From 5b6e501d8c1ce0e8d630298a7e5ddea6a86f8469a561fdee71a7721ec538a900 Mon Sep 17 00:00:00 2001
From: Otto Hollmann <otto.hollmann@suse.com>
Date: Wed, 20 Sep 2023 15:27:18 +0000
Subject: [PATCH] Accepting request 1112588 from
 home:pmonrealgonzalez:branches:Base:System

- Update to 0.25.0:
  * add PKCS#11 3.0 support
  * add support for profile objects
  * add ability to adjust module and config paths at run-time via
    system environmental exports
  * make terminal output nicer
  * p11-kit: add command to print merged configuration
  * p11-kit: add commands to list, add and delete profiles of a token
  * trust: add command to check format of .p11-kit files
  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
  * server: fix umask setting when --group is specified
  * server: check SHELL only when neither --sh nor --csh is specified
  * rpc: use space string in C_InitToken
  * rpc: fix two off-by-one errors identified by asan
  * modules: make logging message more translatable
  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
  * pkcs11.h: add IBM specific mechanism and attributes
  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
  * po: update translations from Transifex
- Update upstream p11-kit.keyring file
- Add missing lang files
- Switch to using Meson as the build system

OBS-URL: https://build.opensuse.org/request/show/1112588
OBS-URL: https://build.opensuse.org/package/show/Base:System/p11-kit?expand=0&rev=52
---
 p11-kit-0.24.1.tar.xz     |   3 ---
 p11-kit-0.24.1.tar.xz.sig | Bin 566 -> 0 bytes
 p11-kit-0.25.0.tar.xz     |   3 +++
 p11-kit-0.25.0.tar.xz.sig | Bin 0 -> 119 bytes
 p11-kit.changes           |  27 +++++++++++++++++++++++++++
 p11-kit.keyring           | Bin 3890 -> 11688 bytes
 p11-kit.spec              |  37 ++++++++++++++++++++++---------------
 7 files changed, 52 insertions(+), 18 deletions(-)
 delete mode 100644 p11-kit-0.24.1.tar.xz
 delete mode 100644 p11-kit-0.24.1.tar.xz.sig
 create mode 100644 p11-kit-0.25.0.tar.xz
 create mode 100644 p11-kit-0.25.0.tar.xz.sig

diff --git a/p11-kit-0.24.1.tar.xz b/p11-kit-0.24.1.tar.xz
deleted file mode 100644
index 4ecaddf..0000000
--- a/p11-kit-0.24.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d8be783efd5cd4ae534cee4132338e3f40f182c3205d23b200094ec85faaaef8
-size 838304
diff --git a/p11-kit-0.24.1.tar.xz.sig b/p11-kit-0.24.1.tar.xz.sig
deleted file mode 100644
index d0f618e0837fbd3cbe19e6b43ab9fda1d564410736e74933912fbfb065ee6b70..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 566
zcmV-60?GY}0y6{v0SEvc79j*iA|=DLZ#0LW$VqJ01%!^*=9qB>0%7HW-~b8<5Y`2R
zj@Raxaj2sY|9exNS+()9>7uSw+;C}vXJc8WK^f<<zL_YDXwyt@f;gVuL9-kLzFbU!
ziv9CGo+|DXtrai7`v=q%U9Zjr3uMPi^AV)(_)rn7_4Xyu`$0|YN88HS@@f^(!G)??
zFPWW4Nq|Al#h3KdQ&~Qy=zy^3_|tj$qQ*)yllX!=@pFG_JzquFIlQsz3)EC0o(Dl4
zyoG%BrNZ>4Wg4Y19YfDJ1ywxW)z#;lW@UCL?lmULiO_>uZC`i*4|y|s-%quUhVCk2
zB_|$(HwPs~|D`|n^o00L<p^%ehKH{+3^hu^8pdXdJUOs-!Z(cm@G4L-Hq#95k-yPN
zsVsbm1}pk9Y3AJge$Iqf^-+XKrnP!0Kf~{9hc^1Zyp}D%?B#%!;&SF%PGifvj(wMU
zJ1Eea=7_^U+Rk6BTQm|sXB*u?HRmL;-uGXM8v}yx{ulVs$AKtn$=Z=Lpnj3ozO&GJ
zofzM-Ti||3sr0ESxHJTki{gewjw$7rzh^5M`kXLJYd$Gsm_9W@?97*SBnYap*nam&
zwPbG3ng$B)xq-o$oYgtEeM93m0>3MBe1fWrf5#}+QZ%(>xy<ujInG*VQa~O<Acf?E
z@3TST!$Fd(Csita>z-bRoLJTs)gFy$M|7$p-w;+dqt^DHa2opxRzQ$WweDInelzrI
EpIe9=Z2$lO

diff --git a/p11-kit-0.25.0.tar.xz b/p11-kit-0.25.0.tar.xz
new file mode 100644
index 0000000..82bf244
--- /dev/null
+++ b/p11-kit-0.25.0.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d55583bcdde83d86579cabe3a8f7f2638675fef01d23cace733ff748fc354706
+size 958940
diff --git a/p11-kit-0.25.0.tar.xz.sig b/p11-kit-0.25.0.tar.xz.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..5705bb1f13e56bf6a83228d8e633c3759f4f67f9c403d4cfc3c0f9afb0317a82
GIT binary patch
literal 119
zcmeAuWnmEGVvrS6WQlb<&0l81x}4QC>`PVYGLOwam3Ua0Qs#z!X5iu!fQd}+XJmMH
z<+E4DgVzsI<ywO}+1R!$c%$aHsCQ3p7N=6le)|?lhJPAccTT#-;d<NVsey}C)nR8X
UtJG{oE#32B=U*J==Fj2-05`5K%>V!Z

literal 0
HcmV?d00001

diff --git a/p11-kit.changes b/p11-kit.changes
index 73cea2c..fae835d 100644
--- a/p11-kit.changes
+++ b/p11-kit.changes
@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Wed Sep 20 08:49:47 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 0.25.0:
+  * add PKCS#11 3.0 support
+  * add support for profile objects
+  * add ability to adjust module and config paths at run-time via
+    system environmental exports
+  * make terminal output nicer
+  * p11-kit: add command to print merged configuration
+  * p11-kit: add commands to list, add and delete profiles of a token
+  * trust: add command to check format of .p11-kit files
+  * virtual: fix libffi type signatures for PKCS#11 3.0 functions
+  * server: fix umask setting when --group is specified
+  * server: check SHELL only when neither --sh nor --csh is specified
+  * rpc: use space string in C_InitToken
+  * rpc: fix two off-by-one errors identified by asan
+  * modules: make logging message more translatable
+  * pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms
+  * pkcs11.h: add IBM specific mechanism and attributes
+  * pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms
+  * pkcs11.h: add AES-GCM mechanism parameters for message-based encryption
+  * po: update translations from Transifex
+- Update upstream p11-kit.keyring file
+- Add missing lang files
+- Switch to using Meson as the build system
+
 -------------------------------------------------------------------
 Mon Aug  8 16:03:57 UTC 2022 - Dirk Müller <dmueller@suse.com>
 
diff --git a/p11-kit.keyring b/p11-kit.keyring
index f7113385aa0a21ea62a0f0dffbb086636849631670e3bedef1b94a0a6fa99210..c3d2b3bb2dbf63cba4680651b531283b46b51fc01998a4409deca99dfbd68f86 100644
GIT binary patch
literal 11688
zcmb8VWo#U6x24_PW`>xVq0Nq&nPX;VW{Q~^W2VFyGcz+Y#O#<EVuqL}dCqyid5%75
zM)RjsDydf0YF+EzclF-sA0dqfv<tA{=%9g+z*R{UAP`1qUjgJ0CTB=<4y>vynah&I
zycr#6ifEslv?8-Ly!SnCpwxD-bv3dlk#M#$b+$6GB;oTi|F2UaXERevBUeTf2Rng?
zOvn#d@Bk4kQb;|CaTIqpsA4E~^;<8uBB}aEGDIlQ-zS6cA)w$O`YZrY2yn14AP6!L
z5E>I64i*6fi3NfHf{0*1*Z}}|IMn~#X0;3i<g085dPLJ&@Lg%>ACIZm0c7ttrtHCw
z5(O%hOBCg%K)@AJIe^66jYrilw3*&+f+Ci3!R6sgFQX>2@y98MRZt7pKfcl7|M8us
z288-+e4vD9Jb>r^`?Gt<Vf6G3c&ARNaDW?21@@<@v(JN@7X%O%Cc+OA=Z`C@|BEZc
z|8n*3H=iB=ykc@rE%p`=a6;>jg+sp(8|)fL<+HF{h~6*<2q!-<fB^53Pnqd(7C``r
zDbq$iQlDqDHuPozLcP?tUtPV*_7_MQAS6f`i*rUGDj@F%P=A@|v$8Ua<{oEXU9((F
zc#-YvG&v|?4&{PS=OWBs7E9=ClaWVWScGth9(P$D-R$Q;Di<uReRLgp0_oj*orQf*
zE-tFmCY;A-3fuN21hfvEo8pDBL?~It`t!;b2Oj#^)7Cj<aIe<t_N}$40VRoW4%KP?
zM5`P3<DN0xPplKI#U#P@SWHv7DaK%kc=MY{Qflj}Y}o*A|C4LkvBFz>3Tkuj6>PIf
zvzuOPTwzLAO3m*MiLo=Gf-^;?$(kYh$*pK}W<HS$Nb0QCwCB*|%X%~NV}##c_3yTJ
z+h0<Px#M9%1K?Lrc{@G|=;YKMi?c-y_Y+l)$=>*>r^_Q{Rry;MnX3S%HjF%klX@UK
z_WOdhTa-K!@n)?G0IKS%$hg3LDTc<&<C)O{$Qs5zYv?;P_zd>O!_I!pi9Q0ozHm$u
z)GB#D(i;__6N*b^EIq4^Pobiv%Cwpy!2uq(f-orBtEOSxh9s}-Hd)nG&$s=mC(BFZ
zjG4|Rv`6Sy__)^OiRY9flvr+t2={(QKLZL!P|IBXky)2y*DbSfB28@%vGktNeygFu
zzv<UQpn=q7+F3V`V}hqr)pW>9y!Qwm86nd8{Im{u1<GTof!`WhDP<VAHVZYuCmxCL
zA2vu}j8p=fMH)67e+79{t;iXp5oa&0<7fcTfB;|vk(iN{jTMQSnY{xEpWC0Kkej`g
zhntI;GoypEg+L@o74icR1Q7U>G!PN+Pn!No8U)loDTDeOGQb~}CCDiI8ywieb4H|X
z7okGpmJZULpg=n1c<oSdc%_U;e?k7w_46W>S3<#DdZd_1hRPi=rbc#H=y;StIi8Mv
ztOqVSA}gvYHOAl%MS8}Gh~Hmo@HsS6-4R95XQ2Iqb;wt)M)f1ZjhJ!i5&W+fz(h_b
z;x%GprP6VqoI$q2Td?`8DsxB81Q3p#_$Q8meKn6Fu~cJ`%aDl%(|8n-@poi`H<A0_
zAWBMj!<yaiJTO~6z|!_A8qkpuzI1V3s0!EqawscEY)LSM_Mq(g!q@>jF&4!YY_j}A
zrWx%HSVlk4AW%3?C5AL5bTgKeX(uFq`$!xYVLoX0h_Ef2AH*dGe7DZbG-ma&zK3IY
zQ~u=vR>4el$J}|%Agj9Db&Wk^_Egg~Tc(=3GjHvps%j;ONGQB)Zgxv(uKgxsOuKgi
znPn7@PeHw0;MYa<o#nQ)4hV|Y7-9|t7828UpIoiD_s`ZHQAtYbn2KLji;KOGaU4l{
zUH{4$S|d<fE7#gJs?i!PjE6|&$h(53{&Fx|Tyu>&2u4|gK&Ugzgt5MQ=p+fgQeEl~
z@Xk7cb=#le)tgs`G16OXR~D6%dmH1dyn(11hg(ZlNvPoosCPaLmY;vQAIf56azRK@
zavjhRA$=Q1*>H%G{HYh05Sj0oO)_`f+NgMpC&>l<7AKB|(T-NFTY$h)Ku|hbGwgYF
zE8_Q?I@bew84~6*i65C{jON@VCsBk1Bq|yR01X9_vA9+HO9vzoceT^PEl<fOKyG^E
zukGvJ1w_$VlO$`+4y4^#AQ+H4R0Y(LbB}vo+O6OX8d+<0ul8Gx1abU>C&^!-bH+cA
zLjNrU5FkiQ5G=%h*MPs&{u@C1UX*t^bJe`YcRiCNN@TL8$UTzMJ8dIF#J2(>O`bHk
z2u4x$`(M%6)b{nsTwS4_-Ds_BMFJ-0X5g<zKbH#oP}yZk;bTjZQ*m_$uo;u38l2SA
z5Rf9YSq;$bmDI?e+bBD=#@I5Tib-?cq<ReEv*0g<4oK4BExRB!txp$^8Tr=0ts;HU
z>B)L+zxCp4%LBX7L(1b>+=@Kr5Bd<kvw~o=Dgm{^wnMDt%?b<(zk}-FxU-4W&j;74
zjWx3eV!6P!r0`?!t-k0dLqyF!l%myqfgv~jS-iVsVuL>3wF)ehiZpuY#&wSLGS08R
zDtnmA2iEsP=DbHFTr=F`NVxTDS<M?a8b1QJ_wIOL9c<yk9+ZZ;v-nQ{v!=*(FjUMk
z;-*{bdx4^%<6fIxqT}w@GH+4}Dqb6VUyvE_!)xWskk|4=m_MyOHMXSDHSW*%H5$r&
z={7`I^Vu2<FUP2pRbeZT!E|eqZ~JTn2m8f*qYrj75ZGE}WJ)l=sBk%uSB?8^A(XtL
z?+bVvio5b4L=7p+N63}41Shsk!(rCmbCmRo<w4D?z8pSY&utOIK!PIe$EON`_@(%W
zuMMK1-E_SazCE&VYzlGDA8gp4q%Wx*op8indb(hMwr9JD!`F1#j>TDN4!;cIds2E8
zb->TBsQcyqF#<o{Lq{61{x^WK{x2DS>CoGePSt_X%<qZ<e8c$oWeH#MIo8uKaWpRl
zVzY>bmKBg=s$Bc%JQ$np-DVb$L-rw;f=m_SkIskx0$J7*e&nx?PW>IOCYC22H8S8U
z5?qw_Oy8^fdED}#KhgZt&z^{5KyKiL#t%p3WBAwzQ<9@5)vk*v#qEFVU{n9qamKIg
zvO-g&kl+I3IB6x7yQK9Q3N^Z#2>iyupZ9w<24vG(oXcc@la;?W;(?44UX4w)1EnL>
z{{#!+Z?OL3>$)<uf=Hy^LaYd|=|jLlo!~iiYIn6msg9n+UPD8C&hEa8w708*1K1Qk
zu9pRml{HGEp7Gt>+J4*Y;2%OI^Nu34FOm4?_k#ULH?Mu~@B7W~|ElQ0;Ac=V1>|_k
zCK29%&7$9~YelAWi~ARY)v^J(-F>&W4eaGL!n-|G*TSeFW}@bwBS8d^sKEaSz5Nvm
zXL6+fWKUUAA%XJ7F1Z}vVp+iJYDwD?(jGWLI>XdTuoqXKNa>4B)zAM7p8UN)<#n`L
zKE|t^7AWUMBb<m*Ce*(sC=BMy*J3gslXw)cJu9J-@LJZ__<9y+r-Oa=6DphOGf#n)
z6D;Olo{i9MQC2?*hq~Lz1tg757!TDKXvgR1=64p??=Np<yV(a9-=|>d4=VL@taOs9
zX>8(?7?h@pS864LbSjd@VWgw8mIu0^UCfQ+H$lVc82*~u6pBZZhLS1gg9dN8sjx^1
zokufZW6g6JfK%@q=%?SiwE}u6wAVuJLE15dsa`>iLMvk!nkS{$qWGh)i$ELtk;`o~
zL{-j|Df=TdC(4Z?@D7a0*47M9&{;USIab*}?fZ@VXK-DlzbZVzh4V+LV(3nVIPZ2k
z453)kGOL!6P*c%d7r~Ba5wTe*`L}(;ug&$&I`~Alr7jv(31Wz|2t!(AXa~)HIjfA*
zt4S_tPHngNT$*<c4t<}(tD%tPoTVnm7#Ay9wT4<mqm8y3-=Q(B5R(u1n7nxu2T2;a
zcI#4@(N(9R@fEToTdIx;*RL#Jz-S%>AKSG~VRS;oE3%gxr<dW3gHr|?$Tv3Z+okqy
z0i&t55(!b6#NB?MDeuQpCrmc?j2;Q|zS**yVl?>n2wr-crl<1oXf2xxorI}HhiW15
z64D>fM2P>v7yiF7OZ!X5H|USsO_Xq<i5q}4A(=t6jQN9zi?VsP{WktPe9b>);b5yD
zF*lM8w}>Q7a%?b~05WT=;U8N6BSZdIW}lir-DY=yoWKf@o6N2}31lF1G$&q6eW#PE
z<$s?<{gcYeAV>)fO4oj6eYu_FC^lfTRrWtR|CA}&e3-?*I*al>)$>!YoNdT}+(l;1
zN@eu9ZJ6-8fegXfWgWem?|-N_@tDR+tRemqztu5M#My#*==SBmsQ+&v*xY}7K{|F8
zO%7;;m!Q16Zh40(l)^cDKq7r5_-Hd#{n2tNsA^QBuTdy91MPP$E7o53J7q<({txbO
zXgs+Qtc$~FvQf^!-D>S`3d{kIDXHZ_aXp$pV-4eJXpQc2riEIiy0^}NCFYOHMnu9s
zXIxREez=Dcaf@cXpi^55>B1$D2oG0!Gy6iLcD{%-B4*8Vg5kG1^8Ioto4~Z3Pv&$o
zkRMiCP8sy$uHe8!ppct_=Meu#>636u*((gFFOHYhq#oeDKzrK+bsjoTm6D}TFCn=0
zEwf||2aix)uXtD5YSh04sG}34_+J+f=6UKh^7U`kNt$BZ<#{cmv?xqtSgQP!`e@oG
zYn{#8NanvY^&d~!SF)lVddBR$W4-sKpHN?add$@6w5^9{RIvFCQo5AOF}h$}g9dg^
ze~`Jx3{o&<dE}&DVHUjV8b)@&yvq|MeT9{%jY%-{h86>J=Bcc~gbcV#mwkgzPbGPb
zPq1TZ9rdw5V>LEIqFWTuMnhX=$r6X!aHu9_#5V4>@XwBZ22Tt!y<zNH=j?O5TV90#
z>xRjz?TEjw!rCrG`ONrqpB#I2I->Hrg<uHUXI89F(Rak`QfqiFpITUatQ+4TClQyR
z9q+xUHn_2-(ydRPn=pV6?ygLSY6TfyH;dccWDi=W>R@<0JVG)lYSaeP5*${hCcTg8
z{trAZN&ezdwMJ@c5R5G2Qi1ZWl5k(-7vinV>gjgcDqeGjUYV5Z2V3mQwmHOeG8Q6A
zu|xV5A(%~~sWmr_OWpocIYRH#+}yW#PQx#LUhz&NM*F<BlPx&9s;Z|{L<AZwN`-<{
z;%<l&w@m#7vM1kt$?MvRfJl~w*2FoMUD3P9jC<}I5})PZ1Yo)v0A4qebVzaVk6wcb
zp*o6DLC9_j=$tihkW(;e<j=j}MeWb+kq_O!OxyYA#Bv)~W{|14<{Km~IgH<8$F%M&
z#CLq0FVqK%2+cLWQaQc^*QxXhUP`S)-3T3&u&EHwolvFnF=JKV9KZR7#2C${uPVC?
zaj1WvPeE1V7vaP0j!Z1ElQtE>)67njnkObBp`P?{2?0ikPC!67JzQCF1@N+>Qxy@T
z#ToYBp=`NH&MITEf4SM=U|%NZAn1+4ql3v7II}x~Koj@5S3;G{pV?77u<VI{Ko!-*
zCsm+BTwp;bU0o3i!>=T1S3hPY&xo_8oTFa;Jj`t$7hdm6K`)QnSYxwK86g>|_h1~P
z)YIs+F8Vux45^iyfH{KcJxgu!LPes{7O9Tapz%p+Bi-#jZ|S>rO#7m4jqOL}9sBE-
z2b?YO+sH61sta!hH*^sjqFTP0CEZtGfkLE2C9l1e_kN5&*Z$Q@`f#1{@acB$ITztz
zN)S=;r9-yV&rZ2Cx&ML3z29Fvd>y(|&xA=t*Y8o@I0?T=V<D=L+{`qHS$$Wu#dM2l
zhpqK%Q`^r^R`+>R?;a2y7wrtYA*7VU^EDS7k^1pnN%L@Y;gi;Mlr(PL;UU2^RXwrY
z4#kHfw*8KiMGxW-;f5ipj>SF)QoI2*^fHD#!Lmk=W#XKEdBgX$3pV*ftnDD=ujV`}
zLj@c4o2Qb>;ECWAbjzs$sA4_zfT+sxbnB{KJE5=&>5n9<j#X#x8mTFhDVRo787F8~
z38f?TIq?WL3f6Klw4Ng&fBqAxq*RXO&@8cHEUPAh$-sm^55+4^(t)*ocX(`~>uo$^
z;Rx{L67<AhvpCm(l2%>!D$Il=X;%q+F1lDxg;^KYjVR^RO=&WL+r>xHWbmGtgn_?%
zMj)7XAI`0VQl|<uZ{DCpGK?Y~Z-9shySKyiTVPZwEE`6OQ}wWo|Cpufwy~3N*Jkk)
zYglVqhE{OCh%x#?bv0(|>%bBkd|bKM!~c7ogRYtIQ}R_SOhO$w_NxAhZg;@j@fM$6
zJgU{?c9#w-1XH!3!;j!sl!P`T7}X>ZSNVP&yuf5X#t1<@@&#^HH8Q%xAOp%>Tb*rt
ze#)+&(+Njj^hl}wGU)j3a?(N{SNz{51}w5|98c5Dzm6MFwtQfI4Tg6s?kHQs=qyTk
z?yj?43V`*2FNk2rSoc>w%>68}#*B?uLxcWrJPOz;{^Frs?;hC1d`z;ci1IGQOdtRF
zfs?_BbjQHy8DjgZ!hB^_6gy{bUAnf2M7rv=(D``ZJ&yWIjNcr-mUI*;<9%kmV!59Y
z5?IHz4@Q#BrpA&$uX@V-EsPj~8&yx@#DrVR?KsaRtEB5Er)R02<dgPDgz$nznR-6u
z)x9yksF_08M+*<?$rcXY+&mX8JGgO#vTF315S{@SLCbP-S^Cwrp`GVD^z?n(hf&f%
zxE~db440=u5PGgWK4Oc>EFE6nMK*T>7_ep12q+JP4s^Xi+u@&&e9y5f!*P?S<HRD}
z=+X-SP>j>5W)!o)^a#^q36>epfdLQd$5G*UyWOO-^e-^ReO{l^w<kh|7csRr*^@Xk
zJkK7C?bP{S1k6_>XAN;*SxoS<ycxdN=YD@o!4SnToWB|8OWI6r;31I95`AxRV3Q2P
z=kMnT#8uRnt=;do1t_S6j{22jw}qGSB1z01xZ9UI%@jZUwv9P$2v|iuZ(hHXyN+ok
z#{3~PnJ9SV<FiSRbr-L_k9}>^E0C=HyXAaUY0~Rd^LsriKCJqqMfD5poVZn1qI&bn
zWA^z&iS61G$;T45=<)bxH3Ao38w(xXR>`mdpXuN(2fSDR>j}=WXPP=K*PaA#&iW~-
zgkYga^HT9>H1~K}qmx|F%V2)`=FG_gA#nyiykexw8q^B_i^czc>^%y&?Em87z-YMW
zuVen8qKOKqRscP~_{%o&iX2_%slvJoDuKOV{Oj?sr~~s0nmCQ7)gw?V#l1hDvP|`~
zlE&`VBYD)#kP<D5?Y40k-Xc+PLS8q{{P;Z?xX-`K9B_h_=yDTy6R><BI|z31+v7Za
zSg#pqh(&RQ!`maD9YBw(Pjh8IJSxe`7c82awxBRle6wyix=xczaz5&X6Ubc)W@PP}
zBASlWI!+T9Zy7^*6=b2+q~`zL-I9HL`7*mq_XTk}{&)AICuilwr*gd?i%xoTKJJNX
zI7XYdU4{xO;K$$m7#O}SN((Yr?MEWLQj;dCj*5Ez+Wn<qdikcrE3cJ8s`gGZ{$G%=
zEE*+{D!z>_bFW_Sn^6W;T&oPNBNp#_Nm+7e$;<swLL_xLz9o{0jKxgy&*A>AkhCT!
z1D=RD2T>!5s3JeXEG4C$RU(?xOCAg%zS?PCG|AYofRFd{r90n4X9sT4RK){Kg*N=#
zS0U&?gB-<4Ri@rGOK{joOmkfPgc5S;v_AW?38AEr^J4U2l{MQ4IUoIl``rct4}vy)
zM&TYhq=pS}tu3a%wMvDk*U6d^yl1q>2wnKzRSc6Cai<c(Ify=R@g+KP8wBINnjOzK
zEt5d7%6(OQoRNR~@Vmj-+)*`v7HYX-e)CyLgIXPMxi%<?vAHu#a8l`B9gC%=mdB(i
z`tQ{v|JCX*9@|Ph8N^eE6paz6fY^5QH*SLXXq&zeLUUlssxwUw`CtZSzOt+n=sK?D
z;Fip`Z83Z2`q-e{<Q|ImnJN71nq;yxEQdlay+?MxYjJtwGMyGj%n!9xXxUO;kU=Sx
zu`jjP^^*QRcJ%K~YdJyE`-E_wAbdN(IWsdOM@>O422p~<oUET0V$Po(eEpBUmXIx1
z*~+~nbo;R`iT+PMkH(E%!sc)^B|IoSIC*8t3uNb<m@=3Bp-lxVEw6AwDcf5Q(nS&}
zGI89?1L-6yLuTy@{4fOSO<I$sayNOjzs<>?SCCGj%cx^9?XEZR4o$FJ5oXu|>jGO3
zDVB0`)AunWHZ-SfcEIo-F05I`v-ELe&<78+tB5OD-jf%zhG%WHMI$i>e-Kok=51*j
zCuO*mn9d=+e_w}s@FE`8%bH>EQ(EQu+L*jMY=~^1!PYUt2J2Jf%(@C48T#XcnZH|t
zMX{En9C=fUn5Ln33~R{g+bzMz-gG+xqF6IUybFV)k0@r$ESRh;J@dvwkn+yUU=E=A
z5-XOwi!vpxE;>w?jj;kKE-ZL3WZTpKm0IvyGD~doj!05)A?;yN5ySOfY|s5vNBWQ+
zq<2KqHwKHh;34kY-!p`&fc_h{%T+6tk3&863Zh+1O}g&2)chY~cUvw?QFpm1bu^c*
zQ2OU*;3M&I11|~v%GCdjM}aKgUp!3L1?P*i26M{@P~HR>ekRmAv5f1-CNcZIP#Mlf
zY{J{Bd-tq?1S&l%AkqkbiB+CA*zS8crH$~EDCdQEDUuuR-$e1`Gv0jINeJA;T_~@8
z(@p6VmZCoiweV`)`;u)>x%gpp9xCR0b{KLt<t}GetXQbf+K=&uT+G#GMswQ>sB8K4
z-WF5gth_g{!0FedpKxD3i9jwkqoHV02|!pLtm$ME&S4`wrW&H0TzyLwVYizv&Uqo3
z>P#|j-P#Uk!4%01Ho(>Q<M4ZIo-Q-YBGY8#oX<e-u)3sYYZ;sKS94CVj<m7N*(@gW
z;Sn-L0LLMY)OkX;OLKYg80|cUMNCnR5i=v|S_UKA2x$dXbYP_)(6*3CsNfh(o~C@;
zUm$$Hh!N~wh|oaR9~ZmlxM;+P^fa(BfP{R!EHPkHhvW4_`oz+BzqN1C&Z|}dfS8&8
z5v85P(A=qzF*Of7Qze@Sa9g8k&)41H=l;R*MN0-#S2}!fWY-SsKBY)wUOP|dqI2l{
zU>K_g$I1`CViF8}M7cL;OLOK#EhasMbmCb%mxlO`OCz49owu+SB&VS2)O(-yHSZp}
zS8%vc84hQ`SiXs&+0>ReK6B!#4Nt?pWz8;`Dlk*$Eab?U6<8R_j(QS(xzvLlwOFP&
zA=QOBd1H1*?Q6<DhUti5S4Hs5a_DwQ8}yj_uMgzH>4d*@lp)TZ&qPbUB?|&_^JBv(
zyok*;={_B;FYF5_#xm@{1G3qMrsN-RYNz*{5}M3h3d0aQ*!cgAS>X)qU!nZds@bMT
zkgzm5$}15OPem-7QS1bkieK%5_D@G2L?zmTV%%gcr5xGY12AXmv;l;=c36VtG=oHt
z>{A3i6kLJkwCtdYjsi!+^gL3%1TNczHUuHFwmm^omh8uCHrhI%>NP2vBf;EpFZ*mO
z%ai9h21$OU|7F<<Z@I8|0(Mo>6FI7Nw+mxnp7L09=PfbjWz@pNJRBHqSpFD7h}YPX
zKPUfN3eNB+Hkc<Ltc<9BQW9y*P|;JmE8a`*H7y9IFeS?o<+GWm6~2O>z^&T0qjH61
znm8&uV~)$DViS9yLg#HZdD~trX$g14T;yQ?lHN2)H0JVXdO341{k)?INy`Y!aHfkc
zQG#6k3I2X$m(+m4)Ki<?zF{rV(QZol!#BgYiNG*|5z0uM!%{o$Sf-Q6@W9%hr67m4
zDQb^Y%<uTkh0cyfWBYOC<b#lD#s||^K$KG@3;i@bIfH~v#hX0*(7W4lzaj8aeUJQ9
zs;vrLG1hIvVFj0nkl<C?nmSzo;q|wAIjjR_OH~Y;S{jB6qmZDQ-!TyQFf5}duDsg9
z%|LGhLPp1NDM+H=8@><mUW|Ose9LG)US??XtqZ{)s`n`oYhn2VH21`Z`q`Op#X1n4
zi@?p|6gAm$Vv$pU3N&R@2_+R<Hv4j}#dkDEW3nW5V;!Xe77uK;KlUjbD)8EOI@11)
zM+IfuUp#E6I!`LmNoBkmPyuZX@$dX}7>tzn4rPKFEjBG_yCrOOFw%Y~WAHC=H~Nr6
zgePRAXYdD8nl`G8&e^h^W)fR6;nMq8^Dch+aNQsJj|;U$2XS=w&N_1^6gAx@QPp>l
zBjCD{k5TihCE;MGnd1FU8rV<6=pqG8Kz7u)DbEXnxWOUKeVadCSUPks=~#iQLzc$c
zC%GxAthMdRC@B|Q8o`TA;ZNbe_e;QO<F7ps$ZAf-&>=M9UPc?CTws|2fL%Dhf+O2-
z{+TH5Z;K3&hiXB=v>YzzS0VvAru0I4EK1>M@0G6ZRvRTLVGf}{gSe%6>B*){{4K(Q
z3fj1Z1FdGw#%Hs4N{HsF&0ule>A+V(%=qYnT?ukkmio-Y+m#<0RgR}JQ`(7RLXbL&
zJ;Bz6O&{2u`a}YWGqFo&LypO(-)~S*xRigom=WF0@ZzC8WG_SNX=4foG*wG#TA50@
zai`H4KDnOHiFUZjX^3b)7WvVj5T|C0qf<_jNjs1<KExH=NG`!{DBTZ4S}4hK)by_2
zhWMEEY}bJ^s`+IF;945C!COmY=MVml3+eTP@>p>=gbmeADYfjT8d^VnvgHyuAb8B+
zjmo!0sU}|Uw?3?gX`;Xe^J9$>N_=^9zWlP5Fvoza7tYr-iqny>ytyQN9m~%p>`3$s
z*#%Wn=-3lNnVI)5Jd_n-uKwadZ)#c%j*|l&c%r=VH^t#Eup8Q_XQ#myOK$p5Xegi^
zYr%vVa~;cD%pLs@_<)-C{T46YleeT$d^9zjB8Rp&c=ikH<aq^Cpn>qXuH^uJc`*i2
z;(FDZmuutzc+4VHBkEks9jbIikyU~2Ys{H4n}hrQc0$$gioktgxO={0-?C8;K1PU_
zQClpbpza{+*Ce3tNUlXG&;<G*dCdH@CA@fytP>tk*k758lKKXR+2JruWVMEUu*7TU
zn$Hxaxy&cw89b4;Pi{~XF+^bEQ!`jYN58kq35A)GXzBo}Ri@x<zD+8Y&nK`KCt;9@
zyi>i37AbYUd+n<BjDLYo#qHsHOZg2J^L42E+&2_t4V^f`>+{9C8ySaloV%m}cV*4&
zh6<rkcM%2DD*e$a+lyn=2*Zlow9hXiP0V~>E_kboUUEv4_ct6_^j6%M;ER&S`oZAE
zWpjK3(rmVc%}<xP%QwM|`~2<OMK?``?l3YH9+okJx^P{CD~VtPN5Kd?&xbiqygNQE
z8^-5>OrCnk42cbe_p*5?njbr*M_ok$rRlLdceI8CDD*;5+wq-v>kZW<czU5F>X~7c
zl>C~vj5rGv(Qps@*Qj6;{De=7?S{>9UKb@RvtJ9vA!LV%3uAarpzdEGo@9b><gdq*
zW8w27wv{;7&P`>so@vHbaz@CH)2-$8B7y&3&q4J(+2t=DfCl|ex#G62dwG~AP}!H!
zFxf6*-tN{4GdMr7c=fQBq%b=x)eo5Ox3Of1*pd3LW#1(U6`o1vFZS-WcpdZVnH2Sr
zM_eAcw6Y;Zd8Axinbkw1d<uJ~`KK>%Kh?B~WMb;gX7IDc)nH(BqaG=(4G6dN&^_}h
zpE4hlV);9V_}f9;`woIOxFqRUEi%1pS(p$~#=P#evR2Y&Vv}=&M#T^nmfJ$a44W<E
zx#cZRuHX6Bb`>~I{bG)E9Nq?R)0|aRiYZN{h!P{Z4vQukrz-s4TWNKZ22cGFKP`pb
zt@_n`H9trs5jsaKaVdW4ak{p1ebBT9#{F6=`xq;}cl@?evPZV$7oCnU(t!K_8v(Ge
zcl+<|zuG_TRl)z=ScS%f1;N21{HwM4|JeQ~CPsOI6)Eo5q&fUO25~Ng-D|K?T)ivR
zIS-FmSZMe;;57PBVgc>gQM&P0XJlP2+^!PM5N?WtO^U56(G@l{d7c(^f*zKi?!p8_
z&RFUVHedA7UV2~{d_qfUzXK1S=x*~uA92vP9Fkq$pQto2GF$BvM`;#tVESxi*xg->
zb8Klv>N3v`aHj<rJfvtALjo{pW{zY__6+G<%`Q5WT!qS@ZH(c@d`94W@wA4B=?iQ`
zv0%HOqDqrc=}~S@!t%|}$A~0|j<}s+i`0)Qkx^pSc{@;p2FXgWcp?+7BXK}Atn@gQ
z&{tC=G&$H>%Hh}7v|;OuDBQlW(tdA)avj1pNjpl9jI}6=;QKBoBsiW~Yy&*;ed4%T
zY|&an=+8L&Q=g3pjT0|EYYypW0<<-Q?Htccb+XZ9M`$g@m+_`e0(RUza_dagk!0GT
zQ$KSI?AH<5M!2juD!JfG6T(k$6-@K4Nrefu(g`y)(P(sHR(>VUQiihl6kSF~_&Fh>
z`y2DlkC1#Ty7UuiW~+UPT}yXygO)OAIsN6z1>^>m%iFl*7qz)dxfVo|P|YA)Du%9y
zZTtMO=X)8r{?+Ur(Wk{{rl@#++-T;~D@s;XR{w=2tjtrckNB2+mJ+cuxCU}z922Wf
zS7`SE4xP2WY}U~fuV17?DCHRhg>}Pr{tpYb?f}ZWs8adBe&gYR1l%(M+*J2DZAWPj
z@w7^J2<7Lt5_=oSF><SmYWRkzZ|<m>p6gC=OkH5%P2T54ZHnZ9=iy^}9)Wck%pGC=
z>#XmiSgi>v!8DYGUoh>x7a4rOu%_5tgGUV(o8RPUbKFdwEOAQ!N(f5cpAK)$bGD*7
zOCG`Ms|1Kxmd$DED?dniY(8y)XQz1>N1kbV+;vW-O5Urv9l01-Hpdp*df$koa))dy
z5z+~x>)Y*qQBAS;{r=*k&;S&j_3kvj-7u$~G@n$AZoiWtp1TtkA}3|5<L%1kE4!r+
z!p<pd?2+p{ZJ@>)G-Et{_0xtYV3wiyopvGPiUcLQ3f(hdWWEt~;Ik))ci#CJbv=hJ
zbe2VPSR&JB>ow<2F;IUCRU=$9v~I&45OS=6?*HwRrE&TU&X4)eE?vPkaklWfA3wzo
z8w&X;E6|&XWzepQtT*;S(qL5DA`ahJMQC*28ZHrRsdmlRIivg2M=k$Sn+Il-D_0XO
zw*_28O4S75iNFVQSlb<U3skL03Igu%g6CO;jRdqtf6nM{M7M()J4LZcYe9?#9|bgl
zCdG__V*1$o%uSb*#A1$wA1^vAKF@F_m~u<lHE0zsjSQimH1B>Hfk|jDgPlrpY8!p_
zahJ!(q^`veP{agiueC|H-X6ieUL*wPn*1LY>^F9pH{S9z(G>PCqTieHIP8zDEPHfg
zI<>$_0&oU4w3G+j6A(|iED}u^cx|bg9BBy8BYx;yoO!Jm9})!#pZSv2giv9qw>6O3
zR<f%<IN5u^jao;YLkZ5Z*6$zF<Ya!ToF^9085+06%>l4qy%K<G2dQC_D0dzY1v4><
zxdcLalkp;X{eC%zDOmAlCaxmAWe_-d?j46ZKADVsx*x$SHM!|dE}qZe$0Y|VHT{YK
z!aChw%QiaTUt5Gao+36gxqGSQsyz?I1?W}YGn|z>8RHbRk*hcV0`r3Wn93ty!}q6t
zRUDwOw0_PyQ-W%)UKQVNHWGhTHbek0h5!ZU`C9+X@X6XJbo`m&E0A!J(N7P4TU?MK
z{cKN-TlfZ=Pmn@>9wmepYpHycDGu;{R{h??Y>U06lLa{_1N=$fm@Lu+&0xw~oBXsw
z2<u^d!t;|MA||*2+xi~&^<bG$V_Pk@8t+4-h5$HAVX+hX!_O0GnX>*xwl`pd6$+Z^
zJz)^!3wu?7P58ixVMPSjhq-#trJ%eNSi$HQJ!-bWS);3NNIj<I*cg-V!b+Q#R2))c
zgtU<D(%IEQ-5Z=CY8u?OQV7VAz9Z4cgcIqr5IjC|+-!-%GuBN|^?oqVLGM*2PUY52
zYe6E58r-kWu((=|9PGI`gyG!$afKR4C&eGeA?8ffDbbhnO}$WZ+9L_f)!ia}ZG58G
zIgH?kV>v!Ut)lIGC-J8%bXaQI9!vL1_o$vZG-V_Z=3tBHCm0)O&q`nV&+Fm7jOwXR
zfi4@tcD169XUT|Ne(&PJ=%IVoO`6JF+cO%M>)d!8Fgkgk4fk7<>T7jhuH)}LbM!(k
z02RxM5-GVZMC;|puxGl-#3F>%NS!78BMLW%sC$DqQAcUQ1J)3C1?<9`R&*2rvmzQv
z8S_U$^G~<x2t>}EzEOLNcGFIiKeW2<_^1gS*CAHWMbfP3#=pXSCdyrDY41a3=u4Ka
z!)c90L!kgbb27@&pp@kM1)o4)_WXDlI(vVgQJsN;F#2bPFA_uyiSuVh5AM&<#~&;}
z_=tbEIR6>9W3E62<P-#L)Nu7g59^*uFdPq<qL$a1t0qYseRHRfac`+<44-AYGRPEm
z*FR4^`WmUx%^4AL>?NsMG<{t(7U_J;q(X)-7bam-k4I2N75%Y}h4iv&T&fuB`PEj2
z1eRQFK-)w^ak{o2QwjY`5XYo&U-mRvoN^T}3An>!!!e`kK2ujojX+h-qjeoj;oGg*
z)}lt#j5U0P&O&rUNKzBGG;_MddvOpU_m##;y*5Q$(U2swgFJ8%8Y1rVBewq5GfNl(
z@;c}E))pbxbxiIRPU2U%*i{{m$cGa?C>52lodGt9M0h7-ata)3?GhjK_TwtJYHq-^
z&7E<ZW^{s()b{d?t-L~EV`&n@l`4WP@^^<0hEvf+bWSMKQa{MYZ=>_#qX*XBWNQ4-
z<DD1$pWozss7<1KOfuOF*3VWaa*+I1BwA#HMS<Y6caH!idKT?IsblY72S~w~1*(n6
z>Ac39uw9CSB5DcAAyxUXh`UpfLQA`D47d@}?CBA!yC`UetnOIydCno;hvD1i3kZQe
z12bY0R-DIJN>w`?sacfy35)el;g3K<{`6KaFlumHz8k}nWg?8eVsOpi#nT1GV?Svs
z-Nt52Lcx9}j|Q5!f6=hT*n&D{Z!O^>8yiZ(>p77(#daWe<=%9|^UV2}$2$OQpk2K_
K=)Nd^|GxlO@OVi8

literal 3890
zcmaKvw+{5W5rum_#qEU)<y5#(UgaD+g;h?gtbKa#ZyPRLm;f;a$!g9y{O0e!e~S}k
z#r(^b?Z51R(-r<NO-%mcbc@&ioc;{}qobIdxJ*=wb0W((@Fl%bj=+LJxg*QLu2sW)
z<#{dRm-#*h-<OI_-AGR1DdgQL3s5F~SUtfx4JPZ{l=zK0V1^f2Y`x_3@hF7YFctWu
zD8<fP?-V7izF$S3>u1d0G7ZSKH6g{v<AUwjKyp81n$#6+JxbNnHYr7q7o3f5rFtAU
zJ^4Cs4^jFPLCA`Varp;`%FMT^!;~V|__n0L;><|XaHFE1W9kpqilGnPpW0Hnhsu}Z
zo9W}UKn9wYK5`%qK*@*6B7<I6@{-N)W2(AIBay-3zPvPkRR2OEW1JVNPC8V=9Dke3
zsY2e&Tj&nxiGbxh+8iFS{JyRhb$#vOsJ8bYnacXQZgPM6^IHvB;@4=tPRzWFsm~hJ
zJBb^vr&$p=t(dQo4<5v=C-2fSUtAFGvn4yP!Q)YcwkGGv3~}QrKC5#?bUvw>$J1FD
z;nz?KATG3*<gw1$6QEL=zGKZjEh$kPjkKSH!Y5RgNYsS-)xq{v*wMc9O*hnv4I>$G
zoWOdX@P+sv)GRuES)SyXX7LnrIhwovz=wwqqB3H2W+EC);fIIgKjn+IjJ?#csLcUc
z8T#BRqPW^zPzqfBB;MO)xa^Q>$5*e&<PpA08b*&bzd@$}JzN-Q6^z~qWq%G6P%pXM
z^?vYL7{|yk(T)Z0>)FRz_LYPdx5FBYO~PJJ+lU5tE4tttVc;aZSeJEJ4%oRtOrl}U
zJT6Ql;#7ni`BNRaJW7u^i?IM(M*%s`;Mkg-*=7^CdQ*9}5ZF2i0iIP<zTQNsRs_~j
z-oG8!Y`_PDATM>GiUF0<4y*C55OIlTAz+piIW-6nGmS+G0ULTFtvDz9G{D@|l*Wr#
z3ubsTR&7S1=c{6}LAp>W$2G$r&ugL2sy=Z@8(H=>@DspgFuvqSy^YD$A~cez(QqG$
z2tu!Jr!s|k5n;}vkqx$B4)Ttxk;3~D{y<k>EfND*&0wzFMR285*(4cRvj(4ijKi<Y
zZ&l60_lK(C)sWQ&70s?C+TmMZM^U6Jy>~SOqz33oDWQqTmD{@6g_f?)6qiKA5{!dl
zYzfhT1V_AgNo&>V!_7Tpmd1)j_x7#E8i3y!C6Q)HfM+CNX)&?}SY?n2eO+z-4jQGv
zr8Fg-TshH1C&U};SUpb=S{M_^TOj}!(2*>N8oJ?U((lY{g@RT0r&F*F9=Vgv$VhHK
zZI#r~d#jfs8>Gqa31K&-be|Uh<~z-sNig=OvP6Y=PufZ{5o~818b+vLT?Ru<gf9{F
zqCdH>V?y5QcMLmzCuANK0cxX=vKXZT!g;4ltXtyz*-&Wia6Ot2LWA_15udWfy&BXL
zL$>g6im~<t?$=D9IG{3uFv;=Osyo|0qwNy#{=4&d@{ugkp>hp$1Ww#sZrRwSX+`~N
zQ3C5t&ou=S_adMVlu9JJ>w!3R5u)}X$f@k*wb>$;3Mx>4?(_W;;*a4&1GKrw!BfMT
z&Jgc&!MG%Vi%AXb$$=wU>R9Q-s(vJsUtST@SQ(wC?k{<Y+<CjQv}9;shf#Rs4@;MS
zD$F53J`Q*pn?uq5*Er07j5GZ)4%^@y+q_xM`L}^MH_&*e);Txf*-K;r&QZO<$X3qj
zU4Nf$mYr46Or%DkVq$4-sVZy;tE%iE-!igL#rUA94$l|TsiLjE05&8K%s$RXTc2rE
zx346o*G@39#uP|p(K$9<_0TDzGDj3NMM;hJh2GiOz9=kBX~6dJlWY!)(f$gU*>ka^
zF0Zwmb-JE7>ByYi(<(hf5DBg7#j|g7T1NM#4NRudl=lJK*~_;xGCt_+g|(=#?Fwhn
zhh}^)5#`2E$odlb=+L*g<@Bc)DFRcT&7Z`XDBatE?dZ;MebFx{Tm|3LI9Ef6*7wu2
zo|R3?o6X`52cf5|iHh>N2j&yz<&j`TH(#+|1H-cEZXsU`GiD_{vq-mlYO~o0e1dCz
zev){TJs8eS{@_7<kx&Yq-t%6U%4SxpQUfkO3Cyo65&zazF_q05vuf3TO`Px*UYoYk
zLGGQ27DfK@N>jMs>4i)j=<Y!NDeMtw@R7gR`PtAFT2bS(&jl34)KgO}v*Q@lPWrVv
zX=f#{|C6;(fCDx!FNeT?Y15JuaLct}`_QX0&$H{@nWwo4IR#E~m)Hf9fGi@?V7xnc
zo0?<};!sz~@j_f`he#d?WdO49z&QdOOl!xC0`)btc`Dv1G0TP3yJ9D3Ny_ki>-Yt2
z4yc5}ZyO49lBUfK8arUf&14qSv6u6r{MpMO$r2RkF2LqNMs67aksMFg5a)92ISvbD
zdgcx&kfqkxz_10t`@J7Tk^zshc{6%?{EM0P)u*mM%+$G)sl`hxKzkl~t%T)mkuDX^
zBdVkb=cxiOClwD3BfQU>eM5V&80?jERUHwVcn33w@eeYH8p^duZ&7jp?tRI>nwIR=
zLQh%)s3|AT&LoB2dGZRYCQQ&%ZY(wY;-3+QqSHxy?59xgvkFM(gKX|D!Y%bogYukx
zA;3CwYeV~=M0*sAv%T%oFB>Kl?RSOpE@%3s$R4{zqZ?snteTEtA(}6#r{LzEG%Dc8
z-<Yyr;dbI`!tpWxmfVI_FI|7UN;WVdE`Rj6S=}zrIkZJIuAM|;ki_=7$EMu@+~kRw
zQ0~x~_A|+>&Ce={(JY>R*Ymd98|&VIX||1=oGKCNwCSOj6B^Ohx`qZqfU{|&EgJFk
z;2#DY3|r>X<&fJVh)LR26!n?d?3L~1ys~g3d4i*acisrTQ?A@J?m*?;7?zZbK4cL%
zOJ8g@_bspqN_C8Lq98XhyyoqG_M!1C>*a)yP+IPca>&vA{*eJVQtP{gUz(mF^qn$g
zW6|ttHjcYQb#YVW2kaF}dV&|Ml<S2u9|2Q*$eu*YmuP&QfdPJrS#2ZpH{>w1UsXkL
zo#E||r9aoZPcl-Xzb1{TlC?)h%q|Mdk8%jH`JyOHSO8F0<%i$Hhq%=8CVx2DQdf=d
z*W#*M(-NKgi%yo6&4(~F7M$ma6v#TiF4M;D;|l>0!v!!K2#ND=X!`L`#c}l?9#Vga
zt!FSu|Ki>F-?TQg%VAZp1L~c;EQ8l?<h!{ow%oGgd?;xQRZ~q;1XaZaJ#-#v7!jsJ
zFmvMcP5lOeNg3kv`&NL)8b}xM#xJCe&pbQ~&-hBS8%>|C+dUU+o9PCn+)BkC58O`D
zc`~^;*F0~Ax3qLXhzR!f<KDp4oVv?Rr_kQtN3((tPAU9{ew)NKW)wOOw;TR6<-b}2
z^X9(FndDfT5O}RcbVH(NxYYOM@mIH34#^Z01!jt`UULy<_Yj0m!t>e5TO3j+LN`@}
zgitm3m1TgxsM4g*8s}h~o}Zd_TW?}V6CHNEt*VdBhJHY=?Jc-+UoZF1!M)6v+2?h6
z2RI%8pV0(sFe?*jWTYIfBX$jHo15Q*!=8=4UP%EDZ`N-pq4oDJAdP}?k+)Q}PfW!W
z0B$jj*|fEx56cgQopxM-{_C0&{A3eihGPcX(Cw*&m`dHX(QDY?eiRP970%TKDFd#)
zTizfx3W*WUh=&MEO(i?6oP!`aL*x#Mcg%Hd;54Z^X4RD*oVMamluDQ37wrOxprTSw
zHpT2x1YR}i9_V%a6=BhpGylh;gM8p!7L8BT_GR`3=Zaumm>Knf)EZs@j*p7y)iU>W
z`3@B8y5A5<-9B+Wa-=a-)v0nvq%-+zx>S+*E2Y;kY+`P6vB(r08|W+ScuiZ6Ct|$5
neS5c0huRh#y4X*Qd`_$gQKXMi;2)ao3BbSRUC|W&&oKN?w50VM

diff --git a/p11-kit.spec b/p11-kit.spec
index b33a2d0..a215b9a 100644
--- a/p11-kit.spec
+++ b/p11-kit.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package p11-kit
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,17 +21,23 @@
 %define trustdir_cfg     %{pkidir_cfg}/trust
 %define trustdir_static  %{pkidir_static}/trust
 Name:           p11-kit
-Version:        0.24.1
+Version:        0.25.0
 Release:        0
 Summary:        Library to work with PKCS#11 modules
 License:        BSD-3-Clause
 Group:          Development/Libraries/C and C++
 URL:            https://p11-glue.freedesktop.org/p11-kit.html
-Source0:        https://github.com/p11-glue/p11-kit/releases/download/%{version}/p11-kit-%{version}.tar.xz
-Source1:        https://github.com/p11-glue/p11-kit/releases/download/%{version}/p11-kit-%{version}.tar.xz.sig
-Source98:       p11-kit.keyring
+Source0:        https://github.com/p11-glue/%{name}/releases/download/%{version}/%{name}-%{version}.tar.xz
+Source1:        https://github.com/p11-glue/%{name}/releases/download/%{version}/p11-kit-%{version}.tar.xz.sig
+Source98:       https://p11-glue.github.io/p11-glue/%{name}/%{name}-release-keyring.gpg#/%{name}.keyring
 Source99:       baselibs.conf
 BuildRequires:  gtk-doc
+%if 0%{?suse_version} >= 1600
+BuildRequires:  libtasn1-tools
+%else
+BuildRequires:  libtasn1
+%endif
+BuildRequires:  meson >= 0.59.0
 BuildRequires:  pkgconfig
 BuildRequires:  pkgconfig(libffi) >= 3.0.0
 BuildRequires:  pkgconfig(libsystemd)
@@ -101,14 +107,13 @@ Unix domain socket.  Note that this feature is still experimental.
 %autosetup
 
 %build
-%configure \
-  --with-trust-paths=%{trustdir_cfg}:%{trustdir_static} \
-  --with-systemd \
-  --enable-doc
-%make_build
+%meson -Dtrust_paths=%{trustdir_cfg}:%{trustdir_static} \
+       -Dbash_completion=disabled \
+       -Dgtk_doc=true -Dman=true
+%meson_build
 
 %install
-%make_install
+%meson_install
 #
 install -d m 755 %{buildroot}%{trustdir_cfg}/{anchors,blocklist}
 install -d m 755 %{buildroot}%{trustdir_static}/{anchors,blocklist}
@@ -118,7 +123,8 @@ install -d %{buildroot}%{_sysconfdir}/pkcs11/modules
 # Remove sample config away to doc folder. Having the sample there would conflict
 # with future versions of the library on file level. As replacement, we package
 # the file as documentation file.
-rm %{buildroot}%{_sysconfdir}/pkcs11/pkcs11.conf.example
+install -d m 755 %{buildroot}%{_docdir}/libp11-kit0
+mv %{buildroot}%{_sysconfdir}/pkcs11/pkcs11.conf.example %{buildroot}%{_docdir}/libp11-kit0
 find %{buildroot} -type f -name "*.la" -delete -print
 #
 install -d -m 755 %{buildroot}%{_rpmmacrodir}
@@ -137,16 +143,17 @@ ln -s %{_libdir}/pkcs11/p11-kit-trust.so %{buildroot}%{_libdir}/libnssckbi.so
 rm %{buildroot}%{_libexecdir}/%{name}/trust-extract-compat
 ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libexecdir}/%{name}/p11-kit-extract-trust
 export NO_BRP_STALE_LINK_ERROR=yes # *grr*
+%find_lang %{name}
 
 %if !0%{?qemu_user_space_build}
 %check
-%make_build check
+%meson_test
 %endif
 
 %post -n libp11-kit0 -p /sbin/ldconfig
 %postun -n libp11-kit0 -p /sbin/ldconfig
 
-%files
+%files -f %{name}.lang
 %dir %{_libdir}/pkcs11
 %dir %{_datadir}/%{name}
 %dir %{_datadir}/%{name}/modules
@@ -168,7 +175,7 @@ export NO_BRP_STALE_LINK_ERROR=yes # *grr*
 %license COPYING
 # Package the example conf file as documentation. Like this we're sure that we will
 # not introduce conflicts with this version of the library and future ones.
-%doc p11-kit/pkcs11.conf.example
+%doc pkcs11.conf.example
 %doc AUTHORS ChangeLog NEWS README
 %dir %{_sysconfdir}/pkcs11
 %dir %{_sysconfdir}/pkcs11/modules/