Inhaltsverzeichnis

ABBILDUNGSVERZEICHNIS   3

TABELLENVERZEICHNIS 3   

1  EINLEITUNG  4

2  URSPRUNG UND DEFINITION EINES VPN  5

2.1  ANFORDERUNGEN AN VPN.  6

2.2  VPN TOPOLOGIEN  7

3  TLS / SSL  10

3.1  HISTORISCHE ENTWICKLUNG DES TLS-PROTOKOLLS  10

3.2  AUFBAU DES TLS-PROTOKOLLS.  11

3.2.1  Record Protocol  12

3.2.2  TLS Handshake Protocol  13

3.2.2.1  Alert Protocol  14

3.2.2.2  Change Cipher Spec Protocol  14

3.2.2.3  Handshake Protocol  14

3.2.2.4  Cipher Suite.  15

3.3  VERBINDUNGSAUFBAU  17

4  OPENVPN  21

4.1  OPENSSL  21

4.2  INSTALLATION VON OPENVPN  21

4.2.1  Konfiguration von OpenVPN  22

4.2.2  Zertifikaterstellung mittels easyRSA  23

4.2.3  Konfiguration der Verbindungseinstellungen  31

4.2.4  Inbetriebnahme.  39

5  ZUSAMMENFASSUNG  42

ANHANG 43   

QUELLENVERZEICHNIS   45

   xxxxxxxxxxxxxxx

2

Abbildungsverzeichnis   

ABBILDUNG  1 ZEIGT DIE VERKNÜPFUNG ZWEIER LAN STANDORTE ÜBER DAS INTERNET  

ABBILDUNG  2 ZEIGT DIE ARBEITSWEISE VPN-GATEWAYS  

ABBILDUNG  3 ZEIGT DIE TOPOLOGIE c,OST t TO t HOST  

ABBILDUNG  4 ZEIGT DIE TOPOLOGIE c,OST t TO t NETWORK  

ABBILDUNG  5 ZEIGT DIE TOPOLOGIE cEETWORK t TO t NETWORK  

ABBILDUNG  6 ZEIGT DIE EINORDNUNG DES TLS / SSL-PROTOKOLLS IM OSI-SCHICHTENMODELL  

ABBILDUNG  7 ZEIGT DIE PORTBELEGUNGEN VERSCHIEDENER PROTOKOLLE FÜR SSL  

ABBILDUNG  8 ZEIGT ARBEITSABLAUF DES cZECORD LAYER  

ABBILDUNG  9 ZEIGT DEN ABLAUF EINES c,ANDSHAKES MITTELS RSA  

ABBILDUNG  10 ZEIGT DAS AUSFÜHREN VON 'VARS' UND 'CLEAN-ALL'  

ABBILDUNG  11 ZEIGT DAS AUSFÜHREN DES 'BUILD-CA' SKRIPTS  

ABBILDUNG  12 ZEIGT DIE ERSTELLUNG DES SERVERZERTIFIKATS (ERSTER TEIL)  

ABBILDUNG  13 ZEIGT DIE ERSTELLUNG DES SERVERZERTIFIKATS (ZWEITER TEIL)  

ABBILDUNG  14 ZEIGT DIE ERSTELLUNG DES CLIENTZERTIFIKATS (ERSTER TEIL)  

ABBILDUNG  15 ZEIGT DIE ERSTELLUNG DES CLIENTZERTIFIKATS (ZWEITER TEIL)  

ABBILDUNG  16 ZEIGT DIE ERZEUGUNG DES DIFFIE-HELLMAN PARAMETERS (ERSTER TEIL)  

ABBILDUNG  17 ZEIGT DIE ERZEUGUNG DES DIFFIE-HELLMAN PARAMETERS (ZWEITER TEIL)  

ABBILDUNG  18 ZEIGT DIE PROTOKOLLOBERFLÄCHE DES OPENVPN GUI  

ABBILDUNG  19 ZEIGT DAS TASKLEISTENSYMBOL DES OPENVPN GUIS (GANZ LINKS)  

Tabellenverzeichnis   

TABELLE 1:  cHIPHER SUITES FÜR SSL 3.0 / TLS 1.0 15 /  

3

1 Einleitung

'LH $ENU]XQJ 931 VWHKW IU Ä9LUWXDO 3ULYDWH 1HWZRUN³ XQG EHGHXWHW Z|UWOLFK hEHUVHW]W ÄYLUWXHOOHVSULYDWHV1HW]ZHUN³'RFKZDVYHUELUJWVLFKJHQDXKLQWHUGLHVHU$ENU]XQJ" 931V ELHWHQ $QZHQGHUQ DXV GHP JHVFKlIWOLFKHQ DOV DXFK DXV GHP SULYDWHQ %HUHLFK GLH 0|JOLFKNHLW=XJULIIDXIGDVLQWHUQH1HW]ZHUN]XHUP|JOLFKHQ'DEHLLVWHVEHVRQGHUVZLFKWLJ GLH *HKHLPKDOWXQJ GHU EHUPLWWHOWHQ 'DWHQ ]X ZDKUHQ 8P GLHV ]X JHZlKUOHLVWHQ VHW]W GLH 9317HFKQRORJLHDXI YHUVFKLHGHQVWHNU\SWRJUDILVFKH $OJRULWKPHQ'XUFKGLHVH9HUELQGXQJ LVWHVEHLVSLHOVZHLVHP|JOLFKH[WHUQH0LWDUEHLWHUHLQHU)LUPDPLWGHPORNDOHQ1HW]ZHUNGHU )LUPD ]X YHUELQGHQ 'LH $UW GHU .RPPXQLNDWLRQ LVW GDKLQJHKHQG QLFKW DXI EHVWLPPWH 3URWRNROOH EHVFKUlQNW 9LHOPHKU HUP|JOLFKW HV HLQH VLFKHUH .RPPXQLNDWLRQ ]ZLVFKHQ GHQ &OLHQWVDXIGHU7UDQVSRUWXQG$QZHQGXQJVVFKLFKW(LQ931QXW]WGDV,QWHUQHWGDKHUQXUDOV 7UDQVSRUWPHGLXP XQG OlVVW ELOGOLFK JHVHKHQ HLQ 7HLOQHW] HQWVWHKHQ =XNQIWLJ ZLUG HV DXFK Ä8QLILHG931V³ JHEHQ ZHOFKH ]XU JOHLFK]HLWLJHQ hEHUWUDJXQJ YRQ 6SUDFKH 'DWHQ XQG LQWHUDNWLYHQ9LGHRNRQIHUHQ]HQJHHLJQHWVLQG)UGLH8PVHW]XQJGLHVHU1HW]ZHUNWRSRORJLHQ VWHKHQ VRZRKO +DUGZDUH DOV DXFK 6RIWZDUHO|VXQJHQ ]XU 9HUIJXQJ ,P 5DKPHQ GLHVHU $UEHLWZLUGGLHIUHLH6RIWZDUHO|VXQJ2SHQ931HUOlXWHUWXQGYRUJHVWHOOW 1DFK GHU (LQOHLWXQJ IROJW LP ]ZHLWHQ .DSLWHO GLH (UOlXWHUXQJ ]X 8UVSUXQJ XQG 'HILQLWLRQ HLQHV931V'DEHLZHUGHQVRZRKOGLH$QIRUGHUXQJHQDOVDXFKGLHYHUVFKLHGHQHQ7RSRORJLHQ HLQHV Ä9LUWXDO 3ULYDWH 1HWZRUNV³ YRUJHVWHOOW $QVFKOLH‰HQG ZLUG LP GULWWHQ .DSLWHO GHU NU\SWRJUDSKLVFKH +LQWHUJUXQG ± VSH]LHOO GDV 7/6 66/ 3URWRNROO ± QlKHU EHWUDFKWHW ,P 9RUGHUJUXQG VWHKW GDEHL GLH (UIDVVXQJ GHU *UXQGODJHQ IU GHQ 9HUELQGXQJVDXIEDX GHU 2SHQ931 6RIWZDUH 'LHVHU 9HUELQGXQJVDXIEDX ZLUG GDQQ LP YLHUWHQ .DSLWHO JHQDXHU EHVFKULHEHQ 'DEHL ZLUG VRZRKO GLH ,QVWDOODWLRQ DOV DXFK GLH .RQILJXUDWLRQ XQG ,QEHWULHEQDKPH YHUDQVFKDXOLFKW ,P DEVFKOLH‰HQGHQ IQIWHQ $EVFKQLWW ZHUGHQ GLH DXIJHDUEHLWHWHQ,QKDOWH]XVDPPHQJHIDVVWXQGEHZHUWHW

xxxxxxxxxxxxxxx

4

2 Ursprung und Definition eines VPN

,KUHP 8UVSUXQJ QDFK ELOGHQ 931V LQQHUKDOE HLQHV |IIHQWOLFKHQ :lKOQHW]HV YLUWXHOOH 7HLOQHW]HZLH1HW]HGHU6SUDFKNRPPXQLNDWLRQ;)UDPH5HOD\RGHU,6'1,PKHXWLJHQ 6SUDFKJHEUDXFKVSULFKWPDQYRQHLQHPYHUVFKOVVHOWHQYLUWXHOOHQ1HW]ZHUNZHQQYRQ931 GLH5HGHLVW:LHLQ$EELOGXQJ]XVHKHQZHUGHQ]ZHLÄ/$16WDQGRUWH³EHUGDV,QWHUQHW XQG GDPLW EHU GDV 9LUWXHOOH 1HW] YHUEXQGHQ 'DEHL ZLUG YRQ HLQHP EHQDFKEDUWHQ 1HW] JHVSURFKHQ ZHQQ ZHQLJVWHQV ]ZHL 1HW]ZHUNH EHU HLQ Ä931*DWHZD\³ YHUEXQGHQ VLQG VLHKH$EELOGXQJ>LWZ@

(LQIDFK DXVJHGUFNW HLQ 931 YHUELQGHW ]ZHL RGHU PHKUHUH ORNDO JHWUHQQWH 1HW]ZHUNH PLWHLQDQGHU ZHOFKH QLFKW ]ZDQJOlXILJ GLH JOHLFKH 7RSRORJLH EHVLW]HQ PVVHQ Ä5RDGZDUULRU³±Ä)LUPHQ/$1³'LHVZLUGGXUFKGLHYHUVFKLHGHQHQ931$UWHQGLHVSlWHU HUNOlUW ZHUGHQ DEJHGHFNW 'DEHL EULQJW HV HLQHQ HQWVFKHLGHQGHQ 9RUWHLO PLW IU DOOH %HWHLOLJWHQ LVW HLQ YROOVWlQGLJHU =XJULII DXI DOOH 5HVVRXUFHQ GHU ]XVDPPHQJHVFKORVVHQHQ 1HW]ZHUNHVRPLWHLQH1XW]XQJGHVNRPSOHWWHQ'DWHQEHVWDQGHVP|JOLFK 7HFKQLVFK HUNOlUW ELOGHW GDV 931 GDEHL HLQ ORJLVFKHV 7HLOQHW] (V OHJW VLFK EHU GDV EHQDFKEDUWH1HW]XQGQXW]WGHUHQ$GUHVVPHFKDQLVPHQ'HQQRFKWUDQVSRUWLHUWHVDEHUHLJHQH 1HW]ZHUNSDNHWH XQG VRPLW DUEHLWHW HV YRP 5HVWGHV 1HW]HV DEJHNDSVHOW 'DV ,QWHUQHW DJLHUW KLHU DOV 7UDQVSRUWPHGLXP 'LH .RPPXQLNDWLRQ GHU GDULQ EHILQGOLFKHQ &OLHQWV EDVLHUW DXI HLQHU 7XQQHOWHFKQLN ZHOFKH LQGLYLGXHOO NRQILJXULHUEDU XQG DQSDVVEDU LVW )U ]XNQIWLJH 6LFKHUKHLWVHLQVWHOOXQJHQ QDFK GHU ,QVWDOODWLRQ LVWGLHV HLQ EHGHXWXQJVYROOHU $VSHNW %HILQGHW VLFKHLQ&OLHQWLP931VRDJLHUWHUZLHLPORNDOHQ1HW]E]Z,QWUDQHWDXFKZHQQHUVLFKLQ HLQHPJHRJUDILVFKHQWIHUQWHQ1HW]ZHUN EHILQGHW'HU'DWHQYHUNHKUZLUGGDEHL YHUVFKOVVHOW EHUPLWWHOWZRGXUFKHLQHVLFKHUH.RPPXQLNDWLRQJHZlKUOHLVWHWZLUG>LWZ@

xxxxxxxxxxxxxxx

5

=XVDPPHQIDVVHQG OlVVW VLFK ZLH IROJW GHILQLHUHQ (LQ 931 HUP|JOLFKW HV SULYDWH XQG |IIHQWOLFKH1HW]ZHUNH]XNRPELQLHUHQ LQGHPGDV ,QWHUQHWDOV7UlJHUPHGLXP IUGLHSULYDWH .RPPXQLNDWLRQEHQXW]WZLUG>QHW@

2.1 Anforderungen an VPN

'LH$QIRUGHUXQJHQDQHLQ931KlQJHQYRPMHZHLOLJHQ(LQVDW]DEODVVHQVLFKDEHUZLHIROJW ]XVDPPHQIDVVHQGDXIOLVWHQ

6LFKHUKHLW%HQXW]HUDXWKHQWLIL]LHUXQJ'DWHQYHUVFKOVVHOXQJ 9HUIJEDUNHLW 3HUIRUPDQFH 0LJUDWLRQVIlKLJNHLWXQG6NDOLHUEDUNHLW ,QWHJUDWLRQLQH[LVWLHUHQGH1HW]H $GUHVVYHUZDOWXQJ

,P%HUHLFKGHU6LFKHUKHLWZHUGHQYLHOH$QIRUGHUXQJHQJHVWHOOWGHQQGLH.RPPXQLNDWLRQYRQ 6HQGHU XQG (PSIlQJHU ZLUG EHU HLQH |IIHQWOLFK ]XJlQJOLFKH /HLWXQJ UHDOLVLHUW 8QEHIXJWHQ ZLUG HLQ =XJULII DXI GLH 'DWHQ YHUZHLJHUW HEHQVR ZLH VLFK %HQXW]HU YRU GHP =XJDQJ DXWKHQWLIL]LHUHQ PVVHQ =XU 'DWHQVLFKHUXQJ GLHQW HLQ VWDQGDUGLVLHUWHV 9HUVFKOVVHOXQJV YHUIDKUHQVRZLHHLQHIIHNWLYHV6FKOVVHOPDQDJHPHQW]XU$XWKHQWLIL]LHUXQJÄ*XWH³6FKOVVHO KDEHQHLQHUHODWLYNXU]H/HEHQVGDXHUXQGVLQGPHLVWQXU IUHLQH6HVVLRQJOWLJ,P]ZHLWHQ 3XQNWGHU9HUIJEDUNHLWJHKWPDQYRQ:lKOYHUELQGXQJHQSHUPDQHQWHQ9HUELQGXQJHQXQG ,QWHUQHW931V DXV VSULFK HLQ 931 PXVV GLH 9HUIJEDUNHLW ELHWHQ GLH QLFKW XQWHU GHU YRQ KHUN|PPOLFKHQ:$16WUXNWXUHQOLHJW>QHW@

xxxxxxxxxxxxxxx

6

'LH9HUVFKOVVHOXQJHLQHU%UHLWEDQGVWUHFNHLQ(FKW]HLWLVWHEHQVRHLQH+HUDXVIRUGHUXQJZLH HV DXFK GLH 1XW]XQJ YRQ JOHLFK]HLWLJHQ 9319HUELQGXQJHQ DQ GLH +DUGZDUH LVW ,Q GHU 0LJUDWLRQVIlKLJNHLW XQG 6NDOLHUEDUNHLW PXVV GDUDXI JHDFKWHW ZHUGHQ GDVV GLH 6\VWHPH DXI RIIHQHQ 6WDQGDUGV EDVLHUHQ 'DPLW ZLUG HLQH 8QDEKlQJLJNHLW YRQ HLQHP EHVWLPPWHQ +HUVWHOOHU JDUDQWLHUW (EHQIDOOV ZLFKWLJ LVW GLH (UZHLWHUEDUNHLW GHU EHQXW]WHQ .RPSRQHQWHQ YRU DOOHP LP %HUHLFK YRQ 8SGDWHV 'LH :DKO GHU HLQJHVHW]WHQ 931/|VXQJ LVW ]XGHP YRQ HQWVFKHLGHQGHU%HGHXWXQJ LP+LQEOLFNDXI*HZlKUOHLVWXQJHLQHU ODQJIULVWLJHQ6NDOLHUEDUNHLW EH]JOLFKGHU%HQXW]HU]DKOHQXQG%DQGEUHLWHQ %HLGHU,QWHJUDWLRQ LQH[LVWLHUHQGH1HW]H LVW OLHJW GLH 3ULRULWlW GDULQ GDVV VLFK GLH JHQXW]WH 931/|VXQJ LQ HLQ YRUKDQGHQHV 1HW]ZHUN LQWHJULHUHQ OlVVW 'D]X JHK|UW DXFK GDV HLQJOLHGHUQ LQ GDV 6LFKHUKHLWVNRQ]HSW 'HV :HLWHUHQ LVW HV ZLFKWLJ GDVV GHU $GPLQLVWUDWLRQVDXIZDQG DXFK EHL ZDFKVHQGHU $Q]DKO DQ %HQXW]HUQ XQG6LWHVGLHLQGDV931HLQJHEXQGHQZHUGHQPVVHQYHUWUHWEDUEOHLEW'LH$QIRUGHUXQJHQ DQ GLH $GUHVVYHUZDOWXQJ IRNXVVLHUW VLFK DXI GDV $GUHVVPDQDJHPHQW LQ GHQ MHZHLOLJHQ 1HW]ZHUNHQ'RUWLVWVRZRKOHLQH(IIHNWLYLWlWDOVDXFKHLQH(IIL]LHQ]Q|WLJ>LQI@

2.2 VPN Topologien

$EKlQJLJYRP(LQVDW]XQWHUVFKHLGHWPDQ]ZLVFKHQIROJHQGHQ931$UWHQDXFK7RSRORJLHQ JHQDQQW +RVW±7R±+RVW +RVW±7R±1HWZRUN 1HWZRUN±7R±1HWZRUN ([WUDQHW931

,P Ä+RVW ± 7R ± +RVW³ EHVWHKW HLQH GLUHNWH 9HUELQGXQJ ]ZLVFKHQ GHQ HLQ]HOQHQ Ä931 &OLHQWV³ YLD ,QWHUQHWRKQH =XVDW] HLQHV 931*DWHZD\V HLQHV ,QWHUQHWVHUYLFHSURYLGHUV RGHU GXUFK 7XQQHOLQJ VLHKH $EELOGXQJ 'LH 6RIWZDUH GHU Ä931 +RVWV³ YHUVFKOVVHOQ GLH 'DWHQIUGLHhEHUWUDJXQJ>WXP@

xxxxxxxxxxxxxxx

7

,PÄ+RVW±7R±1HWZRUN³JLEWHVHLQHQÄ931&OLHQW³GHUEHUHLQHQ7XQQHODXIGDVLQWHUQH 1HW]ZHUN YLD GHQ Ä931 6HUYHU³ ]XJUHLIHQ NDQQ VLHKH $EELOGXQJ =LHO LVW KLHU GLH *HZlKUOHLVWXQJ GHV =XJDQJHV IU HLQHQ $X‰HQGLHQVWPLWDUEHLWHU YRQ HLQHP EHOLHELJHQ ,QWHUQHW]XJDQJ 'HU =XJULII DXI GDV )LUPHQQHW]ZHUN ZLUG EHU HLQ Ä3RLQW ± 7R ± 3RLQW 3URWRFRO³ ]X HLQHP ORNDOHQ ,QWHUQHWVHUYLFHSURYLGHU XQG YRQ GRUW ZHLWHU EHU GDV ,QWHUQHW UHDOLVLHUW'LHhEHUWUDJXQJLP7XQQHOLVWYHUVFKOVVHOW

,P Ä1HWZRUN±7R±1HWZRUN³ZHUGHQ1HW]HYRQ8QWHUQHKPHQEHU Ä931*DWHZD\V³XQG GHQ ,63 EHU GDV ,QWHUQHW YHUEXQGHQ =ZLVFKHQ Ä5RXWHU $ ZLWK 931³ XQG Ä5RXWHU % ZLWK 931³ ZLUG HLQ VLFKHUHU 7XQQHO DXIJHEDXW GXUFK GHQ GLH 'DWHQ YHUVFKOVVHOW WUDQVSRUWLHUW ZHUGHQVLHKH$EELOGXQJ>WXP@

xxxxxxxxxxxxxxx

8

(LQÄ([WUDQHW931³lKQHOWGHU6WUXNWXUHLQHVÄ1HWZRUN±7R±1HWZRUN³E]ZHLQHVÄ+RVW± 7R±1HWZRUN³(LQÄ([WUDQHW931³XQWHUVFKHLGHWVLFKYRQGHQDQGHUHQ931VGDULQGDVVHV VHLQ1HW]ZHUNRGHU7HLOHGHV1HW]ZHUNHVDXFKIUH[WHUQH3HUVRQHQXQGRGHU2UJDQLVDWLRQHQ |IIQHWXQGGLHVHQVRPLW=XJULIIDXIGLHLP931]XU9HUIJXQJVWHKHQGHQ5HVVRXUFHQJHZlKUW XQG YHUWUDXOLFKH 'DWHQ PLW LKQHQ DXVWDXVFKHQ NDQQ %DVLHUHQG DXI GHQ EHNDQQWHQ 931 7HFKQLNHQ ZHUGHQ 'DWHQ YRQ HLJHQHQ 0LWDUEHLWHUQ JHVRQGHUW EHKDQGHOW 'LHV IXQNWLRQLHUW XQWHU DQGHUHP GXUFK 931*DWHZD\V UHVSHNWLYH )LUHZDOOV %HLVSLHOVZHLVH ZHUGHQ GLH 9HUELQGXQJHQ GHU 0LWDUEHLWHU LP ,QWUDQHW DXIJHO|VW GLH GHU H[WHUQHQ 1XW]HU MHGRFK LQ GHU )LUHZDOO)UGHQ'DWHQWUDQVSRUWZLUGGDV931JHQXW]W>EUD@

xxxxxxxxxxxxxxx

9

3 TLS / SSL

0LW 7/6 66/ ZLUG HLQ hEHUWUDJXQJVSURWRNROO EH]HLFKQHW ZHOFKHV HLQH YHUVFKOVVHOWH .RPPXQLNDWLRQ EHU XQVLFKHUH .DQlOH HUP|JOLFKW 'LH .RPELQDWLRQ V\PPHWULVFKHU XQG DV\PPHWULVFKHUNU\SWRJUDSKLVFKHU0LWWHOVRJHQDQQWHUÄ+\EULGHU9HUVFKOVVHOXQJ³PDFKWHV GDEHLEHVRQGHUVVLFKHU

*UDILVFK GDUJHVWHOOW YHUVWHKW PDQ GDV 3URWRNROO LP 26,6FKLFKWHQPRGHOO DOV QHXH 6FKLFKW ]ZLVFKHQGHU$QZHQGXQJVXQGGHU7UDQVSRUWVFKLFKW>XOPLHWIEX@

3.1 Historische Entwicklung des TLS-Protokolls

'LH *HVFKLFKWH GHV 7/63URWRNROOV EDVLHUW DXI HLQHU (QWZLFNOXQJ YRQ Ä1HWVFDSH &RPPXQLFDWLRQV³ ,P -DKU ZXUGH GLH HUVWH 9HUVLRQ GHV Ä6HFXUH 6RFNHW /D\HU³ 66/ YHU|IIHQWOLFKW$QVWR‰GDIUZDUGHUHUVWHHQWZLFNHOWH:HEEURZVHUÄ0RVDLF³GHUNXU]]XYRU KHUDXVJHJHEHQ ZXUGH %HUHLWV QDFK IQI 0RQDWHQ HUVFKLHQ GHU Ä1HWVFDSH 1DYLJDWRU³ XQG GDPLWYHUEXQGHQZXUGHDXFKGLH66/9HUVLRQYHU|IIHQWOLFKW0LFURVRIWSXEOL]LHUWH GHQ Ä,QWHUQHW ([SORUHU³ XQG VWHOOWH NXU] GDUDXI HLQH HLJHQH (QWZLFNOXQJ GHV 6LFKHUKHLWVSURWRNROOVYRU'DV3&73ULYDWH&RPPXQLFDWLRQ7HFKQRORJ\3URWRFROZXUGH DOOHUGLQJV QLFKW ZHLWHU HQWZLFNHOW 7URW] DOOHP ZXUGHQ HLQLJH ,GHHQ GHV 3&7 LQ GDV YHU|IIHQWOLFKH 66/ PLW LQWHJULHUW 6R ZXUGH GLH &OLHQWDXWKHQWLIL]LHUXQJ QHX HLQJHIKUW %LVODQJZDUHVQXUP|JOLFKGLH,GHQWLWlWGHV6HUYHUV]XEHUSUIHQ,P-DKUZXUGH66/ GXUFKGDV5)&]XP6WDQGDUGHUNOlUW,QGLHVHP=XVDPPHQKDQJZXUGHHVJOHLFK]HLWLJLQ 7UDQVSRUW/D\HU6HFXULW\7/6XPEHQDQQW

7URW] GHU 7DWVDFKH GDVV GLH 8QWHUVFKLHGH ]ZLVFKHQ 7/6 XQG 66/ QXU JHULQJIJLJ VLQG LVW 7/6QLFKWGLUHNWDEZlUWVNRPSDWLEHO'LH.RPSDWLELOLWlWZLUGQXUJHVFKDIIHQGDVLFK7/6 LP+HDGHU PLW Ä66/³DQPHOGHWXQG VRZLHGHU PLWGHQ9HUVLRQHQ66/XQG66/ NRPPXQL]LHUHQNDQQ'LHVHV9HUIDKUHQZXUGHELVKHXWHEHLEHKDOWHQ :HLWHUKLQZXUGHGDV7/6GXUFKPHKUHUH5)&¶VJHQDXHUVSH]LIL]LHUWXP]XVlW]OLFKPHKU .RPSDWLELOLWlWPLWDQGHUHQ3URWRNROOHQ]XVFKDIIHQ]%+773$OOHUGLQJVNRQQWHQHUVW LP $SULO PLWGHP 5)&GDV7/6VWDQGDUGLVLHUWXQGGLH8QJHUHLPWKHLWHQEHU GLH YHUVFKLHGHQHQ 1DPHQV XQG 9HUVLRQVJHEXQJHQ EHVHLWLJW ZHUGHQ 'LH ELVODQJ OHW]WH xxxxxxxxxxxxxxx

9HUVLRQ ZXUGH LP $XJXVW YHUDEVFKLHGHW $OV HQWVFKHLGHQGHU 9RUWHLO GHU 9HUVLRQ 7/6

10