AzStackHci.DiagnosticSettings

0.6.8

Private/AzStackHci.Results.Helpers.ps1

# ////////////////////////////////////////////////////////////////////////////
# Strict Mode v1 (PS 5.1 safe) - surfaces reads of uninitialised variables at runtime.
Set-StrictMode -Version 1.0

# Function to process results
Function Publish-Results {
    param (
        [ValidateSet('HTML', 'CSV')]
        [string]$OutputFormat = 'HTML'
    )

    begin {
        # Write-Debug "Publish-Results: Beginning results processing and publishing"
    }

    process {
        # Assign Row IDs and reorder columns
        $rowIdCounter = 1
        foreach ($result in $script:Results) {
            $result.RowID = $rowIdCounter
            $rowIdCounter++
        }

        # NOTE: Select-Object below acts as the canonical column ORDER + FILTER for
        # the published HTML / CSV / JSON outputs and the -PassThru ArrayList.
        # Properties NOT named here are silently DROPPED. MachineName (added v0.6.7
        # for -Scope Cluster) MUST appear here or every row's origin host is lost
        # in the published output and cluster fan-out cannot attribute results.
        # New columns should be appended at the END so the existing column order
        # (relied on by the HTML row-colour regex below — counts cells UP TO the
        # Layer7Status column) is preserved.
        #
        # v0.6.7: snapshot the run-level detection lists ONCE so the per-row
        # ResultCategory classifier (the trailing calculated column) doesn't
        # re-enumerate module-scope state for every row. Both arrays are seeded by
        # Initialize-ModuleState and populated during the test run, so they are always
        # initialised by the time Publish-Results executes.
        $sslInspectedSnapshot = @($script:SSLInspectedURLs)
        $privateLinkSnapshot   = @($script:PrivateLinkDetectedArray)
        [System.Collections.ArrayList]$script:Results = @($script:Results | Select-Object RowID, URL, Port, ArcGateway, IsWildcard, Source, IPAddress, Layer7Status, Layer7Response, Layer7ResponseTime, Note, TCPStatus, CertificateIssuer, CertificateSubject, CertificateThumbprint, IntermediateCertificateIssuer, IntermediateCertificateSubject, IntermediateCertificateThumbprint, RootCertificateIssuer, RootCertificateSubject, RootCertificateThumbprint, MachineName, @{ Name = 'ResultCategory'; Expression = { Get-ConnectivityResultCategory -Row $_ -SSLInspectedURLs $sslInspectedSnapshot -PrivateLinkURLs $privateLinkSnapshot } })


        # Sort the array by the properties Layer7Status (Failed first, then Success, then Skipped), Source, Url
        $statusOrder = @{ 'Failed' = 0; 'Success' = 1; 'Skipped' = 2 }
        [System.Collections.ArrayList]$script:Results = @($script:Results | Sort-Object -Property @{Expression={$statusOrder[$_.Layer7Status]}; Ascending=$true}, Source, Url)

        # Export results based on the OutputFormat parameter (HTML or CSV)
        try {
            switch ($OutputFormat) {
                'HTML' {
                    $htmlStyle = @"
<meta charset="utf-8" />
<style>
    body { font-family: Segoe UI, Arial, sans-serif; margin: 20px; background-color: #f5f5f5; }
    h1 { color: #0078d4; border-bottom: 2px solid #0078d4; padding-bottom: 8px; }
    .summary { background: #fff; padding: 12px 20px; margin-bottom: 20px; border-left: 4px solid #0078d4; box-shadow: 0 1px 3px rgba(0,0,0,0.12); }
    .summary li { list-style: none; padding: 2px 0; }
    .summary ul { padding-left: 0; margin: 8px 0; }
    .table-wrapper { overflow-x: auto; max-width: 100%; box-shadow: 0 1px 3px rgba(0,0,0,0.12); }
    .top-scroll { overflow-x: auto; max-width: 100%; }
    .top-scroll div { height: 1px; }
    table { border-collapse: collapse; white-space: nowrap; background: #fff; }
    th { background-color: #0078d4; color: #fff; padding: 10px 8px; text-align: left; font-size: 13px; position: sticky; top: 0; }
    td { padding: 8px; border-bottom: 1px solid #e0e0e0; font-size: 13px; }
    tr:nth-child(even) { background-color: #f9f9f9; }
    tr:hover { background-color: #e8f4fd; }
    tr.status-failed { background-color: #fde7e9; }
    tr.status-success { background-color: #e6f4ea; }
    tr.status-skipped { background-color: #fff4ce; }
    h2 { color: #0078d4; margin-top: 24px; }
</style>
"@
                    $preContent = "<h1>Azure Local Connectivity Test Results</h1><!-- SUMMARY -->"
                    $htmlBody = $script:Results | ConvertTo-Html -Title 'Azure Local Connectivity Test Results' -Head $htmlStyle -PreContent $preContent
                    # Color-code rows based on Layer7Status
                    $htmlBody = $htmlBody -replace '<tr><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>Failed</td>', '<tr class="status-failed"><td>$1</td><td>$2</td><td>$3</td><td>$4</td><td>$5</td><td>$6</td><td>$7</td><td>Failed</td>'
                    $htmlBody = $htmlBody -replace '<tr><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>Success</td>', '<tr class="status-success"><td>$1</td><td>$2</td><td>$3</td><td>$4</td><td>$5</td><td>$6</td><td>$7</td><td>Success</td>'
                    $htmlBody = $htmlBody -replace '<tr><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>([^<]*)</td><td>Skipped</td>', '<tr class="status-skipped"><td>$1</td><td>$2</td><td>$3</td><td>$4</td><td>$5</td><td>$6</td><td>$7</td><td>Skipped</td>'
                    # Bold the Layer7Status cell text
                    $htmlBody = $htmlBody -replace '<td>(Failed|Success|Skipped)</td>', '<td><strong>$1</strong></td>'
                    # Wrap the table in a scrollable div with a synced top scrollbar
                    $htmlBody = $htmlBody -replace '<table>', '<div class="top-scroll" id="topScroll"><div></div></div><div class="table-wrapper" id="bottomScroll"><table>'
                    $htmlBody = $htmlBody -replace '</table>', '</table></div>'
                    # Add JavaScript to sync the top and bottom scrollbars and size the top scroll spacer to match the table width
                    $scrollScript = @"
<script>
document.addEventListener('DOMContentLoaded', function() {
    var top = document.getElementById('topScroll');
    var bottom = document.getElementById('bottomScroll');
    var table = bottom.querySelector('table');
    top.firstElementChild.style.width = table.scrollWidth + 'px';
    top.addEventListener('scroll', function() { bottom.scrollLeft = top.scrollLeft; });
    bottom.addEventListener('scroll', function() { top.scrollLeft = bottom.scrollLeft; });
});
</script>
"@
                    $htmlBody = $htmlBody -replace '</body>', "$scrollScript`n</body>"
                    Write-Utf8NoBom -Path $script:OutputFile -Content $htmlBody
                }
                'CSV' {
                    $script:Results | Export-Csv -Path $script:OutputFile -NoTypeInformation
                }
            }
        } catch {
            Write-HostAzS "Failed to save test results to $($script:OutputFile)"
            Write-Error "Error: $($_.Exception.Message)"
        }

        # Always generate JSON output file (in addition to HTML/CSV)
        try {
            Write-Utf8NoBom -Path $script:JsonOutputFile -Content ($script:Results | ConvertTo-Json -Depth 3 -Compress)
        } catch {
            Write-HostAzS "Failed to save JSON results to $($script:JsonOutputFile)"
            Write-Error "Error: $($_.Exception.Message)"
        }

        # // Calculate the number of successful, failed, and skipped URLs
        # Use TCP Status, if using TCP Connectivity Test switch
        [array]$successResults = @()
        if($IncludeTCPConnectivityTests.IsPresent){
            # Use TCPStatus for successful results
            [array]$successResults = $script:Results | Where-Object { $_.TCPStatus -eq "Success" }
        } else {
            # Otherwise default to Layer7Status
            [array]$successResults = $script:Results | Where-Object { $_.Layer7Status -eq "Success" }
        }
        # Failed URLs results
        [array]$failedResults = @()
        [array]$failedResults = $script:Results | Where-Object { $_.Layer7Status -eq "Failed" }
        # Skipped URLs results
        [array]$skippedResults = @()
        [array]$skippedResults = $script:Results | Where-Object { $_.TCPStatus -like "Skipped*" -or $_.Layer7Status -eq "Skipped" }

        # If the PassThru switch is not present, display the results
        if(-not($PassThru.IsPresent) -and -not($script:SilentMode)){

            # Console-display-only URL projection: reuse Get-DomainFromURL to strip scheme,
            # path and :port suffix so Format-Table -AutoSize doesn't wrap on long URLs.
            # The underlying $script:Results objects are UNCHANGED — CSV, HTML and JSON output
            # continue to emit the full URL exactly as tested. Wildcard URLs
            # (e.g. '*.blob.core.windows.net') are left as-is by Get-DomainFromURL.
            $UrlColumn = @{ Name = 'URL'; Expression = { (Get-DomainFromURL -url ([string]$_.URL)).Domain } }

            if($failedResults.Count -gt 0) {
                Write-HostAzS "`nThe following URLs failed:" -ForegroundColor Red
                if($IncludeTCPConnectivityTests.IsPresent){
                    $failedResults | Format-Table -Property RowID, Source, $UrlColumn, Port, TCPStatus, IpAddress, Layer7Response -AutoSize | Out-Host
                } else {
                    $failedResults | Format-Table -Property RowID, Source, $UrlColumn, Port, IpAddress, Layer7Response -AutoSize | Out-Host
                }

            } else {
                Write-HostAzS "`nNo URLs failed.`n" -ForegroundColor Green
            }

            if($successResults.Count -gt 0) {
                Write-HostAzS "The following URLs were successful:" -ForegroundColor Green
                if($IncludeTCPConnectivityTests.IsPresent){
                    $successResults | Format-Table -Property RowID, Source, $UrlColumn, Port, TCPStatus, IpAddress, Layer7Response -AutoSize | Out-Host
                } else {
                    $successResults | Format-Table -Property RowID, Source, $UrlColumn, Port, IpAddress, Layer7Response -AutoSize | Out-Host
                }
            } else {
                Write-HostAzS "No URLs were successful.`n"
            }

            if($skippedResults.Count -gt 0) {
                Write-HostAzS "The following URLs were skipped:"
                $skippedResults | Format-Table -Property RowID, Source, $UrlColumn, Port, Layer7Status, Note -AutoSize | Out-Host
            } else {
                Write-HostAzS "No URLs were skipped.`n" -ForegroundColor Green
            }

            # Display test results summary
            Write-HostAzS "`nTest results summary:"
            Write-HostAzS "---------------------------------`n"

            Write-HostAzS "Total URLs tested: $($script:Results.Count)"
            Write-HostAzS "Successful URLs: $($successResults.Count)" -ForegroundColor Green
            if($failedResults.Count -gt 0){
                Write-HostAzS "Failed URLs: $($failedResults.Count)" -ForegroundColor Red
            } else {
                Write-HostAzS "Failed URLs: $($failedResults.Count)"
            }
            Write-HostAzS "Skipped URLs: $($skippedResults.Count)`n" -ForegroundColor Yellow

            Write-HostAzS "The test result for each endpoint is shown above. For detailed output, including certificate information see the $OutputFormat output file listed below."
            
        } elseif($PassThru.IsPresent -or $script:SilentMode) {
        
            # If PassThru or NoOutput switches are present, return the results as an array of objects instead of displaying in the console
            return $script:Results
        
        } else {
            # Not expected to hit this else block, but included for safety
        }

        Write-HostAzS "`nIMPORTANT: Only URLs with a Source of 'GitHub', 'Environment Checker' or '<OEM Name> SBE' are required on firewall / proxy outbound allow rules." -ForegroundColor Yellow -NoNewline
        Write-HostAzS " Any URLs with a Source of 'Redirect for ', 'Test for ' are only used for testing connectivity to the required endpoints using the automation in this module." -ForegroundColor Yellow

        Write-HostAzS "`nAzure Local product documentation for firewall requirements can be accessed using this URL from a device with a browser:`n`n`tMicrosoft documentation: 'https://learn.microsoft.com/azure/azure-local/concepts/firewall-requirements'`n" -ForegroundColor Green

    } # End of Process block

    end {
        # Write-Debug "Publish-Results: Results processing and publishing completed"
    }
} # End of Publish-Results


# ////////////////////////////////////////////////////////////////////////////

# Function to remove PII from the transcript file
# ////////////////////////////////////////////////////////////////////////////
Function Remove-PIIFromTranscriptFile {
    <#
    .SYNOPSIS
        Redact the transcript file by removing sensitive information.
    .DESCRIPTION
        This function reads a transcript file, removes sensitive information (Username and RunAs User values),
        and overwrites the file in place with the redacted content.
        Returns a PSCustomObject with Success, RedactionCount, and Error fields so callers can verify
        the file was redacted before uploading or sharing.
    .OUTPUTS
        System.Management.Automation.PSCustomObject with properties:
            Success (bool), RedactionCount (int), Error (string)
    #>
    [CmdletBinding()]
    [OutputType([PSCustomObject])]
    param (
        [Parameter(Mandatory=$true)]
        [string]$TranscriptFilePath
    )

    begin {
        # Write-Debug "Remove-PIIFromTranscriptFile: Beginning PII removal from '$TranscriptFilePath'"
        $result = [PSCustomObject]@{
            Success        = $false
            RedactionCount = 0
            Error          = $null
        }
    }

    process {
        # Read the transcript file content
        try {
            $transcriptContent = Get-Content -Path $TranscriptFilePath -ErrorAction Stop
        } catch {
            $result.Error = "Failed to read the transcript file: $($_.Exception.Message)"
            Write-HostAzS "Error: $($result.Error)" -ForegroundColor Red
            return $result
        }

        # Check if the transcript file was read successfully
        if($transcriptContent) {

            # Set the variable to the original transcript file contents
            $redactedContent = $transcriptContent

            # Count matches per pattern for verbose logging, then apply the redaction.
            $usernamePattern = '(?i)(Username: )([a-zA-Z0-9._-]+\\[a-zA-Z0-9._-]+)'
            $runAsPattern    = '(?i)(RunAs User: )([a-zA-Z0-9._-]+\\[a-zA-Z0-9._-]+)'
            $usernameMatches = [regex]::Matches(($redactedContent -join "`n"), $usernamePattern).Count
            $runAsMatches    = [regex]::Matches(($redactedContent -join "`n"), $runAsPattern).Count
            Write-Verbose "Remove-PIIFromTranscriptFile: Username matches=$usernameMatches, RunAs User matches=$runAsMatches"

            # Redact: Username: <domain>\<username> -> <REDACTED>
            $redactedContent = $redactedContent -replace $usernamePattern, '$1<REDACTED>'
            # Redact: RunAs User: <domain>\<username> -> <REDACTED>
            $redactedContent = $redactedContent -replace $runAsPattern, '$1<REDACTED>'

            $result.RedactionCount = $usernameMatches + $runAsMatches

            # Write the redacted content back to the same file
            try {
                Set-Content -Path $TranscriptFilePath -Value $redactedContent -ErrorAction Stop -Force
                $result.Success = $true
            } catch {
                $result.Error = "Failed to update transcript file: $($_.Exception.Message)"
                Write-HostAzS "Error: $($result.Error)" -ForegroundColor Red
            }
        } else {
            $result.Error = "Transcript file was empty or could not be read."
            Write-HostAzS "Error: $($result.Error)" -ForegroundColor Red
        }

        return $result
    }

    end {
        # Write-Debug "Remove-PIIFromTranscriptFile: PII removal completed"
    }
} # End Function Remove-PIIFromTranscriptFile

# SIG # Begin signature block
# MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDsoDiXrG78qB8h
# AsSx0D8380Bh4PHlxos2tb7+amrbiaCCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK
# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIJ1kmxJL
# qFacPP2Wk1e3XpsT16uhMQDsA/CZmF4tuyTcMEIGCisGAQQBgjcCAQwxNDAyoBSA
# EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w
# DQYJKoZIhvcNAQEBBQAEggEAuWsP62Jk5oL4DHgtOQ0Mam2bZ3zqTVcf5iSWJ6xA
# J6BwrrAsB04rpELdIlr+cS0nLZmqImo5BojwWe86L10IkoE86RexkQofA9xsbuZt
# 032/tTDgXWacRRCO3TVhYL4ZSG3FcPK6Oil1zhEtC7zr+hWqUQgF+Z9kw8zR84fO
# fYhKWq4AxX8Z7br2r+o+yJ2qxNMgcRjpa0fbTQ4w9bM62ZVfn07YappouEbn/zKA
# UmD6L1dF+0uZ0lDw23IslWlPdWjGeLqDSym7dMTpVi6Ekm7rWMQX31TfRmIXj+vg
# 2+uviMXzmDsSrUmtRkYo/HvxrDpw01HCbEMlpsD6UnS4V6GCF5cwgheTBgorBgEE
# AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD
# BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD
# ATAxMA0GCWCGSAFlAwQCAQUABCABm3PFS11wkan4HFdSzdtNib2nsHj+j1tbkujz
# ikP4rgIGajGd5RI0GBMyMDI2MDcxNTE4MjU1OC4yMzRaMASAAgH0oIHRpIHOMIHL
# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk
# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN
# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT
# UyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAh86cGnkojAulQABAAAC
# HzANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe
# Fw0yNjAyMTkxOTM5NTFaFw0yNzA1MTcxOTM5NTFaMIHLMQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj
# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUw
# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi
# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDLO8XFOcfGqAqgiz0+AmQmFl3d
# Z0aTG4UFJkqqNdMHy28DaheCBs6ONufukye5x42CWkzgRIy9kE2VWwEntZ8Zkgyr
# ykC0bIqsID7+6FxguseTXf1Vwvm1D8104VmetoBJlJ4uGbuyJZUvXDx55nVh50yg
# LTzZ24WkQsnPpvRZv2kPc39f3bhLyHVtnHsa/W/86Vrftd+AfFveA+qN/EY+XGj5
# c/DPMXCYECb0arYb92dDJWtwzpyBrp4gfHlgY1UEpc4l4AGELrf2J4wrxTzTW+SM
# 8XhV1dOOPrYjD080IbZqL8B+IF0RCdn269YXrGK6QIHipznKZcCS8jN30YAHnTJV
# N5Zzs6t/2YsqBGDquvDad7934FFTwzvUcO3VoIyd93XWwvP8/SCFVJh21W8oGQTp
# tGHyly+Fl4henVMVZF1v6osOtirX8GFTiEhnf8nRdOg7yZYAJ0xy9CtDfbXaTn/c
# f3Lq3N/GCYKFjC+5mUCE+AJhmxMuMdvSUGmKiAFdiPAjUTqsWWBBZJm0eCwgeGJF
# mmQA+V7/98BKcE+gUL7O9eWRDQwKeAcvo6rxNv2Y4jKrHA6Z/wi3a/fKUhLCNZES
# 8qGdrpDAm7qh+6FjYxytAbkiKM6uTNy/ULPlwtlYZoAJDDQP7eYCywwVbNTbHXRB
# SS+NccC0sSB4W7U67wIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFNk72sGDlH0r5Dwv
# fGR5XwJI8B7bMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud
# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js
# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr
# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv
# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw
# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw
# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQBlbu3IoynnPz0K1iPb
# eNnsej2b15l5sdl2FAFBBGT9lRdc2gNV8LAIusPYHHhUvRDcsx4lbMNhVKPGu4TD
# LaqNt/CI+SFtGuqdRLpVP1XE9cCLyKrKPpcJFJCqPpV+efoAtYBmIUQcxxwT7WIQ
# 7gag8+rkKvrMkCoRqKS0mKv8J1sKfi85+G2uhZ/1RteSVdYZOZOj+Sb4wzonTCTj
# 7EtgMN/BX35W5dTzd7wJdGepYkVi871dSrC2Tr1ZFzAR7S44drCWZpJ6phJabVNO
# sNxFJKgSykugOGWzQ318Rr3MTPg2s3Bns+pUPVgMijd4bUOH2BlEsLMMwOcolTTZ
# qg1HYrdY1jxpUAI9ipjBQRINL/O705Z+/f2LjNmJQooCVJVX24adpZ519SsfazGo
# qXGt91bmqKo0fI09Il4sUHh4ih6rpiQDBlyL7vmvCejwVxYevY4qVwTZ/o3gvl+R
# 0lFxYS9feIM4NeG0+WsDZ7jLci5MFeuNwosQY3z26Xg1oj0U9u+ncR9uTU+xBmJ8
# BtlCdhQ13RNMX5P+krRYPB3XCp9Jm6XaO1995q32AIZm1mzBGI6yHlviXaEC5TzG
# iO1LXuPtXZU2X93oQJbMoe3v8+5CPKrQalGWyYuh2a3V1pwbj+W0FEmEFPpu8TI+
# qYO1IIQWUSRvFjXth5Ob02hMMjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA
# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow
# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd
# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX
# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q
# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d
# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN
# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k
# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d
# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS
# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8
# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm
# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF
# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID
# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU
# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1
# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0
# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA
# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL
# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p
# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3
# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz
# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU
# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN
# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU
# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5
# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy
# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6
# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE
# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp
# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd
# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb
# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd
# VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR
# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p
# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg
# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM3MDMtMDVFMC1E
# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw
# BwYFKw4DAhoDFQBLIMg1P7sNuCXpmbH2IXT2tXeEEKCBgzCBgKR+MHwxCzAJBgNV
# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w
# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m
# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7gGrHDAiGA8y
# MDI2MDcxNTA2NDU0OFoYDzIwMjYwNzE2MDY0NTQ4WjB3MD0GCisGAQQBhFkKBAEx
# LzAtMAoCBQDuAascAgEAMAoCAQACAggoAgH/MAcCAQACAhVeMAoCBQDuAvycAgEA
# MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI
# AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBALyzDsINyB4nQnYBJ2mvp7qzyB4p
# zJAseGKu0MaILg7n+STL4Ehwbjge+MNB7p8SRDRWwKljMBpM0jdzW/s1Gl22897q
# mVuZn9NijoU1g/QhrqqK1CqaHp+oEAsthPgwxisc6sDVebDQlJGMdDLJX4KLzAfG
# yrGQ8tEnc/n5Y1wFzKdY9VvqCC0pax2zEbxHsdYf2+Y749PqKWvXHgZsmg3SmChC
# 70QwVvkDzyCpI0G5tYtWro1jEPLQb1odwsH1HeBlNxJBTYAJuPEPhWaFiwUUtFPp
# UwEW3eJf8S6u/TwvxZSnMeWjMS3vzGX+baD9Hd++8Pggw85NmwxPPQMPJQAxggQN
# MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ
# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
# MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAh86
# cGnkojAulQABAAACHzANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G
# CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCB6+yqRpBiYB6UM75eKnLn+rHMZ
# RscxaYs3FO63aoTZ2jCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EILAkCt9W
# kCsMtURkFu6TY0P3UXdRnCiYuPZhe3ykLfwUMIGYMIGApH4wfDELMAkGA1UEBhMC
# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV
# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp
# bWUtU3RhbXAgUENBIDIwMTACEzMAAAIfOnBp5KIwLpUAAQAAAh8wIgQgrgbS3uO8
# aBikYEGQx4Zj9sg7NFFirrSReoLFkl2BtUAwDQYJKoZIhvcNAQELBQAEggIALYpw
# Yu9E2+AMIHw71uxByw0HAtx4RpmHwqkjp6qU/Vm7Y3vdoHFqylvhaIwwn2Ig3lYI
# q7rki5X2TLfi6MwsMWHdnNgBEAUAvKstAM/nZfJxQy2QTyjc+kWocdmVq1Ke7na/
# 58spZqz4GKBHpYAEuurr0RojIl2sU8cM8zFD6Bs7o+zjjyNX0KRpc0ByrRa6SQXE
# Z/FUf+Yt1ApHNqspQtUDfM2kXy6VMPS0rAicJU78eDxVcVG5jxofz+1rj08w00f0
# 4pYJCzzkEzkjdU0EQt5ln6MS3O0c/3R+1pkE0Hb578bRp+8D2WSN4NuVFh5dCvV3
# 1BeofFID5LIjxsHNwdAi6UPsMWlT8k6tYiEBvLVd86VtEAtvB/KnaGeStHq1ksJ7
# l7L6jTKo5Rk/VM985mpEF7UFn46Xy4ob6VWONOWkVsBO/NwQXzPKAptpgfh6vqJl
# kUC3p7He3hj6SHey/Vcd+eIq8gyliHimN8qcM14hQqKfbomt42lX6gIwBn/7isVW
# hwxZvyk/m9BSEISZZ2WY6eJ/Zm16VUavzdY9Fo2RJvImriwQzpqqaByAcqautI15
# vLBB0FP7h154VurtMeZHJpp7T+8VVW15Sk9oSDTsAQNKFfVUOUgNKqRPXJBM+qrS
# 0OFGW7zEM8YxUVOedEPBjjZylcE14jJ3jci37t8=
# SIG # End signature block