-php/pull/994) Nullable balance_transactions on issuing disputes +* [#991](https://github.com/stripe/stripe-php/pull/991) Fix invalid return types in OAuthService + +## 7.46.1 - 2020-08-07 +* [#990](https://github.com/stripe/stripe-php/pull/990) PHPdoc changes + +## 7.46.0 - 2020-08-05 +* [#989](https://github.com/stripe/stripe-php/pull/989) Add support for the `PromotionCode` resource and APIs + +## 7.45.0 - 2020-07-28 +* [#981](https://github.com/stripe/stripe-php/pull/981) PHPdoc updates + +## 7.44.0 - 2020-07-20 +* [#948](https://github.com/stripe/stripe-php/pull/948) Add `first()` and `last()` functions to `Collection` + +## 7.43.0 - 2020-07-17 +* [#975](https://github.com/stripe/stripe-php/pull/975) Add support for `political_exposure` on `Person` + +## 7.42.0 - 2020-07-15 +* [#974](https://github.com/stripe/stripe-php/pull/974) Add new constants for `purpose` on `File` + +## 7.41.1 - 2020-07-15 +* [#973](https://github.com/stripe/stripe-php/pull/973) Multiple PHPDoc fixes + +## 7.41.0 - 2020-07-14 +* [#971](https://github.com/stripe/stripe-php/pull/971) Adds enum values for `billing_address_collection` on Checkout `Session` + +## 7.40.0 - 2020-07-06 +* [#964](https://github.com/stripe/stripe-php/pull/964) Add OAuthService + +## 7.39.0 - 2020-06-25 +* [#960](https://github.com/stripe/stripe-php/pull/960) Add constants for `payment_behavior` on `Subscription` + +## 7.38.0 - 2020-06-24 +* [#959](https://github.com/stripe/stripe-php/pull/959) Add multiple constants missing for `Event` + +## 7.37.2 - 2020-06-23 +* [#957](https://github.com/stripe/stripe-php/pull/957) Updated PHPDocs + +## 7.37.1 - 2020-06-11 +* [#952](https://github.com/stripe/stripe-php/pull/952) Improve PHPDoc + +## 7.37.0 - 2020-06-09 +* [#950](https://github.com/stripe/stripe-php/pull/950) Add support for `id_npwp` and `my_frp` as `type` on `TaxId` + +## 7.36.2 - 2020-06-03 +* [#946](https://github.com/stripe/stripe-php/pull/946) Update PHPDoc + +## 7.36.1 - 2020-05-28 +* [#938](https://github.com/stripe/stripe-php/pull/938) Remove extra array_keys() call. +* [#942](https://github.com/stripe/stripe-php/pull/942) fix autopagination for service methods + +## 7.36.0 - 2020-05-21 +* [#937](https://github.com/stripe/stripe-php/pull/937) Add support for `ae_trn`, `cl_tin` and `sa_vat` as `type` on `TaxId` + +## 7.35.0 - 2020-05-20 +* [#936](https://github.com/stripe/stripe-php/pull/936) Add `anticipation_repayment` as a `type` on `BalanceTransaction` + +## 7.34.0 - 2020-05-18 +* [#934](https://github.com/stripe/stripe-php/pull/934) Add support for `issuing_dispute` as a `type` on `BalanceTransaction` + +## 7.33.1 - 2020-05-15 +* [#933](https://github.com/stripe/stripe-php/pull/933) Services bugfix: convert nested null params to empty strings + +## 7.33.0 - 2020-05-14 +* [#771](https://github.com/stripe/stripe-php/pull/771) Introduce client/services API. The [migration guide](https://github.com/stripe/stripe-php/wiki/Migration-to-StripeClient-and-services-in-7.33.0) contains before & after examples of the backwards-compatible changes. + +## 7.32.1 - 2020-05-13 +* [#932](https://github.com/stripe/stripe-php/pull/932) Fix multiple PHPDoc + +## 7.32.0 - 2020-05-11 +* [#931](https://github.com/stripe/stripe-php/pull/931) Add support for the `LineItem` resource and APIs + +## 7.31.0 - 2020-05-01 +* [#927](https://github.com/stripe/stripe-php/pull/927) Add support for new tax IDs + +## 7.30.0 - 2020-04-29 +* [#924](https://github.com/stripe/stripe-php/pull/924) Add support for the `Price` resource and APIs + +## 7.29.0 - 2020-04-22 +* [#920](https://github.com/stripe/stripe-php/pull/920) Add support for the `Session` resource and APIs on the `BillingPortal` namespace + +## 7.28.1 - 2020-04-10 +* [#915](https://github.com/stripe/stripe-php/pull/915) Improve PHPdocs for many classes + +## 7.28.0 - 2020-04-03 +* [#912](https://github.com/stripe/stripe-php/pull/912) Preserve backwards compatibility for typoed `TYPE_ADJUSTEMENT` enum. +* [#911](https://github.com/stripe/stripe-php/pull/911) Codegenerated PHPDoc for nested resources +* [#902](https://github.com/stripe/stripe-php/pull/902) Update docstrings for nested resources + +## 7.27.3 - 2020-03-18 +* [#899](https://github.com/stripe/stripe-php/pull/899) Convert keys to strings in `StripeObject::toArray()` + +## 7.27.2 - 2020-03-13 +* [#894](https://github.com/stripe/stripe-php/pull/894) Multiple PHPDocs changes + +## 7.27.1 - 2020-03-03 +* [#890](https://github.com/stripe/stripe-php/pull/890) Update PHPdoc + +## 7.27.0 - 2020-02-28 +* [#889](https://github.com/stripe/stripe-php/pull/889) Add new constants for `type` on `TaxId` + +## 7.26.0 - 2020-02-26 +* [#886](https://github.com/stripe/stripe-php/pull/886) Add support for listing Checkout `Session` +* [#883](https://github.com/stripe/stripe-php/pull/883) Add PHPDoc class descriptions + +## 7.25.0 - 2020-02-14 +* [#879](https://github.com/stripe/stripe-php/pull/879) Make `\Stripe\Collection` implement `\Countable` +* [#875](https://github.com/stripe/stripe-php/pull/875) Last set of PHP-CS-Fixer updates +* [#874](https://github.com/stripe/stripe-php/pull/874) Enable php_unit_internal_class rule +* [#873](https://github.com/stripe/stripe-php/pull/873) Add support for phpDocumentor in Makefile +* [#872](https://github.com/stripe/stripe-php/pull/872) Another batch of PHP-CS-Fixer rule updates +* [#871](https://github.com/stripe/stripe-php/pull/871) Fix a few PHPDoc comments +* [#870](https://github.com/stripe/stripe-php/pull/870) More PHP-CS-Fixer tweaks + +## 7.24.0 - 2020-02-10 +* [#862](https://github.com/stripe/stripe-php/pull/862) Better PHPDoc +* [#865](https://github.com/stripe/stripe-php/pull/865) Get closer to `@PhpCsFixer` standard ruleset + +## 7.23.0 - 2020-02-05 +* [#860](https://github.com/stripe/stripe-php/pull/860) Add PHPDoc types for expandable fields +* [#858](https://github.com/stripe/stripe-php/pull/858) Use `native_function_invocation` PHPStan rule +* [#857](https://github.com/stripe/stripe-php/pull/857) Update PHPDoc on nested resources +* [#855](https://github.com/stripe/stripe-php/pull/855) PHPDoc: `StripeObject` -> `ErrorObject` where appropriate +* [#837](https://github.com/stripe/stripe-php/pull/837) Autogen diff +* [#854](https://github.com/stripe/stripe-php/pull/854) Upgrade PHPStan and fix settings +* [#850](https://github.com/stripe/stripe-php/pull/850) Yet more PHPDoc updates + +## 7.22.0 - 2020-01-31 +* [#849](https://github.com/stripe/stripe-php/pull/849) Add new constants for `type` on `TaxId` +* [#843](https://github.com/stripe/stripe-php/pull/843) Even more PHPDoc fixes +* [#841](https://github.com/stripe/stripe-php/pull/841) More PHPDoc fixes + +## 7.21.1 - 2020-01-29 +* [#840](https://github.com/stripe/stripe-php/pull/840) Update phpdocs across multiple resources. + +## 7.21.0 - 2020-01-28 +* [#839](https://github.com/stripe/stripe-php/pull/839) Add support for `TYPE_ES_CIF` on `TaxId` + +## 7.20.0 - 2020-01-23 +* [#836](https://github.com/stripe/stripe-php/pull/836) Add new type values for `TaxId` + +## 7.19.1 - 2020-01-14 +* [#831](https://github.com/stripe/stripe-php/pull/831) Fix incorrect `UnexpectedValueException` instantiation + +## 7.19.0 - 2020-01-14 +* [#830](https://github.com/stripe/stripe-php/pull/830) Add support for `CreditNoteLineItem` + +## 7.18.0 - 2020-01-13 +* [#829](https://github.com/stripe/stripe-php/pull/829) Don't call php_uname function if disabled by php.ini + +## 7.17.0 - 2020-01-08 +* [#821](https://github.com/stripe/stripe-php/pull/821) Improve PHPDoc types for `ApiErrorException.get/setJsonBody()` methods + +## 7.16.0 - 2020-01-06 +* [#826](https://github.com/stripe/stripe-php/pull/826) Rename remaining `$options` to `$opts` +* [#825](https://github.com/stripe/stripe-php/pull/825) Update PHPDoc + +## 7.15.0 - 2020-01-06 +* [#824](https://github.com/stripe/stripe-php/pull/824) Add constant `TYPE_SG_UEN` to `TaxId` + +## 7.14.2 - 2019-12-04 +* [#816](https://github.com/stripe/stripe-php/pull/816) Disable autoloader when checking for `Throwable` + +## 7.14.1 - 2019-11-26 +* [#812](https://github.com/stripe/stripe-php/pull/812) Fix invalid PHPdoc on `Subscription` + +## 7.14.0 - 2019-11-26 +* [#811](https://github.com/stripe/stripe-php/pull/811) Add support for `CreditNote` preview. + +## 7.13.0 - 2019-11-19 +* [#808](https://github.com/stripe/stripe-php/pull/808) Add support for listing lines on an Invoice directly via `Invoice::allLines()` + +## 7.12.0 - 2019-11-08 + +- [#805](https://github.com/stripe/stripe-php/pull/805) Add Source::allSourceTransactions and SubscriptionItem::allUsageRecordSummaries +- [#798](https://github.com/stripe/stripe-php/pull/798) The argument of `array_key_exists` cannot be `null` +- [#803](https://github.com/stripe/stripe-php/pull/803) Removed unwanted got + +## 7.11.0 - 2019-11-06 + +- [#797](https://github.com/stripe/stripe-php/pull/797) Add support for reverse pagination + +## 7.10.0 - 2019-11-05 + +- [#795](https://github.com/stripe/stripe-php/pull/795) Add support for `Mandate` + +## 7.9.0 - 2019-11-05 + +- [#794](https://github.com/stripe/stripe-php/pull/794) Add PHPDoc to `ApiResponse` +- [#792](https://github.com/stripe/stripe-php/pull/792) Use single quotes for `OBJECT_NAME` constants + +## 7.8.0 - 2019-11-05 + +- [#790](https://github.com/stripe/stripe-php/pull/790) Mark nullable fields in PHPDoc +- [#788](https://github.com/stripe/stripe-php/pull/788) Early codegen fixes +- [#787](https://github.com/stripe/stripe-php/pull/787) Use PHPStan in Travis CI + +## 7.7.1 - 2019-10-25 + +- [#781](https://github.com/stripe/stripe-php/pull/781) Fix telemetry header +- [#780](https://github.com/stripe/stripe-php/pull/780) Contributor Convenant + +## 7.7.0 - 2019-10-23 + +- [#776](https://github.com/stripe/stripe-php/pull/776) Add `CAPABILITY_TRANSFERS` to `Account` +- [#778](https://github.com/stripe/stripe-php/pull/778) Add support for `TYPE_MX_RFC` type on `TaxId` + +## 7.6.0 - 2019-10-22 + +- [#770](https://github.com/stripe/stripe-php/pull/770) Add missing constants for Customer's `TaxId` + +## 7.5.0 - 2019-10-18 + +- [#768](https://github.com/stripe/stripe-php/pull/768) Redact API key in `RequestOptions` debug info + +## 7.4.0 - 2019-10-15 + +- [#764](https://github.com/stripe/stripe-php/pull/764) Add support for HTTP request monitoring callback + +## 7.3.1 - 2019-10-07 + +- [#755](https://github.com/stripe/stripe-php/pull/755) Respect Stripe-Should-Retry and Retry-After headers + +## 7.3.0 - 2019-10-02 + +- [#752](https://github.com/stripe/stripe-php/pull/752) Add `payment_intent.canceled` and `setup_intent.canceled` events +- [#749](https://github.com/stripe/stripe-php/pull/749) Call `toArray()` on objects only + +## 7.2.2 - 2019-09-24 + +- [#746](https://github.com/stripe/stripe-php/pull/746) Add missing decline codes + +## 7.2.1 - 2019-09-23 + +- [#744](https://github.com/stripe/stripe-php/pull/744) Added new PHPDoc + +## 7.2.0 - 2019-09-17 + +- [#738](https://github.com/stripe/stripe-php/pull/738) Added missing constants for `SetupIntent` events + +## 7.1.1 - 2019-09-16 + +- [#737](https://github.com/stripe/stripe-php/pull/737) Added new PHPDoc + +## 7.1.0 - 2019-09-13 + +- [#736](https://github.com/stripe/stripe-php/pull/736) Make `CaseInsensitiveArray` countable and traversable + +## 7.0.2 - 2019-09-06 + +- [#729](https://github.com/stripe/stripe-php/pull/729) Fix usage of `SignatureVerificationException` in PHPDoc blocks + +## 7.0.1 - 2019-09-05 + +- [#728](https://github.com/stripe/stripe-php/pull/728) Clean up Collection + +## 7.0.0 - 2019-09-03 + +Major version release. The [migration guide](https://github.com/stripe/stripe-php/wiki/Migration-guide-for-v7) contains a detailed list of backwards-incompatible changes with upgrade instructions. + +Pull requests included in this release (cf. [#552](https://github.com/stripe/stripe-php/pull/552)) (⚠️ = breaking changes): + +- ⚠️ Drop support for PHP 5.4 ([#551](https://github.com/stripe/stripe-php/pull/551)) +- ⚠️ Drop support for PHP 5.5 ([#554](https://github.com/stripe/stripe-php/pull/554)) +- Bump dependencies ([#553](https://github.com/stripe/stripe-php/pull/553)) +- Remove `CURLFile` check ([#555](https://github.com/stripe/stripe-php/pull/555)) +- Update constant definitions for PHP >= 5.6 ([#556](https://github.com/stripe/stripe-php/pull/556)) +- ⚠️ Remove `FileUpload` alias ([#557](https://github.com/stripe/stripe-php/pull/557)) +- Remove `curl_reset` check ([#570](https://github.com/stripe/stripe-php/pull/570)) +- Use `\Stripe\::class` constant instead of strings ([#643](https://github.com/stripe/stripe-php/pull/643)) +- Use `array_column` to flatten params ([#686](https://github.com/stripe/stripe-php/pull/686)) +- ⚠️ Remove deprecated methods ([#692](https://github.com/stripe/stripe-php/pull/692)) +- ⚠️ Remove `IssuerFraudRecord` ([#696](https://github.com/stripe/stripe-php/pull/696)) +- Update constructors of Stripe exception classes ([#559](https://github.com/stripe/stripe-php/pull/559)) +- Fix remaining TODOs ([#700](https://github.com/stripe/stripe-php/pull/700)) +- Use yield for autopagination ([#703](https://github.com/stripe/stripe-php/pull/703)) +- ⚠️ Rename fake magic methods and rewrite array conversion ([#704](https://github.com/stripe/stripe-php/pull/704)) +- Add `ErrorObject` to Stripe exceptions ([#705](https://github.com/stripe/stripe-php/pull/705)) +- Start using PHP CS Fixer ([#706](https://github.com/stripe/stripe-php/pull/706)) +- Update error messages for nested resource operations ([#708](https://github.com/stripe/stripe-php/pull/708)) +- Upgrade retry logic ([#707](https://github.com/stripe/stripe-php/pull/707)) +- ⚠️ `Collection` improvements / fixes ([#715](https://github.com/stripe/stripe-php/pull/715)) +- ⚠️ Modernize exceptions ([#709](https://github.com/stripe/stripe-php/pull/709)) +- Add constants for error codes ([#716](https://github.com/stripe/stripe-php/pull/716)) +- Update certificate bundle ([#717](https://github.com/stripe/stripe-php/pull/717)) +- Retry requests on a 429 that's a lock timeout ([#718](https://github.com/stripe/stripe-php/pull/718)) +- Fix `toArray()` calls ([#719](https://github.com/stripe/stripe-php/pull/719)) +- Couple of fixes for PHP 7.4 ([#725](https://github.com/stripe/stripe-php/pull/725)) + +## 6.43.1 - 2019-08-29 + +- [#722](https://github.com/stripe/stripe-php/pull/722) Make `LoggerInterface::error` compatible with its PSR-3 counterpart +- [#714](https://github.com/stripe/stripe-php/pull/714) Add `pending_setup_intent` property in `Subscription` +- [#713](https://github.com/stripe/stripe-php/pull/713) Add typehint to `ApiResponse` +- [#712](https://github.com/stripe/stripe-php/pull/712) Fix comment +- [#701](https://github.com/stripe/stripe-php/pull/701) Start testing PHP 7.3 + +## 6.43.0 - 2019-08-09 + +- [#694](https://github.com/stripe/stripe-php/pull/694) Add `SubscriptionItem::createUsageRecord` method + +## 6.42.0 - 2019-08-09 + +- [#688](https://github.com/stripe/stripe-php/pull/688) Remove `SubscriptionScheduleRevision` + - Note that this is technically a breaking change, however we've chosen to release it as a minor version in light of the fact that this resource and its API methods were virtually unused. + +## 6.41.0 - 2019-07-31 + +- [#683](https://github.com/stripe/stripe-php/pull/683) Move the List Balance History API to `/v1/balance_transactions` + +## 6.40.0 - 2019-06-27 + +- [#675](https://github.com/stripe/stripe-php/pull/675) Add support for `SetupIntent` resource and APIs + +## 6.39.2 - 2019-06-26 + +- [#676](https://github.com/stripe/stripe-php/pull/676) Fix exception message in `CustomerBalanceTransaction::update()` + +## 6.39.1 - 2019-06-25 + +- [#674](https://github.com/stripe/stripe-php/pull/674) Add new constants for `collection_method` on `Invoice` + +## 6.39.0 - 2019-06-24 + +- [#673](https://github.com/stripe/stripe-php/pull/673) Enable request latency telemetry by default + +## 6.38.0 - 2019-06-17 + +- [#649](https://github.com/stripe/stripe-php/pull/649) Add support for `CustomerBalanceTransaction` resource and APIs + +## 6.37.2 - 2019-06-17 + +- [#671](https://github.com/stripe/stripe-php/pull/671) Add new PHPDoc +- [#672](https://github.com/stripe/stripe-php/pull/672) Add constants for `submit_type` on Checkout `Session` + +## 6.37.1 - 2019-06-14 + +- [#670](https://github.com/stripe/stripe-php/pull/670) Add new PHPDoc + +## 6.37.0 - 2019-05-23 + +- [#663](https://github.com/stripe/stripe-php/pull/663) Add support for `radar.early_fraud_warning` resource + +## 6.36.0 - 2019-05-22 + +- [#661](https://github.com/stripe/stripe-php/pull/661) Add constants for new TaxId types +- [#662](https://github.com/stripe/stripe-php/pull/662) Add constants for BalanceTransaction types + +## 6.35.2 - 2019-05-20 + +- [#655](https://github.com/stripe/stripe-php/pull/655) Add constants for payment intent statuses +- [#659](https://github.com/stripe/stripe-php/pull/659) Fix PHPDoc for various nested Account actions +- [#660](https://github.com/stripe/stripe-php/pull/660) Fix various PHPDoc + +## 6.35.1 - 2019-05-20 + +- [#658](https://github.com/stripe/stripe-php/pull/658) Use absolute value when checking timestamp tolerance + +## 6.35.0 - 2019-05-14 + +- [#651](https://github.com/stripe/stripe-php/pull/651) Add support for the Capability resource and APIs + +## 6.34.6 - 2019-05-13 + +- [#654](https://github.com/stripe/stripe-php/pull/654) Fix typo in definition of `Event::PAYMENT_METHOD_ATTACHED` constant + +## 6.34.5 - 2019-05-06 + +- [#647](https://github.com/stripe/stripe-php/pull/647) Set the return type to static for more operations + +## 6.34.4 - 2019-05-06 + +- [#650](https://github.com/stripe/stripe-php/pull/650) Add missing constants for Event types + +## 6.34.3 - 2019-05-01 + +- [#644](https://github.com/stripe/stripe-php/pull/644) Update return type to `static` to improve static analysis +- [#645](https://github.com/stripe/stripe-php/pull/645) Fix constant for `payment_intent.payment_failed` + +## 6.34.2 - 2019-04-26 + +- [#642](https://github.com/stripe/stripe-php/pull/642) Fix an issue where existing idempotency keys would be overwritten when using automatic retries + +## 6.34.1 - 2019-04-25 + +- [#640](https://github.com/stripe/stripe-php/pull/640) Add missing phpdocs + +## 6.34.0 - 2019-04-24 + +- [#626](https://github.com/stripe/stripe-php/pull/626) Add support for the `TaxRate` resource and APIs +- [#639](https://github.com/stripe/stripe-php/pull/639) Fix multiple phpdoc issues + +## 6.33.0 - 2019-04-22 + +- [#630](https://github.com/stripe/stripe-php/pull/630) Add support for the `TaxId` resource and APIs + +## 6.32.1 - 2019-04-19 + +- [#636](https://github.com/stripe/stripe-php/pull/636) Correct type of `$personId` in PHPDoc + +## 6.32.0 - 2019-04-18 + +- [#621](https://github.com/stripe/stripe-php/pull/621) Add support for `CreditNote` + +## 6.31.5 - 2019-04-12 + +- [#628](https://github.com/stripe/stripe-php/pull/628) Add constants for `person.*` event types +- [#628](https://github.com/stripe/stripe-php/pull/628) Add missing constants for `Account` and `Person` + +## 6.31.4 - 2019-04-05 + +- [#624](https://github.com/stripe/stripe-php/pull/624) Fix encoding of nested parameters in multipart requests + +## 6.31.3 - 2019-04-02 + +- [#623](https://github.com/stripe/stripe-php/pull/623) Only use HTTP/2 with curl >= 7.60.0 + +## 6.31.2 - 2019-03-25 + +- [#619](https://github.com/stripe/stripe-php/pull/619) Fix PHPDoc return types for list methods for nested resources + +## 6.31.1 - 2019-03-22 + +- [#612](https://github.com/stripe/stripe-php/pull/612) Add a lot of constants +- [#614](https://github.com/stripe/stripe-php/pull/614) Add missing subscription status constants + +## 6.31.0 - 2019-03-18 + +- [#600](https://github.com/stripe/stripe-php/pull/600) Add support for the `PaymentMethod` resource and APIs +- [#606](https://github.com/stripe/stripe-php/pull/606) Add support for retrieving a Checkout `Session` +- [#611](https://github.com/stripe/stripe-php/pull/611) Add support for deleting a Terminal `Location` and `Reader` + +## 6.30.5 - 2019-03-11 + +- [#607](https://github.com/stripe/stripe-php/pull/607) Correctly handle case where a metadata key is called `metadata` + +## 6.30.4 - 2019-02-27 + +- [#602](https://github.com/stripe/stripe-php/pull/602) Add `subscription_schedule` to `Subscription` for PHPDoc. + +## 6.30.3 - 2019-02-26 + +- [#603](https://github.com/stripe/stripe-php/pull/603) Improve PHPDoc on the `Source` object to cover all types of Sources currently supported. + +## 6.30.2 - 2019-02-25 + +- [#601](https://github.com/stripe/stripe-php/pull/601) Fix PHPDoc across multiple resources and add support for new events. + +## 6.30.1 - 2019-02-16 + +- [#599](https://github.com/stripe/stripe-php/pull/599) Fix PHPDoc for `SubscriptionSchedule` and `SubscriptionScheduleRevision` + +## 6.30.0 - 2019-02-12 + +- [#590](https://github.com/stripe/stripe-php/pull/590) Add support for `SubscriptionSchedule` and `SubscriptionScheduleRevision` + +## 6.29.3 - 2019-01-31 + +- [#592](https://github.com/stripe/stripe-php/pull/592) Some more PHPDoc fixes + +## 6.29.2 - 2019-01-31 + +- [#591](https://github.com/stripe/stripe-php/pull/591) Fix PHPDoc for nested resources + +## 6.29.1 - 2019-01-25 + +- [#566](https://github.com/stripe/stripe-php/pull/566) Fix dangling message contents +- [#586](https://github.com/stripe/stripe-php/pull/586) Don't overwrite `CURLOPT_HTTP_VERSION` option + +## 6.29.0 - 2019-01-23 + +- [#579](https://github.com/stripe/stripe-php/pull/579) Rename `CheckoutSession` to `Session` and move it under the `Checkout` namespace. This is a breaking change, but we've reached out to affected merchants and all new merchants would use the new approach. + +## 6.28.1 - 2019-01-21 + +- [#580](https://github.com/stripe/stripe-php/pull/580) Properly serialize `individual` on `Account` objects + +## 6.28.0 - 2019-01-03 + +- [#576](https://github.com/stripe/stripe-php/pull/576) Add support for iterating directly over `Collection` instances + +## 6.27.0 - 2018-12-21 + +- [#571](https://github.com/stripe/stripe-php/pull/571) Add support for the `CheckoutSession` resource + +## 6.26.0 - 2018-12-11 + +- [#568](https://github.com/stripe/stripe-php/pull/568) Enable persistent connections + +## 6.25.0 - 2018-12-10 + +- [#567](https://github.com/stripe/stripe-php/pull/567) Add support for account links + +## 6.24.0 - 2018-11-28 + +- [#562](https://github.com/stripe/stripe-php/pull/562) Add support for the Review resource +- [#564](https://github.com/stripe/stripe-php/pull/564) Add event name constants for subscription schedule aborted/expiring + +## 6.23.0 - 2018-11-27 + +- [#542](https://github.com/stripe/stripe-php/pull/542) Add support for `ValueList` and `ValueListItem` for Radar + +## 6.22.1 - 2018-11-20 + +- [#561](https://github.com/stripe/stripe-php/pull/561) Add cast and some docs to telemetry introduced in 6.22.0/549 + +## 6.22.0 - 2018-11-15 + +- [#549](https://github.com/stripe/stripe-php/pull/549) Add support for client telemetry + +## 6.21.1 - 2018-11-12 + +- [#548](https://github.com/stripe/stripe-php/pull/548) Don't mutate `Exception` class properties from `OAuthBase` error + +## 6.21.0 - 2018-11-08 + +- [#537](https://github.com/stripe/stripe-php/pull/537) Add new API endpoints for the `Invoice` resource. + +## 6.20.1 - 2018-11-07 + +- [#546](https://github.com/stripe/stripe-php/pull/546) Drop files from the Composer package that aren't needed in the release + +## 6.20.0 - 2018-10-30 + +- [#536](https://github.com/stripe/stripe-php/pull/536) Add support for the `Person` resource +- [#541](https://github.com/stripe/stripe-php/pull/541) Add support for the `WebhookEndpoint` resource + +## 6.19.5 - 2018-10-17 + +- [#539](https://github.com/stripe/stripe-php/pull/539) Fix methods on `\Stripe\PaymentIntent` to properly pass arguments to the API. + +## 6.19.4 - 2018-10-11 + +- [#534](https://github.com/stripe/stripe-php/pull/534) Fix PSR-4 autoloading for `\Stripe\FileUpload` class alias + +## 6.19.3 - 2018-10-09 + +- [#530](https://github.com/stripe/stripe-php/pull/530) Add constants for `flow` (`FLOW_*`), `status` (`STATUS_*`) and `usage` (`USAGE_*`) on `\Stripe\Source` + +## 6.19.2 - 2018-10-08 + +- [#531](https://github.com/stripe/stripe-php/pull/531) Store HTTP response headers in case-insensitive array + +## 6.19.1 - 2018-09-25 + +- [#526](https://github.com/stripe/stripe-php/pull/526) Ignore null values in request parameters + +## 6.19.0 - 2018-09-24 + +- [#523](https://github.com/stripe/stripe-php/pull/523) Add support for Stripe Terminal + +## 6.18.0 - 2018-09-24 + +- [#520](https://github.com/stripe/stripe-php/pull/520) Rename `\Stripe\FileUpload` to `\Stripe\File` + +## 6.17.2 - 2018-09-18 + +- [#522](https://github.com/stripe/stripe-php/pull/522) Fix warning when adding a new additional owner to an existing array + +## 6.17.1 - 2018-09-14 + +- [#517](https://github.com/stripe/stripe-php/pull/517) Integer-index encode all sequential arrays + +## 6.17.0 - 2018-09-05 + +- [#514](https://github.com/stripe/stripe-php/pull/514) Add support for reporting resources + +## 6.16.0 - 2018-08-23 + +- [#509](https://github.com/stripe/stripe-php/pull/509) Add support for usage record summaries + +## 6.15.0 - 2018-08-03 + +- [#504](https://github.com/stripe/stripe-php/pull/504) Add cancel support for topups + +## 6.14.0 - 2018-08-02 + +- [#505](https://github.com/stripe/stripe-php/pull/505) Add support for file links + +## 6.13.0 - 2018-07-31 + +- [#502](https://github.com/stripe/stripe-php/pull/502) Add `isDeleted()` method to `\Stripe\StripeObject` + +## 6.12.0 - 2018-07-28 + +- [#501](https://github.com/stripe/stripe-php/pull/501) Add support for scheduled query runs (`\Stripe\Sigma\ScheduledQueryRun`) for Sigma + +## 6.11.0 - 2018-07-26 + +- [#500](https://github.com/stripe/stripe-php/pull/500) Add support for Stripe Issuing + +## 6.10.4 - 2018-07-19 + +- [#498](https://github.com/stripe/stripe-php/pull/498) Internal improvements to the `\Stripe\ApiResource.classUrl()` method + +## 6.10.3 - 2018-07-16 + +- [#497](https://github.com/stripe/stripe-php/pull/497) Use HTTP/2 only for HTTPS requests + +## 6.10.2 - 2018-07-11 + +- [#494](https://github.com/stripe/stripe-php/pull/494) Enable HTTP/2 support + +## 6.10.1 - 2018-07-10 + +- [#493](https://github.com/stripe/stripe-php/pull/493) Add PHPDoc for `auto_advance` on `\Stripe\Invoice` + +## 6.10.0 - 2018-06-28 + +- [#488](https://github.com/stripe/stripe-php/pull/488) Add support for `$appPartnerId` to `Stripe::setAppInfo()` + +## 6.9.0 - 2018-06-28 + +- [#487](https://github.com/stripe/stripe-php/pull/487) Add support for payment intents + +## 6.8.2 - 2018-06-24 + +- [#486](https://github.com/stripe/stripe-php/pull/486) Make `Account.deauthorize()` return the `StripeObject` from the API + +## 6.8.1 - 2018-06-13 + +- [#472](https://github.com/stripe/stripe-php/pull/472) Added phpDoc for `ApiRequestor` and others, especially regarding thrown errors + +## 6.8.0 - 2018-06-13 + +- [#481](https://github.com/stripe/stripe-php/pull/481) Add new `\Stripe\Discount` and `\Stripe\OrderItem` classes, add more PHPDoc describing object attributes + +## 6.7.4 - 2018-05-29 + +- [#480](https://github.com/stripe/stripe-php/pull/480) PHPDoc changes for API version 2018-05-21 and the addition of the new `CHARGE_EXPIRED` event type + +## 6.7.3 - 2018-05-28 + +- [#479](https://github.com/stripe/stripe-php/pull/479) Fix unnecessary traits on `\Stripe\InvoiceLineItem` + +## 6.7.2 - 2018-05-28 + +- [#471](https://github.com/stripe/stripe-php/pull/471) Add `OBJECT_NAME` constant to all API resource classes, add `\Stripe\InvoiceLineItem` class + +## 6.7.1 - 2018-05-13 + +- [#468](https://github.com/stripe/stripe-php/pull/468) Update fields in PHP docs for accuracy + +## 6.7.0 - 2018-05-09 + +- [#466](https://github.com/stripe/stripe-php/pull/466) Add support for issuer fraud records + +## 6.6.0 - 2018-04-11 + +- [#460](https://github.com/stripe/stripe-php/pull/460) Add support for flexible billing primitives + +## 6.5.0 - 2018-04-05 + +- [#461](https://github.com/stripe/stripe-php/pull/461) Don't zero keys on non-`metadata` subobjects + +## 6.4.2 - 2018-03-17 + +- [#458](https://github.com/stripe/stripe-php/pull/458) Add PHPDoc for `account` on `\Stripe\Event` + +## 6.4.1 - 2018-03-02 + +- [#455](https://github.com/stripe/stripe-php/pull/455) Fix namespaces in PHPDoc +- [#456](https://github.com/stripe/stripe-php/pull/456) Fix namespaces for some exceptions + +## 6.4.0 - 2018-02-28 + +- [#453](https://github.com/stripe/stripe-php/pull/453) Add constants for `reason` (`REASON_*`) and `status` (`STATUS_*`) on `\Stripe\Dispute` + +## 6.3.2 - 2018-02-27 + +- [#452](https://github.com/stripe/stripe-php/pull/452) Add PHPDoc for `amount_paid` and `amount_remaining` on `\Stripe\Invoice` + +## 6.3.1 - 2018-02-26 + +- [#443](https://github.com/stripe/stripe-php/pull/443) Add event types as constants to `\Stripe\Event` class + +## 6.3.0 - 2018-02-23 + +- [#450](https://github.com/stripe/stripe-php/pull/450) Add support for `code` attribute on all Stripe exceptions + +## 6.2.0 - 2018-02-21 + +- [#440](https://github.com/stripe/stripe-php/pull/440) Add support for topups +- [#442](https://github.com/stripe/stripe-php/pull/442) Fix PHPDoc for `\Stripe\Error\SignatureVerification` + +## 6.1.0 - 2018-02-12 + +- [#435](https://github.com/stripe/stripe-php/pull/435) Fix header persistence on `Collection` objects +- [#436](https://github.com/stripe/stripe-php/pull/436) Introduce new `Idempotency` error class + +## 6.0.0 - 2018-02-07 + +Major version release. List of backwards incompatible changes to watch out for: + +- The minimum PHP version is now 5.4.0. If you're using PHP 5.3 or older, consider upgrading to a more recent version. + +* `\Stripe\AttachedObject` no longer exists. Attributes that used to be instances of `\Stripe\AttachedObject` (such as `metadata`) are now instances of `\Stripe\StripeObject`. + +- Attributes that used to be PHP arrays (such as `legal_entity->additional_owners` on `\Stripe\Account` instances) are now instances of `\Stripe\StripeObject`, except when they are empty. `\Stripe\StripeObject` has array semantics so this should not be an issue unless you are actively checking types. + +* `\Stripe\Collection` now derives from `\Stripe\StripeObject` rather than from `\Stripe\ApiResource`. + +Pull requests included in this release: + +- [#410](https://github.com/stripe/stripe-php/pull/410) Drop support for PHP 5.3 +- [#411](https://github.com/stripe/stripe-php/pull/411) Use traits for common API operations +- [#414](https://github.com/stripe/stripe-php/pull/414) Use short array syntax +- [#404](https://github.com/stripe/stripe-php/pull/404) Fix serialization logic +- [#417](https://github.com/stripe/stripe-php/pull/417) Remove `ExternalAccount` class +- [#418](https://github.com/stripe/stripe-php/pull/418) Increase test coverage +- [#421](https://github.com/stripe/stripe-php/pull/421) Update CA bundle and add script for future updates +- [#422](https://github.com/stripe/stripe-php/pull/422) Use vendored CA bundle for all requests +- [#428](https://github.com/stripe/stripe-php/pull/428) Support for automatic request retries + +## 5.9.2 - 2018-02-07 + +- [#431](https://github.com/stripe/stripe-php/pull/431) Update PHPDoc @property tags for latest API version + +## 5.9.1 - 2018-02-06 + +- [#427](https://github.com/stripe/stripe-php/pull/427) Add and update PHPDoc @property tags on all API resources + +## 5.9.0 - 2018-01-17 + +- [#421](https://github.com/stripe/stripe-php/pull/421) Updated bundled CA certificates +- [#423](https://github.com/stripe/stripe-php/pull/423) Escape unsanitized input in OAuth example + +## 5.8.0 - 2017-12-20 + +- [#403](https://github.com/stripe/stripe-php/pull/403) Add `__debugInfo()` magic method to `StripeObject` + +## 5.7.0 - 2017-11-28 + +- [#390](https://github.com/stripe/stripe-php/pull/390) Remove some unsupported API methods +- [#391](https://github.com/stripe/stripe-php/pull/391) Alphabetize the list of API resources in `Util::convertToStripeObject()` and add missing resources +- [#393](https://github.com/stripe/stripe-php/pull/393) Fix expiry date update for card sources + +## 5.6.0 - 2017-10-31 + +- [#386](https://github.com/stripe/stripe-php/pull/386) Support for exchange rates APIs + +## 5.5.1 - 2017-10-30 + +- [#387](https://github.com/stripe/stripe-php/pull/387) Allow `personal_address_kana` and `personal_address_kanji` to be updated on an account + +## 5.5.0 - 2017-10-27 + +- [#385](https://github.com/stripe/stripe-php/pull/385) Support for listing source transactions + +## 5.4.0 - 2017-10-24 + +- [#383](https://github.com/stripe/stripe-php/pull/383) Add static methods to manipulate resources from parent + - `Account` gains methods for external accounts and login links (e.g. `createExternalAccount`, `createLoginLink`) + - `ApplicationFee` gains methods for refunds + - `Customer` gains methods for sources + - `Transfer` gains methods for reversals + +## 5.3.0 - 2017-10-11 + +- [#378](https://github.com/stripe/stripe-php/pull/378) Rename source `delete` to `detach` (and deprecate the former) + +## 5.2.3 - 2017-09-27 + +- Add PHPDoc for `Card` + +## 5.2.2 - 2017-09-20 + +- Fix deserialization mapping of `FileUpload` objects + +## 5.2.1 - 2017-09-14 + +- Serialized `shipping` nested attribute + +## 5.2.0 - 2017-08-29 + +- Add support for `InvalidClient` OAuth error + +## 5.1.3 - 2017-08-14 + +- Allow `address_kana` and `address_kanji` to be updated for custom accounts + +## 5.1.2 - 2017-08-01 + +- Fix documented return type of `autoPagingIterator()` (was missing namespace) + +## 5.1.1 - 2017-07-03 + +- Fix order returns to use the right URL `/v1/order_returns` + +## 5.1.0 - 2017-06-30 + +- Add support for OAuth + +## 5.0.0 - 2017-06-27 + +- `pay` on invoice now takes params as well as opts + +## 4.13.0 - 2017-06-19 + +- Add support for ephemeral keys + +## 4.12.0 - 2017-06-05 + +- Clients can implement `getUserAgentInfo()` to add additional user agent information + +## 4.11.0 - 2017-06-05 + +- Implement `Countable` for `AttachedObject` (`metadata` and `additional_owners`) + +## 4.10.0 - 2017-05-25 + +- Add support for login links + +## 4.9.1 - 2017-05-10 + +- Fix docs to include arrays on `$id` parameter for retrieve methods + +## 4.9.0 - 2017-04-28 + +- Support for checking webhook signatures + +## 4.8.1 - 2017-04-24 + +- Allow nested field `payout_schedule` to be updated + +## 4.8.0 - 2017-04-20 + +- Add `\Stripe\Stripe::setLogger()` to support an external PSR-3 compatible logger + +## 4.7.0 - 2017-04-10 + +- Add support for payouts and recipient transfers + +## 4.6.0 - 2017-04-06 + +- Please see 4.7.0 instead (no-op release) + +## 4.5.1 - 2017-03-22 + +- Remove hard dependency on cURL + +## 4.5.0 - 2017-03-20 + +- Support for detaching sources from customers + +## 4.4.2 - 2017-02-27 + +- Correct handling of `owner` parameter when updating sources + +## 4.4.1 - 2017-02-24 + +- Correct the error check on a bad JSON decoding + +## 4.4.0 - 2017-01-18 + +- Add support for updating sources + +## 4.3.0 - 2016-11-30 + +- Add support for verifying sources + +## 4.2.0 - 2016-11-21 + +- Add retrieve method for 3-D Secure resources + +## 4.1.1 - 2016-10-21 + +- Add docblock with model properties for `Plan` + +## 4.1.0 - 2016-10-18 + +- Support for 403 status codes (permission denied) + +## 4.0.1 - 2016-10-17 + +- Fix transfer reversal materialization +- Fixes for some property definitions in docblocks + +## 4.0.0 - 2016-09-28 + +- Support for subscription items +- Drop attempt to force TLS 1.2: please note that this could be breaking if you're using old OS distributions or packages and upgraded recently (so please make sure to test your integration!) + +## 3.23.0 - 2016-09-15 + +- Add support for Apple Pay domains + +## 3.22.0 - 2016-09-13 + +- Add `Stripe::setAppInfo` to allow plugins to register user agent information + +## 3.21.0 - 2016-08-25 + +- Add `Source` model for generic payment sources + +## 3.20.0 - 2016-08-08 + +- Add `getDeclineCode` to card errors + +## 3.19.0 - 2016-07-29 + +- Opt requests directly into TLS 1.2 where OpenSSL >= 1.0.1 (see #277 for context) + +## 3.18.0 - 2016-07-28 + +- Add new `STATUS_` constants for subscriptions + +## 3.17.1 - 2016-07-28 + +- Fix auto-paging iterator so that it plays nicely with `iterator_to_array` + +## 3.17.0 - 2016-07-14 + +- Add field annotations to model classes for better editor hinting + +## 3.16.0 - 2016-07-12 + +- Add `ThreeDSecure` model for 3-D secure payments + +## 3.15.0 - 2016-06-29 + +- Add static `update` method to all resources that can be changed. + +## 3.14.3 - 2016-06-20 + +- Make sure that cURL never sends `Expects: 100-continue`, even on large request bodies + +## 3.14.2 - 2016-06-03 + +- Add `inventory` under `SKU` to list of keys that have nested data and can be updated + +## 3.14.1 - 2016-05-27 + +- Fix some inconsistencies in PHPDoc + +## 3.14.0 - 2016-05-25 + +- Add support for returning Relay orders + +## 3.13.0 - 2016-05-04 + +- Add `list`, `create`, `update`, `retrieve`, and `delete` methods to the Subscription class + +## 3.12.1 - 2016-04-07 + +- Additional check on value arrays for some extra safety + +## 3.12.0 - 2016-03-31 + +- Fix bug `refreshFrom` on `StripeObject` would not take an `$opts` array +- Fix bug where `$opts` not passed to parent `save` method in `Account` +- Fix bug where non-existent variable was referenced in `reverse` in `Transfer` +- Update CA cert bundle for compatibility with OpenSSL versions below 1.0.1 + +## 3.11.0 - 2016-03-22 + +- Allow `CurlClient` to be initialized with default `CURLOPT_*` options + +## 3.10.1 - 2016-03-22 + +- Fix bug where request params and options were ignored in `ApplicationFee`'s `refund.` + +## 3.10.0 - 2016-03-15 + +- Add `reject` on `Account` to support the new API feature + +## 3.9.2 - 2016-03-04 + +- Fix error when an object's metadata is set more than once + +## 3.9.1 - 2016-02-24 + +- Fix encoding behavior of nested arrays for requests (see #227) + +## 3.9.0 - 2016-02-09 + +- Add automatic pagination mechanism with `autoPagingIterator()` +- Allow global account ID to be set with `Stripe::setAccountId()` + +## 3.8.0 - 2016-02-08 + +- Add `CountrySpec` model for looking up country payment information + +## 3.7.1 - 2016-02-01 + +- Update bundled CA certs + +## 3.7.0 - 2016-01-27 + +- Support deleting Relay products and SKUs + +## 3.6.0 - 2016-01-05 + +- Allow configuration of HTTP client timeouts + +## 3.5.0 - 2015-12-01 + +- Add a verification routine for external accounts + +## 3.4.0 - 2015-09-14 + +- Products, SKUs, and Orders -- https://stripe.com/relay + +## 3.3.0 - 2015-09-11 + +- Add support for 429 Rate Limit response + +## 3.2.0 - 2015-08-17 + +- Add refund listing and retrieval without an associated charge + +## 3.1.0 - 2015-08-03 + +- Add dispute listing and retrieval +- Add support for manage account deletion + +## 3.0.0 - 2015-07-28 + +- Rename `\Stripe\Object` to `\Stripe\StripeObject` (PHP 7 compatibility) +- Rename `getCode` and `getParam` in exceptions to `getStripeCode` and `getStripeParam` +- Add support for calling `json_encode` on Stripe objects in PHP 5.4+ +- Start supporting/testing PHP 7 + +## 2.3.0 - 2015-07-06 + +- Add request ID to all Stripe exceptions + +## 2.2.0 - 2015-06-01 + +- Add support for Alipay accounts as sources +- Add support for bank accounts as sources (private beta) +- Add support for bank accounts and cards as external_accounts on Account objects + +## 2.1.4 - 2015-05-13 + +- Fix CA certificate file path (thanks @lphilps & @matthewarkin) + +## 2.1.3 - 2015-05-12 + +- Fix to account updating to permit `tos_acceptance` and `personal_address` to be set properly +- Fix to Transfer reversal creation (thanks @neatness!) +- Network requests are now done through a swappable class for easier mocking + +## 2.1.2 - 2015-04-10 + +- Remove SSL cert revokation checking (all pre-Heartbleed certs have expired) +- Bug fixes to account updating + +## 2.1.1 - 2015-02-27 + +- Support transfer reversals + +## 2.1.0 - 2015-02-19 + +- Support new API version (2015-02-18) +- Added Bitcoin Receiever update and delete actions +- Edited tests to prefer "source" over "card" as per new API version + +## 2.0.1 - 2015-02-16 + +- Fix to fetching endpoints that use a non-default baseUrl (`FileUpload`) + +## 2.0.0 - 2015-02-14 + +- Bumped minimum version to 5.3.3 +- Switched to Stripe namespace instead of Stripe\_ class name prefiexes (thanks @chadicus!) +- Switched tests to PHPUnit (thanks @chadicus!) +- Switched style guide to PSR2 (thanks @chadicus!) +- Added \$opts hash to the end of most methods: this permits passing 'idempotency_key', 'stripe_account', or 'stripe_version'. The last 2 will persist across multiple object loads. +- Added support for retrieving Account by ID + +## 1.18.0 - 2015-01-21 + +- Support making bitcoin charges through BitcoinReceiver source object + +## 1.17.5 - 2014-12-23 + +- Adding support for creating file uploads. + +## 1.17.4 - 2014-12-15 + +- Saving objects fetched with a custom key now works (thanks @JustinHook & @jpasilan) +- Added methods for reporting charges as safe or fraudulent and for specifying the reason for refunds + +## 1.17.3 - 2014-11-06 + +- Better handling of HHVM support for SSL certificate blacklist checking. + +## 1.17.2 - 2014-09-23 + +- Coupons now are backed by a `Stripe_Coupon` instead of `Stripe_Object`, and support updating metadata +- Running operations (`create`, `retrieve`, `all`) on upcoming invoice items now works + +## 1.17.1 - 2014-07-31 + +- Requests now send Content-Type header + +## 1.17.0 - 2014-07-29 + +- Application Fee refunds now a list instead of array +- HHVM now works +- Small bug fixes (thanks @bencromwell & @fastest963) +- `__toString` now returns the name of the object in addition to its JSON representation + +## 1.16.0 - 2014-06-17 + +- Add metadata for refunds and disputes + +## 1.15.0 - 2014-05-28 + +- Support canceling transfers + +## 1.14.1 - 2014-05-21 + +- Support cards for recipients. + +## 1.13.1 - 2014-05-15 + +- Fix bug in account resource where `id` wasn't in the result + +## 1.13.0 - 2014-04-10 + +- Add support for certificate blacklisting +- Update ca bundle +- Drop support for HHVM (Temporarily) + +## 1.12.0 - 2014-04-01 + +- Add Stripe_RateLimitError for catching rate limit errors. +- Update to Zend coding style (thanks, @jpiasetz) + +## 1.11.0 - 2014-01-29 + +- Add support for multiple subscriptions per customer + +## 1.10.1 - 2013-12-02 + +- Add new ApplicationFee + +## 1.9.1 - 2013-11-08 + +- Fix a bug where a null nestable object causes warnings to fire. + +## 1.9.0 - 2013-10-16 + +- Add support for metadata API. + +## 1.8.4 - 2013-09-18 + +- Add support for closing disputes. + +## 1.8.3 - 2013-08-13 + +- Add new Balance and BalanceTransaction + +## 1.8.2 - 2013-08-12 + +- Add support for unsetting attributes by updating to NULL. Setting properties to a blank string is now an error. + +## 1.8.1 - 2013-07-12 + +- Add support for multiple cards API (Stripe API version 2013-07-12: https://stripe.com/docs/upgrades#2013-07-05) + +## 1.8.0 - 2013-04-11 + +- Allow Transfers to be creatable +- Add new Recipient resource + +## 1.7.15 - 2013-02-21 + +- Add 'id' to the list of permanent object attributes + +## 1.7.14 - 2013-02-20 + +- Don't re-encode strings that are already encoded in UTF-8. If you were previously using plan or coupon objects with UTF-8 IDs, they may have been treated as ISO-8859-1 (Latin-1) and encoded to UTF-8 a 2nd time. You may now need to pass the IDs to utf8_encode before passing them to Stripe_Plan::retrieve or Stripe_Coupon::retrieve. +- Ensure that all input is encoded in UTF-8 before submitting it to Stripe's servers. (github issue #27) + +## 1.7.13 - 2013-02-01 + +- Add support for passing options when retrieving Stripe objects e.g., Stripe_Charge::retrieve(array("id"=>"foo", "expand" => array("customer"))); Stripe_Charge::retrieve("foo") will continue to work + +## 1.7.12 - 2013-01-15 + +- Add support for setting a Stripe API version override + +## 1.7.11 - 2012-12-30 + +- Version bump to cleanup constants and such (fix issue #26) + +## 1.7.10 - 2012-11-08 + +- Add support for updating charge disputes. +- Fix bug preventing retrieval of null attributes + +## 1.7.9 - 2012-11-08 + +- Fix usage under autoloaders such as the one generated by composer (fix issue #22) + +## 1.7.8 - 2012-10-30 + +- Add support for creating invoices. +- Add support for new invoice lines return format +- Add support for new list objects + +## 1.7.7 - 2012-09-14 + +- Get all of the various version numbers in the repo in sync (no other changes) + +## 1.7.6 - 2012-08-31 + +- Add update and pay methods to Invoice resource + +## 1.7.5 - 2012-08-23 + +- Change internal function names so that Stripe_SingletonApiRequest is E_STRICT-clean (github issue #16) + +## 1.7.4 - 2012-08-21 + +- Bugfix so that Stripe objects (e.g. Customer, Charge objects) used in API calls are transparently converted to their object IDs + +## 1.7.3 - 2012-08-15 + +- Add new Account resource + +## 1.7.2 - 2012-06-26 + +- Make clearer that you should be including lib/Stripe.php, not test/Stripe.php (github issue #14) + +## 1.7.1 - 2012-05-24 + +- Add missing argument to Stripe_InvalidRequestError constructor in Stripe_ApiResource::instanceUrl. Fixes a warning when Stripe_ApiResource::instanceUrl is called on a resource with no ID (fix issue #12) + +## 1.7.0 - 2012-05-17 + +- Support Composer and Packagist (github issue #9) +- Add new deleteDiscount method to Stripe_Customer +- Add new Transfer resource +- Switch from using HTTP Basic auth to Bearer auth. (Note: Stripe will support Basic auth for the indefinite future, but recommends Bearer auth when possible going forward) +- Numerous test suite improvements diff --git a/vendor/stripe/stripe-php/CODE_OF_CONDUCT.md b/vendor/stripe/stripe-php/CODE_OF_CONDUCT.md new file mode 100644 index 000000000..349f5a0bf --- /dev/null +++ b/vendor/stripe/stripe-php/CODE_OF_CONDUCT.md @@ -0,0 +1,77 @@ +# Contributor Covenant Code of Conduct + +## Our Pledge + +In the interest of fostering an open and welcoming environment, we as +contributors and maintainers pledge to make participation in our project and +our community a harassment-free experience for everyone, regardless of age, body +size, disability, ethnicity, sex characteristics, gender identity and expression, +level of experience, education, socio-economic status, nationality, personal +appearance, race, religion, or sexual identity and orientation. + +## Our Standards + +Examples of behavior that contributes to creating a positive environment +include: + +* Using welcoming and inclusive language +* Being respectful of differing viewpoints and experiences +* Gracefully accepting constructive criticism +* Focusing on what is best for the community +* Showing empathy towards other community members + +Examples of unacceptable behavior by participants include: + +* The use of sexualized language or imagery and unwelcome sexual attention or + advances +* Trolling, insulting/derogatory comments, and personal or political attacks +* Public or private harassment +* Publishing others' private information, such as a physical or electronic + address, without explicit permission +* Other conduct which could reasonably be considered inappropriate in a + professional setting + +## Our Responsibilities + +Project maintainers are responsible for clarifying the standards of acceptable +behavior and are expected to take appropriate and fair corrective action in +response to any instances of unacceptable behavior. + +Project maintainers have the right and responsibility to remove, edit, or +reject comments, commits, code, wiki edits, issues, and other contributions +that are not aligned to this Code of Conduct, or to ban temporarily or +permanently any contributor for other behaviors that they deem inappropriate, +threatening, offensive, or harmful. + +## Scope + +This Code of Conduct applies within all project spaces, and it also applies when +an individual is representing the project or its community in public spaces. +Examples of representing a project or community include using an official +project e-mail address, posting via an official social media account, or acting +as an appointed representative at an online or offline event. Representation of +a project may be further defined and clarified by project maintainers. + +## Enforcement + +Instances of abusive, harassing, or otherwise unacceptable behavior may be +reported by contacting the project team at conduct@stripe.com. All +complaints will be reviewed and investigated and will result in a response that +is deemed necessary and appropriate to the circumstances. The project team is +obligated to maintain confidentiality with regard to the reporter of an incident. +Further details of specific enforcement policies may be posted separately. + +Project maintainers who do not follow or enforce the Code of Conduct in good +faith may face temporary or permanent repercussions as determined by other +members of the project's leadership. + +## Attribution + +This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, +available at https://www.contributor-covenant.org/version/1/4/code-of-conduct.html + +[homepage]: https://www.contributor-covenant.org + +For answers to common questions about this code of conduct, see +https://www.contributor-covenant.org/faq + diff --git a/vendor/stripe/stripe-php/LICENSE b/vendor/stripe/stripe-php/LICENSE new file mode 100644 index 000000000..847c705ad --- /dev/null +++ b/vendor/stripe/stripe-php/LICENSE @@ -0,0 +1,21 @@ +The MIT License + +Copyright (c) 2010-2019 Stripe, Inc. (https://stripe.com) + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. diff --git a/vendor/stripe/stripe-php/Makefile b/vendor/stripe/stripe-php/Makefile new file mode 100644 index 000000000..78c586816 --- /dev/null +++ b/vendor/stripe/stripe-php/Makefile @@ -0,0 +1,36 @@ +export PHPDOCUMENTOR_VERSION := v3.0.0-rc +export PHPSTAN_VERSION := 0.12.18 + +vendor: composer.json + composer install + +vendor/bin/phpstan: vendor + curl -sfL https://github.com/phpstan/phpstan/releases/download/$(PHPSTAN_VERSION)/phpstan.phar -o vendor/bin/phpstan + chmod +x vendor/bin/phpstan + +vendor/bin/phpdoc: vendor + curl -sfL https://github.com/phpDocumentor/phpDocumentor/releases/download/$(PHPDOCUMENTOR_VERSION)/phpDocumentor.phar -o vendor/bin/phpdoc + chmod +x vendor/bin/phpdoc + +test: vendor + vendor/bin/phpunit +.PHONY: test + +fmt: vendor + vendor/bin/php-cs-fixer fix -v --using-cache=no . +.PHONY: fmt + +fmtcheck: vendor + vendor/bin/php-cs-fixer fix -v --dry-run --using-cache=no . +.PHONY: fmtcheck + +phpdoc: vendor/bin/phpdoc + vendor/bin/phpdoc + +phpstan: vendor/bin/phpstan + php -d memory_limit=512M vendor/bin/phpstan analyse lib tests +.PHONY: phpstan + +phpstan-baseline: vendor/bin/phpstan + php -d memory_limit=512M vendor/bin/phpstan analyse lib tests --generate-baseline +.PHONY: phpstan-baseline diff --git a/vendor/stripe/stripe-php/README.md b/vendor/stripe/stripe-php/README.md new file mode 100644 index 000000000..1be6aa1be --- /dev/null +++ b/vendor/stripe/stripe-php/README.md @@ -0,0 +1,266 @@ +# Stripe PHP bindings + +[![Build Status](https://travis-ci.org/stripe/stripe-php.svg?branch=master)](https://travis-ci.org/stripe/stripe-php) +[![Latest Stable Version](https://poser.pugx.org/stripe/stripe-php/v/stable.svg)](https://packagist.org/packages/stripe/stripe-php) +[![Total Downloads](https://poser.pugx.org/stripe/stripe-php/downloads.svg)](https://packagist.org/packages/stripe/stripe-php) +[![License](https://poser.pugx.org/stripe/stripe-php/license.svg)](https://packagist.org/packages/stripe/stripe-php) +[![Code Coverage](https://coveralls.io/repos/stripe/stripe-php/badge.svg?branch=master)](https://coveralls.io/r/stripe/stripe-php?branch=master) + +The Stripe PHP library provides convenient access to the Stripe API from +applications written in the PHP language. It includes a pre-defined set of +classes for API resources that initialize themselves dynamically from API +responses which makes it compatible with a wide range of versions of the Stripe +API. + +## Requirements + +PHP 5.6.0 and later. + +## Composer + +You can install the bindings via [Composer](http://getcomposer.org/). Run the following command: + +```bash +composer require stripe/stripe-php +``` + +To use the bindings, use Composer's [autoload](https://getcomposer.org/doc/01-basic-usage.md#autoloading): + +```php +require_once('vendor/autoload.php'); +``` + +## Manual Installation + +If you do not wish to use Composer, you can download the [latest release](https://github.com/stripe/stripe-php/releases). Then, to use the bindings, include the `init.php` file. + +```php +require_once('/path/to/stripe-php/init.php'); +``` + +## Dependencies + +The bindings require the following extensions in order to work properly: + +- [`curl`](https://secure.php.net/manual/en/book.curl.php), although you can use your own non-cURL client if you prefer +- [`json`](https://secure.php.net/manual/en/book.json.php) +- [`mbstring`](https://secure.php.net/manual/en/book.mbstring.php) (Multibyte String) + +If you use Composer, these dependencies should be handled automatically. If you install manually, you'll want to make sure that these extensions are available. + +## Getting Started + +Simple usage looks like: + +```php +$stripe = new \Stripe\StripeClient('sk_test_BQokikJOvBiI2HlWgH4olfQ2'); +$customer = $stripe->customers->create([ + 'description' => 'example customer', + 'email' => 'email@example.com', + 'payment_method' => 'pm_card_visa', +]); +echo $customer; +``` + +### Client/service patterns vs legacy patterns + +You can continue to use the legacy integration patterns used prior to version [7.33.0](https://github.com/stripe/stripe-php/blob/master/CHANGELOG.md#7330---2020-05-14). Review the [migration guide](https://github.com/stripe/stripe-php/wiki/Migration-to-StripeClient-and-services-in-7.33.0) for the backwards-compatible client/services pattern changes. + +## Documentation + +See the [PHP API docs](https://stripe.com/docs/api/php#intro). + +## Legacy Version Support + +### PHP 5.4 & 5.5 + +If you are using PHP 5.4 or 5.5, you can download v6.21.1 ([zip](https://github.com/stripe/stripe-php/archive/v6.21.1.zip), [tar.gz](https://github.com/stripe/stripe-php/archive/v6.21.1.tar.gz)) from our [releases page](https://github.com/stripe/stripe-php/releases). This version will continue to work with new versions of the Stripe API for all common uses. + +### PHP 5.3 + +If you are using PHP 5.3, you can download v5.9.2 ([zip](https://github.com/stripe/stripe-php/archive/v5.9.2.zip), [tar.gz](https://github.com/stripe/stripe-php/archive/v5.9.2.tar.gz)) from our [releases page](https://github.com/stripe/stripe-php/releases). This version will continue to work with new versions of the Stripe API for all common uses. + +## Custom Request Timeouts + +_NOTE:_ We do not recommend decreasing the timeout for non-read-only calls (e.g. charge creation), since even if you locally timeout, the request on Stripe's side can still complete. If you are decreasing timeouts on these calls, make sure to use [idempotency tokens](https://stripe.com/docs/api/php#idempotent_requests) to avoid executing the same transaction twice as a result of timeout retry logic. + +To modify request timeouts (connect or total, in seconds) you'll need to tell the API client to use a CurlClient other than its default. You'll set the timeouts in that CurlClient. + +```php +// set up your tweaked Curl client +$curl = new \Stripe\HttpClient\CurlClient(); +$curl->setTimeout(10); // default is \Stripe\HttpClient\CurlClient::DEFAULT_TIMEOUT +$curl->setConnectTimeout(5); // default is \Stripe\HttpClient\CurlClient::DEFAULT_CONNECT_TIMEOUT + +echo $curl->getTimeout(); // 10 +echo $curl->getConnectTimeout(); // 5 + +// tell Stripe to use the tweaked client +\Stripe\ApiRequestor::setHttpClient($curl); + +// use the Stripe API client as you normally would +``` + +## Custom cURL Options (e.g. proxies) + +Need to set a proxy for your requests? Pass in the requisite `CURLOPT_*` array to the CurlClient constructor, using the same syntax as `curl_stopt_array()`. This will set the default cURL options for each HTTP request made by the SDK, though many more common options (e.g. timeouts; see above on how to set those) will be overridden by the client even if set here. + +```php +// set up your tweaked Curl client +$curl = new \Stripe\HttpClient\CurlClient([CURLOPT_PROXY => 'proxy.local:80']); +// tell Stripe to use the tweaked client +\Stripe\ApiRequestor::setHttpClient($curl); +``` + +Alternately, a callable can be passed to the CurlClient constructor that returns the above array based on request inputs. See `testDefaultOptions()` in `tests/CurlClientTest.php` for an example of this behavior. Note that the callable is called at the beginning of every API request, before the request is sent. + +### Configuring a Logger + +The library does minimal logging, but it can be configured +with a [`PSR-3` compatible logger][psr3] so that messages +end up there instead of `error_log`: + +```php +\Stripe\Stripe::setLogger($logger); +``` + +### Accessing response data + +You can access the data from the last API response on any object via `getLastResponse()`. + +```php +$customer = $stripe->customers->create([ + 'description' => 'example customer', +]); +echo $customer->getLastResponse()->headers['Request-Id']; +``` + +### SSL / TLS compatibility issues + +Stripe's API now requires that [all connections use TLS 1.2](https://stripe.com/blog/upgrading-tls). Some systems (most notably some older CentOS and RHEL versions) are capable of using TLS 1.2 but will use TLS 1.0 or 1.1 by default. In this case, you'd get an `invalid_request_error` with the following error message: "Stripe no longer supports API requests made with TLS 1.0. Please initiate HTTPS connections with TLS 1.2 or later. You can learn more about this at [https://stripe.com/blog/upgrading-tls](https://stripe.com/blog/upgrading-tls).". + +The recommended course of action is to [upgrade your cURL and OpenSSL packages](https://support.stripe.com/questions/how-do-i-upgrade-my-stripe-integration-from-tls-1-0-to-tls-1-2#php) so that TLS 1.2 is used by default, but if that is not possible, you might be able to solve the issue by setting the `CURLOPT_SSLVERSION` option to either `CURL_SSLVERSION_TLSv1` or `CURL_SSLVERSION_TLSv1_2`: + +```php +$curl = new \Stripe\HttpClient\CurlClient([CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1]); +\Stripe\ApiRequestor::setHttpClient($curl); +``` + +### Per-request Configuration + +For apps that need to use multiple keys during the lifetime of a process, like +one that uses [Stripe Connect][connect], it's also possible to set a +per-request key and/or account: + +```php +$customers = $stripe->customers->all([],[ + 'api_key' => 'sk_test_...', + 'stripe_account' => 'acct_...' +]); + +$stripe->customers->retrieve('cus_123456789', [], [ + 'api_key' => 'sk_test_...', + 'stripe_account' => 'acct_...' +]); +``` + +### Configuring CA Bundles + +By default, the library will use its own internal bundle of known CA +certificates, but it's possible to configure your own: + +```php +\Stripe\Stripe::setCABundlePath("path/to/ca/bundle"); +``` + +### Configuring Automatic Retries + +The library can be configured to automatically retry requests that fail due to +an intermittent network problem: + +```php +\Stripe\Stripe::setMaxNetworkRetries(2); +``` + +[Idempotency keys][idempotency-keys] are added to requests to guarantee that +retries are safe. + +### Request latency telemetry + +By default, the library sends request latency telemetry to Stripe. These +numbers help Stripe improve the overall latency of its API for all users. + +You can disable this behavior if you prefer: + +```php +\Stripe\Stripe::setEnableTelemetry(false); +``` + +## Development + +Get [Composer][composer]. For example, on Mac OS: + +```bash +brew install composer +``` + +Install dependencies: + +```bash +composer install +``` + +The test suite depends on [stripe-mock], so make sure to fetch and run it from a +background terminal ([stripe-mock's README][stripe-mock] also contains +instructions for installing via Homebrew and other methods): + +```bash +go get -u github.com/stripe/stripe-mock +stripe-mock +``` + +Install dependencies as mentioned above (which will resolve [PHPUnit](http://packagist.org/packages/phpunit/phpunit)), then you can run the test suite: + +```bash +./vendor/bin/phpunit +``` + +Or to run an individual test file: + +```bash +./vendor/bin/phpunit tests/UtilTest.php +``` + +Update bundled CA certificates from the [Mozilla cURL release][curl]: + +```bash +./update_certs.php +``` + +The library uses [PHP CS Fixer][php-cs-fixer] for code formatting. Code must be formatted before PRs are submitted, otherwise CI will fail. Run the formatter with: + +```bash +./vendor/bin/php-cs-fixer fix -v . +``` + +## Attention plugin developers + +Are you writing a plugin that integrates Stripe and embeds our library? Then please use the `setAppInfo` function to identify your plugin. For example: + +```php +\Stripe\Stripe::setAppInfo("MyAwesomePlugin", "1.2.34", "https://myawesomeplugin.info"); +``` + +The method should be called once, before any request is sent to the API. The second and third parameters are optional. + +### SSL / TLS configuration option + +See the "SSL / TLS compatibility issues" paragraph above for full context. If you want to ensure that your plugin can be used on all systems, you should add a configuration option to let your users choose between different values for `CURLOPT_SSLVERSION`: none (default), `CURL_SSLVERSION_TLSv1` and `CURL_SSLVERSION_TLSv1_2`. + +[composer]: https://getcomposer.org/ +[connect]: https://stripe.com/connect +[curl]: http://curl.haxx.se/docs/caextract.html +[idempotency-keys]: https://stripe.com/docs/api/php#idempotent_requests +[php-cs-fixer]: https://github.com/FriendsOfPHP/PHP-CS-Fixer +[psr3]: http://www.php-fig.org/psr/psr-3/ +[stripe-mock]: https://github.com/stripe/stripe-mock diff --git a/vendor/stripe/stripe-php/VERSION b/vendor/stripe/stripe-php/VERSION new file mode 100644 index 000000000..0de24fd30 --- /dev/null +++ b/vendor/stripe/stripe-php/VERSION @@ -0,0 +1 @@ +7.66.1 diff --git a/vendor/stripe/stripe-php/build.php b/vendor/stripe/stripe-php/build.php new file mode 100644 index 000000000..37360ffef --- /dev/null +++ b/vendor/stripe/stripe-php/build.php @@ -0,0 +1,25 @@ +#!/usr/bin/env php +=5.6.0", + "ext-curl": "*", + "ext-json": "*", + "ext-mbstring": "*" + }, + "require-dev": { + "phpunit/phpunit": "^5.7", + "php-coveralls/php-coveralls": "^2.1", + "squizlabs/php_codesniffer": "^3.3", + "symfony/process": "~3.4", + "friendsofphp/php-cs-fixer": "2.16.5" + }, + "autoload": { + "psr-4": { + "Stripe\\": "lib/" + } + }, + "autoload-dev": { + "psr-4": { + "Stripe\\": [ + "tests/", + "tests/Stripe/" + ] + } + }, + "extra": { + "branch-alias": { + "dev-master": "2.0-dev" + } + } +} diff --git a/vendor/stripe/stripe-php/data/ca-certificates.crt b/vendor/stripe/stripe-php/data/ca-certificates.crt new file mode 100644 index 000000000..65be2181d --- /dev/null +++ b/vendor/stripe/stripe-php/data/ca-certificates.crt @@ -0,0 +1,3476 @@ +## +## Bundle of CA Root Certificates +## +## Certificate data from Mozilla as of: Wed Aug 28 03:12:10 2019 GMT +## +## This is a bundle of X.509 certificates of public Certificate Authorities +## (CA). These were automatically extracted from Mozilla's root certificates +## file (certdata.txt). This file can be found in the mozilla source tree: +## https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt +## +## It contains the certificates in PEM format and therefore +## can be directly used with curl / libcurl / php_curl, or with +## an Apache+mod_ssl webserver for SSL client authentication. +## Just configure this file as the SSLCACertificateFile. +## +## Conversion done with mk-ca-bundle.pl version 1.27. +## SHA256: fffa309937c3be940649293f749b8207fabc6eb224e50e4bb3f2c5e44e0d6a6b +## + + +GlobalSign Root CA +================== +-----BEGIN CERTIFICATE----- +MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkGA1UEBhMCQkUx +GTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jvb3QgQ0ExGzAZBgNVBAMTEkds +b2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAwMDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNV +BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYD +VQQDExJHbG9iYWxTaWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa +DuaZjc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavpxy0Sy6sc +THAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp1Wrjsok6Vjk4bwY8iGlb +Kk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdGsnUOhugZitVtbNV4FpWi6cgKOOvyJBNP +c1STE4U6G7weNLWLBYy5d4ux2x8gkasJU26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrX +gzT/LCrBbBlDSgeF59N89iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV +HRMBAf8EBTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0BAQUF +AAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOzyj1hTdNGCbM+w6Dj +Y1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE38NflNUVyRRBnMRddWQVDf9VMOyG +j/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymPAbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhH +hm4qxFYxldBniYUr+WymXUadDKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveC +X4XSQRjbgbMEHMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A== +-----END CERTIFICATE----- + +GlobalSign Root CA - R2 +======================= +-----BEGIN CERTIFICATE----- +MIIDujCCAqKgAwIBAgILBAAAAAABD4Ym5g0wDQYJKoZIhvcNAQEFBQAwTDEgMB4GA1UECxMXR2xv +YmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2Jh +bFNpZ24wHhcNMDYxMjE1MDgwMDAwWhcNMjExMjE1MDgwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxT +aWduIFJvb3QgQ0EgLSBSMjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2ln +bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbPJA6+Lm8omUVCxKs+IVSbC9N/hHD6 +ErPLv4dfxn+G07IwXNb9rfF73OX4YJYJkhD10FPe+3t+c4isUoh7SqbKSaZeqKeMWhG8eoLrvozp +s6yWJQeXSpkqBy+0Hne/ig+1AnwblrjFuTosvNYSuetZfeLQBoZfXklqtTleiDTsvHgMCJiEbKjN +S7SgfQx5TfC4LcshytVsW33hoCmEofnTlEnLJGKRILzdC9XZzPnqJworc5HGnRusyMvo4KD0L5CL +TfuwNhv2GXqF4G3yYROIXJ/gkwpRl4pazq+r1feqCapgvdzZX99yqWATXgAByUr6P6TqBwMhAo6C +ygPCm48CAwEAAaOBnDCBmTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E +FgQUm+IHV2ccHsBqBt5ZtJot39wZhi4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5nbG9i +YWxzaWduLm5ldC9yb290LXIyLmNybDAfBgNVHSMEGDAWgBSb4gdXZxwewGoG3lm0mi3f3BmGLjAN +BgkqhkiG9w0BAQUFAAOCAQEAmYFThxxol4aR7OBKuEQLq4GsJ0/WwbgcQ3izDJr86iw8bmEbTUsp +9Z8FHSbBuOmDAGJFtqkIk7mpM0sYmsL4h4hO291xNBrBVNpGP+DTKqttVCL1OmLNIG+6KYnX3ZHu +01yiPqFbQfXf5WRDLenVOavSot+3i9DAgBkcRcAtjOj4LaR0VknFBbVPFd5uRHg5h6h+u/N5GJG7 +9G+dwfCMNYxdAfvDbbnvRG15RjF+Cv6pgsH/76tuIMRQyV+dTZsXjAzlAcmgQWpzU/qlULRuJQ/7 +TBj0/VLZjmmx6BEP3ojY+x1J96relc8geMJgEtslQIxq/H5COEBkEveegeGTLg== +-----END CERTIFICATE----- + +Verisign Class 3 Public Primary Certification Authority - G3 +============================================================ +-----BEGIN CERTIFICATE----- +MIIEGjCCAwICEQCbfgZJoz5iudXukEhxKe9XMA0GCSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJV +UzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdv +cmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNl +IG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkgLSBHMzAeFw05OTEwMDEwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMIHKMQsw +CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRy +dXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhv +cml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkg +Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBAMu6nFL8eB8aHm8bN3O9+MlrlBIwT/A2R/XQkQr1F8ilYcEWQE37imGQ5XYgwREGfassbqb1 +EUGO+i2tKmFZpGcmTNDovFJbcCAEWNF6yaRpvIMXZK0Fi7zQWM6NjPXr8EJJC52XJ2cybuGukxUc +cLwgTS8Y3pKI6GyFVxEa6X7jJhFUokWWVYPKMIno3Nij7SqAP395ZVc+FSBmCC+Vk7+qRy+oRpfw +EuL+wgorUeZ25rdGt+INpsyow0xZVYnm6FNcHOqd8GIWC6fJXwzw3sJ2zq/3avL6QaaiMxTJ5Xpj +055iN9WFZZ4O5lMkdBteHRJTW8cs54NJOxWuimi5V5cCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEA +ERSWwauSCPc/L8my/uRan2Te2yFPhpk0djZX3dAVL8WtfxUfN2JzPtTnX84XA9s1+ivbrmAJXx5f +j267Cz3qWhMeDGBvtcC1IyIuBwvLqXTLR7sdwdela8wv0kL9Sd2nic9TutoAWii/gt/4uhMdUIaC +/Y4wjylGsB49Ndo4YhYYSq3mtlFs3q9i6wHQHiT+eo8SGhJouPtmmRQURVyu565pF4ErWjfJXir0 +xuKhXFSbplQAz/DxwceYMBo7Nhbbo27q/a2ywtrvAkcTisDxszGtTxzhT5yvDwyd93gN2PQ1VoDa +t20Xj50egWTh/sVFuq1ruQp6Tk9LhO5L8X3dEQ== +-----END CERTIFICATE----- + +Entrust.net Premium 2048 Secure Server CA +========================================= +-----BEGIN CERTIFICATE----- +MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChMLRW50cnVzdC5u +ZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBpbmNvcnAuIGJ5IHJlZi4gKGxp +bWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNV +BAMTKkVudHJ1c3QubmV0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQx +NzUwNTFaFw0yOTA3MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3 +d3d3LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTEl +MCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50cnVzdC5u +ZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEArU1LqRKGsuqjIAcVFmQqK0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOL +Gp18EzoOH1u3Hs/lJBQesYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSr +hRSGlVuXMlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVTXTzW +nLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9+5CFVghTAp+XtIpGmG4zU/HoZdenoVve8AjhUi +VBcAkCaTvA5JaJG/+EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH4QIDAQABo0IwQDAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJ +KoZIhvcNAQEFBQADggEBADubj1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4+WZiT6QBshJ8rmcnPy +T/4xmf3IDExoU8aAghOY+rat2l098c5u9hURlIIM7j+VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf +zX1XEC+bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5bu/8j72gZyxKT +J1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7+bYQLCIt+jerXmCHG8+c8eS9e +nNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/ErfF6adulZkMV8gzURZVE= +-----END CERTIFICATE----- + +Baltimore CyberTrust Root +========================= +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJRTESMBAGA1UE +ChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3li +ZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoXDTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMC +SUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFs +dGltb3JlIEN5YmVyVHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKME +uyKrmD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjrIZ3AQSsB +UnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeKmpYcqWe4PwzV9/lSEy/C +G9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSuXmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9 +XbIGevOF6uvUA65ehD5f/xXtabz5OTZydc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjpr +l3RjM71oGDHweI12v/yejl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoI +VDaGezq1BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEB +BQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT929hkTI7gQCvlYpNRh +cL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3WgxjkzSswF07r51XgdIGn9w/xZchMB5 +hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsa +Y71k5h+3zvDyny67G7fyUIhzksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9H +RCwBXbsdtTLSR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp +-----END CERTIFICATE----- + +AddTrust External Root +====================== +-----BEGIN CERTIFICATE----- +MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChML +QWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYD +VQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEw +NDgzOFowbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRU +cnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0Eg +Um9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvtH7xsD821 ++iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9uMq/NzgtHj6RQa1wVsfw +Tz/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzXmk6vBbOmcZSccbNQYArHE504B4YCqOmo +aSYYkKtMsE8jqzpPhNjfzp/haW+710LXa0Tkx63ubUFfclpxCDezeWWkWaCUN/cALw3CknLa0Dhy +2xSoRcRdKn23tNbE7qzNE0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0p10a3CitlttNCbxWyuHv7 +7+ldU9U0WicCAwEAAaOB3DCB2TAdBgNVHQ4EFgQUrb2YejS0Jvf6xCZU7wO94CTLVBowCwYDVR0P +BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wgZkGA1UdIwSBkTCBjoAUrb2YejS0Jvf6xCZU7wO94CTL +VBqhc6RxMG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRUcnVzdCBBQjEmMCQGA1UECxMdQWRk +VHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsxIjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENB +IFJvb3SCAQEwDQYJKoZIhvcNAQEFBQADggEBALCb4IUlwtYj4g+WBpKdQZic2YR5gdkeWxQHIzZl +j7DYd7usQWxHYINRsPkyPef89iYTx4AWpb9a/IfPeHmJIZriTAcKhjW88t5RxNKWt9x+Tu5w/Rw5 +6wwCURQtjr0W4MHfRnXnJK3s9EK0hZNwEGe6nQY1ShjTK3rMUUKhemPR5ruhxSvCNr4TDea9Y355 +e6cJDUCrat2PisP29owaQgVR1EX1n6diIWgVIEM8med8vSTYqZEXc4g/VhsxOBi0cQ+azcgOno4u +G+GMmIPLHzHxREzGBHNJdmAPx/i9F4BrLunMTA5amnkPIAou1Z5jJh5VkpTYghdae9C8x49OhgQ= +-----END CERTIFICATE----- + +Entrust Root Certification Authority +==================================== +-----BEGIN CERTIFICATE----- +MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMCVVMxFjAUBgNV +BAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0Lm5ldC9DUFMgaXMgaW5jb3Jw +b3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMWKGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsG +A1UEAxMkRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0 +MloXDTI2MTEyNzIwNTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMu +MTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSByZWZlcmVu +Y2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNVBAMTJEVudHJ1c3QgUm9v +dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +ALaVtkNC+sZtKm9I35RMOVcF7sN5EUFoNu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYsz +A9u3g3s+IIRe7bJWKKf44LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOww +Cj0Yzfv9KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGIrb68 +j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi94DkZfs0Nw4pgHBN +rziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOBsDCBrTAOBgNVHQ8BAf8EBAMCAQYw +DwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAigA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1 +MzQyWjAfBgNVHSMEGDAWgBRokORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DH +hmak8fdLQ/uEvW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA +A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9tO1KzKtvn1ISM +Y/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6ZuaAGAT/3B+XxFNSRuzFVJ7yVTa +v52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTS +W3iDVuycNsMm4hH2Z0kdkquM++v/eu6FSqdQgPCnXEqULl8FmTxSQeDNtGPPAUO6nIPcj2A781q0 +tHuu2guQOHXvgR1m0vdXcDazv/wor3ElhVsT/h5/WrQ8 +-----END CERTIFICATE----- + +GeoTrust Global CA +================== +-----BEGIN CERTIFICATE----- +MIIDVDCCAjygAwIBAgIDAjRWMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQK +Ew1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMDIwNTIxMDQw +MDAwWhcNMjIwNTIxMDQwMDAwWjBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5j +LjEbMBkGA1UEAxMSR2VvVHJ1c3QgR2xvYmFsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEA2swYYzD99BcjGlZ+W988bDjkcbd4kdS8odhM+KhDtgPpTSEHCIjaWC9mOSm9BXiLnTjo +BbdqfnGk5sRgprDvgOSJKA+eJdbtg/OtppHHmMlCGDUUna2YRpIuT8rxh0PBFpVXLVDviS2Aelet +8u5fa9IAjbkU+BQVNdnARqN7csiRv8lVK83Qlz6cJmTM386DGXHKTubU1XupGc1V3sjs0l44U+Vc +T4wt/lAjNvxm5suOpDkZALeVAjmRCw7+OC7RHQWa9k0+bw8HHa8sHo9gOeL6NlMTOdReJivbPagU +vTLrGAMoUgRx5aszPeE4uwc2hGKceeoWMPRfwCvocWvk+QIDAQABo1MwUTAPBgNVHRMBAf8EBTAD +AQH/MB0GA1UdDgQWBBTAephojYn7qwVkDBF9qn1luMrMTjAfBgNVHSMEGDAWgBTAephojYn7qwVk +DBF9qn1luMrMTjANBgkqhkiG9w0BAQUFAAOCAQEANeMpauUvXVSOKVCUn5kaFOSPeCpilKInZ57Q +zxpeR+nBsqTP3UEaBU6bS+5Kb1VSsyShNwrrZHYqLizz/Tt1kL/6cdjHPTfStQWVYrmm3ok9Nns4 +d0iXrKYgjy6myQzCsplFAMfOEVEiIuCl6rYVSAlk6l5PdPcFPseKUgzbFbS9bZvlxrFUaKnjaZC2 +mqUPuLk/IH2uSrW4nOQdtqvmlKXBx4Ot2/Unhw4EbNX/3aBd7YdStysVAq45pmp06drE57xNNB6p +XE0zX5IJL4hmXXeXxx12E6nV5fEWCRE11azbJHFwLJhWC9kXtNHjUStedejV0NxPNO3CBWaAocvm +Mw== +-----END CERTIFICATE----- + +GeoTrust Universal CA +===================== +-----BEGIN CERTIFICATE----- +MIIFaDCCA1CgAwIBAgIBATANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJVUzEWMBQGA1UEChMN +R2VvVHJ1c3QgSW5jLjEeMBwGA1UEAxMVR2VvVHJ1c3QgVW5pdmVyc2FsIENBMB4XDTA0MDMwNDA1 +MDAwMFoXDTI5MDMwNDA1MDAwMFowRTELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IElu +Yy4xHjAcBgNVBAMTFUdlb1RydXN0IFVuaXZlcnNhbCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIP +ADCCAgoCggIBAKYVVaCjxuAfjJ0hUNfBvitbtaSeodlyWL0AG0y/YckUHUWCq8YdgNY96xCcOq9t +JPi8cQGeBvV8Xx7BDlXKg5pZMK4ZyzBIle0iN430SppyZj6tlcDgFgDgEB8rMQ7XlFTTQjOgNB0e +RXbdT8oYN+yFFXoZCPzVx5zw8qkuEKmS5j1YPakWaDwvdSEYfyh3peFhF7em6fgemdtzbvQKoiFs +7tqqhZJmr/Z6a4LauiIINQ/PQvE1+mrufislzDoR5G2vc7J2Ha3QsnhnGqQ5HFELZ1aD/ThdDc7d +8Lsrlh/eezJS/R27tQahsiFepdaVaH/wmZ7cRQg+59IJDTWU3YBOU5fXtQlEIGQWFwMCTFMNaN7V +qnJNk22CDtucvc+081xdVHppCZbW2xHBjXWotM85yM48vCR85mLK4b19p71XZQvk/iXttmkQ3Cga +Rr0BHdCXteGYO8A3ZNY9lO4L4fUorgtWv3GLIylBjobFS1J72HGrH4oVpjuDWtdYAVHGTEHZf9hB +Z3KiKN9gg6meyHv8U3NyWfWTehd2Ds735VzZC1U0oqpbtWpU5xPKV+yXbfReBi9Fi1jUIxaS5BZu +KGNZMN9QAZxjiRqf2xeUgnA3wySemkfWWspOqGmJch+RbNt+nhutxx9z3SxPGWX9f5NAEC7S8O08 +ni4oPmkmM8V7AgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNq7LqqwDLiIJlF0 +XG0D08DYj3rWMB8GA1UdIwQYMBaAFNq7LqqwDLiIJlF0XG0D08DYj3rWMA4GA1UdDwEB/wQEAwIB +hjANBgkqhkiG9w0BAQUFAAOCAgEAMXjmx7XfuJRAyXHEqDXsRh3ChfMoWIawC/yOsjmPRFWrZIRc +aanQmjg8+uUfNeVE44B5lGiku8SfPeE0zTBGi1QrlaXv9z+ZhP015s8xxtxqv6fXIwjhmF7DWgh2 +qaavdy+3YL1ERmrvl/9zlcGO6JP7/TG37FcREUWbMPEaiDnBTzynANXH/KttgCJwpQzgXQQpAvvL +oJHRfNbDflDVnVi+QTjruXU8FdmbyUqDWcDaU/0zuzYYm4UPFd3uLax2k7nZAY1IEKj79TiG8dsK +xr2EoyNB3tZ3b4XUhRxQ4K5RirqNPnbiucon8l+f725ZDQbYKxek0nxru18UGkiPGkzns0ccjkxF +KyDuSN/n3QmOGKjaQI2SJhFTYXNd673nxE0pN2HrrDktZy4W1vUAg4WhzH92xH3kt0tm7wNFYGm2 +DFKWkoRepqO1pD4r2czYG0eq8kTaT/kD6PAUyz/zg97QwVTjt+gKN02LIFkDMBmhLMi9ER/frslK +xfMnZmaGrGiR/9nmUxwPi1xpZQomyB40w11Re9epnAahNt3ViZS82eQtDF4JbAiXfKM9fJP/P6EU +p8+1Xevb2xzEdt+Iub1FBZUbrvxGakyvSOPOrg/SfuvmbJxPgWp6ZKy7PtXny3YuxadIwVyQD8vI +P/rmMuGNG2+k5o7Y+SlIis5z/iw= +-----END CERTIFICATE----- + +GeoTrust Universal CA 2 +======================= +-----BEGIN CERTIFICATE----- +MIIFbDCCA1SgAwIBAgIBATANBgkqhkiG9w0BAQUFADBHMQswCQYDVQQGEwJVUzEWMBQGA1UEChMN +R2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMXR2VvVHJ1c3QgVW5pdmVyc2FsIENBIDIwHhcNMDQwMzA0 +MDUwMDAwWhcNMjkwMzA0MDUwMDAwWjBHMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3Qg +SW5jLjEgMB4GA1UEAxMXR2VvVHJ1c3QgVW5pdmVyc2FsIENBIDIwggIiMA0GCSqGSIb3DQEBAQUA +A4ICDwAwggIKAoICAQCzVFLByT7y2dyxUxpZKeexw0Uo5dfR7cXFS6GqdHtXr0om/Nj1XqduGdt0 +DE81WzILAePb63p3NeqqWuDW6KFXlPCQo3RWlEQwAx5cTiuFJnSCegx2oG9NzkEtoBUGFF+3Qs17 +j1hhNNwqCPkuwwGmIkQcTAeC5lvO0Ep8BNMZcyfwqph/Lq9O64ceJHdqXbboW0W63MOhBW9Wjo8Q +JqVJwy7XQYci4E+GymC16qFjwAGXEHm9ADwSbSsVsaxLse4YuU6W3Nx2/zu+z18DwPw76L5GG//a +QMJS9/7jOvdqdzXQ2o3rXhhqMcceujwbKNZrVMaqW9eiLBsZzKIC9ptZvTdrhrVtgrrY6slWvKk2 +WP0+GfPtDCapkzj4T8FdIgbQl+rhrcZV4IErKIM6+vR7IVEAvlI4zs1meaj0gVbi0IMJR1FbUGrP +20gaXT73y/Zl92zxlfgCOzJWgjl6W70viRu/obTo/3+NjN8D8WBOWBFM66M/ECuDmgFz2ZRthAAn +ZqzwcEAJQpKtT5MNYQlRJNiS1QuUYbKHsu3/mjX/hVTK7URDrBs8FmtISgocQIgfksILAAX/8sgC +SqSqqcyZlpwvWOB94b67B9xfBHJcMTTD7F8t4D1kkCLm0ey4Lt1ZrtmhN79UNdxzMk+MBB4zsslG +8dhcyFVQyWi9qLo2CQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR281Xh+qQ2 ++/CfXGJx7Tz0RzgQKzAfBgNVHSMEGDAWgBR281Xh+qQ2+/CfXGJx7Tz0RzgQKzAOBgNVHQ8BAf8E +BAMCAYYwDQYJKoZIhvcNAQEFBQADggIBAGbBxiPz2eAubl/oz66wsCVNK/g7WJtAJDday6sWSf+z +dXkzoS9tcBc0kf5nfo/sm+VegqlVHy/c1FEHEv6sFj4sNcZj/NwQ6w2jqtB8zNHQL1EuxBRa3ugZ +4T7GzKQp5y6EqgYweHZUcyiYWTjgAA1i00J9IZ+uPTqM1fp3DRgrFg5fNuH8KrUwJM/gYwx7WBr+ +mbpCErGR9Hxo4sjoryzqyX6uuyo9DRXcNJW2GHSoag/HtPQTxORb7QrSpJdMKu0vbBKJPfEncKpq +A1Ihn0CoZ1Dy81of398j9tx4TuaYT1U6U+Pv8vSfx3zYWK8pIpe44L2RLrB27FcRz+8pRPPphXpg +Y+RdM4kX2TGq2tbzGDVyz4crL2MjhF2EjD9XoIj8mZEoJmmZ1I+XRL6O1UixpCgp8RW04eWe3fiP +pm8m1wk8OhwRDqZsN/etRIcsKMfYdIKz0G9KV7s1KSegi+ghp4dkNl3M2Basx7InQJJVOCiNUW7d +FGdTbHFcJoRNdVq2fmBWqU2t+5sel/MN2dKXVHfaPRK34B7vCAas+YWH6aLcr34YEoP9VhdBLtUp +gn2Z9DH2canPLAEnpQW5qrJITirvn5NSUZU8UnOOVkwXQMAJKOSLakhT2+zNVVXxxvjpoixMptEm +X36vWkzaH6byHCx+rgIW0lbQL1dTR+iS +-----END CERTIFICATE----- + +Comodo AAA Services root +======================== +-----BEGIN CERTIFICATE----- +MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwS +R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0Eg +TGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAw +MFoXDTI4MTIzMTIzNTk1OVowezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hl +c3RlcjEQMA4GA1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV +BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQuaBtDFcCLNSS1UY8y2bmhG +C1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe3M/vg4aijJRPn2jymJBGhCfHdr/jzDUs +i14HZGWCwEiwqJH5YZ92IFCokcdmtet4YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszW +Y19zjNoFmag4qMsXeDZRrOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjH +Ypy+g8cmez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQUoBEK +Iz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wewYDVR0f +BHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNl +cy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29tb2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2Vz +LmNybDANBgkqhkiG9w0BAQUFAAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm +7l3sAg9g1o1QGE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz +Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2G9w84FoVxp7Z +8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsil2D4kF501KKaU73yqWjgom7C +12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg== +-----END CERTIFICATE----- + +QuoVadis Root CA +================ +-----BEGIN CERTIFICATE----- +MIIF0DCCBLigAwIBAgIEOrZQizANBgkqhkiG9w0BAQUFADB/MQswCQYDVQQGEwJCTTEZMBcGA1UE +ChMQUXVvVmFkaXMgTGltaXRlZDElMCMGA1UECxMcUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 +eTEuMCwGA1UEAxMlUXVvVmFkaXMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wMTAz +MTkxODMzMzNaFw0yMTAzMTcxODMzMzNaMH8xCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRp +cyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MS4wLAYDVQQD +EyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEAv2G1lVO6V/z68mcLOhrfEYBklbTRvM16z/Ypli4kVEAkOPcahdxYTMuk +J0KX0J+DisPkBgNbAKVRHnAEdOLB1Dqr1607BxgFjv2DrOpm2RgbaIr1VxqYuvXtdj182d6UajtL +F8HVj71lODqV0D1VNk7feVcxKh7YWWVJWCCYfqtffp/p1k3sg3Spx2zY7ilKhSoGFPlU5tPaZQeL +YzcS19Dsw3sgQUSj7cugF+FxZc4dZjH3dgEZyH0DWLaVSR2mEiboxgx24ONmy+pdpibu5cxfvWen +AScOospUxbF6lR1xHkopigPcakXBpBlebzbNw6Kwt/5cOOJSvPhEQ+aQuwIDAQABo4ICUjCCAk4w +PQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFodHRwczovL29jc3AucXVvdmFkaXNvZmZzaG9y +ZS5jb20wDwYDVR0TAQH/BAUwAwEB/zCCARoGA1UdIASCAREwggENMIIBCQYJKwYBBAG+WAABMIH7 +MIHUBggrBgEFBQcCAjCBxxqBxFJlbGlhbmNlIG9uIHRoZSBRdW9WYWRpcyBSb290IENlcnRpZmlj +YXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgdGhlIHRoZW4gYXBwbGljYWJs +ZSBzdGFuZGFyZCB0ZXJtcyBhbmQgY29uZGl0aW9ucyBvZiB1c2UsIGNlcnRpZmljYXRpb24gcHJh +Y3RpY2VzLCBhbmQgdGhlIFF1b1ZhZGlzIENlcnRpZmljYXRlIFBvbGljeS4wIgYIKwYBBQUHAgEW +Fmh0dHA6Ly93d3cucXVvdmFkaXMuYm0wHQYDVR0OBBYEFItLbe3TKbkGGew5Oanwl4Rqy+/fMIGu +BgNVHSMEgaYwgaOAFItLbe3TKbkGGew5Oanwl4Rqy+/foYGEpIGBMH8xCzAJBgNVBAYTAkJNMRkw +FwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0 +aG9yaXR5MS4wLAYDVQQDEyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggQ6 +tlCLMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAitQUtf70mpKnGdSkfnIYj9lo +fFIk3WdvOXrEql494liwTXCYhGHoG+NpGA7O+0dQoE7/8CQfvbLO9Sf87C9TqnN7Az10buYWnuul +LsS/VidQK2K6vkscPFVcQR0kvoIgR13VRH56FmjffU1RcHhXHTMe/QKZnAzNCgVPx7uOpHX6Sm2x +gI4JVrmcGmD+XcHXetwReNDWXcG31a0ymQM6isxUJTkxgXsTIlG6Rmyhu576BGxJJnSP0nPrzDCi +5upZIof4l/UO/erMkqQWxFIY6iHOsfHmhIHluqmGKPJDWl0Snawe2ajlCmqnf6CHKc/yiU3U7MXi +5nrQNiOKSnQ2+Q== +-----END CERTIFICATE----- + +QuoVadis Root CA 2 +================== +-----BEGIN CERTIFICATE----- +MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoT +EFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMjAeFw0wNjExMjQx +ODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM +aW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQCaGMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6 +XJxgFyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55JWpzmM+Yk +lvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bBrrcCaoF6qUWD4gXmuVbB +lDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp+ARz8un+XJiM9XOva7R+zdRcAitMOeGy +lZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt +66/3FsvbzSUr5R/7mp/iUcw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1Jdxn +wQ5hYIizPtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og/zOh +D7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UHoycR7hYQe7xFSkyy +BNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuIyV77zGHcizN300QyNQliBJIWENie +J0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1Ud +DgQWBBQahGK8SEwzJQTU7tD2A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGU +a6FJpEcwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT +ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2fBluornFdLwUv +Z+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzng/iN/Ae42l9NLmeyhP3ZRPx3 +UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2BlfF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodm +VjB3pjd4M1IQWK4/YY7yarHvGH5KWWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK ++JDSV6IZUaUtl0HaB0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrW +IozchLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPRTUIZ3Ph1 +WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWDmbA4CD/pXvk1B+TJYm5X +f6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0ZohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II +4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8 +VCLAAVBpQ570su9t+Oza8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u +-----END CERTIFICATE----- + +QuoVadis Root CA 3 +================== +-----BEGIN CERTIFICATE----- +MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoT +EFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMzAeFw0wNjExMjQx +OTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM +aW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQDMV0IWVJzmmNPTTe7+7cefQzlKZbPoFog02w1ZkXTPkrgEQK0CSzGrvI2RaNgg +DhoB4hp7Thdd4oq3P5kazethq8Jlph+3t723j/z9cI8LoGe+AaJZz3HmDyl2/7FWeUUrH556VOij +KTVopAFPD6QuN+8bv+OPEKhyq1hX51SGyMnzW9os2l2ObjyjPtr7guXd8lyyBTNvijbO0BNO/79K +DDRMpsMhvVAEVeuxu537RR5kFd5VAYwCdrXLoT9CabwvvWhDFlaJKjdhkf2mrk7AyxRllDdLkgbv +BNDInIjbC3uBr7E9KsRlOni27tyAsdLTmZw67mtaa7ONt9XOnMK+pUsvFrGeaDsGb659n/je7Mwp +p5ijJUMv7/FfJuGITfhebtfZFG4ZM2mnO4SJk8RTVROhUXhA+LjJou57ulJCg54U7QVSWllWp5f8 +nT8KKdjcT5EOE7zelaTfi5m+rJsziO+1ga8bxiJTyPbH7pcUsMV8eFLI8M5ud2CEpukqdiDtWAEX +MJPpGovgc2PZapKUSU60rUqFxKMiMPwJ7Wgic6aIDFUhWMXhOp8q3crhkODZc6tsgLjoC2SToJyM +Gf+z0gzskSaHirOi4XCPLArlzW1oUevaPwV/izLmE1xr/l9A4iLItLRkT9a6fUg+qGkM17uGcclz +uD87nSVL2v9A6wIDAQABo4IBlTCCAZEwDwYDVR0TAQH/BAUwAwEB/zCB4QYDVR0gBIHZMIHWMIHT +BgkrBgEEAb5YAAMwgcUwgZMGCCsGAQUFBwICMIGGGoGDQW55IHVzZSBvZiB0aGlzIENlcnRpZmlj +YXRlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFF1b1ZhZGlzIFJvb3QgQ0EgMyBDZXJ0 +aWZpY2F0ZSBQb2xpY3kgLyBDZXJ0aWZpY2F0aW9uIFByYWN0aWNlIFN0YXRlbWVudC4wLQYIKwYB +BQUHAgEWIWh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL2NwczALBgNVHQ8EBAMCAQYwHQYD +VR0OBBYEFPLAE+CCQz777i9nMpY1XNu4ywLQMG4GA1UdIwRnMGWAFPLAE+CCQz777i9nMpY1XNu4 +ywLQoUmkRzBFMQswCQYDVQQGEwJCTTEZMBcGA1UEChMQUXVvVmFkaXMgTGltaXRlZDEbMBkGA1UE +AxMSUXVvVmFkaXMgUm9vdCBDQSAzggIFxjANBgkqhkiG9w0BAQUFAAOCAgEAT62gLEz6wPJv92ZV +qyM07ucp2sNbtrCD2dDQ4iH782CnO11gUyeim/YIIirnv6By5ZwkajGxkHon24QRiSemd1o417+s +hvzuXYO8BsbRd2sPbSQvS3pspweWyuOEn62Iix2rFo1bZhfZFvSLgNLd+LJ2w/w4E6oM3kJpK27z +POuAJ9v1pkQNn1pVWQvVDVJIxa6f8i+AxeoyUDUSly7B4f/xI4hROJ/yZlZ25w9Rl6VSDE1JUZU2 +Pb+iSwwQHYaZTKrzchGT5Or2m9qoXadNt54CrnMAyNojA+j56hl0YgCUyyIgvpSnWbWCar6ZeXqp +8kokUvd0/bpO5qgdAm6xDYBEwa7TIzdfu4V8K5Iu6H6li92Z4b8nby1dqnuH/grdS/yO9SbkbnBC +bjPsMZ57k8HkyWkaPcBrTiJt7qtYTcbQQcEr6k8Sh17rRdhs9ZgC06DYVYoGmRmioHfRMJ6szHXu +g/WwYjnPbFfiTNKRCw51KBuav/0aQ/HKd/s7j2G4aSgWQgRecCocIdiP4b0jWy10QJLZYxkNc91p +vGJHvOB0K7Lrfb5BG7XARsWhIstfTsEokt4YutUqKLsRixeTmJlglFwjz1onl14LBQaTNx47aTbr +qZ5hHY8y2o4M1nQ+ewkk2gF3R8Q7zTSMmfXK4SVhM7JZG+Ju1zdXtg2pEto= +-----END CERTIFICATE----- + +Security Communication Root CA +============================== +-----BEGIN CERTIFICATE----- +MIIDWjCCAkKgAwIBAgIBADANBgkqhkiG9w0BAQUFADBQMQswCQYDVQQGEwJKUDEYMBYGA1UEChMP +U0VDT00gVHJ1c3QubmV0MScwJQYDVQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTEw +HhcNMDMwOTMwMDQyMDQ5WhcNMjMwOTMwMDQyMDQ5WjBQMQswCQYDVQQGEwJKUDEYMBYGA1UEChMP +U0VDT00gVHJ1c3QubmV0MScwJQYDVQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTEw +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzs/5/022x7xZ8V6UMbXaKL0u/ZPtM7orw +8yl89f/uKuDp6bpbZCKamm8sOiZpUQWZJtzVHGpxxpp9Hp3dfGzGjGdnSj74cbAZJ6kJDKaVv0uM +DPpVmDvY6CKhS3E4eayXkmmziX7qIWgGmBSWh9JhNrxtJ1aeV+7AwFb9Ms+k2Y7CI9eNqPPYJayX +5HA49LY6tJ07lyZDo6G8SVlyTCMwhwFY9k6+HGhWZq/NQV3Is00qVUarH9oe4kA92819uZKAnDfd +DJZkndwi92SL32HeFZRSFaB9UslLqCHJxrHty8OVYNEP8Ktw+N/LTX7s1vqr2b1/VPKl6Xn62dZ2 +JChzAgMBAAGjPzA9MB0GA1UdDgQWBBSgc0mZaNyFW2XjmygvV5+9M7wHSDALBgNVHQ8EBAMCAQYw +DwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAaECpqLvkT115swW1F7NgE+vGkl3g +0dNq/vu+m22/xwVtWSDEHPC32oRYAmP6SBbvT6UL90qY8j+eG61Ha2POCEfrUj94nK9NrvjVT8+a +mCoQQTlSxN3Zmw7vkwGusi7KaEIkQmywszo+zenaSMQVy+n5Bw+SUEmK3TGXX8npN6o7WWWXlDLJ +s58+OmJYxUmtYg5xpTKqL8aJdkNAExNnPaJUJRDL8Try2frbSVa7pv6nQTXD4IhhyYjH3zYQIphZ +6rBK+1YWc26sTfcioU+tHXotRSflMMFe8toTyyVCUZVHA4xsIcx0Qu1T/zOLjw9XARYvz6buyXAi +FL39vmwLAw== +-----END CERTIFICATE----- + +Sonera Class 2 Root CA +====================== +-----BEGIN CERTIFICATE----- +MIIDIDCCAgigAwIBAgIBHTANBgkqhkiG9w0BAQUFADA5MQswCQYDVQQGEwJGSTEPMA0GA1UEChMG +U29uZXJhMRkwFwYDVQQDExBTb25lcmEgQ2xhc3MyIENBMB4XDTAxMDQwNjA3Mjk0MFoXDTIxMDQw +NjA3Mjk0MFowOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVyYTEZMBcGA1UEAxMQU29uZXJh +IENsYXNzMiBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJAXSjWdyvANlsdE+hY3 +/Ei9vX+ALTU74W+oZ6m/AxxNjG8yR9VBaKQTBME1DJqEQ/xcHf+Js+gXGM2RX/uJ4+q/Tl18GybT +dXnt5oTjV+WtKcT0OijnpXuENmmz/V52vaMtmdOQTiMofRhj8VQ7Jp12W5dCsv+u8E7s3TmVToMG +f+dJQMjFAbJUWmYdPfz56TwKnoG4cPABi+QjVHzIrviQHgCWctRUz2EjvOr7nQKV0ba5cTppCD8P +tOFCx4j1P5iop7oc4HFx71hXgVB6XGt0Rg6DA5jDjqhu8nYybieDwnPz3BjotJPqdURrBGAgcVeH +nfO+oJAjPYok4doh28MCAwEAAaMzMDEwDwYDVR0TAQH/BAUwAwEB/zARBgNVHQ4ECgQISqCqWITT +XjwwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQBazof5FnIVV0sd2ZvnoiYw7JNn39Yt +0jSv9zilzqsWuasvfDXLrNAPtEwr/IDva4yRXzZ299uzGxnq9LIR/WFxRL8oszodv7ND6J+/3DEI +cbCdjdY0RzKQxmUk96BKfARzjzlvF4xytb1LyHr4e4PDKE6cCepnP7JnBBvDFNr450kkkdAdavph +Oe9r5yF1BgfYErQhIHBCcYHaPJo2vqZbDWpsmh+Re/n570K6Tk6ezAyNlNzZRZxe7EJQY670XcSx +EtzKO6gunRRaBXW37Ndj4ro1tgQIkejanZz2ZrUYrAqmVCY0M9IbwdR/GjqOC6oybtv8TyWf2TLH +llpwrN9M +-----END CERTIFICATE----- + +XRamp Global CA Root +==================== +-----BEGIN CERTIFICATE----- +MIIEMDCCAxigAwIBAgIQUJRs7Bjq1ZxN1ZfvdY+grTANBgkqhkiG9w0BAQUFADCBgjELMAkGA1UE +BhMCVVMxHjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2Vj +dXJpdHkgU2VydmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBB +dXRob3JpdHkwHhcNMDQxMTAxMTcxNDA0WhcNMzUwMTAxMDUzNzE5WjCBgjELMAkGA1UEBhMCVVMx +HjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2VjdXJpdHkg +U2VydmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBBdXRob3Jp +dHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJB69FbS638eMpSe2OAtp87ZOqCwu +IR1cRN8hXX4jdP5efrRKt6atH67gBhbim1vZZ3RrXYCPKZ2GG9mcDZhtdhAoWORlsH9KmHmf4MMx +foArtYzAQDsRhtDLooY2YKTVMIJt2W7QDxIEM5dfT2Fa8OT5kavnHTu86M/0ay00fOJIYRyO82FE +zG+gSqmUsE3a56k0enI4qEHMPJQRfevIpoy3hsvKMzvZPTeL+3o+hiznc9cKV6xkmxnr9A8ECIqs +AxcZZPRaJSKNNCyy9mgdEm3Tih4U2sSPpuIjhdV6Db1q4Ons7Be7QhtnqiXtRYMh/MHJfNViPvry +xS3T/dRlAgMBAAGjgZ8wgZwwEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1Ud +EwEB/wQFMAMBAf8wHQYDVR0OBBYEFMZPoj0GY4QJnM5i5ASsjVy16bYbMDYGA1UdHwQvMC0wK6Ap +oCeGJWh0dHA6Ly9jcmwueHJhbXBzZWN1cml0eS5jb20vWEdDQS5jcmwwEAYJKwYBBAGCNxUBBAMC +AQEwDQYJKoZIhvcNAQEFBQADggEBAJEVOQMBG2f7Shz5CmBbodpNl2L5JFMn14JkTpAuw0kbK5rc +/Kh4ZzXxHfARvbdI4xD2Dd8/0sm2qlWkSLoC295ZLhVbO50WfUfXN+pfTXYSNrsf16GBBEYgoyxt +qZ4Bfj8pzgCT3/3JknOJiWSe5yvkHJEs0rnOfc5vMZnT5r7SHpDwCRR5XCOrTdLaIR9NmXmd4c8n +nxCbHIgNsIpkQTG4DmyQJKSbXHGPurt+HBvbaoAPIbzp26a3QPSyi6mx5O+aGtA9aZnuqCij4Tyz +8LIRnM98QObd50N9otg6tamN8jSZxNQQ4Qb9CYQQO+7ETPTsJ3xCwnR8gooJybQDJbw= +-----END CERTIFICATE----- + +Go Daddy Class 2 CA +=================== +-----BEGIN CERTIFICATE----- +MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMY +VGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRp +ZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkG +A1UEBhMCVVMxITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28g +RGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQAD +ggENADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCAPVYYYwhv +2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6wwdhFJ2+qN1j3hybX2C32 +qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXiEqITLdiOr18SPaAIBQi2XKVlOARFmR6j +YGB0xUGlcmIbYsUfb18aQr4CUWWoriMYavx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmY +vLEHZ6IVDd2gWMZEewo+YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0O +BBYEFNLEsNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h/t2o +atTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMu +MTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwG +A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wim +PQoZ+YeAEW5p5JYXMP80kWNyOO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKt +I3lpjbi2Tc7PTMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ +HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mERdEr/VxqHD3VI +Ls9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5CufReYNnyicsbkqWletNw+vHX/b +vZ8= +-----END CERTIFICATE----- + +Starfield Class 2 CA +==================== +-----BEGIN CERTIFICATE----- +MIIEDzCCAvegAwIBAgIBADANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJVUzElMCMGA1UEChMc +U3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMpU3RhcmZpZWxkIENsYXNzIDIg +Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwNjI5MTczOTE2WhcNMzQwNjI5MTczOTE2WjBo +MQswCQYDVQQGEwJVUzElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAG +A1UECxMpU3RhcmZpZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEgMA0GCSqG +SIb3DQEBAQUAA4IBDQAwggEIAoIBAQC3Msj+6XGmBIWtDBFk385N78gDGIc/oav7PKaf8MOh2tTY +bitTkPskpD6E8J7oX+zlJ0T1KKY/e97gKvDIr1MvnsoFAZMej2YcOadN+lq2cwQlZut3f+dZxkqZ +JRRU6ybH838Z1TBwj6+wRir/resp7defqgSHo9T5iaU0X9tDkYI22WY8sbi5gv2cOj4QyDvvBmVm +epsZGD3/cVE8MC5fvj13c7JdBmzDI1aaK4UmkhynArPkPw2vCHmCuDY96pzTNbO8acr1zJ3o/WSN +F4Azbl5KXZnJHoe0nRrA1W4TNSNe35tfPe/W93bC6j67eA0cQmdrBNj41tpvi/JEoAGrAgEDo4HF +MIHCMB0GA1UdDgQWBBS/X7fRzt0fhvRbVazc1xDCDqmI5zCBkgYDVR0jBIGKMIGHgBS/X7fRzt0f +hvRbVazc1xDCDqmI56FspGowaDELMAkGA1UEBhMCVVMxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNo +bm9sb2dpZXMsIEluYy4xMjAwBgNVBAsTKVN0YXJmaWVsZCBDbGFzcyAyIENlcnRpZmljYXRpb24g +QXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAAWdP4id0ckaVaGs +afPzWdqbAYcaT1epoXkJKtv3L7IezMdeatiDh6GX70k1PncGQVhiv45YuApnP+yz3SFmH8lU+nLM +PUxA2IGvd56Deruix/U0F47ZEUD0/CwqTRV/p2JdLiXTAAsgGh1o+Re49L2L7ShZ3U0WixeDyLJl +xy16paq8U4Zt3VekyvggQQto8PT7dL5WXXp59fkdheMtlb71cZBDzI0fmgAKhynpVSJYACPq4xJD +KVtHCN2MQWplBqjlIapBtJUhlbl90TSrE9atvNziPTnNvT51cKEYWQPJIrSPnNVeKtelttQKbfi3 +QBFGmh95DmK/D5fs4C8fF5Q= +-----END CERTIFICATE----- + +Taiwan GRCA +=========== +-----BEGIN CERTIFICATE----- +MIIFcjCCA1qgAwIBAgIQH51ZWtcvwgZEpYAIaeNe9jANBgkqhkiG9w0BAQUFADA/MQswCQYDVQQG +EwJUVzEwMC4GA1UECgwnR292ZXJubWVudCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4X +DTAyMTIwNTEzMjMzM1oXDTMyMTIwNTEzMjMzM1owPzELMAkGA1UEBhMCVFcxMDAuBgNVBAoMJ0dv +dmVybm1lbnQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQAD +ggIPADCCAgoCggIBAJoluOzMonWoe/fOW1mKydGGEghU7Jzy50b2iPN86aXfTEc2pBsBHH8eV4qN +w8XRIePaJD9IK/ufLqGU5ywck9G/GwGHU5nOp/UKIXZ3/6m3xnOUT0b3EEk3+qhZSV1qgQdW8or5 +BtD3cCJNtLdBuTK4sfCxw5w/cP1T3YGq2GN49thTbqGsaoQkclSGxtKyyhwOeYHWtXBiCAEuTk8O +1RGvqa/lmr/czIdtJuTJV6L7lvnM4T9TjGxMfptTCAtsF/tnyMKtsc2AtJfcdgEWFelq16TheEfO +htX7MfP6Mb40qij7cEwdScevLJ1tZqa2jWR+tSBqnTuBto9AAGdLiYa4zGX+FVPpBMHWXx1E1wov +J5pGfaENda1UhhXcSTvxls4Pm6Dso3pdvtUqdULle96ltqqvKKyskKw4t9VoNSZ63Pc78/1Fm9G7 +Q3hub/FCVGqY8A2tl+lSXunVanLeavcbYBT0peS2cWeqH+riTcFCQP5nRhc4L0c/cZyu5SHKYS1t +B6iEfC3uUSXxY5Ce/eFXiGvviiNtsea9P63RPZYLhY3Naye7twWb7LuRqQoHEgKXTiCQ8P8NHuJB +O9NAOueNXdpm5AKwB1KYXA6OM5zCppX7VRluTI6uSw+9wThNXo+EHWbNxWCWtFJaBYmOlXqYwZE8 +lSOyDvR5tMl8wUohAgMBAAGjajBoMB0GA1UdDgQWBBTMzO/MKWCkO7GStjz6MmKPrCUVOzAMBgNV +HRMEBTADAQH/MDkGBGcqBwAEMTAvMC0CAQAwCQYFKw4DAhoFADAHBgVnKgMAAAQUA5vwIhP/lSg2 +09yewDL7MTqKUWUwDQYJKoZIhvcNAQEFBQADggIBAECASvomyc5eMN1PhnR2WPWus4MzeKR6dBcZ +TulStbngCnRiqmjKeKBMmo4sIy7VahIkv9Ro04rQ2JyftB8M3jh+Vzj8jeJPXgyfqzvS/3WXy6Tj +Zwj/5cAWtUgBfen5Cv8b5Wppv3ghqMKnI6mGq3ZW6A4M9hPdKmaKZEk9GhiHkASfQlK3T8v+R0F2 +Ne//AHY2RTKbxkaFXeIksB7jSJaYV0eUVXoPQbFEJPPB/hprv4j9wabak2BegUqZIJxIZhm1AHlU +D7gsL0u8qV1bYH+Mh6XgUmMqvtg7hUAV/h62ZT/FS9p+tXo1KaMuephgIqP0fSdOLeq0dDzpD6Qz +DxARvBMB1uUO07+1EqLhRSPAzAhuYbeJq4PjJB7mXQfnHyA+z2fI56wwbSdLaG5LKlwCCDTb+Hbk +Z6MmnD+iMsJKxYEYMRBWqoTvLQr/uB930r+lWKBi5NdLkXWNiYCYfm3LU05er/ayl4WXudpVBrkk +7tfGOB5jGxI7leFYrPLfhNVfmS8NVVvmONsuP3LpSIXLuykTjx44VbnzssQwmSNOXfJIoRIM3BKQ +CZBUkQM8R+XVyWXgt0t97EfTsws+rZ7QdAAO671RrcDeLMDDav7v3Aun+kbfYNucpllQdSNpc5Oy ++fwC00fmcc4QAu4njIT/rEUNE1yDMuAlpYYsfPQS +-----END CERTIFICATE----- + +DigiCert Assured ID Root CA +=========================== +-----BEGIN CERTIFICATE----- +MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBlMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw +IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzEx +MTEwMDAwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL +ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0Ew +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7cJpSIqvTO +9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYPmDI2dsze3Tyoou9q+yHy +UmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW +/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpy +oeb6pNnVFzF1roV9Iq4/AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whf +GHdPAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRF +66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzANBgkq +hkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRCdWKuh+vy1dneVrOfzM4UKLkNl2Bc +EkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTffwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38Fn +SbNd67IJKusm7Xi+fT8r87cmNW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i +8b5QZ7dsvfPxH2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe ++o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g== +-----END CERTIFICATE----- + +DigiCert Global Root CA +======================= +-----BEGIN CERTIFICATE----- +MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAw +HgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAw +MDAwMDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 +dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkq +hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsBCSDMAZOn +TjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97nh6Vfe63SKMI2tavegw5 +BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt43C/dxC//AH2hdmoRBBYMql1GNXRor5H +4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7PT19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y +7vrTC0LUq7dBMtoM1O/4gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQAB +o2MwYTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbRTLtm +8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQEF +BQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/EsrhMAtudXH/vTBH1jLuG2cenTnmCmr +EbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIt +tep3Sp+dWOIrWcBAI+0tKIJFPnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886 +UAb3LujEV0lsYSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk +CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4= +-----END CERTIFICATE----- + +DigiCert High Assurance EV Root CA +================================== +-----BEGIN CERTIFICATE----- +MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSsw +KQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAw +MFoXDTMxMTExMDAwMDAwMFowbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZ +MBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFu +Y2UgRVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm+9S75S0t +Mqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTWPNt0OKRKzE0lgvdKpVMS +OO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEMxChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3 +MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFBIk5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQ +NAQTXKFx01p8VdteZOE3hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUe +h10aUAsgEsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMB +Af8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaAFLE+w2kD+L9HAdSY +JhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3NecnzyIZgYIVyHbIUf4KmeqvxgydkAQ +V8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6zeM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFp +myPInngiK3BD41VHMWEZ71jFhS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkK +mNEVX58Svnw2Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe +vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep+OkuE6N36B9K +-----END CERTIFICATE----- + +Certplus Class 2 Primary CA +=========================== +-----BEGIN CERTIFICATE----- +MIIDkjCCAnqgAwIBAgIRAIW9S/PY2uNp9pTXX8OlRCMwDQYJKoZIhvcNAQEFBQAwPTELMAkGA1UE +BhMCRlIxETAPBgNVBAoTCENlcnRwbHVzMRswGQYDVQQDExJDbGFzcyAyIFByaW1hcnkgQ0EwHhcN +OTkwNzA3MTcwNTAwWhcNMTkwNzA2MjM1OTU5WjA9MQswCQYDVQQGEwJGUjERMA8GA1UEChMIQ2Vy +dHBsdXMxGzAZBgNVBAMTEkNsYXNzIDIgUHJpbWFyeSBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP +ADCCAQoCggEBANxQltAS+DXSCHh6tlJw/W/uz7kRy1134ezpfgSN1sxvc0NXYKwzCkTsA18cgCSR +5aiRVhKC9+Ar9NuuYS6JEI1rbLqzAr3VNsVINyPi8Fo3UjMXEuLRYE2+L0ER4/YXJQyLkcAbmXuZ +Vg2v7tK8R1fjeUl7NIknJITesezpWE7+Tt9avkGtrAjFGA7v0lPubNCdEgETjdyAYveVqUSISnFO +YFWe2yMZeVYHDD9jC1yw4r5+FfyUM1hBOHTE4Y+L3yasH7WLO7dDWWuwJKZtkIvEcupdM5i3y95e +e++U8Rs+yskhwcWYAqqi9lt3m/V+llU0HGdpwPFC40es/CgcZlUCAwEAAaOBjDCBiTAPBgNVHRME +CDAGAQH/AgEKMAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQU43Mt38sOKAze3bOkynm4jrvoMIkwEQYJ +YIZIAYb4QgEBBAQDAgEGMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly93d3cuY2VydHBsdXMuY29t +L0NSTC9jbGFzczIuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQCnVM+IRBnL39R/AN9WM2K191EBkOvD +P9GIROkkXe/nFL0gt5o8AP5tn9uQ3Nf0YtaLcF3n5QRIqWh8yfFC82x/xXp8HVGIutIKPidd3i1R +TtMTZGnkLuPT55sJmabglZvOGtd/vjzOUrMRFcEPF80Du5wlFbqidon8BvEY0JNLDnyCt6X09l/+ +7UCmnYR0ObncHoUW2ikbhiMAybuJfm6AiB4vFLQDJKgybwOaRywwvlbGp0ICcBvqQNi6BQNwB6SW +//1IMwrh3KWBkJtN3X3n57LNXMhqlfil9o3EXXgIvnsG1knPGTZQIy4I5p4FTUcY1Rbpsda2ENW7 +l7+ijrRU +-----END CERTIFICATE----- + +DST Root CA X3 +============== +-----BEGIN CERTIFICATE----- +MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/MSQwIgYDVQQK +ExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMTDkRTVCBSb290IENBIFgzMB4X +DTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVowPzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1 +cmUgVHJ1c3QgQ28uMRcwFQYDVQQDEw5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQAD +ggEPADCCAQoCggEBAN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmT +rE4Orz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEqOLl5CjH9 +UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9bxiqKqy69cK3FCxolkHRy +xXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40d +utolucbY38EVAjqr2m7xPi71XAicPNaDaeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0T +AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQ +MA0GCSqGSIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69ikug +dB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXrAvHRAosZy5Q6XkjE +GB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZzR8srzJmwN0jP41ZL9c8PDHIyh8bw +RLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubS +fZGL+T0yjWW06XyxV3bqxbYoOb8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ +-----END CERTIFICATE----- + +SwissSign Gold CA - G2 +====================== +-----BEGIN CERTIFICATE----- +MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkNIMRUw +EwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2lnbiBHb2xkIENBIC0gRzIwHhcN +MDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBFMQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dp +c3NTaWduIEFHMR8wHQYDVQQDExZTd2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUq +t2/876LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+bbqBHH5C +jCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c6bM8K8vzARO/Ws/BtQpg +vd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqEemA8atufK+ze3gE/bk3lUIbLtK/tREDF +ylqM2tIrfKjuvqblCqoOpd8FUrdVxyJdMmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvR +AiTysybUa9oEVeXBCsdtMDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuend +jIj3o02yMszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69yFGkO +peUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPiaG59je883WX0XaxR +7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxMgI93e2CaHt+28kgeDrpOVG2Y4OGi +GqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUw +AwEB/zAdBgNVHQ4EFgQUWyV7lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64 +OfPAeGZe6Drn8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov +L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe645R88a7A3hfm +5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczOUYrHUDFu4Up+GC9pWbY9ZIEr +44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOf +Mke6UiI0HTJ6CVanfCU2qT1L2sCCbwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6m +Gu6uLftIdxf+u+yvGPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxp +mo/a77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCChdiDyyJk +vC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid392qgQmwLOM7XdVAyksLf +KzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEppLd6leNcG2mqeSz53OiATIgHQv2ieY2Br +NU0LbbqhPcCT4H8js1WtciVORvnSFu+wZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6Lqj +viOvrv1vA+ACOzB2+httQc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ +-----END CERTIFICATE----- + +SwissSign Silver CA - G2 +======================== +-----BEGIN CERTIFICATE----- +MIIFvTCCA6WgAwIBAgIITxvUL1S7L0swDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCQ0gxFTAT +BgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWduIFNpbHZlciBDQSAtIEcyMB4X +DTA2MTAyNTA4MzI0NloXDTM2MTAyNTA4MzI0NlowRzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3 +aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWduIFNpbHZlciBDQSAtIEcyMIICIjANBgkqhkiG +9w0BAQEFAAOCAg8AMIICCgKCAgEAxPGHf9N4Mfc4yfjDmUO8x/e8N+dOcbpLj6VzHVxumK4DV644 +N0MvFz0fyM5oEMF4rhkDKxD6LHmD9ui5aLlV8gREpzn5/ASLHvGiTSf5YXu6t+WiE7brYT7QbNHm ++/pe7R20nqA1W6GSy/BJkv6FCgU+5tkL4k+73JU3/JHpMjUi0R86TieFnbAVlDLaYQ1HTWBCrpJH +6INaUFjpiou5XaHc3ZlKHzZnu0jkg7Y360g6rw9njxcH6ATK72oxh9TAtvmUcXtnZLi2kUpCe2Uu +MGoM9ZDulebyzYLs2aFK7PayS+VFheZteJMELpyCbTapxDFkH4aDCyr0NQp4yVXPQbBH6TCfmb5h +qAaEuSh6XzjZG6k4sIN/c8HDO0gqgg8hm7jMqDXDhBuDsz6+pJVpATqJAHgE2cn0mRmrVn5bi4Y5 +FZGkECwJMoBgs5PAKrYYC51+jUnyEEp/+dVGLxmSo5mnJqy7jDzmDrxHB9xzUfFwZC8I+bRHHTBs +ROopN4WSaGa8gzj+ezku01DwH/teYLappvonQfGbGHLy9YR0SslnxFSuSGTfjNFusB3hB48IHpmc +celM2KX3RxIfdNFRnobzwqIjQAtz20um53MGjMGg6cFZrEb65i/4z3GcRm25xBWNOHkDRUjvxF3X +CO6HOSKGsg0PWEP3calILv3q1h8CAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/ +BAUwAwEB/zAdBgNVHQ4EFgQUF6DNweRBtjpbO8tFnb0cwpj6hlgwHwYDVR0jBBgwFoAUF6DNweRB +tjpbO8tFnb0cwpj6hlgwRgYDVR0gBD8wPTA7BglghXQBWQEDAQEwLjAsBggrBgEFBQcCARYgaHR0 +cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBAHPGgeAn0i0P +4JUw4ppBf1AsX19iYamGamkYDHRJ1l2E6kFSGG9YrVBWIGrGvShpWJHckRE1qTodvBqlYJ7YH39F +kWnZfrt4csEGDyrOj4VwYaygzQu4OSlWhDJOhrs9xCrZ1x9y7v5RoSJBsXECYxqCsGKrXlcSH9/L +3XWgwF15kIwb4FDm3jH+mHtwX6WQ2K34ArZv02DdQEsixT2tOnqfGhpHkXkzuoLcMmkDlm4fS/Bx +/uNncqCxv1yL5PqZIseEuRuNI5c/7SXgz2W79WEE790eslpBIlqhn10s6FvJbakMDHiqYMZWjwFa +DGi8aRl5xB9+lwW/xekkUV7U1UtT7dkjWjYDZaPBA61BMPNGG4WQr2W11bHkFlt4dR2Xem1ZqSqP +e97Dh4kQmUlzeMg9vVE1dCrV8X5pGyq7O70luJpaPXJhkGaH7gzWTdQRdAtq/gsD/KNVV4n+Ssuu +WxcFyPKNIzFTONItaj+CuY0IavdeQXRuwxF+B6wpYJE/OMpXEA29MC/HpeZBoNquBYeaoKRlbEwJ +DIm6uNO5wJOKMPqN5ZprFQFOZ6raYlY+hAhm0sQ2fac+EPyI4NSA5QC9qvNOBqN6avlicuMJT+ub +DgEj8Z+7fNzcbBGXJbLytGMU0gYqZ4yD9c7qB9iaah7s5Aq7KkzrCWA5zspi2C5u +-----END CERTIFICATE----- + +GeoTrust Primary Certification Authority +======================================== +-----BEGIN CERTIFICATE----- +MIIDfDCCAmSgAwIBAgIQGKy1av1pthU6Y2yv2vrEoTANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQG +EwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMoR2VvVHJ1c3QgUHJpbWFyeSBD +ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjExMjcwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMFgx +CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTEwLwYDVQQDEyhHZW9UcnVzdCBQ +cmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEAvrgVe//UfH1nrYNke8hCUy3f9oQIIGHWAVlqnEQRr+92/ZV+zmEwu3qDXwK9AWbK7hWN +b6EwnL2hhZ6UOvNWiAAxz9juapYC2e0DjPt1befquFUWBRaa9OBesYjAZIVcFU2Ix7e64HXprQU9 +nceJSOC7KMgD4TCTZF5SwFlwIjVXiIrxlQqD17wxcwE07e9GceBrAqg1cmuXm2bgyxx5X9gaBGge +RwLmnWDiNpcB3841kt++Z8dtd1k7j53WkBWUvEI0EME5+bEnPn7WinXFsq+W06Lem+SYvn3h6YGt +tm/81w7a4DSwDRp35+MImO9Y+pyEtzavwt+s0vQQBnBxNQIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQULNVQQZcVi/CPNmFbSvtr2ZnJM5IwDQYJKoZI +hvcNAQEFBQADggEBAFpwfyzdtzRP9YZRqSa+S7iq8XEN3GHHoOo0Hnp3DwQ16CePbJC/kRYkRj5K +Ts4rFtULUh38H2eiAkUxT87z+gOneZ1TatnaYzr4gNfTmeGl4b7UVXGYNTq+k+qurUKykG/g/CFN +NWMziUnWm07Kx+dOCQD32sfvmWKZd7aVIl6KoKv0uHiYyjgZmclynnjNS6yvGaBzEi38wkG6gZHa +Floxt/m0cYASSJlyc1pZU8FjUjPtp8nSOQJw+uCxQmYpqptR7TBUIhRf2asdweSU8Pj1K/fqynhG +1riR/aYNKxoUAT6A8EKglQdebc3MS6RFjasS6LPeWuWgfOgPIh1a6Vk= +-----END CERTIFICATE----- + +thawte Primary Root CA +====================== +-----BEGIN CERTIFICATE----- +MIIEIDCCAwigAwIBAgIQNE7VVyDV7exJ9C/ON9srbTANBgkqhkiG9w0BAQUFADCBqTELMAkGA1UE +BhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2 +aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhv +cml6ZWQgdXNlIG9ubHkxHzAdBgNVBAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwHhcNMDYxMTE3 +MDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCBqTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwg +SW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMv +KGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAMT +FnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs +oPD7gFnUnMekz52hWXMJEEUMDSxuaPFsW0hoSVk3/AszGcJ3f8wQLZU0HObrTQmnHNK4yZc2AreJ +1CRfBsDMRJSUjQJib+ta3RGNKJpchJAQeg29dGYvajig4tVUROsdB58Hum/u6f1OCyn1PoSgAfGc +q/gcfomk6KHYcWUNo1F77rzSImANuVud37r8UVsLr5iy6S7pBOhih94ryNdOwUxkHt3Ph1i6Sk/K +aAcdHJ1KxtUvkcx8cXIcxcBn6zL9yZJclNqFwJu/U30rCfSMnZEfl2pSy94JNqR32HuHUETVPm4p +afs5SSYeCaWAe0At6+gnhcn+Yf1+5nyXHdWdAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYD +VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR7W0XPr87Lev0xkhpqtvNG61dIUDANBgkqhkiG9w0BAQUF +AAOCAQEAeRHAS7ORtvzw6WfUDW5FvlXok9LOAz/t2iWwHVfLHjp2oEzsUHboZHIMpKnxuIvW1oeE +uzLlQRHAd9mzYJ3rG9XRbkREqaYB7FViHXe4XI5ISXycO1cRrK1zN44veFyQaEfZYGDm/Ac9IiAX +xPcW6cTYcvnIc3zfFi8VqT79aie2oetaupgf1eNNZAqdE8hhuvU5HIe6uL17In/2/qxAeeWsEG89 +jxt5dovEN7MhGITlNgDrYyCZuen+MwS7QcjBAvlEYyCegc5C09Y/LHbTY5xZ3Y+m4Q6gLkH3LpVH +z7z9M/P2C2F+fpErgUfCJzDupxBdN49cOSvkBPB7jVaMaA== +-----END CERTIFICATE----- + +VeriSign Class 3 Public Primary Certification Authority - G5 +============================================================ +-----BEGIN CERTIFICATE----- +MIIE0zCCA7ugAwIBAgIQGNrRniZ96LtKIVjNzGs7SjANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE +BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO +ZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk +IHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRp +ZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMDYxMTA4MDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCB +yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2ln +biBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBh +dXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmlt +YXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw +ggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ/XxrcgxiV0i6CqqpkKz +j/i5Vbext0uz/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6/WhkcIzSdhD +Y2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn/ +Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4/VBEnkjWNHiDxpg8v+R70r +fk/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10/NIeWiu5T6CUVAgMBAAGjgbIwga8wDwYDVR0TAQH/ +BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2Uv +Z2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVy +aXNpZ24uY29tL3ZzbG9nby5naWYwHQYDVR0OBBYEFH/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqG +SIb3DQEBBQUAA4IBAQCTJEowX2LP2BqYLz3q3JktvXf2pXkiOOzEp6B4Eq1iDkVwZMXnl2YtmAl+ +X6/WzChl8gGqCBpH3vn5fJJaCGkgDdk+bW48DW7Y5gaRQBi5+MHt39tBquCWIMnNZBU4gcmU7qKE +KQsTb47bDN0lAtukixlE0kF6BWlKWE9gyn6CagsCqiUXObXbf+eEZSqVir2G3l6BFoMtEMze/aiC +Km0oHw0LxOXnGiYZ4fQRbxC1lfznQgUy286dUV4otp6F01vvpX1FQHKOtw5rDgb7MzVIcbidJ4vE +ZV8NhnacRHr2lVz2XTIIM6RUthg/aFzyQkqFOFSDX9HoLPKsEdao7WNq +-----END CERTIFICATE----- + +SecureTrust CA +============== +-----BEGIN CERTIFICATE----- +MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBIMQswCQYDVQQG +EwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xFzAVBgNVBAMTDlNlY3VyZVRy +dXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIzMTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAe +BgNVBAoTF1NlY3VyZVRydXN0IENvcnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCC +ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQX +OZEzZum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO0gMdA+9t +DWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIaowW8xQmxSPmjL8xk037uH +GFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b +01k/unK8RCSc43Oz969XL0Imnal0ugBS8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmH +ursCAwEAAaOBnTCBmjATBgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/ +BAUwAwEB/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCegJYYj +aHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGCNxUBBAMCAQAwDQYJ +KoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt36Z3q059c4EVlew3KW+JwULKUBRSu +SceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHf +mbx8IVQr5Fiiu1cprp6poxkmD5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZ +nMUFdAvnZyPSCPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR +3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE= +-----END CERTIFICATE----- + +Secure Global CA +================ +-----BEGIN CERTIFICATE----- +MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBKMQswCQYDVQQG +EwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBH +bG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkxMjMxMTk1MjA2WjBKMQswCQYDVQQGEwJVUzEg +MB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwg +Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNS7YrGxVaQZx5RNoJLNP2MwhR/jx +YDiJiQPpvepeRlMJ3Fz1Wuj3RSoC6zFh1ykzTM7HfAo3fg+6MpjhHZevj8fcyTiW89sa/FHtaMbQ +bqR8JNGuQsiWUGMu4P51/pinX0kuleM5M2SOHqRfkNJnPLLZ/kG5VacJjnIFHovdRIWCQtBJwB1g +8NEXLJXr9qXBkqPFwqcIYA1gBBCWeZ4WNOaptvolRTnIHmX5k/Wq8VLcmZg9pYYaDDUz+kulBAYV +HDGA76oYa8J719rO+TMg1fW9ajMtgQT7sFzUnKPiXB3jqUJ1XnvUd+85VLrJChgbEplJL4hL/VBi +0XPnj3pDAgMBAAGjgZ0wgZowEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1Ud +EwEB/wQFMAMBAf8wHQYDVR0OBBYEFK9EBMJBfkiD2045AuzshHrmzsmkMDQGA1UdHwQtMCswKaAn +oCWGI2h0dHA6Ly9jcmwuc2VjdXJldHJ1c3QuY29tL1NHQ0EuY3JsMBAGCSsGAQQBgjcVAQQDAgEA +MA0GCSqGSIb3DQEBBQUAA4IBAQBjGghAfaReUw132HquHw0LURYD7xh8yOOvaliTFGCRsoTciE6+ +OYo68+aCiV0BN7OrJKQVDpI1WkpEXk5X+nXOH0jOZvQ8QCaSmGwb7iRGDBezUqXbpZGRzzfTb+cn +CDpOGR86p1hcF895P4vkp9MmI50mD1hp/Ed+stCNi5O/KU9DaXR2Z0vPB4zmAve14bRDtUstFJ/5 +3CYNv6ZHdAbYiNE6KTCEztI5gGIbqMdXSbxqVVFnFUq+NQfk1XWYN3kwFNspnWzFacxHVaIw98xc +f8LDmBxrThaA63p4ZUWiABqvDA1VZDRIuJK58bRQKfJPIx/abKwfROHdI3hRW8cW +-----END CERTIFICATE----- + +COMODO Certification Authority +============================== +-----BEGIN CERTIFICATE----- +MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCBgTELMAkGA1UE +BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG +A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNVBAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1 +dGhvcml0eTAeFw0wNjEyMDEwMDAwMDBaFw0yOTEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEb +MBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFD +T01PRE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3UcEbVASY06m/weaKXTuH ++7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI2GqGd0S7WWaXUF601CxwRM/aN5VCaTww +xHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV +4EajcNxo2f8ESIl33rXp+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA +1KGzqSX+DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5OnKVI +rLsm9wIDAQABo4GOMIGLMB0GA1UdDgQWBBQLWOWLxkwVN6RAqTCpIb5HNlpW/zAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmNvbW9k +b2NhLmNvbS9DT01PRE9DZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDANBgkqhkiG9w0BAQUFAAOC +AQEAPpiem/Yb6dc5t3iuHXIYSdOH5EOC6z/JqvWote9VfCFSZfnVDeFs9D6Mk3ORLgLETgdxb8CP +OGEIqB6BCsAvIC9Bi5HcSEW88cbeunZrM8gALTFGTO3nnc+IlP8zwFboJIYmuNg4ON8qa90SzMc/ +RxdMosIGlgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmc +IGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5ddBA6+C4OmF4O5MBKgxTMVBbkN ++8cFduPYSo38NBejxiEovjBFMR7HeL5YYTisO+IBZQ== +-----END CERTIFICATE----- + +Network Solutions Certificate Authority +======================================= +-----BEGIN CERTIFICATE----- +MIID5jCCAs6gAwIBAgIQV8szb8JcFuZHFhfjkDFo4DANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQG +EwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMuMTAwLgYDVQQDEydOZXR3b3Jr +IFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDYxMjAxMDAwMDAwWhcNMjkxMjMx +MjM1OTU5WjBiMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMu +MTAwLgYDVQQDEydOZXR3b3JrIFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0G +CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvH6SMG3G2I4rC7xGzuAnlt7e+foS0zwzc7MEL7xx +jOWftiJgPl9dzgn/ggwbmlFQGiaJ3dVhXRncEg8tCqJDXRfQNJIg6nPPOCwGJgl6cvf6UDL4wpPT +aaIjzkGxzOTVHzbRijr4jGPiFFlp7Q3Tf2vouAPlT2rlmGNpSAW+Lv8ztumXWWn4Zxmuk2GWRBXT +crA/vGp97Eh/jcOrqnErU2lBUzS1sLnFBgrEsEX1QV1uiUV7PTsmjHTC5dLRfbIR1PtYMiKagMnc +/Qzpf14Dl847ABSHJ3A4qY5usyd2mFHgBeMhqxrVhSI8KbWaFsWAqPS7azCPL0YCorEMIuDTAgMB +AAGjgZcwgZQwHQYDVR0OBBYEFCEwyfsA106Y2oeqKtCnLrFAMadMMA4GA1UdDwEB/wQEAwIBBjAP +BgNVHRMBAf8EBTADAQH/MFIGA1UdHwRLMEkwR6BFoEOGQWh0dHA6Ly9jcmwubmV0c29sc3NsLmNv +bS9OZXR3b3JrU29sdXRpb25zQ2VydGlmaWNhdGVBdXRob3JpdHkuY3JsMA0GCSqGSIb3DQEBBQUA +A4IBAQC7rkvnt1frf6ott3NHhWrB5KUd5Oc86fRZZXe1eltajSU24HqXLjjAV2CDmAaDn7l2em5Q +4LqILPxFzBiwmZVRDuwduIj/h1AcgsLj4DKAv6ALR8jDMe+ZZzKATxcheQxpXN5eNK4CtSbqUN9/ +GGUsyfJj4akH/nxxH2szJGoeBfcFaMBqEssuXmHLrijTfsK0ZpEmXzwuJF/LWA/rKOyvEZbz3Htv +wKeI8lN3s2Berq4o2jUsbzRF0ybh3uxbTydrFny9RAQYgrOJeRcQcT16ohZO9QHNpGxlaKFJdlxD +ydi8NmdspZS11My5vWo1ViHe2MPr+8ukYEywVaCge1ey +-----END CERTIFICATE----- + +COMODO ECC Certification Authority +================================== +-----BEGIN CERTIFICATE----- +MIICiTCCAg+gAwIBAgIQH0evqmIAcFBUTAGem2OZKjAKBggqhkjOPQQDAzCBhTELMAkGA1UEBhMC +R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE +ChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBB +dXRob3JpdHkwHhcNMDgwMzA2MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMCR0Ix +GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR +Q09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRo +b3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQDR3svdcmCFYX7deSRFtSrYpn1PlILBs5BAH+X +4QokPB0BBO490o0JlwzgdeT6+3eKKvUDYEs2ixYjFq0JcfRK9ChQtP6IHG4/bC8vCVlbpVsLM5ni +wz2J+Wos77LTBumjQjBAMB0GA1UdDgQWBBR1cacZSBm8nZ3qQUfflMRId5nTeTAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjEA7wNbeqy3eApyt4jf/7VG +FAkK+qDmfQjGGoe9GKhzvSbKYAydzpmfz1wPMOG+FDHqAjAU9JM8SaczepBGR7NjfRObTrdvGDeA +U/7dIOA1mjbRxwG55tzd8/8dLDoWV9mSOdY= +-----END CERTIFICATE----- + +OISTE WISeKey Global Root GA CA +=============================== +-----BEGIN CERTIFICATE----- +MIID8TCCAtmgAwIBAgIQQT1yx/RrH4FDffHSKFTfmjANBgkqhkiG9w0BAQUFADCBijELMAkGA1UE +BhMCQ0gxEDAOBgNVBAoTB1dJU2VLZXkxGzAZBgNVBAsTEkNvcHlyaWdodCAoYykgMjAwNTEiMCAG +A1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBH +bG9iYWwgUm9vdCBHQSBDQTAeFw0wNTEyMTExNjAzNDRaFw0zNzEyMTExNjA5NTFaMIGKMQswCQYD +VQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEbMBkGA1UECxMSQ29weXJpZ2h0IChjKSAyMDA1MSIw +IAYDVQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5 +IEdsb2JhbCBSb290IEdBIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0+zAJs9 +Nt350UlqaxBJH+zYK7LG+DKBKUOVTJoZIyEVRd7jyBxRVVuuk+g3/ytr6dTqvirdqFEr12bDYVxg +Asj1znJ7O7jyTmUIms2kahnBAbtzptf2w93NvKSLtZlhuAGio9RN1AU9ka34tAhxZK9w8RxrfvbD +d50kc3vkDIzh2TbhmYsFmQvtRTEJysIA2/dyoJaqlYfQjse2YXMNdmaM3Bu0Y6Kff5MTMPGhJ9vZ +/yxViJGg4E8HsChWjBgbl0SOid3gF27nKu+POQoxhILYQBRJLnpB5Kf+42TMwVlxSywhp1t94B3R +LoGbw9ho972WG6xwsRYUC9tguSYBBQIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw +AwEB/zAdBgNVHQ4EFgQUswN+rja8sHnR3JQmthG+IbJphpQwEAYJKwYBBAGCNxUBBAMCAQAwDQYJ +KoZIhvcNAQEFBQADggEBAEuh/wuHbrP5wUOxSPMowB0uyQlB+pQAHKSkq0lPjz0e701vvbyk9vIm +MMkQyh2I+3QZH4VFvbBsUfk2ftv1TDI6QU9bR8/oCy22xBmddMVHxjtqD6wU2zz0c5ypBd8A3HR4 ++vg1YFkCExh8vPtNsCBtQ7tgMHpnM1zFmdH4LTlSc/uMqpclXHLZCB6rTjzjgTGfA6b7wP4piFXa +hNVQA7bihKOmNqoROgHhGEvWRGizPflTdISzRpFGlgC3gCy24eMQ4tui5yiPAZZiFj4A4xylNoEY +okxSdsARo27mHbrjWr42U8U+dY+GaSlYU7Wcu2+fXMUY7N0v4ZjJ/L7fCg0= +-----END CERTIFICATE----- + +Certigna +======== +-----BEGIN CERTIFICATE----- +MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNVBAYTAkZSMRIw +EAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4XDTA3MDYyOTE1MTMwNVoXDTI3 +MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwI +Q2VydGlnbmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7q +XOEm7RFHYeGifBZ4QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyH +GxnygQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbwzBfsV1/p +ogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q130yGLMLLGq/jj8UEYkg +DncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKf +Irjxwo1p3Po6WAbfAgMBAAGjgbwwgbkwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQ +tCRZvgHyUtVF9lo53BEwZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJ +BgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzjAQ/J +SP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQUFAAOCAQEA +hQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8hbV6lUmPOEvjvKtpv6zf+EwLHyzs+ +ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFncfca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1klu +PBS1xp81HlDQwY9qcEQCYsuuHWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY +1gkIl2PlwS6wt0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw +WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg== +-----END CERTIFICATE----- + +Deutsche Telekom Root CA 2 +========================== +-----BEGIN CERTIFICATE----- +MIIDnzCCAoegAwIBAgIBJjANBgkqhkiG9w0BAQUFADBxMQswCQYDVQQGEwJERTEcMBoGA1UEChMT +RGV1dHNjaGUgVGVsZWtvbSBBRzEfMB0GA1UECxMWVC1UZWxlU2VjIFRydXN0IENlbnRlcjEjMCEG +A1UEAxMaRGV1dHNjaGUgVGVsZWtvbSBSb290IENBIDIwHhcNOTkwNzA5MTIxMTAwWhcNMTkwNzA5 +MjM1OTAwWjBxMQswCQYDVQQGEwJERTEcMBoGA1UEChMTRGV1dHNjaGUgVGVsZWtvbSBBRzEfMB0G +A1UECxMWVC1UZWxlU2VjIFRydXN0IENlbnRlcjEjMCEGA1UEAxMaRGV1dHNjaGUgVGVsZWtvbSBS +b290IENBIDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrC6M14IspFLEUha88EOQ5 +bzVdSq7d6mGNlUn0b2SjGmBmpKlAIoTZ1KXleJMOaAGtuU1cOs7TuKhCQN/Po7qCWWqSG6wcmtoI +KyUn+WkjR/Hg6yx6m/UTAtB+NHzCnjwAWav12gz1MjwrrFDa1sPeg5TKqAyZMg4ISFZbavva4VhY +AUlfckE8FQYBjl2tqriTtM2e66foai1SNNs671x1Udrb8zH57nGYMsRUFUQM+ZtV7a3fGAigo4aK +Se5TBY8ZTNXeWHmb0mocQqvF1afPaA+W5OFhmHZhyJF81j4A4pFQh+GdCuatl9Idxjp9y7zaAzTV +jlsB9WoHtxa2bkp/AgMBAAGjQjBAMB0GA1UdDgQWBBQxw3kbuvVT1xfgiXotF2wKsyudMzAPBgNV +HRMECDAGAQH/AgEFMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAlGRZrTlk5ynr +E/5aw4sTV8gEJPB0d8Bg42f76Ymmg7+Wgnxu1MM9756AbrsptJh6sTtU6zkXR34ajgv8HzFZMQSy +zhfzLMdiNlXiItiJVbSYSKpk+tYcNthEeFpaIzpXl/V6ME+un2pMSyuOoAPjPuCp1NJ70rOo4nI8 +rZ7/gFnkm0W09juwzTkZmDLl6iFhkOQxIY40sfcvNUqFENrnijchvllj4PKFiDFT1FQUhXB59C4G +dyd1Lx+4ivn+xbrYNuSD7Odlt79jWvNGr4GUN9RBjNYj1h7P9WgbRGOiWrqnNVmh5XAFmw4jV5mU +Cm26OWMohpLzGITY+9HPBVZkVw== +-----END CERTIFICATE----- + +Cybertrust Global Root +====================== +-----BEGIN CERTIFICATE----- +MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYGA1UEChMPQ3li +ZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2JhbCBSb290MB4XDTA2MTIxNTA4 +MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQD +ExZDeWJlcnRydXN0IEdsb2JhbCBSb290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA ++Mi8vRRQZhP/8NN57CPytxrHjoXxEnOmGaoQ25yiZXRadz5RfVb23CO21O1fWLE3TdVJDm71aofW +0ozSJ8bi/zafmGWgE07GKmSb1ZASzxQG9Dvj1Ci+6A74q05IlG2OlTEQXO2iLb3VOm2yHLtgwEZL +AfVJrn5GitB0jaEMAs7u/OePuGtm839EAL9mJRQr3RAwHQeWP032a7iPt3sMpTjr3kfb1V05/Iin +89cqdPHoWqI7n1C6poxFNcJQZZXcY4Lv3b93TZxiyWNzFtApD0mpSPCzqrdsxacwOUBdrsTiXSZT +8M4cIwhhqJQZugRiQOwfOHB3EgZxpzAYXSUnpQIDAQABo4GlMIGiMA4GA1UdDwEB/wQEAwIBBjAP +BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2CHsNesysIEyGVjJez6tuhS1wVzA/BgNVHR8EODA2 +MDSgMqAwhi5odHRwOi8vd3d3Mi5wdWJsaWMtdHJ1c3QuY29tL2NybC9jdC9jdHJvb3QuY3JsMB8G +A1UdIwQYMBaAFLYIew16zKwgTIZWMl7Pq26FLXBXMA0GCSqGSIb3DQEBBQUAA4IBAQBW7wojoFRO +lZfJ+InaRcHUowAl9B8Tq7ejhVhpwjCt2BWKLePJzYFa+HMjWqd8BfP9IjsO0QbE2zZMcwSO5bAi +5MXzLqXZI+O4Tkogp24CJJ8iYGd7ix1yCcUxXOl5n4BHPa2hCwcUPUf/A2kaDAtE52Mlp3+yybh2 +hO0j9n0Hq0V+09+zv+mKts2oomcrUtW3ZfA5TGOgkXmTUg9U3YO7n9GPp1Nzw8v/MOx8BLjYRB+T +X3EJIrduPuocA06dGiBh+4E37F78CkWr1+cXVdCg6mCbpvbjjFspwgZgFJ0tl0ypkxWdYcQBX0jW +WL1WMRJOEcgh4LMRkWXbtKaIOM5V +-----END CERTIFICATE----- + +ePKI Root Certification Authority +================================= +-----BEGIN CERTIFICATE----- +MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQG +EwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0ZC4xKjAoBgNVBAsMIWVQS0kg +Um9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMx +MjdaMF4xCzAJBgNVBAYTAlRXMSMwIQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEq +MCgGA1UECwwhZVBLSSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAHSyZbCUNs +IZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAhijHyl3SJCRImHJ7K2RKi +lTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3XDZoTM1PRYfl61dd4s5oz9wCGzh1NlDiv +qOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX +12ruOzjjK9SXDrkb5wdJfzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0O +WQqraffAsgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uUWH1+ +ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLSnT0IFaUQAS2zMnao +lQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pHdmX2Os+PYhcZewoozRrSgx4hxyy/ +vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJipNiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXi +Zo1jDiVN1Rmy5nk3pyKdVDECAwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/Qkqi +MAwGA1UdEwQFMAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH +ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGBuvl2ICO1J2B0 +1GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6YlPwZpVnPDimZI+ymBV3QGypzq +KOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkPJXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdV +xrsStZf0X4OFunHB2WyBEXYKCrC/gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEP +NXubrjlpC2JgQCA2j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+r +GNm65ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUBo2M3IUxE +xJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS/jQ6fbjpKdx2qcgw+BRx +gMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2zGp1iro2C6pSe3VkQw63d4k3jMdXH7Ojy +sP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTEW9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmOD +BCEIZ43ygknQW/2xzQ+DhNQ+IIX3Sj0rnP0qCglN6oH4EZw= +-----END CERTIFICATE----- + +certSIGN ROOT CA +================ +-----BEGIN CERTIFICATE----- +MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYTAlJPMREwDwYD +VQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTAeFw0wNjA3MDQxNzIwMDRa +Fw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UE +CxMQY2VydFNJR04gUk9PVCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7I +JUqOtdu0KBuqV5Do0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHH +rfAQUySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5dRdY4zTW2 +ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQOA7+j0xbm0bqQfWwCHTD +0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwvJoIQ4uNllAoEwF73XVv4EOLQunpL+943 +AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B +Af8EBAMCAcYwHQYDVR0OBBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IB +AQA+0hyJLjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecYMnQ8 +SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ44gx+FkagQnIl6Z0 +x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6IJd1hJyMctTEHBDa0GpC9oHRxUIlt +vBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNwi/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7Nz +TogVZ96edhBiIL5VaZVDADlN9u6wWk5JRFRYX0KD +-----END CERTIFICATE----- + +GeoTrust Primary Certification Authority - G3 +============================================= +-----BEGIN CERTIFICATE----- +MIID/jCCAuagAwIBAgIQFaxulBmyeUtB9iepwxgPHzANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UE +BhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChjKSAyMDA4IEdlb1RydXN0 +IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2MDQGA1UEAxMtR2VvVHJ1c3QgUHJpbWFy +eSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTA4MDQwMjAwMDAwMFoXDTM3MTIwMTIz +NTk1OVowgZgxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTkwNwYDVQQLEzAo +YykgMjAwOCBHZW9UcnVzdCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxNjA0BgNVBAMT +LUdlb1RydXN0IFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMzCCASIwDQYJKoZI +hvcNAQEBBQADggEPADCCAQoCggEBANziXmJYHTNXOTIz+uvLh4yn1ErdBojqZI4xmKU4kB6Yzy5j +K/BGvESyiaHAKAxJcCGVn2TAppMSAmUmhsalifD614SgcK9PGpc/BkTVyetyEH3kMSj7HGHmKAdE +c5IiaacDiGydY8hS2pgn5whMcD60yRLBxWeDXTPzAxHsatBT4tG6NmCUgLthY2xbF37fQJQeqw3C +IShwiP/WJmxsYAQlTlV+fe+/lEjetx3dcI0FX4ilm/LC7urRQEFtYjgdVgbFA0dRIBn8exALDmKu +dlW/X3e+PkkBUz2YJQN2JFodtNuJ6nnltrM7P7pMKEF/BqxqjsHQ9gUdfeZChuOl1UcCAwEAAaNC +MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMR5yo6hTgMdHNxr +2zFblD4/MH8tMA0GCSqGSIb3DQEBCwUAA4IBAQAtxRPPVoB7eni9n64smefv2t+UXglpp+duaIy9 +cr5HqQ6XErhK8WTTOd8lNNTBzU6B8A8ExCSzNJbGpqow32hhc9f5joWJ7w5elShKKiePEI4ufIbE +Ap7aDHdlDkQNkv39sxY2+hENHYwOB4lqKVb3cvTdFZx3NWZXqxNT2I7BQMXXExZacse3aQHEerGD +AWh9jUGhlBjBJVz88P6DAod8DQ3PLghcSkANPuyBYeYk28rgDi0Hsj5W3I31QYUHSJsMC8tJP33s +t/3LjWeJGqvtux6jAAgIFyqCXDFdRootD4abdNlF+9RAsXqqaC2Gspki4cErx5z481+oghLrGREt +-----END CERTIFICATE----- + +thawte Primary Root CA - G2 +=========================== +-----BEGIN CERTIFICATE----- +MIICiDCCAg2gAwIBAgIQNfwmXNmET8k9Jj1Xm67XVjAKBggqhkjOPQQDAzCBhDELMAkGA1UEBhMC +VVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjE4MDYGA1UECxMvKGMpIDIwMDcgdGhhd3RlLCBJbmMu +IC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxJDAiBgNVBAMTG3RoYXd0ZSBQcmltYXJ5IFJvb3Qg +Q0EgLSBHMjAeFw0wNzExMDUwMDAwMDBaFw0zODAxMTgyMzU5NTlaMIGEMQswCQYDVQQGEwJVUzEV +MBMGA1UEChMMdGhhd3RlLCBJbmMuMTgwNgYDVQQLEy8oYykgMjAwNyB0aGF3dGUsIEluYy4gLSBG +b3IgYXV0aG9yaXplZCB1c2Ugb25seTEkMCIGA1UEAxMbdGhhd3RlIFByaW1hcnkgUm9vdCBDQSAt +IEcyMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEotWcgnuVnfFSeIf+iha/BebfowJPDQfGAFG6DAJS +LSKkQjnE/o/qycG+1E3/n3qe4rF8mq2nhglzh9HnmuN6papu+7qzcMBniKI11KOasf2twu8x+qi5 +8/sIxpHR+ymVo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU +mtgAMADna3+FGO6Lts6KDPgR4bswCgYIKoZIzj0EAwMDaQAwZgIxAN344FdHW6fmCsO99YCKlzUN +G4k8VIZ3KMqh9HneteY4sPBlcIx/AlTCv//YoT7ZzwIxAMSNlPzcU9LcnXgWHxUzI1NS41oxXZ3K +rr0TKUQNJ1uo52icEvdYPy5yAlejj6EULg== +-----END CERTIFICATE----- + +thawte Primary Root CA - G3 +=========================== +-----BEGIN CERTIFICATE----- +MIIEKjCCAxKgAwIBAgIQYAGXt0an6rS0mtZLL/eQ+zANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UE +BhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2 +aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIwMDggdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhv +cml6ZWQgdXNlIG9ubHkxJDAiBgNVBAMTG3RoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EgLSBHMzAeFw0w +ODA0MDIwMDAwMDBaFw0zNzEyMDEyMzU5NTlaMIGuMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhh +d3RlLCBJbmMuMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMTgwNgYD +VQQLEy8oYykgMjAwOCB0aGF3dGUsIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEkMCIG +A1UEAxMbdGhhd3RlIFByaW1hcnkgUm9vdCBDQSAtIEczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEAsr8nLPvb2FvdeHsbnndmgcs+vHyu86YnmjSjaDFxODNi5PNxZnmxqWWjpYvVj2At +P0LMqmsywCPLLEHd5N/8YZzic7IilRFDGF/Eth9XbAoFWCLINkw6fKXRz4aviKdEAhN0cXMKQlkC ++BsUa0Lfb1+6a4KinVvnSr0eAXLbS3ToO39/fR8EtCab4LRarEc9VbjXsCZSKAExQGbY2SS99irY +7CFJXJv2eul/VTV+lmuNk5Mny5K76qxAwJ/C+IDPXfRa3M50hqY+bAtTyr2SzhkGcuYMXDhpxwTW +vGzOW/b3aJzcJRVIiKHpqfiYnODz1TEoYRFsZ5aNOZnLwkUkOQIDAQABo0IwQDAPBgNVHRMBAf8E +BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUrWyqlGCc7eT/+j4KdCtjA/e2Wb8wDQYJ +KoZIhvcNAQELBQADggEBABpA2JVlrAmSicY59BDlqQ5mU1143vokkbvnRFHfxhY0Cu9qRFHqKweK +A3rD6z8KLFIWoCtDuSWQP3CpMyVtRRooOyfPqsMpQhvfO0zAMzRbQYi/aytlryjvsvXDqmbOe1bu +t8jLZ8HJnBoYuMTDSQPxYA5QzUbF83d597YV4Djbxy8ooAw/dyZ02SUS2jHaGh7cKUGRIjxpp7sC +8rZcJwOJ9Abqm+RyguOhCcHpABnTPtRwa7pxpqpYrvS76Wy274fMm7v/OeZWYdMKp8RcTGB7BXcm +er/YB1IsYvdwY9k5vG8cwnncdimvzsUsZAReiDZuMdRAGmI0Nj81Aa6sY6A= +-----END CERTIFICATE----- + +GeoTrust Primary Certification Authority - G2 +============================================= +-----BEGIN CERTIFICATE----- +MIICrjCCAjWgAwIBAgIQPLL0SAoA4v7rJDteYD7DazAKBggqhkjOPQQDAzCBmDELMAkGA1UEBhMC +VVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChjKSAyMDA3IEdlb1RydXN0IElu +Yy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2MDQGA1UEAxMtR2VvVHJ1c3QgUHJpbWFyeSBD +ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEcyMB4XDTA3MTEwNTAwMDAwMFoXDTM4MDExODIzNTk1 +OVowgZgxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTkwNwYDVQQLEzAoYykg +MjAwNyBHZW9UcnVzdCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxNjA0BgNVBAMTLUdl +b1RydXN0IFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjB2MBAGByqGSM49AgEG +BSuBBAAiA2IABBWx6P0DFUPlrOuHNxFi79KDNlJ9RVcLSo17VDs6bl8VAsBQps8lL33KSLjHUGMc +KiEIfJo22Av+0SbFWDEwKCXzXV2juLaltJLtbCyf691DiaI8S0iRHVDsJt/WYC69IaNCMEAwDwYD +VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBVfNVdRVfslsq0DafwBo/q+ +EVXVMAoGCCqGSM49BAMDA2cAMGQCMGSWWaboCd6LuvpaiIjwH5HTRqjySkwCY/tsXzjbLkGTqQ7m +ndwxHLKgpxgceeHHNgIwOlavmnRs9vuD4DPTCF+hnMJbn0bWtsuRBmOiBuczrD6ogRLQy7rQkgu2 +npaqBA+K +-----END CERTIFICATE----- + +VeriSign Universal Root Certification Authority +=============================================== +-----BEGIN CERTIFICATE----- +MIIEuTCCA6GgAwIBAgIQQBrEZCGzEyEDDrvkEhrFHTANBgkqhkiG9w0BAQsFADCBvTELMAkGA1UE +BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO +ZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwOCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk +IHVzZSBvbmx5MTgwNgYDVQQDEy9WZXJpU2lnbiBVbml2ZXJzYWwgUm9vdCBDZXJ0aWZpY2F0aW9u +IEF1dGhvcml0eTAeFw0wODA0MDIwMDAwMDBaFw0zNzEyMDEyMzU5NTlaMIG9MQswCQYDVQQGEwJV +UzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdv +cmsxOjA4BgNVBAsTMShjKSAyMDA4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNl +IG9ubHkxODA2BgNVBAMTL1ZlcmlTaWduIFVuaXZlcnNhbCBSb290IENlcnRpZmljYXRpb24gQXV0 +aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2E3XrEBNNti1xWb/1hajCMj +1mCOkdeQmIN65lgZOIzF9uVkhbSicfvtvbnazU0AtMgtc6XHaXGVHzk8skQHnOgO+k1KxCHfKWGP +MiJhgsWHH26MfF8WIFFE0XBPV+rjHOPMee5Y2A7Cs0WTwCznmhcrewA3ekEzeOEz4vMQGn+HLL72 +9fdC4uW/h2KJXwBL38Xd5HVEMkE6HnFuacsLdUYI0crSK5XQz/u5QGtkjFdN/BMReYTtXlT2NJ8I +AfMQJQYXStrxHXpma5hgZqTZ79IugvHw7wnqRMkVauIDbjPTrJ9VAMf2CGqUuV/c4DPxhGD5WycR +tPwW8rtWaoAljQIDAQABo4GyMIGvMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMG0G +CCsGAQUFBwEMBGEwX6FdoFswWTBXMFUWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFI/l0xqGrI2O +a8PPgGrUSBgsexkuMCUWI2h0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92c2xvZ28uZ2lmMB0GA1Ud +DgQWBBS2d/ppSEefUxLVwuoHMnYH0ZcHGTANBgkqhkiG9w0BAQsFAAOCAQEASvj4sAPmLGd75JR3 +Y8xuTPl9Dg3cyLk1uXBPY/ok+myDjEedO2Pzmvl2MpWRsXe8rJq+seQxIcaBlVZaDrHC1LGmWazx +Y8u4TB1ZkErvkBYoH1quEPuBUDgMbMzxPcP1Y+Oz4yHJJDnp/RVmRvQbEdBNc6N9Rvk97ahfYtTx +P/jgdFcrGJ2BtMQo2pSXpXDrrB2+BxHw1dvd5Yzw1TKwg+ZX4o+/vqGqvz0dtdQ46tewXDpPaj+P +wGZsY6rp2aQW9IHRlRQOfc2VNNnSj3BzgXucfr2YYdhFh5iQxeuGMMY1v/D/w1WIg0vvBZIGcfK4 +mJO37M2CYfE45k+XmCpajQ== +-----END CERTIFICATE----- + +VeriSign Class 3 Public Primary Certification Authority - G4 +============================================================ +-----BEGIN CERTIFICATE----- +MIIDhDCCAwqgAwIBAgIQL4D+I4wOIg9IZxIokYesszAKBggqhkjOPQQDAzCByjELMAkGA1UEBhMC +VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 +b3JrMTowOAYDVQQLEzEoYykgMjAwNyBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz +ZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmlj +YXRpb24gQXV0aG9yaXR5IC0gRzQwHhcNMDcxMTA1MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCByjEL +MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBU +cnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNyBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRo +b3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5 +IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASnVnp8 +Utpkmw4tXNherJI9/gHmGUo9FANL+mAnINmDiWn6VMaaGF5VKmTeBvaNSjutEDxlPZCIBIngMGGz +rl0Bp3vefLK+ymVhAIau2o970ImtTR1ZmkGxvEeA3J5iw/mjgbIwga8wDwYDVR0TAQH/BAUwAwEB +/zAOBgNVHQ8BAf8EBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEw +HzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24u +Y29tL3ZzbG9nby5naWYwHQYDVR0OBBYEFLMWkf3upm7ktS5Jj4d4gYDs5bG1MAoGCCqGSM49BAMD +A2gAMGUCMGYhDBgmYFo4e1ZC4Kf8NoRRkSAsdk1DPcQdhCPQrNZ8NQbOzWm9kA3bbEhCHQ6qQgIx +AJw9SDkjOVgaFRJZap7v1VmyHVIsmXHNxynfGyphe3HR3vPA5Q06Sqotp9iGKt0uEA== +-----END CERTIFICATE----- + +NetLock Arany (Class Gold) Főtanúsítvány +======================================== +-----BEGIN CERTIFICATE----- +MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQGEwJIVTERMA8G +A1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3MDUGA1UECwwuVGFuw7pzw610 +dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNlcnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBB +cmFueSAoQ2xhc3MgR29sZCkgRsWRdGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgx +MjA2MTUwODIxWjCBpzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxO +ZXRMb2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlmaWNhdGlv +biBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNzIEdvbGQpIEbFkXRhbsO6 +c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRec75LbRTDofTjl5Bu +0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrTlF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw +/HpYzY6b7cNGbIRwXdrzAZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAk +H3B5r9s5VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRGILdw +fzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2BJtr+UBdADTHLpl1 +neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAGAQH/AgEEMA4GA1UdDwEB/wQEAwIB +BjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2MU9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwW +qZw8UQCgwBEIBaeZ5m8BiFRhbvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTta +YtOUZcTh5m2C+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC +bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2FuLjbvrW5Kfna +NwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2XjG4Kvte9nHfRCaexOYNkbQu +dZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E= +-----END CERTIFICATE----- + +Staat der Nederlanden Root CA - G2 +================================== +-----BEGIN CERTIFICATE----- +MIIFyjCCA7KgAwIBAgIEAJiWjDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJOTDEeMBwGA1UE +CgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFhdCBkZXIgTmVkZXJsYW5kZW4g +Um9vdCBDQSAtIEcyMB4XDTA4MDMyNjExMTgxN1oXDTIwMDMyNTExMDMxMFowWjELMAkGA1UEBhMC +TkwxHjAcBgNVBAoMFVN0YWF0IGRlciBOZWRlcmxhbmRlbjErMCkGA1UEAwwiU3RhYXQgZGVyIE5l +ZGVybGFuZGVuIFJvb3QgQ0EgLSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMVZ +5291qj5LnLW4rJ4L5PnZyqtdj7U5EILXr1HgO+EASGrP2uEGQxGZqhQlEq0i6ABtQ8SpuOUfiUtn +vWFI7/3S4GCI5bkYYCjDdyutsDeqN95kWSpGV+RLufg3fNU254DBtvPUZ5uW6M7XxgpT0GtJlvOj +CwV3SPcl5XCsMBQgJeN/dVrlSPhOewMHBPqCYYdu8DvEpMfQ9XQ+pV0aCPKbJdL2rAQmPlU6Yiil +e7Iwr/g3wtG61jj99O9JMDeZJiFIhQGp5Rbn3JBV3w/oOM2ZNyFPXfUib2rFEhZgF1XyZWampzCR +OME4HYYEhLoaJXhena/MUGDWE4dS7WMfbWV9whUYdMrhfmQpjHLYFhN9C0lK8SgbIHRrxT3dsKpI +CT0ugpTNGmXZK4iambwYfp/ufWZ8Pr2UuIHOzZgweMFvZ9C+X+Bo7d7iscksWXiSqt8rYGPy5V65 +48r6f1CGPqI0GAwJaCgRHOThuVw+R7oyPxjMW4T182t0xHJ04eOLoEq9jWYv6q012iDTiIJh8BIi +trzQ1aTsr1SIJSQ8p22xcik/Plemf1WvbibG/ufMQFxRRIEKeN5KzlW/HdXZt1bv8Hb/C3m1r737 +qWmRRpdogBQ2HbN/uymYNqUg+oJgYjOk7Na6B6duxc8UpufWkjTYgfX8HV2qXB72o007uPc5AgMB +AAGjgZcwgZQwDwYDVR0TAQH/BAUwAwEB/zBSBgNVHSAESzBJMEcGBFUdIAAwPzA9BggrBgEFBQcC +ARYxaHR0cDovL3d3dy5wa2lvdmVyaGVpZC5ubC9wb2xpY2llcy9yb290LXBvbGljeS1HMjAOBgNV +HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJFoMocVHYnitfGsNig0jQt8YojrMA0GCSqGSIb3DQEBCwUA +A4ICAQCoQUpnKpKBglBu4dfYszk78wIVCVBR7y29JHuIhjv5tLySCZa59sCrI2AGeYwRTlHSeYAz ++51IvuxBQ4EffkdAHOV6CMqqi3WtFMTC6GY8ggen5ieCWxjmD27ZUD6KQhgpxrRW/FYQoAUXvQwj +f/ST7ZwaUb7dRUG/kSS0H4zpX897IZmflZ85OkYcbPnNe5yQzSipx6lVu6xiNGI1E0sUOlWDuYaN +kqbG9AclVMwWVxJKgnjIFNkXgiYtXSAfea7+1HAWFpWD2DU5/1JddRwWxRNVz0fMdWVSSt7wsKfk +CpYL+63C4iWEst3kvX5ZbJvw8NjnyvLplzh+ib7M+zkXYT9y2zqR2GUBGR2tUKRXCnxLvJxxcypF +URmFzI79R6d0lR2o0a9OF7FpJsKqeFdbxU2n5Z4FF5TKsl+gSRiNNOkmbEgeqmiSBeGCc1qb3Adb +CG19ndeNIdn8FCCqwkXfP+cAslHkwvgFuXkajDTznlvkN1trSt8sV4pAWja63XVECDdCcAz+3F4h +oKOKwJCcaNpQ5kUQR3i2TtJlycM33+FCY7BXN0Ute4qcvwXqZVUz9zkQxSgqIXobisQk+T8VyJoV +IPVVYpbtbZNQvOSqeK3Zywplh6ZmwcSBo3c6WB4L7oOLnR7SUqTMHW+wmG2UMbX4cQrcufx9MmDm +66+KAQ== +-----END CERTIFICATE----- + +Hongkong Post Root CA 1 +======================= +-----BEGIN CERTIFICATE----- +MIIDMDCCAhigAwIBAgICA+gwDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoT +DUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxMB4XDTAzMDUx +NTA1MTMxNFoXDTIzMDUxNTA0NTIyOVowRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25n +IFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEArP84tulmAknjorThkPlAj3n54r15/gK97iSSHSL22oVyaf7XPwnU3ZG1 +ApzQjVrhVcNQhrkpJsLj2aDxaQMoIIBFIi1WpztUlVYiWR8o3x8gPW2iNr4joLFutbEnPzlTCeqr +auh0ssJlXI6/fMN4hM2eFvz1Lk8gKgifd/PFHsSaUmYeSF7jEAaPIpjhZY4bXSNmO7ilMlHIhqqh +qZ5/dpTCpmy3QfDVyAY45tQM4vM7TG1QjMSDJ8EThFk9nnV0ttgCXjqQesBCNnLsak3c78QA3xMY +V18meMjWCnl3v/evt3a5pQuEF10Q6m/hq5URX208o1xNg1vysxmKgIsLhwIDAQABoyYwJDASBgNV +HRMBAf8ECDAGAQH/AgEDMA4GA1UdDwEB/wQEAwIBxjANBgkqhkiG9w0BAQUFAAOCAQEADkbVPK7i +h9legYsCmEEIjEy82tvuJxuC52pF7BaLT4Wg87JwvVqWuspube5Gi27nKi6Wsxkz67SfqLI37pio +l7Yutmcn1KZJ/RyTZXaeQi/cImyaT/JaFTmxcdcrUehtHJjA2Sr0oYJ71clBoiMBdDhViw+5Lmei +IAQ32pwL0xch4I+XeTRvhEgCIDMb5jREn5Fw9IBehEPCKdJsEhTkYY2sEJCehFC78JZvRZ+K88ps +T/oROhUVRsPNH4NbLUES7VBnQRM9IauUiqpOfMGx+6fWtScvl6tu4B3i0RwsH0Ti/L6RoZz71ilT +c4afU9hDDl3WY4JxHYB0yvbiAmvZWg== +-----END CERTIFICATE----- + +SecureSign RootCA11 +=================== +-----BEGIN CERTIFICATE----- +MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJKUDErMCkGA1UEChMi +SmFwYW4gQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcywgSW5jLjEcMBoGA1UEAxMTU2VjdXJlU2lnbiBS +b290Q0ExMTAeFw0wOTA0MDgwNDU2NDdaFw0yOTA0MDgwNDU2NDdaMFgxCzAJBgNVBAYTAkpQMSsw +KQYDVQQKEyJKYXBhbiBDZXJ0aWZpY2F0aW9uIFNlcnZpY2VzLCBJbmMuMRwwGgYDVQQDExNTZWN1 +cmVTaWduIFJvb3RDQTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/XeqpRyQBTvL +TJszi1oURaTnkBbR31fSIRCkF/3frNYfp+TbfPfs37gD2pRY/V1yfIw/XwFndBWW4wI8h9uuywGO +wvNmxoVF9ALGOrVisq/6nL+k5tSAMJjzDbaTj6nU2DbysPyKyiyhFTOVMdrAG/LuYpmGYz+/3ZMq +g6h2uRMft85OQoWPIucuGvKVCbIFtUROd6EgvanyTgp9UK31BQ1FT0Zx/Sg+U/sE2C3XZR1KG/rP +O7AxmjVuyIsG0wCR8pQIZUyxNAYAeoni8McDWc/V1uinMrPmmECGxc0nEovMe863ETxiYAcjPitA +bpSACW22s293bzUIUPsCh8U+iQIDAQABo0IwQDAdBgNVHQ4EFgQUW/hNT7KlhtQ60vFjmqC+CfZX +t94wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAKCh +OBZmLqdWHyGcBvod7bkixTgm2E5P7KN/ed5GIaGHd48HCJqypMWvDzKYC3xmKbabfSVSSUOrTC4r +bnpwrxYO4wJs+0LmGJ1F2FXI6Dvd5+H0LgscNFxsWEr7jIhQX5Ucv+2rIrVls4W6ng+4reV6G4pQ +Oh29Dbx7VFALuUKvVaAYga1lme++5Jy/xIWrQbJUb9wlze144o4MjQlJ3WN7WmmWAiGovVJZ6X01 +y8hSyn+B/tlr0/cR7SXf+Of5pPpyl4RTDaXQMhhRdlkUbA/r7F+AjHVDg8OFmP9Mni0N5HeDk061 +lgeLKBObjBmNQSdJQO7e5iNEOdyhIta6A/I= +-----END CERTIFICATE----- + +Microsec e-Szigno Root CA 2009 +============================== +-----BEGIN CERTIFICATE----- +MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYDVQQGEwJIVTER +MA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jv +c2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o +dTAeFw0wOTA2MTYxMTMwMThaFw0yOTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UE +BwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUt +U3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvPkd6mJviZpWNwrZuuyjNA +fW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tccbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG +0IMZfcChEhyVbUr02MelTTMuhTlAdX4UfIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKA +pxn1ntxVUwOXewdI/5n7N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm +1HxdrtbCxkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1+rUC +AwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTLD8bf +QkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAbBgNVHREE +FDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqGSIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0o +lZMEyL/azXm4Q5DwpL7v8u8hmLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfX +I/OMn74dseGkddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775 +tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c2Pm2G2JwCz02 +yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5tHMN1Rq41Bab2XD0h7lbwyYIi +LXpUq3DDfSJlgnCW +-----END CERTIFICATE----- + +GlobalSign Root CA - R3 +======================= +-----BEGIN CERTIFICATE----- +MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4GA1UECxMXR2xv +YmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2Jh +bFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxT +aWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2ln +bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWt +iHL8RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsTgHeMCOFJ +0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmmKPZpO/bLyCiR5Z2KYVc3 +rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zdQQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjl +OCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZXriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2 +xmmFghcCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE +FI/wS3+oLkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZURUm7 +lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMpjjM5RcOO5LlXbKr8 +EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK6fBdRoyV3XpYKBovHd7NADdBj+1E +bddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQXmcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18 +YIvDQVETI53O9zJrlAGomecsMx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7r +kpeDMdmztcpHWD9f +-----END CERTIFICATE----- + +Autoridad de Certificacion Firmaprofesional CIF A62634068 +========================================================= +-----BEGIN CERTIFICATE----- +MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UEBhMCRVMxQjBA +BgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1hcHJvZmVzaW9uYWwgQ0lGIEE2 +MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEyMzEwODM4MTVaMFExCzAJBgNVBAYTAkVTMUIw +QAYDVQQDDDlBdXRvcmlkYWQgZGUgQ2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBB +NjI2MzQwNjgwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDD +Utd9thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQMcas9UX4P +B99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefGL9ItWY16Ck6WaVICqjaY +7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15iNA9wBj4gGFrO93IbJWyTdBSTo3OxDqqH +ECNZXyAFGUftaI6SEspd/NYrspI8IM/hX68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyI +plD9amML9ZMWGxmPsu2bm8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctX +MbScyJCyZ/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirjaEbsX +LZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/TKI8xWVvTyQKmtFLK +bpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF6NkBiDkal4ZkQdU7hwxu+g/GvUgU +vzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVhOSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMBIGA1Ud +EwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRlzeurNR4APn7VdMActHNH +DhpkLzCBpgYDVR0gBIGeMIGbMIGYBgRVHSAAMIGPMC8GCCsGAQUFBwIBFiNodHRwOi8vd3d3LmZp +cm1hcHJvZmVzaW9uYWwuY29tL2NwczBcBggrBgEFBQcCAjBQHk4AUABhAHMAZQBvACAAZABlACAA +bABhACAAQgBvAG4AYQBuAG8AdgBhACAANAA3ACAAQgBhAHIAYwBlAGwAbwBuAGEAIAAwADgAMAAx +ADcwDQYJKoZIhvcNAQEFBQADggIBABd9oPm03cXF661LJLWhAqvdpYhKsg9VSytXjDvlMd3+xDLx +51tkljYyGOylMnfX40S2wBEqgLk9am58m9Ot/MPWo+ZkKXzR4Tgegiv/J2Wv+xYVxC5xhOW1//qk +R71kMrv2JYSiJ0L1ILDCExARzRAVukKQKtJE4ZYm6zFIEv0q2skGz3QeqUvVhyj5eTSSPi5E6PaP +T481PyWzOdxjKpBrIF/EUhJOlywqrJ2X3kjyo2bbwtKDlaZmp54lD+kLM5FlClrD2VQS3a/DTg4f +Jl4N3LON7NWBcN7STyQF82xO9UxJZo3R/9ILJUFI/lGExkKvgATP0H5kSeTy36LssUzAKh3ntLFl +osS88Zj0qnAHY7S42jtM+kAiMFsRpvAFDsYCA0irhpuF3dvd6qJ2gHN99ZwExEWN57kci57q13XR +crHedUTnQn3iV2t93Jm8PYMo6oCTjcVMZcFwgbg4/EMxsvYDNEeyrPsiBsse3RdHHF9mudMaotoR +saS8I8nkvof/uZS2+F0gStRf571oe2XyFR7SOqkt6dhrJKyXWERHrVkY8SFlcN7ONGCoQPHzPKTD +KCOM/iczQ0CgFzzr6juwcqajuUpLXhZI9LK8yIySxZ2frHI2vDSANGupi5LAuBft7HZT9SQBjLMi +6Et8Vcad+qMUu2WFbm5PEn4KPJ2V +-----END CERTIFICATE----- + +Izenpe.com +========== +-----BEGIN CERTIFICATE----- +MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4MQswCQYDVQQG +EwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6ZW5wZS5jb20wHhcNMDcxMjEz +MTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMu +QS4xEzARBgNVBAMMCkl6ZW5wZS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ +03rKDx6sp4boFmVqscIbRTJxldn+EFvMr+eleQGPicPK8lVx93e+d5TzcqQsRNiekpsUOqHnJJAK +ClaOxdgmlOHZSOEtPtoKct2jmRXagaKH9HtuJneJWK3W6wyyQXpzbm3benhB6QiIEn6HLmYRY2xU ++zydcsC8Lv/Ct90NduM61/e0aL6i9eOBbsFGb12N4E3GVFWJGjMxCrFXuaOKmMPsOzTFlUFpfnXC +PCDFYbpRR6AgkJOhkEvzTnyFRVSa0QUmQbC1TR0zvsQDyCV8wXDbO/QJLVQnSKwv4cSsPsjLkkxT +OTcj7NMB+eAJRE1NZMDhDVqHIrytG6P+JrUV86f8hBnp7KGItERphIPzidF0BqnMC9bC3ieFUCbK +F7jJeodWLBoBHmy+E60QrLUk9TiRodZL2vG70t5HtfG8gfZZa88ZU+mNFctKy6lvROUbQc/hhqfK +0GqfvEyNBjNaooXlkDWgYlwWTvDjovoDGrQscbNYLN57C9saD+veIR8GdwYDsMnvmfzAuU8Lhij+ +0rnq49qlw0dpEuDb8PYZi+17cNcC1u2HGCgsBCRMd+RIihrGO5rUD8r6ddIBQFqNeb+Lz0vPqhbB +leStTIo+F5HUsWLlguWABKQDfo2/2n+iD5dPDNMN+9fR5XJ+HMh3/1uaD7euBUbl8agW7EekFwID +AQABo4H2MIHzMIGwBgNVHREEgagwgaWBD2luZm9AaXplbnBlLmNvbaSBkTCBjjFHMEUGA1UECgw+ +SVpFTlBFIFMuQS4gLSBDSUYgQTAxMzM3MjYwLVJNZXJjLlZpdG9yaWEtR2FzdGVpeiBUMTA1NSBG +NjIgUzgxQzBBBgNVBAkMOkF2ZGEgZGVsIE1lZGl0ZXJyYW5lbyBFdG9yYmlkZWEgMTQgLSAwMTAx +MCBWaXRvcmlhLUdhc3RlaXowDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0O +BBYEFB0cZQ6o8iV7tJHP5LGx5r1VdGwFMA0GCSqGSIb3DQEBCwUAA4ICAQB4pgwWSp9MiDrAyw6l +Fn2fuUhfGI8NYjb2zRlrrKvV9pF9rnHzP7MOeIWblaQnIUdCSnxIOvVFfLMMjlF4rJUT3sb9fbga +kEyrkgPH7UIBzg/YsfqikuFgba56awmqxinuaElnMIAkejEWOVt+8Rwu3WwJrfIxwYJOubv5vr8q +hT/AQKM6WfxZSzwoJNu0FXWuDYi6LnPAvViH5ULy617uHjAimcs30cQhbIHsvm0m5hzkQiCeR7Cs +g1lwLDXWrzY0tM07+DKo7+N4ifuNRSzanLh+QBxh5z6ikixL8s36mLYp//Pye6kfLqCTVyvehQP5 +aTfLnnhqBbTFMXiJ7HqnheG5ezzevh55hM6fcA5ZwjUukCox2eRFekGkLhObNA5me0mrZJfQRsN5 +nXJQY6aYWwa9SG3YOYNw6DXwBdGqvOPbyALqfP2C2sJbUjWumDqtujWTI6cfSN01RpiyEGjkpTHC +ClguGYEQyVB1/OpaFs4R1+7vUIgtYf8/QnMFlEPVjjxOAToZpR9GTnfQXeWBIiGH/pR9hNiTrdZo +Q0iy2+tzJOeRf1SktoA+naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1Z +WrOZyGlsQyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw== +-----END CERTIFICATE----- + +Chambers of Commerce Root - 2008 +================================ +-----BEGIN CERTIFICATE----- +MIIHTzCCBTegAwIBAgIJAKPaQn6ksa7aMA0GCSqGSIb3DQEBBQUAMIGuMQswCQYDVQQGEwJFVTFD +MEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNv +bS9hZGRyZXNzKTESMBAGA1UEBRMJQTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMu +QS4xKTAnBgNVBAMTIENoYW1iZXJzIG9mIENvbW1lcmNlIFJvb3QgLSAyMDA4MB4XDTA4MDgwMTEy +Mjk1MFoXDTM4MDczMTEyMjk1MFowga4xCzAJBgNVBAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNl +ZSBjdXJyZW50IGFkZHJlc3MgYXQgd3d3LmNhbWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQF +EwlBODI3NDMyODcxGzAZBgNVBAoTEkFDIENhbWVyZmlybWEgUy5BLjEpMCcGA1UEAxMgQ2hhbWJl +cnMgb2YgQ29tbWVyY2UgUm9vdCAtIDIwMDgwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC +AQCvAMtwNyuAWko6bHiUfaN/Gh/2NdW928sNRHI+JrKQUrpjOyhYb6WzbZSm891kDFX29ufyIiKA +XuFixrYp4YFs8r/lfTJqVKAyGVn+H4vXPWCGhSRv4xGzdz4gljUha7MI2XAuZPeEklPWDrCQiorj +h40G072QDuKZoRuGDtqaCrsLYVAGUvGef3bsyw/QHg3PmTA9HMRFEFis1tPo1+XqxQEHd9ZR5gN/ +ikilTWh1uem8nk4ZcfUyS5xtYBkL+8ydddy/Js2Pk3g5eXNeJQ7KXOt3EgfLZEFHcpOrUMPrCXZk +NNI5t3YRCQ12RcSprj1qr7V9ZS+UWBDsXHyvfuK2GNnQm05aSd+pZgvMPMZ4fKecHePOjlO+Bd5g +D2vlGts/4+EhySnB8esHnFIbAURRPHsl18TlUlRdJQfKFiC4reRB7noI/plvg6aRArBsNlVq5331 +lubKgdaX8ZSD6e2wsWsSaR6s+12pxZjptFtYer49okQ6Y1nUCyXeG0+95QGezdIp1Z8XGQpvvwyQ +0wlf2eOKNcx5Wk0ZN5K3xMGtr/R5JJqyAQuxr1yW84Ay+1w9mPGgP0revq+ULtlVmhduYJ1jbLhj +ya6BXBg14JC7vjxPNyK5fuvPnnchpj04gftI2jE9K+OJ9dC1vX7gUMQSibMjmhAxhduub+84Mxh2 +EQIDAQABo4IBbDCCAWgwEgYDVR0TAQH/BAgwBgEB/wIBDDAdBgNVHQ4EFgQU+SSsD7K1+HnA+mCI +G8TZTQKeFxkwgeMGA1UdIwSB2zCB2IAU+SSsD7K1+HnA+mCIG8TZTQKeFxmhgbSkgbEwga4xCzAJ +BgNVBAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNlZSBjdXJyZW50IGFkZHJlc3MgYXQgd3d3LmNh +bWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQFEwlBODI3NDMyODcxGzAZBgNVBAoTEkFDIENh +bWVyZmlybWEgUy5BLjEpMCcGA1UEAxMgQ2hhbWJlcnMgb2YgQ29tbWVyY2UgUm9vdCAtIDIwMDiC +CQCj2kJ+pLGu2jAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUH +AgEWHGh0dHA6Ly9wb2xpY3kuY2FtZXJmaXJtYS5jb20wDQYJKoZIhvcNAQEFBQADggIBAJASryI1 +wqM58C7e6bXpeHxIvj99RZJe6dqxGfwWPJ+0W2aeaufDuV2I6A+tzyMP3iU6XsxPpcG1Lawk0lgH +3qLPaYRgM+gQDROpI9CF5Y57pp49chNyM/WqfcZjHwj0/gF/JM8rLFQJ3uIrbZLGOU8W6jx+ekbU +RWpGqOt1glanq6B8aBMz9p0w8G8nOSQjKpD9kCk18pPfNKXG9/jvjA9iSnyu0/VU+I22mlaHFoI6 +M6taIgj3grrqLuBHmrS1RaMFO9ncLkVAO+rcf+g769HsJtg1pDDFOqxXnrN2pSB7+R5KBWIBpih1 +YJeSDW4+TTdDDZIVnBgizVGZoCkaPF+KMjNbMMeJL0eYD6MDxvbxrN8y8NmBGuScvfaAFPDRLLmF +9dijscilIeUcE5fuDr3fKanvNFNb0+RqE4QGtjICxFKuItLcsiFCGtpA8CnJ7AoMXOLQusxI0zcK +zBIKinmwPQN/aUv0NCB9szTqjktk9T79syNnFQ0EuPAtwQlRPLJsFfClI9eDdOTlLsn+mCdCxqvG +nrDQWzilm1DefhiYtUU79nm06PcaewaD+9CL2rvHvRirCG88gGtAPxkZumWK5r7VXNM21+9AUiRg +OGcEMeyP84LG3rlV8zsxkVrctQgVrXYlCg17LofiDKYGvCYQbTed7N14jHyAxfDZd0jQ +-----END CERTIFICATE----- + +Global Chambersign Root - 2008 +============================== +-----BEGIN CERTIFICATE----- +MIIHSTCCBTGgAwIBAgIJAMnN0+nVfSPOMA0GCSqGSIb3DQEBBQUAMIGsMQswCQYDVQQGEwJFVTFD +MEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNv +bS9hZGRyZXNzKTESMBAGA1UEBRMJQTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMu +QS4xJzAlBgNVBAMTHkdsb2JhbCBDaGFtYmVyc2lnbiBSb290IC0gMjAwODAeFw0wODA4MDExMjMx +NDBaFw0zODA3MzExMjMxNDBaMIGsMQswCQYDVQQGEwJFVTFDMEEGA1UEBxM6TWFkcmlkIChzZWUg +Y3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNvbS9hZGRyZXNzKTESMBAGA1UEBRMJ +QTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMuQS4xJzAlBgNVBAMTHkdsb2JhbCBD +aGFtYmVyc2lnbiBSb290IC0gMjAwODCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDf +VtPkOpt2RbQT2//BthmLN0EYlVJH6xedKYiONWwGMi5HYvNJBL99RDaxccy9Wglz1dmFRP+RVyXf +XjaOcNFccUMd2drvXNL7G706tcuto8xEpw2uIRU/uXpbknXYpBI4iRmKt4DS4jJvVpyR1ogQC7N0 +ZJJ0YPP2zxhPYLIj0Mc7zmFLmY/CDNBAspjcDahOo7kKrmCgrUVSY7pmvWjg+b4aqIG7HkF4ddPB +/gBVsIdU6CeQNR1MM62X/JcumIS/LMmjv9GYERTtY/jKmIhYF5ntRQOXfjyGHoiMvvKRhI9lNNgA +TH23MRdaKXoKGCQwoze1eqkBfSbW+Q6OWfH9GzO1KTsXO0G2Id3UwD2ln58fQ1DJu7xsepeY7s2M +H/ucUa6LcL0nn3HAa6x9kGbo1106DbDVwo3VyJ2dwW3Q0L9R5OP4wzg2rtandeavhENdk5IMagfe +Ox2YItaswTXbo6Al/3K1dh3ebeksZixShNBFks4c5eUzHdwHU1SjqoI7mjcv3N2gZOnm3b2u/GSF +HTynyQbehP9r6GsaPMWis0L7iwk+XwhSx2LE1AVxv8Rk5Pihg+g+EpuoHtQ2TS9x9o0o9oOpE9Jh +wZG7SMA0j0GMS0zbaRL/UJScIINZc+18ofLx/d33SdNDWKBWY8o9PeU1VlnpDsogzCtLkykPAgMB +AAGjggFqMIIBZjASBgNVHRMBAf8ECDAGAQH/AgEMMB0GA1UdDgQWBBS5CcqcHtvTbDprru1U8VuT +BjUuXjCB4QYDVR0jBIHZMIHWgBS5CcqcHtvTbDprru1U8VuTBjUuXqGBsqSBrzCBrDELMAkGA1UE +BhMCRVUxQzBBBgNVBAcTOk1hZHJpZCAoc2VlIGN1cnJlbnQgYWRkcmVzcyBhdCB3d3cuY2FtZXJm +aXJtYS5jb20vYWRkcmVzcykxEjAQBgNVBAUTCUE4Mjc0MzI4NzEbMBkGA1UEChMSQUMgQ2FtZXJm +aXJtYSBTLkEuMScwJQYDVQQDEx5HbG9iYWwgQ2hhbWJlcnNpZ24gUm9vdCAtIDIwMDiCCQDJzdPp +1X0jzjAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0 +dHA6Ly9wb2xpY3kuY2FtZXJmaXJtYS5jb20wDQYJKoZIhvcNAQEFBQADggIBAICIf3DekijZBZRG +/5BXqfEv3xoNa/p8DhxJJHkn2EaqbylZUohwEurdPfWbU1Rv4WCiqAm57OtZfMY18dwY6fFn5a+6 +ReAJ3spED8IXDneRRXozX1+WLGiLwUePmJs9wOzL9dWCkoQ10b42OFZyMVtHLaoXpGNR6woBrX/s +dZ7LoR/xfxKxueRkf2fWIyr0uDldmOghp+G9PUIadJpwr2hsUF1Jz//7Dl3mLEfXgTpZALVza2Mg +9jFFCDkO9HB+QHBaP9BrQql0PSgvAm11cpUJjUhjxsYjV5KTXjXBjfkK9yydYhz2rXzdpjEetrHH +foUm+qRqtdpjMNHvkzeyZi99Bffnt0uYlDXA2TopwZ2yUDMdSqlapskD7+3056huirRXhOukP9Du +qqqHW2Pok+JrqNS4cnhrG+055F3Lm6qH1U9OAP7Zap88MQ8oAgF9mOinsKJknnn4SPIVqczmyETr +P3iZ8ntxPjzxmKfFGBI/5rsoM0LpRQp8bfKGeS/Fghl9CYl8slR2iK7ewfPM4W7bMdaTrpmg7yVq +c5iJWzouE4gev8CSlDQb4ye3ix5vQv/n6TebUB0tovkC7stYWDpxvGjjqsGvHCgfotwjZT+B6q6Z +09gwzxMNTxXJhLynSC34MCN32EZLeW32jO06f2ARePTpm67VVMB0gNELQp/B +-----END CERTIFICATE----- + +Go Daddy Root Certificate Authority - G2 +======================================== +-----BEGIN CERTIFICATE----- +MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT +B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMu +MTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5 +MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6 +b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8G +A1UEAxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZI +hvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKDE6bFIEMBO4Tx5oVJnyfq +9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD ++qK+ihVqf94Lw7YZFAXK6sOoBJQ7RnwyDfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutd +fMh8+7ArU6SSYmlRJQVhGkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMl +NAJWJwGRtDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEAAaNC +MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9 +BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmXWWcDYfF+OwYxdS2hII5PZYe096ac +vNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r +5N9ss4UXnT3ZJE95kTXWXwTrgIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYV +N8Gb5DKj7Tjo2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO +LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI4uJEvlz36hz1 +-----END CERTIFICATE----- + +Starfield Root Certificate Authority - G2 +========================================= +-----BEGIN CERTIFICATE----- +MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT +B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9s +b2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVsZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0 +eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAw +DgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQg +VGVjaG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZpY2F0ZSBB +dXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3twQP89o/8ArFv +W59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMgnLRJdzIpVv257IzdIvpy3Cdhl+72WoTs +bhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNk +N3mSwOxGXn/hbVNMYq/NHwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7Nf +ZTD4p7dNdloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0HZbU +JtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0GCSqGSIb3DQEBCwUAA4IBAQARWfol +TwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjUsHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx +4mcujJUDJi5DnUox9g61DLu34jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUw +F5okxBDgBPfg8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K +pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1mMpYjn0q7pBZ +c2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0 +-----END CERTIFICATE----- + +Starfield Services Root Certificate Authority - G2 +================================================== +-----BEGIN CERTIFICATE----- +MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMxEDAOBgNVBAgT +B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9s +b2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVsZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRl +IEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgZgxCzAJBgNV +BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxT +dGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2VydmljZXMg +Um9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC +AQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz/Lz58gE20pOsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX/2 +h/klQ4bnaRtSmpDhcePYLQ1Ob/bISdm28xpWriu2dBTrz/sm4xq6HZYuajtYlIlHVv8loJNwU4Pa +hHQUw2eeBGg6345AWh1KTs9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLP +LJGmpufehRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk6mFB +rMnUVN+HL8cisibMn1lUaJ/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaNCMEAwDwYDVR0TAQH/BAUw +AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJxfAN+qAdcwKziIorhtSpzyEZGDMA0GCSqG +SIb3DQEBCwUAA4IBAQBLNqaEd2ndOxmfZyMIbw5hyf2E3F/YNoHN2BtBLZ9g3ccaaNnRbobhiCPP +E95Dz+I0swSdHynVv/heyNXBve6SbzJ08pGCL72CQnqtKrcgfU28elUSwhXqvfdqlS5sdJ/PHLTy +xQGjhdByPq1zqwubdQxtRbeOlKyWN7Wg0I8VRw7j6IPdj/3vQQF3zCepYoUz8jcI73HPdwbeyBkd +iEDPfUYd/x7H4c7/I9vG+o1VTqkC50cRRj70/b17KSa7qWFiNyi2LSr2EIZkyXCn0q23KXB56jza +YyWf/Wi3MOxw+3WKt21gZ7IeyLnp2KhvAotnDU0mV3HaIPzBSlCNsSi6 +-----END CERTIFICATE----- + +AffirmTrust Commercial +====================== +-----BEGIN CERTIFICATE----- +MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCVVMxFDAS +BgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBDb21tZXJjaWFsMB4XDTEw +MDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmly +bVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBDb21tZXJjaWFsMIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEA9htPZwcroRX1BiLLHwGy43NFBkRJLLtJJRTWzsO3qyxPxkEylFf6Eqdb +DuKPHx6GGaeqtS25Xw2Kwq+FNXkyLbscYjfysVtKPcrNcV/pQr6U6Mje+SJIZMblq8Yrba0F8PrV +C8+a5fBQpIs7R6UjW3p6+DM/uO+Zl+MgwdYoic+U+7lF7eNAFxHUdPALMeIrJmqbTFeurCA+ukV6 +BfO9m2kVrn1OIGPENXY6BwLJN/3HR+7o8XYdcxXyl6S1yHp52UKqK39c/s4mT6NmgTWvRLpUHhww +MmWd5jyTXlBOeuM61G7MGvv50jeuJCqrVwMiKA1JdX+3KNp1v47j3A55MQIDAQABo0IwQDAdBgNV +HQ4EFgQUnZPGU4teyq8/nx4P5ZmVvCT2lI8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwDQYJKoZIhvcNAQELBQADggEBAFis9AQOzcAN/wr91LoWXym9e2iZWEnStB03TX8nfUYGXUPG +hi4+c7ImfU+TqbbEKpqrIZcUsd6M06uJFdhrJNTxFq7YpFzUf1GO7RgBsZNjvbz4YYCanrHOQnDi +qX0GJX0nof5v7LMeJNrjS1UaADs1tDvZ110w/YETifLCBivtZ8SOyUOyXGsViQK8YvxO8rUzqrJv +0wqiUOP2O+guRMLbZjipM1ZI8W0bM40NjD9gN53Tym1+NH4Nn3J2ixufcv1SNUFFApYvHLKac0kh +sUlHRUe072o0EclNmsxZt9YCnlpOZbWUrhvfKbAW8b8Angc6F2S1BLUjIZkKlTuXfO8= +-----END CERTIFICATE----- + +AffirmTrust Networking +====================== +-----BEGIN CERTIFICATE----- +MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UEBhMCVVMxFDAS +BgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBOZXR3b3JraW5nMB4XDTEw +MDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmly +bVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBOZXR3b3JraW5nMIIBIjANBgkqhkiG9w0BAQEF +AAOCAQ8AMIIBCgKCAQEAtITMMxcua5Rsa2FSoOujz3mUTOWUgJnLVWREZY9nZOIG41w3SfYvm4SE +Hi3yYJ0wTsyEheIszx6e/jarM3c1RNg1lho9Nuh6DtjVR6FqaYvZ/Ls6rnla1fTWcbuakCNrmreI +dIcMHl+5ni36q1Mr3Lt2PpNMCAiMHqIjHNRqrSK6mQEubWXLviRmVSRLQESxG9fhwoXA3hA/Pe24 +/PHxI1Pcv2WXb9n5QHGNfb2V1M6+oF4nI979ptAmDgAp6zxG8D1gvz9Q0twmQVGeFDdCBKNwV6gb +h+0t+nvujArjqWaJGctB+d1ENmHP4ndGyH329JKBNv3bNPFyfvMMFr20FQIDAQABo0IwQDAdBgNV +HQ4EFgQUBx/S55zawm6iQLSwelAQUHTEyL0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwDQYJKoZIhvcNAQEFBQADggEBAIlXshZ6qML91tmbmzTCnLQyFE2npN/svqe++EPbkTfOtDIu +UFUaNU52Q3Eg75N3ThVwLofDwR1t3Mu1J9QsVtFSUzpE0nPIxBsFZVpikpzuQY0x2+c06lkh1QF6 +12S4ZDnNye2v7UsDSKegmQGA3GWjNq5lWUhPgkvIZfFXHeVZLgo/bNjR9eUJtGxUAArgFU2HdW23 +WJZa3W3SAKD0m0i+wzekujbgfIeFlxoVot4uolu9rxj5kFDNcFn4J2dHy8egBzp90SxdbBk6ZrV9 +/ZFvgrG+CJPbFEfxojfHRZ48x3evZKiT3/Zpg4Jg8klCNO1aAFSFHBY2kgxc+qatv9s= +-----END CERTIFICATE----- + +AffirmTrust Premium +=================== +-----BEGIN CERTIFICATE----- +MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UEBhMCVVMxFDAS +BgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVzdCBQcmVtaXVtMB4XDTEwMDEy +OTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRy +dXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVzdCBQcmVtaXVtMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEAxBLfqV/+Qd3d9Z+K4/as4Tx4mrzY8H96oDMq3I0gW64tb+eT2TZwamjPjlGjhVtn +BKAQJG9dKILBl1fYSCkTtuG+kU3fhQxTGJoeJKJPj/CihQvL9Cl/0qRY7iZNyaqoe5rZ+jjeRFcV +5fiMyNlI4g0WJx0eyIOFJbe6qlVBzAMiSy2RjYvmia9mx+n/K+k8rNrSs8PhaJyJ+HoAVt70VZVs ++7pk3WKL3wt3MutizCaam7uqYoNMtAZ6MMgpv+0GTZe5HMQxK9VfvFMSF5yZVylmd2EhMQcuJUmd +GPLu8ytxjLW6OQdJd/zvLpKQBY0tL3d770O/Nbua2Plzpyzy0FfuKE4mX4+QaAkvuPjcBukumj5R +p9EixAqnOEhss/n/fauGV+O61oV4d7pD6kh/9ti+I20ev9E2bFhc8e6kGVQa9QPSdubhjL08s9NI +S+LI+H+SqHZGnEJlPqQewQcDWkYtuJfzt9WyVSHvutxMAJf7FJUnM7/oQ0dG0giZFmA7mn7S5u04 +6uwBHjxIVkkJx0w3AJ6IDsBz4W9m6XJHMD4Q5QsDyZpCAGzFlH5hxIrff4IaC1nEWTJ3s7xgaVY5 +/bQGeyzWZDbZvUjthB9+pSKPKrhC9IK31FOQeE4tGv2Bb0TXOwF0lkLgAOIua+rF7nKsu7/+6qqo ++Nz2snmKtmcCAwEAAaNCMEAwHQYDVR0OBBYEFJ3AZ6YMItkm9UWrpmVSESfYRaxjMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBDAUAA4ICAQCzV00QYk465KzquByv +MiPIs0laUZx2KI15qldGF9X1Uva3ROgIRL8YhNILgM3FEv0AVQVhh0HctSSePMTYyPtwni94loMg +Nt58D2kTiKV1NpgIpsbfrM7jWNa3Pt668+s0QNiigfV4Py/VpfzZotReBA4Xrf5B8OWycvpEgjNC +6C1Y91aMYj+6QrCcDFx+LmUmXFNPALJ4fqENmS2NuB2OosSw/WDQMKSOyARiqcTtNd56l+0OOF6S +L5Nwpamcb6d9Ex1+xghIsV5n61EIJenmJWtSKZGc0jlzCFfemQa0W50QBuHCAKi4HEoCChTQwUHK ++4w1IX2COPKpVJEZNZOUbWo6xbLQu4mGk+ibyQ86p3q4ofB4Rvr8Ny/lioTz3/4E2aFooC8k4gmV +BtWVyuEklut89pMFu+1z6S3RdTnX5yTb2E5fQ4+e0BQ5v1VwSJlXMbSc7kqYA5YwH2AG7hsj/oFg +IxpHYoWlzBk0gG+zrBrjn/B7SK3VAdlntqlyk+otZrWyuOQ9PLLvTIzq6we/qzWaVYa8GKa1qF60 +g2xraUDTn9zxw2lrueFtCfTxqlB2Cnp9ehehVZZCmTEJ3WARjQUwfuaORtGdFNrHF+QFlozEJLUb +zxQHskD4o55BhrwE0GuWyCqANP2/7waj3VjFhT0+j/6eKeC2uAloGRwYQw== +-----END CERTIFICATE----- + +AffirmTrust Premium ECC +======================= +-----BEGIN CERTIFICATE----- +MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMCVVMxFDASBgNV +BAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQcmVtaXVtIEVDQzAeFw0xMDAx +MjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1U +cnVzdDEgMB4GA1UEAwwXQWZmaXJtVHJ1c3QgUHJlbWl1bSBFQ0MwdjAQBgcqhkjOPQIBBgUrgQQA +IgNiAAQNMF4bFZ0D0KF5Nbc6PJJ6yhUczWLznCZcBz3lVPqj1swS6vQUX+iOGasvLkjmrBhDeKzQ +N8O9ss0s5kfiGuZjuD0uL3jET9v0D6RoTFVya5UdThhClXjMNzyR4ptlKymjQjBAMB0GA1UdDgQW +BBSaryl6wBE1NSZRMADDav5A1a7WPDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAK +BggqhkjOPQQDAwNnADBkAjAXCfOHiFBar8jAQr9HX/VsaobgxCd05DhT1wV/GzTjxi+zygk8N53X +57hG8f2h4nECMEJZh0PUUd+60wkyWs6Iflc9nF9Ca/UHLbXwgpP5WW+uZPpY5Yse42O+tYHNbwKM +eQ== +-----END CERTIFICATE----- + +Certum Trusted Network CA +========================= +-----BEGIN CERTIFICATE----- +MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBMMSIwIAYDVQQK +ExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBUcnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIy +MTIwNzM3WhcNMjkxMjMxMTIwNzM3WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBU +ZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +MSIwIAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC +AQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rHUV+rpDKmYYe2bg+G0jAC +l/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LMTXPb865Px1bVWqeWifrzq2jUI4ZZJ88J +J7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVUBBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4 +fOQtf/WsX+sWn7Et0brMkUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0 +cvW0QM8xAcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNVHRMB +Af8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNVHQ8BAf8EBAMCAQYw +DQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15ysHhE49wcrwn9I0j6vSrEuVUEtRCj +jSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfLI9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1 +mS1FhIrlQgnXdAIv94nYmem8J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5aj +Zt3hrvJBW8qYVoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI +03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw= +-----END CERTIFICATE----- + +TWCA Root Certification Authority +================================= +-----BEGIN CERTIFICATE----- +MIIDezCCAmOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJUVzESMBAGA1UECgwJ +VEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NBIFJvb3QgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkwHhcNMDgwODI4MDcyNDMzWhcNMzAxMjMxMTU1OTU5WjBfMQswCQYDVQQG +EwJUVzESMBAGA1UECgwJVEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NB +IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQCwfnK4pAOU5qfeCTiRShFAh6d8WWQUe7UREN3+v9XAu1bihSX0NXIP+FPQQeFEAcK0HMMx +QhZHhTMidrIKbw/lJVBPhYa+v5guEGcevhEFhgWQxFnQfHgQsIBct+HHK3XLfJ+utdGdIzdjp9xC +oi2SBBtQwXu4PhvJVgSLL1KbralW6cH/ralYhzC2gfeXRfwZVzsrb+RH9JlF/h3x+JejiB03HFyP +4HYlmlD4oFT/RJB2I9IyxsOrBr/8+7/zrX2SYgJbKdM1o5OaQ2RgXbL6Mv87BK9NQGr5x+PvI/1r +y+UPizgN7gr8/g+YnzAx3WxSZfmLgb4i4RxYA7qRG4kHAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIB +BjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqOFsmjd6LWvJPelSDGRjjCDWmujANBgkqhkiG +9w0BAQUFAAOCAQEAPNV3PdrfibqHDAhUaiBQkr6wQT25JmSDCi/oQMCXKCeCMErJk/9q56YAf4lC +mtYR5VPOL8zy2gXE/uJQxDqGfczafhAJO5I1KlOy/usrBdlsXebQ79NqZp4VKIV66IIArB6nCWlW +QtNoURi+VJq/REG6Sb4gumlc7rh3zc5sH62Dlhh9DrUUOYTxKOkto557HnpyWoOzeW/vtPzQCqVY +T0bf+215WfKEIlKuD8z7fDvnaspHYcN6+NOSBB+4IIThNlQWx0DeO4pz3N/GCUzf7Nr/1FNCocny +Yh0igzyXxfkZYiesZSLX0zzG5Y6yU8xJzrww/nsOM5D77dIUkR8Hrw== +-----END CERTIFICATE----- + +Security Communication RootCA2 +============================== +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDElMCMGA1UEChMc +U0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMeU2VjdXJpdHkgQ29tbXVuaWNh +dGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoXDTI5MDUyOTA1MDAzOVowXTELMAkGA1UEBhMC +SlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xJzAlBgNVBAsTHlNlY3Vy +aXR5IENvbW11bmljYXRpb24gUm9vdENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +ANAVOVKxUrO6xVmCxF1SrjpDZYBLx/KWvNs2l9amZIyoXvDjChz335c9S672XewhtUGrzbl+dp++ ++T42NKA7wfYxEUV0kz1XgMX5iZnK5atq1LXaQZAQwdbWQonCv/Q4EpVMVAX3NuRFg3sUZdbcDE3R +3n4MqzvEFb46VqZab3ZpUql6ucjrappdUtAtCms1FgkQhNBqyjoGADdH5H5XTz+L62e4iKrFvlNV +spHEfbmwhRkGeC7bYRr6hfVKkaHnFtWOojnflLhwHyg/i/xAXmODPIMqGplrz95Zajv8bxbXH/1K +EOtOghY6rCcMU/Gt1SSwawNQwS08Ft1ENCcadfsCAwEAAaNCMEAwHQYDVR0OBBYEFAqFqXdlBZh8 +QIH4D5csOPEK7DzPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEB +CwUAA4IBAQBMOqNErLlFsceTfsgLCkLfZOoc7llsCLqJX2rKSpWeeo8HxdpFcoJxDjrSzG+ntKEj +u/Ykn8sX/oymzsLS28yN/HH8AynBbF0zX2S2ZTuJbxh2ePXcokgfGT+Ok+vx+hfuzU7jBBJV1uXk +3fs+BXziHV7Gp7yXT2g69ekuCkO2r1dcYmh8t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6q +tnRGEmyR7jTV7JqR50S+kDFy1UkC9gLl9B/rfNmWVan/7Ir5mUf/NVoCqgTLiluHcSmRvaS0eg29 +mvVXIwAHIRc/SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03 +-----END CERTIFICATE----- + +EC-ACC +====== +-----BEGIN CERTIFICATE----- +MIIFVjCCBD6gAwIBAgIQ7is969Qh3hSoYqwE893EATANBgkqhkiG9w0BAQUFADCB8zELMAkGA1UE +BhMCRVMxOzA5BgNVBAoTMkFnZW5jaWEgQ2F0YWxhbmEgZGUgQ2VydGlmaWNhY2lvIChOSUYgUS0w +ODAxMTc2LUkpMSgwJgYDVQQLEx9TZXJ2ZWlzIFB1YmxpY3MgZGUgQ2VydGlmaWNhY2lvMTUwMwYD +VQQLEyxWZWdldSBodHRwczovL3d3dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbCAoYykwMzE1MDMGA1UE +CxMsSmVyYXJxdWlhIEVudGl0YXRzIGRlIENlcnRpZmljYWNpbyBDYXRhbGFuZXMxDzANBgNVBAMT +BkVDLUFDQzAeFw0wMzAxMDcyMzAwMDBaFw0zMTAxMDcyMjU5NTlaMIHzMQswCQYDVQQGEwJFUzE7 +MDkGA1UEChMyQWdlbmNpYSBDYXRhbGFuYSBkZSBDZXJ0aWZpY2FjaW8gKE5JRiBRLTA4MDExNzYt +SSkxKDAmBgNVBAsTH1NlcnZlaXMgUHVibGljcyBkZSBDZXJ0aWZpY2FjaW8xNTAzBgNVBAsTLFZl +Z2V1IGh0dHBzOi8vd3d3LmNhdGNlcnQubmV0L3ZlcmFycmVsIChjKTAzMTUwMwYDVQQLEyxKZXJh +cnF1aWEgRW50aXRhdHMgZGUgQ2VydGlmaWNhY2lvIENhdGFsYW5lczEPMA0GA1UEAxMGRUMtQUND +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyLHT+KXQpWIR4NA9h0X84NzJB5R85iK +w5K4/0CQBXCHYMkAqbWUZRkiFRfCQ2xmRJoNBD45b6VLeqpjt4pEndljkYRm4CgPukLjbo73FCeT +ae6RDqNfDrHrZqJyTxIThmV6PttPB/SnCWDaOkKZx7J/sxaVHMf5NLWUhdWZXqBIoH7nF2W4onW4 +HvPlQn2v7fOKSGRdghST2MDk/7NQcvJ29rNdQlB50JQ+awwAvthrDk4q7D7SzIKiGGUzE3eeml0a +E9jD2z3Il3rucO2n5nzbcc8tlGLfbdb1OL4/pYUKGbio2Al1QnDE6u/LDsg0qBIimAy4E5S2S+zw +0JDnJwIDAQABo4HjMIHgMB0GA1UdEQQWMBSBEmVjX2FjY0BjYXRjZXJ0Lm5ldDAPBgNVHRMBAf8E +BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoMOLRKo3pUW/l4Ba0fF4opvpXY0wfwYD +VR0gBHgwdjB0BgsrBgEEAfV4AQMBCjBlMCwGCCsGAQUFBwIBFiBodHRwczovL3d3dy5jYXRjZXJ0 +Lm5ldC92ZXJhcnJlbDA1BggrBgEFBQcCAjApGidWZWdldSBodHRwczovL3d3dy5jYXRjZXJ0Lm5l +dC92ZXJhcnJlbCAwDQYJKoZIhvcNAQEFBQADggEBAKBIW4IB9k1IuDlVNZyAelOZ1Vr/sXE7zDkJ +lF7W2u++AVtd0x7Y/X1PzaBB4DSTv8vihpw3kpBWHNzrKQXlxJ7HNd+KDM3FIUPpqojlNcAZQmNa +Al6kSBg6hW/cnbw/nZzBh7h6YQjpdwt/cKt63dmXLGQehb+8dJahw3oS7AwaboMMPOhyRp/7SNVe +l+axofjk70YllJyJ22k4vuxcDlbHZVHlUIiIv0LVKz3l+bqeLrPK9HOSAgu+TGbrIP65y7WZf+a2 +E/rKS03Z7lNGBjvGTq2TWoF+bCpLagVFjPIhpDGQh2xlnJ2lYJU6Un/10asIbvPuW/mIPX64b24D +5EI= +-----END CERTIFICATE----- + +Hellenic Academic and Research Institutions RootCA 2011 +======================================================= +-----BEGIN CERTIFICATE----- +MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1IxRDBCBgNVBAoT +O0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9y +aXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25z +IFJvb3RDQSAyMDExMB4XDTExMTIwNjEzNDk1MloXDTMxMTIwMTEzNDk1MlowgZUxCzAJBgNVBAYT +AkdSMUQwQgYDVQQKEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25z +IENlcnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNo +IEluc3RpdHV0aW9ucyBSb290Q0EgMjAxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +AKlTAOMupvaO+mDYLZU++CwqVE7NuYRhlFhPjz2L5EPzdYmNUeTDN9KKiE15HrcS3UN4SoqS5tdI +1Q+kOilENbgH9mgdVc04UfCMJDGFr4PJfel3r+0ae50X+bOdOFAPplp5kYCvN66m0zH7tSYJnTxa +71HFK9+WXesyHgLacEnsbgzImjeN9/E2YEsmLIKe0HjzDQ9jpFEw4fkrJxIH2Oq9GGKYsFk3fb7u +8yBRQlqD75O6aRXxYp2fmTmCobd0LovUxQt7L/DICto9eQqakxylKHJzkUOap9FNhYS5qXSPFEDH +3N6sQWRstBmbAmNtJGSPRLIl6s5ddAxjMlyNh+UCAwEAAaOBiTCBhjAPBgNVHRMBAf8EBTADAQH/ +MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUppFC/RNhSiOeCKQp5dgTBCPuQSUwRwYDVR0eBEAwPqA8 +MAWCAy5ncjAFggMuZXUwBoIELmVkdTAGggQub3JnMAWBAy5ncjAFgQMuZXUwBoEELmVkdTAGgQQu +b3JnMA0GCSqGSIb3DQEBBQUAA4IBAQAf73lB4XtuP7KMhjdCSk4cNx6NZrokgclPEg8hwAOXhiVt +XdMiKahsog2p6z0GW5k6x8zDmjR/qw7IThzh+uTczQ2+vyT+bOdrwg3IBp5OjWEopmr95fZi6hg8 +TqBTnbI6nOulnJEWtk2C4AwFSKls9cz4y51JtPACpf1wA+2KIaWuE4ZJwzNzvoc7dIsXRSZMFpGD +/md9zU1jZ/rzAxKWeAaNsWftjj++n08C9bMJL/NMh98qy5V8AcysNnq/onN694/BtZqhFLKPM58N +7yLcZnuEvUUXBj08yrl3NI/K6s8/MT7jiOOASSXIl7WdmplNsDz4SgCbZN2fOUvRJ9e4 +-----END CERTIFICATE----- + +Actalis Authentication Root CA +============================== +-----BEGIN CERTIFICATE----- +MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCSVQxDjAM +BgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UE +AwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290IENBMB4XDTExMDkyMjExMjIwMloXDTMwMDky +MjExMjIwMlowazELMAkGA1UEBhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlz +IFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290 +IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp8bEpSmkLO/lGMWwUKNvUTufClrJ +wkg4CsIcoBh/kbWHuUA/3R1oHwiD1S0eiKD4j1aPbZkCkpAW1V8IbInX4ay8IMKx4INRimlNAJZa +by/ARH6jDuSRzVju3PvHHkVH3Se5CAGfpiEd9UEtL0z9KK3giq0itFZljoZUj5NDKd45RnijMCO6 +zfB9E1fAXdKDa0hMxKufgFpbOr3JpyI/gCczWw63igxdBzcIy2zSekciRDXFzMwujt0q7bd9Zg1f +YVEiVRvjRuPjPdA1YprbrxTIW6HMiRvhMCb8oJsfgadHHwTrozmSBp+Z07/T6k9QnBn+locePGX2 +oxgkg4YQ51Q+qDp2JE+BIcXjDwL4k5RHILv+1A7TaLndxHqEguNTVHnd25zS8gebLra8Pu2Fbe8l +EfKXGkJh90qX6IuxEAf6ZYGyojnP9zz/GPvG8VqLWeICrHuS0E4UT1lF9gxeKF+w6D9Fz8+vm2/7 +hNN3WpVvrJSEnu68wEqPSpP4RCHiMUVhUE4Q2OM1fEwZtN4Fv6MGn8i1zeQf1xcGDXqVdFUNaBr8 +EBtiZJ1t4JWgw5QHVw0U5r0F+7if5t+L4sbnfpb2U8WANFAoWPASUHEXMLrmeGO89LKtmyuy/uE5 +jF66CyCU3nuDuP/jVo23Eek7jPKxwV2dpAtMK9myGPW1n0sCAwEAAaNjMGEwHQYDVR0OBBYEFFLY +iDrIn3hm7YnzezhwlMkCAjbQMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUUtiIOsifeGbt +ifN7OHCUyQICNtAwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQALe3KHwGCmSUyI +WOYdiPcUZEim2FgKDk8TNd81HdTtBjHIgT5q1d07GjLukD0R0i70jsNjLiNmsGe+b7bAEzlgqqI0 +JZN1Ut6nna0Oh4lScWoWPBkdg/iaKWW+9D+a2fDzWochcYBNy+A4mz+7+uAwTc+G02UQGRjRlwKx +K3JCaKygvU5a2hi/a5iB0P2avl4VSM0RFbnAKVy06Ij3Pjaut2L9HmLecHgQHEhb2rykOLpn7VU+ +Xlff1ANATIGk0k9jpwlCCRT8AKnCgHNPLsBA2RF7SOp6AsDT6ygBJlh0wcBzIm2Tlf05fbsq4/aC +4yyXX04fkZT6/iyj2HYauE2yOE+b+h1IYHkm4vP9qdCa6HCPSXrW5b0KDtst842/6+OkfcvHlXHo +2qN8xcL4dJIEG4aspCJTQLas/kx2z/uUMsA1n3Y/buWQbqCmJqK4LL7RK4X9p2jIugErsWx0Hbhz +lefut8cl8ABMALJ+tguLHPPAUJ4lueAI3jZm/zel0btUZCzJJ7VLkn5l/9Mt4blOvH+kQSGQQXem +OR/qnuOf0GZvBeyqdn6/axag67XH/JJULysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9 +vwGYT7JZVEc+NHt4bVaTLnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg== +-----END CERTIFICATE----- + +Trustis FPS Root CA +=================== +-----BEGIN CERTIFICATE----- +MIIDZzCCAk+gAwIBAgIQGx+ttiD5JNM2a/fH8YygWTANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQG +EwJHQjEYMBYGA1UEChMPVHJ1c3RpcyBMaW1pdGVkMRwwGgYDVQQLExNUcnVzdGlzIEZQUyBSb290 +IENBMB4XDTAzMTIyMzEyMTQwNloXDTI0MDEyMTExMzY1NFowRTELMAkGA1UEBhMCR0IxGDAWBgNV +BAoTD1RydXN0aXMgTGltaXRlZDEcMBoGA1UECxMTVHJ1c3RpcyBGUFMgUm9vdCBDQTCCASIwDQYJ +KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQe547NdDfxIzNjpvto8A2mfRC6qc+gIMPpqdZh8mQ +RUN+AOqGeSoDvT03mYlmt+WKVoaTnGhLaASMk5MCPjDSNzoiYYkchU59j9WvezX2fihHiTHcDnlk +H5nSW7r+f2C/revnPDgpai/lkQtV/+xvWNUtyd5MZnGPDNcE2gfmHhjjvSkCqPoc4Vu5g6hBSLwa +cY3nYuUtsuvffM/bq1rKMfFMIvMFE/eC+XN5DL7XSxzA0RU8k0Fk0ea+IxciAIleH2ulrG6nS4zt +o3Lmr2NNL4XSFDWaLk6M6jKYKIahkQlBOrTh4/L68MkKokHdqeMDx4gVOxzUGpTXn2RZEm0CAwEA +AaNTMFEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBS6+nEleYtXQSUhhgtx67JkDoshZzAd +BgNVHQ4EFgQUuvpxJXmLV0ElIYYLceuyZA6LIWcwDQYJKoZIhvcNAQEFBQADggEBAH5Y//01GX2c +GE+esCu8jowU/yyg2kdbw++BLa8F6nRIW/M+TgfHbcWzk88iNVy2P3UnXwmWzaD+vkAMXBJV+JOC +yinpXj9WV4s4NvdFGkwozZ5BuO1WTISkQMi4sKUraXAEasP41BIy+Q7DsdwyhEQsb8tGD+pmQQ9P +8Vilpg0ND2HepZ5dfWWhPBfnqFVO76DH7cZEf1T1o+CP8HxVIo8ptoGj4W1OLBuAZ+ytIJ8MYmHV +l/9D7S3B2l0pKoU/rGXuhg8FjZBf3+6f9L/uHfuY5H+QK4R4EA5sSVPvFVtlRkpdr7r7OnIdzfYl +iB6XzCGcKQENZetX2fNXlrtIzYE= +-----END CERTIFICATE----- + +Buypass Class 2 Root CA +======================= +-----BEGIN CERTIFICATE----- +MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU +QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMiBSb290IENBMB4X +DTEwMTAyNjA4MzgwM1oXDTQwMTAyNjA4MzgwM1owTjELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1 +eXBhc3MgQVMtOTgzMTYzMzI3MSAwHgYDVQQDDBdCdXlwYXNzIENsYXNzIDIgUm9vdCBDQTCCAiIw +DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANfHXvfBB9R3+0Mh9PT1aeTuMgHbo4Yf5FkNuud1 +g1Lr6hxhFUi7HQfKjK6w3Jad6sNgkoaCKHOcVgb/S2TwDCo3SbXlzwx87vFKu3MwZfPVL4O2fuPn +9Z6rYPnT8Z2SdIrkHJasW4DptfQxh6NR/Md+oW+OU3fUl8FVM5I+GC911K2GScuVr1QGbNgGE41b +/+EmGVnAJLqBcXmQRFBoJJRfuLMR8SlBYaNByyM21cHxMlAQTn/0hpPshNOOvEu/XAFOBz3cFIqU +CqTqc/sLUegTBxj6DvEr0VQVfTzh97QZQmdiXnfgolXsttlpF9U6r0TtSsWe5HonfOV116rLJeff +awrbD02TTqigzXsu8lkBarcNuAeBfos4GzjmCleZPe4h6KP1DBbdi+w0jpwqHAAVF41og9JwnxgI +zRFo1clrUs3ERo/ctfPYV3Me6ZQ5BL/T3jjetFPsaRyifsSP5BtwrfKi+fv3FmRmaZ9JUaLiFRhn +Bkp/1Wy1TbMz4GHrXb7pmA8y1x1LPC5aAVKRCfLf6o3YBkBjqhHk/sM3nhRSP/TizPJhk9H9Z2vX +Uq6/aKtAQ6BXNVN48FP4YUIHZMbXb5tMOA1jrGKvNouicwoN9SG9dKpN6nIDSdvHXx1iY8f93ZHs +M+71bbRuMGjeyNYmsHVee7QHIJihdjK4TWxPAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD +VR0OBBYEFMmAd+BikoL1RpzzuvdMw964o605MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsF +AAOCAgEAU18h9bqwOlI5LJKwbADJ784g7wbylp7ppHR/ehb8t/W2+xUbP6umwHJdELFx7rxP462s +A20ucS6vxOOto70MEae0/0qyexAQH6dXQbLArvQsWdZHEIjzIVEpMMpghq9Gqx3tOluwlN5E40EI +osHsHdb9T7bWR9AUC8rmyrV7d35BH16Dx7aMOZawP5aBQW9gkOLo+fsicdl9sz1Gv7SEr5AcD48S +aq/v7h56rgJKihcrdv6sVIkkLE8/trKnToyokZf7KcZ7XC25y2a2t6hbElGFtQl+Ynhw/qlqYLYd +DnkM/crqJIByw5c/8nerQyIKx+u2DISCLIBrQYoIwOula9+ZEsuK1V6ADJHgJgg2SMX6OBE1/yWD +LfJ6v9r9jv6ly0UsH8SIU653DtmadsWOLB2jutXsMq7Aqqz30XpN69QH4kj3Io6wpJ9qzo6ysmD0 +oyLQI+uUWnpp3Q+/QFesa1lQ2aOZ4W7+jQF5JyMV3pKdewlNWudLSDBaGOYKbeaP4NK75t98biGC +wWg5TbSYWGZizEqQXsP6JwSxeRV0mcy+rSDeJmAc61ZRpqPq5KM/p/9h3PFaTWwyI0PurKju7koS +CTxdccK+efrCh2gdC/1cacwG0Jp9VJkqyTkaGa9LKkPzY11aWOIv4x3kqdbQCtCev9eBCfHJxyYN +rJgWVqA= +-----END CERTIFICATE----- + +Buypass Class 3 Root CA +======================= +-----BEGIN CERTIFICATE----- +MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU +QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMyBSb290IENBMB4X +DTEwMTAyNjA4Mjg1OFoXDTQwMTAyNjA4Mjg1OFowTjELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1 +eXBhc3MgQVMtOTgzMTYzMzI3MSAwHgYDVQQDDBdCdXlwYXNzIENsYXNzIDMgUm9vdCBDQTCCAiIw +DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKXaCpUWUOOV8l6ddjEGMnqb8RB2uACatVI2zSRH +sJ8YZLya9vrVediQYkwiL944PdbgqOkcLNt4EemOaFEVcsfzM4fkoF0LXOBXByow9c3EN3coTRiR +5r/VUv1xLXA+58bEiuPwKAv0dpihi4dVsjoT/Lc+JzeOIuOoTyrvYLs9tznDDgFHmV0ST9tD+leh +7fmdvhFHJlsTmKtdFoqwNxxXnUX/iJY2v7vKB3tvh2PX0DJq1l1sDPGzbjniazEuOQAnFN44wOwZ +ZoYS6J1yFhNkUsepNxz9gjDthBgd9K5c/3ATAOux9TN6S9ZV+AWNS2mw9bMoNlwUxFFzTWsL8TQH +2xc519woe2v1n/MuwU8XKhDzzMro6/1rqy6any2CbgTUUgGTLT2G/H783+9CHaZr77kgxve9oKeV +/afmiSTYzIw0bOIjL9kSGiG5VZFvC5F5GQytQIgLcOJ60g7YaEi7ghM5EFjp2CoHxhLbWNvSO1UQ +RwUVZ2J+GGOmRj8JDlQyXr8NYnon74Do29lLBlo3WiXQCBJ31G8JUJc9yB3D34xFMFbG02SrZvPA +Xpacw8Tvw3xrizp5f7NJzz3iiZ+gMEuFuZyUJHmPfWupRWgPK9Dx2hzLabjKSWJtyNBjYt1gD1iq +j6G8BaVmos8bdrKEZLFMOVLAMLrwjEsCsLa3AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD +VR0OBBYEFEe4zf/lb+74suwvTg75JbCOPGvDMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsF +AAOCAgEAACAjQTUEkMJAYmDv4jVM1z+s4jSQuKFvdvoWFqRINyzpkMLyPPgKn9iB5btb2iUspKdV +cSQy9sgL8rxq+JOssgfCX5/bzMiKqr5qb+FJEMwx14C7u8jYog5kV+qi9cKpMRXSIGrs/CIBKM+G +uIAeqcwRpTzyFrNHnfzSgCHEy9BHcEGhyoMZCCxt8l13nIoUE9Q2HJLw5QY33KbmkJs4j1xrG0aG +Q0JfPgEHU1RdZX33inOhmlRaHylDFCfChQ+1iHsaO5S3HWCntZznKWlXWpuTekMwGwPXYshApqr8 +ZORK15FTAaggiG6cX0S5y2CBNOxv033aSF/rtJC8LakcC6wc1aJoIIAE1vyxjy+7SjENSoYc6+I2 +KSb12tjE8nVhz36udmNKekBlk4f4HoCMhuWG1o8O/FMsYOgWYRqiPkN7zTlgVGr18okmAWiDSKIz +6MkEkbIRNBE+6tBDGR8Dk5AM/1E9V/RBbuHLoL7ryWPNbczk+DaqaJ3tvV2XcEQNtg413OEMXbug +UZTLfhbrES+jkkXITHHZvMmZUldGL1DPvTVp9D0VzgalLA8+9oG6lLvDu79leNKGef9JOxqDDPDe +eOzI8k1MGt6CKfjBWtrt7uYnXuhF0J0cUahoq0Tj0Itq4/g7u9xN12TyUb7mqqta6THuBrxzvxNi +Cp/HuZc= +-----END CERTIFICATE----- + +T-TeleSec GlobalRoot Class 3 +============================ +-----BEGIN CERTIFICATE----- +MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoM +IlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBU +cnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwHhcNMDgx +MDAxMTAyOTU2WhcNMzMxMDAxMjM1OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lz +dGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBD +ZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwggEiMA0GCSqGSIb3 +DQEBAQUAA4IBDwAwggEKAoIBAQC9dZPwYiJvJK7genasfb3ZJNW4t/zN8ELg63iIVl6bmlQdTQyK +9tPPcPRStdiTBONGhnFBSivwKixVA9ZIw+A5OO3yXDw/RLyTPWGrTs0NvvAgJ1gORH8EGoel15YU +NpDQSXuhdfsaa3Ox+M6pCSzyU9XDFES4hqX2iys52qMzVNn6chr3IhUciJFrf2blw2qAsCTz34ZF +iP0Zf3WHHx+xGwpzJFu5ZeAsVMhg02YXP+HMVDNzkQI6pn97djmiH5a2OK61yJN0HZ65tOVgnS9W +0eDrXltMEnAMbEQgqxHY9Bn20pxSN+f6tsIxO0rUFJmtxxr1XV/6B7h8DR/Wgx6zAgMBAAGjQjBA +MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS1A/d2O2GCahKqGFPr +AyGUv/7OyjANBgkqhkiG9w0BAQsFAAOCAQEAVj3vlNW92nOyWL6ukK2YJ5f+AbGwUgC4TeQbIXQb +fsDuXmkqJa9c1h3a0nnJ85cp4IaH3gRZD/FZ1GSFS5mvJQQeyUapl96Cshtwn5z2r3Ex3XsFpSzT +ucpH9sry9uetuUg/vBa3wW306gmv7PO15wWeph6KU1HWk4HMdJP2udqmJQV0eVp+QD6CSyYRMG7h +P0HHRwA11fXT91Q+gT3aSWqas+8QPebrb9HIIkfLzM8BMZLZGOMivgkeGj5asuRrDFR6fUNOuIml +e9eiPZaGzPImNC1qkp2aGtAw4l1OBLBfiyB+d8E9lYLRRpo7PHi4b6HQDWSieB4pTpPDpFQUWw== +-----END CERTIFICATE----- + +EE Certification Centre Root CA +=============================== +-----BEGIN CERTIFICATE----- +MIIEAzCCAuugAwIBAgIQVID5oHPtPwBMyonY43HmSjANBgkqhkiG9w0BAQUFADB1MQswCQYDVQQG +EwJFRTEiMCAGA1UECgwZQVMgU2VydGlmaXRzZWVyaW1pc2tlc2t1czEoMCYGA1UEAwwfRUUgQ2Vy +dGlmaWNhdGlvbiBDZW50cmUgUm9vdCBDQTEYMBYGCSqGSIb3DQEJARYJcGtpQHNrLmVlMCIYDzIw +MTAxMDMwMTAxMDMwWhgPMjAzMDEyMTcyMzU5NTlaMHUxCzAJBgNVBAYTAkVFMSIwIAYDVQQKDBlB +UyBTZXJ0aWZpdHNlZXJpbWlza2Vza3VzMSgwJgYDVQQDDB9FRSBDZXJ0aWZpY2F0aW9uIENlbnRy +ZSBSb290IENBMRgwFgYJKoZIhvcNAQkBFglwa2lAc2suZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQDIIMDs4MVLqwd4lfNE7vsLDP90jmG7sWLqI9iroWUyeuuOF0+W2Ap7kaJjbMeM +TC55v6kF/GlclY1i+blw7cNRfdCT5mzrMEvhvH2/UpvObntl8jixwKIy72KyaOBhU8E2lf/slLo2 +rpwcpzIP5Xy0xm90/XsY6KxX7QYgSzIwWFv9zajmofxwvI6Sc9uXp3whrj3B9UiHbCe9nyV0gVWw +93X2PaRka9ZP585ArQ/dMtO8ihJTmMmJ+xAdTX7Nfh9WDSFwhfYggx/2uh8Ej+p3iDXE/+pOoYtN +P2MbRMNE1CV2yreN1x5KZmTNXMWcg+HCCIia7E6j8T4cLNlsHaFLAgMBAAGjgYowgYcwDwYDVR0T +AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBLyWj7qVhy/zQas8fElyalL1BSZ +MEUGA1UdJQQ+MDwGCCsGAQUFBwMCBggrBgEFBQcDAQYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEF +BQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQEFBQADggEBAHv25MANqhlHt01Xo/6tu7Fq1Q+e2+Rj +xY6hUFaTlrg4wCQiZrxTFGGVv9DHKpY5P30osxBAIWrEr7BSdxjhlthWXePdNl4dp1BUoMUq5KqM +lIpPnTX/dqQGE5Gion0ARD9V04I8GtVbvFZMIi5GQ4okQC3zErg7cBqklrkar4dBGmoYDQZPxz5u +uSlNDUmJEYcyW+ZLBMjkXOZ0c5RdFpgTlf7727FE5TpwrDdr5rMzcijJs1eg9gIWiAYLtqZLICjU +3j2LrTcFU3T+bsy8QxdxXvnFzBqpYe73dgzzcvRyrc9yAjYHR8/vGVCJYMzpJJUPwssd8m92kMfM +dcGWxZ0= +-----END CERTIFICATE----- + +D-TRUST Root Class 3 CA 2 2009 +============================== +-----BEGIN CERTIFICATE----- +MIIEMzCCAxugAwIBAgIDCYPzMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAkRFMRUwEwYDVQQK +DAxELVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgMjAwOTAe +Fw0wOTExMDUwODM1NThaFw0yOTExMDUwODM1NThaME0xCzAJBgNVBAYTAkRFMRUwEwYDVQQKDAxE +LVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgMjAwOTCCASIw +DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANOySs96R+91myP6Oi/WUEWJNTrGa9v+2wBoqOAD +ER03UAifTUpolDWzU9GUY6cgVq/eUXjsKj3zSEhQPgrfRlWLJ23DEE0NkVJD2IfgXU42tSHKXzlA +BF9bfsyjxiupQB7ZNoTWSPOSHjRGICTBpFGOShrvUD9pXRl/RcPHAY9RySPocq60vFYJfxLLHLGv +KZAKyVXMD9O0Gu1HNVpK7ZxzBCHQqr0ME7UAyiZsxGsMlFqVlNpQmvH/pStmMaTJOKDfHR+4CS7z +p+hnUquVH+BGPtikw8paxTGA6Eian5Rp/hnd2HN8gcqW3o7tszIFZYQ05ub9VxC1X3a/L7AQDcUC +AwEAAaOCARowggEWMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFP3aFMSfMN4hvR5COfyrYyNJ +4PGEMA4GA1UdDwEB/wQEAwIBBjCB0wYDVR0fBIHLMIHIMIGAoH6gfIZ6bGRhcDovL2RpcmVjdG9y +eS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwUm9vdCUyMENsYXNzJTIwMyUyMENBJTIwMiUyMDIw +MDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwQ6BBoD+G +PWh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfcm9vdF9jbGFzc18zX2NhXzJfMjAw +OS5jcmwwDQYJKoZIhvcNAQELBQADggEBAH+X2zDI36ScfSF6gHDOFBJpiBSVYEQBrLLpME+bUMJm +2H6NMLVwMeniacfzcNsgFYbQDfC+rAF1hM5+n02/t2A7nPPKHeJeaNijnZflQGDSNiH+0LS4F9p0 +o3/U37CYAqxva2ssJSRyoWXuJVrl5jLn8t+rSfrzkGkj2wTZ51xY/GXUl77M/C4KzCUqNQT4YJEV +dT1B/yMfGchs64JTBKbkTCJNjYy6zltz7GRUUG3RnFX7acM2w4y8PIWmawomDeCTmGCufsYkl4ph +X5GOZpIJhzbNi5stPvZR1FDUWSi9g/LMKHtThm3YJohw1+qRzT65ysCQblrGXnRl11z+o+I= +-----END CERTIFICATE----- + +D-TRUST Root Class 3 CA 2 EV 2009 +================================= +-----BEGIN CERTIFICATE----- +MIIEQzCCAyugAwIBAgIDCYP0MA0GCSqGSIb3DQEBCwUAMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQK +DAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAw +OTAeFw0wOTExMDUwODUwNDZaFw0yOTExMDUwODUwNDZaMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQK +DAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAw +OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnxhDRwui+3MKCOvXwEz75ivJn9gpfS +egpnljgJ9hBOlSJzmY3aFS3nBfwZcyK3jpgAvDw9rKFs+9Z5JUut8Mxk2og+KbgPCdM03TP1YtHh +zRnp7hhPTFiu4h7WDFsVWtg6uMQYZB7jM7K1iXdODL/ZlGsTl28So/6ZqQTMFexgaDbtCHu39b+T +7WYxg4zGcTSHThfqr4uRjRxWQa4iN1438h3Z0S0NL2lRp75mpoo6Kr3HGrHhFPC+Oh25z1uxav60 +sUYgovseO3Dvk5h9jHOW8sXvhXCtKSb8HgQ+HKDYD8tSg2J87otTlZCpV6LqYQXY+U3EJ/pure35 +11H3a6UCAwEAAaOCASQwggEgMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNOUikxiEyoZLsyv +cop9NteaHNxnMA4GA1UdDwEB/wQEAwIBBjCB3QYDVR0fBIHVMIHSMIGHoIGEoIGBhn9sZGFwOi8v +ZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBSb290JTIwQ2xhc3MlMjAzJTIwQ0El +MjAyJTIwRVYlMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRp +b25saXN0MEagRKBChkBodHRwOi8vd3d3LmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3Jvb3RfY2xh +c3NfM19jYV8yX2V2XzIwMDkuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQA07XtaPKSUiO8aEXUHL7P+ +PPoeUSbrh/Yp3uDx1MYkCenBz1UbtDDZzhr+BlGmFaQt77JLvyAoJUnRpjZ3NOhk31KxEcdzes05 +nsKtjHEh8lprr988TlWvsoRlFIm5d8sqMb7Po23Pb0iUMkZv53GMoKaEGTcH8gNFCSuGdXzfX2lX +ANtu2KZyIktQ1HWYVt+3GP9DQ1CuekR78HlR10M9p9OB0/DJT7naxpeG0ILD5EJt/rDiZE4OJudA +NCa1CInXCGNjOCd1HjPqbqjdn5lPdE2BiYBL3ZqXKVwvvoFBuYz/6n1gBp7N1z3TLqMVvKjmJuVv +w9y4AyHqnxbxLFS1 +-----END CERTIFICATE----- + +CA Disig Root R2 +================ +-----BEGIN CERTIFICATE----- +MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNVBAYTAlNLMRMw +EQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMuMRkwFwYDVQQDExBDQSBEaXNp +ZyBSb290IFIyMB4XDTEyMDcxOTA5MTUzMFoXDTQyMDcxOTA5MTUzMFowUjELMAkGA1UEBhMCU0sx +EzARBgNVBAcTCkJyYXRpc2xhdmExEzARBgNVBAoTCkRpc2lnIGEucy4xGTAXBgNVBAMTEENBIERp +c2lnIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCio8QACdaFXS1tFPbC +w3OeNcJxVX6B+6tGUODBfEl45qt5WDza/3wcn9iXAng+a0EE6UG9vgMsRfYvZNSrXaNHPWSb6Wia +xswbP7q+sos0Ai6YVRn8jG+qX9pMzk0DIaPY0jSTVpbLTAwAFjxfGs3Ix2ymrdMxp7zo5eFm1tL7 +A7RBZckQrg4FY8aAamkw/dLukO8NJ9+flXP04SXabBbeQTg06ov80egEFGEtQX6sx3dOy1FU+16S +GBsEWmjGycT6txOgmLcRK7fWV8x8nhfRyyX+hk4kLlYMeE2eARKmK6cBZW58Yh2EhN/qwGu1pSqV +g8NTEQxzHQuyRpDRQjrOQG6Vrf/GlK1ul4SOfW+eioANSW1z4nuSHsPzwfPrLgVv2RvPN3YEyLRa +5Beny912H9AZdugsBbPWnDTYltxhh5EF5EQIM8HauQhl1K6yNg3ruji6DOWbnuuNZt2Zz9aJQfYE +koopKW1rOhzndX0CcQ7zwOe9yxndnWCywmZgtrEE7snmhrmaZkCo5xHtgUUDi/ZnWejBBhG93c+A +Ak9lQHhcR1DIm+YfgXvkRKhbhZri3lrVx/k6RGZL5DJUfORsnLMOPReisjQS1n6yqEm70XooQL6i +Fh/f5DcfEXP7kAplQ6INfPgGAVUzfbANuPT1rqVCV3w2EYx7XsQDnYx5nQIDAQABo0IwQDAPBgNV +HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUtZn4r7CU9eMg1gqtzk5WpC5u +Qu0wDQYJKoZIhvcNAQELBQADggIBACYGXnDnZTPIgm7ZnBc6G3pmsgH2eDtpXi/q/075KMOYKmFM +tCQSin1tERT3nLXK5ryeJ45MGcipvXrA1zYObYVybqjGom32+nNjf7xueQgcnYqfGopTpti72TVV +sRHFqQOzVju5hJMiXn7B9hJSi+osZ7z+Nkz1uM/Rs0mSO9MpDpkblvdhuDvEK7Z4bLQjb/D907Je +dR+Zlais9trhxTF7+9FGs9K8Z7RiVLoJ92Owk6Ka+elSLotgEqv89WBW7xBci8QaQtyDW2QOy7W8 +1k/BfDxujRNt+3vrMNDcTa/F1balTFtxyegxvug4BkihGuLq0t4SOVga/4AOgnXmt8kHbA7v/zjx +mHHEt38OFdAlab0inSvtBfZGR6ztwPDUO+Ls7pZbkBNOHlY667DvlruWIxG68kOGdGSVyCh13x01 +utI3gzhTODY7z2zp+WsO0PsE6E9312UBeIYMej4hYvF/Y3EMyZ9E26gnonW+boE+18DrG5gPcFw0 +sorMwIUY6256s/daoQe/qUKS82Ail+QUoQebTnbAjn39pCXHR+3/H3OszMOl6W8KjptlwlCFtaOg +UxLMVYdh84GuEEZhvUQhuMI9dM9+JDX6HAcOmz0iyu8xL4ysEr3vQCj8KWefshNPZiTEUxnpHikV +7+ZtsH8tZ/3zbBt1RqPlShfppNcL +-----END CERTIFICATE----- + +ACCVRAIZ1 +========= +-----BEGIN CERTIFICATE----- +MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UEAwwJQUNDVlJB +SVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQswCQYDVQQGEwJFUzAeFw0xMTA1 +MDUwOTM3MzdaFw0zMDEyMzEwOTM3MzdaMEIxEjAQBgNVBAMMCUFDQ1ZSQUlaMTEQMA4GA1UECwwH +UEtJQUNDVjENMAsGA1UECgwEQUNDVjELMAkGA1UEBhMCRVMwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQCbqau/YUqXry+XZpp0X9DZlv3P4uRm7x8fRzPCRKPfmt4ftVTdFXxpNRFvu8gM +jmoYHtiP2Ra8EEg2XPBjs5BaXCQ316PWywlxufEBcoSwfdtNgM3802/J+Nq2DoLSRYWoG2ioPej0 +RGy9ocLLA76MPhMAhN9KSMDjIgro6TenGEyxCQ0jVn8ETdkXhBilyNpAlHPrzg5XPAOBOp0KoVdD +aaxXbXmQeOW1tDvYvEyNKKGno6e6Ak4l0Squ7a4DIrhrIA8wKFSVf+DuzgpmndFALW4ir50awQUZ +0m/A8p/4e7MCQvtQqR0tkw8jq8bBD5L/0KIV9VMJcRz/RROE5iZe+OCIHAr8Fraocwa48GOEAqDG +WuzndN9wrqODJerWx5eHk6fGioozl2A3ED6XPm4pFdahD9GILBKfb6qkxkLrQaLjlUPTAYVtjrs7 +8yM2x/474KElB0iryYl0/wiPgL/AlmXz7uxLaL2diMMxs0Dx6M/2OLuc5NF/1OVYm3z61PMOm3WR +5LpSLhl+0fXNWhn8ugb2+1KoS5kE3fj5tItQo05iifCHJPqDQsGH+tUtKSpacXpkatcnYGMN285J +9Y0fkIkyF/hzQ7jSWpOGYdbhdQrqeWZ2iE9x6wQl1gpaepPluUsXQA+xtrn13k/c4LOsOxFwYIRK +Q26ZIMApcQrAZQIDAQABo4ICyzCCAscwfQYIKwYBBQUHAQEEcTBvMEwGCCsGAQUFBzAChkBodHRw +Oi8vd3d3LmFjY3YuZXMvZmlsZWFkbWluL0FyY2hpdm9zL2NlcnRpZmljYWRvcy9yYWl6YWNjdjEu +Y3J0MB8GCCsGAQUFBzABhhNodHRwOi8vb2NzcC5hY2N2LmVzMB0GA1UdDgQWBBTSh7Tj3zcnk1X2 +VuqB5TbMjB4/vTAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNKHtOPfNyeTVfZW6oHlNsyM +Hj+9MIIBcwYDVR0gBIIBajCCAWYwggFiBgRVHSAAMIIBWDCCASIGCCsGAQUFBwICMIIBFB6CARAA +QQB1AHQAbwByAGkAZABhAGQAIABkAGUAIABDAGUAcgB0AGkAZgBpAGMAYQBjAGkA8wBuACAAUgBh +AO0AegAgAGQAZQAgAGwAYQAgAEEAQwBDAFYAIAAoAEEAZwBlAG4AYwBpAGEAIABkAGUAIABUAGUA +YwBuAG8AbABvAGcA7QBhACAAeQAgAEMAZQByAHQAaQBmAGkAYwBhAGMAaQDzAG4AIABFAGwAZQBj +AHQAcgDzAG4AaQBjAGEALAAgAEMASQBGACAAUQA0ADYAMAAxADEANQA2AEUAKQAuACAAQwBQAFMA +IABlAG4AIABoAHQAdABwADoALwAvAHcAdwB3AC4AYQBjAGMAdgAuAGUAczAwBggrBgEFBQcCARYk +aHR0cDovL3d3dy5hY2N2LmVzL2xlZ2lzbGFjaW9uX2MuaHRtMFUGA1UdHwROMEwwSqBIoEaGRGh0 +dHA6Ly93d3cuYWNjdi5lcy9maWxlYWRtaW4vQXJjaGl2b3MvY2VydGlmaWNhZG9zL3JhaXphY2N2 +MV9kZXIuY3JsMA4GA1UdDwEB/wQEAwIBBjAXBgNVHREEEDAOgQxhY2N2QGFjY3YuZXMwDQYJKoZI +hvcNAQEFBQADggIBAJcxAp/n/UNnSEQU5CmH7UwoZtCPNdpNYbdKl02125DgBS4OxnnQ8pdpD70E +R9m+27Up2pvZrqmZ1dM8MJP1jaGo/AaNRPTKFpV8M9xii6g3+CfYCS0b78gUJyCpZET/LtZ1qmxN +YEAZSUNUY9rizLpm5U9EelvZaoErQNV/+QEnWCzI7UiRfD+mAM/EKXMRNt6GGT6d7hmKG9Ww7Y49 +nCrADdg9ZuM8Db3VlFzi4qc1GwQA9j9ajepDvV+JHanBsMyZ4k0ACtrJJ1vnE5Bc5PUzolVt3OAJ +TS+xJlsndQAJxGJ3KQhfnlmstn6tn1QwIgPBHnFk/vk4CpYY3QIUrCPLBhwepH2NDd4nQeit2hW3 +sCPdK6jT2iWH7ehVRE2I9DZ+hJp4rPcOVkkO1jMl1oRQQmwgEh0q1b688nCBpHBgvgW1m54ERL5h +I6zppSSMEYCUWqKiuUnSwdzRp+0xESyeGabu4VXhwOrPDYTkF7eifKXeVSUG7szAh1xA2syVP1Xg +Nce4hL60Xc16gwFy7ofmXx2utYXGJt/mwZrpHgJHnyqobalbz+xFd3+YJ5oyXSrjhO7FmGYvliAd +3djDJ9ew+f7Zfc3Qn48LFFhRny+Lwzgt3uiP1o2HpPVWQxaZLPSkVrQ0uGE3ycJYgBugl6H8WY3p +EfbRD0tVNEYqi4Y7 +-----END CERTIFICATE----- + +TWCA Global Root CA +=================== +-----BEGIN CERTIFICATE----- +MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcxEjAQBgNVBAoT +CVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMTVFdDQSBHbG9iYWwgUm9vdCBD +QTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5NTlaMFExCzAJBgNVBAYTAlRXMRIwEAYDVQQK +EwlUQUlXQU4tQ0ExEDAOBgNVBAsTB1Jvb3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3Qg +Q0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCwBdvI64zEbooh745NnHEKH1Jw7W2C +nJfF10xORUnLQEK1EjRsGcJ0pDFfhQKX7EMzClPSnIyOt7h52yvVavKOZsTuKwEHktSz0ALfUPZV +r2YOy+BHYC8rMjk1Ujoog/h7FsYYuGLWRyWRzvAZEk2tY/XTP3VfKfChMBwqoJimFb3u/Rk28OKR +Q4/6ytYQJ0lM793B8YVwm8rqqFpD/G2Gb3PpN0Wp8DbHzIh1HrtsBv+baz4X7GGqcXzGHaL3SekV +tTzWoWH1EfcFbx39Eb7QMAfCKbAJTibc46KokWofwpFFiFzlmLhxpRUZyXx1EcxwdE8tmx2RRP1W +KKD+u4ZqyPpcC1jcxkt2yKsi2XMPpfRaAok/T54igu6idFMqPVMnaR1sjjIsZAAmY2E2TqNGtz99 +sy2sbZCilaLOz9qC5wc0GZbpuCGqKX6mOL6OKUohZnkfs8O1CWfe1tQHRvMq2uYiN2DLgbYPoA/p +yJV/v1WRBXrPPRXAb94JlAGD1zQbzECl8LibZ9WYkTunhHiVJqRaCPgrdLQABDzfuBSO6N+pjWxn +kjMdwLfS7JLIvgm/LCkFbwJrnu+8vyq8W8BQj0FwcYeyTbcEqYSjMq+u7msXi7Kx/mzhkIyIqJdI +zshNy/MGz19qCkKxHh53L46g5pIOBvwFItIm4TFRfTLcDwIDAQABoyMwITAOBgNVHQ8BAf8EBAMC +AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAXzSBdu+WHdXltdkCY4QWwa6g +cFGn90xHNcgL1yg9iXHZqjNB6hQbbCEAwGxCGX6faVsgQt+i0trEfJdLjbDorMjupWkEmQqSpqsn +LhpNgb+E1HAerUf+/UqdM+DyucRFCCEK2mlpc3INvjT+lIutwx4116KD7+U4x6WFH6vPNOw/KP4M +8VeGTslV9xzU2KV9Bnpv1d8Q34FOIWWxtuEXeZVFBs5fzNxGiWNoRI2T9GRwoD2dKAXDOXC4Ynsg +/eTb6QihuJ49CcdP+yz4k3ZB3lLg4VfSnQO8d57+nile98FRYB/e2guyLXW3Q0iT5/Z5xoRdgFlg +lPx4mI88k1HtQJAH32RjJMtOcQWh15QaiDLxInQirqWm2BJpTGCjAu4r7NRjkgtevi92a6O2JryP +A9gK8kxkRr05YuWW6zRjESjMlfGt7+/cgFhI6Uu46mWs6fyAtbXIRfmswZ/ZuepiiI7E8UuDEq3m +i4TWnsLrgxifarsbJGAzcMzs9zLzXNl5fe+epP7JI8Mk7hWSsT2RTyaGvWZzJBPqpK5jwa19hAM8 +EHiGG3njxPPyBJUgriOCxLM6AGK/5jYk4Ve6xx6QddVfP5VhK8E7zeWzaGHQRiapIVJpLesux+t3 +zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmyKwbQBM0= +-----END CERTIFICATE----- + +TeliaSonera Root CA v1 +====================== +-----BEGIN CERTIFICATE----- +MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAwNzEUMBIGA1UE +CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMDcxMDE4 +MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwW +VGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+ +6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA +3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75Ljo1k +B1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJjmhn +Xb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxH +oLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3 +F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJ +oWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4pgd7 +gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTwEhDc +TwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVNAgMB +AAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qW +DNXr+nuqF+gTEjANBgkqhkiG9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNm +zqjMDfz1mgbldxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx +0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1TjTQpgcmLNkQfW +pb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBedY2gea+zDTYa4EzAvXUYNR0PV +G6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpc +c41teyWRyu5FrgZLAMzTsVlQ2jqIOylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOT +JsjrDNYmiLbAJM+7vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2 +qReWt88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcnHL/EVlP6 +Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVxSK236thZiNSQvxaz2ems +WWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY= +-----END CERTIFICATE----- + +E-Tugra Certification Authority +=============================== +-----BEGIN CERTIFICATE----- +MIIGSzCCBDOgAwIBAgIIamg+nFGby1MwDQYJKoZIhvcNAQELBQAwgbIxCzAJBgNVBAYTAlRSMQ8w +DQYDVQQHDAZBbmthcmExQDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamls +ZXJpIHZlIEhpem1ldGxlcmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBN +ZXJrZXppMSgwJgYDVQQDDB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEzMDMw +NTEyMDk0OFoXDTIzMDMwMzEyMDk0OFowgbIxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHDAZBbmthcmEx +QDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhpem1ldGxl +cmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBNZXJrZXppMSgwJgYDVQQD +DB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEA4vU/kwVRHoViVF56C/UYB4Oufq9899SKa6VjQzm5S/fDxmSJPZQuVIBSOTkHS0vd +hQd2h8y/L5VMzH2nPbxHD5hw+IyFHnSOkm0bQNGZDbt1bsipa5rAhDGvykPL6ys06I+XawGb1Q5K +CKpbknSFQ9OArqGIW66z6l7LFpp3RMih9lRozt6Plyu6W0ACDGQXwLWTzeHxE2bODHnv0ZEoq1+g +ElIwcxmOj+GMB6LDu0rw6h8VqO4lzKRG+Bsi77MOQ7osJLjFLFzUHPhdZL3Dk14opz8n8Y4e0ypQ +BaNV2cvnOVPAmJ6MVGKLJrD3fY185MaeZkJVgkfnsliNZvcHfC425lAcP9tDJMW/hkd5s3kc91r0 +E+xs+D/iWR+V7kI+ua2oMoVJl0b+SzGPWsutdEcf6ZG33ygEIqDUD13ieU/qbIWGvaimzuT6w+Gz +rt48Ue7LE3wBf4QOXVGUnhMMti6lTPk5cDZvlsouDERVxcr6XQKj39ZkjFqzAQqptQpHF//vkUAq +jqFGOjGY5RH8zLtJVor8udBhmm9lbObDyz51Sf6Pp+KJxWfXnUYTTjF2OySznhFlhqt/7x3U+Lzn +rFpct1pHXFXOVbQicVtbC/DP3KBhZOqp12gKY6fgDT+gr9Oq0n7vUaDmUStVkhUXU8u3Zg5mTPj5 +dUyQ5xJwx0UCAwEAAaNjMGEwHQYDVR0OBBYEFC7j27JJ0JxUeVz6Jyr+zE7S6E5UMA8GA1UdEwEB +/wQFMAMBAf8wHwYDVR0jBBgwFoAULuPbsknQnFR5XPonKv7MTtLoTlQwDgYDVR0PAQH/BAQDAgEG +MA0GCSqGSIb3DQEBCwUAA4ICAQAFNzr0TbdF4kV1JI+2d1LoHNgQk2Xz8lkGpD4eKexd0dCrfOAK +kEh47U6YA5n+KGCRHTAduGN8qOY1tfrTYXbm1gdLymmasoR6d5NFFxWfJNCYExL/u6Au/U5Mh/jO +XKqYGwXgAEZKgoClM4so3O0409/lPun++1ndYYRP0lSWE2ETPo+Aab6TR7U1Q9Jauz1c77NCR807 +VRMGsAnb/WP2OogKmW9+4c4bU2pEZiNRCHu8W1Ki/QY3OEBhj0qWuJA3+GbHeJAAFS6LrVE1Uweo +a2iu+U48BybNCAVwzDk/dr2l02cmAYamU9JgO3xDf1WKvJUawSg5TB9D0pH0clmKuVb8P7Sd2nCc +dlqMQ1DujjByTd//SffGqWfZbawCEeI6FiWnWAjLb1NBnEg4R2gz0dfHj9R0IdTDBZB6/86WiLEV +KV0jq9BgoRJP3vQXzTLlyb/IQ639Lo7xr+L0mPoSHyDYwKcMhcWQ9DstliaxLL5Mq+ux0orJ23gT +Dx4JnW2PAJ8C2sH6H3p6CcRK5ogql5+Ji/03X186zjhZhkuvcQu02PJwT58yE+Owp1fl2tpDy4Q0 +8ijE6m30Ku/Ba3ba+367hTzSU8JNvnHhRdH9I2cNE3X7z2VnIp2usAnRCf8dNL/+I5c30jn6PQ0G +C7TbO6Orb1wdtn7os4I07QZcJA== +-----END CERTIFICATE----- + +T-TeleSec GlobalRoot Class 2 +============================ +-----BEGIN CERTIFICATE----- +MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoM +IlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBU +cnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwHhcNMDgx +MDAxMTA0MDE0WhcNMzMxMDAxMjM1OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lz +dGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBD +ZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwggEiMA0GCSqGSIb3 +DQEBAQUAA4IBDwAwggEKAoIBAQCqX9obX+hzkeXaXPSi5kfl82hVYAUdAqSzm1nzHoqvNK38DcLZ +SBnuaY/JIPwhqgcZ7bBcrGXHX+0CfHt8LRvWurmAwhiCFoT6ZrAIxlQjgeTNuUk/9k9uN0goOA/F +vudocP05l03Sx5iRUKrERLMjfTlH6VJi1hKTXrcxlkIF+3anHqP1wvzpesVsqXFP6st4vGCvx970 +2cu+fjOlbpSD8DT6IavqjnKgP6TeMFvvhk1qlVtDRKgQFRzlAVfFmPHmBiiRqiDFt1MmUUOyCxGV +WOHAD3bZwI18gfNycJ5v/hqO2V81xrJvNHy+SE/iWjnX2J14np+GPgNeGYtEotXHAgMBAAGjQjBA +MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS/WSA2AHmgoCJrjNXy +YdK4LMuCSjANBgkqhkiG9w0BAQsFAAOCAQEAMQOiYQsfdOhyNsZt+U2e+iKo4YFWz827n+qrkRk4 +r6p8FU3ztqONpfSO9kSpp+ghla0+AGIWiPACuvxhI+YzmzB6azZie60EI4RYZeLbK4rnJVM3YlNf +vNoBYimipidx5joifsFvHZVwIEoHNN/q/xWA5brXethbdXwFeilHfkCoMRN3zUA7tFFHei4R40cR +3p1m0IvVVGb6g1XqfMIpiRvpb7PO4gWEyS8+eIVibslfwXhjdFjASBgMmTnrpMwatXlajRWc2BQN +9noHV8cigwUtPJslJj0Ys6lDfMjIq2SPDqO/nBudMNva0Bkuqjzx+zOAduTNrRlPBSeOE6Fuwg== +-----END CERTIFICATE----- + +Atos TrustedRoot 2011 +===================== +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UEAwwVQXRvcyBU +cnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0xMTA3MDcxNDU4 +MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMMFUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsG +A1UECgwEQXRvczELMAkGA1UEBhMCREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV +hTuXbyo7LjvPpvMpNb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr +54rMVD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+SZFhyBH+ +DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ4J7sVaE3IqKHBAUsR320 +HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0Lcp2AMBYHlT8oDv3FdU9T1nSatCQujgKR +z3bFmx5VdJx4IbHwLfELn8LVlhgf8FQieowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7R +l+lwrrw7GWzbITAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZ +bNshMBgGA1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEB +CwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8jvZfza1zv7v1Apt+h +k6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kPDpFrdRbhIfzYJsdHt6bPWHJxfrrh +TZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pcmaHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a9 +61qn8FYiqTxlVMYVqL2Gns2Dlmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G +3mB/ufNPRJLvKrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed +-----END CERTIFICATE----- + +QuoVadis Root CA 1 G3 +===================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQELBQAwSDELMAkG +A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv +b3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00MjAxMTIxNzI3NDRaMEgxCzAJBgNVBAYTAkJN +MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEg +RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCgvlAQjunybEC0BJyFuTHK3C3kEakE +PBtVwedYMB0ktMPvhd6MLOHBPd+C5k+tR4ds7FtJwUrVu4/sh6x/gpqG7D0DmVIB0jWerNrwU8lm +PNSsAgHaJNM7qAJGr6Qc4/hzWHa39g6QDbXwz8z6+cZM5cOGMAqNF34168Xfuw6cwI2H44g4hWf6 +Pser4BOcBRiYz5P1sZK0/CPTz9XEJ0ngnjybCKOLXSoh4Pw5qlPafX7PGglTvF0FBM+hSo+LdoIN +ofjSxxR3W5A2B4GbPgb6Ul5jxaYA/qXpUhtStZI5cgMJYr2wYBZupt0lwgNm3fME0UDiTouG9G/l +g6AnhF4EwfWQvTA9xO+oabw4m6SkltFi2mnAAZauy8RRNOoMqv8hjlmPSlzkYZqn0ukqeI1RPToV +7qJZjqlc3sX5kCLliEVx3ZGZbHqfPT2YfF72vhZooF6uCyP8Wg+qInYtyaEQHeTTRCOQiJ/GKubX +9ZqzWB4vMIkIG1SitZgj7Ah3HJVdYdHLiZxfokqRmu8hqkkWCKi9YSgxyXSthfbZxbGL0eUQMk1f +iyA6PEkfM4VZDdvLCXVDaXP7a3F98N/ETH3Goy7IlXnLc6KOTk0k+17kBL5yG6YnLUlamXrXXAkg +t3+UuU/xDRxeiEIbEbfnkduebPRq34wGmAOtzCjvpUfzUwIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUo5fW816iEOGrRZ88F2Q87gFwnMwwDQYJKoZI +hvcNAQELBQADggIBABj6W3X8PnrHX3fHyt/PX8MSxEBd1DKquGrX1RUVRpgjpeaQWxiZTOOtQqOC +MTaIzen7xASWSIsBx40Bz1szBpZGZnQdT+3Btrm0DWHMY37XLneMlhwqI2hrhVd2cDMT/uFPpiN3 +GPoajOi9ZcnPP/TJF9zrx7zABC4tRi9pZsMbj/7sPtPKlL92CiUNqXsCHKnQO18LwIE6PWThv6ct +Tr1NxNgpxiIY0MWscgKCP6o6ojoilzHdCGPDdRS5YCgtW2jgFqlmgiNR9etT2DGbe+m3nUvriBbP ++V04ikkwj+3x6xn0dxoxGE1nVGwvb2X52z3sIexe9PSLymBlVNFxZPT5pqOBMzYzcfCkeF9OrYMh +3jRJjehZrJ3ydlo28hP0r+AJx2EqbPfgna67hkooby7utHnNkDPDs3b69fBsnQGQ+p6Q9pxyz0fa +wx/kNSBT8lTR32GDpgLiJTjehTItXnOQUl1CxM49S+H5GYQd1aJQzEH7QRTDvdbJWqNjZgKAvQU6 +O0ec7AAmTPWIUb+oI38YB7AL7YsmoWTTYUrrXJ/es69nA7Mf3W1daWhpq1467HxpvMc7hU6eFbm0 +FU/DlXpY18ls6Wy58yljXrQs8C097Vpl4KlbQMJImYFtnh8GKjwStIsPm6Ik8KaN1nrgS7ZklmOV +hMJKzRwuJIczYOXD +-----END CERTIFICATE----- + +QuoVadis Root CA 2 G3 +===================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQELBQAwSDELMAkG +A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv +b3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJN +MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIg +RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFh +ZiFfqq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMWn4rjyduY +NM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ymc5GQYaYDFCDy54ejiK2t +oIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+O7q414AB+6XrW7PFXmAqMaCvN+ggOp+o +MiwMzAkd056OXbxMmO7FGmh77FOm6RQ1o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+l +V0POKa2Mq1W/xPtbAd0jIaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZo +L1NesNKqIcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz8eQQ +sSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43ehvNURG3YBZwjgQQvD +6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l7ZizlWNof/k19N+IxWA1ksB8aRxh +lRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALGcC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZI +hvcNAQELBQADggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66 +AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RCroijQ1h5fq7K +pVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0GaW/ZZGYjeVYg3UQt4XAoeo0L9 +x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4nlv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgz +dWqTHBLmYF5vHX/JHyPLhGGfHoJE+V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6X +U/IyAgkwo1jwDQHVcsaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+Nw +mNtddbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNgKCLjsZWD +zYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeMHVOyToV7BjjHLPj4sHKN +JeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4WSr2Rz0ZiC3oheGe7IUIarFsNMkd7Egr +O3jtZsSOeWmD3n+M +-----END CERTIFICATE----- + +QuoVadis Root CA 3 G3 +===================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQELBQAwSDELMAkG +A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv +b3QgQ0EgMyBHMzAeFw0xMjAxMTIyMDI2MzJaFw00MjAxMTIyMDI2MzJaMEgxCzAJBgNVBAYTAkJN +MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDMg +RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzyw4QZ47qFJenMioKVjZ/aEzHs286 +IxSR/xl/pcqs7rN2nXrpixurazHb+gtTTK/FpRp5PIpM/6zfJd5O2YIyC0TeytuMrKNuFoM7pmRL +Mon7FhY4futD4tN0SsJiCnMK3UmzV9KwCoWdcTzeo8vAMvMBOSBDGzXRU7Ox7sWTaYI+FrUoRqHe +6okJ7UO4BUaKhvVZR74bbwEhELn9qdIoyhA5CcoTNs+cra1AdHkrAj80//ogaX3T7mH1urPnMNA3 +I4ZyYUUpSFlob3emLoG+B01vr87ERRORFHAGjx+f+IdpsQ7vw4kZ6+ocYfx6bIrc1gMLnia6Et3U +VDmrJqMz6nWB2i3ND0/kA9HvFZcba5DFApCTZgIhsUfei5pKgLlVj7WiL8DWM2fafsSntARE60f7 +5li59wzweyuxwHApw0BiLTtIadwjPEjrewl5qW3aqDCYz4ByA4imW0aucnl8CAMhZa634RylsSqi +Md5mBPfAdOhx3v89WcyWJhKLhZVXGqtrdQtEPREoPHtht+KPZ0/l7DxMYIBpVzgeAVuNVejH38DM +dyM0SXV89pgR6y3e7UEuFAUCf+D+IOs15xGsIs5XPd7JMG0QA4XN8f+MFrXBsj6IbGB/kE+V9/Yt +rQE5BwT6dYB9v0lQ7e/JxHwc64B+27bQ3RP+ydOc17KXqQIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUxhfQvKjqAkPyGwaZXSuQILnXnOQwDQYJKoZI +hvcNAQELBQADggIBADRh2Va1EodVTd2jNTFGu6QHcrxfYWLopfsLN7E8trP6KZ1/AvWkyaiTt3px +KGmPc+FSkNrVvjrlt3ZqVoAh313m6Tqe5T72omnHKgqwGEfcIHB9UqM+WXzBusnIFUBhynLWcKzS +t/Ac5IYp8M7vaGPQtSCKFWGafoaYtMnCdvvMujAWzKNhxnQT5WvvoxXqA/4Ti2Tk08HS6IT7SdEQ +TXlm66r99I0xHnAUrdzeZxNMgRVhvLfZkXdxGYFgu/BYpbWcC/ePIlUnwEsBbTuZDdQdm2NnL9Du +DcpmvJRPpq3t/O5jrFc/ZSXPsoaP0Aj/uHYUbt7lJ+yreLVTubY/6CD50qi+YUbKh4yE8/nxoGib +Ih6BJpsQBJFxwAYf3KDTuVan45gtf4Od34wrnDKOMpTwATwiKp9Dwi7DmDkHOHv8XgBCH/MyJnmD +hPbl8MFREsALHgQjDFSlTC9JxUrRtm5gDWv8a4uFJGS3iQ6rJUdbPM9+Sb3H6QrG2vd+DhcI00iX +0HGS8A85PjRqHH3Y8iKuu2n0M7SmSFXRDw4m6Oy2Cy2nhTXN/VnIn9HNPlopNLk9hM6xZdRZkZFW +dSHBd575euFgndOtBBj0fOtek49TSiIp+EgrPk2GrFt/ywaZWWDYWGWVjUTR939+J399roD1B0y2 +PpxxVJkES/1Y+Zj0 +-----END CERTIFICATE----- + +DigiCert Assured ID Root G2 +=========================== +-----BEGIN CERTIFICATE----- +MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw +IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgw +MTE1MTIwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL +ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIw +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSAn61UQbVH +35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4HteccbiJVMWWXvdMX0h5i89vq +bFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9HpEgjAALAcKxHad3A2m67OeYfcgnDmCXRw +VWmvo2ifv922ebPynXApVfSr/5Vh88lAbx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OP +YLfykqGxvYmJHzDNw6YuYjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+Rn +lTGNAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTO +w0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPIQW5pJ6d1Ee88hjZv +0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I0jJmwYrA8y8678Dj1JGG0VDjA9tz +d29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4GnilmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAW +hsI6yLETcDbYz+70CjTVW0z9B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0M +jomZmWzwPDCvON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo +IhNzbM8m9Yop5w== +-----END CERTIFICATE----- + +DigiCert Assured ID Root G3 +=========================== +-----BEGIN CERTIFICATE----- +MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQswCQYDVQQGEwJV +UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYD +VQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1 +MTIwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQ +BgcqhkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJfZn4f5dwb +RXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17QRSAPWXYQ1qAk8C3eNvJs +KTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgF +UaFNN6KDec6NHSrkhDAKBggqhkjOPQQDAwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5Fy +YZ5eEJJZVrmDxxDnOOlYJjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy +1vUhZscv6pZjamVFkpUBtA== +-----END CERTIFICATE----- + +DigiCert Global Root G2 +======================= +-----BEGIN CERTIFICATE----- +MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAw +HgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUx +MjAwMDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3 +dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkq +hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI2/Ou8jqJ +kTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx1x7e/dfgy5SDN67sH0NO +3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQq2EGnI/yuum06ZIya7XzV+hdG82MHauV +BJVJ8zUtluNJbd134/tJS7SsVQepj5WztCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyM +UNGPHgm+F6HmIcr9g+UQvIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQAB +o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV5uNu +5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY1Yl9PMWLSn/pvtsr +F9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4NeF22d+mQrvHRAiGfzZ0JFrabA0U +WTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NGFdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBH +QRFXGU7Aj64GxJUTFy8bJZ918rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/ +iyK5S9kJRaTepLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl +MrY= +-----END CERTIFICATE----- + +DigiCert Global Root G3 +======================= +-----BEGIN CERTIFICATE----- +MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQswCQYDVQQGEwJV +UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYD +VQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAw +MDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5k +aWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0C +AQYFK4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FGfp4tn+6O +YwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPOZ9wj/wMco+I+o0IwQDAP +BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNp +Yim8S8YwCgYIKoZIzj0EAwMDaAAwZQIxAK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y +3maTD/HMsQmP3Wyr+mt/oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34 +VOKa5Vt8sycX +-----END CERTIFICATE----- + +DigiCert Trusted Root G4 +======================== +-----BEGIN CERTIFICATE----- +MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBiMQswCQYDVQQG +EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEw +HwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1 +MTIwMDAwWjBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0G +CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3yithZwuEp +pz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9o +k3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7Fsa +vOvJz82sNEBfsXpm7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGY +QJB5w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6 +MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCiEhtm +mnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7 +f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFH +dL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8 +oR7FwI+isX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud +DwEB/wQEAwIBhjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD +ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2SV1EY+CtnJYY +ZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd+SeuMIW59mdNOj6PWTkiU0Tr +yF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWcfFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy +7zBZLq7gcfJW5GqXb5JQbZaNaHqasjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iah +ixTXTBmyUEFxPT9NcCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN +5r5N0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie4u1Ki7wb +/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mIr/OSmbaz5mEP0oUA51Aa +5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tK +G48BtieVU+i2iW1bvGjUI+iLUaJW+fCmgKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP +82Z+ +-----END CERTIFICATE----- + +COMODO RSA Certification Authority +================================== +-----BEGIN CERTIFICATE----- +MIIF2DCCA8CgAwIBAgIQTKr5yttjb+Af907YWwOGnTANBgkqhkiG9w0BAQwFADCBhTELMAkGA1UE +BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG +A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkwHhcNMTAwMTE5MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMC +R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE +ChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBB +dXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCR6FSS0gpWsawNJN3Fz0Rn +dJkrN6N9I3AAcbxT38T6KhKPS38QVr2fcHK3YX/JSw8Xpz3jsARh7v8Rl8f0hj4K+j5c+ZPmNHrZ +FGvnnLOFoIJ6dq9xkNfs/Q36nGz637CC9BR++b7Epi9Pf5l/tfxnQ3K9DADWietrLNPtj5gcFKt+ +5eNu/Nio5JIk2kNrYrhV/erBvGy2i/MOjZrkm2xpmfh4SDBF1a3hDTxFYPwyllEnvGfDyi62a+pG +x8cgoLEfZd5ICLqkTqnyg0Y3hOvozIFIQ2dOciqbXL1MGyiKXCJ7tKuY2e7gUYPDCUZObT6Z+pUX +2nwzV0E8jVHtC7ZcryxjGt9XyD+86V3Em69FmeKjWiS0uqlWPc9vqv9JWL7wqP/0uK3pN/u6uPQL +OvnoQ0IeidiEyxPx2bvhiWC4jChWrBQdnArncevPDt09qZahSL0896+1DSJMwBGB7FY79tOi4lu3 +sgQiUpWAk2nojkxl8ZEDLXB0AuqLZxUpaVICu9ffUGpVRr+goyhhf3DQw6KqLCGqR84onAZFdr+C +GCe01a60y1Dma/RMhnEw6abfFobg2P9A3fvQQoh/ozM6LlweQRGBY84YcWsr7KaKtzFcOmpH4MN5 +WdYgGq/yapiqcrxXStJLnbsQ/LBMQeXtHT1eKJ2czL+zUdqnR+WEUwIDAQABo0IwQDAdBgNVHQ4E +FgQUu69+Aj36pvE8hI6t7jiY7NkyMtQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w +DQYJKoZIhvcNAQEMBQADggIBAArx1UaEt65Ru2yyTUEUAJNMnMvlwFTPoCWOAvn9sKIN9SCYPBMt +rFaisNZ+EZLpLrqeLppysb0ZRGxhNaKatBYSaVqM4dc+pBroLwP0rmEdEBsqpIt6xf4FpuHA1sj+ +nq6PK7o9mfjYcwlYRm6mnPTXJ9OV2jeDchzTc+CiR5kDOF3VSXkAKRzH7JsgHAckaVd4sjn8OoSg +tZx8jb8uk2IntznaFxiuvTwJaP+EmzzV1gsD41eeFPfR60/IvYcjt7ZJQ3mFXLrrkguhxuhoqEwW +sRqZCuhTLJK7oQkYdQxlqHvLI7cawiiFwxv/0Cti76R7CZGYZ4wUAc1oBmpjIXUDgIiKboHGhfKp +pC3n9KUkEEeDys30jXlYsQab5xoq2Z0B15R97QNKyvDb6KkBPvVWmckejkk9u+UJueBPSZI9FoJA +zMxZxuY67RIuaTxslbH9qh17f4a+Hg4yRvv7E491f0yLS0Zj/gA0QHDBw7mh3aZw4gSzQbzpgJHq +ZJx64SIDqZxubw5lT2yHh17zbqD5daWbQOhTsiedSrnAdyGN/4fy3ryM7xfft0kL0fJuMAsaDk52 +7RH89elWsn2/x20Kk4yl0MC2Hb46TpSi125sC8KKfPog88Tk5c0NqMuRkrF8hey1FGlmDoLnzc7I +LaZRfyHBNVOFBkpdn627G190 +-----END CERTIFICATE----- + +USERTrust RSA Certification Authority +===================================== +-----BEGIN CERTIFICATE----- +MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCBiDELMAkGA1UE +BhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQK +ExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkwHhcNMTAwMjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UE +BhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQK +ExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNh +dGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCAEmUXNg7D2wiz +0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2j +Y0K2dvKpOyuR+OJv0OwWIJAJPuLodMkYtJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFn +RghRy4YUVD+8M/5+bJz/Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O ++T23LLb2VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT79uq +/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6c0Plfg6lZrEpfDKE +Y1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmTYo61Zs8liM2EuLE/pDkP2QKe6xJM +lXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97lc6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8 +yexDJtC/QV9AqURE9JnnV4eeUB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+ +eLf8ZxXhyVeEHg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd +BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF +MAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPFUp/L+M+ZBn8b2kMVn54CVVeW +FPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KOVWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ +7l8wXEskEVX/JJpuXior7gtNn3/3ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQ +Eg9zKC7F4iRO/Fjs8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM +8WcRiQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYzeSf7dNXGi +FSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZXHlKYC6SQK5MNyosycdi +yA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9c +J2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRBVXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGw +sAvgnEzDHNb842m1R0aBL6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gx +Q+6IHdfGjjxDah2nGN59PRbxYvnKkKj9 +-----END CERTIFICATE----- + +USERTrust ECC Certification Authority +===================================== +-----BEGIN CERTIFICATE----- +MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDELMAkGA1UEBhMC +VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU +aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkwHhcNMTAwMjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMC +VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU +aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlv +biBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqfloI+d61SRvU8Za2EurxtW2 +0eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinngo4N+LZfQYcTxmdwlkWOrfzCjtHDix6Ez +nPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0GA1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNV +HQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBB +HU6+4WMBzzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbWRNZu +9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg= +-----END CERTIFICATE----- + +GlobalSign ECC Root CA - R4 +=========================== +-----BEGIN CERTIFICATE----- +MIIB4TCCAYegAwIBAgIRKjikHJYKBN5CsiilC+g0mAIwCgYIKoZIzj0EAwIwUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI0MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoXDTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI0MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEuMZ5049sJQ6fLjkZHAOkrprl +OQcJFspjsbmG+IpXwVfOQvpzofdlQv8ewQCybnMO/8ch5RikqtlxP6jUuc6MHaNCMEAwDgYDVR0P +AQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFSwe61FuOJAf/sKbvu+M8k8o4TV +MAoGCCqGSM49BAMCA0gAMEUCIQDckqGgE6bPA7DmxCGXkPoUVy0D7O48027KqGx2vKLeuwIgJ6iF +JzWbVsaj8kfSt24bAgAXqmemFZHe+pTsewv4n4Q= +-----END CERTIFICATE----- + +GlobalSign ECC Root CA - R5 +=========================== +-----BEGIN CERTIFICATE----- +MIICHjCCAaSgAwIBAgIRYFlJ4CYuu1X5CneKcflK2GwwCgYIKoZIzj0EAwMwUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoXDTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMb +R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD +EwpHbG9iYWxTaWduMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAER0UOlvt9Xb/pOdEh+J8LttV7HpI6 +SFkc8GIxLcB6KP4ap1yztsyX50XUWPrRd21DosCHZTQKH3rd6zwzocWdTaRvQZU4f8kehOvRnkmS +h5SHDDqFSmafnVmTTZdhBoZKo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd +BgNVHQ4EFgQUPeYpSJvqB8ohREom3m7e0oPQn1kwCgYIKoZIzj0EAwMDaAAwZQIxAOVpEslu28Yx +uglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7 +yFz9SO8NdCKoCOJuxUnOxwy8p2Fp8fc74SrL+SvzZpA3 +-----END CERTIFICATE----- + +Staat der Nederlanden Root CA - G3 +================================== +-----BEGIN CERTIFICATE----- +MIIFdDCCA1ygAwIBAgIEAJiiOTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJOTDEeMBwGA1UE +CgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFhdCBkZXIgTmVkZXJsYW5kZW4g +Um9vdCBDQSAtIEczMB4XDTEzMTExNDExMjg0MloXDTI4MTExMzIzMDAwMFowWjELMAkGA1UEBhMC +TkwxHjAcBgNVBAoMFVN0YWF0IGRlciBOZWRlcmxhbmRlbjErMCkGA1UEAwwiU3RhYXQgZGVyIE5l +ZGVybGFuZGVuIFJvb3QgQ0EgLSBHMzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4y +olQPcPssXFnrbMSkUeiFKrPMSjTysF/zDsccPVMeiAho2G89rcKezIJnByeHaHE6n3WWIkYFsO2t +x1ueKt6c/DrGlaf1F2cY5y9JCAxcz+bMNO14+1Cx3Gsy8KL+tjzk7FqXxz8ecAgwoNzFs21v0IJy +EavSgWhZghe3eJJg+szeP4TrjTgzkApyI/o1zCZxMdFyKJLZWyNtZrVtB0LrpjPOktvA9mxjeM3K +Tj215VKb8b475lRgsGYeCasH/lSJEULR9yS6YHgamPfJEf0WwTUaVHXvQ9Plrk7O53vDxk5hUUur +mkVLoR9BvUhTFXFkC4az5S6+zqQbwSmEorXLCCN2QyIkHxcE1G6cxvx/K2Ya7Irl1s9N9WMJtxU5 +1nus6+N86U78dULI7ViVDAZCopz35HCz33JvWjdAidiFpNfxC95DGdRKWCyMijmev4SH8RY7Ngzp +07TKbBlBUgmhHbBqv4LvcFEhMtwFdozL92TkA1CvjJFnq8Xy7ljY3r735zHPbMk7ccHViLVlvMDo +FxcHErVc0qsgk7TmgoNwNsXNo42ti+yjwUOH5kPiNL6VizXtBznaqB16nzaeErAMZRKQFWDZJkBE +41ZgpRDUajz9QdwOWke275dhdU/Z/seyHdTtXUmzqWrLZoQT1Vyg3N9udwbRcXXIV2+vD3dbAgMB +AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRUrfrHkleu +yjWcLhL75LpdINyUVzANBgkqhkiG9w0BAQsFAAOCAgEAMJmdBTLIXg47mAE6iqTnB/d6+Oea31BD +U5cqPco8R5gu4RV78ZLzYdqQJRZlwJ9UXQ4DO1t3ApyEtg2YXzTdO2PCwyiBwpwpLiniyMMB8jPq +KqrMCQj3ZWfGzd/TtiunvczRDnBfuCPRy5FOCvTIeuXZYzbB1N/8Ipf3YF3qKS9Ysr1YvY2WTxB1 +v0h7PVGHoTx0IsL8B3+A3MSs/mrBcDCw6Y5p4ixpgZQJut3+TcCDjJRYwEYgr5wfAvg1VUkvRtTA +8KCWAg8zxXHzniN9lLf9OtMJgwYh/WA9rjLA0u6NpvDntIJ8CsxwyXmA+P5M9zWEGYox+wrZ13+b +8KKaa8MFSu1BYBQw0aoRQm7TIwIEC8Zl3d1Sd9qBa7Ko+gE4uZbqKmxnl4mUnrzhVNXkanjvSr0r +mj1AfsbAddJu+2gw7OyLnflJNZoaLNmzlTnVHpL3prllL+U9bTpITAjc5CgSKL59NVzq4BZ+Extq +1z7XnvwtdbLBFNUjA9tbbws+eC8N3jONFrdI54OagQ97wUNNVQQXOEpR1VmiiXTTn74eS9fGbbeI +JG9gkaSChVtWQbzQRKtqE77RLFi3EjNYsjdj3BP1lB0/QFH1T/U67cjF68IeHRaVesd+QnGTbksV +tzDfqu1XhUisHWrdOWnk4Xl4vs4Fv6EM94B7IWcnMFk= +-----END CERTIFICATE----- + +Staat der Nederlanden EV Root CA +================================ +-----BEGIN CERTIFICATE----- +MIIFcDCCA1igAwIBAgIEAJiWjTANBgkqhkiG9w0BAQsFADBYMQswCQYDVQQGEwJOTDEeMBwGA1UE +CgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSkwJwYDVQQDDCBTdGFhdCBkZXIgTmVkZXJsYW5kZW4g +RVYgUm9vdCBDQTAeFw0xMDEyMDgxMTE5MjlaFw0yMjEyMDgxMTEwMjhaMFgxCzAJBgNVBAYTAk5M +MR4wHAYDVQQKDBVTdGFhdCBkZXIgTmVkZXJsYW5kZW4xKTAnBgNVBAMMIFN0YWF0IGRlciBOZWRl +cmxhbmRlbiBFViBSb290IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA48d+ifkk +SzrSM4M1LGns3Amk41GoJSt5uAg94JG6hIXGhaTK5skuU6TJJB79VWZxXSzFYGgEt9nCUiY4iKTW +O0Cmws0/zZiTs1QUWJZV1VD+hq2kY39ch/aO5ieSZxeSAgMs3NZmdO3dZ//BYY1jTw+bbRcwJu+r +0h8QoPnFfxZpgQNH7R5ojXKhTbImxrpsX23Wr9GxE46prfNeaXUmGD5BKyF/7otdBwadQ8QpCiv8 +Kj6GyzyDOvnJDdrFmeK8eEEzduG/L13lpJhQDBXd4Pqcfzho0LKmeqfRMb1+ilgnQ7O6M5HTp5gV +XJrm0w912fxBmJc+qiXbj5IusHsMX/FjqTf5m3VpTCgmJdrV8hJwRVXj33NeN/UhbJCONVrJ0yPr +08C+eKxCKFhmpUZtcALXEPlLVPxdhkqHz3/KRawRWrUgUY0viEeXOcDPusBCAUCZSCELa6fS/ZbV +0b5GnUngC6agIk440ME8MLxwjyx1zNDFjFE7PZQIZCZhfbnDZY8UnCHQqv0XcgOPvZuM5l5Tnrmd +74K74bzickFbIZTTRTeU0d8JOV3nI6qaHcptqAqGhYqCvkIH1vI4gnPah1vlPNOePqc7nvQDs/nx +fRN0Av+7oeX6AHkcpmZBiFxgV6YuCcS6/ZrPpx9Aw7vMWgpVSzs4dlG4Y4uElBbmVvMCAwEAAaNC +MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP6rAJCYniT8qcwa +ivsnuL8wbqg7MA0GCSqGSIb3DQEBCwUAA4ICAQDPdyxuVr5Os7aEAJSrR8kN0nbHhp8dB9O2tLsI +eK9p0gtJ3jPFrK3CiAJ9Brc1AsFgyb/E6JTe1NOpEyVa/m6irn0F3H3zbPB+po3u2dfOWBfoqSmu +c0iH55vKbimhZF8ZE/euBhD/UcabTVUlT5OZEAFTdfETzsemQUHSv4ilf0X8rLiltTMMgsT7B/Zq +5SWEXwbKwYY5EdtYzXc7LMJMD16a4/CrPmEbUCTCwPTxGfARKbalGAKb12NMcIxHowNDXLldRqAN +b/9Zjr7dn3LDWyvfjFvO5QxGbJKyCqNMVEIYFRIYvdr8unRu/8G2oGTYqV9Vrp9canaW2HNnh/tN +f1zuacpzEPuKqf2evTY4SUmH9A4U8OmHuD+nT3pajnnUk+S7aFKErGzp85hwVXIy+TSrK0m1zSBi +5Dp6Z2Orltxtrpfs/J92VoguZs9btsmksNcFuuEnL5O7Jiqik7Ab846+HUCjuTaPPoIaGl6I6lD4 +WeKDRikL40Rc4ZW2aZCaFG+XroHPaO+Zmr615+F/+PoTRxZMzG0IQOeLeG9QgkRQP2YGiqtDhFZK +DyAthg710tvSeopLzaXoTvFeJiUBWSOgftL2fiFX1ye8FVdMpEbB4IMeDExNH08GGeL5qPQ6gqGy +eUN51q1veieQA6TqJIc/2b3Z6fJfUEkc7uzXLg== +-----END CERTIFICATE----- + +IdenTrust Commercial Root CA 1 +============================== +-----BEGIN CERTIFICATE----- +MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBKMQswCQYDVQQG +EwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBS +b290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQwMTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzES +MBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENB +IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ld +hNlT3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU+ehcCuz/ +mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gpS0l4PJNgiCL8mdo2yMKi +1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1bVoE/c40yiTcdCMbXTMTEl3EASX2MN0C +XZ/g1Ue9tOsbobtJSdifWwLziuQkkORiT0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl +3ZBWzvurpWCdxJ35UrCLvYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzy +NeVJSQjKVsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZKdHzV +WYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHTc+XvvqDtMwt0viAg +xGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hvl7yTmvmcEpB4eoCHFddydJxVdHix +uuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5NiGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMC +AQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZI +hvcNAQELBQADggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH +6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwtLRvM7Kqas6pg +ghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93nAbowacYXVKV7cndJZ5t+qnt +ozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3+wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmV +YjzlVYA211QC//G5Xc7UI2/YRYRKW2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUX +feu+h1sXIFRRk0pTAwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/ro +kTLql1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG4iZZRHUe +2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZmUlO+KWA2yUPHGNiiskz +Z2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7R +cGzM7vRX+Bi6hG6H +-----END CERTIFICATE----- + +IdenTrust Public Sector Root CA 1 +================================= +-----BEGIN CERTIFICATE----- +MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBNMQswCQYDVQQG +EwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3Rv +ciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcNMzQwMTE2MTc1MzMyWjBNMQswCQYDVQQGEwJV +UzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3RvciBS +b290IENBIDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2IpT8pEiv6EdrCvsnduTy +P4o7ekosMSqMjbCpwzFrqHd2hCa2rIFCDQjrVVi7evi8ZX3yoG2LqEfpYnYeEe4IFNGyRBb06tD6 +Hi9e28tzQa68ALBKK0CyrOE7S8ItneShm+waOh7wCLPQ5CQ1B5+ctMlSbdsHyo+1W/CD80/HLaXI +rcuVIKQxKFdYWuSNG5qrng0M8gozOSI5Cpcu81N3uURF/YTLNiCBWS2ab21ISGHKTN9T0a9SvESf +qy9rg3LvdYDaBjMbXcjaY8ZNzaxmMc3R3j6HEDbhuaR672BQssvKplbgN6+rNBM5Jeg5ZuSYeqoS +mJxZZoY+rfGwyj4GD3vwEUs3oERte8uojHH01bWRNszwFcYr3lEXsZdMUD2xlVl8BX0tIdUAvwFn +ol57plzy9yLxkA2T26pEUWbMfXYD62qoKjgZl3YNa4ph+bz27nb9cCvdKTz4Ch5bQhyLVi9VGxyh +LrXHFub4qjySjmm2AcG1hp2JDws4lFTo6tyePSW8Uybt1as5qsVATFSrsrTZ2fjXctscvG29ZV/v +iDUqZi/u9rNl8DONfJhBaUYPQxxp+pu10GFqzcpL2UyQRqsVWaFHVCkugyhfHMKiq3IXAAaOReyL +4jM9f9oZRORicsPfIsbyVtTdX5Vy7W1f90gDW/3FKqD2cyOEEBsB5wIDAQABo0IwQDAOBgNVHQ8B +Af8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU43HgntinQtnbcZFrlJPrw6PRFKMw +DQYJKoZIhvcNAQELBQADggIBAEf63QqwEZE4rU1d9+UOl1QZgkiHVIyqZJnYWv6IAcVYpZmxI1Qj +t2odIFflAWJBF9MJ23XLblSQdf4an4EKwt3X9wnQW3IV5B4Jaj0z8yGa5hV+rVHVDRDtfULAj+7A +mgjVQdZcDiFpboBhDhXAuM/FSRJSzL46zNQuOAXeNf0fb7iAaJg9TaDKQGXSc3z1i9kKlT/YPyNt +GtEqJBnZhbMX73huqVjRI9PHE+1yJX9dsXNw0H8GlwmEKYBhHfpe/3OsoOOJuBxxFcbeMX8S3OFt +m6/n6J91eEyrRjuazr8FGF1NFTwWmhlQBJqymm9li1JfPFgEKCXAZmExfrngdbkaqIHWchezxQMx +NRF4eKLg6TCMf4DfWN88uieW4oA0beOY02QnrEh+KHdcxiVhJfiFDGX6xDIvpZgF5PgLZxYWxoK4 +Mhn5+bl53B/N66+rDt0b20XkeucC4pVd/GnwU2lhlXV5C15V5jgclKlZM57IcXR5f1GJtshquDDI +ajjDbp7hNxbqBWJMWxJH7ae0s1hWx0nzfxJoCTFx8G34Tkf71oXuxVhAGaQdp/lLQzfcaFpPz+vC +ZHTetBXZ9FRUGi8c15dxVJCO2SCdUyt/q4/i6jC8UDfv8Ue1fXwsBOxonbRJRBD0ckscZOf85muQ +3Wl9af0AVqW3rLatt8o+Ae+c +-----END CERTIFICATE----- + +Entrust Root Certification Authority - G2 +========================================= +-----BEGIN CERTIFICATE----- +MIIEPjCCAyagAwIBAgIESlOMKDANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMCVVMxFjAUBgNV +BAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVy +bXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ug +b25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIw +HhcNMDkwNzA3MTcyNTU0WhcNMzAxMjA3MTc1NTU0WjCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoT +DUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMx +OTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25s +eTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwggEi +MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hLZy254Ma+KZ6TABp3bqMriVQRrJ2mFOWHLP +/vaCeb9zYQYKpSfYs1/TRU4cctZOMvJyig/3gxnQaoCAAEUesMfnmr8SVycco2gvCoe9amsOXmXz +HHfV1IWNcCG0szLni6LVhjkCsbjSR87kyUnEO6fe+1R9V77w6G7CebI6C1XiUJgWMhNcL3hWwcKU +s/Ja5CeanyTXxuzQmyWC48zCxEXFjJd6BmsqEZ+pCm5IO2/b1BEZQvePB7/1U1+cPvQXLOZprE4y +TGJ36rfo5bs0vBmLrpxR57d+tVOxMyLlbc9wPBr64ptntoP0jaWvYkxN4FisZDQSA/i2jZRjJKRx +AgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqciZ6 +0B7vfec7aVHUbI2fkBJmqzANBgkqhkiG9w0BAQsFAAOCAQEAeZ8dlsa2eT8ijYfThwMEYGprmi5Z +iXMRrEPR9RP/jTkrwPK9T3CMqS/qF8QLVJ7UG5aYMzyorWKiAHarWWluBh1+xLlEjZivEtRh2woZ +Rkfz6/djwUAFQKXSt/S1mja/qYh2iARVBCuch38aNzx+LaUa2NSJXsq9rD1s2G2v1fN2D807iDgi +nWyTmsQ9v4IbZT+mD12q/OWyFcq1rca8PdCE6OoGcrBNOTJ4vz4RnAuknZoh8/CbCzB428Hch0P+ +vGOaysXCHMnHjf87ElgI5rY97HosTvuDls4MPGmHVHOkc8KT/1EQrBVUAdj8BbGJoX90g5pJ19xO +e4pIb4tF9g== +-----END CERTIFICATE----- + +Entrust Root Certification Authority - EC1 +========================================== +-----BEGIN CERTIFICATE----- +MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkGA1UEBhMCVVMx +FjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVn +YWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXpl +ZCB1c2Ugb25seTEzMDEGA1UEAxMqRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +IC0gRUMxMB4XDTEyMTIxODE1MjUzNloXDTM3MTIxODE1NTUzNlowgb8xCzAJBgNVBAYTAlVTMRYw +FAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2Fs +LXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQg +dXNlIG9ubHkxMzAxBgNVBAMTKkVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt +IEVDMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABIQTydC6bUF74mzQ61VfZgIaJPRbiWlH47jCffHy +AsWfoPZb1YsGGYZPUxBtByQnoaD41UcZYUx9ypMn6nQM72+WCf5j7HBdNq1nd67JnXxVRDqiY1Ef +9eNi1KlHBz7MIKNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE +FLdj5xrdjekIplWDpOBqUEFlEUJJMAoGCCqGSM49BAMDA2cAMGQCMGF52OVCR98crlOZF7ZvHH3h +vxGU0QOIdeSNiaSKd0bebWHvAvX7td/M/k7//qnmpwIwW5nXhTcGtXsI/esni0qU+eH6p44mCOh8 +kmhtc9hvJqwhAriZtyZBWyVgrtBIGu4G +-----END CERTIFICATE----- + +CFCA EV ROOT +============ +-----BEGIN CERTIFICATE----- +MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJDTjEwMC4GA1UE +CgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQDDAxDRkNB +IEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkxMjMxMDMwNzAxWjBWMQswCQYDVQQGEwJDTjEw +MC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQD +DAxDRkNBIEVWIFJPT1QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXXWvNED8fBVnV +BU03sQ7smCuOFR36k0sXgiFxEFLXUWRwFsJVaU2OFW2fvwwbwuCjZ9YMrM8irq93VCpLTIpTUnrD +7i7es3ElweldPe6hL6P3KjzJIx1qqx2hp/Hz7KDVRM8Vz3IvHWOX6Jn5/ZOkVIBMUtRSqy5J35DN +uF++P96hyk0g1CXohClTt7GIH//62pCfCqktQT+x8Rgp7hZZLDRJGqgG16iI0gNyejLi6mhNbiyW +ZXvKWfry4t3uMCz7zEasxGPrb382KzRzEpR/38wmnvFyXVBlWY9ps4deMm/DGIq1lY+wejfeWkU7 +xzbh72fROdOXW3NiGUgthxwG+3SYIElz8AXSG7Ggo7cbcNOIabla1jj0Ytwli3i/+Oh+uFzJlU9f +py25IGvPa931DfSCt/SyZi4QKPaXWnuWFo8BGS1sbn85WAZkgwGDg8NNkt0yxoekN+kWzqotaK8K +gWU6cMGbrU1tVMoqLUuFG7OA5nBFDWteNfB/O7ic5ARwiRIlk9oKmSJgamNgTnYGmE69g60dWIol +hdLHZR4tjsbftsbhf4oEIRUpdPA+nJCdDC7xij5aqgwJHsfVPKPtl8MeNPo4+QgO48BdK4PRVmrJ +tqhUUy54Mmc9gn900PvhtgVguXDbjgv5E1hvcWAQUhC5wUEJ73IfZzF4/5YFjQIDAQABo2MwYTAf +BgNVHSMEGDAWgBTj/i39KNALtbq2osS/BqoFjJP7LzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB +/wQEAwIBBjAdBgNVHQ4EFgQU4/4t/SjQC7W6tqLEvwaqBYyT+y8wDQYJKoZIhvcNAQELBQADggIB +ACXGumvrh8vegjmWPfBEp2uEcwPenStPuiB/vHiyz5ewG5zz13ku9Ui20vsXiObTej/tUxPQ4i9q +ecsAIyjmHjdXNYmEwnZPNDatZ8POQQaIxffu2Bq41gt/UP+TqhdLjOztUmCypAbqTuv0axn96/Ua +4CUqmtzHQTb3yHQFhDmVOdYLO6Qn+gjYXB74BGBSESgoA//vU2YApUo0FmZ8/Qmkrp5nGm9BC2sG +E5uPhnEFtC+NiWYzKXZUmhH4J/qyP5Hgzg0b8zAarb8iXRvTvyUFTeGSGn+ZnzxEk8rUQElsgIfX +BDrDMlI1Dlb4pd19xIsNER9Tyx6yF7Zod1rg1MvIB671Oi6ON7fQAUtDKXeMOZePglr4UeWJoBjn +aH9dCi77o0cOPaYjesYBx4/IXr9tgFa+iiS6M+qf4TIRnvHST4D2G0CvOJ4RUHlzEhLN5mydLIhy +PDCBBpEi6lmt2hkuIsKNuYyH4Ga8cyNfIWRjgEj1oDwYPZTISEEdQLpe/v5WOaHIz16eGWRGENoX +kbcFgKyLmZJ956LYBws2J+dIeWCKw9cTXPhyQN9Ky8+ZAAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3C +ekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su +-----END CERTIFICATE----- + +OISTE WISeKey Global Root GB CA +=============================== +-----BEGIN CERTIFICATE----- +MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBtMQswCQYDVQQG +EwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNl +ZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwgUm9vdCBHQiBDQTAeFw0xNDEyMDExNTAw +MzJaFw0zOTEyMDExNTEwMzFaMG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYD +VQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEds +b2JhbCBSb290IEdCIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be3HEokKtaX +scriHvt9OO+Y9bI5mE4nuBFde9IllIiCFSZqGzG7qFshISvYD06fWvGxWuR51jIjK+FTzJlFXHtP +rby/h0oLS5daqPZI7H17Dc0hBt+eFf1Biki3IPShehtX1F1Q/7pn2COZH8g/497/b1t3sWtuuMlk +9+HKQUYOKXHQuSP8yYFfTvdv37+ErXNku7dCjmn21HYdfp2nuFeKUWdy19SouJVUQHMD9ur06/4o +Qnc/nSMbsrY9gBQHTC5P99UKFg29ZkM3fiNDecNAhvVMKdqOmq0NpQSHiB6F4+lT1ZvIiwNjeOvg +GUpuuy9rM2RYk61pv48b74JIxwIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB +/zAdBgNVHQ4EFgQUNQ/INmNe4qPs+TtmFc5RUuORmj0wEAYJKwYBBAGCNxUBBAMCAQAwDQYJKoZI +hvcNAQELBQADggEBAEBM+4eymYGQfp3FsLAmzYh7KzKNbrghcViXfa43FK8+5/ea4n32cZiZBKpD +dHij40lhPnOMTZTg+XHEthYOU3gf1qKHLwI5gSk8rxWYITD+KJAAjNHhy/peyP34EEY7onhCkRd0 +VQreUGdNZtGn//3ZwLWoo4rOZvUPQ82nK1d7Y0Zqqi5S2PTt4W2tKZB4SLrhI6qjiey1q5bAtEui +HZeeevJuQHHfaPFlTc58Bd9TZaml8LGXBHAVRgOY1NK/VLSgWH1Sb9pWJmLU2NuJMW8c8CLC02Ic +Nc1MaRVUGpCY3useX8p3x8uOPUNpnJpY0CQ73xtAln41rYHHTnG6iBM= +-----END CERTIFICATE----- + +SZAFIR ROOT CA2 +=============== +-----BEGIN CERTIFICATE----- +MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQELBQAwUTELMAkG +A1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6ZW5pb3dhIFMuQS4xGDAWBgNV +BAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkwNzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJ +BgNVBAYTAlBMMSgwJgYDVQQKDB9LcmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYD +VQQDDA9TWkFGSVIgUk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5Q +qEvNQLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT3PSQ1hNK +DJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw3gAeqDRHu5rr/gsUvTaE +2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr63fE9biCloBK0TXC5ztdyO4mTp4CEHCdJ +ckm1/zuVnsHMyAHs6A6KCpbns6aH5db5BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwi +ieDhZNRnvDF5YTy7ykHNXGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P +AQH/BAQDAgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsFAAOC +AQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw8PRBEew/R40/cof5 +O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOGnXkZ7/e7DDWQw4rtTw/1zBLZpD67 +oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCPoky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul +4+vJhaAlIDf7js4MNIThPIGyd05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6 ++/NNIxuZMzSgLvWpCz/UXeHPhJ/iGcJfitYgHuNztw== +-----END CERTIFICATE----- + +Certum Trusted Network CA 2 +=========================== +-----BEGIN CERTIFICATE----- +MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCBgDELMAkGA1UE +BhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMuQS4xJzAlBgNVBAsTHkNlcnR1 +bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIGA1UEAxMbQ2VydHVtIFRydXN0ZWQgTmV0d29y +ayBDQSAyMCIYDzIwMTExMDA2MDgzOTU2WhgPMjA0NjEwMDYwODM5NTZaMIGAMQswCQYDVQQGEwJQ +TDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENl +cnRpZmljYXRpb24gQXV0aG9yaXR5MSQwIgYDVQQDExtDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENB +IDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9+Xj45tWADGSdhhuWZGc/IjoedQF9 +7/tcZ4zJzFxrqZHmuULlIEub2pt7uZld2ZuAS9eEQCsn0+i6MLs+CRqnSZXvK0AkwpfHp+6bJe+o +CgCXhVqqndwpyeI1B+twTUrWwbNWuKFBOJvR+zF/j+Bf4bE/D44WSWDXBo0Y+aomEKsq09DRZ40b +Rr5HMNUuctHFY9rnY3lEfktjJImGLjQ/KUxSiyqnwOKRKIm5wFv5HdnnJ63/mgKXwcZQkpsCLL2p +uTRZCr+ESv/f/rOf69me4Jgj7KZrdxYq28ytOxykh9xGc14ZYmhFV+SQgkK7QtbwYeDBoz1mo130 +GO6IyY0XRSmZMnUCMe4pJshrAua1YkV/NxVaI2iJ1D7eTiew8EAMvE0Xy02isx7QBlrd9pPPV3WZ +9fqGGmd4s7+W/jTcvedSVuWz5XV710GRBdxdaeOVDUO5/IOWOZV7bIBaTxNyxtd9KXpEulKkKtVB +Rgkg/iKgtlswjbyJDNXXcPiHUv3a76xRLgezTv7QCdpw75j6VuZt27VXS9zlLCUVyJ4ueE742pye +hizKV/Ma5ciSixqClnrDvFASadgOWkaLOusm+iPJtrCBvkIApPjW/jAux9JG9uWOdf3yzLnQh1vM +BhBgu4M1t15n3kfsmUjxpKEV/q2MYo45VU85FrmxY53/twIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MB0GA1UdDgQWBBS2oVQ5AsOgP46KvPrU+Bym0ToO/TAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZI +hvcNAQENBQADggIBAHGlDs7k6b8/ONWJWsQCYftMxRQXLYtPU2sQF/xlhMcQSZDe28cmk4gmb3DW +Al45oPePq5a1pRNcgRRtDoGCERuKTsZPpd1iHkTfCVn0W3cLN+mLIMb4Ck4uWBzrM9DPhmDJ2vuA +L55MYIR4PSFk1vtBHxgP58l1cb29XN40hz5BsA72udY/CROWFC/emh1auVbONTqwX3BNXuMp8SMo +clm2q8KMZiYcdywmdjWLKKdpoPk79SPdhRB0yZADVpHnr7pH1BKXESLjokmUbOe3lEu6LaTaM4tM +pkT/WjzGHWTYtTHkpjx6qFcL2+1hGsvxznN3Y6SHb0xRONbkX8eftoEq5IVIeVheO/jbAoJnwTnb +w3RLPTYe+SmTiGhbqEQZIfCn6IENLOiTNrQ3ssqwGyZ6miUfmpqAnksqP/ujmv5zMnHCnsZy4Ypo +J/HkD7TETKVhk/iXEAcqMCWpuchxuO9ozC1+9eB+D4Kob7a6bINDd82Kkhehnlt4Fj1F4jNy3eFm +ypnTycUm/Q1oBEauttmbjL4ZvrHG8hnjXALKLNhvSgfZyTXaQHXyxKcZb55CEJh15pWLYLztxRLX +is7VmFxWlgPF7ncGNf/P5O4/E2Hu29othfDNrp2yGAlFw5Khchf8R7agCyzxxN5DaAhqXzvwdmP7 +zAYspsbiDrW5viSP +-----END CERTIFICATE----- + +Hellenic Academic and Research Institutions RootCA 2015 +======================================================= +-----BEGIN CERTIFICATE----- +MIIGCzCCA/OgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBpjELMAkGA1UEBhMCR1IxDzANBgNVBAcT +BkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0 +aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl +YXJjaCBJbnN0aXR1dGlvbnMgUm9vdENBIDIwMTUwHhcNMTUwNzA3MTAxMTIxWhcNNDAwNjMwMTAx +MTIxWjCBpjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMg +QWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNV +BAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgUm9vdENBIDIw +MTUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDC+Kk/G4n8PDwEXT2QNrCROnk8Zlrv +bTkBSRq0t89/TSNTt5AA4xMqKKYx8ZEA4yjsriFBzh/a/X0SWwGDD7mwX5nh8hKDgE0GPt+sr+eh +iGsxr/CL0BgzuNtFajT0AoAkKAoCFZVedioNmToUW/bLy1O8E00BiDeUJRtCvCLYjqOWXjrZMts+ +6PAQZe104S+nfK8nNLspfZu2zwnI5dMK/IhlZXQK3HMcXM1AsRzUtoSMTFDPaI6oWa7CJ06CojXd +FPQf/7J31Ycvqm59JCfnxssm5uX+Zwdj2EUN3TpZZTlYepKZcj2chF6IIbjV9Cz82XBST3i4vTwr +i5WY9bPRaM8gFH5MXF/ni+X1NYEZN9cRCLdmvtNKzoNXADrDgfgXy5I2XdGj2HUb4Ysn6npIQf1F +GQatJ5lOwXBH3bWfgVMS5bGMSF0xQxfjjMZ6Y5ZLKTBOhE5iGV48zpeQpX8B653g+IuJ3SWYPZK2 +fu/Z8VFRfS0myGlZYeCsargqNhEEelC9MoS+L9xy1dcdFkfkR2YgP/SWxa+OAXqlD3pk9Q0Yh9mu +iNX6hME6wGkoLfINaFGq46V3xqSQDqE3izEjR8EJCOtu93ib14L8hCCZSRm2Ekax+0VVFqmjZayc +Bw/qa9wfLgZy7IaIEuQt218FL+TwA9MmM+eAws1CoRc0CwIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUcRVnyMjJvXVdctA4GGqd83EkVAswDQYJKoZI +hvcNAQELBQADggIBAHW7bVRLqhBYRjTyYtcWNl0IXtVsyIe9tC5G8jH4fOpCtZMWVdyhDBKg2mF+ +D1hYc2Ryx+hFjtyp8iY/xnmMsVMIM4GwVhO+5lFc2JsKT0ucVlMC6U/2DWDqTUJV6HwbISHTGzrM +d/K4kPFox/la/vot9L/J9UUbzjgQKjeKeaO04wlshYaT/4mWJ3iBj2fjRnRUjtkNaeJK9E10A/+y +d+2VZ5fkscWrv2oj6NSU4kQoYsRL4vDY4ilrGnB+JGGTe08DMiUNRSQrlrRGar9KC/eaj8GsGsVn +82800vpzY4zvFrCopEYq+OsS7HK07/grfoxSwIuEVPkvPuNVqNxmsdnhX9izjFk0WaSrT2y7Hxjb +davYy5LNlDhhDgcGH0tGEPEVvo2FXDtKK4F5D7Rpn0lQl033DlZdwJVqwjbDG2jJ9SrcR5q+ss7F +Jej6A7na+RZukYT1HCjI/CbM1xyQVqdfbzoEvM14iQuODy+jqk+iGxI9FghAD/FGTNeqewjBCvVt +J94Cj8rDtSvK6evIIVM4pcw72Hc3MKJP2W/R8kCtQXoXxdZKNYm3QdV8hn9VTYNKpXMgwDqvkPGa +JI7ZjnHKe7iG2rKPmT4dEw0SEe7Uq/DpFXYC5ODfqiAeW2GFZECpkJcNrVPSWh2HagCXZWK0vm9q +p/UsQu0yrbYhnr68 +-----END CERTIFICATE----- + +Hellenic Academic and Research Institutions ECC RootCA 2015 +=========================================================== +-----BEGIN CERTIFICATE----- +MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0 +aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9u +cyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj +aCBJbnN0aXR1dGlvbnMgRUNDIFJvb3RDQSAyMDE1MB4XDTE1MDcwNzEwMzcxMloXDTQwMDYzMDEw +MzcxMlowgaoxCzAJBgNVBAYTAkdSMQ8wDQYDVQQHEwZBdGhlbnMxRDBCBgNVBAoTO0hlbGxlbmlj +IEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUQwQgYD +VQQDEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIEVDQyBSb290 +Q0EgMjAxNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABJKgQehLgoRc4vgxEZmGZE4JJS+dQS8KrjVP +dJWyUWRrjWvmP3CV8AVER6ZyOFB2lQJajq4onvktTpnvLEhvTCUp6NFxW98dwXU3tNf6e3pCnGoK +Vlp8aQuqgAkkbH7BRqNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0O +BBYEFLQiC4KZJAEOnLvkDv2/+5cgk5kqMAoGCCqGSM49BAMCA2cAMGQCMGfOFmI4oqxiRaeplSTA +GiecMjvAwNW6qef4BENThe5SId6d9SWDPp5YSy/XZxMOIQIwBeF1Ad5o7SofTUwJCA3sS61kFyjn +dc5FZXIhF8siQQ6ME5g4mlRtm8rifOoCWCKR +-----END CERTIFICATE----- + +ISRG Root X1 +============ +-----BEGIN CERTIFICATE----- +MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAwTzELMAkGA1UE +BhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNoIEdyb3VwMRUwEwYDVQQD +EwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQG +EwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMT +DElTUkcgUm9vdCBYMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54r +Vygch77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+0TM8ukj1 +3Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6UA5/TR5d8mUgjU+g4rk8K +b4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sWT8KOEUt+zwvo/7V3LvSye0rgTBIlDHCN +Aymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyHB5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ +4Q7e2RCOFvu396j3x+UCB5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf +1b0SHzUvKBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWnOlFu +hjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTnjh8BCNAw1FtxNrQH +usEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbwqHyGO0aoSCqI3Haadr8faqU9GY/r +OPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CIrU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4G +A1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY +9umbbjANBgkqhkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL +ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ3BebYhtF8GaV +0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KKNFtY2PwByVS5uCbMiogziUwt +hDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJw +TdwJx4nLCgdNbOhdjsnvzqvHu7UrTkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nx +e5AW0wdeRlN8NwdCjNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZA +JzVcoyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq4RgqsahD +YVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPAmRGunUHBcnWEvgJBQl9n +JEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57demyPxgcYxn/eR44/KJ4EBs+lVDR3veyJ +m+kXQ99b21/+jh5Xos1AnX5iItreGCc= +-----END CERTIFICATE----- + +AC RAIZ FNMT-RCM +================ +-----BEGIN CERTIFICATE----- +MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsxCzAJBgNVBAYT +AkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJWiBGTk1ULVJDTTAeFw0wODEw +MjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJD +TTEZMBcGA1UECwwQQUMgUkFJWiBGTk1ULVJDTTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC +ggIBALpxgHpMhm5/yBNtwMZ9HACXjywMI7sQmkCpGreHiPibVmr75nuOi5KOpyVdWRHbNi63URcf +qQgfBBckWKo3Shjf5TnUV/3XwSyRAZHiItQDwFj8d0fsjz50Q7qsNI1NOHZnjrDIbzAzWHFctPVr +btQBULgTfmxKo0nRIBnuvMApGGWn3v7v3QqQIecaZ5JCEJhfTzC8PhxFtBDXaEAUwED653cXeuYL +j2VbPNmaUtu1vZ5Gzz3rkQUCwJaydkxNEJY7kvqcfw+Z374jNUUeAlz+taibmSXaXvMiwzn15Cou +08YfxGyqxRxqAQVKL9LFwag0Jl1mpdICIfkYtwb1TplvqKtMUejPUBjFd8g5CSxJkjKZqLsXF3mw +WsXmo8RZZUc1g16p6DULmbvkzSDGm0oGObVo/CK67lWMK07q87Hj/LaZmtVC+nFNCM+HHmpxffnT +tOmlcYF7wk5HlqX2doWjKI/pgG6BU6VtX7hI+cL5NqYuSf+4lsKMB7ObiFj86xsc3i1w4peSMKGJ +47xVqCfWS+2QrYv6YyVZLag13cqXM7zlzced0ezvXg5KkAYmY6252TUtB7p2ZSysV4999AeU14EC +ll2jB0nVetBX+RvnU0Z1qrB5QstocQjpYL05ac70r8NWQMetUqIJ5G+GR4of6ygnXYMgrwTJbFaa +i0b1AgMBAAGjgYMwgYAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE +FPd9xf3E6Jobd2Sn9R2gzL+HYJptMD4GA1UdIAQ3MDUwMwYEVR0gADArMCkGCCsGAQUFBwIBFh1o +dHRwOi8vd3d3LmNlcnQuZm5tdC5lcy9kcGNzLzANBgkqhkiG9w0BAQsFAAOCAgEAB5BK3/MjTvDD +nFFlm5wioooMhfNzKWtN/gHiqQxjAb8EZ6WdmF/9ARP67Jpi6Yb+tmLSbkyU+8B1RXxlDPiyN8+s +D8+Nb/kZ94/sHvJwnvDKuO+3/3Y3dlv2bojzr2IyIpMNOmqOFGYMLVN0V2Ue1bLdI4E7pWYjJ2cJ +j+F3qkPNZVEI7VFY/uY5+ctHhKQV8Xa7pO6kO8Rf77IzlhEYt8llvhjho6Tc+hj507wTmzl6NLrT +Qfv6MooqtyuGC2mDOL7Nii4LcK2NJpLuHvUBKwrZ1pebbuCoGRw6IYsMHkCtA+fdZn71uSANA+iW ++YJF1DngoABd15jmfZ5nc8OaKveri6E6FO80vFIOiZiaBECEHX5FaZNXzuvO+FB8TxxuBEOb+dY7 +Ixjp6o7RTUaN8Tvkasq6+yO3m/qZASlaWFot4/nUbQ4mrcFuNLwy+AwF+mWj2zs3gyLp1txyM/1d +8iC9djwj2ij3+RvrWWTV3F9yfiD8zYm1kGdNYno/Tq0dwzn+evQoFt9B9kiABdcPUXmsEKvU7ANm +5mqwujGSQkBqvjrTcuFqN1W8rB2Vt2lh8kORdOag0wokRqEIr9baRRmW1FMdW4R58MD3R++Lj8UG +rp1MYp3/RgT408m2ECVAdf4WqslKYIYvuu8wd+RU4riEmViAqhOLUTpPSPaLtrM= +-----END CERTIFICATE----- + +Amazon Root CA 1 +================ +-----BEGIN CERTIFICATE----- +MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsFADA5MQswCQYD +VQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAxMB4XDTE1 +MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpv +bjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBALJ4gHHKeNXjca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgH +FzZM9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qwIFAGbHrQ +gLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6VOujw5H5SNz/0egwLX0t +dHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L93FcXmn/6pUCyziKrlA4b9v7LWIbxcce +VOF34GfID5yHI9Y/QCB/IIDEgEw+OyQmjgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB +/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3 +DQEBCwUAA4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDIU5PM +CCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUsN+gDS63pYaACbvXy +8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vvo/ufQJVtMVT8QtPHRh8jrdkPSHCa +2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2 +xJNDd2ZhwLnoQdeXeGADbkpyrqXRfboQnoZsG4q5WTP468SQvvG5 +-----END CERTIFICATE----- + +Amazon Root CA 2 +================ +-----BEGIN CERTIFICATE----- +MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwFADA5MQswCQYD +VQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAyMB4XDTE1 +MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpv +bjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC +ggIBAK2Wny2cSkxKgXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4 +kHbZW0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg1dKmSYXp +N+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K8nu+NQWpEjTj82R0Yiw9 +AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvd +fLC6HM783k81ds8P+HgfajZRRidhW+mez/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAEx +kv8LV/SasrlX6avvDXbR8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSS +btqDT6ZjmUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz7Mt0 +Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6+XUyo05f7O0oYtlN +c/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI0u1ufm8/0i2BWSlmy5A5lREedCf+ +3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSw +DPBMMPQFWAJI/TPlUq9LhONmUjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oA +A7CXDpO8Wqj2LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY ++gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kSk5Nrp+gvU5LE +YFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl7uxMMne0nxrpS10gxdr9HIcW +xkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygmbtmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQ +gj9sAq+uEjonljYE1x2igGOpm/HlurR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbW +aQbLU8uz/mtBzUF+fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoV +Yh63n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE76KlXIx3 +KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H9jVlpNMKVv/1F2Rs76gi +JUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT4PsJYGw= +-----END CERTIFICATE----- + +Amazon Root CA 3 +================ +-----BEGIN CERTIFICATE----- +MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5MQswCQYDVQQG +EwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAzMB4XDTE1MDUy +NjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZ +MBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZB +f8ANm+gBG1bG8lKlui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjr +Zt6jQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSrttvXBp43 +rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkrBqWTrBqYaGFy+uGh0Psc +eGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteMYyRIHN8wfdVoOw== +-----END CERTIFICATE----- + +Amazon Root CA 4 +================ +-----BEGIN CERTIFICATE----- +MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5MQswCQYDVQQG +EwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSA0MB4XDTE1MDUy +NjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZ +MBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN +/sGKe0uoe0ZLY7Bi9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri +83BkM6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV +HQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WBMAoGCCqGSM49BAMDA2gA +MGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlwCkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1 +AE47xDqUEpHJWEadIRNyp4iciuRMStuW1KyLa2tJElMzrdfkviT8tQp21KW8EA== +-----END CERTIFICATE----- + +LuxTrust Global Root 2 +====================== +-----BEGIN CERTIFICATE----- +MIIFwzCCA6ugAwIBAgIUCn6m30tEntpqJIWe5rgV0xZ/u7EwDQYJKoZIhvcNAQELBQAwRjELMAkG +A1UEBhMCTFUxFjAUBgNVBAoMDUx1eFRydXN0IFMuQS4xHzAdBgNVBAMMFkx1eFRydXN0IEdsb2Jh +bCBSb290IDIwHhcNMTUwMzA1MTMyMTU3WhcNMzUwMzA1MTMyMTU3WjBGMQswCQYDVQQGEwJMVTEW +MBQGA1UECgwNTHV4VHJ1c3QgUy5BLjEfMB0GA1UEAwwWTHV4VHJ1c3QgR2xvYmFsIFJvb3QgMjCC +AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANeFl78RmOnwYoNMPIf5U2o3C/IPPIfOb9wm +Kb3FibrJgz337spbxm1Jc7TJRqMbNBM/wYlFV/TZsfs2ZUv7COJIcRHIbjuend+JZTemhfY7RBi2 +xjcwYkSSl2l9QjAk5A0MiWtj3sXh306pFGxT4GHO9hcvHTy95iJMHZP1EMShduxq3sVs35a0VkBC +wGKSMKEtFZSg0iAGCW5qbeXrt77U8PEVfIvmTroTzEsnXpk8F12PgX8zPU/TPxvsXD/wPEx1bvKm +1Z3aLQdjAsZy6ZS8TEmVT4hSyNvoaYL4zDRbIvCGp4m9SAptZoFtyMhk+wHh9OHe2Z7d21vUKpkm +FRseTJIpgp7VkoGSQXAZ96Tlk0u8d2cx3Rz9MXANF5kM+Qw5GSoXtTBxVdUPrljhPS80m8+f9niF +wpN6cj5mj5wWEWCPnolvZ77gR1o7DJpni89Gxq44o/KnvObWhWszJHAiS8sIm7vI+AIpHb4gDEa/ +a4ebsypmQjVGbKq6rfmYe+lQVRQxv7HaLe2ArWgk+2mr2HETMOZns4dA/Yl+8kPREd8vZS9kzl8U +ubG/Mb2HeFpZZYiq/FkySIbWTLkpS5XTdvN3JW1CHDiDTf2jX5t/Lax5Gw5CMZdjpPuKadUiDTSQ +MC6otOBttpSsvItO13D8xTiOZCXhTTmQzsmHhFhxAgMBAAGjgagwgaUwDwYDVR0TAQH/BAUwAwEB +/zBCBgNVHSAEOzA5MDcGByuBKwEBAQowLDAqBggrBgEFBQcCARYeaHR0cHM6Ly9yZXBvc2l0b3J5 +Lmx1eHRydXN0Lmx1MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBT/GCh2+UgFLKGu8SsbK7JT ++Et8szAdBgNVHQ4EFgQU/xgodvlIBSyhrvErGyuyU/hLfLMwDQYJKoZIhvcNAQELBQADggIBAGoZ +FO1uecEsh9QNcH7X9njJCwROxLHOk3D+sFTAMs2ZMGQXvw/l4jP9BzZAcg4atmpZ1gDlaCDdLnIN +H2pkMSCEfUmmWjfrRcmF9dTHF5kH5ptV5AzoqbTOjFu1EVzPig4N1qx3gf4ynCSecs5U89BvolbW +7MM3LGVYvlcAGvI1+ut7MV3CwRI9loGIlonBWVx65n9wNOeD4rHh4bhY79SV5GCc8JaXcozrhAIu +ZY+kt9J/Z93I055cqqmkoCUUBpvsT34tC38ddfEz2O3OuHVtPlu5mB0xDVbYQw8wkbIEa91WvpWA +VWe+2M2D2RjuLg+GLZKecBPs3lHJQ3gCpU3I+V/EkVhGFndadKpAvAefMLmx9xIX3eP/JEAdemrR +TxgKqpAd60Ae36EeRJIQmvKN4dFLRp7oRUKX6kWZ8+xm1QL68qZKJKrezrnK+T+Tb/mjuuqlPpmt +/f97mfVl7vBZKGfXkJWkE4SphMHozs51k2MavDzq1WQfLSoSOcbDWjLtR5EWDrw4wVDej8oqkDQc +7kGUnF4ZLvhFSZl0kbAEb+MEWrGrKqv+x9CWttrhSmQGbmBNvUJO/3jaJMobtNeWOWyu8Q6qp31I +iyBMz2TWuJdGsE7RKlY6oJO9r4Ak4Ap+58rVyuiFVdw2KuGUaJPHZnJED4AhMmwlxyOAgwrr +-----END CERTIFICATE----- + +TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 +============================================= +-----BEGIN CERTIFICATE----- +MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIxGDAWBgNVBAcT +D0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxpbXNlbCB2ZSBUZWtub2xvamlr +IEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0wKwYDVQQLEyRLYW11IFNlcnRpZmlrYXN5b24g +TWVya2V6aSAtIEthbXUgU00xNjA0BgNVBAMTLVRVQklUQUsgS2FtdSBTTSBTU0wgS29rIFNlcnRp +ZmlrYXNpIC0gU3VydW0gMTAeFw0xMzExMjUwODI1NTVaFw00MzEwMjUwODI1NTVaMIHSMQswCQYD +VQQGEwJUUjEYMBYGA1UEBxMPR2ViemUgLSBLb2NhZWxpMUIwQAYDVQQKEzlUdXJraXllIEJpbGlt +c2VsIHZlIFRla25vbG9qaWsgQXJhc3Rpcm1hIEt1cnVtdSAtIFRVQklUQUsxLTArBgNVBAsTJEth +bXUgU2VydGlmaWthc3lvbiBNZXJrZXppIC0gS2FtdSBTTTE2MDQGA1UEAxMtVFVCSVRBSyBLYW11 +IFNNIFNTTCBLb2sgU2VydGlmaWthc2kgLSBTdXJ1bSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEAr3UwM6q7a9OZLBI3hNmNe5eA027n/5tQlT6QlVZC1xl8JoSNkvoBHToP4mQ4t4y8 +6Ij5iySrLqP1N+RAjhgleYN1Hzv/bKjFxlb4tO2KRKOrbEz8HdDc72i9z+SqzvBV96I01INrN3wc +wv61A+xXzry0tcXtAA9TNypN9E8Mg/uGz8v+jE69h/mniyFXnHrfA2eJLJ2XYacQuFWQfw4tJzh0 +3+f92k4S400VIgLI4OD8D62K18lUUMw7D8oWgITQUVbDjlZ/iSIzL+aFCr2lqBs23tPcLG07xxO9 +WSMs5uWk99gL7eqQQESolbuT1dCANLZGeA4fAJNG4e7p+exPFwIDAQABo0IwQDAdBgNVHQ4EFgQU +ZT/HiobGPN08VFw1+DrtUgxHV8gwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJ +KoZIhvcNAQELBQADggEBACo/4fEyjq7hmFxLXs9rHmoJ0iKpEsdeV31zVmSAhHqT5Am5EM2fKifh +AHe+SMg1qIGf5LgsyX8OsNJLN13qudULXjS99HMpw+0mFZx+CFOKWI3QSyjfwbPfIPP54+M638yc +lNhOT8NrF7f3cuitZjO1JVOr4PhMqZ398g26rrnZqsZr+ZO7rqu4lzwDGrpDxpa5RXI4s6ehlj2R +e37AIVNMh+3yC1SVUZPVIqUNivGTDj5UDrDYyU7c8jEyVupk+eq1nRZmQnLzf9OxMUP8pI4X8W0j +q5Rm+K37DwhuJi1/FwcJsoz7UMCflo3Ptv0AnVoUmr8CRPXBwp8iXqIPoeM= +-----END CERTIFICATE----- + +GDCA TrustAUTH R5 ROOT +====================== +-----BEGIN CERTIFICATE----- +MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UEBhMCQ04xMjAw +BgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZIENPLixMVEQuMR8wHQYDVQQD +DBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0MTEyNjA1MTMxNVoXDTQwMTIzMTE1NTk1OVow +YjELMAkGA1UEBhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ +IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEA2aMW8Mh0dHeb7zMNOwZ+Vfy1YI92hhJCfVZmPoiC7XJjDp6L3TQs +AlFRwxn9WVSEyfFrs0yw6ehGXTjGoqcuEVe6ghWinI9tsJlKCvLriXBjTnnEt1u9ol2x8kECK62p +OqPseQrsXzrj/e+APK00mxqriCZ7VqKChh/rNYmDf1+uKU49tm7srsHwJ5uu4/Ts765/94Y9cnrr +pftZTqfrlYwiOXnhLQiPzLyRuEH3FMEjqcOtmkVEs7LXLM3GKeJQEK5cy4KOFxg2fZfmiJqwTTQJ +9Cy5WmYqsBebnh52nUpmMUHfP/vFBu8btn4aRjb3ZGM74zkYI+dndRTVdVeSN72+ahsmUPI2JgaQ +xXABZG12ZuGR224HwGGALrIuL4xwp9E7PLOR5G62xDtw8mySlwnNR30YwPO7ng/Wi64HtloPzgsM +R6flPri9fcebNaBhlzpBdRfMK5Z3KpIhHtmVdiBnaM8Nvd/WHwlqmuLMc3GkL30SgLdTMEZeS1SZ +D2fJpcjyIMGC7J0R38IC+xo70e0gmu9lZJIQDSri3nDxGGeCjGHeuLzRL5z7D9Ar7Rt2ueQ5Vfj4 +oR24qoAATILnsn8JuLwwoC8N9VKejveSswoAHQBUlwbgsQfZxw9cZX08bVlX5O2ljelAU58VS6Bx +9hoh49pwBiFYFIeFd3mqgnkCAwEAAaNCMEAwHQYDVR0OBBYEFOLJQJ9NzuiaoXzPDj9lxSmIahlR +MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQDRSVfg +p8xoWLoBDysZzY2wYUWsEe1jUGn4H3++Fo/9nesLqjJHdtJnJO29fDMylyrHBYZmDRd9FBUb1Ov9 +H5r2XpdptxolpAqzkT9fNqyL7FeoPueBihhXOYV0GkLH6VsTX4/5COmSdI31R9KrO9b7eGZONn35 +6ZLpBN79SWP8bfsUcZNnL0dKt7n/HipzcEYwv1ryL3ml4Y0M2fmyYzeMN2WFcGpcWwlyua1jPLHd ++PwyvzeG5LuOmCd+uh8W4XAR8gPfJWIyJyYYMoSf/wA6E7qaTfRPuBRwIrHKK5DOKcFw9C+df/KQ +HtZa37dG/OaG+svgIHZ6uqbL9XzeYqWxi+7egmaKTjowHz+Ay60nugxe19CxVsp3cbK1daFQqUBD +F8Io2c9Si1vIY9RCPqAzekYu9wogRlR+ak8x8YF+QnQ4ZXMn7sZ8uI7XpTrXmKGcjBBV09tL7ECQ +8s1uV9JiDnxXk7Gnbc2dg7sq5+W2O3FYrf3RRbxake5TFW/TRQl1brqQXR4EzzffHqhmsYzmIGrv +/EhOdJhCrylvLmrH+33RZjEizIYAfmaDDEL0vTSSwxrqT8p+ck0LcIymSLumoRT2+1hEmRSuqguT +aaApJUqlyyvdimYHFngVV3Eb7PVHhPOeMTd61X8kreS8/f3MboPoDKi3QWwH3b08hpcv0g== +-----END CERTIFICATE----- + +TrustCor RootCert CA-1 +====================== +-----BEGIN CERTIFICATE----- +MIIEMDCCAxigAwIBAgIJANqb7HHzA7AZMA0GCSqGSIb3DQEBCwUAMIGkMQswCQYDVQQGEwJQQTEP +MA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEkMCIGA1UECgwbVHJ1c3RDb3Ig +U3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5UcnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3Jp +dHkxHzAdBgNVBAMMFlRydXN0Q29yIFJvb3RDZXJ0IENBLTEwHhcNMTYwMjA0MTIzMjE2WhcNMjkx +MjMxMTcyMzE2WjCBpDELMAkGA1UEBhMCUEExDzANBgNVBAgMBlBhbmFtYTEUMBIGA1UEBwwLUGFu +YW1hIENpdHkxJDAiBgNVBAoMG1RydXN0Q29yIFN5c3RlbXMgUy4gZGUgUi5MLjEnMCUGA1UECwwe +VHJ1c3RDb3IgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MR8wHQYDVQQDDBZUcnVzdENvciBSb290Q2Vy +dCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv463leLCJhJrMxnHQFgKq1mq +jQCj/IDHUHuO1CAmujIS2CNUSSUQIpidRtLByZ5OGy4sDjjzGiVoHKZaBeYei0i/mJZ0PmnK6bV4 +pQa81QBeCQryJ3pS/C3Vseq0iWEk8xoT26nPUu0MJLq5nux+AHT6k61sKZKuUbS701e/s/OojZz0 +JEsq1pme9J7+wH5COucLlVPat2gOkEz7cD+PSiyU8ybdY2mplNgQTsVHCJCZGxdNuWxu72CVEY4h +gLW9oHPY0LJ3xEXqWib7ZnZ2+AYfYW0PVcWDtxBWcgYHpfOxGgMFZA6dWorWhnAbJN7+KIor0Gqw +/Hqi3LJ5DotlDwIDAQABo2MwYTAdBgNVHQ4EFgQU7mtJPHo/DeOxCbeKyKsZn3MzUOcwHwYDVR0j +BBgwFoAU7mtJPHo/DeOxCbeKyKsZn3MzUOcwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AYYwDQYJKoZIhvcNAQELBQADggEBACUY1JGPE+6PHh0RU9otRCkZoB5rMZ5NDp6tPVxBb5UrJKF5 +mDo4Nvu7Zp5I/5CQ7z3UuJu0h3U/IJvOcs+hVcFNZKIZBqEHMwwLKeXx6quj7LUKdJDHfXLy11yf +ke+Ri7fc7Waiz45mO7yfOgLgJ90WmMCV1Aqk5IGadZQ1nJBfiDcGrVmVCrDRZ9MZyonnMlo2HD6C +qFqTvsbQZJG2z9m2GM/bftJlo6bEjhcxwft+dtvTheNYsnd6djtsL1Ac59v2Z3kf9YKVmgenFK+P +3CghZwnS1k1aHBkcjndcw5QkPTJrS37UeJSDvjdNzl/HHk484IkzlQsPpTLWPFp5LBk= +-----END CERTIFICATE----- + +TrustCor RootCert CA-2 +====================== +-----BEGIN CERTIFICATE----- +MIIGLzCCBBegAwIBAgIIJaHfyjPLWQIwDQYJKoZIhvcNAQELBQAwgaQxCzAJBgNVBAYTAlBBMQ8w +DQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQwIgYDVQQKDBtUcnVzdENvciBT +eXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRydXN0Q29yIENlcnRpZmljYXRlIEF1dGhvcml0 +eTEfMB0GA1UEAwwWVHJ1c3RDb3IgUm9vdENlcnQgQ0EtMjAeFw0xNjAyMDQxMjMyMjNaFw0zNDEy +MzExNzI2MzlaMIGkMQswCQYDVQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5h +bWEgQ2l0eTEkMCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U +cnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxHzAdBgNVBAMMFlRydXN0Q29yIFJvb3RDZXJ0 +IENBLTIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCnIG7CKqJiJJWQdsg4foDSq8Gb +ZQWU9MEKENUCrO2fk8eHyLAnK0IMPQo+QVqedd2NyuCb7GgypGmSaIwLgQ5WoD4a3SwlFIIvl9Nk +RvRUqdw6VC0xK5mC8tkq1+9xALgxpL56JAfDQiDyitSSBBtlVkxs1Pu2YVpHI7TYabS3OtB0PAx1 +oYxOdqHp2yqlO/rOsP9+aij9JxzIsekp8VduZLTQwRVtDr4uDkbIXvRR/u8OYzo7cbrPb1nKDOOb +XUm4TOJXsZiKQlecdu/vvdFoqNL0Cbt3Nb4lggjEFixEIFapRBF37120Hapeaz6LMvYHL1cEksr1 +/p3C6eizjkxLAjHZ5DxIgif3GIJ2SDpxsROhOdUuxTTCHWKF3wP+TfSvPd9cW436cOGlfifHhi5q +jxLGhF5DUVCcGZt45vz27Ud+ez1m7xMTiF88oWP7+ayHNZ/zgp6kPwqcMWmLmaSISo5uZk3vFsQP +eSghYA2FFn3XVDjxklb9tTNMg9zXEJ9L/cb4Qr26fHMC4P99zVvh1Kxhe1fVSntb1IVYJ12/+Ctg +rKAmrhQhJ8Z3mjOAPF5GP/fDsaOGM8boXg25NSyqRsGFAnWAoOsk+xWq5Gd/bnc/9ASKL3x74xdh +8N0JqSDIvgmk0H5Ew7IwSjiqqewYmgeCK9u4nBit2uBGF6zPXQIDAQABo2MwYTAdBgNVHQ4EFgQU +2f4hQG6UnrybPZx9mCAZ5YwwYrIwHwYDVR0jBBgwFoAU2f4hQG6UnrybPZx9mCAZ5YwwYrIwDwYD +VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggIBAJ5Fngw7tu/h +Osh80QA9z+LqBrWyOrsGS2h60COXdKcs8AjYeVrXWoSK2BKaG9l9XE1wxaX5q+WjiYndAfrs3fnp +kpfbsEZC89NiqpX+MWcUaViQCqoL7jcjx1BRtPV+nuN79+TMQjItSQzL/0kMmx40/W5ulop5A7Zv +2wnL/V9lFDfhOPXzYRZY5LVtDQsEGz9QLX+zx3oaFoBg+Iof6Rsqxvm6ARppv9JYx1RXCI/hOWB3 +S6xZhBqI8d3LT3jX5+EzLfzuQfogsL7L9ziUwOHQhQ+77Sxzq+3+knYaZH9bDTMJBzN7Bj8RpFxw +PIXAz+OQqIN3+tvmxYxoZxBnpVIt8MSZj3+/0WvitUfW2dCFmU2Umw9Lje4AWkcdEQOsQRivh7dv +DDqPys/cA8GiCcjl/YBeyGBCARsaU1q7N6a3vLqE6R5sGtRk2tRD/pOLS/IseRYQ1JMLiI+h2IYU +RpFHmygk71dSTlxCnKr3Sewn6EAes6aJInKc9Q0ztFijMDvd1GpUk74aTfOTlPf8hAs/hCBcNANE +xdqtvArBAs8e5ZTZ845b2EzwnexhF7sUMlQMAimTHpKG9n/v55IFDlndmQguLvqcAFLTxWYp5KeX +RKQOKIETNcX2b2TmQcTVL8w0RSXPQQCWPUouwpaYT05KnJe32x+SMsj/D1Fu1uwJ +-----END CERTIFICATE----- + +TrustCor ECA-1 +============== +-----BEGIN CERTIFICATE----- +MIIEIDCCAwigAwIBAgIJAISCLF8cYtBAMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYDVQQGEwJQQTEP +MA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEkMCIGA1UECgwbVHJ1c3RDb3Ig +U3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5UcnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3Jp +dHkxFzAVBgNVBAMMDlRydXN0Q29yIEVDQS0xMB4XDTE2MDIwNDEyMzIzM1oXDTI5MTIzMTE3Mjgw +N1owgZwxCzAJBgNVBAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5 +MSQwIgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRydXN0Q29y +IENlcnRpZmljYXRlIEF1dGhvcml0eTEXMBUGA1UEAwwOVHJ1c3RDb3IgRUNBLTEwggEiMA0GCSqG +SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj+ARtZ+odnbb3w9U73NjKYKtR8aja+3+XzP4Q1HpGjOR +MRegdMTUpwHmspI+ap3tDvl0mEDTPwOABoJA6LHip1GnHYMma6ve+heRK9jGrB6xnhkB1Zem6g23 +xFUfJ3zSCNV2HykVh0A53ThFEXXQmqc04L/NyFIduUd+Dbi7xgz2c1cWWn5DkR9VOsZtRASqnKmc +p0yJF4OuowReUoCLHhIlERnXDH19MURB6tuvsBzvgdAsxZohmz3tQjtQJvLsznFhBmIhVE5/wZ0+ +fyCMgMsq2JdiyIMzkX2woloPV+g7zPIlstR8L+xNxqE6FXrntl019fZISjZFZtS6mFjBAgMBAAGj +YzBhMB0GA1UdDgQWBBREnkj1zG1I1KBLf/5ZJC+Dl5mahjAfBgNVHSMEGDAWgBREnkj1zG1I1KBL +f/5ZJC+Dl5mahjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsF +AAOCAQEABT41XBVwm8nHc2FvcivUwo/yQ10CzsSUuZQRg2dd4mdsdXa/uwyqNsatR5Nj3B5+1t4u +/ukZMjgDfxT2AHMsWbEhBuH7rBiVDKP/mZb3Kyeb1STMHd3BOuCYRLDE5D53sXOpZCz2HAF8P11F +hcCF5yWPldwX8zyfGm6wyuMdKulMY/okYWLW2n62HGz1Ah3UKt1VkOsqEUc8Ll50soIipX1TH0Xs +J5F95yIW6MBoNtjG8U+ARDL54dHRHareqKucBK+tIA5kmE2la8BIWJZpTdwHjFGTot+fDz2LYLSC +jaoITmJF4PkL0uDgPFveXHEnJcLmA4GLEFPjx1WitJ/X5g== +-----END CERTIFICATE----- + +SSL.com Root Certification Authority RSA +======================================== +-----BEGIN CERTIFICATE----- +MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxDjAM +BgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24x +MTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBSU0EwHhcNMTYw +MjEyMTczOTM5WhcNNDEwMjEyMTczOTM5WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMx +EDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NM +LmNvbSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTCCAiIwDQYJKoZIhvcNAQEBBQAD +ggIPADCCAgoCggIBAPkP3aMrfcvQKv7sZ4Wm5y4bunfh4/WvpOz6Sl2RxFdHaxh3a3by/ZPkPQ/C +Fp4LZsNWlJ4Xg4XOVu/yFv0AYvUiCVToZRdOQbngT0aXqhvIuG5iXmmxX9sqAn78bMrzQdjt0Oj8 +P2FI7bADFB0QDksZ4LtO7IZl/zbzXmcCC52GVWH9ejjt/uIZALdvoVBidXQ8oPrIJZK0bnoix/ge +oeOy3ZExqysdBP+lSgQ36YWkMyv94tZVNHwZpEpox7Ko07fKoZOI68GXvIz5HdkihCR0xwQ9aqkp +k8zruFvh/l8lqjRYyMEjVJ0bmBHDOJx+PYZspQ9AhnwC9FwCTyjLrnGfDzrIM/4RJTXq/LrFYD3Z +fBjVsqnTdXgDciLKOsMf7yzlLqn6niy2UUb9rwPW6mBo6oUWNmuF6R7As93EJNyAKoFBbZQ+yODJ +gUEAnl6/f8UImKIYLEJAs/lvOCdLToD0PYFH4Ih86hzOtXVcUS4cK38acijnALXRdMbX5J+tB5O2 +UzU1/Dfkw/ZdFr4hc96SCvigY2q8lpJqPvi8ZVWb3vUNiSYE/CUapiVpy8JtynziWV+XrOvvLsi8 +1xtZPCvM8hnIk2snYxnP/Okm+Mpxm3+T/jRnhE6Z6/yzeAkzcLpmpnbtG3PrGqUNxCITIJRWCk4s +bE6x/c+cCbqiM+2HAgMBAAGjYzBhMB0GA1UdDgQWBBTdBAkHovV6fVJTEpKV7jiAJQ2mWTAPBgNV +HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFN0ECQei9Xp9UlMSkpXuOIAlDaZZMA4GA1UdDwEB/wQE +AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAIBgRlCn7Jp0cHh5wYfGVcpNxJK1ok1iOMq8bs3AD/CUr +dIWQPXhq9LmLpZc7tRiRux6n+UBbkflVma8eEdBcHadm47GUBwwyOabqG7B52B2ccETjit3E+ZUf +ijhDPwGFpUenPUayvOUiaPd7nNgsPgohyC0zrL/FgZkxdMF1ccW+sfAjRfSda/wZY52jvATGGAsl +u1OJD7OAUN5F7kR/q5R4ZJjT9ijdh9hwZXT7DrkT66cPYakylszeu+1jTBi7qUD3oFRuIIhxdRjq +erQ0cuAjJ3dctpDqhiVAq+8zD8ufgr6iIPv2tS0a5sKFsXQP+8hlAqRSAUfdSSLBv9jra6x+3uxj +MxW3IwiPxg+NQVrdjsW5j+VFP3jbutIbQLH+cU0/4IGiul607BXgk90IH37hVZkLId6Tngr75qNJ +vTYw/ud3sqB1l7UtgYgXZSD32pAAn8lSzDLKNXz1PQ/YK9f1JmzJBjSWFupwWRoyeXkLtoh/D1JI +Pb9s2KJELtFOt3JY04kTlf5Eq/jXixtunLwsoFvVagCvXzfh1foQC5ichucmj87w7G6KVwuA406y +wKBjYZC6VWg3dGq2ktufoYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NI +WuuA8ShYIc2wBlX7Jz9TkHCpBB5XJ7k= +-----END CERTIFICATE----- + +SSL.com Root Certification Authority ECC +======================================== +-----BEGIN CERTIFICATE----- +MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMCVVMxDjAMBgNV +BAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24xMTAv +BgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEy +MTgxNDAzWhcNNDEwMjEyMTgxNDAzWjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAO +BgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNv +bSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuBBAAiA2IA +BEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI7Z4INcgn64mMU1jrYor+ +8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPgCemB+vNH06NjMGEwHQYDVR0OBBYEFILR +hXMw5zUE044CkvvlpNHEIejNMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTT +jgKS++Wk0cQh6M0wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCW +e+0F+S8Tkdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+gA0z +5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl +-----END CERTIFICATE----- + +SSL.com EV Root Certification Authority RSA R2 +============================================== +-----BEGIN CERTIFICATE----- +MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAlVTMQ4w +DAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9u +MTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy +MB4XDTE3MDUzMTE4MTQzN1oXDTQyMDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQI +DAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYD +VQQDDC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMIICIjAN +BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvqM0fNTPl9fb69LT3w23jh +hqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssufOePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7w +cXHswxzpY6IXFJ3vG2fThVUCAtZJycxa4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTO +Zw+oz12WGQvE43LrrdF9HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+ +B6KjBSYRaZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcAb9Zh +CBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQGp8hLH94t2S42Oim +9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQVPWKchjgGAGYS5Fl2WlPAApiiECto +RHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMOpgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+Slm +JuwgUHfbSguPvuUCYHBBXtSuUDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48 ++qvWBkofZ6aYMBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV +HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa49QaAJadz20Zp +qJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBWs47LCp1Jjr+kxJG7ZhcFUZh1 +++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nx +Y/hoLVUE0fKNsKTPvDxeH3jnpaAgcLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2G +guDKBAdRUNf/ktUM79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDz +OFSz/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXtll9ldDz7 +CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEmKf7GUmG6sXP/wwyc5Wxq +lD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKKQbNmC1r7fSOl8hqw/96bg5Qu0T/fkreR +rwU7ZcegbLHNYhLDkBvjJc40vG93drEQw/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1 +hlMYegouCRw2n5H9gooiS9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX +9hwJ1C07mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w== +-----END CERTIFICATE----- + +SSL.com EV Root Certification Authority ECC +=========================================== +-----BEGIN CERTIFICATE----- +MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMCVVMxDjAMBgNV +BAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24xNDAy +BgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYw +MjEyMTgxNTIzWhcNNDEwMjEyMTgxNTIzWjB/MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMx +EDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE0MDIGA1UEAwwrU1NM +LmNvbSBFViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB +BAAiA2IABKoSR5CYG/vvw0AHgyBO8TCCogbR8pKGYfL2IWjKAMTH6kMAVIbc/R/fALhBYlzccBYy +3h+Z1MzFB8gIH2EWB1E9fVwHU+M1OIzfzZ/ZLg1KthkuWnBaBu2+8KGwytAJKaNjMGEwHQYDVR0O +BBYEFFvKXuXe0oGqzagtZFG22XKbl+ZPMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUW8pe +5d7SgarNqC1kUbbZcpuX5k8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2gAMGUCMQCK5kCJ +N+vp1RPZytRrJPOwPYdGWBrssd9v+1a6cGvHOMzosYxPD/fxZ3YOg9AeUY8CMD32IygmTMZgh5Mm +m7I1HrrW9zzRHM76JTymGoEVW/MSD2zuZYrJh6j5B+BimoxcSg== +-----END CERTIFICATE----- + +GlobalSign Root CA - R6 +======================= +-----BEGIN CERTIFICATE----- +MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEgMB4GA1UECxMX +R2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkds +b2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQxMjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9i +YWxTaWduIFJvb3QgQ0EgLSBSNjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFs +U2lnbjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQss +grRIxutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1kZguSgMpE +3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxDaNc9PIrFsmbVkJq3MQbF +vuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJwLnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqM +PKq0pPbzlUoSB239jLKJz9CgYXfIWHSw1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+ +azayOeSsJDa38O+2HBNXk7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05O +WgtH8wY2SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/hbguy +CLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4nWUx2OVvq+aWh2IMP +0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpYrZxCRXluDocZXFSxZba/jJvcE+kN +b7gu3GduyYsRtYQUigAZcIN5kZeR1BonvzceMgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQE +AwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNV +HSMEGDAWgBSubAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN +nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGtIxg93eFyRJa0 +lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr6155wsTLxDKZmOMNOsIeDjHfrY +BzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLjvUYAGm0CuiVdjaExUd1URhxN25mW7xocBFym +Fe944Hn+Xds+qkxV/ZoVqW/hpvvfcDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr +3TsTjxKM4kEaSHpzoHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB1 +0jZpnOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfspA9MRf/T +uTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+vJJUEeKgDu+6B5dpffItK +oZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+t +JDfLRVpOoERIyNiwmcUVhAn21klJwGW45hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA= +-----END CERTIFICATE----- + +OISTE WISeKey Global Root GC CA +=============================== +-----BEGIN CERTIFICATE----- +MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJD +SDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNlZDEo +MCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwgUm9vdCBHQyBDQTAeFw0xNzA1MDkwOTQ4MzRa +Fw00MjA1MDkwOTU4MzNaMG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQL +ExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2Jh +bCBSb290IEdDIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAETOlQwMYPchi82PG6s4nieUqjFqdr +VCTbUf/q9Akkwwsin8tqJ4KBDdLArzHkdIJuyiXZjHWd8dvQmqJLIX4Wp2OQ0jnUsYd4XxiWD1Ab +NTcPasbc2RNNpI6QN+a9WzGRo1QwUjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd +BgNVHQ4EFgQUSIcUrOPDnpBgOtfKie7TrYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0E +AwMDaAAwZQIwJsdpW9zV57LnyAyMjMPdeYwbY9XJUpROTYJKcx6ygISpJcBMWm1JKWB4E+J+SOtk +AjEA2zQgMgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9 +-----END CERTIFICATE----- + +GTS Root R1 +=========== +-----BEGIN CERTIFICATE----- +MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBHMQswCQYDVQQG +EwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJv +b3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAG +A1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx +9vaMf/vo27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vXmX7wCl7r +aKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7zUjwTcLCeoiKu7rPWRnW +r4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0PfyblqAj+lug8aJRT7oM6iCsVlgmy4HqM +LnXWnOunVmSPlk9orj2XwoSPwLxAwAtcvfaHszVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly +4cpk9+aCEI3oncKKiPo4Zor8Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr +06zqkUspzBmkMiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOORc92 +wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYWk70paDPvOmbsB4om +3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+DVrNVjzRlwW5y0vtOUucxD/SVRNu +JLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgFlQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD +VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEM +BQADggIBADiWCu49tJYeX++dnAsznyvgyv3SjgofQXSlfKqE1OXyHuY3UjKcC9FhHb8owbZEKTV1 +d5iyfNm9dKyKaOOpMQkpAWBz40d8U6iQSifvS9efk+eCNs6aaAyC58/UEBZvXw6ZXPYfcX3v73sv +fuo21pdwCxXu11xWajOl40k4DLh9+42FpLFZXvRq4d2h9mREruZRgyFmxhE+885H7pwoHyXa/6xm +ld01D1zvICxi/ZG6qcz8WpyTgYMpl0p8WnK0OdC3d8t5/Wk6kjftbjhlRn7pYL15iJdfOBL07q9b +gsiG1eGZbYwE8na6SfZu6W0eX6DvJ4J2QPim01hcDyxC2kLGe4g0x8HYRZvBPsVhHdljUEn2NIVq +4BjFbkerQUIpm/ZgDdIx02OYI5NaAIFItO/Nis3Jz5nu2Z6qNuFoS3FJFDYoOj0dzpqPJeaAcWEr +tXvM+SUWgeExX6GjfhaknBZqlxi9dnKlC54dNuYvoS++cJEPqOba+MSSQGwlfnuzCdyyF62ARPBo +pY+Udf90WuioAnwMCeKpSwughQtiue+hMZL77/ZRBIls6Kl0obsXs7X9SQ98POyDGCBDTtWTurQ0 +sR8WNh8M5mQ5Fkzc4P4dyKliPUDqysU0ArSuiYgzNdwsE3PYJ/HQcu51OyLemGhmW/HGY0dVHLql +CFF1pkgl +-----END CERTIFICATE----- + +GTS Root R2 +=========== +-----BEGIN CERTIFICATE----- +MIIFWjCCA0KgAwIBAgIQbkepxlqz5yDFMJo/aFLybzANBgkqhkiG9w0BAQwFADBHMQswCQYDVQQG +EwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJv +b3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAG +A1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTuk +k3LvCvptnfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY6Dlo +7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAuMC6C/Pq8tBcKSOWI +m8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7kRXuJVfeKH2JShBKzwkCX44ofR5Gm +dFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWgf9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbu +ak7MkogwTZq9TwtImoS1mKPV+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscsz +cTJGr61K8YzodDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW +Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKaG73Vululycsl +aVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCqgc7dGtxRcw1PcOnlthYhGXmy +5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD +VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEM +BQADggIBALZp8KZ3/p7uC4Gt4cCpx/k1HUCCq+YEtN/L9x0Pg/B+E02NjO7jMyLDOfxA325BS0JT +vhaI8dI4XsRomRyYUpOM52jtG2pzegVATX9lO9ZY8c6DR2Dj/5epnGB3GFW1fgiTz9D2PGcDFWEJ ++YF59exTpJ/JjwGLc8R3dtyDovUMSRqodt6Sm2T4syzFJ9MHwAiApJiS4wGWAqoC7o87xdFtCjMw +c3i5T1QWvwsHoaRc5svJXISPD+AVdyx+Jn7axEvbpxZ3B7DNdehyQtaVhJ2Gg/LkkM0JR9SLA3Da +WsYDQvTtN6LwG1BUSw7YhN4ZKJmBR64JGz9I0cNv4rBgF/XuIwKl2gBbbZCr7qLpGzvpx0QnRY5r +n/WkhLx3+WuXrD5RRaIRpsyF7gpo8j5QOHokYh4XIDdtak23CZvJ/KRY9bb7nE4Yu5UC56Gtmwfu +Nmsk0jmGwZODUNKBRqhfYlcsu2xkiAhu7xNUX90txGdj08+JN7+dIPT7eoOboB6BAFDC5AwiWVIQ +7UNWhwD4FFKnHYuTjKJNRn8nxnGbJN7k2oaLDX5rIMHAnuFl2GqjpuiFizoHCBy69Y9Vmhh1fuXs +gWbRIXOhNUQLgD1bnF5vKheW0YMjiGZt5obicDIvUiLnyOd/xCxgXS/Dr55FBcOEArf9LAhST4Ld +o/DUhgkC +-----END CERTIFICATE----- + +GTS Root R3 +=========== +-----BEGIN CERTIFICATE----- +MIICDDCCAZGgAwIBAgIQbkepx2ypcyRAiQ8DVd2NHTAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJV +UzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3Qg +UjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UE +ChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcq +hkjOPQIBBgUrgQQAIgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUU +Rout736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL24Cej +QjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTB8Sa6oC2uhYHP +0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEAgFukfCPAlaUs3L6JbyO5o91lAFJekazInXJ0 +glMLfalAvWhgxeG4VDvBNhcl2MG9AjEAnjWSdIUlUfUk7GRSJFClH9voy8l27OyCbvWFGFPouOOa +KaqW04MjyaR7YbPMAuhd +-----END CERTIFICATE----- + +GTS Root R4 +=========== +-----BEGIN CERTIFICATE----- +MIICCjCCAZGgAwIBAgIQbkepyIuUtui7OyrYorLBmTAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJV +UzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3Qg +UjQwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UE +ChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQwdjAQBgcq +hkjOPQIBBgUrgQQAIgNiAATzdHOnaItgrkO4NcWBMHtLSZ37wWHO5t5GvWvVYRg1rkDdc/eJkTBa +6zzuhXyiQHY7qca4R9gq55KRanPpsXI5nymfopjTX15YhmUPoYRlBtHci8nHc8iMai/lxKvRHYqj +QjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSATNbrdP9JNqPV +2Py1PsVq8JQdjDAKBggqhkjOPQQDAwNnADBkAjBqUFJ0CMRw3J5QdCHojXohw0+WbhXRIjVhLfoI +N+4Zba3bssx9BzT1YBkstTTZbyACMANxsbqjYAuG7ZoIapVon+Kz4ZNkfF6Tpt95LY2F45TPI11x +zPKwTdb+mciUqXWi4w== +-----END CERTIFICATE----- + +UCA Global G2 Root +================== +-----BEGIN CERTIFICATE----- +MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9MQswCQYDVQQG +EwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBHbG9iYWwgRzIgUm9vdDAeFw0x +NjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0xCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlU +cnVzdDEbMBkGA1UEAwwSVUNBIEdsb2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEAxeYrb3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmT +oni9kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzmVHqUwCoV +8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/RVogvGjqNO7uCEeBHANBS +h6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDcC/Vkw85DvG1xudLeJ1uK6NjGruFZfc8o +LTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIjtm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/ +R+zvWr9LesGtOxdQXGLYD0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBe +KW4bHAyvj5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6DlNaBa +4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6iIis7nCs+dwp4wwc +OxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznPO6Q0ibd5Ei9Hxeepl2n8pndntd97 +8XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O +BBYEFIHEjMz15DD/pQwIX4wVZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo +5sOASD0Ee/ojL3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5 +1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl1qnN3e92mI0A +Ds0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oUb3n09tDh05S60FdRvScFDcH9 +yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LVPtateJLbXDzz2K36uGt/xDYotgIVilQsnLAX +c47QN6MUPJiVAAwpBVueSUmxX8fjy88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHo +jhJi6IjMtX9Gl8CbEGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZk +bxqgDMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI+Vg7RE+x +ygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGyYiGqhkCyLmTTX8jjfhFn +RR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bXUB+K+wb1whnw0A== +-----END CERTIFICATE----- + +UCA Extended Validation Root +============================ +-----BEGIN CERTIFICATE----- +MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQG +EwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9u +IFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMxMDAwMDAwWjBHMQswCQYDVQQGEwJDTjERMA8G +A1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpCQcoEwKwmeBkqh5DFnpzsZGgdT6o+uM4AHrs +iWogD4vFsJszA1qGxliG1cGFu0/GnEBNyr7uaZa4rYEwmnySBesFK5pI0Lh2PpbIILvSsPGP2KxF +Rv+qZ2C0d35qHzwaUnoEPQc8hQ2E0B92CvdqFN9y4zR8V05WAT558aopO2z6+I9tTcg1367r3CTu +eUWnhbYFiN6IXSV8l2RnCdm/WhUFhvMJHuxYMjMR83dksHYf5BA1FxvyDrFspCqjc/wJHx4yGVMR +59mzLC52LqGj3n5qiAno8geK+LLNEOfic0CTuwjRP+H8C5SzJe98ptfRr5//lpr1kXuYC3fUfugH +0mK1lTnj8/FtDw5lhIpjVMWAtuCeS31HJqcBCF3RiJ7XwzJE+oJKCmhUfzhTA8ykADNkUVkLo4KR +el7sFsLzKuZi2irbWWIQJUoqgQtHB0MGcIfS+pMRKXpITeuUx3BNr2fVUbGAIAEBtHoIppB/TuDv +B0GHr2qlXov7z1CymlSvw4m6WC31MJixNnI5fkkE/SmnTHnkBVfblLkWU41Gsx2VYVdWf6/wFlth +WG82UBEL2KwrlRYaDh8IzTY0ZRBiZtWAXxQgXy0MoHgKaNYs1+lvK9JKBZP8nm9rZ/+I8U6laUpS +NwXqxhaN0sSZ0YIrO7o1dfdRUVjzyAfd5LQDfwIDAQABo0IwQDAdBgNVHQ4EFgQU2XQ65DA9DfcS +3H5aBZ8eNJr34RQwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQEL +BQADggIBADaNl8xCFWQpN5smLNb7rhVpLGsaGvdftvkHTFnq88nIua7Mui563MD1sC3AO6+fcAUR +ap8lTwEpcOPlDOHqWnzcSbvBHiqB9RZLcpHIojG5qtr8nR/zXUACE/xOHAbKsxSQVBcZEhrxH9cM +aVr2cXj0lH2RC47skFSOvG+hTKv8dGT9cZr4QQehzZHkPJrgmzI5c6sq1WnIeJEmMX3ixzDx/BR4 +dxIOE/TdFpS/S2d7cFOFyrC78zhNLJA5wA3CXWvp4uXViI3WLL+rG761KIcSF3Ru/H38j9CHJrAb ++7lsq+KePRXBOy5nAliRn+/4Qh8st2j1da3Ptfb/EX3C8CSlrdP6oDyp+l3cpaDvRKS+1ujl5BOW +F3sGPjLtx7dCvHaj2GU4Kzg1USEODm8uNBNA4StnDG1KQTAYI1oyVZnJF+A83vbsea0rWBmirSwi +GpWOvpaQXUJXxPkUAzUrHC1RVwinOt4/5Mi0A3PCwSaAuwtCH60NryZy2sy+s6ODWA2CxR9GUeOc +GMyNm43sSet1UNWMKFnKdDTajAshqx7qG+XH/RU+wBeq+yNuJkbL+vmxcmtpzyKEC2IPrNkZAJSi +djzULZrtBJ4tBmIQN1IchXIbJ+XMxjHsN+xjWZsLHXbMfjKaiJUINlK73nZfdklJrX+9ZSCyycEr +dhh2n1ax +-----END CERTIFICATE----- + +Certigna Root CA +================ +-----BEGIN CERTIFICATE----- +MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UE +BhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAwMiA0ODE0NjMwODEwMDAzNjEZ +MBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0xMzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjda +MFoxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYz +MDgxMDAwMzYxGTAXBgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sOty3tRQgX +stmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9MCiBtnyN6tMbaLOQdLNyz +KNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPuI9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8 +JXrJhFwLrN1CTivngqIkicuQstDuI7pmTLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16 +XdG+RCYyKfHx9WzMfgIhC59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq +4NYKpkDfePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3YzIoej +wpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWTCo/1VTp2lc5ZmIoJ +lXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1kJWumIWmbat10TWuXekG9qxf5kBdI +jzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp/ +/TBt2dzhauH8XwIDAQABo4IBGjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw +HQYDVR0OBBYEFBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of +1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczovL3d3d3cuY2Vy +dGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilodHRwOi8vY3JsLmNlcnRpZ25h +LmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYraHR0cDovL2NybC5kaGlteW90aXMuY29tL2Nl +cnRpZ25hcm9vdGNhLmNybDANBgkqhkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOIt +OoldaDgvUSILSo3L6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxP +TGRGHVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH60BGM+RFq +7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncBlA2c5uk5jR+mUYyZDDl3 +4bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdio2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd +8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS +6Cvu5zHbugRqh5jnxV/vfaci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaY +tlu3zM63Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayhjWZS +aX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw3kAP+HwV96LOPNde +E4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= +-----END CERTIFICATE----- + +emSign Root CA - G1 +=================== +-----BEGIN CERTIFICATE----- +MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYDVQQGEwJJTjET +MBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRl +ZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBHMTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgx +ODMwMDBaMGcxCzAJBgNVBAYTAklOMRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVk +aHJhIFRlY2hub2xvZ2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIB +IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQzf2N4aLTN +LnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO8oG0x5ZOrRkVUkr+PHB1 +cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aqd7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHW +DV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhMtTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ +6DqS0hdW5TUaQBw+jSztOd9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrH +hQIDAQABo0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQDAgEG +MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31xPaOfG1vR2vjTnGs2 +vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjMwiI/aTvFthUvozXGaCocV685743Q +NcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6dGNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q ++Mri/Tm3R7nrft8EI6/6nAYH6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeih +U80Bv2noWgbyRQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx +iN66zB+Afko= +-----END CERTIFICATE----- + +emSign ECC Root CA - G3 +======================= +-----BEGIN CERTIFICATE----- +MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQGEwJJTjETMBEG +A1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEg +MB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4 +MTgzMDAwWjBrMQswCQYDVQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11 +ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g +RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0WXTsuwYc +58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xySfvalY8L1X44uT6EYGQIr +MgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuBzhccLikenEhjQjAOBgNVHQ8BAf8EBAMC +AQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+D +CBeQyh+KTOgNG3qxrdWBCUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7 +jHvrZQnD+JbNR6iC8hZVdyR+EhCVBCyj +-----END CERTIFICATE----- + +emSign Root CA - C1 +=================== +-----BEGIN CERTIFICATE----- +MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkGA1UEBhMCVVMx +EzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNp +Z24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAwMFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UE +BhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQD +ExNlbVNpZ24gUm9vdCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+up +ufGZBczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZHdPIWoU/ +Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH3DspVpNqs8FqOp099cGX +OFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvHGPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4V +I5b2P/AgNBbeCsbEBEV5f6f9vtKppa+cxSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleooms +lMuoaJuvimUnzYnu3Yy1aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+ +XJGFehiqTbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQAD +ggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87/kOXSTKZEhVb3xEp +/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4kqNPEjE2NuLe/gDEo2APJ62gsIq1 +NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrGYQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9 +wC68AivTxEDkigcxHpvOJpkT+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQ +BmIMMMAVSKeoWXzhriKi4gp6D/piq1JM4fHfyr6DDUI= +-----END CERTIFICATE----- + +emSign ECC Root CA - C3 +======================= +-----BEGIN CERTIFICATE----- +MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQGEwJVUzETMBEG +A1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMxIDAeBgNVBAMTF2VtU2lnbiBF +Q0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAwMFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UE +BhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQD +ExdlbVNpZ24gRUNDIFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd +6bciMK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4OjavtisIGJAnB9 +SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0OBBYEFPtaSNCAIEDyqOkA +B2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MAoGCCqGSM49BAMDA2gA +MGUCMQC02C8Cif22TGK6Q04ThHK1rt0c3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwU +ZOR8loMRnLDRWmFLpg9J0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ== +-----END CERTIFICATE----- + +Hongkong Post Root CA 3 +======================= +-----BEGIN CERTIFICATE----- +MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQELBQAwbzELMAkG +A1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJSG9uZyBLb25nMRYwFAYDVQQK +Ew1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQb3N0IFJvb3QgQ0EgMzAeFw0xNzA2 +MDMwMjI5NDZaFw00MjA2MDMwMjI5NDZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtv +bmcxEjAQBgNVBAcTCUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMX +SG9uZ2tvbmcgUG9zdCBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz +iNfqzg8gTr7m1gNt7ln8wlffKWihgw4+aMdoWJwcYEuJQwy51BWy7sFOdem1p+/l6TWZ5Mwc50tf +jTMwIDNT2aa71T4Tjukfh0mtUC1Qyhi+AViiE3CWu4mIVoBc+L0sPOFMV4i707mV78vH9toxdCim +5lSJ9UExyuUmGs2C4HDaOym71QP1mbpV9WTRYA6ziUm4ii8F0oRFKHyPaFASePwLtVPLwpgchKOe +sL4jpNrcyCse2m5FHomY2vkALgbpDDtw1VAliJnLzXNg99X/NWfFobxeq81KuEXryGgeDQ0URhLj +0mRiikKYvLTGCAj4/ahMZJx2Ab0vqWwzD9g/KLg8aQFChn5pwckGyuV6RmXpwtZQQS4/t+TtbNe/ +JgERohYpSms0BpDsE9K2+2p20jzt8NYt3eEV7KObLyzJPivkaTv/ciWxNoZbx39ri1UbSsUgYT2u +y1DhCDq+sI9jQVMwCFk8mB13umOResoQUGC/8Ne8lYePl8X+l2oBlKN8W4UdKjk60FSh0Tlxnf0h ++bV78OLgAo9uliQlLKAeLKjEiafv7ZkGL7YKTE/bosw3Gq9HhS2KX8Q0NEwA/RiTZxPRN+ZItIsG +xVd7GYYKecsAyVKvQv83j+GjHno9UKtjBucVtT+2RTeUN7F+8kjDf8V1/peNRY8apxpyKBpADwID +AQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQXnc0e +i9Y5K3DTXNSguB+wAPzFYTAdBgNVHQ4EFgQUF53NHovWOStw01zUoLgfsAD8xWEwDQYJKoZIhvcN +AQELBQADggIBAFbVe27mIgHSQpsY1Q7XZiNc4/6gx5LS6ZStS6LG7BJ8dNVI0lkUmcDrudHr9Egw +W62nV3OZqdPlt9EuWSRY3GguLmLYauRwCy0gUCCkMpXRAJi70/33MvJJrsZ64Ee+bs7Lo3I6LWld +y8joRTnU+kLBEUx3XZL7av9YROXrgZ6voJmtvqkBZss4HTzfQx/0TW60uhdG/H39h4F5ag0zD/ov ++BS5gLNdTaqX4fnkGMX41TiMJjz98iji7lpJiCzfeT2OnpA8vUFKOt1b9pq0zj8lMH8yfaIDlNDc +eqFS3m6TjRgm/VWsvY+b0s+v54Ysyx8Jb6NvqYTUc79NoXQbTiNg8swOqn+knEwlqLJmOzj/2ZQw +9nKEvmhVEA/GcywWaZMH/rFF7buiVWqw2rVKAiUnhde3t4ZEFolsgCs+l6mc1X5VTMbeRRAc6uk7 +nwNT7u56AQIWeNTowr5GdogTPyK7SBIdUgC0An4hGh6cJfTzPV4e0hz5sy229zdcxsshTrD3mUcY +hcErulWuBurQB7Lcq9CClnXO0lD+mefPL5/ndtFhKvshuzHQqp9HpLIiyhY6UFfEW0NnxWViA0kB +60PZ2Pierc+xYw5F9KBaLJstxabArahH9CdMOA0uG0k7UvToiIMrVCjU8jVStDKDYmlkDJGcn5fq +dBb9HxEGmpv0 +-----END CERTIFICATE----- diff --git a/vendor/stripe/stripe-php/init.php b/vendor/stripe/stripe-php/init.php new file mode 100644 index 000000000..11ac713da --- /dev/null +++ b/vendor/stripe/stripe-php/init.php @@ -0,0 +1,238 @@ +create and manage Express or + * Custom accounts. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|\Stripe\StripeObject $business_profile Business information about the account. + * @property null|string $business_type The business type. + * @property \Stripe\StripeObject $capabilities + * @property bool $charges_enabled Whether the account can create live charges. + * @property \Stripe\StripeObject $company + * @property string $country The account's country. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $default_currency Three-letter ISO currency code representing the default currency for the account. This must be a currency that Stripe supports in the account's country. + * @property bool $details_submitted Whether account details have been submitted. Standard accounts cannot receive payouts before this is true. + * @property null|string $email The primary user's email address. + * @property \Stripe\Collection $external_accounts External accounts (bank accounts and debit cards) currently attached to this account + * @property \Stripe\Person $individual

This is an object representing a person associated with a Stripe account.

Related guide: Handling Identity Verification with the API.

+ * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property bool $payouts_enabled Whether Stripe can send payouts to this account. + * @property \Stripe\StripeObject $requirements + * @property null|\Stripe\StripeObject $settings Options for customizing how the account functions within Stripe. + * @property \Stripe\StripeObject $tos_acceptance + * @property string $type The Stripe account type. Can be standard, express, or custom. + */ +class Account extends ApiResource +{ + const OBJECT_NAME = 'account'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\NestedResource; + use ApiOperations\Update; + + const BUSINESS_TYPE_COMPANY = 'company'; + const BUSINESS_TYPE_GOVERNMENT_ENTITY = 'government_entity'; + const BUSINESS_TYPE_INDIVIDUAL = 'individual'; + const BUSINESS_TYPE_NON_PROFIT = 'non_profit'; + + const CAPABILITY_CARD_PAYMENTS = 'card_payments'; + const CAPABILITY_LEGACY_PAYMENTS = 'legacy_payments'; + const CAPABILITY_PLATFORM_PAYMENTS = 'platform_payments'; + const CAPABILITY_TRANSFERS = 'transfers'; + + const CAPABILITY_STATUS_ACTIVE = 'active'; + const CAPABILITY_STATUS_INACTIVE = 'inactive'; + const CAPABILITY_STATUS_PENDING = 'pending'; + + const TYPE_CUSTOM = 'custom'; + const TYPE_EXPRESS = 'express'; + const TYPE_STANDARD = 'standard'; + + use ApiOperations\Retrieve { + retrieve as protected _retrieve; + } + + public static function getSavedNestedResources() + { + static $savedNestedResources = null; + if (null === $savedNestedResources) { + $savedNestedResources = new Util\Set([ + 'external_account', + 'bank_account', + ]); + } + + return $savedNestedResources; + } + + public function instanceUrl() + { + if (null === $this['id']) { + return '/v1/account'; + } + + return parent::instanceUrl(); + } + + public function serializeParameters($force = false) + { + $update = parent::serializeParameters($force); + if (isset($this->_values['legal_entity'])) { + $entity = $this['legal_entity']; + if (isset($entity->_values['additional_owners'])) { + $owners = $entity['additional_owners']; + $entityUpdate = isset($update['legal_entity']) ? $update['legal_entity'] : []; + $entityUpdate['additional_owners'] = $this->serializeAdditionalOwners($entity, $owners); + $update['legal_entity'] = $entityUpdate; + } + } + if (isset($this->_values['individual'])) { + $individual = $this['individual']; + if (($individual instanceof Person) && !isset($update['individual'])) { + $update['individual'] = $individual->serializeParameters($force); + } + } + + return $update; + } + + private function serializeAdditionalOwners($legalEntity, $additionalOwners) + { + if (isset($legalEntity->_originalValues['additional_owners'])) { + $originalValue = $legalEntity->_originalValues['additional_owners']; + } else { + $originalValue = []; + } + if (($originalValue) && (\count($originalValue) > \count($additionalOwners))) { + throw new Exception\InvalidArgumentException( + 'You cannot delete an item from an array, you must instead set a new array' + ); + } + + $updateArr = []; + foreach ($additionalOwners as $i => $v) { + $update = ($v instanceof StripeObject) ? $v->serializeParameters() : $v; + + if ([] !== $update) { + if (!$originalValue || + !\array_key_exists($i, $originalValue) || + ($update !== $legalEntity->serializeParamsValue($originalValue[$i], null, false, true))) { + $updateArr[$i] = $update; + } + } + } + + return $updateArr; + } + + /** + * @param null|array|string $id the ID of the account to retrieve, or an + * options array containing an `id` key + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Account + */ + public static function retrieve($id = null, $opts = null) + { + if (!$opts && \is_string($id) && 'sk_' === \substr($id, 0, 3)) { + $opts = $id; + $id = null; + } + + return self::_retrieve($id, $opts); + } + + /** + * @param null|array $clientId + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\StripeObject object containing the response from the API + */ + public function deauthorize($clientId = null, $opts = null) + { + $params = [ + 'client_id' => $clientId, + 'stripe_user_id' => $this->id, + ]; + + return OAuth::deauthorize($params, $opts); + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of persons + */ + public function persons($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/persons'; + list($response, $opts) = $this->_request('get', $url, $params, $opts); + $obj = Util\Util::convertToStripeObject($response, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Account the rejected account + */ + public function reject($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/reject'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /* + * Capabilities methods + * We can not add the capabilities() method today as the Account object already has a + * capabilities property which is a hash and not the sub-list of capabilities. + */ + + const PATH_CAPABILITIES = '/capabilities'; + + /** + * @param string $id the ID of the account on which to retrieve the capabilities + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of capabilities + */ + public static function allCapabilities($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_CAPABILITIES, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the capability belongs + * @param string $capabilityId the ID of the capability to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Capability + */ + public static function retrieveCapability($id, $capabilityId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_CAPABILITIES, $capabilityId, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the capability belongs + * @param string $capabilityId the ID of the capability to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Capability + */ + public static function updateCapability($id, $capabilityId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_CAPABILITIES, $capabilityId, $params, $opts); + } + + const PATH_EXTERNAL_ACCOUNTS = '/external_accounts'; + + /** + * @param string $id the ID of the account on which to retrieve the external accounts + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of external accounts (BankAccount or Card) + */ + public static function allExternalAccounts($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_EXTERNAL_ACCOUNTS, $params, $opts); + } + + /** + * @param string $id the ID of the account on which to create the external account + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public static function createExternalAccount($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_EXTERNAL_ACCOUNTS, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the external account belongs + * @param string $externalAccountId the ID of the external account to delete + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public static function deleteExternalAccount($id, $externalAccountId, $params = null, $opts = null) + { + return self::_deleteNestedResource($id, static::PATH_EXTERNAL_ACCOUNTS, $externalAccountId, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the external account belongs + * @param string $externalAccountId the ID of the external account to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public static function retrieveExternalAccount($id, $externalAccountId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_EXTERNAL_ACCOUNTS, $externalAccountId, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the external account belongs + * @param string $externalAccountId the ID of the external account to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public static function updateExternalAccount($id, $externalAccountId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_EXTERNAL_ACCOUNTS, $externalAccountId, $params, $opts); + } + + const PATH_LOGIN_LINKS = '/login_links'; + + /** + * @param string $id the ID of the account on which to create the login link + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\LoginLink + */ + public static function createLoginLink($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_LOGIN_LINKS, $params, $opts); + } + + const PATH_PERSONS = '/persons'; + + /** + * @param string $id the ID of the account on which to retrieve the persons + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of persons + */ + public static function allPersons($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_PERSONS, $params, $opts); + } + + /** + * @param string $id the ID of the account on which to create the person + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public static function createPerson($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_PERSONS, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the person belongs + * @param string $personId the ID of the person to delete + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public static function deletePerson($id, $personId, $params = null, $opts = null) + { + return self::_deleteNestedResource($id, static::PATH_PERSONS, $personId, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the person belongs + * @param string $personId the ID of the person to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public static function retrievePerson($id, $personId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_PERSONS, $personId, $params, $opts); + } + + /** + * @param string $id the ID of the account to which the person belongs + * @param string $personId the ID of the person to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public static function updatePerson($id, $personId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_PERSONS, $personId, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/AccountLink.php b/vendor/stripe/stripe-php/lib/AccountLink.php new file mode 100644 index 000000000..24a9e68aa --- /dev/null +++ b/vendor/stripe/stripe-php/lib/AccountLink.php @@ -0,0 +1,26 @@ +Connect + * Onboarding. + * + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property int $expires_at The timestamp at which this account link will expire. + * @property string $url The URL for the account link. + */ +class AccountLink extends ApiResource +{ + const OBJECT_NAME = 'account_link'; + + use ApiOperations\Create; +} diff --git a/vendor/stripe/stripe-php/lib/AlipayAccount.php b/vendor/stripe/stripe-php/lib/AlipayAccount.php new file mode 100644 index 000000000..1d6a5096f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/AlipayAccount.php @@ -0,0 +1,75 @@ +json, $opts); + if (!($obj instanceof \Stripe\Collection)) { + throw new \Stripe\Exception\UnexpectedValueException( + 'Expected type ' . \Stripe\Collection::class . ', got "' . \get_class($obj) . '" instead.' + ); + } + $obj->setLastResponse($response); + $obj->setFilters($params); + + return $obj; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiOperations/Create.php b/vendor/stripe/stripe-php/lib/ApiOperations/Create.php new file mode 100644 index 000000000..c4351321d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiOperations/Create.php @@ -0,0 +1,31 @@ +json, $opts); + $obj->setLastResponse($response); + + return $obj; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiOperations/Delete.php b/vendor/stripe/stripe-php/lib/ApiOperations/Delete.php new file mode 100644 index 000000000..c6082ff9f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiOperations/Delete.php @@ -0,0 +1,30 @@ +instanceUrl(); + list($response, $opts) = $this->_request('delete', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiOperations/NestedResource.php b/vendor/stripe/stripe-php/lib/ApiOperations/NestedResource.php new file mode 100644 index 000000000..180cacd2c --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiOperations/NestedResource.php @@ -0,0 +1,135 @@ +json, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * @param string $id + * @param string $nestedPath + * @param null|string $nestedId + * + * @return string + */ + protected static function _nestedResourceUrl($id, $nestedPath, $nestedId = null) + { + $url = static::resourceUrl($id) . $nestedPath; + if (null !== $nestedId) { + $url .= "/{$nestedId}"; + } + + return $url; + } + + /** + * @param string $id + * @param string $nestedPath + * @param null|array $params + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\StripeObject + */ + protected static function _createNestedResource($id, $nestedPath, $params = null, $options = null) + { + $url = static::_nestedResourceUrl($id, $nestedPath); + + return self::_nestedResourceOperation('post', $url, $params, $options); + } + + /** + * @param string $id + * @param string $nestedPath + * @param null|string $nestedId + * @param null|array $params + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\StripeObject + */ + protected static function _retrieveNestedResource($id, $nestedPath, $nestedId, $params = null, $options = null) + { + $url = static::_nestedResourceUrl($id, $nestedPath, $nestedId); + + return self::_nestedResourceOperation('get', $url, $params, $options); + } + + /** + * @param string $id + * @param string $nestedPath + * @param null|string $nestedId + * @param null|array $params + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\StripeObject + */ + protected static function _updateNestedResource($id, $nestedPath, $nestedId, $params = null, $options = null) + { + $url = static::_nestedResourceUrl($id, $nestedPath, $nestedId); + + return self::_nestedResourceOperation('post', $url, $params, $options); + } + + /** + * @param string $id + * @param string $nestedPath + * @param null|string $nestedId + * @param null|array $params + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\StripeObject + */ + protected static function _deleteNestedResource($id, $nestedPath, $nestedId, $params = null, $options = null) + { + $url = static::_nestedResourceUrl($id, $nestedPath, $nestedId); + + return self::_nestedResourceOperation('delete', $url, $params, $options); + } + + /** + * @param string $id + * @param string $nestedPath + * @param null|array $params + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\StripeObject + */ + protected static function _allNestedResources($id, $nestedPath, $params = null, $options = null) + { + $url = static::_nestedResourceUrl($id, $nestedPath); + + return self::_nestedResourceOperation('get', $url, $params, $options); + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiOperations/Request.php b/vendor/stripe/stripe-php/lib/ApiOperations/Request.php new file mode 100644 index 000000000..e300dc13f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiOperations/Request.php @@ -0,0 +1,68 @@ + 100, " + . "'currency' => 'usd', 'source' => 'tok_1234'])\")"; + + throw new \Stripe\Exception\InvalidArgumentException($message); + } + } + + /** + * @param string $method HTTP method ('get', 'post', etc.) + * @param string $url URL for the request + * @param array $params list of parameters for the request + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return array tuple containing (the JSON response, $options) + */ + protected function _request($method, $url, $params = [], $options = null) + { + $opts = $this->_opts->merge($options); + list($resp, $options) = static::_staticRequest($method, $url, $params, $opts); + $this->setLastResponse($resp); + + return [$resp->json, $options]; + } + + /** + * @param string $method HTTP method ('get', 'post', etc.) + * @param string $url URL for the request + * @param array $params list of parameters for the request + * @param null|array|string $options + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return array tuple containing (the JSON response, $options) + */ + protected static function _staticRequest($method, $url, $params, $options) + { + $opts = \Stripe\Util\RequestOptions::parse($options); + $baseUrl = isset($opts->apiBase) ? $opts->apiBase : static::baseUrl(); + $requestor = new \Stripe\ApiRequestor($opts->apiKey, $baseUrl); + list($response, $opts->apiKey) = $requestor->request($method, $url, $params, $opts->headers); + $opts->discardNonPersistentHeaders(); + + return [$response, $opts]; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiOperations/Retrieve.php b/vendor/stripe/stripe-php/lib/ApiOperations/Retrieve.php new file mode 100644 index 000000000..5170afb32 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiOperations/Retrieve.php @@ -0,0 +1,30 @@ +refresh(); + + return $instance; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiOperations/Update.php b/vendor/stripe/stripe-php/lib/ApiOperations/Update.php new file mode 100644 index 000000000..688f0808a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiOperations/Update.php @@ -0,0 +1,52 @@ +json, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return static the saved resource + */ + public function save($opts = null) + { + $params = $this->serializeParameters(); + if (\count($params) > 0) { + $url = $this->instanceUrl(); + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + } + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiRequestor.php b/vendor/stripe/stripe-php/lib/ApiRequestor.php new file mode 100644 index 000000000..d3d7e7af1 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiRequestor.php @@ -0,0 +1,515 @@ +_apiKey = $apiKey; + if (!$apiBase) { + $apiBase = Stripe::$apiBase; + } + $this->_apiBase = $apiBase; + } + + /** + * Creates a telemetry json blob for use in 'X-Stripe-Client-Telemetry' headers. + * + * @static + * + * @param RequestTelemetry $requestTelemetry + * + * @return string + */ + private static function _telemetryJson($requestTelemetry) + { + $payload = [ + 'last_request_metrics' => [ + 'request_id' => $requestTelemetry->requestId, + 'request_duration_ms' => $requestTelemetry->requestDuration, + ], + ]; + + $result = \json_encode($payload); + if (false !== $result) { + return $result; + } + Stripe::getLogger()->error('Serializing telemetry payload failed!'); + + return '{}'; + } + + /** + * @static + * + * @param ApiResource|array|bool|mixed $d + * + * @return ApiResource|array|mixed|string + */ + private static function _encodeObjects($d) + { + if ($d instanceof ApiResource) { + return Util\Util::utf8($d->id); + } + if (true === $d) { + return 'true'; + } + if (false === $d) { + return 'false'; + } + if (\is_array($d)) { + $res = []; + foreach ($d as $k => $v) { + $res[$k] = self::_encodeObjects($v); + } + + return $res; + } + + return Util\Util::utf8($d); + } + + /** + * @param string $method + * @param string $url + * @param null|array $params + * @param null|array $headers + * + * @throws Exception\ApiErrorException + * + * @return array tuple containing (ApiReponse, API key) + */ + public function request($method, $url, $params = null, $headers = null) + { + $params = $params ?: []; + $headers = $headers ?: []; + list($rbody, $rcode, $rheaders, $myApiKey) = + $this->_requestRaw($method, $url, $params, $headers); + $json = $this->_interpretResponse($rbody, $rcode, $rheaders); + $resp = new ApiResponse($rbody, $rcode, $rheaders, $json); + + return [$resp, $myApiKey]; + } + + /** + * @param string $rbody a JSON string + * @param int $rcode + * @param array $rheaders + * @param array $resp + * + * @throws Exception\UnexpectedValueException + * @throws Exception\ApiErrorException + */ + public function handleErrorResponse($rbody, $rcode, $rheaders, $resp) + { + if (!\is_array($resp) || !isset($resp['error'])) { + $msg = "Invalid response object from API: {$rbody} " + . "(HTTP response code was {$rcode})"; + + throw new Exception\UnexpectedValueException($msg); + } + + $errorData = $resp['error']; + + $error = null; + if (\is_string($errorData)) { + $error = self::_specificOAuthError($rbody, $rcode, $rheaders, $resp, $errorData); + } + if (!$error) { + $error = self::_specificAPIError($rbody, $rcode, $rheaders, $resp, $errorData); + } + + throw $error; + } + + /** + * @static + * + * @param string $rbody + * @param int $rcode + * @param array $rheaders + * @param array $resp + * @param array $errorData + * + * @return Exception\ApiErrorException + */ + private static function _specificAPIError($rbody, $rcode, $rheaders, $resp, $errorData) + { + $msg = isset($errorData['message']) ? $errorData['message'] : null; + $param = isset($errorData['param']) ? $errorData['param'] : null; + $code = isset($errorData['code']) ? $errorData['code'] : null; + $type = isset($errorData['type']) ? $errorData['type'] : null; + $declineCode = isset($errorData['decline_code']) ? $errorData['decline_code'] : null; + + switch ($rcode) { + case 400: + // 'rate_limit' code is deprecated, but left here for backwards compatibility + // for API versions earlier than 2015-09-08 + if ('rate_limit' === $code) { + return Exception\RateLimitException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code, $param); + } + if ('idempotency_error' === $type) { + return Exception\IdempotencyException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code); + } + + // no break + case 404: + return Exception\InvalidRequestException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code, $param); + case 401: + return Exception\AuthenticationException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code); + case 402: + return Exception\CardException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code, $declineCode, $param); + case 403: + return Exception\PermissionException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code); + case 429: + return Exception\RateLimitException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code, $param); + default: + return Exception\UnknownApiErrorException::factory($msg, $rcode, $rbody, $resp, $rheaders, $code); + } + } + + /** + * @static + * + * @param bool|string $rbody + * @param int $rcode + * @param array $rheaders + * @param array $resp + * @param string $errorCode + * + * @return Exception\OAuth\OAuthErrorException + */ + private static function _specificOAuthError($rbody, $rcode, $rheaders, $resp, $errorCode) + { + $description = isset($resp['error_description']) ? $resp['error_description'] : $errorCode; + + switch ($errorCode) { + case 'invalid_client': + return Exception\OAuth\InvalidClientException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + case 'invalid_grant': + return Exception\OAuth\InvalidGrantException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + case 'invalid_request': + return Exception\OAuth\InvalidRequestException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + case 'invalid_scope': + return Exception\OAuth\InvalidScopeException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + case 'unsupported_grant_type': + return Exception\OAuth\UnsupportedGrantTypeException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + case 'unsupported_response_type': + return Exception\OAuth\UnsupportedResponseTypeException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + default: + return Exception\OAuth\UnknownOAuthErrorException::factory($description, $rcode, $rbody, $resp, $rheaders, $errorCode); + } + } + + /** + * @static + * + * @param null|array $appInfo + * + * @return null|string + */ + private static function _formatAppInfo($appInfo) + { + if (null !== $appInfo) { + $string = $appInfo['name']; + if (null !== $appInfo['version']) { + $string .= '/' . $appInfo['version']; + } + if (null !== $appInfo['url']) { + $string .= ' (' . $appInfo['url'] . ')'; + } + + return $string; + } + + return null; + } + + /** + * @static + * + * @param string $disabledFunctionsOutput - String value of the 'disable_function' setting, as output by \ini_get('disable_functions') + * @param string $functionName - Name of the function we are interesting in seeing whether or not it is disabled + * @param mixed $disableFunctionsOutput + * + * @return bool + */ + private static function _isDisabled($disableFunctionsOutput, $functionName) + { + $disabledFunctions = \explode(',', $disableFunctionsOutput); + foreach ($disabledFunctions as $disabledFunction) { + if (\trim($disabledFunction) === $functionName) { + return true; + } + } + + return false; + } + + /** + * @static + * + * @param string $apiKey + * @param null $clientInfo + * + * @return array + */ + private static function _defaultHeaders($apiKey, $clientInfo = null) + { + $uaString = 'Stripe/v1 PhpBindings/' . Stripe::VERSION; + + $langVersion = \PHP_VERSION; + $uname_disabled = static::_isDisabled(\ini_get('disable_functions'), 'php_uname'); + $uname = $uname_disabled ? '(disabled)' : \php_uname(); + + $appInfo = Stripe::getAppInfo(); + $ua = [ + 'bindings_version' => Stripe::VERSION, + 'lang' => 'php', + 'lang_version' => $langVersion, + 'publisher' => 'stripe', + 'uname' => $uname, + ]; + if ($clientInfo) { + $ua = \array_merge($clientInfo, $ua); + } + if (null !== $appInfo) { + $uaString .= ' ' . self::_formatAppInfo($appInfo); + $ua['application'] = $appInfo; + } + + return [ + 'X-Stripe-Client-User-Agent' => \json_encode($ua), + 'User-Agent' => $uaString, + 'Authorization' => 'Bearer ' . $apiKey, + ]; + } + + /** + * @param string $method + * @param string $url + * @param array $params + * @param array $headers + * + * @throws Exception\AuthenticationException + * @throws Exception\ApiConnectionException + * + * @return array + */ + private function _requestRaw($method, $url, $params, $headers) + { + $myApiKey = $this->_apiKey; + if (!$myApiKey) { + $myApiKey = Stripe::$apiKey; + } + + if (!$myApiKey) { + $msg = 'No API key provided. (HINT: set your API key using ' + . '"Stripe::setApiKey()". You can generate API keys from ' + . 'the Stripe web interface. See https://stripe.com/api for ' + . 'details, or email support@stripe.com if you have any questions.'; + + throw new Exception\AuthenticationException($msg); + } + + // Clients can supply arbitrary additional keys to be included in the + // X-Stripe-Client-User-Agent header via the optional getUserAgentInfo() + // method + $clientUAInfo = null; + if (\method_exists($this->httpClient(), 'getUserAgentInfo')) { + $clientUAInfo = $this->httpClient()->getUserAgentInfo(); + } + + if ($params && \is_array($params)) { + $optionKeysInParams = \array_filter( + static::$OPTIONS_KEYS, + function ($key) use ($params) { + return \array_key_exists($key, $params); + } + ); + if (\count($optionKeysInParams) > 0) { + $message = \sprintf('Options found in $params: %s. Options should ' + . 'be passed in their own array after $params. (HINT: pass an ' + . 'empty array to $params if you do not have any.)', \implode(', ', $optionKeysInParams)); + \trigger_error($message, \E_USER_WARNING); + } + } + + $absUrl = $this->_apiBase . $url; + $params = self::_encodeObjects($params); + $defaultHeaders = $this->_defaultHeaders($myApiKey, $clientUAInfo); + if (Stripe::$apiVersion) { + $defaultHeaders['Stripe-Version'] = Stripe::$apiVersion; + } + + if (Stripe::$accountId) { + $defaultHeaders['Stripe-Account'] = Stripe::$accountId; + } + + if (Stripe::$enableTelemetry && null !== self::$requestTelemetry) { + $defaultHeaders['X-Stripe-Client-Telemetry'] = self::_telemetryJson(self::$requestTelemetry); + } + + $hasFile = false; + foreach ($params as $k => $v) { + if (\is_resource($v)) { + $hasFile = true; + $params[$k] = self::_processResourceParam($v); + } elseif ($v instanceof \CURLFile) { + $hasFile = true; + } + } + + if ($hasFile) { + $defaultHeaders['Content-Type'] = 'multipart/form-data'; + } else { + $defaultHeaders['Content-Type'] = 'application/x-www-form-urlencoded'; + } + + $combinedHeaders = \array_merge($defaultHeaders, $headers); + $rawHeaders = []; + + foreach ($combinedHeaders as $header => $value) { + $rawHeaders[] = $header . ': ' . $value; + } + + $requestStartMs = Util\Util::currentTimeMillis(); + + list($rbody, $rcode, $rheaders) = $this->httpClient()->request( + $method, + $absUrl, + $rawHeaders, + $params, + $hasFile + ); + + if (isset($rheaders['request-id']) + && \is_string($rheaders['request-id']) + && \strlen($rheaders['request-id']) > 0) { + self::$requestTelemetry = new RequestTelemetry( + $rheaders['request-id'], + Util\Util::currentTimeMillis() - $requestStartMs + ); + } + + return [$rbody, $rcode, $rheaders, $myApiKey]; + } + + /** + * @param resource $resource + * + * @throws Exception\InvalidArgumentException + * + * @return \CURLFile|string + */ + private function _processResourceParam($resource) + { + if ('stream' !== \get_resource_type($resource)) { + throw new Exception\InvalidArgumentException( + 'Attempted to upload a resource that is not a stream' + ); + } + + $metaData = \stream_get_meta_data($resource); + if ('plainfile' !== $metaData['wrapper_type']) { + throw new Exception\InvalidArgumentException( + 'Only plainfile resource streams are supported' + ); + } + + // We don't have the filename or mimetype, but the API doesn't care + return new \CURLFile($metaData['uri']); + } + + /** + * @param string $rbody + * @param int $rcode + * @param array $rheaders + * + * @throws Exception\UnexpectedValueException + * @throws Exception\ApiErrorException + * + * @return array + */ + private function _interpretResponse($rbody, $rcode, $rheaders) + { + $resp = \json_decode($rbody, true); + $jsonError = \json_last_error(); + if (null === $resp && \JSON_ERROR_NONE !== $jsonError) { + $msg = "Invalid response body from API: {$rbody} " + . "(HTTP response code was {$rcode}, json_last_error() was {$jsonError})"; + + throw new Exception\UnexpectedValueException($msg, $rcode); + } + + if ($rcode < 200 || $rcode >= 300) { + $this->handleErrorResponse($rbody, $rcode, $rheaders, $resp); + } + + return $resp; + } + + /** + * @static + * + * @param HttpClient\ClientInterface $client + */ + public static function setHttpClient($client) + { + self::$_httpClient = $client; + } + + /** + * @static + * + * Resets any stateful telemetry data + */ + public static function resetTelemetry() + { + self::$requestTelemetry = null; + } + + /** + * @return HttpClient\ClientInterface + */ + private function httpClient() + { + if (!self::$_httpClient) { + self::$_httpClient = HttpClient\CurlClient::instance(); + } + + return self::$_httpClient; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiResource.php b/vendor/stripe/stripe-php/lib/ApiResource.php new file mode 100644 index 000000000..064f99c1a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiResource.php @@ -0,0 +1,120 @@ +{$k}; + if ((static::getSavedNestedResources()->includes($k)) && + ($v instanceof ApiResource)) { + $v->saveWithParent = true; + } + } + + /** + * @throws Exception\ApiErrorException + * + * @return ApiResource the refreshed resource + */ + public function refresh() + { + $requestor = new ApiRequestor($this->_opts->apiKey, static::baseUrl()); + $url = $this->instanceUrl(); + + list($response, $this->_opts->apiKey) = $requestor->request( + 'get', + $url, + $this->_retrieveOptions, + $this->_opts->headers + ); + $this->setLastResponse($response); + $this->refreshFrom($response->json, $this->_opts); + + return $this; + } + + /** + * @return string the base URL for the given class + */ + public static function baseUrl() + { + return Stripe::$apiBase; + } + + /** + * @return string the endpoint URL for the given class + */ + public static function classUrl() + { + // Replace dots with slashes for namespaced resources, e.g. if the object's name is + // "foo.bar", then its URL will be "/v1/foo/bars". + $base = \str_replace('.', '/', static::OBJECT_NAME); + + return "/v1/{$base}s"; + } + + /** + * @param null|string $id the ID of the resource + * + * @throws Exception\UnexpectedValueException if $id is null + * + * @return string the instance endpoint URL for the given class + */ + public static function resourceUrl($id) + { + if (null === $id) { + $class = static::class; + $message = 'Could not determine which URL to request: ' + . "{$class} instance has invalid ID: {$id}"; + + throw new Exception\UnexpectedValueException($message); + } + $id = Util\Util::utf8($id); + $base = static::classUrl(); + $extn = \urlencode($id); + + return "{$base}/{$extn}"; + } + + /** + * @return string the full API URL for this API resource + */ + public function instanceUrl() + { + return static::resourceUrl($this['id']); + } +} diff --git a/vendor/stripe/stripe-php/lib/ApiResponse.php b/vendor/stripe/stripe-php/lib/ApiResponse.php new file mode 100644 index 000000000..e7ee2e9a9 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApiResponse.php @@ -0,0 +1,45 @@ +body = $body; + $this->code = $code; + $this->headers = $headers; + $this->json = $json; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApplePayDomain.php b/vendor/stripe/stripe-php/lib/ApplePayDomain.php new file mode 100644 index 000000000..5f9489d47 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApplePayDomain.php @@ -0,0 +1,31 @@ +true if the object exists in live mode or the value false if the object exists in test mode. + */ +class ApplePayDomain extends ApiResource +{ + const OBJECT_NAME = 'apple_pay_domain'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + + /** + * @return string The class URL for this resource. It needs to be special + * cased because it doesn't fit into the standard resource pattern. + */ + public static function classUrl() + { + return '/v1/apple_pay/domains'; + } +} diff --git a/vendor/stripe/stripe-php/lib/ApplicationFee.php b/vendor/stripe/stripe-php/lib/ApplicationFee.php new file mode 100644 index 000000000..88aeed645 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApplicationFee.php @@ -0,0 +1,90 @@ +ISO currency code, in lowercase. Must be a supported currency. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string|\Stripe\Charge $originating_transaction ID of the corresponding charge on the platform account, if this fee was the result of a charge using the destination parameter. + * @property bool $refunded Whether the fee has been fully refunded. If the fee is only partially refunded, this attribute will still be false. + * @property \Stripe\Collection $refunds A list of refunds that have been applied to the fee. + */ +class ApplicationFee extends ApiResource +{ + const OBJECT_NAME = 'application_fee'; + + use ApiOperations\All; + use ApiOperations\NestedResource; + use ApiOperations\Retrieve; + + const PATH_REFUNDS = '/refunds'; + + /** + * @param string $id the ID of the application fee on which to retrieve the fee refunds + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of fee refunds + */ + public static function allRefunds($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_REFUNDS, $params, $opts); + } + + /** + * @param string $id the ID of the application fee on which to create the fee refund + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFeeRefund + */ + public static function createRefund($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_REFUNDS, $params, $opts); + } + + /** + * @param string $id the ID of the application fee to which the fee refund belongs + * @param string $refundId the ID of the fee refund to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFeeRefund + */ + public static function retrieveRefund($id, $refundId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_REFUNDS, $refundId, $params, $opts); + } + + /** + * @param string $id the ID of the application fee to which the fee refund belongs + * @param string $refundId the ID of the fee refund to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFeeRefund + */ + public static function updateRefund($id, $refundId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_REFUNDS, $refundId, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/ApplicationFeeRefund.php b/vendor/stripe/stripe-php/lib/ApplicationFeeRefund.php new file mode 100644 index 000000000..dc7c34bac --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ApplicationFeeRefund.php @@ -0,0 +1,66 @@ +Application Fee Refund objects allow you to refund an application + * fee that has previously been created but not yet refunded. Funds will be + * refunded to the Stripe account from which the fee was originally collected. + * + * Related guide: Refunding + * Application Fees. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount, in %s. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction Balance transaction that describes the impact on your account balance. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string|\Stripe\ApplicationFee $fee ID of the application fee that was refunded. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + */ +class ApplicationFeeRefund extends ApiResource +{ + const OBJECT_NAME = 'fee_refund'; + + use ApiOperations\Update { + save as protected _save; + } + + /** + * @return string the API URL for this Stripe refund + */ + public function instanceUrl() + { + $id = $this['id']; + $fee = $this['fee']; + if (!$id) { + throw new Exception\UnexpectedValueException( + 'Could not determine which URL to request: ' . + "class instance has invalid ID: {$id}", + null + ); + } + $id = Util\Util::utf8($id); + $fee = Util\Util::utf8($fee); + + $base = ApplicationFee::classUrl(); + $feeExtn = \urlencode($fee); + $extn = \urlencode($id); + + return "{$base}/{$feeExtn}/refunds/{$extn}"; + } + + /** + * @param null|array|string $opts + * + * @return ApplicationFeeRefund the saved refund + */ + public function save($opts = null) + { + return $this->_save($opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Balance.php b/vendor/stripe/stripe-php/lib/Balance.php new file mode 100644 index 000000000..0fdc2850c --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Balance.php @@ -0,0 +1,45 @@ +transactions + * that contributed to the balance (charges, payouts, and so forth). + * + * The available and pending amounts for each currency are broken down further by + * payment source types. + * + * Related guide: Understanding Connect + * Account Balances. + * + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\StripeObject[] $available Funds that are available to be transferred or paid out, whether automatically by Stripe or explicitly via the Transfers API or Payouts API. The available balance for each currency and payment type can be found in the source_types property. + * @property \Stripe\StripeObject[] $connect_reserved Funds held due to negative balances on connected Custom accounts. The connect reserve balance for each currency and payment type can be found in the source_types property. + * @property \Stripe\StripeObject[] $instant_available Funds that can be paid out using Instant Payouts. + * @property \Stripe\StripeObject $issuing + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject[] $pending Funds that are not yet available in the balance, due to the 7-day rolling pay cycle. The pending balance for each currency, and for each payment type, can be found in the source_types property. + */ +class Balance extends SingletonApiResource +{ + const OBJECT_NAME = 'balance'; + + /** + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Balance + */ + public static function retrieve($opts = null) + { + return self::_singletonRetrieve($opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/BalanceTransaction.php b/vendor/stripe/stripe-php/lib/BalanceTransaction.php new file mode 100644 index 000000000..d7ddea430 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/BalanceTransaction.php @@ -0,0 +1,71 @@ +Balance + * Transaction Types. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Gross amount of the transaction, in %s. + * @property int $available_on The date the transaction's net funds will become available in the Stripe balance. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|float $exchange_rate The exchange rate used, if applicable, for this transaction. Specifically, if money was converted from currency A to currency B, then the amount in currency A, times exchange_rate, would be the amount in currency B. For example, suppose you charged a customer 10.00 EUR. Then the PaymentIntent's amount would be 1000 and currency would be eur. Suppose this was converted into 12.34 USD in your Stripe account. Then the BalanceTransaction's amount would be 1234, currency would be usd, and exchange_rate would be 1.234. + * @property int $fee Fees (in %s) paid for this transaction. + * @property \Stripe\StripeObject[] $fee_details Detailed breakdown of fees (in %s) paid for this transaction. + * @property int $net Net amount of the transaction, in %s. + * @property string $reporting_category Learn more about how reporting categories can help you understand balance transactions from an accounting perspective. + * @property null|string|\Stripe\StripeObject $source The Stripe object to which this transaction is related. + * @property string $status If the transaction's net funds are available in the Stripe balance yet. Either available or pending. + * @property string $type Transaction type: adjustment, advance, advance_funding, anticipation_repayment, application_fee, application_fee_refund, charge, connect_collection_transfer, contribution, issuing_authorization_hold, issuing_authorization_release, issuing_dispute, issuing_transaction, payment, payment_failure_refund, payment_refund, payout, payout_cancel, payout_failure, refund, refund_failure, reserve_transaction, reserved_funds, stripe_fee, stripe_fx_fee, tax_fee, topup, topup_reversal, transfer, transfer_cancel, transfer_failure, or transfer_refund. Learn more about balance transaction types and what they represent. If you are looking to classify transactions for accounting purposes, you might want to consider reporting_category instead. + */ +class BalanceTransaction extends ApiResource +{ + const OBJECT_NAME = 'balance_transaction'; + + use ApiOperations\All; + use ApiOperations\Retrieve; + + const TYPE_ADJUSTMENT = 'adjustment'; + const TYPE_ADVANCE = 'advance'; + const TYPE_ADVANCE_FUNDING = 'advance_funding'; + const TYPE_ANTICIPATION_REPAYMENT = 'anticipation_repayment'; + const TYPE_APPLICATION_FEE = 'application_fee'; + const TYPE_APPLICATION_FEE_REFUND = 'application_fee_refund'; + const TYPE_CHARGE = 'charge'; + const TYPE_CONNECT_COLLECTION_TRANSFER = 'connect_collection_transfer'; + const TYPE_CONTRIBUTION = 'contribution'; + const TYPE_ISSUING_AUTHORIZATION_HOLD = 'issuing_authorization_hold'; + const TYPE_ISSUING_AUTHORIZATION_RELEASE = 'issuing_authorization_release'; + const TYPE_ISSUING_DISPUTE = 'issuing_dispute'; + const TYPE_ISSUING_TRANSACTION = 'issuing_transaction'; + const TYPE_PAYMENT = 'payment'; + const TYPE_PAYMENT_FAILURE_REFUND = 'payment_failure_refund'; + const TYPE_PAYMENT_REFUND = 'payment_refund'; + const TYPE_PAYOUT = 'payout'; + const TYPE_PAYOUT_CANCEL = 'payout_cancel'; + const TYPE_PAYOUT_FAILURE = 'payout_failure'; + const TYPE_REFUND = 'refund'; + const TYPE_REFUND_FAILURE = 'refund_failure'; + const TYPE_RESERVE_TRANSACTION = 'reserve_transaction'; + const TYPE_RESERVED_FUNDS = 'reserved_funds'; + const TYPE_STRIPE_FEE = 'stripe_fee'; + const TYPE_STRIPE_FX_FEE = 'stripe_fx_fee'; + const TYPE_TAX_FEE = 'tax_fee'; + const TYPE_TOPUP = 'topup'; + const TYPE_TOPUP_REVERSAL = 'topup_reversal'; + const TYPE_TRANSFER = 'transfer'; + const TYPE_TRANSFER_CANCEL = 'transfer_cancel'; + const TYPE_TRANSFER_FAILURE = 'transfer_failure'; + const TYPE_TRANSFER_REFUND = 'transfer_refund'; +} diff --git a/vendor/stripe/stripe-php/lib/BankAccount.php b/vendor/stripe/stripe-php/lib/BankAccount.php new file mode 100644 index 000000000..40eca41c5 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/BankAccount.php @@ -0,0 +1,132 @@ +Customer objects. + * + * On the other hand External Accounts are + * transfer destinations on Account objects for Custom accounts. They + * can be bank accounts or debit cards as well, and are documented in the links + * above. + * + * Related guide: Bank Debits and + * Transfers. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string|\Stripe\Account $account The ID of the account that the bank account is associated with. + * @property null|string $account_holder_name The name of the person or business that owns the bank account. + * @property null|string $account_holder_type The type of entity that holds the account. This can be either individual or company. + * @property null|string[] $available_payout_methods A set of available payout methods for this bank account. Only values from this set should be passed as the method when creating a payout. + * @property null|string $bank_name Name of the bank associated with the routing number (e.g., WELLS FARGO). + * @property string $country Two-letter ISO code representing the country the bank account is located in. + * @property string $currency Three-letter ISO code for the currency paid out to the bank account. + * @property null|string|\Stripe\Customer $customer The ID of the customer that the bank account is associated with. + * @property null|bool $default_for_currency Whether this bank account is the default external account for its currency. + * @property null|string $fingerprint Uniquely identifies this particular bank account. You can use this attribute to check whether two bank accounts are the same. + * @property string $last4 The last four digits of the bank account number. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $routing_number The routing transit number for the bank account. + * @property string $status

For bank accounts, possible values are new, validated, verified, verification_failed, or errored. A bank account that hasn't had any activity or validation performed is new. If Stripe can determine that the bank account exists, its status will be validated. Note that there often isn’t enough information to know (e.g., for smaller credit unions), and the validation is not always run. If customer bank account verification has succeeded, the bank account status will be verified. If the verification failed for any reason, such as microdeposit failure, the status will be verification_failed. If a transfer sent to this bank account fails, we'll set the status to errored and will not continue to send transfers until the bank details are updated.

For external accounts, possible values are new and errored. Validations aren't run against external accounts because they're only used for payouts. This means the other statuses don't apply. If a transfer fails, the status is set to errored and transfers are stopped until account details are updated.

+ */ +class BankAccount extends ApiResource +{ + const OBJECT_NAME = 'bank_account'; + + use ApiOperations\Delete; + use ApiOperations\Update; + + /** + * Possible string representations of the bank verification status. + * + * @see https://stripe.com/docs/api/external_account_bank_accounts/object#account_bank_account_object-status + */ + const STATUS_NEW = 'new'; + const STATUS_VALIDATED = 'validated'; + const STATUS_VERIFIED = 'verified'; + const STATUS_VERIFICATION_FAILED = 'verification_failed'; + const STATUS_ERRORED = 'errored'; + + /** + * @return string The instance URL for this resource. It needs to be special + * cased because it doesn't fit into the standard resource pattern. + */ + public function instanceUrl() + { + if ($this['customer']) { + $base = Customer::classUrl(); + $parent = $this['customer']; + $path = 'sources'; + } elseif ($this['account']) { + $base = Account::classUrl(); + $parent = $this['account']; + $path = 'external_accounts'; + } else { + $msg = 'Bank accounts cannot be accessed without a customer ID or account ID.'; + + throw new Exception\UnexpectedValueException($msg, null); + } + $parentExtn = \urlencode(Util\Util::utf8($parent)); + $extn = \urlencode(Util\Util::utf8($this['id'])); + + return "{$base}/{$parentExtn}/{$path}/{$extn}"; + } + + /** + * @param array|string $_id + * @param null|array|string $_opts + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function retrieve($_id, $_opts = null) + { + $msg = 'Bank accounts cannot be retrieved without a customer ID or ' . + 'an account ID. Retrieve a bank account using ' . + "`Customer::retrieveSource('customer_id', " . + "'bank_account_id')` or `Account::retrieveExternalAccount(" . + "'account_id', 'bank_account_id')`."; + + throw new Exception\BadMethodCallException($msg); + } + + /** + * @param string $_id + * @param null|array $_params + * @param null|array|string $_options + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function update($_id, $_params = null, $_options = null) + { + $msg = 'Bank accounts cannot be updated without a customer ID or an ' . + 'account ID. Update a bank account using ' . + "`Customer::updateSource('customer_id', 'bank_account_id', " . + '$updateParams)` or `Account::updateExternalAccount(' . + "'account_id', 'bank_account_id', \$updateParams)`."; + + throw new Exception\BadMethodCallException($msg); + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return BankAccount the verified bank account + */ + public function verify($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/verify'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/BaseStripeClient.php b/vendor/stripe/stripe-php/lib/BaseStripeClient.php new file mode 100644 index 000000000..5499fe3a8 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/BaseStripeClient.php @@ -0,0 +1,269 @@ + */ + private $config; + + /** @var \Stripe\Util\RequestOptions */ + private $defaultOpts; + + /** + * Initializes a new instance of the {@link BaseStripeClient} class. + * + * The constructor takes a single argument. The argument can be a string, in which case it + * should be the API key. It can also be an array with various configuration settings. + * + * Configuration settings include the following options: + * + * - api_key (null|string): the Stripe API key, to be used in regular API requests. + * - client_id (null|string): the Stripe client ID, to be used in OAuth requests. + * - stripe_account (null|string): a Stripe account ID. If set, all requests sent by the client + * will automatically use the {@code Stripe-Account} header with that account ID. + * - stripe_version (null|string): a Stripe API verion. If set, all requests sent by the client + * will include the {@code Stripe-Version} header with that API version. + * + * The following configuration settings are also available, though setting these should rarely be necessary + * (only useful if you want to send requests to a mock server like stripe-mock): + * + * - api_base (string): the base URL for regular API requests. Defaults to + * {@link DEFAULT_API_BASE}. + * - connect_base (string): the base URL for OAuth requests. Defaults to + * {@link DEFAULT_CONNECT_BASE}. + * - files_base (string): the base URL for file creation requests. Defaults to + * {@link DEFAULT_FILES_BASE}. + * + * @param array|string $config the API key as a string, or an array containing + * the client configuration settings + */ + public function __construct($config = []) + { + if (\is_string($config)) { + $config = ['api_key' => $config]; + } elseif (!\is_array($config)) { + throw new \Stripe\Exception\InvalidArgumentException('$config must be a string or an array'); + } + + $config = \array_merge($this->getDefaultConfig(), $config); + $this->validateConfig($config); + + $this->config = $config; + + $this->defaultOpts = \Stripe\Util\RequestOptions::parse([ + 'stripe_account' => $config['stripe_account'], + 'stripe_version' => $config['stripe_version'], + ]); + } + + /** + * Gets the API key used by the client to send requests. + * + * @return null|string the API key used by the client to send requests + */ + public function getApiKey() + { + return $this->config['api_key']; + } + + /** + * Gets the client ID used by the client in OAuth requests. + * + * @return null|string the client ID used by the client in OAuth requests + */ + public function getClientId() + { + return $this->config['client_id']; + } + + /** + * Gets the base URL for Stripe's API. + * + * @return string the base URL for Stripe's API + */ + public function getApiBase() + { + return $this->config['api_base']; + } + + /** + * Gets the base URL for Stripe's OAuth API. + * + * @return string the base URL for Stripe's OAuth API + */ + public function getConnectBase() + { + return $this->config['connect_base']; + } + + /** + * Gets the base URL for Stripe's Files API. + * + * @return string the base URL for Stripe's Files API + */ + public function getFilesBase() + { + return $this->config['files_base']; + } + + /** + * Sends a request to Stripe's API. + * + * @param string $method the HTTP method + * @param string $path the path of the request + * @param array $params the parameters of the request + * @param array|\Stripe\Util\RequestOptions $opts the special modifiers of the request + * + * @return \Stripe\StripeObject the object returned by Stripe's API + */ + public function request($method, $path, $params, $opts) + { + $opts = $this->defaultOpts->merge($opts, true); + $baseUrl = $opts->apiBase ?: $this->getApiBase(); + $requestor = new \Stripe\ApiRequestor($this->apiKeyForRequest($opts), $baseUrl); + list($response, $opts->apiKey) = $requestor->request($method, $path, $params, $opts->headers); + $opts->discardNonPersistentHeaders(); + $obj = \Stripe\Util\Util::convertToStripeObject($response->json, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * Sends a request to Stripe's API. + * + * @param string $method the HTTP method + * @param string $path the path of the request + * @param array $params the parameters of the request + * @param array|\Stripe\Util\RequestOptions $opts the special modifiers of the request + * + * @return \Stripe\Collection of ApiResources + */ + public function requestCollection($method, $path, $params, $opts) + { + $obj = $this->request($method, $path, $params, $opts); + if (!($obj instanceof \Stripe\Collection)) { + $received_class = \get_class($obj); + $msg = "Expected to receive `Stripe\\Collection` object from Stripe API. Instead received `{$received_class}`."; + + throw new \Stripe\Exception\UnexpectedValueException($msg); + } + $obj->setFilters($params); + + return $obj; + } + + /** + * @param \Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\AuthenticationException + * + * @return string + */ + private function apiKeyForRequest($opts) + { + $apiKey = $opts->apiKey ?: $this->getApiKey(); + + if (null === $apiKey) { + $msg = 'No API key provided. Set your API key when constructing the ' + . 'StripeClient instance, or provide it on a per-request basis ' + . 'using the `api_key` key in the $opts argument.'; + + throw new \Stripe\Exception\AuthenticationException($msg); + } + + return $apiKey; + } + + /** + * TODO: replace this with a private constant when we drop support for PHP < 5. + * + * @return array + */ + private function getDefaultConfig() + { + return [ + 'api_key' => null, + 'client_id' => null, + 'stripe_account' => null, + 'stripe_version' => null, + 'api_base' => self::DEFAULT_API_BASE, + 'connect_base' => self::DEFAULT_CONNECT_BASE, + 'files_base' => self::DEFAULT_FILES_BASE, + ]; + } + + /** + * @param array $config + * + * @throws \Stripe\Exception\InvalidArgumentException + */ + private function validateConfig($config) + { + // api_key + if (null !== $config['api_key'] && !\is_string($config['api_key'])) { + throw new \Stripe\Exception\InvalidArgumentException('api_key must be null or a string'); + } + + if (null !== $config['api_key'] && ('' === $config['api_key'])) { + $msg = 'api_key cannot be the empty string'; + + throw new \Stripe\Exception\InvalidArgumentException($msg); + } + + if (null !== $config['api_key'] && (\preg_match('/\s/', $config['api_key']))) { + $msg = 'api_key cannot contain whitespace'; + + throw new \Stripe\Exception\InvalidArgumentException($msg); + } + + // client_id + if (null !== $config['client_id'] && !\is_string($config['client_id'])) { + throw new \Stripe\Exception\InvalidArgumentException('client_id must be null or a string'); + } + + // stripe_account + if (null !== $config['stripe_account'] && !\is_string($config['stripe_account'])) { + throw new \Stripe\Exception\InvalidArgumentException('stripe_account must be null or a string'); + } + + // stripe_version + if (null !== $config['stripe_version'] && !\is_string($config['stripe_version'])) { + throw new \Stripe\Exception\InvalidArgumentException('stripe_version must be null or a string'); + } + + // api_base + if (!\is_string($config['api_base'])) { + throw new \Stripe\Exception\InvalidArgumentException('api_base must be a string'); + } + + // connect_base + if (!\is_string($config['connect_base'])) { + throw new \Stripe\Exception\InvalidArgumentException('connect_base must be a string'); + } + + // files_base + if (!\is_string($config['files_base'])) { + throw new \Stripe\Exception\InvalidArgumentException('files_base must be a string'); + } + + // check absence of extra keys + $extraConfigKeys = \array_diff(\array_keys($config), \array_keys($this->getDefaultConfig())); + if (!empty($extraConfigKeys)) { + // Wrap in single quote to more easily catch trailing spaces errors + $invalidKeys = "'" . \implode("', '", $extraConfigKeys) . "'"; + + throw new \Stripe\Exception\InvalidArgumentException('Found unknown key(s) in configuration array: ' . $invalidKeys); + } + } +} diff --git a/vendor/stripe/stripe-php/lib/BillingPortal/Session.php b/vendor/stripe/stripe-php/lib/BillingPortal/Session.php new file mode 100644 index 000000000..ec01275ac --- /dev/null +++ b/vendor/stripe/stripe-php/lib/BillingPortal/Session.php @@ -0,0 +1,32 @@ +Billing + * customer portal. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $customer The ID of the customer for this session. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property string $return_url The URL to which Stripe should send customers when they click on the link to return to your website. + * @property string $url The short-lived URL of the session giving customers access to the customer portal. + */ +class Session extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'billing_portal.session'; + + use \Stripe\ApiOperations\Create; +} diff --git a/vendor/stripe/stripe-php/lib/BitcoinReceiver.php b/vendor/stripe/stripe-php/lib/BitcoinReceiver.php new file mode 100644 index 000000000..208610a0f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/BitcoinReceiver.php @@ -0,0 +1,71 @@ +currency that you are collecting as payment. + * @property int $amount_received The amount of currency to which bitcoin_amount_received has been converted. + * @property int $bitcoin_amount The amount of bitcoin that the customer should send to fill the receiver. The bitcoin_amount is denominated in Satoshi: there are 10^8 Satoshi in one bitcoin. + * @property int $bitcoin_amount_received The amount of bitcoin that has been sent by the customer to this receiver. + * @property string $bitcoin_uri This URI can be displayed to the customer as a clickable link (to activate their bitcoin client) or as a QR code (for mobile wallets). + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO code for the currency to which the bitcoin will be converted. + * @property null|string $customer The customer ID of the bitcoin receiver. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|string $email The customer's email address, set by the API call that creates the receiver. + * @property bool $filled This flag is initially false and updates to true when the customer sends the bitcoin_amount to this receiver. + * @property string $inbound_address A bitcoin address that is specific to this receiver. The customer can send bitcoin to this address to fill the receiver. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $payment The ID of the payment created from the receiver, if any. Hidden when viewing the receiver with a publishable key. + * @property null|string $refund_address The refund address of this bitcoin receiver. + * @property \Stripe\Collection $transactions A list with one entry for each time that the customer sent bitcoin to the receiver. Hidden when viewing the receiver with a publishable key. + * @property bool $uncaptured_funds This receiver contains uncaptured funds that can be used for a payment or refunded. + * @property null|bool $used_for_payment Indicate if this source is used for payment. + */ +class BitcoinReceiver extends ApiResource +{ + const OBJECT_NAME = 'bitcoin_receiver'; + + use ApiOperations\All; + use ApiOperations\Retrieve; + + /** + * @return string The class URL for this resource. It needs to be special + * cased because it doesn't fit into the standard resource pattern. + */ + public static function classUrl() + { + return '/v1/bitcoin/receivers'; + } + + /** + * @return string The instance URL for this resource. It needs to be special + * cased because it doesn't fit into the standard resource pattern. + */ + public function instanceUrl() + { + if ($this['customer']) { + $base = Customer::classUrl(); + $parent = $this['customer']; + $path = 'sources'; + $parentExtn = \urlencode(Util\Util::utf8($parent)); + $extn = \urlencode(Util\Util::utf8($this['id'])); + + return "{$base}/{$parentExtn}/{$path}/{$extn}"; + } + + $base = BitcoinReceiver::classUrl(); + $extn = \urlencode(Util\Util::utf8($this['id'])); + + return "{$base}/{$extn}"; + } +} diff --git a/vendor/stripe/stripe-php/lib/BitcoinTransaction.php b/vendor/stripe/stripe-php/lib/BitcoinTransaction.php new file mode 100644 index 000000000..3aa711850 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/BitcoinTransaction.php @@ -0,0 +1,19 @@ +currency that the transaction was converted to in real-time. + * @property int $bitcoin_amount The amount of bitcoin contained in the transaction. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO code for the currency to which this transaction was converted. + * @property string $receiver The receiver to which this transaction was sent. + */ +class BitcoinTransaction extends ApiResource +{ + const OBJECT_NAME = 'bitcoin_transaction'; +} diff --git a/vendor/stripe/stripe-php/lib/Capability.php b/vendor/stripe/stripe-php/lib/Capability.php new file mode 100644 index 000000000..3580df60b --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Capability.php @@ -0,0 +1,87 @@ +Account + * capabilities. + * + * @property string $id The identifier for the capability. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string|\Stripe\Account $account The account for which the capability enables functionality. + * @property bool $requested Whether the capability has been requested. + * @property null|int $requested_at Time at which the capability was requested. Measured in seconds since the Unix epoch. + * @property \Stripe\StripeObject $requirements + * @property string $status The status of the capability. Can be active, inactive, pending, or unrequested. + */ +class Capability extends ApiResource +{ + const OBJECT_NAME = 'capability'; + + use ApiOperations\Update; + + const STATUS_ACTIVE = 'active'; + const STATUS_INACTIVE = 'inactive'; + const STATUS_PENDING = 'pending'; + const STATUS_UNREQUESTED = 'unrequested'; + + /** + * @return string the API URL for this Stripe account reversal + */ + public function instanceUrl() + { + $id = $this['id']; + $account = $this['account']; + if (!$id) { + throw new Exception\UnexpectedValueException( + 'Could not determine which URL to request: ' . + "class instance has invalid ID: {$id}", + null + ); + } + $id = Util\Util::utf8($id); + $account = Util\Util::utf8($account); + + $base = Account::classUrl(); + $accountExtn = \urlencode($account); + $extn = \urlencode($id); + + return "{$base}/{$accountExtn}/capabilities/{$extn}"; + } + + /** + * @param array|string $_id + * @param null|array|string $_opts + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function retrieve($_id, $_opts = null) + { + $msg = 'Capabilities cannot be retrieved without an account ID. ' . + 'Retrieve a capability using `Account::retrieveCapability(' . + "'account_id', 'capability_id')`."; + + throw new Exception\BadMethodCallException($msg); + } + + /** + * @param string $_id + * @param null|array $_params + * @param null|array|string $_options + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function update($_id, $_params = null, $_options = null) + { + $msg = 'Capabilities cannot be updated without an account ID. ' . + 'Update a capability using `Account::updateCapability(' . + "'account_id', 'capability_id', \$updateParams)`."; + + throw new Exception\BadMethodCallException($msg); + } +} diff --git a/vendor/stripe/stripe-php/lib/Card.php b/vendor/stripe/stripe-php/lib/Card.php new file mode 100644 index 000000000..106cd1811 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Card.php @@ -0,0 +1,142 @@ +Card Payments + * with Sources. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string|\Stripe\Account $account The account this card belongs to. This attribute will not be in the card object if the card belongs to a customer or recipient instead. + * @property null|string $address_city City/District/Suburb/Town/Village. + * @property null|string $address_country Billing address country, if provided when creating card. + * @property null|string $address_line1 Address line 1 (Street address/PO Box/Company name). + * @property null|string $address_line1_check If address_line1 was provided, results of the check: pass, fail, unavailable, or unchecked. + * @property null|string $address_line2 Address line 2 (Apartment/Suite/Unit/Building). + * @property null|string $address_state State/County/Province/Region. + * @property null|string $address_zip ZIP or postal code. + * @property null|string $address_zip_check If address_zip was provided, results of the check: pass, fail, unavailable, or unchecked. + * @property null|string[] $available_payout_methods A set of available payout methods for this card. Only values from this set should be passed as the method when creating a payout. + * @property string $brand Card brand. Can be American Express, Diners Club, Discover, JCB, MasterCard, UnionPay, Visa, or Unknown. + * @property null|string $country Two-letter ISO code representing the country of the card. You could use this attribute to get a sense of the international breakdown of cards you've collected. + * @property null|string $currency Three-letter ISO code for currency. Only applicable on accounts (not customers or recipients). The card can be used as a transfer destination for funds in this currency. + * @property null|string|\Stripe\Customer $customer The customer that this card belongs to. This attribute will not be in the card object if the card belongs to an account or recipient instead. + * @property null|string $cvc_check If a CVC was provided, results of the check: pass, fail, unavailable, or unchecked. A result of unchecked indicates that CVC was provided but hasn't been checked yet. Checks are typically performed when attaching a card to a Customer object, or when creating a charge. For more details, see Check if a card is valid without a charge. + * @property null|bool $default_for_currency Whether this card is the default external account for its currency. + * @property null|string $dynamic_last4 (For tokenized numbers only.) The last four digits of the device account number. + * @property int $exp_month Two-digit number representing the card's expiration month. + * @property int $exp_year Four-digit number representing the card's expiration year. + * @property null|string $fingerprint Uniquely identifies this particular card number. You can use this attribute to check whether two customers who’ve signed up with you are using the same card number, for example. For payment methods that tokenize card information (Apple Pay, Google Pay), the tokenized number might be provided instead of the underlying card number. + * @property string $funding Card funding type. Can be credit, debit, prepaid, or unknown. + * @property string $last4 The last four digits of the card. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $name Cardholder name. + * @property null|string|\Stripe\Recipient $recipient The recipient that this card belongs to. This attribute will not be in the card object if the card belongs to a customer or account instead. + * @property null|string $tokenization_method If the card number is tokenized, this is the method that was used. Can be android_pay (includes Google Pay), apple_pay, masterpass, visa_checkout, or null. + */ +class Card extends ApiResource +{ + const OBJECT_NAME = 'card'; + + use ApiOperations\Delete; + use ApiOperations\Update; + + /** + * Possible string representations of the CVC check status. + * + * @see https://stripe.com/docs/api/cards/object#card_object-cvc_check + */ + const CVC_CHECK_FAIL = 'fail'; + const CVC_CHECK_PASS = 'pass'; + const CVC_CHECK_UNAVAILABLE = 'unavailable'; + const CVC_CHECK_UNCHECKED = 'unchecked'; + + /** + * Possible string representations of the funding of the card. + * + * @see https://stripe.com/docs/api/cards/object#card_object-funding + */ + const FUNDING_CREDIT = 'credit'; + const FUNDING_DEBIT = 'debit'; + const FUNDING_PREPAID = 'prepaid'; + const FUNDING_UNKNOWN = 'unknown'; + + /** + * Possible string representations of the tokenization method when using Apple Pay or Google Pay. + * + * @see https://stripe.com/docs/api/cards/object#card_object-tokenization_method + */ + const TOKENIZATION_METHOD_APPLE_PAY = 'apple_pay'; + const TOKENIZATION_METHOD_GOOGLE_PAY = 'google_pay'; + + /** + * @return string The instance URL for this resource. It needs to be special + * cased because cards are nested resources that may belong to different + * top-level resources. + */ + public function instanceUrl() + { + if ($this['customer']) { + $base = Customer::classUrl(); + $parent = $this['customer']; + $path = 'sources'; + } elseif ($this['account']) { + $base = Account::classUrl(); + $parent = $this['account']; + $path = 'external_accounts'; + } elseif ($this['recipient']) { + $base = Recipient::classUrl(); + $parent = $this['recipient']; + $path = 'cards'; + } else { + $msg = 'Cards cannot be accessed without a customer ID, account ID or recipient ID.'; + + throw new Exception\UnexpectedValueException($msg); + } + $parentExtn = \urlencode(Util\Util::utf8($parent)); + $extn = \urlencode(Util\Util::utf8($this['id'])); + + return "{$base}/{$parentExtn}/{$path}/{$extn}"; + } + + /** + * @param array|string $_id + * @param null|array|string $_opts + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function retrieve($_id, $_opts = null) + { + $msg = 'Cards cannot be retrieved without a customer ID or an ' . + 'account ID. Retrieve a card using ' . + "`Customer::retrieveSource('customer_id', 'card_id')` or " . + "`Account::retrieveExternalAccount('account_id', 'card_id')`."; + + throw new Exception\BadMethodCallException($msg); + } + + /** + * @param string $_id + * @param null|array $_params + * @param null|array|string $_options + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function update($_id, $_params = null, $_options = null) + { + $msg = 'Cards cannot be updated without a customer ID or an ' . + 'account ID. Update a card using ' . + "`Customer::updateSource('customer_id', 'card_id', " . + '$updateParams)` or `Account::updateExternalAccount(' . + "'account_id', 'card_id', \$updateParams)`."; + + throw new Exception\BadMethodCallException($msg); + } +} diff --git a/vendor/stripe/stripe-php/lib/Charge.php b/vendor/stripe/stripe-php/lib/Charge.php new file mode 100644 index 000000000..799bede85 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Charge.php @@ -0,0 +1,146 @@ +Charge object. You + * can retrieve and refund individual charges as well as list all charges. Charges + * are identified by a unique, random ID. + * + * Related guide: Accept a + * payment with the Charges API. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount intended to be collected by this payment. A positive integer representing how much to charge in the smallest currency unit (e.g., 100 cents to charge $1.00 or 100 to charge ¥100, a zero-decimal currency). The minimum amount is $0.50 US or equivalent in charge currency. The amount value supports up to eight digits (e.g., a value of 99999999 for a USD charge of $999,999.99). + * @property int $amount_captured Amount in %s captured (can be less than the amount attribute on the charge if a partial capture was made). + * @property int $amount_refunded Amount in %s refunded (can be less than the amount attribute on the charge if a partial refund was issued). + * @property null|string|\Stripe\StripeObject $application ID of the Connect application that created the charge. + * @property null|string|\Stripe\ApplicationFee $application_fee The application fee (if any) for the charge. See the Connect documentation for details. + * @property null|int $application_fee_amount The amount of the application fee (if any) requested for the charge. See the Connect documentation for details. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction ID of the balance transaction that describes the impact of this charge on your account balance (not including refunds or disputes). + * @property \Stripe\StripeObject $billing_details + * @property null|string $calculated_statement_descriptor The full statement descriptor that is passed to card networks, and that is displayed on your customers' credit card and bank statements. Allows you to see what the statement descriptor looks like after the static and dynamic portions are combined. + * @property bool $captured If the charge was created without capturing, this Boolean represents whether it is still uncaptured or has since been captured. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string|\Stripe\Customer $customer ID of the customer this charge is for if one exists. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|string|\Stripe\Account $destination ID of an existing, connected Stripe account to transfer funds to if transfer_data was specified in the charge request. + * @property null|string|\Stripe\Dispute $dispute Details about the dispute if the charge has been disputed. + * @property bool $disputed Whether the charge has been disputed. + * @property null|string $failure_code Error code explaining reason for charge failure if available (see the errors section for a list of codes). + * @property null|string $failure_message Message to user further explaining reason for charge failure if available. + * @property null|\Stripe\StripeObject $fraud_details Information on fraud assessments for the charge. + * @property null|string|\Stripe\Invoice $invoice ID of the invoice this charge is for if one exists. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string|\Stripe\Account $on_behalf_of The account (if any) the charge was made on behalf of without triggering an automatic transfer. See the Connect documentation for details. + * @property null|string|\Stripe\Order $order ID of the order this charge is for if one exists. + * @property null|\Stripe\StripeObject $outcome Details about whether the payment was accepted, and why. See understanding declines for details. + * @property bool $paid true if the charge succeeded, or was successfully authorized for later capture. + * @property null|string|\Stripe\PaymentIntent $payment_intent ID of the PaymentIntent associated with this charge, if one exists. + * @property null|string $payment_method ID of the payment method used in this charge. + * @property null|\Stripe\StripeObject $payment_method_details Details about the payment method at the time of the transaction. + * @property null|string $receipt_email This is the email address that the receipt for this charge was sent to. + * @property null|string $receipt_number This is the transaction number that appears on email receipts sent for this charge. This attribute will be null until a receipt has been sent. + * @property null|string $receipt_url This is the URL to view the receipt for this charge. The receipt is kept up-to-date to the latest state of the charge, including any refunds. If the charge is for an Invoice, the receipt will be stylized as an Invoice receipt. + * @property bool $refunded Whether the charge has been fully refunded. If the charge is only partially refunded, this attribute will still be false. + * @property \Stripe\Collection $refunds A list of refunds that have been applied to the charge. + * @property null|string|\Stripe\Review $review ID of the review associated with this charge if one exists. + * @property null|\Stripe\StripeObject $shipping Shipping information for the charge. + * @property null|\Stripe\Account|\Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source $source This is a legacy field that will be removed in the future. It contains the Source, Card, or BankAccount object used for the charge. For details about the payment method used for this charge, refer to payment_method or payment_method_details instead. + * @property null|string|\Stripe\Transfer $source_transfer The transfer ID which created this charge. Only present if the charge came from another Stripe account. See the Connect documentation for details. + * @property null|string $statement_descriptor For card charges, use statement_descriptor_suffix instead. Otherwise, you can use this value as the complete description of a charge on your customers’ statements. Must contain at least one letter, maximum 22 characters. + * @property null|string $statement_descriptor_suffix Provides information about the charge that customers see on their statements. Concatenated with the prefix (shortened descriptor) or statement descriptor that’s set on the account to form the complete statement descriptor. Maximum 22 characters for the concatenated descriptor. + * @property string $status The status of the payment is either succeeded, pending, or failed. + * @property string|\Stripe\Transfer $transfer ID of the transfer to the destination account (only applicable if the charge was created using the destination parameter). + * @property null|\Stripe\StripeObject $transfer_data An optional dictionary including the account to automatically transfer to as part of a destination charge. See the Connect documentation for details. + * @property null|string $transfer_group A string that identifies this transaction as part of a group. See the Connect documentation for details. + */ +class Charge extends ApiResource +{ + const OBJECT_NAME = 'charge'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const STATUS_FAILED = 'failed'; + const STATUS_PENDING = 'pending'; + const STATUS_SUCCEEDED = 'succeeded'; + + /** + * Possible string representations of decline codes. + * These strings are applicable to the decline_code property of the \Stripe\Exception\CardException exception. + * + * @see https://stripe.com/docs/declines/codes + */ + const DECLINED_AUTHENTICATION_REQUIRED = 'authentication_required'; + const DECLINED_APPROVE_WITH_ID = 'approve_with_id'; + const DECLINED_CALL_ISSUER = 'call_issuer'; + const DECLINED_CARD_NOT_SUPPORTED = 'card_not_supported'; + const DECLINED_CARD_VELOCITY_EXCEEDED = 'card_velocity_exceeded'; + const DECLINED_CURRENCY_NOT_SUPPORTED = 'currency_not_supported'; + const DECLINED_DO_NOT_HONOR = 'do_not_honor'; + const DECLINED_DO_NOT_TRY_AGAIN = 'do_not_try_again'; + const DECLINED_DUPLICATED_TRANSACTION = 'duplicate_transaction'; + const DECLINED_EXPIRED_CARD = 'expired_card'; + const DECLINED_FRAUDULENT = 'fraudulent'; + const DECLINED_GENERIC_DECLINE = 'generic_decline'; + const DECLINED_INCORRECT_NUMBER = 'incorrect_number'; + const DECLINED_INCORRECT_CVC = 'incorrect_cvc'; + const DECLINED_INCORRECT_PIN = 'incorrect_pin'; + const DECLINED_INCORRECT_ZIP = 'incorrect_zip'; + const DECLINED_INSUFFICIENT_FUNDS = 'insufficient_funds'; + const DECLINED_INVALID_ACCOUNT = 'invalid_account'; + const DECLINED_INVALID_AMOUNT = 'invalid_amount'; + const DECLINED_INVALID_CVC = 'invalid_cvc'; + const DECLINED_INVALID_EXPIRY_YEAR = 'invalid_expiry_year'; + const DECLINED_INVALID_NUMBER = 'invalid_number'; + const DECLINED_INVALID_PIN = 'invalid_pin'; + const DECLINED_ISSUER_NOT_AVAILABLE = 'issuer_not_available'; + const DECLINED_LOST_CARD = 'lost_card'; + const DECLINED_MERCHANT_BLACKLIST = 'merchant_blacklist'; + const DECLINED_NEW_ACCOUNT_INFORMATION_AVAILABLE = 'new_account_information_available'; + const DECLINED_NO_ACTION_TAKEN = 'no_action_taken'; + const DECLINED_NOT_PERMITTED = 'not_permitted'; + const DECLINED_OFFLINE_PIN_REQUIRED = 'offline_pin_required'; + const DECLINED_ONLINE_OR_OFFLINE_PIN_REQUIRED = 'online_or_offline_pin_required'; + const DECLINED_PICKUP_CARD = 'pickup_card'; + const DECLINED_PIN_TRY_EXCEEDED = 'pin_try_exceeded'; + const DECLINED_PROCESSING_ERROR = 'processing_error'; + const DECLINED_REENTER_TRANSACTION = 'reenter_transaction'; + const DECLINED_RESTRICTED_CARD = 'restricted_card'; + const DECLINED_REVOCATION_OF_ALL_AUTHORIZATIONS = 'revocation_of_all_authorizations'; + const DECLINED_REVOCATION_OF_AUTHORIZATION = 'revocation_of_authorization'; + const DECLINED_SECURITY_VIOLATION = 'security_violation'; + const DECLINED_SERVICE_NOT_ALLOWED = 'service_not_allowed'; + const DECLINED_STOLEN_CARD = 'stolen_card'; + const DECLINED_STOP_PAYMENT_ORDER = 'stop_payment_order'; + const DECLINED_TESTMODE_DECLINE = 'testmode_decline'; + const DECLINED_TRANSACTION_NOT_ALLOWED = 'transaction_not_allowed'; + const DECLINED_TRY_AGAIN_LATER = 'try_again_later'; + const DECLINED_WITHDRAWAL_COUNT_LIMIT_EXCEEDED = 'withdrawal_count_limit_exceeded'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Charge the captured charge + */ + public function capture($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/capture'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Checkout/Session.php b/vendor/stripe/stripe-php/lib/Checkout/Session.php new file mode 100644 index 000000000..464a2b9a5 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Checkout/Session.php @@ -0,0 +1,88 @@ +Checkout. We recommend + * creating a new Session each time your customer attempts to pay. + * + * Once payment is successful, the Checkout Session will contain a reference to the + * Customer, and either the + * successful PaymentIntent or an + * active Subscription. + * + * You can create a Checkout Session on your server and pass its ID to the client + * to begin Checkout. + * + * Related guide: Checkout + * Server Quickstart. + * + * @property string $id Unique identifier for the object. Used to pass to redirectToCheckout in Stripe.js. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|bool $allow_promotion_codes Enables user redeemable promotion codes. + * @property null|int $amount_subtotal Total of all items before discounts or taxes are applied. + * @property null|int $amount_total Total of all items after discounts and taxes are applied. + * @property null|string $billing_address_collection Describes whether Checkout should collect the customer's billing address. + * @property string $cancel_url The URL the customer will be directed to if they decide to cancel payment and return to your website. + * @property null|string $client_reference_id A unique string to reference the Checkout Session. This can be a customer ID, a cart ID, or similar, and can be used to reconcile the session with your internal systems. + * @property null|string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string|\Stripe\Customer $customer The ID of the customer for this session. For Checkout Sessions in payment or subscription mode, Checkout will create a new customer object based on information provided during the session unless an existing customer was provided when the session was created. + * @property null|string $customer_email If provided, this value will be used when the Customer object is created. If not provided, customers will be asked to enter their email address. Use this parameter to prefill customer data if you already have an email on file. To access information about the customer once a session is complete, use the customer attribute. + * @property \Stripe\Collection $line_items The line items purchased by the customer. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string $locale The IETF language tag of the locale Checkout is displayed in. If blank or auto, the browser's locale is used. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $mode The mode of the Checkout Session. + * @property null|string|\Stripe\PaymentIntent $payment_intent The ID of the PaymentIntent for Checkout Sessions in payment mode. + * @property string[] $payment_method_types A list of the types of payment methods (e.g. card) this Checkout Session is allowed to accept. + * @property string $payment_status The payment status of the Checkout Session, one of paid, unpaid, or no_payment_required. You can use this value to decide when to fulfill your customer's order. + * @property null|string|\Stripe\SetupIntent $setup_intent The ID of the SetupIntent for Checkout Sessions in setup mode. + * @property null|\Stripe\StripeObject $shipping Shipping information for this Checkout Session. + * @property null|\Stripe\StripeObject $shipping_address_collection When set, provides configuration for Checkout to collect a shipping address from a customer. + * @property null|string $submit_type Describes the type of transaction being performed by Checkout in order to customize relevant text on the page, such as the submit button. submit_type can only be specified on Checkout Sessions in payment mode, but not Checkout Sessions in subscription or setup mode. + * @property null|string|\Stripe\Subscription $subscription The ID of the subscription for Checkout Sessions in subscription mode. + * @property string $success_url The URL the customer will be directed to after the payment or subscription creation is successful. + * @property null|\Stripe\StripeObject $total_details Tax and discount details for the computed total amount. + */ +class Session extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'checkout.session'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\NestedResource; + use \Stripe\ApiOperations\Retrieve; + + const BILLING_ADDRESS_COLLECTION_AUTO = 'auto'; + const BILLING_ADDRESS_COLLECTION_REQUIRED = 'required'; + + const PAYMENT_STATUS_NO_PAYMENT_REQUIRED = 'no_payment_required'; + const PAYMENT_STATUS_PAID = 'paid'; + const PAYMENT_STATUS_UNPAID = 'unpaid'; + + const SUBMIT_TYPE_AUTO = 'auto'; + const SUBMIT_TYPE_BOOK = 'book'; + const SUBMIT_TYPE_DONATE = 'donate'; + const SUBMIT_TYPE_PAY = 'pay'; + + const PATH_LINE_ITEMS = '/line_items'; + + /** + * @param string $id the ID of the session on which to retrieve the items + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of items + */ + public static function allLineItems($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_LINE_ITEMS, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Collection.php b/vendor/stripe/stripe-php/lib/Collection.php new file mode 100644 index 000000000..ec5bebb7a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Collection.php @@ -0,0 +1,281 @@ +filters; + } + + /** + * Sets the filters, removing paging options. + * + * @param array $filters the filters + */ + public function setFilters($filters) + { + $this->filters = $filters; + } + + public function offsetGet($k) + { + if (\is_string($k)) { + return parent::offsetGet($k); + } + $msg = "You tried to access the {$k} index, but Collection " . + 'types only support string keys. (HINT: List calls ' . + 'return an object with a `data` (which is the data ' . + "array). You likely want to call ->data[{$k}])"; + + throw new Exception\InvalidArgumentException($msg); + } + + public function all($params = null, $opts = null) + { + self::_validateParams($params); + list($url, $params) = $this->extractPathAndUpdateParams($params); + + list($response, $opts) = $this->_request('get', $url, $params, $opts); + $obj = Util\Util::convertToStripeObject($response, $opts); + if (!($obj instanceof \Stripe\Collection)) { + throw new \Stripe\Exception\UnexpectedValueException( + 'Expected type ' . \Stripe\Collection::class . ', got "' . \get_class($obj) . '" instead.' + ); + } + $obj->setFilters($params); + + return $obj; + } + + public function create($params = null, $opts = null) + { + self::_validateParams($params); + list($url, $params) = $this->extractPathAndUpdateParams($params); + + list($response, $opts) = $this->_request('post', $url, $params, $opts); + + return Util\Util::convertToStripeObject($response, $opts); + } + + public function retrieve($id, $params = null, $opts = null) + { + self::_validateParams($params); + list($url, $params) = $this->extractPathAndUpdateParams($params); + + $id = Util\Util::utf8($id); + $extn = \urlencode($id); + list($response, $opts) = $this->_request( + 'get', + "{$url}/{$extn}", + $params, + $opts + ); + + return Util\Util::convertToStripeObject($response, $opts); + } + + /** + * @return int the number of objects in the current page + */ + public function count() + { + return \count($this->data); + } + + /** + * @return \ArrayIterator an iterator that can be used to iterate + * across objects in the current page + */ + public function getIterator() + { + return new \ArrayIterator($this->data); + } + + /** + * @return \ArrayIterator an iterator that can be used to iterate + * backwards across objects in the current page + */ + public function getReverseIterator() + { + return new \ArrayIterator(\array_reverse($this->data)); + } + + /** + * @return \Generator|StripeObject[] A generator that can be used to + * iterate across all objects across all pages. As page boundaries are + * encountered, the next page will be fetched automatically for + * continued iteration. + */ + public function autoPagingIterator() + { + $page = $this; + + while (true) { + $filters = $this->filters ?: []; + if (\array_key_exists('ending_before', $filters) && + !\array_key_exists('starting_after', $filters)) { + foreach ($page->getReverseIterator() as $item) { + yield $item; + } + $page = $page->previousPage(); + } else { + foreach ($page as $item) { + yield $item; + } + $page = $page->nextPage(); + } + + if ($page->isEmpty()) { + break; + } + } + } + + /** + * Returns an empty collection. This is returned from {@see nextPage()} + * when we know that there isn't a next page in order to replicate the + * behavior of the API when it attempts to return a page beyond the last. + * + * @param null|array|string $opts + * + * @return Collection + */ + public static function emptyCollection($opts = null) + { + return Collection::constructFrom(['data' => []], $opts); + } + + /** + * Returns true if the page object contains no element. + * + * @return bool + */ + public function isEmpty() + { + return empty($this->data); + } + + /** + * Fetches the next page in the resource list (if there is one). + * + * This method will try to respect the limit of the current page. If none + * was given, the default limit will be fetched again. + * + * @param null|array $params + * @param null|array|string $opts + * + * @return Collection + */ + public function nextPage($params = null, $opts = null) + { + if (!$this->has_more) { + return static::emptyCollection($opts); + } + + $lastId = \end($this->data)->id; + + $params = \array_merge( + $this->filters ?: [], + ['starting_after' => $lastId], + $params ?: [] + ); + + return $this->all($params, $opts); + } + + /** + * Fetches the previous page in the resource list (if there is one). + * + * This method will try to respect the limit of the current page. If none + * was given, the default limit will be fetched again. + * + * @param null|array $params + * @param null|array|string $opts + * + * @return Collection + */ + public function previousPage($params = null, $opts = null) + { + if (!$this->has_more) { + return static::emptyCollection($opts); + } + + $firstId = $this->data[0]->id; + + $params = \array_merge( + $this->filters ?: [], + ['ending_before' => $firstId], + $params ?: [] + ); + + return $this->all($params, $opts); + } + + /** + * Gets the first item from the current page. Returns `null` if the current page is empty. + * + * @return null|\Stripe\StripeObject + */ + public function first() + { + return \count($this->data) > 0 ? $this->data[0] : null; + } + + /** + * Gets the last item from the current page. Returns `null` if the current page is empty. + * + * @return null|\Stripe\StripeObject + */ + public function last() + { + return \count($this->data) > 0 ? $this->data[\count($this->data) - 1] : null; + } + + private function extractPathAndUpdateParams($params) + { + $url = \parse_url($this->url); + if (!isset($url['path'])) { + throw new Exception\UnexpectedValueException("Could not parse list url into parts: {$url}"); + } + + if (isset($url['query'])) { + // If the URL contains a query param, parse it out into $params so they + // don't interact weirdly with each other. + $query = []; + \parse_str($url['query'], $query); + $params = \array_merge($params ?: [], $query); + } + + return [$url['path'], $params]; + } +} diff --git a/vendor/stripe/stripe-php/lib/CountrySpec.php b/vendor/stripe/stripe-php/lib/CountrySpec.php new file mode 100644 index 000000000..223afb316 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/CountrySpec.php @@ -0,0 +1,30 @@ +an online guide. + * + * @property string $id Unique identifier for the object. Represented as the ISO country code for this country. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string $default_currency The default currency for this country. This applies to both payment methods and bank accounts. + * @property \Stripe\StripeObject $supported_bank_account_currencies Currencies that can be accepted in the specific country (for transfers). + * @property string[] $supported_payment_currencies Currencies that can be accepted in the specified country (for payments). + * @property string[] $supported_payment_methods Payment methods available in the specified country. You may need to enable some payment methods (e.g., ACH) on your account before they appear in this list. The stripe payment method refers to charging through your platform. + * @property string[] $supported_transfer_countries Countries that can accept transfers from the specified country. + * @property \Stripe\StripeObject $verification_fields + */ +class CountrySpec extends ApiResource +{ + const OBJECT_NAME = 'country_spec'; + + use ApiOperations\All; + use ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/Coupon.php b/vendor/stripe/stripe-php/lib/Coupon.php new file mode 100644 index 000000000..41afdcfc9 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Coupon.php @@ -0,0 +1,41 @@ +invoices or orders. Coupons do + * not work with conventional one-off charges. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|int $amount_off Amount (in the currency specified) that will be taken off the subtotal of any invoices for this customer. + * @property \Stripe\StripeObject $applies_to + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $currency If amount_off has been set, the three-letter ISO code for the currency of the amount to take off. + * @property string $duration One of forever, once, and repeating. Describes how long a customer who applies this coupon will get the discount. + * @property null|int $duration_in_months If duration is repeating, the number of months the coupon applies. Null if coupon duration is forever or once. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|int $max_redemptions Maximum number of times this coupon can be redeemed, in total, across all customers, before it is no longer valid. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $name Name of the coupon displayed to customers on for instance invoices or receipts. + * @property null|float $percent_off Percent that will be taken off the subtotal of any invoices for this customer for the duration of the coupon. For example, a coupon with percent_off of 50 will make a %s100 invoice %s50 instead. + * @property null|int $redeem_by Date after which the coupon can no longer be redeemed. + * @property int $times_redeemed Number of times this coupon has been applied to a customer. + * @property bool $valid Taking account of the above properties, whether this coupon can still be applied to a customer. + */ +class Coupon extends ApiResource +{ + const OBJECT_NAME = 'coupon'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/CreditNote.php b/vendor/stripe/stripe-php/lib/CreditNote.php new file mode 100644 index 000000000..cc523a9f7 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/CreditNote.php @@ -0,0 +1,111 @@ +Credit Notes. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount The integer amount in %s representing the total amount of the credit note, including tax. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string|\Stripe\Customer $customer ID of the customer. + * @property null|string|\Stripe\CustomerBalanceTransaction $customer_balance_transaction Customer balance transaction related to this credit note. + * @property int $discount_amount The integer amount in %s representing the total amount of discount that was credited. + * @property \Stripe\StripeObject[] $discount_amounts The aggregate amounts calculated per discount for all line items. + * @property string|\Stripe\Invoice $invoice ID of the invoice. + * @property \Stripe\Collection $lines Line items that make up the credit note + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string $memo Customer-facing text that appears on the credit note PDF. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $number A unique number that identifies this particular credit note and appears on the PDF of the credit note and its associated invoice. + * @property null|int $out_of_band_amount Amount that was credited outside of Stripe. + * @property string $pdf The link to download the PDF of the credit note. + * @property null|string $reason Reason for issuing this credit note, one of duplicate, fraudulent, order_change, or product_unsatisfactory + * @property null|string|\Stripe\Refund $refund Refund related to this credit note. + * @property string $status Status of this credit note, one of issued or void. Learn more about voiding credit notes. + * @property int $subtotal The integer amount in %s representing the amount of the credit note, excluding tax and invoice level discounts. + * @property \Stripe\StripeObject[] $tax_amounts The aggregate amounts calculated per tax rate for all line items. + * @property int $total The integer amount in %s representing the total amount of the credit note, including tax and all discount. + * @property string $type Type of this credit note, one of pre_payment or post_payment. A pre_payment credit note means it was issued when the invoice was open. A post_payment credit note means it was issued when the invoice was paid. + * @property null|int $voided_at The time that the credit note was voided. + */ +class CreditNote extends ApiResource +{ + const OBJECT_NAME = 'credit_note'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\NestedResource; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const REASON_DUPLICATE = 'duplicate'; + const REASON_FRAUDULENT = 'fraudulent'; + const REASON_ORDER_CHANGE = 'order_change'; + const REASON_PRODUCT_UNSATISFACTORY = 'product_unsatisfactory'; + + const STATUS_ISSUED = 'issued'; + const STATUS_VOID = 'void'; + + const TYPE_POST_PAYMENT = 'post_payment'; + const TYPE_PRE_PAYMENT = 'pre_payment'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote the previewed credit note + */ + public static function preview($params = null, $opts = null) + { + $url = static::classUrl() . '/preview'; + list($response, $opts) = static::_staticRequest('get', $url, $params, $opts); + $obj = Util\Util::convertToStripeObject($response->json, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return CreditNote the voided credit note + */ + public function voidCreditNote($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/void'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + const PATH_LINES = '/lines'; + + /** + * @param string $id the ID of the credit note on which to retrieve the credit note line items + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of credit note line items + */ + public static function allLines($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_LINES, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/CreditNoteLineItem.php b/vendor/stripe/stripe-php/lib/CreditNoteLineItem.php new file mode 100644 index 000000000..254886b75 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/CreditNoteLineItem.php @@ -0,0 +1,26 @@ +true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|int $quantity The number of units of product being credited. + * @property \Stripe\StripeObject[] $tax_amounts The amount of tax calculated per tax rate for this line item + * @property \Stripe\TaxRate[] $tax_rates The tax rates which apply to the line item. + * @property string $type The type of the credit note line item, one of invoice_line_item or custom_line_item. When the type is invoice_line_item there is an additional invoice_line_item property on the resource the value of which is the id of the credited line item on the invoice. + * @property null|int $unit_amount The cost of each unit of product being credited. + * @property null|string $unit_amount_decimal Same as unit_amount, but contains a decimal value with at most 12 decimal places. + */ +class CreditNoteLineItem extends ApiResource +{ + const OBJECT_NAME = 'credit_note_line_item'; +} diff --git a/vendor/stripe/stripe-php/lib/Customer.php b/vendor/stripe/stripe-php/lib/Customer.php new file mode 100644 index 000000000..c3a42cd8a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Customer.php @@ -0,0 +1,276 @@ +Customer objects allow you to perform recurring charges, and to + * track multiple charges, that are associated with the same customer. The API + * allows you to create, delete, and update your customers. You can retrieve + * individual customers as well as a list of all your customers. + * + * Related guide: Save a card during + * payment. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|\Stripe\StripeObject $address The customer's address. + * @property int $balance Current balance, if any, being stored on the customer. If negative, the customer has credit to apply to their next invoice. If positive, the customer has an amount owed that will be added to their next invoice. The balance does not refer to any unpaid invoices; it solely takes into account amounts that have yet to be successfully applied to any invoice. This balance is only taken into account as invoices are finalized. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $currency Three-letter ISO code for the currency the customer can be charged in for recurring billing purposes. + * @property null|string|\Stripe\Account|\Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source $default_source

ID of the default payment source for the customer.

If you are using payment methods created via the PaymentMethods API, see the invoice_settings.default_payment_method field instead.

+ * @property null|bool $delinquent

When the customer's latest invoice is billed by charging automatically, delinquent is true if the invoice's latest charge failed. When the customer's latest invoice is billed by sending an invoice, delinquent is true if the invoice isn't paid by its due date.

If an invoice is marked uncollectible by dunning, delinquent doesn't get reset to false.

+ * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|\Stripe\Discount $discount Describes the current discount active on the customer, if there is one. + * @property null|string $email The customer's email address. + * @property null|string $invoice_prefix The prefix for the customer used to generate unique invoice numbers. + * @property \Stripe\StripeObject $invoice_settings + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $name The customer's full name or business name. + * @property int $next_invoice_sequence The suffix of the customer's next invoice number, e.g., 0001. + * @property null|string $phone The customer's phone number. + * @property null|string[] $preferred_locales The customer's preferred locales (languages), ordered by preference. + * @property null|\Stripe\StripeObject $shipping Mailing and shipping address for the customer. Appears on invoices emailed to this customer. + * @property \Stripe\Collection $sources The customer's payment sources, if any. + * @property \Stripe\Collection $subscriptions The customer's current subscriptions, if any. + * @property null|string $tax_exempt Describes the customer's tax exemption status. One of none, exempt, or reverse. When set to reverse, invoice and receipt PDFs include the text "Reverse charge". + * @property \Stripe\Collection $tax_ids The customer's tax IDs. + */ +class Customer extends ApiResource +{ + const OBJECT_NAME = 'customer'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\NestedResource; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const TAX_EXEMPT_EXEMPT = 'exempt'; + const TAX_EXEMPT_NONE = 'none'; + const TAX_EXEMPT_REVERSE = 'reverse'; + + public static function getSavedNestedResources() + { + static $savedNestedResources = null; + if (null === $savedNestedResources) { + $savedNestedResources = new Util\Set([ + 'source', + ]); + } + + return $savedNestedResources; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @return \Stripe\Customer the updated customer + */ + public function deleteDiscount($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/discount'; + list($response, $opts) = $this->_request('delete', $url, $params, $opts); + $this->refreshFrom(['discount' => null], $opts, true); + } + + const PATH_BALANCE_TRANSACTIONS = '/balance_transactions'; + + /** + * @param string $id the ID of the customer on which to retrieve the customer balance transactions + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of customer balance transactions + */ + public static function allBalanceTransactions($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_BALANCE_TRANSACTIONS, $params, $opts); + } + + /** + * @param string $id the ID of the customer on which to create the customer balance transaction + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CustomerBalanceTransaction + */ + public static function createBalanceTransaction($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_BALANCE_TRANSACTIONS, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the customer balance transaction belongs + * @param string $balanceTransactionId the ID of the customer balance transaction to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CustomerBalanceTransaction + */ + public static function retrieveBalanceTransaction($id, $balanceTransactionId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_BALANCE_TRANSACTIONS, $balanceTransactionId, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the customer balance transaction belongs + * @param string $balanceTransactionId the ID of the customer balance transaction to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CustomerBalanceTransaction + */ + public static function updateBalanceTransaction($id, $balanceTransactionId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_BALANCE_TRANSACTIONS, $balanceTransactionId, $params, $opts); + } + + const PATH_SOURCES = '/sources'; + + /** + * @param string $id the ID of the customer on which to retrieve the payment sources + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of payment sources (AlipayAccount, BankAccount, BitcoinReceiver, Card or Source) + */ + public static function allSources($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_SOURCES, $params, $opts); + } + + /** + * @param string $id the ID of the customer on which to create the payment source + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public static function createSource($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_SOURCES, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the payment source belongs + * @param string $sourceId the ID of the payment source to delete + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public static function deleteSource($id, $sourceId, $params = null, $opts = null) + { + return self::_deleteNestedResource($id, static::PATH_SOURCES, $sourceId, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the payment source belongs + * @param string $sourceId the ID of the payment source to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public static function retrieveSource($id, $sourceId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_SOURCES, $sourceId, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the payment source belongs + * @param string $sourceId the ID of the payment source to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public static function updateSource($id, $sourceId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_SOURCES, $sourceId, $params, $opts); + } + + const PATH_TAX_IDS = '/tax_ids'; + + /** + * @param string $id the ID of the customer on which to retrieve the tax ids + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of tax ids + */ + public static function allTaxIds($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_TAX_IDS, $params, $opts); + } + + /** + * @param string $id the ID of the customer on which to create the tax id + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxId + */ + public static function createTaxId($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_TAX_IDS, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the tax id belongs + * @param string $taxIdId the ID of the tax id to delete + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxId + */ + public static function deleteTaxId($id, $taxIdId, $params = null, $opts = null) + { + return self::_deleteNestedResource($id, static::PATH_TAX_IDS, $taxIdId, $params, $opts); + } + + /** + * @param string $id the ID of the customer to which the tax id belongs + * @param string $taxIdId the ID of the tax id to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxId + */ + public static function retrieveTaxId($id, $taxIdId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_TAX_IDS, $taxIdId, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/CustomerBalanceTransaction.php b/vendor/stripe/stripe-php/lib/CustomerBalanceTransaction.php new file mode 100644 index 000000000..8c306760d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/CustomerBalanceTransaction.php @@ -0,0 +1,103 @@ +balance + * value, which denotes a debit or credit that's automatically applied to their + * next invoice upon finalization. You may modify the value directly by using the + * update customer API, + * or by creating a Customer Balance Transaction, which increments or decrements + * the customer's balance by the specified amount. + * + * Related guide: Customer Balance to + * learn more. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount The amount of the transaction. A negative value is a credit for the customer's balance, and a positive value is a debit to the customer's balance. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\CreditNote $credit_note The ID of the credit note (if any) related to the transaction. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string|\Stripe\Customer $customer The ID of the customer the transaction belongs to. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property int $ending_balance The customer's balance after the transaction was applied. A negative value decreases the amount due on the customer's next invoice. A positive value increases the amount due on the customer's next invoice. + * @property null|string|\Stripe\Invoice $invoice The ID of the invoice (if any) related to the transaction. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $type Transaction type: adjustment, applied_to_invoice, credit_note, initial, invoice_too_large, invoice_too_small, unspent_receiver_credit, or unapplied_from_invoice. See the Customer Balance page to learn more about transaction types. + */ +class CustomerBalanceTransaction extends ApiResource +{ + const OBJECT_NAME = 'customer_balance_transaction'; + + const TYPE_ADJUSTMENT = 'adjustment'; + const TYPE_APPLIED_TO_INVOICE = 'applied_to_invoice'; + const TYPE_CREDIT_NOTE = 'credit_note'; + const TYPE_INITIAL = 'initial'; + const TYPE_INVOICE_TOO_LARGE = 'invoice_too_large'; + const TYPE_INVOICE_TOO_SMALL = 'invoice_too_small'; + const TYPE_UNSPENT_RECEIVER_CREDIT = 'unspent_receiver_credit'; + + const TYPE_ADJUSTEMENT = 'adjustment'; + + /** + * @return string the API URL for this balance transaction + */ + public function instanceUrl() + { + $id = $this['id']; + $customer = $this['customer']; + if (!$id) { + throw new Exception\UnexpectedValueException( + "Could not determine which URL to request: class instance has invalid ID: {$id}", + null + ); + } + $id = Util\Util::utf8($id); + $customer = Util\Util::utf8($customer); + + $base = Customer::classUrl(); + $customerExtn = \urlencode($customer); + $extn = \urlencode($id); + + return "{$base}/{$customerExtn}/balance_transactions/{$extn}"; + } + + /** + * @param array|string $_id + * @param null|array|string $_opts + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function retrieve($_id, $_opts = null) + { + $msg = 'Customer Balance Transactions cannot be retrieved without a ' . + 'customer ID. Retrieve a Customer Balance Transaction using ' . + "`Customer::retrieveBalanceTransaction('customer_id', " . + "'balance_transaction_id')`."; + + throw new Exception\BadMethodCallException($msg); + } + + /** + * @param string $_id + * @param null|array $_params + * @param null|array|string $_options + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function update($_id, $_params = null, $_options = null) + { + $msg = 'Customer Balance Transactions cannot be updated without a ' . + 'customer ID. Update a Customer Balance Transaction using ' . + "`Customer::updateBalanceTransaction('customer_id', " . + "'balance_transaction_id', \$updateParams)`."; + + throw new Exception\BadMethodCallException($msg); + } +} diff --git a/vendor/stripe/stripe-php/lib/Discount.php b/vendor/stripe/stripe-php/lib/Discount.php new file mode 100644 index 000000000..d4656052e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Discount.php @@ -0,0 +1,18 @@ +Disputes and Fraud + * documentation. + * + * Related guide: Disputes and + * Fraud. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Disputed amount. Usually the amount of the charge, but can differ (usually because of currency fluctuation or because only part of the order is disputed). + * @property \Stripe\BalanceTransaction[] $balance_transactions List of zero, one, or two balance transactions that show funds withdrawn and reinstated to your Stripe account as a result of this dispute. + * @property string|\Stripe\Charge $charge ID of the charge that was disputed. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property \Stripe\StripeObject $evidence + * @property \Stripe\StripeObject $evidence_details + * @property bool $is_charge_refundable If true, it is still possible to refund the disputed payment. Once the payment has been fully refunded, no further funds will be withdrawn from your Stripe account as a result of this dispute. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $network_reason_code Network-dependent reason code for the dispute. + * @property null|string|\Stripe\PaymentIntent $payment_intent ID of the PaymentIntent that was disputed. + * @property string $reason Reason given by cardholder for dispute. Possible values are bank_cannot_process, check_returned, credit_not_processed, customer_initiated, debit_not_authorized, duplicate, fraudulent, general, incorrect_account_details, insufficient_funds, product_not_received, product_unacceptable, subscription_canceled, or unrecognized. Read more about dispute reasons. + * @property string $status Current status of dispute. Possible values are warning_needs_response, warning_under_review, warning_closed, needs_response, under_review, charge_refunded, won, or lost. + */ +class Dispute extends ApiResource +{ + const OBJECT_NAME = 'dispute'; + + use ApiOperations\All; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const REASON_BANK_CANNOT_PROCESS = 'bank_cannot_process'; + const REASON_CHECK_RETURNED = 'check_returned'; + const REASON_CREDIT_NOT_PROCESSED = 'credit_not_processed'; + const REASON_CUSTOMER_INITIATED = 'customer_initiated'; + const REASON_DEBIT_NOT_AUTHORIZED = 'debit_not_authorized'; + const REASON_DUPLICATE = 'duplicate'; + const REASON_FRAUDULENT = 'fraudulent'; + const REASON_GENERAL = 'general'; + const REASON_INCORRECT_ACCOUNT_DETAILS = 'incorrect_account_details'; + const REASON_INSUFFICIENT_FUNDS = 'insufficient_funds'; + const REASON_PRODUCT_NOT_RECEIVED = 'product_not_received'; + const REASON_PRODUCT_UNACCEPTABLE = 'product_unacceptable'; + const REASON_SUBSCRIPTION_CANCELED = 'subscription_canceled'; + const REASON_UNRECOGNIZED = 'unrecognized'; + + const STATUS_CHARGE_REFUNDED = 'charge_refunded'; + const STATUS_LOST = 'lost'; + const STATUS_NEEDS_RESPONSE = 'needs_response'; + const STATUS_UNDER_REVIEW = 'under_review'; + const STATUS_WARNING_CLOSED = 'warning_closed'; + const STATUS_WARNING_NEEDS_RESPONSE = 'warning_needs_response'; + const STATUS_WARNING_UNDER_REVIEW = 'warning_under_review'; + const STATUS_WON = 'won'; + + /** + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Dispute the closed dispute + */ + // TODO: add $params to standardize signature + public function close($opts = null) + { + $url = $this->instanceUrl() . '/close'; + list($response, $opts) = $this->_request('post', $url, null, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/EphemeralKey.php b/vendor/stripe/stripe-php/lib/EphemeralKey.php new file mode 100644 index 000000000..544f0d785 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/EphemeralKey.php @@ -0,0 +1,43 @@ +true if the object exists in live mode or the value false if the object exists in test mode. + * @property string $secret The key's secret. You can use this value to make authorized requests to the Stripe API. + * @property array $associated_objects + */ +class EphemeralKey extends ApiResource +{ + const OBJECT_NAME = 'ephemeral_key'; + + use ApiOperations\Delete; + + use ApiOperations\Create { + create as protected _create; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\InvalidArgumentException if stripe_version is missing + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\EphemeralKey the created key + */ + public static function create($params = null, $opts = null) + { + if (!$opts || !isset($opts['stripe_version'])) { + throw new Exception\InvalidArgumentException('stripe_version must be specified to create an ephemeral key'); + } + + return self::_create($params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/ErrorObject.php b/vendor/stripe/stripe-php/lib/ErrorObject.php new file mode 100644 index 000000000..a9fe1a3b2 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ErrorObject.php @@ -0,0 +1,164 @@ + null, + 'code' => null, + 'decline_code' => null, + 'doc_url' => null, + 'message' => null, + 'param' => null, + 'payment_intent' => null, + 'payment_method' => null, + 'setup_intent' => null, + 'source' => null, + 'type' => null, + ], $values); + parent::refreshFrom($values, $opts, $partial); + } +} diff --git a/vendor/stripe/stripe-php/lib/Event.php b/vendor/stripe/stripe-php/lib/Event.php new file mode 100644 index 000000000..518c5d413 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Event.php @@ -0,0 +1,231 @@ +Event object. For example, when a charge succeeds, we create a + * charge.succeeded event; and when an invoice payment attempt fails, + * we create an invoice.payment_failed event. Note that many API + * requests may cause multiple events to be created. For example, if you create a + * new subscription for a customer, you will receive both a + * customer.subscription.created event and a + * charge.succeeded event. + * + * Events occur when the state of another API resource changes. The state of that + * resource at the time of the change is embedded in the event's data field. For + * example, a charge.succeeded event will contain a charge, and an + * invoice.payment_failed event will contain an invoice. + * + * As with other API resources, you can use endpoints to retrieve an individual event or a list of events from the API. + * We also have a separate webhooks system for sending the + * Event objects directly to an endpoint on your server. Webhooks are + * managed in your account + * settings, and our Using + * Webhooks guide will help you get set up. + * + * When using Connect, you can also + * receive notifications of events that occur in connected accounts. For these + * events, there will be an additional account attribute in the + * received Event object. + * + * NOTE: Right now, access to events through the Retrieve Event API is + * guaranteed only for 30 days. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string $account The connected account that originated the event. + * @property null|string $api_version The Stripe API version used to render data. Note: This property is populated only for events on or after October 31, 2014. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property \Stripe\StripeObject $data + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property int $pending_webhooks Number of webhooks that have yet to be successfully delivered (i.e., to return a 20x response) to the URLs you've specified. + * @property null|\Stripe\StripeObject $request Information on the API request that instigated the event. + * @property string $type Description of the event (e.g., invoice.created or charge.refunded). + */ +class Event extends ApiResource +{ + const OBJECT_NAME = 'event'; + + use ApiOperations\All; + use ApiOperations\Retrieve; + + /** + * Possible string representations of event types. + * + * @see https://stripe.com/docs/api#event_types + */ + const ACCOUNT_UPDATED = 'account.updated'; + const ACCOUNT_APPLICATION_AUTHORIZED = 'account.application.authorized'; + const ACCOUNT_APPLICATION_DEAUTHORIZED = 'account.application.deauthorized'; + const ACCOUNT_EXTERNAL_ACCOUNT_CREATED = 'account.external_account.created'; + const ACCOUNT_EXTERNAL_ACCOUNT_DELETED = 'account.external_account.deleted'; + const ACCOUNT_EXTERNAL_ACCOUNT_UPDATED = 'account.external_account.updated'; + const APPLICATION_FEE_CREATED = 'application_fee.created'; + const APPLICATION_FEE_REFUNDED = 'application_fee.refunded'; + const APPLICATION_FEE_REFUND_UPDATED = 'application_fee.refund.updated'; + const BALANCE_AVAILABLE = 'balance.available'; + const CAPABILITY_UPDATED = 'capability.updated'; + const CHARGE_CAPTURED = 'charge.captured'; + const CHARGE_EXPIRED = 'charge.expired'; + const CHARGE_FAILED = 'charge.failed'; + const CHARGE_PENDING = 'charge.pending'; + const CHARGE_REFUNDED = 'charge.refunded'; + const CHARGE_SUCCEEDED = 'charge.succeeded'; + const CHARGE_UPDATED = 'charge.updated'; + const CHARGE_DISPUTE_CLOSED = 'charge.dispute.closed'; + const CHARGE_DISPUTE_CREATED = 'charge.dispute.created'; + const CHARGE_DISPUTE_FUNDS_REINSTATED = 'charge.dispute.funds_reinstated'; + const CHARGE_DISPUTE_FUNDS_WITHDRAWN = 'charge.dispute.funds_withdrawn'; + const CHARGE_DISPUTE_UPDATED = 'charge.dispute.updated'; + const CHARGE_REFUND_UPDATED = 'charge.refund.updated'; + const CHECKOUT_SESSION_ASYNC_PAYMENT_FAILED = 'checkout.session.async_payment_failed'; + const CHECKOUT_SESSION_ASYNC_PAYMENT_SUCCEEDED = 'checkout.session.async_payment_succeeded'; + const CHECKOUT_SESSION_COMPLETED = 'checkout.session.completed'; + const COUPON_CREATED = 'coupon.created'; + const COUPON_DELETED = 'coupon.deleted'; + const COUPON_UPDATED = 'coupon.updated'; + const CREDIT_NOTE_CREATED = 'credit_note.created'; + const CREDIT_NOTE_UPDATED = 'credit_note.updated'; + const CREDIT_NOTE_VOIDED = 'credit_note.voided'; + const CUSTOMER_CREATED = 'customer.created'; + const CUSTOMER_DELETED = 'customer.deleted'; + const CUSTOMER_UPDATED = 'customer.updated'; + const CUSTOMER_DISCOUNT_CREATED = 'customer.discount.created'; + const CUSTOMER_DISCOUNT_DELETED = 'customer.discount.deleted'; + const CUSTOMER_DISCOUNT_UPDATED = 'customer.discount.updated'; + const CUSTOMER_SOURCE_CREATED = 'customer.source.created'; + const CUSTOMER_SOURCE_DELETED = 'customer.source.deleted'; + const CUSTOMER_SOURCE_EXPIRING = 'customer.source.expiring'; + const CUSTOMER_SOURCE_UPDATED = 'customer.source.updated'; + const CUSTOMER_SUBSCRIPTION_CREATED = 'customer.subscription.created'; + const CUSTOMER_SUBSCRIPTION_DELETED = 'customer.subscription.deleted'; + const CUSTOMER_SUBSCRIPTION_PENDING_UPDATE_APPLIED = 'customer.subscription.pending_update_applied'; + const CUSTOMER_SUBSCRIPTION_PENDING_UPDATE_EXPIRED = 'customer.subscription.pending_update_expired'; + const CUSTOMER_SUBSCRIPTION_TRIAL_WILL_END = 'customer.subscription.trial_will_end'; + const CUSTOMER_SUBSCRIPTION_UPDATED = 'customer.subscription.updated'; + const CUSTOMER_TAX_ID_CREATED = 'customer.tax_id.created'; + const CUSTOMER_TAX_ID_DELETED = 'customer.tax_id.deleted'; + const CUSTOMER_TAX_ID_UPDATED = 'customer.tax_id.updated'; + const FILE_CREATED = 'file.created'; + const INVOICE_CREATED = 'invoice.created'; + const INVOICE_DELETED = 'invoice.deleted'; + const INVOICE_FINALIZATION_FAILED = 'invoice.finalization_failed'; + const INVOICE_FINALIZED = 'invoice.finalized'; + const INVOICE_MARKED_UNCOLLECTIBLE = 'invoice.marked_uncollectible'; + const INVOICE_PAID = 'invoice.paid'; + const INVOICE_PAYMENT_ACTION_REQUIRED = 'invoice.payment_action_required'; + const INVOICE_PAYMENT_FAILED = 'invoice.payment_failed'; + const INVOICE_PAYMENT_SUCCEEDED = 'invoice.payment_succeeded'; + const INVOICE_SENT = 'invoice.sent'; + const INVOICE_UPCOMING = 'invoice.upcoming'; + const INVOICE_UPDATED = 'invoice.updated'; + const INVOICE_VOIDED = 'invoice.voided'; + const INVOICEITEM_CREATED = 'invoiceitem.created'; + const INVOICEITEM_DELETED = 'invoiceitem.deleted'; + const INVOICEITEM_UPDATED = 'invoiceitem.updated'; + const ISSUER_FRAUD_RECORD_CREATED = 'issuer_fraud_record.created'; + const ISSUING_AUTHORIZATION_CREATED = 'issuing_authorization.created'; + const ISSUING_AUTHORIZATION_REQUEST = 'issuing_authorization.request'; + const ISSUING_AUTHORIZATION_UPDATED = 'issuing_authorization.updated'; + const ISSUING_CARD_CREATED = 'issuing_card.created'; + const ISSUING_CARD_UPDATED = 'issuing_card.updated'; + const ISSUING_CARDHOLDER_CREATED = 'issuing_cardholder.created'; + const ISSUING_CARDHOLDER_UPDATED = 'issuing_cardholder.updated'; + const ISSUING_DISPUTE_CLOSED = 'issuing_dispute.closed'; + const ISSUING_DISPUTE_CREATED = 'issuing_dispute.created'; + const ISSUING_DISPUTE_FUNDS_REINSTATED = 'issuing_dispute.funds_reinstated'; + const ISSUING_DISPUTE_SUBMITTED = 'issuing_dispute.submitted'; + const ISSUING_DISPUTE_UPDATED = 'issuing_dispute.updated'; + const ISSUING_TRANSACTION_CREATED = 'issuing_transaction.created'; + const ISSUING_TRANSACTION_UPDATED = 'issuing_transaction.updated'; + const MANDATE_UPDATED = 'mandate.updated'; + const ORDER_CREATED = 'order.created'; + const ORDER_PAYMENT_FAILED = 'order.payment_failed'; + const ORDER_PAYMENT_SUCCEEDED = 'order.payment_succeeded'; + const ORDER_UPDATED = 'order.updated'; + const ORDER_RETURN_CREATED = 'order_return.created'; + const PAYMENT_INTENT_AMOUNT_CAPTURABLE_UPDATED = 'payment_intent.amount_capturable_updated'; + const PAYMENT_INTENT_CANCELED = 'payment_intent.canceled'; + const PAYMENT_INTENT_CREATED = 'payment_intent.created'; + const PAYMENT_INTENT_PAYMENT_FAILED = 'payment_intent.payment_failed'; + const PAYMENT_INTENT_PROCESSING = 'payment_intent.processing'; + const PAYMENT_INTENT_REQUIRES_ACTION = 'payment_intent.requires_action'; + const PAYMENT_INTENT_SUCCEEDED = 'payment_intent.succeeded'; + const PAYMENT_METHOD_ATTACHED = 'payment_method.attached'; + const PAYMENT_METHOD_AUTOMATICALLY_UPDATED = 'payment_method.automatically_updated'; + const PAYMENT_METHOD_CARD_AUTOMATICALLY_UPDATED = 'payment_method.card_automatically_updated'; + const PAYMENT_METHOD_DETACHED = 'payment_method.detached'; + const PAYMENT_METHOD_UPDATED = 'payment_method.updated'; + const PAYOUT_CANCELED = 'payout.canceled'; + const PAYOUT_CREATED = 'payout.created'; + const PAYOUT_FAILED = 'payout.failed'; + const PAYOUT_PAID = 'payout.paid'; + const PAYOUT_UPDATED = 'payout.updated'; + const PERSON_CREATED = 'person.created'; + const PERSON_DELETED = 'person.deleted'; + const PERSON_UPDATED = 'person.updated'; + const PING = 'ping'; + const PLAN_CREATED = 'plan.created'; + const PLAN_DELETED = 'plan.deleted'; + const PLAN_UPDATED = 'plan.updated'; + const PRICE_CREATED = 'price.created'; + const PRICE_DELETED = 'price.deleted'; + const PRICE_UPDATED = 'price.updated'; + const PRODUCT_CREATED = 'product.created'; + const PRODUCT_DELETED = 'product.deleted'; + const PRODUCT_UPDATED = 'product.updated'; + const PROMOTION_CODE_CREATED = 'promotion_code.created'; + const PROMOTION_CODE_DELETED = 'promotion_code.deleted'; + const PROMOTION_CODE_UPDATED = 'promotion_code.updated'; + const RADAR_EARLY_FRAUD_WARNING_CREATED = 'radar.early_fraud_warning.created'; + const RADAR_EARLY_FRAUD_WARNING_UPDATED = 'radar.early_fraud_warning.updated'; + const RECIPIENT_CREATED = 'recipient.created'; + const RECIPIENT_DELETED = 'recipient.deleted'; + const RECIPIENT_UPDATED = 'recipient.updated'; + const REPORTING_REPORT_RUN_FAILED = 'reporting.report_run.failed'; + const REPORTING_REPORT_RUN_SUCCEEDED = 'reporting.report_run.succeeded'; + const REPORTING_REPORT_TYPE_UPDATED = 'reporting.report_type.updated'; + const REVIEW_CLOSED = 'review.closed'; + const REVIEW_OPENED = 'review.opened'; + const SETUP_INTENT_CANCELED = 'setup_intent.canceled'; + const SETUP_INTENT_CREATED = 'setup_intent.created'; + const SETUP_INTENT_REQUIRES_ACTION = 'setup_intent.requires_action'; + const SETUP_INTENT_SETUP_FAILED = 'setup_intent.setup_failed'; + const SETUP_INTENT_SUCCEEDED = 'setup_intent.succeeded'; + const SIGMA_SCHEDULED_QUERY_RUN_CREATED = 'sigma.scheduled_query_run.created'; + const SKU_CREATED = 'sku.created'; + const SKU_DELETED = 'sku.deleted'; + const SKU_UPDATED = 'sku.updated'; + const SOURCE_CANCELED = 'source.canceled'; + const SOURCE_CHARGEABLE = 'source.chargeable'; + const SOURCE_FAILED = 'source.failed'; + const SOURCE_MANDATE_NOTIFICATION = 'source.mandate_notification'; + const SOURCE_REFUND_ATTRIBUTES_REQUIRED = 'source.refund_attributes_required'; + const SOURCE_TRANSACTION_CREATED = 'source.transaction.created'; + const SOURCE_TRANSACTION_UPDATED = 'source.transaction.updated'; + const SUBSCRIPTION_SCHEDULE_ABORTED = 'subscription_schedule.aborted'; + const SUBSCRIPTION_SCHEDULE_CANCELED = 'subscription_schedule.canceled'; + const SUBSCRIPTION_SCHEDULE_COMPLETED = 'subscription_schedule.completed'; + const SUBSCRIPTION_SCHEDULE_CREATED = 'subscription_schedule.created'; + const SUBSCRIPTION_SCHEDULE_EXPIRING = 'subscription_schedule.expiring'; + const SUBSCRIPTION_SCHEDULE_RELEASED = 'subscription_schedule.released'; + const SUBSCRIPTION_SCHEDULE_UPDATED = 'subscription_schedule.updated'; + const TAX_RATE_CREATED = 'tax_rate.created'; + const TAX_RATE_UPDATED = 'tax_rate.updated'; + const TOPUP_CANCELED = 'topup.canceled'; + const TOPUP_CREATED = 'topup.created'; + const TOPUP_FAILED = 'topup.failed'; + const TOPUP_REVERSED = 'topup.reversed'; + const TOPUP_SUCCEEDED = 'topup.succeeded'; + const TRANSFER_CREATED = 'transfer.created'; + const TRANSFER_REVERSED = 'transfer.reversed'; + const TRANSFER_UPDATED = 'transfer.updated'; +} diff --git a/vendor/stripe/stripe-php/lib/Exception/ApiConnectionException.php b/vendor/stripe/stripe-php/lib/Exception/ApiConnectionException.php new file mode 100644 index 000000000..33f2ede9e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Exception/ApiConnectionException.php @@ -0,0 +1,12 @@ +setHttpStatus($httpStatus); + $instance->setHttpBody($httpBody); + $instance->setJsonBody($jsonBody); + $instance->setHttpHeaders($httpHeaders); + $instance->setStripeCode($stripeCode); + + $instance->setRequestId(null); + if ($httpHeaders && isset($httpHeaders['Request-Id'])) { + $instance->setRequestId($httpHeaders['Request-Id']); + } + + $instance->setError($instance->constructErrorObject()); + + return $instance; + } + + /** + * Gets the Stripe error object. + * + * @return null|\Stripe\ErrorObject + */ + public function getError() + { + return $this->error; + } + + /** + * Sets the Stripe error object. + * + * @param null|\Stripe\ErrorObject $error + */ + public function setError($error) + { + $this->error = $error; + } + + /** + * Gets the HTTP body as a string. + * + * @return null|string + */ + public function getHttpBody() + { + return $this->httpBody; + } + + /** + * Sets the HTTP body as a string. + * + * @param null|string $httpBody + */ + public function setHttpBody($httpBody) + { + $this->httpBody = $httpBody; + } + + /** + * Gets the HTTP headers array. + * + * @return null|array|\Stripe\Util\CaseInsensitiveArray + */ + public function getHttpHeaders() + { + return $this->httpHeaders; + } + + /** + * Sets the HTTP headers array. + * + * @param null|array|\Stripe\Util\CaseInsensitiveArray $httpHeaders + */ + public function setHttpHeaders($httpHeaders) + { + $this->httpHeaders = $httpHeaders; + } + + /** + * Gets the HTTP status code. + * + * @return null|int + */ + public function getHttpStatus() + { + return $this->httpStatus; + } + + /** + * Sets the HTTP status code. + * + * @param null|int $httpStatus + */ + public function setHttpStatus($httpStatus) + { + $this->httpStatus = $httpStatus; + } + + /** + * Gets the JSON deserialized body. + * + * @return null|array + */ + public function getJsonBody() + { + return $this->jsonBody; + } + + /** + * Sets the JSON deserialized body. + * + * @param null|array $jsonBody + */ + public function setJsonBody($jsonBody) + { + $this->jsonBody = $jsonBody; + } + + /** + * Gets the Stripe request ID. + * + * @return null|string + */ + public function getRequestId() + { + return $this->requestId; + } + + /** + * Sets the Stripe request ID. + * + * @param null|string $requestId + */ + public function setRequestId($requestId) + { + $this->requestId = $requestId; + } + + /** + * Gets the Stripe error code. + * + * Cf. the `CODE_*` constants on {@see \Stripe\ErrorObject} for possible + * values. + * + * @return null|string + */ + public function getStripeCode() + { + return $this->stripeCode; + } + + /** + * Sets the Stripe error code. + * + * @param null|string $stripeCode + */ + public function setStripeCode($stripeCode) + { + $this->stripeCode = $stripeCode; + } + + /** + * Returns the string representation of the exception. + * + * @return string + */ + public function __toString() + { + $statusStr = (null === $this->getHttpStatus()) ? '' : "(Status {$this->getHttpStatus()}) "; + $idStr = (null === $this->getRequestId()) ? '' : "(Request {$this->getRequestId()}) "; + + return "{$statusStr}{$idStr}{$this->getMessage()}"; + } + + protected function constructErrorObject() + { + if (null === $this->jsonBody || !\array_key_exists('error', $this->jsonBody)) { + return null; + } + + return \Stripe\ErrorObject::constructFrom($this->jsonBody['error']); + } +} diff --git a/vendor/stripe/stripe-php/lib/Exception/AuthenticationException.php b/vendor/stripe/stripe-php/lib/Exception/AuthenticationException.php new file mode 100644 index 000000000..9e5c718b1 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Exception/AuthenticationException.php @@ -0,0 +1,11 @@ +setDeclineCode($declineCode); + $instance->setStripeParam($stripeParam); + + return $instance; + } + + /** + * Gets the decline code. + * + * @return null|string + */ + public function getDeclineCode() + { + return $this->declineCode; + } + + /** + * Sets the decline code. + * + * @param null|string $declineCode + */ + public function setDeclineCode($declineCode) + { + $this->declineCode = $declineCode; + } + + /** + * Gets the parameter related to the error. + * + * @return null|string + */ + public function getStripeParam() + { + return $this->stripeParam; + } + + /** + * Sets the parameter related to the error. + * + * @param null|string $stripeParam + */ + public function setStripeParam($stripeParam) + { + $this->stripeParam = $stripeParam; + } +} diff --git a/vendor/stripe/stripe-php/lib/Exception/ExceptionInterface.php b/vendor/stripe/stripe-php/lib/Exception/ExceptionInterface.php new file mode 100644 index 000000000..c84f37de7 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Exception/ExceptionInterface.php @@ -0,0 +1,22 @@ +setStripeParam($stripeParam); + + return $instance; + } + + /** + * Gets the parameter related to the error. + * + * @return null|string + */ + public function getStripeParam() + { + return $this->stripeParam; + } + + /** + * Sets the parameter related to the error. + * + * @param null|string $stripeParam + */ + public function setStripeParam($stripeParam) + { + $this->stripeParam = $stripeParam; + } +} diff --git a/vendor/stripe/stripe-php/lib/Exception/OAuth/ExceptionInterface.php b/vendor/stripe/stripe-php/lib/Exception/OAuth/ExceptionInterface.php new file mode 100644 index 000000000..dd4266201 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Exception/OAuth/ExceptionInterface.php @@ -0,0 +1,10 @@ +jsonBody) { + return null; + } + + return \Stripe\OAuthErrorObject::constructFrom($this->jsonBody); + } +} diff --git a/vendor/stripe/stripe-php/lib/Exception/OAuth/UnknownOAuthErrorException.php b/vendor/stripe/stripe-php/lib/Exception/OAuth/UnknownOAuthErrorException.php new file mode 100644 index 000000000..c8dba29bf --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Exception/OAuth/UnknownOAuthErrorException.php @@ -0,0 +1,12 @@ +setHttpBody($httpBody); + $instance->setSigHeader($sigHeader); + + return $instance; + } + + /** + * Gets the HTTP body as a string. + * + * @return null|string + */ + public function getHttpBody() + { + return $this->httpBody; + } + + /** + * Sets the HTTP body as a string. + * + * @param null|string $httpBody + */ + public function setHttpBody($httpBody) + { + $this->httpBody = $httpBody; + } + + /** + * Gets the `Stripe-Signature` HTTP header. + * + * @return null|string + */ + public function getSigHeader() + { + return $this->sigHeader; + } + + /** + * Sets the `Stripe-Signature` HTTP header. + * + * @param null|string $sigHeader + */ + public function setSigHeader($sigHeader) + { + $this->sigHeader = $sigHeader; + } +} diff --git a/vendor/stripe/stripe-php/lib/Exception/UnexpectedValueException.php b/vendor/stripe/stripe-php/lib/Exception/UnexpectedValueException.php new file mode 100644 index 000000000..0a629edf7 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Exception/UnexpectedValueException.php @@ -0,0 +1,7 @@ +Exchange Rate objects allow you to determine the rates that Stripe + * is currently using to convert from one currency to another. Since this number is + * variable throughout the day, there are various reasons why you might want to + * know the current rate (for example, to dynamically price an item for a user with + * a default payment in a foreign currency). + * + * If you want a guarantee that the charge is made with a certain exchange rate you + * expect is current, you can pass in exchange_rate to charges + * endpoints. If the value is no longer up to date, the charge won't go through. + * Please refer to our Exchange + * Rates API guide for more details. + * + * @property string $id Unique identifier for the object. Represented as the three-letter ISO currency code in lowercase. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\StripeObject $rates Hash where the keys are supported currencies and the values are the exchange rate at which the base id currency converts to the key currency. + */ +class ExchangeRate extends ApiResource +{ + const OBJECT_NAME = 'exchange_rate'; + + use ApiOperations\All; + use ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/File.php b/vendor/stripe/stripe-php/lib/File.php new file mode 100644 index 000000000..d73bed842 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/File.php @@ -0,0 +1,81 @@ +create file request (for + * example, when uploading dispute evidence) or it may have been created by Stripe + * (for example, the results of a Sigma scheduled + * query). + * + * Related guide: File Upload + * Guide. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|int $expires_at The time at which the file expires and is no longer available in epoch seconds. + * @property null|string $filename A filename for the file, suitable for saving to a filesystem. + * @property null|\Stripe\Collection $links A list of file links that point at this file. + * @property string $purpose The purpose of the uploaded file. + * @property int $size The size in bytes of the file object. + * @property null|string $title A user friendly title for the document. + * @property null|string $type The type of the file returned (e.g., csv, pdf, jpg, or png). + * @property null|string $url The URL from which the file can be downloaded using your live secret API key. + */ +class File extends ApiResource +{ + const OBJECT_NAME = 'file'; + + use ApiOperations\All; + use ApiOperations\Retrieve; + + const PURPOSE_ADDITIONAL_VERIFICATION = 'additional_verification'; + const PURPOSE_BUSINESS_ICON = 'business_icon'; + const PURPOSE_BUSINESS_LOGO = 'business_logo'; + const PURPOSE_CUSTOMER_SIGNATURE = 'customer_signature'; + const PURPOSE_DISPUTE_EVIDENCE = 'dispute_evidence'; + const PURPOSE_IDENTITY_DOCUMENT = 'identity_document'; + const PURPOSE_PCI_DOCUMENT = 'pci_document'; + const PURPOSE_TAX_DOCUMENT_USER_UPLOAD = 'tax_document_user_upload'; + + // This resource can have two different object names. In latter API + // versions, only `file` is used, but since stripe-php may be used with + // any API version, we need to support deserializing the older + // `file_upload` object into the same class. + const OBJECT_NAME_ALT = 'file_upload'; + + use ApiOperations\Create { + create as protected _create; + } + + public static function classUrl() + { + return '/v1/files'; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\File the created file + */ + public static function create($params = null, $opts = null) + { + $opts = \Stripe\Util\RequestOptions::parse($opts); + if (null === $opts->apiBase) { + $opts->apiBase = Stripe::$apiUploadBase; + } + // Manually flatten params, otherwise curl's multipart encoder will + // choke on nested arrays. + $flatParams = \array_column(\Stripe\Util\Util::flattenParams($params), 1, 0); + + return static::_create($flatParams, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/FileLink.php b/vendor/stripe/stripe-php/lib/FileLink.php new file mode 100644 index 000000000..ce3b10bde --- /dev/null +++ b/vendor/stripe/stripe-php/lib/FileLink.php @@ -0,0 +1,30 @@ +File object with non-Stripe users, you + * can create a FileLink. FileLinks contain a URL that + * can be used to retrieve the contents of the file without authentication. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property bool $expired Whether this link is already expired. + * @property null|int $expires_at Time at which the link expires. + * @property string|\Stripe\File $file The file object this link points to. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $url The publicly accessible URL to download the file. + */ +class FileLink extends ApiResource +{ + const OBJECT_NAME = 'file_link'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/HttpClient/ClientInterface.php b/vendor/stripe/stripe-php/lib/HttpClient/ClientInterface.php new file mode 100644 index 000000000..3c7861e59 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/HttpClient/ClientInterface.php @@ -0,0 +1,22 @@ +defaultOptions = $defaultOptions; + $this->randomGenerator = $randomGenerator ?: new Util\RandomGenerator(); + $this->initUserAgentInfo(); + + $this->enableHttp2 = $this->canSafelyUseHttp2(); + } + + public function __destruct() + { + $this->closeCurlHandle(); + } + + public function initUserAgentInfo() + { + $curlVersion = \curl_version(); + $this->userAgentInfo = [ + 'httplib' => 'curl ' . $curlVersion['version'], + 'ssllib' => $curlVersion['ssl_version'], + ]; + } + + public function getDefaultOptions() + { + return $this->defaultOptions; + } + + public function getUserAgentInfo() + { + return $this->userAgentInfo; + } + + /** + * @return bool + */ + public function getEnablePersistentConnections() + { + return $this->enablePersistentConnections; + } + + /** + * @param bool $enable + */ + public function setEnablePersistentConnections($enable) + { + $this->enablePersistentConnections = $enable; + } + + /** + * @return bool + */ + public function getEnableHttp2() + { + return $this->enableHttp2; + } + + /** + * @param bool $enable + */ + public function setEnableHttp2($enable) + { + $this->enableHttp2 = $enable; + } + + /** + * @return null|callable + */ + public function getRequestStatusCallback() + { + return $this->requestStatusCallback; + } + + /** + * Sets a callback that is called after each request. The callback will + * receive the following parameters: + *
    + *
  1. string $rbody The response body
    2. + *
  2. integer $rcode The response status code
    3. + *
  3. \Stripe\Util\CaseInsensitiveArray $rheaders The response headers
    4. + *
  4. integer $errno The curl error number
    5. + *
  5. string|null $message The curl error message
    6. + *
  6. boolean $shouldRetry Whether the request will be retried
    7. + *
  7. integer $numRetries The number of the retry attempt
    8. + *
. + * + * @param null|callable $requestStatusCallback + */ + public function setRequestStatusCallback($requestStatusCallback) + { + $this->requestStatusCallback = $requestStatusCallback; + } + + // USER DEFINED TIMEOUTS + + const DEFAULT_TIMEOUT = 80; + const DEFAULT_CONNECT_TIMEOUT = 30; + + private $timeout = self::DEFAULT_TIMEOUT; + private $connectTimeout = self::DEFAULT_CONNECT_TIMEOUT; + + public function setTimeout($seconds) + { + $this->timeout = (int) \max($seconds, 0); + + return $this; + } + + public function setConnectTimeout($seconds) + { + $this->connectTimeout = (int) \max($seconds, 0); + + return $this; + } + + public function getTimeout() + { + return $this->timeout; + } + + public function getConnectTimeout() + { + return $this->connectTimeout; + } + + // END OF USER DEFINED TIMEOUTS + + public function request($method, $absUrl, $headers, $params, $hasFile) + { + $method = \strtolower($method); + + $opts = []; + if (\is_callable($this->defaultOptions)) { // call defaultOptions callback, set options to return value + $opts = \call_user_func_array($this->defaultOptions, \func_get_args()); + if (!\is_array($opts)) { + throw new Exception\UnexpectedValueException('Non-array value returned by defaultOptions CurlClient callback'); + } + } elseif (\is_array($this->defaultOptions)) { // set default curlopts from array + $opts = $this->defaultOptions; + } + + $params = Util\Util::objectsToIds($params); + + if ('get' === $method) { + if ($hasFile) { + throw new Exception\UnexpectedValueException( + 'Issuing a GET request with a file parameter' + ); + } + $opts[\CURLOPT_HTTPGET] = 1; + if (\count($params) > 0) { + $encoded = Util\Util::encodeParameters($params); + $absUrl = "{$absUrl}?{$encoded}"; + } + } elseif ('post' === $method) { + $opts[\CURLOPT_POST] = 1; + $opts[\CURLOPT_POSTFIELDS] = $hasFile ? $params : Util\Util::encodeParameters($params); + } elseif ('delete' === $method) { + $opts[\CURLOPT_CUSTOMREQUEST] = 'DELETE'; + if (\count($params) > 0) { + $encoded = Util\Util::encodeParameters($params); + $absUrl = "{$absUrl}?{$encoded}"; + } + } else { + throw new Exception\UnexpectedValueException("Unrecognized method {$method}"); + } + + // It is only safe to retry network failures on POST requests if we + // add an Idempotency-Key header + if (('post' === $method) && (Stripe::$maxNetworkRetries > 0)) { + if (!$this->hasHeader($headers, 'Idempotency-Key')) { + \array_push($headers, 'Idempotency-Key: ' . $this->randomGenerator->uuid()); + } + } + + // By default for large request body sizes (> 1024 bytes), cURL will + // send a request without a body and with a `Expect: 100-continue` + // header, which gives the server a chance to respond with an error + // status code in cases where one can be determined right away (say + // on an authentication problem for example), and saves the "large" + // request body from being ever sent. + // + // Unfortunately, the bindings don't currently correctly handle the + // success case (in which the server sends back a 100 CONTINUE), so + // we'll error under that condition. To compensate for that problem + // for the time being, override cURL's behavior by simply always + // sending an empty `Expect:` header. + \array_push($headers, 'Expect: '); + + $absUrl = Util\Util::utf8($absUrl); + $opts[\CURLOPT_URL] = $absUrl; + $opts[\CURLOPT_RETURNTRANSFER] = true; + $opts[\CURLOPT_CONNECTTIMEOUT] = $this->connectTimeout; + $opts[\CURLOPT_TIMEOUT] = $this->timeout; + $opts[\CURLOPT_HTTPHEADER] = $headers; + $opts[\CURLOPT_CAINFO] = Stripe::getCABundlePath(); + if (!Stripe::getVerifySslCerts()) { + $opts[\CURLOPT_SSL_VERIFYPEER] = false; + } + + if (!isset($opts[\CURLOPT_HTTP_VERSION]) && $this->getEnableHttp2()) { + // For HTTPS requests, enable HTTP/2, if supported + $opts[\CURLOPT_HTTP_VERSION] = \CURL_HTTP_VERSION_2TLS; + } + + // Stripe's API servers are only accessible over IPv4. Force IPv4 resolving to avoid + // potential issues (cf. https://github.com/stripe/stripe-php/issues/1045). + $opts[\CURLOPT_IPRESOLVE] = \CURL_IPRESOLVE_V4; + + list($rbody, $rcode, $rheaders) = $this->executeRequestWithRetries($opts, $absUrl); + + return [$rbody, $rcode, $rheaders]; + } + + /** + * @param array $opts cURL options + * @param string $absUrl + */ + private function executeRequestWithRetries($opts, $absUrl) + { + $numRetries = 0; + + while (true) { + $rcode = 0; + $errno = 0; + $message = null; + + // Create a callback to capture HTTP headers for the response + $rheaders = new Util\CaseInsensitiveArray(); + $headerCallback = function ($curl, $header_line) use (&$rheaders) { + // Ignore the HTTP request line (HTTP/1.1 200 OK) + if (false === \strpos($header_line, ':')) { + return \strlen($header_line); + } + list($key, $value) = \explode(':', \trim($header_line), 2); + $rheaders[\trim($key)] = \trim($value); + + return \strlen($header_line); + }; + $opts[\CURLOPT_HEADERFUNCTION] = $headerCallback; + + $this->resetCurlHandle(); + \curl_setopt_array($this->curlHandle, $opts); + $rbody = \curl_exec($this->curlHandle); + + if (false === $rbody) { + $errno = \curl_errno($this->curlHandle); + $message = \curl_error($this->curlHandle); + } else { + $rcode = \curl_getinfo($this->curlHandle, \CURLINFO_HTTP_CODE); + } + if (!$this->getEnablePersistentConnections()) { + $this->closeCurlHandle(); + } + + $shouldRetry = $this->shouldRetry($errno, $rcode, $rheaders, $numRetries); + + if (\is_callable($this->getRequestStatusCallback())) { + \call_user_func_array( + $this->getRequestStatusCallback(), + [$rbody, $rcode, $rheaders, $errno, $message, $shouldRetry, $numRetries] + ); + } + + if ($shouldRetry) { + ++$numRetries; + $sleepSeconds = $this->sleepTime($numRetries, $rheaders); + \usleep((int) ($sleepSeconds * 1000000)); + } else { + break; + } + } + + if (false === $rbody) { + $this->handleCurlError($absUrl, $errno, $message, $numRetries); + } + + return [$rbody, $rcode, $rheaders]; + } + + /** + * @param string $url + * @param int $errno + * @param string $message + * @param int $numRetries + * + * @throws Exception\ApiConnectionException + */ + private function handleCurlError($url, $errno, $message, $numRetries) + { + switch ($errno) { + case \CURLE_COULDNT_CONNECT: + case \CURLE_COULDNT_RESOLVE_HOST: + case \CURLE_OPERATION_TIMEOUTED: + $msg = "Could not connect to Stripe ({$url}). Please check your " + . 'internet connection and try again. If this problem persists, ' + . "you should check Stripe's service status at " + . 'https://twitter.com/stripestatus, or'; + + break; + case \CURLE_SSL_CACERT: + case \CURLE_SSL_PEER_CERTIFICATE: + $msg = "Could not verify Stripe's SSL certificate. Please make sure " + . 'that your network is not intercepting certificates. ' + . "(Try going to {$url} in your browser.) " + . 'If this problem persists,'; + + break; + default: + $msg = 'Unexpected error communicating with Stripe. ' + . 'If this problem persists,'; + } + $msg .= ' let us know at support@stripe.com.'; + + $msg .= "\n\n(Network error [errno {$errno}]: {$message})"; + + if ($numRetries > 0) { + $msg .= "\n\nRequest was retried {$numRetries} times."; + } + + throw new Exception\ApiConnectionException($msg); + } + + /** + * Checks if an error is a problem that we should retry on. This includes both + * socket errors that may represent an intermittent problem and some special + * HTTP statuses. + * + * @param int $errno + * @param int $rcode + * @param array|\Stripe\Util\CaseInsensitiveArray $rheaders + * @param int $numRetries + * + * @return bool + */ + private function shouldRetry($errno, $rcode, $rheaders, $numRetries) + { + if ($numRetries >= Stripe::getMaxNetworkRetries()) { + return false; + } + + // Retry on timeout-related problems (either on open or read). + if (\CURLE_OPERATION_TIMEOUTED === $errno) { + return true; + } + + // Destination refused the connection, the connection was reset, or a + // variety of other connection failures. This could occur from a single + // saturated server, so retry in case it's intermittent. + if (\CURLE_COULDNT_CONNECT === $errno) { + return true; + } + + // The API may ask us not to retry (eg; if doing so would be a no-op) + // or advise us to retry (eg; in cases of lock timeouts); we defer to that. + if (isset($rheaders['stripe-should-retry'])) { + if ('false' === $rheaders['stripe-should-retry']) { + return false; + } + if ('true' === $rheaders['stripe-should-retry']) { + return true; + } + } + + // 409 Conflict + if (409 === $rcode) { + return true; + } + + // Retry on 500, 503, and other internal errors. + // + // Note that we expect the stripe-should-retry header to be false + // in most cases when a 500 is returned, since our idempotency framework + // would typically replay it anyway. + if ($rcode >= 500) { + return true; + } + + return false; + } + + /** + * Provides the number of seconds to wait before retrying a request. + * + * @param int $numRetries + * @param array|\Stripe\Util\CaseInsensitiveArray $rheaders + * + * @return int + */ + private function sleepTime($numRetries, $rheaders) + { + // Apply exponential backoff with $initialNetworkRetryDelay on the + // number of $numRetries so far as inputs. Do not allow the number to exceed + // $maxNetworkRetryDelay. + $sleepSeconds = \min( + Stripe::getInitialNetworkRetryDelay() * 1.0 * 2 ** ($numRetries - 1), + Stripe::getMaxNetworkRetryDelay() + ); + + // Apply some jitter by randomizing the value in the range of + // ($sleepSeconds / 2) to ($sleepSeconds). + $sleepSeconds *= 0.5 * (1 + $this->randomGenerator->randFloat()); + + // But never sleep less than the base sleep seconds. + $sleepSeconds = \max(Stripe::getInitialNetworkRetryDelay(), $sleepSeconds); + + // And never sleep less than the time the API asks us to wait, assuming it's a reasonable ask. + $retryAfter = isset($rheaders['retry-after']) ? (float) ($rheaders['retry-after']) : 0.0; + if (\floor($retryAfter) === $retryAfter && $retryAfter <= Stripe::getMaxRetryAfter()) { + $sleepSeconds = \max($sleepSeconds, $retryAfter); + } + + return $sleepSeconds; + } + + /** + * Initializes the curl handle. If already initialized, the handle is closed first. + */ + private function initCurlHandle() + { + $this->closeCurlHandle(); + $this->curlHandle = \curl_init(); + } + + /** + * Closes the curl handle if initialized. Do nothing if already closed. + */ + private function closeCurlHandle() + { + if (null !== $this->curlHandle) { + \curl_close($this->curlHandle); + $this->curlHandle = null; + } + } + + /** + * Resets the curl handle. If the handle is not already initialized, or if persistent + * connections are disabled, the handle is reinitialized instead. + */ + private function resetCurlHandle() + { + if (null !== $this->curlHandle && $this->getEnablePersistentConnections()) { + \curl_reset($this->curlHandle); + } else { + $this->initCurlHandle(); + } + } + + /** + * Indicates whether it is safe to use HTTP/2 or not. + * + * @return bool + */ + private function canSafelyUseHttp2() + { + // Versions of curl older than 7.60.0 don't respect GOAWAY frames + // (cf. https://github.com/curl/curl/issues/2416), which Stripe use. + $curlVersion = \curl_version()['version']; + + return \version_compare($curlVersion, '7.60.0') >= 0; + } + + /** + * Checks if a list of headers contains a specific header name. + * + * @param string[] $headers + * @param string $name + * + * @return bool + */ + private function hasHeader($headers, $name) + { + foreach ($headers as $header) { + if (0 === \strncasecmp($header, "{$name}: ", \strlen($name) + 2)) { + return true; + } + } + + return false; + } +} diff --git a/vendor/stripe/stripe-php/lib/Invoice.php b/vendor/stripe/stripe-php/lib/Invoice.php new file mode 100644 index 000000000..706da0a63 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Invoice.php @@ -0,0 +1,259 @@ +invoice + * items, and proration adjustments that may be caused by subscription + * upgrades/downgrades (if necessary). + * + * If your invoice is configured to be billed through automatic charges, Stripe + * automatically finalizes your invoice and attempts payment. Note that finalizing + * the invoice, when + * automatic, does not happen immediately as the invoice is created. Stripe + * waits until one hour after the last webhook was successfully sent (or the last + * webhook timed out after failing). If you (and the platforms you may have + * connected to) have no webhooks configured, Stripe waits one hour after creation + * to finalize the invoice. + * + * If your invoice is configured to be billed by sending an email, then based on + * your email + * settings, Stripe will email the invoice to your customer and await payment. + * These emails can contain a link to a hosted page to pay the invoice. + * + * Stripe applies any customer credit on the account before determining the amount + * due for the invoice (i.e., the amount that will be actually charged). If the + * amount due for the invoice is less than Stripe's minimum allowed + * charge per currency, the invoice is automatically marked paid, and we add + * the amount due to the customer's running account balance which is applied to the + * next invoice. + * + * More details on the customer's account balance are here. + * + * Related guide: Send + * Invoices to Customers. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string $account_country The country of the business associated with this invoice, most often the business creating the invoice. + * @property null|string $account_name The public name of the business associated with this invoice, most often the business creating the invoice. + * @property null|(string|\Stripe\TaxId)[] $account_tax_ids The account tax IDs associated with the invoice. Only editable when the invoice is a draft. + * @property int $amount_due Final amount due at this time for this invoice. If the invoice's total is smaller than the minimum charge amount, for example, or if there is account credit that can be applied to the invoice, the amount_due may be 0. If there is a positive starting_balance for the invoice (the customer owes money), the amount_due will also take that into account. The charge that gets generated for the invoice will be for the amount specified in amount_due. + * @property int $amount_paid The amount, in %s, that was paid. + * @property int $amount_remaining The amount remaining, in %s, that is due. + * @property null|int $application_fee_amount The fee in %s that will be applied to the invoice and transferred to the application owner's Stripe account when the invoice is paid. + * @property int $attempt_count Number of payment attempts made for this invoice, from the perspective of the payment retry schedule. Any payment attempt counts as the first attempt, and subsequently only automatic retries increment the attempt count. In other words, manual payment attempts after the first attempt do not affect the retry schedule. + * @property bool $attempted Whether an attempt has been made to pay the invoice. An invoice is not attempted until 1 hour after the invoice.created webhook, for example, so you might not want to display that invoice as unpaid to your users. + * @property bool $auto_advance Controls whether Stripe will perform automatic collection of the invoice. When false, the invoice's state will not automatically advance without an explicit action. + * @property null|string $billing_reason Indicates the reason why the invoice was created. subscription_cycle indicates an invoice created by a subscription advancing into a new period. subscription_create indicates an invoice created due to creating a subscription. subscription_update indicates an invoice created due to updating a subscription. subscription is set for all old invoices to indicate either a change to a subscription or a period advancement. manual is set for all invoices unrelated to a subscription (for example: created via the invoice editor). The upcoming value is reserved for simulated invoices per the upcoming invoice endpoint. subscription_threshold indicates an invoice created due to a billing threshold being reached. + * @property null|string|\Stripe\Charge $charge ID of the latest charge generated for this invoice, if any. + * @property null|string $collection_method Either charge_automatically, or send_invoice. When charging automatically, Stripe will attempt to pay this invoice using the default source attached to the customer. When sending an invoice, Stripe will email this invoice to the customer with payment instructions. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|\Stripe\StripeObject[] $custom_fields Custom fields displayed on the invoice. + * @property string|\Stripe\Customer $customer The ID of the customer who will be billed. + * @property null|\Stripe\StripeObject $customer_address The customer's address. Until the invoice is finalized, this field will equal customer.address. Once the invoice is finalized, this field will no longer be updated. + * @property null|string $customer_email The customer's email. Until the invoice is finalized, this field will equal customer.email. Once the invoice is finalized, this field will no longer be updated. + * @property null|string $customer_name The customer's name. Until the invoice is finalized, this field will equal customer.name. Once the invoice is finalized, this field will no longer be updated. + * @property null|string $customer_phone The customer's phone number. Until the invoice is finalized, this field will equal customer.phone. Once the invoice is finalized, this field will no longer be updated. + * @property null|\Stripe\StripeObject $customer_shipping The customer's shipping information. Until the invoice is finalized, this field will equal customer.shipping. Once the invoice is finalized, this field will no longer be updated. + * @property null|string $customer_tax_exempt The customer's tax exempt status. Until the invoice is finalized, this field will equal customer.tax_exempt. Once the invoice is finalized, this field will no longer be updated. + * @property null|\Stripe\StripeObject[] $customer_tax_ids The customer's tax IDs. Until the invoice is finalized, this field will contain the same tax IDs as customer.tax_ids. Once the invoice is finalized, this field will no longer be updated. + * @property null|string|\Stripe\PaymentMethod $default_payment_method ID of the default payment method for the invoice. It must belong to the customer associated with the invoice. If not set, defaults to the subscription's default payment method, if any, or to the default payment method in the customer's invoice settings. + * @property null|string|\Stripe\Account|\Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source $default_source ID of the default payment source for the invoice. It must belong to the customer associated with the invoice and be in a chargeable state. If not set, defaults to the subscription's default source, if any, or to the customer's default source. + * @property \Stripe\TaxRate[] $default_tax_rates The tax rates applied to this invoice, if any. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. Referenced as 'memo' in the Dashboard. + * @property null|\Stripe\Discount $discount Describes the current discount applied to this invoice, if there is one. Not populated if there are multiple discounts. + * @property null|(string|\Stripe\Discount)[] $discounts The discounts applied to the invoice. Line item discounts are applied before invoice discounts. Use expand[]=discounts to expand each discount. + * @property null|int $due_date The date on which payment for this invoice is due. This value will be null for invoices where collection_method=charge_automatically. + * @property null|int $ending_balance Ending customer balance after the invoice is finalized. Invoices are finalized approximately an hour after successful webhook delivery or when payment collection is attempted for the invoice. If the invoice has not been finalized yet, this will be null. + * @property null|string $footer Footer displayed on the invoice. + * @property null|string $hosted_invoice_url The URL for the hosted invoice page, which allows customers to view and pay an invoice. If the invoice has not been finalized yet, this will be null. + * @property null|string $invoice_pdf The link to download the PDF for the invoice. If the invoice has not been finalized yet, this will be null. + * @property null|\Stripe\ErrorObject $last_finalization_error The error encountered during the previous attempt to finalize the invoice. This field is cleared when the invoice is successfully finalized. + * @property \Stripe\Collection $lines The individual line items that make up the invoice. lines is sorted as follows: invoice items in reverse chronological order, followed by the subscription, if any. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|int $next_payment_attempt The time at which payment will next be attempted. This value will be null for invoices where collection_method=send_invoice. + * @property null|string $number A unique, identifying string that appears on emails sent to the customer for this invoice. This starts with the customer's unique invoice_prefix if it is specified. + * @property bool $paid Whether payment was successfully collected for this invoice. An invoice can be paid (most commonly) with a charge or with credit from the customer's account balance. + * @property null|string|\Stripe\PaymentIntent $payment_intent The PaymentIntent associated with this invoice. The PaymentIntent is generated when the invoice is finalized, and can then be used to pay the invoice. Note that voiding an invoice will cancel the PaymentIntent. + * @property int $period_end End of the usage period during which invoice items were added to this invoice. + * @property int $period_start Start of the usage period during which invoice items were added to this invoice. + * @property int $post_payment_credit_notes_amount Total amount of all post-payment credit notes issued for this invoice. + * @property int $pre_payment_credit_notes_amount Total amount of all pre-payment credit notes issued for this invoice. + * @property null|string $receipt_number This is the transaction number that appears on email receipts sent for this invoice. + * @property int $starting_balance Starting customer balance before the invoice is finalized. If the invoice has not been finalized yet, this will be the current customer balance. + * @property null|string $statement_descriptor Extra information about an invoice for the customer's credit card statement. + * @property null|string $status The status of the invoice, one of draft, open, paid, uncollectible, or void. Learn more + * @property \Stripe\StripeObject $status_transitions + * @property null|string|\Stripe\Subscription $subscription The subscription that this invoice was prepared for, if any. + * @property int $subscription_proration_date Only set for upcoming invoices that preview prorations. The time used to calculate prorations. + * @property int $subtotal Total of all subscriptions, invoice items, and prorations on the invoice before any invoice level discount or tax is applied. Item discounts are already incorporated + * @property null|int $tax The amount of tax on this invoice. This is the sum of all the tax amounts on this invoice. + * @property \Stripe\StripeObject $threshold_reason + * @property int $total Total after discounts and taxes. + * @property null|\Stripe\StripeObject[] $total_discount_amounts The aggregate amounts calculated per discount across all line items. + * @property \Stripe\StripeObject[] $total_tax_amounts The aggregate amounts calculated per tax rate for all line items. + * @property null|int $webhooks_delivered_at Invoices are automatically paid or sent 1 hour after webhooks are delivered, or until all webhook delivery attempts have been exhausted. This field tracks the time when webhooks for this invoice were successfully delivered. If the invoice had no webhooks to deliver, this will be set while the invoice is being created. + */ +class Invoice extends ApiResource +{ + const OBJECT_NAME = 'invoice'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const BILLING_CHARGE_AUTOMATICALLY = 'charge_automatically'; + const BILLING_SEND_INVOICE = 'send_invoice'; + + const BILLING_REASON_MANUAL = 'manual'; + const BILLING_REASON_SUBSCRIPTION = 'subscription'; + const BILLING_REASON_SUBSCRIPTION_CREATE = 'subscription_create'; + const BILLING_REASON_SUBSCRIPTION_CYCLE = 'subscription_cycle'; + const BILLING_REASON_SUBSCRIPTION_THRESHOLD = 'subscription_threshold'; + const BILLING_REASON_SUBSCRIPTION_UPDATE = 'subscription_update'; + const BILLING_REASON_UPCOMING = 'upcoming'; + + const COLLECTION_METHOD_CHARGE_AUTOMATICALLY = 'charge_automatically'; + const COLLECTION_METHOD_SEND_INVOICE = 'send_invoice'; + + const STATUS_DELETED = 'deleted'; + const STATUS_DRAFT = 'draft'; + const STATUS_OPEN = 'open'; + const STATUS_PAID = 'paid'; + const STATUS_UNCOLLECTIBLE = 'uncollectible'; + const STATUS_VOID = 'void'; + + use ApiOperations\NestedResource; + + const PATH_LINES = '/lines'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice the upcoming invoice + */ + public static function upcoming($params = null, $opts = null) + { + $url = static::classUrl() . '/upcoming'; + list($response, $opts) = static::_staticRequest('get', $url, $params, $opts); + $obj = Util\Util::convertToStripeObject($response->json, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * @param string $id the ID of the invoice on which to retrieve the lines + * @param null|array $params + * @param null|array|string $opts + * + * @throws StripeExceptionApiErrorException if the request fails + * + * @return \Stripe\Collection the list of lines (InvoiceLineItem) + */ + public static function allLines($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_LINES, $params, $opts); + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Invoice the finalized invoice + */ + public function finalizeInvoice($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/finalize'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Invoice the uncollectible invoice + */ + public function markUncollectible($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/mark_uncollectible'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Invoice the paid invoice + */ + public function pay($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/pay'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Invoice the sent invoice + */ + public function sendInvoice($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/send'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Invoice the voided invoice + */ + public function voidInvoice($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/void'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/InvoiceItem.php b/vendor/stripe/stripe-php/lib/InvoiceItem.php new file mode 100644 index 000000000..6153bbf98 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/InvoiceItem.php @@ -0,0 +1,49 @@ +Subscription + * Invoices. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount (in the currency specified) of the invoice item. This should always be equal to unit_amount * quantity. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string|\Stripe\Customer $customer The ID of the customer who will be billed when this invoice item is billed. + * @property int $date Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property bool $discountable If true, discounts will apply to this invoice item. Always false for prorations. + * @property null|(string|\Stripe\Discount)[] $discounts The discounts which apply to the invoice item. Item discounts are applied before invoice discounts. Use expand[]=discounts to expand each discount. + * @property null|string|\Stripe\Invoice $invoice The ID of the invoice this invoice item belongs to. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\StripeObject $period + * @property null|\Stripe\Plan $plan If the invoice item is a proration, the plan of the subscription that the proration was computed for. + * @property null|\Stripe\Price $price The price of the invoice item. + * @property bool $proration Whether the invoice item was created automatically as a proration adjustment when the customer switched plans. + * @property int $quantity Quantity of units for the invoice item. If the invoice item is a proration, the quantity of the subscription that the proration was computed for. + * @property null|string|\Stripe\Subscription $subscription The subscription that this invoice item has been created for, if any. + * @property string $subscription_item The subscription item that this invoice item has been created for, if any. + * @property null|\Stripe\TaxRate[] $tax_rates The tax rates which apply to the invoice item. When set, the default_tax_rates on the invoice do not apply to this invoice item. + * @property null|int $unit_amount Unit amount (in the currency specified) of the invoice item. + * @property null|string $unit_amount_decimal Same as unit_amount, but contains a decimal value with at most 12 decimal places. + */ +class InvoiceItem extends ApiResource +{ + const OBJECT_NAME = 'invoiceitem'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/InvoiceLineItem.php b/vendor/stripe/stripe-php/lib/InvoiceLineItem.php new file mode 100644 index 000000000..e579afb6a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/InvoiceLineItem.php @@ -0,0 +1,33 @@ +ISO currency code, in lowercase. Must be a supported currency. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|\Stripe\StripeObject[] $discount_amounts The amount of discount calculated per discount for this line item. + * @property bool $discountable If true, discounts will apply to this line item. Always false for prorations. + * @property null|(string|\Stripe\Discount)[] $discounts The discounts applied to the invoice line item. Line item discounts are applied before invoice discounts. Use expand[]=discounts to expand each discount. + * @property string $invoice_item The ID of the invoice item associated with this line item if any. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. Note that for line items with type=subscription this will reflect the metadata of the subscription that caused the line item to be created. + * @property \Stripe\StripeObject $period + * @property null|\Stripe\Plan $plan The plan of the subscription, if the line item is a subscription or a proration. + * @property null|\Stripe\Price $price The price of the line item. + * @property bool $proration Whether this is a proration. + * @property null|int $quantity The quantity of the subscription, if the line item is a subscription or a proration. + * @property null|string $subscription The subscription that the invoice item pertains to, if any. + * @property string $subscription_item The subscription item that generated this invoice item. Left empty if the line item is not an explicit result of a subscription. + * @property \Stripe\StripeObject[] $tax_amounts The amount of tax calculated per tax rate for this line item + * @property \Stripe\TaxRate[] $tax_rates The tax rates which apply to the line item. + * @property string $type A string identifying the type of the source of this line item, either an invoiceitem or a subscription. + */ +class InvoiceLineItem extends ApiResource +{ + const OBJECT_NAME = 'line_item'; +} diff --git a/vendor/stripe/stripe-php/lib/Issuing/Authorization.php b/vendor/stripe/stripe-php/lib/Issuing/Authorization.php new file mode 100644 index 000000000..22e812755 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Issuing/Authorization.php @@ -0,0 +1,81 @@ +issued card is used to + * make a purchase, an Issuing Authorization object is created. Authorizations + * must be approved for the purchase to be completed successfully. + * + * Related guide: Issued Card + * Authorizations. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount The total amount that was authorized or rejected. This amount is in the card's currency and in the smallest currency unit. + * @property null|\Stripe\StripeObject $amount_details Detailed breakdown of amount components. These amounts are denominated in currency and in the smallest currency unit. + * @property bool $approved Whether the authorization has been approved. + * @property string $authorization_method How the card details were provided. + * @property \Stripe\BalanceTransaction[] $balance_transactions List of balance transactions associated with this authorization. + * @property \Stripe\Issuing\Card $card You can create physical or virtual cards that are issued to cardholders. + * @property null|string|\Stripe\Issuing\Cardholder $cardholder The cardholder to whom this authorization belongs. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property int $merchant_amount The total amount that was authorized or rejected. This amount is in the merchant_currency and in the smallest currency unit. + * @property string $merchant_currency The currency that was presented to the cardholder for the authorization. Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property \Stripe\StripeObject $merchant_data + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|\Stripe\StripeObject $pending_request The pending authorization request. This field will only be non-null during an issuing_authorization.request webhook. + * @property \Stripe\StripeObject[] $request_history History of every time the authorization was approved/denied (whether approved/denied by you directly or by Stripe based on your spending_controls). If the merchant changes the authorization by performing an incremental authorization or partial capture, you can look at this field to see the previous states of the authorization. + * @property string $status The current status of the authorization in its lifecycle. + * @property \Stripe\Issuing\Transaction[] $transactions List of transactions associated with this authorization. + * @property \Stripe\StripeObject $verification_data + * @property null|string $wallet What, if any, digital wallet was used for this authorization. One of apple_pay, google_pay, or samsung_pay. + */ +class Authorization extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'issuing.authorization'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Authorization the approved authorization + */ + public function approve($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/approve'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Authorization the declined authorization + */ + public function decline($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/decline'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Issuing/Card.php b/vendor/stripe/stripe-php/lib/Issuing/Card.php new file mode 100644 index 000000000..e0ac774e7 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Issuing/Card.php @@ -0,0 +1,59 @@ +create physical or + * virtual cards that are issued to cardholders. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string $brand The brand of the card. + * @property null|string $cancellation_reason The reason why the card was canceled. + * @property \Stripe\Issuing\Cardholder $cardholder

An Issuing Cardholder object represents an individual or business entity who is issued cards.

Related guide: How to create a Cardholder

+ * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string $cvc The card's CVC. For security reasons, this is only available for virtual cards, and will be omitted unless you explicitly request it with the expand parameter. Additionally, it's only available via the "Retrieve a card" endpoint, not via "List all cards" or any other endpoint. + * @property int $exp_month The expiration month of the card. + * @property int $exp_year The expiration year of the card. + * @property string $last4 The last 4 digits of the card number. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $number The full unredacted card number. For security reasons, this is only available for virtual cards, and will be omitted unless you explicitly request it with the expand parameter. Additionally, it's only available via the "Retrieve a card" endpoint, not via "List all cards" or any other endpoint. + * @property null|string|\Stripe\Issuing\Card $replaced_by The latest card that replaces this card, if any. + * @property null|string|\Stripe\Issuing\Card $replacement_for The card this card replaces, if any. + * @property null|string $replacement_reason The reason why the previous card needed to be replaced. + * @property null|\Stripe\StripeObject $shipping Where and how the card will be shipped. + * @property \Stripe\StripeObject $spending_controls + * @property string $status Whether authorizations can be approved on this card. + * @property string $type The type of the card. + */ +class Card extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'issuing.card'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\CardDetails the card details associated with that issuing card + */ + public function details($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/details'; + list($response, $opts) = $this->_request('get', $url, $params, $opts); + $obj = \Stripe\Util\Util::convertToStripeObject($response, $opts); + $obj->setLastResponse($response); + + return $obj; + } +} diff --git a/vendor/stripe/stripe-php/lib/Issuing/CardDetails.php b/vendor/stripe/stripe-php/lib/Issuing/CardDetails.php new file mode 100644 index 000000000..98f4e0b87 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Issuing/CardDetails.php @@ -0,0 +1,19 @@ +Cardholder object represents an individual or business + * entity who is issued cards. + * + * Related guide: How to create a + * Cardholder + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\StripeObject $billing + * @property null|\Stripe\StripeObject $company Additional information about a company cardholder. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $email The cardholder's email address. + * @property null|\Stripe\StripeObject $individual Additional information about an individual cardholder. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $name The cardholder's name. This will be printed on cards issued to them. + * @property null|string $phone_number The cardholder's phone number. + * @property \Stripe\StripeObject $requirements + * @property null|\Stripe\StripeObject $spending_controls Rules that control spending across this cardholder's cards. Refer to our documentation for more details. + * @property string $status Specifies whether to permit authorizations on this cardholder's cards. + * @property string $type One of individual or company. + */ +class Cardholder extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'issuing.cardholder'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Issuing/Dispute.php b/vendor/stripe/stripe-php/lib/Issuing/Dispute.php new file mode 100644 index 000000000..5f24864b4 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Issuing/Dispute.php @@ -0,0 +1,53 @@ +card issuer, you can dispute + * transactions that the cardholder does not recognize, suspects to be fraudulent, + * or has other issues with. + * + * Related guide: Disputing + * Transactions + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Disputed amount. Usually the amount of the disputed_transaction, but can differ (usually because of currency fluctuation). + * @property null|\Stripe\BalanceTransaction[] $balance_transactions List of balance transactions associated with the dispute. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency The currency the disputed_transaction was made in. + * @property \Stripe\StripeObject $evidence + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $status Current status of the dispute. + * @property string|\Stripe\Issuing\Transaction $transaction The transaction being disputed. + */ +class Dispute extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'issuing.dispute'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Dispute the submited dispute + */ + public function submit($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/submit'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Issuing/Transaction.php b/vendor/stripe/stripe-php/lib/Issuing/Transaction.php new file mode 100644 index 000000000..3c44d7ec1 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Issuing/Transaction.php @@ -0,0 +1,43 @@ +issued card that + * results in funds entering or leaving your Stripe account, such as a completed + * purchase or refund, is represented by an Issuing Transaction + * object. + * + * Related guide: Issued Card + * Transactions. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount The transaction amount, which will be reflected in your balance. This amount is in your currency and in the smallest currency unit. + * @property null|\Stripe\StripeObject $amount_details Detailed breakdown of amount components. These amounts are denominated in currency and in the smallest currency unit. + * @property null|string|\Stripe\Issuing\Authorization $authorization The Authorization object that led to this transaction. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction ID of the balance transaction associated with this transaction. + * @property string|\Stripe\Issuing\Card $card The card used to make this transaction. + * @property null|string|\Stripe\Issuing\Cardholder $cardholder The cardholder to whom this transaction belongs. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string|\Stripe\Issuing\Dispute $dispute If you've disputed the transaction, the ID of the dispute. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property int $merchant_amount The amount that the merchant will receive, denominated in merchant_currency and in the smallest currency unit. It will be different from amount if the merchant is taking payment in a different currency. + * @property string $merchant_currency The currency with which the merchant is taking payment. + * @property \Stripe\StripeObject $merchant_data + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|\Stripe\StripeObject $purchase_details Additional purchase information that is optionally provided by the merchant. + * @property string $type The nature of the transaction. + */ +class Transaction extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'issuing.transaction'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/LineItem.php b/vendor/stripe/stripe-php/lib/LineItem.php new file mode 100644 index 000000000..d3e55af20 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/LineItem.php @@ -0,0 +1,26 @@ +ISO currency code, in lowercase. Must be a supported currency. + * @property string $description An arbitrary string attached to the object. Often useful for displaying to users. Defaults to product name. + * @property \Stripe\StripeObject[] $discounts The discounts applied to the line item. + * @property \Stripe\Price $price

Prices define the unit cost, currency, and (optional) billing cycle for both recurring and one-time purchases of products. Products help you track inventory or provisioning, and prices help you track payment terms. Different physical goods or levels of service should be represented by products, and pricing options should be represented by prices. This approach lets you change prices without having to change your provisioning scheme.

For example, you might have a single "gold" product that has prices for $10/month, $100/year, and €9 once.

Related guides: Set up a subscription, create an invoice, and more about products and prices.

+ * @property null|int $quantity The quantity of products being purchased. + * @property \Stripe\StripeObject[] $taxes The taxes applied to the line item. + */ +class LineItem extends ApiResource +{ + const OBJECT_NAME = 'item'; + + use ApiOperations\All; +} diff --git a/vendor/stripe/stripe-php/lib/LoginLink.php b/vendor/stripe/stripe-php/lib/LoginLink.php new file mode 100644 index 000000000..3351356b8 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/LoginLink.php @@ -0,0 +1,15 @@ +true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $multi_use + * @property string|\Stripe\PaymentMethod $payment_method ID of the payment method associated with this mandate. + * @property \Stripe\StripeObject $payment_method_details + * @property \Stripe\StripeObject $single_use + * @property string $status The status of the mandate, which indicates whether it can be used to initiate a payment. + * @property string $type The type of the mandate. + */ +class Mandate extends ApiResource +{ + const OBJECT_NAME = 'mandate'; + + use ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/OAuth.php b/vendor/stripe/stripe-php/lib/OAuth.php new file mode 100644 index 000000000..7b0886e30 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/OAuth.php @@ -0,0 +1,101 @@ +request( + 'post', + '/oauth/token', + $params, + null + ); + + return Util\Util::convertToStripeObject($response->json, $opts); + } + + /** + * Disconnects an account from your platform. + * + * @param null|array $params + * @param null|array $opts + * + * @throws \Stripe\Exception\OAuth\OAuthErrorException if the request fails + * + * @return StripeObject object containing the response from the API + */ + public static function deauthorize($params = null, $opts = null) + { + $params = $params ?: []; + $base = ($opts && \array_key_exists('connect_base', $opts)) ? $opts['connect_base'] : Stripe::$connectBase; + $requestor = new ApiRequestor(null, $base); + $params['client_id'] = self::_getClientId($params); + list($response, $apiKey) = $requestor->request( + 'post', + '/oauth/deauthorize', + $params, + null + ); + + return Util\Util::convertToStripeObject($response->json, $opts); + } + + private static function _getClientId($params = null) + { + $clientId = ($params && \array_key_exists('client_id', $params)) ? $params['client_id'] : null; + if (null === $clientId) { + $clientId = Stripe::getClientId(); + } + if (null === $clientId) { + $msg = 'No client_id provided. (HINT: set your client_id using ' + . '"Stripe::setClientId()". You can find your client_ids ' + . 'in your Stripe dashboard at ' + . 'https://dashboard.stripe.com/account/applications/settings, ' + . 'after registering your account as a platform. See ' + . 'https://stripe.com/docs/connect/standard-accounts for details, ' + . 'or email support@stripe.com if you have any questions.'; + + throw new Exception\AuthenticationException($msg); + } + + return $clientId; + } +} diff --git a/vendor/stripe/stripe-php/lib/OAuthErrorObject.php b/vendor/stripe/stripe-php/lib/OAuthErrorObject.php new file mode 100644 index 000000000..620c5bb27 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/OAuthErrorObject.php @@ -0,0 +1,31 @@ + null, + 'error_description' => null, + ], $values); + parent::refreshFrom($values, $opts, $partial); + } +} diff --git a/vendor/stripe/stripe-php/lib/Order.php b/vendor/stripe/stripe-php/lib/Order.php new file mode 100644 index 000000000..fd3630edb --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Order.php @@ -0,0 +1,81 @@ +products. You can + * create, retrieve, and pay individual orders, as well as list all orders. Orders + * are identified by a unique, random ID. + * + * Related guide: Tax, Shipping, and + * Inventory. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount A positive integer in the smallest currency unit (that is, 100 cents for $1.00, or 1 for ¥1, Japanese Yen being a zero-decimal currency) representing the total amount for the order. + * @property null|int $amount_returned The total amount that was returned to the customer. + * @property null|string $application ID of the Connect Application that created the order. + * @property null|int $application_fee A fee in cents that will be applied to the order and transferred to the application owner’s Stripe account. The request must be made with an OAuth key or the Stripe-Account header in order to take an application fee. For more information, see the application fees documentation. + * @property null|string|\Stripe\Charge $charge The ID of the payment used to pay for the order. Present if the order status is paid, fulfilled, or refunded. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string|\Stripe\Customer $customer The customer used for the order. + * @property null|string $email The email address of the customer placing the order. + * @property string $external_coupon_code External coupon code to load for this order. + * @property \Stripe\OrderItem[] $items List of items constituting the order. An order can have up to 25 items. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|\Stripe\Collection $returns A list of returns that have taken place for this order. + * @property null|string $selected_shipping_method The shipping method that is currently selected for this order, if any. If present, it is equal to one of the ids of shipping methods in the shipping_methods array. At order creation time, if there are multiple shipping methods, Stripe will automatically selected the first method. + * @property null|\Stripe\StripeObject $shipping The shipping address for the order. Present if the order is for goods to be shipped. + * @property null|\Stripe\StripeObject[] $shipping_methods A list of supported shipping methods for this order. The desired shipping method can be specified either by updating the order, or when paying it. + * @property string $status Current order status. One of created, paid, canceled, fulfilled, or returned. More details in the Orders Guide. + * @property null|\Stripe\StripeObject $status_transitions The timestamps at which the order status was updated. + * @property null|int $updated Time at which the object was last updated. Measured in seconds since the Unix epoch. + * @property string $upstream_id The user's order ID if it is different from the Stripe order ID. + */ +class Order extends ApiResource +{ + const OBJECT_NAME = 'order'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\OrderReturn the newly created return + */ + public function returnOrder($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/returns'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + + return Util\Util::convertToStripeObject($response, $opts); + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Order the paid order + */ + public function pay($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/pay'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/OrderItem.php b/vendor/stripe/stripe-php/lib/OrderItem.php new file mode 100644 index 000000000..e2e6e39a2 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/OrderItem.php @@ -0,0 +1,19 @@ +order items. Returns always + * belong to an order, and may optionally contain a refund. + * + * Related guide: Handling + * Returns. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount A positive integer in the smallest currency unit (that is, 100 cents for $1.00, or 1 for ¥1, Japanese Yen being a zero-decimal currency) representing the total amount for the returned line item. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property \Stripe\OrderItem[] $items The items included in this order return. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string|\Stripe\Order $order The order that this return includes items from. + * @property null|string|\Stripe\Refund $refund The ID of the refund issued for this return. + */ +class OrderReturn extends ApiResource +{ + const OBJECT_NAME = 'order_return'; + + use ApiOperations\All; + use ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/PaymentIntent.php b/vendor/stripe/stripe-php/lib/PaymentIntent.php new file mode 100644 index 000000000..2d204e9da --- /dev/null +++ b/vendor/stripe/stripe-php/lib/PaymentIntent.php @@ -0,0 +1,125 @@ +multiple + * statuses throughout its lifetime as it interfaces with Stripe.js to perform + * authentication flows and ultimately creates at most one successful charge. + * + * Related guide: Payment Intents API. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount intended to be collected by this PaymentIntent. A positive integer representing how much to charge in the smallest currency unit (e.g., 100 cents to charge $1.00 or 100 to charge ¥100, a zero-decimal currency). The minimum amount is $0.50 US or equivalent in charge currency. The amount value supports up to eight digits (e.g., a value of 99999999 for a USD charge of $999,999.99). + * @property int $amount_capturable Amount that can be captured from this PaymentIntent. + * @property int $amount_received Amount that was collected by this PaymentIntent. + * @property null|string|\Stripe\StripeObject $application ID of the Connect application that created the PaymentIntent. + * @property null|int $application_fee_amount The amount of the application fee (if any) that will be requested to be applied to the payment and transferred to the application owner's Stripe account. The amount of the application fee collected will be capped at the total payment amount. For more information, see the PaymentIntents use case for connected accounts. + * @property null|int $canceled_at Populated when status is canceled, this is the time at which the PaymentIntent was canceled. Measured in seconds since the Unix epoch. + * @property null|string $cancellation_reason Reason for cancellation of this PaymentIntent, either user-provided (duplicate, fraudulent, requested_by_customer, or abandoned) or generated by Stripe internally (failed_invoice, void_invoice, or automatic). + * @property string $capture_method Controls when the funds will be captured from the customer's account. + * @property \Stripe\Collection $charges Charges that were created by this PaymentIntent, if any. + * @property null|string $client_secret

The client secret of this PaymentIntent. Used for client-side retrieval using a publishable key.

The client secret can be used to complete a payment from your frontend. It should not be stored, logged, embedded in URLs, or exposed to anyone other than the customer. Make sure that you have TLS enabled on any page that includes the client secret.

Refer to our docs to accept a payment and learn about how client_secret should be handled.

+ * @property string $confirmation_method + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string|\Stripe\Customer $customer

ID of the Customer this PaymentIntent belongs to, if one exists.

Payment methods attached to other Customers cannot be used with this PaymentIntent.

If present in combination with setup_future_usage, this PaymentIntent's payment method will be attached to the Customer after the PaymentIntent has been confirmed and any required actions from the user are complete.

+ * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|string|\Stripe\Invoice $invoice ID of the invoice that created this PaymentIntent, if it exists. + * @property null|\Stripe\ErrorObject $last_payment_error The payment error encountered in the previous PaymentIntent confirmation. It will be cleared if the PaymentIntent is later updated for any reason. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. For more information, see the documentation. + * @property null|\Stripe\StripeObject $next_action If present, this property tells you what actions you need to take in order for your customer to fulfill a payment using the provided source. + * @property null|string|\Stripe\Account $on_behalf_of The account (if any) for which the funds of the PaymentIntent are intended. See the PaymentIntents use case for connected accounts for details. + * @property null|string|\Stripe\PaymentMethod $payment_method ID of the payment method used in this PaymentIntent. + * @property null|\Stripe\StripeObject $payment_method_options Payment-method-specific configuration for this PaymentIntent. + * @property string[] $payment_method_types The list of payment method types (e.g. card) that this PaymentIntent is allowed to use. + * @property null|string $receipt_email Email address that the receipt for the resulting payment will be sent to. If receipt_email is specified for a payment in live mode, a receipt will be sent regardless of your email settings. + * @property null|string|\Stripe\Review $review ID of the review associated with this PaymentIntent, if any. + * @property null|string $setup_future_usage

Indicates that you intend to make future payments with this PaymentIntent's payment method.

Providing this parameter will attach the payment method to the PaymentIntent's Customer, if present, after the PaymentIntent is confirmed and any required actions from the user are complete. If no Customer was provided, the payment method can still be attached to a Customer after the transaction completes.

When processing card payments, Stripe also uses setup_future_usage to dynamically optimize your payment flow and comply with regional legislation and network rules, such as SCA.

+ * @property null|\Stripe\StripeObject $shipping Shipping information for this PaymentIntent. + * @property null|string|\Stripe\Account|\Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source $source This is a legacy field that will be removed in the future. It is the ID of the Source object that is associated with this PaymentIntent, if one was supplied. + * @property null|string $statement_descriptor For non-card charges, you can use this value as the complete description that appears on your customers’ statements. Must contain at least one letter, maximum 22 characters. + * @property null|string $statement_descriptor_suffix Provides information about a card payment that customers see on their statements. Concatenated with the prefix (shortened descriptor) or statement descriptor that’s set on the account to form the complete statement descriptor. Maximum 22 characters for the concatenated descriptor. + * @property string $status Status of this PaymentIntent, one of requires_payment_method, requires_confirmation, requires_action, processing, requires_capture, canceled, or succeeded. Read more about each PaymentIntent status. + * @property null|\Stripe\StripeObject $transfer_data The data with which to automatically create a Transfer when the payment is finalized. See the PaymentIntents use case for connected accounts for details. + * @property null|string $transfer_group A string that identifies the resulting payment as part of a group. See the PaymentIntents use case for connected accounts for details. + */ +class PaymentIntent extends ApiResource +{ + const OBJECT_NAME = 'payment_intent'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const STATUS_CANCELED = 'canceled'; + const STATUS_PROCESSING = 'processing'; + const STATUS_REQUIRES_ACTION = 'requires_action'; + const STATUS_REQUIRES_CAPTURE = 'requires_capture'; + const STATUS_REQUIRES_CONFIRMATION = 'requires_confirmation'; + const STATUS_REQUIRES_PAYMENT_METHOD = 'requires_payment_method'; + const STATUS_SUCCEEDED = 'succeeded'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return PaymentIntent the canceled payment intent + */ + public function cancel($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/cancel'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return PaymentIntent the captured payment intent + */ + public function capture($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/capture'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return PaymentIntent the confirmed payment intent + */ + public function confirm($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/confirm'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/PaymentMethod.php b/vendor/stripe/stripe-php/lib/PaymentMethod.php new file mode 100644 index 000000000..d9c9e2b52 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/PaymentMethod.php @@ -0,0 +1,86 @@ +PaymentIntents to + * collect payments or saved to Customer objects to store instrument details for + * future payments. + * + * Related guides: Payment Methods and + * More Payment + * Scenarios. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\StripeObject $alipay + * @property \Stripe\StripeObject $au_becs_debit + * @property \Stripe\StripeObject $bacs_debit + * @property \Stripe\StripeObject $bancontact + * @property \Stripe\StripeObject $billing_details + * @property \Stripe\StripeObject $card + * @property \Stripe\StripeObject $card_present + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\Customer $customer The ID of the Customer to which this PaymentMethod is saved. This will not be set when the PaymentMethod has not been saved to a Customer. + * @property \Stripe\StripeObject $eps + * @property \Stripe\StripeObject $fpx + * @property \Stripe\StripeObject $giropay + * @property \Stripe\StripeObject $grabpay + * @property \Stripe\StripeObject $ideal + * @property \Stripe\StripeObject $interac_present + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\StripeObject $oxxo + * @property \Stripe\StripeObject $p24 + * @property \Stripe\StripeObject $sepa_debit + * @property \Stripe\StripeObject $sofort + * @property string $type The type of the PaymentMethod. An additional hash is included on the PaymentMethod with a name matching this value. It contains additional information specific to the PaymentMethod type. + */ +class PaymentMethod extends ApiResource +{ + const OBJECT_NAME = 'payment_method'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return PaymentMethod the attached payment method + */ + public function attach($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/attach'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return PaymentMethod the detached payment method + */ + public function detach($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/detach'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Payout.php b/vendor/stripe/stripe-php/lib/Payout.php new file mode 100644 index 000000000..46f86181e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Payout.php @@ -0,0 +1,108 @@ +Payout object is created when you receive funds from Stripe, or + * when you initiate a payout to either a bank account or debit card of a connected Stripe account. You + * can retrieve individual payouts, as well as list all payouts. Payouts are made + * on varying schedules, + * depending on your country and industry. + * + * Related guide: Receiving Payouts. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount (in %s) to be transferred to your bank account or debit card. + * @property int $arrival_date Date the payout is expected to arrive in the bank. This factors in delays like weekends or bank holidays. + * @property bool $automatic Returns true if the payout was created by an automated payout schedule, and false if it was requested manually. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction ID of the balance transaction that describes the impact of this payout on your account balance. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|string|\Stripe\BankAccount|\Stripe\Card $destination ID of the bank account or card the payout was sent to. + * @property null|string|\Stripe\BalanceTransaction $failure_balance_transaction If the payout failed or was canceled, this will be the ID of the balance transaction that reversed the initial balance transaction, and puts the funds from the failed payout back in your balance. + * @property null|string $failure_code Error code explaining reason for payout failure if available. See Types of payout failures for a list of failure codes. + * @property null|string $failure_message Message to user further explaining reason for payout failure if available. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $method The method used to send this payout, which can be standard or instant. instant is only supported for payouts to debit cards. (See Instant payouts for marketplaces for more information.) + * @property null|string|\Stripe\Payout $original_payout If the payout reverses another, this is the ID of the original payout. + * @property null|string|\Stripe\Payout $reversed_by If the payout was reversed, this is the ID of the payout that reverses this payout. + * @property string $source_type The source balance this payout came from. One of card, fpx, or bank_account. + * @property null|string $statement_descriptor Extra information about a payout to be displayed on the user's bank statement. + * @property string $status Current status of the payout: paid, pending, in_transit, canceled or failed. A payout is pending until it is submitted to the bank, when it becomes in_transit. The status then changes to paid if the transaction goes through, or to failed or canceled (within 5 business days). Some failed payouts may initially show as paid but then change to failed. + * @property string $type Can be bank_account or card. + */ +class Payout extends ApiResource +{ + const OBJECT_NAME = 'payout'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const FAILURE_ACCOUNT_CLOSED = 'account_closed'; + const FAILURE_ACCOUNT_FROZEN = 'account_frozen'; + const FAILURE_BANK_ACCOUNT_RESTRICTED = 'bank_account_restricted'; + const FAILURE_BANK_OWNERSHIP_CHANGED = 'bank_ownership_changed'; + const FAILURE_COULD_NOT_PROCESS = 'could_not_process'; + const FAILURE_DEBIT_NOT_AUTHORIZED = 'debit_not_authorized'; + const FAILURE_DECLINED = 'declined'; + const FAILURE_INCORRECT_ACCOUNT_HOLDER_NAME = 'incorrect_account_holder_name'; + const FAILURE_INSUFFICIENT_FUNDS = 'insufficient_funds'; + const FAILURE_INVALID_ACCOUNT_NUMBER = 'invalid_account_number'; + const FAILURE_INVALID_CURRENCY = 'invalid_currency'; + const FAILURE_NO_ACCOUNT = 'no_account'; + const FAILURE_UNSUPPORTED_CARD = 'unsupported_card'; + + const METHOD_INSTANT = 'instant'; + const METHOD_STANDARD = 'standard'; + + const STATUS_CANCELED = 'canceled'; + const STATUS_FAILED = 'failed'; + const STATUS_IN_TRANSIT = 'in_transit'; + const STATUS_PAID = 'paid'; + const STATUS_PENDING = 'pending'; + + const TYPE_BANK_ACCOUNT = 'bank_account'; + const TYPE_CARD = 'card'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Payout the canceled payout + */ + public function cancel($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/cancel'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Payout the reversed payout + */ + public function reverse($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/reverse'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Person.php b/vendor/stripe/stripe-php/lib/Person.php new file mode 100644 index 000000000..151870a86 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Person.php @@ -0,0 +1,111 @@ +Handling + * Identity Verification with the API. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string $account The account the person is associated with. + * @property \Stripe\StripeObject $address + * @property null|\Stripe\StripeObject $address_kana The Kana variation of the person's address (Japan only). + * @property null|\Stripe\StripeObject $address_kanji The Kanji variation of the person's address (Japan only). + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property \Stripe\StripeObject $dob + * @property null|string $email The person's email address. + * @property null|string $first_name The person's first name. + * @property null|string $first_name_kana The Kana variation of the person's first name (Japan only). + * @property null|string $first_name_kanji The Kanji variation of the person's first name (Japan only). + * @property null|string $gender The person's gender (International regulations require either "male" or "female"). + * @property bool $id_number_provided Whether the person's id_number was provided. + * @property null|string $last_name The person's last name. + * @property null|string $last_name_kana The Kana variation of the person's last name (Japan only). + * @property null|string $last_name_kanji The Kanji variation of the person's last name (Japan only). + * @property null|string $maiden_name The person's maiden name. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $phone The person's phone number. + * @property string $political_exposure Indicates if the person or any of their representatives, family members, or other closely related persons, declares that they hold or have held an important public job or function, in any jurisdiction. + * @property \Stripe\StripeObject $relationship + * @property null|\Stripe\StripeObject $requirements Information about the requirements for this person, including what information needs to be collected, and by when. + * @property bool $ssn_last_4_provided Whether the last four digits of the person's Social Security number have been provided (U.S. only). + * @property \Stripe\StripeObject $verification + */ +class Person extends ApiResource +{ + const OBJECT_NAME = 'person'; + + use ApiOperations\Delete; + use ApiOperations\Update; + + const GENDER_FEMALE = 'female'; + const GENDER_MALE = 'male'; + + const POLITICAL_EXPOSURE_EXISTING = 'existing'; + const POLITICAL_EXPOSURE_NONE = 'none'; + + const VERIFICATION_STATUS_PENDING = 'pending'; + const VERIFICATION_STATUS_UNVERIFIED = 'unverified'; + const VERIFICATION_STATUS_VERIFIED = 'verified'; + + /** + * @return string the API URL for this Stripe account reversal + */ + public function instanceUrl() + { + $id = $this['id']; + $account = $this['account']; + if (!$id) { + throw new Exception\UnexpectedValueException( + 'Could not determine which URL to request: ' . + "class instance has invalid ID: {$id}", + null + ); + } + $id = Util\Util::utf8($id); + $account = Util\Util::utf8($account); + + $base = Account::classUrl(); + $accountExtn = \urlencode($account); + $extn = \urlencode($id); + + return "{$base}/{$accountExtn}/persons/{$extn}"; + } + + /** + * @param array|string $_id + * @param null|array|string $_opts + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function retrieve($_id, $_opts = null) + { + $msg = 'Persons cannot be retrieved without an account ID. Retrieve ' . + "a person using `Account::retrievePerson('account_id', " . + "'person_id')`."; + + throw new Exception\BadMethodCallException($msg); + } + + /** + * @param string $_id + * @param null|array $_params + * @param null|array|string $_options + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function update($_id, $_params = null, $_options = null) + { + $msg = 'Persons cannot be updated without an account ID. Update ' . + "a person using `Account::updatePerson('account_id', " . + "'person_id', \$updateParams)`."; + + throw new Exception\BadMethodCallException($msg); + } +} diff --git a/vendor/stripe/stripe-php/lib/Plan.php b/vendor/stripe/stripe-php/lib/Plan.php new file mode 100644 index 000000000..bff735d78 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Plan.php @@ -0,0 +1,57 @@ +Prices API. It replaces the Plans + * API and is backwards compatible to simplify your migration. + * + * Plans define the base price, currency, and billing cycle for recurring purchases + * of products. Products help + * you track inventory or provisioning, and plans help you track pricing. Different + * physical goods or levels of service should be represented by products, and + * pricing options should be represented by plans. This approach lets you change + * prices without having to change your provisioning scheme. + * + * For example, you might have a single "gold" product that has plans for + * $10/month, $100/year, €9/month, and €90/year. + * + * Related guides: Set up + * a subscription and more about products and prices. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $active Whether the plan can be used for new purchases. + * @property null|string $aggregate_usage Specifies a usage aggregation strategy for plans of usage_type=metered. Allowed values are sum for summing up all usage during a period, last_during_period for using the last usage record reported within a period, last_ever for using the last usage record ever (across period bounds) or max which uses the usage record with the maximum reported usage during a period. Defaults to sum. + * @property null|int $amount The unit amount in %s to be charged, represented as a whole integer if possible. + * @property null|string $amount_decimal The unit amount in %s to be charged, represented as a decimal string with at most 12 decimal places. + * @property string $billing_scheme Describes how to compute the price per period. Either per_unit or tiered. per_unit indicates that the fixed amount (specified in amount) will be charged per unit in quantity (for plans with usage_type=licensed), or per unit of total usage (for plans with usage_type=metered). tiered indicates that the unit pricing will be computed using a tiering strategy as defined using the tiers and tiers_mode attributes. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string $interval The frequency at which a subscription is billed. One of day, week, month or year. + * @property int $interval_count The number of intervals (specified in the interval attribute) between subscription billings. For example, interval=month and interval_count=3 bills every 3 months. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $nickname A brief description of the plan, hidden from customers. + * @property null|string|\Stripe\Product $product The product whose pricing this plan determines. + * @property \Stripe\StripeObject[] $tiers Each element represents a pricing tier. This parameter requires billing_scheme to be set to tiered. See also the documentation for billing_scheme. + * @property null|string $tiers_mode Defines if the tiering price should be graduated or volume based. In volume-based tiering, the maximum quantity within a period determines the per unit price. In graduated tiering, pricing can change as the quantity grows. + * @property null|\Stripe\StripeObject $transform_usage Apply a transformation to the reported usage or set quantity before computing the amount billed. Cannot be combined with tiers. + * @property null|int $trial_period_days Default number of trial days when subscribing a customer to this plan using trial_from_plan=true. + * @property string $usage_type Configures how the quantity per period should be determined. Can be either metered or licensed. licensed automatically bills the quantity set when adding it to a subscription. metered aggregates the total usage based on usage records. Defaults to licensed. + */ +class Plan extends ApiResource +{ + const OBJECT_NAME = 'plan'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Price.php b/vendor/stripe/stripe-php/lib/Price.php new file mode 100644 index 000000000..9d3c5540e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Price.php @@ -0,0 +1,62 @@ +Products help you track + * inventory or provisioning, and prices help you track payment terms. Different + * physical goods or levels of service should be represented by products, and + * pricing options should be represented by prices. This approach lets you change + * prices without having to change your provisioning scheme. + * + * For example, you might have a single "gold" product that has prices + * for $10/month, $100/year, and €9 once. + * + * Related guides: Set up + * a subscription, create an invoice, + * and more about products + * and prices. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $active Whether the price can be used for new purchases. + * @property string $billing_scheme Describes how to compute the price per period. Either per_unit or tiered. per_unit indicates that the fixed amount (specified in unit_amount or unit_amount_decimal) will be charged per unit in quantity (for prices with usage_type=licensed), or per unit of total usage (for prices with usage_type=metered). tiered indicates that the unit pricing will be computed using a tiering strategy as defined using the tiers and tiers_mode attributes. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string $lookup_key A lookup key used to retrieve prices dynamically from a static string. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string $nickname A brief description of the plan, hidden from customers. + * @property string|\Stripe\Product $product The ID of the product this price is associated with. + * @property null|\Stripe\StripeObject $recurring The recurring components of a price such as interval and usage_type. + * @property \Stripe\StripeObject[] $tiers Each element represents a pricing tier. This parameter requires billing_scheme to be set to tiered. See also the documentation for billing_scheme. + * @property null|string $tiers_mode Defines if the tiering price should be graduated or volume based. In volume-based tiering, the maximum quantity within a period determines the per unit price. In graduated tiering, pricing can change as the quantity grows. + * @property null|\Stripe\StripeObject $transform_quantity Apply a transformation to the reported usage or set quantity before computing the amount billed. Cannot be combined with tiers. + * @property string $type One of one_time or recurring depending on whether the price is for a one-time purchase or a recurring (subscription) purchase. + * @property null|int $unit_amount The unit amount in %s to be charged, represented as a whole integer if possible. + * @property null|string $unit_amount_decimal The unit amount in %s to be charged, represented as a decimal string with at most 12 decimal places. + */ +class Price extends ApiResource +{ + const OBJECT_NAME = 'price'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const BILLING_SCHEME_PER_UNIT = 'per_unit'; + const BILLING_SCHEME_TIERED = 'tiered'; + + const TIERS_MODE_GRADUATED = 'graduated'; + const TIERS_MODE_VOLUME = 'volume'; + + const TYPE_ONE_TIME = 'one_time'; + const TYPE_RECURRING = 'recurring'; +} diff --git a/vendor/stripe/stripe-php/lib/Product.php b/vendor/stripe/stripe-php/lib/Product.php new file mode 100644 index 000000000..5afe1f137 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Product.php @@ -0,0 +1,53 @@ +Prices to + * configure pricing in Checkout and Subscriptions. + * + * Related guides: Set up + * a subscription or accept one-time + * payments with Checkout and more about Products and Prices + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $active Whether the product is currently available for purchase. + * @property null|string[] $attributes A list of up to 5 attributes that each SKU can provide values for (e.g., ["color", "size"]). + * @property null|string $caption A short one-line description of the product, meant to be displayable to the customer. Only applicable to products of type=good. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string[] $deactivate_on An array of connect application identifiers that cannot purchase this product. Only applicable to products of type=good. + * @property null|string $description The product's description, meant to be displayable to the customer. Use this field to optionally store a long form explanation of the product being sold for your own rendering purposes. + * @property string[] $images A list of up to 8 URLs of images for this product, meant to be displayable to the customer. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $name The product's name, meant to be displayable to the customer. Whenever this product is sold via a subscription, name will show up on associated invoice line item descriptions. + * @property null|\Stripe\StripeObject $package_dimensions The dimensions of this product for shipping purposes. A SKU associated with this product can override this value by having its own package_dimensions. Only applicable to products of type=good. + * @property null|bool $shippable Whether this product is a shipped good. Only applicable to products of type=good. + * @property null|string $statement_descriptor Extra information about a product which will appear on your customer's credit card statement. In the case that multiple products are billed at once, the first statement descriptor will be used. + * @property string $type The type of the product. The product is either of type good, which is eligible for use with Orders and SKUs, or service, which is eligible for use with Subscriptions and Plans. + * @property null|string $unit_label A label that represents units of this product in Stripe and on customers’ receipts and invoices. When set, this will be included in associated invoice line item descriptions. + * @property int $updated Time at which the object was last updated. Measured in seconds since the Unix epoch. + * @property null|string $url A URL of a publicly-accessible webpage for this product. Only applicable to products of type=good. + */ +class Product extends ApiResource +{ + const OBJECT_NAME = 'product'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const TYPE_GOOD = 'good'; + const TYPE_SERVICE = 'service'; +} diff --git a/vendor/stripe/stripe-php/lib/PromotionCode.php b/vendor/stripe/stripe-php/lib/PromotionCode.php new file mode 100644 index 000000000..f4bb0f4f1 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/PromotionCode.php @@ -0,0 +1,33 @@ +invoices or orders. Coupons do not work with conventional one-off charges. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\Customer $customer The customer that this promotion code can be used by. + * @property null|int $expires_at Date at which the promotion code can no longer be redeemed. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|int $max_redemptions Maximum number of times this promotion code can be redeemed. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\StripeObject $restrictions + * @property int $times_redeemed Number of times this promotion code has been used. + */ +class PromotionCode extends ApiResource +{ + const OBJECT_NAME = 'promotion_code'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Radar/EarlyFraudWarning.php b/vendor/stripe/stripe-php/lib/Radar/EarlyFraudWarning.php new file mode 100644 index 000000000..eb1b351c6 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Radar/EarlyFraudWarning.php @@ -0,0 +1,37 @@ +Early + * Fraud Warnings. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $actionable An EFW is actionable if it has not received a dispute and has not been fully refunded. You may wish to proactively refund a charge that receives an EFW, in order to avoid receiving a dispute later. + * @property string|\Stripe\Charge $charge ID of the charge this early fraud warning is for, optionally expanded. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $fraud_type The type of fraud labelled by the issuer. One of card_never_received, fraudulent_card_application, made_with_counterfeit_card, made_with_lost_card, made_with_stolen_card, misc, unauthorized_use_of_card. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + */ +class EarlyFraudWarning extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'radar.early_fraud_warning'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Retrieve; + + const FRAUD_TYPE_CARD_NEVER_RECEIVED = 'card_never_received'; + const FRAUD_TYPE_FRAUDULENT_CARD_APPLICATION = 'fraudulent_card_application'; + const FRAUD_TYPE_MADE_WITH_COUNTERFEIT_CARD = 'made_with_counterfeit_card'; + const FRAUD_TYPE_MADE_WITH_LOST_CARD = 'made_with_lost_card'; + const FRAUD_TYPE_MADE_WITH_STOLEN_CARD = 'made_with_stolen_card'; + const FRAUD_TYPE_MISC = 'misc'; + const FRAUD_TYPE_UNAUTHORIZED_USE_OF_CARD = 'unauthorized_use_of_card'; +} diff --git a/vendor/stripe/stripe-php/lib/Radar/ValueList.php b/vendor/stripe/stripe-php/lib/Radar/ValueList.php new file mode 100644 index 000000000..bcbef74cd --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Radar/ValueList.php @@ -0,0 +1,35 @@ +Default Stripe + * Lists. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string $alias The name of the value list for use in rules. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $created_by The name or email address of the user who created this value list. + * @property string $item_type The type of items in the value list. One of card_fingerprint, card_bin, email, ip_address, country, string, or case_sensitive_string. + * @property \Stripe\Collection $list_items List of items contained within this value list. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $name The name of the value list. + */ +class ValueList extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'radar.value_list'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Delete; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Radar/ValueListItem.php b/vendor/stripe/stripe-php/lib/Radar/ValueListItem.php new file mode 100644 index 000000000..c4ab28194 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Radar/ValueListItem.php @@ -0,0 +1,31 @@ +Managing List + * Items. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $created_by The name or email address of the user who added this item to the value list. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property string $value The value of the item. + * @property string $value_list The identifier of the value list this item belongs to. + */ +class ValueListItem extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'radar.value_list_item'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Delete; + use \Stripe\ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/Recipient.php b/vendor/stripe/stripe-php/lib/Recipient.php new file mode 100644 index 000000000..8d5ad4c0a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Recipient.php @@ -0,0 +1,44 @@ +Recipient objects, you can transfer money from your Stripe + * account to a third-party bank account or debit card. The API allows you to + * create, delete, and update your recipients. You can retrieve individual + * recipients as well as a list of all your recipients. + * + * Recipient objects have been deprecated in favor of Connect, specifically Connect's much + * more powerful Account objects. + * Stripe accounts that don't already use recipients can no longer begin doing so. + * Please use Account objects instead. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|\Stripe\BankAccount $active_account Hash describing the current account on the recipient, if there is one. + * @property null|\Stripe\Collection $cards + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\Card $default_card The default card to use for creating transfers to this recipient. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|string $email + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string|\Stripe\Account $migrated_to The ID of the Custom account this recipient was migrated to. If set, the recipient can no longer be updated, nor can transfers be made to it: use the Custom account instead. + * @property null|string $name Full, legal name of the recipient. + * @property string|\Stripe\Account $rolled_back_from + * @property string $type Type of the recipient, one of individual or corporation. + * @property bool $verified Whether the recipient has been verified. This field is non-standard, and maybe removed in the future + */ +class Recipient extends ApiResource +{ + const OBJECT_NAME = 'recipient'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/RecipientTransfer.php b/vendor/stripe/stripe-php/lib/RecipientTransfer.php new file mode 100644 index 000000000..5e2d4365d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/RecipientTransfer.php @@ -0,0 +1,36 @@ +Refund objects allow you to refund a charge that has previously + * been created but not yet refunded. Funds will be refunded to the credit or debit + * card that was originally charged. + * + * Related guide: Refunds. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount, in %s. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction Balance transaction that describes the impact on your account balance. + * @property null|string|\Stripe\Charge $charge ID of the charge that was refunded. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property string $description An arbitrary string attached to the object. Often useful for displaying to users. (Available on non-card refunds only) + * @property string|\Stripe\BalanceTransaction $failure_balance_transaction If the refund failed, this balance transaction describes the adjustment made on your account balance that reverses the initial balance transaction. + * @property string $failure_reason If the refund failed, the reason for refund failure if known. Possible values are lost_or_stolen_card, expired_or_canceled_card, or unknown. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string|\Stripe\PaymentIntent $payment_intent ID of the PaymentIntent that was refunded. + * @property null|string $reason Reason for the refund, either user-provided (duplicate, fraudulent, or requested_by_customer) or generated by Stripe internally (expired_uncaptured_charge). + * @property null|string $receipt_number This is the transaction number that appears on email receipts sent for this refund. + * @property null|string|\Stripe\TransferReversal $source_transfer_reversal The transfer reversal that is associated with the refund. Only present if the charge came from another Stripe account. See the Connect documentation for details. + * @property null|string $status Status of the refund. For credit card refunds, this can be pending, succeeded, or failed. For other types of refunds, it can be pending, succeeded, failed, or canceled. Refer to our refunds documentation for more details. + * @property null|string|\Stripe\TransferReversal $transfer_reversal If the accompanying transfer was reversed, the transfer reversal object. Only applicable if the charge was created using the destination parameter. + */ +class Refund extends ApiResource +{ + const OBJECT_NAME = 'refund'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const FAILURE_REASON_EXPIRED_OR_CANCELED_CARD = 'expired_or_canceled_card'; + const FAILURE_REASON_LOST_OR_STOLEN_CARD = 'lost_or_stolen_card'; + const FAILURE_REASON_UNKNOWN = 'unknown'; + + const REASON_DUPLICATE = 'duplicate'; + const REASON_FRAUDULENT = 'fraudulent'; + const REASON_REQUESTED_BY_CUSTOMER = 'requested_by_customer'; + + const STATUS_CANCELED = 'canceled'; + const STATUS_FAILED = 'failed'; + const STATUS_PENDING = 'pending'; + const STATUS_SUCCEEDED = 'succeeded'; + + /** + * @deprecated use FAILURE_REASON_EXPIRED_OR_CANCELED_CARD instead + */ + const FAILURE_REASON = 'expired_or_canceled_card'; +} diff --git a/vendor/stripe/stripe-php/lib/Reporting/ReportRun.php b/vendor/stripe/stripe-php/lib/Reporting/ReportRun.php new file mode 100644 index 000000000..458cbed6c --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Reporting/ReportRun.php @@ -0,0 +1,37 @@ +API Access to + * Reports. + * + * Note that reports can only be run based on your live-mode data (not test-mode + * data), and thus related requests must be made with a live-mode API key. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $error If something should go wrong during the run, a message about the failure (populated when status=failed). + * @property bool $livemode Always true: reports can only be run on live-mode data. + * @property \Stripe\StripeObject $parameters + * @property string $report_type The ID of the report type to run, such as "balance.summary.1". + * @property null|\Stripe\File $result The file object representing the result of the report run (populated when status=succeeded). + * @property string $status Status of this report run. This will be pending when the run is initially created. When the run finishes, this will be set to succeeded and the result field will be populated. Rarely, we may encounter an error, at which point this will be set to failed and the error field will be populated. + * @property null|int $succeeded_at Timestamp at which this run successfully finished (populated when status=succeeded). Measured in seconds since the Unix epoch. + */ +class ReportRun extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'reporting.report_run'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/Reporting/ReportType.php b/vendor/stripe/stripe-php/lib/Reporting/ReportType.php new file mode 100644 index 000000000..cf753012a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Reporting/ReportType.php @@ -0,0 +1,34 @@ +API Access to Reports + * documentation for those Report Type IDs, along with required and optional + * parameters. + * + * Note that reports can only be run based on your live-mode data (not test-mode + * data), and thus related requests must be made with a live-mode API key. + * + * @property string $id The ID of the Report Type, such as balance.summary.1. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $data_available_end Most recent time for which this Report Type is available. Measured in seconds since the Unix epoch. + * @property int $data_available_start Earliest time for which this Report Type is available. Measured in seconds since the Unix epoch. + * @property null|string[] $default_columns List of column names that are included by default when this Report Type gets run. (If the Report Type doesn't support the columns parameter, this will be null.) + * @property string $name Human-readable name of the Report Type + * @property int $updated When this Report Type was latest updated. Measured in seconds since the Unix epoch. + * @property int $version Version of the Report Type. Different versions report with the same ID will have the same purpose, but may take different run parameters or have different result schemas. + */ +class ReportType extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'reporting.report_type'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Retrieve; +} diff --git a/vendor/stripe/stripe-php/lib/RequestTelemetry.php b/vendor/stripe/stripe-php/lib/RequestTelemetry.php new file mode 100644 index 000000000..bf9074acb --- /dev/null +++ b/vendor/stripe/stripe-php/lib/RequestTelemetry.php @@ -0,0 +1,26 @@ +requestId = $requestId; + $this->requestDuration = $requestDuration; + } +} diff --git a/vendor/stripe/stripe-php/lib/Review.php b/vendor/stripe/stripe-php/lib/Review.php new file mode 100644 index 000000000..606b41054 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Review.php @@ -0,0 +1,66 @@ +Radar and reviewing payments here. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string $billing_zip The ZIP or postal code of the card used, if applicable. + * @property null|string|\Stripe\Charge $charge The charge associated with this review. + * @property null|string $closed_reason The reason the review was closed, or null if it has not yet been closed. One of approved, refunded, refunded_as_fraud, or disputed. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $ip_address The IP address where the payment originated. + * @property null|\Stripe\StripeObject $ip_address_location Information related to the location of the payment. Note that this information is an approximation and attempts to locate the nearest population center - it should not be used to determine a specific address. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property bool $open If true, the review needs action. + * @property string $opened_reason The reason the review was opened. One of rule or manual. + * @property string|\Stripe\PaymentIntent $payment_intent The PaymentIntent ID associated with this review, if one exists. + * @property string $reason The reason the review is currently open or closed. One of rule, manual, approved, refunded, refunded_as_fraud, or disputed. + * @property null|\Stripe\StripeObject $session Information related to the browsing session of the user who initiated the payment. + */ +class Review extends ApiResource +{ + const OBJECT_NAME = 'review'; + + use ApiOperations\All; + use ApiOperations\Retrieve; + + /** + * Possible string representations of the current, the opening or the closure reason of the review. + * Not all of these enumeration apply to all of the ´reason´ fields. Please consult the Review object to + * determine where these are apply. + * + * @see https://stripe.com/docs/api/radar/reviews/object + */ + const REASON_APPROVED = 'approved'; + const REASON_DISPUTED = 'disputed'; + const REASON_MANUAL = 'manual'; + const REASON_REFUNDED = 'refunded'; + const REASON_REFUNDED_AS_FRAUD = 'refunded_as_fraud'; + const REASON_RULE = 'rule'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Review the approved review + */ + public function approve($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/approve'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/SKU.php b/vendor/stripe/stripe-php/lib/SKU.php new file mode 100644 index 000000000..b418c6c5d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SKU.php @@ -0,0 +1,44 @@ +stock keeping units. + * SKUs describe specific product variations, taking into account any combination + * of: attributes, currency, and cost. For example, a product may be a T-shirt, + * whereas a specific SKU represents the size: large, color: + * red version of that shirt. + * + * Can also be used to manage inventory. + * + * Related guide: Tax, Shipping, and + * Inventory. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $active Whether the SKU is available for purchase. + * @property \Stripe\StripeObject $attributes A dictionary of attributes and values for the attributes defined by the product. If, for example, a product's attributes are ["size", "gender"], a valid SKU has the following dictionary of attributes: {"size": "Medium", "gender": "Unisex"}. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string $image The URL of an image for this SKU, meant to be displayable to the customer. + * @property \Stripe\StripeObject $inventory + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|\Stripe\StripeObject $package_dimensions The dimensions of this SKU for shipping purposes. + * @property int $price The cost of the item as a positive integer in the smallest currency unit (that is, 100 cents to charge $1.00, or 100 to charge ¥100, Japanese Yen being a zero-decimal currency). + * @property string|\Stripe\Product $product The ID of the product this SKU is associated with. The product must be currently active. + * @property int $updated Time at which the object was last updated. Measured in seconds since the Unix epoch. + */ +class SKU extends ApiResource +{ + const OBJECT_NAME = 'sku'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Service/AbstractService.php b/vendor/stripe/stripe-php/lib/Service/AbstractService.php new file mode 100644 index 000000000..ed092c8b8 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/AbstractService.php @@ -0,0 +1,79 @@ +client = $client; + } + + /** + * Gets the client used by this service to send requests. + * + * @return \Stripe\StripeClientInterface + */ + public function getClient() + { + return $this->client; + } + + /** + * Translate null values to empty strings. For service methods, + * we interpret null as a request to unset the field, which + * corresponds to sending an empty string for the field to the + * API. + * + * @param null|array $params + */ + private static function formatParams($params) + { + if (null === $params) { + return null; + } + \array_walk_recursive($params, function (&$value, $key) { + if (null === $value) { + $value = ''; + } + }); + + return $params; + } + + protected function request($method, $path, $params, $opts) + { + return $this->getClient()->request($method, $path, static::formatParams($params), $opts); + } + + protected function requestCollection($method, $path, $params, $opts) + { + return $this->getClient()->requestCollection($method, $path, static::formatParams($params), $opts); + } + + protected function buildPath($basePath, ...$ids) + { + foreach ($ids as $id) { + if (null === $id || '' === \trim($id)) { + $msg = 'The resource ID cannot be null or whitespace.'; + + throw new \Stripe\Exception\InvalidArgumentException($msg); + } + } + + return \sprintf($basePath, ...\array_map('\urlencode', $ids)); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/AbstractServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/AbstractServiceFactory.php new file mode 100644 index 000000000..4aca68686 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/AbstractServiceFactory.php @@ -0,0 +1,59 @@ + */ + private $services; + + /** + * @param \Stripe\StripeClientInterface $client + */ + public function __construct($client) + { + $this->client = $client; + $this->services = []; + } + + /** + * @param string $name + * + * @return null|string + */ + abstract protected function getServiceClass($name); + + /** + * @param string $name + * + * @return null|AbstractService|AbstractServiceFactory + */ + public function __get($name) + { + $serviceClass = $this->getServiceClass($name); + if (null !== $serviceClass) { + if (!\array_key_exists($name, $this->services)) { + $this->services[$name] = new $serviceClass($this->client); + } + + return $this->services[$name]; + } + + \trigger_error('Undefined property: ' . static::class . '::$' . $name); + + return null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/AccountLinkService.php b/vendor/stripe/stripe-php/lib/Service/AccountLinkService.php new file mode 100644 index 000000000..2e9049239 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/AccountLinkService.php @@ -0,0 +1,25 @@ +request('post', '/v1/account_links', $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/AccountService.php b/vendor/stripe/stripe-php/lib/Service/AccountService.php new file mode 100644 index 000000000..c731e475e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/AccountService.php @@ -0,0 +1,381 @@ +Connect. If you’re not a platform, the list is empty. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/accounts', $params, $opts); + } + + /** + * Returns a list of capabilities associated with the account. The capabilities are + * returned sorted by creation date, with the most recent capability appearing + * first. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allCapabilities($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/accounts/%s/capabilities', $parentId), $params, $opts); + } + + /** + * List external accounts for an account. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allExternalAccounts($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/accounts/%s/external_accounts', $parentId), $params, $opts); + } + + /** + * Returns a list of people associated with the account’s legal entity. The people + * are returned sorted by creation date, with the most recent people appearing + * first. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allPersons($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/accounts/%s/persons', $parentId), $params, $opts); + } + + /** + * With Connect, you can create Stripe accounts for + * your users. To do this, you’ll first need to register your + * platform. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Account + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/accounts', $params, $opts); + } + + /** + * Create an external account for a given account. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public function createExternalAccount($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/external_accounts', $parentId), $params, $opts); + } + + /** + * Creates a single-use login link for an Express account to access their Stripe + * dashboard. + * + * You may only create login links for Express accounts connected to your + * platform. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\LoginLink + */ + public function createLoginLink($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/login_links', $parentId), $params, $opts); + } + + /** + * Creates a new person. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public function createPerson($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/persons', $parentId), $params, $opts); + } + + /** + * With Connect, you can delete Custom or Express + * accounts you manage. + * + * Accounts created using test-mode keys can be deleted at any time. Accounts + * created using live-mode keys can only be deleted once all balances are zero. + * + * If you want to delete your own account, use the account information tab in your + * account settings instead. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Account + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/accounts/%s', $id), $params, $opts); + } + + /** + * Delete a specified external account for a given account. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public function deleteExternalAccount($parentId, $id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/accounts/%s/external_accounts/%s', $parentId, $id), $params, $opts); + } + + /** + * Deletes an existing person’s relationship to the account’s legal entity. Any + * person with a relationship for an account can be deleted through the API, except + * if the person is the account_opener. If your integration is using + * the executive parameter, you cannot delete the only verified + * executive on file. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public function deletePerson($parentId, $id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/accounts/%s/persons/%s', $parentId, $id), $params, $opts); + } + + /** + * With Connect, you may flag accounts as suspicious. + * + * Test-mode Custom and Express accounts can be rejected at any time. Accounts + * created using live-mode keys may only be rejected once all balances are zero. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Account + */ + public function reject($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/reject', $id), $params, $opts); + } + + /** + * Retrieves information about the specified Account Capability. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Capability + */ + public function retrieveCapability($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/accounts/%s/capabilities/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieve a specified external account for a given account. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public function retrieveExternalAccount($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/accounts/%s/external_accounts/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieves an existing person. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public function retrievePerson($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/accounts/%s/persons/%s', $parentId, $id), $params, $opts); + } + + /** + * Updates a connected Express or Custom + * account by setting the values of the parameters passed. Any parameters not + * provided are left unchanged. Most parameters can be changed only for Custom + * accounts. (These are marked Custom Only below.) Parameters + * marked Custom and Express are supported by both account types. + * + * To update your own account, use the Dashboard. Refer to our Connect documentation to learn more + * about updating accounts. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Account + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s', $id), $params, $opts); + } + + /** + * Updates an existing Account Capability. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Capability + */ + public function updateCapability($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/capabilities/%s', $parentId, $id), $params, $opts); + } + + /** + * Updates the metadata, account holder name, and account holder type of a bank + * account belonging to a Custom + * account, and optionally sets it as the default for its currency. Other bank + * account details are not editable by design. + * + * You can re-enable a disabled bank account by performing an update call without + * providing any arguments or changes. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BankAccount|\Stripe\Card + */ + public function updateExternalAccount($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/external_accounts/%s', $parentId, $id), $params, $opts); + } + + /** + * Updates an existing person. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Person + */ + public function updatePerson($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/accounts/%s/persons/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieves the details of an account. + * + * @param null|string $id + * @param null|array $params + * @param null|array|StripeUtilRequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Account + */ + public function retrieve($id = null, $params = null, $opts = null) + { + if (null === $id) { + return $this->request('get', '/v1/account', $params, $opts); + } + + return $this->request('get', $this->buildPath('/v1/accounts/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/ApplePayDomainService.php b/vendor/stripe/stripe-php/lib/Service/ApplePayDomainService.php new file mode 100644 index 000000000..6577b6b62 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/ApplePayDomainService.php @@ -0,0 +1,70 @@ +requestCollection('get', '/v1/apple_pay/domains', $params, $opts); + } + + /** + * Create an apple pay domain. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplePayDomain + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/apple_pay/domains', $params, $opts); + } + + /** + * Delete an apple pay domain. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplePayDomain + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/apple_pay/domains/%s', $id), $params, $opts); + } + + /** + * Retrieve an apple pay domain. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplePayDomain + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/apple_pay/domains/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/ApplicationFeeService.php b/vendor/stripe/stripe-php/lib/Service/ApplicationFeeService.php new file mode 100644 index 000000000..c05c3cd59 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/ApplicationFeeService.php @@ -0,0 +1,125 @@ +requestCollection('get', '/v1/application_fees', $params, $opts); + } + + /** + * You can see a list of the refunds belonging to a specific application fee. Note + * that the 10 most recent refunds are always available by default on the + * application fee object. If you need more than those 10, you can use this API + * method and the limit and starting_after parameters to + * page through additional refunds. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allRefunds($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/application_fees/%s/refunds', $parentId), $params, $opts); + } + + /** + * Refunds an application fee that has previously been collected but not yet + * refunded. Funds will be refunded to the Stripe account from which the fee was + * originally collected. + * + * You can optionally refund only part of an application fee. You can do so + * multiple times, until the entire fee has been refunded. + * + * Once entirely refunded, an application fee can’t be refunded again. This method + * will raise an error when called on an already-refunded application fee, or when + * trying to refund more money than is left on an application fee. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFeeRefund + */ + public function createRefund($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/application_fees/%s/refunds', $parentId), $params, $opts); + } + + /** + * Retrieves the details of an application fee that your account has collected. The + * same information is returned when refunding the application fee. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFee + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/application_fees/%s', $id), $params, $opts); + } + + /** + * By default, you can see the 10 most recent refunds stored directly on the + * application fee object, but you can also retrieve details about a specific + * refund stored on the application fee. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFeeRefund + */ + public function retrieveRefund($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/application_fees/%s/refunds/%s', $parentId, $id), $params, $opts); + } + + /** + * Updates the specified application fee refund by setting the values of the + * parameters passed. Any parameters not provided will be left unchanged. + * + * This request only accepts metadata as an argument. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ApplicationFeeRefund + */ + public function updateRefund($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/application_fees/%s/refunds/%s', $parentId, $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/BalanceService.php b/vendor/stripe/stripe-php/lib/Service/BalanceService.php new file mode 100644 index 000000000..0f55385f1 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/BalanceService.php @@ -0,0 +1,26 @@ +Accounting + * for negative balances. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Balance + */ + public function retrieve($params = null, $opts = null) + { + return $this->request('get', '/v1/balance', $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/BalanceTransactionService.php b/vendor/stripe/stripe-php/lib/Service/BalanceTransactionService.php new file mode 100644 index 000000000..fb1da5018 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/BalanceTransactionService.php @@ -0,0 +1,47 @@ +/v1/balance/history. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/balance_transactions', $params, $opts); + } + + /** + * Retrieves the balance transaction with the given ID. + * + * Note that this endpoint previously used the path + * /v1/balance/history/:id. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\BalanceTransaction + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/balance_transactions/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/BillingPortal/BillingPortalServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/BillingPortal/BillingPortalServiceFactory.php new file mode 100644 index 000000000..756ae1769 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/BillingPortal/BillingPortalServiceFactory.php @@ -0,0 +1,25 @@ + + */ + private static $classMap = [ + 'sessions' => SessionService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/BillingPortal/SessionService.php b/vendor/stripe/stripe-php/lib/Service/BillingPortal/SessionService.php new file mode 100644 index 000000000..6b3e60263 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/BillingPortal/SessionService.php @@ -0,0 +1,23 @@ +request('post', '/v1/billing_portal/sessions', $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/ChargeService.php b/vendor/stripe/stripe-php/lib/Service/ChargeService.php new file mode 100644 index 000000000..f5321b8ac --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/ChargeService.php @@ -0,0 +1,101 @@ +requestCollection('get', '/v1/charges', $params, $opts); + } + + /** + * Capture the payment of an existing, uncaptured, charge. This is the second half + * of the two-step payment flow, where first you created a + * charge with the capture option set to false. + * + * Uncaptured payments expire exactly seven days after they are created. If they + * are not captured by that point in time, they will be marked as refunded and will + * no longer be capturable. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Charge + */ + public function capture($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/charges/%s/capture', $id), $params, $opts); + } + + /** + * To charge a credit card or other payment source, you create a + * Charge object. If your API key is in test mode, the supplied + * payment source (e.g., card) won’t actually be charged, although everything else + * will occur as if in live mode. (Stripe assumes that the charge would have + * completed successfully). + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Charge + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/charges', $params, $opts); + } + + /** + * Retrieves the details of a charge that has previously been created. Supply the + * unique charge ID that was returned from your previous request, and Stripe will + * return the corresponding charge information. The same information is returned + * when creating or refunding the charge. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Charge + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/charges/%s', $id), $params, $opts); + } + + /** + * Updates the specified charge by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Charge + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/charges/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Checkout/CheckoutServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/Checkout/CheckoutServiceFactory.php new file mode 100644 index 000000000..bb26a837f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Checkout/CheckoutServiceFactory.php @@ -0,0 +1,25 @@ + + */ + private static $classMap = [ + 'sessions' => SessionService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Checkout/SessionService.php b/vendor/stripe/stripe-php/lib/Service/Checkout/SessionService.php new file mode 100644 index 000000000..9da378878 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Checkout/SessionService.php @@ -0,0 +1,73 @@ +requestCollection('get', '/v1/checkout/sessions', $params, $opts); + } + + /** + * When retrieving a Checkout Session, there is an includable + * line_items property containing the first handful of those + * items. There is also a URL where you can retrieve the full (paginated) list of + * line items. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allLineItems($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/checkout/sessions/%s/line_items', $parentId), $params, $opts); + } + + /** + * Creates a Session object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Checkout\Session + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/checkout/sessions', $params, $opts); + } + + /** + * Retrieves a Session object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Checkout\Session + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/checkout/sessions/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/CoreServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/CoreServiceFactory.php new file mode 100644 index 000000000..e0109591d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/CoreServiceFactory.php @@ -0,0 +1,125 @@ + + */ + private static $classMap = [ + 'accountLinks' => AccountLinkService::class, + 'accounts' => AccountService::class, + 'applePayDomains' => ApplePayDomainService::class, + 'applicationFees' => ApplicationFeeService::class, + 'balance' => BalanceService::class, + 'balanceTransactions' => BalanceTransactionService::class, + 'billingPortal' => BillingPortal\BillingPortalServiceFactory::class, + 'charges' => ChargeService::class, + 'checkout' => Checkout\CheckoutServiceFactory::class, + 'countrySpecs' => CountrySpecService::class, + 'coupons' => CouponService::class, + 'creditNotes' => CreditNoteService::class, + 'customers' => CustomerService::class, + 'disputes' => DisputeService::class, + 'ephemeralKeys' => EphemeralKeyService::class, + 'events' => EventService::class, + 'exchangeRates' => ExchangeRateService::class, + 'fileLinks' => FileLinkService::class, + 'files' => FileService::class, + 'invoiceItems' => InvoiceItemService::class, + 'invoices' => InvoiceService::class, + 'issuing' => Issuing\IssuingServiceFactory::class, + 'mandates' => MandateService::class, + 'oauth' => OAuthService::class, + 'orderReturns' => OrderReturnService::class, + 'orders' => OrderService::class, + 'paymentIntents' => PaymentIntentService::class, + 'paymentMethods' => PaymentMethodService::class, + 'payouts' => PayoutService::class, + 'plans' => PlanService::class, + 'prices' => PriceService::class, + 'products' => ProductService::class, + 'promotionCodes' => PromotionCodeService::class, + 'radar' => Radar\RadarServiceFactory::class, + 'refunds' => RefundService::class, + 'reporting' => Reporting\ReportingServiceFactory::class, + 'reviews' => ReviewService::class, + 'setupAttempts' => SetupAttemptService::class, + 'setupIntents' => SetupIntentService::class, + 'sigma' => Sigma\SigmaServiceFactory::class, + 'skus' => SkuService::class, + 'sources' => SourceService::class, + 'subscriptionItems' => SubscriptionItemService::class, + 'subscriptions' => SubscriptionService::class, + 'subscriptionSchedules' => SubscriptionScheduleService::class, + 'taxRates' => TaxRateService::class, + 'terminal' => Terminal\TerminalServiceFactory::class, + 'tokens' => TokenService::class, + 'topups' => TopupService::class, + 'transfers' => TransferService::class, + 'webhookEndpoints' => WebhookEndpointService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/CountrySpecService.php b/vendor/stripe/stripe-php/lib/Service/CountrySpecService.php new file mode 100644 index 000000000..573444fd3 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/CountrySpecService.php @@ -0,0 +1,39 @@ +requestCollection('get', '/v1/country_specs', $params, $opts); + } + + /** + * Returns a Country Spec for a given Country code. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CountrySpec + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/country_specs/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/CouponService.php b/vendor/stripe/stripe-php/lib/Service/CouponService.php new file mode 100644 index 000000000..82a880f53 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/CouponService.php @@ -0,0 +1,104 @@ +requestCollection('get', '/v1/coupons', $params, $opts); + } + + /** + * You can create coupons easily via the coupon management page of the + * Stripe dashboard. Coupon creation is also accessible via the API if you need to + * create coupons on the fly. + * + * A coupon has either a percent_off or an amount_off and + * currency. If you set an amount_off, that amount will + * be subtracted from any invoice’s subtotal. For example, an invoice with a + * subtotal of 100 will have a final total of + * 0 if a coupon with an amount_off of + * 200 is applied to it and an invoice with a subtotal of + * 300 will have a final total of 100 if + * a coupon with an amount_off of 200 is applied to + * it. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Coupon + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/coupons', $params, $opts); + } + + /** + * You can delete coupons via the coupon management page of the + * Stripe dashboard. However, deleting a coupon does not affect any customers who + * have already applied the coupon; it means that new customers can’t redeem the + * coupon. You can also delete coupons via the API. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Coupon + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/coupons/%s', $id), $params, $opts); + } + + /** + * Retrieves the coupon with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Coupon + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/coupons/%s', $id), $params, $opts); + } + + /** + * Updates the metadata of a coupon. Other coupon details (currency, duration, + * amount_off) are, by design, not editable. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Coupon + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/coupons/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/CreditNoteService.php b/vendor/stripe/stripe-php/lib/Service/CreditNoteService.php new file mode 100644 index 000000000..39807dc11 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/CreditNoteService.php @@ -0,0 +1,156 @@ +requestCollection('get', '/v1/credit_notes', $params, $opts); + } + + /** + * When retrieving a credit note, you’ll get a lines property + * containing the the first handful of those items. There is also a URL where you + * can retrieve the full (paginated) list of line items. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allLines($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/credit_notes/%s/lines', $parentId), $params, $opts); + } + + /** + * Issue a credit note to adjust the amount of a finalized invoice. For a + * status=open invoice, a credit note reduces its + * amount_due. For a status=paid invoice, a credit note + * does not affect its amount_due. Instead, it can result in any + * combination of the following:. + * + *
  • Refund: create a new refund (using refund_amount) or link + * an existing refund (using refund).
  • Customer balance + * credit: credit the customer’s balance (using credit_amount) which + * will be automatically applied to their next invoice when it’s finalized.
    • + *
  • Outside of Stripe credit: record the amount that is or will be credited + * outside of Stripe (using out_of_band_amount).
+ * + * For post-payment credit notes the sum of the refund, credit and outside of + * Stripe amounts must equal the credit note total. + * + * You may issue multiple credit notes for an invoice. Each credit note will + * increment the invoice’s pre_payment_credit_notes_amount or + * post_payment_credit_notes_amount depending on its + * status at the time of credit note creation. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/credit_notes', $params, $opts); + } + + /** + * Get a preview of a credit note without creating it. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote + */ + public function preview($params = null, $opts = null) + { + return $this->request('get', '/v1/credit_notes/preview', $params, $opts); + } + + /** + * When retrieving a credit note preview, you’ll get a lines + * property containing the first handful of those items. This URL you can retrieve + * the full (paginated) list of line items. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote + */ + public function previewLines($params = null, $opts = null) + { + return $this->request('get', '/v1/credit_notes/preview/lines', $params, $opts); + } + + /** + * Retrieves the credit note object with the given identifier. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/credit_notes/%s', $id), $params, $opts); + } + + /** + * Updates an existing credit note. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/credit_notes/%s', $id), $params, $opts); + } + + /** + * Marks a credit note as void. Learn more about voiding credit notes. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CreditNote + */ + public function voidCreditNote($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/credit_notes/%s/void', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/CustomerService.php b/vendor/stripe/stripe-php/lib/Service/CustomerService.php new file mode 100644 index 000000000..fdc6a5960 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/CustomerService.php @@ -0,0 +1,353 @@ +requestCollection('get', '/v1/customers', $params, $opts); + } + + /** + * Returns a list of transactions that updated the customer’s balances. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allBalanceTransactions($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/customers/%s/balance_transactions', $parentId), $params, $opts); + } + + /** + * List sources for a specified customer. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allSources($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/customers/%s/sources', $parentId), $params, $opts); + } + + /** + * Returns a list of tax IDs for a customer. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allTaxIds($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/customers/%s/tax_ids', $parentId), $params, $opts); + } + + /** + * Creates a new customer object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Customer + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/customers', $params, $opts); + } + + /** + * Creates an immutable transaction that updates the customer’s credit balance. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CustomerBalanceTransaction + */ + public function createBalanceTransaction($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s/balance_transactions', $parentId), $params, $opts); + } + + /** + * When you create a new credit card, you must specify a customer or recipient on + * which to create it. + * + * If the card’s owner has no default card, then the new card will become the + * default. However, if the owner already has a default, then it will not change. + * To change the default, you should update the + * customer to have a new default_source. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public function createSource($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s/sources', $parentId), $params, $opts); + } + + /** + * Creates a new TaxID object for a customer. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxId + */ + public function createTaxId($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s/tax_ids', $parentId), $params, $opts); + } + + /** + * Permanently deletes a customer. It cannot be undone. Also immediately cancels + * any active subscriptions on the customer. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Customer + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/customers/%s', $id), $params, $opts); + } + + /** + * Removes the currently applied discount on a customer. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Customer + */ + public function deleteDiscount($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/customers/%s/discount', $id), $params, $opts); + } + + /** + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public function deleteSource($parentId, $id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/customers/%s/sources/%s', $parentId, $id), $params, $opts); + } + + /** + * Deletes an existing TaxID object. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxId + */ + public function deleteTaxId($parentId, $id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/customers/%s/tax_ids/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieves the details of an existing customer. You need only supply the unique + * customer identifier that was returned upon customer creation. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Customer + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/customers/%s', $id), $params, $opts); + } + + /** + * Retrieves a specific customer balance transaction that updated the customer’s balances. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CustomerBalanceTransaction + */ + public function retrieveBalanceTransaction($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/customers/%s/balance_transactions/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieve a specified source for a given customer. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public function retrieveSource($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/customers/%s/sources/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieves the TaxID object with the given identifier. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxId + */ + public function retrieveTaxId($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/customers/%s/tax_ids/%s', $parentId, $id), $params, $opts); + } + + /** + * Updates the specified customer by setting the values of the parameters passed. + * Any parameters not provided will be left unchanged. For example, if you pass the + * source parameter, that becomes the customer’s active source + * (e.g., a card) to be used for all charges in the future. When you update a + * customer to a new valid card source by passing the source + * parameter: for each of the customer’s current subscriptions, if the subscription + * bills automatically and is in the past_due state, then the latest + * open invoice for the subscription with automatic collection enabled will be + * retried. This retry will not count as an automatic retry, and will not affect + * the next regularly scheduled payment for the invoice. Changing the + * default_source for a customer will not trigger this behavior. + * + * This request accepts mostly the same arguments as the customer creation call. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Customer + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s', $id), $params, $opts); + } + + /** + * Most credit balance transaction fields are immutable, but you may update its + * description and metadata. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\CustomerBalanceTransaction + */ + public function updateBalanceTransaction($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s/balance_transactions/%s', $parentId, $id), $params, $opts); + } + + /** + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public function updateSource($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s/sources/%s', $parentId, $id), $params, $opts); + } + + /** + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source + */ + public function verifySource($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/customers/%s/sources/%s/verify', $parentId, $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/DisputeService.php b/vendor/stripe/stripe-php/lib/Service/DisputeService.php new file mode 100644 index 000000000..4eb1542bf --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/DisputeService.php @@ -0,0 +1,83 @@ +requestCollection('get', '/v1/disputes', $params, $opts); + } + + /** + * Closing the dispute for a charge indicates that you do not have any evidence to + * submit and are essentially dismissing the dispute, acknowledging it as lost. + * + * The status of the dispute will change from needs_response to + * lost. Closing a dispute is irreversible. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Dispute + */ + public function close($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/disputes/%s/close', $id), $params, $opts); + } + + /** + * Retrieves the dispute with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Dispute + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/disputes/%s', $id), $params, $opts); + } + + /** + * When you get a dispute, contacting your customer is always the best first step. + * If that doesn’t work, you can submit evidence to help us resolve the dispute in + * your favor. You can do this in your dashboard, but if you prefer, + * you can use the API to submit evidence programmatically. + * + * Depending on your dispute type, different evidence fields will give you a better + * chance of winning your dispute. To figure out which evidence fields to provide, + * see our guide to dispute types. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Dispute + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/disputes/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/EphemeralKeyService.php b/vendor/stripe/stripe-php/lib/Service/EphemeralKeyService.php new file mode 100644 index 000000000..3ca14c904 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/EphemeralKeyService.php @@ -0,0 +1,43 @@ +request('delete', $this->buildPath('/v1/ephemeral_keys/%s', $id), $params, $opts); + } + + /** + * Creates a short-lived API key for a given resource. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\EphemeralKey + */ + public function create($params = null, $opts = null) + { + if (!$opts || !isset($opts['stripe_version'])) { + throw new \Stripe\Exception\InvalidArgumentException('stripe_version must be specified to create an ephemeral key'); + } + + return $this->request('post', '/v1/ephemeral_keys', $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/EventService.php b/vendor/stripe/stripe-php/lib/Service/EventService.php new file mode 100644 index 000000000..430b35abf --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/EventService.php @@ -0,0 +1,44 @@ +event object api_version + * attribute (not according to your current Stripe API version or + * Stripe-Version header). + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/events', $params, $opts); + } + + /** + * Retrieves the details of an event. Supply the unique identifier of the event, + * which you might have received in a webhook. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Event + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/events/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/ExchangeRateService.php b/vendor/stripe/stripe-php/lib/Service/ExchangeRateService.php new file mode 100644 index 000000000..fc78410c7 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/ExchangeRateService.php @@ -0,0 +1,41 @@ +requestCollection('get', '/v1/exchange_rates', $params, $opts); + } + + /** + * Retrieves the exchange rates from the given currency to every supported + * currency. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\ExchangeRate + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/exchange_rates/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/FileLinkService.php b/vendor/stripe/stripe-php/lib/Service/FileLinkService.php new file mode 100644 index 000000000..7a3a435dd --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/FileLinkService.php @@ -0,0 +1,70 @@ +requestCollection('get', '/v1/file_links', $params, $opts); + } + + /** + * Creates a new file link object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\FileLink + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/file_links', $params, $opts); + } + + /** + * Retrieves the file link with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\FileLink + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/file_links/%s', $id), $params, $opts); + } + + /** + * Updates an existing file link object. Expired links can no longer be updated. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\FileLink + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/file_links/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/FileService.php b/vendor/stripe/stripe-php/lib/Service/FileService.php new file mode 100644 index 000000000..148428849 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/FileService.php @@ -0,0 +1,66 @@ +requestCollection('get', '/v1/files', $params, $opts); + } + + /** + * Retrieves the details of an existing file object. Supply the unique file ID from + * a file, and Stripe will return the corresponding file object. To access file + * contents, see the File Upload + * Guide. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\File + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/files/%s', $id), $params, $opts); + } + + /** + * Create a file. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @return \Stripe\File + */ + public function create($params = null, $opts = null) + { + $opts = \Stripe\Util\RequestOptions::parse($opts); + if (!isset($opts->apiBase)) { + $opts->apiBase = $this->getClient()->getFilesBase(); + } + + // Manually flatten params, otherwise curl's multipart encoder will + // choke on nested null|arrays. + $flatParams = \array_column(\Stripe\Util\Util::flattenParams($params), 1, 0); + + return $this->request('post', '/v1/files', $flatParams, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/InvoiceItemService.php b/vendor/stripe/stripe-php/lib/Service/InvoiceItemService.php new file mode 100644 index 000000000..0f0b9e91f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/InvoiceItemService.php @@ -0,0 +1,93 @@ +requestCollection('get', '/v1/invoiceitems', $params, $opts); + } + + /** + * Creates an item to be added to a draft invoice (up to 250 items per invoice). If + * no invoice is specified, the item will be on the next invoice created for the + * customer specified. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\InvoiceItem + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/invoiceitems', $params, $opts); + } + + /** + * Deletes an invoice item, removing it from an invoice. Deleting invoice items is + * only possible when they’re not attached to invoices, or if it’s attached to a + * draft invoice. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\InvoiceItem + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/invoiceitems/%s', $id), $params, $opts); + } + + /** + * Retrieves the invoice item with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\InvoiceItem + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/invoiceitems/%s', $id), $params, $opts); + } + + /** + * Updates the amount or description of an invoice item on an upcoming invoice. + * Updating an invoice item is only possible before the invoice it’s attached to is + * closed. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\InvoiceItem + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoiceitems/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/InvoiceService.php b/vendor/stripe/stripe-php/lib/Service/InvoiceService.php new file mode 100644 index 000000000..f647b28f6 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/InvoiceService.php @@ -0,0 +1,272 @@ +requestCollection('get', '/v1/invoices', $params, $opts); + } + + /** + * When retrieving an invoice, you’ll get a lines property + * containing the total count of line items and the first handful of those items. + * There is also a URL where you can retrieve the full (paginated) list of line + * items. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allLines($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/invoices/%s/lines', $parentId), $params, $opts); + } + + /** + * This endpoint creates a draft invoice for a given customer. The draft invoice + * created pulls in all pending invoice items on that customer, including + * prorations. The invoice remains a draft until you finalize the invoice, which allows you to pay or send the invoice to + * your customers. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/invoices', $params, $opts); + } + + /** + * Permanently deletes a one-off invoice draft. This cannot be undone. Attempts to + * delete invoices that are no longer in a draft state will fail; once an invoice + * has been finalized or if an invoice is for a subscription, it must be voided. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/invoices/%s', $id), $params, $opts); + } + + /** + * Stripe automatically finalizes drafts before sending and attempting payment on + * invoices. However, if you’d like to finalize a draft invoice manually, you can + * do so using this method. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function finalizeInvoice($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoices/%s/finalize', $id), $params, $opts); + } + + /** + * Marking an invoice as uncollectible is useful for keeping track of bad debts + * that can be written off for accounting purposes. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function markUncollectible($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoices/%s/mark_uncollectible', $id), $params, $opts); + } + + /** + * Stripe automatically creates and then attempts to collect payment on invoices + * for customers on subscriptions according to your subscriptions + * settings. However, if you’d like to attempt payment on an invoice out of the + * normal collection schedule or for some other reason, you can do so. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function pay($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoices/%s/pay', $id), $params, $opts); + } + + /** + * Retrieves the invoice with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/invoices/%s', $id), $params, $opts); + } + + /** + * Stripe will automatically send invoices to customers according to your subscriptions + * settings. However, if you’d like to manually send an invoice to your + * customer out of the normal schedule, you can do so. When sending invoices that + * have already been paid, there will be no reference to the payment in the email. + * + * Requests made in test-mode result in no emails being sent, despite sending an + * invoice.sent event. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function sendInvoice($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoices/%s/send', $id), $params, $opts); + } + + /** + * At any time, you can preview the upcoming invoice for a customer. This will show + * you all the charges that are pending, including subscription renewal charges, + * invoice item charges, etc. It will also show you any discounts that are + * applicable to the invoice. + * + * Note that when you are viewing an upcoming invoice, you are simply viewing a + * preview – the invoice has not yet been created. As such, the upcoming invoice + * will not show up in invoice listing calls, and you cannot use the API to pay or + * edit the invoice. If you want to change the amount that your customer will be + * billed, you can add, remove, or update pending invoice items, or update the + * customer’s discount. + * + * You can preview the effects of updating a subscription, including a preview of + * what proration will take place. To ensure that the actual proration is + * calculated exactly the same as the previewed proration, you should pass a + * proration_date parameter when doing the actual subscription update. + * The value passed in should be the same as the + * subscription_proration_date returned on the upcoming invoice + * resource. The recommended way to get only the prorations being previewed is to + * consider only proration line items where period[start] is equal to + * the subscription_proration_date on the upcoming invoice resource. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function upcoming($params = null, $opts = null) + { + return $this->request('get', '/v1/invoices/upcoming', $params, $opts); + } + + /** + * When retrieving an upcoming invoice, you’ll get a lines + * property containing the total count of line items and the first handful of those + * items. There is also a URL where you can retrieve the full (paginated) list of + * line items. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function upcomingLines($params = null, $opts = null) + { + return $this->request('get', '/v1/invoices/upcoming/lines', $params, $opts); + } + + /** + * Draft invoices are fully editable. Once an invoice is finalized, monetary values, + * as well as collection_method, become uneditable. + * + * If you would like to stop the Stripe Billing engine from automatically + * finalizing, reattempting payments on, sending reminders for, or automatically reconciling + * invoices, pass auto_advance=false. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoices/%s', $id), $params, $opts); + } + + /** + * Mark a finalized invoice as void. This cannot be undone. Voiding an invoice is + * similar to deletion, however it only applies to + * finalized invoices and maintains a papertrail where the invoice can still be + * found. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Invoice + */ + public function voidInvoice($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/invoices/%s/void', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Issuing/AuthorizationService.php b/vendor/stripe/stripe-php/lib/Service/Issuing/AuthorizationService.php new file mode 100644 index 000000000..6fff70e7e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Issuing/AuthorizationService.php @@ -0,0 +1,97 @@ +Authorization objects. The objects are + * sorted in descending order by creation date, with the most recently created + * object appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/issuing/authorizations', $params, $opts); + } + + /** + * Approves a pending Issuing Authorization object. This request + * should be made within the timeout window of the real-time + * authorization flow. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Authorization + */ + public function approve($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/authorizations/%s/approve', $id), $params, $opts); + } + + /** + * Declines a pending Issuing Authorization object. This request + * should be made within the timeout window of the real time + * authorization flow. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Authorization + */ + public function decline($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/authorizations/%s/decline', $id), $params, $opts); + } + + /** + * Retrieves an Issuing Authorization object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Authorization + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/issuing/authorizations/%s', $id), $params, $opts); + } + + /** + * Updates the specified Issuing Authorization object by setting the + * values of the parameters passed. Any parameters not provided will be left + * unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Authorization + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/authorizations/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Issuing/CardService.php b/vendor/stripe/stripe-php/lib/Service/Issuing/CardService.php new file mode 100644 index 000000000..346d54afa --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Issuing/CardService.php @@ -0,0 +1,73 @@ +Card objects. The objects are sorted in + * descending order by creation date, with the most recently created object + * appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/issuing/cards', $params, $opts); + } + + /** + * Creates an Issuing Card object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Card + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/issuing/cards', $params, $opts); + } + + /** + * Retrieves an Issuing Card object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Card + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/issuing/cards/%s', $id), $params, $opts); + } + + /** + * Updates the specified Issuing Card object by setting the values of + * the parameters passed. Any parameters not provided will be left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Card + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/cards/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Issuing/CardholderService.php b/vendor/stripe/stripe-php/lib/Service/Issuing/CardholderService.php new file mode 100644 index 000000000..5731b1bf1 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Issuing/CardholderService.php @@ -0,0 +1,74 @@ +Cardholder objects. The objects are + * sorted in descending order by creation date, with the most recently created + * object appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/issuing/cardholders', $params, $opts); + } + + /** + * Creates a new Issuing Cardholder object that can be issued cards. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Cardholder + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/issuing/cardholders', $params, $opts); + } + + /** + * Retrieves an Issuing Cardholder object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Cardholder + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/issuing/cardholders/%s', $id), $params, $opts); + } + + /** + * Updates the specified Issuing Cardholder object by setting the + * values of the parameters passed. Any parameters not provided will be left + * unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Cardholder + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/cardholders/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Issuing/DisputeService.php b/vendor/stripe/stripe-php/lib/Service/Issuing/DisputeService.php new file mode 100644 index 000000000..ab5df5f3e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Issuing/DisputeService.php @@ -0,0 +1,99 @@ +Dispute objects. The objects are sorted + * in descending order by creation date, with the most recently created object + * appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/issuing/disputes', $params, $opts); + } + + /** + * Creates an Issuing Dispute object. Individual pieces of evidence + * within the evidence object are optional at this point. Stripe only + * validates that required evidence is present during submission. Refer to Dispute + * reasons and evidence for more details about evidence requirements. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Dispute + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/issuing/disputes', $params, $opts); + } + + /** + * Retrieves an Issuing Dispute object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Dispute + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/issuing/disputes/%s', $id), $params, $opts); + } + + /** + * Submits an Issuing Dispute to the card network. Stripe validates + * that all evidence fields required for the dispute’s reason are present. For more + * details, see Dispute + * reasons and evidence. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Dispute + */ + public function submit($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/disputes/%s/submit', $id), $params, $opts); + } + + /** + * Updates the specified Issuing Dispute object by setting the values + * of the parameters passed. Any parameters not provided will be left unchanged. + * Properties on the evidence object can be unset by passing in an + * empty string. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Dispute + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/disputes/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Issuing/IssuingServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/Issuing/IssuingServiceFactory.php new file mode 100644 index 000000000..a8d5d0f81 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Issuing/IssuingServiceFactory.php @@ -0,0 +1,33 @@ + + */ + private static $classMap = [ + 'authorizations' => AuthorizationService::class, + 'cardholders' => CardholderService::class, + 'cards' => CardService::class, + 'disputes' => DisputeService::class, + 'transactions' => TransactionService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Issuing/TransactionService.php b/vendor/stripe/stripe-php/lib/Service/Issuing/TransactionService.php new file mode 100644 index 000000000..8fb0ee2ac --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Issuing/TransactionService.php @@ -0,0 +1,59 @@ +Transaction objects. The objects are + * sorted in descending order by creation date, with the most recently created + * object appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/issuing/transactions', $params, $opts); + } + + /** + * Retrieves an Issuing Transaction object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Transaction + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/issuing/transactions/%s', $id), $params, $opts); + } + + /** + * Updates the specified Issuing Transaction object by setting the + * values of the parameters passed. Any parameters not provided will be left + * unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Issuing\Transaction + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/issuing/transactions/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/MandateService.php b/vendor/stripe/stripe-php/lib/Service/MandateService.php new file mode 100644 index 000000000..156bff0a0 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/MandateService.php @@ -0,0 +1,24 @@ +request('get', $this->buildPath('/v1/mandates/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/OAuthService.php b/vendor/stripe/stripe-php/lib/Service/OAuthService.php new file mode 100644 index 000000000..b745ad987 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/OAuthService.php @@ -0,0 +1,150 @@ +_parseOpts($opts); + $opts->apiBase = $this->_getBase($opts); + + return $this->request($method, $path, $params, $opts); + } + + /** + * Generates a URL to Stripe's OAuth form. + * + * @param null|array $params + * @param null|array $opts + * + * @return string the URL to Stripe's OAuth form + */ + public function authorizeUrl($params = null, $opts = null) + { + $params = $params ?: []; + + $opts = $this->_parseOpts($opts); + $base = $this->_getBase($opts); + + $params['client_id'] = $this->_getClientId($params); + if (!\array_key_exists('response_type', $params)) { + $params['response_type'] = 'code'; + } + $query = \Stripe\Util\Util::encodeParameters($params); + + return $base . '/oauth/authorize?' . $query; + } + + /** + * Use an authoriztion code to connect an account to your platform and + * fetch the user's credentials. + * + * @param null|array $params + * @param null|array $opts + * + * @throws \Stripe\Exception\OAuth\OAuthErrorException if the request fails + * + * @return \Stripe\StripeObject object containing the response from the API + */ + public function token($params = null, $opts = null) + { + $params = $params ?: []; + $params['client_secret'] = $this->_getClientSecret($params); + + return $this->requestConnect('post', '/oauth/token', $params, $opts); + } + + /** + * Disconnects an account from your platform. + * + * @param null|array $params + * @param null|array $opts + * + * @throws \Stripe\Exception\OAuth\OAuthErrorException if the request fails + * + * @return \Stripe\StripeObject object containing the response from the API + */ + public function deauthorize($params = null, $opts = null) + { + $params = $params ?: []; + $params['client_id'] = $this->_getClientId($params); + + return $this->requestConnect('post', '/oauth/deauthorize', $params, $opts); + } + + private function _getClientId($params = null) + { + $clientId = ($params && \array_key_exists('client_id', $params)) ? $params['client_id'] : null; + + if (null === $clientId) { + $clientId = $this->client->getClientId(); + } + if (null === $clientId) { + $msg = 'No client_id provided. (HINT: set your client_id using ' + . '`new \Stripe\StripeClient([clientId => + ])`)". You can find your client_ids ' + . 'in your Stripe dashboard at ' + . 'https://dashboard.stripe.com/account/applications/settings, ' + . 'after registering your account as a platform. See ' + . 'https://stripe.com/docs/connect/standard-accounts for details, ' + . 'or email support@stripe.com if you have any questions.'; + + throw new \Stripe\Exception\AuthenticationException($msg); + } + + return $clientId; + } + + private function _getClientSecret($params = null) + { + if (\array_key_exists('client_secret', $params)) { + return $params['client_secret']; + } + + return $this->client->getApiKey(); + } + + /** + * @param array|\Stripe\Util\RequestOptions $opts the special modifiers of the request + * + * @throws \Stripe\Exception\InvalidArgumentException + * + * @return \Stripe\Util\RequestOptions + */ + private function _parseOpts($opts) + { + if (\is_array($opts)) { + if (\array_key_exists('connect_base', $opts)) { + // Throw an exception for the convenience of anybody migrating to + // \Stripe\Service\OAuthService from \Stripe\OAuth, where `connect_base` + // was the name of the parameter that behaves as `api_base` does here. + throw new \Stripe\Exception\InvalidArgumentException('Use `api_base`, not `connect_base`'); + } + } + + return \Stripe\Util\RequestOptions::parse($opts); + } + + /** + * @param \Stripe\Util\RequestOptions $opts + * + * @return string + */ + private function _getBase($opts) + { + return isset($opts->apiBase) ? + $opts->apiBase : + $this->client->getConnectBase(); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/OrderReturnService.php b/vendor/stripe/stripe-php/lib/Service/OrderReturnService.php new file mode 100644 index 000000000..6183166c5 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/OrderReturnService.php @@ -0,0 +1,42 @@ +requestCollection('get', '/v1/order_returns', $params, $opts); + } + + /** + * Retrieves the details of an existing order return. Supply the unique order ID + * from either an order return creation request or the order return list, and + * Stripe will return the corresponding order information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\OrderReturn + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/order_returns/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/OrderService.php b/vendor/stripe/stripe-php/lib/Service/OrderService.php new file mode 100644 index 000000000..fa658fa7b --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/OrderService.php @@ -0,0 +1,109 @@ +requestCollection('get', '/v1/orders', $params, $opts); + } + + /** + * Creates a new order object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Order + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/orders', $params, $opts); + } + + /** + * Pay an order by providing a source to create a payment. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Order + */ + public function pay($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/orders/%s/pay', $id), $params, $opts); + } + + /** + * Retrieves the details of an existing order. Supply the unique order ID from + * either an order creation request or the order list, and Stripe will return the + * corresponding order information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Order + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/orders/%s', $id), $params, $opts); + } + + /** + * Return all or part of an order. The order must have a status of + * paid or fulfilled before it can be returned. Once all + * items have been returned, the order will become canceled or + * returned depending on which status the order started in. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Order + */ + public function returnOrder($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/orders/%s/returns', $id), $params, $opts); + } + + /** + * Updates the specific order by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Order + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/orders/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/PaymentIntentService.php b/vendor/stripe/stripe-php/lib/Service/PaymentIntentService.php new file mode 100644 index 000000000..43aba46d8 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/PaymentIntentService.php @@ -0,0 +1,181 @@ +requestCollection('get', '/v1/payment_intents', $params, $opts); + } + + /** + * A PaymentIntent object can be canceled when it is in one of these statuses: + * requires_payment_method, requires_capture, + * requires_confirmation, or requires_action. + * + * Once canceled, no additional charges will be made by the PaymentIntent and any + * operations on the PaymentIntent will fail with an error. For PaymentIntents with + * status=’requires_capture’, the remaining + * amount_capturable will automatically be refunded. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentIntent + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_intents/%s/cancel', $id), $params, $opts); + } + + /** + * Capture the funds of an existing uncaptured PaymentIntent when its status is + * requires_capture. + * + * Uncaptured PaymentIntents will be canceled exactly seven days after they are + * created. + * + * Learn more about separate authorization + * and capture. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentIntent + */ + public function capture($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_intents/%s/capture', $id), $params, $opts); + } + + /** + * Confirm that your customer intends to pay with current or provided payment + * method. Upon confirmation, the PaymentIntent will attempt to initiate a payment. + * + * If the selected payment method requires additional authentication steps, the + * PaymentIntent will transition to the requires_action status and + * suggest additional actions via next_action. If payment fails, the + * PaymentIntent will transition to the requires_payment_method + * status. If payment succeeds, the PaymentIntent will transition to the + * succeeded status (or requires_capture, if + * capture_method is set to manual). + * + * If the confirmation_method is automatic, payment may + * be attempted using our client SDKs and + * the PaymentIntent’s client_secret. After + * next_actions are handled by the client, no additional confirmation + * is required to complete the payment. + * + * If the confirmation_method is manual, all payment + * attempts must be initiated using a secret key. If any actions are required for + * the payment, the PaymentIntent will return to the + * requires_confirmation state after those actions are completed. Your + * server needs to then explicitly re-confirm the PaymentIntent to initiate the + * next payment attempt. Read the expanded documentation to + * learn more about manual confirmation. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentIntent + */ + public function confirm($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_intents/%s/confirm', $id), $params, $opts); + } + + /** + * Creates a PaymentIntent object. + * + * After the PaymentIntent is created, attach a payment method and confirm to continue the payment. + * You can read more about the different payment flows available via the Payment + * Intents API here. + * + * When confirm=true is used during creation, it is equivalent to + * creating and confirming the PaymentIntent in the same call. You may use any + * parameters available in the confirm + * API when confirm=true is supplied. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentIntent + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/payment_intents', $params, $opts); + } + + /** + * Retrieves the details of a PaymentIntent that has previously been created. + * + * Client-side retrieval using a publishable key is allowed when the + * client_secret is provided in the query string. + * + * When retrieved with a publishable key, only a subset of properties will be + * returned. Please refer to the payment + * intent object reference for more details. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentIntent + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/payment_intents/%s', $id), $params, $opts); + } + + /** + * Updates properties on a PaymentIntent object without confirming. + * + * Depending on which properties you update, you may need to confirm the + * PaymentIntent again. For example, updating the payment_method will + * always require you to confirm the PaymentIntent again. If you prefer to update + * and confirm at the same time, we recommend updating properties via the confirm API instead. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentIntent + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_intents/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/PaymentMethodService.php b/vendor/stripe/stripe-php/lib/Service/PaymentMethodService.php new file mode 100644 index 000000000..7111b9ebc --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/PaymentMethodService.php @@ -0,0 +1,121 @@ +requestCollection('get', '/v1/payment_methods', $params, $opts); + } + + /** + * Attaches a PaymentMethod object to a Customer. + * + * To attach a new PaymentMethod to a customer for future payments, we recommend + * you use a SetupIntent or a PaymentIntent + * with setup_future_usage. + * These approaches will perform any necessary steps to ensure that the + * PaymentMethod can be used in a future payment. Using the + * /v1/payment_methods/:id/attach endpoint does not ensure that future + * payments can be made with the attached PaymentMethod. See Optimizing cards for future + * payments for more information about setting up future payments. + * + * To use this PaymentMethod as the default for invoice or subscription payments, + * set invoice_settings.default_payment_method, + * on the Customer to the PaymentMethod’s ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentMethod + */ + public function attach($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_methods/%s/attach', $id), $params, $opts); + } + + /** + * Creates a PaymentMethod object. Read the Stripe.js + * reference to learn how to create PaymentMethods via Stripe.js. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentMethod + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/payment_methods', $params, $opts); + } + + /** + * Detaches a PaymentMethod object from a Customer. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentMethod + */ + public function detach($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_methods/%s/detach', $id), $params, $opts); + } + + /** + * Retrieves a PaymentMethod object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentMethod + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/payment_methods/%s', $id), $params, $opts); + } + + /** + * Updates a PaymentMethod object. A PaymentMethod must be attached a customer to + * be updated. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PaymentMethod + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payment_methods/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/PayoutService.php b/vendor/stripe/stripe-php/lib/Service/PayoutService.php new file mode 100644 index 000000000..547e22da6 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/PayoutService.php @@ -0,0 +1,127 @@ +requestCollection('get', '/v1/payouts', $params, $opts); + } + + /** + * A previously created payout can be canceled if it has not yet been paid out. + * Funds will be refunded to your available balance. You may not cancel automatic + * Stripe payouts. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Payout + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payouts/%s/cancel', $id), $params, $opts); + } + + /** + * To send funds to your own bank account, you create a new payout object. Your Stripe balance must be able to cover the payout amount, or + * you’ll receive an “Insufficient Funds” error. + * + * If your API key is in test mode, money won’t actually be sent, though everything + * else will occur as if in live mode. + * + * If you are creating a manual payout on a Stripe account that uses multiple + * payment source types, you’ll need to specify the source type balance that the + * payout should draw from. The balance object + * details available and pending amounts by source type. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Payout + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/payouts', $params, $opts); + } + + /** + * Retrieves the details of an existing payout. Supply the unique payout ID from + * either a payout creation request or the payout list, and Stripe will return the + * corresponding payout information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Payout + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/payouts/%s', $id), $params, $opts); + } + + /** + * Reverses a payout by debiting the destination bank account. Only payouts for + * connected accounts to US bank accounts may be reversed at this time. If the + * payout is in the pending status, + * /v1/payouts/:id/cancel should be used instead. + * + * By requesting a reversal via /v1/payouts/:id/reverse, you confirm + * that the authorized signatory of the selected bank account has authorized the + * debit on the bank account and that no other authorization is required. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Payout + */ + public function reverse($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payouts/%s/reverse', $id), $params, $opts); + } + + /** + * Updates the specified payout by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. This request accepts only the + * metadata as arguments. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Payout + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/payouts/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/PlanService.php b/vendor/stripe/stripe-php/lib/Service/PlanService.php new file mode 100644 index 000000000..16625d27a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/PlanService.php @@ -0,0 +1,91 @@ +requestCollection('get', '/v1/plans', $params, $opts); + } + + /** + * You can now model subscriptions more flexibly using the Prices + * API. It replaces the Plans API and is backwards compatible to simplify your + * migration. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Plan + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/plans', $params, $opts); + } + + /** + * Deleting plans means new subscribers can’t be added. Existing subscribers aren’t + * affected. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Plan + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/plans/%s', $id), $params, $opts); + } + + /** + * Retrieves the plan with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Plan + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/plans/%s', $id), $params, $opts); + } + + /** + * Updates the specified plan by setting the values of the parameters passed. Any + * parameters not provided are left unchanged. By design, you cannot change a + * plan’s ID, amount, currency, or billing cycle. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Plan + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/plans/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/PriceService.php b/vendor/stripe/stripe-php/lib/Service/PriceService.php new file mode 100644 index 000000000..cc44f69c9 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/PriceService.php @@ -0,0 +1,72 @@ +requestCollection('get', '/v1/prices', $params, $opts); + } + + /** + * Creates a new price for an existing product. The price can be recurring or + * one-time. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Price + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/prices', $params, $opts); + } + + /** + * Retrieves the price with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Price + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/prices/%s', $id), $params, $opts); + } + + /** + * Updates the specified price by setting the values of the parameters passed. Any + * parameters not provided are left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Price + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/prices/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/ProductService.php b/vendor/stripe/stripe-php/lib/Service/ProductService.php new file mode 100644 index 000000000..850cea56f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/ProductService.php @@ -0,0 +1,92 @@ +requestCollection('get', '/v1/products', $params, $opts); + } + + /** + * Creates a new product object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Product + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/products', $params, $opts); + } + + /** + * Delete a product. Deleting a product is only possible if it has no prices + * associated with it. Additionally, deleting a product with type=good + * is only possible if it has no SKUs associated with it. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Product + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/products/%s', $id), $params, $opts); + } + + /** + * Retrieves the details of an existing product. Supply the unique product ID from + * either a product creation request or the product list, and Stripe will return + * the corresponding product information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Product + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/products/%s', $id), $params, $opts); + } + + /** + * Updates the specific product by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Product + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/products/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/PromotionCodeService.php b/vendor/stripe/stripe-php/lib/Service/PromotionCodeService.php new file mode 100644 index 000000000..1de5696da --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/PromotionCodeService.php @@ -0,0 +1,72 @@ +requestCollection('get', '/v1/promotion_codes', $params, $opts); + } + + /** + * A promotion code points to a coupon. You can optionally restrict the code to a + * specific customer, redemption limit, and expiration date. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PromotionCode + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/promotion_codes', $params, $opts); + } + + /** + * Retrieves the promotion code with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PromotionCode + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/promotion_codes/%s', $id), $params, $opts); + } + + /** + * Updates the specified promotion code by setting the values of the parameters + * passed. Most fields are, by design, not editable. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\PromotionCode + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/promotion_codes/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Radar/EarlyFraudWarningService.php b/vendor/stripe/stripe-php/lib/Service/Radar/EarlyFraudWarningService.php new file mode 100644 index 000000000..7b0973483 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Radar/EarlyFraudWarningService.php @@ -0,0 +1,43 @@ +requestCollection('get', '/v1/radar/early_fraud_warnings', $params, $opts); + } + + /** + * Retrieves the details of an early fraud warning that has previously been + * created. + * + * Please refer to the early fraud + * warning object reference for more details. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\EarlyFraudWarning + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/radar/early_fraud_warnings/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Radar/RadarServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/Radar/RadarServiceFactory.php new file mode 100644 index 000000000..b093c6717 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Radar/RadarServiceFactory.php @@ -0,0 +1,29 @@ + + */ + private static $classMap = [ + 'earlyFraudWarnings' => EarlyFraudWarningService::class, + 'valueListItems' => ValueListItemService::class, + 'valueLists' => ValueListService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Radar/ValueListItemService.php b/vendor/stripe/stripe-php/lib/Service/Radar/ValueListItemService.php new file mode 100644 index 000000000..89eba2a7a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Radar/ValueListItemService.php @@ -0,0 +1,74 @@ +ValueListItem objects. The objects are sorted in + * descending order by creation date, with the most recently created object + * appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/radar/value_list_items', $params, $opts); + } + + /** + * Creates a new ValueListItem object, which is added to the specified + * parent value list. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueListItem + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/radar/value_list_items', $params, $opts); + } + + /** + * Deletes a ValueListItem object, removing it from its parent value + * list. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueListItem + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/radar/value_list_items/%s', $id), $params, $opts); + } + + /** + * Retrieves a ValueListItem object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueListItem + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/radar/value_list_items/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Radar/ValueListService.php b/vendor/stripe/stripe-php/lib/Service/Radar/ValueListService.php new file mode 100644 index 000000000..64ac2ee79 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Radar/ValueListService.php @@ -0,0 +1,93 @@ +ValueList objects. The objects are sorted in + * descending order by creation date, with the most recently created object + * appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/radar/value_lists', $params, $opts); + } + + /** + * Creates a new ValueList object, which can then be referenced in + * rules. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueList + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/radar/value_lists', $params, $opts); + } + + /** + * Deletes a ValueList object, also deleting any items contained + * within the value list. To be deleted, a value list must not be referenced in any + * rules. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueList + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/radar/value_lists/%s', $id), $params, $opts); + } + + /** + * Retrieves a ValueList object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueList + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/radar/value_lists/%s', $id), $params, $opts); + } + + /** + * Updates a ValueList object by setting the values of the parameters + * passed. Any parameters not provided will be left unchanged. Note that + * item_type is immutable. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Radar\ValueList + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/radar/value_lists/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/RefundService.php b/vendor/stripe/stripe-php/lib/Service/RefundService.php new file mode 100644 index 000000000..49b4267e4 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/RefundService.php @@ -0,0 +1,76 @@ +requestCollection('get', '/v1/refunds', $params, $opts); + } + + /** + * Create a refund. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Refund + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/refunds', $params, $opts); + } + + /** + * Retrieves the details of an existing refund. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Refund + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/refunds/%s', $id), $params, $opts); + } + + /** + * Updates the specified refund by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. + * + * This request only accepts metadata as an argument. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Refund + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/refunds/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Reporting/ReportRunService.php b/vendor/stripe/stripe-php/lib/Service/Reporting/ReportRunService.php new file mode 100644 index 000000000..46e2139a2 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Reporting/ReportRunService.php @@ -0,0 +1,57 @@ +live-mode API key.). + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/reporting/report_runs', $params, $opts); + } + + /** + * Creates a new object and begin running the report. (Requires a live-mode API key.). + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Reporting\ReportRun + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/reporting/report_runs', $params, $opts); + } + + /** + * Retrieves the details of an existing Report Run. (Requires a live-mode API key.). + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Reporting\ReportRun + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/reporting/report_runs/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Reporting/ReportTypeService.php b/vendor/stripe/stripe-php/lib/Service/Reporting/ReportTypeService.php new file mode 100644 index 000000000..46f6bf83e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Reporting/ReportTypeService.php @@ -0,0 +1,41 @@ +live-mode API key.). + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/reporting/report_types', $params, $opts); + } + + /** + * Retrieves the details of a Report Type. (Requires a live-mode API key.). + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Reporting\ReportType + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/reporting/report_types/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Reporting/ReportingServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/Reporting/ReportingServiceFactory.php new file mode 100644 index 000000000..7832e9175 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Reporting/ReportingServiceFactory.php @@ -0,0 +1,27 @@ + + */ + private static $classMap = [ + 'reportRuns' => ReportRunService::class, + 'reportTypes' => ReportTypeService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/ReviewService.php b/vendor/stripe/stripe-php/lib/Service/ReviewService.php new file mode 100644 index 000000000..ea152f23e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/ReviewService.php @@ -0,0 +1,58 @@ +Review objects that have open set to + * true. The objects are sorted in descending order by creation date, + * with the most recently created object appearing first. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/reviews', $params, $opts); + } + + /** + * Approves a Review object, closing it and removing it from the list + * of reviews. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Review + */ + public function approve($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/reviews/%s/approve', $id), $params, $opts); + } + + /** + * Retrieves a Review object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Review + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/reviews/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SetupAttemptService.php b/vendor/stripe/stripe-php/lib/Service/SetupAttemptService.php new file mode 100644 index 000000000..7376ea13e --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SetupAttemptService.php @@ -0,0 +1,23 @@ +requestCollection('get', '/v1/setup_attempts', $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SetupIntentService.php b/vendor/stripe/stripe-php/lib/Service/SetupIntentService.php new file mode 100644 index 000000000..3cbec506f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SetupIntentService.php @@ -0,0 +1,127 @@ +requestCollection('get', '/v1/setup_intents', $params, $opts); + } + + /** + * A SetupIntent object can be canceled when it is in one of these statuses: + * requires_payment_method, requires_confirmation, or + * requires_action. + * + * Once canceled, setup is abandoned and any operations on the SetupIntent will + * fail with an error. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SetupIntent + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/setup_intents/%s/cancel', $id), $params, $opts); + } + + /** + * Confirm that your customer intends to set up the current or provided payment + * method. For example, you would confirm a SetupIntent when a customer hits the + * “Save” button on a payment method management page on your website. + * + * If the selected payment method does not require any additional steps from the + * customer, the SetupIntent will transition to the succeeded status. + * + * Otherwise, it will transition to the requires_action status and + * suggest additional actions via next_action. If setup fails, the + * SetupIntent will transition to the requires_payment_method status. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SetupIntent + */ + public function confirm($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/setup_intents/%s/confirm', $id), $params, $opts); + } + + /** + * Creates a SetupIntent object. + * + * After the SetupIntent is created, attach a payment method and confirm to collect any required + * permissions to charge the payment method later. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SetupIntent + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/setup_intents', $params, $opts); + } + + /** + * Retrieves the details of a SetupIntent that has previously been created. + * + * Client-side retrieval using a publishable key is allowed when the + * client_secret is provided in the query string. + * + * When retrieved with a publishable key, only a subset of properties will be + * returned. Please refer to the SetupIntent + * object reference for more details. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SetupIntent + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/setup_intents/%s', $id), $params, $opts); + } + + /** + * Updates a SetupIntent object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SetupIntent + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/setup_intents/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Sigma/ScheduledQueryRunService.php b/vendor/stripe/stripe-php/lib/Service/Sigma/ScheduledQueryRunService.php new file mode 100644 index 000000000..92641751b --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Sigma/ScheduledQueryRunService.php @@ -0,0 +1,39 @@ +requestCollection('get', '/v1/sigma/scheduled_query_runs', $params, $opts); + } + + /** + * Retrieves the details of an scheduled query run. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Sigma\ScheduledQueryRun + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/sigma/scheduled_query_runs/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Sigma/SigmaServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/Sigma/SigmaServiceFactory.php new file mode 100644 index 000000000..356750f47 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Sigma/SigmaServiceFactory.php @@ -0,0 +1,25 @@ + + */ + private static $classMap = [ + 'scheduledQueryRuns' => ScheduledQueryRunService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SkuService.php b/vendor/stripe/stripe-php/lib/Service/SkuService.php new file mode 100644 index 000000000..8934f2064 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SkuService.php @@ -0,0 +1,95 @@ +requestCollection('get', '/v1/skus', $params, $opts); + } + + /** + * Creates a new SKU associated with a product. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SKU + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/skus', $params, $opts); + } + + /** + * Delete a SKU. Deleting a SKU is only possible until it has been used in an + * order. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SKU + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/skus/%s', $id), $params, $opts); + } + + /** + * Retrieves the details of an existing SKU. Supply the unique SKU identifier from + * either a SKU creation request or from the product, and Stripe will return the + * corresponding SKU information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SKU + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/skus/%s', $id), $params, $opts); + } + + /** + * Updates the specific SKU by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. + * + * Note that a SKU’s attributes are not editable. Instead, you would + * need to deactivate the existing SKU and create a new one with the new attribute + * values. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SKU + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/skus/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SourceService.php b/vendor/stripe/stripe-php/lib/Service/SourceService.php new file mode 100644 index 000000000..c6cc05964 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SourceService.php @@ -0,0 +1,110 @@ +request('get', $this->buildPath('/v1/sources/%s/source_transactions', $id), $params, $opts); + } + + /** + * Creates a new source object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Source + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/sources', $params, $opts); + } + + /** + * Delete a specified source for a given customer. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Source + */ + public function detach($parentId, $id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/customers/%s/sources/%s', $parentId, $id), $params, $opts); + } + + /** + * Retrieves an existing source object. Supply the unique source ID from a source + * creation request and Stripe will return the corresponding up-to-date source + * object information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Source + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/sources/%s', $id), $params, $opts); + } + + /** + * Updates the specified source by setting the values of the parameters passed. Any + * parameters not provided will be left unchanged. + * + * This request accepts the metadata and owner as + * arguments. It is also possible to update type specific information for selected + * payment methods. Please refer to our payment method + * guides for more detail. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Source + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/sources/%s', $id), $params, $opts); + } + + /** + * Verify a given source. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Source + */ + public function verify($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/sources/%s/verify', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SubscriptionItemService.php b/vendor/stripe/stripe-php/lib/Service/SubscriptionItemService.php new file mode 100644 index 000000000..3b2aa2b12 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SubscriptionItemService.php @@ -0,0 +1,151 @@ +requestCollection('get', '/v1/subscription_items', $params, $opts); + } + + /** + * For the specified subscription item, returns a list of summary objects. Each + * object in the list provides usage information that’s been summarized from + * multiple usage records and over a subscription billing period (e.g., 15 usage + * records in the month of September). + * + * The list is sorted in reverse-chronological order (newest first). The first list + * item represents the most current usage period that hasn’t ended yet. Since new + * usage records can still be added, the returned summary information for the + * subscription item’s ID should be seen as unstable until the subscription billing + * period ends. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allUsageRecordSummaries($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/subscription_items/%s/usage_record_summaries', $parentId), $params, $opts); + } + + /** + * Adds a new item to an existing subscription. No existing items will be changed + * or replaced. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionItem + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/subscription_items', $params, $opts); + } + + /** + * Creates a usage record for a specified subscription item and date, and fills it + * with a quantity. + * + * Usage records provide quantity information that Stripe uses to + * track how much a customer is using your service. With usage information and the + * pricing model set up by the metered + * billing plan, Stripe helps you send accurate invoices to your customers. + * + * The default calculation for usage is to add up all the quantity + * values of the usage records within a billing period. You can change this default + * behavior with the billing plan’s aggregate_usage parameter. When + * there is more than one usage record with the same timestamp, Stripe adds the + * quantity values together. In most cases, this is the desired + * resolution, however, you can change this behavior with the action + * parameter. + * + * The default pricing model for metered billing is per-unit pricing. + * For finer granularity, you can configure metered billing to have a tiered pricing + * model. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\UsageRecord + */ + public function createUsageRecord($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/subscription_items/%s/usage_records', $parentId), $params, $opts); + } + + /** + * Deletes an item from the subscription. Removing a subscription item from a + * subscription will not cancel the subscription. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionItem + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/subscription_items/%s', $id), $params, $opts); + } + + /** + * Retrieves the subscription item with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionItem + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/subscription_items/%s', $id), $params, $opts); + } + + /** + * Updates the plan or quantity of an item on a current subscription. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionItem + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/subscription_items/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SubscriptionScheduleService.php b/vendor/stripe/stripe-php/lib/Service/SubscriptionScheduleService.php new file mode 100644 index 000000000..9eed46060 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SubscriptionScheduleService.php @@ -0,0 +1,113 @@ +requestCollection('get', '/v1/subscription_schedules', $params, $opts); + } + + /** + * Cancels a subscription schedule and its associated subscription immediately (if + * the subscription schedule has an active subscription). A subscription schedule + * can only be canceled if its status is not_started or + * active. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionSchedule + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/subscription_schedules/%s/cancel', $id), $params, $opts); + } + + /** + * Creates a new subscription schedule object. Each customer can have up to 500 + * active or scheduled subscriptions. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionSchedule + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/subscription_schedules', $params, $opts); + } + + /** + * Releases the subscription schedule immediately, which will stop scheduling of + * its phases, but leave any existing subscription in place. A schedule can only be + * released if its status is not_started or active. If + * the subscription schedule is currently associated with a subscription, releasing + * it will remove its subscription property and set the subscription’s + * ID to the released_subscription property. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionSchedule + */ + public function release($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/subscription_schedules/%s/release', $id), $params, $opts); + } + + /** + * Retrieves the details of an existing subscription schedule. You only need to + * supply the unique subscription schedule identifier that was returned upon + * subscription schedule creation. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionSchedule + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/subscription_schedules/%s', $id), $params, $opts); + } + + /** + * Updates an existing subscription schedule. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\SubscriptionSchedule + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/subscription_schedules/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/SubscriptionService.php b/vendor/stripe/stripe-php/lib/Service/SubscriptionService.php new file mode 100644 index 000000000..f3ac768c8 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/SubscriptionService.php @@ -0,0 +1,124 @@ +status=canceled. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/subscriptions', $params, $opts); + } + + /** + * Cancels a customer’s subscription immediately. The customer will not be charged + * again for the subscription. + * + * Note, however, that any pending invoice items that you’ve created will still be + * charged for at the end of the period, unless manually deleted. If you’ve set the subscription to cancel + * at the end of the period, any pending prorations will also be left in place and + * collected at the end of the period. But if the subscription is set to cancel + * immediately, pending prorations will be removed. + * + * By default, upon subscription cancellation, Stripe will stop automatic + * collection of all finalized invoices for the customer. This is intended to + * prevent unexpected payment attempts after the customer has canceled a + * subscription. However, you can resume automatic collection of the invoices + * manually after subscription cancellation to have us proceed. Or, you could check + * for unpaid invoices before allowing the customer to cancel the subscription at + * all. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/subscriptions/%s', $id), $params, $opts); + } + + /** + * Creates a new subscription on an existing customer. Each customer can have up to + * 500 active or scheduled subscriptions. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/subscriptions', $params, $opts); + } + + /** + * Removes the currently applied discount on a subscription. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription + */ + public function deleteDiscount($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/subscriptions/%s/discount', $id), $params, $opts); + } + + /** + * Retrieves the subscription with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/subscriptions/%s', $id), $params, $opts); + } + + /** + * Updates an existing subscription on a customer to match the specified + * parameters. When changing plans or quantities, we will optionally prorate the + * price we charge next month to make up for any price changes. To preview how the + * proration will be calculated, use the upcoming + * invoice endpoint. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/subscriptions/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/TaxRateService.php b/vendor/stripe/stripe-php/lib/Service/TaxRateService.php new file mode 100644 index 000000000..7cee1fead --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/TaxRateService.php @@ -0,0 +1,71 @@ +requestCollection('get', '/v1/tax_rates', $params, $opts); + } + + /** + * Creates a new tax rate. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxRate + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/tax_rates', $params, $opts); + } + + /** + * Retrieves a tax rate with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxRate + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/tax_rates/%s', $id), $params, $opts); + } + + /** + * Updates an existing tax rate. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TaxRate + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/tax_rates/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php b/vendor/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php new file mode 100644 index 000000000..7b25b2315 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Terminal/ConnectionTokenService.php @@ -0,0 +1,25 @@ +request('post', '/v1/terminal/connection_tokens', $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Terminal/LocationService.php b/vendor/stripe/stripe-php/lib/Service/Terminal/LocationService.php new file mode 100644 index 000000000..8adc7a520 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Terminal/LocationService.php @@ -0,0 +1,87 @@ +Location objects. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/terminal/locations', $params, $opts); + } + + /** + * Creates a new Location object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Location + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/terminal/locations', $params, $opts); + } + + /** + * Deletes a Location object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Location + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/terminal/locations/%s', $id), $params, $opts); + } + + /** + * Retrieves a Location object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Location + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/terminal/locations/%s', $id), $params, $opts); + } + + /** + * Updates a Location object by setting the values of the parameters + * passed. Any parameters not provided will be left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Location + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/terminal/locations/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Terminal/ReaderService.php b/vendor/stripe/stripe-php/lib/Service/Terminal/ReaderService.php new file mode 100644 index 000000000..765015c83 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Terminal/ReaderService.php @@ -0,0 +1,87 @@ +Reader objects. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function all($params = null, $opts = null) + { + return $this->requestCollection('get', '/v1/terminal/readers', $params, $opts); + } + + /** + * Creates a new Reader object. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Reader + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/terminal/readers', $params, $opts); + } + + /** + * Deletes a Reader object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Reader + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/terminal/readers/%s', $id), $params, $opts); + } + + /** + * Retrieves a Reader object. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Reader + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/terminal/readers/%s', $id), $params, $opts); + } + + /** + * Updates a Reader object by setting the values of the parameters + * passed. Any parameters not provided will be left unchanged. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Terminal\Reader + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/terminal/readers/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/Terminal/TerminalServiceFactory.php b/vendor/stripe/stripe-php/lib/Service/Terminal/TerminalServiceFactory.php new file mode 100644 index 000000000..c70ac873b --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/Terminal/TerminalServiceFactory.php @@ -0,0 +1,29 @@ + + */ + private static $classMap = [ + 'connectionTokens' => ConnectionTokenService::class, + 'locations' => LocationService::class, + 'readers' => ReaderService::class, + ]; + + protected function getServiceClass($name) + { + return \array_key_exists($name, self::$classMap) ? self::$classMap[$name] : null; + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/TokenService.php b/vendor/stripe/stripe-php/lib/Service/TokenService.php new file mode 100644 index 000000000..1c72759f6 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/TokenService.php @@ -0,0 +1,42 @@ +Custom + * account. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Token + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/tokens', $params, $opts); + } + + /** + * Retrieves the token with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Token + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/tokens/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/TopupService.php b/vendor/stripe/stripe-php/lib/Service/TopupService.php new file mode 100644 index 000000000..059dc2090 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/TopupService.php @@ -0,0 +1,89 @@ +requestCollection('get', '/v1/topups', $params, $opts); + } + + /** + * Cancels a top-up. Only pending top-ups can be canceled. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Topup + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/topups/%s/cancel', $id), $params, $opts); + } + + /** + * Top up the balance of an account. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Topup + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/topups', $params, $opts); + } + + /** + * Retrieves the details of a top-up that has previously been created. Supply the + * unique top-up ID that was returned from your previous request, and Stripe will + * return the corresponding top-up information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Topup + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/topups/%s', $id), $params, $opts); + } + + /** + * Updates the metadata of a top-up. Other top-up details are not editable by + * design. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Topup + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/topups/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/TransferService.php b/vendor/stripe/stripe-php/lib/Service/TransferService.php new file mode 100644 index 000000000..150bbf731 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/TransferService.php @@ -0,0 +1,175 @@ +requestCollection('get', '/v1/transfers', $params, $opts); + } + + /** + * You can see a list of the reversals belonging to a specific transfer. Note that + * the 10 most recent reversals are always available by default on the transfer + * object. If you need more than those 10, you can use this API method and the + * limit and starting_after parameters to page through + * additional reversals. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection + */ + public function allReversals($parentId, $params = null, $opts = null) + { + return $this->requestCollection('get', $this->buildPath('/v1/transfers/%s/reversals', $parentId), $params, $opts); + } + + /** + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Transfer + */ + public function cancel($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/transfers/%s/cancel', $id), $params, $opts); + } + + /** + * To send funds from your Stripe account to a connected account, you create a new + * transfer object. Your Stripe balance must be able to + * cover the transfer amount, or you’ll receive an “Insufficient Funds” error. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Transfer + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/transfers', $params, $opts); + } + + /** + * When you create a new reversal, you must specify a transfer to create it on. + * + * When reversing transfers, you can optionally reverse part of the transfer. You + * can do so as many times as you wish until the entire transfer has been reversed. + * + * Once entirely reversed, a transfer can’t be reversed again. This method will + * return an error when called on an already-reversed transfer, or when trying to + * reverse more money than is left on a transfer. + * + * @param string $parentId + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TransferReversal + */ + public function createReversal($parentId, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/transfers/%s/reversals', $parentId), $params, $opts); + } + + /** + * Retrieves the details of an existing transfer. Supply the unique transfer ID + * from either a transfer creation request or the transfer list, and Stripe will + * return the corresponding transfer information. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Transfer + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/transfers/%s', $id), $params, $opts); + } + + /** + * By default, you can see the 10 most recent reversals stored directly on the + * transfer object, but you can also retrieve details about a specific reversal + * stored on the transfer. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TransferReversal + */ + public function retrieveReversal($parentId, $id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/transfers/%s/reversals/%s', $parentId, $id), $params, $opts); + } + + /** + * Updates the specified transfer by setting the values of the parameters passed. + * Any parameters not provided will be left unchanged. + * + * This request accepts only metadata as an argument. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Transfer + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/transfers/%s', $id), $params, $opts); + } + + /** + * Updates the specified reversal by setting the values of the parameters passed. + * Any parameters not provided will be left unchanged. + * + * This request only accepts metadata and description as arguments. + * + * @param string $parentId + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TransferReversal + */ + public function updateReversal($parentId, $id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/transfers/%s/reversals/%s', $parentId, $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/Service/WebhookEndpointService.php b/vendor/stripe/stripe-php/lib/Service/WebhookEndpointService.php new file mode 100644 index 000000000..01e642249 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Service/WebhookEndpointService.php @@ -0,0 +1,97 @@ +requestCollection('get', '/v1/webhook_endpoints', $params, $opts); + } + + /** + * A webhook endpoint must have a url and a list of + * enabled_events. You may optionally specify the Boolean + * connect parameter. If set to true, then a Connect webhook endpoint + * that notifies the specified url about events from all connected + * accounts is created; otherwise an account webhook endpoint that notifies the + * specified url only about events from your account is created. You + * can also create webhook endpoints in the webhooks settings + * section of the Dashboard. + * + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\WebhookEndpoint + */ + public function create($params = null, $opts = null) + { + return $this->request('post', '/v1/webhook_endpoints', $params, $opts); + } + + /** + * You can also delete webhook endpoints via the webhook endpoint + * management page of the Stripe dashboard. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\WebhookEndpoint + */ + public function delete($id, $params = null, $opts = null) + { + return $this->request('delete', $this->buildPath('/v1/webhook_endpoints/%s', $id), $params, $opts); + } + + /** + * Retrieves the webhook endpoint with the given ID. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\WebhookEndpoint + */ + public function retrieve($id, $params = null, $opts = null) + { + return $this->request('get', $this->buildPath('/v1/webhook_endpoints/%s', $id), $params, $opts); + } + + /** + * Updates the webhook endpoint. You may edit the url, the list of + * enabled_events, and the status of your endpoint. + * + * @param string $id + * @param null|array $params + * @param null|array|\Stripe\Util\RequestOptions $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\WebhookEndpoint + */ + public function update($id, $params = null, $opts = null) + { + return $this->request('post', $this->buildPath('/v1/webhook_endpoints/%s', $id), $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/SetupAttempt.php b/vendor/stripe/stripe-php/lib/SetupAttempt.php new file mode 100644 index 000000000..6c83b686c --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SetupAttempt.php @@ -0,0 +1,32 @@ +application on the SetupIntent at the time of this confirmation. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\Customer $customer The value of customer on the SetupIntent at the time of this confirmation. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string|\Stripe\Account $on_behalf_of The value of on_behalf_of on the SetupIntent at the time of this confirmation. + * @property string|\Stripe\PaymentMethod $payment_method ID of the payment method used with this SetupAttempt. + * @property \Stripe\StripeObject $payment_method_details + * @property null|\Stripe\ErrorObject $setup_error The error encountered during this attempt to confirm the SetupIntent, if any. + * @property string|\Stripe\SetupIntent $setup_intent ID of the SetupIntent that this attempt belongs to. + * @property string $status Status of this SetupAttempt, one of requires_confirmation, requires_action, processing, succeeded, failed, or abandoned. + * @property string $usage The value of usage on the SetupIntent at the time of this confirmation, one of off_session or on_session. + */ +class SetupAttempt extends ApiResource +{ + const OBJECT_NAME = 'setup_attempt'; + + use ApiOperations\All; +} diff --git a/vendor/stripe/stripe-php/lib/SetupIntent.php b/vendor/stripe/stripe-php/lib/SetupIntent.php new file mode 100644 index 000000000..bf8da19cf --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SetupIntent.php @@ -0,0 +1,114 @@ +PaymentIntents to drive + * the payment flow. + * + * Create a SetupIntent as soon as you're ready to collect your customer's payment + * credentials. Do not maintain long-lived, unconfirmed SetupIntents as they may no + * longer be valid. The SetupIntent then transitions through multiple statuses as + * it guides you through the setup process. + * + * Successful SetupIntents result in payment credentials that are optimized for + * future payments. For example, cardholders in certain regions may need to be + * run through Strong Customer + * Authentication at the time of payment method collection in order to + * streamline later off-session payments. + * If the SetupIntent is used with a Customer, + * upon success, it will automatically attach the resulting payment method to that + * Customer. We recommend using SetupIntents or setup_future_usage + * on PaymentIntents to save payment methods in order to prevent saving invalid or + * unoptimized payment methods. + * + * By using SetupIntents, you ensure that your customers experience the minimum set + * of required friction, even as regulations change over time. + * + * Related guide: Setup + * Intents API. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string|\Stripe\StripeObject $application ID of the Connect application that created the SetupIntent. + * @property null|string $cancellation_reason Reason for cancellation of this SetupIntent, one of abandoned, requested_by_customer, or duplicate. + * @property null|string $client_secret

The client secret of this SetupIntent. Used for client-side retrieval using a publishable key.

The client secret can be used to complete payment setup from your frontend. It should not be stored, logged, embedded in URLs, or exposed to anyone other than the customer. Make sure that you have TLS enabled on any page that includes the client secret.

+ * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\Customer $customer

ID of the Customer this SetupIntent belongs to, if one exists.

If present, the SetupIntent's payment method will be attached to the Customer on successful setup. Payment methods attached to other Customers cannot be used with this SetupIntent.

+ * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|\Stripe\ErrorObject $last_setup_error The error encountered in the previous SetupIntent confirmation. + * @property null|string|\Stripe\SetupAttempt $latest_attempt The most recent SetupAttempt for this SetupIntent. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string|\Stripe\Mandate $mandate ID of the multi use Mandate generated by the SetupIntent. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|\Stripe\StripeObject $next_action If present, this property tells you what actions you need to take in order for your customer to continue payment setup. + * @property null|string|\Stripe\Account $on_behalf_of The account (if any) for which the setup is intended. + * @property null|string|\Stripe\PaymentMethod $payment_method ID of the payment method used with this SetupIntent. + * @property null|\Stripe\StripeObject $payment_method_options Payment-method-specific configuration for this SetupIntent. + * @property string[] $payment_method_types The list of payment method types (e.g. card) that this SetupIntent is allowed to set up. + * @property null|string|\Stripe\Mandate $single_use_mandate ID of the single_use Mandate generated by the SetupIntent. + * @property string $status Status of this SetupIntent, one of requires_payment_method, requires_confirmation, requires_action, processing, canceled, or succeeded. + * @property string $usage

Indicates how the payment method is intended to be used in the future.

Use on_session if you intend to only reuse the payment method when the customer is in your checkout flow. Use off_session if your customer may or may not be in your checkout flow. If not provided, this value defaults to off_session.

+ */ +class SetupIntent extends ApiResource +{ + const OBJECT_NAME = 'setup_intent'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const STATUS_CANCELED = 'canceled'; + const STATUS_PROCESSING = 'processing'; + const STATUS_REQUIRES_ACTION = 'requires_action'; + const STATUS_REQUIRES_CONFIRMATION = 'requires_confirmation'; + const STATUS_REQUIRES_PAYMENT_METHOD = 'requires_payment_method'; + const STATUS_SUCCEEDED = 'succeeded'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return SetupIntent the canceled setup intent + */ + public function cancel($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/cancel'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return SetupIntent the confirmed setup intent + */ + public function confirm($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/confirm'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Sigma/ScheduledQueryRun.php b/vendor/stripe/stripe-php/lib/Sigma/ScheduledQueryRun.php new file mode 100644 index 000000000..b109dde70 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Sigma/ScheduledQueryRun.php @@ -0,0 +1,37 @@ +scheduled + * a Sigma query, you'll receive a + * sigma.scheduled_query_run.created webhook each time the query runs. + * The webhook contains a ScheduledQueryRun object, which you can use + * to retrieve the query results. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property int $data_load_time When the query was run, Sigma contained a snapshot of your Stripe data at this time. + * @property \Stripe\StripeObject $error + * @property null|\Stripe\File $file The file object representing the results of the query. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property int $result_available_until Time at which the result expires and is no longer available for download. + * @property string $sql SQL for the query. + * @property string $status The query's execution status, which will be completed for successful runs, and canceled, failed, or timed_out otherwise. + * @property string $title Title of the query. + */ +class ScheduledQueryRun extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'scheduled_query_run'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Retrieve; + + public static function classUrl() + { + return '/v1/sigma/scheduled_query_runs'; + } +} diff --git a/vendor/stripe/stripe-php/lib/SingletonApiResource.php b/vendor/stripe/stripe-php/lib/SingletonApiResource.php new file mode 100644 index 000000000..704cff874 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SingletonApiResource.php @@ -0,0 +1,38 @@ +refresh(); + + return $instance; + } + + /** + * @return string the endpoint associated with this singleton class + */ + public static function classUrl() + { + // Replace dots with slashes for namespaced resources, e.g. if the object's name is + // "foo.bar", then its URL will be "/v1/foo/bar". + $base = \str_replace('.', '/', static::OBJECT_NAME); + + return "/v1/{$base}"; + } + + /** + * @return string the endpoint associated with this singleton API resource + */ + public function instanceUrl() + { + return static::classUrl(); + } +} diff --git a/vendor/stripe/stripe-php/lib/Source.php b/vendor/stripe/stripe-php/lib/Source.php new file mode 100644 index 000000000..2262e71d4 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Source.php @@ -0,0 +1,168 @@ +Source objects allow you to accept a variety of payment methods. + * They represent a customer's payment instrument, and can be used with the Stripe + * API just like a Card object: once chargeable, they can be charged, + * or can be attached to customers. + * + * Related guides: Sources API and Sources & Customers. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\StripeObject $ach_credit_transfer + * @property \Stripe\StripeObject $ach_debit + * @property \Stripe\StripeObject $acss_debit + * @property \Stripe\StripeObject $alipay + * @property null|int $amount A positive integer in the smallest currency unit (that is, 100 cents for $1.00, or 1 for ¥1, Japanese Yen being a zero-decimal currency) representing the total amount associated with the source. This is the amount for which the source will be chargeable once ready. Required for single_use sources. + * @property \Stripe\StripeObject $au_becs_debit + * @property \Stripe\StripeObject $bancontact + * @property \Stripe\StripeObject $card + * @property \Stripe\StripeObject $card_present + * @property string $client_secret The client secret of the source. Used for client-side retrieval using a publishable key. + * @property \Stripe\StripeObject $code_verification + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $currency Three-letter ISO code for the currency associated with the source. This is the currency for which the source will be chargeable once ready. Required for single_use sources. + * @property string $customer The ID of the customer to which this source is attached. This will not be present when the source has not been attached to a customer. + * @property \Stripe\StripeObject $eps + * @property string $flow The authentication flow of the source. flow is one of redirect, receiver, code_verification, none. + * @property \Stripe\StripeObject $giropay + * @property \Stripe\StripeObject $ideal + * @property \Stripe\StripeObject $klarna + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\StripeObject $multibanco + * @property null|\Stripe\StripeObject $owner Information about the owner of the payment instrument that may be used or required by particular source types. + * @property \Stripe\StripeObject $p24 + * @property \Stripe\StripeObject $receiver + * @property \Stripe\StripeObject $redirect + * @property \Stripe\StripeObject $sepa_credit_transfer + * @property \Stripe\StripeObject $sepa_debit + * @property \Stripe\StripeObject $sofort + * @property \Stripe\StripeObject $source_order + * @property null|string $statement_descriptor Extra information about a source. This will appear on your customer's statement every time you charge the source. + * @property string $status The status of the source, one of canceled, chargeable, consumed, failed, or pending. Only chargeable sources can be used to create a charge. + * @property \Stripe\StripeObject $three_d_secure + * @property string $type The type of the source. The type is a payment method, one of ach_credit_transfer, ach_debit, alipay, bancontact, card, card_present, eps, giropay, ideal, multibanco, klarna, p24, sepa_debit, sofort, three_d_secure, or wechat. An additional hash is included on the source with a name matching this value. It contains additional information specific to the payment method used. + * @property null|string $usage Either reusable or single_use. Whether this source should be reusable or not. Some source types may or may not be reusable by construction, while others may leave the option at creation. If an incompatible value is passed, an error will be returned. + * @property \Stripe\StripeObject $wechat + */ +class Source extends ApiResource +{ + const OBJECT_NAME = 'source'; + + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const FLOW_CODE_VERIFICATION = 'code_verification'; + const FLOW_NONE = 'none'; + const FLOW_RECEIVER = 'receiver'; + const FLOW_REDIRECT = 'redirect'; + + const STATUS_CANCELED = 'canceled'; + const STATUS_CHARGEABLE = 'chargeable'; + const STATUS_CONSUMED = 'consumed'; + const STATUS_FAILED = 'failed'; + const STATUS_PENDING = 'pending'; + + const USAGE_REUSABLE = 'reusable'; + const USAGE_SINGLE_USE = 'single_use'; + + use ApiOperations\NestedResource; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\UnexpectedValueException if the source is not attached to a customer + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Source the detached source + */ + public function detach($params = null, $opts = null) + { + self::_validateParams($params); + + $id = $this['id']; + if (!$id) { + $class = static::class; + $msg = "Could not determine which URL to request: {$class} instance " + . "has invalid ID: {$id}"; + + throw new Exception\UnexpectedValueException($msg, null); + } + + if ($this['customer']) { + $base = Customer::classUrl(); + $parentExtn = \urlencode(Util\Util::utf8($this['customer'])); + $extn = \urlencode(Util\Util::utf8($id)); + $url = "{$base}/{$parentExtn}/sources/{$extn}"; + + list($response, $opts) = $this->_request('delete', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + $message = 'This source object does not appear to be currently attached ' + . 'to a customer object.'; + + throw new Exception\UnexpectedValueException($message); + } + + /** + * @deprecated sourceTransactions is deprecated. Please use Source::allSourceTransactions instead. + * + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of source transactions + */ + public function sourceTransactions($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/source_transactions'; + list($response, $opts) = $this->_request('get', $url, $params, $opts); + $obj = \Stripe\Util\Util::convertToStripeObject($response, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + /** + * @param string $id + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of source transactions + */ + public static function allSourceTransactions($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, '/source_transactions', $params, $opts); + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Source the verified source + */ + public function verify($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/verify'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/SourceTransaction.php b/vendor/stripe/stripe-php/lib/SourceTransaction.php new file mode 100644 index 000000000..281f2a710 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SourceTransaction.php @@ -0,0 +1,20 @@ +coreServiceFactory) { + $this->coreServiceFactory = new \Stripe\Service\CoreServiceFactory($this); + } + + return $this->coreServiceFactory->__get($name); + } +} diff --git a/vendor/stripe/stripe-php/lib/StripeClientInterface.php b/vendor/stripe/stripe-php/lib/StripeClientInterface.php new file mode 100644 index 000000000..adcef3f9a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/StripeClientInterface.php @@ -0,0 +1,56 @@ + "old_value"] + * + * If we update the object with `metadata[new]=new_value`, the server side + * object now has *both* fields: + * + * metadata = ["old" => "old_value", "new" => "new_value"] + * + * This is okay in itself because usually users will want to treat it as + * additive: + * + * $obj->metadata["new"] = "new_value"; + * $obj->save(); + * + * However, in other cases, they may want to replace the entire existing + * contents: + * + * $obj->metadata = ["new" => "new_value"]; + * $obj->save(); + * + * This is where things get a little bit tricky because in order to clear + * any old keys that may have existed, we actually have to send an explicit + * empty string to the server. So the operation above would have to send + * this form to get the intended behavior: + * + * metadata[old]=&metadata[new]=new_value + * + * This method allows us to track which parameters are considered additive, + * and lets us behave correctly where appropriate when serializing + * parameters to be sent. + * + * @return Util\Set Set of additive parameters + */ + public static function getAdditiveParams() + { + static $additiveParams = null; + if (null === $additiveParams) { + // Set `metadata` as additive so that when it's set directly we remember + // to clear keys that may have been previously set by sending empty + // values for them. + // + // It's possible that not every object has `metadata`, but having this + // option set when there is no `metadata` field is not harmful. + $additiveParams = new Util\Set([ + 'metadata', + ]); + } + + return $additiveParams; + } + + public function __construct($id = null, $opts = null) + { + list($id, $this->_retrieveOptions) = Util\Util::normalizeId($id); + $this->_opts = Util\RequestOptions::parse($opts); + $this->_originalValues = []; + $this->_values = []; + $this->_unsavedValues = new Util\Set(); + $this->_transientValues = new Util\Set(); + if (null !== $id) { + $this->_values['id'] = $id; + } + } + + // Standard accessor magic methods + public function __set($k, $v) + { + if (static::getPermanentAttributes()->includes($k)) { + throw new Exception\InvalidArgumentException( + "Cannot set {$k} on this object. HINT: you can't set: " . + \implode(', ', static::getPermanentAttributes()->toArray()) + ); + } + + if ('' === $v) { + throw new Exception\InvalidArgumentException( + 'You cannot set \'' . $k . '\'to an empty string. ' + . 'We interpret empty strings as NULL in requests. ' + . 'You may set obj->' . $k . ' = NULL to delete the property' + ); + } + + $this->_values[$k] = Util\Util::convertToStripeObject($v, $this->_opts); + $this->dirtyValue($this->_values[$k]); + $this->_unsavedValues->add($k); + } + + public function __isset($k) + { + return isset($this->_values[$k]); + } + + public function __unset($k) + { + unset($this->_values[$k]); + $this->_transientValues->add($k); + $this->_unsavedValues->discard($k); + } + + public function &__get($k) + { + // function should return a reference, using $nullval to return a reference to null + $nullval = null; + if (!empty($this->_values) && \array_key_exists($k, $this->_values)) { + return $this->_values[$k]; + } + if (!empty($this->_transientValues) && $this->_transientValues->includes($k)) { + $class = static::class; + $attrs = \implode(', ', \array_keys($this->_values)); + $message = "Stripe Notice: Undefined property of {$class} instance: {$k}. " + . "HINT: The {$k} attribute was set in the past, however. " + . 'It was then wiped when refreshing the object ' + . "with the result returned by Stripe's API, " + . 'probably as a result of a save(). The attributes currently ' + . "available on this object are: {$attrs}"; + Stripe::getLogger()->error($message); + + return $nullval; + } + $class = static::class; + Stripe::getLogger()->error("Stripe Notice: Undefined property of {$class} instance: {$k}"); + + return $nullval; + } + + // Magic method for var_dump output. Only works with PHP >= 5.6 + public function __debugInfo() + { + return $this->_values; + } + + // ArrayAccess methods + public function offsetSet($k, $v) + { + $this->{$k} = $v; + } + + public function offsetExists($k) + { + return \array_key_exists($k, $this->_values); + } + + public function offsetUnset($k) + { + unset($this->{$k}); + } + + public function offsetGet($k) + { + return \array_key_exists($k, $this->_values) ? $this->_values[$k] : null; + } + + // Countable method + public function count() + { + return \count($this->_values); + } + + public function keys() + { + return \array_keys($this->_values); + } + + public function values() + { + return \array_values($this->_values); + } + + /** + * This unfortunately needs to be public to be used in Util\Util. + * + * @param array $values + * @param null|array|string|Util\RequestOptions $opts + * + * @return static the object constructed from the given values + */ + public static function constructFrom($values, $opts = null) + { + $obj = new static(isset($values['id']) ? $values['id'] : null); + $obj->refreshFrom($values, $opts); + + return $obj; + } + + /** + * Refreshes this object using the provided values. + * + * @param array $values + * @param null|array|string|Util\RequestOptions $opts + * @param bool $partial defaults to false + */ + public function refreshFrom($values, $opts, $partial = false) + { + $this->_opts = Util\RequestOptions::parse($opts); + + $this->_originalValues = self::deepCopy($values); + + if ($values instanceof StripeObject) { + $values = $values->toArray(); + } + + // Wipe old state before setting new. This is useful for e.g. updating a + // customer, where there is no persistent card parameter. Mark those values + // which don't persist as transient + if ($partial) { + $removed = new Util\Set(); + } else { + $removed = new Util\Set(\array_diff(\array_keys($this->_values), \array_keys($values))); + } + + foreach ($removed->toArray() as $k) { + unset($this->{$k}); + } + + $this->updateAttributes($values, $opts, false); + foreach ($values as $k => $v) { + $this->_transientValues->discard($k); + $this->_unsavedValues->discard($k); + } + } + + /** + * Mass assigns attributes on the model. + * + * @param array $values + * @param null|array|string|Util\RequestOptions $opts + * @param bool $dirty defaults to true + */ + public function updateAttributes($values, $opts = null, $dirty = true) + { + foreach ($values as $k => $v) { + // Special-case metadata to always be cast as a StripeObject + // This is necessary in case metadata is empty, as PHP arrays do + // not differentiate between lists and hashes, and we consider + // empty arrays to be lists. + if (('metadata' === $k) && (\is_array($v))) { + $this->_values[$k] = StripeObject::constructFrom($v, $opts); + } else { + $this->_values[$k] = Util\Util::convertToStripeObject($v, $opts); + } + if ($dirty) { + $this->dirtyValue($this->_values[$k]); + } + $this->_unsavedValues->add($k); + } + } + + /** + * @param bool $force defaults to false + * + * @return array a recursive mapping of attributes to values for this object, + * including the proper value for deleted attributes + */ + public function serializeParameters($force = false) + { + $updateParams = []; + + foreach ($this->_values as $k => $v) { + // There are a few reasons that we may want to add in a parameter for + // update: + // + // 1. The `$force` option has been set. + // 2. We know that it was modified. + // 3. Its value is a StripeObject. A StripeObject may contain modified + // values within in that its parent StripeObject doesn't know about. + // + $original = \array_key_exists($k, $this->_originalValues) ? $this->_originalValues[$k] : null; + $unsaved = $this->_unsavedValues->includes($k); + if ($force || $unsaved || $v instanceof StripeObject) { + $updateParams[$k] = $this->serializeParamsValue( + $this->_values[$k], + $original, + $unsaved, + $force, + $k + ); + } + } + + // a `null` that makes it out of `serializeParamsValue` signals an empty + // value that we shouldn't appear in the serialized form of the object + return \array_filter( + $updateParams, + function ($v) { + return null !== $v; + } + ); + } + + public function serializeParamsValue($value, $original, $unsaved, $force, $key = null) + { + // The logic here is that essentially any object embedded in another + // object that had a `type` is actually an API resource of a different + // type that's been included in the response. These other resources must + // be updated from their proper endpoints, and therefore they are not + // included when serializing even if they've been modified. + // + // There are _some_ known exceptions though. + // + // For example, if the value is unsaved (meaning the user has set it), and + // it looks like the API resource is persisted with an ID, then we include + // the object so that parameters are serialized with a reference to its + // ID. + // + // Another example is that on save API calls it's sometimes desirable to + // update a customer's default source by setting a new card (or other) + // object with `->source=` and then saving the customer. The + // `saveWithParent` flag to override the default behavior allows us to + // handle these exceptions. + // + // We throw an error if a property was set explicitly but we can't do + // anything with it because the integration is probably not working as the + // user intended it to. + if (null === $value) { + return ''; + } + if (($value instanceof ApiResource) && (!$value->saveWithParent)) { + if (!$unsaved) { + return null; + } + if (isset($value->id)) { + return $value; + } + + throw new Exception\InvalidArgumentException( + "Cannot save property `{$key}` containing an API resource of type " . + \get_class($value) . ". It doesn't appear to be persisted and is " . + 'not marked as `saveWithParent`.' + ); + } + if (\is_array($value)) { + if (Util\Util::isList($value)) { + // Sequential array, i.e. a list + $update = []; + foreach ($value as $v) { + \array_push($update, $this->serializeParamsValue($v, null, true, $force)); + } + // This prevents an array that's unchanged from being resent. + if ($update !== $this->serializeParamsValue($original, null, true, $force, $key)) { + return $update; + } + } else { + // Associative array, i.e. a map + return Util\Util::convertToStripeObject($value, $this->_opts)->serializeParameters(); + } + } elseif ($value instanceof StripeObject) { + $update = $value->serializeParameters($force); + if ($original && $unsaved && $key && static::getAdditiveParams()->includes($key)) { + $update = \array_merge(self::emptyValues($original), $update); + } + + return $update; + } else { + return $value; + } + } + + public function jsonSerialize() + { + return $this->toArray(); + } + + /** + * Returns an associative array with the key and values composing the + * Stripe object. + * + * @return array the associative array + */ + public function toArray() + { + $maybeToArray = function ($value) { + if (null === $value) { + return null; + } + + return \is_object($value) && \method_exists($value, 'toArray') ? $value->toArray() : $value; + }; + + return \array_reduce(\array_keys($this->_values), function ($acc, $k) use ($maybeToArray) { + if ('_' === \substr((string) $k, 0, 1)) { + return $acc; + } + $v = $this->_values[$k]; + if (Util\Util::isList($v)) { + $acc[$k] = \array_map($maybeToArray, $v); + } else { + $acc[$k] = $maybeToArray($v); + } + + return $acc; + }, []); + } + + /** + * Returns a pretty JSON representation of the Stripe object. + * + * @return string the JSON representation of the Stripe object + */ + public function toJSON() + { + return \json_encode($this->toArray(), \JSON_PRETTY_PRINT); + } + + public function __toString() + { + $class = static::class; + + return $class . ' JSON: ' . $this->toJSON(); + } + + /** + * Sets all keys within the StripeObject as unsaved so that they will be + * included with an update when `serializeParameters` is called. This + * method is also recursive, so any StripeObjects contained as values or + * which are values in a tenant array are also marked as dirty. + */ + public function dirty() + { + $this->_unsavedValues = new Util\Set(\array_keys($this->_values)); + foreach ($this->_values as $k => $v) { + $this->dirtyValue($v); + } + } + + protected function dirtyValue($value) + { + if (\is_array($value)) { + foreach ($value as $v) { + $this->dirtyValue($v); + } + } elseif ($value instanceof StripeObject) { + $value->dirty(); + } + } + + /** + * Produces a deep copy of the given object including support for arrays + * and StripeObjects. + * + * @param mixed $obj + */ + protected static function deepCopy($obj) + { + if (\is_array($obj)) { + $copy = []; + foreach ($obj as $k => $v) { + $copy[$k] = self::deepCopy($v); + } + + return $copy; + } + if ($obj instanceof StripeObject) { + return $obj::constructFrom( + self::deepCopy($obj->_values), + clone $obj->_opts + ); + } + + return $obj; + } + + /** + * Returns a hash of empty values for all the values that are in the given + * StripeObject. + * + * @param mixed $obj + */ + public static function emptyValues($obj) + { + if (\is_array($obj)) { + $values = $obj; + } elseif ($obj instanceof StripeObject) { + $values = $obj->_values; + } else { + throw new Exception\InvalidArgumentException( + 'empty_values got unexpected object type: ' . \get_class($obj) + ); + } + + return \array_fill_keys(\array_keys($values), ''); + } + + /** + * @return null|ApiResponse The last response from the Stripe API + */ + public function getLastResponse() + { + return $this->_lastResponse; + } + + /** + * Sets the last response from the Stripe API. + * + * @param ApiResponse $resp + */ + public function setLastResponse($resp) + { + $this->_lastResponse = $resp; + } + + /** + * Indicates whether or not the resource has been deleted on the server. + * Note that some, but not all, resources can indicate whether they have + * been deleted. + * + * @return bool whether the resource is deleted + */ + public function isDeleted() + { + return isset($this->_values['deleted']) ? $this->_values['deleted'] : false; + } +} diff --git a/vendor/stripe/stripe-php/lib/Subscription.php b/vendor/stripe/stripe-php/lib/Subscription.php new file mode 100644 index 000000000..fcb55a31d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Subscription.php @@ -0,0 +1,116 @@ +Creating + * Subscriptions. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|float $application_fee_percent A non-negative decimal between 0 and 100, with at most two decimal places. This represents the percentage of the subscription invoice subtotal that will be transferred to the application owner's Stripe account. + * @property int $billing_cycle_anchor Determines the date of the first full invoice, and, for plans with month or year intervals, the day of the month for subsequent invoices. + * @property null|\Stripe\StripeObject $billing_thresholds Define thresholds at which an invoice will be sent, and the subscription advanced to a new billing period + * @property null|int $cancel_at A date in the future at which the subscription will automatically get canceled + * @property bool $cancel_at_period_end If the subscription has been canceled with the at_period_end flag set to true, cancel_at_period_end on the subscription will be true. You can use this attribute to determine whether a subscription that has a status of active is scheduled to be canceled at the end of the current period. + * @property null|int $canceled_at If the subscription has been canceled, the date of that cancellation. If the subscription was canceled with cancel_at_period_end, canceled_at will reflect the time of the most recent update request, not the end of the subscription period when the subscription is automatically moved to a canceled state. + * @property null|string $collection_method Either charge_automatically, or send_invoice. When charging automatically, Stripe will attempt to pay this subscription at the end of the cycle using the default source attached to the customer. When sending an invoice, Stripe will email your customer an invoice with payment instructions. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property int $current_period_end End of the current period that the subscription has been invoiced for. At the end of this period, a new invoice will be created. + * @property int $current_period_start Start of the current period that the subscription has been invoiced for. + * @property string|\Stripe\Customer $customer ID of the customer who owns the subscription. + * @property null|int $days_until_due Number of days a customer has to pay invoices generated by this subscription. This value will be null for subscriptions where collection_method=charge_automatically. + * @property null|string|\Stripe\PaymentMethod $default_payment_method ID of the default payment method for the subscription. It must belong to the customer associated with the subscription. This takes precedence over default_source. If neither are set, invoices will use the customer's invoice_settings.default_payment_method or default_source. + * @property null|string|\Stripe\Account|\Stripe\AlipayAccount|\Stripe\BankAccount|\Stripe\BitcoinReceiver|\Stripe\Card|\Stripe\Source $default_source ID of the default payment source for the subscription. It must belong to the customer associated with the subscription and be in a chargeable state. If default_payment_method is also set, default_payment_method will take precedence. If neither are set, invoices will use the customer's invoice_settings.default_payment_method or default_source. + * @property null|\Stripe\TaxRate[] $default_tax_rates The tax rates that will apply to any subscription item that does not have tax_rates set. Invoices created will have their default_tax_rates populated from the subscription. + * @property null|\Stripe\Discount $discount Describes the current discount applied to this subscription, if there is one. When billing, a discount applied to a subscription overrides a discount applied on a customer-wide basis. + * @property null|int $ended_at If the subscription has ended, the date the subscription ended. + * @property \Stripe\Collection $items List of subscription items, each with an attached price. + * @property null|string|\Stripe\Invoice $latest_invoice The most recent invoice this subscription has generated. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|int $next_pending_invoice_item_invoice Specifies the approximate timestamp on which any pending invoice items will be billed according to the schedule provided at pending_invoice_item_interval. + * @property null|\Stripe\StripeObject $pause_collection If specified, payment collection for this subscription will be paused. + * @property null|\Stripe\StripeObject $pending_invoice_item_interval Specifies an interval for how often to bill for any pending invoice items. It is analogous to calling Create an invoice for the given subscription at the specified interval. + * @property null|string|\Stripe\SetupIntent $pending_setup_intent You can use this SetupIntent to collect user authentication when creating a subscription without immediate payment or updating a subscription's payment method, allowing you to optimize for off-session payments. Learn more in the SCA Migration Guide. + * @property null|\Stripe\StripeObject $pending_update If specified, pending updates that will be applied to the subscription once the latest_invoice has been paid. + * @property null|string|\Stripe\SubscriptionSchedule $schedule The schedule attached to the subscription + * @property int $start_date Date when the subscription was first created. The date might differ from the created date due to backdating. + * @property string $status

Possible values are incomplete, incomplete_expired, trialing, active, past_due, canceled, or unpaid.

For collection_method=charge_automatically a subscription moves into incomplete if the initial payment attempt fails. A subscription in this state can only have metadata and default_source updated. Once the first invoice is paid, the subscription moves into an active state. If the first invoice is not paid within 23 hours, the subscription transitions to incomplete_expired. This is a terminal state, the open invoice will be voided and no further invoices will be generated.

A subscription that is currently in a trial period is trialing and moves to active when the trial period is over.

If subscription collection_method=charge_automatically it becomes past_due when payment to renew it fails and canceled or unpaid (depending on your subscriptions settings) when Stripe has exhausted all payment retry attempts.

If subscription collection_method=send_invoice it becomes past_due when its invoice is not paid by the due date, and canceled or unpaid if it is still not paid by an additional deadline after that. Note that when a subscription has a status of unpaid, no subsequent invoices will be attempted (invoices will be created, but then immediately automatically closed). After receiving updated payment information from a customer, you may choose to reopen and pay their closed invoices.

+ * @property null|int $trial_end If the subscription has a trial, the end of that trial. + * @property null|int $trial_start If the subscription has a trial, the beginning of that trial. + */ +class Subscription extends ApiResource +{ + const OBJECT_NAME = 'subscription'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const PAYMENT_BEHAVIOR_ALLOW_INCOMPLETE = 'allow_incomplete'; + const PAYMENT_BEHAVIOR_ERROR_IF_INCOMPLETE = 'error_if_incomplete'; + const PAYMENT_BEHAVIOR_PENDING_IF_INCOMPLETE = 'pending_if_incomplete'; + + const PRORATION_BEHAVIOR_ALWAYS_INVOICE = 'always_invoice'; + const PRORATION_BEHAVIOR_CREATE_PRORATIONS = 'create_prorations'; + const PRORATION_BEHAVIOR_NONE = 'none'; + + const STATUS_ACTIVE = 'active'; + const STATUS_CANCELED = 'canceled'; + const STATUS_INCOMPLETE = 'incomplete'; + const STATUS_INCOMPLETE_EXPIRED = 'incomplete_expired'; + const STATUS_PAST_DUE = 'past_due'; + const STATUS_TRIALING = 'trialing'; + const STATUS_UNPAID = 'unpaid'; + + use ApiOperations\Delete { + delete as protected _delete; + } + + public static function getSavedNestedResources() + { + static $savedNestedResources = null; + if (null === $savedNestedResources) { + $savedNestedResources = new Util\Set([ + 'source', + ]); + } + + return $savedNestedResources; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription the deleted subscription + */ + public function cancel($params = null, $opts = null) + { + return $this->_delete($params, $opts); + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Subscription the updated subscription + */ + public function deleteDiscount($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/discount'; + list($response, $opts) = $this->_request('delete', $url, $params, $opts); + $this->refreshFrom(['discount' => null], $opts, true); + } +} diff --git a/vendor/stripe/stripe-php/lib/SubscriptionItem.php b/vendor/stripe/stripe-php/lib/SubscriptionItem.php new file mode 100644 index 000000000..5bd25b252 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SubscriptionItem.php @@ -0,0 +1,84 @@ +key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\Plan $plan

You can now model subscriptions more flexibly using the Prices API. It replaces the Plans API and is backwards compatible to simplify your migration.

Plans define the base price, currency, and billing cycle for recurring purchases of products. Products help you track inventory or provisioning, and plans help you track pricing. Different physical goods or levels of service should be represented by products, and pricing options should be represented by plans. This approach lets you change prices without having to change your provisioning scheme.

For example, you might have a single "gold" product that has plans for $10/month, $100/year, €9/month, and €90/year.

Related guides: Set up a subscription and more about products and prices.

+ * @property \Stripe\Price $price

Prices define the unit cost, currency, and (optional) billing cycle for both recurring and one-time purchases of products. Products help you track inventory or provisioning, and prices help you track payment terms. Different physical goods or levels of service should be represented by products, and pricing options should be represented by prices. This approach lets you change prices without having to change your provisioning scheme.

For example, you might have a single "gold" product that has prices for $10/month, $100/year, and €9 once.

Related guides: Set up a subscription, create an invoice, and more about products and prices.

+ * @property int $quantity The quantity of the plan to which the customer should be subscribed. + * @property string $subscription The subscription this subscription_item belongs to. + * @property null|\Stripe\TaxRate[] $tax_rates The tax rates which apply to this subscription_item. When set, the default_tax_rates on the subscription do not apply to this subscription_item. + */ +class SubscriptionItem extends ApiResource +{ + const OBJECT_NAME = 'subscription_item'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\NestedResource; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const PATH_USAGE_RECORDS = '/usage_records'; + + /** + * @param null|string $id the ID of the subscription item on which to create the usage record + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\UsageRecord + */ + public static function createUsageRecord($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_USAGE_RECORDS, $params, $opts); + } + + /** + * @deprecated usageRecordSummaries is deprecated. Please use SubscriptionItem::allUsageRecordSummaries instead. + * + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of usage record summaries + */ + public function usageRecordSummaries($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/usage_record_summaries'; + list($response, $opts) = $this->_request('get', $url, $params, $opts); + $obj = \Stripe\Util\Util::convertToStripeObject($response, $opts); + $obj->setLastResponse($response); + + return $obj; + } + + const PATH_USAGE_RECORD_SUMMARIES = '/usage_record_summaries'; + + /** + * @param string $id the ID of the subscription item on which to retrieve the usage record summaries + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of usage record summaries + */ + public static function allUsageRecordSummaries($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_USAGE_RECORD_SUMMARIES, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/SubscriptionSchedule.php b/vendor/stripe/stripe-php/lib/SubscriptionSchedule.php new file mode 100644 index 000000000..0f1b15630 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/SubscriptionSchedule.php @@ -0,0 +1,74 @@ +Subscription + * Schedules. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|int $canceled_at Time at which the subscription schedule was canceled. Measured in seconds since the Unix epoch. + * @property null|int $completed_at Time at which the subscription schedule was completed. Measured in seconds since the Unix epoch. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|\Stripe\StripeObject $current_phase Object representing the start and end dates for the current phase of the subscription schedule, if it is active. + * @property string|\Stripe\Customer $customer ID of the customer who owns the subscription schedule. + * @property \Stripe\StripeObject $default_settings + * @property string $end_behavior Behavior of the subscription schedule and underlying subscription when it ends. Possible values are release and cancel. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\StripeObject[] $phases Configuration for the subscription schedule's phases. + * @property null|int $released_at Time at which the subscription schedule was released. Measured in seconds since the Unix epoch. + * @property null|string $released_subscription ID of the subscription once managed by the subscription schedule (if it is released). + * @property string $status The present status of the subscription schedule. Possible values are not_started, active, completed, released, and canceled. You can read more about the different states in our behavior guide. + * @property null|string|\Stripe\Subscription $subscription ID of the subscription managed by the subscription schedule. + */ +class SubscriptionSchedule extends ApiResource +{ + const OBJECT_NAME = 'subscription_schedule'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return SubscriptionSchedule the canceled subscription schedule + */ + public function cancel($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/cancel'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return SubscriptionSchedule the released subscription schedule + */ + public function release($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/release'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/TaxId.php b/vendor/stripe/stripe-php/lib/TaxId.php new file mode 100644 index 000000000..d4188fe40 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/TaxId.php @@ -0,0 +1,106 @@ +customer. A customer's tax IDs + * are displayed on invoices and credit notes issued for the customer. + * + * Related guide: Customer + * Tax Identification Numbers. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string $country Two-letter ISO code representing the country of the tax ID. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string|\Stripe\Customer $customer ID of the customer. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property string $type Type of the tax ID, one of ae_trn, au_abn, br_cnpj, br_cpf, ca_bn, ca_qst, ch_vat, cl_tin, es_cif, eu_vat, hk_br, id_npwp, in_gst, jp_cn, jp_rn, kr_brn, li_uid, mx_rfc, my_frp, my_itn, my_sst, no_vat, nz_gst, ru_inn, ru_kpp, sa_vat, sg_gst, sg_uen, th_vat, tw_vat, us_ein, or za_vat. Note that some legacy tax IDs have type unknown + * @property string $value Value of the tax ID. + * @property null|\Stripe\StripeObject $verification Tax ID verification information. + */ +class TaxId extends ApiResource +{ + const OBJECT_NAME = 'tax_id'; + + use ApiOperations\Delete; + + const TYPE_AE_TRN = 'ae_trn'; + const TYPE_AU_ABN = 'au_abn'; + const TYPE_BR_CNPJ = 'br_cnpj'; + const TYPE_BR_CPF = 'br_cpf'; + const TYPE_CA_BN = 'ca_bn'; + const TYPE_CA_QST = 'ca_qst'; + const TYPE_CH_VAT = 'ch_vat'; + const TYPE_CL_TIN = 'cl_tin'; + const TYPE_ES_CIF = 'es_cif'; + const TYPE_EU_VAT = 'eu_vat'; + const TYPE_HK_BR = 'hk_br'; + const TYPE_ID_NPWP = 'id_npwp'; + const TYPE_IN_GST = 'in_gst'; + const TYPE_JP_CN = 'jp_cn'; + const TYPE_JP_RN = 'jp_rn'; + const TYPE_KR_BRN = 'kr_brn'; + const TYPE_LI_UID = 'li_uid'; + const TYPE_MX_RFC = 'mx_rfc'; + const TYPE_MY_FRP = 'my_frp'; + const TYPE_MY_ITN = 'my_itn'; + const TYPE_MY_SST = 'my_sst'; + const TYPE_NO_VAT = 'no_vat'; + const TYPE_NZ_GST = 'nz_gst'; + const TYPE_RU_INN = 'ru_inn'; + const TYPE_RU_KPP = 'ru_kpp'; + const TYPE_SA_VAT = 'sa_vat'; + const TYPE_SG_GST = 'sg_gst'; + const TYPE_SG_UEN = 'sg_uen'; + const TYPE_TH_VAT = 'th_vat'; + const TYPE_TW_VAT = 'tw_vat'; + const TYPE_UNKNOWN = 'unknown'; + const TYPE_US_EIN = 'us_ein'; + const TYPE_ZA_VAT = 'za_vat'; + + const VERIFICATION_STATUS_PENDING = 'pending'; + const VERIFICATION_STATUS_UNAVAILABLE = 'unavailable'; + const VERIFICATION_STATUS_UNVERIFIED = 'unverified'; + const VERIFICATION_STATUS_VERIFIED = 'verified'; + + /** + * @return string the API URL for this tax id + */ + public function instanceUrl() + { + $id = $this['id']; + $customer = $this['customer']; + if (!$id) { + throw new Exception\UnexpectedValueException( + "Could not determine which URL to request: class instance has invalid ID: {$id}" + ); + } + $id = Util\Util::utf8($id); + $customer = Util\Util::utf8($customer); + + $base = Customer::classUrl(); + $customerExtn = \urlencode($customer); + $extn = \urlencode($id); + + return "{$base}/{$customerExtn}/tax_ids/{$extn}"; + } + + /** + * @param array|string $_id + * @param null|array|string $_opts + * + * @throws \Stripe\Exception\BadMethodCallException + */ + public static function retrieve($_id, $_opts = null) + { + $msg = 'Tax IDs cannot be retrieved without a customer ID. Retrieve ' . + "a tax ID using `Customer::retrieveTaxId('customer_id', " . + "'tax_id_id')`."; + + throw new Exception\BadMethodCallException($msg); + } +} diff --git a/vendor/stripe/stripe-php/lib/TaxRate.php b/vendor/stripe/stripe-php/lib/TaxRate.php new file mode 100644 index 000000000..2974f8383 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/TaxRate.php @@ -0,0 +1,38 @@ +invoices, subscriptions and + * Checkout + * Sessions to collect tax. + * + * Related guide: Tax + * Rates. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $active Defaults to true. When set to false, this tax rate cannot be used with new applications or Checkout Sessions, but will still work for subscriptions and invoices that already have it set. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $description An arbitrary string attached to the tax rate for your internal use only. It will not be visible to your customers. + * @property string $display_name The display name of the tax rates as it will appear to your customer on their receipt email, PDF, and the hosted invoice page. + * @property bool $inclusive This specifies if the tax rate is inclusive or exclusive. + * @property null|string $jurisdiction The jurisdiction for the tax rate. You can use this label field for tax reporting purposes. It also appears on your customer’s invoice. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property float $percentage This represents the tax rate percent out of 100. + */ +class TaxRate extends ApiResource +{ + const OBJECT_NAME = 'tax_rate'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Terminal/ConnectionToken.php b/vendor/stripe/stripe-php/lib/Terminal/ConnectionToken.php new file mode 100644 index 000000000..e688857b0 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Terminal/ConnectionToken.php @@ -0,0 +1,23 @@ +Fleet + * Management. + * + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property string $location The id of the location that this connection token is scoped to. + * @property string $secret Your application should pass this token to the Stripe Terminal SDK. + */ +class ConnectionToken extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'terminal.connection_token'; + + use \Stripe\ApiOperations\Create; +} diff --git a/vendor/stripe/stripe-php/lib/Terminal/Location.php b/vendor/stripe/stripe-php/lib/Terminal/Location.php new file mode 100644 index 000000000..5769ef358 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Terminal/Location.php @@ -0,0 +1,30 @@ +Fleet + * Management. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\StripeObject $address + * @property string $display_name The display name of the location. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + */ +class Location extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'terminal.location'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Delete; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/Terminal/Reader.php b/vendor/stripe/stripe-php/lib/Terminal/Reader.php new file mode 100644 index 000000000..513b130af --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Terminal/Reader.php @@ -0,0 +1,35 @@ +Connecting to a + * Reader. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string $device_sw_version The current software version of the reader. + * @property string $device_type Type of reader, one of bbpos_chipper2x or verifone_P400. + * @property null|string $ip_address The local IP address of the reader. + * @property string $label Custom label given to the reader for easier identification. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string $location The location identifier of the reader. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $serial_number Serial number of the reader. + * @property null|string $status The networking status of the reader. + */ +class Reader extends \Stripe\ApiResource +{ + const OBJECT_NAME = 'terminal.reader'; + + use \Stripe\ApiOperations\All; + use \Stripe\ApiOperations\Create; + use \Stripe\ApiOperations\Delete; + use \Stripe\ApiOperations\Retrieve; + use \Stripe\ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/ThreeDSecure.php b/vendor/stripe/stripe-php/lib/ThreeDSecure.php new file mode 100644 index 000000000..51b5691d4 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/ThreeDSecure.php @@ -0,0 +1,37 @@ +3D + * Secure object. Once the object has been created, you can use it to + * authenticate the cardholder and create a charge. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount of the charge that you will create when authentication completes. + * @property bool $authenticated True if the cardholder went through the authentication flow and their bank indicated that authentication succeeded. + * @property \Stripe\Card $card

You can store multiple cards on a customer in order to charge the customer later. You can also store multiple debit cards on a recipient in order to transfer to those cards later.

Related guide: Card Payments with Sources.

+ * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property null|string $redirect_url If present, this is the URL that you should send the cardholder to for authentication. If you are going to use Stripe.js to display the authentication page in an iframe, you should use the value "_callback". + * @property string $status Possible values are redirect_pending, succeeded, or failed. When the cardholder can be authenticated, the object starts with status redirect_pending. When liability will be shifted to the cardholder's bank (either because the cardholder was successfully authenticated, or because the bank has not implemented 3D Secure, the object wlil be in status succeeded. failed indicates that authentication was attempted unsuccessfully. + */ +class ThreeDSecure extends ApiResource +{ + const OBJECT_NAME = 'three_d_secure'; + + use ApiOperations\Create; + use ApiOperations\Retrieve; + + /** + * @return string the endpoint URL for the given class + */ + public static function classUrl() + { + return '/v1/3d_secure'; + } +} diff --git a/vendor/stripe/stripe-php/lib/Token.php b/vendor/stripe/stripe-php/lib/Token.php new file mode 100644 index 000000000..de7988cfb --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Token.php @@ -0,0 +1,57 @@ +recommended payments integrations to + * perform this process client-side. This ensures that no sensitive card data + * touches your server, and allows your integration to operate in a PCI-compliant + * way. + * + * If you cannot use client-side tokenization, you can also create tokens using the + * API with either your publishable or secret API key. Keep in mind that if your + * integration uses this method, you are responsible for any PCI compliance that + * may be required, and you must keep your secret API key safe. Unlike with + * client-side tokenization, your customer's information is not sent directly to + * Stripe, so we cannot determine how it is handled or stored. + * + * Tokens cannot be stored or used more than once. To store card or bank account + * information for later use, you can create Customer objects or Custom accounts. Note + * that Radar, our integrated solution + * for automatic fraud protection, supports only integrations that use client-side + * tokenization. + * + * Related guide: Accept + * a payment + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property \Stripe\BankAccount $bank_account

These bank accounts are payment methods on Customer objects.

On the other hand External Accounts are transfer destinations on Account objects for Custom accounts. They can be bank accounts or debit cards as well, and are documented in the links above.

Related guide: Bank Debits and Transfers.

+ * @property \Stripe\Card $card

You can store multiple cards on a customer in order to charge the customer later. You can also store multiple debit cards on a recipient in order to transfer to those cards later.

Related guide: Card Payments with Sources.

+ * @property null|string $client_ip IP address of the client that generated the token. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property string $type Type of the token: account, bank_account, card, or pii. + * @property bool $used Whether this token has already been used (tokens can be used only once). + */ +class Token extends ApiResource +{ + const OBJECT_NAME = 'token'; + + use ApiOperations\Create; + use ApiOperations\Retrieve; + + const TYPE_ACCOUNT = 'account'; + const TYPE_BANK_ACCOUNT = 'bank_account'; + const TYPE_CARD = 'card'; + const TYPE_PII = 'pii'; +} diff --git a/vendor/stripe/stripe-php/lib/Topup.php b/vendor/stripe/stripe-php/lib/Topup.php new file mode 100644 index 000000000..4a4c818b2 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Topup.php @@ -0,0 +1,63 @@ +Topping Up your + * Platform Account. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount transferred. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction ID of the balance transaction that describes the impact of this top-up on your account balance. May not be specified depending on status of top-up. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|int $expected_availability_date Date the funds are expected to arrive in your Stripe account for payouts. This factors in delays like weekends or bank holidays. May not be specified depending on status of top-up. + * @property null|string $failure_code Error code explaining reason for top-up failure if available (see the errors section for a list of codes). + * @property null|string $failure_message Message to user further explaining reason for top-up failure if available. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\Source $source

Source objects allow you to accept a variety of payment methods. They represent a customer's payment instrument, and can be used with the Stripe API just like a Card object: once chargeable, they can be charged, or can be attached to customers.

Related guides: Sources API and Sources & Customers.

+ * @property null|string $statement_descriptor Extra information about a top-up. This will appear on your source's bank statement. It must contain at least one letter. + * @property string $status The status of the top-up is either canceled, failed, pending, reversed, or succeeded. + * @property null|string $transfer_group A string that identifies this top-up as part of a group. + */ +class Topup extends ApiResource +{ + const OBJECT_NAME = 'topup'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const STATUS_CANCELED = 'canceled'; + const STATUS_FAILED = 'failed'; + const STATUS_PENDING = 'pending'; + const STATUS_REVERSED = 'reversed'; + const STATUS_SUCCEEDED = 'succeeded'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Topup the canceled topup + */ + public function cancel($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/cancel'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } +} diff --git a/vendor/stripe/stripe-php/lib/Transfer.php b/vendor/stripe/stripe-php/lib/Transfer.php new file mode 100644 index 000000000..6b8e4ac6a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Transfer.php @@ -0,0 +1,130 @@ +Transfer object is created when you move funds between Stripe + * accounts as part of Connect. + * + * Before April 6, 2017, transfers also represented movement of funds from a Stripe + * account to a card or bank account. This behavior has since been split out into a + * Payout object, with + * corresponding payout endpoints. For more information, read about the transfer/payout split. + * + * Related guide: Creating Separate + * Charges and Transfers. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount in %s to be transferred. + * @property int $amount_reversed Amount in %s reversed (can be less than the amount attribute on the transfer if a partial reversal was issued). + * @property null|string|\Stripe\BalanceTransaction $balance_transaction Balance transaction that describes the impact of this transfer on your account balance. + * @property int $created Time that this record of the transfer was first created. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string $description An arbitrary string attached to the object. Often useful for displaying to users. + * @property null|string|\Stripe\Account $destination ID of the Stripe account the transfer was sent to. + * @property string|\Stripe\Charge $destination_payment If the destination is a Stripe account, this will be the ID of the payment that the destination account received for the transfer. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property \Stripe\Collection $reversals A list of reversals that have been applied to the transfer. + * @property bool $reversed Whether the transfer has been fully reversed. If the transfer is only partially reversed, this attribute will still be false. + * @property null|string|\Stripe\Charge $source_transaction ID of the charge or payment that was used to fund the transfer. If null, the transfer was funded from the available balance. + * @property null|string $source_type The source balance this transfer came from. One of card, fpx, or bank_account. + * @property null|string $transfer_group A string that identifies this transaction as part of a group. See the Connect documentation for details. + */ +class Transfer extends ApiResource +{ + const OBJECT_NAME = 'transfer'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\NestedResource; + use ApiOperations\Retrieve; + use ApiOperations\Update; + + const SOURCE_TYPE_ALIPAY_ACCOUNT = 'alipay_account'; + const SOURCE_TYPE_BANK_ACCOUNT = 'bank_account'; + const SOURCE_TYPE_CARD = 'card'; + const SOURCE_TYPE_FINANCING = 'financing'; + + /** + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return Transfer the canceled transfer + */ + public function cancel($params = null, $opts = null) + { + $url = $this->instanceUrl() . '/cancel'; + list($response, $opts) = $this->_request('post', $url, $params, $opts); + $this->refreshFrom($response, $opts); + + return $this; + } + + const PATH_REVERSALS = '/reversals'; + + /** + * @param string $id the ID of the transfer on which to retrieve the transfer reversals + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\Collection the list of transfer reversals + */ + public static function allReversals($id, $params = null, $opts = null) + { + return self::_allNestedResources($id, static::PATH_REVERSALS, $params, $opts); + } + + /** + * @param string $id the ID of the transfer on which to create the transfer reversal + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TransferReversal + */ + public static function createReversal($id, $params = null, $opts = null) + { + return self::_createNestedResource($id, static::PATH_REVERSALS, $params, $opts); + } + + /** + * @param string $id the ID of the transfer to which the transfer reversal belongs + * @param string $reversalId the ID of the transfer reversal to retrieve + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TransferReversal + */ + public static function retrieveReversal($id, $reversalId, $params = null, $opts = null) + { + return self::_retrieveNestedResource($id, static::PATH_REVERSALS, $reversalId, $params, $opts); + } + + /** + * @param string $id the ID of the transfer to which the transfer reversal belongs + * @param string $reversalId the ID of the transfer reversal to update + * @param null|array $params + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return \Stripe\TransferReversal + */ + public static function updateReversal($id, $reversalId, $params = null, $opts = null) + { + return self::_updateNestedResource($id, static::PATH_REVERSALS, $reversalId, $params, $opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/TransferReversal.php b/vendor/stripe/stripe-php/lib/TransferReversal.php new file mode 100644 index 000000000..b6167dbb3 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/TransferReversal.php @@ -0,0 +1,79 @@ +Stripe Connect platforms can + * reverse transfers made to a connected account, either entirely or partially, and + * can also specify whether to refund any related application fees. Transfer + * reversals add to the platform's balance and subtract from the destination + * account's balance. + * + * Reversing a transfer that was made for a destination charge is allowed only + * up to the amount of the charge. It is possible to reverse a transfer_group + * transfer only if the destination account has enough balance to cover the + * reversal. + * + * Related guide: Reversing + * Transfers. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property int $amount Amount, in %s. + * @property null|string|\Stripe\BalanceTransaction $balance_transaction Balance transaction that describes the impact on your account balance. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property string $currency Three-letter ISO currency code, in lowercase. Must be a supported currency. + * @property null|string|\Stripe\Refund $destination_payment_refund Linked payment refund for the transfer reversal. + * @property null|\Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property null|string|\Stripe\Refund $source_refund ID of the refund responsible for the transfer reversal. + * @property string|\Stripe\Transfer $transfer ID of the transfer that was reversed. + */ +class TransferReversal extends ApiResource +{ + const OBJECT_NAME = 'transfer_reversal'; + + use ApiOperations\Update { + save as protected _save; + } + + /** + * @return string the API URL for this Stripe transfer reversal + */ + public function instanceUrl() + { + $id = $this['id']; + $transfer = $this['transfer']; + if (!$id) { + throw new Exception\UnexpectedValueException( + 'Could not determine which URL to request: ' . + "class instance has invalid ID: {$id}", + null + ); + } + $id = Util\Util::utf8($id); + $transfer = Util\Util::utf8($transfer); + + $base = Transfer::classUrl(); + $transferExtn = \urlencode($transfer); + $extn = \urlencode($id); + + return "{$base}/{$transferExtn}/reversals/{$extn}"; + } + + /** + * @param null|array|string $opts + * + * @throws \Stripe\Exception\ApiErrorException if the request fails + * + * @return TransferReversal the saved reversal + */ + public function save($opts = null) + { + return $this->_save($opts); + } +} diff --git a/vendor/stripe/stripe-php/lib/UsageRecord.php b/vendor/stripe/stripe-php/lib/UsageRecord.php new file mode 100644 index 000000000..552298276 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/UsageRecord.php @@ -0,0 +1,25 @@ +Metered + * Billing. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property int $quantity The usage quantity for the specified date. + * @property string $subscription_item The ID of the subscription item this usage record contains data for. + * @property int $timestamp The timestamp when this usage occurred. + */ +class UsageRecord extends ApiResource +{ + const OBJECT_NAME = 'usage_record'; +} diff --git a/vendor/stripe/stripe-php/lib/UsageRecordSummary.php b/vendor/stripe/stripe-php/lib/UsageRecordSummary.php new file mode 100644 index 000000000..174e14e03 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/UsageRecordSummary.php @@ -0,0 +1,19 @@ +true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $period + * @property string $subscription_item The ID of the subscription item this summary is describing. + * @property int $total_usage The total usage within this usage period. + */ +class UsageRecordSummary extends ApiResource +{ + const OBJECT_NAME = 'usage_record_summary'; +} diff --git a/vendor/stripe/stripe-php/lib/Util/CaseInsensitiveArray.php b/vendor/stripe/stripe-php/lib/Util/CaseInsensitiveArray.php new file mode 100644 index 000000000..670ab0b6a --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Util/CaseInsensitiveArray.php @@ -0,0 +1,72 @@ +container = \array_change_key_case($initial_array, \CASE_LOWER); + } + + public function count() + { + return \count($this->container); + } + + public function getIterator() + { + return new \ArrayIterator($this->container); + } + + public function offsetSet($offset, $value) + { + $offset = static::maybeLowercase($offset); + if (null === $offset) { + $this->container[] = $value; + } else { + $this->container[$offset] = $value; + } + } + + public function offsetExists($offset) + { + $offset = static::maybeLowercase($offset); + + return isset($this->container[$offset]); + } + + public function offsetUnset($offset) + { + $offset = static::maybeLowercase($offset); + unset($this->container[$offset]); + } + + public function offsetGet($offset) + { + $offset = static::maybeLowercase($offset); + + return isset($this->container[$offset]) ? $this->container[$offset] : null; + } + + private static function maybeLowercase($v) + { + if (\is_string($v)) { + return \strtolower($v); + } + + return $v; + } +} diff --git a/vendor/stripe/stripe-php/lib/Util/DefaultLogger.php b/vendor/stripe/stripe-php/lib/Util/DefaultLogger.php new file mode 100644 index 000000000..016cbe85f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Util/DefaultLogger.php @@ -0,0 +1,29 @@ + 0) { + throw new \Stripe\Exception\BadMethodCallException('DefaultLogger does not currently implement context. Please implement if you need it.'); + } + + if (null === $this->destination) { + \error_log($message, $this->messageType); + } else { + \error_log($message, $this->messageType, $this->destination); + } + } +} diff --git a/vendor/stripe/stripe-php/lib/Util/LoggerInterface.php b/vendor/stripe/stripe-php/lib/Util/LoggerInterface.php new file mode 100644 index 000000000..5603c81b8 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Util/LoggerInterface.php @@ -0,0 +1,34 @@ + \Stripe\Account::class, + \Stripe\AccountLink::OBJECT_NAME => \Stripe\AccountLink::class, + \Stripe\AlipayAccount::OBJECT_NAME => \Stripe\AlipayAccount::class, + \Stripe\ApplePayDomain::OBJECT_NAME => \Stripe\ApplePayDomain::class, + \Stripe\ApplicationFee::OBJECT_NAME => \Stripe\ApplicationFee::class, + \Stripe\ApplicationFeeRefund::OBJECT_NAME => \Stripe\ApplicationFeeRefund::class, + \Stripe\Balance::OBJECT_NAME => \Stripe\Balance::class, + \Stripe\BalanceTransaction::OBJECT_NAME => \Stripe\BalanceTransaction::class, + \Stripe\BankAccount::OBJECT_NAME => \Stripe\BankAccount::class, + \Stripe\BillingPortal\Session::OBJECT_NAME => \Stripe\BillingPortal\Session::class, + \Stripe\BitcoinReceiver::OBJECT_NAME => \Stripe\BitcoinReceiver::class, + \Stripe\BitcoinTransaction::OBJECT_NAME => \Stripe\BitcoinTransaction::class, + \Stripe\Capability::OBJECT_NAME => \Stripe\Capability::class, + \Stripe\Card::OBJECT_NAME => \Stripe\Card::class, + \Stripe\Charge::OBJECT_NAME => \Stripe\Charge::class, + \Stripe\Checkout\Session::OBJECT_NAME => \Stripe\Checkout\Session::class, + \Stripe\Collection::OBJECT_NAME => \Stripe\Collection::class, + \Stripe\CountrySpec::OBJECT_NAME => \Stripe\CountrySpec::class, + \Stripe\Coupon::OBJECT_NAME => \Stripe\Coupon::class, + \Stripe\CreditNote::OBJECT_NAME => \Stripe\CreditNote::class, + \Stripe\CreditNoteLineItem::OBJECT_NAME => \Stripe\CreditNoteLineItem::class, + \Stripe\Customer::OBJECT_NAME => \Stripe\Customer::class, + \Stripe\CustomerBalanceTransaction::OBJECT_NAME => \Stripe\CustomerBalanceTransaction::class, + \Stripe\Discount::OBJECT_NAME => \Stripe\Discount::class, + \Stripe\Dispute::OBJECT_NAME => \Stripe\Dispute::class, + \Stripe\EphemeralKey::OBJECT_NAME => \Stripe\EphemeralKey::class, + \Stripe\Event::OBJECT_NAME => \Stripe\Event::class, + \Stripe\ExchangeRate::OBJECT_NAME => \Stripe\ExchangeRate::class, + \Stripe\File::OBJECT_NAME => \Stripe\File::class, + \Stripe\File::OBJECT_NAME_ALT => \Stripe\File::class, + \Stripe\FileLink::OBJECT_NAME => \Stripe\FileLink::class, + \Stripe\Invoice::OBJECT_NAME => \Stripe\Invoice::class, + \Stripe\InvoiceItem::OBJECT_NAME => \Stripe\InvoiceItem::class, + \Stripe\InvoiceLineItem::OBJECT_NAME => \Stripe\InvoiceLineItem::class, + \Stripe\Issuing\Authorization::OBJECT_NAME => \Stripe\Issuing\Authorization::class, + \Stripe\Issuing\Card::OBJECT_NAME => \Stripe\Issuing\Card::class, + \Stripe\Issuing\CardDetails::OBJECT_NAME => \Stripe\Issuing\CardDetails::class, + \Stripe\Issuing\Cardholder::OBJECT_NAME => \Stripe\Issuing\Cardholder::class, + \Stripe\Issuing\Dispute::OBJECT_NAME => \Stripe\Issuing\Dispute::class, + \Stripe\Issuing\Transaction::OBJECT_NAME => \Stripe\Issuing\Transaction::class, + \Stripe\LineItem::OBJECT_NAME => \Stripe\LineItem::class, + \Stripe\LoginLink::OBJECT_NAME => \Stripe\LoginLink::class, + \Stripe\Mandate::OBJECT_NAME => \Stripe\Mandate::class, + \Stripe\Order::OBJECT_NAME => \Stripe\Order::class, + \Stripe\OrderItem::OBJECT_NAME => \Stripe\OrderItem::class, + \Stripe\OrderReturn::OBJECT_NAME => \Stripe\OrderReturn::class, + \Stripe\PaymentIntent::OBJECT_NAME => \Stripe\PaymentIntent::class, + \Stripe\PaymentMethod::OBJECT_NAME => \Stripe\PaymentMethod::class, + \Stripe\Payout::OBJECT_NAME => \Stripe\Payout::class, + \Stripe\Person::OBJECT_NAME => \Stripe\Person::class, + \Stripe\Plan::OBJECT_NAME => \Stripe\Plan::class, + \Stripe\Price::OBJECT_NAME => \Stripe\Price::class, + \Stripe\Product::OBJECT_NAME => \Stripe\Product::class, + \Stripe\PromotionCode::OBJECT_NAME => \Stripe\PromotionCode::class, + \Stripe\Radar\EarlyFraudWarning::OBJECT_NAME => \Stripe\Radar\EarlyFraudWarning::class, + \Stripe\Radar\ValueList::OBJECT_NAME => \Stripe\Radar\ValueList::class, + \Stripe\Radar\ValueListItem::OBJECT_NAME => \Stripe\Radar\ValueListItem::class, + \Stripe\Recipient::OBJECT_NAME => \Stripe\Recipient::class, + \Stripe\RecipientTransfer::OBJECT_NAME => \Stripe\RecipientTransfer::class, + \Stripe\Refund::OBJECT_NAME => \Stripe\Refund::class, + \Stripe\Reporting\ReportRun::OBJECT_NAME => \Stripe\Reporting\ReportRun::class, + \Stripe\Reporting\ReportType::OBJECT_NAME => \Stripe\Reporting\ReportType::class, + \Stripe\Review::OBJECT_NAME => \Stripe\Review::class, + \Stripe\SetupAttempt::OBJECT_NAME => \Stripe\SetupAttempt::class, + \Stripe\SetupIntent::OBJECT_NAME => \Stripe\SetupIntent::class, + \Stripe\Sigma\ScheduledQueryRun::OBJECT_NAME => \Stripe\Sigma\ScheduledQueryRun::class, + \Stripe\SKU::OBJECT_NAME => \Stripe\SKU::class, + \Stripe\Source::OBJECT_NAME => \Stripe\Source::class, + \Stripe\SourceTransaction::OBJECT_NAME => \Stripe\SourceTransaction::class, + \Stripe\Subscription::OBJECT_NAME => \Stripe\Subscription::class, + \Stripe\SubscriptionItem::OBJECT_NAME => \Stripe\SubscriptionItem::class, + \Stripe\SubscriptionSchedule::OBJECT_NAME => \Stripe\SubscriptionSchedule::class, + \Stripe\TaxId::OBJECT_NAME => \Stripe\TaxId::class, + \Stripe\TaxRate::OBJECT_NAME => \Stripe\TaxRate::class, + \Stripe\Terminal\ConnectionToken::OBJECT_NAME => \Stripe\Terminal\ConnectionToken::class, + \Stripe\Terminal\Location::OBJECT_NAME => \Stripe\Terminal\Location::class, + \Stripe\Terminal\Reader::OBJECT_NAME => \Stripe\Terminal\Reader::class, + \Stripe\ThreeDSecure::OBJECT_NAME => \Stripe\ThreeDSecure::class, + \Stripe\Token::OBJECT_NAME => \Stripe\Token::class, + \Stripe\Topup::OBJECT_NAME => \Stripe\Topup::class, + \Stripe\Transfer::OBJECT_NAME => \Stripe\Transfer::class, + \Stripe\TransferReversal::OBJECT_NAME => \Stripe\TransferReversal::class, + \Stripe\UsageRecord::OBJECT_NAME => \Stripe\UsageRecord::class, + \Stripe\UsageRecordSummary::OBJECT_NAME => \Stripe\UsageRecordSummary::class, + \Stripe\WebhookEndpoint::OBJECT_NAME => \Stripe\WebhookEndpoint::class, + ]; +} diff --git a/vendor/stripe/stripe-php/lib/Util/RandomGenerator.php b/vendor/stripe/stripe-php/lib/Util/RandomGenerator.php new file mode 100644 index 000000000..b11e445d2 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Util/RandomGenerator.php @@ -0,0 +1,36 @@ + a list of headers that should be persisted across requests + */ + public static $HEADERS_TO_PERSIST = [ + 'Stripe-Account', + 'Stripe-Version', + ]; + + /** @var array */ + public $headers; + + /** @var null|string */ + public $apiKey; + + /** @var null|string */ + public $apiBase; + + /** + * @param null|string $key + * @param array $headers + * @param null|string $base + */ + public function __construct($key = null, $headers = [], $base = null) + { + $this->apiKey = $key; + $this->headers = $headers; + $this->apiBase = $base; + } + + /** + * @return array + */ + public function __debugInfo() + { + return [ + 'apiKey' => $this->redactedApiKey(), + 'headers' => $this->headers, + 'apiBase' => $this->apiBase, + ]; + } + + /** + * Unpacks an options array and merges it into the existing RequestOptions + * object. + * + * @param null|array|RequestOptions|string $options a key => value array + * @param bool $strict when true, forbid string form and arbitrary keys in array form + * + * @return RequestOptions + */ + public function merge($options, $strict = false) + { + $other_options = self::parse($options, $strict); + if (null === $other_options->apiKey) { + $other_options->apiKey = $this->apiKey; + } + if (null === $other_options->apiBase) { + $other_options->apiBase = $this->apiBase; + } + $other_options->headers = \array_merge($this->headers, $other_options->headers); + + return $other_options; + } + + /** + * Discards all headers that we don't want to persist across requests. + */ + public function discardNonPersistentHeaders() + { + foreach ($this->headers as $k => $v) { + if (!\in_array($k, self::$HEADERS_TO_PERSIST, true)) { + unset($this->headers[$k]); + } + } + } + + /** + * Unpacks an options array into an RequestOptions object. + * + * @param null|array|RequestOptions|string $options a key => value array + * @param bool $strict when true, forbid string form and arbitrary keys in array form + * + * @throws \Stripe\Exception\InvalidArgumentException + * + * @return RequestOptions + */ + public static function parse($options, $strict = false) + { + if ($options instanceof self) { + return $options; + } + + if (null === $options) { + return new RequestOptions(null, [], null); + } + + if (\is_string($options)) { + if ($strict) { + $message = 'Do not pass a string for request options. If you want to set the ' + . 'API key, pass an array like ["api_key" => ] instead.'; + + throw new \Stripe\Exception\InvalidArgumentException($message); + } + + return new RequestOptions($options, [], null); + } + + if (\is_array($options)) { + $headers = []; + $key = null; + $base = null; + + if (\array_key_exists('api_key', $options)) { + $key = $options['api_key']; + unset($options['api_key']); + } + if (\array_key_exists('idempotency_key', $options)) { + $headers['Idempotency-Key'] = $options['idempotency_key']; + unset($options['idempotency_key']); + } + if (\array_key_exists('stripe_account', $options)) { + $headers['Stripe-Account'] = $options['stripe_account']; + unset($options['stripe_account']); + } + if (\array_key_exists('stripe_version', $options)) { + $headers['Stripe-Version'] = $options['stripe_version']; + unset($options['stripe_version']); + } + if (\array_key_exists('api_base', $options)) { + $base = $options['api_base']; + unset($options['api_base']); + } + + if ($strict && !empty($options)) { + $message = 'Got unexpected keys in options array: ' . \implode(', ', \array_keys($options)); + + throw new \Stripe\Exception\InvalidArgumentException($message); + } + + return new RequestOptions($key, $headers, $base); + } + + $message = 'The second argument to Stripe API method calls is an ' + . 'optional per-request apiKey, which must be a string, or ' + . 'per-request options, which must be an array. (HINT: you can set ' + . 'a global apiKey by "Stripe::setApiKey()")'; + + throw new \Stripe\Exception\InvalidArgumentException($message); + } + + private function redactedApiKey() + { + $pieces = \explode('_', $this->apiKey, 3); + $last = \array_pop($pieces); + $redactedLast = \strlen($last) > 4 + ? (\str_repeat('*', \strlen($last) - 4) . \substr($last, -4)) + : $last; + \array_push($pieces, $redactedLast); + + return \implode('_', $pieces); + } +} diff --git a/vendor/stripe/stripe-php/lib/Util/Set.php b/vendor/stripe/stripe-php/lib/Util/Set.php new file mode 100644 index 000000000..017f92978 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Util/Set.php @@ -0,0 +1,44 @@ +_elts = []; + foreach ($members as $item) { + $this->_elts[$item] = true; + } + } + + public function includes($elt) + { + return isset($this->_elts[$elt]); + } + + public function add($elt) + { + $this->_elts[$elt] = true; + } + + public function discard($elt) + { + unset($this->_elts[$elt]); + } + + public function toArray() + { + return \array_keys($this->_elts); + } + + public function getIterator() + { + return new ArrayIterator($this->toArray()); + } +} diff --git a/vendor/stripe/stripe-php/lib/Util/Util.php b/vendor/stripe/stripe-php/lib/Util/Util.php new file mode 100644 index 000000000..595a7d61d --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Util/Util.php @@ -0,0 +1,265 @@ +id; + } + if (static::isList($h)) { + $results = []; + foreach ($h as $v) { + \array_push($results, static::objectsToIds($v)); + } + + return $results; + } + if (\is_array($h)) { + $results = []; + foreach ($h as $k => $v) { + if (null === $v) { + continue; + } + $results[$k] = static::objectsToIds($v); + } + + return $results; + } + + return $h; + } + + /** + * @param array $params + * + * @return string + */ + public static function encodeParameters($params) + { + $flattenedParams = self::flattenParams($params); + $pieces = []; + foreach ($flattenedParams as $param) { + list($k, $v) = $param; + \array_push($pieces, self::urlEncode($k) . '=' . self::urlEncode($v)); + } + + return \implode('&', $pieces); + } + + /** + * @param array $params + * @param null|string $parentKey + * + * @return array + */ + public static function flattenParams($params, $parentKey = null) + { + $result = []; + + foreach ($params as $key => $value) { + $calculatedKey = $parentKey ? "{$parentKey}[{$key}]" : $key; + + if (self::isList($value)) { + $result = \array_merge($result, self::flattenParamsList($value, $calculatedKey)); + } elseif (\is_array($value)) { + $result = \array_merge($result, self::flattenParams($value, $calculatedKey)); + } else { + \array_push($result, [$calculatedKey, $value]); + } + } + + return $result; + } + + /** + * @param array $value + * @param string $calculatedKey + * + * @return array + */ + public static function flattenParamsList($value, $calculatedKey) + { + $result = []; + + foreach ($value as $i => $elem) { + if (self::isList($elem)) { + $result = \array_merge($result, self::flattenParamsList($elem, $calculatedKey)); + } elseif (\is_array($elem)) { + $result = \array_merge($result, self::flattenParams($elem, "{$calculatedKey}[{$i}]")); + } else { + \array_push($result, ["{$calculatedKey}[{$i}]", $elem]); + } + } + + return $result; + } + + /** + * @param string $key a string to URL-encode + * + * @return string the URL-encoded string + */ + public static function urlEncode($key) + { + $s = \urlencode((string) $key); + + // Don't use strict form encoding by changing the square bracket control + // characters back to their literals. This is fine by the server, and + // makes these parameter strings easier to read. + $s = \str_replace('%5B', '[', $s); + + return \str_replace('%5D', ']', $s); + } + + public static function normalizeId($id) + { + if (\is_array($id)) { + $params = $id; + $id = $params['id']; + unset($params['id']); + } else { + $params = []; + } + + return [$id, $params]; + } + + /** + * Returns UNIX timestamp in milliseconds. + * + * @return int current time in millis + */ + public static function currentTimeMillis() + { + return (int) \round(\microtime(true) * 1000); + } +} diff --git a/vendor/stripe/stripe-php/lib/Webhook.php b/vendor/stripe/stripe-php/lib/Webhook.php new file mode 100644 index 000000000..b9db2d6c0 --- /dev/null +++ b/vendor/stripe/stripe-php/lib/Webhook.php @@ -0,0 +1,42 @@ +webhook + * endpoints via the API to be notified about events that happen in your Stripe + * account or connected accounts. + * + * Most users configure webhooks from the dashboard, which provides a + * user interface for registering and testing your webhook endpoints. + * + * Related guide: Setting up + * Webhooks. + * + * @property string $id Unique identifier for the object. + * @property string $object String representing the object's type. Objects of the same type share the same value. + * @property null|string $api_version The API version events are rendered as for this webhook endpoint. + * @property null|string $application The ID of the associated Connect application. + * @property int $created Time at which the object was created. Measured in seconds since the Unix epoch. + * @property null|string $description An optional description of what the webhook is used for. + * @property string[] $enabled_events The list of events to enable for this endpoint. ['*'] indicates that all events are enabled, except those that require explicit selection. + * @property bool $livemode Has the value true if the object exists in live mode or the value false if the object exists in test mode. + * @property \Stripe\StripeObject $metadata Set of key-value pairs that you can attach to an object. This can be useful for storing additional information about the object in a structured format. + * @property string $secret The endpoint's secret, used to generate webhook signatures. Only returned at creation. + * @property string $status The status of the webhook. It can be enabled or disabled. + * @property string $url The URL of the webhook endpoint. + */ +class WebhookEndpoint extends ApiResource +{ + const OBJECT_NAME = 'webhook_endpoint'; + + use ApiOperations\All; + use ApiOperations\Create; + use ApiOperations\Delete; + use ApiOperations\Retrieve; + use ApiOperations\Update; +} diff --git a/vendor/stripe/stripe-php/lib/WebhookSignature.php b/vendor/stripe/stripe-php/lib/WebhookSignature.php new file mode 100644 index 000000000..1bb22db8f --- /dev/null +++ b/vendor/stripe/stripe-php/lib/WebhookSignature.php @@ -0,0 +1,140 @@ + 0) && (\abs(\time() - $timestamp) > $tolerance)) { + throw Exception\SignatureVerificationException::factory( + 'Timestamp outside the tolerance zone', + $payload, + $header + ); + } + + return true; + } + + /** + * Extracts the timestamp in a signature header. + * + * @param string $header the signature header + * + * @return int the timestamp contained in the header, or -1 if no valid + * timestamp is found + */ + private static function getTimestamp($header) + { + $items = \explode(',', $header); + + foreach ($items as $item) { + $itemParts = \explode('=', $item, 2); + if ('t' === $itemParts[0]) { + if (!\is_numeric($itemParts[1])) { + return -1; + } + + return (int) ($itemParts[1]); + } + } + + return -1; + } + + /** + * Extracts the signatures matching a given scheme in a signature header. + * + * @param string $header the signature header + * @param string $scheme the signature scheme to look for + * + * @return array the list of signatures matching the provided scheme + */ + private static function getSignatures($header, $scheme) + { + $signatures = []; + $items = \explode(',', $header); + + foreach ($items as $item) { + $itemParts = \explode('=', $item, 2); + if (\trim($itemParts[0]) === $scheme) { + \array_push($signatures, $itemParts[1]); + } + } + + return $signatures; + } + + /** + * Computes the signature for a given payload and secret. + * + * The current scheme used by Stripe ("v1") is HMAC/SHA-256. + * + * @param string $payload the payload to sign + * @param string $secret the secret used to generate the signature + * + * @return string the signature as a string + */ + private static function computeSignature($payload, $secret) + { + return \hash_hmac('sha256', $payload, $secret); + } +} diff --git a/vendor/stripe/stripe-php/phpdoc.dist.xml b/vendor/stripe/stripe-php/phpdoc.dist.xml new file mode 100644 index 000000000..b1ea92fad --- /dev/null +++ b/vendor/stripe/stripe-php/phpdoc.dist.xml @@ -0,0 +1,31 @@ + + + + build/phpdoc + + + latest + + + lib + + api + + + php + + stripe-php + + +