20250121-deadline-sched-features

ChangeLog.md

@@ -2,6 +2,37 @@
 
 <br>
 
+# wolfSentry Release 1.6.3 (January 22, 2025)
+
+Release 1.6.3 of the wolfSentry embedded firewall/IDPS has enhancements,
+additions, and improvements including:
+
+## New Features
+
+Implemented default policy in decisions on lock failures, to better support hard deadline use cases.  The lwIP integrated firewall has been updated to leverage this change.  Client code calling the dispatch interfaces directly can now check `action_results` for disposition even on error returns.
+
+## Noteworthy Changes and Additions
+
+Add `wolfsentry_set_deadline_rel()`, `wolfsentry_get_deadline_rel()`, and `wolfsentry_get_deadline_rel_usecs()`, to facilitate deployment to deadline-scheduled runtimes.  `wolfsentry_get_deadline_rel*()` can be used within implementations of computationally expensive plugins to prevent overrun or limit it to an application-defined tolerance.
+
+Added `WOLFSENTRY_SUCCESS_ID_NO_DEADLINE`, `WOLFSENTRY_SUCCESS_ID_EXPIRED`, and `WOLFSENTRY_SUCCESS_ID_NO_WAITING`, returned by `wolfsentry_get_deadline_rel*()`.
+
+Added `wolfsentry_lock_shared2mutex_is_reserved()`.
+
+## Bug Fixes, Cleanups, and Debugging Aids
+
+Added `WOLFSENTRY_STACKBUF()` to refactor on-stack flexible-element struct instances for additional portability, clarity, and efficiency.
+
+Numerous minor fixes for analyzer hygiene on LLVM 19 and 20, gcc-15, and cppcheck 2.16.
+
+## Self-Test Enhancements
+
+Fixes for several leaks and missing error handling in unit tests.
+
+Added new C23 and `-D_FORTIFY_SOURCE=3` tests.
+
+<br>
+
 # wolfSentry Release 1.6.2 (January 2, 2024)
 
 Release 1.6.2 of the wolfSentry embedded firewall/IDPS has enhancements,

Makefile

@@ -1,6 +1,6 @@
 # Makefile
 #
-# Copyright (C) 2021-2023 wolfSSL Inc.
+# Copyright (C) 2021-2025 wolfSSL Inc.
 #
 # This file is part of wolfSentry.
 #

Makefile.analyzers

@@ -1,6 +1,6 @@
 # Makefile.analyzers
 #
-# Copyright (C) 2021-2023 wolfSSL Inc.
+# Copyright (C) 2021-2025 wolfSSL Inc.
 #
 # This file is part of wolfSentry.
 #
@@ -779,7 +779,7 @@ notification-demo-build-test:
 	{ ./log_server > '$(BUILD_PARENT)/wolfsentry-notification-demo-build/log_server.out' 2>&1 & } && \
 	LOG_SERVER_PID=$$! && \
 	sleep 1 && \
-	kill -0 $$LOG_SERVER_PID && \
+	kill -0 $$LOG_SERVER_PID || { cat '$(BUILD_PARENT)/wolfsentry-notification-demo-build/log_server.out' && false; } && \
 	cd '$(BUILD_PARENT)/wolfssl-notification-demo-build' && \
 	curl --max-time 2 --no-progress-meter --cert ./certs/client-ecc384-cert.pem --key ./certs/client-ecc384-key.pem --cacert ./certs/ca-ecc-cert.pem --resolve 'www.wolfssl.com:10443:127.0.0.1' 'https://www.wolfssl.com:10443/show-log' > '$(BUILD_PARENT)/wolfsentry-notification-demo-build/curl.out' && \
 	kill $$UDP_TO_DBUS_PID $$LOG_SERVER_PID && \

Makefile.maintenance

@@ -1,6 +1,6 @@
 # Makefile.maintenance
 #
-# Copyright (C) 2021-2023 wolfSSL Inc.
+# Copyright (C) 2021-2025 wolfSSL Inc.
 #
 # This file is part of wolfSentry.
 #

examples/notification-demo/json_to_c.sh

@@ -2,7 +2,7 @@
 
 # json_to_c.sh
 #
-# Copyright (C) 2022-2023 wolfSSL Inc.
+# Copyright (C) 2022-2025 wolfSSL Inc.
 #
 # This file is part of wolfSentry.
 #

examples/notification-demo/log_server/Makefile

@@ -1,6 +1,6 @@
 # examples/notification-demo/udp_to_dbus/Makefile
 #
-# Copyright (C) 2021-2023 wolfSSL Inc.
+# Copyright (C) 2021-2025 wolfSSL Inc.
 #
 # This file is part of wolfSentry.
 #

examples/notification-demo/log_server/certs/ca-cert.pem

@@ -2,16 +2,16 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            26:8c:93:f9:f9:f4:1e:b3:01:72:94:55:67:6d:e2:f8:3d:da:e9:f4
+            6b:9b:70:c6:f1:a3:94:65:19:a1:08:58:ef:a7:8d:2b:7a:83:c1:da
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = [email protected]
         Validity
-            Not Before: Feb 15 12:50:24 2022 GMT
-            Not After : Nov 11 12:50:24 2024 GMT
+            Not Before: Dec 18 21:25:29 2024 GMT
+            Not After : Sep 14 21:25:29 2027 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = [email protected]
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
                     00:bf:0c:ca:2d:14:b2:1e:84:42:5b:cd:38:1f:4a:
                     f2:4d:75:10:f1:b6:35:9f:df:ca:7d:03:98:d3:ac:
@@ -38,36 +38,36 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/[email protected]
-                serial:26:8C:93:F9:F9:F4:1E:B3:01:72:94:55:67:6D:E2:F8:3D:DA:E9:F4
-
+                serial:6B:9B:70:C6:F1:A3:94:65:19:A1:08:58:EF:A7:8D:2B:7A:83:C1:DA
             X509v3 Basic Constraints: 
                 CA:TRUE
             X509v3 Subject Alternative Name: 
                 DNS:example.com, IP Address:127.0.0.1
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         62:e4:1b:28:3c:9d:d2:60:a9:55:be:6a:f6:20:f2:da:e8:a1:
-         1a:97:b1:90:77:82:ed:c7:77:29:53:33:18:10:62:e0:bd:93:
-         1b:d2:d6:a1:80:43:1d:64:f1:42:92:ec:b7:b8:f0:6b:da:59:
-         83:f4:b8:87:e6:fc:70:21:ea:62:32:70:68:14:0e:dc:b4:f1:
-         66:e2:6e:ab:d2:72:6f:da:df:71:f6:3d:27:97:7d:be:e1:d1:
-         ac:16:ad:d7:4f:aa:9d:0c:1e:6e:a9:5e:7d:57:5b:3c:c7:6d:
-         d2:f2:5c:c3:dc:3d:36:99:8e:ab:c0:7f:13:a5:f4:67:8b:e2:
-         a6:51:31:f1:03:91:00:a8:c4:c5:1d:7f:35:62:b8:1d:a0:a5:
-         ab:ec:32:68:ee:f3:ca:48:16:9f:f4:1e:7e:ea:fa:b0:86:15:
-         52:36:6c:4b:58:44:a7:eb:20:78:6e:7e:e8:00:40:ac:98:d8:
-         53:f3:13:4b:b8:98:66:50:63:ed:af:e5:a4:f6:c9:90:1c:84:
-         0a:09:45:2f:a1:e1:37:63:b5:43:8c:a0:2e:7f:c4:d4:e1:ae:
-         b7:b9:45:13:f8:70:d5:79:06:4f:82:83:4b:98:d7:56:47:64:
-         9a:6a:6d:8e:7a:9d:ef:83:0f:6b:75:0e:47:22:92:f3:b4:b2:
-         84:61:1f:1c
+    Signature Value:
+        77:3b:3d:66:74:bc:97:fe:40:16:e6:ba:a5:d5:d1:84:08:89:
+        69:4f:88:0d:57:a9:ef:8c:c3:97:52:c8:bd:8b:a2:49:3b:b7:
+        f7:5d:1e:d6:14:7f:b2:80:33:da:a0:8a:d3:e1:2f:d5:bc:33:
+        9f:ea:5a:72:24:e5:f8:b8:4b:b3:df:62:90:3b:a8:21:ef:27:
+        42:75:bc:60:02:8e:37:35:99:eb:a3:28:f2:65:4c:ff:7a:f8:
+        8e:cc:23:6d:e5:6a:fe:22:5a:d9:b2:4f:47:c7:e0:ae:98:ef:
+        94:ac:b6:4f:61:81:29:8e:e1:79:2c:46:fc:e9:1a:c3:96:1f:
+        19:93:64:2e:9f:37:72:c5:e4:93:4e:61:5f:38:8e:ae:e8:39:
+        19:e6:97:a8:91:d4:23:7e:1e:d2:d0:53:ec:cc:ac:a0:1d:d0:
+        b7:dd:b1:b7:01:2e:96:cd:85:27:e0:e7:47:e2:c1:c1:00:f6:
+        94:df:77:e7:fa:c6:ef:8a:c0:7c:67:bc:ff:a0:7c:94:3b:7d:
+        86:42:af:3d:83:31:ee:2a:3b:7b:f0:2c:9e:6f:e9:c4:07:81:
+        24:da:05:70:4d:dd:09:ae:9e:72:b8:21:0e:8c:b2:ab:aa:4c:
+        49:10:f7:76:f9:b5:0d:6c:20:d3:df:7a:06:32:8d:29:1f:28:
+        1d:8d:26:33
 -----BEGIN CERTIFICATE-----
-MIIE/zCCA+egAwIBAgIUJoyT+fn0HrMBcpRVZ23i+D3a6fQwDQYJKoZIhvcNAQEL
+MIIE/zCCA+egAwIBAgIUa5twxvGjlGUZoQhY76eNK3qDwdowDQYJKoZIhvcNAQEL
 BQAwgZQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdC
 b3plbWFuMREwDwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIyMDIxNTEyNTAyNFoXDTI0MTExMTEyNTAyNFowgZQxCzAJ
+bGZzc2wuY29tMB4XDTI0MTIxODIxMjUyOVoXDTI3MDkxNDIxMjUyOVowgZQxCzAJ
 BgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMREw
 DwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEYMBYGA1UEAwwP
 d3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29t
@@ -82,12 +82,12 @@ BgNVHSMEgcwwgcmAFCeOZxF0wyYdP+0zY7Ok2B0w5ejVoYGapIGXMIGUMQswCQYD
 VQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjERMA8G
 A1UECgwIU2F3dG9vdGgxEzARBgNVBAsMCkNvbnN1bHRpbmcxGDAWBgNVBAMMD3d3
 dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbYIU
-JoyT+fn0HrMBcpRVZ23i+D3a6fQwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
+a5twxvGjlGUZoQhY76eNK3qDwdowDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
 eGFtcGxlLmNvbYcEfwAAATAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
-DQYJKoZIhvcNAQELBQADggEBAGLkGyg8ndJgqVW+avYg8trooRqXsZB3gu3HdylT
-MxgQYuC9kxvS1qGAQx1k8UKS7Le48GvaWYP0uIfm/HAh6mIycGgUDty08WbibqvS
-cm/a33H2PSeXfb7h0awWrddPqp0MHm6pXn1XWzzHbdLyXMPcPTaZjqvAfxOl9GeL
-4qZRMfEDkQCoxMUdfzViuB2gpavsMmju88pIFp/0Hn7q+rCGFVI2bEtYRKfrIHhu
-fugAQKyY2FPzE0u4mGZQY+2v5aT2yZAchAoJRS+h4TdjtUOMoC5/xNThrre5RRP4
-cNV5Bk+Cg0uY11ZHZJpqbY56ne+DD2t1DkcikvO0soRhHxw=
+DQYJKoZIhvcNAQELBQADggEBAHc7PWZ0vJf+QBbmuqXV0YQIiWlPiA1Xqe+Mw5dS
+yL2Lokk7t/ddHtYUf7KAM9qgitPhL9W8M5/qWnIk5fi4S7PfYpA7qCHvJ0J1vGAC
+jjc1meujKPJlTP96+I7MI23lav4iWtmyT0fH4K6Y75Sstk9hgSmO4XksRvzpGsOW
+HxmTZC6fN3LF5JNOYV84jq7oORnml6iR1CN+HtLQU+zMrKAd0LfdsbcBLpbNhSfg
+50fiwcEA9pTfd+f6xu+KwHxnvP+gfJQ7fYZCrz2DMe4qO3vwLJ5v6cQHgSTaBXBN
+3QmunnK4IQ6MsquqTEkQ93b5tQ1sINPfegYyjSkfKB2NJjM=
 -----END CERTIFICATE-----

examples/notification-demo/log_server/certs/ca-ecc-cert.pem

@@ -2,12 +2,12 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            29:bf:2b:cd:bf:55:54:49:85:b3:69:4e:e1:85:37:79:1e:81:f9:c2
+            30:b9:30:50:f8:1a:0d:ff:ad:68:d1:6d:e8:a3:6b:58:23:33:7a:84
         Signature Algorithm: ecdsa-with-SHA256
         Issuer: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = [email protected]
         Validity
-            Not Before: Feb 15 12:50:24 2022 GMT
-            Not After : Nov 11 12:50:24 2024 GMT
+            Not Before: Dec 18 21:25:29 2024 GMT
+            Not After : Sep 14 21:25:29 2027 GMT
         Subject: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = [email protected]
         Subject Public Key Info:
             Public Key Algorithm: id-ecPublicKey
@@ -24,30 +24,30 @@ Certificate:
             X509v3 Subject Key Identifier: 
                 56:8E:9A:C3:F0:42:DE:18:B9:45:55:6E:F9:93:CF:EA:C3:F3:A5:21
             X509v3 Authority Key Identifier: 
-                keyid:56:8E:9A:C3:F0:42:DE:18:B9:45:55:6E:F9:93:CF:EA:C3:F3:A5:21
-
+                56:8E:9A:C3:F0:42:DE:18:B9:45:55:6E:F9:93:CF:EA:C3:F3:A5:21
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
     Signature Algorithm: ecdsa-with-SHA256
-         30:44:02:20:78:ed:4c:1c:a7:2d:b3:35:0b:1d:46:a3:37:31:
-         0b:8a:05:39:c8:28:31:58:35:f1:98:f7:4b:72:c0:4f:e6:7f:
-         02:20:02:f2:09:2b:3a:e1:36:92:bf:58:6a:03:12:2d:79:e6:
-         bd:06:45:61:b9:0e:39:e1:9c:f0:a8:2e:0b:1e:8c:b2
+    Signature Value:
+        30:45:02:21:00:88:cc:7f:00:f5:a9:4e:c0:69:6e:36:39:24:
+        8f:83:45:4d:fa:d0:39:14:b8:c8:7f:95:51:f2:c5:98:c0:b7:
+        e2:02:20:2a:93:61:b0:06:de:eb:da:fd:af:6b:39:bf:88:17:
+        f1:ba:2a:7d:59:a8:de:e7:0a:11:83:4f:92:77:8d:92:3b
 -----BEGIN CERTIFICATE-----
-MIIClDCCAjugAwIBAgIUKb8rzb9VVEmFs2lO4YU3eR6B+cIwCgYIKoZIzj0EAwIw
+MIIClTCCAjugAwIBAgIUMLkwUPgaDf+taNFt6KNrWCMzeoQwCgYIKoZIzj0EAwIw
 gZcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdT
 ZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIyMDIxNTEyNTAyNFoXDTI0MTExMTEyNTAyNFowgZcxCzAJ
+bGZzc2wuY29tMB4XDTI0MTIxODIxMjUyOVoXDTI3MDkxNDIxMjUyOVowgZcxCzAJ
 BgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxl
 MRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEYMBYGA1UE
 AwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wu
 Y29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEAtPZbtYBjkXIuZAx5cBM456t
 KTiYuhDW6QkqgKkuFyq5ir8zg0bjlQvkd0C1O0NFMw9hU3w3RMHL/IDK6EPqp6Nj
 MGEwHQYDVR0OBBYEFFaOmsPwQt4YuUVVbvmTz+rD86UhMB8GA1UdIwQYMBaAFFaO
 msPwQt4YuUVVbvmTz+rD86UhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
-AgGGMAoGCCqGSM49BAMCA0cAMEQCIHjtTBynLbM1Cx1GozcxC4oFOcgoMVg18Zj3
-S3LAT+Z/AiAC8gkrOuE2kr9YagMSLXnmvQZFYbkOOeGc8KguCx6Msg==
+AgGGMAoGCCqGSM49BAMCA0gAMEUCIQCIzH8A9alOwGluNjkkj4NFTfrQORS4yH+V
+UfLFmMC34gIgKpNhsAbe69r9r2s5v4gX8boqfVmo3ucKEYNPkneNkjs=
 -----END CERTIFICATE-----

examples/notification-demo/log_server/certs/ca-ecc384-cert.pem

@@ -2,12 +2,12 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            67:a7:7b:83:4d:94:c2:18:53:0e:0c:98:82:c2:a2:5d:9e:3d:cd:b6
+            4e:08:67:9d:29:61:47:3e:2a:23:82:cd:cf:cb:53:2a:b8:02:22:57
         Signature Algorithm: ecdsa-with-SHA384
         Issuer: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = [email protected]
         Validity
-            Not Before: Feb 15 12:50:24 2022 GMT
-            Not After : Nov 11 12:50:24 2024 GMT
+            Not Before: Dec 18 21:25:29 2024 GMT
+            Not After : Sep 14 21:25:29 2027 GMT
         Subject: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = [email protected]
         Subject Public Key Info:
             Public Key Algorithm: id-ecPublicKey
@@ -26,34 +26,34 @@ Certificate:
             X509v3 Subject Key Identifier: 
                 AB:E0:C3:26:4C:18:D4:72:BB:D2:84:8C:9C:0A:05:92:80:12:53:52
             X509v3 Authority Key Identifier: 
-                keyid:AB:E0:C3:26:4C:18:D4:72:BB:D2:84:8C:9C:0A:05:92:80:12:53:52
-
+                AB:E0:C3:26:4C:18:D4:72:BB:D2:84:8C:9C:0A:05:92:80:12:53:52
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
     Signature Algorithm: ecdsa-with-SHA384
-         30:66:02:31:00:da:8a:d6:c6:2f:16:82:4b:0b:e1:16:58:2a:
-         c3:f2:6a:c7:4a:68:8f:f8:cd:d9:90:95:6d:0e:c7:e1:41:2b:
-         a1:c1:79:26:f7:bb:ca:40:c3:73:d7:96:9f:e4:02:31:33:02:
-         31:00:b1:d0:27:de:94:6b:22:f2:d8:2c:14:a7:95:57:9c:a4:
-         08:be:33:46:08:29:d3:a9:9a:48:3e:3b:c5:6f:3c:18:d5:61:
-         43:03:fc:dc:b5:ca:01:c3:48:87:e8:96:1f:98
+    Signature Value:
+        30:65:02:30:1d:3f:92:02:b2:46:54:ee:9e:0d:90:03:73:6a:
+        ab:04:5a:41:fe:f4:1b:fd:d6:99:cc:7a:6c:fd:52:da:2e:4e:
+        78:fe:ef:79:74:12:5e:04:9d:2c:e4:e7:1a:4d:d3:1e:02:31:
+        00:b7:34:e8:4c:69:70:db:fd:1a:48:c5:dc:8e:ef:15:ca:13:
+        ee:f8:4f:27:5f:d2:3a:6a:06:7d:f3:32:a7:75:97:27:6d:60:
+        ed:a2:9f:9f:7e:66:43:f9:15:1d:65:5d:49
 -----BEGIN CERTIFICATE-----
-MIIC0zCCAligAwIBAgIUZ6d7g02UwhhTDgyYgsKiXZ49zbYwCgYIKoZIzj0EAwMw
+MIIC0jCCAligAwIBAgIUTghnnSlhRz4qI4LNz8tTKrgCIlcwCgYIKoZIzj0EAwMw
 gZcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdT
 ZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIyMDIxNTEyNTAyNFoXDTI0MTExMTEyNTAyNFowgZcxCzAJ
+bGZzc2wuY29tMB4XDTI0MTIxODIxMjUyOVoXDTI3MDkxNDIxMjUyOVowgZcxCzAJ
 BgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxl
 MRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEYMBYGA1UE
 AwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wu
 Y29tMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE7oLUOZqxJ4L01+rGvAMdTYNh9AOu
 fr3YWqW58I6ipdrOhztaq0QWnPWfYt32IM2cdjxAsT+XF99Z9s3ezUY1wO1eLki2
 ZpFxdLcMP7mat4O9kz9fUC1wP941JeGQO4bgo2MwYTAdBgNVHQ4EFgQUq+DDJkwY
 1HK70oSMnAoFkoASU1IwHwYDVR0jBBgwFoAUq+DDJkwY1HK70oSMnAoFkoASU1Iw
-DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwMDaQAw
-ZgIxANqK1sYvFoJLC+EWWCrD8mrHSmiP+M3ZkJVtDsfhQSuhwXkm97vKQMNz15af
-5AIxMwIxALHQJ96UayLy2CwUp5VXnKQIvjNGCCnTqZpIPjvFbzwY1WFDA/zctcoB
-w0iH6JYfmA==
+DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwMDaAAw
+ZQIwHT+SArJGVO6eDZADc2qrBFpB/vQb/daZzHps/VLaLk54/u95dBJeBJ0s5Oca
+TdMeAjEAtzToTGlw2/0aSMXcju8VyhPu+E8nX9I6agZ98zKndZcnbWDtop+ffmZD
++RUdZV1J
 -----END CERTIFICATE-----