Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCRRP-0002YG-3X for pgsql-docs@arkaria.postgresql.org; Fri, 05 Apr 2019 16:11:43 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1hCRRN-0007OX-Gd for pgsql-docs@arkaria.postgresql.org; Fri, 05 Apr 2019 16:11:41 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCRRM-0007OQ-Vo for pgsql-docs@lists.postgresql.org; Fri, 05 Apr 2019 16:11:41 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCRRJ-0007rA-LE for pgsql-docs@lists.postgresql.org; Fri, 05 Apr 2019 16:11:40 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:MIME-Version:Date:Message-ID: Subject:From:To:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:In-Reply-To:References; bh=6P0pS28UqHK8iJFB157cWsNfrH+ognji3yE10Q0BM/4=; b=IPVI20+GlnT5Ukt89pX6TA93Vu LpNzlolS3UN1ytBhi7lBOhl4/Nr0inDX5Zqr57ZqXOoOKuhlkXplXescL/0gJuKzpYnymI0kB44+r dQ4aW5A8TaGb5/0v4DBGGe6kNVxuYdyHFdY3/ZfciWb55KmRevqutQvmwUiU5ZPd732cOMtbdDfgf T9X4SfkUlAJwVSSEhMzFieV6EYfJg07mao0xZABzPYcswvCQ5YSz5KDYfUA/hnOaoCLHKJABtEaRe V3TYYO3yixUIL3bbuBhmKOoH5zadbkTiw/tM5kt2EJNqkX1DRdQY/tlD/yW5fh8Kb8JmD0NborPfg Ge1RnzAw==; Received: from [63.118.15.50] (helo=Ph33r-Retina.local) by meldrar.postgresql.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCRRG-00049q-AR for pgsql-docs@lists.postgresql.org; Fri, 05 Apr 2019 16:11:37 +0000 To: Pg Docs From: "Jonathan S. Katz" Subject: initdb recommendations Openpgp: preference=signencrypt Autocrypt: addr=jkatz@postgresql.org; keydata= mQINBFtShwABEAC7PNHDUOTYuifpUCk23KqfxdQQkn4nkoxOXRK0+rAj36FiwqGB4TJFuOVZ sDFAEiSlC8Jt4y5Cs7B5tetT8JNd2cs6zp/udMJJDz9d65O9PDpdlMgAmIiTzpLlSdx8FG56 DTksaDv1d8j3cTJPSE4/fWSxqzA7o3Y9UuL7atZPrzfImgpRKs0of7elIHwOa8GucjyhYqcR h60wFBJc2KXqQdDYRTZy43DSnY/0VNc0omiH355fustvpm+m5HjD3w7qZyfN3fpKJpnX1LCF f3MnPHaDGITIYGRCBXvf0UqUtD6OEVWPv2C2gyqWMIpWmZTOgDufltKyIByKBoS9x0PlFkij 04X3KODCngt+N8Ssc9OICc6QSxhjoP48PYPdmiTmkrGuf0LX084wj1xeo1NX7XxZK39F6dTJ DhsIiW0sNS0xMxQHLHG9VLbPjx3SANQBh6BuryPz5ZupW9/TIDmkvprtU/oXfKgtfYm3fxmk EctxbWrEPsFTFPyuMqQu6l+xyQv0s1VLZfjNWaua6H1/gGoIt6kRnn5qMXDVVpijuWkHbv7G ngaQMd258UrrOEHnnjzhQ7jxMWV9D+emxbAtlIxnYvCWlV4IwAQhEHfvudqYaIY3hNWrvQ6H GB2KXoTZYN9g5djm14/5nj1IU5zOcovkjJnKhoo9iStnpFF2cwARAQABtCdKb25hdGhhbiBT LiBLYXR6IDxqa2F0ekBwb3N0Z3Jlc3FsLm9yZz6JAlQEEwEIAD4CGwMFCQeGH4AFCwkIBwIG FQoJCAsCBBYCAwECHgECF4AWIQT6hLaVryv3miBkP/HxBJxynxxlJwUCW1KJJQAKCRDxBJxy nxxlJwjrD/kBgqsW4QpNpTFw7ifRokZV08CCX4huPBJQ91rrv+UEWlEcotFBHVkYyHnpzARl tcZxhJ9CbFxjniH9cOTty5T/O1yolbOHtZSW8Z8aWV6BVEbjMb+BFxSSLm7RnvJdzQbGCZq2 ZZvfVpB6z3EHYph4KDdVKvMFjoLskxmdS1DE0tE3zTxvoQsi24Q+HOS07kUjs6fsu/WICMfz mgO++AWG9Y0CvN0mm4TkujESzyKM9E5irD+leEMIcddl51Aa2c/VMfBXQbRmpHIgUFTmuHQD CnQih+9i3OJAksDg66SP8a7yiXv5mwvyDi1EfTGVKYR2j+pwyjwnC3oIbvDMmB3uTn2JIjnT iZKPVtAcAylXjubFltihQgNyuShdP4W+kBwZizhUFqUVL8Anx+KoytYmJPfMRFLGuK4obXKq a2ZS3k9KB+H+isOx2nFJOsc7V360Zp1DVaNmuiK10TT6QndShSPaqkJqFtCb6r92rZ9sZM/L 3vtCI4Rrl3Pt1MgtENXupS8gZpJnAYS0j5A1PAZ09r6ANoaeMHspF+5J5fOHeEvqphXr36mm a83Vl1t4orPb0+QmmijmlpseDU63M88Aw5p3c4qj7t8Qr2EZ5zrn7/sFn5wOfbs8Nymxafif QCnlV2vg9p0m7vSk/yLJ4PFZvs52FgqAGRCdRn0s2EC99bkCDQRbUocAARAAv8ho/toQ9DG3 j4f9h9n1aRHr2FlviN2Utpy6L8+dfDggO0geilmkGQOolZ2E60gGfye/kUtF9W3NByO4hxDR 9u6qbOXcdqnuA+cc68EfqlWFJrVtYFxt0h4ElWYOYnIezKthriWch/FY70FGrxs3z8UHOHq5 0wBW433eTvZm90WixBiXEt2v1DgW4Vr3ymfO7Aap/IYyPuE4JzgudAuAl0HKPyNEHWHG1dAb jX1RiCw9gknIDWQOF0B4UAaJctWGVcnZ3A2ULwNGMa1P9ZJlBWf1vcj01aiHMU0yQ7JjJiSp vfm9eM0uSLwRdDrJjyl5ZZqVumjdv2SMNQ8GvYRbEMys3GGDSt9zXgfCSUnPnJfYxjzBHRI6 x44Wfsx8S6hWxepOogCJJ/g67Bk9mY8YV4klWIXDJVOL5jnBC09DbsZG81JaE2QxB8Y7W36Z Mroi9XMxg3s805hQAQUvdG/poU8hN8BWdrnTm/+4eQQp7gDY1ePDmGM6bJC+OHOSnFtR/f+7 0zpKJ10cc7cBygGnl1yR3KjhFyAWUFvP4ZGziKCcpMwXZfe9PGuyA/YOubMphxIn3YsK2wrd faKZYX2GMZCZhMMcvx9IpQrxIJgU+VlwXu/O+Lk10VIPcxPJJwmpdI6HzcS8ZgG6IMcC444X XTuLaP8j2mgcMvYak3ScCykAEQEAAYkCPAQYAQgAJhYhBPqEtpWvK/eaIGQ/8fEEnHKfHGUn BQJbUocAAhsMBQkHhh+AAAoJEPEEnHKfHGUnReMP/RA2UhGQj+G4uBshkRLjpRysabdPqgQB dEBk6wYbio88Wg/2/hgY7UzmDDEwX3sZfQDcrI6+vIobI8uqstZID+WgAAa1JLfChMyVQnSy 0zfWMOABXscc5tGuvFRZvJklTissMFjXUwaREEKp4ZikTvJ/62MCjSdtrUhnPLvoTsHTKRKD ichE+b5A54alwsubTijw12O6N22r5IjZiiSZV0u7dsShyKw+7wCSax9fuBoE43NMYf+dnjMK nerAQYUcZWYMnk+EC8RaqYAxv6XZ2tKx1AkGGktwkQIBwrz9IlDSvJ3LWJ2UIIuLRTdngNgg GIL4zzuUa2F56FqskQIuYMaNETk6LYfalBDQ6TVLAcgCPQxp4k4i/PRsZ3lZ2ZhRHRYciOvm kp+I6EfHwllQpYrWs1thluBGqlJSVJgKl0IOFvKLsQ6KKfqzAwh6FxrO5qajp4viNIgtWoFw O5Bp0jgFTbH2OrMWIRfUdUCH1Djbuo65svhNj7FNsQVYzHDI+Nd1I/LOBoPc3UorRMF2M4JV kUR7skOHWUbPTSNUr7qc14NSMY3PKjGeVGAsBVHBPvmRx/Ss2tW/TpJWpxg4pmquFQSXuaYh Yf4FN8Sxy320pcr+FqN8AhZkYJcNY82OTtR5VEKRC/mYcyq61qXIKqngydn79bJjGxHipxyF FmEC Message-ID: Date: Fri, 5 Apr 2019 12:11:31 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="j03XktbsR0uQt767HBEtcVSAEKGIbHZw6" X-Host-Lookup-Failed: Reverse DNS lookup failed for 63.118.15.50 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --j03XktbsR0uQt767HBEtcVSAEKGIbHZw6 Content-Type: multipart/mixed; boundary="cblRLIxF9azXz3V1UDsqC1Q0fAPet1uDx"; protected-headers="v1" From: "Jonathan S. Katz" To: Pg Docs Message-ID: Subject: initdb recommendations --cblRLIxF9azXz3V1UDsqC1Q0fAPet1uDx Content-Type: multipart/mixed; boundary="------------8999A27E02E52FDDEF7C4498" Content-Language: en-US This is a multi-part message in MIME format. --------------8999A27E02E52FDDEF7C4498 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Given some of the recent hubbub and analysis of CVE entries, one part of the documentation[1] that could be further clarified is what initdb does by default, i.e. creates a cluster where users can connect with trust authentication. While this may be great for people who are hacking or running PostgreSQL in a trusted local environment, this may not make sense for many (most?) other systems. The attached patch clarifies this fact and adds a "warning" box just below the initdb examples that provides recommendations to create a more secure environment. It also removes the section that discusses this below the part that discusses securing the directory, as really this explanation should go right after the "initdb" call. (There could be an additional discussion about whether or not we want to change the default behavior for initdb, but I would suggest that a safe starting point would be to ensure we call this out) Credits to Magnus for pointing this out, and Tom + Andrew D. for review before posting to list. Jonathan [1] https://www.postgresql.org/docs/current/creating-cluster.html --------------8999A27E02E52FDDEF7C4498 Content-Type: text/plain; charset=UTF-8; x-mac-type="0"; x-mac-creator="0"; name="0001-Add-a-warning-about-the-client-authentication-defaul.patch" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename*0="0001-Add-a-warning-about-the-client-authentication-defaul.pa"; filename*1="tch" RnJvbSAxOTQxZDhlNWMyNGYzODc5OGVkZDZhNjNiNjhhOTY4NzUxMWYzNDljIE1vbiBTZXAg MTcgMDA6MDA6MDAgMjAwMQpGcm9tOiAiSm9uYXRoYW4gUy4gS2F0eiIgPGpvbmF0aGFuLmth dHpAZXhjb3ZlbnR1cmVzLmNvbT4KRGF0ZTogRnJpLCA1IEFwciAyMDE5IDEyOjAyOjQwIC0w NDAwClN1YmplY3Q6IFtQQVRDSF0gQWRkIGEgd2FybmluZyBhYm91dCB0aGUgY2xpZW50IGF1 dGhlbnRpY2F0aW9uIGRlZmF1bHRzIHRoYXQKIGluaXRkYiBwcm92aWRlcy4KClRoaXMgYWxz byBwcm92aWRlcyBhZHZpY2Ugb24gaG93IHRvIHNlY3VyZWx5IHNldCB1cCBpbml0aWFsIGNs aWVudCBjb25uZWN0aW9uCmNvbmZpZ3VyYXRpb25zLCBhbmQgcmVtb3ZlcyB0aGUgc2VjdGlv biB0aGF0IGV4cGxhaW5zIHNpbWlsYXIgc3RlcHMgdGhhdCBpcwpiZWxvdyB0aGUgZGlyZWN0 b3J5IHNldHVwLiBUaGlzIGluZm9ybWF0aW9uIHNob3VsZCBiZSBhcm91bmQgd2hlcmUgaXRz IGV4cGxhaW5lZApob3cgaW5pdGRiIGlzIGZpcnN0IGNhbGxlZCwgYW55d2F5LgotLS0KIGRv Yy9zcmMvc2dtbC9ydW50aW1lLnNnbWwgfCA0NiArKysrKysrKysrKysrKysrKysrKysrKyst LS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZpbGUgY2hhbmdlZCwgMjQgaW5zZXJ0aW9ucygr KSwgMjIgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvZG9jL3NyYy9zZ21sL3J1bnRpbWUu c2dtbCBiL2RvYy9zcmMvc2dtbC9ydW50aW1lLnNnbWwKaW5kZXggZmRlOWRiYzEzNC4uZGQx YThiYzkwZiAxMDA2NDQKLS0tIGEvZG9jL3NyYy9zZ21sL3J1bnRpbWUuc2dtbAorKysgYi9k b2Mvc3JjL3NnbWwvcnVudGltZS5zZ21sCkBAIC04NSw2ICs4NSwyOSBAQAogICAgZGVzY3Jp YmVkIGluIHRoZSBwcmV2aW91cyBzZWN0aW9uLgogICA8L3BhcmE+CiAKKyAgPHdhcm5pbmc+ CisgICAgPHBhcmE+CisgICAgICBCeSBkZWZhdWx0IDxjb21tYW5kPmluaXRkYjwvY29tbWFu ZD4gc2V0cyB1cCA8bGl0ZXJhbD50cnVzdDwvbGl0ZXJhbD4KKyAgICAgIGNsaWVudCBhdXRo ZW50aWNhdGlvbiBmb3IgY29ubmVjdGluZyB0byB0aGUgZGF0YWJhc2UuIFRoaXMgaXMgbm90 CisgICAgICByZWNvbW1lbmRlZCBvbiBtdWx0aS11c2VyIHN5c3RlbXMgd2hlcmUgeW91IGRv IG5vdCB0cnVzdCBhbGwgdXNlcnMsIG5vciBpZgorICAgICAgdGhlIGRhdGFiYXNlIHNlcnZl ciB3aWxsIGJlIG1hZGUgYWNjZXNzaWJsZSB0byByZW1vdGUgc3lzdGVtcy4KKyAgICA8L3Bh cmE+CisgICAgPHBhcmE+CisgICAgICBXZSByZWNvbW1lbmQgdXNpbmcgdGhlIDxvcHRpb24+ LVc8L29wdGlvbj4sIDxvcHRpb24+LS1wd3Byb21wdDwvb3B0aW9uPiwKKyAgICAgIG9yIDxv cHRpb24+LS1wd2ZpbGU8L29wdGlvbj4gZmxhZ3MgdG8gYXNzaWduIGEgcGFzc3dvcmQgdG8g dGhlIGRhdGFiYXNlCisgICAgICBzdXBlcnVzZXIsIGFuZCB0byBvdmVycmlkZSB0aGUgPGZp bGVuYW1lPnBnX2hiYS5jb25mPC9maWxlbmFtZT4gZGVmYXVsdAorICAgICAgZ2VuZXJhdGlv biB1c2luZyA8b3B0aW9uPi1hdXRoLWxvY2FsIHBlZXI8L29wdGlvbj4gZm9yIGxvY2FsIGNv bm5lY3Rpb25zLAorICAgICAgYW5kIDxvcHRpb24+LWF1dGgtaG9zdCBzY3JhbS1zaGEtMjU2 PC9vcHRpb24+IGZvciByZW1vdGUgY29ubmVjdGlvbnMuIFNlZQorICAgICAgPHhyZWYgbGlu a2VuZD0iY2xpZW50LWF1dGhlbnRpY2F0aW9uIi8+IGZvciBtb3JlIGluZm9ybWF0aW9uIG9u IGNsaWVudAorICAgICAgYXV0aGVudGljYXRpb24gbWV0aG9kcy4KKyAgICA8L3BhcmE+Cisg ICAgPHBhcmE+CisgICAgICBJZiBpbnN0YWxsaW5nIFBvc3RncmVTUUwgZnJvbSBhIGRpc3Ry aWJ1dGlvbiwgd2UgcmVjb21tZW5kIHlvdSB2YWxpZGF0ZQorICAgICAgeW91ciBpbml0aWFs bHkgZ2VuZXJhdGVkIDxmaWxlbmFtZT5wZ19oYmEuY29uZjwvZmlsZW5hbWU+IGZpbGUgdG8g ZW5zdXJlCisgICAgICBpdCBtZWV0cyB5b3VyIG9wZXJhdGlvbmFsIHJlcXVpcmVtZW50cy4K KyAgICA8L3BhcmE+CisgIDwvd2FybmluZz4KKwogICA8dGlwPgogICAgPHBhcmE+CiAgICAg QXMgYW4gYWx0ZXJuYXRpdmUgdG8gdGhlIDxvcHRpb24+LUQ8L29wdGlvbj4gb3B0aW9uLCB5 b3UgY2FuIHNldApAQCAtMTU1LDI3ICsxNzgsNiBAQCBwb3N0Z3JlcyQgPHVzZXJpbnB1dD5p bml0ZGIgLUQgL3Vzci9sb2NhbC9wZ3NxbC9kYXRhPC91c2VyaW5wdXQ+CiAgICBmb3IgZGly ZWN0b3JpZXMgYW5kIDxsaXRlcmFsPjA2NDA8L2xpdGVyYWw+IGZvciBmaWxlcy4KICAgPC9w YXJhPgogCi0gIDxwYXJhPgotICAgSG93ZXZlciwgd2hpbGUgdGhlIGRpcmVjdG9yeSBjb250 ZW50cyBhcmUgc2VjdXJlLCB0aGUgZGVmYXVsdAotICAgY2xpZW50IGF1dGhlbnRpY2F0aW9u IHNldHVwIGFsbG93cyBhbnkgbG9jYWwgdXNlciB0byBjb25uZWN0IHRvIHRoZQotICAgZGF0 YWJhc2UgYW5kIGV2ZW4gYmVjb21lIHRoZSBkYXRhYmFzZSBzdXBlcnVzZXIuIElmIHlvdSBk byBub3QKLSAgIHRydXN0IG90aGVyIGxvY2FsIHVzZXJzLCB3ZSByZWNvbW1lbmQgeW91IHVz ZSBvbmUgb2YKLSAgIDxjb21tYW5kPmluaXRkYjwvY29tbWFuZD4ncyA8b3B0aW9uPi1XPC9v cHRpb24+LCA8b3B0aW9uPi0tcHdwcm9tcHQ8L29wdGlvbj4KLSAgIG9yIDxvcHRpb24+LS1w d2ZpbGU8L29wdGlvbj4gb3B0aW9ucyB0byBhc3NpZ24gYSBwYXNzd29yZCB0byB0aGUKLSAg IGRhdGFiYXNlIHN1cGVydXNlci48aW5kZXh0ZXJtPgotICAgICA8cHJpbWFyeT5wYXNzd29y ZDwvcHJpbWFyeT4KLSAgICAgPHNlY29uZGFyeT5vZiB0aGUgc3VwZXJ1c2VyPC9zZWNvbmRh cnk+Ci0gICA8L2luZGV4dGVybT4KLSAgIEFsc28sIHNwZWNpZnkgPG9wdGlvbj4tQSBtZDU8 L29wdGlvbj4gb3IKLSAgIDxvcHRpb24+LUEgcGFzc3dvcmQ8L29wdGlvbj4gc28gdGhhdCB0 aGUgZGVmYXVsdCA8bGl0ZXJhbD50cnVzdDwvbGl0ZXJhbD4gYXV0aGVudGljYXRpb24KLSAg IG1vZGUgaXMgbm90IHVzZWQ7IG9yIG1vZGlmeSB0aGUgZ2VuZXJhdGVkIDxmaWxlbmFtZT5w Z19oYmEuY29uZjwvZmlsZW5hbWU+Ci0gICBmaWxlIGFmdGVyIHJ1bm5pbmcgPGNvbW1hbmQ+ aW5pdGRiPC9jb21tYW5kPiwgYnV0Ci0gICA8ZW1waGFzaXM+YmVmb3JlPC9lbXBoYXNpcz4g eW91IHN0YXJ0IHRoZSBzZXJ2ZXIgZm9yIHRoZSBmaXJzdCB0aW1lLiAoT3RoZXIKLSAgIHJl YXNvbmFibGUgYXBwcm9hY2hlcyBpbmNsdWRlIHVzaW5nIDxsaXRlcmFsPnBlZXI8L2xpdGVy YWw+IGF1dGhlbnRpY2F0aW9uCi0gICBvciBmaWxlIHN5c3RlbSBwZXJtaXNzaW9ucyB0byBy ZXN0cmljdCBjb25uZWN0aW9ucy4gU2VlIDx4cmVmCi0gICBsaW5rZW5kPSJjbGllbnQtYXV0 aGVudGljYXRpb24iLz4gZm9yIG1vcmUgaW5mb3JtYXRpb24uKQotICA8L3BhcmE+Ci0KICAg PHBhcmE+CiAgICA8Y29tbWFuZD5pbml0ZGI8L2NvbW1hbmQ+IGFsc28gaW5pdGlhbGl6ZXMg dGhlIGRlZmF1bHQKICAgIGxvY2FsZTxpbmRleHRlcm0+PHByaW1hcnk+bG9jYWxlPC9wcmlt YXJ5PjwvaW5kZXh0ZXJtPiBmb3IgdGhlIGRhdGFiYXNlIGNsdXN0ZXIuCkBAIC02NDMsNyAr NjQ1LDcgQEAgcHNxbDogY291bGQgbm90IGNvbm5lY3QgdG8gc2VydmVyOiBObyBzdWNoIGZp bGUgb3IgZGlyZWN0b3J5CiAgICAgYW1vdW50IG9mIGFub255bW91cyA8ZnVuY3Rpb24+bW1h cDwvZnVuY3Rpb24+IHNoYXJlZCBtZW1vcnkuCiAgICAgQWx0ZXJuYXRpdmVseSwgYSBzaW5n bGUgbGFyZ2UgU3lzdGVtIFYgc2hhcmVkIG1lbW9yeSByZWdpb24gY2FuIGJlIHVzZWQKICAg ICAoc2VlIDx4cmVmIGxpbmtlbmQ9Imd1Yy1zaGFyZWQtbWVtb3J5LXR5cGUiLz4pLgotICAg IAorCiAgICAgSW4gYWRkaXRpb24gYSBzaWduaWZpY2FudCBudW1iZXIgb2Ygc2VtYXBob3Jl cywgd2hpY2ggY2FuIGJlIGVpdGhlcgogICAgIFN5c3RlbSBWIG9yIFBPU0lYIHN0eWxlLCBh cmUgY3JlYXRlZCBhdCBzZXJ2ZXIgc3RhcnR1cC4gIEN1cnJlbnRseSwKICAgICBQT1NJWCBz ZW1hcGhvcmVzIGFyZSB1c2VkIG9uIExpbnV4IGFuZCBGcmVlQlNEIHN5c3RlbXMgd2hpbGUg b3RoZXIKLS0gCjIuMTQuMyAoQXBwbGUgR2l0LTk4KQoK --------------8999A27E02E52FDDEF7C4498-- --cblRLIxF9azXz3V1UDsqC1Q0fAPet1uDx-- --j03XktbsR0uQt767HBEtcVSAEKGIbHZw6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE+oS2la8r95ogZD/x8QSccp8cZScFAlynfjQACgkQ8QSccp8c ZSfHwBAAoTSOe8qex8xMNcQ6GEixqhMUV6cjkJm1zjadEcBhL1Qmet4FOHGmQYNZ z1BKsa3BRruxwyAeo9TLbcztunIZpiUAQM8IMfRoEXVCIdPVvwOZUFCM/4VRD7Tp ws63ePMkc1ufy4ZdhJjW3MsQoBuMmtkjJjCaDAVHAAbrWmrmc7lo2Fx2PTXHV4JY 9v54kGfFZRLTN1C5Xq/Q6kSMPSsq9cWDxg9yz3dqJ+djhzF5UfW6wTAbZJ56WcPX 5/kmDA+Y4eyMlmNOSjSLb1aeHikyM2QApDPgwfP+GW4lgzVT2N5MfLUatf3ajW1c 2wyPKnRydQN2IvtR/XWogEp0yNu4Mgtjfbh1eS8t+x+Uzw/zItyNS9FNUDJKbXVs kFennH75lyIGQsBrxKFz7l/zdz9adcYub3IrDu9SRf7i0t5YUs16QTMQpjWdGMUV Z9IGLjYHIasXD8hwiel9454yn32rw7RCJwo26B9JnY3X8+gdn8MmxSQ++jrewggc JPN4yglqKaebifKVkRPi+bTITryn7SQyJrrl/q8tXzgy8dXl3+g4Sx6kcN7E/OvJ eiUHVzOnKbVUEuNJTuALyCdFOZy59ZcRuyCs+w9jsEg0N1pLz/X2cexqS70R4hDE 43p1bEUrNQqBN46bgfdkGWREHNFvFN4tUkAefWOF5EdzAAd2vqE= =dvjd -----END PGP SIGNATURE----- --j03XktbsR0uQt767HBEtcVSAEKGIbHZw6--