<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: TTLS to require client cert</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Hi.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">After configuring the parameter in user configuration file</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I get the following log</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">However sniffing show that no request was sent</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> to get the certificate.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Are</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> any of you familiar with this problem?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] Done initial handshake</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] (other): before/accept initialization</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: before/accept initialization</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] <<< TLS 1.0 Handshake [length 005f], ClientHello</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 read client hello A</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] >>> TLS 1.0 Handshake [length 002a], ServerHello</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 write server hello A</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] >>> TLS 1.0 Handshake [length 0aab], Certificate</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 write certificate A</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] >>> TLS 1.0 Handshake [length 030d], ServerKeyExchange</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 write key exchange A</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 write server done A</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 flush data</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: Need to read more data: SSLv3 read client certificate</FONT></B></SPAN><SPAN LANG="en-us"><B></B></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>-----Original Message-----<BR>
From: freeradius-users-bounces+yoni.levin=altair-semi.com@lists.freeradius.org [<A HREF="mailto:freeradius-users-bounces+yoni.levin=altair-semi.com@lists.freeradius.org">mailto:freeradius-users-bounces+yoni.levin=altair-semi.com@lists.freeradius.org</A>] On Behalf Of Yoni Levin<BR>
Sent: Monday, August 24, 2009 5:38 PM<BR>
To: FreeRadius users mailing list; tnt@kalik.net<BR>
Subject: RE: TTLS to require client cert</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>I have similar problem</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>I also try to force TTLs to request client certificate but it just does</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>not happen. The radius does not send the request</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">.</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Maybe the reason is that I added EAP-TLS-Require-client-cert = YES in</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>the wrong section</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">?</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>I uncommented it in the tls section of eap.conf</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Thanks for your help</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">.</FONT></SPAN></P>
<BR>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">-----</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Original Message</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">-----</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>From</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">:</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>freeradius-users-bounces+yoni.levin=altair-semi.com@lists.freeradius.org</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">[</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR><A HREF="mailto:freeradius-users-bounces+yoni.levin=altair-semi.com@lists.freera">mailto:freeradius-users-bounces+yoni.levin=altair-semi.com@lists.freera</A></SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>dius.org] On Behalf Of Petar Marinkovic</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Sent: Thursday, July 16, 2009 12:43 AM</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>To: tnt@kalik.net; FreeRadius users mailing list</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Subject: Re: TTLS to require client cert</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Yes, it does, but something isnt working, he is just not checking the</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>client certificate</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>On 07/15/2009, Ivan Kalik <tnt@kalik.net> wrote</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">:</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">>></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>Hi all, I need help once again. I want TTLS to require client cert. I</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>put</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">>></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>EAP-TLS-Require-client-cert = YES in ttls { part of eap.conf but it's</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>not</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">>></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>working. What I am doing wrong here</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">?</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>What isn't working? Freeradius can request a certificate - does your</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>supplicant support that</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">?</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">> -</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>List info/subscribe/unsubscribe? See</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR><A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A></SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">-</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>List info/subscribe/unsubscribe? See</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR><A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A></SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">************************************************************************</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">************</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>This footnote confirms that this email message has been scanned by</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>PineApp Mail-SeCure for the presence of malicious code, vandals</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New"> &</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>computer viruses</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">.</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">************************************************************************</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">************</FONT></SPAN></P>
<BR>
<BR>
<BR>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">-</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>List info/subscribe/unsubscribe? See <A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A></SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New"> </FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">************************************************************************************</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>This footnote confirms that this email message has been scanned by</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"></SPAN></P>
<P DIR=RTL><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><SPAN DIR=LTR>PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses</SPAN></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">.</FONT></SPAN></P>
<P DIR=RTL><SPAN LANG="he"><FONT SIZE=2 FACE="Courier New">************************************************************************************</FONT></SPAN></P>
<BR>
<P DIR=RTL><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>