From 5801a4377f65ef23286d632679ab5378b6a3282c Mon Sep 17 00:00:00 2001 From: mhoellein Date: Fri, 8 Nov 2024 15:02:50 +0100 Subject: [PATCH] committing changes in /etc made by "apt-get upgrade" Package changes: -amd64-microcode 3.20191218.1ubuntu1.2 amd64 -apache2 2.4.61-1+ubuntu20.04.1+deb.sury.org+1 amd64 -apache2-bin 2.4.61-1+ubuntu20.04.1+deb.sury.org+1 amd64 -apache2-data 2.4.61-1+ubuntu20.04.1+deb.sury.org+1 all -apache2-utils 2.4.61-1+ubuntu20.04.1+deb.sury.org+1 amd64 -apparmor 2.13.3-7ubuntu5.3 amd64 +amd64-microcode 3.20191218.1ubuntu1.3 amd64 +apache2 2.4.62-1+ubuntu20.04.1+deb.sury.org+1 amd64 +apache2-bin 2.4.62-1+ubuntu20.04.1+deb.sury.org+1 amd64 +apache2-data 2.4.62-1+ubuntu20.04.1+deb.sury.org+1 all +apache2-utils 2.4.62-1+ubuntu20.04.1+deb.sury.org+1 amd64 +apparmor 2.13.3-7ubuntu5.4 amd64 -bind9 1:9.16.48-0ubuntu0.20.04.1 amd64 -bind9-dnsutils 1:9.16.48-0ubuntu0.20.04.1 amd64 -bind9-host 1:9.16.48-0ubuntu0.20.04.1 amd64 -bind9-libs 1:9.16.48-0ubuntu0.20.04.1 amd64 -bind9-utils 1:9.16.48-0ubuntu0.20.04.1 amd64 +bind9 1:9.18.28-0ubuntu0.20.04.1 amd64 +bind9-dnsutils 1:9.18.28-0ubuntu0.20.04.1 amd64 +bind9-host 1:9.18.28-0ubuntu0.20.04.1 amd64 +bind9-libs 1:9.18.28-0ubuntu0.20.04.1 amd64 +bind9-utils 1:9.18.28-0ubuntu0.20.04.1 amd64 -busybox-initramfs 1:1.30.1-4ubuntu6.4 amd64 -busybox-static 1:1.30.1-4ubuntu6.4 amd64 +busybox-initramfs 1:1.30.1-4ubuntu6.5 amd64 +busybox-static 1:1.30.1-4ubuntu6.5 amd64 -ca-certificates 20230311ubuntu0.20.04.1 all +ca-certificates 20240203~20.04.1 all -clamav 0.103.11+dfsg-0ubuntu0.20.04.1 amd64 -clamav-base 0.103.11+dfsg-0ubuntu0.20.04.1 all -clamav-daemon 0.103.11+dfsg-0ubuntu0.20.04.1 amd64 -clamav-freshclam 0.103.11+dfsg-0ubuntu0.20.04.1 amd64 -clamdscan 0.103.11+dfsg-0ubuntu0.20.04.1 amd64 -code-brand 24.04-10 all -collaboraoffice 24.04.5-1 amd64 -collaboraoffice-ure 24.04.5-1 amd64 -collaboraofficebasis-calc 24.04.5-1 amd64 -collaboraofficebasis-core 24.04.5-1 amd64 -collaboraofficebasis-draw 24.04.5-1 amd64 -collaboraofficebasis-en-us 24.04.5-1 amd64 -collaboraofficebasis-extension-pdf-import 24.04.5-1 amd64 -collaboraofficebasis-graphicfilter 24.04.5-1 amd64 -collaboraofficebasis-images 24.04.5-1 amd64 -collaboraofficebasis-impress 24.04.5-1 amd64 -collaboraofficebasis-math 24.04.5-1 amd64 -collaboraofficebasis-ooofonts 24.04.5-1 amd64 -collaboraofficebasis-ooolinguistic 24.04.5-1 amd64 -collaboraofficebasis-writer 24.04.5-1 amd64 +clamav 0.103.12+dfsg-0ubuntu0.20.04.1 amd64 +clamav-base 0.103.12+dfsg-0ubuntu0.20.04.1 all +clamav-daemon 0.103.12+dfsg-0ubuntu0.20.04.1 amd64 +clamav-freshclam 0.103.12+dfsg-0ubuntu0.20.04.1 amd64 +clamdscan 0.103.12+dfsg-0ubuntu0.20.04.1 amd64 +code-brand 24.04-23 all +collaboraoffice 24.04.9-2 amd64 +collaboraoffice-ure 24.04.9-2 amd64 +collaboraofficebasis-calc 24.04.9-2 amd64 +collaboraofficebasis-core 24.04.9-2 amd64 +collaboraofficebasis-draw 24.04.9-2 amd64 +collaboraofficebasis-en-us 24.04.9-2 amd64 +collaboraofficebasis-extension-pdf-import 24.04.9-2 amd64 +collaboraofficebasis-graphicfilter 24.04.9-2 amd64 +collaboraofficebasis-images 24.04.9-2 amd64 +collaboraofficebasis-impress 24.04.9-2 amd64 +collaboraofficebasis-math 24.04.9-2 amd64 +collaboraofficebasis-ooofonts 24.04.9-2 amd64 +collaboraofficebasis-ooolinguistic 24.04.9-2 amd64 +collaboraofficebasis-writer 24.04.9-2 amd64 -coolwsd 24.04.5.1-1 amd64 +coolwsd 24.04.9.2-1 amd64 -curl 7.68.0-1ubuntu2.22 amd64 +curl 7.68.0-1ubuntu2.24 amd64 -distro-info-data 0.43ubuntu1.16 all +distro-info-data 0.43ubuntu1.17 all -dnsutils 1:9.16.48-0ubuntu0.20.04.1 all +dnsutils 1:9.18.28-0ubuntu0.20.04.1 all -dovecot-core 1:2.3.7.2-1ubuntu3.6 amd64 -dovecot-imapd 1:2.3.7.2-1ubuntu3.6 amd64 -dovecot-lmtpd 1:2.3.7.2-1ubuntu3.6 amd64 -dovecot-managesieved 1:2.3.7.2-1ubuntu3.6 amd64 -dovecot-mysql 1:2.3.7.2-1ubuntu3.6 amd64 -dovecot-sieve 1:2.3.7.2-1ubuntu3.6 amd64 +dovecot-core 1:2.3.7.2-1ubuntu3.7 amd64 +dovecot-imapd 1:2.3.7.2-1ubuntu3.7 amd64 +dovecot-lmtpd 1:2.3.7.2-1ubuntu3.7 amd64 +dovecot-managesieved 1:2.3.7.2-1ubuntu3.7 amd64 +dovecot-mysql 1:2.3.7.2-1ubuntu3.7 amd64 +dovecot-sieve 1:2.3.7.2-1ubuntu3.7 amd64 -e2fsprogs 1.45.5-2ubuntu1.1 amd64 +e2fsprogs 1.45.5-2ubuntu1.2 amd64 -icinga-php-library 0.14.0-1+ubuntu20.04 all +icinga-php-library 0.14.1-1+ubuntu20.04 all -imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.9 all +imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.10 all -intel-microcode 3.20240514.0ubuntu0.20.04.1 amd64 +intel-microcode 3.20240910.0ubuntu0.20.04.1 amd64 -krb5-locales 1.17-6ubuntu4.4 all +krb5-locales 1.17-6ubuntu4.7 all -libapache2-mod-php7.4 7.4.3-4ubuntu2.23 amd64 +libapache2-mod-php7.4 7.4.3-4ubuntu2.24 amd64 -libapparmor1 2.13.3-7ubuntu5.3 amd64 +libapparmor1 2.13.3-7ubuntu5.4 amd64 -libclamav9 0.103.11+dfsg-0ubuntu0.20.04.1 amd64 +libclamav9 0.103.12+dfsg-0ubuntu0.20.04.1 amd64 -libcom-err2 1.45.5-2ubuntu1.1 amd64 +libcom-err2 1.45.5-2ubuntu1.2 amd64 -libcups2 2.3.1-9ubuntu1.8 amd64 -libcurl3-gnutls 7.68.0-1ubuntu2.22 amd64 -libcurl4 7.68.0-1ubuntu2.22 amd64 +libcups2 2.3.1-9ubuntu1.9 amd64 +libcurl3-gnutls 7.68.0-1ubuntu2.24 amd64 +libcurl4 7.68.0-1ubuntu2.24 amd64 -libexpat1 2.2.9-1ubuntu0.6 amd64 -libexpat1-dev 2.2.9-1ubuntu0.6 amd64 -libext2fs2 1.45.5-2ubuntu1.1 amd64 +libexpat1 2.2.9-1ubuntu0.7 amd64 +libexpat1-dev 2.2.9-1ubuntu0.7 amd64 +libext2fs2 1.45.5-2ubuntu1.2 amd64 -libgssapi-krb5-2 1.17-6ubuntu4.4 amd64 +libgssapi-krb5-2 1.17-6ubuntu4.7 amd64 -libk5crypto3 1.17-6ubuntu4.4 amd64 +libk5crypto3 1.17-6ubuntu4.7 amd64 -libkrb5-3 1.17-6ubuntu4.4 amd64 -libkrb5support0 1.17-6ubuntu4.4 amd64 +libkrb5-3 1.17-6ubuntu4.7 amd64 +libkrb5support0 1.17-6ubuntu4.7 amd64 -libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.9 amd64 -libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.9 amd64 -libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.9 amd64 +libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.10 amd64 +libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.10 amd64 +libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.10 amd64 -libmysqlclient21 8.0.37-0ubuntu0.20.04.3 amd64 +libmysqlclient21 8.0.39-0ubuntu0.20.04.1 amd64 -libnss-systemd 245.4-4ubuntu3.23 amd64 +libnss-systemd 245.4-4ubuntu3.24 amd64 -libopenjp2-7 2.3.1-1ubuntu4.20.04.1 amd64 +libopenjp2-7 2.3.1-1ubuntu4.20.04.3 amd64 -libpam-systemd 245.4-4ubuntu3.23 amd64 +libpam-systemd 245.4-4ubuntu3.24 amd64 -libpcap0.8 1.9.1-3 amd64 +libpcap0.8 1.9.1-3ubuntu1.20.04.1 amd64 -libpq5 12.19-0ubuntu0.20.04.1 amd64 +libpq5 12.20-0ubuntu0.20.04.1 amd64 -libpython3.8 3.8.10-0ubuntu1~20.04.10 amd64 -libpython3.8-dev 3.8.10-0ubuntu1~20.04.10 amd64 -libpython3.8-minimal 3.8.10-0ubuntu1~20.04.10 amd64 -libpython3.8-stdlib 3.8.10-0ubuntu1~20.04.10 amd64 +libpython3.8 3.8.10-0ubuntu1~20.04.12 amd64 +libpython3.8-dev 3.8.10-0ubuntu1~20.04.12 amd64 +libpython3.8-minimal 3.8.10-0ubuntu1~20.04.12 amd64 +libpython3.8-stdlib 3.8.10-0ubuntu1~20.04.12 amd64 -libss2 1.45.5-2ubuntu1.1 amd64 +libss2 1.45.5-2ubuntu1.2 amd64 -libssl1.1 1.1.1f-1ubuntu2.22 amd64 +libssl1.1 1.1.1f-1ubuntu2.23 amd64 -libsystemd0 245.4-4ubuntu3.23 amd64 +libsystemd0 245.4-4ubuntu3.24 amd64 -libtiff5 4.1.0+git191117-2ubuntu0.20.04.13 amd64 +libtiff5 4.1.0+git191117-2ubuntu0.20.04.14 amd64 -libudev1 245.4-4ubuntu3.23 amd64 -libunbound8 1.9.4-2ubuntu1.6 amd64 +libudev1 245.4-4ubuntu3.24 amd64 +libunbound8 1.9.4-2ubuntu1.9 amd64 -linux-libc-dev 5.4.0-189.209 amd64 +linux-libc-dev 5.4.0-200.220 amd64 -logsave 1.45.5-2ubuntu1.1 amd64 +logsave 1.45.5-2ubuntu1.2 amd64 -mysql-client-8.0 8.0.37-0ubuntu0.20.04.3 amd64 -mysql-client-core-8.0 8.0.37-0ubuntu0.20.04.3 amd64 +mysql-client-8.0 8.0.39-0ubuntu0.20.04.1 amd64 +mysql-client-core-8.0 8.0.39-0ubuntu0.20.04.1 amd64 -mysql-server 8.0.37-0ubuntu0.20.04.3 all -mysql-server-8.0 8.0.37-0ubuntu0.20.04.3 amd64 -mysql-server-core-8.0 8.0.37-0ubuntu0.20.04.3 amd64 -nano 4.8-1ubuntu1 amd64 +mysql-server 8.0.39-0ubuntu0.20.04.1 all +mysql-server-8.0 8.0.39-0ubuntu0.20.04.1 amd64 +mysql-server-core-8.0 8.0.39-0ubuntu0.20.04.1 amd64 +nano 4.8-1ubuntu1.1 amd64 -openssl 1.1.1f-1ubuntu2.22 amd64 +openssl 1.1.1f-1ubuntu2.23 amd64 -php7.4 7.4.3-4ubuntu2.23 all -php7.4-bcmath 7.4.3-4ubuntu2.23 amd64 -php7.4-bz2 7.4.3-4ubuntu2.23 amd64 -php7.4-cli 7.4.3-4ubuntu2.23 amd64 -php7.4-common 7.4.3-4ubuntu2.23 amd64 -php7.4-curl 7.4.3-4ubuntu2.23 amd64 -php7.4-gd 7.4.3-4ubuntu2.23 amd64 -php7.4-gmp 7.4.3-4ubuntu2.23 amd64 -php7.4-intl 7.4.3-4ubuntu2.23 amd64 -php7.4-json 7.4.3-4ubuntu2.23 amd64 -php7.4-ldap 7.4.3-4ubuntu2.23 amd64 -php7.4-mbstring 7.4.3-4ubuntu2.23 amd64 -php7.4-mysql 7.4.3-4ubuntu2.23 amd64 -php7.4-opcache 7.4.3-4ubuntu2.23 amd64 -php7.4-pgsql 7.4.3-4ubuntu2.23 amd64 -php7.4-phpdbg 7.4.3-4ubuntu2.23 amd64 -php7.4-readline 7.4.3-4ubuntu2.23 amd64 -php7.4-soap 7.4.3-4ubuntu2.23 amd64 -php7.4-xml 7.4.3-4ubuntu2.23 amd64 -php7.4-zip 7.4.3-4ubuntu2.23 amd64 +php7.4 7.4.3-4ubuntu2.24 all +php7.4-bcmath 7.4.3-4ubuntu2.24 amd64 +php7.4-bz2 7.4.3-4ubuntu2.24 amd64 +php7.4-cli 7.4.3-4ubuntu2.24 amd64 +php7.4-common 7.4.3-4ubuntu2.24 amd64 +php7.4-curl 7.4.3-4ubuntu2.24 amd64 +php7.4-gd 7.4.3-4ubuntu2.24 amd64 +php7.4-gmp 7.4.3-4ubuntu2.24 amd64 +php7.4-intl 7.4.3-4ubuntu2.24 amd64 +php7.4-json 7.4.3-4ubuntu2.24 amd64 +php7.4-ldap 7.4.3-4ubuntu2.24 amd64 +php7.4-mbstring 7.4.3-4ubuntu2.24 amd64 +php7.4-mysql 7.4.3-4ubuntu2.24 amd64 +php7.4-opcache 7.4.3-4ubuntu2.24 amd64 +php7.4-pgsql 7.4.3-4ubuntu2.24 amd64 +php7.4-phpdbg 7.4.3-4ubuntu2.24 amd64 +php7.4-readline 7.4.3-4ubuntu2.24 amd64 +php7.4-soap 7.4.3-4ubuntu2.24 amd64 +php7.4-xml 7.4.3-4ubuntu2.24 amd64 +php7.4-zip 7.4.3-4ubuntu2.24 amd64 -python-pip-whl 20.0.2-5ubuntu1.10 all +python-pip-whl 20.0.2-5ubuntu1.11 all -python3-configobj 5.0.6-4 all +python3-configobj 5.0.6-4ubuntu0.1 all -python3-django 2:2.2.12-1ubuntu0.23 all +python3-django 2:2.2.12-1ubuntu0.25 all -python3-pip 20.0.2-5ubuntu1.10 all -python3-pkg-resources 45.2.0-1ubuntu0.1 all +python3-pip 20.0.2-5ubuntu1.11 all +python3-pkg-resources 45.2.0-1ubuntu0.2 all -python3-setuptools 45.2.0-1ubuntu0.1 all +python3-setuptools 45.2.0-1ubuntu0.2 all -python3-twisted 18.9.0-11ubuntu0.20.04.3 all -python3-twisted-bin 18.9.0-11ubuntu0.20.04.3 amd64 +python3-twisted 18.9.0-11ubuntu0.20.04.4 all +python3-twisted-bin 18.9.0-11ubuntu0.20.04.4 amd64 -python3-update-manager 1:20.04.10.21 all -python3-urllib3 1.25.8-2ubuntu0.3 all +python3-update-manager 1:20.04.10.23 all +python3-urllib3 1.25.8-2ubuntu0.4 all -python3.8 3.8.10-0ubuntu1~20.04.10 amd64 -python3.8-dev 3.8.10-0ubuntu1~20.04.10 amd64 -python3.8-minimal 3.8.10-0ubuntu1~20.04.10 amd64 +python3.8 3.8.10-0ubuntu1~20.04.12 amd64 +python3.8-dev 3.8.10-0ubuntu1~20.04.12 amd64 +python3.8-minimal 3.8.10-0ubuntu1~20.04.12 amd64 -snapd 2.63+20.04 amd64 +snapd 2.65.3+20.04 amd64 -systemd 245.4-4ubuntu3.23 amd64 -systemd-sysv 245.4-4ubuntu3.23 amd64 -systemd-timesyncd 245.4-4ubuntu3.23 amd64 +systemd 245.4-4ubuntu3.24 amd64 +systemd-sysv 245.4-4ubuntu3.24 amd64 +systemd-timesyncd 245.4-4ubuntu3.24 amd64 -ubuntu-advantage-tools 32.3.1~20.04 all +ubuntu-advantage-tools 34~20.04 all -ubuntu-pro-client 32.3.1~20.04 amd64 -ubuntu-pro-client-l10n 32.3.1~20.04 amd64 +ubuntu-pro-client 34~20.04 amd64 +ubuntu-pro-client-l10n 34~20.04 amd64 -udev 245.4-4ubuntu3.23 amd64 +udev 245.4-4ubuntu3.24 amd64 -update-manager-core 1:20.04.10.21 all +update-manager-core 1:20.04.10.23 all -vim 2:8.1.2269-1ubuntu5.23 amd64 +vim 2:8.1.2269-1ubuntu5.25 amd64 -vim-common 2:8.1.2269-1ubuntu5.23 all +vim-common 2:8.1.2269-1ubuntu5.25 all -vim-runtime 2:8.1.2269-1ubuntu5.23 all -vim-tiny 2:8.1.2269-1ubuntu5.23 amd64 +vim-runtime 2:8.1.2269-1ubuntu5.25 all +vim-tiny 2:8.1.2269-1ubuntu5.25 amd64 -xxd 2:8.1.2269-1ubuntu5.23 amd64 +xxd 2:8.1.2269-1ubuntu5.25 amd64 --- .etckeeper | 1 + apparmor.d/ubuntu_pro_apt_news | 11 +- apparmor.d/usr.lib.snapd.snap-confine.real | 128 ++--- apt/apt.conf.d/20apt-esm-hook.conf | 4 +- bind/bind.keys | 11 + ca-certificates.conf | 24 +- coolwsd/coolkitconfig.xcu | 10 - letsencrypt/.certbot.lock | 0 mysql/FROZEN | 1 + nginx/snippets/coolwsd.conf | 12 +- ssl/certs/0179095f.0 | 1 + ssl/certs/1cef98f5.0 | 1 + ssl/certs/228f89db.0 | 1 + ssl/certs/3bde41ac.1 | 1 - ssl/certs/3e359ba6.0 | 1 + ssl/certs/3e45d192.0 | 1 - ssl/certs/4fd49c6c.0 | 1 + ssl/certs/5273a94c.0 | 1 - ssl/certs/5a7722fb.0 | 1 - ssl/certs/66445960.0 | 1 - ssl/certs/81f2d2b1.0 | 1 + ssl/certs/8312c4c1.0 | 1 + ssl/certs/865fbdf9.0 | 1 + ssl/certs/9046744a.0 | 1 + ssl/certs/9b46e03d.0 | 1 + ssl/certs/9bf03295.0 | 1 + .../Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem | 1 + .../Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem | 1 + ...acion_Firmaprofesional_CIF_A62634068_2.pem | 1 - ssl/certs/BJCA_Global_Root_CA1.pem | 1 + ssl/certs/BJCA_Global_Root_CA2.pem | 1 + .../CommScope_Public_Trust_ECC_Root-01.pem | 1 + .../CommScope_Public_Trust_ECC_Root-02.pem | 1 + .../CommScope_Public_Trust_RSA_Root-01.pem | 1 + .../CommScope_Public_Trust_RSA_Root-02.pem | 1 + ssl/certs/E-Tugra_Certification_Authority.pem | 1 - ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem | 1 - ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem | 1 - ssl/certs/Hongkong_Post_Root_CA_1.pem | 1 - ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem | 1 + ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem | 1 + ..._Public_Server_Authentication_Root_E46.pem | 1 + ..._Public_Server_Authentication_Root_R46.pem | 1 + ssl/certs/TrustAsia_Global_Root_CA_G3.pem | 1 + ssl/certs/TrustAsia_Global_Root_CA_G4.pem | 1 + ssl/certs/a89d74c2.0 | 1 + ssl/certs/ca-certificates.crt | 503 ++++++++++++------ ssl/certs/da0cfd1d.0 | 1 + ssl/certs/fb717492.0 | 1 + systemd/system/snap.certbot.renew.timer | 4 +- 50 files changed, 489 insertions(+), 258 deletions(-) create mode 100644 letsencrypt/.certbot.lock create mode 120000 mysql/FROZEN create mode 120000 ssl/certs/0179095f.0 create mode 120000 ssl/certs/1cef98f5.0 create mode 120000 ssl/certs/228f89db.0 delete mode 120000 ssl/certs/3bde41ac.1 create mode 120000 ssl/certs/3e359ba6.0 delete mode 120000 ssl/certs/3e45d192.0 create mode 120000 ssl/certs/4fd49c6c.0 delete mode 120000 ssl/certs/5273a94c.0 delete mode 120000 ssl/certs/5a7722fb.0 delete mode 120000 ssl/certs/66445960.0 create mode 120000 ssl/certs/81f2d2b1.0 create mode 120000 ssl/certs/8312c4c1.0 create mode 120000 ssl/certs/865fbdf9.0 create mode 120000 ssl/certs/9046744a.0 create mode 120000 ssl/certs/9b46e03d.0 create mode 120000 ssl/certs/9bf03295.0 create mode 120000 ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem create mode 120000 ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem delete mode 120000 ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem create mode 120000 ssl/certs/BJCA_Global_Root_CA1.pem create mode 120000 ssl/certs/BJCA_Global_Root_CA2.pem create mode 120000 ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem create mode 120000 ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem create mode 120000 ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem create mode 120000 ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem delete mode 120000 ssl/certs/E-Tugra_Certification_Authority.pem delete mode 120000 ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem delete mode 120000 ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem delete mode 120000 ssl/certs/Hongkong_Post_Root_CA_1.pem create mode 120000 ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem create mode 120000 ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem create mode 120000 ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem create mode 120000 ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem create mode 120000 ssl/certs/TrustAsia_Global_Root_CA_G3.pem create mode 120000 ssl/certs/TrustAsia_Global_Root_CA_G4.pem create mode 120000 ssl/certs/a89d74c2.0 create mode 120000 ssl/certs/da0cfd1d.0 create mode 120000 ssl/certs/fb717492.0 diff --git a/.etckeeper b/.etckeeper index 1ebd62380..1865e318e 100755 --- a/.etckeeper +++ b/.etckeeper @@ -1661,6 +1661,7 @@ maybe chmod 0755 'ldap/schema' maybe chmod 0644 'ldap/schema/amavis.schema' maybe chmod 0644 'legal' maybe chmod 0755 'letsencrypt' +maybe chmod 0600 'letsencrypt/.certbot.lock' maybe chmod 0644 'letsencrypt/.updated-options-ssl-apache-conf-digest.txt' maybe chmod 0700 'letsencrypt/accounts' maybe chmod 0700 'letsencrypt/accounts/acme-staging-v02.api.letsencrypt.org' diff --git a/apparmor.d/ubuntu_pro_apt_news b/apparmor.d/ubuntu_pro_apt_news index d703d4a41..a07d06ee3 100644 --- a/apparmor.d/ubuntu_pro_apt_news +++ b/apparmor.d/ubuntu_pro_apt_news @@ -41,7 +41,16 @@ profile ubuntu_pro_apt_news flags=(attach_disconnected) { /run/ubuntu-advantage/ rw, /run/ubuntu-advantage/* rw, - /tmp/** r, + # LP: #2072489 + # the apt-news package selector needs access to packaging information + # this is a good candidate for a child profile + owner /tmp/** rw, + /etc/machine-id r, + /etc/dpkg/** r, + /{,usr/}bin/dpkg mrix, + /var/lib/apt/** r, + /var/lib/dpkg/** r, + /var/cache/apt/** rw, owner @{PROC}/@{pid}/fd/ r, @{PROC}/@{pid}/status r, diff --git a/apparmor.d/usr.lib.snapd.snap-confine.real b/apparmor.d/usr.lib.snapd.snap-confine.real index 4b8c1df88..93d998145 100644 --- a/apparmor.d/usr.lib.snapd.snap-confine.real +++ b/apparmor.d/usr.lib.snapd.snap-confine.real @@ -1,6 +1,8 @@ # Author: Jamie Strandboge #include +@{SNAP_MOUNT_DIR_LIST}="{,/var/lib/snapd}/snap" + /usr/lib/snapd/snap-confine (attach_disconnected) { # Include any additional files that snapd chose to generate. # - for $HOME on remote file system. @@ -18,30 +20,30 @@ # Do not assume that the interpreter is always named like # ld-linux-x86_64.so, as on some architectures there can be a version after # the .so suffix, eg. ld-linux-aarch64.so.1 - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}ld{-*,64}.so* mrix, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}ld{-*,64}.so* mrix, # libc, you are funny - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libc{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libpthread{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libreadline{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}librt{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libgcc_s.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libncursesw{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libresolv{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libselinux.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libpcre{,2}{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libmount.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libblkid.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libuuid.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libc{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libpthread{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libreadline{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}librt{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libgcc_s.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libncursesw{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libresolv{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libselinux.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libpcre{,2}{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libmount.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libblkid.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libuuid.so* mr, # normal libs in order - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libapparmor.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcgmanager.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libdl{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih-dbus.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libdbus-1.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libudev.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libseccomp.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcap.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libapparmor.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcgmanager.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libdl{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih-dbus.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libdbus-1.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libudev.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libseccomp.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcap.so* mr, /usr/lib/snapd/snap-confine mr, @@ -64,6 +66,9 @@ /dev/pts/[0-9]* rw, /dev/tty rw, + # SNAP_MOUNT_DIR probe logic + /proc/1/root/snap r, + # cgroup: devices capability sys_admin, capability dac_read_search, @@ -132,6 +137,9 @@ # LD_PRELOAD to be set to a library which is in a directory configured by # ld.so.conf, but access to those locations is mediated by this profile # (which requires rules for specific locations). + # TODO: use GenerateAAREExclusionPatterns for this, though the first + # rule and the fact that the generative aspect is not an absolute filepath + # complicate using that function directly change_profile unsafe /** -> [^u/]**, change_profile unsafe /** -> u[^n]**, change_profile unsafe /** -> un[^c]**, @@ -163,14 +171,14 @@ # For mounting base dir by dir (write dirs and mount on them) /tmp/snap.rootfs_** rw, mount options=(remount ro) -> /tmp/snap.rootfs_*/, - mount options=(rw rbind) /snap/*/*/**/ -> /tmp/snap.rootfs_**/, + mount options=(rw rbind) @{SNAP_MOUNT_DIR_LIST}/*/*/**/ -> /tmp/snap.rootfs_**/, # For mounting individual files - mount options=(rw bind) /snap/*/*/** -> /tmp/snap.rootfs_*/**, + mount options=(rw bind) @{SNAP_MOUNT_DIR_LIST}/*/*/** -> /tmp/snap.rootfs_*/**, mount options=(rw rslave) -> /tmp/snap.rootfs_**/, # Allow mounting dirs from / mount options=(rw rbind) /*/ -> /tmp/snap.rootfs_**/, - # LP: #1668659 and parallel instaces of classic snaps + # LP: #1668659 and parallel instances of classic snaps mount options=(rw rbind) /snap/ -> /snap/, mount options=(rw rshared) -> /snap/, mount options=(rw rbind) /var/lib/snapd/snap/ -> /var/lib/snapd/snap/, @@ -183,7 +191,7 @@ mount options=(rw bind) /tmp/snap.rootfs_*/ -> /tmp/snap.rootfs_*/, mount options=(rw unbindable) -> /tmp/snap.rootfs_*/, # the next line is for classic system - mount options=(rw rbind) /snap/*/*/ -> /tmp/snap.rootfs_*/, + mount options=(rw rbind) @{SNAP_MOUNT_DIR_LIST}/*/*/ -> /tmp/snap.rootfs_*/, # the next line is for core system mount options=(rw rbind) / -> /tmp/snap.rootfs_*/, # all of the constructed rootfs is a rslave @@ -260,19 +268,19 @@ mount options=(rw slave) -> /tmp/snap.rootfs_*/usr/lib/snapd/, # allow making re-execed host snap-exec available inside base snaps - mount options=(ro bind) /snap/core/*/usr/lib/snapd/ -> /tmp/snap.rootfs_*/usr/lib/snapd/, + mount options=(ro bind) @{SNAP_MOUNT_DIR_LIST}/core/*/usr/lib/snapd/ -> /tmp/snap.rootfs_*/usr/lib/snapd/, # allow making snapd snap tools available inside base snaps - mount options=(ro bind) /snap/snapd/*/usr/lib/snapd/ -> /tmp/snap.rootfs_*/usr/lib/snapd/, + mount options=(ro bind) @{SNAP_MOUNT_DIR_LIST}/snapd/*/usr/lib/snapd/ -> /tmp/snap.rootfs_*/usr/lib/snapd/, mount options=(rw bind) /usr/bin/snapctl -> /tmp/snap.rootfs_*/usr/bin/snapctl, mount options=(rw slave) -> /tmp/snap.rootfs_*/usr/bin/snapctl, # /etc/alternatives (classic and normal mode) - mount options=(rw bind) /snap/*/*/etc/alternatives/ -> /tmp/snap.rootfs_*/etc/alternatives/, - mount options=(rw bind) /snap/*/*/etc/ssl/ -> /tmp/snap.rootfs_*/etc/ssl/, - mount options=(rw bind) /snap/*/*/etc/nsswitch.conf -> /tmp/snap.rootfs_*/etc/nsswitch.conf, - mount options=(rw bind) /snap/*/*/etc/apparmor/ -> /tmp/snap.rootfs_*/etc/apparmor/, - mount options=(rw bind) /snap/*/*/etc/apparmor.d/ -> /tmp/snap.rootfs_*/etc/apparmor.d/, + mount options=(rw bind) @{SNAP_MOUNT_DIR_LIST}/*/*/etc/alternatives/ -> /tmp/snap.rootfs_*/etc/alternatives/, + mount options=(rw bind) @{SNAP_MOUNT_DIR_LIST}/*/*/etc/ssl/ -> /tmp/snap.rootfs_*/etc/ssl/, + mount options=(rw bind) @{SNAP_MOUNT_DIR_LIST}/*/*/etc/nsswitch.conf -> /tmp/snap.rootfs_*/etc/nsswitch.conf, + mount options=(rw bind) @{SNAP_MOUNT_DIR_LIST}/*/*/etc/apparmor/ -> /tmp/snap.rootfs_*/etc/apparmor/, + mount options=(rw bind) @{SNAP_MOUNT_DIR_LIST}/*/*/etc/apparmor.d/ -> /tmp/snap.rootfs_*/etc/apparmor.d/, # /etc/alternatives (core/legacy mode) mount options=(rw bind) /etc/alternatives/ -> /tmp/snap.rootfs_*/etc/alternatives/, @@ -285,7 +293,7 @@ mount options=(rw slave) -> /tmp/snap.rootfs_*/etc/apparmor.d/, # the /snap directory - mount options=(rw rbind) /snap/ -> /tmp/snap.rootfs_*/snap/, + mount options=(rw rbind) @{SNAP_MOUNT_DIR_LIST}/ -> /tmp/snap.rootfs_*/snap/, mount options=(rw rslave) -> /tmp/snap.rootfs_*/snap/, # pivot_root preparation and execution mount options=(rw bind) /tmp/snap.rootfs_*/var/lib/snapd/hostfs/ -> /tmp/snap.rootfs_*/var/lib/snapd/hostfs/, @@ -317,8 +325,8 @@ mount options=(rslave) -> /, # set up mount namespace for parallel instances of classic snaps - mount options=(rw rbind) /snap/{,*/} -> /snap/{,*/}, - mount options=(rslave) -> /snap/, + mount options=(rw rbind) @{SNAP_MOUNT_DIR_LIST}/{,*/} -> @{SNAP_MOUNT_DIR_LIST}/{,*/}, + mount options=(rslave) -> @{SNAP_MOUNT_DIR_LIST}/, mount options=(rslave) -> /var/snap/, mount options=(rw rbind) /var/snap/{,*/} -> /var/snap/{,*/}, mount options=(rw rshared) -> /var/snap/, @@ -348,8 +356,8 @@ # for running snaps on classic /snap/ r, /snap/** r, - /snap/ r, - /snap/** r, + @{SNAP_MOUNT_DIR_LIST}/ r, + @{SNAP_MOUNT_DIR_LIST}/** r, # NOTE: at this stage the /snap directory is stable as we have called # pivot_root already. @@ -504,30 +512,30 @@ # We run privileged, so be fanatical about what we include and don't use # any abstractions /etc/ld.so.cache r, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}ld{-*,64}.so* mrix, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}ld{-*,64}.so* mrix, # libc, you are funny - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libc{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libpthread{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libreadline{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}librt{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libgcc_s.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libncursesw{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libresolv{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libselinux.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libpcre.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libmount.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libblkid.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libuuid.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libc{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libpthread{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libreadline{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}librt{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libgcc_s.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libncursesw{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libresolv{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libselinux.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libpcre.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libmount.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libblkid.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libuuid.so* mr, # normal libs in order - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libapparmor.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcgmanager.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libdl{,-[0-9]*}.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih-dbus.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libdbus-1.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libudev.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libseccomp.so* mr, - /{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcap.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libapparmor.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcgmanager.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libdl{,-[0-9]*}.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libnih-dbus.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libdbus-1.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libudev.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libseccomp.so* mr, + /{,{,var/lib/snapd/}snap/{snapd,core}/*/}{,usr/}lib{,32,64,x32}/{,@{multiarch}/}libcap.so* mr, /usr/lib/snapd/snap-confine mr, diff --git a/apt/apt.conf.d/20apt-esm-hook.conf b/apt/apt.conf.d/20apt-esm-hook.conf index 36a75937c..163853b11 100644 --- a/apt/apt.conf.d/20apt-esm-hook.conf +++ b/apt/apt.conf.d/20apt-esm-hook.conf @@ -1,7 +1,7 @@ APT::Update::Pre-Invoke { - "[ ! -e /run/systemd/system ] || [ $(id -u) -ne 0 ] || systemctl start --no-block apt-news.service esm-cache.service || true"; + "[ ! -e /run/systemd/system ] || [ $(id -u) -ne 0 ] || systemctl start --no-block apt-news.service esm-cache.service >/dev/null 2>&1 || true"; }; binary::apt::AptCli::Hooks::Upgrade { - "[ ! -f /usr/lib/ubuntu-advantage/apt-esm-json-hook ] || /usr/lib/ubuntu-advantage/apt-esm-json-hook || true"; + "[ ! -f /usr/lib/ubuntu-advantage/apt-esm-json-hook ] || /usr/lib/ubuntu-advantage/apt-esm-json-hook 2>> /var/log/ubuntu-advantage-apt-hook.log || true"; }; diff --git a/bind/bind.keys b/bind/bind.keys index 6d4217f1a..1ac4a5689 100644 --- a/bind/bind.keys +++ b/bind/bind.keys @@ -1,3 +1,14 @@ +# Copyright (C) Internet Systems Consortium, Inc. ("ISC") +# +# SPDX-License-Identifier: MPL-2.0 +# +# This Source Code Form is subject to the terms of the Mozilla Public +# License, v. 2.0. If a copy of the MPL was not distributed with this +# file, you can obtain one at https://mozilla.org/MPL/2.0/. +# +# See the COPYRIGHT file distributed with this work for additional +# information regarding copyright ownership. + # The bind.keys file is used to override the built-in DNSSEC trust anchors # which are included as part of BIND 9. The only trust anchors it contains # are for the DNS root zone ("."). Trust anchors for any other zones MUST diff --git a/ca-certificates.conf b/ca-certificates.conf index 9c1108799..b4b20b3a4 100644 --- a/ca-certificates.conf +++ b/ca-certificates.conf @@ -53,7 +53,7 @@ mozilla/DigiCert_Global_Root_G2.crt mozilla/DigiCert_Global_Root_G3.crt mozilla/DigiCert_High_Assurance_EV_Root_CA.crt mozilla/DigiCert_Trusted_Root_G4.crt -mozilla/E-Tugra_Certification_Authority.crt +!mozilla/E-Tugra_Certification_Authority.crt !mozilla/EC-ACC.crt !mozilla/EE_Certification_Centre_Root_CA.crt mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt @@ -78,7 +78,7 @@ mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt !mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt -mozilla/Hongkong_Post_Root_CA_1.crt +!mozilla/Hongkong_Post_Root_CA_1.crt mozilla/ISRG_Root_X1.crt mozilla/IdenTrust_Commercial_Root_CA_1.crt mozilla/IdenTrust_Public_Sector_Root_CA_1.crt @@ -172,15 +172,15 @@ mozilla/Certum_Trusted_Root_CA.crt mozilla/GlobalSign_Root_E46.crt mozilla/GlobalSign_Root_R46.crt mozilla/GLOBALTRUST_2020.crt -mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.crt +!mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.crt mozilla/Certainly_Root_E1.crt mozilla/Certainly_Root_R1.crt mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt mozilla/DigiCert_TLS_RSA4096_Root_G5.crt mozilla/D-TRUST_BR_Root_CA_1_2020.crt mozilla/D-TRUST_EV_Root_CA_1_2020.crt -mozilla/E-Tugra_Global_Root_CA_ECC_v3.crt -mozilla/E-Tugra_Global_Root_CA_RSA_v3.crt +!mozilla/E-Tugra_Global_Root_CA_ECC_v3.crt +!mozilla/E-Tugra_Global_Root_CA_RSA_v3.crt mozilla/HARICA_TLS_ECC_Root_CA_2021.crt mozilla/HARICA_TLS_RSA_Root_CA_2021.crt mozilla/HiPKI_Root_CA_-_G1.crt @@ -191,3 +191,17 @@ mozilla/Telia_Root_CA_v2.crt mozilla/TunTrust_Root_CA.crt mozilla/vTrus_ECC_Root_CA.crt mozilla/vTrus_Root_CA.crt +mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt +mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt +mozilla/BJCA_Global_Root_CA1.crt +mozilla/BJCA_Global_Root_CA2.crt +mozilla/CommScope_Public_Trust_ECC_Root-01.crt +mozilla/CommScope_Public_Trust_ECC_Root-02.crt +mozilla/CommScope_Public_Trust_RSA_Root-01.crt +mozilla/CommScope_Public_Trust_RSA_Root-02.crt +mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt +mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt +mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt +mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt +mozilla/TrustAsia_Global_Root_CA_G3.crt +mozilla/TrustAsia_Global_Root_CA_G4.crt diff --git a/coolwsd/coolkitconfig.xcu b/coolwsd/coolkitconfig.xcu index 61e39faa0..ce4d0ac4f 100644 --- a/coolwsd/coolkitconfig.xcu +++ b/coolwsd/coolkitconfig.xcu @@ -96,11 +96,6 @@ true - - - 0 - - 128 @@ -415,11 +410,6 @@ true - - - 0xFFFFFF - - 1939955 diff --git a/letsencrypt/.certbot.lock b/letsencrypt/.certbot.lock new file mode 100644 index 000000000..e69de29bb diff --git a/mysql/FROZEN b/mysql/FROZEN new file mode 120000 index 000000000..2bc63aea9 --- /dev/null +++ b/mysql/FROZEN @@ -0,0 +1 @@ +../../usr/share/doc/mysql-common/frozen-mode/downgrade \ No newline at end of file diff --git a/nginx/snippets/coolwsd.conf b/nginx/snippets/coolwsd.conf index 6d0814ea5..0e60c3f5f 100644 --- a/nginx/snippets/coolwsd.conf +++ b/nginx/snippets/coolwsd.conf @@ -1,19 +1,19 @@ # static files location ^~ /browser { proxy_pass http://localhost:9980; - proxy_set_header Host $http_host; + proxy_set_header Host $host; } # WOPI discovery URL location ^~ /hosting/discovery { proxy_pass http://localhost:9980; - proxy_set_header Host $http_host; + proxy_set_header Host $host; } # Capabilities location ^~ /hosting/capabilities { proxy_pass http://localhost:9980; - proxy_set_header Host $http_host; + proxy_set_header Host $host; } # main websocket @@ -21,7 +21,7 @@ proxy_pass http://localhost:9980; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; - proxy_set_header Host $http_host; + proxy_set_header Host $host; proxy_read_timeout 36000s; } @@ -29,7 +29,7 @@ # we accept 'lool' to be backward compatible location ~ ^/(c|l)ool { proxy_pass http://localhost:9980; - proxy_set_header Host $http_host; + proxy_set_header Host $host; } # Admin Console websocket @@ -37,6 +37,6 @@ proxy_pass http://localhost:9980; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; - proxy_set_header Host $http_host; + proxy_set_header Host $host; proxy_read_timeout 36000s; } diff --git a/ssl/certs/0179095f.0 b/ssl/certs/0179095f.0 new file mode 120000 index 000000000..e225d2824 --- /dev/null +++ b/ssl/certs/0179095f.0 @@ -0,0 +1 @@ +BJCA_Global_Root_CA1.pem \ No newline at end of file diff --git a/ssl/certs/1cef98f5.0 b/ssl/certs/1cef98f5.0 new file mode 120000 index 000000000..b8618ac29 --- /dev/null +++ b/ssl/certs/1cef98f5.0 @@ -0,0 +1 @@ +TrustAsia_Global_Root_CA_G4.pem \ No newline at end of file diff --git a/ssl/certs/228f89db.0 b/ssl/certs/228f89db.0 new file mode 120000 index 000000000..4aa9a71e8 --- /dev/null +++ b/ssl/certs/228f89db.0 @@ -0,0 +1 @@ +CommScope_Public_Trust_ECC_Root-01.pem \ No newline at end of file diff --git a/ssl/certs/3bde41ac.1 b/ssl/certs/3bde41ac.1 deleted file mode 120000 index 36747150a..000000000 --- a/ssl/certs/3bde41ac.1 +++ /dev/null @@ -1 +0,0 @@ -Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem \ No newline at end of file diff --git a/ssl/certs/3e359ba6.0 b/ssl/certs/3e359ba6.0 new file mode 120000 index 000000000..487fda707 --- /dev/null +++ b/ssl/certs/3e359ba6.0 @@ -0,0 +1 @@ +BJCA_Global_Root_CA2.pem \ No newline at end of file diff --git a/ssl/certs/3e45d192.0 b/ssl/certs/3e45d192.0 deleted file mode 120000 index 33456cab6..000000000 --- a/ssl/certs/3e45d192.0 +++ /dev/null @@ -1 +0,0 @@ -Hongkong_Post_Root_CA_1.pem \ No newline at end of file diff --git a/ssl/certs/4fd49c6c.0 b/ssl/certs/4fd49c6c.0 new file mode 120000 index 000000000..c12aa7bbf --- /dev/null +++ b/ssl/certs/4fd49c6c.0 @@ -0,0 +1 @@ +CommScope_Public_Trust_RSA_Root-02.pem \ No newline at end of file diff --git a/ssl/certs/5273a94c.0 b/ssl/certs/5273a94c.0 deleted file mode 120000 index c775a2b5d..000000000 --- a/ssl/certs/5273a94c.0 +++ /dev/null @@ -1 +0,0 @@ -E-Tugra_Certification_Authority.pem \ No newline at end of file diff --git a/ssl/certs/5a7722fb.0 b/ssl/certs/5a7722fb.0 deleted file mode 120000 index 2939f3109..000000000 --- a/ssl/certs/5a7722fb.0 +++ /dev/null @@ -1 +0,0 @@ -E-Tugra_Global_Root_CA_ECC_v3.pem \ No newline at end of file diff --git a/ssl/certs/66445960.0 b/ssl/certs/66445960.0 deleted file mode 120000 index 25b721dce..000000000 --- a/ssl/certs/66445960.0 +++ /dev/null @@ -1 +0,0 @@ -E-Tugra_Global_Root_CA_RSA_v3.pem \ No newline at end of file diff --git a/ssl/certs/81f2d2b1.0 b/ssl/certs/81f2d2b1.0 new file mode 120000 index 000000000..22354c62f --- /dev/null +++ b/ssl/certs/81f2d2b1.0 @@ -0,0 +1 @@ +CommScope_Public_Trust_ECC_Root-02.pem \ No newline at end of file diff --git a/ssl/certs/8312c4c1.0 b/ssl/certs/8312c4c1.0 new file mode 120000 index 000000000..ef2010cbc --- /dev/null +++ b/ssl/certs/8312c4c1.0 @@ -0,0 +1 @@ +CommScope_Public_Trust_RSA_Root-01.pem \ No newline at end of file diff --git a/ssl/certs/865fbdf9.0 b/ssl/certs/865fbdf9.0 new file mode 120000 index 000000000..df9fd6a44 --- /dev/null +++ b/ssl/certs/865fbdf9.0 @@ -0,0 +1 @@ +SSL.com_TLS_ECC_Root_CA_2022.pem \ No newline at end of file diff --git a/ssl/certs/9046744a.0 b/ssl/certs/9046744a.0 new file mode 120000 index 000000000..92223bfeb --- /dev/null +++ b/ssl/certs/9046744a.0 @@ -0,0 +1 @@ +Sectigo_Public_Server_Authentication_Root_R46.pem \ No newline at end of file diff --git a/ssl/certs/9b46e03d.0 b/ssl/certs/9b46e03d.0 new file mode 120000 index 000000000..869aa2b40 --- /dev/null +++ b/ssl/certs/9b46e03d.0 @@ -0,0 +1 @@ +Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem \ No newline at end of file diff --git a/ssl/certs/9bf03295.0 b/ssl/certs/9bf03295.0 new file mode 120000 index 000000000..b7dcbb99c --- /dev/null +++ b/ssl/certs/9bf03295.0 @@ -0,0 +1 @@ +TrustAsia_Global_Root_CA_G3.pem \ No newline at end of file diff --git a/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem b/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem new file mode 120000 index 000000000..c46e5c53f --- /dev/null +++ b/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt \ No newline at end of file diff --git a/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem b/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem new file mode 120000 index 000000000..d83434629 --- /dev/null +++ b/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt \ No newline at end of file diff --git a/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem b/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem deleted file mode 120000 index 7cf350d9e..000000000 --- a/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem +++ /dev/null @@ -1 +0,0 @@ -/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.crt \ No newline at end of file diff --git a/ssl/certs/BJCA_Global_Root_CA1.pem b/ssl/certs/BJCA_Global_Root_CA1.pem new file mode 120000 index 000000000..c56d001a1 --- /dev/null +++ b/ssl/certs/BJCA_Global_Root_CA1.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt \ No newline at end of file diff --git a/ssl/certs/BJCA_Global_Root_CA2.pem b/ssl/certs/BJCA_Global_Root_CA2.pem new file mode 120000 index 000000000..826b9a8cb --- /dev/null +++ b/ssl/certs/BJCA_Global_Root_CA2.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt \ No newline at end of file diff --git a/ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem b/ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem new file mode 120000 index 000000000..3ffac0e0c --- /dev/null +++ b/ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt \ No newline at end of file diff --git a/ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem b/ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem new file mode 120000 index 000000000..98efaf7ef --- /dev/null +++ b/ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt \ No newline at end of file diff --git a/ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem b/ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem new file mode 120000 index 000000000..842c97165 --- /dev/null +++ b/ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt \ No newline at end of file diff --git a/ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem b/ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem new file mode 120000 index 000000000..864558ea8 --- /dev/null +++ b/ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt \ No newline at end of file diff --git a/ssl/certs/E-Tugra_Certification_Authority.pem b/ssl/certs/E-Tugra_Certification_Authority.pem deleted file mode 120000 index 5f0b7a3d7..000000000 --- a/ssl/certs/E-Tugra_Certification_Authority.pem +++ /dev/null @@ -1 +0,0 @@ -/usr/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt \ No newline at end of file diff --git a/ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem b/ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem deleted file mode 120000 index 43847970e..000000000 --- a/ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem +++ /dev/null @@ -1 +0,0 @@ -/usr/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_ECC_v3.crt \ No newline at end of file diff --git a/ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem b/ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem deleted file mode 120000 index df1fb7571..000000000 --- a/ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem +++ /dev/null @@ -1 +0,0 @@ -/usr/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_RSA_v3.crt \ No newline at end of file diff --git a/ssl/certs/Hongkong_Post_Root_CA_1.pem b/ssl/certs/Hongkong_Post_Root_CA_1.pem deleted file mode 120000 index 5439896ad..000000000 --- a/ssl/certs/Hongkong_Post_Root_CA_1.pem +++ /dev/null @@ -1 +0,0 @@ -/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt \ No newline at end of file diff --git a/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem b/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem new file mode 120000 index 000000000..6ecd11a97 --- /dev/null +++ b/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt \ No newline at end of file diff --git a/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem b/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem new file mode 120000 index 000000000..b9e56460c --- /dev/null +++ b/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt \ No newline at end of file diff --git a/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem b/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem new file mode 120000 index 000000000..84e0c6931 --- /dev/null +++ b/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt \ No newline at end of file diff --git a/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem b/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem new file mode 120000 index 000000000..c4c427f92 --- /dev/null +++ b/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt \ No newline at end of file diff --git a/ssl/certs/TrustAsia_Global_Root_CA_G3.pem b/ssl/certs/TrustAsia_Global_Root_CA_G3.pem new file mode 120000 index 000000000..5b769b338 --- /dev/null +++ b/ssl/certs/TrustAsia_Global_Root_CA_G3.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt \ No newline at end of file diff --git a/ssl/certs/TrustAsia_Global_Root_CA_G4.pem b/ssl/certs/TrustAsia_Global_Root_CA_G4.pem new file mode 120000 index 000000000..6b933c49f --- /dev/null +++ b/ssl/certs/TrustAsia_Global_Root_CA_G4.pem @@ -0,0 +1 @@ +/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt \ No newline at end of file diff --git a/ssl/certs/a89d74c2.0 b/ssl/certs/a89d74c2.0 new file mode 120000 index 000000000..0e5e1da3a --- /dev/null +++ b/ssl/certs/a89d74c2.0 @@ -0,0 +1 @@ +SSL.com_TLS_RSA_Root_CA_2022.pem \ No newline at end of file diff --git a/ssl/certs/ca-certificates.crt b/ssl/certs/ca-certificates.crt index 8053c20a4..91456eb70 100644 --- a/ssl/certs/ca-certificates.crt +++ b/ssl/certs/ca-certificates.crt @@ -289,10 +289,10 @@ lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UE +MIIGFDCCA/ygAwIBAgIIG3Dp0v+ubHEwDQYJKoZIhvcNAQELBQAwUTELMAkGA1UE BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h -cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEy -MzEwODM4MTVaMFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUg +cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0xNDA5MjMxNTIyMDdaFw0zNjA1 +MDUxNTIyMDdaMFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUg Q2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjgwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDDUtd9 thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQM @@ -305,23 +305,23 @@ Z/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirja EbsXLZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/T KI8xWVvTyQKmtFLKbpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF 6NkBiDkal4ZkQdU7hwxu+g/GvUgUvzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVh -OSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYD -VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRlzeurNR4APn7VdMActHNHDhpkLzCBpgYD -VR0gBIGeMIGbMIGYBgRVHSAAMIGPMC8GCCsGAQUFBwIBFiNodHRwOi8vd3d3LmZp -cm1hcHJvZmVzaW9uYWwuY29tL2NwczBcBggrBgEFBQcCAjBQHk4AUABhAHMAZQBv -ACAAZABlACAAbABhACAAQgBvAG4AYQBuAG8AdgBhACAANAA3ACAAQgBhAHIAYwBl -AGwAbwBuAGEAIAAwADgAMAAxADcwDQYJKoZIhvcNAQEFBQADggIBABd9oPm03cXF -661LJLWhAqvdpYhKsg9VSytXjDvlMd3+xDLx51tkljYyGOylMnfX40S2wBEqgLk9 -am58m9Ot/MPWo+ZkKXzR4Tgegiv/J2Wv+xYVxC5xhOW1//qkR71kMrv2JYSiJ0L1 -ILDCExARzRAVukKQKtJE4ZYm6zFIEv0q2skGz3QeqUvVhyj5eTSSPi5E6PaPT481 -PyWzOdxjKpBrIF/EUhJOlywqrJ2X3kjyo2bbwtKDlaZmp54lD+kLM5FlClrD2VQS -3a/DTg4fJl4N3LON7NWBcN7STyQF82xO9UxJZo3R/9ILJUFI/lGExkKvgATP0H5k -SeTy36LssUzAKh3ntLFlosS88Zj0qnAHY7S42jtM+kAiMFsRpvAFDsYCA0irhpuF -3dvd6qJ2gHN99ZwExEWN57kci57q13XRcrHedUTnQn3iV2t93Jm8PYMo6oCTjcVM -ZcFwgbg4/EMxsvYDNEeyrPsiBsse3RdHHF9mudMaotoRsaS8I8nkvof/uZS2+F0g -StRf571oe2XyFR7SOqkt6dhrJKyXWERHrVkY8SFlcN7ONGCoQPHzPKTDKCOM/icz -Q0CgFzzr6juwcqajuUpLXhZI9LK8yIySxZ2frHI2vDSANGupi5LAuBft7HZT9SQB -jLMi6Et8Vcad+qMUu2WFbm5PEn4KPJ2V +OSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMB0GA1UdDgQWBBRlzeurNR4APn7VdMAc +tHNHDhpkLzASBgNVHRMBAf8ECDAGAQH/AgEBMIGmBgNVHSAEgZ4wgZswgZgGBFUd +IAAwgY8wLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuZmlybWFwcm9mZXNpb25hbC5j +b20vY3BzMFwGCCsGAQUFBwICMFAeTgBQAGEAcwBlAG8AIABkAGUAIABsAGEAIABC +AG8AbgBhAG4AbwB2AGEAIAA0ADcAIABCAGEAcgBjAGUAbABvAG4AYQAgADAAOAAw +ADEANzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAHSHKAIrdx9m +iWTtj3QuRhy7qPj4Cx2Dtjqn6EWKB7fgPiDL4QjbEwj4KKE1soCzC1HA01aajTNF +Sa9J8OA9B3pFE1r/yJfY0xgsfZb43aJlQ3CTkBW6kN/oGbDbLIpgD7dvlAceHabJ +hfa9NPhAeGIQcDq+fUs5gakQ1JZBu/hfHAsdCPKxsIl68veg4MSPi3i1O1ilI45P +Vf42O+AMt8oqMEEgtIDNrvx2ZnOorm7hfNoD6JQg5iKj0B+QXSBTFCZX2lSX3xZE +EAEeiGaPcjiT3SC3NL7X8e5jjkd5KAb881lFJWAiMxujX6i6KtoaPc1A6ozuBRWV +1aUsIC+nmCjuRfzxuIgALI9C2lHVnOUTaHFFQ4ueCyE8S1wF3BqfmI7avSKecs2t +CsvMo2ebKHTEm9caPARYpoKdrcd7b/+Alun4jWq9GJAd/0kakFI3ky88Al2CdgtR +5xbHV/g4+afNmyJU72OwFW1TZQNKXkqgsqeOSQBZONXH9IBk9W6VULgRfhVwOEqw +f9DEMnDAGf/JOC0ULGb0QkTmVXYbgBVX/8Cnp6o5qtjTcNAuuuuUavpfNIbnYrX9 +ivAwhZTJryQCL2/W3Wf+47BVTwSYT6RBVuKT0Gro1vP7ZeDOdcQxWQzugsgMYDNK +GbqEZycPvEJdvSRUDewdcAZfpLz6IHxV -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ @@ -871,42 +871,6 @@ r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIGSzCCBDOgAwIBAgIIamg+nFGby1MwDQYJKoZIhvcNAQELBQAwgbIxCzAJBgNV -BAYTAlRSMQ8wDQYDVQQHDAZBbmthcmExQDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBC -aWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhpem1ldGxlcmkgQS7Fni4xJjAkBgNV -BAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBNZXJrZXppMSgwJgYDVQQDDB9FLVR1 -Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEzMDMwNTEyMDk0OFoXDTIz -MDMwMzEyMDk0OFowgbIxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHDAZBbmthcmExQDA+ -BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhp -em1ldGxlcmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBN -ZXJrZXppMSgwJgYDVQQDDB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 -MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4vU/kwVRHoViVF56C/UY -B4Oufq9899SKa6VjQzm5S/fDxmSJPZQuVIBSOTkHS0vdhQd2h8y/L5VMzH2nPbxH -D5hw+IyFHnSOkm0bQNGZDbt1bsipa5rAhDGvykPL6ys06I+XawGb1Q5KCKpbknSF -Q9OArqGIW66z6l7LFpp3RMih9lRozt6Plyu6W0ACDGQXwLWTzeHxE2bODHnv0ZEo -q1+gElIwcxmOj+GMB6LDu0rw6h8VqO4lzKRG+Bsi77MOQ7osJLjFLFzUHPhdZL3D -k14opz8n8Y4e0ypQBaNV2cvnOVPAmJ6MVGKLJrD3fY185MaeZkJVgkfnsliNZvcH -fC425lAcP9tDJMW/hkd5s3kc91r0E+xs+D/iWR+V7kI+ua2oMoVJl0b+SzGPWsut -dEcf6ZG33ygEIqDUD13ieU/qbIWGvaimzuT6w+Gzrt48Ue7LE3wBf4QOXVGUnhMM -ti6lTPk5cDZvlsouDERVxcr6XQKj39ZkjFqzAQqptQpHF//vkUAqjqFGOjGY5RH8 -zLtJVor8udBhmm9lbObDyz51Sf6Pp+KJxWfXnUYTTjF2OySznhFlhqt/7x3U+Lzn -rFpct1pHXFXOVbQicVtbC/DP3KBhZOqp12gKY6fgDT+gr9Oq0n7vUaDmUStVkhUX -U8u3Zg5mTPj5dUyQ5xJwx0UCAwEAAaNjMGEwHQYDVR0OBBYEFC7j27JJ0JxUeVz6 -Jyr+zE7S6E5UMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAULuPbsknQnFR5 -XPonKv7MTtLoTlQwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQAF -Nzr0TbdF4kV1JI+2d1LoHNgQk2Xz8lkGpD4eKexd0dCrfOAKkEh47U6YA5n+KGCR -HTAduGN8qOY1tfrTYXbm1gdLymmasoR6d5NFFxWfJNCYExL/u6Au/U5Mh/jOXKqY -GwXgAEZKgoClM4so3O0409/lPun++1ndYYRP0lSWE2ETPo+Aab6TR7U1Q9Jauz1c -77NCR807VRMGsAnb/WP2OogKmW9+4c4bU2pEZiNRCHu8W1Ki/QY3OEBhj0qWuJA3 -+GbHeJAAFS6LrVE1Uweoa2iu+U48BybNCAVwzDk/dr2l02cmAYamU9JgO3xDf1WK -vJUawSg5TB9D0pH0clmKuVb8P7Sd2nCcdlqMQ1DujjByTd//SffGqWfZbawCEeI6 -FiWnWAjLb1NBnEg4R2gz0dfHj9R0IdTDBZB6/86WiLEVKV0jq9BgoRJP3vQXzTLl -yb/IQ639Lo7xr+L0mPoSHyDYwKcMhcWQ9DstliaxLL5Mq+ux0orJ23gTDx4JnW2P -AJ8C2sH6H3p6CcRK5ogql5+Ji/03X186zjhZhkuvcQu02PJwT58yE+Owp1fl2tpD -y4Q08ijE6m30Ku/Ba3ba+367hTzSU8JNvnHhRdH9I2cNE3X7z2VnIp2usAnRCf8d -NL/+I5c30jn6PQ0GC7TbO6Orb1wdtn7os4I07QZcJA== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML RW50cnVzdC5uZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5 @@ -1201,26 +1165,6 @@ e7iG2rKPmT4dEw0SEe7Uq/DpFXYC5ODfqiAeW2GFZECpkJcNrVPSWh2HagCXZWK0 vm9qp/UsQu0yrbYhnr68 -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDMDCCAhigAwIBAgICA+gwDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCSEsx -FjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3Qg -Um9vdCBDQSAxMB4XDTAzMDUxNTA1MTMxNFoXDTIzMDUxNTA0NTIyOVowRzELMAkG -A1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdr -b25nIFBvc3QgUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEArP84tulmAknjorThkPlAj3n54r15/gK97iSSHSL22oVyaf7XPwnU3ZG1ApzQ -jVrhVcNQhrkpJsLj2aDxaQMoIIBFIi1WpztUlVYiWR8o3x8gPW2iNr4joLFutbEn -PzlTCeqrauh0ssJlXI6/fMN4hM2eFvz1Lk8gKgifd/PFHsSaUmYeSF7jEAaPIpjh -ZY4bXSNmO7ilMlHIhqqhqZ5/dpTCpmy3QfDVyAY45tQM4vM7TG1QjMSDJ8EThFk9 -nnV0ttgCXjqQesBCNnLsak3c78QA3xMYV18meMjWCnl3v/evt3a5pQuEF10Q6m/h -q5URX208o1xNg1vysxmKgIsLhwIDAQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgED -MA4GA1UdDwEB/wQEAwIBxjANBgkqhkiG9w0BAQUFAAOCAQEADkbVPK7ih9legYsC -mEEIjEy82tvuJxuC52pF7BaLT4Wg87JwvVqWuspube5Gi27nKi6Wsxkz67SfqLI3 -7piol7Yutmcn1KZJ/RyTZXaeQi/cImyaT/JaFTmxcdcrUehtHJjA2Sr0oYJ71clB -oiMBdDhViw+5LmeiIAQ32pwL0xch4I+XeTRvhEgCIDMb5jREn5Fw9IBehEPCKdJs -EhTkYY2sEJCehFC78JZvRZ+K88psT/oROhUVRsPNH4NbLUES7VBnQRM9IauUiqpO -fMGx+6fWtScvl6tu4B3i0RwsH0Ti/L6RoZz71ilTc4afU9hDDl3WY4JxHYB0yvbi -AmvZWg== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4 @@ -2970,41 +2914,6 @@ aFvowdlxfv1k7/9nR4hYJS8+hge9+6jlgqispdNpQ80xiEmEU5LAsTkbOYMBMMTy qfrQA71yN2BWHzZ8vTmR9W0Nv3vXkg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIGFDCCA/ygAwIBAgIIG3Dp0v+ubHEwDQYJKoZIhvcNAQELBQAwUTELMAkGA1UE -BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h -cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0xNDA5MjMxNTIyMDdaFw0zNjA1 -MDUxNTIyMDdaMFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUg -Q2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjgwggIi -MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDDUtd9 -thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQM -cas9UX4PB99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefG -L9ItWY16Ck6WaVICqjaY7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15i -NA9wBj4gGFrO93IbJWyTdBSTo3OxDqqHECNZXyAFGUftaI6SEspd/NYrspI8IM/h -X68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyIplD9amML9ZMWGxmPsu2b -m8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctXMbScyJCy -Z/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirja -EbsXLZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/T -KI8xWVvTyQKmtFLKbpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF -6NkBiDkal4ZkQdU7hwxu+g/GvUgUvzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVh -OSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMB0GA1UdDgQWBBRlzeurNR4APn7VdMAc -tHNHDhpkLzASBgNVHRMBAf8ECDAGAQH/AgEBMIGmBgNVHSAEgZ4wgZswgZgGBFUd -IAAwgY8wLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuZmlybWFwcm9mZXNpb25hbC5j -b20vY3BzMFwGCCsGAQUFBwICMFAeTgBQAGEAcwBlAG8AIABkAGUAIABsAGEAIABC -AG8AbgBhAG4AbwB2AGEAIAA0ADcAIABCAGEAcgBjAGUAbABvAG4AYQAgADAAOAAw -ADEANzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAHSHKAIrdx9m -iWTtj3QuRhy7qPj4Cx2Dtjqn6EWKB7fgPiDL4QjbEwj4KKE1soCzC1HA01aajTNF -Sa9J8OA9B3pFE1r/yJfY0xgsfZb43aJlQ3CTkBW6kN/oGbDbLIpgD7dvlAceHabJ -hfa9NPhAeGIQcDq+fUs5gakQ1JZBu/hfHAsdCPKxsIl68veg4MSPi3i1O1ilI45P -Vf42O+AMt8oqMEEgtIDNrvx2ZnOorm7hfNoD6JQg5iKj0B+QXSBTFCZX2lSX3xZE -EAEeiGaPcjiT3SC3NL7X8e5jjkd5KAb881lFJWAiMxujX6i6KtoaPc1A6ozuBRWV -1aUsIC+nmCjuRfzxuIgALI9C2lHVnOUTaHFFQ4ueCyE8S1wF3BqfmI7avSKecs2t -CsvMo2ebKHTEm9caPARYpoKdrcd7b/+Alun4jWq9GJAd/0kakFI3ky88Al2CdgtR -5xbHV/g4+afNmyJU72OwFW1TZQNKXkqgsqeOSQBZONXH9IBk9W6VULgRfhVwOEqw -f9DEMnDAGf/JOC0ULGb0QkTmVXYbgBVX/8Cnp6o5qtjTcNAuuuuUavpfNIbnYrX9 -ivAwhZTJryQCL2/W3Wf+47BVTwSYT6RBVuKT0Gro1vP7ZeDOdcQxWQzugsgMYDNK -GbqEZycPvEJdvSRUDewdcAZfpLz6IHxV ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIB9zCCAX2gAwIBAgIQBiUzsUcDMydc+Y2aub/M+DAKBggqhkjOPQQDAzA9MQsw CQYDVQQGEwJVUzESMBAGA1UEChMJQ2VydGFpbmx5MRowGAYDVQQDExFDZXJ0YWlu bHkgUm9vdCBFMTAeFw0yMTA0MDEwMDAwMDBaFw00NjA0MDEwMDAwMDBaMD0xCzAJ @@ -3130,57 +3039,6 @@ y/m0sRtW9XLS/BnRAjEAkfcwkz8QRitxpNA7RJvAKQIFskF3UfN5Wp6OFKBOQtJb gfM0agPnIjhQW+0ZT0MW -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIICpTCCAiqgAwIBAgIUJkYZdzHhT28oNt45UYbm1JeIIsEwCgYIKoZIzj0EAwMw -gYAxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHEwZBbmthcmExGTAXBgNVBAoTEEUtVHVn -cmEgRUJHIEEuUy4xHTAbBgNVBAsTFEUtVHVncmEgVHJ1c3QgQ2VudGVyMSYwJAYD -VQQDEx1FLVR1Z3JhIEdsb2JhbCBSb290IENBIEVDQyB2MzAeFw0yMDAzMTgwOTQ2 -NThaFw00NTAzMTIwOTQ2NThaMIGAMQswCQYDVQQGEwJUUjEPMA0GA1UEBxMGQW5r -YXJhMRkwFwYDVQQKExBFLVR1Z3JhIEVCRyBBLlMuMR0wGwYDVQQLExRFLVR1Z3Jh -IFRydXN0IENlbnRlcjEmMCQGA1UEAxMdRS1UdWdyYSBHbG9iYWwgUm9vdCBDQSBF -Q0MgdjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASOmCm/xxAeJ9urA8woLNheSBkQ -KczLWYHMjLiSF4mDKpL2w6QdTGLVn9agRtwcvHbB40fQWxPa56WzZkjnIZpKT4YK -fWzqTTKACrJ6CZtpS5iB4i7sAnCWH/31Rs7K3IKjYzBhMA8GA1UdEwEB/wQFMAMB -Af8wHwYDVR0jBBgwFoAU/4Ixcj75xGZsrTie0bBRiKWQzPUwHQYDVR0OBBYEFP+C -MXI++cRmbK04ntGwUYilkMz1MA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNp -ADBmAjEA5gVYaWHlLcoNy/EZCL3W/VGSGn5jVASQkZo1kTmZ+gepZpO6yGjUij/6 -7W4WAie3AjEA3VoXK3YdZUKWpqxdinlW2Iob35reX8dQj7FbcQwm32pAAOwzkSFx -vmjkI6TZraE3 ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIF8zCCA9ugAwIBAgIUDU3FzRYilZYIfrgLfxUGNPt5EDQwDQYJKoZIhvcNAQEL -BQAwgYAxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHEwZBbmthcmExGTAXBgNVBAoTEEUt -VHVncmEgRUJHIEEuUy4xHTAbBgNVBAsTFEUtVHVncmEgVHJ1c3QgQ2VudGVyMSYw -JAYDVQQDEx1FLVR1Z3JhIEdsb2JhbCBSb290IENBIFJTQSB2MzAeFw0yMDAzMTgw -OTA3MTdaFw00NTAzMTIwOTA3MTdaMIGAMQswCQYDVQQGEwJUUjEPMA0GA1UEBxMG -QW5rYXJhMRkwFwYDVQQKExBFLVR1Z3JhIEVCRyBBLlMuMR0wGwYDVQQLExRFLVR1 -Z3JhIFRydXN0IENlbnRlcjEmMCQGA1UEAxMdRS1UdWdyYSBHbG9iYWwgUm9vdCBD -QSBSU0EgdjMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCiZvCJt3J7 -7gnJY9LTQ91ew6aEOErxjYG7FL1H6EAX8z3DeEVypi6Q3po61CBxyryfHUuXCscx -uj7X/iWpKo429NEvx7epXTPcMHD4QGxLsqYxYdE0PD0xesevxKenhOGXpOhL9hd8 -7jwH7eKKV9y2+/hDJVDqJ4GohryPUkqWOmAalrv9c/SF/YP9f4RtNGx/ardLAQO/ -rWm31zLZ9Vdq6YaCPqVmMbMWPcLzJmAy01IesGykNz709a/r4d+ABs8qQedmCeFL -l+d3vSFtKbZnwy1+7dZ5ZdHPOrbRsV5WYVB6Ws5OUDGAA5hH5+QYfERaxqSzO8bG -wzrwbMOLyKSRBfP12baqBqG3q+Sx6iEUXIOk/P+2UNOMEiaZdnDpwA+mdPy70Bt4 -znKS4iicvObpCdg604nmvi533wEKb5b25Y08TVJ2Glbhc34XrD2tbKNSEhhw5oBO -M/J+JjKsBY04pOZ2PJ8QaQ5tndLBeSBrW88zjdGUdjXnXVXHt6woq0bM5zshtQoK -5EpZ3IE1S0SVEgpnpaH/WwAH0sDM+T/8nzPyAPiMbIedBi3x7+PmBvrFZhNb/FAH -nnGGstpvdDDPk1Po3CLW3iAfYY2jLqN4MpBs3KwytQXk9TwzDdbgh3cXTJ2w2Amo -DVf3RIXwyAS+XF1a4xeOVGNpf0l0ZAWMowIDAQABo2MwYTAPBgNVHRMBAf8EBTAD -AQH/MB8GA1UdIwQYMBaAFLK0ruYt9ybVqnUtdkvAG1Mh0EjvMB0GA1UdDgQWBBSy -tK7mLfcm1ap1LXZLwBtTIdBI7zAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEL -BQADggIBAImocn+M684uGMQQgC0QDP/7FM0E4BQ8Tpr7nym/Ip5XuYJzEmMmtcyQ -6dIqKe6cLcwsmb5FJ+Sxce3kOJUxQfJ9emN438o2Fi+CiJ+8EUdPdk3ILY7r3y18 -Tjvarvbj2l0Upq7ohUSdBm6O++96SmotKygY/r+QLHUWnw/qln0F7psTpURs+APQ -3SPh/QMSEgj0GDSz4DcLdxEBSL9htLX4GdnLTeqjjO/98Aa1bZL0SmFQhO3sSdPk -vmjmLuMxC1QLGpLWgti2omU8ZgT5Vdps+9u1FGZNlIM7zR6mK7L+d0CGq+ffCsn9 -9t2HVhjYsCxVYJb6CH5SkPVLpi6HfMsg2wY+oF0Dd32iPBMbKaITVaA9FCKvb7jQ -mhty3QUBjYZgv6Rn7rWlDdF/5horYmbDB7rnoEgcOMPpRfunf/ztAmgayncSd6YA -VSgU7NbHEqIbZULpkejLPoeJVF3Zr52XnGnnCv8PWniLYypMfUeUP95L6VPQMPHF -9p5J3zugkaOj/s1YzOrfr28oO6Bpm4/srK4rVJ2bBLFHIK+WEj5jlB0E5y67hscM -moi/dkfv97ALl2bSRM9gUgfh1SxKOidhd8rXj+eHDjD/DLsE4mHDosiXYY60MGo8 -bcIHX0pzLz/5FooBZu+6kcpSV3uu1OYP3Qt6f4ueJiDPO++BcYNZ ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQsw CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh cmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9v @@ -3429,3 +3287,324 @@ UvupLnKWnyfjqnN9+BojZns7q2WwMgFLFT49ok8MKzWixtlnEjUwzXYuFrOZnk1P Ti07NEPhmg4NpGaXutIcSkwsKouLgU9xGqndXHt7CMUADTdA43x7VF8vhV929ven sBxXVsFy6K2ir40zSbofitzmdHxghm+Hl3s= -----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICFTCCAZugAwIBAgIQPZg7pmY9kGP3fiZXOATvADAKBggqhkjOPQQDAzBMMS4w +LAYDVQQDDCVBdG9zIFRydXN0ZWRSb290IFJvb3QgQ0EgRUNDIFRMUyAyMDIxMQ0w +CwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0yMTA0MjIwOTI2MjNaFw00MTA0 +MTcwOTI2MjJaMEwxLjAsBgNVBAMMJUF0b3MgVHJ1c3RlZFJvb3QgUm9vdCBDQSBF +Q0MgVExTIDIwMjExDTALBgNVBAoMBEF0b3MxCzAJBgNVBAYTAkRFMHYwEAYHKoZI +zj0CAQYFK4EEACIDYgAEloZYKDcKZ9Cg3iQZGeHkBQcfl+3oZIK59sRxUM6KDP/X +tXa7oWyTbIOiaG6l2b4siJVBzV3dscqDY4PMwL502eCdpO5KTlbgmClBk1IQ1SQ4 +AjJn8ZQSb+/Xxd4u/RmAo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2 +KCXWfeBmmnoJsmo7jjPXNtNPojAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwMD +aAAwZQIwW5kp85wxtolrbNa9d+F851F+uDrNozZffPc8dz7kUK2o59JZDCaOMDtu +CCrCp1rIAjEAmeMM56PDr9NJLkaCI2ZdyQAUEv049OGYa3cpetskz2VAv9LcjBHo +9H1/IISpQuQo +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFZDCCA0ygAwIBAgIQU9XP5hmTC/srBRLYwiqipDANBgkqhkiG9w0BAQwFADBM +MS4wLAYDVQQDDCVBdG9zIFRydXN0ZWRSb290IFJvb3QgQ0EgUlNBIFRMUyAyMDIx +MQ0wCwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0yMTA0MjIwOTIxMTBaFw00 +MTA0MTcwOTIxMDlaMEwxLjAsBgNVBAMMJUF0b3MgVHJ1c3RlZFJvb3QgUm9vdCBD +QSBSU0EgVExTIDIwMjExDTALBgNVBAoMBEF0b3MxCzAJBgNVBAYTAkRFMIICIjAN +BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtoAOxHm9BYx9sKOdTSJNy/BBl01Z +4NH+VoyX8te9j2y3I49f1cTYQcvyAh5x5en2XssIKl4w8i1mx4QbZFc4nXUtVsYv +Ye+W/CBGvevUez8/fEc4BKkbqlLfEzfTFRVOvV98r61jx3ncCHvVoOX3W3WsgFWZ +kmGbzSoXfduP9LVq6hdKZChmFSlsAvFr1bqjM9xaZ6cF4r9lthawEO3NUDPJcFDs +GY6wx/J0W2tExn2WuZgIWWbeKQGb9Cpt0xU6kGpn8bRrZtkh68rZYnxGEFzedUln +nkL5/nWpo63/dgpnQOPF943HhZpZnmKaau1Fh5hnstVKPNe0OwANwI8f4UDErmwh +3El+fsqyjW22v5MvoVw+j8rtgI5Y4dtXz4U2OLJxpAmMkokIiEjxQGMYsluMWuPD +0xeqqxmjLBvk1cbiZnrXghmmOxYsL3GHX0WelXOTwkKBIROW1527k2gV+p2kHYzy +geBYBr3JtuP2iV2J+axEoctr+hbxx1A9JNr3w+SH1VbxT5Aw+kUJWdo0zuATHAR8 +ANSbhqRAvNncTFd+rrcztl524WWLZt+NyteYr842mIycg5kDcPOvdO3GDjbnvezB +c6eUWsuSZIKmAMFwoW4sKeFYV+xafJlrJaSQOoD0IJ2azsct+bJLKZWD6TWNp0lI +pw9MGZHQ9b8Q4HECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU +dEmZ0f+0emhFdcN+tNzMzjkz2ggwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEB +DAUAA4ICAQAjQ1MkYlxt/T7Cz1UAbMVWiLkO3TriJQ2VSpfKgInuKs1l+NsW4AmS +4BjHeJi78+xCUvuppILXTdiK/ORO/auQxDh1MoSf/7OwKwIzNsAQkG8dnK/haZPs +o0UvFJ/1TCplQ3IM98P4lYsU84UgYt1UU90s3BiVaU+DR3BAM1h3Egyi61IxHkzJ +qM7F78PRreBrAwA0JrRUITWXAdxfG/F851X6LWh3e9NpzNMOa7pNdkTWwhWaJuyw +xfW70Xp0wmzNxbVe9kzmWy2B27O3Opee7c9GslA9hGCZcbUztVdF5kJHdWoOsAgM +rr3e97sPWD2PAzHoPYJQyi9eDF20l74gNAf0xBLh7tew2VktafcxBPTy+av5EzH4 +AXcOPUIjJsyacmdRIXrMPIWo6iFqO9taPKU0nprALN+AnCng33eU0aKAQv9qTFsR +0PXNor6uzFFcw9VUewyu1rkGd4Di7wcaaMxZUa1+XGdrudviB0JbuAEFWDlN5LuY +o7Ey7Nmj1m+UI/87tyll5gfp77YZ6ufCOB0yiJA8EytuzO+rdwY0d4RPcuSBhPm5 +dDTedk+SKlOxJTnbPP/lPqYO5Wue/9vsL3SD3460s6neFE3/MaNFcyT6lSnMEpcE +oji2jbDwN/zIIX8/syQbPYtuzE2wFg2WHYMfRsCbvUOZ58SWLs5fyQ== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFdDCCA1ygAwIBAgIQVW9l47TZkGobCdFsPsBsIDANBgkqhkiG9w0BAQsFADBU +MQswCQYDVQQGEwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRI +T1JJVFkxHTAbBgNVBAMMFEJKQ0EgR2xvYmFsIFJvb3QgQ0ExMB4XDTE5MTIxOTAz +MTYxN1oXDTQ0MTIxMjAzMTYxN1owVDELMAkGA1UEBhMCQ04xJjAkBgNVBAoMHUJF +SUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZMR0wGwYDVQQDDBRCSkNBIEdsb2Jh +bCBSb290IENBMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPFmCL3Z +xRVhy4QEQaVpN3cdwbB7+sN3SJATcmTRuHyQNZ0YeYjjlwE8R4HyDqKYDZ4/N+AZ +spDyRhySsTphzvq3Rp4Dhtczbu33RYx2N95ulpH3134rhxfVizXuhJFyV9xgw8O5 +58dnJCNPYwpj9mZ9S1WnP3hkSWkSl+BMDdMJoDIwOvqfwPKcxRIqLhy1BDPapDgR +at7GGPZHOiJBhyL8xIkoVNiMpTAK+BcWyqw3/XmnkRd4OJmtWO2y3syJfQOcs4ll +5+M7sSKGjwZteAf9kRJ/sGsciQ35uMt0WwfCyPQ10WRjeulumijWML3mG90Vr4Tq +nMfK9Q7q8l0ph49pczm+LiRvRSGsxdRpJQaDrXpIhRMsDQa4bHlW/KNnMoH1V6XK +V0Jp6VwkYe/iMBhORJhVb3rCk9gZtt58R4oRTklH2yiUAguUSiz5EtBP6DF+bHq/ +pj+bOT0CFqMYs2esWz8sgytnOYFcuX6U1WTdno9uruh8W7TXakdI136z1C2OVnZO +z2nxbkRs1CTqjSShGL+9V/6pmTW12xB3uD1IutbB5/EjPtffhZ0nPNRAvQoMvfXn +jSXWgXSHRtQpdaJCbPdzied9v3pKH9MiyRVVz99vfFXQpIsHETdfg6YmV6YBW37+ +WGgHqel62bno/1Afq8K0wM7o6v0PvY1NuLxxAgMBAAGjQjBAMB0GA1UdDgQWBBTF +7+3M2I0hxkjk49cULqcWk+WYATAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE +AwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAUoKsITQfI/Ki2Pm4rzc2IInRNwPWaZ+4 +YRC6ojGYWUfo0Q0lHhVBDOAqVdVXUsv45Mdpox1NcQJeXyFFYEhcCY5JEMEE3Kli +awLwQ8hOnThJdMkycFRtwUf8jrQ2ntScvd0g1lPJGKm1Vrl2i5VnZu69mP6u775u ++2D2/VnGKhs/I0qUJDAnyIm860Qkmss9vk/Ves6OF8tiwdneHg56/0OGNFK8YT88 +X7vZdrRTvJez/opMEi4r89fO4aL/3Xtw+zuhTaRjAv04l5U/BXCga99igUOLtFkN +SoxUnMW7gZ/NfaXvCyUeOiDbHPwfmGcCCtRzRBPbUYQaVQNW4AB+dAb/OMRyHdOo +P2gxXdMJxy6MW2Pg6Nwe0uxhHvLe5e/2mXZgLR6UcnHGCyoyx5JO1UbXHfmpGQrI ++pXObSOYqgs4rZpWDW+N8TEAiMEXnM0ZNjX+VVOg4DwzX5Ze4jLp3zO7Bkqp2IRz +znfSxqxx4VyjHQy7Ct9f4qNx2No3WqB4K/TUfet27fJhcKVlmtOJNBir+3I+17Q9 +eVzYH6Eze9mCUAyTF6ps3MKCuwJXNq+YJyo5UOGwifUll35HaBC07HPKs5fRJNz2 +YqAo07WjuGS3iGJCz51TzZm+ZGiPTx4SSPfSKcOYKMryMguTjClPPGAyzQWWYezy +r/6zcCwupvI= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICJTCCAaugAwIBAgIQLBcIfWQqwP6FGFkGz7RK6zAKBggqhkjOPQQDAzBUMQsw +CQYDVQQGEwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJ +VFkxHTAbBgNVBAMMFEJKQ0EgR2xvYmFsIFJvb3QgQ0EyMB4XDTE5MTIxOTAzMTgy +MVoXDTQ0MTIxMjAzMTgyMVowVDELMAkGA1UEBhMCQ04xJjAkBgNVBAoMHUJFSUpJ +TkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZMR0wGwYDVQQDDBRCSkNBIEdsb2JhbCBS +b290IENBMjB2MBAGByqGSM49AgEGBSuBBAAiA2IABJ3LgJGNU2e1uVCxA/jlSR9B +IgmwUVJY1is0j8USRhTFiy8shP8sbqjV8QnjAyEUxEM9fMEsxEtqSs3ph+B99iK+ ++kpRuDCK/eHeGBIK9ke35xe/J4rUQUyWPGCWwf0VHKNCMEAwHQYDVR0OBBYEFNJK +sVF/BvDRgh9Obl+rg/xI1LCRMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD +AgEGMAoGCCqGSM49BAMDA2gAMGUCMBq8W9f+qdJUDkpd0m2xQNz0Q9XSSpkZElaA +94M04TVOSG0ED1cxMDAtsaqdAzjbBgIxAMvMh1PLet8gUXOQwKhbYdDFUDn9hf7B +43j4ptZLvZuHjw/l1lOWqzzIQNph91Oj9w== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICHTCCAaOgAwIBAgIUQ3CCd89NXTTxyq4yLzf39H91oJ4wCgYIKoZIzj0EAwMw +TjELMAkGA1UEBhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwiQ29t +bVNjb3BlIFB1YmxpYyBUcnVzdCBFQ0MgUm9vdC0wMTAeFw0yMTA0MjgxNzM1NDNa +Fw00NjA0MjgxNzM1NDJaME4xCzAJBgNVBAYTAlVTMRIwEAYDVQQKDAlDb21tU2Nv +cGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1c3QgRUNDIFJvb3QtMDEw +djAQBgcqhkjOPQIBBgUrgQQAIgNiAARLNumuV16ocNfQj3Rid8NeeqrltqLxeP0C +flfdkXmcbLlSiFS8LwS+uM32ENEp7LXQoMPwiXAZu1FlxUOcw5tjnSCDPgYLpkJE +hRGnSjot6dZoL0hOUysHP029uax3OVejQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYD +VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSOB2LAUN3GGQYARnQE9/OufXVNMDAKBggq +hkjOPQQDAwNoADBlAjEAnDPfQeMjqEI2Jpc1XHvr20v4qotzVRVcrHgpD7oh2MSg +2NED3W3ROT3Ek2DS43KyAjB8xX6I01D1HiXo+k515liWpDVfG2XqYZpwI7UNo5uS +Um9poIyNStDuiw7LR47QjRE= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICHDCCAaOgAwIBAgIUKP2ZYEFHpgE6yhR7H+/5aAiDXX0wCgYIKoZIzj0EAwMw +TjELMAkGA1UEBhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwiQ29t +bVNjb3BlIFB1YmxpYyBUcnVzdCBFQ0MgUm9vdC0wMjAeFw0yMTA0MjgxNzQ0NTRa +Fw00NjA0MjgxNzQ0NTNaME4xCzAJBgNVBAYTAlVTMRIwEAYDVQQKDAlDb21tU2Nv +cGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1c3QgRUNDIFJvb3QtMDIw +djAQBgcqhkjOPQIBBgUrgQQAIgNiAAR4MIHoYx7l63FRD/cHB8o5mXxO1Q/MMDAL +j2aTPs+9xYa9+bG3tD60B8jzljHz7aRP+KNOjSkVWLjVb3/ubCK1sK9IRQq9qEmU +v4RDsNuESgMjGWdqb8FuvAY5N9GIIvejQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYD +VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTmGHX/72DehKT1RsfeSlXjMjZ59TAKBggq +hkjOPQQDAwNnADBkAjAmc0l6tqvmSfR9Uj/UQQSugEODZXW5hYA4O9Zv5JOGq4/n +ich/m35rChJVYaoR4HkCMHfoMXGsPHED1oQmHhS48zs73u1Z/GtMMH9ZzkXpc2AV +mkzw5l4lIhVtwodZ0LKOag== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFbDCCA1SgAwIBAgIUPgNJgXUWdDGOTKvVxZAplsU5EN0wDQYJKoZIhvcNAQEL +BQAwTjELMAkGA1UEBhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwi +Q29tbVNjb3BlIFB1YmxpYyBUcnVzdCBSU0EgUm9vdC0wMTAeFw0yMTA0MjgxNjQ1 +NTRaFw00NjA0MjgxNjQ1NTNaME4xCzAJBgNVBAYTAlVTMRIwEAYDVQQKDAlDb21t +U2NvcGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1c3QgUlNBIFJvb3Qt +MDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCwSGWjDR1C45FtnYSk +YZYSwu3D2iM0GXb26v1VWvZVAVMP8syMl0+5UMuzAURWlv2bKOx7dAvnQmtVzslh +suitQDy6uUEKBU8bJoWPQ7VAtYXR1HHcg0Hz9kXHgKKEUJdGzqAMxGBWBB0HW0al +DrJLpA6lfO741GIDuZNqihS4cPgugkY4Iw50x2tBt9Apo52AsH53k2NC+zSDO3Oj +WiE260f6GBfZumbCk6SP/F2krfxQapWsvCQz0b2If4b19bJzKo98rwjyGpg/qYFl +P8GMicWWMJoKz/TUyDTtnS+8jTiGU+6Xn6myY5QXjQ/cZip8UlF1y5mO6D1cv547 +KI2DAg+pn3LiLCuz3GaXAEDQpFSOm117RTYm1nJD68/A6g3czhLmfTifBSeolz7p +UcZsBSjBAg/pGG3svZwG1KdJ9FQFa2ww8esD1eo9anbCyxooSU1/ZOD6K9pzg4H/ +kQO9lLvkuI6cMmPNn7togbGEW682v3fuHX/3SZtS7NJ3Wn2RnU3COS3kuoL4b/JO +Hg9O5j9ZpSPcPYeoKFgo0fEbNttPxP/hjFtyjMcmAyejOQoBqsCyMWCDIqFPEgkB +Ea801M/XrmLTBQe0MXXgDW1XT2mH+VepuhX2yFJtocucH+X8eKg1mp9BFM6ltM6U +CBwJrVbl2rZJmkrqYxhTnCwuwwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4G +A1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUN12mmnQywsL5x6YVEFm45P3luG0wDQYJ +KoZIhvcNAQELBQADggIBAK+nz97/4L1CjU3lIpbfaOp9TSp90K09FlxD533Ahuh6 +NWPxzIHIxgvoLlI1pKZJkGNRrDSsBTtXAOnTYtPZKdVUvhwQkZyybf5Z/Xn36lbQ +nmhUQo8mUuJM3y+Xpi/SB5io82BdS5pYV4jvguX6r2yBS5KPQJqTRlnLX3gWsWc+ +QgvfKNmwrZggvkN80V4aCRckjXtdlemrwWCrWxhkgPut4AZ9HcpZuPN4KWfGVh2v +trV0KnahP/t1MJ+UXjulYPPLXAziDslg+MkfFoom3ecnf+slpoq9uC02EJqxWE2a +aE9gVOX2RhOOiKy8IUISrcZKiX2bwdgt6ZYD9KJ0DLwAHb/WNyVntHKLr4W96ioD +j8z7PEQkguIBpQtZtjSNMgsSDesnwv1B10A8ckYpwIzqug/xBpMu95yo9GA+o/E4 +Xo4TwbM6l4c/ksp4qRyv0LAbJh6+cOx69TOY6lz/KwsETkPdY34Op054A5U+1C0w +lREQKC6/oAI+/15Z0wUOlV9TRe9rh9VIzRamloPh37MG88EU26fsHItdkJANclHn +YfkUyq+Dj7+vsQpZXdxc1+SWrVtgHdqul7I52Qb1dgAT+GhMIbA1xNxVssnBQVoc +icCMb3SgazNNtQEo/a2tiRc7ppqEvOuM6sRxJKi6KfkIsidWNTJf6jn7MZrVGczw +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFbDCCA1SgAwIBAgIUVBa/O345lXGN0aoApYYNK496BU4wDQYJKoZIhvcNAQEL +BQAwTjELMAkGA1UEBhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwi +Q29tbVNjb3BlIFB1YmxpYyBUcnVzdCBSU0EgUm9vdC0wMjAeFw0yMTA0MjgxNzE2 +NDNaFw00NjA0MjgxNzE2NDJaME4xCzAJBgNVBAYTAlVTMRIwEAYDVQQKDAlDb21t +U2NvcGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1c3QgUlNBIFJvb3Qt +MDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDh+g77aAASyE3VrCLE +NQE7xVTlWXZjpX/rwcRqmL0yjReA61260WI9JSMZNRTpf4mnG2I81lDnNJUDMrG0 +kyI9p+Kx7eZ7Ti6Hmw0zdQreqjXnfuU2mKKuJZ6VszKWpCtYHu8//mI0SFHRtI1C +rWDaSWqVcN3SAOLMV2MCe5bdSZdbkk6V0/nLKR8YSvgBKtJjCW4k6YnS5cciTNxz +hkcAqg2Ijq6FfUrpuzNPDlJwnZXjfG2WWy09X6GDRl224yW4fKcZgBzqZUPckXk2 +LHR88mcGyYnJ27/aaL8j7dxrrSiDeS/sOKUNNwFnJ5rpM9kzXzehxfCrPfp4sOcs +n/Y+n2Dg70jpkEUeBVF4GiwSLFworA2iI540jwXmojPOEXcT1A6kHkIfhs1w/tku +FT0du7jyU1fbzMZ0KZwYszZ1OC4PVKH4kh+Jlk+71O6d6Ts2QrUKOyrUZHk2EOH5 +kQMreyBUzQ0ZGshBMjTRsJnhkB4BQDa1t/qp5Xd1pCKBXbCL5CcSD1SIxtuFdOa3 +wNemKfrb3vOTlycEVS8KbzfFPROvCgCpLIscgSjX74Yxqa7ybrjKaixUR9gqiC6v +wQcQeKwRoi9C8DfF8rhW3Q5iLc4tVn5V8qdE9isy9COoR+jUKgF4z2rDN6ieZdIs +5fq6M8EGRPbmz6UNp2YINIos8wIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4G +A1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUR9DnsSL/nSz12Vdgs7GxcJXvYXowDQYJ +KoZIhvcNAQELBQADggIBAIZpsU0v6Z9PIpNojuQhmaPORVMbc0RTAIFhzTHjCLqB +KCh6krm2qMhDnscTJk3C2OVVnJJdUNjCK9v+5qiXz1I6JMNlZFxHMaNlNRPDk7n3 ++VGXu6TwYofF1gbTl4MgqX67tiHCpQ2EAOHyJxCDut0DgdXdaMNmEMjRdrSzbyme +APnCKfWxkxlSaRosTKCL4BWaMS/TiJVZbuXEs1DIFAhKm4sTg7GkcrI7djNB3Nyq +pgdvHSQSn8h2vS/ZjvQs7rfSOBAkNlEv41xdgSGn2rtO/+YHqP65DSdsu3BaVXoT +6fEqSWnHX4dXTEN5bTpl6TBcQe7rd6VzEojov32u5cSoHw2OHG1QAk8mGEPej1WF +sQs3BWDJVTkSBKEqz3EWnzZRSb9wO55nnPt7eck5HHisd5FUmrh1CoFSl+NmYWvt +PjgelmFV4ZFUjO2MJB+ByRCac5krFk5yAD9UG/iNuovnFNa2RU9g7Jauwy8CTl2d +lklyALKrdVwPaFsdZcJfMw8eD/A7hvWwTruc9+olBdytoptLFwG+Qt81IR2tq670 +v64fG9PiO/yzcnMcmyiQiRM9HcEARwmWmjgb3bHPDcK0RPOWlc4yOo80nOAXx17O +rg3bhzjlP1v9mxnhMUF6cKojawHhRUzNlM47ni3niAIi9G7oyOzWPPO5std3eqx7 +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICOjCCAcGgAwIBAgIQQvLM2htpN0RfFf51KBC49DAKBggqhkjOPQQDAzBfMQsw +CQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1T +ZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwHhcN +MjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1OTU5WjBfMQswCQYDVQQGEwJHQjEYMBYG +A1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBT +ZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQA +IgNiAAR2+pmpbiDt+dd34wc7qNs9Xzjoq1WmVk/WSOrsfy2qw7LFeeyZYX8QeccC +WvkEN/U0NSt3zn8gj1KjAIns1aeibVvjS5KToID1AZTc8GgHHs3u/iVStSBDHBv+ +6xnOQ6OjQjBAMB0GA1UdDgQWBBTRItpMWfFLXyY4qp3W7usNw/upYTAOBgNVHQ8B +Af8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNnADBkAjAn7qRa +qCG76UeXlImldCBteU/IvZNeWBj7LRoAasm4PdCkT0RHlAFWovgzJQxC36oCMB3q +4S6ILuH5px0CMk7yn2xVdOOurvulGu7t0vzCAxHrRVxgED1cf5kDW21USAGKcw== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFijCCA3KgAwIBAgIQdY39i658BwD6qSWn4cetFDANBgkqhkiG9w0BAQwFADBf +MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD +Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw +HhcNMjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1OTU5WjBfMQswCQYDVQQGEwJHQjEY +MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1Ymxp +YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB +AQUAA4ICDwAwggIKAoICAQCTvtU2UnXYASOgHEdCSe5jtrch/cSV1UgrJnwUUxDa +ef0rty2k1Cz66jLdScK5vQ9IPXtamFSvnl0xdE8H/FAh3aTPaE8bEmNtJZlMKpnz +SDBh+oF8HqcIStw+KxwfGExxqjWMrfhu6DtK2eWUAtaJhBOqbchPM8xQljeSM9xf +iOefVNlI8JhD1mb9nxc4Q8UBUQvX4yMPFF1bFOdLvt30yNoDN9HWOaEhUTCDsG3X +ME6WW5HwcCSrv0WBZEMNvSE6Lzzpng3LILVCJ8zab5vuZDCQOc2TZYEhMbUjUDM3 +IuM47fgxMMxF/mL50V0yeUKH32rMVhlATc6qu/m1dkmU8Sf4kaWD5QazYw6A3OAS +VYCmO2a0OYctyPDQ0RTp5A1NDvZdV3LFOxxHVp3i1fuBYYzMTYCQNFu31xR13NgE +SJ/AwSiItOkcyqex8Va3e0lMWeUgFaiEAin6OJRpmkkGj80feRQXEgyDet4fsZfu ++Zd4KKTIRJLpfSYFplhym3kT2BFfrsU4YjRosoYwjviQYZ4ybPUHNs2iTG7sijbt +8uaZFURww3y8nDnAtOFr94MlI1fZEoDlSfB1D++N6xybVCi0ITz8fAr/73trdf+L +HaAZBav6+CuBQug4urv7qv094PPK306Xlynt8xhW6aWWrL3DkJiy4Pmi1KZHQ3xt +zwIDAQABo0IwQDAdBgNVHQ4EFgQUVnNYZJX5khqwEioEYnmhQBWIIUkwDgYDVR0P +AQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAC9c +mTz8Bl6MlC5w6tIyMY208FHVvArzZJ8HXtXBc2hkeqK5Duj5XYUtqDdFqij0lgVQ +YKlJfp/imTYpE0RHap1VIDzYm/EDMrraQKFz6oOht0SmDpkBm+S8f74TlH7Kph52 +gDY9hAaLMyZlbcp+nv4fjFg4exqDsQ+8FxG75gbMY/qB8oFM2gsQa6H61SilzwZA +Fv97fRheORKkU55+MkIQpiGRqRxOF3yEvJ+M0ejf5lG5Nkc/kLnHvALcWxxPDkjB +JYOcCj+esQMzEhonrPcibCTRAUH4WAP+JWgiH5paPHxsnnVI84HxZmduTILA7rpX +DhjvLpr3Etiga+kFpaHpaPi8TD8SHkXoUsCjvxInebnMMTzD9joiFgOgyY9mpFui +TdaBJQbpdqQACj7LzTWb4OE4y2BThihCQRxEV+ioratF4yUQvNs+ZUH7G6aXD+u5 +dHn5HrwdVw1Hr8Mvn4dGp+smWg9WY7ViYG4A++MnESLn/pmPNPW56MORcr3Ywx65 +LvKRRFHQV80MNNVIIb/bE/FmJUNS0nAiNs2fxBx1IK1jcmMGDw4nztJqDby1ORrp +0XZ60Vzk50lJLVU3aPAaOpg+VBeHVOmmJ1CJeyAvP/+/oYtKR5j/K3tJPsMpRmAY +QqszKbrAKbkTidOIijlBO8n9pu0f9GBj39ItVQGL +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICOjCCAcCgAwIBAgIQFAP1q/s3ixdAW+JDsqXRxDAKBggqhkjOPQQDAzBOMQsw +CQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQDDBxT +U0wuY29tIFRMUyBFQ0MgUm9vdCBDQSAyMDIyMB4XDTIyMDgyNTE2MzM0OFoXDTQ2 +MDgxOTE2MzM0N1owTjELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD1NTTCBDb3Jwb3Jh +dGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgRUNDIFJvb3QgQ0EgMjAyMjB2MBAG +ByqGSM49AgEGBSuBBAAiA2IABEUpNXP6wrgjzhR9qLFNoFs27iosU8NgCTWyJGYm +acCzldZdkkAZDsalE3D07xJRKF3nzL35PIXBz5SQySvOkkJYWWf9lCcQZIxPBLFN +SeR7T5v15wj4A4j3p8OSSxlUgaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSME +GDAWgBSJjy+j6CugFFR781a4Jl9nOAuc0DAdBgNVHQ4EFgQUiY8vo+groBRUe/NW +uCZfZzgLnNAwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2gAMGUCMFXjIlbp +15IkWE8elDIPDAI2wv2sdDJO4fscgIijzPvX6yv/N33w7deedWo1dlJF4AIxAMeN +b0Igj762TVntd00pxCAgRWSGOlDGxK0tk/UYfXLtqc/ErFc2KAhl3zx5Zn6g6g== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFiTCCA3GgAwIBAgIQb77arXO9CEDii02+1PdbkTANBgkqhkiG9w0BAQsFADBO +MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQD +DBxTU0wuY29tIFRMUyBSU0EgUm9vdCBDQSAyMDIyMB4XDTIyMDgyNTE2MzQyMloX +DTQ2MDgxOTE2MzQyMVowTjELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD1NTTCBDb3Jw +b3JhdGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgUlNBIFJvb3QgQ0EgMjAyMjCC +AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANCkCXJPQIgSYT41I57u9nTP +L3tYPc48DRAokC+X94xI2KDYJbFMsBFMF3NQ0CJKY7uB0ylu1bUJPiYYf7ISf5OY +t6/wNr/y7hienDtSxUcZXXTzZGbVXcdotL8bHAajvI9AI7YexoS9UcQbOcGV0ins +S657Lb85/bRi3pZ7QcacoOAGcvvwB5cJOYF0r/c0WRFXCsJbwST0MXMwgsadugL3 +PnxEX4MN8/HdIGkWCVDi1FW24IBydm5MR7d1VVm0U3TZlMZBrViKMWYPHqIbKUBO +L9975hYsLfy/7PO0+r4Y9ptJ1O4Fbtk085zx7AGL0SDGD6C1vBdOSHtRwvzpXGk3 +R2azaPgVKPC506QVzFpPulJwoxJF3ca6TvvC0PeoUidtbnm1jPx7jMEWTO6Af77w +dr5BUxIzrlo4QqvXDz5BjXYHMtWrifZOZ9mxQnUjbvPNQrL8VfVThxc7wDNY8VLS ++YCk8OjwO4s4zKTGkH8PnP2L0aPP2oOnaclQNtVcBdIKQXTbYxE3waWglksejBYS +d66UNHsef8JmAOSqg+qKkK3ONkRN0VHpvB/zagX9wHQfJRlAUW7qglFA35u5CCoG +AtUjHBPW6dvbxrB6y3snm/vg1UYk7RBLY0ulBY+6uB0rpvqR4pJSvezrZ5dtmi2f +gTIFZzL7SAg/2SW4BCUvAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j +BBgwFoAU+y437uOEeicuzRk1sTN8/9REQrkwHQYDVR0OBBYEFPsuN+7jhHonLs0Z +NbEzfP/UREK5MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAjYlt +hEUY8U+zoO9opMAdrDC8Z2awms22qyIZZtM7QbUQnRC6cm4pJCAcAZli05bg4vsM +QtfhWsSWTVTNj8pDU/0quOr4ZcoBwq1gaAafORpR2eCNJvkLTqVTJXojpBzOCBvf +R4iyrT7gJ4eLSYwfqUdYe5byiB0YrrPRpgqU+tvT5TgKa3kSM/tKWTcWQA673vWJ +DPFs0/dRa1419dvAJuoSc06pkZCmF8NsLzjUo3KUQyxi4U5cMj29TH0ZR6LDSeeW +P4+a0zvkEdiLA9z2tmBVGKaBUfPhqBVq6+AL8BQx1rmMRTqoENjwuSfr98t67wVy +lrXEj5ZzxOhWc5y8aVFjvO9nHEMaX3cZHxj4HCUp+UmZKbaSPaKDN7EgkaibMOlq +bLQjk2UEqxHzDh1TJElTHaE/nUiSEeJ9DU/1172iWD54nR4fK/4huxoTtrEoZP2w +AgDHbICivRZQIA9ygV/MlP+7mea6kMvq+cYMwq7FGc4zoWtcu358NFcXrfA/rs3q +r5nsLFR+jM4uElZI7xc7P0peYNLcdDa8pUNjyw9bowJWCZ4kLOGGgYz+qxcs+sji +Mho6/4UIyYOf8kpIEFR3N+2ivEC+5BB09+Rbu7nzifmPQdjH5FCQNYA+HLhNkNPU +98OwoX6EyneSMSy4kLGCenROmxMmtNVQZlR4rmA= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFpTCCA42gAwIBAgIUZPYOZXdhaqs7tOqFhLuxibhxkw8wDQYJKoZIhvcNAQEM +BQAwWjELMAkGA1UEBhMCQ04xJTAjBgNVBAoMHFRydXN0QXNpYSBUZWNobm9sb2dp +ZXMsIEluYy4xJDAiBgNVBAMMG1RydXN0QXNpYSBHbG9iYWwgUm9vdCBDQSBHMzAe +Fw0yMTA1MjAwMjEwMTlaFw00NjA1MTkwMjEwMTlaMFoxCzAJBgNVBAYTAkNOMSUw +IwYDVQQKDBxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSQwIgYDVQQDDBtU +cnVzdEFzaWEgR2xvYmFsIFJvb3QgQ0EgRzMwggIiMA0GCSqGSIb3DQEBAQUAA4IC +DwAwggIKAoICAQDAMYJhkuSUGwoqZdC+BqmHO1ES6nBBruL7dOoKjbmzTNyPtxNS +T1QY4SxzlZHFZjtqz6xjbYdT8PfxObegQ2OwxANdV6nnRM7EoYNl9lA+sX4WuDqK +AtCWHwDNBSHvBm3dIZwZQ0WhxeiAysKtQGIXBsaqvPPW5vxQfmZCHzyLpnl5hkA1 +nyDvP+uLRx+PjsXUjrYsyUQE49RDdT/VP68czH5GX6zfZBCK70bwkPAPLfSIC7Ep +qq+FqklYqL9joDiR5rPmd2jE+SoZhLsO4fWvieylL1AgdB4SQXMeJNnKziyhWTXA +yB1GJ2Faj/lN03J5Zh6fFZAhLf3ti1ZwA0pJPn9pMRJpxx5cynoTi+jm9WAPzJMs +hH/x/Gr8m0ed262IPfN2dTPXS6TIi/n1Q1hPy8gDVI+lhXgEGvNz8teHHUGf59gX +zhqcD0r83ERoVGjiQTz+LISGNzzNPy+i2+f3VANfWdP3kXjHi3dqFuVJhZBFcnAv +kV34PmVACxmZySYgWmjBNb9Pp1Hx2BErW+Canig7CjoKH8GB5S7wprlppYiU5msT +f9FkPz2ccEblooV7WIQn3MSAPmeamseaMQ4w7OYXQJXZRe0Blqq/DPNL0WP3E1jA +uPP6Z92bfW1K/zJMtSU7/xxnD4UiWQWRkUF3gdCFTIcQcf+eQxuulXUtgQIDAQAB +o2MwYTAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFEDk5PIj7zjKsK5Xf/Ih +MBY027ySMB0GA1UdDgQWBBRA5OTyI+84yrCuV3/yITAWNNu8kjAOBgNVHQ8BAf8E +BAMCAQYwDQYJKoZIhvcNAQEMBQADggIBACY7UeFNOPMyGLS0XuFlXsSUT9SnYaP4 +wM8zAQLpw6o1D/GUE3d3NZ4tVlFEbuHGLige/9rsR82XRBf34EzC4Xx8MnpmyFq2 +XFNFV1pF1AWZLy4jVe5jaN/TG3inEpQGAHUNcoTpLrxaatXeL1nHo+zSh2bbt1S1 +JKv0Q3jbSwTEb93mPmY+KfJLaHEih6D4sTNjduMNhXJEIlU/HHzp/LgV6FL6qj6j +ITk1dImmasI5+njPtqzn59ZW/yOSLlALqbUHM/Q4X6RJpstlcHboCoWASzY9M/eV +VHUl2qzEc4Jl6VL1XP04lQJqaTDFHApXB64ipCz5xUG3uOyfT0gA+QEEVcys+TIx +xHWVBqB/0Y0n3bOppHKH/lmLmnp0Ft0WpWIp6zqW3IunaFnT63eROfjXy9mPX1on +AX1daBli2MjN9LdyR75bl87yraKZk62Uy5P2EgmVtqvXO9A/EcswFi55gORngS1d +7XB4tmBZrOFdRWOPyN9yaFvqHbgB8X7754qz41SgOAngPN5C8sLtLpvzHzW2Ntjj +gKGLzZlkD8Kqq7HK9W+eQ42EVJmzbsASZthwEPEGNTNDqJwuuhQxzhB/HIbjj9LV ++Hfsm6vxL2PZQl/gZ4FkkfGXL/xuJvYz+NO1+MRiqzFRJQJ6+N1rZdVtTTDIZbpo +FGWsJwt0ivKH +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIICVTCCAdygAwIBAgIUTyNkuI6XY57GU4HBdk7LKnQV1tcwCgYIKoZIzj0EAwMw +WjELMAkGA1UEBhMCQ04xJTAjBgNVBAoMHFRydXN0QXNpYSBUZWNobm9sb2dpZXMs +IEluYy4xJDAiBgNVBAMMG1RydXN0QXNpYSBHbG9iYWwgUm9vdCBDQSBHNDAeFw0y +MTA1MjAwMjEwMjJaFw00NjA1MTkwMjEwMjJaMFoxCzAJBgNVBAYTAkNOMSUwIwYD +VQQKDBxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSQwIgYDVQQDDBtUcnVz +dEFzaWEgR2xvYmFsIFJvb3QgQ0EgRzQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATx +s8045CVD5d4ZCbuBeaIVXxVjAd7Cq92zphtnS4CDr5nLrBfbK5bKfFJV4hrhPVbw +LxYI+hW8m7tH5j/uqOFMjPXTNvk4XatwmkcN4oFBButJ+bAp3TPsUKV/eSm4IJij +YzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUpbtKl86zK3+kMd6Xg1mD +pm9xy94wHQYDVR0OBBYEFKW7SpfOsyt/pDHel4NZg6ZvccveMA4GA1UdDwEB/wQE +AwIBBjAKBggqhkjOPQQDAwNnADBkAjBe8usGzEkxn0AAbbd+NvBNEU/zy4k6LHiR +UKNbwMp1JvK/kF0LgoxgKJ/GcJpo5PECMFxYDlZ2z1jD1xCMuo6u47xkdUfFVZDj +/bpV6wfEU6s3qe4hsiFbYI89MvHVI5TWWA== +-----END CERTIFICATE----- diff --git a/ssl/certs/da0cfd1d.0 b/ssl/certs/da0cfd1d.0 new file mode 120000 index 000000000..1776eb49e --- /dev/null +++ b/ssl/certs/da0cfd1d.0 @@ -0,0 +1 @@ +Sectigo_Public_Server_Authentication_Root_E46.pem \ No newline at end of file diff --git a/ssl/certs/fb717492.0 b/ssl/certs/fb717492.0 new file mode 120000 index 000000000..343b96fd8 --- /dev/null +++ b/ssl/certs/fb717492.0 @@ -0,0 +1 @@ +Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem \ No newline at end of file diff --git a/systemd/system/snap.certbot.renew.timer b/systemd/system/snap.certbot.renew.timer index 04320fa45..e30948152 100644 --- a/systemd/system/snap.certbot.renew.timer +++ b/systemd/system/snap.certbot.renew.timer @@ -7,8 +7,8 @@ X-Snappy=yes [Timer] Unit=snap.certbot.renew.service -OnCalendar=*-*-* 00:46 -OnCalendar=*-*-* 19:31 +OnCalendar=*-*-* 09:42 +OnCalendar=*-*-* 21:02 [Install] WantedBy=timers.target -- 2.43.0