Private/AzStackHci.Artifact.Helpers.ps1
|
# //////////////////////////////////////////////////////////////////////////// # Diagnostic artifact path, ownership, and retention helpers. # //////////////////////////////////////////////////////////////////////////// function Get-AzStackHciArtifactDirectory { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('Connectivity', 'OsConfig', 'VMCheckpointHealth', 'PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH, [Parameter(Mandatory = $false)] [switch]$Create ) $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') $artifactPath = Join-Path $rootFullPath $script:DIAG_ARTIFACT_RELATIVE_PATHS[$ArtifactType] if ($Create -and -not (Test-Path -LiteralPath $artifactPath -PathType Container)) { New-Item -Path $artifactPath -ItemType Directory -Force -ErrorAction Stop | Out-Null } return $artifactPath } function New-AzStackHciUniqueRunDirectory { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [string]$BasePath, [Parameter(Mandatory = $true)] [ValidateNotNullOrEmpty()] [string]$Prefix, [Parameter(Mandatory = $false)] [ValidateNotNullOrEmpty()] [string]$Timestamp = ([DateTime]::UtcNow.ToString('yyyy-MM-dd_HHmmss') + 'Z') ) if (-not (Test-Path -LiteralPath $BasePath -PathType Container)) { New-Item -ItemType Directory -Path $BasePath -Force -ErrorAction Stop | Out-Null } for ($collisionIndex = 0; $collisionIndex -lt 1000; $collisionIndex++) { $runStamp = if ($collisionIndex -eq 0) { $Timestamp } else { '{0}-{1:00}' -f $Timestamp, $collisionIndex } $candidatePath = Join-Path $BasePath ("{0}_{1}" -f $Prefix, $runStamp) try { New-Item -ItemType Directory -Path $candidatePath -ErrorAction Stop | Out-Null return $candidatePath } catch { if (Test-Path -LiteralPath $candidatePath -PathType Container) { continue } throw } } throw "Could not allocate a unique '$Prefix' run directory beneath '$BasePath'." } function Test-AzStackHciArtifactPath { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [string]$Path, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) try { $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') $rootItem = Get-Item -LiteralPath $rootFullPath -Force -ErrorAction Stop $item = Get-Item -LiteralPath $Path -Force -ErrorAction Stop $itemFullPath = [System.IO.Path]::GetFullPath($item.FullName) } catch { return $false } if (($rootItem.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { return $false } $requiredPrefix = $rootFullPath + '\' if (-not $itemFullPath.StartsWith($requiredPrefix, [System.StringComparison]::OrdinalIgnoreCase)) { return $false } $relativePath = $itemFullPath.Substring($requiredPrefix.Length) $currentPath = $rootFullPath foreach ($segment in @($relativePath -split '[\\/]')) { if ([string]::IsNullOrWhiteSpace($segment) -or $segment -eq '.' -or $segment -eq '..') { return $false } $currentPath = Join-Path $currentPath $segment $currentItem = Get-Item -LiteralPath $currentPath -Force -ErrorAction Stop if (($currentItem.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { return $false } } return $true } function Test-AzStackHciArtifactTree { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [System.IO.DirectoryInfo]$Directory ) $pendingDirectories = [System.Collections.Stack]::new() $pendingDirectories.Push($Directory) try { while ($pendingDirectories.Count -gt 0) { $currentDirectory = $pendingDirectories.Pop() foreach ($child in @(Get-ChildItem -LiteralPath $currentDirectory.FullName -Force -ErrorAction Stop)) { if (($child.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { return $false } if ($child.PSIsContainer) { $pendingDirectories.Push($child) } } } } catch { return $false } return $true } function Get-AzStackHciBackupFile { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) $filePattern = switch ($ArtifactType) { 'PageFile' { 'PageFile_Settings_*.json' } 'MemoryDump' { 'MemoryDump_Settings_*.json' } 'UserModeCrashDump' { 'UserModeCrashDump_Settings_*.json' } } $newDirectory = Get-AzStackHciArtifactDirectory -ArtifactType $ArtifactType -RootPath $RootPath $searchDirectories = @($newDirectory, [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\')) foreach ($directory in $searchDirectories) { if (-not (Test-Path -LiteralPath $directory -PathType Container)) { continue } $latestBackup = Get-ChildItem -LiteralPath $directory -Filter $filePattern -File -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1 if ($latestBackup) { return $latestBackup } } return $null } function Resolve-AzStackHciBackupPath { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [string]$Path, [Parameter(Mandatory = $true)] [ValidateSet('PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) $item = Get-Item -LiteralPath $Path -Force -ErrorAction Stop if ($item.PSIsContainer) { throw "Backup path must identify a file, not a directory: '$Path'." } if (-not (Test-AzStackHciArtifactPath -Path $item.FullName -RootPath $RootPath)) { throw "Backup file must resolve beneath the canonical diagnostic root without reparse points. Got: '$($item.FullName)'." } $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') $newDirectory = [System.IO.Path]::GetFullPath((Get-AzStackHciArtifactDirectory -ArtifactType $ArtifactType -RootPath $RootPath)).TrimEnd('\') $resolvedPath = [System.IO.Path]::GetFullPath($item.FullName) $resolvedDirectory = [System.IO.Path]::GetDirectoryName($resolvedPath).TrimEnd('\') if (-not [string]::Equals($resolvedDirectory, $newDirectory, [System.StringComparison]::OrdinalIgnoreCase) -and -not [string]::Equals($resolvedDirectory, $rootFullPath, [System.StringComparison]::OrdinalIgnoreCase)) { throw "Backup file must be directly beneath '$newDirectory' or the legacy root '$rootFullPath'. Got: '$resolvedPath'." } $namePattern = switch ($ArtifactType) { 'PageFile' { '^PageFile_Settings_\d{8}(?:-\d{4})?\.json$' } 'MemoryDump' { '^MemoryDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } 'UserModeCrashDump' { '^UserModeCrashDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } } if ([System.IO.Path]::GetFileName($resolvedPath) -notmatch $namePattern) { throw "Backup filename is not valid for artifact type '$ArtifactType'. Got: '$resolvedPath'." } return $resolvedPath } function Test-AzStackHciBackupArtifact { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $true)] [System.IO.FileInfo]$File ) try { $backup = Get-Content -LiteralPath $File.FullName -Raw -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop if ($backup.BackupSchemaVersion -ne 1 -or [string]$backup.Checksum -notmatch '^[0-9a-fA-F]{64}$') { return $false } $verifyObject = switch ($ArtifactType) { 'PageFile' { [PSCustomObject][ordered]@{ BackupSchemaVersion = $backup.BackupSchemaVersion BackupDate = $backup.BackupDate Node = $backup.Node PageFileAutoManaged = $backup.PageFileAutoManaged PageFileConfig = $backup.PageFileConfig PageFileUsage = $backup.PageFileUsage } } 'MemoryDump' { [PSCustomObject][ordered]@{ BackupSchemaVersion = $backup.BackupSchemaVersion BackupDate = $backup.BackupDate Node = $backup.Node CrashDumpMode = $backup.CrashDumpMode Settings = $backup.Settings } } 'UserModeCrashDump' { [PSCustomObject][ordered]@{ BackupSchemaVersion = $backup.BackupSchemaVersion BackupDate = $backup.BackupDate Node = $backup.Node Settings = $backup.Settings } } } $verifyJson = $verifyObject | ConvertTo-Json -Depth 3 -Compress $sha256 = [System.Security.Cryptography.SHA256]::Create() try { $hashBytes = $sha256.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($verifyJson)) $computedChecksum = ([System.BitConverter]::ToString($hashBytes)).Replace('-', '').ToLowerInvariant() } finally { $sha256.Dispose() } return $computedChecksum -eq ([string]$backup.Checksum).ToLowerInvariant() } catch { return $false } } function Test-AzStackHciArtifactUnlocked { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [System.IO.FileSystemInfo]$Item ) try { $files = if ($Item.PSIsContainer) { @(Get-ChildItem -LiteralPath $Item.FullName -File -Recurse -Force -ErrorAction Stop) } else { @($Item) } } catch { return $false } foreach ($file in $files) { $stream = $null try { $stream = [System.IO.File]::Open($file.FullName, [System.IO.FileMode]::Open, [System.IO.FileAccess]::Read, [System.IO.FileShare]::None) } catch { return $false } finally { if ($stream) { $stream.Dispose() } } } return $true } function Get-AzStackHciOwnedArtifact { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('Connectivity', 'OsConfig', 'VMCheckpointHealth', 'PageFile', 'MemoryDump', 'UserModeCrashDump')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$RootPath = $script:DEFAULT_DIAG_EXPORT_PATH ) $rootFullPath = [System.IO.Path]::GetFullPath($RootPath).TrimEnd('\') if (-not (Test-Path -LiteralPath $rootFullPath -PathType Container)) { return } $typedDirectory = Get-AzStackHciArtifactDirectory -ArtifactType $ArtifactType -RootPath $rootFullPath $searchDirectories = @($typedDirectory) if ($ArtifactType -ne 'VMCheckpointHealth' -or $typedDirectory -ne $rootFullPath) { $searchDirectories += $rootFullPath } $seenPaths = @{} foreach ($directory in $searchDirectories) { if (-not (Test-Path -LiteralPath $directory -PathType Container)) { continue } foreach ($item in @(Get-ChildItem -LiteralPath $directory -Force -ErrorAction SilentlyContinue)) { if ($seenPaths.ContainsKey($item.FullName) -or -not (Test-AzStackHciArtifactPath -Path $item.FullName -RootPath $rootFullPath)) { continue } $owned = $false $isBackup = $ArtifactType -in @('PageFile', 'MemoryDump', 'UserModeCrashDump') if ($isBackup -and -not $item.PSIsContainer) { $namePattern = switch ($ArtifactType) { 'PageFile' { '^PageFile_Settings_\d{8}(?:-\d{4})?\.json$' } 'MemoryDump' { '^MemoryDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } 'UserModeCrashDump' { '^UserModeCrashDump_Settings_(?:\d{8}-\d{4}|\d{4}-\d{2}-\d{2}-\d{2}-\d{2})\.json$' } } $owned = $item.Name -match $namePattern -and (Test-AzStackHciBackupArtifact -ArtifactType $ArtifactType -File $item) } elseif ($ArtifactType -eq 'Connectivity' -and -not $item.PSIsContainer) { $owned = $item.Name -match '^(?:Transcript_)?AzureLocal_ConnectivityTest_[A-Za-z0-9]+_[A-Za-z0-9._-]+_\d{4}-\d{2}-\d{2}-\d{2}-\d{2}-\d{2}\.(?:html|json|csv|log)$' } elseif ($ArtifactType -eq 'OsConfig') { if ($item.PSIsContainer -and $item.Name -match '^.+-\d{8}-\d{6}$') { $reportFiles = @(Get-ChildItem -LiteralPath $item.FullName -File -Force -ErrorAction SilentlyContinue | Where-Object { $_.Name -match '^.+_AzureLocal_OsConfigReport-\d{4}-\d{2}-\d{2}-\d{2}-\d{2}-\d{2}\.(?:html|json)$' }) $owned = $reportFiles.Count -gt 0 } elseif (-not $item.PSIsContainer) { $owned = $item.Name -match '^.+_AzureLocal_OsConfigReport-\d{4}-\d{2}-\d{2}-\d{2}-\d{2}-\d{2}\.(?:html|json)$' } } elseif ($ArtifactType -eq 'VMCheckpointHealth') { if ($item.PSIsContainer) { $owned = $item.Name -match '^CheckpointAudit_\d{4}-\d{2}-\d{2}_\d{6}Z$' } else { $owned = $item.Name -match '^VMCheckpointAudit-[A-Za-z0-9._-]+-\d{4}-\d{2}-\d{2}\.html$' } } if (-not $owned) { continue } if ($item.PSIsContainer -and -not (Test-AzStackHciArtifactTree -Directory $item)) { continue } $seenPaths[$item.FullName] = $true $lastWriteTime = if ($item.PSIsContainer) { $latestChild = Get-ChildItem -LiteralPath $item.FullName -File -Recurse -Force -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1 if ($latestChild) { $latestChild.LastWriteTime } else { $item.LastWriteTime } } else { $item.LastWriteTime } [PSCustomObject]@{ ArtifactType = $ArtifactType Path = $item.FullName LastWriteTime = $lastWriteTime IsBackup = $isBackup IsDirectory = [bool]$item.PSIsContainer } } } } function Write-AzStackHciStaleArtifactWarning { [CmdletBinding()] param( [Parameter(Mandatory = $true)] [ValidateSet('Connectivity', 'OsConfig', 'VMCheckpointHealth')] [string]$ArtifactType, [Parameter(Mandatory = $false)] [string]$CurrentRunPath ) $cutoff = (Get-Date).AddDays(-$script:DIAG_REPORT_RETENTION_DAYS) $stale = @(Get-AzStackHciOwnedArtifact -ArtifactType $ArtifactType | Where-Object { $_.LastWriteTime -lt $cutoff -and (-not $CurrentRunPath -or -not [string]::Equals($_.Path, $CurrentRunPath, [System.StringComparison]::OrdinalIgnoreCase)) }) if ($stale.Count -gt 0) { Write-Warning ("{0} module-owned {1} artifact(s) are older than {2} days. Review them with Remove-AzStackHciDiagnosticArtifact -ArtifactType {1} -WhatIf." -f $stale.Count, $ArtifactType, $script:DIAG_REPORT_RETENTION_DAYS) } } # SIG # Begin signature block # MIInNwYJKoZIhvcNAQcCoIInKDCCJyQCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC2Rdkptzi8rouj # zch2f4TU7BTO1QUnbOq5d/OYQtn99KCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEICsIi9paBPQ5YhfYkVQ1m2ynJ45l # KYFgpeqUGAyzDjRpMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEAxDz3phKv6lRw48tBK3939wwzxNk7acZhmv7gnSg5jlNbJRMa2MX2sTpkeJaz # gH6ax0IErBvOAmOV+hIqxkYvzSo1Pk8SYfhUhjVdDoJB8tTyNrzltgAzIoIwJOWX # kAkzsmId40O15mAL8XGi5xpqBErIQ2bPtLudzk9Zhrk6Gu8NuYVciSAygAa2x8Tc # S0lRVVEPzj9kWH3BTl5+tN6w09zV0v3LpK9UMptYojRbt3iwshz6UEz9JoWE/G/m # NjBqZqTRCDP+d0FxksSMjgGpUi2p2RHrdUDiL0lLcXJYvGpTo2N76hGGbXOpBs74 # WgtYl+lOUPkVXFYd7TfbxPI9O6GCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wG # CSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG # 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCC6ZRSqaLSrZ+TIjiK4Ntyx0i7nxHXhlO3Wpx435lnecQIGaqqJnQB0GBMy # MDI2MDkyNTE3MTExMC41ODZaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHq # MIIHIDCCBQigAwIBAgITMwAAAiAk4ebgF7m0jgABAAACIDANBgkqhkiG9w0BAQsF # ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTJa # Fw0yNzA1MTcxOTM5NTJaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDRYY7yr7ijW6CR178uKveIMufutWOicxgJwKOce/2GOQce # us6ZWfX14i3jNg3JOP7MGJMkOAucwWBwiA8URp+ZYkGjpVoVkGZsV27WjqLwpf2A # wqBsJ/TzqwE7JFFaxup3Ldxj8GjdJymDFRrdVN/pYHoBFrjD1IkIDu8b1CWn8tgo # miKRSY+STvJq99mVkdphMBIUGOegQny8qRd24VME0xi8Oomks9Zq9EjDeKHGpvAb # XUEQ6m3cROoEPhTE/miweQH9TqJt3IOsqPv3L8urojB747XBC2y0CDIHlKLcLl3Z # G8D7JXKnWTFen3msMPJpcvrQ3zUBVJrH/mI3RxHmCh9ppDP0uG1+PJwk6H/x+sfo # G9hW64xoXkpx6DEfNZNfcXdKbXF28XEXdLNnzo3SLNVymeQJhNqOSKhnU84QnKmr # jEk541JiurlDCkCWO9lUBUMb9x0nyfXUbNRPVLgP+PTMRdXOowJdYCzCQfN2ZqL0 # s4YI28F1Dbn7Bgw2E4P1E9unsvMzJHtzhS2Th3TpCfBbOGalIlF9x/DJZ/ssm/yy # zT9YtIFeqmfNxBPTE3aOuh6HxmTICzfYAATvWNhBbo19QwsjPeA9JvhqTLC2KUNg # rXroGy4eDZo0n7jFYjZkUih1Ty+8E6qEvV2Na6Z5gUyD5a+tHGDmq69CmUiHfwID # AQABo4IBSTCCAUUwHQYDVR0OBBYEFNvInOCIhxGA8mY7l1g07UHvyNgzMB8GA1Ud # IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp # bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI # KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA # MA0GCSqGSIb3DQEBCwUAA4ICAQCtKGBto1BSvm4WFI+J0NSyVhU1LHL7F3fbjZ2d # 7F5Kn/FCTBZXpzrDVl63FLRNcIFpnJy4/nlg43r7T5sJPdo4Ms8ADSHQEJnHSu3x # 9UpjCzREBPi9+nHhvDgRx/1WmBD6gQUZJLOhcN2TxW4KJyhinMtiBFtkNRZ2vmZ1 # MAdNXTm5d0Lwk3wzj+/f7VCCTWCXJSoqNa3VU/6sACHI97Evbnzg8bd3hxrfz6Cc # CVuf77egvRHinthJuwSRePP7aVmcevb1nWUIAICdBebHQOrzNIeWBIQwvcFaS3SF # c+49rqrwQOMFDR4FYBzS7b0QeBVxFuLL2iVu4KAHMNUhLLSD4iKLDFBNTOtTzTlh # GvMgG77A1cjeQrDMHa6oReMDeUDqHUrxv8g7IRdIh+h0gDLkzN0xIuzli0Bv7Jty # bGJbV6JxaDF4CzSCIMRpK59nI6iKo4LgnbQBZJW7+6akYsKG/pXPlfxNv2InpD10 # tSCkCvw9kr6W1+NRN+EuZczRgAwWlcK9XJZ3uu/v/oxHtO7/kmVIs51F9qV6Y2QN # Xd6tU46YPrK98m2QDys+lvLNimK0e1xZ7Z1GawKohKGvlLALWDlZQqgHfJ31CB0L # lIDI7iLyYTpd2iyKjqskbQiyMtICH+RmH/oCg7JOK0ZA3XIMba9aSWgBF3QZ6pG3 # EGeQqjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN # AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw # BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw # MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx # EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT # FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt # U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk # 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c # T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG # UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz # rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2 # LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV # wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd # EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0 # gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph # AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ # YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb # GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ # KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP # EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw # UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr # BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw # DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY # xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp # L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB # BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v # cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B # AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5 # 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD # sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo # 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ # iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK # PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI # LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk # ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9 # af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba # ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/ # OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIIC # NQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0 # b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh # dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG # A1UECxMeblNoaWVsZCBUU1MgRVNOOkYwMDItMDVFMC1EOTQ3MSUwIwYDVQQDExxN # aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQCTGA9v # psJ6glqCLmI0rggGx4YEEqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7mDkHTAiGA8yMDI2MDkyNTEyMTQyMVoY # DzIwMjYwOTI2MTIxNDIxWjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDuYOQdAgEA # MAcCAQACAhnYMAcCAQACAhN0MAoCBQDuYjWdAgEAMDYGCisGAQQBhFkKBAIxKDAm # MAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcN # AQELBQADggEBAMBq0SPU9IdpRoJj+lKtDA6r/R6+8PSOmy/TzTd0AfLP4P/LHRXm # 3Q0TX7v5PsZTpWMbtJzy8z4IkrGhKVW2iu9pNjfoWYwqvlAHxjfKqr2AoSg7+BsJ # YswhAyxCztBrpIx+PwrR+FlyFTnlbL60Xv0h9ijvX65DvsY/gHcxzeBMLv9SemnR # wqFAiHQlUw9/PTtlhAx7/hB0qsIljEeCFu8eIiEFxdL7mmMMDHvg3Ql/4GQz6w8h # ysxrcPTT8c1dw2DViOCEjZDY2uVUvJYKZuGQ4eLCS7dwhmB0sTwwQUdcP9GW/pBz # MhUPvG498+uSnyEvRJ7IIMLBvDErEFHKDOwxggQNMIIECQIBATCBkzB8MQswCQYD # VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe # MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv # ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiAk4ebgF7m0jgABAAACIDANBglg # hkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqG # SIb3DQEJBDEiBCC8zWemtUHslAAnAClheaHYmpN3SMNgb4J0Gt/aSEcsLTCB+gYL # KoZIhvcNAQkQAi8xgeowgecwgeQwgb0EION7vyOlPA1VqlEp0QIVGlNd8S5YWBnK # j97LuTWHSO2vMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC # EzMAAAIgJOHm4Be5tI4AAQAAAiAwIgQgvcLWMmtB6vdVSzdOUW8i3ISfcEVtHQED # ruspfuoG7UkwDQYJKoZIhvcNAQELBQAEggIAwqURa/y5vTJ84aLG4gBh5PHHaWWe # SF/++VV0N+fuIQawsC1ojIP9N87p9GiI4c9USXpjsEWwsm5KkzbMfiUX4ysUXxKV # 1MhC2mTnw48U8ZB4HOifs5uKmtvegmk9KPr3BFeWSLMgKrGOkkBdcDVagFyBUI5B # rDq+U3HvrGyptVvHks+r7XXhRFQHw2WoJmGHy8dhK4vY/1eeAkCM3+lq8PujDUjH # VFzWPDFDlt5z3ztgUVMV25Exs1bFfuG8ifr5labNMSpXnkpZOEQmi5efZfd5kuoD # EVMYsIml+QA7mMz7A8cWCbsFsMgW2KlxDNFvUlI6Zp48sVl3fgYXvkR0FLjY1px3 # dpXlV7ONQo3oF3hufqCXL1U7nyC3fT9/pjdEVh3I0bORTdmK+6wSi+b7PZQ0Y/7c # C15IryzOJOFA4CV+jI32SdxHvsM68Qc71kcdcM+KhC/E4I16PBk7a1gMPOmzwAJC # yv/T9/Q9UCsWOjbhfINyczFbbOuLfhj+NEAG9Fll/Ey0aVcKAUIOiEPHhZng5k5G # eN7amPV1OFmePhVSEMMl6KYdMJAtlfEpEAGrJ/CEVDSsNOFfzgtTQzTAx38sTYsD # /Xzj525qR/fAmEP4wHTmASyPJAI/0o1hlDryIGQRyqBUm0T6raZ011ARxhA8h7mG # 97bpwukiq+3OSn4= # SIG # End signature block |