Teo En Ming's Guide to Configuring SSL VPN for Cisco ASA 5506-X Firepower Firewall with Let’s Enc rypt SSL Certificates, LDAP/Active Directory Primary Authenti cation and Duo 2FA Secondary Authentication
Turritopsis Dohrnii Teo En Ming <[email protected]> Mon, 03 Aug 2020 18:47:14 +0800
| Newsgroups | gmane.linux.lfs.general |
|---|---|
| Message-ID | <[email protected]> |
U3ViamVjdDogVGVvIEVuIE1pbmcncyBHdWlkZSB0byBDb25maWd1cmluZyBTU0wgVlBOIGZvciBD aXNjbyBBU0EgNTUwNi1YIApGaXJlcG93ZXIgRmlyZXdhbGwgd2l0aCBMZXTigJlzIEVuY3J5cHQg U1NMIENlcnRpZmljYXRlcywgTERBUC9BY3RpdmUgCkRpcmVjdG9yeSBQcmltYXJ5IEF1dGhlbnRp Y2F0aW9uIGFuZCBEdW8gMkZBIFNlY29uZGFyeSBBdXRoZW50aWNhdGlvbgoKQXV0aG9yOiBNci4g VHVycml0b3BzaXMgRG9ocm5paSBUZW8gRW4gTWluZyAoVGFyZ2V0ZWQgSW5kaXZpZHVhbCkKQ291 bnRyeTogU2luZ2Fwb3JlCkRhdGUgUHVibGlzaGVkOiAzcmQgQXVndXN0IDIwMjAgTW9uZGF5IFNp bmdhcG9yZSBUaW1lClR5cGUgb2YgUHVibGljYXRpb246IFBsYWluIFRleHQKCklOVFJPRFVDVElP Tgo9PT09PT09PT09PT0KCkNpc2NvIEFTQSBmaXJld2FsbCBhcHBsaWFuY2VzIHVzZSBvcGVuIHNv dXJjZSBzb2Z0d2FyZS4KCkNpc2NvIEFkYXB0aXZlIFNlY3VyaXR5IEFwcGxpYW5jZSBTb2Z0d2Fy ZSwgdmVyc2lvbiA5LjgKQ29weXJpZ2h0IChjKSAxOTk2LTIwMTkgYnkgQ2lzY28gU3lzdGVtcywg SW5jLgpGb3IgbGljZW5zZXMgYW5kIG5vdGljZXMgZm9yIG9wZW4gc291cmNlIHNvZnR3YXJlIHVz ZWQgaW4gdGhpcyBwcm9kdWN0LCAKcGxlYXNlIHZpc2l0Cmh0dHA6Ly93d3cuY2lzY28uY29tL2dv L2FzYS1vcGVuc291cmNlCgpUaGUgYmFzaWMgY29uZmlndXJhdGlvbiBvZiB0aGUgQ2lzY28gQVNB IDU1MDYtWCBGaXJlcG93ZXIgZmlyZXdhbGwgd2FzIApjb21wbGV0ZWQgYnkgYSBwcmV2aW91cyBJ VCBjb25zdWx0YW50IHByZXZpb3VzbHkgKGRhdGUgdW5rbm93biksIHNvIEkgCnNoYWxsIG5vdCBj b3ZlciBpdCBoZXJlLiBJIHdpbGwgY292ZXIgY29uZmlndXJhdGlvbiBvZiB0aGUgQ2lzY28gQVNB IAo1NTA2LVggRmlyZXBvd2VyIGZpcmV3YWxsIGZyb20gUGhhc2UgMSBvbndhcmRzLCBhcyBkZXNj cmliZWQgYmVsb3cuCgpUaGUgQ2lzY28gQVNBIDU1MDYtWCBGaXJlcG93ZXIgZmlyZXdhbGwgY29z dHMgYWJvdXQgU0dEJDEwMDAgaW4gClNpbmdhcG9yZSwgd2l0aCByZWZ1cmJpc2hlZCB1bml0cyBj b3N0aW5nIGFyb3VuZCBTR0QkNTAwLgoKUEhBU0UgMTogQmFzaWMgQ29uZmlndXJhdGlvbiBvZiBT U0wgVlBOIG9uIENpc2NvIEFTQSA1NTA2LVggRmlyZXBvd2VyIApGaXJld2FsbAo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KClJlZmVyZW5jZSBHdWlkZTogQ2lzY28gQVNBIEFueWNvbm5lY3QgUmVtb3Rl IEFjY2VzcyBWUE4KTGluazogCmh0dHBzOi8vbmV0d29ya2xlc3NvbnMuY29tL2Npc2NvL2FzYS1m aXJld2FsbC9jaXNjby1hc2EtYW55Y29ubmVjdC1yZW1vdGUtYWNjZXNzLXZwbgoKQ2lzY28gQVNB IGZpcmV3YWxsIENMSSBjb21tYW5kczoKCmVuYWJsZQoKY29uZmlnIHQKCllvdSBjYW4gZG93bmxv YWQgQ2lzY28gQW55Q29ubmVjdCBTZWN1cmUgTW9iaWxpdHkgQ2xpZW50IHZlcnNpb24gCjMuMS4w MzEwMyBhdCB0aGUgZm9sbG93aW5nIGxpbmsuCgpodHRwOi8vd3d3LmZpcmV3YWxsLmN4L2Rvd25s b2Fkcy9kb2NfZGV0YWlscy85OC1hbnljb25uZWN0LXNlY3VyZS1tb2JpbGl0eS1jbGllbnQtd2lu LW1hYy1saW51eC5odG1sP3RtcGw9Y29tcG9uZW50CgpJbnN0YWxsIEZpbGV6aWxsYSBGVFAgc2Vy dmVyIG9uIHRoZSBBY3RpdmUgRGlyZWN0b3J5IERvbWFpbiBDb250cm9sbGVyLgoKQ3JlYXRlIGZ0 cCB1c2VybmFtZSDigJxhbm9ueW1vdXPigJ0gd2l0aCBlbXB0eSBwYXNzd29yZC4KCmNvcHkgZnRw Oi8vYW5vbnltb3VzQDxJUCBhZGRyZXNzIG9mIEZUUCBzZXJ2ZXI+LyAKYW55Y29ubmVjdC13aW4t My4xLjAzMTAzLWs5LnBrZwoKZGVsZXRlIGZsYXNoOmZpbGVuYW1lLnBrZwoKY29uZmlnIHQKCndl YnZwbgoKYW55Y29ubmVjdCBpbWFnZSBmbGFzaDovYW55Y29ubmVjdC13aW4tMy4xLjAzMTAzLWs5 LnBrZwoKZW5hYmxlIG91dHNpZGUKCmFueWNvbm5lY3QgZW5hYmxlCgpzeXNvcHQgY29ubmVjdGlv biBwZXJtaXQtdnBuCgpodHRwIHJlZGlyZWN0IE9VVFNJREUgODAKCmlwIGxvY2FsIHBvb2wgVlBO X1BPT0wgMTkyLjE2OC4xNjguMTAwLTE5Mi4xNjguMTY4LjIwMCBtYXNrIAoyNTUuMjU1LjI1NS4w CgoxOTIuMTY4LjE2OC4wIGlzIHRoZSBWUE4gUG9vbC4KCmFjY2Vzcy1saXN0IFNQTElUX1RVTk5F TCBzdGFuZGFyZCBwZXJtaXQgMTkyLjE2OC4xLjAgMjU1LjI1NS4yNTUuMAoKMTkyLjE2OC4xLjAg aXMgdGhlIGluc2lkZSBuZXR3b3JrIGJlaGluZCB0aGUgQ2lzY28gQVNBIGZpcmV3YWxsLgoKZ3Jv dXAtcG9saWN5IEFOWUNPTk5FQ1RfUE9MSUNZIGludGVybmFsCgpncm91cC1wb2xpY3kgQU5ZQ09O TkVDVF9QT0xJQ1kgYXR0cmlidXRlcwoKdnBuLXR1bm5lbC1wcm90b2NvbCBzc2wtY2xpZW50IHNz bC1jbGllbnRsZXNzCgpzcGxpdC10dW5uZWwtcG9saWN5IHR1bm5lbHNwZWNpZmllZAoKc3BsaXQt dHVubmVsLW5ldHdvcmstbGlzdCB2YWx1ZSBTUExJVF9UVU5ORUwKCmRucy1zZXJ2ZXIgdmFsdWUg OC44LjguOAoKd2VidnBuCgphbnljb25uZWN0IGtlZXAtaW5zdGFsbGVyIGluc3RhbGxlZAoKYW55 Y29ubmVjdCBhc2sgbm9uZSBkZWZhdWx0IGFueWNvbm5lY3QKCmFueWNvbm5lY3QgZHBkLWludGVy dmFsIGNsaWVudCAzMAoKZXhpdAoKdHVubmVsLWdyb3VwIE1ZX1RVTk5FTCB0eXBlIHJlbW90ZS1h Y2Nlc3MKCnR1bm5lbC1ncm91cCBNWV9UVU5ORUwgZ2VuZXJhbC1hdHRyaWJ1dGVzCgpkZWZhdWx0 LWdyb3VwLXBvbGljeSBBTllDT05ORUNUX1BPTElDWQoKYWRkcmVzcy1wb29sIFZQTl9QT09MCgpl eGl0Cgp0dW5uZWwtZ3JvdXAgTVlfVFVOTkVMIHdlYnZwbi1hdHRyaWJ1dGVzCgpncm91cC1hbGlh cyBURU9fRU5fTUlOR19DT1JQT1JBVElPTl9TU0xfVlBOX1VTRVJTIGVuYWJsZQoKdXNlcm5hbWUg dGVvLWVuLW1pbmcgcGFzc3dvcmQgcGFzc3dvcmQKCnVzZXJuYW1lIHRlby1lbi1taW5nIGF0dHJp YnV0ZXMKCnNlcnZpY2UtdHlwZSByZW1vdGUtYWNjZXNzCgpjb3B5IHJ1biBzdGFydAoKUEhBU0Ug MjogSW5zdGFsbGluZyA5MC1kYXkgRnJlZSBMZXQncyBFbmNyeXB0IFNTTCBDZXJ0aWZpY2F0ZSBv biBDaXNjbyAKQVNBIDU1MDYtWCBGaXJlcG93ZXIgRmlyZXdhbGwgU1NMIFZQTgo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KCnNob3cgZmxhc2gKCkNo ZWNrIGZvciBhc2RtLXh4eC5iaW4KCkdvIHRvIGh0dHBzOi8vPElQIGFkZHJlc3Mgb2YgQ2lzY28g QVNBIDU1MDYtWCBmaXJld2FsbD4KCkluc3RhbGwgSmF2YSBXZWIgU3RhcnQKCkluc3RhbGwgQVNE TSBMYXVuY2hlcgoKT24gdGhlIENpc2NvIEFTRE06CgpEZXZpY2UgSVAgYWRkcmVzcyAvIE5hbWU6 IDxwcml2YXRlIElQIGFkZHJlc3Mgb2YgQ2lzY28gQVNBIDU1MDYtWCAKZmlyZXdhbGw+ClVzZXJu YW1lOiA8ZW1wdHk+ClBhc3N3b3JkOiBjaXNjbyA8ZGVmYXVsdCBwYXNzd29yZD4KCkZvbGxvdyB0 aGUgcmVzdCBvZiB0aGUgaW5zdHJ1Y3Rpb25zIGF0IHRoZSBmb2xsb3dpbmcgbGluay4KClJlZmVy ZW5jZSBHdWlkZTogSU5TVEFMTElORyBBIEZSRUUgQ0VSVElGSUNBVEUgT04gQSBDSVNDTyBBU0Eg RklSRVdBTEwgCkZPUiBBTllDT05ORUNUCkxpbms6IApodHRwczovL3d3dy5pcGNvbmZpZ3ouY29t L2luc3RhbGxpbmctYS1mcmVlLWNlcnRpZmljYXRlLW9uLWEtY2lzY28tYXNhLWZpcmV3YWxsLWZv ci1hbnljb25uZWN0LwoKY29weSBydW4gc3RhcnQKCmNvbmZpZyB0CgpwYWdlciAwCgpzaG93IHJ1 bgoKUEhBU0UgMzogQ29uZmlndXJlIExEQVAvQWN0aXZlIERpcmVjdG9yeSBQcmltYXJ5IEF1dGhl bnRpY2F0aW9uIGZvciAKQ2lzY28gQVNBIDU1MDYtWCBTU0wgVlBOCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09CgpSZWZlcmVuY2UgR3VpZGU6IENvbmZpZ3VyZSBMREFQIEF1dGhl bnRpY2F0aW9uIGZvciBXZWJWUE4gVXNlcnMKTGluazogCmh0dHBzOi8vd3d3LmNpc2NvLmNvbS9j L2VuL3VzL3N1cHBvcnQvZG9jcy9zZWN1cml0eS9hc2EtNTUwMC14LXNlcmllcy1uZXh0LWdlbmVy YXRpb24tZmlyZXdhbGxzLzk4NjI1LWFzYS1sZGFwLWF1dGhlbnRpY2F0aW9uLmh0bWwKCmRzcXVl cnkgdXNlciAtc2FtaWQgYWRtaW5pc3RyYXRvcgoiQ049QWRtaW5pc3RyYXRvcixDTj1Vc2VycyxE Qz10ZW8tZW4tbWluZy1jb3JwLERDPWNvbSIKCmVuYWJsZQoKY29uZmlndXJlIHRlcm1pbmFsCgph YWEtc2VydmVyIExEQVBfU1JWX0dSUCBwcm90b2NvbCBsZGFwCgphYWEtc2VydmVyIExEQVBfU1JW X0dSUCAoaW5zaWRlXzEpIGhvc3QgPHByaXZhdGUgSVAgYWRkcmVzcyBvZiBBRCBEQyAKc2VydmVy PgoKbGRhcC1iYXNlLWRuIGRjPXRlby1lbi1taW5nLWNvcnAsZGM9Y29tCgpsZGFwLWxvZ2luLWRu IGNuPWxkYXBhZG1pbixjbj11c2VycyxkYz10ZW8tZW4tbWluZy1jb3JwLGRjPWNvbQoKbGRhcC1s b2dpbi1wYXNzd29yZCBwYXNzd29yZAoKbGRhcC1uYW1pbmctYXR0cmlidXRlIHNBTUFjY291bnRO YW1lCgpsZGFwLXNjb3BlIHN1YnRyZWUKCnNlcnZlci10eXBlIG1pY3Jvc29mdAoKZXhpdAoKdHVu bmVsLWdyb3VwIE1ZX1RVTk5FTCBnZW5lcmFsLWF0dAoKYXV0aGVudGljYXRpb24tc2VydmVyLWdy b3VwIExEQVBfU1JWX0dSUAoKVGVzdGluZyBMREFQIEF1dGhlbnRpY2F0aW9uIGluIFBoYXNlIDMK PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KCmRlYnVnIGxkYXAgMjU1Cgp0 ZXN0IGFhYS1zZXJ2ZXIgYXV0aGVudGljYXRpb24gTERBUF9TUlZfR1JQIGhvc3QgPElQIGFkZHJl c3Mgb2YgQUQgREMgCnNlcnZlcj4gdXNlcm5hbWUgYWRtaW5pc3RyYXRvciBwYXNzd29yZCBwYXNz d29yZAoKVHJvdWJsZXNob290aW5nIGZvciBQaGFzZSAzCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT0KClsxXSBUcm91Ymxlc2hvb3RpbmcgTERBUCBDb25uZWN0aW9ucyB0byBBY3RpdmUgRGly ZWN0b3J5IFVzaW5nIEFwYWNoZSAKRGlyZWN0b3J5IFN0dWRpbwpMaW5rOiAKaHR0cHM6Ly93d3cu amFtZi5jb20vamFtZi1uYXRpb24vYXJ0aWNsZXMvMjI0L3Ryb3VibGVzaG9vdGluZy1sZGFwLWNv bm5lY3Rpb25zLXRvLWFjdGl2ZS1kaXJlY3RvcnktdXNpbmctYXBhY2hlLWRpcmVjdG9yeS1zdHVk aW8KClsyXSBDaXNjbyDigJMgTERBUCBBQUEgRXJyb3Ig4oCYQUFBIFNlcnZlciBoYXMgYmVlbiBy ZW1vdmVk4oCdCkxpbms6IGh0dHBzOi8vd3d3LnBldGVuZXRsaXZlLmNvbS9LQi9BcnRpY2xlLzAw MDEyNzEKClszXSBBU0EgOS44LCBCcmlkZ2UgZ3JvdXBzLCBhbmQgTERBUCBhdXRoZW50aWNhdGlv bgpMaW5rOiAKaHR0cHM6Ly93d3cucmVkZGl0LmNvbS9yL0Npc2NvL2NvbW1lbnRzLzgwcWV6aS9h c2FfOThfYnJpZGdlX2dyb3Vwc19hbmRfbGRhcF9hdXRoZW50aWNhdGlvbi8KCkluIHRoaXMgZGlz Y3Vzc2lvbiwgYSBDaXNjbyBBU0Egc29mdHdhcmUgYnVnIGhhcyBiZWVuIGZvdW5kIHdoaWNoIApw cmV2ZW50cyB0aGUgQ2lzY28gQVNBIGZpcmV3YWxsIGZyb20gY29tbXVuaWNhdGluZyB3aXRoIHRo ZSBMREFQIApzZXJ2ZXIvQWN0aXZlIERpcmVjdG9yeSBEb21haW4gQ29udHJvbGxlci4gVG8gcmVz b2x2ZSB0aGlzIGlzc3VlLCBhIApmaXJtd2FyZSB1cGdyYWRlIGlzIHJlcXVpcmVkLgoKClBIQVNF IDQ6IEhvdyB0byBJbnN0YWxsIER1byAyRkEgU2Vjb25kYXJ5IEF1dGhlbnRpY2F0aW9uIGZvciBD aXNjbyBBU0EgCjU1MDYtWCBTU0wgVlBOCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KCkZv bGxvdyB0aGUgRHVvIEF1dGhlbnRpY2F0aW9uIHNldHVwIGluc3RydWN0aW9ucyBhdCB0aGUgZm9s bG93aW5nIGxpbmsuCgpSZWZlcmVuY2UgR3VpZGU6IENpc2NvIEFTQSBTU0wgVlBOIGZvciBCcm93 c2VyIGFuZCBBbnlDb25uZWN0Ckxpbms6IGh0dHBzOi8vZHVvLmNvbS9kb2NzL2Npc2NvYXNhLWxk YXAKClRoZW4gZm9sbG93IHRoZSBndWlkZSBiZWxvdy4KClJlZmVyZW5jZSBHdWlkZTogQ0lTQ08g QVNBIEVuYWJsZSBETlMgTG9va3VwIFByb2JsZW0KTGluazogCmh0dHBzOi8vY29tbXVuaXR5LmNp c2NvLmNvbS90NS9uZXR3b3JrLXNlY3VyaXR5L2Npc2NvLWFzYS1lbmFibGUtZG5zLWxvb2t1cC1w cm9ibGVtL3RkLXAvMTc2NDczNgoKY29uZiB0CgpkbnMgZG9tYWluLWxvb2t1cCBPdXRzaWRlCgpk bnMgc2VydmVyLWdyb3VwIERlZmF1bHRETlMKCm5hbWUtc2VydmVyIDguOC44LjgKCm5hbWUtc2Vy dmVyIDguOC40LjQKCmV4aXQKClBoYXNlIDU6IFVwZ3JhZGUgRmlybXdhcmUgYW5kIEFTRE0gb2Yg Q2lzY28gQVNBIDU1MDYtWCBGaXJlcG93ZXIgCkZpcmV3YWxsCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KCmNv cHkgcnVuIHN0YXJ0CgpGb2xsb3cgdGhlIHJlc3Qgb2YgdGhlIGluc3RydWN0aW9ucyBhdCB0aGUg Zm9sbG93aW5nIGxpbmsuCgpSZWZlcmVuY2UgR3VpZGU6IEFTQSA5LnggOiBVcGdyYWRlIGEgU29m dHdhcmUgSW1hZ2UgdXNpbmcgQVNETSBvciBDTEkgCkNvbmZpZ3VyYXRpb24gRXhhbXBsZQpMaW5r OiAKaHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZW4vdXMvc3VwcG9ydC9kb2NzL3NlY3VyaXR5L2Fz YS01NTAwLXgtc2VyaWVzLW5leHQtZ2VuZXJhdGlvbi1maXJld2FsbHMvMjAwMTQyLUFTQS05LXgt VXBncmFkZS1hLVNvZnR3YXJlLUltYWdlLXVzaW5nLmh0bWwKClBoYXNlIDY6IENvbmZpZ3VyZSBO QVQgRXhlbXB0aW9uIG9uIHRoZSBDaXNjbyBBU0EgNTUwNi1YIEZpcmV3YWxsCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09CgpX aHkgZG8gd2UgbmVlZCB0byBjb25maWd1cmUgTkFUIGV4ZW1wdGlvbiBvbiB0aGUgQ2lzY28gQVNB IDU1MDYtWCAKRmlyZXBvd2VyIGZpcmV3YWxsPyBCZWNhdXNlIG90aGVyd2lzZSwgdGhlIENpc2Nv IEFueUNvbm5lY3QgU2VjdXJlIApNb2JpbGl0eSBDbGllbnQgY2Fubm90IGFjY2VzcyB0aGUgcmVt b3RlIExBTgpiZWhpbmQgdGhlIENpc2NvIEFTQSBmaXJld2FsbC4KCmFjY2Vzcy1saXN0IE5BVC1F WEVNUFQgZXh0ZW5kZWQgcGVybWl0IGlwIDE5Mi4xNjguMS4wIDI1NS4yNTUuMjU1LjAgCjE5Mi4x NjguMTY4LjAgMjU1LjI1NS4yNTUuMAoKb2JqZWN0IG5ldHdvcmsgb2JqLXZwbl9pcF9hZGRyZXNz X3Bvb2wKCnN1Ym5ldCAxOTIuMTY4LjE2OC4wIDI1NS4yNTUuMjU1LjAKCm5hdCAoaW5zaWRlXzEs b3V0c2lkZSkgc291cmNlIHN0YXRpYyBhbnkgYW55IGRlc3RpbmF0aW9uIHN0YXRpYyAKb2JqLXZw bl9pcF9hZGRyZXNzX3Bvb2wgb2JqLXZwbl9pcF9hZGRyZXNzX3Bvb2wKCm5vIGFjY2Vzcy1saXN0 IFNQTElUX1RVTk5FTCBzdGFuZGFyZCBwZXJtaXQgMTkyLjE2OC4xLjAgMjU1LjI1NS4yNTUuMAoK TVVTVCBSRUFEIEFSVElDTEVTIEZPUiBQSEFTRSA2Cj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQoKWzFdIFF1aWNrIGd1aWRlOiBBbnlDb25uZWN0IENsaWVudCBWUE4gb24gQ2lzY28gQVNB IDU1MDUKTGluazogCmh0dHBzOi8vd3d3LnRlY2hyZXB1YmxpYy5jb20vYmxvZy9zbWItdGVjaG5v bG9naXN0L3F1aWNrLWd1aWRlLWFueWNvbm5lY3QtY2xpZW50LXZwbi1vbi1jaXNjby1hc2EtNTUw NS8KClFVT1RFOgoKIkRvIG5vdCB1c2UgdGhlIHNhbWUgc3VibmV0IGFzIHlvdXIgaW5zaWRlIG5l dHdvcmsuIFNvLCBpZiB5b3UncmUgdXNpbmcgCjE5Mi4xNjguMTAwLjAvMjQgZm9yIHRoZSBpbnNp ZGUsIHVzZSAxOTIuMTY4LjEwNC4wLzI0IGZvciB5b3VyIFZQTiAKcG9vbC4iCgpbMl0gSG93IHRv IGNvbmZpZ3VyZSBOQVQgRXhlbXB0aW9uIGluIHZlcnNpb24gOC4zIGZvciBWUE4gaW4gQ2lzY28g QVNBPwpMaW5rOiAKaHR0cDovL25ldHdvcmtxbmEuY29tL2hvdy10by1jb25maWd1cmUtbmF0LWV4 ZW1wdGlvbi1pbi12ZXJzaW9uLTgtMy1mb3ItdnBuLWluLWNpc2NvLWFzYS8KClBoYXNlIDc6IENv bmZpZ3VyaW5nIER5bmFtaWMgRE5TIChERE5TKQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KClRoZSBDaXNjbyBBU0EgNTUwNi1YIEZpcmVwb3dlciBGaXJld2FsbCBkb2Vz IG5vdCBzdXBwb3J0IER5bmFtaWMgRE5TIAp1cGRhdGUgdXNpbmcgdGhlIEhUVFAgUE9TVCBtZXRo b2QuIFRoZSBDaXNjbyBBU0Egb25seSBzdXBwb3J0cyBERE5TIAp1cGRhdGUgdXNpbmcgdGhlIElu dGVybmV0IEVuZ2luZWVyaW5nIFRhc2sgRm9yY2UgKElFVEYpIG1ldGhvZC4KClNpbmNlIHRoZSBD aXNjbyBBU0EgZG9lcyBub3Qgc3VwcG9ydCB0aGUgSFRUUCBQb3N0IG1ldGhvZCwgaXQgQ0FOTk9U IAp3b3JrIHdpdGggTk8tSVAgYW5kIER5bkROUyBERE5TIHNlcnZpY2UgcHJvdmlkZXJzLgoKVGhl IGZvbGxvd2luZyBhcmUgdGhlIHJlc3VsdHMgb2YgbXkgcmVzZWFyY2ggb24gdGhlIEludGVybmV0 OgoKWzAxXSBXaXRoIGl0cyBzb2xlIHJlbGlhbmNlIG9uIHRoZSBJRVRGIG1ldGhvZCwgd2Vic2l0 ZXMgc3VjaCBhcyAKRHluRG5zLm9yZyBjYW5ub3QgYmUgdXBkYXRlZCB1c2luZyB0aGUgQVNBLCBo b3dldmVyIHN1cHBvcnQgaGFzIGJlZW4gCmFkZGVkIGZvciBIVFRQUyB1c2luZyBwb3J0IDQ0My4K Ckxpbms6IApodHRwczovL3d3dy5nbG9iYWxrbm93bGVkZ2UuY29tL2NhLWVuL3Jlc291cmNlcy9y ZXNvdXJjZS1saWJyYXJ5L2FydGljbGVzL2ltcGxlbWVudGluZy1keW5hbWljLWRucy1vbi1jaXNj by1pb3Mtcm91dGVyLWFuZC1hc2EvCgpbMDJdIElmIHlvdSdyZSBhc2tpbmcgaWYgeW91IGNhbiBn ZXQgdGhlIEFTQTU1MDUgdG8gInJlZ2lzdGVyIiB3aXRoIApkeW5kbnMsIHRoZSBhbnN3ZXIgaXMg bm8uIEhvd2V2ZSwgaXQgYXBwZWFycyB0aGF0IHNvbWVvbmUgZ290IGEgZmVhdHVyZSAKcmVxdWVz dCBhZGRlZCwgdGhvdWdoLCB1bmRlciBDaXNjbyBCdWdJRCBDU0NzbDQ2NzgyIC4gKElmIHlvdSBk b24ndCBoYXZlIAphIENpc2NvIHNlcnZpY2UgY29udHJhY3QsIHlvdSBjYW4ndCB2aWV3IHRoZSBk ZXRhaWxzKS4gSG93ZXZlciwgaXQgbG9va3MgCmxpa2UgaXQgaGFzIGFuIGV4dHJlbWVseSBsb3cg cHJpb3JpdHkgYW5kIEkgd291bGRuJ3QgZXhwZWN0IGl0IHRvIGJlIAphZGRlZCBhbnl0aW1lIHNv b24uCgpMaW5rOiAKaHR0cHM6Ly9zZXJ2ZXJmYXVsdC5jb20vcXVlc3Rpb25zLzI3MjgyNS9keW5k bnMtdXBkYXRpbmctaXAtYWRkcmVzcy12aWEtY2lzY28tYXNhLTU1MDUKClBST1BPU0VEIFdPUktB Uk9VTkQgU09MVVRJT04gRk9SIFBIQVNFIDcKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQoKSSB3b3VsZCBwcm9wb3NlIGluc3RhbGxpbmcgRHluYW1pYyBETlMgdXBkYXRl ciBjbGllbnQgc29mdHdhcmUgb24gQUQgREMgCnNlcnZlciBvciBhbnkgb2YgeW91ciBvZmZpY2Ug Y29tcHV0ZXJzIHdoaWNoIGFyZSBwZXJtYW5lbnRseSBwb3dlcmVkIG9uLgoKQUNUVUFMIFNPTFVU SU9OIEZPUiBQSEFTRSA3Cj09PT09PT09PT09PT09PT09PT09PT09PT09PQoKU2lnbiB1cCBmb3Ig ZnJlZSBOby1JUCBhY2NvdW50LgoKQ3JlYXRlIGhvc3RuYW1lIHRlby1lbi1taW5nLWNvcnAuZGRu cy5uZXQsIGFuZCBwb2ludCBpdCB0byBwdWJsaWMgSVAgCmFkZHJlc3Mgb2YgdGhlIENpc2NvIEFT QSBmaXJld2FsbC4KCkluc3RhbGwgbm8taXAgZHluYW1pYyB1cGRhdGUgY2xpZW50IChkdWMpIGlu IGFueSAyNHg3IGNvbXB1dGVyIGJlaGluZCAKdGhlIENpc2NvIEFTQSBmaXJld2FsbC4KCkNyZWF0 ZSBETlMgQ05BTUUgcmVjb3JkIHNzbHZwbi50ZW8tZW4tbWluZy1jb3JwLmNvbSBhbmQgcG9pbnQg aXQgdG8gCnRlby1lbi1taW5nLWNvcnAuZGRucy5uZXQKClBoYXNlIDg6IFN5bmNocm9uaXppbmcg VXNlcnMgZnJvbSBBY3RpdmUgRGlyZWN0b3J5IHRvIER1bwo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KCkZvbGxvdyB0aGUgc2V0dXAgaW5z dHJ1Y3Rpb25zIGF0IHRoZSBmb2xsb3dpbmcgbGluay4KClJlZmVyZW5jZSBHdWlkZTogU3luY2hy b25pemluZyBVc2VycyBmcm9tIEFjdGl2ZSBEaXJlY3RvcnkKTGluazogaHR0cHM6Ly9kdW8uY29t L2RvY3MvYWRzeW5jCgpkc3F1ZXJ5IHVzZXIgLXNhbWlkIHRlb2VubWluZwoiQ049VHVycml0b3Bz aXMgRG9ocm5paSBUZW8gRW4gCk1pbmcsT1U9VXNlcnMsT1U9U2luZ2Fwb3JlLERDPXRlby1lbi1t aW5nLWNvcnAsREM9Y29tIgoKUGhhc2UgOTogRW5yb2xsaW5nIFVzZXJzIGF0IER1bwo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09CgpSZWZlcmVuY2UgR3VpZGU6IEVucm9sbGluZyBVc2Vy cyBhdCBEdW8KTGluazogaHR0cHM6Ly9kdW8uY29tL2RvY3MvZW5yb2xsaW5nLXVzZXJzCgpEdW8g QWRtaW4gUGFuZWwgTG9naW4KTGluazogaHR0cHM6Ly9hZG1pbi5kdW9zZWN1cml0eS5jb20vCgpQ aGFzZSA5IGlzIHRoZSBmaW5hbCBwaGFzZS4KCj09PUVPRj09PQoKCgoKCgoKCi0tLS0tQkVHSU4g RU1BSUwgU0lHTkFUVVJFLS0tLS0KClRoZSBHb3NwZWwgZm9yIGFsbCBUYXJnZXRlZCBJbmRpdmlk dWFscyAoVElzKToKCltUaGUgTmV3IFlvcmsgVGltZXNdIE1pY3Jvd2F2ZSBXZWFwb25zIEFyZSBQ cmltZSBTdXNwZWN0IGluIElsbHMgb2YKVS5TLiBFbWJhc3N5IFdvcmtlcnMKCkxpbms6IApodHRw czovL3d3dy5ueXRpbWVzLmNvbS8yMDE4LzA5LzAxL3NjaWVuY2Uvc29uaWMtYXR0YWNrLWN1YmEt bWljcm93YXZlLmh0bWwKCioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqCgpTaW5n YXBvcmVhbiBNci4gVHVycml0b3BzaXMgRG9ocm5paSBUZW8gRW4gTWluZydzIEFjYWRlbWljClF1 YWxpZmljYXRpb25zIGFzIGF0IDE0IEZlYiAyMDE5IGFuZCByZWZ1Z2VlIHNlZWtpbmcgYXR0ZW1w dHMgYXQgdGhlIApVbml0ZWQgTmF0aW9ucyBSZWZ1Z2VlIEFnZW5jeSBCYW5na29rICgyMSBNYXIg MjAxNyksIGluIFRhaXdhbiAoNSBBdWcgCjIwMTkpIGFuZCBBdXN0cmFsaWEgKDI1IERlYyAyMDE5 IHRvIDkgSmFuIDIwMjApOgoKWzFdIGh0dHBzOi8vdGR0ZW1jZXJ0cy53b3JkcHJlc3MuY29tLwoK WzJdIGh0dHBzOi8vdGR0ZW1jZXJ0cy5ibG9nc3BvdC5zZy8KClszXSBodHRwczovL3d3dy5zY3Jp YmQuY29tL3VzZXIvMjcwMTI1MDQ5L1Rlby1Fbi1NaW5nCgotLS0tLUVORCBFTUFJTCBTSUdOQVRV UkUtLS0tLQotLSAKaHR0cDovL2xpc3RzLmxpbnV4ZnJvbXNjcmF0Y2gub3JnL2xpc3RpbmZvL2xm cy1jaGF0CkZBUTogaHR0cDovL3d3dy5saW51eGZyb21zY3JhdGNoLm9yZy9ibGZzL2ZhcS5odG1s ClVuc3Vic2NyaWJlOiBTZWUgdGhlIGFib3ZlIGluZm9ybWF0aW9uIHBhZ2UK