diff --git a/.github/ISSUE_TEMPLATE/bb_crash_issues.yml b/.github/ISSUE_TEMPLATE/bb_crash_issues.yml
index 9e94e5bbc..43b07bf79 100644
--- a/.github/ISSUE_TEMPLATE/bb_crash_issues.yml
+++ b/.github/ISSUE_TEMPLATE/bb_crash_issues.yml
@@ -31,7 +31,7 @@ body:
description: |
Do you have any logs or screenshots that can be useful?
Crash logs in text are preffered over screenshots.
- DO NOT POST THE FULL CRASH LOG IN THE ISSUE BODY. DO NOT UPLOAD TEXT FILES. USE [GITHUB GIST](https://gist.github.com/), PASTEBIN, OR ANY SIMILAR SERVICE INSTEAD.
+ If you have logs in text form please upload them to [Gist](https://gist.github.com/) or PasteBin and upload the link.
validations:
required: false
- type: input
diff --git a/.github/README.md b/.github/README.md
index a9fc21a90..8953b4ca0 100644
--- a/.github/README.md
+++ b/.github/README.md
@@ -81,7 +81,8 @@ You can check the [authors](https://github.com/azerothcore/azerothcore-wotlk/blo
## License
-- The AzerothCore source code is released under the [GNU GPL v2](https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html)
+- The new AzerothCore source components are released under the [GNU AGPL v3](https://www.gnu.org/licenses/agpl-3.0.en.html)
+- The old sources based on MaNGOS/TrinityCore are released under the [GNU GPL v2](https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html)
It's important to note that AzerothCore is not an official Blizzard Entertainment product, and it is not affiliated with or endorsed by World of Warcraft or Blizzard Entertainment. AzerothCore does not in any case sponsor nor support illegal public servers. If you use this project to run an illegal public server and not for testing and learning it is your own personal choice.
diff --git a/AUTHORS b/AUTHORS
index c9155fdca..63425cea7 100644
--- a/AUTHORS
+++ b/AUTHORS
@@ -1,5 +1,10 @@
# List of AUTHORS who contributed over time to the AzerothCore project
+## Warning
+The code of AzerothCore is shipped as it is without any form of warranty,
+and - except for third party libraries licensed under the AGPL 3,
+which you can read from the file "LICENSE".
+
## Point of current development
The project is currently hosted at https://www.azerothcore.org/ and developed under https://github.com/azerothcore
diff --git a/LICENSE b/LICENSE
index ecbc05937..dbbe35581 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,281 +1,620 @@
- GNU GENERAL PUBLIC LICENSE
- Version 2, June 1991
+ GNU AFFERO GENERAL PUBLIC LICENSE
+ Version 3, 19 November 2007
- Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
- 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Copyright (C) 2007 Free Software Foundation, Inc.
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
Preamble
- The licenses for most software are designed to take away your
-freedom to share and change it. By contrast, the GNU General Public
-License is intended to guarantee your freedom to share and change free
-software--to make sure the software is free for all its users. This
-General Public License applies to most of the Free Software
-Foundation's software and to any other program whose authors commit to
-using it. (Some other Free Software Foundation software is covered by
-the GNU Lesser General Public License instead.) You can apply it to
-your programs, too.
+ The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+ The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works. By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
-this service if you wish), that you receive source code or can get it
-if you want it, that you can change the software or use pieces of it
-in new free programs; and that you know you can do these things.
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
- To protect your rights, we need to make restrictions that forbid
-anyone to deny you these rights or to ask you to surrender the rights.
-These restrictions translate to certain responsibilities for you if you
-distribute copies of the software, or if you modify it.
+ Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
- For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must give the recipients all the rights that
-you have. You must make sure that they, too, receive or can get the
-source code. And you must show them these terms so they know their
-rights.
+ A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate. Many developers of free software are heartened and
+encouraged by the resulting cooperation. However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
- We protect your rights with two steps: (1) copyright the software, and
-(2) offer you this license which gives you legal permission to copy,
-distribute and/or modify the software.
+ The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community. It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server. Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
- Also, for each author's protection and ours, we want to make certain
-that everyone understands that there is no warranty for this free
-software. If the software is modified by someone else and passed on, we
-want its recipients to know that what they have is not the original, so
-that any problems introduced by others will not reflect on the original
-authors' reputations.
-
- Finally, any free program is threatened constantly by software
-patents. We wish to avoid the danger that redistributors of a free
-program will individually obtain patent licenses, in effect making the
-program proprietary. To prevent this, we have made it clear that any
-patent must be licensed for everyone's free use or not licensed at all.
+ An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals. This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
The precise terms and conditions for copying, distribution and
modification follow.
- GNU GENERAL PUBLIC LICENSE
- TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+ TERMS AND CONDITIONS
- 0. This License applies to any program or other work which contains
-a notice placed by the copyright holder saying it may be distributed
-under the terms of this General Public License. The "Program", below,
-refers to any such program or work, and a "work based on the Program"
-means either the Program or any derivative work under copyright law:
-that is to say, a work containing the Program or a portion of it,
-either verbatim or with modifications and/or translated into another
-language. (Hereinafter, translation is included without limitation in
-the term "modification".) Each licensee is addressed as "you".
+ 0. Definitions.
-Activities other than copying, distribution and modification are not
-covered by this License; they are outside its scope. The act of
-running the Program is not restricted, and the output from the Program
-is covered only if its contents constitute a work based on the
-Program (independent of having been made by running the Program).
-Whether that is true depends on what the Program does.
+ "This License" refers to version 3 of the GNU Affero General Public License.
- 1. You may copy and distribute verbatim copies of the Program's
-source code as you receive it, in any medium, provided that you
-conspicuously and appropriately publish on each copy an appropriate
-copyright notice and disclaimer of warranty; keep intact all the
-notices that refer to this License and to the absence of any warranty;
-and give any other recipients of the Program a copy of this License
-along with the Program.
+ "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
-You may charge a fee for the physical act of transferring a copy, and
-you may at your option offer warranty protection in exchange for a fee.
+ "The Program" refers to any copyrightable work licensed under this
+License. Each licensee is addressed as "you". "Licensees" and
+"recipients" may be individuals or organizations.
- 2. You may modify your copy or copies of the Program or any portion
-of it, thus forming a work based on the Program, and copy and
-distribute such modifications or work under the terms of Section 1
-above, provided that you also meet all of these conditions:
+ To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy. The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
- a) You must cause the modified files to carry prominent notices
- stating that you changed the files and the date of any change.
+ A "covered work" means either the unmodified Program or a work based
+on the Program.
- b) You must cause any work that you distribute or publish, that in
- whole or in part contains or is derived from the Program or any
- part thereof, to be licensed as a whole at no charge to all third
- parties under the terms of this License.
+ To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy. Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
- c) If the modified program normally reads commands interactively
- when run, you must cause it, when started running for such
- interactive use in the most ordinary way, to print or display an
- announcement including an appropriate copyright notice and a
- notice that there is no warranty (or else, saying that you provide
- a warranty) and that users may redistribute the program under
- these conditions, and telling the user how to view a copy of this
- License. (Exception: if the Program itself is interactive but
- does not normally print such an announcement, your work based on
- the Program is not required to print an announcement.)
+ To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies. Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
-These requirements apply to the modified work as a whole. If
-identifiable sections of that work are not derived from the Program,
-and can be reasonably considered independent and separate works in
-themselves, then this License, and its terms, do not apply to those
-sections when you distribute them as separate works. But when you
-distribute the same sections as part of a whole which is a work based
-on the Program, the distribution of the whole must be on the terms of
-this License, whose permissions for other licensees extend to the
-entire whole, and thus to each and every part regardless of who wrote it.
+ An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License. If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
-Thus, it is not the intent of this section to claim rights or contest
-your rights to work written entirely by you; rather, the intent is to
-exercise the right to control the distribution of derivative or
-collective works based on the Program.
+ 1. Source Code.
-In addition, mere aggregation of another work not based on the Program
-with the Program (or with a work based on the Program) on a volume of
-a storage or distribution medium does not bring the other work under
-the scope of this License.
+ The "source code" for a work means the preferred form of the work
+for making modifications to it. "Object code" means any non-source
+form of a work.
- 3. You may copy and distribute the Program (or a work based on it,
-under Section 2) in object code or executable form under the terms of
-Sections 1 and 2 above provided that you also do one of the following:
+ A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
- a) Accompany it with the complete corresponding machine-readable
- source code, which must be distributed under the terms of Sections
- 1 and 2 above on a medium customarily used for software interchange; or,
+ The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form. A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
- b) Accompany it with a written offer, valid for at least three
- years, to give any third party, for a charge no more than your
- cost of physically performing source distribution, a complete
- machine-readable copy of the corresponding source code, to be
- distributed under the terms of Sections 1 and 2 above on a medium
- customarily used for software interchange; or,
+ The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities. However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work. For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
- c) Accompany it with the information you received as to the offer
- to distribute corresponding source code. (This alternative is
- allowed only for noncommercial distribution and only if you
- received the program in object code or executable form with such
- an offer, in accord with Subsection b above.)
+ The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
-The source code for a work means the preferred form of the work for
-making modifications to it. For an executable work, complete source
-code means all the source code for all modules it contains, plus any
-associated interface definition files, plus the scripts used to
-control compilation and installation of the executable. However, as a
-special exception, the source code distributed need not include
-anything that is normally distributed (in either source or binary
-form) with the major components (compiler, kernel, and so on) of the
-operating system on which the executable runs, unless that component
-itself accompanies the executable.
+ The Corresponding Source for a work in source code form is that
+same work.
-If distribution of executable or object code is made by offering
-access to copy from a designated place, then offering equivalent
-access to copy the source code from the same place counts as
-distribution of the source code, even though third parties are not
-compelled to copy the source along with the object code.
+ 2. Basic Permissions.
- 4. You may not copy, modify, sublicense, or distribute the Program
-except as expressly provided under this License. Any attempt
-otherwise to copy, modify, sublicense or distribute the Program is
-void, and will automatically terminate your rights under this License.
-However, parties who have received copies, or rights, from you under
-this License will not have their licenses terminated so long as such
-parties remain in full compliance.
+ All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met. This License explicitly affirms your unlimited
+permission to run the unmodified Program. The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work. This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
- 5. You are not required to accept this License, since you have not
-signed it. However, nothing else grants you permission to modify or
-distribute the Program or its derivative works. These actions are
-prohibited by law if you do not accept this License. Therefore, by
-modifying or distributing the Program (or any work based on the
-Program), you indicate your acceptance of this License to do so, and
-all its terms and conditions for copying, distributing or modifying
-the Program or works based on it.
+ You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force. You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright. Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
- 6. Each time you redistribute the Program (or any work based on the
-Program), the recipient automatically receives a license from the
-original licensor to copy, distribute or modify the Program subject to
-these terms and conditions. You may not impose any further
-restrictions on the recipients' exercise of the rights granted herein.
-You are not responsible for enforcing compliance by third parties to
+ Conveying under any other circumstances is permitted solely under
+the conditions stated below. Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+ 3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+ No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+ When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+ 4. Conveying Verbatim Copies.
+
+ You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+ You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+ 5. Conveying Modified Source Versions.
+
+ You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+ a) The work must carry prominent notices stating that you modified
+ it, and giving a relevant date.
+
+ b) The work must carry prominent notices stating that it is
+ released under this License and any conditions added under section
+ 7. This requirement modifies the requirement in section 4 to
+ "keep intact all notices".
+
+ c) You must license the entire work, as a whole, under this
+ License to anyone who comes into possession of a copy. This
+ License will therefore apply, along with any applicable section 7
+ additional terms, to the whole of the work, and all its parts,
+ regardless of how they are packaged. This License gives no
+ permission to license the work in any other way, but it does not
+ invalidate such permission if you have separately received it.
+
+ d) If the work has interactive user interfaces, each must display
+ Appropriate Legal Notices; however, if the Program has interactive
+ interfaces that do not display Appropriate Legal Notices, your
+ work need not make them do so.
+
+ A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit. Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+ 6. Conveying Non-Source Forms.
+
+ You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+ a) Convey the object code in, or embodied in, a physical product
+ (including a physical distribution medium), accompanied by the
+ Corresponding Source fixed on a durable physical medium
+ customarily used for software interchange.
+
+ b) Convey the object code in, or embodied in, a physical product
+ (including a physical distribution medium), accompanied by a
+ written offer, valid for at least three years and valid for as
+ long as you offer spare parts or customer support for that product
+ model, to give anyone who possesses the object code either (1) a
+ copy of the Corresponding Source for all the software in the
+ product that is covered by this License, on a durable physical
+ medium customarily used for software interchange, for a price no
+ more than your reasonable cost of physically performing this
+ conveying of source, or (2) access to copy the
+ Corresponding Source from a network server at no charge.
+
+ c) Convey individual copies of the object code with a copy of the
+ written offer to provide the Corresponding Source. This
+ alternative is allowed only occasionally and noncommercially, and
+ only if you received the object code with such an offer, in accord
+ with subsection 6b.
+
+ d) Convey the object code by offering access from a designated
+ place (gratis or for a charge), and offer equivalent access to the
+ Corresponding Source in the same way through the same place at no
+ further charge. You need not require recipients to copy the
+ Corresponding Source along with the object code. If the place to
+ copy the object code is a network server, the Corresponding Source
+ may be on a different server (operated by you or a third party)
+ that supports equivalent copying facilities, provided you maintain
+ clear directions next to the object code saying where to find the
+ Corresponding Source. Regardless of what server hosts the
+ Corresponding Source, you remain obligated to ensure that it is
+ available for as long as needed to satisfy these requirements.
+
+ e) Convey the object code using peer-to-peer transmission, provided
+ you inform other peers where the object code and Corresponding
+ Source of the work are being offered to the general public at no
+ charge under subsection 6d.
+
+ A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+ A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling. In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage. For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product. A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+ "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source. The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+ If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information. But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+ The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed. Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+ Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+ 7. Additional Terms.
+
+ "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law. If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+ When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it. (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.) You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+ Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+ a) Disclaiming warranty or limiting liability differently from the
+ terms of sections 15 and 16 of this License; or
+
+ b) Requiring preservation of specified reasonable legal notices or
+ author attributions in that material or in the Appropriate Legal
+ Notices displayed by works containing it; or
+
+ c) Prohibiting misrepresentation of the origin of that material, or
+ requiring that modified versions of such material be marked in
+ reasonable ways as different from the original version; or
+
+ d) Limiting the use for publicity purposes of names of licensors or
+ authors of the material; or
+
+ e) Declining to grant rights under trademark law for use of some
+ trade names, trademarks, or service marks; or
+
+ f) Requiring indemnification of licensors and authors of that
+ material by anyone who conveys the material (or modified versions of
+ it) with contractual assumptions of liability to the recipient, for
+ any liability that these contractual assumptions directly impose on
+ those licensors and authors.
+
+ All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10. If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term. If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+ If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+ Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+ 8. Termination.
+
+ You may not propagate or modify a covered work except as expressly
+provided under this License. Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+ However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+ Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+ Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License. If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+ 9. Acceptance Not Required for Having Copies.
+
+ You are not required to accept this License in order to receive or
+run a copy of the Program. Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance. However,
+nothing other than this License grants you permission to propagate or
+modify any covered work. These actions infringe copyright if you do
+not accept this License. Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+ 10. Automatic Licensing of Downstream Recipients.
+
+ Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License. You are not responsible
+for enforcing compliance by third parties with this License.
+
+ An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations. If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+ You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License. For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+ 11. Patents.
+
+ A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based. The
+work thus licensed is called the contributor's "contributor version".
+
+ A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version. For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
this License.
- 7. If, as a consequence of a court judgment or allegation of patent
-infringement or for any other reason (not limited to patent issues),
-conditions are imposed on you (whether by court order, agreement or
+ Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+ In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement). To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+ If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients. "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+ If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+ A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License. You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+ Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+ 12. No Surrender of Others' Freedom.
+
+ If conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License. If you cannot
-distribute so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you
-may not distribute the Program at all. For example, if a patent
-license would not permit royalty-free redistribution of the Program by
-all those who receive copies directly or indirectly through you, then
-the only way you could satisfy both it and this License would be to
-refrain entirely from distribution of the Program.
+excuse you from the conditions of this License. If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all. For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
-If any portion of this section is held invalid or unenforceable under
-any particular circumstance, the balance of the section is intended to
-apply and the section as a whole is intended to apply in other
-circumstances.
+ 13. Remote Network Interaction; Use with the GNU General Public License.
-It is not the purpose of this section to induce you to infringe any
-patents or other property right claims or to contest validity of any
-such claims; this section has the sole purpose of protecting the
-integrity of the free software distribution system, which is
-implemented by public license practices. Many people have made
-generous contributions to the wide range of software distributed
-through that system in reliance on consistent application of that
-system; it is up to the author/donor to decide if he or she is willing
-to distribute software through any other system and a licensee cannot
-impose that choice.
+ Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software. This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
-This section is intended to make thoroughly clear what is believed to
-be a consequence of the rest of this License.
+ Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work. The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
- 8. If the distribution and/or use of the Program is restricted in
-certain countries either by patents or by copyrighted interfaces, the
-original copyright holder who places the Program under this License
-may add an explicit geographical distribution limitation excluding
-those countries, so that distribution is permitted only in or among
-countries not thus excluded. In such case, this License incorporates
-the limitation as if written in the body of this License.
+ 14. Revised Versions of this License.
- 9. The Free Software Foundation may publish revised and/or new versions
-of the General Public License from time to time. Such new versions will
-be similar in spirit to the present version, but may differ in detail to
+ The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time. Such new versions
+will be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.
-Each version is given a distinguishing version number. If the Program
-specifies a version number of this License which applies to it and "any
-later version", you have the option of following the terms and conditions
-either of that version or of any later version published by the Free
-Software Foundation. If the Program does not specify a version number of
-this License, you may choose any version ever published by the Free Software
-Foundation.
+ Each version is given a distinguishing version number. If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation. If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
- 10. If you wish to incorporate parts of the Program into other free
-programs whose distribution conditions are different, write to the author
-to ask for permission. For software which is copyrighted by the Free
-Software Foundation, write to the Free Software Foundation; we sometimes
-make exceptions for this. Our decision will be guided by the two goals
-of preserving the free status of all derivatives of our free software and
-of promoting the sharing and reuse of software generally.
+ If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
- NO WARRANTY
+ Later license versions may give you additional or different
+permissions. However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
- 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
-FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
-OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
-PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
-OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
-TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
-PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
-REPAIR OR CORRECTION.
+ 15. Disclaimer of Warranty.
- 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
-REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
-INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
-OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
-TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
-YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
-PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGES.
+ THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+ 16. Limitation of Liability.
+
+ IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+ 17. Interpretation of Sections 15 and 16.
+
+ If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
END OF TERMS AND CONDITIONS
@@ -287,53 +626,36 @@ free software which everyone can redistribute and change under these terms.
To do so, attach the following notices to the program. It is safest
to attach them to the start of each source file to most effectively
-convey the exclusion of warranty; and each file should have at least
+state the exclusion of warranty; and each file should have at least
the "copyright" line and a pointer to where the full notice is found.
Copyright (C)
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published
+ by the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
+ GNU Affero General Public License for more details.
- You should have received a copy of the GNU General Public License along
- with this program; if not, write to the Free Software Foundation, Inc.,
- 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+ You should have received a copy of the GNU Affero General Public License
+ along with this program. If not, see .
Also add information on how to contact you by electronic and paper mail.
-If the program is interactive, make it output a short notice like this
-when it starts in an interactive mode:
+ If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source. For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code. There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
- Gnomovision version 69, Copyright (C) year name of author
- Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
- This is free software, and you are welcome to redistribute it
- under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License. Of course, the commands you use may
-be called something other than `show w' and `show c'; they could even be
-mouse-clicks or menu items--whatever suits your program.
-
-You should also get your employer (if you work as a programmer) or your
-school, if any, to sign a "copyright disclaimer" for the program, if
-necessary. Here is a sample; alter the names:
-
- Yoyodyne, Inc., hereby disclaims all copyright interest in the program
- `Gnomovision' (which makes passes at compilers) written by James Hacker.
-
- , 1 April 1989
- Ty Coon, President of Vice
-
-This General Public License does not permit incorporating your program into
-proprietary programs. If your program is a subroutine library, you may
-consider it more useful to permit linking proprietary applications with the
-library. If this is what you want to do, use the GNU Lesser General
-Public License instead of this License.
\ No newline at end of file
+ You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+.
diff --git a/acore.json b/acore.json
index 9fa27c4de..b64f6494d 100644
--- a/acore.json
+++ b/acore.json
@@ -1,5 +1,5 @@
{
"name": "azerothcore-wotlk",
"version": "14.0.0-dev",
- "license": "GPL2"
+ "license": "AGPL3"
}
diff --git a/apps/EnumUtils/enumutils_describe.py b/apps/EnumUtils/enumutils_describe.py
index b1adee2ab..ef9bf72a4 100644
--- a/apps/EnumUtils/enumutils_describe.py
+++ b/apps/EnumUtils/enumutils_describe.py
@@ -4,14 +4,14 @@ from os import walk, getcwd
notice = ('''/*
* This file is part of the AzerothCore Project. See AUTHORS file for Copyright information
*
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU Affero General Public License as published by the
+ * Free Software Foundation; either version 3 of the License, or (at your
+ * option) any later version.
*
* This program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for
* more details.
*
* You should have received a copy of the GNU General Public License along
diff --git a/conf/dist/config.cmake b/conf/dist/config.cmake
index 66f329449..ab370f458 100644
--- a/conf/dist/config.cmake
+++ b/conf/dist/config.cmake
@@ -1,5 +1,5 @@
#
-# Copyright (C) 2016+ AzerothCore
+# Copyright (C) 2016+ AzerothCore , released under GNU AGPL v3 license: https://github.com/azerothcore/azerothcore-wotlk/blob/master/LICENSE
# Copyright (C) 2021+ WarheadCore
#
# This file is free software; as a special exception the author gives
diff --git a/data/sql/base/db_auth/acore_cms_subscriptions.sql b/data/sql/base/db_auth/acore_cms_subscriptions.sql
deleted file mode 100644
index c7b7b812b..000000000
--- a/data/sql/base/db_auth/acore_cms_subscriptions.sql
+++ /dev/null
@@ -1,4 +0,0 @@
-CREATE TABLE IF NOT EXISTS `acore_cms_subscriptions` (
- `account_name` VARCHAR(255) NOT NULL,
- `membership_level` INT NOT NULL
-);
diff --git a/data/sql/base/db_characters/trasmorg.sql b/data/sql/base/db_characters/trasmorg.sql
deleted file mode 100644
index 1191f4968..000000000
--- a/data/sql/base/db_characters/trasmorg.sql
+++ /dev/null
@@ -1,26 +0,0 @@
--- Dumping structure for table tc_c.custom_transmogrification
-CREATE TABLE IF NOT EXISTS `custom_transmogrification` (
- `GUID` int(10) unsigned NOT NULL COMMENT 'Item guidLow',
- `FakeEntry` int(10) unsigned NOT NULL COMMENT 'Item entry',
- `Owner` int(10) unsigned NOT NULL COMMENT 'Player guidLow',
- PRIMARY KEY (`GUID`),
- KEY `Owner` (`Owner`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='6_2';
-
--- Data exporting was unselected.
-
-
--- Dumping structure for table tc_c.custom_transmogrification_sets
-CREATE TABLE IF NOT EXISTS `custom_transmogrification_sets` (
- `Owner` int(10) unsigned NOT NULL COMMENT 'Player guidlow',
- `PresetID` tinyint(3) unsigned NOT NULL COMMENT 'Preset identifier',
- `SetName` text COMMENT 'SetName',
- `SetData` text COMMENT 'Slot1 Entry1 Slot2 Entry2',
- PRIMARY KEY (`Owner`,`PresetID`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='6_1';
-
-CREATE TABLE IF NOT EXISTS `custom_unlocked_appearances` (
- `account_id` int(10) unsigned NOT NULL,
- `item_template_id` mediumint(8) unsigned NOT NULL DEFAULT '0',
- PRIMARY KEY (`account_id`, `item_template_id`)
-) ENGINE = InnoDB DEFAULT CHARSET = utf8;
diff --git a/data/sql/base/db_world/auctionhousebot_professionItems.sql b/data/sql/base/db_world/auctionhousebot_professionItems.sql
deleted file mode 100644
index 6e8077f05..000000000
--- a/data/sql/base/db_world/auctionhousebot_professionItems.sql
+++ /dev/null
@@ -1,3723 +0,0 @@
--- phpMyAdmin SQL Dump
--- version 5.2.1
--- https://www.phpmyadmin.net/
---
--- Generation Time: Oct 02, 2024 at 04:47 PM
--- Server version: 8.3.0
--- PHP Version: 8.3.11
-
-SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
-START TRANSACTION;
-SET time_zone = "+00:00";
-
-
-/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
-/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
-/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
-/*!40101 SET NAMES utf8mb4 */;
-
---
--- Database: `acore_world`
---
-
--- --------------------------------------------------------
-
---
--- Table structure for table `auctionhousebot_professionItems`
---
-
-CREATE TABLE `auctionhousebot_professionItems` (
- `Entry` int NOT NULL,
- `Item` int NOT NULL
-) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_general_ci;
-
---
--- Dumping data for table `auctionhousebot_professionItems`
---
-
-INSERT INTO `auctionhousebot_professionItems` (`Entry`, `Item`) VALUES
-(1, 2318),
-(2, 2320),
-(3, 2302),
-(4, 2304),
-(5, 2303),
-(6, 2307),
-(7, 2321),
-(8, 2308),
-(9, 2300),
-(10, 2309),
-(11, 2310),
-(12, 2324),
-(13, 2311),
-(14, 4231),
-(15, 2312),
-(16, 2319),
-(17, 2313),
-(18, 2314),
-(19, 4340),
-(20, 2315),
-(21, 2316),
-(22, 2317),
-(23, 2449),
-(24, 765),
-(25, 3371),
-(26, 2454),
-(27, 2447),
-(28, 118),
-(29, 785),
-(30, 2455),
-(31, 2456),
-(32, 3355),
-(33, 2452),
-(34, 3372),
-(35, 3390),
-(36, 2458),
-(37, 2450),
-(38, 2459),
-(39, 2460),
-(40, 858),
-(41, 2996),
-(42, 2568),
-(43, 2569),
-(44, 2570),
-(45, 2604),
-(46, 2572),
-(47, 2575),
-(48, 2576),
-(49, 6260),
-(50, 2577),
-(51, 2578),
-(52, 2605),
-(53, 2579),
-(54, 2580),
-(55, 2997),
-(56, 2582),
-(57, 2583),
-(58, 2584),
-(59, 2585),
-(60, 2587),
-(61, 2770),
-(62, 2840),
-(63, 2775),
-(64, 2842),
-(65, 3576),
-(66, 2841),
-(67, 2835),
-(68, 2862),
-(69, 2851),
-(70, 2852),
-(71, 2853),
-(72, 3470),
-(73, 2854),
-(74, 2836),
-(75, 2863),
-(76, 2857),
-(77, 1210),
-(78, 2864),
-(79, 2865),
-(80, 2866),
-(81, 2867),
-(82, 3478),
-(83, 2868),
-(84, 2869),
-(85, 2838),
-(86, 2871),
-(87, 1206),
-(88, 1705),
-(89, 5500),
-(90, 2870),
-(91, 2880),
-(92, 2589),
-(93, 2844),
-(94, 2845),
-(95, 2847),
-(96, 2848),
-(97, 2849),
-(98, 2850),
-(99, 2934),
-(100, 2592),
-(101, 3239),
-(102, 3240),
-(103, 3241),
-(104, 3382),
-(105, 3383),
-(106, 3384),
-(107, 3820),
-(108, 3385),
-(109, 1288),
-(110, 2453),
-(111, 3386),
-(112, 8839),
-(113, 8845),
-(114, 8925),
-(115, 3387),
-(116, 3388),
-(117, 3389),
-(118, 3356),
-(119, 3391),
-(120, 2457),
-(121, 818),
-(122, 3487),
-(123, 774),
-(124, 3488),
-(125, 3489),
-(126, 3466),
-(127, 3490),
-(128, 3491),
-(129, 3575),
-(130, 3492),
-(131, 2771),
-(132, 2772),
-(133, 2776),
-(134, 3577),
-(135, 3469),
-(136, 3471),
-(137, 3472),
-(138, 3473),
-(139, 3474),
-(140, 3480),
-(141, 3481),
-(142, 3482),
-(143, 3483),
-(144, 3484),
-(145, 5498),
-(146, 3485),
-(147, 3486),
-(148, 929),
-(149, 3818),
-(150, 3823),
-(151, 3369),
-(152, 3824),
-(153, 3821),
-(154, 3825),
-(155, 3357),
-(156, 3826),
-(157, 3827),
-(158, 3358),
-(159, 3828),
-(160, 3819),
-(161, 3829),
-(162, 3848),
-(163, 4234),
-(164, 3849),
-(165, 1529),
-(166, 3850),
-(167, 3851),
-(168, 3852),
-(169, 3859),
-(170, 3853),
-(171, 3854),
-(172, 3855),
-(173, 3864),
-(174, 3856),
-(175, 3835),
-(176, 3836),
-(177, 3837),
-(178, 3840),
-(179, 3841),
-(180, 3842),
-(181, 3843),
-(182, 4255),
-(183, 3844),
-(184, 3845),
-(185, 3846),
-(186, 3847),
-(187, 3857),
-(188, 4237),
-(189, 4238),
-(190, 4239),
-(191, 4240),
-(192, 4241),
-(193, 4242),
-(194, 3719),
-(195, 4243),
-(196, 4244),
-(197, 4246),
-(198, 4247),
-(199, 5373),
-(200, 4248),
-(201, 4233),
-(202, 4249),
-(203, 4250),
-(204, 4251),
-(205, 4252),
-(206, 3182),
-(207, 4253),
-(208, 5637),
-(209, 4254),
-(210, 4236),
-(211, 4256),
-(212, 7071),
-(213, 4257),
-(214, 4258),
-(215, 4259),
-(216, 4291),
-(217, 4260),
-(218, 4262),
-(219, 4096),
-(220, 5633),
-(221, 4264),
-(222, 4265),
-(223, 4305),
-(224, 4245),
-(225, 783),
-(226, 4289),
-(227, 4232),
-(228, 4235),
-(229, 4306),
-(230, 4307),
-(231, 4308),
-(232, 4309),
-(233, 4310),
-(234, 4311),
-(235, 4312),
-(236, 4313),
-(237, 4314),
-(238, 4315),
-(239, 4316),
-(240, 4317),
-(241, 4318),
-(242, 4319),
-(243, 4320),
-(244, 4321),
-(245, 4337),
-(246, 4322),
-(247, 4323),
-(248, 4324),
-(249, 4325),
-(250, 4326),
-(251, 4339),
-(252, 4327),
-(253, 4328),
-(254, 4329),
-(255, 4338),
-(256, 4330),
-(257, 4331),
-(258, 4341),
-(259, 4332),
-(260, 4333),
-(261, 4334),
-(262, 4342),
-(263, 4335),
-(264, 2325),
-(265, 4336),
-(266, 4343),
-(267, 4344),
-(268, 4357),
-(269, 4358),
-(270, 8067),
-(271, 4359),
-(272, 4360),
-(273, 4361),
-(274, 4399),
-(275, 4362),
-(276, 4363),
-(277, 4401),
-(278, 4364),
-(279, 8068),
-(280, 4365),
-(281, 4366),
-(282, 159),
-(283, 4367),
-(284, 4368),
-(285, 4369),
-(286, 4404),
-(287, 4370),
-(288, 4371),
-(289, 4400),
-(290, 4372),
-(291, 4373),
-(292, 4374),
-(293, 4375),
-(294, 4402),
-(295, 4376),
-(296, 4377),
-(297, 4378),
-(298, 8069),
-(299, 4379),
-(300, 4380),
-(301, 4381),
-(302, 4382),
-(303, 4383),
-(304, 4384),
-(305, 4385),
-(306, 4386),
-(307, 4387),
-(308, 4388),
-(309, 4403),
-(310, 10558),
-(311, 4389),
-(312, 4390),
-(313, 4391),
-(314, 4392),
-(315, 4393),
-(316, 4394),
-(317, 4395),
-(318, 4396),
-(319, 7191),
-(320, 4397),
-(321, 10505),
-(322, 4398),
-(323, 4405),
-(324, 4406),
-(325, 4407),
-(326, 4461),
-(327, 4455),
-(328, 4456),
-(329, 3164),
-(330, 4596),
-(331, 3858),
-(332, 4623),
-(333, 5082),
-(334, 5081),
-(335, 5507),
-(336, 5540),
-(337, 5541),
-(338, 5542),
-(339, 5635),
-(340, 5631),
-(341, 6370),
-(342, 5634),
-(343, 5739),
-(344, 5762),
-(345, 5763),
-(346, 5766),
-(347, 5770),
-(348, 5764),
-(349, 5765),
-(350, 5784),
-(351, 5780),
-(352, 5781),
-(353, 5785),
-(354, 5782),
-(355, 5783),
-(356, 5957),
-(357, 5958),
-(358, 5961),
-(359, 5962),
-(360, 5963),
-(361, 5964),
-(362, 5965),
-(363, 5966),
-(364, 5996),
-(365, 1710),
-(366, 5997),
-(367, 6042),
-(368, 6043),
-(369, 6040),
-(370, 6041),
-(371, 6051),
-(372, 6048),
-(373, 6371),
-(374, 6049),
-(375, 6050),
-(376, 6052),
-(377, 6214),
-(378, 10940),
-(379, 38679),
-(380, 38766),
-(381, 6217),
-(382, 10938),
-(383, 6218),
-(384, 38767),
-(385, 38768),
-(386, 6219),
-(387, 38769),
-(388, 38770),
-(389, 38771),
-(390, 6238),
-(391, 6241),
-(392, 6239),
-(393, 6240),
-(394, 6242),
-(395, 6243),
-(396, 6263),
-(397, 6264),
-(398, 10978),
-(399, 38772),
-(400, 38773),
-(401, 38774),
-(402, 10939),
-(403, 38775),
-(404, 38776),
-(405, 38777),
-(406, 38778),
-(407, 38779),
-(408, 38780),
-(409, 38781),
-(410, 6338),
-(411, 6339),
-(412, 6350),
-(413, 6358),
-(414, 6359),
-(415, 6372),
-(416, 6373),
-(417, 10998),
-(418, 38782),
-(419, 38783),
-(420, 38784),
-(421, 38785),
-(422, 38786),
-(423, 6384),
-(424, 6385),
-(425, 6470),
-(426, 6466),
-(427, 6467),
-(428, 6471),
-(429, 6468),
-(430, 6522),
-(431, 6662),
-(432, 4611),
-(433, 4852),
-(434, 6709),
-(435, 6712),
-(436, 6714),
-(437, 6730),
-(438, 6731),
-(439, 6733),
-(440, 6786),
-(441, 6787),
-(442, 6795),
-(443, 6796),
-(444, 7046),
-(445, 7048),
-(446, 7050),
-(447, 7067),
-(448, 7051),
-(449, 7070),
-(450, 7052),
-(451, 7068),
-(452, 7069),
-(453, 7054),
-(454, 7055),
-(455, 7057),
-(456, 7026),
-(457, 7027),
-(458, 7047),
-(459, 7049),
-(460, 7065),
-(461, 7053),
-(462, 7056),
-(463, 7058),
-(464, 7059),
-(465, 7072),
-(466, 7060),
-(467, 7061),
-(468, 7062),
-(469, 7063),
-(470, 4304),
-(471, 7064),
-(472, 7166),
-(473, 10026),
-(474, 10559),
-(475, 9061),
-(476, 10560),
-(477, 7189),
-(478, 7276),
-(479, 7277),
-(480, 7278),
-(481, 7279),
-(482, 7280),
-(483, 7281),
-(484, 7282),
-(485, 7286),
-(486, 7283),
-(487, 7287),
-(488, 7284),
-(489, 7285),
-(490, 7348),
-(491, 7349),
-(492, 7352),
-(493, 7358),
-(494, 7359),
-(495, 7371),
-(496, 7372),
-(497, 7373),
-(498, 7374),
-(499, 7392),
-(500, 7375),
-(501, 7377),
-(502, 7378),
-(503, 7386),
-(504, 7387),
-(505, 10285),
-(506, 7390),
-(507, 7391),
-(508, 814),
-(509, 7506),
-(510, 6530),
-(511, 6533),
-(512, 7148),
-(513, 7913),
-(514, 7914),
-(515, 7915),
-(516, 7916),
-(517, 7917),
-(518, 7963),
-(519, 7912),
-(520, 7964),
-(521, 7966),
-(522, 7965),
-(523, 3860),
-(524, 7918),
-(525, 7919),
-(526, 7920),
-(527, 7921),
-(528, 7922),
-(529, 7924),
-(530, 6037),
-(531, 7967),
-(532, 7925),
-(533, 7926),
-(534, 7927),
-(535, 7928),
-(536, 7909),
-(537, 7938),
-(538, 7929),
-(539, 7930),
-(540, 7931),
-(541, 7969),
-(542, 7932),
-(543, 7933),
-(544, 7934),
-(545, 7077),
-(546, 7935),
-(547, 7910),
-(548, 7971),
-(549, 7939),
-(550, 7936),
-(551, 7937),
-(552, 7955),
-(553, 7956),
-(554, 7957),
-(555, 7958),
-(556, 7941),
-(557, 7942),
-(558, 7943),
-(559, 7945),
-(560, 7075),
-(561, 7954),
-(562, 7944),
-(563, 7081),
-(564, 7961),
-(565, 7946),
-(566, 7972),
-(567, 7959),
-(568, 7947),
-(569, 7960),
-(570, 7911),
-(571, 8169),
-(572, 8150),
-(573, 8172),
-(574, 8173),
-(575, 8174),
-(576, 8175),
-(577, 8176),
-(578, 8167),
-(579, 8343),
-(580, 8187),
-(581, 8189),
-(582, 8192),
-(583, 8198),
-(584, 8151),
-(585, 8200),
-(586, 8154),
-(587, 8203),
-(588, 8153),
-(589, 8210),
-(590, 8201),
-(591, 8205),
-(592, 8204),
-(593, 8211),
-(594, 8214),
-(595, 8193),
-(596, 8195),
-(597, 8191),
-(598, 8209),
-(599, 8185),
-(600, 8197),
-(601, 8152),
-(602, 8202),
-(603, 8216),
-(604, 8207),
-(605, 8213),
-(606, 8206),
-(607, 8208),
-(608, 8212),
-(609, 8215),
-(610, 8165),
-(611, 8347),
-(612, 8345),
-(613, 7079),
-(614, 8346),
-(615, 8348),
-(616, 17056),
-(617, 8349),
-(618, 8367),
-(619, 6149),
-(620, 8949),
-(621, 8951),
-(622, 4625),
-(623, 8956),
-(624, 9030),
-(625, 8831),
-(626, 9036),
-(627, 9060),
-(628, 9260),
-(629, 8838),
-(630, 3928),
-(631, 9144),
-(632, 9262),
-(633, 9149),
-(634, 8836),
-(635, 9154),
-(636, 9155),
-(637, 9172),
-(638, 9179),
-(639, 9088),
-(640, 9187),
-(641, 9197),
-(642, 8846),
-(643, 9206),
-(644, 9210),
-(645, 9264),
-(646, 9224),
-(647, 9233),
-(648, 9366),
-(649, 10045),
-(650, 10046),
-(651, 10047),
-(652, 10048),
-(653, 9998),
-(654, 9999),
-(655, 10001),
-(656, 10002),
-(657, 10003),
-(658, 10004),
-(659, 10007),
-(660, 10008),
-(661, 10009),
-(662, 6261),
-(663, 10056),
-(664, 10010),
-(665, 10011),
-(666, 10052),
-(667, 10050),
-(668, 10018),
-(669, 10286),
-(670, 10019),
-(671, 10020),
-(672, 10042),
-(673, 10021),
-(674, 10023),
-(675, 10024),
-(676, 10027),
-(677, 10054),
-(678, 10028),
-(679, 10053),
-(680, 10029),
-(681, 10051),
-(682, 10290),
-(683, 10055),
-(684, 4589),
-(685, 10030),
-(686, 10031),
-(687, 10032),
-(688, 10033),
-(689, 10034),
-(690, 10025),
-(691, 10038),
-(692, 10044),
-(693, 10035),
-(694, 10039),
-(695, 10040),
-(696, 10041),
-(697, 10036),
-(698, 10423),
-(699, 10421),
-(700, 10507),
-(701, 10499),
-(702, 10498),
-(703, 10500),
-(704, 10508),
-(705, 10512),
-(706, 10546),
-(707, 10561),
-(708, 10514),
-(709, 10592),
-(710, 10501),
-(711, 10510),
-(712, 10502),
-(713, 10518),
-(714, 10506),
-(715, 10503),
-(716, 10562),
-(717, 10548),
-(718, 10513),
-(719, 10504),
-(720, 10576),
-(721, 10648),
-(722, 10647),
-(723, 10644),
-(724, 10577),
-(725, 10542),
-(726, 10543),
-(727, 10580),
-(728, 10585),
-(729, 10586),
-(730, 10587),
-(731, 10588),
-(732, 12808),
-(733, 10645),
-(734, 10646),
-(735, 10713),
-(736, 10545),
-(737, 10716),
-(738, 10719),
-(739, 10720),
-(740, 10721),
-(741, 10723),
-(742, 10724),
-(743, 10725),
-(744, 10726),
-(745, 10727),
-(746, 38787),
-(747, 38788),
-(748, 38789),
-(749, 38790),
-(750, 38791),
-(751, 38792),
-(752, 11083),
-(753, 38793),
-(754, 11084),
-(755, 38794),
-(756, 11082),
-(757, 38795),
-(758, 38796),
-(759, 38797),
-(760, 38798),
-(761, 38799),
-(762, 38800),
-(763, 38801),
-(764, 38802),
-(765, 38803),
-(766, 38804),
-(767, 11128),
-(768, 11130),
-(769, 11134),
-(770, 38805),
-(771, 11138),
-(772, 38806),
-(773, 38807),
-(774, 38808),
-(775, 38809),
-(776, 38810),
-(777, 38811),
-(778, 38812),
-(779, 38813),
-(780, 38814),
-(781, 38815),
-(782, 11135),
-(783, 11137),
-(784, 38816),
-(785, 38817),
-(786, 38818),
-(787, 38819),
-(788, 11139),
-(789, 38820),
-(790, 38821),
-(791, 38822),
-(792, 38823),
-(793, 38824),
-(794, 11144),
-(795, 11145),
-(796, 38825),
-(797, 11174),
-(798, 38826),
-(799, 38827),
-(800, 38828),
-(801, 38829),
-(802, 38830),
-(803, 38831),
-(804, 38832),
-(805, 38833),
-(806, 38834),
-(807, 38835),
-(808, 38836),
-(809, 11177),
-(810, 38837),
-(811, 7078),
-(812, 38838),
-(813, 11175),
-(814, 11176),
-(815, 38839),
-(816, 38840),
-(817, 38841),
-(818, 38842),
-(819, 11178),
-(820, 38843),
-(821, 38844),
-(822, 38845),
-(823, 38846),
-(824, 38847),
-(825, 38848),
-(826, 38849),
-(827, 38850),
-(828, 38851),
-(829, 4470),
-(830, 11287),
-(831, 11288),
-(832, 11291),
-(833, 11289),
-(834, 11290),
-(835, 11370),
-(836, 11371),
-(837, 8217),
-(838, 8218),
-(839, 11590),
-(840, 11608),
-(841, 11606),
-(842, 11607),
-(843, 11605),
-(844, 11604),
-(845, 14343),
-(846, 11811),
-(847, 11825),
-(848, 11826),
-(849, 12190),
-(850, 12259),
-(851, 12260),
-(852, 10620),
-(853, 12359),
-(854, 12365),
-(855, 12644),
-(856, 14047),
-(857, 12643),
-(858, 12404),
-(859, 12361),
-(860, 12405),
-(861, 12406),
-(862, 12408),
-(863, 12416),
-(864, 8170),
-(865, 12428),
-(866, 12424),
-(867, 12415),
-(868, 12425),
-(869, 12655),
-(870, 12803),
-(871, 12364),
-(872, 12624),
-(873, 7076),
-(874, 12645),
-(875, 12409),
-(876, 12410),
-(877, 12418),
-(878, 12631),
-(879, 12419),
-(880, 12426),
-(881, 12427),
-(882, 12417),
-(883, 12360),
-(884, 7080),
-(885, 12625),
-(886, 12632),
-(887, 12414),
-(888, 12422),
-(889, 12610),
-(890, 12611),
-(891, 12662),
-(892, 12628),
-(893, 12800),
-(894, 12633),
-(895, 12420),
-(896, 12612),
-(897, 12799),
-(898, 12636),
-(899, 12640),
-(900, 12429),
-(901, 12613),
-(902, 12614),
-(903, 12639),
-(904, 12620),
-(905, 12619),
-(906, 12618),
-(907, 12641),
-(908, 12764),
-(909, 12769),
-(910, 12772),
-(911, 12773),
-(912, 12774),
-(913, 12775),
-(914, 12804),
-(915, 12776),
-(916, 12777),
-(917, 12779),
-(918, 12781),
-(919, 12792),
-(920, 12782),
-(921, 12795),
-(922, 12802),
-(923, 12809),
-(924, 12810),
-(925, 12796),
-(926, 12811),
-(927, 12790),
-(928, 12798),
-(929, 12797),
-(930, 12794),
-(931, 12784),
-(932, 12783),
-(933, 16202),
-(934, 12363),
-(935, 13422),
-(936, 13423),
-(937, 13442),
-(938, 13443),
-(939, 13445),
-(940, 13463),
-(941, 13466),
-(942, 13447),
-(943, 13464),
-(944, 13465),
-(945, 13446),
-(946, 13453),
-(947, 7082),
-(948, 13455),
-(949, 13452),
-(950, 13467),
-(951, 13462),
-(952, 13454),
-(953, 13457),
-(954, 13456),
-(955, 13458),
-(956, 13461),
-(957, 13459),
-(958, 13460),
-(959, 13444),
-(960, 25867),
-(961, 25868),
-(962, 22794),
-(963, 23571),
-(964, 13503),
-(965, 13506),
-(966, 13468),
-(967, 13510),
-(968, 13511),
-(969, 13512),
-(970, 13513),
-(971, 14048),
-(972, 14341),
-(973, 13856),
-(974, 13869),
-(975, 13868),
-(976, 14046),
-(977, 14227),
-(978, 13858),
-(979, 13857),
-(980, 14042),
-(981, 13860),
-(982, 14143),
-(983, 13870),
-(984, 14043),
-(985, 14142),
-(986, 14100),
-(987, 14101),
-(988, 14141),
-(989, 13863),
-(990, 14044),
-(991, 14256),
-(992, 14107),
-(993, 14103),
-(994, 14132),
-(995, 14134),
-(996, 13864),
-(997, 13871),
-(998, 14045),
-(999, 14136),
-(1000, 14108),
-(1001, 13865),
-(1002, 14104),
-(1003, 14342),
-(1004, 14137),
-(1005, 14144),
-(1006, 14111),
-(1007, 13866),
-(1008, 14155),
-(1009, 14128),
-(1010, 14138),
-(1011, 14139),
-(1012, 13867),
-(1013, 14130),
-(1014, 14106),
-(1015, 14140),
-(1016, 14112),
-(1017, 13926),
-(1018, 14146),
-(1019, 14344),
-(1020, 17012),
-(1021, 14156),
-(1022, 14154),
-(1023, 14152),
-(1024, 14153),
-(1025, 8171),
-(1026, 15409),
-(1027, 15407),
-(1028, 15408),
-(1029, 15077),
-(1030, 15083),
-(1031, 15412),
-(1032, 15045),
-(1033, 15076),
-(1034, 15084),
-(1035, 15074),
-(1036, 15414),
-(1037, 15047),
-(1038, 15091),
-(1039, 15564),
-(1040, 15054),
-(1041, 15046),
-(1042, 15061),
-(1043, 15067),
-(1044, 15073),
-(1045, 15078),
-(1046, 15092),
-(1047, 15071),
-(1048, 15057),
-(1049, 15419),
-(1050, 15064),
-(1051, 15082),
-(1052, 15086),
-(1053, 15093),
-(1054, 15072),
-(1055, 15069),
-(1056, 15079),
-(1057, 15053),
-(1058, 15415),
-(1059, 15048),
-(1060, 15060),
-(1061, 15056),
-(1062, 15065),
-(1063, 15075),
-(1064, 15094),
-(1065, 15087),
-(1066, 15417),
-(1067, 15063),
-(1068, 15416),
-(1069, 15050),
-(1070, 15066),
-(1071, 15070),
-(1072, 15080),
-(1073, 15049),
-(1074, 15058),
-(1075, 15095),
-(1076, 15088),
-(1077, 15410),
-(1078, 15138),
-(1079, 15051),
-(1080, 15059),
-(1081, 15062),
-(1082, 15085),
-(1083, 15081),
-(1084, 15055),
-(1085, 15090),
-(1086, 15096),
-(1087, 15068),
-(1088, 15141),
-(1089, 15052),
-(1090, 15802),
-(1091, 15846),
-(1092, 15869),
-(1093, 15870),
-(1094, 15871),
-(1095, 15872),
-(1096, 15992),
-(1097, 15994),
-(1098, 15993),
-(1099, 15995),
-(1100, 15996),
-(1101, 15999),
-(1102, 16000),
-(1103, 16004),
-(1104, 16005),
-(1105, 15997),
-(1106, 16023),
-(1107, 16006),
-(1108, 16009),
-(1109, 16008),
-(1110, 16022),
-(1111, 16040),
-(1112, 16007),
-(1113, 38852),
-(1114, 38853),
-(1115, 16204),
-(1116, 16203),
-(1117, 38854),
-(1118, 38855),
-(1119, 38856),
-(1120, 38857),
-(1121, 38858),
-(1122, 38859),
-(1123, 38860),
-(1124, 38861),
-(1125, 38862),
-(1126, 38863),
-(1127, 38864),
-(1128, 38865),
-(1129, 38866),
-(1130, 38867),
-(1131, 38868),
-(1132, 38869),
-(1133, 38870),
-(1134, 38871),
-(1135, 38872),
-(1136, 38873),
-(1137, 38874),
-(1138, 38875),
-(1139, 16206),
-(1140, 16207),
-(1141, 17010),
-(1142, 17011),
-(1143, 16980),
-(1144, 16979),
-(1145, 16982),
-(1146, 16983),
-(1147, 16984),
-(1148, 16989),
-(1149, 16988),
-(1150, 17014),
-(1151, 17013),
-(1152, 11382),
-(1153, 17015),
-(1154, 17016),
-(1155, 17203),
-(1156, 17193),
-(1157, 17704),
-(1158, 17708),
-(1159, 38876),
-(1160, 17202),
-(1161, 17716),
-(1162, 17721),
-(1163, 17723),
-(1164, 18232),
-(1165, 18238),
-(1166, 18251),
-(1167, 18256),
-(1168, 18253),
-(1169, 38877),
-(1170, 38878),
-(1171, 18262),
-(1172, 18263),
-(1173, 18283),
-(1174, 18282),
-(1175, 18168),
-(1176, 18294),
-(1177, 18240),
-(1178, 18258),
-(1179, 18405),
-(1180, 18407),
-(1181, 18408),
-(1182, 18409),
-(1183, 18413),
-(1184, 18486),
-(1185, 18504),
-(1186, 11754),
-(1187, 18506),
-(1188, 18512),
-(1189, 18508),
-(1190, 12607),
-(1191, 18509),
-(1192, 18510),
-(1193, 12753),
-(1194, 18511),
-(1195, 18562),
-(1196, 18567),
-(1197, 17771),
-(1198, 9318),
-(1199, 9312),
-(1200, 9313),
-(1201, 18588),
-(1202, 18641),
-(1203, 18631),
-(1204, 18634),
-(1205, 18587),
-(1206, 18637),
-(1207, 18594),
-(1208, 18638),
-(1209, 18639),
-(1210, 18645),
-(1211, 18660),
-(1212, 18662),
-(1213, 18948),
-(1214, 18984),
-(1215, 18986),
-(1216, 19026),
-(1217, 19043),
-(1218, 19048),
-(1219, 19051),
-(1220, 19057),
-(1221, 19148),
-(1222, 19164),
-(1223, 19166),
-(1224, 19167),
-(1225, 19170),
-(1226, 19168),
-(1227, 19169),
-(1228, 19047),
-(1229, 19050),
-(1230, 19056),
-(1231, 19059),
-(1232, 19156),
-(1233, 19165),
-(1234, 19044),
-(1235, 19049),
-(1236, 19052),
-(1237, 19058),
-(1238, 19149),
-(1239, 19157),
-(1240, 19162),
-(1241, 19163),
-(1242, 38879),
-(1243, 38880),
-(1244, 38881),
-(1245, 38882),
-(1246, 38883),
-(1247, 38884),
-(1248, 19726),
-(1249, 19682),
-(1250, 19683),
-(1251, 19684),
-(1252, 19767),
-(1253, 19685),
-(1254, 19686),
-(1255, 19687),
-(1256, 19768),
-(1257, 19688),
-(1258, 19689),
-(1259, 19774),
-(1260, 19690),
-(1261, 19691),
-(1262, 19692),
-(1263, 19693),
-(1264, 19694),
-(1265, 19695),
-(1266, 12938),
-(1267, 19943),
-(1268, 19931),
-(1269, 19999),
-(1270, 19998),
-(1271, 20007),
-(1272, 20002),
-(1273, 20008),
-(1274, 20004),
-(1275, 20039),
-(1276, 20295),
-(1277, 20296),
-(1278, 20381),
-(1279, 20380),
-(1280, 20500),
-(1281, 20498),
-(1282, 20481),
-(1283, 20480),
-(1284, 20479),
-(1285, 20501),
-(1286, 20476),
-(1287, 20477),
-(1288, 20478),
-(1289, 20520),
-(1290, 20538),
-(1291, 20539),
-(1292, 20537),
-(1293, 20549),
-(1294, 20551),
-(1295, 20550),
-(1296, 20575),
-(1297, 22448),
-(1298, 22446),
-(1299, 21886),
-(1300, 38885),
-(1301, 38886),
-(1302, 38887),
-(1303, 38888),
-(1304, 38889),
-(1305, 22451),
-(1306, 38890),
-(1307, 38891),
-(1308, 38892),
-(1309, 38893),
-(1310, 22456),
-(1311, 38894),
-(1312, 22452),
-(1313, 38895),
-(1314, 17034),
-(1315, 20744),
-(1316, 20745),
-(1317, 17035),
-(1318, 20746),
-(1319, 20747),
-(1320, 20750),
-(1321, 20749),
-(1322, 20748),
-(1323, 20816),
-(1324, 20817),
-(1325, 20818),
-(1326, 20821),
-(1327, 20820),
-(1328, 20823),
-(1329, 20826),
-(1330, 20827),
-(1331, 20828),
-(1332, 20831),
-(1333, 20832),
-(1334, 20833),
-(1335, 20830),
-(1336, 20907),
-(1337, 20906),
-(1338, 20909),
-(1339, 20950),
-(1340, 20954),
-(1341, 20955),
-(1342, 20956),
-(1343, 20963),
-(1344, 20958),
-(1345, 20966),
-(1346, 20959),
-(1347, 20960),
-(1348, 20961),
-(1349, 20967),
-(1350, 21277),
-(1351, 21340),
-(1352, 21341),
-(1353, 21342),
-(1354, 21546),
-(1355, 21278),
-(1356, 21154),
-(1357, 21542),
-(1358, 21558),
-(1359, 21559),
-(1360, 21557),
-(1361, 21589),
-(1362, 21590),
-(1363, 21592),
-(1364, 21571),
-(1365, 21574),
-(1366, 21576),
-(1367, 21714),
-(1368, 21716),
-(1369, 21718),
-(1370, 21569),
-(1371, 21570),
-(1372, 21877),
-(1373, 21840),
-(1374, 21841),
-(1375, 22445),
-(1376, 21842),
-(1377, 21881),
-(1378, 21843),
-(1379, 21882),
-(1380, 21844),
-(1381, 21885),
-(1382, 21845),
-(1383, 24271),
-(1384, 21884),
-(1385, 21846),
-(1386, 21847),
-(1387, 21848),
-(1388, 21858),
-(1389, 24272),
-(1390, 21869),
-(1391, 21870),
-(1392, 21871),
-(1393, 21872),
-(1394, 21873),
-(1395, 21874),
-(1396, 22457),
-(1397, 21875),
-(1398, 21876),
-(1399, 21849),
-(1400, 21850),
-(1401, 21887),
-(1402, 21851),
-(1403, 21852),
-(1404, 21853),
-(1405, 21854),
-(1406, 21855),
-(1407, 21859),
-(1408, 21860),
-(1409, 21861),
-(1410, 21862),
-(1411, 21863),
-(1412, 21864),
-(1413, 21865),
-(1414, 21866),
-(1415, 21867),
-(1416, 21868),
-(1417, 21748),
-(1418, 21756),
-(1419, 20964),
-(1420, 21758),
-(1421, 21755),
-(1422, 21752),
-(1423, 20969),
-(1424, 21760),
-(1425, 21763),
-(1426, 21764),
-(1427, 21765),
-(1428, 21754),
-(1429, 21753),
-(1430, 21766),
-(1431, 21769),
-(1432, 21767),
-(1433, 21768),
-(1434, 21774),
-(1435, 21775),
-(1436, 21790),
-(1437, 21777),
-(1438, 21778),
-(1439, 21791),
-(1440, 18335),
-(1441, 21784),
-(1442, 21789),
-(1443, 21792),
-(1444, 21929),
-(1445, 21779),
-(1446, 21793),
-(1447, 21780),
-(1448, 21931),
-(1449, 21932),
-(1450, 21933),
-(1451, 21934),
-(1452, 22202),
-(1453, 22197),
-(1454, 22203),
-(1455, 22198),
-(1456, 22196),
-(1457, 22195),
-(1458, 22194),
-(1459, 22191),
-(1460, 22246),
-(1461, 22248),
-(1462, 22249),
-(1463, 11040),
-(1464, 22251),
-(1465, 22252),
-(1466, 22385),
-(1467, 22384),
-(1468, 20725),
-(1469, 22383),
-(1470, 38896),
-(1471, 38897),
-(1472, 22447),
-(1473, 38898),
-(1474, 38899),
-(1475, 38900),
-(1476, 38901),
-(1477, 22449),
-(1478, 38902),
-(1479, 38903),
-(1480, 38904),
-(1481, 38905),
-(1482, 38906),
-(1483, 22573),
-(1484, 22574),
-(1485, 22572),
-(1486, 22578),
-(1487, 38907),
-(1488, 38908),
-(1489, 38909),
-(1490, 37603),
-(1491, 22450),
-(1492, 38910),
-(1493, 38911),
-(1494, 34054),
-(1495, 38912),
-(1496, 38913),
-(1497, 38914),
-(1498, 38915),
-(1499, 38917),
-(1500, 38918),
-(1501, 38919),
-(1502, 38920),
-(1503, 38921),
-(1504, 38922),
-(1505, 38923),
-(1506, 38924),
-(1507, 38925),
-(1508, 38926),
-(1509, 38927),
-(1510, 22791),
-(1511, 22521),
-(1512, 22792),
-(1513, 22522),
-(1514, 22460),
-(1515, 22459),
-(1516, 22682),
-(1517, 22654),
-(1518, 22652),
-(1519, 22658),
-(1520, 22655),
-(1521, 22660),
-(1522, 22661),
-(1523, 22662),
-(1524, 22663),
-(1525, 22664),
-(1526, 22666),
-(1527, 22665),
-(1528, 22669),
-(1529, 22670),
-(1530, 22671),
-(1531, 22728),
-(1532, 22762),
-(1533, 22763),
-(1534, 22764),
-(1535, 22759),
-(1536, 22760),
-(1537, 22761),
-(1538, 22756),
-(1539, 22757),
-(1540, 22758),
-(1541, 22787),
-(1542, 22785),
-(1543, 22823),
-(1544, 22824),
-(1545, 22786),
-(1546, 22825),
-(1547, 22826),
-(1548, 22790),
-(1549, 22827),
-(1550, 22789),
-(1551, 22828),
-(1552, 22829),
-(1553, 22830),
-(1554, 22831),
-(1555, 22871),
-(1556, 22832),
-(1557, 22833),
-(1558, 22834),
-(1559, 22835),
-(1560, 22836),
-(1561, 22837),
-(1562, 22838),
-(1563, 22839),
-(1564, 22840),
-(1565, 22793),
-(1566, 22841),
-(1567, 22842),
-(1568, 22844),
-(1569, 22845),
-(1570, 22846),
-(1571, 22847),
-(1572, 22848),
-(1573, 22849),
-(1574, 22850),
-(1575, 22851),
-(1576, 22853),
-(1577, 22854),
-(1578, 22861),
-(1579, 22866),
-(1580, 23077),
-(1581, 23094),
-(1582, 23095),
-(1583, 23096),
-(1584, 23097),
-(1585, 23098),
-(1586, 23099),
-(1587, 23100),
-(1588, 23101),
-(1589, 23079),
-(1590, 23103),
-(1591, 23104),
-(1592, 23105),
-(1593, 23106),
-(1594, 23107),
-(1595, 23108),
-(1596, 23109),
-(1597, 23110),
-(1598, 23111),
-(1599, 23112),
-(1600, 23113),
-(1601, 23114),
-(1602, 23115),
-(1603, 23116),
-(1604, 23117),
-(1605, 23118),
-(1606, 23119),
-(1607, 23120),
-(1608, 23121),
-(1609, 23424),
-(1610, 23445),
-(1611, 23425),
-(1612, 23446),
-(1613, 23427),
-(1614, 23447),
-(1615, 23448),
-(1616, 23426),
-(1617, 23449),
-(1618, 23482),
-(1619, 23484),
-(1620, 23487),
-(1621, 23488),
-(1622, 23489),
-(1623, 23493),
-(1624, 23491),
-(1625, 23494),
-(1626, 23490),
-(1627, 23497),
-(1628, 23498),
-(1629, 23499),
-(1630, 23502),
-(1631, 23503),
-(1632, 23504),
-(1633, 23505),
-(1634, 23506),
-(1635, 23508),
-(1636, 23507),
-(1637, 23573),
-(1638, 23510),
-(1639, 23509),
-(1640, 23511),
-(1641, 23512),
-(1642, 23515),
-(1643, 23516),
-(1644, 23514),
-(1645, 23513),
-(1646, 23517),
-(1647, 23518),
-(1648, 23519),
-(1649, 23572),
-(1650, 23532),
-(1651, 23524),
-(1652, 23523),
-(1653, 23525),
-(1654, 23520),
-(1655, 23521),
-(1656, 23522),
-(1657, 23526),
-(1658, 23527),
-(1659, 23528),
-(1660, 23529),
-(1661, 23530),
-(1662, 23531),
-(1663, 23533),
-(1664, 23534),
-(1665, 23535),
-(1666, 23536),
-(1667, 23537),
-(1668, 23538),
-(1669, 23539),
-(1670, 23540),
-(1671, 23541),
-(1672, 23542),
-(1673, 23543),
-(1674, 23544),
-(1675, 23546),
-(1676, 23554),
-(1677, 23555),
-(1678, 23556),
-(1679, 23575),
-(1680, 23576),
-(1681, 23781),
-(1682, 23782),
-(1683, 23783),
-(1684, 23784),
-(1685, 23785),
-(1686, 23786),
-(1687, 23787),
-(1688, 23736),
-(1689, 23737),
-(1690, 23742),
-(1691, 23746),
-(1692, 23747),
-(1693, 23439),
-(1694, 23748),
-(1695, 23793),
-(1696, 23758),
-(1697, 23761),
-(1698, 23762),
-(1699, 23441),
-(1700, 23763),
-(1701, 23764),
-(1702, 23440),
-(1703, 23765),
-(1704, 23438),
-(1705, 23766),
-(1706, 23767),
-(1707, 23768),
-(1708, 23769),
-(1709, 23770),
-(1710, 23771),
-(1711, 23772),
-(1712, 34504),
-(1713, 23774),
-(1714, 36913),
-(1715, 41163),
-(1716, 39681),
-(1717, 23775),
-(1718, 23819),
-(1719, 23821),
-(1720, 23820),
-(1721, 33092),
-(1722, 33093),
-(1723, 23824),
-(1724, 17020),
-(1725, 23826),
-(1726, 23827),
-(1727, 23831),
-(1728, 23836),
-(1729, 23838),
-(1730, 23839),
-(1731, 23841),
-(1732, 23835),
-(1733, 23825),
-(1734, 23832),
-(1735, 23437),
-(1736, 23828),
-(1737, 23436),
-(1738, 23829),
-(1739, 24074),
-(1740, 24075),
-(1741, 24076),
-(1742, 31079),
-(1743, 24077),
-(1744, 24078),
-(1745, 24079),
-(1746, 24080),
-(1747, 24082),
-(1748, 24085),
-(1749, 24086),
-(1750, 24087),
-(1751, 24088),
-(1752, 24089),
-(1753, 24092),
-(1754, 24093),
-(1755, 24095),
-(1756, 24097),
-(1757, 24098),
-(1758, 24106),
-(1759, 24110),
-(1760, 24114),
-(1761, 24116),
-(1762, 24117),
-(1763, 24121),
-(1764, 24122),
-(1765, 24123),
-(1766, 24124),
-(1767, 24125),
-(1768, 24126),
-(1769, 24127),
-(1770, 24128),
-(1771, 24027),
-(1772, 24028),
-(1773, 24029),
-(1774, 24030),
-(1775, 24031),
-(1776, 24032),
-(1777, 24036),
-(1778, 24033),
-(1779, 24037),
-(1780, 24039),
-(1781, 24047),
-(1782, 24048),
-(1783, 24051),
-(1784, 24050),
-(1785, 24052),
-(1786, 24053),
-(1787, 24054),
-(1788, 24055),
-(1789, 24056),
-(1790, 24057),
-(1791, 24058),
-(1792, 24059),
-(1793, 24060),
-(1794, 24061),
-(1795, 24062),
-(1796, 24066),
-(1797, 24065),
-(1798, 24067),
-(1799, 24035),
-(1800, 24273),
-(1801, 24275),
-(1802, 24274),
-(1803, 24276),
-(1804, 24249),
-(1805, 24250),
-(1806, 24251),
-(1807, 24252),
-(1808, 24253),
-(1809, 24254),
-(1810, 24255),
-(1811, 24256),
-(1812, 24257),
-(1813, 24258),
-(1814, 24259),
-(1815, 24260),
-(1816, 24261),
-(1817, 24262),
-(1818, 24263),
-(1819, 24264),
-(1820, 24266),
-(1821, 24267),
-(1822, 24270),
-(1823, 24268),
-(1824, 24269),
-(1825, 25438),
-(1826, 25439),
-(1827, 25498),
-(1828, 23559),
-(1829, 25521),
-(1830, 25649),
-(1831, 25650),
-(1832, 25651),
-(1833, 25652),
-(1834, 25653),
-(1835, 25700),
-(1836, 25654),
-(1837, 25655),
-(1838, 25656),
-(1839, 25657),
-(1840, 25662),
-(1841, 25661),
-(1842, 25660),
-(1843, 25659),
-(1844, 25669),
-(1845, 25670),
-(1846, 25668),
-(1847, 25671),
-(1848, 25673),
-(1849, 25674),
-(1850, 25675),
-(1851, 25676),
-(1852, 25679),
-(1853, 29539),
-(1854, 25680),
-(1855, 25681),
-(1856, 25683),
-(1857, 25682),
-(1858, 25707),
-(1859, 25685),
-(1860, 25686),
-(1861, 25687),
-(1862, 25708),
-(1863, 25689),
-(1864, 25690),
-(1865, 25691),
-(1866, 25699),
-(1867, 25695),
-(1868, 25697),
-(1869, 25696),
-(1870, 25694),
-(1871, 25692),
-(1872, 25693),
-(1873, 25843),
-(1874, 25844),
-(1875, 25845),
-(1876, 22461),
-(1877, 22462),
-(1878, 22463),
-(1879, 25880),
-(1880, 25881),
-(1881, 25882),
-(1882, 25883),
-(1883, 25884),
-(1884, 25886),
-(1885, 25896),
-(1886, 25897),
-(1887, 25898),
-(1888, 25899),
-(1889, 25901),
-(1890, 25890),
-(1891, 25893),
-(1892, 25894),
-(1893, 25895),
-(1894, 28100),
-(1895, 28101),
-(1896, 28102),
-(1897, 28103),
-(1898, 28104),
-(1899, 38928),
-(1900, 38929),
-(1901, 38930),
-(1902, 38931),
-(1903, 38932),
-(1904, 38933),
-(1905, 38934),
-(1906, 38935),
-(1907, 38936),
-(1908, 38937),
-(1909, 38938),
-(1910, 38939),
-(1911, 38940),
-(1912, 38941),
-(1913, 38942),
-(1914, 38943),
-(1915, 38944),
-(1916, 38945),
-(1917, 38946),
-(1918, 28290),
-(1919, 23563),
-(1920, 23564),
-(1921, 28483),
-(1922, 28484),
-(1923, 28425),
-(1924, 28426),
-(1925, 28428),
-(1926, 28429),
-(1927, 28431),
-(1928, 28432),
-(1929, 28434),
-(1930, 28435),
-(1931, 28437),
-(1932, 28438),
-(1933, 28440),
-(1934, 28441),
-(1935, 28595),
-(1936, 28420),
-(1937, 28421),
-(1938, 29157),
-(1939, 29158),
-(1940, 29159),
-(1941, 29160),
-(1942, 29201),
-(1943, 29202),
-(1944, 29203),
-(1945, 29204),
-(1946, 29483),
-(1947, 29485),
-(1948, 29486),
-(1949, 29487),
-(1950, 29488),
-(1951, 29489),
-(1952, 29490),
-(1953, 29491),
-(1954, 29493),
-(1955, 29492),
-(1956, 29540),
-(1957, 29494),
-(1958, 29495),
-(1959, 29496),
-(1960, 29497),
-(1961, 29498),
-(1962, 29499),
-(1963, 29500),
-(1964, 29532),
-(1965, 29548),
-(1966, 29531),
-(1967, 29528),
-(1968, 29529),
-(1969, 29547),
-(1970, 29530),
-(1971, 29533),
-(1972, 29535),
-(1973, 29534),
-(1974, 29536),
-(1975, 29502),
-(1976, 29503),
-(1977, 29504),
-(1978, 29505),
-(1979, 29506),
-(1980, 29507),
-(1981, 29508),
-(1982, 29512),
-(1983, 29509),
-(1984, 29510),
-(1985, 29511),
-(1986, 29514),
-(1987, 29515),
-(1988, 29516),
-(1989, 29517),
-(1990, 29519),
-(1991, 29520),
-(1992, 29521),
-(1993, 29522),
-(1994, 29524),
-(1995, 29523),
-(1996, 29525),
-(1997, 29526),
-(1998, 29527),
-(1999, 29964),
-(2000, 29970),
-(2001, 29971),
-(2002, 29973),
-(2003, 29974),
-(2004, 29975),
-(2005, 30069),
-(2006, 30070),
-(2007, 30071),
-(2008, 30072),
-(2009, 30073),
-(2010, 30074),
-(2011, 30076),
-(2012, 30077),
-(2013, 30086),
-(2014, 30087),
-(2015, 30088),
-(2016, 30089),
-(2017, 30093),
-(2018, 30183),
-(2019, 23565),
-(2020, 28485),
-(2021, 28427),
-(2022, 28430),
-(2023, 28433),
-(2024, 28436),
-(2025, 28439),
-(2026, 28442),
-(2027, 30038),
-(2028, 30036),
-(2029, 30037),
-(2030, 30035),
-(2031, 30042),
-(2032, 30040),
-(2033, 30046),
-(2034, 30044),
-(2035, 30041),
-(2036, 30039),
-(2037, 30045),
-(2038, 30043),
-(2039, 30034),
-(2040, 30032),
-(2041, 30033),
-(2042, 30031),
-(2043, 30419),
-(2044, 30420),
-(2045, 30421),
-(2046, 30422),
-(2047, 30459),
-(2048, 30460),
-(2049, 30461),
-(2050, 30465),
-(2051, 30463),
-(2052, 30464),
-(2053, 30542),
-(2054, 30544),
-(2055, 30804),
-(2056, 30825),
-(2057, 30831),
-(2058, 30837),
-(2059, 30838),
-(2060, 30839),
-(2061, 24243),
-(2062, 31080),
-(2063, 31154),
-(2064, 31364),
-(2065, 31367),
-(2066, 31368),
-(2067, 31369),
-(2068, 31370),
-(2069, 31371),
-(2070, 31398),
-(2071, 31399),
-(2072, 31679),
-(2073, 31677),
-(2074, 31676),
-(2075, 31860),
-(2076, 31861),
-(2077, 31862),
-(2078, 31864),
-(2079, 31865),
-(2080, 31863),
-(2081, 31866),
-(2082, 31869),
-(2083, 31867),
-(2084, 31868),
-(2085, 32062),
-(2086, 32063),
-(2087, 32067),
-(2088, 32068),
-(2089, 32227),
-(2090, 32193),
-(2091, 32194),
-(2092, 32195),
-(2093, 32196),
-(2094, 32197),
-(2095, 32198),
-(2096, 32199),
-(2097, 32228),
-(2098, 32200),
-(2099, 32201),
-(2100, 32202),
-(2101, 32203),
-(2102, 32229),
-(2103, 32204),
-(2104, 32205),
-(2105, 32206),
-(2106, 32207),
-(2107, 32208),
-(2108, 32209),
-(2109, 32210),
-(2110, 32230),
-(2111, 32211),
-(2112, 32212),
-(2113, 32213),
-(2114, 32214),
-(2115, 32215),
-(2116, 32216),
-(2117, 32231),
-(2118, 32217),
-(2119, 32218),
-(2120, 32219),
-(2121, 32220),
-(2122, 32221),
-(2123, 32222),
-(2124, 32249),
-(2125, 32223),
-(2126, 32224),
-(2127, 32225),
-(2128, 32226),
-(2129, 32409),
-(2130, 32410),
-(2131, 32423),
-(2132, 32413),
-(2133, 32428),
-(2134, 32398),
-(2135, 32400),
-(2136, 32397),
-(2137, 32394),
-(2138, 32395),
-(2139, 32396),
-(2140, 32393),
-(2141, 32391),
-(2142, 32392),
-(2143, 32389),
-(2144, 32390),
-(2145, 32402),
-(2146, 32403),
-(2147, 32404),
-(2148, 32401),
-(2149, 32420),
-(2150, 32461),
-(2151, 24478),
-(2152, 24479),
-(2153, 32508),
-(2154, 32568),
-(2155, 32570),
-(2156, 32571),
-(2157, 32573),
-(2158, 32582),
-(2159, 32583),
-(2160, 32580),
-(2161, 32581),
-(2162, 32574),
-(2163, 32575),
-(2164, 32577),
-(2165, 32579),
-(2166, 32586),
-(2167, 32587),
-(2168, 32584),
-(2169, 32585),
-(2170, 32756),
-(2171, 32472),
-(2172, 32473),
-(2173, 32474),
-(2174, 32476),
-(2175, 32475),
-(2176, 32478),
-(2177, 32479),
-(2178, 32480),
-(2179, 32494),
-(2180, 32495),
-(2181, 32772),
-(2182, 32774),
-(2183, 32776),
-(2184, 27860),
-(2185, 32833),
-(2186, 32836),
-(2187, 32839),
-(2188, 32849),
-(2189, 32850),
-(2190, 32851),
-(2191, 32852),
-(2192, 33122),
-(2193, 33133),
-(2194, 33134),
-(2195, 33131),
-(2196, 33135),
-(2197, 33143),
-(2198, 33140),
-(2199, 33144),
-(2200, 38947),
-(2201, 27503),
-(2202, 33173),
-(2203, 33185),
-(2204, 33204),
-(2205, 33208),
-(2206, 38948),
-(2207, 33782),
-(2208, 33791),
-(2209, 20475),
-(2210, 32854),
-(2211, 34060),
-(2212, 34249),
-(2213, 34061),
-(2214, 34099),
-(2215, 25719),
-(2216, 34100),
-(2217, 34105),
-(2218, 38949),
-(2219, 34113),
-(2220, 34055),
-(2221, 36860),
-(2222, 38950),
-(2223, 38951),
-(2224, 38953),
-(2225, 35624),
-(2226, 38954),
-(2227, 38955),
-(2228, 35627),
-(2229, 38956),
-(2230, 38959),
-(2231, 38960),
-(2232, 38961),
-(2233, 38962),
-(2234, 34052),
-(2235, 38963),
-(2236, 38964),
-(2237, 38965),
-(2238, 34056),
-(2239, 38966),
-(2240, 38967),
-(2241, 38968),
-(2242, 35622),
-(2243, 38969),
-(2244, 44815),
-(2245, 35625),
-(2246, 38972),
-(2247, 38973),
-(2248, 38974),
-(2249, 38975),
-(2250, 38976),
-(2251, 38977),
-(2252, 38978),
-(2253, 38979),
-(2254, 38980),
-(2255, 38981),
-(2256, 38982),
-(2257, 38984),
-(2258, 38985),
-(2259, 38987),
-(2260, 38988),
-(2261, 38989),
-(2262, 38990),
-(2263, 38991),
-(2264, 38992),
-(2265, 34057),
-(2266, 38993),
-(2267, 35623),
-(2268, 38995),
-(2269, 38997),
-(2270, 34106),
-(2271, 34207),
-(2272, 34220),
-(2273, 34087),
-(2274, 34086),
-(2275, 34085),
-(2276, 34330),
-(2277, 34440),
-(2278, 34482),
-(2279, 34490),
-(2280, 37101),
-(2281, 39354),
-(2282, 1180),
-(2283, 35183),
-(2284, 35185),
-(2285, 35181),
-(2286, 35182),
-(2287, 35184),
-(2288, 34847),
-(2289, 34355),
-(2290, 34356),
-(2291, 34354),
-(2292, 35128),
-(2293, 34357),
-(2294, 34353),
-(2295, 34664),
-(2296, 34362),
-(2297, 34363),
-(2298, 34361),
-(2299, 34359),
-(2300, 34360),
-(2301, 34358),
-(2302, 34366),
-(2303, 34367),
-(2304, 34364),
-(2305, 34365),
-(2306, 34372),
-(2307, 34374),
-(2308, 34370),
-(2309, 34376),
-(2310, 34371),
-(2311, 34373),
-(2312, 34369),
-(2313, 34375),
-(2314, 34380),
-(2315, 34378),
-(2316, 34379),
-(2317, 34377),
-(2318, 35315),
-(2319, 35316),
-(2320, 35318),
-(2321, 38998),
-(2322, 38999),
-(2323, 35501),
-(2324, 35503),
-(2325, 35581),
-(2326, 35693),
-(2327, 35694),
-(2328, 35700),
-(2329, 35702),
-(2330, 35703),
-(2331, 35707),
-(2332, 35748),
-(2333, 35749),
-(2334, 35750),
-(2335, 35751),
-(2336, 39000),
-(2337, 35759),
-(2338, 35758),
-(2339, 35760),
-(2340, 35761),
-(2341, 35945),
-(2342, 39001),
-(2343, 39002),
-(2344, 39003),
-(2345, 39004),
-(2346, 39005),
-(2347, 39006),
-(2348, 955),
-(2349, 1181),
-(2350, 43116),
-(2351, 40924),
-(2352, 43115),
-(2353, 39774),
-(2354, 37168),
-(2355, 39469),
-(2356, 37118),
-(2357, 37503),
-(2358, 36909),
-(2359, 36916),
-(2360, 36912),
-(2361, 6836),
-(2362, 38225),
-(2363, 2290),
-(2364, 43118),
-(2365, 4419),
-(2366, 43120),
-(2367, 39501),
-(2368, 10308),
-(2369, 43122),
-(2370, 27499),
-(2371, 43124),
-(2372, 33458),
-(2373, 43126),
-(2374, 39502),
-(2375, 37091),
-(2376, 37092),
-(2377, 1712),
-(2378, 4424),
-(2379, 10306),
-(2380, 27501),
-(2381, 33460),
-(2382, 37097),
-(2383, 37098),
-(2384, 1711),
-(2385, 4422),
-(2386, 10307),
-(2387, 27502),
-(2388, 33461),
-(2389, 37093),
-(2390, 37094),
-(2391, 38277),
-(2392, 38278),
-(2393, 33568),
-(2394, 38425),
-(2395, 38408),
-(2396, 38410),
-(2397, 38411),
-(2398, 38409),
-(2399, 38407),
-(2400, 38406),
-(2401, 38400),
-(2402, 38401),
-(2403, 38402),
-(2404, 38403),
-(2405, 38404),
-(2406, 38405),
-(2407, 38414),
-(2408, 38416),
-(2409, 38424),
-(2410, 38415),
-(2411, 38413),
-(2412, 38412),
-(2413, 38420),
-(2414, 38422),
-(2415, 38417),
-(2416, 38421),
-(2417, 38419),
-(2418, 38418),
-(2419, 38375),
-(2420, 38376),
-(2421, 38561),
-(2422, 38371),
-(2423, 44128),
-(2424, 38558),
-(2425, 43102),
-(2426, 38373),
-(2427, 38372),
-(2428, 38557),
-(2429, 38374),
-(2430, 38399),
-(2431, 38347),
-(2432, 37705),
-(2433, 38590),
-(2434, 37703),
-(2435, 38591),
-(2436, 38592),
-(2437, 38433),
-(2438, 38437),
-(2439, 39086),
-(2440, 39087),
-(2441, 39088),
-(2442, 39085),
-(2443, 39084),
-(2444, 39083),
-(2445, 32399),
-(2446, 39151),
-(2447, 38682),
-(2448, 39349),
-(2449, 39690),
-(2450, 39334),
-(2451, 40199),
-(2452, 40195),
-(2453, 36918),
-(2454, 39996),
-(2455, 36917),
-(2456, 39900),
-(2457, 39905),
-(2458, 39911),
-(2459, 39906),
-(2460, 36901),
-(2461, 36906),
-(2462, 33447),
-(2463, 36905),
-(2464, 33448),
-(2465, 39671),
-(2466, 36907),
-(2467, 40067),
-(2468, 36903),
-(2469, 39666),
-(2470, 37921),
-(2471, 40068),
-(2472, 36904),
-(2473, 40070),
-(2474, 39907),
-(2475, 39908),
-(2476, 39909),
-(2477, 40072),
-(2478, 40076),
-(2479, 36920),
-(2480, 39912),
-(2481, 39914),
-(2482, 39915),
-(2483, 39916),
-(2484, 39918),
-(2485, 39917),
-(2486, 36926),
-(2487, 39934),
-(2488, 39935),
-(2489, 39942),
-(2490, 39936),
-(2491, 39941),
-(2492, 39943),
-(2493, 39945),
-(2494, 39937),
-(2495, 39944),
-(2496, 39938),
-(2497, 39939),
-(2498, 39933),
-(2499, 39940),
-(2500, 36929),
-(2501, 39947),
-(2502, 39948),
-(2503, 39949),
-(2504, 39950),
-(2505, 39951),
-(2506, 39952),
-(2507, 39953),
-(2508, 39954),
-(2509, 39955),
-(2510, 39946),
-(2511, 39956),
-(2512, 39957),
-(2513, 39958),
-(2514, 39959),
-(2515, 39960),
-(2516, 39961),
-(2517, 39962),
-(2518, 39963),
-(2519, 39964),
-(2520, 39965),
-(2521, 39966),
-(2522, 39967),
-(2523, 36932),
-(2524, 39968),
-(2525, 40077),
-(2526, 40078),
-(2527, 40079),
-(2528, 40081),
-(2529, 36908),
-(2530, 40411),
-(2531, 46376),
-(2532, 37704),
-(2533, 46379),
-(2534, 46377),
-(2535, 40087),
-(2536, 40093),
-(2537, 39974),
-(2538, 39975),
-(2539, 39976),
-(2540, 39977),
-(2541, 39978),
-(2542, 39979),
-(2543, 39980),
-(2544, 39981),
-(2545, 39982),
-(2546, 39983),
-(2547, 39984),
-(2548, 39985),
-(2549, 39986),
-(2550, 39988),
-(2551, 39989),
-(2552, 39990),
-(2553, 39991),
-(2554, 39992),
-(2555, 36923),
-(2556, 39919),
-(2557, 37701),
-(2558, 40213),
-(2559, 37702),
-(2560, 40215),
-(2561, 40217),
-(2562, 40214),
-(2563, 39920),
-(2564, 39927),
-(2565, 40216),
-(2566, 39932),
-(2567, 39997),
-(2568, 39998),
-(2569, 39999),
-(2570, 40000),
-(2571, 40001),
-(2572, 40002),
-(2573, 40003),
-(2574, 36924),
-(2575, 40008),
-(2576, 40009),
-(2577, 40010),
-(2578, 40011),
-(2579, 36921),
-(2580, 40012),
-(2581, 40013),
-(2582, 40014),
-(2583, 40015),
-(2584, 40016),
-(2585, 40017),
-(2586, 36927),
-(2587, 40022),
-(2588, 40023),
-(2589, 40024),
-(2590, 40025),
-(2591, 40026),
-(2592, 40027),
-(2593, 40028),
-(2594, 40029),
-(2595, 40030),
-(2596, 40031),
-(2597, 40032),
-(2598, 40033),
-(2599, 40034),
-(2600, 36930),
-(2601, 40037),
-(2602, 40038),
-(2603, 40039),
-(2604, 40040),
-(2605, 40043),
-(2606, 40044),
-(2607, 40045),
-(2608, 40046),
-(2609, 40047),
-(2610, 40048),
-(2611, 40049),
-(2612, 40050),
-(2613, 40051),
-(2614, 40052),
-(2615, 40053),
-(2616, 40054),
-(2617, 40055),
-(2618, 40056),
-(2619, 40057),
-(2620, 40058),
-(2621, 36933),
-(2622, 40085),
-(2623, 40086),
-(2624, 40088),
-(2625, 40089),
-(2626, 40090),
-(2627, 40091),
-(2628, 40092),
-(2629, 40095),
-(2630, 40099),
-(2631, 40102),
-(2632, 40104),
-(2633, 40094),
-(2634, 40096),
-(2635, 40100),
-(2636, 40103),
-(2637, 40105),
-(2638, 40098),
-(2639, 40101),
-(2640, 40106),
-(2641, 39910),
-(2642, 40041),
-(2643, 40248),
-(2644, 40059),
-(2645, 46378),
-(2646, 40073),
-(2647, 40097),
-(2648, 40211),
-(2649, 40212),
-(2650, 39683),
-(2651, 39684),
-(2652, 40533),
-(2653, 39688),
-(2654, 40668),
-(2655, 40669),
-(2656, 40671),
-(2657, 40672),
-(2658, 40674),
-(2659, 40673),
-(2660, 40675),
-(2661, 40670),
-(2662, 40942),
-(2663, 40949),
-(2664, 40950),
-(2665, 40951),
-(2666, 40952),
-(2667, 40953),
-(2668, 40943),
-(2669, 40954),
-(2670, 40955),
-(2671, 40956),
-(2672, 40957),
-(2673, 40958),
-(2674, 40959),
-(2675, 41117),
-(2676, 41113),
-(2677, 41114),
-(2678, 41116),
-(2679, 41126),
-(2680, 41127),
-(2681, 41128),
-(2682, 41129),
-(2683, 41181),
-(2684, 41182),
-(2685, 41183),
-(2686, 41184),
-(2687, 41185),
-(2688, 41186),
-(2689, 41187),
-(2690, 41188),
-(2691, 41189),
-(2692, 41190),
-(2693, 37700),
-(2694, 41238),
-(2695, 41239),
-(2696, 41240),
-(2697, 41241),
-(2698, 41242),
-(2699, 41243),
-(2700, 41245),
-(2701, 37663),
-(2702, 36910),
-(2703, 41264),
-(2704, 40769),
-(2705, 41355),
-(2706, 41356),
-(2707, 41357),
-(2708, 41344),
-(2709, 41345),
-(2710, 41346),
-(2711, 41354),
-(2712, 41351),
-(2713, 41352),
-(2714, 41348),
-(2715, 41349),
-(2716, 41347),
-(2717, 41353),
-(2718, 41350),
-(2719, 41257),
-(2720, 41383),
-(2721, 41384),
-(2722, 41386),
-(2723, 41387),
-(2724, 41388),
-(2725, 41391),
-(2726, 41392),
-(2727, 41394),
-(2728, 41266),
-(2729, 41377),
-(2730, 41375),
-(2731, 41378),
-(2732, 41379),
-(2733, 41285),
-(2734, 41307),
-(2735, 41333),
-(2736, 41335),
-(2737, 41339),
-(2738, 41400),
-(2739, 41334),
-(2740, 41401),
-(2741, 41395),
-(2742, 41396),
-(2743, 41397),
-(2744, 41398),
-(2745, 41380),
-(2746, 41381),
-(2747, 41382),
-(2748, 41385),
-(2749, 41389),
-(2750, 41376),
-(2751, 41611),
-(2752, 41745),
-(2753, 41974),
-(2754, 41975),
-(2755, 41976),
-(2756, 33470),
-(2757, 41509),
-(2758, 41510),
-(2759, 41511),
-(2760, 38426),
-(2761, 41548),
-(2762, 41513),
-(2763, 41515),
-(2764, 44211),
-(2765, 41520),
-(2766, 41521),
-(2767, 41522),
-(2768, 36783),
-(2769, 41523),
-(2770, 41525),
-(2771, 41528),
-(2772, 41543),
-(2773, 41546),
-(2774, 41551),
-(2775, 41549),
-(2776, 41545),
-(2777, 41550),
-(2778, 41544),
-(2779, 42253),
-(2780, 41553),
-(2781, 41554),
-(2782, 41555),
-(2783, 41248),
-(2784, 41249),
-(2785, 41251),
-(2786, 41250),
-(2787, 41252),
-(2788, 41253),
-(2789, 41254),
-(2790, 41255),
-(2791, 41594),
-(2792, 41593),
-(2793, 41595),
-(2794, 41597),
-(2795, 41600),
-(2796, 41598),
-(2797, 41599),
-(2798, 41601),
-(2799, 41602),
-(2800, 41603),
-(2801, 41604),
-(2802, 41607),
-(2803, 41608),
-(2804, 36784),
-(2805, 41609),
-(2806, 41610),
-(2807, 41984),
-(2808, 41985),
-(2809, 41986),
-(2810, 42093),
-(2811, 42095),
-(2812, 42096),
-(2813, 42100),
-(2814, 42103),
-(2815, 42101),
-(2816, 42111),
-(2817, 42102),
-(2818, 42113),
-(2819, 41519),
-(2820, 41512),
-(2821, 42225),
-(2822, 42142),
-(2823, 42143),
-(2824, 42144),
-(2825, 36766),
-(2826, 42151),
-(2827, 42152),
-(2828, 42148),
-(2829, 42153),
-(2830, 42146),
-(2831, 42158),
-(2832, 42154),
-(2833, 42150),
-(2834, 42156),
-(2835, 42149),
-(2836, 36767),
-(2837, 42145),
-(2838, 42155),
-(2839, 42157),
-(2840, 42336),
-(2841, 42337),
-(2842, 42338),
-(2843, 42339),
-(2844, 42340),
-(2845, 42341),
-(2846, 42395),
-(2847, 42413),
-(2848, 42418),
-(2849, 41367),
-(2850, 42420),
-(2851, 42421),
-(2852, 42435),
-(2853, 42443),
-(2854, 42500),
-(2855, 42508),
-(2856, 40892),
-(2857, 40771),
-(2858, 40893),
-(2859, 7005),
-(2860, 2901),
-(2861, 5956),
-(2862, 40772),
-(2863, 40536),
-(2864, 39682),
-(2865, 41112),
-(2866, 40767),
-(2867, 40865),
-(2868, 44951),
-(2869, 41121),
-(2870, 41146),
-(2871, 40768),
-(2872, 40895),
-(2873, 41164),
-(2874, 41165),
-(2875, 37567),
-(2876, 42546),
-(2877, 41167),
-(2878, 41168),
-(2879, 42549),
-(2880, 42550),
-(2881, 42552),
-(2882, 42553),
-(2883, 42554),
-(2884, 42555),
-(2885, 42642),
-(2886, 42643),
-(2887, 42644),
-(2888, 42645),
-(2889, 42646),
-(2890, 42647),
-(2891, 42641),
-(2892, 40109),
-(2893, 42701),
-(2894, 42702),
-(2895, 42723),
-(2896, 42727),
-(2897, 42729),
-(2898, 42730),
-(2899, 42724),
-(2900, 42726),
-(2901, 42725),
-(2902, 42728),
-(2903, 42551),
-(2904, 40896),
-(2905, 40899),
-(2906, 40914),
-(2907, 40920),
-(2908, 40908),
-(2909, 40919),
-(2910, 40915),
-(2911, 40900),
-(2912, 40923),
-(2913, 40903),
-(2914, 40909),
-(2915, 40912),
-(2916, 40913),
-(2917, 40902),
-(2918, 40901),
-(2919, 40921),
-(2920, 40916),
-(2921, 40906),
-(2922, 40897),
-(2923, 40922),
-(2924, 44922),
-(2925, 42734),
-(2926, 42735),
-(2927, 42736),
-(2928, 42737),
-(2929, 42738),
-(2930, 42739),
-(2931, 42741),
-(2932, 42742),
-(2933, 42743),
-(2934, 42744),
-(2935, 42745),
-(2936, 42746),
-(2937, 42747),
-(2938, 42748),
-(2939, 42749),
-(2940, 42750),
-(2941, 42751),
-(2942, 42752),
-(2943, 42753),
-(2944, 42754),
-(2945, 44920),
-(2946, 44955),
-(2947, 42897),
-(2948, 42898),
-(2949, 42899),
-(2950, 42900),
-(2951, 42901),
-(2952, 42902),
-(2953, 42903),
-(2954, 42904),
-(2955, 42905),
-(2956, 42906),
-(2957, 42907),
-(2958, 42908),
-(2959, 42909),
-(2960, 42910),
-(2961, 42911),
-(2962, 42912),
-(2963, 42913),
-(2964, 42914),
-(2965, 42915),
-(2966, 42916),
-(2967, 42917),
-(2968, 41101),
-(2969, 41104),
-(2970, 41107),
-(2971, 41096),
-(2972, 41099),
-(2973, 41098),
-(2974, 41103),
-(2975, 41105),
-(2976, 41095),
-(2977, 41097),
-(2978, 41106),
-(2979, 41092),
-(2980, 41108),
-(2981, 41100),
-(2982, 41094),
-(2983, 41110),
-(2984, 41109),
-(2985, 41102),
-(2986, 42954),
-(2987, 42955),
-(2988, 42956),
-(2989, 42957),
-(2990, 42958),
-(2991, 42959),
-(2992, 42960),
-(2993, 42961),
-(2994, 42962),
-(2995, 42963),
-(2996, 42964),
-(2997, 42965),
-(2998, 42966),
-(2999, 42967),
-(3000, 42968),
-(3001, 42969),
-(3002, 42970),
-(3003, 42971),
-(3004, 42972),
-(3005, 42973),
-(3006, 42974),
-(3007, 43420),
-(3008, 43425),
-(3009, 43412),
-(3010, 43414),
-(3011, 43415),
-(3012, 43416),
-(3013, 43417),
-(3014, 43418),
-(3015, 43419),
-(3016, 43421),
-(3017, 43422),
-(3018, 43413),
-(3019, 43423),
-(3020, 43430),
-(3021, 43424),
-(3022, 43426),
-(3023, 43427),
-(3024, 43428),
-(3025, 43429),
-(3026, 43431),
-(3027, 43432),
-(3028, 42396),
-(3029, 42397),
-(3030, 42398),
-(3031, 42399),
-(3032, 42400),
-(3033, 42401),
-(3034, 42402),
-(3035, 42403),
-(3036, 42404),
-(3037, 42405),
-(3038, 42406),
-(3039, 42407),
-(3040, 42408),
-(3041, 42409),
-(3042, 42410),
-(3043, 42411),
-(3044, 42412),
-(3045, 42414),
-(3046, 42415),
-(3047, 42416),
-(3048, 42417),
-(3049, 43533),
-(3050, 43534),
-(3051, 43535),
-(3052, 43536),
-(3053, 43537),
-(3054, 43538),
-(3055, 43541),
-(3056, 43542),
-(3057, 43539),
-(3058, 43543),
-(3059, 43544),
-(3060, 43545),
-(3061, 43546),
-(3062, 43547),
-(3063, 43548),
-(3064, 43549),
-(3065, 43550),
-(3066, 43551),
-(3067, 43552),
-(3068, 43553),
-(3069, 43554),
-(3070, 43673),
-(3071, 43671),
-(3072, 43672),
-(3073, 41517),
-(3074, 41518),
-(3075, 41524),
-(3076, 41526),
-(3077, 41527),
-(3078, 41529),
-(3079, 41530),
-(3080, 41531),
-(3081, 41532),
-(3082, 41547),
-(3083, 41533),
-(3084, 41534),
-(3085, 41535),
-(3086, 41536),
-(3087, 41537),
-(3088, 41538),
-(3089, 41539),
-(3090, 41540),
-(3091, 41552),
-(3092, 41541),
-(3093, 41542),
-(3094, 44923),
-(3095, 42453),
-(3096, 42454),
-(3097, 42455),
-(3098, 42456),
-(3099, 42457),
-(3100, 42458),
-(3101, 42459),
-(3102, 42460),
-(3103, 42461),
-(3104, 42462),
-(3105, 42463),
-(3106, 42464),
-(3107, 42465),
-(3108, 42466),
-(3109, 42467),
-(3110, 42468),
-(3111, 42469),
-(3112, 42470),
-(3113, 42471),
-(3114, 42472),
-(3115, 42473),
-(3116, 43103),
-(3117, 39338),
-(3118, 43104),
-(3119, 43117),
-(3120, 39339),
-(3121, 43105),
-(3122, 43119),
-(3123, 39340),
-(3124, 43106),
-(3125, 43121),
-(3126, 39341),
-(3127, 43107),
-(3128, 43123),
-(3129, 39342),
-(3130, 43108),
-(3131, 43125),
-(3132, 39343),
-(3133, 43109),
-(3134, 43127),
-(3135, 42740),
-(3136, 43244),
-(3137, 43245),
-(3138, 43246),
-(3139, 43247),
-(3140, 43248),
-(3141, 43249),
-(3142, 43250),
-(3143, 43251),
-(3144, 43252),
-(3145, 43253),
-(3146, 43316),
-(3147, 43334),
-(3148, 43331),
-(3149, 43332),
-(3150, 43335),
-(3151, 43355),
-(3152, 43356),
-(3153, 43338),
-(3154, 43354),
-(3155, 43350),
-(3156, 43351),
-(3157, 43339),
-(3158, 43357),
-(3159, 43359),
-(3160, 43360),
-(3161, 43364),
-(3162, 43361),
-(3163, 43365),
-(3164, 43366),
-(3165, 43367),
-(3166, 43340),
-(3167, 43368),
-(3168, 43369),
-(3169, 43342),
-(3170, 43371),
-(3171, 43370),
-(3172, 43373),
-(3173, 43372),
-(3174, 43374),
-(3175, 43379),
-(3176, 43376),
-(3177, 43377),
-(3178, 43343),
-(3179, 43378),
-(3180, 43380),
-(3181, 43381),
-(3182, 43385),
-(3183, 43344),
-(3184, 43386),
-(3185, 43388),
-(3186, 43389),
-(3187, 43390),
-(3188, 43392),
-(3189, 43393),
-(3190, 43391),
-(3191, 43394),
-(3192, 43395),
-(3193, 43396),
-(3194, 43397),
-(3195, 43398),
-(3196, 43399),
-(3197, 43400),
-(3198, 3012),
-(3199, 1477),
-(3200, 4425),
-(3201, 10309),
-(3202, 27498),
-(3203, 33457),
-(3204, 43463),
-(3205, 43464),
-(3206, 954),
-(3207, 2289),
-(3208, 4426),
-(3209, 10310),
-(3210, 33462),
-(3211, 43465),
-(3212, 43466),
-(3213, 43482),
-(3214, 43498),
-(3215, 43515),
-(3216, 43570),
-(3217, 43569),
-(3218, 43582),
-(3219, 43674),
-(3220, 43725),
-(3221, 43825),
-(3222, 43826),
-(3223, 43827),
-(3224, 43850),
-(3225, 43854),
-(3226, 43853),
-(3227, 43860),
-(3228, 43864),
-(3229, 43865),
-(3230, 43870),
-(3231, 43871),
-(3232, 43654),
-(3233, 43655),
-(3234, 44142),
-(3235, 43656),
-(3236, 43657),
-(3237, 44161),
-(3238, 39350),
-(3239, 43660),
-(3240, 43661),
-(3241, 44163),
-(3242, 43663),
-(3243, 43664),
-(3244, 43666),
-(3245, 43667),
-(3246, 38322),
-(3247, 44210),
-(3248, 37602),
-(3249, 43145),
-(3250, 43146),
-(3251, 44316),
-(3252, 44317),
-(3253, 44318),
-(3254, 43867),
-(3255, 43868),
-(3256, 43869),
-(3257, 43969),
-(3258, 43974),
-(3259, 43973),
-(3260, 43970),
-(3261, 41516),
-(3262, 43972),
-(3263, 43975),
-(3264, 43971),
-(3265, 44497),
-(3266, 44493),
-(3267, 43987),
-(3268, 44063),
-(3269, 44314),
-(3270, 44315),
-(3271, 44325),
-(3272, 44327),
-(3273, 44328),
-(3274, 44329),
-(3275, 44330),
-(3276, 44331),
-(3277, 44332),
-(3278, 44322),
-(3279, 44323),
-(3280, 44324),
-(3281, 38436),
-(3282, 38440),
-(3283, 44436),
-(3284, 44437),
-(3285, 44438),
-(3286, 44449),
-(3287, 38434),
-(3288, 38438),
-(3289, 44456),
-(3290, 44440),
-(3291, 44441),
-(3292, 38971),
-(3293, 44452),
-(3294, 44442),
-(3295, 44453),
-(3296, 38435),
-(3297, 38986),
-(3298, 38439),
-(3299, 44443),
-(3300, 44444),
-(3301, 44445),
-(3302, 38441),
-(3303, 43566),
-(3304, 43565),
-(3305, 44446),
-(3306, 44447),
-(3307, 44448),
-(3308, 43129),
-(3309, 43130),
-(3310, 43131),
-(3311, 44455),
-(3312, 43132),
-(3313, 43133),
-(3314, 42731),
-(3315, 44457),
-(3316, 43255),
-(3317, 43256),
-(3318, 44458),
-(3319, 43257),
-(3320, 43258),
-(3321, 44463),
-(3322, 44465),
-(3323, 43260),
-(3324, 43433),
-(3325, 43434),
-(3326, 43435),
-(3327, 43436),
-(3328, 43437),
-(3329, 44466),
-(3330, 43438),
-(3331, 43439),
-(3332, 44467),
-(3333, 43261),
-(3334, 43262),
-(3335, 43263),
-(3336, 43264),
-(3337, 43265),
-(3338, 43266),
-(3339, 43271),
-(3340, 43273),
-(3341, 43447),
-(3342, 43449),
-(3343, 43445),
-(3344, 43444),
-(3345, 43446),
-(3346, 43442),
-(3347, 43448),
-(3348, 43443),
-(3349, 43455),
-(3350, 43457),
-(3351, 43453),
-(3352, 43452),
-(3353, 43454),
-(3354, 43450),
-(3355, 43456),
-(3356, 43451),
-(3357, 43458),
-(3358, 43459),
-(3359, 43461),
-(3360, 43469),
-(3361, 43481),
-(3362, 43484),
-(3363, 43495),
-(3364, 43502),
-(3365, 44469),
-(3366, 44470),
-(3367, 44499),
-(3368, 44501),
-(3369, 44500),
-(3370, 41508),
-(3371, 44413),
-(3372, 44504),
-(3373, 44554),
-(3374, 44558),
-(3375, 43584),
-(3376, 43583),
-(3377, 43585),
-(3378, 43590),
-(3379, 43591),
-(3380, 43592),
-(3381, 43593),
-(3382, 43594),
-(3383, 43595),
-(3384, 43586),
-(3385, 43587),
-(3386, 43588),
-(3387, 44739),
-(3388, 44740),
-(3389, 44741),
-(3390, 44742),
-(3391, 44684),
-(3392, 44928),
-(3393, 44930),
-(3394, 44931),
-(3395, 44936),
-(3396, 39970),
-(3397, 44939),
-(3398, 44943),
-(3399, 44947),
-(3400, 44946),
-(3401, 44949),
-(3402, 41814),
-(3403, 44958),
-(3404, 8827),
-(3405, 44963),
-(3406, 45054),
-(3407, 45056),
-(3408, 45060),
-(3409, 45085),
-(3410, 45087),
-(3411, 45550),
-(3412, 45559),
-(3413, 45552),
-(3414, 45561),
-(3415, 45551),
-(3416, 45560),
-(3417, 45553),
-(3418, 45562),
-(3419, 45554),
-(3420, 45563),
-(3421, 45555),
-(3422, 45564),
-(3423, 45556),
-(3424, 45565),
-(3425, 45557),
-(3426, 45566),
-(3427, 45558),
-(3428, 45567),
-(3429, 45621),
-(3430, 45626),
-(3431, 45627),
-(3432, 45628),
-(3433, 45631),
-(3434, 45773),
-(3435, 45854),
-(3436, 45849),
-(3437, 45735),
-(3438, 45778),
-(3439, 45785),
-(3440, 45734),
-(3441, 45789),
-(3442, 45747),
-(3443, 45797),
-(3444, 45733),
-(3445, 45746),
-(3446, 45793),
-(3447, 45623),
-(3448, 45740),
-(3449, 45622),
-(3450, 45760),
-(3451, 45768),
-(3452, 45775),
-(3453, 45776),
-(3454, 45804),
-(3455, 45805),
-(3456, 45601),
-(3457, 45602),
-(3458, 45625),
-(3459, 45731),
-(3460, 45736),
-(3461, 45737),
-(3462, 45738),
-(3463, 45741),
-(3464, 45742),
-(3465, 45743),
-(3466, 45753),
-(3467, 45755),
-(3468, 45756),
-(3469, 45758),
-(3470, 45761),
-(3471, 45762),
-(3472, 45764),
-(3473, 45770),
-(3474, 45771),
-(3475, 45772),
-(3476, 45779),
-(3477, 45781),
-(3478, 45790),
-(3479, 45792),
-(3480, 45799),
-(3481, 45800),
-(3482, 45803),
-(3483, 45806),
-(3484, 45795),
-(3485, 45769),
-(3486, 45732),
-(3487, 45745),
-(3488, 45604),
-(3489, 45744),
-(3490, 45757),
-(3491, 45767),
-(3492, 45783),
-(3493, 45794),
-(3494, 45603),
-(3495, 45739),
-(3496, 45766),
-(3497, 45777),
-(3498, 45782),
-(3499, 45780),
-(3500, 46026),
-(3501, 46098),
-(3502, 33567),
-(3503, 45812),
-(3504, 45813),
-(3505, 45808),
-(3506, 45809),
-(3507, 45811),
-(3508, 45810),
-(3509, 46372),
-(3510, 36934),
-(3511, 40167),
-(3512, 40168),
-(3513, 40166),
-(3514, 40175),
-(3515, 40165),
-(3516, 40164),
-(3517, 40170),
-(3518, 40169),
-(3519, 40171),
-(3520, 40176),
-(3521, 40172),
-(3522, 40181),
-(3523, 40177),
-(3524, 40174),
-(3525, 40180),
-(3526, 40179),
-(3527, 40182),
-(3528, 40178),
-(3529, 40173),
-(3530, 36919),
-(3531, 40113),
-(3532, 40111),
-(3533, 40112),
-(3534, 40114),
-(3535, 40118),
-(3536, 40117),
-(3537, 40115),
-(3538, 40116),
-(3539, 36925),
-(3540, 40119),
-(3541, 40120),
-(3542, 40122),
-(3543, 40121),
-(3544, 36922),
-(3545, 40125),
-(3546, 40124),
-(3547, 40123),
-(3548, 40126),
-(3549, 40127),
-(3550, 40128),
-(3551, 36928),
-(3552, 40136),
-(3553, 40129),
-(3554, 40132),
-(3555, 40133),
-(3556, 40130),
-(3557, 40134),
-(3558, 40138),
-(3559, 40139),
-(3560, 40141),
-(3561, 40135),
-(3562, 40140),
-(3563, 40137),
-(3564, 40131),
-(3565, 36931),
-(3566, 40151),
-(3567, 40142),
-(3568, 40147),
-(3569, 40152),
-(3570, 40153),
-(3571, 40154),
-(3572, 40143),
-(3573, 40157),
-(3574, 40155),
-(3575, 40148),
-(3576, 40162),
-(3577, 40156),
-(3578, 40161),
-(3579, 40144),
-(3580, 40158),
-(3581, 40160),
-(3582, 40145),
-(3583, 40146),
-(3584, 40150),
-(3585, 40149),
-(3586, 40163),
-(3587, 40159),
-(3588, 47499),
-(3589, 47556),
-(3590, 47605),
-(3591, 47587),
-(3592, 47603),
-(3593, 47585),
-(3594, 47597),
-(3595, 47579),
-(3596, 47595),
-(3597, 47576),
-(3598, 47602),
-(3599, 47583),
-(3600, 47599),
-(3601, 47581),
-(3602, 47591),
-(3603, 47570),
-(3604, 47589),
-(3605, 47572),
-(3606, 47593),
-(3607, 47574),
-(3608, 47592),
-(3609, 47571),
-(3610, 47590),
-(3611, 47573),
-(3612, 47594),
-(3613, 47575),
-(3614, 47598),
-(3615, 47580),
-(3616, 47596),
-(3617, 47582),
-(3618, 47601),
-(3619, 47584),
-(3620, 47600),
-(3621, 47577),
-(3622, 47606),
-(3623, 47586),
-(3624, 47604),
-(3625, 47588),
-(3626, 47828),
-(3627, 48720),
-(3628, 48933),
-(3629, 49040),
-(3630, 49084),
-(3631, 49110),
-(3632, 49632),
-(3633, 49633),
-(3634, 49634),
-(3635, 49908),
-(3636, 49891),
-(3637, 49890),
-(3638, 49892),
-(3639, 49893),
-(3640, 49898),
-(3641, 49894),
-(3642, 49899),
-(3643, 49895),
-(3644, 49900),
-(3645, 49896),
-(3646, 49901),
-(3647, 49897),
-(3648, 49902),
-(3649, 49905),
-(3650, 49903),
-(3651, 49906),
-(3652, 49904),
-(3653, 49907),
-(3654, 50125),
-(3655, 50045),
-(3656, 50077),
-(3657, 50816),
-(3658, 52020),
-(3659, 52021),
-(3660, 54797);
-
---
--- Indexes for dumped tables
---
-
---
--- Indexes for table `auctionhousebot_professionItems`
---
-ALTER TABLE `auctionhousebot_professionItems`
- ADD PRIMARY KEY (`Entry`);
-
---
--- AUTO_INCREMENT for dumped tables
---
-
---
--- AUTO_INCREMENT for table `auctionhousebot_professionItems`
---
-ALTER TABLE `auctionhousebot_professionItems`
- MODIFY `Entry` int NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=3661;
-COMMIT;
-
-/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
-/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
-/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
diff --git a/data/sql/base/db_world/mod_auctionhousebot.sql b/data/sql/base/db_world/mod_auctionhousebot.sql
deleted file mode 100644
index 47befdb12..000000000
--- a/data/sql/base/db_world/mod_auctionhousebot.sql
+++ /dev/null
@@ -1,382 +0,0 @@
---
--- Main configuration for the auction houses
---
-
-DROP TABLE IF EXISTS `mod_auctionhousebot`;
-CREATE TABLE `mod_auctionhousebot` (
- `auctionhouse` int(11) NOT NULL DEFAULT '0' COMMENT 'mapID of the auctionhouse.',
- `name` char(25) DEFAULT NULL COMMENT 'Text name of the auctionhouse.',
- `minitems` int(11) DEFAULT '0' COMMENT 'This is the minimum number of items you want to keep in the auction house. a 0 here will make it the same as the maximum.',
- `maxitems` int(11) DEFAULT '0' COMMENT 'This is the number of items you want to keep in the auction house.',
- `percentgreytradegoods` int(11) DEFAULT '0' COMMENT 'Sets the percentage of the Grey Trade Goods auction items',
- `percentwhitetradegoods` int(11) DEFAULT '27' COMMENT 'Sets the percentage of the White Trade Goods auction items',
- `percentgreentradegoods` int(11) DEFAULT '12' COMMENT 'Sets the percentage of the Green Trade Goods auction items',
- `percentbluetradegoods` int(11) DEFAULT '10' COMMENT 'Sets the percentage of the Blue Trade Goods auction items',
- `percentpurpletradegoods` int(11) DEFAULT '1' COMMENT 'Sets the percentage of the Purple Trade Goods auction items',
- `percentorangetradegoods` int(11) DEFAULT '0' COMMENT 'Sets the percentage of the Orange Trade Goods auction items',
- `percentyellowtradegoods` int(11) DEFAULT '0' COMMENT 'Sets the percentage of the Yellow Trade Goods auction items',
- `percentgreyitems` int(11) DEFAULT '0' COMMENT 'Sets the percentage of the non trade Grey auction items',
- `percentwhiteitems` int(11) DEFAULT '10' COMMENT 'Sets the percentage of the non trade White auction items',
- `percentgreenitems` int(11) DEFAULT '30' COMMENT 'Sets the percentage of the non trade Green auction items',
- `percentblueitems` int(11) DEFAULT '8' COMMENT 'Sets the percentage of the non trade Blue auction items',
- `percentpurpleitems` int(11) DEFAULT '2' COMMENT 'Sets the percentage of the non trade Purple auction items',
- `percentorangeitems` int(11) DEFAULT '0' COMMENT 'Sets the percentage of the non trade Orange auction items',
- `percentyellowitems` int(11) DEFAULT '0' COMMENT 'Sets the percentage of the non trade Yellow auction items',
- `minpricegrey` int(11) DEFAULT '100' COMMENT 'Minimum price of Grey items (percentage).',
- `maxpricegrey` int(11) DEFAULT '150' COMMENT 'Maximum price of Grey items (percentage).',
- `minpricewhite` int(11) DEFAULT '150' COMMENT 'Minimum price of White items (percentage).',
- `maxpricewhite` int(11) DEFAULT '250' COMMENT 'Maximum price of White items (percentage).',
- `minpricegreen` int(11) DEFAULT '800' COMMENT 'Minimum price of Green items (percentage).',
- `maxpricegreen` int(11) DEFAULT '1400' COMMENT 'Maximum price of Green items (percentage).',
- `minpriceblue` int(11) DEFAULT '1250' COMMENT 'Minimum price of Blue items (percentage).',
- `maxpriceblue` int(11) DEFAULT '1750' COMMENT 'Maximum price of Blue items (percentage).',
- `minpricepurple` int(11) DEFAULT '2250' COMMENT 'Minimum price of Purple items (percentage).',
- `maxpricepurple` int(11) DEFAULT '4550' COMMENT 'Maximum price of Purple items (percentage).',
- `minpriceorange` int(11) DEFAULT '3250' COMMENT 'Minimum price of Orange items (percentage).',
- `maxpriceorange` int(11) DEFAULT '5550' COMMENT 'Maximum price of Orange items (percentage).',
- `minpriceyellow` int(11) DEFAULT '5250' COMMENT 'Minimum price of Yellow items (percentage).',
- `maxpriceyellow` int(11) DEFAULT '6550' COMMENT 'Maximum price of Yellow items (percentage).',
- `minbidpricegrey` int(11) DEFAULT '70' COMMENT 'Starting bid price of Grey items as a percentage of the randomly chosen buyout price. Default: 70',
- `maxbidpricegrey` int(11) DEFAULT '100' COMMENT 'Starting bid price of Grey items as a percentage of the randomly chosen buyout price. Default: 100',
- `minbidpricewhite` int(11) DEFAULT '70' COMMENT 'Starting bid price of White items as a percentage of the randomly chosen buyout price. Default: 70',
- `maxbidpricewhite` int(11) DEFAULT '100' COMMENT 'Starting bid price of White items as a percentage of the randomly chosen buyout price. Default: 100',
- `minbidpricegreen` int(11) DEFAULT '80' COMMENT 'Starting bid price of Green items as a percentage of the randomly chosen buyout price. Default: 80',
- `maxbidpricegreen` int(11) DEFAULT '100' COMMENT 'Starting bid price of Green items as a percentage of the randomly chosen buyout price. Default: 100',
- `minbidpriceblue` int(11) DEFAULT '75' COMMENT 'Starting bid price of Blue items as a percentage of the randomly chosen buyout price. Default: 75',
- `maxbidpriceblue` int(11) DEFAULT '100' COMMENT 'Starting bid price of Blue items as a percentage of the randomly chosen buyout price. Default: 100',
- `minbidpricepurple` int(11) DEFAULT '80' COMMENT 'Starting bid price of Purple items as a percentage of the randomly chosen buyout price. Default: 80',
- `maxbidpricepurple` int(11) DEFAULT '100' COMMENT 'Starting bid price of Purple items as a percentage of the randomly chosen buyout price. Default: 100',
- `minbidpriceorange` int(11) DEFAULT '80' COMMENT 'Starting bid price of Orange items as a percentage of the randomly chosen buyout price. Default: 80',
- `maxbidpriceorange` int(11) DEFAULT '100' COMMENT 'Starting bid price of Orange items as a percentage of the randomly chosen buyout price. Default: 100',
- `minbidpriceyellow` int(11) DEFAULT '80' COMMENT 'Starting bid price of Yellow items as a percentage of the randomly chosen buyout price. Default: 80',
- `maxbidpriceyellow` int(11) DEFAULT '100' COMMENT 'Starting bid price of Yellow items as a percentage of the randomly chosen buyout price. Default: 100',
- `maxstackgrey` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `maxstackwhite` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `maxstackgreen` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `maxstackblue` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `maxstackpurple` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `maxstackorange` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `maxstackyellow` int(11) DEFAULT '0' COMMENT 'Stack size limits for item qualities - a value of 0 will disable a maximum stack size for that quality, which will allow the bot to create items in stack as large as the item allows.',
- `buyerpricegrey` int(11) DEFAULT '1' COMMENT 'Multiplier to vendorprice when buying grey items from auctionhouse',
- `buyerpricewhite` int(11) DEFAULT '3' COMMENT 'Multiplier to vendorprice when buying white items from auctionhouse',
- `buyerpricegreen` int(11) DEFAULT '5' COMMENT 'Multiplier to vendorprice when buying green items from auctionhouse',
- `buyerpriceblue` int(11) DEFAULT '12' COMMENT 'Multiplier to vendorprice when buying blue items from auctionhouse',
- `buyerpricepurple` int(11) DEFAULT '15' COMMENT 'Multiplier to vendorprice when buying purple items from auctionhouse',
- `buyerpriceorange` int(11) DEFAULT '20' COMMENT 'Multiplier to vendorprice when buying orange items from auctionhouse',
- `buyerpriceyellow` int(11) DEFAULT '22' COMMENT 'Multiplier to vendorprice when buying yellow items from auctionhouse',
- `buyerbiddinginterval` int(11) DEFAULT '1' COMMENT 'Interval how frequently AHB bids on each AH. Time in minutes',
- `buyerbidsperinterval` int(11) DEFAULT '1' COMMENT 'number of bids to put in per bidding interval',
- PRIMARY KEY (`auctionhouse`)
-) ENGINE=MyISAM DEFAULT CHARSET=utf8;
-
---
--- AHBot auction houses default configuration values
---
-
-INSERT INTO `mod_auctionhousebot` (`auctionhouse`, `name`, `minitems`, `maxitems`, `percentgreytradegoods`, `percentwhitetradegoods`, `percentgreentradegoods`, `percentbluetradegoods`, `percentpurpletradegoods`, `percentorangetradegoods`, `percentyellowtradegoods`, `percentgreyitems`, `percentwhiteitems`, `percentgreenitems`, `percentblueitems`, `percentpurpleitems`, `percentorangeitems`, `percentyellowitems`, `minpricegrey`, `maxpricegrey`, `minpricewhite`, `maxpricewhite`, `minpricegreen`, `maxpricegreen`, `minpriceblue`, `maxpriceblue`, `minpricepurple`, `maxpricepurple`, `minpriceorange`, `maxpriceorange`, `minpriceyellow`, `maxpriceyellow`, `minbidpricegrey`, `maxbidpricegrey`, `minbidpricewhite`, `maxbidpricewhite`, `minbidpricegreen`, `maxbidpricegreen`, `minbidpriceblue`, `maxbidpriceblue`, `minbidpricepurple`, `maxbidpricepurple`, `minbidpriceorange`, `maxbidpriceorange`, `minbidpriceyellow`, `maxbidpriceyellow`, `maxstackgrey`, `maxstackwhite`, `maxstackgreen`, `maxstackblue`, `maxstackpurple`, `maxstackorange`, `maxstackyellow`, `buyerpricegrey`, `buyerpricewhite`, `buyerpricegreen`, `buyerpriceblue`, `buyerpricepurple`, `buyerpriceorange`, `buyerpriceyellow`, `buyerbiddinginterval`, `buyerbidsperinterval`)
-VALUES
-(2,'Alliance',5000,5000,0,27,12,10,1,0,0,0,10,30,8,2,0,0,100,150,150,250,800,1400,1250,1750,2250,4550,3250,5550,5250,6550,70,100,70,100,80,100,75,100,80,100,80,100,80,100,0,0,3,2,1,1,1,1,3,5,12,15,20,22,1,1),
-(6,'Horde',5000,5000,0,27,12,10,1,0,0,0,10,30,8,2,0,0,100,150,150,250,800,1400,1250,1750,2250,4550,3250,5550,5250,6550,70,100,70,100,80,100,75,100,80,100,80,100,80,100,0,0,3,2,1,1,1,1,3,5,12,15,20,22,1,1),
-(7,'Neutral',5000,5000,0,27,12,10,1,0,0,0,10,30,8,2,0,0,100,150,150,250,800,1400,1250,1750,2250,4550,3250,5550,5250,6550,70,100,70,100,80,100,75,100,80,100,80,100,80,100,0,0,3,2,1,1,1,1,3,5,12,15,20,22,1,1);
-
---
--- Items blacklist
---
-
-DROP TABLE IF EXISTS `mod_auctionhousebot_disabled_items`;
-CREATE TABLE `mod_auctionhousebot_disabled_items` (
- `item` mediumint(8) unsigned NOT NULL,
- PRIMARY KEY (`item`)
-) ENGINE=MyISAM DEFAULT CHARSET=utf8;
-
---
--- Blacklist default values
---
-
-INSERT INTO `mod_auctionhousebot_disabled_items`
-VALUES
-(17), (3895), (1700), (862), (4196), (3934), (2275), (4213), (4988), (4989), (4990), (4110), (4111), (4116), (3463), (3068),
-(913), (2016), (3738), (1189), (3222), (2664), (2273), (4763), (2444), (1041), (1133), (1134), (2413), (2415), (2927), (2932),
-(2443), (1487), (1623), (3031), (3034), (3762), (3772), (4981), (2693), (2808), (1254), (2442), (3137), (4191), (4193), (931),
-(1114), (1450), (2136), (1352), (2441), (3884), (4200), (2588), (2922), (3005), (3122), (1193), (1057), (3107), (3135), (3144),
-(4273), (1113), (2288), (2556), (2921), (3004), (763), (1146), (1255), (2929), (4143), (2064), (3648), (1162), (1167), (2377),
-(2920), (3003), (4965), (2497), (2499), (2501), (2599), (3320), (964), (2496), (2498), (2503), (2946), (3131), (1389), (2500),
-(2502), (4959), (1166), (1386), (2133), (4930), (1029), (2055), (2128), (2481), (2484), (2487), (3260), (2482), (2483), (2485),
-(2486), (2947), (3111), (37), (996), (119), (138), (734), (876), (895), (896), (900), (956), (958), (960), (997),
-(1014), (1020), (1021), (1024), (1025), (1027), (1324), (1356), (1672), (1923), (1977), (2410), (2477), (2586), (2638), (2668),
-(2755), (2891), (3316), (3513), (3516), (3536), (3584), (3686), (3707), (3744), (4278), (4524), (4703), (4704), (4749), (4851),
-(4868), (192), (3958), (3978), (4014), (3952), (3981), (3991), (4011), (3957), (3979), (4012), (3959), (3982), (4010), (3954),
-(3983), (3988), (4009), (3953), (3984), (4013), (3956), (3977), (4008), (3955), (3980), (4015), (2931), (3776), (1914), (4858),
-(3713), (3777), (3063), (2918), (3046), (3052), (3062), (4912), (2995), (1028), (1192), (2692), (1298), (1363), (4688), (4774),
-(4773), (4761), (2305), (2306), (4471), (88), (91), (100), (128), (143), (156), (813), (1222), (1259), (1902), (1911),
-(2081), (2184), (2550), (2705), (2715), (2810), (3148), (3168), (3245), (3368), (3675), (3774), (5828), (9372), (8708), (8586),
-(9240), (9380), (9484), (9417), (10579), (9718), (7187), (10978), (9685), (9214), (9653), (7987), (7988), (7986), (7550), (7547),
-(7548), (7994), (7748), (7953), (9888), (5010), (7497), (7466), (5008), (8840), (5004), (5005), (7467), (7427), (7426), (7948),
-(7949), (7950), (7951), (7952), (6589), (6360), (6376), (10049), (5821), (5822), (7188), (6478), (10998), (6345), (5748), (5255),
-(5968), (8350), (10939), (6343), (9602), (10595), (8079), (8008), (9421), (8076), (8078), (10683), (8171), (8546), (10662), (10818),
-(8007), (5510), (8075), (8077), (10664), (8147), (8993), (5663), (5874), (5875), (8583), (8589), (8590), (8627), (8628), (8630),
-(8633), (9254), (10620), (5513), (5522), (6357), (8365), (8366), (5509), (6715), (5108), (5518), (6355), (5632), (5845), (6352),
-(6359), (6363), (6364), (6647), (6766), (5654), (5657), (5511), (5105), (6354), (6366), (6374), (6650), (8964), (5232), (5517),
-(5660), (5013), (5024), (5603), (5823), (6292), (6294), (6295), (6309), (6310), (6311), (6351), (6353), (6358), (6645), (6754),
-(7678), (5150), (6651), (5512), (6182), (6183), (6619), (6649), (5229), (6356), (5235), (5043), (5044), (5349), (5350), (6216),
-(6291), (6643), (6891), (7807), (7808), (6648), (5056), (5184), (5220), (5330), (5333), (5353), (5389), (5400), (5410), (5417),
-(5418), (5455), (5515), (5531), (5562), (5563), (5639), (5645), (5646), (5681), (5768), (5769), (5833), (5859), (5878), (6130),
-(6276), (6277), (6278), (6279), (6280), (6435), (6490), (6491), (6492), (6495), (6496), (6497), (6498), (6500), (6501), (6516),
-(6544), (6623), (6717), (6718), (6834), (6927), (6988), (7134), (7206), (7208), (7268), (7271), (7286), (7287), (7333), (7392),
-(7679), (7680), (7681), (7716), (7725), (7733), (7737), (7867), (7923), (7970), (8072), (8426), (9280), (9281), (9282), (9284),
-(9316), (9319), (9325), (9330), (9365), (9593), (9594), (9595), (9596), (9597), (10464), (10691), (10692), (10693), (10694), (5495),
-(5863), (6307), (7769), (7770), (7771), (8164), (8383), (8585), (9311), (9438), (9440), (9441), (9443), (10790), (5550), (5549),
-(5555), (8368), (8688), (6951), (5560), (7428), (7190), (5625), (6174), (7170), (5106), (8427), (5379), (5259), (5283), (5362),
-(5363), (5364), (5367), (5370), (5371), (5377), (5435), (5600), (6131), (6150), (6225), (6227), (6232), (6297), (6301), (6455),
-(7135), (8425), (9700), (9701), (10457), (10450), (10791), (11264), (12947), (15780), (14550), (12302), (12303), (12330), (12351), (12353),
-(12354), (13317), (13326), (13327), (13328), (13329), (15292), (15293), (12731), (12588), (12970), (13080), (13090), (13092), (13936), (13950),
-(14543), (13148), (13164), (13173), (15410), (15769), (11768), (12105), (11743), (14344), (11671), (11672), (14343), (12469), (11178), (11177),
-(13325), (11139), (11138), (11084), (12325), (12326), (12327), (13323), (13324), (12616), (12617), (12615), (12904), (12104), (12106), (12107),
-(13175), (13242), (13247), (12866), (11175), (12258), (11174), (11135), (11134), (11082), (13727), (13728), (13730), (13731), (13736), (13737),
-(13738), (13739), (13740), (13741), (13742), (13743), (13744), (13745), (13746), (13747), (13748), (13749), (13762), (13763), (13764), (13765),
-(13766), (13767), (13768), (13769), (13770), (13771), (13772), (13773), (13775), (13776), (13777), (13778), (13779), (13780), (13781), (13782),
-(13783), (13784), (13785), (13788), (13791), (13794), (13797), (13798), (13801), (13802), (13803), (13804), (13805), (13806), (13807), (13808),
-(13809), (13603), (15756), (13701), (14488), (11950), (11951), (11952), (13480), (13888), (13889), (13890), (13891), (13893), (13901), (13902),
-(13903), (13904), (13905), (13906), (13907), (13908), (13910), (13911), (13912), (13914), (13915), (13916), (13917), (13918), (14481), (13477),
-(14894), (15409), (15415), (15417), (15419), (15886), (13602), (13700), (11176), (13422), (13754), (13755), (13756), (13758), (13759), (13760),
-(13875), (13876), (13877), (13878), (13879), (13880), (13881), (13882), (13883), (13884), (13885), (13886), (13887), (11903), (14062), (15326),
-(15327), (11111), (13699), (11137), (11083), (12238), (12446), (12447), (12448), (12449), (14891), (14083), (11024), (11131), (11149), (11170),
-(11222), (11230), (11282), (11364), (11413), (11470), (11507), (11508), (11512), (11513), (11582), (11602), (11609), (11613), (11616), (11947),
-(11949), (11954), (12064), (12241), (12263), (12347), (12349), (12563), (12567), (12648), (12649), (12723), (12847), (12885), (13155), (13159),
-(13370), (13673), (13726), (13732), (13733), (13734), (13787), (13790), (13793), (13796), (14339), (14390), (14392), (14645), (15448), (15843),
-(15845), (11270), (11283), (11511), (11514), (12468), (15422), (15423), (12348), (12787), (12943), (12991), (13316), (13337), (13612), (14586),
-(18582), (18583), (18584), (17182), (17782), (18881), (17142), (17067), (17068), (18608), (18609), (18713), (18715), (17075), (18813), (17078),
-(17064), (18205), (17223), (18538), (18970), (18241), (18242), (18243), (18244), (18245), (18246), (18247), (18248), (18768), (17886), (17982),
-(16369), (16391), (16392), (16393), (16396), (16397), (16401), (16403), (16405), (16406), (16409), (16410), (16413), (16414), (16415), (16416),
-(16417), (16418), (16419), (16420), (16421), (16422), (16423), (16424), (16425), (16426), (16427), (16428), (16429), (16430), (16431), (16432),
-(16433), (16434), (16435), (16436), (16485), (16487), (16489), (16490), (16491), (16492), (16494), (16496), (16498), (16499), (16501), (16502),
-(16503), (16504), (16505), (16506), (16507), (16508), (16509), (16510), (16513), (16514), (16515), (16516), (16518), (16519), (16521), (16522),
-(16523), (16524), (16525), (16526), (16527), (16528), (16530), (16531), (17562), (17564), (17566), (17567), (17568), (17569), (17570), (17571),
-(17572), (17573), (17576), (17577), (17594), (17596), (17598), (17599), (17600), (17601), (17610), (17611), (17612), (17613), (17616), (17617),
-(16337), (17967), (17968), (16999), (17733), (16334), (16336), (16340), (18303), (18304), (18320), (18341), (18342), (16315), (16203), (17966),
-(16664), (16202), (17769), (16792), (16165), (17224), (17364), (16026), (16339), (16350), (16366), (16374), (16896), (17012), (18142), (16320),
-(16362), (16378), (16356), (16387), (16047), (16171), (16330), (16383), (18636), (16041), (16042), (16373), (16389), (18651), (16325), (16349),
-(16361), (16895), (17024), (16319), (16355), (16365), (16386), (16377), (16382), (16082), (16085), (16971), (16329), (16372), (16360), (16390),
-(17019), (16348), (16354), (16385), (16893), (16967), (16318), (16324), (16381), (16364), (16371), (16388), (17027), (16057), (16328), (16359),
-(16376), (16353), (16380), (16384), (16347), (16892), (16317), (16368), (16323), (16358), (16379), (16327), (16352), (16363), (16375), (16346),
-(18964), (16316), (16357), (16351), (16322), (16326), (16331), (16302), (17195), (17302), (17305), (17308), (18002), (16321), (16180), (16642),
-(16643), (16644), (16968), (16969), (16970), (16973), (17126), (17242), (17262), (17323), (17324), (17325), (17333), (17353), (17362), (17363),
-(17442), (17505), (17506), (17507), (17696), (17758), (17882), (17887), (18151), (18153), (18492), (18540), (18566), (18643), (18799), (18154),
-(18642), (20880), (19158), (20142), (20329), (21584), (21587), (21588), (21594), (21612), (21613), (21614), (21339), (20487), (20488), (21124),
-(21125), (21127), (21890), (19879), (19951), (19952), (19953), (19954), (19955), (19956), (19957), (19958), (19959), (20698), (20725), (20887),
-(19875), (20720), (20721), (20722), (19105), (19110), (20696), (20706), (20368), (21281), (21282), (21283), (21293), (21302), (19986), (20003),
-(20005), (20502), (20522), (20524), (21044), (20381), (21785), (21786), (21878), (21772), (21773), (20086), (20965), (19803), (19805), (19806),
-(19808), (20591), (20596), (20962), (20957), (20953), (20829), (20952), (20825), (20822), (20819), (19213), (19322), (20256), (20560), (21992),
-(21159), (21175), (19012), (19013), (19696), (20498), (20500), (20501), (19010), (19011), (19807), (20065), (21228), (21243), (21153), (19450),
-(20067), (21150), (21164), (19008), (19009), (21113), (19006), (19007), (19054), (19055), (21071), (21168), (21212), (21043), (20708), (21162),
-(19004), (19005), (20913), (20979), (20981), (19160), (19422), (19642), (19725), (19775), (19880), (19882), (20018), (20020), (20021), (20364),
-(20393), (20416), (20418), (20419), (20420), (20432), (20433), (20435), (20436), (20447), (20448), (20449), (20450), (20454), (20455), (20456),
-(20709), (20902), (20903), (20904), (20977), (20984), (21106), (21107), (21109), (21111), (21114), (21131), (21152), (21158), (21160), (21161),
-(21171), (21442), (21519), (21536), (21560), (21577), (21578), (21591), (21815), (21816), (21817), (21818), (21819), (21820), (21821), (21822),
-(21823), (21831), (21975), (21979), (21980), (21981), (19960), (21140), (19924), (20030), (21141), (22736), (22726), (22819), (22821), (22798),
-(22799), (22802), (22812), (22691), (22947), (22954), (22800), (22801), (22804), (22807), (22808), (22809), (22811), (22816), (22818), (22820),
-(22935), (22936), (22937), (22938), (22939), (22940), (22941), (22943), (22960), (22961), (22967), (22968), (22981), (22983), (22988), (22994),
-(22803), (22806), (22810), (22813), (22814), (22815), (22942), (22805), (22817), (22450), (22349), (22350), (22351), (22352), (22353), (22354),
-(22355), (22356), (22357), (22358), (22359), (22360), (22361), (22362), (22363), (22364), (22365), (22366), (22367), (22368), (22369), (22370),
-(22371), (22372), (22373), (22374), (22375), (22376), (22891), (22230), (22273), (22446), (22447), (22782), (22018), (22019), (22103), (22104),
-(22105), (22116), (22182), (22187), (22189), (22797), (22044), (22179), (22186), (22788), (22128), (22184), (22646), (22795), (22895), (22181),
-(22185), (22190), (22183), (22180), (22188), (22972), (22710), (22020), (22042), (22045), (22140), (22141), (22142), (22143), (22144), (22145),
-(22154), (22155), (22156), (22157), (22158), (22159), (22160), (22161), (22162), (22163), (22164), (22165), (22166), (22167), (22168), (22169),
-(22170), (22171), (22172), (22178), (22202), (22260), (22262), (22263), (22283), (22284), (22285), (22286), (22287), (22288), (22289), (22290),
-(22291), (22292), (22293), (22294), (22295), (22296), (22297), (22298), (22299), (22300), (22386), (22387), (22584), (22733), (22754), (22822),
-(22896), (22899), (22058), (22059), (22709), (23051), (25596), (24526), (24561), (24567), (27965), (24550), (24557), (24265), (23053), (23057),
-(23058), (23040), (23041), (23043), (23045), (23046), (23047), (23048), (23049), (23050), (23072), (23362), (23363), (23054), (23056), (23577),
-(23242), (23000), (23001), (23025), (23027), (23037), (23038), (23042), (23069), (23070), (23219), (23220), (23663), (23664), (23665), (23666),
-(23667), (23668), (23004), (23005), (23006), (23009), (23017), (23018), (23019), (23020), (23021), (23023), (23028), (23029), (23030), (23031),
-(23032), (23033), (23034), (23035), (23036), (23039), (23044), (23068), (23071), (23073), (23075), (23221), (23226), (23237), (23238), (23014),
-(23457), (23458), (23459), (23461), (23462), (23193), (23545), (23547), (23548), (23549), (23714), (23705), (23709), (23716), (23773), (24412),
-(25641), (24137), (25667), (23854), (23855), (24288), (27388), (27446), (24071), (23885), (23882), (23364), (23366), (27774), (27811), (27002),
-(27007), (26368), (26372), (26655), (26738), (26128), (26129), (26130), (26131), (26132), (26133), (26134), (26135), (26464), (26465), (26513),
-(26527), (26541), (26569), (26765), (26779), (25573), (25574), (25575), (25576), (25580), (25581), (25582), (26235), (26792), (25627), (27196),
-(27718), (27719), (27720), (26324), (25145), (25159), (25173), (25285), (26843), (26548), (26180), (26173), (26174), (26175), (27218), (23147),
-(23151), (23153), (23229), (23076), (23157), (26015), (26029), (26041), (23420), (23421), (23422), (23432), (23433), (23434), (23233), (23234),
-(23235), (27864), (26045), (27863), (24243), (23731), (23755), (23840), (24315), (25877), (23137), (23131), (23141), (23730), (23130), (23135),
-(23140), (23144), (23148), (23152), (23162), (23194), (23195), (23196), (23684), (23745), (25469), (25699), (25700), (27422), (27437), (27481),
-(27511), (27513), (23578), (25900), (23579), (23683), (23711), (23734), (23846), (23365), (23368), (24227), (24100), (23003), (23008), (23010),
-(23011), (23012), (23013), (23016), (23024), (23055), (23214), (23227), (23248), (23340), (23341), (23342), (23350), (23352), (23360), (23378),
-(23471), (23486), (23552), (23567), (23584), (23586), (23670), (23686), (23726), (23754), (23878), (23879), (23880), (24156), (24226), (24317),
-(24494), (24538), (24573), (25635), (25677), (25747), (25748), (25749), (25750), (25754), (25755), (25756), (25757), (25850), (27317), (27419),
-(27590), (23560), (23561), (23562), (23750), (23858), (23866), (23867), (23868), (25814), (27443), (25407), (24242), (27441), (24235), (24190),
-(24234), (24188), (23330), (23355), (23952), (23980), (24283), (24506), (24509), (25813), (24140), (28294), (28295), (28297), (28298), (28299),
-(28300), (28302), (28305), (28307), (28308), (28309), (28310), (28312), (28313), (28314), (28319), (28320), (28346), (28358), (28383), (28385),
-(28402), (28404), (28409), (28410), (28422), (28423), (28443), (28444), (28446), (28447), (28449), (28450), (28476), (28629), (28630), (28639),
-(28640), (28641), (28642), (28644), (28645), (28974), (28975), (28976), (28977), (28980), (28982), (28983), (28985), (28986), (28987), (28990),
-(28991), (28993), (28994), (28995), (28997), (28998), (28355), (28356), (28357), (28244), (28245), (28381), (28405), (28411), (28424), (28445),
-(28448), (28451), (28605), (28638), (28643), (28646), (28973), (28978), (28981), (28984), (28988), (28989), (28992), (28996), (28999), (28117),
-(28122), (28388), (28389), (28482), (28293), (28613), (28614), (28615), (28616), (28617), (28618), (28619), (28620), (28622), (28623), (28624),
-(28625), (28626), (28627), (28628), (28679), (28680), (28681), (28683), (28684), (28685), (28686), (28687), (28688), (28689), (28690), (28691),
-(28692), (28693), (28694), (28695), (28696), (28697), (28698), (28699), (28700), (28701), (28702), (28703), (28704), (28705), (28706), (28707),
-(28708), (28709), (28710), (28711), (28712), (28713), (28714), (28715), (28716), (28717), (28718), (28719), (28720), (28721), (28722), (28723),
-(28724), (28805), (28806), (28807), (28808), (28809), (28811), (28812), (28813), (28814), (28815), (28817), (28818), (28819), (28820), (28821),
-(28831), (28832), (28833), (28834), (28835), (28836), (28837), (28838), (28839), (28840), (28841), (28842), (28843), (28844), (28845), (28846),
-(28847), (28848), (28849), (28850), (28851), (28852), (28853), (28854), (28855), (28856), (28857), (28858), (28859), (28860), (28861), (28862),
-(28863), (28864), (28865), (28866), (28867), (28868), (28869), (28870), (28871), (28872), (28873), (28874), (28875), (28917), (28918), (28919),
-(28920), (28921), (28922), (28923), (28924), (28925), (28926), (28928), (28929), (28930), (28931), (28933), (28935), (28937), (28938), (28939),
-(28940), (28941), (28942), (28943), (28944), (28945), (28946), (28947), (28948), (28949), (28950), (28951), (28952), (28953), (28954), (28955),
-(28956), (28957), (28959), (28960), (28043), (28044), (28045), (28291), (28408), (28145), (28073), (28112), (28068), (28596), (28072), (28110),
-(28131), (28071), (28047), (28099), (28500), (28676), (28738), (28739), (28784), (28039), (28023), (28489), (28905), (30320), (29828), (31958),
-(31959), (31965), (31966), (31978), (31984), (31985), (31986), (30448), (29000), (29001), (29003), (29004), (29005), (30491), (31594), (31595),
-(31596), (31597), (29885), (29002), (29006), (31598), (31599), (29237), (30559), (29120), (29225), (31584), (31585), (31586), (31587), (31588),
-(31589), (31590), (31591), (31592), (31593), (31620), (31621), (31622), (31623), (31624), (31625), (31626), (31627), (31628), (31629), (31630),
-(31631), (31632), (31633), (31634), (31635), (31636), (31637), (31638), (31639), (31640), (31641), (31642), (31643), (31644), (31646), (31647),
-(31648), (31649), (31650), (31942), (31490), (31491), (31802), (31492), (31493), (31494), (31246), (29210), (30418), (30287), (30288), (30289),
-(31730), (30845), (29024), (30427), (30703), (30760), (29539), (29547), (29548), (29569), (30309), (30499), (29041), (29311), (29749), (29751),
-(29769), (29839), (29840), (29841), (29842), (29852), (29856), (29857), (29860), (29861), (29863), (29868), (29871), (29872), (29874), (29887),
-(29961), (29963), (30193), (30197), (30430), (30438), (30524), (30525), (30526), (30539), (30567), (30595), (30613), (30630), (30658), (30659),
-(30717), (31122), (31123), (31130), (31252), (31266), (31346), (31365), (31518), (31607), (31665), (31813), (31843), (31845), (31849), (29790),
-(29805), (30632), (30805), (31530), (29410), (29419), (29565), (29571), (29575), (29576), (29645), (29712), (30414), (31824), (32824), (32466),
-(32419), (32760), (32761), (32956), (32959), (32416), (32003), (32014), (32025), (32026), (32027), (32028), (32044), (32045), (32046), (32052),
-(32053), (32054), (32055), (32961), (32962), (32963), (32964), (32944), (32418), (32422), (32482), (32955), (32958), (32450), (32451), (32452),
-(32974), (32975), (32976), (32978), (32982), (32984), (32985), (32987), (32992), (32993), (32995), (32996), (32415), (32417), (32954), (32957),
-(32973), (32977), (32983), (32986), (32991), (32994), (32093), (32094), (32095), (32096), (32097), (32098), (32099), (32100), (32101), (32102),
-(32103), (32104), (32105), (32106), (32107), (32108), (32109), (32110), (32111), (32112), (32113), (32114), (32115), (32116), (32117), (32118),
-(32119), (32120), (32121), (32122), (32123), (32124), (32125), (32126), (32127), (32128), (32129), (32130), (32131), (32132), (32133), (32134),
-(32135), (32136), (32137), (32138), (32139), (32140), (32141), (32142), (32143), (32144), (32145), (32146), (32147), (32148), (32149), (32150),
-(32151), (32152), (32153), (32154), (32155), (32156), (32157), (32158), (32159), (32160), (32161), (32162), (32163), (32164), (32165), (32166),
-(32167), (32168), (32169), (32170), (32171), (32172), (32173), (32174), (32175), (32176), (32177), (32178), (32179), (32180), (32181), (32182),
-(32183), (32184), (32185), (32186), (32187), (32188), (32189), (32190), (32192), (32414), (32421), (32655), (32656), (32914), (32735), (32895),
-(32896), (32407), (32658), (32659), (32660), (32661), (32662), (32663), (32664), (32665), (32949), (32950), (32412), (32915), (32917), (32918),
-(32919), (32920), (32465), (32542), (32566), (32594), (32773), (32764), (32765), (32766), (32618), (32642), (32543), (32544), (32545), (32546),
-(32547), (32548), (32549), (32550), (32551), (32552), (32553), (32554), (32555), (32556), (32557), (32558), (32559), (32560), (32561), (32595),
-(32598), (32601), (32840), (32844), (32845), (32846), (32847), (32762), (32763), (32767), (32972), (32320), (32364), (32408), (32626), (32627),
-(32628), (32629), (32630), (32631), (32688), (32689), (32690), (32691), (32692), (32693), (32700), (32701), (32702), (32703), (32704), (32705),
-(32706), (32707), (32708), (32709), (32710), (32711), (32712), (32713), (32734), (32911), (32971), (32578), (32906), (32725), (32615), (32633),
-(32841), (33475), (34146), (34149), (34145), (34148), (34144), (34147), (34219), (34335), (34209), (34212), (33668), (33671), (33674), (33676),
-(33679), (33682), (33684), (33690), (33693), (33699), (33700), (33703), (33717), (33720), (33726), (33729), (33732), (33744), (33747), (33753),
-(33767), (33770), (33920), (33921), (33922), (33923), (33076), (33077), (33078), (33309), (33313), (33937), (33940), (33943), (33946), (33949),
-(33952), (34576), (34577), (34578), (34579), (34580), (33987), (33997), (33054), (33065), (33066), (33067), (33068), (33482), (33964), (33936),
-(33939), (33942), (33945), (33948), (33951), (33957), (33959), (34073), (34074), (34075), (34622), (34057), (33132), (33137), (33138), (33139),
-(33141), (33142), (33809), (34544), (33080), (33225), (33182), (33184), (34835), (33350), (34138), (34139), (33803), (34143), (34142), (34221),
-(33060), (33147), (34627), (34967), (34415), (34107), (33224), (33993), (34955), (33017), (33018), (33019), (33020), (33021), (33176), (33183),
-(33219), (33223), (34492), (34499), (34518), (34519), (33197), (34484), (34486), (33455), (34025), (34030), (33312), (34062), (34024), (34126),
-(34469), (34735), (34737), (34738), (34739), (34740), (34741), (34742), (34743), (34744), (34745), (34746), (34864), (34865), (34867), (34868),
-(33823), (33824), (34467), (34663), (33096), (33218), (33041), (33081), (33087), (33105), (33111), (33121), (33315), (33336), (33341), (33477),
-(33558), (33599), (33604), (33610), (33614), (33615), (33616), (33617), (33634), (33781), (33784), (33839), (33848), (33850), (33929), (34044),
-(34077), (34112), (34115), (34116), (34117), (34120), (34123), (34135), (34158), (34187), (34191), (34494), (34497), (34501), (34623), (34645),
-(34647), (34716), (34718), (34842), (33051), (33063), (33797), (34171), (33316), (34476), (33089), (34589), (34590), (34591), (34694), (34784),
-(34880), (34907), (36942), (35290), (35291), (35292), (35317), (35319), (35327), (35494), (35495), (35496), (35497), (35507), (35508), (35509),
-(35511), (35514), (35213), (35539), (35541), (35545), (35546), (35549), (35550), (35202), (35209), (35226), (35517), (35518), (35519), (35520),
-(35521), (35522), (35523), (35524), (35525), (35526), (35527), (35528), (35529), (35530), (35531), (35532), (35533), (35535), (35537), (35538),
-(35544), (35548), (35551), (35553), (35555), (35664), (35665), (35666), (36866), (36867), (35728), (35729), (35730), (35731), (35225), (36941),
-(36454), (36477), (36491), (36505), (36519), (36533), (36547), (36561), (36575), (36589), (36603), (36617), (36631), (36645), (36659), (36673),
-(36687), (36701), (36715), (35876), (36910), (36915), (35626), (36899), (36900), (36970), (36892), (36893), (36894), (36965), (36897), (36955),
-(36967), (36895), (36960), (36912), (36914), (36968), (36959), (36889), (36890), (36891), (36966), (36896), (36964), (35285), (35286), (35396),
-(35397), (35398), (35399), (35400), (35417), (35418), (35419), (35420), (35421), (35422), (35423), (35424), (35425), (35426), (35427), (35428),
-(35429), (35430), (35431), (35432), (35433), (35434), (35435), (35436), (35437), (35438), (35439), (35440), (35441), (35442), (35443), (35444),
-(35445), (35446), (35447), (35448), (35449), (35450), (35451), (35452), (35453), (35454), (35455), (35456), (35457), (35458), (35459), (35460),
-(35461), (35462), (35313), (35946), (35126), (35229), (35289), (35692), (35701), (35718), (35722), (35738), (35777), (35803), (35840), (35854),
-(36733), (36748), (36765), (36768), (36772), (36799), (36828), (36836), (36846), (36848), (35512), (35792), (35806), (36862), (36863), (35757),
-(36794), (36795), (36829), (36830), (38691), (37739), (37740), (37611), (37127), (37128), (37597), (38287), (38288), (38289), (38290), (38282),
-(38307), (38377), (38378), (38265), (37598), (37719), (38576), (38484), (38309), (38310), (38311), (38312), (38313), (38314), (37174), (37175),
-(37176), (37196), (37197), (37243), (37244), (37245), (37290), (37364), (37365), (37366), (37410), (37587), (37590), (37624), (37625), (37646),
-(37647), (37648), (37649), (37671), (37672), (37673), (37697), (37698), (37699), (37799), (37800), (37801), (37856), (37857), (37858), (37109),
-(38442), (38443), (38444), (38445), (38387), (38388), (38389), (38390), (38572), (38468), (38243), (38244), (38245), (38246), (38247), (38248),
-(38471), (38480), (38481), (38469), (37430), (37311), (37313), (38292), (38538), (38658), (38683), (37164), (37827), (37893), (37894), (37895),
-(37896), (37897), (37297), (37298), (38301), (38578), (38916), (37955), (37967), (37976), (38052), (38140), (38204), (38383), (38524), (38525),
-(38527), (37210), (37225), (37273), (37278), (37279), (37281), (37284), (37285), (37286), (37295), (37296), (37315), (37316), (37317), (37318),
-(37321), (37323), (37324), (37385), (37386), (37400), (37420), (37433), (37444), (37448), (37450), (37451), (37453), (37454), (37455), (37457),
-(37466), (37468), (37469), (37470), (37472), (37473), (37474), (37477), (37485), (37510), (37511), (37534), (37536), (37544), (38164), (38254),
-(38255), (38256), (37343), (37345), (37346), (37338), (37326), (37329), (37335), (37336), (37337), (37710), (37312), (37163), (37154), (37126),
-(37348), (38640), (38970), (38994), (38996), (38983), (37706), (38958), (37452), (38270), (38271), (38272), (38561), (38597), (38643), (38625),
-(38957), (38567), (37161), (37157), (37158), (37489), (37898), (37900), (37901), (37902), (37903), (37904), (37905), (37906), (37907), (37908),
-(37909), (37100), (37250), (37303), (37372), (37501), (37815), (37837), (37859), (37860), (37925), (38089), (38186), (38233), (38266), (38324),
-(38380), (38382), (38483), (38498), (38512), (38577), (38600), (38606), (38619), (38621), (38622), (38623), (38624), (38629), (38630), (38631),
-(37063), (37089), (37090), (37148), (37301), (37711), (37742), (37878), (38333), (38587), (38644), (38687), (38448), (37839), (38497), (38496),
-(38626), (37467), (37579), (38261), (38263), (38264), (38268), (38269), (38273), (38274), (38605), (40481), (41900), (41911), (41995), (40549),
-(39715), (40406), (40407), (40408), (40409), (40410), (40412), (40414), (40650), (39263), (39427), (39467), (39468), (39470), (39472), (39473),
-(40307), (40553), (40440), (40441), (40442), (40443), (40444), (39769), (41749), (41342), (39303), (40480), (41605), (41606), (40762), (40777),
-(40599), (40727), (40754), (40832), (40839), (40725), (41403), (41404), (41405), (41406), (41407), (41408), (41409), (41410), (41411), (41412),
-(41413), (41414), (41415), (41416), (41417), (41418), (41419), (41420), (41421), (41422), (41423), (41796), (41125), (39370), (40232), (41133),
-(39364), (39410), (39440), (39460), (39819), (39828), (41756), (41757), (41758), (41759), (39707), (39708), (39709), (39710), (39711), (41178),
-(41750), (41753), (39685), (41147), (41166), (41174), (41196), (39644), (39687), (39738), (39969), (40199), (40776), (41091), (41093), (41111),
-(41118), (41173), (39526), (39527), (41195), (39148), (39213), (39343), (39692), (41741), (41800), (41801), (41802), (41803), (41804), (41805),
-(41806), (41807), (41808), (41809), (41810), (41811), (41812), (41813), (41814), (40773), (41194), (39342), (40484), (40948), (41193), (41172),
-(39341), (41192), (41171), (39340), (41169), (41191), (39339), (41170), (39338), (39302), (39334), (39151), (39162), (39163), (39314), (39575),
-(39576), (39614), (39739), (39748), (39903), (39904), (40110), (40218), (40219), (40220), (40221), (40222), (40223), (40224), (40225), (40226),
-(40227), (40228), (40229), (40230), (40231), (40389), (40686), (41132), (41585), (39506), (39883), (39153), (39743), (39754), (42000), (42007),
-(42013), (42019), (42083), (42238), (42207), (42226), (42231), (42236), (42241), (42254), (42259), (42264), (42269), (42274), (42279), (42284),
-(42289), (42316), (42321), (42326), (42331), (42345), (42351), (42359), (42383), (42389), (42449), (42484), (42489), (42494), (42501), (42512),
-(42518), (42524), (42530), (42536), (42558), (42563), (42569), (42577), (42582), (42587), (42596), (42601), (42606), (42613), (42619), (42654),
-(42655), (42656), (42657), (42658), (42851), (42664), (42665), (42666), (42667), (42668), (42625), (42626), (42627), (42628), (42629), (42659),
-(42660), (42661), (42662), (42663), (42690), (42691), (42692), (42693), (42694), (42695), (42696), (42697), (42698), (42699), (42630), (42631),
-(42632), (42633), (42634), (42635), (42636), (42637), (42638), (42639), (42669), (42670), (42671), (42672), (42673), (42674), (42675), (42676),
-(42677), (42678), (42680), (42681), (42682), (42683), (42684), (42685), (42686), (42687), (42688), (42689), (42703), (42704), (42705), (42706),
-(42707), (42708), (42709), (42710), (42711), (42712), (42713), (42714), (42715), (42716), (42717), (42718), (42719), (42720), (42721), (42722),
-(42197), (42198), (42199), (42200), (42201), (42202), (42976), (42206), (42212), (42213), (42214), (42215), (42216), (42217), (42218), (42219),
-(42220), (42221), (42222), (42223), (42224), (42294), (42295), (42296), (42297), (42343), (42344), (42356), (42382), (42388), (42444), (42445),
-(42446), (42447), (42448), (42511), (42517), (42523), (42529), (42535), (42556), (42557), (42568), (42574), (42575), (42576), (42593), (42594),
-(42595), (42611), (42612), (42618), (42755), (42953), (42975), (42977), (42978), (42979), (42980), (42981), (42982), (42983), (42875), (42885),
-(42886), (42174), (42179), (42425), (42147), (42434), (42171), (42545), (42180), (42181), (42182), (42186), (42189), (42190), (42191), (42192),
-(42193), (42194), (42195), (42196), (42432), (42433), (42170), (42986), (42590), (42474), (42440), (42894), (42733), (42342), (42350), (42381),
-(42776), (42940), (43651), (43727), (43728), (43729), (43730), (43731), (43460), (43611), (43612), (43613), (43732), (43733), (43734), (43735),
-(43736), (43737), (43738), (43739), (43740), (43741), (43742), (43743), (43744), (43745), (43746), (43747), (43748), (43749), (43750), (43751),
-(43752), (43753), (43754), (43755), (43756), (43757), (43758), (43759), (43760), (43761), (43762), (43763), (43764), (43765), (43766), (43767),
-(43768), (43769), (43770), (43771), (43772), (43773), (43774), (43775), (43776), (43777), (43778), (43779), (43780), (43781), (43782), (43783),
-(43784), (43785), (43786), (43787), (43788), (43789), (43790), (43791), (43792), (43793), (43794), (43795), (43796), (43797), (43798), (43799),
-(43800), (43801), (43802), (43803), (43804), (43805), (43806), (43807), (43808), (43809), (43810), (43811), (43812), (43813), (43814), (43815),
-(43816), (43817), (43818), (43819), (43820), (43822), (43069), (43071), (43072), (43075), (43076), (43079), (43080), (43083), (43267), (43963),
-(43964), (43475), (43476), (43302), (43303), (43304), (43949), (43517), (43698), (43648), (43848), (43878), (43895), (43922), (43936), (43938),
-(43109), (43563), (43108), (43298), (43562), (43107), (43561), (43106), (43560), (43105), (43559), (43104), (43558), (43103), (43557), (43150),
-(43523), (43087), (43097), (43518), (43468), (43571), (43572), (43614), (43620), (43621), (43647), (43652), (43038), (43646), (43002), (43099),
-(43136), (43144), (43149), (43269), (43270), (43272), (43274), (43275), (43276), (43308), (43336), (43337), (43384), (43362), (43006), (43093),
-(43288), (43307), (43471), (43486), (43489), (43617), (43618), (43619), (43627), (43628), (43629), (43630), (43631), (43632), (43633), (43634),
-(43635), (43636), (43637), (43638), (43639), (43640), (43641), (43650), (43695), (43215), (43493), (43659), (43003), (43321), (43325), (43326),
-(43328), (43329), (43330), (43333), (43341), (43576), (43577), (43643), (43644), (43645), (43653), (43658), (43675), (43676), (43677), (43678),
-(43679), (43680), (43681), (43682), (43683), (43684), (43685), (43686), (43687), (43694), (43701), (43702), (43703), (43704), (43705), (43706),
-(43707), (43708), (43709), (43710), (43711), (43712), (43713), (43714), (43715), (43716), (43717), (43718), (43719), (43720), (43721), (43722),
-(43723), (44090), (44807), (45457), (45459), (45460), (45461), (45462), (45605), (45455), (45538), (45539), (45540), (45541), (45542), (45543),
-(45544), (45547), (45548), (45549), (45350), (45464), (44310), (44311), (44333), (44417), (44418), (44869), (44870), (44926), (44948), (45924),
-(44924), (44555), (44556), (44557), (44871), (44872), (44873), (44874), (44164), (44175), (45280), (45024), (45037), (45173), (44191), (44415),
-(44416), (45172), (44505), (45174), (45175), (44391), (44392), (45850), (45851), (45852), (45853), (44945), (44563), (44875), (44876), (44877),
-(44878), (44879), (44880), (44881), (44882), (44883), (44884), (45705), (44451), (44619), (44627), (44629), (44600), (44811), (44158), (44148),
-(45180), (44260), (44261), (44262), (44263), (44264), (44265), (44266), (44267), (44268), (44269), (44270), (44271), (44272), (44273), (44274),
-(44275), (44277), (44278), (44279), (44280), (44281), (44282), (44284), (44285), (44286), (44287), (44288), (44289), (44290), (44291), (44292),
-(44293), (44866), (44972), (45063), (44703), (45575), (45126), (44428), (45052), (45050), (45629), (44849), (45127), (45229), (45230), (45231),
-(45500), (44817), (44607), (45006), (45007), (45008), (45009), (44506), (44507), (45279), (45863), (45901), (45909), (44221), (44229), (44598),
-(44608), (44609), (44475), (45276), (45277), (44432), (45908), (44743), (44604), (45942), (44462), (44480), (44508), (44620), (44646), (44680),
-(44832), (44851), (44852), (44856), (44915), (44981), (44988), (44989), (44991), (44992), (44993), (44994), (44996), (44997), (45003), (45026),
-(45028), (45029), (45030), (45031), (45032), (45033), (45036), (45045), (45049), (45082), (45120), (45278), (45328), (45569), (45728), (45729),
-(45730), (45748), (45749), (45750), (45751), (45752), (45754), (45759), (45765), (45860), (45899), (45902), (45903), (45904), (45905), (44304),
-(44434), (44656), (44718), (45034), (45035), (45568), (44299), (45630), (44728), (44236), (44298), (44300), (44578), (44580), (44705), (44755),
-(44760), (44761), (44833), (45061), (45176), (45177), (45178), (45179), (45188), (45189), (45190), (45191), (45194), (45195), (45196), (45197),
-(45198), (45199), (45200), (45201), (45202), (45900), (45907), (46105), (46104), (46214), (46215), (46217), (46218), (46219), (46220), (46222),
-(46225), (46227), (46228), (46230), (46232), (46233), (46234), (46235), (46236), (46237), (46238), (46239), (46240), (46241), (46242), (46243),
-(46244), (46245), (46246), (46248), (46255), (46256), (46257), (46273), (46274), (46275), (46276), (46277), (46288), (46289), (46290), (46291),
-(46292), (46293), (46294), (46295), (46296), (46297), (46298), (46299), (46300), (46301), (46302), (46303), (46304), (46305), (46306), (46307),
-(46103), (46213), (46216), (46221), (46223), (46224), (46226), (46231), (46247), (46249), (46250), (46251), (46252), (46253), (46254), (46258),
-(46259), (46260), (46261), (46262), (46263), (46264), (46265), (46266), (46267), (46268), (46269), (46270), (46271), (46272), (46278), (46279),
-(46280), (46281), (46282), (46283), (46284), (46285), (46286), (46287), (46309), (46339), (46340), (46341), (46342), (46343), (46344), (46345),
-(46346), (46347), (46350), (46351), (47497), (47229), (46101), (46778), (46331), (47246), (46709), (46767), (46802), (46892), (46780), (46765),
-(46766), (46849), (47507), (47395), (46399), (46400), (46401), (46402), (46403), (46055), (46847), (47030), (46887), (46054), (46735), (46069),
-(46070), (46106), (46319), (46395), (46783), (46830), (46978), (47036), (46852), (46957), (49686), (48435), (48438), (48440), (48442), (48444),
-(48507), (48509), (48511), (48513), (48515), (48517), (48519), (48521), (48523), (49191), (49497), (48725), (48726), (48727), (48728), (48729),
-(48730), (48731), (48732), (48733), (48734), (48735), (48736), (48737), (48738), (48739), (48740), (48741), (48742), (48743), (48744), (48745),
-(48746), (48747), (48748), (48749), (48750), (48751), (48752), (48753), (48754), (48755), (48756), (48757), (48758), (48759), (48760), (48761),
-(48762), (48763), (48764), (48769), (48770), (48771), (48772), (48773), (48774), (48775), (48776), (48777), (48778), (48781), (48782), (48783),
-(48784), (48785), (48786), (48787), (48788), (48789), (48790), (48794), (48795), (48796), (48797), (48798), (48799), (48800), (48801), (48802),
-(48803), (48804), (48805), (48806), (48807), (48808), (48809), (48810), (48811), (48812), (48813), (48814), (48815), (48816), (48817), (48818),
-(48819), (48820), (48821), (48822), (48823), (48824), (48825), (48826), (48827), (48828), (48829), (48830), (48831), (48832), (48833), (48836),
-(48837), (48838), (48839), (48840), (48841), (48842), (48843), (48844), (48845), (48846), (48847), (48848), (48849), (48850), (48851), (48852),
-(48853), (48854), (48855), (48860), (48861), (48862), (48863), (48864), (48865), (48866), (48867), (48868), (48869), (48870), (48871), (48872),
-(48873), (48874), (48875), (48876), (48877), (48878), (48879), (48880), (48881), (48882), (48883), (48884), (48885), (48886), (48887), (48888),
-(48889), (48890), (48891), (48892), (48893), (48894), (48895), (48896), (48897), (48898), (48899), (48900), (48901), (48902), (48903), (48904),
-(48905), (48906), (48907), (48908), (48909), (48910), (48911), (48912), (48913), (48914), (48915), (48916), (48917), (48918), (48919), (48922),
-(48923), (48924), (48925), (48926), (48927), (48928), (48929), (48930), (48931), (49301), (49312), (49313), (49314), (49852), (49853), (49854),
-(49855), (49334), (49703), (49704), (49706), (48945), (49050), (48527), (49662), (49663), (49665), (49693), (49343), (49640), (49917), (48601),
-(49288), (49289), (48679), (49362), (49223), (49278), (49340), (49373), (49655), (49680), (49739), (49750), (49915), (49916), (49209), (49645),
-(49689), (49708), (49733), (49873), (49984), (50442), (50204), (51682), (51683), (51684), (51685), (51686), (51687), (51688), (51689), (51690),
-(51691), (51692), (51693), (51694), (51695), (51696), (51697), (51698), (51699), (51700), (51701), (51702), (51703), (51704), (51705), (51706),
-(51707), (51708), (51709), (51710), (51711), (51712), (51713), (51714), (51715), (51716), (51717), (51718), (51719), (51720), (51721), (51722),
-(51723), (51724), (51725), (51726), (51727), (51728), (51729), (51730), (51731), (51732), (51733), (51734), (51735), (51736), (51737), (51738),
-(51739), (51740), (51741), (51742), (51743), (51744), (51745), (51746), (51747), (51748), (51749), (51750), (51751), (51752), (51753), (51754),
-(51755), (51756), (51757), (51758), (51759), (51760), (51761), (51762), (51763), (51764), (51765), (51766), (51767), (51768), (51769), (51770),
-(51771), (51772), (51773), (51774), (51775), (51776), (53491), (53492), (53493), (53494), (53495), (53496), (53497), (53498), (53499), (53500),
-(53501), (53502), (53503), (53504), (53505), (53506), (53507), (53508), (53509), (54592), (50315), (50318), (50319), (52567), (50815), (53889),
-(53890), (54069), (54860), (50840), (53891), (53924), (51997), (51998), (54847), (54857), (56806), (54212), (54452), (54810), (50093), (54822),
-(50289), (50301), (50307), (52189), (52202), (52272), (52275), (52276), (52345), (52562), (52563), (52565), (52729), (53510), (54218), (54455),
-(54467), (50248), (50431), (52011), (52062), (54291), (54470);
diff --git a/data/sql/base/db_world/trasm_world_NPC.sql b/data/sql/base/db_world/trasm_world_NPC.sql
deleted file mode 100644
index ec46c740d..000000000
--- a/data/sql/base/db_world/trasm_world_NPC.sql
+++ /dev/null
@@ -1,49 +0,0 @@
-SET
-@Entry = 190010,
-@Name = "Warpweaver";
-DELETE FROM `creature_template` WHERE `entry` = @Entry;
-
-INSERT INTO `creature_template` (`entry`, `name`, `subname`, `IconName`, `gossip_menu_id`, `minlevel`, `maxlevel`, `exp`, `faction`, `npcflag`, `scale`, `rank`, `dmgschool`, `baseattacktime`, `rangeattacktime`, `unit_class`, `unit_flags`, `type`, `type_flags`, `lootid`, `pickpocketloot`, `skinloot`, `AIName`, `MovementType`, `HoverHeight`, `RacialLeader`, `movementId`, `RegenHealth`, `mechanic_immune_mask`, `flags_extra`, `ScriptName`) VALUES
-(@Entry, @Name, "Transmogrifier", NULL, 0, 80, 80, 2, 35, 1, 1, 0, 0, 2000, 0, 1, 0, 7, 138936390, 0, 0, 0, '', 0, 1, 0, 0, 1, 0, 0, 'npc_transmogrifier');
-
-DELETE FROM `creature_template_model` WHERE `CreatureID` = @Entry;
-INSERT INTO `creature_template_model` (`CreatureID`, `Idx`, `CreatureDisplayID`, `DisplayScale`, `Probability`, `VerifiedBuild`) VALUES
-(@Entry, 0, 19646, 1, 1, 0);
-
-DELETE FROM `creature_template_locale` WHERE `entry` IN (@Entry);
-INSERT INTO `creature_template_locale` (`entry`, `locale`, `Name`, `Title`) VALUES
-(@Entry, 'koKR', @Name, "변형기"),
-(@Entry, 'frFR', @Name, "Transmogrificateur"),
-(@Entry, 'deDE', @Name, "Transmogrifier"),
-(@Entry, 'zhCN', @Name, "变形者"),
-(@Entry, 'zhTW', @Name, "幻化大師"),
-(@Entry, 'esES', @Name, "Transfigurador"),
-(@Entry, 'esMX', @Name, "Transfigurador"),
-(@Entry, 'ruRU', @Name, "Трансмогрификатор");
-
-SET
-@Entry = 190011,
-@Name = "Ethereal Warpweaver";
-DELETE FROM `creature_template` WHERE `entry` = @Entry;
-
-INSERT INTO `creature_template` (`entry`, `name`, `subname`, `IconName`, `gossip_menu_id`, `minlevel`, `maxlevel`, `exp`, `faction`, `npcflag`, `scale`, `rank`, `dmgschool`, `baseattacktime`, `rangeattacktime`, `unit_class`, `unit_flags`, `type`, `type_flags`, `lootid`, `pickpocketloot`, `skinloot`, `AIName`, `MovementType`, `HoverHeight`, `RacialLeader`, `movementId`, `RegenHealth`, `mechanic_immune_mask`, `flags_extra`, `ScriptName`) VALUES
-(@Entry, @Name, "Transmogrifier", NULL, 0, 80, 80, 2, 35, 1, 1, 0, 0, 2000, 0, 1, 0, 7, 138936390, 0, 0, 0, '', 0, 1, 0, 0, 1, 0, 0, 'npc_transmogrifier');
-
-DELETE FROM `creature_template_model` WHERE `CreatureID` = @Entry;
-INSERT INTO `creature_template_model` (`CreatureID`, `Idx`, `CreatureDisplayID`, `DisplayScale`, `Probability`, `VerifiedBuild`) VALUES
-(@Entry, 0, 19646, 1, 1, 0);
-
-DELETE FROM `creature_template_locale` WHERE `entry` IN (@Entry);
-INSERT INTO `creature_template_locale` (`entry`, `locale`, `Name`, `Title`) VALUES
-(@Entry, 'koKR', @Name, "변형기"),
-(@Entry, 'frFR', @Name, "Transmogrificateur"),
-(@Entry, 'deDE', @Name, "Transmogrifier"),
-(@Entry, 'zhCN', @Name, "变形者"),
-(@Entry, 'zhTW', @Name, "幻化大師"),
-(@Entry, 'esES', @Name, "Transfigurador"),
-(@Entry, 'esMX', @Name, "Transfigurador"),
-(@Entry, 'ruRU', @Name, "Трансмогрификатор");
-
-DELETE FROM `spell_dbc` WHERE `ID` = 2000100;
-INSERT INTO `spell_dbc` (`ID`, `Category`, `DispelType`, `Mechanic`, `Attributes`, `AttributesEx`, `AttributesEx2`, `AttributesEx3`, `AttributesEx4`, `AttributesEx5`, `AttributesEx6`, `AttributesEx7`, `ShapeshiftMask`, `unk_320_2`, `ShapeshiftExclude`, `unk_320_3`, `Targets`, `TargetCreatureType`, `RequiresSpellFocus`, `FacingCasterFlags`, `CasterAuraState`, `TargetAuraState`, `ExcludeCasterAuraState`, `ExcludeTargetAuraState`, `CasterAuraSpell`, `TargetAuraSpell`, `ExcludeCasterAuraSpell`, `ExcludeTargetAuraSpell`, `CastingTimeIndex`, `RecoveryTime`, `CategoryRecoveryTime`, `InterruptFlags`, `AuraInterruptFlags`, `ChannelInterruptFlags`, `ProcTypeMask`, `ProcChance`, `ProcCharges`, `MaxLevel`, `BaseLevel`, `SpellLevel`, `DurationIndex`, `PowerType`, `ManaCost`, `ManaCostPerLevel`, `ManaPerSecond`, `ManaPerSecondPerLevel`, `RangeIndex`, `Speed`, `ModalNextSpell`, `CumulativeAura`, `Totem_1`, `Totem_2`, `Reagent_1`, `Reagent_2`, `Reagent_3`, `Reagent_4`, `Reagent_5`, `Reagent_6`, `Reagent_7`, `Reagent_8`, `ReagentCount_1`, `ReagentCount_2`, `ReagentCount_3`, `ReagentCount_4`, `ReagentCount_5`, `ReagentCount_6`, `ReagentCount_7`, `ReagentCount_8`, `EquippedItemClass`, `EquippedItemSubclass`, `EquippedItemInvTypes`, `Effect_1`, `Effect_2`, `Effect_3`, `EffectDieSides_1`, `EffectDieSides_2`, `EffectDieSides_3`, `EffectRealPointsPerLevel_1`, `EffectRealPointsPerLevel_2`, `EffectRealPointsPerLevel_3`, `EffectBasePoints_1`, `EffectBasePoints_2`, `EffectBasePoints_3`, `EffectMechanic_1`, `EffectMechanic_2`, `EffectMechanic_3`, `ImplicitTargetA_1`, `ImplicitTargetA_2`, `ImplicitTargetA_3`, `ImplicitTargetB_1`, `ImplicitTargetB_2`, `ImplicitTargetB_3`, `EffectRadiusIndex_1`, `EffectRadiusIndex_2`, `EffectRadiusIndex_3`, `EffectAura_1`, `EffectAura_2`, `EffectAura_3`, `EffectAuraPeriod_1`, `EffectAuraPeriod_2`, `EffectAuraPeriod_3`, `EffectMultipleValue_1`, `EffectMultipleValue_2`, `EffectMultipleValue_3`, `EffectChainTargets_1`, `EffectChainTargets_2`, `EffectChainTargets_3`, `EffectItemType_1`, `EffectItemType_2`, `EffectItemType_3`, `EffectMiscValue_1`, `EffectMiscValue_2`, `EffectMiscValue_3`, `EffectMiscValueB_1`, `EffectMiscValueB_2`, `EffectMiscValueB_3`, `EffectTriggerSpell_1`, `EffectTriggerSpell_2`, `EffectTriggerSpell_3`, `EffectPointsPerCombo_1`, `EffectPointsPerCombo_2`, `EffectPointsPerCombo_3`, `EffectSpellClassMaskA_1`, `EffectSpellClassMaskA_2`, `EffectSpellClassMaskA_3`, `EffectSpellClassMaskB_1`, `EffectSpellClassMaskB_2`, `EffectSpellClassMaskB_3`, `EffectSpellClassMaskC_1`, `EffectSpellClassMaskC_2`, `EffectSpellClassMaskC_3`, `SpellVisualID_1`, `SpellVisualID_2`, `SpellIconID`, `ActiveIconID`, `SpellPriority`, `Name_Lang_enUS`, `Name_Lang_enGB`, `Name_Lang_koKR`, `Name_Lang_frFR`, `Name_Lang_deDE`, `Name_Lang_enCN`, `Name_Lang_zhCN`, `Name_Lang_enTW`, `Name_Lang_zhTW`, `Name_Lang_esES`, `Name_Lang_esMX`, `Name_Lang_ruRU`, `Name_Lang_ptPT`, `Name_Lang_ptBR`, `Name_Lang_itIT`, `Name_Lang_Unk`, `Name_Lang_Mask`, `NameSubtext_Lang_enUS`, `NameSubtext_Lang_enGB`, `NameSubtext_Lang_koKR`, `NameSubtext_Lang_frFR`, `NameSubtext_Lang_deDE`, `NameSubtext_Lang_enCN`, `NameSubtext_Lang_zhCN`, `NameSubtext_Lang_enTW`, `NameSubtext_Lang_zhTW`, `NameSubtext_Lang_esES`, `NameSubtext_Lang_esMX`, `NameSubtext_Lang_ruRU`, `NameSubtext_Lang_ptPT`, `NameSubtext_Lang_ptBR`, `NameSubtext_Lang_itIT`, `NameSubtext_Lang_Unk`, `NameSubtext_Lang_Mask`, `Description_Lang_enUS`, `Description_Lang_enGB`, `Description_Lang_koKR`, `Description_Lang_frFR`, `Description_Lang_deDE`, `Description_Lang_enCN`, `Description_Lang_zhCN`, `Description_Lang_enTW`, `Description_Lang_zhTW`, `Description_Lang_esES`, `Description_Lang_esMX`, `Description_Lang_ruRU`, `Description_Lang_ptPT`, `Description_Lang_ptBR`, `Description_Lang_itIT`, `Description_Lang_Unk`, `Description_Lang_Mask`, `AuraDescription_Lang_enUS`, `AuraDescription_Lang_enGB`, `AuraDescription_Lang_koKR`, `AuraDescription_Lang_frFR`, `AuraDescription_Lang_deDE`, `AuraDescription_Lang_enCN`, `AuraDescription_Lang_zhCN`, `AuraDescription_Lang_enTW`, `AuraDescription_Lang_zhTW`, `AuraDescription_Lang_esES`, `AuraDescription_Lang_esMX`, `AuraDescription_Lang_ruRU`, `AuraDescription_Lang_ptPT`, `AuraDescription_Lang_ptBR`, `AuraDescription_Lang_itIT`, `AuraDescription_Lang_Unk`, `AuraDescription_Lang_Mask`, `ManaCostPct`, `StartRecoveryCategory`, `StartRecoveryTime`, `MaxTargetLevel`, `SpellClassSet`, `SpellClassMask_1`, `SpellClassMask_2`, `SpellClassMask_3`, `MaxTargets`, `DefenseType`, `PreventionType`, `StanceBarOrder`, `EffectChainAmplitude_1`, `EffectChainAmplitude_2`, `EffectChainAmplitude_3`, `MinFactionID`, `MinReputation`, `RequiredAuraVision`, `RequiredTotemCategoryID_1`, `RequiredTotemCategoryID_2`, `RequiredAreasID`, `SchoolMask`, `RuneCostID`, `SpellMissileID`, `PowerDisplayID`, `EffectBonusMultiplier_1`, `EffectBonusMultiplier_2`, `EffectBonusMultiplier_3`, `SpellDescriptionVariableID`, `SpellDifficultyID`) VALUE
-(2000100,0,0,0,262416,0,0,536870912,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,31,0,0,0,101,0,0,0,0,21,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,-1,0,0,28,0,0,1,0,0,0,0,0,0,0,0,0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1000,0,0,0,0,0,0,0,0,190011,0,0,41,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,458,0,2808,0,0,'Ethereal Warpweaver','','','','','','','','','','','','','','','',16712190,'','','','','','','','','','','','','','','','',16712190,'Right Click to summon and dismiss your Ethereal Warpweaver.','','','','','','','','','','','','','','','',16712190,'','','','','','','','','','','','','','','','',16712190,0,133,1500,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0);
diff --git a/data/sql/base/db_world/trasm_world_VendorItems.sql b/data/sql/base/db_world/trasm_world_VendorItems.sql
deleted file mode 100644
index 7c0c9efa8..000000000
--- a/data/sql/base/db_world/trasm_world_VendorItems.sql
+++ /dev/null
@@ -1,30 +0,0 @@
-SET
-@HideEntry = 57575,
-@RemoveEntry = 57576,
-@HideName = "Hide Equipped",
-@RemoveName = "Clear Transmog";
-
-DELETE FROM `item_template` WHERE `entry` = @HideEntry OR `entry` = @RemoveEntry;
-
-INSERT INTO `item_template` (`entry`, `class`, `subclass`, `name`, `displayid`, `InventoryType`, `description`) VALUES
-(@HideEntry, 15, 0, @HideName, 55112, 0, "Hide the item in this slot."),
-(@RemoveEntry, 15, 0, @RemoveName, 8931, 0, "Remove active transmog for this item.");
-
-DELETE FROM `item_template_locale` WHERE `ID` = @HideEntry OR `ID` = @RemoveEntry;
-INSERT INTO `item_template_locale` (`ID`, `locale`, `Name`, `Description`) VALUES
-(@HideEntry, "koKR", "장착된 아이템 숨기기", "이 슬롯의 아이템을 숨깁니다."),
-(@RemoveEntry,"koKR", "변형 지우기", "이 아이템의 활성화된 변형을 제거합니다."),
-(@HideEntry, "frFR", "Masquer l'équipement", "Masquer l'objet dans cet emplacement."),
-(@RemoveEntry,"frFR", "Effacer transmog", "Supprimer la transmog active."),
-(@HideEntry, "deDE", "Ausgerüstet verbergen", "Item in diesem Slot verbergen."),
-(@RemoveEntry,"deDE", "Transmog zurücksetzen", "Aktive Transmogrifikation entfernen."),
-(@HideEntry, "zhCN", "隐藏已装备", "隐藏此物品。"),
-(@RemoveEntry,"zhCN", "清除幻化", "移除激活的幻化。"),
-(@HideEntry, "zhTW", "隱藏已裝備", "隱藏此物品。"),
-(@RemoveEntry,"zhTW", "清除幻化", "移除啟用的幻化。"),
-(@HideEntry, "esES", "Ocultar equipado", "Ocultar el objeto en esta ranura."),
-(@RemoveEntry,"esES", "Borrar transmog", "Eliminar la transmog activa."),
-(@HideEntry, "esMX", "Ocultar equipado", "Ocultar el objeto en este espacio."),
-(@RemoveEntry,"esMX", "Borrar transmog", "Eliminar la transmog activa."),
-(@HideEntry, "ruRU", "Скрыть экипированное", "Скрыть предмет в слоте."),
-(@RemoveEntry,"ruRU", "Очистить трансмог", "Удалить активный трансмог.");
diff --git a/data/sql/base/db_world/trasm_world_texts.sql b/data/sql/base/db_world/trasm_world_texts.sql
deleted file mode 100644
index 5348b6af7..000000000
--- a/data/sql/base/db_world/trasm_world_texts.sql
+++ /dev/null
@@ -1,54 +0,0 @@
-SET @TEXT_ID := 601083;
-DELETE FROM `npc_text` WHERE `ID` IN (@TEXT_ID,@TEXT_ID+1);
-INSERT INTO `npc_text` (`ID`, `text0_0`) VALUES
-(@TEXT_ID, 'Transmogrification allows you to change how your items look like without changing the stats of the items.\r\nItems used in transmogrification are no longer refundable, tradeable and are bound to you.\r\nUpdating a menu updates the view and prices.\r\n\r\nNot everything can be transmogrified with each other.\r\nRestrictions include but are not limited to:\r\nOnly armor and weapons can be transmogrified\r\nGuns, bows and crossbows can be transmogrified with each other\r\nFishing poles can not be transmogrified\r\nYou must be able to equip both items used in the process.\r\n\r\nTransmogrifications stay on your items as long as you own them.\r\nIf you try to put the item in guild bank or mail it to someone else, the transmogrification is stripped.\r\n\r\nYou can also remove transmogrifications for free at the transmogrifier.'),
-(@TEXT_ID+1, 'You can save your own transmogrification sets.\r\n\r\nTo save, first you must transmogrify your equipped items.\r\nThen when you go to the set management menu and go to save set menu,\r\nall items you have transmogrified are displayed so you see what you are saving.\r\nIf you think the set is fine, you can click to save the set and name it as you wish.\r\n\r\nTo use a set you can click the saved set in the set management menu and then select use set.\r\nIf the set has a transmogrification for an item that is already transmogrified, the old transmogrification is lost.\r\nNote that the same transmogrification restrictions apply when trying to use a set as in normal transmogrification.\r\n\r\nTo delete a set you can go to the set\'s menu and select delete set.');
-
-DELETE FROM `npc_text_locale` WHERE `ID` IN (@TEXT_ID,@TEXT_ID+1);
-INSERT INTO `npc_text_locale` (`ID`, `Locale`, `Text0_0`) VALUES
-(@TEXT_ID, 'koKR', '형상변환을 사용하면 아이템의 능력치를 변경하지 않고도 아이템의 모양을 변경할 수 있습니다.\r\n형변환에 사용된 아이템은 더 이상 환불 및 거래가 불가능하며 귀속됩니다.\r\n메뉴를 업데이트하면 보기 및 가격이 업데이트됩니다.\r\n\r\n모든 것을 서로 형상변환할 수 있는 것은 아닙니다.\r\n제한사항에는 다음이 포함되지만 이에 국한되지는 않습니다:\r\n갑옷과 무기만 형상변환할 수 있습니다.\r\n총, 활, 석궁은 서로 형상변환할 수 있습니다 \r\n낚싯대는 형상변환할 수 없습니다.\r\n이 과정에서 사용되는 두 아이템을 장착할 수 있어야 합니다.\r\n\r\n변환은 아이템을 소유하고 있는 동안 유지됩니다.\r\n시도하면 아이템을 길드 은행에 넣거나 다른 사람에게 우편으로 보내면 형상변환이 제거됩니다.\r\n\r\n변환기에서 무료로 형상변환을 제거할 수도 있습니다.'),
-(@TEXT_ID+1, 'koKR', '나만의 형상변환 세트를 저장할 수 있습니다.\r\n\r\n저장하려면 먼저 장착한 아이템을 형상변환해야 합니다.\r\n그 다음 세트 관리 메뉴에서 세트 저장 메뉴로 이동하면\r\n모든 아이템이 변환한 항목이 표시되어 저장 중인 항목을 볼 수 있습니다.\r\n세트가 괜찮다고 생각되면 클릭하여 세트를 저장하고 원하는 이름을 지정할 수 있습니다.\r\n\r\n세트를 사용하려면 세트 관리 메뉴에서 저장된 세트를 클릭한 다음 세트 사용을 선택할 수 있습니다.\r\n세트에 이미 형상변환된 아이템에 대한 형상변환이 있는 경우 이전 형상변환은 손실됩니다.\r\n다음과 같은 경우 동일한 형상변환 제한이 적용됩니다. 일반 형상변환에서와 같이 세트를 사용하려고 합니다.\r\n\r\n세트를 삭제하려면 세트 메뉴로 이동하여 세트 삭제를 선택하면 됩니다.'),
-(@TEXT_ID, 'frFR', 'La transmogrification vous permet de modifier l''apparence de vos objets sans modifier les statistiques des objets.\\r\\nLes objets utilisés dans la transmogrification ne sont plus remboursables, échangeables et vous sont liés.\\r\\nLa mise à jour d''un menu met à jour la vue et les prix.\\ r\\n\\r\\nTout ne peut pas être transmogrifié les uns avec les autres.\\r\\nLes restrictions incluent, mais ne sont pas limitées à :\\r\\nSeules les armures et les armes peuvent être transmogrifiées\\r\\nLes fusils, les arcs et les arbalètes peuvent être transmogrifiés les uns avec les autres \\r\\nLes cannes à pêche ne peuvent pas être transmogrifiées\\r\\nVous devez être capable d''équiper les deux objets utilisés dans le processus.\\r\\n\\r\\nLes transmogrifications restent sur vos objets tant que vous les possédez.\\r\\nSi vous essayez pour mettre l''objet dans la banque de guilde ou l''envoyer à quelqu''un d''autre, la transmogrification est supprimée.\\r\\n\\r\\nVous pouvez également supprimer les transmogrifications gratuitement sur le transmogrificateur.'),
-(@TEXT_ID+1, 'frFR', 'Vous pouvez enregistrer vos propres ensembles de transmogrification.\r\n\r\nPour enregistrer, vous devez d''abord transmogrifier vos objets équipés.\r\nEnsuite, lorsque vous accédez au menu de gestion des ensembles et accédez au menu de sauvegarde,\r\ntous les objets vous avez transmogrifié sont affichés afin que vous puissiez voir ce que vous enregistrez.\r\nSi vous pensez que l''ensemble est correct, vous pouvez cliquer pour enregistrer l''ensemble et le nommer comme vous le souhaitez.\r\n\r\nPour utiliser un ensemble, vous pouvez cliquer sur l''ensemble enregistré dans le menu de gestion de l''ensemble, puis sélectionnez utiliser l''ensemble.\r\nSi l''ensemble a une transmogrification pour un élément déjà transmogrifié, l''ancienne transmogrification est perdue.\r\nNotez que les mêmes restrictions de transmogrification s''appliquent lorsque essayer d''utiliser un ensemble comme dans une transmogrification normale.\r\n\r\nPour supprimer un ensemble, vous pouvez aller dans le menu de l''ensemble et sélectionner supprimer l''ensemble.'),
-(@TEXT_ID, 'deDE', 'Mit der Transmogrifizierung können Sie das Aussehen Ihrer Gegenstände ändern, ohne die Werte der Gegenstände zu ändern.\r\nBei der Transmogrifizierung verwendete Gegenstände sind nicht mehr erstattungsfähig, handelbar und an Sie gebunden.\r\nDurch das Aktualisieren eines Menüs werden die Ansicht und die Preise aktualisiert.\ r\n\r\nNicht alles kann miteinander transmogrifiziert werden.\r\nZu den Einschränkungen gehören unter anderem:\r\nNur Rüstungen und Waffen können miteinander transmogrifiziert werden.\r\nWaffen, Bögen und Armbrüste können miteinander transmogrifiziert werden \r\nAngelruten können nicht transmogrifiziert werden.\r\nSie müssen in der Lage sein, beide dabei verwendeten Gegenstände auszurüsten.\r\n\r\nTransmogrifikationen bleiben auf Ihren Gegenständen, solange Sie sie besitzen.\r\nWenn Sie es versuchen Um den Gegenstand in die Gildenbank zu legen oder an jemand anderen zu verschicken, wird die Transmogrifikation entfernt.\r\n\r\nSie können Transmogrifikationen auch kostenlos beim Transmogrifizierer entfernen.'),
-(@TEXT_ID+1, 'deDE', 'Sie können Ihre eigenen Transmogrifikationssets speichern.\r\n\r\nZum Speichern müssen Sie zuerst Ihre ausgerüsteten Gegenstände transmogrifizieren.\r\nWenn Sie dann zum Set-Verwaltungsmenü gehen und zum Set-Speichermenü gehen,\r\nalle Gegenstände Sie werden angezeigt, sodass Sie sehen, was Sie speichern.\r\nWenn Sie der Meinung sind, dass das Set in Ordnung ist, können Sie auf klicken, um das Set zu speichern und es nach Ihren Wünschen zu benennen.\r\n\r\nSo verwenden Sie ein Set Sie können im Setverwaltungsmenü auf das gespeicherte Set klicken und dann „Set verwenden“ auswählen.\r\nWenn das Set eine Transmogrifizierung für einen Gegenstand hat, der bereits transmogrifiziert ist, geht die alte Transmogrifizierung verloren.\r\nBeachten Sie, dass die gleichen Transmogrifizierungsbeschränkungen gelten, wenn Ich versuche, ein Set wie bei der normalen Transmogrifizierung zu verwenden.\r\n\r\nUm ein Set zu löschen, gehen Sie zum Menü des Sets und wählen Sie „Set löschen“.'),
-(@TEXT_ID, 'zhCN', '变形允许您更改物品的外观，而无需更改物品的统计信息。\r\n变形中使用的物品不再可退款、可交易并且与您绑定。\r\n更新菜单会更新视图和价格。\ r\n\r\n并不是所有东西都可以互相变形。\r\n限制包括但不限于：\r\n只有盔甲和武器可以变形\r\n枪、弓、弩可以互相变形 \r\n鱼竿无法变形\r\n您必须能够装备在此过程中使用的两个物品。\r\n\r\n只要您拥有它们，变形就会保留在您的物品上。\r\n如果您尝试 将物品放入公会银行或邮寄给其他人时，变形会被剥离。\r\n\r\n您也可以在变形器处免费移除变形。'),
-(@TEXT_ID+1, 'zhCN', '您可以保存自己的变形套装。\r\n\r\n要保存，首先必须变形您装备的物品。\r\n然后当您进入套装管理菜单并进入保存套装菜单时，\r\n所有物品 将显示您已经变形的内容，以便您看到正在保存的内容。\r\n如果您认为该集合没问题，可以单击以保存该集合并根据需要命名它。\r\n\r\n要使用您的集合 可以在集合管理菜单中单击已保存的集合，然后选择使用集合。\r\n如果该集合对已变形的项目有变形，则旧的变形将丢失。\r\n请注意，以下情况适用相同的变形限制： 尝试像正常变形一样使用集合。\r\n\r\n要删除集合，您可以转到集合的菜单并选择删除集合。'),
-(@TEXT_ID, 'zhTW', '變身術讓你能夠改變物品的外觀，而不改變物品的屬性。\r\n在變身術中使用的物品將不再可退款、可交易，並且將綁定於你。\r\n更新菜單將更新視圖和價格。\r\n\r\n並非所有物品都可以互相變身。\r\n限制條件包括但不限於：\r\n只有盔甲和武器可以變身。\r\n槍械、弓和弩可以互相變身。\r\n釣魚竿無法進行變身。\r\n你必須能夠裝備在此過程中使用的兩件物品。\r\n\r\n變身效果會持續存在於你的物品上，只要你擁有它們。\r\n如果你試圖將物品放入公會銀行或郵寄給他人，將會去除變身效果。\r\n\r\n你也可以在變身術轉化師處免費移除變身效果。'),
-(@TEXT_ID+1, 'zhTW', '你可以保存自己的變身套裝。\r\n\r\n要保存，首先必須對你裝備的物品進行變身。\r\n然後，當你進入套裝管理菜單並進入保存套裝菜單時，\r\n所有你已經變身的物品都會顯示出來，這樣你就可以看到你正在保存的內容。\r\n如果你認為這套裝很好，你可以點擊保存套裝並按你的意願命名。\r\n\r\n要使用一個套裝，你可以在套裝管理菜單中點擊已保存的套裝，然後選擇使用套裝。\r\n如果該套裝中的物品已經有變身效果，舊的變身效果將會遺失。\r\n請注意，當嘗試使用套裝時，與普通變身相同的限制將適用。\r\n\r\n要刪除一個套裝，你可以進入套裝的菜單，然後選擇刪除套裝。'),
-(@TEXT_ID, 'esES', 'La transfiguración permite cambiar la apariencia de tus objetos sin cambiar sus estadísticas.\r\nLos objetos utilizados en la transfiguración ya no son reembolsables, intercambiables y están vinculados a usted.\r\nActualizar un menú actualiza la vista y los precios.\ r\n\r\nNo todo se puede transfigurar entre sí.\r\nLas restricciones incluyen, pero no se limitan a:\r\nSolo se pueden transfigurar armaduras y armas\r\nArmas, arcos y ballestas se pueden transfigurar entre sí \r\nLas cañas de pescar no se pueden transfigurar.\r\nDebes poder equipar ambos elementos utilizados en el proceso.\r\n\r\nLas transfiguraciones permanecen en tus elementos mientras los tengas.\r\nSi lo intentas para poner el artículo en el banco del gremio o enviarlo por correo a otra persona, la transfiguración se elimina.\r\n\r\nTambién puedes eliminar las transfiguraciones de forma gratuita en el transfigurador.'),
-(@TEXT_ID+1, 'esES', 'Puede guardar sus propios conjuntos de transfiguración.\r\n\r\nPara guardar, primero debe transfigurar sus elementos equipados.\r\nLuego, cuando vaya al menú de administración de conjuntos y vaya al menú Guardar conjunto,\r\ntodos los elementos que ha transfigurado se muestran para que vea lo que está guardando.\r\nSi cree que el conjunto está bien, puede hacer clic para guardar el conjunto y nombrarlo como desee.\r\n\r\nPara usar un conjunto puede hacer clic en el conjunto guardado en el menú de administración de conjuntos y luego seleccionar usar conjunto.\r\nSi el conjunto tiene una transfiguración para un elemento que ya está transfigurado, la transfiguración anterior se pierde.\r\nTenga en cuenta que se aplican las mismas restricciones de transfiguración cuando tratando de usar un conjunto como en la transfiguración normal.\r\n\r\nPara eliminar un conjunto, puede ir al menú del conjunto y seleccionar eliminar conjunto.'),
-(@TEXT_ID, 'esMX', 'La transfiguración permite cambiar la apariencia de tus objetos sin cambiar sus estadísticas.\r\nLos objetos utilizados en la transfiguración ya no son reembolsables, intercambiables y están vinculados a usted.\r\nActualizar un menú actualiza la vista y los precios.\ r\n\r\nNo todo se puede transfigurar entre sí.\r\nLas restricciones incluyen, pero no se limitan a:\r\nSolo se pueden transfigurar armaduras y armas\r\nArmas, arcos y ballestas se pueden transfigurar entre sí \r\nLas cañas de pescar no se pueden transfigurar.\r\nDebes poder equipar ambos elementos utilizados en el proceso.\r\n\r\nLas transfiguraciones permanecen en tus elementos mientras los tengas.\r\nSi lo intentas para poner el artículo en el banco del gremio o enviarlo por correo a otra persona, la transfiguración se elimina.\r\n\r\nTambién puedes eliminar las transfiguraciones de forma gratuita en el transfigurador.'),
-(@TEXT_ID+1, 'esMX', 'Puede guardar sus propios conjuntos de transfiguración.\r\n\r\nPara guardar, primero debe transfigurar sus elementos equipados.\r\nLuego, cuando vaya al menú de administración de conjuntos y vaya al menú Guardar conjunto,\r\ntodos los elementos que ha transfigurado se muestran para que vea lo que está guardando.\r\nSi cree que el conjunto está bien, puede hacer clic para guardar el conjunto y nombrarlo como desee.\r\n\r\nPara usar un conjunto puede hacer clic en el conjunto guardado en el menú de administración de conjuntos y luego seleccionar usar conjunto.\r\nSi el conjunto tiene una transfiguración para un elemento que ya está transfigurado, la transfiguración anterior se pierde.\r\nTenga en cuenta que se aplican las mismas restricciones de transfiguración cuando tratando de usar un conjunto como en la transfiguración normal.\r\n\r\nPara eliminar un conjunto, puede ir al menú del conjunto y seleccionar eliminar conjunto.'),
-(@TEXT_ID, 'ruRU', 'Трансмогрификация позволяет вам изменить внешний вид ваших предметов без изменения характеристик предметов.\r\nПредметы, использованные в трансмогрификации, больше не подлежат возврату, обмену и привязаны к вам.\r\nОбновление меню обновляет вид и цены.\ r\n\r\nНе все можно трансмогрифицировать друг с другом.\r\nОграничения включают, но не ограничиваются:\r\nМожно трансмогрифицировать только доспехи и оружие\r\nОружие, луки и арбалеты можно трансмогрифицировать друг с другом \r\nУдочки не могут быть трансмогрифицированы\r\nВы должны быть в состоянии экипировать оба предмета, используемые в процессе.\r\n\r\nПреобразования остаются на ваших предметах, пока они у вас есть.\r\nЕсли вы попытаетесь чтобы положить предмет в банк гильдии или отправить кому-то другому, трансмогрификация снимается.\r\n\r\nВы также можете бесплатно удалить трансмогрификацию в трансмогрификаторе.'),
-(@TEXT_ID+1, 'ruRU', 'Вы можете сохранять свои собственные наборы для трансмогрификации.\r\n\r\nЧтобы сохранить, сначала вы должны трансмогрифицировать свои экипированные предметы.\r\nЗатем, когда вы перейдете в меню управления наборами и перейдете в меню сохранения набора,\r\nвсе предметы которые вы преобразовали, отображаются так, что вы видите, что вы сохраняете.\r\nЕсли вы считаете, что набор в порядке, вы можете нажать, чтобы сохранить набор и назвать его по своему желанию.\r\n\r\nЧтобы использовать набор, можно щелкнуть сохраненный набор в меню управления набором, а затем выбрать использовать набор.\r\nЕсли в наборе есть трансмогрификация предмета, который уже трансмогрифицирован, старая трансмогрификация теряется.\r\nОбратите внимание, что те же ограничения на трансмогрификацию применяются, когда пытается использовать набор, как при обычной трансмогрификации.\r\n\r\nЧтобы удалить набор, вы можете перейти в меню набора и выбрать удалить набор.');
-
-SET @STRING_ENTRY := 11100;
-DELETE FROM `acore_string` WHERE `entry` IN (@STRING_ENTRY+0,@STRING_ENTRY+1,@STRING_ENTRY+2,@STRING_ENTRY+3,@STRING_ENTRY+4,@STRING_ENTRY+5,@STRING_ENTRY+6,@STRING_ENTRY+7,@STRING_ENTRY+8,@STRING_ENTRY+9,@STRING_ENTRY+10, @STRING_ENTRY+11, @STRING_ENTRY+12, @STRING_ENTRY+13, @STRING_ENTRY+14, @STRING_ENTRY+15, @STRING_ENTRY+16);
-INSERT INTO `acore_string` (`entry`, `content_default`, `locale_koKR`, `locale_frFR`, `locale_deDE`, `locale_zhCN`, `locale_zhTW`, `locale_esES`, `locale_esMX`, `locale_ruRU`)
-VALUES
-(11100, 'Item successfully transmogrified.', '성공적으로 형상변환된 아이템', 'Objet transmogrifié avec succès', 'Gegenstand erfolgreich transmogrifiziert', '物品变形成功', '物品變身成功。', 'Objeto transfigurado con éxito', 'Objeto transfigurado con éxito', 'Предмет успешно трансмогрифицирован'),
-(11101, 'Equipment slot is empty.', '장비 슬롯이 비어 있습니다.', 'L''emplacement d''équipement est vide.', 'Der Ausrüstungsplatz ist leer.', '装备槽是空的。', '裝備欄位是空的。', 'La ranura de equipo está vacía.', 'La ranura de equipo está vacía.', 'Слот снаряжения пуст.'),
-(11102, 'Invalid source item selected.', '선택한 소스 요소가 잘못되었습니다.', 'Élément source sélectionné non valide.', 'Ungültiges ausgewähltes Quellelement.', '所选源元素无效。', '選擇的來源物品無效。', 'Elemento fuente seleccionado no válido.', 'Elemento fuente seleccionado no válido.', 'Недопустимый выбранный исходный элемент.'),
-(11103, 'Source item does not exist.', '소스 요소가 존재하지 않습니다.', 'L''élément source n''existe pas.', 'Das Quellelement existiert nicht.', '源元素不存在。', '來源物品不存在。', 'El elemento de origen no existe.', 'El elemento de origen no existe.', 'Исходный элемент не существует.'),
-(11104, 'Destination item does not exist.', '대상 요소가 존재하지 않습니다.', 'L''élément cible n''existe pas.', 'Das Zielelement existiert nicht.', '目标元素不存在。', '目標物品不存在。', 'El elemento de destino no existe.', 'El elemento de destino no existe.', 'Целевой элемент не существует.'),
-(11105, 'Selected items are invalid.', '선택한 항목이 잘못되었습니다.', 'Les éléments sélectionnés ne sont pas valides', 'Die ausgewählten Elemente sind ungültig', '所选项目无效', '所選物品無效。', 'Los elementos seleccionados no son válidos', 'Los elementos seleccionados no son válidos', 'Выбранные элементы недействительны'),
-(11106, 'You don''t have enough money.', '당신은 돈이 충분하지 않습니다.', 'Vous n''avez pas assez d''argent.', 'Du hast nicht genug Geld.', '你没有足够的钱。', '你沒有足夠的金錢。', 'No tienes suficiente dinero.', 'No tienes suficiente dinero.', 'У вас недостаточно денег.'),
-(11107, 'You don''t have enough tokens.', '칩이 충분하지 않습니다.', 'Vous n''avez pas assez de jetons.', 'Du hast nicht genug Chips.', '你的筹码不够。', '你沒有足夠的代幣。', 'No tienes suficientes fichas.', 'No tienes suficientes fichas.', 'У вас недостаточно фишек.'),
-(11108, 'All your transmogrifications were removed.', '모든 형상변환을 제거했습니다.', 'Suppression de toutes vos transmogrifications', 'Alle deine Transmogrifikationen wurden entfernt', '删除了你所有的变形', '你的所有變身效果都被移除了。', 'Se eliminaron todas tus transfiguraciones', 'Se eliminaron todas tus transfiguraciones', 'Удалены все ваши трансмогрификации'),
-(11109, 'No transmogrification found.', '변형이 없습니다.', 'Aucune transfiguration trouvée.', 'Keine Verwandlung gefunden.', '没有发现变形。', '找不到變身效果。', 'No se encontró transfiguración.', 'No se encontró transfiguración.', 'Трансфигурация не найдена.'),
-(11110, 'Invalid name inserted.', '삽입된 이름이 잘못되었습니다.', 'Nom inséré non valide.', 'Ungültiger eingegebener Name.', '插入的名称无效。', '插入的名稱無效。', 'Nombre insertado no válido.', 'Nombre insertado no válido.', 'Недопустимое вставленное имя.'),
-(11111, 'Showing transmogrified items, relog to update the current area.', '형상변환된 아이템이 표시되며, 현재 영역을 새로고침하려면 다시 로그인하세요.', 'En affichant les objets transmogrifiés, reconnectez-vous pour actualiser la zone actuelle.', 'Transmogrifizierte Gegenstände werden angezeigt. Melden Sie sich erneut an, um den aktuellen Bereich zu aktualisieren.', '显示已变形物品，重新登录即可刷新当前区域。', '顯示已變身的物品，重新登錄以更新當前區域。', 'Mostrando elementos transfigurados, vuelva a iniciar sesión para actualizar el área actual.', 'Mostrando elementos transfigurados, vuelva a iniciar sesión para actualizar el área actual.', 'Отображение трансмогрифицированных предметов. Войдите в систему еще раз, чтобы обновить текущую область.'),
-(11112, 'Hiding transmogrified items, relog to update the current area.', '형상변환된 아이템을 숨기고 다시 로그인하여 현재 영역을 새로 고칩니다.', 'Masquez les objets transmogrifiés, reconnectez-vous pour actualiser la zone actuelle.', 'Transmogrifizierte Gegenstände ausblenden, erneut anmelden, um den aktuellen Bereich zu aktualisieren.', '隐藏变形物品，重新登录以刷新当前区域。', '隱藏已變身的物品，重新登錄以更新當前區域。', 'Ocultar elementos transfigurados, volver a iniciar sesión para actualizar el área actual.', 'Ocultar elementos transfigurados, volver a iniciar sesión para actualizar el área actual.', 'Скройте трансмогрифицированные предметы, войдите в систему, чтобы обновить текущую область.'),
-(11113, 'The selected item is not suitable for transmogrification.', '선택한 항목은 변형에 적합하지 않습니다.', 'L''objet sélectionné ne convient pas à la métamorphose.', 'Der ausgewählte Gegenstand ist nicht für die Verwandlung geeignet.', '所选项目不适合变形。', '所選物品不適合進行變身。', 'El elemento seleccionado no es adecuado para la transfiguración.', 'El elemento seleccionado no es adecuado para la transfiguración.', 'Выбранный предмет не подходит для преображения.'),
-(11114, 'The selected item cannot be used for transmogrification of the target player.', '선택한 아이템은 대상 플레이어의 형상변환에 사용할 수 없습니다.', 'L''objet sélectionné ne peut pas être utilisé pour la transmogrification du joueur ciblé', 'Der ausgewählte Gegenstand kann nicht für die Transmogrifizierung des Zielspielers verwendet werden', '所选物品不能用于目标玩家的变身', '所選物品不能用於目標玩家的變身效果。', 'El elemento seleccionado no se puede usar para la transfiguración del jugador objetivo', 'El elemento seleccionado no se puede usar para la transfiguración del jugador objetivo', 'Выбранный предмет нельзя использовать для трансмогрификации целевого игрока.'),
-(11115, 'Performing transmog appearance sync...', '형상변환 모양 동기화 수행 중...', 'Exécution de la synchronisation de l''apparence de transmogrification...', 'Synchronisierung des Transmog-Erscheinungsbilds wird durchgeführt ...', '正在执行 Transmog 外观同步...', '正在執行外觀同步變身操作...', 'Realizando sincronización de apariencia de transfiguración...', 'Realizando sincronización de apariencia de transfiguración...', 'Выполнение синхронизации внешнего вида Transmog...'),
-(11116, 'Appearance sync complete.', '전체 모양 동기화', 'Synchronisation complète de l''apparence', 'Vollständige Synchronisierung des Erscheinungsbilds', '完全外观同步', '外觀同步變身操作完成。', 'Sincronización de apariencia completa', 'Sincronización de apariencia completa', 'Полная синхронизация внешнего вида');
-
-DELETE FROM `command` WHERE `name` IN ('transmog', 'transmog add', 'transmog sync', 'transmog add set', 'transmog portable');
-INSERT INTO `command` (`name`, `security`, `help`) VALUES
-('transmog', 0, 'Syntax: .transmog \nAllows seeing transmogrified items and the transmogrifier NPC.'),
-('transmog add', 1, 'Syntax: .transmog add $player $item\nAdds an item to a player\'s appearance collection.'),
-('transmog sync', 0, 'Syntax: .transmog sync\nSyncs transmog addon appearances with the server.'),
-('transmog add set', 1, 'Syntax: .transmog add set $player $itemSet\nAdds items of an item set to a player\'s appearance collection.'),
-('transmog portable', 1, 'Syntax: .transmog portable \nSummons the Ethereal Warpweaver, a portable version of the transmogrification NPC.');
diff --git a/data/sql/base/db_world/z_filter_disabled_and_trash.sql b/data/sql/base/db_world/z_filter_disabled_and_trash.sql
deleted file mode 100644
index b56278122..000000000
--- a/data/sql/base/db_world/z_filter_disabled_and_trash.sql
+++ /dev/null
@@ -1,66 +0,0 @@
-
-INSERT IGNORE INTO mod_auctionhousebot_disabled_items (item)
-SELECT entry
-FROM item_template
-WHERE (
- NAME LIKE '%tablet%' OR
- NAME LIKE '%sulfuron%' OR
- NAME LIKE '%nightcrawlers%' OR
- NAME LIKE '%throwing dagger%' OR
- NAME LIKE '%shot pouch%' OR
- NAME LIKE '%brimstone%' OR
- NAME LIKE '%small pouch%' OR
- NAME LIKE '%dye%' OR
- NAME LIKE '%ironwood seed%' OR
- NAME LIKE '%stranglethorn seed%' OR
- NAME LIKE '%simple wood%' OR
- NAME LIKE '%bleach%' OR
- NAME LIKE '%flour%' OR
- NAME LIKE '%brew%' OR
- NAME LIKE '%parchment%' OR
- NAME LIKE '%light quiver%' OR
- NAME LIKE '%honey%' OR
- NAME LIKE '%/%' OR
- NAME LIKE '%creeping anguish%' OR
- NAME LIKE '%felcloth bag%' OR
- NAME LIKE '%elementium ore%' OR
- NAME LIKE '%unused%' OR
- NAME LIKE '%lava core%' OR
- NAME LIKE '%fiery core%' OR
- NAME LIKE '%sulfuron ingot%' OR
- NAME LIKE '%sak%' OR
- NAME LIKE '%gigantique%' OR
- NAME LIKE '%portable hole%' OR
- NAME LIKE '%deptecated%' OR
- NAME LIKE '%durability%' OR
- NAME LIKE '%big sack%' OR
- NAME LIKE '%decoded%' OR
- NAME LIKE '%knowledge:%' OR
- NAME LIKE '%manual%' OR
- NAME LIKE '%gnome head%' OR
- NAME LIKE '%critter enlarger%' OR
- NAME LIKE '%box of%' OR
- NAME LIKE '%summoning%' OR
- NAME LIKE '%turtle egg%' OR
- NAME LIKE '%heavy crate%' OR
- NAME LIKE '%assasin throwing axe%' OR
- NAME LIKE '%sack of gems%' OR
- NAME LIKE '%plans: darkspear%' OR
- NAME LIKE '%of swords%' OR
- NAME LIKE '%gnomish alarm%' OR
- NAME LIKE '%world enlarger%' OR
- NAME LIKE '%tome%' OR
- NAME LIKE '%ornate spyglass%' OR
- NAME LIKE '%test%' OR
- NAME LIKE '%darkmoon prize%' OR
- NAME LIKE '%codex%' OR
- NAME LIKE '%grimoire%' OR
- NAME LIKE '%deprecated%' OR
- NAME LIKE '%book%' OR
- NAME LIKE '%libram%' OR
- NAME LIKE '%guide%'
-)
-OR UPPER(NAME) LIKE '%OLD%'
-OR UPPER(NAME) LIKE '%NPC%'
-OR UPPER(NAME) LIKE '%QA%'
-OR (CLASS = 0 AND SUBCLASS = 5 AND REQUIREDLEVEL < 40);
diff --git a/data/sql/updates/db_world/2025_11_10_00.sql b/data/sql/updates/db_world/2025_11_10_00.sql
deleted file mode 100644
index a3f3213d6..000000000
--- a/data/sql/updates/db_world/2025_11_10_00.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_09_05 -> 2025_11_10_00
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 24539) AND (`source_type` = 0) AND (`id` IN (5));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(24539, 0, 5, 0, 2, 1, 100, 513, 0, 50, 0, 0, 0, 0, 80, 2453900, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, '"Silvermoon" Harry - Between 0-50% Health - Run Script (Phase 1) (No Repeat)');
diff --git a/data/sql/updates/db_world/2025_11_10_01.sql b/data/sql/updates/db_world/2025_11_10_01.sql
deleted file mode 100644
index caa15f098..000000000
--- a/data/sql/updates/db_world/2025_11_10_01.sql
+++ /dev/null
@@ -1,4 +0,0 @@
--- DB update 2025_11_10_00 -> 2025_11_10_01
---
-UPDATE `quest_template` SET `RewardFactionValue1` = 5 WHERE (`ID` = 11472);
-UPDATE `quest_template` SET `RewardFactionValue1` = 5, `RewardFactionOverride1` = 0 WHERE (`ID` = 11945);
diff --git a/data/sql/updates/db_world/2025_11_10_02.sql b/data/sql/updates/db_world/2025_11_10_02.sql
deleted file mode 100644
index cb1d4aad5..000000000
--- a/data/sql/updates/db_world/2025_11_10_02.sql
+++ /dev/null
@@ -1,4 +0,0 @@
--- DB update 2025_11_10_01 -> 2025_11_10_02
---
-DELETE FROM `game_event_gameobject` WHERE `eventEntry`=1 AND `guid`=5;
-INSERT INTO `game_event_gameobject` (`eventEntry`, `guid`) VALUES(1, 5);
diff --git a/data/sql/updates/db_world/2025_11_10_03.sql b/data/sql/updates/db_world/2025_11_10_03.sql
deleted file mode 100644
index ff79a0774..000000000
--- a/data/sql/updates/db_world/2025_11_10_03.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- DB update 2025_11_10_02 -> 2025_11_10_03
---
--- Increase grid searches to 60 from 40
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 2572900) AND (`source_type` = 9) AND (`id` IN (2, 5));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(2572900, 9, 2, 0, 0, 0, 100, 0, 8000, 8000, 0, 0, 0, 0, 1, 7, 0, 0, 0, 0, 0, 19, 25749, 60, 0, 0, 0, 0, 0, 0, 'Shadowstalker Getry - Actionlist - Say Line 7'),
-(2572900, 9, 5, 0, 0, 0, 100, 0, 3000, 3000, 0, 0, 0, 0, 41, 0, 0, 0, 0, 0, 0, 19, 25749, 60, 0, 0, 0, 0, 0, 0, 'Shadowstalker Getry - Actionlist - Despawn Instant');
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 25618) AND (`source_type` = 0) AND (`id` IN (3, 4));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(25618, 0, 3, 4, 6, 0, 100, 512, 0, 0, 0, 0, 0, 0, 15, 11705, 0, 0, 0, 0, 0, 18, 60, 0, 0, 0, 0, 0, 0, 0, 'Varidus the Flenser - On Just Died - Quest Credit \'Foolish Endeavors\''),
-(25618, 0, 4, 0, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 45, 1, 1, 0, 0, 0, 0, 19, 25729, 60, 0, 0, 0, 0, 0, 0, 'Varidus the Flenser - On Just Died - Set Data 1 1');
--- Increase despawn time from 3 to 4 minutes
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 2561800) AND (`source_type` = 9) AND (`id` IN (25));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(2561800, 9, 25, 0, 0, 0, 100, 0, 240000, 240000, 0, 0, 0, 0, 41, 0, 0, 0, 0, 0, 0, 19, 25729, 100, 0, 0, 0, 0, 0, 0, 'Varidus the Flenser - Actionlist - Despawn Instant');
diff --git a/data/sql/updates/db_world/2025_11_11_00.sql b/data/sql/updates/db_world/2025_11_11_00.sql
deleted file mode 100644
index 5b3a208d6..000000000
--- a/data/sql/updates/db_world/2025_11_11_00.sql
+++ /dev/null
@@ -1,4 +0,0 @@
--- DB update 2025_11_10_03 -> 2025_11_11_00
---
-DELETE FROM `areatrigger_scripts` WHERE `entry`=5338;
-INSERT INTO `areatrigger_scripts` (`entry`, `ScriptName`) VALUES(5338, 'at_last_rites');
diff --git a/data/sql/updates/db_world/2025_11_11_01.sql b/data/sql/updates/db_world/2025_11_11_01.sql
deleted file mode 100644
index 58d10ecc1..000000000
--- a/data/sql/updates/db_world/2025_11_11_01.sql
+++ /dev/null
@@ -1,10 +0,0 @@
--- DB update 2025_11_11_00 -> 2025_11_11_01
---
--- Update comments, remove action On Init AI set combat distance to 100
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 32767) AND (`source_type` = 0) AND (`id` IN (0, 1, 2, 3, 4, 5));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(32767, 0, 0, 0, 1, 0, 100, 0, 5000, 10000, 3000, 6000, 0, 0, 49, 0, 0, 0, 0, 0, 0, 19, 31406, 80, 0, 0, 0, 0, 0, 0, 'Frostbrood Sentry - Out of Combat - Start Attacking'),
-(32767, 0, 1, 0, 1, 0, 100, 0, 5000, 10000, 3000, 6000, 0, 0, 49, 0, 0, 0, 0, 0, 0, 19, 32512, 80, 0, 0, 0, 0, 0, 0, 'Frostbrood Sentry - Out of Combat - Start Attacking'),
-(32767, 0, 2, 0, 1, 0, 100, 0, 5000, 10000, 3000, 6000, 0, 0, 49, 0, 0, 0, 0, 0, 0, 19, 31838, 80, 0, 0, 0, 0, 0, 0, 'Frostbrood Sentry - Out of Combat - Start Attacking'),
-(32767, 0, 3, 0, 1, 0, 100, 0, 5000, 10000, 3000, 6000, 0, 0, 49, 0, 0, 0, 0, 0, 0, 19, 32513, 80, 0, 0, 0, 0, 0, 0, 'Frostbrood Sentry - Out of Combat - Start Attacking'),
-(32767, 0, 4, 0, 9, 0, 100, 0, 0, 0, 2000, 3000, 0, 40, 11, 60542, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Frostbrood Sentry - Within 0-40 Range - Cast \'Bitter Blast\'');
diff --git a/data/sql/updates/db_world/2025_11_11_02.sql b/data/sql/updates/db_world/2025_11_11_02.sql
deleted file mode 100644
index ad2bcbebf..000000000
--- a/data/sql/updates/db_world/2025_11_11_02.sql
+++ /dev/null
@@ -1,45 +0,0 @@
--- DB update 2025_11_11_01 -> 2025_11_11_02
--- Update gameobject 'Wild Mustard' with sniffed values
--- updated spawns
-DELETE FROM `gameobject` WHERE (`id` IN (192827)) AND (`guid` IN (100121, 100244, 100245, 100246, 100247, 100248, 100249, 100411, 100412, 57471, 57472, 57473, 57475, 57476, 57477, 57478, 57479, 57480, 57481, 57482, 57483));
-INSERT INTO `gameobject` (`guid`, `id`, `map`, `zoneId`, `areaId`, `spawnMask`, `phaseMask`, `position_x`, `position_y`, `position_z`, `orientation`, `rotation0`, `rotation1`, `rotation2`, `rotation3`, `spawntimesecs`, `animprogress`, `state`, `ScriptName`, `VerifiedBuild`, `Comment`) VALUES
-(100121, 192827, 571, 0, 0, 1, 1, 5985.08349609375, 664.72296142578125, 642.370849609375, 4.799657344818115234, 0, 0, -0.67558956146240234, 0.737277925014495849, 120, 255, 1, "", 45942, NULL),
-(100244, 192827, 571, 0, 0, 1, 1, 5934.06103515625, 660.3663330078125, 642.92462158203125, 5.6897735595703125, 0, 0, -0.29237174987792968, 0.956304728984832763, 120, 255, 1, "", 46158, NULL),
-(100245, 192827, 571, 0, 0, 1, 1, 5846.48681640625, 490.76507568359375, 657.25555419921875, 5.515241622924804687, 0, 0, -0.37460613250732421, 0.927184045314788818, 120, 255, 1, "", 46158, NULL),
-(100246, 192827, 571, 0, 0, 1, 1, 5831.59619140625, 763.8204345703125, 640.30194091796875, 1.762782454490661621, 0, 0, 0.771624565124511718, 0.636078238487243652, 120, 255, 1, "", 46248, NULL),
-(100247, 192827, 571, 0, 0, 1, 1, 5767.6494140625, 770.37530517578125, 640.4595947265625, 4.537858963012695312, 0, 0, -0.76604366302490234, 0.642788589000701904, 120, 255, 1, "", 46248, NULL),
-(100248, 192827, 571, 0, 0, 1, 1, 5675.63232421875, 737.062744140625, 641.646484375, 6.265733242034912109, 0, 0, -0.00872611999511718, 0.999961912631988525, 120, 255, 1, "", 46158, NULL),
-(100249, 192827, 571, 0, 0, 1, 1, 5666.18994140625, 708.8232421875, 641.72613525390625, 4.136432647705078125, 0, 0, -0.87881660461425781, 0.477159708738327026, 120, 255, 1, "", 46248, NULL),
-(100411, 192827, 571, 0, 0, 1, 1, 5781.63525390625, 755.59454345703125, 640.60955810546875, 2.478367090225219726, 0, 0, 0.94551849365234375, 0.325568377971649169, 120, 255, 1, "", 45327, NULL),
-(100412, 192827, 571, 0, 0, 1, 1, 5852.45068359375, 453.083984375, 657.54180908203125, 4.956737518310546875, 0, 0, -0.61566066741943359, 0.788011372089385986, 120, 255, 1, "", 46158, NULL),
-(57471, 192827, 571, 0, 0, 1, 1, 5647.09130859375, 735.65777587890625, 641.70587158203125, 0.349065244197845458, 0, 0, 0.173647880554199218, 0.984807789325714111, 120, 255, 1, "", 46368, NULL),
-(57472, 192827, 571, 0, 0, 1, 1, 5638.42333984375, 752.54632568359375, 641.62371826171875, 4.188792228698730468, 0, 0, -0.86602497100830078, 0.50000077486038208, 120, 255, 1, "", 46158, NULL),
-(57473, 192827, 571, 0, 0, 1, 1, 5752.2802734375, 780.19390869140625, 640.46044921875, 4.852017402648925781, 0, 0, -0.65605831146240234, 0.754710197448730468, 120, 255, 1, "", 46248, NULL),
-(57475, 192827, 571, 0, 0, 1, 1, 5989.67138671875, 648.40582275390625, 642.70916748046875, 5.235987663269042968, 0, 0, -0.5, 0.866025388240814208, 120, 255, 1, "", 46158, NULL),
-(57476, 192827, 571, 0, 0, 1, 1, 5756.24072265625, 758.174072265625, 642.0474853515625, 1.884953022003173828, 0, 0, 0.809016227722167968, 0.587786316871643066, 120, 255, 1, "", 46248, NULL),
-(57477, 192827, 571, 0, 0, 1, 1, 5865.57666015625, 774.6185302734375, 640.53057861328125, 3.194002151489257812, 0, 0, -0.99965667724609375, 0.026201646775007247, 120, 255, 1, "", 45327, NULL),
-(57478, 192827, 571, 0, 0, 1, 1, 5824.08251953125, 493.727813720703125, 656.93402099609375, 4.729844093322753906, 0, 0, -0.70090866088867187, 0.713251054286956787, 120, 255, 1, "", 46158, NULL),
-(57479, 192827, 571, 0, 0, 1, 1, 5797.42138671875, 480.68121337890625, 657.57318115234375, 0.453785061836242675, 0, 0, 0.224950790405273437, 0.974370121955871582, 120, 255, 1, "", 46158, NULL),
-(57480, 192827, 571, 0, 0, 1, 1, 5826.56494140625, 738.85418701171875, 640.9478759765625, 4.363324165344238281, 0, 0, -0.81915187835693359, 0.573576688766479492, 120, 255, 1, "", 46158, NULL),
-(57481, 192827, 571, 0, 0, 1, 1, 5950.203125, 696.5841064453125, 641.10589599609375, 5.166176319122314453, 0, 0, -0.52991867065429687, 0.84804844856262207, 120, 255, 1, "", 45327, NULL),
-(57482, 192827, 571, 0, 0, 1, 1, 5810.0791015625, 620.439208984375, 647.71026611328125, 0.034906249493360519, 0, 0, 0.017452239990234375, 0.999847710132598876, 120, 255, 1, "", 45327, NULL),
-(57483, 192827, 571, 0, 0, 1, 1, 5804.63623046875, 661.78125, 647.7073974609375, 4.014260292053222656, 0, 0, -0.90630722045898437, 0.422619491815567016, 120, 255, 1, "", 45327, NULL);
-
--- new spawns
-DELETE FROM `gameobject` WHERE (`id` IN (192827)) AND (`guid` BETWEEN 1747 AND 1761);
-INSERT INTO `gameobject` (`guid`, `id`, `map`, `zoneId`, `areaId`, `spawnMask`, `phaseMask`, `position_x`, `position_y`, `position_z`, `orientation`, `rotation0`, `rotation1`, `rotation2`, `rotation3`, `spawntimesecs`, `animprogress`, `state`, `ScriptName`, `VerifiedBuild`, `Comment`) VALUES
-(1747, 192827, 571, 0, 0, 1, 1, 5629.560546875, 725.41082763671875, 641.70721435546875, 2.356194972991943359, 0, 0, 0.923879623413085937, 0.382683247327804565, 120, 255, 1, "", 46158, NULL),
-(1748, 192827, 571, 0, 0, 1, 1, 5657.634765625, 742.97552490234375, 641.5999755859375, 4.9218292236328125, 0, 0, -0.62932014465332031, 0.77714616060256958, 120, 255, 1, "", 46158, NULL),
-(1749, 192827, 571, 0, 0, 1, 1, 5731.98681640625, 780.482666015625, 641.66925048828125, 3.926995515823364257, 0, 0, -0.92387866973876953, 0.38268551230430603, 120, 255, 1, "", 46158, NULL),
-(1750, 192827, 571, 0, 0, 1, 1, 5742.24658203125, 770.8905029296875, 641.83380126953125, 5.567600727081298828, 0, 0, -0.35020732879638671, 0.936672210693359375, 120, 255, 1, "", 46158, NULL),
-(1751, 192827, 571, 0, 0, 1, 1, 5778.017578125, 463.560821533203125, 657.8570556640625, 4.677483558654785156, 0, 0, -0.71933937072753906, 0.694658815860748291, 120, 255, 1, "", 46158, NULL),
-(1752, 192827, 571, 0, 0, 1, 1, 5784.9462890625, 631.62530517578125, 647.66748046875, 5.131268978118896484, 0, 0, -0.54463863372802734, 0.838670849800109863, 120, 255, 1, "", 46158, NULL),
-(1753, 192827, 571, 0, 0, 1, 1, 5787.90966796875, 646.6329345703125, 647.23504638671875, 4.59021615982055664, 0, 0, -0.74895572662353515, 0.662620067596435546, 120, 255, 1, "", 46158, NULL),
-(1754, 192827, 571, 0, 0, 1, 1, 5803.4375, 745.01226806640625, 640.465087890625, 6.248279094696044921, 0, 0, -0.01745223999023437, 0.999847710132598876, 120, 255, 1, "", 45327, NULL),
-(1755, 192827, 571, 0, 0, 1, 1, 5822.33203125, 652.23858642578125, 647.3056640625, 4.537858963012695312, 0, 0, -0.76604366302490234, 0.642788589000701904, 120, 255, 1, "", 45327, NULL),
-(1756, 192827, 571, 0, 0, 1, 1, 5823.8359375, 637.7987060546875, 647.76348876953125, 3.001946926116943359, 0, 0, 0.997563362121582031, 0.069766148924827575, 120, 255, 1, "", 45327, NULL),
-(1757, 192827, 571, 0, 0, 1, 1, 5842.37451171875, 750.66656494140625, 640.692626953125, 1.727874636650085449, 0, 0, 0.760405540466308593, 0.649448513984680175, 120, 255, 1, "", 46158, NULL),
-(1758, 192827, 571, 0, 0, 1, 1, 5845.6962890625, 463.094573974609375, 657.62591552734375, 1.623155713081359863, 0, 0, 0.725374221801757812, 0.688354730606079101, 120, 255, 1, "", 46158, NULL),
-(1759, 192827, 571, 0, 0, 1, 1, 5847.68603515625, 772.54559326171875, 640.36090087890625, 1.256635904312133789, 0, 0, 0.587784767150878906, 0.809017360210418701, 120, 255, 1, "", 46158, NULL),
-(1760, 192827, 571, 0, 0, 1, 1, 5934.53369140625, 682.52099609375, 642.21148681640625, 3.682650327682495117, 0, 0, -0.96362972259521484, 0.26724100112915039, 120, 255, 1, "", 45327, NULL),
-(1761, 192827, 571, 0, 0, 1, 1, 5972.26416015625, 648.7425537109375, 642.43182373046875, 1.919861555099487304, 0, 0, 0.819151878356933593, 0.573576688766479492, 120, 255, 1, "", 46158, NULL);
diff --git a/data/sql/updates/db_world/2025_11_11_03.sql b/data/sql/updates/db_world/2025_11_11_03.sql
deleted file mode 100644
index b91c8b621..000000000
--- a/data/sql/updates/db_world/2025_11_11_03.sql
+++ /dev/null
@@ -1,21 +0,0 @@
--- DB update 2025_11_11_02 -> 2025_11_11_03
---
-SET @ARGENT_CRUSADE := 1106;
-SET @KIRIN_TOR := 1090;
-SET @KNIGHTS_OF_THE_EBON_BLADE := 1098;
-SET @WYRMREST_ACCORD := 1091;
-SET @ALLIANCE_VANGUARD := 1037;
-SET @HORDE_EXPEDITION := 1052;
-SET @SONS_OF_HODIR := 1119;
-
-UPDATE `quest_template` SET `RewardFactionOverride1`=2200000 WHERE `ID` IN (12915, 12956);
-UPDATE `quest_template` SET `RewardFactionOverride1`=0 WHERE `ID` IN (12924, 12975, 12976, 12977, 12981, 12985, 12987, 12994, 13001, 13003, 13010, 13011, 13046, 13108, 13420, 13421, 13559);
-UPDATE `quest_template` SET `RewardFactionID1` = 0, `RewardFactionValue1` = 0, `RewardFactionOverride1` = 0 WHERE `ID` IN (12966, 12967);
-
-UPDATE `reputation_reward_rate` SET `quest_rate`=1.3,`quest_daily_rate`=1.3,`quest_weekly_rate`=1.3,`quest_monthly_rate`=1.3,`quest_repeatable_rate`=1.3 WHERE `faction` IN (@ARGENT_CRUSADE, @KNIGHTS_OF_THE_EBON_BLADE, @KIRIN_TOR, @WYRMREST_ACCORD);
-
-DELETE FROM `reputation_reward_rate` WHERE `faction` IN (@SONS_OF_HODIR, @ALLIANCE_VANGUARD, @HORDE_EXPEDITION);
-INSERT INTO `reputation_reward_rate` (`faction`, `quest_rate`, `quest_daily_rate`, `quest_weekly_rate`, `quest_monthly_rate`, `quest_repeatable_rate`, `creature_rate`, `spell_rate`) VALUES
-(@SONS_OF_HODIR, 1.3, 1.3, 1.3, 1.3, 1.3, 1.3, 1.3),
-(@ALLIANCE_VANGUARD, 1.0, 1.0, 1.0, 1.0, 1.0, 1.3, 1.3),
-(@HORDE_EXPEDITION, 1.0, 1.0, 1.0, 1.0, 1.0, 1.3, 1.3);
diff --git a/data/sql/updates/db_world/2025_11_12_00.sql b/data/sql/updates/db_world/2025_11_12_00.sql
deleted file mode 100644
index 42608948a..000000000
--- a/data/sql/updates/db_world/2025_11_12_00.sql
+++ /dev/null
@@ -1,4 +0,0 @@
--- DB update 2025_11_11_03 -> 2025_11_12_00
---
--- remove `DISABLE_MOVE`
-UPDATE `creature_template` SET `unit_flags` = `unit_flags` & ~4 WHERE (`entry` = 28998);
diff --git a/data/sql/updates/db_world/2025_11_12_01.sql b/data/sql/updates/db_world/2025_11_12_01.sql
deleted file mode 100644
index 0846cc5d1..000000000
--- a/data/sql/updates/db_world/2025_11_12_01.sql
+++ /dev/null
@@ -1,10 +0,0 @@
--- DB update 2025_11_12_00 -> 2025_11_12_01
---
--- Unliving Chocker
-UPDATE `conditions` SET `ConditionTypeOrReference` = 8, `NegativeCondition` = 1, `Comment` = 'must not have completed quest \'Cleansing Drak\'Tharon\'' WHERE (`SourceTypeOrReferenceId` = 1) AND (`SourceGroup` = 28519) AND (`SourceEntry` = 38660) AND (`SourceId` = 0) AND (`ElseGroup` = 0) AND (`ConditionTypeOrReference` = 14) AND (`ConditionTarget` = 0) AND (`ConditionValue1` = 12238) AND (`ConditionValue2` = 0) AND (`ConditionValue3` = 0);
--- Writhing Choker
-DELETE FROM `conditions` WHERE (`SourceTypeOrReferenceId` = 1) AND (`SourceGroup` = 28519) AND (`SourceEntry` = 38673) AND (`SourceId` = 0) AND (`ElseGroup` = 0);
-INSERT INTO `conditions` (`SourceTypeOrReferenceId`, `SourceGroup`, `SourceEntry`, `SourceId`, `ElseGroup`, `ConditionTypeOrReference`, `ConditionTarget`, `ConditionValue1`, `ConditionValue2`, `ConditionValue3`, `NegativeCondition`, `ErrorType`, `ErrorTextId`, `ScriptName`, `Comment`) VALUES
-(1, 28519, 38673, 0, 0, 8, 0, 12238, 0, 0, 0, 0, 0, '', 'must have completed quest \'Cleansing Drak\'Tharon\''),
-(1, 28519, 38673, 0, 0, 2, 0, 38660, 1, 1, 1, 0, 0, '', 'must not have item \'Unliving Chocker\''),
-(1, 28519, 38673, 0, 0, 8, 0, 12631, 0, 0, 1, 0, 0, '', 'must not have completed quest \'An Invitation, of Sorts...\'');
diff --git a/data/sql/updates/db_world/2025_11_12_02.sql b/data/sql/updates/db_world/2025_11_12_02.sql
deleted file mode 100644
index 7daec40ee..000000000
--- a/data/sql/updates/db_world/2025_11_12_02.sql
+++ /dev/null
@@ -1,64 +0,0 @@
--- DB update 2025_11_12_01 -> 2025_11_12_02
---
-SET @PLANE := 28710;
-SET @PILOT := 28646;
-UPDATE `creature_template` SET `AIName`='SmartAI',`ScriptName`='', `speed_walk`=10, `speed_run`=1 WHERE `entry`=@PLANE;
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` = 28710);
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(28710, 0, 1, 0, 60, 0, 100, 513, 1000, 1000, 0, 0, 0, 0, 53, 1, 28710, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Update - Start Waypoint Path 28710 (No Repeat)'),
-(28710, 0, 2, 0, 40, 0, 100, 512, 5, 28710, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 5 of Path 28710 Reached - Say Line 0'),
-(28710, 0, 3, 0, 40, 0, 100, 512, 11, 28710, 0, 0, 0, 0, 1, 1, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 11 of Path 28710 Reached - Say Line 1'),
-(28710, 0, 4, 0, 40, 0, 100, 512, 12, 28710, 0, 0, 0, 0, 1, 2, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 12 of Path 28710 Reached - Say Line 2'),
-(28710, 0, 5, 0, 40, 0, 100, 512, 14, 28710, 0, 0, 0, 0, 1, 3, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 14 of Path 28710 Reached - Say Line 3'),
-(28710, 0, 6, 0, 40, 0, 100, 512, 15, 28710, 0, 0, 0, 0, 1, 4, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 15 of Path 28710 Reached - Say Line 4'),
-(28710, 0, 7, 0, 40, 0, 100, 512, 17, 28710, 0, 0, 0, 0, 1, 5, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 17 of Path 28710 Reached - Say Line 5'),
-(28710, 0, 8, 0, 40, 0, 100, 512, 21, 28710, 0, 0, 0, 0, 1, 6, 0, 0, 0, 0, 0, 19, 28646, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 21 of Path 28710 Reached - Say Line 6'),
-(28710, 0, 9, 10, 40, 0, 100, 512, 25, 28710, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 25 of Path 28710 Reached - Say Line 0'),
-(28710, 0, 10, 0, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 11, 52255, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 25 of Path 28710 Reached - Cast \'Engine on Fire\''),
-(28710, 0, 11, 0, 28, 0, 100, 512, 0, 0, 0, 0, 0, 0, 134, 44795, 2, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Passenger Removed - Invoker Cast \'Parachute\''),
-(28710, 0, 12, 13, 8, 0, 100, 512, 52226, 0, 0, 0, 0, 0, 22, 2, 0, 0, 0, 0, 0, 23, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Spellhit \'Land Flying Machine\' - Set Event Phase 2'),
-(28710, 0, 13, 0, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 11, 50630, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Spellhit \'Land Flying Machine\' - Cast \'Eject All Passengers\''),
-(28710, 0, 14, 0, 40, 0, 100, 512, 26, 28710, 0, 0, 0, 0, 59, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Point 26 of Path 28710 Reached - Set Run On'),
-(28710, 0, 15, 0, 28, 2, 100, 512, 0, 0, 0, 0, 0, 0, 134, 53328, 2, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Passenger Removed - Invoker Cast \'Land Flying Machine Credit\' (Phase 2)'),
-(28710, 0, 16, 0, 11, 0, 100, 512, 0, 0, 0, 0, 0, 0, 22, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Respawn - Set Event Phase 1'),
-(28710, 0, 17, 0, 28, 1, 100, 512, 0, 0, 0, 0, 0, 0, 6, 12671, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Vic\'s Flying Machine - On Passenger Removed - Fail Quest \'Reconnaissance Flight\' (Phase 1)');
-
-DELETE FROM `waypoint_data` WHERE `id`=@PLANE;
-DELETE FROM `waypoints` WHERE `entry`=@PLANE;
-INSERT INTO `waypoints` (`entry`,`pointid`,`position_x`,`position_y`,`position_z`,`point_comment`) VALUES
-(@PLANE,1,5494.87,4747.031,-187.8783, 'Vic''s Flying Machine'),
-(@PLANE,2,5485.906,4740.681,-184.5172, 'Vic''s Flying Machine'),
-(@PLANE,3,5472.882,4732.441,-172.1562, 'Vic''s Flying Machine'),
-(@PLANE,4,5460.913,4712.542,-157.8784, 'Vic''s Flying Machine'),
-(@PLANE,5,5452.147,4673.518,-137.8906, 'Vic''s Flying Machine'),
-(@PLANE,6,5449.777,4630.711,-126.6684, 'Vic''s Flying Machine'),
-(@PLANE,7,5507.432,4506.089,-126.6684, 'Vic''s Flying Machine'),
-(@PLANE,8,5586.811,4465.319,-126.6684, 'Vic''s Flying Machine'),
-(@PLANE,9,5676.111,4437.874,-126.6684, 'Vic''s Flying Machine'),
-(@PLANE,10,5756.449,4391.051,-91.25155, 'Vic''s Flying Machine'),
-(@PLANE,11,5817.163,4269.269,-91.25155, 'Vic''s Flying Machine'),
-(@PLANE,12,5856.145,4202.824,-68.29334, 'Vic''s Flying Machine'),
-(@PLANE,13,5921.523,4105.534,-68.29334, 'Vic''s Flying Machine'),
-(@PLANE,14,5995.021,4029.883,-13.97897, 'Vic''s Flying Machine'),
-(@PLANE,15,6118.298,3883.733,94.11866, 'Vic''s Flying Machine'),
-(@PLANE,16,6132.932,3750.75,176.5123, 'Vic''s Flying Machine'),
-(@PLANE,17,6165.863,3748.196,198.9567, 'Vic''s Flying Machine'),
-(@PLANE,18,6208.277,3782.189,196.8455, 'Vic''s Flying Machine'),
-(@PLANE,19,6227.615,3836.871,191.6234, 'Vic''s Flying Machine'),
-(@PLANE,20,6218.483,3885.17,191.6234, 'Vic''s Flying Machine'),
-(@PLANE,21,6197.045,3890.053,191.6234, 'Vic''s Flying Machine'),
-(@PLANE,22,6168.752,3864.161,191.6234, 'Vic''s Flying Machine'),
-(@PLANE,23,6204.037,3807.239,191.6234, 'Vic''s Flying Machine'),
-(@PLANE,24,6232.975,3820.852,191.6234, 'Vic''s Flying Machine'),
-(@PLANE,25,6219.879,3854.341,166.6234, 'Vic''s Flying Machine'),
-(@PLANE,26,6210.428,3855.185,154.4848, 'Vic''s Flying Machine');
-
-UPDATE `creature_template_movement` SET `Swim`=1,`Ground`=1,`Flight`=2 WHERE `CreatureId`=@PLANE;
-DELETE FROM `conditions` WHERE `SourceTypeOrReferenceId` =14 AND `SourceGroup`=9750;
-INSERT INTO `conditions` (`SourceTypeOrReferenceId`, `SourceGroup`, `SourceEntry`, `SourceId`, `ElseGroup`, `ConditionTypeOrReference`, `ConditionTarget`, `ConditionValue1`, `ConditionValue2`, `ConditionValue3`, `NegativeCondition`, `ErrorType`, `ErrorTextId`, `ScriptName`, `Comment`) VALUES
-(14, 9750, 13376, 0, 0, 8, 0, 12671, 0, 0, 0, 0, 0, '', 'Pilot Vic Show different gossip if player has rewarded quest 12671 '),
-(14, 9750, 13375, 0, 0, 8, 0, 12671, 0, 0, 1, 0, 0, '', 'Pilot Vic Show different gossip if player is not rewarded quest 12671');
-
-DELETE FROM `vehicle_template_accessory` WHERE `entry` IN (@PLANE);
-INSERT INTO `vehicle_template_accessory` (`entry`,`accessory_entry`, `seat_id`, `minion`, `description`) VALUES
-(@PLANE, @PILOT, 0, 1, 'Vics Flying Machine');
diff --git a/data/sql/updates/db_world/2025_11_12_03.sql b/data/sql/updates/db_world/2025_11_12_03.sql
deleted file mode 100644
index b99ae0a58..000000000
--- a/data/sql/updates/db_world/2025_11_12_03.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_12_02 -> 2025_11_12_03
---
-UPDATE `quest_offer_reward` SET `RewardText` = 'Aw yes, these will do nicely.$b$bJust plop them down anywhere. You can have some of my leftover stew from last night.' WHERE (`ID` = 11564);
diff --git a/data/sql/updates/db_world/2025_11_12_04.sql b/data/sql/updates/db_world/2025_11_12_04.sql
deleted file mode 100644
index d1e6b2da4..000000000
--- a/data/sql/updates/db_world/2025_11_12_04.sql
+++ /dev/null
@@ -1,36 +0,0 @@
--- DB update 2025_11_12_03 -> 2025_11_12_04
---
-DELETE FROM `conditions` WHERE (`SourceTypeOrReferenceId` = 22) AND (`SourceGroup` = 1) AND (`SourceEntry` = 5440) AND (`SourceId` = 2) AND (`ElseGroup` = 0) AND (`ConditionTypeOrReference` = 1) AND (`ConditionTarget` = 0) AND (`ConditionValue1` = 47219) AND (`ConditionValue2` = 0) AND (`ConditionValue3` = 0);
-INSERT INTO `conditions` (`SourceTypeOrReferenceId`, `SourceGroup`, `SourceEntry`, `SourceId`, `ElseGroup`, `ConditionTypeOrReference`, `ConditionTarget`, `ConditionValue1`, `ConditionValue2`, `ConditionValue3`, `NegativeCondition`, `ErrorType`, `ErrorTextId`, `ScriptName`, `Comment`) VALUES
-(22, 1, 5440, 2, 0, 1, 0, 47219, 0, 0, 0, 0, 0, '', 'Areatrigger 5440 require Cleared for Teleport (47219) ');
-
-UPDATE `creature_template` SET `AIName` = 'SmartAI' WHERE `entry` = 26619;
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` = 26619);
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(26619, 0, 0, 1, 62, 0, 100, 0, 9415, 0, 0, 0, 0, 0, 11, 47219, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Fizzcrank Paratrooper - On Gossip Option 0 Selected - Cast \'Cleared for Teleport\''),
-(26619, 0, 1, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 72, 0, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Fizzcrank Paratrooper - On Gossip Option 0 Selected - Close Gossip'),
-(26619, 0, 2, 0, 64, 0, 100, 0, 0, 0, 0, 0, 0, 0, 98, 9429, 12687, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Fizzcrank Paratrooper - On Gossip Hello - Send Gossip'),
-(26619, 0, 3, 4, 62, 0, 100, 0, 9429, 1, 0, 0, 0, 0, 11, 47326, 2, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Fizzcrank Paratrooper - On Gossip Option 1 Selected - Cast \'Create Item - Fizzcrank Practice Parachute\''),
-(26619, 0, 4, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 72, 0, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Fizzcrank Paratrooper - On Gossip Option 1 Selected - Close Gossip');
-
-DELETE FROM `areatrigger_scripts` WHERE `entry` = 5440;
-INSERT INTO `areatrigger_scripts` (`entry`, `ScriptName`) VALUES (5440, 'SmartTrigger');
-
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 5440) AND (`source_type` = 2) AND (`id` IN (0));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(5440, 2, 0, 0, 46, 0, 100, 0, 5440, 0, 0, 0, 0, 0, 62, 571, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 4240.04, 5259.05, 72.3396, 2.274780035018921, 'Areatrigger - On Trigger - Teleport');
-
-DELETE FROM `gossip_menu` WHERE `MenuID` = 9429;
-INSERT INTO `gossip_menu` (`MenuID`, `TextID`) VALUES
-(9429, 12687);
-
-DELETE FROM `gossip_menu_option` WHERE (`OptionID`=1 AND `MenuID`=9429);
-INSERT INTO `gossip_menu_option` (`MenuID`, `OptionID`, `OptionIcon`, `OptionText`, `OptionBroadcastTextID`, `OptionType`, `OptionNpcFlag`, `ActionMenuID`, `ActionPoiID`, `BoxCoded`, `BoxMoney`, `BoxText`, `BoxBroadcastTextID`, `VerifiedBuild`) VALUES
-(9429, 1, 0, 'I\'ll show you! Give me that practice parachute!', 25923, 1, 1, 0, 0, 0, 0, NULL, 0, 64270);
-
-DELETE FROM `conditions` WHERE (`SourceTypeOrReferenceId` = 22) AND (`SourceGroup` = 3) AND (`SourceEntry` = 26619) AND (`SourceId` = 0) AND (`ElseGroup` = 0) AND (`ConditionTypeOrReference` = 30) AND (`ConditionTarget` = 0) AND (`ConditionValue1` = 188420) AND (`ConditionValue2` = 20) AND (`ConditionValue3` = 0);
-INSERT INTO `conditions` (`SourceTypeOrReferenceId`, `SourceGroup`, `SourceEntry`, `SourceId`, `ElseGroup`, `ConditionTypeOrReference`, `ConditionTarget`, `ConditionValue1`, `ConditionValue2`, `ConditionValue3`, `NegativeCondition`, `ErrorType`, `ErrorTextId`, `ScriptName`, `Comment`) VALUES
-(22, 3, 26619, 0, 0, 30, 0, 188420, 20, 0, 0, 0, 0, '', 'Requires Fizzcrank Parachute spell focus');
-
-UPDATE `gameobject` SET `position_x` = 4227.6616, `position_y` = 5270.674, `position_z` = 71.928215 WHERE `guid` = 99767 AND `id` = 188420;
diff --git a/data/sql/updates/db_world/2025_11_12_05.sql b/data/sql/updates/db_world/2025_11_12_05.sql
deleted file mode 100644
index 4895bf0c2..000000000
--- a/data/sql/updates/db_world/2025_11_12_05.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_12_04 -> 2025_11_12_05
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 27292) AND (`source_type` = 0) AND (`id` IN (0, 1));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(27292, 0, 1, 2, 62, 0, 100, 512, 0, 0, 0, 0, 0, 0, 11, 48606, 3, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Flamebringer - On Gossip Option 0 Selected - Cast \'Flamebringer Summon Cue\'');
diff --git a/data/sql/updates/db_world/2025_11_12_06.sql b/data/sql/updates/db_world/2025_11_12_06.sql
deleted file mode 100644
index df18f9dbc..000000000
--- a/data/sql/updates/db_world/2025_11_12_06.sql
+++ /dev/null
@@ -1,11 +0,0 @@
--- DB update 2025_11_12_05 -> 2025_11_12_06
-
--- Update AI
-UPDATE `creature_template` SET `AIName` = 'SmartAI' WHERE `entry` = 27254;
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` = 27254);
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(27254, 0, 0, 0, 25, 0, 100, 0, 0, 0, 0, 0, 0, 0, 90, 9, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Emerald Lasher - On Reset - Set Flag Standstate Submerged'),
-(27254, 0, 1, 2, 4, 0, 100, 0, 0, 0, 0, 0, 0, 0, 91, 9, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Emerald Lasher - On Aggro - Remove FlagStandstate Submerged'),
-(27254, 0, 2, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 11, 37752, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Emerald Lasher - On Aggro - Cast \'Stand\''),
-(27254, 0, 3, 0, 0, 0, 100, 0, 4000, 7000, 9000, 13000, 0, 0, 11, 51901, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Emerald Lasher - In Combat - Cast \'Dream Lash\'');
diff --git a/data/sql/updates/db_world/2025_11_13_00.sql b/data/sql/updates/db_world/2025_11_13_00.sql
deleted file mode 100644
index 45f7a2fcb..000000000
--- a/data/sql/updates/db_world/2025_11_13_00.sql
+++ /dev/null
@@ -1,8 +0,0 @@
--- DB update 2025_11_12_06 -> 2025_11_13_00
-
--- Update SmartAI
-UPDATE `creature_template` SET `AIName` = 'SmartAI' WHERE `entry` = 27358;
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` = 27358);
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(27358, 0, 0, 0, 0, 0, 100, 0, 0, 0, 7000, 10000, 0, 0, 11, 51431, 64, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Burning Depths Necromancer - In Combat - Cast \'Power Release\'');
diff --git a/data/sql/updates/db_world/2025_11_13_01.sql b/data/sql/updates/db_world/2025_11_13_01.sql
deleted file mode 100644
index 722fb7277..000000000
--- a/data/sql/updates/db_world/2025_11_13_01.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_13_00 -> 2025_11_13_01
-
--- Delete SmartAI
-UPDATE `creature_template` SET `AIName` = '' WHERE `entry` = 30066;
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 30066) AND (`source_type` = 0);
diff --git a/data/sql/updates/db_world/2025_11_13_02.sql b/data/sql/updates/db_world/2025_11_13_02.sql
deleted file mode 100644
index 05b71f6cc..000000000
--- a/data/sql/updates/db_world/2025_11_13_02.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_13_01 -> 2025_11_13_02
---
-DELETE FROM `creature_template_movement` WHERE `CreatureId` = 27821;
-INSERT INTO `creature_template_movement` (`CreatureId`, `Ground`, `Flight`) VALUES
-(27821, 1, 1);
diff --git a/data/sql/updates/db_world/2025_11_13_03.sql b/data/sql/updates/db_world/2025_11_13_03.sql
deleted file mode 100644
index c04b81fa5..000000000
--- a/data/sql/updates/db_world/2025_11_13_03.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_13_02 -> 2025_11_13_03
---
-DELETE FROM `spell_custom_attr` WHERE `spell_id` = 53094;
-INSERT INTO `spell_custom_attr` (`spell_id`, `attributes`) VALUES
-(53094, 0x00400000);
diff --git a/data/sql/updates/db_world/2025_11_13_04.sql b/data/sql/updates/db_world/2025_11_13_04.sql
deleted file mode 100644
index ddabdc449..000000000
--- a/data/sql/updates/db_world/2025_11_13_04.sql
+++ /dev/null
@@ -1,53 +0,0 @@
--- DB update 2025_11_13_03 -> 2025_11_13_04
-
--- Set Sniffed Unit_flag (Vrykul Harpoon Gun)
-UPDATE `creature_template` SET `unit_flags` = `unit_flags` &~ 4 WHERE (`entry` = 27992);
-UPDATE `creature_template` SET `unit_flags` = `unit_flags` |33554432 WHERE (`entry` = 27992);
-
--- Set Sniffed Movement Flags (Vrykul Harpoon Gun & Dragonflayer Defender)
-DELETE FROM `creature_template_movement` WHERE (`CreatureId` IN (24533, 27992));
-INSERT INTO `creature_template_movement` (`CreatureId`, `Ground`, `Swim`, `Flight`, `Rooted`, `Chase`, `Random`, `InteractionPauseTimer`) VALUES
-(24533, 0, 0, 1, 0, 0, 0, 0),
-(27992, 0, 0, 0, 1, 0, 0, 0);
-
--- Update SmartAI (Vrykul Harpoon Gun)
-UPDATE `creature_template` SET `AIName` = 'SmartAI' WHERE `entry` = 27992;
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` = 27992);
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(27992, 0, 0, 0, 27, 0, 100, 0, 0, 0, 0, 0, 0, 0, 19, 33554432, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Passenger Boarded - Remove Flags Not Selectable'),
-(27992, 0, 1, 0, 28, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 33554432, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Passenger Removed - Set Flags Not Selectable'),
-(27992, 0, 2, 3, 38, 0, 100, 512, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Data Set 1 1 - Say Line 0'),
-(27992, 0, 3, 0, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 80, 2799200, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Data Set 1 1 - Run Script'),
-(27992, 0, 4, 5, 38, 0, 100, 512, 1, 2, 0, 0, 0, 0, 1, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Data Set 1 2 - Say Line 1'),
-(27992, 0, 5, 0, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 80, 2799201, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Data Set 1 2 - Run Script'),
-(27992, 0, 6, 7, 38, 0, 100, 512, 1, 3, 0, 0, 0, 0, 1, 2, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Data Set 1 3 - Say Line 2'),
-(27992, 0, 7, 0, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 80, 2799202, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Data Set 1 3 - Run Script'),
-(27992, 0, 8, 0, 31, 0, 100, 512, 43997, 0, 0, 0, 0, 0, 11, 43998, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Vrykul Harpoon Gun - On Target Spellhit \'Fiery Lance\' - Cast \'Fiery Lance\'');
-
--- Update Action Lists (sniffed Spawn Points)
-DELETE FROM `smart_scripts` WHERE (`source_type` = 9) AND (`entryorguid` IN (2799200, 2799201, 2799202));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(2799200, 9, 0, 0, 0, 0, 100, 512, 3000, 3000, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1055.92, -5139.29, 177.646, 4.2569, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799200, 9, 1, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1011.96, -5124.65, 185.217, 4.2505, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799200, 9, 2, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1073.53, -5130.63, 209.704, 4.0369, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799200, 9, 3, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1127.55, -5177.06, 212.394, 4.1176, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799201, 9, 0, 0, 0, 0, 100, 512, 3000, 3000, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1091.66, -5150.43, 121.44, 4.0841, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799201, 9, 1, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1024.17, -5117.84, 141.756, 4.1904, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799201, 9, 2, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 964.811, -5123.2, 111.064, 3.997, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799202, 9, 0, 0, 0, 0, 100, 512, 3000, 3000, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1132.96, -5170, 261.992, 3.9751, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799202, 9, 1, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1115.01, -5161.58, 207.852, 4.3169, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\''),
-(2799202, 9, 2, 0, 0, 0, 100, 512, 0, 0, 0, 0, 0, 0, 12, 24533, 4, 60000, 0, 1, 0, 8, 0, 0, 0, 0, 1168.37, -5220.4, 243.869, 3.7683, 'Vrykul Harpoon Gun - Actionlist - Summon Creature \'Dragonflayer Defender\'');
-
--- Set SmartAI (Dragonflayer Defender)
-UPDATE `creature_template` SET `AIName` = 'SmartAI' WHERE `entry` = 24533;
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` = 24533);
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(24533, 0, 0, 0, 0, 0, 100, 0, 500, 1000, 2000, 2000, 0, 0, 11, 44188, 64, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - In Combat - Cast \'Harpoon Toss\''),
-(24533, 0, 1, 0, 8, 0, 100, 0, 43997, 0, 0, 0, 0, 0, 37, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - On Spellhit \'Fiery Lance\' - Kill Self'),
-(24533, 0, 2, 3, 54, 0, 100, 0, 0, 0, 0, 0, 0, 0, 117, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - On Just Summoned - Disable Evade'),
-(24533, 0, 3, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 69, 25, 0, 1, 0, 1, 0, 23, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - On Just Summoned - Move To Owner Or Summoner'),
-(24533, 0, 4, 5, 34, 0, 100, 0, 0, 25, 0, 0, 0, 0, 101, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - On Reached Point 25 - Set Home Position'),
-(24533, 0, 5, 6, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 117, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - On Reached Point 25 - Enable Evade'),
-(24533, 0, 6, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 49, 0, 0, 0, 0, 0, 0, 23, 0, 0, 0, 0, 0, 0, 0, 0, 'Dragonflayer Defender - On Reached Point 25 - Start Attacking');
diff --git a/data/sql/updates/db_world/2025_11_13_05.sql b/data/sql/updates/db_world/2025_11_13_05.sql
deleted file mode 100644
index 205f572e9..000000000
--- a/data/sql/updates/db_world/2025_11_13_05.sql
+++ /dev/null
@@ -1,4 +0,0 @@
--- DB update 2025_11_13_04 -> 2025_11_13_05
--- Makes sure the Shaman player gets the required ritual toch item and that requires the quest to drop
-UPDATE `item_loot_template` SET `Chance` = 0, `QuestRequired` = 1, `GroupId` = 1 WHERE `Entry` = 24336 AND `Item` = 23682;
-UPDATE `item_loot_template` SET `Chance` = 0, `GroupId` = 2 WHERE `Entry` = 24336 AND `Item` = 24335;
diff --git a/data/sql/updates/db_world/2025_11_14_00.sql b/data/sql/updates/db_world/2025_11_14_00.sql
deleted file mode 100644
index ede32e340..000000000
--- a/data/sql/updates/db_world/2025_11_14_00.sql
+++ /dev/null
@@ -1,9 +0,0 @@
--- DB update 2025_11_13_05 -> 2025_11_14_00
---
-DELETE FROM `spell_script_names` WHERE `spell_id` = 50380;
-INSERT INTO `spell_script_names` (`spell_id`, `ScriptName`) VALUES
-(50380, 'spell_bloodspore_haze');
-
-DELETE FROM `spell_custom_attr` WHERE `spell_id` = 50380;
-INSERT INTO `spell_custom_attr` (`spell_id`, `attributes`) VALUES
-(50380, 0x00400000);
diff --git a/data/sql/updates/db_world/2025_11_14_01.sql b/data/sql/updates/db_world/2025_11_14_01.sql
deleted file mode 100644
index 7e0fa266f..000000000
--- a/data/sql/updates/db_world/2025_11_14_01.sql
+++ /dev/null
@@ -1,6 +0,0 @@
--- DB update 2025_11_14_00 -> 2025_11_14_01
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 29445) AND (`source_type` = 0) AND (`id` IN (0, 1));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(29445, 0, 0, 0, 62, 0, 100, 0, 9926, 0, 0, 0, 0, 0, 134, 56940, 2, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Thorim - On Gossip Option 0 Selected - Invoker Cast \'Thorim Story Kill Credit\''),
-(29445, 0, 1, 0, 19, 0, 100, 0, 12924, 0, 0, 0, 0, 0, 134, 56518, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Thorim - On Quest \'Forging an Alliance\' Taken - Invoker Cast \'Clearquests\'');
diff --git a/data/sql/updates/db_world/2025_11_14_02.sql b/data/sql/updates/db_world/2025_11_14_02.sql
deleted file mode 100644
index f9dc1bc72..000000000
--- a/data/sql/updates/db_world/2025_11_14_02.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_14_01 -> 2025_11_14_02
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 2943400) AND (`source_type` = 9) AND (`id` IN (2));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(2943400, 9, 2, 0, 0, 0, 100, 0, 0, 0, 0, 0, 0, 0, 26, 12832, 0, 0, 0, 0, 0, 12, 1, 0, 0, 0, 0, 0, 0, 0, 'Injured Goblin Miner - On Script - Quest Credit \'Bitter Departure\' (Stored Target)');
diff --git a/data/sql/updates/db_world/2025_11_14_03.sql b/data/sql/updates/db_world/2025_11_14_03.sql
deleted file mode 100644
index 562a42a8d..000000000
--- a/data/sql/updates/db_world/2025_11_14_03.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_14_02 -> 2025_11_14_03
---
-DELETE FROM `conditions` WHERE (`SourceTypeOrReferenceId` = 17) AND (`SourceGroup` = 0) AND (`SourceEntry` = 55046) AND (`SourceId` = 0) AND (`ElseGroup` = 0) AND (`ConditionTypeOrReference` = 1) AND (`ConditionTarget` = 1) AND (`ConditionValue1` = 54894) AND (`ConditionValue2` = 0) AND (`ConditionValue3` = 0);
-INSERT INTO `conditions` (`SourceTypeOrReferenceId`, `SourceGroup`, `SourceEntry`, `SourceId`, `ElseGroup`, `ConditionTypeOrReference`, `ConditionTarget`, `ConditionValue1`, `ConditionValue2`, `ConditionValue3`, `NegativeCondition`, `ErrorType`, `ErrorTextId`, `ScriptName`, `Comment`) VALUES
-(17, 0, 55046, 0, 0, 1, 1, 54894, 0, 0, 0, 0, 0, '', 'Ice Shard require Icy Imprisionment');
diff --git a/data/sql/updates/db_world/2025_11_15_00.sql b/data/sql/updates/db_world/2025_11_15_00.sql
deleted file mode 100644
index e6431368f..000000000
--- a/data/sql/updates/db_world/2025_11_15_00.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_14_03 -> 2025_11_15_00
---
-DELETE FROM `creature_loot_template` WHERE (`Entry` = 31231) AND (`Item` IN (42108));
-INSERT INTO `creature_loot_template` (`Entry`, `Item`, `Reference`, `Chance`, `QuestRequired`, `LootMode`, `GroupId`, `MinCount`, `MaxCount`, `Comment`) VALUES
-(31231, 42108, 0, 33, 1, 1, 0, 1, 1, 'Lost Shandaral Spirit - Scourge Curio');
diff --git a/data/sql/updates/db_world/2025_11_15_01.sql b/data/sql/updates/db_world/2025_11_15_01.sql
deleted file mode 100644
index ae1732468..000000000
--- a/data/sql/updates/db_world/2025_11_15_01.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_15_00 -> 2025_11_15_01
--- fix spell focus location for quest 'Will of the Titans'
-UPDATE `gameobject` SET `position_x` = 5110.11, `position_y` = 5471.22, `position_z` = -91.84 WHERE `id` = 190781 AND `guid` = 99745;
diff --git a/data/sql/updates/db_world/2025_11_15_02.sql b/data/sql/updates/db_world/2025_11_15_02.sql
deleted file mode 100644
index 66aad02a8..000000000
--- a/data/sql/updates/db_world/2025_11_15_02.sql
+++ /dev/null
@@ -1,6 +0,0 @@
--- DB update 2025_11_15_01 -> 2025_11_15_02
---
-DELETE FROM `creature_template_spell` WHERE (`CreatureID` = 35415);
-INSERT INTO `creature_template_spell` (`CreatureID`, `Index`, `Spell`, `VerifiedBuild`) VALUES
-(35415, 0, 68068, 0),
-(35415, 1, 67442, 0);
diff --git a/data/sql/updates/db_world/2025_11_15_03.sql b/data/sql/updates/db_world/2025_11_15_03.sql
deleted file mode 100644
index b55a0aa0c..000000000
--- a/data/sql/updates/db_world/2025_11_15_03.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_15_02 -> 2025_11_15_03
---
-UPDATE `creature_template` SET `npcflag` = `npcflag` |65536 WHERE `entry` = 29944;
diff --git a/data/sql/updates/db_world/2025_11_15_04.sql b/data/sql/updates/db_world/2025_11_15_04.sql
deleted file mode 100644
index d0c7e3db7..000000000
--- a/data/sql/updates/db_world/2025_11_15_04.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_15_03 -> 2025_11_15_04
---
-UPDATE `creature_template` SET `unit_flags` = `unit_flags` &~ 256 WHERE `entry` = 24787;
diff --git a/data/sql/updates/db_world/2025_11_15_05.sql b/data/sql/updates/db_world/2025_11_15_05.sql
deleted file mode 100644
index 110691e3a..000000000
--- a/data/sql/updates/db_world/2025_11_15_05.sql
+++ /dev/null
@@ -1,6 +0,0 @@
--- DB update 2025_11_15_04 -> 2025_11_15_05
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 26841) AND (`source_type` = 0) AND (`id` IN (0, 1));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(26841, 0, 0, 0, 0, 0, 100, 0, 0, 0, 5000, 7000, 0, 0, 11, 47425, 64, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Reanimated Frost Wyrm - In Combat - Cast \'Frost Breath\''),
-(26841, 0, 1, 0, 8, 0, 100, 0, 49587, 0, 0, 0, 0, 0, 49, 0, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Reanimated Frost Wyrm - On Spellhit \'Seeds of Nature`s Wrath\' - Start Attacking');
diff --git a/data/sql/updates/db_world/2025_11_15_06.sql b/data/sql/updates/db_world/2025_11_15_06.sql
deleted file mode 100644
index afeb1844d..000000000
--- a/data/sql/updates/db_world/2025_11_15_06.sql
+++ /dev/null
@@ -1,9 +0,0 @@
--- DB update 2025_11_15_05 -> 2025_11_15_06
---
-DELETE FROM `conditions` WHERE (`SourceTypeOrReferenceId` = 13) AND (`SourceEntry` = 49765);
-INSERT INTO `conditions` (`SourceTypeOrReferenceId`, `SourceGroup`, `SourceEntry`, `SourceId`, `ElseGroup`, `ConditionTypeOrReference`, `ConditionTarget`, `ConditionValue1`, `ConditionValue2`, `ConditionValue3`, `NegativeCondition`, `ErrorType`, `ErrorTextId`, `ScriptName`, `Comment`) VALUES
-(13, 7, 49765, 0, 0, 31, 0, 3, 27713, 0, 0, 0, 0, '', 'Fordragon Resolve target 7th Legion Elite'),
-(13, 7, 49765, 0, 1, 31, 0, 3, 26780, 0, 0, 0, 0, '', 'Fordragon Resolve target 7th Legion Cleric'),
-(13, 7, 49765, 0, 2, 31, 0, 3, 27587, 0, 0, 0, 0, '', 'Fordragon Resolve target Legion Commander Yorik'),
-(13, 7, 49765, 0, 3, 31, 0, 3, 27858, 0, 0, 0, 0, '', 'Fordragon Resolve target Highlord Bolvar Fordragon'),
-(13, 7, 49765, 0, 4, 32, 0, 16, 0, 0, 0, 0, 0, '', 'Fordragon Resolve target players');
diff --git a/data/sql/updates/db_world/2025_11_15_07.sql b/data/sql/updates/db_world/2025_11_15_07.sql
deleted file mode 100644
index 459cf6f26..000000000
--- a/data/sql/updates/db_world/2025_11_15_07.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_15_06 -> 2025_11_15_07
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 2583500) AND (`source_type` = 9) AND (`id` IN (19));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(2583500, 9, 19, 0, 0, 0, 100, 0, 0, 0, 0, 0, 0, 0, 41, 5000, 6, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Nesingwary Trapper - Actionlist - Despawn In 5000 ms');
diff --git a/data/sql/updates/db_world/2025_11_15_08.sql b/data/sql/updates/db_world/2025_11_15_08.sql
deleted file mode 100644
index 6e2a4c416..000000000
--- a/data/sql/updates/db_world/2025_11_15_08.sql
+++ /dev/null
@@ -1,69 +0,0 @@
--- DB update 2025_11_15_07 -> 2025_11_15_08
-
--- Set Creature Template Addon (Amberpine Woodsman)
-DELETE FROM `creature_template_addon` WHERE (`entry` = 27293);
-INSERT INTO `creature_template_addon` (`entry`, `path_id`, `mount`, `bytes1`, `bytes2`, `emote`, `visibilityDistanceType`, `auras`) VALUES
-(27293, 0, 0, 0, 1, 0, 0, '');
-
--- Update Spawn Points (Amberpine Woodsman)
-UPDATE `creature` SET `position_x` = 3499.0676, `position_y` = -2838.0798, `position_z` = 202.27922, `orientation` = 2.89724, `Comment` = 'Has Guid SAI' WHERE (`id1` = 27293) AND (`guid` = 110578);
-UPDATE `creature` SET `position_x` = 3497.1128, `position_y` = -2836.0088, `position_z` = 202.26859, `orientation` = 4.55530 WHERE (`id1` = 27293) AND (`guid` = 110579);
-UPDATE `creature` SET `position_x` = 3474.6736, `position_y` = -2776.7188, `position_z` = 201.02751, `orientation` = 2.56563, `Comment` = 'Has Guid SAI' WHERE (`id1` = 27293) AND (`guid` = 110580);
-UPDATE `creature` SET `position_x` = 3475.1519, `position_y` = -2774.3525, `position_z` = 200.75826, `orientation` = 3.59537 WHERE (`id1` = 27293) AND (`guid` = 110581);
-UPDATE `creature` SET `position_x` = 3374.5999, `position_y` = -2805.997, `position_z` = 199.0484, `orientation` = 1.34390, `Comment` = 'Has Guid SAI' WHERE (`id1` = 27293) AND (`guid` = 110582);
-UPDATE `creature` SET `position_x` = 3375.972, `position_y` = -2803.756, `position_z` = 199.01216, `orientation` = 3.99680 WHERE (`id1` = 27293) AND (`guid` = 110583);
-UPDATE `creature` SET `position_x` = 3460.5964, `position_y` = -2902.6494, `position_z` = 201.07785, `orientation` = 5.89921, `Comment` = 'Has Guid SAI' WHERE (`id1` = 27293) AND (`guid` = 110602);
-UPDATE `creature` SET `position_x` = 3460.07, `position_y` = -2904.9836, `position_z` = 201.10063, `orientation` = 0.52359 WHERE (`id1` = 27293) AND (`guid` = 110603);
-UPDATE `creature` SET `position_x` = 3390.5305, `position_y` = -2862.014, `position_z` = 199.62068, `orientation` = 3.24631 WHERE (`id1` = 27293) AND (`guid` = 110604);
-UPDATE `creature` SET `position_x` = 3390.0286, `position_y` = -2864.7012, `position_z` = 200.0756, `orientation` = 2.56563, `Comment` = 'Has Guid SAI' WHERE (`id1` = 27293) AND (`guid` = 110605);
-
--- Set Creature Addon (Amberpine Woodsman)
-DELETE FROM `creature_addon` WHERE (`guid` IN (110578, 110579, 110580, 110581, 110582, 110583, 110602, 110603, 110604, 110605));
-INSERT INTO `creature_addon` (`guid`, `path_id`, `mount`, `bytes1`, `bytes2`, `emote`, `visibilityDistanceType`, `auras`) VALUES
-(110578, 0, 0, 8, 0, 0, 0, NULL),
-(110579, 0, 0, 0, 0, 133, 0, NULL),
-(110580, 0, 0, 8, 0, 0, 0, NULL),
-(110581, 0, 0, 0, 0, 133, 0, NULL),
-(110582, 0, 0, 8, 0, 0, 0, NULL),
-(110583, 0, 0, 0, 0, 133, 0, NULL),
-(110602, 0, 0, 8, 0, 0, 0, NULL),
-(110603, 0, 0, 0, 0, 133, 0, NULL),
-(110604, 0, 0, 0, 0, 133, 0, NULL),
-(110605, 0, 0, 8, 0, 0, 0, NULL);
-
--- Remove Script Name and set SmartAI (Amberpine Woodsman)
-UPDATE `creature_template` SET `AIName` = 'SmartAI', `ScriptName` = '' WHERE (`entry` = 27293);
-
--- Set Guid SmartAI
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0) AND (`entryorguid` IN (-110578, -110580, -110582, -110602, -110605));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(-110578, 0, 0, 0, 1, 0, 100, 0, 1000, 3000, 500, 3000, 0, 0, 5, 36, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Amberpine Woodsman - Out of Combat - Play Emote 36'),
-(-110580, 0, 0, 0, 1, 0, 100, 0, 1000, 3000, 500, 3000, 0, 0, 5, 36, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Amberpine Woodsman - Out of Combat - Play Emote 36'),
-(-110582, 0, 0, 0, 1, 0, 100, 0, 1000, 3000, 500, 3000, 0, 0, 5, 36, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Amberpine Woodsman - Out of Combat - Play Emote 36'),
-(-110602, 0, 0, 0, 1, 0, 100, 0, 1000, 3000, 500, 3000, 0, 0, 5, 36, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Amberpine Woodsman - Out of Combat - Play Emote 36'),
-(-110605, 0, 0, 0, 1, 0, 100, 0, 1000, 3000, 500, 3000, 0, 0, 5, 36, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Amberpine Woodsman - Out of Combat - Play Emote 36');
-
--- Remove Script Name and set SmartAI (Tallhorn Stag)
-UPDATE `creature_template` SET `AIName` = 'SmartAI', `ScriptName` = '' WHERE (`entry` = 26363);
-
--- Set Comments (Tallhorn Stag)
-UPDATE `creature` SET `Comment` = 'Has Personal SAI' WHERE (`id1` = 26363) AND (`guid` IN (119621, 119622, 119642, 119643, 119656));
-
--- Set Guid Sai (Tallhorn Stag)
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0) AND (`entryorguid` IN (-119621, -119622, -119642, -119643, -119656));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(-119621, 0, 0, 1, 11, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 537166592, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Immune To Players & Immune To NPC\'s & Stunned & Prevent Emotes From Chat Text'),
-(-119621, 0, 1, 2, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Feign Death'),
-(-119621, 0, 2, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 11, 29266, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Cast \'Permanent Feign Death\''),
-(-119622, 0, 0, 1, 11, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 537166592, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Immune To Players & Immune To NPC\'s & Stunned & Prevent Emotes From Chat Text'),
-(-119622, 0, 1, 2, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Feign Death'),
-(-119622, 0, 2, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 11, 29266, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Cast \'Permanent Feign Death\''),
-(-119642, 0, 0, 1, 11, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 537166592, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Immune To Players & Immune To NPC\'s & Stunned & Prevent Emotes From Chat Text'),
-(-119642, 0, 1, 2, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Feign Death'),
-(-119642, 0, 2, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 11, 29266, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Cast \'Permanent Feign Death\''),
-(-119643, 0, 0, 1, 11, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 537166592, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Immune To Players & Immune To NPC\'s & Stunned & Prevent Emotes From Chat Text'),
-(-119643, 0, 1, 2, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Feign Death'),
-(-119643, 0, 2, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 11, 29266, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Cast \'Permanent Feign Death\''),
-(-119656, 0, 0, 1, 11, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 537166592, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Immune To Players & Immune To NPC\'s & Stunned & Prevent Emotes From Chat Text'),
-(-119656, 0, 1, 2, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 18, 1, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Set Flags Feign Death'),
-(-119656, 0, 2, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 11, 29266, 2, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Tallhorn Stag - On Respawn - Cast \'Permanent Feign Death\'');
diff --git a/data/sql/updates/db_world/2025_11_15_09.sql b/data/sql/updates/db_world/2025_11_15_09.sql
deleted file mode 100644
index f86f64964..000000000
--- a/data/sql/updates/db_world/2025_11_15_09.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_15_08 -> 2025_11_15_09
-
-UPDATE `creature_template` SET `flags_extra` = `flags_extra` |128 WHERE (`entry` = 25739);
diff --git a/data/sql/updates/db_world/2025_11_15_10.sql b/data/sql/updates/db_world/2025_11_15_10.sql
deleted file mode 100644
index 63a030b74..000000000
--- a/data/sql/updates/db_world/2025_11_15_10.sql
+++ /dev/null
@@ -1,9 +0,0 @@
--- DB update 2025_11_15_09 -> 2025_11_15_10
---
-DELETE FROM `spell_linked_spell` WHERE `spell_trigger` = 54076;
-INSERT INTO `spell_linked_spell` (`spell_trigger`, `spell_effect`, `type`, `comment`) VALUES
-(54076, 49511, 0, 'Taxi validate - Gryphon to Star Rest');
-
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 26878) AND (`source_type` = 0) AND (`id` IN (3));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(26878, 0, 3, 0, 19, 0, 100, 0, 12440, 0, 0, 0, 0, 0, 11, 54076, 2, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Rodney Wells - On Quest \'To Stars\' Rest!\' Taken - Cast \'Taxi to Stars` Rest Validate\'');
diff --git a/data/sql/updates/db_world/2025_11_15_11.sql b/data/sql/updates/db_world/2025_11_15_11.sql
deleted file mode 100644
index 6350fbdb8..000000000
--- a/data/sql/updates/db_world/2025_11_15_11.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- DB update 2025_11_15_10 -> 2025_11_15_11
-
--- Add Immune To PC, Immune To Npc, Stunned, Prevent Emotes, Feign Death and remove All Dynamic Flags (Sniffed)
-UPDATE `creature_template` SET `unit_flags` = `unit_flags` |256|512|262144|536870912, `unit_flags2` = `unit_flags2` |1, `dynamicflags` = 0 WHERE (`entry` = 26514);
-
--- Add Aura (Sniffed)
-DELETE FROM `creature_template_addon` WHERE (`entry` = 26514);
-INSERT INTO `creature_template_addon` (`entry`, `path_id`, `mount`, `bytes1`, `bytes2`, `emote`, `visibilityDistanceType`, `auras`) VALUES
-(26514, 0, 0, 0, 0, 0, 0, '29266');
-
--- Add Disable Gravity and Rooted (Sniffed)
-DELETE FROM `creature_template_movement` WHERE (`CreatureId` = 26514);
-INSERT INTO `creature_template_movement` (`CreatureId`, `Ground`, `Swim`, `Flight`, `Rooted`, `Chase`, `Random`, `InteractionPauseTimer`) VALUES
-(26514, 0, 0, 1, 1, 0, 0, 0);
diff --git a/data/sql/updates/db_world/2025_11_15_12.sql b/data/sql/updates/db_world/2025_11_15_12.sql
deleted file mode 100644
index cb70c3834..000000000
--- a/data/sql/updates/db_world/2025_11_15_12.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_15_11 -> 2025_11_15_12
---
-UPDATE `creature_loot_template` SET `Chance` = 100 WHERE `item` = 43159 AND `entry` = 30746;
diff --git a/data/sql/updates/db_world/2025_11_15_13.sql b/data/sql/updates/db_world/2025_11_15_13.sql
deleted file mode 100644
index 69bb6ab04..000000000
--- a/data/sql/updates/db_world/2025_11_15_13.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_15_12 -> 2025_11_15_13
---
-DELETE FROM `spell_proc_event` WHERE `entry`= 45278;
-INSERT INTO `spell_proc_event` (`entry`, `procFlags`) VALUES
-(45278, 0x00004400|0x00010000);
diff --git a/data/sql/updates/db_world/2025_11_15_14.sql b/data/sql/updates/db_world/2025_11_15_14.sql
deleted file mode 100644
index 18691bf41..000000000
--- a/data/sql/updates/db_world/2025_11_15_14.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_15_13 -> 2025_11_15_14
-DELETE FROM `smart_scripts` WHERE `entryorguid` = 27598 AND `source_type` = 0;
-UPDATE `creature_template` SET `AIName` = '' WHERE `entry` = 27598;
diff --git a/data/sql/updates/db_world/2025_11_15_15.sql b/data/sql/updates/db_world/2025_11_15_15.sql
deleted file mode 100644
index c0e0fce5b..000000000
--- a/data/sql/updates/db_world/2025_11_15_15.sql
+++ /dev/null
@@ -1,31 +0,0 @@
--- DB update 2025_11_15_14 -> 2025_11_15_15
---
-SET @MAXSTANDING := 7;
-SET @REPSUMMONS := 1;
-SET @REPREGULAR := 4;
-SET @REPHULK := 10;
-SET @REPBOSS := 50;
-DELETE FROM `creature_onkill_reputation` WHERE `creature_id` IN (26553, 26554, 26550, 26555, 26668, 26669, 26670, 26672, 26685, 26683, 26684,
-26686, 26687, 26692, 26690, 26691, 26693, 28368, 26696, 26694, 26861);
-INSERT INTO `creature_onkill_reputation` (`creature_id`, `RewOnKillRepFaction1`, `RewOnKillRepFaction2`, `MaxStanding1`, `RewOnKillRepValue1`, `MaxStanding2`, `RewOnKillRepValue2`, `TeamDependent`) VALUES
-(26550, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Dragonflayer Deathseeker
-(26553, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Dragonflayer Fanatic
-(26554, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Dragonflayer Seer
-(26555, 1037, 1052, @MAXSTANDING, @REPHULK, @MAXSTANDING, @REPHULK, 1), -- Scourge Hulk
-(26668, 1037, 1052, @MAXSTANDING, @REPBOSS, @MAXSTANDING, @REPBOSS, 1), -- Svala
-(26669, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ymirjar Savage
-(26670, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ymirjar Flesh Hunter
-(26672, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Bloodthirsty Tundra Wolf
-(26685, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Massive Jormungar
-(26683, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Frenzied Worgen
-(26684, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ravenous Furbog
-(26686, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ferocious Rhino
-(26687, 1037, 1052, @MAXSTANDING, @REPBOSS, @MAXSTANDING, @REPBOSS, 1), -- Gortok
-(26692, 1037, 1052, @MAXSTANDING, @REPSUMMONS, @MAXSTANDING, @REPSUMMONS, 1), -- Ymirjar Harpooner (Skadi)
-(26690, 1037, 1052, @MAXSTANDING, @REPSUMMONS, @MAXSTANDING, @REPSUMMONS, 1), -- Ymirjar Warrior (Skadi)
-(26691, 1037, 1052, @MAXSTANDING, @REPSUMMONS, @MAXSTANDING, @REPSUMMONS, 1), -- Ymirjar Shaman (Skadi)
-(26693, 1037, 1052, @MAXSTANDING, @REPBOSS, @MAXSTANDING, @REPBOSS, 1), -- Skadi
-(28368, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ymirjar Necromancer
-(26696, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ymirjar Berserker
-(26694, 1037, 1052, @MAXSTANDING, @REPREGULAR, @MAXSTANDING, @REPREGULAR, 1), -- Ymirjar Dark Shaman
-(26861, 1037, 1052, @MAXSTANDING, @REPBOSS, @MAXSTANDING, @REPBOSS, 1); -- Ymiron
diff --git a/data/sql/updates/db_world/2025_11_16_00.sql b/data/sql/updates/db_world/2025_11_16_00.sql
deleted file mode 100644
index 517458edd..000000000
--- a/data/sql/updates/db_world/2025_11_16_00.sql
+++ /dev/null
@@ -1,10 +0,0 @@
--- DB update 2025_11_15_15 -> 2025_11_16_00
---
-SET @REPTRASH := 1;
-SET @REPREGULAR := 5;
-SET @REPHULK := 10;
-SET @REPBOSS := 50;
-UPDATE `creature_onkill_reputation` SET `RewOnKillRepValue1` = @REPTRASH, `RewOnKillRepValue2` = @REPTRASH WHERE `creature_id` IN (27636, 27638);
-UPDATE `creature_onkill_reputation` SET `RewOnKillRepValue1` = @REPREGULAR, `RewOnKillRepValue2` = @REPREGULAR WHERE `creature_id` IN (26550, 26553, 26554, 26669, 26670, 26672, 26685, 26683, 26684, 26686, 28368, 26696, 26694); -- UP
-UPDATE `creature_onkill_reputation` SET `RewOnKillRepValue1` = @REPREGULAR, `RewOnKillRepValue2` = @REPREGULAR WHERE `creature_id` IN (27635, 27633, 27641, 27639, 27640, 27653, 27651, 27650, 27648, 27647, 27649, 27645, 27644, 27642); -- Oculus
-UPDATE `creature_onkill_reputation` SET `RewOnKillRepValue1` = @REPBOSS, `RewOnKillRepValue2` = @REPBOSS WHERE `creature_id` IN (27654, 27447, 27655, 27656);
diff --git a/data/sql/updates/db_world/2025_11_16_01.sql b/data/sql/updates/db_world/2025_11_16_01.sql
deleted file mode 100644
index ddd2f9424..000000000
--- a/data/sql/updates/db_world/2025_11_16_01.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_16_00 -> 2025_11_16_01
---
-UPDATE `quest_template_addon` SET `PrevQuestID` = 12611 WHERE (`ID` = 12805);
diff --git a/data/sql/updates/db_world/2025_11_16_02.sql b/data/sql/updates/db_world/2025_11_16_02.sql
deleted file mode 100644
index 5730eeb0f..000000000
--- a/data/sql/updates/db_world/2025_11_16_02.sql
+++ /dev/null
@@ -1,3 +0,0 @@
--- DB update 2025_11_16_01 -> 2025_11_16_02
---
-UPDATE `quest_template_addon` SET `PrevQuestID` = 0 WHERE (`ID` = 12827);
diff --git a/data/sql/updates/db_world/2025_11_17_00.sql b/data/sql/updates/db_world/2025_11_17_00.sql
deleted file mode 100644
index 524b3c133..000000000
--- a/data/sql/updates/db_world/2025_11_17_00.sql
+++ /dev/null
@@ -1,19 +0,0 @@
--- DB update 2025_11_16_02 -> 2025_11_17_00
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 24825) AND (`source_type` = 0) AND (`id` IN (2, 3, 4, 5, 6, 7));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(24825, 0, 2, 0, 72, 0, 100, 512, 1, 0, 0, 0, 0, 0, 53, 2, 24826, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Iron Rune Construct - On Action 1 Done - Start Waypoint Path 24826'),
-(24825, 0, 3, 0, 72, 0, 100, 512, 2, 0, 0, 0, 0, 0, 53, 2, 24827, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Iron Rune Construct - On Action 2 Done - Start Waypoint Path 24827'),
-(24825, 0, 4, 0, 72, 0, 100, 512, 3, 0, 0, 0, 0, 0, 53, 2, 24828, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Iron Rune Construct - On Action 3 Done - Start Waypoint Path 24828'),
-(24825, 0, 5, 0, 72, 0, 100, 512, 4, 0, 0, 0, 0, 0, 53, 2, 24831, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Iron Rune Construct - On Action 4 Done - Start Waypoint Path 24831'),
-(24825, 0, 6, 0, 72, 0, 100, 512, 5, 0, 0, 0, 0, 0, 53, 2, 24829, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Iron Rune Construct - On Action 5 Done - Start Waypoint Path 24829'),
-(24825, 0, 7, 0, 72, 0, 100, 512, 6, 0, 0, 0, 0, 0, 53, 2, 24832, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Iron Rune Construct - On Action 6 Done - Start Waypoint Path 24832');
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0 AND `entryorguid` IN (24826, 24827, 24828, 24829, 24831, 24832));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(24826, 0, 0, 0, 8, 0, 100, 0, 44608, 0, 0, 0, 0, 0, 223, 1, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'On Spellhit \'Rocket Jump\' - Do Action 1'),
-(24827, 0, 0, 0, 8, 0, 100, 0, 44608, 0, 0, 0, 0, 0, 223, 2, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'On Spellhit \'Rocket Jump\' - Do Action 2'),
-(24828, 0, 0, 0, 8, 0, 100, 0, 44608, 0, 0, 0, 0, 0, 223, 3, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'On Spellhit \'Rocket Jump\' - Do Action 3'),
-(24831, 0, 0, 0, 8, 0, 100, 0, 44608, 0, 0, 0, 0, 0, 223, 4, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'On Spellhit \'Rocket Jump\' - Do Action 4'),
-(24829, 0, 0, 0, 8, 0, 100, 0, 44608, 0, 0, 0, 0, 0, 223, 5, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'On Spellhit \'Rocket Jump\' - Do Action 5'),
-(24832, 0, 0, 0, 8, 0, 100, 0, 44608, 0, 0, 0, 0, 0, 223, 6, 0, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'On Spellhit \'Rocket Jump\' - Do Action 6');
diff --git a/data/sql/updates/db_world/2025_11_17_01.sql b/data/sql/updates/db_world/2025_11_17_01.sql
deleted file mode 100644
index 4631988b5..000000000
--- a/data/sql/updates/db_world/2025_11_17_01.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- DB update 2025_11_17_00 -> 2025_11_17_01
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 27292) AND (`source_type` = 0) AND (`id` IN (1));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(27292, 0, 1, 2, 62, 0, 100, 512, 9512, 0, 0, 0, 0, 0, 11, 48606, 3, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 0, 0, 0, 'Flamebringer - On Gossip Option 0 Selected - Cast \'Flamebringer Summon Cue\'');
diff --git a/data/sql/updates/db_world/2025_11_17_02.sql b/data/sql/updates/db_world/2025_11_17_02.sql
deleted file mode 100644
index de286ebd9..000000000
--- a/data/sql/updates/db_world/2025_11_17_02.sql
+++ /dev/null
@@ -1,22 +0,0 @@
--- DB update 2025_11_17_01 -> 2025_11_17_02
-
--- Set Spelldifficulty
-DELETE FROM `spelldifficulty_dbc` WHERE (`ID` IN (52534, 52535));
-INSERT INTO `spelldifficulty_dbc` (`ID`,`DifficultySpellID_1`,`DifficultySpellID_2`,`DifficultySpellID_3`,`DifficultySpellID_4`) VALUES
-(52534, 52534, 59357, 0, 0),
-(52535, 52535, 59358, 0, 0);
-
--- Update SmartAIs (call for help and comments).
-UPDATE `creature_template` SET `AIName` = 'SmartAI' WHERE (`entry` IN (28732, 28733, 28734));
-
-DELETE FROM `smart_scripts` WHERE (`source_type` = 0) AND (`entryorguid` IN (28732, 28733, 28734));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(28732, 0, 0, 0, 0, 0, 100, 0, 2000, 5000, 6000, 8000, 0, 0, 11, 52532, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Warrior - In Combat - Cast \'Strike\''),
-(28732, 0, 1, 0, 0, 0, 100, 0, 2000, 10000, 15000, 15000, 0, 0, 11, 49806, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Warrior - In Combat - Cast \'Cleave\''),
-(28732, 0, 2, 0, 4, 0, 100, 0, 0, 0, 0, 0, 0, 0, 39, 5, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Warrior - On Aggro - Call For Help'),
-(28733, 0, 0, 0, 0, 0, 100, 0, 0, 0, 2000, 2500, 0, 0, 11, 52534, 64, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Shadowcaster - In Combat - Cast \'Shadow Bolt\''),
-(28733, 0, 1, 0, 0, 0, 100, 0, 6000, 12000, 12000, 20000, 0, 0, 11, 52535, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Shadowcaster - In Combat - Cast \'Shadow Nova\''),
-(28733, 0, 2, 0, 4, 0, 100, 0, 0, 0, 0, 0, 0, 0, 39, 5, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Shadowcaster - On Aggro - Call For Help'),
-(28734, 0, 0, 0, 67, 0, 100, 0, 7000, 7000, 7000, 7000, 0, 5, 11, 52540, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Skirmisher - On Behind Target - Cast \'Backstab\''),
-(28734, 0, 1, 0, 0, 0, 100, 0, 5000, 10000, 15000, 15000, 0, 0, 11, 52536, 0, 0, 0, 0, 0, 5, 40, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Skirmisher - In Combat - Cast \'Fixate Trigger\''),
-(28734, 0, 2, 0, 4, 0, 100, 0, 0, 0, 0, 0, 0, 0, 39, 5, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Anub\'ar Skirmisher - On Aggro - Call For Help');
diff --git a/data/sql/updates/db_world/2025_11_17_03.sql b/data/sql/updates/db_world/2025_11_17_03.sql
deleted file mode 100644
index dd3e4e34f..000000000
--- a/data/sql/updates/db_world/2025_11_17_03.sql
+++ /dev/null
@@ -1,8 +0,0 @@
--- DB update 2025_11_17_02 -> 2025_11_17_03
---
-DELETE FROM `smart_scripts` WHERE (`entryorguid` = 26814) AND (`source_type` = 0) AND (`id` IN (2, 4, 21, 32));
-INSERT INTO `smart_scripts` (`entryorguid`, `source_type`, `id`, `link`, `event_type`, `event_phase_mask`, `event_chance`, `event_flags`, `event_param1`, `event_param2`, `event_param3`, `event_param4`, `event_param5`, `event_param6`, `action_type`, `action_param1`, `action_param2`, `action_param3`, `action_param4`, `action_param5`, `action_param6`, `target_type`, `target_param1`, `target_param2`, `target_param3`, `target_param4`, `target_x`, `target_y`, `target_z`, `target_o`, `comment`) VALUES
-(26814, 0, 2, 32, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 71, 0, 3, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Harrison Jones - On Respawn - Change Equipment'),
-(26814, 0, 4, 21, 61, 0, 100, 512, 0, 0, 0, 0, 0, 0, 64, 1, 0, 0, 0, 0, 0, 16, 0, 0, 0, 0, 0, 0, 0, 0, 'Harrison Jones - On Quest \'Dun-da-Dun-tah!\' Taken - Store Targetlist'),
-(26814, 0, 21, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 83, 2, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Harrison Jones - On Quest \'Dun-da-Dun-tah!\' Taken - Remove Npc Flags Questgiver'),
-(26814, 0, 32, 0, 61, 0, 100, 0, 0, 0, 0, 0, 0, 0, 82, 2, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 'Harrison Jones - On Respawn - Add Npc Flags Questgiver');
diff --git a/deps/curl/BUILD-HASHES.txt b/deps/curl/BUILD-HASHES.txt
deleted file mode 100644
index cf82875e3..000000000
--- a/deps/curl/BUILD-HASHES.txt
+++ /dev/null
@@ -1,119 +0,0 @@
-SHA2-256(./bin/curl-ca-bundle.crt)= 50a6277ec69113f00c5fd45f09e8b97a4b3e32daa35d3a95ab30137a55386cef
-SHA2-256(./bin/curl.exe)= 8b8b6aabafb60a7ad1b1a69b5d6f00d74c3760a5e95ec6bee893164a8b53a9a6
-SHA2-256(./bin/libcurl.def)= fc8449996b7661b9ae9c0ed67c847f1c7241a9ef3db717a5d578012f34fb00da
-SHA2-256(./bin/libcurl.dll)= 9f1bd2c15825b2ef194e57375443d79cc45535501208b550538713d7ace4ae00
-SHA2-256(./include/brotli/decode.h)= 20d0a87a96bc25a3af7557075be87be4393e88a5fb564db08e92884dee17d841
-SHA2-256(./include/brotli/encode.h)= 3403a597eff24ff45903128feb471e4dd5138f624104ebe058a9d90ed905550c
-SHA2-256(./include/brotli/port.h)= d87dae6cce00aff76192a1db4fedc2a817967e14e652829349b8a75088f9e467
-SHA2-256(./include/brotli/shared_dictionary.h)= 86230f0aaf533044d85d92f84b5aec8b7e4e231d4b64b098604083e7866e8097
-SHA2-256(./include/brotli/types.h)= 96c9330e790aa6fe53f4cdd328d0a4b98e361b82913baa3219db73aadb11272c
-SHA2-256(./include/curl/curl.h)= bf4762245b5484608cbcd9b7543bc204761e0a54d41040cd85040c70055b5f9e
-SHA2-256(./include/curl/curlver.h)= 63755b65e2a0ab66cc0d5dabf7dbd6679fafc9392c10733c3849ce3d6ea28d7a
-SHA2-256(./include/curl/easy.h)= 3a9a663e57fa4104ae479e513a41d99b069f735543d118c90f73c5b5b0f37291
-SHA2-256(./include/curl/header.h)= 614be48a86f4e5d304c5aa40ef1c85245e25b97732921c3631840146669d992f
-SHA2-256(./include/curl/mprintf.h)= 5254b33e5e351298cdc25303381edc15889a41e129d41821bbd186dc2ddcbd40
-SHA2-256(./include/curl/multi.h)= 83ae673f7655768bf70b141c9cf845b09695aa801d4d1d56362c3928c38e397c
-SHA2-256(./include/curl/options.h)= 5716018d27e783283825bed2a8a051190487722fdeb64b7aa2d03a997e99b8d1
-SHA2-256(./include/curl/stdcheaders.h)= d7588b86814a35ffc3766ff6242e6f6705e04401fc9c208a195caff3503af81c
-SHA2-256(./include/curl/system.h)= 3acff5631122ae9170c316d85f4383ce66b620c3d1e48dc59984075a823de9f7
-SHA2-256(./include/curl/typecheck-gcc.h)= 69f21b923732fe43ad282368521a92392fd36f2233464ab3a9182be295645f58
-SHA2-256(./include/curl/urlapi.h)= 4366e8eead1d92742c679b14dd3c65b92087226e1cebecc7803d619eded6a868
-SHA2-256(./include/curl/websockets.h)= b58bb1d7eda3fd2372feb4d856c256897d83006dfe7933d69be54bc4a2ba5a3f
-SHA2-256(./include/libpsl.h)= c18414f8fbcf2c16ce4cf4038dd27a0e8b64d8dc9c117d5b982016d830852f4e
-SHA2-256(./include/libssh2.h)= 86cc9fcfd0daa10ba25442e5ecea23db618027362bc85fdc591ec7f5d9d39a91
-SHA2-256(./include/libssh2_publickey.h)= f1cd086f3950e65635827ee3332c1c6ca62887c0f84369ec58e31974debb36e9
-SHA2-256(./include/libssh2_sftp.h)= b5d864f19af69521278ed953b20b76a32cfdc08014da81d38f59964e7e2e2575
-SHA2-256(./include/nghttp2/nghttp2.h)= 711ec7c2f6851f6c744cc54e279bdda113824adbd0e4e7d8a62703ca9c7b90ec
-SHA2-256(./include/nghttp2/nghttp2ver.h)= d487680fae998aedc5527ea49a264a1d2ffbf850700510ab1bbf17645b1be168
-SHA2-256(./include/nghttp3/nghttp3.h)= 0105d267ae01429f21fa45966652d5df6f7dc37a66ba0e6108ec3cd0b0785741
-SHA2-256(./include/nghttp3/version.h)= 3567d160379ba236001f9d072f4d628b379e5068910c3101d5816b1e2f007c02
-SHA2-256(./include/ngtcp2/ngtcp2.h)= 02ca2305128fd71f4957ddf2443b8377462f907f45aa3aad50c2606f767a4ebe
-SHA2-256(./include/ngtcp2/ngtcp2_crypto.h)= aa0c1f657921d398fe3fa5044be5edb4e4f9d048f75ee9909e654ac5d937b1c0
-SHA2-256(./include/ngtcp2/ngtcp2_crypto_quictls.h)= 1790e0356644fe51c2239839c68cd1ded53cd729b4730c6f7068db14845216b2
-SHA2-256(./include/ngtcp2/version.h)= b29c3bbaf1f69ce112767b01f480c82654417ea97ded5ac9db60f90eb16bc293
-SHA2-256(./include/openssl/aes.h)= a2f5a390cf7bebbe9663a57cf3ba921f486ffdcaa9a08bae3d7488904e331d58
-SHA2-256(./include/openssl/asn1.h)= 687538926de7e7abb5e633e496352f28cd8850bcfa6299f80f460f1166a511f3
-SHA2-256(./include/openssl/asn1t.h)= ff2f110c85b1389ebed09059eb47a5337cc57c67c4e84bd7ae897124886c27fc
-SHA2-256(./include/openssl/bio.h)= 1bcab470bff5f8834effa967eea18ef1a2cf70c2cefb9d5d00f5b85e0d8d6ff0
-SHA2-256(./include/openssl/blowfish.h)= 1331f14c97bb42bfc68c2915ba7983be927152c9651ee16348514f4a29277ecd
-SHA2-256(./include/openssl/bn.h)= f576d8c9e6841238478abf977909029c8eea96a01e7f76b86cadf4fb906ddabc
-SHA2-256(./include/openssl/buffer.h)= a60e861037ec534a80289dce8a5fda46ef72cb3248a29fdc86bd12559c0dfb93
-SHA2-256(./include/openssl/camellia.h)= 7c493b1665915dfe9901cbe0e4d0289c16aef34df5369e5594fd407aee46baa6
-SHA2-256(./include/openssl/cast.h)= 231fe48b423a155d6475bf5546b3d4e0673c5943a0b7f3fd28aff9be955c8153
-SHA2-256(./include/openssl/chacha.h)= 1249f724f0d2b8a9c042302ee2f0dfb233a96c3b169542825abbdabd7c54c732
-SHA2-256(./include/openssl/cmac.h)= 1e298a02b96233ae382ff8fad42ec6b7e04bdbc62ee7faab3479dbe7c7962c7e
-SHA2-256(./include/openssl/cms.h)= df710537b6d99b10ff98576c89def33a8bfe4d0c7781da41a6f35932a6669622
-SHA2-256(./include/openssl/comp.h)= 827b2d6d9ddebb4345aef8ff92e4a350e7bfa01de0f684fadf354ff891389f97
-SHA2-256(./include/openssl/conf.h)= 47ca3f9f7fbfe762380d30997768fb41b2a1d4db9f6d93fba515ed39e5e2b52b
-SHA2-256(./include/openssl/crypto.h)= 4b30c28da3274f8324116c03e303bbc77e5a19597aa542fef103ecf338f5004d
-SHA2-256(./include/openssl/ct.h)= 059a0cf146e35736dac7c2d34ad344f8b00fe364324112de4fe1c7a10a13edc3
-SHA2-256(./include/openssl/curve25519.h)= d7534da0a98ef1827761beae60ca00d67b1acc0c6977e919591401f2777dd4d2
-SHA2-256(./include/openssl/des.h)= 01a768ef88b40b098527b2a8d65e208bdfc3fd509de1a2e1ef8b3204f7a1573b
-SHA2-256(./include/openssl/dh.h)= f094394d4f93e6ef46af9ed1cb6a0d67a7224c84f9637b6d365289633cd96cdb
-SHA2-256(./include/openssl/dsa.h)= c0af866a797554addd91ac24e1b3b9e28e9b6c2e588a3f18642907fc09e1b311
-SHA2-256(./include/openssl/dtls1.h)= 9c9837a45861f79f4ecd54761bc74aa503265778be1dd76c68433d7994fabb3b
-SHA2-256(./include/openssl/ec.h)= 06600be45aed6649c4a4c8a04b48fa0134336dd96ae3ebea7e296015d3299c33
-SHA2-256(./include/openssl/ecdh.h)= bfef80e1a0152c23c29a04323302c6a592e55104a5add4c458301ef1da45bade
-SHA2-256(./include/openssl/ecdsa.h)= 298d675ce2985b1ba12d7da1245fbc5327f193dc3a477a9aada2208162fdd542
-SHA2-256(./include/openssl/engine.h)= e8bfa460b4ab7f443e1e43151f814db001d0c6c2a6f5d692b1d4ec8e9035ca76
-SHA2-256(./include/openssl/err.h)= 0458a7254cd3de4bb1eae6a874a8cb16d1881d106dae717a76affaff13784a0a
-SHA2-256(./include/openssl/evp.h)= 153c2259c8de3e848b9bf7f3829f09125aee342289f47ed59fa17d10e16758e7
-SHA2-256(./include/openssl/hkdf.h)= 47294d3c2c3df67590090a7262032d2ed83a249d053f9c81be01878faffdc4d2
-SHA2-256(./include/openssl/hmac.h)= e807316d11e95fd116364b4636d5bde43afb5a12a571a1ccd5639abf62fdcf2d
-SHA2-256(./include/openssl/idea.h)= b9d571b2d33c78acd608bdd4b88fca55a6116496199e8dc45a1780096ea1933a
-SHA2-256(./include/openssl/kdf.h)= c7ecfc60364c4a47d86fb55c6087f4c8e8ae59b9ee60b9fce7e4c70c7d903141
-SHA2-256(./include/openssl/lhash.h)= 053f21efa3da78055e2763b90fd69a4b810606c91b36bbc055290685eeee6f71
-SHA2-256(./include/openssl/md4.h)= 5032eb1e87991167c6df29a003a154139b882d8ba20b457155d2cba0725ee388
-SHA2-256(./include/openssl/md5.h)= 3c40baa0d7014ac26cff7dec96e35856e3927121b07ff82ae3f0cbd9dc8ecf92
-SHA2-256(./include/openssl/modes.h)= a8993a5bdfad225b207971039657000250b3239d7ca095238fabb895d73bafc6
-SHA2-256(./include/openssl/obj_mac.h)= 4270ca80a060fdcaf77e31ce3dcd85ed92cceeb23aed7a6af8d92c84aff54075
-SHA2-256(./include/openssl/objects.h)= dcf127aedcc6a9fbf4abc6dfacbf6d234a003d5c390025f4785c3407cbe99cf2
-SHA2-256(./include/openssl/ocsp.h)= 74bf587344a632fee6721e93a3991de1c5cdafe762fc7ff3d22ea614ea8505f7
-SHA2-256(./include/openssl/opensslconf.h)= 7f986b5619eb506de7e097ef9fe9acfc7b1a31c62830dcdecb0022b10a2c6692
-SHA2-256(./include/openssl/opensslfeatures.h)= b6cb250da81ac43dfe8fe76f512f7b4ee81c036a76a98a0f9f656bcf218d86e7
-SHA2-256(./include/openssl/opensslv.h)= c0356231fbf428876351b9b8a044232622ebd5ea3e3750d5690cf6f6b0258c38
-SHA2-256(./include/openssl/ossl_typ.h)= 74a337679d1a99aee06bdd11a3b7d814932f0ed772a1c09cbf799c6b7297158c
-SHA2-256(./include/openssl/pem.h)= fd8e0bf923e6878d03a07b6401266a6cff4089082dca60db3426b8640fb5e6f6
-SHA2-256(./include/openssl/pkcs12.h)= 78792595b289ae1589334e1e1b6d6da7b6049d01b5bf27a86099d659437b04fd
-SHA2-256(./include/openssl/pkcs7.h)= 7ff2f0a960a85a579b434fc76639ca706608b5d50c99e0fb7863026a344e1a76
-SHA2-256(./include/openssl/poly1305.h)= 92bea3cd25aa9b4cf58e9b42c0a5cc4cfc0bd7bd06c156774f1642f80bb4b20e
-SHA2-256(./include/openssl/posix_time.h)= 9b403139b6e0a2212b5c3ad5d387631f19f5bec74d8831d3fc4c3ab34f58840b
-SHA2-256(./include/openssl/rand.h)= 9e4957207431d97886e6589aef8ce9cd15579bda226baf5c980dcb47876068cd
-SHA2-256(./include/openssl/rc2.h)= 7c153296607eedfc16eccdd0a1900e68346bebce293529f83cd8e5c5239369cc
-SHA2-256(./include/openssl/rc4.h)= ef80b6dc68e4bee9a204b331889c87671378f9d5665ff2c2973315fc3918504e
-SHA2-256(./include/openssl/ripemd.h)= 30c5cf6c58590cdcc31f509d2354c040f1c4bfccebb2cad348420472b38ccc1b
-SHA2-256(./include/openssl/rsa.h)= de4682f22e99952ae5a26c0c2d80222a958e4688dd31bfa3876017ecd5195945
-SHA2-256(./include/openssl/safestack.h)= 3ba8e3cf36e174528a5d581dfa897012dba82d820d2da07b2e4705ec6547ad22
-SHA2-256(./include/openssl/sha.h)= 39f3e1a6ef421e4d214229c3a012f223e92c3322c7cd47f55c1803d0e45979ca
-SHA2-256(./include/openssl/sm3.h)= a420f39df38323fb7277e800f605feee4d9f75610bb62d70083a224b9f828b02
-SHA2-256(./include/openssl/sm4.h)= 7b514cc849480210d447cc81fc71eae100c1f7f87f902589ea862e152ee26d18
-SHA2-256(./include/openssl/srtp.h)= cc3c3de38996738740e6624d58b4c5b40cad4486b344a9e6444a2c5fc02bd0aa
-SHA2-256(./include/openssl/ssl.h)= c9e241b8d1a62844ca6621cc1c989ed276441d178c3062670f982dccb3b147fd
-SHA2-256(./include/openssl/ssl3.h)= 1b874f840ab4a34ff78de5009bf432e42d088716c17c43b6e45bbfde58d6c30a
-SHA2-256(./include/openssl/stack.h)= cec4d77b15c66fcbadc05d6946ad6fb8a77430472302798ac25b52aeaa990b92
-SHA2-256(./include/openssl/tls1.h)= 901f42b3ac662aa00253e879723d7ffd24c207e35fcb700bdedab0ba1171f7fa
-SHA2-256(./include/openssl/ts.h)= 28cb12962438d5c655fe5a46cad53e9f4a334497d4411446d5974601485a28cc
-SHA2-256(./include/openssl/txt_db.h)= 7c50364dd59d167b14db35ff210327d57cabfb14be2ae40e440de2aad14d5b27
-SHA2-256(./include/openssl/ui.h)= e73e0e7d8418b5b66d45466025cd0a64daaac3736c746c36a7c17178ede4af8d
-SHA2-256(./include/openssl/x509.h)= 5005fd0760c1b5bd30b2d0eb03f4fa485719181993605022fb33810b9312c4c2
-SHA2-256(./include/openssl/x509_vfy.h)= 89056f208201467ba8259e49c9df74c10d8e3fe30db3611c150256b1d9e6df67
-SHA2-256(./include/openssl/x509v3.h)= 9a86af9a85c4f245a6cfbad809b4a6e40e67a3b99a92d26774f49089c8b94e74
-SHA2-256(./include/zconf.h)= 4824af6045d35a80f6bf61d218073ffaff3e8638de7ed2e05303457a7c99340d
-SHA2-256(./include/zdict.h)= abacadb94e3f79e591f4b1648e839b0160fbf4291211fd01bdba1380269b245c
-SHA2-256(./include/zlib.h)= 8a5579af72ea4f427ff00a4150f0ccb3fc5c1e4379f726e101133b1ab9fc600c
-SHA2-256(./include/zstd.h)= 9b4bc8245565c98ccfc61c07749928b57e7c0f6fddb0530c4f6aa1971893d88b
-SHA2-256(./include/zstd_errors.h)= 66a8c3f71d12ea6e797e4f622f31f3f8f81c41b36f48cad4f5de7d8bfb6aac0a
-SHA2-256(./lib/libbrotlicommon.a)= c4ace1c46440e01236addfc1d1ec8f05955766343d972623a90efcdbb499e034
-SHA2-256(./lib/libbrotlidec.a)= 835885e909672a7af460810e68963b020149578f11be9b8d8390b3081c6c38dd
-SHA2-256(./lib/libcrypto.a)= aa40f939c68baf3c91343e3bf561d884665a756fba437c1e7f649551cc774bf8
-SHA2-256(./lib/libcurl.a)= 6146e4913eb1571af529798dd4699a44fac13882b9a85b9970985b43e2d7de20
-SHA2-256(./lib/libcurl.dll.a)= ef73ac11d2dd1edda3266b0a9f6e1560f9367ac0d898f62ff2f38d4ba129986b
-SHA2-256(./lib/libnghttp2.a)= 52e9b6c87330aed345697c2ef122d9d0f7c6742521081bd3a8012700c4325ef6
-SHA2-256(./lib/libnghttp3.a)= 46634a1c4cbeb7d35d1530a7f7978dc11e54ef7e57a2dd2826b7bbd375c7e29c
-SHA2-256(./lib/libngtcp2.a)= 9aaba4c52d4cbddb0bf53d9d0522e0d7df57e6ecf5721ee4c365cbff19e19042
-SHA2-256(./lib/libngtcp2_crypto_quictls.a)= c51a5af666309ed3330ee5c555961dd21bf78eb383ad9a79f02e58cf3eb17844
-SHA2-256(./lib/libpsl.a)= a6bc60a2ba23a7fa11c34b36aecdc15da657914df7af331ac578597aa7e7072d
-SHA2-256(./lib/libssh2.a)= e815ce8dc668aedb32c9e775fcff7e1e7a8618f8b9b1b4b932fae6a290533d33
-SHA2-256(./lib/libssl.a)= 9f5374d6d2eda41eeecc0cfee74b92fd2e7b03ef3864a13b29816f062e30cc04
-SHA2-256(./lib/libz.a)= 0a1dbe1998ada5401dd98dabbfe794bfe0155b289b97372b4fb4854b3bdc2680
-SHA2-256(./lib/libzstd.a)= ad185e0aa92a054d7260a119079b97a71eea37227221bba93b4c1b0380ec90ff
diff --git a/deps/curl/BUILD-MANIFEST.txt b/deps/curl/BUILD-MANIFEST.txt
deleted file mode 100644
index 060b979d9..000000000
--- a/deps/curl/BUILD-MANIFEST.txt
+++ /dev/null
@@ -1,13 +0,0 @@
-.clang 19.1.7
-.mingw-w64 12.0.0-5
-zlib 1.3.1 https://zlib.net/zlib-1.3.1.tar.xz
-zstd 1.5.7 https://github.com/facebook/zstd/releases/download/v1.5.7/zstd-1.5.7.tar.gz
-brotli 1.1.0 https://github.com/google/brotli/archive/v1.1.0.tar.gz
-libpsl 0.21.5 https://github.com/rockdaboot/libpsl/releases/download/0.21.5/libpsl-0.21.5.tar.gz
-nghttp3 1.8.0 https://github.com/ngtcp2/nghttp3/releases/download/v1.8.0/nghttp3-1.8.0.tar.xz
-libressl 4.0.0 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.0.0.tar.gz
-ngtcp2 1.11.0 https://github.com/ngtcp2/ngtcp2/releases/download/v1.11.0/ngtcp2-1.11.0.tar.xz
-nghttp2 1.65.0 https://github.com/nghttp2/nghttp2/releases/download/v1.65.0/nghttp2-1.65.0.tar.xz
-libssh2 1.11.1 https://libssh2.org/download/libssh2-1.11.1.tar.xz
-cacert 2025-02-25 https://curl.se/ca/cacert-2025-02-25.pem
-curl 8.12.1 https://curl.se/download/curl-8.12.1.tar.xz
diff --git a/deps/curl/BUILD-README.url b/deps/curl/BUILD-README.url
deleted file mode 100644
index 36278f89d..000000000
--- a/deps/curl/BUILD-README.url
+++ /dev/null
@@ -1,2 +0,0 @@
-[InternetShortcut]
-URL=https://github.com/curl/curl-for-win
diff --git a/deps/curl/COPYING.txt b/deps/curl/COPYING.txt
deleted file mode 100644
index 3fa85ebb6..000000000
--- a/deps/curl/COPYING.txt
+++ /dev/null
@@ -1,22 +0,0 @@
-COPYRIGHT AND PERMISSION NOTICE
-
-Copyright (c) 1996 - 2025, Daniel Stenberg, , and many
-contributors, see the THANKS file.
-
-All rights reserved.
-
-Permission to use, copy, modify, and distribute this software for any purpose
-with or without fee is hereby granted, provided that the above copyright
-notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. IN
-NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
-DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
-OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE
-OR OTHER DEALINGS IN THE SOFTWARE.
-
-Except as contained in this notice, the name of a copyright holder shall not
-be used in advertising or otherwise to promote the sale, use or other dealings
-in this Software without prior written authorization of the copyright holder.
diff --git a/deps/curl/README.txt b/deps/curl/README.txt
deleted file mode 100644
index f5efbd70a..000000000
--- a/deps/curl/README.txt
+++ /dev/null
@@ -1,55 +0,0 @@
- _ _ ____ _
- ___| | | | _ \| |
- / __| | | | |_) | |
- | (__| |_| | _ <| |___
- \___|\___/|_| \_\_____|
-
-README
-
- Curl is a command line tool for transferring data specified with URL
- syntax. Find out how to use curl by reading the curl.1 man page or the
- MANUAL document. Find out how to install Curl by reading the INSTALL
- document.
-
- libcurl is the library curl is using to do its job. It is readily
- available to be used by your software. Read the libcurl.3 man page to
- learn how.
-
- You find answers to the most frequent questions we get in the FAQ document.
-
- Study the COPYING file for distribution terms.
-
- Those documents and more can be found in the docs/ directory.
-
-CONTACT
-
- If you have problems, questions, ideas or suggestions, please contact us
- by posting to a suitable mailing list. See https://curl.se/mail/
-
- All contributors to the project are listed in the THANKS document.
-
-WEBSITE
-
- Visit the curl website for the latest news and downloads:
-
- https://curl.se/
-
-GIT
-
- To download the latest source code off the GIT server, do this:
-
- git clone https://github.com/curl/curl.git
-
- (you will get a directory named curl created, filled with the source code)
-
-SECURITY PROBLEMS
-
- Report suspected security problems via our HackerOne page and not in public.
-
- https://hackerone.com/curl
-
-NOTICE
-
- Curl contains pieces of source code that is Copyright (c) 1998, 1999
- Kungliga Tekniska Högskolan. This notice is included here to comply with the
- distribution terms.
diff --git a/deps/curl/RELEASE-NOTES.txt b/deps/curl/RELEASE-NOTES.txt
deleted file mode 100644
index 771fb6600..000000000
--- a/deps/curl/RELEASE-NOTES.txt
+++ /dev/null
@@ -1,172 +0,0 @@
-curl and libcurl 8.12.1
-
- Public curl releases: 265
- Command line options: 267
- curl_easy_setopt() options: 306
- Public functions in libcurl: 96
- Contributors: 3344
-
-This release includes the following changes:
-
-
-This release includes the following bugfixes:
-
- o all: remove FIXME and TODO comments [55]
- o asyn-thread: fix build with `CURL_DISABLE_SOCKETPAIR` [47]
- o asyn-thread: fix HTTPS RR crash [10]
- o asyn-thread: fix the returned bitmask from Curl_resolver_getsock [18]
- o asyn-thread: survive a c-ares channel set to NULL [52]
- o build: add tool_hugehelp.c into IBMi build [40]
- o checksrc.pl: warn on FIXME/TODO comments
- o cmake/Find: set `_FOUND` for compatibility when found via `pkg-config` [22]
- o cmake: add integration tests, run them in CI [21]
- o cmake: always reference OpenSSL and ZLIB via imported targets [24]
- o cmake: avoid unnecessary `-L` for implicit link dirs [11]
- o cmake: drop `LDAP_DEPRECATED=1` macro, to sync with autotools [23]
- o cmake: fix `HAVE_GETHOSTBYNAME_R_*` detections with `CURL_WERROR=ON` [57]
- o cmake: fix to detect `HAVE_OPENSSL_SRP` in MSVC UWP builds [62]
- o cmake: fix/add missing feature detections for Windows/MS-DOS [58]
- o cmake: initialize variables where missing [27]
- o cmake: lib order fixes for picky linkers (e.g. binutils `ld`) [26]
- o cmake: normalize before matching paths with syspaths [30]
- o cmake: respect `GNUTLS_CFLAGS` when detected via `pkg-config` [38]
- o cmake: respect `GNUTLS_LIBRARY_DIRS` in `libcurl.pc` and `curl-config` [39]
- o cmake: save a line with `CMAKE_C_IMPLICIT_LINK_DIRECTORIES` exclusion [32]
- o cmake: tidy up string append and list prepend syntax [28]
- o configure/cmake: check for realpath [19]
- o configure/cmake: set asyn-rr a feature only if httpsrr is enabled [42]
- o content_encoding: #error on too old zlib [2]
- o curl_global_sslset.md: Add SSL backend names [50]
- o CURLOPT_SSH_KNOWNHOSTS.md: strongly recommend using this [41]
- o CURLSHOPT_SHARE.md: adjust for the new SSL session cache [6]
- o docs: better explain multi-part byte range behavior [4]
- o docs: use valid example domain names [54]
- o generate.bat: remove curl_get_line.c from the curlx file list [20]
- o header.md: mention `Authorization:` and `Cookie:` special treatment [43]
- o imap: TLS upgrade fix [14]
- o INTERNALS: fix c-ares, as we actually support 1.6.0 or later [37]
- o ldap: drop support for legacy Novell LDAP SDK [25]
- o lib: include necessary headers for `inet_ntop`/`inet_pton` [8]
- o lib: silence LibreSSL collision warning on non-MSVC Windows [51]
- o libssh2: comparison is always true because rc <= -1 [56]
- o libssh2: raise lowest supported version to 1.2.8 [3]
- o libssh: drop support for libssh older than 0.9.0 [33]
- o libssh: silence `-Wconversion` with a cast (Windows 32-bit) [7]
- o netrc: return code cleanup, fix missing file error [45]
- o openssl-quic: ignore ciphers for h3 [1]
- o openssl: fix out of scope variables in goto [12]
- o pop3: TLS upgrade fix [15]
- o runtests: fix the disabling of the memory tracking [29]
- o runtests: quote commands to support paths with spaces [35]
- o scache: add magic checks [31]
- o smb: silence `-Warray-bounds` with gcc 13+ [9]
- o smtp: TLS upgrade fix [16]
- o SPONSORS.md: clarify that we don't promise goods or services [5]
- o test1516: avoid failure due to spaces in path [36]
- o test2080: simplify, avoid the null byte
- o tests: fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake [53]
- o tidy-up: make per-file `ARRAYSIZE` macros global as `CURL_ARRAYSIZE` [48]
- o tool_cfgable: sort struct fields by size, use bitfields for booleans [17]
- o tool_getparam: add "TLS required" flag for each such option [44]
- o tool_progress: fix percent output of large parallel transfers [61]
- o tool_ssls: switch to tool-specific get_line function [34]
- o verbose.md: mention how carriage-return might occur in headers [49]
- o vquic: make the "disable GSO" use infof, not failf [65]
- o vtls: fix multissl-init [60]
- o vtsl: eliminate 'data->state.ssl_scache' [59]
- o wakeup_write: make sure the eventfd write sends eight bytes [46]
- o wolfssl: silence compiler warning (MSVC 2019), simplify existing [13]
-
-This release includes the following known bugs:
-
- See https://curl.se/docs/knownbugs.html
-
-For all changes ever done in curl:
-
- See https://curl.se/changes.html
-
-Planned upcoming removals include:
-
- o Support for the msh3 HTTP/3 backend
- o The winbuild build system
- o TLS libraries not supporting TLS 1.3
-
- See https://curl.se/dev/deprecate.html
-
-This release would not have looked like this without help, code, reports and
-advice from friends like these:
-
- Aaron Deadman, Andrei Korshikov, Andrew Kirillov, arlt on github,
- Christian Schmitz, CueXXIII on Github, Dan Fandrich, Daniel Stenberg,
- deliciouslytyped on github, Fay Stegerman, Jan Engelhardt,
- jethrogb on github, Kai Pastor, Marcel Raad, Michael Kaufmann,
- mschroeder-fzj on github, nono303 on github, Philip Heiduck, qhill,
- Ralf A. Timmermann, Ray Satiro, renovate[bot], Stefan Eissing, Terence Eden,
- thisisgk on github, Viktor Szakats, zzq1015 on github
- (27 contributors)
-
-References to bug reports and discussions on issues:
-
- [1] = https://curl.se/bug/?i=16232
- [2] = https://curl.se/bug/?i=16202
- [3] = https://curl.se/bug/?i=16199
- [4] = https://curl.se/bug/?i=16139
- [5] = https://curl.se/bug/?i=16196
- [6] = https://curl.se/bug/?i=16245
- [7] = https://curl.se/bug/?i=16194
- [8] = https://curl.se/bug/?i=16184
- [9] = https://curl.se/bug/?i=16187
- [10] = https://curl.se/bug/?i=16169
- [11] = https://curl.se/bug/?i=16233
- [12] = https://curl.se/bug/?i=16246
- [13] = https://curl.se/bug/?i=16230
- [14] = https://curl.se/bug/?i=16213
- [15] = https://curl.se/bug/?i=16208
- [16] = https://curl.se/bug/?i=16189
- [17] = https://curl.se/bug/?i=16211
- [18] = https://curl.se/bug/?i=16227
- [19] = https://curl.se/bug/?i=16209
- [20] = https://curl.se/bug/?i=16248
- [21] = https://curl.se/bug/?i=16126
- [22] = https://curl.se/bug/?i=16153
- [23] = https://curl.se/bug/?i=16146
- [24] = https://curl.se/bug/?i=16207
- [25] = https://curl.se/bug/?i=16176
- [26] = https://curl.se/bug/?i=16182
- [27] = https://curl.se/bug/?i=16198
- [28] = https://curl.se/bug/?i=16144
- [29] = https://curl.se/bug/?i=16226
- [30] = https://curl.se/bug/?i=16191
- [31] = https://curl.se/bug/?i=16240
- [32] = https://curl.se/bug/?i=16243
- [33] = https://curl.se/bug/?i=16200
- [34] = https://curl.se/bug/?i=16201
- [35] = https://curl.se/bug/?i=16220
- [36] = https://curl.se/bug/?i=16223
- [37] = https://curl.se/bug/?i=16221
- [38] = https://curl.se/bug/?i=16242
- [39] = https://curl.se/bug/?i=16190
- [40] = https://curl.se/bug/?i=16214
- [41] = https://curl.se/bug/?i=16204
- [42] = https://curl.se/bug/?i=16183
- [43] = https://curl.se/bug/?i=16160
- [44] = https://curl.se/bug/?i=16159
- [45] = https://curl.se/bug/?i=16163
- [46] = https://curl.se/bug/?i=16237
- [47] = https://curl.se/bug/?i=16179
- [48] = https://curl.se/bug/?i=16111
- [49] = https://curl.se/bug/?i=16285
- [50] = https://curl.se/bug/?i=16256
- [51] = https://curl.se/bug/?i=16273
- [52] = https://curl.se/bug/?i=16216
- [53] = https://curl.se/bug/?i=16289
- [54] = https://curl.se/bug/?i=16269
- [55] = https://curl.se/bug/?i=16283
- [56] = https://curl.se/bug/?i=16268
- [57] = https://curl.se/bug/?i=16282
- [58] = https://curl.se/bug/?i=16278
- [59] = https://curl.se/bug/?i=16261
- [60] = https://curl.se/bug/?i=16253
- [61] = https://curl.se/bug/?i=16284
- [62] = https://curl.se/bug/?i=16293
- [65] = https://curl.se/bug/?i=16294
diff --git a/deps/curl/bin/curl-ca-bundle.crt b/deps/curl/bin/curl-ca-bundle.crt
deleted file mode 100644
index 584af3c0b..000000000
--- a/deps/curl/bin/curl-ca-bundle.crt
+++ /dev/null
@@ -1,3642 +0,0 @@
-##
-## Bundle of CA Root Certificates
-##
-## Certificate data from Mozilla as of: Tue Feb 25 04:12:03 2025 GMT
-##
-## Find updated versions here: https://curl.se/docs/caextract.html
-##
-## This is a bundle of X.509 certificates of public Certificate Authorities
-## (CA). These were automatically extracted from Mozilla's root certificates
-## file (certdata.txt). This file can be found in the mozilla source tree:
-## https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
-##
-## It contains the certificates in PEM format and therefore
-## can be directly used with curl / libcurl / php_curl, or with
-## an Apache+mod_ssl webserver for SSL client authentication.
-## Just configure this file as the SSLCACertificateFile.
-##
-## Conversion done with mk-ca-bundle.pl version 1.29.
-## SHA256: 620fd89c02acb0019f1899dab7907db5d20735904f5a9a0d3a8771a5857ac482
-##
-
-
-GlobalSign Root CA
-==================
------BEGIN CERTIFICATE-----
-MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkGA1UEBhMCQkUx
-GTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jvb3QgQ0ExGzAZBgNVBAMTEkds
-b2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAwMDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNV
-BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYD
-VQQDExJHbG9iYWxTaWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa
-DuaZjc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavpxy0Sy6sc
-THAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp1Wrjsok6Vjk4bwY8iGlb
-Kk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdGsnUOhugZitVtbNV4FpWi6cgKOOvyJBNP
-c1STE4U6G7weNLWLBYy5d4ux2x8gkasJU26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrX
-gzT/LCrBbBlDSgeF59N89iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0BAQUF
-AAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOzyj1hTdNGCbM+w6Dj
-Y1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE38NflNUVyRRBnMRddWQVDf9VMOyG
-j/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymPAbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhH
-hm4qxFYxldBniYUr+WymXUadDKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveC
-X4XSQRjbgbMEHMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==
------END CERTIFICATE-----
-
-Entrust.net Premium 2048 Secure Server CA
-=========================================
------BEGIN CERTIFICATE-----
-MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChMLRW50cnVzdC5u
-ZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBpbmNvcnAuIGJ5IHJlZi4gKGxp
-bWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNV
-BAMTKkVudHJ1c3QubmV0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQx
-NzUwNTFaFw0yOTA3MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3
-d3d3LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTEl
-MCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50cnVzdC5u
-ZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-MIIBCgKCAQEArU1LqRKGsuqjIAcVFmQqK0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOL
-Gp18EzoOH1u3Hs/lJBQesYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSr
-hRSGlVuXMlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVTXTzW
-nLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9+5CFVghTAp+XtIpGmG4zU/HoZdenoVve8AjhUi
-VBcAkCaTvA5JaJG/+EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH4QIDAQABo0IwQDAOBgNVHQ8BAf8E
-BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJ
-KoZIhvcNAQEFBQADggEBADubj1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4+WZiT6QBshJ8rmcnPy
-T/4xmf3IDExoU8aAghOY+rat2l098c5u9hURlIIM7j+VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf
-zX1XEC+bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5bu/8j72gZyxKT
-J1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7+bYQLCIt+jerXmCHG8+c8eS9e
-nNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/ErfF6adulZkMV8gzURZVE=
------END CERTIFICATE-----
-
-Baltimore CyberTrust Root
-=========================
------BEGIN CERTIFICATE-----
-MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJRTESMBAGA1UE
-ChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3li
-ZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoXDTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMC
-SUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFs
-dGltb3JlIEN5YmVyVHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKME
-uyKrmD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjrIZ3AQSsB
-UnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeKmpYcqWe4PwzV9/lSEy/C
-G9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSuXmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9
-XbIGevOF6uvUA65ehD5f/xXtabz5OTZydc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjpr
-l3RjM71oGDHweI12v/yejl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoI
-VDaGezq1BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEB
-BQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT929hkTI7gQCvlYpNRh
-cL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3WgxjkzSswF07r51XgdIGn9w/xZchMB5
-hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsa
-Y71k5h+3zvDyny67G7fyUIhzksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9H
-RCwBXbsdtTLSR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp
------END CERTIFICATE-----
-
-Entrust Root Certification Authority
-====================================
------BEGIN CERTIFICATE-----
-MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMCVVMxFjAUBgNV
-BAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0Lm5ldC9DUFMgaXMgaW5jb3Jw
-b3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMWKGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsG
-A1UEAxMkRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0
-MloXDTI2MTEyNzIwNTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMu
-MTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSByZWZlcmVu
-Y2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNVBAMTJEVudHJ1c3QgUm9v
-dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
-ALaVtkNC+sZtKm9I35RMOVcF7sN5EUFoNu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYsz
-A9u3g3s+IIRe7bJWKKf44LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOww
-Cj0Yzfv9KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGIrb68
-j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi94DkZfs0Nw4pgHBN
-rziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOBsDCBrTAOBgNVHQ8BAf8EBAMCAQYw
-DwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAigA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1
-MzQyWjAfBgNVHSMEGDAWgBRokORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DH
-hmak8fdLQ/uEvW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA
-A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9tO1KzKtvn1ISM
-Y/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6ZuaAGAT/3B+XxFNSRuzFVJ7yVTa
-v52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTS
-W3iDVuycNsMm4hH2Z0kdkquM++v/eu6FSqdQgPCnXEqULl8FmTxSQeDNtGPPAUO6nIPcj2A781q0
-tHuu2guQOHXvgR1m0vdXcDazv/wor3ElhVsT/h5/WrQ8
------END CERTIFICATE-----
-
-Comodo AAA Services root
-========================
------BEGIN CERTIFICATE-----
-MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwS
-R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0Eg
-TGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAw
-MFoXDTI4MTIzMTIzNTk1OVowezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hl
-c3RlcjEQMA4GA1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV
-BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQuaBtDFcCLNSS1UY8y2bmhG
-C1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe3M/vg4aijJRPn2jymJBGhCfHdr/jzDUs
-i14HZGWCwEiwqJH5YZ92IFCokcdmtet4YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszW
-Y19zjNoFmag4qMsXeDZRrOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjH
-Ypy+g8cmez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQUoBEK
-Iz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wewYDVR0f
-BHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNl
-cy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29tb2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2Vz
-LmNybDANBgkqhkiG9w0BAQUFAAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm
-7l3sAg9g1o1QGE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz
-Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2G9w84FoVxp7Z
-8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsil2D4kF501KKaU73yqWjgom7C
-12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==
------END CERTIFICATE-----
-
-QuoVadis Root CA 2
-==================
------BEGIN CERTIFICATE-----
-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoT
-EFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMjAeFw0wNjExMjQx
-ODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM
-aW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4IC
-DwAwggIKAoICAQCaGMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6
-XJxgFyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55JWpzmM+Yk
-lvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bBrrcCaoF6qUWD4gXmuVbB
-lDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp+ARz8un+XJiM9XOva7R+zdRcAitMOeGy
-lZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt
-66/3FsvbzSUr5R/7mp/iUcw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1Jdxn
-wQ5hYIizPtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og/zOh
-D7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UHoycR7hYQe7xFSkyy
-BNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuIyV77zGHcizN300QyNQliBJIWENie
-J0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1Ud
-DgQWBBQahGK8SEwzJQTU7tD2A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGU
-a6FJpEcwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT
-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2fBluornFdLwUv
-Z+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzng/iN/Ae42l9NLmeyhP3ZRPx3
-UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2BlfF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodm
-VjB3pjd4M1IQWK4/YY7yarHvGH5KWWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK
-+JDSV6IZUaUtl0HaB0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrW
-IozchLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPRTUIZ3Ph1
-WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWDmbA4CD/pXvk1B+TJYm5X
-f6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0ZohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II
-4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8
-VCLAAVBpQ570su9t+Oza8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u
------END CERTIFICATE-----
-
-QuoVadis Root CA 3
-==================
------BEGIN CERTIFICATE-----
-MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoT
-EFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMzAeFw0wNjExMjQx
-OTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM
-aW1pdGVkMRswGQYDVQQDExJRdW9WYWRpcyBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4IC
-DwAwggIKAoICAQDMV0IWVJzmmNPTTe7+7cefQzlKZbPoFog02w1ZkXTPkrgEQK0CSzGrvI2RaNgg
-DhoB4hp7Thdd4oq3P5kazethq8Jlph+3t723j/z9cI8LoGe+AaJZz3HmDyl2/7FWeUUrH556VOij
-KTVopAFPD6QuN+8bv+OPEKhyq1hX51SGyMnzW9os2l2ObjyjPtr7guXd8lyyBTNvijbO0BNO/79K
-DDRMpsMhvVAEVeuxu537RR5kFd5VAYwCdrXLoT9CabwvvWhDFlaJKjdhkf2mrk7AyxRllDdLkgbv
-BNDInIjbC3uBr7E9KsRlOni27tyAsdLTmZw67mtaa7ONt9XOnMK+pUsvFrGeaDsGb659n/je7Mwp
-p5ijJUMv7/FfJuGITfhebtfZFG4ZM2mnO4SJk8RTVROhUXhA+LjJou57ulJCg54U7QVSWllWp5f8
-nT8KKdjcT5EOE7zelaTfi5m+rJsziO+1ga8bxiJTyPbH7pcUsMV8eFLI8M5ud2CEpukqdiDtWAEX
-MJPpGovgc2PZapKUSU60rUqFxKMiMPwJ7Wgic6aIDFUhWMXhOp8q3crhkODZc6tsgLjoC2SToJyM
-Gf+z0gzskSaHirOi4XCPLArlzW1oUevaPwV/izLmE1xr/l9A4iLItLRkT9a6fUg+qGkM17uGcclz
-uD87nSVL2v9A6wIDAQABo4IBlTCCAZEwDwYDVR0TAQH/BAUwAwEB/zCB4QYDVR0gBIHZMIHWMIHT
-BgkrBgEEAb5YAAMwgcUwgZMGCCsGAQUFBwICMIGGGoGDQW55IHVzZSBvZiB0aGlzIENlcnRpZmlj
-YXRlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFF1b1ZhZGlzIFJvb3QgQ0EgMyBDZXJ0
-aWZpY2F0ZSBQb2xpY3kgLyBDZXJ0aWZpY2F0aW9uIFByYWN0aWNlIFN0YXRlbWVudC4wLQYIKwYB
-BQUHAgEWIWh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL2NwczALBgNVHQ8EBAMCAQYwHQYD
-VR0OBBYEFPLAE+CCQz777i9nMpY1XNu4ywLQMG4GA1UdIwRnMGWAFPLAE+CCQz777i9nMpY1XNu4
-ywLQoUmkRzBFMQswCQYDVQQGEwJCTTEZMBcGA1UEChMQUXVvVmFkaXMgTGltaXRlZDEbMBkGA1UE
-AxMSUXVvVmFkaXMgUm9vdCBDQSAzggIFxjANBgkqhkiG9w0BAQUFAAOCAgEAT62gLEz6wPJv92ZV
-qyM07ucp2sNbtrCD2dDQ4iH782CnO11gUyeim/YIIirnv6By5ZwkajGxkHon24QRiSemd1o417+s
-hvzuXYO8BsbRd2sPbSQvS3pspweWyuOEn62Iix2rFo1bZhfZFvSLgNLd+LJ2w/w4E6oM3kJpK27z
-POuAJ9v1pkQNn1pVWQvVDVJIxa6f8i+AxeoyUDUSly7B4f/xI4hROJ/yZlZ25w9Rl6VSDE1JUZU2
-Pb+iSwwQHYaZTKrzchGT5Or2m9qoXadNt54CrnMAyNojA+j56hl0YgCUyyIgvpSnWbWCar6ZeXqp
-8kokUvd0/bpO5qgdAm6xDYBEwa7TIzdfu4V8K5Iu6H6li92Z4b8nby1dqnuH/grdS/yO9SbkbnBC
-bjPsMZ57k8HkyWkaPcBrTiJt7qtYTcbQQcEr6k8Sh17rRdhs9ZgC06DYVYoGmRmioHfRMJ6szHXu
-g/WwYjnPbFfiTNKRCw51KBuav/0aQ/HKd/s7j2G4aSgWQgRecCocIdiP4b0jWy10QJLZYxkNc91p
-vGJHvOB0K7Lrfb5BG7XARsWhIstfTsEokt4YutUqKLsRixeTmJlglFwjz1onl14LBQaTNx47aTbr
-qZ5hHY8y2o4M1nQ+ewkk2gF3R8Q7zTSMmfXK4SVhM7JZG+Ju1zdXtg2pEto=
------END CERTIFICATE-----
-
-XRamp Global CA Root
-====================
------BEGIN CERTIFICATE-----
-MIIEMDCCAxigAwIBAgIQUJRs7Bjq1ZxN1ZfvdY+grTANBgkqhkiG9w0BAQUFADCBgjELMAkGA1UE
-BhMCVVMxHjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2Vj
-dXJpdHkgU2VydmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBB
-dXRob3JpdHkwHhcNMDQxMTAxMTcxNDA0WhcNMzUwMTAxMDUzNzE5WjCBgjELMAkGA1UEBhMCVVMx
-HjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2VjdXJpdHkg
-U2VydmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
-dHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJB69FbS638eMpSe2OAtp87ZOqCwu
-IR1cRN8hXX4jdP5efrRKt6atH67gBhbim1vZZ3RrXYCPKZ2GG9mcDZhtdhAoWORlsH9KmHmf4MMx
-foArtYzAQDsRhtDLooY2YKTVMIJt2W7QDxIEM5dfT2Fa8OT5kavnHTu86M/0ay00fOJIYRyO82FE
-zG+gSqmUsE3a56k0enI4qEHMPJQRfevIpoy3hsvKMzvZPTeL+3o+hiznc9cKV6xkmxnr9A8ECIqs
-AxcZZPRaJSKNNCyy9mgdEm3Tih4U2sSPpuIjhdV6Db1q4Ons7Be7QhtnqiXtRYMh/MHJfNViPvry
-xS3T/dRlAgMBAAGjgZ8wgZwwEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1Ud
-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFMZPoj0GY4QJnM5i5ASsjVy16bYbMDYGA1UdHwQvMC0wK6Ap
-oCeGJWh0dHA6Ly9jcmwueHJhbXBzZWN1cml0eS5jb20vWEdDQS5jcmwwEAYJKwYBBAGCNxUBBAMC
-AQEwDQYJKoZIhvcNAQEFBQADggEBAJEVOQMBG2f7Shz5CmBbodpNl2L5JFMn14JkTpAuw0kbK5rc
-/Kh4ZzXxHfARvbdI4xD2Dd8/0sm2qlWkSLoC295ZLhVbO50WfUfXN+pfTXYSNrsf16GBBEYgoyxt
-qZ4Bfj8pzgCT3/3JknOJiWSe5yvkHJEs0rnOfc5vMZnT5r7SHpDwCRR5XCOrTdLaIR9NmXmd4c8n
-nxCbHIgNsIpkQTG4DmyQJKSbXHGPurt+HBvbaoAPIbzp26a3QPSyi6mx5O+aGtA9aZnuqCij4Tyz
-8LIRnM98QObd50N9otg6tamN8jSZxNQQ4Qb9CYQQO+7ETPTsJ3xCwnR8gooJybQDJbw=
------END CERTIFICATE-----
-
-Go Daddy Class 2 CA
-===================
------BEGIN CERTIFICATE-----
-MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMY
-VGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRp
-ZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkG
-A1UEBhMCVVMxITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28g
-RGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQAD
-ggENADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCAPVYYYwhv
-2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6wwdhFJ2+qN1j3hybX2C32
-qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXiEqITLdiOr18SPaAIBQi2XKVlOARFmR6j
-YGB0xUGlcmIbYsUfb18aQr4CUWWoriMYavx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmY
-vLEHZ6IVDd2gWMZEewo+YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0O
-BBYEFNLEsNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h/t2o
-atTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMu
-MTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwG
-A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wim
-PQoZ+YeAEW5p5JYXMP80kWNyOO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKt
-I3lpjbi2Tc7PTMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
-HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mERdEr/VxqHD3VI
-Ls9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5CufReYNnyicsbkqWletNw+vHX/b
-vZ8=
------END CERTIFICATE-----
-
-Starfield Class 2 CA
-====================
------BEGIN CERTIFICATE-----
-MIIEDzCCAvegAwIBAgIBADANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJVUzElMCMGA1UEChMc
-U3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMpU3RhcmZpZWxkIENsYXNzIDIg
-Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwNjI5MTczOTE2WhcNMzQwNjI5MTczOTE2WjBo
-MQswCQYDVQQGEwJVUzElMCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAG
-A1UECxMpU3RhcmZpZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEgMA0GCSqG
-SIb3DQEBAQUAA4IBDQAwggEIAoIBAQC3Msj+6XGmBIWtDBFk385N78gDGIc/oav7PKaf8MOh2tTY
-bitTkPskpD6E8J7oX+zlJ0T1KKY/e97gKvDIr1MvnsoFAZMej2YcOadN+lq2cwQlZut3f+dZxkqZ
-JRRU6ybH838Z1TBwj6+wRir/resp7defqgSHo9T5iaU0X9tDkYI22WY8sbi5gv2cOj4QyDvvBmVm
-epsZGD3/cVE8MC5fvj13c7JdBmzDI1aaK4UmkhynArPkPw2vCHmCuDY96pzTNbO8acr1zJ3o/WSN
-F4Azbl5KXZnJHoe0nRrA1W4TNSNe35tfPe/W93bC6j67eA0cQmdrBNj41tpvi/JEoAGrAgEDo4HF
-MIHCMB0GA1UdDgQWBBS/X7fRzt0fhvRbVazc1xDCDqmI5zCBkgYDVR0jBIGKMIGHgBS/X7fRzt0f
-hvRbVazc1xDCDqmI56FspGowaDELMAkGA1UEBhMCVVMxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNo
-bm9sb2dpZXMsIEluYy4xMjAwBgNVBAsTKVN0YXJmaWVsZCBDbGFzcyAyIENlcnRpZmljYXRpb24g
-QXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAAWdP4id0ckaVaGs
-afPzWdqbAYcaT1epoXkJKtv3L7IezMdeatiDh6GX70k1PncGQVhiv45YuApnP+yz3SFmH8lU+nLM
-PUxA2IGvd56Deruix/U0F47ZEUD0/CwqTRV/p2JdLiXTAAsgGh1o+Re49L2L7ShZ3U0WixeDyLJl
-xy16paq8U4Zt3VekyvggQQto8PT7dL5WXXp59fkdheMtlb71cZBDzI0fmgAKhynpVSJYACPq4xJD
-KVtHCN2MQWplBqjlIapBtJUhlbl90TSrE9atvNziPTnNvT51cKEYWQPJIrSPnNVeKtelttQKbfi3
-QBFGmh95DmK/D5fs4C8fF5Q=
------END CERTIFICATE-----
-
-DigiCert Assured ID Root CA
-===========================
------BEGIN CERTIFICATE-----
-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBlMQswCQYDVQQG
-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw
-IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzEx
-MTEwMDAwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL
-ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0Ew
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7cJpSIqvTO
-9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYPmDI2dsze3Tyoou9q+yHy
-UmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW
-/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpy
-oeb6pNnVFzF1roV9Iq4/AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whf
-GHdPAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRF
-66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzANBgkq
-hkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRCdWKuh+vy1dneVrOfzM4UKLkNl2Bc
-EkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTffwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38Fn
-SbNd67IJKusm7Xi+fT8r87cmNW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i
-8b5QZ7dsvfPxH2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe
-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g==
------END CERTIFICATE-----
-
-DigiCert Global Root CA
-=======================
------BEGIN CERTIFICATE-----
-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQG
-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAw
-HgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAw
-MDAwMDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3
-dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkq
-hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsBCSDMAZOn
-TjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97nh6Vfe63SKMI2tavegw5
-BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt43C/dxC//AH2hdmoRBBYMql1GNXRor5H
-4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7PT19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y
-7vrTC0LUq7dBMtoM1O/4gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQAB
-o2MwYTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbRTLtm
-8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQEF
-BQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/EsrhMAtudXH/vTBH1jLuG2cenTnmCmr
-EbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIt
-tep3Sp+dWOIrWcBAI+0tKIJFPnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886
-UAb3LujEV0lsYSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
------END CERTIFICATE-----
-
-DigiCert High Assurance EV Root CA
-==================================
------BEGIN CERTIFICATE-----
-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQG
-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSsw
-KQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAw
-MFoXDTMxMTExMDAwMDAwMFowbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZ
-MBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFu
-Y2UgRVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm+9S75S0t
-Mqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTWPNt0OKRKzE0lgvdKpVMS
-OO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEMxChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3
-MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFBIk5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQ
-NAQTXKFx01p8VdteZOE3hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUe
-h10aUAsgEsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMB
-Af8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaAFLE+w2kD+L9HAdSY
-JhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3NecnzyIZgYIVyHbIUf4KmeqvxgydkAQ
-V8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6zeM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFp
-myPInngiK3BD41VHMWEZ71jFhS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkK
-mNEVX58Svnw2Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe
-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep+OkuE6N36B9K
------END CERTIFICATE-----
-
-SwissSign Gold CA - G2
-======================
------BEGIN CERTIFICATE-----
-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkNIMRUw
-EwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2lnbiBHb2xkIENBIC0gRzIwHhcN
-MDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBFMQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dp
-c3NTaWduIEFHMR8wHQYDVQQDExZTd2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0B
-AQEFAAOCAg8AMIICCgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUq
-t2/876LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+bbqBHH5C
-jCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c6bM8K8vzARO/Ws/BtQpg
-vd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqEemA8atufK+ze3gE/bk3lUIbLtK/tREDF
-ylqM2tIrfKjuvqblCqoOpd8FUrdVxyJdMmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvR
-AiTysybUa9oEVeXBCsdtMDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuend
-jIj3o02yMszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69yFGkO
-peUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPiaG59je883WX0XaxR
-7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxMgI93e2CaHt+28kgeDrpOVG2Y4OGi
-GqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUw
-AwEB/zAdBgNVHQ4EFgQUWyV7lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64
-OfPAeGZe6Drn8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov
-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe645R88a7A3hfm
-5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczOUYrHUDFu4Up+GC9pWbY9ZIEr
-44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOf
-Mke6UiI0HTJ6CVanfCU2qT1L2sCCbwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6m
-Gu6uLftIdxf+u+yvGPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxp
-mo/a77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCChdiDyyJk
-vC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid392qgQmwLOM7XdVAyksLf
-KzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEppLd6leNcG2mqeSz53OiATIgHQv2ieY2Br
-NU0LbbqhPcCT4H8js1WtciVORvnSFu+wZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6Lqj
-viOvrv1vA+ACOzB2+httQc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ
------END CERTIFICATE-----
-
-SecureTrust CA
-==============
------BEGIN CERTIFICATE-----
-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBIMQswCQYDVQQG
-EwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xFzAVBgNVBAMTDlNlY3VyZVRy
-dXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIzMTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAe
-BgNVBAoTF1NlY3VyZVRydXN0IENvcnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQX
-OZEzZum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO0gMdA+9t
-DWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIaowW8xQmxSPmjL8xk037uH
-GFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b
-01k/unK8RCSc43Oz969XL0Imnal0ugBS8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmH
-ursCAwEAAaOBnTCBmjATBgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/
-BAUwAwEB/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCegJYYj
-aHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGCNxUBBAMCAQAwDQYJ
-KoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt36Z3q059c4EVlew3KW+JwULKUBRSu
-SceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHf
-mbx8IVQr5Fiiu1cprp6poxkmD5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZ
-nMUFdAvnZyPSCPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR
-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE=
------END CERTIFICATE-----
-
-Secure Global CA
-================
------BEGIN CERTIFICATE-----
-MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBKMQswCQYDVQQG
-EwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBH
-bG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkxMjMxMTk1MjA2WjBKMQswCQYDVQQGEwJVUzEg
-MB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwg
-Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNS7YrGxVaQZx5RNoJLNP2MwhR/jx
-YDiJiQPpvepeRlMJ3Fz1Wuj3RSoC6zFh1ykzTM7HfAo3fg+6MpjhHZevj8fcyTiW89sa/FHtaMbQ
-bqR8JNGuQsiWUGMu4P51/pinX0kuleM5M2SOHqRfkNJnPLLZ/kG5VacJjnIFHovdRIWCQtBJwB1g
-8NEXLJXr9qXBkqPFwqcIYA1gBBCWeZ4WNOaptvolRTnIHmX5k/Wq8VLcmZg9pYYaDDUz+kulBAYV
-HDGA76oYa8J719rO+TMg1fW9ajMtgQT7sFzUnKPiXB3jqUJ1XnvUd+85VLrJChgbEplJL4hL/VBi
-0XPnj3pDAgMBAAGjgZ0wgZowEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1Ud
-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFK9EBMJBfkiD2045AuzshHrmzsmkMDQGA1UdHwQtMCswKaAn
-oCWGI2h0dHA6Ly9jcmwuc2VjdXJldHJ1c3QuY29tL1NHQ0EuY3JsMBAGCSsGAQQBgjcVAQQDAgEA
-MA0GCSqGSIb3DQEBBQUAA4IBAQBjGghAfaReUw132HquHw0LURYD7xh8yOOvaliTFGCRsoTciE6+
-OYo68+aCiV0BN7OrJKQVDpI1WkpEXk5X+nXOH0jOZvQ8QCaSmGwb7iRGDBezUqXbpZGRzzfTb+cn
-CDpOGR86p1hcF895P4vkp9MmI50mD1hp/Ed+stCNi5O/KU9DaXR2Z0vPB4zmAve14bRDtUstFJ/5
-3CYNv6ZHdAbYiNE6KTCEztI5gGIbqMdXSbxqVVFnFUq+NQfk1XWYN3kwFNspnWzFacxHVaIw98xc
-f8LDmBxrThaA63p4ZUWiABqvDA1VZDRIuJK58bRQKfJPIx/abKwfROHdI3hRW8cW
------END CERTIFICATE-----
-
-COMODO Certification Authority
-==============================
------BEGIN CERTIFICATE-----
-MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCBgTELMAkGA1UE
-BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG
-A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNVBAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1
-dGhvcml0eTAeFw0wNjEyMDEwMDAwMDBaFw0yOTEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEb
-MBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFD
-T01PRE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3UcEbVASY06m/weaKXTuH
-+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI2GqGd0S7WWaXUF601CxwRM/aN5VCaTww
-xHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV
-4EajcNxo2f8ESIl33rXp+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA
-1KGzqSX+DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5OnKVI
-rLsm9wIDAQABo4GOMIGLMB0GA1UdDgQWBBQLWOWLxkwVN6RAqTCpIb5HNlpW/zAOBgNVHQ8BAf8E
-BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmNvbW9k
-b2NhLmNvbS9DT01PRE9DZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDANBgkqhkiG9w0BAQUFAAOC
-AQEAPpiem/Yb6dc5t3iuHXIYSdOH5EOC6z/JqvWote9VfCFSZfnVDeFs9D6Mk3ORLgLETgdxb8CP
-OGEIqB6BCsAvIC9Bi5HcSEW88cbeunZrM8gALTFGTO3nnc+IlP8zwFboJIYmuNg4ON8qa90SzMc/
-RxdMosIGlgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmc
-IGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5ddBA6+C4OmF4O5MBKgxTMVBbkN
-+8cFduPYSo38NBejxiEovjBFMR7HeL5YYTisO+IBZQ==
------END CERTIFICATE-----
-
-COMODO ECC Certification Authority
-==================================
------BEGIN CERTIFICATE-----
-MIICiTCCAg+gAwIBAgIQH0evqmIAcFBUTAGem2OZKjAKBggqhkjOPQQDAzCBhTELMAkGA1UEBhMC
-R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE
-ChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBB
-dXRob3JpdHkwHhcNMDgwMzA2MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMCR0Ix
-GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
-Q09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRo
-b3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQDR3svdcmCFYX7deSRFtSrYpn1PlILBs5BAH+X
-4QokPB0BBO490o0JlwzgdeT6+3eKKvUDYEs2ixYjFq0JcfRK9ChQtP6IHG4/bC8vCVlbpVsLM5ni
-wz2J+Wos77LTBumjQjBAMB0GA1UdDgQWBBR1cacZSBm8nZ3qQUfflMRId5nTeTAOBgNVHQ8BAf8E
-BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjEA7wNbeqy3eApyt4jf/7VG
-FAkK+qDmfQjGGoe9GKhzvSbKYAydzpmfz1wPMOG+FDHqAjAU9JM8SaczepBGR7NjfRObTrdvGDeA
-U/7dIOA1mjbRxwG55tzd8/8dLDoWV9mSOdY=
------END CERTIFICATE-----
-
-Certigna
-========
------BEGIN CERTIFICATE-----
-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNVBAYTAkZSMRIw
-EAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4XDTA3MDYyOTE1MTMwNVoXDTI3
-MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwI
-Q2VydGlnbmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7q
-XOEm7RFHYeGifBZ4QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyH
-GxnygQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbwzBfsV1/p
-ogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q130yGLMLLGq/jj8UEYkg
-DncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKf
-Irjxwo1p3Po6WAbfAgMBAAGjgbwwgbkwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQ
-tCRZvgHyUtVF9lo53BEwZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJ
-BgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzjAQ/J
-SP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQUFAAOCAQEA
-hQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8hbV6lUmPOEvjvKtpv6zf+EwLHyzs+
-ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFncfca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1klu
-PBS1xp81HlDQwY9qcEQCYsuuHWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY
-1gkIl2PlwS6wt0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw
-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg==
------END CERTIFICATE-----
-
-ePKI Root Certification Authority
-=================================
------BEGIN CERTIFICATE-----
-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQG
-EwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0ZC4xKjAoBgNVBAsMIWVQS0kg
-Um9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMx
-MjdaMF4xCzAJBgNVBAYTAlRXMSMwIQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEq
-MCgGA1UECwwhZVBLSSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0B
-AQEFAAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAHSyZbCUNs
-IZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAhijHyl3SJCRImHJ7K2RKi
-lTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3XDZoTM1PRYfl61dd4s5oz9wCGzh1NlDiv
-qOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX
-12ruOzjjK9SXDrkb5wdJfzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0O
-WQqraffAsgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uUWH1+
-ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLSnT0IFaUQAS2zMnao
-lQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pHdmX2Os+PYhcZewoozRrSgx4hxyy/
-vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJipNiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXi
-Zo1jDiVN1Rmy5nk3pyKdVDECAwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/Qkqi
-MAwGA1UdEwQFMAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH
-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGBuvl2ICO1J2B0
-1GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6YlPwZpVnPDimZI+ymBV3QGypzq
-KOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkPJXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdV
-xrsStZf0X4OFunHB2WyBEXYKCrC/gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEP
-NXubrjlpC2JgQCA2j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+r
-GNm65ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUBo2M3IUxE
-xJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS/jQ6fbjpKdx2qcgw+BRx
-gMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2zGp1iro2C6pSe3VkQw63d4k3jMdXH7Ojy
-sP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTEW9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmOD
-BCEIZ43ygknQW/2xzQ+DhNQ+IIX3Sj0rnP0qCglN6oH4EZw=
------END CERTIFICATE-----
-
-certSIGN ROOT CA
-================
------BEGIN CERTIFICATE-----
-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYTAlJPMREwDwYD
-VQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTAeFw0wNjA3MDQxNzIwMDRa
-Fw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UE
-CxMQY2VydFNJR04gUk9PVCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7I
-JUqOtdu0KBuqV5Do0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHH
-rfAQUySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5dRdY4zTW2
-ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQOA7+j0xbm0bqQfWwCHTD
-0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwvJoIQ4uNllAoEwF73XVv4EOLQunpL+943
-AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B
-Af8EBAMCAcYwHQYDVR0OBBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IB
-AQA+0hyJLjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecYMnQ8
-SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ44gx+FkagQnIl6Z0
-x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6IJd1hJyMctTEHBDa0GpC9oHRxUIlt
-vBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNwi/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7Nz
-TogVZ96edhBiIL5VaZVDADlN9u6wWk5JRFRYX0KD
------END CERTIFICATE-----
-
-NetLock Arany (Class Gold) Főtanúsítvány
-========================================
------BEGIN CERTIFICATE-----
-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQGEwJIVTERMA8G
-A1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3MDUGA1UECwwuVGFuw7pzw610
-dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNlcnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBB
-cmFueSAoQ2xhc3MgR29sZCkgRsWRdGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgx
-MjA2MTUwODIxWjCBpzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxO
-ZXRMb2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlmaWNhdGlv
-biBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNzIEdvbGQpIEbFkXRhbsO6
-c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRec75LbRTDofTjl5Bu
-0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrTlF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw
-/HpYzY6b7cNGbIRwXdrzAZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAk
-H3B5r9s5VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRGILdw
-fzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2BJtr+UBdADTHLpl1
-neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAGAQH/AgEEMA4GA1UdDwEB/wQEAwIB
-BjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2MU9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwW
-qZw8UQCgwBEIBaeZ5m8BiFRhbvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTta
-YtOUZcTh5m2C+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC
-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2FuLjbvrW5Kfna
-NwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2XjG4Kvte9nHfRCaexOYNkbQu
-dZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E=
------END CERTIFICATE-----
-
-Microsec e-Szigno Root CA 2009
-==============================
------BEGIN CERTIFICATE-----
-MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYDVQQGEwJIVTER
-MA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jv
-c2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o
-dTAeFw0wOTA2MTYxMTMwMThaFw0yOTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UE
-BwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUt
-U3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvPkd6mJviZpWNwrZuuyjNA
-fW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tccbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG
-0IMZfcChEhyVbUr02MelTTMuhTlAdX4UfIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKA
-pxn1ntxVUwOXewdI/5n7N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm
-1HxdrtbCxkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1+rUC
-AwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTLD8bf
-QkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAbBgNVHREE
-FDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqGSIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0o
-lZMEyL/azXm4Q5DwpL7v8u8hmLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfX
-I/OMn74dseGkddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775
-tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c2Pm2G2JwCz02
-yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5tHMN1Rq41Bab2XD0h7lbwyYIi
-LXpUq3DDfSJlgnCW
------END CERTIFICATE-----
-
-GlobalSign Root CA - R3
-=======================
------BEGIN CERTIFICATE-----
-MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4GA1UECxMXR2xv
-YmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2Jh
-bFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxT
-aWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2ln
-bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWt
-iHL8RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsTgHeMCOFJ
-0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmmKPZpO/bLyCiR5Z2KYVc3
-rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zdQQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjl
-OCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZXriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2
-xmmFghcCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE
-FI/wS3+oLkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZURUm7
-lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMpjjM5RcOO5LlXbKr8
-EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK6fBdRoyV3XpYKBovHd7NADdBj+1E
-bddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQXmcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18
-YIvDQVETI53O9zJrlAGomecsMx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7r
-kpeDMdmztcpHWD9f
------END CERTIFICATE-----
-
-Izenpe.com
-==========
------BEGIN CERTIFICATE-----
-MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4MQswCQYDVQQG
-EwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6ZW5wZS5jb20wHhcNMDcxMjEz
-MTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMu
-QS4xEzARBgNVBAMMCkl6ZW5wZS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ
-03rKDx6sp4boFmVqscIbRTJxldn+EFvMr+eleQGPicPK8lVx93e+d5TzcqQsRNiekpsUOqHnJJAK
-ClaOxdgmlOHZSOEtPtoKct2jmRXagaKH9HtuJneJWK3W6wyyQXpzbm3benhB6QiIEn6HLmYRY2xU
-+zydcsC8Lv/Ct90NduM61/e0aL6i9eOBbsFGb12N4E3GVFWJGjMxCrFXuaOKmMPsOzTFlUFpfnXC
-PCDFYbpRR6AgkJOhkEvzTnyFRVSa0QUmQbC1TR0zvsQDyCV8wXDbO/QJLVQnSKwv4cSsPsjLkkxT
-OTcj7NMB+eAJRE1NZMDhDVqHIrytG6P+JrUV86f8hBnp7KGItERphIPzidF0BqnMC9bC3ieFUCbK
-F7jJeodWLBoBHmy+E60QrLUk9TiRodZL2vG70t5HtfG8gfZZa88ZU+mNFctKy6lvROUbQc/hhqfK
-0GqfvEyNBjNaooXlkDWgYlwWTvDjovoDGrQscbNYLN57C9saD+veIR8GdwYDsMnvmfzAuU8Lhij+
-0rnq49qlw0dpEuDb8PYZi+17cNcC1u2HGCgsBCRMd+RIihrGO5rUD8r6ddIBQFqNeb+Lz0vPqhbB
-leStTIo+F5HUsWLlguWABKQDfo2/2n+iD5dPDNMN+9fR5XJ+HMh3/1uaD7euBUbl8agW7EekFwID
-AQABo4H2MIHzMIGwBgNVHREEgagwgaWBD2luZm9AaXplbnBlLmNvbaSBkTCBjjFHMEUGA1UECgw+
-SVpFTlBFIFMuQS4gLSBDSUYgQTAxMzM3MjYwLVJNZXJjLlZpdG9yaWEtR2FzdGVpeiBUMTA1NSBG
-NjIgUzgxQzBBBgNVBAkMOkF2ZGEgZGVsIE1lZGl0ZXJyYW5lbyBFdG9yYmlkZWEgMTQgLSAwMTAx
-MCBWaXRvcmlhLUdhc3RlaXowDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0O
-BBYEFB0cZQ6o8iV7tJHP5LGx5r1VdGwFMA0GCSqGSIb3DQEBCwUAA4ICAQB4pgwWSp9MiDrAyw6l
-Fn2fuUhfGI8NYjb2zRlrrKvV9pF9rnHzP7MOeIWblaQnIUdCSnxIOvVFfLMMjlF4rJUT3sb9fbga
-kEyrkgPH7UIBzg/YsfqikuFgba56awmqxinuaElnMIAkejEWOVt+8Rwu3WwJrfIxwYJOubv5vr8q
-hT/AQKM6WfxZSzwoJNu0FXWuDYi6LnPAvViH5ULy617uHjAimcs30cQhbIHsvm0m5hzkQiCeR7Cs
-g1lwLDXWrzY0tM07+DKo7+N4ifuNRSzanLh+QBxh5z6ikixL8s36mLYp//Pye6kfLqCTVyvehQP5
-aTfLnnhqBbTFMXiJ7HqnheG5ezzevh55hM6fcA5ZwjUukCox2eRFekGkLhObNA5me0mrZJfQRsN5
-nXJQY6aYWwa9SG3YOYNw6DXwBdGqvOPbyALqfP2C2sJbUjWumDqtujWTI6cfSN01RpiyEGjkpTHC
-ClguGYEQyVB1/OpaFs4R1+7vUIgtYf8/QnMFlEPVjjxOAToZpR9GTnfQXeWBIiGH/pR9hNiTrdZo
-Q0iy2+tzJOeRf1SktoA+naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1Z
-WrOZyGlsQyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw==
------END CERTIFICATE-----
-
-Go Daddy Root Certificate Authority - G2
-========================================
------BEGIN CERTIFICATE-----
-MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
-B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMu
-MTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5
-MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6
-b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8G
-A1UEAxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKDE6bFIEMBO4Tx5oVJnyfq
-9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD
-+qK+ihVqf94Lw7YZFAXK6sOoBJQ7RnwyDfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutd
-fMh8+7ArU6SSYmlRJQVhGkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMl
-NAJWJwGRtDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEAAaNC
-MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9
-BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmXWWcDYfF+OwYxdS2hII5PZYe096ac
-vNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r
-5N9ss4UXnT3ZJE95kTXWXwTrgIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYV
-N8Gb5DKj7Tjo2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO
-LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI4uJEvlz36hz1
------END CERTIFICATE-----
-
-Starfield Root Certificate Authority - G2
-=========================================
------BEGIN CERTIFICATE-----
-MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
-B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9s
-b2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVsZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0
-eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAw
-DgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQg
-VGVjaG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZpY2F0ZSBB
-dXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3twQP89o/8ArFv
-W59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMgnLRJdzIpVv257IzdIvpy3Cdhl+72WoTs
-bhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNk
-N3mSwOxGXn/hbVNMYq/NHwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7Nf
-ZTD4p7dNdloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0HZbU
-JtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
-AQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0GCSqGSIb3DQEBCwUAA4IBAQARWfol
-TwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjUsHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx
-4mcujJUDJi5DnUox9g61DLu34jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUw
-F5okxBDgBPfg8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K
-pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1mMpYjn0q7pBZ
-c2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0
------END CERTIFICATE-----
-
-Starfield Services Root Certificate Authority - G2
-==================================================
------BEGIN CERTIFICATE-----
-MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
-B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9s
-b2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVsZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRl
-IEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgZgxCzAJBgNV
-BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxT
-dGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2VydmljZXMg
-Um9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz/Lz58gE20pOsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX/2
-h/klQ4bnaRtSmpDhcePYLQ1Ob/bISdm28xpWriu2dBTrz/sm4xq6HZYuajtYlIlHVv8loJNwU4Pa
-hHQUw2eeBGg6345AWh1KTs9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLP
-LJGmpufehRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk6mFB
-rMnUVN+HL8cisibMn1lUaJ/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaNCMEAwDwYDVR0TAQH/BAUw
-AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJxfAN+qAdcwKziIorhtSpzyEZGDMA0GCSqG
-SIb3DQEBCwUAA4IBAQBLNqaEd2ndOxmfZyMIbw5hyf2E3F/YNoHN2BtBLZ9g3ccaaNnRbobhiCPP
-E95Dz+I0swSdHynVv/heyNXBve6SbzJ08pGCL72CQnqtKrcgfU28elUSwhXqvfdqlS5sdJ/PHLTy
-xQGjhdByPq1zqwubdQxtRbeOlKyWN7Wg0I8VRw7j6IPdj/3vQQF3zCepYoUz8jcI73HPdwbeyBkd
-iEDPfUYd/x7H4c7/I9vG+o1VTqkC50cRRj70/b17KSa7qWFiNyi2LSr2EIZkyXCn0q23KXB56jza
-YyWf/Wi3MOxw+3WKt21gZ7IeyLnp2KhvAotnDU0mV3HaIPzBSlCNsSi6
------END CERTIFICATE-----
-
-AffirmTrust Commercial
-======================
------BEGIN CERTIFICATE-----
-MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCVVMxFDAS
-BgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBDb21tZXJjaWFsMB4XDTEw
-MDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmly
-bVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBDb21tZXJjaWFsMIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEA9htPZwcroRX1BiLLHwGy43NFBkRJLLtJJRTWzsO3qyxPxkEylFf6Eqdb
-DuKPHx6GGaeqtS25Xw2Kwq+FNXkyLbscYjfysVtKPcrNcV/pQr6U6Mje+SJIZMblq8Yrba0F8PrV
-C8+a5fBQpIs7R6UjW3p6+DM/uO+Zl+MgwdYoic+U+7lF7eNAFxHUdPALMeIrJmqbTFeurCA+ukV6
-BfO9m2kVrn1OIGPENXY6BwLJN/3HR+7o8XYdcxXyl6S1yHp52UKqK39c/s4mT6NmgTWvRLpUHhww
-MmWd5jyTXlBOeuM61G7MGvv50jeuJCqrVwMiKA1JdX+3KNp1v47j3A55MQIDAQABo0IwQDAdBgNV
-HQ4EFgQUnZPGU4teyq8/nx4P5ZmVvCT2lI8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
-AQYwDQYJKoZIhvcNAQELBQADggEBAFis9AQOzcAN/wr91LoWXym9e2iZWEnStB03TX8nfUYGXUPG
-hi4+c7ImfU+TqbbEKpqrIZcUsd6M06uJFdhrJNTxFq7YpFzUf1GO7RgBsZNjvbz4YYCanrHOQnDi
-qX0GJX0nof5v7LMeJNrjS1UaADs1tDvZ110w/YETifLCBivtZ8SOyUOyXGsViQK8YvxO8rUzqrJv
-0wqiUOP2O+guRMLbZjipM1ZI8W0bM40NjD9gN53Tym1+NH4Nn3J2ixufcv1SNUFFApYvHLKac0kh
-sUlHRUe072o0EclNmsxZt9YCnlpOZbWUrhvfKbAW8b8Angc6F2S1BLUjIZkKlTuXfO8=
------END CERTIFICATE-----
-
-AffirmTrust Networking
-======================
------BEGIN CERTIFICATE-----
-MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UEBhMCVVMxFDAS
-BgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBOZXR3b3JraW5nMB4XDTEw
-MDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmly
-bVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVzdCBOZXR3b3JraW5nMIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEAtITMMxcua5Rsa2FSoOujz3mUTOWUgJnLVWREZY9nZOIG41w3SfYvm4SE
-Hi3yYJ0wTsyEheIszx6e/jarM3c1RNg1lho9Nuh6DtjVR6FqaYvZ/Ls6rnla1fTWcbuakCNrmreI
-dIcMHl+5ni36q1Mr3Lt2PpNMCAiMHqIjHNRqrSK6mQEubWXLviRmVSRLQESxG9fhwoXA3hA/Pe24
-/PHxI1Pcv2WXb9n5QHGNfb2V1M6+oF4nI979ptAmDgAp6zxG8D1gvz9Q0twmQVGeFDdCBKNwV6gb
-h+0t+nvujArjqWaJGctB+d1ENmHP4ndGyH329JKBNv3bNPFyfvMMFr20FQIDAQABo0IwQDAdBgNV
-HQ4EFgQUBx/S55zawm6iQLSwelAQUHTEyL0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
-AQYwDQYJKoZIhvcNAQEFBQADggEBAIlXshZ6qML91tmbmzTCnLQyFE2npN/svqe++EPbkTfOtDIu
-UFUaNU52Q3Eg75N3ThVwLofDwR1t3Mu1J9QsVtFSUzpE0nPIxBsFZVpikpzuQY0x2+c06lkh1QF6
-12S4ZDnNye2v7UsDSKegmQGA3GWjNq5lWUhPgkvIZfFXHeVZLgo/bNjR9eUJtGxUAArgFU2HdW23
-WJZa3W3SAKD0m0i+wzekujbgfIeFlxoVot4uolu9rxj5kFDNcFn4J2dHy8egBzp90SxdbBk6ZrV9
-/ZFvgrG+CJPbFEfxojfHRZ48x3evZKiT3/Zpg4Jg8klCNO1aAFSFHBY2kgxc+qatv9s=
------END CERTIFICATE-----
-
-AffirmTrust Premium
-===================
------BEGIN CERTIFICATE-----
-MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UEBhMCVVMxFDAS
-BgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVzdCBQcmVtaXVtMB4XDTEwMDEy
-OTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRy
-dXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVzdCBQcmVtaXVtMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
-MIICCgKCAgEAxBLfqV/+Qd3d9Z+K4/as4Tx4mrzY8H96oDMq3I0gW64tb+eT2TZwamjPjlGjhVtn
-BKAQJG9dKILBl1fYSCkTtuG+kU3fhQxTGJoeJKJPj/CihQvL9Cl/0qRY7iZNyaqoe5rZ+jjeRFcV
-5fiMyNlI4g0WJx0eyIOFJbe6qlVBzAMiSy2RjYvmia9mx+n/K+k8rNrSs8PhaJyJ+HoAVt70VZVs
-+7pk3WKL3wt3MutizCaam7uqYoNMtAZ6MMgpv+0GTZe5HMQxK9VfvFMSF5yZVylmd2EhMQcuJUmd
-GPLu8ytxjLW6OQdJd/zvLpKQBY0tL3d770O/Nbua2Plzpyzy0FfuKE4mX4+QaAkvuPjcBukumj5R
-p9EixAqnOEhss/n/fauGV+O61oV4d7pD6kh/9ti+I20ev9E2bFhc8e6kGVQa9QPSdubhjL08s9NI
-S+LI+H+SqHZGnEJlPqQewQcDWkYtuJfzt9WyVSHvutxMAJf7FJUnM7/oQ0dG0giZFmA7mn7S5u04
-6uwBHjxIVkkJx0w3AJ6IDsBz4W9m6XJHMD4Q5QsDyZpCAGzFlH5hxIrff4IaC1nEWTJ3s7xgaVY5
-/bQGeyzWZDbZvUjthB9+pSKPKrhC9IK31FOQeE4tGv2Bb0TXOwF0lkLgAOIua+rF7nKsu7/+6qqo
-+Nz2snmKtmcCAwEAAaNCMEAwHQYDVR0OBBYEFJ3AZ6YMItkm9UWrpmVSESfYRaxjMA8GA1UdEwEB
-/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBDAUAA4ICAQCzV00QYk465KzquByv
-MiPIs0laUZx2KI15qldGF9X1Uva3ROgIRL8YhNILgM3FEv0AVQVhh0HctSSePMTYyPtwni94loMg
-Nt58D2kTiKV1NpgIpsbfrM7jWNa3Pt668+s0QNiigfV4Py/VpfzZotReBA4Xrf5B8OWycvpEgjNC
-6C1Y91aMYj+6QrCcDFx+LmUmXFNPALJ4fqENmS2NuB2OosSw/WDQMKSOyARiqcTtNd56l+0OOF6S
-L5Nwpamcb6d9Ex1+xghIsV5n61EIJenmJWtSKZGc0jlzCFfemQa0W50QBuHCAKi4HEoCChTQwUHK
-+4w1IX2COPKpVJEZNZOUbWo6xbLQu4mGk+ibyQ86p3q4ofB4Rvr8Ny/lioTz3/4E2aFooC8k4gmV
-BtWVyuEklut89pMFu+1z6S3RdTnX5yTb2E5fQ4+e0BQ5v1VwSJlXMbSc7kqYA5YwH2AG7hsj/oFg
-IxpHYoWlzBk0gG+zrBrjn/B7SK3VAdlntqlyk+otZrWyuOQ9PLLvTIzq6we/qzWaVYa8GKa1qF60
-g2xraUDTn9zxw2lrueFtCfTxqlB2Cnp9ehehVZZCmTEJ3WARjQUwfuaORtGdFNrHF+QFlozEJLUb
-zxQHskD4o55BhrwE0GuWyCqANP2/7waj3VjFhT0+j/6eKeC2uAloGRwYQw==
------END CERTIFICATE-----
-
-AffirmTrust Premium ECC
-=======================
------BEGIN CERTIFICATE-----
-MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMCVVMxFDASBgNV
-BAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQcmVtaXVtIEVDQzAeFw0xMDAx
-MjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1U
-cnVzdDEgMB4GA1UEAwwXQWZmaXJtVHJ1c3QgUHJlbWl1bSBFQ0MwdjAQBgcqhkjOPQIBBgUrgQQA
-IgNiAAQNMF4bFZ0D0KF5Nbc6PJJ6yhUczWLznCZcBz3lVPqj1swS6vQUX+iOGasvLkjmrBhDeKzQ
-N8O9ss0s5kfiGuZjuD0uL3jET9v0D6RoTFVya5UdThhClXjMNzyR4ptlKymjQjBAMB0GA1UdDgQW
-BBSaryl6wBE1NSZRMADDav5A1a7WPDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAK
-BggqhkjOPQQDAwNnADBkAjAXCfOHiFBar8jAQr9HX/VsaobgxCd05DhT1wV/GzTjxi+zygk8N53X
-57hG8f2h4nECMEJZh0PUUd+60wkyWs6Iflc9nF9Ca/UHLbXwgpP5WW+uZPpY5Yse42O+tYHNbwKM
-eQ==
------END CERTIFICATE-----
-
-Certum Trusted Network CA
-=========================
------BEGIN CERTIFICATE-----
-MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBMMSIwIAYDVQQK
-ExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlv
-biBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBUcnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIy
-MTIwNzM3WhcNMjkxMjMxMTIwNzM3WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBU
-ZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
-MSIwIAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC
-AQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rHUV+rpDKmYYe2bg+G0jAC
-l/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LMTXPb865Px1bVWqeWifrzq2jUI4ZZJ88J
-J7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVUBBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4
-fOQtf/WsX+sWn7Et0brMkUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0
-cvW0QM8xAcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNVHRMB
-Af8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNVHQ8BAf8EBAMCAQYw
-DQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15ysHhE49wcrwn9I0j6vSrEuVUEtRCj
-jSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfLI9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1
-mS1FhIrlQgnXdAIv94nYmem8J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5aj
-Zt3hrvJBW8qYVoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI
-03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw=
------END CERTIFICATE-----
-
-TWCA Root Certification Authority
-=================================
------BEGIN CERTIFICATE-----
-MIIDezCCAmOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJUVzESMBAGA1UECgwJ
-VEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NBIFJvb3QgQ2VydGlmaWNh
-dGlvbiBBdXRob3JpdHkwHhcNMDgwODI4MDcyNDMzWhcNMzAxMjMxMTU1OTU5WjBfMQswCQYDVQQG
-EwJUVzESMBAGA1UECgwJVEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NB
-IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQCwfnK4pAOU5qfeCTiRShFAh6d8WWQUe7UREN3+v9XAu1bihSX0NXIP+FPQQeFEAcK0HMMx
-QhZHhTMidrIKbw/lJVBPhYa+v5guEGcevhEFhgWQxFnQfHgQsIBct+HHK3XLfJ+utdGdIzdjp9xC
-oi2SBBtQwXu4PhvJVgSLL1KbralW6cH/ralYhzC2gfeXRfwZVzsrb+RH9JlF/h3x+JejiB03HFyP
-4HYlmlD4oFT/RJB2I9IyxsOrBr/8+7/zrX2SYgJbKdM1o5OaQ2RgXbL6Mv87BK9NQGr5x+PvI/1r
-y+UPizgN7gr8/g+YnzAx3WxSZfmLgb4i4RxYA7qRG4kHAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIB
-BjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqOFsmjd6LWvJPelSDGRjjCDWmujANBgkqhkiG
-9w0BAQUFAAOCAQEAPNV3PdrfibqHDAhUaiBQkr6wQT25JmSDCi/oQMCXKCeCMErJk/9q56YAf4lC
-mtYR5VPOL8zy2gXE/uJQxDqGfczafhAJO5I1KlOy/usrBdlsXebQ79NqZp4VKIV66IIArB6nCWlW
-QtNoURi+VJq/REG6Sb4gumlc7rh3zc5sH62Dlhh9DrUUOYTxKOkto557HnpyWoOzeW/vtPzQCqVY
-T0bf+215WfKEIlKuD8z7fDvnaspHYcN6+NOSBB+4IIThNlQWx0DeO4pz3N/GCUzf7Nr/1FNCocny
-Yh0igzyXxfkZYiesZSLX0zzG5Y6yU8xJzrww/nsOM5D77dIUkR8Hrw==
------END CERTIFICATE-----
-
-Security Communication RootCA2
-==============================
------BEGIN CERTIFICATE-----
-MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDElMCMGA1UEChMc
-U0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMeU2VjdXJpdHkgQ29tbXVuaWNh
-dGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoXDTI5MDUyOTA1MDAzOVowXTELMAkGA1UEBhMC
-SlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xJzAlBgNVBAsTHlNlY3Vy
-aXR5IENvbW11bmljYXRpb24gUm9vdENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
-ANAVOVKxUrO6xVmCxF1SrjpDZYBLx/KWvNs2l9amZIyoXvDjChz335c9S672XewhtUGrzbl+dp++
-+T42NKA7wfYxEUV0kz1XgMX5iZnK5atq1LXaQZAQwdbWQonCv/Q4EpVMVAX3NuRFg3sUZdbcDE3R
-3n4MqzvEFb46VqZab3ZpUql6ucjrappdUtAtCms1FgkQhNBqyjoGADdH5H5XTz+L62e4iKrFvlNV
-spHEfbmwhRkGeC7bYRr6hfVKkaHnFtWOojnflLhwHyg/i/xAXmODPIMqGplrz95Zajv8bxbXH/1K
-EOtOghY6rCcMU/Gt1SSwawNQwS08Ft1ENCcadfsCAwEAAaNCMEAwHQYDVR0OBBYEFAqFqXdlBZh8
-QIH4D5csOPEK7DzPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEB
-CwUAA4IBAQBMOqNErLlFsceTfsgLCkLfZOoc7llsCLqJX2rKSpWeeo8HxdpFcoJxDjrSzG+ntKEj
-u/Ykn8sX/oymzsLS28yN/HH8AynBbF0zX2S2ZTuJbxh2ePXcokgfGT+Ok+vx+hfuzU7jBBJV1uXk
-3fs+BXziHV7Gp7yXT2g69ekuCkO2r1dcYmh8t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6q
-tnRGEmyR7jTV7JqR50S+kDFy1UkC9gLl9B/rfNmWVan/7Ir5mUf/NVoCqgTLiluHcSmRvaS0eg29
-mvVXIwAHIRc/SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03
------END CERTIFICATE-----
-
-Actalis Authentication Root CA
-==============================
------BEGIN CERTIFICATE-----
-MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCSVQxDjAM
-BgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UE
-AwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290IENBMB4XDTExMDkyMjExMjIwMloXDTMwMDky
-MjExMjIwMlowazELMAkGA1UEBhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlz
-IFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290
-IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp8bEpSmkLO/lGMWwUKNvUTufClrJ
-wkg4CsIcoBh/kbWHuUA/3R1oHwiD1S0eiKD4j1aPbZkCkpAW1V8IbInX4ay8IMKx4INRimlNAJZa
-by/ARH6jDuSRzVju3PvHHkVH3Se5CAGfpiEd9UEtL0z9KK3giq0itFZljoZUj5NDKd45RnijMCO6
-zfB9E1fAXdKDa0hMxKufgFpbOr3JpyI/gCczWw63igxdBzcIy2zSekciRDXFzMwujt0q7bd9Zg1f
-YVEiVRvjRuPjPdA1YprbrxTIW6HMiRvhMCb8oJsfgadHHwTrozmSBp+Z07/T6k9QnBn+locePGX2
-oxgkg4YQ51Q+qDp2JE+BIcXjDwL4k5RHILv+1A7TaLndxHqEguNTVHnd25zS8gebLra8Pu2Fbe8l
-EfKXGkJh90qX6IuxEAf6ZYGyojnP9zz/GPvG8VqLWeICrHuS0E4UT1lF9gxeKF+w6D9Fz8+vm2/7
-hNN3WpVvrJSEnu68wEqPSpP4RCHiMUVhUE4Q2OM1fEwZtN4Fv6MGn8i1zeQf1xcGDXqVdFUNaBr8
-EBtiZJ1t4JWgw5QHVw0U5r0F+7if5t+L4sbnfpb2U8WANFAoWPASUHEXMLrmeGO89LKtmyuy/uE5
-jF66CyCU3nuDuP/jVo23Eek7jPKxwV2dpAtMK9myGPW1n0sCAwEAAaNjMGEwHQYDVR0OBBYEFFLY
-iDrIn3hm7YnzezhwlMkCAjbQMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUUtiIOsifeGbt
-ifN7OHCUyQICNtAwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQALe3KHwGCmSUyI
-WOYdiPcUZEim2FgKDk8TNd81HdTtBjHIgT5q1d07GjLukD0R0i70jsNjLiNmsGe+b7bAEzlgqqI0
-JZN1Ut6nna0Oh4lScWoWPBkdg/iaKWW+9D+a2fDzWochcYBNy+A4mz+7+uAwTc+G02UQGRjRlwKx
-K3JCaKygvU5a2hi/a5iB0P2avl4VSM0RFbnAKVy06Ij3Pjaut2L9HmLecHgQHEhb2rykOLpn7VU+
-Xlff1ANATIGk0k9jpwlCCRT8AKnCgHNPLsBA2RF7SOp6AsDT6ygBJlh0wcBzIm2Tlf05fbsq4/aC
-4yyXX04fkZT6/iyj2HYauE2yOE+b+h1IYHkm4vP9qdCa6HCPSXrW5b0KDtst842/6+OkfcvHlXHo
-2qN8xcL4dJIEG4aspCJTQLas/kx2z/uUMsA1n3Y/buWQbqCmJqK4LL7RK4X9p2jIugErsWx0Hbhz
-lefut8cl8ABMALJ+tguLHPPAUJ4lueAI3jZm/zel0btUZCzJJ7VLkn5l/9Mt4blOvH+kQSGQQXem
-OR/qnuOf0GZvBeyqdn6/axag67XH/JJULysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9
-vwGYT7JZVEc+NHt4bVaTLnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg==
------END CERTIFICATE-----
-
-Buypass Class 2 Root CA
-=======================
------BEGIN CERTIFICATE-----
-MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU
-QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMiBSb290IENBMB4X
-DTEwMTAyNjA4MzgwM1oXDTQwMTAyNjA4MzgwM1owTjELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1
-eXBhc3MgQVMtOTgzMTYzMzI3MSAwHgYDVQQDDBdCdXlwYXNzIENsYXNzIDIgUm9vdCBDQTCCAiIw
-DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANfHXvfBB9R3+0Mh9PT1aeTuMgHbo4Yf5FkNuud1
-g1Lr6hxhFUi7HQfKjK6w3Jad6sNgkoaCKHOcVgb/S2TwDCo3SbXlzwx87vFKu3MwZfPVL4O2fuPn
-9Z6rYPnT8Z2SdIrkHJasW4DptfQxh6NR/Md+oW+OU3fUl8FVM5I+GC911K2GScuVr1QGbNgGE41b
-/+EmGVnAJLqBcXmQRFBoJJRfuLMR8SlBYaNByyM21cHxMlAQTn/0hpPshNOOvEu/XAFOBz3cFIqU
-CqTqc/sLUegTBxj6DvEr0VQVfTzh97QZQmdiXnfgolXsttlpF9U6r0TtSsWe5HonfOV116rLJeff
-awrbD02TTqigzXsu8lkBarcNuAeBfos4GzjmCleZPe4h6KP1DBbdi+w0jpwqHAAVF41og9JwnxgI
-zRFo1clrUs3ERo/ctfPYV3Me6ZQ5BL/T3jjetFPsaRyifsSP5BtwrfKi+fv3FmRmaZ9JUaLiFRhn
-Bkp/1Wy1TbMz4GHrXb7pmA8y1x1LPC5aAVKRCfLf6o3YBkBjqhHk/sM3nhRSP/TizPJhk9H9Z2vX
-Uq6/aKtAQ6BXNVN48FP4YUIHZMbXb5tMOA1jrGKvNouicwoN9SG9dKpN6nIDSdvHXx1iY8f93ZHs
-M+71bbRuMGjeyNYmsHVee7QHIJihdjK4TWxPAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD
-VR0OBBYEFMmAd+BikoL1RpzzuvdMw964o605MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsF
-AAOCAgEAU18h9bqwOlI5LJKwbADJ784g7wbylp7ppHR/ehb8t/W2+xUbP6umwHJdELFx7rxP462s
-A20ucS6vxOOto70MEae0/0qyexAQH6dXQbLArvQsWdZHEIjzIVEpMMpghq9Gqx3tOluwlN5E40EI
-osHsHdb9T7bWR9AUC8rmyrV7d35BH16Dx7aMOZawP5aBQW9gkOLo+fsicdl9sz1Gv7SEr5AcD48S
-aq/v7h56rgJKihcrdv6sVIkkLE8/trKnToyokZf7KcZ7XC25y2a2t6hbElGFtQl+Ynhw/qlqYLYd
-DnkM/crqJIByw5c/8nerQyIKx+u2DISCLIBrQYoIwOula9+ZEsuK1V6ADJHgJgg2SMX6OBE1/yWD
-LfJ6v9r9jv6ly0UsH8SIU653DtmadsWOLB2jutXsMq7Aqqz30XpN69QH4kj3Io6wpJ9qzo6ysmD0
-oyLQI+uUWnpp3Q+/QFesa1lQ2aOZ4W7+jQF5JyMV3pKdewlNWudLSDBaGOYKbeaP4NK75t98biGC
-wWg5TbSYWGZizEqQXsP6JwSxeRV0mcy+rSDeJmAc61ZRpqPq5KM/p/9h3PFaTWwyI0PurKju7koS
-CTxdccK+efrCh2gdC/1cacwG0Jp9VJkqyTkaGa9LKkPzY11aWOIv4x3kqdbQCtCev9eBCfHJxyYN
-rJgWVqA=
------END CERTIFICATE-----
-
-Buypass Class 3 Root CA
-=======================
------BEGIN CERTIFICATE-----
-MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEdMBsGA1UECgwU
-QnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3MgQ2xhc3MgMyBSb290IENBMB4X
-DTEwMTAyNjA4Mjg1OFoXDTQwMTAyNjA4Mjg1OFowTjELMAkGA1UEBhMCTk8xHTAbBgNVBAoMFEJ1
-eXBhc3MgQVMtOTgzMTYzMzI3MSAwHgYDVQQDDBdCdXlwYXNzIENsYXNzIDMgUm9vdCBDQTCCAiIw
-DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKXaCpUWUOOV8l6ddjEGMnqb8RB2uACatVI2zSRH
-sJ8YZLya9vrVediQYkwiL944PdbgqOkcLNt4EemOaFEVcsfzM4fkoF0LXOBXByow9c3EN3coTRiR
-5r/VUv1xLXA+58bEiuPwKAv0dpihi4dVsjoT/Lc+JzeOIuOoTyrvYLs9tznDDgFHmV0ST9tD+leh
-7fmdvhFHJlsTmKtdFoqwNxxXnUX/iJY2v7vKB3tvh2PX0DJq1l1sDPGzbjniazEuOQAnFN44wOwZ
-ZoYS6J1yFhNkUsepNxz9gjDthBgd9K5c/3ATAOux9TN6S9ZV+AWNS2mw9bMoNlwUxFFzTWsL8TQH
-2xc519woe2v1n/MuwU8XKhDzzMro6/1rqy6any2CbgTUUgGTLT2G/H783+9CHaZr77kgxve9oKeV
-/afmiSTYzIw0bOIjL9kSGiG5VZFvC5F5GQytQIgLcOJ60g7YaEi7ghM5EFjp2CoHxhLbWNvSO1UQ
-RwUVZ2J+GGOmRj8JDlQyXr8NYnon74Do29lLBlo3WiXQCBJ31G8JUJc9yB3D34xFMFbG02SrZvPA
-Xpacw8Tvw3xrizp5f7NJzz3iiZ+gMEuFuZyUJHmPfWupRWgPK9Dx2hzLabjKSWJtyNBjYt1gD1iq
-j6G8BaVmos8bdrKEZLFMOVLAMLrwjEsCsLa3AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD
-VR0OBBYEFEe4zf/lb+74suwvTg75JbCOPGvDMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsF
-AAOCAgEAACAjQTUEkMJAYmDv4jVM1z+s4jSQuKFvdvoWFqRINyzpkMLyPPgKn9iB5btb2iUspKdV
-cSQy9sgL8rxq+JOssgfCX5/bzMiKqr5qb+FJEMwx14C7u8jYog5kV+qi9cKpMRXSIGrs/CIBKM+G
-uIAeqcwRpTzyFrNHnfzSgCHEy9BHcEGhyoMZCCxt8l13nIoUE9Q2HJLw5QY33KbmkJs4j1xrG0aG
-Q0JfPgEHU1RdZX33inOhmlRaHylDFCfChQ+1iHsaO5S3HWCntZznKWlXWpuTekMwGwPXYshApqr8
-ZORK15FTAaggiG6cX0S5y2CBNOxv033aSF/rtJC8LakcC6wc1aJoIIAE1vyxjy+7SjENSoYc6+I2
-KSb12tjE8nVhz36udmNKekBlk4f4HoCMhuWG1o8O/FMsYOgWYRqiPkN7zTlgVGr18okmAWiDSKIz
-6MkEkbIRNBE+6tBDGR8Dk5AM/1E9V/RBbuHLoL7ryWPNbczk+DaqaJ3tvV2XcEQNtg413OEMXbug
-UZTLfhbrES+jkkXITHHZvMmZUldGL1DPvTVp9D0VzgalLA8+9oG6lLvDu79leNKGef9JOxqDDPDe
-eOzI8k1MGt6CKfjBWtrt7uYnXuhF0J0cUahoq0Tj0Itq4/g7u9xN12TyUb7mqqta6THuBrxzvxNi
-Cp/HuZc=
------END CERTIFICATE-----
-
-T-TeleSec GlobalRoot Class 3
-============================
------BEGIN CERTIFICATE-----
-MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoM
-IlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBU
-cnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwHhcNMDgx
-MDAxMTAyOTU2WhcNMzMxMDAxMjM1OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lz
-dGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBD
-ZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQC9dZPwYiJvJK7genasfb3ZJNW4t/zN8ELg63iIVl6bmlQdTQyK
-9tPPcPRStdiTBONGhnFBSivwKixVA9ZIw+A5OO3yXDw/RLyTPWGrTs0NvvAgJ1gORH8EGoel15YU
-NpDQSXuhdfsaa3Ox+M6pCSzyU9XDFES4hqX2iys52qMzVNn6chr3IhUciJFrf2blw2qAsCTz34ZF
-iP0Zf3WHHx+xGwpzJFu5ZeAsVMhg02YXP+HMVDNzkQI6pn97djmiH5a2OK61yJN0HZ65tOVgnS9W
-0eDrXltMEnAMbEQgqxHY9Bn20pxSN+f6tsIxO0rUFJmtxxr1XV/6B7h8DR/Wgx6zAgMBAAGjQjBA
-MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS1A/d2O2GCahKqGFPr
-AyGUv/7OyjANBgkqhkiG9w0BAQsFAAOCAQEAVj3vlNW92nOyWL6ukK2YJ5f+AbGwUgC4TeQbIXQb
-fsDuXmkqJa9c1h3a0nnJ85cp4IaH3gRZD/FZ1GSFS5mvJQQeyUapl96Cshtwn5z2r3Ex3XsFpSzT
-ucpH9sry9uetuUg/vBa3wW306gmv7PO15wWeph6KU1HWk4HMdJP2udqmJQV0eVp+QD6CSyYRMG7h
-P0HHRwA11fXT91Q+gT3aSWqas+8QPebrb9HIIkfLzM8BMZLZGOMivgkeGj5asuRrDFR6fUNOuIml
-e9eiPZaGzPImNC1qkp2aGtAw4l1OBLBfiyB+d8E9lYLRRpo7PHi4b6HQDWSieB4pTpPDpFQUWw==
------END CERTIFICATE-----
-
-D-TRUST Root Class 3 CA 2 2009
-==============================
------BEGIN CERTIFICATE-----
-MIIEMzCCAxugAwIBAgIDCYPzMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAkRFMRUwEwYDVQQK
-DAxELVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgMjAwOTAe
-Fw0wOTExMDUwODM1NThaFw0yOTExMDUwODM1NThaME0xCzAJBgNVBAYTAkRFMRUwEwYDVQQKDAxE
-LVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgMjAwOTCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANOySs96R+91myP6Oi/WUEWJNTrGa9v+2wBoqOAD
-ER03UAifTUpolDWzU9GUY6cgVq/eUXjsKj3zSEhQPgrfRlWLJ23DEE0NkVJD2IfgXU42tSHKXzlA
-BF9bfsyjxiupQB7ZNoTWSPOSHjRGICTBpFGOShrvUD9pXRl/RcPHAY9RySPocq60vFYJfxLLHLGv
-KZAKyVXMD9O0Gu1HNVpK7ZxzBCHQqr0ME7UAyiZsxGsMlFqVlNpQmvH/pStmMaTJOKDfHR+4CS7z
-p+hnUquVH+BGPtikw8paxTGA6Eian5Rp/hnd2HN8gcqW3o7tszIFZYQ05ub9VxC1X3a/L7AQDcUC
-AwEAAaOCARowggEWMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFP3aFMSfMN4hvR5COfyrYyNJ
-4PGEMA4GA1UdDwEB/wQEAwIBBjCB0wYDVR0fBIHLMIHIMIGAoH6gfIZ6bGRhcDovL2RpcmVjdG9y
-eS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwUm9vdCUyMENsYXNzJTIwMyUyMENBJTIwMiUyMDIw
-MDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwQ6BBoD+G
-PWh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfcm9vdF9jbGFzc18zX2NhXzJfMjAw
-OS5jcmwwDQYJKoZIhvcNAQELBQADggEBAH+X2zDI36ScfSF6gHDOFBJpiBSVYEQBrLLpME+bUMJm
-2H6NMLVwMeniacfzcNsgFYbQDfC+rAF1hM5+n02/t2A7nPPKHeJeaNijnZflQGDSNiH+0LS4F9p0
-o3/U37CYAqxva2ssJSRyoWXuJVrl5jLn8t+rSfrzkGkj2wTZ51xY/GXUl77M/C4KzCUqNQT4YJEV
-dT1B/yMfGchs64JTBKbkTCJNjYy6zltz7GRUUG3RnFX7acM2w4y8PIWmawomDeCTmGCufsYkl4ph
-X5GOZpIJhzbNi5stPvZR1FDUWSi9g/LMKHtThm3YJohw1+qRzT65ysCQblrGXnRl11z+o+I=
------END CERTIFICATE-----
-
-D-TRUST Root Class 3 CA 2 EV 2009
-=================================
------BEGIN CERTIFICATE-----
-MIIEQzCCAyugAwIBAgIDCYP0MA0GCSqGSIb3DQEBCwUAMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQK
-DAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAw
-OTAeFw0wOTExMDUwODUwNDZaFw0yOTExMDUwODUwNDZaMFAxCzAJBgNVBAYTAkRFMRUwEwYDVQQK
-DAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBDbGFzcyAzIENBIDIgRVYgMjAw
-OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnxhDRwui+3MKCOvXwEz75ivJn9gpfS
-egpnljgJ9hBOlSJzmY3aFS3nBfwZcyK3jpgAvDw9rKFs+9Z5JUut8Mxk2og+KbgPCdM03TP1YtHh
-zRnp7hhPTFiu4h7WDFsVWtg6uMQYZB7jM7K1iXdODL/ZlGsTl28So/6ZqQTMFexgaDbtCHu39b+T
-7WYxg4zGcTSHThfqr4uRjRxWQa4iN1438h3Z0S0NL2lRp75mpoo6Kr3HGrHhFPC+Oh25z1uxav60
-sUYgovseO3Dvk5h9jHOW8sXvhXCtKSb8HgQ+HKDYD8tSg2J87otTlZCpV6LqYQXY+U3EJ/pure35
-11H3a6UCAwEAAaOCASQwggEgMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNOUikxiEyoZLsyv
-cop9NteaHNxnMA4GA1UdDwEB/wQEAwIBBjCB3QYDVR0fBIHVMIHSMIGHoIGEoIGBhn9sZGFwOi8v
-ZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBSb290JTIwQ2xhc3MlMjAzJTIwQ0El
-MjAyJTIwRVYlMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRp
-b25saXN0MEagRKBChkBodHRwOi8vd3d3LmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3Jvb3RfY2xh
-c3NfM19jYV8yX2V2XzIwMDkuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQA07XtaPKSUiO8aEXUHL7P+
-PPoeUSbrh/Yp3uDx1MYkCenBz1UbtDDZzhr+BlGmFaQt77JLvyAoJUnRpjZ3NOhk31KxEcdzes05
-nsKtjHEh8lprr988TlWvsoRlFIm5d8sqMb7Po23Pb0iUMkZv53GMoKaEGTcH8gNFCSuGdXzfX2lX
-ANtu2KZyIktQ1HWYVt+3GP9DQ1CuekR78HlR10M9p9OB0/DJT7naxpeG0ILD5EJt/rDiZE4OJudA
-NCa1CInXCGNjOCd1HjPqbqjdn5lPdE2BiYBL3ZqXKVwvvoFBuYz/6n1gBp7N1z3TLqMVvKjmJuVv
-w9y4AyHqnxbxLFS1
------END CERTIFICATE-----
-
-CA Disig Root R2
-================
------BEGIN CERTIFICATE-----
-MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNVBAYTAlNLMRMw
-EQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMuMRkwFwYDVQQDExBDQSBEaXNp
-ZyBSb290IFIyMB4XDTEyMDcxOTA5MTUzMFoXDTQyMDcxOTA5MTUzMFowUjELMAkGA1UEBhMCU0sx
-EzARBgNVBAcTCkJyYXRpc2xhdmExEzARBgNVBAoTCkRpc2lnIGEucy4xGTAXBgNVBAMTEENBIERp
-c2lnIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCio8QACdaFXS1tFPbC
-w3OeNcJxVX6B+6tGUODBfEl45qt5WDza/3wcn9iXAng+a0EE6UG9vgMsRfYvZNSrXaNHPWSb6Wia
-xswbP7q+sos0Ai6YVRn8jG+qX9pMzk0DIaPY0jSTVpbLTAwAFjxfGs3Ix2ymrdMxp7zo5eFm1tL7
-A7RBZckQrg4FY8aAamkw/dLukO8NJ9+flXP04SXabBbeQTg06ov80egEFGEtQX6sx3dOy1FU+16S
-GBsEWmjGycT6txOgmLcRK7fWV8x8nhfRyyX+hk4kLlYMeE2eARKmK6cBZW58Yh2EhN/qwGu1pSqV
-g8NTEQxzHQuyRpDRQjrOQG6Vrf/GlK1ul4SOfW+eioANSW1z4nuSHsPzwfPrLgVv2RvPN3YEyLRa
-5Beny912H9AZdugsBbPWnDTYltxhh5EF5EQIM8HauQhl1K6yNg3ruji6DOWbnuuNZt2Zz9aJQfYE
-koopKW1rOhzndX0CcQ7zwOe9yxndnWCywmZgtrEE7snmhrmaZkCo5xHtgUUDi/ZnWejBBhG93c+A
-Ak9lQHhcR1DIm+YfgXvkRKhbhZri3lrVx/k6RGZL5DJUfORsnLMOPReisjQS1n6yqEm70XooQL6i
-Fh/f5DcfEXP7kAplQ6INfPgGAVUzfbANuPT1rqVCV3w2EYx7XsQDnYx5nQIDAQABo0IwQDAPBgNV
-HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUtZn4r7CU9eMg1gqtzk5WpC5u
-Qu0wDQYJKoZIhvcNAQELBQADggIBACYGXnDnZTPIgm7ZnBc6G3pmsgH2eDtpXi/q/075KMOYKmFM
-tCQSin1tERT3nLXK5ryeJ45MGcipvXrA1zYObYVybqjGom32+nNjf7xueQgcnYqfGopTpti72TVV
-sRHFqQOzVju5hJMiXn7B9hJSi+osZ7z+Nkz1uM/Rs0mSO9MpDpkblvdhuDvEK7Z4bLQjb/D907Je
-dR+Zlais9trhxTF7+9FGs9K8Z7RiVLoJ92Owk6Ka+elSLotgEqv89WBW7xBci8QaQtyDW2QOy7W8
-1k/BfDxujRNt+3vrMNDcTa/F1balTFtxyegxvug4BkihGuLq0t4SOVga/4AOgnXmt8kHbA7v/zjx
-mHHEt38OFdAlab0inSvtBfZGR6ztwPDUO+Ls7pZbkBNOHlY667DvlruWIxG68kOGdGSVyCh13x01
-utI3gzhTODY7z2zp+WsO0PsE6E9312UBeIYMej4hYvF/Y3EMyZ9E26gnonW+boE+18DrG5gPcFw0
-sorMwIUY6256s/daoQe/qUKS82Ail+QUoQebTnbAjn39pCXHR+3/H3OszMOl6W8KjptlwlCFtaOg
-UxLMVYdh84GuEEZhvUQhuMI9dM9+JDX6HAcOmz0iyu8xL4ysEr3vQCj8KWefshNPZiTEUxnpHikV
-7+ZtsH8tZ/3zbBt1RqPlShfppNcL
------END CERTIFICATE-----
-
-ACCVRAIZ1
-=========
------BEGIN CERTIFICATE-----
-MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UEAwwJQUNDVlJB
-SVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQswCQYDVQQGEwJFUzAeFw0xMTA1
-MDUwOTM3MzdaFw0zMDEyMzEwOTM3MzdaMEIxEjAQBgNVBAMMCUFDQ1ZSQUlaMTEQMA4GA1UECwwH
-UEtJQUNDVjENMAsGA1UECgwEQUNDVjELMAkGA1UEBhMCRVMwggIiMA0GCSqGSIb3DQEBAQUAA4IC
-DwAwggIKAoICAQCbqau/YUqXry+XZpp0X9DZlv3P4uRm7x8fRzPCRKPfmt4ftVTdFXxpNRFvu8gM
-jmoYHtiP2Ra8EEg2XPBjs5BaXCQ316PWywlxufEBcoSwfdtNgM3802/J+Nq2DoLSRYWoG2ioPej0
-RGy9ocLLA76MPhMAhN9KSMDjIgro6TenGEyxCQ0jVn8ETdkXhBilyNpAlHPrzg5XPAOBOp0KoVdD
-aaxXbXmQeOW1tDvYvEyNKKGno6e6Ak4l0Squ7a4DIrhrIA8wKFSVf+DuzgpmndFALW4ir50awQUZ
-0m/A8p/4e7MCQvtQqR0tkw8jq8bBD5L/0KIV9VMJcRz/RROE5iZe+OCIHAr8Fraocwa48GOEAqDG
-WuzndN9wrqODJerWx5eHk6fGioozl2A3ED6XPm4pFdahD9GILBKfb6qkxkLrQaLjlUPTAYVtjrs7
-8yM2x/474KElB0iryYl0/wiPgL/AlmXz7uxLaL2diMMxs0Dx6M/2OLuc5NF/1OVYm3z61PMOm3WR
-5LpSLhl+0fXNWhn8ugb2+1KoS5kE3fj5tItQo05iifCHJPqDQsGH+tUtKSpacXpkatcnYGMN285J
-9Y0fkIkyF/hzQ7jSWpOGYdbhdQrqeWZ2iE9x6wQl1gpaepPluUsXQA+xtrn13k/c4LOsOxFwYIRK
-Q26ZIMApcQrAZQIDAQABo4ICyzCCAscwfQYIKwYBBQUHAQEEcTBvMEwGCCsGAQUFBzAChkBodHRw
-Oi8vd3d3LmFjY3YuZXMvZmlsZWFkbWluL0FyY2hpdm9zL2NlcnRpZmljYWRvcy9yYWl6YWNjdjEu
-Y3J0MB8GCCsGAQUFBzABhhNodHRwOi8vb2NzcC5hY2N2LmVzMB0GA1UdDgQWBBTSh7Tj3zcnk1X2
-VuqB5TbMjB4/vTAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNKHtOPfNyeTVfZW6oHlNsyM
-Hj+9MIIBcwYDVR0gBIIBajCCAWYwggFiBgRVHSAAMIIBWDCCASIGCCsGAQUFBwICMIIBFB6CARAA
-QQB1AHQAbwByAGkAZABhAGQAIABkAGUAIABDAGUAcgB0AGkAZgBpAGMAYQBjAGkA8wBuACAAUgBh
-AO0AegAgAGQAZQAgAGwAYQAgAEEAQwBDAFYAIAAoAEEAZwBlAG4AYwBpAGEAIABkAGUAIABUAGUA
-YwBuAG8AbABvAGcA7QBhACAAeQAgAEMAZQByAHQAaQBmAGkAYwBhAGMAaQDzAG4AIABFAGwAZQBj
-AHQAcgDzAG4AaQBjAGEALAAgAEMASQBGACAAUQA0ADYAMAAxADEANQA2AEUAKQAuACAAQwBQAFMA
-IABlAG4AIABoAHQAdABwADoALwAvAHcAdwB3AC4AYQBjAGMAdgAuAGUAczAwBggrBgEFBQcCARYk
-aHR0cDovL3d3dy5hY2N2LmVzL2xlZ2lzbGFjaW9uX2MuaHRtMFUGA1UdHwROMEwwSqBIoEaGRGh0
-dHA6Ly93d3cuYWNjdi5lcy9maWxlYWRtaW4vQXJjaGl2b3MvY2VydGlmaWNhZG9zL3JhaXphY2N2
-MV9kZXIuY3JsMA4GA1UdDwEB/wQEAwIBBjAXBgNVHREEEDAOgQxhY2N2QGFjY3YuZXMwDQYJKoZI
-hvcNAQEFBQADggIBAJcxAp/n/UNnSEQU5CmH7UwoZtCPNdpNYbdKl02125DgBS4OxnnQ8pdpD70E
-R9m+27Up2pvZrqmZ1dM8MJP1jaGo/AaNRPTKFpV8M9xii6g3+CfYCS0b78gUJyCpZET/LtZ1qmxN
-YEAZSUNUY9rizLpm5U9EelvZaoErQNV/+QEnWCzI7UiRfD+mAM/EKXMRNt6GGT6d7hmKG9Ww7Y49
-nCrADdg9ZuM8Db3VlFzi4qc1GwQA9j9ajepDvV+JHanBsMyZ4k0ACtrJJ1vnE5Bc5PUzolVt3OAJ
-TS+xJlsndQAJxGJ3KQhfnlmstn6tn1QwIgPBHnFk/vk4CpYY3QIUrCPLBhwepH2NDd4nQeit2hW3
-sCPdK6jT2iWH7ehVRE2I9DZ+hJp4rPcOVkkO1jMl1oRQQmwgEh0q1b688nCBpHBgvgW1m54ERL5h
-I6zppSSMEYCUWqKiuUnSwdzRp+0xESyeGabu4VXhwOrPDYTkF7eifKXeVSUG7szAh1xA2syVP1Xg
-Nce4hL60Xc16gwFy7ofmXx2utYXGJt/mwZrpHgJHnyqobalbz+xFd3+YJ5oyXSrjhO7FmGYvliAd
-3djDJ9ew+f7Zfc3Qn48LFFhRny+Lwzgt3uiP1o2HpPVWQxaZLPSkVrQ0uGE3ycJYgBugl6H8WY3p
-EfbRD0tVNEYqi4Y7
------END CERTIFICATE-----
-
-TWCA Global Root CA
-===================
------BEGIN CERTIFICATE-----
-MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcxEjAQBgNVBAoT
-CVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMTVFdDQSBHbG9iYWwgUm9vdCBD
-QTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5NTlaMFExCzAJBgNVBAYTAlRXMRIwEAYDVQQK
-EwlUQUlXQU4tQ0ExEDAOBgNVBAsTB1Jvb3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3Qg
-Q0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCwBdvI64zEbooh745NnHEKH1Jw7W2C
-nJfF10xORUnLQEK1EjRsGcJ0pDFfhQKX7EMzClPSnIyOt7h52yvVavKOZsTuKwEHktSz0ALfUPZV
-r2YOy+BHYC8rMjk1Ujoog/h7FsYYuGLWRyWRzvAZEk2tY/XTP3VfKfChMBwqoJimFb3u/Rk28OKR
-Q4/6ytYQJ0lM793B8YVwm8rqqFpD/G2Gb3PpN0Wp8DbHzIh1HrtsBv+baz4X7GGqcXzGHaL3SekV
-tTzWoWH1EfcFbx39Eb7QMAfCKbAJTibc46KokWofwpFFiFzlmLhxpRUZyXx1EcxwdE8tmx2RRP1W
-KKD+u4ZqyPpcC1jcxkt2yKsi2XMPpfRaAok/T54igu6idFMqPVMnaR1sjjIsZAAmY2E2TqNGtz99
-sy2sbZCilaLOz9qC5wc0GZbpuCGqKX6mOL6OKUohZnkfs8O1CWfe1tQHRvMq2uYiN2DLgbYPoA/p
-yJV/v1WRBXrPPRXAb94JlAGD1zQbzECl8LibZ9WYkTunhHiVJqRaCPgrdLQABDzfuBSO6N+pjWxn
-kjMdwLfS7JLIvgm/LCkFbwJrnu+8vyq8W8BQj0FwcYeyTbcEqYSjMq+u7msXi7Kx/mzhkIyIqJdI
-zshNy/MGz19qCkKxHh53L46g5pIOBvwFItIm4TFRfTLcDwIDAQABoyMwITAOBgNVHQ8BAf8EBAMC
-AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAXzSBdu+WHdXltdkCY4QWwa6g
-cFGn90xHNcgL1yg9iXHZqjNB6hQbbCEAwGxCGX6faVsgQt+i0trEfJdLjbDorMjupWkEmQqSpqsn
-LhpNgb+E1HAerUf+/UqdM+DyucRFCCEK2mlpc3INvjT+lIutwx4116KD7+U4x6WFH6vPNOw/KP4M
-8VeGTslV9xzU2KV9Bnpv1d8Q34FOIWWxtuEXeZVFBs5fzNxGiWNoRI2T9GRwoD2dKAXDOXC4Ynsg
-/eTb6QihuJ49CcdP+yz4k3ZB3lLg4VfSnQO8d57+nile98FRYB/e2guyLXW3Q0iT5/Z5xoRdgFlg
-lPx4mI88k1HtQJAH32RjJMtOcQWh15QaiDLxInQirqWm2BJpTGCjAu4r7NRjkgtevi92a6O2JryP
-A9gK8kxkRr05YuWW6zRjESjMlfGt7+/cgFhI6Uu46mWs6fyAtbXIRfmswZ/ZuepiiI7E8UuDEq3m
-i4TWnsLrgxifarsbJGAzcMzs9zLzXNl5fe+epP7JI8Mk7hWSsT2RTyaGvWZzJBPqpK5jwa19hAM8
-EHiGG3njxPPyBJUgriOCxLM6AGK/5jYk4Ve6xx6QddVfP5VhK8E7zeWzaGHQRiapIVJpLesux+t3
-zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmyKwbQBM0=
------END CERTIFICATE-----
-
-TeliaSonera Root CA v1
-======================
------BEGIN CERTIFICATE-----
-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAwNzEUMBIGA1UE
-CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMDcxMDE4
-MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwW
-VGVsaWFTb25lcmEgUm9vdCBDQSB2MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+
-6yfwIaPzaSZVfp3FVRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA
-3GV17CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+XZ75Ljo1k
-B1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+/jXh7VB7qTCNGdMJjmhn
-Xb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxH
-oLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkmdtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3
-F0fUTPHSiXk+TT2YqGHeOh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJ
-oWjiUIMusDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4pgd7
-gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fsslESl1MpWtTwEhDc
-TwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQarMCpgKIv7NHfirZ1fpoeDVNAgMB
-AAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qW
-DNXr+nuqF+gTEjANBgkqhkiG9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNm
-zqjMDfz1mgbldxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx
-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1TjTQpgcmLNkQfW
-pb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBedY2gea+zDTYa4EzAvXUYNR0PV
-G6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpc
-c41teyWRyu5FrgZLAMzTsVlQ2jqIOylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOT
-JsjrDNYmiLbAJM+7vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2
-qReWt88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcnHL/EVlP6
-Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVxSK236thZiNSQvxaz2ems
-WWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY=
------END CERTIFICATE-----
-
-T-TeleSec GlobalRoot Class 2
-============================
------BEGIN CERTIFICATE-----
-MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoM
-IlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBU
-cnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwHhcNMDgx
-MDAxMTA0MDE0WhcNMzMxMDAxMjM1OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lz
-dGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBD
-ZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQCqX9obX+hzkeXaXPSi5kfl82hVYAUdAqSzm1nzHoqvNK38DcLZ
-SBnuaY/JIPwhqgcZ7bBcrGXHX+0CfHt8LRvWurmAwhiCFoT6ZrAIxlQjgeTNuUk/9k9uN0goOA/F
-vudocP05l03Sx5iRUKrERLMjfTlH6VJi1hKTXrcxlkIF+3anHqP1wvzpesVsqXFP6st4vGCvx970
-2cu+fjOlbpSD8DT6IavqjnKgP6TeMFvvhk1qlVtDRKgQFRzlAVfFmPHmBiiRqiDFt1MmUUOyCxGV
-WOHAD3bZwI18gfNycJ5v/hqO2V81xrJvNHy+SE/iWjnX2J14np+GPgNeGYtEotXHAgMBAAGjQjBA
-MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS/WSA2AHmgoCJrjNXy
-YdK4LMuCSjANBgkqhkiG9w0BAQsFAAOCAQEAMQOiYQsfdOhyNsZt+U2e+iKo4YFWz827n+qrkRk4
-r6p8FU3ztqONpfSO9kSpp+ghla0+AGIWiPACuvxhI+YzmzB6azZie60EI4RYZeLbK4rnJVM3YlNf
-vNoBYimipidx5joifsFvHZVwIEoHNN/q/xWA5brXethbdXwFeilHfkCoMRN3zUA7tFFHei4R40cR
-3p1m0IvVVGb6g1XqfMIpiRvpb7PO4gWEyS8+eIVibslfwXhjdFjASBgMmTnrpMwatXlajRWc2BQN
-9noHV8cigwUtPJslJj0Ys6lDfMjIq2SPDqO/nBudMNva0Bkuqjzx+zOAduTNrRlPBSeOE6Fuwg==
------END CERTIFICATE-----
-
-Atos TrustedRoot 2011
-=====================
------BEGIN CERTIFICATE-----
-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UEAwwVQXRvcyBU
-cnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0xMTA3MDcxNDU4
-MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMMFUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsG
-A1UECgwEQXRvczELMAkGA1UEBhMCREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV
-hTuXbyo7LjvPpvMpNb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr
-54rMVD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+SZFhyBH+
-DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ4J7sVaE3IqKHBAUsR320
-HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0Lcp2AMBYHlT8oDv3FdU9T1nSatCQujgKR
-z3bFmx5VdJx4IbHwLfELn8LVlhgf8FQieowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7R
-l+lwrrw7GWzbITAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZ
-bNshMBgGA1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEB
-CwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8jvZfza1zv7v1Apt+h
-k6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kPDpFrdRbhIfzYJsdHt6bPWHJxfrrh
-TZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pcmaHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a9
-61qn8FYiqTxlVMYVqL2Gns2Dlmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G
-3mB/ufNPRJLvKrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed
------END CERTIFICATE-----
-
-QuoVadis Root CA 1 G3
-=====================
------BEGIN CERTIFICATE-----
-MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQELBQAwSDELMAkG
-A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv
-b3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00MjAxMTIxNzI3NDRaMEgxCzAJBgNVBAYTAkJN
-MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEg
-RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCgvlAQjunybEC0BJyFuTHK3C3kEakE
-PBtVwedYMB0ktMPvhd6MLOHBPd+C5k+tR4ds7FtJwUrVu4/sh6x/gpqG7D0DmVIB0jWerNrwU8lm
-PNSsAgHaJNM7qAJGr6Qc4/hzWHa39g6QDbXwz8z6+cZM5cOGMAqNF34168Xfuw6cwI2H44g4hWf6
-Pser4BOcBRiYz5P1sZK0/CPTz9XEJ0ngnjybCKOLXSoh4Pw5qlPafX7PGglTvF0FBM+hSo+LdoIN
-ofjSxxR3W5A2B4GbPgb6Ul5jxaYA/qXpUhtStZI5cgMJYr2wYBZupt0lwgNm3fME0UDiTouG9G/l
-g6AnhF4EwfWQvTA9xO+oabw4m6SkltFi2mnAAZauy8RRNOoMqv8hjlmPSlzkYZqn0ukqeI1RPToV
-7qJZjqlc3sX5kCLliEVx3ZGZbHqfPT2YfF72vhZooF6uCyP8Wg+qInYtyaEQHeTTRCOQiJ/GKubX
-9ZqzWB4vMIkIG1SitZgj7Ah3HJVdYdHLiZxfokqRmu8hqkkWCKi9YSgxyXSthfbZxbGL0eUQMk1f
-iyA6PEkfM4VZDdvLCXVDaXP7a3F98N/ETH3Goy7IlXnLc6KOTk0k+17kBL5yG6YnLUlamXrXXAkg
-t3+UuU/xDRxeiEIbEbfnkduebPRq34wGmAOtzCjvpUfzUwIDAQABo0IwQDAPBgNVHRMBAf8EBTAD
-AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUo5fW816iEOGrRZ88F2Q87gFwnMwwDQYJKoZI
-hvcNAQELBQADggIBABj6W3X8PnrHX3fHyt/PX8MSxEBd1DKquGrX1RUVRpgjpeaQWxiZTOOtQqOC
-MTaIzen7xASWSIsBx40Bz1szBpZGZnQdT+3Btrm0DWHMY37XLneMlhwqI2hrhVd2cDMT/uFPpiN3
-GPoajOi9ZcnPP/TJF9zrx7zABC4tRi9pZsMbj/7sPtPKlL92CiUNqXsCHKnQO18LwIE6PWThv6ct
-Tr1NxNgpxiIY0MWscgKCP6o6ojoilzHdCGPDdRS5YCgtW2jgFqlmgiNR9etT2DGbe+m3nUvriBbP
-+V04ikkwj+3x6xn0dxoxGE1nVGwvb2X52z3sIexe9PSLymBlVNFxZPT5pqOBMzYzcfCkeF9OrYMh
-3jRJjehZrJ3ydlo28hP0r+AJx2EqbPfgna67hkooby7utHnNkDPDs3b69fBsnQGQ+p6Q9pxyz0fa
-wx/kNSBT8lTR32GDpgLiJTjehTItXnOQUl1CxM49S+H5GYQd1aJQzEH7QRTDvdbJWqNjZgKAvQU6
-O0ec7AAmTPWIUb+oI38YB7AL7YsmoWTTYUrrXJ/es69nA7Mf3W1daWhpq1467HxpvMc7hU6eFbm0
-FU/DlXpY18ls6Wy58yljXrQs8C097Vpl4KlbQMJImYFtnh8GKjwStIsPm6Ik8KaN1nrgS7ZklmOV
-hMJKzRwuJIczYOXD
------END CERTIFICATE-----
-
-QuoVadis Root CA 2 G3
-=====================
------BEGIN CERTIFICATE-----
-MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQELBQAwSDELMAkG
-A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv
-b3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJN
-MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIg
-RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFh
-ZiFfqq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMWn4rjyduY
-NM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ymc5GQYaYDFCDy54ejiK2t
-oIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+O7q414AB+6XrW7PFXmAqMaCvN+ggOp+o
-MiwMzAkd056OXbxMmO7FGmh77FOm6RQ1o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+l
-V0POKa2Mq1W/xPtbAd0jIaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZo
-L1NesNKqIcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz8eQQ
-sSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43ehvNURG3YBZwjgQQvD
-6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l7ZizlWNof/k19N+IxWA1ksB8aRxh
-lRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALGcC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTAD
-AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZI
-hvcNAQELBQADggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66
-AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RCroijQ1h5fq7K
-pVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0GaW/ZZGYjeVYg3UQt4XAoeo0L9
-x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4nlv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgz
-dWqTHBLmYF5vHX/JHyPLhGGfHoJE+V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6X
-U/IyAgkwo1jwDQHVcsaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+Nw
-mNtddbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNgKCLjsZWD
-zYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeMHVOyToV7BjjHLPj4sHKN
-JeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4WSr2Rz0ZiC3oheGe7IUIarFsNMkd7Egr
-O3jtZsSOeWmD3n+M
------END CERTIFICATE-----
-
-QuoVadis Root CA 3 G3
-=====================
------BEGIN CERTIFICATE-----
-MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQELBQAwSDELMAkG
-A1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAcBgNVBAMTFVF1b1ZhZGlzIFJv
-b3QgQ0EgMyBHMzAeFw0xMjAxMTIyMDI2MzJaFw00MjAxMTIyMDI2MzJaMEgxCzAJBgNVBAYTAkJN
-MRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDMg
-RzMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzyw4QZ47qFJenMioKVjZ/aEzHs286
-IxSR/xl/pcqs7rN2nXrpixurazHb+gtTTK/FpRp5PIpM/6zfJd5O2YIyC0TeytuMrKNuFoM7pmRL
-Mon7FhY4futD4tN0SsJiCnMK3UmzV9KwCoWdcTzeo8vAMvMBOSBDGzXRU7Ox7sWTaYI+FrUoRqHe
-6okJ7UO4BUaKhvVZR74bbwEhELn9qdIoyhA5CcoTNs+cra1AdHkrAj80//ogaX3T7mH1urPnMNA3
-I4ZyYUUpSFlob3emLoG+B01vr87ERRORFHAGjx+f+IdpsQ7vw4kZ6+ocYfx6bIrc1gMLnia6Et3U
-VDmrJqMz6nWB2i3ND0/kA9HvFZcba5DFApCTZgIhsUfei5pKgLlVj7WiL8DWM2fafsSntARE60f7
-5li59wzweyuxwHApw0BiLTtIadwjPEjrewl5qW3aqDCYz4ByA4imW0aucnl8CAMhZa634RylsSqi
-Md5mBPfAdOhx3v89WcyWJhKLhZVXGqtrdQtEPREoPHtht+KPZ0/l7DxMYIBpVzgeAVuNVejH38DM
-dyM0SXV89pgR6y3e7UEuFAUCf+D+IOs15xGsIs5XPd7JMG0QA4XN8f+MFrXBsj6IbGB/kE+V9/Yt
-rQE5BwT6dYB9v0lQ7e/JxHwc64B+27bQ3RP+ydOc17KXqQIDAQABo0IwQDAPBgNVHRMBAf8EBTAD
-AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUxhfQvKjqAkPyGwaZXSuQILnXnOQwDQYJKoZI
-hvcNAQELBQADggIBADRh2Va1EodVTd2jNTFGu6QHcrxfYWLopfsLN7E8trP6KZ1/AvWkyaiTt3px
-KGmPc+FSkNrVvjrlt3ZqVoAh313m6Tqe5T72omnHKgqwGEfcIHB9UqM+WXzBusnIFUBhynLWcKzS
-t/Ac5IYp8M7vaGPQtSCKFWGafoaYtMnCdvvMujAWzKNhxnQT5WvvoxXqA/4Ti2Tk08HS6IT7SdEQ
-TXlm66r99I0xHnAUrdzeZxNMgRVhvLfZkXdxGYFgu/BYpbWcC/ePIlUnwEsBbTuZDdQdm2NnL9Du
-DcpmvJRPpq3t/O5jrFc/ZSXPsoaP0Aj/uHYUbt7lJ+yreLVTubY/6CD50qi+YUbKh4yE8/nxoGib
-Ih6BJpsQBJFxwAYf3KDTuVan45gtf4Od34wrnDKOMpTwATwiKp9Dwi7DmDkHOHv8XgBCH/MyJnmD
-hPbl8MFREsALHgQjDFSlTC9JxUrRtm5gDWv8a4uFJGS3iQ6rJUdbPM9+Sb3H6QrG2vd+DhcI00iX
-0HGS8A85PjRqHH3Y8iKuu2n0M7SmSFXRDw4m6Oy2Cy2nhTXN/VnIn9HNPlopNLk9hM6xZdRZkZFW
-dSHBd575euFgndOtBBj0fOtek49TSiIp+EgrPk2GrFt/ywaZWWDYWGWVjUTR939+J399roD1B0y2
-PpxxVJkES/1Y+Zj0
------END CERTIFICATE-----
-
-DigiCert Assured ID Root G2
-===========================
------BEGIN CERTIFICATE-----
-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQG
-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw
-IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgw
-MTE1MTIwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL
-ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSAn61UQbVH
-35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4HteccbiJVMWWXvdMX0h5i89vq
-bFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9HpEgjAALAcKxHad3A2m67OeYfcgnDmCXRw
-VWmvo2ifv922ebPynXApVfSr/5Vh88lAbx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OP
-YLfykqGxvYmJHzDNw6YuYjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+Rn
-lTGNAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTO
-w0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPIQW5pJ6d1Ee88hjZv
-0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I0jJmwYrA8y8678Dj1JGG0VDjA9tz
-d29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4GnilmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAW
-hsI6yLETcDbYz+70CjTVW0z9B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0M
-jomZmWzwPDCvON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo
-IhNzbM8m9Yop5w==
------END CERTIFICATE-----
-
-DigiCert Assured ID Root G3
-===========================
------BEGIN CERTIFICATE-----
-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQswCQYDVQQGEwJV
-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYD
-VQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1
-MTIwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQ
-BgcqhkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJfZn4f5dwb
-RXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17QRSAPWXYQ1qAk8C3eNvJs
-KTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgF
-UaFNN6KDec6NHSrkhDAKBggqhkjOPQQDAwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5Fy
-YZ5eEJJZVrmDxxDnOOlYJjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy
-1vUhZscv6pZjamVFkpUBtA==
------END CERTIFICATE-----
-
-DigiCert Global Root G2
-=======================
------BEGIN CERTIFICATE-----
-MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQG
-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAw
-HgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUx
-MjAwMDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3
-dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkq
-hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI2/Ou8jqJ
-kTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx1x7e/dfgy5SDN67sH0NO
-3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQq2EGnI/yuum06ZIya7XzV+hdG82MHauV
-BJVJ8zUtluNJbd134/tJS7SsVQepj5WztCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyM
-UNGPHgm+F6HmIcr9g+UQvIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQAB
-o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV5uNu
-5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY1Yl9PMWLSn/pvtsr
-F9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4NeF22d+mQrvHRAiGfzZ0JFrabA0U
-WTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NGFdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBH
-QRFXGU7Aj64GxJUTFy8bJZ918rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/
-iyK5S9kJRaTepLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
-MrY=
------END CERTIFICATE-----
-
-DigiCert Global Root G3
-=======================
------BEGIN CERTIFICATE-----
-MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQswCQYDVQQGEwJV
-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYD
-VQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAw
-MDBaMGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5k
-aWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0C
-AQYFK4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FGfp4tn+6O
-YwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPOZ9wj/wMco+I+o0IwQDAP
-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNp
-Yim8S8YwCgYIKoZIzj0EAwMDaAAwZQIxAK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y
-3maTD/HMsQmP3Wyr+mt/oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34
-VOKa5Vt8sycX
------END CERTIFICATE-----
-
-DigiCert Trusted Root G4
-========================
------BEGIN CERTIFICATE-----
-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBiMQswCQYDVQQG
-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEw
-HwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1
-MTIwMDAwWjBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0G
-CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3yithZwuEp
-pz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9o
-k3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7Fsa
-vOvJz82sNEBfsXpm7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGY
-QJB5w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6
-MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCiEhtm
-mnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7
-f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFH
-dL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8
-oR7FwI+isX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud
-DwEB/wQEAwIBhjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD
-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2SV1EY+CtnJYY
-ZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd+SeuMIW59mdNOj6PWTkiU0Tr
-yF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWcfFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy
-7zBZLq7gcfJW5GqXb5JQbZaNaHqasjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iah
-ixTXTBmyUEFxPT9NcCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN
-5r5N0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie4u1Ki7wb
-/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mIr/OSmbaz5mEP0oUA51Aa
-5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tK
-G48BtieVU+i2iW1bvGjUI+iLUaJW+fCmgKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP
-82Z+
------END CERTIFICATE-----
-
-COMODO RSA Certification Authority
-==================================
------BEGIN CERTIFICATE-----
-MIIF2DCCA8CgAwIBAgIQTKr5yttjb+Af907YWwOGnTANBgkqhkiG9w0BAQwFADCBhTELMAkGA1UE
-BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG
-A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlv
-biBBdXRob3JpdHkwHhcNMTAwMTE5MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMC
-R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE
-ChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBB
-dXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCR6FSS0gpWsawNJN3Fz0Rn
-dJkrN6N9I3AAcbxT38T6KhKPS38QVr2fcHK3YX/JSw8Xpz3jsARh7v8Rl8f0hj4K+j5c+ZPmNHrZ
-FGvnnLOFoIJ6dq9xkNfs/Q36nGz637CC9BR++b7Epi9Pf5l/tfxnQ3K9DADWietrLNPtj5gcFKt+
-5eNu/Nio5JIk2kNrYrhV/erBvGy2i/MOjZrkm2xpmfh4SDBF1a3hDTxFYPwyllEnvGfDyi62a+pG
-x8cgoLEfZd5ICLqkTqnyg0Y3hOvozIFIQ2dOciqbXL1MGyiKXCJ7tKuY2e7gUYPDCUZObT6Z+pUX
-2nwzV0E8jVHtC7ZcryxjGt9XyD+86V3Em69FmeKjWiS0uqlWPc9vqv9JWL7wqP/0uK3pN/u6uPQL
-OvnoQ0IeidiEyxPx2bvhiWC4jChWrBQdnArncevPDt09qZahSL0896+1DSJMwBGB7FY79tOi4lu3
-sgQiUpWAk2nojkxl8ZEDLXB0AuqLZxUpaVICu9ffUGpVRr+goyhhf3DQw6KqLCGqR84onAZFdr+C
-GCe01a60y1Dma/RMhnEw6abfFobg2P9A3fvQQoh/ozM6LlweQRGBY84YcWsr7KaKtzFcOmpH4MN5
-WdYgGq/yapiqcrxXStJLnbsQ/LBMQeXtHT1eKJ2czL+zUdqnR+WEUwIDAQABo0IwQDAdBgNVHQ4E
-FgQUu69+Aj36pvE8hI6t7jiY7NkyMtQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
-DQYJKoZIhvcNAQEMBQADggIBAArx1UaEt65Ru2yyTUEUAJNMnMvlwFTPoCWOAvn9sKIN9SCYPBMt
-rFaisNZ+EZLpLrqeLppysb0ZRGxhNaKatBYSaVqM4dc+pBroLwP0rmEdEBsqpIt6xf4FpuHA1sj+
-nq6PK7o9mfjYcwlYRm6mnPTXJ9OV2jeDchzTc+CiR5kDOF3VSXkAKRzH7JsgHAckaVd4sjn8OoSg
-tZx8jb8uk2IntznaFxiuvTwJaP+EmzzV1gsD41eeFPfR60/IvYcjt7ZJQ3mFXLrrkguhxuhoqEwW
-sRqZCuhTLJK7oQkYdQxlqHvLI7cawiiFwxv/0Cti76R7CZGYZ4wUAc1oBmpjIXUDgIiKboHGhfKp
-pC3n9KUkEEeDys30jXlYsQab5xoq2Z0B15R97QNKyvDb6KkBPvVWmckejkk9u+UJueBPSZI9FoJA
-zMxZxuY67RIuaTxslbH9qh17f4a+Hg4yRvv7E491f0yLS0Zj/gA0QHDBw7mh3aZw4gSzQbzpgJHq
-ZJx64SIDqZxubw5lT2yHh17zbqD5daWbQOhTsiedSrnAdyGN/4fy3ryM7xfft0kL0fJuMAsaDk52
-7RH89elWsn2/x20Kk4yl0MC2Hb46TpSi125sC8KKfPog88Tk5c0NqMuRkrF8hey1FGlmDoLnzc7I
-LaZRfyHBNVOFBkpdn627G190
------END CERTIFICATE-----
-
-USERTrust RSA Certification Authority
-=====================================
------BEGIN CERTIFICATE-----
-MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCBiDELMAkGA1UE
-BhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQK
-ExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNh
-dGlvbiBBdXRob3JpdHkwHhcNMTAwMjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UE
-BhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQK
-ExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNh
-dGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCAEmUXNg7D2wiz
-0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2j
-Y0K2dvKpOyuR+OJv0OwWIJAJPuLodMkYtJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFn
-RghRy4YUVD+8M/5+bJz/Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O
-+T23LLb2VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT79uq
-/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6c0Plfg6lZrEpfDKE
-Y1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmTYo61Zs8liM2EuLE/pDkP2QKe6xJM
-lXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97lc6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8
-yexDJtC/QV9AqURE9JnnV4eeUB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+
-eLf8ZxXhyVeEHg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd
-BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF
-MAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPFUp/L+M+ZBn8b2kMVn54CVVeW
-FPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KOVWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ
-7l8wXEskEVX/JJpuXior7gtNn3/3ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQ
-Eg9zKC7F4iRO/Fjs8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM
-8WcRiQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYzeSf7dNXGi
-FSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZXHlKYC6SQK5MNyosycdi
-yA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9c
-J2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRBVXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGw
-sAvgnEzDHNb842m1R0aBL6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gx
-Q+6IHdfGjjxDah2nGN59PRbxYvnKkKj9
------END CERTIFICATE-----
-
-USERTrust ECC Certification Authority
-=====================================
------BEGIN CERTIFICATE-----
-MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDELMAkGA1UEBhMC
-VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU
-aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlv
-biBBdXRob3JpdHkwHhcNMTAwMjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMC
-VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU
-aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlv
-biBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqfloI+d61SRvU8Za2EurxtW2
-0eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinngo4N+LZfQYcTxmdwlkWOrfzCjtHDix6Ez
-nPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0GA1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNV
-HQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBB
-HU6+4WMBzzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbWRNZu
-9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg=
------END CERTIFICATE-----
-
-GlobalSign ECC Root CA - R5
-===========================
------BEGIN CERTIFICATE-----
-MIICHjCCAaSgAwIBAgIRYFlJ4CYuu1X5CneKcflK2GwwCgYIKoZIzj0EAwMwUDEkMCIGA1UECxMb
-R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD
-EwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoXDTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMb
-R2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQD
-EwpHbG9iYWxTaWduMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAER0UOlvt9Xb/pOdEh+J8LttV7HpI6
-SFkc8GIxLcB6KP4ap1yztsyX50XUWPrRd21DosCHZTQKH3rd6zwzocWdTaRvQZU4f8kehOvRnkmS
-h5SHDDqFSmafnVmTTZdhBoZKo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd
-BgNVHQ4EFgQUPeYpSJvqB8ohREom3m7e0oPQn1kwCgYIKoZIzj0EAwMDaAAwZQIxAOVpEslu28Yx
-uglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7
-yFz9SO8NdCKoCOJuxUnOxwy8p2Fp8fc74SrL+SvzZpA3
------END CERTIFICATE-----
-
-IdenTrust Commercial Root CA 1
-==============================
------BEGIN CERTIFICATE-----
-MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBKMQswCQYDVQQG
-EwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBS
-b290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQwMTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzES
-MBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENB
-IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ld
-hNlT3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU+ehcCuz/
-mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gpS0l4PJNgiCL8mdo2yMKi
-1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1bVoE/c40yiTcdCMbXTMTEl3EASX2MN0C
-XZ/g1Ue9tOsbobtJSdifWwLziuQkkORiT0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl
-3ZBWzvurpWCdxJ35UrCLvYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzy
-NeVJSQjKVsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZKdHzV
-WYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHTc+XvvqDtMwt0viAg
-xGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hvl7yTmvmcEpB4eoCHFddydJxVdHix
-uuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5NiGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMC
-AQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZI
-hvcNAQELBQADggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH
-6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwtLRvM7Kqas6pg
-ghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93nAbowacYXVKV7cndJZ5t+qnt
-ozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3+wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmV
-YjzlVYA211QC//G5Xc7UI2/YRYRKW2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUX
-feu+h1sXIFRRk0pTAwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/ro
-kTLql1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG4iZZRHUe
-2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZmUlO+KWA2yUPHGNiiskz
-Z2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7R
-cGzM7vRX+Bi6hG6H
------END CERTIFICATE-----
-
-IdenTrust Public Sector Root CA 1
-=================================
------BEGIN CERTIFICATE-----
-MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBNMQswCQYDVQQG
-EwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3Rv
-ciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcNMzQwMTE2MTc1MzMyWjBNMQswCQYDVQQGEwJV
-UzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3RvciBS
-b290IENBIDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2IpT8pEiv6EdrCvsnduTy
-P4o7ekosMSqMjbCpwzFrqHd2hCa2rIFCDQjrVVi7evi8ZX3yoG2LqEfpYnYeEe4IFNGyRBb06tD6
-Hi9e28tzQa68ALBKK0CyrOE7S8ItneShm+waOh7wCLPQ5CQ1B5+ctMlSbdsHyo+1W/CD80/HLaXI
-rcuVIKQxKFdYWuSNG5qrng0M8gozOSI5Cpcu81N3uURF/YTLNiCBWS2ab21ISGHKTN9T0a9SvESf
-qy9rg3LvdYDaBjMbXcjaY8ZNzaxmMc3R3j6HEDbhuaR672BQssvKplbgN6+rNBM5Jeg5ZuSYeqoS
-mJxZZoY+rfGwyj4GD3vwEUs3oERte8uojHH01bWRNszwFcYr3lEXsZdMUD2xlVl8BX0tIdUAvwFn
-ol57plzy9yLxkA2T26pEUWbMfXYD62qoKjgZl3YNa4ph+bz27nb9cCvdKTz4Ch5bQhyLVi9VGxyh
-LrXHFub4qjySjmm2AcG1hp2JDws4lFTo6tyePSW8Uybt1as5qsVATFSrsrTZ2fjXctscvG29ZV/v
-iDUqZi/u9rNl8DONfJhBaUYPQxxp+pu10GFqzcpL2UyQRqsVWaFHVCkugyhfHMKiq3IXAAaOReyL
-4jM9f9oZRORicsPfIsbyVtTdX5Vy7W1f90gDW/3FKqD2cyOEEBsB5wIDAQABo0IwQDAOBgNVHQ8B
-Af8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU43HgntinQtnbcZFrlJPrw6PRFKMw
-DQYJKoZIhvcNAQELBQADggIBAEf63QqwEZE4rU1d9+UOl1QZgkiHVIyqZJnYWv6IAcVYpZmxI1Qj
-t2odIFflAWJBF9MJ23XLblSQdf4an4EKwt3X9wnQW3IV5B4Jaj0z8yGa5hV+rVHVDRDtfULAj+7A
-mgjVQdZcDiFpboBhDhXAuM/FSRJSzL46zNQuOAXeNf0fb7iAaJg9TaDKQGXSc3z1i9kKlT/YPyNt
-GtEqJBnZhbMX73huqVjRI9PHE+1yJX9dsXNw0H8GlwmEKYBhHfpe/3OsoOOJuBxxFcbeMX8S3OFt
-m6/n6J91eEyrRjuazr8FGF1NFTwWmhlQBJqymm9li1JfPFgEKCXAZmExfrngdbkaqIHWchezxQMx
-NRF4eKLg6TCMf4DfWN88uieW4oA0beOY02QnrEh+KHdcxiVhJfiFDGX6xDIvpZgF5PgLZxYWxoK4
-Mhn5+bl53B/N66+rDt0b20XkeucC4pVd/GnwU2lhlXV5C15V5jgclKlZM57IcXR5f1GJtshquDDI
-ajjDbp7hNxbqBWJMWxJH7ae0s1hWx0nzfxJoCTFx8G34Tkf71oXuxVhAGaQdp/lLQzfcaFpPz+vC
-ZHTetBXZ9FRUGi8c15dxVJCO2SCdUyt/q4/i6jC8UDfv8Ue1fXwsBOxonbRJRBD0ckscZOf85muQ
-3Wl9af0AVqW3rLatt8o+Ae+c
------END CERTIFICATE-----
-
-Entrust Root Certification Authority - G2
-=========================================
------BEGIN CERTIFICATE-----
-MIIEPjCCAyagAwIBAgIESlOMKDANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMCVVMxFjAUBgNV
-BAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVy
-bXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ug
-b25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIw
-HhcNMDkwNzA3MTcyNTU0WhcNMzAxMjA3MTc1NTU0WjCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoT
-DUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMx
-OTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25s
-eTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hLZy254Ma+KZ6TABp3bqMriVQRrJ2mFOWHLP
-/vaCeb9zYQYKpSfYs1/TRU4cctZOMvJyig/3gxnQaoCAAEUesMfnmr8SVycco2gvCoe9amsOXmXz
-HHfV1IWNcCG0szLni6LVhjkCsbjSR87kyUnEO6fe+1R9V77w6G7CebI6C1XiUJgWMhNcL3hWwcKU
-s/Ja5CeanyTXxuzQmyWC48zCxEXFjJd6BmsqEZ+pCm5IO2/b1BEZQvePB7/1U1+cPvQXLOZprE4y
-TGJ36rfo5bs0vBmLrpxR57d+tVOxMyLlbc9wPBr64ptntoP0jaWvYkxN4FisZDQSA/i2jZRjJKRx
-AgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqciZ6
-0B7vfec7aVHUbI2fkBJmqzANBgkqhkiG9w0BAQsFAAOCAQEAeZ8dlsa2eT8ijYfThwMEYGprmi5Z
-iXMRrEPR9RP/jTkrwPK9T3CMqS/qF8QLVJ7UG5aYMzyorWKiAHarWWluBh1+xLlEjZivEtRh2woZ
-Rkfz6/djwUAFQKXSt/S1mja/qYh2iARVBCuch38aNzx+LaUa2NSJXsq9rD1s2G2v1fN2D807iDgi
-nWyTmsQ9v4IbZT+mD12q/OWyFcq1rca8PdCE6OoGcrBNOTJ4vz4RnAuknZoh8/CbCzB428Hch0P+
-vGOaysXCHMnHjf87ElgI5rY97HosTvuDls4MPGmHVHOkc8KT/1EQrBVUAdj8BbGJoX90g5pJ19xO
-e4pIb4tF9g==
------END CERTIFICATE-----
-
-Entrust Root Certification Authority - EC1
-==========================================
------BEGIN CERTIFICATE-----
-MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkGA1UEBhMCVVMx
-FjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVn
-YWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXpl
-ZCB1c2Ugb25seTEzMDEGA1UEAxMqRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5
-IC0gRUMxMB4XDTEyMTIxODE1MjUzNloXDTM3MTIxODE1NTUzNlowgb8xCzAJBgNVBAYTAlVTMRYw
-FAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2Fs
-LXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQg
-dXNlIG9ubHkxMzAxBgNVBAMTKkVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt
-IEVDMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABIQTydC6bUF74mzQ61VfZgIaJPRbiWlH47jCffHy
-AsWfoPZb1YsGGYZPUxBtByQnoaD41UcZYUx9ypMn6nQM72+WCf5j7HBdNq1nd67JnXxVRDqiY1Ef
-9eNi1KlHBz7MIKNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE
-FLdj5xrdjekIplWDpOBqUEFlEUJJMAoGCCqGSM49BAMDA2cAMGQCMGF52OVCR98crlOZF7ZvHH3h
-vxGU0QOIdeSNiaSKd0bebWHvAvX7td/M/k7//qnmpwIwW5nXhTcGtXsI/esni0qU+eH6p44mCOh8
-kmhtc9hvJqwhAriZtyZBWyVgrtBIGu4G
------END CERTIFICATE-----
-
-CFCA EV ROOT
-============
------BEGIN CERTIFICATE-----
-MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJDTjEwMC4GA1UE
-CgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQDDAxDRkNB
-IEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkxMjMxMDMwNzAxWjBWMQswCQYDVQQGEwJDTjEw
-MC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQD
-DAxDRkNBIEVWIFJPT1QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXXWvNED8fBVnV
-BU03sQ7smCuOFR36k0sXgiFxEFLXUWRwFsJVaU2OFW2fvwwbwuCjZ9YMrM8irq93VCpLTIpTUnrD
-7i7es3ElweldPe6hL6P3KjzJIx1qqx2hp/Hz7KDVRM8Vz3IvHWOX6Jn5/ZOkVIBMUtRSqy5J35DN
-uF++P96hyk0g1CXohClTt7GIH//62pCfCqktQT+x8Rgp7hZZLDRJGqgG16iI0gNyejLi6mhNbiyW
-ZXvKWfry4t3uMCz7zEasxGPrb382KzRzEpR/38wmnvFyXVBlWY9ps4deMm/DGIq1lY+wejfeWkU7
-xzbh72fROdOXW3NiGUgthxwG+3SYIElz8AXSG7Ggo7cbcNOIabla1jj0Ytwli3i/+Oh+uFzJlU9f
-py25IGvPa931DfSCt/SyZi4QKPaXWnuWFo8BGS1sbn85WAZkgwGDg8NNkt0yxoekN+kWzqotaK8K
-gWU6cMGbrU1tVMoqLUuFG7OA5nBFDWteNfB/O7ic5ARwiRIlk9oKmSJgamNgTnYGmE69g60dWIol
-hdLHZR4tjsbftsbhf4oEIRUpdPA+nJCdDC7xij5aqgwJHsfVPKPtl8MeNPo4+QgO48BdK4PRVmrJ
-tqhUUy54Mmc9gn900PvhtgVguXDbjgv5E1hvcWAQUhC5wUEJ73IfZzF4/5YFjQIDAQABo2MwYTAf
-BgNVHSMEGDAWgBTj/i39KNALtbq2osS/BqoFjJP7LzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB
-/wQEAwIBBjAdBgNVHQ4EFgQU4/4t/SjQC7W6tqLEvwaqBYyT+y8wDQYJKoZIhvcNAQELBQADggIB
-ACXGumvrh8vegjmWPfBEp2uEcwPenStPuiB/vHiyz5ewG5zz13ku9Ui20vsXiObTej/tUxPQ4i9q
-ecsAIyjmHjdXNYmEwnZPNDatZ8POQQaIxffu2Bq41gt/UP+TqhdLjOztUmCypAbqTuv0axn96/Ua
-4CUqmtzHQTb3yHQFhDmVOdYLO6Qn+gjYXB74BGBSESgoA//vU2YApUo0FmZ8/Qmkrp5nGm9BC2sG
-E5uPhnEFtC+NiWYzKXZUmhH4J/qyP5Hgzg0b8zAarb8iXRvTvyUFTeGSGn+ZnzxEk8rUQElsgIfX
-BDrDMlI1Dlb4pd19xIsNER9Tyx6yF7Zod1rg1MvIB671Oi6ON7fQAUtDKXeMOZePglr4UeWJoBjn
-aH9dCi77o0cOPaYjesYBx4/IXr9tgFa+iiS6M+qf4TIRnvHST4D2G0CvOJ4RUHlzEhLN5mydLIhy
-PDCBBpEi6lmt2hkuIsKNuYyH4Ga8cyNfIWRjgEj1oDwYPZTISEEdQLpe/v5WOaHIz16eGWRGENoX
-kbcFgKyLmZJ956LYBws2J+dIeWCKw9cTXPhyQN9Ky8+ZAAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3C
-ekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su
------END CERTIFICATE-----
-
-OISTE WISeKey Global Root GB CA
-===============================
------BEGIN CERTIFICATE-----
-MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBtMQswCQYDVQQG
-EwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNl
-ZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwgUm9vdCBHQiBDQTAeFw0xNDEyMDExNTAw
-MzJaFw0zOTEyMDExNTEwMzFaMG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYD
-VQQLExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEds
-b2JhbCBSb290IEdCIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be3HEokKtaX
-scriHvt9OO+Y9bI5mE4nuBFde9IllIiCFSZqGzG7qFshISvYD06fWvGxWuR51jIjK+FTzJlFXHtP
-rby/h0oLS5daqPZI7H17Dc0hBt+eFf1Biki3IPShehtX1F1Q/7pn2COZH8g/497/b1t3sWtuuMlk
-9+HKQUYOKXHQuSP8yYFfTvdv37+ErXNku7dCjmn21HYdfp2nuFeKUWdy19SouJVUQHMD9ur06/4o
-Qnc/nSMbsrY9gBQHTC5P99UKFg29ZkM3fiNDecNAhvVMKdqOmq0NpQSHiB6F4+lT1ZvIiwNjeOvg
-GUpuuy9rM2RYk61pv48b74JIxwIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
-/zAdBgNVHQ4EFgQUNQ/INmNe4qPs+TtmFc5RUuORmj0wEAYJKwYBBAGCNxUBBAMCAQAwDQYJKoZI
-hvcNAQELBQADggEBAEBM+4eymYGQfp3FsLAmzYh7KzKNbrghcViXfa43FK8+5/ea4n32cZiZBKpD
-dHij40lhPnOMTZTg+XHEthYOU3gf1qKHLwI5gSk8rxWYITD+KJAAjNHhy/peyP34EEY7onhCkRd0
-VQreUGdNZtGn//3ZwLWoo4rOZvUPQ82nK1d7Y0Zqqi5S2PTt4W2tKZB4SLrhI6qjiey1q5bAtEui
-HZeeevJuQHHfaPFlTc58Bd9TZaml8LGXBHAVRgOY1NK/VLSgWH1Sb9pWJmLU2NuJMW8c8CLC02Ic
-Nc1MaRVUGpCY3useX8p3x8uOPUNpnJpY0CQ73xtAln41rYHHTnG6iBM=
------END CERTIFICATE-----
-
-SZAFIR ROOT CA2
-===============
------BEGIN CERTIFICATE-----
-MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQELBQAwUTELMAkG
-A1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6ZW5pb3dhIFMuQS4xGDAWBgNV
-BAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkwNzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJ
-BgNVBAYTAlBMMSgwJgYDVQQKDB9LcmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYD
-VQQDDA9TWkFGSVIgUk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5Q
-qEvNQLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT3PSQ1hNK
-DJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw3gAeqDRHu5rr/gsUvTaE
-2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr63fE9biCloBK0TXC5ztdyO4mTp4CEHCdJ
-ckm1/zuVnsHMyAHs6A6KCpbns6aH5db5BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwi
-ieDhZNRnvDF5YTy7ykHNXGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
-AQH/BAQDAgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsFAAOC
-AQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw8PRBEew/R40/cof5
-O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOGnXkZ7/e7DDWQw4rtTw/1zBLZpD67
-oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCPoky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul
-4+vJhaAlIDf7js4MNIThPIGyd05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6
-+/NNIxuZMzSgLvWpCz/UXeHPhJ/iGcJfitYgHuNztw==
------END CERTIFICATE-----
-
-Certum Trusted Network CA 2
-===========================
------BEGIN CERTIFICATE-----
-MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCBgDELMAkGA1UE
-BhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMuQS4xJzAlBgNVBAsTHkNlcnR1
-bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIGA1UEAxMbQ2VydHVtIFRydXN0ZWQgTmV0d29y
-ayBDQSAyMCIYDzIwMTExMDA2MDgzOTU2WhgPMjA0NjEwMDYwODM5NTZaMIGAMQswCQYDVQQGEwJQ
-TDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENl
-cnRpZmljYXRpb24gQXV0aG9yaXR5MSQwIgYDVQQDExtDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENB
-IDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9+Xj45tWADGSdhhuWZGc/IjoedQF9
-7/tcZ4zJzFxrqZHmuULlIEub2pt7uZld2ZuAS9eEQCsn0+i6MLs+CRqnSZXvK0AkwpfHp+6bJe+o
-CgCXhVqqndwpyeI1B+twTUrWwbNWuKFBOJvR+zF/j+Bf4bE/D44WSWDXBo0Y+aomEKsq09DRZ40b
-Rr5HMNUuctHFY9rnY3lEfktjJImGLjQ/KUxSiyqnwOKRKIm5wFv5HdnnJ63/mgKXwcZQkpsCLL2p
-uTRZCr+ESv/f/rOf69me4Jgj7KZrdxYq28ytOxykh9xGc14ZYmhFV+SQgkK7QtbwYeDBoz1mo130
-GO6IyY0XRSmZMnUCMe4pJshrAua1YkV/NxVaI2iJ1D7eTiew8EAMvE0Xy02isx7QBlrd9pPPV3WZ
-9fqGGmd4s7+W/jTcvedSVuWz5XV710GRBdxdaeOVDUO5/IOWOZV7bIBaTxNyxtd9KXpEulKkKtVB
-Rgkg/iKgtlswjbyJDNXXcPiHUv3a76xRLgezTv7QCdpw75j6VuZt27VXS9zlLCUVyJ4ueE742pye
-hizKV/Ma5ciSixqClnrDvFASadgOWkaLOusm+iPJtrCBvkIApPjW/jAux9JG9uWOdf3yzLnQh1vM
-BhBgu4M1t15n3kfsmUjxpKEV/q2MYo45VU85FrmxY53/twIDAQABo0IwQDAPBgNVHRMBAf8EBTAD
-AQH/MB0GA1UdDgQWBBS2oVQ5AsOgP46KvPrU+Bym0ToO/TAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZI
-hvcNAQENBQADggIBAHGlDs7k6b8/ONWJWsQCYftMxRQXLYtPU2sQF/xlhMcQSZDe28cmk4gmb3DW
-Al45oPePq5a1pRNcgRRtDoGCERuKTsZPpd1iHkTfCVn0W3cLN+mLIMb4Ck4uWBzrM9DPhmDJ2vuA
-L55MYIR4PSFk1vtBHxgP58l1cb29XN40hz5BsA72udY/CROWFC/emh1auVbONTqwX3BNXuMp8SMo
-clm2q8KMZiYcdywmdjWLKKdpoPk79SPdhRB0yZADVpHnr7pH1BKXESLjokmUbOe3lEu6LaTaM4tM
-pkT/WjzGHWTYtTHkpjx6qFcL2+1hGsvxznN3Y6SHb0xRONbkX8eftoEq5IVIeVheO/jbAoJnwTnb
-w3RLPTYe+SmTiGhbqEQZIfCn6IENLOiTNrQ3ssqwGyZ6miUfmpqAnksqP/ujmv5zMnHCnsZy4Ypo
-J/HkD7TETKVhk/iXEAcqMCWpuchxuO9ozC1+9eB+D4Kob7a6bINDd82Kkhehnlt4Fj1F4jNy3eFm
-ypnTycUm/Q1oBEauttmbjL4ZvrHG8hnjXALKLNhvSgfZyTXaQHXyxKcZb55CEJh15pWLYLztxRLX
-is7VmFxWlgPF7ncGNf/P5O4/E2Hu29othfDNrp2yGAlFw5Khchf8R7agCyzxxN5DaAhqXzvwdmP7
-zAYspsbiDrW5viSP
------END CERTIFICATE-----
-
-Hellenic Academic and Research Institutions RootCA 2015
-=======================================================
------BEGIN CERTIFICATE-----
-MIIGCzCCA/OgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBpjELMAkGA1UEBhMCR1IxDzANBgNVBAcT
-BkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0
-aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl
-YXJjaCBJbnN0aXR1dGlvbnMgUm9vdENBIDIwMTUwHhcNMTUwNzA3MTAxMTIxWhcNNDAwNjMwMTAx
-MTIxWjCBpjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMg
-QWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNV
-BAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgUm9vdENBIDIw
-MTUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDC+Kk/G4n8PDwEXT2QNrCROnk8Zlrv
-bTkBSRq0t89/TSNTt5AA4xMqKKYx8ZEA4yjsriFBzh/a/X0SWwGDD7mwX5nh8hKDgE0GPt+sr+eh
-iGsxr/CL0BgzuNtFajT0AoAkKAoCFZVedioNmToUW/bLy1O8E00BiDeUJRtCvCLYjqOWXjrZMts+
-6PAQZe104S+nfK8nNLspfZu2zwnI5dMK/IhlZXQK3HMcXM1AsRzUtoSMTFDPaI6oWa7CJ06CojXd
-FPQf/7J31Ycvqm59JCfnxssm5uX+Zwdj2EUN3TpZZTlYepKZcj2chF6IIbjV9Cz82XBST3i4vTwr
-i5WY9bPRaM8gFH5MXF/ni+X1NYEZN9cRCLdmvtNKzoNXADrDgfgXy5I2XdGj2HUb4Ysn6npIQf1F
-GQatJ5lOwXBH3bWfgVMS5bGMSF0xQxfjjMZ6Y5ZLKTBOhE5iGV48zpeQpX8B653g+IuJ3SWYPZK2
-fu/Z8VFRfS0myGlZYeCsargqNhEEelC9MoS+L9xy1dcdFkfkR2YgP/SWxa+OAXqlD3pk9Q0Yh9mu
-iNX6hME6wGkoLfINaFGq46V3xqSQDqE3izEjR8EJCOtu93ib14L8hCCZSRm2Ekax+0VVFqmjZayc
-Bw/qa9wfLgZy7IaIEuQt218FL+TwA9MmM+eAws1CoRc0CwIDAQABo0IwQDAPBgNVHRMBAf8EBTAD
-AQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUcRVnyMjJvXVdctA4GGqd83EkVAswDQYJKoZI
-hvcNAQELBQADggIBAHW7bVRLqhBYRjTyYtcWNl0IXtVsyIe9tC5G8jH4fOpCtZMWVdyhDBKg2mF+
-D1hYc2Ryx+hFjtyp8iY/xnmMsVMIM4GwVhO+5lFc2JsKT0ucVlMC6U/2DWDqTUJV6HwbISHTGzrM
-d/K4kPFox/la/vot9L/J9UUbzjgQKjeKeaO04wlshYaT/4mWJ3iBj2fjRnRUjtkNaeJK9E10A/+y
-d+2VZ5fkscWrv2oj6NSU4kQoYsRL4vDY4ilrGnB+JGGTe08DMiUNRSQrlrRGar9KC/eaj8GsGsVn
-82800vpzY4zvFrCopEYq+OsS7HK07/grfoxSwIuEVPkvPuNVqNxmsdnhX9izjFk0WaSrT2y7Hxjb
-davYy5LNlDhhDgcGH0tGEPEVvo2FXDtKK4F5D7Rpn0lQl033DlZdwJVqwjbDG2jJ9SrcR5q+ss7F
-Jej6A7na+RZukYT1HCjI/CbM1xyQVqdfbzoEvM14iQuODy+jqk+iGxI9FghAD/FGTNeqewjBCvVt
-J94Cj8rDtSvK6evIIVM4pcw72Hc3MKJP2W/R8kCtQXoXxdZKNYm3QdV8hn9VTYNKpXMgwDqvkPGa
-JI7ZjnHKe7iG2rKPmT4dEw0SEe7Uq/DpFXYC5ODfqiAeW2GFZECpkJcNrVPSWh2HagCXZWK0vm9q
-p/UsQu0yrbYhnr68
------END CERTIFICATE-----
-
-Hellenic Academic and Research Institutions ECC RootCA 2015
-===========================================================
------BEGIN CERTIFICATE-----
-MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzANBgNVBAcTBkF0
-aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9u
-cyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj
-aCBJbnN0aXR1dGlvbnMgRUNDIFJvb3RDQSAyMDE1MB4XDTE1MDcwNzEwMzcxMloXDTQwMDYzMDEw
-MzcxMlowgaoxCzAJBgNVBAYTAkdSMQ8wDQYDVQQHEwZBdGhlbnMxRDBCBgNVBAoTO0hlbGxlbmlj
-IEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUQwQgYD
-VQQDEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIEVDQyBSb290
-Q0EgMjAxNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABJKgQehLgoRc4vgxEZmGZE4JJS+dQS8KrjVP
-dJWyUWRrjWvmP3CV8AVER6ZyOFB2lQJajq4onvktTpnvLEhvTCUp6NFxW98dwXU3tNf6e3pCnGoK
-Vlp8aQuqgAkkbH7BRqNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0O
-BBYEFLQiC4KZJAEOnLvkDv2/+5cgk5kqMAoGCCqGSM49BAMCA2cAMGQCMGfOFmI4oqxiRaeplSTA
-GiecMjvAwNW6qef4BENThe5SId6d9SWDPp5YSy/XZxMOIQIwBeF1Ad5o7SofTUwJCA3sS61kFyjn
-dc5FZXIhF8siQQ6ME5g4mlRtm8rifOoCWCKR
------END CERTIFICATE-----
-
-ISRG Root X1
-============
------BEGIN CERTIFICATE-----
-MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAwTzELMAkGA1UE
-BhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNoIEdyb3VwMRUwEwYDVQQD
-EwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQG
-EwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMT
-DElTUkcgUm9vdCBYMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54r
-Vygch77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+0TM8ukj1
-3Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6UA5/TR5d8mUgjU+g4rk8K
-b4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sWT8KOEUt+zwvo/7V3LvSye0rgTBIlDHCN
-Aymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyHB5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ
-4Q7e2RCOFvu396j3x+UCB5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf
-1b0SHzUvKBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWnOlFu
-hjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTnjh8BCNAw1FtxNrQH
-usEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbwqHyGO0aoSCqI3Haadr8faqU9GY/r
-OPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CIrU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4G
-A1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY
-9umbbjANBgkqhkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
-ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ3BebYhtF8GaV
-0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KKNFtY2PwByVS5uCbMiogziUwt
-hDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJw
-TdwJx4nLCgdNbOhdjsnvzqvHu7UrTkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nx
-e5AW0wdeRlN8NwdCjNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZA
-JzVcoyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq4RgqsahD
-YVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPAmRGunUHBcnWEvgJBQl9n
-JEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57demyPxgcYxn/eR44/KJ4EBs+lVDR3veyJ
-m+kXQ99b21/+jh5Xos1AnX5iItreGCc=
------END CERTIFICATE-----
-
-AC RAIZ FNMT-RCM
-================
------BEGIN CERTIFICATE-----
-MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsxCzAJBgNVBAYT
-AkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJWiBGTk1ULVJDTTAeFw0wODEw
-MjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJD
-TTEZMBcGA1UECwwQQUMgUkFJWiBGTk1ULVJDTTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
-ggIBALpxgHpMhm5/yBNtwMZ9HACXjywMI7sQmkCpGreHiPibVmr75nuOi5KOpyVdWRHbNi63URcf
-qQgfBBckWKo3Shjf5TnUV/3XwSyRAZHiItQDwFj8d0fsjz50Q7qsNI1NOHZnjrDIbzAzWHFctPVr
-btQBULgTfmxKo0nRIBnuvMApGGWn3v7v3QqQIecaZ5JCEJhfTzC8PhxFtBDXaEAUwED653cXeuYL
-j2VbPNmaUtu1vZ5Gzz3rkQUCwJaydkxNEJY7kvqcfw+Z374jNUUeAlz+taibmSXaXvMiwzn15Cou
-08YfxGyqxRxqAQVKL9LFwag0Jl1mpdICIfkYtwb1TplvqKtMUejPUBjFd8g5CSxJkjKZqLsXF3mw
-WsXmo8RZZUc1g16p6DULmbvkzSDGm0oGObVo/CK67lWMK07q87Hj/LaZmtVC+nFNCM+HHmpxffnT
-tOmlcYF7wk5HlqX2doWjKI/pgG6BU6VtX7hI+cL5NqYuSf+4lsKMB7ObiFj86xsc3i1w4peSMKGJ
-47xVqCfWS+2QrYv6YyVZLag13cqXM7zlzced0ezvXg5KkAYmY6252TUtB7p2ZSysV4999AeU14EC
-ll2jB0nVetBX+RvnU0Z1qrB5QstocQjpYL05ac70r8NWQMetUqIJ5G+GR4of6ygnXYMgrwTJbFaa
-i0b1AgMBAAGjgYMwgYAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE
-FPd9xf3E6Jobd2Sn9R2gzL+HYJptMD4GA1UdIAQ3MDUwMwYEVR0gADArMCkGCCsGAQUFBwIBFh1o
-dHRwOi8vd3d3LmNlcnQuZm5tdC5lcy9kcGNzLzANBgkqhkiG9w0BAQsFAAOCAgEAB5BK3/MjTvDD
-nFFlm5wioooMhfNzKWtN/gHiqQxjAb8EZ6WdmF/9ARP67Jpi6Yb+tmLSbkyU+8B1RXxlDPiyN8+s
-D8+Nb/kZ94/sHvJwnvDKuO+3/3Y3dlv2bojzr2IyIpMNOmqOFGYMLVN0V2Ue1bLdI4E7pWYjJ2cJ
-j+F3qkPNZVEI7VFY/uY5+ctHhKQV8Xa7pO6kO8Rf77IzlhEYt8llvhjho6Tc+hj507wTmzl6NLrT
-Qfv6MooqtyuGC2mDOL7Nii4LcK2NJpLuHvUBKwrZ1pebbuCoGRw6IYsMHkCtA+fdZn71uSANA+iW
-+YJF1DngoABd15jmfZ5nc8OaKveri6E6FO80vFIOiZiaBECEHX5FaZNXzuvO+FB8TxxuBEOb+dY7
-Ixjp6o7RTUaN8Tvkasq6+yO3m/qZASlaWFot4/nUbQ4mrcFuNLwy+AwF+mWj2zs3gyLp1txyM/1d
-8iC9djwj2ij3+RvrWWTV3F9yfiD8zYm1kGdNYno/Tq0dwzn+evQoFt9B9kiABdcPUXmsEKvU7ANm
-5mqwujGSQkBqvjrTcuFqN1W8rB2Vt2lh8kORdOag0wokRqEIr9baRRmW1FMdW4R58MD3R++Lj8UG
-rp1MYp3/RgT408m2ECVAdf4WqslKYIYvuu8wd+RU4riEmViAqhOLUTpPSPaLtrM=
------END CERTIFICATE-----
-
-Amazon Root CA 1
-================
------BEGIN CERTIFICATE-----
-MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsFADA5MQswCQYD
-VQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAxMB4XDTE1
-MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpv
-bjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBALJ4gHHKeNXjca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgH
-FzZM9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qwIFAGbHrQ
-gLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6VOujw5H5SNz/0egwLX0t
-dHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L93FcXmn/6pUCyziKrlA4b9v7LWIbxcce
-VOF34GfID5yHI9Y/QCB/IIDEgEw+OyQmjgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB
-/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3
-DQEBCwUAA4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDIU5PM
-CCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUsN+gDS63pYaACbvXy
-8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vvo/ufQJVtMVT8QtPHRh8jrdkPSHCa
-2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2
-xJNDd2ZhwLnoQdeXeGADbkpyrqXRfboQnoZsG4q5WTP468SQvvG5
------END CERTIFICATE-----
-
-Amazon Root CA 2
-================
------BEGIN CERTIFICATE-----
-MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwFADA5MQswCQYD
-VQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAyMB4XDTE1
-MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpv
-bjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
-ggIBAK2Wny2cSkxKgXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4
-kHbZW0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg1dKmSYXp
-N+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K8nu+NQWpEjTj82R0Yiw9
-AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvd
-fLC6HM783k81ds8P+HgfajZRRidhW+mez/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAEx
-kv8LV/SasrlX6avvDXbR8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSS
-btqDT6ZjmUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz7Mt0
-Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6+XUyo05f7O0oYtlN
-c/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI0u1ufm8/0i2BWSlmy5A5lREedCf+
-3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSw
-DPBMMPQFWAJI/TPlUq9LhONmUjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oA
-A7CXDpO8Wqj2LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY
-+gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kSk5Nrp+gvU5LE
-YFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl7uxMMne0nxrpS10gxdr9HIcW
-xkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygmbtmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQ
-gj9sAq+uEjonljYE1x2igGOpm/HlurR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbW
-aQbLU8uz/mtBzUF+fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoV
-Yh63n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE76KlXIx3
-KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H9jVlpNMKVv/1F2Rs76gi
-JUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT4PsJYGw=
------END CERTIFICATE-----
-
-Amazon Root CA 3
-================
------BEGIN CERTIFICATE-----
-MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5MQswCQYDVQQG
-EwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSAzMB4XDTE1MDUy
-NjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZ
-MBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZB
-f8ANm+gBG1bG8lKlui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjr
-Zt6jQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSrttvXBp43
-rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkrBqWTrBqYaGFy+uGh0Psc
-eGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteMYyRIHN8wfdVoOw==
------END CERTIFICATE-----
-
-Amazon Root CA 4
-================
------BEGIN CERTIFICATE-----
-MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5MQswCQYDVQQG
-EwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24gUm9vdCBDQSA0MB4XDTE1MDUy
-NjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZ
-MBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN
-/sGKe0uoe0ZLY7Bi9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri
-83BkM6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
-HQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WBMAoGCCqGSM49BAMDA2gA
-MGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlwCkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1
-AE47xDqUEpHJWEadIRNyp4iciuRMStuW1KyLa2tJElMzrdfkviT8tQp21KW8EA==
------END CERTIFICATE-----
-
-TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
-=============================================
------BEGIN CERTIFICATE-----
-MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIxGDAWBgNVBAcT
-D0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxpbXNlbCB2ZSBUZWtub2xvamlr
-IEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0wKwYDVQQLEyRLYW11IFNlcnRpZmlrYXN5b24g
-TWVya2V6aSAtIEthbXUgU00xNjA0BgNVBAMTLVRVQklUQUsgS2FtdSBTTSBTU0wgS29rIFNlcnRp
-ZmlrYXNpIC0gU3VydW0gMTAeFw0xMzExMjUwODI1NTVaFw00MzEwMjUwODI1NTVaMIHSMQswCQYD
-VQQGEwJUUjEYMBYGA1UEBxMPR2ViemUgLSBLb2NhZWxpMUIwQAYDVQQKEzlUdXJraXllIEJpbGlt
-c2VsIHZlIFRla25vbG9qaWsgQXJhc3Rpcm1hIEt1cnVtdSAtIFRVQklUQUsxLTArBgNVBAsTJEth
-bXUgU2VydGlmaWthc3lvbiBNZXJrZXppIC0gS2FtdSBTTTE2MDQGA1UEAxMtVFVCSVRBSyBLYW11
-IFNNIFNTTCBLb2sgU2VydGlmaWthc2kgLSBTdXJ1bSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-MIIBCgKCAQEAr3UwM6q7a9OZLBI3hNmNe5eA027n/5tQlT6QlVZC1xl8JoSNkvoBHToP4mQ4t4y8
-6Ij5iySrLqP1N+RAjhgleYN1Hzv/bKjFxlb4tO2KRKOrbEz8HdDc72i9z+SqzvBV96I01INrN3wc
-wv61A+xXzry0tcXtAA9TNypN9E8Mg/uGz8v+jE69h/mniyFXnHrfA2eJLJ2XYacQuFWQfw4tJzh0
-3+f92k4S400VIgLI4OD8D62K18lUUMw7D8oWgITQUVbDjlZ/iSIzL+aFCr2lqBs23tPcLG07xxO9
-WSMs5uWk99gL7eqQQESolbuT1dCANLZGeA4fAJNG4e7p+exPFwIDAQABo0IwQDAdBgNVHQ4EFgQU
-ZT/HiobGPN08VFw1+DrtUgxHV8gwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJ
-KoZIhvcNAQELBQADggEBACo/4fEyjq7hmFxLXs9rHmoJ0iKpEsdeV31zVmSAhHqT5Am5EM2fKifh
-AHe+SMg1qIGf5LgsyX8OsNJLN13qudULXjS99HMpw+0mFZx+CFOKWI3QSyjfwbPfIPP54+M638yc
-lNhOT8NrF7f3cuitZjO1JVOr4PhMqZ398g26rrnZqsZr+ZO7rqu4lzwDGrpDxpa5RXI4s6ehlj2R
-e37AIVNMh+3yC1SVUZPVIqUNivGTDj5UDrDYyU7c8jEyVupk+eq1nRZmQnLzf9OxMUP8pI4X8W0j
-q5Rm+K37DwhuJi1/FwcJsoz7UMCflo3Ptv0AnVoUmr8CRPXBwp8iXqIPoeM=
------END CERTIFICATE-----
-
-GDCA TrustAUTH R5 ROOT
-======================
------BEGIN CERTIFICATE-----
-MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UEBhMCQ04xMjAw
-BgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZIENPLixMVEQuMR8wHQYDVQQD
-DBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0MTEyNjA1MTMxNVoXDTQwMTIzMTE1NTk1OVow
-YjELMAkGA1UEBhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ
-IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMIICIjANBgkqhkiG9w0B
-AQEFAAOCAg8AMIICCgKCAgEA2aMW8Mh0dHeb7zMNOwZ+Vfy1YI92hhJCfVZmPoiC7XJjDp6L3TQs
-AlFRwxn9WVSEyfFrs0yw6ehGXTjGoqcuEVe6ghWinI9tsJlKCvLriXBjTnnEt1u9ol2x8kECK62p
-OqPseQrsXzrj/e+APK00mxqriCZ7VqKChh/rNYmDf1+uKU49tm7srsHwJ5uu4/Ts765/94Y9cnrr
-pftZTqfrlYwiOXnhLQiPzLyRuEH3FMEjqcOtmkVEs7LXLM3GKeJQEK5cy4KOFxg2fZfmiJqwTTQJ
-9Cy5WmYqsBebnh52nUpmMUHfP/vFBu8btn4aRjb3ZGM74zkYI+dndRTVdVeSN72+ahsmUPI2JgaQ
-xXABZG12ZuGR224HwGGALrIuL4xwp9E7PLOR5G62xDtw8mySlwnNR30YwPO7ng/Wi64HtloPzgsM
-R6flPri9fcebNaBhlzpBdRfMK5Z3KpIhHtmVdiBnaM8Nvd/WHwlqmuLMc3GkL30SgLdTMEZeS1SZ
-D2fJpcjyIMGC7J0R38IC+xo70e0gmu9lZJIQDSri3nDxGGeCjGHeuLzRL5z7D9Ar7Rt2ueQ5Vfj4
-oR24qoAATILnsn8JuLwwoC8N9VKejveSswoAHQBUlwbgsQfZxw9cZX08bVlX5O2ljelAU58VS6Bx
-9hoh49pwBiFYFIeFd3mqgnkCAwEAAaNCMEAwHQYDVR0OBBYEFOLJQJ9NzuiaoXzPDj9lxSmIahlR
-MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQDRSVfg
-p8xoWLoBDysZzY2wYUWsEe1jUGn4H3++Fo/9nesLqjJHdtJnJO29fDMylyrHBYZmDRd9FBUb1Ov9
-H5r2XpdptxolpAqzkT9fNqyL7FeoPueBihhXOYV0GkLH6VsTX4/5COmSdI31R9KrO9b7eGZONn35
-6ZLpBN79SWP8bfsUcZNnL0dKt7n/HipzcEYwv1ryL3ml4Y0M2fmyYzeMN2WFcGpcWwlyua1jPLHd
-+PwyvzeG5LuOmCd+uh8W4XAR8gPfJWIyJyYYMoSf/wA6E7qaTfRPuBRwIrHKK5DOKcFw9C+df/KQ
-HtZa37dG/OaG+svgIHZ6uqbL9XzeYqWxi+7egmaKTjowHz+Ay60nugxe19CxVsp3cbK1daFQqUBD
-F8Io2c9Si1vIY9RCPqAzekYu9wogRlR+ak8x8YF+QnQ4ZXMn7sZ8uI7XpTrXmKGcjBBV09tL7ECQ
-8s1uV9JiDnxXk7Gnbc2dg7sq5+W2O3FYrf3RRbxake5TFW/TRQl1brqQXR4EzzffHqhmsYzmIGrv
-/EhOdJhCrylvLmrH+33RZjEizIYAfmaDDEL0vTSSwxrqT8p+ck0LcIymSLumoRT2+1hEmRSuqguT
-aaApJUqlyyvdimYHFngVV3Eb7PVHhPOeMTd61X8kreS8/f3MboPoDKi3QWwH3b08hpcv0g==
------END CERTIFICATE-----
-
-SSL.com Root Certification Authority RSA
-========================================
------BEGIN CERTIFICATE-----
-MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxDjAM
-BgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24x
-MTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBSU0EwHhcNMTYw
-MjEyMTczOTM5WhcNNDEwMjEyMTczOTM5WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMx
-EDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NM
-LmNvbSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTCCAiIwDQYJKoZIhvcNAQEBBQAD
-ggIPADCCAgoCggIBAPkP3aMrfcvQKv7sZ4Wm5y4bunfh4/WvpOz6Sl2RxFdHaxh3a3by/ZPkPQ/C
-Fp4LZsNWlJ4Xg4XOVu/yFv0AYvUiCVToZRdOQbngT0aXqhvIuG5iXmmxX9sqAn78bMrzQdjt0Oj8
-P2FI7bADFB0QDksZ4LtO7IZl/zbzXmcCC52GVWH9ejjt/uIZALdvoVBidXQ8oPrIJZK0bnoix/ge
-oeOy3ZExqysdBP+lSgQ36YWkMyv94tZVNHwZpEpox7Ko07fKoZOI68GXvIz5HdkihCR0xwQ9aqkp
-k8zruFvh/l8lqjRYyMEjVJ0bmBHDOJx+PYZspQ9AhnwC9FwCTyjLrnGfDzrIM/4RJTXq/LrFYD3Z
-fBjVsqnTdXgDciLKOsMf7yzlLqn6niy2UUb9rwPW6mBo6oUWNmuF6R7As93EJNyAKoFBbZQ+yODJ
-gUEAnl6/f8UImKIYLEJAs/lvOCdLToD0PYFH4Ih86hzOtXVcUS4cK38acijnALXRdMbX5J+tB5O2
-UzU1/Dfkw/ZdFr4hc96SCvigY2q8lpJqPvi8ZVWb3vUNiSYE/CUapiVpy8JtynziWV+XrOvvLsi8
-1xtZPCvM8hnIk2snYxnP/Okm+Mpxm3+T/jRnhE6Z6/yzeAkzcLpmpnbtG3PrGqUNxCITIJRWCk4s
-bE6x/c+cCbqiM+2HAgMBAAGjYzBhMB0GA1UdDgQWBBTdBAkHovV6fVJTEpKV7jiAJQ2mWTAPBgNV
-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFN0ECQei9Xp9UlMSkpXuOIAlDaZZMA4GA1UdDwEB/wQE
-AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAIBgRlCn7Jp0cHh5wYfGVcpNxJK1ok1iOMq8bs3AD/CUr
-dIWQPXhq9LmLpZc7tRiRux6n+UBbkflVma8eEdBcHadm47GUBwwyOabqG7B52B2ccETjit3E+ZUf
-ijhDPwGFpUenPUayvOUiaPd7nNgsPgohyC0zrL/FgZkxdMF1ccW+sfAjRfSda/wZY52jvATGGAsl
-u1OJD7OAUN5F7kR/q5R4ZJjT9ijdh9hwZXT7DrkT66cPYakylszeu+1jTBi7qUD3oFRuIIhxdRjq
-erQ0cuAjJ3dctpDqhiVAq+8zD8ufgr6iIPv2tS0a5sKFsXQP+8hlAqRSAUfdSSLBv9jra6x+3uxj
-MxW3IwiPxg+NQVrdjsW5j+VFP3jbutIbQLH+cU0/4IGiul607BXgk90IH37hVZkLId6Tngr75qNJ
-vTYw/ud3sqB1l7UtgYgXZSD32pAAn8lSzDLKNXz1PQ/YK9f1JmzJBjSWFupwWRoyeXkLtoh/D1JI
-Pb9s2KJELtFOt3JY04kTlf5Eq/jXixtunLwsoFvVagCvXzfh1foQC5ichucmj87w7G6KVwuA406y
-wKBjYZC6VWg3dGq2ktufoYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NI
-WuuA8ShYIc2wBlX7Jz9TkHCpBB5XJ7k=
------END CERTIFICATE-----
-
-SSL.com Root Certification Authority ECC
-========================================
------BEGIN CERTIFICATE-----
-MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMCVVMxDjAMBgNV
-BAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24xMTAv
-BgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEy
-MTgxNDAzWhcNNDEwMjEyMTgxNDAzWjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAO
-BgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNv
-bSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuBBAAiA2IA
-BEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI7Z4INcgn64mMU1jrYor+
-8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPgCemB+vNH06NjMGEwHQYDVR0OBBYEFILR
-hXMw5zUE044CkvvlpNHEIejNMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTT
-jgKS++Wk0cQh6M0wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCW
-e+0F+S8Tkdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+gA0z
-5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl
------END CERTIFICATE-----
-
-SSL.com EV Root Certification Authority RSA R2
-==============================================
------BEGIN CERTIFICATE-----
-MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAlVTMQ4w
-DAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9u
-MTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy
-MB4XDTE3MDUzMTE4MTQzN1oXDTQyMDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQI
-DAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYD
-VQQDDC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMIICIjAN
-BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvqM0fNTPl9fb69LT3w23jh
-hqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssufOePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7w
-cXHswxzpY6IXFJ3vG2fThVUCAtZJycxa4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTO
-Zw+oz12WGQvE43LrrdF9HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+
-B6KjBSYRaZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcAb9Zh
-CBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQGp8hLH94t2S42Oim
-9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQVPWKchjgGAGYS5Fl2WlPAApiiECto
-RHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMOpgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+Slm
-JuwgUHfbSguPvuUCYHBBXtSuUDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48
-+qvWBkofZ6aYMBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV
-HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa49QaAJadz20Zp
-qJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBWs47LCp1Jjr+kxJG7ZhcFUZh1
-++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nx
-Y/hoLVUE0fKNsKTPvDxeH3jnpaAgcLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2G
-guDKBAdRUNf/ktUM79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDz
-OFSz/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXtll9ldDz7
-CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEmKf7GUmG6sXP/wwyc5Wxq
-lD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKKQbNmC1r7fSOl8hqw/96bg5Qu0T/fkreR
-rwU7ZcegbLHNYhLDkBvjJc40vG93drEQw/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1
-hlMYegouCRw2n5H9gooiS9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX
-9hwJ1C07mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w==
------END CERTIFICATE-----
-
-SSL.com EV Root Certification Authority ECC
-===========================================
------BEGIN CERTIFICATE-----
-MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMCVVMxDjAMBgNV
-BAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9TU0wgQ29ycG9yYXRpb24xNDAy
-BgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYw
-MjEyMTgxNTIzWhcNNDEwMjEyMTgxNTIzWjB/MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMx
-EDAOBgNVBAcMB0hvdXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE0MDIGA1UEAwwrU1NM
-LmNvbSBFViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB
-BAAiA2IABKoSR5CYG/vvw0AHgyBO8TCCogbR8pKGYfL2IWjKAMTH6kMAVIbc/R/fALhBYlzccBYy
-3h+Z1MzFB8gIH2EWB1E9fVwHU+M1OIzfzZ/ZLg1KthkuWnBaBu2+8KGwytAJKaNjMGEwHQYDVR0O
-BBYEFFvKXuXe0oGqzagtZFG22XKbl+ZPMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUW8pe
-5d7SgarNqC1kUbbZcpuX5k8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2gAMGUCMQCK5kCJ
-N+vp1RPZytRrJPOwPYdGWBrssd9v+1a6cGvHOMzosYxPD/fxZ3YOg9AeUY8CMD32IygmTMZgh5Mm
-m7I1HrrW9zzRHM76JTymGoEVW/MSD2zuZYrJh6j5B+BimoxcSg==
------END CERTIFICATE-----
-
-GlobalSign Root CA - R6
-=======================
------BEGIN CERTIFICATE-----
-MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEgMB4GA1UECxMX
-R2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkds
-b2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQxMjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9i
-YWxTaWduIFJvb3QgQ0EgLSBSNjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFs
-U2lnbjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQss
-grRIxutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1kZguSgMpE
-3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxDaNc9PIrFsmbVkJq3MQbF
-vuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJwLnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqM
-PKq0pPbzlUoSB239jLKJz9CgYXfIWHSw1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+
-azayOeSsJDa38O+2HBNXk7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05O
-WgtH8wY2SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/hbguy
-CLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4nWUx2OVvq+aWh2IMP
-0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpYrZxCRXluDocZXFSxZba/jJvcE+kN
-b7gu3GduyYsRtYQUigAZcIN5kZeR1BonvzceMgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNV
-HSMEGDAWgBSubAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN
-nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGtIxg93eFyRJa0
-lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr6155wsTLxDKZmOMNOsIeDjHfrY
-BzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLjvUYAGm0CuiVdjaExUd1URhxN25mW7xocBFym
-Fe944Hn+Xds+qkxV/ZoVqW/hpvvfcDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr
-3TsTjxKM4kEaSHpzoHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB1
-0jZpnOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfspA9MRf/T
-uTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+vJJUEeKgDu+6B5dpffItK
-oZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+t
-JDfLRVpOoERIyNiwmcUVhAn21klJwGW45hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA=
------END CERTIFICATE-----
-
-OISTE WISeKey Global Root GC CA
-===============================
------BEGIN CERTIFICATE-----
-MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQswCQYDVQQGEwJD
-SDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91bmRhdGlvbiBFbmRvcnNlZDEo
-MCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwgUm9vdCBHQyBDQTAeFw0xNzA1MDkwOTQ4MzRa
-Fw00MjA1MDkwOTU4MzNaMG0xCzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQL
-ExlPSVNURSBGb3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2Jh
-bCBSb290IEdDIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAETOlQwMYPchi82PG6s4nieUqjFqdr
-VCTbUf/q9Akkwwsin8tqJ4KBDdLArzHkdIJuyiXZjHWd8dvQmqJLIX4Wp2OQ0jnUsYd4XxiWD1Ab
-NTcPasbc2RNNpI6QN+a9WzGRo1QwUjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd
-BgNVHQ4EFgQUSIcUrOPDnpBgOtfKie7TrYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0E
-AwMDaAAwZQIwJsdpW9zV57LnyAyMjMPdeYwbY9XJUpROTYJKcx6ygISpJcBMWm1JKWB4E+J+SOtk
-AjEA2zQgMgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9
------END CERTIFICATE-----
-
-UCA Global G2 Root
-==================
------BEGIN CERTIFICATE-----
-MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9MQswCQYDVQQG
-EwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBHbG9iYWwgRzIgUm9vdDAeFw0x
-NjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0xCzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlU
-cnVzdDEbMBkGA1UEAwwSVUNBIEdsb2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
-MIICCgKCAgEAxeYrb3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmT
-oni9kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzmVHqUwCoV
-8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/RVogvGjqNO7uCEeBHANBS
-h6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDcC/Vkw85DvG1xudLeJ1uK6NjGruFZfc8o
-LTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIjtm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/
-R+zvWr9LesGtOxdQXGLYD0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBe
-KW4bHAyvj5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6DlNaBa
-4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6iIis7nCs+dwp4wwc
-OxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznPO6Q0ibd5Ei9Hxeepl2n8pndntd97
-8XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O
-BBYEFIHEjMz15DD/pQwIX4wVZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo
-5sOASD0Ee/ojL3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5
-1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl1qnN3e92mI0A
-Ds0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oUb3n09tDh05S60FdRvScFDcH9
-yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LVPtateJLbXDzz2K36uGt/xDYotgIVilQsnLAX
-c47QN6MUPJiVAAwpBVueSUmxX8fjy88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHo
-jhJi6IjMtX9Gl8CbEGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZk
-bxqgDMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI+Vg7RE+x
-ygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGyYiGqhkCyLmTTX8jjfhFn
-RR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bXUB+K+wb1whnw0A==
------END CERTIFICATE-----
-
-UCA Extended Validation Root
-============================
------BEGIN CERTIFICATE-----
-MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQG
-EwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9u
-IFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMxMDAwMDAwWjBHMQswCQYDVQQGEwJDTjERMA8G
-A1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwggIi
-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpCQcoEwKwmeBkqh5DFnpzsZGgdT6o+uM4AHrs
-iWogD4vFsJszA1qGxliG1cGFu0/GnEBNyr7uaZa4rYEwmnySBesFK5pI0Lh2PpbIILvSsPGP2KxF
-Rv+qZ2C0d35qHzwaUnoEPQc8hQ2E0B92CvdqFN9y4zR8V05WAT558aopO2z6+I9tTcg1367r3CTu
-eUWnhbYFiN6IXSV8l2RnCdm/WhUFhvMJHuxYMjMR83dksHYf5BA1FxvyDrFspCqjc/wJHx4yGVMR
-59mzLC52LqGj3n5qiAno8geK+LLNEOfic0CTuwjRP+H8C5SzJe98ptfRr5//lpr1kXuYC3fUfugH
-0mK1lTnj8/FtDw5lhIpjVMWAtuCeS31HJqcBCF3RiJ7XwzJE+oJKCmhUfzhTA8ykADNkUVkLo4KR
-el7sFsLzKuZi2irbWWIQJUoqgQtHB0MGcIfS+pMRKXpITeuUx3BNr2fVUbGAIAEBtHoIppB/TuDv
-B0GHr2qlXov7z1CymlSvw4m6WC31MJixNnI5fkkE/SmnTHnkBVfblLkWU41Gsx2VYVdWf6/wFlth
-WG82UBEL2KwrlRYaDh8IzTY0ZRBiZtWAXxQgXy0MoHgKaNYs1+lvK9JKBZP8nm9rZ/+I8U6laUpS
-NwXqxhaN0sSZ0YIrO7o1dfdRUVjzyAfd5LQDfwIDAQABo0IwQDAdBgNVHQ4EFgQU2XQ65DA9DfcS
-3H5aBZ8eNJr34RQwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQEL
-BQADggIBADaNl8xCFWQpN5smLNb7rhVpLGsaGvdftvkHTFnq88nIua7Mui563MD1sC3AO6+fcAUR
-ap8lTwEpcOPlDOHqWnzcSbvBHiqB9RZLcpHIojG5qtr8nR/zXUACE/xOHAbKsxSQVBcZEhrxH9cM
-aVr2cXj0lH2RC47skFSOvG+hTKv8dGT9cZr4QQehzZHkPJrgmzI5c6sq1WnIeJEmMX3ixzDx/BR4
-dxIOE/TdFpS/S2d7cFOFyrC78zhNLJA5wA3CXWvp4uXViI3WLL+rG761KIcSF3Ru/H38j9CHJrAb
-+7lsq+KePRXBOy5nAliRn+/4Qh8st2j1da3Ptfb/EX3C8CSlrdP6oDyp+l3cpaDvRKS+1ujl5BOW
-F3sGPjLtx7dCvHaj2GU4Kzg1USEODm8uNBNA4StnDG1KQTAYI1oyVZnJF+A83vbsea0rWBmirSwi
-GpWOvpaQXUJXxPkUAzUrHC1RVwinOt4/5Mi0A3PCwSaAuwtCH60NryZy2sy+s6ODWA2CxR9GUeOc
-GMyNm43sSet1UNWMKFnKdDTajAshqx7qG+XH/RU+wBeq+yNuJkbL+vmxcmtpzyKEC2IPrNkZAJSi
-djzULZrtBJ4tBmIQN1IchXIbJ+XMxjHsN+xjWZsLHXbMfjKaiJUINlK73nZfdklJrX+9ZSCyycEr
-dhh2n1ax
------END CERTIFICATE-----
-
-Certigna Root CA
-================
------BEGIN CERTIFICATE-----
-MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UE
-BhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAwMiA0ODE0NjMwODEwMDAzNjEZ
-MBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0xMzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjda
-MFoxCzAJBgNVBAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYz
-MDgxMDAwMzYxGTAXBgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4IC
-DwAwggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sOty3tRQgX
-stmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9MCiBtnyN6tMbaLOQdLNyz
-KNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPuI9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8
-JXrJhFwLrN1CTivngqIkicuQstDuI7pmTLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16
-XdG+RCYyKfHx9WzMfgIhC59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq
-4NYKpkDfePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3YzIoej
-wpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWTCo/1VTp2lc5ZmIoJ
-lXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1kJWumIWmbat10TWuXekG9qxf5kBdI
-jzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp/
-/TBt2dzhauH8XwIDAQABo4IBGjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw
-HQYDVR0OBBYEFBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of
-1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczovL3d3d3cuY2Vy
-dGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilodHRwOi8vY3JsLmNlcnRpZ25h
-LmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYraHR0cDovL2NybC5kaGlteW90aXMuY29tL2Nl
-cnRpZ25hcm9vdGNhLmNybDANBgkqhkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOIt
-OoldaDgvUSILSo3L6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxP
-TGRGHVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH60BGM+RFq
-7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncBlA2c5uk5jR+mUYyZDDl3
-4bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdio2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd
-8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS
-6Cvu5zHbugRqh5jnxV/vfaci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaY
-tlu3zM63Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayhjWZS
-aX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw3kAP+HwV96LOPNde
-E4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0=
------END CERTIFICATE-----
-
-emSign Root CA - G1
-===================
------BEGIN CERTIFICATE-----
-MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYDVQQGEwJJTjET
-MBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRl
-ZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBHMTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgx
-ODMwMDBaMGcxCzAJBgNVBAYTAklOMRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVk
-aHJhIFRlY2hub2xvZ2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQzf2N4aLTN
-LnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO8oG0x5ZOrRkVUkr+PHB1
-cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aqd7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHW
-DV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhMtTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ
-6DqS0hdW5TUaQBw+jSztOd9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrH
-hQIDAQABo0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQDAgEG
-MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31xPaOfG1vR2vjTnGs2
-vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjMwiI/aTvFthUvozXGaCocV685743Q
-NcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6dGNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q
-+Mri/Tm3R7nrft8EI6/6nAYH6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeih
-U80Bv2noWgbyRQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx
-iN66zB+Afko=
------END CERTIFICATE-----
-
-emSign ECC Root CA - G3
-=======================
------BEGIN CERTIFICATE-----
-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQGEwJJTjETMBEG
-A1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEg
-MB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4
-MTgzMDAwWjBrMQswCQYDVQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11
-ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g
-RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0WXTsuwYc
-58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xySfvalY8L1X44uT6EYGQIr
-MgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuBzhccLikenEhjQjAOBgNVHQ8BAf8EBAMC
-AQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+D
-CBeQyh+KTOgNG3qxrdWBCUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7
-jHvrZQnD+JbNR6iC8hZVdyR+EhCVBCyj
------END CERTIFICATE-----
-
-emSign Root CA - C1
-===================
------BEGIN CERTIFICATE-----
-MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkGA1UEBhMCVVMx
-EzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNp
-Z24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAwMFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UE
-BhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQD
-ExNlbVNpZ24gUm9vdCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+up
-ufGZBczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZHdPIWoU/
-Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH3DspVpNqs8FqOp099cGX
-OFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvHGPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4V
-I5b2P/AgNBbeCsbEBEV5f6f9vtKppa+cxSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleooms
-lMuoaJuvimUnzYnu3Yy1aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+
-XJGFehiqTbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQAD
-ggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87/kOXSTKZEhVb3xEp
-/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4kqNPEjE2NuLe/gDEo2APJ62gsIq1
-NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrGYQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9
-wC68AivTxEDkigcxHpvOJpkT+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQ
-BmIMMMAVSKeoWXzhriKi4gp6D/piq1JM4fHfyr6DDUI=
------END CERTIFICATE-----
-
-emSign ECC Root CA - C3
-=======================
------BEGIN CERTIFICATE-----
-MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQGEwJVUzETMBEG
-A1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMxIDAeBgNVBAMTF2VtU2lnbiBF
-Q0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAwMFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UE
-BhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQD
-ExdlbVNpZ24gRUNDIFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd
-6bciMK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4OjavtisIGJAnB9
-SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0OBBYEFPtaSNCAIEDyqOkA
-B2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MAoGCCqGSM49BAMDA2gA
-MGUCMQC02C8Cif22TGK6Q04ThHK1rt0c3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwU
-ZOR8loMRnLDRWmFLpg9J0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ==
------END CERTIFICATE-----
-
-Hongkong Post Root CA 3
-=======================
------BEGIN CERTIFICATE-----
-MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQELBQAwbzELMAkG
-A1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJSG9uZyBLb25nMRYwFAYDVQQK
-Ew1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQb3N0IFJvb3QgQ0EgMzAeFw0xNzA2
-MDMwMjI5NDZaFw00MjA2MDMwMjI5NDZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtv
-bmcxEjAQBgNVBAcTCUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMX
-SG9uZ2tvbmcgUG9zdCBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz
-iNfqzg8gTr7m1gNt7ln8wlffKWihgw4+aMdoWJwcYEuJQwy51BWy7sFOdem1p+/l6TWZ5Mwc50tf
-jTMwIDNT2aa71T4Tjukfh0mtUC1Qyhi+AViiE3CWu4mIVoBc+L0sPOFMV4i707mV78vH9toxdCim
-5lSJ9UExyuUmGs2C4HDaOym71QP1mbpV9WTRYA6ziUm4ii8F0oRFKHyPaFASePwLtVPLwpgchKOe
-sL4jpNrcyCse2m5FHomY2vkALgbpDDtw1VAliJnLzXNg99X/NWfFobxeq81KuEXryGgeDQ0URhLj
-0mRiikKYvLTGCAj4/ahMZJx2Ab0vqWwzD9g/KLg8aQFChn5pwckGyuV6RmXpwtZQQS4/t+TtbNe/
-JgERohYpSms0BpDsE9K2+2p20jzt8NYt3eEV7KObLyzJPivkaTv/ciWxNoZbx39ri1UbSsUgYT2u
-y1DhCDq+sI9jQVMwCFk8mB13umOResoQUGC/8Ne8lYePl8X+l2oBlKN8W4UdKjk60FSh0Tlxnf0h
-+bV78OLgAo9uliQlLKAeLKjEiafv7ZkGL7YKTE/bosw3Gq9HhS2KX8Q0NEwA/RiTZxPRN+ZItIsG
-xVd7GYYKecsAyVKvQv83j+GjHno9UKtjBucVtT+2RTeUN7F+8kjDf8V1/peNRY8apxpyKBpADwID
-AQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQXnc0e
-i9Y5K3DTXNSguB+wAPzFYTAdBgNVHQ4EFgQUF53NHovWOStw01zUoLgfsAD8xWEwDQYJKoZIhvcN
-AQELBQADggIBAFbVe27mIgHSQpsY1Q7XZiNc4/6gx5LS6ZStS6LG7BJ8dNVI0lkUmcDrudHr9Egw
-W62nV3OZqdPlt9EuWSRY3GguLmLYauRwCy0gUCCkMpXRAJi70/33MvJJrsZ64Ee+bs7Lo3I6LWld
-y8joRTnU+kLBEUx3XZL7av9YROXrgZ6voJmtvqkBZss4HTzfQx/0TW60uhdG/H39h4F5ag0zD/ov
-+BS5gLNdTaqX4fnkGMX41TiMJjz98iji7lpJiCzfeT2OnpA8vUFKOt1b9pq0zj8lMH8yfaIDlNDc
-eqFS3m6TjRgm/VWsvY+b0s+v54Ysyx8Jb6NvqYTUc79NoXQbTiNg8swOqn+knEwlqLJmOzj/2ZQw
-9nKEvmhVEA/GcywWaZMH/rFF7buiVWqw2rVKAiUnhde3t4ZEFolsgCs+l6mc1X5VTMbeRRAc6uk7
-nwNT7u56AQIWeNTowr5GdogTPyK7SBIdUgC0An4hGh6cJfTzPV4e0hz5sy229zdcxsshTrD3mUcY
-hcErulWuBurQB7Lcq9CClnXO0lD+mefPL5/ndtFhKvshuzHQqp9HpLIiyhY6UFfEW0NnxWViA0kB
-60PZ2Pierc+xYw5F9KBaLJstxabArahH9CdMOA0uG0k7UvToiIMrVCjU8jVStDKDYmlkDJGcn5fq
-dBb9HxEGmpv0
------END CERTIFICATE-----
-
-Microsoft ECC Root Certificate Authority 2017
-=============================================
------BEGIN CERTIFICATE-----
-MIICWTCCAd+gAwIBAgIQZvI9r4fei7FK6gxXMQHC7DAKBggqhkjOPQQDAzBlMQswCQYDVQQGEwJV
-UzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNyb3NvZnQgRUND
-IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwHhcNMTkxMjE4MjMwNjQ1WhcNNDIwNzE4
-MjMxNjA0WjBlMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYw
-NAYDVQQDEy1NaWNyb3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwdjAQ
-BgcqhkjOPQIBBgUrgQQAIgNiAATUvD0CQnVBEyPNgASGAlEvaqiBYgtlzPbKnR5vSmZRogPZnZH6
-thaxjG7efM3beaYvzrvOcS/lpaso7GMEZpn4+vKTEAXhgShC48Zo9OYbhGBKia/teQ87zvH2RPUB
-eMCjVDBSMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIy5lycFIM
-+Oa+sgRXKSrPQhDtNTAQBgkrBgEEAYI3FQEEAwIBADAKBggqhkjOPQQDAwNoADBlAjBY8k3qDPlf
-Xu5gKcs68tvWMoQZP3zVL8KxzJOuULsJMsbG7X7JNpQS5GiFBqIb0C8CMQCZ6Ra0DvpWSNSkMBaR
-eNtUjGUBiudQZsIxtzm6uBoiB078a1QWIP8rtedMDE2mT3M=
------END CERTIFICATE-----
-
-Microsoft RSA Root Certificate Authority 2017
-=============================================
------BEGIN CERTIFICATE-----
-MIIFqDCCA5CgAwIBAgIQHtOXCV/YtLNHcB6qvn9FszANBgkqhkiG9w0BAQwFADBlMQswCQYDVQQG
-EwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNyb3NvZnQg
-UlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwHhcNMTkxMjE4MjI1MTIyWhcNNDIw
-NzE4MjMwMDIzWjBlMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
-MTYwNAYDVQQDEy1NaWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcw
-ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKW76UM4wplZEWCpW9R2LBifOZNt9GkMml
-7Xhqb0eRaPgnZ1AzHaGm++DlQ6OEAlcBXZxIQIJTELy/xztokLaCLeX0ZdDMbRnMlfl7rEqUrQ7e
-S0MdhweSE5CAg2Q1OQT85elss7YfUJQ4ZVBcF0a5toW1HLUX6NZFndiyJrDKxHBKrmCk3bPZ7Pw7
-1VdyvD/IybLeS2v4I2wDwAW9lcfNcztmgGTjGqwu+UcF8ga2m3P1eDNbx6H7JyqhtJqRjJHTOoI+
-dkC0zVJhUXAoP8XFWvLJjEm7FFtNyP9nTUwSlq31/niol4fX/V4ggNyhSyL71Imtus5Hl0dVe49F
-yGcohJUcaDDv70ngNXtk55iwlNpNhTs+VcQor1fznhPbRiefHqJeRIOkpcrVE7NLP8TjwuaGYaRS
-MLl6IE9vDzhTyzMMEyuP1pq9KsgtsRx9S1HKR9FIJ3Jdh+vVReZIZZ2vUpC6W6IYZVcSn2i51BVr
-lMRpIpj0M+Dt+VGOQVDJNE92kKz8OMHY4Xu54+OU4UZpyw4KUGsTuqwPN1q3ErWQgR5WrlcihtnJ
-0tHXUeOrO8ZV/R4O03QK0dqq6mm4lyiPSMQH+FJDOvTKVTUssKZqwJz58oHhEmrARdlns87/I6KJ
-ClTUFLkqqNfs+avNJVgyeY+QW5g5xAgGwax/Dj0ApQIDAQABo1QwUjAOBgNVHQ8BAf8EBAMCAYYw
-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUCctZf4aycI8awznjwNnpv7tNsiMwEAYJKwYBBAGC
-NxUBBAMCAQAwDQYJKoZIhvcNAQEMBQADggIBAKyvPl3CEZaJjqPnktaXFbgToqZCLgLNFgVZJ8og
-6Lq46BrsTaiXVq5lQ7GPAJtSzVXNUzltYkyLDVt8LkS/gxCP81OCgMNPOsduET/m4xaRhPtthH80
-dK2Jp86519efhGSSvpWhrQlTM93uCupKUY5vVau6tZRGrox/2KJQJWVggEbbMwSubLWYdFQl3JPk
-+ONVFT24bcMKpBLBaYVu32TxU5nhSnUgnZUP5NbcA/FZGOhHibJXWpS2qdgXKxdJ5XbLwVaZOjex
-/2kskZGT4d9Mozd2TaGf+G0eHdP67Pv0RR0Tbc/3WeUiJ3IrhvNXuzDtJE3cfVa7o7P4NHmJweDy
-AmH3pvwPuxwXC65B2Xy9J6P9LjrRk5Sxcx0ki69bIImtt2dmefU6xqaWM/5TkshGsRGRxpl/j8nW
-ZjEgQRCHLQzWwa80mMpkg/sTV9HB8Dx6jKXB/ZUhoHHBk2dxEuqPiAppGWSZI1b7rCoucL5mxAyE
-7+WL85MB+GqQk2dLsmijtWKP6T+MejteD+eMuMZ87zf9dOLITzNy4ZQ5bb0Sr74MTnB8G2+NszKT
-c0QWbej09+CVgI+WXTik9KveCjCHk9hNAHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D
-5KbvtwEwXlGjefVwaaZBRA+GsCyRxj3qrg+E
------END CERTIFICATE-----
-
-e-Szigno Root CA 2017
-=====================
------BEGIN CERTIFICATE-----
-MIICQDCCAeWgAwIBAgIMAVRI7yH9l1kN9QQKMAoGCCqGSM49BAMCMHExCzAJBgNVBAYTAkhVMREw
-DwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMgTHRkLjEXMBUGA1UEYQwOVkFUSFUt
-MjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25vIFJvb3QgQ0EgMjAxNzAeFw0xNzA4MjIxMjA3MDZa
-Fw00MjA4MjIxMjA3MDZaMHExCzAJBgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UE
-CgwNTWljcm9zZWMgTHRkLjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3pp
-Z25vIFJvb3QgQ0EgMjAxNzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJbcPYrYsHtvxie+RJCx
-s1YVe45DJH0ahFnuY2iyxl6H0BVIHqiQrb1TotreOpCmYF9oMrWGQd+HWyx7xf58etqjYzBhMA8G
-A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSHERUI0arBeAyxr87GyZDv
-vzAEwDAfBgNVHSMEGDAWgBSHERUI0arBeAyxr87GyZDvvzAEwDAKBggqhkjOPQQDAgNJADBGAiEA
-tVfd14pVCzbhhkT61NlojbjcI4qKDdQvfepz7L9NbKgCIQDLpbQS+ue16M9+k/zzNY9vTlp8tLxO
-svxyqltZ+efcMQ==
------END CERTIFICATE-----
-
-certSIGN Root CA G2
-===================
------BEGIN CERTIFICATE-----
-MIIFRzCCAy+gAwIBAgIJEQA0tk7GNi02MA0GCSqGSIb3DQEBCwUAMEExCzAJBgNVBAYTAlJPMRQw
-EgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJR04gUk9PVCBDQSBHMjAeFw0xNzAy
-MDYwOTI3MzVaFw00MjAyMDYwOTI3MzVaMEExCzAJBgNVBAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lH
-TiBTQTEcMBoGA1UECxMTY2VydFNJR04gUk9PVCBDQSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIP
-ADCCAgoCggIBAMDFdRmRfUR0dIf+DjuW3NgBFszuY5HnC2/OOwppGnzC46+CjobXXo9X69MhWf05
-N0IwvlDqtg+piNguLWkh59E3GE59kdUWX2tbAMI5Qw02hVK5U2UPHULlj88F0+7cDBrZuIt4Imfk
-abBoxTzkbFpG583H+u/E7Eu9aqSs/cwoUe+StCmrqzWaTOTECMYmzPhpn+Sc8CnTXPnGFiWeI8Mg
-wT0PPzhAsP6CRDiqWhqKa2NYOLQV07YRaXseVO6MGiKscpc/I1mbySKEwQdPzH/iV8oScLumZfNp
-dWO9lfsbl83kqK/20U6o2YpxJM02PbyWxPFsqa7lzw1uKA2wDrXKUXt4FMMgL3/7FFXhEZn91Qqh
-ngLjYl/rNUssuHLoPj1PrCy7Lobio3aP5ZMqz6WryFyNSwb/EkaseMsUBzXgqd+L6a8VTxaJW732
-jcZZroiFDsGJ6x9nxUWO/203Nit4ZoORUSs9/1F3dmKh7Gc+PoGD4FapUB8fepmrY7+EF3fxDTvf
-95xhszWYijqy7DwaNz9+j5LP2RIUZNoQAhVB/0/E6xyjyfqZ90bp4RjZsbgyLcsUDFDYg2WD7rlc
-z8sFWkz6GZdr1l0T08JcVLwyc6B49fFtHsufpaafItzRUZ6CeWRgKRM+o/1Pcmqr4tTluCRVLERL
-iohEnMqE0yo7AgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1Ud
-DgQWBBSCIS1mxteg4BXrzkwJd8RgnlRuAzANBgkqhkiG9w0BAQsFAAOCAgEAYN4auOfyYILVAzOB
-ywaK8SJJ6ejqkX/GM15oGQOGO0MBzwdw5AgeZYWR5hEit/UCI46uuR59H35s5r0l1ZUa8gWmr4UC
-b6741jH/JclKyMeKqdmfS0mbEVeZkkMR3rYzpMzXjWR91M08KCy0mpbqTfXERMQlqiCA2ClV9+BB
-/AYm/7k29UMUA2Z44RGx2iBfRgB4ACGlHgAoYXhvqAEBj500mv/0OJD7uNGzcgbJceaBxXntC6Z5
-8hMLnPddDnskk7RI24Zf3lCGeOdA5jGokHZwYa+cNywRtYK3qq4kNFtyDGkNzVmf9nGvnAvRCjj5
-BiKDUyUM/FHE5r7iOZULJK2v0ZXkltd0ZGtxTgI8qoXzIKNDOXZbbFD+mpwUHmUUihW9o4JFWklW
-atKcsWMy5WHgUyIOpwpJ6st+H6jiYoD2EEVSmAYY3qXNL3+q1Ok+CHLsIwMCPKaq2LxndD0UF/tU
-Sxfj03k9bWtJySgOLnRQvwzZRjoQhsmnP+mg7H/rpXdYaXHmgwo38oZJar55CJD2AhZkPuXaTH4M
-NMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE1LlSVHJ7liXMvGnjSG4N
-0MedJ5qq+BOS3R7fY581qRY27Iy4g/Q9iY/NtBde17MXQRBdJ3NghVdJIgc=
------END CERTIFICATE-----
-
-Trustwave Global Certification Authority
-========================================
------BEGIN CERTIFICATE-----
-MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJV
-UzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xITAfBgNVBAoMGFRydXN0d2F2
-ZSBIb2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1c3R3YXZlIEdsb2JhbCBDZXJ0aWZpY2F0aW9u
-IEF1dGhvcml0eTAeFw0xNzA4MjMxOTM0MTJaFw00MjA4MjMxOTM0MTJaMIGIMQswCQYDVQQGEwJV
-UzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xITAfBgNVBAoMGFRydXN0d2F2
-ZSBIb2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1c3R3YXZlIEdsb2JhbCBDZXJ0aWZpY2F0aW9u
-IEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALldUShLPDeS0YLOvR29
-zd24q88KPuFd5dyqCblXAj7mY2Hf8g+CY66j96xz0XznswuvCAAJWX/NKSqIk4cXGIDtiLK0thAf
-LdZfVaITXdHG6wZWiYj+rDKd/VzDBcdu7oaJuogDnXIhhpCujwOl3J+IKMujkkkP7NAP4m1ET4Bq
-stTnoApTAbqOl5F2brz81Ws25kCI1nsvXwXoLG0R8+eyvpJETNKXpP7ScoFDB5zpET71ixpZfR9o
-WN0EACyW80OzfpgZdNmcc9kYvkHHNHnZ9GLCQ7mzJ7Aiy/k9UscwR7PJPrhq4ufogXBeQotPJqX+
-OsIgbrv4Fo7NDKm0G2x2EOFYeUY+VM6AqFcJNykbmROPDMjWLBz7BegIlT1lRtzuzWniTY+HKE40
-Cz7PFNm73bZQmq131BnW2hqIyE4bJ3XYsgjxroMwuREOzYfwhI0Vcnyh78zyiGG69Gm7DIwLdVcE
-uE4qFC49DxweMqZiNu5m4iK4BUBjECLzMx10coos9TkpoNPnG4CELcU9402x/RpvumUHO1jsQkUm
-+9jaJXLE9gCxInm943xZYkqcBW89zubWR2OZxiRvchLIrH+QtAuRcOi35hYQcRfO3gZPSEF9NUqj
-ifLJS3tBEW1ntwiYTOURGa5CgNz7kAXU+FDKvuStx8KU1xad5hePrzb7AgMBAAGjQjBAMA8GA1Ud
-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFJngGWcNYtt2s9o9uFvo/ULSMQ6HMA4GA1UdDwEB/wQEAwIB
-BjANBgkqhkiG9w0BAQsFAAOCAgEAmHNw4rDT7TnsTGDZqRKGFx6W0OhUKDtkLSGm+J1WE2pIPU/H
-PinbbViDVD2HfSMF1OQc3Og4ZYbFdada2zUFvXfeuyk3QAUHw5RSn8pk3fEbK9xGChACMf1KaA0H
-ZJDmHvUqoai7PF35owgLEQzxPy0QlG/+4jSHg9bP5Rs1bdID4bANqKCqRieCNqcVtgimQlRXtpla
-4gt5kNdXElE1GYhBaCXUNxeEFfsBctyV3lImIJgm4nb1J2/6ADtKYdkNy1GTKv0WBpanI5ojSP5R
-vbbEsLFUzt5sQa0WZ37b/TjNuThOssFgy50X31ieemKyJo90lZvkWx3SD92YHJtZuSPTMaCm/zjd
-zyBP6VhWOmfD0faZmZ26NraAL4hHT4a/RDqA5Dccprrql5gR0IRiR2Qequ5AvzSxnI9O4fKSTx+O
-856X3vOmeWqJcU9LJxdI/uz0UA9PSX3MReO9ekDFQdxhVicGaeVyQYHTtgGJoC86cnn+OjC/QezH
-Yj6RS8fZMXZC+fc8Y+wmjHMMfRod6qh8h6jCJ3zhM0EPz8/8AKAigJ5Kp28AsEFFtyLKaEjFQqKu
-3R3y4G5OBVixwJAWKqQ9EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP
-29FpHOTKyeC2nOnOcXHebD8WpHk=
------END CERTIFICATE-----
-
-Trustwave Global ECC P256 Certification Authority
-=================================================
------BEGIN CERTIFICATE-----
-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYDVQQGEwJVUzER
-MA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0d2F2ZSBI
-b2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZp
-Y2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYD
-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRy
-dXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBFQ0MgUDI1
-NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABH77bOYj
-43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoNFWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqm
-P62jQzBBMA8GA1UdEwEB/wQFMAMBAf8wDwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt
-0UrrdaVKEJmzsaGLSvcwCgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjz
-RM4q3wghDDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7
------END CERTIFICATE-----
-
-Trustwave Global ECC P384 Certification Authority
-=================================================
------BEGIN CERTIFICATE-----
-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYDVQQGEwJVUzER
-MA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0d2F2ZSBI
-b2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZp
-Y2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYD
-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRy
-dXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBFQ0MgUDM4
-NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuBBAAiA2IABGvaDXU1CDFH
-Ba5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJj9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr
-/TklZvFe/oyujUF5nQlgziip04pt89ZF1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNV
-HQ8BAf8EBQMDBwYAMB0GA1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNn
-ADBkAjA3AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsCMGcl
-CrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVuSw==
------END CERTIFICATE-----
-
-NAVER Global Root Certification Authority
-=========================================
------BEGIN CERTIFICATE-----
-MIIFojCCA4qgAwIBAgIUAZQwHqIL3fXFMyqxQ0Rx+NZQTQ0wDQYJKoZIhvcNAQEMBQAwaTELMAkG
-A1UEBhMCS1IxJjAkBgNVBAoMHU5BVkVSIEJVU0lORVNTIFBMQVRGT1JNIENvcnAuMTIwMAYDVQQD
-DClOQVZFUiBHbG9iYWwgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MTgwODU4
-NDJaFw0zNzA4MTgyMzU5NTlaMGkxCzAJBgNVBAYTAktSMSYwJAYDVQQKDB1OQVZFUiBCVVNJTkVT
-UyBQTEFURk9STSBDb3JwLjEyMDAGA1UEAwwpTkFWRVIgR2xvYmFsIFJvb3QgQ2VydGlmaWNhdGlv
-biBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC21PGTXLVAiQqrDZBb
-UGOukJR0F0Vy1ntlWilLp1agS7gvQnXp2XskWjFlqxcX0TM62RHcQDaH38dq6SZeWYp34+hInDEW
-+j6RscrJo+KfziFTowI2MMtSAuXaMl3Dxeb57hHHi8lEHoSTGEq0n+USZGnQJoViAbbJAh2+g1G7
-XNr4rRVqmfeSVPc0W+m/6imBEtRTkZazkVrd/pBzKPswRrXKCAfHcXLJZtM0l/aM9BhK4dA9WkW2
-aacp+yPOiNgSnABIqKYPszuSjXEOdMWLyEz59JuOuDxp7W87UC9Y7cSw0BwbagzivESq2M0UXZR4
-Yb8ObtoqvC8MC3GmsxY/nOb5zJ9TNeIDoKAYv7vxvvTWjIcNQvcGufFt7QSUqP620wbGQGHfnZ3z
-VHbOUzoBppJB7ASjjw2i1QnK1sua8e9DXcCrpUHPXFNwcMmIpi3Ua2FzUCaGYQ5fG8Ir4ozVu53B
-A0K6lNpfqbDKzE0K70dpAy8i+/Eozr9dUGWokG2zdLAIx6yo0es+nPxdGoMuK8u180SdOqcXYZai
-cdNwlhVNt0xz7hlcxVs+Qf6sdWA7G2POAN3aCJBitOUt7kinaxeZVL6HSuOpXgRM6xBtVNbv8ejy
-YhbLgGvtPe31HzClrkvJE+2KAQHJuFFYwGY6sWZLxNUxAmLpdIQM201GLQIDAQABo0IwQDAdBgNV
-HQ4EFgQU0p+I36HNLL3s9TsBAZMzJ7LrYEswDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMB
-Af8wDQYJKoZIhvcNAQEMBQADggIBADLKgLOdPVQG3dLSLvCkASELZ0jKbY7gyKoNqo0hV4/GPnrK
-21HUUrPUloSlWGB/5QuOH/XcChWB5Tu2tyIvCZwTFrFsDDUIbatjcu3cvuzHV+YwIHHW1xDBE1UB
-jCpD5EHxzzp6U5LOogMFDTjfArsQLtk70pt6wKGm+LUx5vR1yblTmXVHIloUFcd4G7ad6Qz4G3bx
-hYTeodoS76TiEJd6eN4MUZeoIUCLhr0N8F5OSza7OyAfikJW4Qsav3vQIkMsRIz75Sq0bBwcupTg
-E34h5prCy8VCZLQelHsIJchxzIdFV4XTnyliIoNRlwAYl3dqmJLJfGBs32x9SuRwTMKeuB330DTH
-D8z7p/8Dvq1wkNoL3chtl1+afwkyQf3NosxabUzyqkn+Zvjp2DXrDige7kgvOtB5CTh8piKCk5XQ
-A76+AqAF3SAi428diDRgxuYKuQl1C/AH6GmWNcf7I4GOODm4RStDeKLRLBT/DShycpWbXgnbiUSY
-qqFJu3FS8r/2/yehNq+4tneI3TqkbZs0kNwUXTC/t+sX5Ie3cdCh13cV1ELX8vMxmV2b3RZtP+oG
-I/hGoiLtk/bdmuYqh7GYVPEi92tF4+KOdh2ajcQGjTa3FPOdVGm3jjzVpG2Tgbet9r1ke8LJaDmg
-kpzNNIaRkPpkUZ3+/uul9XXeifdy
------END CERTIFICATE-----
-
-AC RAIZ FNMT-RCM SERVIDORES SEGUROS
-===================================
------BEGIN CERTIFICATE-----
-MIICbjCCAfOgAwIBAgIQYvYybOXE42hcG2LdnC6dlTAKBggqhkjOPQQDAzB4MQswCQYDVQQGEwJF
-UzERMA8GA1UECgwIRk5NVC1SQ00xDjAMBgNVBAsMBUNlcmVzMRgwFgYDVQRhDA9WQVRFUy1RMjgy
-NjAwNEoxLDAqBgNVBAMMI0FDIFJBSVogRk5NVC1SQ00gU0VSVklET1JFUyBTRUdVUk9TMB4XDTE4
-MTIyMDA5MzczM1oXDTQzMTIyMDA5MzczM1oweDELMAkGA1UEBhMCRVMxETAPBgNVBAoMCEZOTVQt
-UkNNMQ4wDAYDVQQLDAVDZXJlczEYMBYGA1UEYQwPVkFURVMtUTI4MjYwMDRKMSwwKgYDVQQDDCNB
-QyBSQUlaIEZOTVQtUkNNIFNFUlZJRE9SRVMgU0VHVVJPUzB2MBAGByqGSM49AgEGBSuBBAAiA2IA
-BPa6V1PIyqvfNkpSIeSX0oNnnvBlUdBeh8dHsVnyV0ebAAKTRBdp20LHsbI6GA60XYyzZl2hNPk2
-LEnb80b8s0RpRBNm/dfF/a82Tc4DTQdxz69qBdKiQ1oKUm8BA06Oi6NCMEAwDwYDVR0TAQH/BAUw
-AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFAG5L++/EYZg8k/QQW6rcx/n0m5JMAoGCCqG
-SM49BAMDA2kAMGYCMQCuSuMrQMN0EfKVrRYj3k4MGuZdpSRea0R7/DjiT8ucRRcRTBQnJlU5dUoD
-zBOQn5ICMQD6SmxgiHPz7riYYqnOK8LZiqZwMR2vsJRM60/G49HzYqc8/5MuB1xJAWdpEgJyv+c=
------END CERTIFICATE-----
-
-GlobalSign Root R46
-===================
------BEGIN CERTIFICATE-----
-MIIFWjCCA0KgAwIBAgISEdK7udcjGJ5AXwqdLdDfJWfRMA0GCSqGSIb3DQEBDAUAMEYxCzAJBgNV
-BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQDExNHbG9iYWxTaWduIFJv
-b3QgUjQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAX
-BgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBSNDYwggIi
-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCsrHQy6LNl5brtQyYdpokNRbopiLKkHWPd08Es
-CVeJOaFV6Wc0dwxu5FUdUiXSE2te4R2pt32JMl8Nnp8semNgQB+msLZ4j5lUlghYruQGvGIFAha/
-r6gjA7aUD7xubMLL1aa7DOn2wQL7Id5m3RerdELv8HQvJfTqa1VbkNud316HCkD7rRlr+/fKYIje
-2sGP1q7Vf9Q8g+7XFkyDRTNrJ9CG0Bwta/OrffGFqfUo0q3v84RLHIf8E6M6cqJaESvWJ3En7YEt
-bWaBkoe0G1h6zD8K+kZPTXhc+CtI4wSEy132tGqzZfxCnlEmIyDLPRT5ge1lFgBPGmSXZgjPjHvj
-K8Cd+RTyG/FWaha/LIWFzXg4mutCagI0GIMXTpRW+LaCtfOW3T3zvn8gdz57GSNrLNRyc0NXfeD4
-12lPFzYE+cCQYDdF3uYM2HSNrpyibXRdQr4G9dlkbgIQrImwTDsHTUB+JMWKmIJ5jqSngiCNI/on
-ccnfxkF0oE32kRbcRoxfKWMxWXEM2G/CtjJ9++ZdU6Z+Ffy7dXxd7Pj2Fxzsx2sZy/N78CsHpdls
-eVR2bJ0cpm4O6XkMqCNqo98bMDGfsVR7/mrLZqrcZdCinkqaByFrgY/bxFn63iLABJzjqls2k+g9
-vXqhnQt2sQvHnf3PmKgGwvgqo6GDoLclcqUC4wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYD
-VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA1yrc4GHqMywptWU4jaWSf8FmSwwDQYJKoZIhvcNAQEM
-BQADggIBAHx47PYCLLtbfpIrXTncvtgdokIzTfnvpCo7RGkerNlFo048p9gkUbJUHJNOxO97k4Vg
-JuoJSOD1u8fpaNK7ajFxzHmuEajwmf3lH7wvqMxX63bEIaZHU1VNaL8FpO7XJqti2kM3S+LGteWy
-gxk6x9PbTZ4IevPuzz5i+6zoYMzRx6Fcg0XERczzF2sUyQQCPtIkpnnpHs6i58FZFZ8d4kuaPp92
-CC1r2LpXFNqD6v6MVenQTqnMdzGxRBF6XLE+0xRFFRhiJBPSy03OXIPBNvIQtQ6IbbjhVp+J3pZm
-OUdkLG5NrmJ7v2B0GbhWrJKsFjLtrWhV/pi60zTe9Mlhww6G9kuEYO4Ne7UyWHmRVSyBQ7N0H3qq
-JZ4d16GLuc1CLgSkZoNNiTW2bKg2SnkheCLQQrzRQDGQob4Ez8pn7fXwgNNgyYMqIgXQBztSvwye
-qiv5u+YfjyW6hY0XHgL+XVAEV8/+LbzvXMAaq7afJMbfc2hIkCwU9D9SGuTSyxTDYWnP4vkYxboz
-nxSjBF25cfe1lNj2M8FawTSLfJvdkzrnE6JwYZ+vj+vYxXX4M2bUdGc6N3ec592kD3ZDZopD8p/7
-DEJ4Y9HiD2971KE9dJeFt0g5QdYg/NA6s/rob8SKunE3vouXsXgxT7PntgMTzlSdriVZzH81Xwj3
-QEUxeCp6
------END CERTIFICATE-----
-
-GlobalSign Root E46
-===================
------BEGIN CERTIFICATE-----
-MIICCzCCAZGgAwIBAgISEdK7ujNu1LzmJGjFDYQdmOhDMAoGCCqGSM49BAMDMEYxCzAJBgNVBAYT
-AkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQDExNHbG9iYWxTaWduIFJvb3Qg
-RTQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNV
-BAoTEEdsb2JhbFNpZ24gbnYtc2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBFNDYwdjAQBgcq
-hkjOPQIBBgUrgQQAIgNiAAScDrHPt+ieUnd1NPqlRqetMhkytAepJ8qUuwzSChDH2omwlwxwEwkB
-jtjqR+q+soArzfwoDdusvKSGN+1wCAB16pMLey5SnCNoIwZD7JIvU4Tb+0cUB+hflGddyXqBPCCj
-QjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxCpCPtsad0kRL
-gLWi5h+xEk8blTAKBggqhkjOPQQDAwNoADBlAjEA31SQ7Zvvi5QCkxeCmb6zniz2C5GMn0oUsfZk
-vLtoURMMA/cVi4RguYv/Uo7njLwcAjA8+RHUjE7AwWHCFUyqqx0LMV87HOIAl0Qx5v5zli/altP+
-CAezNIm8BZ/3Hobui3A=
------END CERTIFICATE-----
-
-GLOBALTRUST 2020
-================
------BEGIN CERTIFICATE-----
-MIIFgjCCA2qgAwIBAgILWku9WvtPilv6ZeUwDQYJKoZIhvcNAQELBQAwTTELMAkGA1UEBhMCQVQx
-IzAhBgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVT
-VCAyMDIwMB4XDTIwMDIxMDAwMDAwMFoXDTQwMDYxMDAwMDAwMFowTTELMAkGA1UEBhMCQVQxIzAh
-BgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVTVCAy
-MDIwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAri5WrRsc7/aVj6B3GyvTY4+ETUWi
-D59bRatZe1E0+eyLinjF3WuvvcTfk0Uev5E4C64OFudBc/jbu9G4UeDLgztzOG53ig9ZYybNpyrO
-VPu44sB8R85gfD+yc/LAGbaKkoc1DZAoouQVBGM+uq/ufF7MpotQsjj3QWPKzv9pj2gOlTblzLmM
-CcpL3TGQlsjMH/1WljTbjhzqLL6FLmPdqqmV0/0plRPwyJiT2S0WR5ARg6I6IqIoV6Lr/sCMKKCm
-fecqQjuCgGOlYx8ZzHyyZqjC0203b+J+BlHZRYQfEs4kUmSFC0iAToexIiIwquuuvuAC4EDosEKA
-A1GqtH6qRNdDYfOiaxaJSaSjpCuKAsR49GiKweR6NrFvG5Ybd0mN1MkGco/PU+PcF4UgStyYJ9OR
-JitHHmkHr96i5OTUawuzXnzUJIBHKWk7buis/UDr2O1xcSvy6Fgd60GXIsUf1DnQJ4+H4xj04KlG
-DfV0OoIu0G4skaMxXDtG6nsEEFZegB31pWXogvziB4xiRfUg3kZwhqG8k9MedKZssCz3AwyIDMvU
-clOGvGBG85hqwvG/Q/lwIHfKN0F5VVJjjVsSn8VoxIidrPIwq7ejMZdnrY8XD2zHc+0klGvIg5rQ
-mjdJBKuxFshsSUktq6HQjJLyQUp5ISXbY9e2nKd+Qmn7OmMCAwEAAaNjMGEwDwYDVR0TAQH/BAUw
-AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFNwuH9FhN3nkq9XVsxJxaD1qaJwiMB8GA1Ud
-IwQYMBaAFNwuH9FhN3nkq9XVsxJxaD1qaJwiMA0GCSqGSIb3DQEBCwUAA4ICAQCR8EICaEDuw2jA
-VC/f7GLDw56KoDEoqoOOpFaWEhCGVrqXctJUMHytGdUdaG/7FELYjQ7ztdGl4wJCXtzoRlgHNQIw
-4Lx0SsFDKv/bGtCwr2zD/cuz9X9tAy5ZVp0tLTWMstZDFyySCstd6IwPS3BD0IL/qMy/pJTAvoe9
-iuOTe8aPmxadJ2W8esVCgmxcB9CpwYhgROmYhRZf+I/KARDOJcP5YBugxZfD0yyIMaK9MOzQ0MAS
-8cE54+X1+NZK3TTN+2/BT+MAi1bikvcoskJ3ciNnxz8RFbLEAwW+uxF7Cr+obuf/WEPPm2eggAe2
-HcqtbepBEX4tdJP7wry+UUTF72glJ4DjyKDUEuzZpTcdN3y0kcra1LGWge9oXHYQSa9+pTeAsRxS
-vTOBTI/53WXZFM2KJVj04sWDpQmQ1GwUY7VA3+vA/MRYfg0UFodUJ25W5HCEuGwyEn6CMUO+1918
-oa2u1qsgEu8KwxCMSZY13At1XrFP1U80DhEgB3VDRemjEdqso5nCtnkn4rnvyOL2NSl6dPrFf4IF
-YqYK6miyeUcGbvJXqBUzxvd4Sj1Ce2t+/vdG6tHrju+IaFvowdlxfv1k7/9nR4hYJS8+hge9+6jl
-gqispdNpQ80xiEmEU5LAsTkbOYMBMMTyqfrQA71yN2BWHzZ8vTmR9W0Nv3vXkg==
------END CERTIFICATE-----
-
-ANF Secure Server Root CA
-=========================
------BEGIN CERTIFICATE-----
-MIIF7zCCA9egAwIBAgIIDdPjvGz5a7EwDQYJKoZIhvcNAQELBQAwgYQxEjAQBgNVBAUTCUc2MzI4
-NzUxMDELMAkGA1UEBhMCRVMxJzAlBgNVBAoTHkFORiBBdXRvcmlkYWQgZGUgQ2VydGlmaWNhY2lv
-bjEUMBIGA1UECxMLQU5GIENBIFJhaXoxIjAgBgNVBAMTGUFORiBTZWN1cmUgU2VydmVyIFJvb3Qg
-Q0EwHhcNMTkwOTA0MTAwMDM4WhcNMzkwODMwMTAwMDM4WjCBhDESMBAGA1UEBRMJRzYzMjg3NTEw
-MQswCQYDVQQGEwJFUzEnMCUGA1UEChMeQU5GIEF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uMRQw
-EgYDVQQLEwtBTkYgQ0EgUmFpejEiMCAGA1UEAxMZQU5GIFNlY3VyZSBTZXJ2ZXIgUm9vdCBDQTCC
-AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANvrayvmZFSVgpCjcqQZAZ2cC4Ffc0m6p6zz
-BE57lgvsEeBbphzOG9INgxwruJ4dfkUyYA8H6XdYfp9qyGFOtibBTI3/TO80sh9l2Ll49a2pcbnv
-T1gdpd50IJeh7WhM3pIXS7yr/2WanvtH2Vdy8wmhrnZEE26cLUQ5vPnHO6RYPUG9tMJJo8gN0pcv
-B2VSAKduyK9o7PQUlrZXH1bDOZ8rbeTzPvY1ZNoMHKGESy9LS+IsJJ1tk0DrtSOOMspvRdOoiXse
-zx76W0OLzc2oD2rKDF65nkeP8Nm2CgtYZRczuSPkdxl9y0oukntPLxB3sY0vaJxizOBQ+OyRp1RM
-VwnVdmPF6GUe7m1qzwmd+nxPrWAI/VaZDxUse6mAq4xhj0oHdkLePfTdsiQzW7i1o0TJrH93PB0j
-7IKppuLIBkwC/qxcmZkLLxCKpvR/1Yd0DVlJRfbwcVw5Kda/SiOL9V8BY9KHcyi1Swr1+KuCLH5z
-JTIdC2MKF4EA/7Z2Xue0sUDKIbvVgFHlSFJnLNJhiQcND85Cd8BEc5xEUKDbEAotlRyBr+Qc5RQe
-8TZBAQIvfXOn3kLMTOmJDVb3n5HUA8ZsyY/b2BzgQJhdZpmYgG4t/wHFzstGH6wCxkPmrqKEPMVO
-Hj1tyRRM4y5Bu8o5vzY8KhmqQYdOpc5LMnndkEl/AgMBAAGjYzBhMB8GA1UdIwQYMBaAFJxf0Gxj
-o1+TypOYCK2Mh6UsXME3MB0GA1UdDgQWBBScX9BsY6Nfk8qTmAitjIelLFzBNzAOBgNVHQ8BAf8E
-BAMCAYYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEATh65isagmD9uw2nAalxJ
-UqzLK114OMHVVISfk/CHGT0sZonrDUL8zPB1hT+L9IBdeeUXZ701guLyPI59WzbLWoAAKfLOKyzx
-j6ptBZNscsdW699QIyjlRRA96Gejrw5VD5AJYu9LWaL2U/HANeQvwSS9eS9OICI7/RogsKQOLHDt
-dD+4E5UGUcjohybKpFtqFiGS3XNgnhAY3jyB6ugYw3yJ8otQPr0R4hUDqDZ9MwFsSBXXiJCZBMXM
-5gf0vPSQ7RPi6ovDj6MzD8EpTBNO2hVWcXNyglD2mjN8orGoGjR0ZVzO0eurU+AagNjqOknkJjCb
-5RyKqKkVMoaZkgoQI1YS4PbOTOK7vtuNknMBZi9iPrJyJ0U27U1W45eZ/zo1PqVUSlJZS2Db7v54
-EX9K3BR5YLZrZAPbFYPhor72I5dQ8AkzNqdxliXzuUJ92zg/LFis6ELhDtjTO0wugumDLmsx2d1H
-hk9tl5EuT+IocTUW0fJz/iUrB0ckYyfI+PbZa/wSMVYIwFNCr5zQM378BvAxRAMU8Vjq8moNqRGy
-g77FGr8H6lnco4g175x2MjxNBiLOFeXdntiP2t7SxDnlF4HPOEfrf4htWRvfn0IUrn7PqLBmZdo3
-r5+qPeoott7VMVgWglvquxl1AnMaykgaIZOQCo6ThKd9OyMYkomgjaw=
------END CERTIFICATE-----
-
-Certum EC-384 CA
-================
------BEGIN CERTIFICATE-----
-MIICZTCCAeugAwIBAgIQeI8nXIESUiClBNAt3bpz9DAKBggqhkjOPQQDAzB0MQswCQYDVQQGEwJQ
-TDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2Vy
-dGlmaWNhdGlvbiBBdXRob3JpdHkxGTAXBgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwHhcNMTgwMzI2
-MDcyNDU0WhcNNDMwMzI2MDcyNDU0WjB0MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERh
-dGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkx
-GTAXBgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATEKI6rGFtq
-vm5kN2PkzeyrOvfMobgOgknXhimfoZTy42B4mIF4Bk3y7JoOV2CDn7TmFy8as10CW4kjPMIRBSqn
-iBMY81CE1700LCeJVf/OTOffph8oxPBUw7l8t1Ot68KjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD
-VR0OBBYEFI0GZnQkdjrzife81r1HfS+8EF9LMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNo
-ADBlAjADVS2m5hjEfO/JUG7BJw+ch69u1RsIGL2SKcHvlJF40jocVYli5RsJHrpka/F2tNQCMQC0
-QoSZ/6vnnvuRlydd3LBbMHHOXjgaatkl5+r3YZJW+OraNsKHZZYuciUvf9/DE8k=
------END CERTIFICATE-----
-
-Certum Trusted Root CA
-======================
------BEGIN CERTIFICATE-----
-MIIFwDCCA6igAwIBAgIQHr9ZULjJgDdMBvfrVU+17TANBgkqhkiG9w0BAQ0FADB6MQswCQYDVQQG
-EwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0g
-Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0Ew
-HhcNMTgwMzE2MTIxMDEzWhcNNDMwMzE2MTIxMDEzWjB6MQswCQYDVQQGEwJQTDEhMB8GA1UEChMY
-QXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBB
-dXRob3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQDRLY67tzbqbTeRn06TpwXkKQMlzhyC93yZn0EGze2jusDbCSzBfN8p
-fktlL5On1AFrAygYo9idBcEq2EXxkd7fO9CAAozPOA/qp1x4EaTByIVcJdPTsuclzxFUl6s1wB52
-HO8AU5853BSlLCIls3Jy/I2z5T4IHhQqNwuIPMqw9MjCoa68wb4pZ1Xi/K1ZXP69VyywkI3C7Te2
-fJmItdUDmj0VDT06qKhF8JVOJVkdzZhpu9PMMsmN74H+rX2Ju7pgE8pllWeg8xn2A1bUatMn4qGt
-g/BKEiJ3HAVz4hlxQsDsdUaakFjgao4rpUYwBI4Zshfjvqm6f1bxJAPXsiEodg42MEx51UGamqi4
-NboMOvJEGyCI98Ul1z3G4z5D3Yf+xOr1Uz5MZf87Sst4WmsXXw3Hw09Omiqi7VdNIuJGmj8PkTQk
-fVXjjJU30xrwCSss0smNtA0Aq2cpKNgB9RkEth2+dv5yXMSFytKAQd8FqKPVhJBPC/PgP5sZ0jeJ
-P/J7UhyM9uH3PAeXjA6iWYEMspA90+NZRu0PqafegGtaqge2Gcu8V/OXIXoMsSt0Puvap2ctTMSY
-njYJdmZm/Bo/6khUHL4wvYBQv3y1zgD2DGHZ5yQD4OMBgQ692IU0iL2yNqh7XAjlRICMb/gv1SHK
-HRzQ+8S1h9E6Tsd2tTVItQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM+xx1
-vALTn04uSNn5YFSqxLNP+jAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQADggIBAEii1QAL
-LtA/vBzVtVRJHlpr9OTy4EA34MwUe7nJ+jW1dReTagVphZzNTxl4WxmB82M+w85bj/UvXgF2Ez8s
-ALnNllI5SW0ETsXpD4YN4fqzX4IS8TrOZgYkNCvozMrnadyHncI013nR03e4qllY/p0m+jiGPp2K
-h2RX5Rc64vmNueMzeMGQ2Ljdt4NR5MTMI9UGfOZR0800McD2RrsLrfw9EAUqO0qRJe6M1ISHgCq8
-CYyqOhNf6DR5UMEQGfnTKB7U0VEwKbOukGfWHwpjscWpxkIxYxeU72nLL/qMFH3EQxiJ2fAyQOaA
-4kZf5ePBAFmo+eggvIksDkc0C+pXwlM2/KfUrzHN/gLldfq5Jwn58/U7yn2fqSLLiMmq0Uc9Nneo
-WWRrJ8/vJ8HjJLWG965+Mk2weWjROeiQWMODvA8s1pfrzgzhIMfatz7DP78v3DSk+yshzWePS/Tj
-6tQ/50+6uaWTRRxmHyH6ZF5v4HaUMst19W7l9o/HuKTMqJZ9ZPskWkoDbGs4xugDQ5r3V7mzKWmT
-OPQD8rv7gmsHINFSH5pkAnuYZttcTVoP0ISVoDwUQwbKytu4QTbaakRnh6+v40URFWkIsr4WOZck
-bxJF0WddCajJFdr60qZfE2Efv4WstK2tBZQIgx51F9NxO5NQI1mg7TyRVJ12AMXDuDjb
------END CERTIFICATE-----
-
-TunTrust Root CA
-================
------BEGIN CERTIFICATE-----
-MIIFszCCA5ugAwIBAgIUEwLV4kBMkkaGFmddtLu7sms+/BMwDQYJKoZIhvcNAQELBQAwYTELMAkG
-A1UEBhMCVE4xNzA1BgNVBAoMLkFnZW5jZSBOYXRpb25hbGUgZGUgQ2VydGlmaWNhdGlvbiBFbGVj
-dHJvbmlxdWUxGTAXBgNVBAMMEFR1blRydXN0IFJvb3QgQ0EwHhcNMTkwNDI2MDg1NzU2WhcNNDQw
-NDI2MDg1NzU2WjBhMQswCQYDVQQGEwJUTjE3MDUGA1UECgwuQWdlbmNlIE5hdGlvbmFsZSBkZSBD
-ZXJ0aWZpY2F0aW9uIEVsZWN0cm9uaXF1ZTEZMBcGA1UEAwwQVHVuVHJ1c3QgUm9vdCBDQTCCAiIw
-DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMPN0/y9BFPdDCA61YguBUtB9YOCfvdZn56eY+hz
-2vYGqU8ftPkLHzmMmiDQfgbU7DTZhrx1W4eI8NLZ1KMKsmwb60ksPqxd2JQDoOw05TDENX37Jk0b
-bjBU2PWARZw5rZzJJQRNmpA+TkBuimvNKWfGzC3gdOgFVwpIUPp6Q9p+7FuaDmJ2/uqdHYVy7BG7
-NegfJ7/Boce7SBbdVtfMTqDhuazb1YMZGoXRlJfXyqNlC/M4+QKu3fZnz8k/9YosRxqZbwUN/dAd
-gjH8KcwAWJeRTIAAHDOFli/LQcKLEITDCSSJH7UP2dl3RxiSlGBcx5kDPP73lad9UKGAwqmDrViW
-VSHbhlnUr8a83YFuB9tgYv7sEG7aaAH0gxupPqJbI9dkxt/con3YS7qC0lH4Zr8GRuR5KiY2eY8f
-Tpkdso8MDhz/yV3A/ZAQprE38806JG60hZC/gLkMjNWb1sjxVj8agIl6qeIbMlEsPvLfe/ZdeikZ
-juXIvTZxi11Mwh0/rViizz1wTaZQmCXcI/m4WEEIcb9PuISgjwBUFfyRbVinljvrS5YnzWuioYas
-DXxU5mZMZl+QviGaAkYt5IPCgLnPSz7ofzwB7I9ezX/SKEIBlYrilz0QIX32nRzFNKHsLA4KUiwS
-VXAkPcvCFDVDXSdOvsC9qnyW5/yeYa1E0wCXAgMBAAGjYzBhMB0GA1UdDgQWBBQGmpsfU33x9aTI
-04Y+oXNZtPdEITAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFAaamx9TffH1pMjThj6hc1m0
-90QhMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAqgVutt0Vyb+zxiD2BkewhpMl
-0425yAA/l/VSJ4hxyXT968pk21vvHl26v9Hr7lxpuhbI87mP0zYuQEkHDVneixCwSQXi/5E/S7fd
-Ao74gShczNxtr18UnH1YeA32gAm56Q6XKRm4t+v4FstVEuTGfbvE7Pi1HE4+Z7/FXxttbUcoqgRY
-YdZ2vyJ/0Adqp2RT8JeNnYA/u8EH22Wv5psymsNUk8QcCMNE+3tjEUPRahphanltkE8pjkcFwRJp
-adbGNjHh/PqAulxPxOu3Mqz4dWEX1xAZufHSCe96Qp1bWgvUxpVOKs7/B9dPfhgGiPEZtdmYu65x
-xBzndFlY7wyJz4sfdZMaBBSSSFCp61cpABbjNhzI+L/wM9VBD8TMPN3pM0MBkRArHtG5Xc0yGYuP
-jCB31yLEQtyEFpslbei0VXF/sHyz03FJuc9SpAQ/3D2gu68zngowYI7bnV2UqL1g52KAdoGDDIzM
-MEZJ4gzSqK/rYXHv5yJiqfdcZGyfFoxnNidF9Ql7v/YQCvGwjVRDjAS6oz/v4jXH+XTgbzRB0L9z
-ZVcg+ZtnemZoJE6AZb0QmQZZ8mWvuMZHu/2QeItBcy6vVR/cO5JyboTT0GFMDcx2V+IthSIVNg3r
-AZ3r2OvEhJn7wAzMMujjd9qDRIueVSjAi1jTkD5OGwDxFa2DK5o=
------END CERTIFICATE-----
-
-HARICA TLS RSA Root CA 2021
-===========================
------BEGIN CERTIFICATE-----
-MIIFpDCCA4ygAwIBAgIQOcqTHO9D88aOk8f0ZIk4fjANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQG
-EwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9u
-cyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0EgUm9vdCBDQSAyMDIxMB4XDTIxMDIxOTEwNTUz
-OFoXDTQ1MDIxMzEwNTUzN1owbDELMAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRl
-bWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgUlNB
-IFJvb3QgQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIvC569lmwVnlskN
-JLnQDmT8zuIkGCyEf3dRywQRNrhe7Wlxp57kJQmXZ8FHws+RFjZiPTgE4VGC/6zStGndLuwRo0Xu
-a2s7TL+MjaQenRG56Tj5eg4MmOIjHdFOY9TnuEFE+2uva9of08WRiFukiZLRgeaMOVig1mlDqa2Y
-Ulhu2wr7a89o+uOkXjpFc5gH6l8Cct4MpbOfrqkdtx2z/IpZ525yZa31MJQjB/OCFks1mJxTuy/K
-5FrZx40d/JiZ+yykgmvwKh+OC19xXFyuQnspiYHLA6OZyoieC0AJQTPb5lh6/a6ZcMBaD9YThnEv
-dmn8kN3bLW7R8pv1GmuebxWMevBLKKAiOIAkbDakO/IwkfN4E8/BPzWr8R0RI7VDIp4BkrcYAuUR
-0YLbFQDMYTfBKnya4dC6s1BG7oKsnTH4+yPiAwBIcKMJJnkVU2DzOFytOOqBAGMUuTNe3QvboEUH
-GjMJ+E20pwKmafTCWQWIZYVWrkvL4N48fS0ayOn7H6NhStYqE613TBoYm5EPWNgGVMWX+Ko/IIqm
-haZ39qb8HOLubpQzKoNQhArlT4b4UEV4AIHrW2jjJo3Me1xR9BQsQL4aYB16cmEdH2MtiKrOokWQ
-CPxrvrNQKlr9qEgYRtaQQJKQCoReaDH46+0N0x3GfZkYVVYnZS6NRcUk7M7jAgMBAAGjQjBAMA8G
-A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFApII6ZgpJIKM+qTW8VX6iVNvRLuMA4GA1UdDwEB/wQE
-AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAPpBIqm5iFSVmewzVjIuJndftTgfvnNAUX15QvWiWkKQU
-EapobQk1OUAJ2vQJLDSle1mESSmXdMgHHkdt8s4cUCbjnj1AUz/3f5Z2EMVGpdAgS1D0NTsY9FVq
-QRtHBmg8uwkIYtlfVUKqrFOFrJVWNlar5AWMxajaH6NpvVMPxP/cyuN+8kyIhkdGGvMA9YCRotxD
-QpSbIPDRzbLrLFPCU3hKTwSUQZqPJzLB5UkZv/HywouoCjkxKLR9YjYsTewfM7Z+d21+UPCfDtcR
-j88YxeMn/ibvBZ3PzzfF0HvaO7AWhAw6k9a+F9sPPg4ZeAnHqQJyIkv3N3a6dcSFA1pj1bF1BcK5
-vZStjBWZp5N99sXzqnTPBIWUmAD04vnKJGW/4GKvyMX6ssmeVkjaef2WdhW+o45WxLM0/L5H9MG0
-qPzVMIho7suuyWPEdr6sOBjhXlzPrjoiUevRi7PzKzMHVIf6tLITe7pTBGIBnfHAT+7hOtSLIBD6
-Alfm78ELt5BGnBkpjNxvoEppaZS3JGWg/6w/zgH7IS79aPib8qXPMThcFarmlwDB31qlpzmq6YR/
-PFGoOtmUW4y/Twhx5duoXNTSpv4Ao8YWxw/ogM4cKGR0GQjTQuPOAF1/sdwTsOEFy9EgqoZ0njnn
-kf3/W9b3raYvAwtt41dU63ZTGI0RmLo=
------END CERTIFICATE-----
-
-HARICA TLS ECC Root CA 2021
-===========================
------BEGIN CERTIFICATE-----
-MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQswCQYDVQQGEwJH
-UjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBD
-QTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9vdCBDQSAyMDIxMB4XDTIxMDIxOTExMDExMFoX
-DTQ1MDIxMzExMDEwOVowbDELMAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWlj
-IGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgRUNDIFJv
-b3QgQ0EgMjAyMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDgI/rGgltJ6rK9JOtDA4MM7KKrxcm1l
-AEeIhPyaJmuqS7psBAqIXhfyVYf8MLA04jRYVxqEU+kw2anylnTDUR9YSTHMmE5gEYd103KUkE+b
-ECUqqHgtvpBBWJAVcqeht6NCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUyRtTgRL+BNUW
-0aq8mm+3oJUZbsowDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2cAMGQCMBHervjcToiwqfAi
-rcJRQO9gcS3ujwLEXQNwSaSS6sUUiHCm0w2wqsosQJz76YJumgIwK0eaB8bRwoF8yguWGEEbo/Qw
-CZ61IygNnxS2PFOiTAZpffpskcYqSUXm7LcT4Tps
------END CERTIFICATE-----
-
-Autoridad de Certificacion Firmaprofesional CIF A62634068
-=========================================================
------BEGIN CERTIFICATE-----
-MIIGFDCCA/ygAwIBAgIIG3Dp0v+ubHEwDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCRVMxQjBA
-BgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1hcHJvZmVzaW9uYWwgQ0lGIEE2
-MjYzNDA2ODAeFw0xNDA5MjMxNTIyMDdaFw0zNjA1MDUxNTIyMDdaMFExCzAJBgNVBAYTAkVTMUIw
-QAYDVQQDDDlBdXRvcmlkYWQgZGUgQ2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBB
-NjI2MzQwNjgwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDD
-Utd9thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQMcas9UX4P
-B99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefGL9ItWY16Ck6WaVICqjaY
-7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15iNA9wBj4gGFrO93IbJWyTdBSTo3OxDqqH
-ECNZXyAFGUftaI6SEspd/NYrspI8IM/hX68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyI
-plD9amML9ZMWGxmPsu2bm8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctX
-MbScyJCyZ/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirjaEbsX
-LZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/TKI8xWVvTyQKmtFLK
-bpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF6NkBiDkal4ZkQdU7hwxu+g/GvUgU
-vzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVhOSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMB0GA1Ud
-DgQWBBRlzeurNR4APn7VdMActHNHDhpkLzASBgNVHRMBAf8ECDAGAQH/AgEBMIGmBgNVHSAEgZ4w
-gZswgZgGBFUdIAAwgY8wLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuZmlybWFwcm9mZXNpb25hbC5j
-b20vY3BzMFwGCCsGAQUFBwICMFAeTgBQAGEAcwBlAG8AIABkAGUAIABsAGEAIABCAG8AbgBhAG4A
-bwB2AGEAIAA0ADcAIABCAGEAcgBjAGUAbABvAG4AYQAgADAAOAAwADEANzAOBgNVHQ8BAf8EBAMC
-AQYwDQYJKoZIhvcNAQELBQADggIBAHSHKAIrdx9miWTtj3QuRhy7qPj4Cx2Dtjqn6EWKB7fgPiDL
-4QjbEwj4KKE1soCzC1HA01aajTNFSa9J8OA9B3pFE1r/yJfY0xgsfZb43aJlQ3CTkBW6kN/oGbDb
-LIpgD7dvlAceHabJhfa9NPhAeGIQcDq+fUs5gakQ1JZBu/hfHAsdCPKxsIl68veg4MSPi3i1O1il
-I45PVf42O+AMt8oqMEEgtIDNrvx2ZnOorm7hfNoD6JQg5iKj0B+QXSBTFCZX2lSX3xZEEAEeiGaP
-cjiT3SC3NL7X8e5jjkd5KAb881lFJWAiMxujX6i6KtoaPc1A6ozuBRWV1aUsIC+nmCjuRfzxuIgA
-LI9C2lHVnOUTaHFFQ4ueCyE8S1wF3BqfmI7avSKecs2tCsvMo2ebKHTEm9caPARYpoKdrcd7b/+A
-lun4jWq9GJAd/0kakFI3ky88Al2CdgtR5xbHV/g4+afNmyJU72OwFW1TZQNKXkqgsqeOSQBZONXH
-9IBk9W6VULgRfhVwOEqwf9DEMnDAGf/JOC0ULGb0QkTmVXYbgBVX/8Cnp6o5qtjTcNAuuuuUavpf
-NIbnYrX9ivAwhZTJryQCL2/W3Wf+47BVTwSYT6RBVuKT0Gro1vP7ZeDOdcQxWQzugsgMYDNKGbqE
-ZycPvEJdvSRUDewdcAZfpLz6IHxV
------END CERTIFICATE-----
-
-vTrus ECC Root CA
-=================
------BEGIN CERTIFICATE-----
-MIICDzCCAZWgAwIBAgIUbmq8WapTvpg5Z6LSa6Q75m0c1towCgYIKoZIzj0EAwMwRzELMAkGA1UE
-BhMCQ04xHDAaBgNVBAoTE2lUcnVzQ2hpbmEgQ28uLEx0ZC4xGjAYBgNVBAMTEXZUcnVzIEVDQyBS
-b290IENBMB4XDTE4MDczMTA3MjY0NFoXDTQzMDczMTA3MjY0NFowRzELMAkGA1UEBhMCQ04xHDAa
-BgNVBAoTE2lUcnVzQ2hpbmEgQ28uLEx0ZC4xGjAYBgNVBAMTEXZUcnVzIEVDQyBSb290IENBMHYw
-EAYHKoZIzj0CAQYFK4EEACIDYgAEZVBKrox5lkqqHAjDo6LN/llWQXf9JpRCux3NCNtzslt188+c
-ToL0v/hhJoVs1oVbcnDS/dtitN9Ti72xRFhiQgnH+n9bEOf+QP3A2MMrMudwpremIFUde4BdS49n
-TPEQo0IwQDAdBgNVHQ4EFgQUmDnNvtiyjPeyq+GtJK97fKHbH88wDwYDVR0TAQH/BAUwAwEB/zAO
-BgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwMDaAAwZQIwV53dVvHH4+m4SVBrm2nDb+zDfSXkV5UT
-QJtS0zvzQBm8JsctBp61ezaf9SXUY2sAAjEA6dPGnlaaKsyh2j/IZivTWJwghfqrkYpwcBE4YGQL
-YgmRWAD5Tfs0aNoJrSEGGJTO
------END CERTIFICATE-----
-
-vTrus Root CA
-=============
------BEGIN CERTIFICATE-----
-MIIFVjCCAz6gAwIBAgIUQ+NxE9izWRRdt86M/TX9b7wFjUUwDQYJKoZIhvcNAQELBQAwQzELMAkG
-A1UEBhMCQ04xHDAaBgNVBAoTE2lUcnVzQ2hpbmEgQ28uLEx0ZC4xFjAUBgNVBAMTDXZUcnVzIFJv
-b3QgQ0EwHhcNMTgwNzMxMDcyNDA1WhcNNDMwNzMxMDcyNDA1WjBDMQswCQYDVQQGEwJDTjEcMBoG
-A1UEChMTaVRydXNDaGluYSBDby4sTHRkLjEWMBQGA1UEAxMNdlRydXMgUm9vdCBDQTCCAiIwDQYJ
-KoZIhvcNAQEBBQADggIPADCCAgoCggIBAL1VfGHTuB0EYgWgrmy3cLRB6ksDXhA/kFocizuwZots
-SKYcIrrVQJLuM7IjWcmOvFjai57QGfIvWcaMY1q6n6MLsLOaXLoRuBLpDLvPbmyAhykUAyyNJJrI
-ZIO1aqwTLDPxn9wsYTwaP3BVm60AUn/PBLn+NvqcwBauYv6WTEN+VRS+GrPSbcKvdmaVayqwlHeF
-XgQPYh1jdfdr58tbmnDsPmcF8P4HCIDPKNsFxhQnL4Z98Cfe/+Z+M0jnCx5Y0ScrUw5XSmXX+6KA
-YPxMvDVTAWqXcoKv8R1w6Jz1717CbMdHflqUhSZNO7rrTOiwCcJlwp2dCZtOtZcFrPUGoPc2BX70
-kLJrxLT5ZOrpGgrIDajtJ8nU57O5q4IikCc9Kuh8kO+8T/3iCiSn3mUkpF3qwHYw03dQ+A0Em5Q2
-AXPKBlim0zvc+gRGE1WKyURHuFE5Gi7oNOJ5y1lKCn+8pu8fA2dqWSslYpPZUxlmPCdiKYZNpGvu
-/9ROutW04o5IWgAZCfEF2c6Rsffr6TlP9m8EQ5pV9T4FFL2/s1m02I4zhKOQUqqzApVg+QxMaPnu
-1RcN+HFXtSXkKe5lXa/R7jwXC1pDxaWG6iSe4gUH3DRCEpHWOXSuTEGC2/KmSNGzm/MzqvOmwMVO
-9fSddmPmAsYiS8GVP1BkLFTltvA8Kc9XAgMBAAGjQjBAMB0GA1UdDgQWBBRUYnBj8XWEQ1iO0RYg
-scasGrz2iTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOC
-AgEAKbqSSaet8PFww+SX8J+pJdVrnjT+5hpk9jprUrIQeBqfTNqK2uwcN1LgQkv7bHbKJAs5EhWd
-nxEt/Hlk3ODg9d3gV8mlsnZwUKT+twpw1aA08XXXTUm6EdGz2OyC/+sOxL9kLX1jbhd47F18iMjr
-jld22VkE+rxSH0Ws8HqA7Oxvdq6R2xCOBNyS36D25q5J08FsEhvMKar5CKXiNxTKsbhm7xqC5PD4
-8acWabfbqWE8n/Uxy+QARsIvdLGx14HuqCaVvIivTDUHKgLKeBRtRytAVunLKmChZwOgzoy8sHJn
-xDHO2zTlJQNgJXtxmOTAGytfdELSS8VZCAeHvsXDf+eW2eHcKJfWjwXj9ZtOyh1QRwVTsMo554Wg
-icEFOwE30z9J4nfrI8iIZjs9OXYhRvHsXyO466JmdXTBQPfYaJqT4i2pLr0cox7IdMakLXogqzu4
-sEb9b91fUlV1YvCXoHzXOP0l382gmxDPi7g4Xl7FtKYCNqEeXxzP4padKar9mK5S4fNBUvupLnKW
-nyfjqnN9+BojZns7q2WwMgFLFT49ok8MKzWixtlnEjUwzXYuFrOZnk1PTi07NEPhmg4NpGaXutIc
-SkwsKouLgU9xGqndXHt7CMUADTdA43x7VF8vhV929vensBxXVsFy6K2ir40zSbofitzmdHxghm+H
-l3s=
------END CERTIFICATE-----
-
-ISRG Root X2
-============
------BEGIN CERTIFICATE-----
-MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQswCQYDVQQGEwJV
-UzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElT
-UkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVT
-MSkwJwYDVQQKEyBJbnRlcm5ldCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNS
-RyBSb290IFgyMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H
-ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9ItgKbppb
-d9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
-HQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZIzj0EAwMDaAAwZQIwe3lORlCEwkSHRhtF
-cP9Ymd70/aTSVaYgLXTWNLxBo1BfASdWtL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5
-U6VR5CmD1/iQMVtCnwr1/q4AaOeMSQ+2b1tbFfLn
------END CERTIFICATE-----
-
-HiPKI Root CA - G1
-==================
------BEGIN CERTIFICATE-----
-MIIFajCCA1KgAwIBAgIQLd2szmKXlKFD6LDNdmpeYDANBgkqhkiG9w0BAQsFADBPMQswCQYDVQQG
-EwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0ZC4xGzAZBgNVBAMMEkhpUEtJ
-IFJvb3QgQ0EgLSBHMTAeFw0xOTAyMjIwOTQ2MDRaFw0zNzEyMzExNTU5NTlaME8xCzAJBgNVBAYT
-AlRXMSMwIQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEbMBkGA1UEAwwSSGlQS0kg
-Um9vdCBDQSAtIEcxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9B5/UnMyDHPkvRN0
-o9QwqNCuS9i233VHZvR85zkEHmpwINJaR3JnVfSl6J3VHiGh8Ge6zCFovkRTv4354twvVcg3Px+k
-wJyz5HdcoEb+d/oaoDjq7Zpy3iu9lFc6uux55199QmQ5eiY29yTw1S+6lZgRZq2XNdZ1AYDgr/SE
-YYwNHl98h5ZeQa/rh+r4XfEuiAU+TCK72h8q3VJGZDnzQs7ZngyzsHeXZJzA9KMuH5UHsBffMNsA
-GJZMoYFL3QRtU6M9/Aes1MU3guvklQgZKILSQjqj2FPseYlgSGDIcpJQ3AOPgz+yQlda22rpEZfd
-hSi8MEyr48KxRURHH+CKFgeW0iEPU8DtqX7UTuybCeyvQqww1r/REEXgphaypcXTT3OUM3ECoWqj
-1jOXTyFjHluP2cFeRXF3D4FdXyGarYPM+l7WjSNfGz1BryB1ZlpK9p/7qxj3ccC2HTHsOyDry+K4
-9a6SsvfhhEvyovKTmiKe0xRvNlS9H15ZFblzqMF8b3ti6RZsR1pl8w4Rm0bZ/W3c1pzAtH2lsN0/
-Vm+h+fbkEkj9Bn8SV7apI09bA8PgcSojt/ewsTu8mL3WmKgMa/aOEmem8rJY5AIJEzypuxC00jBF
-8ez3ABHfZfjcK0NVvxaXxA/VLGGEqnKG/uY6fsI/fe78LxQ+5oXdUG+3Se0CAwEAAaNCMEAwDwYD
-VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU8ncX+l6o/vY9cdVouslGDDjYr7AwDgYDVR0PAQH/BAQD
-AgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBQUfB13HAE4/+qddRxosuej6ip0691x1TPOhwEmSKsxBHi
-7zNKpiMdDg1H2DfHb680f0+BazVP6XKlMeJ45/dOlBhbQH3PayFUhuaVevvGyuqcSE5XCV0vrPSl
-tJczWNWseanMX/mF+lLFjfiRFOs6DRfQUsJ748JzjkZ4Bjgs6FzaZsT0pPBWGTMpWmWSBUdGSquE
-wx4noR8RkpkndZMPvDY7l1ePJlsMu5wP1G4wB9TcXzZoZjmDlicmisjEOf6aIW/Vcobpf2Lll07Q
-JNBAsNB1CI69aO4I1258EHBGG3zgiLKecoaZAeO/n0kZtCW+VmWuF2PlHt/o/0elv+EmBYTksMCv
-5wiZqAxeJoBF1PhoL5aPruJKHJwWDBNvOIf2u8g0X5IDUXlwpt/L9ZlNec1OvFefQ05rLisY+Gpz
-jLrFNe85akEez3GoorKGB1s6yeHvP2UEgEcyRHCVTjFnanRbEEV16rCf0OY1/k6fi8wrkkVbbiVg
-hUbN0aqwdmaTd5a+g744tiROJgvM7XpWGuDpWsZkrUx6AEhEL7lAuxM+vhV4nYWBSipX3tUZQ9rb
-yltHhoMLP7YNdnhzeSJesYAfz77RP1YQmCuVh6EfnWQUYDksswBVLuT1sw5XxJFBAJw/6KXf6vb/
-yPCtbVKoF6ubYfwSUTXkJf2vqmqGOQ==
------END CERTIFICATE-----
-
-GlobalSign ECC Root CA - R4
-===========================
------BEGIN CERTIFICATE-----
-MIIB3DCCAYOgAwIBAgINAgPlfvU/k/2lCSGypjAKBggqhkjOPQQDAjBQMSQwIgYDVQQLExtHbG9i
-YWxTaWduIEVDQyBSb290IENBIC0gUjQxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkds
-b2JhbFNpZ24wHhcNMTIxMTEzMDAwMDAwWhcNMzgwMTE5MDMxNDA3WjBQMSQwIgYDVQQLExtHbG9i
-YWxTaWduIEVDQyBSb290IENBIC0gUjQxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkds
-b2JhbFNpZ24wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAS4xnnTj2wlDp8uORkcA6SumuU5BwkW
-ymOxuYb4ilfBV85C+nOh92VC/x7BALJucw7/xyHlGKSq2XE/qNS5zowdo0IwQDAOBgNVHQ8BAf8E
-BAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVLB7rUW44kB/+wpu+74zyTyjhNUwCgYI
-KoZIzj0EAwIDRwAwRAIgIk90crlgr/HmnKAWBVBfw147bmF0774BxL4YSFlhgjICICadVGNA3jdg
-UM/I2O2dgq43mLyjj0xMqTQrbO/7lZsm
------END CERTIFICATE-----
-
-GTS Root R1
-===========
------BEGIN CERTIFICATE-----
-MIIFVzCCAz+gAwIBAgINAgPlk28xsBNJiGuiFzANBgkqhkiG9w0BAQwFADBHMQswCQYDVQQGEwJV
-UzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3Qg
-UjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UE
-ChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIiMA0G
-CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx9vaM
-f/vo27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vXmX7wCl7raKb0
-xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7zUjwTcLCeoiKu7rPWRnWr4+w
-B7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0PfyblqAj+lug8aJRT7oM6iCsVlgmy4HqMLnXW
-nOunVmSPlk9orj2XwoSPwLxAwAtcvfaHszVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly4cpk
-9+aCEI3oncKKiPo4Zor8Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr06zq
-kUspzBmkMiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOORc92wO1A
-K/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYWk70paDPvOmbsB4om3xPX
-V2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+DVrNVjzRlwW5y0vtOUucxD/SVRNuJLDW
-cfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgFlQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T
-AQH/BAUwAwEB/zAdBgNVHQ4EFgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEMBQAD
-ggIBAJ+qQibbC5u+/x6Wki4+omVKapi6Ist9wTrYggoGxval3sBOh2Z5ofmmWJyq+bXmYOfg6LEe
-QkEzCzc9zolwFcq1JKjPa7XSQCGYzyI0zzvFIoTgxQ6KfF2I5DUkzps+GlQebtuyh6f88/qBVRRi
-ClmpIgUxPoLW7ttXNLwzldMXG+gnoot7TiYaelpkttGsN/H9oPM47HLwEXWdyzRSjeZ2axfG34ar
-J45JK3VmgRAhpuo+9K4l/3wV3s6MJT/KYnAK9y8JZgfIPxz88NtFMN9iiMG1D53Dn0reWVlHxYci
-NuaCp+0KueIHoI17eko8cdLiA6EfMgfdG+RCzgwARWGAtQsgWSl4vflVy2PFPEz0tv/bal8xa5me
-LMFrUKTX5hgUvYU/Z6tGn6D/Qqc6f1zLXbBwHSs09dR2CQzreExZBfMzQsNhFRAbd03OIozUhfJF
-fbdT6u9AWpQKXCBfTkBdYiJ23//OYb2MI3jSNwLgjt7RETeJ9r/tSQdirpLsQBqvFAnZ0E6yove+
-7u7Y/9waLd64NnHi/Hm3lCXRSHNboTXns5lndcEZOitHTtNCjv0xyBZm2tIMPNuzjsmhDYAPexZ3
-FL//2wmUspO8IFgV6dtxQ/PeEMMA3KgqlbbC1j+Qa3bbbP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3
-gm3c
------END CERTIFICATE-----
-
-GTS Root R2
-===========
------BEGIN CERTIFICATE-----
-MIIFVzCCAz+gAwIBAgINAgPlrsWNBCUaqxElqjANBgkqhkiG9w0BAQwFADBHMQswCQYDVQQGEwJV
-UzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3Qg
-UjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UE
-ChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0G
-CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3Lv
-CvptnfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY6Dlo7JUl
-e3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAuMC6C/Pq8tBcKSOWIm8Wb
-a96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7kRXuJVfeKH2JShBKzwkCX44ofR5GmdFrS
-+LFjKBC4swm4VndAoiaYecb+3yXuPuWgf9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7M
-kogwTZq9TwtImoS1mKPV+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJG
-r61K8YzodDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RWIr9q
-S34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKaG73VululycslaVNV
-J1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCqgc7dGtxRcw1PcOnlthYhGXmy5okL
-dWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T
-AQH/BAUwAwEB/zAdBgNVHQ4EFgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQAD
-ggIBAB/Kzt3HvqGf2SdMC9wXmBFqiN495nFWcrKeGk6c1SuYJF2ba3uwM4IJvd8lRuqYnrYb/oM8
-0mJhwQTtzuDFycgTE1XnqGOtjHsB/ncw4c5omwX4Eu55MaBBRTUoCnGkJE+M3DyCB19m3H0Q/gxh
-swWV7uGugQ+o+MePTagjAiZrHYNSVc61LwDKgEDg4XSsYPWHgJ2uNmSRXbBoGOqKYcl3qJfEycel
-/FVL8/B/uWU9J2jQzGv6U53hkRrJXRqWbTKH7QMgyALOWr7Z6v2yTcQvG99fevX4i8buMTolUVVn
-jWQye+mew4K6Ki3pHrTgSAai/GevHyICc/sgCq+dVEuhzf9gR7A/Xe8bVr2XIZYtCtFenTgCR2y5
-9PYjJbigapordwj6xLEokCZYCDzifqrXPW+6MYgKBesntaFJ7qBFVHvmJ2WZICGoo7z7GJa7Um8M
-7YNRTOlZ4iBgxcJlkoKM8xAfDoqXvneCbT+PHV28SSe9zE8P4c52hgQjxcCMElv924SgJPFI/2R8
-0L5cFtHvma3AH/vLrrw4IgYmZNralw4/KBVEqE8AyvCazM90arQ+POuV7LXTWtiBmelDGDfrs7vR
-WGJB82bSj6p4lVQgw1oudCvV0b4YacCs1aTPObpRhANl6WLAYv7YTVWW4tAR+kg0Eeye7QUd5MjW
-HYbL
------END CERTIFICATE-----
-
-GTS Root R3
-===========
------BEGIN CERTIFICATE-----
-MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJVUzEi
-MCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMw
-HhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZ
-R29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjO
-PQIBBgUrgQQAIgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout
-736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL24CejQjBA
-MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTB8Sa6oC2uhYHP0/Eq
-Er24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azT
-L818+FsuVbu/3ZL3pAzcMeGiAjEA/JdmZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV
-11RZt+cRLInUue4X
------END CERTIFICATE-----
-
-GTS Root R4
-===========
------BEGIN CERTIFICATE-----
-MIICCTCCAY6gAwIBAgINAgPlwGjvYxqccpBQUjAKBggqhkjOPQQDAzBHMQswCQYDVQQGEwJVUzEi
-MCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQw
-HhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZ
-R29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQwdjAQBgcqhkjO
-PQIBBgUrgQQAIgNiAATzdHOnaItgrkO4NcWBMHtLSZ37wWHO5t5GvWvVYRg1rkDdc/eJkTBa6zzu
-hXyiQHY7qca4R9gq55KRanPpsXI5nymfopjTX15YhmUPoYRlBtHci8nHc8iMai/lxKvRHYqjQjBA
-MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSATNbrdP9JNqPV2Py1
-PsVq8JQdjDAKBggqhkjOPQQDAwNpADBmAjEA6ED/g94D9J+uHXqnLrmvT/aDHQ4thQEd0dlq7A/C
-r8deVl5c1RxYIigL9zC2L7F8AjEA8GE8p/SgguMh1YQdc4acLa/KNJvxn7kjNuK8YAOdgLOaVsjh
-4rsUecrNIdSUtUlD
------END CERTIFICATE-----
-
-Telia Root CA v2
-================
------BEGIN CERTIFICATE-----
-MIIFdDCCA1ygAwIBAgIPAWdfJ9b+euPkrL4JWwWeMA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYT
-AkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEZMBcGA1UEAwwQVGVsaWEgUm9vdCBDQSB2
-MjAeFw0xODExMjkxMTU1NTRaFw00MzExMjkxMTU1NTRaMEQxCzAJBgNVBAYTAkZJMRowGAYDVQQK
-DBFUZWxpYSBGaW5sYW5kIE95ajEZMBcGA1UEAwwQVGVsaWEgUm9vdCBDQSB2MjCCAiIwDQYJKoZI
-hvcNAQEBBQADggIPADCCAgoCggIBALLQPwe84nvQa5n44ndp586dpAO8gm2h/oFlH0wnrI4AuhZ7
-6zBqAMCzdGh+sq/H1WKzej9Qyow2RCRj0jbpDIX2Q3bVTKFgcmfiKDOlyzG4OiIjNLh9vVYiQJ3q
-9HsDrWj8soFPmNB06o3lfc1jw6P23pLCWBnglrvFxKk9pXSW/q/5iaq9lRdU2HhE8Qx3FZLgmEKn
-pNaqIJLNwaCzlrI6hEKNfdWV5Nbb6WLEWLN5xYzTNTODn3WhUidhOPFZPY5Q4L15POdslv5e2QJl
-tI5c0BE0312/UqeBAMN/mUWZFdUXyApT7GPzmX3MaRKGwhfwAZ6/hLzRUssbkmbOpFPlob/E2wnW
-5olWK8jjfN7j/4nlNW4o6GwLI1GpJQXrSPjdscr6bAhR77cYbETKJuFzxokGgeWKrLDiKca5JLNr
-RBH0pUPCTEPlcDaMtjNXepUugqD0XBCzYYP2AgWGLnwtbNwDRm41k9V6lS/eINhbfpSQBGq6WT0E
-BXWdN6IOLj3rwaRSg/7Qa9RmjtzG6RJOHSpXqhC8fF6CfaamyfItufUXJ63RDolUK5X6wK0dmBR4
-M0KGCqlztft0DbcbMBnEWg4cJ7faGND/isgFuvGqHKI3t+ZIpEYslOqodmJHixBTB0hXbOKSTbau
-BcvcwUpej6w9GU7C7WB1K9vBykLVAgMBAAGjYzBhMB8GA1UdIwQYMBaAFHKs5DN5qkWH9v2sHZ7W
-xy+G2CQ5MB0GA1UdDgQWBBRyrOQzeapFh/b9rB2e1scvhtgkOTAOBgNVHQ8BAf8EBAMCAQYwDwYD
-VR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAoDtZpwmUPjaE0n4vOaWWl/oRrfxn83EJ
-8rKJhGdEr7nv7ZbsnGTbMjBvZ5qsfl+yqwE2foH65IRe0qw24GtixX1LDoJt0nZi0f6X+J8wfBj5
-tFJ3gh1229MdqfDBmgC9bXXYfef6xzijnHDoRnkDry5023X4blMMA8iZGok1GTzTyVR8qPAs5m4H
-eW9q4ebqkYJpCh3DflminmtGFZhb069GHWLIzoBSSRE/yQQSwxN8PzuKlts8oB4KtItUsiRnDe+C
-y748fdHif64W1lZYudogsYMVoe+KTTJvQS8TUoKU1xrBeKJR3Stwbbca+few4GeXVtt8YVMJAygC
-QMez2P2ccGrGKMOF6eLtGpOg3kuYooQ+BXcBlj37tCAPnHICehIv1aO6UXivKitEZU61/Qrowc15
-h2Er3oBXRb9n8ZuRXqWk7FlIEA04x7D6w0RtBPV4UBySllva9bguulvP5fBqnUsvWHMtTy3EHD70
-sz+rFQ47GUGKpMFXEmZxTPpT41frYpUJnlTd0cI8Vzy9OK2YZLe4A5pTVmBds9hCG1xLEooc6+t9
-xnppxyd/pPiL8uSUZodL6ZQHCRJ5irLrdATczvREWeAWysUsWNc8e89ihmpQfTU2Zqf7N+cox9jQ
-raVplI/owd8k+BsHMYeB2F326CjYSlKArBPuUBQemMc=
------END CERTIFICATE-----
-
-D-TRUST BR Root CA 1 2020
-=========================
------BEGIN CERTIFICATE-----
-MIIC2zCCAmCgAwIBAgIQfMmPK4TX3+oPyWWa00tNljAKBggqhkjOPQQDAzBIMQswCQYDVQQGEwJE
-RTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlELVRSVVNUIEJSIFJvb3QgQ0EgMSAy
-MDIwMB4XDTIwMDIxMTA5NDUwMFoXDTM1MDIxMTA5NDQ1OVowSDELMAkGA1UEBhMCREUxFTATBgNV
-BAoTDEQtVHJ1c3QgR21iSDEiMCAGA1UEAxMZRC1UUlVTVCBCUiBSb290IENBIDEgMjAyMDB2MBAG
-ByqGSM49AgEGBSuBBAAiA2IABMbLxyjR+4T1mu9CFCDhQ2tuda38KwOE1HaTJddZO0Flax7mNCq7
-dPYSzuht56vkPE4/RAiLzRZxy7+SmfSk1zxQVFKQhYN4lGdnoxwJGT11NIXe7WB9xwy0QVK5buXu
-QqOCAQ0wggEJMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHOREKv/VbNafAkl1bK6CKBrqx9t
-MA4GA1UdDwEB/wQEAwIBBjCBxgYDVR0fBIG+MIG7MD6gPKA6hjhodHRwOi8vY3JsLmQtdHJ1c3Qu
-bmV0L2NybC9kLXRydXN0X2JyX3Jvb3RfY2FfMV8yMDIwLmNybDB5oHegdYZzbGRhcDovL2RpcmVj
-dG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwQlIlMjBSb290JTIwQ0ElMjAxJTIwMjAyMCxP
-PUQtVHJ1c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAKBggqhkjOPQQD
-AwNpADBmAjEAlJAtE/rhY/hhY+ithXhUkZy4kzg+GkHaQBZTQgjKL47xPoFWwKrY7RjEsK70Pvom
-AjEA8yjixtsrmfu3Ubgko6SUeho/5jbiA1czijDLgsfWFBHVdWNbFJWcHwHP2NVypw87
------END CERTIFICATE-----
-
-D-TRUST EV Root CA 1 2020
-=========================
------BEGIN CERTIFICATE-----
-MIIC2zCCAmCgAwIBAgIQXwJB13qHfEwDo6yWjfv/0DAKBggqhkjOPQQDAzBIMQswCQYDVQQGEwJE
-RTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlELVRSVVNUIEVWIFJvb3QgQ0EgMSAy
-MDIwMB4XDTIwMDIxMTEwMDAwMFoXDTM1MDIxMTA5NTk1OVowSDELMAkGA1UEBhMCREUxFTATBgNV
-BAoTDEQtVHJ1c3QgR21iSDEiMCAGA1UEAxMZRC1UUlVTVCBFViBSb290IENBIDEgMjAyMDB2MBAG
-ByqGSM49AgEGBSuBBAAiA2IABPEL3YZDIBnfl4XoIkqbz52Yv7QFJsnL46bSj8WeeHsxiamJrSc8
-ZRCC/N/DnU7wMyPE0jL1HLDfMxddxfCxivnvubcUyilKwg+pf3VlSSowZ/Rk99Yad9rDwpdhQntJ
-raOCAQ0wggEJMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFH8QARY3OqQo5FD4pPfsazK2/umL
-MA4GA1UdDwEB/wQEAwIBBjCBxgYDVR0fBIG+MIG7MD6gPKA6hjhodHRwOi8vY3JsLmQtdHJ1c3Qu
-bmV0L2NybC9kLXRydXN0X2V2X3Jvb3RfY2FfMV8yMDIwLmNybDB5oHegdYZzbGRhcDovL2RpcmVj
-dG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwRVYlMjBSb290JTIwQ0ElMjAxJTIwMjAyMCxP
-PUQtVHJ1c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAKBggqhkjOPQQD
-AwNpADBmAjEAyjzGKnXCXnViOTYAYFqLwZOZzNnbQTs7h5kXO9XMT8oi96CAy/m0sRtW9XLS/BnR
-AjEAkfcwkz8QRitxpNA7RJvAKQIFskF3UfN5Wp6OFKBOQtJbgfM0agPnIjhQW+0ZT0MW
------END CERTIFICATE-----
-
-DigiCert TLS ECC P384 Root G5
-=============================
------BEGIN CERTIFICATE-----
-MIICGTCCAZ+gAwIBAgIQCeCTZaz32ci5PhwLBCou8zAKBggqhkjOPQQDAzBOMQswCQYDVQQGEwJV
-UzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJjAkBgNVBAMTHURpZ2lDZXJ0IFRMUyBFQ0MgUDM4
-NCBSb290IEc1MB4XDTIxMDExNTAwMDAwMFoXDTQ2MDExNDIzNTk1OVowTjELMAkGA1UEBhMCVVMx
-FzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMSYwJAYDVQQDEx1EaWdpQ2VydCBUTFMgRUNDIFAzODQg
-Um9vdCBHNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABMFEoc8Rl1Ca3iOCNQfN0MsYndLxf3c1Tzvd
-lHJS7cI7+Oz6e2tYIOyZrsn8aLN1udsJ7MgT9U7GCh1mMEy7H0cKPGEQQil8pQgO4CLp0zVozptj
-n4S1mU1YoI71VOeVyaNCMEAwHQYDVR0OBBYEFMFRRVBZqz7nLFr6ICISB4CIfBFqMA4GA1UdDwEB
-/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQCJao1H5+z8blUD2Wds
-Jk6Dxv3J+ysTvLd6jLRl0mlpYxNjOyZQLgGheQaRnUi/wr4CMEfDFXuxoJGZSZOoPHzoRgaLLPIx
-AJSdYsiJvRmEFOml+wG4DXZDjC5Ty3zfDBeWUA==
------END CERTIFICATE-----
-
-DigiCert TLS RSA4096 Root G5
-============================
------BEGIN CERTIFICATE-----
-MIIFZjCCA06gAwIBAgIQCPm0eKj6ftpqMzeJ3nzPijANBgkqhkiG9w0BAQwFADBNMQswCQYDVQQG
-EwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJTAjBgNVBAMTHERpZ2lDZXJ0IFRMUyBSU0E0
-MDk2IFJvb3QgRzUwHhcNMjEwMTE1MDAwMDAwWhcNNDYwMTE0MjM1OTU5WjBNMQswCQYDVQQGEwJV
-UzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJTAjBgNVBAMTHERpZ2lDZXJ0IFRMUyBSU0E0MDk2
-IFJvb3QgRzUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz0PTJeRGd/fxmgefM1eS8
-7IE+ajWOLrfn3q/5B03PMJ3qCQuZvWxX2hhKuHisOjmopkisLnLlvevxGs3npAOpPxG02C+JFvuU
-AT27L/gTBaF4HI4o4EXgg/RZG5Wzrn4DReW+wkL+7vI8toUTmDKdFqgpwgscONyfMXdcvyej/Ces
-tyu9dJsXLfKB2l2w4SMXPohKEiPQ6s+d3gMXsUJKoBZMpG2T6T867jp8nVid9E6P/DsjyG244gXa
-zOvswzH016cpVIDPRFtMbzCe88zdH5RDnU1/cHAN1DrRN/BsnZvAFJNY781BOHW8EwOVfH/jXOnV
-DdXifBBiqmvwPXbzP6PosMH976pXTayGpxi0KcEsDr9kvimM2AItzVwv8n/vFfQMFawKsPHTDU9q
-TXeXAaDxZre3zu/O7Oyldcqs4+Fj97ihBMi8ez9dLRYiVu1ISf6nL3kwJZu6ay0/nTvEF+cdLvvy
-z6b84xQslpghjLSR6Rlgg/IwKwZzUNWYOwbpx4oMYIwo+FKbbuH2TbsGJJvXKyY//SovcfXWJL5/
-MZ4PbeiPT02jP/816t9JXkGPhvnxd3lLG7SjXi/7RgLQZhNeXoVPzthwiHvOAbWWl9fNff2C+MIk
-wcoBOU+NosEUQB+cZtUMCUbW8tDRSHZWOkPLtgoRObqME2wGtZ7P6wIDAQABo0IwQDAdBgNVHQ4E
-FgQUUTMc7TZArxfTJc1paPKvTiM+s0EwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8w
-DQYJKoZIhvcNAQEMBQADggIBAGCmr1tfV9qJ20tQqcQjNSH/0GEwhJG3PxDPJY7Jv0Y02cEhJhxw
-GXIeo8mH/qlDZJY6yFMECrZBu8RHANmfGBg7sg7zNOok992vIGCukihfNudd5N7HPNtQOa27PShN
-lnx2xlv0wdsUpasZYgcYQF+Xkdycx6u1UQ3maVNVzDl92sURVXLFO4uJ+DQtpBflF+aZfTCIITfN
-MBc9uPK8qHWgQ9w+iUuQrm0D4ByjoJYJu32jtyoQREtGBzRj7TG5BO6jm5qu5jF49OokYTurWGT/
-u4cnYiWB39yhL/btp/96j1EuMPikAdKFOV8BmZZvWltwGUb+hmA+rYAQCd05JS9Yf7vSdPD3Rh9G
-OUrYU9DzLjtxpdRv/PNn5AeP3SYZ4Y1b+qOTEZvpyDrDVWiakuFSdjjo4bq9+0/V77PnSIMx8IIh
-47a+p6tv75/fTM8BuGJqIz3nCU2AG3swpMPdB380vqQmsvZB6Akd4yCYqjdP//fx4ilwMUc/dNAU
-FvohigLVigmUdy7yWSiLfFCSCmZ4OIN1xLVaqBHG5cGdZlXPU8Sv13WFqUITVuwhd4GTWgzqltlJ
-yqEI8pc7bZsEGCREjnwB8twl2F6GmrE52/WRMmrRpnCKovfepEWFJqgejF0pW8hL2JpqA15w8oVP
-bEtoL8pU9ozaMv7Da4M/OMZ+
------END CERTIFICATE-----
-
-Certainly Root R1
-=================
------BEGIN CERTIFICATE-----
-MIIFRzCCAy+gAwIBAgIRAI4P+UuQcWhlM1T01EQ5t+AwDQYJKoZIhvcNAQELBQAwPTELMAkGA1UE
-BhMCVVMxEjAQBgNVBAoTCUNlcnRhaW5seTEaMBgGA1UEAxMRQ2VydGFpbmx5IFJvb3QgUjEwHhcN
-MjEwNDAxMDAwMDAwWhcNNDYwNDAxMDAwMDAwWjA9MQswCQYDVQQGEwJVUzESMBAGA1UEChMJQ2Vy
-dGFpbmx5MRowGAYDVQQDExFDZXJ0YWlubHkgUm9vdCBSMTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
-ADCCAgoCggIBANA21B/q3avk0bbm+yLA3RMNansiExyXPGhjZjKcA7WNpIGD2ngwEc/csiu+kr+O
-5MQTvqRoTNoCaBZ0vrLdBORrKt03H2As2/X3oXyVtwxwhi7xOu9S98zTm/mLvg7fMbedaFySpvXl
-8wo0tf97ouSHocavFwDvA5HtqRxOcT3Si2yJ9HiG5mpJoM610rCrm/b01C7jcvk2xusVtyWMOvwl
-DbMicyF0yEqWYZL1LwsYpfSt4u5BvQF5+paMjRcCMLT5r3gajLQ2EBAHBXDQ9DGQilHFhiZ5shGI
-XsXwClTNSaa/ApzSRKft43jvRl5tcdF5cBxGX1HpyTfcX35pe0HfNEXgO4T0oYoKNp43zGJS4YkN
-KPl6I7ENPT2a/Z2B7yyQwHtETrtJ4A5KVpK8y7XdeReJkd5hiXSSqOMyhb5OhaRLWcsrxXiOcVTQ
-AjeZjOVJ6uBUcqQRBi8LjMFbvrWhsFNunLhgkR9Za/kt9JQKl7XsxXYDVBtlUrpMklZRNaBA2Cnb
-rlJ2Oy0wQJuK0EJWtLeIAaSHO1OWzaMWj/Nmqhexx2DgwUMFDO6bW2BvBlyHWyf5QBGenDPBt+U1
-VwV/J84XIIwc/PH72jEpSe31C4SnT8H2TsIonPru4K8H+zMReiFPCyEQtkA6qyI6BJyLm4SGcprS
-p6XEtHWRqSsjAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
-DgQWBBTgqj8ljZ9EXME66C6ud0yEPmcM9DANBgkqhkiG9w0BAQsFAAOCAgEAuVevuBLaV4OPaAsz
-HQNTVfSVcOQrPbA56/qJYv331hgELyE03fFo8NWWWt7CgKPBjcZq91l3rhVkz1t5BXdm6ozTaw3d
-8VkswTOlMIAVRQdFGjEitpIAq5lNOo93r6kiyi9jyhXWx8bwPWz8HA2YEGGeEaIi1wrykXprOQ4v
-MMM2SZ/g6Q8CRFA3lFV96p/2O7qUpUzpvD5RtOjKkjZUbVwlKNrdrRT90+7iIgXr0PK3aBLXWopB
-GsaSpVo7Y0VPv+E6dyIvXL9G+VoDhRNCX8reU9ditaY1BMJH/5n9hN9czulegChB8n3nHpDYT3Y+
-gjwN/KUD+nsa2UUeYNrEjvn8K8l7lcUq/6qJ34IxD3L/DCfXCh5WAFAeDJDBlrXYFIW7pw0WwfgH
-JBu6haEaBQmAupVjyTrsJZ9/nbqkRxWbRHDxakvWOF5D8xh+UG7pWijmZeZ3Gzr9Hb4DJqPb1OG7
-fpYnKx3upPvaJVQTA945xsMfTZDsjxtK0hzthZU4UHlG1sGQUDGpXJpuHfUzVounmdLyyCwzk5Iw
-x06MZTMQZBf9JBeW0Y3COmor6xOLRPIh80oat3df1+2IpHLlOR+Vnb5nwXARPbv0+Em34yaXOp/S
-X3z7wJl8OSngex2/DaeP0ik0biQVy96QXr8axGbqwua6OV+KmalBWQewLK8=
------END CERTIFICATE-----
-
-Certainly Root E1
-=================
------BEGIN CERTIFICATE-----
-MIIB9zCCAX2gAwIBAgIQBiUzsUcDMydc+Y2aub/M+DAKBggqhkjOPQQDAzA9MQswCQYDVQQGEwJV
-UzESMBAGA1UEChMJQ2VydGFpbmx5MRowGAYDVQQDExFDZXJ0YWlubHkgUm9vdCBFMTAeFw0yMTA0
-MDEwMDAwMDBaFw00NjA0MDEwMDAwMDBaMD0xCzAJBgNVBAYTAlVTMRIwEAYDVQQKEwlDZXJ0YWlu
-bHkxGjAYBgNVBAMTEUNlcnRhaW5seSBSb290IEUxMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE3m/4
-fxzf7flHh4axpMCK+IKXgOqPyEpeKn2IaKcBYhSRJHpcnqMXfYqGITQYUBsQ3tA3SybHGWCA6TS9
-YBk2QNYphwk8kXr2vBMj3VlOBF7PyAIcGFPBMdjaIOlEjeR2o0IwQDAOBgNVHQ8BAf8EBAMCAQYw
-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU8ygYy2R17ikq6+2uI1g4hevIIgcwCgYIKoZIzj0E
-AwMDaAAwZQIxALGOWiDDshliTd6wT99u0nCK8Z9+aozmut6Dacpps6kFtZaSF4fC0urQe87YQVt8
-rgIwRt7qy12a7DLCZRawTDBcMPPaTnOGBtjOiQRINzf43TNRnXCve1XYAS59BWQOhriR
------END CERTIFICATE-----
-
-Security Communication ECC RootCA1
-==================================
------BEGIN CERTIFICATE-----
-MIICODCCAb6gAwIBAgIJANZdm7N4gS7rMAoGCCqGSM49BAMDMGExCzAJBgNVBAYTAkpQMSUwIwYD
-VQQKExxTRUNPTSBUcnVzdCBTeXN0ZW1zIENPLixMVEQuMSswKQYDVQQDEyJTZWN1cml0eSBDb21t
-dW5pY2F0aW9uIEVDQyBSb290Q0ExMB4XDTE2MDYxNjA1MTUyOFoXDTM4MDExODA1MTUyOFowYTEL
-MAkGA1UEBhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xKzApBgNV
-BAMTIlNlY3VyaXR5IENvbW11bmljYXRpb24gRUNDIFJvb3RDQTEwdjAQBgcqhkjOPQIBBgUrgQQA
-IgNiAASkpW9gAwPDvTH00xecK4R1rOX9PVdu12O/5gSJko6BnOPpR27KkBLIE+CnnfdldB9sELLo
-5OnvbYUymUSxXv3MdhDYW72ixvnWQuRXdtyQwjWpS4g8EkdtXP9JTxpKULGjQjBAMB0GA1UdDgQW
-BBSGHOf+LaVKiwj+KBH6vqNm+GBZLzAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAK
-BggqhkjOPQQDAwNoADBlAjAVXUI9/Lbu9zuxNuie9sRGKEkz0FhDKmMpzE2xtHqiuQ04pV1IKv3L
-snNdo4gIxwwCMQDAqy0Obe0YottT6SXbVQjgUMzfRGEWgqtJsLKB7HOHeLRMsmIbEvoWTSVLY70e
-N9k=
------END CERTIFICATE-----
-
-BJCA Global Root CA1
-====================
------BEGIN CERTIFICATE-----
-MIIFdDCCA1ygAwIBAgIQVW9l47TZkGobCdFsPsBsIDANBgkqhkiG9w0BAQsFADBUMQswCQYDVQQG
-EwJDTjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJVFkxHTAbBgNVBAMMFEJK
-Q0EgR2xvYmFsIFJvb3QgQ0ExMB4XDTE5MTIxOTAzMTYxN1oXDTQ0MTIxMjAzMTYxN1owVDELMAkG
-A1UEBhMCQ04xJjAkBgNVBAoMHUJFSUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZMR0wGwYDVQQD
-DBRCSkNBIEdsb2JhbCBSb290IENBMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPFm
-CL3ZxRVhy4QEQaVpN3cdwbB7+sN3SJATcmTRuHyQNZ0YeYjjlwE8R4HyDqKYDZ4/N+AZspDyRhyS
-sTphzvq3Rp4Dhtczbu33RYx2N95ulpH3134rhxfVizXuhJFyV9xgw8O558dnJCNPYwpj9mZ9S1Wn
-P3hkSWkSl+BMDdMJoDIwOvqfwPKcxRIqLhy1BDPapDgRat7GGPZHOiJBhyL8xIkoVNiMpTAK+BcW
-yqw3/XmnkRd4OJmtWO2y3syJfQOcs4ll5+M7sSKGjwZteAf9kRJ/sGsciQ35uMt0WwfCyPQ10WRj
-eulumijWML3mG90Vr4TqnMfK9Q7q8l0ph49pczm+LiRvRSGsxdRpJQaDrXpIhRMsDQa4bHlW/KNn
-MoH1V6XKV0Jp6VwkYe/iMBhORJhVb3rCk9gZtt58R4oRTklH2yiUAguUSiz5EtBP6DF+bHq/pj+b
-OT0CFqMYs2esWz8sgytnOYFcuX6U1WTdno9uruh8W7TXakdI136z1C2OVnZOz2nxbkRs1CTqjSSh
-GL+9V/6pmTW12xB3uD1IutbB5/EjPtffhZ0nPNRAvQoMvfXnjSXWgXSHRtQpdaJCbPdzied9v3pK
-H9MiyRVVz99vfFXQpIsHETdfg6YmV6YBW37+WGgHqel62bno/1Afq8K0wM7o6v0PvY1NuLxxAgMB
-AAGjQjBAMB0GA1UdDgQWBBTF7+3M2I0hxkjk49cULqcWk+WYATAPBgNVHRMBAf8EBTADAQH/MA4G
-A1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAUoKsITQfI/Ki2Pm4rzc2IInRNwPWaZ+4
-YRC6ojGYWUfo0Q0lHhVBDOAqVdVXUsv45Mdpox1NcQJeXyFFYEhcCY5JEMEE3KliawLwQ8hOnThJ
-dMkycFRtwUf8jrQ2ntScvd0g1lPJGKm1Vrl2i5VnZu69mP6u775u+2D2/VnGKhs/I0qUJDAnyIm8
-60Qkmss9vk/Ves6OF8tiwdneHg56/0OGNFK8YT88X7vZdrRTvJez/opMEi4r89fO4aL/3Xtw+zuh
-TaRjAv04l5U/BXCga99igUOLtFkNSoxUnMW7gZ/NfaXvCyUeOiDbHPwfmGcCCtRzRBPbUYQaVQNW
-4AB+dAb/OMRyHdOoP2gxXdMJxy6MW2Pg6Nwe0uxhHvLe5e/2mXZgLR6UcnHGCyoyx5JO1UbXHfmp
-GQrI+pXObSOYqgs4rZpWDW+N8TEAiMEXnM0ZNjX+VVOg4DwzX5Ze4jLp3zO7Bkqp2IRzznfSxqxx
-4VyjHQy7Ct9f4qNx2No3WqB4K/TUfet27fJhcKVlmtOJNBir+3I+17Q9eVzYH6Eze9mCUAyTF6ps
-3MKCuwJXNq+YJyo5UOGwifUll35HaBC07HPKs5fRJNz2YqAo07WjuGS3iGJCz51TzZm+ZGiPTx4S
-SPfSKcOYKMryMguTjClPPGAyzQWWYezyr/6zcCwupvI=
------END CERTIFICATE-----
-
-BJCA Global Root CA2
-====================
------BEGIN CERTIFICATE-----
-MIICJTCCAaugAwIBAgIQLBcIfWQqwP6FGFkGz7RK6zAKBggqhkjOPQQDAzBUMQswCQYDVQQGEwJD
-TjEmMCQGA1UECgwdQkVJSklORyBDRVJUSUZJQ0FURSBBVVRIT1JJVFkxHTAbBgNVBAMMFEJKQ0Eg
-R2xvYmFsIFJvb3QgQ0EyMB4XDTE5MTIxOTAzMTgyMVoXDTQ0MTIxMjAzMTgyMVowVDELMAkGA1UE
-BhMCQ04xJjAkBgNVBAoMHUJFSUpJTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZMR0wGwYDVQQDDBRC
-SkNBIEdsb2JhbCBSb290IENBMjB2MBAGByqGSM49AgEGBSuBBAAiA2IABJ3LgJGNU2e1uVCxA/jl
-SR9BIgmwUVJY1is0j8USRhTFiy8shP8sbqjV8QnjAyEUxEM9fMEsxEtqSs3ph+B99iK++kpRuDCK
-/eHeGBIK9ke35xe/J4rUQUyWPGCWwf0VHKNCMEAwHQYDVR0OBBYEFNJKsVF/BvDRgh9Obl+rg/xI
-1LCRMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMAoGCCqGSM49BAMDA2gAMGUCMBq8
-W9f+qdJUDkpd0m2xQNz0Q9XSSpkZElaA94M04TVOSG0ED1cxMDAtsaqdAzjbBgIxAMvMh1PLet8g
-UXOQwKhbYdDFUDn9hf7B43j4ptZLvZuHjw/l1lOWqzzIQNph91Oj9w==
------END CERTIFICATE-----
-
-Sectigo Public Server Authentication Root E46
-=============================================
------BEGIN CERTIFICATE-----
-MIICOjCCAcGgAwIBAgIQQvLM2htpN0RfFf51KBC49DAKBggqhkjOPQQDAzBfMQswCQYDVQQGEwJH
-QjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBTZXJ2
-ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwHhcNMjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1OTU5
-WjBfMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0
-aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUr
-gQQAIgNiAAR2+pmpbiDt+dd34wc7qNs9Xzjoq1WmVk/WSOrsfy2qw7LFeeyZYX8QeccCWvkEN/U0
-NSt3zn8gj1KjAIns1aeibVvjS5KToID1AZTc8GgHHs3u/iVStSBDHBv+6xnOQ6OjQjBAMB0GA1Ud
-DgQWBBTRItpMWfFLXyY4qp3W7usNw/upYTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
-/zAKBggqhkjOPQQDAwNnADBkAjAn7qRaqCG76UeXlImldCBteU/IvZNeWBj7LRoAasm4PdCkT0RH
-lAFWovgzJQxC36oCMB3q4S6ILuH5px0CMk7yn2xVdOOurvulGu7t0vzCAxHrRVxgED1cf5kDW21U
-SAGKcw==
------END CERTIFICATE-----
-
-Sectigo Public Server Authentication Root R46
-=============================================
------BEGIN CERTIFICATE-----
-MIIFijCCA3KgAwIBAgIQdY39i658BwD6qSWn4cetFDANBgkqhkiG9w0BAQwFADBfMQswCQYDVQQG
-EwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBT
-ZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYwHhcNMjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1
-OTU5WjBfMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1T
-ZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYwggIiMA0GCSqGSIb3
-DQEBAQUAA4ICDwAwggIKAoICAQCTvtU2UnXYASOgHEdCSe5jtrch/cSV1UgrJnwUUxDaef0rty2k
-1Cz66jLdScK5vQ9IPXtamFSvnl0xdE8H/FAh3aTPaE8bEmNtJZlMKpnzSDBh+oF8HqcIStw+Kxwf
-GExxqjWMrfhu6DtK2eWUAtaJhBOqbchPM8xQljeSM9xfiOefVNlI8JhD1mb9nxc4Q8UBUQvX4yMP
-FF1bFOdLvt30yNoDN9HWOaEhUTCDsG3XME6WW5HwcCSrv0WBZEMNvSE6Lzzpng3LILVCJ8zab5vu
-ZDCQOc2TZYEhMbUjUDM3IuM47fgxMMxF/mL50V0yeUKH32rMVhlATc6qu/m1dkmU8Sf4kaWD5Qaz
-Yw6A3OASVYCmO2a0OYctyPDQ0RTp5A1NDvZdV3LFOxxHVp3i1fuBYYzMTYCQNFu31xR13NgESJ/A
-wSiItOkcyqex8Va3e0lMWeUgFaiEAin6OJRpmkkGj80feRQXEgyDet4fsZfu+Zd4KKTIRJLpfSYF
-plhym3kT2BFfrsU4YjRosoYwjviQYZ4ybPUHNs2iTG7sijbt8uaZFURww3y8nDnAtOFr94MlI1fZ
-EoDlSfB1D++N6xybVCi0ITz8fAr/73trdf+LHaAZBav6+CuBQug4urv7qv094PPK306Xlynt8xhW
-6aWWrL3DkJiy4Pmi1KZHQ3xtzwIDAQABo0IwQDAdBgNVHQ4EFgQUVnNYZJX5khqwEioEYnmhQBWI
-IUkwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAC9c
-mTz8Bl6MlC5w6tIyMY208FHVvArzZJ8HXtXBc2hkeqK5Duj5XYUtqDdFqij0lgVQYKlJfp/imTYp
-E0RHap1VIDzYm/EDMrraQKFz6oOht0SmDpkBm+S8f74TlH7Kph52gDY9hAaLMyZlbcp+nv4fjFg4
-exqDsQ+8FxG75gbMY/qB8oFM2gsQa6H61SilzwZAFv97fRheORKkU55+MkIQpiGRqRxOF3yEvJ+M
-0ejf5lG5Nkc/kLnHvALcWxxPDkjBJYOcCj+esQMzEhonrPcibCTRAUH4WAP+JWgiH5paPHxsnnVI
-84HxZmduTILA7rpXDhjvLpr3Etiga+kFpaHpaPi8TD8SHkXoUsCjvxInebnMMTzD9joiFgOgyY9m
-pFuiTdaBJQbpdqQACj7LzTWb4OE4y2BThihCQRxEV+ioratF4yUQvNs+ZUH7G6aXD+u5dHn5Hrwd
-Vw1Hr8Mvn4dGp+smWg9WY7ViYG4A++MnESLn/pmPNPW56MORcr3Ywx65LvKRRFHQV80MNNVIIb/b
-E/FmJUNS0nAiNs2fxBx1IK1jcmMGDw4nztJqDby1ORrp0XZ60Vzk50lJLVU3aPAaOpg+VBeHVOmm
-J1CJeyAvP/+/oYtKR5j/K3tJPsMpRmAYQqszKbrAKbkTidOIijlBO8n9pu0f9GBj39ItVQGL
------END CERTIFICATE-----
-
-SSL.com TLS RSA Root CA 2022
-============================
------BEGIN CERTIFICATE-----
-MIIFiTCCA3GgAwIBAgIQb77arXO9CEDii02+1PdbkTANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQG
-EwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQDDBxTU0wuY29tIFRMUyBSU0Eg
-Um9vdCBDQSAyMDIyMB4XDTIyMDgyNTE2MzQyMloXDTQ2MDgxOTE2MzQyMVowTjELMAkGA1UEBhMC
-VVMxGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgUlNBIFJv
-b3QgQ0EgMjAyMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANCkCXJPQIgSYT41I57u
-9nTPL3tYPc48DRAokC+X94xI2KDYJbFMsBFMF3NQ0CJKY7uB0ylu1bUJPiYYf7ISf5OYt6/wNr/y
-7hienDtSxUcZXXTzZGbVXcdotL8bHAajvI9AI7YexoS9UcQbOcGV0insS657Lb85/bRi3pZ7Qcac
-oOAGcvvwB5cJOYF0r/c0WRFXCsJbwST0MXMwgsadugL3PnxEX4MN8/HdIGkWCVDi1FW24IBydm5M
-R7d1VVm0U3TZlMZBrViKMWYPHqIbKUBOL9975hYsLfy/7PO0+r4Y9ptJ1O4Fbtk085zx7AGL0SDG
-D6C1vBdOSHtRwvzpXGk3R2azaPgVKPC506QVzFpPulJwoxJF3ca6TvvC0PeoUidtbnm1jPx7jMEW
-TO6Af77wdr5BUxIzrlo4QqvXDz5BjXYHMtWrifZOZ9mxQnUjbvPNQrL8VfVThxc7wDNY8VLS+YCk
-8OjwO4s4zKTGkH8PnP2L0aPP2oOnaclQNtVcBdIKQXTbYxE3waWglksejBYSd66UNHsef8JmAOSq
-g+qKkK3ONkRN0VHpvB/zagX9wHQfJRlAUW7qglFA35u5CCoGAtUjHBPW6dvbxrB6y3snm/vg1UYk
-7RBLY0ulBY+6uB0rpvqR4pJSvezrZ5dtmi2fgTIFZzL7SAg/2SW4BCUvAgMBAAGjYzBhMA8GA1Ud
-EwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU+y437uOEeicuzRk1sTN8/9REQrkwHQYDVR0OBBYEFPsu
-N+7jhHonLs0ZNbEzfP/UREK5MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAjYlt
-hEUY8U+zoO9opMAdrDC8Z2awms22qyIZZtM7QbUQnRC6cm4pJCAcAZli05bg4vsMQtfhWsSWTVTN
-j8pDU/0quOr4ZcoBwq1gaAafORpR2eCNJvkLTqVTJXojpBzOCBvfR4iyrT7gJ4eLSYwfqUdYe5by
-iB0YrrPRpgqU+tvT5TgKa3kSM/tKWTcWQA673vWJDPFs0/dRa1419dvAJuoSc06pkZCmF8NsLzjU
-o3KUQyxi4U5cMj29TH0ZR6LDSeeWP4+a0zvkEdiLA9z2tmBVGKaBUfPhqBVq6+AL8BQx1rmMRTqo
-ENjwuSfr98t67wVylrXEj5ZzxOhWc5y8aVFjvO9nHEMaX3cZHxj4HCUp+UmZKbaSPaKDN7Egkaib
-MOlqbLQjk2UEqxHzDh1TJElTHaE/nUiSEeJ9DU/1172iWD54nR4fK/4huxoTtrEoZP2wAgDHbICi
-vRZQIA9ygV/MlP+7mea6kMvq+cYMwq7FGc4zoWtcu358NFcXrfA/rs3qr5nsLFR+jM4uElZI7xc7
-P0peYNLcdDa8pUNjyw9bowJWCZ4kLOGGgYz+qxcs+sjiMho6/4UIyYOf8kpIEFR3N+2ivEC+5BB0
-9+Rbu7nzifmPQdjH5FCQNYA+HLhNkNPU98OwoX6EyneSMSy4kLGCenROmxMmtNVQZlR4rmA=
------END CERTIFICATE-----
-
-SSL.com TLS ECC Root CA 2022
-============================
------BEGIN CERTIFICATE-----
-MIICOjCCAcCgAwIBAgIQFAP1q/s3ixdAW+JDsqXRxDAKBggqhkjOPQQDAzBOMQswCQYDVQQGEwJV
-UzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQDDBxTU0wuY29tIFRMUyBFQ0MgUm9v
-dCBDQSAyMDIyMB4XDTIyMDgyNTE2MzM0OFoXDTQ2MDgxOTE2MzM0N1owTjELMAkGA1UEBhMCVVMx
-GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgRUNDIFJvb3Qg
-Q0EgMjAyMjB2MBAGByqGSM49AgEGBSuBBAAiA2IABEUpNXP6wrgjzhR9qLFNoFs27iosU8NgCTWy
-JGYmacCzldZdkkAZDsalE3D07xJRKF3nzL35PIXBz5SQySvOkkJYWWf9lCcQZIxPBLFNSeR7T5v1
-5wj4A4j3p8OSSxlUgaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBSJjy+j6CugFFR7
-81a4Jl9nOAuc0DAdBgNVHQ4EFgQUiY8vo+groBRUe/NWuCZfZzgLnNAwDgYDVR0PAQH/BAQDAgGG
-MAoGCCqGSM49BAMDA2gAMGUCMFXjIlbp15IkWE8elDIPDAI2wv2sdDJO4fscgIijzPvX6yv/N33w
-7deedWo1dlJF4AIxAMeNb0Igj762TVntd00pxCAgRWSGOlDGxK0tk/UYfXLtqc/ErFc2KAhl3zx5
-Zn6g6g==
------END CERTIFICATE-----
-
-Atos TrustedRoot Root CA ECC TLS 2021
-=====================================
------BEGIN CERTIFICATE-----
-MIICFTCCAZugAwIBAgIQPZg7pmY9kGP3fiZXOATvADAKBggqhkjOPQQDAzBMMS4wLAYDVQQDDCVB
-dG9zIFRydXN0ZWRSb290IFJvb3QgQ0EgRUNDIFRMUyAyMDIxMQ0wCwYDVQQKDARBdG9zMQswCQYD
-VQQGEwJERTAeFw0yMTA0MjIwOTI2MjNaFw00MTA0MTcwOTI2MjJaMEwxLjAsBgNVBAMMJUF0b3Mg
-VHJ1c3RlZFJvb3QgUm9vdCBDQSBFQ0MgVExTIDIwMjExDTALBgNVBAoMBEF0b3MxCzAJBgNVBAYT
-AkRFMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEloZYKDcKZ9Cg3iQZGeHkBQcfl+3oZIK59sRxUM6K
-DP/XtXa7oWyTbIOiaG6l2b4siJVBzV3dscqDY4PMwL502eCdpO5KTlbgmClBk1IQ1SQ4AjJn8ZQS
-b+/Xxd4u/RmAo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2KCXWfeBmmnoJsmo7jjPX
-NtNPojAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwMDaAAwZQIwW5kp85wxtolrbNa9d+F851F+
-uDrNozZffPc8dz7kUK2o59JZDCaOMDtuCCrCp1rIAjEAmeMM56PDr9NJLkaCI2ZdyQAUEv049OGY
-a3cpetskz2VAv9LcjBHo9H1/IISpQuQo
------END CERTIFICATE-----
-
-Atos TrustedRoot Root CA RSA TLS 2021
-=====================================
------BEGIN CERTIFICATE-----
-MIIFZDCCA0ygAwIBAgIQU9XP5hmTC/srBRLYwiqipDANBgkqhkiG9w0BAQwFADBMMS4wLAYDVQQD
-DCVBdG9zIFRydXN0ZWRSb290IFJvb3QgQ0EgUlNBIFRMUyAyMDIxMQ0wCwYDVQQKDARBdG9zMQsw
-CQYDVQQGEwJERTAeFw0yMTA0MjIwOTIxMTBaFw00MTA0MTcwOTIxMDlaMEwxLjAsBgNVBAMMJUF0
-b3MgVHJ1c3RlZFJvb3QgUm9vdCBDQSBSU0EgVExTIDIwMjExDTALBgNVBAoMBEF0b3MxCzAJBgNV
-BAYTAkRFMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtoAOxHm9BYx9sKOdTSJNy/BB
-l01Z4NH+VoyX8te9j2y3I49f1cTYQcvyAh5x5en2XssIKl4w8i1mx4QbZFc4nXUtVsYvYe+W/CBG
-vevUez8/fEc4BKkbqlLfEzfTFRVOvV98r61jx3ncCHvVoOX3W3WsgFWZkmGbzSoXfduP9LVq6hdK
-ZChmFSlsAvFr1bqjM9xaZ6cF4r9lthawEO3NUDPJcFDsGY6wx/J0W2tExn2WuZgIWWbeKQGb9Cpt
-0xU6kGpn8bRrZtkh68rZYnxGEFzedUlnnkL5/nWpo63/dgpnQOPF943HhZpZnmKaau1Fh5hnstVK
-PNe0OwANwI8f4UDErmwh3El+fsqyjW22v5MvoVw+j8rtgI5Y4dtXz4U2OLJxpAmMkokIiEjxQGMY
-sluMWuPD0xeqqxmjLBvk1cbiZnrXghmmOxYsL3GHX0WelXOTwkKBIROW1527k2gV+p2kHYzygeBY
-Br3JtuP2iV2J+axEoctr+hbxx1A9JNr3w+SH1VbxT5Aw+kUJWdo0zuATHAR8ANSbhqRAvNncTFd+
-rrcztl524WWLZt+NyteYr842mIycg5kDcPOvdO3GDjbnvezBc6eUWsuSZIKmAMFwoW4sKeFYV+xa
-fJlrJaSQOoD0IJ2azsct+bJLKZWD6TWNp0lIpw9MGZHQ9b8Q4HECAwEAAaNCMEAwDwYDVR0TAQH/
-BAUwAwEB/zAdBgNVHQ4EFgQUdEmZ0f+0emhFdcN+tNzMzjkz2ggwDgYDVR0PAQH/BAQDAgGGMA0G
-CSqGSIb3DQEBDAUAA4ICAQAjQ1MkYlxt/T7Cz1UAbMVWiLkO3TriJQ2VSpfKgInuKs1l+NsW4AmS
-4BjHeJi78+xCUvuppILXTdiK/ORO/auQxDh1MoSf/7OwKwIzNsAQkG8dnK/haZPso0UvFJ/1TCpl
-Q3IM98P4lYsU84UgYt1UU90s3BiVaU+DR3BAM1h3Egyi61IxHkzJqM7F78PRreBrAwA0JrRUITWX
-AdxfG/F851X6LWh3e9NpzNMOa7pNdkTWwhWaJuywxfW70Xp0wmzNxbVe9kzmWy2B27O3Opee7c9G
-slA9hGCZcbUztVdF5kJHdWoOsAgMrr3e97sPWD2PAzHoPYJQyi9eDF20l74gNAf0xBLh7tew2Vkt
-afcxBPTy+av5EzH4AXcOPUIjJsyacmdRIXrMPIWo6iFqO9taPKU0nprALN+AnCng33eU0aKAQv9q
-TFsR0PXNor6uzFFcw9VUewyu1rkGd4Di7wcaaMxZUa1+XGdrudviB0JbuAEFWDlN5LuYo7Ey7Nmj
-1m+UI/87tyll5gfp77YZ6ufCOB0yiJA8EytuzO+rdwY0d4RPcuSBhPm5dDTedk+SKlOxJTnbPP/l
-PqYO5Wue/9vsL3SD3460s6neFE3/MaNFcyT6lSnMEpcEoji2jbDwN/zIIX8/syQbPYtuzE2wFg2W
-HYMfRsCbvUOZ58SWLs5fyQ==
------END CERTIFICATE-----
-
-TrustAsia Global Root CA G3
-===========================
------BEGIN CERTIFICATE-----
-MIIFpTCCA42gAwIBAgIUZPYOZXdhaqs7tOqFhLuxibhxkw8wDQYJKoZIhvcNAQEMBQAwWjELMAkG
-A1UEBhMCQ04xJTAjBgNVBAoMHFRydXN0QXNpYSBUZWNobm9sb2dpZXMsIEluYy4xJDAiBgNVBAMM
-G1RydXN0QXNpYSBHbG9iYWwgUm9vdCBDQSBHMzAeFw0yMTA1MjAwMjEwMTlaFw00NjA1MTkwMjEw
-MTlaMFoxCzAJBgNVBAYTAkNOMSUwIwYDVQQKDBxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMu
-MSQwIgYDVQQDDBtUcnVzdEFzaWEgR2xvYmFsIFJvb3QgQ0EgRzMwggIiMA0GCSqGSIb3DQEBAQUA
-A4ICDwAwggIKAoICAQDAMYJhkuSUGwoqZdC+BqmHO1ES6nBBruL7dOoKjbmzTNyPtxNST1QY4Sxz
-lZHFZjtqz6xjbYdT8PfxObegQ2OwxANdV6nnRM7EoYNl9lA+sX4WuDqKAtCWHwDNBSHvBm3dIZwZ
-Q0WhxeiAysKtQGIXBsaqvPPW5vxQfmZCHzyLpnl5hkA1nyDvP+uLRx+PjsXUjrYsyUQE49RDdT/V
-P68czH5GX6zfZBCK70bwkPAPLfSIC7Epqq+FqklYqL9joDiR5rPmd2jE+SoZhLsO4fWvieylL1Ag
-dB4SQXMeJNnKziyhWTXAyB1GJ2Faj/lN03J5Zh6fFZAhLf3ti1ZwA0pJPn9pMRJpxx5cynoTi+jm
-9WAPzJMshH/x/Gr8m0ed262IPfN2dTPXS6TIi/n1Q1hPy8gDVI+lhXgEGvNz8teHHUGf59gXzhqc
-D0r83ERoVGjiQTz+LISGNzzNPy+i2+f3VANfWdP3kXjHi3dqFuVJhZBFcnAvkV34PmVACxmZySYg
-WmjBNb9Pp1Hx2BErW+Canig7CjoKH8GB5S7wprlppYiU5msTf9FkPz2ccEblooV7WIQn3MSAPmea
-mseaMQ4w7OYXQJXZRe0Blqq/DPNL0WP3E1jAuPP6Z92bfW1K/zJMtSU7/xxnD4UiWQWRkUF3gdCF
-TIcQcf+eQxuulXUtgQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFEDk5PIj
-7zjKsK5Xf/IhMBY027ySMB0GA1UdDgQWBBRA5OTyI+84yrCuV3/yITAWNNu8kjAOBgNVHQ8BAf8E
-BAMCAQYwDQYJKoZIhvcNAQEMBQADggIBACY7UeFNOPMyGLS0XuFlXsSUT9SnYaP4wM8zAQLpw6o1
-D/GUE3d3NZ4tVlFEbuHGLige/9rsR82XRBf34EzC4Xx8MnpmyFq2XFNFV1pF1AWZLy4jVe5jaN/T
-G3inEpQGAHUNcoTpLrxaatXeL1nHo+zSh2bbt1S1JKv0Q3jbSwTEb93mPmY+KfJLaHEih6D4sTNj
-duMNhXJEIlU/HHzp/LgV6FL6qj6jITk1dImmasI5+njPtqzn59ZW/yOSLlALqbUHM/Q4X6RJpstl
-cHboCoWASzY9M/eVVHUl2qzEc4Jl6VL1XP04lQJqaTDFHApXB64ipCz5xUG3uOyfT0gA+QEEVcys
-+TIxxHWVBqB/0Y0n3bOppHKH/lmLmnp0Ft0WpWIp6zqW3IunaFnT63eROfjXy9mPX1onAX1daBli
-2MjN9LdyR75bl87yraKZk62Uy5P2EgmVtqvXO9A/EcswFi55gORngS1d7XB4tmBZrOFdRWOPyN9y
-aFvqHbgB8X7754qz41SgOAngPN5C8sLtLpvzHzW2NtjjgKGLzZlkD8Kqq7HK9W+eQ42EVJmzbsAS
-ZthwEPEGNTNDqJwuuhQxzhB/HIbjj9LV+Hfsm6vxL2PZQl/gZ4FkkfGXL/xuJvYz+NO1+MRiqzFR
-JQJ6+N1rZdVtTTDIZbpoFGWsJwt0ivKH
------END CERTIFICATE-----
-
-TrustAsia Global Root CA G4
-===========================
------BEGIN CERTIFICATE-----
-MIICVTCCAdygAwIBAgIUTyNkuI6XY57GU4HBdk7LKnQV1tcwCgYIKoZIzj0EAwMwWjELMAkGA1UE
-BhMCQ04xJTAjBgNVBAoMHFRydXN0QXNpYSBUZWNobm9sb2dpZXMsIEluYy4xJDAiBgNVBAMMG1Ry
-dXN0QXNpYSBHbG9iYWwgUm9vdCBDQSBHNDAeFw0yMTA1MjAwMjEwMjJaFw00NjA1MTkwMjEwMjJa
-MFoxCzAJBgNVBAYTAkNOMSUwIwYDVQQKDBxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMSQw
-IgYDVQQDDBtUcnVzdEFzaWEgR2xvYmFsIFJvb3QgQ0EgRzQwdjAQBgcqhkjOPQIBBgUrgQQAIgNi
-AATxs8045CVD5d4ZCbuBeaIVXxVjAd7Cq92zphtnS4CDr5nLrBfbK5bKfFJV4hrhPVbwLxYI+hW8
-m7tH5j/uqOFMjPXTNvk4XatwmkcN4oFBButJ+bAp3TPsUKV/eSm4IJijYzBhMA8GA1UdEwEB/wQF
-MAMBAf8wHwYDVR0jBBgwFoAUpbtKl86zK3+kMd6Xg1mDpm9xy94wHQYDVR0OBBYEFKW7SpfOsyt/
-pDHel4NZg6ZvccveMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNnADBkAjBe8usGzEkxn0AA
-bbd+NvBNEU/zy4k6LHiRUKNbwMp1JvK/kF0LgoxgKJ/GcJpo5PECMFxYDlZ2z1jD1xCMuo6u47xk
-dUfFVZDj/bpV6wfEU6s3qe4hsiFbYI89MvHVI5TWWA==
------END CERTIFICATE-----
-
-CommScope Public Trust ECC Root-01
-==================================
------BEGIN CERTIFICATE-----
-MIICHTCCAaOgAwIBAgIUQ3CCd89NXTTxyq4yLzf39H91oJ4wCgYIKoZIzj0EAwMwTjELMAkGA1UE
-BhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwiQ29tbVNjb3BlIFB1YmxpYyBUcnVz
-dCBFQ0MgUm9vdC0wMTAeFw0yMTA0MjgxNzM1NDNaFw00NjA0MjgxNzM1NDJaME4xCzAJBgNVBAYT
-AlVTMRIwEAYDVQQKDAlDb21tU2NvcGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1c3Qg
-RUNDIFJvb3QtMDEwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARLNumuV16ocNfQj3Rid8NeeqrltqLx
-eP0CflfdkXmcbLlSiFS8LwS+uM32ENEp7LXQoMPwiXAZu1FlxUOcw5tjnSCDPgYLpkJEhRGnSjot
-6dZoL0hOUysHP029uax3OVejQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G
-A1UdDgQWBBSOB2LAUN3GGQYARnQE9/OufXVNMDAKBggqhkjOPQQDAwNoADBlAjEAnDPfQeMjqEI2
-Jpc1XHvr20v4qotzVRVcrHgpD7oh2MSg2NED3W3ROT3Ek2DS43KyAjB8xX6I01D1HiXo+k515liW
-pDVfG2XqYZpwI7UNo5uSUm9poIyNStDuiw7LR47QjRE=
------END CERTIFICATE-----
-
-CommScope Public Trust ECC Root-02
-==================================
------BEGIN CERTIFICATE-----
-MIICHDCCAaOgAwIBAgIUKP2ZYEFHpgE6yhR7H+/5aAiDXX0wCgYIKoZIzj0EAwMwTjELMAkGA1UE
-BhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwiQ29tbVNjb3BlIFB1YmxpYyBUcnVz
-dCBFQ0MgUm9vdC0wMjAeFw0yMTA0MjgxNzQ0NTRaFw00NjA0MjgxNzQ0NTNaME4xCzAJBgNVBAYT
-AlVTMRIwEAYDVQQKDAlDb21tU2NvcGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1c3Qg
-RUNDIFJvb3QtMDIwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAR4MIHoYx7l63FRD/cHB8o5mXxO1Q/M
-MDALj2aTPs+9xYa9+bG3tD60B8jzljHz7aRP+KNOjSkVWLjVb3/ubCK1sK9IRQq9qEmUv4RDsNuE
-SgMjGWdqb8FuvAY5N9GIIvejQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G
-A1UdDgQWBBTmGHX/72DehKT1RsfeSlXjMjZ59TAKBggqhkjOPQQDAwNnADBkAjAmc0l6tqvmSfR9
-Uj/UQQSugEODZXW5hYA4O9Zv5JOGq4/nich/m35rChJVYaoR4HkCMHfoMXGsPHED1oQmHhS48zs7
-3u1Z/GtMMH9ZzkXpc2AVmkzw5l4lIhVtwodZ0LKOag==
------END CERTIFICATE-----
-
-CommScope Public Trust RSA Root-01
-==================================
------BEGIN CERTIFICATE-----
-MIIFbDCCA1SgAwIBAgIUPgNJgXUWdDGOTKvVxZAplsU5EN0wDQYJKoZIhvcNAQELBQAwTjELMAkG
-A1UEBhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwiQ29tbVNjb3BlIFB1YmxpYyBU
-cnVzdCBSU0EgUm9vdC0wMTAeFw0yMTA0MjgxNjQ1NTRaFw00NjA0MjgxNjQ1NTNaME4xCzAJBgNV
-BAYTAlVTMRIwEAYDVQQKDAlDb21tU2NvcGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1
-c3QgUlNBIFJvb3QtMDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCwSGWjDR1C45Ft
-nYSkYZYSwu3D2iM0GXb26v1VWvZVAVMP8syMl0+5UMuzAURWlv2bKOx7dAvnQmtVzslhsuitQDy6
-uUEKBU8bJoWPQ7VAtYXR1HHcg0Hz9kXHgKKEUJdGzqAMxGBWBB0HW0alDrJLpA6lfO741GIDuZNq
-ihS4cPgugkY4Iw50x2tBt9Apo52AsH53k2NC+zSDO3OjWiE260f6GBfZumbCk6SP/F2krfxQapWs
-vCQz0b2If4b19bJzKo98rwjyGpg/qYFlP8GMicWWMJoKz/TUyDTtnS+8jTiGU+6Xn6myY5QXjQ/c
-Zip8UlF1y5mO6D1cv547KI2DAg+pn3LiLCuz3GaXAEDQpFSOm117RTYm1nJD68/A6g3czhLmfTif
-BSeolz7pUcZsBSjBAg/pGG3svZwG1KdJ9FQFa2ww8esD1eo9anbCyxooSU1/ZOD6K9pzg4H/kQO9
-lLvkuI6cMmPNn7togbGEW682v3fuHX/3SZtS7NJ3Wn2RnU3COS3kuoL4b/JOHg9O5j9ZpSPcPYeo
-KFgo0fEbNttPxP/hjFtyjMcmAyejOQoBqsCyMWCDIqFPEgkBEa801M/XrmLTBQe0MXXgDW1XT2mH
-+VepuhX2yFJtocucH+X8eKg1mp9BFM6ltM6UCBwJrVbl2rZJmkrqYxhTnCwuwwIDAQABo0IwQDAP
-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUN12mmnQywsL5x6YVEFm4
-5P3luG0wDQYJKoZIhvcNAQELBQADggIBAK+nz97/4L1CjU3lIpbfaOp9TSp90K09FlxD533Ahuh6
-NWPxzIHIxgvoLlI1pKZJkGNRrDSsBTtXAOnTYtPZKdVUvhwQkZyybf5Z/Xn36lbQnmhUQo8mUuJM
-3y+Xpi/SB5io82BdS5pYV4jvguX6r2yBS5KPQJqTRlnLX3gWsWc+QgvfKNmwrZggvkN80V4aCRck
-jXtdlemrwWCrWxhkgPut4AZ9HcpZuPN4KWfGVh2vtrV0KnahP/t1MJ+UXjulYPPLXAziDslg+Mkf
-Foom3ecnf+slpoq9uC02EJqxWE2aaE9gVOX2RhOOiKy8IUISrcZKiX2bwdgt6ZYD9KJ0DLwAHb/W
-NyVntHKLr4W96ioDj8z7PEQkguIBpQtZtjSNMgsSDesnwv1B10A8ckYpwIzqug/xBpMu95yo9GA+
-o/E4Xo4TwbM6l4c/ksp4qRyv0LAbJh6+cOx69TOY6lz/KwsETkPdY34Op054A5U+1C0wlREQKC6/
-oAI+/15Z0wUOlV9TRe9rh9VIzRamloPh37MG88EU26fsHItdkJANclHnYfkUyq+Dj7+vsQpZXdxc
-1+SWrVtgHdqul7I52Qb1dgAT+GhMIbA1xNxVssnBQVocicCMb3SgazNNtQEo/a2tiRc7ppqEvOuM
-6sRxJKi6KfkIsidWNTJf6jn7MZrVGczw
------END CERTIFICATE-----
-
-CommScope Public Trust RSA Root-02
-==================================
------BEGIN CERTIFICATE-----
-MIIFbDCCA1SgAwIBAgIUVBa/O345lXGN0aoApYYNK496BU4wDQYJKoZIhvcNAQELBQAwTjELMAkG
-A1UEBhMCVVMxEjAQBgNVBAoMCUNvbW1TY29wZTErMCkGA1UEAwwiQ29tbVNjb3BlIFB1YmxpYyBU
-cnVzdCBSU0EgUm9vdC0wMjAeFw0yMTA0MjgxNzE2NDNaFw00NjA0MjgxNzE2NDJaME4xCzAJBgNV
-BAYTAlVTMRIwEAYDVQQKDAlDb21tU2NvcGUxKzApBgNVBAMMIkNvbW1TY29wZSBQdWJsaWMgVHJ1
-c3QgUlNBIFJvb3QtMDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDh+g77aAASyE3V
-rCLENQE7xVTlWXZjpX/rwcRqmL0yjReA61260WI9JSMZNRTpf4mnG2I81lDnNJUDMrG0kyI9p+Kx
-7eZ7Ti6Hmw0zdQreqjXnfuU2mKKuJZ6VszKWpCtYHu8//mI0SFHRtI1CrWDaSWqVcN3SAOLMV2MC
-e5bdSZdbkk6V0/nLKR8YSvgBKtJjCW4k6YnS5cciTNxzhkcAqg2Ijq6FfUrpuzNPDlJwnZXjfG2W
-Wy09X6GDRl224yW4fKcZgBzqZUPckXk2LHR88mcGyYnJ27/aaL8j7dxrrSiDeS/sOKUNNwFnJ5rp
-M9kzXzehxfCrPfp4sOcsn/Y+n2Dg70jpkEUeBVF4GiwSLFworA2iI540jwXmojPOEXcT1A6kHkIf
-hs1w/tkuFT0du7jyU1fbzMZ0KZwYszZ1OC4PVKH4kh+Jlk+71O6d6Ts2QrUKOyrUZHk2EOH5kQMr
-eyBUzQ0ZGshBMjTRsJnhkB4BQDa1t/qp5Xd1pCKBXbCL5CcSD1SIxtuFdOa3wNemKfrb3vOTlycE
-VS8KbzfFPROvCgCpLIscgSjX74Yxqa7ybrjKaixUR9gqiC6vwQcQeKwRoi9C8DfF8rhW3Q5iLc4t
-Vn5V8qdE9isy9COoR+jUKgF4z2rDN6ieZdIs5fq6M8EGRPbmz6UNp2YINIos8wIDAQABo0IwQDAP
-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUR9DnsSL/nSz12Vdgs7Gx
-cJXvYXowDQYJKoZIhvcNAQELBQADggIBAIZpsU0v6Z9PIpNojuQhmaPORVMbc0RTAIFhzTHjCLqB
-KCh6krm2qMhDnscTJk3C2OVVnJJdUNjCK9v+5qiXz1I6JMNlZFxHMaNlNRPDk7n3+VGXu6TwYofF
-1gbTl4MgqX67tiHCpQ2EAOHyJxCDut0DgdXdaMNmEMjRdrSzbymeAPnCKfWxkxlSaRosTKCL4BWa
-MS/TiJVZbuXEs1DIFAhKm4sTg7GkcrI7djNB3NyqpgdvHSQSn8h2vS/ZjvQs7rfSOBAkNlEv41xd
-gSGn2rtO/+YHqP65DSdsu3BaVXoT6fEqSWnHX4dXTEN5bTpl6TBcQe7rd6VzEojov32u5cSoHw2O
-HG1QAk8mGEPej1WFsQs3BWDJVTkSBKEqz3EWnzZRSb9wO55nnPt7eck5HHisd5FUmrh1CoFSl+Nm
-YWvtPjgelmFV4ZFUjO2MJB+ByRCac5krFk5yAD9UG/iNuovnFNa2RU9g7Jauwy8CTl2dlklyALKr
-dVwPaFsdZcJfMw8eD/A7hvWwTruc9+olBdytoptLFwG+Qt81IR2tq670v64fG9PiO/yzcnMcmyiQ
-iRM9HcEARwmWmjgb3bHPDcK0RPOWlc4yOo80nOAXx17Org3bhzjlP1v9mxnhMUF6cKojawHhRUzN
-lM47ni3niAIi9G7oyOzWPPO5std3eqx7
------END CERTIFICATE-----
-
-Telekom Security TLS ECC Root 2020
-==================================
------BEGIN CERTIFICATE-----
-MIICQjCCAcmgAwIBAgIQNjqWjMlcsljN0AFdxeVXADAKBggqhkjOPQQDAzBjMQswCQYDVQQGEwJE
-RTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0eSBHbWJIMSswKQYDVQQDDCJUZWxl
-a29tIFNlY3VyaXR5IFRMUyBFQ0MgUm9vdCAyMDIwMB4XDTIwMDgyNTA3NDgyMFoXDTQ1MDgyNTIz
-NTk1OVowYzELMAkGA1UEBhMCREUxJzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20gU2VjdXJpdHkg
-R21iSDErMCkGA1UEAwwiVGVsZWtvbSBTZWN1cml0eSBUTFMgRUNDIFJvb3QgMjAyMDB2MBAGByqG
-SM49AgEGBSuBBAAiA2IABM6//leov9Wq9xCazbzREaK9Z0LMkOsVGJDZos0MKiXrPk/OtdKPD/M1
-2kOLAoC+b1EkHQ9rK8qfwm9QMuU3ILYg/4gND21Ju9sGpIeQkpT0CdDPf8iAC8GXs7s1J8nCG6NC
-MEAwHQYDVR0OBBYEFONyzG6VmUex5rNhTNHLq+O6zd6fMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
-AQH/BAQDAgEGMAoGCCqGSM49BAMDA2cAMGQCMHVSi7ekEE+uShCLsoRbQuHmKjYC2qBuGT8lv9pZ
-Mo7k+5Dck2TOrbRBR2Diz6fLHgIwN0GMZt9Ba9aDAEH9L1r3ULRn0SyocddDypwnJJGDSA3PzfdU
-ga/sf+Rn27iQ7t0l
------END CERTIFICATE-----
-
-Telekom Security TLS RSA Root 2023
-==================================
------BEGIN CERTIFICATE-----
-MIIFszCCA5ugAwIBAgIQIZxULej27HF3+k7ow3BXlzANBgkqhkiG9w0BAQwFADBjMQswCQYDVQQG
-EwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0eSBHbWJIMSswKQYDVQQDDCJU
-ZWxla29tIFNlY3VyaXR5IFRMUyBSU0EgUm9vdCAyMDIzMB4XDTIzMDMyODEyMTY0NVoXDTQ4MDMy
-NzIzNTk1OVowYzELMAkGA1UEBhMCREUxJzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20gU2VjdXJp
-dHkgR21iSDErMCkGA1UEAwwiVGVsZWtvbSBTZWN1cml0eSBUTFMgUlNBIFJvb3QgMjAyMzCCAiIw
-DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAO01oYGA88tKaVvC+1GDrib94W7zgRJ9cUD/h3VC
-KSHtgVIs3xLBGYSJwb3FKNXVS2xE1kzbB5ZKVXrKNoIENqil/Cf2SfHVcp6R+SPWcHu79ZvB7JPP
-GeplfohwoHP89v+1VmLhc2o0mD6CuKyVU/QBoCcHcqMAU6DksquDOFczJZSfvkgdmOGjup5czQRx
-UX11eKvzWarE4GC+j4NSuHUaQTXtvPM6Y+mpFEXX5lLRbtLevOP1Czvm4MS9Q2QTps70mDdsipWo
-l8hHD/BeEIvnHRz+sTugBTNoBUGCwQMrAcjnj02r6LX2zWtEtefdi+zqJbQAIldNsLGyMcEWzv/9
-FIS3R/qy8XDe24tsNlikfLMR0cN3f1+2JeANxdKz+bi4d9s3cXFH42AYTyS2dTd4uaNir73Jco4v
-zLuu2+QVUhkHM/tqty1LkCiCc/4YizWN26cEar7qwU02OxY2kTLvtkCJkUPg8qKrBC7m8kwOFjQg
-rIfBLX7JZkcXFBGk8/ehJImr2BrIoVyxo/eMbcgByU/J7MT8rFEz0ciD0cmfHdRHNCk+y7AO+oML
-KFjlKdw/fKifybYKu6boRhYPluV75Gp6SG12mAWl3G0eQh5C2hrgUve1g8Aae3g1LDj1H/1Joy7S
-WWO/gLCMk3PLNaaZlSJhZQNg+y+TS/qanIA7AgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAdBgNV
-HQ4EFgQUtqeXgj10hZv3PJ+TmpV5dVKMbUcwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBS2
-p5eCPXSFm/c8n5OalXl1UoxtRzANBgkqhkiG9w0BAQwFAAOCAgEAqMxhpr51nhVQpGv7qHBFfLp+
-sVr8WyP6Cnf4mHGCDG3gXkaqk/QeoMPhk9tLrbKmXauw1GLLXrtm9S3ul0A8Yute1hTWjOKWi0Fp
-kzXmuZlrYrShF2Y0pmtjxrlO8iLpWA1WQdH6DErwM807u20hOq6OcrXDSvvpfeWxm4bu4uB9tPcy
-/SKE8YXJN3nptT+/XOR0so8RYgDdGGah2XsjX/GO1WfoVNpbOms2b/mBsTNHM3dA+VKq3dSDz4V4
-mZqTuXNnQkYRIer+CqkbGmVps4+uFrb2S1ayLfmlyOw7YqPta9BO1UAJpB+Y1zqlklkg5LB9zVtz
-aL1txKITDmcZuI1CfmwMmm6gJC3VRRvcxAIU/oVbZZfKTpBQCHpCNfnqwmbU+AGuHrS+w6jv/naa
-oqYfRvaE7fzbzsQCzndILIyy7MMAo+wsVRjBfhnu4S/yrYObnqsZ38aKL4x35bcF7DvB7L6Gs4a8
-wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+ljX273CXE2whJdV/LItM3z7gLfEdxquVeE
-HVlNjM7IDiPCtyaaEBRx/pOyiriA8A4QntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0
-o82bNSQ3+pCTE4FCxpgmdTdmQRCsu/WU48IxK63nI1bMNSWSs1A=
------END CERTIFICATE-----
-
-FIRMAPROFESIONAL CA ROOT-A WEB
-==============================
------BEGIN CERTIFICATE-----
-MIICejCCAgCgAwIBAgIQMZch7a+JQn81QYehZ1ZMbTAKBggqhkjOPQQDAzBuMQswCQYDVQQGEwJF
-UzEcMBoGA1UECgwTRmlybWFwcm9mZXNpb25hbCBTQTEYMBYGA1UEYQwPVkFURVMtQTYyNjM0MDY4
-MScwJQYDVQQDDB5GSVJNQVBST0ZFU0lPTkFMIENBIFJPT1QtQSBXRUIwHhcNMjIwNDA2MDkwMTM2
-WhcNNDcwMzMxMDkwMTM2WjBuMQswCQYDVQQGEwJFUzEcMBoGA1UECgwTRmlybWFwcm9mZXNpb25h
-bCBTQTEYMBYGA1UEYQwPVkFURVMtQTYyNjM0MDY4MScwJQYDVQQDDB5GSVJNQVBST0ZFU0lPTkFM
-IENBIFJPT1QtQSBXRUIwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHU+osEaR3xyrq89Zfe9MEkVz6
-iMYiuYMQYneEMy3pA4jU4DP37XcsSmDq5G+tbbT4TIqk5B/K6k84Si6CcyvHZpsKjECcfIr28jlg
-st7L7Ljkb+qbXbdTkBgyVcUgt5SjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUk+FD
-Y1w8ndYn81LsF7Kpryz3dvgwHQYDVR0OBBYEFJPhQ2NcPJ3WJ/NS7Beyqa8s93b4MA4GA1UdDwEB
-/wQEAwIBBjAKBggqhkjOPQQDAwNoADBlAjAdfKR7w4l1M+E7qUW/Runpod3JIha3RxEL2Jq68cgL
-cFBTApFwhVmpHqTm6iMxoAACMQD94vizrxa5HnPEluPBMBnYfubDl94cT7iJLzPrSA8Z94dGXSaQ
-pYXFuXqUPoeovQA=
------END CERTIFICATE-----
-
-TWCA CYBER Root CA
-==================
------BEGIN CERTIFICATE-----
-MIIFjTCCA3WgAwIBAgIQQAE0jMIAAAAAAAAAATzyxjANBgkqhkiG9w0BAQwFADBQMQswCQYDVQQG
-EwJUVzESMBAGA1UEChMJVEFJV0FOLUNBMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJUV0NB
-IENZQkVSIFJvb3QgQ0EwHhcNMjIxMTIyMDY1NDI5WhcNNDcxMTIyMTU1OTU5WjBQMQswCQYDVQQG
-EwJUVzESMBAGA1UEChMJVEFJV0FOLUNBMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJUV0NB
-IENZQkVSIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDG+Moe2Qkgfh1s
-Ts6P40czRJzHyWmqOlt47nDSkvgEs1JSHWdyKKHfi12VCv7qze33Kc7wb3+szT3vsxxFavcokPFh
-V8UMxKNQXd7UtcsZyoC5dc4pztKFIuwCY8xEMCDa6pFbVuYdHNWdZsc/34bKS1PE2Y2yHer43CdT
-o0fhYcx9tbD47nORxc5zb87uEB8aBs/pJ2DFTxnk684iJkXXYJndzk834H/nY62wuFm40AZoNWDT
-Nq5xQwTxaWV4fPMf88oon1oglWa0zbfuj3ikRRjpJi+NmykosaS3Om251Bw4ckVYsV7r8Cibt4LK
-/c/WMw+f+5eesRycnupfXtuq3VTpMCEobY5583WSjCb+3MX2w7DfRFlDo7YDKPYIMKoNM+HvnKkH
-IuNZW0CP2oi3aQiotyMuRAlZN1vH4xfyIutuOVLF3lSnmMlLIJXcRolftBL5hSmO68gnFSDAS9TM
-fAxsNAwmmyYxpjyn9tnQS6Jk/zuZQXLB4HCX8SS7K8R0IrGsayIyJNN4KsDAoS/xUgXJP+92ZuJF
-2A09rZXIx4kmyA+upwMu+8Ff+iDhcK2wZSA3M2Cw1a/XDBzCkHDXShi8fgGwsOsVHkQGzaRP6AzR
-wyAQ4VRlnrZR0Bp2a0JaWHY06rc3Ga4udfmW5cFZ95RXKSWNOkyrTZpB0F8mAwIDAQABo2MwYTAO
-BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBSdhWEUfMFib5do5E83
-QOGt4A1WNzAdBgNVHQ4EFgQUnYVhFHzBYm+XaORPN0DhreANVjcwDQYJKoZIhvcNAQEMBQADggIB
-AGSPesRiDrWIzLjHhg6hShbNcAu3p4ULs3a2D6f/CIsLJc+o1IN1KriWiLb73y0ttGlTITVX1olN
-c79pj3CjYcya2x6a4CD4bLubIp1dhDGaLIrdaqHXKGnK/nZVekZn68xDiBaiA9a5F/gZbG0jAn/x
-X9AKKSM70aoK7akXJlQKTcKlTfjF/biBzysseKNnTKkHmvPfXvt89YnNdJdhEGoHK4Fa0o635yDR
-IG4kqIQnoVesqlVYL9zZyvpoBJ7tRCT5dEA7IzOrg1oYJkK2bVS1FmAwbLGg+LhBoF1JSdJlBTrq
-/p1hvIbZv97Tujqxf36SNI7JAG7cmL3c7IAFrQI932XtCwP39xaEBDG6k5TY8hL4iuO/Qq+n1M0R
-FxbIQh0UqEL20kCGoE8jypZFVmAGzbdVAaYBlGX+bgUJurSkquLvWL69J1bY73NxW0Qz8ppy6rBe
-Pm6pUlvscG21h483XjyMnM7k8M4MZ0HMzvaAq07MTFb1wWFZk7Q+ptq4NxKfKjLji7gh7MMrZQzv
-It6IKTtM1/r+t+FHvpw+PoP7UV31aPcuIYXcv/Fa4nzXxeSDwWrruoBa3lwtcHb4yOWHh8qgnaHl
-IhInD0Q9HWzq1MKLL295q39QpsQZp6F6t5b5wR9iWqJDB0BeJsas7a5wFsWqynKKTbDPAYsDP27X
------END CERTIFICATE-----
-
-SecureSign Root CA12
-====================
------BEGIN CERTIFICATE-----
-MIIDcjCCAlqgAwIBAgIUZvnHwa/swlG07VOX5uaCwysckBYwDQYJKoZIhvcNAQELBQAwUTELMAkG
-A1UEBhMCSlAxIzAhBgNVBAoTGkN5YmVydHJ1c3QgSmFwYW4gQ28uLCBMdGQuMR0wGwYDVQQDExRT
-ZWN1cmVTaWduIFJvb3QgQ0ExMjAeFw0yMDA0MDgwNTM2NDZaFw00MDA0MDgwNTM2NDZaMFExCzAJ
-BgNVBAYTAkpQMSMwIQYDVQQKExpDeWJlcnRydXN0IEphcGFuIENvLiwgTHRkLjEdMBsGA1UEAxMU
-U2VjdXJlU2lnbiBSb290IENBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OcE3
-emhFKxS06+QT61d1I02PJC0W6K6OyX2kVzsqdiUzg2zqMoqUm048luT9Ub+ZyZN+v/mtp7JIKwcc
-J/VMvHASd6SFVLX9kHrko+RRWAPNEHl57muTH2SOa2SroxPjcf59q5zdJ1M3s6oYwlkm7Fsf0uZl
-fO+TvdhYXAvA42VvPMfKWeP+bl+sg779XSVOKik71gurFzJ4pOE+lEa+Ym6b3kaosRbnhW70CEBF
-EaCeVESE99g2zvVQR9wsMJvuwPWW0v4JhscGWa5Pro4RmHvzC1KqYiaqId+OJTN5lxZJjfU+1Uef
-NzFJM3IFTQy2VYzxV4+Kh9GtxRESOaCtAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
-AQH/BAQDAgEGMB0GA1UdDgQWBBRXNPN0zwRL1SXm8UC2LEzZLemgrTANBgkqhkiG9w0BAQsFAAOC
-AQEAPrvbFxbS8hQBICw4g0utvsqFepq2m2um4fylOqyttCg6r9cBg0krY6LdmmQOmFxv3Y67ilQi
-LUoT865AQ9tPkbeGGuwAtEGBpE/6aouIs3YIcipJQMPTw4WJmBClnW8Zt7vPemVV2zfrPIpyMpce
-mik+rY3moxtt9XUa5rBouVui7mlHJzWhhpmA8zNL4WukJsPvdFlseqJkth5Ew1DgDzk9qTPxpfPS
-vWKErI4cqc1avTc7bgoitPQV55FYxTpE05Uo2cBl6XLK0A+9H7MV2anjpEcJnuDLN/v9vZfVvhga
-aaI5gdka9at/yOPiZwud9AzqVN/Ssq+xIvEg37xEHA==
------END CERTIFICATE-----
-
-SecureSign Root CA14
-====================
------BEGIN CERTIFICATE-----
-MIIFcjCCA1qgAwIBAgIUZNtaDCBO6Ncpd8hQJ6JaJ90t8sswDQYJKoZIhvcNAQEMBQAwUTELMAkG
-A1UEBhMCSlAxIzAhBgNVBAoTGkN5YmVydHJ1c3QgSmFwYW4gQ28uLCBMdGQuMR0wGwYDVQQDExRT
-ZWN1cmVTaWduIFJvb3QgQ0ExNDAeFw0yMDA0MDgwNzA2MTlaFw00NTA0MDgwNzA2MTlaMFExCzAJ
-BgNVBAYTAkpQMSMwIQYDVQQKExpDeWJlcnRydXN0IEphcGFuIENvLiwgTHRkLjEdMBsGA1UEAxMU
-U2VjdXJlU2lnbiBSb290IENBMTQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDF0nqh
-1oq/FjHQmNE6lPxauG4iwWL3pwon71D2LrGeaBLwbCRjOfHw3xDG3rdSINVSW0KZnvOgvlIfX8xn
-bacuUKLBl422+JX1sLrcneC+y9/3OPJH9aaakpUqYllQC6KxNedlsmGy6pJxaeQp8E+BgQQ8sqVb
-1MWoWWd7VRxJq3qdwudzTe/NCcLEVxLbAQ4jeQkHO6Lo/IrPj8BGJJw4J+CDnRugv3gVEOuGTgpa
-/d/aLIJ+7sr2KeH6caH3iGicnPCNvg9JkdjqOvn90Ghx2+m1K06Ckm9mH+Dw3EzsytHqunQG+bOE
-kJTRX45zGRBdAuVwpcAQ0BB8b8VYSbSwbprafZX1zNoCr7gsfXmPvkPx+SgojQlD+Ajda8iLLCSx
-jVIHvXiby8posqTdDEx5YMaZ0ZPxMBoH064iwurO8YQJzOAUbn8/ftKChazcqRZOhaBgy/ac18iz
-ju3Gm5h1DVXoX+WViwKkrkMpKBGk5hIwAUt1ax5mnXkvpXYvHUC0bcl9eQjs0Wq2XSqypWa9a4X0
-dFbD9ed1Uigspf9mR6XU/v6eVL9lfgHWMI+lNpyiUBzuOIABSMbHdPTGrMNASRZhdCyvjG817XsY
-AFs2PJxQDcqSMxDxJklt33UkN4Ii1+iW/RVLApY+B3KVfqs9TC7XyvDf4Fg/LS8EmjijAQIDAQAB
-o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUBpOjCl4oaTeq
-YR3r6/wtbyPk86AwDQYJKoZIhvcNAQEMBQADggIBAJaAcgkGfpzMkwQWu6A6jZJOtxEaCnFxEM0E
-rX+lRVAQZk5KQaID2RFPeje5S+LGjzJmdSX7684/AykmjbgWHfYfM25I5uj4V7Ibed87hwriZLoA
-ymzvftAj63iP/2SbNDefNWWipAA9EiOWWF3KY4fGoweITedpdopTzfFP7ELyk+OZpDc8h7hi2/Ds
-Hzc/N19DzFGdtfCXwreFamgLRB7lUe6TzktuhsHSDCRZNhqfLJGP4xjblJUK7ZGqDpncllPjYYPG
-FrojutzdfhrGe0K22VoF3Jpf1d+42kd92jjbrDnVHmtsKheMYc2xbXIBw8MgAGJoFjHVdqqGuw6q
-nsb58Nn4DSEC5MUoFlkRudlpcyqSeLiSV5sI8jrlL5WwWLdrIBRtFO8KvH7YVdiI2i/6GaX7i+B/
-OfVyK4XELKzvGUWSTLNhB9xNH27SgRNcmvMSZ4PPmz+Ln52kuaiWA3rF7iDeM9ovnhp6dB7h7sxa
-OgTdsxoEqBRjrLdHEoOabPXm6RUVkRqEGQ6UROcSjiVbgGcZ3GOTEAtlLor6CZpO2oYofaphNdgO
-pygau1LgePhsumywbrmHXumZNTfxPWQrqaA0k89jL9WB365jJ6UeTo3cKXhZ+PmhIIynJkBugnLN
-eLLIjzwec+fBH7/PzqUqm9tEZDKgu39cJRNItX+S
------END CERTIFICATE-----
-
-SecureSign Root CA15
-====================
------BEGIN CERTIFICATE-----
-MIICIzCCAamgAwIBAgIUFhXHw9hJp75pDIqI7fBw+d23PocwCgYIKoZIzj0EAwMwUTELMAkGA1UE
-BhMCSlAxIzAhBgNVBAoTGkN5YmVydHJ1c3QgSmFwYW4gQ28uLCBMdGQuMR0wGwYDVQQDExRTZWN1
-cmVTaWduIFJvb3QgQ0ExNTAeFw0yMDA0MDgwODMyNTZaFw00NTA0MDgwODMyNTZaMFExCzAJBgNV
-BAYTAkpQMSMwIQYDVQQKExpDeWJlcnRydXN0IEphcGFuIENvLiwgTHRkLjEdMBsGA1UEAxMUU2Vj
-dXJlU2lnbiBSb290IENBMTUwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQLUHSNZDKZmbPSYAi4Io5G
-dCx4wCtELW1fHcmuS1Iggz24FG1Th2CeX2yF2wYUleDHKP+dX+Sq8bOLbe1PL0vJSpSRZHX+AezB
-2Ot6lHhWGENfa4HL9rzatAy2KZMIaY+jQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
-AgEGMB0GA1UdDgQWBBTrQciu/NWeUUj1vYv0hyCTQSvT9DAKBggqhkjOPQQDAwNoADBlAjEA2S6J
-fl5OpBEHvVnCB96rMjhTKkZEBhd6zlHp4P9mLQlO4E/0BdGF9jVg3PVys0Z9AjBEmEYagoUeYWmJ
-SwdLZrWeqrqgHkHZAXQ6bkU6iYAZezKYVWOr62Nuk22rGwlgMU4=
------END CERTIFICATE-----
-
-D-TRUST BR Root CA 2 2023
-=========================
------BEGIN CERTIFICATE-----
-MIIFqTCCA5GgAwIBAgIQczswBEhb2U14LnNLyaHcZjANBgkqhkiG9w0BAQ0FADBIMQswCQYDVQQG
-EwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlELVRSVVNUIEJSIFJvb3QgQ0Eg
-MiAyMDIzMB4XDTIzMDUwOTA4NTYzMVoXDTM4MDUwOTA4NTYzMFowSDELMAkGA1UEBhMCREUxFTAT
-BgNVBAoTDEQtVHJ1c3QgR21iSDEiMCAGA1UEAxMZRC1UUlVTVCBCUiBSb290IENBIDIgMjAyMzCC
-AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK7/CVmRgApKaOYkP7in5Mg6CjoWzckjYaCT
-cfKri3OPoGdlYNJUa2NRb0kz4HIHE304zQaSBylSa053bATTlfrdTIzZXcFhfUvnKLNEgXtRr90z
-sWh81k5M/itoucpmacTsXld/9w3HnDY25QdgrMBM6ghs7wZ8T1soegj8k12b9py0i4a6Ibn08OhZ
-WiihNIQaJZG2tY/vsvmA+vk9PBFy2OMvhnbFeSzBqZCTRphny4NqoFAjpzv2gTng7fC5v2Xx2Mt6
-++9zA84A9H3X4F07ZrjcjrqDy4d2A/wl2ecjbwb9Z/Pg/4S8R7+1FhhGaRTMBffb00msa8yr5LUL
-QyReS2tNZ9/WtT5PeB+UcSTq3nD88ZP+npNa5JRal1QMNXtfbO4AHyTsA7oC9Xb0n9Sa7YUsOCIv
-x9gvdhFP/Wxc6PWOJ4d/GUohR5AdeY0cW/jPSoXk7bNbjb7EZChdQcRurDhaTyN0dKkSw/bSuREV
-MweR2Ds3OmMwBtHFIjYoYiMQ4EbMl6zWK11kJNXuHA7e+whadSr2Y23OC0K+0bpwHJwh5Q8xaRfX
-/Aq03u2AnMuStIv13lmiWAmlY0cL4UEyNEHZmrHZqLAbWt4NDfTisl01gLmB1IRpkQLLddCNxbU9
-CZEJjxShFHR5PtbJFR2kWVki3PaKRT08EtY+XTIvAgMBAAGjgY4wgYswDwYDVR0TAQH/BAUwAwEB
-/zAdBgNVHQ4EFgQUZ5Dw1t61GNVGKX5cq/ieCLxklRAwDgYDVR0PAQH/BAQDAgEGMEkGA1UdHwRC
-MEAwPqA8oDqGOGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3RfYnJfcm9vdF9jYV8y
-XzIwMjMuY3JsMA0GCSqGSIb3DQEBDQUAA4ICAQA097N3U9swFrktpSHxQCF16+tIFoE9c+CeJyrr
-d6kTpGoKWloUMz1oH4Guaf2Mn2VsNELZLdB/eBaxOqwjMa1ef67nriv6uvw8l5VAk1/DLQOj7aRv
-U9f6QA4w9QAgLABMjDu0ox+2v5Eyq6+SmNMW5tTRVFxDWy6u71cqqLRvpO8NVhTaIasgdp4D/Ca4
-nj8+AybmTNudX0KEPUUDAxxZiMrcLmEkWqTqJwtzEr5SswrPMhfiHocaFpVIbVrg0M8JkiZmkdij
-YQ6qgYF/6FKC0ULn4B0Y+qSFNueG4A3rvNTJ1jxD8V1Jbn6Bm2m1iWKPiFLY1/4nwSPFyysCu7Ff
-/vtDhQNGvl3GyiEm/9cCnnRK3PgTFbGBVzbLZVzRHTF36SXDw7IyN9XxmAnkbWOACKsGkoHU6XCP
-pz+y7YaMgmo1yEJagtFSGkUPFaUA8JR7ZSdXOUPPfH/mvTWze/EZTN46ls/pdu4D58JDUjxqgejB
-WoC9EV2Ta/vH5mQ/u2kc6d0li690yVRAysuTEwrt+2aSEcr1wPrYg1UDfNPFIkZ1cGt5SAYqgpq/
-5usWDiJFAbzdNpQ0qTUmiteXue4Icr80knCDgKs4qllo3UCkGJCy89UDyibK79XH4I9TjvAA46jt
-n/mtd+ArY0+ew+43u3gJhJ65bvspmZDogNOfJA==
------END CERTIFICATE-----
-
-D-TRUST EV Root CA 2 2023
-=========================
------BEGIN CERTIFICATE-----
-MIIFqTCCA5GgAwIBAgIQaSYJfoBLTKCnjHhiU19abzANBgkqhkiG9w0BAQ0FADBIMQswCQYDVQQG
-EwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlELVRSVVNUIEVWIFJvb3QgQ0Eg
-MiAyMDIzMB4XDTIzMDUwOTA5MTAzM1oXDTM4MDUwOTA5MTAzMlowSDELMAkGA1UEBhMCREUxFTAT
-BgNVBAoTDEQtVHJ1c3QgR21iSDEiMCAGA1UEAxMZRC1UUlVTVCBFViBSb290IENBIDIgMjAyMzCC
-AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANiOo4mAC7JXUtypU0w3uX9jFxPvp1sjW2l1
-sJkKF8GLxNuo4MwxusLyzV3pt/gdr2rElYfXR8mV2IIEUD2BCP/kPbOx1sWy/YgJ25yE7CUXFId/
-MHibaljJtnMoPDT3mfd/06b4HEV8rSyMlD/YZxBTfiLNTiVR8CUkNRFeEMbsh2aJgWi6zCudR3Mf
-vc2RpHJqnKIbGKBv7FD0fUDCqDDPvXPIEysQEx6Lmqg6lHPTGGkKSv/BAQP/eX+1SH977ugpbzZM
-lWGG2Pmic4ruri+W7mjNPU0oQvlFKzIbRlUWaqZLKfm7lVa/Rh3sHZMdwGWyH6FDrlaeoLGPaxK3
-YG14C8qKXO0elg6DpkiVjTujIcSuWMYAsoS0I6SWhjW42J7YrDRJmGOVxcttSEfi8i4YHtAxq910
-7PncjLgcjmgjutDzUNzPZY9zOjLHfP7KgiJPvo5iR2blzYfi6NUPGJ/lBHJLRjwQ8kTCZFZxTnXo
-nMkmdMV9WdEKWw9t/p51HBjGGjp82A0EzM23RWV6sY+4roRIPrN6TagD4uJ+ARZZaBhDM7DS3LAa
-QzXupdqpRlyuhoFBAUp0JuyfBr/CBTdkdXgpaP3F9ev+R/nkhbDhezGdpn9yo7nELC7MmVcOIQxF
-AZRl62UJxmMiCzNJkkg8/M3OsD6Onov4/knFNXJHAgMBAAGjgY4wgYswDwYDVR0TAQH/BAUwAwEB
-/zAdBgNVHQ4EFgQUqvyREBuHkV8Wub9PS5FeAByxMoAwDgYDVR0PAQH/BAQDAgEGMEkGA1UdHwRC
-MEAwPqA8oDqGOGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3RfZXZfcm9vdF9jYV8y
-XzIwMjMuY3JsMA0GCSqGSIb3DQEBDQUAA4ICAQCTy6UfmRHsmg1fLBWTxj++EI14QvBukEdHjqOS
-Mo1wj/Zbjb6JzkcBahsgIIlbyIIQbODnmaprxiqgYzWRaoUlrRc4pZt+UPJ26oUFKidBK7GB0aL2
-QHWpDsvxVUjY7NHss+jOFKE17MJeNRqrphYBBo7q3C+jisosketSjl8MmxfPy3MHGcRqwnNU73xD
-UmPBEcrCRbH0O1P1aa4846XerOhUt7KR/aypH/KH5BfGSah82ApB9PI+53c0BFLd6IHyTS9URZ0V
-4U/M5d40VxDJI3IXcI1QcB9WbMy5/zpaT2N6w25lBx2Eof+pDGOJbbJAiDnXH3dotfyc1dZnaVuo
-dNv8ifYbMvekJKZ2t0dT741Jj6m2g1qllpBFYfXeA08mD6iL8AOWsKwV0HFaanuU5nCT2vFp4LJi
-TZ6P/4mdm13NRemUAiKN4DV/6PEEeXFsVIP4M7kFMhtYVRFP0OUnR3Hs7dpn1mKmS00PaaLJvOwi
-S5THaJQXfuKOKD62xur1NGyfN4gHONuGcfrNlUhDbqNPgofXNJhuS5N5YHVpD/Aa1VP6IQzCP+k/
-HxiMkl14p3ZnGbuy6n/pcAlWVqOwDAstNl7F6cTVg8uGF5csbBNvh1qvSaYd2804BC5f4ko1Di1L
-+KIkBI3Y4WNeApI02phhXBxvWHZks/wCuPWdCg==
------END CERTIFICATE-----
diff --git a/deps/curl/bin/curl.exe b/deps/curl/bin/curl.exe
deleted file mode 100644
index 2d9864ec0..000000000
Binary files a/deps/curl/bin/curl.exe and /dev/null differ
diff --git a/deps/curl/bin/libcurl.def b/deps/curl/bin/libcurl.def
deleted file mode 100644
index 829911767..000000000
--- a/deps/curl/bin/libcurl.def
+++ /dev/null
@@ -1,97 +0,0 @@
-EXPORTS
- curl_easy_cleanup @1
- curl_easy_duphandle @2
- curl_easy_escape @3
- curl_easy_getinfo @4
- curl_easy_header @5
- curl_easy_init @6
- curl_easy_nextheader @7
- curl_easy_option_by_id @8
- curl_easy_option_by_name @9
- curl_easy_option_next @10
- curl_easy_pause @11
- curl_easy_perform @12
- curl_easy_recv @13
- curl_easy_reset @14
- curl_easy_send @15
- curl_easy_setopt @16
- curl_easy_ssls_export @17
- curl_easy_ssls_import @18
- curl_easy_strerror @19
- curl_easy_unescape @20
- curl_easy_upkeep @21
- curl_escape @22
- curl_formadd @23
- curl_formfree @24
- curl_formget @25
- curl_free @26
- curl_getdate @27
- curl_getenv @28
- curl_global_cleanup @29
- curl_global_init @30
- curl_global_init_mem @31
- curl_global_sslset @32
- curl_global_trace @33
- curl_maprintf @34
- curl_mfprintf @35
- curl_mime_addpart @36
- curl_mime_data @37
- curl_mime_data_cb @38
- curl_mime_encoder @39
- curl_mime_filedata @40
- curl_mime_filename @41
- curl_mime_free @42
- curl_mime_headers @43
- curl_mime_init @44
- curl_mime_name @45
- curl_mime_subparts @46
- curl_mime_type @47
- curl_mprintf @48
- curl_msnprintf @49
- curl_msprintf @50
- curl_multi_add_handle @51
- curl_multi_assign @52
- curl_multi_cleanup @53
- curl_multi_fdset @54
- curl_multi_get_handles @55
- curl_multi_info_read @56
- curl_multi_init @57
- curl_multi_perform @58
- curl_multi_poll @59
- curl_multi_remove_handle @60
- curl_multi_setopt @61
- curl_multi_socket @62
- curl_multi_socket_action @63
- curl_multi_socket_all @64
- curl_multi_strerror @65
- curl_multi_timeout @66
- curl_multi_wait @67
- curl_multi_waitfds @68
- curl_multi_wakeup @69
- curl_mvaprintf @70
- curl_mvfprintf @71
- curl_mvprintf @72
- curl_mvsnprintf @73
- curl_mvsprintf @74
- curl_pushheader_byname @75
- curl_pushheader_bynum @76
- curl_share_cleanup @77
- curl_share_init @78
- curl_share_setopt @79
- curl_share_strerror @80
- curl_slist_append @81
- curl_slist_free_all @82
- curl_strequal @83
- curl_strnequal @84
- curl_unescape @85
- curl_url @86
- curl_url_cleanup @87
- curl_url_dup @88
- curl_url_get @89
- curl_url_set @90
- curl_url_strerror @91
- curl_version @92
- curl_version_info @93
- curl_ws_meta @94
- curl_ws_recv @95
- curl_ws_send @96
diff --git a/deps/curl/bin/libcurl.dll b/deps/curl/bin/libcurl.dll
deleted file mode 100644
index a1cf74555..000000000
Binary files a/deps/curl/bin/libcurl.dll and /dev/null differ
diff --git a/deps/curl/dep/brotli/LICENSE.txt b/deps/curl/dep/brotli/LICENSE.txt
deleted file mode 100644
index 33b7cdd2d..000000000
--- a/deps/curl/dep/brotli/LICENSE.txt
+++ /dev/null
@@ -1,19 +0,0 @@
-Copyright (c) 2009, 2010, 2013-2016 by the Brotli Authors.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
diff --git a/deps/curl/dep/brotli/README.md b/deps/curl/dep/brotli/README.md
deleted file mode 100644
index 67bf4d94a..000000000
--- a/deps/curl/dep/brotli/README.md
+++ /dev/null
@@ -1,95 +0,0 @@
-
- 
- 
-
-
-
-### Introduction
-
-Brotli is a generic-purpose lossless compression algorithm that compresses data
-using a combination of a modern variant of the LZ77 algorithm, Huffman coding
-and 2nd order context modeling, with a compression ratio comparable to the best
-currently available general-purpose compression methods. It is similar in speed
-with deflate but offers more dense compression.
-
-The specification of the Brotli Compressed Data Format is defined in [RFC 7932](https://tools.ietf.org/html/rfc7932).
-
-Brotli is open-sourced under the MIT License, see the LICENSE file.
-
-> **Please note:** brotli is a "stream" format; it does not contain
-> meta-information, like checksums or uncompresssed data length. It is possible
-> to modify "raw" ranges of the compressed stream and the decoder will not
-> notice that.
-
-### Build instructions
-
-#### Vcpkg
-
-You can download and install brotli using the [vcpkg](https://github.com/Microsoft/vcpkg/) dependency manager:
-
- git clone https://github.com/Microsoft/vcpkg.git
- cd vcpkg
- ./bootstrap-vcpkg.sh
- ./vcpkg integrate install
- ./vcpkg install brotli
-
-The brotli port in vcpkg is kept up to date by Microsoft team members and community contributors. If the version is out of date, please [create an issue or pull request](https://github.com/Microsoft/vcpkg) on the vcpkg repository.
-
-#### Bazel
-
-See [Bazel](http://www.bazel.build/)
-
-#### CMake
-
-The basic commands to build and install brotli are:
-
- $ mkdir out && cd out
- $ cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=./installed ..
- $ cmake --build . --config Release --target install
-
-You can use other [CMake](https://cmake.org/) configuration.
-
-#### Python
-
-To install the latest release of the Python module, run the following:
-
- $ pip install brotli
-
-To install the tip-of-the-tree version, run:
-
- $ pip install --upgrade git+https://github.com/google/brotli
-
-See the [Python readme](python/README.md) for more details on installing
-from source, development, and testing.
-
-### Contributing
-
-We glad to answer/library related questions in
-[brotli mailing list](https://groups.google.com/forum/#!forum/brotli).
-
-Regular issues / feature requests should be reported in
-[issue tracker](https://github.com/google/brotli/issues).
-
-For reporting vulnerability please read [SECURITY](SECURITY.md).
-
-For contributing changes please read [CONTRIBUTING](CONTRIBUTING.md).
-
-### Benchmarks
-* [Squash Compression Benchmark](https://quixdb.github.io/squash-benchmark/) / [Unstable Squash Compression Benchmark](https://quixdb.github.io/squash-benchmark/unstable/)
-* [Large Text Compression Benchmark](http://mattmahoney.net/dc/text.html)
-* [Lzturbo Benchmark](https://sites.google.com/site/powturbo/home/benchmark)
-
-### Related projects
-> **Disclaimer:** Brotli authors take no responsibility for the third party projects mentioned in this section.
-
-Independent [decoder](https://github.com/madler/brotli) implementation by Mark Adler, based entirely on format specification.
-
-JavaScript port of brotli [decoder](https://github.com/devongovett/brotli.js). Could be used directly via `npm install brotli`
-
-Hand ported [decoder / encoder](https://github.com/dominikhlbg/BrotliHaxe) in haxe by Dominik Homberger. Output source code: JavaScript, PHP, Python, Java and C#
-
-7Zip [plugin](https://github.com/mcmilk/7-Zip-Zstd)
-
-Dart [native bindings](https://github.com/thosakwe/brotli)
-
-Dart compression framework with [fast FFI-based Brotli implementation](https://pub.dev/documentation/es_compression/latest/brotli/brotli-library.html) with ready-to-use prebuilt binaries for Win/Linux/Mac
diff --git a/deps/curl/dep/cacert/LICENSE.url b/deps/curl/dep/cacert/LICENSE.url
deleted file mode 100644
index 3819c0232..000000000
--- a/deps/curl/dep/cacert/LICENSE.url
+++ /dev/null
@@ -1,2 +0,0 @@
-[InternetShortcut]
-URL=https://www.mozilla.org/media/MPL/2.0/index.txt
diff --git a/deps/curl/dep/libpsl/AUTHORS.txt b/deps/curl/dep/libpsl/AUTHORS.txt
deleted file mode 100644
index 761333294..000000000
--- a/deps/curl/dep/libpsl/AUTHORS.txt
+++ /dev/null
@@ -1,24 +0,0 @@
-Authors of and contributors to libpsl.
-Thank you very much for spending your time !
-
-Also many thanks for anyone who contributed ideas,
-took part in discussions or 'just' asked questions.
-
-Please drop me a note if you feel you should have
-been mentioned here.
-
-Tim Ruehsen (Implementation of libpsl)
-Daniel Kahn Gillmor (Discussion, Ideas, Organization, Code)
-Daniel Stenberg (Discussion, Ideas)
-Darshit Shah (Patching Wget to work with libpsl)
-Dagobert Michelsen (Fixed Solaris building)
-Christopher Meng (Fedora building)
-Jakub Čajka
-Giuseppe Scrivano
-Ryan Sleevi (Discussion, Requested DAFSA format and ICANN/PRIVATE support)
-Daurnimator (Code review, discussion, reports)
-Olle Liljenzin (Original DAFSA implementation and UTF-8 patch)
-Claudio Saveedra (Add support for PSL_TYPE_NO_STAR_RULE)
-Chun-wei Fan (Add NMake files)
-Xavier Claessens (Add Meson build system)
-Ignacio Casal Quinteiro (Improve Meson build)
diff --git a/deps/curl/dep/libpsl/COPYING.txt b/deps/curl/dep/libpsl/COPYING.txt
deleted file mode 100644
index 85945e764..000000000
--- a/deps/curl/dep/libpsl/COPYING.txt
+++ /dev/null
@@ -1,19 +0,0 @@
-Copyright (C) 2014-2024 Tim Rühsen
-
-Permission is hereby granted, free of charge, to any person obtaining a
-copy of this software and associated documentation files (the "Software"),
-to deal in the Software without restriction, including without limitation
-the rights to use, copy, modify, merge, publish, distribute, sublicense,
-and/or sell copies of the Software, and to permit persons to whom the
-Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-DEALINGS IN THE SOFTWARE.
diff --git a/deps/curl/dep/libpsl/NEWS.txt b/deps/curl/dep/libpsl/NEWS.txt
deleted file mode 100644
index f0c56d046..000000000
--- a/deps/curl/dep/libpsl/NEWS.txt
+++ /dev/null
@@ -1,237 +0,0 @@
-Copyright (C) 2014-2024 Tim Rühsen
-
-13.01.2024 Release V0.21.5
- * Fix version.txt
-
-13.01.2024 Release V0.21.4
- * Fix meson build (missing ICONV_CONST in config.h)
-
-13.01.2024 Release V0.21.3
- * Improved build with meson
- * Fixed and improved build on Windows
- * Improved build instructions
- * Install psl-make-dafsa
-
-26.12.2022 Release V0.21.2
- * Increased internal label size
- * Meson build improvements (needs meson >= 0.60.0)
- * Autoconf build improvements
- * Add instructions on how to build from tarball
- * Add WSAStartup() for Windows psl tool and tests
- * Bump gettext version to 0.19.3
- * Fix stack buffer overflow WRITE 1 in domain_to_punycode()
- (Relevant only when built without any IDNA library.)
- * Fix undefined behavior in library code
- * Ensures that calls to fopen() and stat() can handle largefiles
- * Several minor (non-functional) changes
-
-18.07.2020 Release V0.21.1
- * Fixing a test due to recent changes in upstream PSL
- * Meson build improvements
- * Documentation cleanups
- * Use semantic versioning for git tags
-
-16.04.2019 Release V0.21.0
- * Add -b/--batch to 'psl' to suppress printing the domain
- * Add support for Meson build system
- * Improve build system
- * Improve Windows compatibility
- * Remove NLS / gettext
- * Several cleanups and cosmetics
-
-26.04.2018 Release V0.20.2
- * Fix non srcdir builds
- * Add API decoration
- * Fix for MSVC/Win32 builds
- * Detection fallback from libidn2 to libcu, libidn
- * Fix MinGW cross builds on Linux
- * Add NMake Makefiles for Visual Studio builds
-
-26.02.2018 Release V0.20.1
- * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
- * Fix SO_VERSION to 8:0:3
- * Improve unit tests
-
-22.02.2018 Release V0.20.0
- * Remove hard-coded gcc flag in Makefile.am
- * Prevent excessive CPU cycles on large inputs
- * New flag PSL_TYPE_NO_STAR_RULE to skip star rule
-
-09.11.2017 Release V0.19.1
- * Add the forgotten commit with NEWS and configure.ac
-
-09.11.2017 Release V0.19.0
- * New function psl_free_string()
- * psl_make_dafsa now works with python2 and python3
- * psl_*count() functions now return -1 if info is not available
- * Fixed unsigned integer overflow in _mem_is_ascii()
- * Add -fsanitize-address-use-after-scope to --enable-asan if available
-
-20.07.2017 Release V0.18.0
- * Fix order of files in psl_latest()
- * Add fuzzing architecture
- * Fix memleak in _psl_is_public_suffix()
- * Add configure option --enable-asan (Address sanitizer)
- * Add configure option --enable-usan (Undefined sanitizer)
- * Add configure option --enable-cfi (Control Flow Integrity)
- * Fix finding libidn2 for static builds
- * Fix use of uninitialized stack value
- * Fix buffer overflow in libicu build
- * Use libidn2 as default for builds (former libicu)
- * Add pkg-config support for libidn and libidn2
-
-16.01.2017 Release V0.17.0
- * Use TR46 non-transitional for IDNA (libicu, libidn2 >= 0.14)
- * Fix coverage upload from TravisCI to Coveralls
- * New tests to cover psl_latest() and psl_dist_filename()
-
-15.12.2016 Release V0.16.1
- * Fix SO_VERSION to 6:0:1
- * Add --use-latest-psl to tools/psl as default
-
-16.12.2016 Release V0.16.0
- * Add functions psl_latest() and psl_dist_filename()
- * Do not taint out variable on error in psl_str_to_utf8lower()
- * Replace psl2c by psl-make-dafsa
- * Add missing includes for OpenBSD
- * Fix typos
- * Update copyright year
-
-14.11.2016 Release V0.15.0
- * Python3 compatibility for psl-make-dafsa
- * Support for UTF-8 in DAFSA data
- * Skip punycode conversion if DAFSA has UTF-8
- * Better code coverage by test suite
- * Code cleanup and enhancements
- * Install man pages for psl-make-dafsa and psl
- * Enhancements to the documentation
-
-30.07.2016 Release V0.14.0
- * Remove unneeded libraries from tools/psl link step
- * Use https instead of http where possible
- * Add man page for tools/psl
- * Add header magic to DAFSA files
- * Rename make_dafsa.py to psl-make-dafsa
- * Add man page for psl-make-dafsa
-
-02.03.2016 Release V0.13.0
- * Use tests.txt as PSL test file by default
- * Slightly shorter DAFSA array when sorting input
- * Check for python 2.7+ in configure.ac
- * Fix python3 incompatibilities in make_dafsa.py
-
-02.01.2016 Release V0.12.0
- * Load DAFSA binaries via psl_load_file() via auto-detection
- * Add more tests
- * Remove psl_builtin_compile_time()
- * Compile PSL into DAFSA using make_dafsa.py
- * Avoid libicu dependency with --enable-runtime=no
- * Test on new Travis-CI build farm
- * Use DAFSA format for builtin PSL data
- * Add function psl_is_public_suffix2()
- * Fix psl_builtin_outdated()
- * Fix several bugs
- * Cleanup code
-
-23.09.2015 Release V0.11.0
- * Add new function psl_check_version_number()
- * Add version defines to include file
-
-19.09.2015 Release V0.10.0
- * Code simplified
- * Less data entries, faster lookups
- * Add new function psl_suffix_wildcard_count()
- * Add new helper function psl_builtin_outdated()
-
-15.09.2015 Release V0.9.0
- * Added semantic checks to PSL entries when generating built-in data
- * Fix test suite for TLD exceptions (not used yet in reality)
- * Removed wrong assumption from test suite
- * Support explicit combination of 'foo.bar' and '*.foo.bar'
-
-14.08.2015 Release V0.8.1
- * Fix documentation
- * Add syntax checking of tests_psl.txt
-
-06.08.2015 Release V0.8.0
- * Add https://github.com/publicsuffix as git submodule
- * Support Debian 'Reproducible Builds'
- * Fix generation of docs
- * Check UTF-8 sequences for validity (for libidn<=1.30)
- * Add LICENSE to distribution tarball
- * Fix compatibility function strndup
-
-21.02.2015 Release V0.7.1
- * include configured PSL file into tarball
-
-30.01.2015 Release V0.7.0
- * include effective_tld_names.dat of date 29.12.2014
- * do not install docs when gtk-doc is not installed
- * fix several compatibility issues with Solaris
- * fix 'make distcheck' after 'make clean'
- * mark API as stable
- * use pkg-config to detect libicu
-
-14.11.2014 Release V0.6.2
- * revoked commit from 0.6.1 to satisfy Travis-CI
-
-14.11.2014 Release V0.6.1
- * include effective_tld_names.dat of date 04.11.2014
- * fix pkg-config configuration
-
-28.10.2014 Release V0.6.0
- * added support for IP addresses in psl_is_cookie_domain_acceptable()
- * removed qsort_r() for compatibility
- * check for alloca.h before including
- * include effective_tld_names.dat of date 27.10.2014
-
-03.08.2014 Release V0.5.1
- * fix ASCII check for architectures where char <> signed char
-
-02.07.2014 Release V0.5.0
- * added configure --enable-runtime to allow for IDNA library
- selection as runtime dependency
- * added configure --enable-builtin to allow for IDNA library
- selection for generating the built-in PSL data
- * fixed psl_str_to_utf8lower prototype
- * fixed authors name to UTF-8
-
-23.06.2014 Release V0.4.0
- * depend on libicu for punycode, utf-8 and lowercase conversions
- * added function psl_str_to_utf8lower()
- * fixed locale issues
- * introducing psl_error_t for error codes + defines
- * removed redundant code from psl2c.c
- * updated docs
- * psl utility reads from stdin if no argument specified
-
-10.06.2014 Release V0.3.1
- * link psl utility dynamically
- * fix output of psl_filename()
- * cleanup for psl --help
- * removed check for idn2 in autogen.sh
-
-05.06.2014 Release V0.3.0
- * added support for libicu in psl2c (IDNA2008 UTS#46)
- this needs pkg-config and libicu-dev installed
- * added --version to psl utility
-
-31.05.2014 Release V0.2.5
- * added psl_get_version()
- * removed version from library name
-
-30.05.2014 Release V0.2.4
- * fixed psl_builtin() to return NULL if no built-in PSL data is available
-
-27.05.2014 Release V0.2.3
- * changed API version to 0.2
-
-26.05.2014 Release V0.2.2
- * changed code to C89
- * added a few test cases
- * build static library by default
-
-25.04.2014 Hotfix release V0.2.1
- * updated to the latest Publix Suffix List
-
-25.04.2014 Initial release V0.2
diff --git a/deps/curl/dep/libressl/COPYING.txt b/deps/curl/dep/libressl/COPYING.txt
deleted file mode 100644
index 892e14a45..000000000
--- a/deps/curl/dep/libressl/COPYING.txt
+++ /dev/null
@@ -1,133 +0,0 @@
-
- LibReSSL files are retained under the copyright of the authors. New
- additions are ISC licensed as per OpenBSD's normal licensing policy,
- or are placed in the public domain.
-
- The OpenSSL code is distributed under the terms of the original OpenSSL
- licenses which follow:
-
- LICENSE ISSUES
- ==============
-
- The OpenSSL toolkit stays under a dual license, i.e. both the conditions of
- the OpenSSL License and the original SSLeay license apply to the toolkit.
- See below for the actual license texts. In case of any license issues
- related to OpenSSL please contact openssl-core@openssl.org.
-
- OpenSSL License
- ---------------
-
-/* ====================================================================
- * Copyright (c) 1998-2011 The OpenSSL Project. All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- *
- * 1. Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- *
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in
- * the documentation and/or other materials provided with the
- * distribution.
- *
- * 3. All advertising materials mentioning features or use of this
- * software must display the following acknowledgment:
- * "This product includes software developed by the OpenSSL Project
- * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
- *
- * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
- * endorse or promote products derived from this software without
- * prior written permission. For written permission, please contact
- * openssl-core@openssl.org.
- *
- * 5. Products derived from this software may not be called "OpenSSL"
- * nor may "OpenSSL" appear in their names without prior written
- * permission of the OpenSSL Project.
- *
- * 6. Redistributions of any form whatsoever must retain the following
- * acknowledgment:
- * "This product includes software developed by the OpenSSL Project
- * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
- *
- * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
- * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
- * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
- * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
- * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
- * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
- * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
- * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
- * OF THE POSSIBILITY OF SUCH DAMAGE.
- * ====================================================================
- *
- * This product includes cryptographic software written by Eric Young
- * (eay@cryptsoft.com). This product includes software written by Tim
- * Hudson (tjh@cryptsoft.com).
- *
- */
-
- Original SSLeay License
- -----------------------
-
-/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
- * All rights reserved.
- *
- * This package is an SSL implementation written
- * by Eric Young (eay@cryptsoft.com).
- * The implementation was written so as to conform with Netscapes SSL.
- *
- * This library is free for commercial and non-commercial use as long as
- * the following conditions are aheared to. The following conditions
- * apply to all code found in this distribution, be it the RC4, RSA,
- * lhash, DES, etc., code; not just the SSL code. The SSL documentation
- * included with this distribution is covered by the same copyright terms
- * except that the holder is Tim Hudson (tjh@cryptsoft.com).
- *
- * Copyright remains Eric Young's, and as such any Copyright notices in
- * the code are not to be removed.
- * If this package is used in a product, Eric Young should be given attribution
- * as the author of the parts of the library used.
- * This can be in the form of a textual message at program startup or
- * in documentation (online or textual) provided with the package.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the copyright
- * notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- * must display the following acknowledgement:
- * "This product includes cryptographic software written by
- * Eric Young (eay@cryptsoft.com)"
- * The word 'cryptographic' can be left out if the rouines from the library
- * being used are not cryptographic related :-).
- * 4. If you include any Windows specific code (or a derivative thereof) from
- * the apps directory (application code) you must include an acknowledgement:
- * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
- *
- * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * The licence and distribution terms for any publically available version or
- * derivative of this code cannot be changed. i.e. this code cannot simply be
- * copied and put under another distribution licence
- * [including the GNU Public Licence.]
- */
-
diff --git a/deps/curl/dep/libressl/ChangeLog.txt b/deps/curl/dep/libressl/ChangeLog.txt
deleted file mode 100644
index 77ccbb86f..000000000
--- a/deps/curl/dep/libressl/ChangeLog.txt
+++ /dev/null
@@ -1,3138 +0,0 @@
-Because this project is maintained both in the OpenBSD tree using CVS and in
-Git, it can be confusing following all of the changes.
-
-Most of the libssl and libcrypto source code is is here in OpenBSD CVS:
-
- https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/
-
-Some of the libcrypto and OS-compatibility files for entropy and random number
-generation are here:
-
- https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libcrypto/
-
-A simplified TLS wrapper library is here:
-
- https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libtls/
-
-The LibreSSL Portable project copies these portions of the OpenBSD tree, along
-with relevant portions of the C library, to a Git repository. This makes it
-easier to follow all of the relevant changes to the upstream project in a
-single place:
-
- https://github.com/libressl/openbsd
-
-The portable bits of the project are largely maintained out-of-tree, and their
-history is also available from Git.
-
- https://github.com/libressl/portable
-
-LibreSSL Portable Release Notes:
-
-4.0.0 - Stable release
-
- * Portable changes
- - Added initial Emscripten support in CMake builds.
- - Removed timegm() compatibility layer since all uses were replaced
- with OPENSSL_timegm(). Cleaned up the corresponding test harness.
- - The mips32 platform is no longer actively supported.
- - Fixed Windows support for dates beyond 2038.
- * Internal improvements
- - Cleaned up parts of the conf directory. Simplified some logic,
- fixed memory leaks.
- - Simplified X509_check_trust() internals to be somewhat readable.
- - Removed last internal uses of gmtime() and timegm() and replaced
- them with BoringSSL's posix time conversion API.
- - Removed unnecessary stat calls in by_dir.
- - Split parsing and processing of TLS extensions to ensure that
- extension callbacks are called in a predefined order.
- - Cleaned up the MD4 and MD5 implementations.
- - Assembly functions are no longer exposed in the public API, they
- are all wrapped by C functions.
- - Removed assembly implementations of legacy ciphers on legacy
- architectures.
- - Merged most multi-file implementations of ciphers into one or two
- C files.
- - Removed the cache of certificate validity. This was added for
- performance reasons which no longer apply since BoringSSL's time
- conversion API isn't slow. Also, a recently added error check led
- to obscure, undesirable validation failures.
- - Stopped calling OPENSSL_cpuid_setup() from the .init section on
- amd64 and i386.
- - Rewrote various BN conversion functions.
- - Improved certification request internals.
- - Removed unused DSA methods.
- - Improved X.509v3 extension internals. Fixed various bugs and leaks
- in X509V3_add1_i2d() and X509V3_get_d2i(). Their implementations
- now vaguely resemble code.
- - Rewrote BN_bn2mpi() using CBB.
- - Made most error string tables const.
- - Removed handling for SSLv2 client hello messages.
- - Improvements in the openssl(1) speed app's signal handler.
- - Cleaned up various X509v3_* extension API.
- - Unified the X.509v3 extension methods.
- - Cleaned up cipher handling in SSL_SESSION.
- - Removed get_cipher from SSL_METHOD.
- - Rewrote CRYPTO_EX_DATA from scratch. The only intentional change of
- behavior is that there is now a hard limit on the number of indexes
- that can be allocated.
- - Removed bogus connect() call from netcat.
- - Uses of atoi() and strtol() in libcrypto were replaced with
- strtonum().
- - Introduced crypto_arch.h which will contain the architecture
- dependent code and defines rather than the public opensslconf.h.
- - OPENSSL_cpu_caps() is now architecture independent.
- - Reorganized the DES implementation to use fewer files and removed
- optimizations for ancient processors and compilers.
- * New features
- - Added CRLfile option to the cms command of openssl(1) to specify
- additional CRLs for use during verification.
- * Documentation improvements
- - Removed documentation of no longer existing API.
- - Unified the description of the obsolete ENGINE parameter that
- needs to remain in many functions and should always be NULL.
- * Testing and proactive security
- - Switched the remaining tests to new certs.
- * Compatibility changes
- - Protocol parsing in libtls was changed. The unsupported TLSv1.1
- and TLSv1.0 protocols are ignored and no longer enable or disable
- TLSv1.2 in surprising ways.
- - The dangerous EVP_PKEY*_check(3) family of functions was removed.
- The openssl(1) pkey and pkeyparam commands no longer support the
- -check and -pubcheck flags.
- - The one-step hashing functions, MD4(), MD5(), RIPEMD160(), SHA1(),
- all SHA-2, and HMAC() no longer support returning a static buffer.
- Callers must pass in a correctly sized buffer.
- - Support for Whirlpool was removed. Applications still using this
- should honor OPENSSL_NO_WHIRLPOOL.
- - Removed workaround for F5 middle boxes.
- - Removed the useless pem2.h, a public header that was added since
- it was too hard to add a single prototype to one file.
- - Removed conf_api.h and the public API therein.
- - Removed ssl2.h, ssl23.h and ui_compat.h.
- - Numerous conf and attribute functions were removed. Some unused
- types were removed, others were made opaque.
- - Removed the deprecated HMAC_Init() function.
- - Removed OPENSSL_load_builtin_modules().
- - Removed X509_REQ_{get,set}_extension_nids().
- - X509_check_trust() and was removed, X509_VAL was made opaque.
- - Only specified versions can be set on certs, CRLs and CSRs.
- - Removed unused PEM_USER and PEM_CTX types from pem.h.
- - Removed typdefs for COMP_CTX, COMP_METHOD, X509_CRL_METHOD, STORE,
- STORE_METHOD, and SSL_AEAD_CTX.
- - i2d_ASN1_OBJECT() now returns -1 on error like most other i2d_*.
- - SPKAC support was removed from openssl(1).
- - Added TLS1-PRF support to the EVP interface.
- - Support for attributes in EVP_PKEYs was removed.
- - The X509at_* API is no longer public.
- - SSL_CTX_set1_cert_store() and SSL_CIPHER_get_handshake_digest()
- were added to libssl.
- - The completely broken UI_UTIL password API was removed.
- - The OpenSSL pkcs12 command and PKCS12_create() no longer support
- setting the Microsoft-specific Local Key Set and Cryptographic
- Service Provider attributes.
- * Bug fixes
- - Made ASN1_TIME_set_string() and ASN1_TIME_set_string_X509() match
- their documentation. They always set an RFC 5280 conformant time.
- - Improved standards compliance for supported groups and key shares
- extensions:
- - Duplicate key shares are disallowed.
- - Duplicate supported groups are disallowed.
- - Key shares must be sent in the order of supported groups.
- - Key shares will only be selected if they match the most
- preferred supported group by client preference order.
- - Fixed signed integer overflow in bnrand().
- - Prevent negative zero from being created via BN_clear_bit() and
- BN_mask_bits(). Avoids a one byte overread in BN_bn2mpi().
- - Add guard to avoid contracting the number linear hash buckets
- to zero, which could lead to a crash due to accessing a zero
- sized allocation.
- - Fixed i2d_ASN1_OBJECT() with an output buffer pointing to NULL.
- - Implemented RSA key exchange in constant time. This is done by
- decrypting with RSA_NO_PADDING and checking the padding in libssl
- in constant time. This is possible because the pre-master secret
- is of known length based on the size of the RSA key.
- - Rewrote SSL_select_next_proto() using CBS, also fixing a buffer
- overread that wasn't reachable when used as intended from an
- ALPN callback.
- - Avoid pushing a spurious error onto the error stack in
- ssl_sigalg_select().
- - Made fatal alerts fatal in QUIC.
-
-3.9.0 - Development release
-
- * Portable changes
- - libcrypto no longer exports compat symbols in cmake builds.
- - Most compatibility symbols are prefixed with libressl_ to avoid
- symbol clashes in static links.
- - Fixed various warnings on Windows.
- - Removed assert pop-ups with Windows debug builds.
- - Fixed crashes and hangs in Windows ARM64 builds.
- - Improved control-flow enforcement (CET) support.
- * Internal improvements
- - Converted uses of OBJ_bsearch_() to standard bsearch().
- - Greatly simplified by_file_ctrl().
- - Simplified and cleaned up the OBJ_ API.
- - Cleaned up the EVP_Cipher{Init,Update,Final}() implementations.
- - Removed unused function pointers from X.509 stores and contexts.
- - A lot of cleanup and reorganization in EVP.
- - Removed all remaining ENGINE tentacles.
- - Simplified internals of X509_TRUST handling.
- - Made deletion from a lhash doall callback safe.
- - Rewrote BIO_dump*(3) internals to be less bad.
- * Documentation improvements
- - ENGINE documentation was updated to reflect reality.
- - Made EVP API documentation more accurate and less incoherent.
- - Call out some shortcomings of the EC_KEY_set_* API explicitly.
- * Testing and proactive security
- - Bug fixes and simplifications in the Wycheproof tests.
- * Compatibility changes
- - Added ChaCha20 and chacha20 aliases for ChaCha.
- - SSL_library_init() now has the same effect as OPENSSL_init_ssl().
- - EVP_add_{cipher,digest}() were removed. From the OBJ_NAME API,
- only OBJ_NAME_do_all*() remain. In particular, it is no longer
- possible to add aliases for ciphers and digests.
- - The thread unsafe global tables are no longer supported. It is no
- longer possible to add aliases for ciphers and digests, custom ASN.1
- strings table entries, ASN.1 methods, PKEY methods, digest methods,
- CRL methods, purpose and trust identifiers, or X.509 extensions.
- - Removed the _cb() and _fp() versions of BIO_dump{,_indent}().
- - BIO_set() was removed.
- - BIO_{sn,v,vsn}printf() were removed.
- - Turn the long dysfunctional openssl(1) s_client -pause into a noop.
- - openssl(1) x509 now supports -new -force_pubkey, -multivalue-rdn,
- -set_issuer, -set_subject, and -utf8.
- - Support ECDSA with SHA-3 signature algorithms.
- - Support HMAC with truncated SHA-2 and SHA-3 as PBE PRF.
- - GOST and STREEBOG support was removed.
- - CRYPTO_THREADID, _LHASH, _STACK, X509_PURPOSE are now opaque,
- X509_CERT_AUX and X509_TRUST were removed from the public API.
- - ASN1_STRING_TABLE_get() and X509_PURPOSE_get0*() now return const
- pointers.
- - EVP_{CIPHER,MD}_CTX_init()'s signatures and semantics now match
- OpenSSL's behavior.
- - sk_find_ex() and OBJ_bsearch_() were removed.
- - CRYPTO_malloc() was fixed to use size_t argument. CRYPTO_malloc()
- and CRYPTO_free() now accept file and line arguments.
- - A lot of decrepit CRYPTO memory API was removed.
- * Bug fixes
- - Fixed aliasing issues in BN_mod_exp_simple() and BN_mod_exp_recp().
- - Fixed numerous misuses of X509_ALGOR_set0() resulting in leaks and
- potentially incorrect encodings.
- - Fixed potential double free in X509v3_asid_add_id_or_range().
- - Stopped using ASN1_time_parse() outside of libcrypto.
- - Prepared OPENSSL_gmtime() and OPENSSL_timegm() as public API
- wrappers of internal functions compatible with BoringSSL API.
- - Removed print_bin() to avoid overwriting the stack with 5 bytes
- of ' ' when ECPK parameters are printed with large indentation.
- - Avoid a NULL dereference after memory allocation failure during TLS
- version downgrade.
- - Fixed various bugs in CMAC internals.
- - Fixed 4-byte overreads in GHASH assembly on amd64 and i386.
- - Fixed various NULL dereferences in PKCS #12 code due to mishandling
- of OPTIONAL content in PKCS #7 ContentInfo.
- - Aligned SSL_shutdown() behavior in TLSv1.3 with the legacy stack.
- - Fixed the new X.509 verifier to find trust anchors in the trusted
- stack.
- - Made in-place decryption work for EVP_chacha20_poly1305().
-
-3.8.3 - Stable release
-
- * Portable changes
- - Removed assert pop-ups with Windows debug builds.
- - Fixed crashes and hangs in Windows ARM64 builds.
- - Improved control-flow enforcement (CET) support.
-
-3.8.2 - Stable release
-
- * Portable changes
- - Fixed processor detection for CMake targets.
- Thanks to @jiegec from github.
- - Enabled building oscpcheck with MSVC.
- Thanks to @FtZPetruska from github.
- - Improve CMake package detection and installation.
- Thanks to @mark-groundctl from github.
- - Fixed assembly optimizations on x64 Windows targets.
- - Allow disabling warnings about WINCRYPT overrides.
- - Use system arc4random on FreeBSD 12 and newer.
- * Documentation improvements
- - Documented the RFC 3779 API.
- * Compatibility changes
- - Restrict the RFC 3779 code to IPv4 and IPv6. It was not written
- to be able to deal with anything else.
- - Fixed EVP_CIPHER_CTX_iv_length() to return what was set with
- EVP_CTRL_AEAD_SET_IVLEN or one of its aliases.
- * Bug fixes
- - Fixed EVP_PKEY_get{0,1}_RSA for RSA-PSS.
- - Plug a potential memory leak in ASN1_TIME_normalize().
- - Avoid memory leak in EVP_CipherInit().
- - Redirect EVP_PKEY_get1_* through their get0 siblings.
- - Fixed a use of uninitialized in i2r_IPAddrBlocks().
- - Rewrote CMS_SignerInfo_{sign,verify}().
- - Further cleanup and refactoring in the EC code.
- - Allow IP addresses to be specified in a URI.
- - Fixed a copy-paste error in ASN1_TIME_compare() that could lead
- to two UTCTimes or two GeneralizedTimes incorrectly being compared
- as equal.
-
-3.8.1 - Development release
-
- * Portable changes
- - Applications bundled as part of the LibreSSL package internally,
- nc(1) and openssl(1), now are linked statically if static libraries
- are built.
- - Internal compatibility function symbols are no longer exported from
- libcrypto. Instead, the libcompat library is linked to libcrypto,
- libssl, and libtls separately. This increases size a little, but
- ensures that the libraries are not exporting symbols to programs
- unintentionally.
- - Selective removal of CET implementation on platforms where it is
- not supported (macOS).
- - Integrated four more tests.
- - Added Windows ARM64 architecture to tested platforms.
- - Removed Solaris 10 support, fixed Solaris 11.
- - libtls no longer links statically to libcrypto / libssl unless
- '--enable-libtls-only' is specified at configure time.
- - Improved Windows compatibility library, namely handling of files vs
- sockets, correcting an exception when operating on a closed socket.
- - CMake builds no longer hardcode '-O2' into the compiler flags, instead
- using flags from the CMake build type instead.
- - Set the CMake default build type to 'Release'. This can be overridden
- during configuration.
- - Fixed broken ASM support with MinGW builds.
- * Internal improvements
- - Fixed alignment handling in SHA-512.
- - Moved the verified_chain to the correct internal struct.
- - Improved checks for commonName in libtls.
- - Fixed error check for X509_get_ext_d2i() failure in libtls.
- - Improved BIGNUM internals and performance.
- - Significantly improved Montgomery multiplication performance.
- - Initial cleanup passes for SHA-256 internals.
- - Converted more libcrypto internals API using CBB and CBS.
- - Removed code guarded by #ifdef ZLIB.
- - Changed ASN1_item_sign_ctx() and ASN1_item_verify() to work with
- Ed25519 and fixed a few bugs in there.
- - Fixed various issues with EVP_PKEY_CTX_{new,dup}().
- - Improved X.509 certificate version checks.
- - Cleaned up handling of elliptic curve cofactors.
- - Made BN_num_bits() independent of bn->top.
- - Rewrote and simplified bn_sqr().
- - Removed EC_GROUP precomp machinery.
- - Ensure no X.509v3 extensions appear more than once in certificates.
- - Cleaned up various ECDH, ECDSA and EC internals.
- - Replaced ASN1_bn_print with a cleaner internal implementation.
- - Simplified ASN1_item_sign_ctx().
- - Rewrote OBJ_find_sigid_algs() and OBJ_find_sigid_by_algs().
- - Various improvements in the 'simple' EC code.
- - Fix OPENSSL_cpuid_setup() invocations on arm/aarch64.
- - Reduced the dependency of hash implementations on many layers of
- macros. This results in significant speedups since modern compilers
- are now less confused.
- - Significantly simplified the BN_BLINDING internals used in RSA.
- * New features
- * Compatibility changes
- - X509_NAME_get_text_by_{NID,OBJ}() now only succeed if they contain
- valid UTF-8 without embedded NUL.
- - Moved libtls from ECDSA_METHOD to EC_KEY_METHOD.
- - Removed support for ECDH_METHOD and ECDSA_METHOD.
- - BN_is_prime{,_fasttest}_ex() refuse to check numbers larger than
- 32 kbits for primality. This mitigates various DoS vectors.
- - Comp was removed.
- - Dynamic loading of conf modules is no longer supported.
- - DSO was removed and OPENSSL_NO_DSO is defined.
- - ENGINE support was removed and OPENSSL_NO_ENGINE is set. In spite
- of this, some stub functions are provided to avoid patching some
- applications that do not honor OPENSSL_NO_ENGINE.
- - It is no longer possible to make the library use your own error
- stack or ex_data implementation.
- * Bug fixes
- - Fixed aliasing issue in BN_mod_inverse().
- - Made CRYPTO_get_ex_new_index() not return 0 to allow applications
- to use *_{get,set}_app_data() and *_{get,set}_ex_data() alongside
- each other.
- - Made EVP_PKEY_set1_hkdf_key() fail on a NULL key.
- - Plugged leaks in BIO_chain_dup().
- - Fixed numerous leaks and other minor bugs in RSA, DH, DSA and EC
- ASN.1 methods. Unified the coding style.
- - On socket errors in the poll loop, netcat could issue system calls
- on invalidated file descriptors.
- * Documentation improvements
- - Made it very explicit that the verify callback should not be used.
- - Called out that the CRL lastUpdate is standardized as thisUpdate.
- * Testing and Proactive Security
- - As always, new test coverage is added as bugs are fixed and subsystems
- are cleaned up.
- * Security fixes
- - Disabled TLSv1.0 and TLSv1.1 in libssl so that they may no longer
- be selected for use.
-
-3.8.0 - Development release
-
- * Portable changes
- - Extended the endian.h compat header with hto* and *toh macros.
- - Adapted more tests to the portable framework.
- - Internal tools are now statically linked.
- * Internal improvements
- - Improved sieve of Eratosthenes script used for generating a table
- of small primes.
- - Started cleaning up and rewriting SHA internals.
- - Replace internal use of BN_copy() with bn_copy() for consistency.
- - Rewrote and improved BN_exp() and BN_copy().
- - Add branch target information (BTI) support to arm64 assembly.
- - Replaced BN_mod_sqrt() with a new implementation.
- - Removed incomplete and dangerous BN_RECURSION code.
- - Added endbr64 instructions to amd64 assembly.
- - Imported RFC 5280 policy checking code from BoringSSL and used it
- to replace the old exponential time code.
- - Converted more of libcrypto to use CBB/CBS.
- - Cleaned up and simplified the code dealing with builtin curves.
- * New features
- - Added support for truncated SHA-2 and for SHA-3.
- - The BPSW primality test performs additional Miller-Rabin rounds
- with random bases to reduce the likelihood of composites passing.
- - Allow testing of ciphers and digests using badly aligned buffers
- in openssl speed.
- - Added a workaround for a poorly thought-out change in OpenSSL 3 that
- broke privilege separation support in libtls.
- * Compatibility changes
- - Support for GF2m was removed: BIGNUM no longer supports binary extension
- field arithmetic and all binary elliptic builtin curves were removed.
- - Removed dangerous, "fast" NIST prime and elliptic curve implementations.
- In particular, EC_GFp_nist_method() is no longer available.
- - Removed most public symbols that were deprecated in OpenSSL 0.9.8.
- - Removed the public X9.31 API (RSA_X931_PADDING is still available).
- - Removed Cipher Text Stealing mode.
- - Removed SXNET and NETSCAPE_CERT_SEQUENCE support including the
- openssl(1) nseq command.
- - Dropped proxy certificate (RFC 3820) support.
- - The POLICY_TREE and its related structures and API were removed.
- - The explicitText user notice uses UTF8String instead of VisibleString
- to reduce the risk of emitting certificates with invalid DER-encoding.
- - Initial fixes for RSA-PSS support to make the TLSv1.3 stack more
- compliant with RFC 8446.
- * Bug fixes
- - Correctly handle negative input to various BIGNUM functions.
- - Ensure ERR_load_ERR_strings() does not set errno unexpectedly.
- - Fix error checking of i2d_ECDSA_SIG() in ossl_ecdsa_sign().
- - Fixed detection of extended operations (XOP) on AMD hardware.
- - Ensure Montgomery exponentiation is used for the initial RSA blinding.
- - Policy is always checked in X509 validation. Critical policy extensions
- are no longer silently ignored.
- - Fixed error handling in tls_check_common_name().
- - Add missing pointer invalidation in SSL_free().
- - Fixed X509err() and X509V3err() and their internal versions.
- - Ensure that OBJ_obj2txt() always returns a C string again.
- - In X509_VERIFY_PARAM_inherit() copy hostflags independently of the
- host list.
- * Documentation improvements
- - Improved documentation of BIO_ctrl(3), BIO_set_info_callback(3),
- BIO_get_info_callback(3), BIO_method_type(3), and BIO_method_name(3).
- - Marked BIO_CB_return(), BIO_cb_pre(), and BIO_cb_post() as intentionally
- undocumented.
- * Testing and Proactive Security
- - Significantly improved test coverage of BN_mod_sqrt() and GCD.
- - As always, new test coverage is added as bugs are fixed and subsystems
- are cleaned up.
-
-3.7.3 - Bug and reliability fixes
-
- * Bug fix
- - Hostflags in the verify parameters would not propagate from an
- SSL_CTX to newly created SSL.
- * Reliability fix
- - A double free or use after free could occur after SSL_clear(3).
-
-3.7.2 - Stable release
-
- * Portable changes
- - Moved official Github project to https://github.com/libressl/.
- - Build support for Apple Silicon.
- - Installed opensslconf.h is now architecture-specific.
- - Removed internal defines from opensslconf.h.
- - Support reproducible builds on tagged commits in main branch.
-
-3.7.1 - Development release
-
- * Internal improvements
- - Initial overhaul of the BIGNUM code:
- - Added a new framework that allows architecture-dependent
- replacement implementations for bignum primitives.
- - Imported various s2n-bignum's constant time assembly primitives
- and switched amd64 to them.
- - Lots of cleanup, simplification and bug fixes.
- - Changed Perl assembly generators to move constants into .rodata,
- allowing code to run with execute-only permissions.
- - Capped the number of iterations in DSA and ECDSA signing (avoiding
- infinite loops), added additional sanity checks to DSA.
- - ASN.1 parsing improvements.
- - Made UI_destroy_method() NULL safe.
- - Various improvements to nc(1).
- - Always clear EC groups and points on free.
- - Cleanup and improvements in EC code.
- - Various openssl(1) improvements.
- * Bug fixes
- - Fixed a memory leak, a double free and various other issues in
- BIO_new_NDEF().
- - Fixed various crashes in the openssl(1) testing utility.
- - Do not check policies by default in the new X.509 verifier.
- - Added missing error checking in PKCS7.
- - Call CRYPTO_cleanup_all_ex_data() from OPENSSL_cleanup().
- * New features
- - Added UI_null()
- - Added X509_STORE_*check_issued()
- - Added X509_CRL_get0_tbs_sigalg() and X509_get0_uids() accessors.
- - Added EVP_CIPHER_meth_*() setter API.
- * Documentation improvements
- - Marked BIO_s_log(3) BIO_nread0(3), BIO_nread(3), BIO_nwrite0(3), BIO_nwrite(3),
- BIO_dump_cb(3) and BIO_dump_indent_cb(3) as intentionally undocumented.
- - Document BIO_number_read(3), BIO_number_written(3),
- BIO_set_retry_read(3), BIO_set_retry_write(3),
- BIO_set_retry_special(3), BIO_clear_retry_flags(3),
- BIO_get_retry_flags(3), BIO_dup_chain(3), BIO_set_flags(3),
- BIO_clear_flags(3), BIO_test_flags(3), BIO_get_flags(3).
- BIO_callback_fn_ex(3), BIO_set_callback_ex(3), BIO_get_callback_ex(3),
- BIO_callback_fn(3), and the BIO_FLAGS_* constants
- - Correct the prototypes of BIO_get_conn_ip(3) and BIO_get_conn_int_port(3).
- - Document ED25519_keypair(3), ED25519_sign(3), and ED25519_verify(3).
- - Document EVP_PKEY_new_raw_private_key(3),
- EVP_PKEY_new_raw_public_key(3), EVP_PKEY_get_raw_private_key(3), and
- EVP_PKEY_get_raw_public_key(3).
- - Document ASN1_buf_print(3).
- - Document DH_get0_*, DSA_get0_*, ECDSA_SIG_get0_{r,s}() and RSA_get0_*.
- - Merged documentation of UI_null() from OpenSSL 1.1
- - Various spelling and other documentation improvements.
- * Testing and Proactive Security
- - As always, new test coverage is added as bugs are fixed and subsystems
- are cleaned up.
- - New Wycheproof tests added.
- - OpenSSL 3.0 Interop tests added.
- - Many old tests rewritten, cleaned up and extended.
- * Security fixes
- - A malicious certificate revocation list or timestamp response token
- would allow an attacker to read arbitrary memory.
-
-3.7.0 - Development release
-
- * Internal improvements
- - Remove dependency on system timegm() and gmtime() by replacing
- traditional Julian date conversion with POSIX epoch-seconds date
- conversion from BoringSSL.
- - Clean old and unused BN code dealing with primes.
- - Start rewriting name constraints code using CBS.
- - Remove support for the HMAC PRIVATE KEY.
- - Rework DSA signing and verifying internals.
- - First few passes on cleaning up the BN code.
- - Internal headers coming from OpenSSL are all called *_local.h now.
- - Rewrite TLSv1.2 key exporter.
- - Cleaned up and refactored various aspects of the legacy TLS stack.
- * Compatibility changes
- - BIO_read() and BIO_write() now behave more closely to OpenSSL 3 in
- various corner cases. More work is needed here.
- * Bug fixes
- - Add EVP_chacha20_poly1305() to the list of all ciphers.
- - Fix potential leaks of EVP_PKEY in various printing functions
- - Fix potential leak in OBJ_NAME_add().
- - Avoid signed overflow in i2c_ASN1_BIT_STRING().
- - Clean up EVP_PKEY_ASN1_METHOD related tables and code.
- - Fix long standing bugs BN_GF2m_poly2arr() and BN_GF2m_mod().
- - Fix segfaults in BN_{dec,hex}2bn().
- - Fix NULL dereference in x509_constraints_uri_host() reachable only
- in the process of generating certificates.
- - Fixed a variety of memory corruption issues in BIO chains coming
- from poor old and new API: BIO_push(), BIO_pop(), BIO_set_next().
- - Avoid potential divide by zero in BIO_dump_indent_cb()
- * Documentation improvements
- - Numerous improvements and additions for ASN.1, BIO, BN, and X.509.
- - The BN documentation is now considered to be complete.
- * Testing and Proactive Security
- - As always, new test coverage is added as bugs are fixed and
- subsystems are cleaned up.
- - Many old tests rewritten, cleaned up and extended.
- * New features
- - Added Ed25519 support both as a primitive and via OpenSSL's EVP
- interfaces.
- - X25519 is now also supported via EVP.
- - The OpenSSL 1.1 raw public and private key API is available with
- support for EVP_PKEY_ED25519, EVP_PKEY_HMAC and EVP_PKEY_X25519.
- Poly1305 is not currently supported via this interface.
-
-3.6.3 - Bug and reliability fixes
-
- * Bug fix
- - Hostflags in the verify parameters would not propagate from an
- SSL_CTX to newly created SSL.
- * Reliability fix
- - A double free or use after free could occur after SSL_clear(3).
-
-3.6.2 - Security release
-
- * Security fix
- - A malicious certificate revocation list or timestamp response token
- would allow an attacker to read arbitrary memory.
-
-3.6.1 - Stable release
-
- * Bug fixes
- - Custom verification callbacks could cause the X.509 verifier to
- fail to store errors resulting from leaf certificate verification.
- Reported by Ilya Shipitsin.
- - Unbreak ASN.1 indefinite length encoding.
- Reported by Niklas Hallqvist.
-
-3.6.0 - Development release
-
- * Internal improvements
- - Avoid expensive RFC 3779 checks during cert verification.
- - The templated ASN.1 decoder has been cleaned up, refactored,
- modernized with parts rewritten using CBB and CBS.
- - The ASN.1 time parser has been rewritten.
- - Rewrite and fix ASN1_STRING_to_UTF8().
- - Use asn1_abs_set_unused_bits() rather than inlining it.
- - Simplify ec_asn1_group2curve().
- - First pass at a clean up of ASN1_item_sign_ctx()
- - ssl_txt.c was cleaned up.
- - Internal function arguments and struct member have been changed
- to size_t.
- - Lots of missing error checks of EVP API were added.
- - Clean up and clarify BN_kronecker().
- - Simplify ASN1_INTEGER_cmp()
- - Rewrite ASN1_INTEGER_{get,set}() using CBS and CBB and reuse
- the ASN1_INTEGER functions for ASN1_ENUMERATED.
- - Use ASN1_INTEGER to parse and build {Z,}LONG_it
- - Refactored and cleaned up group (elliptic curve) handling in
- t1_lib.c.
- - Simplify certificate list handling code in the legacy server.
- - Make CBB_finish() fail if *out_data is not NULL.
- - Remove tls_buffer_set_data() and remove/revise callers.
- - Rewrite SSL{_CTX,}_set_alpn_protos() using CBS.
- - Simplify tlsext_supported_groups_server_parse().
- - Remove redundant length checks in tlsext parse functions.
- - Simplify tls13_server_encrypted_extensions_recv().
- - Add read and write support to tls_buffer.
- - Convert TLS transcript from BUF_MEM to tls_buffer.
- - Clear key on exit in PKCS12_gen_mac().
- - Minor fixes in PKCS12_parse().
- - Provide and use a primitive clear function for BIGNUM_it.
- - Use ASN1_INTEGER to encode/decode BIGNUM_it.
- - Add stack frames to AES-NI x86_64 assembly.
- - Use named initialisers for BIGNUMs.
- - Tidy up some of BN_nist_mod_*.
- - Expand BLOCK_CIPHER_* and related macros.
- - Avoid shadowing the cbs function parameter in
- tlsext_alpn_server_parse()
- - Deduplicate peer certificate chain processing code.
- - Make it possible to signal an error from an i2c_* function.
- - Rewrite i2c_ASN1_INTEGER() using CBB/CBS.
- - Remove UINT32_MAX limitation on ChaCha() and CRYPTO_chacha_20().
- - Remove bogus length checks from EVP_aead_chacha20_poly1305().
- - Reworked DSA_size() and ECDSA_size().
- - Stop using CBIGNUM_it internal to libcrypto.
- - Provide c2i_ASN1_ENUMERATED_cbs() and call it from
- asn1_c2i_primitive().
- - Ensure ASN.1 types are appropriately encoded.
- - Avoid recycling ASN1_STRINGs when decoding ASN.1.
- - Tidy up asn1_c2i_primitive() slightly.
- - Mechanically expand IMPLEMENT_BLOCK_CIPHER, IMPLEMENT_CFBR,
- BLOCK_CIPHER and the looney M_do_cipher macros.
- - Use correct length for EVP CFB mode ciphers.
- - Provide a version of ssl_msg_callback() that takes a CBS.
- - Use CBS to parse TLS alerts in the legacy stack.
- - Increment the input and output position for EVP AES CFB1.
- - Ensure there is no trailing data for a CCS received by the
- TLSv1.3 stack.
- - Use CBS when procesing a CCS message in the legacy stack.
- - Be stricter with middlebox compatibility mode in the TLSv1.3
- server.
- * Compatibility changes
- - The ASN.1 time parser has been refactored and rewritten using CBS.
- It has been made stricter in that it now enforces the rules from
- RFC 5280.
- - ASN1_AFLG_BROKEN was removed.
- - Error check tls_session_secret_cb() like OpenSSL.
- - Added ASN1_INTEGER_{get,set}_{u,}int64()
- - Move leaf certificate checks to the last thing after chain
- validation.
- - Added -s option to openssl(1) ciphers that only shows the ciphers
- supported by the specified protocol.
- - Use TLS_client_method() instead of TLSv1_client_method() in
- the openssl(1) ciphers command.
- - Validate the protocols in SSL{_CTX,}_set_alpn_protos().
- - Made TS and PKCS12 opaque.
- - Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OF.
- - Align PKCS12_key_gen_uni() with OpenSSL
- - Various PKCS12 and TS accessors were added. In particular, the
- TS_RESP_CTX_set_time_cb() function was added back.
- - Allow a NULL header in PEM_write{,_bio}()
- - Allow empty attribute sets in CSRs.
- - Adjust signatures of BIO_ctrl functions.
- - Provide additional defines for EVP AEAD.
- - Provide OPENSSL_cleanup().
- - Make BIO_info_cb() identical to bio_info_cb().
- * Bug fixes
- - Avoid use of uninitialized in BN_mod_exp_recp().
- - Fix X509_get_extension_flags() by ensuring that EXFLAG_INVALID is
- set on X509_get_purpose() failure.
- - Fix HMAC() with NULL key.
- - Add ERR_load_{COMP,CT,KDF}_strings() to ERR_load_crypto_strings().
- - Avoid strict aliasing violations in BN_nist_mod_*().
- - Do not return X509_V_ERR_UNSPECIFIED from X509_check_ca().
- No return value of X509_check_ca() indicates failure. Application
- code should therefore issue a checked call to X509_check_purpose()
- before calling X509_check_ca().
- - Rewrite and fix X509v3_asid_subset() to avoid segfaults on some
- valid input.
- - Call the ASN1_OP_D2I_PRE callback after ASN1_item_ex_new().
- - Fix d2i_ASN1_OBJECT to advance the *der_in pointer correctly.
- - Avoid use of uninitialized in ASN1_STRING_to_UTF8().
- - Do not pass uninitialized pointer to ASN1_STRING_to_UTF8().
- - Do not refuse valid IPv6 addresses in nc(1)'s HTTP CONNECT proxy.
- - Do not reject primes in trial divisions.
- - Error out on negative shifts in BN_{r,l}shift() instead of
- accessing arrays out of bounds.
- - Fix URI name constraints, allow for URI's with no host part.
- - Fix the legacy verifier callback behaviour for untrusted certs.
- - Correct serfver-side handling of TLSv1.3 key updates.
- - Plug leak in PKCS12_setup_mac().
- - Plug leak in X509V3_add1_i2d().
- - Only print X.509 versions we know about.
- - Avoid signed integer overflow due to unary negation
- - Initialize readbytes in BIO_gets().
- - Plug memory leak in CMS_add_simple_smimecap().
- - Plug memory leak in X509_REQ_print_ex().
- - Check HMAC() return value to avoid a later use of uninitialized.
- - Avoid potential NULL dereference in ssl_set_pkey().
- - Check return values in ssl_print_tmp_key().
- - Switch loop bounds from size_t to int in check_hosts().
- - Avoid division by zero if no connection was made in s_time.c.
- - Check sk_SSL_CIPHER_push() return value
- - Avoid out-of-bounds read in ssl_cipher_process_rulestr().
- - Use LONG_MAX as the limit for ciphers with long based APIs.
- * New features
- - EVP API for HKDF ported from OpenSSL and subsequently cleaned up.
- - The security level API (SSL_{,CTX}_{get,set}_security_level()) is
- now available. Callbacks and ex_data are not supported. Sane
- software will not be using this.
- - Experimental support for the BoringSSL QUIC API.
- - Add initial support for TS ESSCertIDv2 verification.
- - LibreSSL now uses the Baillie-PSW primality test instead of
- Miller-Rabin .
-
-3.5.3 - Reliability fix
-
- * Fix d2i_ASN1_OBJECT(). A confusion of two CBS resulted in advancing
- the passed *der_in pointer incorrectly. Thanks to Aram Sargsyan for
- reporting the issue and testing the fix.
-
-3.5.2 - Stable release
-
- * Bug fixes
- - Avoid single byte overread in asn1_parse2().
- - Allow name constraints with a leading dot. From Alex Wilson.
- - Relax a check in x509_constraints_dirname() to allow prefixes.
- From Alex Wilson.
- - Fix NULL dereferences in openssl(1) cms option parsing.
- - Do not zero the computed cofactor on ec_guess_cofactor() success.
- - Bound cofactor in EC_GROUP_set_generator() to reduce the number of
- bogus groups that can be described with nonsensical parameters.
- - Avoid various potential segfaults in EVP_PKEY_CTX_free() in low
- memory conditions. Reported for HMAC by Masaru Masuda.
- - Plug leak in ASN1_TIME_adj_internal().
- - Avoid infinite loop for custom curves of order 1.
- Issue reported by Hanno Boeck, comments by David Benjamin.
- - Avoid an infinite loop on parsing DSA private keys by validating
- that the provided parameters conform to FIPS 186-4.
- Issue reported by Hanno Boeck, comments by David Benjamin.
- * Compatibility improvements
- - Allow non-standard name constraints of the form @domain.com.
- * Internal improvements
- - Limit OID text conversion to 64 bits per arc.
- - Clean up and simplify memory BIO code.
- - Reduce number of memmove() calls in memory BIOs.
- - Factor out alert handling code in the legacy stack.
- - Add sanity checks on p and q in old_dsa_priv_decode()
- - Cache the SHA-512 hash instead of the SHA-1 for CRLs.
- - Suppress various compiler warnings for old gcc versions.
- - Remove free_cont from asn1_d2i_ex_primitive()/asn1_ex_c2i().
- - Rework ownership handling in x509_constraints_validate().
- - Rework ASN1_STRING_set().
- - Remove const from tls1_transcript_hash_value().
- - Clean up and simplify ssl3_renegotiate{,_check}().
- - Rewrite legacy TLS and DTLS unexpected handshake message handling.
- - Simplify SSL_do_handshake().
- - Rewrite ASCII/text to ASN.1 object conversion.
- - Provide t2i_ASN1_OBJECT_internal() and use it for OBJ_txt2obj().
- - Split armv7 and aarch64 code into separate locations.
- - Rewrote openssl(1) ts to use the new option handling and cleaned
- up the C code.
- - Provide asn1_get_primitive().
- - Convert {c2i,d2i}_ASN1_OBJECT() to CBS.
- - Remove the minimum record length checks from dtls1_read_bytes().
- - Clean up {dtls1,ssl3}_read_bytes().
- - Be more careful with embedded and terminating NULs in the new
- name constraints code.
- - Check EVP_Digest* return codes in openssl(1) ts
- - Various minor code cleanup in openssl(1) pkcs12
- - Use calloc() in pkey_hmac_init().
- - Simplify priv_key handling in d2i_ECPrivateKey().
- * Documentation improvements
- - Update d2i_ASN1_OBJECT(3) documentation to reflect reality after
- refactoring and bug fixes.
- - Fixed numerous minor grammar, spelling, wording, and punctuation
- issues.
-
-3.5.1 - Security release
-
- * A malicious certificate can cause an infinite loop.
- Reported by and fix from Tavis Ormandy and David Benjamin, Google.
-
-3.5.0 - Development release
-
- * New Features
- - The RFC 3779 API was ported from OpenSSL. Many bugs were fixed,
- regression tests were added and the code was cleaned up.
- - Certificate Transparency was ported from OpenSSL. Many internal
- improvements were made, resulting in cleaner and safer code.
- Regress coverage was added. libssl does not yet make use of it.
- * Portable Improvements
- - Fixed various POSIX compliance and other portability issues
- found by the port to the Sortix operating system.
- - Add libmd as platform specific libraries for Solaris.
- Issue reported from (ihsan opencsw org) on libressl ML.
- - Set IA-64 compiler flag only if it is HP-UX with IA-64.
- Suggested from Larkin Nickle (me larbob org) by libressl ML.
- - Enabled and scheduled Coverity scan.
- Contributed by Ilya Shipitsin (chipitsine gmail com> on github.
- * Compatibility Changes
- - Most structs that were previously defined in the following headers
- are now opaque as they are in OpenSSL 1.1:
- bio.h, bn.h, comp.h, dh.h, dsa.h, evp.h, hmac.h, ocsp.h, rsa.h,
- x509.h, x509v3.h, x509_vfy.h
- - Switch TLSv1.3 cipher names from AEAD- to OpenSSL's TLS_
- OpenSSL added the TLSv1.3 ciphersuites with "RFC names" instead
- of using something consistent with the previous naming. Various
- test suites expect these names (instead of checking for the much
- more sensible cipher numbers). The old names are still accepted
- as aliases.
- - Subject alternative names and name constraints are now validated
- when they are added to certificates. Various interoperability
- problems with stacks that validate certificates more strictly
- than OpenSSL can be avoided this way.
- - Attempt to opportunistically use the host name for SNI in s_client
- * Bug fixes
- - In some situations, the verifier would discard the error on an
- unvalidated certificate chain. This would happen when the
- verification callback was in use, instructing the verifier to
- continue unconditionally. This could lead to incorrect decisions
- being made in software.
- - Avoid an infinite loop in SSL_shutdown()
- - Fix another return 0 bug in SSL_shutdown()
- - Handle zero byte reads/writes that trigger handshakes in the
- TLSv1.3 stack
- - A long standing memleak in libtls CRL handling was fixed
- * Internal Improvements
- - Cache the SHA-512 hash instead of the SHA-1 hash and cache
- notBefore and notAfter times when X.509 certificates are parsed.
- - The X.509 lookup code has been simplified and cleaned up.
- - Fixed numerous issues flagged by coverity and the cryptofuzz
- project
- - Increased the number of Miller-Rabin checks in DH and DSA
- key/parameter generation
- - Started using the bytestring API in libcrypto for cleaner and
- safer code
- - Convert {i2d,d2i}_{,EC_,DSA_,RSA_}PUBKEY{,_bio,_fp}() to templated
- ASN1
- - Convert ASN1_OBJECT_new() to calloc()
- - Convert ASN1_STRING_type_new() to calloc()
- - Rewrite ASN1_STRING_cmp()
- - Use calloc() for X509_CRL_METHOD_new() instead of malloc()
- - Convert ASN1_PCTX_new() to calloc()
- - Replace asn1_tlc_clear and asn1_tlc_clear_nc macros with a
- function
- - Consolidate {d2i,i2d}_{pr,pu}.c
- - Remove handling of a NULL BUF_MEM from asn1_collect()
- - Pull the recursion depth check up to the top of asn1_collect()
- - Inline collect_data() in asn1_collect()
- - Convert asn1_d2i_ex_primitive()/asn1_collect() from BUF_MEM to CBB
- - Clean up d2i_ASN1_BOOLEAN() and i2d_ASN1_BOOLEAN()
- - Consolidate ASN.1 universal tag type data
- - Rewrite ASN.1 identifier/length parsing in CBS
- - Make OBJ_obj2nid() work correctly with NID_undef
- - tlsext_tick_lifetime_hint is now an uint32_t
- - Untangle ssl3_get_message() return values
- - Rename tls13_buffer to tls_buffer
- - Fold DTLS_STATE_INTERNAL into DTLS1_STATE
- - Provide a way to determine our maximum legacy version
- - Mop up enc_read_ctx and read_hash
- - Fold SSL_SESSION_INTERNAL into SSL_SESSION
- - Use ssl_force_want_read in the DTLS code
- - Add record processing limit to DTLS code
- - Add explicit CBS_contains_zero_byte() check in CBS_strdup()
- - Improve SNI hostname validation
- - Ensure SSL_set_tlsext_host_name() is given a valid hostname
- - Fix a strange check in the auto DH codepath
- - Factor out/rewrite DHE key exchange
- - Convert server serialisation of DHE parameters/public key to new
- functions
- - Check DH public key in ssl_kex_peer_public_dhe()
- - Move the minimum DHE key size check into ssl_kex_peer_params_dhe()
- - Clean up and refactor server side DHE key exchange
- - Provide CBS_get_last_u8()
- - Provide CBS_get_u64()
- - Provide CBS_add_u64()
- - Provide various CBS_peek_* functions
- - Use CBS_get_last_u8() to find the content type in TLSv1.3 records
- - unifdef TLS13_USE_LEGACY_CLIENT_AUTH
- - Correct SSL_get_peer_cert_chain() when used with the TLSv1.3 stack
- - Only allow zero length key shares when we know we're doing HRR
- - Pull key share group/length CBB code up from
- tls13_key_share_public()
- - Refactor ssl3_get_server_kex_ecdhe() to separate parsing and
- validation
- - Return 0 on failure from send/get kex functions in the legacy
- stack
- - Rename tls13_key_share to tls_key_share
- - Allocate and free the EVP_AEAD_CTX struct in
- tls13_record_protection
- - Convert legacy TLS client to tls_key_share
- - Convert legacy TLS server to tls_key_share
- - Stop attempting to duplicate the public and private key of dh_tmp
- - Rename dh_tmp to dhe_params
- - Rename CERT to SSL_CERT and CERT_PKEY to SSL_CERT_PKEY
- - Clean up pkey handling in ssl3_get_server_key_exchange()
- - Fix GOST skip certificate verify handling
- - Simplify tlsext_keyshare_server_parse()
- - Plumb decode errors through key share parsing code
- - Simplify SSL_get_peer_certificate()
- - Cleanup/simplify ssl_cert_type()
- - The S3I macro was removed
- - The openssl(1) cms and smime subcommands option handling was
- converted and the C source was cleaned up.
- * Documentation improvements
- - 45 new manual pages, most of which were written from scratch.
- Documentation coverage of ASN.1 and X.509 code has been
- significantly improved.
- * API additions and removals
- - libssl
- API additions
- SSL_get0_verified_chain SSL_peek_ex SSL_read_ex SSL_write_ex
- API stubs for compatibility
- SSL_CTX_get_keylog_callback SSL_CTX_get_num_tickets
- SSL_CTX_set_keylog_callback SSL_CTX_set_num_tickets
- SSL_get_num_tickets SSL_set_num_tickets
- - libcrypto
- added API (some of these were previously available as macros):
- ASIdOrRange_free ASIdOrRange_new ASIdentifierChoice_free
- ASIdentifierChoice_new ASIdentifiers_free ASIdentifiers_new
- ASN1_TIME_diff ASRange_free ASRange_new BIO_get_callback_ex
- BIO_get_init BIO_set_callback_ex BIO_set_next
- BIO_set_retry_reason BN_GENCB_set BN_GENCB_set_old
- BN_abs_is_word BN_get_flags BN_is_negative
- BN_is_odd BN_is_one BN_is_word BN_is_zero BN_set_flags
- BN_to_montgomery BN_with_flags BN_zero_ex CTLOG_STORE_free
- CTLOG_STORE_get0_log_by_id CTLOG_STORE_load_default_file
- CTLOG_STORE_load_file CTLOG_STORE_new CTLOG_free
- CTLOG_get0_log_id CTLOG_get0_name CTLOG_get0_public_key
- CTLOG_new CTLOG_new_from_base64 CT_POLICY_EVAL_CTX_free
- CT_POLICY_EVAL_CTX_get0_cert CT_POLICY_EVAL_CTX_get0_issuer
- CT_POLICY_EVAL_CTX_get0_log_store CT_POLICY_EVAL_CTX_get_time
- CT_POLICY_EVAL_CTX_new CT_POLICY_EVAL_CTX_set1_cert
- CT_POLICY_EVAL_CTX_set1_issuer
- CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE
- CT_POLICY_EVAL_CTX_set_time DH_get0_g DH_get0_p DH_get0_priv_key
- DH_get0_pub_key DH_get0_q DH_get_length DSA_bits DSA_get0_g
- DSA_get0_p DSA_get0_priv_key DSA_get0_pub_key DSA_get0_q
- ECDSA_SIG_get0_r ECDSA_SIG_get0_s EVP_AEAD_CTX_free
- EVP_AEAD_CTX_new EVP_CIPHER_CTX_buf_noconst
- EVP_CIPHER_CTX_get_cipher_data EVP_CIPHER_CTX_set_cipher_data
- EVP_MD_CTX_md_data EVP_MD_CTX_pkey_ctx EVP_MD_CTX_set_pkey_ctx
- EVP_MD_meth_dup EVP_MD_meth_free EVP_MD_meth_new
- EVP_MD_meth_set_app_datasize EVP_MD_meth_set_cleanup
- EVP_MD_meth_set_copy EVP_MD_meth_set_ctrl EVP_MD_meth_set_final
- EVP_MD_meth_set_flags EVP_MD_meth_set_init
- EVP_MD_meth_set_input_blocksize EVP_MD_meth_set_result_size
- EVP_MD_meth_set_update EVP_PKEY_asn1_set_check
- EVP_PKEY_asn1_set_param_check EVP_PKEY_asn1_set_public_check
- EVP_PKEY_check EVP_PKEY_meth_set_check
- EVP_PKEY_meth_set_param_check EVP_PKEY_meth_set_public_check
- EVP_PKEY_param_check EVP_PKEY_public_check FIPS_mode
- FIPS_mode_set IPAddressChoice_free IPAddressChoice_new
- IPAddressFamily_free IPAddressFamily_new IPAddressOrRange_free
- IPAddressOrRange_new IPAddressRange_free IPAddressRange_new
- OBJ_get0_data OBJ_length OCSP_resp_get0_certs OCSP_resp_get0_id
- OCSP_resp_get0_produced_at OCSP_resp_get0_respdata
- OCSP_resp_get0_signature OCSP_resp_get0_signer
- OCSP_resp_get0_tbs_sigalg PEM_write_bio_PrivateKey_traditional
- RSA_get0_d RSA_get0_dmp1 RSA_get0_dmq1 RSA_get0_e RSA_get0_iqmp
- RSA_get0_n RSA_get0_p RSA_get0_pss_params RSA_get0_q
- SCT_LIST_free SCT_LIST_print SCT_LIST_validate SCT_free
- SCT_get0_extensions SCT_get0_log_id SCT_get0_signature
- SCT_get_log_entry_type SCT_get_signature_nid SCT_get_source
- SCT_get_timestamp SCT_get_validation_status SCT_get_version
- SCT_new SCT_new_from_base64 SCT_print SCT_set0_extensions
- SCT_set0_log_id SCT_set0_signature SCT_set1_extensions
- SCT_set1_log_id SCT_set1_signature SCT_set_log_entry_type
- SCT_set_signature_nid SCT_set_source SCT_set_timestamp
- SCT_set_version SCT_validate SCT_validation_status_string
- X509_OBJECT_free X509_OBJECT_new X509_REQ_get0_pubkey
- X509_SIG_get0 X509_SIG_getm X509_STORE_CTX_get_by_subject
- X509_STORE_CTX_get_num_untrusted
- X509_STORE_CTX_get_obj_by_subject X509_STORE_CTX_get_verify
- X509_STORE_CTX_get_verify_cb X509_STORE_CTX_set0_verified_chain
- X509_STORE_CTX_set_current_cert X509_STORE_CTX_set_error_depth
- X509_STORE_CTX_set_verify X509_STORE_get_verify
- X509_STORE_get_verify_cb X509_STORE_set_verify
- X509_get_X509_PUBKEY X509_get_extended_key_usage
- X509_get_extension_flags X509_get_key_usage
- X509v3_addr_add_inherit X509v3_addr_add_prefix
- X509v3_addr_add_range X509v3_addr_canonize X509v3_addr_get_afi
- X509v3_addr_get_range X509v3_addr_inherits
- X509v3_addr_is_canonical X509v3_addr_subset
- X509v3_addr_validate_path X509v3_addr_validate_resource_set
- X509v3_asid_add_id_or_range X509v3_asid_add_inherit
- X509v3_asid_canonize X509v3_asid_inherits
- X509v3_asid_is_canonical X509v3_asid_subset
- X509v3_asid_validate_path X509v3_asid_validate_resource_set
- d2i_ASIdOrRange d2i_ASIdentifierChoice d2i_ASIdentifiers
- d2i_ASRange d2i_IPAddressChoice d2i_IPAddressFamily
- d2i_IPAddressOrRange d2i_IPAddressRange d2i_SCT_LIST
- i2d_ASIdOrRange i2d_ASIdentifierChoice i2d_ASIdentifiers
- i2d_ASRange i2d_IPAddressChoice i2d_IPAddressFamily
- i2d_IPAddressOrRange i2d_IPAddressRange i2d_SCT_LIST
- i2d_re_X509_CRL_tbs i2d_re_X509_REQ_tbs i2d_re_X509_tbs i2o_SCT
- i2o_SCT_LIST o2i_SCT o2i_SCT_LIST
- removed API:
- ASN1_check_infinite_end ASN1_const_check_infinite_end EVP_dss
- EVP_dss1 EVP_ecdsa HMAC_CTX_cleanup HMAC_CTX_init
- NETSCAPE_ENCRYPTED_PKEY_free NETSCAPE_ENCRYPTED_PKEY_new
- NETSCAPE_PKEY_free NETSCAPE_PKEY_new NETSCAPE_X509_free
- NETSCAPE_X509_new OBJ_bsearch_ex_ PEM_SealFinal PEM_SealInit
- PEM_SealUpdate PEM_read_X509_CERT_PAIR
- PEM_read_bio_X509_CERT_PAIR PEM_write_X509_CERT_PAIR
- PEM_write_bio_X509_CERT_PAIR X509_CERT_PAIR_free
- X509_CERT_PAIR_new X509_OBJECT_free_contents asn1_do_adb
- asn1_do_lock asn1_enc_free asn1_enc_init asn1_enc_restore
- asn1_enc_save asn1_ex_c2i asn1_get_choice_selector
- asn1_get_field_ptr asn1_set_choice_selector check_defer
- d2i_ASN1_BOOLEAN d2i_NETSCAPE_ENCRYPTED_PKEY d2i_NETSCAPE_PKEY
- d2i_NETSCAPE_X509 d2i_Netscape_RSA d2i_RSA_NET
- d2i_X509_CERT_PAIR i2d_ASN1_BOOLEAN i2d_NETSCAPE_ENCRYPTED_PKEY
- i2d_NETSCAPE_PKEY i2d_NETSCAPE_X509 i2d_Netscape_RSA i2d_RSA_NET
- i2d_X509_CERT_PAIR name_cmp obj_cleanup_defer
-
-3.4.1 - Stable release
-
- * New Features
- - Added support for OpenSSL 1.1.1 TLSv1.3 APIs.
- - Enabled the new X.509 validator to allow verification of
- modern certificate chains.
- * Portable Improvements
- - Ported continuous integration and test infrastructure to Github
- actions.
- - Added Universal Windows Platform (UWP) build support.
- - Fixed mingw-w64 builds on newer versions with missing SSP support.
- - Added non-executable stack annotations for CMake builds.
- * API and Documentation Enhancements
- - Added the following APIs from OpenSSL
- BN_bn2binpad BN_bn2lebinpad BN_lebin2bn EC_GROUP_get_curve
- EC_GROUP_order_bits EC_GROUP_set_curve
- EC_POINT_get_affine_coordinates
- EC_POINT_set_affine_coordinates
- EC_POINT_set_compressed_coordinates EVP_DigestSign
- EVP_DigestVerify SSL_CIPHER_find SSL_CTX_get0_privatekey
- SSL_CTX_get_max_early_data SSL_CTX_get_ssl_method
- SSL_CTX_set_ciphersuites SSL_CTX_set_max_early_data
- SSL_CTX_set_post_handshake_auth SSL_SESSION_get0_cipher
- SSL_SESSION_get_max_early_data SSL_SESSION_is_resumable
- SSL_SESSION_set_max_early_data SSL_get_early_data_status
- SSL_get_max_early_data SSL_read_early_data SSL_set0_rbio
- SSL_set_ciphersuites SSL_set_max_early_data
- SSL_set_post_handshake_auth
- SSL_set_psk_use_session_callback
- SSL_verify_client_post_handshake SSL_write_early_data
- - Added AES-GCM constants from RFC 7714 for SRTP.
- * Compatibility Changes
- - Implement flushing for TLSv1.3 handshakes behavior, needed for Apache.
- - Call the info callback on connect/accept exit in TLSv1.3,
- needed for p5-Net-SSLeay.
- - Default to using named curve parameter encoding from
- pre-OpenSSL 1.1.0, adding OPENSSL_EC_EXPLICIT_CURVE.
- - Do not ignore SSL_TLSEXT_ERR_FATAL from the ALPN callback.
- * Testing and Proactive Security
- - Added additional state machine test coverage.
- - Improved integration test support with ruby/openssl tests.
- - Error codes and callback support in new X.509 validator made
- compatible with p5-Net_SSLeay tests.
- * Internal Improvements
- - Numerous fixes and improvements to the new X.509 validator to
- ensure compatible error codes and callback support compatible
- with the legacy OpenSSL validator.
-
-3.4.0 - Development release
-
- * Add support for OpenSSL 1.1.1 TLSv1.3 APIs.
-
- * Enable new x509 validator.
-
- * More details to come, testing is appreciated.
-
-3.3.5 - Security fix
-
- * A stack overread could occur when checking X.509 name constraints.
- From GoldBinocle on GitHub.
-
- * Enable X509_V_FLAG_TRUSTED_FIRST by default in the legacy verifier.
- This compensates for the expiry of the DST Root X3 certificate.
-
-3.3.4 - Security fix
-
- * In LibreSSL, printing a certificate can result in a crash in
- X509_CERT_AUX_print().
- From Ingo Schwarze
-
- * Ensure GNU-stack is set on ELF platforms when building with CMake to
- enable non-executable stack annotations for the GNU toolchain.
- From Tobias Heider
-
-3.3.3 - Stable release
-
- * This is the first stable release from the 3.3.x series.
- There are no changes from 3.3.2.
-
-3.3.2 - Development release
-
- * This release adds support for DTLSv1.2 and continues the rewrite
- of the record layer for the legacy stack. Numerous bugs and
- interoperability issues were fixed in the new verifier. A few bugs
- and incompatibilities remain, so this release uses the old verifier
- by default. The OpenSSL 1.1 TLSv1.3 API is not yet available.
-
- * Switch finish{,_peer}_md_len from an int to a size_t.
-
- * Make SSL_get{,_peer}_finished() work when used with TLSv1.3.
-
- * Use EVP_MD_MAX_MD_SIZE instead of 2 * EVP_MD_MAX_MD_SIZE as size
- for cert_verify_md[], finish_md[] and peer_finish_md[]. The factor 2
- was a historical artefact.
-
- * Correct the return value type from ERR_peek_error() to a long.
-
- * Avoid use of uninitialized in ASN1_time_parse() which could happen
- on parsing UTCTime if the caller did not initialise the passed
- struct tm.
-
- * Destroy the mutex in a tls_config object on tls_config_free().
-
- * Free alert_data and phh_data in tls13_record_layer_free()
- these could leak if SSL_shutdown() or tls_close() were called
- after closing the underlying socket().
-
- * Free struct members in tls13_record_layer_free() in their natural
- order for reviewability.
-
- * Gracefully handle root certificates being both trusted and
- untrusted.
-
- * Handle X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE in the new
- verifier.
-
- * Use the legacy verifier when building auto chains for TLS.
-
- * Use consistent names in tls13_{client,server}_finished_{recv,send}().
-
- * Add tls13_secret_{init,cleanup}() and use them throughout the
- TLSv1.3 code base.
-
- * Move the read MAC key into the TLSv1.2 record layer.
-
- * Make tls12_record_layer_free() NULL safe.
-
- * Search the intermediates only after searching the root certs in the
- new verifier to avoid problems with the legacy callback.
-
- * Bail out early after finding a single chain in the new verifier, if
- we have been called via the legacy verifier API.
-
- * Set (invalid and likely incomplete) chain on the xsc on chain build
- failure prior to calling the callback. This is required by various
- callers, including auto chain.
-
- * Align SSL_get_shared_ciphers() with OpenSSL. This takes into account
- that it never returned server ciphers, so now it will fail when
- called from the client side.
-
- * Add support for SSL_get_shared_ciphers() with TLSv1.3.
-
- * Split the record protection from the TLSv1.2 record layer.
-
- * Clean up sequence number handling in the new TLSv1.2 record layer.
-
- * Clean up sequence number handling in DTLS.
-
- * Clean up dtls1_reset_seq_numbers().
-
- * Factor out code for explicit IV length, block size and MAC length
- from tls12_record_layer_open_record_protected_cipher().
-
- * Provide record layer overhead for DTLS.
-
- * Provide functions to determine if TLSv1.2 record protection is
- engaged.
-
- * Add code to handle change of cipher state in the new TLSv1.2 record
- layer.
-
- * Mop up now unused dtls1_build_sequence_numbers() function.
-
- * Allow setting a keypair on a tls context without specifying the
- private key, and fake it internally in libtls. This removes the
- need for privsep engines like relayd to use bogus keys.
-
- * Skip the private key check for fake private keys.
-
- * Move the private key setup from tls_configure_ssl_keypair() to a
- helper function with proper error checking.
-
- * Change the internal tls_configure_ssl_keypair() function to
- return -1 instead of 1 on failure.
-
- * Move sequence numbers into the new TLSv1.2 record layer.
-
- * Move AEAD handling into the new TLSv1.2 record layer.
-
- * Remove direct assignment of aead_ctx to avoid a leak.
-
- * Add a number of RPKI OIDs from RFC 6482, 6484, 6493, 8182, 8360,
- draft-ietf-sidrops-rpki-rta, and draft-ietf-opsawg-finding-geofeeds.
-
- * Fail early in legacy exporter if the master secret is not available
- to avoid a segfault if it is called when the handshake is not
- completed.
-
- * Factor out legacy stack version checks.
-
- * Correct handshake MAC/PRF for various TLSv1.2 cipher suites which
- were originally added with the default handshake MAC and PRF rather
- than the SHA256 handshake MAC and PRF.
-
- * Absorb ssl3_get_algorithm2() into ssl_get_handshake_evp_md().
-
- * Use dtls1_record_retrieve_buffered_record() to load buffered
- application data.
-
- * Enforce read ahead with DTLS.
-
- * Remove bogus DTLS checks that disabled ECC and OCSP.
-
- * Sync cert.pem with Mozilla NSS root CAs except "GeoTrust Global CA".
-
- * Only print the certificate file once on verification failure.
-
- * Pull in fix for EVP_CipherUpdate() overflow from OpenSSL.
-
- * Clean up and simplify dtls1_get_cipher().
-
- * Group HelloVerifyRequest decoding and add missing check for trailing
- data.
-
- * Revise HelloVerifyRequest handling for DTLSv1.2.
-
- * Handle DTLS1_2_VERSION in various places.
-
- * Add DTLSv1.2 methods.
-
- * Make SSL{_CTX,}_get_{min,max}_proto_version() return a version of
- zero if the minimum or maximum has been set to zero to match
- OpenSSL's behavior.
-
- * Rename the "truncated" label into "decode_err" and the "f_err"
- label into "fatal_err".
-
- * Factor out and change some of the legacy client version code.
-
- * Simplify version checks in the TLSv1.3 client. Ensure that the
- server announced TLSv1.3 and nothing higher and check that the
- legacy_version is set to TLSv1.2 as required by RFC 8446.
-
- * Fix an off-by-one in x509_verify_set_xsc_chain() to make sure that
- the new validator checks for EXFLAG_CRITICAL in
- x509_vfy_check_chain_extension() for all untrusted certs in the
- chain. Take into account that the root is not necessarily trusted.
-
- * Avoid passing last and depth to x509_verify_cert_error() on ENOMEM.
-
- * Rename depth to num_untrusted.
-
- * Only use TLS versions internally rather than both TLS and DTLS
- versions since the latter are the one's complement of the human
- readable version numbers, which means that newer versions decrease
- in value.
-
- * Fix two bugs in the legacy verifier that resulted from refactoring
- of X509_verify_cert() for the new verifier: a return value was
- incorrectly treated as boolean, making it insufficient to decide
- whether validation should carry on or not.
-
- * Identify DTLS based on the version major value.
-
- * Move handling of cipher/hash based cipher suites into the new record
- layer.
-
- * Add tls12_record_protection_unused() and call it from CCS functions.
-
- * Move key/IV length checks closer to usage sites. Also add explicit
- checks against EVP_CIPHER_{iv,key}_length().
-
- * Replace two handrolled tls12_record_protection_engaged().
-
- * Improve internal version handling: add handshake fields for our
- minimum version, our maximum version and the TLS version negotiated
- during the handshake. Convert most of the internal code to use these
- version fields.
-
- * Guard against future internal use of TLS1_get_{client,}_version()
- macros.
-
- * Remove the internal ssl_downgrade_max_version() function which is no
- longer needed.
-
- * Fix checks for memory caps of constraints names. There are internal
- caps on the number of name constraints and other names, that the new
- name constraints code allocates per cert chain. These limits were
- checked too late, making them only partially effective.
-
- * Use EXFLAG_INVALID to handle out of memory and parse errors in
- x509v3_cache_extensions().
-
- * Add support for DTLSv1.2 version handling.
-
- * Enable DTLSv1.2 support.
-
- * Add DTLSv1.2 support to openssl s_client/s_server.
-
- * Remove no longer needed read ahead workarounds in the s_client and
- s_server.
-
- * Fix a copy-paste error - skid was confused with an akid when
- checking for EXFLAG_INVALID. This broke OCSP validation with
- certain mirrors.
-
- * Make supported protocols and options for DHE params more prominent
- in tls_config_set_protocols.3.
-
- * Avoid a use-after-scope in tls13_cert_add().
-
- * Split TLSv1.3 record protection from record layer.
-
- * Move the TLSv1.3 handshake struct inside the shared handshake
- struct.
-
- * Fully initialize rrec in tls12_record_layer_open_record_protected()
- to avoid confusing some static analyzers.
-
- * Use tls_set_errorx() on OCSP_basic_verify() failure since the latter
- does not set errno.
-
- * Convert openssl(1) x509 to new option handling and do the usual
- clean up that goes along with it.
-
- * Add SSL_HANDSHAKE_TLS12 for TLSv1.2 specific handshake data.
-
- * Rename new_cipher to cipher to align naming with keyblock or other
- parts of the handshake data.
-
- * Avoid mangled output in BIO_debug_callback().
-
- * Fix client initiated renegotiation by replacing use of s->internal-type
- with s->server.
-
- * Move the TLSv1.2 record number increment into the new record layer.
-
- * Move finished and peer finished into the handshake struct.
-
- * Avoid transcript initialization when sending a TLS HelloRequest,
- fixing server initiated renegotiation.
-
- * Remove pointless assignment in SSL_get0_alpn_selected().
-
- * Provide EVP_PKEY_new_CMAC_KEY(3).
-
- * Add missing prototype for d2i_DSAPrivateKey_fp(3) to x509.h.
-
- * Add DTLSv1.2 to openssl(1) s_server and s_client protocol message
- logging.
-
- * Avoid leaking param->name in x509_verify_param_zero().
-
- * Avoid a leak in an error path in openssl(1) x509.
-
- * Add some error checking to openssl(1) x509.
-
- * When sending an alert in TLSv1.3, only set its error code when no
- other error was set previously. Certain clients rely on specific
- SSL_R_ error codes to identify that they are dealing with a self
- signed cert.
-
- * Switch to the legacy verifier for the stable release.
-
- * Provide SSL_use_certificate_chain_file(3).
-
- * Provide SSL_set_hostflags(3) and SSL_get0_peername(3).
-
- * Provide various DTLSv1.2 specific functions and defines.
-
- * Document meaning of '*' in the genrsa output.
-
- * Updated documentation for SSL_get_shared_ciphers(3).
-
- * Add documentation for SSL_get_finished(3).
-
- * Document EVP_PKEY_new_CMAC_key(3)
-
- * Document SSL_use_certificate_chain_file(3).
-
- * Document SSL_set_hostflags(3) and SSL_get0_peername(3).
-
- * Update SSL_get_version.3 manual for DTLSv.1.2 support.
-
- * Added '--enable-libtls-only' build option, which builds and installs a
- statically-linked libtls, skipping libcrypto and libssl. This is useful
- for systems that ship with OpenSSL but wish to also package libtls.
-
-3.3.1 - Security fix
-
- * Malformed ASN.1 in a certificate revocation list or a timestamp
- response token can lead to a NULL pointer dereference.
-
- Bug fixes
-
- * Move point-on-curve check to set_affine_coordinates to avoid
- verifying ECDSA signatures with unchecked public keys.
-
- * Fix SSL_is_server() to behave as documented by re-introducing the
- client-specific methods.
-
- * Avoid undefined behavior due to memcpy(NULL, NULL, 0).
-
- * Mark a few more internal static tables const.
-
-3.3.0 - Development release
-
- * Make openssl(1) s_server ignore -4 and -6 for compatibility with
- OpenSSL.
-
- * Further cleanup of the DTLS record handling.
-
- * Continue the replacement of the TLSv1.2 record layer by
- reimplementing the read side of the TLSv1.2 record handling.
-
- * Replace DTLSv1_enc_data() with TLSv1_1_enc_data().
-
- * Merge d1_{clnt,srvr}.c into ssl_{clnt,srvr}.c.
-
- * When switching from the TLSv1.3 stack to the legacy stack include
- a TLS record header. This is necessary if there is more than one
- handshake message in the TLS plaintext record.
-
- * Set SO_REUSEADDR on the server socket in the openssl(1) ocsp
- command.
-
- * Fix resource handling on error in OCSP_request_add0_id().
-
- * Add const to ssl_ciphers and tls1[23]_sigalgs* to push them into
- .data.rel.ro and .rodata, respectively.
-
- * Add a const qualifier to srtp_known_profiles.
-
- * Simplify TLS method by removing the client and server specific
- methods internally.
-
- * Avoid casting away const in ssl_ctx_make_profiles().
-
- * Make sure there is enough room for stashing the handshake message
- when switching to the legacy TLS stack.
-
- * Avoid explicitly conditioning an assert on DTLS1_VERSION to make
- the assert work for newer DTLS versions.
-
- * Merge SSL_ENC_METHOD into SSL_METHOD_INTERNAL.
-
- * Send a host header with OCSP queries to make openssl(1) ocsp
- work with some widely used OCSP responders.
-
- * Fix a memory leak in the openssl(1) s_client.
-
- * Add a flag to mark DTLS methods as DTLS to have an easy way to
- recognize DTLS methods that avoids inspecting the version number.
-
- * Implement SSL_is_dtls() and use it internally in place of the
- SSL_IS_DTLS macro.
-
- * Unbreak DTLS retransmissions for flights that include a CCS.
-
- * Add ability to ocspcheck(8) to parse a port in the specified
- OCSP URL.
-
- * Refactor and clean up ocspcheck(8) and add regression tests.
-
- * If x509_verify() fails, ensure that the error is set on both
- the x509_verify_ctx() and its store context to make some failures
- visible from SSL_get_verify_result().
-
- * Use the X509_STORE_CTX get_issuer() callback from the new X.509
- verifier to fix hashed certificate directories.
-
- * Only check BIO_should_read() on read and BIO_should_write() on
- write. Previously, BIO_should_write() was also checked after read
- and BIO_should_read() after write which could cause stalls in
- software that uses the same BIO for read and write.
-
- * In openssl(1) verify, also check for error on the store context
- since the return value of X509_verify_cert() is unreliable in
- presence of a callback that returns 1 too often.
-
- * Update getentropy on Windows to use Cryptography Next Generation
- (CNG). wincrypt is deprecated and no longer works with newer Windows
- environments, such as in Windows Store apps.
-
- * Implement auto chain for the TLSv1.3 server since some software
- relies on this.
-
- * Handle additional certificate error cases in the new X.509 verifier.
- Keep track of the errors encountered if a verify callback tells the
- verifier to continue and report them back via the error on the store
- context. This mimics the behavior of the old verifier that would
- persist the first error encountered while building the chain.
-
- * Report specific failures for "self signed certificates" in a way
- compatible with the old verifier since software relies on the
- error code.
-
- * Implement key exporter for TLSv1.3.
-
- * Plug a large memory leak in the new verifier caused by calling
- X509_policy_check() repeatedly.
-
- * Avoid leaking memory in x509_verify_chain_dup().
-
- * Various documentation improvements, particularly around TLS methods.
-
-3.2.3 - Security fix
-
- * Malformed ASN.1 in a certificate revocation list or a timestamp
- response token can lead to a NULL pointer dereference.
-
-3.2.2 - Stable release
-
- * This is the first stable release with the new TLSv1.3
- implementation enabled by default for both client and server. The
- OpenSSL 1.1 TLSv1.3 API is not yet available and will be provided
- in an upcoming release.
-
- * New X509 certificate chain validator that correctly handles
- multiple paths through intermediate certificates. Loosely based on
- Go's X509 validator.
-
- * New name constraints verification implementation which passes the
- bettertls.com certificate validation check suite.
-
- * Improve the handling of BIO_read()/BIO_write() failures in the
- TLSv1.3 stack.
-
- * Start replacing the existing TLSv1.2 record layer.
-
- * Define OPENSSL_NO_SSL_TRACE in opensslfeatures.h.
-
- * Make SSL_CTX_get_ciphers(NULL) return NULL rather than crash.
-
- * Send alert on ssl_get_prev_session() failure.
-
- * Zero out variable on the stack to avoid leaving garbage in the tail
- of short session IDs.
-
- * Move state initialization from SSL_clear() to ssl3_clear() to ensure
- that it gets correctly reinitialized across a SSL_set_ssl_method()
- call.
-
- * Avoid an out-of-bounds write in BN_rand().
-
- * Fix numerous leaks in the UI_dup_* functions. Simplify and tidy up
- the code in ui_lib.c.
-
- * Correctly track selected ALPN length to avoid a potential segmentation
- fault with SSL_get0_alpn_selected() when alpn_selected is NULL.
-
- * Include machine/endian.h gost2814789.c in order to pick up the
- __STRICT_ALIGNMENT define.
-
- * Simplify SSL method lookups.
-
- * Clean up and simplify SSL_get_ciphers(), SSL_set_session(),
- SSL_set_ssl_method() and several internal functions.
-
- * Correctly handle ssl_cert_dup() failure in SSL_set_SSL_CTX().
-
- * Refactor dtls1_new(), dtls1_hm_fragment_new(),
- dtls1_drain_fragments(), dtls1_clear_queues().
-
- * Copy the session ID directly in ssl_get_prev_session() instead of
- handing it through several functions for copying.
-
- * Clean up and refactor ssl_get_prev_session(); simplify
- tls_decrypt_ticket() and tls1_process_ticket() exit paths.
-
- * Avoid memset() before memcpy() in CBS_add_bytes().
-
- * Rewrite X509_INFO_{new,free}() more idiomatically.
-
- * Remove unnecessary zeroing after recallocarray() in
- ASN1_BIT_STRING_set_bit().
-
- * Convert openssl(1) ocsp new option handling.
-
- * Document SSL_set1_host(3), SSL_set_SSL_CTX(3).
-
- * Document return value from EC_KEY_get0_public_key(3).
-
- * Greatly expanded test coverage via the tlsfuzzer test scripts.
-
- * Expanded test coverage via the bettertls certificate test suite.
-
- * Test interoperability with the Botan TLS client.
-
- * Make pthread_mutex static initialisation work on Windows.
-
- * Get __STRICT_ALIGNMENT from machine/endian.h with portable build.
-
-3.2.1 - Development release
-
- * Propagate alerts from the read half of the TLSv1.3 record layer to I/O
- functions.
-
- * Send a record overflow alert for TLSv1.3 messages having overlong
- plaintext or inner plaintext.
-
- * Send an illegal parameter alert if a client sends an invalid DH key
- share.
-
- * Document PKCS7_final(3), PKCS7_add_attribute(3).
-
- * Collapse x509v3 directory into x509.
-
- * Improve TLSv1.3 client certificate selection to allow EC certificates
- instead of only RSA certificates.
-
- * Fail on receiving an invalid NID in X509_ATTRIBUTE_create() instead
- of constructing a broken objects that may cause NULL pointer accesses.
-
- * Add support for additional GOST curves from RFC 7836 and
- draft-deremin-rfc4491-bis.
-
- * Add OIDs for HMAC using the Streebog hash function.
-
- * Allow GOST R 34.11-2012 in PBE/PBKDF2/PKCS#5.
-
- * Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.
-
- * Handle GOST in ssl_cert_dup().
-
- * Stop sending GOST R 34.10-94 as a CertificateType.
-
- * Use IANA allocated GOST ClientCertificateTypes.
-
- * Add a custom copy handler for AES keywrap to fix a use-after-free.
-
- * Enforce in the TLSv1.3 server that that ClientHello messages after
- a HelloRetryRequest match the original ClientHello as per RFC 8446
- section 4.1.2
-
- * Document more PKCS7 attribute functions.
-
- * Document PKCS7_get_signer_info(3).
-
- * Document PEM_ASN1_read(3) and PEM_ASN1_read_bio(3).
-
- * Document PEM_def_callback(3).
-
- * Document EVP_read_pw_string_min(3).
-
- * Merge documentation of X509_get0_serialNumber from OpenSSL 1.1.1.
-
- * Document error handling of X509_PUBKEY_get0(3) and X509_PUBKEY_get(3)
-
- * Document X509_get0_pubkey_bitstr(3).
-
- * Fix an off-by-one in the CBC padding removal. From BoringSSL.
-
- * Enforce restrictions on extensions present in the ClientHello as per
- RFC 8446, section 9.2.
-
- * Add new CMAC_Init(3) and ChaCha(3) manual pages.
-
- * Fix SSL_shutdown behavior to match the legacy stack. The previous
- behavior could cause a hang.
-
- * Add initial support for openbsd/powerpc64.
-
- * Make the message type available in the internal TLS extensions API
- functions.
-
- * Enable TLSv1.3 for the generic TLS_method().
-
- * Convert openssl(1) s_client option handling.
-
- * Document openssl(1) certhash.
-
- * Convert openssl(1) verify option handling.
-
- * Fix a longstanding bug in PEM_X509_INFO_read_bio(3) that could cause
- use-after-free and double-free issues in calling programs.
-
- * Document PEM_X509_INFO_read(3) and PEM_X509_INFO_read_bio(3).
-
- * Handle SSL_MODE_AUTO_RETRY being changed during a TLSv1.3 session.
-
- * Convert openssl(1) s_server option handling.
-
- * Add minimal info callback support for TLSv1.3.
-
- * Refactor, clean up and simplify some SSL3/DTLS1 record writing code.
-
- * Correctly handle server requests for an OCSP response.
-
- * Add the P-521 curve to the list of curves supported by default
- in the client.
-
- * Convert openssl(1) req option handling.
-
- * Avoid calling freezero with a negative size if a server sends a
- malformed plaintext of all zeroes.
-
- * Send an unexpected message alert if no valid content type is found
- in a TLSv1.3 record.
-
-3.2.0 - Development release
-
- * Enable TLS 1.3 server side in addition to client by default.
- With this change TLS 1.3 is handled entirely on the new stack
- and state machine, with fallback to the legacy stack and
- state machine for older versions. Note that the OpenSSL TLS 1.3
- API is not yet visible/available.
-
- * Improve length checks in the TLS 1.3 record layer and provide
- appropriate alerts for violations of record layer limits.
-
- * Enforce that SNI hostnames received by the TLS server are correctly
- formed as per RFC 5890 and RFC 6066, responding with illegal parameter
- for a nonconformant host name.
-
- * Support SSL_MODE_AUTO_RETRY in TLS 1.3 to allow the automatic
- retry of handshake messages.
-
- * Modify I/O behavior so that SSL_MODE_AUTO_RETRY is the default
- similar to new OpenSSL releases.
-
- * Modify openssl(1) to clear SSL_MODE_AUTO_RETRY appropriately in
- various commands.
-
- * Add tlsfuzzer based regression tests.
-
- * Support sending certificate status requests from the TLS 1.3
- client to request OCSP staples for leaf certificates.
-
- * Support sending certificate status replies from the TLS 1.3 server
- in order to send OCSP staples for leaf certificates.
-
- * Send correct alerts when handling failed key share extensions
- on the TLS 1.3 server.
-
- * Various compatibility fixes for TLS 1.3 to 1.2 fallback for
- switching from the new to legacy stacks.
-
- * Support TLS 1.3 options in the openssl(1) command.
-
- * Many alert cleanups in TLS 1.3 to provide expected alerts in failure
- conditions.
-
- * Modify "openssl x509" to display invalid certificate times as
- invalid, and correctly deal with the failing return case from
- X509_cmp_time so that a certificate with an invalid NotAfter does
- not appear valid.
-
- * Support sending dummy change_cipher_spec records for TLS 1.3 middlebox
- compatibility.
-
- * Ensure only PSS signatures are used with RSA in TLS 1.3.
-
- * Ensure that TLS 1.3 clients advertise exactly the "null" compression
- method in its legacy_compression_methods.
-
- * Correct use of sockaddr_storage instead of sockaddr in openssl(1)
- s_client, which could lead to using 14 bytes of stack garbage instead
- of an IPv6 address in DTLS mode.
-
- * Use non-expired certificates first when building a certificate chain.
-
-3.1.5 - Security fix
-
- * Malformed ASN.1 in a certificate revocation list or a timestamp
- response token can lead to a NULL pointer dereference.
-
-3.1.4 - Interoperability and bug fixes for the TLSv1.3 client:
-
- * Improve client certificate selection to allow EC certificates
- instead of only RSA certificates.
-
- * Do not error out if a TLSv1.3 server requests an OCSP response as
- part of a certificate request.
-
- * Fix SSL_shutdown behavior to match the legacy stack. The previous
- behaviour could cause a hang.
-
- * Fix a memory leak and add a missing error check in the handling of
- the key update message.
-
- * Fix a memory leak in tls13_record_layer_set_traffic_key.
-
- * Avoid calling freezero with a negative size if a server sends a
- malformed plaintext of all zeroes.
-
- * Ensure that only PSS may be used with RSA in TLSv1.3 in order
- to avoid using PKCS1-based signatures.
-
- * Add the P-521 curve to the list of curves supported by default
- in the client.
-
-3.1.3 - Bug fix
-
- * libcrypto may fail to build a valid certificate chain due to
- expired untrusted issuer certificates.
-
-3.1.2 - Bug fix
-
- * A TLS client with peer verification disabled may crash when
- contacting a server that sends an empty certificate list.
-
-3.1.1 - Stable release
-
- * Improved cipher suite handling to automatically include TLSv1.3
- cipher suites when they are not explicitly referred to in the
- cipher string.
-
- * Improved handling of TLSv1.3 HelloRetryRequests, simplifying
- state transitions and ensuring that the legacy session identifer
- retains the same value across the handshake.
-
- * Provided TLSv1.3 cipher suite aliases to match the names used
- in RFC 8446.
-
- * Improved TLSv1.3 client key share handling to allow the use of
- any groups in our configured NID list.
-
- * Fixed printing the serialNumber with X509_print_ex() fall back to
- the colon separated hex bytes in case greater than int value.
-
- * Fix to disallow setting the AES-GCM IV length to zero.
-
- * Added -groups option to openssl(1) s_server subcommand.
-
- * Fix to show TLSv1.3 extension types with openssl(1) -tlsextdebug.
-
- * Improved portable builds to support the use of static MSVC runtimes.
-
- * Fixed portable builds to avoid exporting a sleep() symbol.
-
-3.1.0 - Development release
-
- * Completed initial TLS 1.3 implementation with a completely new state
- machine and record layer. TLS 1.3 is now enabled by default for the
- client side, with the server side to be enabled in a future release.
- Note that the OpenSSL TLS 1.3 API is not yet visible/available.
-
- * Many more code cleanups, fixes, and improvements to memory handling
- and protocol parsing.
-
- * Added RSA-PSS and RSA-OAEP methods from OpenSSL 1.1.1.
-
- * Ported Cryptographic Message Syntax (CMS) implementation from OpenSSL
- 1.1.1 and enabled by default.
-
- * Improved compatibility by backporting functionality and documentation
- from OpenSSL 1.1.1.
-
- * Added many new additional crypto test vectors.
-
- * Adjusted EVP_chacha20()'s behavior to match OpenSSL's semantics.
-
- * Default CA bundle location is now configurable in portable builds.
-
- * Added cms subcommand to openssl(1).
-
- * Added -addext option to openssl(1) req subcommand.
-
-3.0.2 - Stable release
-
- * Use a valid curve when constructing an EC_KEY that looks like X25519.
- The recent EC group cofactor change results in stricter validation,
- which causes the EC_GROUP_set_generator() call to fail.
- Issue reported and fix tested by rsadowski@
-
- * Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey.
- (Note that the CMS code is currently disabled)
- Port of Edlinger's Fix for CVE-2019-1563 from OpenSSL 1.1.1 (old license)
-
- * Avoid a path traversal bug in s_server on Windows when run with the -WWW
- or -HTTP options, due to incomplete path check logic.
- Issue reported and fix tested by Jobert Abma
-
-3.0.1 - Development release
-
- * Ported Billy Brumley's fix for CVE-2019-1547 in OpenSSL 1.1.1. If a NULL
- or zero cofactor is passed to EC_GROUP_set_generator(), try to compute
- it using Hasse's bound. This works as long as the cofactor is small
- enough.
-
- * Fixed a memory leak in error paths for eckey_type2param().
-
- * Initial work on supporting Cryptographic Message Syntax (CMS) in
- libcrypto (not enabled).
-
- * Various manual page improvements and additions.
-
- * Added a CMake check for an existing uninstall target, facilitating
- embedding LibreSSL in larger CMake projects, from Matthew Albrecht.
-
-3.0.0 - Development release
-
- * Completed the port of RSA_METHOD accessors from the OpenSSL 1.1 API.
-
- * Documented undescribed options and removed unfunctional options
- description in openssl(1) manual.
-
- * A plethora of small fixes due to regular oss-fuzz testing.
-
- * Various side channels in DSA and ECDSA were addressed. These are some of
- the many issues found in an extensive systematic analysis of bignum usage
- by Samuel Weiser, David Schrammel et al.
-
- * Enabled openssl(1) speed subcommand on Windows platform.
-
- * Enabled performance optimizations when building with Visual Studio on Windows.
-
- * Fixed incorrect carry operation in 512 addition for Streebog.
-
- * Fixed -modulus option with openssl(1) dsa subcommand.
-
- * Fixed PVK format output issue with openssl(1) dsa and rsa subcommand.
-
-2.9.2 - Bug fixes
-
- * Fixed portable builds with older versions of MacOS,
- Android targets < API 21, and Solaris 10
-
- * Fixed SRTP profile advertisement for DTLS servers.
-
-2.9.1 - Stable release
-
- * Added support for XChaCha20 and XChaCha20-Poly1305.
-
- * Added support for AES key wrap constructions via the EVP interface.
-
- * Partial port of the OpenSSL EC_KEY_METHOD API for use by OpenSSH.
-
- * Added pbkdf2 key derivation support to openssl(1)
-
- * Removed SHA224 based handshake signatures from consideration for use in a TLS 1.2 handshake.
-
- * Changed the default digest type of openssl(1) enc to to sha256.
-
- * Changed the default digest type of openssl(1) dgst to sha256.
-
- * Changed the default digest type of openssl(1) x509 -fingerprint to sha256.
-
- * Changed the default digest type of openssl(1) crl -fingerprint to sha256.
-
- * Improved Windows, Android, and ARM compatibility, including assembly
- optimizations on Mingw-w64 targets.
-
-2.9.0 - Development release
-
- * Added the SM4 block cipher from the Chinese standard GB/T 32907-2016.
-
- * Fixed warnings about clock_gettime on Windows Visual Studio builds.
-
- * Fixed CMake builds on systems where getpagesize is defined as an
- inline function.
-
- * CRYPTO_LOCK is now automatically initialized, with the legacy
- callbacks stubbed for compatibility.
-
- * Added the SM3 hash function from the Chinese standard GB/T 32905-2016.
-
- * Added more OPENSSL_NO_* macros for compatibility with OpenSSL.
-
- * Added extensive interoperability tests between LibreSSL and OpenSSL
- 1.0 and 1.1.
-
- * Added additional Wycheproof tests and related bug fixes.
-
- * Simplified sigalgs option processing and handshake signing algorithm
-
- * Added the ability to use the RSA PSS algorithm for handshake
- signatures.
-
- * Added bn_rand_interval() and use it in code needing ranges of random
- bn values.
-
- * Added functionality to derive early, handshake, and application
- secrets as per RFC8446.
-
- * Added handshake state machine from RFC8446.
-
- * Removed some ASN.1 related code from libcrypto that had not been used
- since around 2000.
-
- * Unexported internal symbols and internalized more record layer structs.
-
- * Added support for assembly optimizations on 32-bit ARM ELF targets.
-
- * Improved protection against timing side channels in ECDSA signature
- generation.
-
- * Coordinate blinding was added to some elliptic curves. This is the
- last bit of the work by Brumley et al. to protect against the
- Portsmash vulnerability.
-
- * Ensure transcript handshake is always freed with TLS 1.2.
-
-2.8.2 - Stable release
-
- * Added Wycheproof support for ECDH and ECDSA Web Crypto test vectors,
- along with test harness fixes.
-
- * Fixed memory leak in nc(1)
-
-2.8.1 - Test and compatibility improvements
-
- * Added Wycheproof support for ECDH, RSASSA-PSS, AES-GCM,
- AES-CMAC, AES-CCM, AES-CBC-PKCS5, DSA, ChaCha20-Poly1305, ECDSA, and
- X25519 test vectors. Applied appropriate fixes for errors uncovered
- by tests.
-
- * Simplified key exchange signature generation and verification.
-
- * Fixed a one-byte buffer overrun in callers of EVP_read_pw_string
-
- * Converted more code paths to use CBB/CBS. All handshake messages are
- now created by CBB.
-
- * Fixed various memory leaks found by Coverity.
-
- * Simplified session ticket parsing and handling, inspired by
- BoringSSL.
-
- * Modified signature of CRYPTO_mem_leaks_* to return -1. This function
- is a no-op in LibreSSL, so this function returns an error to not
- indicate the (non-)existence of memory leaks.
-
- * SSL_copy_session_id, PEM_Sign, EVP_EncodeUpdate, BIO_set_cipher,
- X509_OBJECT_up_ref_count now return an int for error handling,
- matching OpenSSL.
-
- * Converted a number of #defines into proper functions, matching
- OpenSSL's ABI.
-
- * Added X509_get0_serialNumber from OpenSSL.
-
- * Removed EVP_PKEY2PKCS8_broken and PKCS8_set_broken, while adding
- PKCS8_pkey_add1_attr_by_NID and PKCS8_pkey_get0_attrs, matching
- OpenSSL.
-
- * Removed broken pkcs8 formats from openssl(1).
-
- * Converted more functions in public API to use const arguments.
-
- * Stopped handing AES-GCM in ssl_cipher_get_evp, since they use the
- EVP_AEAD interface.
-
- * Stopped using composite EVP_CIPHER AEADs.
-
- * Added timing-safe compares for checking results of signature
- verification. There are no known attacks, this is just inexpensive
- prudence.
-
- * Correctly clear the current cipher state, when changing cipher state.
- This fixed an issue where renegotiation of cipher suites would fail
- when switched from AEAD to non-AEAD or vice-versa.
- Issue reported by Bernard Spil.
-
- * Added more cipher tests to appstest.sh, including all TLSv1.2
- ciphers.
-
- * Added RSA_meth_get_finish() RSA_meth_set1_name() from OpenSSL.
-
- * Added new EVP_CIPHER_CTX_(get|set)_iv() API that allows the IV to be
- retrieved and set with appropriate validation.
-
-2.8.0 - Bug fixes, security, and compatibility improvements
-
- * Extensive documentation updates and additional API history.
-
- * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry
-
- * Tighten up checks for various X509_VERIFY_PARAM functions,
- 'poisoning' parameters so that an unverified certificate cannot be
- used if it fails verification.
-
- * Fixed a potential memory leak on failure in ASN1_item_digest
-
- * Fixed a potential memory alignment crash in asn1_item_combine_free
-
- * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
- SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO paths.
-
- * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
-
- * Made ENGINE_finish and ENGINE_free succeed on NULL and simplify callers
- and matching OpenSSL behavior, rewrote ENGINE_* documentation.
-
- * Added const annotations to many existing APIs from OpenSSL, making
- interoperability easier for downstream applications.
-
- * Fixed small timing side-channels in ecdsa_sign_setup and
- dsa_sign_setup.
-
- * Documented security pitfalls with BN_FLG_CONSTTIME and constant-time
- operation of BN_* functions.
-
- * Updated BN_clear to use explicit_bzero.
-
- * Added a missing bounds check in c2i_ASN1_BIT_STRING.
-
- * More CBS conversions, including simplifications to RSA key exchange,
- and converted code to use dedicated buffers for secrets.
-
- * Removed three remaining single DES cipher suites.
-
- * Fixed a potential leak/incorrect return value in DSA signature
- generation.
-
- * Added a blinding value when generating DSA and ECDSA signatures, in
- order to reduce the possibility of a side-channel attack leaking the
- private key.
-
- * Added ECC constant time scalar multiplication support.
- From Billy Brumley and his team at Tampere University of Technology.
-
- * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
- specification in RFC 8017. Based on an OpenSSL commit by David
- Benjamin.
-
- * Cleaned up BN_* implementations following changes made in OpenSSL by
- Davide Galassi and others.
-
-2.7.4 - Security fixes
-
- * Avoid a timing side-channel leak when generating DSA and ECDSA
- signatures. This is caused by an attempt to do fast modular
- arithmetic, which introduces branches that leak information
- regarding secret values. Issue identified and reported by Keegan
- Ryan of NCC Group.
-
- * Reject excessively large primes in DH key generation. Problem
- reported by Guido Vranken to OpenSSL
- (https://github.com/openssl/openssl/pull/6457) and based on his
- diff.
-
-2.7.3 - Bug fixes
-
- * Removed incorrect NULL checks in DH_set0_key(). Reported by Ondrej
- Sury
-
- * Fixed an issue normalizing CPU architecture in the configure script,
- which disabled assembly optimizations on platforms that get detected
- as 'amd64', opposed to 'x86_64'
-
- * Limited tls_config_clear_keys() to only clear private keys.
- This was inadvertently clearing the keypair, which includes the OCSP
- staple and pubkey hash - if an application called tls_configure()
- followed by tls_config_clear_keys(), this would prevent OCSP staples
- from working.
-
-2.7.2 - Stable release
-
- * Updated and added extensive new HISTORY sections to API manuals.
-
- * Added support for shared library builds with CMake on all supported
- platforms. Note that some of the CMake options have changed, consult
- the README for details.
-
-2.7.1 - Bug fixes
-
- * Fixed a bug in int_x509_param_set_hosts, calling strlen() if name
- length provided is 0 to match the OpenSSL behaviour. Issue noticed
- by Christian Heimes .
-
- * Fixed builds macOS 10.11 and older.
-
-2.7.0 - Bug fixes and improvements
-
- * Added support for many OpenSSL 1.0.2 and 1.1 APIs, based on
- observations of real-world usage in applications. These are
- implemented in parallel with existing OpenSSL 1.0.1 APIs - visibility
- changes have not been made to existing structs, allowing code written
- for older OpenSSL APIs to continue working.
-
- * Extensive corrections, improvements, and additions to the
- API documentation, including new public APIs from OpenSSL that had
- no pre-existing documentation.
-
- * Added support for automatic library initialization in libcrypto,
- libssl, and libtls. Support for pthread_once or a compatible
- equivalent is now required of the target operating system. As a
- side-effect, minimum Windows support is Vista or higher.
-
- * Converted more packet handling methods to CBB, which improves
- resiliency when generating TLS messages.
-
- * Completed TLS extension handling rewrite, improving consistency of
- checks for malformed and duplicate extensions.
-
- * Rewrote ASN1_TYPE_{get,set}_octetstring() using templated ASN.1.
- This removes the last remaining use of the old M_ASN1_* macros
- (asn1_mac.h) from API that needs to continue to exist.
-
- * Added support for client-side session resumption in libtls.
- A libtls client can specify a session file descriptor (a regular
- file with appropriate ownership and permissions) and libtls will
- manage reading and writing of session data across TLS handshakes.
-
- * Improved support for strict alignment on ARMv7 architectures,
- conditionally enabling assembly in those cases.
-
- * Fixed a memory leak in libtls when reusing a tls_config.
-
- * Merged more DTLS support into the regular TLS code path, removing
- duplicated code.
-
- * Many improvements to Windows Cmake-based builds and tests,
- especially when targeting Visual Studio.
-
-2.6.4 - Bug fixes
-
- * Make tls_config_parse_protocols() work correctly when passed a NULL
- pointer for a protocol string. Issue found by semarie@, who also
- provided the diff.
-
- * Correct TLS extensions handling when no extensions are present.
- If no TLS extensions are present in a client hello or server hello,
- omit the entire extensions block, rather than including it with a
- length of zero. Thanks to Eric Elena for
- providing packet captures and testing the fix.
-
- * Fixed portable builds on older Android systems, and systems with out
- IPV6_TCLASS support.
-
-2.6.3 - OpenBSD 6.2 Release
-
- * No core changes from LibreSSL 2.6.2
-
- * Minor compatibility fixes in portable version.
-
-2.6.2 - Bug fixes
-
- * Provide a useful error with libtls if there are no OCSP URLs in a
- peer certificate.
-
- * Keep track of which keypair is in use by a TLS context, fixing a bug
- where a TLS server with SNI would only return the OCSP staple for the
- default keypair. Issue reported by William Graeber and confirmed by
- Andreas Bartelt.
-
- * Fixed various issues in the OCSP extension parsing code.
- The original code incorrectly passes the pointer allocated via
- CBS_stow() (using malloc()) to a d2i_*() function and then calls
- free() on the now incremented pointer, most likely resulting in a
- crash. This issue was reported by Robert Swiecki who found the issue
- using honggfuzz.
-
- * If tls_config_parse_protocols() is called with a NULL pointer,
- return the default protocols instead of crashing - this makes the
- behaviour more useful and mirrors what we already do in
- tls_config_set_ciphers() et al.
-
-2.6.1 - Code removal, rewrites
-
- * Added a "-T tlscompat" option to nc(1), which enables the use of all
- TLS protocols and "compat" ciphers. This allows for TLS connections
- to TLS servers that are using less than ideal cipher suites, without
- having to resort to "-T tlsall" which enables all known cipher
- suites. Diff from Kyle J. McKay.
-
- * Added a new TLS extension handling framework, somewhat analogous to
- BoringSSL, and converted all TLS extensions to use it. Added new TLS
- extension regression tests.
-
- * Improved and added many new manpages. Updated *check_private_key
- manpages with additional cautions regarding their use.
-
- * Cleaned up the EC key/curve configuration handling.
-
- * Added tls_config_set_ecdhecurves() to libtls, which allows the names
- of the eliptical curves that may be used during client and server
- key exchange to be specified.
-
- * Converted more code paths to use CBB/CBS.
-
- * Removed support for DSS/DSA, since we removed the cipher suites a
- while back.
-
- * Removed NPN support. NPN was never standardised and the last draft
- expired in October 2012. ALPN was standardised in July 2014 and has
- been supported in LibreSSL since December 2014. NPN has also been
- removed from Chromium in May 2016.
-
- * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
- CryptoPro clients.
-
- * Removed support for the TLS padding extension, which was added as a
- workaround for an old bug in F5's TLS termination.
-
- * Worked around another bug in F5's TLS termination handling of the
- elliptical curves extension. RFC 4492 only defines elliptic_curves
- for ClientHello. However, F5 is sending it in ServerHello. We need
- to skip over it since our TLS extension parsing code is now more
- strict. Thanks to Armin Wolfermann and WJ Liu for reporting.
-
- * Added ability to clamp notafter valies in certificates for systems
- with 32-bit time_t. This is necessary to conform to RFC 5280
- 4.1.2.5.
-
- * Implemented the SSL_CTX_set_min_proto_version(3) API.
-
- * Removed the original (pre-IETF) chacha20-poly1305 cipher suites.
-
- * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
-
-2.6.0 - New APIs, bug fixes and improvements
-
- * Added support for providing CRLs to libtls. Once a CRL is provided we
- enable CRL checking for the full certificate chain. Based on a diff
- from Jack Burton
-
- * Allow non-compliant clients using IP literal addresses with SNI
- to connect to a server using libtls.
-
- * Avoid a potential NULL pointer dereference in d2i_ECPrivateKey().
- Reported by Robert Swiecki, who found the issue using honggfuzz.
-
- * Added definitions for three OIDs used in EV certificates.
- From Kyle J. McKay
-
- * Added tls_peer_cert_chain_pem to libtls, useful in private
- certificate validation callbacks such as those in relayd.
-
- * Converted explicit clear/free sequences to use freezero(3).
-
- * Reworked TLS certificate name verification code to more strictly
- follow RFC 6125.
-
- * Cleaned up and simplified server key exchange EC point handling.
-
- * Added tls_keypair_clear_key for clearing key material.
-
- * Removed inconsistent IPv6 handling from BIO_get_accept_socket,
- simplified BIO_get_host_ip and BIO_accept.
-
- * Fixed the openssl(1) ca command so that is generates certificates
- with RFC 5280-conformant time. Problem noticed by Harald Dunkel.
-
- * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *
-
- * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
-
- * Added HKDF (HMAC Key Derivation Function) from BoringSSL
-
- * Provided a tls_unload_file() function that frees the memory returned
- from a tls_load_file() call, ensuring that it the contents become
- inaccessible. This is specifically needed on platforms where the
- library allocators may be different from the application allocator.
-
- * Perform reference counting for tls_config. This allows
- tls_config_free() to be called as soon as it has been passed to the
- final tls_configure() call, simplifying lifetime tracking for the
- application.
-
- * Moved internal state of SSL and other structures to be opaque.
-
- * Dropped cipher suites with DSS authentication.
-
- * nc(1) improvements, including:
- nc -W to terminate nc after receiving a number of packets
- nc -Z for saving the peer certificate and chain in a pem file
-
-2.5.5 - Bug fixes
-
- * Distinguish between self-issued certificates and self-signed
- certificates. The certificate verification code has special cases
- for self-signed certificates and without this change, self-issued
- certificates (which it seems are common place with
- openvpn/easyrsa) were also being included in this category.
-
- * Added getpagesize fallback, needed for Android bionic libc.
-
-2.5.4 - Security Updates
-
- * Revert a previous change that forced consistency between return
- value and error code when specifing a certificate verification
- callback, since this breaks the documented API. When a user supplied
- callback always returns 1, and later code checks the error code to
- potentially abort post verification, this will result in incorrect
- successul certificate verification.
-
- * Switched Linux getrandom() usage to non-blocking mode, continuing to
- use fallback mechanims if unsuccessful. This works around a design
- flaw in Linux getrandom(2) where early boot usage in a library makes
- it impossible to recover if getrandom(2) is not yet initialized.
-
- * Fixed a bug caused by the return value being set early to signal
- successful DTLS cookie validation. This can mask a later failure and
- result in a positive return value being returned from
- ssl3_get_client_hello(), when it should return a negative value to
- propagate the error.
-
- * Fixed a build error on non-x86/x86_64 systems running Solaris.
-
-2.5.3 - OpenBSD 6.1 Release
-
- * Documentation updates
-
- * Improved ocspcheck(1) error handling
-
-2.5.2 - Security features and bugfixes
-
- * Added the recallocarray(3) memory allocation function, and converted
- various places in the library to use it, such as CBB and BUF_MEM_grow.
- recallocarray(3) is similar to reallocarray. Newly allocated memory
- is cleared similar to calloc(3). Memory that becomes unallocated
- while shrinking or moving existing allocations is explicitly
- discarded by unmapping or clearing to 0
-
- * Added new root CAs from SECOM Trust Systems / Security Communication
- of Japan.
-
- * Added EVP interface for MD5+SHA1 hashes.
-
- * Fixed DTLS client failures when the server sends a certificate
- request.
-
- * Correct handling of padding when upgrading an SSLv2 challenge into
- an SSLv3/TLS connection.
-
- * Allow protocols and ciphers to be set on a TLS config object in
- libtls.
-
- * Improved nc(1) TLS handshake CPU usage and server-side error
- reporting.
-
-2.5.1 - Bug and security fixes, new features, documentation updates
-
- * X509_cmp_time() now passes a malformed GeneralizedTime field as an
- error. Reported by Theofilos Petsios.
-
- * Detect zero-length encrypted session data early, instead of when
- malloc(0) fails or the HMAC check fails. Noted independently by
- jsing@ and Kurt Cancemi.
-
- * Check for and handle failure of HMAC_{Update,Final} or
- EVP_DecryptUpdate().
-
- * Massive update and normalization of manpages, conversion to
- mandoc format. Many pages were rewritten for clarity and accuracy.
- Portable doc links are up-to-date with a new conversion tool.
-
- * Curve25519 Key Exchange support.
-
- * Support for alternate chains for certificate verification.
-
- * Code cleanups, CBS conversions, further unification of DTLS/SSL
- handshake code, further ASN1 macro expansion and removal.
-
- * Private symbol are now hidden in libssl and libcryto.
-
- * Friendly certificate verification error messages in libtls, peer
- verification is now always enabled.
-
- * Added OCSP stapling support to libtls and netcat.
-
- * Added ocspcheck utility to validate a certificate against its OCSP
- responder and save the reply for stapling
-
- * Enhanced regression tests and error handling for libtls.
-
- * Added explicit constant and non-constant time BN functions,
- defaulting to constant time wherever possible.
-
- * Moved many leaked implementation details in public structs behind
- opaque pointers.
-
- * Added ticket support to libtls.
-
- * Added support for setting the supported EC curves via
- SSL{_CTX}_set1_groups{_list}() - also provide defines for the previous
- SSL{_CTX}_set1_curves{_list} names. This also changes the default
- list of curves to be X25519, P-256 and P-384. All other curves must
- be manually enabled.
-
- * Added -groups option to openssl(1) s_client for specifying the curves
- to be used in a colon-separated list.
-
- * Merged client/server version negotiation code paths into one,
- reducing much duplicate code.
-
- * Removed error function codes from libssl and libcrypto.
-
- * Fixed an issue where a truncated packet could crash via an OOB read.
-
- * Added SSL_OP_NO_CLIENT_RENEGOTIATION option that disallows
- client-initiated renegotiation. This is the default for libtls
- servers.
-
- * Avoid a side-channel cache-timing attack that can leak the ECDSA
- private keys when signing. This is due to BN_mod_inverse() being
- used without the constant time flag being set. Reported by Cesar
- Pereida Garcia and Billy Brumley (Tampere University of Technology).
- The fix was developed by Cesar Pereida Garcia.
-
- * iOS and MacOS compatibility updates from Simone Basso and Jacob
- Berkman.
-
-
-2.5.0 - New APIs, bug fixes and improvements
-
- * libtls now supports ALPN and SNI
-
- * libtls adds a new callback interface for integrating custom IO
- functions. Thanks to Tobias Pape.
-
- * libtls now handles 4 cipher suite groups:
- "secure" (TLSv1.2+AEAD+PFS)
- "compat" (HIGH:!aNULL)
- "legacy" (HIGH:MEDIUM:!aNULL)
- "insecure" (ALL:!aNULL:!eNULL)
-
- This allows for flexibility and finer grained control, rather than
- having two extremes (an issue raised by Marko Kreen some time ago).
-
- * Tightened error handling for tls_config_set_ciphers().
-
- * libtls now always loads CA, key and certificate files at the time the
- configuration function is called. This simplifies code and results in
- a single memory based code path being used to provide data to libssl.
-
- * Add support for OCSP intermediate certificates.
-
- * Added functions used by stunnel and exim from BoringSSL - this
- brings in X509_check_host, X509_check_email, X509_check_ip, and
- X509_check_ip_asc.
-
- * Added initial support for iOS, thanks to Jacob Berkman.
-
- * Improved behavior of arc4random on Windows when using memory leak
- analysis software.
-
- * Correctly handle an EOF that occurs prior to the TLS handshake
- completing. Reported by Vasily Kolobkov, based on a diff from Marko
- Kreen.
-
- * Limit the support of the "backward compatible" ssl2 handshake to
- only be used if TLS 1.0 is enabled.
-
- * Fix incorrect results in certain cases on 64-bit systems when
- BN_mod_word() can return incorrect results. BN_mod_word() now can
- return an error condition. Thanks to Brian Smith.
-
- * Added constant-time updates to address CVE-2016-0702
-
- * Fixed undefined behavior in BN_GF2m_mod_arr()
-
- * Removed unused Cryptographic Message Support (CMS)
-
- * More conversions of long long idioms to time_t
-
- * Improved compatibility by avoiding printing NULL strings with
- printf.
-
- * Reverted change that cleans up the EVP cipher context in
- EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies on the
- previous behaviour.
-
- * Avoid unbounded memory growth in libssl, which can be triggered by a
- TLS client repeatedly renegotiating and sending OCSP Status Request
- TLS extensions.
-
- * Avoid falling back to a weak digest for (EC)DH when using SNI with
- libssl.
-
-2.4.2 - Bug fixes and improvements
-
- * Fixed loading default certificate locations with openssl s_client.
-
- * Ensured OCSP only uses and compares GENERALIZEDTIME values as per
- RFC6960. Also added fixes for OCSP to work with intermediate
- certificates provided in responses.
-
- * Improved behavior of arc4random on Windows to not appear to leak
- memory in debug tools, reduced privileges of allocated memory.
-
- * Fixed incorrect results from BN_mod_word() when the modulus is too
- large, thanks to Brian Smith from BoringSSL.
-
- * Correctly handle an EOF prior to completing the TLS handshake in
- libtls.
-
- * Improved libtls ceritificate loading and cipher string validation.
-
- * Updated libtls cipher group suites into four categories:
- "secure" (TLSv1.2+AEAD+PFS)
- "compat" (HIGH:!aNULL)
- "legacy" (HIGH:MEDIUM:!aNULL)
- "insecure" (ALL:!aNULL:!eNULL)
- This allows for flexibility and finer grained control, rather than
- having two extremes.
-
- * Limited support for 'backward compatible' SSLv2 handshake packets to
- when TLS 1.0 is enabled, providing more restricted compatibility
- with TLS 1.0 clients.
-
- * openssl(1) and other documentation improvements.
-
- * Removed flags for disabling constant-time operations.
- This removes support for DSA_FLAG_NO_EXP_CONSTTIME,
- DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags, making
- all of these operations unconditionally constant-time.
-
-
-2.4.1 - Security fix
-
- * Correct a problem that prevents the DSA signing algorithm from
- running in constant time even if the flag BN_FLG_CONSTTIME is set.
- This issue was reported by Cesar Pereida (Aalto University), Billy
- Brumley (Tampere University of Technology), and Yuval Yarom (The
- University of Adelaide and NICTA). The fix was developed by Cesar
- Pereida.
-
-2.4.0 - Build improvements, new features
-
- * Many improvements to the CMake build infrastructure, including
- Solaris, mingw-w64, Cygwin, and HP-UX support. Thanks to Kinichiro
- Inoguchi for this work.
-
- * Added missing error handling around bn_wexpand() calls.
-
- * Added explicit_bzero calls for freed ASN.1 objects.
-
- * Fixed X509_*set_object functions to return 0 on allocation failure.
-
- * Implemented the IETF ChaCha20-Poly1305 cipher suites.
-
- * Changed default EVP_aead_chacha20_poly1305() implementation to the
- IETF version, which is now the default.
-
- * Fixed password prompts from openssl(1) to properly handle ^C.
-
- * Reworked error handling in libtls so that configuration errors are
- visible.
-
- * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.
-
- * Manpage fixes and updates
-
-2.3.5 - Reliability fix
-
- * Fixed an error in libcrypto when parsing some ASN.1 elements > 16k.
-
-2.3.4 - Security Update
-
- * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and encoding.
- From OpenSSL.
-
- * Minor build fixes
-
-2.3.3 - OpenBSD 5.9 release branch tagged
-
- * Reworked build scripts to better sync with OpenNTPD-portable
-
- * Fixed broken manpage links
-
- * Fixed an nginx compatibility issue by adding an 'install_sw' make alias
-
- * Fixed HP-UX builds
-
- * Changed the default configuration directory to c:\LibreSSL\ssl on Windows
- binary builds
-
- * cert.pem has been reorganized and synced with Mozilla's certificate store
-
-2.3.2 - Compatibility and Reliability fixes
-
- * Changed format of LIBRESSL_VERSION_NUMBER to match that of
- OPENSSL_VERSION_NUMBER, see:
- https://wiki.openssl.org/index.php/Manual:OPENSSL_VERSION_NUMBER(3)
-
- * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
- construction introduced in RFC 7539, which is different than that
- already used in TLS with EVP_aead_chacha20_poly1305()
-
- * Avoid a potential undefined C99+ behavior due to shift overflow in
- AES_decrypt, reported by Pascal Cuoq
-
- * More man pages converted from pod to mdoc format
-
- * Added COMODO RSA Certification Authority and QuoVadis
- root certificates to cert.pem
-
- * Removed Remove "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification
- Authority" (serial 3c:91:31:cb:1f:f6:d0:1b:0e:9a:b8:d0:44:bf:12:be) root
- certificate from cert.pem
-
- * Added support for building nc(1) on Solaris
-
- * Fixed GCC 5.x+ preprocessor checks, reported by Ruslan Babayev
-
- * Improved console handling with openssl(1) on Windows
-
- * Ensure the network stack is enabled on Windows when running
- tls_init()
-
- * Fixed incorrect TLS certificate loading by nc(1)
-
- * Added support for Solaris 11.3's getentropy(2) system call
-
- * Enabled support for using NetBSD 7.0's arc4random(3) implementation
-
- * Deprecated the SSL_OP_SINGLE_DH_USE flag by disabling its effect
-
- * Fixes from OpenSSL 1.0.1q
- - CVE-2015-3194 - NULL pointer dereference in client side certificate
- validation.
- - CVE-2015-3195 - Memory leak in PKCS7 - not reachable from TLS/SSL
-
- * The following OpenSSL CVEs did not apply to LibreSSL
- - CVE-2015-3193 - Carry propagating bug in the x86_64 Montgomery
- squaring procedure.
- - CVE-2015-3196 - Double free race condition of the identify hint
- data.
-
- See https://marc.info/?l=openbsd-announce&m=144925068504102
-
-2.3.1 - ASN.1 and time handling cleanups
-
- * ASN.1 cleanups and RFC5280 compliance fixes.
-
- * Time representations switched from 'unsigned long' to 'time_t'. LibreSSL
- now checks if the host OS supports 64-bit time_t.
-
- * Fixed a leak in SSL_new in the error path.
-
- * Support always extracting the peer cipher and version with libtls.
-
- * Added ability to check certificate validity times with libtls,
- tls_peer_cert_notbefore and tls_peer_cert_notafter.
-
- * Changed tls_connect_servername to use the first address that resolves with
- getaddrinfo().
-
- * Remove broken conditional EVP_CHECK_DES_KEY code (non-functional since
- initial commit in 2004).
-
- * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt, reported
- by Qualys Security.
-
- * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple of
- sizeof(RC4_CHUNK), reported by Pascal Cuoq .
-
- * Reject too small bits value in BN_generate_prime_ex(), so that it does
- not risk becoming negative in probable_prime_dh_safe(), reported by
- Franck Denis.
-
- * Enable nc(1) builds on more platforms.
-
-2.3.0 - SSLv3 removed, libtls API changes, portability improvements
-
- * SSLv3 is now permanently removed from the tree.
-
- * The libtls API is changed from the 2.2.x series.
-
- The read/write functions work correctly with external event
- libraries. See the tls_init man page for examples of using libtls
- correctly in asynchronous mode.
-
- Client-side verification is now supported, with the client supplying
- the certificate to the server.
-
- Also, when using tls_connect_fds, tls_connect_socket or
- tls_accept_fds, libtls no longer implicitly closes the passed in
- sockets. The caller is responsible for closing them in this case.
-
- * When loading a DSA key from an raw (without DH parameters) ASN.1
- serialization, perform some consistency checks on its `p' and `q'
- values, and return an error if the checks failed.
-
- Thanks for Georgi Guninski (guninski at guninski dot com) for
- mentioning the possibility of a weak (non prime) q value and
- providing a test case.
-
- See
- https://cpunks.org/pipermail/cypherpunks/2015-September/009007.html
- for a longer discussion.
-
- * Fixed a bug in ECDH_compute_key that can lead to silent truncation
- of the result key without error. A coding error could cause software
- to use much shorter keys than intended.
-
- * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are no
- longer supported.
-
- * The engine command and parameters are removed from the openssl(1).
- Previous releases removed dynamic and builtin engine support
- already.
-
- * SHA-0 is removed, which was withdrawn shortly after publication 20
- years ago.
-
- * Added Certplus CA root certificate to the default cert.pem file.
-
- * New interface OPENSSL_cpu_caps is provided that does not allow
- software to inadvertently modify cpu capability flags.
- OPENSSL_ia32cap and OPENSSL_ia32cap_loc are removed.
-
- * The out_len argument of AEAD changed from ssize_t to size_t.
-
- * Deduplicated DTLS code, sharing bugfixes and improvements with
- TLS.
-
- * Converted 'nc' to use libtls for client and server operations; it is
- included in the libressl-portable distribution as an example of how
- to use the library.
-
-2.2.3 - Bug fixes, build enhancements
-
- * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do not
- include TLS extensions, resulting in such handshakes being aborted.
- This release corrects the handling of such messages. Thanks to
- Ligushka from github for reporting the issue.
-
- * Added install target for cmake builds. Thanks to TheNietsnie from
- github.
-
- * Updated pkgconfig files to correctly report the release version
- number, not the individual library ABI version numbers. Thanks to
- Jan Engelhardt for reporting the issue.
-
-2.2.2 - More TLS parser rework, bug fixes, expanded portable build support
-
- * Switched 'openssl dhparam' default from 512 to 2048 bits
-
- * Reworked openssl(1) option handling
-
- * More CRYPTO ByteString (CBC) packet parsing conversions
-
- * Fixed 'openssl pkeyutl -verify' to exit with a 0 on success
-
- * Fixed dozens of Coverity issues including dead code, memory leaks,
- logic errors and more.
-
- * Ensure that openssl(1) restores terminal echo state after reading a
- password.
-
- * Incorporated fix for OpenSSL Issue #3683
-
- * LibreSSL version define LIBRESSL_VERSION_NUMBER will now be bumped
- for each portable release.
-
- * Removed workarounds for TLS client padding bugs.
-
- * No longer disable ECDHE-ECDSA on OS X
-
- * Removed SSLv3 support from openssl(1)
-
- * Removed IE 6 SSLv3 workarounds.
-
- * Modified tls_write in libtls to allow partial writes, clarified with
- examples in the documentation.
-
- * Removed RSAX engine
-
- * Tested SSLv3 removal with the OpenBSD ports tree and found several
- applications that were not ready to build without SSLv3 yet. For
- now, building a program that intentionally uses SSLv3 will result in
- a linker warning.
-
- * Added TLS_method, TLS_client_method and TLS_server_method as a
- replacement for the SSLv23_*method calls.
-
- * Added initial cmake build support, including support for building with
- Visual Studio, currently tested with Visual Studio 2013 Community
- Edition.
-
- * --with-enginesdir is removed as a configuration parameter
-
- * Default cert.pem, openssl.cnf, and x509v3.cnf files are now
- installed under $sysconfdir/ssl or the directory specified by
- --with-openssldir. Previous versions of LibreSSL left these empty.
-
-2.2.1 - Build fixes, feature added, features removed
-
- * Assorted build fixes for musl, HP-UX, Mingw, Solaris.
-
- * Initial support for Windows Embedded 2009, Server 2003, XP
-
- * Protocol parsing conversions to BoringSSL's CRYPTO ByteString (CBS) API
-
- * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
-
- * Removed Dynamic Engine support
-
- * Removed unused and obsolete MDC-2DES cipher
-
- * Removed workarounds for obsolete SSL implementations
-
-2.2.0 - Build cleanups and new OS support, Security Updates
-
- * AIX Support - thanks to Michael Felt
-
- * Cygwin Support - thanks to Corinna Vinschen
-
- * Refactored build macros, support packaging libtls independently.
- There are more pieces required to support building and using OpenSSL
- with libtls, but this is an initial start at providing an
- independent package for people to start hacking on.
-
- * Removal of OPENSSL_issetugid and all library getenv calls.
- Applications can and should no longer rely on environment variables
- for changing library behavior. OPENSSL_CONF/SSLEAY_CONF is still
- supported with the openssl(1) command.
-
- * libtls API and documentation additions
-
- * Various bug fixes and simplifications to libssl and libcrypto
-
- * Fixes for the following issues are integrated into LibreSSL 2.2.0:
- - CVE-2015-1788 - Malformed ECParameters causes infinite loop
- - CVE-2015-1789 - Exploitable out-of-bounds read in X509_cmp_time
- - CVE-2015-1792 - CMS verify infinite loop with unknown hash function
-
- * The following CVEs did not apply to LibreSSL or were fixed in
- earlier releases:
- - CVE-2015-4000 - DHE man-in-the-middle protection (Logjam)
- - CVE-2015-1790 - PKCS7 crash with missing EnvelopedContent
- - CVE-2014-8176 - Invalid free in DTLS
-
- * Fixes for the following CVEs are still in review for LibreSSL
- - CVE-2015-1791 - Race condition handling NewSessionTicket
-
-2.1.6 - Security update
-
- * Fixes for the following issues are integrated into LibreSSL 2.1.6:
- - CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
- - CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
- - CVE-2015-0287 - ASN.1 structure reuse memory corruption
- - CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref
- - CVE-2015-0289 - PKCS7 NULL pointer dereferences
-
- * The fix for CVE-2015-0207 - Segmentation fault in DTLSv1_listen
- is integrated for safety, but LibreSSL is not vulnerable.
-
- * Libtls is now built by default. The --enable-libtls
- configuration option is no longer required.
- The libtls API is now stable for the 2.1.x series.
-
-2.1.5 - Bug fixes and a security update
- * Fix incorrect comparison function in openssl(1) certhash command.
- Thanks to Christian Neukirchen / Void Linux.
-
- * Windows port improvements and bug fixes.
- - Removed a dependency on libgcc in 32-bit dynamic libraries.
- - Correct a hang in openssl(1) reading from stdin on an connection.
- - Initialize winsock in openssl(1) earlier, allow 'openssl ocsp' and
- any other network-related commands to function properly.
-
- * Reject all server DH keys smaller than 1024 bits.
-
-2.1.4 - Security and feature updates
- * Improvements to libtls:
- - a new API for loading CA chains directly from memory instead of a
- file, allowing verification with privilege separation in a chroot
- without direct access to CA certificate files.
-
- - Ciphers default to TLSv1.2 with AEAD and PFS.
-
- - Improved error handling and message generation
-
- - New APIs and improved documentation
-
- * Added X509_STORE_load_mem API for loading certificates from memory.
- This facilitates accessing certificates from a chrooted environment.
-
- * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
- using 'TLSv1.2+AEAD' as the cipher selection string.
-
- * Dead and disabled code removal including MD5, Netscape workarounds,
- non-POSIX IO, SCTP, RFC 3779 support, many #if 0 sections, and more.
-
- * ASN1 macro maze expanded to aid reading and searching the code.
-
- * NULL pointer asserts removed in favor of letting the OS/signal
- handler catch them.
-
- * Refactored argument handling in openssl(1) for consistency and
- maintainability.
-
- * New openssl(1) command 'certhash' replaces the c_rehash script.
-
- * Support for building with OPENSSL_NO_DEPRECATED
-
- * Server-side support for TLS_FALLBACK_SCSV for compatibility with
- various auditor and vulnerability scanners.
-
- * Dozens of issues found with the Coverity scanner fixed.
-
- * Security Updates:
-
- - Fix a minor information leak that was introduced in t1_lib.c
- r1.71, whereby an additional 28 bytes of .rodata (or .data) is
- provided to the network. In most cases this is a non-issue since
- the memory content is already public. Issue found and reported by
- Felix Groebert of the Google Security Team.
-
- - Fixes for the following low-severity issues were integrated into
- LibreSSL from OpenSSL 1.0.1k:
-
- CVE-2015-0205 - DH client certificates accepted without
- verification
- CVE-2014-3570 - Bignum squaring may produce incorrect results
- CVE-2014-8275 - Certificate fingerprints can be modified
- CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]
- Reported by Karthikeyan Bhargavan of the PROSECCO team at INRIA.
-
- The following CVEs were fixed in earlier LibreSSL releases:
- CVE-2015-0206 - Memory leak handling repeated DLTS records
- CVE-2014-3510 - Flaw handling DTLS anonymous EC(DH) ciphersuites.
-
- The following CVEs did not apply to LibreSSL:
- CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record
- CVE-2014-3569 - no-ssl3 configuration sets method to NULL
- CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA
-
-2.1.3 - Security update and OS support improvements
- * Fixed various memory leaks in DTLS, including fixes for
- CVE-2015-0206.
-
- * Added Application-Layer Protocol Negotiation (ALPN) support.
-
- * Removed GOST R 34.10-94 signature authentication.
-
- * Removed nonfunctional Netscape browser-hang workaround code.
-
- * Simplified and refactored SSL/DTLS handshake code.
-
- * Added SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
-
- * Hide timing info about padding errors during handshakes.
-
- * Improved libtls support for non-blocking sockets, added randomized
- session ID contexts. Work is ongoing with this library - feedback
- and potential use-cases are welcome.
-
- * Support building Windows DLLs.
- Thanks to Jan Engelhard.
-
- * Packaged config wrapper for better compatibility with OpenSSL-based
- build systems.
- Thanks to @technion from github
-
- * Ensure the stack is marked non-executable for assembly sections.
- Thanks to Anthony G. Bastile.
-
- * Enable extra compiler hardening flags by default, where applicable.
- The default set of hardening features can vary by OS to OS, so
- feedback is welcome on this. To disable the default hardening flags,
- specify '--disable-hardening' during configure.
- Thanks to Jim Barlow
-
- * Initial HP-UX support, tested with HP-UX 11.31 ia64
- Thanks to Kinichiro Inoguchi
-
- * Initial NetBSD support, tested with NetBSD 6.1.5 x86_64
- Imported from OpenNTPD, thanks to @gitisihara from github
-
-2.1.2 - Many new features and improvements
- * Added reworked GOST cipher suite support
- thanks to Dmitry Eremin-Solenikov
-
- * Enabled Camellia ciphers due to improved patent situation
-
- * Use builtin arc4random implementation on OS X and FreeBSD
- this addresses some deficiencies in the native implementations of
- these operating systems, see commit logs for more information
-
- * Added initial Windows mingw-w64 support (32 and 64-bit)
- thanks to Song Dongsheng and others for code and feedback
-
- * Enabled assembly optimizations on x86_64 CPUs
- supports Linux, *BSD, Solaris and OS X operating systems
- thanks to Wouter Clarie for the initial implementation
-
- * Added no_ssl3/no_tls1_1/no_tls1_2 options to openssl(1)
-
- * Improved build infrastructure, 'make distcheck' now passes
- this simplifies and speeds developer efficiency
- thanks to Dmitry Eremin-Solenikov and Wouter Clarie
-
- * Allow conditional building of the libtls library
- expect the API and ABI of the library to change
- feedback is welcome
-
- * Fixes for more memory leaks, cleanups, etc.
-
-2.1.1 - Security update
- * Address POODLE attack by disabling SSLv3 by default
-
- * Fix Eliptical Curve cipher selection bug
- (https://github.com/libressl/portable/issues/35)
-
-2.1.0 - First release from the OpenBSD 5.7 tree
- * Added support for automatic ephemeral EC keys
-
- * Fixes for many memory leaks and overflows in error handlers
-
- * The TLS padding extension (that works around bugs in F5 terminators) is
- off by default
-
- * support for getrandom(2) on Linux 3.17
-
- * the NO_ASM macro is no longer being set, providing the first bits toward
- enabling other assembly offloads.
-
-2.0.5 - Fixes for CVEs from OpenSSL 1.0.1i
- * CVE-2014-3506
- * CVE-2014-3507
- * CVE-2014-3508 (partially vulnerable)he
- * CVE-2014-3509
- * CVE-2014-3510
- * CVE-2014-3511
- * Synced LibreSSL Portable with the release version of OpenBSD 5.6
-
-2.0.4 - Portability fixes, deleted unused SRP code
-
-2.0.3 - Portability fixes, improvements to fork detection
-
-2.0.2 - Address arc4random fork PID wraparound issues with pthread_atfork
-
-2.0.1 - Portability fixes:
- * Removed -Werror and and other non-portable compiler flags
-
- * Allow setting OPENSSLDIR and ENGINSDIR
-
-2.0.0 - First release from the OpenBSD 5.6 tree
- * Removal of many obsolete features and coding conventions from the OpenSSL
- 1.0.1h source
diff --git a/deps/curl/dep/libressl/README.md b/deps/curl/dep/libressl/README.md
deleted file mode 100644
index 598188cc2..000000000
--- a/deps/curl/dep/libressl/README.md
+++ /dev/null
@@ -1,238 +0,0 @@
-
-
-## Official portable version of [LibreSSL](https://www.libressl.org)
-
-[](https://github.com/libressl/portable/actions/workflows/linux.yml)
-[](https://github.com/libressl/portable/actions/workflows/macos.yml)
-[](https://github.com/libressl/portable/actions/workflows/windows.yml)
-[](https://github.com/libressl/portable/actions/workflows/android.yml)
-[](https://github.com/libressl/portable/actions/workflows/solaris.yml)
-[](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:libressl)
-
-LibreSSL is a fork of [OpenSSL](https://www.openssl.org) 1.0.1g developed by the
-[OpenBSD](https://www.openbsd.org) project. Our goal is to modernize the codebase,
-improve security, and apply best practice development processes from OpenBSD.
-
-## Compatibility with OpenSSL
-
-LibreSSL provides much of the OpenSSL 1.1 API. The OpenSSL 3 API is not currently
-supported. Incompatibilities between the projects exist and are unavoidable since
-both evolve with different goals and priorities. Important incompatibilities will
-be addressed if possible and as long as they are not too detrimental to LibreSSL's
-goals of simplicity, security and sanity. We do not add new features, ciphers and
-API without a solid reason and require that new code be clean and of high quality.
-
-LibreSSL is not ABI compatible with any release of OpenSSL, or necessarily
-earlier releases of LibreSSL. You will need to relink your programs to
-LibreSSL in order to use it, just as in moving between major versions of OpenSSL.
-LibreSSL's installed library version numbers are incremented to account for
-ABI and API changes.
-
-## Compatibility with other operating systems
-
-While primarily developed on and taking advantage of APIs available on OpenBSD,
-the LibreSSL portable project attempts to provide working alternatives for
-other operating systems, and assists with improving OS-native implementations
-where possible.
-
-At the time of this writing, LibreSSL is known to build and work on:
-
-* Linux (kernel 3.17 or later recommended)
-* FreeBSD (tested with 9.2 and later)
-* NetBSD (7.0 or later recommended)
-* HP-UX (11i)
-* Solaris 11 and later
-* Mac OS X (tested with 10.8 and later)
-* AIX (5.3 and later)
-* Emscripten (3.1.44 and later)
-
-LibreSSL also supports the following Windows environments:
-
-* Microsoft Windows (Windows 7 / Windows Server 2008r2 or later, x86 and x64)
-* Wine (32-bit and 64-bit)
-* MinGW-w64, Cygwin, and Visual Studio
-
-Official release tarballs are available at your friendly neighborhood
-OpenBSD mirror in directory
-[LibreSSL](https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/),
-although we suggest that you use a [mirror](https://www.openbsd.org/ftp.html).
-
-The LibreSSL portable build framework is also
-[mirrored](https://github.com/libressl/portable) on GitHub.
-
-Please report bugs either to the public libressl@openbsd.org mailing list,
-or to the GitHub
-[issue tracker](https://github.com/libressl/portable/issues)
-
-Severe vulnerabilities or bugs requiring coordination with OpenSSL can be
-sent to the core team at libressl-security@openbsd.org.
-
-# Building LibreSSL
-
-## Building from a Git checkout
-
-If you have checked out this source using Git, or have downloaded a source
-tarball from GitHub, follow these initial steps to prepare the source tree for
-building. _Note: Your build will fail if you do not follow these instructions!
-If you cannot follow these instructions or cannot meet these prerequisites,
-please download an official release distribution from
-https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/ instead. Using official
-releases is strongly advised if you are not a developer._
-
-1. Ensure that you have a bash shell. This is also required on Windows.
-2. Ensure that you have the following packages installed:
- automake, autoconf, git, libtool, perl.
-3. Run `./autogen.sh` to prepare the source tree for building.
-
-## Build steps using configure
-
-Once you have the source tree prepared, run these commands to build and install:
-
-```sh
-./configure # see ./configure --help for configuration options
-make check # runs builtin unit tests
-make install # set DESTDIR= to install to an alternate location
-```
-
-Alternatively, it is possible to run `./dist.sh` to prepare a tarball.
-
-## Build steps using CMake
-
-Once you have the source tree prepared, run these commands to build and install:
-
-```sh
-mkdir build
-cd build
-cmake ..
-make
-make test
-```
-
-For faster builds, you can use Ninja:
-
-```sh
-mkdir build-ninja
-cd build-ninja
-cmake -G"Ninja" ..
-ninja
-ninja test
-```
-
-Or another supported build system like Visual Studio:
-
-```sh
-mkdir build-vs2022
-cd build-vs2022
-cmake -G"Visual Studio 17 2022" ..
-```
-
-#### Additional CMake Options
-
-| Option Name | Default | Description |
-|-------------------------|--------:|-----------------------------------------------------------------------------------------------------------------|
-| `LIBRESSL_SKIP_INSTALL` | `OFF` | allows skipping install() rules. Can be specified from command line using
```-DLIBRESSL_SKIP_INSTALL=ON``` |
-| `LIBRESSL_APPS` | `ON` | allows skipping application builds. Apps are required to run tests |
-| `LIBRESSL_TESTS` | `ON` | allows skipping of tests. Tests are only available in static builds |
-| `BUILD_SHARED_LIBS` | `OFF` | CMake option for building shared libraries. |
-| `ENABLE_ASM` | `ON` | builds assembly optimized rules. |
-| `ENABLE_EXTRATESTS` | `OFF` | Enable extra tests that may be unreliable on some platforms |
-| `ENABLE_NC` | `OFF` | Enable installing TLS-enabled nc(1) |
-| `OPENSSLDIR` | Blank | Set the default openssl directory. Can be specified from command line using
```-DOPENSSLDIR=``` |
-
-## Build information for specific systems
-
-### HP-UX (11i)
-
-Set the UNIX_STD environment variable to `2003` before running `configure`
-in order to build with the HP C/aC++ compiler. See the "standards(5)" man
-page for more details.
-
-```sh
-export UNIX_STD=2003
-./configure
-make
-```
-
-### MinGW-w64 - Windows
-
-LibreSSL builds against relatively recent versions of [MinGW-w64](https://www.mingw-w64.org/), not to be
-confused with the original mingw.org project. MinGW-w64 3.2 or later
-should work. See [README.mingw.md](README.mingw.md) for more information.
-
-### Emscripten
-
-When configuring LibreSSL for use with Emscripten, make sure to prepend
-`emcmake` to your `cmake` configuration command. Once configured, you can
-proceed with your usual `cmake` commands. For example:
-
-```sh
-emcmake cmake . -Bbuild
-cmake --build build --config Release
-ctest --test-dir build -C Release --output-on-failure
-```
-
-# Using LibreSSL
-
-## CMake
-
-Make a new folder in your project root (where your main `CMakeLists.txt` file is
-located) called CMake. Copy the `FindLibreSSL.cmake` file to that folder, and
-add the following line to your main `CMakeLists.txt`:
-
-```cmake
-set(CMAKE_MODULE_PATH "${CMAKE_CURRENT_SOURCE_DIR}/CMake;${CMAKE_MODULE_PATH}")
-```
-
-After your `add_executable` or `add_library` line in your `CMakeLists.txt` file
-add the following:
-
-```cmake
-find_package(LibreSSL REQUIRED)
-```
-
-It will tell CMake to find LibreSSL and if found will let you use the following
-3 interfaces in your `CMakeLists.txt` file:
-
-* LibreSSL::Crypto
-* LibreSSL::SSL
-* LibreSSL::TLS
-
-If you for example want to use the LibreSSL TLS library in your test program,
-include it like so (SSL and Crypto are required by TLS and included
-automatically too):
-
-```cmake
-target_link_libraries(test LibreSSL::TLS)
-```
-
-Full example:
-
-```cmake
-cmake_minimum_required(VERSION 3.10.0)
-
-set(CMAKE_MODULE_PATH "${CMAKE_CURRENT_SOURCE_DIR}/CMake;${CMAKE_MODULE_PATH}")
-
-project(test)
-
-add_executable(test Main.cpp)
-
-find_package(LibreSSL REQUIRED)
-
-target_link_libraries(test LibreSSL::TLS)
-```
-
-#### Linux
-
-Following the guide in the sections above to compile LibreSSL using make and
-running `sudo make install` will install LibreSSL to the `/usr/local/` folder,
-and will be found automatically by find_package. If your system installs it to
-another location, or you have placed them yourself in a different location, you
-can set the CMake variable `LIBRESSL_ROOT_DIR` to the correct path, to help
-CMake find the library.
-
-#### Windows
-
-Placing the library files in `C:/Program Files/LibreSSL/lib` and the include
-files in `C:/Program Files/LibreSSL/include` should let CMake find them
-automatically, but it is recommended that you use CMake-GUI to set the paths.
-It is more convenient as you can have the files in any folder you choose.
diff --git a/deps/curl/dep/libssh2/COPYING.txt b/deps/curl/dep/libssh2/COPYING.txt
deleted file mode 100644
index 6eb514684..000000000
--- a/deps/curl/dep/libssh2/COPYING.txt
+++ /dev/null
@@ -1,43 +0,0 @@
-/* Copyright (C) 2004-2007 Sara Golemon
- * Copyright (C) 2005,2006 Mikhail Gusarov
- * Copyright (C) 2006-2007 The Written Word, Inc.
- * Copyright (C) 2007 Eli Fant
- * Copyright (C) 2009-2023 Daniel Stenberg
- * Copyright (C) 2008, 2009 Simon Josefsson
- * Copyright (C) 2000 Markus Friedl
- * Copyright (C) 2015 Microsoft Corp.
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms,
- * with or without modification, are permitted provided
- * that the following conditions are met:
- *
- * Redistributions of source code must retain the above
- * copyright notice, this list of conditions and the
- * following disclaimer.
- *
- * Redistributions in binary form must reproduce the above
- * copyright notice, this list of conditions and the following
- * disclaimer in the documentation and/or other materials
- * provided with the distribution.
- *
- * Neither the name of the copyright holder nor the names
- * of any other contributors may be used to endorse or
- * promote products derived from this software without
- * specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
- * CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
- * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
- * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
- * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
- * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
- * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
- * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
- * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
- * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
- * USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
- * OF SUCH DAMAGE.
- */
diff --git a/deps/curl/dep/libssh2/NEWS.txt b/deps/curl/dep/libssh2/NEWS.txt
deleted file mode 100644
index b3bd14cba..000000000
--- a/deps/curl/dep/libssh2/NEWS.txt
+++ /dev/null
@@ -1,10896 +0,0 @@
- Changelog for the libssh2 project. Generated with git2news.pl
-
-Daniel Stenberg (16 Oct 2024)
-- RELEASE-NOTES: 1.11.1
-
-Viktor Szakats (8 Oct 2024)
-- RELEASE-NOTES: sync [ci skip]
-
-- [Anders Borum brought this change]
-
- session: support server banners up to 8192 bytes (was: 256)
-
- If server had banner exceeding 256 bytes there wasn't enough room in
- `_LIBSSH2_SESSION.banner_TxRx_banner`. Only the first 256 bytes would be
- read making the first packet read fail but also dooming key exchange as
- `session->remote.banner` didn't include everything.
-
- This change bumps the banner buffer to 8KB to match OpenSSH.
-
- Fixes #1442
- Closes #1443
-
-- RELEASE-NOTES: sync [ci skip]
-
-- cmake: sync and improve Find modules, add `pkg-config` native detection
-
- - sync code between Find modules.
- - wolfssl: replace `pkg-config` hints with native detection.
- - libgcrypt, mbedtls: add `pkg-config`-based native detection.
- - libgcrypt: add version detection.
- - limit `pkg-config` use for `UNIX`, vcpkg, and non-cross MinGW builds,
- and builds with no manual customization via `*_INCLUDE_DIR` or
- `*_LIBRARY`.
- - replace and sync Find module header comments.
- - ci: delete manual mbedTLS config that's now redundant.
-
- Based on similar work done in curl.
-
- Second attempt at #1420
- Closes #1445
-
-- cmake: initialize `LIBSSH2_LIBDIRS` [ci skip]
-
- Follow-up to c87f12963037b22e6b60411c9c2d6513c06e2f03 #1466
-
-- ci/appveyor: fix and bump OpenSSL 3 path, add path check
-
- Follow-up to b5e68bdc37c6afa0dc777794dda8307167919d04 #1461
- Closes #1468
-
-- cmake: link to OpenSSL::Crypto, not OpenSSL::SSL
-
- Follow-up to 82b09f9b3aae97f641fbcc2d746d2a6383abe857 #1322
- Follow-up to c84745e34e53f863ffba997ceeee7d43d1c63a4b #1128
- Cherry-picked from #1445
- Closes #1467
-
-- cmake: generate `LIBSSH2_PC_LIBS_PRIVATE` dynamically
-
- Generate `LIBSSH2_PC_LIBS_PRIVATE` from `LIBSSH2_LIBS`.
-
- Also add extra libdirs (`-L`) to `Libs` and `Libs.private`.
-
- Logic copied from curl.
-
- Closes #1466
-
-- cmake: initialize `LIBSSH2_PC_REQUIRES_PRIVATE` [ci skip]
-
- Follow-up to 0fce9dcc2909ffff5f4a1a1bc3d359fc7f409299 #1464
-
-- cmake: add comment about `ibssh2.pc.in` variables [ci skip]
-
-- cmake: support absolute `CMAKE_INSTALL_INCLUDEDIR`/`CMAKE_INSTALL_LIBDIR`
-
- in `libssh2.pc`.
-
- Also use `${exec_prefix}` (instead of `${prefix}`) as a base for `libdir`.
-
- Closes #1465
-
-- cmake: rename two variables and initialize them
-
- - `LIBRARIES` -> `LIBSSH2_LIBS`
- - `SOCKET_LIBRARIES` -> `LIBSSH2_LIBS_SOCKET`
-
- Also initialize them before use.
-
- Cherry-picked from #1445
- Closes #1464
-
-- ci/appveyor: reduce test runs (workaround for infrastructure permafails)
-
- Jobs consistently fail to connect to the test server (run in GHA) since
- 2024-Aug-29:
- https://ci.appveyor.com/project/libssh2org/libssh2/builds/50498393
-
- There was an earlier phase of failures one month before that, that got
- fixed by increasing the wait for the server in
- bf3af90b3f1bb14cf452df7a8eb55cc9088f3e7f.
-
- Thus, skip running tests in AppVeyor CI jobs, except: After some
- experiments, it seems that running tests with the last OpenSSL job and
- the last WinCrypt job _work_, which still leaves some coverage.
- It remains to be seen how stable this is.
-
- This is meant as a temporary fix till there is a solution to make all
- jobs run tests reliable like up until a few months ago.
-
- Closes #1461
-
-- [Patrick Monnerat brought this change]
-
- os400: drop vsprintf() use
-
- Follow-up to discussion in #1457
-
- Plus e-mail address update.
-
- Closes #1462
-
-- RELEASE-NOTES: sync [ci skip]
-
-Daniel Stenberg (30 Sep 2024)
-- openssl: free allocated resources when using openssl3
-
- Reproduces consistently with curl test case 638
-
- Closes #1459
-
-Viktor Szakats (28 Sep 2024)
-- checksrc: update, check all sources, fix fallouts
-
- update from curl:
- https://github.com/curl/curl/blob/cff75acfeca65738da8297aee0b30427b004b240/scripts/checksrc.pl
-
- Closes #1457
-
-- cmake: prefer `find_dependency()` in `libssh2-config.cmake`
-
- CMake manual suggest using `find_dependency()` (over `find_package()`)
- in `config.cmake` scripts.
-
- Ref: https://cmake.org/cmake/help/latest/module/CMakeFindDependencyMacro.html
-
- Closes #1460
-
-- ci: use Ninja with cmake
-
- Closes #1458
-
-GitHub (27 Sep 2024)
-- [dksslq brought this change]
-
- Fix memory leaks in _libssh2_ecdsa_curve_name_with_octal_new and _libssh2_ecdsa_verify (#1449)
-
- Better error handling in`_libssh2_ecdsa_curve_name_with_octal_new` and `_libssh2_ecdsa_verify` to prevent leaks.
-
- Credit: dksslq
-
-- [rolag brought this change]
-
- Fix unstable connections over nonblocking sockets (#1454)
-
- The `send_existing()` function allows partially sent packets to be sent
- fully before any further packets are sent. Originally this returned
- `LIBSSH2_ERROR_BAD_USE` when a different caller or thread tried to send
- an existing packet created by a different caller or thread causing the
- connection to disconnect. Commit 33dddd2f8ac3bc81 removed the return
- allowing any caller to continue sending another caller's packet. This
- caused connection instability as discussed in #1397 and confused the
- client and server causing occasional duplicate packets to be sent and
- giving the error `rcvd too much data` as discussed in #1431. We return
- `LIBSSH2_ERROR_EAGAIN` instead to allow existing callers to finish
- sending their own packets.
-
- Fixes #1397
- Fixes #1431
- Related #720
-
- Credit: klux21, rolag
-
-- [Will Cosgrove brought this change]
-
- Prevent possible double free of hostkey (#1452)
-
- NULL server hostkey based on fuzzer failure case.
-
-Viktor Szakats (7 Sep 2024)
-- cmake: tidy up syntax, minor improvements
-
- - make internal variables underscore-lowercase.
- - unfold lines.
- - fold lines setting header directories.
- - fix indent.
- - drop interim variable `EXAMPLES`.
- - initialize some variables before populating them.
- - clear a variable after use.
- - add `libssh2_dumpvars()` function for debugging.
- - allow to override default `CMAKE_UNITY_BUILD_BATCH_SIZE`.
- - bump up default `CMAKE_UNITY_BUILD_BATCH_SIZE` to 0 (was 32).
- - tidy up option descriptions.
-
- Closes #1446
-
-- cmake: rename mbedTLS and wolfSSL Find modules
-
- To match the curl ones.
-
- Cherry-picked from #1445
-
-- RELEASE-NOTES: sync [ci skip]
-
-- cmake: fixup version detection in mbedTLS find module
-
- - avoid warning with 2.x versions about missing header file while
- extracting the version number.
-
- - clear temp variables.
-
- Closes #1444
-
-- buildconf: drop
-
- Use `autoreconf -fi` instead.
-
- Follow-up to fc5d77881eb6bb179f831e626d15f4f29179aad5
- Closes #1441
-
-- [Michael Buckley brought this change]
-
- Implement chacha20-poly1305@openssh.com
-
- Probably the biggest and potentially most controversial change we have
- to upstream.
-
- Because earlier versions of OpenSSL implemented the algorithm before
- standardization, using an older version of OpenSSL can cause problems
- connecting to OpenSSH servers. Because of this, we use the public domain
- reference implementation instead of the crypto backends, just like
- OpenSSH does.
-
- We've been holding this one for a few years. We were about to upstream
- it around the same time as aes128gcm landed upstream, and the two
- changes were completely incompatible. Honestly, it took me weeks to
- reconcile these two implementations, and it could be much better.
-
- Our original implementation changed every crypt method to decrypt the
- entire message at once. the AESGCM implementation instead went with this
- firstlast design, where a firstlast paramater indicates whether this is
- the first or last call to the crypt method for each message. That added
- a lot of bookkeeping overhead, and wasn't compatible with the chacha
- public domain implementation.
-
- As far as I could tell, OpenSSH uses the technique of decrypting the
- entire message in one go, and doesn't have anything like firstlast.
- However, I could not get out aes128gcm implementation to work that way,
- nor could I get the chacha implementation to work with firstlast, so I
- split it down the middle and let each implementation work differently.
- It's kind of a mess, and probably should be cleaned up, but I don't have
- the time to spend on it anymore, and it's probably better to have
- everything upstream.
-
- Fixes #584
- Closes #1426
-
-- tidy-up: do/while formatting
-
- Also fix an indentation and delete empty lines.
-
- Closes #1440
-
-- wolfssl: drop header path hack
-
- The wolfSSL OpenSSL headers reside in `wolfssl/openssl/*.h`.
-
- Before this patch the wolfSSL OpenSSL compatibilty header includes were
- shared with the native OpenSSL codepath, and used `openssl/*h`. For
- wolfSSL builds this required a hack to append the
- `/wolfssl` directory to the header search path, to find
- the headers.
-
- This patch changes the source to use the correct header references,
- allowing to drop the header path hack.
-
- Also fix to use the correct variable to set up the header path in CMake:
- `WOLFSSL_INCLUDE_DIRS` (was: `WOLFSSL_INCLUDE_DIR`, without the `S`)
-
- Closes #1439
-
-- cmake: mbedTLS detection tidy-ups
-
- - set and use `MBEDTLS_INCLUDE_DIRS`.
- - stop marking `MBEDTLS_LIBRARIES` as advanced.
-
- Closes #1438
-
-- cmake: add quotes, delete ending dirseps
-
- Follow-up to 3fa5282d6284efba62dc591697e6a687152bdcb1 #1166
- Closes #1437
-
-- CI/appveyor: increase wait for SSH server on GHA [ci skip]
-
- Blind attempt to make AppVeyor CI tests work again.
-
-- disable DSA by default
-
- Also:
- - add `LIBSSH2_DSA_ENABLE` to enable it explicitly.
- - test the above option in CI.
- - say 'deprecated' in docs and public header.
- - disable DSA in the CI server config.
- (OpenSSH 9.8 no longer builds with it by default)
- https://www.openssh.com/txt/release-9.8
- Patch-by: Jose Quaresma
- - disable more DSA code when not enabled.
-
- Fixes #1433
- Closes #1435
-
-GitHub (30 Jul 2024)
-- [Viktor Szakats brought this change]
-
- tidy-up: link updates (#1434)
-
-Marc Hoersken (27 Jul 2024)
-- ci/GHA: revert concurrency and improve permissions
-
- Statuses are per AppVeyor event and commit, not pull-request.
- Also align permissions approach with curl, least priviledge.
-
- Partially reverts b08cfbc99fa4df3459db4e1ccf4263fd260e9b15.
-
-GitHub (23 Jul 2024)
-- [Will Cosgrove brought this change]
-
- Always init mbedtls_pk_context (#1430)
-
- In the failure case, mbedtls_pk_context could be free'd without first being initialized.
-
-- [Viktor Szakats brought this change]
-
- mbedtls: tidy-up (#1429)
-
-- [Will Cosgrove brought this change]
-
- Correctly initialize values (#1428)
-
- Fix regression with commit from #1421
-
-Viktor Szakats (14 Jul 2024)
-- RELEASE-NOTES: sync [ci skip]
-
-- [Seo Suchan brought this change]
-
- mbedtls: expose `mbedtls_pk_load_file()` for our use
-
- While it's moved to pk_internal, it won't removed in mbedTLS 3.6 LTS
- so it's safe to redeclare it on our side to find it.
-
- This is implementing emergency fix suggested from
- https://github.com/libssh2/libssh2/commit/2e4c5ec4627b3ecf4b6da16f365c011dec9a31b4#commitcomment-141379351
-
- Follow-up to e973493f992313b3be73f51d3f7ca6d52e288558 #1393
- Follow-up to 2e4c5ec4627b3ecf4b6da16f365c011dec9a31b4 #1349
- Closes #1421
-
-GitHub (13 Jul 2024)
-- [Viktor Szakats brought this change]
-
- ci/GHA: simplify mbedTLS build hack for autotools (#1425)
-
- Follow-up to e973493f992313b3be73f51d3f7ca6d52e288558 #1393
-
-- [Michael Buckley brought this change]
-
- Always check for null pointers before calling _libssh2_bn_set_word (#1423)
-
-- [Viktor Szakats brought this change]
-
- ci/GHA: FreeBSD 14.1, actions bump (#1424)
-
-- [Michael Buckley brought this change]
-
- Increase SFTP_HANDLE_MAXLEN back to 4092 (#1422)
-
- Match OpenSSH for compatibility.
-
-Viktor Szakats (10 Jul 2024)
-- ci/GHA: tidy up casing [ci skip]
-
-- REUSE: fix typo in comment
-
-- REUSE: shorten and improve
-
- Follow-up to 70b8bf314cf4566a7529c5d6eae63097a926abb0 #1419
-
-- REUSE: upgrade to `REUSE.toml`
-
- Closes #1419
-
-- build: stop detecting `sys/param.h` header
-
- This header is no longer used.
-
- Follow-up to 12427f4fb8e789adcee4a6e30974932883915e88 #1415
- Closes #1418
-
-- [Nicolas Mora brought this change]
-
- tests: avoid using `MAXPATHLEN`, for portability
-
- `MAXPATHLEN` is not present in some systems, e.g. GNU Hurd.
-
- Co-authored-by: Viktor Szakats
- Ref: 54bef4c5dad868a9d45fdbfca9729b191c0abab5 #198
- Fixes #1414
- Closes #1415
-
-- cmake: sync formatting in `cmake/Find*` modules
-
-- [Michael Buckley brought this change]
-
- sftp: implement posix-rename@openssh.com
-
- Add a new function `libssh2_sftp_posix_rename_ex()` and
- `libssh2_sftp_posix_rename()`, which implement
- the posix-rename@openssh.com extension.
-
- If the server does not support this extension, the function returns
- `LIBSSH2_FX_OP_UNSUPPORTED` and it's up to the user to recover, possibly
- by calling `libssh2_sftp_rename()`.
-
- Co-authored-by: Viktor Szakats (bump to size_t)
- Closes #1386
-
-- src: use `UINT32_MAX`
-
- Needs to be defined for platforms missing it, e.g. VS2008.
-
- Closes #1413
-
-GitHub (25 Jun 2024)
-- [Michael Buckley brought this change]
-
- Fix a memory leak in key exchange. (#1412)
-
- Original fix submitted as a patch by Trzik.
-
- Co-authored-by: Michael Buckley
-
-Viktor Szakats (25 Jun 2024)
-- RELEASE-NOTES: sync [ci skip]
-
-- wolfssl: fix `EVP_Cipher()` use with v5.6.0 and older
-
- Add workaround for the wolfSSL `EVP_Cipher(*p, NULL, NULL, 0)` bug to
- make libssh2 work with wolfSSL v5.6.0 and older.
-
- wolfSSL fixed this issue in v5.7.0:
- https://github.com/wolfSSL/wolfssl/pull/7143
- https://github.com/wolfSSL/wolfssl/commit/b0de0a1c95119786cf5651dd76dd7d7bdfac5a04
-
- Without our local workaround:
-
- - v5.3.0 and older fail most tests:
- Ref: https://github.com/libssh2/libssh2/actions/runs/9646827522/job/26604211476#step:17:1263
-
- - v5.4.0, v5.5.x, v5.6.0 fail these:
- ```
- 29 - test_read-aes128-cbc (Failed)
- 30 - test_read-aes128-ctr (Failed)
- 32 - test_read-aes192-cbc (Failed)
- 33 - test_read-aes192-ctr (Failed)
- 34 - test_read-aes256-cbc (Failed)
- 35 - test_read-aes256-ctr (Failed)
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/9646827522/job/26604233819#step:17:978
-
- Oddly enough the workaround breaks OpenSSL tests, so only enable it for
- the affected wolfSSL versions.
-
- Also add new build-from-source wolfSSL CI job to test the new codepath.
-
- wolfSSL has a build bug where `wolfssl/options.h` and
- `wolfssl/version.h` are not copied to the `install` destination with
- autotools. With CMake it has a different bug where `wolfcrypt/sp_int.h`
- is not copied (with v5.4.0). And another with CMake where `FIPS_mode()`
- remains missing (with v5.6.0 and earlier.)
-
- Therefore use CMake with v5.5.4 and a workaround for `FIPS_mode()`.
- Another option is autotools with v5.4.0 and a workaround for `install`,
- but CMake builds quicker.
-
- Regression-from 3c953c05d67eb1ebcfd3316f279f12c4b1d600b4 #797
- Fixes #1020
- Fixes #1299
- Assisted-by: Michael Buckley via #1394
- Closes #1394 (another attempt to fix the mentioned wolfSSL bug)
- Closes #1407
-
-- wolfssl: bump version in upstream issue comment [ci skip]
-
-- wolfssl: require v5.4.0 for AES-GCM
-
- Earlier versions crash while running tests.
-
- This patch is part of a series of fixes to make wolfSSL AES-GCM support
- work together with libssh2.
-
- Possibly related is this wolfSSL bugfix patch, released in v5.4.0:
- https://github.com/wolfSSL/wolfssl/pull/5205
- https://github.com/wolfSSL/wolfssl/commit/fb3c611275dfe454c331baa0818445a0406c208a
- "Fix another AES-GCM EVP control command issue"
-
- Ref: #1020
- Ref: #1299
- Cherry-picked from #1407
- Closes #1411
-
-- tests: fix excluding AES-GCM tests
-
- Replace hard-coded crypto backends and rely on `LIBSSH2_GCM` macro
- to decide whether to run AES-GCM tests.
-
- Without this, build attempted to run AES-GCM tests (and failed)
- for crypto backends that have conditional support for this feature, e.g.
- wolfSSL without the necessary features built-in
- (as in before Homewbrew wolfssl 5.7.0_1, or OpenSSL v1.1.0 and older).
-
- This patch is part of a series of fixes to make wolfSSL AES-GCM support
- work together with libssh2.
-
- Cherry-picked from #1407
- Closes #1410
-
-- ci/GHA: fix wolfSSL-from-source AES-GCM tests
-
- Turns out these tests:
- ```
- 31 - test_read-aes128-gcm@openssh.com (Failed)
- 36 - test_read-aes256-gcm@openssh.com (Failed)
- ```
- were failing because AES-GCM wasn't enabled in libssh2. This in turn
- happened because the `WOLFSSL_AESGCM_STREAM` macro wasn't enabled while
- building wolfSSL. Which happened because this macro isn't enabled by
- any CMake-level wolfSSL option. Passing it as `CPPFLAGS` fixes it.
-
- This allows enabling tests with wolfSSL 5.7.0.
-
- Follow-up to d4cea53f53c78febad14b4caa600e25d1aaf92fd #1408
- Closes #1409
-
-- ci/GHA: add Linux job with latest wolfSSL built from source
-
- After this patch it's possible to run tests with wolfSSL 5.7.0.
-
- wolfSSL 5.7.0 fixes this bug that affects open issues #1020 and #1299:
- https://github.com/wolfSSL/wolfssl/pull/7143
-
- `-DWOLFSSL_OPENSSLALL=ON` is necessary for `wolfSSL_FIPS_mode()`
-
- Closes #1408
-
-- ci/GHA: tidy up build-from-source steps [ci skip]
-
- - make curl downloads less verbose.
-
- - fix cmake warning:
- ```
- CMake Warning:
- No source or binary directory provided. Both will be assumed to be the
- same as the current working directory, but note that this warning will
- become a fatal error in future CMake releases.
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/9509866494/job/26213472410#step:5:32
-
-- [Adam brought this change]
-
- src: fix type warning in `libssh2_sftp_unlink` macro
-
- The `libssh2_sftp_unlink` macro was implicitly casting the `size_t`
- returned by `strlen` to the `unsigned int` type expected by
- `libssh2_sftp_unlink_ex`.
-
- This fix adds an explicit cast to match similar macro definitions in
- the same file (e.g. `libssh2_sftp_rename`, `libssh2_sftp_mkdir`).
-
- Closes #1406
-
-- libssh2.pc: reference mbedcrypto pkgconfig
-
- mbedtls 3.6.0 got pkgconfig support:
- https://github.com/Mbed-TLS/mbedtls/commit/a4d17b34f354557838e05d2cb47200e8dcaaf59b
-
- Reference it from `libssh2.pc`.
-
- Closes #1405
-
-- tidy-up: typo in comment [ci skip]
-
-- RELEASE-NOTES: sync [ci skip]
-
- Also bump planned deprecation dates.
-
-- ci/GHA: show configure logs on failure and other tidy-ups
-
- - dump cmake error log on configure failure. (for cmake 3.26 and newer)
- - dump `config.log` on autotools configure failure.
- - convert specs filename to Windows format before passing to CMake.
- - add missing quotes.
-
- Closes #1403
-
-- ci/GHA: bump parallel jobs to nproc+1
-
- Ref: https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners/about-github-hosted-runners#standard-github-hosted-runners-for-public-repositories
-
- Closes #1402
-
-- ci/GHA: show test logs on failure
-
- Closes #1401
-
-- ci/GHA: fix `Dockerfile` failing after Ubuntu package update
-
- Likely due an upstream Ubuntu package update (requiring an apt-get
- install call beforehand), tests run via autotools started failing with
- no change in the libssh2 repo:
- ```
- FAIL: test_aa_warmup
- ====================
-
- Error running command 'docker build --quiet -t libssh2/openssh_server %s' (exit 256): Dockerfile:10
- --------------------
- 8 | && apt-get clean \
- 9 | && rm -rf /var/lib/apt/lists/*
- 10 | >>> RUN mkdir /var/run/sshd
- 11 |
- 12 | # Chmodding because, when building on Windows, files are copied in with
- --------------------
- ERROR: failed to solve: process "/bin/sh -c mkdir /var/run/sshd" did not complete successfully: exit code: 1
-
- Failed to build docker image
- Cannot stop session - none started
- Cannot stop container - none started
- Command: docker build --quiet -t libssh2/openssh_server ../../tests/openssh_server
- FAIL test_aa_warmup (exit status: 1)
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/9322194756/job/25662748095#step:11:390
-
- Fix it by skipping `mkdir` if `/var/run/sshd` already exists.
-
- (Why cmake-based jobs aren't affected, I don't know.)
-
- Ref: https://github.com/libssh2/libssh2/commit/50143d5867d35df76a6cf589ca8a13b22105aa64#commitcomment-142560875
- Closes #1400
-
-- ci/GHA: use ubuntu-latest with OmniOS job
-
- It's the same as ubuntu-22.04.
-
- Also update OmniOS package search link.
-
-- ci: disable dependency tracking in autotools builds
-
- For better build performance. Dependency tracking causes a build
- overhead while compiling to help a subsequent build, but in CI there is
- never one and the extra work is discarded.
-
- Closes #1396
-
-- mbedtls: fail to compile with v3.6.0 outside CI
-
- A compile-time failure is preferred over an unexpected one at
- runtime.
-
- The problem is silenced with a macro in CI and this macro will have
- to be added to more platforms when mbedTLS v3.6.0 reaches them.
-
- Follow-up to 2e4c5ec4627b3ecf4b6da16f365c011dec9a31b4 #1349
- Closes #1393
-
-- tests: drop default cygpath option `-u`
-
-- tidy-up: fix typo found by codespell
-
- Ref: https://github.com/libssh2/libssh2/actions/runs/9224795055/job/25380857082?pr=1393#step:4:5
-
-- ci/GHA: shell syntax tidy-up
-
- Closes #1390
-
-- RELEASE-NOTES: sync [ci skip]
-
-- ci/GHA: bump NetBSD/OpenBSD, add NetBSD arm64 job
-
- OpenBSD arm64 jobs were very slow, so skipped that.
-
- Closes #1388
-
-- autotools: fix to update `LDFLAGS` for each detected dependency
-
- autotools lib detection routine failed to extend LDFLAGS for each
- detection. This could cause successful detection of a dependency, but
- later failing to use it. This did not cause an issue as long as all
- dependencies lived under the same prefix, but started breaking on macOS
- ARM + Homebrew where this was no longer true for mbedTLS and zlib in
- particular.
-
- Follow-up to 844115393bffb4e92c6569204cbe4cd8e553480d #1381
- Follow-up to ae2770de25949bc7c74e60b4cc6a011bbe1d3d7c #1377
- Closes #1384
-
-GitHub (8 May 2024)
-- [Michael Buckley brought this change]
-
- OpenSSL 3: Fix calculating DSA public key (#1380)
-
-Viktor Szakats (8 May 2024)
-- ci/GHA: tidy-up wolfSSL autotools config on macOS
-
- Closes #1383
-
-- ci/GHA: shorter mbedTLS autotools workaround
-
- Follow-up to 844115393bffb4e92c6569204cbe4cd8e553480d #1381
- Closes #1382
-
-GitHub (8 May 2024)
-- [Michael Buckley brought this change]
-
- ci: fix mbedtls runners on macOS (#1381)
-
- Sets LDFLAGS while configuring the autoconf mbedTLS build for macOS.
-
-Viktor Szakats (29 Apr 2024)
-- RELEASE-NOTES: sync [ci skip]
-
-- [binary1248 brought this change]
-
- wincng: fix `DH_GEX_MAXGROUP` set higher than supported
-
- In 1c3a03ebc3166cf69735111aba2b8cee57cdba51 #493,
- `LIBSSH2_DH_GEX_MAXGROUP` was introduced to specify
- crypto-backend-specific modulus sizes. Unfortunately, the max size for
- the wincng DH modulus was defined to 8192, probably because this is the
- value most other backends support.
-
- According to Microsoft documentation [1], `BCryptGenerateKeyPair`
- currently only supports up to 4096-bit keys when the selected algorithm
- is `BCRYPT_DH_ALGORITHM`. Requesting larger keys when calling
- `BCryptGenerateKeyPair` in `_libssh2_dh_key_pair` always results in
- `STATUS_INVALID_PARAMETER` being returned and ultimately key exchange
- failing.
-
- When attempting to connect to any server that offers 8192 bit DH, this
- causes key exchange to always fail when using the wincng backend.
- Reducing `LIBSSH2_DH_GEX_MAXGROUP` to 4096 fixes the issue.
-
- [1] https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgeneratekeypair
-
- Closes #1372
-
-- build: silence warnings inside `FD_SET()`/`FD_ISSET()` macros
-
- Use an ugly workaround to silence `-Wsign-conversion` warnings triggered
- by the internals of `FD_SET()`/`FD_ISSET()` macros. They've been showing
- up in OmniOS CI builds when compiling `example` programs. They also have
- been seen with older Cygwin and other envs and configurations.
-
- Also scope two related variables in examples.
-
- E.g.:
- ```
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- 251 | FD_SET(forwardsock, &fds);
- | ^~~~~~
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long unsigned int' from 'long int' may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long int' from 'long unsigned int' may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:259:18: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- 259 | if(rc && FD_ISSET(forwardsock, &fds)) {
- | ^~~~~~~~
- ../../example/direct_tcpip.c:259:18: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:259:18: warning: conversion to 'long unsigned int' from 'long int' may change the sign of the result [-Wsign-conversion]
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/8854199687/job/24316762831#step:3:2020
-
- Closes #1379
-
-- autotools: use `AM_CFLAGS`
-
- Use `AM_CFLAGS` to pass custom, per-target C flags. This replaces using
- `CFLAGS` which triggered this warning when running `autoreconf -fi`:
- ```
- tests/Makefile.am:8: warning: 'CFLAGS' is a user variable, you should not override it;
- tests/Makefile.am:8: use 'AM_CFLAGS' instead
- ```
- (Only for `tests`, even though `example` and `src` also used this
- method. The warning is also missing from curl, that also uses
- `CFLAGS`.)
-
- Follow-up to 3ec53f3ea26f61cbf2e0fbbeccb852fca7f9b156 #1286
- Closes #1378
-
-GitHub (25 Apr 2024)
-- [Viktor Szakats brought this change]
-
- ci/GHA: fix gcrypt with autotools/macOS/Homebrew/ARM64 (#1377)
-
- mbedtls configure fails to detect anything due to this:
- ```
- configure:23101: gcc -o conftest -g -O2 -I/opt/homebrew/include conftest.c -lmbedcrypto -lz >&5
- ld: library 'mbedcrypto' not found
- clang: error: linker command failed with exit code 1 (use -v to see invocation)
- ```
-
-Viktor Szakats (25 Apr 2024)
-- autotools: delete bogus square bracket from help text [ci skip]
-
- Follow-up to 3f98bfb0900b5e68445a339cfebc60b307a24650 #1368
-
-GitHub (25 Apr 2024)
-- [Viktor Szakats brought this change]
-
- ci/GHA: fix verbose option for autotools jobs (#1376)
-
- Also enable verbose for macOS `make` step.
-
-- [Viktor Szakats brought this change]
-
- ci/GHA: dump `config.log` on failure for macOS autotools jobs (#1375)
-
-- [Viktor Szakats brought this change]
-
- ci/GHA: fix `autoreconf` failure on macOS/Homebrew (#1374)
-
- By manually installing `libtool`.
-
- ```
- autoreconf -fi
- shell: /bin/bash -e {0}
- configure.ac:75: error: possibly undefined macro: AC_LIBTOOL_WIN32_DLL
- If this token and others are legitimate, please use m4_pattern_allow.
- See the Autoconf documentation.
- configure.ac:76: error: possibly undefined macro: AC_PROG_LIBTOOL
- autoreconf: error: /opt/homebrew/Cellar/autoconf/2.72/bin/autoconf failed with exit status: 1
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/8833608758/job/24253334557#step:4:1
-
-- [Viktor Szakats brought this change]
-
- ci/GHA: fixup Homebrew location (for ARM runners) (#1373)
-
- GHA macOS runners became ARM64 machines. Make the Homebrew prefix
- dynamic to adapt to these installations.
-
-Viktor Szakats (14 Apr 2024)
-- RELEASE-NOTES: sync [ci skip]
-
-- [Patrick Monnerat brought this change]
-
- os400: Add two recent files to the distribution
-
- Closes #1364
-
-- wincng: add to ci/GHA, add `./configure` option `--enable-ecdsa-wincng`
-
- - add `./configure` option `--enable-ecdsa-wincng`
-
- - add WinCNG autotools jobs to GHA.
-
- - enable WinCNG ECDSA in some GHA jobs (both CMake and autotools).
-
- Follow-up to 3e72343737e5b17ac98236c03d5591d429b119ae #1315
- Closes #1368
-
-GitHub (14 Apr 2024)
-- [Johannes Passing brought this change]
-
- wincng: add ECDSA support for host and user authentication (#1315)
-
- The WinCNG backend currently only supports DSA and RSA. This PR
- adds ECDSA support for host and user authentication.
-
- * Disable WinCNG ECDSA support by default to maintain backward
- compatibility for projects that target versions below Windows 10.
-
- * Add cmake option `ENABLE_ECDSA_WINCNG` to guard ECDSA support.
-
- * Update AppVeyor job matrix to only enable ECDSA on Server 2016+
-
-Viktor Szakats (14 Apr 2024)
-- ci: enable Unity mode for most CMake builds
-
- Ref: 7129ea9ca8cca86dac80a6bac2d63937987efe9d #1034
- Closes #1367
-
-- os400: fix shellcheck warnings in scripts (fixups)
-
- - Build scripts must be executed by the os/400 shell (sh), not bash which
- is a PASE program: The `-ot` non-POSIX test extension works in os/400 as
- well. Ref: https://github.com/libssh2/libssh2/pull/1364#issue-2241646754
-
- - Drop/fixup mods trying to make some syntax highlighters happier.
-
- Follow-up to c6625707b94d9093f38f1a0a4d89c11b64f12ba8 #1358
- Assisted-by: Patrick Monnerat
- Closes #1364
- Closes #1366
-
-- cmake: style tidy-up (more)
-
- Follow-up to 3fa5282d6284efba62dc591697e6a687152bdcb1 #1166
- Closes #1365
-
-- RELEASE-NOTES: sync [ci skip]
-
-- os400: fix shellcheck warnings in scripts
-
- - use `$()` instead of backticks, and re-arrange double-quotes inside.
- - add missing `|| exit 1` to `cd` calls. (could be dropped by using `set -eu`.)
- - add `-n` to a few `if`s.
- - shorten redirections by using `{} >` (as shellcheck recommended).
- - silence warnings where variables were detected as unused (SC2034).
- - a couple misc updates to silence warnings.
- - switch to bash shebang for `-ot` feature.
- - split two lines to unbreak syntax highlighting in my editor. (`$(expr \`, `$(dirname \`)
-
- Also enable CI checks for OS/400 shell scripts.
-
- Ref: d88b9bcdafe9d19aad2fb120d0a0acb3edab64f7
- Closes #1358
-
-- RELEASE-NOTES: sync [ci skip]
-
-- ci: add shellcheck job and script
-
- Add FIXME for OS/400 scripts.
-
- Cherry-picked from #1358
-
-- tests: fix shellcheck issues in `test_sshd.test`
-
- Cherry-picked from #1358
-
-- RELEASE-NOTES: sync [ci skip]
-
-GitHub (9 Apr 2024)
-- [Viktor Szakats brought this change]
-
- ci/appveyor: re-enable OpenSSL 3, also bump to 3.2.1 (#1363)
-
- Ref: 104744f4a523de574ce3767c50948d9b8385be4c #1348
-
-Viktor Szakats (9 Apr 2024)
-- ci: use a better test timestamp [ci skip]
-
- Mar 27 2024 08:00:00 GMT+0000
-
- Follow-up to 2d765e454d98b794a5e5bbc497b1fcba4a9b8c4b #1360
-
-GitHub (9 Apr 2024)
-- [Viktor Szakats brought this change]
-
- ci: verify build and install from tarball (#1362)
-
- Install verification based on:
- https://github.com/curl/curl/blob/28c5ddf13ac311d10bc4e8f9fc4ce0858a19b888/scripts/installcheck.sh
-
-Viktor Szakats (9 Apr 2024)
-- tidy-up: dir names, command-line [ci skip]
-
- Follow-up to 2d765e454d98b794a5e5bbc497b1fcba4a9b8c4b #1360
-
-- cmake: tidy up function name casing in `CopyRuntimeDependencies.cmake`
-
- Use lowercase to match callers.
-
-GitHub (9 Apr 2024)
-- [Viktor Szakats brought this change]
-
- ci: add reproducibility test for `maketgz` (#1360)
-
-Viktor Szakats (9 Apr 2024)
-- maketgz: add reproducible dir entries to tarballs
-
- In the initial implementation of reproducible tarballs, they were
- missing directory entries, while .zip archives had them. It meant
- that on extracting the tarball, on-disk directory entries got the
- current timestamp.
-
- This patch fixes this by including directory entries in the tarball,
- with reproducible timestamps. It also moves sorting inside tar,
- to ensure reproducible directory entry timestamps on extract
- (without the need of `--delay-directory-restore` option, when
- extracting with GNU tar. BSD tar got that right by default.)
-
- GNU tar 1.28 (2014-07-28) introduced `--sort=`.
-
- Follow-up to d52fe1b4358fab891037d86b5c73c098079567db #1357
- Closes #1359
-
-- ci/GHA: improve version number in `maketgz` test
-
- Follow-up to cba7f97506c1b8e5ff131bbbc57b5796ac634c56 #1353
-
-GitHub (8 Apr 2024)
-- [Michael Buckley brought this change]
-
- src: check the return value from `_libssh2_bn_*()` functions (#1354)
-
- Found by oss-fuzz. In `diffie_hellman_sha_algo()`, we were calling
- `_libssh2_bn_from_bin()` with data recieved by the server without
- checking whether that data was zero-length or ridiculously long.
- In the OpenSSL backend, this would cause `_libssh2_bn_from_bin()`
- to fail an allocation, which would eventually lead to a NULL
- dereference when the bignum was used.
-
- Add the same check for `_libssh2_bn_set_word()` and
- `_libssh2_bn_to_bin()`.
-
-Viktor Szakats (8 Apr 2024)
-- maketgz: reproducible tarballs/zip, display tarball hashes
-
- - support `SOURCE_DATE_EPOCH` for reproducibility.
- - make tarballs reproducible.
- - make file timestamps in tarball/zip reproducible.
- - make directory timestamps in zip reproducible.
- - make timestamps of tarballs/zip reproducible.
- - make file order in tarball/zip reproducible.
- - use POSIX ustar tarball format to avoid supply chain vulnerability: https://seclists.org/oss-sec/2021/q4/0
- - make uid/gid in tarball reproducible.
- - omit owner user/group names from tarball for reproducibility and privacy.
- - omit current timestamp from .gz header for reproducibility.
- - display SHA-256 hashes of produced tarballs/zip. (Requires `sha256sum`)
- - re-sync formatting with curl's `maketgz`.
-
- Closes #1357
-
-- maketgz: `set -eu`, reproducibility, improve zip, add CI test
-
- - set bash `-eu`.
- - fix bash `-eu` issues.
- - apply `TZ=UTC` and `LC_ALL=C` for reproducibility.
- - sort `.zip` entries for reproducibility.
- - zip with `--no-extra` for reproducibliity.
- - use maximum zip compression.
- - add the gpg sign command-line. Copied from curl.
- - add CI test for `maketgz`.
-
- Closes #1353
-
-- RELEASE-NOTES: sync and cleanups [ci skip]
-
-GitHub (3 Apr 2024)
-- [Tejaswikandula brought this change]
-
- Support RSA SHA2 cert-based authentication (rsa-sha2-512_cert and rsa-sha2-256_cert) (#1314)
-
- Replicating OpenSSH's behavior to handle RSA certificate authentication
- differently based on the remote server version.
-
- 1. For OpenSSH versions >= 7.8, ascertain server's support for RSA Cert
- types by checking if the certificate's signature type is present in
- the `server-sig-algs`.
-
- 2. For OpenSSH versions < 7.8, Set the "SSH_BUG_SIGTYPE" flag when the
- RSA key in question is a certificate to ignore `server-sig-algs` and
- only offer ssh-rsa signature algorithm for RSA certs.
-
- This arises from the fact that OpenSSH versions up to 7.7 accept
- RSA-SHA2 keys but not RSA-SHA2 certificate types. Although OpenSSH <=7.7
- includes RSA-SHA2 keys in the `server-sig-algs`, versions <=7.7 do not
- actually support RSA certs. Therefore, server sending RSA-SHA2 keys in
- `server-sig-algs` should not be interpreted as indicating support for
- RSA-SHA2 certs. So, `server-sig-algs` are ignored when the RSA key in
- question is a cert, and the remote server version is 7.7 or below.
-
- Relevant sections of the OpenSSH source code:
-
-
-
-
- Assisted-by: Will Cosgrove
- Reviewed-by: Viktor Szakats
-
-Viktor Szakats (3 Apr 2024)
-- RELEASE-NOTES: sync [ci skip]
-
- Also fix to include 3-digit issue/PR references.
-
-- mbedtls: add workaround + FIXME to build with 3.6.0
-
- This is just a stub to make `_libssh2_mbedtls_ecdsa_new_private`
- compile.
-
- mbedtls 3.6.0 silently deleted its public API `mbedtls_pk_load_file`,
- which this function relies on.
-
- Closes #1349
-
-GitHub (3 Apr 2024)
-- [Viktor Szakats brought this change]
-
- ci/appveyor: OpenSSL 3 no longer found by CMake, revert to 1.1.1 (#1348)
-
- Ref: https://github.com/appveyor/build-images/commit/702e8cdca01f28f6a40687783f493c786cebbe2c
- Ref: https://github.com/appveyor/build-images/pull/149
-
-Viktor Szakats (3 Apr 2024)
-- docs: improve `libssh2_userauth_publickey_from*` manpages
-
- Reported-by: Lyndon Brown
- Assisted-by: Ryan Kelley
- Fixes #652
- Closes #1308
- Closes #xxxx
-
-- RELEASE-NOTES: sync [ci skip]
-
-GitHub (2 Apr 2024)
-- [Viktor Szakats brought this change]
-
- test debian:testing-slim post xz backdoor removal (#1346)
-
- The unexplained CI fallouts are gone with the latest debian:testing (20240330).
-
- Ref #1328 #1329 #1338.
- Closes #1346
-
-Viktor Szakats (30 Mar 2024)
-- ci: use Linux runner for BSDs, add arm64 FreeBSD 14 job
-
- - bump cross-platform-actions to 0.23.0.
- Ref: https://github.com/cross-platform-actions/action/releases/tag/v0.23.0
-
- - switch to Linux runners (from macOS) for cross-platform-actions.
- It's significantly faster.
-
- - switch back FreeBSD 14 job to cross-platform-actions.
- Also switch back to default shell.
-
- - add FreeBSD 14 arm64 job.
-
- Closes #1343
-
-- ci: use single quotes in yaml [ci skip]
-
-- ci: tidy-up job order [ci skip]
-
-- build: drop `-Wformat-nonliteral` warning suppressions
-
- Also markup a vararg function as such.
-
- In functions marked up as vararg functions, there is no need to suppress
- `-Wformat-nonliteral` warnings. It's done automatically by the compiler.
-
- Closes #1342
-
-- ci: delete flaky FreeBSD 13.2 job
-
- Keep FreeBSD 14.
-
-- RELEASE-NOTES: sync [ci skip]
-
-- example: restore `sys/time.h` for AIX
-
- In AIX, `time.h` header file doesn't have definitions like
- `fd_set`, `struct timeval`, which are found in `sys/time.h`.
-
- Add `sys/time.h` to files affected when available.
-
- Regression from e53aae0e16dbf53ddd1a4fcfc50e365a15fcb8b9 #1001.
-
- Reported-by: shubhamhii on GitHub
- Assisted-by: shubhamhii on GitHub
- Fixes #1334
- Fixes #1335
- Closes #1340
-
-- userauth: avoid oob with huge interactive kbd response
-
- - If the length of a response is `UINT_MAX - 3` or larger, an unsigned
- integer overflow occurs on 64-bit systems. Avoid such truncation to
- always allocate enough memory to avoid subsequent out of boundary
- writes.
-
- Patch-by: Tobias Stoeckmann
-
- - also add FIXME to bump up length field to `size_t` (ABI break)
-
- Closes #1337
-
-GitHub (28 Mar 2024)
-- [Josef Cejka brought this change]
-
- transport: check ETM on remote end when receiving (#1332)
-
- We should check if encrypt-then-MAC feature is enabled in remote end's
- configuration.
-
- Fixes #1331
-
-- [Josef Cejka brought this change]
-
- kex: always add extension indicators to kex_algorithms (#1327)
-
- KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
- are in default kex method list but they were lost after configuring
- custom kex method list in libssh2_session_method_pref().
-
- Fixes #1326
-
-- [Jiwoo Park brought this change]
-
- cmake: use the imported target of FindOpenSSL module (#1322)
-
- * Use the imported target of FindOpenSSL module
- * Build libssh2 before test runner
- * Use find_package() in the CMake config file
- * Use find_dependency() rather than find_package()
- * Install CMake module files and use them in the config file
- * Use elseif() to choose the crypto backend
-
-- [Andrei Augustin brought this change]
-
- docs: update INSTALL_AUTOTOOLS (#1316)
-
- corrected --with-libmbedtls-prefix to current option --with-libmbedcrypto-prefix
-
-Viktor Szakats (28 Mar 2024)
-- ci: don't parallelize `distcheck` job
-
- A while ago the `distcheck` CI job became flaky. This continued after
- switching to Debian stable (from testing). Try stabilzing it by running
- it single-threaded.
-
- Closes #1339
-
-- Dockerfile: switch to Debian stable (from testing)
-
- This fixes flakiness experienced recently with two OpenSSL jobs and one
- libgcrypt job, and/or intermittently causing all Docker-based tests to
- fail.
-
- Reported-by: András Fekete
- Fixes #1328
- Fixes #1329
- Closes #1338
-
-GitHub (22 Feb 2024)
-- [Michael Buckley brought this change]
-
- Supply empty hash functions for mac_method_hmac_aesgcm to avoid a crash when e.g. setting LIBSSH2_METHOD_CRYPT_CS (#1321)
-
-- [Michael Buckley brought this change]
-
- gen_publickey_from_dsa: Initialize BIGNUMs to NULL for OpenSSL 3 (#1320)
-
-Viktor Szakats (23 Jan 2024)
-- RELEASE-NOTES: add algo deprecation notices [ci skip]
-
- Closes #1307
-
-- RELEASE-NOTES: sync [ci skip]
-
-GitHub (22 Jan 2024)
-- [Juliusz Sosinowicz brought this change]
-
- wolfssl: enable debug logging in wolfSSL when compiled in (#1310)
-
- Co-authored-by: Viktor Szakats
-
-- [monnerat brought this change]
-
- os400: maintain up to date (#1309)
-
- - Handle MD5 conditionals in os400qc3.
- - Check for errors in os400qc3 pbkdf1.
- - Implement an optional build options override file.
- - Sync ILE/RPG copy files with current C header files.
- - Allow a null session within a string conversion cache.
- - Add an ILE/RPG example.
- - Adjust outdated copyrights in changed files.
-
-Viktor Szakats (18 Jan 2024)
-- RELEASE-NOTES: sync
-
-- src: check hash update/final success
-
- Also:
- - delete unused internal macro `libssh2_md5()` where defined.
- - prefix `libssh2_os400qc3_hash*()` function names with underscore.
- These are public/visible, but internal.
- - add FIXMEs to OS/400 code to verify update/final calls; some OS API,
- some internal.
-
- Ref: https://github.com/libssh2/libssh2/pull/1301#discussion_r1446861650
- Reviewed-by: Michael Buckley
- Reviewed-by: Patrick Monnerat
- Closes #1303
-
-- RELEASE-NOTES: sync [ci skip]
-
-GitHub (18 Jan 2024)
-- [Ryan Kelley brought this change]
-
- openssl: fix cppcheck found NULL dereferences (#1304)
-
- * Fix NULL dereference in gen_publickey_from_rsa_evp and
- gen_publickey_from_dsa_evp.
- * Add checks for en_publickey_from_ec_evp and en_publickey_from_ed_evp
-
-Viktor Szakats (12 Jan 2024)
-- openssl: delete internal `read_openssh_private_key_from_memory()`
-
- It was wrapping another internal function with no added logic.
-
- Closes #1306
-
-- openssl: formatting/whitespace
-
- Also use `NULL` instead of `0` for pointers.
-
- Closes #1305
-
-- HACKING-CRYPTO: more fixups [ci skip]
-
- Follow-up to f64885b6ab9bbdae2da9ebd70f4dd5cea56e838a #1297
-
-- HACKING-CRYPTO: fixups [ci skip]
-
- Follow-up to f64885b6ab9bbdae2da9ebd70f4dd5cea56e838a #1297
-
-- RELEASE-NOTES: sync [ci skip]
-
-- src: check hash init success
-
- Before this patch, SHA2 and SHA1 init function results were cast to
- `void`. This patch makes sure to verify these values.
-
- Also:
- - exclude an `assert(0)` from release builds in `_libssh2_sha_algo_ctx_init()`.
- (return error instead)
- - fix indentation / whitespace
-
- Reviewed-by: Michael Buckley
- Closes #1301
-
-- mac: handle low-level errors
-
- - update low-level hmac functions from macros to functions.
- - libgcrypt: propagate low-level hmac errors.
- - libgcrypt: add error checks for hmac calls.
- - os400qc3: add error checks, propagate them.
- Assisted-by: Patrick Monnerat
- - mbedtls: fix propagating low-level hmac errors.
- - wincng: fix propagating low-level hmac errors.
- - mac: verify success of low-level hmac functions.
- - knownhost: verify success of low-level hmac functions.
- - transport: verify success of MAC hash call.
- - minor type cleanup in wincng.
- - delete unused ripemd wrapper in wincng.
- - delete unused SHA384 wrapper in mbedtls.
-
- Reported-by: Paul Howarth
- Reviewed-by: Michael Buckley
- Closes #1297
-
-GitHub (8 Jan 2024)
-- [Michael Buckley brought this change]
-
- Fix an out-of-bounds read in _libssh2_kex_agree_instr when searching for a KEX not in the server list (#1302)
-
-Viktor Szakats (21 Dec 2023)
-- RELEASE-NOTES: sync [ci skip]
-
-- ci/appveyor: re-enable parallel mode
-
- The comment cited earlier is no longer true with recent CMake versions.
- This options does actually enable parallel builds with MSVC since CMake
- v3.26.0: https://gitlab.kitware.com/cmake/cmake/-/issues/20564
-
- The effect isn't much for libssh2, because it spends most time in tests,
- but let's enable it anyway for efficiency.
-
- Ref: 0d08974633cfc02641e6593db8d569ddb3644255 #884
- Ref: 7a039d9a7a2945c10b4622f38eeed21ba6b4ec55 #867
-
- Closes #1294
-
-- ci/gha: review/fixup auto-cancel settings
-
- - use the group expression from `reuse.yml` (via curl).
- - add auto-cancel for `ci` and `cifuzz`.
- - add auto-cancel to `appveyor_docker`. I'm just guessing here.
- The hope is that it fixes AppVeyor CI runs when re-pushing a PR.
- This frequently caused the freshly pushed session to fail waiting for
- a connection.
- - sync group expression in `appveyor_status` with `reuse`.
-
- Closes #1292
-
-- RELEASE-NOTES: fix casing in GitHub names [ci skip]
-
-- RELEASE-NOTES: synced [ci skip]
-
- Closes #1279
-
-- [Michael Buckley brought this change]
-
- src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
-
- Refs:
- https://terrapin-attack.com/
- https://seclists.org/oss-sec/2023/q4/292
- https://osv.dev/list?ecosystem=&q=CVE-2023-48795
- https://github.com/advisories/GHSA-45x7-px36-x8w8
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
-
- Fixes #1290
- Closes #1291
-
-- session: add `libssh2_session_callback_set2()`
-
- Add new `libssh2_session_callback_set2()` API that deprecates
- `libssh2_session_callback_set()`.
-
- The new implementation offers the same functionality, but accepts and
- returns a generic function pointer (of type `libssh2_cb_generic *`), as
- opposed to the old function that used data pointers (`void *`). The new
- solution thus avoids data to function (and vice versa) pointer
- conversions, which has undefined behaviour in standard C.
-
- About the name: It seems the `*2` suffix was used in the past for
- replacement functions for deprecated ones. Let's stick with that.
- `*_ex` was preferred for new functions that extend existing ones with
- new features.
-
- Closes #1285
-
-- build: enable `-pedantic-errors`
-
- According to the manual, this isn't the same as `-Werror -pedantic`.
- Enable it together with `-Werror`.
-
- https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html#index-pedantic-errors-1
-
- This option results in autotools feature detection going into crazies.
- To avoid this, we add it to `CFLAGS` late. Idea copied from curl.
-
- This option has an effect only with gcc 5.0 and newer as of this commit.
- Let's enable it for clang and older versions too for simplicity. Ref:
- https://github.com/curl/curl/commit/d5c0351055d5709da8f3e16c91348092fdb481aa
- https://github.com/curl/curl/pull/2747
-
- Closes #1286
-
-- build: add mingw-w64 support to `LIBSSH2_PRINTF()` attribute
-
- And fix the warning it detected.
-
- Closes #1287
-
-- libssh2.h: add deprecated function warnings
-
- With deprecated-at versions and suggested replacement function.
-
- It's possible to silence them by defining `LIBSSH2_DISABLE_DEPRECATION`.
-
- Also add depcreated-at versions to documentation, and unify wording.
-
- Ref: https://github.com/libssh2/libssh2/pull/1260#issuecomment-1837017987
- Closes #1289
-
-- ci/spellcheck: delete redundant option [ci skip]
-
- `--check-hidden` not necessary when passing filenames explicitly.
-
- Follow-up to a79218d3a058a333bb9de14079548a3511679a04
-
-- tidy-up: add empty line for clarity [ci skip]
-
-- build: FIXME `-Wsign-conversion` to be errors [ci skip]
-
-- src: disable `-Wsign-conversion` warnings, add option to re-enable
-
- To avoid the log noise till we fix those ~360 compiler warnings.
-
- Also add macro `LIBSSH2_WARN_SIGN_CONVERSION` to re-enable them.
-
- Follow-up to afa6b865604019ab27ec033294edfe3ded9ae0c0 #1257
-
- Closes #1284
-
-- cmake: fix indentation [ci skip]
-
-- example, tests: call `WSACleanup()` for each `WSAStartup()`
-
- On Windows.
-
- Closes #1283
-
-- RELEASE-NOTES: update credits [ci skip]
-
- Ref: https://github.com/libssh2/libssh2/pull/1241#issuecomment-1830118584
-
-- RELEASE-NOTES: avoid splitting names, fix typo, refine order [ci skip]
-
-- RELEASE-NOTES: synced [ci skip]
-
-- add portable `LIBSSH2_SOCKET_CLOSE()` macro
-
- Add `LIBSSH2_SOCKET_CLOSE()` to the public `libssh2.h` header, for user
- code. It translates to `closesocket()` on Windows and `close()` on other
- platforms.
-
- Use it in example code.
-
- It makes them more readable by reducing the number of `_WIN32` guards.
-
- Closes #1278
-
-- ci: add FreeBSD 14 job, fix issues
-
- - install bash to fix error when running tests:
- ```
- ERROR: test_sshd.test - missing test plan
- ERROR: test_sshd.test - exited with status 127 (command not found?)
- =====================================
- [...]
- # TOTAL: 4
- # PASS: 2
- # SKIP: 0
- # XFAIL: 0
- # FAIL: 0
- # XPASS: 0
- # ERROR: 2
- [...]
- env: bash: No such file or directory
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7133852508/job/19427420687#step:3:3998
-
- - fix sshd issue when running tests:
- ```
- # sshd log:
- # Server listening on :: port 4711.
- # Server listening on 0.0.0.0 port 4711.
- # Authentication refused: bad ownership or modes for file /home/runner/work/libssh2/libssh2/tests/key_rsa.pub
- # Authentication refused: bad ownership or modes for file /home/runner/work/libssh2/libssh2/tests/openssh_server/authorized_keys
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7134629175/job/19429828342#step:3:4059
-
- Cherry-picked from #1277
- Closes #1277
-
-- ci: add OmniOS job, fix issues
-
- - use GNU Make, to avoid errors:
- ```
- make: Fatal error in reader: Makefile, line 983: Badly formed macro assignment
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7134629175/job/19429838379#step:3:1956
-
- Caused by `?=` in `Makefile.am`. Fix it just in case.
-
- ```
- make: Fatal error in reader: Makefile, line 438: Unexpected end of line seen
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7135524843/job/19432451767#step:3:1966
-
- It's around line 43 in `Makefile.am`, reason undiscovered.
-
- - fix error:
- ```
- ../../src/hostkey.c:1227:44: error: pointer targets in passing argument 5 of '_libssh2_ed25519_sign' differ in signedness [-Werror=pointer-sign]
- 1227 | datavec[0].iov_base, datavec[0].iov_len);
- | ~~~~~~~~~~^~~~~~~~~
- | |
- | caddr_t {aka char *}
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7135102832/job/19431233967#step:3:2225
-
- https://docs.oracle.com/cd/E36784_01/html/E36887/iovec-9s.html
-
- - FIXME: new `-Wsign-conversion` warnings appeared in examples:
- ```
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- 251 | FD_SET(forwardsock, &fds);
- | ^~~~~~
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long unsigned int' from 'long int' may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:251:9: warning: conversion to 'long int' from 'long unsigned int' may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:259:18: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- 259 | if(rc && FD_ISSET(forwardsock, &fds)) {
- | ^~~~~~~~
- ../../example/direct_tcpip.c:259:18: warning: conversion to 'long unsigned int' from 'libssh2_socket_t' {aka 'int'} may change the sign of the result [-Wsign-conversion]
- ../../example/direct_tcpip.c:259:18: warning: conversion to 'long unsigned int' from 'long int' may change the sign of the result [-Wsign-conversion]
- [...]
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7136086865/job/19433997429#step:3:3450
-
- Cherry-picked from #1277
-
-- example: use `libssh2_socket_t` in X11 example
-
- Cherry-picked from #1277
-
-- [Aaron Stone brought this change]
-
- Handle EINTR from send/recv/poll/select to try again as the error is not fatal
-
- Integration-patches-by: Viktor Szakats
- Fixes #955
- Closes #1058
-
-- appveyor: delete UWP job broken since Visual Studio upgrade
-
- Few days ago UWP job started permafailing.
-
- fail: https://ci.appveyor.com/project/libssh2org/libssh2/builds/48678129/job/yb8n2pox8mfjwv6m
- good: https://ci.appveyor.com/project/libssh2org/libssh2/builds/48673013
-
- Other projects also affected:
- https://ci.appveyor.com/project/c-ares/c-ares/builds/48687390/job/l0fo4b0sijvqkw9r
-
- No related local update. Same CMake version. Same CI image.
-
- This seems to be the culprit, which could mean that this update broke
- CMake detection, needs a different CMake configuration on our end, or
- that this MSVC update pulled support for UWP apps:
-
- fail: -- The C compiler identification is MSVC 19.38.33130.0 (~ Visual Studio 2022 v17.8)
- good: -- The C compiler identification is MSVC 19.37.32825.0 (~ Visual Studio 2022 v17.7)
-
- If this is v17.8, release notes don't readily suggest a feature removal:
- https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.8
-
- So it might just be UWP accidentally broken in this release.
-
- Closes #1275
-
-- checksrc: sync with curl
-
- Closes #1272
-
-- autotools: delete `--disable-tests` option, fix CI tests
-
- Originally added to improve build performance by skipping building
- tests. But, there seems to be no point in this, because autotools
- doesn't build tests by default, unless explicitly invoking
- `make check`.
-
- Delete this option from Cygwin and FreeBSD CI tests, where it caused
- `make check` to do nothing. Tests are built now, and runtime tests are
- too, where supported.
-
- Also disable Docker-based tests for these, and add a missing `make -j3`
- for FreeBSD.
-
- Reverts 7483edfada1f7e17cf8f9ac1c87ffa3d814c987e #715
-
- Closes #1271
-
-GitHub (6 Dec 2023)
-- [ren mingshuai brought this change]
-
- build: add `LIBSSH2_NO_DEPRECATED` option (#1266)
-
- The following APIs have been deprecated for over 10 years and
- use `LIBSSH2_NO_DEPRECATED` to mark them as deprecated:
-
- libssh2_session_startup()
- libssh2_banner_set()
- libssh2_channel_receive_window_adjust()
- libssh2_channel_handle_extended_data()
- libssh2_scp_recv()
-
- Add these options to disable them:
- - autotools: `--disable-deprecated`
- - cmake: `-DLIBSSH2_NO_DEPRECATED=ON`
- - `CPPFLAGS`: `-DLIBSSH2_NO_DEPRECATED`
-
- Fixes #1259
- Replaces #1260
- Co-authored-by: Viktor Szakats
- Closes #1267
-
-Viktor Szakats (5 Dec 2023)
-- autotools: show the default for `hidden-symbols` option
-
- Closes #1269
-
-- tidy-up: bump casts from int to long for large C99 types in printfs
-
- Cast large integer types to avoid dealing with printf masks for
- `size_t` and other C99 types. Some of existing code used `int`
- for this, bump them to `long`.
-
- Ref: afa6b865604019ab27ec033294edfe3ded9ae0c0 #1257
-
- Closes #1264
-
-- build: enable missing OpenSSF-recommended warnings, with fixes
-
- Ref:
- https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html
- (2023-11-29)
-
- Enable new warnings:
-
- - replace `-Wno-sign-conversion` with `-Wsign-conversion`.
-
- Fix them in example, tests and wincng. There remain about 360 of these
- warnings in `src`. Add a TODO item for those and disable `-Werror` for
- this particular warning.
-
- - enable `-Wformat=2` for clang (in both cmake and autotools).
-
- - enable `__attribute__((format))` for `_libssh2_debug()`,
- `_libssh2_snprintf()` and in tests for `run_command()`.
-
- `LIBSSH2_PRINTF()` copied from `CURL_TEMP_PRINTF()` in curl.
-
- - enable `-Wimplicit-fallthrough`.
-
- - enable `-Wtrampolines`.
-
- Fix them:
-
- - src: replace obsolete fall-through-comments with
- `__attribute__((fallthrough))`.
-
- - wincng: fix `-Wsign-conversion` warnings.
-
- - tests: fix `-Wsign-conversion` warnings.
-
- - example: fix `-Wsign-conversion` warnings.
-
- - src: fix `-Wformat` issues in trace calls.
-
- Also, where necessary fix `int` and `unsigned char` casts to
- `unsigned int` and adjust printf format strings. These were not
- causing compiler warnings.
-
- Cast large types to `long` to avoid dealing with printf masks for
- `size_t` and other C99 types. Existing code often used `int` for this.
- I'll update them to `long` in an upcoming commit.
-
- - tests: fix `-Wformat` warning.
-
- - silence `-Wformat-nonliteral` warnings.
-
- - mbedtls: silence `-Wsign-conversion`/`-Warith-conversion`
- in external header.
-
- Closes #1257
-
-- packet: whitespace fix
-
- Tested via #1257
-
-- tidy-up: unsigned -> unsigned int
-
- In the `interval` argument of public `libssh2_keepalive_config()`.
-
- Tested via #1257
-
-- tests: sync port number type with the rest of codebase
-
- Tested via #1257
-
-- autotools: enable `-Wunused-macros` with gcc
-
- It works with gcc without the libtool warnings seen with clang
- on Windows in 96682bd5e14c20828e18bf10ed5b4b5c7543924a #1227.
-
- Sync usage of of this macro with CMake and
- autotools + clang + non-Windows. Making it enabled everywhere except
- autotools + clang + Windows due to the libtool stub issue.
-
- Follow-up to 7ecc309cd10454c54814b478c4f85d0041da6721 #1224
-
- Closes #1262
-
-- TODO: disable or drop weak algos [ci skip]
-
- Closes #1261
-
-- example, tests: fix/silence `-Wformat-truncation=2` gcc warnings
-
- Then sync this warning option with curl.
-
- Seems like a false positive and/or couldn't figure how to fix it, so silence:
- ```
- example/ssh2.c:227:38: error: '%s' directive output may be truncated writing likely 1 or more bytes into a region of size 0 [-Werror=format-truncation=]
- 227 | snprintf(fn1, fn1sz, "%s/%s", h, pubkey);
- | ^~
- example/ssh2.c:227:34: note: assuming directive output of 1 byte
- 227 | snprintf(fn1, fn1sz, "%s/%s", h, pubkey);
- | ^~~~~~~
- example/ssh2.c:227:13: note: 'snprintf' output 3 or more bytes (assuming 4) into a destination of size 2
- 227 | snprintf(fn1, fn1sz, "%s/%s", h, pubkey);
- | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- example/ssh2.c:228:38: error: '%s' directive output may be truncated writing likely 1 or more bytes into a region of size 0 [-Werror=format-truncation=]
- 228 | snprintf(fn2, fn2sz, "%s/%s", h, privkey);
- | ^~
- example/ssh2.c:228:34: note: assuming directive output of 1 byte
- 228 | snprintf(fn2, fn2sz, "%s/%s", h, privkey);
- | ^~~~~~~
- example/ssh2.c:228:13: note: 'snprintf' output 3 or more bytes (assuming 4) into a destination of size 2
- 228 | snprintf(fn2, fn2sz, "%s/%s", h, privkey);
- | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7055480458/job/19205970397#step:10:98
-
- Fix:
- ```
- tests/openssh_fixture.c:116:38: error: ' 2>&1' directive output may be truncated writing 5 bytes into a region of size between 1 and 1024 [-Werror=format-truncation=]
- tests/openssh_fixture.c:116:11: note: 'snprintf' output between 6 and 1029 bytes into a destination of size 1024
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/7055480458/job/19205969221#step:10:51
-
- Tested via #1257
-
-- example: fix indentation follow-up
-
- Fix long line and fix more indentations.
-
- Follow-up to 9e896e1b80911a53d6aabb322e034e6ca51b6898
-
-- example: fix indentation
-
- Tested via #1257
-
-- autotools: fix missed `-pedantic` and `-Wall` options for gcc
-
- Follow-up to 5996fefe2bad80cfba85b2569ce6ab6ef575142c #1223
-
- Tested via #1257
-
-- ci: show compiler in cross/cygwin job names
-
- Tested via #1257
-
-- mbedtls: further improve disabling `-Wredundant-decls`
-
- Move warning option suppression to `src/mbedtls.h` to surround the actual
- external header #includes that need it.
-
- Follow-up to ecec68a2c13a9c63fe8c2dc457ae785a513e157c #1226
- Follow-up to 7ecc309cd10454c54814b478c4f85d0041da6721 #1224
-
- Tested via #1257
-
-GitHub (1 Dec 2023)
-- [ren mingshuai brought this change]
-
- example: replace remaining libssh2_scp_recv with libssh2_scp_recv2 in output messages (#1258)
-
- libssh2_scp_recv is deprecated and has been replaced by libssh2_scp_recv2
- in prior commit.
-
- Follow-up to 6c84a426beb494980579e5c1d244ea54d3fc1a3f
-
-Viktor Szakats (27 Nov 2023)
-- openssl: use OpenSSL 3 HMAC API, add `no-deprecated` CI job
-
- - use OpenSSL 3 API when available for HMAC.
- This fixes building with OpenSSL 3 `no-deprecated` builds.
-
- - ensure we support pure OpenSSL 3 API by adding a CI job using
- OpenSSL 3 custom-built with `no-deprecated`.
-
- Follow-up to b0ab005fe79260e6e9fe08f8d73b58dd4856943d #1207
-
- Fixes #1235
- Closes #1243
-
-- ci: restore lost comment for FreeBSD [ci skip]
-
- Follow-up to eee4e8055ab375c9f9061d4feb39086737f41a9c
-
-- ci: add OpenBSD (v7.4) job + fix build error in example
-
- - Use CMake, LibreSSL and clang from the base install.
-
- - This uncovered a build error in `example/subsystem_netconf.c`, caused
- by using the `%n` printf mask. This is a security risk and some
- systems (notably OpenBSD) disable this feature.
-
- Fix it by applying this patch from OpenBSD ports (from 2021-09-11):
- https://cvsweb.openbsd.org/ports/security/libssh2/patches/patch-example_subsystem_netconf_c?rev=1.1&content-type=text/x-cvsweb-markup
- https://github.com/openbsd/ports/commit/2c5b2f3e94381914a3e8ade960ce8c997ca9d6d7
- "The old code is also broken, as it passes a pointer to a variable
- of a different size (on LP64). There is no check for truncation,
- but buf[] is 1MB in size."
- Patch-by: naddy
-
- ```
- /home/runner/work/libssh2/libssh2/example/subsystem_netconf.c:252:17: error: '%n' format specifier support is deactivated and will call abort(3) [-Werror]
- "]]>]]>\n%n", (int *)&len);
- ~^
- /home/runner/work/libssh2/libssh2/example/subsystem_netconf.c:270:17: error: '%n' format specifier support is deactivated and will call abort(3) [-Werror]
- "]]>]]>\n%n", (int *)&len);
- ~^
- 2 errors generated.
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/6991449778/job/19022024280#step:3:420
-
- Also made tests with arm64, but it takes consistently almost 14m to
- finish the job, vs. 2-3m for the native amd64:
- https://github.com/libssh2/libssh2/actions/runs/6991648984/job/19022440525
- https://github.com/libssh2/libssh2/actions/runs/6991551220/job/19022233651
-
- Cherry-picked from #1250
- Closes #1250
-
-- ci: add NetBSD (v9.3) job
-
- Use CMake, OpenSSL (v1.1) and clang from the base install.
-
- Cherry-picked from #1250
-
-- ci: update and speed up FreeBSD job
-
- - switch to an alternate GitHub action. This one seems (more) actively
- maintained, and runs faster:
- https://github.com/cross-platform-actions/action
-
- - use clang instead of gcc. clang is already present in the base
- install, saving install time and bandwidth.
-
- - stop installing `openssl-quictls` and use the OpenSSL (v1.1) from
- the base system.
- (I'm suspecting that quictls before this patch wasn't detected by
- the build.)
- https://wiki.freebsd.org/OpenSSL
-
- Cherry-picked from #1250
-
-- stop using leading underscores in macro names
-
- Underscored macros are reserved for the compiler / standard lib / etc.
- Stop using them in user code.
-
- We used them as header guards in `src` and in `__FILESIZE` in `example`.
-
- Closes #1248
-
-- ci: use absolute path in `CMAKE_INSTALL_PREFIX`
-
- To make the installed locations unambiguous in the build logs.
-
- Closes #1247
-
-- openssl: make a function static, add `#ifdef` comments
-
- Follow-up to 03092292597ac601c3f9f0c267ecb145dda75e4e #248
- where the function was added.
-
- Also add comments to make `#ifdef` branches easier to follow in
- `openssl.h`.
-
- Closes #1246
-
-- ci: boost mbedTLS build speed
-
- Build times down to 4 seconds (from 18-20).
-
- Closes #1245
-
-- openssl: fix DSA code to use OpenSSL 3 API
-
- - fix missing `DSA` type when building for OpenSSL 3 `no-deprecated`.
- - fix fallouts after fixing the above by switching away from `DSA`
- with OpenSSL 3.
-
- Follow-up to b0ab005fe79260e6e9fe08f8d73b58dd4856943d #1207
-
- Closes #1244
-
-- openssl: formatting (delete empty lines) [ci skip]
-
-- tests: fall back to `$LOGNAME` for username
-
- If the `$USER` variable is empty, fall back to using `$LOGNAME` to
- retrieve the logged-in username.
-
- In POSIX, `$LOGNAME` is a mandatory variable, while `$USER` isn't, and
- on some systems it may not be set. Without this value, tests were unable
- to provide the correct username when logging into the SSH server running
- under the active user's session.
-
- Reported-by: Nicolas Mora
- Suggested-by: Nicolas Mora
- Ref: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056348
- Fixes #1240
- Closes #1241
-
-- libssh2.h: use `_WIN32` for Windows detection instead of rolling our own
-
- Sync up `libssh2.h` Windows detection with the libssh2 source code.
-
- `libssh2.h` was using `WIN32` and `LIBSSH2_WIN32` for Windows detection,
- next to the official `_WIN32`. After this patch it only uses `_WIN32`
- for this. Also, make it stop defining `LIBSSH2_WIN32`.
-
- There is a slight chance these break compatibility with Windows
- compilers that fail to define `_WIN32`. I'm not aware of any obsolete
- or modern compiler affected, but in case there is one, one possible
- solution is to define this macro manually.
-
- Closes #1238
-
-- openssl: fix `EC_KEY` reference with OpenSSL 3 `no-deprecated` build
-
- Fixes:
- ```
- src/openssl.c:650:5: error: use of undeclared identifier 'EC_KEY'
- EC_KEY *ec_key = EC_KEY_new_by_curve_name(curve);
- ^
- src/openssl.c:650:13: error: use of undeclared identifier 'ec_key'
- EC_KEY *ec_key = EC_KEY_new_by_curve_name(curve);
- ^
- src/openssl.c:650:22: error: implicit declaration of function 'EC_KEY_new_by_curve_name' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
- EC_KEY *ec_key = EC_KEY_new_by_curve_name(curve);
- ^
- src/openssl.c:650:22: note: did you mean 'EC_GROUP_new_by_curve_name'?
- ./quictls/_a64-mac-sys/usr/include/openssl/ec.h:483:11: note: 'EC_GROUP_new_by_curve_name' declared here
- EC_GROUP *EC_GROUP_new_by_curve_name(int nid);
- ^
- In file included from ./_a64-mac-sys-bld/src/CMakeFiles/libssh2_static.dir/Unity/unity_0_c.c:19:
- In file included from src/crypto.c:10:
- src/openssl.c:652:8: error: use of undeclared identifier 'ec_key'
- if(ec_key) {
- ^
- ```
- Ref: https://github.com/curl/curl-for-win/actions/runs/6950001225/job/18909297867#step:3:4341
-
- Follow-up to b0ab005fe79260e6e9fe08f8d73b58dd4856943d #1207
-
- Bug #1235
- Closes #1236
-
-- openssl: formatting
-
- Sync up these lines with the other two similar occurrences in the code.
-
- Cherry-picked from #1236
-
-GitHub (21 Nov 2023)
-- [Michael Buckley brought this change]
-
- openssl: use non-deprecated APIs with OpenSSL 3.x (#1207)
-
- Assisted-by: Viktor Szakats
-
-Viktor Szakats (21 Nov 2023)
-- ci: add BoringSSL job (cmake, gcc, amd64)
-
- Closes #1233
-
-- autotools: fix dotless gcc and Apple clang version detections
-
- - fix parsing dotless (major-only) gcc versions.
- Follow-up to 00a3b88c51cdb407fbbb347a2e38c5c7d89875ad #1187
-
- - sync gcc detection variable names with curl.
-
- - fix Apple clang version detection for releases between
- 'Apple LLVM version 7.3.0' and 'Apple LLVM version 10.0.1' where the
- version was under-detected as 3.7 llvm/clang equivalent.
-
- - fix Apple clang version detection for 'Apple clang version 11.0.0'
- and newer where the Apple clang version was detected, instead of its
- llvm/clang equivalent.
-
- - revert to show `clang` instead of `Apple clang`, because we follow it
- with an llvm/clang version number. (Apple-ness still visible in raw
- version.)
-
- Used this collection for Apple clang / llvm/clang translation and test
- inputs: https://gist.github.com/yamaya/2924292
-
- Closes #1232
-
-- acinclude.m4: revert accidental edit [ci skip]
-
- Follow-up to 8c320a93a48775b74f40415e46f84bf68b4d5ae8
-
-- autotools: show more clang/gcc version details
-
- Also:
- - show if we detected Apple clang.
- - delete duplicate version detection for clang.
-
- Closes #1230
-
-- acinclude.m4: re-sync with curl [ci skip]
-
-- autotools: avoid warnings in libtool stub code
-
- Seen on Windows with clang64, in libtool-generated stub code for
- examples and tests.
-
- The error didn't break the CI job for some reason.
-
- msys2 (autotools, clang64, clang-x86_64:
- ```
- [...]
- 2023-11-17T20:14:17.8639574Z ./.libs/lt-test_read.c:91:10: error: macro is not used [-Werror,-Wunused-macros]
- [...]
- 2023-11-17T20:14:39.8729255Z ./.libs/lt-sftp_write_nonblock.c:91:10: error: macro is not used [-Werror,-Wunused-macros]
- [...]
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/6908585056/job/18798193405?pr=1226#step:8:474
-
- Follow-up to 7ecc309cd10454c54814b478c4f85d0041da6721 #1224
-
- Closes #1227
-
-- mbedtls: improve disabling `-Wredundant-decls`
-
- Disable these warnings specifically for the mbedTLS public headers
- and leave it on for the the rest of the code. This also fixes this
- issue for autotools. Previous solution was globally disabling this
- warning for the whole code when using mbedTLS and only with CMake.
-
- Follow-up to 7ecc309cd10454c54814b478c4f85d0041da6721 #1224
-
- Closes #1226
-
-- cmake: rename picky warnings script
-
- To match the camel-case style used in other CMake scripts and also
- to match the name used in curl.
-
- Closes #1225
-
-- build: enable more compiler warnings and fix them
-
- Enable more picky compiler warnings. I've found these options in the
- nghttp3 project when implementing the CMake quick picky warning
- functionality for it.
-
- Fix issues found along the way:
-
- - wincng, mbedtls: delete duplicate function declarations.
- Most of this was due to re-#defining crypto functions to
- crypto-backend specific implementations These redefines also remapped
- the declarations in `crypto.h`, making the backend-specific
- declarations duplicates.
- This patch deletes the backend-specific declarations.
-
- - wincng mapped two crypto functions to the same local function.
- Also causing double declarations.
- Fix this by adding two disctinct wrappers and moving
- the common function to a static one.
-
- - delete unreachable `break;` statements.
-
- - kex: disable macros when unused.
-
- - agent: disable unused constants.
-
- - mbedtls: disable double declaration warnings because public mbedTLS
- headers trigger it. (with function `psa_set_key_domain_parameters`)
-
- - crypto.h: formatting.
-
- Ref: https://github.com/ngtcp2/nghttp3/blob/a70edb08e954d690e8fb2c1df999b5a056f8bf9f/cmake/PickyWarningsC.cmake
-
- Closes #1224
-
-- autotools: sync warning enabler code with curl
-
- Tiny changes and minor updates to bring this code closer
- to curl's `m4/curl-compilers.m4`.
-
- Closes #1223
-
-- acinclude.m4: fix indentation [ci skip]
-
- Also match indentation of curl's `m4/curl-compilers.m4` for
- easier syncing.
-
-- autotool: rename variable
-
- `WARN` -> `tmp_CFLAGS`
-
- To match curl and make syncing this code easier.
-
- Ref: https://github.com/curl/curl/blob/d1820768cce0e797d1f072343868ce1902170e93/m4/curl-compilers.m4#L479
-
- Closes #1222
-
-- autotools: picky warning options tidy-up
-
- - sync clang warning version limits with CMake.
- - make `WARN=` vs. `CURL_ADD_COMPILER_WARNINGS()` consistent with curl
- and between clang and gcc (`WARN=` is for `no-` options in general).
-
- Closes #1221
-
-- build: picky warning updates
-
- - cmake, autotools: sync picky gcc warnings with curl.
- - cmake, autotools: add `-Wold-style-definition` for clang too.
- - cmake, autotools: add comment for `-Wformat-truncation=1`.
- - cmake: more precise version info for old clang options.
-
- Closes #1219
-
-- ci: fixup FreeBSD version, bump mbedtls
-
- We haven't been using the FreeBSD version. Also it turns out,
- the single version supported is 13.2 at the moment:
- https://github.com/vmactions/freebsd-vm/tree/main/conf
-
- Stop trying to set the version and instead rely on the action
- providing the latest supported one automatically.
-
- Follow-up to a7d2a573be26238cc2b55e5ff6649bbe620cb8d9
-
- Also:
- - add more details to the FreeBSD job description.
- - bump mbedtls version while here.
-
- Closes #1217
-
-- cmake: fix multiple include of libssh2 package
-
- Also extend our integration test double inclusion. It will still not
- catch this case, because that requires
- `cmake_minimum_required(VERSION 3.18)` or higher.
-
- Fixes:
- ```
- CMake Error at .../lib/cmake/libssh2/libssh2-config.cmake:8 (add_library):
- add_library cannot create ALIAS target "libssh2::libssh2" because another
- target with the same name already exists.
- Call Stack (most recent call first):
- CMakeLists.txt:24 (find_package)
-
- CMake Error at .../lib/cmake/libssh2/libssh2-config.cmake:13 (add_library):
- add_library cannot create ALIAS target "Libssh2::libssh2" because another
- target with the same name already exists.
- Call Stack (most recent call first):
- CMakeLists.txt:24 (find_package)
- ```
-
- Test to reproduce:
- ```cmake
- cmake_minimum_required(VERSION 3.18) # must be 3.18 or higher
-
- project(test)
-
- find_package(libssh2 CONFIG)
- find_package(libssh2 CONFIG) # fails
-
- add_executable(test main.c)
- target_link_libraries(test libssh2::libssh2)
- ```
-
- Ref: https://cmake.org/cmake/help/latest/release/3.18.html#other-changes
- Ref: https://cmake.org/cmake/help/v3.18/policy/CMP0107.html
-
- Assisted-by: Kai Pastor
- Assisted-by: Harry Mallon
- Ref: https://github.com/curl/curl/pull/11913
-
- Closes #1216
-
-- ci: add FreeBSD 13.2 job
-
- It runs over Linux via qemu. First two runs were (very) slow, then it
- became (much) more performant at just 2x slower than a native Linux
- build. Then got slow again, then fast again. Still seems acceptable
- for the value this adds.
-
- The build uses autotools and quictls.
-
- Successful builds:
- 1. https://github.com/libssh2/libssh2/actions/runs/6802676786/job/18496286419 (13m59s, -j3)
- 2. https://github.com/libssh2/libssh2/actions/runs/6802976375/job/18497243225 (11m5s, -j2)
- 3. https://github.com/libssh2/libssh2/actions/runs/6803142201/job/18497785049 (3m6s, -j1)
- 4. https://github.com/libssh2/libssh2/actions/runs/6803194839/job/18497962766 (3m10s, -j2)
- 5. https://github.com/libssh2/libssh2/actions/runs/6803267201/job/18498208501 (3m13s)
- 6. https://github.com/libssh2/libssh2/actions/runs/6803510333/job/18498993698 (15m25s)
- 7. https://github.com/libssh2/libssh2/actions/runs/6813602863/job/18528571057 (3m13s)
-
- Similar solution exists for Solaris (over macOS via VirtualBox), but it
- hangs forever at `Waiting for text: solaris console login`:
- https://github.com/libssh2/libssh2/actions/runs/6802388128/job/18495391869#step:4:185
-
- Idea taken from LibreSSL.
-
- FIXME: Unrelated, the `distcheck` job became flaky in recent days:
- https://github.com/libssh2/libssh2/actions/runs/6802976375/job/18497256437#step:10:536
- ```
- FAIL: test_auth_pubkey_ok_rsa_aes256gcm
- ```
- https://github.com/libssh2/libssh2/actions/runs/6813602863/job/18528588933#step:10:533
- ```
- FAIL: test_read
- ```
-
- Closes #1215
-
-- reuse: fix duplicate copyright warning
-
- ```
- PendingDeprecationWarning:
- Copyright and licensing information for 'tests/openssh_server/Dockerfile'
- has been found in both 'tests/openssh_server/Dockerfile' and in the DEP5
- file located at '.reuse/dep5'. The information for these two sources has
- been aggregated. In the future this behaviour will change, and you will
- need to explicitly enable aggregation. [...]
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/6789274955/job/18456085964#step:4:4
-
-- Makefile.mk: delete Windows-focused raw GNU Make build
-
- We recommend using CMake instead. Especially in unity mode, it's faster
- and probably more familiar for most. It's also easily portable.
-
- (`Makefile.mk` was also portable, but in practice only usable for
- Windows. Other platforms required a manual config header.)
-
- Also:
- - migrate `LIBSSH2_NO_*` option CI tests to CMake.
- - make MSYS2 CMake builds verbose to show compilation options.
-
- Closes #1204
-
-- tidy-up: around `stdint.h`
-
- - os400: delete unused `HAVE_STDINT_H`.
-
- - fuzz: delete redundant `stdint.h` use.
- `inttypes.h` is already included via `testinput.h`.
-
- - docs/TODO: adjust type in planned function.
-
- Closes #1212
-
-- cmake: show crypto backend in feature summary
-
- This was visible as an enabled package before this patch, but it missed
- to show WinCNG.
-
- Closes #1211
-
-- man: fix double spaces and dash escaping
-
- - `- ` -> `- `
- - `. ` -> `. `
- - `\- ` -> `- `
- - `-1` -> `\-1`
- - fold long lines along the way
-
- This makes the minus sign come out as a Unicode minus sign
- (0x2212), and title separator dashes as Unicode hyphen (0x2010),
- with `groff -Tutf8` v1.23.0.
-
- Ref: https://lwn.net/Articles/947941/
-
- Closes #1210
-
-- src: fix gcc 13 `-Wconversion` warning on Darwin
-
- ```
- src/session.c: In function 'libssh2_poll':
- src/session.c:1776:22: warning: conversion from 'long int' to '__darwin_suseconds_t' {aka 'int'} may change value [-Wconversion]
- 1776 | tv.tv_usec = (timeout_remaining % 1000) * 1000;
- | ^
- ```
- Ref: https://github.com/curl/curl-for-win/actions/runs/6711735060/job/18239768548#step:3:4368
-
- Follow-up to 08354e0abbe86d4cc5088d210d53531be6d8981a
-
- Closes #1209
-
-- openssl: silence `-Wunused-value` warnings
-
- Seen with gcc 12.
-
- Manual: https://www.openssl.org/docs/man3.1/man3/BIO_reset.html
-
- ```
- ./quictls/linux-a64-musl/usr/include/openssl/bio.h:555:34: warning: value computed is not used [-Wunused-value]
- 555 | # define BIO_reset(b) (int)BIO_ctrl(b,BIO_CTRL_RESET,0,NULL)
- | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- ./libssh2/src/openssl.c:3518:5: note: in expansion of macro 'BIO_reset'
- ./libssh2/src/openssl.c:3884:5: note: in expansion of macro 'BIO_reset'
- ./libssh2/src/openssl.c:3995:5: note: in expansion of macro 'BIO_reset'
- ```
- Ref: https://github.com/curl/curl-for-win/actions/runs/6696392318/job/18194032712#step:3:5060
-
- Closes #1205
-
-- Makefile.am: fix `cp` to preserve attributes and timestamp
-
-- cmake: simplify showing CMake version
-
- Move it to `CMakeLists.txt`. Drop `cmake --version` commands.
-
- Credit to the `zlib-ng` project for the idea:
- https://github.com/zlib-ng/zlib-ng/blob/61e181c8ae93dbf56040336179c9954078bd1399/CMakeLists.txt#L7
-
- Closes #1203
-
-- ci: mbedtls 3.5.0
-
- v3.5.0 needs extra compiler option for i386 to avoid:
- ```
- #error "Must use `-mpclmul -msse2 -maes` for MBEDTLS_AESNI_C"
- ```
-
- Closes #1202
-
-- tests: show cmake version used in integration tests
-
- Closes #1201
-
-- readme.vms: fix typo [ci skip]
-
- Detected by codespell 2.2.6
-
-- appveyor: YAML/PowerShell formatting, shorten variable name
-
- - use single-quotes in yaml and PowerShell.
-
- - shorten a variable name.
-
- - use indentation 2 for scripts.
-
- - use C else-style in PowerShell.
-
- Closes #1200
-
-- ci: update actions, use shallow clones with appveyor
-
- - update GitHub Actions to their latest versions.
-
- - use shallow git clones in AppVeyor CI to save data over the wire.
-
- Closes #1199
-
-- appveyor: move to pure PowerShell
-
- - replace batch commands with PowerShell.
-
- - merge separate command entries into single PowerShell blocks.
-
- Closes #1197
-
-- windows: use built-in `_WIN32` macro to detect Windows
-
- Instead of `WIN32`.
-
- The compiler defines `_WIN32`. Windows SDK headers or build env defines
- `WIN32`, or we have to take care of it. The agreement seems to be that
- `_WIN32` is the preferred practice here.
-
- Minor downside is that CMake uses `WIN32` and we also adopted it in
- `Makefile.mk`.
-
- In public libssh2 headers we stick with accepting either `_WIN32` or
- `WIN32` and define our own namespaced `LIBSSH2_WIN32` based on them.
-
- grepping for `WIN32` remains useful to detect Windows-specific code.
-
- Closes #1195
-
-- cmake: cleanup mbedTLS version detection more
-
- - lowercase, underscored local variables.
- - fix `find_library()` to use the multiple names passed.
- - rely more on `find_package_handle_standard_args()`.
- Logic based on our `Findwolfssl.cmake`.
- - delete ignored/unused `MBEDTLS_LIBRARY_DIR`.
- - revert CI configuration to use `MBEDCRTYPO_LIBRARY`.
- - clarify inputs/outputs in comment header.
- - use variable for regex.
- - formatting.
-
- Follow-up to 41594675072c578294674230d4cf5f47fa828778 #1192
-
- Closes #1196
-
-- cmake: delete duplicate `include()`
-
-- cmake: improve/fix mbedTLS detection
-
- - libssh2 needs the crypto lib only, stop dealing with the rest.
-
- - simplify logic.
-
- - drop hard-wired toolchain specific options that broke with e.g. MSVC.
-
- Reported by: AR Visions
- Fixes #1191
-
- - add mbedTLS version detection for recent releases.
-
- - merge custom detection results display into a single line.
-
- - shorten mbedTLS configuration in macOS CI job.
-
- Used the curl mbedTLS detection logic for ideas:
- https://github.com/curl/curl/blob/a8c773845f4fdbfb09b08a6ec4b656c812568995/CMake/FindMbedTLS.cmake
-
- Closes #1192
-
-GitHub (24 Sep 2023)
-- [concussious brought this change]
-
- libssh2_session_get_blocking.3: Add description (#1185)
-
-Viktor Szakats (21 Sep 2023)
-- autotools: fix selecting wincng in cross-builds (and more)
-
- - Fix explicitly selecting WinCNG in autotools cross-builds by moving
- `windows.h` header check before the WinCNG availability check.
- Follow-up to d43b8d9b0b9cd62668459fe5d582ed83aabf77e7
-
- Reported-by: Jack L
- Fixes #1186
-
- - Add Linux -> mingw-w64 cross-builds for autotools and CMake. This
- doesn't detect #1186, because that happened when explicitly specifying
- WinCNG via `--with-crypto=wincng`, but not when falling back to WinCNG
- by default.
-
- - autotools: fix to strip suffix from gcc version
-
- Before this patch we expected `n.n` `-dumpversion` output, but Ubuntu
- may return `n-win32` (also with `-dumpfullversion`). Causing these
- errors and failing to enable picky warnings:
- ```
- ../configure: line 23845: test: : integer expression expected
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/6263453828/job/17007893718#step:5:143
-
- Fix that by stripping any dash-suffix.
-
- gcc version detection is still half broken because we translate '10'
- to '10.10' because `cut -d. -f2` returns the first word if the
- delimiter missing.
-
- More possible `-dumpversion` output: `10-posix`, `10-win32`,
- `9.3-posix`, `9.3-win32`, `6`, `9.3.0`, `11`, `11.2`, `11.2.0`
- Ref: https://github.com/mamedev/mame/pull/9767
-
- Closes #1187
-
-GitHub (28 Aug 2023)
-- [Michael Buckley brought this change]
-
- Properly bounds check packet_authagent_open() (#1179)
-
- * Properly bounds check packet_authagent_open
- * packet.c: use strlen instead of sizeof for strings
- * Make LIBSSH_CHANNEL's channel_type_len a size_t
- * packet_authagent_open: use size_t for offset
-
- Credit:
- Michael Buckley, signed off by Will Cosgrove
-
-Viktor Szakats (28 Aug 2023)
-- os400qc3: move FIXME comment [ci skip]
-
- Follow-up to eb9f9de2c19ec67d12a444cce34bdd059fd26ddc
-
-- md5: allow disabling old-style encrypted private keys at build-time
-
- Before this patch, this happened at runtime when using an old (pre-3.0),
- FIPS-enabled OpenSSL backend.
-
- This patch makes it possible to disable this via the build-time option
- `LIBSSH2_NO_MD5_PEM`.
-
- Also:
- - make sure to exclude all MD5 internal APIs when both the above and
- `LIBSSH2_NO_MD5` are enabled.
- - fix tests to support build with`LIBSSH2_NO_MD5`, `LIBSSH2_NO_MD5_PEM`
- and `LIBSSH2_NO_3DES`.
- - add FIXME to apply this change to `os400qc3.*`.
-
- Old-style encrypted private keys require MD5 and they look like this:
- ```
- -----BEGIN RSA PRIVATE KEY-----
- Proc-Type: 4,ENCRYPTED
- DEK-Info: AES-128-CBC,
-
-
- -----END RSA PRIVATE KEY-----
- ```
-
- E.g.: `tests/key_rsa_encrypted`
-
- Ref: https://github.com/libssh2/www/issues/20
- Closes #1181
-
-- cmake: tidy-up `foreach()` syntax
-
- Use `IN LISTS` and `IN ITEMS`. This appears to be the preferred way
- within CMake's own source code and possibly improves readability.
-
- Fixup a side-effect of `IN LISTS`, where it retains empty values at
- the end of the list, as opposed to the syntax used before, which
- dropped it. In our case this happened with lines read from a text
- file via `file(READ)`.
-
- https://cmake.org/cmake/help/v3.7/command/foreach.html
-
- Closes #1180
-
-- ci: replace `mv` + `chmod` with `install` in `Dockerfile`
-
- Cherry-picked from #1175
- Closes #1175
-
-- ci: set file mode early in `appveyor_docker.yml`
-
- Also:
- - replace tab with spaces in generated config file
- - formatting
-
- Cherry-picked from #1175
-
-- ci: add spellcheck (codespell)
-
- Also rename a variable in `src/os400qc3.c` to avoid a false positive.
-
- Cherry-picked from #1175
-
-- cmake: also test for `libssh2_VERSION`
-
- Cherry-picked from #1175
-
-- cmake: show cmake versions in ci
-
- Cherry-picked from #1175
-
-- tests: formatting and tidy-ups
-
- - Dockerfile: use standard sep with `sed`
- - Dockerfile: use single quotes in shell command
- - appveyor.yml: use long-form option with `choco`
- - tests/cmake: add language to test project
- - reuse.yml: fix indentation
- ```
- $ yamllint reuse.yml
- reuse.yml
- [...]
- 11:5 error wrong indentation: expected 6 but found 4 (indentation)
- 15:5 error wrong indentation: expected 6 but found 4 (indentation)
- [...]
- 27:5 error wrong indentation: expected 6 but found 4 (indentation)
- ```
-
- Cherry-picked from #1175
-
-- openssl.c: whitespace fixes
-
- Cherry-picked from #1175
-
-- checksrc: fix spelling in comment [ci skip]
-
-- cmake: quote more strings
-
- Follow-up to 3fa5282d6284efba62dc591697e6a687152bdcb1
-
- Closes #1173
-
-- drop `www.` from `www.libssh2.org`
-
- is now a 301 permanent redirect to
- .
-
- Update all references to point directly to the new destination.
-
- Ref: https://github.com/libssh2/www/commit/ccf4a7de7f702a8ee17e2c697bcbef47fcf485ed
-
- Closes #1172
-
-- cmake: add `ExternalProject` integration test
-
- - via `ExternalProject_Add()`:
- https://cmake.org/cmake/help/latest/module/ExternalProject.html
- (as documented in `docs/INSTALL_CMAKE.md`)
-
- - also make `FetchContent` fetch from local repo instead of live master.
-
- Closes #1171
-
-- cmake: add integration tests
-
- Add a small project to test dependent/downstream CMake build using
- libssh2. Also added to the GHA CI, and you can also run it locally with
- `tests/cmake/test.sh`.
-
- Test three methods of integrating libssh2 into a project:
- - via `find_package()`:
- https://cmake.org/cmake/help/latest/command/find_package.html
- - via `add_subdirectory()`:
- https://cmake.org/cmake/help/latest/command/add_subdirectory.html
- - via `FetchContent`:
- https://cmake.org/cmake/help/latest/module/FetchContent.html
-
- Closes #1170
-
-- cmake: (re-)add aliases for `add_subdirectory()` builds
-
- Add internal libssh2 library aliases to make these available for
- downstream/dependent projects building libssh2 via `add_subdirectory()`:
-
- - `libssh2:libssh2_static`
- - `libssh2:libssh2_shared`
- - `libssh2:libssh2` (shared, or static when not building shared)
- - `libssh2` (shared, or static when not building shared)
-
- Of these, `libssh2` was present in v1.10.0 and earlier releases, but
- missing from v1.11.0.
-
- Closes #1169
-
-- cmake: delete empty line [ci skip]
-
- Follow-up to 3fa5282d6284efba62dc591697e6a687152bdcb1
-
-- cmake: reflect minimum version in docs [ci skip]
-
- Follow-up to 9cd18f4578baa41dfca197f60557063cad12cd59
-
-- cmake: style tidy up
-
- - quote text literals to improve readability.
- (exceptions: `FILES` items, `add_subdirectory` names, `find_package`
- names, literal target names, version numbers, 0/1, built-in CMake
- values and CMake keywords, list items in `cmake/max_warnings.cmake`)
- - quote standalone variables that could break syntax on empty values.
- - replace `libssh2_SOURCE_DIR` with `PROJECT_SOURCE_DIR`.
- - add missing mode to `message()` call.
- - `TRUE`/`FALSE` → `ON`/`OFF`.
- - add missing default value `OFF` to `option()` for clarity.
- - unfold some lines.
- - `INSTALL_CMAKE.md` fixes and updates. Show defaults.
-
- Closes #1166
-
-- wincng: prefer `ULONG`/`DWORD` over `unsigned long`
-
- To match with the types used by the `Crypt*()` (uses `DWORD`) and
- `BCrypt*()` (uses `ULONG`) Windows APIs.
-
- This patch doesn't change data width or signedness.
-
- Closes #1165
-
-- wincng: tidy-ups
-
- - make `_libssh2_wincng_key_sha_verify` static.
-
- - prefer `unsigned long` over `size_t` in two static functions.
-
- - prefer `ULONG` over `DWORD` to match `BCryptImportKeyPair()`
- and `BCryptGenerateKeyPair()`.
-
- - add a newline.
-
- Closes #1164
-
-- ci: add MSYS builds (autotools and cmake)
-
- Use existing MSYS2 section and extend it with builds for the MSYS
- environment with both autotools and cmake.
-
- MSYS builds resemble Cygwin ones: The env is Unixy, where Windows
- headers are all available but we don't use them.
-
- Also:
-
- - extend existing autotools logic for Cygwin to skip detecting
- `windows.h` for MSYS targets too.
-
- - require `windows.h` for the WinCNG backend in autotools. Before this
- patch, autotools allowed selecting WinCNG on the Cygwin and MSYS
- platforms, but the builds then fell apart due to the resulting mixed
- Unixy + Windowsy environment. The general expectation for Cygwin/MSYS
- builds is not to use the Windows API directly in them.
-
- - stop manually selecting the `MSYS Makefiles` CMake generator for
- MSYS2-based GHA CI builds. mingw-w64 builds work fine without it, but
- it broke MSYS build which use `Unix Makefiles`. Deleting this setting
- fixes all build flavours.
-
- Closes #1162
-
-- ci: cygwin job tidy-ups
-
- `CMAKE_C_COMPILER=gcc` not necessary, delete it.
-
- Follow-up to f1e96e733fefb495bc31b07f5c2a5845ff877c9c
-
- Cherry-picked from #1163
- Closes #1163
-
-- ci: add Cygwin builds (autotools and cmake)
-
- To avoid builds picking up non-Cygwin components coming by default with
- the CI machine, I used the solution recommended by Cygwin [1] and set
- `PATH` manually. To avoid repeating this for each step, I merged steps
- into a single one. Let us know if there is a more elegant way.
-
- Cygwin's Github Action uses cleartext HTTP. We upgrade this to HTTPS.
-
- autotools build seemed to take slightly longer than other jobs. To save
- turnaround time I disabled building tests.
-
- Cygwin package search: https://cygwin.com/cgi-bin2/package-grep.cgi
-
- [1] https://github.com/cygwin/cygwin-install-action/tree/v4#path
-
- Closes #1161
-
-- cmake: add `LIB_NAME` variable
-
- It holds the name `libssh2`. Mainly to document its uses, and also
- syncing up with the same variable in libcurl.
-
- Closes #1159
-
-- cmake: add one missed `PROJECT_NAME` variable
-
- Follow-up to 72fd25958a7dc6f8e68f2b2d5d72839a2da98f9c
-
- Closes #1158
-
-- cmake: tidy-up concatenation in `CMAKE_MODULE_PATH`
-
- Former solution was appending an empty element to the array if
- `CMAKE_MODULE_PATH` was originally empty. The new syntax doesn't have
- this side-effect.
-
- There is no known issue caused by this. Fixing it for good measure.
-
- Closes #1157
-
-- ci: add mingw-w64 UWP build
-
- Add a CI test for Windows UWP builds using mingw-w64. Before this patch
- we had UWP builds tested with MSVC only.
-
- Alike existing UWP jobs, it's not possible to run the binaries due to
- the missing UWP runtime DLL:
- https://github.com/libssh2/libssh2/actions/runs/5821297010/job/15783475118#step:11:42
-
- We could install `winstorecompat-git` in the setup-msys2 step, but opted
- to do it manually to avoid the overhead for every matrix job.
-
- All this would work smoother with llvm-mingw, which features an UWP
- toolchain prefix and provides all necessary implibs by default.
-
- This also hit a CMake bug (with v3.26.4), where CMake gets confused and
- sets up `windres.exe` to use the MSVC rc.exe-style command-line:
- https://github.com/libssh2/libssh2/actions/runs/5819232677/job/15777236773#step:9:126
-
- Notice that MS "sunset" UWP in 2021:
- https://github.com/microsoft/WindowsAppSDK/discussions/1615
-
- If this particular CI job turns out to be not worth the maintenance
- burden or CPU time, or too much of a hack, feel free to delete it.
-
- Ref: https://github.com/libssh2/libssh2/pull/1147#issuecomment-1670850890
- Closes #1155
-
-- cmake: replace `libssh2` literals with `PROJECT_NAME` variable
-
- Where applicable.
-
- This also makes it more obvious which `libssh2` uses were referring
- to the project itself.
-
- Closes #1152
-
-- cmake: fix `STREQUAL` check in error branch
-
- This caused a CMake error instead of our custom error when manually
- selecting the `WinCNG` crypto-backend for a non-Windows target.
-
- Also cleanup `STREQUAL` checks to use variable name without `${}` on
- the left side and quoted string literals on the right.
-
- Closes #1151
-
-- misc: flatten `_libssh2_explicit_zero` if tree
-
- Closes #1149
-
-- src: drop a redundant `#include`
-
- We include `misc.h` via `libssh2_priv.h` already.
-
- Closes #1153
-
-- openssl: use automatic initialization with LibreSSL 2.7.0+
-
- Stop calling `OpenSSL_add_all_*()` for LibreSSL 2.7.0 and later.
-
- LibreSSL 2.7.0 (2018-03-21) introduced automatic initialization and
- deprecated these functions. Stop calling these functions manually for
- LibreSSL version that no longer need them.
-
- Ref: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.0-relnotes.txt
- Ref: https://github.com/libressl/openbsd/commit/46f29f11977800547519ee65e2d1850f2483720b
- Ref: https://github.com/libssh2/libssh2/issues/302
-
- Also stop calling `ENGINE_*()` functions when initialization is
- automatic with LibreSSL 2.7.0+ and OpenSSL 1.1.0+. Engines are also
- initializated automatically with these.
-
- Closes #1146
-
-- gha: restore curly braces in `if`
-
- Without curly braces it was less obvious which string is a GHA expression.
-
- Also fix an `if` expression that always missed its curly braces.
-
- Reverts cab3db588769d6deed97ba89ca9221fd7503405e
-
- Closes #1145
-
-- ci: bump mbedtls
-
-- [renmingshuai brought this change]
-
- Add a new structure to separate memory read and file read.
- We use different APIs when we read one private key from memory,
- so it is improper to store the private key information in the
- structure that stores the private key file information.
-
- Fixes https://github.com/libssh2/libssh2/issues/773
- Reported-by: mike-jumper
-
-- tests: replace FIXME with comments
-
- `key_dsa_wrong` is the same kind of (valid) key as `key_dsa`, both with
- an empty passphrase. Named "wrong" because it's intentionally not added
- to our `openssh_server/authorized_keys` file.
-
-- tidy-up: delete duplicate word from comment
-
-- cmake: cache more config values on Windows
-
- Set two cases of non-detection to save the time dynamically detecting
- these on each build init. Affects old MSVC versions.
-
- Before:
- https://ci.appveyor.com/project/libssh2org/libssh2/builds/47668870/job/i17e0e9yx8rgpv4i
-
- After:
- https://ci.appveyor.com/project/libssh2org/libssh2/builds/47674950/job/ysa1jq0pxtyhui3f
-
- Closes #1142
-
-- revert: build: respect autotools `DLL_EXPORT` in `libssh2.h`
-
- Revert fb1195cf88268a11e2709b9912ab9dca8c23739c #917
-
- On a second look this change did not improve anything with autotools
- builds. autotools seems to handle the dll export matter without it.
-
- This patch also broke (e.g.) curl-for-win autotools builds, where the
- curl build defines `DLL_EXPORT` while building libcurl DLL. `libssh2.h`
- picks it up, resulting in unresolved symbols while trying to link a
- static libssh2 on Windows. The best fix seems to be to revert this,
- instead of adding extra tweaks to dependents.
-
- Fixes:
- https://ci.appveyor.com/project/curlorg/curl-for-win/builds/47667412#L11035
- ```
- ld.lld-15: error: undefined symbol: __declspec(dllimport) libssh2_session_block_directions
- >>> referenced by vssh/.libs/libcurl_la-libssh2.o:(ssh_do)
- >>> referenced by vssh/.libs/libcurl_la-libssh2.o:(ssh_connect)
- >>> referenced by vssh/.libs/libcurl_la-libssh2.o:(ssh_multi_statemach)
- >>> referenced 8 more times
-
- ld.lld-15: error: undefined symbol: __declspec(dllimport) libssh2_session_init_ex
- >>> referenced by vssh/.libs/libcurl_la-libssh2.o:(ssh_connect)
-
- ld.lld-15: error: undefined symbol: __declspec(dllimport) libssh2_session_set_read_timeout
- [...]
- ```
-
- Closes #1141
-
-- gha: simplify `if` strings
-
- Closes #1140
-
-- test_read: make it run without Docker
-
- Apply an existing fix to `test_read`, so that it falls back to use
- the current username instead of the hardcoded `libssh2` when run
- outside Docker.
-
- This allows to run algo tests with this command:
- ```shell
- cd tests
- ./test_sshd.test ./test_read_algos.test
- ```
-
- Closes #1139
-
-- cmake: streamline invocation
-
- Stop specifiying the current directory.
- Simplify build instructions.
-
- Closes #1138
-
-- NMakefile: delete
-
- This make file was for long time unmaintained (last updated in 2014).
- Despite best efforts to keep it working in the recent round of major
- overhauls, it appears to be broken now. There is also no way to test it
- without an actual MSVC env and it's also missing from our CI. Based on
- our Issue tracker, it's also not widely used.
-
- Since its addition in 2005, libssh2 got support for CMake in 2014.
- CMake should be able to generate NMake makefiles with the option
- `-G "NMake Makefiles"`. (I haven't tested this.)
-
- Ref: https://github.com/libssh2/libssh2/discussions/1129
- Closes #1134
-
-- tests: add aes256-gcm encrypted key test
-
- Follow-up to #1133
-
- Also update `tests/gen_keys.sh` to set `aes256-ctr` encryption method
- for `key_ed25519_encrypted' explicitly.
-
- Closes #1135
-
-GitHub (26 Jul 2023)
-- [Jakob Egger brought this change]
-
- Fix private keys encrypted with aes-gcm methods (#1133)
-
- libssh2 1.11.0 fails to decrypt private keys encrypted with
- aes128-gcm@openssh.com and aes256-gcm@openssh.com ciphers.
-
- To reproduce the issue, you can create a test key with a command like
- the following:
-
- ```bash
- ssh-keygen -Z aes256-gcm@openssh.com -f id_aes256-gcm
- ```
-
- If you attempt to use this key for authentication, libssh2 returns the
- not-so-helpful error message "Wrong passphrase or invalid/unrecognized
- private key file format".
-
- The problem is that OpenSSH encrypts keys differently than packets. It
- does not include the length as AAD, and the 16 byte authentication tag
- is appended after the encrypted key. The length of the authentication
- tag is not included in the encrypted key length.
-
- I have not found any documentation for this behaviour -- I discovered it
- by looking at the OpenSSH source. See the `private2_decrypt` function in
- .
-
- This patch fixes the code for reading OpenSSH private keys encrypted
- with AES-GCM methods.
-
-Viktor Szakats (26 Jul 2023)
-- ci: add missing timeout to 'autotools distcheck' step
-
-- cmake: merge `set_target_properties()` calls
-
- Also rename variable `LIBSSH2_VERSION` to `LIBSSH2_LIBVERSION` in
- context of lib versioning to avoid collision with another use.
-
- Closes #1132
-
-- cmake: formatting [ci skip]
-
-- cmake: (re-)add zlib to `Libs.private` in `libssh2.pc`
-
- We mistakently added transitive zlib to `Requires.private` before, then
- removed it. This patch re-adds zlib, but this time to `Libs.private`,
- which is listing raw libs and should include transitive libs as well.
-
- Also add zlib when used as a direct dependency when zlib compression
- support is enabled.
-
- Follow-up to ef538069a661a43134fe7b848b1fe66b2b43bdac
-
- Closes #1131
-
-- cmake: formatting [ci skip]
-
-- cmake: use `wolfssl/options.h` for detection, like autotools
-
- Closes #1130
-
-- build: stop requiring libssl from openssl
-
- libssh2 does not use or need the TLS/SSL library of OpenSSL.
- It only needs libcrypto.
-
- Closes #1128
-
-- cmake: add openssl libs to `Libs.private` in `libssh2.pc`
-
- Also to sync up with autotools-generated `libssh2.pc`, that
- already added them.
-
- Closes #1127
-
-- Makefile.mk: stop linking unused mbedtls libs
-
- Stop linking libmbedtls and libmbedx509 (similarly to autotools).
- Only libmbedcrypto is necessary for libssh2.
-
-- cmake: bump minimum CMake version to v3.7.0
-
- Fixes the warning below, which appeared in CMake v3.27.0:
- ```
- CMake Deprecation Warning at CMakeLists.txt:39 (cmake_minimum_required):
- Compatibility with CMake < 3.5 will be removed from a future version of
- CMake.
-
- Update the VERSION argument value or use a ... suffix to tell
- CMake that the project does not need compatibility with older versions.
- ```
-
- Bump straight up to v3.7.0 to sync up with the curl project:
- https://github.com/curl/curl/blob/2900c29218d2d24ab519853589da84caa850e8c7/CMakeLists.txt#L64
-
- CMake release dates:
- v3.7.0 2016-11-11
- v3.5.0 2016-03-08
- v3.1.0 2014-12-17
-
- Closes #1126
-
-- build: tidy-up `libssh2.pc.in` variable names
-
- - prefix with `LIBSSH2_PC_`
-
- - match with the names of `pkg-config` values.
-
- - use the same names in autotools and CMake scripts.
-
- - use `LIBSSH2_VERSION` for the version number in autotools scripts,
- to match the name used in CMake.
-
- Closes #1125
-
-- libssh2.pc: re-add & extend support for static-only libssh2 builds
-
- Adapted for libssh2 from the curl commit message by James Le Cuirot:
-
- "A project built entirely statically will call `pkg-config` with
- `--static`, which utilises the `Libs.private:` field. Conversely it will
- not use `--static` when not being built entirely statically, even if
- there is only a static build of libssh2 available. This will most
- likely cause the build to fail due to underlinking unless we merge the
- `Libs:` fields.
-
- Consider that this is what the Meson build system does when it generates
- `pkg-config` files."
-
- This patch extends the above to `Requires:`, to mirror `Libs:` with
- `pkg-config` package names.
-
- Follow-up to 1209c16d93cba3c5e0f68c12fa4a5049f49c00d8 #1114
-
- Ref: https://github.com/libssh2/libssh2/pull/1114#issuecomment-1634334809
- Ref: https://github.com/curl/curl/commit/98e5904165859679cd78825bcccb52306ee3bb66
- Ref: https://github.com/curl/curl/pull/5373
- Closes #1119
-
-GitHub (14 Jul 2023)
-- [Nursan Valeyev brought this change]
-
- cmake: CMAKE_SOURCE_DIR -> PROJECT_SOURCE_DIR (#1121)
-
- Fixes compiling as dependency with FetchContent
-
- Co-authored-by: Viktor Szakats
-
-Viktor Szakats (14 Jul 2023)
-- autotools: use comma separator in `Requires.private` of `libssh2.pc`
-
- In `Requires*:`, the documented name separator is comma. We already used
- it in the CMake-generated `libssh2.pc`. Adjust the autotools-generated
- one to use it too, instead of spaces.
-
- Ref: https://linux.die.net/man/1/pkg-config
- Ref: https://gitlab.freedesktop.org/pkg-config/pkg-config/-/blob/d97db4fae4c1cd099b506970b285dc2afd818ea2/pkg-config.1
-
- Closes #1124
-
-- build: add/fix `Requires.private` packages in `libssh2.pc`
-
- - autotools was using `libwolfssl`. CMake left it empty. wolfSSL
- provides `wolfssl.pc`. This patch sets `Requires.private: wolfssl`
- with both build tools.
-
- - add `libgcrypt` to `Requires.private` with both autotools and CMake.
- Ref:
- https://github.com/gpg/libgcrypt/blob/e76e88eef7811ada4c6e1d57520ba8c439139782/src/libgcrypt.pc.in
- Present since 2005-04-22:
- https://github.com/gpg/libgcrypt/commit/32bf3f13e8b45497322177645bebf0b5d0c9cb8e
- Released in v1.3.0 2007-05-04:
- https://github.com/gpg/libgcrypt/releases/tag/libgcrypt-1.3.0
-
- - also stop adding transitive `zlib` deps to `Requires.private`.
- The referenced crypto package is adding it as nedded.
- This makes deduplication of the list redundant, so stop doing it.
- Follow-up to 2fc367900701e6149efc42bd674c4b69127756dd
-
- (`libssh2.pc` not tested as a project dependency.)
-
- Closes #1123
-
-- cmake: tidy-ups
-
- - dedupe `Requires.private` in `libssh2.pc`.
- `zlib` could appear on the list twice:
- ```
- Requires.private: libssl,libcrypto,zlib,zlib
- ```
- According to CMake docs `list(REMOVE_DUPLICATES ...)`, is supported by
- our minimum required CMake version (and by earlier ones even):
- https://cmake.org/cmake/help/v3.1/command/list.html#remove-duplicates
-
- - move `cmake_minimum_required()` to the top.
-
- - move `set(CMAKE_MODULE_PATH)` to the top.
-
- - delete duplicate `set(CMAKE_MODULE_PATH)`.
-
- - replace `CMAKE_CURRENT_SOURCE_DIR` with `PROJECT_SOURCE_DIR` in root
- `CMakeLists.txt` for robustness.
-
- - replace `gcovr` option with long-form for readability/consistency.
-
- - rename `GCOV_OPTIONS` to `GCOV_CFLAGS`. These are C options we enable
- when using gcov, not gcov tooling options.
-
- Closes #1122
-
-- openssl: add missing check for `LIBRESSL_VERSION_NUMBER` before use
-
- Fixes:
- ```
- openssl.h:101:5: warning: "LIBRESSL_VERSION_NUMBER" is not defined [-Wundef]
- LIBRESSL_VERSION_NUMBER >= 0x3050000fL
- ^
- ```
-
- Ref: https://github.com/libssh2/libssh2/issues/1115#issuecomment-1631845640
- Closes #1117
-
-- [Harmen Stoppels brought this change]
-
- Don't put `@LIBS@` in pc file
-
-- misc: delete redundant NULL check and assignment
-
- Follow-up to 724effcb47ebb713d3ef1776684b8f6407b4b6a5 #1109
-
- Ref: https://github.com/libssh2/libssh2/pull/1109#discussion_r1246613274
- Closes #1111
-
-- [renmingshuai brought this change]
-
- We should check whether *key_method is a NULL pointer instead of key_method
-
- Signed-off-by: renmingshuai
-
-GitHub (30 Jun 2023)
-- [ren mingshuai brought this change]
-
- Add NULL pointer check for outlen before use (#1109)
-
- Before assigning a value to the outlen, we need to check whether it is NULL.
-
- Credit: Ren Mingshuai
-
-Viktor Szakats (25 Jun 2023)
-- cmake: re-add `Libssh2:libssh2` for compatibiliy + lowercase namespace
-
- - add `libssh2:libssh2` target that selects the shared lib if built,
- otherwise the static one.
-
- - re-add `Libssh2:libssh2` target for compatibility with v1.10.0 and
- earlier. This is an alias for `libssh2:libssh2`.
-
- - keep `libssh2:libssh2_shared` and `libssh2_libssh2_static` targets.
-
- - allow using `find_package(libssh2)` in dependents as an alternative
- to `find_package(Libssh2)`.
-
- Co-authored-by: Radek Brich
- Suggested-by: Haowei Hsu
-
- Fixes #1103
- Fixes #731
- Closes #1104
-
-- example: fix regression in `ssh2_exec.c`
-
- Regression from b13936bd6a89993cd3bf4a18317ca5bd84bb08d7 #861 #846.
- Update a variable name missed above.
-
- Reported-by: PewPewPew
- Fixes #1105
- Closes #1106
-
-- docs: replace SHA1 with SHA256 in CMake example
-
-- checksrc: modernise perl file open
-
- Use regular variables and separate file open modes from filenames.
-
- Suggested by perlcritic
-
- Copied from https://github.com/curl/curl/commit/7f669aa0f1d40ef5d64543981f22bdc5af1272f5
- Copied from https://github.com/curl/trurl/commit/f2784a9240f47ee28a845
-
-- reuse: comply with 3.1 spec and 2.0.0 checker
-
- The checker tool was upgraded upstream to 2.0.0 and the REUSE
- Specification to version 3.1 (from 3.0), causing these new errors:
- ```
- reuse.project - WARNING - Copyright and licensing information for 'docs/INSTALL_AUTOTOOLS' have been found in 'docs/INSTALL_AUTOTOOLS' and the DEP5 file located at '.reuse/dep5'. The information in the DEP5 file has been overridden. Please ensure that this is correct.
- reuse.project - WARNING - Copyright and licensing information for 'tests/openssh_server/Dockerfile' have been found in 'tests/openssh_server/Dockerfile' and the DEP5 file located at '.reuse/dep5'. The information in the DEP5 file has been overridden. Please ensure that this is correct.
-
- The following files have no licensing information:
- * docs/INSTALL_AUTOTOOLS
- * tests/openssh_server/Dockerfile
- ```
- Via: https://github.com/libssh2/libssh2/actions/runs/5333572682/jobs/9664211341?pr=1098#step:4:4
-
- Ref: https://github.com/fsfe/reuse-tool/releases/tag/v2.0.0
- Ref: https://git.fsfe.org/reuse/docs/src/branch/stable/CHANGELOG.md#3-1-2023-06-21
-
- Original discovery: https://github.com/libssh2/libssh2/pull/1098#issuecomment-1600719575
-
- Fixes #1101
- Closes #1102
-
-- tests: trap signals in scripts
-
- Closes #1098
-
-- test_sshd.test: fixup to distcheck failure
-
- Fixes:
- ```
- ERROR: test_sshd.test - missing test plan
- ERROR: test_sshd.test - exited with status 1
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/5322354271/jobs/9638694218#step:10:532
-
- Caused by trying to create the log file in a read-only directory.
-
- Follow-up to 299c2040625830d06ad757d687807a166b57d6de
- Closes #1099
-
-GitHub (21 Jun 2023)
-- [Viktor Szakats brought this change]
-
- test_sshd.test: show sshd and test connect logs on harness failure (#1097)
-
-- [Joel Depooter brought this change]
-
- Fix incorrect byte offset in debug message (#1096)
-
- Fixes debug log message
-
- Credit:
- Joel Depooter
-
-Viktor Szakats (16 Jun 2023)
-- tidy-up: delete whitespace at EOL [ci skip]
-
-- mbedtls: include `version.h` for `MBEDTLS_VERSION_NUMBER`
-
- Older (2021 or earlier?) mbedTLS releases require this.
-
- Reported-by: rahmanih on Github
- Fixes #1094
- Closes #1095
-
-- hostkey: do not advertise ssh-rsa when SHA1 is disabled
-
- Before this patch OpenSSL, mbedTLS, WinCNG and OS/400 advertised both
- SHA2 and SHA1 host key algos, even when SHA1 was not supported by the
- crypto backend or when forcefully disabled via `LIBSSH2_NO_RSA_SHA1`.
-
- Reported-by: João M. S. Silva
- Fixes #1092
- Closes #1093
-
-- openssl.h: whitespace tidy-up [ci skip]
-
-GitHub (14 Jun 2023)
-- [Dan Fandrich brought this change]
-
- test_sshd.test: set a safe PID directory (#1089)
-
- The compiled in default to sshd can be a non-writable location since it
- expects to be run as root.
-
-Viktor Szakats (13 Jun 2023)
-- mingw: fix printf mask for 64-bit integers
-
- Before 02f2700a61157ce5a264319bdb80754c92a40a24 #846 #876, we used
- `%I64d'. That patch changed this to `%lld`. This patch uses `PRId64`
- (defined in `inttypes.h`).
-
- Fixes #1090
- Closes #1091
-
-- test_sshd.test: minor cleanups
-
-Daniel Stenberg (7 Jun 2023)
-- provide SPDX identifiers
-
- - All files have prominent copyright and SPDX identifier
- - If not embedded in the file, in the .reuse/dep5 file
- - All used licenses are in LICENSES/ (not shipped in tarballs)
- - A new REUSE CI job verify that all files are OK
-
- Assisted-by: Viktor Szakats
-
- Closes #1084
-
-Viktor Szakats (6 Jun 2023)
-- src: improve MSVC C4701 warning fix
-
- Simplify the code to avoid this warning. This might also help avoiding
- it with other compilers (e.g. gcc?).
-
- Improves 02f2700a61157ce5a264319bdb80754c92a40a24 #876
- Might fix #1083
- Closes #1086
-
-Daniel Stenberg (5 Jun 2023)
-- configure.ac: remove AB_INIT
-
- Not used. Remove m4/autobuild.m4 as well
-
-Viktor Szakats (4 Jun 2023)
-- copyright: remove years from copyright headers
-
- Also:
- - uppercase `(C)`.
- - add missing 'All rights reserved.' lines.
- - drop duplicate 'Author' lines.
- - add copyright headers where missing.
- - enable copyright header check in checksrc.
-
- Reasons for deleting years (copied as-is from curl):
- - they are mostly pointless in all major jurisdictions
- - many big corporations and projects already don't use them
- - saves us from pointless churn
- - git keeps history for us
- - the year range is kept in COPYING
-
- Closes #1082
-
-- tests: cast to avoid `-Wchar-subscripts` with Cygwin
-
- ```
- In file included from $HOME/src/cygwin/libssh2/libssh2-1.11.0-1.x86_64/src/libssh2-1.11.0/tests/openssh_fixture.c:57:
- $HOME/src/cygwin/libssh2/libssh2-1.11.0-1.x86_64/src/libssh2-1.11.0/tests/openssh_fixture.c: In function 'run_command_varg':
- $HOME/src/cygwin/libssh2/libssh2-1.11.0-1.x86_64/src/libssh2-1.11.0/tests/openssh_fixture.c:136:37: warning: array subscript has type 'char' [-Wchar-subscripts]
- 136 | while(end > 0 && isspace(buf[end - 1])) {
- | ~~~^~~~~~~~~
- ```
- Ref: https://github.com/libssh2/libssh2/files/11644340/cygwin-x86_64-libssh2-1.11.0-1-check.log
-
- Reported-by: Brian Inglis
- Fixes #1080
- Closes #1081
-
-- tidy-up: avoid exclamations, prefer single quotes, in outputs
-
- Closes #1079
-
-- autotools: improve libz position
-
- We repositioned crypto libs in 4f0f4bff5a92dce6a6cd7a5600a8ee5660402c3f
- via #941 and subsequently in d4f58f03438e326b8696edd31acadd6f3e028763
- from d93ccf4901ef26443707d341553994715414e207 via #1013.
-
- This patch moves libz accordingly, to unbreak certain build scenarios.
-
- Reported-by: Kenneth Davidson
- Regression from 4f0f4bff5a92dce6a6cd7a5600a8ee5660402c3f #941
- Fixes #1075
- Closes #1077
-
-- src: bump `hash_len` to `size_t` in `LIBSSH2_HOSTKEY_METHOD`
-
- Follow-up to 7b8e02257f01a6dac5f65305b18bb74a157fb5c4
- Closes #1076
-
-- ci: add non-static autotools i386 build, ignore GHA updates on AppVeyor
-
- Add a non-static autotools build to GitHub Actions. Make this build
- target i386 and libgcrypt, to test a new build combination if we are at
- it.
-
- Also:
- - GHA: add necessary generic bits for i386 autotools builds.
- - AppVeyor CI: teach it to ignore commits updating our GHA config.
-
- Follow-up to 572c57c9d8d4e89cfce19dde40125d55481256d1 #1072
- Closes #1074
-
-GitHub (31 May 2023)
-- [Xi Ruoyao brought this change]
-
- autotools: skip tests requiring static lib if `--disable-static` (#1072)
-
- Co-authored-by: Viktor Szakats
- Regression from 83853f8aea0e2f739cacd491632eb7fd3d03ad2d #663
- Fixes #1056
-
-Viktor Szakats (31 May 2023)
-- ci: prefer `=` operator in shell snippets
-
- Closes #1073
-
-- src: bump DSA and ECDSA sign `hash_len` to `size_t`
-
- Closes #1055
-
-- scp: fix missing cast for targets without large file support
-
- E.g. on 32-bit Linux. Issue revealed after adding i386 Linux CI build
- in abdf40c741c575f94bdea1c67a9d1182ff813ccb #1057.
-
- ```
- /home/runner/work/libssh2/libssh2/src/scp.c: In function 'scp_recv':
- /home/runner/work/libssh2/libssh2/src/scp.c:765:23: error: conversion from 'libssh2_int64_t' {aka 'long long int'} to '__off_t' {aka 'long int'} may change value [-Werror=conversion]
- 765 | sb->st_size = session->scpRecv_size;
- | ^~~~~~~
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/5126803482/jobs/9221746299?pr=1054#step:12:51
-
- Regression from 5db836b2a829c6fff1e8c7acaa4b21b246ae1757 #1002
- Closes #1060
-
-- mbedtls.h: formatting [ci skip]
-
- For consistency with `mbedtls.c`.
-
- Follow-up to 1153ebdeba563ac657b525edd6bf6da68b1fe5e2
-
-- libssh2.h: bump to 1.11.1_DEV [ci skip]
-
-- mbedtls: use more `size_t` to sync up with `crypto.h`
-
- Ref: 5a96f494ee0b00282afb2db2e091246fc5e1774a #846 #879
-
- Fixes #1053
- Closes #1054
-
-- ci: drop redundant/unused vars, sync var names
-
- Closes #1059
-
-- ci: add i386 Linux build (with mbedTLS)
-
- Also:
- - reorder Linux build matrix to make build tool more visible.
- - hide apt-get progress bar.
- - prepare package install step for i386 builds.
-
- Detects bug #1053
- Closes #1057
-
-- checksrc: switch to dot file
-
- Closes #1052
-
-Version 1.11.0 (30 May 2023)
-
-Daniel Stenberg (30 May 2023)
-- libssh2.h: bump to 1.11.0 for release
-
-GitHub (30 May 2023)
-- [Will Cosgrove brought this change]
-
- Libssh2 1.11 release notes, copyright (#1048)
-
- * Libssh2 1.11 release notes, copyright
-
-Viktor Szakats (29 May 2023)
-- add copyright/credits
-
- Closes #1050
-
-- ci: add LIBSSH2_NO_AES_CBC to GNU Make build
-
- Closes #1049
-
-- ci: add wolfSSL Linux builds
-
- Exclude wolfSSL builds from tests. All fail:
-
- ```
- 2/43 Test #2: test_aa_warmup ............................***Failed 5.59 sec
- libssh2_session_handshake failed (-44): Unable to ask for ssh-userauth service
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/5085775952/jobs/9139583212#step:12:942 (with logging)
- Ref: https://github.com/libssh2/libssh2/actions/runs/5085586301/jobs/9139192562#step:12:225
-
- wolfSSL version:
- ```
- Get:1 http://azure.archive.ubuntu.com/ubuntu jammy/universe amd64 libwolfssl32 amd64 5.2.0-2 [818 kB]
- Get:2 http://azure.archive.ubuntu.com/ubuntu jammy/universe amd64 libwolfssl-dev amd64 5.2.0-2 [1194 kB]
- ```
-
- Cherry-picked from #1046
- Closes #1046
-
-- ci: mbedTLS build config tidy-up
-
- Cherry-picked from #1046
-
-- wolfssl: fix detection of AES-GCM feature
-
- Follow-up to df513c0128e1a811ad863d153892618e728845f0
-
- Ref: https://github.com/libssh2/libssh2/issues/1020#issuecomment-1562069241
- Closes #1045
-
-- build: fix 'unused' compiler warnings with all `NO` options set
-
- - add `LIBSSH2_NO_ED25519` build-time option to force-disable ED25519
- support. Useful to replicate crypto-backend builds without ED25519,
- such as wolfSSL.
-
- - openssl: fix unused variable and function warnings with all supported
- `LIBSSH2_NO_*` options enabled.
-
- - mbedtls: fix misplaced `#endif` leaving out the required internal
- public function `libssh2_supported_key_sign_algorithms()`.
-
- - mbedtls: add missing prototype for two internal public functions.
-
- - delete a redundant block.
-
- All `NO` options:
- ```shell
- CPPFLAGS='
- -DLIBSSH2_NO_MD5 -DLIBSSH2_NO_HMAC_RIPEMD -DLIBSSH2_NO_DSA
- -DLIBSSH2_NO_RSA -DLIBSSH2_NO_RSA_SHA1
- -DLIBSSH2_NO_ECDSA -DLIBSSH2_NO_ED25519 -DLIBSSH2_NO_AES_CTR
- -DLIBSSH2_NO_BLOWFISH -DLIBSSH2_NO_RC4 -DLIBSSH2_NO_CAST
- -DLIBSSH2_NO_3DES'
- ```
-
- Closes #1044
-
-- cmake: avoid `list(PREPEND)` for compatibility
-
- `list(PREPEND)` requires CMake v3.15, our minimum is v3.1. `APPEND`
- should work fine for headers anyway.
-
- Also fix a wrongly placed comment.
-
- Ref: https://cmake.org/cmake/help/latest/command/list.html#prepend
-
- Regression from 1e3319a167d2f32d295603167486e9e88af9bb4e
-
- Closes #1043
-
-- checksrc: verify label indent, fix fallouts
-
- Also update two labels to match the rest of the source.
-
- checksrc update credit: Emanuele Torre @emanuele6
-
- Ref: https://github.com/curl/curl/pull/11134
-
- Closes #1042
-
-- tidy-up: minor nits
-
-- ci: drop default shared/static configuration options
-
- Both autotools and cmake build both shared and static lib by default.
-
- Ref: 896154bc17f000c0a1bb89b74bc879692ac0d47c
-
- Delete configuration enabling these explicitly in CI jobs.
-
- Cherry-picked from #1036
- Closes #1036
-
-- cmake: enable shared libssh2 library by default
-
- This brings default behaviour in sync with autotools, which builds both
- lib flavours by default.
-
- (Notice that on Windows, autotools includes the Windows Resource in the
- static library, when building both at the same time. CMake doesn't have
- this issue.)
-
- Enabling both lib flavours has a side-effect when using non-MinGW
- toolchains (e.g. MSVC): to resolve the filename conflict between import
- and static libraries, we add a suffix to the static lib, naming it
- `libssh2_static.lib`. This can break dependent builds relying on
- `libssh2.lib` for linking the static libssh2.
-
- Workarounds:
-
- - disable either shared or static libssh2 via
- `-DBUILD_STATIC_LIBS=OFF` or
- `-DBUILD_SHARED_LIBS=OFF`. This results in a libssh2 library (either
- static or shared) without a prefix: `libssh2.lib`.
-
- - set a custom static library suffix via:
- `-DSTATIC_LIB_SUFFIX=_my_static`. Resulting in
- `libssh2_my_static.lib`, and import library
- `libssh2.lib`.
-
- - set a custom import library suffix via:
- `-DIMPORT_LIB_SUFFIX=_my_implib`. Resulting in
- `libssh2_my_implib.lib` import library, and static library
- `libssh2.lib`.
-
- - customize the default static/import library suffix (incl. extension)
- via
- `-DCMAKE_STATIC_LIBRARY_SUFFIX=_my_static_suffix.lib` or
- `-DCMAKE_IMPORT_LIBRARY_SUFFIX=_my_import_suffix.lib`.
-
- Cherry-picked from #1036
-
-- cmake: tweak static/import lib name collision avoidance logic
-
- The collision issue affects (typically) MSVC, when building both shared
- and static libssh2 in one go.
-
- Ref: https://stackoverflow.com/questions/2140129/what-is-proper-naming-convention-for-msvc-dlls-static-libraries-and-import-libr
-
- Initially we handled this by appending the `_imp` suffix to the import
- library filename. This is how curl tackles this, but on a second look,
- this solution seem to be accidental and has no widespread use.
-
- It seems more widely accepted to use the '_static' suffix for the static
- library. This patch implements this.
-
- (MinGW, Cygwin and unixy platforms are not affected by this issue.)
-
- Follow-up to 4e2580628dd1f8dc51ac65ac747ebcf0e93fa3d1
-
- Cherry-picked from #1036
-
-- cmake: add `IMPORT_LIB_SUFFIX` (like `STATIC_LIB_SUFFIX`)
-
- Allow resolving the import/static library name collision also by setting
- a custom _import_ library name suffix.
-
- Follow-up to 4e2580628dd1f8dc51ac65ac747ebcf0e93fa3d1
-
- Cherry-picked from #1036
-
-- ci: do not disable shared lib with msys2/autotools in GHA
-
- Cherry-picked from #1036
-
-- Makefile.mk: fix `DYN=1 test` by skipping tests needing static lib
-
- `DYN=1` means to build examples/tests against the shared libssh2.
-
- Before this patch this was broken for building tests. This patch skips
- building tests that require the static libssh2 library, so the build now
- succeeds.
-
- Also move the list of tests that require static lib from
- `CMakeLists.txt` to `Makefile.inc`, so that we can reuse it in
- `Makefile.mk`.
-
- Couldn't find a way to also reuse it in `Makefile.am`. Move the
- `Makefile.am` specific definitions close to the shared list, to make it
- easier to keep them synced.
-
- Cherry-picked from #1036
-
-- ci: make one of the AppVeyor CMake jobs shared-only
-
- This build combination did not have a CI test before.
-
- Cherry-picked from #1036
-
-- cmake: allow tests with `BUILD_STATIC_LIBS=OFF`
-
- Before this patch, the CMake build did not allow to disable static
- libssh2 library while also building tests.
-
- This patch removes this constraint, and makes this combination possible.
- In this case the 3 (at the moment) tests that require a static libssh2
- library, are skipped from the build and test runs.
-
- Cherry-picked from #1036
-
-- build: fix to set `-DLIBSSH2DEBUG` for tests
-
- Required for tests using libssh2 internals. These are the ones
- requiring the libssh2 _static_ lib.
-
- Before this patch, `src` and `tests` declared the `session` structure
- differently, due to extra struct members added with the `LIBSSH2DEBUG`
- macro set. But, the macro was only set for `src` when using CMake. At
- runtime this caused struct members to be at different offsets between
- lib and test code, resulting in the test failures below.
-
- Due to another bug in the affected test, these failures did not reflect
- in the exit code, which always returned success, so this went unnoticed
- for a good while. Fixed in: 84d31d0ca7b647ad4c2aa92bf8f4a94b233f5d3b
-
- ```
- Start 5: test_auth_keyboard_info_request
- [...]
- 5: Test case 1 passed
- 5: Test case 2 passed
- 5: Test case 3: expected return code to be 0 got -1
- 5: Test case 4: expected last error code to be "-6" got "-38"
- 5: Test case 5: expected last error code to be "-6" got "-38"
- 5: Test case 6: expected last error code to be "-6" got "-38"
- 5: Test case 7: expected last error message to be "Unable to decode keyboard-interactive number of keyboard prompts" got "userauth keyboard data buffer too small to get l
- 5: Test case 8: expected last error code to be "-41" got "-38"
- 5: Test case 9: expected return code to be 0 got -1
- 5: Test case 10: expected return code to be 0 got -1
- 5: Test case 11: expected last error code to be "-6" got "-38"
- 5: Test case 12: expected last error message to be "Unable to decode user auth keyboard prompt echo" got "userauth keyboard data buffer too small to get length"
- 5: Test case 13: expected return code to be 0 got -1
- 5: Test case 14: expected return code to be 0 got -1
- 5: Test case 15: expected last error code to be "-6" got "-38"
- 5: Test case 16: expected last error code to be "-6" got "-38"
- 5: Test case 17: expected last error code to be "-6" got "-38"
- 5: Test case 18: expected last error code to be "-6" got "-38"
- ```
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46925869/job/i9uasceu3coss0i2#L440
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46983040/job/c3vag25c26a77lyr#L485
-
- Cherry-picked from #1037
- Closes #1037
-
-- test_auth_keyboard_info_request: fix to return failure
-
- Before this patch, this test returned success even when one of its tests
- failed. Fix it by returning 1 in case any of the tests fails.
-
- This issue masked a CMake build bug with logging enabled. Subject to an
- upcoming patch.
-
- Cherry-picked from #1037
-
-- test_auth_keyboard_info_request: fix indentation
-
- Cherry-picked from #1037
-
-- tidy-up: move comment off from copyright header
-
- Cherry-picked from #1037
-
-- ci: enable shared libs in msys2/macOS cmake builds
-
- Shared libs improve example/tests build times. For "unity"
- builds the overhead of building shared lib is negligible, so
- this even reduced the overall build-time.
-
- Follow-up to 3d64a3f5100f7f4cf52202396eb4f1c3f3567771
- Follow-up to d93ccf4901ef26443707d341553994715414e207
-
- Tests:
- https://github.com/libssh2/libssh2/actions/runs/4906586658: unity builds enabled
- https://github.com/libssh2/libssh2/actions/runs/4906925743: unity builds enabled + parallel msys2 builds
- https://github.com/libssh2/libssh2/actions/runs/4906777629: unity + shared lib (this commit)
- https://github.com/libssh2/libssh2/actions/runs/4906927190: unity + shared lib (this commit) + parallel msys2 builds
-
- Consider making shared libs enabled by default also in CMake, to sync it with autotools?
-
- Closes #1035
-
-- ci: add missed --parallel 3 from msys2 cmake builds
-
- Follow-up to 3d64a3f5100f7f4cf52202396eb4f1c3f3567771
-
-- cmake: add and test "unity" builds
-
- "Unity" (aka "jumbo", aka "amalgamation" builds concatenate source files
- before compiling. It has these benefits for example: faster builds,
- improved code optimization, cleaner code. Let's support and test this.
-
- - enable unity builds for some existing CI builds to test this build
- scenario.
- - tune `UNITY_BUILD_BATCH_SIZE` size.
- - disable unity build for example and test programs (they use one source
- each already).
-
- You can enable it by passing `-DCMAKE_UNITY_BUILD=ON` to cmake.
- Supported by CMake 3.16 and newer.
-
- Ref: https://cmake.org/cmake/help/latest/prop_tgt/UNITY_BUILD.html
-
- Closes #1034
-
-- tests: simplify passing `srcdir` to tests
-
- Before this patch libssh2 used a variety of solutions to pass the source
- directory to tests: `FIXTURE_WORKDIR` build-time macro (cmake),
- `FIXTURE_WORKDIR` envvar (unused), setting `srcdir` manually
- (autotools), setting current directory (cmake), and also `builddir`
- envvar (autotools) for passing current working dir to `mansyntax.sh`.
-
- This patch reduces this to using existing `srcdir` with autotools and
- setting it ourselves in CMake. This was mostly enabled by this recent
- patch: 4c9ed51f962f542b98789b15bedaaa427f4029a2
-
- Details:
-
- - cmake: replace baked-in `FIXTURE_WORKDIR` macro with env.
-
- Added in 54bef4c5dad868a9d45fdbfca9729b191c0abab5 #198 (2018-03-21)
-
- - rename `FIXTURE_WORKDIR` to `srcdir`, to match autotools.
-
- - cmake: add missing `srcdir` for algo and sshd tests.
-
- - session_fixture: stop `chdir()`-ing, rely on prefixing with `srcdir`.
-
- Changing current directory should be unnecessary after
- 4c9ed51f962f542b98789b15bedaaa427f4029a2 #801 (2023-02-24),
- that prefixes referenced input filenames with the `srcdir` envvar.
-
- The `srcdir` envvar was already exported by autotools, and now we're
- also setting it from CMake.
-
- - cmake: stop setting `WORKING_DIRECTORY`, rely on `srcdir` env.
-
- `WORKING_DIRECTORY` is no longer necessary, after passing `srcdir` to
- all tests, so they can find our source tree and keys/etc in it
- regardless of the current directory.
-
- Also this past commit hints that `WORKING_DIRECTORY` wasn't always
- working for this purpose as expected:
- "tests: Xcode doesn't obey CMake's test working directory"
- Ref: https://github.com/libssh2/libssh2/pull/198/commits/10a5cbf945abcc60153ee3d59284d09fc64ea152
-
- - autotools: delete explicit `srcdir` for test env.
-
- Added in 13f8addd1bc17e6c55d52491cc6304319ac38c6d (2015-07-02)
-
- automake documents `srcdir` as exported to the test environment:
- https://github.com/autotools-mirror/automake/blob/c04c4e8856e3c933239959ce18e16599fcc04a8b/doc/automake.texi#L9302-L9304
- https://www.gnu.org/software/automake/manual/html_node/Scripts_002dbased-Testsuites.html
- It's mentioned in the docs back in 1997 and got a regression test in
- 2012. We can safely assume it to be available without setting it
- ourselves.
-
- - autotools: delete explicit `builddir`.
-
- Added in 13f8addd1bc17e6c55d52491cc6304319ac38c6d (2015-07-02)
-
- It seems this wasn't necessary to make the above fix work, and
- `mansyntax.sh` is able to figure out the build workdir by reading
- `$PWD`. Our out-of-tree and `make distcheck` CI builds also work
- without it.
-
- Let us know if there is a scenario we're missing and needs this.
-
- Closes #1032
-
-- src: fix `libssh2_store_*()` for >u32 inputs
-
- `_libssh2_store_str()` and `_libssh2_store_bignum2_bytes()` accept
- inputs of `size_t` max, store the size as 32-bit unsigned integer, then
- store the complete input buffer.
-
- With inputs larger than `UINT_MAX` this means the stored size is smaller
- than the data that follows it.
-
- This patch truncates the stored data to the stored size, and now returns
- a boolean with false if the stored length differs from the requested
- one. Also add `assert()`s for this condition.
-
- This is still not a correct fix, as we now dump consistent, but still
- truncated data which is not what the caller wants. In future steps we'll
- need to update all callers that might pass large data to this function
- to check the return value and handle an error, or make sure to not call
- this function with more than UINT_MAX bytes of data.
-
- Ref: c3bcdd88a44c4636818407aeb894fabc90bb0ecd (2010-04-17)
- Ref: ed439a29bb0b4d1c3f681f87ccfcd3e5a66c3ba0 (2022-09-29)
-
- Closes #1025
-
-- cmake: limit WinCNG to Windows
-
- After deleting the `bcrypt.h` check, no check remained. Restore
- a `WIN32` check here to ensure WinCNG is not enabled outside Windows.
-
- Follow-up to 1289033598546ee5089ff0fc4369d24e1e2be81f
-
- Tested-in #1032
-
-- cmake: move `CMAKE_VS_GLOBALS` setting to CI configs
-
- To not force this setting for local builds where they might serve
- a good purpose.
-
- It makes our CI runs slightly faster and we don't need to track
- file changes in unattended, single, CI runs.
-
- Cherry-picked from #1031
-
-- cmake: prefill for faster config phase on Windows
-
- Prefill known detection results on Windows with MinGW and MSVC, to
- avoid spending time on detecting these on every cmake configuration
- run.
-
- With MinGW + clang and MSVC, this elminates all detections.
- With MinGW + gcc, it reduces them to 3.
-
- Cherry-picked from #1031
-
-- libssh2_setup.h: set `HAVE_INTTYPES_H` for MSVC
-
- To sync up the hand-crafted config with actual detection results
- by CMake and autotools. Sources compiled fine without it anyway.
-
- Cherry-picked from #1031
-
-- cmake: re-add `select()` detection (regression)
-
- `select()` detection suffered two regressions: First I accidentally
- deleted it for non-Windows [1]. Then the Windows-specific setting got
- missed from the generated `libssh2_config.h` after a rearrangement in
- `CMakeLists.txt` files.
-
- [1] 31fb8860dbaae3e0b7d38f2a647ee527b4b2a95f (2023-03-07)
- [2] 803f19f004eb6a5b525c48fff6f46a493d25775c (2023-04-18)
-
- This patch restores detection. For Windows, enable it unconditionally,
- not only for speed reasons, but because detection needs `ws2_32`, and
- even that is broken on the x86 platform. According to the original
- `cmake/SocketLibraries.cmake`, caused by a calling convention mismatch.
- FWIW autotools detects it correctly.
-
- Cherry-picked from #1031
-
-- ci: merge make job into msys2 section, enable zlib + openssl
-
- Follow up to dd625766271a0ba13f5ac661bdc2fa40bbfa580a
-
- Cherry-picked from #1030
-
-- ci: add missing timeouts for autotools tests
-
- Cherry-picked from #1030
-
-- ci: add mingw-w64 clang and gcc CMake jobs
-
- Cherry-picked from #1030
-
-- cmake: assume `bcrypt.h` with WinCNG
-
- autotools already didn't check for `bcrypt.h`, and such check is only
- required for old/legacy mingw without obsolete/incomplete Windows
- headers.
-
- curl deprecated old-mingw support just recently and will delete support
- in September 2023.
-
- This patch saves some complexity and detection time by dropping this
- check for CMake. Meaning that mingw-w64 is now required to compile
- libssh2 when using the WinCNG backend for 32-bit builds. Other backends
- and CPU platforms are not affected.
-
- Ref: https://github.com/curl/curl/commit/e4d5685cb5d6eb07e1b43156fd7e3ba3563afba5
-
- Closes #1026
-
-- cmake: do not check for `poll()` on Windows
-
- While it seems to exist on mingw in theory, it's not detected as of this
- writing. It also has issues, and not ready for production use:
- https://stackoverflow.com/questions/1671827/poll-c-function-on-windows
-
- On MSVC it's even less supported.
-
- Skip checking this to save CMake detection time.
-
- Closes #1027
-
-- agent_win: make a struct static and other build improvements
-
- Also:
- - merge back `agent.h` into `agent.c` where it was earlier.
- Ref: c998f79384116e9f6633cb69c2731c60d3a442bb
- - introduce `HAVE_WIN32_AGENT` internal macro.
- - fix two guards to exclude more code unused in UWP builds.
-
- Follow-up to 1c1317cb768688eee0e5496c72683190aaf63b29
-
- Closes #1028
-
-- tidy-up: formatting nits
-
- Whitespace and redundant parenthesis in `return`s.
-
- Closes #1029
-
-GitHub (3 May 2023)
-- [Nick Woodruff brought this change]
-
- sftp: parse attribute extensions, if present, to avoid stream parsing errors (#1019)
-
- Prevents directory listing errors when attribute extensions are present
- by advancing stream parsing past extensions.
-
-Viktor Szakats (3 May 2023)
-- tests: merge `sshd_fixture.sh` into `test_sshd.test`
-
- Merge the loop executing multiple tests and the script that actually
- launches the tests into a single script. This same script is now called
- from both autotools and CMake. autotools loads the list of tests from
- `Makefile.inc`, CMake passes it via the command-line. It's also possible
- to call the script manually with a custom list of tests or individual
- ones.
-
- With this setup we're now launching a single sshd session for all tests,
- instead of launching and killing it for each test. This did not improve
- reliability of these test on CI machines, and it's easy to go back to
- the previous behaviour if necessary.
-
- Also:
-
- - allow passing custom sshd options via `SSHD_FLAGS`.
-
- - add `SSHD_TESTS_LIMIT_TO` to limit the number of tests to its value.
- E.g. `SSHD_TESTS_LIMIT_TO=1` executes the first test only. Meant for
- debugging.
-
- - use `ssh` to test the connection (if available) instead of fixed
- amount of wait. Made to also work on Windows.
-
- - set `PermitRootLogin yes` in `sshd`, to allow running tests as root.
-
- - show `sshd` path and version.
-
- Cherry-picked from #1017 (the last one)
- Closes #1024
-
-- ci: make sure to run tests after all builds in GHA
-
- Whenever possible. Due to flakiness/hangs/timeouts, keep sshd
- tests disabled on Windows and macOS.
-
- Also keep Docker tests disabled on these platforms, they do not work:
-
- GHA Windows:
- ```
- no matching manifest for windows/amd64 in the manifest list entries
- ```
-
- GHA macOS:
- ```
- sh: docker: command not found
- ```
-
- It's not possible to run UWP and ARM64 binaries:
- UWP:
- ```
- Test #2: test_simple ......................Exit code 0xc0000135
- ```
- Needs but doesn't find: `VCRUNTIME140_APP.dll`.
-
- ARM64
- ```
- D:/a/libssh2/libssh2/bld/tests/Release/test_ssh2.exe: cannot execute binary file: Exec format error
- ```
-
- Cherry-picked from #1017
-
-- tests: disable sshd tests on Windows via new options
-
- Instead of using hacks inside the build systems.
-
- `SSHD` variable added to GitHub Actions is not currently used.
- Added there to make it easy to experiment with these tests and
- the path is non-trivial to discover. Using the Windows built-in
- sshd server is another option (haven't discovered its path yet).
-
- Cherry-picked from #1017
-
-- tests: add cmake/autotools options to disable running tests
-
- autotools:
- - `--disable-docker-tests`
- - `--disable-sshd-tests`
-
- cmake:
- - `RUN_DOCKER_TESTS`
- - `RUN_SSHD_TESTS`
-
- Update automake and ci to use this new flag and delete former logic
- of relying on Windows detection and `HOST_WINDOWS`. Also fix honoring
- this when running `test_read_algos.test`.
-
- This allows to disable these individually and on per-CI/local-job basis.
- To run as much tests as the env allows.
-
- Cherry-picked from #1017
-
-- ci: add `make distcheck` job
-
- Cherry-picked from #1017
-
-- ci: switch to out-of-tree autotools builds
-
- Cherry-picked from #1017
-
-- ci: restore parallel builds with cmake
-
- Also add missing -j3 for macOS builds.
-
- Partial revert of 0d08974633cfc02641e6593db8d569ddb3644255
-
- Cherry-picked from #1017
-
-- ci: sync names, steps, syntax, build dirname between jobs
-
- Also:
-
- - delete an unused 64-bit option for Linux (all jobs are 64-bit).
-
- - fix to not install libgcrypt and openssl when doing mbedTLS builds.
-
- [ Empty lines after multiline run commands are solely to unbreak
- my editor's syntax highlighting. They can be deleted in the future ]
-
- Cherry-picked from #1017
-
-- ci: add `Makefile.mk` test, with `LIBSSH2_NO_*` options
-
- Cherry-picked from #1017
-
-- Makefile.mk: use Makefile.inc from example and tests
-
- Instead of assembling the list using `$(wildcard ...)`.
-
- Also split off a `tests/Makefile.inc` from `tests/Makefile.am`. With its
- simpler syntax, this also allows to delete some complexity from the
- CMake loader.
-
- Cherry-picked from #1017
-
-- example, tests: fix ssh2 to correctly return failure
-
- Before this patch ssh2 and test_ssh2 returned success even if the session
- failed at `libssh2_session_handshake()` or after.
-
- This patch depends on cda41f7cb87c3af5258ba48ccef19d3efdbd3d3b, that fixed
- running test_ssh2 on Windows via sshd_fixture.
-
- Cherry-picked from #1017
-
-- tests: set -e -u in shell scripts
-
- Cherry-picked from #1017
-
-- cmake: use shared libs again in example and tests
-
- Re-sync with autotools and v1.10.0 behavior.
-
- This improves build times. It also allows to stop building our special
- shared test target to test shared builds.
-
- Follow-up to 4e2580628dd1f8dc51ac65ac747ebcf0e93fa3d1
-
- Cherry-picked from #1017
- Closes #1022
-
-- tests: retry KEX failures when using the WinCNG backend
-
- Twice. This tests are flaky and we haven't figured out why. In the
- meantime use this workaround to test and log these issues, but also
- ensure that CI run aren't flagged red because of it.
-
- Also:
- - kex: add debug message when hostkey `sig_verify` fails,
- to help tracking WinCNG KEX failures.
- - test_ssh2: also add retry logic.
- I'm not quite sure this is correct. Please let me know.
- - session_fixture: bump up `src_path` slots to fit retries and show
- message when hitting the limit.
- - session_fixture: clear `kbd_password` static variable after use.
- - session_fixture: close and deinit socket after use.
- - session_fixture: deinit libssh2 after use.
-
- Ref: #804 #846 #979 #1012 #1015
-
- Cherry-picked from #1017
- Closes #1023
-
-- example, test_ssh2: shutdown socket before close
-
- Syncing them with `tests/session_fixture.c`.
-
- Cherry-picked from #1017
-
-- ci.yml: fix indentation [ci skip]
-
- Cherry-picked from #1017
-
-- Makefile.mk: make tests depend on runner lib
-
- Cherry-picked from #1017
-
-- build: compile agent_win.c via agent.c
-
- Silences these warnings on non-Windows:
- ```
- ranlib: file: libssh2.a(agent_win.c.o) has no symbols
- ```
-
- Cherry-picked from #1017
-
-- cmake: delete obsolete comment
-
- Follow-up to 80175921638fa0a345237d23206a2ad1644cdd9b
-
- Cherry-picked from #1017
-
-- checksrc.sh: fix it to run from any current directory
-
- Also silence a shellcheck warning.
-
- Cherry-picked from #1017
-
-- ISSUE_TEMPLATE: ask for crypto backend version
-
- Also fix casing in backend names.
-
- Cherry-picked from #1017
-
-- tests: fix newlines in test keys for sshd on Windows
-
- Make sure these files get LF newlines on checkout. Before this patch
- a checked out libssh2 Git repository may have used CRLF newlines in text
- files, include test keys. Private keys with CRLF newlines could confuse
- sshd on Windows:
-
- ```
- # sshd version: 'OpenSSH_9.2, OpenSSL 1.1.1t 7 Feb 2023'
- Unable to load host key "/d/a/libssh2/libssh2/tests/openssh_server/ssh_host_ed25519_key": invalid format
- Unable to load host key: /d/a/libssh2/libssh2/tests/openssh_server/ssh_host_ed25519_key
- ```
- Ref: https://github.com/libssh2/libssh2/actions/runs/4846188677/jobs/8635575847#step:6:39
-
- Cherry-picked from #1017
-
-- cmake: move option descriptions next to definition
-
- Cherry-picked from #1017
-
-- checksrc: sync with curl
-
- There were no new issues detected.
-
- Cherry-picked from #1017
-
-- openssl: enable AES-GCM with wolfSSL
-
- Follow-up to 3c953c05d67eb1ebcfd3316f279f12c4b1d600b4 #797
-
- There is pending issue with wolfSSL, where encryption/decryption is not
- working (both with and without this patch). Ref: #1020
-
- Cherry-picked from #1017
-
-- appveyor: add a UWP OpenSSL 3 build
-
- Cherry-picked from #1017
-
-- appveyor: skip `before_test` when not doing tests
-
- Also merge `before_test` section into `test_script`.
-
- Cherry-picked from #1017
-
-- docs: delete two stray characters
-
- Cherry-picked from #1017
-
-- tidy-up: avoid expression 'of course'
-
- Cherry-picked from #1017
-
-- tidy-up: avoid word 'just'
-
- Cherry-picked from #1017
-
-- tidy-up: avoid word 'simply'
-
- Cherry-picked from #1017
-
-- tests: teach to use the `USERNAME` envvar on Windows
-
- Necessary to pick the correct local username when run on Windows.
-
- Cherry-picked from #1017
-
-- test_ssh2: support `FIXTURE_TRACE_ALL*` envvars
-
- Cherry-picked from #1017
-
-- tidy-up: add missing newline to error msg, formatting
-
- Also:
- - fix indent
- - lowercase variables names
- - fix formatting in `src/global.c`
-
- Cherry-picked from #1017
-
-- appveyor: wait more for SSH connection from GHA
-
- Cherry-picked from #1017
-
-- ci: restrict permissions in GitHub Actions
-
- Cherry-picked from #1017
-
-- build: fix autoreconf warnings
-
- - update `AC_HELP_STRING' to 'AS_HELP_STRING`:
- ```
- configure.ac:[...]: warning: The macro `AC_HELP_STRING' is obsolete.
- ```
- "AC_HELP_STRING is deprecated in 2.70+ and I believe AS_HELP_STRING works
- already since 2.59 so bump the minimum required version to that."
-
- Ref: https://github.com/curl/curl/commit/a59f04611629f0db9ad8e768b9def73b9b4d9423
-
- - simplify to avoid:
- ```
- src/Makefile.inc:48: warning: variable 'EXTRA_DIST_SOURCES' is defined but no program or
- src/Makefile.inc:48: library has 'DIST' as canonical name (possible typo)
- ```
- Regression from 2c18b6fc8df060c770fa7e5da704c32cf40a5757
-
- - `AC_TRY_LINK`/`AC_TRY_COMPILE`:
- ```
- configure.ac:335: warning: The macro `AC_TRY_COMPILE' is obsolete.
- configure.ac:335: warning: The macro `AC_TRY_LINK' is obsolete.
- ```
-
- - `libtool`-related ones:
- ```
- configure.ac:70: warning: The macro `AC_LIBTOOL_WIN32_DLL' is obsolete.
- configure.ac:70: warning: AC_LIBTOOL_WIN32_DLL: Remove this warning and the call to _LT_SET_OPTION when you
- configure.ac:70: put the 'win32-dll' option into LT_INIT's first parameter.
- configure.ac:71: warning: The macro `AC_PROG_LIBTOOL' is obsolete.
- ```
- Using code copied from curl:
- https://github.com/curl/curl/blob/9ce7eee07042605045dcfd02a6f5b38ad5c8a05d/m4/xc-lt-iface.m4#L157-L163
-
- - delete commented and obsolete `AC_HEADER_STDC`.
-
- - formatting.
-
- Most cherry-picked from `autoupdate` updates.
-
- Cherry-picked from #1017
- Closes #1021
-
-- docker-bridge.ps1: use native newlines
-
- Also add a shebang and exec flag to ease testing/handling on *nix.
- PowerShell accepts both LF and CRLF.
-
- Cherry-picked from #1017
-
-GitHub (1 May 2023)
-- [Zenju brought this change]
-
- sftp: remove packet limit for directory reading (#791)
-
- Currently libssh2 cannot read huge directory listings when the package
- size of `LIBSSH2_SFTP_PACKET_MAXLEN` (256KB) is hit. For example AWS
- always sends a single package with all files of a directory, no matter
- how big it is: https://freefilesync.org/forum/viewtopic.php?t=10020
- Package size is probably around 7MB in this case!
-
- `LIBSSH2_SFTP_PACKET_MAXLEN` is a good idea in general, but there
- doesn't seem to be a one size fits all. While almost all(?) SFTP
- responses come in very small packages, I believe the `SSH_FXP_READDIR`
- request should be exempted.
-
- The proposed patch, enhances the package size reading to include parsing
- the full SFTP packet header. And in case a package is of type
- `SSH_FXP_NAME` and matches an expected `readdir_request_id`, it does not
- fail if `LIBSSH2_SFTP_PACKET_MAXLEN` is hit. The chances of accidentally
- hiding data-corruption are pretty non-existent, because both SFTP
- `request_id` and packet type must match. No change in behavior
- otherwise.
-
- Best, Zenju
-
- Previous discussion: #268 #269
-
- With the above changes, the `LIBSSH2_SFTP_PACKET_MAXLEN` value could
- (and should?) probably be set back to a small number again.
-
- Integration-patches-by: Viktor Szakats
-
-Viktor Szakats (28 Apr 2023)
-- checksrc: update and apply fixes
-
- Update to latest revision and fix new issues detected.
-
- Closes #1014
-
-- ci: add macOS CI jobs + fix issues revealed
-
- Add macOS CI jobs, both cmake and autotools for all supported crypto
- backends (except BoringSSL), with debug, zlib enabled. Without running
- tests. It also introduces OpenSSL 1.1 into the CI with a non-MSVC
- compiler.
-
- Credits to curl's `macos.yml`, that I used as a base.
-
- Fix these issues uncovered by the new tests:
-
- - openssl: fix warning when built with wolfSSL, or OpenSSL 1.1 and
- earlier. CI missed it because apparently the only OpenSSL 1.1 test
- we had used MSVC, which did not complain.
-
- ```
- ../src/openssl.c:3852:19: error: variable 'sslError' set but not used [-Werror,-Wunused-but-set-variable]
- unsigned long sslError;
- ^
- ```
-
- Regression from 097c8f0dae558643d43051947a1c35b65e1c5761
-
- - pem: add hack to build without MD5 crypto-backend support.
-
- The Homebrew wolfSSL build comes with MD5 support disabled. We can
- expect this becoming the norm. FIPS also requires MD5 disabled.
-
- We deleted the same hack from `hostkey.c` a month ago:
- ad6aae302aaec84afbfacf0c1dfdc446d46eaf21
-
- A better fix would be to guard the MD5 logic with our `LIBSSH2_MD5`
- macro.
-
- ```
- pem.c:214:32: error: use of undeclared identifier 'MD5_DIGEST_LENGTH'; did you mean 'SHA_DIGEST_LENGTH'?
- unsigned char secret[2*MD5_DIGEST_LENGTH];
- ^~~~~~~~~~~~~~~~~
- SHA_DIGEST_LENGTH
- ```
-
- Regression from 386e012292a96fcf0dc6861588397845df0aba2c
-
- - `configure.ac`: add crypto libs late.
-
- Fix it by adding crypto libs to `LIBS` at the end of the configuration
- process.
-
- Otherwise `configure` links crypto libs while doing feature tests,
- which can cause unwanted detections. For example LibreSSL publishes
- the function `explicit_bzero()`, which masks the system alternative,
- e.g. `memset_s()` on macOS. Then when trying to compile libssh2, its
- declaration is missing:
-
- ```
- bcrypt_pbkdf.c:93:5: error: implicit declaration of function 'explicit_bzero' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
- _libssh2_explicit_zero(ciphertext, sizeof(ciphertext));
- ^
- ../src/misc.h:50:43: note: expanded from macro '_libssh2_explicit_zero'
- ^
- ```
-
- Regression from 4f0f4bff5a92dce6a6cd7a5600a8ee5660402c3f
-
- - cmake: fix to list our own include directory before the crypto libs',
- when building tests.
-
- Otherwise a global crypto header path, such as `/usr/local/include`,
- containing an external `libssh2.h` of a different version, could cause
- weird errors:
-
- ```
- cc -DHAVE_CONFIG_H -DLIBSSH2_LIBGCRYPT \
- -I../src -I../../src -I/usr/local/include -I[...]/libssh2/include \
- -g -isysroot /Library/Developer/CommandLineTools/SDKs/MacOSX13.1.sdk \
- -mmacosx-version-min=12.6 -MD -MT \
- tests/CMakeFiles/test_aa_warmup.dir/test_aa_warmup.c.o \
- -MF CMakeFiles/test_aa_warmup.dir/test_aa_warmup.c.o.d \
- -o CMakeFiles/test_aa_warmup.dir/test_aa_warmup.c.o -c \
- [...]/libssh2/tests/test_aa_warmup.c
- ```
-
- ```
- [ 62%] Building C object tests/CMakeFiles/test_aa_warmup.dir/test_aa_warmup.c.o
- In file included from /Users/runner/work/libssh2/libssh2/tests/test_aa_warmup.c:4:
- In file included from /Users/runner/work/libssh2/libssh2/tests/runner.h:42:
- In file included from /Users/runner/work/libssh2/libssh2/tests/session_fixture.h:43:
- /Users/runner/work/libssh2/libssh2/tests/../src/libssh2_priv.h:649:5: error: type name requires a specifier or qualifier
- LIBSSH2_AUTHAGENT_FUNC((*authagent));
- ^
- /Users/runner/work/libssh2/libssh2/tests/../src/libssh2_priv.h:649:30: error: type specifier missing, defaults to 'int' [-Werror,-Wimplicit-int]
- LIBSSH2_AUTHAGENT_FUNC((*authagent));
- ^
- /Users/runner/work/libssh2/libssh2/tests/../src/libssh2_priv.h:650:5: error: type name requires a specifier or qualifier
- LIBSSH2_ADD_IDENTITIES_FUNC((*addLocalIdentities));
- ^
- /Users/runner/work/libssh2/libssh2/tests/../src/libssh2_priv.h:650:35: error: type specifier missing, defaults to 'int' [-Werror,-Wimplicit-int]
- LIBSSH2_ADD_IDENTITIES_FUNC((*addLocalIdentities));
- ^
- /Users/runner/work/libssh2/libssh2/tests/../src/libssh2_priv.h:651:5: error: type name requires a specifier or qualifier
- LIBSSH2_AUTHAGENT_SIGN_FUNC((*agentSignCallback));
- ^
- /Users/runner/work/libssh2/libssh2/tests/../src/libssh2_priv.h:651:35: error: type specifier missing, defaults to 'int' [-Werror,-Wimplicit-int]
- LIBSSH2_AUTHAGENT_SIGN_FUNC((*agentSignCallback));
- ^
- 6 errors generated.
- ```
-
- - `tests/session_fixture.h`: delete duplicate `libssh2.h`,
- `libssh2_priv.h` already includes it.
-
- Follow-up to a683133dfe96de126194f58f183131a84c7d36a2
-
- CI logs with these errors:
- https://github.com/libssh2/libssh2/actions/runs/4824079094
- https://github.com/libssh2/libssh2/actions/runs/4824270819
-
- curl's `macos.yml`: https://github.com/curl/curl/blob/da2470de96e94e1c8d276b9ae6e4c97c2cf54239/.github/workflows/macos.yml
-
- Tidying-up while here:
-
- - tests/session_fixture.h: delete duplicate `libssh2.h`.
- `libssh2_priv.h` includes it already.
-
- Follow-up to a683133dfe96de126194f58f183131a84c7d36a2
-
- - ci.yml: yamllint warnings and formatting.
-
- - ci.yml: msvc section formatting and step-naming sync with macOS.
-
- Follow-up to f4a4c05dc3bcd62ecaa1b0cac5997faefe16c83f
-
- - ci.yml: enable `--enable-werror` for msys2 jobs.
-
- Follow-up to 71cae949d577fdd632a271da0bec89f977dc5dd2
-
- - appveyor.yml: show OpenSSL versions, link to image content.
-
- Closes #1013
-
-- ci: convert `docker-bridge.bat` to shell script
-
- Convert `ci/appveyor/docker-bridge.bat` to a POSIX shell script.
-
- Also bump the tunnel to use ed25519 (was RSA-2048).
-
- Closes #997
-
-- kex: use distinctive error strings
-
- Use unique error strings to help localize errors.
-
- Closes #1011
-
-- tidy-up: C header use
-
- - drop unused or duplicate C headers.
- - add missing ones (that worked by chance).
- (`string.h`, `stdlib.h`)
- - mention the functions that need certain headers.
- - move some headers from crypto header to crypto C source.
- - reorder headers in some places.
- - simplify the #if tree for `sys/select.h` in `libssh2_priv.h`.
- - move scp-specific macros next to their header to `scp.c`
- Follow-up to 5db836b2a829c6fff1e8c7acaa4b21b246ae1757
-
- Closes #999
-
-- tidy-up: text nits, English contractions [ci skip]
-
- In input/output text and docs mostly.
-
-- ci: add MSVC and UWP builds to GitHub Actions
-
- - add MSVC jobs to GitHub Actions. They are similar to the 'Build-only'
- jobs we have on AppVeyor CI, though only the ARM64 Windows one is
- identical. Major disadvantage is that we don't run tests here. Major
- advantage is they only take a few minutes to complete, compared to
- an hour on AppVeyor, so WinCNG build results now appear quicker.
-
- Docker tests might be possible, but my light attempts failed.
- Finding ZLIB also failed, so we still miss an MSVC test with it.
-
- Tool versions as of now: Server 2022, VS2022, OpenSSL 1.1.1
-
- - add UWP builds for both ARM64 and x64. This hasn't been CI tested
- before.
-
- (We could probably enable UWP on AppVeyor CI as well.
- I haven't tried.)
-
- - fix two uncovered UWP issues in tests.
-
- - rename internal macro `LIBSSH2_WINDOWS_APP` to `LIBSSH2_WINDOWS_UWP`.
-
- Follow-up to 2addafb77b662e64248d156c71c69b91ba7b926e
-
- - fold long lines and quote truthy values in `.github/workflows/ci.yml`.
-
- Closes #1010
-
-- session_fixture: avoid no-op `chdir(getcwd())`
-
- If no `FIXTURE_WORKDIR` macro or envvar is present to set the cwd,
- avoid querying the cwd and then calling chdir with the result.
-
- Ref: 54bef4c5dad868a9d45fdbfca9729b191c0abab5 (patch)
- Ref: 10a5cbf945abcc60153ee3d59284d09fc64ea152 (individual commit)
-
- Closes #1009
-
-- tests/sshd_fixture.sh: convert back to POSIX
-
- There was no strong reason to require bash. Let's use POSIX shell
- like before the recent overhaul.
-
- Follow-up to a459a25302a31f6e2aba3c4e15b1472b83b596fc
-
- Closes #1008
-
-GitHub (26 Apr 2023)
-- [Miguel de Icaza brought this change]
-
- If SFTP fails to initialize, do not busy loop waiting for IO to happen (#720)
-
- Currently SFTP's init will busy loop waiting for the channel to close,
- even if the underlying transport returns EAGAIN. While this works for
- sockets, it might not work out if you have a different transport that
- needs to do some additional processing on the side.
-
- Integration-patches-by: Viktor Szakats
-
-Viktor Szakats (26 Apr 2023)
-- docs: simplify `.TH` header & other cleanups [ci skip]
-
- - simplify `.TH` headers.
- - delete empty lines before sections.
- - update template with an `AVAILABILITY` section.
-
- Left libssh2 version number in the `.TH` header for entries without an
- `AVAILABILITY` section, or where there was a different version number
- there.
-
-- tidy-up: formatting nits [ci skip]
-
-- vms: fix to include `sys/socket.h`
-
- Due to a typo in the `HAVE_*` macro, this header was never included.
-
- A comment suggests that `socklen_t` is not defined on VMS and defines it
- manually. This symbol is usually in `sys/socket.h`, so the typo may have
- been the reason for it to be missing.
-
- Closes #1007
-
-- build: fix `make distcheck` regressions
-
- - add #included C files to `EXTRA_DIST`.
-
- Regression from 4f0f4bff5a92dce6a6cd7a5600a8ee5660402c3f
-
- - fix `tests/sshd_fixture.sh` to not write into the test dir, by using
- a pre-assembled `TrustedUserCAKeys` file. Update `Dockerfile` too to
- use this.
-
- Regression from a459a25302a31f6e2aba3c4e15b1472b83b596fc
-
- Also update `tests/sshd_fixture.sh` to use
- `openssh_server/authorized_keys` like `Dockerfile` does. And a few more
- cosmetic updates.
-
- Closes #1006
-
-- libssh2_priv.h: assume `HAVE_LONGLONG`
-
- Unless I'm missing something, it looks like `libssh2.h` has been using
- `libssh2_int64_t` unconditionally since at least 2010-04-17 when
- `libssh2_scp_send64()` landed via commit
- be9ee7095e2d5021985f57d88f5f889d3c2b9d8f.
-
- This makes it redundant to detect `HAVE_LONGLONG` to fallback to a
- 32-bit `scpRecv_size` in `libssh2_priv.h`. Then deal with possible
- combinations of this flag and `strtoll()` options, which was
- error-prone.
-
- Instead, assume in `libssh2_priv.h` that we have `libssh2_int64_t`, and
- use it always.
-
- For MSVC, this means `_MSC_VER` `1310` (from year 2003) is now
- required. Based on the above, this was already so before this patch.
-
- If there happens to be no 64-bit `strtoll()` detected, fall back to the
- 32-bit `strtol()` (this should never happen with MSVC, and probably
- neither with any other reasonably modern toolchain.)
-
- Also make sure to set `HAVE_STRTOI64` for older, non-CMake, MSVC builds
- (e.g. `Makefile.mk` or `NMakefile` ones).
-
- Closes #1002
-
-GitHub (26 Apr 2023)
-- [Miguel de Icaza brought this change]
-
- fix a couple of small regressions (#1004)
-
- - openssl: fix potentially missing `ERR_*` constants by including
- `openssl/err.h`. This could happen with recent version of Xcode
- or when building against OpenSSL built with the `OPENSSL_NO_ENGINE`
- option.
-
- Regression from 097c8f0dae558643d43051947a1c35b65e1c5761 (#789)
-
- - channel: fix an issue that would corrupt the data stream when
- attempting to initialize the agent in non-blocking mode, as it is
- necessary to propagate the `EAGAIN` signal upstream when the transport
- returns `EAGAIN`.
-
- Regression from bc4e619e76071393e466c29220fc4ef5764c2820 (#752)
-
- - packet: the current code does not set the state machine upon reaching
- this point which means that if the code is suspended due to the
- transport returning an `EAGAIN`, this will re-initialize the structure
- every time.
-
- The issue is that this keeps assigning a new channel-id downstream,
- which does not match the initial channel-id that is initially
- generated, causing a lookup later to fail as there is no matching
- channel.
-
- Regression from bc4e619e76071393e466c29220fc4ef5764c2820 (#752)
-
-Viktor Szakats (26 Apr 2023)
-- tidy-up: `gettimeofday()` fallback and use
-
- Simplify the way we handle `gettimeofday()` fallback for platforms
- without native support or without any support. Make it similar to
- how we handle `snprintf()`.
-
- In case of no native `gettimeofday()` support and a non-Windows
- platform, our local fallback returns zero in `tv_usec` and `tv_sec`,
- ending up with a zero `timeout_remaining` in `session.c`, same as
- before this patch.
-
- Also:
- - drop unused `sys/time.h` headers.
- - fix our fallback code to compile with any Windows compilers
- (not just MSVC)
- - delete unnecessary casts.
-
- Closes #1001
-
-- libssh2_priv.h: fix checksrc warning [ci skip]
-
- Regression from 9ef75298fae0728305d9d38ba1e3c838ad0513f7
-
-- libssh2_priv.h: whitespace fixes cont. [ci skip]
-
-- libssh2_priv.h: whitespace fixes [ci skip]
-
-- cmake: use portable mkdir for tests/coverage target [ci skip]
-
- Makes `make coverage` work without a POSIX mkdir.
-
- Tested locally.
-
- Ref: https://cmake.org/cmake/help/latest/manual/cmake.1.html#cmdoption-cmake-E-arg-make_directory
-
-- kex: fix overlapping memcpy() to memmove()
-
- Noticed this when libasan started kicking out errors when sending in
- MACs preferences that were not supported yet.
-
- Reported-by: fourierules on github
- Fixes #611
- Closes #1000
-
-- test/CMakeLists.txt: reuse `Makefile.am` librunner source list
-
- Follow-up to a459a25302a31f6e2aba3c4e15b1472b83b596fc
-
- Closes #998
-
-GitHub (25 Apr 2023)
-- [Zenju brought this change]
-
- openssl: fix misleading error message if wrong passphrase (#789)
-
- Fixes #608
-
-Viktor Szakats (25 Apr 2023)
-- tidy-up: tiny nits [ci skip]
-
-- tests: improve running tests
-
- TL;DR: Sync test builds between autotools and CMake. Sync sshd
- configuration between Docker and non-Docker fixtures. Bump up
- sshd_config for recent OpenSSH releases.
-
- This also opens up the path to have non-Docker tests that use a
- local sshd process. Though sshd is practically unusable on Windows
- CI machines out of the box, so this will need further efforts.
-
- Details:
-
- - cmake: run sshd fixture test just like autotool did already.
-
- - sync tests and their order between autotools and CMake.
-
- It makes `test_aa_warmup` the first test with both.
-
- - cmake: load test lists from `Makefile.am`.
-
- Needed to update the loader to throw away certain lines to keep the
- converted output conform CMake syntax. Using regexp might be an
- alternative way of doing this, but couldn't make it work.
-
- - cmake: use the official way to configure test environment variables.
- Switch to syntax that's extendable.
-
- - cmake: allow to run the same test both under Docker and sshd fixture.
-
- Useful for testing the sshd fixture runner, or how the same test
- behaves in each fixture.
-
- - update test fixture to read the username from `USER` envvar instead of
- using the Dockfile-specific hardwired one, when running outside Docker.
-
- - rework `ssh2.sh` into `sshd_fixture.sh`, to:
-
- - allow running any tests (not just `test_ssh2`).
- - configure Docker tests for running outside Docker.
- - fixup `SSHD` path when running on Windows (e.g. in AppVeyor CI).
- Fixes: `sshd re-exec requires execution with an absolute path`
- - allow overriding `PUBKEY` and `PRIVKEY` envvars.
- - allow overriding `ssh_config` via `SSHD_FIXTURE_CONFIG`.
-
- - prepare support for running multiple tests via sshd_fixture.
-
- Add a TAP runner for autotools and extend CMake logic. The TAP runner
- loads the test list from `Makefile.am`.
-
- Notice however that on Windows, `sshd_fixture.sh` is very flaky with
- GitHub Actions. And consistently broken for subsequent tests in
- AppVeyor CI:
- 'libssh2_session_handshake failed (-43): Failed getting banner'
-
- Another way to try is a single sshd instance serving all tests.
- For CMake this would probably mean using an external script.
-
- - ed25519 test keys were identical for auth and host. Regenerate the
- auth keypair to make them distinct.
-
- - sync the sshd environment between Docker and sshd_fixture.
-
- - use common via `openssh_server/sshd_config`.
- - accept same auth keys.
- - offer the same host keys.
- - sync TrustedUserCAKeys.
- - delete now unused keypairs: `etc/host*`, `etc/user*`.
- - bump up startup delay for Windows (randomly, to 5 secs, from 3).
- - delete `UsePrivilegeSeparation no` to avoid deprecation warnings.
- `command-line line 0: Deprecated option UsePrivilegeSeparation`
- - delete `Protocol 2` to avoid deprecation warnings.
- It has been the default since OpenSSH 3.0 (2001-11-06).
- - delete `StrictModes no` (CI tests work without it, Docker tests
- never used it).
-
- - bump `Dockerfile` base image to `testing-slim` (from `bullseye-slim`).
-
- It needed `sshd_config` updates to keep things working with
- OpenSSH 9.2 (compared to bullseye's 8.4).
-
- - replace `ChallengeResponseAuthentication` alias with
- `KbdInteractiveAuthentication`.
- The former is no longer present in default `sshd_config` since
- OpenSSH 8.7 (2021-08-20). This broke the `Dockerfile` script.
- The new name is documented since OpenSSH 4.9 (2008-03-31)
-
- - add `PubkeyAcceptedKeyTypes +ssh-rsa,ssh-dss,ssh-rsa-cert-v01@openssh.com`
- and `HostKeyAlgorithms +ssh-rsa`.
-
- Original-patch-by: Eric van Gyzen (@vangyzen on github)
- Fixes #691
-
- There is a new name for `PubkeyAcceptedKeyTypes`:
- `PubkeyAcceptedAlgorithms`.
- It requires OpenSSH 8.5 (2021-03-03) and breaks some envs so we're
- not using it just yet.
-
- - drop `rijndael-cbc@lysator.liu.se` tests and references from config.
-
- This is a draft alias for `aes256-cbc`. No need to test it twice.
- Also this alias is no longer recognized by OpenSSH 8.5 (2021-03-03).
-
- - update `mansyntax.sh` and `sshd_fixture.sh` to not rely on `srcdir`.
-
- Hopefully this works with out-of-tree builds.
-
- - fix `test_read_algos.test` to honor CRLF EOLs in their inputs
- (necessary when running on Windows.)
-
- - fix `test_read_algos.test` to honor `EXEEXT`. Might be useful when
- running tests under cross-builds?
-
- - `test_ssh2.c`:
-
- - use libssh2 API to set blocking mode. This makes it support all
- platforms.
- - adapt socket open timeout logic from `openssh_fixture.c`.
- Sadly this did not help fix flakiness on GHA Windows.
-
- - tests: delete unused C headers and variable initialization.
-
- - delete unused test files: `sshd_fixture.sh.in`, `sshdwrap`,
- `etc/sshd_config`.
-
- Ref: cf80f2f4b5255cc85a04ee43b27a29c678c1edb1
-
- - autotools: delete stray `.c` test sources from `EXTRA_DIST` in tests.
-
- - `tests/.gitignore`: drop two stray tests.
-
- - autotools: fix passing `SSHD` containing space (Windows needs this).
-
- - autotools: sort `EXTRA_DIST` in tests.
-
- - cmake: fix to add `test_ssh2` to `TEST_TARGETS`.
-
- - fix `authorized_key` order in `tests/gen_keys.sh`.
-
- - silence shellcheck warning in `ci/checksrc.sh`.
-
- - set `SSHD` for autotools on GitHub Actions Windows. [skipped]
-
- Auto-detection doesn't work (maybe because sshd is installed via
- Git for Windows and we're using MSYS2's shell.)
-
- It enables running sshd fixture (non-Docker) tests in these jobs.
-
- I did not include this in the final patch due to flakiness:
- ```
- Connection to 127.0.0.1:4711 attempt #0 failed: retrying...
- Connection to 127.0.0.1:4711 attempt #1 failed: retrying...
- Connection to 127.0.0.1:4711 attempt #2 failed: retrying...
- Failure establishing SSH session: -43
- ```
-
- Can be enabled with:
- `export SSHD='C:/Program Files/Git/usr/bin/sshd.exe'`
-
- Closes #996
-
-- ci: reduce algo test runtime on AppVeyor
-
- Make the block count customizable in `test_read` via environment
- `FIXTURE_XFER_COUNT`.
-
- Set the custom count lower than the default when running on AppVeyor.
-
- The goal is to reduce CI roundtrip times.
-
- Closes #995
-
-GitHub (22 Apr 2023)
-- [Michael Buckley brought this change]
-
- Agent forwarding implementation (#752)
-
- This PR contains a series of patches that date back many years and I
- believe were discussed on the mailing list, but never merged. We have
- been using these in our local copy of libssh2 without issue since 2015,
- if not earlier. I believe this is the full set of changes, as we tried
- to use comments to mark where our copy of libssh2 differs from the
- canonical version.
-
- This also contains changes I made earlier this year, but which were not
- discussed on the mailing list, to support certificates and FIDO2 keys
- with agent forwarding.
-
- Note that this is not a complete implementation of agent forwarding, as
- that is outside the scope of libssh2. Clients still need to provide
- their own implementation that parses ssh-agent methods after calling
- libssh2_channel_read() and calls the appropriate callback messages in
- libssh2. See the man page changes in this PR for more details.
-
- Integration-patches-by: Viktor Szakats
-
- * prefer size_t
- * prefer unsigned int over u_int in public function
- * add const
- * docs, indent, checksrc, debug call, compiler warning fixes
-
-Viktor Szakats (21 Apr 2023)
-- ci: add Windows Server 2016 into the test mix
-
- We had Windows Server 2012 R2 (8.1) and Windows Server 2019 (10) before
- this patch. After, we also have Windows Server 2016 (10).
-
- The WinCNG flakey tests should have a better chance when running on the
- newer OS.
-
- This update does not change the compiler mix.
-
- Also change the test fixture to not use the `--quiet` option with the
- `docker pull` commant. This option requires docker v19.03, and
- AppVeyor's Visual Studio 2017 image doesn't support it. Log output did
- not change without `--quiet`, so it seems safe to delete it. In case
- we'd need it, another solution is to retry without `--quiet` if the
- command fails. docker's exit status is 125 in that case.
-
- Ref: https://github.com/libssh2/libssh2/issues/804#issuecomment-1515232799
- Ref: https://www.appveyor.com/docs/windows-images-software/
-
- Closes #994
-
-- build: add autotools test_read support and more
-
- Keep a single list for mac and crypt algos that we use in both CMake
- and autotools. Use the same test names across build tools.
-
- Use the TAP protocol to track individual tests run from a single shell
- script.
-
- Also:
-
- - enable the rest of our tests with autotools.
-
- - set `make check` verbose to see errors in case they happen.
-
- - silence stray 'command not found' error when running `mansyntax.sh`
- on Windows.
-
- GitHub Actions Windows docker tests disabled due to:
- ```
- Command: docker build --quiet -t libssh2/openssh_server ../tests/openssh_server
- Error running command 'docker build --quiet -t libssh2/openssh_server ../tests/openssh_server' (exit 1): Sending build context to Docker daemon 22.02kB
- Step 1/42 : FROM debian:bullseye-slim
- bullseye-slim: Pulling from library/debian
- no matching manifest for windows/amd64 10.0.20348 in the manifest list entries
- Failed to build docker image
- ```
-
- Closes #993
-
-- cmake: restore a dash char in comment [ci skip]
-
- It's a CMake comment header convention.
-
-GitHub (21 Apr 2023)
-- [Dan Fandrich brought this change]
-
- tests: add AES-GCM protocol read tests (#992)
-
- Closes #992
-
-- [Viktor Szakats brought this change]
-
- support encrypt-then-mac (etm) MACs (#987)
-
- Support for calculating MAC (message authentication code) on encrypted
- data instead of plain text data.
-
- This adds support for the following MACs:
- - `hmac-sha1-etm@openssh.com`
- - `hmac-sha2-256-etm@openssh.com`
- - `hmac-sha2-512-etm@openssh.com`
-
- Integration-patches-by: Viktor Szakats
-
- * rebase on master
- * fix checksec warnings
- * fix compiler warning
- * fix indent/whitespace/eol
- * rebase/manual merge onto AES-GCM patch #797
- * more manual merge of `libssh2_transport_send()` based
- on dfandrich/shellfish
-
- Fixes #582
- Closes #655
- Closes #987
-
-Viktor Szakats (20 Apr 2023)
-- docs: fix typo in argument name [ci skip]
-
-- [Keith Dart brought this change]
-
- channel: add support for "signal" message
-
- Can send specific signals to remote process. Allows for slightly
- improved remote process management, if the server supports it.
-
- Integration-patches-by: Viktor Szakats
-
- * doc updates
- * change `signame_len` to `size_t`
- * variable scopes
- * fix checksrc warnings
-
- Closes #672
- Closes #991
-
-- crypto: add `LIBSSH2_NO_AES_CBC` option
-
- Also rename internal `LIBSSH2_AES` to `LIBSSH2_AES_CBC`.
-
- Follow-up to 857e431648df6edcb3e17138d877f2e65d2d769d
-
- Closes #990
-
-- tidy-up: indentation fixes [ci skip]
-
-GitHub (20 Apr 2023)
-- [Dan Fandrich brought this change]
-
- Add support for AES-GCM crypto protocols (#797)
-
- Add support for aes256-gcm@openssh.com and aes128-gcm@openssh.com
- ciphers, which are the OpenSSH implementations of AES-GCM cryptography.
- It is similar to RFC5647 but has changes to the MAC protocol
- negotiation. These are implemented for recent versions of OpenSSL only.
-
- The ciphers work differently than most previous ones in two big areas:
- the cipher includes its own integrated MAC, and the packet length field
- in the SSH frame is left unencrypted. The code changes necessary are
- gated by flags in the LIBSSH2_CRYPT_METHOD configuration structure.
-
- These differences mean that both the first and last parts of a block
- require special handling during encryption. The first part is where the
- packet length field is, which must be kept out of the encryption path
- but in the authenticated part (as AAD). The last part is where the
- Authentication Tag is found, which is calculated and appended during
- encryption or removed and validated on decryption. As encryption/
- decryption is performed on each packet in a loop, one block at a time,
- flags indicating when the first and last blocks are being processed are
- passed down to the encryption layers.
-
- The strict block-by-block encryption that occurs with other protocols is
- inappropriate for AES-GCM, since the packet length shifts the first
- encrypted byte 4 bytes into the block. Additionally, the final part of
- the block must contain the AES-GCM's Authentication Tag, so it must be
- presented to the lower encryption layer whole. These requirements mean
- added code to consolidate blocks as they are passed down.
-
- When AES-GCM is negotiated as the cipher, its built-in MAC is
- automatically used as the SSH MAC so further MAC negotiation is not
- necessary. The SSH negotiation is skipped when _libssh2_mac_override()
- indicates that such a cipher is in use. The virtual MAC configuration
- block mac_method_hmac_aesgcm is then used as the MAC placeholder.
-
- This work was sponsored by Anders Borum.
-
- Integration-patches-by: Viktor Szakats
-
- * fix checksrc errors
- * fix openssl.c warning
- * fix transport.c warnings
- * switch to `LIBSSH2_MIN/MAX()` from `MIN()`/`MAX()`
- * fix indent
- * fix libgcrypt unused warning
- * fix mbedtls unused warning
- * fix wincng unused warning
- * fix old openssl unused variable warnings
- * delete blank lines
- * updates to help merging with the ETM patch
-
-Viktor Szakats (20 Apr 2023)
-- tidy-up: align comments [ci skip]
-
-- tidy-up: whitespace nits [ci skip]
-
-- crypto: add/fix algo guards and extend `NO` options
-
- Add new guard `LIBSSH2_RSA_SHA1`. Add missing guards for `LIBSSH2_RSA`,
- `LIBSSH2_DSA`.
-
- Fix warnings when all options are disabled.
-
- This is still not complete and it's possible to break a build with
- certain crypto backends (e.g. mbedTLS) and/or combination of options.
- It's not guaranteed that all bits everywhere get disabled by these
- settings. Consider this a "best effort".
-
- Add these new options to disable certain crypto elements:
- - `LIBSSH2_NO_3DES`
- - `LIBSSH2_NO_AES_CTR`
- - `LIBSSH2_NO_BLOWFISH`
- - `LIBSSH2_NO_CAST`
- - `LIBSSH2_NO_ECDSA`
- - `LIBSSH2_NO_RC4`
- - `LIBSSH2_NO_RSA_SHA1`
- - `LIBSSH2_NO_RSA`
-
- The goal is to offer a way to disable legacy/obsolete/insecure ones.
-
- See also: 146a25a06dd2365a4330dad34fefcdcee1a206aa `LIBSSH2_NO_HMAC_RIPEMD`
- See also: 38015f4e46d8dbeea522dc7ee664522d4f47fc75 `LIBSSH2_NO_DSA`
- See also: be31457f3071686b555a0f0b19e5dcf63d67fc27 `LIBSSH2_NO_MD5`
-
- Closes #986
-
-- scp: fix typo in comments [ci skip]
-
- Follow-up to 0a500b3554c29451708353279eefce750f4bca6c
-
-- base64: do not use `snprintf()` on encoding
-
- This also significantly (by 7-8x in my limited tests with a short
- string) speeds up this function. The impact is still minor as this
- function is only used in `knownhost.c` in release builds.
-
- Closes #985
-
-- wincng: constify data arg of `libssh2_wincng_hash()`
-
- Tested in #979
-
-- wincng: fix unused variables with `LIBSSH2_RSA_SHA2` disabled
-
- Tested in #979
-
-- ci: delete config elements for unused 32-bit Linux builds
-
- They have been disabled since d9b4222ef1c5ab9b9e499fe6234556e5cca7c4fe
-
- Tested in #979
-
-- ci: enable FIXTURE_TRACE_ALL_CONNECT for WinCNG tests
-
- To hopefully help finding the WinCNG hostkey verification
- intermittent failure #804.
-
- Tested in #979
-
-- tests: add `FIXTURE_TRACE_ALL_CONNECT` option
-
- Works like the `FIXTURE_TRACE_ALL` envvar, but enables full trace for
- the connection phase only.
-
- Also fix a possible NULL deref with `FIXTURE_TRACE_ALL` and a failed
- `libssh2_session_init_ex()`.
-
- Tested in #979
-
-- ci: really enable logging in AppVeyor CMake builds
-
- `CONFIGURATION` was never passed to the cmake command, so it had
- never enabled logging when set to `Debug`.
-
- Also `CONFIGURATION` is ambiguous depending on the "generator" used
- by CMake. In case of Visual Studio, this is a build/ctest-time
- setting, not a cmake-config parameter.
-
- So set this permanently to `Release` and enable logging via our
- dedicated CMake option `ENABLE_DEBUG_LOGGING`.
-
- Tested in #979
-
-- HACKING-CRYPTO: fix stray whitespace
-
-- tidy-up: fix more nits
-
- - fix indentation errors.
- - reformat `cmake/FindmbedTLS.cmake`
- - replace a macro with a variable in `example/sftp_RW_nonblock.c`.
- - delete macOS macro `_DARWIN_USE_64_BIT_INODE` from the
- OS/400 config header, `os400/libssh2_config.h`.
- - fix other minor nits.
-
- Closes #983
-
-- mansyntax: make it work on macOS, check reqs locally
-
- - use `gman` alias if present. This makes it work when the correct `man`
- command is provided via `brew` on macOS.
-
- - move CMake attempts to detect tools necessary to run `mansyntax.sh`
- into the script itself.
-
- - delete CMake TODO to move more test logic into CMake. This would make
- it CMake-specific and require maintaining it separately for each build
- tool. Just use our external script when a POSIX shell is available.
-
- Closes #982
-
-- cmake: dedupe setting `-DHAVE_CONFIG_H`
-
- Move `libssh2_config.h` generation and setting `-DHAVE_CONFIG_H` to
- the root `CMakeFile.txt`.
-
- Also move symbol hiding setup there. It needs to be done before
- generating the config file for `LIBSSH2_API` value to be set in it.
-
- After this change the `HIDE_SYMBOLS` setting is accepted without an
- annoying CMake warning when not actually building a shared libssh2 lib.
-
- Closes #981
-
-- build: assume non-blocking I/O on Windows
-
- Drop checks from Windows builds and enable it based on `WIN32`.
-
- This saves detection time and also makes 3rd party builds simpler.
-
- Also:
-
- - delete `HAVE_DISABLED_NONBLOCKING`, that we used in build tools to
- explicitly disable an explicit `#error` in `session.c`.
-
- - replace existing `WSAEWOULDBLOCK` check for Windows support with
- `WIN32`. Cleaner with the same result.
-
- Follow-up to f1e80d8d8ce9570d81836da96ba02f4d4552a7b3
- Follow-up to 5644eea2161b17f7c16e18f3a10465ebb217ca1f
-
- Closes #980
-
-- ci: rename Logging to Debug in AppVeyor
-
-- switch to internal base64 decode that uses size_t
-
- Make the public `libssh2_base64_decode()` a wrapper for that.
- Bump up length sizes in callers.
-
- Also fix output size calculation to first divide then multiply.
-
- Closes #978
-
-- tests: switch to debian:bullseye-slim in Dockerfile
-
- 'slim' provides all we need, with less bloat.
-
- Tested in #976
-
- Follow-up to 78cb64a85955f2cd9700c4fbad3f02d589dd7169
-
-- tests: build improvements and more
-
- - rename tests to have more succint names and a more useful natural
- order.
-
- - rename `simple` and `ssh2` in tests to have the `test_` prefix.
-
- This avoids a name collisions with `ssh2` in examples.
-
- - cmake: drop the `example-` prefix for generated examples.
-
- Bringing their names in sync with other build tools, like autotools.
-
- - move common auth test code into the fixture and simplify tests by
- using that.
-
- - move feature guards from CMake to preprocessor for auth tests.
-
- Now it works with all build tools and it's easier to keep it in sync
- with the lib itself.
-
- For this we need to include `libssh2_priv.h` in tests, which in turn
- needs tweaking on the trick we use to suppress extra MSVS warnings
- when building tests and examples.
-
- - move mbedTLS blocklist for crypto tests from CMake to the test
- fixture.
-
- - add ed25519 hostkey tests to `test_hostkey` and `test_hostkey_hash`.
-
- - add shell script to regenerate all test keys used for our tests.
-
- - alpha-sort tests.
-
- - rename `signed_*` keys to begin with `key` like the rest of the keys
- do.
-
- - whitespace fixes.
-
- Closes #969
-
-- autotools: rename a variable
-
- To match its counterpart we use for clang and to better match
- the original code in curl.
-
- Follow-up to ec0feae7920d695ce234a5aba13014bf29824c09
-
- Closes #977
-
-- ssh2.sh: revert likely wrong quoting [ci skip]
-
- Follow-up to 50124428509ffc2f5d08d8d3c152fa36546c9a75
-
-- build: add `-Wbad-function-cast` picky warning
-
- Also adjust minimum gcc versions in comment.
-
- Closes #975
-
-- tests: restore debian:bullseye in Dockerfile
-
- Follow-up to 78cb64a85955f2cd9700c4fbad3f02d589dd7169
-
-- session: simplify preprocessor logic
-
- - by using #elif
- - by merging two blocks
-
- Closes #972
-
-- tests: try debian:testing for Dockerfile
-
- Follow-up to 78cb64a85955f2cd9700c4fbad3f02d589dd7169
-
-- src: add and use `LIBSSH2_MIN/MAX` macros
-
- Also for #797
-
- Closes #974
-
-- tests: switch Dockerfile to debian:testing-slim
-
- From debian:bullseye
-
- - doesn't need manual bumps.
- - is ahead of stable and should be stable enough for our purpose.
- - slim is saving resources.
-
- Closes #971
-
-- cmake: optimize non-blocking tests on WIN32/non-WIN32
-
- Skip testing unixy methods on Windows and vice versa.
-
- I continue to assume that CMake doesn't define `WIN32` with Cygwin
- (as Cygwin doesn't define `_WIN32`/`WIN32` for C), though I haven't
- tested this.
-
- Closes #970
-
-GitHub (15 Apr 2023)
-- [Jörgen Sigvardsson brought this change]
-
- scp: option to not quote paths (#803)
-
- A new flag named `LIBSSH2_FLAG_QUOTE_PATHS` has been added, to make
- libssh2 not quote file paths sent to the remote's scp subsystem. Some
- custom ssh daemons cannot handle quoted paths, and this makes this flag
- useful.
-
- Authored-by: Jörgen Sigvardsson
-
-Viktor Szakats (15 Apr 2023)
-- cmake: make Windows builds initialize faster
-
- By skipping unixy header checks that always fail with
- the MSVC toolchain or all Windows toolchains.
-
- Closes #968
-
-- cmake: use a single build rule for all tests
-
- - use the complete filename of test sources in the input list.
-
- - build all tests with the ability to access libssh2 internals.
-
- This is necessary for `test_keyboard_interactive_auth_info_request`
- now and might be necessary for others in the future, e.g. to avoid
- the depreacted public base64 decoding API.
-
- - move `test_keyboard_interactive_auth_info_request` into the main
- test build loop.
-
- - move `simple` into the main test build loop too.
-
- - build `ssh2` also in static mode.
-
- - cleanup the way we detect and enable gcov.
-
- - fix indentation.
-
- Closes #967
-
-- tidy-up: more whitespace in src
-
- Closes #966
-
-- checksrc: fix `EQUALSNULL` warnings
-
- `s/([a-z0-9._>*-]+) == NULL/!\1/g`
-
- Closes #964
-
-- Makefile.am: add new OS400 header [ci skip]
-
- Follow-up to 6dc42e9d625deb816a051d312d09e68926959e78
-
-- checksrc: fix `NOTEQUALSZERO` warnings
-
- Closes #963
-
-- checksrc: fix `SIZEOFNOPAREN` warnings
-
- `s/sizeof ([a-z0-9._>*-]+)/sizeof(\1)/g`
-
- Closes #962
-
-- crypto: add `LIBSSH2_NO_HMAC_RIPEMD` option
-
- See also: 38015f4e46d8dbeea522dc7ee664522d4f47fc75
- See also: be31457f3071686b555a0f0b19e5dcf63d67fc27
-
- Ref: https://github.com/stribika/stribika.github.io/issues/46
-
- Closes #965
-
-- tidy-up: example, tests continued
-
- - fix skip auth if `userauthlist` is NULL.
- Closes #836 (Reported-by: @sudipm-mukherjee on github)
- - fix most silenced `checksrc` warnings.
- - sync examples/tests code between each other.
- (output messages, error handling, declaration order, comments)
- - stop including unnecessary headers.
- - always deinitialize in case of error.
- - drop some redundant variables.
- - add error handling where missing.
- - show more error codes.
- - switch `perror()` to `fprintf()`.
- - fix some `printf()`s to be `fprintf()`.
- - formatting.
-
- Closes #960
-
-- src: fix indentation of macro definitions (follow-up)
-
- Follow-up to d5438f4ba9036e8028f35258dd1ab97cc2edb37c
-
-- src: fix indentation of macro definitions
-
- And some comment cleanup.
-
- Closes #958
-
-- example/ssh2_exec: drop conditional code for deprecated API
-
-GitHub (13 Apr 2023)
-- [monnerat brought this change]
-
- Make OS/400 implementation work again (#953)
-
- * os400: support QADRT development files in a non-standard directory
-
- This enables the possibility to compile libssh2 even if the ascii
- runtime development files are not installed system-wide.
-
- * userauth_kbd_packet: fix a pointer target type mismatch.
-
- A temporary variable matching the parameter type is used before copying
- to the real target and checking for overflow (that should not occur!).
-
- * os400qc3: move and fix big number procedures
-
- A bug added by a previous code style cleaning is fixed.
- _libssh2_random() now checks and return the success status.
-
- * os400qc3: fix cipher definition block lengths
-
- They were wrongly set to the key size.
-
- * Diffie-Hellman min/max modulus sizes are dependent of crypto-backend
-
- In particular, os400qc3 limits the maximum group size to 2048-bits.
- Move definitions of these parameters to crypto backend header files.
-
- * kex: return an error if Diffie-Hellman key pair generation fails
-
- * os400: add an ascii assert.h header file
-
- * os400qc3: implement RSA SHA2 256/512
-
-Viktor Szakats (13 Apr 2023)
-- sftp: add open functions with custom attribute support
-
- Before this patch, libssh2 sent hardcoded `LIBSSH2_SFTP_ATTRIBUTES`
- struct on handle open. This can be problematic on some special OS,
- where the file size should be known on new file creation. I added
- two new functions to resolve this issue.
-
- Patch-by: @vajdaakos on github via #506
-
- Changes compared to #506:
- - drop attr size fixup in favour of #946.
- - move `memcpy()` under the state where we need it.
- - bump filename length type to `size_t`.
- - fix filenames in documentation and other nits.
-
- Closes #506
- Closes #947
-
-- build: speed up and extend picky compiler options
-
- Implement picky warnings with clang in autotools. Extend picky gcc
- warnings, sync them between build tools and compilers and greatly
- speed up detection in CMake.
-
- - autotools: enable clang compiler warnings with `--enable-debug`.
-
- - autotools: enable more gcc compiler warnings with `--enable-debug`.
-
- - autotools/cmake: sync compiler warning options between gcc and clang.
-
- - sync compiler warning options between autotools and cmake.
-
- - cmake: reduce option-checks to speed up the detection phase.
- Bring them down to 3 (from 35). Leaving some checks to keep the
- CMake logic alive and for an easy way to add new options.
-
- clang 3.0 (2011-11-29) and gcc 2.95 (1999-07-31) now required.
-
- - autotools logic copied from curl, with these differences:
-
- - delete `-Wimplicit-fallthrough=4` due to a false positive.
-
- - reduce `-Wformat-truncation=2` to `1` due to a false positive.
-
- - simplify MinGW detection for `-Wno-pedantic-ms-format`.
-
- - cmake: show enabled picky compiler options (like autotools).
-
- - cmake: do compile `tests/simple.c` and `tests/ssh2.c`.
-
- - fix new compiler warnings.
-
- - `tests/CMakeLists.txt`: fix indentation.
-
- Original source of autotools logic:
- - https://github.com/curl/curl/blob/a8fbdb461cecbfe1ac6ecc5d8f6cf181e1507da8/acinclude.m4
- - https://github.com/curl/curl/blob/a8fbdb461cecbfe1ac6ecc5d8f6cf181e1507da8/m4/curl-compilers.m4
-
- Notice that the autotools implementation considers Apple clang as
- legacy clang 3.7. CMake detection works more accurately, at the same
- time more error-prone and difficult to update due to the sparsely
- documented nature of Apple clang option evolution.
-
- Closes #952
-
-- include: delete leading underscore from macro name
-
- It can cause compiler warnings in 3rd-party code.
-
- Follow-up to 59666e03f04927e5fe3e8d8772d40729f63c570e
-
- Closes #957
-
-- ci: use OpenSSL 3 on AppVeyor VS2022 images
-
- Closes #954
-
-- build: be friendly with 3rd-party build tools
-
- After recent build changes, 3rd party build that took the list of
- C source to compile them as-is, stopped working as expected, due to
- `blowfish.c` and crypto-backend C sources no longer expected to compile
- separately but via `bcrypt_pbkdf.c` and `crypto.c`, respectively.
-
- This patch ensures that compiling these files directly result in an
- empty object instead of redundant code and duplicated symbols.
-
- Also:
- - add a compile-time error if none of the supported crypto backends
- are enabled.
- - fix `libssh2_crypto_engine()` for wolfSSL and os400qc3.
- Rearrange code to avoid a hard-to-find copy of crypto-backend
- selection guards.
-
- Follow-up to 4f0f4bff5a92dce6a6cd7a5600a8ee5660402c3f
- Follow-up to ff3c774e03585252b70a9ee0fcf254de7b14a767
-
- Closes #951
-
-- sftp: calculate attr size based on attr content in `sftp_open()`
-
- Improve robustness by replacing constant argument of `sftp_attrsize()`
- in `sftp_open()` with the actual `flag` value read from the `attr` we
- plan to transfer. Restores state of this before
- 37624b61e3ec4aa65a608800613d00b55ced56d7.
-
- Prerequisite for #947, #506.
-
- Also improve readability a bit and link to SFTP specs. Delete comment
- about version 6: The latest spec no longer features the mentioned
- "DO NOT IMPLEMENT" notice.
-
- Closes #946
-
-- man: fixups
-
- - add missing `.fi` tags.
- - fix misplaced `.nf` tags.
- - add `.nf`/`.fi` tags `SYNOPSIS` where missing.
- - fix missing/wrong function name from `SH NAME`.
- - fix wrong function name in `TH`.
- - keep return values in a separate line.
- - indent.
- - fold long lines.
- - deleted `libssh2_channel_direct_streamlocal()`, there is no such function.
- - add missing types.
- - add missing headers.
-
- Closes #949
-
-- include: indentation fixes
-
-- tidy-up: misc & minor cmake MSVS fix
-
- - `libssh2.rc`: document language/codepage codes.
-
- Ref: https://learn.microsoft.com/windows/win32/intl/code-page-identifiers
-
- - convert to Markdown: `docs/BINDINGS`, `docs/HACKING`
-
- Blind update for `vms/libssh2_make_help.dcl`. Please double-check.
-
- - cmake: fix to recognize dash-style warning options (`-Wn`) with MSVC.
-
- - `NMakefile`: sync `rd` command with `Makefile.mk`.
-
- - delete a CVS header.
-
- - cmake: simplify a `LIBSSH2_HAVE_ZLIB` macro.
-
- - few other nits and whitespace mods.
-
- Closes #943
-
-GitHub (10 Apr 2023)
-- [Viktor Szakats brought this change]
-
- Support for direct-streamlocal@openssh.com UNIX socket connection (#945)
-
- This patch allow to use direct-streamlocal service from OpenSSH 6.7,
- that allows UNIX socket connections.
-
- Mods:
- - delete unrelated condition:
- Ref: https://github.com/libssh2/libssh2/pull/216#discussion_r374748111
- - rebase on master, whitespace updates.
-
- Patch-by: @gjalves Gustavo Junior Alves
-
- Closes #216
- Closes #632
- Closes #945
-
-Viktor Szakats (10 Apr 2023)
-- build: support `libssh2.rc` with autotools
-
- Caveat: When building `--enable-static` and `--enable-shared` at the
- same time, the compiled Windows resource is also included in the
- static library. This appears to be an autotools limitation, with no
- way to have different input lists (or different custom options) for
- shared and static libraries, even though it builds them separately.
-
- The workaround is to build static libraries in a separate
- `./configure` + `make` pass.
-
- Closes #944
-
-- crypto: add `LIBSSH2_NO_DSA` to disable DSA support
-
- See also: be31457f3071686b555a0f0b19e5dcf63d67fc27
-
- Closes #942
-
-- build: unify source lists
-
- - introduce `src/crypto.c` as an umbrella source that does nothing else
- than include the selected crypto backend source. Moving this job from
- the built-tool to the C preprocessor.
-
- - this allows dropping the various techniques to pick the correct crypto
- backend sources in autotools, CMake and other build method. Including
- the per-backend `Makefile..inc` makefiles.
-
- - copy a trick from curl and instead of maintaining duplicate source
- lists for CMake, convert the GNU Makefile kept for autotools
- automatically. Do this in `docs`, `examples` and `src`.
-
- Ref: https://github.com/curl/curl/blob/dfabe8bca218d2524af052bd551aa87e13b8a10b/CMakeLists.txt#L1399-L1413
-
- Also fixes missing `libssh2_setup.h` from `src/CMakeFiles.txt` after
- 59666e03f04927e5fe3e8d8772d40729f63c570e.
-
- - move `Makefile.inc` from root to `src`.
-
- - reformat `src/Makefile.inc` to list each source in separate lines,
- re-align the continuation character and sort the lists alphabetically.
-
- - update `docs/HACKING-CRYPTO` accordingly.
-
- - autotools: update the way we add crypto-backends to `LIBS`.
-
- - delete old CSV headers, indent, and merge two lines in
- `docs/Makefile.am` and `src/Makefile.am`.
-
- - add `libssh2.pc` to `.gitignore`, while there.
-
- Closes #941
-
-GitHub (9 Apr 2023)
-- [Zenju brought this change]
-
- sftp: always clear protocol error (#787)
-
-Viktor Szakats (9 Apr 2023)
-- cmake: add `HIDE_SYMBOLS` option & do symbol hiding on *nix
-
- - implement symbol hiding on non-Windows platforms.
-
- The essence of the detection logic was copied from:
- https://github.com/curl/curl/blob/dfabe8bca218d2524af052bd551aa87e13b8a10b/CMake/CurlSymbolHiding.cmake
-
- Then simplified and shortened. This method doesn't require a recent
- CMake version, nor an external, auto-generated C header.
-
- Move `configure_file()` after `set(LIBSSH2_API ...)`, for the config
- file to pick up `LIBSSH2_API`s value.
-
- Closes #602
-
- - add CMake option `HIDE_SYMBOLS`.
-
- This setting means to hide non-public functions from the libssh2
- dynamic library when set to `ON`. The default.
-
- When set to `OFF`, make all non-static/internal functions visible
- in the dynamic library.
-
- This setting requires `BUILD_SHARED_LIBS=ON`.
-
- - honor this setting on Windows.
-
- By setting the `LIBSSH2_EXPORTS` manual macro again, and stop
- recognizing the automatic CMake macro for this purpose:
- `libssh2_shared_EXPORT`.
-
- Closes #939
-
-- build: make `windows.h` even leaner
-
- Disable GDI and NLS features in `windows.h`. libssh2 doesn't use these.
-
- Closes #940
-
-- blowfish: build improvements
-
- - include `blowfish.c` into `bcrypt_pbkdf.c`, instead of
- compiling it as a distinct object.
-
- - make low-level blowfish functions static. This prevents this symbols
- to pollute the public namespace of libssh2. It also allows the
- compiler to inline these functions.
-
- - integrate `blf.h` header into `bcrypt_pbkdf.c` as well.
-
- - use `_DEBUG_BLOWFISH` instead of `#if 0`.
-
- - fix `_DEBUG_BLOWFISH` compiler warnings and other nits.
-
- - `#undef` `inline` before redefining it in `libssh2_priv.h`.
- (copied from `blowfish.c`)
-
- - delete unused `inline` redefinitions from `blowfish.c`.
-
- - disable unused low-level blowfish functions.
-
- - formatting, header order.
-
- Closes #938
-
-- libssh2.rc: fix debug flag, other cleanups
-
- - fix to use `LIBSSH2DEBUG` macro to set the debug flag.
- (was `DEBUGBUILD`, a curl-specific macro)
-
- - use manifest constants instead of literals
-
- - change language to neutral
-
- Closes #937
-
-- tidy-up: example, tests
-
- - drop unnecessary `WIN32`-specific branches.
-
- - add `static`.
-
- - sync header inclusion order.
-
- - sync some common code between examples/tests.
-
- - fix formatting/indentation.
-
- - fix some `checksrc` errors not caught by `checksrc`.
-
- Closes #936
-
-- tests/mansyntax.sh: avoid `if !` for portability
-
- Ref: https://www.gnu.org/software/autoconf/manual/autoconf-2.69/html_node/Limitations-of-Builtins.html#Limitations-of-Builtins
-
- Fixes #704
- Closes #935
-
-- tidy-up: indentation in guarded #includes [ci skip]
-
-- Makefile.mk: drop `PROOT` variable [ci skip]
-
-- build: hand-crafted config rework & header tidy-up
-
- - introduce the concept of a project level setup header
- `src/libssh2_setup.h`, that is used by `src`, `example` and `tests`
- alike. Move there all common platform/compiler configuration from
- `src/libssh2_priv.h`, individual sources and `CMakeFiles.txt` files.
- Also move there our hand-crafted (= not auto-generated by CMake or
- autotools) configuration `win32/libssh2-config.h`.
-
- - `win32` directory is empty now, delete it.
-
- - `Makefile.mk`: adapt to the above. Build-directory is the target
- triplet, or any custom name set via `BLD_DIR`.
-
- - sync header path order between build systems:
- build/src -> source/src -> source/include
-
- - delete redundant references to `windows.h`, `winsock2.h`,
- `ws2tcpip.h`.
-
- - delete unnecessary #includes, update order (`libssh2_setup.h` first,
- `winsock2.h` first), simplify where possible.
-
- This makes the code warning-free without `WIN32_LEAN_AND_MEAN`.
- At the same time this patch applies this macro globally, to avoid
- header bloat.
-
- - example: add missing *nix header guards.
-
- - example: fix misindented `HAVE_UNISTD_H` `#ifdef`s.
-
- - set `WIN32` with all build-tools.
-
- - set `HAVE_SYS_PARAM_H` in the hand-crafted config for MinGW.
- To match auto-detection.
-
- - move a source-specific macro to `misc.c` from `libssh2_priv.h`.
-
- See the PR's individual commits for step-by-step updates.
-
- Closes #932
-
-- Makefile.mk: build tests and other improvements [ci skip]
-
- - use `example` target for building examples (was: `test`).
-
- - add support for building tests via the `test` target.
-
- - accept lib-only options in a new `LIBSSH2_CPPFLAGS_LIB` variable.
-
- Useful to pass `-DLIBSSH2_EXPORTS` for correct `dllexport` in
- `libssh2.dll`.
-
- - fix to put dynamic library in lib directory for non-Windows builds
-
- - fix to not delete lib objects on `testclean`
-
-- test_warmup: re-implement as `test()`
-
- Instead of overriding `main()`. To align with the other tests.
-
- Overriding `main()` can cause duplicate symbols without using a lib for
- the `runner` code.
-
- Follow-up to 40ac6b230a309d35c57aa65a8f6d7ab6654aa3d8
-
- Closes #934
-
-- NMakefile: drop `/DEBUG` linker option in release mode [ci skip]
-
-- NMakefile: simplify [ci skip]
-
-- Makefile.mk: merge two rules [ci skip]
-
-- TODO: update item about compiler warnings [ci skip]
-
- Follow-up to 08354e0abbe86d4cc5088d210d53531be6d8981a
- Follow-up to 29347905721d2e7fbb97dabfb0071bee51db3013
- Follow-up to 5a96f494ee0b00282afb2db2e091246fc5e1774a
- Follow-up to 463449fb9ee7dbe5fbe71a28494579a9a6890d6d
- Follow-up to 02f2700a61157ce5a264319bdb80754c92a40a24
-
-GitHub (5 Apr 2023)
-- [ihsinme brought this change]
-
- example/x11: Add null-termination (#749)
-
-Viktor Szakats (5 Apr 2023)
-- crypto: fix `LIBSSH2_NO_MD5` compiler warnings
-
- Follow-up to be31457f3071686b555a0f0b19e5dcf63d67fc27
-
- Closes #933
-
-- build: add new man pages
-
- Follow-up to c20c81ab105cdf27f5a4e2604bd13085f46e21de
-
-GitHub (5 Apr 2023)
-- [Daniel Silverstone brought this change]
-
- Configurable session read timeout (#892)
-
- This set of changes provides a mechanism to runtime-configure the
- previously #define'd timeout for reading packets from a session. The
- intention here is to also extend libcurl to be able to use this
- interface so that when fetching from sftp servers which are very slow
- to return directory listings, connections do not time-out so much.
-
- * Add new field to session to hold configurable read timeout
-
- * Updated `_libssh2_packet_require()`, `_libssh2_packet_requirev()`,
- and `sftp_packet_requirev()` to use new field in session structure
-
- * Updated docs for API functions to set/get read timeout field in
- session structure
-
- * Updated `libssh2.h` to declare the get/set read timeout functions
-
- Co-authored-by: Jon Axtell
- Credit: Daniel Silverstone
-
-Viktor Szakats (4 Apr 2023)
-- cmake: whitespace fixes [ci skip]
-
-- libssh2.h: bump LIBSSH2_COPYRIGHT year [ci skip]
-
-- Makefile.mk: move portable GNU Make file to the root
-
- Move the GNU Make file formerly known as `win32/GNUmakefile` to the
- root directory from `win32`. It now supports any platform with a
- GCC-like toolchain, while also keeping support for win32.
-
- For non-Windows platforms it's necessary to provide a hand-crafted
- `libssh2_config.h` header for now.
-
- Usage: `make -f Makefile.mk`
-
-- src: include `limits.h` for `*_MAX` macros
-
- Follow-up to 5a96f494ee0b00282afb2db2e091246fc5e1774a
-
- Reported-by: OldWorldOrdr on github
- Fixes #928
- Closes #930
-
-- build: MSVS warning suppression option tidy-up
-
- - in `win32/libssh2_config.h` replace `_CRT_SECURE_NO_DEPRECATE` with
- `_CRT_SECURE_NO_WARNINGS`, to use the official macro for this, like
- in CMake.
-
- Also, it's now safe to move it back under `_MSC_VER`.
-
- Suppressing:
-
- `warning C4996: 'fopen': This function or variable may be unsafe. Consider using fopen_s instead.`
- `warning C4996: 'getenv': This function or variable may be unsafe. Consider using _dupenv_s instead.`
-
- - move `_CRT_NONSTDC_NO_DEPRECATE` to `example` and `tests`.
- Not needed for `src`.
-
- Suppressing:
-
- `warning C4996: 'strdup': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _strdup.`
- `warning C4996: 'write': The POSIX name for this item is deprecated. Instead, use the ISO C and C++ conformant name: _write.`
-
- - move `_WINSOCK_DEPRECATED_NO_WARNINGS` from source files to
- CMake files, in `example` and `tests`. Also limit this to MSVC.
-
- Suppressing:
-
- `warning C4996: 'inet_addr': Use inet_pton() or InetPton() instead`
-
- TODO: try fixing these instead of suppressing.
-
- Closes #929
-
-- win32/GNUmakefile: make it movable [ci skip]
-
- - add `BLD_DIR` to customize the output directory (where libs, .zip,
- obj subdir will go). This directory must exist.
-
- It remains `./win32` for Windows builds.
-
- - add `CONFIG_H_DIR` option to customize `libssh2_config.h` location.
-
- It remains `./win32` for Windows builds.
-
- - include `.def` in distro zip for Windows.
-
- - ready to move to the root directory.
-
-- win32/GNUmakefile: drop an unnecessary variable [ci skip]
-
-- windows: re-add `libssh2.rc`
-
- Lost while moving it from the win32 directory
-
- Follow-up to 194cfc0f84192809c87f846140e5bf06b7a864af
-
-- crypto: add `LIBSSH2_NO_MD5` to disable MD5 support
-
- Closes #927
-
-- hostkey: fix `hash_len` field constants
-
- Replace incorrect `MD5_DIGEST_LENGTH` with `SHA_DIGEST_LENGTH` for these
- hostkey algos:
-
- - `ssh-rsa` and `ssh-dss`
-
- Ref: 7a5ffc8cee259bbde82ab92515cd8fea2166854b (2004-12-07 Initial)
-
- - `ssh-rsa-cert-v01@openssh.com`
-
- Ref: 4b21e49d9d2db74579b18804ed1f5eeb16578b2f (2022-07-28)
- Ref: #710
-
- Also delete local fall-back definition of `MD5_DIGEST_LENGTH` (added
- in 9af7eb48dc3854ce8ee0589f7e2beb944e064847). Macro is no longer used.
-
- Reported-by: Markus-Schmidt on github
- Fixes #919
- Closes #926
-
-- ci: add MSVS 2008/2010 build tests and fix warnings
-
- Also:
-
- - fix newly surfaced (bogus) warnings in examples with MSVS 2010:
-
- ```
- ..\..\example\direct_tcpip.c(262): warning C4127: conditional expression is constant
- ```
- Happens for every `FD_SET()` macro reference.
-
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46677835/job/ni4hs97bh18c14ap
-
- - silence MSVS 2010 predefined Windows macro warnings:
-
- ```
- ..\..\src\wincng.c(867): warning C4306: 'type cast' : conversion from 'int' to 'LPCSTR' of greater size
- ..\..\src\wincng.c(897): warning C4306: 'type cast' : conversion from 'int' to 'LPCSTR' of greater size
- ..\..\src\wincng.c(1132): warning C4306: 'type cast' : conversion from 'int' to 'LPCSTR' of greater size
- ```
-
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46678071/job/08t5ktvkcgdghp7r
-
- Closes #925
-
-- transport: rename local `RANDOM_PADDING` macro
-
- Rename `RANDOM_PADDING` macro used internally to enable some code.
-
- Committed in the initial version of `transport.c` in
- 9d55db6501aa4e21f0858cf36cdc2ddc11b96e83 (2007-02-02). libssh2 code
- never defined it.
-
- The name happens to collide with a Windows macro in `wincrypt.h`.
- `transport.c` doesn't include this header, but it includes `winsock2.h`,
- and it turns out it can also define this macro in some cases, e.g.
- when `WIN32_LEAN_AND_MEAN` is not set.
-
- To be on the safe side, prefix the name with `LIBSSH2_` to avoid
- enabling it by accident.
-
- Q: Maybe it'd be best to delete it with the guarded code?
-
- Reported-by: Markus-Schmidt on github
- Fixes #921
- Closes #924
-
-- windows: move `libssh2.rc` to the `src` directory
-
- Closes #918
-
-- autotools: delete unused conditional `HAVE_SYS_UN_H`
-
- No longer necessary after moving the disabling/enabling logic from
- build tool to `example/x11.c`.
-
- Reverts 4774d500e724bc4e548f743a0cb644ab05599474
- Follow-up to d245c66cc0029e480674394c23e8be1c9410f7ad
-
-- win32/GNUmakefile: update help & exit without crypto backend [ci skip]
-
- Follow-up to: 5bcd25c4c980e9765c00a2f20ac5348635063aad
- Follow-up to: 68fd02fba002c8c6af3ba51a2780de46b47b3787
-
-- build: respect autotools `DLL_EXPORT` in `libssh2.h`
-
- The `DLL_EXPORT` macro is automatically set by autotools when building
- the libssh2 DLL. Certain toolchains might require this to correctly
- export symbols, so make sure to respect it in `libssh2.h` to enable
- `declspec(dllexport)`.
-
- With this patch we have a manual macro for that (`LIBSSH2_EXPORT`),
- this autotools one, the CMake one, and `_WINDLL` (added in
- c355d31ff94a1622526c4988b9d09074f7f7605d), possibly defined by Visual
- Studio.
-
- Closes #917
-
-- build: make `HAVE_LIBCRYPT32` local to `wincng.c`
-
- libssh2 uses `wincrypt.h` aka the `crypt32` Windows system library
- for the function `CryptDecodeObjectEx()` [1]. This function has been
- available for Win32 (and UWP/WinRT apps) for a long while. Even old
- MinGW supports it, and also Watcom 1.9, of the rare/old compilers
- I checked.
-
- CMake had it permanently enabled, while it also did an extra check
- for the header to add the lib to the lib list. Autotools did the
- detection proper. Other builds had it permanently enabled.
-
- It seems safe to assume this function/header/lib is available in all
- environments we support.
-
- In this patch we simplify by deleting these detections and feature
- flags from all build tools.
-
- Keep the feature flag internal to `wincng.h`, and for extra safety add
- the new macro `LIBSSH2_WINCNG_DISABLE_WINCRYPT` do disable it via
- custom `CPPFLAGS`.
-
- WinCNG's other requirement is `bcrypt`. That also has been universally
- available for a long time. Here the only known outlier is old/legacy
- MinGW, which is missing support.
-
- [1] https://learn.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-cryptdecodeobjectex
-
- Closes #916
-
-- autotools: delete `src/libssh2.pc.in` reference [ci skip]
-
- Follow-up to 06f281921907fa077884c7020917661ca805b9d3
-
-- tidy-up: null-mac/cipher documentation
-
- Move documentation for these deleted build-level options from
- autotools/cmake docs to the source code itself.
-
- Follow-up to 50c9bf868e833258d23c5f55ed546d1fcd5687d0
-
- Closes #915
-
-- cmake: re-use existing `libssh2.pc` template
-
- Instead of maintaining a second copy of `libssh2.pc.in` in `src` just
- for CMake, teach CMake to use the existing template in the root dir,
- that we already use with autotools.
-
- Closes #914
-
-- delete redundant `HAVE_STDLIB_H`
-
- libssh2 used this standard C89 header unconditionally before this patch.
-
- Delete the feature checks and all unnecessary header guards.
-
- Closes #913
-
-- NMakefile: drop redundant variable and assignments [ci skip]
-
-- delete redundant `HAVE_WINSOCK2_H`
-
- `libssh2.h` required `winsock2.h` for `_WIN32` since
- 81d53de4dc5ee39bd6215958c7dce3b12731195e (2011-06-04).
-
- Apply that to the whole codebase. This makes it unnecessary to detect
- `HAVE_WINSOCK2_H` and allows to drop all its uses.
-
- Completes TODO from b66d7317ca6c882afbe52fe426f68c119c40d348
-
- TODO: Straighten out the use a mixture of `HAVE_WINDOWS_H`,
- `WIN32`, `_WIN32` to detect Windows.
-
-- cmake: detect WinCNG last
-
- This gives a chance to auto-detect mbedTLS on Windows with CMake.
-
-- NMakefile: rename config variables, default to WinCNG [ci skip]
-
- - replace `OPENSSLINC` and `OPENSSLLIB` with `OPENSSL_PATH`.
- Assume `include` and `lib` subdirs for headers and libs.
-
- - replace `WITH_ZLIB`, `ZLIBINC` and `ZLIBLIB` with `ZLIB_PATH`.
- Assume `include` and `lib` subdirs for header and lib.
-
- - make WinCNG the default if `WITH_OPENSSL` is not set.
-
-- win32/GNUmakefile: rename object dir and update .gitignore [ci skip]
-
- From `-{release|debug}` to `{release|debug}-`.
-
- Follow-up to 68fd02fba002c8c6af3ba51a2780de46b47b3787
-
-- win32/GNUmakefile: add libgcrypt support [ci skip]
-
- In the previous commit 969487113aae856e43d3d905c3f2260246d44f9b,
- the commit message should read `win32/GNUmakefile: ` instead of
- `libssh2-gnumake.sh: `. Sorry for the mixup.
-
-- libssh2-gnumake.sh: make variable names platform-agnostic [ci skip]
-
- Also more consistent. Refer to DLL/SO/shared as 'dyn'.
-
- Also add comment on how to find customizable environment variables.
-
-- win32/GNUmakefile: make it support non-Windows builds [ci skip]
-
- With 20-ish extra lines, make this Makefile support all GCC-like
- toolchains.
-
- The temporary directory becomes `-{release|debug}` from
- the former `{release|debug}`.
-
- Also change the lib directory name in the `dist` package from
- `win32` to `lib`, to match other packages and build tools.
-
-- win32/GNUmakefile: default to WinCNG [ci skip]
-
- Also check for wolfSSL before mbedTLS to match CMake.
-
-- win32/GNUmakefile: fixups to previous commit [ci skip]
-
- - `-lws2_32` is necessary when building examples.
-
- - drop a temporary variable.
-
- Follow-up to d245c66cc0029e480674394c23e8be1c9410f7ad
-
-- delete redundant `HAVE_WS2TCPIP_H`
-
- It was used once in `src/libssh2_priv.h`, but without any effect.
- The header included `ws2tcpip.h` twice, once guarded by
- `HAVE_WS2TCPIP_H` and another time by `HAVE_WINSOCK2_H`.
-
- Dedupe these to not use `HAVE_WS2TCPIP_H`. Then delete detection
- of this feature from all build methods.
-
- TODO: Replace `HAVE_WINSOCK2_H` with `_WIN32`/`WIN32`.
-
-- win32/libssh2_config.h: set `HAVE_LONGLONG` & `HAVE_STDLIB_H` [ci skip]
-
- - enable `HAVE_LONGLONG` for MinGW and MSVC versions supporting it.
-
- Necessary for `GNUmakefile`/`NMakefile` builds to create the same
- binaries as CMake/autotools ones do.
-
- - enable `HAVE_STDLIB_H`. It has been universally available on
- Windows for a long time.
-
- Fixes these clang-cl warnings:
- ```
- src\wincng.c(444,5) : warning: implicit declaration of function 'free' is invalid in C99 [-Wimplicit-function-declaration]
- free(buf);
- ^
- src\wincng.c(491,20) : warning: implicitly declaring library function 'malloc' with type 'void *(unsigned long long)' [-Wimplicit-function-declaration]
- pbHashObject = malloc(dwHashObject);
- ^
- src\wincng.c(491,20) : note: include the header or explicitly provide a declaration for 'malloc'
- src\wincng.c(2106,14) : warning: implicitly declaring library function 'realloc' with type 'void *(void *, unsigned long long)' [-Wimplicit-function-declaration]
- bignum = realloc(bn->bignum, length);
- ^
- src\wincng.c(2106,14) : note: include the header or explicitly provide a declaration for 'realloc'
- 3 warnings generated.
- ```
-
-- example: make `x11` exclusion build-tool-agnostic
-
- Whether to build the `x11` example or not was decided by each build
- tool. CMake didn't build it even on supported platforms. GNUMakefile
- used a specific blocklist for it, while autotools enabled it based on
- feature-detection.
-
- Migrate the enabler logic to an #ifdef in source and build `x11`
- unconditionally with all build tools.
-
- On unsupported platforms (=Windows) this program now displays a short
- message stating that fact.
-
- Also:
-
- - fix `x11.c` warnings uncovered after CMake started building it.
-
- - use `libssh2_socket_t` type for portability in `x11.c` too.
-
- - use detected header guards in `x11.c`.
-
- - delete a duplicate reference to `-lws2_32` from `win32/GNUmakefile`
- while there.
-
- Closes #909
-
-- .gitignore updates [ci skip]
-
-- tidy-up: whitespace, sorting, comment and naming fixups
-
-- cmake: add missing man pages
-
-- cmake: dedupe and merge config detection
-
- Before this patch CMake did feature detections in three files:
- `src/CMakefiles.txt`, `examples/CMakefiles.txt` and
- `tests/CMakefiles.txt`.
-
- Merge and move them to the root `CMakefiles.txt`.
-
- After this patch we end up with a single `src/libssh2_config.h`. This
- brings CMake in sync with autotools builds, which already worked with
- a single config header.
-
- This also prevents mistakes where feature detection went out of sync
- between `src` & `tests` (see ae90a35d15d97154ac0c8554bce99ebfb18ee825).
- `tests` do compile sources from `src` directly, so these should always
- be in sync.
-
- It also allows to better integrate hand-crafted, platform-specific
- config headers into the builds, like the one currently residing in
- the `win32` directory (and also in `vms` and `os400`). Subject to an
- upcoming PR.
-
- Also fix a warning revealed after this patch made CMake correctly
- enable `HAVE_GETTIMEOFDAY` for `example` programs.
-
- Closes #906
-
-- cmake: dedupe crypto-backend detection
-
- Before this patch CMake did crypto-backend detection in both
- `src/CMakefiles.txt` and `tests/CMakefiles.txt`.
-
- Merge them and move it to the root `CMakefiles.txt`.
-
- While here, also add zlib for OpenSSL. Necessary when using OpenSSL
- builds with zlib enabled.
-
- Closes #905
-
-- cmake: add missing #cmakedefines to src
-
- - `HAVE_MEMSET_S` missing since
- 03092292597ac601c3f9f0c267ecb145dda75e4e (2018-08-02)
-
- - `HAVE_EXPLICIT_BZERO` and `HAVE_EXPLICIT_MEMSET` missing since
- 00005682f7b9a1aa42be50e269056ea873637047 (2023-03-28)
-
-GitHub (31 Mar 2023)
-- [Viktor Szakats brought this change]
-
- tidy-up: NMakefile (#903)
-
-Viktor Szakats (30 Mar 2023)
-- GNUmakefile: adjust win32/.gitignore [ci skip]
-
-- build: delete references to deleted NMake files [ci skip]
-
- Follow-up to 057522bb0f15c10c33159e12899ecc60e40aa6ef
-
-GitHub (30 Mar 2023)
-- [Viktor Szakats brought this change]
-
- NMakefile: merge them into a single file [ci skip] (#902)
-
- Also:
-
- - allow to override `AR` and `ARFLAGS`.
-
- - The extra `src` subdir in the target directory is no longer, to
- simplify things.
-
- - gone the dynamically generated `objects.mk`. Now replaced with some
- tricky logic to do that inline.
-
- - add necessary `LIBS` for WinCNG. (untested)
-
- Lightly tested via clang-cl.
-
-- [Viktor Szakats brought this change]
-
- maketgz: tidy-up [ci skip] (#901)
-
- - fix shellcheck warnings:
- - use quotes
- - use `$()`
- - use `printf` (instead of calling perl).
- - indent.
- - copy/adapt header comment from curl to `maketgz`.
-
-- [Viktor Szakats brought this change]
-
- ci: flatten AppVeyor jobs, add debug builds (#900)
-
- This results in better job names (now including CPU), avoiding the
- complex exception rules, and fine-tuning the order and variation of
- these tests.
-
- Enable `LIBSSH2DEBUG` for two of the existing jobs.
-
-- [Viktor Szakats brought this change]
-
- ci: add VS2022 builds (incl. ARM64) to AppVeyor (#899)
-
- - add MSVS 2022 WinCNG builds for x64 and ARM64,
- replacing MSVS 2013 WinCNG builds for x64 and x86.
-
- - add MSVS 2022 OpenSSL builds for x64.
-
- - fix a compiler warning uncovered by the new ARM64 build:
-
- ```
- tests\openssh_fixture.c(393,17): warning C4477: 'fprintf' : format string '%d' requires an argument of type 'int', but variadic argument 1 has type 'libssh2_socket_t'
- tests\openssh_fixture.c(393,17): message : consider using '%lld' in the format string
- tests\openssh_fixture.c(393,17): message : consider using '%Id' in the format string
- tests\openssh_fixture.c(393,17): message : consider using '%I64d' in the format string
- ```
-
- - echo the actual CMake command-line.
-
- - cmake: echo the DLL filenames found by the OpenSSL DLL-finder
- heuristics.
-
- - cmake: delete `libcrypto.dll` and `libssl.dll` names from the above
- logic.
-
- I've added these in 19884e5055b6c65f0df93d7cc776a01c518a2f06. That
- resulted in CMake picking up a rogue `libcrypto.dll` (with no
- `libssl.dll` pair) from `C:\Windows\System32\` on the
- `Visual Studio 2022` image, breaking tests.
-
- Turns out, OpenSSL v1.0.2 uses the "EAY" names, but let's not re-add
- those either, because CMake mis-picks those up from
- `C:/OpenSSL-Win64/bin/`, even while pointing `OPENSSL_ROOT_DIR` to a
- v1.1.1 installation.
-
- - cmake: set `NO_DEFAULT_PATH` for OpenSSL DLL lookup to avoid picking
- up all kinds of wrong DLLs. CMake considers not the first, but the
- _last_ hit the valid one. This happened to be
- `C:/Program Files/Meson/lib*-1_1.dll` when using the
- `Visual Studio 2022` image.
-
- Ref: https://cmake.org/cmake/help/latest/command/find_file.html
-
- - cmake: leave two commented debug lines that will be useful next time
- the DLL detection lookup goes wrong.
-
- Ref: https://cmake.org/cmake/help/latest/variable/CMAKE_FIND_DEBUG_MODE.html
-
- - on error, also dump `CMakeFiles/CMakeConfigureLog.yaml` if it exists
- (requires CMake 3.26 and newer)
-
-- [Viktor Szakats brought this change]
-
- src: fix compiler warning on Darwin (#898)
-
- ```
- src/session.c:675:52: warning: implicit conversion loses integer precision: 'long' to '__darwin_suseconds_t' (aka 'int') [-Wshorten-64-to-32]
- tv.tv_usec = (ms_to_next - tv.tv_sec*1000) * 1000;
- ~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~
- ```
-
-Viktor Szakats (29 Mar 2023)
-- tidy-up: tabs to spaces in Makefile.am [ci skip]
-
- Follow-up to 2f16d8105c9491beb2a02b3081f4f1c2a224fa62
-
-GitHub (29 Mar 2023)
-- [Viktor Szakats brought this change]
-
- netware: delete support (#888)
-
- Last related commit happened 15 years ago.
- NetWare had it last release in 2009.
-
- All links referenced from the make file are inaccessible.
-
-- [Viktor Szakats brought this change]
-
- wolfssl: add workaround for HMAC_Update() len arg difference (#897)
-
- It's `int` in wolfSSL. `size_t` in OpenSSL/quictls/LibreSSL/BoringSSL.
-
- Ref: https://github.com/wolfSSL/wolfssl/blob/ba47562d182e10e59813da012e0ab8ef20892231/wolfssl/openssl/hmac.h#L60-L61
-
- /cc @wolfSSL
-
-- [Viktor Szakats brought this change]
-
- cmake: introduce variables for lib target names (#896)
-
- Make our CMake config more self-documenting by introducing variables
- for the shared and static lib target names. Without this, it might be
- non-trivial to find out which line is referring to a target name vs
- libname, export name or other occurrences of `libssh2`.
-
- This allows to rename back the shared lib target name to the value used
- before 4e2580628dd1f8dc51ac65ac747ebcf0e93fa3d1:
- `libssh2_shared` -> `libssh2`, if necessary for compatibility. Notice:
- before that patch, `libssh2` name referred to either the static or
- shared lib, depending on build settings.
-
-- [Viktor Szakats brought this change]
-
- detect and use explicit_bzero() and explicit_memset() (#895)
-
- Also skip detecting these and `memset_s()` for Windows targets in CMake,
- to save detection time. On Windows we always use `SecureZeroMemory()`.
-
-- [Viktor Szakats brought this change]
-
- ci: bump mbedtls (#894)
-
-- [Viktor Szakats brought this change]
-
- GNUmakefile: minor fix for DYN mode [ci skip] (#893)
-
- Follow-up to b8762c1003d97e109efa587bdc760ff9873949eb
-
-- [Viktor Szakats brought this change]
-
- build: delete MS Dev Studio build files (#891)
-
- Last updated in 2007.
-
- Also delete `VCPROJ` target remains (necessary files seem to have
- been missing from the repo all along) for Visual Studio 2008.
-
-Viktor Szakats (28 Mar 2023)
-- checksrc: fix reference in Makefile.am, update options [ci skip]
-
-GitHub (28 Mar 2023)
-- [Viktor Szakats brought this change]
-
- build: delete native Watcom wmake support with Win32 (#889)
-
- CMake supports generating Watcom wmake files:
- https://cmake.org/cmake/help/v3.1/generator/Watcom%20WMake.html
-
-- [Viktor Szakats brought this change]
-
- checksrc: update and fix warnings (#890)
-
- Update from:
- https://github.com/curl/curl/blob/5fec927374e4d9553205d861f2dcb39ec78002cc/scripts/checksrc.pl
-
- - suppress these new checks:
-
- - EQUALSNULL: 320 warnings
- - NOTEQUALSZERO: 142 warnings
- - TYPEDEFSTRUCT: 16 warnings
-
- We can enabled them in the future.
-
- - fix all other new ones.
-
- - also fix whitespace in two `NMakefile` files.
-
-- [Viktor Szakats brought this change]
-
- tidy-up: fix/update URLs (#887)
-
-- [Viktor Szakats brought this change]
-
- tidy-up: fix typos (#886)
-
- detected by codespell 2.2.4.
-
-- [Viktor Szakats brought this change]
-
- tidy-up: replace tabs and other whitespace (#885)
-
- There are a few non-whitespace changes, see them here:
- https://github.com/libssh2/libssh2/pull/885/files?w=1
-
-- [Viktor Szakats brought this change]
-
- ci: drop cmake --parallel (#884)
-
- `--parallel 2` did not seem to make builds faster. Neither did 4 or 6.
-
- Delete this option from both GHA and AppVeyor jobs.
-
- On AppVeyor, with VS, it uses MSBuild under the hood where apparently
- `--parallel` doesn't do much [1]. The suggested MSBuild-specific option
- `/p:CL_MPcount=2` did not improve build times either.
-
- CMake spends significant time (comparable to building the project
- itself) on feature detection, it'd be nice to execute those in parallel,
- but I found not such CMake option.
-
- [1] https://discourse.cmake.org/t/parallel-does-not-really-enable-parallel-compiles-with-msbuild/964
-
- Partial revert of 7a039d9a7a2945c10b4622f38eeed21ba6b4ec55
-
-- [Viktor Szakats brought this change]
-
- rework how to enable insecure null-cipher/null-MAC (#873)
-
- Null-cipher and null-MAC are security footguns we want to avoid.
-
- Existing option names to toggle these were ambiguous and gave room for
- misinterpretation. Some projects may have had these options enabled by
- accident.
-
- This patch aims to make it more difficult to enable them, and making
- sure that existing methods require an update to stay enabled.
-
- - delete CMake/autotools settings to enable the "none" cipher and MAC.
-
- - rename existing C macros that can enable them.
-
- To use them, pass them as custom `CPPFLAGS` to the build.
-
- - enable them only if `LIBSSH2DEBUG` is also enabled.
-
- Best would be to delete them, though they may have some use while
- developing libssh2 itself, or debugging.
-
-- [Viktor Szakats brought this change]
-
- delete old gex (SSH2_MSG_KEX_DH_GEX_REQUEST_OLD) build option (#872)
-
- libssh2 supports an "old" style KEX message
- `SSH2_MSG_KEX_DH_GEX_REQUEST_OLD`, as an off-by-default build option.
-
- OpenSSH deprecated/disabled this feature in v6.9 (2015-07-01):
- https://www.openssh.com/releasenotes.html#6.9
-
- This patch deletes this obsolete feature from libssh2, with no option
- to enable it.
-
- Added to libssh2 in: cf8ca63ea0c9388c8ae9079961d7e6a91b72b5c8 (2004-12-31)
- RFC: https://datatracker.ietf.org/doc/html/rfc4419 (2006-03)
-
-- [Viktor Szakats brought this change]
-
- src: more tolerant snprintf() local override (#881)
-
- `#undef snprintf` before redefining it, when `HAVE_SNPRINTF` is not
- defined, even though `snprintf` is available and it should have been.
- Possibly with 3rd party builds.
-
- Downside is that cases of missing `HAVE_SNPRINTF` are less trivially
- detected at compile-time.
-
-- [Viktor Szakats brought this change]
-
- ci: fix cmake warning with AppVeyor WinCNG builds (#883)
-
- ```
- CMake Warning:
- Manually-specified variables were not used by the project:
-
- OPENSSL_ROOT_DIR
- ```
-
- Follow-up to 0834b9bcc85b90c78afff103f909b5a909b95e45
-
-- [Viktor Szakats brought this change]
-
- ci: cmake `ENABLE_WERROR` -> `ON` (#877)
-
- Consider warnings as errors for CMake jobs in CI.
-
-Viktor Szakats (26 Mar 2023)
-- src: silence compiler warnings 4 (alignment in WinCNG)
-
- Silence alignment warnings in WinCNG, by reworking the code.
-
- Also add two unrelated casts to avoid gcc compiler warnings
- in surrounding code.
-
- `increases required alignment from 1 to 4 [-Wcast-align]`
- `increases required alignment from 1 to 8 [-Wcast-align]`
-
- See warning details in the PR's individual commits.
-
- Reviewed-by: Marc Hörsken in
- Cherry-picked from #846
- Closes #880
-
-- src: silence compiler warnings 3 (change types)
-
- Apply type changes to avoid casts and warnings. In most cases this
- means changing to a larger type, usually `size_t` or `ssize_t`.
-
- Change signedness in a few places.
-
- Also introduce new variables to avoid reusing them for multiple
- purposes, to avoid casts and warnings.
-
- - add FIXME for public `libssh2_sftp_readdir_ex()` return type.
-
- - fix `_libssh2_mbedtls_rsa_sha2_verify()` to verify if `sig_len`
- is large enough.
-
- - fix `_libssh2_dh_key_pair()` in `wincng.c` to return error if
- `group_order` input is negative.
-
- Maybe we should also reject zero?
-
- - bump `_libssh2_random()` size type `int` -> `size_t`. Add checks
- for WinCNG and OpenSSL to return error if requested more than they
- support (`ULONG_MAX`, `INT_MAX` respectively).
-
- - change `_libssh2_ntohu32()` return value `unsigned int` -> `uint32_t`.
-
- - fix `_libssh2_mbedtls_bignum_random()` to check for a negative `top`
- input.
-
- - size down `_libssh2_wincng_key_sha_verify()` `hashlen` to match
- Windows'.
-
- - fix `session_disconnect()` to limit length of `lang_len`
- (to 256 bytes).
-
- - fix bad syntax in an `assert()`.
-
- - add a few `const` to casts.
-
- - `while(1)` -> `for(;;)`.
-
- - add casts that didn't fit into #876.
-
- - update `docs/HACKING-CRYPTO` with new sizes.
-
- May need review for OS400QC3: /cc @monnerat @jonrumsey
-
- See warning details in the PR's individual commits.
-
- Cherry-picked from #846
- Closes #879
-
-- src: silence compiler warnings 2 (ZLIB interface)
-
- Silence warnings in the ZLIB interface by adding casts and changing
- types.
-
- See PR for individual commits.
-
- Cherry-picked from #846
- Closes #878
-
-- src: silence compiler warnings 1
-
- Most of the changes aim to silence warnings by adding casts.
-
- An assortment of other issues, mainly compiler warnings, resolved:
-
- - unreachable code fixed by using `goto` in
- `publickey_response_success()` in `publickey.c`.
-
- - potentially uninitialized variable in `sftp_open()`.
-
- - MSVS-specific bogus warnings with `nid_type` in `kex.c`.
-
- - check result of `kex_session_ecdh_curve_type()`.
-
- - add missing function declarations.
-
- - type changes to fit values without casts:
- - `cmd_len` in `scp_recv()` and `scp_send()`: `int` -> `size_t`
- - `Blowfish_expandstate()`, `Blowfish_expand0state()` loop counters:
- `uint16_t` -> `int`
- - `RECV_SEND_ALL()`: `int` -> `ssize_t`
- - `shell_quotearg()` -> `unsigned` -> `size_t`
- - `sig_len` in `_libssh2_mbedtls_rsa_sha2_sign()`:
- `unsigned` -> `size_t`
- - `prefs_len` in `libssh2_session_method_pref()`: `int` -> `size_t`
- - `firstsec` in `_libssh2_debug_low()`: `int` -> `long`
- - `method_len` in `libssh2_session_method_pref()`: `int` -> `size_t`
-
- - simplify `_libssh2_ntohu64()`.
-
- - fix `LIBSSH2_INT64_T_FORMAT` for MinGW.
-
- - fix gcc warning by not using a bit field for
- `burn_optimistic_kexinit`.
-
- - fix unused variable warning in `_libssh2_cipher_crypt()` in
- `libgcrypt.c`.
-
- - fix unused variables with `HAVE_DISABLED_NONBLOCKING`.
-
- - avoid const stripping with `BIO_new_mem_buf()` and OpenSSL 1.0.2 and
- newer.
-
- - add a missing const in `wincng.h`.
-
- - FIXME added for public:
- - `libssh2_channel_window_read_ex()` `read_avail` argument type.
- - `libssh2_base64_decode()` `datalen` argument type.
-
- - fix possible overflow in `sftp_read()`.
-
- Ref: 4552c73cd58fccb1fc49cb0f25f86619133e560f
-
- - formatting in `wincng.h`.
-
- See warning details in the PR's individual commits.
-
- Cherry-picked from #846
- Closes #876
-
-GitHub (24 Mar 2023)
-- [Viktor Szakats brought this change]
-
- cmake: automatic exports macro tidy-up (#875)
-
- In a recent CMake update I left the original CMake EXPORTS macro
- unchanged (`libssh2_EXPORTS`) for compatibility.
-
- However, that macro was also recently added [1] and not present in an
- official release yet, so we might as well just use the new native one
- instead (`libssh2_shared_EXPORTS`), defined by CMake automatically.
- This way we don't need to define the old macro manually.
-
- CMake forms this macro from the lib's internal name as defined in
- `add_library()` by appending `_EXPORTS`. That target name changed from
- `libssh2` to `libssh2_shared` after introducing dual shared + static
- builds in the recent update.
-
- If we're here, add a new, stable, build-tool agnostic macro with the
- same effect, for non-CMake use: `LIBSSH2_EXPORTS`
-
- [1] 1f0fe7443a1ecddd320f2c693607b2afee9bbe2f (2021-10-26)
-
- Follow-up to 4e2580628dd1f8dc51ac65ac747ebcf0e93fa3d1
-
-- [Viktor Szakats brought this change]
-
- maketgz: add .xz, .bz2, .zip source archive formats (#874)
-
- Copied from curl:
- https://github.com/curl/curl/blob/4528690cd51e5445df74aef8f83470a602683797/maketgz#L174-L222
-
- [ci skip]
-
-Viktor Szakats (23 Mar 2023)
-- dist: delete reference to recently deleted file [ci skip]
-
- Follow-up to b8762c1003d97e109efa587bdc760ff9873949eb
-
-GitHub (23 Mar 2023)
-- [Viktor Szakats brought this change]
-
- cmake: separate compilation passes for shared/static (#871)
-
- Before this patch, cmake did a single compilation pass when we enabled
- both shared and static lib targets. This saves build time (esp. with
- MinGW targets and cross-compiling), but has the disadvantage that static
- libs built this way must have PIC enabled (offering slightly less
- performance) and `dllexport` enabled also, which means that executables
- linking the static libssh2 lib export its public symbols.
-
- To avoid these downsides, this patch separates the two passes and
- creates a non-PIC, non-`dllexport` static lib, even when also building
- the shared lib.
-
-- [Viktor Szakats brought this change]
-
- ci: test with OpenSSL v1.1.1 on AppVeyor (#870)
-
- Was: v1.0.2.
-
- Keep using v1.0.2 with the static-only test. To make sure we don't break
- support.
-
-- [Viktor Szakats brought this change]
-
- ci: speed up static-only build tests on AppVeyor (#868)
-
- - limit static-only build to a single platform (x64).
-
- - skip running ctest for the static-only build.
-
- - use MSVS 2013 for static-only builds. It's faster.
-
- - run static-only test before WinCNG ones. Otherwise it's often skipped
- due to WinCNG failures (#804).
-
-- [Viktor Szakats brought this change]
-
- cmake: fix error with static lib off and example/tests on (#869)
-
- Regression from 4e2580628dd1f8dc51ac65ac747ebcf0e93fa3d1
-
-- [Viktor Szakats brought this change]
-
- ci: parallelize more (#867)
-
-- [Viktor Szakats brought this change]
-
- cmake/src: move build options before target definitions (#864)
-
- To allow more flexibility when defining targets.
-
-- [Viktor Szakats brought this change]
-
- ci: use static+shared builds to cut number of cmake jobs (#865)
-
- With CMake builds supporting static-shared libssh2 builds in a single
- pass, we no longer need to run static and shared jobs separately. For
- the same effect it's enough to run builds with both shared and static
- builds enabled. Halving CI jobs.
-
- We add an extra run to test the CMake config-path without shared builds
- enabled.
-
- This allows to add useful jobs, e.g. MSVS 2022 or ZLIB-enabled builds
- for Windows, valgrind builds or other useful stuff, without stretching
- CI run times further.
-
- Ref: #863
-
-Viktor Szakats (22 Mar 2023)
-- cmake: allow building static + shared libs in a single pass
-
- - `BUILD_SHARED_LIBS=ON` no longer disables building static lib.
-
- When set, we build the static lib with PIC enabled.
-
- For shared lib only, set `BUILD_STATIC_LIBS=OFF`. For static lib
- without PIC, leave this option disabled.
-
- - new setting: `BUILD_STATIC_LIBS`. `ON` by default.
-
- Force-enabled when building examples or tests (we build those in
- static mode always.)
-
- - fix to exclude Windows Resource from the static lib.
-
- - fix to not overwrite static lib with shared implib on Windows
- platforms using identical suffix for them (MSVS). By using
- `libssh2_imp<.ext>` implib filename.
-
- - add support for `STATIC_LIB_SUFFIX` setting to set an optional suffix
- (e.g. `_static`) for the static lib. (experimental, not documented).
- Overrides the above when set.
-
- - fix to set `dllexport` when building shared lib.
-
- - set `TrackFileAccess=false` for MSVS.
-
- For faster builds, shorter verbose logs.
-
- - tests: new test linking against shared libssh2: `test_warmup_shared`
-
- - tests: simplify 'runner' lib by merging 3 libs into a single one.
-
- - tests: drop hack from `test_keyboard_interactive_auth_info_request`
- build.
-
- We no longer need to compile `src/misc.c` because we always link
- libssh2 statically.
-
- - tests: limit `FIXTURE_WORKDIR=` to the `runner` target.
-
- TL;DR: Default behavior unchanged: static (no-PIC), no shared.
- Enabling shared unchanged, but now also builds a static (PIC)
- lib by default.
-
- Based-on: b60dca8b6450a9729670986d2899cca54ccdbb6d #547 by berney on github
- Fixes: #547
- Fixes: #675
- Closes: #863
-
-- include: silence warnings with casts in public `libssh2_sftp.h`
-
- Avoid triggering warnings in macros coming from public libssh2 headers.
-
- Cherry-picked from: #846
- Closes #862
-
-- example, tests: address compiler warnings
-
- Fix or silence all C compiler warnings discovered with (or without)
- `PICKY_COMPILER=ON` (in CMake). This means all warnings showing up in
- CI (gcc, clang, MSVS 2013/2015), in local tests on macOS (clang 14) and
- Windows cross-builds using gcc (12) and llvm/clang (14/15).
-
- Also fix the expression `nread -= nread` in `sftp_RW_nonblock.c`.
-
- Cherry-picked from: #846
- Closes #861
-
-- openssl: require `EVP_aes_128_ctr()` support
-
- libssh2 built with OpenSSL and without its `EVP_aes_128_ctr()`, aka
- `HAVE_EVP_AES_128_CTR`, option are working incorrectly. This option
- wasn't always auto-detected by autotools up until recently (#811).
- Non-cmake, non-autotools build methods never enabled it automatically.
-
- OpenSSL supports this options since at least v1.0.2, which is already
- EOLed and considered obsolete. OpenSSL forks (LibreSSL, BoringSSL)
- supported it all along.
-
- In this patch we enable this option unconditionally, now requiring
- OpenSSL supporting this function, or one of its forks.
-
- Also modernize OpenSSL lib references to what 1.0.2 and newer versions
- have been using.
-
- Fixes #739
-
-- wincng: fix memory leak in `_libssh2_dh_secret()`
-
- Patch-by: iruis on github
- Assisted-by: Marc Hörsken
- Bug #846, commit e3487092ef9553af67633c6747cb9ab2f86465e0.
- Fixes #856
- Closes #858
-
-GitHub (19 Mar 2023)
-- [Viktor Szakats brought this change]
-
- nw, os400, watcom: stop setting unused macros [ci skip] (#859)
-
-Viktor Szakats (19 Mar 2023)
-- cmake: fix `ENABLE_WERROR=ON` breaking auto-detections
-
- - cmake: fix compiler warnings in `CheckNonblockingSocketSupport`.
- detection functions.
-
- Without this, these detections fail when `ENABLE_WERROR=ON`.
-
- - cmake: disable ENABLE_WERROR for MSVC during symbol checks in `src`.
-
- CMake's built-in symbol check function `check_symbol_exists()`
- generate warnings with MSVC. With warnings considered errors, these
- detections fail permanently. Our workaround is to disable
- warnings-as-errors while running these checks.
-
- ```
- CheckSymbolExists.c(8): warning C4054: 'type cast': from function pointer '__int64 (__cdecl *)(const char *,char **,int)' to data pointer 'int *'
- in `return ((int*)(&strtoll))[argc];`
- ```
-
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46537222/job/4vg4yg333mu2lg9b
-
- - example: replace `strcasecmp()` with C89 `strcmp()`.
-
- To avoid using CMake symbol checks in `example`.
-
- Another option is to duplicate the `check_symbol_exists()` workaround
- from `src`, but I figure it's not worth the complexity. We use
- `strcasecmp()` solely to check optional command-line options for
- example programs, and those are fine as lower-case.
-
- Without this, these detections fail when `ENABLE_WERROR=ON`.
-
- - also delete `__function__` detection/use in `example`.
-
- To avoid the complexity for the sake of using it at a single place in
- of the example's error branch. Replace that use with a literal name of
- the function.
-
- - cmake: also use `CMakePushCheckState` functions instead of manual
- save/restore.
-
- Closes #857
-
-- build: improve a test build workaround with bcrypt
-
- - cmake: extend workaround for linking a test with shared libssh2.
-
- One of the tests uses internal libssh2 functions, and with CMake it
- compiles `src/misc.c` directly for this. `misc.c` references bcrypt /
- blowfish code. This needs a workaround for build configs where libssh2
- doesn't export these.
-
- Before this patch, we enabled this workaround for MSVC.
-
- In the patch we extend this to all Windows. There is no CI test for
- this, but gcc and llvm/clang + mingw64 builds also need it. This may
- well apply to other configurations (it should, as shared libs are not
- supposed to export internal functions), so also make it easy to enable
- it at a single point.
-
- [ autotools builds force-link this one test against static libssh2. ]
-
- - make `misc.c` not depend on bcrypt.
-
- By moving out our `bcrypt_pbkdf()` wrapper into `bcrypt_pbkdf.c`
- itself.
-
- This allows to compile `misc.c` into tests without pulling in bcrypt /
- blowfish functions, and simplify the above workaround.
-
- Source code uses `HAVE_BCRYPT_PBKDF`, a leftover from original bcrypt
- source. We never define this inside libssh2. Defining it breaks the
- build, and this patch doesn't change that.
-
- - make `bcrypt_pbkdf()` static.
-
- While here, make the low-level `bcrypt_pbkdf()` function static to
- avoid namespace pollution.
-
- Closes #855
-
-GitHub (17 Mar 2023)
-- [Viktor Szakats brought this change]
-
- ci: more timeout adjustments (#853)
-
- - add timeout to SSH connection wait loop in AppVeyor test prep.
- (2 minutes)
-
- - switch to per-step timeout for GitHub CI cmake/ctest runs.
- (10 minutes)
-
- ctest timeout (of 450 seconds) didn't seem to make any difference.
-
-Viktor Szakats (17 Mar 2023)
-- ci: set timeout to ctest and GitHub CI jobs
-
- - `ctest` shows a the default timeout '10000000' (turns out to be
- in seconds), cause infinite waits e.g. in case the necessary server
- worker is not available.
-
- CMake CI tests take approx:
- - GitHub / Linux : 125 seconds
- - AppVeyor / Windows: 300 seconds
-
- New timeouts are: 450 and 900 seconds respectively.
-
- - set timeouts for style-check, fuzz, Linux and Windows GitHub CI
- jobs to avoid hanging forever.
-
- Also:
-
- - move `choco install` to before_test to make builds start faster
- in `appveyor.yml`.
-
- - fix some yamllint `ON`/`OFF`-confusion issue by quoting these
- values in `appveyor.yml`.
-
- - fix indentation in `appveyor.yml`.
-
- - convert to GitHub workflows to LF line-ending.
-
- Ref: https://github.com/libssh2/libssh2/pull/655#issuecomment-1472853493
-
- Closes #851
-
-GitHub (17 Mar 2023)
-- [Viktor Szakats brought this change]
-
- ci: update mbedTLS repo URL, delete Travis CI (#850)
-
- Last Travis CI session run on 2021-11-18.
-
- Ref: https://app.travis-ci.com/github/libssh2/libssh2
- Ref: https://travis-ci.org/github/libssh2/libssh2/builds
-
-- [Viktor Szakats brought this change]
-
- appveyor.yml: reorder tests to return relevant feedback earlier (#849)
-
- - build x64 first
-
- x64 is the more interesting target. Most type conversion issues are
- revealed here. Also more commonly used by now.
-
- - test VS 2013 earlier
-
- - test WinCNG earlier
-
- - delete reference to no longer used VS 2008
-
- After this patch we end up starting with all Shared builds (2015, 2013,
- OpenSSL, WinCNG), then continue with Static ones. Shared/Static makes
- a minor if any difference in builds/tests compared to different VS
- versions of TLS backends.
-
- --
-
- CI run times:
-
- Preparation + build takes:
- 8 x VS2015 4.5 mins -> total: 36
- 8 x VS2013 2 mins -> total: 16
- Total: 52 mins
-
- with our 30 tests, it increases to:
- 8 x VS2015 8-10 mins -> total: 72
- 8 x VS2013 6- 9 mins -> total: 60
- Total: 132 mins
-
- Without tests: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46475315
- With tests: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46480549
-
-Dan Fandrich (14 Mar 2023)
-- src: check for NULL pointer passed to _libssh2_get_string
-
- Callers should be protecting against this, but it's prudent to check
- here anyway.
-
- Fixes #802
- Closes #848
-
-Viktor Szakats (14 Mar 2023)
-- appveyor.yml: choco install improvements [ci skip]
-
- - avoid outputting 4000 log lines by hiding the progress bar.
- Reduces log size by 5x.
-
- - decrease timeout (from the default 2700 seconds).
-
- - omit unnecessary output.
-
- Tested as part of #846
-
-GitHub (14 Mar 2023)
-- [Jakob Egger brought this change]
-
- build: update instructions for autoreconf (#847)
-
- The "convenience script" talks about the "buildconf" file,
- which is no longer recommended.
-
-- [Viktor Szakats brought this change]
-
- win32: set HAVE_STRTOLL with MSVS 2013 and newer (#845)
-
- As in curl:
- https://github.com/curl/curl/blob/7fa6e36583b52dd8f1e639b370c9a2849be81b54/lib/config-win32.h#L221
-
-- [Viktor Szakats brought this change]
-
- GNUmakefile: move HAVE_STRTOLL to libssh2_config.h [ci skip] (#844)
-
-- [Viktor Szakats brought this change]
-
- src: silence unused variable warnings (#843)
-
-Viktor Szakats (13 Mar 2023)
-- GNUmakefile: add wolfSSL support + major rework
-
- - add wolfSSL support.
- - reduce size and redundant logic.
- - fix a bunch of small issues.
- - rework configuration, now with: `CC`, `AR`, `RC`, `TRIPLET`, `CFLAGS`,
- `CPPFLAGS`, `LDFLAGS`, `RCFLAGS`, `LIBS`, `LIBSSH2_DLL_SUFFIX`,
- `LIBSSH2_LDFLAGS_LIB`, `LIBSSH2_LDFLAGS_BIN` (and more).
- - merge examples build into the main Makefile.
- - relative dependency paths are now the same for building libssh2 or
- examples.
- - drop detection for obsolete OpenSSL versions (can be configure via new
- `OPENSSL_LIBS`).
- - merge dev/dist distribution zip options.
- - build libssh2 with `-DHAVE_STRTOLL`.
- - tidy-up.
- - build examples in static mode by default (use `DYN` to build them in
- shared mode).
- - drop forced (in non-debug mode) `-O2`.
- - drop Win9x support.
- - deprecate `ARCH` in favour of custom options and `TRIPLET`.
- - drop Windows resources from examples for simplicity
- - drop `WITH_ZLIB`. Default `ZLIB_PATH` to enable zlib support.
- - drop `LIBSSH2_DLL_A_SUFFIX`, use standard value `.dll` (as in
- `libssh2.dll.a`).
- - always link `bcrypt` (for LibreSSL and OpenSSL) and `crypt32`
- (for wolfSSL).
- - unhide executed build commands.
- - fix mbedTLS `lib` path
- - drop specific options to force static linking. Custom options seems
- a better way for this.
- - based on similar work made for curl:
- https://github.com/curl/curl/commit/a8861b6ccdd7ca35b6115588a578e36d765c9e38
-
- Closes #842
-
-GitHub (13 Mar 2023)
-- [Viktor Szakats brought this change]
-
- wincng: fix memory leak in libssh2_dh_key_pair() (#829)
-
- Fixes #722
-
-- [Viktor Szakats brought this change]
-
- src: C89-compliant _libssh2_debug() macro (#831)
-
- Before this patch, with debug logging disabled, libssh2 code used a
- variadic macro to catch `_libssh2_debug()` calls, and convert them to
- no-ops. In certain conditions, it used an empty inline function instead.
-
- Variadic macro is a C99 feature. It means that depending on compiler,
- and build settings, it littered the build log with warnings about this.
-
- The new solution uses the trick of passing the variable arg list as a
- single argument and pass that down to the debug function with a regular
- macro. When disabled, another regular C89-compatible macro converts it
- to a no-op.
-
- This makes inlining, C99 variadic macros and maintaining the conditions
- for each unnecessary and also makes the codebase compile more
- consistently, e.g. with forced C standards and/or picky warnings.
-
- TL;DR: It makes this feature C89-compliant.
-
-- [Viktor Szakats brought this change]
-
- openssl: fix possible compiler warning in macro condition (#839)
-
- Building with wolfSSL or pre-OpenSSL v1.1.1 triggered it.
-
- ```
- ../src/openssl.h:130:5: warning: 'LIBRESSL_VERSION_NUMBER' is not defined, evaluates to 0 [-Wundef]
- LIBRESSL_VERSION_NUMBER >= 0x3070000fL
- ^
- ```
-
- Regression from 2e2812dde8c1fc9b48eca592823770ab2e601f7a
-
-- [Viktor Szakats brought this change]
-
- GNUmakefile: cleanups [ci skip] (#840)
-
- - indent
- - sync `test/GNUmakefile` with main
- - delete `RANLIB`
- - use `else if`
- - use more `?=`
- - use ASCII-7 copyright symbol (in test)
-
-- [Viktor Szakats brought this change]
-
- win32: convert tabs to spaces [ci skip] (#838)
-
- Also strip stray newlines from `win32/rules.mk`.
-
-- [Viktor Szakats brought this change]
-
- ci: retry choco install on appveyor (#837)
-
- Trying to mitigate occasional intermittent failures while installing
- docker.
-
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46460704/job/g3t7bro6ta6n3pk6#L52
-
-- [Viktor Szakats brought this change]
-
- cmake: drop unnecessary exception for warmup build (#835)
-
-- [Viktor Szakats brought this change]
-
- cmake: reflect minimum version in docs (#834)
-
- Follow-up to 505ea626b6e125b7ce15caf453b522192008a884
-
-- [Viktor Szakats brought this change]
-
- cmake: add wolfSSL support to tests (#833)
-
- wolfSSL supports building with zlib as a dependency, that's the reason
- for the ZLIB logic in the patch.
-
- Also add it to `docs/INSTALL_CMAKE.md` and to the help text in
- `src/CMakeLists.txt`.
-
- Running tests not actually tested.
-
- Follow-up to 9f217a17f6f3c2047c4a1668a5c037a75a02abfd
-
- Ref: #817
-
-- [Viktor Szakats brought this change]
-
- tests: workaround for intermittent first test failures (#832)
-
- Flakiness got continously worse these last days. It didn't seem related
- to recent commits. Flakiness also picked up in GitHub CI runs, something
- rarely seen before. Manual restart consistently fixed them.
-
- The repeating pattern was the _first_ test (`test_hostkey`) failing,
- with `libssh2_session_handshake failed (-13): Failed getting banner`.
- Failures came after a lengthy wait, suggesting a timeout.
-
- I then reversed the order of the first two tests, and it turned out that
- the _first_ test failed again (`test_hostkey_hash`). Also pointing to a
- timeout issue.
-
- Then I added a dummy test to "warm up" whatever needs warming up in the
- layers of CI + Docker + ssh server and their interconnects. This helped,
- and GitHub CI tests run without failure right for the first time.
- AppVeyor CI also improved a little.
-
- This patch adds a new first test called `test_warmup`, that creates a
- new libssh2 session, and exits with success even if that attempt failed.
-
- A stop-gap solution at best, and there is no guarantee it will continue
- to fix this or similar future issues, but it's also untenable to have
- almost every CI run fail for intermittent reasons.
-
- In some [1] cases [2] it's not the first test failing intermittently.
- That's a different issue, and this patch doesn't fix it.
-
- [1] #804
- [2] https://ci.appveyor.com/project/libssh2org/libssh2/builds/46440828/job/8rej6cq6itg7vc4w#L500
-
-- [Viktor Szakats brought this change]
-
- cmake: detect HAVE_SNPRINTF for tests (#830)
-
- Turns out `test_keyboard_interactive_auth_info_request.c` requires
- `src/libssh2_priv.h`, which in turn requires a correctly set
- `HAVE_SNPRINTF`.
-
- Follow-up to 4cdf785cd313c3272d04c2ef7458a35d44533d8b.
-
-- [Viktor Szakats brought this change]
-
- cmake: unset forced CMAKE_C_STANDARD 90 (#822)
-
- Added in cf80f2f4b5255cc85a04ee43b27a29c678c1edb1 (on 2016-08-14),
- with the title "Basic dockerised test suite".
-
- It's not clear why a C standard was explicitly set, but a side-effect
- of this is that CMake-built binaries diverged from ones built with
- autotools or GNU Make (using the same compiler and configuration).
-
- Another issue is that this may introduce ABI incompatibility with
- binaries built with a different C standard flag, e.g. the C compiler
- default or one used for other components of a final app.
-
- Seems unlikely, but if our tests require this option, we should set it
- for the CI builds only?
-
-- [Viktor Szakats brought this change]
-
- example: silence MSVS 2013 C4127 warnings (#828)
-
-- [Viktor Szakats brought this change]
-
- cmake: reposition ws2_32 to make binutils ld work again (#827)
-
- This restores socket libs to their pre-regression positions.
-
- Without this, `ld` doesn't find `ws2_32` symbols when referenced
- from TLS libs.
-
- Regression from 31fb8860dbaae3e0b7d38f2a647ee527b4b2a95f
-
-- [Viktor Szakats brought this change]
-
- fix compiling with LIBSSH2_NO_CLEAR_MEMORY and OpenSSL (#825)
-
- Regression from a0e424a51c27cc27af611ba20d134f9a9ae35273
-
- Fixes #824
-
-- [Viktor Szakats brought this change]
-
- snprintf: add missing prototype for local replacement (#820)
-
- Should fix these warnings with MSVS 2013 and older:
- `agent.c(294): warning C4013: '_libssh2_snprintf' undefined; assuming extern returning int`
-
- Follow-up to 4cdf785cd313c3272d04c2ef7458a35d44533d8b.
-
-- [Viktor Szakats brought this change]
-
- build: set _FILE_OFFSET_BITS=64 for mingw-w64 (#821)
-
- autotools builds already did auto-detect and set this mingw-specific
- macro, but CMake and GNU Make builds did not. This patch fixes that.
-
- Necessary for `src/scp.c`.
-
-- [Viktor Szakats brought this change]
-
- cmake: add os400qc3.c to SOURCES (#826)
-
- This re-syncs the list of compiled objects in cmake builds with
- non-cmake builds.
-
- Follow-up to 16619a8eddec35bb8582d1c334db0fc13b0817c4.
-
-- [Viktor Szakats brought this change]
-
- build: silence bogus C4127 warnings with MSVS 2013 and earlier (#819)
-
- E.g.:
- `channel.c(370): warning C4127: conditional expression is constant`
- Ref:
- https://ci.appveyor.com/project/libssh2org/libssh2/builds/46437333/job/5rak1vcl9hue31ei#L190
-
-- [Viktor Szakats brought this change]
-
- cmake: use only needed socket libs when checking non-blocking sockets (#816)
-
- Based on patch by Christian Beier.
-
- Fixes #694
- Closes #712
-
-- [Viktor Szakats brought this change]
-
- cmake: update openssl dll list (#818)
-
- Add OpenSSL 3 and versionless DLL names. Also modernize warning messages
- and variable names.
-
- Do we need the OpenSSL-Windows-specific check and the related
- `RUNTIME_DEPENDENCIES` feature? The list of OpenSSL DLLs was out of date
- for 1.5 years without anybody noticing. Keeping it fresh is a chore and
- copying around DLL dependencies rarely helps as much as expected. This
- check also results in unuseful warnings in certain build scenarios, e.g.
- when linking to OpenSSL statically.
-
-- [Viktor Szakats brought this change]
-
- cmake: add wolfSSL support (#817)
-
- Implement wolfSSL support for libssh2 when building with CMake.
-
- Configuration example from curl-for-win:
- ```
- -DCRYPTO_BACKEND=wolfSSL
- -DWOLFSSL_LIBRARY=/path-to/wolfssl/lib/libwolfssl.a
- -DWOLFSSL_INCLUDE_DIR=/path-to/wolfssl/include
- ```
-
- Module `cmake/Findwolfssl.cmake` copied from:
- https://github.com/ngtcp2/ngtcp2/blob/e4d920c4b7a350d63b6978c68b216b76faa12635/cmake/Findwolfssl.cmake
- via commit:
- https://github.com/ngtcp2/ngtcp2/commit/296396d3730b721ad97f9de22f525400f8524c0e
- by Stefan Eissing
-
-- [Viktor Szakats brought this change]
-
- cmake: restore non-Windows socket lib detection (#815)
-
- I mistakenly pruned some non-Windows logic, also missing the fact that
- our local `check_function_exists_may_need_library()` set the `NEED_*`
- variables. Oddly, only `src` imported this function, yet also `examples`
- and `tests` called it indirectly. The referenced `HAVE_SOCKET` /
- `HAVE_INET_ADDR` variables might be coming from an upstream CMake
- project? Leaving those there also, just in case.
-
- Regression from 31fb8860dbaae3e0b7d38f2a647ee527b4b2a95f
-
-Viktor Szakats (7 Mar 2023)
-- build: more fixes and tidy-up (mostly for Windows)
-
- - cmake: always link `ws2_32` on Windows. Also add it to `libssh2.pc`.
-
- Fixes #745
-
- - agent: fix gcc compiler warning:
- `src/agent.c:296:35: warning: 'snprintf' output truncated before the last format character [-Wformat-truncation=]`
-
- - autotools: fix `EVP_aes_128_ctr` detection with binutils `ld`
-
- The prerequisite for a successful detection is setting
- `LIBS=-lbcrypt` if the chosen openssl-compatible library requires
- it, e.g. libressl, or quictls/openssl built with
- `-DUSE_BCRYPTGENRANDOM`.
-
- With llvm `lld`, detection works out of the box. With binutils `ld`,
- it does not. The reason is `ld`s world-famous pickiness with lib
- order.
-
- To fix it, we pass all custom libs before and after the TLS libs.
- This ugly hack makes `ld` happy and detection succeed.
-
- - agent: fix Windows-specific warning:
- `src/agent.c:318:10: warning: implicit conversion loses integer precision: 'LRESULT' (aka 'long long') to 'int' [-Wshorten-64-to-32]`
-
- - src: fix llvm/clang compiler warning:
- `src/libssh2_priv.h:987:28: warning: variadic macros are a C99 feature [-Wvariadic-macros]`
-
- - src: support `inline` with `__GNUC__` (llvm/clang and gcc), fixing:
- ```
- src/libssh2_priv.h:990:8: warning: extension used [-Wlanguage-extension-token]
- static inline void
- ^
- ```
-
- - blowfish: support `inline` keyword with MSVC.
-
- Also switch to `__inline__` (from `__inline`) for `__GNUC__`:
- https://gcc.gnu.org/onlinedocs/gcc/Inline.html
- https://clang.llvm.org/docs/UsersManual.html#differences-between-various-standard-modes
-
- - example/test: fix MSVC compiler warnings:
-
- - `example\direct_tcpip.c(209): warning C4244: 'function': conversion from 'unsigned int' to 'u_short', possible loss of data`
- - `tests\session_fixture.c(96): warning C4013: 'getcwd' undefined; assuming extern returning int`
- - `tests\session_fixture.c(100): warning C4013: 'chdir' undefined; assuming extern returning int`
-
- - delete unused macros:
- - `HAVE_SOCKET`
- - `HAVE_INET_ADDR`
- - `NEED_LIB_NSL`
- - `NEED_LIB_SOCKET`
- - `HAVE_NTSTATUS_H`
- - `HAVE_NTDEF_H`
-
- - build: delete stale zlib/openssl version numbers from path defaults.
-
- - cmake: convert tabs to spaces, add newline at EOFs.
-
- Closes #811
-
-- cmake: make `test_read` runs cross-build-friendly
-
- Improve tests added in 7487dcf4b4ddae54b2a850737789b57b4251b0ae by
- running `test_read` commands directly. This makes external shell/batch
- files unnecessary, and is friendlier with cross-builds and when run
- from non-default shells, like MSYS2.
-
- Also extend CRYPT/MAC test error messages with the CRYPT/MAC name.
-
- External runner shell scripts kept for future use.
-
- Closes #814
-
-- src: enable clear memory on all platforms
-
- - convert `_libssh2_explicit_zero()` to macro. This allows inlining
- where supported (e.g. `SecureZeroMemory()`).
-
- - replace `SecureZeroMemory()` (in `wincng.c`) and
- `LIBSSH2_CLEAR_MEMORY`-guarded `memset()` (in `os400qc3.c`) with
- `_libssh2_explicit_zero()` macro.
-
- - delete `LIBSSH2_CLEAR_MEMORY` guards, which enables secure-zeroing
- universally.
-
- - add `LIBSSH2_NO_CLEAR_MEMORY` option to disable secure-zeroing.
-
- - while here, delete double/triple inclusion of `misc.h`.
- `libssh2_priv.h` included it already.
-
- Closes #810
-
-- cmake: bump minimum version to 3.1 (from 2.8.12)
-
- This allows to delete some fallback code.
-
- CMake release dates:
- - 2014-12-15: 3.1
- - 2013-10-07: 2.8.12
-
- Closes #813
-
-- snprintf: unify fallback logic
-
- Before this patch, the `snprintf()` fallback logic for envs not
- supporting this function (i.e. Visual Studio 2013 and older) varied
- depending on build tool, and used different techniques in examples,
- tests and libssh2 itself.
-
- This patch aims to apply a common logic to libssh2 and examples/tests.
-
- - libssh2: use local `snprintf()` fallback with all build tools.
-
- We already had a local implementation, but only with CMake. Move that
- to the library as `_libssh2_snprintf()`, and map `snprintf()` to it
- when `HAVE_SNPRINTF` is not set.
-
- Also change the length type from `int` to `size_t`, and fix
- formatting.
-
- - set or detect `HAVE_SNPRINTF` in non-CMake builds.
-
- Detect in autotools. Keep existing logic in `win32/libssh2_config.h`.
- Always set for OS/400, NetWare and VMS, keeping existing behaviour.
- (OS/400 builds use a different local implementation)
-
- - examples/tests: drop the CMake-specific fallback logic and map
- `snprintf()` to `_snprintf()` for old MSVC versions, like we did
- before with other build tools. This is unsafe, but should be fine for
- these uses.
-
- - `win32/libssh2_config.h`: make it easier to read.
-
- Closes #812
-
-- cmake: build fixes with OpenSSL/LibreSSL on Windows
-
- - Link `bcrypt` for newer (non-fork) OpenSSL.
-
- - Link `bcrypt` and `ws2_32` when using (non-fork) OpenSSL or LibreSSL,
- to allow `Looking for EVP_aes_128_ctr` detecting this feature.
-
- With the feature available, but not found by CMake, build failed with:
- `openssl.c:636:21: error: incompatible integer to pointer conversion assigning to 'EVP_CIPHER *' (aka 'struct evp_cipher_st *') from 'int' [-Wint-conversion]`
-
- Closes #809
-
-- build fixes and improvements (mostly for Windows)
-
- - in `hostkey.c` check the result of `libssh2_sha256_init()` and
- `libssh2_sha512_init()` calls. This avoid the warning that we're
- ignoring the return values.
-
- - fix code using `int` (or `SOCKET`) for sockets. Use libssh2's
- dedicated `libssh2_socket_t` and `LIBSSH2_INVALID_SOCKET` instead.
-
- - fix compiler warnings due to `STATUS_*` macro redefinitions between
- `ntstatus.h` / `winnt.h`. Solve it by manually defining the single
- `STATUS` value we need from `ntstatus.h` and stop including the whole
- header.
- Fixes #733
-
- - improve Windows UWP/WinRT builds by detecting it with code copied
- from the curl project. Then excluding problematic libssh2 parts
- according to PR by Dmitry Kostjučenko.
- Fixes #734
-
- - always use `SecureZeroMemory()` on Windows.
-
- We can tweak this if not found or not inlined by a C compiler which
- we otherwise support. Same if it causes issues with UWP apps.
-
- Ref: https://learn.microsoft.com/en-us/previous-versions/windows/desktop/legacy/aa366877(v=vs.85)
- Ref: https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-rtlsecurezeromemory
-
- - always enable `LIBSSH2_CLEAR_MEMORY` on Windows. CMake and
- curl-for-win builds already did that. Delete `SecureZeroMemory()`
- detection from autotools' WinCNG backend logic, that this
- setting used to depend on.
-
- TODO: Enable it for all platforms in a separate PR.
- TODO: For clearing buffers in WinCNG, call `_libssh2_explicit_zero()`,
- insead of a local function or explicit `SecureZeroMemory()`.
-
- - Makefile.inc: move `os400qc3.h` to `HEADERS`. This fixes
- compilation on non-unixy platforms. Recent regression.
-
- - `libssh2.rc`: replace copyright with plain ASCII, as in curl.
-
- Ref: curl/curl@1ca62bb
- Ref: curl/curl#7765
- Ref: curl/curl#7776
-
- - CMake fixes and improvements:
-
- - enable warnings with llvm/clang.
- - enable more comprehensive warnings with gcc and llvm/clang.
- Logic copied from curl:
- https://github.com/curl/curl/blob/233810bb5f6c5e7bedfc10bdd36607b958c0cfe4/CMakeLists.txt#L131-L148
- - fix `Policy CMP0080` CMake warning by deleting that reference.
- - add `ENABLE_WERROR` (default: `OFF`) option. Ported from curl.
- - add `PICKY_COMPILER` (default: `ON`) option, as known from curl.
-
- It controls both the newly added picky warnings for llvm/clang and
- gcc, and also the pre-existing ones for MSVC.
-
- - `win32/GNUmakefile` fixes and improvements:
-
- - delete `_AMD64_` and add missing `-m64` for x64 builds under test.
- - add support for `ARCH=custom`.
- It disables hardcoded Intel 64-bit and Intel 32-bit options,
- allowing ARM64 builds.
- - add support for `LIBSSH2_RCFLAG_EXTRAS`.
- To pass custom options to windres, e.g. in ARM64 builds.
- - add support for `LIBSSH2_RC`. To override `windres`.
- - delete support for Metrowerks C. Last released in 2004.
-
- - `win32/libssh2_config.h`: delete unnecessary socket #includes
-
- `src/libssh2_priv.h` includes `winsock2.h` and `ws2tcpip.h` further
- down the line, triggered by `HAVE_WINSOCK2_H`.
-
- `mswsock.h` does not seem to be necessary anymore.
-
- Double-including these (before `windows.h`) caused compiler failures
- when building against BoringSSL and warnings with LibreSSL. We could
- work this around by passing `-DNOCRYPT`. Deleting the duplicates
- fixes these issues.
-
- Timeline:
- 2013: c910cd382dfa07fed2adaabf688af9e4a084fa1d deleted `mswsock.h` from `src/libssh2_priv.h`
- 2008: 8c43bc52b1e3de2c8fc7899a80aec0e98de4e2d8 added `winsock2.h` and `ws2tcpip.h` to `src/libssh2_priv.h`
- 2005: dc4bb1af967d2c53e90349f2f37324c622e714f5 added the now deleted #includes
-
- - delete or replace `LIBSSH2_WIN32` with `WIN32`.
-
- - replace hand-rolled `HAVE_WINDOWS_H` macro with `WIN32`. Also delete
- its detections/definitions.
-
- - delete unused `LIBSSH2_DARWIN` macro.
-
- - delete unused `writev()` Windows implementation
-
- There is no reference to `writev()` since 2007-02-02, commit
- 9d55db6501aa4e21f0858cf36cdc2ddc11b96e83.
-
- - fix a bunch of MSVC / llvm/clang / gcc compiler warnings:
-
- - `warning C4100: '...': unreferenced formal parameter`
- - using value of undefined PP macro `LIBSSH2DEBUG`
- - missing void from function definition
- - `if()` block missing in non-debug builds
- - unreferenced variable in non-debug builds
- - `warning: must specify at least one argument for '...' parameter of variadic macro [-Wgnu-zero-variadic-macro-arguments]`
- in `_libssh2_debug()`
- - `warning C4295: 'ciphertext' : array is too small to include a terminating null character`
- - `warning C4706: assignment within conditional expression`
- - `warning C4996: 'inet_addr': Use inet_pton() or InetPton() instead or
- define _WINSOCK_DEPRECATED_NO_WARNINGS to disable deprecated API warnings`
- By suppressning it. Would be best to use inet_pton() as suggested.
- On Windows this needs Vista though.
- - `warning C4152: nonstandard extension, function/data pointer conversion in expression`
- (silenced locally)
- - `warning C4068: unknown pragma`
-
- Ref: https://ci.appveyor.com/project/libssh2org/libssh2/builds/46354480/job/j7d0m34qgq8rag5w
-
- Closes #808
-
-Dan Fandrich (1 Mar 2023)
-- Add tests to check individual crypt & HMAC methods
-
- One specific crypt or hmac method is requested to be negotiated, then
- several MB of data is transferred.
-
-- Add test to read lots of data over a channel
-
- Connects to the ssh server then downloads several MB of data. This
- tests the data transfer path as well as boundary cases in packet
- handling as data is split into smaller SSH blocks.
-
-GitHub (27 Feb 2023)
-- [Will Cosgrove brought this change]
-
- Disable deprecated warnings for OpenSSL 3 #805 (#806)
-
- Disable deprecated warnings (for now) when building against OpenSSL 3 for a clean build.
-
- Reported:
- Daniel Stenberg
-
-Dan Fandrich (24 Feb 2023)
-- Fix a couple of warnings of errors in MSVC builds
-
- Two warnings (in tests & examples) in particular would cause problems:
- bad format causing invalid data output or a bad chdir due to out of
- scope buffer use.
-
-- tests: Support running tests in out-of-tree builds
-
- Various files are found by referencing the srcdir environment variable
- in that case.
-
- Closes #801
-
-- Improve the ssh2 example program to run a command
-
- This performs better as an example since it shows more working code, and
- in the simplest possible way. It also turns the program into an actually
- useful tool out of the box, able to run an arbitrary command (with one
- restriction) on a remote machine and return the response, without
- needing to touch the source.
-
- Closes #800
-
-GitHub (14 Feb 2023)
-- [Will Cosgrove brought this change]
-
- Add NULL session check to _libssh2_error_flags() (#796)
-
- Don't dereference null if a null session happens to make it into _libssh2_error_flags()
-
-Dan Fandrich (7 Feb 2023)
-- Reorder AES crypt methods so stronger ones are first
-
- This make it more likely that a stronger one will be negotiated rather
- than a weaker variant.
-
-- CI: update uses: dependencies to the latest versions
-
- We were seeing some deprecation warning messages on some of the older
- ones.
-
-- transport.c: Add some comments
-
-- Add missing files to automake makefiles & build tests
-
- Many files have been added to the cmake build files but not the automake
- ones in recent years. Missing ones have been added so automake "make
- dist" will now create a usable tar ball.
-
- The integration tests using Docker are now built with automake as well
- (with "make check"). They are not run yet since they aren't working yet
- on Linux.
-
-- tests: Fix gcc compile warnings
-
- These were mostly due to missing and non-ANSI prototypes.
-
-- Enable trace debugging in example/ssh2
-
- This is intended to be a test program, so debugging is likely to be
- useful by default.
-
-- Improve example/ssh2 to allow unmodified use of public key auth
-
- The previous hard-coded key file paths were not valid for normal users.
- Make the paths relative to the user's home directory instead so they
- can work out of the box. Add a banner showing what connection will be
- attempted to make it easier for the user to see what is being attempted.
- Enable trace debugging since this is designed as a test program.
-
-GitHub (13 Dec 2022)
-- [Viktor Szakats brought this change]
-
- openssl.h: enable ed25519 for LibreSSL 3.7.0 (#778)
-
- This brings LibreSSL libssh2 builds on par with OpenSSL.
-
-Dan Fandrich (5 Dec 2022)
-- configure.ac: check for sys/param.h
-
- This file is required by glibc for the test suite.
-
-GitHub (12 Nov 2022)
-- [Viktor Szakats brought this change]
-
- tests: add option to run tests without docker (#762)
-
- via `export OPENSSH_NO_DOCKER=1`.
-
- SSH server host can be set via:
- `export OPENSSH_SERVER_HOST=127.0.0.1`
-
- SSH server port via existing:
- `export OPENSSH_SERVER_PORT=4711`
-
- This requires more work to be usable out of the box. The necessery sshd
- config is (partly) embedded into `tests/openssh_server/Dockerfile`.
-
- After this patch, it is possible to run tests in envs where docker is
- not installed or not available, by running a preconfigured,
- non-containerized sshd.
-
-- [Michael Buckley brought this change]
-
- Skip leading \r and \n characters in banner_receive() (#769)
-
- Fixes #768
-
- Credit:
- Michael Buckley
-
-- [Zenju brought this change]
-
- Fixed error handling of _libssh2_packet_requirev callers (#767)
-
- Notes:
-
- some callers of _libssh2_packet_requirev() fail to set _libssh2_error().
- This creates the situation where e.g. libssh2_session_handshake() fails, but libssh2_session_last_error() confusingly returns LIBSSH2_ERROR_NONE.
-
- Credit:
- Zenju
-
-- [Will Cosgrove brought this change]
-
- Revert usage of EVP_CipherUpdate #764 #739 (#765)
-
- Revert usage of EVP_CipherUpdate from wolfSSL PR to fix #764 #739.
-
-- [Will Cosgrove brought this change]
-
- Fix regression with rsa_sha2_verify #758 (#763)
-
- Fixes comparison with the result value coming from `mbedtls_rsa_pkcs1_verify`. Success is 0, not 1.
-
-Marc Hoersken (24 Oct 2022)
-- CI: fix AppVeyor status failing for starting jobs
-
-Viktor Szakats (24 Oct 2022)
-- delete cast5 - null-cipher mapping
-
-- more feature guard cleanup
-
-- indent
-
-- formatting
-
-- fold long lines
-
-- cleanup
-
-- temporarily silence checksrc
-
-- add mbedTLS 3.x support
-
- Make libssh2 compile cleanly with mbedTLS 3.x and later.
-
- This patch makes use of `MBEDTLS_PRIVATE()`, which is not the
- recommended, future-proof way to access mbedTLS data structures. This
- method may break with a minor upgrade, according to the authors. This
- is also the method used by libcurl.
-
- Also:
-
- - Fix a potentially uninitialized variable in
- `libssh2_mbedtls_rsa_sha2_sign()`. This happened in an error path,
- resulting in an unnecessary mbedTLS API call, with an uninitialized
- `md_type`.
-
- - Bump mbedTLS version used in CI tests to 3.2.1.
-
- Fixes #751
-
-- tests: add option to enable all trace messages in fixture
-
- via `export FIXTURE_TRACE_ALL=1`.
-
-- win32/GNUmakefile: add mbedTLS support
-
- via `export MBEDTLS_PATH=`.
-
-Marc Hoersken (21 Oct 2022)
-- CI: fix AppVeyor job links only working for most recent build
-
- Ref: https://github.com/curl/curl/pull/9768#issuecomment-1286675916
- Reported-by: Daniel Stenberg
-
- Follow up to #754
-
-- CI: add missing permission section to AppVeyor status workflow
-
- Follow up to #754
-
-- Remove OSSFuzz integration which was replaced with CIFuzz (#756)
-
- Confirmed-by: Max Dymond
-
-- Rename workflow file appveyor.yml to appveyor_docker.yml
-
-- Streamline names of CI workflow jobs
-
-- [Jeroen Ooms brought this change]
-
- Add CI for mingw-w64 via msys2 (#742)
-
- Credit: Jeroen Ooms
-
-- CI: report AppVeyor build status for each job (#754)
-
- Also give each job on AppVeyor CI a human-readable name.
-
- This aims to make job and therefore build failures more visible.
-
-GitHub (29 Sep 2022)
-- [Michael Buckley brought this change]
-
- Support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys, FIDO (#698)
-
- Notes:
- Add support for sk-ecdsa-sha2-nistp256@openssh.com and sk-ssh-ed25519@openssh.com key exchange for FIDO auth using the OpenSSL backend. Stub API for other backends.
-
- Credit:
- Michael Buckley
-
-- [Y. Yang brought this change]
-
- Fix DLL import library name (#711)
-
- Notes:
- Fix DLL import library name
-
- https://aur.archlinux.org/packages/mingw-w64-libssh2
- https://cmake.org/cmake/help/latest/prop_tgt/IMPORT_PREFIX.html
-
- Credit:
- metab0t
- Y. Yang
-
-- [skundu07 brought this change]
-
- Add RSA-SHA2 support for the WinCNG backend (#736)
-
- Notes:
- Added code to support RSA-SHA2 for WinCNG backend.
-
- Credit:
- skundu07
-
-- [Gabriel Smith brought this change]
-
- sftp: Prevent files from being skipped if the output buffer is too small (#746)
-
- Notes:
- LIBSSH2_ERROR_BUFFER_TOO_SMALL is returned if the buffer is too small
- to contain a returned directory entry. On this condition we jump to the
- label `end`. At this point the number of names left is decremented
- despite no name being returned.
-
- As suggested in #714, this commit moves the error label after the
- decrement of `names_left`.
-
- Fixes #714
-
- Credit:
- Co-authored-by: Gabriel Smith
-
-- [bgermann brought this change]
-
- Drop advertisement clause on Blowfish (#747)
-
- Originally driven by https://github.com/pyca/bcrypt/issues/169, OpenBSD
- removed Niels Provos's BSD advertisement clause in version 7.1:
-
- https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/lib/libsa/blowfish.c.diff?r1=1.1&r2=1.2
- https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/lib/libsa/blowfish.h.diff?r1=1.1&r2=1.2
-
- This enables using libssh2 in GPL software.
-
-- [zhaochongliu brought this change]
-
- Support building with gcc < version 8
-
- Files: CMakeLists.txt
-
- Notes: don't use gcc arguments that don't exist in gcc versions lower than 8 if building with older gcc.
-
- Credit:
- zhaochongliu
-
-- [Miguel de Icaza brought this change]
-
- Document the obscure LIBSSH2_ERROR_BAD_USE when writing to a channel (#713)
-
- Document the obscure LIBSSH2_ERROR_BAD_USE when writing to a channel
-
- Credit:
- Miguel de Icaza
-
-- [Michael Buckley brought this change]
-
- Don't erroneously log SSH_MSG_REQUEST_FAILURE packets from keepalive (#727)
-
- Notes:
- When setting a ServerAliveInterval using libssh2_keepalive_config() with want_reply set to true, some servers will reply to the keep-alive requests with a single SSH_MSG_REQUEST_FAILURE packet. This is an allowed behavior in RFC 4254, section 4.
-
- Credit:
- Michael Buckley
-
-- [Ryan Kelley brought this change]
-
- Updating docs for libssh2_channel_flush_ex (#728)
-
- Notes:
- In #614 it was identified the docs do not accurately show how libssh2_channel_flush_ex() return value is set. I have updated the doc's to correctly show what the function is returning.
-
- Credit:
- Ryan Kelley
-
-- [Sandeep Bansal brought this change]
-
- Support RSA certificate authentication (#710)
-
- * Adding support for signed RSA keys and unit test
-
- Credit:
- Sandeep Bansal
-
-Viktor Szakats (2 Jul 2022)
-- configure: add --disable-tests option
-
-- cmake: do not add libssh2.rc to the static library
-
-GitHub (23 May 2022)
-- [AyushiN brought this change]
-
- Fixed typo #697 (#701)
-
- Credit:
- AyushiN
-
-- [Viktor Szakats brought this change]
-
- Openssl: add support for LibreSSL 3.5.x (#700)
-
- LibreSSL 3.5.0 made more structures opaque, so let's enable existing
- support for that when building against these LibreSSL versions.
-
- Ref: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.5.0-relnotes.txt
-
- Credit:
- Viktor Szakats
-
-- [Michael Buckley brought this change]
-
- Ensure KEX replies don't include extra bytes (#696)
-
- Addresses #695
-
- Credit:
- Michael Buckley, reported by Harry Sintonen
-
-- [Zenju brought this change]
-
- Fix buffer overflow during SSH_MSG_USERAUTH_BANNER (#693)
-
- File: userauth.c
- Notes:
- This patch fixes application crashes due to heap corruption. Turns out the null terminator is written one byte outside of the allocated area.
- Credit:
- Zenju
-
-- [Will Cosgrove brought this change]
-
- Changed NULL check to avoid logic change
-
-- [Will Cosgrove brought this change]
-
- NULL check before calling session_handshake
-
-- [Harry Sintonen brought this change]
-
- Fix build since openssl 1.1.0 when ECDSA and/or RIPEMD are disabled (#666)
-
- File: openssl.h
-
- Notes:
- In openssl 1.1.0 and later openssl decided to change some of the defines used to check if certain features are not compiled in the libraries. This updates the define checks.
-
- Credit:
- Harry Sintonen
- Co-authored-by: Harry Sintonen
-
-- [gbaraldi brought this change]
-
- Add RSA-SHA2 support for the mbedtls backend (#688)
-
- File: mbedtls.c
-
- Notes:
- * Add sha2 support for RSA key upgrading to mbedTLS backend
-
- Credit:
- gbaraldi
-
-Daniel Stenberg (21 Mar 2022)
-- misc/libssh2_copy_string: avoid malloc zero bytes
-
- Avoids the inconsistent malloc return code for malloc(0)
-
- Closes #686
-
-Marc Hoersken (17 Mar 2022)
-- wincng: rename struct field referring to the DH private big number
-
- Closes #684
-
-- tests/openssh_fixture.c: print command after variable expansion
-
-- CI: store and reuse OpenSSH Server docker image used for tests
-
- Supersedes #588
- Fixes #665
- Closes #685
-
-GitHub (26 Feb 2022)
-- [Will Cosgrove brought this change]
-
- Added LibreSSL to crypto backend list
-
-- [Will Cosgrove brought this change]
-
- Added crypto backend list to template
-
- Added OS version as well
-
-- [Will Cosgrove brought this change]
-
- Revert "Option to build both static and shared libraries (#547)" (#675)
-
- This reverts commit b60dca8b6450a9729670986d2899cca54ccdbb6d.
-
- #547 doesn't build clean anymore with the keyboard interactive changes.
-
-- [berney brought this change]
-
- Option to build both static and shared libraries (#547)
-
- files: cmakelists.txt
-
- Notes:
- * Option to build both static and shared libraries when using CMake
-
- Credit:
- berney
-
-- [xalopp brought this change]
-
- Use modern API in userauth_keyboard_interactive() (#663)
-
- Files: userauth_kbd_packet.c, userauth_kbd_packet.h, test_keyboard_interactive_auth_info_request.c, userauth.c
-
- Notes:
- This refactors `SSH_MSG_USERAUTH_INFO_REQUEST` processing in `userauth_keyboard_interactive()` in order to improve robustness, correctness and readability or the code.
-
- * Refactor userauth_keyboard_interactive to use new api for packet parsing
- * add unit test for userauth_keyboard_interactive_parse_response()
- * add _libssh2_get_boolean() and _libssh2_get_byte() utility functions
-
- Credit:
- xalopp
-
-- [xalopp brought this change]
-
- Fix formatting in manual page (#667)
-
- Fixed formatting of `LIBSSH2_ERROR_AUTHENTICATION_FAILED` in the errors section.
-
- credit: xalopp
-
-- [tihmstar brought this change]
-
- NULL terminate server_sign_algorithms string (#669)
-
- files: packet.c, libssh2_priv.h
-
- notes:
- * Fix heap buffer overflow in _libssh2_key_sign_algorithm
-
- When allocating `session->server_sign_algorithms` which is a `char*` is is important to also allocate space for the string-terminating null byte at the end and make sure the string is actually null terminated.
-
- Without this fix, the `strchr()` call inside the `_libssh2_key_sign_algorithm` (line 1219) function will try to parse the string and go out of buffer on the last invocation.
-
- Credit: tihmstar
- Co-authored-by: Will Cosgrove
-
-- [Will Cosgrove brought this change]
-
- free RSA2 related memory (#664)
-
- Free `server_sign_algorithms` and `sign_algo_prefs`.
-
-- [Will Cosgrove brought this change]
-
- Legacy Agent support for rsa2 key upgrading/downgrading #659 (#662)
-
- Files: libssh2.h, agent.c, userauth.c
-
- Notes:
- Part 2 of the fix for #659. This adds rsa key downgrading for agents that don't support sha2 upgrading. It also adds better trace output for debugging/logging around key upgrading.
-
- Credit:
- Will Cosgrove (signed off by Michael Buckley)
-
-- [Ian Hattendorf brought this change]
-
- Support rsa-sha2 agent flags (#661)
-
- File: agent.c
- Notes: implements rsa-sha2 flags used to tell the agent which signing algo to use.
- https://tools.ietf.org/id/draft-miller-ssh-agent-01.html#rfc.section.4.5.1
-
- Credit:
- Ian Hattendorf
-
-Daniel Stenberg (13 Jan 2022)
-- [Sunil Nimmagadda brought this change]
-
- ssh: Add support for userauth banner.
-
- The new libssh2_userauth_banner API allows to get an optional
- userauth banner sent with SSH_MSG_USERAUTH_BANNER packet by the
- server.
-
- Closes #610
-
-GitHub (6 Jan 2022)
-- [Michael Buckley brought this change]
-
- Fix a memcmp errors in code that was changed from memmem to memcmp (#656)
-
- Notes:
- Fixed supported algo prefs list check when upgrading rsa keys
-
- Credit: Michael Buckley
-
-- [Hayden Roche brought this change]
-
- Add support for a wolfSSL crypto backend. (#629)
-
- It uses wolfSSL's OpenSSL compatibility layer, so rather than introduce new
- wolfssl.h/c files, the new backend just reuses openssl.h/c. Additionally,
- replace EVP_Cipher() calls with EVP_CipherUpdate(), since EVP_Cipher() is not
- recommended.
-
- Credit: Hayden Roche
-
-- [Bastien Durel brought this change]
-
- Runtime engine detection with libssh2_crypto_engine() (#643)
-
- File:
- version.c, HACKING-CRYPTO, libssh2.h, libssh2_crypto_engine.3, makefile.
-
- Notes:
- libssh2_crypto_engine() API to get crypto engine at runtime.
-
- Credit: Bastien Durel
-
-- [Will Cosgrove brought this change]
-
- RSA SHA2 256/512 key upgrade support RFC 8332 #536 (#626)
-
- Notes:
- * Host Key RSA 256/512 support #536
- * Client side key hash upgrading for RFC 8332
- * Support for server-sig-algs, ext-info-c server messages
- * Customizing preferred server-sig-algs via the preference LIBSSH2_METHOD_SIGN_ALGO
-
- Credit: Anders Borum, Will Cosgrove
-
-- [xalopp brought this change]
-
- fix: use userauth name length to check memory boundaries for userauth name, fixes #653 (#654)
-
- File: userauth.c
-
- Notes:
- Fixes `userauth_kybd_auth_name_len` length check
-
- Co-authored-by: Xaver Lopenstedt
-
-- [Daniel Stenberg brought this change]
-
- agent: handle overly large comment lengths (#651)
-
- Reported-by: Harry Sintonen
-
-- [Daniel Stenberg brought this change]
-
- userauth: check for too large userauth_kybd_auth_name_len (#650)
-
- ... before using it.
-
- Reported-by: MarcoPoloPie
- Fixes #649
-
-Daniel Stenberg (17 Dec 2021)
-- .github/SECURITY.md: fix the URL
-
-- .github/SECURITY.md: add security policy
-
-GitHub (30 Nov 2021)
-- [Will Cosgrove brought this change]
-
- hostkey_method_ssh_ed25519_init() check key bounds (#645)
-
- * hostkey_method_ssh_ed25519_init() check key bounds
-
- File: hostkey.c
-
- Notes:
- Additional key length checking before calling _libssh2_ed25519_new_public()
-
- Credit:
- Will Cosgrove
-
-- [Will Cosgrove brought this change]
-
- Fix error message in memory_read_privatekey #636
-
- file: userauth.c
- note: fix error message
- credit:
- volund
-
-- [cntrump brought this change]
-
- Update maketgz for macOS (#543)
-
- File:
- maketgz
-
- Notes:
- Fix error on macOS: sed: -e: No such file or directory
-
- Credit:
- cntrump
-
-- [Jun Tseng brought this change]
-
- CMake update minimum version to 2.8.12 (#639)
-
- File:
- CMakeLists.txt
-
- Notes:
- Following CMake's advice, Update the minimum required version.
-
- Credit:
- Jun Tseng
-
-Daniel Stenberg (8 Nov 2021)
-- [David Korczynski brought this change]
-
- ci: Add CIFuzz integration
-
- Notes:
- Add CIFuzz integration to run fuzzer using the OSS-Fuzz infrastructure
- at each PR.
-
- Signed-off-by: David Korczynski
- Closes #635
-
-GitHub (26 Oct 2021)
-- [Uwe L. Korn brought this change]
-
- Use libssh2_EXPORTS as an alternative to _WINDLL (#470)
-
- Files: libssh2.h
-
- Notes:
- `_WINDLL` is only defined when a Visual Studio CMake generator is used, `libssh2_EXPORTS` is used though for all CMake generator if a shared libssh2 library is being built.
-
- Credit:
- Uwe L. Korn
-
-Viktor Szakats (1 Oct 2021)
-- windows: fix clang and WinCNG warnings
-
- Fix these categories of warning:
-
- - in `wincng.c` disagreement in signed/unsigned char when passing around
- the passphrase string:
- `warning: pointer targets in passing argument [...] differ in signedness [-Wpointer-sign]`
- Fixed by using `const unsigned char *` in all static functions and
- applying/updating casts as necessary.
-
- - in each use of `libssh2_*_init()` macros where the result is not used:
- `warning: value computed is not used [-Wunused-value]`
- Fixed by using `(void)` casts.
-
- - `channel.c:1171:7: warning: 'rc' may be used uninitialized in this function [-Wmaybe-uninitialized]`
- Fixed by initializing this variable with `LIBSSH2_ERROR_CHANNEL_UNKNOWN`.
- While there I replaced a few 0 literals with `LIBSSH2_ERROR_NONE`.
-
- - in `sftp.c`, several of these two warnings:
- `warning: 'data' may be used uninitialized in this function [-Wmaybe-uninitialized]`
- `warning: 'data_len' may be used uninitialized in this function [-Wmaybe-uninitialized]`
- Fixed by initializing these variables with NULL and 0 respectively.
-
- - Also removed the exec attribute from `wincng.h`.
-
- Notes:
- - There are many pre-existing checksrc issues.
- - The `sftp.c` and `channel.c` warnings may apply to other platforms as well.
-
- Closes #628
-
-Daniel Stenberg (25 Sep 2021)
-- README: use www.libssh2.org for the license link
-
-- libssh2.h: bump it to 1.10.1-dev
-
-- mailing list: moved to lists.haxx.se
-
-GitHub (2 Sep 2021)
-- [Laurent Stacul brought this change]
-
- openssh_fixture.c: Fix openssh_server build not working (#616) (#620)
-
- File: openssh_fixture.c
-
- Notes:
- fixes too long of output lines building docker image
-
- Credit:
- Laurent Stacul
-
-- [Will Cosgrove brought this change]
-
- openssh_fixture.c: fix warning (#621)
-
- File: openssh_fixture.c
-
- Notes:
- Fix `portable_sleep` return type warning
-
- Credit:
- Will Cosgrove
-
-- [Will Cosgrove brought this change]
-
- Update CI to use latest Ubuntu #624 (#625)
-
- File: ci.yml
-
- Notes:
- Update CI to use latest Ubuntu #624
-
- Also removed 32 bit building in the matrix.
-
- Credit:
- Will Cosgrove
-
-- [Will Cosgrove brought this change]
-
- Update .gitignore
-
- Add .DS_Store files for macOS
-
-- [Laurent Stacul brought this change]
-
- Makefile.am: Add missing key in case openssl > 1.1.0 (#617)
-
- File: Makefile.am
-
- Notes: fix missing test keys
-
- Credit:
- Laurent Stacul
-
-Version 1.10.0 (29 Aug 2021)
-
-Daniel Stenberg (29 Aug 2021)
-- [Will Cosgrove brought this change]
-
- updated docs for 1.10.0 release
-
-Marc Hörsken (30 May 2021)
-- [Laurent Stacul brought this change]
-
- [tests] Try several times to connect the ssh server
-
- Sometimes, as the OCI container is run in detached mode, it is possible
- the actual server is not ready yet to handle SSH traffic. The goal of
- this PR is to try several times (max 3). The mechanism is the same as
- for the connection to the docker machine.
-
-- [Laurent Stacul brought this change]
-
- Remove openssh_server container on test exit
-
-- [Laurent Stacul brought this change]
-
- Allow the tests to run inside a container
-
- The current tests suite starts SSH server as OCI container. This commit
- add the possibility to run the tests in a container provided that:
-
- * the docker client is installed builder container
- * the host docker daemon unix socket has been mounted in the builder
- container (with, if needed, the DOCKER_HOST environment variable
- accordingly set, and the permission to write on this socket)
- * the builder container is run on the default bridge network, or the
- host network. This PR does not handle the case where the builder
- container is on another network.
-
-Marc Hoersken (28 May 2021)
-- CI/appveyor: run SSH server for tests on GitHub Actions (#607)
-
- No longer rely on DigitalOcean to host the Docker container.
-
- Unfortunately we require a small dispatcher script that has
- access to a GitHub access token with scope repo in order to
- trigger the daemon workflow on GitHub Actions also for PRs.
-
- This script is hosted by myself for the time being until GitHub
- provides a tighter scope to trigger the workflow_dispatch event.
-
-GitHub (26 May 2021)
-- [Will Cosgrove brought this change]
-
- openssl.c: guards around calling FIPS_mode() #596 (#603)
-
- Notes:
- FIPS_mode() is not implemented in LibreSSL and this API is removed in OpenSSL 3.0 and was introduced in 0.9.7. Added guards around making this call.
-
- Credit:
- Will Cosgrove
-
-- [Will Cosgrove brought this change]
-
- configure.ac: don't undefine scoped variable (#594)
-
- * configure.ac: don't undefine scoped variable
-
- To get this script to run with Autoconf 2.71 on macOS I had to remove the undefine of the backend for loop variable. It seems scoped to the for loop and also isn't referenced later in the script so it seems OK to remove it.
-
- * configure.ac: remove cygwin specific CFLAGS #598
-
- Notes:
- Remove cygwin specific Win32 CFLAGS and treat the build like a posix build
-
- Credit:
- Will Cosgrove, Brian Inglis
-
-- [Laurent Stacul brought this change]
-
- tests: Makefile.am: Add missing tests client keys in distribution tarball (#604)
-
- Notes:
- Added missing test keys.
-
- Credit:
- Laurent Stacul
-
-- [Laurent Stacul brought this change]
-
- Makefile.am: Add missing test keys in the distribution tarball (#601)
-
- Notes:
- Fix tests missing key to build the OCI image
-
- Credit:
- Laurent Stacul
-
-Daniel Stenberg (16 May 2021)
-- dist: add src/agent.h
-
- Fixes #597
- Closes #599
-
-GitHub (12 May 2021)
-- [Will Cosgrove brought this change]
-
- packet.c: Reset read timeout after received a packet (#576) (#586)
-
- File:
- packet.c
-
- Notes:
- Attempt keyboard interactive login (Azure AD 2FA login) and use more than 60 seconds to complete the login, the connection fails.
-
- The _libssh2_packet_require function does almost the same as _libssh2_packet_requirev but this function sets state->start = 0 before returning.
-
- Credit:
- teottin, Co-authored-by: Tor Erik Ottinsen
-
-- [kkoenig brought this change]
-
- Support ECDSA certificate authentication (#570)
-
- Files: hostkey.c, userauth.c, test_public_key_auth_succeeds_with_correct_ecdsa_key.c
-
- Notes:
- Support ECDSA certificate authentication
-
- Add a test for:
- - Existing ecdsa basic public key authentication
- - ecdsa public key authentication with a signed public key
-
- Credit:
- kkoenig
-
-- [Gabriel Smith brought this change]
-
- agent.c: Add support for Windows OpenSSH agent (#517)
-
- Files: agent.c, agent.h, agent_win.c
-
- Notes:
- * agent: Add support for Windows OpenSSH agent
-
- The implementation was partially taken and modified from that found in
- the Portable OpenSSH port to Win32 by the PowerShell team, but mostly
- based on the existing Unix OpenSSH agent support.
-
- https://github.com/PowerShell/openssh-portable
-
- Regarding the partial transfer support implementation: partial transfers
- are easy to deal with, but you need to track additional state when
- non-blocking IO enters the picture. A tracker of how many bytes have
- been transfered has been placed in the transfer context struct as that's
- where it makes most sense. This tracker isn't placed behind a WIN32
- #ifdef as it will probably be useful for other agent implementations.
-
- * agent: win32 openssh: Disable overlapped IO
-
- Non-blocking IO is not currently supported by the surrounding agent
- code, despite a lot of the code having everything set up to handle it.
-
- Credit:
- Co-authored-by: Gabriel Smith
-
-- [Zenju brought this change]
-
- Fix detailed _libssh2_error being overwritten (#473)
-
- Files: openssl.c, pem.c, userauth.c
-
- Notes:
- * Fix detailed _libssh2_error being overwritten by generic errors
- * Unified error handling
-
- Credit:
- Zenju
-
-- [Paul Capron brought this change]
-
- Fix _libssh2_random() silently discarding errors (#520)
-
- Notes:
- * Make _libssh2_random return code consistent
-
- Previously, _libssh2_random was advertized in HACKING.CRYPTO as
- returning `void` (and was implemented that way in os400qc3.c), but that
- was in other crypto backends a lie; _libssh2_random is (a macro
- expanding) to an int-value expression or function.
-
- Moreover, that returned code was:
- — 0 or success, -1 on error for the MbedTLS & WinCNG crypto backends
- But also:
- — 1 on success, -1 or 0 on error for the OpenSSL backend!
- – 1 on success, error cannot happen for libgcrypt!
-
- This commit makes explicit that _libssh2_random can fail (because most of
- the underlying crypto functions can indeed fail!), and it makes its result
- code consistent: 0 on success, -1 on error.
-
- This is related to issue #519 https://github.com/libssh2/libssh2/issues/519
- It fixes the first half of it.
-
- * Don't silent errors of _libssh2_random
-
- Make sure to check the returned code of _libssh2_random(), and
- propagates any failure.
-
- A new LIBSSH_ERROR_RANDGEN constant is added to libssh2.h
- None of the existing error constants seemed fit.
-
- This commit is related to d74285b68450c0e9ea6d5f8070450837fb1e74a7
- and to https://github.com/libssh2/libssh2/issues/519 (see the issue
- for more info.) It closes #519.
-
- Credit:
- Paul Capron
-
-- [Gabriel Smith brought this change]
-
- ci: Remove caching of docker image layers (#589)
-
- Notes:
- continued ci reliability work.
-
- Credit:
- Gabriel Smith
-
-- [Gabriel Smith brought this change]
-
- ci: Speed up docker builds for tests (#587)
-
- Notes:
- The OpenSSH server docker image used for tests is pre-built to prevent
- wasting time building it during a test, and unneeded rebuilds are
- prevented by caching the image layers.
-
- Credit:
- Gabriel Smith
-
-- [Will Cosgrove brought this change]
-
- userauth.c: don't error if using keys without RSA (#555)
-
- file: userauth.c
-
- notes: libssh2 now supports many other key types besides RSA, if the library is built without RSA support and a user attempts RSA auth it shouldn't be an automatic error
-
- credit:
- Will Cosgrove
-
-- [Marc brought this change]
-
- openssl.c: Avoid OpenSSL latent error in FIPS mode (#528)
-
- File:
- openssl.c
-
- Notes:
- Avoid initing MD5 digest, which is not permitted in OpenSSL FIPS certified cryptography mode.
-
- Credit:
- Marc
-
-- [Laurent Stacul brought this change]
-
- openssl.c: Fix EVP_Cipher interface change in openssl 3 #463
-
- File:
- openssl.c
-
- Notes:
- Fixes building with OpenSSL 3, #463.
-
- The change is described there:
- https://github.com/openssl/openssl/commit/f7397f0d58ce7ddf4c5366cd1846f16b341fbe43
-
- Credit:
- Laurent Stacul, reported by Sergei
-
-- [Gabriel Smith brought this change]
-
- openssh_fixture.c: Fix potential overwrite of buffer when reading stdout of command (#580)
-
- File:
- openssh_fixture.c
- Notes:
- If reading the full output from the executed command took multiple
- passes (such as when reading multiple lines) the old code would read
- into the buffer starting at the some position (the start) every time.
- The old code only works if fgets updated p or had an offset parameter,
- both of which are not true.
-
- Credit:
- Gabriel Smith
-
-- [Gabriel Smith brought this change]
-
- ci: explicitly state the default branch (#585)
-
- Notes:
- It looks like the $default-branch macro only works in templates, not
- workflows. This is not explicitly stated anywhere except the linked PR
- comment.
-
- https://github.com/actions/starter-workflows/pull/590#issuecomment-672360634
-
- credit:
- Gabriel Smith
-
-- [Gabriel Smith brought this change]
-
- ci: Swap from Travis to Github Actions (#581)
-
- Files: ci files
-
- Notes:
- Move Linux CI using Github Actions
-
- Credit:
- Gabriel Smith, Marc Hörsken
-
-- [Mary brought this change]
-
- libssh2_priv.h: add iovec on 3ds (#575)
-
- file: libssh2_priv.h
- note: include iovec for 3DS
- credit: Mary Mstrodl
-
-- [Laurent Stacul brought this change]
-
- Tests: Fix unused variables warning (#561)
-
- file: test_public_key_auth_succeeds_with_correct_ed25519_key_from_mem.c
-
- notes: fixed unused vars
-
- credit:
- Laurent Stacul
-
-- [Viktor Szakats brought this change]
-
- bcrypt_pbkdf.c: fix clang10 false positive warning (#563)
-
- File: bcrypt_pbkdf.c
-
- Notes:
- blf_enc() takes a number of 64-bit blocks to encrypt, but using
- sizeof(uint64_t) in the calculation triggers a warning with
- clang 10 because the actual data type is uint32_t. Pass
- BCRYPT_BLOCKS / 2 for the number of blocks like libc bcrypt(3)
- does.
-
- Ref: https://github.com/openbsd/src/commit/04a2240bd8f465bcae6b595d912af3e2965856de
-
- Fixes #562
-
- Credit:
- Viktor Szakats
-
-- [Will Cosgrove brought this change]
-
- transport.c: release payload on error (#554)
-
- file: transport.c
- notes: If the payload is invalid and there is an early return, we could leak the payload
- credit:
- Will Cosgrove
-
-- [Will Cosgrove brought this change]
-
- ssh2_client_fuzzer.cc: fixed building
-
- The GitHub web editor did some funky things
-
-- [Will Cosgrove brought this change]
-
- ssh_client_fuzzer.cc: set blocking mode on (#553)
-
- file: ssh_client_fuzzer.cc
-
- notes: the session needs blocking mode turned on to avoid EAGAIN being returned from libssh2_session_handshake()
-
- credit:
- Will Cosgrove, reviewed by Michael Buckley
-
-- [Etienne Samson brought this change]
-
- Add a LINT option to CMake (#372)
-
- * ci: make style-checking available locally
-
- * cmake: add a linting target
-
- * tests: check test suite syntax with checksrc.pl
-
-- [Will Cosgrove brought this change]
-
- kex.c: kex_agree_instr() improve string reading (#552)
-
- * kex.c: kex_agree_instr() improve string reading
-
- file: kex.c
- notes: if haystack isn't null terminated we should use memchr() not strchar(). We should also make sure we don't walk off the end of the buffer.
- credit:
- Will Cosgrove, reviewed by Michael Buckley
-
-- [Will Cosgrove brought this change]
-
- kex.c: use string_buf in ecdh_sha2_nistp (#551)
-
- * kex.c: use string_buf in ecdh_sha2_nistp
-
- file: kex.c
-
- notes:
- use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
-
-- [Will Cosgrove brought this change]
-
- kex.c: move EC macro outside of if check #549 (#550)
-
- File: kex.c
-
- Notes:
- Moved the macro LIBSSH2_KEX_METHOD_EC_SHA_HASH_CREATE_VERIFY outside of the LIBSSH2_ECDSA since it's also now used by the ED25519 code.
-
- Sha 256, 384 and 512 need to be defined for all backends now even if they aren't used directly. I believe this is already the case, but just a heads up.
-
- Credit:
- Stefan-Ghinea
-
-- [Tim Gates brought this change]
-
- kex.c: fix simple typo, niumber -> number (#545)
-
- File: kex.c
-
- Notes:
- There is a small typo in src/kex.c.
-
- Should read `number` rather than `niumber`.
-
- Credit:
- Tim Gates
-
-- [Tseng Jun brought this change]
-
- session.c: Correct a typo which may lead to stack overflow (#533)
-
- File: session.c
-
- Notes:
- Seems the author intend to terminate banner_dup buffer, later, print it to the debug console.
-
- Author:
- Tseng Jun
-
-Marc Hoersken (10 Oct 2020)
-- wincng: fix random big number generation to match openssl
-
- The old function would set the least significant bits in
- the most significant byte instead of the most significant bits.
-
- The old function would also zero pad too much bits in the
- most significant byte. This lead to a reduction of key space
- in the most significant byte according to the following listing:
- - 8 bits reduced to 0 bits => eg. 2048 bits to 2040 bits DH key
- - 7 bits reduced to 1 bits => eg. 2047 bits to 2041 bits DH key
- - 6 bits reduced to 2 bits => eg. 2046 bits to 2042 bits DH key
- - 5 bits reduced to 3 bits => eg. 2045 bits to 2043 bits DH key
-
- No change would occur for the case of 4 significant bits.
- For 1 to 3 significant bits in the most significant byte
- the DH key would actually be expanded instead of reduced:
- - 3 bits expanded to 5 bits => eg. 2043 bits to 2045 bits DH key
- - 2 bits expanded to 6 bits => eg. 2042 bits to 2046 bits DH key
- - 1 bits expanded to 7 bits => eg. 2041 bits to 2047 bits DH key
-
- There is no case of 0 significant bits in the most significant byte
- since this would be a case of 8 significant bits in the next byte.
-
- At the moment only the following case applies due to a fixed
- DH key size value currently being used in libssh2:
-
- The DH group_order is fixed to 256 (bytes) which leads to a
- 2047 bits DH key size by calculating (256 * 8) - 1.
-
- This means the DH keyspace was previously reduced from 2047 bits
- to 2041 bits (while the top and bottom bits are always set), so the
- keyspace is actually always reduced from 2045 bits to 2039 bits.
-
- All of this is only relevant for Windows versions supporting the
- WinCNG backend (Vista or newer) before Windows 10 version 1903.
-
- Closes #521
-
-Daniel Stenberg (28 Sep 2020)
-- libssh2_session_callback_set.3: explain the recv/send callbacks
-
- Describe how to actually use these callbacks.
-
- Closes #518
-
-GitHub (23 Sep 2020)
-- [Will Cosgrove brought this change]
-
- agent.c: formatting
-
- Improved formatting of RECV_SEND_ALL macro.
-
-- [Will Cosgrove brought this change]
-
- CMakeLists.txt: respect install lib dir #405 (#515)
-
- Files:
- CMakeLists.txt
-
- Notes:
- Use CMAKE_INSTALL_LIBDIR directory
-
- Credit: Arfrever
-
-- [Will Cosgrove brought this change]
-
- kex.c: group16-sha512 and group18-sha512 support #457 (#468)
-
- Files: kex.c
-
- Notes:
- Added key exchange group16-sha512 and group18-sha512. As a result did the following:
-
- Abstracted diffie_hellman_sha256() to diffie_hellman_sha_algo() which is now algorithm agnostic and takes the algorithm as a parameter since we needed sha512 support. Unfortunately it required some helper functions but they are simple.
- Deleted diffie_hellman_sha1()
- Deleted diffie_hellman_sha1 specific macro
- Cleaned up some formatting
- Defined sha384 in os400 and wincng backends
- Defined LIBSSH2_DH_MAX_MODULUS_BITS to abort the connection if we receive too large of p from the server doing sha1 key exchange.
- Reorder the default key exchange list to match OpenSSH and improve security
-
- Credit:
- Will Cosgrove
-
-- [Igor Klevanets brought this change]
-
- agent.c: Recv and send all bytes via network in agent_transact_unix() (#510)
-
- Files: agent.c
-
- Notes:
- Handle sending/receiving partial packet replies in agent.c API.
-
- Credit: Klevanets Igor
-
-- [Daniel Stenberg brought this change]
-
- Makefile.am: include all test files in the dist #379
-
- File:
- Makefile.am
-
- Notes:
- No longer conditionally include OpenSSL specific test files, they aren't run if we're not building against OpenSSL 1.1.x anyway.
-
- Credit:
- Daniel Stenberg
-
-- [Max Dymond brought this change]
-
- Add support for an OSS Fuzzer fuzzing target (#392)
-
- Files:
- .travis.yml, configure.ac, ossfuzz
-
- Notes:
- This adds support for an OSS-Fuzz fuzzing target in ssh2_client_fuzzer,
- which is a cut down example of ssh2.c. Future enhancements can improve
- coverage.
-
- Credit:
- Max Dymond
-
-- [Sebastián Katzer brought this change]
-
- mbedtls.c: ECDSA support for mbed TLS (#385)
-
- Files:
- mbedtls.c, mbedtls.h, .travis.yml
-
- Notes:
- This PR adds support for ECDSA for both key exchange and host key algorithms.
-
- The following elliptic curves are supported:
-
- 256-bit curve defined by FIPS 186-4 and SEC1
- 384-bit curve defined by FIPS 186-4 and SEC1
- 521-bit curve defined by FIPS 186-4 and SEC1
-
- Credit:
- Sebastián Katzer
-
-Marc Hoersken (1 Sep 2020)
-- buildconf: exec autoreconf to avoid additional process (#512)
-
- Also make buildconf exit with the return code of autoreconf.
-
- Follow up to #224
-
-- scp.c: fix indentation in shell_quotearg documentation
-
-- wincng: make more use of new helper functions (#496)
-
-- wincng: make sure algorithm providers are closed once (#496)
-
-GitHub (10 Jul 2020)
-- [David Benjamin brought this change]
-
- openssl.c: clean up curve25519 code (#499)
-
- File: openssl.c, openssl.h, crypto.h, kex.c
-
- Notes:
- This cleans up a few things in the curve25519 implementation:
-
- - There is no need to create X509_PUBKEYs or PKCS8_PRIV_KEY_INFOs to
- extract key material. EVP_PKEY_get_raw_private_key and
- EVP_PKEY_get_raw_public_key work fine.
-
- - libssh2_x25519_ctx was never used (and occasionally mis-typedefed to
- libssh2_ed25519_ctx). Remove it. The _libssh2_curve25519_new and
- _libssh2_curve25519_gen_k interfaces use the bytes. Note, if it needs
- to be added back, there is no need to roundtrip through
- EVP_PKEY_new_raw_private_key. EVP_PKEY_keygen already generated an
- EVP_PKEY.
-
- - Add some missing error checks.
-
- Credit:
- David Benjamin
-
-- [Will Cosgrove brought this change]
-
- transport.c: socket is disconnected, return error (#500)
-
- File: transport.c
-
- Notes:
- This is to fix #102, instead of continuing to attempt to read a disconnected socket, it will now error out.
-
- Credit:
- TDi-jonesds
-
-- [Will Cosgrove brought this change]
-
- stale.yml
-
- Increasing stale values.
-
-Marc Hoersken (6 Jul 2020)
-- wincng: try newer DH API first, fallback to legacy RSA API
-
- Avoid the use of RtlGetVersion or similar Win32 functions,
- since these depend on version information from manifests.
-
- This commit makes the WinCNG backend first try to use the
- new DH algorithm API with the raw secret derivation feature.
- In case this feature is not available the WinCNG backend
- will fallback to the classic approach of using RSA-encrypt
- to perform the required modular exponentiation of BigNums.
-
- The feature availability test is done during the first handshake
- and the result is stored in the crypto backends global state.
-
- Follow up to #397
- Closes #484
-
-- wincng: fix indentation of function arguments and comments
-
- Follow up to #397
-
-- [Wez Furlong brought this change]
-
- wincng: use newer DH API for Windows 8.1+
-
- Since Windows 1903 the approach used to perform DH kex with the CNG
- API has been failing.
-
- This commit switches to using the `DH` algorithm provider to perform
- generation of the key pair and derivation of the shared secret.
-
- It uses a feature of CNG that is not yet documented. The sources of
- information that I've found on this are:
-
- * https://stackoverflow.com/a/56378698/149111
- * https://github.com/wbenny/mini-tor/blob/5d39011e632be8e2b6b1819ee7295e8bd9b7a769/mini/crypto/cng/dh.inl#L355
-
- With this change I am able to successfully connect from Windows 10 to my
- ubuntu system.
-
- Refs: https://github.com/alexcrichton/ssh2-rs/issues/122
- Fixes: https://github.com/libssh2/libssh2/issues/388
- Closes: https://github.com/libssh2/libssh2/pull/397
-
-GitHub (1 Jul 2020)
-- [Zenju brought this change]
-
- comp.c: Fix name clash with ZLIB macro "compress" (#418)
-
- File: comp.c
-
- Notes:
- * Fix name clash with ZLIB macro "compress".
-
- Credit:
- Zenju
-
-- [yann-morin-1998 brought this change]
-
- buildsystem: drop custom buildconf script, rely on autoreconf (#224)
-
- Notes:
- The buildconf script is currently required, because we need to copy a
- header around, because it is used both from the library and the examples
- sources.
-
- However, having a custom 'buildconf'-like script is not needed if we can
- ensure that the header exists by the time it is needed. For that, we can
- just append the src/ directory to the headers search path for the
- examples.
-
- And then it means we no longer need to generate the same header twice,
- so we remove the second one from configure.ac.
-
- Now, we can just call "autoreconf -fi" to generate the autotools files,
- instead of relying on the canned sequence in "buildconf", since
- autoreconf has now long known what to do at the correct moment (future
- versions of autotools, automake, autopoint, autoheader etc... may
- require an other ordering, or other intermediate steps, etc...).
-
- Eventually, get rid of buildconf now it is no longer needed. In fact, we
- really keep it for legacy, but have it just call autoreconf (and print a
- nice user-friendly warning). Don't include it in the release tarballs,
- though.
-
- Update doc, gitignore, and travis-CI jobs accordingly.
-
- Credit:
- Signed-off-by: "Yann E. MORIN"
- Cc: Sam Voss
-
-- [Will Cosgrove brought this change]
-
- libssh2.h: Update Diffie Hellman group values (#493)
-
- File: libssh2.h
-
- Notes:
- Update the min, preferred and max DH group values based on RFC 8270.
-
- Credit:
- Will Cosgrove, noted from email list by Mitchell Holland
-
-Marc Hoersken (22 Jun 2020)
-- travis: use existing Makefile target to run checksrc
-
-- Makefile: also run checksrc on test source files
-
-- tests: avoid use of deprecated function _sleep (#490)
-
-- tests: avoid use of banned function strncat (#489)
-
-- tests: satisfy checksrc regarding max line length of 79 chars
-
- Follow up to 2764bc8e06d51876b6796d6080c6ac51e20f3332
-
-- tests: satisfy checksrc with whitespace only fixes
-
- checksrc.pl -i4 -m79 -ASIZEOFNOPAREN -ASNPRINTF
- -ACOPYRIGHT -AFOPENMODE tests/*.[ch]
-
-- tests: add support for ports published via Docker for Windows
-
-- tests: restore retry behaviour for docker-machine ip command
-
-- tests: fix mix of declarations and code failing C89 compliance
-
-- wincng: add and improve checks in bit counting function
-
-- wincng: align bits to bytes calculation in all functions
-
-- wincng: do not disable key validation that can be enabled
-
- The modular exponentiation also works with key validation enabled.
-
-- wincng: fix return value in _libssh2_dh_secret
-
- Do not ignore return value of modular exponentiation.
-
-- appveyor: build and run tests for WinCNG crypto backend
-
-GitHub (1 Jun 2020)
-- [suryakalpo brought this change]
-
- INSTALL_CMAKE.md: Update formatting (#481)
-
- File: INSTALL_CMAKE.md
-
- Notes:
- Although the original text would be immediately clear to seasoned users of CMAKE and/or Unix shell, the lack of newlines may cause some confusion for newcomers. Hence, wrapping the texts in a md code-block such that the newlines appear as intended.
-
- credit:
- suryakalpo
-
-Marc Hoersken (31 May 2020)
-- src: add new and align include guards in header files (#480)
-
- Make sure all include guards exist and follow the same format.
-
-- wincng: fix multiple definition of `_libssh2_wincng' (#479)
-
- Add missing include guard and move global state
- from header to source file by using extern.
-
-GitHub (28 May 2020)
-- [Will Cosgrove brought this change]
-
- transport.c: moving total_num check from #476 (#478)
-
- file: transport.c
-
- notes:
- moving total_num zero length check from #476 up to the prior bounds check which already includes a total_num check. Makes it slightly more readable.
-
- credit:
- Will Cosgrove
-
-- [lutianxiong brought this change]
-
- transport.c: fix use-of-uninitialized-value (#476)
-
- file:transport.c
-
- notes:
- return error if malloc(0)
-
- credit:
- lutianxiong
-
-- [Dr. Koutheir Attouchi brought this change]
-
- libssh2_sftp.h: Changed type of LIBSSH2_FX_* constants to unsigned long, fixes #474
-
- File:
- libssh2_sftp.h
-
- Notes:
- Error constants `LIBSSH2_FX_*` are only returned by `libssh2_sftp_last_error()` which returns `unsigned long`.
- Therefore these constants should be defined as unsigned long literals, instead of int literals.
-
- Credit:
- Dr. Koutheir Attouchi
-
-- [monnerat brought this change]
-
- os400qc3.c: constify libssh2_os400qc3_hash_update() data parameter. (#469)
-
- Files: os400qc3.c, os400qc3.h
-
- Notes:
- Fixes building on OS400. #426
-
- Credit:
- Reported-by: hjindra on github, dev by Monnerat
-
-- [monnerat brought this change]
-
- HACKING.CRYPTO: keep up to date with new crypto definitions from code. (#466)
-
- File: HACKING.CRYPTO
-
- Notes:
- This commit updates the HACKING.CRYPTO documentation file in an attempt to make it in sync with current code.
- New documented features are:
-
- SHA384
- SHA512
- ECDSA
- ED25519
-
- Credit:
- monnerat
-
-- [Harry Sintonen brought this change]
-
- kex.c: Add diffie-hellman-group14-sha256 Key Exchange Method (#464)
-
- File: kex.c
-
- Notes: Added diffie-hellman-group14-sha256 kex
-
- Credit: Harry Sintonen
-
-- [Will Cosgrove brought this change]
-
- os400qc3.h: define sha512 macros (#465)
-
- file: os400qc3.h
- notes: fixes for building libssh2 1.9.x
-
-- [Will Cosgrove brought this change]
-
- os400qc3.h: define EC types to fix building #426 (#462)
-
- File: os400qc3.h
- Notes: define missing EC types which prevents building
- Credit: hjindra
-
-- [Brendan Shanks brought this change]
-
- hostkey.c: Fix 'unsigned int'/'uint32_t' mismatch (#461)
-
- File: hostkey.c
-
- Notes:
- These types are the same size so most compilers are fine with it, but CodeWarrior (on classic MacOS) throws an ‘illegal implicit conversion’ error
-
- Credit: Brendan Shanks
-
-- [Thomas Klausner brought this change]
-
- Makefile.am: Fix unportable test(1) operator. (#459)
-
- file: Makefile.am
-
- Notes:
- The POSIX comparison operator for test(1) is =; bash supports == but not even test from GNU coreutils does.
-
- Credit:
- Thomas Klausner
-
-- [Tseng Jun brought this change]
-
- openssl.c: minor changes of coding style (#454)
-
- File: openssl.c
-
- Notes:
- minor changes of coding style and align preprocessor conditional for #439
-
- Credit:
- Tseng Jun
-
-- [Hans Meier brought this change]
-
- openssl.c: Fix for use of uninitialized aes_ctr_cipher.key_len (#453)
-
- File:
- Openssl.c
-
- Notes:
- * Fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression from #439
-
- Credit:
- Hans Meirer, Tseng Jun
-
-- [Zenju brought this change]
-
- agent.c: Fix Unicode builds on Windows (#417)
-
- File: agent.c
-
- Notes:
- Fixes unicode builds for Windows in Visual Studio 16.3.2.
-
- Credit:
- Zenju
-
-- [Hans Meier brought this change]
-
- openssl.c: Fix use-after-free crash in openssl backend without memory leak (#439)
-
- Files: openssl.c
-
- Notes:
- Fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
-
- Credit:
- Hans Meier
-
-- [Romain Geissler @ Amadeus brought this change]
-
- Session.c: Fix undefined warning when mixing with LTO-enabled libcurl. (#449)
-
- File: Session.c
-
- Notes:
- With gcc 9, libssh2, libcurl and LTO enabled for all binaries I see this
- warning (error with -Werror):
-
- vssh/libssh2.c: In function ‘ssh_statemach_act’:
- /data/mwrep/rgeissler/ospack/ssh2/BUILD/libssh2-libssh2-03c7c4a/src/session.c:579:9: error: ‘seconds_to_next’ is used uninitialized in this function [-Werror=uninitialized]
- 579 | int seconds_to_next;
- | ^
- lto1: all warnings being treated as errors
-
- Gcc normally issues -Wuninitialized when it is sure there is a problem,
- and -Wmaybe-uninitialized when it's not sure, but it's possible. Here
- the compiler seems to have find a real case where this could happen. I
- looked in your code and overall it seems you always check if the return
- code is non null, not often that it's below zero. I think we should do
- the same here. With this patch, gcc is fine.
-
- Credit:
- Romain-Geissler-1A
-
-- [Zenju brought this change]
-
- transport.c: Fix crash with delayed compression (#443)
-
- Files: transport.c
-
- Notes:
- Fixes crash with delayed compression option using Bitvise server.
-
- Contributor:
- Zenju
-
-- [Will Cosgrove brought this change]
-
- Update INSTALL_MAKE path to INSTALL_MAKE.md (#446)
-
- Included for #429
-
-- [Will Cosgrove brought this change]
-
- Update INSTALL_CMAKE filename to INSTALL_CMAKE.md (#445)
-
- Fixing for #429
-
-- [Wallace Souza brought this change]
-
- Rename INSTALL_CMAKE to INTALL_CMAKE.md (#429)
-
- Adding Markdown file extension in order to Github render the instructions properly
-
-Will Cosgrove (17 Dec 2019)
-- [Daniel Stenberg brought this change]
-
- include/libssh2.h: fix comment: the known host key uses 4 bits (#438)
-
-- [Zenju brought this change]
-
- ssh-ed25519: Support PKIX + calc pubkey from private (#416)
-
- Files: openssl.c/h
- Author: Zenju
- Notes:
- Adds support for PKIX key reading by fixing:
-
- _libssh2_pub_priv_keyfile() is missing the code to extract the ed25519 public key from a given private key
-
- _libssh2_ed25519_new_private_frommemory is only parsing the openssh key format but does not understand PKIX (as retrieved via PEM_read_bio_PrivateKey)
-
-GitHub (15 Oct 2019)
-- [Will Cosgrove brought this change]
-
- .travis.yml: Fix Chrome and 32 bit builds (#423)
-
- File: .travis.yml
-
- Notes:
- * Fix Chrome installing by using Travis build in directive
- * Update to use libgcrypt20-dev package to fix 32 bit builds based on comments found here:
- https://launchpad.net/ubuntu/xenial/i386/libgcrypt11-dev
-
-- [Will Cosgrove brought this change]
-
- packet.c: improved parsing in packet_x11_open (#410)
-
- Use new API to parse data in packet_x11_open() for better bounds checking.
-
-Will Cosgrove (12 Sep 2019)
-- [Michael Buckley brought this change]
-
- knownhost.c: Double the static buffer size when reading and writing known hosts (#409)
-
- Notes:
- We had a user who was being repeatedly prompted to accept a server key repeatedly. It turns out the base64-encoded key was larger than the static buffers allocated to read and write known hosts. I doubled the size of these buffers.
-
- Credit:
- Michael Buckley
-
-GitHub (4 Sep 2019)
-- [Will Cosgrove brought this change]
-
- packet.c: improved packet parsing in packet_queue_listener (#404)
-
- * improved bounds checking in packet_queue_listener
-
- file: packet.c
-
- notes:
- improved parsing packet in packet_queue_listener
-
-- [Will Cosgrove brought this change]
-
- packet.c: improve message parsing (#402)
-
- * packet.c: improve parsing of packets
-
- file: packet.c
-
- notes:
- Use _libssh2_get_string API in SSH_MSG_DEBUG/SSH_MSG_DISCONNECT. Additional uint32 bounds check in SSH_MSG_GLOBAL_REQUEST.
-
-- [Will Cosgrove brought this change]
-
- misc.c: _libssh2_ntohu32 cast bit shifting (#401)
-
- To quite overly aggressive analyzers.
-
- Note, the builds pass, Travis is having some issues with Docker images.
-
-- [Will Cosgrove brought this change]
-
- kex.c: improve bounds checking in kex_agree_methods() (#399)
-
- file: kex.c
-
- notes:
- use _libssh2_get_string instead of kex_string_pair which does additional checks
-
-Will Cosgrove (23 Aug 2019)
-- [Fabrice Fontaine brought this change]
-
- acinclude.m4: add mbedtls to LIBS (#371)
-
- Notes:
- This is useful for static builds so that the Libs.private field in
- libssh2.pc contains correct info for the benefit of pkg-config users.
- Static link with libssh2 requires this information.
-
- Signed-off-by: Baruch Siach
- [Retrieved from:
- https://git.buildroot.net/buildroot/tree/package/libssh2/0002-acinclude.m4-add-mbedtls-to-LIBS.patch]
- Signed-off-by: Fabrice Fontaine
-
- Credit:
- Fabrice Fontaine
-
-- [jethrogb brought this change]
-
- Generate debug info when building with MSVC (#178)
-
- files: CMakeLists.txt
-
- notes: Generate debug info when building with MSVC
-
- credit:
- jethrogb
-
-- [Panos brought this change]
-
- Add agent forwarding implementation (#219)
-
- files: channel.c, test_agent_forward_succeeds.c, libssh2_priv.h, libssh2.h, ssh2_agent_forwarding.c
-
- notes:
- * Adding SSH agent forwarding.
- * Fix agent forwarding message, updated example.
- Added integration test code and cmake target. Added example to cmake list.
-
- credit:
- pkittenis
-
-GitHub (2 Aug 2019)
-- [Will Cosgrove brought this change]
-
- Update EditorConfig
-
- Added max_line_length = 80
-
-- [Will Cosgrove brought this change]
-
- global.c : fixed call to libssh2_crypto_exit #394 (#396)
-
- * global.c : fixed call to libssh2_crypto_exit #394
-
- File: global.c
-
- Notes: Don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
-
- Credit: seba30
-
-Will Cosgrove (30 Jul 2019)
-- [hlefebvre brought this change]
-
- misc.c : Add an EWOULDBLOCK check for better portability (#172)
-
- File: misc.c
-
- Notes: Added support for all OS' that implement EWOULDBLOCK, not only VMS
-
- Credit: hlefebvre
-
-- [Etienne Samson brought this change]
-
- userauth.c: fix off by one error when loading public keys with no id (#386)
-
- File: userauth.c
-
- Credit:
- Etienne Samson
-
- Notes:
- Caught by ASAN:
-
- =================================================================
- ==73797==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60700001bcf0 at pc 0x00010026198d bp 0x7ffeefbfed30 sp 0x7ffeefbfe4d8
- READ of size 69 at 0x60700001bcf0 thread T0
- 2019-07-04 08:35:30.292502+0200 atos[73890:2639175] examining /Users/USER/*/libssh2_clar [73797]
- #0 0x10026198c in wrap_memchr (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x1f98c)
- #1 0x1000f8e66 in file_read_publickey userauth.c:633
- #2 0x1000f2dc9 in userauth_publickey_fromfile userauth.c:1513
- #3 0x1000f2948 in libssh2_userauth_publickey_fromfile_ex userauth.c:1590
- #4 0x10000e254 in test_userauth_publickey__ed25519_auth_ok publickey.c:69
- #5 0x1000090c3 in clar_run_test clar.c:260
- #6 0x1000038f3 in clar_run_suite clar.c:343
- #7 0x100003272 in clar_test_run clar.c:522
- #8 0x10000c3cc in main runner.c:60
- #9 0x7fff5b43b3d4 in start (libdyld.dylib:x86_64+0x163d4)
-
- 0x60700001bcf0 is located 0 bytes to the right of 80-byte region [0x60700001bca0,0x60700001bcf0)
- allocated by thread T0 here:
- #0 0x10029e053 in wrap_malloc (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x5c053)
- #1 0x1000b4978 in libssh2_default_alloc session.c:67
- #2 0x1000f8aba in file_read_publickey userauth.c:597
- #3 0x1000f2dc9 in userauth_publickey_fromfile userauth.c:1513
- #4 0x1000f2948 in libssh2_userauth_publickey_fromfile_ex userauth.c:1590
- #5 0x10000e254 in test_userauth_publickey__ed25519_auth_ok publickey.c:69
- #6 0x1000090c3 in clar_run_test clar.c:260
- #7 0x1000038f3 in clar_run_suite clar.c:343
- #8 0x100003272 in clar_test_run clar.c:522
- #9 0x10000c3cc in main runner.c:60
- #10 0x7fff5b43b3d4 in start (libdyld.dylib:x86_64+0x163d4)
-
- SUMMARY: AddressSanitizer: heap-buffer-overflow (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x1f98c) in wrap_memchr
- Shadow bytes around the buggy address:
- 0x1c0e00003740: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fd fd
- 0x1c0e00003750: fd fd fd fd fd fd fd fa fa fa fa fa 00 00 00 00
- 0x1c0e00003760: 00 00 00 00 00 00 fa fa fa fa 00 00 00 00 00 00
- 0x1c0e00003770: 00 00 00 fa fa fa fa fa fd fd fd fd fd fd fd fd
- 0x1c0e00003780: fd fd fa fa fa fa fd fd fd fd fd fd fd fd fd fa
- =>0x1c0e00003790: fa fa fa fa 00 00 00 00 00 00 00 00 00 00[fa]fa
- 0x1c0e000037a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x1c0e000037b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x1c0e000037c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x1c0e000037d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x1c0e000037e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- Shadow byte legend (one shadow byte represents 8 application bytes):
- Addressable: 00
- Partially addressable: 01 02 03 04 05 06 07
- Heap left redzone: fa
- Freed heap region: fd
- Stack left redzone: f1
- Stack mid redzone: f2
- Stack right redzone: f3
- Stack after return: f5
- Stack use after scope: f8
- Global redzone: f9
- Global init order: f6
- Poisoned by user: f7
- Container overflow: fc
- Array cookie: ac
- Intra object redzone: bb
- ASan internal: fe
- Left alloca redzone: ca
- Right alloca redzone: cb
- Shadow gap: cc
-
-- [Thilo Schulz brought this change]
-
- openssl.c : Fix use-after-free crash on reinitialization of openssl backend
-
- file : openssl.c
-
- notes :
- libssh2's openssl backend has a use-after-free condition if HAVE_OPAQUE_STRUCTS is defined and you call libssh2_init() again after prior initialisation/deinitialisation of libssh2
-
- credit : Thilo Schulz
-
-- [axjowa brought this change]
-
- openssl.h : Use of ifdef where if should be used (#389)
-
- File : openssl.h
-
- Notes :
- LIBSSH2_ECDSA and LIBSSH2_ED25519 are always defined so the #ifdef
- checks would never be false.
-
- This change makes it possible to build libssh2 against OpenSSL built
- without EC support.
-
- Change-Id: I0a2f07c2d80178314dcb7d505d1295d19cf15afd
-
- Credit : axjowa
-
-- [Zenju brought this change]
-
- Agent.c : Preserve error info from agent_list_identities() (#374)
-
- Files : agent.c
-
- Notes :
- Currently the error details as returned by agent_transact_pageant() are overwritten by a generic "agent list id failed" message by int agent_list_identities(LIBSSH2_AGENT* agent).
-
- Credit :
- Zenju
-
-- [Who? Me?! brought this change]
-
- Channel.c: Make sure the error code is set in _libssh2_channel_open() (#381)
-
- File : Channel.c
-
- Notes :
- if _libssh2_channel_open() fails, set the error code.
-
- Credit :
- mark-i-m
-
-- [Orgad Shaneh brought this change]
-
- Kex.c, Remove unneeded call to strlen (#373)
-
- File : Kex.c
-
- Notes :
- Removed call to strlen
-
- Credit :
- Orgad Shaneh
-
-- [Pedro Monreal brought this change]
-
- Spelling corrections (#380)
-
- Files :
- libssh2.h, libssh2_sftp.h, bcrypt_pbkdf.c, mbedtls.c, sftp.c, ssh2.c
-
- Notes :
- * Fixed misspellings
-
- Credit :
- Pedro Monreal
-
-- [Sebastián Katzer brought this change]
-
- Fix Potential typecast error for `_libssh2_ecdsa_key_get_curve_type` (#383)
-
- Issue : #383
-
- Files : hostkey.c, crypto.h, openssl.c
-
- Notes :
- * Fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
- * Rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
-
- Credit :
- Sebastián Katzer
-
-GitHub (20 Jun 2019)
-- [Will Cosgrove brought this change]
-
- bump copyright date
-
-Version 1.9.0 (19 Jun 2019)
-
-GitHub (19 Jun 2019)
-- [Will Cosgrove brought this change]
-
- 1.9 Formatting
-
-- [Will Cosgrove brought this change]
-
- 1.9 Release notes
-
-Will Cosgrove (17 May 2019)
-- [Alexander Curtiss brought this change]
-
- libgcrypt.c : Fixed _libssh2_rsa_sha1_sign memory leak. (#370)
-
- File: libgcrypt.c
-
- Notes : Added calls to gcry_sexp_release to free memory allocated by gcry_sexp_find_token
-
- Credit :
- Reporter : beckmi
- PR by: Alexander Curtiss
-
-- [Orivej Desh brought this change]
-
- libssh2_priv.h : Fix musl build warning on sys/poll.h (#346)
-
- File : libssh2_priv.h
-
- Notes :
- musl prints `redirecting incorrect #include to `
- http://git.musl-libc.org/cgit/musl/commit/include/sys/poll.h?id=54446d730cfb17c5f7bcf57f139458678f5066cc
-
- poll is defined by POSIX to be in poll.h:
- http://pubs.opengroup.org/onlinepubs/7908799/xsh/poll.html
-
- Credit : Orivej Desh
-
-GitHub (1 May 2019)
-- [Will Cosgrove brought this change]
-
- kex.c : additional bounds checks in diffie_hellman_sha1/256 (#361)
-
- Files : kex.c, misc.c, misc.h
-
- Notes :
- Fixed possible out of bounds memory access when reading malformed data in diffie_hellman_sha1() and diffie_hellman_sha256().
-
- Added _libssh2_copy_string() to misc.c to return an allocated and filled char buffer from a string_buf offset. Removed no longer needed s var in kmdhgGPshakex_state_t.
-
-Will Cosgrove (26 Apr 2019)
-- [Tseng Jun brought this change]
-
- sftp.c : sftp_bin2attr() Correct attrs->gid assignment (#366)
-
- Regression with fix for #339
-
- Credit : Tseng Jun
-
-- [Tseng Jun brought this change]
-
- kex.c : Correct type cast in curve25519_sha256() (#365)
-
-GitHub (24 Apr 2019)
-- [Will Cosgrove brought this change]
-
- transport.c : scope local total_num var (#364)
-
- file : transport.c
- notes : move local `total_num` variable inside of if block to prevent scope access issues which caused #360.
-
-Will Cosgrove (24 Apr 2019)
-- [doublex brought this change]
-
- transport.c : fixes bounds check if partial packet is read
-
- Files : transport.c
-
- Issue : #360
-
- Notes :
- 'p->total_num' instead of local value total_num when doing bounds check.
-
- Credit : Doublex
-
-GitHub (23 Apr 2019)
-- [Will Cosgrove brought this change]
-
- Editor config file for source files (#322)
-
- Simple start to an editor config file when editing source files to make sure they are configured correctly.
-
-- [Will Cosgrove brought this change]
-
- misc.c : String buffer API improvements (#332)
-
- Files : misc.c, hostkey.c, kex.c, misc.h, openssl.c, sftp.c
-
- Notes :
- * updated _libssh2_get_bignum_bytes and _libssh2_get_string. Now pass in length as an argument instead of returning it to keep signedness correct. Now returns -1 for failure, 0 for success.
-
- _libssh2_check_length now returns 0 on success and -1 on failure to match the other string_buf functions. Added comment to _libssh2_check_length.
-
- Credit : Will Cosgrove
-
-Will Cosgrove (19 Apr 2019)
-- [doublex brought this change]
-
- mbedtls.c : _libssh2_mbedtls_rsa_new_private_frommemory() allow private-key from memory (#359)
-
- File : mbedtls.c
-
- Notes: _libssh2_mbedtls_rsa_new_private_frommemory() fixes private-key from memory reading to by adding NULL terminator before parsing; adds passphrase support.
-
- Credit: doublex
-
-- [Ryan Kelley brought this change]
-
- Session.c : banner_receive() from leaking when accessing non ssh ports (#356)
-
- File : session.c
-
- Release previous banner in banner_receive() if the session is reused after a failed connection.
-
- Credit : Ryan Kelley
-
-GitHub (11 Apr 2019)
-- [Will Cosgrove brought this change]
-
- Formatting in agent.c
-
- Removed whitespace.
-
-- [Will Cosgrove brought this change]
-
- Fixed formatting in agent.c
-
- Quiet linter around a couple if blocks and pointer.
-
-Will Cosgrove (11 Apr 2019)
-- [Zhen-Huan HWANG brought this change]
-
- sftp.c : discard and reset oversized packet in sftp_packet_read() (#269)
-
- file : sftp.c
-
- notes : when sftp_packet_read() encounters an sftp packet which exceeds SFTP max packet size it now resets the reading state so it can continue reading.
-
- credit : Zhen-Huan HWANG
-
-GitHub (11 Apr 2019)
-- [Will Cosgrove brought this change]
-
- Add agent functions libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path() (#308)
-
- File : agent.c
-
- Notes :
- Libssh2 uses the SSH_AUTH_SOCK env variable to read the system agent location. However, when using a custom agent path you have to set this value using setenv which is not thread-safe. The new functions allow for a way to set a custom agent socket path in a thread safe manor.
-
-- [Will Cosgrove brought this change]
-
- Simplified _libssh2_check_length (#350)
-
- * Simplified _libssh2_check_length
-
- misc.c : _libssh2_check_length()
-
- Removed cast and improved bounds checking and format.
-
- Credit : Yuriy M. Kaminskiy
-
-- [Will Cosgrove brought this change]
-
- _libssh2_check_length() : additional bounds check (#348)
-
- Misc.c : _libssh2_check_length()
-
- Ensure the requested length is less than the total length before doing the additional bounds check
-
-Daniel Stenberg (25 Mar 2019)
-- misc: remove 'offset' from string_buf
-
- It isn't necessary.
-
- Closes #343
-
-- sftp: repair mtime from e1ead35e475
-
- A regression from e1ead35e4759 broke the SFTP mtime logic in
- sftp_bin2attr
-
- Also simplified the _libssh2_get_u32/u64 functions slightly.
-
- Closes #342
-
-- session_disconnect: don't zero state, just clear the right bit
-
- If we clear the entire field, the freeing of data in session_free() is
- skipped. Instead just clear the bit that risk making the code get stuck
- in the transport functions.
-
- Regression from 4d66f6762ca3fc45d9.
-
- Reported-by: dimmaq on github
- Fixes #338
- Closes #340
-
-- libssh2_sftp.h: restore broken ABI
-
- Commit 41fbd44 changed variable sizes/types in a public struct which
- broke the ABI, which breaks applications!
-
- This reverts that change.
-
- Closes #339
-
-- style: make includes and examples code style strict
-
- make travis and the makefile rule verify them too
-
- Closes #334
-
-GitHub (21 Mar 2019)
-- [Daniel Stenberg brought this change]
-
- create a github issue template
-
-Daniel Stenberg (21 Mar 2019)
-- stale-bot: activated
-
- The stale bot will automatically mark stale issues (inactive for 90
- days) and if still untouched after 21 more days, close them.
-
- See https://probot.github.io/apps/stale/
-
-- libssh2_session_supported_algs.3: fix formatting mistakes
-
- Reported-by: Max Horn
- Fixes #57
-
-- [Zenju brought this change]
-
- libssh2.h: Fix Error C2371 'ssize_t': redefinition
-
- Closes #331
-
-- travis: add code style check
-
- Closes #324
-
-- code style: unify code style
-
- Indent-level: 4
- Max columns: 79
- No spaces after if/for/while
- Unified brace positions
- Unified white spaces
-
-- src/checksrc.pl: code style checker
-
- imported as-is from curl
-
-Will Cosgrove (19 Mar 2019)
-- Merge branch 'MichaelBuckley-michaelbuckley-security-fixes'
-
-- Silence unused var warnings (#329)
-
- Silence warnings about unused variables in this test
-
-- Removed unneeded > 0 check
-
- When checking `userauth_kybd_num_prompts > 100` we don't care if it's also above zero.
-
-- [Matthew D. Fuller brought this change]
-
- Spell OpenSS_H_ right when talking about their specific private key (#321)
-
- Good catch, thanks.
-
-GitHub (19 Mar 2019)
-- [Will Cosgrove brought this change]
-
- Silence unused var warnings (#329)
-
- Silence warnings about unused variables in this test
-
-Michael Buckley (19 Mar 2019)
-- Fix more scope and printf warning errors
-
-- Silence unused variable warning
-
-GitHub (19 Mar 2019)
-- [Will Cosgrove brought this change]
-
- Removed unneeded > 0 check
-
- When checking `userauth_kybd_num_prompts > 100` we don't care if it's also above zero.
-
-Will Cosgrove (19 Mar 2019)
-- [Matthew D. Fuller brought this change]
-
- Spell OpenSS_H_ right when talking about their specific private key (#321)
-
- Good catch, thanks.
-
-Michael Buckley (18 Mar 2019)
-- Fix errors identified by the build process
-
-- Fix casting errors after merge
-
-GitHub (18 Mar 2019)
-- [Michael Buckley brought this change]
-
- Merge branch 'master' into michaelbuckley-security-fixes
-
-Michael Buckley (18 Mar 2019)
-- Move fallback SIZE_MAX and UINT_MAX to libssh2_priv.h
-
-- Fix type and logic issues with _libssh2_get_u64
-
-Daniel Stenberg (17 Mar 2019)
-- examples: fix various compiler warnings
-
-- lib: fix various compiler warnings
-
-- session: ignore pedantic warnings for funcpointer <=> void *
-
-- travis: add a build using configure
-
- Closes #320
-
-- configure: provide --enable-werror
-
-- appveyor: remove old builds that mostly cause failures
-
- ... and only run on master branch.
-
- Closes #323
-
-- cmake: add two missing man pages to get installed too
-
- Both libssh2_session_handshake.3 and
- libssh2_userauth_publickey_frommemory.3 were installed by the configure
- build already.
-
- Reported-by: Arfrever on github
- Fixes #278
-
-- include/libssh2.h: warning: "_WIN64" is not defined, evaluates to 0
-
- We don't use #if for defines that might not be defined.
-
-- pem: //-comments are not allowed
-
-Will Cosgrove (14 Mar 2019)
-- [Daniel Stenberg brought this change]
-
- userauth: fix "Function call argument is an uninitialized value" (#318)
-
- Detected by scan-build.
-
-- fixed unsigned/signed issue
-
-Daniel Stenberg (15 Mar 2019)
-- session_disconnect: clear state
-
- If authentication is started but not completed before the application
- gives up and instead wants to shut down the session, the '->state' field
- might still be set and thus effectively dead-lock session_disconnect.
-
- This happens because both _libssh2_transport_send() and
- _libssh2_transport_read() refuse to do anything as long as state is set
- without the LIBSSH2_STATE_KEX_ACTIVE bit.
-
- Reported in curl bug https://github.com/curl/curl/issues/3650
-
- Closes #310
-
-Will Cosgrove (14 Mar 2019)
-- Release notes from 1.8.1
-
-Michael Buckley (14 Mar 2019)
-- Use string_buf in sftp_init().
-
-- Guard against out-of-bounds reads in publickey.c
-
-- Guard against out-of-bounds reads in session.c
-
-- Guard against out-of-bounds reads in userauth.c
-
-- Use LIBSSH2_ERROR_BUFFER_TOO_SMALL instead of LIBSSH2_ERROR_OUT_OF_BOUNDARY in sftp.c
-
-- Additional bounds checking in sftp.c
-
-- Additional length checks to prevent out-of-bounds reads and writes in _libssh2_packet_add(). https://libssh2.org/CVE-2019-3862.html
-
-- Add a required_size parameter to sftp_packet_require et. al. to require callers of these functions to handle packets that are too short. https://libssh2.org/CVE-2019-3860.html
-
-- Check the length of data passed to sftp_packet_add() to prevent out-of-bounds reads.
-
-- Prevent zero-byte allocation in sftp_packet_read() which could lead to an out-of-bounds read. https://libssh2.org/CVE-2019-3858.html
-
-- Sanitize padding_length - _libssh2_transport_read(). https://libssh2.org/CVE-2019-3861.html
-
- This prevents an underflow resulting in a potential out-of-bounds read if a server sends a too-large padding_length, possibly with malicious intent.
-
-- Defend against writing beyond the end of the payload in _libssh2_transport_read().
-
-- Defend against possible integer overflows in comp_method_zlib_decomp.
-
-GitHub (14 Mar 2019)
-- [Will Cosgrove brought this change]
-
- Security fixes (#315)
-
- * Bounds checks
-
- Fixes for CVEs
- https://www.libssh2.org/CVE-2019-3863.html
- https://www.libssh2.org/CVE-2019-3856.html
-
- * Packet length bounds check
-
- CVE
- https://www.libssh2.org/CVE-2019-3855.html
-
- * Response length check
-
- CVE
- https://www.libssh2.org/CVE-2019-3859.html
-
- * Bounds check
-
- CVE
- https://www.libssh2.org/CVE-2019-3857.html
-
- * Bounds checking
-
- CVE
- https://www.libssh2.org/CVE-2019-3859.html
-
- and additional data validation
-
- * Check bounds before reading into buffers
-
- * Bounds checking
-
- CVE
- https://www.libssh2.org/CVE-2019-3859.html
-
- * declare SIZE_MAX and UINT_MAX if needed
-
-- [Will Cosgrove brought this change]
-
- fixed type warnings (#309)
-
-- [Will Cosgrove brought this change]
-
- Bumping version number for pending 1.8.1 release
-
-Will Cosgrove (4 Mar 2019)
-- [Daniel Stenberg brought this change]
-
- _libssh2_string_buf_free: use correct free (#304)
-
- Use LIBSSH2_FREE() here, not free(). We allow memory function
- replacements so free() is rarely the right choice...
-
-GitHub (26 Feb 2019)
-- [Will Cosgrove brought this change]
-
- Fix for building against libreSSL #302
-
- Changed to use the check we use elsewhere.
-
-- [Will Cosgrove brought this change]
-
- Fix for when building against LibreSSL #302
-
-Will Cosgrove (25 Feb 2019)
-- [gartens brought this change]
-
- docs: update libssh2_hostkey_hash.3 [ci skip] (#301)
-
-GitHub (21 Feb 2019)
-- [Will Cosgrove brought this change]
-
- fix malloc/free mismatches #296 (#297)
-
-- [Will Cosgrove brought this change]
-
- Replaced malloc with calloc #295
-
-- [Will Cosgrove brought this change]
-
- Abstracted OpenSSL calls out of hostkey.c (#294)
-
-- [Will Cosgrove brought this change]
-
- Fix memory dealloc impedance mis-match #292 (#293)
-
- When using ed25519 host keys and a custom memory allocator.
-
-- [Will Cosgrove brought this change]
-
- Added call to OpenSSL_add_all_digests() #288
-
- For OpenSSL 1.0.x we need to call OpenSSL_add_all_digests().
-
-Will Cosgrove (12 Feb 2019)
-- [Zhen-Huan HWANG brought this change]
-
- SFTP: increase maximum packet size to 256K (#268)
-
- to match implementations like OpenSSH.
-
-- [Zenju brought this change]
-
- Fix https://github.com/libssh2/libssh2/pull/271 (#284)
-
-GitHub (16 Jan 2019)
-- [Will Cosgrove brought this change]
-
- Agent NULL check in shutdown #281
-
-Will Cosgrove (15 Jan 2019)
-- [Adrian Moran brought this change]
-
- mbedtls: Fix leak of 12 bytes by each key exchange. (#280)
-
- Correctly free ducts by calling _libssh2_mbedtls_bignum_free() in dtor.
-
-- [alex-weaver brought this change]
-
- Fix error compiling on Win32 with STDCALL=ON (#275)
-
-GitHub (8 Nov 2018)
-- [Will Cosgrove brought this change]
-
- Allow default permissions to be used in sftp_mkdir (#271)
-
- Added constant LIBSSH2_SFTP_DEFAULT_MODE to use the server default permissions when making a new directory
-
-Will Cosgrove (13 Sep 2018)
-- [Giulio Benetti brought this change]
-
- openssl: fix dereferencing ambiguity potentially causing build failure (#267)
-
- When dereferencing from *aes_ctr_cipher, being a pointer itself,
- ambiguity can occur; fixed possible build errors.
-
-Viktor Szakats (12 Sep 2018)
-- win32/GNUmakefile: define HAVE_WINDOWS_H
-
- This macro was only used in test/example code before, now it is
- also used in library code, but only defined automatically by
- automake/cmake, so let's do the same for the standalone win32
- make file.
-
- It'd be probably better to just rely on the built-in _WIN32 macro
- to detect the presence of windows.h though. It's already used
- in most of libssh2 library code. There is a 3rd, similar macro
- named LIBSSH2_WIN32, which might also be replaced with _WIN32.
-
- Ref: https://github.com/libssh2/libssh2/commit/8b870ad771cbd9cd29edbb3dbb0878e950f868ab
- Closes https://github.com/libssh2/libssh2/pull/266
-
-Marc Hoersken (2 Sep 2018)
-- Fix conditional check for HAVE_DECL_SECUREZEROMEMORY
-
- "Unlike the other `AC_CHECK_*S' macros, when a symbol is not declared,
- HAVE_DECL_symbol is defined to `0' instead of leaving HAVE_DECL_symbol
- undeclared. When you are sure that the check was performed,
- use HAVE_DECL_symbol in #if."
-
- Source: autoconf documentation for AC_CHECK_DECLS.
-
-- Fix implicit declaration of function 'SecureZeroMemory'
-
- Include window.h in order to use SecureZeroMemory on Windows.
-
-- Fix implicit declaration of function 'free' by including stdlib.h
-
-GitHub (27 Aug 2018)
-- [Will Cosgrove brought this change]
-
- Use malloc abstraction function in pem parse
-
- Fix warning on WinCNG build.
-
-- [Will Cosgrove brought this change]
-
- Fixed possible junk memory read in sftp_stat #258
-
-- [Will Cosgrove brought this change]
-
- removed INT64_C define (#260)
-
- No longer used.
-
-- [Will Cosgrove brought this change]
-
- Added conditional around engine.h include
-
-Will Cosgrove (6 Aug 2018)
-- [Alex Crichton brought this change]
-
- Fix OpenSSL link error with `no-engine` support (#259)
-
- This commit fixes linking against an OpenSSL library that was compiled with
- `no-engine` support by bypassing the initialization routines as they won't be
- available anyway.
-
-GitHub (2 Aug 2018)
-- [Will Cosgrove brought this change]
-
- ED25519 Key Support #39 (#248)
-
- OpenSSH Key and ED25519 support #39
- Added _libssh2_explicit_zero() to explicitly zero sensitive data in memory #120
-
- * ED25519 Key file support - Requires OpenSSL 1.1.1 or later
- * OpenSSH Key format reading support - Supports RSA/DSA/ECDSA/ED25519 types
- * New string buffer reading functions - These add build-in bounds checking and convenance methods. Used for OpenSSL PEM file reading.
- * Added new tests for OpenSSH formatted Keys
-
-- [Will Cosgrove brought this change]
-
- ECDSA key types are now explicit (#251)
-
- * ECDSA key types are now explicit
-
- Issue was brough up in pull request #248
diff --git a/deps/curl/dep/libssh2/README.txt b/deps/curl/dep/libssh2/README.txt
deleted file mode 100644
index fca539dbb..000000000
--- a/deps/curl/dep/libssh2/README.txt
+++ /dev/null
@@ -1,19 +0,0 @@
-libssh2 - SSH2 library
-======================
-
-libssh2 is a library implementing the SSH2 protocol, available under
-the revised BSD license.
-
-Web site: https://libssh2.org/
-
-Mailing list: https://lists.haxx.se/listinfo/libssh2-devel
-
-License: see COPYING
-
-Source code: https://github.com/libssh2/libssh2
-
-Web site source code: https://github.com/libssh2/www
-
-Installation instructions are in:
- - docs/INSTALL_CMAKE for CMake
- - docs/INSTALL_AUTOTOOLS for Autotools
diff --git a/deps/curl/dep/libssh2/RELEASE-NOTES.txt b/deps/curl/dep/libssh2/RELEASE-NOTES.txt
deleted file mode 100644
index d9af1689d..000000000
--- a/deps/curl/dep/libssh2/RELEASE-NOTES.txt
+++ /dev/null
@@ -1,325 +0,0 @@
-libssh2 1.11.1
-
-Deprecation notices:
-
-- Starting October 2024, the following algos go deprecated and will be
- disabled in default builds (with an option to enable them):
-
- - DSA: `ssh-dss` hostkeys.
- You can enable it now with `-DLIBSSH2_DSA_ENABLE`.
- Disabled by default in OpenSSH 7.0 (2015-08-11).
- Support to be removed by early 2025 from OpenSSH.
- - MD5-based MACs and hashes: `hmac-md5`, `hmac-md5-96`,
- `LIBSSH2_HOSTKEY_HASH_MD5`
- You can disable it now with `-DLIBSSH2_NO_MD5`.
- Disabled by default since OpenSSH 7.2 (2016-02-29).
- - 3DES cipher: `3des-cbc`
- You can disable it now with `-DLIBSSH2_NO_3DES`.
- Disabled by default since OpenSSH 7.4 (2016-12-19).
- - RIPEMD-160 MACs: `hmac-ripemd160`, `hmac-ripemd160@openssh.com`
- You can disable it now with `-DLIBSSH2_NO_HMAC_RIPEMD`.
- Removed in OpenSSH 7.6 (2017-10-03).
- - Blowfish cipher: `blowfish-cbc`
- You can disable it now with `-DLIBSSH2_NO_BLOWFISH`.
- Removed in OpenSSH 7.6 (2017-10-03).
- - RC4 ciphers: `arcfour`, `arcfour128`
- You can disable it now with `-DLIBSSH2_NO_RC4`.
- Removed in OpenSSH 7.6 (2017-10-03).
- - CAST cipher: `cast128-cbc`
- You can disable it now with `-DLIBSSH2_NO_CAST`.
- Removed in OpenSSH 7.6 (2017-10-03).
-
-- Starting April 2025, above options will be deleted from the
- libssh2 codebase.
-
- - Default builds will also disable support for old-style, MD5-based
- encrypted private keys.
- You can disable it now with `-DLIBSSH2_NO_MD5_PEM`.
-
-This release includes the following enhancements and bugfixes:
-
-- autotools: fix to update `LDFLAGS` for each detected dependency (d19b6190 #1384 #1381 #1377)
-- autotools: delete `--disable-tests` option, fix CI tests (e051ae34 #1271 #715 revert: 7483edfa)
-- autotools: show the default for `hidden-symbols` option (a3f5594a #1269)
-- autotools: enable `-Wunused-macros` with gcc (ecdf5199 #1262 #1227 #1224)
-- autotools: fix dotless gcc and Apple clang version detections (89ccc83c #1232 #1187)
-- autotools: show more clang/gcc version details (fb580161 #1230)
-- autotools: avoid warnings in libtool stub code (96682bd5 #1227 #1224)
-- autotools: sync warning enabler code with curl (5996fefe #1223)
-- autotools: rename variable (ce5f208a #1222)
-- autotools: picky warning options tidy-up (cdca8cff #1221)
-- autotools: fix `cp` to preserve attributes and timestamp in `Makefile.am` (f64e6318)
-- autotools: fix selecting WinCNG in cross-builds (and more) (00a3b88c #1187 #1186)
-- autotools: use comma separator in `Requires.private` of `libssh2.pc` (7f83de14 #1124)
-- autotools: remove `AB_INIT` from `configure.ac` (f4f52ccc)
-- autotools: improve libz position (c89174a7 #1077 #941 #1075 #1013 regr: 4f0f4bff)
-- autotools: skip tests requiring static lib if `--disable-static` (572c57c9 #1072 #663 #1056 regr: 83853f8a)
-- build: stop detecting `sys/param.h` header (2677d3b0 #1418 #1415)
-- build: silence warnings inside `FD_SET()`/`FD_ISSET()` macros (323a14b2 #1379)
-- build: drop `-Wformat-nonliteral` warning suppressions (c452c5cc #1342)
-- build: enable `-pedantic-errors` (3ec53f3e #1286)
-- build: add mingw-w64 support to `LIBSSH2_PRINTF()` attribute (f8c45794 #1287)
-- build: add `LIBSSH2_NO_DEPRECATED` option (b1414503 #1267 #1266 #1260 #1259)
-- build: enable missing OpenSSF-recommended warnings, with fixes (afa6b865 #1257)
-- build: enable more compiler warnings and fix them (7ecc309c #1224)
-- build: picky warning updates (328a96b3 #1219)
-- build: revert: respect autotools `DLL_EXPORT` in `libssh2.h` (481be044 #1141 #917 revert: fb1195cf)
-- build: stop requiring libssl from openssl (c84745e3 #1128)
-- build: tidy-up `libssh2.pc.in` variable names (5720dd9f #1125)
-- build: add/fix `Requires.private` packages in `libssh2.pc` (ef538069 #1123)
-- buildconf: drop (814a850c #1441 follow: fc5d7788)
-- checksrc: update, check all sources, fix fallouts (1117b677 #1457)
-- checksrc: sync with curl (8cd473c9 #1272)
-- checksrc: fix spelling in comment (a95d401f)
-- checksrc: modernise Perl file open (3d309f9b)
-- checksrc: switch to dot file (d67a91aa #1052)
-- ci: use Ninja with cmake (20ad047d #1458)
-- ci: disable dependency tracking in autotools builds (e44f0418 #1396)
-- ci: fix mbedtls runners on macOS (84411539 #1381)
-- ci: enable Unity mode for most CMake builds (1bfae57b #1367 #1034)
-- ci: add shellcheck job and script (d88b9bcd)
-- ci: verify build and install from tarball (a86e27e8 #1362)
-- ci: add reproducibility test for `maketgz` (2d765e45 #1360)
-- ci: use Linux runner for BSDs, add arm64 FreeBSD 14 job (6f86b196 #1343)
-- ci: do not parallelize `distcheck` job (5e65dd87 #1339)
-- ci: add FreeBSD 14 job, fix issues (46333adf #1277)
-- ci: add OmniOS job, fix issues (5e0ec991)
-- ci: show compiler in cross/cygwin job names (c9124088)
-- ci: add OpenBSD (v7.4) job + fix build error in example (0c9a8e35 #1250)
-- ci: add NetBSD (v9.3) job (65c7a7a5)
-- ci: update and speed up FreeBSD job (eee4e805)
-- ci: use absolute path in `CMAKE_INSTALL_PREFIX` (74948816 #1247)
-- ci: boost mbedTLS build speed (236e79a1 #1245)
-- ci: add BoringSSL job (cmake, gcc, amd64) (c9dd3566 #1233)
-- ci: fixup FreeBSD version, bump mbedTLS (fea6664e #1217)
-- ci: add FreeBSD 13.2 job (a7d2a573 #1215)
-- ci: mbedTLS 3.5.0 (5e190442 #1202)
-- ci: update actions, use shallow clones with appveyor (d468a33f #1199)
-- ci: replace `mv` + `chmod` with `install` in `Dockerfile` (5754fed6 #1175)
-- ci: set file mode early in `appveyor_docker.yml` (633db55f)
-- ci: add spellcheck (codespell) (a79218d3)
-- ci: add MSYS builds (autotools and cmake) (d43b8d9b #1162)
-- ci: add Cygwin builds (autotools and cmake) (f1e96e73 #1161)
-- ci: add mingw-w64 UWP build (1215aa5f #1155 #1147)
-- ci: add missing timeout to 'autotools distcheck' step (6265ffdb)
-- ci: add non-static autotools i386 build, ignore GHA updates on AppVeyor (c6e137f7 #1074 #1072)
-- ci: prefer `=` operator in shell snippets (e5c03043 #1073)
-- ci: drop redundant/unused vars, sync var names (ab8e95bc #1059)
-- ci: add i386 Linux build (with mbedTLS) (abdf40c7 #1057 #1053)
-- ci/appveyor: reduce test runs (workaround for infrastructure permafails) (b5e68bdc #1461)
-- ci/appveyor: increase wait for SSH server on GHA (bf3af90b)
-- ci/appveyor: bump to OpenSSL 3.2.1 (53d9c1a6 #1363 #1348)
-- ci/appveyor: re-enable parallel mode (e190e5b2 #1294 #884 #867)
-- ci/appveyor: delete UWP job broken since Visual Studio upgrade (d0a7f1da #1275)
-- ci/appveyor: YAML/PowerShell formatting, shorten variable name (06fd721f #1200)
-- ci/appveyor: move to pure PowerShell (8a081fd9 #1197)
-- ci/GHA: revert concurrency and improve permissions (e4c042f6)
-- ci/GHA: FreeBSD 14.1, actions bump (ae04b1b9 #1424)
-- ci/GHA: fix wolfSSL-from-source AES-GCM tests (1c0b07a7 #1409 #1408)
-- ci/GHA: add Linux job with latest wolfSSL built from source (d4cea53f #1408 #1299 #1020)
-- ci/GHA: tidy up build-from-source steps (2c633033)
-- ci/GHA: show configure logs on failure and other tidy-ups (dab48398 #1403)
-- ci/GHA: bump parallel jobs to nproc+1 (6f3d3bc8 #1402)
-- ci/GHA: show test logs on failure (b8ffa7a5 #1401)
-- ci/GHA: fix `Dockerfile` failing after Ubuntu package update (839bb84e #1400)
-- ci/GHA: use ubuntu-latest with OmniOS job (50143d58)
-- ci/GHA: shell syntax tidy-up (3b23e039 #1390)
-- ci/GHA: bump NetBSD/OpenBSD, add NetBSD arm64 job (e980af72 #1388)
-- ci/GHA: tidy up wolfSSL autotools config on macOS (5953c1f1 #1383)
-- ci/GHA: shorter mbedTLS autotools workaround (736e3d7d #1382 #1381)
-- ci/GHA: fix gcrypt with autotools/macOS/Homebrew/ARM64 (ae2770de #1377)
-- ci/GHA: fix verbose option for autotools jobs (499b27ae #1376)
-- ci/GHA: dump `config.log` on failure for macOS autotools jobs (4fa69214 #1375)
-- ci/GHA: fix `autoreconf` failure on macOS/Homebrew (0b64b30b #1374)
-- ci/GHA: fixup Homebrew location (for ARM runners) (6128aee0 #1373)
-- ci/GHA: review/fixup auto-cancel settings (b08cfbc9 #1292)
-- ci/GHA: restore curly braces in `if` (36748270 #1145)
-- ci/GHA: simplify `if` strings (cab3db58 #1140)
-- cmake: sync and improve Find modules, add `pkg-config` native detection (45064137 #1445 #1420)
-- cmake: generate `LIBSSH2_PC_LIBS_PRIVATE` dynamically (c87f1296 #1466)
-- cmake: add comment about `ibssh2.pc.in` variables (14b1b9d0)
-- cmake: support absolute `CMAKE_INSTALL_INCLUDEDIR`/`CMAKE_INSTALL_LIBDIR` (d70cee36 #1465)
-- cmake: rename two variables and initialize them (0fce9dcc #1464)
-- cmake: prefer `find_dependency()` in `libssh2-config.cmake` (d9c2e550 #1460)
-- cmake: tidy up syntax, minor improvements (9d9ee780 #1446)
-- cmake: rename mbedTLS and wolfSSL Find modules (570de0f2)
-- cmake: fixup version detection in mbedTLS Find module (8e3c40b2 #1444)
-- cmake: mbedTLS detection tidy-ups (6d1d13c2 #1438)
-- cmake: add quotes, delete ending dirseps (2bb46d44 #1437 #1166)
-- cmake: sync formatting in `cmake/Find*` modules (a0310699)
-- cmake: tidy up function name casing in `CopyRuntimeDependencies.cmake` (03547cb8)
-- cmake: use the imported target of FindOpenSSL module (82b09f9b #1322)
-- cmake: rename picky warnings script (64d6789f #1225)
-- cmake: fix multiple include of libssh2 package (932d6a32 #1216)
-- cmake: show crypto backend in feature summary (20387285 #1211)
-- cmake: simplify showing CMake version (fc00bdd7 #1203)
-- cmake: cleanup mbedTLS version detection more (4c241d5c #1196 #1192)
-- cmake: delete duplicate `include()` (30eef0a6)
-- cmake: improve/fix mbedTLS detection (41594675 #1192 #1191)
-- cmake: tidy-up `foreach()` syntax (4a64ca14 #1180)
-- cmake: verify `libssh2_VERSION` in integration tests (a20572e9)
-- cmake: show cmake versions in ci (87f5769b)
-- cmake: quote more strings (e9c7d3af #1173)
-- cmake: add `ExternalProject` integration test (aeaefaf6 #1171)
-- cmake: add integration tests (8715c3d5 #1170)
-- cmake: (re-)add aliases for `add_subdirectory()` builds (4ff64ae3 #1169)
-- cmake: style tidy-up (3fa5282d #1166)
-- cmake: add `LIB_NAME` variable (5453fc80 #1159)
-- cmake: tidy-up concatenation in `CMAKE_MODULE_PATH` (ae7d5108 #1157)
-- cmake: replace `libssh2` literals with `PROJECT_NAME` variable (72fd2595 #1152)
-- cmake: fix `STREQUAL` check in error branch (42d3bf13 #1151)
-- cmake: cache more config values on Windows (11a03690 #1142)
-- cmake: streamline invocation (f58f77b5 #1138)
-- cmake: merge `set_target_properties()` calls (a9091007 #1132)
-- cmake: (re-)add zlib to `Libs.private` in `libssh2.pc` (64643018 #1131)
-- cmake: use `wolfssl/options.h` for detection, like autotools (c5ec6c49 #1130)
-- cmake: add openssl libs to `Libs.private` in `libssh2.pc` (5cfa59d3 #1127)
-- cmake: bump minimum CMake version to v3.7.0 (9cd18f45 #1126)
-- cmake: CMAKE_SOURCE_DIR -> PROJECT_SOURCE_DIR (0f396aa9 #1121)
-- cmake: tidy-ups (2fc36790 #1122)
-- cmake: re-add `Libssh2:libssh2` for compatibility + lowercase namespace (2da13c13 #1104 #731 #1103)
-- copyright: remove years from copyright headers (187d89bb #1082)
-- disable DSA by default (b7ab0faa #1435 #1433)
-- docs: update `INSTALL_AUTOTOOLS` (2f0efde3 #1316)
-- docs: replace SHA1 with SHA256 in CMake example (766bde9f)
-- example: restore `sys/time.h` for AIX (24503cb9 #1340 #1335 #1334 #1001 regr: e53aae0e)
-- example: use `libssh2_socket_t` in X11 example (3f60ccb7)
-- example: replace remaining libssh2_scp_recv with libssh2_scp_recv2 in output messages (8d69e63d #1258 follow: 6c84a426)
-- example: fix regression in `ssh2_exec.c` (279a2e57 #1106 #861 #846 #1105 regr: b13936bd)
-- example, tests: call `WSACleanup()` for each `WSAStartup()` (94b6bad3 #1283)
-- example, tests: fix/silence `-Wformat-truncation=2` gcc warnings (744e059f)
-- hostkey: do not advertise ssh-rsa when SHA1 is disabled (82d1b8ff #1093 #1092)
-- kex: prevent possible double free of hostkey (b3465418 #1452)
-- kex: always check for null pointers before calling _libssh2_bn_set_word (9f23a3bb #1423)
-- kex: fix a memory leak in key exchange (19101843 #1412 #1404)
-- kex: always add extension indicators to kex_algorithms (00e2a07e #1327 #1326)
-- libssh2.h: add deprecated function warnings (9839ebe5 #1289 #1260)
-- libssh2.h: add portable `LIBSSH2_SOCKET_CLOSE()` macro (28dbf016 #1278)
-- libssh2.h: use `_WIN32` for Windows detection instead of rolling our own (631e7734 #1238)
-- libssh2.pc: reference mbedcrypto pkgconfig (c149a127 #1405)
-- libssh2.pc: re-add & extend support for static-only libssh2 builds (624abe27 #1119 #1114)
-- libssh2.pc: don't put `@LIBS@` in pc file (1209c16d)
-- mac: add empty hash functions for `mac_method_hmac_aesgcm` to not crash when e.g. setting `LIBSSH2_METHOD_CRYPT_CS` (b2738391 #1321)
-- mac: handle low-level errors (f64885b6 #1297)
-- Makefile.mk: delete Windows-focused raw GNU Make build (43485579 #1204)
-- maketgz: reproducible tarballs/zip, display tarball hashes (d52fe1b4 #1357 #1359)
-- maketgz: `set -eu`, reproducibility, improve zip, add CI test (cba7f975 #1353)
-- man: improve `libssh2_userauth_publickey_from*` manpages (581b72aa #1347 #1308 #652)
-- man: fix double spaces and dash escaping (a3ffc422 #1210)
-- man: add description to `libssh2_session_get_blocking.3` (67e39091 #1185)
-- mbedtls: always init ECDSA mbedtls_pk_context (a50d7deb #1430)
-- mbedtls: correctly initialize values (ECDSA) (1701d5c0 #1428 #1421)
-- mbedtls: expose `mbedtls_pk_load_file()` for our use (1628f6ca #1421 #1393 #1349 follow: e973493f)
-- mbedtls: add workaround + FIXME to build with 3.6.0 (2e4c5ec4 #1349)
-- mbedtls: improve disabling `-Wredundant-decls` (ecec68a2 #1226 #1224)
-- mbedtls: include `version.h` for `MBEDTLS_VERSION_NUMBER` (9d7bc253 #1095 #1094)
-- mbedtls: use more `size_t` to sync up with `crypto.h` (1153ebde #1054 #879 #846 #1053)
-- md5: allow disabling old-style encrypted private keys at build-time (eb9f9de2 #1181)
-- mingw: fix printf mask for 64-bit integers (36c1e1d1 #1091 #876 #846 #1090)
-- misc: flatten `_libssh2_explicit_zero` if tree (74e74288 #1149)
-- NMakefile: delete (c515eed3 #1134 #1129)
-- openssl: free allocated resources when using openssl3 (b942bad1 #1459)
-- openssl: fix memory leaks in `_libssh2_ecdsa_curve_name_with_octal_new` and `_libssh2_ecdsa_verify` (8d3bc19b #1449)
-- openssl: fix calculating DSA public key with OpenSSL 3 (8b3c6e9d #1380)
-- openssl: initialize BIGNUMs to NULL in `gen_publickey_from_dsa` for OpenSSL 3 (f1133c75 #1320)
-- openssl: fix cppcheck found NULL dereferences (f2945905 #1304)
-- openssl: delete internal `read_openssh_private_key_from_memory()` (34aff5ff #1306)
-- openssl: use OpenSSL 3 HMAC API, add `no-deprecated` CI job (363dcbf4 #1243 #1235 #1207)
-- openssl: make a function static, add `#ifdef` comments (efee9133 #1246 #248 follow: 03092292)
-- openssl: fix DSA code to use OpenSSL 3 API (82581941 #1244 #1207)
-- openssl: fix `EC_KEY` reference with OpenSSL 3 `no-deprecated` build (487152f4 #1236 #1235 #1207)
-- openssl: use non-deprecated APIs with OpenSSL 3.x (b0ab005f #1207)
-- openssl: silence `-Wunused-value` warnings (bf285500 #1205)
-- openssl: use automatic initialization with LibreSSL 2.7.0+ (d79047c9 #1146 #302)
-- openssl: add missing check for `LIBRESSL_VERSION_NUMBER` before use (4a42f42e #1117 #1115)
-- os400: drop vsprintf() use (40e817ff #1462 #1457)
-- os400: Add two recent files to the distribution (e4c65e5b #1364)
-- os400: fix shellcheck warnings in scripts (fixups) (81341e1e #1366 #1364 #1358)
-- os400: fix shellcheck warnings in scripts (c6625707 #1358)
-- os400: maintain up to date (8457c37a #1309)
-- packet: properly bounds check packet_authagent_open() (88a960a8 #1179)
-- pem: fix private keys encrypted with AES-GCM methods (e87bdefa #1133)
-- reuse: upgrade to `REUSE.toml` (70b8bf31 #1419)
-- reuse: fix duplicate copyright warning (b9a4ed83)
-- reuse: comply with 3.1 spec and 2.0.0 checker (fe6239a1 #1102 #1101 #1098)
-- reuse: provide SPDX identifiers (f6aa31f4 #1084)
-- scp: fix missing cast for targets without large file support (c317e06f #1060 #1057 #1002 regr: 5db836b2)
-- session: support server banners up to 8192 bytes (was: 256) (1a9e8811 #1443 #1442)
-- session: add `libssh2_session_callback_set2()` (c0f69548 #1285)
-- session: handle EINTR from send/recv/poll/select to try again as the error is not fatal (798ed4a7 #1058 #955)
-- sftp: increase SFTP_HANDLE_MAXLEN back to 4092 (75de6a37 #1422)
-- sftp: implement posix-rename@openssh.com (fb652746 #1386)
-- src: implement chacha20-poly1305@openssh.com (492bc543 #1426 #584)
-- src: use `UINT32_MAX` (dc206408 #1413)
-- src: fix type warning in `libssh2_sftp_unlink` macro (ac2e8c73 #1406)
-- src: check the return value from `_libssh2_bn_*()` functions (95c824d5 #1354)
-- src: support RSA-SHA2 cert-based authentication (rsa-sha2-512_cert and rsa-sha2-256_cert) (3a6ab70d #1314)
-- src: check hash update/final success (4718ede4 #1303 #1301)
-- src: check hash init success (2ed9eb92 #1301)
-- src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack" (d34d9258 #1291 #1290)
-- src: disable `-Wsign-conversion` warnings, add option to re-enable (6e451669 #1284 #1257)
-- src: fix gcc 13 `-Wconversion` warning on Darwin (8cca7b77 #1209 follow: 08354e0a)
-- src: drop a redundant `#include` (1f0174d0 #1153)
-- src: improve MSVC C4701 warning fix (8b924999 #1086 #876 #1083)
-- src: bump `hash_len` to `size_t` in `LIBSSH2_HOSTKEY_METHOD` (8b917d76 #1076)
-- src: bump DSA and ECDSA sign `hash_len` to `size_t` (7b8e0225 #1055)
-- tests: avoid using `MAXPATHLEN`, for portability (12427f4f #1415 #198 #1414)
-- tests: fix excluding AES-GCM tests (fbd9d192 #1410)
-- tests: drop default cygpath option `-u` (38e50aa0)
-- tests: fix shellcheck issues in `test_sshd.test` (a2ac8c55)
-- tests: sync port number type with the rest of codebase (eb996af8)
-- tests: fall back to `$LOGNAME` for username (5326a5ce #1241 #1240)
-- tests: show cmake version used in integration tests (2cd2f40e #1201)
-- tests: formatting and tidy-ups (e61987a3)
-- tests: replace FIXME with comments (1a99a86a)
-- tests: add aes256-gcm encrypted key test (802336cf #1135 #1133)
-- tests: trap signals in scripts (b2916b28 #1098)
-- tests: cast to avoid `-Wchar-subscripts` with Cygwin (43df6a46 #1081 #1080)
-- test_read: make it run without Docker (57e9d18e #1139)
-- test_sshd.test: show sshd and test connect logs on harness failure (299c2040 #1097)
-- test_sshd.test: set a safe PID directory (e8cabdcf #1089)
-- test_sshd.test: minor cleanups (d29eea1d)
-- tidy-up: link updates (c905bfd2 #1434)
-- tidy-up: typo in comment (792e1b6f)
-- tidy-up: fix typo found by codespell (706ec36d)
-- tidy-up: bump casts from int to long for large C99 types in printfs (2e5a8719 #1264 #1257)
-- tidy-up: `unsigned` -> `unsigned int` (b136c379)
-- tidy-up: stop using leading underscores in macro names (c6589b88 #1248)
-- tidy-up: around `stdint.h` (bfa00f1b #1212)
-- tidy-up: fix typo in `readme.vms` (a9a79e7a)
-- tidy-up: use built-in `_WIN32` macro to detect Windows (6fbc9505 #1195)
-- tidy-up: drop `www.` from `www.libssh2.org` (6e3e8839 #1172)
-- tidy-up: delete duplicate word from comment (76307435)
-- tidy-up: avoid exclamations, prefer single quotes, in outputs (003fb454 #1079)
-- TODO: disable or drop weak algos (0b4bdc85 #1261)
-- transport: fix unstable connections over non-blocking sockets (de004875 #1454 #720 #1431 #1397)
-- transport: check ETM on remote end when receiving (bde10825 #1332 #1331)
-- transport: fix incorrect byte offset in debug message (2388a3aa #1096)
-- userauth: avoid oob with huge interactive kbd response (f3a85cad #1337)
-- userauth: add a new structure to separate memory read and file read (63b4c20e #773)
-- userauth: check whether `*key_method` is a NULL pointer instead of `key_method` (bec57c40)
-- wincng: fix `DH_GEX_MAXGROUP` set higher than supported (48584671 #1372 #493)
-- wincng: add to ci/GHA, add `./configure` option `--enable-ecdsa-wincng` (3f98bfb0 #1368 #1315)
-- wincng: add ECDSA support for host and user authentication (3e723437 #1315)
-- wincng: prefer `ULONG`/`DWORD` over `unsigned long` (186c1d63 #1165)
-- wincng: tidy-ups (7bb669b5 #1164)
-- wolfssl: drop header path hack (8ae1b2d7 #1439)
-- wolfssl: fix `EVP_Cipher()` use with v5.6.0 and older (a5b0fac2 #1407 #1394 #797 #1299 #1020)
-- wolfssl: bump version in upstream issue comment (5cab802c)
-- wolfssl: require v5.4.0 for AES-GCM (260a721c #1411 #1299 #1020)
-- wolfssl: enable debug logging in wolfSSL when compiled in (76e7a68a #1310)
-
-This release would not have looked like this without help, code, reports and
-advice from friends like these:
-
- Viktor Szakats, Michael Buckley, Patrick Monnerat, Ren Mingshuai,
- Will Cosgrove, Daniel Stenberg, Josef Cejka, Nicolas Mora, Ryan Kelley,
- Aaron Stone, Adam, Anders Borum, András Fekete, Andrei Augustin, binary1248,
- Brian Inglis, brucsc on GitHub, concussious on github, Dan Fandrich,
- dksslq on github, Haowei Hsu, Harmen Stoppels, Harry Mallon, Jack L,
- Jakob Egger, Jiwoo Park, João M. S. Silva, Joel Depooter, Johannes Passing,
- Jose Quaresma, Juliusz Sosinowicz, Kai Pastor, Kenneth Davidson,
- klux21 on github, Lyndon Brown, Marc Hoersken, mike-jumper, naddy,
- Nursan Valeyev, Paul Howarth, PewPewPew, Radek Brich, rahmanih on github,
- rolag on github, Seo Suchan, shubhamhii on github, Steve McIntyre,
- Tejaswi Kandula, Tobias Stoeckmann, Trzik, Xi Ruoyao
diff --git a/deps/curl/dep/libssh2/docs/AUTHORS.txt b/deps/curl/dep/libssh2/docs/AUTHORS.txt
deleted file mode 100644
index e94299fcf..000000000
--- a/deps/curl/dep/libssh2/docs/AUTHORS.txt
+++ /dev/null
@@ -1,80 +0,0 @@
- libssh2 is the result of many friendly people. This list is an attempt to
- mention all contributors. If we have missed anyone, tell us!
-
- This list of names is a-z sorted.
-
-Adam Gobiowski
-Alexander Holyapin
-Alexander Lamaison
-Alfred Gebert
-Ben Kibbey
-Bjorn Stenborg
-Carlo Bramini
-Cristian Rodríguez
-Daiki Ueno
-Dan Casey
-Dan Fandrich
-Daniel Stenberg
-Dave Hayden
-Dave McCaldon
-David J Sullivan
-David Robins
-Dmitry Smirnov
-Douglas Masterson
-Edink Kadribasic
-Erik Brossler
-Francois Dupoux
-Gellule Xg
-Grubsky Grigory
-Guenter Knauf
-Heiner Steven
-Henrik Nordstrom
-James Housleys
-Jasmeet Bagga
-Jean-Louis Charton
-Jernej Kovacic
-Joey Degges
-John Little
-Jose Baars
-Jussi Mononen
-Kamil Dudka
-Lars Nordin
-Mark McPherson
-Mark Smith
-Markus Moeller
-Matt Lilley
-Matthew Booth
-Maxime Larocque
-Mike Protts
-Mikhail Gusarov
-Neil Gierman
-Olivier Hervieu
-Paul Howarth
-Paul Querna
-Paul Veldkamp
-Peter Krempa
-Peter O'Gorman
-Peter Stuge
-Pierre Joye
-Rafael Kitover
-Romain Bondue
-Sara Golemon
-Satish Mittal
-Sean Peterson
-Selcuk Gueney
-Simon Hart
-Simon Josefsson
-Sofian Brabez
-Steven Ayre
-Steven Dake
-Steven Van Ingelgem
-TJ Saunders
-Tommy Lindgren
-Tor Arntsen
-Viktor Szakats
-Vincent Jaulin
-Vincent Torri
-Vlad Grachov
-Wez Furlong
-Yang Tse
-Zl Liu
diff --git a/deps/curl/dep/libssh2/docs/HACKING-CRYPTO.txt b/deps/curl/dep/libssh2/docs/HACKING-CRYPTO.txt
deleted file mode 100644
index 1ef6c4492..000000000
--- a/deps/curl/dep/libssh2/docs/HACKING-CRYPTO.txt
+++ /dev/null
@@ -1,989 +0,0 @@
- Definitions needed to implement a specific crypto library
-
-This document offers some hints about implementing a new crypto library
-interface.
-
-A crypto library interface consists of at least a header file, defining
-entities referenced from the libssh2 core modules.
-Real code implementation (if needed), is left at the implementor's choice.
-
-This document lists the entities that must/may be defined in the header file.
-
-Procedures listed as "void" may indeed have a result type: the void indication
-indicates the libssh2 core modules never use the function result.
-
-
-0) Build system.
-
-Adding a crypto backend to the autotools build system (./configure) is easy:
-
-0.1) Add one new line in configure.ac
-
-m4_set_add([crypto_backends], [newname])
-
-This automatically creates a --with-crypto=newname option.
-
-0.2) Add an m4_case stanza to LIBSSH2_CRYPTO_CHECK in acinclude.m4
-
-This must check for all required libraries, and if found set and AC_SUBST a
-variable with the library linking flags. The recommended method is to use
-LIBSSH2_LIB_HAVE_LINKFLAGS from LIBSSH2_CRYPTO_CHECK, which automatically
-creates and handles a --with-$newname-prefix option and sets an
-LTLIBNEWNAME variable on success.
-
-0.3) Add new header to src/Makefile.inc
-
-0.4) Include new source in src/crypto.c
-
-0.5) Add a new block in configure.ac
-
-```
-elif test "$found_crypto" = "newname"; then
- LIBS="${LIBS} ${LTLIBNEWNAME}"
-```
-
-0.6) Add CMake detection logic to CMakeLists.txt
-
-1) Crypto library initialization/termination.
-
-void libssh2_crypto_init(void);
-Initializes the crypto library. May be an empty macro if not needed.
-
-void libssh2_crypto_exit(void);
-Terminates the crypto library use. May be an empty macro if not needed.
-
-1.1) Crypto runtime detection
-
-The libssh2_crypto_engine_t enum must include the new engine, and
-libssh2_crypto_engine() must return it when it is built in.
-
-2) HMAC
-
-libssh2_hmac_ctx
-Type of an HMAC computation context. Generally a struct.
-Used for all hash algorithms.
-
-int _libssh2_hmac_ctx_init(libssh2_hmac_ctx *ctx);
-Initializes the HMAC computation context ctx.
-Called before setting-up the hash algorithm.
-Must return 1 for success and 0 for failure.
-
-int _libssh2_hmac_update(libssh2_hmac_ctx *ctx,
- const void *data, int datalen);
-Continue computation of an HMAC on datalen bytes at data using context ctx.
-Must return 1 for success and 0 for failure.
-
-int _libssh2_hmac_final(libssh2_hmac_ctx *ctx,
- void output[]);
-Get the computed HMAC from context ctx into the output buffer. The
-minimum data buffer size depends on the HMAC hash algorithm.
-Must return 1 for success and 0 for failure.
-
-void _libssh2_hmac_cleanup(libssh2_hmac_ctx *ctx);
-Releases the HMAC computation context at ctx.
-
-
-3) Hash algorithms.
-
-3.1) SHA-1
-Must always be implemented.
-
-SHA_DIGEST_LENGTH
-#define to 20, the SHA-1 digest length.
-
-libssh2_sha1_ctx
-Type of an SHA-1 computation context. Generally a struct.
-
-int libssh2_sha1_init(libssh2_sha1_ctx *x);
-Initializes the SHA-1 computation context at x.
-Returns 1 for success and 0 for failure
-
-int libssh2_sha1_update(libssh2_sha1_ctx ctx,
- const unsigned char *data,
- size_t len);
-Continue computation of SHA-1 on len bytes at data using context ctx.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha1_final(libssh2_sha1_ctx ctx,
- unsigned char output[SHA_DIGEST_LEN]);
-Get the computed SHA-1 signature from context ctx and store it into the
-output buffer.
-Release the context.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_hmac_sha1_init(libssh2_hmac_ctx *ctx,
- const void *key,
- int keylen);
-Setup the HMAC computation context ctx for an HMAC-SHA-1 computation using the
-keylen-byte key. Is invoked just after libssh2_hmac_ctx_init().
-Returns 1 for success and 0 for failure.
-
-3.2) SHA-256
-Must always be implemented.
-
-SHA256_DIGEST_LENGTH
-#define to 32, the SHA-256 digest length.
-
-libssh2_sha256_ctx
-Type of an SHA-256 computation context. Generally a struct.
-
-int libssh2_sha256_init(libssh2_sha256_ctx *x);
-Initializes the SHA-256 computation context at x.
-Returns 1 for success and 0 for failure
-
-int libssh2_sha256_update(libssh2_sha256_ctx ctx,
- const unsigned char *data,
- size_t len);
-Continue computation of SHA-256 on len bytes at data using context ctx.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha256_final(libssh2_sha256_ctx ctx,
- unsigned char output[SHA256_DIGEST_LENGTH]);
-Gets the computed SHA-256 signature from context ctx into the output buffer.
-Release the context.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha256(const unsigned char *message,
- size_t len,
- unsigned char output[SHA256_DIGEST_LENGTH]);
-Computes the SHA-256 signature over the given message of length len and
-store the result into the output buffer.
-Return 1 if error, else 0.
-Note: Seems unused in current code, but defined in each crypto library backend.
-
-LIBSSH2_HMAC_SHA256
-#define as 1 if the crypto library supports HMAC-SHA-256, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-int libssh2_hmac_sha256_init(libssh2_hmac_ctx *ctx,
- const void *key,
- int keylen);
-Setup the HMAC computation context ctx for an HMAC-256 computation using the
-keylen-byte key. Is invoked just after libssh2_hmac_ctx_init().
-Returns 1 for success and 0 for failure.
-
-3.3) SHA-384
-Mandatory if ECDSA is implemented. Can be omitted otherwise.
-
-SHA384_DIGEST_LENGTH
-#define to 48, the SHA-384 digest length.
-
-libssh2_sha384_ctx
-Type of an SHA-384 computation context. Generally a struct.
-
-int libssh2_sha384_init(libssh2_sha384_ctx *x);
-Initializes the SHA-384 computation context at x.
-Returns 1 for success and 0 for failure
-
-int libssh2_sha384_update(libssh2_sha384_ctx ctx,
- const unsigned char *data,
- size_t len);
-Continue computation of SHA-384 on len bytes at data using context ctx.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha384_final(libssh2_sha384_ctx ctx,
- unsigned char output[SHA384_DIGEST_LENGTH]);
-Gets the computed SHA-384 signature from context ctx into the output buffer.
-Release the context.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha384(const unsigned char *message,
- size_t len,
- unsigned char output[SHA384_DIGEST_LENGTH]);
-Computes the SHA-384 signature over the given message of length len and
-store the result into the output buffer.
-Return 1 if error, else 0.
-
-3.4) SHA-512
-Must always be implemented.
-
-SHA512_DIGEST_LENGTH
-#define to 64, the SHA-512 digest length.
-
-libssh2_sha512_ctx
-Type of an SHA-512 computation context. Generally a struct.
-
-int libssh2_sha512_init(libssh2_sha512_ctx *x);
-Initializes the SHA-512 computation context at x.
-Returns 1 for success and 0 for failure
-
-int libssh2_sha512_update(libssh2_sha512_ctx ctx,
- const unsigned char *data,
- size_t len);
-Continue computation of SHA-512 on len bytes at data using context ctx.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha512_final(libssh2_sha512_ctx ctx,
- unsigned char output[SHA512_DIGEST_LENGTH]);
-Gets the computed SHA-512 signature from context ctx into the output buffer.
-Release the context.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_sha512(const unsigned char *message,
- size_t len,
- unsigned char output[SHA512_DIGEST_LENGTH]);
-Computes the SHA-512 signature over the given message of length len and
-store the result into the output buffer.
-Return 1 if error, else 0.
-Note: Seems unused in current code, but defined in each crypto library backend.
-
-LIBSSH2_HMAC_SHA512
-#define as 1 if the crypto library supports HMAC-SHA-512, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-int libssh2_hmac_sha512_init(libssh2_hmac_ctx *ctx,
- const void *key,
- int keylen);
-Setup the HMAC computation context ctx for an HMAC-512 computation using the
-keylen-byte key. Is invoked just after libssh2_hmac_ctx_init().
-Returns 1 for success and 0 for failure.
-
-3.5) MD5
-LIBSSH2_MD5
-#define to 1 if the crypto library supports MD5, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-MD5_DIGEST_LENGTH
-#define to 16, the MD5 digest length.
-
-libssh2_md5_ctx
-Type of an MD5 computation context. Generally a struct.
-
-int libssh2_md5_init(libssh2_md5_ctx *x);
-Initializes the MD5 computation context at x.
-Returns 1 for success and 0 for failure
-
-int libssh2_md5_update(libssh2_md5_ctx ctx,
- const unsigned char *data,
- size_t len);
-Continues computation of MD5 on len bytes at data using context ctx.
-Returns 1 for success and 0 for failure.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_md5_final(libssh2_md5_ctx ctx,
- unsigned char output[MD5_DIGEST_LENGTH]);
-Gets the computed MD5 signature from context ctx into the output buffer.
-Release the context.
-Note: if the ctx parameter is modified by the underlying code,
-this procedure must be implemented as a macro to map ctx --> &ctx.
-Must return 1 for success and 0 for failure.
-
-int libssh2_hmac_md5_init(libssh2_hmac_ctx *ctx,
- const void *key,
- int keylen);
-Setup the HMAC computation context ctx for an HMAC-MD5 computation using the
-keylen-byte key. Is invoked just after libssh2_hmac_ctx_init().
-Returns 1 for success and 0 for failure.
-
-3.6) RIPEMD-160
-LIBSSH2_HMAC_RIPEMD
-#define as 1 if the crypto library supports HMAC-RIPEMD-160, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-int libssh2_hmac_ripemd160_init(libssh2_hmac_ctx *ctx,
- const void *key,
- int keylen);
-Setup the HMAC computation context ctx for an HMAC-RIPEMD-160 computation using
-the keylen-byte key. Is invoked just after libssh2_hmac_ctx_init().
-Returns 1 for success and 0 for failure.
-
-
-4) Bidirectional key ciphers.
-
-_libssh2_cipher_ctx
-Type of a cipher computation context.
-
-_libssh2_cipher_type(name);
-Macro defining name as storage identifying a cipher algorithm for
-the crypto library interface. No trailing semicolon.
-
-int _libssh2_cipher_init(_libssh2_cipher_ctx *h,
- _libssh2_cipher_type(algo),
- unsigned char *iv,
- unsigned char *secret,
- int encrypt);
-Creates a cipher context for the given algorithm with the initialization vector
-iv and the secret key secret. Prepare for encryption or decryption depending on
-encrypt.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_cipher_crypt(_libssh2_cipher_ctx *ctx,
- _libssh2_cipher_type(algo),
- int encrypt,
- unsigned char *block,
- size_t blocksize,
- int firstlast);
-Encrypt or decrypt in-place data at (block, blocksize) using the given
-context and/or algorithm.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-void _libssh2_cipher_dtor(_libssh2_cipher_ctx *ctx);
-Release cipher context at ctx.
-
-4.1) AES
-4.1.1) AES in CBC block mode.
-LIBSSH2_AES
-#define as 1 if the crypto library supports AES in CBC mode, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-_libssh2_cipher_aes128
-AES-128-CBC algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-_libssh2_cipher_aes192
-AES-192-CBC algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-_libssh2_cipher_aes256
-AES-256-CBC algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-4.1.2) AES in CTR block mode.
-LIBSSH2_AES_CTR
-#define as 1 if the crypto library supports AES in CTR mode, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-_libssh2_cipher_aes128ctr
-AES-128-CTR algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-_libssh2_cipher_aes192ctr
-AES-192-CTR algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-_libssh2_cipher_aes256ctr
-AES-256-CTR algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-4.2) Blowfish in CBC block mode.
-LIBSSH2_BLOWFISH
-#define as 1 if the crypto library supports blowfish in CBC mode, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-_libssh2_cipher_blowfish
-Blowfish-CBC algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-4.3) RC4.
-LIBSSH2_RC4
-#define as 1 if the crypto library supports RC4 (arcfour), else 0.
-If defined as 0, the rest of this section can be omitted.
-
-_libssh2_cipher_arcfour
-RC4 algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-4.4) CAST5 in CBC block mode.
-LIBSSH2_CAST
-#define 1 if the crypto library supports cast, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-_libssh2_cipher_cast5
-CAST5-CBC algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-4.5) Triple DES in CBC block mode.
-LIBSSH2_3DES
-#define as 1 if the crypto library supports TripleDES in CBC mode, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-_libssh2_cipher_3des
-TripleDES-CBC algorithm identifier initializer.
-#define with constant value of type _libssh2_cipher_type().
-
-
-5) Diffie-Hellman support.
-
-LIBSSH2_DH_GEX_MINGROUP
-The minimum Diffie-Hellman group length in bits supported by the backend.
-Usually defined as 2048.
-
-LIBSSH2_DH_GEX_OPTGROUP
-The preferred Diffie-Hellman group length in bits. Usually defined as 4096.
-
-LIBSSH2_DH_GEX_MAXGROUP
-The maximum Diffie-Hellman group length in bits supported by the backend.
-Usually defined as 8192.
-
-LIBSSH2_DH_MAX_MODULUS_BITS
-The maximum Diffie-Hellman modulus bit count accepted from the server. This
-value must be supported by the backend. Usually 16384.
-
-5.1) Diffie-Hellman context.
-_libssh2_dh_ctx
-Type of a Diffie-Hellman computation context.
-Must always be defined.
-
-5.2) Diffie-Hellman computation procedures.
-void libssh2_dh_init(_libssh2_dh_ctx *dhctx);
-Initializes the Diffie-Hellman context at `dhctx'. No effective context
-creation needed here.
-
-int libssh2_dh_key_pair(_libssh2_dh_ctx *dhctx, _libssh2_bn *public,
- _libssh2_bn *g, _libssh2_bn *p, int group_order,
- _libssh2_bn_ctx *bnctx);
-Generates a Diffie-Hellman key pair using base `g', prime `p' and the given
-`group_order'. Can use the given big number context `bnctx' if needed.
-The private key is stored as opaque in the Diffie-Hellman context `*dhctx' and
-the public key is returned in `public'.
-0 is returned upon success, else -1.
-
-int libssh2_dh_secret(_libssh2_dh_ctx *dhctx, _libssh2_bn *secret,
- _libssh2_bn *f, _libssh2_bn *p, _libssh2_bn_ctx * bnctx)
-Computes the Diffie-Hellman secret from the previously created context `*dhctx',
-the public key `f' from the other party and the same prime `p' used at
-context creation. The result is stored in `secret'.
-0 is returned upon success, else -1.
-
-void libssh2_dh_dtor(_libssh2_dh_ctx *dhctx)
-Destroys Diffie-Hellman context at `dhctx' and resets its storage.
-
-
-6) Big numbers.
-Positive multi-byte integers support is sufficient.
-
-6.1) Computation contexts.
-This has a real meaning if the big numbers computations need some context
-storage. If not, use a dummy type and functions (macros).
-
-_libssh2_bn_ctx
-Type of multiple precision computation context. May not be empty. if not used,
-#define as char, for example.
-
-_libssh2_bn_ctx _libssh2_bn_ctx_new(void);
-Returns a new multiple precision computation context.
-
-void _libssh2_bn_ctx_free(_libssh2_bn_ctx ctx);
-Releases a multiple precision computation context.
-
-6.2) Computation support.
-_libssh2_bn
-Type of multiple precision numbers (aka bignumbers or huge integers) for the
-crypto library.
-
-_libssh2_bn * _libssh2_bn_init(void);
-Creates a multiple precision number (preset to zero).
-
-_libssh2_bn * _libssh2_bn_init_from_bin(void);
-Create a multiple precision number intended to be set by the
-_libssh2_bn_from_bin() function (see below). Unlike _libssh2_bn_init(), this
-code may be a dummy initializer if the _libssh2_bn_from_bin() actually
-allocates the number. Returns a value of type _libssh2_bn *.
-
-void _libssh2_bn_free(_libssh2_bn *bn);
-Destroys the multiple precision number at bn.
-
-unsigned long _libssh2_bn_bytes(_libssh2_bn *bn);
-Get the number of bytes needed to store the bits of the multiple precision
-number at bn.
-
-unsigned long _libssh2_bn_bits(_libssh2_bn *bn);
-Returns the number of bits of multiple precision number at bn.
-
-int _libssh2_bn_set_word(_libssh2_bn *bn, unsigned long val);
-Sets the value of bn to val.
-Returns 1 on success, 0 otherwise.
-
-_libssh2_bn * _libssh2_bn_from_bin(_libssh2_bn *bn, int len,
- const unsigned char *val);
-Converts the positive integer in big-endian form of length len at val
-into a _libssh2_bn and place it in bn. If bn is NULL, a new _libssh2_bn is
-created.
-Returns a pointer to target _libssh2_bn or NULL if error.
-
-int _libssh2_bn_to_bin(_libssh2_bn *bn, unsigned char *val);
-Converts the absolute value of bn into big-endian form and store it at
-val. val must point to _libssh2_bn_bytes(bn) bytes of memory.
-Returns the length of the big-endian number.
-
-
-7) Private key algorithms.
-Format of an RSA public key:
-a) "ssh-rsa".
-b) RSA exponent, MSB first, with high order bit = 0.
-c) RSA modulus, MSB first, with high order bit = 0.
-Each item is preceded by its 32-bit byte length, MSB first.
-
-Format of a DSA public key:
-a) "ssh-dss".
-b) p, MSB first, with high order bit = 0.
-c) q, MSB first, with high order bit = 0.
-d) g, MSB first, with high order bit = 0.
-e) pub_key, MSB first, with high order bit = 0.
-Each item is preceded by its 32-bit byte length, MSB first.
-
-Format of an ECDSA public key:
-a) "ecdsa-sha2-nistp256" or "ecdsa-sha2-nistp384" or "ecdsa-sha2-nistp521".
-b) domain: "nistp256", "nistp384" or "nistp521" matching a).
-c) raw public key ("octal").
-Each item is preceded by its 32-bit byte length, MSB first.
-
-Format of an ED25519 public key:
-a) "ssh-ed25519".
-b) raw key (32 bytes).
-Each item is preceded by its 32-bit byte length, MSB first.
-
-int _libssh2_pub_priv_keyfile(LIBSSH2_SESSION *session,
- unsigned char **method,
- size_t *method_len,
- unsigned char **pubkeydata,
- size_t *pubkeydata_len,
- const char *privatekey,
- const char *passphrase);
-Reads a private key from file privatekey and extract the public key -->
-(pubkeydata, pubkeydata_len). Store the associated method (ssh-rsa or ssh-dss)
-into (method, method_len).
-Both buffers have to be allocated using LIBSSH2_ALLOC().
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_pub_priv_keyfilememory(LIBSSH2_SESSION *session,
- unsigned char **method,
- size_t *method_len,
- unsigned char **pubkeydata,
- size_t *pubkeydata_len,
- const char *privatekeydata,
- size_t privatekeydata_len,
- const char *passphrase);
-Gets a private key from bytes at (privatekeydata, privatekeydata_len) and
-extract the public key --> (pubkeydata, pubkeydata_len). Store the associated
-method (ssh-rsa or ssh-dss) into (method, method_len).
-Both buffers have to be allocated using LIBSSH2_ALLOC().
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-
-7.1) RSA
-LIBSSH2_RSA
-#define as 1 if the crypto library supports RSA, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-libssh2_rsa_ctx
-Type of an RSA computation context. Generally a struct.
-
-int _libssh2_rsa_new(libssh2_rsa_ctx **rsa,
- const unsigned char *edata,
- unsigned long elen,
- const unsigned char *ndata,
- unsigned long nlen,
- const unsigned char *ddata,
- unsigned long dlen,
- const unsigned char *pdata,
- unsigned long plen,
- const unsigned char *qdata,
- unsigned long qlen,
- const unsigned char *e1data,
- unsigned long e1len,
- const unsigned char *e2data,
- unsigned long e2len,
- const unsigned char *coeffdata, unsigned long coefflen);
-Creates a new context for RSA computations from key source values:
- pdata, plen Prime number p. Only used if private key known (ddata).
- qdata, qlen Prime number q. Only used if private key known (ddata).
- ndata, nlen Modulus n.
- edata, elen Exponent e.
- ddata, dlen e^-1 % phi(n) = private key. May be NULL if unknown.
- e1data, e1len dp = d % (p-1). Only used if private key known (dtata).
- e2data, e2len dq = d % (q-1). Only used if private key known (dtata).
- coeffdata, coefflen q^-1 % p. Only used if private key known.
-Returns 0 if OK.
-This procedure is already prototyped in crypto.h.
-Note: the current generic code only calls this function with e and n (public
-key parameters): unless used internally by the backend, it is not needed to
-support the private key and the other parameters here.
-
-int _libssh2_rsa_new_private(libssh2_rsa_ctx **rsa,
- LIBSSH2_SESSION *session,
- const char *filename,
- unsigned const char *passphrase);
-Reads an RSA private key from file filename into a new RSA context.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_rsa_new_private_frommemory(libssh2_rsa_ctx **rsa,
- LIBSSH2_SESSION *session,
- const char *data,
- size_t data_len,
- unsigned const char *passphrase);
-Gets an RSA private key from data into a new RSA context.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_rsa_sha1_verify(libssh2_rsa_ctx *rsa,
- const unsigned char *sig,
- size_t sig_len,
- const unsigned char *m, size_t m_len);
-Verify (sig, sig_len) signature of (m, m_len) using an SHA-1 hash and the
-RSA context.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_rsa_sha1_signv(LIBSSH2_SESSION *session,
- unsigned char **sig, size_t *siglen,
- int count, const struct iovec vector[],
- libssh2_rsa_ctx *ctx);
-RSA signs the SHA-1 hash computed over the count data chunks in vector.
-Signature is stored at (sig, siglen).
-Signature buffer must be allocated from the given session.
-Returns 0 if OK, else -1.
-Note: this procedure is optional: if provided, it MUST be defined as a macro.
-
-int _libssh2_rsa_sha1_sign(LIBSSH2_SESSION *session,
- libssh2_rsa_ctx *rsactx,
- const unsigned char *hash,
- size_t hash_len,
- unsigned char **signature,
- size_t *signature_len);
-RSA signs the (hash, hashlen) SHA-1 hash bytes and stores the allocated
-signature at (signature, signature_len).
-Signature buffer must be allocated from the given session.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-Note: this procedure is not used if macro _libssh2_rsa_sha1_signv() is defined.
-
-void _libssh2_rsa_free(libssh2_rsa_ctx *rsactx);
-Releases the RSA computation context at rsactx.
-
-LIBSSH2_RSA_SHA2
-#define as 1 if the crypto library supports RSA SHA2 256/512, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-int _libssh2_rsa_sha2_sign(LIBSSH2_SESSION * session,
- libssh2_rsa_ctx * rsactx,
- const unsigned char *hash,
- size_t hash_len,
- unsigned char **signature,
- size_t *signature_len);
-RSA signs the (hash, hashlen) SHA-2 hash bytes based on hash length and stores
-the allocated signature at (signature, signature_len).
-Signature buffer must be allocated from the given session.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-Note: this procedure is not used if both macros _libssh2_rsa_sha2_256_signv()
-and _libssh2_rsa_sha2_512_signv are defined.
-
-int _libssh2_rsa_sha2_256_signv(LIBSSH2_SESSION *session,
- unsigned char **sig, size_t *siglen,
- int count, const struct iovec vector[],
- libssh2_rsa_ctx *ctx);
-RSA signs the SHA-256 hash computed over the count data chunks in vector.
-Signature is stored at (sig, siglen).
-Signature buffer must be allocated from the given session.
-Returns 0 if OK, else -1.
-Note: this procedure is optional: if provided, it MUST be defined as a macro.
-
-int _libssh2_rsa_sha2_512_signv(LIBSSH2_SESSION *session,
- unsigned char **sig, size_t *siglen,
- int count, const struct iovec vector[],
- libssh2_rsa_ctx *ctx);
-RSA signs the SHA-512 hash computed over the count data chunks in vector.
-Signature is stored at (sig, siglen).
-Signature buffer must be allocated from the given session.
-Returns 0 if OK, else -1.
-Note: this procedure is optional: if provided, it MUST be defined as a macro.
-
-int _libssh2_rsa_sha2_verify(libssh2_rsa_ctx * rsa,
- size_t hash_len,
- const unsigned char *sig,
- size_t sig_len,
- const unsigned char *m, size_t m_len);
-Verify (sig, sig_len) signature of (m, m_len) using an SHA-2 hash based on
-hash length and the RSA context.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-7.2) DSA
-LIBSSH2_DSA
-#define as 1 if the crypto library supports DSA, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-
-libssh2_dsa_ctx
-Type of a DSA computation context. Generally a struct.
-
-int _libssh2_dsa_new(libssh2_dsa_ctx **dsa,
- const unsigned char *pdata,
- unsigned long plen,
- const unsigned char *qdata,
- unsigned long qlen,
- const unsigned char *gdata,
- unsigned long glen,
- const unsigned char *ydata,
- unsigned long ylen,
- const unsigned char *x, unsigned long x_len);
-Creates a new context for DSA computations from source key values:
- pdata, plen Prime number p. Only used if private key known (ddata).
- qdata, qlen Prime number q. Only used if private key known (ddata).
- gdata, glen G number.
- ydata, ylen Public key.
- xdata, xlen Private key. Only taken if xlen non-zero.
-Returns 0 if OK.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_dsa_new_private(libssh2_dsa_ctx **dsa,
- LIBSSH2_SESSION *session,
- const char *filename,
- unsigned const char *passphrase);
-Gets a DSA private key from file filename into a new DSA context.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_dsa_new_private_frommemory(libssh2_dsa_ctx **dsa,
- LIBSSH2_SESSION *session,
- const char *data,
- size_t data_len,
- unsigned const char *passphrase);
-Gets a DSA private key from the data_len-bytes data into a new DSA context.
-Must call _libssh2_init_if_needed().
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_dsa_sha1_verify(libssh2_dsa_ctx *dsactx,
- const unsigned char *sig,
- const unsigned char *m, size_t m_len);
-Verify (sig, siglen) signature of (m, m_len) using an SHA-1 hash and the
-DSA context.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_dsa_sha1_sign(libssh2_dsa_ctx *dsactx,
- const unsigned char *hash,
- size_t hash_len, unsigned char *sig);
-DSA signs the (hash, hash_len) data using SHA-1 and store the signature at sig.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-void _libssh2_dsa_free(libssh2_dsa_ctx *dsactx);
-Releases the DSA computation context at dsactx.
-
-
-7.3) ECDSA
-LIBSSH2_ECDSA
-#define as 1 if the crypto library supports ECDSA, else 0.
-If defined as 0, _libssh2_ec_key should be defined as void and the rest of
-this section can be omitted.
-
-EC_MAX_POINT_LEN
-Maximum point length. Usually defined as ((528 * 2 / 8) + 1) (= 133).
-
-libssh2_ecdsa_ctx
-Type of an ECDSA computation context. Generally a struct.
-
-_libssh2_ec_key
-Type of an elliptic curve key.
-
-libssh2_curve_type
-An enum type defining curve types. Current supported identifiers are:
- LIBSSH2_EC_CURVE_NISTP256
- LIBSSH2_EC_CURVE_NISTP384
- LIBSSH2_EC_CURVE_NISTP521
-
-int _libssh2_ecdsa_create_key(_libssh2_ec_key **out_private_key,
- unsigned char **out_public_key_octal,
- size_t *out_public_key_octal_len,
- libssh2_curve_type curve_type);
-Create a new ECDSA private key of type curve_type and return it at
-out_private_key. If out_public_key_octal is not NULL, store an allocated
-pointer to the associated public key in "octal" form in it and its length
-at out_public_key_octal_len.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_new_private(libssh2_ecdsa_ctx **ec_ctx,
- LIBSSH2_SESSION * session,
- const char *filename,
- unsigned const char *passphrase);
-Reads an ECDSA private key from PEM file filename into a new ECDSA context.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_new_private_frommemory(libssh2_ecdsa_ctx ** ec_ctx,
- LIBSSH2_SESSION * session,
- const char *filedata,
- size_t filedata_len,
- unsigned const char *passphrase);
-Builds an ECDSA private key from PEM data at filedata of length filedata_len
-into a new ECDSA context stored at ec_ctx.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_curve_name_with_octal_new(libssh2_ecdsa_ctx **ecdsactx,
- const unsigned char *k,
- size_t k_len,
- libssh2_curve_type type);
-Stores at ecdsactx a new ECDSA context associated with the given curve type
-and with "octal" form public key (k, k_len).
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_new_openssh_private(libssh2_ecdsa_ctx **ec_ctx,
- LIBSSH2_SESSION * session,
- const char *filename,
- unsigned const char *passphrase);
-Reads a PEM-encoded ECDSA private key from file filename encrypted with
-passphrase and stores at ec_ctx a new ECDSA context for it.
-Return 0 if OK, else -1.
-Currently used only from openssl backend (ought to be private).
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_sign(LIBSSH2_SESSION *session, libssh2_ecdsa_ctx *ec_ctx,
- const unsigned char *hash, unsigned long hash_len,
- unsigned char **signature, size_t *signature_len);
-ECDSA signs the (hash, hashlen) hash bytes and stores the allocated
-signature at (signature, signature_len). Hash algorithm used should be
-SHA-256, SHA-384 or SHA-512 depending on type stored in ECDSA context at ec_ctx.
-Signature buffer must be allocated from the given session.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_verify(libssh2_ecdsa_ctx *ctx,
- const unsigned char *r, size_t r_len,
- const unsigned char *s, size_t s_len,
- const unsigned char *m, size_t m_len);
-Verify the ECDSA signature made of (r, r_len) and (s, s_len) of (m, m_len)
-using the hash algorithm configured in the ECDSA context ctx.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-libssh2_curve_type _libssh2_ecdsa_get_curve_type(libssh2_ecdsa_ctx *ecdsactx);
-Returns the curve type associated with given context.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ecdsa_curve_type_from_name(const char *name,
- libssh2_curve_type *out_type);
-Stores in out_type the curve type matching string name of the form
-"ecdsa-sha2-nistpxxx".
-Return 0 if OK, else -1.
-Currently used only from openssl backend (ought to be private).
-This procedure is already prototyped in crypto.h.
-
-void _libssh2_ecdsa_free(libssh2_ecdsa_ctx *ecdsactx);
-Releases the ECDSA computation context at ecdsactx.
-
-
-7.4) ED25519
-LIBSSH2_ED25519
-#define as 1 if the crypto library supports ED25519, else 0.
-If defined as 0, the rest of this section can be omitted.
-
-
-libssh2_ed25519_ctx
-Type of an ED25519 computation context. Generally a struct.
-
-int _libssh2_curve25519_new(LIBSSH2_SESSION *session, libssh2_ed25519_ctx **ctx,
- uint8_t **out_public_key,
- uint8_t **out_private_key);
-Generates an ED25519 key pair, stores a pointer to them at out_private_key
-and out_public_key respectively and stores at ctx a new ED25519 context for
-this key.
-Argument ctx, out_private_key and out_public key may be NULL to disable storing
-the corresponding value.
-Length of each key is LIBSSH2_ED25519_KEY_LEN (32 bytes).
-Key buffers are allocated and should be released by caller after use.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ed25519_new_private(libssh2_ed25519_ctx **ed_ctx,
- LIBSSH2_SESSION *session,
- const char *filename,
- const uint8_t *passphrase);
-Reads an ED25519 private key from PEM file filename into a new ED25519 context.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ed25519_new_public(libssh2_ed25519_ctx **ed_ctx,
- LIBSSH2_SESSION *session,
- const unsigned char *raw_pub_key,
- const size_t key_len);
-Stores at ed_ctx a new ED25519 key context for raw public key (raw_pub_key,
-key_len).
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ed25519_new_private_frommemory(libssh2_ed25519_ctx **ed_ctx,
- LIBSSH2_SESSION *session,
- const char *filedata,
- size_t filedata_len,
- unsigned const char *passphrase);
-Builds an ED25519 private key from PEM data at filedata of length filedata_len
-into a new ED25519 context stored at ed_ctx.
-Must call _libssh2_init_if_needed().
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ed25519_sign(libssh2_ed25519_ctx *ctx, LIBSSH2_SESSION *session,
- uint8_t **out_sig, size_t *out_sig_len,
- const uint8_t *message, size_t message_len);
-ED25519 signs the (message, message_len) bytes and stores the allocated
-signature at (sig, sig_len).
-Signature buffer is allocated from the given session.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_ed25519_verify(libssh2_ed25519_ctx *ctx, const uint8_t *s,
- size_t s_len, const uint8_t *m, size_t m_len);
-Verify (s, s_len) signature of (m, m_len) using the given ED25519 context.
-Return 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-int _libssh2_curve25519_gen_k(_libssh2_bn **k,
- uint8_t private_key[LIBSSH2_ED25519_KEY_LEN],
- uint8_t srvr_public_key[LIBSSH2_ED25519_KEY_LEN]);
-Computes a shared ED25519 secret key from the given raw server public key and
-raw client public key and stores it as a big number in *k. Big number should
-have been initialized before calling this function.
-Returns 0 if OK, else -1.
-This procedure is already prototyped in crypto.h.
-
-void _libssh2_ed25519_free(libssh2_ed25519_ctx *ed25519ctx);
-Releases the ED25519 computation context at ed25519ctx.
-
-
-8) Miscellaneous
-
-void libssh2_prepare_iovec(struct iovec *vector, unsigned int len);
-Prepare len consecutive iovec slots before using them.
-In example, this is needed to preset unused structure slacks on platforms
-requiring it.
-If this is not needed, it should be defined as an empty macro.
-
-int _libssh2_random(unsigned char *buf, size_t len);
-Store len random bytes at buf.
-Returns 0 if OK, else -1.
-
-const char * _libssh2_supported_key_sign_algorithms(LIBSSH2_SESSION *session,
- unsigned char *key_method,
- size_t key_method_len);
-
-This function is for implementing key hash upgrading as defined in RFC 8332.
-
-Based on the incoming key_method value, this function will return a
-list of supported algorithms that can upgrade the original key method algorithm
-as a comma separated list, if there is no upgrade option this function should
-return NULL.
diff --git a/deps/curl/dep/libssh2/docs/INSTALL_AUTOTOOLS.txt b/deps/curl/dep/libssh2/docs/INSTALL_AUTOTOOLS.txt
deleted file mode 100644
index 46584d767..000000000
--- a/deps/curl/dep/libssh2/docs/INSTALL_AUTOTOOLS.txt
+++ /dev/null
@@ -1,316 +0,0 @@
-Installation Instructions
-*************************
-
-Copyright (C) 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005 Free
-Software Foundation, Inc.
-
-This file is free documentation; the Free Software Foundation gives
-unlimited permission to copy, distribute and modify it.
-
-SPDX-License-Identifier: FSFULLR
-
-When Building directly from Master
-==================================
-
-If you want to build directly from the git repository, you must first
-generate the configure script and Makefile using autotools. Make
-sure that autoconf, automake and libtool are installed on your system,
-then execute:
-
- autoreconf -fi
-
-After executing this script, you can build the project as usual:
-
- ./configure
- make
-
-Basic Installation
-==================
-
-These are generic installation instructions.
-
- The `configure' shell script attempts to guess correct values for
-various system-dependent variables used during compilation. It uses
-those values to create a `Makefile' in each directory of the package.
-It may also create one or more `.h' files containing system-dependent
-definitions. Finally, it creates a shell script `config.status' that
-you can run in the future to recreate the current configuration, and a
-file `config.log' containing compiler output (useful mainly for
-debugging `configure').
-
- It can also use an optional file (typically called `config.cache'
-and enabled with `--cache-file=config.cache' or shortly `-C') that saves
-the results of its tests to speed up reconfiguring. (Caching is
-disabled by default to prevent problems with accidental use of stale
-cache files.)
-
- If you need to do unusual things to compile the package, please try
-to figure out how `configure' could check whether to do them, and mail
-diffs or instructions to the address given in the `README' so they can
-be considered for the next release. If you are using the cache, and at
-some point `config.cache' contains results you do not want to keep, you
-may remove or edit it.
-
- The file `configure.ac' (or `configure.in') is used to create
-`configure' by a program called `autoconf'. You only need
-`configure.ac' if you want to change it or regenerate `configure' using
-a newer version of `autoconf'.
-
-The simplest way to compile this package is:
-
- 1. `cd' to the directory containing the package's source code and type
- `./configure' to configure the package for your system. If you are
- using `csh' on an old version of System V, you might need to type
- `sh ./configure' instead to prevent `csh' from trying to execute
- `configure' itself.
-
- Running `configure' takes awhile. While running, it prints some
- messages telling which features it is checking for.
-
- 2. Type `make' to compile the package.
-
- 3. Optionally, type `make check' to run any self-tests that come with
- the package.
-
- 4. Type `make install' to install the programs and any data files and
- documentation.
-
- 5. You can remove the program binaries and object files from the
- source code directory by typing `make clean'. To also remove the
- files that `configure' created (so you can compile the package for
- a different kind of computer), type `make distclean'. There is
- also a `make maintainer-clean' target, but that is intended mainly
- for the package's developers. If you use it, you may have to get
- all sorts of other programs in order to regenerate files that came
- with the distribution.
-
-Compilers and Options
-=====================
-
-Some systems require unusual options for compilation or linking that the
-`configure' script does not know about. Run `./configure --help' for
-details on some of the pertinent environment variables.
-
- You can give `configure' initial values for configuration parameters
-by setting variables in the command line or in the environment. Here
-is an example:
-
- ./configure CC=c89 CFLAGS=-O2 LIBS=-lposix
-
- *Note Defining Variables::, for more details.
-
-Compiling For Multiple Architectures
-====================================
-
-You can compile the package for more than one kind of computer at the
-same time, by placing the object files for each architecture in their
-own directory. To do this, you must use a version of `make' that
-supports the `VPATH' variable, such as GNU `make'. `cd' to the
-directory where you want the object files and executables to go and run
-the `configure' script. `configure' automatically checks for the
-source code in the directory that `configure' is in and in `..'.
-
- If you have to use a `make' that does not support the `VPATH'
-variable, you have to compile the package for one architecture at a
-time in the source code directory. After you have installed the
-package for one architecture, use `make distclean' before reconfiguring
-for another architecture.
-
-Installation Names
-==================
-
-By default, `make install' installs the package's commands under
-`/usr/local/bin', include files under `/usr/local/include', etc. You
-can specify an installation prefix other than `/usr/local' by giving
-`configure' the option `--prefix=PREFIX'.
-
- You can specify separate installation prefixes for
-architecture-specific files and architecture-independent files. If you
-pass the option `--exec-prefix=PREFIX' to `configure', the package uses
-PREFIX as the prefix for installing programs and libraries.
-Documentation and other data files still use the regular prefix.
-
- In addition, if you use an unusual directory layout you can give
-options like `--bindir=DIR' to specify different values for particular
-kinds of files. Run `configure --help' for a list of the directories
-you can set and what kinds of files go in them.
-
- If the package supports it, you can cause programs to be installed
-with an extra prefix or suffix on their names by giving `configure' the
-option `--program-prefix=PREFIX' or `--program-suffix=SUFFIX'.
-
-Optional Features
-=================
-
-Some packages pay attention to `--enable-FEATURE' options to
-`configure', where FEATURE indicates an optional part of the package.
-They may also pay attention to `--with-PACKAGE' options, where PACKAGE
-is something like `gnu-as' or `x' (for the X Window System). The
-`README' should mention any `--enable-' and `--with-' options that the
-package recognizes.
-
- For packages that use the X Window System, `configure' can usually
-find the X include and library files automatically, but if it does not,
-you can use the `configure' options `--x-includes=DIR' and
-`--x-libraries=DIR' to specify their locations.
-
-Specifying the System Type
-==========================
-
-There may be some features `configure' cannot figure out automatically,
-but needs to determine by the type of machine the package will run on.
-Usually, assuming the package is built to be run on the _same_
-architectures, `configure' can figure that out, but if it prints a
-message saying it cannot guess the machine type, give it the
-`--build=TYPE' option. TYPE can either be a short name for the system
-type, such as `sun4', or a canonical name which has the form:
-
- CPU-COMPANY-SYSTEM
-
-where SYSTEM can have one of these forms:
-
- OS KERNEL-OS
-
- See the file `config.sub' for the possible values of each field. If
-`config.sub' is not included in this package, then this package does not
-need to know the machine type.
-
- If you are _building_ compiler tools for cross-compiling, you should
-use the option `--target=TYPE' to select the type of system they will
-produce code for.
-
- If you want to _use_ a cross compiler, that generates code for a
-platform different from the build platform, you should specify the
-"host" platform (i.e., that on which the generated programs will
-eventually be run) with `--host=TYPE'.
-
-Sharing Defaults
-================
-
-If you want to set default values for `configure' scripts to share, you
-can create a site shell script called `config.site' that gives default
-values for variables like `CC', `cache_file', and `prefix'.
-`configure' looks for `PREFIX/share/config.site' if it exists, then
-`PREFIX/etc/config.site' if it exists. Or, you can set the
-`CONFIG_SITE' environment variable to the location of the site script.
-A warning: not all `configure' scripts look for a site script.
-
-Defining Variables
-==================
-
-Variables not defined in a site shell script can be set in the
-environment passed to `configure'. However, some packages may run
-configure again during the build, and the customized values of these
-variables may be lost. In order to avoid this problem, you should set
-them in the `configure' command line, using `VAR=value'. For example:
-
- ./configure CC=/usr/local2/bin/gcc
-
-causes the specified `gcc' to be used as the C compiler (unless it is
-overridden in the site shell script). Here is a another example:
-
- /bin/bash ./configure CONFIG_SHELL=/bin/bash
-
-Here the `CONFIG_SHELL=/bin/bash' operand causes subsequent
-configuration-related scripts to be executed by `/bin/bash'.
-
-`configure' Invocation
-======================
-
-`configure' recognizes the following options to control how it operates.
-
-`--help'
-`-h'
- Print a summary of the options to `configure', and exit.
-
-`--version'
-`-V'
- Print the version of Autoconf used to generate the `configure'
- script, and exit.
-
-`--cache-file=FILE'
- Enable the cache: use and save the results of the tests in FILE,
- traditionally `config.cache'. FILE defaults to `/dev/null' to
- disable caching.
-
-`--config-cache'
-`-C'
- Alias for `--cache-file=config.cache'.
-
-`--quiet'
-`--silent'
-`-q'
- Do not print messages saying which checks are being made. To
- suppress all normal output, redirect it to `/dev/null' (any error
- messages will still be shown).
-
-`--srcdir=DIR'
- Look for the package's source code in directory DIR. Usually
- `configure' can determine that directory automatically.
-
-`configure' also accepts some other, not widely useful, options. Run
-`configure --help' for more details.
-
-More configure options
-======================
-
-Some ./configure options deserve additional comments:
-
- * --with-libgcrypt
- * --without-libgcrypt
- * --with-libgcrypt-prefix=DIR
-
- libssh2 can use the Libgcrypt library
- (https://www.gnupg.org/) for cryptographic operations.
- One of the cryptographic libraries is required.
-
- Configure will attempt to locate Libgcrypt
- automatically.
-
- If your installation of Libgcrypt is in another
- location, specify it using --with-libgcrypt-prefix.
-
- * --with-openssl
- * --without-openssl
- * --with-libssl-prefix=[DIR]
-
- libssh2 can use the OpenSSL library
- (https://www.openssl-library.org/) for cryptographic operations.
- One of the cryptographic libraries is required.
-
- Configure will attempt to locate OpenSSL in the
- default location.
-
- If your installation of OpenSSL is in another
- location, specify it using --with-libssl-prefix.
-
- * --with-mbedtls
- * --without-mbedtls
- * --with-libmbedcrypto-prefix=[DIR]
-
- libssh2 can use the mbedTLS library
- (https://tls.mbed.org) for cryptographic operations.
- One of the cryptographic libraries is required.
-
- Configure will attempt to locate mbedTLS in the
- default location.
-
- If your installation of mbedTLS is in another
- location, specify it using --with-libmbedcrypto-prefix.
-
- * --with-libz
- * --without-libz
- * --with-libz-prefix=[DIR]
-
- If present, libssh2 will attempt to use the zlib
- (https://zlib.net/) for payload compression, however
- zlib is not required.
-
- If your installation of Libz is in another location,
- specify it using --with-libz-prefix.
-
- * --enable-debug
-
- Will make the build use more pedantic and strict compiler
- options as well as enable the libssh2_trace() function (for
- showing debug traces).
diff --git a/deps/curl/dep/libssh2/docs/TODO.txt b/deps/curl/dep/libssh2/docs/TODO.txt
deleted file mode 100644
index 256a23336..000000000
--- a/deps/curl/dep/libssh2/docs/TODO.txt
+++ /dev/null
@@ -1,180 +0,0 @@
-Things TODO
-===========
-
-* Fix -Wsign-conversion warnings in src
-
-* Fix the numerous malloc+copy operations for sending data, see "Buffering
- Improvements" below for details
-
-* make sure the windowing code adapts better to slow situations so that it
- does not then use as much memory as today. Possibly by an app-controllable
- "Window mode"?
-
-* Decrease the number of mallocs. Everywhere. Will get easier once the
- buffering improvements have been done.
-
-* Use SO_NOSIGPIPE for Mac OS/BSD systems where MSG_NOSIGNAL does not
- exist/work
-
-* Extend the test suite to actually test lots of aspects of libssh2
-
-* Update public API to drop casts added to fix compiler warnings
-
-* Expose error messages sent by the server
-
-* select() is troublesome with libssh2 when using multiple channels over
- the same session. See "New Transport API" below for more details.
-
-* for obsolete/weak/insecure algorithms: either stop enabling them by default
- at build-time, or delete support for them completely.
-
-At next SONAME bump
-===================
-
-* stop using #defined macros as part of the official API. The macros should
- either be turned into real functions or discarded from the API.
-
-* delete or deprecate libssh2_session_callback_set()
-
-* bump length arguments in callback functions to size_t/ssize_t
-
-* remove the following functions from the API/ABI
-
- libssh2_base64_decode()
- libssh2_session_flag()
- libssh2_channel_handle_extended_data()
- libssh2_channel_receive_window_adjust()
- libssh2_poll()
- libssh2_poll_channel_read()
- libssh2_session_startup() (libssh2_session_handshake() is the replacement)
- libssh2_banner_set() (libssh2_session_banner_set() is the replacement)
-
-* Rename a few function:
-
- libssh2_hostkey_hash => libssh2_session_hostkey_hash
- libssh2_banner_set => libssh2_session_banner_set
-
-* change 'int' to 'libssh2_socket_t' in the public API for sockets.
-
-* Use 'size_t' for string lengths in all functions.
-
-* Add a comment field to struct libssh2_knownhost.
-
-* remove the existing libssh2_knownhost_add() function and rename
- libssh2_knownhost_addc to become the new libssh2_knownhost_add instead
-
-* remove the existing libssh2_scp_send_ex() function and rename
- libssh2_scp_send64 to become the new libssh2_scp_send instead.
-
-* remove the existing libssh2_knownhost_check() function and rename
- libssh2_knownhost_checkp() to become the new libssh2_knownhost_check instead
-
-Buffering Improvements
-======================
-
-transport_write
-
- - If this function gets called with a total packet size that is larger than
- 32K, it should create more than one SSH packet so that it keeps the largest
- one below 32K
-
-sftp_write
-
- - should not copy/allocate anything for the data, only create a header chunk
- and pass on the payload data to channel_write "pointed to"
-
-New Transport API
-=================
-
-THE PROBLEM
-
-The problem in a nutshell is that when an application opens up multiple
-channels over a single session, those are all using the same socket. If the
-application is then using select() to wait for traffic (like any sensible app
-does) and wants to act on the data when select() tells there is something to
-for example read, what does an application do?
-
-With our current API, you have to loop over all the channels and read from
-them to see if they have data. This effectively makes blocking reads
-impossible. If the app has many channels in a setup like this, it even becomes
-slow. (The original API had the libssh2_poll_channel_read() and libssh2_poll()
-to somewhat overcome this hurdle, but they too have pretty much the same
-problems plus a few others.)
-
-Traffic in the other direction is similarly limited: the app has to try
-sending to all channels, even though some of them may very well not accept any
-data at that point.
-
-A SOLUTION
-
-I suggest we introduce two new helper functions:
-
- libssh2_transport_read()
-
- - Read "a bunch" of data from the given socket and returns information to the
- app about what channels that are now readable (ie they will not block when
- read from). The function can be called over and over and it will repeatedly
- return info about what channels that are readable at that moment.
-
- libssh2_transport_write()
-
- - Returns information about what channels that are writable, in the sense
- that they have windows set from the remote side that allows data to get
- sent. Writing to one of those channels will not block. Of course, the
- underlying socket may only accept a certain amount of data, so at the first
- short return, nothing more should be attempted to get sent until select()
- (or equivalent) has been used on the master socket again.
-
-I have not yet figured out a sensible API for how these functions should return
-that info, but if we agree on the general principles I guess we can work that
-out.
-
-VOLUNTARY
-
- I wanted to mention that these two helper functions would not be mandatory
- in any way. They would just be there for those who want them, and existing
- programs can remain using the old functions only if they prefer to.
-
-New SFTP API
-============
-
-PURPOSE
-
- Provide API functions that explicitly tells at once that a (full) SFTP file
- transfer is wanted, to allow libssh2 to leverage on that knowledge to speed
- up things internally. It can for example do read ahead, buffer writes (merge
- small writes into larger chunks), better tune the SSH window and more. This
- sort of API is already provided for SCP transfers.
-
-API
-
- New functions:
-
- LIBSSH2_SFTP_HANDLE *libssh2_sftp_send(SFTP_SESSION *sftp,
- libssh2_uint64_t filesize,
- char *remote_path,
- size_t remote_path_len,
- long mode);
-
- Tell libssh2 that a local file with a given size is about to get sent to
- the SFTP server.
-
- LIBSSH2_SFTP_HANDLE *libssh2_sftp_recv();
-
- Tell libssh2 that a remote file is requested to get downloaded from the SFTP
- server.
-
- Only the setup of the file transfer is different from an application's point
- of view. Depending on direction of the transfer(s), the following already
- existing functions should then be used until the transfer is complete:
-
- libssh2_sftp_read()
- libssh2_sftp_write()
-
-HOW TO USE
-
- 1. Setup the transfer using one of the two new functions.
-
- 2. Loop through the reading or writing of data.
-
- 3. Cleanup the transfer
diff --git a/deps/curl/dep/nghttp2/AUTHORS.txt b/deps/curl/dep/nghttp2/AUTHORS.txt
deleted file mode 100644
index 7ec265107..000000000
--- a/deps/curl/dep/nghttp2/AUTHORS.txt
+++ /dev/null
@@ -1,168 +0,0 @@
-nghttp2 project was started as a fork of spdylay project [1]. Both
-projects were started by Tatsuhiro Tsujikawa, who is still the main
-author of these projects. Meanwhile, we have many contributions, and
-we are not here without them. We sincerely thank you to all who made
-a contribution. Here is the all individuals/organizations who
-contributed to nghttp2 and spdylay project at which we forked. These
-names are retrieved from git commit log. If you have made a
-contribution, but you are missing in the list, please let us know via
-github issues [2].
-
-[1] https://github.com/tatsuhiro-t/spdylay
-[2] https://github.com/nghttp2/nghttp2/issues
-
---------
-
-187j3x1
-Adam Gołębiowski
-Alek Storm
-Alex Nalivko
-Alexandr Vlasov
-Alexandros Konstantinakis-Karmis
-Alexis La Goutte
-Alyssa Ross
-Amir Livneh
-Amir Pakdel
-Anders Bakken
-Andreas Pohl
-Andrew Penkrat
-Andy Davies
-Angus Gratton
-Anna Henningsen
-Ant Bryan
-Anthony Alayo
-Asra Ali
-Benedikt Christoph Wolters
-Benjamin Peterson
-Bernard Spil
-Bernhard Walle
-Brendan Heinonen
-Brian Card
-Brian Suh
-Daniel Bevenius
-Daniel Evers
-Daniel Stenberg
-Dave Reisner
-David Beitey
-David Korczynski
-David Weekly
-Deel
-Deep Chordia
-Dimitris Apostolou
-Dmitri Tikhonov
-Dmitriy Vetutnev
-Don
-Dylan Plecki
-Etienne Cimon
-Fabian Möller
-Fabian Wiesel
-Fred Sundvik
-Gabi Davar
-Gaël PORTAY
-Geoff Hill
-George Liu
-Gitai
-Google Inc.
-Hajime Fujita
-Jacky Tian
-Jacky_Yin
-Jacob Champion
-James M Snell
-Jan Kundrát
-Jan-E
-Janusz Dziemidowicz
-Jay Satiro
-Jeff 'Raid' Baitis
-Jianqing Wang
-Jim Morrison
-Jiwoo Park
-Jonas Kvinge
-Josh Braegger
-José F. Calcerrada
-Kamil Dudka
-Kazuho Oku
-Kenny (kang-yen) Peng
-Kenny Peng
-Kit Chan
-Kyle Schomp
-LazyHamster
-Leo Neat
-Lorenz Nickel
-Lucas Pardue
-MATSUMOTO Ryosuke
-Marc Bachmann
-Marcelo Trylesinski
-Mark Boddington
-Matt Rudary
-Matt Way
-Michael Kaufmann
-Mike Conlen
-Mike Frysinger
-Mike Lothian
-Nicholas Hurley
-Nora Shoemaker
-Paweł Wegner
-Pedro Santos
-Peeyush Aggarwal
-Peter Wu
-Piotr Sikora
-PufferOverflow
-Raul Gutierrez Segales
-Remo E
-Renaud
-Reza Tavakoli
-Richard Wolfert
-Rick Lei
-Ross Smith II
-Rudi Heitbaum
-Ryan Carsten Schmidt
-Ryo Ota
-Scott Mitchell
-Sebastiaan Deckers
-Sergey Fedorov
-Shelley Vohr
-Simon Frankenberger
-Simone Basso
-Soham Sinha
-Stefan Eissing
-Stephen Ludin
-Sunpoet Po-Chuan Hsieh
-Svante Signell
-Syohei YOSHIDA
-Tapanito
-Tatsuhiko Kubo
-Tatsuhiro Tsujikawa
-Thomas Devoogdt
-Tobias Geerinckx-Rice
-Tom Harwood
-Tomas Krizek
-Tomasz Buchert
-Tomasz Torcz
-Vernon Tang
-Viacheslav Biriukov
-Viktor Szakats
-Viktor Szépe
-Ville Vesilehto
-Wenfeng Liu
-William A Rowe Jr
-Xiaoguang Sun
-Zhuoyun Wei
-acesso
-ayanamist
-bxshi
-clemahieu
-dalf
-dawg
-es
-fangdingjun
-hrxi
-jwchoi
-kumagi
-lhuang04
-lstefani
-makovich
-mod-h2-dev
-moparisthebest
-robaho
-snnn
-yuuki-kodama
diff --git a/deps/curl/dep/nghttp2/COPYING.txt b/deps/curl/dep/nghttp2/COPYING.txt
deleted file mode 100644
index 80201792e..000000000
--- a/deps/curl/dep/nghttp2/COPYING.txt
+++ /dev/null
@@ -1,23 +0,0 @@
-The MIT License
-
-Copyright (c) 2012, 2014, 2015, 2016 Tatsuhiro Tsujikawa
-Copyright (c) 2012, 2014, 2015, 2016 nghttp2 contributors
-
-Permission is hereby granted, free of charge, to any person obtaining
-a copy of this software and associated documentation files (the
-"Software"), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:
-
-The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
-LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
-OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/deps/curl/dep/nghttp2/ChangeLog.txt b/deps/curl/dep/nghttp2/ChangeLog.txt
deleted file mode 100644
index 2a3671571..000000000
--- a/deps/curl/dep/nghttp2/ChangeLog.txt
+++ /dev/null
@@ -1,927 +0,0 @@
-commit 319bf015de8fa38e21ac271ce2f7d61aa77d90cb
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-03-02
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-03-02
-
- Update bash_completion
-
-commit 99c572448ac94f122a27cc088fe9cd8998222278
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-03-02
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-03-02
-
- Update manual pages
-
-commit a5007158dfdc76cd308e731c629d963406e25965
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-03-02
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-03-02
-
- Bump package and library versions
-
-commit 0b210f072d60db111d6abb44c98cfa754e4d9c99
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-03-02
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-03-02
-
- Update AUTHORS
-
-commit 5ca289471f681ed6c62a9f29e0cc4ea980506fdf
-Merge: 2141edda 1459db27
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-03-02
-Commit: GitHub
-CommitDate: 2025-03-02
-
- Merge pull request #2311 from nghttp2/bump-libbpf
-
- Bump libbpf to v1.5.0
-
-commit 2141edda0cbf8a85bd46c041cc4b421d505d0cd5
-Merge: 133cc56e d9793fce
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-03-01
-Commit: GitHub
-CommitDate: 2025-03-01
-
- Merge pull request #2312 from nghttp2/fix-coverity-check
-
- Fix errors reported by coverity
-
-commit d9793fceafdf44dbdea727dfb3e6d35023f46105
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-03-01
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-03-01
-
- Fix errors reported by coverity
-
-commit 1459db27fb5daf83d418729ab781d4cdd14c07ad
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-02-28
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-02-28
-
- Bump libbpf to v1.5.0
-
-commit 133cc56e70a31897088a75d38d24dfedf413060e
-Merge: ce5329a3 cd9a021a
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-02-27
-Commit: GitHub
-CommitDate: 2025-02-27
-
- Merge pull request #2310 from nghttp2/bump-ngtcp2
-
- Bump ngtcp2
-
-commit cd9a021a19c7f6b83250be5dbb3ac01a12793a7f
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-02-27
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-02-27
-
- Suppress warning when building C++ code with wolfSSL
-
-commit 2e8124eadb41808b1de787131de1b6f58c83ed05
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-02-27
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-02-27
-
- Bump ngtcp2 and its dependencies
-
-commit ce5329a3109cda508f4d84e5c46a206d4d5ef3a6
-Merge: 6b74e009 1049ce0a
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-02-18
-Commit: GitHub
-CommitDate: 2025-02-18
-
- Merge pull request #2309 from nghttp2/nghttpx-rework-quic-conn
-
- nghttpx: Rework QUIC connection handling
-
-commit 1049ce0a99b121f85768a3d1c3a3dd461fe6bd10
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-11
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-02-18
-
- nghttpx: Rework QUIC connection handling
-
-commit 6b74e0097ba30b1273843776a20395319f441987
-Merge: 321b71ae 785b0b54
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-02-18
-Commit: GitHub
-CommitDate: 2025-02-18
-
- Merge pull request #2308 from nghttp2/dependabot/go_modules/golang.org/x/net-0.35.0
-
- build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
-
-commit 785b0b541d4152e5e07e33a611fa85e2ddd3593a
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2025-02-17
-Commit: GitHub
-CommitDate: 2025-02-17
-
- build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
-
- Bumps [golang.org/x/net](https://github.com/golang/net) from 0.34.0 to 0.35.0.
- - [Commits](https://github.com/golang/net/compare/v0.34.0...v0.35.0)
-
- ---
- updated-dependencies:
- - dependency-name: golang.org/x/net
- dependency-type: direct:production
- update-type: version-update:semver-minor
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit 321b71aedb54eaab20456828f316212ec203c8fa
-Merge: e2e73723 1dbbcc35
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-02-08
-Commit: GitHub
-CommitDate: 2025-02-08
-
- Merge pull request #2306 from nghttp2/clang-format
-
- clang-format
-
-commit 1dbbcc35e1c5365d3ca94b6509ed7fe06d5b2444
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-02-08
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-02-08
-
- clang-format
-
-commit e2e737234e9d292d3cdbabd947c05e16b57ee19e
-Merge: e01c9f10 2b7ad6e6
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-02-05
-Commit: GitHub
-CommitDate: 2025-02-05
-
- Merge pull request #2305 from qnx-ports/master
-
- Add QNX Support
-
-commit 2b7ad6e6f376d47943347b2dc4b0b9ac2223870b
-Author: Deep Chordia
-AuthorDate: 2025-02-05
-Commit: Deep Chordia
-CommitDate: 2025-02-05
-
- Add QNX Support
-
-commit e01c9f10a3b7d1df1b50f7ff190dee474cc15d0b
-Merge: fd4505cf a2db898d
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-02-03
-Commit: GitHub
-CommitDate: 2025-02-03
-
- Merge pull request #2304 from nghttp2/cmake-src-tests
-
- cmake: Disable src tests if BUILD_TESTING is OFF
-
-commit a2db898d7094899c3dc8cb0b32ac1cf35ee362c8
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-02-03
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-02-03
-
- cmake: Disable src tests if BUILD_TESTING is OFF
-
-commit fd4505cfb21710ee9ca54a128001184472a9ab46
-Merge: d037dc32 9c23c72d
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-29
-Commit: GitHub
-CommitDate: 2025-01-29
-
- Merge pull request #2302 from nghttp2/min-quic-pktlen
-
- The minimum length of a valid QUIC packet is 21
-
-commit 9c23c72d9997465205b62e061f317e8845e7dbb0
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-29
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-29
-
- The minimum length of a valid QUIC packet is 21
-
-commit d037dc32b4ddac267b0ede89f5f6f334319c636b
-Merge: a4dad6d3 e045b463
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-28
-Commit: GitHub
-CommitDate: 2025-01-28
-
- Merge pull request #2301 from nghttp2/dependabot/go_modules/github.com/quic-go/quic-go-0.49.0
-
- build(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.49.0
-
-commit e045b46352a9a36834c7157c77e873d570717c26
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2025-01-27
-Commit: GitHub
-CommitDate: 2025-01-27
-
- build(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.49.0
-
- Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.48.2 to 0.49.0.
- - [Release notes](https://github.com/quic-go/quic-go/releases)
- - [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- - [Commits](https://github.com/quic-go/quic-go/compare/v0.48.2...v0.49.0)
-
- ---
- updated-dependencies:
- - dependency-name: github.com/quic-go/quic-go
- dependency-type: direct:production
- update-type: version-update:semver-minor
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit a4dad6d36acde0f2a511632ba8fa395e70159b41
-Merge: 0c9fdf26 bdf7f14b
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-27
-Commit: GitHub
-CommitDate: 2025-01-27
-
- Merge pull request #2300 from nghttp2/stale-exempt-pr
-
- GHA: Exempt pull request from actions/stale
-
-commit bdf7f14b3d914d43ca7f9d1c6641331e7970b155
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-27
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-27
-
- GHA: Exempt pull request from actions/stale
-
-commit 0c9fdf26397d6f46595dd0f0df4091dd50606f70
-Merge: 280110ca dd59dd8b
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-26
-Commit: GitHub
-CommitDate: 2025-01-26
-
- Merge pull request #2299 from nghttp2/nullptr
-
- src: nullptr
-
-commit dd59dd8ba99b3e40ed6a1bfb4ba5f676be8e386d
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-26
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-26
-
- src: nullptr
-
-commit 280110ca8dd1563b9fe1597bd33fbf0607fb5f5c
-Merge: e25e68f2 f9958255
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-26
-Commit: GitHub
-CommitDate: 2025-01-26
-
- Merge pull request #2298 from nghttp2/fix-stale-action
-
- Workaround actions/stale cache issue
-
-commit f9958255ee08011a7d72060bcb1675a8f0842635
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-26
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-26
-
- Workaround actions/stale cache issue
-
-commit e25e68f23408720c11812ece06ffadb1b635f931
-Merge: ab19019b 01accaef
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-25
-Commit: GitHub
-CommitDate: 2025-01-25
-
- Merge pull request #2297 from thevilledev/fix/hd-int-overflow-check
-
- fix: Add defensive bounds checking in hd_ringbuf_init()
-
-commit 01accaef55254ffeeebf99b1b0ceeb9cc0592d8e
-Author: Ville Vesilehto
-AuthorDate: 2025-01-24
-Commit: GitHub
-CommitDate: 2025-01-24
-
- fix: remove redundant sizeof check
-
- Co-authored-by: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-
-commit d06472b2c170cc898f9722b55005ef8cdbb07a63
-Author: Ville Vesilehto
-AuthorDate: 2025-01-24
-Commit: GitHub
-CommitDate: 2025-01-24
-
- fix: optimise for conditions
-
- Co-authored-by: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-
-commit 8ada192e6942eb4f5b85d73b648de73185a3e112
-Author: Ville Vesilehto
-AuthorDate: 2025-01-24
-Commit: GitHub
-CommitDate: 2025-01-24
-
- fix: set max_size as const
-
- Co-authored-by: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-
-commit 639b14710b83c831b5c2bc75d33e385da4cde22e
-Author: Ville Vesilehto
-AuthorDate: 2025-01-20
-Commit: Ville Vesilehto
-CommitDate: 2025-01-20
-
- fix: Add defensive integer overflow checks in hd ringbuf init
-
- Add bounds checking in hd_ringbuf_init() to prevent potential integer
- overflow during size calculations. While HPACK decoder controls its own
- buffer size (4-8K typical) and is not vulnerable to remote exploitation,
- this adds defensive programming guards for robustness.
-
- Signed-off-by: Ville Vesilehto
-
-commit ab19019b77bc04925cbede25307720af056b83d3
-Merge: f88c0985 15d75404
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-18
-Commit: GitHub
-CommitDate: 2025-01-18
-
- Merge pull request #2296 from nghttp2/xmlfree
-
- HtmlParser: Use xmlFree
-
-commit 15d754040a03101bed219fd4ae910f56446b1b84
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-18
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-18
-
- HtmlParser: Use xmlFree
-
-commit f88c09857dc8819c3a849a67a5e1d8e10503b49f
-Merge: e5309612 3cb06f11
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-14
-Commit: GitHub
-CommitDate: 2025-01-14
-
- Merge pull request #2295 from nghttp2/dependabot/go_modules/golang.org/x/net-0.34.0
-
- build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
-
-commit 3cb06f116d662843cc4fbd82ffd251cd90842532
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2025-01-13
-Commit: GitHub
-CommitDate: 2025-01-13
-
- build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
-
- Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.34.0.
- - [Commits](https://github.com/golang/net/compare/v0.33.0...v0.34.0)
-
- ---
- updated-dependencies:
- - dependency-name: golang.org/x/net
- dependency-type: direct:production
- update-type: version-update:semver-minor
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit e53096123c961357302442fb1e0ac14cf7bc7e03
-Merge: 6494f056 48cdba35
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-12
-Commit: GitHub
-CommitDate: 2025-01-12
-
- Merge pull request #2294 from nghttp2/remove-nghttp2-dependency-based-priority-section
-
- Remove nghttp2 dependency based priority section
-
-commit 48cdba3553b294a470651f040d4c9dfff9fdea74
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-12
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-12
-
- Update manual pages
-
-commit 71498767046147f87bb3a5b01d5e4ff35dfba4c3
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-12
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-12
-
- nghttp: Remove DEPENDENCY BASED PRIORITY section from its manual page
-
-commit 6494f0563818cbc27a351769c1bc649f89177140
-Merge: 1f581807 db12ee7a
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-12
-Commit: GitHub
-CommitDate: 2025-01-12
-
- Merge pull request #2293 from nghttp2/update-priority-doc
-
- Update Stream priorities section
-
-commit 1f5818070d0500822f03bc1194a655494a724dc9
-Merge: d928ceb7 82602821
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-12
-Commit: GitHub
-CommitDate: 2025-01-12
-
- Merge pull request #2292 from nghttp2/nghttp-show-deprecation-warn-no-rfc7540-pri
-
- nghttp: Show deprecation warning for --no-rfc7540-pri option
-
-commit db12ee7a37bbd2ba7d2a59b3c31b0dd1f31aac1d
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-12
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-12
-
- Update Stream priorities section
-
-commit 82602821d00ff42eae0c7cf8cfe4a7eba2d0c563
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-12
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-12
-
- nghttp: Show deprecation warning for --no-rfc7540-pri option
-
-commit d928ceb75a364f1e199b841eae1548cc9897c9c2
-Merge: 7e096cbc 7f871f63
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-12
-Commit: GitHub
-CommitDate: 2025-01-12
-
- Merge pull request #2291 from nghttp2/nghttpd-remove-rfc7540-pri
-
- nghttpd: Remove RFC 7540 priorities
-
-commit 7f871f63ea0935c9a09c3eab6b310f051806a672
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-12
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-12
-
- nghttpd: Remove RFC 7540 priorities
-
- This change deprecates --no-rfc7540-pri option.
- SETTINGS_NO_RFC7540_PRIORITIES is now always sent.
-
-commit 7e096cbc4131b1473e91e0e672a2bc2ca2ad91cf
-Merge: c8bcf5a6 f25a8dca
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-11
-Commit: GitHub
-CommitDate: 2025-01-11
-
- Merge pull request #2290 from nghttp2/nghttp-remove-rfc7540-pri
-
- nghttp: Remove RFC 7540 priorities
-
-commit f25a8dca17446f525ce2930918e503536dcd4374
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-10
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-11
-
- nghttp: Remove RFC 7540 priorities
-
- This change removes RFC 7540 priorities from nghttp. nghttp now does
- not create the initial dependency tree. --no-dep and --no-rfc7540-pri
- options have been removed.
-
- nghttp now always sends NGHTTP2_SETTINGS_NO_RFC7540_PRIORITIES.
- --extpri option has been added to set priority for a given URI.
-
-commit c8bcf5a6a2157b316444dddd8d262778b41f2821
-Merge: 26a33cf9 b2a3299e
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-11
-Commit: GitHub
-CommitDate: 2025-01-11
-
- Merge pull request #2289 from nghttp2/deprecate-nghttp2_option_set_no_closed_streams
-
- Deprecate nghttp2_option_set_no_closed_streams
-
-commit b2a3299e8ecec9a879c41415373a46f8eb4cb286
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-10
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-11
-
- Deprecate nghttp2_option_set_no_closed_streams
-
-commit 26a33cf99bd30d4be24c6f6e534286cbddd86d05
-Merge: cb8421e3 96e06509
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-10
-Commit: GitHub
-CommitDate: 2025-01-10
-
- Merge pull request #2288 from nghttp2/deprecate-nghttp2_option_set_server_fallback_rfc7540_priorities
-
- Deprecate nghttp2_option_set_server_fallback_rfc7540_priorities
-
-commit cb8421e3537154536dfaf8d1d8fdea77de672b21
-Merge: 8c83772f 3dd61f8e
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-10
-Commit: GitHub
-CommitDate: 2025-01-10
-
- Merge pull request #2287 from nghttp2/remove-rfc7540-priority
-
- Remove RFC 7540 priorities
-
-commit 96e06509ac558d1b740cc62e2e6bf442b4d4667b
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-10
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-10
-
- Deprecate nghttp2_option_set_server_fallback_rfc7540_priorities
-
-commit 3dd61f8ec3990928ee5f2606353d2b291f771aab
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-03-25
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-10
-
- Remove RFC 7540 priorities
-
- Summary of the behavioral changes in public API functions:
-
- - nghttp2_session_change_stream_priority: This function is noop. It
- always returns 0.
- - nghttp2_session_create_idle_stream: This function is noop. It
- always returns 0.
- - nghttp2_submit_request: pri_spec is ignored.
- - nghttp2_submit_request2: pri_spec is ignored.
- - nghttp2_submit_headers: pri_spec is ignored.
- - nghttp2_submit_priority: This function is noop. It always returns
- 0.
- - nghttp2_stream_get_parent: This function always returns NULL.
- - nghttp2_stream_get_next_sibling: This function always returns NULL.
- - nghttp2_stream_get_previous_sibling: This function always returns
- NULL.
- - nghttp2_stream_get_first_child: This function always returns NULL.
- - nghttp2_stream_get_weight: This function always returns
- NGHTTP2_DEFAULT_WEIGHT.
- - nghttp2_stream_get_sum_dependency_weight: This function always
- returns 0.
-
-commit 8c83772f6c45a571fb209e9ec91729a360b8490f
-Merge: 5ca0bca1 a8d731d8
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2025-01-03
-Commit: GitHub
-CommitDate: 2025-01-03
-
- Merge pull request #2286 from nghttp2/bump-munit
-
- Bump munit
-
-commit a8d731d81fb34fa253cc9cb7c8874f096914ee00
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2025-01-03
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2025-01-03
-
- Bump munit
-
-commit 5ca0bca19992fbb08792a25a6657a61c16f78710
-Merge: 89f27a59 23a17d00
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-12-19
-Commit: GitHub
-CommitDate: 2024-12-19
-
- Merge pull request #2283 from nghttp2/bump-ngtcp2
-
- Bump ngtcp2 and QUIC dependencies
-
-commit 89f27a597f4237d1c70a7d2b1b6c559ff4182ed6
-Merge: 59f85c5d 947928bc
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-12-19
-Commit: GitHub
-CommitDate: 2024-12-19
-
- Merge pull request #2282 from nghttp2/bump-golang.org/x/net
-
- Bump golang.org/x/net to v0.33.0
-
-commit 947928bcc2a8a5951a7ff15ea032501bae98927b
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-12-19
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-12-19
-
- Bump golang.org/x/net to v0.33.0
-
-commit 23a17d0048f581856a363f6e3498815b0a4e4844
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-12-19
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-12-19
-
- Bump ngtcp2 and QUIC dependencies
-
-commit 59f85c5d622ba46826f11e6d02b5aa39439cf7f8
-Merge: 92fa43ac c7bf69c8
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-12-10
-Commit: GitHub
-CommitDate: 2024-12-10
-
- Merge pull request #2281 from nghttp2/dependabot/go_modules/golang.org/x/net-0.32.0
-
- build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
-
-commit c7bf69c8e1d8646b249ef08ad58f3bca06ff0f3b
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2024-12-09
-Commit: GitHub
-CommitDate: 2024-12-09
-
- build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
-
- Bumps [golang.org/x/net](https://github.com/golang/net) from 0.31.0 to 0.32.0.
- - [Commits](https://github.com/golang/net/compare/v0.31.0...v0.32.0)
-
- ---
- updated-dependencies:
- - dependency-name: golang.org/x/net
- dependency-type: direct:production
- update-type: version-update:semver-minor
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit 92fa43ac912b6c3b3d8bbfde55416eaa4f4ad508
-Merge: 68c3600d b05ee704
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-12-10
-Commit: GitHub
-CommitDate: 2024-12-10
-
- Merge pull request #2279 from nghttp2/dependabot/go_modules/github.com/quic-go/quic-go-0.48.2
-
- build(deps): bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2
-
-commit b05ee704dd020e9dd0a8ff329686241fdbaeb897
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2024-12-02
-Commit: GitHub
-CommitDate: 2024-12-02
-
- build(deps): bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2
-
- Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.48.1 to 0.48.2.
- - [Release notes](https://github.com/quic-go/quic-go/releases)
- - [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- - [Commits](https://github.com/quic-go/quic-go/compare/v0.48.1...v0.48.2)
-
- ---
- updated-dependencies:
- - dependency-name: github.com/quic-go/quic-go
- dependency-type: direct:production
- update-type: version-update:semver-patch
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit 68c3600d9fe729b8c66424384472a23ae8b45cec
-Merge: eb22cc12 f51e9b30
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-11-25
-Commit: GitHub
-CommitDate: 2024-11-25
-
- Merge pull request #2275 from nghttp2/bump-ngtcp2
-
- Bump ngtcp2
-
-commit f51e9b300f35ab50b16d3cdece1acf6ff9425357
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-11-25
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-11-25
-
- GHA: Fix build error on Mac OS 14
-
-commit f61d304ef38f92fb4c898664c48df9eadde36f9f
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-11-25
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-11-25
-
- Bump ngtcp2 and its dependencies
-
-commit eb22cc1231a6b57b384abcd9948eb3ddfb844755
-Merge: 55c5adf9 41c8940a
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-11-18
-Commit: GitHub
-CommitDate: 2024-11-18
-
- Merge pull request #2274 from nghttp2/bump-sfparse
-
- Bump sfparse to 7eaf5b651f67123edf2605391023ed2fd7e2ef16
-
-commit 41c8940a4ca9875b6ada4d432d8d2f2beeda0e60
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-11-18
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-11-18
-
- Bump sfparse to 7eaf5b651f67123edf2605391023ed2fd7e2ef16
-
-commit 55c5adf9676ecb49e8083fe3458381e751796123
-Merge: da14a31c db315a45
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-11-16
-Commit: GitHub
-CommitDate: 2024-11-16
-
- Merge pull request #2273 from nghttp2/urlparse
-
- Replace url-parser with urlparse
-
-commit db315a458810adb7d30be01315d48addd2a9fc40
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-11-16
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-11-16
-
- Replace url-parser with urlparse
-
-commit da14a31cfb7dd05ee0b5cbbc6ec9d04cc87da365
-Merge: 7a96731c f5b0c5bf
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-11-15
-Commit: GitHub
-CommitDate: 2024-11-15
-
- Merge pull request #2272 from nghttp2/dependabot/go_modules/golang.org/x/net-0.31.0
-
- build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
-
-commit f5b0c5bf06354d8cdb5fc46ee1c736e818bb2933
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2024-11-11
-Commit: GitHub
-CommitDate: 2024-11-11
-
- build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
-
- Bumps [golang.org/x/net](https://github.com/golang/net) from 0.30.0 to 0.31.0.
- - [Commits](https://github.com/golang/net/compare/v0.30.0...v0.31.0)
-
- ---
- updated-dependencies:
- - dependency-name: golang.org/x/net
- dependency-type: direct:production
- update-type: version-update:semver-minor
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit 7a96731c6b03810bb5f45b3bd34806b895d7446e
-Merge: 82ec1af2 ce70fb2a
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-10-30
-Commit: GitHub
-CommitDate: 2024-10-30
-
- Merge pull request #2268 from TuxInvader/conn-close-bytes
-
- account for bytes on closing connections
-
-commit ce70fb2a3e46a60a73ffe5526be9d1bdc87bd8ba
-Author: Mark Boddington
-AuthorDate: 2024-10-29
-Commit: GitHub
-CommitDate: 2024-10-29
-
- remove len check
-
-commit 82ec1af20e05b6f3d7c3b9106f777dcd28e732a1
-Merge: 55d4de79 5024c1b2
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-10-29
-Commit: GitHub
-CommitDate: 2024-10-29
-
- Merge pull request #2270 from nghttp2/dependabot/go_modules/github.com/quic-go/quic-go-0.48.1
-
- build(deps): bump github.com/quic-go/quic-go from 0.48.0 to 0.48.1
-
-commit 5024c1b2409a35c670fe945eb27c944f0e03d0c9
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2024-10-28
-Commit: GitHub
-CommitDate: 2024-10-28
-
- build(deps): bump github.com/quic-go/quic-go from 0.48.0 to 0.48.1
-
- Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.48.0 to 0.48.1.
- - [Release notes](https://github.com/quic-go/quic-go/releases)
- - [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- - [Commits](https://github.com/quic-go/quic-go/compare/v0.48.0...v0.48.1)
-
- ---
- updated-dependencies:
- - dependency-name: github.com/quic-go/quic-go
- dependency-type: direct:production
- update-type: version-update:semver-patch
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit a30bc25ac7327764863b430da3a713095afbe9df
-Author: Mark Boddington
-AuthorDate: 2024-10-25
-Commit: GitHub
-CommitDate: 2024-10-25
-
- account for bytes on closing connections
-
-commit 55d4de7963bc8c2c849cf4ca0c195a6d9f8e12eb
-Merge: fcd4f266 69df6871
-Author: Tatsuhiro Tsujikawa <404610+tatsuhiro-t@users.noreply.github.com>
-AuthorDate: 2024-10-22
-Commit: GitHub
-CommitDate: 2024-10-22
-
- Merge pull request #2266 from nghttp2/dependabot/go_modules/github.com/quic-go/quic-go-0.48.0
-
- build(deps): bump github.com/quic-go/quic-go from 0.47.0 to 0.48.0
-
-commit 69df6871f63994fa41b09f2d1972ee43982e894b
-Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-AuthorDate: 2024-10-21
-Commit: GitHub
-CommitDate: 2024-10-21
-
- build(deps): bump github.com/quic-go/quic-go from 0.47.0 to 0.48.0
-
- Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.47.0 to 0.48.0.
- - [Release notes](https://github.com/quic-go/quic-go/releases)
- - [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- - [Commits](https://github.com/quic-go/quic-go/compare/v0.47.0...v0.48.0)
-
- ---
- updated-dependencies:
- - dependency-name: github.com/quic-go/quic-go
- dependency-type: direct:production
- update-type: version-update:semver-minor
- ...
-
- Signed-off-by: dependabot[bot]
-
-commit fcd4f2663a61d1098cb2fca7d4da7e009f285569
-Author: Tatsuhiro Tsujikawa
-AuthorDate: 2024-10-21
-Commit: Tatsuhiro Tsujikawa
-CommitDate: 2024-10-21
-
- Bump package version
diff --git a/deps/curl/dep/nghttp2/README.rst b/deps/curl/dep/nghttp2/README.rst
deleted file mode 100644
index d2020ef63..000000000
--- a/deps/curl/dep/nghttp2/README.rst
+++ /dev/null
@@ -1,1466 +0,0 @@
-nghttp2 - HTTP/2 C Library
-==========================
-
-This is an implementation of the Hypertext Transfer Protocol version 2
-in C.
-
-The framing layer of HTTP/2 is implemented as a reusable C library.
-On top of that, we have implemented an HTTP/2 client, server and
-proxy. We have also developed load test and benchmarking tools for
-HTTP/2.
-
-An HPACK encoder and decoder are available as a public API.
-
-Development Status
-------------------
-
-nghttp2 was originally developed based on `RFC 7540
-`_ HTTP/2 and `RFC 7541
-`_ HPACK - Header Compression for
-HTTP/2. Now we are updating our code to implement `RFC 9113
-`_.
-
-The nghttp2 code base was forked from the spdylay
-(https://github.com/tatsuhiro-t/spdylay) project.
-
-Public Test Server
-------------------
-
-The following endpoints are available to try out our nghttp2
-implementation.
-
-* https://nghttp2.org/ (TLS + ALPN and HTTP/3)
-
- This endpoint supports ``h2``, ``h2-16``, ``h2-14``, and
- ``http/1.1`` via ALPN and requires TLSv1.2 for HTTP/2
- connection.
-
- It also supports HTTP/3.
-
-* http://nghttp2.org/ (HTTP Upgrade and HTTP/2 Direct)
-
- ``h2c`` and ``http/1.1``.
-
-Requirements
-------------
-
-The following package is required to build the libnghttp2 library:
-
-* pkg-config >= 0.20
-
-To build the documentation, you need to install:
-
-* sphinx (http://sphinx-doc.org/)
-
-If you need libnghttp2 (C library) only, then the above packages are
-all you need. Use ``--enable-lib-only`` to ensure that only
-libnghttp2 is built. This avoids potential build error related to
-building bundled applications.
-
-To build and run the application programs (``nghttp``, ``nghttpd``,
-``nghttpx`` and ``h2load``) in the ``src`` directory, the following packages
-are required:
-
-* OpenSSL >= 1.1.1; or wolfSSL >= 5.7.0; or LibreSSL >= 3.8.1; or
- aws-lc >= 1.19.0; or BoringSSL
-* libev >= 4.11
-* zlib >= 1.2.3
-* libc-ares >= 1.7.5
-
-To enable ``-a`` option (getting linked assets from the downloaded
-resource) in ``nghttp``, the following package is required:
-
-* libxml2 >= 2.6.26
-
-To enable systemd support in nghttpx, the following package is
-required:
-
-* libsystemd-dev >= 209
-
-The HPACK tools require the following package:
-
-* jansson >= 2.5
-
-To build sources under the examples directory, libevent is required:
-
-* libevent-openssl >= 2.0.8
-
-To mitigate heap fragmentation in long running server programs
-(``nghttpd`` and ``nghttpx``), jemalloc is recommended:
-
-* jemalloc
-
- .. note::
-
- Alpine Linux currently does not support malloc replacement
- due to musl limitations. See details in issue `#762 `_.
-
-For BoringSSL or aws-lc build, to enable :rfc:`8879` TLS Certificate
-Compression in applications, the following library is required:
-
-* libbrotli-dev >= 1.0.9
-
-To enable mruby support for nghttpx, `mruby
-`_ is required. We need to build
-mruby with C++ ABI explicitly turned on, and probably need other
-mrgems, mruby is managed by git submodule under third-party/mruby
-directory. Currently, mruby support for nghttpx is disabled by
-default. To enable mruby support, use ``--with-mruby`` configure
-option. Note that at the time of this writing, libmruby-dev and mruby
-packages in Debian/Ubuntu are not usable for nghttp2, since they do
-not enable C++ ABI. To build mruby, the following packages are
-required:
-
-* ruby
-* bison
-
-nghttpx supports `neverbleed `_,
-privilege separation engine for OpenSSL. In short, it minimizes the
-risk of private key leakage when serious bug like Heartbleed is
-exploited. The neverbleed is disabled by default. To enable it, use
-``--with-neverbleed`` configure option.
-
-To enable the experimental HTTP/3 support for h2load and nghttpx, the
-following libraries are required:
-
-* `OpenSSL with QUIC support
- `_; or
- wolfSSL; or LibreSSL (does not support 0RTT); or aws-lc; or
- `BoringSSL `_ (commit
- 294ab9730c570213b496cfc2fc14b3c0bfcd4bcc)
-* `ngtcp2 `_ >= 1.4.0
-* `nghttp3 `_ >= 1.1.0
-
-Use ``--enable-http3`` configure option to enable HTTP/3 feature for
-h2load and nghttpx.
-
-In order to build optional eBPF program to direct an incoming QUIC UDP
-datagram to a correct socket for nghttpx, the following libraries are
-required:
-
-* libbpf-dev >= 0.7.0
-
-Use ``--with-libbpf`` configure option to build eBPF program.
-libelf-dev is needed to build libbpf.
-
-For Ubuntu 20.04, you can build libbpf from `the source code
-`_. nghttpx requires eBPF
-program for reloading its configuration and hot swapping its
-executable.
-
-Compiling libnghttp2 C source code requires a C99 compiler. gcc 4.8
-is known to be adequate. In order to compile the C++ source code,
-C++20 compliant compiler is required. At least g++ >= 12 and
-clang++ >= 15 are known to work.
-
-.. note::
-
- To enable mruby support in nghttpx, and use ``--with-mruby``
- configure option.
-
-.. note::
-
- Mac OS X users may need the ``--disable-threads`` configure option to
- disable multi-threading in nghttpd, nghttpx and h2load to prevent
- them from crashing. A patch is welcome to make multi threading work
- on Mac OS X platform.
-
-.. note::
-
- To compile the associated applications (nghttp, nghttpd, nghttpx
- and h2load), you must use the ``--enable-app`` configure option and
- ensure that the specified requirements above are met. Normally,
- configure script checks required dependencies to build these
- applications, and enable ``--enable-app`` automatically, so you
- don't have to use it explicitly. But if you found that
- applications were not built, then using ``--enable-app`` may find
- that cause, such as the missing dependency.
-
-.. note::
-
- In order to detect third party libraries, pkg-config is used
- (however we don't use pkg-config for some libraries (e.g., libev)).
- By default, pkg-config searches ``*.pc`` file in the standard
- locations (e.g., /usr/lib/pkgconfig). If it is necessary to use
- ``*.pc`` file in the custom location, specify paths to
- ``PKG_CONFIG_PATH`` environment variable, and pass it to configure
- script, like so:
-
- .. code-block:: text
-
- $ ./configure PKG_CONFIG_PATH=/path/to/pkgconfig
-
- For pkg-config managed libraries, ``*_CFLAG`` and ``*_LIBS``
- environment variables are defined (e.g., ``OPENSSL_CFLAGS``,
- ``OPENSSL_LIBS``). Specifying non-empty string to these variables
- completely overrides pkg-config. In other words, if they are
- specified, pkg-config is not used for detection, and user is
- responsible to specify the correct values to these variables. For
- complete list of these variables, run ``./configure -h``.
-
-If you are using Ubuntu 22.04 LTS, run the following to install the
-required packages:
-
-.. code-block:: text
-
- sudo apt-get install g++ clang make binutils autoconf automake \
- autotools-dev libtool pkg-config \
- zlib1g-dev libssl-dev libxml2-dev libev-dev \
- libevent-dev libjansson-dev \
- libc-ares-dev libjemalloc-dev libsystemd-dev \
- ruby-dev bison libelf-dev
-
-Building nghttp2 from release tar archive
------------------------------------------
-
-The nghttp2 project regularly releases tar archives which includes
-nghttp2 source code, and generated build files. They can be
-downloaded from `Releases
-`_ page.
-
-Building nghttp2 from git requires autotools development packages.
-Building from tar archives does not require them, and thus it is much
-easier. The usual build step is as follows:
-
-.. code-block:: text
-
- $ tar xf nghttp2-X.Y.Z.tar.bz2
- $ cd nghttp2-X.Y.Z
- $ ./configure
- $ make
-
-Building from git
------------------
-
-Building from git is easy, but please be sure that at least autoconf 2.68 is
-used:
-
-.. code-block:: text
-
- $ git submodule update --init
- $ autoreconf -i
- $ automake
- $ autoconf
- $ ./configure
- $ make
-
-Notes for building on Windows (MSVC)
-------------------------------------
-
-The easiest way to build native Windows nghttp2 dll is use `cmake
-`_. The free version of `Visual C++ Build Tools
-`_ works
-fine.
-
-1. Install cmake for windows
-2. Open "Visual C++ ... Native Build Tool Command Prompt", and inside
- nghttp2 directly, run ``cmake``.
-3. Then run ``cmake --build`` to build library.
-4. nghttp2.dll, nghttp2.lib, nghttp2.exp are placed under lib directory.
-
-Note that the above steps most likely produce nghttp2 library only.
-No bundled applications are compiled.
-
-Notes for building on Windows (Mingw/Cygwin)
---------------------------------------------
-
-Under Mingw environment, you can only compile the library, it's
-``libnghttp2-X.dll`` and ``libnghttp2.a``.
-
-If you want to compile the applications(``h2load``, ``nghttp``,
-``nghttpx``, ``nghttpd``), you need to use the Cygwin environment.
-
-Under Cygwin environment, to compile the applications you need to
-compile and install the libev first.
-
-Secondly, you need to undefine the macro ``__STRICT_ANSI__``, if you
-not, the functions ``fdopen``, ``fileno`` and ``strptime`` will not
-available.
-
-the sample command like this:
-
-.. code-block:: text
-
- $ export CFLAGS="-U__STRICT_ANSI__ -I$libev_PREFIX/include -L$libev_PREFIX/lib"
- $ export CXXFLAGS=$CFLAGS
- $ ./configure
- $ make
-
-If you want to compile the applications under ``examples/``, you need
-to remove or rename the ``event.h`` from libev's installation, because
-it conflicts with libevent's installation.
-
-Notes for installation on Linux systems
---------------------------------------------
-After installing nghttp2 tool suite with ``make install`` one might experience a similar error:
-
-.. code-block:: text
-
- nghttpx: error while loading shared libraries: libnghttp2.so.14: cannot open shared object file: No such file or directory
-
-This means that the tool is unable to locate the ``libnghttp2.so`` shared library.
-
-To update the shared library cache run ``sudo ldconfig``.
-
-Building the documentation
---------------------------
-
-.. note::
-
- Documentation is still incomplete.
-
-To build the documentation, run:
-
-.. code-block:: text
-
- $ make html
-
-The documents will be generated under ``doc/manual/html/``.
-
-The generated documents will not be installed with ``make install``.
-
-The online documentation is available at
-https://nghttp2.org/documentation/
-
-Build HTTP/3 enabled h2load and nghttpx
----------------------------------------
-
-To build h2load and nghttpx with HTTP/3 feature enabled, run the
-configure script with ``--enable-http3``.
-
-For nghttpx to reload configurations and swapping its executable while
-gracefully terminating old worker processes, eBPF is required. Run
-the configure script with ``--enable-http3 --with-libbpf`` to build
-eBPF program. The QUIC keying material must be set with
-``--frontend-quic-secret-file`` in order to keep the existing
-connections alive during reload.
-
-The detailed steps to build HTTP/3 enabled h2load and nghttpx follow.
-
-Build aws-lc:
-
-.. code-block:: text
-
- $ git clone --depth 1 -b v1.46.1 https://github.com/aws/aws-lc
- $ cd aws-lc
- $ cmake -B build -DDISABLE_GO=ON --install-prefix=$PWD/opt
- $ make -j$(nproc) -C build
- $ cmake --install build
- $ cd ..
-
-Build nghttp3:
-
-.. code-block:: text
-
- $ git clone --depth 1 -b v1.8.0 https://github.com/ngtcp2/nghttp3
- $ cd nghttp3
- $ git submodule update --init --depth 1
- $ autoreconf -i
- $ ./configure --prefix=$PWD/build --enable-lib-only
- $ make -j$(nproc)
- $ make install
- $ cd ..
-
-Build ngtcp2:
-
-.. code-block:: text
-
- $ git clone --depth 1 -b v1.11.0 https://github.com/ngtcp2/ngtcp2
- $ cd ngtcp2
- $ git submodule update --init --depth 1
- $ autoreconf -i
- $ ./configure --prefix=$PWD/build --enable-lib-only --with-boringssl \
- BORINGSSL_CFLAGS="-I$PWD/../aws-lc/opt/include" \
- BORINGSSL_LIBS="-L$PWD/../aws-lc/opt/lib -lssl -lcrypto"
- $ make -j$(nproc)
- $ make install
- $ cd ..
-
-If your Linux distribution does not have libbpf-dev >= 0.7.0, build
-from source:
-
-.. code-block:: text
-
- $ git clone --depth 1 -b v1.5.0 https://github.com/libbpf/libbpf
- $ cd libbpf
- $ PREFIX=$PWD/build make -C src install
- $ cd ..
-
-Build nghttp2:
-
-.. code-block:: text
-
- $ git clone https://github.com/nghttp2/nghttp2
- $ cd nghttp2
- $ git submodule update --init
- $ autoreconf -i
- $ ./configure --with-mruby --enable-http3 --with-libbpf \
- CC=clang-15 CXX=clang++-15 \
- PKG_CONFIG_PATH="$PWD/../aws-lc/opt/lib/pkgconfig:$PWD/../nghttp3/build/lib/pkgconfig:$PWD/../ngtcp2/build/lib/pkgconfig:$PWD/../libbpf/build/lib64/pkgconfig" \
- LDFLAGS="$LDFLAGS -Wl,-rpath,$PWD/../aws-lc/opt/lib -Wl,-rpath,$PWD/../libbpf/build/lib64"
- $ make -j$(nproc)
-
-The eBPF program ``reuseport_kern.o`` should be found under bpf
-directory. Pass ``--quic-bpf-program-file=bpf/reuseport_kern.o``
-option to nghttpx to load it. See also `HTTP/3 section in nghttpx -
-HTTP/2 proxy - HOW-TO
-`_.
-
-Unit tests
-----------
-
-Unit tests are done by simply running ``make check``.
-
-Integration tests
------------------
-
-We have the integration tests for the nghttpx proxy server. The tests are
-written in the `Go programming language `_ and uses
-its testing framework. We depend on the following libraries:
-
-* golang.org/x/net/http2
-* golang.org/x/net/websocket
-* https://github.com/tatsuhiro-t/go-nghttp2
-
-Go modules will download these dependencies automatically.
-
-To run the tests, run the following command under
-``integration-tests`` directory:
-
-.. code-block:: text
-
- $ make it
-
-Inside the tests, we use port 3009 to run the test subject server.
-
-Migration from v0.7.15 or earlier
----------------------------------
-
-nghttp2 v1.0.0 introduced several backward incompatible changes. In
-this section, we describe these changes and how to migrate to v1.0.0.
-
-ALPN protocol ID is now ``h2`` and ``h2c``
-++++++++++++++++++++++++++++++++++++++++++
-
-Previously we announced ``h2-14`` and ``h2c-14``. v1.0.0 implements
-final protocol version, and we changed ALPN ID to ``h2`` and ``h2c``.
-The macros ``NGHTTP2_PROTO_VERSION_ID``,
-``NGHTTP2_PROTO_VERSION_ID_LEN``,
-``NGHTTP2_CLEARTEXT_PROTO_VERSION_ID``, and
-``NGHTTP2_CLEARTEXT_PROTO_VERSION_ID_LEN`` have been updated to
-reflect this change.
-
-Basically, existing applications do not have to do anything, just
-recompiling is enough for this change.
-
-Use word "client magic" where we use "client connection preface"
-++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-
-We use "client connection preface" to mean first 24 bytes of client
-connection preface. This is technically not correct, since client
-connection preface is composed of 24 bytes client magic byte string
-followed by SETTINGS frame. For clarification, we call "client magic"
-for this 24 bytes byte string and updated API.
-
-* ``NGHTTP2_CLIENT_CONNECTION_PREFACE`` was replaced with
- ``NGHTTP2_CLIENT_MAGIC``.
-* ``NGHTTP2_CLIENT_CONNECTION_PREFACE_LEN`` was replaced with
- ``NGHTTP2_CLIENT_MAGIC_LEN``.
-* ``NGHTTP2_BAD_PREFACE`` was renamed as ``NGHTTP2_BAD_CLIENT_MAGIC``
-
-The already deprecated ``NGHTTP2_CLIENT_CONNECTION_HEADER`` and
-``NGHTTP2_CLIENT_CONNECTION_HEADER_LEN`` were removed.
-
-If application uses these macros, just replace old ones with new ones.
-Since v1.0.0, client magic is sent by library (see next subsection),
-so client application may just remove these macro use.
-
-Client magic is sent by library
-+++++++++++++++++++++++++++++++
-
-Previously nghttp2 library did not send client magic, which is first
-24 bytes byte string of client connection preface, and client
-applications have to send it by themselves. Since v1.0.0, client
-magic is sent by library via first call of ``nghttp2_session_send()``
-or ``nghttp2_session_mem_send2()``.
-
-The client applications which send client magic must remove the
-relevant code.
-
-Remove HTTP Alternative Services (Alt-Svc) related code
-+++++++++++++++++++++++++++++++++++++++++++++++++++++++
-
-Alt-Svc specification is not finalized yet. To make our API stable,
-we have decided to remove all Alt-Svc related API from nghttp2.
-
-* ``NGHTTP2_EXT_ALTSVC`` was removed.
-* ``nghttp2_ext_altsvc`` was removed.
-
-We have already removed the functionality of Alt-Svc in v0.7 series
-and they have been essentially noop. The application using these
-macro and struct, remove those lines.
-
-Use nghttp2_error in nghttp2_on_invalid_frame_recv_callback
-+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-
-Previously ``nghttp2_on_invalid_frame_recv_cb_called`` took the
-``error_code``, defined in ``nghttp2_error_code``, as parameter. But
-they are not detailed enough to debug. Therefore, we decided to use
-more detailed ``nghttp2_error`` values instead.
-
-The application using this callback should update the callback
-signature. If it treats ``error_code`` as HTTP/2 error code, update
-the code so that it is treated as ``nghttp2_error``.
-
-Receive client magic by default
-+++++++++++++++++++++++++++++++
-
-Previously nghttp2 did not process client magic (24 bytes byte
-string). To make it deal with it, we had to use
-``nghttp2_option_set_recv_client_preface()``. Since v1.0.0, nghttp2
-processes client magic by default and
-``nghttp2_option_set_recv_client_preface()`` was removed.
-
-Some application may want to disable this behaviour, so we added
-``nghttp2_option_set_no_recv_client_magic()`` to achieve this.
-
-The application using ``nghttp2_option_set_recv_client_preface()``
-with nonzero value, just remove it.
-
-The application using ``nghttp2_option_set_recv_client_preface()``
-with zero value or not using it must use
-``nghttp2_option_set_no_recv_client_magic()`` with nonzero value.
-
-Client, Server and Proxy programs
----------------------------------
-
-The ``src`` directory contains the HTTP/2 client, server and proxy programs.
-
-nghttp - client
-+++++++++++++++
-
-``nghttp`` is a HTTP/2 client. It can connect to the HTTP/2 server
-with prior knowledge, HTTP Upgrade and ALPN TLS extension.
-
-It has verbose output mode for framing information. Here is sample
-output from ``nghttp`` client:
-
-.. code-block:: text
-
- $ nghttp -nv https://nghttp2.org
- [ 0.190] Connected
- The negotiated protocol: h2
- [ 0.212] recv SETTINGS frame
- (niv=2)
- [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
- [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
- [ 0.212] send SETTINGS frame
- (niv=2)
- [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
- [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
- [ 0.212] send SETTINGS frame
- ; ACK
- (niv=0)
- [ 0.212] send PRIORITY frame
- (dep_stream_id=0, weight=201, exclusive=0)
- [ 0.212] send PRIORITY frame
- (dep_stream_id=0, weight=101, exclusive=0)
- [ 0.212] send PRIORITY frame
- (dep_stream_id=0, weight=1, exclusive=0)
- [ 0.212] send PRIORITY frame
- (dep_stream_id=7, weight=1, exclusive=0)
- [ 0.212] send PRIORITY frame
- (dep_stream_id=3, weight=1, exclusive=0)
- [ 0.212] send HEADERS frame
- ; END_STREAM | END_HEADERS | PRIORITY
- (padlen=0, dep_stream_id=11, weight=16, exclusive=0)
- ; Open new stream
- :method: GET
- :path: /
- :scheme: https
- :authority: nghttp2.org
- accept: */*
- accept-encoding: gzip, deflate
- user-agent: nghttp2/1.0.1-DEV
- [ 0.221] recv SETTINGS frame
- ; ACK
- (niv=0)
- [ 0.221] recv (stream_id=13) :method: GET
- [ 0.221] recv (stream_id=13) :scheme: https
- [ 0.221] recv (stream_id=13) :path: /stylesheets/screen.css
- [ 0.221] recv (stream_id=13) :authority: nghttp2.org
- [ 0.221] recv (stream_id=13) accept-encoding: gzip, deflate
- [ 0.222] recv (stream_id=13) user-agent: nghttp2/1.0.1-DEV
- [ 0.222] recv PUSH_PROMISE frame
- ; END_HEADERS
- (padlen=0, promised_stream_id=2)
- [ 0.222] recv (stream_id=13) :status: 200
- [ 0.222] recv (stream_id=13) date: Thu, 21 May 2015 16:38:14 GMT
- [ 0.222] recv (stream_id=13) content-type: text/html
- [ 0.222] recv (stream_id=13) last-modified: Fri, 15 May 2015 15:38:06 GMT
- [ 0.222] recv (stream_id=13) etag: W/"555612de-19f6"
- [ 0.222] recv (stream_id=13) link: ; rel=preload; as=stylesheet
- [ 0.222] recv (stream_id=13) content-encoding: gzip
- [ 0.222] recv (stream_id=13) server: nghttpx nghttp2/1.0.1-DEV
- [ 0.222] recv (stream_id=13) via: 1.1 nghttpx
- [ 0.222] recv (stream_id=13) strict-transport-security: max-age=31536000
- [ 0.222] recv HEADERS frame
- ; END_HEADERS
- (padlen=0)
- ; First response header
- [ 0.222] recv DATA frame
- ; END_STREAM
- [ 0.222] recv (stream_id=2) :status: 200
- [ 0.222] recv (stream_id=2) date: Thu, 21 May 2015 16:38:14 GMT
- [ 0.222] recv (stream_id=2) content-type: text/css
- [ 0.222] recv (stream_id=2) last-modified: Fri, 15 May 2015 15:38:06 GMT
- [ 0.222] recv (stream_id=2) etag: W/"555612de-9845"
- [ 0.222] recv (stream_id=2) content-encoding: gzip
- [ 0.222] recv (stream_id=2) server: nghttpx nghttp2/1.0.1-DEV
- [ 0.222] recv (stream_id=2) via: 1.1 nghttpx
- [ 0.222] recv (stream_id=2) strict-transport-security: max-age=31536000
- [ 0.222] recv HEADERS frame
- ; END_HEADERS
- (padlen=0)
- ; First push response header
- [ 0.228] recv DATA frame
- ; END_STREAM
- [ 0.228] send GOAWAY frame
- (last_stream_id=2, error_code=NO_ERROR(0x00), opaque_data(0)=[])
-
-The HTTP Upgrade is performed like so:
-
-.. code-block:: text
-
- $ nghttp -nvu http://nghttp2.org
- [ 0.011] Connected
- [ 0.011] HTTP Upgrade request
- GET / HTTP/1.1
- Host: nghttp2.org
- Connection: Upgrade, HTTP2-Settings
- Upgrade: h2c
- HTTP2-Settings: AAMAAABkAAQAAP__
- Accept: */*
- User-Agent: nghttp2/1.0.1-DEV
-
-
- [ 0.018] HTTP Upgrade response
- HTTP/1.1 101 Switching Protocols
- Connection: Upgrade
- Upgrade: h2c
-
-
- [ 0.018] HTTP Upgrade success
- [ 0.018] recv SETTINGS frame
- (niv=2)
- [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
- [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
- [ 0.018] send SETTINGS frame
- (niv=2)
- [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
- [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
- [ 0.018] send SETTINGS frame
- ; ACK
- (niv=0)
- [ 0.018] send PRIORITY frame
- (dep_stream_id=0, weight=201, exclusive=0)
- [ 0.018] send PRIORITY frame
- (dep_stream_id=0, weight=101, exclusive=0)
- [ 0.018] send PRIORITY frame
- (dep_stream_id=0, weight=1, exclusive=0)
- [ 0.018] send PRIORITY frame
- (dep_stream_id=7, weight=1, exclusive=0)
- [ 0.018] send PRIORITY frame
- (dep_stream_id=3, weight=1, exclusive=0)
- [ 0.018] send PRIORITY frame
- (dep_stream_id=11, weight=16, exclusive=0)
- [ 0.019] recv (stream_id=1) :method: GET
- [ 0.019] recv (stream_id=1) :scheme: http
- [ 0.019] recv (stream_id=1) :path: /stylesheets/screen.css
- [ 0.019] recv (stream_id=1) host: nghttp2.org
- [ 0.019] recv (stream_id=1) user-agent: nghttp2/1.0.1-DEV
- [ 0.019] recv PUSH_PROMISE frame
- ; END_HEADERS
- (padlen=0, promised_stream_id=2)
- [ 0.019] recv (stream_id=1) :status: 200
- [ 0.019] recv (stream_id=1) date: Thu, 21 May 2015 16:39:16 GMT
- [ 0.019] recv (stream_id=1) content-type: text/html
- [ 0.019] recv (stream_id=1) content-length: 6646
- [ 0.019] recv (stream_id=1) last-modified: Fri, 15 May 2015 15:38:06 GMT
- [ 0.019] recv (stream_id=1) etag: "555612de-19f6"
- [ 0.019] recv (stream_id=1) link: ; rel=preload; as=stylesheet
- [ 0.019] recv (stream_id=1) accept-ranges: bytes
- [ 0.019] recv (stream_id=1) server: nghttpx nghttp2/1.0.1-DEV
- [ 0.019] recv (stream_id=1) via: 1.1 nghttpx
- [ 0.019] recv HEADERS frame
- ; END_HEADERS
- (padlen=0)
- ; First response header
- [ 0.019] recv DATA frame
- ; END_STREAM
- [ 0.019] recv (stream_id=2) :status: 200
- [ 0.019] recv (stream_id=2) date: Thu, 21 May 2015 16:39:16 GMT
- [ 0.019] recv (stream_id=2) content-type: text/css
- [ 0.019] recv (stream_id=2) content-length: 38981
- [ 0.019] recv (stream_id=2) last-modified: Fri, 15 May 2015 15:38:06 GMT
- [ 0.019] recv (stream_id=2) etag: "555612de-9845"
- [ 0.019] recv (stream_id=2) accept-ranges: bytes
- [ 0.019] recv (stream_id=2) server: nghttpx nghttp2/1.0.1-DEV
- [ 0.019] recv (stream_id=2) via: 1.1 nghttpx
- [ 0.019] recv HEADERS frame
- ; END_HEADERS
- (padlen=0)
- ; First push response header
- [ 0.026] recv DATA frame
- [ 0.027] recv DATA frame
- [ 0.027] send WINDOW_UPDATE frame
- (window_size_increment=33343)
- [ 0.032] send WINDOW_UPDATE frame
- (window_size_increment=33707)
- [ 0.032] recv DATA frame
- ; END_STREAM
- [ 0.032] recv SETTINGS frame
- ; ACK
- (niv=0)
- [ 0.032] send GOAWAY frame
- (last_stream_id=2, error_code=NO_ERROR(0x00), opaque_data(0)=[])
-
-Using the ``-s`` option, ``nghttp`` prints out some timing information for
-requests, sorted by completion time:
-
-.. code-block:: text
-
- $ nghttp -nas https://nghttp2.org/
- ***** Statistics *****
-
- Request timing:
- responseEnd: the time when last byte of response was received
- relative to connectEnd
- requestStart: the time just before first byte of request was sent
- relative to connectEnd. If '*' is shown, this was
- pushed by server.
- process: responseEnd - requestStart
- code: HTTP status code
- size: number of bytes received as response body without
- inflation.
- URI: request URI
-
- see http://www.w3.org/TR/resource-timing/#processing-model
-
- sorted by 'complete'
-
- id responseEnd requestStart process code size request path
- 13 +37.19ms +280us 36.91ms 200 2K /
- 2 +72.65ms * +36.38ms 36.26ms 200 8K /stylesheets/screen.css
- 17 +77.43ms +38.67ms 38.75ms 200 3K /javascripts/octopress.js
- 15 +78.12ms +38.66ms 39.46ms 200 3K /javascripts/modernizr-2.0.js
-
-Using the ``-r`` option, ``nghttp`` writes more detailed timing data to
-the given file in HAR format.
-
-nghttpd - server
-++++++++++++++++
-
-``nghttpd`` is a multi-threaded static web server.
-
-By default, it uses SSL/TLS connection. Use ``--no-tls`` option to
-disable it.
-
-``nghttpd`` only accepts HTTP/2 connections via ALPN or direct HTTP/2
-connections. No HTTP Upgrade is supported.
-
-The ``-p`` option allows users to configure server push.
-
-Just like ``nghttp``, it has a verbose output mode for framing
-information. Here is sample output from ``nghttpd``:
-
-.. code-block:: text
-
- $ nghttpd --no-tls -v 8080
- IPv4: listen 0.0.0.0:8080
- IPv6: listen :::8080
- [id=1] [ 1.521] send SETTINGS frame
- (niv=1)
- [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
- [id=1] [ 1.521] recv SETTINGS frame
- (niv=2)
- [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
- [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
- [id=1] [ 1.521] recv SETTINGS frame
- ; ACK
- (niv=0)
- [id=1] [ 1.521] recv PRIORITY frame
- (dep_stream_id=0, weight=201, exclusive=0)
- [id=1] [ 1.521] recv PRIORITY frame
- (dep_stream_id=0, weight=101, exclusive=0)
- [id=1] [ 1.521] recv PRIORITY frame
- (dep_stream_id=0, weight=1, exclusive=0)
- [id=1] [ 1.521] recv PRIORITY frame
- (dep_stream_id=7, weight=1, exclusive=0)
- [id=1] [ 1.521] recv PRIORITY frame
- (dep_stream_id=3, weight=1, exclusive=0)
- [id=1] [ 1.521] recv (stream_id=13) :method: GET
- [id=1] [ 1.521] recv (stream_id=13) :path: /
- [id=1] [ 1.521] recv (stream_id=13) :scheme: http
- [id=1] [ 1.521] recv (stream_id=13) :authority: localhost:8080
- [id=1] [ 1.521] recv (stream_id=13) accept: */*
- [id=1] [ 1.521] recv (stream_id=13) accept-encoding: gzip, deflate
- [id=1] [ 1.521] recv (stream_id=13) user-agent: nghttp2/1.0.0-DEV
- [id=1] [ 1.521] recv HEADERS frame
- ; END_STREAM | END_HEADERS | PRIORITY
- (padlen=0, dep_stream_id=11, weight=16, exclusive=0)
- ; Open new stream
- [id=1] [ 1.521] send SETTINGS frame
- ; ACK
- (niv=0)
- [id=1] [ 1.521] send HEADERS frame
- ; END_HEADERS
- (padlen=0)
- ; First response header
- :status: 200
- server: nghttpd nghttp2/1.0.0-DEV
- content-length: 10
- cache-control: max-age=3600
- date: Fri, 15 May 2015 14:49:04 GMT
- last-modified: Tue, 30 Sep 2014 12:40:52 GMT
- [id=1] [ 1.522] send DATA frame