From nobody Wed Aug 17 14:46:10 2022
Return-Path: <Brian.Sipos@jhuapl.edu>
X-Original-To: manet@ietfa.amsl.com
Delivered-To: manet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
 by ietfa.amsl.com (Postfix) with ESMTP id DD021C14F743
 for <manet@ietfa.amsl.com>; Wed, 17 Aug 2022 14:46:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level: 
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5
 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
 DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001,
 RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001,
 URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001]
 autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key)
 header.d=jhuapl.edu
Received: from mail.ietf.org ([50.223.129.194])
 by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id M3pB6-c0CVVo for <manet@ietfa.amsl.com>;
 Wed, 17 Aug 2022 14:46:04 -0700 (PDT)
Received: from aplegw01.jhuapl.edu (aplegw01.jhuapl.edu [128.244.251.168])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by ietfa.amsl.com (Postfix) with ESMTPS id AD068C1524D1
 for <manet@ietf.org>; Wed, 17 Aug 2022 14:46:04 -0700 (PDT)
Received: from pps.filterd (aplegw01.jhuapl.edu [127.0.0.1])
 by aplegw01.jhuapl.edu (8.17.1.5/8.17.1.5) with ESMTP id 27HLhPce024394
 for <manet@ietf.org>; Wed, 17 Aug 2022 17:46:02 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhuapl.edu;
 h=from : to : subject :
 date : message-id : content-type : mime-version; s=JHUAPLDec2018;
 bh=Xo1OLK0oEefN6cyGjcKpiU6v/5aGSww2z3HVe56Jvnk=;
 b=kPkkQ3WKVC2HoVyLgxXV3L6NvrridudX/vMASXyb7Kye0OwWuvaDhAXT4AZ8Hds4Lpv1
 Gt34Supdrn77Kk3ppQhjaz+/s+rZ5eAcGBM91MAD5nrZFn9fkJWsLYF+xIe+qacwGnCD
 g8Af9OGzFfVeOwdgPQx6+34y+kkJ7sknRTjgc+j3lqeVedPz+ehBeRdiR55VwSozgaW6
 +T1KmJLwjmZF/RNHvli+n17Sk/6Nk/vB5nSgFETIeLXC22cbQbxh/UoFTB9osruXAA1n
 HhhJ33ek32h2u3AlF8aaT6m7YDamwJwLm/IwfdSJvqjHdSOHklbGNOX/0xsrTSzo3Iz5 +Q== 
Received: from aplex26.dom1.jhuapl.edu (aplex26.dom1.jhuapl.edu
 [10.114.162.11])
 by aplegw01.jhuapl.edu (PPS) with ESMTPS id 3hx5093wjh-1
 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)
 for <manet@ietf.org>; Wed, 17 Aug 2022 17:46:02 -0400
Received: from APLEX21.dom1.jhuapl.edu (10.114.162.6) by
 APLEX26.dom1.jhuapl.edu (10.114.162.11) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.2.1118.9; Wed, 17 Aug 2022 17:46:01 -0400
Received: from APLEX21.dom1.jhuapl.edu ([fe80::61c3:f0b7:2fc7:8018]) by
 APLEX21.dom1.jhuapl.edu ([fe80::61c3:f0b7:2fc7:8018%5]) with mapi id
 15.02.1118.009; Wed, 17 Aug 2022 17:46:01 -0400
From: "Sipos, Brian J." <Brian.Sipos@jhuapl.edu>
To: "manet@ietf.org" <manet@ietf.org>
Thread-Topic: DLEP unspecified handling behavior
Thread-Index: AdiygQ0GHmfIujp6Rj6cKmzngMu+fA==
Date: Wed, 17 Aug 2022 21:46:01 +0000
Message-ID: <14dba05a30954e208cb6b55d8cdee712@jhuapl.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.114.162.26]
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
 micalg=SHA1; boundary="----=_NextPart_000_03F8_01D8B261.367C3070"
MIME-Version: 1.0
X-CrossPremisesHeadersFilteredBySendConnector: APLEX26.dom1.jhuapl.edu
X-OrganizationHeadersPreserved: APLEX26.dom1.jhuapl.edu
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.205,Aquarius:18.0.883,Hydra:6.0.517,FMLib:17.11.122.1
 definitions=2022-08-17_15,2022-08-16_02,2022-06-22_01
Archived-At: <https://mailarchive.ietf.org/arch/msg/manet/-aTBaUgJJ_bWWJHhW238iT8F3aA>
Subject: [manet] DLEP unspecified handling behavior
X-BeenThere: manet@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Mobile Ad-hoc Networks  <manet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/manet>,
 <mailto:manet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/manet/>
List-Post: <mailto:manet@ietf.org>
List-Help: <mailto:manet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/manet>,
 <mailto:manet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Aug 2022 21:46:08 -0000

------=_NextPart_000_03F8_01D8B261.367C3070
Content-Type: multipart/alternative;
	boundary="----=_NextPart_001_03F9_01D8B261.367C3070"


------=_NextPart_001_03F9_01D8B261.367C3070
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

All,

This seems like an errata item for DLEP RFC 8175, but it's really an
omission rather than an error in specific existing text. Currently the text
in Section 11.3 "DLEP Generic Data Item" indicates the correct TLV encoding
for each Data Item but it doesn't recommend how a receiver of a DLEP signal
or message should handle a case where a data item Value contains either more
or fewer octets than expected based on the Data Item Type. Some current
implementations ignore too-large Value (i.e. treat it as padding) while
others treat the signal/message as being malformed and throw the whole thing
away (or, worse, mishandle the Value and desync the decoder from the data
item alignment causing later phantom data items).

It seems like an issue processing an individual data item Value should not
cause the entire signal/message to be discarded, but maybe this is desirable
behavior.

 

The same kind of logic seems to also apply to signal Length field vs the
actual datagram size. Throw away the entire signal or decode the items you
can and process that? Treat any additional datagram octets as padding?

 

Any thoughts from the WG?

Thanks,

Brian S.


------=_NextPart_001_03F9_01D8B261.367C3070
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US =
link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p =
class=3DMsoNormal>All,<o:p></o:p></p><p class=3DMsoNormal>This seems =
like an errata item for DLEP RFC 8175, but it&#8217;s really an omission =
rather than an error in specific existing text. Currently the text in =
Section 11.3 &#8220;DLEP Generic Data Item&#8221; indicates the correct =
TLV encoding for each Data Item but it doesn&#8217;t recommend how a =
receiver of a DLEP signal or message should handle a case where a data =
item Value contains either more or fewer octets than expected based on =
the Data Item Type. Some current implementations ignore too-large Value =
(i.e. treat it as padding) while others treat the signal/message as =
being malformed and throw the whole thing away (or, worse, mishandle the =
Value and desync the decoder from the data item alignment causing later =
phantom data items).<o:p></o:p></p><p class=3DMsoNormal>It seems like an =
issue processing an individual data item Value should not cause the =
entire signal/message to be discarded, but maybe this is desirable =
behavior&#8230;<o:p></o:p></p><p =
class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNormal>The same =
kind of logic seems to also apply to signal Length field vs the actual =
datagram size. Throw away the entire signal or decode the items you can =
and process that? Treat any additional datagram octets as =
padding?<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p =
class=3DMsoNormal>Any thoughts from the WG?<o:p></o:p></p><p =
class=3DMsoNormal>Thanks,<o:p></o:p></p><p class=3DMsoNormal>Brian =
S.<o:p></o:p></p></div></body></html>
------=_NextPart_001_03F9_01D8B261.367C3070--

------=_NextPart_000_03F8_01D8B261.367C3070
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIViDCCA9Iw
ggK6oAMCAQICBFWRbZ4wDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNK
b2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNV
BAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxFzAVBgNVBAMTDkpIVUFQTCBSb290IENBMB4X
DTE1MDYyOTE1MzkwMloXDTMxMDIyODE2MDkwMlowgYgxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNK
b2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNV
BAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxFzAVBgNVBAMTDkpIVUFQTCBSb290IENBMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKkDoyyRvXrtC0TJxEpR1CyTwLFAF2Gz5NN
isky/tGXPWn9cO8MGxECvZywMzFEBIJOjBmQKeMYmK2/Y/qd/fWTt/9HJTRGpDr902+4nWZJnq21
na6qS6J26reRd8BVV+O8i8TVlsuKG8snyQJUugg6D8BJWM8yPJXC9QByonfK7X1ZYCAI2h1OTTxH
RKAytgaV12PfI2AQzsT6RpVoJQqzNvu0VtAeRQ2v64cXHiPoMyrq0wT9Y+bWwD6Tjb7ZEwY1noxo
k0mhdVRH0Z17VpXuGHtBRNUyvKJx1NyztKkvbvqBqhykNn0ZM77cTLnfA6AMAazO7DgT+H1YXflz
CwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU94yZ
iElQRjdbWqkEBy07V3tOp30wDQYJKoZIhvcNAQELBQADggEBABgRzXW4bO7oTGysnxMZqIMvWUid
YoiPqf2ve6sp2S/n+bR4IHVR2mPys/haOP2kixJfKvKkYX1+kl+I4mwhLauwEUMeJSvApesCn/E+
eoFF5BMLL1euszN1MNBXhPS+e4xqaxgrPA7fCacn+i3ayqPcwSZx2AhggH0aiNqTfjANbLImq2os
AWJINJ/gEQt56b8VBdmC3KxEYtUvhHx5wrhi3ulncJ61dwSGi9olhmQtIwsngNB9FcFg3+vG9NlE
xdmQOhChscKTsYSCrVy6tHrsKvT5P4fG4aX+lDuy/kINFMkVn552eQv2j69AwtH57qkMuD7QMFVi
Wsdie1C8yRwwggXLMIIEs6ADAgECAgRVkW3xMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJV
UzE8MDoGA1UEChMzSm9obnMgSG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJv
cmF0b3J5MSIwIAYDVQQLExlDZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRcwFQYDVQQDEw5KSFVB
UEwgUm9vdCBDQTAeFw0xNTA2MjkxOTMwNTdaFw0zMTAxMjkyMDAwNTdaMIGLMQswCQYDVQQGEwJV
UzE8MDoGA1UEChMzSm9obnMgSG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJv
cmF0b3J5MSIwIAYDVQQLExlDZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRowGAYDVQQDExFKSFVB
UEwgSXNzdWluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDbSDs+bw1I2DXk
lAdB0aGUz7kZNVfRT+b6P98WZogI+HiQur3cwxWnVtSkEQKDq6CHj6ApCzX+p8U78/22fAba7tYi
WFv1JtPRis0AGLe7D4/yb2dImUtEtqiSlTtK4pAz0u+W/BWBa3AoIv3gNJDXT9+KTOHu2rFKDvyN
K7riASgJd+DU6tgK2eFcD0I3esjMvLvOVs2fMm3nYjP3qox+lPFLPFadRWkJE9bceChGhbjC9QDZ
CQMpkJ8pUcqyqsq0aYQioJf/crhwmGuj+4jUILr681TymK190psiapF7FfN8cEZxQPhytpmgVL8w
6+KCG8kdObvyYyG0jY9wEOECAwEAAaOCAjYwggIyMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8E
CDAGAQH/AgEAMIGXBggrBgEFBQcBAQSBijCBhzBSBggrBgEFBQcwAoZGaHR0cDovL2podWFwbGNy
bC5tYW5hZ2VkLmVudHJ1c3QuY29tL0FJQS9DZXJ0c0lzc3VlZHRvSkhVQVBMUm9vdENBLnA3YzAx
BggrBgEFBQcwAYYlaHR0cDovL2podWFwbG9jc3AubWFuYWdlZC5lbnRydXN0LmNvbTA8BgNVHSAE
NTAzMA8GDWCGSAGG+muBSAMKHgMwDwYNYIZIAYb6a4FIAwoeAjAPBg1ghkgBhvprgUgDCh4BMIHz
BgNVHR8EgeswgegwQKA+oDyGOmh0dHA6Ly9qaHVhcGxjcmwubWFuYWdlZC5lbnRydXN0LmNvbS9D
UkxzL2podWFwbFJvb3RDQS5jcmwwgaOggaCggZ2kgZowgZcxCzAJBgNVBAYTAlVTMTwwOgYDVQQK
EzNKb2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAg
BgNVBAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxFzAVBgNVBAMTDkpIVUFQTCBSb290IENB
MQ0wCwYDVQQDEwRDUkwxMB8GA1UdIwQYMBaAFPeMmYhJUEY3W1qpBActO1d7Tqd9MB0GA1UdDgQW
BBQigLc8FIxuLUzRCACoiti7VnV1azANBgkqhkiG9w0BAQsFAAOCAQEAjAyN/rFaFM+8N2viJpCl
yKz2CCo9RcZ1avKSJKYAv0RUFqicPoVM3f5KSfD6f2MIa/4htpQCAndQseY4/K7sZd9SgYXjSZrG
6OD3Ij9wCcwEaIxB67xigEkcJIlBTcUYDcNlEQTe2siACKkpVhd9H6/96EtHMzVFfORuupBRi4wr
S6CjS0X16BKJMl9ZSfWg59Zj+UINtzkokI7JZUJTmMJCVIbnHvJ3wkLtrvCKo2gsTYGQJ/0Rd0UW
psFpAwK+L7o9CVorSwV5UL36NY/6IoG8u3mRVvxwZdtKkBQ7ijGa0+GsiaePo0pstMEZNhX9NImZ
Xd1Cp9ViGoVjA5/RwjCCBd0wggTFoAMCAQICBFWUudEwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNV
BAYTAlVTMTwwOgYDVQQKEzNKb2hucyBIb3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNz
IExhYm9yYXRvcnkxIjAgBgNVBAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxGjAYBgNVBAMT
EUpIVUFQTCBJc3N1aW5nIENBMB4XDTIxMDgzMTE0MTcwNloXDTI0MDgzMTE0NDcwNlowdDELMAkG
A1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtpbnMgVW5pdmVyc2l0eSBBcHBsaWVkIFBoeXNp
Y3MgTGFib3JhdG9yeTEPMA0GA1UECxMGUGVvcGxlMRYwFAYDVQQDEw1CcmlhbiBKIFNpcG9zMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rjtFJaLmaFJm0lhtRKflwCm9ivLCNLWyk72
5vIu1uFxirRpTuEiV8/oHpLevzNZyd2UdJ+qoIzRojcc36gWjdnBcfdqh10VSZidxzEilrh1DnkC
cBnfCMGCPIZunfq+dbYaL+8B2UmR3K7LR8Zk/TjqU4ybZQcSmcfu0tXpWNy9vNSyRmVyeFHAZJWU
IiQiArD/dNGNfBLyIjOgoERQ/fqzfxUJDSHwIKsSQSWQD42KhDwYPtHrP8rEFryoYgr3fVpdVo2l
6gDAAx+OWtD+gWa3rZVVszAUs7xeOHassMY3xccu2GaqGLUBx/oKRFqs8ux3LKg2bD5renslwB00
/QIDAQABo4ICXTCCAlkwDgYDVR0PAQH/BAQDAgUgMBMGA1UdJQQMMAoGCCsGAQUFBwMEMIGaBggr
BgEFBQcBAQSBjTCBijBVBggrBgEFBQcwAoZJaHR0cDovL2podWFwbGNybC5tYW5hZ2VkLmVudHJ1
c3QuY29tL0FJQS9DZXJ0c0lzc3VlZHRvSkhVQVBMSXNzdWluZ0NBLnA3YzAxBggrBgEFBQcwAYYl
aHR0cDovL2podWFwbG9jc3AubWFuYWdlZC5lbnRydXN0LmNvbTAaBgNVHSAEEzARMA8GDWCGSAGG
+muBSAMKHgIwIQYDVR0RBBowGIEWQnJpYW4uU2lwb3NAamh1YXBsLmVkdTCB+gYDVR0fBIHyMIHv
MEOgQaA/hj1odHRwOi8vamh1YXBsY3JsLm1hbmFnZWQuZW50cnVzdC5jb20vQ1JMcy9KSFVBUExJ
c3N1aW5nQ0EuY3JsMIGnoIGkoIGhpIGeMIGbMQswCQYDVQQGEwJVUzE8MDoGA1UEChMzSm9obnMg
SG9wa2lucyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJvcmF0b3J5MSIwIAYDVQQLExlD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMRowGAYDVQQDExFKSFVBUEwgSXNzdWluZyBDQTEOMAwG
A1UEAxMFQ1JMNzgwHwYDVR0jBBgwFoAUIoC3PBSMbi1M0QgAqIrYu1Z1dWswHQYDVR0OBBYEFCt/
hA34Cq+Q8gAFj57ANYhZ8LbMMBkGCSqGSIb2fQdBAAQMMAobBFY4LjMDAgSwMA0GCSqGSIb3DQEB
CwUAA4IBAQCUdcSabR/btTH3jibU+C8mpZ47OT93lK7mZi0Uu/ny/MH7NrrSRDpqsvJEr2YXI5uJ
pR9ovzakotBKinso9GeaxlDeVL6+G6xEDPcJLKBr3uJqLyHDqiM2SC1v+JamSFOMEkW5dIU6XstC
x6wpm2SpKMTdGsdpikvHnE0v+SGk/rj5ThSdlud5Tubttpc7zEyVUQK9d+j4dFwgXcCZ9AqM5byT
YBLk7CEcVac0GqGI563TDPTjP6piV1c/BwA6TGT1K07a4+2Armzg/aauFvz3hS+ZsXn6nZ+25+xZ
SFDWOwNF2qqaDIid66grrXaAHnor4np/Fd/tPtRJBAbMg4hpMIIF/jCCBOagAwIBAgIEVZS50DAN
BgkqhkiG9w0BAQsFADCBizELMAkGA1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtpbnMgVW5p
dmVyc2l0eSBBcHBsaWVkIFBoeXNpY3MgTGFib3JhdG9yeTEiMCAGA1UECxMZQ2VydGlmaWNhdGlv
biBBdXRob3JpdGllczEaMBgGA1UEAxMRSkhVQVBMIElzc3VpbmcgQ0EwHhcNMjEwODMxMTQxNzA2
WhcNMjQwODMxMTQ0NzA2WjB0MQswCQYDVQQGEwJVUzE8MDoGA1UEChMzSm9obnMgSG9wa2lucyBV
bml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJvcmF0b3J5MQ8wDQYDVQQLEwZQZW9wbGUxFjAU
BgNVBAMTDUJyaWFuIEogU2lwb3MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjstW
pZg/EHbMLu9xdDN37fTrw9SDb984gLPuAx14PQGIhDZwfqZg6KszScZWiM71ZBE5T93jUPIumEL4
Sj3flIxNlfxSPfrmA5prxVaZJ9Ch6HP22NSMqwCC36I/SguY+5VcbdJc8Ys2PgoiXK7vlGkDzyO4
5hH8UWnFrr51gT/U/rEjQ+mQ29lHArk+v0O6seuDxNYbOdKU7KtEXdMarDbHDmfKtJKKr28LWDvc
tMwg26Nwd9kzVNpO53fQ1ewJkYJlyBDyjeqpgb6jM2pcapWLrOnjSVdY4bN/L577nRCnfMZlaHRZ
cMnR8ziigp4PqxNpVG1JbxUCjNw5fO7LAgMBAAGjggJ+MIICejAOBgNVHQ8BAf8EBAMCBsAwNAYD
VR0lBC0wKwYIKwYBBQUHAwIGCCsGAQUFBwMEBgkqhkiG9y8BAQUGCisGAQQBgjcKAwwwgZoGCCsG
AQUFBwEBBIGNMIGKMFUGCCsGAQUFBzAChklodHRwOi8vamh1YXBsY3JsLm1hbmFnZWQuZW50cnVz
dC5jb20vQUlBL0NlcnRzSXNzdWVkdG9KSFVBUExJc3N1aW5nQ0EucDdjMDEGCCsGAQUFBzABhiVo
dHRwOi8vamh1YXBsb2NzcC5tYW5hZ2VkLmVudHJ1c3QuY29tMBoGA1UdIAQTMBEwDwYNYIZIAYb6
a4FIAwoeAjAhBgNVHREEGjAYgRZCcmlhbi5TaXBvc0BqaHVhcGwuZWR1MIH6BgNVHR8EgfIwge8w
Q6BBoD+GPWh0dHA6Ly9qaHVhcGxjcmwubWFuYWdlZC5lbnRydXN0LmNvbS9DUkxzL0pIVUFQTElz
c3VpbmdDQS5jcmwwgaeggaSggaGkgZ4wgZsxCzAJBgNVBAYTAlVTMTwwOgYDVQQKEzNKb2hucyBI
b3BraW5zIFVuaXZlcnNpdHkgQXBwbGllZCBQaHlzaWNzIExhYm9yYXRvcnkxIjAgBgNVBAsTGUNl
cnRpZmljYXRpb24gQXV0aG9yaXRpZXMxGjAYBgNVBAMTEUpIVUFQTCBJc3N1aW5nIENBMQ4wDAYD
VQQDEwVDUkw3ODAfBgNVHSMEGDAWgBQigLc8FIxuLUzRCACoiti7VnV1azAdBgNVHQ4EFgQUqrZ9
B+lmkFdzQDk+Dw5CrX73PSUwGQYJKoZIhvZ9B0EABAwwChsEVjguMwMCBLAwDQYJKoZIhvcNAQEL
BQADggEBAF5Ca5NnWqcPo83yRhbtmIrvL4AzSRrx0DO9/ftjx8uSNCYJWyG8ZBpjzsPyMqy4ATU9
M2hgIKqhrz0J94qFBZ6fvyohe2FiWbzoL1l3m0SY8GyNW0ru8lzRyKyVomCf2XnCdxaidMRksjaQ
J+0ablzTPfcEEPsCTR45tED9nh+eAhgE+tJvirlOp0Yrx7oKdu5+hRFgZyQEneRpRGRPribKn/fh
g6FRdI13pk11ZYUjH/P3d+NIvWKa8BH8AEzU1vTsg2WsQxe9nGNzfTqdBlfSY3qTmJDcauNyaytj
yk0WMEHhcn9QRgBXXuXAdv7k21Z0yYs+e9KRMGlPw596KJQxggQFMIIEAQIBATCBlDCBizELMAkG
A1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtpbnMgVW5pdmVyc2l0eSBBcHBsaWVkIFBoeXNp
Y3MgTGFib3JhdG9yeTEiMCAGA1UECxMZQ2VydGlmaWNhdGlvbiBBdXRob3JpdGllczEaMBgGA1UE
AxMRSkhVQVBMIElzc3VpbmcgQ0ECBFWUudAwCQYFKw4DAhoFAKCCAkUwGAYJKoZIhvcNAQkDMQsG
CSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjIwODE3MjE0NjAwWjAjBgkqhkiG9w0BCQQxFgQU
0n7lBM+H/iaVuSDWxGoVHqzuIX0wgZMGCSqGSIb3DQEJDzGBhTCBgjALBglghkgBZQMEASowCwYJ
YIZIAWUDBAEWMAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBAjAOBggqhkiG9w0DAgICAIAwDQYIKoZI
hvcNAwICAUAwBwYFKw4DAhowCwYJYIZIAWUDBAIDMAsGCWCGSAFlAwQCAjALBglghkgBZQMEAgEw
gaUGCSsGAQQBgjcQBDGBlzCBlDCBizELMAkGA1UEBhMCVVMxPDA6BgNVBAoTM0pvaG5zIEhvcGtp
bnMgVW5pdmVyc2l0eSBBcHBsaWVkIFBoeXNpY3MgTGFib3JhdG9yeTEiMCAGA1UECxMZQ2VydGlm
aWNhdGlvbiBBdXRob3JpdGllczEaMBgGA1UEAxMRSkhVQVBMIElzc3VpbmcgQ0ECBFWUudEwgacG
CyqGSIb3DQEJEAILMYGXoIGUMIGLMQswCQYDVQQGEwJVUzE8MDoGA1UEChMzSm9obnMgSG9wa2lu
cyBVbml2ZXJzaXR5IEFwcGxpZWQgUGh5c2ljcyBMYWJvcmF0b3J5MSIwIAYDVQQLExlDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0aWVzMRowGAYDVQQDExFKSFVBUEwgSXNzdWluZyBDQQIEVZS50TANBgkq
hkiG9w0BAQEFAASCAQAytLHLJwXEIZfpYUn5bK8CvUmyZq2v7Aaajw0eJRVed0W/lxryR1eSJ9NI
UW0pgbYMjIsB2VaCbvFGrUEXO7IOUZIyxcVW8ln61wqDK5/VHOWz6GBo+vRT+5YanLX9mFGaPcPp
cNYff4CvYMCQ8qJortxVgx9rwFZZg9J8TFn99+5AzZOKjNjJZKXMf/ZP3FMzqO2U/SXcXy6nmz/A
p7vDcm/CIVB+V/qBxf94NFLuZsDeqV7bM92us+dGykZtXg3BvBxEmt4II7esN9pEGNldrv61Y0pd
CwMJgG6ZE7aTXwl2VNsKmFZ9Maf0Zajr/aSuMWfNt43y57d6uMQTS63bAAAAAAAA

------=_NextPart_000_03F8_01D8B261.367C3070--

