Public/Save-LnvRMUpdate.ps1
|
function Save-LnvRMUpdate { <# .SYNOPSIS Downloads selected updates to the active repository. .DESCRIPTION Downloads update files (installer, descriptor XML, readme) to the local repository using BITS transfers. Verifies SHA256 checksums and writes entries to database.xml. .PARAMETER Update One or more update objects from Search-LnvRMUpdate. .PARAMETER Repository Optional. Repository path override. Defaults to the active repository. .PARAMETER Status Initial status for downloaded updates: 'Test' or 'Active'. Default: Test. .EXAMPLE Search-LnvRMUpdate | Where-Object Severity -eq 'Critical' | Save-LnvRMUpdate .EXAMPLE $updates | Save-LnvRMUpdate -Status 'Active' #> [CmdletBinding(SupportsShouldProcess)] param( [Parameter(Mandatory, ValueFromPipeline)] [object[]]$Update, [Parameter()] [string]$Repository, [Parameter()] [ValidateSet('Test', 'Active')] [string]$Status = 'Test' ) begin { # Resolve repository path $config = Get-LnvRMConfig $repoPath = if ($Repository) { $Repository } else { $config.ActiveRepository } if (-not $repoPath -or -not (Test-Path $repoPath)) { Write-Error "Repository path not found: '$repoPath'. Create one with New-LnvRMRepository." return } # Determine repository mode (Full or Hybrid) $repoInfo = @($config.Repositories) | Where-Object { $_.Path -eq $repoPath } | Select-Object -First 1 $repoMode = if ($repoInfo -and $repoInfo.Mode) { $repoInfo.Mode } else { 'Full' } if ($repoMode -eq 'Hybrid') { Write-Verbose "Hybrid mode: downloading metadata only (descriptor XML + readme). Installer files will not be downloaded." } # Acquire the database lock up-front so two processes can't both download the same set # and race the database.xml write at the end. $lockPath = Lock-LnvRMDatabase -RepositoryPath $repoPath if (-not $lockPath) { Write-Error 'Could not acquire database lock. Another sync may be in progress.' return } # Read existing database to check for duplicates $existingPackages = Read-LnvRMDatabaseXml -RepositoryPath $repoPath $existingIDs = @{} foreach ($ep in $existingPackages) { $existingIDs[$ep.PackageID] = $true } $newPackages = @() $allUpdates = @() $signatureFailures = @() $externalFileFailures = @() } process { if (-not $lockPath) { return } foreach ($update in $Update) { $allUpdates += $update } } end { if (-not $lockPath) { return } try { # Collect updates that are already in the repo so we can sync their supported systems $existingUpdates = @() foreach ($update in $allUpdates) { if ($existingIDs.ContainsKey($update.PackageID)) { Write-Warning "Package '$($update.PackageID)' ($($update.Title)) is already in the repository. Skipping." $existingUpdates += $update continue } if (-not $PSCmdlet.ShouldProcess("$($update.Title) ($($update.PackageID))", 'Download update')) { continue } Write-Verbose "Downloading: $($update.Title) ($($update.PackageID))..." # Pre-compute descriptor filename / base URL once per update. $descFileName = $null $descBaseUrl = $null if ($update.DescriptorURL) { $lastSlash = $update.DescriptorURL.LastIndexOf('/') $descFileName = $update.DescriptorURL.Substring($lastSlash + 1) $descBaseUrl = $update.DescriptorURL.Substring(0, $lastSlash + 1) } # Create package subfolder $pkgFolder = Join-Path $repoPath $update.PackageID try { if (-not (Test-Path $pkgFolder)) { New-Item -Path $pkgFolder -ItemType Directory -Force -ErrorAction Stop | Out-Null } } catch { Write-Error "Failed to create package folder '$pkgFolder' for $($update.PackageID): $_" continue } $signatureOk = $true $signatureFailReason = $null $installerDest = $null # Download installer file (Full mode only) if ($repoMode -eq 'Full' -and $update.DownloadURL -and $update.InstallerFileName) { $installerDest = Join-Path $pkgFolder $update.InstallerFileName $installerOk = Invoke-LnvRMBitsDownload -URL $update.DownloadURL -Destination $installerDest ` -ExpectedHash $update.InstallerSHA256 -Description "Installer: $($update.InstallerFileName)" if (-not $installerOk) { Write-Error "Failed to download installer for $($update.PackageID). Skipping package." Remove-Item -LiteralPath $pkgFolder -Recurse -Force -ErrorAction SilentlyContinue continue } # Verify installer is signed by Lenovo if (-not (Test-LnvSignature -Path $installerDest)) { $signatureOk = $false $signatureFailReason = "Installer '$($update.InstallerFileName)' is not signed by Lenovo" } } # Download descriptor XML (no hash check — catalog checksums are often stale). # The descriptor drives LocalPath, FileName, base URL, and external-file discovery, # so we treat its absence as fatal for the package. $descDest = $null if ($signatureOk -and $update.DescriptorURL) { $descDest = Join-Path $pkgFolder $descFileName $descOk = Invoke-LnvRMBitsDownload -URL $update.DescriptorURL -Destination $descDest ` -Description "Descriptor: $descFileName" if (-not $descOk) { Write-Error "Failed to download descriptor XML for $($update.PackageID). Skipping package." Remove-Item -LiteralPath $pkgFolder -Recurse -Force -ErrorAction SilentlyContinue continue } # Verify descriptor is signed by Lenovo if (-not (Test-LnvSignature -Path $descDest)) { $signatureOk = $false $signatureFailReason = "Descriptor XML '$descFileName' is not signed by Lenovo" } } # If signature verification failed, remove the package folder and skip if (-not $signatureOk) { Write-Warning "Signature verification failed for $($update.PackageID) ($($update.Title)): $signatureFailReason. Package removed." Remove-Item -LiteralPath $pkgFolder -Recurse -Force -ErrorAction SilentlyContinue Write-LnvRMAuditLog -RepositoryPath $repoPath -Action 'SIGNATURE_FAIL' ` -Message "Rejected $($update.PackageID) - $signatureFailReason" $signatureFailures += [PSCustomObject]@{ PSTypeName = 'LnvRM.SignatureFailure' PackageID = $update.PackageID Title = $update.Title Reason = $signatureFailReason } continue } # Download readme if ($update.ReadmeURL -and $update.ReadmeFileName) { $readmeDest = Join-Path $pkgFolder $update.ReadmeFileName Invoke-LnvRMBitsDownload -URL $update.ReadmeURL -Destination $readmeDest ` -Description "Readme: $($update.ReadmeFileName)" | Out-Null } # Download external files referenced in the descriptor XML (check utilities, profile files, etc.). # The descriptor lists these as required for installation, so a missing one means the # package can't be deployed . $failedExtFiles = @() if ($descDest -and (Test-Path $descDest)) { try { [xml]$descXml = Get-Content -Path $descDest -Raw -Encoding UTF8 $externalFiles = @($descXml.Package.Files.External.File | Where-Object { $_ }) foreach ($extFile in $externalFiles) { $extFileName = $extFile.Name if (-not $extFileName) { continue } $extDest = Join-Path $pkgFolder $extFileName $extUrl = "$descBaseUrl$extFileName" $extHash = if ($extFile.CRC) { $extFile.CRC } else { $null } $dlParams = @{ URL = $extUrl Destination = $extDest Description = "External: $extFileName" } if ($extHash) { $dlParams['ExpectedHash'] = $extHash } $extSuccess = Invoke-LnvRMBitsDownload @dlParams if (-not $extSuccess) { $failedExtFiles += $extFileName } } } catch { Write-Warning "Could not parse descriptor for external files ($($update.PackageID)): $_" } } if ($failedExtFiles.Count -gt 0) { $extReason = "Missing external file(s): $($failedExtFiles -join ', ')" Write-Warning "External file download failed for $($update.PackageID) ($($update.Title)): $extReason. Package removed." Remove-Item -LiteralPath $pkgFolder -Recurse -Force -ErrorAction SilentlyContinue Write-LnvRMAuditLog -RepositoryPath $repoPath -Action 'EXTERNAL_FAIL' ` -Message "Rejected $($update.PackageID) - $extReason" $externalFileFailures += [PSCustomObject]@{ PSTypeName = 'LnvRM.ExternalFileFailure' PackageID = $update.PackageID Title = $update.Title FailedFiles = $failedExtFiles Reason = $extReason } continue } # Determine the descriptor filename for database.xml LocalPath and FileName $descFileNameForDb = if ($descFileName) { $descFileName } else { "$($update.PackageID)_2_.xml" } # Determine the base URL for database.xml $baseUrl = if ($update.DownloadURL) { $update.DownloadURL.Substring(0, $update.DownloadURL.LastIndexOf('/') + 1) } elseif ($descBaseUrl) { $descBaseUrl } else { 'https://download.lenovo.com/pccbbs/mobiles/' } # Build systems list from applicable models $systems = @() foreach ($model in $update.ApplicableModels) { $systems += [PSCustomObject]@{ MachineType = $model.MachineType OS = $model.OS } } # Build package object for database.xml $dbPackage = [PSCustomObject]@{ PSTypeName = 'LnvRM.Package' PackageID = $update.PackageID PackageName = $update.PackageName Description = $update.Title FileName = $descFileNameForDb Version = $update.Version ReleaseDate = if ($update.ReleaseDate -match '^\d{4}-\d{2}-\d{2}$') { # Convert from YYYY-MM-DD to M/D/YYYY to match Update Retriever format $d = [DateTime]::ParseExact($update.ReleaseDate, 'yyyy-MM-dd', $null) "$($d.Month)/$($d.Day)/$($d.Year)" } else { $update.ReleaseDate } Size = $update.InstallerSize URL = $baseUrl Mode = "`n " Type = 'Quest' Status = $Status PreviousStatus = 'None' LocalPath = "\$($update.PackageID)\$descFileNameForDb" Severity = $update.Severity DisplayLicense = 'NotDisplay' Systems = $systems } $newPackages += $dbPackage $modeLabel = if ($repoMode -eq 'Hybrid') { 'metadata' } else { 'full' } Write-LnvRMAuditLog -RepositoryPath $repoPath -Action 'DOWNLOAD' ` -Message "Downloaded $($update.PackageID) - $($update.Title) v$($update.Version) (Status: $Status, Mode: $modeLabel)" } # Sync supported systems for packages that were already in the repo if ($existingUpdates.Count -gt 0) { Sync-LnvRMSupportedSystem -RepositoryPath $repoPath -Updates $existingUpdates } # Write all new packages to database.xml if ($newPackages.Count -gt 0) { # Re-read to get latest state (defensive — we hold the lock, but this catches # any out-of-band edits that happened before we acquired it). $allPackages = @(Read-LnvRMDatabaseXml -RepositoryPath $repoPath) + $newPackages Write-LnvRMDatabaseXml -RepositoryPath $repoPath -Packages $allPackages Write-Verbose "Added $($newPackages.Count) package(s) to database.xml" } if ($signatureFailures.Count -gt 0) { Write-Warning "$($signatureFailures.Count) update(s) were rejected because signature verification failed." } if ($externalFileFailures.Count -gt 0) { Write-Warning "$($externalFileFailures.Count) update(s) were rejected because one or more external files failed to download." } return [PSCustomObject]@{ PSTypeName = 'LnvRM.SaveResult' Downloaded = @($newPackages) SignatureSkipped = @($signatureFailures) ExternalFileFailures = @($externalFileFailures) } } finally { Unlock-LnvRMDatabase -LockPath $lockPath } } } # SIG # Begin signature block # MIItugYJKoZIhvcNAQcCoIItqzCCLacCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB # gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR # AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUTGmnIAxIg+bpSZAFX88HQtfX # 7rWggibcMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0B # AQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD # VQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVk # IElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQsw # CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu # ZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz # 7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS # 5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7 # bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfI # SKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jH # trHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14 # Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2 # h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt # 6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPR # iQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ER # ElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4K # Jpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAd # BgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SS # y4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAk # BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAC # hjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS # b290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0 # LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRV # HSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyh # hyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO # 0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo # 8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++h # UD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5x # aiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMIIFkDCCA3ig # AwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBiMQswCQYDVQQG # EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl # cnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMTMw # ODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJVUzEVMBMGA1UE # ChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYD # VQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3yithZwuEppz1Y # q3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1Ifxp4VpX6+n6lX # FllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDVySAdYyktzuxe # TsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiODCu3T6cw2Vbu # yntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQjdjUN6QuBX2I # 9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/CNdaSaTC5qmg # Z92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCiEhtmmnTK3kse # 5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADMfRyVw4/3IbKy # Ebe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QYuKZ3AeEPlAwh # HbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXKchYiCd98THU/ # Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t9dmpsh3lGwID # AQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4E # FgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQADggIBALth2X2p # bL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2SV1EY+CtnJYY # ZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd+SeuMIW59mdN # Oj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWcfFqK1qI4mfN4 # i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqasjYUegbyJLkJ # EVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9NcCOGDErcgdLM # MpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N0XWs0Mr7QbhD # parTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie4u1Ki7wb/UdK # Dd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mIr/OSmbaz5mEP # 0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1/YldvIViHTLS # oCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCmgKDWHrO8Dw9T # dSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+MIIGsDCCBJigAwIBAgIQCK1AsmDS # nEyfXs2pvZOu2TANBgkqhkiG9w0BAQwFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UE # ChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYD # VQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjEwNDI5MDAwMDAwWhcN # MzYwNDI4MjM1OTU5WjBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQs # IEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5n # IFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A # MIICCgKCAgEA1bQvQtAorXi3XdU5WRuxiEL1M4zrPYGXcMW7xIUmMJ+kjmjYXPXr # NCQH4UtP03hD9BfXHtr50tVnGlJPDqFX/IiZwZHMgQM+TXAkZLON4gh9NH1MgFcS # a0OamfLFOx/y78tHWhOmTLMBICXzENOLsvsI8IrgnQnAZaf6mIBJNYc9URnokCF4 # RS6hnyzhGMIazMXuk0lwQjKP+8bqHPNlaJGiTUyCEUhSaN4QvRRXXegYE2XFf7JP # hSxIpFaENdb5LpyqABXRN/4aBpTCfMjqGzLmysL0p6MDDnSlrzm2q2AS4+jWufcx # 4dyt5Big2MEjR0ezoQ9uo6ttmAaDG7dqZy3SvUQakhCBj7A7CdfHmzJawv9qYFSL # ScGT7eG0XOBv6yb5jNWy+TgQ5urOkfW+0/tvk2E0XLyTRSiDNipmKF+wc86LJiUG # soPUXPYVGUztYuBeM/Lo6OwKp7ADK5GyNnm+960IHnWmZcy740hQ83eRGv7bUKJG # yGFYmPV8AhY8gyitOYbs1LcNU9D4R+Z1MI3sMJN2FKZbS110YU0/EpF23r9Yy3IQ # KUHw1cVtJnZoEUETWJrcJisB9IlNWdt4z4FKPkBHX8mBUHOFECMhWWCKZFTBzCEa # 6DgZfGYczXg4RTCZT/9jT0y7qg0IU0F8WD1Hs/q27IwyCQLMbDwMVhECAwEAAaOC # AVkwggFVMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFGg34Ou2O/hfEYb7 # /mF7CIhl9E5CMB8GA1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1Ud # DwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDAzB3BggrBgEFBQcBAQRrMGkw # JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcw # AoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJv # b3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQu # Y29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcmwwHAYDVR0gBBUwEzAHBgVngQwB # AzAIBgZngQwBBAEwDQYJKoZIhvcNAQEMBQADggIBADojRD2NCHbuj7w6mdNW4AIa # pfhINPMstuZ0ZveUcrEAyq9sMCcTEp6QRJ9L/Z6jfCbVN7w6XUhtldU/SfQnuxaB # RVD9nL22heB2fjdxyyL3WqqQz/WTauPrINHVUHmImoqKwba9oUgYftzYgBoRGRjN # YZmBVvbJ43bnxOQbX0P4PpT/djk9ntSZz0rdKOtfJqGVWEjVGv7XJz/9kNF2ht0c # sGBc8w2o7uCJob054ThO2m67Np375SFTWsPK6Wrxoj7bQ7gzyE84FJKZ9d3OVG3Z # XQIUH0AzfAPilbLCIXVzUstG2MQ0HKKlS43Nb3Y3LIU/Gs4m6Ri+kAewQ3+ViCCC # cPDMyu/9KTVcH4k4Vfc3iosJocsL6TEa/y4ZXDlx4b6cpwoG1iZnt5LmTl/eeqxJ # zy6kdJKt2zyknIYf48FWGysj/4+16oh7cGvmoLr9Oj9FpsToFpFSi0HASIRLlk2r # REDjjfAVKM7t8RhWByovEMQMCGQ8M4+uKIw8y4+ICw2/O/TOHnuO77Xry7fwdxPm # 5yg/rBKupS8ibEH5glwVZsxsDsrFhsP2JjMMB0ug0wcCampAMEhLNKhRILutG4UI # 4lkNbcoFUCvqShyepf2gpx8GdOfy1lKQ/a+FSCH5Vzu0nAPthkX0tGFuv2jiJmCG # 6sivqf6UHedjGzqGVnhOMIIGtDCCBJygAwIBAgIQDcesVwX/IZkuQEMiDDpJhjAN # BgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQg # SW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2Vy # dCBUcnVzdGVkIFJvb3QgRzQwHhcNMjUwNTA3MDAwMDAwWhcNMzgwMTE0MjM1OTU5 # WjBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNV # BAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hB # MjU2IDIwMjUgQ0ExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtHgx # 0wqYQXK+PEbAHKx126NGaHS0URedTa2NDZS1mZaDLFTtQ2oRjzUXMmxCqvkbsDpz # 4aH+qbxeLho8I6jY3xL1IusLopuW2qftJYJaDNs1+JH7Z+QdSKWM06qchUP+AbdJ # gMQB3h2DZ0Mal5kYp77jYMVQXSZH++0trj6Ao+xh/AS7sQRuQL37QXbDhAktVJMQ # bzIBHYJBYgzWIjk8eDrYhXDEpKk7RdoX0M980EpLtlrNyHw0Xm+nt5pnYJU3Gmq6 # bNMI1I7Gb5IBZK4ivbVCiZv7PNBYqHEpNVWC2ZQ8BbfnFRQVESYOszFI2Wv82wnJ # RfN20VRS3hpLgIR4hjzL0hpoYGk81coWJ+KdPvMvaB0WkE/2qHxJ0ucS638ZxqU1 # 4lDnki7CcoKCz6eum5A19WZQHkqUJfdkDjHkccpL6uoG8pbF0LJAQQZxst7VvwDD # jAmSFTUms+wV/FbWBqi7fTJnjq3hj0XbQcd8hjj/q8d6ylgxCZSKi17yVp2NL+cn # T6Toy+rN+nM8M7LnLqCrO2JP3oW//1sfuZDKiDEb1AQ8es9Xr/u6bDTnYCTKIsDq # 1BtmXUqEG1NqzJKS4kOmxkYp2WyODi7vQTCBZtVFJfVZ3j7OgWmnhFr4yUozZtqg # PrHRVHhGNKlYzyjlroPxul+bgIspzOwbtmsgY1MCAwEAAaOCAV0wggFZMBIGA1Ud # EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFO9vU0rp5AZ8esrikFb2L9RJ7MtOMB8G # A1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9PMA4GA1UdDwEB/wQEAwIBhjAT # BgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcBAQRrMGkwJAYIKwYBBQUHMAGG # GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1aHR0cDovL2Nh # Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcnQwQwYD # VR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0 # VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9 # bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQAXzvsWgBz+Bz0RdnEwvb4LyLU0pn/N0IfF # iBowf0/Dm1wGc/Do7oVMY2mhXZXjDNJQa8j00DNqhCT3t+s8G0iP5kvN2n7Jd2E4 # /iEIUBO41P5F448rSYJ59Ib61eoalhnd6ywFLerycvZTAz40y8S4F3/a+Z1jEMK/ # DMm/axFSgoR8n6c3nuZB9BfBwAQYK9FHaoq2e26MHvVY9gCDA/JYsq7pGdogP8HR # trYfctSLANEBfHU16r3J05qX3kId+ZOczgj5kjatVB+NdADVZKON/gnZruMvNYY2 # o1f4MXRJDMdTSlOLh0HCn2cQLwQCqjFbqrXuvTPSegOOzr4EWj7PtspIHBldNE2K # 9i697cvaiIo2p61Ed2p8xMJb82Yosn0z4y25xUbI7GIN/TpVfHIqQ6Ku/qjTY6hc # 3hsXMrS+U0yy+GWqAXam4ToWd2UQ1KYT70kZjE4YtL8Pbzg0c1ugMZyZZd/BdHLi # Ru7hAWE6bTEm4XYRkA6Tl4KSFLFk43esaUeqGkH/wyW4N7OigizwJWeukcyIPbAv # jSabnf7+Pu0VrFgoiovRDiyx3zEdmcif/sYQsfch28bZeUz2rtY/9TCA6TD8dC3J # E3rYkrhLULy7Dc90G6e8BlqmyIjlgp2+VqsS9/wQD7yFylIz0scmbKvFoW2jNrbM # 1pD2T7m3XDCCBu0wggTVoAMCAQICEAqA7xhLjfEFgtHEdqeVdGgwDQYJKoZIhvcN # AQELBQAwaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEw # PwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IFRpbWVTdGFtcGluZyBSU0E0MDk2 # IFNIQTI1NiAyMDI1IENBMTAeFw0yNTA2MDQwMDAwMDBaFw0zNjA5MDMyMzU5NTla # MGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE7MDkGA1UE # AxMyRGlnaUNlcnQgU0hBMjU2IFJTQTQwOTYgVGltZXN0YW1wIFJlc3BvbmRlciAy # MDI1IDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQRqwtEsae0Oqu # YFazK1e6b1H/hnAKAd/KN8wZQjBjMqiZ3xTWcfsLwOvRxUwXcGx8AUjni6bz52fG # Tfr6PHRNv6T7zsf1Y/E3IU8kgNkeECqVQ+3bzWYesFtkepErvUSbf+EIYLkrLKd6 # qJnuzK8Vcn0DvbDMemQFoxQ2Dsw4vEjoT1FpS54dNApZfKY61HAldytxNM89PZXU # P/5wWWURK+IfxiOg8W9lKMqzdIo7VA1R0V3Zp3DjjANwqAf4lEkTlCDQ0/fKJLKL # kzGBTpx6EYevvOi7XOc4zyh1uSqgr6UnbksIcFJqLbkIXIPbcNmA98Oskkkrvt6l # PAw/p4oDSRZreiwB7x9ykrjS6GS3NR39iTTFS+ENTqW8m6THuOmHHjQNC3zbJ6nJ # 6SXiLSvw4Smz8U07hqF+8CTXaETkVWz0dVVZw7knh1WZXOLHgDvundrAtuvz0D3T # +dYaNcwafsVCGZKUhQPL1naFKBy1p6llN3QgshRta6Eq4B40h5avMcpi54wm0i2e # PZD5pPIssoszQyF4//3DoK2O65Uck5Wggn8O2klETsJ7u8xEehGifgJYi+6I03Uu # T1j7FnrqVrOzaQoVJOeeStPeldYRNMmSF3voIgMFtNGh86w3ISHNm0IaadCKCkUe # 2LnwJKa8TIlwCUNVwppwn4D3/Pt5pwIDAQABo4IBlTCCAZEwDAYDVR0TAQH/BAIw # ADAdBgNVHQ4EFgQU5Dv88jHt/f3X85FxYxlQQ89hjOgwHwYDVR0jBBgwFoAU729T # SunkBnx6yuKQVvYv1Ensy04wDgYDVR0PAQH/BAQDAgeAMBYGA1UdJQEB/wQMMAoG # CCsGAQUFBwMIMIGVBggrBgEFBQcBAQSBiDCBhTAkBggrBgEFBQcwAYYYaHR0cDov # L29jc3AuZGlnaWNlcnQuY29tMF0GCCsGAQUFBzAChlFodHRwOi8vY2FjZXJ0cy5k # aWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2 # U0hBMjU2MjAyNUNBMS5jcnQwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL2NybDMu # ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0VGltZVN0YW1waW5nUlNBNDA5 # NlNIQTI1NjIwMjVDQTEuY3JsMCAGA1UdIAQZMBcwCAYGZ4EMAQQCMAsGCWCGSAGG # /WwHATANBgkqhkiG9w0BAQsFAAOCAgEAZSqt8RwnBLmuYEHs0QhEnmNAciH45PYi # T9s1i6UKtW+FERp8FgXRGQ/YAavXzWjZhY+hIfP2JkQ38U+wtJPBVBajYfrbIYG+ # Dui4I4PCvHpQuPqFgqp1PzC/ZRX4pvP/ciZmUnthfAEP1HShTrY+2DE5qjzvZs7J # IIgt0GCFD9ktx0LxxtRQ7vllKluHWiKk6FxRPyUPxAAYH2Vy1lNM4kzekd8oEARz # FAWgeW3az2xejEWLNN4eKGxDJ8WDl/FQUSntbjZ80FU3i54tpx5F/0Kr15zW/mJA # xZMVBrTE2oi0fcI8VMbtoRAmaaslNXdCG1+lqvP4FbrQ6IwSBXkZagHLhFU9HCrG # /syTRLLhAezu/3Lr00GrJzPQFnCEH1Y58678IgmfORBPC1JKkYaEt2OdDh4GmO0/ # 5cHelAK2/gTlQJINqDr6JfwyYHXSd+V08X1JUPvB4ILfJdmL+66Gp3CSBXG6IwXM # ZUXBhtCyIaehr0XkBoDIGMUG1dUtwq1qmcwbdUfcSYCn+OwncVUXf53VJUNOaMWM # ts0VlRYxe5nK+At+DI96HAlXHAL5SlfYxJ7La54i71McVWRP66bW+yERNpbJCjyC # YG2j+bdpxo/1Cy4uPcU3AWVPGrbn5PhDBf3Froguzzhk++ami+r3Qrx5bIbY3TVz # giFI7Gq3zWcwggdWMIIFPqADAgECAhAFfARoFtaNDha0m0G6FxiVMA0GCSqGSIb3 # DQEBCwUAMGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFB # MD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5 # NiBTSEEzODQgMjAyMSBDQTEwHhcNMjYwNTE0MDAwMDAwWhcNMjcwNjE3MjM1OTU5 # WjBeMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xpbmExFDASBgNV # BAcTC01vcnJpc3ZpbGxlMQ8wDQYDVQQKEwZMZW5vdm8xDzANBgNVBAMTBkxlbm92 # bzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALVacqHydjmqo6bF2tHw # cETPkOZLgPv1tJeIerpLcfmxLoX40GsUiY5l96B13bcfKjKBJQvHsj5D08RfGnif # K+sGsAX8xCgaYNLxq0COKn51GgLLMNgzlE4rR/8mUMuWK2fKXs24dmn7teE2+e+2 # dz/GfHXgrAIPvIr4PN+dZAFeoj6/wfpLLHZXtQLxKVmtDFc7gQZkM6Z8o0HrH2eX # 2MVNQwbZZWvSQhqRN66/LMcXxbLP8SAb6nKRCExflbI5i+MpEq+xOdiJxkP5dC5s # rQ31JGLDdhbuAcUJEdXATzgP1pT9is3uWZm3fro71Kvfa0XLwBZWR2ut8sQ6KUhd # 0Nsmd5c0f2PiD2uTd9mDWHQ34bu9mDunZaeWZrIlUP9MJ8TMM82ao/4tjFNK5m3T # hZUbCGwoepenXq8yjbKMKqHHvcoJY0SmkAIlUzWoRBbRC+uN0TwcR048sZDPo+ZC # gdONLPrjnsIU+NxuhfDMnj4UYbkRbtvnJ+U0O4Eu+ajRS87Li+jN2jHrABvAUXtP # J7DkkxTTfaspzlfxueoqVKcGLnu4PUAthKg3g4hleGgeo7s+krEDAzyvdBnY+b8U # dRH/BCxDr7G5ys/bCMPEzcUFT5LrrVBHO6N2U65iYkamzEo4okrrCNFDJPZC1G/p # NleTeiIadSPTT0tJGPK+nDo1AgMBAAGjggIDMIIB/zAfBgNVHSMEGDAWgBRoN+Dr # tjv4XxGG+/5hewiIZfROQjAdBgNVHQ4EFgQU7R8eucYUNncCkcWYWfCltSt/mxYw # PgYDVR0gBDcwNTAzBgZngQwBBAEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k # aWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEF # BQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBPhk1odHRwOi8vY3JsMy5kaWdpY2VydC5j # b20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIx # Q0ExLmNybDBToFGgT4ZNaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0 # VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwgZQG # CCsGAQUFBwEBBIGHMIGEMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy # dC5jb20wXAYIKwYBBQUHMAKGUGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E # aWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEu # Y3J0MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggIBAC0PiOF1B8Qdp2pcfb3P # 6MuzaeTUw77bfMSCcnwY8xFtkyRRp9H6X4ZaSTdAQge3d6NG7OcHnGQ3FKraZqT3 # ugjNEXvH1MXr8SNgFb7t7TyKDK0RmRK9idsycLJfRsmbj0FSTL12jqrzyHrQqkTq # KaDqYfIVan7VxP2On8gq3/OT368z1YJbRgfu/rNpXoYpXTKSfxaIXNE7rEiUwu+T # vi8wgfLqC/a7ujC8vbYRWgaHHsz3bjFVN/h1p78adds2GdxPzYFoS12+JKq2cKGe # Ma5Hbr2YQfHsbpQlzZglB3mGCci+uhN5YGaHleo3Ohd0BHci32RFOA1xdD8fS9TD # pGRMGLKF9z5WTmiGZVR4x54Qwtf4clbA5V0P9d4ppmLZJKdeaHd/JKONVJ9nYV1H # NA52CgvgRWpUc+jxnPL5A3J9qIvUXp98ZQifEyHBFX2VqWTdu9MldzklRo/eAT1k # MUVheRAcd32yLDiFvn7lp2nasJs8Hh+6bUxfHKbKBrNrw7CmcTDzFK119BkykWS0 # vL7xsbCEbavLIhW/ZqEjWA9k/v2FS2wbBQ9YOC8F3magnslxWlZWsym3Dxdm0Hr1 # WKHbnFcBscMiBQ+fhLDAqIG8tPPnNhc7QhOOlxQlbfEDh8QmQbUo2H9hJJEGiHJS # VwuAKbcWembFyAgLV02ASxS7MYIGSDCCBkQCAQEwfTBpMQswCQYDVQQGEwJVUzEX # MBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0 # ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExAhAFfARo # FtaNDha0m0G6FxiVMAkGBSsOAwIaBQCgeDAYBgorBgEEAYI3AgEMMQowCKACgACh # AoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAM # BgorBgEEAYI3AgEVMCMGCSqGSIb3DQEJBDEWBBQ6n5ErhsoJt5hTAVxzzoR54x+n # ZjANBgkqhkiG9w0BAQEFAASCAgAViMtBK7BVvADesSHZWCxkj4ElcBraE8PUpWbZ # 6JLaJenyacyP4/SoKgRFghuaEbWHca3C8tqdP25jkHjya/Ayc6OKtK+YeAdUqk41 # i2D5TAKvu/qIHXXdrUaJYqubNXukD2n+Cz6iNtHCne4FEkAar4SSCMRu2wDRL0lT # lCME94iAfclYBOrF/9ZYGKLICLqmc6DRJYiax0UQY/wuc9sYCtARzjT5Sa+7KUjF # BvRKgBL/zMYhCZ141IQwThwrVkoWIms4R7f0d29J9xvrKedKIIPX3KHVQDxcyN7U # w3Ci40nbDMnyGI3DXGiSpkD2wu7fglLvM411BLce3uF9rEbh0/YLLyT1OKi2Jg+H # FFyKOaVFivOn0Q0I/vWKy6gjluPQ5n5+igAhhiYNe24Z2BRM+bJ6KpgNKmVh+3qq # 6XirfC0Qp6qmfwyiv3BxX7ClSvG+ThXiRZ1hEYwDqy2BR0Sj30p0RVir5TrFp3n1 # Y8PPWZSp88A8zdble0dRdqcP8DUwqxAjr+hJzcDH1rxfUr+JiVIyttNQsG0HeiUE # ac5Pkh4jCSOyFmrODuRF9myKaRuLBOOG7pniO7ULrTKZfSGKAd82kecAZmCOPodV # pEPmJU0XJ01xjoNpyXmZxuHb5LHCzNXhQ3eHmn5WklGD2dlZZX6UXXZiI4pfc3Dw # dXz2V6GCAyYwggMiBgkqhkiG9w0BCQYxggMTMIIDDwIBATB9MGkxCzAJBgNVBAYT # AlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQg # VHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEC # EAqA7xhLjfEFgtHEdqeVdGgwDQYJYIZIAWUDBAIBBQCgaTAYBgkqhkiG9w0BCQMx # CwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjA2MDExNTUyMTBaMC8GCSqG # SIb3DQEJBDEiBCDsxqzmuZ5PvN/kGkXuXILjP+iAC8UiZ7hf5s431Sh87DANBgkq # hkiG9w0BAQEFAASCAgAAS7VK+7uLNNzV6FWsQ9W6bE0oTrn+aLHWoqYOJMKDzs2N # JPufZLf98UROGfQJarVg3dhmRrhzLbC5zC2n7IrEQxMUMIYTqymPTQ8rtTGjaTm4 # c3U2of12udpWi8wWc43XPpY1diP3kkQRjrJl95VBo6sMytydLNRBh2UBbS7cKI52 # fdwBZF/qyWdULv8GJjR2jbHJ93XiPUYeD3gS1o7gbQzVceKw8qKje3Lxkpszkxz5 # oYpgyfv+97l0rz3TJOxG6rSgPJsz/p8YEumgPuHNi1iiGxsabm8PYaeaPn+vWpWJ # nW/Yc7V+KJmXrjCn1Z8N1MpoJWfxWQaZOlKtvD1Jwo0sI3Ia1YCTUzYSVv31KUz9 # QnosHS8wIC9Kca4Y+2nwDFfLzMqeBqMqluBxrMMFsGDZ8iz6zBcNgDSZC9VXhE3y # 4QwX8noM543o1s3Ea6D1ZdOOY3Io/J3VznLIGuSe0xhN+uxlSOG65/q7kxxD5ArC # BieAYUK+YzG2eAQPW6gsXUawcv2u4sZcKZzBPsrMVmCVclvCohrYvhusj+jJlFxj # 77we2en5rrrN6Vf8JcEiq0W1lBCL3OK83BXPtsU1pUEFRMDDeZgQZpO/mGnpRmTv # LkPn58/Rhd8Ubj3aDplNlnZPpItOXiHz0KIg9RRnCAfhyawXXWZ9TJrHXpeN3Q== # SIG # End signature block |