Private/AzStackHci.Artifact.Helpers.ps1
|
# //////////////////////////////////////////////////////////////////////////// # Diagnostic artifact path, ownership, and retention helpers. # //////////////////////////////////////////////////////////////////////////// function Get-AzStackHciArtifactDirectory { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('Connectivity', 'OsConfig', 'VMCheckpointHealth', 'PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH, [Parameter(Mandatory = $false)] [switch]$Create ) $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') $artifactPath = Join-Path $rootFullPath $script:DIAG_ARTIFACT_RELATIVE_PATHS[$ArtifactType] if ($Create -and -not (Test-Path -LiteralPath $artifactPath -PathType Container)) { New-Item -Path $artifactPath -ItemType Directory -Force -ErrorAction Stop | Out-Null } return $artifactPath } function New-AzStackHciUniqueRunDirectory { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [string]$BasePath, [Parameter(Mandatory = $true)] [ValidateNotNullOrEmpty()] [string]$Prefix, [Parameter(Mandatory = $false)] [ValidateNotNullOrEmpty()] [string]$Timestamp = ([DateTime]::UtcNow.ToString('yyyy-MM-dd_HHmmss') + 'Z') ) if (-not (Test-Path -LiteralPath $BasePath -PathType Container)) { New-Item -ItemType Directory -Path $BasePath -Force -ErrorAction Stop | Out-Null } for ($collisionIndex = 0; $collisionIndex -lt 1000; $collisionIndex++) { $runStamp = if ($collisionIndex -eq 0) { $Timestamp } else { '{0}-{1:00}' -f $Timestamp, $collisionIndex } $candidatePath = Join-Path $BasePath ("{0}_{1}" -f $Prefix, $runStamp) try { New-Item -ItemType Directory -Path $candidatePath -ErrorAction Stop | Out-Null return $candidatePath } catch { if (Test-Path -LiteralPath $candidatePath -PathType Container) { continue } throw } } throw "Could not allocate a unique '$Prefix' run directory beneath '$BasePath'." } function Test-AzStackHciArtifactPath { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [string]$Path, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) try { $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') $rootItem = Get-Item -LiteralPath $rootFullPath -Force -ErrorAction Stop $item = Get-Item -LiteralPath $Path -Force -ErrorAction Stop $itemFullPath = [System.IO.Path]::GetFullPath($item.FullName) } catch { return $false } if (($rootItem.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { return $false } $requiredPrefix = $rootFullPath + '\' if (-not $itemFullPath.StartsWith($requiredPrefix, [System.StringComparison]::OrdinalIgnoreCase)) { return $false } $relativePath = $itemFullPath.Substring($requiredPrefix.Length) $currentPath = $rootFullPath foreach ($segment in @($relativePath -split '[\\/]')) { if ([string]::IsNullOrWhiteSpace($segment) -or $segment -eq '.' -or $segment -eq '..') { return $false } $currentPath = Join-Path $currentPath $segment $currentItem = Get-Item -LiteralPath $currentPath -Force -ErrorAction Stop if (($currentItem.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { return $false } } return $true } function Test-AzStackHciArtifactTree { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [System.IO.DirectoryInfo]$Directory ) $pendingDirectories = [System.Collections.Stack]::new() $pendingDirectories.Push($Directory) try { while ($pendingDirectories.Count -gt 0) { $currentDirectory = $pendingDirectories.Pop() foreach ($child in @(Get-ChildItem -LiteralPath $currentDirectory.FullName -Force -ErrorAction Stop)) { if (($child.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { return $false } if ($child.PSIsContainer) { $pendingDirectories.Push($child) } } } } catch { return $false } return $true } function Get-AzStackHciBackupFile { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) $filePattern = switch ($ArtifactType) { 'PageFile' { 'PageFile_Settings_*.json' } 'MemoryDump' { 'MemoryDump_Settings_*.json' } 'UserModeCrashDump' { 'UserModeCrashDump_Settings_*.json' } } $newDirectory = Get-AzStackHciArtifactDirectory -ArtifactType $ArtifactType -RootPath $RootPath $searchDirectories = @($newDirectory, [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\')) foreach ($directory in $searchDirectories) { if (-not (Test-Path -LiteralPath $directory -PathType Container)) { continue } $latestBackup = Get-ChildItem -LiteralPath $directory -Filter $filePattern -File -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1 if ($latestBackup) { return $latestBackup } } return $null } function Resolve-AzStackHciBackupPath { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [string]$Path, [Parameter(Mandatory = $true)] [ValidateSet('PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) $item = Get-Item -LiteralPath $Path -Force -ErrorAction Stop if ($item.PSIsContainer) { throw "Backup path must identify a file, not a directory: '$Path'." } if (-not (Test-AzStackHciArtifactPath -Path $item.FullName -RootPath $RootPath)) { throw "Backup file must resolve beneath the canonical diagnostic root without reparse points. Got: '$($item.FullName)'." } $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') $newDirectory = [System.IO.Path]::GetFullPath((Get-AzStackHciArtifactDirectory -ArtifactType $ArtifactType -RootPath $RootPath)).TrimEnd('\') $resolvedPath = [System.IO.Path]::GetFullPath($item.FullName) $resolvedDirectory = [System.IO.Path]::GetDirectoryName($resolvedPath).TrimEnd('\') if (-not [string]::Equals($resolvedDirectory, $newDirectory, [System.StringComparison]::OrdinalIgnoreCase) -and -not [string]::Equals($resolvedDirectory, $rootFullPath, [System.StringComparison]::OrdinalIgnoreCase)) { throw "Backup file must be directly beneath '$newDirectory' or the legacy root '$rootFullPath'. Got: '$resolvedPath'." } $namePattern = switch ($ArtifactType) { 'PageFile' { '^PageFile_Settings_\d{8}(?:-\d{4})?\.json$' } 'MemoryDump' { '^MemoryDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } 'UserModeCrashDump' { '^UserModeCrashDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } } if ([System.IO.Path]::GetFileName($resolvedPath) -notmatch $namePattern) { throw "Backup filename is not valid for artifact type '$ArtifactType'. Got: '$resolvedPath'." } return $resolvedPath } function Test-AzStackHciBackupArtifact { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $true)] [System.IO.FileInfo]$File ) try { $backup = Get-Content -LiteralPath $File.FullName -Raw -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop if ($backup.BackupSchemaVersion -ne 1 -or [string]$backup.Checksum -notmatch '^[0-9a-fA-F]{64}$') { return $false } $verifyObject = switch ($ArtifactType) { 'PageFile' { [PSCustomObject][ordered]@{ BackupSchemaVersion = $backup.BackupSchemaVersion BackupDate = $backup.BackupDate Node = $backup.Node PageFileAutoManaged = $backup.PageFileAutoManaged PageFileConfig = $backup.PageFileConfig PageFileUsage = $backup.PageFileUsage } } 'MemoryDump' { [PSCustomObject][ordered]@{ BackupSchemaVersion = $backup.BackupSchemaVersion BackupDate = $backup.BackupDate Node = $backup.Node CrashDumpMode = $backup.CrashDumpMode Settings = $backup.Settings } } 'UserModeCrashDump' { [PSCustomObject][ordered]@{ BackupSchemaVersion = $backup.BackupSchemaVersion BackupDate = $backup.BackupDate Node = $backup.Node Settings = $backup.Settings } } } $verifyJson = $verifyObject | ConvertTo-Json -Depth 3 -Compress $sha256 = [System.Security.Cryptography.SHA256]::Create() try { $hashBytes = $sha256.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($verifyJson)) $computedChecksum = ([System.BitConverter]::ToString($hashBytes)).Replace('-', '').ToLowerInvariant() } finally { $sha256.Dispose() } return $computedChecksum -eq ([string]$backup.Checksum).ToLowerInvariant() } catch { return $false } } function Test-AzStackHciArtifactUnlocked { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [System.IO.FileSystemInfo]$Item ) try { $files = if ($Item.PSIsContainer) { @(Get-ChildItem -LiteralPath $Item.FullName -File -Recurse -Force -ErrorAction Stop) } else { @($Item) } } catch { return $false } foreach ($file in $files) { $stream = $null try { $stream = [System.IO.File]::Open($file.FullName, [System.IO.FileMode]::Open, [System.IO.FileAccess]::Read, [System.IO.FileShare]::None) } catch { return $false } finally { if ($stream) { $stream.Dispose() } } } return $true } function Get-AzStackHciOwnedArtifact { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('Connectivity', 'OsConfig', 'VMCheckpointHealth', 'PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') if (-not (Test-Path -LiteralPath $rootFullPath -PathType Container)) { return } $typedDirectory = Get-AzStackHciArtifactDirectory -ArtifactType $ArtifactType -RootPath $rootFullPath $searchDirectories = @($typedDirectory) if ($ArtifactType -ne 'VMCheckpointHealth' -or $typedDirectory -ne $rootFullPath) { $searchDirectories += $rootFullPath } $seenPaths = @{} foreach ($directory in $searchDirectories) { if (-not (Test-Path -LiteralPath $directory -PathType Container)) { continue } foreach ($item in @(Get-ChildItem -LiteralPath $directory -Force -ErrorAction SilentlyContinue)) { if ($seenPaths.ContainsKey($item.FullName) -or -not (Test-AzStackHciArtifactPath -Path $item.FullName -RootPath $rootFullPath)) { continue } $owned = $false $isBackup = $ArtifactType -in @('PageFile', 'MemoryDump', 'UserModeCrashDump') if ($isBackup -and -not $item.PSIsContainer) { $namePattern = switch ($ArtifactType) { 'PageFile' { '^PageFile_Settings_\d{8}(?:-\d{4})?\.json$' } 'MemoryDump' { '^MemoryDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } 'UserModeCrashDump' { '^UserModeCrashDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } } $owned = $item.Name -match $namePattern -and (Test-AzStackHciBackupArtifact -ArtifactType $ArtifactType -File $item) } elseif ($ArtifactType -eq 'Connectivity' -and -not $item.PSIsContainer) { $owned = $item.Name -match '^(?:Transcript_)?AzureLocal_ConnectivityTest_[A-Za-z0-9]+_[A-Za-z0-9._-]+_\d{4}-\d{2}-\d{2}-\d{2}-\d{2}-\d{2}\.(?:html|json|csv|log)$' } elseif ($ArtifactType -eq 'OsConfig') { if ($item.PSIsContainer -and $item.Name -match '^.+-\d{8}-\d{6}$') { $reportFiles = @(Get-ChildItem -LiteralPath $item.FullName -File -Force -ErrorAction SilentlyContinue | Where-Object { $_.Name -match '^.+_AzureLocal_OsConfigReport-\d{4}-\d{2}-\d{2}-\d{2}-\d{2}-\d{2}\.(?:html|json)$' }) $owned = $reportFiles.Count -gt 0 } elseif (-not $item.PSIsContainer) { $owned = $item.Name -match '^.+_AzureLocal_OsConfigReport-\d{4}-\d{2}-\d{2}-\d{2}-\d{2}-\d{2}\.(?:html|json)$' } } elseif ($ArtifactType -eq 'VMCheckpointHealth') { if ($item.PSIsContainer) { $owned = $item.Name -match '^CheckpointAudit_\d{4}-\d{2}-\d{2}_\d{6}Z$' } else { $owned = $item.Name -match '^VMCheckpointAudit-[A-Za-z0-9._-]+-\d{4}-\d{2}-\d{2}\.html$' } } if (-not $owned) { continue } if ($item.PSIsContainer -and -not (Test-AzStackHciArtifactTree -Directory $item)) { continue } $seenPaths[$item.FullName] = $true $lastWriteTime = if ($item.PSIsContainer) { $latestChild = Get-ChildItem -LiteralPath $item.FullName -File -Recurse -Force -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1 if ($latestChild) { $latestChild.LastWriteTime } else { $item.LastWriteTime } } else { $item.LastWriteTime } [PSCustomObject]@{ ArtifactType = $ArtifactType Path = $item.FullName LastWriteTime = $lastWriteTime IsBackup = $isBackup IsDirectory = [bool]$item.PSIsContainer } } } } function Write-AzStackHciStaleArtifactWarning { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('Connectivity', 'OsConfig', 'VMCheckpointHealth')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$CurrentRunPath ) $cutoff = (Get-Date).AddDays(-$script:DIAG_REPORT_RETENTION_DAYS) $stale = @(Get-AzStackHciOwnedArtifact -ArtifactType $ArtifactType | Where-Object { $_.LastWriteTime -lt $cutoff -and (-not $CurrentRunPath -or -not [string]::Equals($_.Path, $CurrentRunPath, [System.StringComparison]::OrdinalIgnoreCase)) }) if ($stale.Count -gt 0) { Write-Warning ("{0} module-owned {1} artifact(s) are older than {2} days. Review them with Remove-AzStackHciDiagnosticArtifact -ArtifactType {1} -WhatIf." -f $stale.Count, $ArtifactType, $script:DIAG_REPORT_RETENTION_DAYS) } } # SIG # Begin signature block # MIInKwYJKoZIhvcNAQcCoIInHDCCJxgCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC2Rdkptzi8rouj # zch2f4TU7BTO1QUnbOq5d/OYQtn99KCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnHMIIZwwIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEICsIi9paBPQ5YhfYkVQ1m2ynJ45lKYFgpeqUGAyzDjRpMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAwIaZWmnqvmKecXjT # G5RCtefE2xOe25ZsVEY3VG9MmPPqkRCf0JrdD15mmHHiZYuntfIFoJyfmrB5c1cq # xoPeR0QGYUU0MMZ8IgIYIkaL8cGtHx1RdOZRqBDA3tcO6h6S35ceQPrcGNWNrVoB # stJnbCLZqzbCc4n5EsKPLbo5ANchGkuZo0SiVnUHDjFXeaJes2Rh8ZiMX4aUXMD2 # ZOO2B/i0ahc1c/iOsXO+Yo0Uuj+bCG+OXpcUhYmFMgK8YnFNtpTUUxNyWbHKH1YM # 6j8aL/VCYFH7ClOg7j0dDZkYUVl/7tGzp3dwznf4VNCA/oHDt+/0XgZ7oUecNCiP # fSk3ZqGCF5cwgheTBgorBgEEAYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3Aw # ghdsAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9 # MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDADbzUHherwIzY # hUOIdwR+VNphQ1XydhOxklm6oTNMoQIGaoWNYqkHGBMyMDI2MDgyODE0NTUzNS4z # MTlaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RTAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgIT # MwAAAikO1WQqtJfyGgABAAACKTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMDdaFw0yNzA1MTcxOTQwMDda # MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL # ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk # IFRTUyBFU046RTAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l # LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCe # ItFq4z1oCYSmUZmpYDsbJWEu++1bbc/Mz7Pa3I0ZX5EON+WirB0FvnGlyFRUylzO # 5TJXZfU8QFPOU95P1Y1OZ8J+quA5G+AWSBOr/48scl0s9RBpqgTMq/lbyqBz4CMm # vVR2QevAgVp4a1hbmOm9G7YWey68N5F5rSDYV0wMlg4Iy8YRuFgRN2eBpVXt9IvF # aFmBnQLZfo22KZ3L8PWEHUhXU5dLOSZoTfqqQ/B+deW56ACMnnHjPxZu+szHhZML # UrMWTgs9J7Cn8DtelcKj9aM+0Zq7tkSDHCrwo6eCSfw3clktXRRrdmsccal8RCDi # NFFgZsypwF2aGAF6kg41+Ql+thXpnOMUH4mPCAJZWp0zDWowsK/Yo5jHL1pT/Agb # L3FoAy4cbhOI4Pb1eQFG+jT7skS2F/b+ZACUA1EDZ830K+Bu0yw+FpSGy8tpd1sz # k3cUYjIpzIG4z3oFNmiSJN8YdNd4SHsER5Dks5bxiKbpvmfrOA39jTb7EW2TT7yS # WgJISfvTezuLmQsTVSzNsvapVlHhE2zBqDw409nvOtitCFbnhhXNfatzb2+Gf2tX # 2s6YBa151CC/8+emJvvegXbWNudzYt8cFRom0PZ+fJRhhBfdSqCqr8QeOGJ8VYlm # xFXqx1SdDSkTCSgpsskGqZwh/6umA1g4L7zeGBNngQIDAQABo4IBSTCCAUUwHQYD # VR0OBBYEFCdNRaSL9AW8QvaQ21WjRAXKN4M7MB8GA1UdIwQYMBaAFJ+nFV0AXmJd # g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6 # Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l # AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA # A4ICAQA9wc72lf/czDhp09T3PGAMOQhxl/x04jpE7t39FeqQSn2Up6DVzhgwnzCq # Y3NIhLtUaWrd7NxvrhZDca+J4xzvrRQNPHeRQpnJVeHsyTu53gTBlUB1TRI6OnZt # /AVmR9oMJ/NBOqB+d+SOb8Px6zRgRwk62sFkOkB5lig/DMnYEeR/amW9Hdo8vXcK # maa/DbSOAHSdfZFt+iqMZfNlkEOn71/RAKTNv4Qpq/2FhcjMMmSkIhshBdBVB0Vj # mkwFfhVUf5TTuLJ9sDR4EyCvOZJ3B6g7Iw6WjQxycjwkfzsVMTpfusJ5SwdOHL8y # GPWZOePjwa8ISXWs6kiVK/6S0/JVb1LpxpyYKREQjnU/5OecKt2OXlHdwFWZrwAi # 98RPZa6EExcb/LGLf10tNHju1eTlohY0jzNZQ0BDgSuMZgMU+8EEjtMQMIDnlPGE # UON7LHXHH0KL0FA01PEWVZKrr/LUOuuDTNFzw543FPMp4gkCIFlKdRuciR1IXOk+ # Xse6rj9tJFYgVn+44BHou2XQe5RX30ef3AQWa0mxyGDqJzGsV3X5+bNQeMV88iWu # lJPq5sgnGG9O/H1/HH4HsO9ZKGX/WrJpQmFuQrTOR49XjveaC0xaFmGsNg+RhbtD # 5qTkn+ISDvw0IJ/E/VXNdz/yWgol6r507hT8sAMupnhkF2uw1DCCB3EwggVZoAMC # AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m # dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy # NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9 # DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2 # Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N # 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc # ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ # j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk # lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy # L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M # 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX # pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU # HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode # 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA # ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE # FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB # MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE # AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB # /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug # SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG # AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv # b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt # 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP # MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++ # Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9 # QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2 # wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR # AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z # bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx # t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3 # Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN # uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z # cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCB # yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc # TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU # U1MgRVNOOkUwMDItMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T # dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQC3v9iSO22xob7ZxN5dXCEq+9Iv # /6CBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3 # DQEBCwUAAgUA7jvn2DAiGA8yMDI2MDgyODEwNTYyNFoYDzIwMjYwODI5MTA1NjI0 # WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDuO+fYAgEAMAoCAQACAiz4AgH/MAcC # AQACAhJuMAoCBQDuPTlYAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkK # AwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAJGP # UPsc01VJ7ljZcYBTSdsEtffB8IFV3bwb28CUMkW3+nkJYkFlMCgXAXPQvEiKlzYK # pez96bJT8LR6zNm87KRCwdebWberPnoEO08oRS05JGcl/xKjlqIdfUHj4JarLuv5 # H1WeuSYN2Cvi5U70cLhLuL/MWFiW+YYGb4shPDh1dV3BbUO/FB1w8PxbXO7isaEj # v6Vw+MZ4SFGRzsXu6Xv6A/HZpbda7FkD9pHib316iwMe+HzHv1c+7YjU/ee1Det4 # P7F4vhSoVFuhG1t6nwAJlynQfvjJ4zhiitiWj33M70HYOg5wboCzKIwKk1FAka8q # Y2ymQHxunXtaPjPRc1YxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEG # A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj # cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt # cCBQQ0EgMjAxMAITMwAAAikO1WQqtJfyGgABAAACKTANBglghkgBZQMEAgEFAKCC # AUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCDe # K5UWuUmuEH3+Q1CAizgmq1fOMe1KIbp6XLxA3hp4MTCB+gYLKoZIhvcNAQkQAi8x # geowgecwgeQwgb0EILfKPfEitvD/lSvEumxqPkkeOEtgkmKFEVMuel9oOrqSMIGY # MIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV # BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG # A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIpDtVkKrSX # 8hoAAQAAAikwIgQgMxrBZygonPqA9iaFHGzlMnmahuC4P8Mnslw1O3feqwUwDQYJ # KoZIhvcNAQELBQAEggIAeFWKUDo1JgK9DLmJ1pPaFvmJ10Cuhh1UE2JeDg704isD # nBdQXB3MmYpN+5x52n5PHEaisBUNv+L8DPQyEGTyXf6HMhV/frJmXhxulWRol5gD # 7HWx1tSM3n03X31YPDgesxTJ+dgYd+Cc8eEmrs7fxG6plUhO+aLhZTzi/Q4/LJgh # RqngYlhSlJda8WPuHPqPac76q0V1v5aerxe05iaNTT2kqIhDQpFsNkW6/4lu3AA2 # S25S+xBszeQZAon0IebNXDKa80N2ZhzzRnj7Wez7kXja1qXAkd8kKgrLpZsu73Dg # /orX6q1xjK94nLIJXlqFpxsiUi+tv0V2PJtCWwbY0ViN0+r27Nu4F8o4lHHOpPsX # z2Op/p6m8baSA7C0zfhuewOIDJsREe0cIceXdfSeZC1Q0C60SCAFU7dYlwR/pPth # wmVSoOajzfwAlUvhUGp8PkLsc7FFAipsEXcB5SMZEESSFbl4T08P59qntOEu4B6d # 1v7Ok2hLvWCdUuqltB/lwgnoiA4700ZaDRolWhsulU3wVBPgO3KJoyub6EIDkdmd # U/o7AvaV/yjVAjeQ/kIwEumoQzumak+9Zo6y6bpyivmDq+IbbCaRB6HpQNGgmIhl # g1sByE8fifNz+5dgFCq9+b99P4TakJOwaCQfIbGin+j4ASk1wNkD0n+gzGnRiY4= # SIG # End signature block |