* Lb* H? HE H
!* <t
<H
* HEHn uHtEH^ @ HPHHt+;puL) ~H H
) L * dH) L) Q(a H6H?Ad IHL^Off. AWAVAUATAHUHSH HILH;J=)o Aƅt&Et!+p HD HcH> D H=A 1DH5) M = A tL=q Ly]H= L1H(H= H5 kEpHcJH= H5=) H1臏an x D9 5Zn E1 Mn Aƃ+wzHD HcH> EMtXH=a H5( A k= tL% L'YH=0 L1H'H= H5 jEu:HD[]A\A]A^A_f EuAum uHWm uH= DH5S( 1 D H= H5 ( ej>m +w)H2D HcH>D5m E f D E1EMtAH=D H5:! 1L.|H=' HH= H5 1ڍEfMtH= H5 1趍L @ E
l HVE1EMuE1EMPE1M"z D ~B? ~Hq @ u> @ tX u)H& tH~H& + t[fttuH f D HY H& H H Hx AUAI͉AT1EH
f& UH L HHHHt[p9uEH EAH\ HH5F HD1DLH6H1]1A\ A]. @ H
< ff. @ AWIAVAUIATIUSHDt$P\HIcHD$H tK EF H|$X : HD$XHMLLH5qF LAQ=f. E H|$X HD$XHMLLH5E LAQH1_AXLHD$XH^5HD$H[]A\A]A^A_f. uE~sID$ H8 tE1L-E f D I\$HLLH1II $ILCH APMgXH3HZS4ID$ L90wj I|$ VI$EL@H
@ EMLLH5mE H1 f D E ID$ E1L-D H8 f D I\$HLLH1II $ILCH APM蟉YSH^H34ID$ L90wEMLLH5uD H1cf D I|$ nI$EL@Hff. ATL%1# US u L%$# H(# LD@ui @ tQH# L%
# LD0HmH= I[HL]1H5" A\驈f tt/xE[]A\;LH5" HH= [1]A\l @ ;LH5" H @ ;LH5" Hff. AWAVAUATUHSHH(D% HT$dH%( HD$1HD$ Eu# H=b l [ HE1NL= ) HT$1LmAąg H|$ LZ H5 HD$L`LLd$菀IHm Iv1LfA.qmAąuJL H5! ?L%HD$dH+%( H(D[]A\A]A^A_ t$L
e E11h H
1A SH53 t$(AVjPH0HpH= H5LB E1蔆U S\IHtsHMcL1Ҿ. H)f H=y H5A 1;f D H=Y H5 1L$f D H=1 H5j 1E1VVH
LH5 1H= &on H5P H=Y ff. SHHdH%( HD$1HH$ DtH$HT$dH+%( uH[Uff. @ AUATUH`dH%( HD$X uHT$XdH+%( uHH`]A\A]ÐLl$HILHT$t1L;d$uLHL}0.Uff. ATUSH`dH%( HD$X u HT$XdH+%( uGH`[]A\ Ld$HLHT$)tɉ1H;T$uHL/T AWAVAUATUSHHH|$1zH` HH[HHuD$ L5 L- L% HM8HU0Hu(H|$D$D|$@jH= H5? D1A 萃=! tL= H}(QH= 1LH3 H= H5H P_H HHt3If D LA#GH=X IEL1IIHuH=7 H5 1H|$11Ҿc &, H5& H H= HD^u%HmPHH []A\A]A^A_ @ Hu(H|$vt;Hu0H|$P;t)E@uUHM8HtH|$ X +Hu1H[]A\A]A^A_fH=Y H5$ 1\f D H|$11Ҿi =+H?1U HH5 SX H{HHtrH{H1H HHCP H)XHHE H] HCHHt PSHXPH []f D C H[]H
^ X H5 1H=S v!h AWEAVAAUATAULSH0dH%( HD$ 1H\$hSSZYAŃu
{ H;H5 \H Ht H HPHHtD;`uA A
A
t]AtW1A H HK HԼ fHPHH/ D;xuH;H5n 18 EHo H;H HDH5 1
HD$dH+%( H(D[]A\A]A^A_ @ 1A HD H;1H5 L$ H$DH$L$ f1= = wJ= G = u D8VHH" H;d[H;DH5 1P = uHt&%=MH;H#[뽐H JHH HH
HD$(111ILD$1*2HOHT$H;H5 1~Q D D} EH;AAH4 H5 1~Ho HtZHc HPHHtCD9xuH;H5 1L~ HLH;H-Z UH
H u Hu HHHHt;PuH H H D HPHH ;puH;HtxH5 1};D} EH;AADf1= D} EH;AA DH5f9 1O}DLHH;DH5 1&}H;H5U 1}vMf D ATIUHdH%( HD$1-|1LH/? w
HH6 T$Ht$ HsL11Ҿ HB HD$dH+%( u
H ]A\L AWAVAUATIUSHHsHtoLHcIHt\H{ ut{tnHLA rHu<{u S LM= H= H5 1{E1HD[]A\A]A^A_f. H= H5^ 1{H=Ի H5Z 1{H= H7H= H5: 1r{H= L7H= H5H
1N{f K2IsTIkTHMtSHk ucHXLXL/^f. H= H57 z HXLX1]1LH*uM HL5o1LL)AŃVHt}MHLLHtb5 H\ HH9H߅
XLXL<]+HW1WL ]1 @ ATUHSHHHCH H HHHPHp LH(L@xLHCHE1H56 H= HH(1yyH{ HC H D[]A\f E P A ȐH~-H=[ H5 AHH1y밐H=9 H5 A xyfAWAVAAUATIUHHSH8T$dH%( HD$(1}`EB HE1E11j 11LhD$A[A]u,HD$(dH+%( H8[]A\A]A^A_f H5h HQT H5d H:TD$E HD$ 1L|$ HD$Lt$ Ll$$f|$l HLMt$E1LLY^tH5\ HSD$ T$ - wHI. HcH> |$$GHHk HH5x 1zw|$ l f D ; $LHD$(dH+%( H8HH5- []A\A]A^A_+S H5 HS H5 HS H5c HR| @ H58 HRd @ H5
HRL @ H5 HR4 @ HLME1t$LLbXZ HE1E11j 1ҾLsbD$AYAZH5K H,R T$ HH5 1
v|$ t"DH5 HH1u| @ T$ H5 H1u]0FAWAVAUATIUHSHHc HIx$L- H5# H1E1yuH LHu(H1H5T TuH/t;HHH9rL` L9tLǺ' ILh [ H ATUSHHj H H>H5 H ܩ H THH5*. H9AHA t|L% 1E1L. H=:. L
6.
D HtCL9H9u&L9t!8 u MtLH5 H= 11[]A\Ð tRH5 ItBH5h L{It/H5 LhIt H5~ LUIA1Eu _ E 닐@ E o D @@ E O D G E
0f D @ƀ E D W H5/ HtwH5 LHtdH5] LH=s 1LH5 H H-u L% @ HuHH HcEHtL1fE i H59 G H5ݛ LG H58 LG H5 LG H5$ LGt=H5 LGt*H5 LpGtH5R$ L]G H5% LH=; 1H5M H H-= L% HuHH HcEHtL1f D o E (f D @ n E D E f D @N E D H=d 1:[1]A\ HH5& 1H== H5Q HtH-E L% @ HuHHtHcEHtL1f D HH5Ƥ 1H= H5 H`H- L% HuHH7HcEHtL1lf. HH5V 1H=m HH5 HH-q L% HuHHHcEHtL1f. HH5 1H= H5 HH- L% HuHHWHcEHtL1f. HH5v 1H= hH5 HH- L%4 HuHHHcEHtL1 f. HH5 1H= H51 HH-! L% HuHHwHcEHtL1f. HH5 1H= H5 H0H- L%T HuHHHcEHtL1)H$: u=H9t8HHHv;"t I$ D Hut D H1D+HT$dH+%( u H[]A\A]+,ff. AUATUHdH%( HD$1H$ HO + O wHP HHcH> A fHD$dH+%( ) HD]A\A] @ HA @ H= 1
<ƅxHA HA ?x HA ?X HA }?8 HA ]? HA =? HA ? HA > @ HA > HA >x HA >X HA }>8 HA ]> HA => HA > HA = HA = HA =x HA =X HA }=8 H5 HE1DA H5i 1HE1-AH5I 1HE1UAH=) HAąH4$HA d* H= 1
8ƅsHA Hh H= HH HA @5 D H= 'Dž 7H]"HAąHQ H5 H= 1 H=) 1LIH HH[AąL!H H5 1H= wHЖ H5y 1E1H=* hSH H5U 1E1H= D/H H51 1E1H= H5? H= S7 H5' H=x ;7 H5 H= #7n&ff. AWAVAUATUSH H- dH%( H$ 1Hcr Hϕ H< HHD H|$Ht8-t0E1H$ dH+%( S H D[]A\A]A^A_ÐS 8-u
x- x-Lx = LHs fH HHH
2 L5 M.M E'AhuEgEuH5 L5tLL5u~AF H
۔ tW-tRH PуFwJH
HcH>x 9LxH9 H QH? Eff D MnIMJH HR H
ȕ H L= D`z & ctA w H
H4H= HT$ nIHۓ AH5 H=A t L- Ht$(ALHD$(HcЉD$ H9! AV p NIHY H5 1H= LH5ޒ 1AH= hH- 1Ht$(D HHHT$(: H9 H5 Hu
D#?H= Ht$ &A @ H= Ht$0 Hp H5 1AH= fH=I Ht$(_ D H-$ 1Ht$(D HH HT$(: HpD#A5fHL$HT
H HÑ U D$H% = @ -( ;"땅IH{ H5$ 1H= LH5 H='4 1!H M1AH5א H= iLH5 1AH= HLH5 H= 1; HH5a HcR HH Ht.9 t)HttH< HL>Ht9 u8H HtH5 H=Y 11Hf. H5 H= 11 H Ht H5͏ H= 11 HH5 H= 11af AWAVAUATUSHH L?dH%( HD$x1M I L- Lf. L9t+A~ D`-tԴHEdD9ALI~IHuø 9NʼnD$ HA HD$I9 E1 D LsH I9Ǹ DDMH* LDL;|$& H0 I9 H I9 fo HD$ D$p HD$H )D$ )D$0)D$@)D$P)D$`I9 EH H5[ HDL- 1LH-G H3HAǸ DN> H HD1 { Aǃ-t 芳LH1 NANjL$ 9ND9 D)HD Ht$L1H=O L{HMHD$xdH+%( 3 HĈ []A\A]A^A_D$ L%A H= 1L0L;H I9 LH= 1 L;HU HD$My { A -H5 H1D$p D$ fo6 )D$ )D$0)D$@)D$P)D$` H= 1H5{ L1q @ H= 1Z D HcD$ f D H HD$O f. AUATUSHHtiHIHE*H5 ~hLH~RH:Aą Ht!X Hٺ HEH5& HtxEuLA HD[]A\A]H5o H= 1E1KH=ы |HD[]A\A]f D 1H۾i H1HHuH5 H= E1RKH={ &sH=i H5v 1+KXf D HtWUH- SHH H{(H{0>H{8UHH[HHA 1HuH[] D ff. @ ATUSH/H IH}H q Hu_ @ uL
l E111
HE0H} H} Ht1HU8LH 1 t\HmHHtcH}Htqu I1ɺ HE(Ht/H}HuH}u L
1E11HE0Hu 1[]A\f [ ]A\f D H}H t H= H5| 1I[1]A\HuI$ f D ATUHSHdH%( HD$HH$HY H HcH>1HT$dH+%( H[]A\ÐH$HPH=! D L$$I|$ H= H H5 1HH= LHE 1kf H$Hx tH H$H HE HP * H$@@
H$' L$$I|$ t\H=E Hއ H5H 1 H? H tLH$HE H ID$ fHه ID$ |f. H=ɇ Hb H5# GL$$ D H= H: H5q 1\GL$$ff. AWAVAUATIUHSHHdH%( HD$81HD$ HuuH='H5 LI1FMtLH5x L1F1HT$ Hq@yMHD$8dH+%( ^ HH[]A\A]A^A_f. HH56 LH1tFfLD$0HL$ HHD$0 HT$ Ht$ HD$( LL$( LD$(AI HD$0 H5: J\ ;?IH HHwHH
f D HHBCBH9uG H|$( H L$ LL
T$ H5 LFH1AVDD$-zEXHZ`H H5H L1VE H5 L D O< H\$0MOM9 LϺ H58 LD$L $5>L $LD$HI M K4>LH
f HHBCBH9u D H|$ H tDH5 L1uDEH H HDf LH=o LH 1H5 'D H
L1L$H5փ H= :L$H= H
1H5 1f AVIAUATUHHS172fH sHI LLHIW
~3HH9|L Aąt]A []DA\A]A^ MH^ LH=\ LDH51 1LE1CH== [D]A\A]A^ @ H=! H5 H= [D]A\A]A^ff. f AUAATUHS1HEI1Mt/Ht$PL/t L k LHH$L$H[]A\A]A^A_f. Ht$I3HHtkMLT$t!LHLT$E1~1tLT$MtLHE1{H @ H5AH @ E11Gf D IHtMtLH1 H<$ tH4$L8H|$P 1E1ff. UH$ H5S HD oHH5H> HH5 ]I f ATIUHHH= H HtSMtNLH53 H HHtp11Ҿ t.HH5d &H1]A\ D 1H]A\f D H=i H5J
H=V 11Ҿ f D H= LH5' 1> 룐 AVAUIATIHUSv&H% LH4 HEIHtHHgu#L;& []A\A]A^f. LH5 L1L>1L-6 D= A tL5 HL1LH LL
H9|[]A\A]A^ [L]LH5A A\1A]A^= @ ATIHUHHuH= D1H1ɾL Hp LH52 HH HDH1]A\V=f D HLH5* 1]A\8= AWAVAH5 AUAATE1UHSHdH%( HD$1<~AA E u]H5 H1E1< HA11E!_HD$dH+%( X HD[]A\A]A^A_f H5 H1h<A!{ H$IHto1HD2unH<$E1E1H5 H1E1 M
L f D E1E1E1E1L= H= CЉT$,E1E1L=r Ht$0LMLLHl$HLd$@$LD$8tHLD$8LL|$I HT$LH# ItAtHT$Ht$0LD$8IHt$01LLD$86LD$8XHt$1LLD$8ELD$87HD$IHt[H\$8LItCHT$LHK#uIE1L=x E1LD$8IE1E1L=[ IH\$8H$ 1LLD$@HHD$8LD$@H|$ LD$@L= LLD$@HI Ht$HD$H9 H|$8LAL7Ht$8HzHHH
IJJLHH)H)L$HH|$H)HH9rHt$8H1Ht$LLL$HLD$@LD$@LL$H3 $ H\$PLL|$@ILHHD$HHT$ LH!U Hl$HuIHt$81Hl$XLH\$PLL|$@LD$@@LD$@LL$X H|$ LLL$PGLD$@LL$PHI H1Ht$8L$ Ll$8MHl$@HH\$XL HT$Ht$0H2!o H1HHn H1HH+ H|$P HT$LH Ht$01H[ D$,HH9< Ht$1Hc HHD$PFHT$LCL|$Ht$0LLD$8Lc LD$8MBHD$HH
H5]c H={ 1D\$L$LT$LL$D\$L$}1HD$LE1zHT$Ht$0HT$LH MHl$@Ll$8I>HT$ LH zIILE1L|$@ILl$Ll$8LH\$XHl$@LH|$ L LLHHH $ $5j 6 $ $ H5 $
1ɉ?<>@|HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@| HHu$ $ $
1ɉ?<>@|
HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@| HHu$ $ $ 1ɉ?<>@|!HHu$ $ $ 1ɉ?<>@|%HHu$ $ $ 1ɉ?<>@|)HHu$ $ $ 1ɉ?<>@|-HHu$ $ $ 1ɉ?<>@|1HHu$ $ $ 1ɉ?<>@|5HHu$ $ $ 1ɉ?<>@|9HHu$ $ $ 1ɉ?<>@|=HHu$ $ $ 1ɉ?<>@|AHHu$ $ $ 1ɉ?<>@|EHHu$ $ $ 1ɉ?<>@|IHHu$ $ $ 1ɉ?<>@|MHHu$ $ $ HL$H?<>@|QHHu$ HH? HUHHWPV $ $ H5 $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@| HHu$ $ $ 1ɉ?<>@|
HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@|HHu$ $ $ 1ɉ?<>@| HHu$ $ $ 1ɉ?<>@|!HHu$ $ $ 1ɉ?<>@|%HHu$ HL$H?<>@|)HHuHH, H" E1E1E1E1tff. AWI AVL5
AULATUSHH5 H H= Z dH%( H$ 1H H Hl$ { CH=` HcH>f. D$ L[ L-y f. 1HS HL$ L$ HA Ld I)1LH LL~HII)NjD$ { HKH> H LL1ZHcH=Y LILH5 LO 1H(A$ H HH$ dH+%( . H []A\A]A^A_D$ L7 L-[ D D$ L+ Mf D$ L Mf D$ LϺ L- D D$ L Myf D$ L MYf H LL1 A IXfK1H LLfHII)Yff. @ AWIHAVAUIATUHSH8 dH%( H$( 1D$ c Ld$ 2f LH5C H1H9\$ L=: HIH IM)A Icҹ LLLT$HD$LD$1LLT$LIPBD s[LH5 H1G9\$ cH$( dH+%( H8 []A\A]A^A_Ð11LL H$( dH+%( uAH5 H8 H1[]A\A]A^A_ H$( dH+%( u H5 ATIUHSH dH%( HD$1D$ HD$ H|$HH|$H)HuMuOH|$ t_1HtH|$ IE1111UD$ HT$dH+%( u2H []A\ HLH 1*f. Ht!0>wH @@ @@H AVIAUAATUSHH dH%( H$ 1<HH H5 LIHt
1MMtrH HL 1HIH LHiH$ dH+%( H L[]A\A]A^ E
IHtMHH2uH=S LH5 hLPH=S E11c @ E1 H=iS H5 1+f H=IS LH5
Lxf D H=S H5 1vA AVAUATUHH dH%( H$ 1= L5 IH1L_ L L 1HL$ Lc LLLHy t HLA ExWH$ dH+%( H ]A\A]A^f H= R H52 1H=Q 蟸1 H=Q HL1H5 H=S HL& @ H=Q LH1H5ƴ eH=TS f AWAVAUATIUSHH dH%( H$ 1]= L$ L1HH LL$ L5 < L LLP] H: 1 HL L0] H 1HLHH HsH HI E~fLLHH HR H5ٳ HHT HD1+H ' @ H=AP H5j 1H=,P 1H$ dH+%( u_H []A\A]A^A_LHH=O L1H57 f D L H=O L1H5 ff. AWAVAUATUHSH dH%( H$ 1耺= L$ H1IL% H LL$ H$ WLH L` L1;LH LO[ H1 H 1L$ L_ H L L1L [ HH LH y# t HL LLyQ tEt@H=IN LL1H5f H=O yLHHL^LHuA E H$ dH+%( H []A\A]A^A_ H=M H5 1
H=M W1 H=M HL1H5 U
H=DO HL @ H=aM LH1H5~
H= O H=1M LH1H5N H=N aLLv
gH=J H5& 1E1h
J H=J H1E1H5 E
'H$H=eJ 1MH5C $
H=HJ H5٭ 1E1
H=+J H5 1E1 H=J H5 1E1 H$H=I H5 1 f. AWAVAUATUSHH(?/t$ HT$B IH Ls H5}J L HH C1ۄ+ Ld$I IA$IAt<=uA$ A> M|$
AFIVL LI̷L9u纷 LH跷H|$ -H|$#LH$H dH+%( HX D[]A\A]A^A_H=8? H5a 1E1AHD$ L=? HD$ L$ 6D> E D$ E H5> H=> IH; HnH|$XH衽HH D$ E Ht$L7 H|$`H5x H\$xH5j H $ E1HLHt$``- Ht4L 11H$ Ht Hc$ H$ Ht$LO H|$(`LHU2 $ n H$ E11LHA L
Ht$HHp 胬Ht$HL膷
H|$@
H- = H $ H HH1HT$@LHH=< 蚲
$ Ht$(L莻[ $ uhH|$A۟HHu X f D HDnHT0 DHƅyLHsH L11H蟷H$8 HH H|$X1 L=< H= LHH$( H/ H$8 ? HD$PL$ Hx L 聯HH H=; H$8 H5 1hH=; H5 1SHE H D DLuH|$I(LH HHHDLLEfAƅyAtqyH$ L$ Lϖ H$ Ht H$ L@H$ H
HtHHIWH=R8 H5 1e L$ 1E11H="8 H5 L$ IWL=8 >HD$PL Hx訫HHtCH=7 H$( H5 1H=7 H5% 1~H $ Q H=7 H5) 1JLrH$ H=c7 HkH$ H=E7 1H5 $ ugH=&7 H5g 1H=7 11ɾ 胙H3 H$ Ƅ$ H $ 5 1/HLH$ $ P$ P$ P$ $ $ $ U$ P$ P$ $ $ $ P$ $ $ $ L$ L$ H$ H$ ;HĠ AH=/ EHmHD[]A\A]A^A_ LH AƅH=[/ H5 1 H5 1
H$ H=!/ 1H[fH= / H5 1E1RAGH=. H5i 1A' AU1ATIUHm HHpdH%( HD$h1H蛗H LH5@ CH<$ڰ _ - H<$TH5 L1H<$HHD$hdH+%( k Hp]A\A]f. = Ll$H<$LD$P LH5w C H<$ҽLH5 L1|v HȜ= e11Hﾆ 茖HH5 LH1.1f H<$H5 LHHH HD1H<$'H<$A{褻DH5 LH1 H<$H5 L1 ? fD$ @ AW1AVAUATIZ UHLSHT$ 1胕c Lc H5Q- IILMH$HZ H $1ҾZ LL=~< H3H52 HAEL-Љ Lt
fLH3LHwLHH1L9uH<$ H5, D$ H5ӑ Hr1ɾ] LH蜔 1L5; H$fLHL21Hھ] L`LL{LHH1H9 $uHHH5y []A\A]A^A_ H[]A\A]A^A_uH5 HH
LH5u* H=B ي @ AW1AVAUATUHHo SHdH%( HD$1H虓 H5j HA1=L= L5 L-Ɛ 7f D LH1 H$A9t8H5z: HH$tSuLHH$A9uH5x HHD$dH+%( u;H[]A\A]A^A_ LHuH5^ Hqa AWAVAUATUHSH8dH%( HD$(1HIHHD$ީH=G) H5 H1H6 H.H薷H=) H5ȏ H1H=( 1HoMD H=( H5 A =,* tL%* L#H=( 1LH?H=( H5Tw \1HL$ Hl 舑H? 1HL$ HkH H5K( HӠH=<( HtH H= ( HUHD$(dH+%( H8[]A\A]A^A_f11Ҿn HH 1Ҿn HL$ HѐH=' H5^ I{M Ht$ H1L57 lIMtVLH=u' H=HD$ HHpHt$ I9 H*IHtH=;' LMuHD$ H="' f8 uH5 D H5 HD$ H=& H5 1HD$ H=& H5l P1O @ H=& H5mu uzH|$ H=& H5 1O f. H=i& H3 HT$ H=D& H50 1|$ ǴH= & H5 H1f. H5 * H5H H=g f AWAVAUATIHUHSH8dH%( HD$(1Ll$ + 1HLt$ Lal HLQl1Ll HoHt |$ N 1L龍 HLHt?HT$ H5 L1HD$(dH+%( w H8[]A\A]A^A_f D LHmtȋ|$ `WH5< LH1f. L1Ҿg H辍HÅH5 Ld DsE1H f D HD$ LB8M H f L@HMtc;PuMtH5 LLD$LD$LLIGM9tbI 蛲H5> LH1fMtH5 LT$蘿T$H5 L1IGM9uH5fr Lkѳ AUIȉH ATIUH H dH%( H$ 1IL{= wCH
ML1 tLH1H5 11Ҿ H聅H$ dH+%( u
H ]A\A] ff. AWAVAUATUSH H $ HxL)L$ H|$(LHt$0HT$ HL$LL$dH%( H$h 1H HtH M L 1L H
s$ C L$` LLK X
LHHtx
t
LHH = E H L HHD$Lԉ H1sr MHL 1Yr$ $` POST Lp MH
L 1rH
LLA 1H=$ ~1; 2 LH
1Ҿi R$ E1H$h dH+%( ; Hx D[]A\A]A^A_Ð11Ҿi HHHD$XH 1HT$X H|$X~Lه 11H
} L qH
LL~H|$ t#L= H\$ LH;H LAHD$H @ $` GET L$d tE$` POST; L" f LH} LE1b^HʘH4 D DHuLD$MHLL=
AH蹂A9|Ļ f. uH| LL]H(HIMHH LIHl| LH]H1Ht$LE1E1L蹛YH^草 D HD$dH+%( * H([]A\A]A^A_ w * HQH LH{ L
]H%= HrHH H>H5 LH蜒H褜LH59 H肒LH觨H= w H+{ LL p\H=Y H5Z{ 1HH=< HH=- H59{ 1HLHL w Hz LL[HL HH HHHIHd DHgz LH[HHLLt$E1E11L謙LXZ耇 H=Q H5 1 H6H=/ HH= H5_ 1 D 1H= H5y 1of D H= H5y 1f D H= H5y 1{of D H= H5y 1[ f D H=y H5Ky 1;HCHt$1HwH|$N蠊 &e HH apps/lib/cmp_mock_srv.c apps/cmp.c mock server received error:
pkiStatusInfo absent
pkiStatusInfo: %s
errorCode absent
errorCode: %ld
errorDetails absent
errorDetails: wrong certificate to revoke %s: Use -help for summary.
Unknown item name %s
Supported types:
%s
Error reading PEM file
asn1 Can't find 'asn1' in '%s'
'%s' is out of range
Error parsing structure
Can't parse %s type
Error: offset out of range
Error writing output
Error parsing item %s
apps/asn1parse.c kur p10cr genm unspecified CAkeyTime holdInstruction apps/ca.c Memory allocation failure
apps/lib/apps.c row exp_data row ptr failed to update database
TXT_DB error number %ld
ERROR:name does not match %s
Revoking Certificate %s.
Unknown CRL reason %s
Invalid object identifier %s
revocation reason rfc_822 iso_8601 No configuration used
Using configuration from %s
default_ca oid_file string_mask utf8 yes unique_subject database row serial# Serial %s not present in db.
%s=Valid (%c)
%s=Revoked (%c)
%s=Expired (%c)
%s=Suspended (%c)
%s=Unknown (%c).
Error verifying serial %s!
private_key Error getting password
CA certificate preserve msie_hack name_opt Invalid name options: "%s"
cert_opt copy_extensions new_certs_dir %s: %s is not a directory
in entry %d
generating index
Updating %s ...
%s=Expired
Malloc failure
UNDEF default_md no default digest
email_in_dn no message digest is %s
policy is %s
rand_serial x509_extensions default_startdate default_enddate default_days next serial number is 00
next serial number is %s
error on line %ld of %s
Signature ok
template certificate error unpacking public key
CERTIFICATION CANCELED
writing new certificates
writing %s
Database updated
crl_extensions crlnumber default_crl_days default_crl_hours making CRL
signing CRL
no input files
certificate to be revoked error setting CRL nextUpdate
error setting CRL lastUpdate
UNKNOWN OpenSSL cipher name: %s
Error in cipher list
0x%02X,0x%02X - %-45s - %s:%s:%d:CMP %s: %s %s%s
actually sending actually using int: str: trusted TLS certs extra certificates for TLS TLS client private key certificate to be updated http%s://%s:%s/%s via %s untrusted certificates certs trusted by client PBMAC extra certificates for CMP PKCS#10 CSR Subject Alternative Name recipient expected sender deleting writing %s certificate verbosity -%s Display this summary Generic message options:
cmd infotype profile geninfo template keyspec newkey newkeypass centralkeygen newkeyout reqexts sans san_nodefault policies policy_oids policy_oids_critical popo csr out_trusted implicit_confirm disable_confirm chainout oldcert revreason Message transfer options:
no_proxy keep_alive msg_timeout total_timeout unless -srvcert is given srvcert expect_sender ignore_keyusage unprotected_errors no_cache_extracerts srvcertout extracertsout cacertsout oldwithold crlcert oldcrl crlout own_trusted unprotected_requests Credentials format options:
crlform otherpass Provider options:
provider-path provider provparam propquery Random state options:
writerand TLS connection options:
tls_used tls_cert tls_key tls_keypass tls_extra tls_trusted tls_host batch repeat reqin reqin_new_tid reqout reqout_only rspin rspout use_mock_srv Mock server options:
max_msgs srv_ref srv_secret srv_cert Certificate of the server srv_key srv_keypass srv_trusted srv_untrusted ref_cert rsp_cert rsp_key rsp_keypass rsp_crl rsp_extracerts rsp_capubs rsp_newwithnew rsp_newwithold rsp_oldwithnew poll_count check_after grant_implicitconf pkistatus failurebits statusstring send_error send_unprotected send_unprot_err accept_unprotected accept_unprot_err accept_raverified Validation options:
certificate chain purpose verify_name verification policy name verify_depth chain depth limit auth_level attime verification epoch time verify_hostname expected peer hostname verify_email expected peer email verify_ip expected peer IP address ignore_critical issuer_checks (deprecated) crl_check crl_check_all check full chain revocation policy_check perform rfc5280 policy checks explicit_policy inhibit_any inhibit_map x509_strict extended_crl enable extended CRL features use_deltas use delta CRLs policy_print check_ss_sig check root CA self-signatures trusted_first suiteB_128_only Suite B 128-bit-only mode suiteB_128 suiteB_192 Suite B 192-bit-only mode partial_chain no_alt_chains no_check_time allow_proxy_certs Usage: %s [options] [cipher]
General options:
Even more verbose stdname Show standard cipher names convert Only supported ciphers Ciphers compatible with TLS1 psk ciphersuites keyCompromise CACompromise affiliationChanged superseded cessationOfOperation certificateHold removeFromCRL compatible ca_default no_header no_version no_serial no_signame no_validity no_subject no_issuer no_pubkey no_extensions no_sigdump no_aux no_attributes ext_default ext_error ext_parse ext_dump outdir Where to put output cert The input cert request(s) inform infiles dateopt notext Don't ask questions ss_cert spkac Configuration options:
A config file An alias for -name The CA 'policy' to support Certificate options:
subj create_serial multivalue-rdn not_before An alias for -startdate not_after An alias for -enddate extfile preserveDN Don't re-order the DN noemailDN The CA private key The CA cert selfsign vfyopt Revocation options:
gencrl Generate a new CRL updatedb Updates db for expired cert crlexts crl_reason crl_hold crl_compromise crl_CA_compromise crl_lastupdate crl_nextupdate crldays crlhours crlsec Revoke a cert (given in file) certreq oid file of extra oid definitions I/O options:
noout do not produce any output offset offset into file length of section in file strparse genstr genconf strictpem item item to parse and print (-inform will be ignored) Formatting options:
indents the output unknown data in hex form dlimit %s:%s:%d:CMP %s: %s option argument is empty string, resetting option%s%s
%s:%s:%d:CMP %s: %s option argument starts with hyphen%s%s
variable lookup failed for %s::%s
%s: Memory allocation failure
%s:%s:%d:CMP %s: unknown cmp command '%s'%s%s
%s:%s:%d:CMP %s: no cmp command to execute%s%s%s
%s:%s:%d:CMP %s: unknown option given for key loading format%s%s%s
%s:%s:%d:CMP %s: unknown option given for certificate storing format%s%s%s
%s:%s:%d:CMP %s: unknown option given for CRL storing format%s%s%s
Adding Entry with serial number %s to DB for %s
%s: Could not allocate %zu bytes for %s
ERROR:Already present, serial number %s
ERROR:Already revoked, serial number %s
Invalid time format %s. Need YYYYMMDDHHMMSSZ
Error in revocation arguments
Invalid global string mask setting %s
Problem with index file: %s (could not load/parse file)
CA certificate and CA private key do not match
Invalid certificate options: "%s"
Invalid extension copy option: "%s"
there needs to be defined a directory for new certificate to be placed in
entry %d: not revoked yet, but has a revocation date
entry %d: invalid expiry date
entry %d: bad serial number length (%d)
entry %d: bad char 0%o '%c' in serial number
%d entries loaded from the database
No entries found to mark expired
Done. %d entries marked as expired
Successfully loaded extensions file %s
Error checking certificate extensions from extfile section %s
Error checking certificate extension config section %s
cannot lookup how many days to certify for
Warning: -enddate or -not_after option overriding -days option
error generating serial number
error while loading serial number
unable to find 'section' for %s
no name/value pairs found in %s
unable to load Netscape SPKAC structure
Netscape SPKAC structure not found in %s
Check that the SPKAC request matches the signature
error unpacking SPKAC public key
signature verification failed on SPKAC public key
Check that the request matches the signature
Signature verification problems....
Signature did not match the certificate
%d out of %d certificate requests certified, commit? [y/n] CERTIFICATION CANCELED: I/O error
Write out database with %d new entries
certificate file name too long
Error checking CRL extension section %s
error while loading CRL number
cannot lookup how long until the next CRL is issued
Error adding CRL extensions from section %s
Error setting TLSv1.3 ciphersuites
0x%02X,0x%02X,0x%02X,0x%02X - %s:%s:%d:CMP %s: NULL arg to write_PKIMESSAGE%s%s%s
%s:%s:%d:CMP %s: not enough file names provided for writing PKIMessage%s%s%s
%s:%s:%d:CMP %s: cannot write PKIMessage to file '%s'%s%s
%s:%s:%d:CMP %s: not enough file names provided for reading PKIMessage%s%s%s
%s:%s:%d:CMP %s: cannot read PKIMessage from file '%s'%s%s
%s:%s:%d:CMP %s: cannot write request PKIMessage to file '%s'%s%s
%s:%s:%d:CMP %s: too few -rspin filename arguments; resorting to using mock server%s%s%s
%s:%s:%d:CMP %s: missing -server or -use_mock_srv option, or too few -rspin filename arguments%s%s%s
%s:%s:%d:CMP %s: too few -rspin filename arguments; resorting to contacting server%s%s%s
%s:%s:%d:CMP %s: failed to load ir/cr/kur file '%s' attempting to get fallback public key%s%s
%s:%s:%d:CMP %s: failed to get fallback public key from ir/cr/kur file '%s'%s%s
%s:%s:%d:CMP %s: failed to get fallback public key obtained from ir/cr/kur file '%s'%s%s
%s:%s:%d:CMP %s: Missing ':' in -geninfo arg %.40s%s%s
%s:%s:%d:CMP %s: Invalid OID in -geninfo arg %.40s%s%s
%s:%s:%d:CMP %s: Unknown OID in -geninfo arg: %.40s%s%s
%s:%s:%d:CMP %s: Cannot parse int in -geninfo arg %.40s%s%s
%s:%s:%d:CMP %s: Missing ',' or end of -geninfo arg after int at %.40s%s%s
%s:%s:%d:CMP %s: Missing 'int:' or 'str:' in -geninfo arg %.40s%s%s
%s:%s:%d:CMP %s: Unable to create 'OSSL_CMP_ITAV' structure%s%s%s
%s:%s:%d:CMP %s: Failed to add ITAV for geninfo of the PKI message header%s%s%s
%s:%s:%d:CMP %s: out of memory%s%s%s
error setting verification parameters for %s
%s:%s:%d:CMP %s: -tls_used given without -tls_trusted; will not authenticate the TLS server%s%s%s
TLS client certificate (optionally with chain) %s:%s:%d:CMP %s: unable to use client TLS certificate file '%s'%s%s
%s:%s:%d:CMP %s: could not add untrusted cert to TLS client cert chain%s%s%s
%s:%s:%d:CMP %s: trying to build cert chain for own TLS cert%s%s%s
%s:%s:%d:CMP %s: success building cert chain for own TLS cert%s%s%s
%s:%s:%d:CMP %s: could not build cert chain for own TLS cert%s%s%s
error: unable to add TLS extra certs
%s:%s:%d:CMP %s: TLS private key '%s' does not match the TLS certificate '%s'
%s
%s:%s:%d:CMP %s: unable to use TLS client private key '%s'%s%s
%s:%s:%d:CMP %s: -tls_used given without -tls_key; cannot authenticate to the TLS server%s%s%s
, and -key option superseded by -csr fallback public key for cert to be enrolled public key for checking cert resulting from p10cr reference certificate (oldcert) only if -rspin argument gives too few filenames %s:%s:%d:CMP %s: missing -server or -use_mock_srv or -rspin option%s%s%s
%s:%s:%d:CMP %s: ignoring -proxy option since -server is not given%s%s%s
%s:%s:%d:CMP %s: ignoring -no_proxy option since -server is not given%s%s%s
%s:%s:%d:CMP %s: cannot parse -server URL: %s%s%s
%s:%s:%d:CMP %s: assuming -tls_used since -server URL indicates HTTPS%s%s%s
%s:%s:%d:CMP %s: no -infotype option given for genm%s%s%s
%s:%s:%d:CMP %s: -infotype option is ignored for commands other than 'genm'%s%s%s
%s:%s:%d:CMP %s: unknown OID name in -infotype option%s%s%s
%s:%s:%d:CMP %s: -oldwithold %s%s%s
option is ignored unless -cmd 'genm' and -infotype rootCaCert is given %s:%s:%d:CMP %s: -newwithnew %s%s%s
%s:%s:%d:CMP %s: -newwithold %s%s%s
%s:%s:%d:CMP %s: -oldwithnew %s%s%s
%s:%s:%d:CMP %s: -template %s%s%s
option is ignored unless -cmd 'genm' and -infotype 'certReqTemplate' is given %s:%s:%d:CMP %s: -keyspec %s%s%s
%s:%s:%d:CMP %s: missing -template option for genm with infotype certReqTemplate%s%s%s
%s:%s:%d:CMP %s: -trusted option is ignored since -srvcert option is present%s%s%s
%s:%s:%d:CMP %s: -recipient option is ignored since -srvcert option is present%s%s%s
directly trusted CMP server certificate trusted certs for verifying newly enrolled cert %s:%s:%d:CMP %s: -total_timeout argument = %d must not be < %d (-msg_timeout)%s
%s:%s:%d:CMP %s: -reqin is ignored since -rspin is present%s%s%s
%s:%s:%d:CMP %s: -reqin_new_tid is ignored since -reqin is not present%s%s%s
%s:%s:%d:CMP %s: missing -tls_key option%s%s%s
%s:%s:%d:CMP %s: missing -tls_cert option%s%s%s
%s:%s:%d:CMP %s: must give -key or -secret unless -unprotected_requests is used%s%s%s
%s:%s:%d:CMP %s: must give -ref if no -cert and no -subject given%s%s%s
%s:%s:%d:CMP %s: must give both -cert and -key options or neither%s%s%s
%s:%s:%d:CMP %s: -cert and -key not used for protection since -secret is given%s%s%s
private key for CMP client certificate %s:%s:%d:CMP %s: will not authenticate server due to missing -secret, -trusted, or -srvcert%s%s%s
CMP client certificate (optionally with chain) trusted certs for verifying own CMP signer cert %s:%s:%d:CMP %s: -own_trusted option is ignored without -cert%s%s%s
%s:%s:%d:CMP %s: digest algorithm name not recognized: '%s'%s%s
%s:%s:%d:CMP %s: digest algorithm name not supported: '%s'%s%s
%s:%s:%d:CMP %s: MAC algorithm name not recognized: '%s'%s%s
%s:%s:%d:CMP %s: no -subject given; no -csr or -oldcert or -cert available for fallback%s%s%s
%s:%s:%d:CMP %s: missing -newkey (or -key) to be certified and no -csr, -oldcert, -cert, or -reqin option given, which could provide fallback public key. Neither central key generation is requested.%s%s%s
%s:%s:%d:CMP %s: POPO is disabled, which implies -centralkeygen%s%s%s
%s:%s:%d:CMP %s: -popo value %d is inconsistent with -centralkeygen%s%s
%s:%s:%d:CMP %s: -newkeyout not given, nowhere to save centrally generated key%s%s%s
%s:%s:%d:CMP %s: no -newkey option given with private key for POPO, -csr option provides just public key%s%s%s
%s:%s:%d:CMP %s: since -reqin is used, may use -popo -1 or -popo 0 to disable the needless generation of a POPO%s%s%s
%s:%s:%d:CMP %s: missing -newkey (or -key) option for key to be certified and for POPO%s%s%s
%s:%s:%d:CMP %s: -certout not given, nowhere to save newly enrolled certificate%s%s%s
%s:%s:%d:CMP %s: -subject %s since sender is taken from -ref or -cert%s%s
option is ignored for commands other than 'ir', 'cr', and 'kur' %s:%s:%d:CMP %s: -issuer %s and 'rr'%s%s
%s:%s:%d:CMP %s: -reqexts %s%s%s
%s:%s:%d:CMP %s: -san_nodefault %s%s%s
%s:%s:%d:CMP %s: -sans %s%s%s
%s:%s:%d:CMP %s: -policies %s%s%s
%s:%s:%d:CMP %s: -policy_oids %s%s%s
%s:%s:%d:CMP %s: -popo %s%s%s
%s:%s:%d:CMP %s: -popo -1 or -centralkeygen %s%s%s
%s:%s:%d:CMP %s: -newkeyout %s%s%s
%s:%s:%d:CMP %s: -implicit_confirm %s, and 'p10cr'%s%s
%s:%s:%d:CMP %s: -disable_confirm %s, and 'p10cr'%s%s
%s:%s:%d:CMP %s: -certout %s, and 'p10cr'%s%s
%s:%s:%d:CMP %s: -chainout %s, and 'p10cr'%s%s
%s:%s:%d:CMP %s: missing -oldcert for certificate to be updated and no -csr given%s%s%s
%s:%s:%d:CMP %s: given -subject '%s' overrides the subject of '%s' for KUR%s
%s:%s:%d:CMP %s: missing -oldcert or -issuer and -serial for certificate to be revoked and no -csr given%s%s%s
%s:%s:%d:CMP %s: ignoring -csr since certificate to be revoked is given%s%s%s
%s:%s:%d:CMP %s: Must give both -issuer and -serial options or neither%s%s%s
%s:%s:%d:CMP %s: Ignoring -oldcert since -issuer and -serial is given for command 'rr'%s%s%s
%s:%s:%d:CMP %s: Ignoring -csr since -issuer and -serial is given for command 'rr'%s%s%s
%s:%s:%d:CMP %s: cannot read serial number: '%s'%s%s
%s:%s:%d:CMP %s: Ignoring -serial for command other than 'rr'%s%s%s
%s:%s:%d:CMP %s: missing PKCS#10 CSR for p10cr%s%s%s
%s:%s:%d:CMP %s: missing -recipient, -srvcert, -issuer, -oldcert or -cert; recipient for any requests not covered by -reqin will be set to "NULL-DN"%s%s%s
%s:%s:%d:CMP %s: -newkeypass %s%s%s
option is ignored for 'p10cr', 'rr', and 'genm' commands %s:%s:%d:CMP %s: -newkey %s%s%s
%s:%s:%d:CMP %s: -days %s%s%s
%s:%s:%d:CMP %s: -out_trusted %s%s%s
new private key for cert to be enrolled %s:%s:%d:CMP %s: could not set requested cert validity period%s%s%s
%s:%s:%d:CMP %s: cannot have policies both via -policies and via -policy_oids%s%s%s
%s:%s:%d:CMP %s: -csr option is ignored for 'genm' command%s%s%s
%s:%s:%d:CMP %s: cannot load certificate request extension section '%s'%s%s
%s:%s:%d:CMP %s: cannot load policy cert request extension section '%s'%s%s
%s:%s:%d:CMP %s: cannot have Subject Alternative Names both via -reqexts and via -sans%s%s%s
%s:%s:%d:CMP %s: bad syntax of %s '%s'%s
%s:%s:%d:CMP %s: -opt_san_nodefault has no effect when -sans is used%s%s%s
%s:%s:%d:CMP %s: -opt_policy_oids_critical has no effect unless -policy_oids is given%s%s%s
%s:%s:%d:CMP %s: Invalid -policy_oids arg '%s'%s%s
%s:%s:%d:CMP %s: Unknown -policy_oids arg: %.40s%s%s
%s:%s:%d:CMP %s: cannot add policy with OID '%s'%s%s
%s:%s:%d:CMP %s: -oldcert option is ignored for 'genm' command%s%s%s
%s:%s:%d:CMP %s: will contact %s%s%s
%s:%s:%d:CMP %s: received %d %s certificate(s), saving to file '%s'
%s:%s:%d:CMP %s: saving more than one certificate in non-PEM format%s%s%s
%s:%s:%d:CMP %s: could not open file '%s' for %s %s certificate(s)
error: unsupported type '%s' for writing certificates
%s:%s:%d:CMP %s: cannot write %s certificate to file '%s'%s
%s:%s:%d:CMP %s: Failed to delete %s, which should be done to indicate there is no %s%s
%s:%s:%d:CMP %s: genp does not contain any ITAV%s%s%s
%s:%s:%d:CMP %s: could not get ITAV #%d from genp%s%s
%s:%s:%d:CMP %s: error parsing type of ITAV #%d from genp%s%s
%s:%s:%d:CMP %s: ITAV #%d from genp infoType=%s%s
assertion failed: OSSL_NELEM(cmp_vars) == n_options + OPT_PROV__FIRST + 1 - OPT_PROV__LAST + OPT_R__FIRST + 1 - OPT_R__LAST + OPT_V__FIRST + 1 - OPT_V__LAST Non-positive number "%ld" for config option -%s
Negative number "%ld" for config option -%s
%s:%s:%d:CMP %s: internal: unsupported type '%c' for option '%s'%s
%s:%s:%d:CMP %s: for option '%s' in config file section '%s'%s
integer value out of range for option '%s'
%s:%s:%d:CMP %s: Logging verbosity level %d out of range (0 .. 8)%s%s
%s:%s:%d:CMP %s: -keep_alive argument must be 0, 1, or 2%s%s%s
%s:%s:%d:CMP %s: invalid popo spec. Valid values are -1 .. 2%s%s%s
%s:%s:%d:CMP %s: invalid revreason. Valid values are -1 .. 6, 8 .. 10%s%s%s
Configuration file to use. "" = none. Default from env variable OPENSSL_CONF Section(s) in config file to get options from. "" = 'default'. Default 'cmp' Log level; 3=ERR, 4=WARN, 6=INFO, 7=DEBUG, 8=TRACE. Default 6 = INFO CMP request to send: ir/cr/kur/p10cr/rr/genm InfoType name for requesting specific info in genm, with specific support for 'caCerts' and 'rootCaCert' Certificate profile name to place in generalInfo field of request PKIHeader Comma-separated list of OID and value to place in generalInfo PKIHeader of form :int: or :str:, e.g. '1.2.3.4:int:56789, id-kp:str:name' File to save certTemplate received in genp of type certReqTemplate Optional file to save Key specification received in genp of type certReqTemplate Certificate enrollment options:
Private or public key for the requested cert. Default: CSR key or client key New private key pass phrase source Request central (server-side) key generation. Default is local generation File to save centrally generated key, in PEM format Distinguished Name (DN) of subject to use in the requested cert template For kur, default is subject of -csr arg or reference cert (see -oldcert) this default is used for ir and cr only if no Subject Alt Names are set Requested validity time of the new certificate in number of days Name of config file section defining certificate request extensions. Augments or replaces any extensions contained CSR given with -csr Subject Alt Names (IPADDR/DNS/URI) to add as (critical) cert req extension Do not take default SANs from reference certificate (see -oldcert) Name of config file section defining policies certificate request extension Policy OID(s) to add as policies certificate request extension Flag the policy OID(s) given with -policy_oids as critical Proof-of-Possession (POPO) method to use for ir/cr/kur where -1 = NONE, 0 = RAVERIFIED, 1 = SIGNATURE (default), 2 = KEYENC PKCS#10 CSR file in PEM or DER format to convert or to use in p10cr Certificates to trust when verifying newly enrolled certificates Request implicit confirmation of newly enrolled certificates Do not confirm newly enrolled certificate w/o requesting implicit confirmation. WARNING: This leads to behavior violating RFC 9810 File to save newly enrolled certificate File to save the chain of newly enrolled certificate Certificate enrollment and revocation options:
Certificate to be updated (defaulting to -cert) or to be revoked in rr; also used as reference (defaulting to -cert) for subject DN and SANs. Issuer is used as recipient unless -recipient, -srvcert, or -issuer given DN of the issuer to place in the certificate template of ir/cr/kur/rr; also used as recipient if neither -recipient nor -srvcert are given Serial number of certificate to be revoked in revocation request (rr) Reason code to include in revocation request (rr); possible values: 0..6, 8..10 (see RFC5280, 5.3.1) or -1. Default -1 = none included [http[s]://]address[:port][/path] of CMP server. Default port 80 or 443. address may be a DNS name or an IP address; path can be overridden by -path [http[s]://]address[:port][/path] of HTTP(S) proxy to use; path is ignored List of addresses of servers not to use HTTP(S) proxy for Default from environment variable 'no_proxy', else 'NO_PROXY', else none DN of CA. Default: subject of -srvcert, -issuer, issuer of -oldcert or -cert HTTP path (aka CMP alias) at the CMP server. Default from -server, else "/" Persistent HTTP connections. 0: no, 1 (the default): request, 2: require Number of seconds allowed per CMP message round trip, or 0 for infinite Overall time an enrollment incl. polling may take. Default 0 = infinite Server authentication options:
Certificates to use as trust anchors when verifying signed CMP responses Intermediate CA certs for chain construction for CMP/TLS/enrolled certs Server cert to pin and trust directly when verifying signed CMP responses DN of expected sender of responses. Defaults to subject of -srvcert, if any Ignore CMP signer cert key usage, else 'digitalSignature' must be allowed Accept missing or invalid protection of regular error messages and negative certificate responses (ip/cp/kup), revocation responses (rp), and PKIConf WARNING: This setting leads to behavior allowing violation of RFC 9810 Do not keep certificates received in the extraCerts CMP message field File to save the server cert used and validated for CMP response protection File to save extra certificates received in the extraCerts field File to save CA certs received in caPubs field or genp with id-it-caCerts Root CA certificate to request update for in genm of type rootCaCert File to save NewWithNew cert received in genp of type rootCaKeyUpdate File to save NewWithOld cert received in genp of type rootCaKeyUpdate File to save OldWithNew cert received in genp of type rootCaKeyUpdate certificate to request a CRL for in genm of type crlStatusList CRL to request update for in genm of type crlStatusList File to save new CRL received in genp of type 'crls' Client authentication options:
Reference value to use as senderKID in case no -cert is given Prefer PBM (over signatures) for protecting msgs with given password source Client's CMP signer certificate; its public key must match the -key argument This also used as default reference for subject DN and SANs. Any further certs included are appended to the untrusted certs Optional certs to verify chain building for own CMP signer cert CMP signer private key, not used when -secret given Client private key (and cert and old cert) pass phrase source Digest to use in message protection and POPO signatures. Default "sha256" MAC algorithm to use in PBM-based message protection. Default "hmac-sha1" Certificates to append in extraCerts field of outgoing messages. This can be used as the default CMP signer cert chain to include Send request messages without CMP-level protection Format (PEM or DER) to use when saving a certificate to a file. Default PEM Format (PEM or DER) to use when saving a CRL to a file. Default DER Format of the key input (ENGINE, other values ignored) Pass phrase source potentially needed for loading certificates of others Use crypto engine with given identifier, possibly a hardware device. Engines may also be defined in OpenSSL config file engine section. Provider load path (must be before 'provider' argument if required) Provider to load (can be specified multiple times) Set a provider key-value parameter Property query used when fetching algorithms Load the given file(s) into the random number generator Write random data to the specified file Enable using TLS (also when other TLS options are not set) Client's TLS certificate. May include chain to be provided to TLS server Private key for the client's TLS certificate Pass phrase source for the client's private TLS key (and TLS cert) Extra certificates to provide to TLS server during TLS handshake Trusted certificates to use for verifying the TLS server certificate; this implies hostname validation Address to be checked (rather than -server) during TLS hostname validation Client-side debugging options:
Do not interactively prompt for input when a password is required etc. Invoke the transaction the given positive number of times. Default 1 Take sequence of CMP requests to send to server from file(s) Use fresh transactionID for CMP requests read from -reqin Save sequence of CMP requests created by the client to file(s) Save first CMP request created by the client to file and exit Process sequence of CMP responses provided in file(s), skipping server Save sequence of actually used CMP responses to file(s) Use internal mock server at API level, bypassing socket-based HTTP Act as HTTP-based mock server listening on given port max number of messages handled by HTTP mock server. Default: 0 = unlimited Reference value to use as senderKID of server in case no -srv_cert is given Password source for server authentication with a pre-shared key (secret) Private key used by the server for signing messages Server private key (and cert) pass phrase source Trusted certificates for client authentication Intermediate certs that may be useful for verifying CMP protection Certificate to be expected for rr and any oldCertID in kur messages Certificate to be returned as mock enrollment result Private key for the certificate to be returned as mock enrollment result Key to be returned for central key pair generation Response private key (and cert) pass phrase source CRL to be returned in genp of type crls Extra certificates to be included in mock certification responses CA certificates to be included in mock ip response New root CA certificate to include in genp of type rootCaKeyUpdate NewWithOld transition cert to include in genp of type rootCaKeyUpdate OldWithNew transition cert to include in genp of type rootCaKeyUpdate Number of times the client must poll before receiving a certificate The check_after value (time to wait) to include in poll response Grant implicit confirmation of newly enrolled certificate PKIStatus to be included in server response. Possible values: 0..6 A single failure info bit number to include in server response, 0..26 Number representing failure bits to include in server response, 0..2^27 - 1 Status string to be included in server response Force server to reply with error message Send response messages without CMP-level protection In case of negative responses, server shall send unprotected error messages, certificate responses (ip/cp/kup), and revocation responses (rp). WARNING: This setting leads to behavior violating RFC 9810 Accept missing or invalid protection of requests Accept unprotected error messages from client Accept RAVERIFIED as proof-of-possession (POPO) adds policy to the acceptable policy set chain authentication security level permit unhandled critical extensions check leaf certificate revocation set policy variable require-explicit-policy set policy variable inhibit-any-policy set policy variable inhibit-policy-mapping disable certificate compatibility work-arounds print policy processing diagnostics search trust store first (default) Suite B 128-bit mode allowing 192-bit algorithms accept chains anchored by intermediate trust-store CAs ignore certificate validity time allow the use of proxy certificates Verbose listing of the SSL/TLS ciphers Convert standard name into OpenSSL name Cipher specification options:
Ciphers compatible with TLS1.1 Ciphers compatible with TLS1.2 Ciphers compatible with TLS1.3 Include ciphersuites requiring PSK (deprecated) Include ciphersuites requiring SRP Configure the TLSv1.3 ciphersuites to use Cipher string to decode (optional) Usage: %s [options] [certreq...]
Verbose output during processing Terse output during processing CSR input format to use (PEM or DER; by default try PEM first) The last argument, requests to process Where to put the output file(s) Datetime format used for printing. (rfc_822/iso_8601). Default is rfc_822. Do not print the generated certificate msie modifications to handle all Universal Strings File contains a self signed cert to sign File contains DN and signed public key and challenge Use engine, possibly a hardware device The particular CA definition to use Use arg instead of request's subject Input characters are UTF8; default ASCII If reading serial fails, create a new random serial Always create a random serial; do not store it Deprecated; multi-valued RDNs support is always on. [CC]YYMMDDHHMMSSZ value for notBefore certificate field [CC]YYMMDDHHMMSSZ value for notAfter certificate field, overrides -days Number of days from today to certify the cert for Extension section (override value in config file) Configuration file with X509v3 extensions to add Don't add the EMAIL field to the DN Digest to use, such as sha256; see openssl help for list Private key file format (ENGINE, other values ignored) Key and cert input file pass phrase source Key to decrypt the private key or cert files if encrypted. Better use -passin Certificate input format (DER/PEM/P12); has no effect Sign a cert with the key associated with it Signature parameter in n:v form Verification parameter in n:v form Add a Valid(not-revoked) DB entry about a cert (given in file) Shows cert status given the serial number CRL extension section (override value in config file) the hold instruction, an OID. Sets revocation reason to certificateHold sets compromise time to val and the revocation reason to keyCompromise sets compromise time to val and the revocation reason to CACompromise Sets the CRL lastUpdate time to val (YYMMDDHHMMSSZ or YYYYMMDDHHMMSSZ) Sets the CRL nextUpdate time to val (YYMMDDHHMMSSZ or YYYYMMDDHHMMSSZ) Days until the next CRL is due Hours until the next CRL is due Seconds until the next CRL is due Certificate requests to be signed (optional) input format - one of DER PEM B64 output file (output format is always DER) offset; a series of these can be used to 'dig' into multiple ASN1 blob wrappings string to generate ASN1 structure from file to generate ASN1 structure from equivalent to '-inform pem' (obsolete) dump the first arg bytes of unknown data in hex form P]]P_0]8_(_^^_^``p`P`8` ``_@x(w8}}}|||||(w xwx xH`0~~~~~~x~`~H~(~~} xwy}}}|h|P|8| ||x}yL<, \̴ĴtQ\D,|dL4 | l T < , | d L 4 | d L t \ L < , l T < $ t? . p _ N ##""""""""o"_"N"=",""
"!!!!!!!!q!`!O!>!.! !! hhhh-P -H set_verbosity get_opts opt_str read_config -M -S print_itavs delete_file save_free_certs setup_verification_ctx setup_protection_ctx set_gennames setup_request_ctx setup_client_ctx handle_opt_geninfo set_fallback_pubkey setup_ssl_ctx transform_opts read_write_req_resp read_PKIMESSAGE write_PKIMESSAGE 0123456789ABCDEF process_pollReq process_certConf process_error check_client_crl process_genm process_rr process_cert_request clean_transaction delayed_delivery ossl_cmp_mock_srv_set1_newWithOld ossl_cmp_mock_srv_set1_newWithNew ossl_cmp_mock_srv_set1_caPubsOut ossl_cmp_mock_srv_set1_chainOut ossl_cmp_mock_srv_set1_certOut ossl_cmp_mock_srv_set1_refCert mock server pkix/ Not Found Internal Server Error application/pkixcmp %s:%s:%d:CMP %s: No %s%s%s
Key %s:
Key algorithm:
Key algorithm: Key algorithm: RSA %d
Invalid key spec: %s
End of key %s %s:%s:%d:CMP %s: %.*s%s
Bad input format for %s
rb CAdES CMS Invalid key %s
Invalid id %s
Invalid OID %s
recipient certificate file No key specified
key param buffer apps/cms.c No secret key id
originator certificate file SMIME Can't read content file %s
Error writing certs to %s
Can't open receipt file %s
signer certificate Error creating CMS structure
%s Verification successful
%s Verification failure
Error writing signers to %s
Signer %d:
No Receipt Request
Signed Content ID:
Receipts From List:
: First Tier
: All
Unknown (%d)
Receipts To:
To: %s%s From: %s%s Subject: %s%s Error writing CMS output
Missing CRL signing key
other CRL CRL signing key Error creating delta CRL
issuer= crlNumber= 0x issuer name hash= %08lx
issuer name old hash= lastUpdate= nextUpdate= NONE %s Fingerprint= %02X%c unable to write CRL
unable to load CRL
error opening the file, %s
error reading the file, %s
error loading certificates
unable to write pkcs7 object
RSA -%-25s \ *%s
apps/dgst.c %s(%s)= Read error in %s
Verified OK
Error verifying data
Signature buffer Error signing data
Digest buffer Error Digesting Data
etaonrishdlcupfm SHA256 I/O buffer Supported digests:
MAC parameter error "%s"
Error getting context
Error setting context
Error setting digest
signature buffer DHX safe type-specific SubjectPublicKeyInfo MSBLOB Error getting passwords
unable to load Key
Not a DSA key
Public Key= writing DSA key
%s format not supported
encrypt-level invalid PVK encryption level
unable to write key
apps/dsa.c read DSA key
This could take some time
DSA parameters from PBMAC secret of mock server certs trusted by mock server caPubs for mock server NewWithNew cert from genp NewWithOld cert from genp OldWithNew cert from genp CRL from genp of type 'crls' certTemplate from genp keySpec from genp wb PKIStatusInfo buf validated server newly enrolled cert and chain newly enrolled AES-256-CBC Input options:
Input file Input format - DER or PEM Output file outform Output format - DER or PEM Print as text No output Verbose output Terse output genkey Generate a DSA key numbits numqbits Any supported cipher pvk-strong pvk-weak pvk-none Don't enforce PVK encoding Input key pubin Input file pass phrase source Output format, DER PEM PVK Don't print key out Print the key in text Print the DSA public value pubout passout Check the DH parameters dsaparam Input format, DER or PEM Output format, DER or PEM List digests engine_impl Print as hex dump binary Print in binary form xoflen Print debug info Sign digest using private key prverify File with signature to verify hmac Create hashed MAC with key macopt Any supported digest fips-fingerprint nocrl certfile Verify CRL signature Input file - default stdin output file - default stdout Output format - default PEM Print hash value nameopt CRL options:
Print issuer DN Set lastUpdate field Set nextUpdate field No CRL output Print the crl fingerprint Print CRL number badsig gendelta no-CAfile no-CApath no-CAstore Operation options:
Encrypt message Decrypt encrypted message Sign message Verify signed message resign Resign a signed message sign_receipt verify_receipt digest_create digest_verify uncompress EncryptedData_encrypt EncryptedData_decrypt data_create Create a CMS "Data" object data_out cmsout Output CMS structure File format options:
rctform Receipt file format Enable CMS streaming Same as -stream noindef Disable CMS streaming crlfeol asciicrlf Keys and passwords options:
pwri_password secretkey secretkeyid inkey originator Originator certificate file recip Recipient cert file cert... aes128-wrap Use AES128 to wrap key aes192-wrap Use AES192 to wrap key aes256-wrap Use AES256 to wrap key des3-wrap Use 3DES-EDE to wrap key debug_decrypt Digest algorithm to use Signer certificate input file cades nodetach Use opaque signing nocerts noattr nosmimecap no_signing_time receipt_request_all receipt_request_first receipt_request_from receipt_request_to Verification options:
no_content_verify no_attr_verify nosigs noverify nointern verify_retcode Trusted certificates file Use subject key identifier econtent_type OID for external content Certificate output file To address From address Subject Printing options:
receipt_request_print Print CMS Receipt Request %s:%s:%d:CMP %s: expecting empty path or 'pkix/' but got '%s'%s%s
specifications contained in keySpec from genp %s:%s:%d:CMP %s: Out of memory - cannot dump key %s%s%s
%s:%s:%d:CMP %s: Info too large - cannot dump key %s%s%s
Error allocating CMS_contentinfo
Error reading %s Content Info
Invalid key (supplied twice) %s
Invalid id (supplied twice) %s
Invalid OID (supplied twice) %s
Illegal -inkey without -signer
%s: Unknown option or message digest: %s
%s: Unknown option or cipher: %s
No Signed Receipts Recipients
Signed receipts only allowed with -sign
Multiple signers or keys not allowed
Incompatible options: CAdES requires signed attributes
Incompatible options: CAdES validation requires certs and signed attributes validations
No signer certificate specified
No recipient certificate or key specified
No recipient(s) certificate(s) specified
No operation option (-encrypt|-decrypt|-sign|-verify|...) specified.
Warning: -nodetach option is ignored for non-signing operation
Warning: -contfile option is ignored for the given operation
Warning: recipient certificate file parameters ignored for operation other than -encrypt
receipt signer certificate file Cannot use -digest for non-signing operation
Cannot use -digest when -in, -nodetach or streaming is used
Invalid hex value after -digest
Cannot use originator for encryption
Signed Receipt Request Creation Error
Error decrypting CMS using secret key
Error decrypting CMS using private key
Error decrypting CMS using password
Error decrypting CMS structure
Receipt Request Parse Error
Bad output format for CMS file
Error initialising X509 store
Error getting CRL issuer certificate
Error getting CRL issuer public key
Error getting maximum length of signed data
key must be set for one-shot algorithms
%s: Can only sign or verify one file.
No signature to verify: use the -signature option
MAC and signing key cannot both be specified
Signature parameter error "%s"
Error opening signature file %s
Error reading signature file %s
Length can only be specified for XOF
Signing key cannot be specified for XOF
Error, failed to set DH parameters
%s: Value "%s" outside integer range
Error, generator may not be chosen for DSA parameters
Warning, input file %s ignored
Error, %s param generation context allocation failed
Generating %s parameters, %d bit long %sprime
Error, unable to initialise %s parameters
Error, unable to set DSA prime length
Error, unable to set DH prime length
Error, unable to set generator
Error, unable to load parameters
Error, unable to load DSA parameters
Error, unable to load DH parameters
Error, failed to check DH parameters
Error, invalid parameters generated
DH parameters appear to be ok.
Error, unable to write DH parameters
PVK form impossible with public key input
bad output format specified for outfile
Error, DSA parameter generation context allocation failed
Warning: It is not recommended to use more than %d bit for DSA keys.
Your key size is %d! Larger key size may behave not as expected.
Generating DSA parameters, %d bit long prime
Error, DSA key generation paramgen init failed
Error, DSA key generation setting bit length failed
Error, DSA key generation setting subprime bit length failed
Error, unable to write DSA parameters
Error, DSA key generation context allocation failed
Error, unable to initialise for key generation
%s:%s:%d:CMP %s: using only first %d characters of section name starting with "%.*s"
%s:%s:%d:CMP %s: using section(s) '%s' of OpenSSL configuration file '%s'%s
%s:%s:%d:CMP %s: no [%s] section found in config file '%s'; will thus use just [default] and unnamed section if present%s
%s:%s:%d:CMP %s: no [%s] section found in config file '%s'%s
%s:%s:%d:CMP %s: cannot load engine %s%s%s
%s:%s:%d:CMP %s: cannot set up error reporting and logging for %s%s%s
%s:%s:%d:CMP %s: -tls_used given without any other TLS options%s%s%s
%s:%s:%d:CMP %s: ignoring TLS options(s) since -tls_used is not given%s%s%s
%s:%s:%d:CMP %s: -tls_used option not supported with -port option%s%s%s
%s:%s:%d:CMP %s: The -port option excludes -server and -use_mock_srv%s%s%s
%s:%s:%d:CMP %s: The -port option does not support -reqin and -reqout%s%s%s
%s:%s:%d:CMP %s: The -port option does not support -rspin and -rspout%s%s%s
%s:%s:%d:CMP %s: cannot use both -server and -use_mock_srv options%s%s%s
%s:%s:%d:CMP %s: ignoring -tls_used option since -server is not given or -use_mock_srv is given%s%s%s
%s:%s:%d:CMP %s: must give -srv_ref for mock server if no -srv_cert given%s%s%s
%s:%s:%d:CMP %s: server credentials (-srv_secret or -srv_cert) must be given if -use_mock_srv or -port is used%s%s%s
%s:%s:%d:CMP %s: server will not be able to handle PBM-protected requests since -srv_secret is not given%s%s%s
%s:%s:%d:CMP %s: must give both -srv_cert and -srv_key options or neither%s%s%s
signer certificate of the mock server private key for mock server cert %s:%s:%d:CMP %s: mock server will not be able to handle signature-protected requests since -srv_trusted is not given%s%s%s
untrusted certificates for mock server reference cert to be expected by the mock server %s:%s:%d:CMP %s: no -rsp_cert given for mock server%s%s%s
cert the mock server returns on certificate requests private key for enrollment cert CRL to be returned by the mock server CMP extra certificates for mock server NewWithNew cert the mock server returns in rootCaKeyUpdate NewWithOld cert the mock server returns in rootCaKeyUpdate OldWithNew cert the mock server returns in rootCaKeyUpdate %s:%s:%d:CMP %s: -failure out of range, should be >= 0 and <= %d%s%s
%s:%s:%d:CMP %s: -failurebits overrides -failure%s%s%s
%s:%s:%d:CMP %s: -failurebits out of range%s%s%s
%s:%s:%d:CMP %s: cannot set up server-side error reporting and logging for %s%s%s
%s:%s:%d:CMP %s: the -reqout_only client option does not combine with -port implying server behavior%s%s%s
%s:%s:%d:CMP %s: -server %s%s%s
option is ignored since -reqout_only option is given %s:%s:%d:CMP %s: -use_mock_srv %s%s%s
%s:%s:%d:CMP %s: -reqout %s%s%s
%s:%s:%d:CMP %s: -rspin %s%s%s
%s:%s:%d:CMP %s: -rspout %s%s%s
%s:%s:%d:CMP %s: -server option is not used if enough filenames given for -rspin%s%s%s
%s:%s:%d:CMP %s: -use_mock_srv option is not used if enough filenames given for -rspin%s%s%s
%s:%s:%d:CMP %s: cannot set up CMP context%s%s%s
%s:%s:%d:CMP %s: Missing -cacertsout option for -infotype caCerts%s%s%s
%s:%s:%d:CMP %s: no CA certificates provided by server%s%s%s
%s:%s:%d:CMP %s: Failed to store CA certificates from genp in %s%s%s
%s:%s:%d:CMP %s: Missing -newwithnew option for -infotype rootCaCert%s%s%s
%s:%s:%d:CMP %s: No -oldwithold given, will use all certs given with -trusted as trust anchors for verifying the newWithNew cert%s%s%s
OldWithOld cert for genm with -infotype rootCaCert %s:%s:%d:CMP %s: no root CA certificate update available%s%s%s
%s:%s:%d:CMP %s: oldWithNew certificate received in genp for verifying oldWithOld, but oldWithOld was not provided%s%s%s
%s:%s:%d:CMP %s: Missing -oldcrl and no -crlcert given for -infotype crlStatusList%s%s%s
%s:%s:%d:CMP %s: Missing -crlout for -infotype crlStatusList%s%s%s
Cert for genm with -infotype crlStatusList CRL for genm with -infotype crlStatusList %s:%s:%d:CMP %s: -oldcrl and -crlcert have different issuer%s%s%s
%s:%s:%d:CMP %s: no CRL update available%s%s%s
%s:%s:%d:CMP %s: received %s, saving to file '%s'%s
%s:%s:%d:CMP %s: could not open file '%s' for writing %s%s
error: unsupported type '%s' for writing CRLs
%s:%s:%d:CMP %s: cannot write %s to file '%s'%s
%s:%s:%d:CMP %s: no certificate request template available%s%s%s
%s:%s:%d:CMP %s: error saving certTemplate from genp: cannot open file %s%s%s
%s:%s:%d:CMP %s: error saving certTemplate from genp: cannot write file %s%s%s
%s:%s:%d:CMP %s: stored certTemplate from genp to file '%s'%s%s
%s:%s:%d:CMP %s: no key specifications available%s%s%s
%s:%s:%d:CMP %s: error saving keySpec from genp: cannot open file %s%s%s
%s:%s:%d:CMP %s: error saving keySpec from genp: cannot write file %s%s%s
%s:%s:%d:CMP %s: stored keySpec from genp to file '%s'%s%s
%s:%s:%d:CMP %s: No specific support for -infotype %s available%s%s
%s:%s:%d:CMP %s: Failed to create genm for -infotype %s%s%s
%s:%s:%d:CMP %s: Did not receive response on genm or genp is not valid%s%s%s
%s:%s:%d:CMP %s: received%s%s %s
Centrally generated private key password %s:%s:%d:CMP %s: saving centrally generated key to file '%s'%s%s
Usage: %s [options] [numbits] [numqbits]
Use engine e, possibly a hardware device Number of bits if generating parameters or key (optional) Number of bits in the subprime parameter q if generating parameters or key (optional) Enable 'Strong' PVK encoding level (default) Enable 'Weak' PVK encoding level Input format (DER/PEM/PVK); has no effect Expect a public key in input file Output public key, not private Output file pass phrase source Usage: %s [options] [numbits]
Read or generate DSA parameters, convert to DH Print a text form of the DH parameters Don't output any DH parameters Generate parameters using 2 as the generator value Generate parameters using 3 as the generator value Generate parameters using 5 as the generator value Number of bits if generating parameters (optional) Usage: %s [options] [file...]
Also use engine given by -engine for digest operations Print the digest with separating colons Print the digest in coreutils format Output to filename rather than stdout Key file format (ENGINE, other values ignored) Output length for XOF algorithms. To obtain the maximum security strength set this to 32 (or greater) for SHAKE128, and 64 (or greater) for SHAKE256 Verify a signature using public key Verify a signature using private key Create MAC (not necessarily HMAC) MAC algorithm parameters in n:v form or key Compute HMAC with the key used in OpenSSL-FIPS fingerprint Files to digest (optional; default is stdin) No crl to load, just certs from '-certfile' File of chain of certs to a trusted CA; can be repeated CRL input format (DER or PEM); has no effect CRL signing Private key to use Private key file format (DER/PEM/P12); has no effect Print out a text format version Print old-style (MD5) hash value Certificate subject/issuer name printing options Corrupt last byte of loaded CRL signature (for test) Other CRL to compare/diff to the Input one Verify CRL using certificates in dir Verify CRL using certificates in file name Verify CRL using certificates in store URI Do not load the default certificates file Do not load certificates from the default certificates directory Do not load certificates from the default certificates store Usage: %s [options] [cert...]
Load a configuration file (this may load modules) Generate a signed receipt for a message Verify receipts; exit if receipt signatures do not verify Sign a pre-computed digest in hex notation Create a CMS "DigestedData" object Verify a CMS "DigestedData" object and output it Create a CMS "CompressedData" object Uncompress a CMS "CompressedData" object Create CMS "EncryptedData" object using symmetric key Decrypt CMS "EncryptedData" object using symmetric key Copy CMS "Data" object to output Input format SMIME (default), PEM or DER Output format SMIME (default), PEM or DER Treat input as binary: do not translate to canonical form Use CRLF as EOL termination instead of LF only Perform CRLF canonicalisation when signing Specific password for recipient Use specified hex-encoded key to decrypt/encrypt recipients or content Identity of the -secretkey for CMS "KEKRecipientInfo" object Input private key (if not signer or recipient) Set public key parameters as n:v pairs Input private key format (ENGINE, other values ignored) Encryption and decryption options:
Recipient certs (optional; used only when encrypting) The encryption algorithm to use (any supported cipher) Key wrap algorithm to use when encrypting with key agreement Disable MMA protection, return error if no recipient found (see doc) Extra signer and intermediate CA certificates to include when signing or to use as preferred signer certs and for chain building when verifying Include signingCertificate attribute (CAdES-BES) Don't include signer's certificate when signing Don't include any signed attributes Omit the SMIMECapabilities attribute Omit the signing time attribute When signing, create a receipt request for all recipients When signing, create a receipt request for first recipient Create signed receipt request with specified email address Create signed receipt targeted to specified address Signer certificate(s) output file Supply or override content for detached signature Do not verify signed content signatures Do not verify signed attribute signatures Don't verify message signature Don't verify signers certificate Don't search certificates in message for signer Check signingCertificate (CAdES-BES) Exit non-zero on verification failure Trusted certificates directory Trusted certificates store URI Include or delete text MIME headers For the -cmsout operation do not output the parsed CMS structure For the -cmsout operation print out all fields of the CMS structure For the -print option specifies various strings printing options }wgWG+ zpcYOE8.! ;+|l\K}4 q k B XH0xhXH0p` X!H! 8! !t215|433\5L5455 6655555t5l4\4D44333E`DFFEFF`FPF@F@G0G GG GFFMM,R RMRQQNNNRRRRR|RdRLRHVPUWWWW0W W`WU@WWpW4n oook[n set_name prev_item ossl_cmp_mock_srv_set1_keyOut ossl_cmp_mock_srv_set1_crlOut ossl_cmp_mock_srv_set1_oldWithNew ossl_cmp_mock_srv_set_pollCount ossl_cmp_mock_srv_set_checkAfterTime ossl_cmp_mock_srv_set_statusInfo ossl_cmp_mock_srv_set_sendError setup_srv_ctx save_crl save_template save_keyspec do_genm print_status cmp_main print_keyspec cmp_server This command is not enabled in the Red Hat Enterprise Linux OpenSSL build, please consult Red Hat documentation to learn how to enable FIPS mode
unable to set point conversion format
unable to set asn1 encoding format
unable to disable public key encoding
unable to enable public key encoding
CURVE DESCRIPTION NOT AVAILABLE using curve name prime192v1 instead of secp192r1
using curve name prime256v1 instead of secp256r1
Unable to load parameters from %s
checking elliptic curve parameters: unable to write elliptic curve parameters
hex string is too long, ignoring excess
hex string is too short, padding with zero bytes to length
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
warning: iv not used by this cipher
Either a raw key or the 'skeyopt' args must be used.
Error creating opaque key object for skeymgmt %s
Error setting an opaque key for cipher %s
%s: Cannot mix flags and engine names.
unable to create PKEY context
unable to set up for key generation
unable to output generated key
retrievable algorithm parameters retrievable operation parameters unknown type (%u) of %zu bytes
settable key generation parameters
Provided Asymmetric Encryption:
Provided RNGs and seed sources:
ERROR: could not list all provider signature algorithms
No TLS sig algs registered by currently active providers ERROR: setting TLS protocol version
ERROR: getting implemented TLS group list
WARNING: Unable to query provider parameters for %s
Invalid command '%s'; type "help" for a list.
Error initializing %s context
The possible -pkeyopt arguments are:
Error reading parameter file %s
%s: Error setting %s parameter:
Cannot use cipher with -genparam option
Error writing to outpubkey: '%s'. Error: %s
Error writing to outfile: '%s'. Error: %s
Warning: It is not recommended to use more than %d bit for RSA keys.
Your key size is %d! Larger key size may behave not as expected.
Error allocating RSA public exponent
Error setting RSA public exponent
Error setting number of primes
Certificate input, or CSR input file with -req (default stdin) Private key and cert file pass-phrase source Generate a certificate from scratch Output a certification request (rather than a certificate) Input is a CSR file (rather than a certificate) copy extensions when converting from CSR to x509 or vice versa CSR verification parameter in n:v form Key for signing, and to include unless using -force_pubkey Key input format (ENGINE, other values ignored) Output format (DER or PEM) - default PEM No cert output (except for requested printing) No output (except for requested printing) Certificate printing options:
Print the certificate in text form Various certificate text printing options Print the certificate fingerprint Print both notBefore and notAfter fields Synonym for -subject_hash (for backward compat) Print old-style (MD5) subject hash value Print old-style (MD5) issuer hash value Restrict which X.509 extensions to print and/or copy Print OCSP hash values for the subject name and public key Print out certificate purposes Print the public key in PEM format Certificate checking options:
Check whether cert expires in the next arg seconds Exit 1 (failure) if so, 0 if not Check certificate matches host Check certificate matches email Check certificate matches ipaddr Serial number to use, overrides -CAserial Increment current certificate serial number Number of days until newly generated certificate expires - default 30 Preserve existing validity dates Set or override certificate issuer Set or override certificate subject (and issuer) Key to be placed in new certificate or certificate request Do not take over any extensions from the source certificate or request Config file with X509V3 extensions to add Section of extfile to use - default: unnamed section Signature parameter, in n:v form Corrupt last byte of certificate signature (for test) Any supported digest, used for signing and printing Use the given CA certificate, conflicts with -key CA cert format (PEM/DER/P12); has no effect The corresponding CA key; default is -CA arg CA key format (ENGINE, other values ignored) File that keeps track of CA-generated serial number Create CA serial number file if it does not exist Certificate trust output options:
Mark certificate PEM output as trusted Set certificate alias (nickname) Trust certificate for a given purpose Clears all the prohibited or rejected uses of the certificate Reject certificate for a given purpose Show some internal datatype options Print extra information about the operations being performed. A file of trusted certificates A directory of files with trusted certificates URI to a store of trusted certificates Do not load the default trusted certificates file Do not load trusted certificates from the default directory Do not load trusted certificates from the default certificates store A file of untrusted certificates File containing one or more CRL's (in PEM format) to load Try downloading CRL information for certificates via their CDP entries Display information about the certificate chain Certificate(s) to verify (optional; stdin used otherwise) Section to use within config file File with private key for reply Search by issuer and serial, issuer name Search by issuer and serial, serial number Search by public key fingerprint, given in hex Print a text form of the objects Usage: %s [options] [user...]
The particular srp definition to use Modify the SRP verifier of an existing user Delete user from verifier file Set g and N values to be used for new verifier Additional info to be set for user Username(s) to process (optional) Specify the name of an SPKAC-dedicated section of configuration Create SPKAC using private key Sign new SPKAC with the specified digest (default: MD5) Usage: %s [options] [algorithm...]
All +int options consider prefix '0' as base-8 input, prefix '0x'/'0X' as base-16 input.
Enable (tls1>=1) multi-block mode on EVP-named cipher Produce machine readable output Enable async mode and start specified number of jobs Specify number of primes (for RSA only) Lock memory for better result determinism Run the speed command in test mode Use EVP-named cipher or digest Time decryption instead of encryption (only EVP) Benchmark EVP-named AEAD cipher in TLS-like sequence Benchmark signature algorithms Use wall-clock time instead of CPU user time as divisor Run benchmarks for specified amount of seconds Run [non-PKI] benchmarks on custom-sized buffer Use specified offset to mis-align buffers Algorithm(s) to test (optional; otherwise tests all) Digest algorithm to use when signing or resigning Don't translate message to text Don't include signers certificate when signing Verification/Decryption options:
Recipient certificate file for decryption set PKCS7_NOCHAIN so certificates contained in the message are not used as untrusted CAs Recipient certs, used when encrypting Key options as opt:value for opaque keys handling Symmetric key management name for opaque keys handling Generate an opaque symmetric key The cipher to generate key for Input format - default PEM (DER or PEM) Output format - default PEM (PEM, DER or NSS) Don't output the encoded session info Where to connect as post:port (default is localhost:4433) Specify TLSv1.3 ciphersuites to be used Turn on peer certificate verification, set depth Seconds to collect data, default 30 Fetch specified page from the site Cert file to use, PEM format assumed File with key, PEM; default is -cert file Do not load certificates from the default certificates store URI Configure SSL_CTX using the given configuration value TCP/IP port to listen on for connections (default is 4433) TCP/IP optional host and port to listen on for connections (default is *:4433) Unix domain socket to accept on For -unix, unlink existing socket first Don't use any certificates (Anon-DH) Turn on peer certificate verification Turn on peer certificate verification, must have a cert Server certificate file to use; default server.pem Certificate file to use for servername; default server2.pem Server certificate file format (PEM/DER/P12); has no effect Server certificate chain file in PEM format Build server certificate chain PEM serverinfo file for certificate Private key file to use; default is -cert file or elseserver.pem -Private Key file to use for servername if not in -cert2 Key format (ENGINE, other values ignored) Private key and cert file pass phrase source Second server certificate file to use (usually for DSA) Second server certificate file format (PEM/DER/P12); has no effect second server certificate chain file in PEM format Second private key file to use (usually for DSA) Second key file format (ENGINE, other values ignored) Second private key and cert file pass phrase source Servername for HostName TLS extension On servername mismatch send fatal alert (default warning alert) Test with the non-blocking test bio Convert LF from terminal into CRLF Disable caching and tickets if ephemeral (EC)DH is used Respond to a 'GET /' with a status page Respond to a 'GET with the file ./path Do not treat lack of close_notify from a peer as an error Hex dump of all TLS extensions received Like -WWW but ./path includes HTTP headers Generate SSL/TLS session IDs prefixed by arg Export keying material using label Export len bytes of keying material; default 20 CRL file format (PEM or DER); default PEM Download CRLs from distribution points in certificate CDP entries CA file for certificate chain (PEM format) use dir as certificate store path to build CA certificate chain use URI as certificate store to build CA certificate chain CA file for certificate verification (PEM format) use dir as certificate store path to verify CA certificate use URI as certificate store to verify CA certificate Disable internal cache, set up and use external cache Close connection on verification error No verify output except verify errors Ignore input EOF (default when -quiet) Pre-compress server certificates Request certificate status from server Print more output in certificate status callback Status request responder timeout [http[s]://]host[:port][/path] of HTTP(S) proxy to use; path is ignored File containing DER encoded OCSP Response Print output from SSL/TLS security framework Print more output from SSL/TLS security framework Restrict output to brief summary of connection parameters act as an echo server that sends back received text reversed File to send output of -msg or -trace, instead of stdout Maximum number of encrypt/decrypt pipelines to be used Terminate after #num connections Default read buffer size to be used for connections Size used to split data for encrypt pipelines File to read PSK SSL session from (deprecated) The verifier file for SRP (deprecated) A seed string for a default user salt Protocol and version options:
The maximum number of bytes of early data as advertised in tickets The maximum number of bytes of early data (hard limit) The number of TLSv1.3 session tickets that a server will automatically issue Switch on anti-replay protection (default) Switch off anti-replay protection opening files in binary mode when acting as http server (-WWW and -HTTP) Disable TLS Extension CA Names Listen for a DTLS ClientHello with a cookie and then connect Offer SRTP key management with a colon-separated profile list Set the advertised protocols for the NPN extension (comma-separated list) Set the advertised protocols for the ALPN extension (comma-separated list) Enable Kernel TLS for sending and receiving Use sendfile to response file with -WWW Use zerocopy mode of KTLS sendfile Enable raw public keys (RFC7250) from the server Enable raw public keys (RFC7250) from the client Disable SSL/TLS compression (default) Disable sending TLSv1.3 compressed certificates Disable receiving TLSv1.3 compressed certificates Disable use of TLS session tickets Use server's cipher preferences Enable use of legacy renegotiation (dangerous) Allow client-initiated renegotiation Allow initial connection to servers that don't support RI Disallow session resumption on renegotiation Disallow initial connection to servers that don't support RI In TLSv1.3 allow non-(ec)dhe based key exchange on resumption In TLSv1.3 prefer non-(ec)dhe over (ec)dhe-based key exchange on resumption Prioritize ChaCha ciphers when preferred by clients Enforce strict certificate checks as per TLS standard Signature algorithms to support (colon-separated list) Signature algorithms to support for client certificate authentication (colon-separated list) Groups to advertise (colon-separated list) Elliptic curve used for ECDHE (server-side only) Specify TLSv1.2 and below cipher list to be used Specify the minimum protocol version to be used Specify the maximum protocol version to be used Block size to pad TLS 1.3 records to. Perform all sorts of protocol violations for testing purposes Disable TLSv1.3 middlebox compat mode Disable Encrypt-then-Mac extension Disable Extended master secret extension Extended certificate options:
cert for Extended certificates chain for Extended certificates build certificate chain for the extended certificates format of Extended certificate (PEM/DER/P12); has no effect format of Extended certificate's key (DER/PEM/P12); has no effect Usage: %s [options] [host:port]
Specify engine to be used for client certificate operations Use specified section for SSL_CTX configuration Request and parse SCTs (also enables OCSP stapling) Do not request or parse SCTs (default) TCP/IP where to connect; default: 4433) bind local address for connection Connect to via specified proxy to the real server UserID for proxy authentication Proxy authentication password source Connect over the specified Unix-domain socket Enable Maximum Fragment Length Negotiation (len values: 512, 1024, 2048 and 4096) Client certificate file to use Client certificate file format (PEM/DER/P12); has no effect Client certificate chain file (in PEM format) Build client certificate chain Private key file to use; default: -cert file PEM format file of CA names to send to the server DANE TLSA rrdata presentation form Disable name checks when matching DANE-EE(3) TLSA records Hostname to use for "-starttls lmtp", "-starttls smtp" or "-starttls xmpp[-server]" Drop and re-make the connection with the same Session-ID Ignore input eof (default when -quiet) Use the appropriate STARTTLS command before starting TLS Alias of -name option for "-starttls xmpp[-server]" Print session information when the program exits Don't run the client in the interactive mode Show all certificates sent by the server Enable security debug messages Output more security debug output Show trace output of protocol messages Do not use interactive command letters Set TLS extension servername (SNI) in ClientHello (default) Do not send the server name (SNI) extension in the ClientHello types Send empty ClientHello extensions (comma-separated numbers) Enable ALPN extension, considering named protocols supported (comma-separated list) Support asynchronous operation Enable send/receive timeout on DTLS connections Enable NPN extension, considering named protocols supported (comma-separated list) Enable post-handshake-authentication (deprecated) SRP authentication for 'user' (deprecated) Password for 'user' (deprecated) SRP username into second ClientHello message (deprecated) Tolerate other than the known g N values. (deprecated) Minimal length in bits for N Download CRL from distribution points CRL format (PEM or DER); default PEM Restrict verify output to errors Use dir as certificate store path to build CA certificate chain CA store URI for certificate chain Use dir as certificate store path to verify CA certificate CA store URI for certificate verification Where to connect; same as -connect option Input key, by default an RSA private key Private key format (ENGINE, other values ignored) Input key is an RSA public pkey Input is a cert carrying an RSA public key Reverse the order of the input buffer Use PKCS#1 v1.5 padding (default) Run output through asn1parse; useful with -verify Input format (DER/PEM/P12/ENGINE) Output format, one of DER PEM PVK Use traditional format for private keys Specify the cipher for private key encryption Specify engine to be used for key generation operations X.509 request input file (default stdin) Verify self-signature on the request Config section to use (default "req") Input characters are UTF8 (default ASCII) Output an X.509 certificate structure instead of a cert request Request cert generation with X.509 version 1 Issuer cert to use for signing a cert, implies -x509 Issuer private key to use with -CA; default is -CA arg Set or modify subject of request or cert Print the subject of the output request or cert Number of days certificate is valid for copy extensions from request when using -x509 Cert or request extension section (override value in config file) Additional cert extension key=value pair (may be given more than once) Add a poison extension to generated cert (implies -new) Key for signing, and to include unless -in given Private key and certificate password source Generate new key with [:] or [:] or param: Public key options as opt:value Do not ask anything during request generation Don't encrypt private keys; deprecated Output "NEW" in the header lines Usage: %s [options] [directory...]
Create both new- and old-style hash links Use old-style hash to generate links One or more directories to process (optional) Usage: %s [options] num[K|M|G|T]
Usage: %s [options] [number...]
When used with -generate, generate a safe prime Number(s) to check for primality if not generating Also use engine given by -engine for crypto operations Sign input data with private key Encrypt input data with public key Decrypt input data with private key Derive shared secret from own and peer (EC)DH keys Input key, by default private key Peer key file used in key derivation Peer key format (DER/PEM/P12/ENGINE) Input is a cert with a public key Signature file (verify operation only) File to store secret on encapsulation parse the output as ASN.1 data to check its DER encoding and print errors Verify RSA signature, recovering original signature input data Signing/Derivation/Encapsulation options:
Indicate that the signature/verification input data is not yet hashed The digest algorithm to use for signing/verifying raw input data. Implies -rawin Public key option that is read as a passphrase argument opt:passphrase KEM operation specific to the key algorithm Don't output encoded parameters Read only public components from key input Output file for encoded and/or text output Output encoding format (DER or PEM) Any supported cipher to be used for encryption Output PEM file pass phrase source Use traditional format for private key PEM output Restrict encoded output to public components Do not output the key in encoded form Output key components in plaintext Output only public key components in text form Specifies the EC point conversion form in the encoding Specifies the way the EC parameters are encoded Set the PRF algorithm to use with PKCS#5 v2.0 Use or expect unencrypted private key use traditional format private key Specify the salt length (in bytes) Default: 8 (For PBE1) or 16 (for PBE2) Print full details of certificates Print out all fields of the PKCS7 structure Print_certs print any certs or crl in the input When used with -print_certs, it produces a cleaner output Set PKCS#12 import/export password source Separate MAC, encryption passwords Don't output anything, just verify PKCS#12 input Use legacy encryption: 3DES_CBC for keys, RC2_CBC for certs PKCS#12 import (parsing PKCS#12) options:
Print info about PKCS#12 structure Only output client certificates Any supported cipher for output encryption PKCS#12 output (export) options:
Private key, else read from -in input file Extra certificates for PKCS12 output Certificate file pass phrase source Build and add certificate chain for EE cert, which is the 1st cert from -in matching the private key (if given) Untrusted certificates for chain building Use name as CA friendly name (can be repeated) Add local machine keyset attribute to private key Set key type to MS key exchange Set key type to MS key signature Private key PBE algorithm (default AES-256 CBC) Certificate PBE algorithm (default PBES2 with PBKDF2 and AES-256 CBC) Encrypt output with 3DES (default PBES2 with PBKDF2 and AES-256 CBC) Digest algorithm to use in MAC (default SHA256) Use PBMAC1 with PBKDF2 instead of MAC Digest to use for PBMAC1 KDF (default SHA256) Specify the iteration count for encryption and MAC Don't use encryption iteration Unused, kept for backwards compatibility Mark certificate in PKCS#12 store as trusted for JDK compatibility Usage: %s [options] [password]
Never verify when reading password from terminal SHA512-based password algorithm SHA256-based password algorithm MD5-based password algorithm, Apache variant AIX MD5-based password algorithm Password text to digest (optional) Ignore error on OCSP request or response and continue running Connection timeout (in seconds) to the OCSP responder Don't include any certificates in response run multiple responder processes Don't include any certificates in signed request Corrupt last byte of loaded OCSP response signature (for test) Number of minutes before next update Number of requests to accept (default unlimited) File with the DER-encoded request Certificate to sign OCSP request with Additional certificates to include in signed request Number of days before next update Responder certificate to sign responses with Responder key to sign responses with Responder key pass phrase source Other certificates to include in response Digest Algorithm to use in signature of OCSP response OCSP response signature parameter in n:v form Use specified algorithm for cert id in response Any supported digest algorithm (sha1,sha256, ... ) TCP/IP hostname:port to connect to Don't add OCSP nonce to request Don't check signature on response Identify response by signing certificate key ID Don't check signing certificate Print text form of request and response Don't do additional checks on signing certificate Do not explicitly check the chain, just verify the root Don't verify additional certificates Don't search certificates contained in response for signer File with the DER-encoded response Additional certificates to search for signer Certificate to check; may be given multiple times Serial number to check; may be given multiple times Maximum validity discrepancy in seconds Private key to sign OCSP request with Output file for the DER-encoded request Output file for the DER-encoded response MAC algorithm parameters in n:v form See 'PARAMETER NAMES' in the EVP_MAC_ docs Input file to MAC (default is stdin) Output in binary format (default is hexadecimal) Usage: help [options] [command]
Name of command to display help (optional) Set options for strict FIPS compliance Verify a config file instead of generating one File name of the provider module FIPS Provider config section name (optional) Disable the ability of the fips module to enter an error state if any conditional self tests fail Disable the run-time FIPS security checks in the module Forces self tests to always run on module load Forces self tests to run once on module installation Enable the run-time FIPS check for EMS during TLS1_PRF Disallow truncated digests with Hash and HMAC DRBGs Enable checking for approved digests for signatures Enable digest check for TLS13-KDF Enable digest check for TLS1-PRF Enable digest check for SSHKDF Enable digest check for X963KDF Disallow Triple-DES encryption Disallow PKCS#1 version 1.5 padding for RSA encryption Enable salt length check for RSA-PSS signature operations Disallow X931 Padding for RSA signing Enable key check for TLS13-KDF Disable lower bound check for PBKDF2 Enable Cofactor check for ECDH Input config file, used when verifying Output config file, used when generating MAC algorithm parameters in n:v form. Disable logging of self test events Corrupt a self test by description List of message digest commands (deprecated) List of message digest algorithms List of key derivation and pseudo random function algorithms List the primary, public and private random number generator details List of random number generators List of message authentication code algorithms List of cipher commands (deprecated) List of symmetric cipher algorithms List of symmetric key managers List of key exchange algorithms List of key encapsulation mechanism algorithms List of TLS signature algorithms List of asymmetric cipher algorithms List implemented TLS key exchange 'groups' List implemented TLS key exchange 'groups' and all aliases When listing 'groups', list those compatible with TLS1.2 When listing 'groups', list those compatible with TLS1.3 List options for specified command List built in objects (OID<->name mappings) KDF algorithm control parameters in n:v form See 'Supported Controls' in the EVP_KDF_ docs
The size of the output derived key Default configuration file directory Default engine module directory Default module directory (other than engine modules) Configured extension for modules (deprecated) Use 3 for the E value Use the Fermat number F4 (0x10001) for the E value Output the key to specified file Encrypt the output with any supported cipher Output status while generating keys Do not output status while generating keys Set the public key algorithm option as opt:value Cipher to use to encrypt the key Order of options may be important! See the documentation.
Usage: %s [options] dsaparam-file
Output the key to the specified file File containing DSA parameters Usage: %s [options] errnum...
Usage: %s [options] engine...
Check that specified engine is available Run command against the ENGINE before loading it Run command against the ENGINE after loading it List 'control commands' For each specified engine Also display each command's description Also add the input flags for each command Also show internal input flags List the capabilities of specified engine Display error trace for unavailable engines Commands are like "SO_PATH:/lib/libdriver.so" Base64 encode/decode, depending on encryption flag Used with -[base64|a] to specify base64 buffer as a single line Disable standard block padding Use specified digest to create a key from the passphrase Specify the iteration count and force the use of PBKDF2 Use password-based key derivation function 2 (PBKDF2) Use -iter to change the iteration count from 10000 Specify the PBKDF2 salt length (in bytes) Compress or decompress encrypted data using zlib Key options as opt:value for opaque symmetric key handling Symmetric key management name for opaque symmetric key handling Prints a list of all curve 'short names' Print the ec parameters in text form Specifies the way the ec parameters are encoded Check that named EC curve parameters have not been modified If 'explicit' parameters are chosen do not use the seed Use the ec parameters with specified 'short name' Specifies the point conversion form Print the elliptic curve parameters exclude public key from private key point-format include-public unable to print EC key
unable to check EC key
EC Key Invalid!
EC Key valid.
writing EC key
unable to write EC key
apps/ec.c read EC key
%s => %s
prime192v1 prime256v1 list curves apps/ecparam.c %-10s: secp192r1 secp256r1 group SM2 sm2 unable to generate key
EC parameters EC SM2 parameters unable to clear seed
unable to print params
group-check unable to set check_type
algorithm name apps/kdf.c non-hex digit
base64 zlib Supported ciphers:
%s Can't read key from %s
%s: out of memory
bufsize=%d
strbuf evp buffer Unstreamable cipher mode
encryption decryption enter %s %s password: bad password read
invalid hex salt value
RAND_bytes failed
error writing output file
error reading input file
bad magic number
PKCS5_PBKDF2_HMAC failed
EVP_BytesToKey failed
invalid hex iv value
iv undefined
invalid hex key value
Error setting cipher %s
salt= key= iv = bad encrypt
bad decrypt
bytes read : %8ju
bytes written: %8ju
apps/enc.c %s: zero length password
engine buffer apps/engine.c STORE(%s) Loaded: (%s) %s
RAND [%s]
[ available ]
[ unavailable ]
description buffer %s%s(input flags):
[Internal] STRING NUMERIC | NO_INPUT <0x%04X> %lx params file apps/gendsa.c Undefined %s: Only one item allowed
%s: No items chosen
Invalid KDF name %s
KDF parameter error
Invalid derived key length.
out buffer EVP_KDF_derive failed
%s
ERROR: Memory allocation
%sLegacy:
%sProvided:
@ %s
description: %s
%*sEmpty list of %s (!!!)
settable operation parameters Provided MACs:
Provided KDFs and PDFs:
uninitialised ready %s state = %s
state %*s%s: %llu
error getting value
%lld
<%zu bytes>
Provided ENCODERs:
@ %s (%s)
Provided DECODERs:
Name: Type: Provider Algorithm
IDs: tls-sigalg-iana-name TLS-SIGALG %-*s Provided STORE LOADERs:
External Builtin (none) - -
%s %c
Digests:
Symmetric Ciphers:
Provided Key Exchange:
Provided Signatures:
Provided Key encapsulation:
Provided Key managers:
primary private apps/list.c %s%c Key Managers:
Name: %s
Alias for: %s
Type: %s Algorithm
OID: %s
PEM string: %s
Encryption:
Providers:
buildinfo name: %s
version: %s
status: %sactive
build info: %s
gettable provider parameters Engines:
Disabled algorithms:
EC2M
MDC2
SM2
SM4
SSL3
BROTLI
ZSTD
# None-OID object: %s, %s
%s = %s
%s = %s, %s
uint float %s%s:%s
Can't open parameter file %s
Error initializing context
Bad format specified for key
Error writing key(s)
Error printing key
apps/genpkey.c Algorithm already set!
Error setting RSA length
Error cannot access RSA e
e is %s (0x%s)
apps/genrsa.c apps/mac.c x509toreq signkey Same as -key Output file - default stdout nocert certopt Print certificate alias Print serial number value Print the notBefore field Print the notAfter field Print subject DN Print email address(es) subject_hash Print subject hash value subject_hash_old issuer_hash Print issuer hash value issuer_hash_old ocspid ocsp_uri Print OCSP Responder URL(s) Print the RSA key modulus checkend checkhost checkemail checkip Certificate output options:
set_serial next_serial preserve_dates set_issuer Alias for -set_subject force_pubkey clrext Micro-CA options:
CAform CAkey CAkeyform CAserial CAcreateserial trustout setalias clrtrust Clear all trusted purposes addtrust clrreject addreject Show all data Show build date Show configuration directory Show engines directory Show modules directory Show compiler flags used Show target build platform Show random seeding options Show library version Show CPU settings info Certificate chain options:
CRLfile crl_download show_chain Configuration file Signer certificate file File with signer CA chain File with trusted CA certs Path to trusted CA files URI to trusted CA store Extra untrusted certs token_in Input is a PKCS#7 file token_out Output is a PKCS#7 file Query options:
Generate a TS query File to hash Digest (as a hex string) queryfile File containing a TS query Put cert request into query Verify options:
Verify a TS response Generate a TS reply tspolicy Policy OID to use no_nonce Do not include a nonce Output text (not DER) Usage: %s [options] uri
Search options:
Search for certificates only Search for keys only crls Search for CRLs only Search by subject Search by alias Recurse through names No PEM output, just status URI of the store object Talk a lot while doing things Action options:
Add a user and SRP verifier modify delete List users srpvfile The srp verifier file name userinfo spksect challenge Challenge string Alternative SPKAC name Don't print SPKAC Output public key Verify SPKAC signature mb mr Run benchmarks in parallel async_jobs mlock testmode Selection options:
evp HMAC using EVP-named digest cmac CMAC using EVP-named cipher aead kem-algorithms Benchmark KEM algorithms Timing options:
elapsed misalign pk7out Output PKCS#7 structure Signing/Encryption options:
Email options:
nochain skeyopt skeymgmt Set the session ID context Print ssl session id details Output certificate Connection options:
Just time new connections Just time connection reuse bugs Turn on SSL bug compatibility Just use TLSv1.0 Just use TLSv1.1 Just use TLSv1.2 Just use TLSv1.3 www cafile PEM format file of CA's PEM format directory of CA's URI to store of CA's ssl_config trace trace protocol messages Network options:
unix unlink Use IPv4 only Use IPv6 only Identity options:
Set session ID context cert2 build_chain serverinfo key2 dcertform dcert_chain dkey dkeyform dpass dhparam DH parameters file to use servername_fatal nbio_test No server output no_resume_ephemeral WWW ignore_unexpected_eof tlsextdebug HTTP id_prefix keymatexport keymatexportlen CRL file to use CRLform chainCAfile chainCApath chainCAstore verifyCAfile verifyCApath verifyCAstore no_cache Disable session cache ext_cache verify_return_error verify_quiet no_ign_eof Do not ignore input EOF OCSP options:
status_verbose status_timeout status_url Status request fallback URL status_file Debug options:
security_debug security_debug_verbose brief Print more output msg Show protocol messages msgfile Print the SSL states async Operate in asynchronous mode max_pipelines naccept keylogfile Write TLS secrets to file nbio Use non-blocking IO Enable timeouts mtu Set link-layer MTU read_buf split_send_frag max_send_frag Maximum Size of send frames Server identity options:
PSK identity to expect psk_hint PSK identity hint to use PSK in hex (without 0x) psk_session srpuserseed recv_max_early_data Attempt to read early data num_tickets no_anti_replay http_server_binmode no_ca_names stateless Require TLSv1.3 cookies Just talk TLSv1 Just talk TLSv1.1 just talk TLSv1.2 just talk TLSv1.3 dtls Use any DTLS version listen dtls1 Just talk DTLSv1 dtls1_2 Just talk DTLSv1.2 sctp Use SCTP sctp_label_bug Enable SCTP label length bug use_srtp no_dhe Disable ephemeral DH nextprotoneg alpn ktls zerocopy_sendfile enable_server_rpk enable_client_rpk TLS/SSL options:
no_ssl3 Just disable SSLv3 no_tls1 Just disable TLSv1 no_tls1_1 Just disable TLSv1.1 no_tls1_2 Just disable TLSv1.2 no_tls1_3 Just disable TLSv1.3 no_comp Use SSL/TLS-level compression no_tx_cert_comp no_rx_cert_comp no_ticket serverpref legacy_renegotiation client_renegotiation Disable all renegotiation. no_resumption_on_reneg no_legacy_server_connect allow_no_dhe_kex prefer_no_dhe_kex prioritize_chacha client_sigalgs named_curve min_protocol max_protocol record_padding debug_broken_protocol no_middlebox no_etm no_ems xkey key for Extended certificates xcert xchain xchain_build xcertform xkeyform ssl_client_engine noct ctlogfile CT log list CONF file Use -connect instead bind proxy_user proxy_pass maxfraglen fallback_scsv Send the fallback SCSV requestCAfile dane_tlsa_domain DANE TLSA base domain dane_tlsa_rrdata dane_ee_no_namechecks PSK identity Session options:
reconnect sess_out File to write SSL session to sess_in File to read SSL session from Input/Output options:
No s_client output Don't ignore input eof starttls xmpphost prexit no-interactive showcerts Extra output More ssl protocol testing Print the ssl states nocommands adv Advanced command mode noservername Just use TLSv1 Use any version of DTLS quic Use QUIC Set the link layer MTU Just use DTLSv1 Just use DTLSv1.2 File to send as early data enable_pha srpuser srppass srp_lateuser srp_moregroups srp_strength host:port Sign with private key Verify with public key Encrypt with public key Decrypt with private key certin raw Use no padding pkcs x931 Use ANSI X9.31 padding oaep Use PKCS#1 OAEP asn1parse hexdump Hex dump output Verify key consistency RSAPublicKey_in Input is an RSAPublicKey Output a public key RSAPublicKey_out Output is an RSAPublicKey traditional PVK options:
keygen_engine New request Request template file reqopt Various request text options Text form of request x509 x509v1 (Required by some CA's) Serial number to use An alias for -extensions addext precert Keys and Signing options:
File to write private key to pkeyopt noenc Don't encrypt private keys nodes Do not output REQ newhdr RSA modulus compat Do not remove existing links Base64 encode output Hex encode output Number of bytes to generate Size of number in bits Number of checks Hex output Generate a prime safe derive decap Decapsulate shared secret encap Encapsulate shared secret Input key is a public key peerkey peerform sigfile verifyrecover rawin pkeyopt_passin kdf Use KDF algorithm kdflen KDF algorithm output length kemop Check key param consistency Print parameters as text Check key consistency pubcheck Check public key consistency Key input pass phrase source text_pub ec_conv_form ec_param_enc Use PKCS#5 v1.5 and cipher v2 Use PKCS#5 v2.0 and cipher v2prf Input format (DER or PEM) nocrypt Output format (DER or PEM) topk8 Output PKCS8 file Specify the iteration count Use 1 as iteration count Scrypt options:
scrypt Use scrypt algorithm scrypt_N Set scrypt N parameter scrypt_r Set scrypt r parameter scrypt_p Set scrypt p parameter Don't output encoded data print_certs twopass nokeys Don't output private keys Don't output certificates legacy nomacver Don't verify integrity MAC clcerts cacerts Only output CA certificates Create PKCS12 file passcerts PEM-format file of CA's PEM-format directory of CA's Use name as friendly name caname CSP Microsoft CSP name LMK keyex keysig keypbe certpbe macalg pbmac1_pbkdf2 pbmac1_pbkdf2_md nomaciter Don't use MAC iteration) macsaltlen Specify the salt len for MAC nomac Don't generate MAC jdktrust Read passwords from file Read passwords from stdin No warnings Format output as table reverse Switch table columns Cryptographic options:
Use provided salt apr1 MD5-based password algorithm aixmd5 ignore_err Responder options:
resp_no_certs nmin nrequest sign_other index Certificate status index file ndays rsigner rother rmd rsigopt key=value header to add rcid Client options:
Responder URL Port to run responder on Path to use in OCSP request Output filename Don't verify response at all Add OCSP nonce to request no_signature_verify resp_key_id no_cert_verify req_text Print text form of request resp_text Print text form of response no_chain Don't chain verify response no_cert_checks no_explicit trust_other no_intern respin VAfile Validator certificates file verify_other validity_period respout Issuer certificate status_age Maximum status age in seconds toseq Output NS Sequence file Usage: %s [options] mac_name
Cipher Digest mac_name MAC algorithm command pedantic module provider_name FIPS provider name section_name no_conditional_errors no_security_checks self_test_onload self_test_oninstall ems_check no_short_mac Disallow short MAC output no_drbg_truncated_digests signature_digest_check hmac_key_check Enable key check for HMAC kmac_key_check Enable key check for KMAC Enable digest check for HKDF tls13_kdf_digest_check tls1_prf_digest_check sshkdf_digest_check sskdf_digest_check Enable digest check for SSKDF x963kdf_digest_check dsa_sign_disabled Disallow DSA signing tdes_encrypt_disabled rsa_pkcs15_padding_disabled rsa_pss_saltlen_check rsa_sign_x931_disabled Enable key check for HKDF kbkdf_key_check Enable key check for KBKDF tls13_kdf_key_check tls1_prf_key_check Enable key check for TLS1-PRF sshkdf_key_check Enable key check for SSHKDF sskdf_key_check Enable key check for SSKDF x963kdf_key_check Enable key check for X963KDF x942kdf_key_check Enable key check for X942KDF no_pbkdf2_lower_bound_check ecdh_cofactor_check corrupt_desc corrupt_type Corrupt a self test by type The parent config to verify No messages, just exit status List in one column Verbose listing select Select a single algorithm List of standard commands standard-commands all-algorithms List of all algorithms digest-commands digest-algorithms kdf-algorithms random-instances random-generators mac-algorithms cipher-commands encoders List of encoding methods decoders List of decoding methods List of key managers skey-managers key-exchange-algorithms List of signature algorithms tls-signature-algorithms asymcipher-algorithms public-key-algorithms List of public key algorithms public-key-methods List of public key methods store-loaders List of store loaders all-tls-groups providers List of provider information List of loaded engines List of disabled features objects cms crl2pkcs7 dgst ecparam errstr fipsinstall gendsa genpkey genrsa nseq ocsp passwd pkcs12 pkcs8 pkeyparam pkeyutl rehash rsautl s_client s_server s_time sess_id skeyutl smime speed storeutl md2 md4 sha224 sha512-224 sha512-256 sha3-224 sha3-256 sha3-384 sha3-512 shake128 shake256 rmd160 blake2b512 blake2s256 sm3 aes-128-cbc aes-128-ecb aes-192-cbc aes-192-ecb aes-256-cbc aes-256-ecb aria-128-cbc aria-128-cfb aria-128-ctr aria-128-ecb aria-128-ofb aria-128-cfb1 aria-128-cfb8 aria-192-cbc aria-192-cfb aria-192-ctr aria-192-ecb aria-192-ofb aria-192-cfb1 aria-192-cfb8 aria-256-cbc aria-256-cfb aria-256-ctr aria-256-ecb aria-256-ofb aria-256-cfb1 aria-256-cfb8 camellia-128-cbc camellia-128-ecb camellia-192-cbc camellia-192-ecb camellia-256-cbc camellia-256-ecb des3 desx idea rc4 rc4-40 rc2 bf cast rc5 des-ecb des-ede des-ede3 des-cbc des-ede-cbc des-ede3-cbc des-cfb des-ede-cfb des-ede3-cfb des-ofb des-ede-ofb des-ede3-ofb idea-cbc idea-ecb idea-cfb idea-ofb seed-cbc seed-ecb seed-cfb seed-ofb rc2-cbc rc2-ecb rc2-cfb rc2-ofb rc2-64-cbc rc2-40-cbc bf-cbc bf-ecb bf-cfb bf-ofb cast5-cbc cast5-ecb cast5-cfb cast5-ofb cast-cbc rc5-cbc rc5-ecb rc5-cfb rc5-ofb Usage: %s [options] kdf_name
kdfopt keylen kdf_name Name of the KDF algorithm configdir enginesdir modulesdir dsoext dirnamesep Directory-filename separator listsep List separator character seeds Seed sources cpusettings windowscontext Windows install context Usage: %s [options] numbits
F4 f4 Specify number of primes Size of key in bits paramfile Parameters file The public key algorithm Output (private key) file outpubkey Output public key file output format (DER or PEM) genparam Generate parameters, not key Print the private key in text dsaparam-file errnum Error number(s) to decode pre post vvvv tt ID of engine(s) to load List ciphers Alias for -list Encrypt Decrypt Print the iv/key Print the iv/key and exit Passphrase kfile Read passphrase from file Passphrase source Same as option -a nopad Use salt in the KDF (default) nosalt Do not use salt in the KDF bufsize Buffer size Raw key, in hex Salt, in hex IV in hex Default: 10000 Don't encrypt Default: 16 uncompressed hybrid list_curves Generate ec key Input file - default stdin Do not print the ec parameter Parameter options:
Validate the ec parameters check_named no_seed check key consistency Print the key param_out no_public x xP@0 xpX0 pX 8X H 8 ( 8(h h xhp@8(xXp#x"x$`$H$($$#"&'&&t'd'T'D'4'$''**h*(@*(*))* A@d@ AD@ @@ @`TadccDaggffeeeeeeeeleTeDe4e$eeedddddddddTd
unable to load PKCS7 object
%s: Unknown PBE algorithm %s
%s: Unknown PRF algorithm %s
Error converting key
Error setting PBE algorithm
Enter Encryption Password: Error encrypting key
Error reading key
Enter Password: Error decrypting key
apps/pkcs8.c Public Key Key is valid
Key is invalid
apps/pkey.c Error reading parameters
Parameters are valid
Parameters are invalid
oneshot sign/verify buffer Error reading raw input data
buffer output Error signing raw input data
apps/pkeyutl.c (unknown key type) %s: Error loading key
Error: out of memory
peer key Error reading peer key %s
Enter %s: user abort
entry failed
failed to get '%s'
Can't open signature file %s
Error reading signature data
Error reading input Data
secret output Public Key operation error
Key derivation failed
is is not Specify the number of bits.
Out of memory.
Failed to generate prime.
apps/prime.c Failed to process value (%s)
Error checking prime
(%s) %s prime
Missing number (s) to check
Invalid size suffix %s
buffer for output file apps/rand.c hash bucket collision bucket Error creating SSL context.
application/ocsp-response application/ocsp-request (core dumped) apps/ocsp.c issuer certificate Error Creating OCSP request
Error reading OCSP request
responder certificate responder other certificates responder private key child PID array waitpid() failed: %s apps/lib/http_server.c RAND_poll() failed terminating on signal: %d index file changed, reloading signer private key signer certificates Error signing OCSP request
assertion failed: bn assertion failed: itmp Error reading OCSP response
Responder Error: %s (%d)
validator certificates Error parsing response
Nonce Verify error
Response Verify Failure
Response verify OK
ERROR: No Status found.
This Update: Next Update: Reason: %s
Revocation Time: apps_startup prog_init org.openssl.engine OPENSSL_TEST_LIBCTX null --h --version --v apps/openssl.c Cannot write random bytes:
apps/lib/app_rand.c %.*s
%02X %s (%s)
Skipping %s, can't write
Doing %s
Skipping %s, out of memory
filename buffer %s%s%s link %s -> %s
%s%s%08x.%s%d %s: Can't unlink %s, %s
%s: Can't symlink %s, %s
unlink %s
crt cer %s: Error reading certs file %s
%s: Error reading sequence file %s
The command %s was deprecated in version %s.
Message Digest commands (see the `dgst' command for more details)
Cipher commands (see the `enc' command for more details)
%s: Can't combine -in and -stdin
Warning: -%s option ignored with -export
Warning: output encryption option -%s ignored with -export
Warning: -%s option ignored without -export
Error getting certificate file password
Option -twopass cannot be used with -passout or -password
Option -twopass cannot be used with -passin or -password
Nothing to export due to -noout or -nocerts and -nokeys
Warning: -chain option ignored with -nocerts
No certificate in -in file %s
No cert in -in file '%s' matches private key
No end entity certificate to check with -chain
extra certificates from -certfile Error creating PKCS12 structure for %s
Error creating PKCS12 MAC; no PKCS12KDF support?
Use -nomac or -pbmac1_pbkdf2 if PKCS12KDF support not available
, Unsupported KDF or params for PBMAC1
Key length: %ld, Salt length: %d
MAC length: %ld, salt length: %ld
Error verifying PKCS12 MAC; no PKCS12KDF support.
Use -nomacver if MAC verification is not required.
Verbatim password did not match, and fallback conversion to UTF-8 failed
The password entered or the input encoding may be wrong
Mac verify error: invalid password?
Warning: using broken algorithm
Error outputting keys and certificates
unable to allocate PKCS7 object
Warning: The -text option is ignored with -text_pub
Warning: The -traditional is ignored since there is no PEM output
Warning: The -passout option is ignored without a cipher option
Error: Cipher options are supported only for PEM output
Error: Text output cannot be combined with DER output
Error: unable to determine file size for oneshot operation
Error verifying raw input data
%s: no KDF length given (-kdflen parameter).
%s: no private key given (-inkey parameter).
%s: -peerkey option not allowed without -derive.
%s: missing -peerkey option for -derive operation.
A private key is needed for this operation
%s: -verifyrecover can be used only with RSA
%s: -rev cannot be used with raw input
%s: -digest (prehash) is not supported with %s
%s: -digest and -rawin can only be used with -sign or -verify
The given KDF "%s" is unknown.
%s: Error initializing context
Type of peer public key: %s does not match type of private key: %s
%s: Error setting up peer key
%s: Can't set parameter "%s":
%s: Signature file specified for non verify
%s: No signature file specified for verify
%s: Decapsulation produces only a shared secret and no output. The '-out' option is not applicable.
KEM-based shared-secret derivation requires the '-secret ' option
Error: The non-raw input data length %zd is too long - max supported hashed size is %d
Signature Verified Successfully
Signature Verification Failure
%lu bytes with suffix overflows
Request exceeds max allowed output
%s: warning: skipping duplicate %s in %s
%s: error: hash table overflow for %s
Error querying OCSP responder
%s Error parsing -url argument
No issuer certificate specified
Error converting serial number %s
Missing = in header key=value
%s: Digest must be before -cert or -serial
Error loading responder certificate
Responder mode requires certificate, key, and CA.
error detaching from parent process group: %s internal error: no matching child slot for pid: %ld child process: %ld, exit status: %d child process: %ld, term signal %d%s waiting for OCSP client connections... error reloading updated index: %s Need an OCSP request for this operation!
Error loading signer certificate
WARNING: no nonce in response
WARNING: Status times invalid.
internal error: no free child slots OpenSSL application user interface Failed to create null provider
Failed to create library context
FATAL: Startup failure (dev note: %s()) for %s
%s: could not get default config file
%s: error: skipping %s, cannot open file
%s: warning: skipping %s, it does not contain exactly one certificate or CRL
%s: error calculating SHA1 hash value
} }|@{||@|| @ 8(@0 xhHؓ̕|l\L<, ԗė|d||ܖL4 dL Ԙt\L<, ܒ L<0@0 س`ĸ<ܻ|dTD|L ԼD4 lxH0P@0tpp` @0hP8 pP```` xxppP@LP8hpXH8(
p
X
@
(
p P 0
x P @ ( h 443433333T5333333333333333335 ./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz$ apps/req.c pkcs1 PrivateKeyInfo RSA-PSS Not an RSA key
Modulus= RSA key ok
RSA key not ok
writing RSA key
apps/rsa.c hold rsa key output rsa key RSA operation error
apps/rsautl.c psk_client_cb
created identity '%s' len=%d
apps/s_client.c created PSK len=%ld
Error in PSK client callback
Can't use SSL_get_servername
SERVERINFO FOR EXTENSION %d hexdecode %s '%s' too long
req_extensions Can't find keygen engine %s
Serial number supplied twice
Duplicate extension name: %s
Unknown cipher: %s
input_password output_password default_bits Unable to determine key type
Error setting keysize
Key parameter error "%s"
default_keyfile Writing private key to stdout
encrypt_rsa_key encrypt_key -----
X509 request issuer cert from -CA arg prompt distinguished_name Unable to get '%s' section
_min _max DN default DN value Attribute default Attribute value Error adding attribute
Error getting public key
Error printing certificate
Modulus is unavailable
Wrong Algorithm type Client_identity ,=;<<,<<<`??AA@?A@A(AAAAxAhAXA@@@8B(BBBAxJILKKKXKHKKKLLxLhLXLHL8L(LKxKhKXJ_(_pf0f feeeehec_Pe(eeddddd`d0d dccccaacXc@c cbbbbCa8abpb(_Xb@b bapcaagX_fff Only private keys can be checked
RSA unable to create PKEY context
NULL received PSK identity hint, continuing anyway
Received PSK identity hint '%s'
Could not convert PSK key '%s' to buffer
psk buffer of callback is too small (%d) for key (%ld)
Error finding suitable ciphersuite
Protocols advertised by server: Error writing session file %s
---
Post-Handshake New Session Ticket arrived:
issuer private key from -CA arg issuer private key from -CAkey arg %s: -days parameter arg must be >= -1
Parse error on -addext: missing '='
Parse error on -addext: missing key
Internal error handling -addext %s
Warning: Ignoring -days without -x509; not generating a certificate
Warning: Ignoring -not_before without -x509; not generating a certificate
Warning: Ignoring -not_after without -x509; not generating a certificate
Warning: Ignoring -copy_extensions 'none' when -x509 is not given
Warning: Will read cert request from stdin since no -in option is given
Using additional configuration from -addext options
Problems opening '%s' for extra OIDs
Error checking %s extension section %s
Error checking extensions defined using -addext
Warning: Not generating key via given -newkey option since -key is given
Parameter file requested but no path given: %s
Cannot open parameter file %s
Key type does not match parameters
Error allocating keygen context
Error initializing keygen context
Private key length too short, needs to be at least %d bits, not %ld.
Warning: It is not recommended to use more than %d bit for RSA keys.
Your key size is %ld! Larger key size may behave not as expected.
Warning: It is not recommended to use more than %d bit for DSA keys.
Your key size is %ld! Larger key size may behave not as expected.
Warning: Not placing -key in cert or request since request is used
Warning: Ignoring -in option since -new or -newkey or -precert is given
Warning: Ignoring -CAkey option since no -CA option is given
Issuer CA certificate and key do not match
Must provide a signature key using -key or provide -CA / -CAkey
Error: No objects specified in config file
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Please enter the following 'extra' attributes
to be sent with your certificate request
No template, please set one up.
Error making certificate request
Warning: Not using -key or -newkey for signing since -CA option is given
Warning: -not_after option overriding -days option
Warning: No -copy_extensions given; ignoring any extensions in the request
Error copying extensions from request
Warning: Signature key and public key of cert do not match
Error adding x509 extensions from section %s
Error adding x509 extensions defined via -addext
Error adding poison extension
Warning: Ignoring -precert flag since no cert is produced
Error adding request extensions from section %s
Error adding request extensions defined via -addext
Modifying subject of certificate request
Error modifying subject of certificate request
Certificate request self-signature verify failure
Certificate request self-signature verify OK
Error printing certificate request
Unable to write certificate request
Unable to write X509 certificate
OCSP response: no response sent
response parse error
{help}: Get this help text
DONE
RECONNECTING
RENEGOTIATING
noreq KEYUPDATE
ERROR
---
Reused, ---
New, ---
Certificate chain
%2d s: i: v:NotBefore: ; NotAfter: Server certificate
Server raw public key
no peer rpk available
---
SCTs present (%i)
SCT validation status: %s
---
%s, Cipher is %s
Protocol: %s
Server public key is %d bit
Compression: %s
Expansion: %s
Using Kernel TLS for sending
Next protocol: (%d) ALPN protocol: No ALPN negotiated
Early data was not sent
Early data was rejected
Early data was accepted
Verify return code: %ld (%s)
Keying material exporter:
Label: '%s'
Length: %i bytes
export key Error
Keying material: smtp IPv6 IPv4 unix mail.example.com localhost cbuf sbuf mbuf Error writing file %s
Not a hex number '%s'
%s: Value must be one of:
%s: Can't use both -4 and -6
Can't use -sctp without DTLS
Error getting proxy password
client certificate client certificate chain Error adding CRL
Unable to create BIO
Error setting verify params
Error loading CA names
Error setting SRTP profile
Error parsing -alpn argument
Error setting ALPN
Unable to set SRP username
Can't open session file %s
Can't set session
Connecting via TFO
apps/lib/s_socket.c Connecting to %s
connect:errno=%d
CONNECTED(%08X)
memory allocation failure
getsockname:errno=%d
Failed to set MTU
LHLO %s
EHLO %s
STARTTLS STLS
BIO_read failed
. CAPABILITY
. STARTTLS
AUTH TLS
To issue a command insert {cmd} or {cmd:arg} anywhere in the text
Entering {{ will send { to the peer
The following commands are available
{quit}: Close the connection to the peer
{reconnect}: Reconnect to the peer
{fin}: Send FIN on the stream. No further writing is possible
{keyup:req|noreq}: Send a Key Update message
Arguments:
req = peer update requested (default)
noreq = peer update not requested
{reneg}: Attempt to renegotiate
a:PKEY: %s, (%s); sigalg: %s
a:PKEY: %s, %d (bit); sigalg: %s
no peer certificate available
Client-to-server raw public key negotiated
Server-to-client raw public key negotiated
---
SSL handshake has read %ju bytes and written %ju bytes
Using Kernel TLS for receiving
SRTP Extension negotiated, profile=%s
%s: Intermixed protocol flags (unix and internet domains)
%s: Intermixed protocol flags (internet and unix domains)
Cannot supply multiple protocol flags
Cannot supply both a protocol flag and '-no_'
Error getting client auth engine
SRP minimal length for N is %d
%s: Max Fragment Len %u is out of permitted values %s: cannot provide both -connect option and target parameter
%s: Can't use -servername and -noservername together
%s: Can't use -dane_tlsa_domain and -noservername together
Cannot supply -nextprotoneg with TLSv1.3
%s: -connect argument or target parameter malformed or ambiguous
%s: -proxy requires use of -connect or target parameter
%s: -proxy argument malformed or ambiguous
%s: -bind argument parameter malformed or ambiguous
Can't use unix sockets and datagrams together
Error parsing -nextprotoneg argument
Error getting private key password
Error: Must specify proxy_user with proxy_pass
client certificate private key Error using configuration "%s"
%s: Max send fragment size %u is out of permitted range
%s: Split send fragment size %u is out of permitted range
%s: Max pipelines %u is out of permitted range
%s: Max Fragment Length code %u is out of permitted values
Error loading store locations
Error setting client auth engine
PSK key given, setting client callback
Can't open PSK session file %s
Can't read PSK session file %s
Warning: Unable to add custom extension %u, skipping
%s: Error enabling DANE TLSA authentication.
Error setting client certificate types
Error setting server certificate types
Unable to set TLS servername extension.
%s: DANE TLSA authentication requires at least one -dane_tlsa_rrdata option.
%s: warning: bad TLSA %s field in: %s
%s: warning: unusable TLSA rrdata: %s
%s: warning: error loading TLSA rrdata: %s
%s: Failed to import any TLSA records.
%s: DANE TLSA authentication requires the -dane_tlsa_domain option.
%s: DTLS does not support the -tfo option
%s: QUIC does not support the -tfo option
%s: QUIC requires ALPN to be specified (e.g. "h3" for HTTP/3) via the -alpn option
assertion failed: (family == AF_UNSPEC || family == BIO_ADDRINFO_family(ai)) && (type == 0 || type == BIO_ADDRINFO_socktype(ai)) && (protocol == 0 || protocol == BIO_ADDRINFO_protocol(ai)) Can't bind %saddress for %s%s%s
MTU too small. Must be at least %ld
Failed to set the initial peer address
Didn't find STARTTLS in server response, trying anyway...
Timeout waiting for response (%d seconds).
Server does not support STARTTLS.
MySQL packet length does not match.
Only MySQL protocol version 10 is supported.
Cannot confirm server version. MySQL server handshake packet is broken.
MySQL server does not support SSL.
ldap_ExtendedResponse_parse failed
STARTTLS failed, LDAP Result Code: %i
drop connection and then reconnect
ERROR PROCESSING COMMAND. REST OF LINE IGNORED: %s
UNRECOGNISED COMMAND (IGNORED): %s
BAD ARGUMENT (COMMAND IGNORED): %s
Error: client did not send PSK identity
PSK warning: client identity not what we expected (got '%s' expected '%s')
cert_status: Cannot open OCSP response file
cert_status: Error reading OCSP response
cert_status: can't parse AIA URL
cert_status: no AIA and no default responder URL
cert_status: Can't retrieve issuer certificate.
cert_status: error querying responder
cert_status: ocsp response sent:
ALPN protocols advertised by the client: k l l`lj k*HdHՑđ$
(ۇPڈ8אȐЏscPv r^> a Љl\L;'۔ǔs_O
ϕLj`eF2 |~ x̅$/ d5&$UEEiq}~Q
/f~
}qWH2 / ! ... %4ld items in the session cache
%4ld client connects (SSL_connect())
%4ld client renegotiates (SSL_connect())
%4ld client connects that finished
%4ld server accepts (SSL_accept())
%4ld server renegotiates (SSL_accept())
%4ld server accepts that finished
%4ld cache full overflows (%ld allowed)
Error setting session id context
Error clearing SSL connection
Error waiting for client response
HTTP/1.0 200 ok
Content-type: text/html
Ciphers supported in s_server binary
---
Ciphers common between both SSL end points:
no client certificate available
HTTP/1.0 200 ok
Content-type: text/plain
Error opening '%s' mode='%s'
Warning: sendfile requested but KTLS is not available
'%s' is an invalid file name
Out of memory adding to external cache
Unexpected session encoding length
New session added to external cache
%s: -port argument malformed or ambiguous
%s: -accept argument malformed or ambiguous
verify depth is %d, must return a certificate
Error parsing -status_url argument
Invalid value for max_early_data
Invalid value for recv_max_early_data
Can't use -HTTP, -www or -WWW with DTLS
Can only use -listen with DTLS
Can only use --stateless with TLS
Can't use -early_data in combination with -rev
Warning: -zerocopy_sendfile depends on -sendfile, enabling -sendfile now.
Warning: -sendfile depends on -ktls, enabling -ktls now.
Can't use -sendfile without -WWW or -HTTP
server certificate private key second server certificate private key second certificate private key second server certificate chain warning: id_prefix is too long, only one new session will be possible
Setting secondary ctx parameters
Using default temp DH parameters
Error setting temp DH parameters
PSK key given, setting server callback
PSK warning: there is NO identity hint in TLSv1.3
error setting PSK identity hint to context
error setting session id context
Failed to initialize SRP verifier file
Cannot initialize SRP verifier file "%s":ret=%d
Error compressing certs on ctx
Error compressing certs on ctx2
assertion failed: (family == AF_UNSPEC || family == BIO_ADDRINFO_family(res)) && (type == 0 || type == BIO_ADDRINFO_socktype(res)) && (protocol == 0 || protocol == BIO_ADDRINFO_protocol(res)) unable to get certificate from '%s'
unable to get private key from '%s'
Private key does not match the certificate public key
Collecting connection statistics for %d seconds
%d connections in %.2fs; %.2f connections/user sec, bytes read %ld
%d connections in %ld real seconds, %ld bytes read per connection
Now timing with session id reuse. 0 connections in %ld real seconds
Either -skeymgmt -or -cipher option should be specified
Error creating opaque key for skeymgmt %s
An opaque key identified by %s is created
Key generation is the only supported operation as of now
%s: Cannot use -%s together with -%s
%s: Must have -signer before -inkey
No operation (-encrypt|-sign|...) specified
Error allocating PKCS7 object
Bad input format for PKCS#7 file
Error creating PKCS#7 structure
Error decrypting PKCS#7 structure
Bad output format for PKCS#7 file
Couldn't set input text length
Couldn't insert AAD when encrypting
Couldn't set cipher text length
Couldn't insert AAD when decrypting
SIG verify failure at count %d
%4ld session cache hits
%4ld session cache misses
%4ld session cache timeouts
%4ld callback cache hits
server rev buffer CONNECTION FAILURE
LOOKUP renego during accept
LOOKUP renego during read
CONNECTION CLOSED
CLOSE (NONE) Client certificate
Client raw public key
Shared ciphers:%s
CIPHER is %s
NEXTPROTO is Reused session-id
Renegotiation is DISABLED
server buffer Error reading early data
Early data received:
No early data received
End of early data
shutdown accept socket
SSL_do_handshake -> %d
Failed to initiate request LOOKUP renego during write
Write BLOCK (Async)
Write BLOCK
ERROR - memory
ERROR - unable to connect
LOOKUP during accept %s
DELAY
verify error:%s
Read BLOCK (Async)
Read BLOCK
shutting down SSL
server www buffer GET GET /stats GET /renegcert SSL_renegotiate -> %d
SSL_do_handshake() Retval %d
< > & %-11s:%-25s
GET / '%s' contains '..' or ':'
'%s' is an invalid path
'%s' is a directory
FILE:%s
.html .php .htm Error fstat '%s'
Error SSL_sendfile '%s'
KTLS SENDFILE '%s' OK
rwrite W BLOCK
GET /reneg get session Error encoding session
get session buffer Lookup session: cache hit
Lookup session: cache miss
server2.pem server.pem Can't use -rev with DTLS
Can only use -tfo with TLS
server certificate chain second server certificate error setting 'id_prefix'
id_prefix '%s' set.
Setting temp DH parameters
Compressing certificates
Listening for TFO
localhost:4433 %s: verify depth is %d
%s: -www option is too long
SSL_CIPHER Unable to get connection
starting unable to load SSL_SESSION
Context too long
Error setting id context
No certificate present
unable to write SSL_SESSION
unable to write X509
Provider: %s
Key management: %s
(invalid operation) Error reading S/MIME message
apps/smime.c mdc2 whirlpool ripemd160 Error finalizing cipher loop
Failed to set iv length
Failed to set tag length
Failed to set key and iv
Failed to encrypt the data
Failed to set iv
Failed to set tag
Failed to decrypt the data
RSA sign failure
ECDSA sign failure
sig sign loop SIG sign failure at count %d
apps/speed.c RSA verify failure
ECDSA verify failure
RSA encrypt failure
RSA decrypt failure
EdDSA sign init failure
EdDSA sign failure
EdDSA verify init failure
EdDSA verify failure
PP(PJ$L$LL$ X\7{75557 4H8s47x6666p588575A5R5_54444445#53i1}111111 22 2.2B2R2f2z22222222 33*373N3t33335X+++++,, ,B,R,b,u,,,-*-P-`-o-~------
.,.A.V.k.....//"/A/P/_/r////////00000(1A A A J1 00%050E0T0d0t0Z1XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=+=+=+=+=+=+H>=h@P@8@ @@?????x?h?H?h>x>X???>>>>>>HGJG`JHJ0J JJIpHMMMM]LtMDM4MMTRU V VUUYXXXXXXXxYhYY8YRRxUUHY@VXhXPXWWWW WVVVVVVpVXVSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSQTTT
apps/lib/app_provider.c RANDFILE Can't load %s into RNG
Can't duplicate %s
apps/lib/app_x509.c hexdistid pass: env: No environment variable %s
file: Can't open file %s
Can't open BIO for stdin
%s: Can't load %s: Error on line %ld of config file "%s"
config input oid_section digest buffer apps/ts.c Out of memory loading input-type Internal error trying to load Error reading Could not find from %s of %s https:// http:// Unable to load %s from %s
%s: OK
Chain:
depth=%d: (untrusted) CRL via CDP copy copyall Error loading file %s
Error loading directory %s
Error loading store URI %s
File name too long
%s.%s True False Require explicit Policy: %s
Authority User [CRL path] NPN buffer subjectKeyIdentifier keyid, issuer authorityKeyIdentifier HARNESS_OSSL_PREFIX ab appending (doing something) Can't open %s, %s
Can't open "%s" for %s, %s
Couldn't open file or uri %s
%d: %s: %s
%d: %s
!!! Unknown code
Total found: %d
%s: criterion already given.
%s: subject already given.
%s: issuer already given.
%s: alias already given.
apps/storeutl.c URI MD5 Error setting public key
Error signing SPKAC
apps/spkac.c SPKAC=%s
Can't find SPKAC called "%s"
Error loading SPKAC
Signature OK
Signature Failure
Error getting password.
cannot convert %s to OID
nonce buffer could not create nonce
Verification: invalid digest string
extra untrusted certs FAILED could not create query
Response is not generated.
Response has been generated.
calling fstat(%s) calling stat(%s) %s.attr new DB Need at least one user.
default_srp Database initialised
Default g and N Starting user processing
Processing user "%s"
List all users
user "%s" reactivated.
row pointers failed to update srpvfile
Password for user "%s" ok.
user "%s" revoked. t
User procession done.
Trying to update srpvfile.
Temporary srpvfile created.
srpvfile updated.
User errors %d.
(undefined) P12 TEXT NSS Unable to load %s
Error reading mem buffer
allocate async fds today Parameter %s '%s'
asymmetric Generating %s key with %d bits
%s: Error generating %s key
%-15s %s
other CRLs Warning start date end date NOT Invalid date format: %s
explicitly set public key certificate request input serial# buffer apps/x509.c SHA1 serial=
Certificate purposes:
%s%s : Yes (WARNING code=%d)
No
Yes
CA notBefore= notAfter= Unknown digest
No extensions in certificate
Invalid extension names: %s
Certificate will expire
Certificate will not expire
Unable to write certificate
b64 msblob nss http pvk esc_2253 esc_2254 esc_ctrl esc_msb use_quote ignore_type show_type dump_all dump_nostr dump_der sep_comma_plus sep_comma_plus_space sep_semi_plus_space sep_multiline dn_rev nofname sname lname space_eq dump_unknown RFC2253 oneline Typical uses: [-text] [-engine id] p@hP8 P(h(AA$@?t?>t@(GEG(HHXHIIHHEEEIhI(IHHhHLL@N0NM0OO ONNNNNpNLXN8ZHU[ \[x[ Z [ZZZX\@\0\\] ] Z\\\\\ Zp\`[H[0[[>> <<< , ??? , warning , fatal , ChangeCipherSpec , Alert , RecordHeader , InnerContent , ApplicationData , Handshake , Unknown (content_type=%d) %s %s%s [length %04lx]%s%s
%02x depth=%d
verify error:num=%d:%s
issuer= verify return:%d
gost2001 gost2012_256 gost2012_512 server name SSL_connect SSL_accept undefined read write SSL3 alert %s:%s:%s
%s:failed in %s
%s:error in %s
memory full
Failed getting peer address
apps/lib/s_cb.c assertion failed: length != 0 cookie generate buffer NOT OK NOT OK
%s: %s
Suite B: not tested
prepend cert Security callback: Version=%s %s= Public key missing %s, bits=%d digest=%s, algorithm=%s scheme=unknown(0x%04x) , security bits=%d scheme=%s SRP parameters:
N=
g= SRP param N and g rejected.
SRP username = "%s"
User %s doesn't exist
Shared Requested Signature Algorithms: rsa_pss_pss_sha256 rsa_pss_pss_sha384 rsa_pss_pss_sha512 ecdsa_brainpoolP256r1_sha256 ecdsa_brainpoolP384r1_sha384 ecdsa_brainpoolP512r1_sha512 +%s +0x%02X %s:
%s:
a hexadecimal 0X an octal auto Enabling auto ENGINE support
dynamic SO_PATH LOAD Invalid engine "%s"
SET_USER_INTERFACE Cannot use engine "%s"
Engine "%s" set.
apps/lib/engine.c Connection: keep-alive
sending response header:
%s { } apps/lib/opt.c %s: Bad format "%s"
B64 BASE64 p12 PKCS12 %s XTS ciphers not supported
assertion failed: vpm != NULL %s: Invalid Policy %s
%s: Invalid purpose %s
%s: Invalid verify name %s
%s: Option -%s needs a value
%s: Not a directory: %s
%s: Unknown option: -%s
%s: Missing argument: %s
%s: Extra option: "%s"
(No additional info) - * Usage: %s [options]
Valid options are:
Parameters:
%s %s
error setting certificate
error setting private key
Missing filename
Server Certificate server key server chain %s: Error adding xcert
%s: Key already specified
%s: Chain already specified
signed the peer matched the TA matched the EE Verification: OK
Verified peername: %s
Verification error: %s
TLSA hex data buffer 0123456789abcdef DANE TLSA %d %d %d %s%s %s certificate at depth %d
Error finishing context
Error writing keylog file %s
%s:%s [%s]:%s ACCEPT unknown:error
PID=%d *:%s Invalid verbosity level %d error setting up accept BIO error printing ACCEPT string apps/lib/apps_ui.c User interface error
aborted!
SRP password buffer SRP user apps/lib/tlssrp_depr.c LOOKUP done %s
LOOKUP not successful
%s [%s]: salt buffer rounds=%u %s %s
unknown type integer UTF8 encoded string octet string unsigned pointer to a pointer to an %*s%s:
[%d] (arbitrary size) (max %zu bytes large) %*s %s
[Success]: %s
[Failure]: %s
Unable to rename %s to %s
%s.attr.%s Unable to open '%s'
unique_subject = %s
invalid revocation date %s
missing hold instruction
invalid object identifier %s
missing compromised time
invalid compromised time %s
invalid reason code %s
%s: Out of memory
Expired Revoked Valid undef PRINTABLE:' T61STRING:' IA5STRING:' UNIVERSALSTRING:' ASN.1 %2d:' \0x%02X ^%c optional supplied match Type :%s
Was revoked on:%s
Expires on :%s
Serial Number :%s
File name :%s
Subject Name :%s
Certificate Details:
(%ld days) Sign the certificate? [y/n]: row expdate row space certificate request Error unpacking public key
Negotiated TLS1.3 group: %s
Peer Temp Key: RSA, %d bits
DH, %d bits
ECDH, %s, %d bits
groups to print Supported groups:
Shared groups: ansiX962_compressed_prime ansiX962_compressed_char2 unknown(%d) Protocol version: %s
assertion failed: num == 2 Client cipher list: Ciphersuite: %s
Peer certificate: Hash used: %s
Signature type: %s
Peer used raw public key
Client Certificate Types: UNKNOWN (%d), Peer signing digest: %s
Peer signature type: %s
HTTP/1.0 %d %s
GET or cannot get port listening on awaiting next request ... request line read error Bad Request HTTP/1. error reading HTTP header Connection keep-alive close POST received request header: %s "%s"
%d = "%s"
, , %s, %s , Iteration %ld, PRF %s , Iteration %ld Key bag
Bag Attributes Key Attributes Shrouded Keybag: Certificate bag
Secret bag
Bag Type:
Bag Value: Safe Contents bag
RSA sign RSA fixed DH DSS fixed DH ECDSA sign RSA fixed ECDH ECDSA fixed ECDH GOST01 Sign GOST12 Sign SHA224 SHA384 SHA512 anonymous rsa_pkcs1_sha1 ecdsa_sha1 rsa_pkcs1_sha256 ecdsa_secp256r1_sha256 rsa_pkcs1_sha384 ecdsa_secp384r1_sha384 rsa_pkcs1_sha512 ecdsa_secp521r1_sha512 rsa_pss_rsae_sha256 rsa_pss_rsae_sha384 rsa_pss_rsae_sha512 gostr34102001 gostr34102012_256 gostr34102012_512 Supported Ciphersuite Shared Ciphersuite Check Ciphersuite Temp DH key bits Supported Curve Shared Curve Check Curve Supported Signature Algorithm Shared Signature Algorithm Check Signature Algorithm Signature Algorithm mask Certificate chain EE key Certificate chain CA key Certificate chain CA digest SSL compression Session ticket Overall Validity Sign with EE key EE signature CA signature EE key parameters CA key parameters Explicitly sign with EE key Issuer Name Certificate Type max fragment length client certificate URL trusted CA keys truncated HMAC status request user mapping client authz server authz supported_groups EC point formats SRP use SRTP session ticket renegotiation info signed certificate timestamps client cert type server cert type TLS padding next protocol encrypt-then-mac extended master secret compress certificate key share supported versions psk kex modes certificate authorities post handshake auth , HelloRequest , ClientHello , ServerHello , HelloVerifyRequest , NewSessionTicket , EndOfEarlyData , EncryptedExtensions , Certificate , ServerKeyExchange , CertificateRequest , ServerHelloDone , CertificateVerify , ClientKeyExchange , Finished , CertificateUrl , CertificateStatus , SupplementalData , KeyUpdate , CompressedCertificate , NextProto , MessageHash close_notify end_of_early_data unexpected_message bad_record_mac decryption_failed record_overflow decompression_failure handshake_failure bad_certificate unsupported_certificate certificate_revoked certificate_expired certificate_unknown illegal_parameter unknown_ca access_denied decode_error decrypt_error export_restriction protocol_version insufficient_security internal_error inappropriate_fallback user_canceled no_renegotiation missing_extension unsupported_extension certificate_unobtainable unrecognized_name bad_certificate_hash_value unknown_psk_identity certificate_required SSL 3.0 TLS 1.1 TLS 1.2 TLS 1.3 DTLS 1.0 DTLS 1.0 (bad) ppx ( 08@HPX`8XXнAQAQ#ڻpX@HHHHHHHHHHHHHHHHhHHHHHHH8XH HH@`HHHHHHHHHHHHHhHHHHHHH8XH HH@`h0xX8xX8xX8 999999999999999999999999999999999999999999999999999`999999DL$ %zu (0x%zX))
read from %p [%p] (%zu bytes => %d)
write to %p [%p] (%zu bytes => %zu (0x%zX))
write to %p [%p] (%zu bytes => %d)
error setting random cookie secret
Error calculating HMAC-SHA1 of buffer with secret
Checking cert chain %d:
Subject: s_cb.c:security_callback_debug op=0x%x SRP param N and g are not known params, going to check deeper.
SRP parameters set: username = "%s" info="%s"
%s: Can't parse "%s" as %s number
%s: Can't parse "%s" as a number
No engine specified for loading %s
No engine key id specified for loading %s
HTTP/1.0 200 OK
%sContent-type: %s
Content-Length: %d
sending response, 1st line: %.*s assertion failed: unknown_name != NULL assertion failed: unknown == NULL assertion failed: unknown->valtype == 0 || unknown->valtype == '-' %s: AEAD ciphers not supported
assertion failed: opt > OPT_V__FIRST assertion failed: opt < OPT_V__LAST %s: Internal error adding Policy %s
%s: Internal error setting purpose %s
%s: Option -%s does not take a value
%s: Non-positive number "%s" for option -%s
%s: Negative number "%s" for option -%s
%s: Invalid format "%s" for option -%s
%s: Multiple %s or unknown options: -%s and -%s
%s: Extra argument after %s: "%s"
%s: Extra (unknown) options: "%s" "%s"
error setting certificate chain
error building certificate chain
%s: Error initialising xcert
%s: %zu-byte buffer too large to hexencode
matched the peer raw public key
Call to SSL_CONF_cmd(%s, %s) failed
# SSL/TLS secrets log file, generated by OpenSSL
---
No %s certificate CA names sent
---
Acceptable %s certificate CA names
Secure Renegotiation IS%s supported
This TLS version forbids renegotiation.
error setting accept on port %s Could not allocate %d bytes for %s
Missing newline at end of input
String too short, must be at least %d bytes long
String too long, must be at most %d bytes long
Warning: truncating password to %u characters
[Error]: internal stack error
[Error]: command name too long
Error creating random number to store in %s
Unable to load number from %s
Error converting number from bin to BIGNUM
%s: %s name is expected to be in the format /type0=value0/type1=value1/type2=... where characters may be escaped by \. This name is not in that format: '%s'
%s: Error copying %s name input
%s: Missing '=' after RDN type string '%s' in %s name string
%s: Escape character at end of %s name string
%s warning: Skipping unknown %s name attribute "%s"
%s hint: a '+' in a value string needs be escaped using '\' else a new member of a multi-valued RDN is expected
%s warning: No value provided for %s name attribute "%s", skipped
%s: Error adding %s name attribute "/%s=%s"
invalid type, Database error
The Subject's Distinguished Name is as follows
emailAddress type needs to be of type IA5STRING
The string contains characters that are illegal for the ASN.1 type
%s:unknown object type in 'policy' configuration
The %s field needed to be supplied and was missing
The mandatory %s field was missing
The %s field does not exist in the CA certificate,
the 'policy' is misconfigured
The %s field is different between
CA certificate (%s) and the request (%s)
%s:invalid type in 'policy' configuration
Everything appears to be ok, creating and signing the certificate
Extra configuration file found
Error adding certificate extensions from extfile section %s
Successfully added extensions from file.
Error adding certificate extensions from config section %s
Successfully added extensions from config
ERROR: adding extensions from request
The subject name appears to be ok, checking database for clashes
ERROR:There is already a certificate for %s
ERROR:Serial number %s has already been issued,
check the database/serial_file for corruption
Certificate is to be certified until CERTIFICATE WILL NOT BE CERTIFIED: I/O error
CERTIFICATE WILL NOT BE CERTIFIED
The matching entry has the following details
Certificate request and CA private key do not match
Signature verification problems...
Signature did not match the certificate request
Supported Elliptic Curve Point Formats: No peer certificate or raw public key
awaiting new connection on port %s ... cannot parse HTTP header: missing end of line invalid %s -- URL does not begin with '/': %s invalid %s -- bad HTTP/version string: %s invalid %s request -- bad URL encoding: %s could not allocate base64 bio with size = %d HTTP request does not begin with %sPOST: %s error parsing HTTP header: missing end of line error parsing HTTP header: missing ':' error parsing DER-encoded request content out of memory allocating %zu bytes received request, 1st line: %s , Salt length: %d, Cost(N): %ld, Block size(r): %ld, Parallelism(p): %ld Warning unsupported bag type: application layer protocol negotiation bad_certificate_status_response ;L _ @ 0T5 0R 8h 9 9 9 P; ; A B` PC E E, Fx PK L0 Lh PW Z@ c Pe D `4 0 < h @ H p ` п 0< P 4% % % 8& &
P' ' X( ( 4) \) ) ) 0!@* !x* V+ Pc`+ i+ j+ 0mh, q, s(- . <. @. . pL/ / / t5 5 5 (6 ph6 6 @6 047 p7 7 D8 @ 8 8 P9 `9 9 : &\: ': p': (: *`; @+; +; ,; /\< P/< /< 24= 2\= `3= 6 > p6D> 7> P:> :? 0;T? @=? =? >,@ 0@@ @@ AA CPA DxA DA EA E8B GB `HB HB HC pI`C KC LC L8D ND OD OE QtE TE UF `U8F VF 0|F }PG G 0 H 0H @H PH `H pH H 04I I PI `I I Н J J 0J |J ЧK `@K K DL L M M `M M p8N PN @ HO @O O 4P P pI8R OR PQS \S \S \S 0\S @\S `\S ^@T ^TT ^hT jT sU uLU xU pxU `y V @zdV {V |,W }hW @~W X X зX иX PY Y ;pZ =Z ? [ @L[ G[ I\ J<\ K\ K\ L] QT] W] `h] xL^ @{^ |^ } _ `}<_ д_ (` ` ` (a 0Pa a a @a `a b b ,b @b Tb hb @|b `b pb b b b @c Pc c c 0d |d `d @e Xe e `e @ BBB E(A0D8G`
8M0A(B BBBK l
8A0A(B BBBJ !
8I0H(B BBBE \ @ BEB B(D0D8D
8A0A(B BBBE rJTC \ | 0D BBB B(D0D8G
8C0A(B BBBD JYA FN FGB J(A0K8Gt
8D0A(B BBBC MEBZkGDEBAoONBLONBKEBZBBEBAo 8 X BBB H(J`
(A BBBD \ Y FBE I(D0C8K7
8D0A(B BBBD 9EOB L P bw FEB I(D0C8N
8D0A(B BBBC \ j FEI H(A0C8K
8D0A(B BBBF JQA H q FHH D(A0]
(D BBBF D(A EBB\ L pq FEE D(A0Y8R@VHIPO0
(D BBBF D
(A EBBA X r,2 FEB B(A0A8DVUHK
8D0A(B BBBA ^UOHZIVPTIIeOHKtVUOIV
UOMK eVPTIVUHKb
UOHE dOUHKwVUHKIVUHKxVUHKIVUHKbVUHKNCHLIOAO[AOUHKhVUHKqVUHKNOUOKbOUOK\OUORYOUHKcOUHKIVUHKxOUOKNOUOKMUHIVQOAY_MUMOGQOF\p
KOAE b
JOAE _MUHIMKVAROUOIOUHKMUHIK
JOAE BMUIIXMUIIDQOBRFMUHPQMUIIp
JOBE AMUII
JOAE b
GRBE WUIAK_MUHIM
JOFE NPRNPTMUHIFPRHPwVUHKFVUHKZOUHK[OUHKNOUHKeVUKIoPRMISVUHK & H (& FHI o
BBF R
EBG D(V0U8H@K t& ' H^ L & 0 FBE I(D0C8N
8D0A(B BBBH < & FDG s
NDJ D
ABI aCB L ' FBE E(D0H8Q
8D0A(B BBBG l' P# KT ` ' h BBE A(D0g
(D BBBA X
(D BBBF U
(D BBBA 8 ' FAD Z
ABH T
JBH L $( x BFE D(A0
(C BBBD A
(F BBBC t( ( FBE B(D0A8GI_B
8A0A(B BBBI IcAmBaA H ( T BEH E(A0A8DPa
8A0A(B BBBK 0 D) FAD Jw
AABH L x) h
FBE E(A0A8Gl
8A0A(B BBBG H ) 4H FBB B(A0H8J\
8D0A(B BBBH \ * 8L FEB I(D0C8K
8D0A(B BBBI cLQA H t* ( FEB I(A0H8LPn
8D0A(B BBBJ L * FII I(D0H8K
8D0A(B BBBE $ + |1 EAG WDD $ 8+ A EAG gDD H `+ FII E(A0@
(B BBBJ S(B BBBd + BBB L(A0A8D@
8D0A(B BBBE
8J0A(B BBBJ , x] EX
S N $ 4, A EAG gDD H \, FII E(A0@
(B BBBJ S(B BBBd , $ BBB L(A0A8D@
8D0A(B BBBE
8J0A(B BBBJ $ - A EAG gDD H 8- FII E(A0C
(B BBBG D(B BBB` - BIB B(A0A8D@
8D0A(B BBBE 8J0A(B BBB $ - DA EAG gDD H . l FII E(A0@
(B BBBJ S(B BBB` \. BIB B(A0A8D@
8D0A(B BBBE 8J0A(B BBB 4 . k FAD f
ABD eDE H . $ FII E(A0@
(B BBBJ S(B BBBL D/ hL BIB B(A0A8Q
8A0A(B BBBH $ / hA EAG gDD H / FII E(A0@
(B BBBJ S(B BBB` 0 BIB B(A0A8DP
8D0A(B BBBE ~8J0A(B BBB $ l0 A EAG gDD H 0 FII E(A0@
(B BBBJ S(B BBB` 0 BIB B(A0A8DP
8D0A(B BBBE ~8J0A(B BBB $ D1 A EAG gDD H l1 FII E(A0@
(B BBBJ S(B BBBH 1 BII I(A0A8FP
8D0A(B BBBH $ 2 xA EAG gDD H ,2 FII E(A0C
(B BBBG D(B BBB$ x2 A EAG gDD H 2 FII E(A0@
(B BBBJ S(B BBB` 2 P= BII I(A0A8FP
8A0A(B BBBK K
8J0A(B BBBE 4 P3 , EKD W
FAF k
FAF 3 ( H_ $ 3 A EAG gDD H 3 FII E(A0@
(B BBBJ S(B BBB` 4 = BII I(A0A8FP
8A0A(B BBBK K
8J0A(B BBBE $ x4 A EAG gDD H 4 FII E(A0@
(B BBBJ S(B BBB` 4 P= BII I(A0A8FP
8A0A(B BBBK K
8J0A(B BBBE $ P5 ,
A EAG gDD H x5 T
FII E(A0@
(B BBBJ S(B BBB` 5
= BII I(A0A8FP
8A0A(B BBBK K
8J0A(B BBBE d (6 t BBB B(D0A8F`
8A0A(B BBBK +
8J0A(B BBBJ $ 6 A EAG gDD 0 6 F FDG M
ABG SDB ` 6 k BIB B(A0A8D@
8D0A(B BBBH K8J0A(B BBB L P7 ,U% FBE E(H0H8Qf
8D0A(B BBBJ ` 7 <5 FEE E(G0G8F@s
8F0A(B BBBE F
8C0A(B BBBF \ 8 5
FBB I(D0A8D
8D0A(B BBBA LQA h d8 ?x FBE B(A0C8D~
8A0A(B BBBA $ISAH
IU ` 8 H FBE A(D0o
(D BBBE X
(D BBBF U
(D BBBA 49 H H9 H \9 H p9 H 9 H L 9 H FBB I(D0A8D
8A0A(B BBBE H 9 N FEE B(D0H8NP
8D0A(B BBBB 4: Q# H: Q \: Q @ p: QC BBB E(A0Dp
0D(B BBBG : S
: S YBH : T FBB B(A0H8GpS
8D0A(B BBBD 0; < FEI H(A0C8K`
8D0A(B BBBE > H > o BBM E(A0D8J
8D0A(B BBBK > 0 FBB B(A0A8G L"
8D0A(B BBBF A
"G"]"A""G"]"A""G"h"A""T"I"B"S"0"B"["A""M"B"G"[" H ? L FEE B(D0H8N`
8D0A(B BBBC H ? FIE B(H0C8Ipb
8D0A(B BBBG H H@ BEE N(D0D8MP
8D0A(B BBBE P @ L BBB B(A0A8G I
8A0A(B BBBF @ FBE B(D0D8GHLBAIADBFAEBDQF
8D0A(B BBBF @ tA 8g0 FBB E(D0A8G
8A0A(B BBBE IBIQy\BBBBBISXKBAN^BBBBBIQ7HGHq
]LBaO\BNZBIQYAOfB I[A 0 B / FBB I(D0A8L L B 0 FBB E(A0H8G3
8A0A(B BBBD FDB B(A0D8DP
8D0A(B BBBI t L FBB B(D0A8G
8D0A(B BBBG EBFNGBEb H xL ] FBE B(D0D8GPM
8D0A(B BBBH ( L BFD KK H L FLB G(D0O
(C BBBI A(F BBB$ FBB H(A0H8F@
8D0A(B BBBA $ c R EU
F Y
O W H c SI FIH B(A0A8O`
8D0A(B BBBD L Hd T FHD D0b
AEBH s
ABBH ^
ABBE P d T FIA PS
DABF v
IHBG ^
KHBM L d @X= FEA D(G0X
(F ABBF _
(A ABBK ( FDA A
ABA I
FBG V
CBE 4 @ > FDD l
FBF @CB 8 x ? FBD D(D@
(A ABBA ( ? FBJ0I
EBF 8 ? FBD D(D@
(A ABBA 0 @ FBA D0{
DBBH H P F8 FBB B(A0A8Gl
8D0A(B BBBB K HD
D e
K L Kf FBB B(A0A8J
8A0A(B BBBA L N* FBA A(D0x
(D ABBA h
(D ABBG ( ` Oa JHG AAF D P* FAA
ABJ A
FBG ]
CBA 0 Ԇ P2 FAD F0Y
AABB \ Sw FBB B(D0D8D
8A0A(B BBBK DLD \ h $V FEB A(G0]
(A EBBD y
(D BBBE `(D BBB H ȇ V FEA D(F0w
(F ABBH S(F ABB H V2 FHB E(A0A8GP
8A0A(B BBBK ` XG E} 4 | Y FDG d
CBF F
ABG \ Y FBE G(A0I
(A BBBK p
(A BBBI A(D LDB 0 xZ FGG L
CBK DMBH H Z FBL E(D0D8FPr
8D0A(B BBBJ @ \< FEE K(A0Lp:
0D(A BBBC $ ؉ ^J EP
K U
K I T ^| FEE E(A0A8D@HMPWHA@m
8D0A(B BBBA ( X ` FKN@\
DBG a K
B 8 s p '} ? s p c @ s (q @} A s hq 7 B s q C s r Pr s D - r - 0p
E s r F s s pg
G s hs H s s
I s s 8t - B s t A s t D s u C s (u - s Xu > u - / - u 8 s u A s Hv I s xv U s v _ s w Pw k s xw - w t - w z p 0x s xx - x s x s 8y s xy s y - y - {
s @z N xz s z s { s s h{ s { + s { 7 s | E s P| N s | W s | } _ s X} k s } s s } s ~ s 8~ s ~ s ~ N N X - N N ( N p s
- - # - X 3
- 0 F - h X - - j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - S - P! - n! ܛ
- V - y
5
- 8 x
- ! ! - ! ! s ` - (o - ! +v
- ! Fv
- ev
- ȅ v
- ! - Ja
- 0 ! s ` - B s t A s t D s u C s (u P - p sm
" " " 0" ;" P" `" n" y" " " " " " " @ " " " " " " # # # '# S - - n! ܛ
- V ! - q
5 - 0# / 7# i
< P# j# F ( q# * - h O > y# s # - t - # " - ( # + < ` # , <
s Ȉ - # o
s # l
s @\ s # s # - # $ s - @ $ - p 4 - '$ - ؉ O$
s 6$ ( s A$ q$ s H Y$ ) s c$ p }
/ s Ȋ y$ 0 < $ - $ $ - 8 - }
i
s `
s $ pg
f
s ؋ '} s [ < $ 0p
F X $ - #
s $ s - $ $ ! - $ Z . s
1 s H
% 2 - % /% 3 s x 7% F s B% G s K% H s Z% I s @ l% # s {% $ s Ў % % p % & p 8 % ' p X - < % - s Xu > u - B s t A s t D s u C s (u P - p % - n! ܛ
- V % < % - % j# A i
< 0 O > ؏ % % & p & ~ p 0& J& p 8 S&
s ` Z& s b& l& s q& & - & wf
&
& & p ؐ S - h - n! ܛ
- V
s - i
< j# F - y
O > ' F / d - J % - X !
- b q
- q ~ - - s Xu > u - B s t A s t D s u C s (u P - p - n! ܛ
- V $`
- - ` ɢ - Ң - ۢ
s - i
s j# f
-
s - y
O > ' f $ %
- ? d - S A~
- i - s 0 - B s t A s t D s u C s (u S - P - n! ܛ
- V [
-
- p
s - i
< j# F - y
O > ' F ͣ d - % - x - - 6
- X ! - b q
- q - s Xu > u - B s t A s t D s u C s (u P - p S - - n! ܛ
- V ܕ
-
s
-
s - y
u -
- H O > p pg
f ޖ
- - . p U
- 5 Xr
- 5 - }
z s F % s ` d s #
s }
< m s 7 s s $`
- Ǥ - - s Xu > u - B s t A s t D s u C s (u P - p
H - n! ܛ
- V - i
< j# F ؤ - x ޤ < - y
O > ' F / - B s t A s t D s u C s (u - n! ܛ
- V % - - i
< j# F '} < pg
F 0 - y
O > ' F 4 y# s d - h j
- P `f
- a s $`
- - i ^ - w p% - %
- % - ͥ - - ٥
- < - # / P < x : - - - P - B s t A s t D s u C s (u S - ܛ
- V - n! i
< O > o
F < - % - - % - = z - W % - d z -
- < @} s P - æ - Ӧ - Ѧ - ܦ - 8 - p - / - 8 - ? - T j# c ' c j / F r ( - ( - ) - # - 0 ɧ * - p ѧ - - ۧ < s : s ; s 8 F s x
> s }
H s pg
G f
P s - B s t A s t D s u C s (u - s Xu > u - " s - I C < O c . 0 $`
- h O s k K - w L - M - Ԩ N - ި - - }
i
E s
B s ޤ 0 < ( p ; - A - J ] - e - ( l ! - P w " - x - - . - I s Ʃ J s X - ٩
s 7 < & - ' - % - H - h ! - ; - *
- 1 < 9 2 / 3 : 0 5 - 4 - 6 - P - y
$ - S n = s | d - P = D > y
? s y
@ s k
A s Ū - ͪ % + - x & 8 - a 9 s , - - j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - - n! ܛ
- V i
< `
s - %e
& -
- 8 ? s h j# f ( $ s '} s /e
s 7e
pg
E O > De
' f @ ae
C - p % 5 - - d ' - y# s he
s ͥ , - H e
9 - pe
zg
" - e
O$ / - e
q$ 0 - e
g
- - p k
* - e
^ + - w a s I - e
j
( - e
( - f
$f
= - 5f
) - Af
Yf
> - }
F s ( if
< - ` pf
! - yf
. - @g
% - A~
$ - f
- f
1 M @ f
2 s h f
3 s f
4 s - f
f
s f
# - 6$ E s Y$ F s H
n 0 g
D - x g
s .g
s $ s #g
:g
< Gg
; - @ y$ < }
s #
s @ - $`
A - P - Ng
Od < ag
F hg
s ng
E xg
s P g
: - - g
6 - g
s g
7 - g
g
s 8 g
8 - ` g
s - s Xu > u
B s Ȉ - B s t A s t D s u C s (u - n! ܛ
- V - y
- g
- g
U
- h
D
- h
- 5h
U - Lh
- Á
- eh
- h
5
- h
u - h
S - - n! ܛ
- V
s Ȉ ! - a s - h
k
< 0 < 0 / P : - - - ; < h h
< h
- h
- - j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - $ s - B s t A s t D s u C s (u P - p [ H - n! ܛ
- V o
< i
@\ s
s Ȉ s
s i
Ci
< /i
< Ii
/ di
: }i
; < i
i
- i
i
- i
s $`
- - i
j
- i
< j
@} s j
7j
< Aj
[
- \j
i
< - xj
% - j
j
- j
j
s j
j
- j
O
> d - j
- s Xu > u - j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - - B s t A s t D s u C s (u S - k
- n! ܛ
- V $`
-
s Ȉ - k
^i
- -k
5~ - Jk
_k
- dk
k
s yk
^ s zg
s ͥ s 0 e
s k
- k
-
s - y
O > De
d - ` % - k
- B s t A s t D s u C s (u P - p uf
k
S - - n! ܛ
- V ! - k
o
< # l
s
s Ȉ - l
>
- l
/l
- 6l
- ܕ
- =l
- # Hl
< Ql
z
s ll
s P
s
s 0 - s Xu > u - B s t A s t D s u C s (u P - p hs x - n! ܛ
- V ul
s
s Ȉ - i
< '} < pg
f
s }l
s l
# s l
- y
@} s
O > % - l
@g
- l
% - l
- B s t A s t D s u C s (u S - 8
- n! ܛ
- V l
-
l
-
,! p l
m
p
s Ȉ
G p H
m
L - p
m
M -
o
F < - %m
9m
s
s =m
Ym
K s ^m
% -
zm
J -
m
N - m
O - X
- m
m
- x
4
H p
K I p
m
p
- s Xu > u - B s t A s t D s u C s (u P - p
@
S - - n! ܛ
- V i
< j# c O > ' c s x pg
f
s Ȉ - - - o
F < - l
% - - % - = z - W z - % - d m
- m
- m
s i
s x
$`
- ! - A - J e
- ( -
s i
< ] -
-
- H
- h ޤ ! < ( p I < (
- n
y
s y
s k
s Ū d - P l - P - h
# / " < 9 $ : 0 % - & - ' - P n
- X
ɧ - p - s Xu > u - j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - - B s t A s t D s u C s (u P - p [
- n! ܛ
- V n
G s
%n
H s
~ I - P
sm
F s x
- B s t A s t D s u C s (u - n! ܛ
- V An
s .n
- i
s j# F
- y
O > De
' f
d - In
[ - fn
% -
- n! ܛ
- V - zn
Bk s
- n
n
- n
n
- n
sm
s
! s X
+v
- n
Fv
- n
ev
- o
v
- o
% p
p
+o
s
- # a s [ <
'} < 0
/o
< 6o
< 6o
/ No
: ko
- -
- `
- B s t A s t D s u C s (u - n! ܛ
- V o
T s
o
@ - o
s Ȉ - o
{
p
Nk s
o
s p
o
-
- o
- o
- o
An
s o
) < 6o
/ No
- : ko
* - - . - `
ae
-
%
n
n
a s [ < @
p
i < x
0p
F
:p
<
p
( - (
p
s H
'} s p
*p
j <
pg
f
x
s (
c < X
/p
F
9p
<
Ep
<
Jp
f H
Sp
s
Yp
< ap
z
g s
{p
h -
p
2 -
֧ D - H
q
E - p
p
H - p
+o
P -
p
Q -
p
{ -
p
6 - 8
p
R - `
p
f s
p
o s
p
p p
<
q
q
% F
h
- H
%q
+ <
1q
! /
=q
/ :
Jq
, < @
Wq
" / x
dq
0 :
rq
# - {q
q
$ -
q
& - (
q
' - P
q
3 - x
q
4 - q
v
-
- q
7 -
q
8 -
q
9 n (
r
< s r
: s P
; s g g 3r
= <
- ?r
Or
A -
^r
B -
ur
F - 0
e O - p
Xr
5 - {r
r
> - r
r
? >
`
C - r
r
S - r
r
W p
r
p (
r
q > s
- o
#s
1 - (s
b - t
Yt
u n
ht
v - 0
et
w - `
tt
y -
t
z -
t
e - t
+v
] - t
Fv
\ - t
ev
[ - t
v
Z - t
t
^ - u
u
d -
u
_ - #u
4u
` - u - u
v
- v
(v
- 0v
Cv
- Mv
bv
- lv
v
- v
n
- n
v
-
v
- v
v
- 0
v
- `
v
-
v
-
v
-
w
-
- %w
Zw
- 8
@w
- x
Ww
-
pw
-
w
- (
w
- x
) -
w
s
w
s
Q
s
J[
s
w
s
sm
s
! s X
w
s
w
s P
w
s
w
-
w
-
x
-
x
- 8
- j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - - h
x
< x
=x
<
Cx
<
Jx
-
Wx
F
ax
F @
- B s t A s t D s u C s (u S -
- n! ܛ
- V
$ s Ȉ jx
s
o
4 s
, -
|x
- X
x
< x
- o
o s x
{
p x
Bk s
x
s
s
x
s !
x
s (!
o
s P!
- o
- o
x
] p !
|s
^ p s
ls
_ p
r
` p
cs
a p P
x
- x
- o
[ < !
0p
F !
:p
B < 8"
p
E - h"
'} C s "
pg
@ E
x
A s (
%
p
a s H / No
L < 6o
P : ko
M - I - Q - P y
d < "
y
s y
6y
s "
Gy
- #
s + s ]y
! , s s
t
- <
l
\ s X#
- jy
|y
D - #
y
> y
y
< y
- y
֧ - H
q
- y
q
- #
q
- y
z
U s $
z
s X$
ur
- 0
%z
- $
,z
- $
- ?r
;z
( - $
Xr
- Ez
r
" - r
r
# >
p
) - Rz
`
* - lz
p
Z s
p
[ p
Or
& - (%
^r
' - H%
o
% - p%
r
b > s
z
- %
z
- z
z
V s %
z
W - &
p
- 8
p
-
-
p
T s @&
u
G s &
r
X - &
#s
- (s
- @
+v
8 - z
Fv
7 - n
ev
6 - o
v
5 - o
t
9 - z
z
< - z
> - '
Ls
? p z
u
: - z
4u
; - {
Ou
= - Tu
]u
- lu
u
F s 0'
@ c < !{
<{
- '
u
-
u
-
u
Y s 8
G{
. s '
O{
/ s '
W{
1 - (
d{
2 - H(
s{
0 p (
u
-
- s Xu > u - u
v
- v
(v
- 0v
Cv
- Mv
bv
- lv
v
- v
n
- n
v
-
v
- v
v
- 0
v
- `
v
-
v
-
v
-
w
-
- %w
Zw
- 8
@w
- x
Ww
-
pw
-
w
- (
w
- x
) -
w
s
w
s
Q
s
J[
s
w
s
sm
s
! s X
w
s
w
s P
w
s
w
-
w
-
x
-
x
- 8
- j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! -
<
q
h
- (
q
F (
q
- (
q
- )
%q
N <
1q
J / ()
=q
R : h)
Jq
O < @
Wq
K / )
dq
S : )
- h
x
< x
=x
<
Cx
<
Jx
-
Wx
F
ax
F @
- B s t A s t D s u C s (u P - p {
*
- n! ܛ
- V z - {
% - {
% - {
% - {
s Ȉ - i
< s 0*
pg
E `*
- *
{
- *
e
- *
s - y
O > {
- {
|
- +
|
- |
#|
- (|
8|
- 8+
B|
- J|
- s Xu > u - B s t A s t D s u C s (u - n! ܛ
- V [
- Z|
$`
-
s Ȉ - i
s j# f p+
- q|
- |
s - y
O > ' f +
- |
|
- |
s 0 % - ? d - S A~
- f
|
F - +
- |
- ` ɢ - Ң
- ۢ - B s t A s t D s u C s (u - n! ܛ
- V sm
s +
s Ȉ |
s ,
i
< P,
j# F ( % - ,
- # - }
o
<
}
@\ 2 s ,
- ,
a s #}
s *}
d " - G}
\}
# - -
a}
$ - @-
Od % < p-
hg
& s -
h}
$ s -
k
! - .
'$ ' - ؉ 6$ ( s Y$ ) s H * p @.
f
+ s }
, s h.
}
- s .
. s }
}
/ s .
}
0 - (/
- }
'} s `/
pg
f @g
- l
> }
s /
s 0 s /
}
s 0
#
s $ s $`
1 - - y
O
> ' F / t - 00
! - b q
3 - q }
- ~
~
- `0
% - $~
6~
- 0
A~
- =~
- s Xu > u - B s t A s t D s u C s (u S - 0
- n! ܛ
- V '
- V I~
- 0
\" - 1
ˣ
- P~
- y
5
- b - B s t A s t D s u C s (u P - p h
01
S - `1
- n! ܛ
- V
s Ȉ - y
O > A\
- m~
ޖ
- ~
- s Xu > u - B s t A s t D s u C s (u P - p }
~
S - 1
- n! ܛ
- V ~
p ~
~
p ~
- y
ޖ
- ~
~
- ~
~
- 1
- B s t A s t D s u C s (u P - p 1
- n! ܛ
- V
s Ȉ - 2
z
- P2
% - {
% - x2
% - 2
~
- 2
F -
G - &
o
J < - i
< s 3
- @
s Z
s (3
b
E P3
{
- x3
e
- *
k
< 3
pg
E `*
- y
O > De
H > 3
8|
- 3
B|
- J|
s
- @4
- 4
K - 4
@} L s 4
}
s 0
s P5
s
p
I s 5
- s Xu > u - B s t A s t D s u C s (u - n! ܛ
- V
s Ȉ [
-
- i
< - y
O > d -
% - 5
- B s t A s t D s u C s (u - n! ܛ
- V
s Ȉ - B s t A s t D s u C s (u [
-
- )
- i
s j# f
s F
- 5
- y
O > 6
' F H6
$`
- p6
s 6
|
- 6
- 7
%
- 07
d - X7
c
- 7
l
s 7
y
s 7
- n! ܛ
- V
s Ȉ 7[
s
s
s 8
- i
< j# F ŀ
s ߀
- H8
- y
O > ' F
-
s 0 |
- p8
q
p
r
- 6
p 8
8
- O
`
- g
|
s
s
s Ł
- s Xu > u - B s t A s t D s u C s (u - n! ܛ
- V
s Ȉ - i
< j# F - y
' F / O > % - ܁
d - 8
& - 9
- @9
q
- x9
- B s t A s t D s u C s (u - n! ܛ
- V i
# < O $ >
% s & s 0 ' s 9
- 9
-
] - +
% - :
E
I - H:
. s Ȉ - B s t A s t D s u C s (u - s Xu > u - :
A
- :
L
- U
p
- :
x
-
$`
- ;
}
- ~
~
- `0
- 0;
p
-
s X;
ޤ < ;
s ;
Ci
- ;
<
; < P<
) <
( / т
* : ko
, - + - - - P l
s
" s <
! s
&
- <
*
- <
0
- =
7
s 0=
>
s `=
`
- =
F
s =
M
G - >
[
H s H>
q
p x>
r
- >
l
- v
n
- >
p
-
Ѓ
F s ?
S - H?
- n! ܛ
- V - i
< ك
- h?
-
- y
q
-
)
-
/
- 7
- L
q
s d
- ?
6 - ?
v
- ?
- {
- @
- s Xu > u - B s t A s t D s u C s (u P - p 8@
- n! ܛ
- V
- `@
! < 9 " < # : 0 $ - % - & - P -
p @
- @
,! p A
Ä
- 0A
- hA
Od 1 <
̄
2 p A
ф
3 p A
s B
< 0B
ڄ
< XB
0 <
4 p B
5 < B
]
6 < B
; s C
7 < 8C
8 s hC
"
9 s C
ny : s *
B
< s C
$`
- D
- G
r
s X
o s 8D
{
N f
, s
s P
s g g O >
-
j
- ȅ
j
- `D
- D
- D
- D
d - D
-
5
- ?
[
- d
- E
- XE
- E
- E
s E
<
ۆ
< F
[ . < PF
zg
/ s F
' u F
/e
) s F
* s G
+ s 8G
^ - <
( p
- j s Ȃ s s n n M s . s ; O s Y r - - - H - - - p - - ȃ $ - 0 - = Z - e t - ( - - P - - x - ! - "! - 0! - >! - - B s t A s t D s u C s (u - n! ܛ
- V - i
< - y
<
- B
O > - B s t A s t D s u C s (u S - Z
- n! ܛ
- V s hG
sm
s x
@} s
- G
- i
< G
- y
O > p - G
- B s t A s t D s u C s (u P - p
S - H
- n! ܛ
- V P - p
HH
- n! ܛ
- V
- xH
%
- H
< H
s Ç
և
s H
- (I
- I
- - I
. - I
1
- 0J
;
- H
b
- hJ
|
- J
-
- ˈ
1
-
- J
- K
/
- (K
C
- V
t
- HK
! -
" - hK
Ɖ
- K
- K
- L
# -
)
$ - 9
T
% - (L
h
& - {
' -
Ɗ
( - ֊
) -
* - 2
O
+ - HL
k
, - pL
- i
< L
- y
O > L
s V# s L
G
% - M
s 8M
s
o
<
q
- ы
- n! ܛ
- V - y
-
! -
s
- 3
M
- 3
_
- n
- `M
- M
- M
- M
nj
- @N
ٌ
- hN
- N
- N
-
- #
R
- <
Q
- N
_
- O
m
- (O
- w
- XO
- O
Í
- ٍ
-
%
- 3
M
- O
I
- O
ev
! - P
v
" - XP
X
- b
# -
-
h
s P
- P
- B s t A s t D s u C s (u S - J
- n! ܛ
- V h
s P
sm
s x
@} s
7 s ̃
- Q
o
s PQ
- y
O > p - G
- B s t A s t D s u C s (u P - p v
- n! ܛ
- V - y
- xQ
- Q
- Q
- Q
- ˓
-
-
- h
(
- 7
S - O
- n! ܛ
- V
s Ȉ - - R
l
- HR
o
- HR
- y
O > R
s 0
p r
! - b q
- q |
F - +
$`
- R
- s Xu > u - B s t A s t D s u C s (u P - p
- n! ܛ
- V
s Ȉ
<
s
! - R
q
- S
}
s 0S
o
< - y
O > Ҕ
>
' F
x
s 0 (
- 1
d
- N
$`
- hS
- B s t A s t D s u C s (u - s Xu > u S S
S - S
- n! ܛ
- V
s Ȉ - y
O > S
s 0 - s Xu > u - B s t A s t D s u C s (u $`
- R
! - b q
- q P - p l
T
S - @T
- n! ܛ
- V P - p z
S - `T
- n! ܛ
- V - T
s T
s T
- y
5
d - U
e - PU
f - xU
g - U
u - U
- U
(V
P - p
- n! ܛ
- V ܕ
- ĕ
! - ѕ
D
-
U
-
Á
-
2] -
s Ȉ - i
< Т s
'
< -
- y
O > x
s G
5
- b - XV
A\
- Y
Z - V
- m
k
- V
q
- q
-
Xr
- 5
s
(
s Ŗ
Z s Ֆ
|# s
i
s V
q
p 0W
T
- hW
W
֢ -
p W
}~ - X
n
F s @X
%n
G s X
$`
- - s Xu > u - B s t A s t D s u C s (u - n! ܛ
- V )
- X
s Ȉ ~ - 5
i
< E
j# F
O > De
' F 4 - y
d - X
%
- a
|
s Y
-
[
-
- HY
- Y
l
s Y
o
s Y
- s Xu > u - B s t A s t D s u C s (u - n! ܛ
- V
s Ȉ - i
s j# f p+
-
s [
-
$`
- |
s Y
o
s Y
- y
O > ' F / % - ? d - ؗ
- Z
-
- HZ
s 0 - B s t A s t D s u C s (u R
V
9 $`
Y
^
c
g
l
x
f % g & h
& i & j & ? @ '& @ r -& 6& ?& H& Q& a& q& & & & $
$ > ` ` ` - @
@ ! < & & & & ' ' ' ,' 9' F'
Q' Z' d' n' x' ' ' ' ' ' % &
& & x
{ |
"{ m { ' ӏ
ȑ
$
S
u
ӑ
*
ߑ
_
Ñ
ݒ
& ב
!
ڑ
' & & & ' ' ' ' ' ( e &e /e 8e @e Je Ve @ `e ie te I~
}e e e e e e ` ` e ` e ` m
% @ ` e e e e e y" 2k } ~ *~ :~ I~ X~ e~ r~ ~
~ ~
~ ~ # ~ ~ ~ ~ t3 * 0 ; R g 3 q + ! ) - / 1 @ * ć
< p[ x[ o @
Y a : & o o 9 o o + o W 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p
0
@
P
`
p
0 @ P ` p 0 @ P ` p
0
@
P
`
p
0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p 0 @ P ` p ! ! ! 0! @! P! `! p! ! ! ! ! ! ! ! ! " " " 0" @" P" `" p" " " " " " " " " # # # 0# @# P# `# p# # # # # # # # # $ $ $ 0$ @$ P$ `$ p$ $ $ $ $ $ $ $ $ % % % 0% @% P% `% p% % % % % % % % % & & & 0& @& P& `& p& & & & & & & & & ' ' ' 0' @' P' `' p' ' ' ' ' ' ' ' ' ( ( ( 0( @( P( `( p( ( ( ( ( ( ( ( ( ) ) ) 0) @) P) `) p) ) ) ) ) ) ) ) ) * * * 0* @* P* `* p* * * * * * * * * + + + 0+ @+ P+ `+ p+ + + + + + + + + , , , 0, @, P, `, p, , , , , , , , , - - - 0- @- P- `- p- - - - - - - - - . . . 0. @. P. `. p. . . . . . . . . / / / 0/ @/ P/ `/ p/ / / / / / / / / 0 0 0 00 @0 P0 `0 p0 0 0 0 0 0 0 0 0 1 1 1 01 @1 P1 `1 p1 1 1 1 1 1 1 1 1 2 2 2 02 @2 P2 `2 p2 2 2 2 2 2 2 2 2 3 3 3 03 @3 P3 `3 p3 3 3 3 3 3 3 3 3 4 4 4 04 @4 P4 `4 p4 4 4 4 4 4 4 4 4 5 5 5 05 @5 P5 `5 p5 5 5 5 5 5 5 5 5 6 6 6 06 @6 P6 `6 p6 6 6 6 6 6 6 6 6 7 7 7 07 @7 P7 `7 p7 7 7 7 7 7 7 7 7 8 8 8 08 @8 P8 `8 p8 8 8 8 8 8 8 8 8 9 9 9 09 @9 P9 `9 p9 9 9 9 9 9 9 9 9 : : : 0: @: P: `: p: : : : : : : : : ; ; ; 0; @; P; `; p; ; ; ; ; ; ; ; ; < < < 0< @< P< `< p< < < < < < < < < = = = 0= @= P= `= p= = = = = = = = = > > > 0> @> P> `> p> > > > > > > > > ? ? ? 0? @? P? `? p? ? ? ? ? ? ? ? ? @ @ @ 0@ @@ P@ `@ p@ @ @ @ @ @ @ @ @ A A A 0A @A PA `A pA A A A A A A A A B B B 0B @B PB `B pB B B B B B B B B C C C 0C @C PC `C pC C C C C C C C C D D D 0D @D PD `D pD D D D D D D D D E E E 0E @E PE `E pE E E E E E E E E F F F 0F @F PF `F pF F F F F F F F F G G G 0G @G PG `G pG G G G G G G G G H H H 0H @H PH `H pH H H H H H H H H I I I 0I @I PI `I pI I I I I I I I I J J J 0J @J PJ `J pJ J J J J J J J J K K K 0K @K PK `K pK K K K K K K K K L L L 0L @L PL `L pL L L L L L L L L M M M 0M @M PM `M pM M M M M M M M M N N N 0N @N PN `N pN N N N N N N N N O O O 0O @O PO `O pO O O O O O O O O P P P 0P @P PP `P pP P P P P P P P P Q Q Q 0Q @Q PQ `Q pQ Q Q Q Q Q Q Q Q R R R 0R @R PR `R pR R R R R R R R R S S S 0S @S PS `S pS S S S S S S S S T T T 0T @T PT `T pT T T T T T T T T U U U 0U @U PU `U pU U U U U U U U U V V V 0V @V PV `V pV V V V V V V V V W W W 0W @W PW `W pW W W W W W W W W X X X 0X @X PX `X pX X X X X X X X X Y Y Y 0Y @Y PY `Y pY Y Y Y Y Y Y Y Y Z Z Z 0Z @Z PZ `Z pZ Z Z Z Z Z Z Z Z [ [ [ 0[ @[ P[ `[ p[ [ [ [ [ [ [ [ [ \ \ \ 0\ @\ P\ `\ p\ \ \ \ \ \ \ \ \ ] ] ] 0] @] P] `] p] ] ] ] ] ] ] ] ] ^ ^ ^ 0^ @^ P^ `^ p^ ^ ^ ^ ^ ^ ^ ^ ^ _ _ _ 0_ @_ P_ `_ p_ _ _ _ _ _ _ _ _ ` ` ` 0` @` P` `` p` ` ` ` ` ` ` ` ` a a a 0a @a Pa `a pa a a a a a a a a b b b 0b @b Pb `b pb b b b b b b b b c c c 0c @c Pc `c pc c c c c c c c c d d d 0d @d Pd `d pd d d d d d d d d e e e 0e @e Pe `e pe e e e e e e e e f f f 0f @f Pf `f pf f f f f f f f f g g g 0g @g Pg `g pg g g g g g g g g h h h 0h @h Ph `h ph h h h h h i ɣ 8|
` } B v ! @F q C _
0 9 0
Ǝ
` Yp
( ] 1 ` P: =j v H ˎ
`E
@
p ? ӎ
`> ڎ
pv +
0 `<
9
@( 7 ܛ
P? `* A 5
P 4 ܕ
` / 7 2 (
8 @'
PB
I
`k
p
0}
` ` $
~
` Ь ,
p 3
$
:
i C
` L
0W @ S
Pb [
0g c
k i
б # в
@ Ja
o
`
~
%
u
U
\}
x
` |
`
` "{ `
` m ` m ` { `
`
`
`
`
`
`
` ʏ
` ӏ
` ڏ
`
`
`
@
@
@
@ $
@ 0
@ <
@ I
@ V
@ c
@ p
@ }
@
@
@
@
@
@ ͐
@ ڐ
@
@
@
@
@
@ *
@ 7
@ E
@ S
@ d
@ u
@
@
@
@ A\
@ H\
@ = @
@
@ Ñ
@
@ ȑ
@ ̑
@ ӑ
@ ב
@ ڑ
@ ߑ
@
@
@
@
@
@
@
@ %
@ 1
@ >
@ F
@ R
@ _
@ h
@ q
@ z
@
@
@
@
@
@
@
@
@ ǒ
@ Ғ
@ ݒ
@
@
@
@
@
@
@
@ !
@ *
@ 2
@ :
@ B
@ w
"
w
"
w
"
u
ܛ
!
asn1=SEQUENCE:LDAPMessage
[LDAPMessage]
messageID=INTEGER:1
extendedReq=EXPLICIT:23A,IMPLICIT:0C,FORMAT:ASCII,OCT:1.3.6.1.4.1.1466.20037
!
P J
P S
P
0! ?܌`0&9>d Q'^v͆3;<~ w"0qt035V4Go;X pAzҚ5
W wT t>O |Lfέ=P!m Į8bl
ي] {1; VhU
t W mNXOXWt |K ]DX .Lr"]+-`V+!9X 7ʣwn3m_3.4B_ <' ~݇UiUzq]:x C )I^yG.c礋TD]c, ~e% O: J褃Ix߬,7>yUl [z[[u s'y(EX#l)PQ8L5{0^t?.3tu Oeo7ͶoP^}ֻ@Ն&A>s*M\-j(uL#,re<%? Nnzzy0 -d tHN5PD0 Jmk.5R&7
o{@bo]/; hitCJrl.4^v>EJzg81 {T
Xٔ]^PkW*];)!AG UMp⊊#6)TfX }]lHS+G 4>?VCeZp>b?[P]gb)m]W 2j5](Ą%c>0WE4:wa= J]yK/%(iw|Ju.+P2COw"
iX 5maJenbj9 ANH s/ U7kE.&c"^ͮ bN -iOA~6 )Y7d@2&0`nԳD3LJǒB6>tcY
6E+6^ʫIӫc
W<I]^#8 "]V2nic'N XpNl^jCElf\}\xU3K<; XyjSiWq[BI薀H|t ~kT75{9O.ev XWn ?L-F (:H峄GXŬ#͖^A{KS ImQم:b1\nM {QY\̭˓iqc3;#z=ok[ښٕv8ӽJpMMT,ߪw(*,|&
QMvvEOvq,T ouMʓH0J %/I25 IBљ#*!Q'*I ϞD'A W6\~t+_j3,*'Wj@OL:].꽂^Cqշx:D&eSVODUG?B
iT[|IϿBOd儇 p%8ӴxO?NKsz{w,å12U5wbFa00ࢌ)D_MR("6eT_- Nۤ/7A)G7Z?A IWΠ??Ft S0Mnrs y`.*}|MD؊P):)ٯ:G]3 3[ J_[88^Dfbd Ov#ak÷3cx2;
Xꭼ w1Y% .b\hv#E P?Þ;TU2tF,~` {9Z
qE9MڍDH1%G ۘVfHLl,TCvvh
oՓʛ0a ʙ/fVJ.4U+J|g mk[́\:6zдW& e=;<IJM1^O=f"}Ư<>oz/̍ "(%ԔӪЅo Ur
>4,
E'/U>xx.әl?v:0v0JPXԹ4BNG TEeKЅS~Y Wj؟w@c!uv'A0_Ƥ 0S6.ٕ)F`'o>1*N|.AO#!MtD9iK.v^De1
,g=.ӗT ES|?ɬ kr$BCR-Ӊ(vUg9ٷ jQz:;A[]3hSdÊFDloEg<"Gzy
znS옂W8U:Mr7J6T?gnO`+Z Q30F&8ɗ2-Y8ffN{c? ҭB) (YX}\C~ c-a3QFC Na(epC! v{@'>kwmΚw١@k!ܖrϕ^%`9Tlu88MB%f V&MXqjܐ6nC,Nf cHо$# .0;/3x n3'
71MC̠I-7 Ӑ_1iK석+ݛX((Tl% OG®/m)=(CLyYuwVCڬBʕs&T :7d1@YrMa!BLx1|{jT8T/ ڟyBʺ!+JN5=Ů'0E;C>5
S2+ ]XҫSeIHM]`EJ`+7c X C~ܡV^i0~v_Xϻn2Ho|ȏӆ"Iܒ Mvg@[TfHYU;췈0rBe⑧ERQ25#< ճy[Gֽ!i,cnʄ02-I *@|E6G~.[v쉌%w [o۔"ѩc۴C N/hP /[Kcz0.e(왡 ztTЯXNP~1 ם 0&0HXTZ
l8y9 /^!y92rɐί &_.^f/}"mh>nēB dR\ AxRv?k
"r{C &&Pzɡʨ ,W>PEz,Y{4谞'Ż0'ۤ7dȆLdNL{̠q4HF7ΰM9/|ϐ[7(BY5Fn)zwg+6ׁ]8hI} <60z!u` >BGI\i}<5lcbaa \bb #l=,Kr'6e8WjOQА#e<,0Z8byK
?_F&[(MߓŔKB5kiav 3 KˑzGyW= InF:˴[0% 6Z1scnTSiTр
W&Ed+E7W 0.]t Rރsa!b0l6Q{QI'ݽy9=emR`ȋ3CM+FTDRdGlJd?!/r|&߀PԔ}qدt63XcseD %ݘݼ ,CA¡7pZj 06!i>8M4G~&%&NUMJ Yd~r} }+,܋R V&yq
Y'h=6Uwi?cp!7бWzc V;YljT-x}N
[b; $N =Z>=83^7L +X%X#ƃx݉ nk7tڠZ+ (
Pd~(;&9VrMg7,n1Yx]'E1!ά~2v1ĺZɞt&n mC b4IʓBK#yXfܫ3"+\{.RrxJISv-.C<9ta3*UJ痦@ARfϿMɾcv58y#H`8_k g[A
^KN[ Gb#ٶ.]l |U Ϭ7jO@yJy&5M>9l9_R T$|n>J@lcDRSQG.N :&S ũ֊)uͶ{d|~
HJtLS={ jw/,yD7;=)ˉdKWk '/= <s} p i eKtI!d3P3b[
rQ2:dsh[p\gE`W+G
"sV3> !+nk ݵI6옘 ~gjz Q͡mTi j^ \g-f 3"X陯 *Vm@7g z T[r֥#9xȃty =4D+"G1ke__]Sp7M|Jуܲ=xX9P-D# 6_ߞO㌿>IyXG/!c2culnh HY4C
Tg!8 @..JQݺ#f*ʜl-k}hRV/U)
N] +֛Ҙ)E\UeͬSFߥX|.FF/֪!~vb;
6yUd*N;D|N7&xm$kH!g "@?զ^MUq %GDoS+w f~z(e1ׇ)[tQ{Ѝrw
oI~$2pYp}Ėa;
츜 w'5fF1jR]
,4zj!B1H'y{QK[jqE07ޢh -Zݑc_yڙ :KCpWĶύ*#o_J'2$d,9/K~e\nĶ+Q. `ug+vAB)ʷa: odqembv mkx"2cS}흂,\݅Ҭn`.vʱrP[9|i oIRg#C,|;eacslp,s쇒 g֜5HH;D s Y{vM[/_)n7֪O^ R 0 'FezC!Ipч)6f-{ 8َx'ϵEX=!Rhax(l_\=A. _5P3},;$15sƘxf 1ͦ _Y:5T!j+qf ;AR2RQU2O;+am hy4IC|N^1 $"5̢ [eqd>3NAT2x~OFjx?_g
LQQJXd٢2T68
`2jGA;~Ŧ3 gl~Ô,,iN{@M*'Z-?}QpP8M 6y.+}/J
ޑǯ흸le^gb:gWVJXnp)hEͥD V&ХIn"{X:RL\|{2Nd %k}v"S1k ץk8 '3 m'U)?&T#<\.!#%.oT{ ka Qﻹf,%v˿z/V 3ّ1rJ!BNl'"峣瀻Rdf%o ;6.+OƱ[
{5-D>DG&q{mK,l!ΓI4iI>q[~^T<)
Ƥa x~ 국h ')|p*
9vr0^JUF_a%z=o +Ij¡
1BCN||`貐!
|c n[i=w;&'*ܕOB m
1!8\yAt (R/M0 ŦaBOfc5-;q% F⧣ͿX% _
* FKfrQ6Rq !O+&PL|.Tv% H9o $d cDo l?/xӷ& ۍ7M\åuLoXU2n+EH@ع<s[qw?o6Q_~PzM֣v$_[\dq6a'}}՜ZTUE-XR(eRE+ alY{땁)R 25ʑ2bwC,Ax'P."볥' &~ 9r"cyjUaA7)RN1D.A
·bh'[ZzK s@xB(^qzx>,9r, ]Ǯ)ha7}} GhFVm{Q{5 z*CH#ma@c+/aLp=xO 5mm79}3T Ӄe }':k悎X-8l;GXpMF4` <@2u#l Ws L\~Nus-TUɼ˷Nj
}Ј!C
s}T}c^' n~Z M9;|s9Z }r2XqnfY֬S-FX.M}JLWTY,m=*) `DSԩ~!n^SY7qpc*)ךvGN1O*ejKCy 8A65 E<6Hw teThD ,͇;) rLTfA=>_/Xh1WuM8}V4+@| "&}W(8qy!BRfJnGպ7|ocDݱ0mͿ4'Y}yܖ[N@k:dp$ \t^gJʾNH}YbPSF[Z=s pYk^*jN#8ֳ q-ܥ3ݢ>XSnx5xCc ut q$aSM9
"/ԙt:cLZZo)3P'grcȈKջv۱כoz\,`. m+yF$\2T /xs u#Y[$u/R!
%]OEʠTo"Ͻ#g ;I5O76u%
l>-29K__n ~Qٳ7@}rS-~`I1Le:Mc!xk@[Iu#;ŀ`'z wK>uC&qrprp%j-yeN}\[7CfHlgdu6%Ut ,(v= j Zc>1)~3K(-:Q& .)G]c)emxc1rTsr&HWW('b1XzrnEg&%dE186FNq_ AȔs0Tv#"zB2 Fy zy=2b)s
Q# >t$ `6*(M憘|!3T
O|mc s*
8Q#7f?Gos!ktOš2n2 Bz=yCzC
FxMg)+_pJjZ¬ǭ b,?VPr*1c'
^x1Kw\P7fkT]nX TF~
!1^ g2V XVB5ld ?f_>9] 2Hle4P[.y
b5ohiH]4ArZq Go@ @pc6 ;) 0 ) qC;QWq+e!S_()O|D(AOj(P9gS,<˖A@2p e:"yj̙r}m䐵pNH`* z=$)ڽפ`-"ek(/y |CBjEO.4T}my.QMyVD7ZHH?,QFAƑrUs,tP:/mwmE i'e ^4Ӂ=0C#Bv1sFa
9@zۀ,
4Ԓ lnOϯL wvrGќJ3nuv1w)R .R0u ͉ lW'= / \v)K xraao9N>Ǐ68%zJԠ >!9r=P]_ ?mU
![&+wOv ,"j办VxD^`ey1#.t॔KXU346Wy.;N!\HJ`)S--o B.q1mo+#ߴ@,
}} Kߑk
iif[F}pm~uNwMA?b q^8K,0oI.ɚ] U:%#Вã/MUZ1u,A _u c,h˓QsI`&FP_Y T͘At_ `{< 뤓ʚ' e[yn&(; smSX `\vCX$; $ET7c}t!HĔD"-->Z1ܕAX@_ڬ? *kX_Hx $< %kBl61z&v jb
|I
wgG!?C!F0bQrHg͞!0A4w>9g*{/@pO? vJ5NG+]tC3{I @fbz˓SԀH'KAa߿=q %qJWl!}5EjC\T _$.@ޒ#YҡL e[·Uq<
$ka3B+wtyyϭ W5 tqXk2]vH9#wJp>l R$ AZz ^15uĖt۴Ȍ;fPGeb4X5j, Zhxdk>Nz¶ vœjiV4J
n5`#0d9`vQJ<:, `iJ!IT X!QG>TFٶdT/ϥ(9v[-C$oio}_x@ (eƞ Vp RҔJ%L.y\ՎTU%vcP"/XXykAg &lWa:}1-8b6BB$ge |oDɫLE{80X+]
TIM"@P.x(x$V,Cfr_S챱^@ H{?j!5 GŊO^c`q[JO`ƺJ$ .:' !
QU0cą N'|.墣Lc 9wfʠqP=5.`haCʚ#J Er aww*-Va^jFJ?PֺוeSá nCӁFFHNy@4q^J^Op-=:ը
9 _!1trkd5a
9!f
|ʡZqT(pCl{hMEF C,FN&.۰U*PD! 0 ;#3ʣLR6?`
Q qw:0!=$.:%Bjh yi. ˹- Q5˾_XT0wP/W
B ʅ sG
9b?g]$`)L='jPF<#9Zb?J^ ISuC )" Ń W m"$+Kg7ۏ8CD?LS.=fL=1l ߖ3# GYu)wԐ
?LէAc?+sսQjȺMT8Шu"aQcOшI0G0 \u؉ EQ!o0o3$ (#kL:% OyO9]_4T @LZE ߡjpwFD+u2l'i\sG d +B/,i'ѵ#Ņ-CMIt~$ϜE@*(@)ɰ#~2Ƀѝ>շ}ec]]ύ p *q}Ǹbp JO 6%j F߾wVm%_[7̹J3c CCC@)|+6S} MRt_!\:Z% !vL|qPq'[# ![(=%*- }x~ $*\*hoVs:N#"jtx?D wQ 0 >|I ˊf$3;@VP澄 %Ӝlb]+}=zlTQ [GdUZ7%}!ioɊ@zp
NFz۳˃# ĽԪ]1FΞugSGD%s~ЎYѲZ/9ͣ¹ǹHƘMʄl)Y5dY!3 kQ^_ƹ"eFD#33k Ytj>6P!Бl/&0ej0VboVqIZM4Xy0UlZL,YV蝯
xQUC;l -A(Пj~ Ы|}5'IQcd>amS9'Ogw:o s>z(a#+΄W~% Te̕
0Y akNCy% Hh f+vFNY LeHxC ,$}ZpEl)@?[GD9rzڪ* T#7[a
~$sm@r HlF9OxFj1d 8 <*+16`-t2蜓n{ q%8*7Dΐ?RR"8v iXj}| ,2O
7C]$'FTSbq+qAu:a)F:ck0N% U˃uk4A)jUMp쮇8
EwnW`W"ˏ3: 7o림 Sp!v>/E$Y2.;#x=gO7NGL-O A.-",SU +?X :0ڰ-O&8= pQQy2{-'ŜyRS"絮n Ue LsjI)a F
X^{BXEA 1W=[/_OGV? )[Iz*!,IOQmKKR,: 3MӔ> btơu 1lՅ ePfeo SP@1VSz"Iq ,xY4cO/ <8?~%r 9 캐[:Xl0B71jj )F˅ 0^9""4ah7=.J[HcӖd4ѠѮl/HC!0_ޣpx. }nBܷF 6MF=ʼns;lIǟ
D0پ[_t) ,TQޠ/$kwޢhR %]oO4~o0o٠]\ A2 ¢~h\(!XcLNKMX\Ug}n To@gL[<zgi
@v&CV(_;i6,Qw/W{b;@{h
8!]F #rQFyٽ,W~= {k&'jw,B҈ӒQd\lG % ??!
]Te}ð hϛ?nAj)}G0 j3 =S.Ys>u1GzR٦{8h ~KS[Yqenfk6(ץ,9&Kښp7V#^9OC eòp[PIi&+pSFbP3K(1gPޛ~, Pa孽6N@}
K
h__;kܾz:'IC=~,^{nln8]V}S>$
k 2g蠋kE vϑ }!ڻbG6g茪 8a e8`$ԜL z" x
{ |
"{ ӏ
m { &
ȑ
_
*
& !
$
S
u
9m
& Ym
& &
m ye e
c
@ e e d e e $`
f W X XX $`
X X X (Y XY f $`
Y Y Z z z z z z @ z A z B z z C ֢ l_ c z ɞ { { { # ! { '{ 2{ C{ Z{ k{ { { { { { l t im |m
m { { | | .| A| S| d| t| | | | |
| | } +} G} W}
f} w} } } } @ } } } } " 8 F Z
o ŀ ـ C * 8 K
_ o ( * + , - . & / 9 0 E 1 T 2 b 3 q < F G P V ւ Z d m
n ! o ; p X q N r j s t openssl-3.5.8-1.el9_8.x86_64.debug ''7zXZ ִF ! t/_q] ?Eh=ڊ2NEPfkV+^ ;8 ;lGn6ݖ[\q'/_;Ld19{\y8 , oRi 4Ck^vp
S
-%%:~ݘ4n-lRDW}߫+8G-6ߍ?B
m 3?FI>[g[bzôƎ+5`wS^ڃ">A\ }${^QDqvmKaX=cW ]hd\#~x[Āl"B4O-x^z|10:/*Za,EBi
!
;La0+Vᴣ^ Ki M0&TRf㳉{y̦1y-dֽoBvzk$4ų_g(i&Ht l9, wM$vXt}jg ʶu+ ,*7'1hhJ
S} 5$ `9Qm 4'ᕟ$7
r2O̒n1L^D G_SRB]zP.0, ܿj6~bX/L(U8)o) 9Xc?<:{ e6f^ b57jm*Pb?'jOSEA>8ukows
M6E9.s0^R>@0: J1 %Ӥ6klvP Q]u]0bX)(; ^%
`\_$PȘL\`vxlH!KK q\Qxx lýsu - %z\A\G"Y"ïOS -j{, h`X*f]j 0 0=$~f+jn Y1e|Vq9l꯭0hjC`>
YF1;(0
bv u~`*0w7| tS^~,O߁s Sd1+F_9q[3Ϲ[W-걋GrvzЈHY%Cfk8iAeg#ǟp~ |qmD RfM=oUW:qFLb+BS2eBRO[ b@@cM%,~pF٭@Be;c@ S8 5WUh3W"7߀S#؉ټ=g [|%UCYPgTVrԚCl2XYW(BZi9uXoUXJ%f[Y.Ӈsdksf2YH?z L
-
"tΠ%Cfl dA"VɿQ.=p|pGw=Z0
Fqwú1fp4RHM!(|gO`gGx<ƼgYώ6 q0@v0ӳbvzxЗ索&"x(A"- "doI =
0:0/A>:8&>ԗ9@hm \96QqV0
S{h{s4?"1ͤF;mLw%w-݄v7.s-k/'ėaxUcQԮYD N@di;ك}ˠD&{ͦs6Fexwm,6 zD2iW$ ~fN4gU0 z_UAWoA
76JNCwGc^}-m,F"q<
`mw]u/(یI O7A|$Jg匹"Փ`-uY*mpB-x!m(KhH&2?%5 [6pkXIX: 7M,2BtWeފ گaWL~"f6G(W2f Xj 1rxdXHیH7:mQui1JbC SMt%ZqD
9+;#2 Z)s`QVװO`V'~s6H<9Tuy.t@~o4Dn -` Ýk Xd;5zMY$pImp &_BaN0 CS+YpCi9I|S_ؿe`27ɗTxֻWs&ILӄݓO] F l` KAC L.8* @Q萆$]8lD} $)' B GDͲJtXmaakvPYqi>yK[KFL)9#ET
MmSj-yLJS S^ 22[KF/oWp9~lbFӄ+7-H-fҴ /_~Jc˓0p.J\< w9>.7 Zzj,-Ð2<܉T ) t7 E 88R~rc4\Ge
J!}&^u2 ï"1|K/;_sMփ՞ \R7ʵ QB_P@e zXL(B EvPa9MC;4 A&Q{a P4HV:D ', _|Ȕ z4g*$1? H[1a N9{RH
NnZpi̼WJp7bB9S): VuSTH7 7~
s0;m4+Hp@4aV۬E
-U❐`B[ =۩'V&MͫInE~sn p؊ U#KC"G< DE\ Ivn0¥t% Gw,\2)휡f)wLkْzH˟Z5,xZ&l|zO7wxK @zВh$_5/ XUcgmY
}` +\
3aOoO]w~_*?@<0'3 Wsgg 7(̟$wqQ ) iE𣳱eI=3
/ܱ׆".2T,N
. 8 ,ߏж"[QП"~nsX_t"}
m/% } ga`R~3vN `.n
[P[Y+M\eK 'C{Lj%0YPZB'!iM9 l^١mIh칸8b~IS'f'NŻd $Gf5U{F9paNGdtL TӅg_a~9D硜_!'w;s5ܣhncEJo S>AX!A,%Pl 5?0BܓX8#iUB(nKmꀟ )Խ0j'cP 8&~9A>Gā<=|mΆxvZ!0zM ѱηGa:4 3AY5#wD602 4+"e]~L-jHXUGwX7 )'~ (w r:+$* i ? \0+:yU % `tq+k"*~( $u u)Q.QMRT}:%v<ĺ/ [B$$ZRo{4sM4*vov=u vYd >~hOE CR;Hv1;~fYwO]eD7'5s2 ~Z|P89\ecysXA`
1LC2#F@G-'@[>8PkXk6cKς~*ٛg +J?w7(uΏu /BWk x \vriwFI %VB"B f}ʔ(ԄC-c|!}'S~kE8E M\kaX gu1PQ|ahf4-(AGH6*/>=RgP2vD<>l
h w=/$$"tʲ,@n e[|7
T'X$2*c_k_9\n!`6sbrr_9Z 2y-.dYݘ>t;r}vETP= }vG
qɺ2 9 Fݑ_IՊc״(M:Ί1`|.Ab8O ?0`ͩngOqУIȷzfARCc+ L- }MReԴ p$&V/0z^uCC|-̫ r-΅i*==CVISPvb2ΚH.k0Y -ϴ>=jN&3e c ;)d.ٲ̾Й~"g@w5~bss/{tr
(%`S!N&h4;.-L9\? 1~+ %=lYLLP, "y
Hol:'QCM)I
#dY
t_
j1Csf4>_pG[۳ @sQ@Jhh@p;)5 ^R|p1gPEYK|;mF=W|Z&^ LI3fqipO-m!ڙ; # {gT۵Ox ށM8 3 /g YZ .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .got .data .bss .gnu_debuglink .gnu_debugdata 8 8 0 & h h $ 9 G o 0 Q ` Y @ @ a o + + H
n o 9 9 ` } : : & B a a h h h h p p / < <
L ܒ p[ pK x[ xK [ K @ W G Y I 6 ~ G
( H (