From dev-return-67188-apmail-httpd-dev-archive=httpd.apache.org@httpd.apache.org Sun Dec 06 17:19:48 2009 Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 23987 invoked from network); 6 Dec 2009 17:19:48 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 6 Dec 2009 17:19:48 -0000 Received: (qmail 5493 invoked by uid 500); 6 Dec 2009 17:19:46 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 5403 invoked by uid 500); 6 Dec 2009 17:19:45 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 5394 invoked by uid 99); 6 Dec 2009 17:19:45 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 06 Dec 2009 17:19:45 +0000 X-ASF-Spam-Status: No, hits=2.2 required=10.0 tests=HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of ricky@burg.in designates 94.23.155.28 as permitted sender) Received: from [94.23.155.28] (HELO smtp.exoware.net) (94.23.155.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 06 Dec 2009 17:19:35 +0000 Received: from office.exoware.net ([78.86.235.30] helo=[192.168.1.100]) by node1.exoware.net with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from ) id 1NHKlk-0003s8-Ct for httpd-dev@apache.org; Sun, 06 Dec 2009 17:19:36 +0000 Message-ID: <4B1BE791.7010004@burg.in> Date: Sun, 06 Dec 2009 17:19:13 +0000 From: Ricky Burgin User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091130 Lightning/1.0b1pre Thunderbird/3.0 MIME-Version: 1.0 To: httpd-dev@apache.org Subject: SSLVerifyClient in Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms090906080705090109010405" X-Antivirus-Scanner: Clean mail though you should still use an Antivirus X-Virus-Checked: Checked by ClamAV on apache.org This is a cryptographically signed message in MIME format. --------------ms090906080705090109010405 Content-Type: multipart/alternative; boundary="------------000707060806090608090403" This is a multi-part message in MIME format. --------------000707060806090608090403 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Hello all, I've heard about the recent vulnerability regarding SSL renegotiations=20 and from what I can tell, it seems to have broken the usage of=20 SSLVerifyClient inside a httpd directive. I'm trying to get Apache to verify client certificates, but only for a=20 specific directory on my website, yet it only seems to kick in and work=20 if I do it inside the directive, but not inside a=20 directive. I'm going by the examples presented on=20 http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html#arbitraryclients yet = they seem to suffer from the exact same issue. Any help would be appreciated. Best regards, Ricky Burgin --------------000707060806090608090403 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
H= ello all,

I've heard about the recent vulnerability regarding SSL renegotiations and from what I can tell, it seems to have broken the usage of SSLVerifyClient inside a httpd <Directory> directive.

I'm trying to get Apache to verify client certificates, but only for a specific directory on my website, yet it only seems to kick in and work if I do it inside the <VirtualHost> directive, but not inside a <Directory> directive.

I'm going by the examples presented on http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html#arbitraryclient= s yet they seem to suffer from the exact same issue.

Any help would be appreciated.

Best regards,
Ricky Burgin

--------------000707060806090608090403-- --------------ms090906080705090109010405 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVbjCC BsAwggWooAMCAQICAgOdMA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMiBQcmltYXJ5IEludGVybWVkaWF0 ZSBDbGllbnQgQ0EwHhcNMDkxMTMwMTgyNTEwWhcNMTExMjAxMDgxOTA4WjCBvjEgMB4GA1UE DRMXMTA4MDQzLTJYVkZjbzR0NXo4bnMwMzcxCzAJBgNVBAYTAkdCMRYwFAYDVQQIEw1XZXN0 IE1pZGxhbmRzMREwDwYDVQQHEwhDb3ZlbnRyeTEtMCsGA1UECxMkU3RhcnRDb20gVmVyaWZp ZWQgQ2VydGlmaWNhdGUgTWVtYmVyMRUwEwYDVQQDEwxSaWNreSBCdXJnaW4xHDAaBgkqhkiG 9w0BCQEWDXJpY2t5QGJ1cmcuaW4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3 evDxWoPFwAtpX2dG9YtQsoDC6BgMoAqJJAdJ+2Nlgk2ql7yPspnusO07lV7Y01r+Nri9+GO5 VYHg+LwWKX6y1HpGMvVf/iWxBlyztXFLMTz5RZIR4lVBuL97tWXYKcJLAdFGAyFoClBPMcs8 Jl/nYSdWSF6PYpTr/oxcE455g3D31sQUrSwLS7KYDUhGq6zXPLtq6Js1nyOztirxSQq3k3lP AF05pcfYU7gtZ+am0OxvcJMbdq4aI9/1TNwFTgLrVXLH1g7fy4i4IoJP0ZgjJzuivI9E2N31 BnyvWDfYJmdsquBWG/suwW+msJ06M9ckp5LV2Js/vFdTScTi0HvVAgMBAAGjggL2MIIC8jAJ BgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQw HQYDVR0OBBYEFJvmXoLXqnAWEIenyhF097l50AKnMB8GA1UdIwQYMBaAFK5Vg2/sMcq59x36 r2sx88gd46y7MBgGA1UdEQQRMA+BDXJpY2t5QGJ1cmcuaW4wggFCBgNVHSAEggE5MIIBNTCC ATEGCysGAQQBgbU3AQIBMIIBIDAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5j b20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50 ZXJtZWRpYXRlLnBkZjCBtwYIKwYBBQUHAgIwgaowFBYNU3RhcnRDb20gTHRkLjADAgEBGoGR TGltaXRlZCBMaWFiaWxpdHksIHNlZSBzZWN0aW9uICpMZWdhbCBMaW1pdGF0aW9ucyogb2Yg dGhlIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFBvbGljeSBhdmFpbGFibGUg YXQgaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjBjBgNVHR8EXDBaMCugKaAn hiVodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9jcnR1Mi1jcmwuY3JsMCugKaAnhiVodHRwOi8v Y3JsLnN0YXJ0c3NsLmNvbS9jcnR1Mi1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsG AQUFBzABhi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMi9jbGllbnQvY2Ew QgYIKwYBBQUHMAKGNmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczIu Y2xpZW50LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJ KoZIhvcNAQEFBQADggEBADDJuNE5oltOqJ7vZHIZoBcZGzH5HSQWYGWpzWzsJ5xH17iu7cWG Qkzq5PHZAGfeo271BnUyK3FcF1SV6PLYHHa7CimyVpVvM0Isl5kcKnNLyg5Fu6ATnfgkr1gk xJ0jHU0ubgudZb5lfMHLyf04XSgcr619T9JNnud3VY1i78RE76NfDKVpV5tKd07nh2XcrUyZ av7fm8acVJOYVm0nhGTZmdccvPtG8Z4Chydr34bFHfv0qE/PXr5Im3JdAYkJ7IZkb1juGWDG cwROsVbYrw6/qFgTxCZx16XWsVasXwucA0njFq+P+L5LXeVgAHKpDjvk/nIEQVdtgWnoASUt RwswggbAMIIFqKADAgECAgIDnTANBgkqhkiG9w0BAQUFADCBjDELMAkGA1UEBhMCSUwxFjAU BgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmlj YXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDIgUHJpbWFyeSBJbnRlcm1l ZGlhdGUgQ2xpZW50IENBMB4XDTA5MTEzMDE4MjUxMFoXDTExMTIwMTA4MTkwOFowgb4xIDAe BgNVBA0TFzEwODA0My0yWFZGY280dDV6OG5zMDM3MQswCQYDVQQGEwJHQjEWMBQGA1UECBMN V2VzdCBNaWRsYW5kczERMA8GA1UEBxMIQ292ZW50cnkxLTArBgNVBAsTJFN0YXJ0Q29tIFZl cmlmaWVkIENlcnRpZmljYXRlIE1lbWJlcjEVMBMGA1UEAxMMUmlja3kgQnVyZ2luMRwwGgYJ KoZIhvcNAQkBFg1yaWNreUBidXJnLmluMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3rw8VqDxcALaV9nRvWLULKAwugYDKAKiSQHSftjZYJNqpe8j7KZ7rDtO5Ve2NNa/ja4 vfhjuVWB4Pi8Fil+stR6RjL1X/4lsQZcs7VxSzE8+UWSEeJVQbi/e7Vl2CnCSwHRRgMhaApQ TzHLPCZf52EnVkhej2KU6/6MXBOOeYNw99bEFK0sC0uymA1IRqus1zy7auibNZ8js7Yq8UkK t5N5TwBdOaXH2FO4LWfmptDsb3CTG3auGiPf9UzcBU4C61Vyx9YO38uIuCKCT9GYIyc7oryP RNjd9QZ8r1g32CZnbKrgVhv7LsFvprCdOjPXJKeS1dibP7xXU0nE4tB71QIDAQABo4IC9jCC AvIwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF BwMEMB0GA1UdDgQWBBSb5l6C16pwFhCHp8oRdPe5edACpzAfBgNVHSMEGDAWgBSuVYNv7DHK ufcd+q9rMfPIHeOsuzAYBgNVHREEETAPgQ1yaWNreUBidXJnLmluMIIBQgYDVR0gBIIBOTCC ATUwggExBgsrBgEEAYG1NwECATCCASAwLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuc3RhcnRzc2wuY29t L2ludGVybWVkaWF0ZS5wZGYwgbcGCCsGAQUFBwICMIGqMBQWDVN0YXJ0Q29tIEx0ZC4wAwIB ARqBkUxpbWl0ZWQgTGlhYmlsaXR5LCBzZWUgc2VjdGlvbiAqTGVnYWwgTGltaXRhdGlvbnMq IG9mIHRoZSBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBQb2xpY3kgYXZhaWxh YmxlIGF0IGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwYwYDVR0fBFwwWjAr oCmgJ4YlaHR0cDovL3d3dy5zdGFydHNzbC5jb20vY3J0dTItY3JsLmNybDAroCmgJ4YlaHR0 cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTItY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5 BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczIvY2xpZW50 L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xh c3MyLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20v MA0GCSqGSIb3DQEBBQUAA4IBAQAwybjROaJbTqie72RyGaAXGRsx+R0kFmBlqc1s7CecR9e4 ru3FhkJM6uTx2QBn3qNu9QZ1MitxXBdUlejy2Bx2uwopslaVbzNCLJeZHCpzS8oORbugE534 JK9YJMSdIx1NLm4LnWW+ZXzBy8n9OF0oHK+tfU/STZ7nd1WNYu/ERO+jXwylaVebSndO54dl 3K1MmWr+35vGnFSTmFZtJ4Rk2ZnXHLz7RvGeAocna9+GxR379KhPz16+SJtyXQGJCeyGZG9Y 7hlgxnMETrFW2K8Ov6hYE8Qmcdel1rFWrF8LnANJ4xavj/i+S13lYAByqQ475P5yBEFXbYFp 6AElLUcLMIIH4jCCBcqgAwIBAgIBDjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3Jp dHkwHhcNMDcxMDI0MjEwMjU0WhcNMTIxMDIyMjEwMjU0WjCBjDELMAkGA1UEBhMCSUwxFjAU BgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmlj YXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDIgUHJpbWFyeSBJbnRlcm1l ZGlhdGUgQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyiFRZwB LPsZ8qulM4wqoA3L0FXtXSKBZ0bEDwhTvsvdpPEStD59zG0NhnfpnoYfRgWft+rlEAO14/QB jOsID4RBN+LyrX6QDebSfC3Bcb3gzmwiqy+zuVE/VrJwGR7+zmD2EkevJnZpxJyfNzOMEICj tfW/kbfLDwwM/abZELJ7Qp+Bnic4N6tklXOECU4P1h6O8BdmoeSzDnofMSVUihhJnerj5Em4 9dd8ijJvL5jabUT5jNfmIJlcHHTmCTowoBbW9rDj+/Y44vLoVkfdcce06TNSt4b/8KwWcH36 5phKVHrlx0bNOyaggrxYfXKCheFEGb3xIPsd/+vcUQs29QIDAQABo4IDWzCCA1cwDAYDVR0T BAUwAwEB/zALBgNVHQ8EBAMCAaYwHQYDVR0OBBYEFK5Vg2/sMcq59x36r2sx88gd46y7MIGo BgNVHSMEgaAwgZ2AFE4L7xqkQFulF2mHMMo0aEPQQa7yoYGBpH8wfTELMAkGA1UEBhMCSUwx FjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRp ZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9y aXR5ggEBMAkGA1UdEgQCMAAwPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwYAYDVR0fBFkwVzAsoCqgKIYmaHR0cDovL2Nl cnQuc3RhcnRjb20ub3JnL3Nmc2NhLWNybC5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRz c2wuY29tL3Nmc2NhLmNybDCCAV0GA1UdIASCAVQwggFQMIIBTAYLKwYBBAGBtTcBAQQwggE7 MC8GCCsGAQUFBwIBFiNodHRwOi8vY2VydC5zdGFydGNvbS5vcmcvcG9saWN5LnBkZjA1Bggr BgEFBQcCARYpaHR0cDovL2NlcnQuc3RhcnRjb20ub3JnL2ludGVybWVkaWF0ZS5wZGYwgdAG CCsGAQUFBwICMIHDMCcWIFN0YXJ0IENvbW1lcmNpYWwgKFN0YXJ0Q29tKSBMdGQuMAMCAQEa gZdMaW1pdGVkIExpYWJpbGl0eSwgcmVhZCB0aGUgc2VjdGlvbiAqTGVnYWwgTGltaXRhdGlv bnMqIG9mIHRoZSBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBQb2xpY3kgYXZh aWxhYmxlIGF0IGh0dHA6Ly9jZXJ0LnN0YXJ0Y29tLm9yZy9wb2xpY3kucGRmMBEGCWCGSAGG +EIBAQQEAwIABzBQBglghkgBhvhCAQ0EQxZBU3RhcnRDb20gQ2xhc3MgMiBQcmltYXJ5IElu dGVybWVkaWF0ZSBGcmVlIFNTTCBFbWFpbCBDZXJ0aWZpY2F0ZXMwDQYJKoZIhvcNAQEFBQAD ggIBAB73EBf+9umEeS+QN02uyVdZ07t8PclqqdNPeOaYO7nmvtSlbUf+/8njRQFezD0MpTxP KUThHBlPkcMAxbjZ/XHj3wDMzgU6cv+lRNO+voGJGWuJ/Llmi+QNhVaPLUZhMn6E+IES/QeY ecPGOGckgiQS8n6eIwcssR2k0yFmfEyJMVEC0gXhZ5hymBcGMDGwQNEoG/DjQr6vc3iXKTJJ A2nYSUgnwfXPYGaHG2mlR1ak5UnhDUa+f2N9XWqcyEUINj5fVfwOuQqtNykMTFwaV5/B5Czv 4NhQreymJCQmk3uqk9iV/LYZgd52/uUZrVkCCEwj/jzzZBUArbOrozrScek5Qy1gPrVe0Czd kPkvfKf0sJ14raPhltDe5F3C/EAwVbBfJQr8As/iUK71CHFucRM6QFZPcUm6Xj8VSDMzRFEI QaG5BaI4VKhrflclNxh//gT9m685eErTidSl7sNhMxbNGovTjLKglBUcocpJujK257J0q6oV kp0kD2CLvs6c8Fgv/LGRcaCQsL22yLvuhPgCBmvLT/qWBfnpqT5/+6ZCKE0+C0pJBCMRir1L wyU4fOlQzS/GyCEBNix1Q8HDqvpnEMeNehQAPTcNQwRsqxa+oUHuck1V6yeBu7yaLDURgsD5 8d9NoKJ2hXcIvvmMqoz8oTzuquH0Wq2L1sqqeS+lMYIDzTCCA8kCAQEwgZMwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQICA50wCQYFKw4DAhoFAKCCAg4wGAYJKoZIhvcN AQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDkxMjA2MTcxOTEzWjAjBgkqhkiG 9w0BCQQxFgQUWViaqRNv/8SwbmgvPapDcF9gDeQwXwYJKoZIhvcNAQkPMVIwUDALBglghkgB ZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsO AwIHMA0GCCqGSIb3DQMCAgEoMIGkBgkrBgEEAYI3EAQxgZYwgZMwgYwxCzAJBgNVBAYTAklM MRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0 aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50 ZXJtZWRpYXRlIENsaWVudCBDQQICA50wgaYGCyqGSIb3DQEJEAILMYGWoIGTMIGMMQswCQYD VQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0 YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMiBQcmlt YXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgOdMA0GCSqGSIb3DQEBAQUABIIBALRw/4uU b8aiIygDp0G1Rk5U9R5HJtu4FyoUk6gfUYLEDZuhtt1gU+zoC7cWqZqFSxXkZx6e1HAqkuGV UACLa6teCc2hsOPQEe7WBUCCFQsRDvvopBbS5UbqudlJqXzQLWroQAaV+x1+WokxrFhwpdg3 FyygvJDDM7ZE4VBuSxqpkOyF4JBvoKLvhY+mbamD1Cp8oYT2zXoO7qqqeXAE1lXpTYsICPGP vFwnQZ19dFKujyzdL8/1kMYAdpGEa+XhubNBhN6tiH5wCAjvOCO96XnEzt7wlkVkOs4ocLII B398U9nIO96xtusqMckTvMOxHAX+TLyQzsvTEJt459rziVMAAAAAAAA= --------------ms090906080705090109010405--