From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0057.outbound.protection.outlook.com [157.56.112.57]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id C955E21F94E; Tue, 7 Jul 2015 05:03:23 -0700 (PDT) Received: from HE1PR07MB0937.eurprd07.prod.outlook.com (10.162.27.143) by HE1PR07MB0795.eurprd07.prod.outlook.com (10.162.24.146) with Microsoft SMTP Server (TLS) id 15.1.201.16; Tue, 7 Jul 2015 12:03:19 +0000 Authentication-Results: lists.bufferbloat.net; dkim=none (message not signed) header.d=none; Received: from [IPv6:2001:470:183f:da2b::f03d:e05b] (2001:470:183f:da2b::f03d:e05b) by HE1PR07MB0937.eurprd07.prod.outlook.com (10.162.27.143) with Microsoft SMTP Server (TLS) id 15.1.207.19; Tue, 7 Jul 2015 12:03:16 +0000 Message-ID: <559BBFFF.6030304@darbyshire-bryant.me.uk> From: Kevin Darbyshire-Bryant User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: Sebastian Moeller , Joe Touch References: <559B2513.3020909@isi.edu> <559B53E8.90201@isi.edu> <91B1B972-C481-4B70-941D-F29ED1D60980@gmx.de> In-Reply-To: <91B1B972-C481-4B70-941D-F29ED1D60980@gmx.de> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms070309060506080704020407" X-Originating-IP: [2001:470:183f:da2b::f03d:e05b] X-ClientProxiedBy: DB5PR09CA0006.eurprd09.prod.outlook.com (25.161.191.16) To HE1PR07MB0937.eurprd07.prod.outlook.com (25.162.27.143) X-Microsoft-Exchange-Diagnostics: 1; HE1PR07MB0937; 2:LbTlXzl2zCLFc1//Sl1tj3jfku1vMaHh7a6DfS68JPNFj1JwqQUeAAa9D7yNyj5+; 3:SWS07ur81Pb1iAfI768r2Isi5b/NHuoH2tbI6FM40rTsfWLbdErUzg+S5Y7U9a/40MSvr/urLgwEnTSaXnrmuGJeU+SD69TAmLzBos5i5KPeyUZZWi/FV/fIxy+9LH3ZW87IydK4F+pImJO9B9YPCg==; 25:OzY/hwlXxWMsRxThyWkR+ANpD88hw843uJbsNmyLOa2RJ+5TacQzR9ta7dz97ao9Kmcj5frXbTi6KI46Cy1KCnd1FrS0L106CwiWx7bxdYRKLIS4GpjmfeSHg3bAVa2CKj28QSws5Mp9o9voIrONQOR5bckeKEyFZ3FDm3Y+H8ZcNkYSNpN1hUI7iAqFTF1TS0BYAkosi7LgsxkRrirzU6M59HJyAGt/Xt8ZnEsi21gt5/TSoHJYZSF0UEvPJP+ZBGxy/LPeJYcnaTjONWM72Q==; 4:wIWlKx0QHv4wLxtnAFMLLoW2sGvhpwCtWS+rdU6zFwY1Yvx4aUJPd8gC8NAG6W2k9CME0+vCauIzMb36xmOAVGbbFTWr62eVoa/SCYcoA4TYimm7+rGL24fPcg1SFcsjIyee3GgcLrvG4lPRYka27T7NfyMn81/6Zw95t7kQWfKtdizDwVh36CSD3ZRT/7Y5T36fsdmfJ9N7CnFvfCL0dIBh8mPcDqLKNUkaCVO/NlfruRV+0udXnT6KlY8ObxkXWAjzdaThjtVpt4DIs8kNePmzXNmE9ajD9UC5LFBxdD8= X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB0937; UriScan:; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB0795; X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(5005006)(3002001); SRVR:HE1PR07MB0937; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB0937; X-Forefront-PRVS: 0630013541 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(6009001)(377454003)(24454002)(479174004)(51704005)(111735001)(52604005)(87266999)(40100003)(122386002)(15198665003)(76176999)(33656002)(65816999)(512944002)(19625735002)(2171001)(50986999)(86362001)(36756003)(54356999)(15395725005)(15975445007)(62966003)(87976001)(2950100001)(77156002)(46102003)(568964001)(4001350100001)(74482002)(42186005)(92566002)(84326002)(65956001)(64126003)(65806001)(16799955002)(19580405001)(5890100001)(80316001)(19580395003)(5001770100001)(59896002)(189998001)(19273905006)(77096005)(5001960100002)(93886004)(83506001)(1720100001)(7059030)(37363001)(3826002)(563064011); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB0937; H:[IPv6:2001:470:183f:da2b::f03d:e05b]; FPR:; SPF:None; MLV:sfv; LANG:en; X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; HE1PR07MB0937; 23:7Lk35hEZ7ShcEYL7lpeKsXGWj4leafO2OJ0XUx8Rn?= =?us-ascii?Q?UybqAQoLvhSIw8Heh3yuOs0LXiwpgVfGrsYZBLCBxaEIsfdNDejJuWR3uDjh?= =?us-ascii?Q?haKOLwZT0PX2rPi/DNzRsZKs6ZxWbkKqCcdLqk7yWO7SybeJMnqIdkFQg8pr?= =?us-ascii?Q?MHQ6FZedU3E7mW1AmdsHv9RzzkxkjbFAmdBAYBEkJknqx/7qUuLe5HeEpWd6?= =?us-ascii?Q?jwuGz/q5NYB0+TYSgfL0m0bMVraNgiyf6m7x5DccfugxDksKtjkSZIfJIcT8?= =?us-ascii?Q?SapS/rQYaaf1xkvhB22nweWlNkYwTlS8I3EBpRNsOtLOcLIS3DtDnK0/s9m4?= =?us-ascii?Q?MAMC3tAPMjMNvh+vfvRmgwoUvLDPYe1iF6FsCXOfsdYN8vuwj84LjrOaPBo1?= =?us-ascii?Q?cpVrAYGMl+V7l3LAZddXzNLW5CmxJ8gBpw0ThggsEQxhFY0xsQISu1fvaD+G?= =?us-ascii?Q?lmqgES8ljYd3l2YkmVQbZEfMZL3ch88uV3J6zRETEA0h4QBCxEc9TQzWAdDz?= =?us-ascii?Q?NasAxCNxrNh1DdJSMl3AsxYTfNPDNJMOVBrDUEPUL8E3ymgP1JK+2py1KmIS?= =?us-ascii?Q?OjmBSWmZ9DChlDfXGhhEhyWyi3LhAO2Wd5lPTcifJQ3mJVhVHhcJmd0PsL/C?= =?us-ascii?Q?oO2+4mtsGdwWm/yNInUIF3Lx+DCETzye51E2JXKvEzayZ4Qc7aIut4CiCT9J?= =?us-ascii?Q?9e6YdltjxZv6g+dD3GGZ+UdciBila/ln6jPjOG/7zdEbEZw/yM4IXXV7Jawt?= =?us-ascii?Q?BbVkf6mO/LeWkZy26sJ9ZdCn/PYeQm85mZ5Vx2txRQ/NmF6gJZ6JbfEfOTc8?= =?us-ascii?Q?bWjIzaUrT6ZpXbbfb27290juXFY2rvGkQaCdnDGrgeWbFARm9edRpA/afHTc?= =?us-ascii?Q?rrfxEQVqE2ZQcMVhwJ3lT8O0bknrK6YhAY5BXNn5ijlYKcJaBELedmwabHDI?= =?us-ascii?Q?+UY2YmrJ2e6F4tv5TXX16jT72WKSM/izHgvtZKFcLC+qwrYoqPjm6dIpCM7g?= =?us-ascii?Q?XabBXeydAWRx8rWq+nIGU90sob1wfxILHJ1YGzZuGVO3g/b55UC9FdxY93tb?= =?us-ascii?Q?zV9mh0ossDxmOar7YyImmKzE0xJn5K9VI2JM4lJpCOVQ5kAQbTntS0J60fMG?= =?us-ascii?Q?NEtdJZ8ICcafzh+r691K+O7sWjt8mCSKB4qcmfHKFEf/DReTQElqaF2NeFrH?= =?us-ascii?Q?8SOtBJc53vYrNMyAnxH7eJr8wm0CXygdjbhIDRftnCvpo6b3mp7+ZpFrXsZs?= =?us-ascii?Q?yx634DWvpzYBufTvFCM+8PApDQj6V10YJX4pI9k7456/mI4/6anNiHLXZqpS?= =?us-ascii?Q?HQfwq0HskEfgSpPd/2iY8K9ymuaC5R1FQEvMFiKTOQrrPWd/A6rNZRMyedrg?= =?us-ascii?Q?940xmXn9pY6AR37i04It39OCrOj2npmS+T2xm13kvUFnQQZcNEeTGXkssFkd?= =?us-ascii?Q?6AvmLhNcw=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; HE1PR07MB0937; 5:u50WInv2H9BMrGMQb5kmzW7bLt8QmJGzoor96i4ytmE+wyxOn/R4n4IPWJdPje95ffqGksPmEleq1gZ/Eu2/FVuzKGG85H0UGjYSB4esCnqnLoRmoHSHFe0ZqmGVhU0ucVEDVMUL5Fg0Nkhg/aNiPw==; 24:i51Qtqyg5exnYSSIUP7FETrQteHBjihTbTFFIFABbOiPnQ2CRcwvI6L9DaOb7/pMSplMxc359Q2pHy1iGA3mv1c4/yqrFYzB2Y64ZHoDsbA=; 20:D0GB3Aa6xhaAKxJYy1xzRrM3B45BKszUJ/O7d5zJpqO0e9D/aE8+xSLMauo8f41VQDHtOTvqNi6x19VkL8pLuA== SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Jul 2015 12:03:16.5461 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB0937 X-Microsoft-Exchange-Diagnostics: 1; HE1PR07MB0795; 2:shXLTFYlDenPQYaGHos4vTW9sF876AYGlUpEIDUVTtwT7asYpsQ0FaM0qzjAaYqc; 3:4TxlktHFHmdNqcQvLlQm+nyjAlXGPDuuO4RDG1PBfUBUSLHxNz2nYjbSKMHOcQjlRqNHGoW4s6SxQkVdj1JltV39wi15aPrD9/avV4Iiz+KR75eE1BSPAuoCgC7nFpqw+fjGGxz/X67BXVk+aRAo4g==; 23:Oblm6rChS7akxS04puOWbC3qXWKZ6U6b7jt6AuBidedGFzFoo4lcKzFmR+8i5SLQ3sFbSxWMHiOPmyn+kK29bXPZcagQRBjdH96BIq/cuSGRvRn8BmQpPE8j9ijteCxUbeSCKqcaLeTLrCdcpcFkhBwIxKAOZUy97VCHgciuRDokaURmmxGPpzNn73YfaPgildApyyFUNMO19whDSJBgFobHp+iNyBWMJxkfC8wxfllqeh1Mym3Jo+WVhR1FSam5 X-OriginatorOrg: darbyshire-bryant.me.uk X-Mailman-Approved-At: Sat, 15 Aug 2015 08:48:05 -0700 Cc: cerowrt-devel@lists.bufferbloat.net, bloat@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] [Bloat] failing to find the "declared victory" in a current wifi router X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Date: Tue, 07 Jul 2015 12:03:53 -0000 X-Original-Date: Tue, 7 Jul 2015 13:03:11 +0100 X-List-Received-Date: Tue, 07 Jul 2015 12:03:53 -0000 --------------ms070309060506080704020407 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Joe (& everyone) Joe, thanks for writing what you did, I really do feel your pain. And Rich's response is indeed superbly crafted & friendly, as is everyone's, a credit to all. I was a complete OpenWrt & SQM newbie around 3-4 months ago and found the website/documentation/sw situation/hw situation bewildering! I blame Jim Getty's & mostly Daht Taht for stumbling across the bufferbloat rock (mountain!) lifting it up to have a good look underneath...and not running away from what they found I probably watched every bufferbloat related presentation I could find, read quite a few of the papers on 'codel', realised that my internet connection was suffering from bufferbloat (shi**y latency when doing uploads) and wanted to fix it. That was the start of the OpenWrt journey and not without frustrations :-) I was advised that a TP-Link Archer C7 v2 was probably the best router option available at the time that had sufficient horsepower for my 40/10 VDSL link (I was toying with 80/20 so wanted some processing headroom too) I also 'foolishly' went headlong into setting up an OpenWrt build environment. This caused a certain amount of pain, I went through a very grumpy stage (Dave got an 'i've given up, I wish I'd never seen openwrt/bufferbloat/sqm' email) *but* having your own build environment has been the best thing *for me* - I can build my own firmware and not rely on openwrt buildbots etc. I don't hit kernel/module/package incompatibilities because I build it all myself at the same time. My own build environment has also allowed me to at least keep an eye on the next generation of network queue management in the form of CAKE - I barely understand a word of it, can't really test much, but I know I've spotted a couple of bugs, contributed an idea into dnsmasq and dusted off some very crusty 20+ year old unix admin awareness (reluctant to say skills!) I've been meaning to document my experiences and offer some pointers with regard to OpenWrt & the TP-Link C7 in a blog. I seem to remember offering to update http://www.bufferbloat.net/projects/codel/wiki/Cake on how to get Cake into OpenWrt but didn't have edit access. Both of those personal projects stalled because I stumbled on a bug in OpenWrt's feeds/package override functionality (now fixed) which made writing a compact, sensible list of instructions impossible. Really should resume as things are a lot easier now. I'd be happy to help you set up a build environment and offer some pointers on how to use the OpenWrt build tools & feeds etc. It's almost fun (what *am* I saying :-) I set up a Linux Mint 17.2 MATE install on a teeny tiny Asus EeePC Netbook (with 748MB Ram!) a couple of days ago and that (sloooowly) builds OpenWrt for me, so you don't need a screaming edge machine by any means to do so. Or you could use a virtual machine environment: I used virtualbox under windows on an i7 based laptop before I installed Linux Mint 17.2 Cinnamon as a dual boot.....and then I trashed Windows entirely on the aforementioned unused netbook. I've been infected by Linux :-) But I do understand your frustrations absolutely! OpenWrt is not the clearest thing out there. There's quite a bit of terminology, jargon, assumed knowledge on these lists which can be confusing. Personal pet frustration: Lack of ADSL/VDSL capable OpenWrt hardware.=20 Bonus extra pet frustration: Those that exist (I thinks it's one actually) don't support Byte Queue Limits (BQL) on the ADSL side of things, so my dream of 'no knobs, auto configuration Smart Queue Management (SQM)' for my parent's 2/0.4 M ADSL link remains a dream.=20 Sigh. But I'm slowly(!) learning source code version control with 'Git'. I'm trying to learn a bit of 'C'. And at some point I may understand a little about the linux network code :-) Please ask if you'd like some help. It can be lonely out there.... I *know*! Kevin On 07/07/15 08:20, Sebastian Moeller wrote: > Hi Joe, > > I like your snark=85 And I like Rich=92s elegant restraint in his respo= nse, always polite always friendly. > > On Jul 7, 2015, at 06:22 , Joe Touch wrote: > >> Hi, Rich, >> >> On 7/6/2015 7:23 PM, Rich Brown wrote: >>> Hi Joe, >>> >>> The OpenWrt firmware project is a "some assembly required" affair.=20 >> That might be less daunting if there were assembly instructions. I.e.,= >> I'm suggesting that the instructions need revision. Work there could >> have a significant payoff in a larger test community (I'm not exactly = a >> hardware noob, but I found it annoyingly obfuscated). >> >>> Although it's not always easy to find, the site has a number of resou= rces: >>> - Buyer's Guide at http://wiki.openwrt.org/toh/buyerguide >> That is useful for picking from among the currently supported versions= , >> but perhaps it'd be useful to take a colleague with you to a store and= >> see how helpful that all is. It's nearly impossible to find any of the= >> devices in the list or to verify whether a particular device in a box >> has the required version of motherboard and firmware needed. > I agree, it is almost inexcusable that the openwrt developers do/did n= ot strong-arm all hardware vendors into sane product naming practices, li= ke changing a products name when the interior parts change ;) Honestly th= ough, no one is really happy about the current state of affairs I assume,= but only the vendors are in a position to change this. So I applaud your= insight, but think you should bring this specific discussion to the vend= ors... > > >>> - The specific guidance to search Amazon for "OpenWrt" - see: http:/= /amzn.to/1mONYr0 >> That turns up quite a bit of devices that aren't supported, FWIW. >> >>> - The forum at: https://forum.openwrt.org/viewforum.php?id=3D10 ment= ions lots of routers >> Indeed; more isn't better. >> >>> As for specific routers: >>> - The WNDR3800 remains our gold standard for CeroWrt builds. It'll >>> do SQM up to ~30 mbps, then the CPU runs out of gas. >> May I also suggest moving to another standard that hasn't been >> explicitly "end-of-life'd" by the manufacturer. > Sure, what would you recommend? > > >>> - Check the OpenWrt Table of Hardware (ToH) to see what other routers= >>> support the current stable 14.07/Barrier Breaker (BB) builds. >> Sure - I spent several days in Target, Best Buy, and Fry's trying to >> decipher whether particular products were supported - again often >> difficult without UPC numbers (boxes don't always indicate version) > Yes, luckily many stores offer a no-questions-asked return policy, so = that opening the box does not necessarily mean you have to buy it. > > >>> - Many people on this list have good luck with the TP-Link Archer C7 >>> v2. I believe it'll route at cable speeds. I'm using it very >>> successfully with OpenWrt BB release on a 7 mbps DSL line. >> Here's a good example of how useful the information on the OpenWRT >> website can be. Everyone seems to refer to this as "Archer C7", everyo= ne >> except the TP-Link website. Their search finds no products matching th= at >> description, and the WIFI routers there are listed with other codes, >> e.g.:TL-WDR7500 - except you won't find that number on the hardware pa= ge >> -- you have to click through to the page for that device. > Google is my friend, third link from googling =93Archer C7 tp link": > > http://www.tp-link.com/en/products/details/cat-9_Archer-C7.html > > Again, to-link is not very consistent with its naming, but please take = this fight to to-link, hoping that the openwrt/cerowrt crowd will be able= to fix to-link=92s site is a tad optimistic=85=20 > >> For that device, like for many, the most recent version (i.e., the one= >> more likely to arrive on a blind web order, or on most store shelves) = is >> not yet supported. >> >>> - If you have been following the Linksys WRT1900AC and WRT1200AC=20 >>> thread at >>> https://forum.openwrt.org/viewtopic.php?id=3D50173&action=3Dnewyou'll= see >>> that the CC builds are sorta, kinda working. There are a lot of movin= g >>> pieces still, and despite the CC RC2 status, stable builds only come >>> out a few days apart. I would stay away from it if you're not willing= >>> to participate in a science experiment. >> Well, the 23-Apr-2015 build by Kaloz works fine - except that the SQM >> package fails to install. > What are the symptoms of that failure, if I might ask?=20 > >> What I'm baffled by here is that the main trunk builds leave LUCI out;= >> that's seems >> quite short-sighted, IMO. > I think the reasoning is that normal mortals should use stable release= s like BB which come with luci by default, trunk is targeting people that= can solve small issues like installing packages. That said, I would also= prefer if luci or at least a GUI would be part of the trunk builds as we= ll. One advantage of leaving luci and other non-essetials out is that the= firmware image stays small enough to also work on flash starved devices.= =2E. > >>> There is a team working to improve the OpenWrt site, but our work >>> has not yet been "blessed" by the the admin's who maintain the core p= ages of >>> the site. >> And I appreciate and understand that. The CeroWRT site could similarly= >> use an update. > Cerowrt basically ended or at least went into deep hibernation, the =93= declaring victory=94 news item (http://www.bufferbloat.net/news/) hints a= t that fact. > >> I.e., there's ample opportunity here to build a larger community with = a >> few simple steps: >> >> - refer to routers by the manufacturer's designation > But this is what confused you by no end above (well that fact that ven= dors change the hardware but keep the same name. > >> - create builds with both LUCI and (if possible) SQM > So, normally if you install a trunk nightly build you should be able t= o install packages for that image at the same time. The next day the new = nightly build will have replaced the one you installed, and that will mak= e most/many/all? packages not install anymore. Is this maybe the failure = case you have seen? > >> - make a short-list of a few currently available routers >> for which an integrated build exists *for the most recent >> motherboard version* > Sure, that would be nice to have, for my taste the openwrt hardware wi= ki contains quite a lot in that direction. Unless vendors cooperate such = a list will always be on a best effort basis, just as the current openwrt= hardware wiki is. > >> All of this could be done on the CeroWRT site until it can be put on >> OpenWRT. > Since it seems we are into volunteering other folks here, all of this = could also be done on your home page ;) I think I understand your indigna= tion at the current state, the best way to remedy this is to roll up one=92= s sleeves and help fix things that do not work well. > > Best Regards > Sebastian > > >> These are fairly direct ways to lower the bar, which seems unnecessari= ly >> high here. >> >> Joe >> >>> Best, >>> >>> Rich Brown >>> >>> On Jul 6, 2015, at 9:02 PM, Joe Touch wrote: >>> >>>> Hi, all, >>>> >>>> I'm posting because of my recent frustration with the claim that >>>> bufferbloat solutions have been "pushed up into the OpenWRT and >>>> commercial routers. >>>> >>>> I spent the bulk of last weekend trying to find a COTS WIFI router t= hat >>>> supported OpenWRT with bufferbloat (SQM) extensions. >>>> >>>> I tried a Linksys WRT1200AC, and here's what I found: >>>> >>>> - Kaloz's 23-Apr-2015 build installs fine and comes up >>>> with a web server (LUCI), but does NOT include SQM >>>> >>>> - trying to install the SQM packages fails >>>> due to a kernel version incompatibility >>>> (for a 23-Apr-2015 build?!) >>>> >>>> - CC-rc2 doesn't have a WRT1200AC build >>>> presumably I should have used mvebu-armada-385-linksys-caiman, >>>> but it's not at all clear >>>> >>>> - and I'd have to install LUCI and/or reinstall >>>> factory firmware from the command line, and none >>>> of that is all that clear, esp. a recovery route >>>> that doesn't involve voiding warranty to wire in >>>> a serial port >>>> >>>> Given the "declared victory" (http://www.bufferbloat.net/news/53), >>>> perhaps someone one one of these lists can explain why there's no cl= ear >>>> information on a current device that supports a current build that >>>> actually supports these fixes? >>>> >>>> I.e., if you were trying to make this obscure, you're doing a very g= ood job. >>>> >>>> FWIW. >>>> >>>> Joe >>>> >>>> --------------ms070309060506080704020407 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIINgTCC BjQwggQcoAMCAQICAR4wDQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3 MTAyNDIxMDE1NVoXDTE3MTAyNDIxMDE1NVowgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJtZWRpYXRlIENs aWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcJg8zOLdgasSmkLhOr lr6KMoOMpohBllVHrdRvEg/q6r8jR+EK75xCGhR8ToREoqe7zM9/UnC6TS2y9UKTpT1v7RSM zR0t6ndl0TWBuUr/UXBhPk+Kmy7bI4yW4urC+y7P3/1/X7U8ocb8VpH/Clt+4iq7nirMcNh6 qJR+xjOhV+VHzQMALuGYn5KZmc1NbJQYclsGkDxDz2UbFqE2+6vIZoL+jb9x4Pa5gNf1TwSD kOkikZB1xtB4ZqtXThaABSONdfmv/Z1pua3FYxnCFmdr/+N2JLKutIxMYqQOJebr/f/h5t95 m4JgrM3Y/w7YX9d7YAL9jvN4SydHsU6n65cCAwEAAaOCAa0wggGpMA8GA1UdEwEB/wQFMAMB Af8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRTcu2SnODaywFcfH6WNU7y1LhRgjAfBgNV HSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20v c2ZzY2EuY3JsMIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQEFBQADggIBAAqD CH14qywGXLhjjF6uHLkjd02hcdh9hrw+VUsv+q1eeQWB21jWj3kJ96AUlPCoEGZ/ynJNScWy 6QMVQjbbMXltUfO4n4bGGdKo3awPWp61tjAFgraLJgDk+DsSvUD6EowjMTNx25GQgyYJ5RPI zKKR9tQW8gGK+2+RHxkUCTbYFnL6kl8Ch507rUdPPipJ9CgJFws3kDS3gOS5WFMxcjO5DwKf KSETEPrHh7p5shuuNktvsv6hxHTLhiMKX893gxdT3XLS9OKmCv87vkINQcNEcIIoFWbP9HOR z9v3vQwR4e3ksLc2JZOAFK+ssS5XMEoznzpihEP0PLc4dCBYjbvSD7kxgDwZ+Aj8Q9PkbvE9 sIPP7ON0fz095HdThKjiVJe6vofq+n6b1NBc8XdrQvBmunwxD5nvtTW4vtN6VY7mUCmxsCie uoBJ9OlqmsVWQvifIYf40dJPZkk9YgGTzWLpXDSfLSplbY2LL9C9U0ptvjcDjefLTvqSFc7t w1sEhF0n/qpA2r0GpvkLRDmcSwVyPvmjFBGqUp/pNy8ZuPGQmHwFi2/14+xeSUDG2bwnsYJQ G2EdJCB6luQ57GEnTA/yKZSTKI8dDQa8Sd3zfXb19mOgSF0bBdXbuKhEpuP9wirslFe6fQ1t 5j5R0xi72MZ8ikMu1RQZKCyDbMwazlHiMIIHRTCCBi2gAwIBAgIDDnJKMA0GCSqGSIb3DQEB CwUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMi U2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20g Q2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EwHhcNMTUwNjIwMjAzMDUy WhcNMTYwNjIwMTQyNjQ3WjBWMSYwJAYDVQQDDB1rZXZpbkBkYXJieXNoaXJlLWJyeWFudC5t ZS51azEsMCoGCSqGSIb3DQEJARYda2V2aW5AZGFyYnlzaGlyZS1icnlhbnQubWUudWswggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC6AI20OHK0In0c596dQev+9QZQQK88vUgl eAcyXhwgmbCAs6ReEhxMzEedf6QXB6q9P54Na/WHMD3IxaG+MsULh4ugVpXTGIBq3w5dDu3c zApjkNbSYHV06eOIUhxz9czDJgjgp8QacUwlCTOifSsNWmSX9DV/+G7WwQs7tlzpMUvC64O6 I/tLvfOvPnRNGirT45vfHS44xba5XBXN/o0vAeAETYsWV4xduXJQzHQiUhwtqfadaIhWxrdd h34LooAYbCWY7hUBnbkq5fuGSPx/zaVJqm+0pO2+tKgOCFeUcfYleIhBf5KfRSA6ZtfUrI57 283tbND62k9HOkVF9+eeenVVDJ7fBVE8G6aMPFBIVM6FS2yWe9t59RBI/DqnnD1mJcgYkgIu Rf8yRg39PAYK+5QbY/EHJtJHUDYjlqn5Uj/MZIbdcZUQDr1I5lDIP7xiMll9pjacK74O4zrg mslSLYK9fp/Bx0c2xyEk2ut962mevHcmsacb2j6la5QbWmEGD4oo3ZuGt3Njv2qbuFrzoQwp JQ6fmcF0ZjdjF1er+dqhRB44JRXYkwUY66W7uwqmJZzPsdUVpxeN315uKxUu/6M7CWXPXgFZ FvzuzX4sEQmf9hufd6SG2DIQCEHiSCPSxyXiEjzEJTrOtnIOdtebFK8NdsKVkDQ8AK1/+OEa 9QIDAQABo4IC4zCCAt8wCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYB BQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBQuRbYKkOJClE26ZDvB2ymMV+Bf4DAfBgNVHSME GDAWgBRTcu2SnODaywFcfH6WNU7y1LhRgjAoBgNVHREEITAfgR1rZXZpbkBkYXJieXNoaXJl LWJyeWFudC5tZS51azCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMwggEqMC4G CCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEF BQcCAjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhp cyBjZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxp ZGF0aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5j ZSBvbmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSBy ZWx5aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3Js LnN0YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUF BzABhi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYI KwYBBQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xp ZW50LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZI hvcNAQELBQADggEBAGJxBZ73x4X+jT1NcWwTFz5ZLJiO3ehKdfKhwvNdCnzYJCEiDbXlGo1n V76Gw7u2rxLqF0i1QNsql5ykhXn37nuR7XNWXayVNEhPX1+Fgg0cfvytVVE/O4eiIO0xecau n2FurcLPw/iabwg0oOJgrjqTKmVEBDdkyi48bWWycPOBAC9sKPvgfzICnt8ryJ/pzGzbwEJS Z0/wPdzozV99001qo1P7hnea066NdeDvM5+Zc3RmD+YS1nQ2tYTa4gIZ1aNO/0pmIjt+LiGT YJGkIvrerOa7oHC1yC3CGBhi24CTY3jf5KLIOTIsoYByMSive3l/0eK83b0TQXQxdMfU52Ax ggTdMIIE2QIBATCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMT L1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMOckow CQYFKw4DAhoFAKCCAh0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMTUwNzA3MTIwMzExWjAjBgkqhkiG9w0BCQQxFgQUnUylBi4u4Km7/GJXDUoJdd1jWq4w bAYJKoZIhvcNAQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMH MA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIB KDCBpQYJKwYBBAGCNxAEMYGXMIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRD b20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4 MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQg Q0ECAw5ySjCBpwYLKoZIhvcNAQkQAgsxgZeggZQwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQK Ew1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBT aWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJtZWRpYXRl IENsaWVudCBDQQIDDnJKMA0GCSqGSIb3DQEBAQUABIICALbHUYlf6NXwGYid3leegsiPP93s 04bGI77RXQOKlef04Sx56F7mWLi8/CZDDg9TtUkWqOmRUOmi3UDZSPAifHKFfk5HrJDEyx8r AP/a3peBaSyMuuYt6fZlsivTxJjfu6onVIUXch32YjSAD2BP4hrQodyi1OQ3NUnA4NLjOMK3 QKOgNuSwKB2KYBUs7OEjKi0nydZQ+YkqfBAa8TkLL/HTcS22dILktWvALeXr+Ww6nSUWjFHx jnwm95jQSvn9U/55gUML4uF2jkKFy1V3P/H9IBVsl9MeCsQ8KuokWi5lYsBq3yqlod8bNxZy f+ZQklWqpFZJwhiYrMxsDSGsYwF4xSc3NCFROMc3Suce4jcTeAor0Q9lu1Hw4dsUroUMjWmc kmcxTFGGMVrkt05J27D+5DycU8Ue/Ux5YyOxgvQhY31Fpg5V/R2tdc8tRfNHJuYs/Irjpay3 aFqLOFb1ZFDu1dgMqtb9MYjfPgritwPK51shZCnJPIBbMcE8tuUwTO7yZ9Z6IktjJFV3mJWM M2O7h4MoLv07ZCXLHu4bxcnDx7mswS22h/Fx/dScyxcWI85ypnnvoTOQZTS0/EYZORjFGp/L rbf8oLihh9odz+0NnE9oCBF/jHNgrYcMJnbQIyQ1sioOD76lnMPyL6xSixoYJM5uXwuiGNJp M7cTuzsMAAAAAAAA --------------ms070309060506080704020407--