From b9bf021971709b414f8fef9784781158bbe75140 Mon Sep 17 00:00:00 2001 From: Thomas Nymand Date: Mon, 27 Jul 2026 15:25:48 +0200 Subject: [PATCH 1/5] REF-24: Refresh DevTest4 STS TLS chain and renew STS signing cert The DevTest4 STS TLS certificate rotated from the Sectigo RSA DV / UserTrust chain to the new Sectigo Public Server Authentication hierarchy, and the STS token-signing certificate (NemLog-in IdP - Test) expired 2026-03-12. Both broke the SOAP/REST scenarios at the WSC->STS call (No X509TrustManager / PKIX path building failed / expired token signer). - ssl-trust.jks (9 files): add Sectigo Public Server Authentication CA DV R36 (intermediate) + Root R46 as trust anchors, so the DevTest4 STS TLS endpoint validates. Anchoring at the CA (not the pinned leaf) survives future leaf rotations. - trust.jks (8 files): replace the expired 'sts' alias with the renewed NemLog-in IdP - Test signing cert (valid 2025-08-20 .. 2028-08-19). Verified with a live JSSE handshake against SecureTokenService.test-devtest4-nemlog-in.dk using the updated ssl-trust.jks. The legacy LBSB / ADFS (TRUST2408) truststores were left untouched (different, retired STS identity). --- .../rest-client/src/main/resources/trust.jks | Bin 7083 -> 7084 bytes .../src/main/resources/ssl-trust.jks | Bin 4610 -> 7763 bytes .../src/main/resources/trust.jks | Bin 7083 -> 7084 bytes .../service-hok/src/main/resources/trust.jks | Bin 1739 -> 1740 bytes .../src/main/resources/ssl-trust.jks | Bin 6146 -> 9299 bytes .../src/main/resources/trust.jks | Bin 11159 -> 11160 bytes .../src/main/resources/ssl-trust.jks | Bin 6236 -> 9389 bytes .../src/main/resources/trust.jks | Bin 11159 -> 11160 bytes .../src/main/resources/ssl-trust.jks | Bin 4610 -> 7763 bytes .../src/main/resources/trust.jks | Bin 11159 -> 11160 bytes .../src/test/resources/ssl-trust.jks | Bin 7471 -> 10624 bytes .../bootstrap/src/test/resources/trust.jks | Bin 11159 -> 11160 bytes .../src/test/resources/ssl-trust.jks | Bin 7093 -> 10246 bytes .../src/test/resources/trust.jks | Bin 11159 -> 11160 bytes .../src/test/resources/ssl-trust.jks | Bin 4154 -> 7307 bytes .../src/test/resources/ssl-trust.jks | Bin 5526 -> 8679 bytes .../src/test/resources/ssl-trust.jks | Bin 4154 -> 7307 bytes 17 files changed, 0 insertions(+), 0 deletions(-) diff --git a/examples/oio-idws-rest/rest-client/src/main/resources/trust.jks b/examples/oio-idws-rest/rest-client/src/main/resources/trust.jks index bc3f090790a9d5fd2e5696e14af5eb78a9379294..f32631356e695108c9b61e442bd369abad00fd1e 100755 GIT binary patch delta 978 zcmV;@11@|X4h}P)qhe#p00mesH842<00xjSf(DE*f&{>z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq=`64z(IJFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg=0%#($Ml zHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdnYpsow z1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P&tBGf zrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGpo-$#~ z;F$QwYh7?rNj1Cx-7htDhybE zKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S31_4F6 zL*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fyFA5bu z6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSob63KK zCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMeAyoV| z9qB4k#r;ef_o3k+xXANwDG#{=evZ6D%qRq{)W`X^-P2`CP_ AZU6uP delta 926 zcmV;P17ZBEH>)?W4h}Pm>(uXa00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6}M4z(IHFf%bTF)}qUG&x!q4Kg+`GchtTGBq$XIFk?$#($}@ zl^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~H?U_#K+{^! zN9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl`NPh}@8EGyp z$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-ba1sVAKrmky zz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)olk#Cee(b-k_ znwf2Yo2+=OQ0NsJG8BF6`2$7AF|(@*YXKC1vF|gS7KGvx>Qo5pH{_|s`8K(eDhybE za4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X6vxWm)s%;x zS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#BijSb7hA9*iM zI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9nEivz`omk*b zXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hRlM|vPK@9Ot za9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e`9A1%s$VFSx z?M-q#XJCP$TAP=8NkFxu!JLb) Ai2wiq diff --git a/examples/oio-idws-soap/bootstrap-scenario/src/main/resources/ssl-trust.jks b/examples/oio-idws-soap/bootstrap-scenario/src/main/resources/ssl-trust.jks index e0f9e3f9e39247b4db1ea3f14e2d580f189ab916..849c0d69e94c5edbaa1912479522f079a971f8c9 100644 GIT binary patch delta 3054 zcmcJQcT`i!9>>!`gakts)!2G z6h)Bc0*g|li6Y{HQcO?~M5HM2f_nDs?s>cKpZD%LbMF1kZ|2T-&U}CKiIE%9=HHy# zoCASC5N?Cl@P|X0(jlHyy03Q-E;!U37vf0^^Q7V2Lg_v@svFKD3`Zl9Kp=3z71x_{ zAh^BC0e}nwAuNCxgeedMQ!9i*zz~QaIl`+)!Iq>VP{!&CET60a1Q0v+$D72j2!O%- za1h{v-wEtMKy6?MA&9X)UJMY~4)}yn$2^%|7ss0V2KdrFJ@6zzZ94@O!X5i23u_VT ze$tnUJ@!=@R*$R9Gm!2}b))+R1!Ap&g6LQ)H4-2xDnP&kL;?Z$`Z$OR5J}t+Paqy3 zA0Rsbu79T>LlP##{Kqv6^st7uSS#-TV!*|J+!+`Sg2sSTK-~UBNDMd{ludFOp%LFt zrC5A~=*~QM>srL&M?yD_*S0&)vC0fTR(J6)&laB!hF91>8M_yC`SUD8pgXc>fLX(L zsT4h0%$V zPo~2!$HjFuE$?K`5G#dby0@z82u#ep!V#?l$#r&aV{7GM_f!pheDAshjM)TDWD5TD zV4xu|D-$PW9W>tAlF2fEH#H<<>&Bkh$sRd%sQvoTXX(1l9iRNp?ZFs@m~(b^tDLW@ z4nC{kulL|8t-y(J<1z2e&*TgIO`2dCm#L$m7i-Ou`MFC;Qri52?<>n?E4^6EJaoTC zlTgT;=icJ-eJR-c;G9I)yFMajQqFdxI7W#z{7a|BPr}h<^Fhng_l{U*X&tX0CU?}B zbxO5Gbv?uBqI`a?J)K_-og9Kd!65Jz?qP5bk*UqD91zRgXWhN(pvX4qG~P^C$qw?K}z$-h#onPLBuB z+p*Ag%nKm6F9yJSk)`)FMkof zjJZXfpSw{A|8(&;R9^WBdh$SGP_ZVDx+jx;j~_K!b8YVRI}c>uIAx*6D&eg?Ctub= zVz_XY_yLPqiapD6dj(;qwAmI993L5PKPLNLE+Q@4X0e7Le7ltyD5HM8kaelJ!>G|* zBIhjll^Sb$n1C|rq`hoj>`X)tDhiu-Fd|wmlCttwpgXeWWOys+4=m`vI@qwi$jrtf zqyDyuCy?7F;M*OPP)l5zFRcXs> zpzr2fHdk|((%^H{v0IB%s9!i7oZxMYeYBCew7%-BHmNE=V(-!aK`&r-vomkq;jWu- z`Xt)KcW%*+Il3}>+x&F%s>`xYzbKRT`UGcudbz#kP#VUCgf>C zoKRW7Lvvz}MYei6am44YpH0f5Fiwt`H$OJN{P=Jb zsy^_PTqJD?#8wA91CC}prY!`^mA4p0dl(2bNo%TVbMghcv3K+pdPakC=RJT_a&Lxb zv^4&XtOZeBW>RBr6%X_nZMv@wI1$42S>t{^w!3xB9+%x;yA#HwWG*VKrd^GlM%<<% zqsAuCHc_QoUbSQv?%_iJ0EROqV21qUWJl}Jk}$T-dp-O)+AX=qEGkvavF;frbZi7> zQqcN9@mwuOqU&1CqHSFy#q{_zR`_}xL}^_k)Ateukum9)2TH@tj(RXJLp ztQ@#8TJz(F+%p=9a{4Iajl9HnpW*yfv{_{G`;FX}}2R`-UTZK=(Uown6hB zLG)M9pneAp9Ds5`^Oqv}dTFbk$kG0Sa8Axt37#D!;Lq1CSPnPxEqN61I1fJvVfuJP z6xSo!Yffiz*VT>66hCIeEnII<&J?`PAt?zN8vEthV6{hb7omiPQQe}D+1R2w!%}1p zICrX%*({WKrmIvkEQ+KPhe#ss^9<-ZlfNmIY_Ab19$SNI6y0@y2GK)ZkNyyCI=WNP zzi53}@oFDJS7a;lw3ss)U2-g+d4`}bSSp=%L*l3?Bd)O^d4N4WV_8o!K9pMD*$5eP zlrTq{JdlsQ%y%fi21-PWE8JX>IVm>))?2lQZp!<}NL_N!W}M6qHCc*Y^zsfgjcJ{4 zutSQySGlx;9x3$az^@i@d{!Gx51}QE*jBAqTF?sN^*wm)wojTeBG5wSqZF?a$6~Xm z(eemRSP6*lV0Z6<+=*8j-LA*t74`Kb4DHz0E6R-~TNwed`+@( zubqH#Rhw!7>+rR=`y5cV)I093fuPTm3cF<9Z04k>E!VT#(r8U1ZIbmWAJPmh`|W!9 z)rL)^TV4n)ddVAD4F=1QJbMe;B|@MO rv{5=I_0g3&K8UjcC*6*M1|l&RCI)8!G#PgJX1LA>OLEh`q}Bi5glOyb delta 47 zcmca?)1<=l@9n?03=9lRK+L?6r;>T|HU3OK5%b*Txz2?<1OENAmhFFiq1ExEuP*?u CHxn=b diff --git a/examples/oio-idws-soap/service-bearer/src/main/resources/trust.jks b/examples/oio-idws-soap/service-bearer/src/main/resources/trust.jks index bc3f090790a9d5fd2e5696e14af5eb78a9379294..c06b5d768d102e320890a6ce8052fcea4a328203 100644 GIT binary patch delta 978 zcmV;@11@|X4h}P)qhe_~00mesH842<00xjSf(DE*f&{>z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq=`64z(IJFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg=0%#($Ml zHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdnYpsow z1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P&tBGf zrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGpo-$#~ z;F$QwYh7?rNj1Cx-7htDhybE zKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S31_4F6 zL*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fyFA5bu z6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSob63KK zCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMeAyoV| z9qB4k#r;ef_o3k+xXANwDG#{=evZ)?W4h}Pm>(uXa00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6}M4z(IHFf%bTF)}qUG&x!q4Kg+`GchtTGBq$XIFk?$#($}@ zl^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~H?U_#K+{^! zN9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl`NPh}@8EGyp z$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-ba1sVAKrmky zz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)olk#Cee(b-k_ znwf2Yo2+=OQ0NsJG8BF6`2$7AF|(@*YXKC1vF|gS7KGvx>Qo5pH{_|s`8K(eDhybE za4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X6vxWm)s%;x zS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#BijSb7hA9*iM zI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9nEivz`omk*b zXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hRlM|vPK@9Ot za9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e`9A1%s$VFSx z?M-q#XJCP$TAP=8NkFxu!JLb) Ai2wiq diff --git a/examples/oio-idws-soap/service-hok/src/main/resources/trust.jks b/examples/oio-idws-soap/service-hok/src/main/resources/trust.jks index ae9337e5c9ab115a5a7d0a5d3c068e50d2da8d78..074acbe59058691e0ca4965f67988d177c74594a 100755 GIT binary patch delta 974 zcmV;<12O!|4a^OY7&D)vVr_*01z0XMFgXAK29Pj<28=L*1i+vJ0s#U76lh}a@#C1s zcP?z4h~Fuii>p9fDwFR7Ly?Yh8Z|IDGB7bSG%++VS{Ds6I50RdIWaRdF*7-n8Ue}sD3kv~@bb-k9zz~3? zY=ru(u|c58h{89~m<8SI%+~DIFh@gtJ;Z;8`)COrZChe)DikFtwWVo-(Z2iA-o9Xn zh{u3M>6-pFaiDwY<^bGEGSgbQAGv%{(j>!n+-ACb35POVgpck? zglCd*8^{KqZ9GIzg%NZy(IcU@+`;1!TC1xiiyfoa2pd5z+9!+ON^5KtT#dLko++-jp^y##R!5f2ro*X{-(F;8zgi&@QW-jfCa zMY%)a+Doufpd;aj+8ef#h$QGHwC-yVMwG%moyfMAl|v`}f0b2J{OJrX1bxL-)=Do5 z6+aa9FND=G#Q1GkNZIY@Opy+1hBnc)U4O=xLF=|df*g#;Hl6;>aBRlHCu}NkZ_;yD z!iFb@W=mN3&;kTAGjSMonS`mJtFgud6&B&+^!H7O&ZDjk;0q9{&yF(tU0QY~qY4|Hlx4w~K z4*L{fIGjpX)aR;8=VBqe2GEXizCPXRyJwnwhEC|l)QLuI+W}8Bi=pY88bG0E< w{52ivDpJM$Od0o~;UKuk^KU5+xfgzp(vz0=OSr*Fk_)GqFtPP=`j5SH6r%&W4*&oF delta 973 zcmV;;12X)~4a*IX7&D9O)bDcu1z0XMFgXAK29Gd;28%F)1izpI0s#U76bK4eSv6@C z1`Tk1BNU-Nhj`rPuaocuLy?Yh8Z$66F*7kTH83a1j|3O%Mmr12% z?1+e zl|q;q8BQFn&^9*3A0PAZ0?;ETA(2|h@F3VRu8 zE-lGW(LnD^hNfcP(H+#GCh;YQ5OpO6t#bF^4h+XVN52YZQa_^AjQ%1x%~Eg@1}s1@ zUl+aIPu1vjLA7XO81UMy(o?@7#rZb5li&nc ze{e3pn!;WLRTB4xw12tL(G>%m#YTa>`|6qG)sOeJ5%TrXI|7T$o$F1z))dFe-qn^nFwuwVrv?Yw~iXfnhl>P=XY#6kdRLS0!?!k!m2ZNyFU=!J^EHlse^gC3D?)?qs-mn@K%t01<)Wf2MN~L7sh?1{&BU9#)@UPo=17c`Y&Ttesfk zPG>)YKI08bJ(R9uv||y~|3D7F)O6YgT&{Apse)iEX7&-_^7&8ytMbY$F_RObB|!}F zO>kaQM9AiahME`={FuB$ZC!(lBhcCr7yW!5B&=s=2)YIuHKsOXx`WT)aU5Qef5=5! z(d|ugJZE5mp<0`ldPzXKB;_Q{O6`P5EidUTv4(8RHPx?pP>&dV)DcW^+PNI<-%c45 zbMj1ROE2^7NOIcDNW_VMb9w{PNr2seG^{E|6|en vif6BlYIL`TJGucY-rcJPX+9Ec7qf6&wAZSB=3-6MSUHm2V{Qv)A-L8K*M7Mo diff --git a/examples/oio-idws-soap/signature-scenario/src/main/resources/ssl-trust.jks b/examples/oio-idws-soap/signature-scenario/src/main/resources/ssl-trust.jks index 9a9830a85d2985fa7e30b88c4c7a171693a1ccd2..256fe682a76d2c31fd1fac2e3552a1f1e1994778 100644 GIT binary patch delta 2924 zcmcJRc{tSDAIE25lx0R^O)`Tt-KbMN!q`+I(W{C?l(Ie&c4`Fzj$oaemH>wTgy1Ezx8 zbK7$O006{okQ%|a5{$2bY>+2~=5sax9T@D64)Uaicv8{iV463YLPmRpps9EQ007Lp zb_5lnGG>>5`D6`72(tG`jA_h@ z5D+NH3&6Ny1u%OdU|SxD2*|_$D~S=`4H*0)uv6a_N1FNg`OrK)ump_S?hsf6{qGUW zVE6Mr6y&L|l_B-Hm3jKpd?;j^Pk=wtIv{|Cv{oZvWF&-eSPUMA!+iZ5C4}$N=UFMi&MxU#@1ea$EF9z~fIJ_8r7;$rBmM+vC-os+l z@ZTtgj}+49dz;5YX~r%cp<6~)Ca=gdtFJAL_edZe7TN8wfrFJcbFU;%hO3@trngHb zvNdDqO{@a)FfwZoRxD}Hh;SRi?NcQ`cK)GjcFzT;oguM>ol9XRe8Q}doP#cO&lKgo zV+Yb4e?Bdxr)70NZ3bT{BG)-1lU6tjH$&XAPbH_x5~Au z>cA_gbNY{OQ}dj0rO)>Kv_ZTs*rWxNbDcT~c)ivvlbgL1kI)em{#aQqU+KkU5#Cb%$TjAo8(5h!&n8i5zTgR=OyZKP5Hej-}&2A2Y#~kxL zhLmrTZyaOjO``>Bsj5<_=Tl_`L>0cN=bJYFD$QMGa)qg~o4Lxb`(I=RYEV)g1r9U* zdUwE4ARxefAnNm(=92{=388i}IsM@&`IMR>WXm%NC+#Mse6n3$jnw`hKJi)CD;g|siro~wOPQZ5&FB4+`711^ z{0uFD6&Fyb#i!xPU_TUujntIPz5U<;%^4#t)L6&9ci`m8TS^b+&*DEJMVF$lFv$}j zc4C`dA?x(eSoU}D)`Jwde+7-17Kui^@J38za?XG4@oR3OdP6KT}=ca|4J3^D+N!Nbu zGOB*zcwp>V6Xesaw59b`7qv-MAp-k=!FT$8v)i3H>y8h|VkwhwQ=hp-d&bDh$UTdT z&8x1f1A%vFYUo(_qLX7QD!FSxbb7p8fy`2<31l1k>-N7pn3V8>84?J6 zP=s}S?W1FZ_YE2UHHVM$;kA~ZgYw9%&daKw#TBEmeek}Pl!`Z#T^CFOlEjYP^{u>y z!dvJ(Pl($$&7TA=H6Ki~&YgJTpgeJig z#@a5c8GjG!|0}Dx0RMy4?vDRp7yr8oQa53;jMU~qf_3l^P(EMU#DFwUc~B?2)t)|R zs(hF(dP;aCbW6DoUG(C+^;z5-($DoxFjL)d$4r~5TxTrJf^XAO_DxZrx5WWC#ZMv2 z>`2y_VA(LdB{-Tl>WDbQ}8QMzb6*>9?J}k6#S?w zw)Fi8=s>8_@>PFr-K=q6SWY2qGl8C*jo{_TH`|_4}4Y^6pxm7Ht z$9UU)jpd9BHDHeU_So&$Gk;e0XzhLogOs+2T1~zkJq@`>fkupu!)+sqwY_SIO!Sk5 zewHX_O2{1g#o3e`l@oI0b8@-(MH*p?)XyI*vaeH zmFAWt?KrnHerjq<%Dg+iR`{aWM8}Zs*Z0jb3^01XyTPs*{H<9)cZ~oB1n%(ga9=zz zskU$hhU%FtolS^KLYhk8>~kFUTJ3_>U?cyMM;@Qc;Nu`~kFdgeD0|KM3i^(Qahc-h z3|>pOQqrZow^;-w5hD}d99yK$Q1&7i*D#`25HuTIP-j#O%>rgmH8Pq-(k^us%Y;M_ zbT32V@rOPAx-R8zBN7}m!=<8YV2u*{9?d`)J(TsxPmyLL0>bAC)&~`D_d)c;cfv19 zx)9+-r*bdh41|kilS`#fO3*Ji<|VM$V>4Fu1e0S)^_`8NQ735&sOe*c=$rhFjg>#+Crw9qw~#)I}kCRJ^!dCcP_?+-h| z>?rr$-TVO?lc;@i@3ylN)t2koZOK$d(@>jCy~?L#BddP3JR41fk9Evp8Ece zR6VxSQV@T_By&eOoOHBJ>A0JuK{;Njp;f6~BzE9x98q8U=~nR^;z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq={%B14mK9&#ErFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg|Vz z#($MlHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdn zYpsow1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P z&tBGfrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGp zo-$#~;F$QwYh7?rNj1Cx-7ht z!6I0HKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S3 z1_4F6L*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fy zFA5bu6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSo zb63KKCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMe zAyoV|9qB4k#r;ef_o3k+xXANwDG#{=evZ&BUF$(@={00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6~{1Ray_A|{h?9&#EpFf%bTF)}qUG&x!q4Kg+`GchtTGBq$X zIFtMy#($}@l^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~ zH?U_#K+{^!N9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl` zNPh}@8EGyp$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-b za1sVAKrmkyz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)ol zk#Cee(b-k_nwf2Yo2+=OQ0NsJG8BF6`2$7AF|(H%YXKC1vF|gS7KGvx>Qo5pH{_|s z`8K(e793cAa4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X z6vxWm)s%;xS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#Bi zjSb7hA9*iMI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9n zEivz`omk*bXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hR zlM|vPK@9Ota9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e` z9A1%s$VFSx?M-q#XJCP$TAP=8NkFYBx$}l<{Wgh-CABro@C%_+L5fDJbSf~&I2@yU#4j|z1z?aKjgpWYvgg87wm843t z2VDM6L7D_in(>co=;>heZ7>#`??r)&{`hBLI0zaAP6Bbp;~`PtNKhuxd6-IgH=Shm z0ir!S;@Z80#SI5O1==ND-dFPA7VbLd^qzIt9u`{MJ|AYtB`_G0yWffKk*c_Bd|$f# zuP4Q{HO%YMX9<;p(mmT%^>_w)LGHMwYGS>u>)3jE$X#VUZ=XBPeq+`F6X^m!-5+f9 z&q&8gS_O=EwWc#o-%dY~wsB?6?q&_2J=$^e$tS7$tz92|FYZGd1evmT_b6Sest&v$ zcUtHEb!xsNzVs3IFP})4d7CxB($3Q-Krhx?B=T~W6C|~G1>RMb%T#(Y8M&wd^=84K z*CSqHvi(Vzd*JMNmpk6VCX!CJqgZ;e75sCT*-t`|WeWi-Gk1@hXK0>m7$SAnm~=_D zM|3~OY9qaWu05Am4V`)dfr3HcYn;vCY|1%6lH;ZQGBA$cBG5KLcJ3MLsbbZrLom0{ zLT#aoQe`spv4=|z;NQt3!QgEejN|lJ0JRef z?!?>xg7biY(=-rLjD0)97#JEr0SE+)^9lmE5eTnHUN8gLM*zyI0pJ8tKgU5Qf&M8+Vv6%k-KoC^$2yM+K` z|9e@W8YPX3>mcLL%?XWyfI)6gqCT8zIZ+4^;a8DPP>^|9{DZeVIVFj7Km-sgsrJY= z=YMlgVl2tlpFMsWSaH)APSa*4mqcu0?U%hqb&mAW()>y>7v18}Sn28S+ z%n{yW(96*mn68r$R#Ll7(csD9@eWIwcL%~!GOd?t=t8&K82-{~Hw&0oiaHINOvSS= zfG1U$GedZ!Q5W@P%TiZ7>ao0#X(v6bHH(;$w+h{rF)z(sLA!58`_0~(J|b(M?hiVCb6Z`x8}@fxg;J+b zMn3aPwv5r$(c7lyTGpIb4iAVhsIN}3$7fa=je-$VIOq~AMnjN=Z}mw4PP{Dl8w3>qqssrdGV1 z>ON~2kSuicmT%=HIfALyjs{eY_pnrzZ!oAPeTM=3XCMk54@5z!-(V1YX)~dc z&IQ^imAx_9Re}EFk+}l{#y`;D{{;gMA-==F&HkTw^gmIM*2N>mNNX7)S_BV+WeUU% zb;%2qJM~hV9T`JLiU;XvOM%hQO~ra_@zWnR=I}4czcw@@jSh#~XIWL{IpS!hT%XOP zUKaOzo9;tV{A9C@4`nYK0j?X7bcq|>$H$H+ic5+bpDj~OtXT7BX&xV$Nrya(ixDjI zdtgfFHOo{>C5$;UF22sU8ZlbT(tGB)nJ=QQ*9kV?{d`IWiFR~Azy7i1<%b8OP_@Bl zq(UikAiCP`IdCG=A!RY}KzXY{q`Mwpvy_Ii7CVox2UDjj*E<@Jv)~RSllsy;BBgM3 zGG+ud=_&R3H5|}uu;sQs=!g&1Wsdvy+U(Ufc~o|9y)J}7PG6E+OSv9BgSbuMj~JUk zSx1y;de)Md*awRPgJ||Np9%j*M_X#ArnsR^?yI3sk*zDr}U;IEn zm3{6Yyu^+{%?TA8-s4=^sqUuYeJd9Dc`eyB4}WHbi`Z9W?Ef~NIRAb&TSz~!o!)en z)K)urdNo>B#&!f1F+*MqM!viBMm)z#zE(=>Go5GqUHIwX?S%aWd*S69Yl@M&EcM2F zpUO55Pb_zjpSXNkVSZWEhJ8Krm*)25tXmW7MNdl%8G3ZT{;xRF1+>4BW(PF?5k!9l z4e~o^-~f~Zn!hyBmqT0mRJPV022R;0{&*yDPCfccoi$&KUn?&~9n?>|eHX`3g8jtQ4I9<3g zB!9ghp)I@}eooYhgetboW1Pq93Y18tl!~7ap~p1kCl0d4XU!XkhDVbdx|$$k4&tW# zM)zf-ukswttAP?wVsgK%N}o9}2-aD%gKo)sOG{p{*P@@v3pQGgT=MktH;!ssXtd=Q zeW!F~6*XLNnhn2R$o5`qGCqouFko4OC%&vGTe);`+9%n-%2-Q?de0FOGQVeA-uX8TqDx7P>CcwBMG` zu&P}-pLy)Yn}ha98%mvvu zsn!>QOP;cN7LNm^i5`9V9pb^53JR5iK=R8ydhE;BR7VnH4~B#do|=A5CS$GDycfkZ zvW{4ZFs;}na%OSi80Dket%V844YRft!^ub56^^-x>Xs7}8ru{a1mm7uj3?=6KHMys pm;B&D8Gnqm1}EH(fIdK@XNAVjNR8#(E;TvZQ3s0|$jTSs`8PCG>p%bi delta 47 zcmZ4MdB=d~-`jt085kItfS6??PbKr_Yy5{rMD|+RTPMBQsjL2S^^~|)rEj|(e?z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq={%B14mK9&#ErFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg|Vz z#($MlHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdn zYpsow1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P z&tBGfrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGp zo-$#~;F$QwYh7?rNj1Cx-7ht z!6I0HKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S3 z1_4F6L*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fy zFA5bu6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSo zb63KKCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMe zAyoV|9qB4k#r;ef_o3k+xXANwDG#{=evZ(@={00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6~{1Ray_A|{h?9&#EpFf%bTF)}qUG&x!q4Kg+`GchtTGBq$X zIFtMy#($}@l^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~ zH?U_#K+{^!N9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl` zNPh}@8EGyp$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-b za1sVAKrmkyz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)ol zk#Cee(b-k_nwf2Yo2+=OQ0NsJG8BF6`2$7AF|(H%YXKC1vF|gS7KGvx>Qo5pH{_|s z`8K(e793cAa4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X z6vxWm)s%;xS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#Bi zjSb7hA9*iMI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9n zEivz`omk*bXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hR zlM|vPK@9Ota9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e` z9A1%s$VFSx?M-q#XJCP$TAP=8NkF5Q234N>ACklzk7fG{C?l(InVd|IiGXB=Y5{@{+w6hmOf+g z)#=q~5C{YjHaJ&22Fg~6^rtg}1HtVMrj7 zwo|rK+yS4zQ;@3+Q)U0-8s?@r3m2TD@PCQm@;~kj3aoe;OnaoB+xvdk-*3 zZ^tw3-$P6$pV2zz@PvV=mHpT6c};VwEZ*04h%Zc)ABlipc6&T@EB@@KDV9WMTo;ec z6+2Uj9xP|gbT^O0FfF~>Vpc31te(;)7oXc%ipt{L=J@wgBl>Hcrk~2~jnm!FIeAYm zlW&m1YT}jAp5Y2a3DQ}jgOaUSpLaE4gqd63gYWvBi414&qrAPVmp|_CHA{RLz7hOx)VzaMEaheLtm* zYuk=(jqiAhH$esceEmpqEp)680tJJ>=Y)qLJd`5#-<+5WXPbTtkEkTVcH$2g3kp0D*uBKS6*f0uh)X4u*gMr}ZQjW()iXP)n^! zEmO>cn9K-6U0pikkj}T_)1ill>V9+lS2KR~`=9N;?slQsb%Yavgk*%MHUbQXi-5to zR}p~vf1ehiPtO$**~%ii%@#gO zpT%6I&rDw`g?~8xJF2Mq05gM^7G7>BqVLb<-x5a+axYB3eB*~K8m7*29aCSs35wP1 z75hu4Nbhi%`J`hU+9-sd+3Hfx+dnXTZ=c%REwS18&U0Lr^tC(eFjf7FrJOV6ZI+F8 ziUr5Oqk5c)ej>`co$;c1u00L?NK@LbjTPH+ntZbOBXq;bX;sn7%)9o?-`t(~0Tgy) znPqS5$YaPgYk9R^P`uls?qhrwEbS(5?1?#jH zH83{|&f4kuVhzMRcDODjYt+x~jz|r(!aZ2Yn_ph^(i_v2AoCT>elQK4T5T^{cE3rJ z&KW~n2T#wrvIjp7Ub8#Wyy(5KqgR&AczHlDJh9MV9fcSpK<8k|hEf###2Zj}WUU)@ zW1)H2j^0;FSs9Nx(Gkd-6$JO^!NyLckm!-$i$nx(o*Ra`X%9{rKe_U&jAjy{2i?<> zbNR(s$6>4REa_cWLuyWFknD^fWu$GI5X*vIvhB}vEFQh@raiia8k(Kj2Rgc)ZBm>A zrZ@0IUfWyL>VL!q5*N2{xAnMup#tvjXuuG956{s127?R0}`Q(Z!m~D zv65cH5&DV&9;JhYk;<#z*4>-x@Tyowjx%}=5W>ajLVB*e4{vxVBQ9H*!Xlz4TbUaz`Xjg`NjMD zgHV0m6H1wi1CUf3`V`ok?~y$lv8B4jGQrPWqDjS2*H}<2(TTfZrqMMRUO3|iWKp_v z{S#COH`MG&`l@3F(~AV4%W~CsiRVd-G2;w}bh&Icv3*!|d+A0ro0>PLv6y{6X##PL zj*K4~K|9A+8UxUCray1&SRPxN|Obaa5cA6FBLM$q=n&gS_A~R77SsHU=Y$7Eg-(9m_p6vvlfT znicmgas)@V!Ykd_jKUbHflb~uZ3e!2L040NpBJ-e#l%AkBINFJo3J-&l1=1D~ zt*pkglsnf)4}MHiS95)aj-Q~;MxoxGc&%9Iq9%^;w7hMzMLn5)rTdyOHc5 zzu5A6B!9{C82+NZWtHape7L>OCF;?Vmjz@kDGRHRB4?cOK;aye*f3~P7CDtvR%cO( zEC3gdH?o_h@{V>?Do4kYcO)ayNn8CxJB}8wVl&(f;^dRKs7BdMwsgFq_0X zGYzgtxwkrJKB5Oo4+`Mt%LGA-jW)Z`%9eb`JLg)^8Zq@<1mo5ZhN?2qQuc$)fC`Ut z+b0R?2tjlONNi_k_x8e(QG-sOeJPq|rivD>{EL^XEyvU)8=vp=H~pkgc?$Kqo*A>G z+^FO#VRfZdw}i9%!t1T>C>Qz-U!O40r!kF9s;^cHGW8bf`K{TErh!)FdYyOK77o3x z-Qs%v)+#N}rRD_sFMA=OYSK~;V#n|bOZ{i@$gZIMB@#Lynq)S%R4asib};h z>j%xs8=l_jB+GFURBG6##^H2#t+kY;@3A_)rX5G!*{ZeMN6xI8q}6aot6nO#?|2%; v)ab!VT|HU3OKkw+2dU3M7d8nDSuz5AQt@2L&D9w!3; DuT2xw diff --git a/examples/oio-idws-soap/system-user-scenario-java/src/main/resources/trust.jks b/examples/oio-idws-soap/system-user-scenario-java/src/main/resources/trust.jks index 339b0129c13a3f05aca977d155620eef49f0e9da..0bdd60760a1f81f96893232cdb6434110205d732 100755 GIT binary patch delta 982 zcmV;{11bEMSD06@`W-W$qhflr00mesH842<00xjSf(DE*f&{>z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq={%B14mK9&#ErFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg|Vz z#($MlHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdn zYpsow1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P z&tBGfrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGp zo-$#~;F$QwYh7?rNj1Cx-7ht z!6I0HKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S3 z1_4F6L*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fy zFA5bu6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSo zb63KKCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMe zAyoV|9qB4k#r;ef_o3k+xXANwDG#{=evZ(@={00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6~{1Ray_A|{h?9&#EpFf%bTF)}qUG&x!q4Kg+`GchtTGBq$X zIFtMy#($}@l^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~ zH?U_#K+{^!N9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl` zNPh}@8EGyp$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-b za1sVAKrmkyz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)ol zk#Cee(b-k_nwf2Yo2+=OQ0NsJG8BF6`2$7AF|(H%YXKC1vF|gS7KGvx>Qo5pH{_|s z`8K(e793cAa4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X z6vxWm)s%;xS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#Bi zjSb7hA9*iMI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9n zEivz`omk*bXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hR zlM|vPK@9Ota9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e` z9A1%s$VFSx?M-q#XJCP$TAP=8NkF+j#2u!=X%>5HBj-&nE~M9O{7!@uG!!(QxjebYC3R9p@Q_qY+6U5V-KNThnI{ z+)+gxAcH^%OCSbe3dF$Fil7iM1R_L^@a|QxC#eWju(|^)r|JL!#E$*(Ch^MxU@$)% z1i0dN0y_{;I~YP3VyurB2Sm36K4GMd7xU}lSW~|MKf0GEo&>0Er=Y?(n{TqPmZ2Ue z{is-*ugb7`TxDK?bU&&)-7hE*YaJ9s$6BkA0BJD+0v;d|2*B6JNlbu9;)ZwvQJt(# zb^_e~PC*6+Cd>TCH4OByhW1!%?*C%IC4bx*7!HEQfKx!+{zOO&I2x2qavi1-KfF${ z`~=Z`GveO8fWr@mZXCVY;WEprF#J^8&A&8Layl4Z<@jXmPSmCK8HPYlWbYuej_+a_ zYP5tg*Vi%;PB(Jt4Bs%cGJfX%X63ns5w955ae>{D5Ij_EJNr!BJW};2E2~31g{>LS zXdWzfAHnAG;zd$`v7~hlW z^y^UxT`j9ynQw^I!m>SEHT480dQRbpwt8~CgZtQOW!N2617E+}t^s3qK@*umKiwN_ z49v>JVQhoOyIM0@7Vlp_mbG_hzuCziK6R+$+T(SZ`pq4m{m<<|8--YKcJ`>8uc-|_ zt8hZ^-W6KmaYFe+-e1|JnfqT6j>Q8SE-!zhkXY776;W%-jxbj4iI()67pR$1Cd8-~c8b!J_d z_NeY>I9;Ug&o@sO)Iz5oL!e*~_%in}xQB8Yz;L}JB?sgBEedTP;^>*Rnl4d`+7I&x zFV+<~Cqn_Gwg(7m!$e_d-!_z}xM0o0&#W?n!{x(P$9s4b0Kx4%5)9sg!MIM32T^{5Lax^ZTFezU_9d*;Tj`f#^5{uQCD*hx35J88>(U z`TssGSc96u%e#;H=i-FMK)@i6$1$IdwU`$}#01r3la%CMl>XqWNJ&c}?-c_i%4)rG ztpwlQl^#oR2;_{PKo&Li&FYQ3mP@ZI#kM{abJlKFDss0ktdrRN(?=fb21Wg)FCv%F z*Qs-}UT09zFO!ggqYSoC7-S(f`Ggq_lEUov=fc)Y_#?!(@Qv~0VDI)=!NHfEr##X$sj!fg&U}m!`f6eK(yGZ&J z%EWJW!GSrtJbJ_8bjynC(t!anChgTR&iM3Fqe&=Y3J+a?#c2tXantWXK_Rt{l%077 zfd>ZON~I=0VTA-cT}F-O9@CzcnmtD&eSbP2U8o_ z{_iXeYc-a!K7^IMb^H76zfuAFcQl}Jy@#WzeTPBg)bB8W{|v;y6M+~g?K=!Y&u=7E zGk8F2f2yQ)3?Mn~3=iSj-M+D2$Jd_%b&SNi0KwHd+-%C8O0NRtDRPC2$U1;_Dp3!X2Q zGA~N|eJ%E&r~&f1ru%ajO#t_`XomDv-XmiNl_fFarl%^@ldDz&+1f`&rZXW=6XJv` z0`6N7do8my(urfP%yVxGZAVPza}1t(Zxo7Y8gzoKc0QYuL!ys6qu>76^5WC|QK-h? zQ*yD46%bn+@C-1|c21iQ-dovf6zyps&@7{+s>3M|=)vC7SLhuL%A4~9QptT8UePl6 zTXL2}4cRHp*%ds{YqaUHI(VEAuFo3x@3r5pYxc0>?&_^DCM9!0VI}QK>@?yARWNF7 z0%aFfrtN)`%);HD9~eY)UJIBBem?F%>(rJsw$Fbxv>xrA+-nw`W)3^OTg zyQg^WCP%XSYTbf;eI&*7=rmU3S{y`aO*7N)A_bAshY3fEq4;AXUSjGl%&lJdmtyIC z!*tH+eeg0zCM_>qczBmn(y^^;OCW8_X5JnB_2{=iD}^bMAGcXH@PB)!R?Hu zOXRkjlP8vA<>eekP*KyA`B3DC^Y0|{Y!z?H=zL-DZGDJ55xSKmRkRykxwfJlt|dJOQ**9Qtd=|}GiDkv0{XwgD5z93wZGgX3T9ue^8Z_Zl{HSsNa7V@|Z-3wv*dPbBq z2(nj?pT%9%Fse}elnu9ZE2o?(e3eU55;ipU&$q+s4CgIC35}z=#UV4X#r1||g1O+l z*GuY2>L>0GHKlLetBi_r_-K7pn&ZF7wd zg5n=kE-s^ni%xLhSBg2lD@~?{P|`+h>$c0SD24EbUc65GXDwM#Xc6;4ig&4ViP_U= zc?2h{6vTJ1r%yd^Vp6lm%_d$^Ur*A|fqkv2(r8LvsOkAZFTM3WWfzd|8tCDx(oIqh z0>(A%s)ek>SKsY(LfTVrdAJ3F)~6J9$-dppO;KBFV7I5ynupt^8&p1~8CnfE^zo|= znaH$07hdp|H?V#bEKBn0E9{UA#a2;iR0L8`;o&2Hfu>tz3C>_x#Ne^lZz&X4T|HU4RmB2CV-`jw_c^uO}ST*9CBrk=~u#2Nsq CTM?oF diff --git a/integrationtest/bootstrap/src/test/resources/trust.jks b/integrationtest/bootstrap/src/test/resources/trust.jks index 339b0129c13a3f05aca977d155620eef49f0e9da..2d872b1945bd6170674032702dd84684f9b82e1c 100644 GIT binary patch delta 982 zcmV;{11bEMSD06@`W-W$qhfy@00mesH842<00xjSf(DE*f&{>z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq={%B14mK9&#ErFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg|Vz z#($MlHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdn zYpsow1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P z&tBGfrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGp zo-$#~;F$QwYh7?rNj1Cx-7ht z!6I0HKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S3 z1_4F6L*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fy zFA5bu6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSo zb63KKCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMe zAyoV|9qB4k#r;ef_o3k+xXANwDG#{=evZ(@={00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6~{1Ray_A|{h?9&#EpFf%bTF)}qUG&x!q4Kg+`GchtTGBq$X zIFtMy#($}@l^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~ zH?U_#K+{^!N9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl` zNPh}@8EGyp$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-b za1sVAKrmkyz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)ol zk#Cee(b-k_nwf2Yo2+=OQ0NsJG8BF6`2$7AF|(H%YXKC1vF|gS7KGvx>Qo5pH{_|s z`8K(e793cAa4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X z6vxWm)s%;xS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#Bi zjSb7hA9*iMI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9n zEivz`omk*bXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hR zlM|vPK@9Ota9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e` z9A1%s$VFSx?M-q#XJCP$TAP=8NkF`uo~gBV^o8WrajjH44tAP_j`y2~R? z5Zq4r06+$T5avJ>!UTwdspdiH-H+i-qcXhx{jiq){tT?8DhZGj6(HaNB7p#Wee6XAh$L=^ClC*i z50LEvm%mexA_y4ntR?q{5dDK_f3|_o&BJZGJvy{unQa=35edo;1(+-;h!gHJ9p+-D{y}?<#otW;)O528a zrP@C_F0P|tQI$GLEESUJ*et6iurM?7M>G$_SKCsDR*Hk~tLS@q-*fgIvi2WI75w>O zZ>`_uRGgHR|8QGlYOL9Z@#iu&RQBX{_P}ZFmRrxiNLO!c`|NXm7sfEqjI+H%`BGVV zz&ZJox({#Aa~uh`pYs0tg?xp-UIQ%SJbo1PdZj@!J9FWplor3>Y-zDy|h~v#`RkS#wO6t?ea>pcsY6> z%rzuWNBF!n1=zhc0I3BNfnmIw&>~{UvZtS83kkN@4_i2P@W=zmtvm`0-h{!pPLBc5 zTd~kq%nKm6F9;Zvf)~f6m?8LCyS8#z7zRKC2n3A#2?BT#2+v4)nclzmgM-%Ej#ltA7i z3Wyh$yJuJ+-#?HXO0f0g44*{h)^$zmz8aTJt|-7ZJ{5J)tXIsX+T>J-@BH~Ak7bR5 z-r}0@HOw8_%=GPC_~-QBQCY<&81cPv{`nd_YVIudeSXwn#m(urAKZ{x!<4xS%M0)A zIN7r15`DQ-#E)3aLiD*<>L`Sr&}@_6dwgKH<(Ta3p3tN;>-h?%@ZBbspN!hA+}Nx6 zt%h}G5*g>fqpGnJeFT(o8~shgd|Mp)nS!ucD>Jk)opd>S3A*j_vIn^{!Oj&P7bm(uI?G3az zZ{_B!TE;6k4nmCKq4Th_8bV~;#0QXn zV7VP-d#1kM!Jc=!6XRdR1_vPT72xe(duv${eS$}R&*I^Hc&*`Ur!+XF^|I`dh(a{J z8{OTQT=HhD{j`yPqOkTIpVCY6L^G{t@o_sQ_!6PFP5V+UvqvA>DUI%-_$FO=4hlcO z(#cK+(`wm1@68R$)t0cHgylUI`?_tuq5=DNNT74Qhoh^0CqmQyA4Guv0z|>%fG8;a zI}w5|tzRr<@_<%v%iSDpE5ZEn-rOPr>mQKt{~`hx6F-RHYX47A`kyFBY2%Y-r8M-B zEQ1EXvbhpQdXyR3y=v+8mdky{N_&}@V}gSr>q^zQf*1Q&rwDH-k80{s#s|af)2+&~ z9q|k^o;7pnHwE2ZX1mZdU%3pEeHjbJ0ChEzDS4Ck$j~7r2`Mp?(?tj3OP2lEnnzwu zq(WX^I4e}-``C=wX`ZH*OdN7%oqv~O^~!iIUH_%WdXA{Nek<5wd;gd$3ghU2dG}Mp zn@^7ip=!M^$$8QiKyqrREiyijqwAra+`n2f5N>wn6k~%NHoOC04 z0&$myj2Ie0TSpXXdQ_5QagXPEdNG`F0aN5>M_YQUri77A*4w@>k<|E3(}+Y>hw6Sz z(9i(PIH&2M!ud*$MElK(d7J7miplW_tnjU~5XDvXRPU=4L_(KT2u2jmA07I;RK=B< zl`H>JD0pm;%sI0cUTDXnXNCw3>~Jn^Rd-eOx)THZvYbfGCY)O2A$8@O_+ahgp1mOzZ>Jt69$kT|6W#G(646Opjru-%88Ig^y5LwgE1aMwSSX!zTjHoF^K4yCd@p-=(xQfBq@7sP zRtFh!kT63UKa`8U#;2WK0VSfv<$qn0Ikl%3th;On-H`K=k-BQH#XOZAWV{eL@8RiZ z64f+QYl{?{Rld4}9>_h(f#1mEcrDkNXrm5CB=qga)NcQ54r1p*;RN2^}dD? zvLacx+g8A+tXU-|_VCU3d+kv+v?^B@KhT#k`5iLvHZl@a7i-wfN%Z=GX2}}mk4Xj= zJ+@u^s(r@Njjx5~J>>K)p9RQ}+`DpGB!aLdG&&7|LdrjV<|9y7MHc7u28Z^Z7=K5h z;H=fW=EOD94_S%ET5$^H%`b#uRkSx7^DZ7SO5aopqa12hJnSN-S4>o_ZBncey72sb x99dWM$$H_m)F&6(@H3n>_~P9NsI(Yn)?}}C&t0h2$Z6@!aO1W9iPWIRe*+Y@>*W9d delta 47 zcmZn**lN!6@9n?03=9lRK+L+4r;>T|HGUZhk%V1d0liBVT_*pMnxvKX(2_^%#dZLm CG7-oC diff --git a/integrationtest/rest-bootstrap/src/test/resources/trust.jks b/integrationtest/rest-bootstrap/src/test/resources/trust.jks index 339b0129c13a3f05aca977d155620eef49f0e9da..bb9dcbdcd452edbae1e05428efccb6c74905b008 100644 GIT binary patch delta 982 zcmV;{11bEMSD06@`W-W$qhf=900mesH842<00xjSf(DE*f&{>z0|Eg80u*Rs@A2c9 z$9FDloQU5knv1JITq={%B14mK9&#ErFgP+WF*7tVG%#8h4Kg?|I59afGc++XIg|Vz z#($MlHzpzSv^BCsm;^hJQZ3;xfqHEDFen2}+Vjgm(SvAdn zYpsow1-PD`yNE~;b<^E0yD<=E*W#<$*=Q61C6Q%ug5S03Qe}0xLIPu0eu0F_-Qs)P z&tBGfrpDX|VJLgfP&=e10*uWEe>udpwT*W_yC^Z_{13=^Y$?qSfS;((`I-!1#ebGp zo-$#~;F$QwYh7?rNj1Cx-7ht z!6I0HKHd-*hnsng;&j7$#PtwR92j~cBZk~+qhq}UaSIU-6{pwk1|cy|Z#s)v&28S3 z1_4F6L*d#>uu`BS;fLBAwvvb>=q9x8YY;}1!abeHwwIMdC;fkwRa5-w3@!wH#Z}fy zFA5bu6!kBJ)iK2QZCFUz?dMF94r+!r(Y0NF#+O0swnKs(jK?;e{>^Y~#=<9TDsXSo zb63KKCx>QBSoqKa1T!;n7l_eX7z%q7_t^M0Mz>>Ou`f)xyOKN*Lw|k9s!Qi$A-o3Aj&Z&|>m>{r3JyI&)hjFr&g)UIb|Yq+LXzkp2BUMe zAyoV|9qB4k#r;ef_o3k+xXANwDG#{=evZ(@={00mesH842<00xgRf(DB)f&{;y0|Eg80u%@eS6MY_ z6b21&eIpd1K8JYR=C6~{1Ray_A|{h?9&#EpFf%bTF)}qUG&x!q4Kg+`GchtTGBq$X zIFtMy#($}@l^_I~4p3q@`TK!X)?dB}^XPTldF89l&P2Bj{WP^^e8i9_bLlC&P9IencHpL$w^Y8-DBPZjd#DDI}Eihlwh+5|kp$NoZV0#bg$l~=~ zH?U_#K+{^!N9J)qzeiIyYIK9fZS;&y8$3OTBTf*PBN`mW4@rr93)vC(+chAr&EHsS<=$g#*npyx=sl` zNPh}@8EGyp$xzWi?@WfKV&2gm)S)KvC5I4oB?hf>_uvi;$2~{C3TIM3qScK4A~?-b za1sVAKrmkyz1>gM=yXA~Xk!@g+O5+j07p68swZGw9i4Qoa8Ah8WR)Sjv2iH)ol zk#Cee(b-k_nwf2Yo2+=OQ0NsJG8BF6`2$7AF|(H%YXKC1vF|gS7KGvx>Qo5pH{_|s z`8K(e793cAa4x@^!d?Vb68DC*f4R}o6$6{aMuENi>Y3!#kN33^^7YX>0*lO@>rK1X z6vxWm)s%;xS!1)di9=kpC5-KgAfSqr{suB^7_^vF$=;Uk!HD(;gP`MJ6WOcduI#Bi zjSb7hA9*iMI8x%2I^}gGbKQ9EWVm^oNj+)+5rN`=rgIQMo_(1H8rUTsR-a!_rKo9n zEivz`omk*bXFq~I;|)tal&)g5V-eN=Kn}pvblL`7u5z`hf?zCW_7ULn`A`3=^2#hR zlM|vPK@9Ota9&eH$mWHHnivuMn7l)6U4x4w(Ap6f{d^uItY>Ekx&|6GrZ!}{gU{e` z9A1%s$VFSx?M-q#XJCP$TAP=8NkF-@fL$Wp2BnD~78J?M87*y7n4q39xGR9t(#&8a%#uiyRmJrFB6ppQw z$kxG8mXH+ELADt+BFPr+s7|l$eRc02_ul9Adj9x6zu)uwexBFw{d>KidSn8DXN$GP z0)apf_6@7%5f`9;E~Eq9$y9Goe{?{QD>~4f66{VvlY*#TXfg@y7L2Cg@E{O4@48Dz z9tdWuqzVu~Ah;P22{#5JIaKnY5HJKHKnV5dMp@&PcuQkD{mLe*0bcm7Lor4%E4*MZ z4-5o2V|D|(;7}_LxFEz(7b6CU>=blvLH?6pnj?+9eZ8sfZWuhEvNHq~ME^Zv7UX)y zn~Xg9IT=!ioy^^j>P;q5z5V@=7XJQJq=gC|kQC*`VgMW#3w*xpMR{>}c8S5_R0*mC zd%)!f2`*=WQS|?~yq*qH-x_JbUMdn?`29zLVIXKEI0?jl9uJ8GM}RW$&O;R3yQw6z z4-oB{VN&NJ8Z#8MX;;(c#ELD||4`M*vpiRLE&x_;`)u@n__d8W8gExvcR#(F`)V;_ zq>wh>(=;AJHE?PV+0-{Td_kI7eQ9dIC5p6NWVFQv3|3gOUWlCtQ?`puZxc&msK?M6 z`wK|J$Sf|5a5C43K&zC?`wDK%{C(%_?z0ZtL&6K&=R*xS1^R!* z!=B=Dy-COi;H-F;dtM?YQcgA_Xj+ja>{Ex?FTxR}^Zv`z_m7*WYueQf656XxI;2{| zJ71u+`MrLtIhR`nog9Eb!65K;_GYj*&MI;yEsvoEukd3<<1-_4in&KfS7NX zZxEyBMWqI4C@YgGXOzC48zr*8uku$|zrgeb)qf^+2UIqvO6(Vbh-f&MA{-2Zae~1d zzXHL4>EAT~`K|+1iT+=;2v8#fvfow&$B2H->`x91_&)UaJhKleG!g;^xei2rIMsBb z03yn#B9lN@kbPD3lb1X(C5doA6c8`2a?dj7d-FhYG|9$~Id+;qzoCbvGdv}mT3v)} zej@6i*{G0Dvd*g(-}}pZPK!Eu-Q`ch*Mx49=UFBBu#cI4@#mDCq9*po`xk0(s<|`n z^YD*U-(&BNeMqH@2hnq+bx>Y4Eq25sp2`cGw$nnJ zGx6!UE6`o(EE%qH>O(W?pY~P^4?;tML0{|mGsqnyaoIjlxb3R)GjuXX-~~v}W6@7< zOFY-;7gRDpF_ryYQK5fob~cgYy_H&X>ZyB~*GyGhrPR3{4%@6nqv{rp1;lw8A|G$2 zEv>IQsZ1*K;u-sNf70=t+v>LB! zuvPJ$6@KicZwYk#|5q+f%XA-t>?@aLd?;(l2q3LT z&?Iki9UncSC?O?ge700Iv3%8!p?Q3GIt}tXE?ThE_mL^C+blyZ6*uZkzc`y`Ic&6$ zsrTGtGfz}quN`c@`^BUzzmTJY(Cp7muRc5)fvWXCClpAV15s7JFMtyn4k-%(2g;fa zBHZ+N8>KarwV1iQUC6t-sO}N}?0GjJnb33DJwh6DSJn)tCNrtdTEzg}23xLc{f^iW z-PkdoZtK0;CQnKqtlbT!6Vnz^t0_04rr~$UeBqmT4@c}2rV@er&prnWNn5K;nT#0ApUok z-biFy%GXG1eWG!1zY9AZw4Ja&e=n?TeN{0+m!V$&V54;N@c2^a*oiAw6j)1Q*326j zzc;ofXWkxPD|}XLsHI2q?foJrT|oP*cXqV%LoM;`D2E>m-sa$7|69dezQip@S3Z@c z^$G5jn5Gmk_Y{k{RI^|{*ucHymdEKd_%P7REwr$XkFn->0ewr&pj7@t2F%Q*gm^yh zbrxPhP~Xre#|o)6l)VVW){kfx1kObj)an=WWr4G&8t6@eY3DnOC4JjLn$W;SG-_*L5^NMja$f`HUXQMP1`Qnp+LUA;eL?ugIJ^ z&=1yGwS{iUdC5p!wb!DZ$qh1EidgjU^fQiZnXk9u6MLt0bputu`1R zMMxSjELyHNBTylA-59Obj~X%}(EP_q9z_m?CeI_};LPA65ciR;9@Xse3H2_QlQHtT zIuiOej9cYp29t6E4KI(l>ul^RzQX^ejvBHi*|6V+*RZlxIWP9u%{K?_`K`%!U0wV@ z8X~jvQFuJioSWDO%IRCppkU*OTk4CIX#P~0W$cWyf%p- zWI35ahV%2Go;>y8ZMaJiXZ8n&_Me)XB@)qAYF-QC8kt8dMPn_Q#VE75Fr@O)?dF1n zi9tf{@XQRupt8nv$-YF^v6rPW+>5EPMV78zBx_Q*wo)Qn z7gt%bltQ}5Hlv87Ea8so+;i_ezk7fG{C>|l&v~BD`Fuam_wzmH^?ARaOocgJp6!M0 z1rP`XVc&=v9yt_4GSHnu^Y-+|1_Zfc1Kp{??o_Nx5X}oqalyI;W2pop2n5c*?%eAE zg4-&p03>#yDG-S;0wQ6`1yBeW0^uixdi2Oz6BT*OV!Qmxr)mIR#Gb=3hB2Rb!C)RZ z2ynu21A7oqD;PomVxWT)0fcq~E&-&4JLAjd7$a|AZ<@OsjtD64rl0~?i?3~AOoLp{ zdQ&hKUpm8RvpaM5qj^(YXx{#Q7;}Gr8pd3i2#5>w;&A{0j|aY7cEY>_B0I$42`VHN zk{#guPaUKUa!4Ke*FAK#F?!Y*a{@7K6D-NdBsvXK3Gb$pOg})hW=CAQma(|upsiE2 z?T!nvWqKc~yLeXTi_QnYD{P;Q-4DOEIZx;94(l1H;ksIa8ZDwP_BKz1(DWTULbmkG z3|_d*uDvwT=M=`+E;HNX0){Fr7hZ^*3{yH4o6#>1ymZuiS6Q7v_|yXmupN&%_v zovJ!KdQtX-hDu_cjmy}2dGLKDT`%u@PQGJS{uAl^KRg_0@XJWYN?7`jcebR*n!KHU zDrN1$oaJT?pF7rm>*=Os-S(c3K9}~R8Tx@HEbeZ_%T?6@7iG_AKfFQBcfglE;rw}% zbcLr$9W3QEeG>F?y;(djXC*;GlZXFZWw~^vM{F*tU#&?XaBjp?RHiQp^8lP3?|jco z$XLSBW)w>=wuFD~H2py^qHNKBb>{vFvkZ+>^+TkN8skohw(zbOSS_U2PqpXssu|F! zrw}L@1il^#jsPOT=K%>eF9)PyY^K7|)`7Ne8SAN{)u_WT*N{Rj!Ap{4;K1$zK9~>; z?bV7B65*?Q@-emqZ*%>)nL{^+EWo#$MuNdRFc=%=7yz{!3+%?60D}F1fI(kBAp;Wv z&}kc7f{gvUOE54rfC3N*82c3ja3T<%5j zxDPS@I*ZUq_JLfVMt(Tme6kQC%%?1sATRx@_&YB-a!L~EpfDg>Qth5?#`ord_*jyS zA8Y&!vY@edL3?CcI<=-4)AB^vUZY9Az{NVhMs(i~?>Wrt<#bj*3tmItrYtU$7QjDd z{f5jfKTS&wiXW1)V3+r%@-9Yay+ zeo(mWn$k0DGA!^Sr1!D#=eMPv>lc+XK`~VW-BF>xYIHSI;=L8yavNy-Sl3LHT_x1G z?2p*2N6XeP9S?}}G{8LGN?+Mnb5x#E;w3Wo>wKr}JHOqTyJ2_FMKE;=W$3-IY{MA+ zGXCk72KDu6*7(e7gJBS23I|<=MXL*turqH#{(;rDWbPbYza#x~2a*$? z#RdoP-7Ch~z4X?!B=`hR{FckXdizq{*H&S4Uh{d?FG6xrxIR>0OKQcdsjhPd{>g&J zZu?YTmL-^I4kpI$o#9G`mKqPGo99hFvQ?NoNcK&MdkVUs!qCb~1ydTBK5tC*s#QN> zJn?G>YYz8We=z~fKZ!q;%^sGj{7w72CI8TV_)kD2JRXRIQom_`(B-X!N;(H8X@7mA!7xDjpX+PT#{?LAg-M`t-|E7aTh}55t4Tgi*V}=9)kq|COS~w?+k=8s! zG!GgEOBaY4=#UpF_v$3K+B1d>6%NtS7W|_jTMBj9;%DD&%;R5?f2nUm8XgI=%d)J> zbHLF|I6j+7zAEnXGTD!!_{wA(9nM}c1Y9;E=;AjyPmCQ^5R(uwI#;HWSh42E)HpFR zlMZUpvEHX;{G{x``rTj#Iel4nE#*ek z4B`%jFMMnQWffkc;ZaM9#Xef6e-+t0yw|C+L(Ns$>vjzA(^|4i9{%hq2eG%v$nR}DapC=J zwxC`>8@=%wskL_U%%>I^v8?hWqxmroh&vdSxcVTCOb`lO0?1PtY ztSLn3Fx46!Y?f^unONx>KY8Vf{KATeHS0#^&rNN~S+^(Fi=LGjFm&m@eP3-$2hjSH zBmGCi`nw|`|8OKY0A)MUpHXA~U42n>rPJA(pAn9U>52jKgLvHK+9k80My?gNd=AH< zhk*<)x6q<`KIXc^MeHqA{W7@^nQ&9*Qu2lT*V#mQ0X+ksTq}&`aLzIm-!Q6G7&sqQ zSf^LQmkrLDZe%nIq+jSN5f2V09*IUI5DvNfc3sHZmPoW!3loj1K{g8SeK3pYp=?CF zk1!hL=08)oF(h}R51}Qr6Lwz2k%TI?$YWf<>+qLIrj&}E6sAWv<|hs?$7jvzi3Z1# z>pL4EWA1Pz#y4YaDC-P45>L=82!5J3(Mj^{rct>H@-aTuD!XxRCrEg<~yQC9jmPT yUWzAaYdqd6S&;bPOc@`-@fL$Wp2BnD~78J?M87*y7n4q38AmNE8XG=_69HMYpov4lw0q;PDd zM79o&vScZRbdaSPA(HIeQJr4h`|935?!C|J_5AUDe!u7U{XDPV`}cZ3wa7RE&(`eL zEC>XGuy0r;kGKHib0O{TMy7drP|$t>E@*!@YM>hxO$wlSqRAw*Yap76!-GKJoEy%4 zO(2-9k}5y|f#7C9INTTr=TOOoLckD+03q1D6J?E8;w_GD_bnN(1bE@Q4n-M7E%SoG zJTMU8gxL-3f17EhrQk(n19fNQ&}eF#ryW1wLPPqP#dfyTo8|ssvSn z9pL+AgO%;jTs2oJXO`=I2&E8|FNQ-XK6bBydSL8_WAIG(Ch2dbl#4T&R#|(_q9UA zP(FRGt6?;VX5iQww5e}y_>wfW^2*eJOB89lz-)=}>o2pMeJOS#MEO*7YKvF`Q$31a z-9C#A(B@V=}>w#+@6k%j0{uNU-x zJLn-U*PVcT2+oLgzV9hwBIRf^gr*l*!ZzB>ei05Uo}(;HJ~(cks(GrWpU_%q(k9g$ z+Wr!)&F}eJ)%olS==d`T6bu62U~dL{Q_cfYY>f8HaTRbsygghj%+6yabPj1vsz z_!S5QO#iL{$afuRN{s)ig`XN3ko~qII7;+uW(wKg@B7f-^UOY^&~OMC1NeP4lqJVf|g-@AvB!wELNtdTSPxpiH$I)f9k$(04j z#;2n8n)M2~BUot5D#r9CpE{b^^#bSKp18T2%dK8M^j5|`}(h1#wtKSw8W_+Nx{JrUiQ zDe_olTvSN|MV0q}D<`?5(h-es3jI8&{@_}D#@+=mT< zY?9Gbm9JLlDg9;z*l$2MEEWidQomXu;PPf%8J!cfRwQ?8tgTe&Ux52JR`^Z|jQ_tC z*sA!>3P1MJw*)$r|J6%ZRJf!WR~q{976Aib*<1-jUE&=1ezo*wOKQK7;z7F5Nr9oD zO~q<-!SkQirm?Syf7I0T8yya@OSde~cEHd~IXBFtUl(+Hn(jl8edIEX4`nPG0i?As zy5udc%DN_%n?=BYXzI{emO47FXUh^^!De5*B>7bLDhO+5b~tWfrtv9m%xcM`=oil10{_H zVXk_-_0k&3TC8l|4&*&uROb*SbIuh=By?SI3zNp&lQqMs$&9Pdu3&&pgDscUUI%QD zZuE$Er}bWKlc&WGSMLQfh$#!Gm86>ylkmG_zR=-OgjHyvrh6438vS^_r&owI!E3_z z$-#!&swrV;o%N=FJ&Y9JX%d>KVqg7IC}4Pi!zicek^H49mPGrl$_4A{5Tfy^Nu==Y zNQlCkdWzRIB0Ql>Do98a!4nbumsI7|xz($`$`?G=PiCDz2rIN@P&0!B2lhCXwW_rr#M|&3|5KsHI2u>HZ=oT|oP*cXqV%LoM;`D2E>m-sa$7|64^}xy&ucP(GcZ zwE=gGPf_xl?!#g(SIwLE*Ksep=5RXpKl1l<4bHFOW3D<}MBi33D3<@21~YRmB3{UO zlYv(d)Hn3bvO;PNWG+ClwL{u@{?ie8)%t~e8Q{!`I!1$F%7ykq$-q$j;YfHK?x34b z`-SW+sd!uU5b=mg{yNb;52xUaPV!pVhcM%z-2!Lw*81gdcEhzrwnNT~IT8>BC$leL zbp;BglZqrxh|(kLa^icLBU9!zc*CQKHEnf}VS5QvKBGr+5!bnoW>-RS2yxW!%Q9yV z^n!I(Y@u6no-$I`?6l}-vjdD4!xr2i>4cm2vkr_Cq}FJlZK24H1|n@dx3qv$%`;KI4iIK#C@crOEq(JOufVTWR$$F zj)cAq^LA;8!ML12-K!&RI_vuiukydEp#`l<*6p|9H7svd&WS#D>)k;+erxhQ7iVA4 z`Z#Kj%-gMu1eK*4W^)piQ9sZuS)=qJN#DH3ri(|V-$=UgmEeNAoSsFWpA5b$r$r(F zSxTmo;rx84r+wbMb@vG3tlq%j-qRCriA1!On&-T@M*0y;(P&FnA<8T!1gU&JYXe)3WYUA#dAfh?B Rk;1I@n7OlS>qTtBKL9`}^GW~! delta 42 xcmeCS+@-+t@9n?03=9lRK+L?6M@m4X?Be#gx@6|l(=NMa-s@i@8}#{O830tz5rqH% From 3bbd561d8b820b9597037b9117f18d00dab21b17 Mon Sep 17 00:00:00 2001 From: Thomas Nymand Date: Tue, 28 Jul 2026 13:50:45 +0200 Subject: [PATCH 2/5] REF-24: Fix REST WSP client-auth trust for OCES3; drop retired OCES2 anchors The rest-service mutual-TLS client-auth truststore (ssl-trust.jks) still pinned only the OCES2 / TRUST2408 test CAs, so it rejected the OCES3 client certificate (CN=OIOIDWS.Java WSC - Test, issued by Den Danske Stat OCES udstedende-CA 1) with a TLS 'bad_certificate' alert during the WSC->WSP handshake. - Add the OCES3 CA chain (Den Danske Stat OCES udstedende-CA 1 + rod-CA) as trust anchors. - Remove the retired OCES2 anchors (TRUST2408 Systemtest XIX/XXII/XXXIV), which are no longer active. Verified: rest-service restarted with the OCES3-only truststore now completes the mTLS handshake (the request reaches AuthorizationService). A separate, pre-existing token-decryption error ('Key is too long for unwrapping') remains in the REST flow and is unrelated to trust. --- .../src/main/resources/ssl-trust.jks | Bin 4187 -> 3476 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/examples/oio-idws-rest/rest-service/src/main/resources/ssl-trust.jks b/examples/oio-idws-rest/rest-service/src/main/resources/ssl-trust.jks index 9f4ae36d12d5279611e44d8d91303d63d8d04079..c5269dcfa271189e59c514150b0bf0195bb8ff95 100644 GIT binary patch literal 3476 zcmdUxc{r47AIE1i*@t7_HFja1VPuKKkbU102V-U|5i)~9VUmRGdpd?hB1@zw5t6N% zC`*z=p@t$tUSPrRa0y-cNycwXtuLBgAFBJ*_Lm>RF2Ci?z zfn{ps$<3Y;HkkJCUWf}|2xn7HG)w%<1qQPN7%Bqbg0p!int_Q>7zD}!DisGr|A=7y zledid;sbyWS{6XUq0TTUrjoq?`Eg1z@|7o9e?@1J?mYlrbmP;ZE9hO?mk zkt>@87l#hyf1(<|qb+Cb8$+bhzGcU}z1UcIL@YM{tVrm(>5%ZG%3hg|>7$587 zN;BvyFNN{&Phi{@(55_R4?usa#9P4PT<@^P-@gH*{^6fGU%vTKttI^t!s zp;q4Mn($=*!+0l0Tcpp8&}b!@iDFE@)XFpQ4ATnf40wNoJV)HRP3?JNgxJcJu@PD2 zY}Eb7a)$l$8j=G&=H0xpGq>5er^`+JZ)AWV?onwS?HiAM^AuSpt5bTPHErB@#a{ow zMfaUh0WQ1KyK4+l8u47i<33mu?`S6Sz${xzeaS%Dz~ohhGVhH$Yf%OzUGIDJkNRqI zQCfPn3GMSUW*==8sisk7_Sa6Aqa{Yd3$(&FwCv&^+Y7S>*y)X`VSSX!$Z~x=6)cEf zR;T=LtzQc7zikAF9I#;&@z)o7ot%H_cYaK#zT?QjHG8_QwaMLZwLLy6IX)co+*s7{ zpfsM_`SoIXrsAU;`nql}xevOwLF+{-A(?<0i;{W?ro5FoLW&J7cU z@$0;J`I43)Z%TdD6KozUzfy%-7X!F=+=!hu!k9V${~M%)Sx;clE)Bz$w#N+Gx5NvQ zcYGZ#m^aeqLox;6jt-W}85IE}^lKN!J5Ex?e#m>)Ww#9}%pTsu4&7Q8i{$%E($T*3 zW>m^-o2u@q0l^x2&Y7Q22%Mu%r3Bp-M2bik5Df9TBb>7$#WGeFrIng<-g$hzEe7a| z#v|upVRWpZb=jj_7A}eG@Z`>cK|37(BWGG{Y4BX0mYuiNbMDqTEW8pzB2?K}HY{PW zU0?lS_rLI1E`seks|J%?3&zn)pVOr&p7S#My~08s07TQf~6jq{8j|86z&|g!|%$ z+&5AHnH3AUxYYnF9`B`dnXx_Cws)J>P&`DQL}NQ@qkyQJO%OcfUf?0msijqQYIhDs zD&hX=_0CxWu+YrIlXr9A`9R2XJL8|Oc}t9mWp9NG-n>0)dz0tjSna2g1_g5A$L)*` z-K|IQES~}`2p3B|-{76EBy@>%6>aCVKxOkUrr^V$oUA?bL8Fa5VZuPV=#j;#g)>y0 ziK80UNK&CnsMFVs>22EjMmeSHkWSxhyHJ&f`xM4?-^W2l93T{!`*eMvx+P3iJ2%la z9FYk*920T^ze0{=9a^F0ApRtVU{y%X;FfTEg{%D=cIH0-bSK&t~<7nXR22>5}xtb`{gM-op1&IaqTK8e7NR zRHHk`J7vdl!;hS1uOBKOlngbeb-ylVoas(sJX~K;2-1`JFs7;3yJ{)KsbzSXd;gKn z25532{@W=X_%kbiPOGQv`3+^)W+P1J_(~hf5UHOcx8C0Txjh~u~e+^$yVW6mcW zd$PUy^_Kp`Qtz9)8y#SFv}I5IAw4cNaz(Pe%P>*#s^;RfmI3avV7mh{#A)W<`B6i$ zk-GdZ*KE@8<}4}%Ad&->75Dl} zi?o>WRiva`D%JDZOx<_3I;GDt5)n<;YYTHQKUMXEHWaWp^N$DvKkaDociyl9aHb?P zbrg`=>63vmPgrsPS-}6lnG~y7GJdSk=ymwqsAhzkHLKjw2+#i&lWyfB%qP1Sl;dDH z@obJsA(JMXreaaHkbNroZ&adF6>SIXP2^Ch9(Lu(j)KzTq=({50qO&XtPx9tUq^b( z74e+Vo-XbH}Wyi zp5j~E-P{)45?K+X;TYGtRtFof=qBbV*1fBAuH(*G0+S*|9R`;YUWz8rc|XDcK+fC`^sRgGEQz?`LrybWU3ttE14Z#>)C|ba>GF)K+T;!;XmY zWwIuCeL%O;oqFF2pUDlE8t7z0PB6w2(8{v68IGdV{>XwmS3^dvYhht`V?x#G1Ly3p zX1S{pTMR9!!4CJypyv9AV{L-1`n*2jXSJtfdmNKwHZP#M-xyh?uU{za z+x^w}#?E(X+*jh#GOizR8d|fqO>@brw0}93>um!~eh?rbK}=8MShqW?lp4Rk@bp`m zg~=CMtTD|<#~e9f3+HwE@VdA^-Y@%dZzQ+p1Z~pIJRxm)Ay36{jDv3MU6eEQMGcyZ HOP~E0-L*Zx literal 4187 zcmeI!cTf`v7Xa{tgh)q0sS2S=&n5&yQ9%R*ML}vHfKsIjBmoJaGzB5FLs6R4fCAEs z7*2^4r6V8+ND%?)9!*44`~r7#=Qz%NH{ZHKzCPRt@9JrXC&5n~2ZVUpkr)62paEs13R=;Mmt7I{ zdx+i%0ll9WWc#k51R%CsknP}43u3YKiu6ihVA1dY4VV!G2?KM2=y?`~FfbVOdJjvi z#e|)Iham}?oKP?N{5S~Xt?=2iF4Hbix&W@VFR-N_Kif2CZUD;LSk@}L|wvG7jk%V6)6SV$WVz9RG~sk|Ym0ZY5I?2raW%q3fwJ;~C= z9QrIH7tct3K9<Nc<|hvsAYc$UHw-L8 zeC=l_!1maG=C^&d|BEJ8HekI_X<(Oqpxd7Py z{O$kG?S^CrSn2mjZ%*h5V*?~0ymP~1P(FYsWWN~I0GTk+*U=|fDQH#GqSM(Ieg`rfCQ9L&9c9lF{w6`AEDpdrzY?0ds zHz!aYHwaD~8hc%X1BE~8s4O3Y-es%Yf>?5?WU|+JyX}T343Netha&s7BT22%ya0HD|z;?s^OR-CMe`=g?IL-2O6Fn{KQo-B_tV zj6FR+EdN6n{X52@0Thbvtdb%Upc{))-3?VxJ0WoL=Tr8*vEqQ}?%c2m{@hr7>^~tk zbMC~<(y9rx;+*mof1Z*T6)`N1`CU=$Dmtw*o;)G$+A@tE)FO@YR@Dl9sm8(BexEyW z9Ob+#e5Q8JGc5>VzH85bF_rEp_wv9~mc(ln9kiue2wh~xTH9s7HK|#ahCTvw&Kk^5 z8_=nET;iqb&0OVP)s2{3==soW9L{Wr9C$=H*YR-$vihbfFTuXJq_eT@lVrh6fBQ+? zb~VCx%|_m%!o<&$usOOuQeNxB^2A2&sN~>8cbJXpEHx%+($>>N;?xYze!3`N7A9!_ z6~n*Kf98v{_{k1UvGDer@34((o|AR!u)sYXseu*cx-dI0f~7xF@EY^)BR<(bi*~(1mWjdLIkFyVdhd!b92na^Y*NN(Dq+B z`60WPNOmoCRlwIxXQ9UxyB>Kk9Xnh8$QQwt3S7*mfIg!_dSzzrAQj)QP?pD^b@(B+ z=zEJ$#w~7<0@p^N#{rUq2d8bLMY`ZV(#TqB=Ru!2ibZ#ERB=*U%|-KalA&7SrW?z- zu>6!}`?sAM=)7Wah_0Omf72#9GZC0RSKIwT#YK`tr!!T zkuni%5h_08c_WU`z#rc$T5NIQ4F7D+mf7l%r&KaHH|{z^sqY!a63t7ni_TS8z4T|j z$Do|HMbSdM&)3B2f6K1ti4qGElj^$P%9QqW!SS+2CQ>1y*HOefq04dCP%Mq<@qZoF>0WZX0WZNHnavYc~t0J|9b2 z4{3=BlWyEr$VV?>eGkk=)RiSlHdY>ac`xB>k}RnIok4ux#8F(I35TirzJA?bQ$+)|)Iw5*B0m^J6qR{6av7l-W@WwY7bB}0 zpYxi%X=CeVo_Y+VMfz~v3aau zxTrR)%$SjyCoiu^nT?PQL}h26*J%Ja8mjvA-@3T3^52S{YZU-9Otl@@`)oYKKJ)+1 z{;ji}9xiuO@%$8}BFFjleYv5Lo383VjK{9Coae_DMtNY<^Q7AqLsI9!jo-BNTbfv^ zu=dT9CkKa}c-liQH&;r(7TDxgX~44+>@W3 zk0DT^>+l;{`(8Zofrfh<{EFkR8d-x$uyIIbu>Mjfv*O%|XQs+1^|T*{;+k-E>uJHc ztaoBpTAz33ocBtNkHL>52(U4Alych0#*GY8?Fhxz?a?+F!XKKEVv;lW zaVIvkH+oSjdPTXI*z9t|Tn{ts+8gzTDZAUA8suSm1QbX78 z1`*R^C=}ZBUsfb2{oUcOHGSWXIxpcs9Zu4xgn3IinvN{rNX{d<7;0r#4!>}J=V7DE z8d_z*jGPsk4FFSN8}UO%ZFg!+tZvc*A6>}#05DkQ5e{5z)iLLN9K7OeJgu-nOPCX# z59V477s5Vh?t0dPLY-EfF$M6Wn*6deva;{BI%<<5A>Ed%2Mj9xgVAw$#I62_Bz&&K u+e+Qp%(BM5k(2@}-xO_o*Z0h{MU39sfpL?8fT19`gJ{Ba4uN)E;(q`QFkM>! From e75286c88f2f0933abb2514329d4a8f7f93d24da Mon Sep 17 00:00:00 2001 From: Thomas Nymand Date: Tue, 28 Jul 2026 14:06:29 +0200 Subject: [PATCH 3/5] REF-24: Migrate REST WSP keystores to OCES3 (encryption keypair + STS trust) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The REST WSP (rest-service) still carried OCES2 material, so token validation failed after the mTLS fix: - service.pfx held an expired OCES2 keypair (OIO IDWS Java ref. WSP, expired 2024-02-03); the STS encrypts the assertion for the WSP's current OCES3 cert, so RSA key-unwrap failed ('Key is too long for unwrapping'). Replace it with the registered OCES3 WSP keypair (OIOIDWS.Java WSP - Test, valid to 2026-11-13) — the same one the SOAP service-hok/service-bearer WSPs already use. - sts-trust.jks held only retired ADFS STS certs, so the assertion's signature could not be verified ('Unable to evaluate key against signature'). Replace with the current OCES3 STS signing cert (NemLog-in IdP - Test, valid to 2028-08-19). Verified: integrationtest/rest-signature RestSignatureScenarioJavaTest now passes end-to-end (Java WSC -> STS -> Java REST WSP). --- .../src/main/resources/service.pfx | Bin 6671 -> 7428 bytes .../src/main/resources/sts-trust.jks | Bin 3247 -> 1740 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/examples/oio-idws-rest/rest-service/src/main/resources/service.pfx b/examples/oio-idws-rest/rest-service/src/main/resources/service.pfx index 9498b32609c0ceaffd6328fd34102731e7bbb74b..88b496b52efe5b230364a9ef09b7849607b18042 100644 GIT binary patch literal 7428 zcmZX2Wl$UdlPrYAU4p~nu;?Pe-EDEV;2vCpySoJU;K4n(+d^=c;10nd=*wNb_r9yT zA6-+^J<~sDsu~2A5PA`|!gDB$&WpyaFjES}~t4ax`>P z;m6@dl>Lae2kfPS!Y@9w6=pE%Jeo8yn*wi2_eXX`D{BR{mi%3|pGH_vV;=OE?jN%| ztm!3-xx*P`oQIhc>>GhwN}_hHtMJwJS#&4KI)vD^eN08j8Co1{N0#o)-fm38=b7}{ zrY{LDygpXaoSoCTw<8Gt2{KzfROB4kV0D6oA+B#@X%eQyxWCvjGHR%F<#lS8Q!b7= z`2=ss)F9M(HP$~6OCHz2zY7QWXhd_mxgCq-9T5xZj;2v1xQe)gDBmewb9s4azsANIY_|3@|L_(k{ zKO~5y0@^5}{TO7`e-T+P^+GnudM|xGl~G+75v1}v0L{Lr_GMstKy(^HTZsd`hP}9n zE1)`;uudX#MKNi9=lrb35w}s*gzhyUJ0sM&xim>D)4_C2$~5KD;Bfi_y(gwm>Fl~7 zJDp}k5IEExKgxr59QZ}Hv**tV^&wWSwRcodi>Nb?zJZu{tt!$L$<+traKygfibMo= z(#Y{?HstY<^13;=T(XFQFTtYyX(9Noa;rFuV+VgSwhhv~SVc>-oB7dW`fw=)(T&QUN4QrWx% znZJ+0=As%3F7Fc_v++8Zw`MlI6a|3>d?_C?bfh!5l=Bl_LW;`DD|ivKC$H`5qov9@6gsKw)s` z){L{mK8yteNpG2dtOC-ct81&qj{7am115=Vnpa~)tKx}L67G4n_BYsj^8{bm8-j;Wm)afet{?nR4M?s9+e>gcFWaQlU7Q*m3dAS^wiPDUVeQ2-WnNJ zD!1PvefrOU&z{)w&g@eUMl;=GX+eqKeIVHp-%egjG92kk2#;!=?nlZC$c(SiYU_MY zbj<|jEtPXd7BJP?$nFwfxuVn|l9wtEQZvgDLc&=f#dSL2C-};r(s=%b0@D_6jb*aD zN3PDE<2NM7zS7z{E<;hgl)4;4j4)r4yN^s{VA8o4K2>$KI3+v!6L^4S%6NanglKM2 z=*hx3-P!LoSXIVj{yOBPOw=v;`_oZ)>WRRa_Xtf~@#(eR_{ZD@UyH~UF!Y2c1Yi8S zSJLiqj%0aLQ@nccq`Ymxq$Cf_>6#=?J^3^|j(Qs@ZztJ+LJj!UEQJz!9p-hFeD*;I z2lV_dt-{^T?}>Ow8l)WTcPstUUCy)lf+sbp`)CATX;^~}KVzUVuRy-n#UGagygN%k z7yGEv#7JG`V-kg$IjmEGl0SLJCc2`BzF9Z?_3 zf|+!jB75*#B(*BfF`d^44_;4JZj4ng3iaFhOU&dApmf_fI52yJwX zue46(zzU4NRjH~bt7hyA7$^@QkF*&fnlw(sI%dWs=K~hYbgA3&iJ$S3@#$(m5p;0% zQ_id7)r1#`u%14{0g=RR8RGk=&?wbC9IH(N&&GpDx(;eP0cN3?QS3ki}I|BdLNf6W%=a2wj}8f%nr zYlWkph8D!)$hv#6w6z$9G9xcs$EERYS_-zxJF~Dp)$Ng4Z0>S!RaD<{ed=A{W%uU- z-La)ja6Eaq@EVUE3G(aq8-;;I4sQ#8>4jdfQOs{+JTWCrr0jNnqqh(_I$RRei68gu z@q*6lgK_OQ?{Eb`^^@y?{)jl-OfpWtPZ-_RTc5=%*n6%yIVs)=zoUFy`0^bXA4u3x zL1WI8@>E!1<53CC9xa#YFRW~jZ@tocfG1NEat013(_rf3n```d28>i^@daf?@CF`~ zrhG3iH%(}8cN;v^Ve-t(qNKmKx0aFMJTVSk=DoP(vVu2xjy{C(4pN(92|A6$)vJxz zLN6vuci}k!AbI>k)Aa$4Gh5q9b52PYBoIqA5^eT;)zY$BE&o(xo`QDu+Uk6r8$Yat z{o@ZYJUwp zdgec@gEr$aNb-VyNiquhi&97#Lvs>JMPbw@#icKi6AL}AJJ}0U_2CPW4CCqB_-Ufl zc4ofWVZI4QbwBz7NuTWfIQv2cGrd+V4|R_Qbvc1Y3MAJFd)x)JEua-+P*~)P5z!BDvB4~+U}E?^-J5p z&C&k${H*%zgy7H>2M(jwp}nUgo>kvPE>Im`o2368!;ftcl7D%OHTW7du}trXL!Llt zM6tzU9^wnN{~SVb`RuPh$dk?Wqns4t{Tw!tn9b*$IcnUO*5$X8A?5py!5>XeZizF= z_O^vtv!s|qK-zs)y1Jao&(Mht`O_dDeYP}=fgqi+oxErwn41NtNW^R*Lg_tBMTlW9 z2_y2#8It&`Z?7n35^VU)904ocC=WV|sGFydW#r|fr;WXM5uokI`J{?8xkRiHfZby- z7BHTs;O5TB(m=hLj~xe;KR2g19yide$t_!jHJhu&%k;sA`oLKU=Mx-=T1~}R^^OTZ zLUX?}u;yR0Slb^5;CO^+iEC&8J$Ac7umyF+HDb|gYB8k8onlh;bB*bvuas;<&{3zq z1bLSt1%@rhnT(oA#B0L$8tqGFvpYkOp8Pnr`_PhOS_Ln06su7SeqLhK z$&=_g+B4u=aCalyxY(wJy0|i?sl#7Yb25U*O&0Tn*cSJ}oY?qXfOe#j)jU_)_`Pa; z6V1s@Yt;DqxZruwz-GiYA|{~%I#1u98~SER5Yc>6nLic9CKHQzdS#N(6yIDm@7@4ZH-+uI-aO;sUJ*nn=jRMt{xzr4>FLyy zw-=pOV@6Q%@p*v6w5|&u9%!lZ6JnadBo@iVH!}9*(Ebw2AE~4mQ*Z`ib|Or!9{Vz2 z47?4?*OU$Q&jSbLxY;?`EDWK~>F6OHVpK1Oi~-&7vx?l5VaP5tZ1z)a`NL zTuv#?f1L%2C>UPmYKxTVZw)&5Ez0fT7a2gg;p@?Z`}pt$qp{mIb=Nrj)^lb? z$t6Q^x831P4;D2*Y8BgcqS((CbLZlr!`F%tPqpfrk33zFna@w(P8)|szNY3hh(yG6 zji?e*b!D~7w_DSam(kCTp;cWwW-QKPz^QKzsf^_q^k-qskh5oOS`I>H(?b9%@0scfN0q3`OWh)kN-DKK&66+5ST#gZAZ%1m zzMj5xA5-lNi4}LDO2C=`oyJ!EnfVmW`+R6RH0)a)uURFQ7?kf0IV-{K4b*6D(RLt8`?6$FG#HO2R(zHg0jbe9d|FL`^Mjf5&qRc+ z#Y8~QF(bL>k!6@VTO?_aYn@=&wires>+(}kd zvlcI)N#2&QbkGkHFD7Bb`ZOb8iIJeZFt3Y!v6@iVmhw6#|K^qD|#*Hs&vsuXK zjDv~o%2^hRqZaA??e4HGQ9fQ&;aa{Xz~h-2eD+9#o@V=J{a)L^#7~=TiPA`Nr!1AM z95j7}7PDpVnezEn74EE)3kz4>Yeuz>-5fr8^2NHnqnC~@_8MdnVSaHN*;hJWw}P_; zETXBRNPpXO_c-eC^VMuTzzh(iT`^wf!R|kZb4G%Nu?qEa`U78_MN=KWrhxYh4}q*}~E$Y$NPC#Dy2~ zS9n*-WASKePU@?4``BBs{2J5`*gi^u9rJy%4NYw&UzPL}ozilH(HbFJEX0R78NcIl zqg-7>z8=}I7{!GWykfzLyNJvoV4;Sw)JQEn-GS9WPny`&|MPV5S;1%h<;$rXIi-`^ z8NM7{oVXc$DPJZ*Otz|rz6H1JE`U97^&Dd~fXO35no}`(^^6M^;xUw3m*GB+HOAYh zL&H5ov%CGv1)L9ZR&A5AlYbl?z&EQLXG>Q+HmCK=YZ|X;u9R z(bp@)@h@<*c_tzLJakxFChUvmsPfxbng0VVec=+nlvi1Ki-?RH5iDTdI`TqUxSd=- zUyrt!`=bQYTs;ft+bOw%S5_bUtt6Ab0xfey6LpwVtF@CIVCx1_=OhJ(^*5*U_Kpp* zEm2cx{_fUI=KeGL`7md0&>iEh2!PsPM}$JhatZ^HEf!$R=|9mAW|yu5Art%( zKKMFbYPR2rj!Mliv_bPOTnl@gIFO5%u$nrpX(FvOYnej5yb&zRWEvT%L75KBK(@?b zRoK22ZQk7C!@6j;D46KMyi?_GAy4&4i!SI61tX)-D(?`=S?lC;+1zR5uxvQ)#~kV z`x~n8^J+PlyhDSN3Dqi0XQxbWhPB1q$Ai%x2D~pQo!<6)l{;w$5G8^+!^#m9%5Y%- zV%ps>At$-1U8}(n58V%*nxWg%a&a1B{8}F@^mdo^aIy&k`8{|8Sf<3?vNfq*9c_E$ zUpj*U(zL`usuAvN+w1P%P5HK4mZc}B5>I;fpcpcR#CjWoHI@Z(qU;!<1;KaOq@EIa zZx4gL6}S<5O%i9Mr6WrSEB)c?dX1920*0BZ_<9DSf3`#l`s_VFiG9Zg*NaE~BCVoc zKH!^qHT51FKh@c*9D`i+-kgP-|5Yx$fwB6~zrWT((2+U2xm*bWXx?EN2sWJK%c}*@Swu*-)Wz-Lgcwy02TMK;TwXj6~`ZBDY@Xo35 zwh(9_RYy0)!it1ktc6;fv6DIu+&gNq4Uc6GBnAzv7#2k3a7)Es{exE@yDUI`o(%MW&V(65tF|#WyXO z_hA$xmgl$n#Pmk+>UU8rk8yY+kX}9i7U};9Cjs=GllU~mtAFs9q?6u zCV}Pfq*P*<>0;P%XK!itOZVAqLpE%nf{$ileR;}VlhSw8C9_?VJAc@Mhp5iNp>p5xp03T;C)uX$B zQJ-0j+KS;!uZ;ovA7V08N}4@#;k$>mSu)wRpX-F>b8XXFd4BK9_4U{R=rlCe}tP}P0D&xz$bvxK;Fb`WLJkS^hNM`K9wBR)$L;p|d(i@f3 zEEL+E!Qm(dlS^VtmmOwB!$bJ5kqV<4uTKd zc~^J>^#@z1RjvntQJaYT+e{kmTreIs0y0sd`dptvDHc$t#&dG85rm~#tZuls6<{58 zg)Q$}4$tDdTsdm{u~(6ycwJ;CqPJN7Pr3~IO1CMiH?XCy+=3;e@&ko{_R}+sf9;V# zu@bm$f|A9z&&?#74~Gq==xDoOL^t9AH}ZEy28}31%+{+|DhgY8D}-|$dz$i+X=S9< zfS3sd3Ag5qIWOsevrBU`AnQ(!-?mL;0yJ-AH~&QVP*>j>ELC=uD9n3+*r%=C5 z$eh+fp!<7M4dRcq-atV;j(!M-v;uo|bpy-H(Ii`Q?94@R3Q88vNtQf2Wf9v<3Avq9VSr4QiFc4pb_|h(T}wAo~1$J zwtHVO+N(<;jy~!o&^cp&LaME$7-|Xg$71U4n&c#YZOeu0hB`BRrnRBeYLXNm_nkB+ zEd^@?v@Y^(jpTf~$tciOJyXsk8eS(y@hP5sTo zlkm%cv?^A?mUa{ow?@s0sZdZEcLS2~?ab$76yaTCtcLo;vPT7r%{iZ>$-`;{9Q4-9i}`(?Z%=E$A-W4lrhp;6uDx{<01ma z#l-TX#42auXaOjjSJAKuADmbFrDzG%OWd0)=?w5yfV(kmM`jNk>q}hb9m%&XYcy%S z9gI>qKvXWE!)rBYZ*AuuZcx1V9ZprXIdEf-~`VzkQN46x9DhVaj?Z8<-tT2}VYMXTpH{KnxE9z&p^LFpy;B1(ElBVp-^zc zP)JZP{@ddPIs#%540y*41Kx1IL_z;Q@G~tLkicihWFYhn%oQjR++HxbXF@K}A&Q6y z1OQ>cUkZEtV~#(~8?+w%jhShF%__N}W4fdXymb1cCiiWxD$gR7@h2ClDXqk-PGzh0 zcGpqAXg(JcZJbKP^YxAN?w^)zNS_m@G^XC<^+|PjF^_#di|b2st%>%gP0H7_$`}-?bo_AWH?ir;Q)+3PKI=(k^%+SCJywzmOGC#+$>wWS zRj(=jvd$Yg35w<=kxg4;t1x;Fq(cTN@&nNrcZF+z&B8rP@9Jcti2P%z%=i3MK9|^n z9=Iu+w}gW|>id58Ln z?}RI|u;ytVei3y(u{5`3W8?#D$SF-j8+Upi`%d;Unt;>$=%c3&Kh)>0Lfm-FC3eCY zsujcaV)?NY!eBOyT-Vkt_H=tDe+}YS2!3MK88-X4zN5?8A?K5xqJBhw*gpJA8obM( zT8X#eklR4o613&J^;NpDiUxNa_z>fQo3`7cczqQkci?k)GS6$kSS4l6!}pDKy=Xe6 z%ZPnLO+>{MO*tt^NX4rkEZD{I2HGeZjYN7>Inl219|Qi zWj!0>?Y{jah~VGCL{kjq%GJr>hb$f4Bj29z3kdP!WEr}VHIGT%`RhFSUH?9d$}3=3 zyj-M_5@`{U@k2S)t#Aj55x3n?5FTv=Up7@6M?_i}z!|H_4M; zw_%uQZCgd=x3DZ_4Iu-xe0G9B4y^=30O#!mC!*R%AYgmkw@4<@mJi-P7ekxS+Ky2G zWO6(wzSHi(o+-+yvUCv35xn-4q7Pot2(a+v!-6@8k>^Lh6ai<;5(6h!*ZCL@+i4=b zwhO%RTQ$09sRY>XENJ)y%F2%;9*J*;MZP!>mwaFQGcnEb!vm@FbIun(KPm53LM&tY z@8)G5rVJPqsM3+ZBlsRRzP-A7q9{!yr<<3!bGJVe(>NEcHR}sSf9fOzA6*eI90RIE zwAD>5GX7LIjL3Z-_F<%ww4aZaTFlYpr*^UeSp_$$kSNVfB!`pz{m^L@o*U=t$^pq{ zxw1Jl*H1A+BCw9(3UeA!0vpDR?4?m{G2^R51;_>jX%k5tCs`niDjqNg9@kitq7KRGOJw{Ts zl^)Pg+OFYx&ER8;HcdS=r?RMso6=9z1;G3b;cojC#%#X zDW2#eTXJTI7DnKHeE7LuP`)Rfzu}?ok>)w()Uo6obJ;4WrZoh|dFT|LZT9i|+nKKv znRhkoG3kgQ<4c(+l2@;)${!VQy{mpT2BoAr$I9zA{vtvi>piqUW!2m}*R6DJaBx#~ z+-Kz1xwfu&|1-Iv=o-ODdl~`Um)~AXYp;T){}C*5O=1I3mdg$O2hEyIH0*IUb|9(nA zggit*0_)*Q<%@T<{jC&{p0p+;@%}7?j@)+t&xnA>h{^z<4p4j^G|#gvKp&v}EGYpj z06x!y2H*j(0oVdKpQXP$8qe#?XWbj%0&oO)0qg;;&ypv=>e`n+lNZ0P#z;`&VE^-L%COaOUyaQR1K{fuZmzewtN{fqt8 zrJim69!lof6AEy9_HqT-J-)NVy6=mICeGDW4(6B@awm3E+8Blg5WST_a-#Ty| zDAb#WOR+GTJt?kQ;q>E~S>Y^qrL0&9fKD(m4y0}fArj_!JnGp+1uw+vD}%znUx9_Q z8*iG(y|aB(4@svjiW}+LXRFT-YXG)F`;IEIZY__t$qQAXvk1}61tl-PiR~Y~+7H9E zpRYkCwGP`jy%F9z-k})O-K?GdO+x#TYX2y!Xj#-`|VJ;g@i`TiLi=)hu zMSEwVC%aFpS=qs1J?}-)*K?E@kCZeP^q~OjhZOv^K5Z!-YPj6p;)M385ROIrGxmk3f7l zwLLO!+-Lm)y7S7tdSY{MdBAo=j{>?d&yt!if067MzBoMTZ?4njVlIP&{quh|?5H=! zir=dZ`d2hEPXlMpsYS**#%~1XA0K(VNW-o&9C1#{8v&DKj@}!l^Rl(Km2KE%OJ9L?#>6k~srQcoO{~B5MBz0q8qdR_^ zqkn+^FgKZC8%!}u)wpIbi?-z;jo$DWKn%wG{svrRu~ZSt7?a%^8)OYhAwaT5G7sh@ zcoI3UJId*Tdph#ZV(=WTyrRH4FI1T|cc9Q+ePA!)sisHNioQuFR#IiU6??U7v-bOJ zefFHNmEKp_5QBgeO?1VHCKjmtW(-Xg=mfc0CoBD~s^B1SBlx zaN7DV%`JMzgAM2*N71+V)r^LCRFmk3BJEn`v_87FiGn3mZ@(WBU8j<0*i&%mrXQ~K zyDyyr241N2@D}zn52NWGb>~*e*sh@zZ%=nV4rq?o+LioR!^WD6Ws{rDTAx!HSj@7^ z`_vC(r!-0~w9`MqJsGhl4G)oOb2CL;Z{p5k)K=G}j%#ic(cLZ>g%{Rj!dMjdB5fWf z&YQP3!}y#4k3TX-GHg~!G8d(Ay+yJuR_rfq+xWTDEIK20yHeCRl;2&n{f$-y(VGSd zt&cm)UZYKZ*tCXuf#tcR2!_Oq+1U$52U#W8}=y#{AD8}nL)1d>LIQfSCWOkpagVErK^ zC-c*bg8M;#>C(3$Ik-!6SeLa?4a3T^^Mplt!Cq?|`P)n)T!*VE_~adC9Qb|1M6Hk< zN&a#6mNMC0thvIcvXfv8acf z(LXz&@b5Q5g_f7hoM*EVoVTRQVJ1#0o*Wia?xXhZNndeu==|LC14j4Q1wLP9DE+-X zSJbzXpR?Mm30+m`+ZWDF=(Ppi3D*b zCrjzpIgi2n87@j>+`P1QLKt*idsGrVAEgtlAWLK3bmB{YlA&L7lVT@Kx|b;Gc*3t6Uw7V*Yj6 zb__H#sXEW*f!^L)B%6%SUNAuGYW#BHvP|V*Qf?gs_0N%ZN^D=-GdrzW2By5s?TbCa z(!OpFZ-+zh{-m0`(i*c?Wq~2m3yQ24sr0b9J%hGRGh1TABSiFV(%2}$SHG#NGPcwp zZu*B52yT`yxbvPU+SIf_IPp-9o_#!ygiN_ztOq`$|WDQ2#C*zhgH@={j>q6za zVgCeq{8_@epsrC6OgpN;kD zeVe#SvHq|XE_>DZH)5Ms&==BnC_wO@9|fDA-m(pSn2N>i1)b#h_zWBJw5YmZME+<^ zM_CZ`whHZ`_aow{b%mb$;<7b}){mpF>HQ+53>RAy zFP&C%vZK_M>5ZgPSBtn#B)%(T;#%*%%Rz zA`y8+J5l)Lhn;@PiMJpu7Welbe_EgVy)IQNL?gg!BnUHV9O;6Q7jo^SlRY*+a4GZN zG`jA|%-&Q*IUqt4`~KeCCA>?41+gow?w10Rjn%}#JpzNdG|3~95Yc@6@u?_H*xZk- z%9+*1f(tU@6-#yEU{Db|haY*bxlBrbQ2w;6&ikQ@ROK!^K6x8VCA4?UzVaj#X4;4~ zklRj#7jz&f#*E6$K=;7?_jFo@^Tk%UI&KdE3Z3C%j{0 z4Ka@Zn2cz z6zkOMS4?XSG4Hz9f{L5PRXiky=KMB~;VdHaqVR5CRj%@cy|}Em?Hd7iBC%Fr>b%jd zZ_1@Zw+b(fC3V+Uarl)jv~GJrr>v~J(ay6%5j-yw4qfKj(*PF?2-thYW#qMQ?EA0+ z1G20I0q1gX**J!kgbqMCA6seo3`vpE7Ysb=M#ljqmQ3Lf5+R5hL+r{M-Dr>Go*BCj zs6}kNOuw1Z;n^#*A;JU2)V$zDBNJ|6Vk4;PW?YdAYrm1t;9gQ&HlqPNkj`#%^iGVO z+xF$RP>Cw7lBE;Nw*d#WzqJ+YcITVL-7s*?0z`RE_52Qw=rGieC!7VEY6vAQJVm~> zn5Vu<#1TJbwo@qy8+y87{S&=_tIpZLlj9@GfrT`a1XpHMDH>-d+v$*N>gIKhbW*|*fJekjBv7;1LUYpn)nt4l zqA^bWkb6x?aKMHCwObZVcz`_cX_vFm{TCOpT4R8jEwm&nH`mGgpe~S^520)rZ^?vb ztDd4Vhn8hum4d$^VOY)a%6&h5^rX#F;Cl0WT1Y0RZoX`RJcIpb6H|BY5(=UaoKatL}`KY+sc1Y8v*BA*TQbbeHkD`Ja=~`7$5yb zbD%uMhHj|aJGn$gCQmHGSGupd@yW+z&j?i*;t=Dx?U|B*P@yp659=iEdiZR23ExaQ zz@zm{$nv*||9Fd(8W8Oo@;m53$!Np_m%D#PIf{wsY+_b(!Gkk_nB~fH0MzU(VV;A^ zFYv%_=)%c#4?KS#guZcfBrY$JCM=YHZo!j6Is|rOAm8T$=b87@UHQu zp@Dpg!~xkeP^yGaI#f2;KYC=Sb=vD8Nhq$7dsQ3V1I*`-npsfjiTFecu+`K z5hbx3@o;6c8vp1%OHw3dKi!CCNI%z_?)BQV6Uxc;RpAz256UY-*jX$Yuk;(^Ua+we z<%MnQ?~f-XODQnsnyU#gr$39=3`UPc-uVtQd531Ekj03hxb!6D>$=q{@Tz?+!Y^Au zA-CD23x;6=JVx0;wx%?NfEWg0{SD=i(JQ*W`DiM?z?Vl`T~5`eAN0L~Kq!@Me9i8u zh^Zq9TII0gX2YX>+(ts)*Su*F+X^9_A3#;ls(r zjA5!`vZ2#6Li{*>>H88Rgcn(cu(C{{S6M59SwLw(W!6FI2N-Z(4zRB%b_%~_Jbe6V1dvLgd_DFylF>XM!#!hyOMPY9+P(X3ks z>hb|C1+;}w$u$xqw-<3m)Q80ayrT7v^r(sfuAmgiax;Z&=Id}ZGdquaGpE|I=f}Eu z2zZc8oyL}}@Nf>)={M%Z5foC@!tQDq>70e1458+}!d%&+*6)*DGjvnUXJx53Zy8NE zGEv4TlA2K_e`s3bgody9?Q&sw63K;N^M=ylNgkDz3k;=M)b(MvP9vEmU^#MGOX+t0 z{5GJqG_)2xLdJyi&5{ zG=Vh|*sW|}#V3Lc%LwZQE!_Sk;W6*_u0<;x(U>=_AE}Q)2C&!EUubjKV@j5y=w=$L zii5Cq`{%CR=w}d7P1bSl-r?-1i>LpfrLUw-c0U-?WEHE;;J- zH?$875xtPhI}qW3-K0iOpSIgQJDzw&%b*X3U)lVU(rqi*%D!l^dYVNAIKr$XE|8NO z@y5lo+zt814M;3fpAW!xP(oXdZ>B5QF;o;(#?n_;wIfk|J+%TxYb>OoN=EOz*L)mP5A_Wakf!_& zuIX7lI=95Rw~P>-@cDBw%_bkpz!_eK8owwd>ynfHmMX^>MNyP!=M%t#5hurzk)LGZ zDIO^kZBrGfWiH9BPu^OzTf%ma*3^1M^qP&$`r6(1$`t59g+sTKz7fYF7ffm5YEkn} z?zBBI#|=;YHXJWiATqqwmLBz7%Mx^stPVZ1puBg}5| znp-~&Nf%iL>16LS;^iNFq|oV(lKDJAc|40m23m$;WF+?z@=q_$K_c07j}mrSfx5cM}b? z+OPg>C&ys2j9&P9Y@4oCK*tRtMDJA=u8OKk*P_DE;ID&ZPNw;N9;9-F`Eg2VG5P(+ zIPXn+74zz#lEpk7il)`klwQ42m)poKBuEzt3iAd5h4U)yVId@nEU$EJYZ%@!=6uzE zoz^Wm9jUU4HvX@}_8$|sI5#af2nCr93ki`782}^zUC?lM%j$?7vt;;wh(-EyXT@;` fBnZx^pDaWcJ2coD>*!@m(oOb@|(30|5RD)Q?nJ diff --git a/examples/oio-idws-rest/rest-service/src/main/resources/sts-trust.jks b/examples/oio-idws-rest/rest-service/src/main/resources/sts-trust.jks index 6f4cbbcf3b7244f876b474d995f3f429e75e4b4a..26d00416371b3cc57af56a272785f2a574584f8d 100644 GIT binary patch literal 1740 zcmb_cX;4#F6n-yxi4gV@5ELZHCSa2LLc%I45R^?pfr_XMfjl54VM~G{%93JWL{v}& zQ6y|`SVpa&h*FAdT2Vp8!2v8wMMbc#Sl7O2t)nyk>yJC{p8K8o&UeoJ?t4G^eiDKp z0>0pnU!p`R!T04y$~I0yq%Z~txIhqj7m$;;13A*7Bobf(ff^U}_{nHV=LUx8K<-`J z(!AQmYwdssS=~rW4KUFymMY!HL79O==RlQW&| zz;dSZq5(!{xnNin%8Fq-@?%hQVD?F&5myi^kn%(V36?B~kCjNIsmYi~g2kgVfq^Q8 zr>VU>WF^k+zy=%?b#nf?2RU4+8sz7><6|bu;hhkW!`ldQI14HYcCt2qdYW^JTY|Xl z3f{dhjZ@0and#Z08{Wiu%&Z=GX*Nk3+rC#r1J09Xbvb2RuEkp4pPTf?zCMw>JYGqqrBartrzv&%nj?B&N%=CUx`ra`~nfBlw zGEjCb>}96fh#s2C>ig@En8IzX6!tLF7rO;S%}K6V&FRh%{+z#?boSuErd%IA*^NO) z6RI0?d!)9%KaL7n6<|s7yY&xOVzRTIgy^vJtnAB!BWVNIBKlGfbquKS=A~T?a;vr` zZ10|t;nG%LpTA*I(>!$Stxi{}$hKQMv;4@lze_bE+xMW`~e{V=%WQpEfCzTnbeGV<^4(fJV#{X zw>c?{WolO9ln9VURfido+yktBk-Dy=kRHZTTiWHJKn+yuk8)ims~ zg0gI37$(kuf!k*;n20ce>goO~Sc8CfHv@t49{IuqKvn#pDkQ<>$^?AIC#k?&Rlp2c z2o?ZWrL)pe!Tz3_uUkqMed#Az1WZ*l+K3@SeO_H-Tr4xGduq6T;niH>$hLFy&jW20 ztfLw^LL`us|HDrTe_&bA!XaIwoc*c!BhrhT+Fs}enHX)FYoQoeUln};Nz%~MF*tmC zifoPsCb;IU?iLU2Cd1y1Uc-0%Ppnj04CmaL-B6fodEffup=u7=_wFPnE6 zMWMlOA80a=E$yLweoTtNBI*lf_ARvSl{n0&e{wvaKzqHyv8R4rN3q95gO}W7d#7XB z`|dzsc zb84aKjPrt5_5o*_3wYXZsFBVG{8rr@KjuFkWqzJ~eMeIB!U-!)BZ{`W=PmpBYF8&# zoJg^V+3#6+pGK~d)SHLA<(NLOTiO0Dz<9c1n0B`7S%R%jWBQKXjlrIs5lJV5D+Bv3 Obshfm*G2i4BK`qkSZbO8 literal 3247 zcmdUwc~nzZ9>?FyCQAq?DQFaZf{0p4?t4jqun5RzTtG;mC@RDdAOZoifRu_RgNWFU zFe;$nF``l|n}`cVTx%<_3QDn3ca(}tK^7O57UuqU)}Bq=2dCC6T&R6r2C%IB7w7$S!Jm+$S2ve^zC2S>oexWExi zA1Tm!o^QZx0b-AMdix5HX;CU!tWugFQ-~#Ur8G(!D^gAe8rb^n9>8RXsDVu(+-^kB zz%W#_{in0cx*%KH%@@s|t=wA;tsIjtI3yp#)#~PTUOAr@*w1a5`7H0@>gBmMX_F1H zbnB1982Lx;Za;c(N;YkcIhqa)@k;{AZW*c!Xa;q&i$#?yax%i#Y$|Y8iB*#V9o_vp zi|*@g?^8vL%FVeZGm$*DPb}E=(JF&x)gcQ-=AuLKgovKA6GlBxyo(%lt?hz>33ptl z#?nnT*FA^^{ZFR{XO}yj&^5xP8?LqVwo9t4UHv*u1`O;9ssijeW1Kd(RrP7gS!r|K z;jP zR36LC&aVl5=CNyEK(u|ey_a=87?oqqnIM8==a>; zj%+U$G4b=o&kxbpijXw0CB8Aomnp>ruayL=p9B&}6cPcbe*>&n`3SIu&C7hr$;t24 zmzbcCDih=>K&^Z2fd{AqR131VNXGXDxTau+x^#Gh3@hQyHIvAZD7grUl*nWfTpNfg z5|>M)M1iREAB_a?y%ChjW;!rYCI??^6#p?X{Mi9t7!!Fvs91!jz=I~lBgz=5LLXEl zmmpGwLM4g(z_37Fu5ZyKl6o&t7Xde|itok4;qSB(0r7~86FT;Hl(q@VlBP21oj@czuIft)q&5>H$h{G?XD+)mHvBZ zBnuLK-;w%(lEH|=>p}Un+?r_nX+3n8;lXBQjvqYqw&d}#hf5xY#D?uG(=XPYDNJ8! zGTLW~?mMpXhvlEQG=&-yFAgCAUpo>@o{sKpa5ZlIF=8Kb9{j;d$Uq$rQ+It~?c9laa)@axUVK3pQcrk(l1B-eRE*)xBrP>q6zJZRyXK zhA3dm+<{PL$hNcMoHPI6{tO|NWGgS+qi-Op#0C6cX7hl(0E~i=vKBs1WGK z1CEk$dX&5}52J+ZfL}EZ$_8Mh*y;X~`1uLZ_EOmhM}&IH{WX}JX5{T2-(F!7*cG|f zS+e7pm2G*m*#CRCMr_HD8{6t$@!!8WfHq%$+;B13{y=$WpLN_dQo8TPs`~3artLr6 zj0=et{>&JB#{D!kyDKSTYSOlnlU1`0&YJtPW2XD+MJ_)cnN`&v?>RFjb4tZ0o87S+ z8Fel9lG^I%{lRC7o{{pq7ns?mHeS!owlj`8^6i~Cqqz04&%bi338_3hr4>b9Ec58Q zRI;?rVc(V1;J!r9$x9ebkd3Hgc4JJ7+xXMMnO{pU-qt!dc0@L172J;9?GkV9D z)Eatj#nG|~?!&7O9&uWiP^ zOxT?FhV`F;$$Rc^V8Z5nI82EDCop0EZ(zb^0(BWK7d=e&0QD~5s&&>nWjOp>nEYJLe*flfnRIusjfcTi+?5g{;db<eY2ptWW(Zb=% Date: Tue, 28 Jul 2026 14:09:09 +0200 Subject: [PATCH 4/5] REF-24: Pin spring-boot-maven-plugin to 2.2.11.RELEASE (JDK 8) The rest-service spring-boot-maven-plugin had no version, so Maven resolved the latest (3.x) build, which is compiled for Java 17 and fails under the project's JDK 8 with UnsupportedClassVersionError on 'mvn spring-boot:run'. Pin it to 2.2.11.RELEASE, matching the Spring Boot line used and runnable on Java 8. Verified: plain 'mvn spring-boot:run' now starts rest-service on JDK 8. --- examples/oio-idws-rest/pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/examples/oio-idws-rest/pom.xml b/examples/oio-idws-rest/pom.xml index 681d867..1f07e42 100644 --- a/examples/oio-idws-rest/pom.xml +++ b/examples/oio-idws-rest/pom.xml @@ -42,6 +42,7 @@ org.springframework.boot spring-boot-maven-plugin + 2.2.11.RELEASE org.springframework From aaa2a0b0257b82823e191ad800203b249e9e1227 Mon Sep 17 00:00:00 2001 From: Thomas Nymand Date: Tue, 28 Jul 2026 14:27:22 +0200 Subject: [PATCH 5/5] REF-24: Migrate SOAP bootstrap-scenario to OCES3 The bootstrap WSC still carried OCES2/ADFS certs (client cert, STS trust and WSP trust all expired 2022-2024). Bring them to OCES3 parity with the working SOAP scenarios, swapping the certs under the EXISTING aliases so all cxf.xml / *.properties wiring is preserved (no config changes): - client.pfx: OCES3 WSC keypair (OIOIDWS.Java WSC - Test, -> 2026-11-13) kept under alias 'oio idws java ref. wsc (funktionscertifikat)' (referenced by ws-security.signature.username and client.properties). - trust.jks 'sts' + 'devtest4-sts': OCES3 STS signing cert (NemLog-in IdP - Test, -> 2028); used by ws-security.encryption.username and sts.properties. - trust.jks 'server': OCES3 WSP cert (OIOIDWS.Java WSP - Test). Sourced from the verified-working scenarios (WSC keypair from system-user-scenario-java; WSP cert from service-hok; STS cert as in the rest of REF-24). Not runnable here for end-to-end verification: the bootstrap flow needs browser SSO plus an interactive MOCES password and is @Ignore'd. ssl-trust.jks already got the R36/R46 DevTest4 TLS anchors earlier in REF-24. --- .../src/main/resources/client.pfx | Bin 6671 -> 7884 bytes .../src/main/resources/trust.jks | Bin 4866 -> 5170 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/examples/oio-idws-soap/bootstrap-scenario/src/main/resources/client.pfx b/examples/oio-idws-soap/bootstrap-scenario/src/main/resources/client.pfx index 90b809b7abd18a4fd3ee7ca9aab3f42af116db77..a8f9e8c28c2ecd6af9a64075ac173d7d22f1f267 100644 GIT binary patch literal 7884 zcmY**byyVOv-MKDEZr>KT?^8wbazR2cOzX=A}rk@N_R+#bT_zwbazRIaQ)rq`|f@2 zALpH!GjnGCJTEkyau^W-2^vlr1_ZNyl>c~#i2y<<45#!!4ySbaM>{~nLAU>>1=>dr z2W|hO*Z*M|i2nan7-$HHh2bEPf207E1&H?l>3_?~kO>&p3;~}lihp{9#5^;9QWBv} z!5KzG0`#f>+l87txfiMqJS7hBDZ9Wv*)??bYIWgv*@Pn>lY$;>X}N*BRzHe{bABf) z=iU|pDviA`x1^ssjg$>QUFA~p(O!KV}y-&@cYrtsPDWWUC^7OA!cpH&^*KYbfSgN6eOPLcnl0a zK1v7^$Ps-nQBs3oNxJ8U;o+#Gd{y?Vr`jLjnsH44x?fNXr1dRba=8!1wlua-L}3+i9eWx?yLUl6{@sjh7UEV%{VTZx-33?dbL{W zx><{`(TB=F6us)-3i>jMh9@p@i#MR#9yx(F%CHP80mi5RzGBdd*iYGfbzgHlEq;e6 z4E#@Y*=?2a3yr@dhgbTfev^V`E=n`IG4s&rf*d*Pan3evJA9D_l%v7x>0R%LE&)Gk z$?;MOPMK93ZVLMBM^Rx~T-$=Hp$*kKqcR09E7rID#9YC+rloVV@!unm6xcHQU46ca zIfV~_CUfy@?fG>X%I-Fk#O78p!uXmEvE+VfGn|C$T--SK~Gm2PnM_^mwA zlE0*`B1fkz+r*Ou%Ul=((pS@E$Z~7pk-l_2aoEtR>EFJ;2eA(sZ+K1AxP#KZ;xG6G z)hDcf;ju;Je9VIJY-hy2jXai8IS@?(9^G>g3aVw(!EdWX7T2_t1n3Os7pG|8*>rAm)p7;9QAjXC1w^j!gQ zpDC{5a`*;79`1Y7pk}$TxrhV0eIetsUl!S|0*6P?Q*u(n7{}@h*C)v>75f)bOvd0T z-}!*z#8ISmaVX(JFJ+>_HI18sedKQ)3VoJxiD)IXYwY5nO-Rmf9<5BRJG-cqhMz-9 zg8Piz3Th`T9(ygSt61dV*KEVjZp02}yFUy``0%;E$FV{YsDfFzG{vOKvwqOzZ3MsI z^>`?+XCIvKSCs%oBY{Kb&$n`*`7_f@3nCJG#DKVykU0~^*!Sd6!^}FE1vM`kEAtT; z2PNc~-pbB;Y*!CQMvT|I>?i$@cU)}`1Chi|J0m{)xgQe&fv|%$z*n_7HdWq)vgS0u zU{V@J7R@O2b|=%%)gOopHg>`BN{7OK#Z9$=Dq6Ior8Rggk1r=I@_mqbd_$t7W*0^Z zRD)k?LX?ZmUDm)6J;8cJGnEP@$bjQ^$N+ht++uA`pc$h^V2N+{rX zyB{Aj^el15by)|nCE(u(`xlo4@a)?W{52{|b~^i|wmwFfo8^g<6$ zdj{4ULXVTNLE>7UG`^DUij3YhT*6n=g*17yKc^0ZhIHt^d~YAgoM8#J08vmRrUFOYKPp^zus}Wdf!Z-Uz zb};o=fWTmeL~N?n>bn$&tB^Ry8GeYwP6NM}H+fqutHW$sZFrh8 z6>E$dGrcH(#O?`VRNNjL*X?wUck%irW3+a5FU1M`yjOT>>X8xwtMi3#&=S;_I^%Vi zLhVcBaq(Nrvbh_Ha(Y6F>$kmcs2IxRWE=37(|^%~P)c#J5{d9kg@2yr?+4B}HNrGi z+G*rTt1CoIbt0U5GTyEN&3%y_5y&aIphF zYkGZkEyYF!Y%yI$1J5Zk&jC;cmF>{C3~z=}?EyA3)u-wR*UEV&n`7>K*rOycebYH77*m);pOHN6oS6thK3V4{m&2x zSQt)Z{EvE%hyeH(H2=4Q@PF(c_#eB+uEXt@FdN;H>853Le8AW4(j(FMZ@Ui-CxY1e zt+Qwy#Xf#LMO?2qH=VKYQ--*RKvcy0^g_U->hP$b>}6y>p?79w+RIwG6&nweeuUpV z7{g3a1H2l%#L53wLsplpqa>e%hC_CK*XKiY%;f*1`BdwsoG2U>ZWc+43nJ8E#pi?xS}xlp)6yZuAd_zuZ;Z%Ny8ScbaC(@`xP}EmIq?`qSLU zn$0ZsP=yZN#CSq}gk^vG1nL(bWPxiSW*Jd>jJC#14b`-WRs4BkLQPa`YM-l^na^r} zcAHmNFpxzdPb4S+9^R4%%z_c7WbfVz%^282Ch3vE-fPBHgPjCwKao?Eb;#Q*OlD;s z-6f{k<(GVvj*%{vG`Ax}M>poVxh`1+Qe69@dJk}o1xsoy(4lJyz4o-`g`vYMGOjd` z@7|)Oo6^SiM%`=B0kpzjnSY5KB#u+LF~Ajint7l?0roA13@+MHAnL>0Hoieu<98nl z42X@9Agd1DyJ6B_JH#rSG&9NnO zdBcP9>6+W1!s6ZOD-zmM!b1#^BnPAhlPTMh2XsK5D`&!lpozVFu0nEto!vNo8Fn|0 z)_0@H5eY!tsP!(oS+`Z_gk}YR^}=x8+@pY! z0>1fRF%)d&eTxU<;}Q>=n5PLn8o^hu&dwiC&WX+2Q_J1-Fzb7TCCOPLH&+FQ)H+DOpTEZ#D#Ih|S49X3s` z^eAB^kKm)Y;QlHcSbyBH{|Oy0a^4?iGMU#nFhwRE8FFqohC?i)V{J>xqX_i%{@dd0 zIw@yRmiA-!n~r7NC`N%|lP<*)QP_`bJVqDPD*rlnrtJ3^%zN94f=FDinrh<0f)IL0 zhpBu?t+loHW2Q4Mm~E+sRj+%l&bt$zL0o6O&+DEt&}5};?Id|;tYXbNp~mFWnUpsr z2}y;EXEwWlVjQ_9n)^nGYUmIt6FlvYao_M0g8;e@DrHVbYk$r1mV8#6_!wh~Ho-!i z#aaQTLOm8d1GaAs-=$rshwY6UnQ-T?h1b@!|DB>yTOWN_;g�!dl}oIQ`1)It%BNuUC^&3&yK1uwW z`J0-@43FeT9f$EaV|B6*M4RC+CBCY?3%2_5fw;4>T1odQV|0N`2J~Sx%vz`P^ut;2 z>YPX7m+X{^b9`;-812=Ak8+n2>WC>3o$uS}v|T?r*u}!>dZ=EYiSEmZ z_8{iYryPb#L)UK;haI8J6vkY{D=4r(IIpkDfo7pZD86?=$hM7k^l3?v!Iy5F$V0TE zyi= zq>Y5CJt%JzwDWpo+Iy{?tgvxDtSV^VG+k)bMb4f!6&F`O)QMUD@)Ut(tQRNS2WtMBMBrndvZY(Om1k6K zpa*81C*5rAcKycBV6OFoGrhGtcC#nH2f#aX*=W-Rng_((eLLEUjiMC9B%?iziJ|r@ z?ycXCp)sDw({R6&Ot5$fV&zoviH24>@rOZaj?!TMO%)aR`tCf~CA$exP%ESO84D}v z0Of0El;HA|hr&40gzA7U{?5l|$=R#MA3_bNj31lJ*W%lg5R`;31Y0uH%)d;sV)nAX z_;JlJ95RvTSJD(lYJ^`D@5FOviSc~tl^f9e z^oh5sLOSr{cA}C)6e0G)KF?@62!X6H3sr-Irm!XkrijwzUq;|(bXMjvM=!Uu6QFMkwRL?udymC}ZryRL!NbeisW9~_==JV# z*Sm2}+LkM08klD#pVLPG))DC**5cr1SFqO!P(?&24nW~V^iy+gl zcVAH@Y`CUaGp#CHI;v#OCj~b!%ye)9K92y;TTtEW<3zMapy5GYVYW-E(j1+c@{TZy z+3sGg&tHfUkZw{^Vu}ax*0F2Y4&@w$!CoW$w$7=~6C_T5>6s7bJ~1We zyjo%Qq|IuvHi(rW|B~H5{g|GYo2K=}^UBQMmq3|}>G8X>LN#oGZItiCpz)-)e6`x= z!30k4co+`>uj1p@7;N5fbo+3{P~z`-;`=S7e#B5H=#aA=%BEDElI-(HQ=IIL!2Xo6 zY~bVRa^3rps1&EHn+O^a*I;85Eutn&=3M;8qOvkxO6x?OBAX)r=Jf~ncpggi_Ld6h zT=4ICW^{|5CyAzKT^`pyog7i+%xG$nUUS4AV%S5y z{4$d4My|uu;T1uKCg=C%l2T-VrxFt5Ck^ZZe6#C0p~%|NmuhRV@^j20pBB=6WWg@s zLX;J7NAbG)RpIViiS}kAzaP-kB4%HSD54;vst4Ly$n<&~7Tp|5fDt@ggojtRMxKGs z6ZJ2@U!O8E+u#U(g|g@m7SK94*gy=otW5VY>#Qzx?A$#0WiOz%Ie7lx6{ND6^9QBtFb*{ z&F^Q4bKa3gByggyJQ&8d;9^1J2j{bl1@Oe10Nl^uC#05mNsCP0G_5~IsY0~ix|0e{ zJR3GUiL3V_LLAl>a#uYKI!f*jxHHFp0jU~EgY9mwJ?yw*09J}C{m>LC)h5?(p~{Y5 z!sIT^`HLCWuA}>>RLfj07lz*4$%lD7di3i98)^7{iX?i51cb{5X`ah zF6Pfqkrl6K(@^zyOa}zOSFPON31P8uuKEd7wsr~^khED~z_Zd4u}JY&hz1DTDuGUW z#c1H6;GeB7VP6G?Q&eh2cwH?y1Lc3p*S9#Ptef+k<-A#C`aJp-j#f-T9Bg=J(ZVuS zBQ7lw@O#_fOuQt}ICeQ_rR>+rn>dKE$x_h$mE3==#A0#Y6*2A$^oY?>lz zNxh9ho~-&_+CwnmMIE}k3(?e$;QTYaXWHI_EAh%a>Q=7O$HikS11AnsNP1;owIBEV zK=`r_%K6&Hj%>l7d+ywPspfxn%dl1x;qW=IYV@8Rf|rZ6C5)<>XDslR9xK?bivs&g zFR}AhGS~j~QqZd(6$4>e@tvE6P4vZQY9sd_rz&oP;&hvQt{X83^&>;v3f@TuAs*UR zC9jVjdANqw$rn9yoJ%kl!JfeO=)ghJ{L)^5OA7Ce4|Y%K6V@0eS}Ww$(zl{;Z>eV4 zJtdAWo3hvkiRo0!BzXMrS>%i%aMe3(n?@EM(SiY)Y8-4Gr$!6b6O=cI7iYSwzPiju zMJ9>0HNgZ_B?jhoyRl?nMPFYNv_?2&*WT-_=%v zt2`sbc;$zB)S2Cc2d`v9&*YdFjv5QT@BL41!}wJ8iHw`MxL*u=1*vaOjRh7foxJ`! z(|h|?VqXO8%GRYd+q=p}F^&J=X`F1bGPKPUr>%_nMs$qr1Ucr}PISMZ{cimonGkzi z>X&+SAO*|JjuIZ(9i$LBoCM`4@N`4NVH^iT5PqN1u-<<)_uf$vsl+5|A-Ls3o{ZAd z^$quma+0OWt=*d_Z1*0;Mw{yG>D{Uy4tV#$~bXUT#J6`rWeA_#6 z^R|}Ojp*6bWL|X*Suz;CDoERmN(dj8R=W%6?X|iQ#Bc}pjEN+1aer&|ph>aDOg8O| zPjZ$y6Z5x_kMQ}aTg12F+mB3`3Z^vN5i7d)Lnac7<(_w)cUIJXXOpTEaqOtDBy(di!R8MrS6gf6=n=WvDO3tZorT-f z(=Q2%Dhpt`QsyD|dKva}8!`;%9<96a%v=(CZ>(P7-KZ#P~@^C?G5m zmA(-8d!TuYTDw*)q0pcEmC<&Xupn27nT`{EnRN-vv@!T-P^r8i%^A#OeP?w!WLF`_ zQln~5YQxb}8XGsZo8tPLQY?o?^?oaQ-N=AJ2`m0dQoFM9Fjd}k<3yeujY{538o%7T zu!A)*i3Oq^SCk1V_{EcU_jX3iMy z|4S}wJ|G5X$4UXBhRZTF|jfRTy@*AOxGe{MSlQ$H5#_+QUt3y5Yp zlpZLiKi)AWUu0E2?wU^fT95bvSHjmd__Ra45^z}1vAuRN&7Z(l2cwd2&x@}qV`-m{ zheV%_t-F5T7DvPGtem{u>W?=|w67xZTe<|08Mqp`{hLy?S(vMbDm@m6V93jLrP^UC zMZ}Cj2I!D8&^$nQJrsv^g*;o0eak-}-y zTz5Va-3zo^R_d(S=nKB@*>pIKt~aaXxGA*wtkn@RwN09*60;*KXd3e{?GgMJ&>-F4 z;-W%SeaAl-i6LI}P-7joyR53u3HB?{WVuhl9S#GT;8$V0-PH6+pSE zm-&&A!zf){cr*#cQ(UXa5mjoKH?-MQuUSO+OX+WywOwz@w{y$~dU6?gpNsRbD!V4T zTd6%SYhEEWZh1!$i}j4HbK|m|K?~o?l@}jEL7edevOI8arTsK210;nb*5oR*yv{f{e>81nW=K&=ncw z>T8zQz9dME4*JwS=SB4M#<)EiVMNP;@}*(wi@iG6yTSp%wg0GMJ#XYnLTL;~1>txSFhCeFJw1?o?7Hf zE@Nz87j+fZmP1#fw&@q1!+A4aK33j`Ixx4aqprz)g>2!9$zqo2!*4ayWmY)hlwT%) z=T}fa086=*>gOBdb6u@~pjZYwe#Pnjrwo} zmcLw^RnhOEL06^sb1_40>?f93m#{`SxFaZsDzx8unc(I4NknS)1S$@tfr5c3Y*b+YvGu>yp&rHqjnXYQ~ARrt(dk_*TQ-n;!EhZc?TtN_R5JCw2FZQ7S9S%VvWe-6j zL_+^>4-7OoU_l7NJ$nek4Lbu8+W&!HXo(R(+2QE$8WOr>Z?P;FyiL7viaT4Vfj|TR zLI}br4XB?uH|b&HNj1V6^>BNU9UqP=Yrkc!Ur=C#=>BVqAm^C;mQ_6{29nw`+gTbl z(oUUWr+|-g|1GcyekSQ-`0;#$jsrnhjG4_ixD2PHFb;r=VF67LiTD#lx4Ku5em#Te?w&qB}nl50ehmkUB22i(oY_ z^00pEik3#7#QMlik91unO^^#7{W!(dJh@7wo@cgRp2S4_R&*15F@a`FR*jOLh?3QU z?VR7IsT?=yJrvpgzAet6kJolZ!`j+|V}v4v(r2s0DV1h_*z|T<93Ok32<&+cEyw87 zQ&GB&`+9HFV6yuZu*>GV%}moKOKS>CSPt~nCZu>b0v}F?e`UsU^o^Gxhy55pLc`le z)EGIT?AQ}ItvKVzoZpGa=TnwegV3M z@8Nb(iVp>$8cQ*|>emZ$Dpku1IyN`+DyJ^-`5-_G7ZNc=m)K4WC4bMSW^Fh|C(N+U zLOZ(>#OI>d;^j54Dr!&WOF9Jqbm$Ckp)B7XhHfkCTrOekefNwzSyD3Gap!P&yU)aV z-}rolO_^PtyTu$an%R~dMM+W(lR3w4jE17JCvw{ANX@)?zdhLSU1VEw^FACRW;7#_ z)ZWNcX#FV<+*LLeP1iHgFJ;YVB_yt=KsqLXz)m6c`njytvvckM0YD6oJqjlT9mnH* zu-iBL{Yxv(HoeT0Y`4K;C_s^H9gZv=@TM-igEWKxoC4p?`&)`+md<60{W&#fG7~lA zCN%AO@oP=rHReX{T<)pgEs-lz`D|&Nr39Zz)`yl5=_*BKC1b;~jF4VELQlZ1GMX(N z)TeoB0z`oqDkHx?5O%8AzByG}1NkF2S}A0zgLxPaMA)yqRItVbR(0U-p) zPyMR2TIpw-`SW_WNg(MhW#S1-`yDXz$C>!yeHi5WnblY}W8>Tk%dd=Z{ml5r1qwOw zNSvK;Xa!PXy!SvbkxL&j_~{r&W>#ck_x(&Rfa+ln8SNWR&4n11UAyI(7JH3Ekp}gX z5FNmmv_a0OJM}v*=ap;lWxaZ!Q|SBLhiaJC(OBlY<~Uk3_AF&JieuKxb!hadL&m1n zMSU73Qgo|sXT5rBy1zOrWEM=aQkE5qOYZmMEOH1x=V7S|xt}UP)i&S`-?sSkLYa}p z8?&KqTzWo`A$X;_jb*{d>m&0?_~Q4t6b#6l&|QqD15t0hXB(StrP#&Xq_9z>8m#$G93gP1>@@%PDMiKS zc#Qz6Sz(U0Mf#-o@FPi<@rKd!NV{H>-Rl1tfjD%@wE;>1*_TH7(n|oe0BSFi9KZzN z@zN*(E&vOFC4lus`a2{3GBUjA?f^%C9l#A>1Ax3pt^l(aE0=$|4-~_?MM51Dz6>%fM*9UeCT_I;{CITq+_wK(nVx zvtN0R3M*7y@vBm$t2;dId>UMO`>z?}$zWbQ9N~wA7Nj3NS{nmsk%QHeQ2vZlozMO0 zJGJ`UXAIxQd>>swPEjC~qc>lby?yFlN}GpH(cuRvcCz0MkIFyj?Ip=PSU>8E-%fp{8mCB~A*l8d}KQqL! z)#Ji(E%qO}s6I8xS7*-QG2~n{VEVKPEVIZkkH*6+>-9;urFis=Jv9PMBV)thd(TkI zMLAA5(ZuIHq@gX%q&5H7^43!l{I0Lc3Bh$^lS*=1pMJ2<2y#B@nCKk~443;tJ!h0> zIF>{Fx6*cY!!`W>z)Kh?77zWYF*nl zOXDly>b6O{0g0r~3U60?wjleNjlzgXRGSe^Xow4q;&|e^2I<1`xW)CHe9?VSe;{*y zb$<8uql|m(c`WTc?qSu2n#A9zoU@c`9MI#`&_v`VGC8b<;9M$eE zs<@KbTQjSNCw#ud9M1$stn_Ad_=q`s^WYP5L#-jx&QUH>$;bHG^tQ)l%NfKg=N=eh zsElF!DnAy0MuhrmPMeAephaZc`~4J!vASQ{$o05g+9lg{^5UDy@lRhxs6zd^0ox?6 z0h0jS+(2MY=VCMIu*m3gD>tIpt~5CY3EeV%-y%;?xrLno5lmFW!AYJ${mjJD@YNYd z;D`rqzHwb*$l9K9~oqPumMqvhsK+2j1btd6&A4XYv=2D3r^lFQfNN zffprl`R9epzO-M+mk*kw^Xwu9GRRI{z%Bwk=w^*x+(^pqrwRr7UK~83fe{<%)uN{GJJdEhB^+G8kWyd0mgJ1KLHUo{x9;vDLUqdhL9^2n##^jn=CNnY#-mJW~XS{QK=?IoZgQ-n+yZ1IIgoO_Jc-or{%_Yxi7JvTr+LdP|cnk0u#@~qH1u3iH5`D9~BvyK|3KVms4aM~6PTG5Y7l9049mbogPpFS-{qBW@JgL=% zBGS4WAvi|0dY#SR%S!wj#fKXl42{p%^5Oq7Z=^!z2zoYdlPDnZX3pr#$)Yiqrf5re^2kH zz~x>aZeC$T%Y#YErDSBE?XOsstY)F~RcGv|Ol`P}8atpXpe&Wk^U z@WpJLAh;^!8A9IN0S!Klom^uDTEzYWz@87Ez3#9(GW)nnU_$Q^0>hRp4Q+ZMcNTJ` zVlVNDBat)!mY^DM6xDNVt;pXO2yHoV8yQp76QK8;`8}xRx)w>wM)(P`RjQg98GZ&v zK}nsRrlk=Zt@1W#^3#9#c93BSGu2aOnM4d7PuV^cou4qb4v(D2h2wRuVUW(C6~7%# z!KrK0irvO;!wqbR#b&zoTM_Tc{is(sM71XC@kj4b^eRirasDk{zaeT(#=8gfE8JCE zIGv(bzETpCDqa@`%KgBE8J%JI#%DHa?xURqcNUgOm#-r%7VVN^Bbx5*+CA@M6p6`Q zP$<}4#`$v3anc!!*4oZ1o9!;pL{_iWv7{{97EvEw`3kUd4JGqvew04gB@4|gPa_(j zoz~wu{LW^Uk_L0&_fpj~nSA1uBqQKFc`s6g(D3#iQy;AY<2LO0Gxi6gSh1}N?L6Nv z`17a(YSZBY{eF6C)G%I@1W2TKnmS|u_Z3w=+j*^Go&!rW*h$wa<}d#M?0$9(Wt5rk zTCpNs0~napbT;xe8gi@Gc*Ay08x<&E9mMW*QD;e|#@ONtpVFQX7J`8Voreo53y{Lv z@89>8tn>8evHXb$cjmj-x3L(eD!aa1KzEM0PUpo~129{aM-1ErdzKoM4VBl_wTKnO ziv5t4R?zv*LH%#U+NUD3(Q%{P1w7xCX;pnWo^y+U-Zp*9ESJTe!seT?@{LjM#C>bu zE8$wytJRHf_*K2A0vg^qVNgHbh3@YZyJ(a4ao3ajl<1WuE%i!%Ec^w%Q>R<_Vegr5 zf+~_8RHwwgKxJbnIo?BkBJtZ{*?L8?`A^bC&TET0-5x+jdtKqhb)P3y;3)!ryn;L@ zPu&6@!2y|?Y=Ra}>1CA;F<}RL`%Gv|e9(x;>xaGf#U}_nx$WlfTN+Y?JdWn(VA!@9 zumD#BMY$iM+y(D5N85W^7ma$FNRfj!uyd||cSU)1ET0$ikd1s`y44s_+sf^1x0ufU z0z8(yuo2M6mj^K?h`0Dmh3RG&vaoQrHSO2Q^C&`;MMLym+iu|d%i{B0>%~>)#GGk(9WwJ>X zF7s(Gn@H_K)&x0$jbR^^Bk&o13`t>8lGHd)gQ&!Vn=pb2NDoyoTP7&bpyIbvB2UO7 z2@>=3h*%g1?@=~3R(L9^YE}GndouW#fS*j9WeD~E24ImdXG~HRxSU35!-8OS_0Rxb zWvq3VGv?fTeo09`J)l#Vi%5)Chb?fW>63fhC(#JZ9RCrabz%?RLmVZp4*~FnI?qxf z%i@m4r?F};#8=xfBkhH_IbQvMpfU_6~Manbnf~GrgT+9HEF_Gm-c2J zJNoPprMghbC#!td?{S%wYKxbQPU8!A_tf1Y2jyF?Xilv>{bmGMwHm9WDi%E4BUd*6 zC2Nu0pY%fE@GHVsfn@dkuT&*@N+ZCIQ8B4@SFB)_{q1qxfI}^<7JbrOIYz`8x`*=< z=Et+L9lu2zV*ah-wzh8mPn7NR*5?jv+G&#^M1#Fb%52i%f}ykEU`|`ZCb^IHsm(T9 z@suGHD;wN}5U_cnYmoiAYr=w2VybIztOe6B$O8$dJVgtK%^(aCG<# z1*DauWL9(6^oEy!ifDY>J}~OtVudZ=cx0<&81ZavJ2(lq_TLo&_j2o!SIDJGMnZuBPQ{%Q6NM8fEyU`S#} zXC?#ISqbpconT~p6jYNQ9n`xgNePjoX>88`P?L@vp6BPvAHA?JiC=1tIGw{4HtT z%&12~eCfb+Cp1xSs>AzoVoluQpAv?5ZF_6Ry4+us>Rt5B+`$}o9!G)$dQ%Mr6Shph zb|%I-SDrEqF~+?zGaK~QYyt$n5b??=HnY-^4vr418|)If;SH2^gt~~S2lA*#M1git z3B#qe?8Pe;C2D~_RrWeC1);!a2iaNHf3Kvfb(?z0jA?}V(}llXNvrEvyft8y#~zp1 zXV9g9w3;VWB9X1%a{GxdMSO6`sBj7=2zWQg>`XH@_P`KWO*s*rq$$>dDiVUabR1tP zb4oD!VInc0A1r^18e3GW2loR-?g*WQM7 zduSVXM@KQ@HwTBpx)7ZH+8~`Hro}lH!zP$DGc1t`dsdH?mnhZ@-=+co18~zDe|TXq z3Q}5hlO^?Tpt1fHX)e0%_k7`OK1r*tG6Adg&$#9he#LHInj~)8&H$Nn5T55>_#b#f zH(g8WMaIYBy?oJ-`*Cjqanm)bk=yrhLUV=N`9Hon`xN`p_G@lZyMZ|q9jsrQ_z$*^ zn0ANue#ZgP=)#~Ua#e&YliKQ{QZ5S@*urv^%pE43E8`&Cl+lNWU@r7J{;D;dY}EG^ zadHp)WdCA1Ok7Fy(Rh!Wq|soCJa*=^i8~lmeI0{P)Q@CM?>DF=6L-=TvZ_#hf^$KL z!tES1l5jr6(imgXBHhNMWm@mW_Lie*U)akpdjF5A(l6*o2V`&UH6wlI9DaXmkCDRF z^B(PTh4+Zg4!wzIs+sMcxe5dz++3ds>O5nL9Hf!gE2|imY@Zl6@_zS*%Ut5`oJ087 zaFYX)5rn)JR=b;$!45us&8yFOf^t4_y`f7N$L)_r>g0qO2E(Q+ ztTg5XK^&V>7fCBTqIS#2G2N*B^Ibs#A@}NFphlKI?XN(~+f5#yi1*hj4X7?4tb{k_ zl4hvxgug2P%%K~6qaTCMa_c%x3OvHafW;4b)%R`ZptW^)lH zN~il{egW#!;186thgx{rt}^L(fcz5P%L9xhEA-sFG+DCh+F_&r9Mw1}#4q`K2VYE};R|_ps zXH=oqMvHYW%F$?fl%Fzb76-@v+&GxVnUO>O7{37tQ(PnIrlhSNtQ#_rS-){okHN#M zm{t9=42&)m3fJ@-lfi*?XIQ0g3sW%Q#j7~F$2q+GpDR`v)_ne>^e#O!ZrdgW6LS&` zZuY<$Q+>c#U!H@(r`z()G*%1C5iz@ghXGr7+G0v5jMifiF8!qdM~A+7G1URkaTzc< zNU&I{rnxtg^UqR>rCS4^-!h-zz@5SRoCofI)I{Cv7U+o)Rh*3R0E6}KcKzbEkK~s+ z>A03EvLv=OD>>nCt#1Pe7oI~2#$i#U!G;aF*Zq88bRrJsSdGsWmP@PIR5=x{^-Dr+Lli-TpxQ#AGgV;lTK0O zI(W7ahCC-nze>4wWkNb@xR$>=I3ZQYqC|ISzZ)H!CHtsf=(JzEw8AjSw0iiZV%Ph* z7UvnwN+g9^FT#QmGTl77mT)y1r;Wa`J}j<8=dXlOMAAovIyQ(2{!Udgm+QNn+XMeY z(Td|Uzaf-=0Epi0%byd6MMl)wC;#Eq(3opi2TPRvfko2B+qe@ZH}%$@OZxtJzv%GB z{9dHbyGmSE!KU;y9O3pA8*R;0afB1y1%ql%a(0=mVF>p8Z$;_JB9fuqMxaAratT(g zFXl$lJEfiVwfKBWy5AYEdX>O4=FeMlG!gWdy6<<;3xte%kRE5Hl&+>DXDlsFa7(KSUNW!oI&vzI0%ia*Pph0qxA}EiN^%rdiI0z&hkb)I! zgPQMm$oxTDA~uWzgCIO;f`lgz$qnI8OmXfOB(j^u$H7`2r4`6T;@; z9qe%sqyj2Sw##AAUgGF+cpOU*2w_2W$s!t~_y-%194IT%pj6;=7jXSLc_Ia*5XQ1n0zd7yFU8gUmsSL@lL4@OHAK zyWrg{w^=ekGRWl+&G0OaITcSP5vh0v3*_L5790)}B67)QY%Zh+>b{K-OAp)~C}0E! z@;MQKA-nl}K}-ZEn9m7;)`4o0Eewpp4lfU}Z4w!zK#)20_c;iG5=kN7)m>a>gb>Jr zfkNOLxDZH&9riTep!eh_%2|3o((0gRZb2O72t9Qj?UIt;dCG!m+3*Y9IjM<^Z{_5G zbU|{*vr9@z<-sYhs?XRLT}^8?@5z_C`{+jhY(KcoA>O7XQS>@MR)@EX8Dgwzw7I4{ zP}tM-y7yj_e_C35lHW?2kpSE2&^449#c}R&nFjh4<7@!I>%I1U%M`~s~IFa=e%T*$vTay~u_><0-KuN@Jfl-O(W0fMCNp}=`AyKoieg7h@a9g1q!Sf4 zUmn5uw|?t$oXEIwKYzJB=!>vVoor6o{pjB-n@B*PRQjHrPSzye@@vp-i2t&!`r*uF@7kzz^iL(oE zcXYmnTJW|xq*AlXJSt(hHAnVtb;#7-&y>o-suWaXZ zr#*@cMpK8hYID*Ir#JjGAEdPPP_s>8M{V9=hmF4^9`^QJd59q(6I#9dolVhdTU4K$ zru0EA%e|E}KBT1xiY-B;o_eE7_+7N2$qvOw(K1u5;JtaR@tKm!DH~uQ%<}VlOHugycKDu{y z-Y}uEcWa57R~|ibx?+YVPw#7Pm2<{EfJG~wnn2I9op0aPzI2q^Es)py7z zbdBd3G(lTC&|(j+56d>$Kk>1CJiF-d)RYx4&2T;Mu)Yeml-L-!Y~otil+93ht?Exb z=InEOs?ueOsn>|=J`mny`^X4`MJw3Q`b<8S>3a0(=_mv4QCiM44pqvp(eqlN=sYy` zX#K@iW2tx)SKsk8bhBc^z5~5)poJ1Yno*pHx40Vq`8}?3#JD;j##QsLxQbfLP23{u z>^LS!3|pQmZ@pD&eD*KsgufqGBnT3diVB)R<`P_)iAB;I(M*i1G6)B*7q`0@p6lG4 z+??n>o&;w`6a(ku`Co}ew6I`9Bq|e6;xfg=GG|-hnGlzPr!cup4v9oDC$Y$XAF;mY z`xk`zZVNp|NXn<3sr|76OObMZIdTU+SsLG;U0DHlh&wvb7I9;)sW70}y&q|6IcDc^ zP@(an$F{uSb6;Z%Rx#|pXvmA2W>h$3wBDw)n_ z&+2tKJvBsL7|NTqUTfXl_U)Lg`w4;OkppSD`#h~*CLC9O5IdRlonjZWGJ40?EXoU= zo0^j;XnKqPTEEfDg(QM{ZR_xOI_`(nz}nL{^ylmL9=l)9lXu?Io#CgTK86wSW`uV_ zX*7**;!nerRo2!l5U-zj40C$0v8E*tm3-Gq<7?{rDf{DId9n&4T-@tZ2y!`zjG ziw2qA(m!;R>-ilT#28GDv?N~D$+iSeMIZU9c~+kbX$)S)I0OwuBciZ|PVKU&%&Q(6 zu!hz7Y3Ae(hfMjFpd_sSvRt)w);nT}#KaQ*UlB`B^3>yynjrQ+h=oC+-xKQ}1}s`V z8mF#BtJYGBxYp}Fnlar|r})1D76Mj~-`*I^HxvHUv~uR6kH;X7rgE*_-d>;;_c%aD z|24X_ud?&zbGtc`Q)5Rd5Z#3uFX)fC)a+&Wpu4ELXxAER^~~0!WhsrpUiYgU&AmoH z7kt*fE2aCZ#JFn4{W9GO!L|!-NgFfaldm>CzUATnYHcW}DP5IL)G8>=qS+NE_~x^5 zr7Li2*m}3ftXl);V;$~P7j#aij{4d%hNQzU8k_oDsSfr(ALbQk&M!RQuD!$w1#;rtTm$q+UB567$*GR$XIkWJEK%+bKU-FtQ7l+Q&U(VZ=yk`&lcK?>G zn+83#USGZ*>S0nmq$Tu|>Fi5rCX$UW@7KMvw}t+2xa2-u+wrP*`)A=Tt@BH7fQ9&N zxEfS?Ppc2Z)raBg!*KOsxcV?$0k{vt)jwdka?!eCJljzho|{!6fxtHTc$CXT$>rX*lNcXmUgifa@ie{ zRc=X2CAEHSXhT`sU1$|45-L>M@6h$v?$)-ufBc^3_ssJ?Gv_?tbI$uc?|aVYIWyij z-iJb=Fv!AAd@BU-qD4HRh+-lX2~jBYh9#Z8Jd}(lkqQ_n6kZ3!;t3#D1|z{@&=?HP zyZG!lP{hj_#Vw0_qKHOMl|g}J@Khj&$GYM0su(**csfv#3i1kaY*#lHn?wO-umRAQ z>aYr0uXPY>qfo>Plg5TTJ()~su?^7CP=pyUATeMH38nxq4Mh@ZLL`%5*vt!vx4j!m z7tEdvHPgw7$%br9S&*qIwAkI%95G{%VL*djfr0c98C9LP)h0`scIGgdOry}~fI*@H zIxw8vpq}GWXImCz0@>ItWkK@;qryW({D^QNmnRVM1Nk8wks*jh>%E-=v!xS0Dh1Q2k_N~A%jdVaj8d-{KThx6ye3V5 zi>@4Lo8AI%LdMZwGfy0zlcKa$72bv#XBIjax64JzD#=#c7I4berpB$_nw(`G#f_Tn zLbtZ>&+BRE*dOITB`x)OxFYX?Nn}>;j197_QI+b#gjJPc82`aKttn3;e}zt19v?ut zVQyK@4N+6vS$#JMj6O1SODQos)zFMC`ttgfp>AHeo~3=i;+X8bta4`)%5<}xUF9RO zC8k>(tkJtOmpt@mm0o9Zn-aW8DNB6z)7H2c44)q%_AE>DZ%(vj(B?H5Rd(_ns_LV1 z);`r(JGTsjMWfJrV=;{&7SjNfki=>$qtP#LI4lNR1;pui*#&sCjLZ}?8YfN!;&@>B zN(0bwAXp@dG&ePk;0hy&!q<0%L?Vg=Q9_aQIuW@MVWt9}Fft-MfF}U zi5x!X&&=QUY{KObk@H2)50dT`!o{LB5J44L%6LU&uQ;@L*ad^b<1j${9GJd}he50B zzl^tj{rdOz7a1Ysiy{OYfw&F@D5%TWal)B)0I4Z7L0mK;Kogbl=9=*YP@sSV z1@OYdc}Q(QQ2|J~1n`7Vl=P(`XQmwl6Ujsx5hhZQMTU_Nk%auFA&W$W-gnC7AR!Q^ z5n+%hm@kw%?1$?AiATE)nXf{r~4~X-CmBd2Ah@-zu0#^|Fu_=d%$isjm zSuOF+_XexpE$dJ3Ah0r0m=lc#zu0v-%%Ds(2yK1bOrZX`T2Ud|PV->J;yu^KK0Dun znu+bUJO#9+@1ulM$Eoc(563)JG^m~70&yis#mn>=t6~(1O6jbzrM(h_Qx;-lPs;)%YIm06&Fpoe9phpf~57`(cq!Pp#rwP zg7x6|;>NNc_H29Nmv)E{!ni43E|W95f_489OF>!F;5&{pUh<9gt=L7i-Py#&YFL53 z-opumU?<73PBK`*c|#6>ki!@uhuTYW`1Cko{wsxm`QdY)3+7B7sP-R_!;|Tb++-;_ zNC1#XR1%DQQ>Ex2Pl_;|1S9B3dp8!0l<@?m=G*au_##dyU&s^i!-IrE(MAC;RLBc| zg%UCaP+^#E2D5>*Js>F2l%nL7dIBX>8gkVrFd2Z!%^EuK!j?w_nef9WIl`7w?$cmW zOGw{4tGiUuWgy^lb6(C#ZG)0luG3Fe%_N_3E3)>Tg0KH`2yVUcpy|STlS3u_BYL6N zaod(AmDk@GRPO%yW~h4*`!?a}W9p`ul!0jfxzT$HPnRz|ywKq`J;8eODvL`;7nYBP z*%${W%qjKQX-#U2tG;q4x~p1k)a^{(V_e3=6)FZX%{S6g=1mPe`s1xo`Ox@~CkL#m z+{=#4>4c#dev3vf7W!7x_Fs;18;P{h^&zyN^f`UD&B0f!X4SHdkMS>bNX(o20$LKY zIzkRwaeqt*%K2WQN-eGQL~$v#_uAcilujRoihRn+hYvQxtig6}SwYdjV1_R-f6S?j z)cy)4=Mk9H|3fe#Q{HRVe+4G*nZJPvney>4!TyiHg#7QogiHkDVx(N8Fv$nvTwp0N zmzc%TeitTxn)1KOl8@{uuo6(1EN2-hOx|TlV`y+XL!g;YEehxzp0-yUKf+|NZy|YA3eZ+>bl^sh<>eW8LlH6N$18YJv3%*ww*SOs9prCLU;qk7nBUE#S`^MGs zW!Yy^v8ZcFI(xS)si|1`g^Y$h_vzi0_GGht#|!k^?rAHnBbIlL^764q$b#8BAR*B_ph?7k@1IQ<7Vug`;@_WDr@uZkXBf1}78*CkRqxX1>J9 z>a4v#{mVE(CJ#UcbP}C3ffLG0kw#@8IN9^JapLjEIH8--=?of!0mzg0&)Avi3^DCI zSdarJnga=VfkeoIwek~*@(kx!Pnc6qf>k$HmOV0RBsBIc&yJ;H$M{-BTfK4}V~mCi z>>bV75p{L7JM{KA&DQOmhT1W03M)P-Y9-gW);n{LUl)z#?&eV$)|grA;@X)m>Xc2%#&b+@m60s2&Kd~^SRKG8?%0C~ks1B*-N*dy%timVx1ca|twBs!j$+pPKR z^$7b5saHcvRzBILb1aBA-NnPko8G?0dfcwu!9Q_z2Tt6~n3O5%(N2_U&S9 zn4P!DoZ+mIoJrYgz&&W7qLi;c+<36((arnUdUNC+`kA2OJW+Nc!|ep~(VfZA0(#>j z=Pwnjl2fWS@5w)m(yt-xe?^pkay)sjKmE1w~U8c19tbQ=lw+7y!yNNc6;Of>1;72^hoU2+YN~{rx|U1w9b$t6hn`m zm?;WXC%^D--(JkzWWn{eJTPA;@R0HCRF(4Q?Osc%<(g%NgF}uBRxG5ndEsrzHnF3R12-&v3G6m z6I+i<-`u;vtqOtcs-`riEN~L7FTI>u!eLYeUh-7I=HXK_pL@1d;xF#I)*;%d