ELF]@@8 @@@@88888X ` 00TTTDDPtdtttQtdRtd/lib/ld-linux-aarch64.so.1GNUC[)~ /\.Oޯ7wGNU%$ 6K k )   6l ," $y N [k  Lb| L  .^ g9  v  mYN  Y ? "=U  rb vo vx=Y 8, a e   ,p \  rLQ' F}U }   _ @{  89 # q & F;  h y lp6 V 3   %  , < $  w  yT_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTableSSL_dane_enableSSL_get1_peer_certificateSSL_get_fdSSL_CTX_dane_enableSSL_ctrlSSL_newSSL_get0_daneSSL_writeSSL_dane_tlsa_addSSL_set_fdSSL_get0_paramSSL_CTX_set_default_verify_pathsSSL_do_handshakeSSL_dane_set_flagsSSL_CTX_freeSSL_clearSSL_CTX_newSSL_set_connect_stateSSL_get_verify_resultSSL_CTX_ctrlSSL_CTX_use_certificate_chain_fileSSL_get_certificateSSL_readSSL_get_peer_cert_chainSSL_CTX_load_verify_locationsSSL_is_serverSSL_CTX_set_optionsSSL_set_verifySSL_shutdownTLS_client_methodSSL_get_errorSSL_freeX509_STORE_freeX509_STORE_CTX_newX509_VERIFY_PARAM_set1X509_STORE_CTX_get0_paramX509_STORE_CTX_get_errorX509_verify_cert_error_stringERR_print_errors_fpCRYPTO_freeX509_STORE_load_locationsOPENSSL_sk_valueASN1_STRING_to_UTF8X509_STORE_CTX_set_defaultOPENSSL_sk_numX509_STORE_CTX_set0_daneX509_get_ext_d2iX509_STORE_CTX_freeX509_verify_certX509_NAME_get_entryERR_clear_errorX509_get_subject_nameX509_STORE_newX509_NAME_print_ex_fpX509_NAME_ENTRY_get_dataX509_STORE_CTX_initX509_NAME_get_index_by_NIDldns_rdf_deep_freeldns_rr_printldns_rr_list_rr_countldns_rdf2buffer_str_dnameldns_resolver_set_dnssecldns_resolver_set_dnssec_anchorsldns_str2rdf_dnameldns_rr_list_push_rr_listldns_rr_a_addressldns_rr_set_rdfldns_dname_clone_fromldns_rr_ttlldns_buffer_freeldns_pkt_get_rcodeldns_rdf_freeldns_buffer_export2strldns_buffer_printfldns_rr_get_classldns_b64_ntopldns_dane_create_tlsa_rrldns_rr_list_ownerldns_resolver_freeldns_rdf_new_frm_strldns_rdf2native_sockaddr_storageldns_dname_label_countldns_rr_freeldns_str2rdf_aldns_dname_labelldns_b64_ptonldns_rr_a_set_addressldns_rr_list_printldns_resolver_newldns_resolver_dnssec_anchorsldns_rr_rdfldns_fetch_valid_domain_keysldns_buffer_newldns_rr_class2buffer_strldns_dane_select_certificateldns_resolver_queryldns_rr_list_newldns_rr_list_push_rrldns_dname_new_frm_strldns_rr_rd_countldns_rdf_compareldns_rr_rrsig_signameldns_rr_list_rrldns_rdf_sizeldns_resolver_dnssecldns_rdf_cloneldns_resolver_push_nameserverldns_resolver_new_frm_fileldns_rdf_printldns_native2rdf_int8ldns_dane_create_tlsa_ownerldns_pkt_rr_list_by_typeldns_verifyldns_pkt_adldns_rr_list_freeldns_dname2canonicalldns_get_errorstr_by_idldns_rdf2native_int8ldns_rr_get_typeldns_rdf2strldns_rr_set_ownerldns_str2rdf_aaaaldns_versionldns_pkt_cdldns_resolver_set_dnssec_cdldns_rr_list_contains_rrldns_rdf2buffer_str_hexldns_rr_new_frm_fp_lldns_rr_ownerldns_pkt_freeldns_rr_cloneldns_rr_list_deep_freeldns_rr_new_frm_typeldns_dname_compareldns_rdf_dataoptindstdinperror__stack_chk_fail__printf_chkexit__fdelt_chk__assert_failfopensocketstrlen__ctype_b_locfeof__isoc23_strtolstdoutoptarg__fprintf_chk__libc_start_mainstderrgetoptstrncasecmp__cxa_finalizestrchrstrerrorfclosefputcfputsconnectfwriteselectstrcmp__errno_locationabort__stack_chk_guardlibssl.so.3libcrypto.so.3libldns.so.3libc.so.6ld-linux-aarch64.so.1OPENSSL_3.0.0GLIBC_2.17GLIBC_2.38GLIBC_2.34  +p     @ #    +p  ^]p6 0@P` p(8@HX`x 0В@ؒPp8X`x 0@      (08@HPX`hp x!"#$%&'()*+,-./01234 5(60788@9H:P;X<`=h>p?xABCDEFGHIJKLMNOPQRST U(V0W8X@YHZP[X\`]h^p_x`abcdefghijklmnopqrs t(u0v8w@xHyPzX{`|h}p~x (08@HPX`hpx`@hp { {_{.Eb)    2E) 6E) :E) CBE{+Sk9F@@ ? ?#@[cs`T֖F57е[c? R[@+@?1TQqTZ`xa E@@BAhTdF@; RdF@[ RZgFB GA@@?ր4A@BE@?5!xGR ?@BGCF@?GW #@{FZE @`?@?`?4?ֿcT#@@WM?T#@BPF@? 7G#"c2B2AR@j@R R[0G?G"!B!@R?!GR ? RwdF@?r Ro'@+ZgFRs~GX@`?'`R`?'G"C@B@AR0dF@7QdFBRcG@`?GEZgF@@@X Xq T;5@CF?+@?#T@?+2 R/G#"cB2AR@ F?!G R ?!xG R ?S@Rc@Rc#@{CF@`?c@@zAT/@ 7lF+@@3kT֒E `G?!!? 5sQ"ZR[qMT@BEg@?*4E@@cAFT # *G@G?@!0FT@ ? F"B`AR?E@@BaBT * +@ @ `? cG c@!G?ւ!!? 5sqaT?@ ?@CҾ * 4E@@cA<T  qR ?PFg#@ֲFZG`?ֿT?@?k`T@?`7@sF`?#@`?G#"c B2AR@4#@!Fg@ ?@`?ր@#E cG@`?` cG@ cG@@R"B <@*@G#@?*4E@@c.T @$[ BcGoG"C@B@@AR "cG`a!4G ?!F ?qT@RG?!Ek ? @9|qT "cGA@!Ek ?ws Q_ q T5?@`C?@@ *@5@`?`C@ ,7;@WSR:R3S7@{F?o`%q` @z! TE?!LG ?@**@!PG ?q T@A@BG@?֟q` @zTF@cF`?4[@!;@BLF@?*q/TE@@BҡT @4 sF& bcG`E@@BAT R@ s5F7RS`R3 ?{;@@R7@*7o*G#c #@B2AR0FcG`?qTE@@BT 1j E@@cҁT $x @'@B9*5 TCRR *@!G ?fqTS4E@@BT *(Y ?сj`8?qATj 8R"B *@!R?րk@ ??ѡj`8?qATj 8ZG!!!?4!! !? 4!!@!?ր 5@Rk@@ ?w`@ARBG@?k@ ?g> R[E@@BT R`" @"cHEB*aR3qT*SF3@AzhTC@ 7cG!G c@+b-Ҁ?!G R ?E?֠@"cGB+!RS qtT7R cG`!E@@BҡT @1E?!LG ?@BGA@@?FcF`? i4E@@B!T 3 ?@FGZEGdE`?֟BT@@??q`T@ ?@??rTqTaRBF@R@?cG`?BPF@? 7!F ?!E ?FWSR:R3S{AR!E ?@!F ?@[!F ?`Y@|FA R??_ q "T!E ?g@BG@?qITK@6FG+~ETG/G@`??eT@@?+@ ?qcTG 6@!G9?@BF@?@@RBF@?#@`?`@'@B9:*V5#@!F ?S ?#@3@6$RRx *dqThq`Rd@z@T5#@@BG@?6@!G ?#@`?`F{ R;FELE #@`?3@?bT@{@ ?G F#@@?@ ?[@`m7@Ayc`G`?@@y?q T?qTcPER!R`?*1TcGcA*`?1TF?!lE ?֠>4g@ER?!E ?ւ!RҀ?BF*@?@44G:G@@?*Qqh0T??*?qT!G ?!tE ?25CB9o@#9@@ @*S@@3@!F ?!F ?3@3yBG!@?o@@ CB9@#9@*@S@@3@;!F ?@_ qTsE`?@!\E ?'@!G ?o@!TF ?w@!F ?@!\F ?#@`?@s6!G{@ ?F@c@ 6 @CE!F `G!DG3F!F W @!G_GK!G s,G[FcEgGkF F{ZWGEF`?T+@@?/@ ?`@T` @?Ta@A3@ ?7@@?* 5;@ ?*C@?G@?K@ ?*O@@?*5S@ ?*W@??[@ ?9@?T_@Ҡ? ?c@@?*5@?cTg@ ?k@ ?@s@AR{@?@ ?֒E@@B!T 5%E@@cT 3E@@cҡT `)E@@caT E#c! c@!@ R?E#c! c@! R?ЄE#c! c@! R?ЄE#c! c@! R?@BF@?E@@BT@6G"Є FB@AR?E@@BҁT AR!HG* ?cG ЄGbc@!?k@@ֺF ?!E ?! @BTE@??@HЄ F_!ccARB:?@q;@@z@T=;N!HG* ?cG ЄGBc@!`?֪E@@BҡT 5aE@@BaT4WE@@B!T2M@!F ?֠p5E@@BAT@3>Gw@B%@ARЄ FWSR:R?3@{FSE@@cҡT`%9 R @c`FB@+*qT*.E@@BҡT@2 BGA@@?!F ? 4a:R"[Gc`#x!G@3@k@ ?B )AR/@ ?TbG 7HF?o@@Є F?ր5E@@BaT :?@ ?*!?@ ?*As?@ ?*ak?!F ?a3?!,G ?3@*ƀGk@s@?q:T:T9!hG ?qBF!@@?!DF ?!@E ?BtGֺF@?!dG ?BhF@?!F@ ?ЄGR?!`?bЄG@8BG!@?lЄE#c c !- R? AzGg@B?@AR.cPER!R`?*cPE"RAR`?*!FsG ?ЄGc@! `?`@@BtF@?`@"Є FB@AR?;)!4F ?Є FARB ;?;cGЄG!c@??@!E ? ?h@`?<cGЄGBc@!>?Zc$R#R*dqThq`R@z@T5#@@BG@?@6A9 $hT2GcB2AR@E@@BDT*( cGЄG!c@<?@!E ? ?@`?@cGЄGBc@!;?Gc=B2AR@bG@8E@@B=T7  @#EEHG@H_       ! ?T!Ga_ ! !"A !ABGb_{ `I9@7!F@ ? R` 9 @{¨_          {[UrTq[B{Ũ_S @9qT58c@9kT5rVrs@zT@9QQqAT@9qTq5u4c#Q@8QsrT`@9kAT**6cC#@ RSAV4@9?qTq?q@zT*qSA[B{Ũ_cC#@RRqT55 R_CBE{SsC@!`-B+@7}RC{`?֟kaT !F+ ? cGR`?*BF@?!G ?BFC@?+@ c$F+@R!-`?֓ 6!\F ?kJ@(G*@#?ր 5'@*ECC)?ր 5@!E+@ ?BF@?+@BF@?6E/@@B! T{FSG[HcIsK_+@BPF@?֠7Gk AR F@c2B2?!G R ?!\F ?cG!Gc@0Ҁ?!G R ?c$F}R!-`?!\F ?kJ!E/@"@ck T*1}k E?!E/@"@ck T*2mE/@@BaTR0bE/@@BT@0@{ c-!E"@_ !G ?1 Tk 3s"o |@s jEw ֪G{ F 1 (Fǟ9cE!XE G  O@7?*}҇kfk&@@ ?1T?ր{`O`T@R@`?*q T @{KZ qT@b@!?O5!E3 ?O @@R`?*q T @Q!c8?(qT@*@ @`?qT{KZ qT@*@`?qT@*BLE@?*qTG FB 4@AR?֒ @RD#8A 8*@BLE@?*qTk`o`s`w`{``````E_`@BT c-{ƨ_G FB`3@AR?1T!E4 ?Ek o s w {  ?!E@3 ?E{C@S[cF**R#R? E*"R?`!xF ?6`@BF? !E ?q!F@ T ?R!E@"@cTSB[CcD{A_!Ek ? 7!E ?֠ 7 R87`@!E ?F?`!E ?ַ!E ?!F ?@kE!F ?"RR??R ?@ RBF@?!DE ? s{EZsF|@`?@?4`?pE?@!5? `@@?4sFq@T!F ?kE~sF`RsFsFsFEks?Ekscc!-4OR?  {@R! 5SG4szE?!5@R?6`?!8@R?9`?;`?>`?@`?`? `?`?`?`?`?`?`? `? `? `? `?B ! @R? `?@ `?`? `?`?@`?``?`?`?!GR ?       {cRk@9_4[FS F?_@sRRB@#Chcxh7?qT? q TqTqT7TBS"788R  @855SA[B*cCkD{ƨ_֙~@!?"T"w8D SB*"78 k!8XR7T!w8 * 78R~@!?T"w8BSB*"78 k!8xR@8 q`Tq`T*SA[BcCkD{ƨ_ր5@84Ahaxo7qT@84@h`x`o6@8 w8@4      )?T)*g8'f8&e8%k88888?T@9 _8! ѫS|S SfF _8EE T_R_9_T*_h(8_!@9?AT@9|S SS|S TL R d8f8Mh%89?@T g8Ih+8R@h*8RR@_ _ {{_rexamples/ldns-dane.cres != NULL<%s> should be in range [0-%d] tlsas != NULLUnable to open %s: %s error: %s %s: %s ldns_dname_new_frm_strldns_rdf_clonecould not X509_get_subject_nameThe certificate does not match the server name could not select certificatecould not create tlsa rrldns_rr_list_push_rrmemory error in %s selectreading SSL_get_error: %d fwritereadwriting SSL_get_error: %d rrs != NULLldns-daneUsage: %s [OPTIONS] verify or: %s [OPTIONS] -t verify Verify the TLS connection at : or use TLSA record(s) from to verify the TLS service they reference. or: %s [OPTIONS] create [ [ []]] Use the TLS connection(s) to to create the TLSA resource record(s) that would authenticate the connection. 0 | PKIX-TA : CA constraint 1 | PKIX-EE : Service certificate constraint 2 | DANE-TA : Trust anchor assertion 3 | DANE-EE : Domain-issued certificate (default) 0 | Cert : Full certificate 1 | SPKI : SubjectPublicKeyInfo (default) 0 | Full : No hash used 1 | SHA2-256 : SHA-256 (default) 2 | SHA2-512 : SHA-512OPTIONS: -h show this text -4 TLS connect IPv4 only -6 TLS connect IPv6 only -r
use resolver at
instead of local resolver -a
don't resolve , but connect to
(es) -b print ". TYPE52 \# " form -c verify or create TLSA records for the certificate (chain) in -d assume DNSSEC validity even when insecure or bogus -f use CAfile to validate -i interact after connecting -k use DNSKEY/DS rr(s) in to validate TLSAs when signature chasing (i.e. -S)/etc/trusted-key.key Default is %s -n do *not* verify server name in certificate -o select th certificate from the end of the validation chain. -1 means self-signed at end -p use certificates in the directory to validate -s assume PKIX validity -S Chase signature(s) to a known key -t do not use DNS, but read TLSA record(s) from -T Return exit status 2 for PKIX validated connections without (secure) TLSA records(s) -u use UDP transport instead of TCP -v show version and exitssl_clientssl_serverdanePKIX
ldns_rr_list_newCan only specify -r once Could not interpret address %s Error opening %s: %s Could not parse key fileNo keys found in file %s 1.8.4ldns-dane version %s (ldns version %s) 46a:bc:df:hik:no:p:r:sSt:TuvV:No addresses of the specified type remain Unable to chase signature without keys. createverifySpecify create or verify mode ERROR! Nothing given to verify could not read tlsas from fileERROR! No TLSA records to extract service port, transport and hostname ERROR! To few labels in TLSA owner ERROR! Badly formatted service port label in the TLSA owner name portcould not extract service port from TLSA owner_tcp_udp_sctpERROR! Badly formatted transport label in the TLSA owner name could not extract transport from TLSA ownerldns_rdf2strldns_dname_clone_fromcould not ldns_str2rdf_dnamecould not create TLSA owner namecould not read tlas from filecould not dane_setup_resolverWarning! TLSA records for %s were found, but were insecure. PKIX validation without DANE will be performed. If you wish to perform DANE even though the RR's are insecure, use the -d option. dane_queryWarning! No TLSA records for %s were found. PKIX validation without DANE will be performed. certificate usageselectormatching typeWhen using the "CA constraint" or "Service certificate constraint", -f and/or -p options must be given to perform PKIX validation. PKIX validation may be turned off with the -s option. Note that with "CA constraint" the verification process should then end with a self-signed certificate which must be present in the server certificate chain. could not X509_STORE_newerror loading CA certificatescould not SSL_CTX_dane_enablecould not set verify locations could not set default verify paths could not SSL_CTX_newerror loading certificatecould not SSL_newcould not SSL_get_certificatecould not SSL_CTX_get_extra_chain_certscould not SSL_dane_enableSkipping non TLSA RR: Skipping TLSA with wrong rdata RR: could not SSL_dane_tlsa_addSkipping unusable TLSA RR: No usable TLSA records were found. PKIX validation without DANE will be performed. could not X509_STORE_CTX_init %s-validated successfully did not dane-validate, because: %s Warning! Insecure IPv4 addresses. Continuing with them... Warning! Bogus IPv4 addresses. Discarding... ldns_rr_list_push_rr_listWarning! Insecure IPv6 addresses. Continuing with them... Warning! Bogus IPv6 addresses. Discarding... No addresses for %s address != NULLSSL_clear SSL_set_fd handshaking SSL_get_error: %d Could not connect to %d could not get cert chain from ssl./ldns/buffer.hbuffer != NULLbuffer->_position <= buffer->_limitbuffer->_limit <= buffer->_capacitybuffer->_data != NULLcould not ldns_rdf2buffer_str_dname %d could not ldns_rr_class2buffer_str TYPE%d \# %d could not ldns_rdf2buffer_str_hex%s rr_list_filter_rr_typeFullno-hash-usedno hash usedSHA2-256sha256sha-256SHA2-512sha512sha-512PrivMatchCertFull certificateFull-certificatecertificateSPKISubjectPublicKeyInfoPublicKeypubkeykeyPrivSelPKIX-TACA constraintCA-constraintPKIX-EEService certificate constraintService-certificate-constraintDANE-TATrust anchor assertionTrust-anchor-assertionanchorDANE-EEDomain-issued certificateDomain-issued-certificatePrivCertgd }zjdane_setup_resolverdane_read_tlsas_from_filedane_querymainldns_buffer_invariantABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/; X 0D4<4d|lt8 Xp\lLDlzRx 4A,0@< TDHA BNxt`hAP BG A A^BQAB A LCAP AAtxAC C MEEWAALA  UEAA,|A@Db A ,hA@CBBe A @8AP BBKN CA AF AC G APXAAEIAp AA ZAa BABA XAAC BCF CAATA E4lA BAp F DBN DkAB AAAA D AABAAAAp  D AA HAAD AAA`dAC D BJFio A IkH E ACGA` CM C BCCCBIFA~AAAAAAAAAI`AA  RC A AAAAAAAATApC E AAr AABA CeFJEKdHAADA A A A BAC AA CB8tA0EC0X|&AC C BPAAd A` BBEE eADA`  p ACA T ^]     6 4{o . HH5! oo(!ooo) 6 6 6p6 (8@HX`xВؒ8X`xGCC: (GNU) 14.1.1 20240507GCC: (crosstool-NG 1.26.0.72_810021d) 14.1.1 20240507.shstrtab.interp.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.dynamic.got.data.bss.comment 88TT$&xx 4o,> F. Nof[o(!(!j!!tB55H~66y 6 6P66D@4{4{P{P{!tt000HH```0`Q