X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 75B683851C31
Authentication-Results:	sourceware.org; dmarc=none (p=none dis=none)
	header.from=dronecode.org.uk
Authentication-Results:	sourceware.org;
	spf=none smtp.mailfrom=jon DOT turney AT dronecode DOT org DOT uk
Authentication-Results:	btinternet.com;
	auth=pass (PLAIN) smtp.auth=jonturney AT btinternet DOT com
X-Originating-IP:	[86.141.128.212]
X-OWM-Source-IP:	86.141.128.212 (GB)
X-OWM-Env-Sender:	jonturney AT btinternet DOT com
X-VadeSecure-score:	verdict=clean score=0/300, class=clean
X-RazorGate-Vade:	gggruggvucftvghtrhhoucdtuddrgeduhedrudegledgkeeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuueftkffvkffujffvgffngfevqffopdfqfgfvnecuuegrihhlohhuthemuceftddunecunecujfgurhepuffhvfhfkffffgggjggtgfesthejredttdefjeenucfhrhhomheplfhonhcuvfhurhhnvgihuceojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukheqnecuggftrfgrthhtvghrnheptdelvdfhteetgfehgeeukefhtedtudelhefgteffhefhffevvdelgfeigedvuddtnecuffhomhgrihhnpegthihgfihinhdrtghomhenucfkphepkeeirddugedurdduvdekrddvuddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghloheplgduledvrdduieekrddurdduudejngdpihhnvghtpeekiedrudeguddruddvkedrvdduvddpmhgrihhlfhhrohhmpeeojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhequceuqfffjgepkeeukffvoffkoffgpdhrtghpthhtohepoegthihgfihinhdqrghnnhhouhhntggvsegthihgfihinhdrtghomheq
X-RazorGate-Vade-Verdict:	clean 0
X-RazorGate-Vade-Classification:	clean
Subject:	[ANNOUNCEMENT] Re: Cygwin setup signing public key update
From:	Jon Turney <jon DOT turney AT dronecode DOT org DOT uk>
To:	cygwin AT cygwin DOT com
References:	<6312.65287972695$1584116184 AT news DOT gmane DOT org>
	<73cab308-f9a9-7a9b-bc92-d5d9180c7153 AT dronecode DOT org DOT uk>
Message-Id:	<announce.2af2ac56-cfe5-ce9a-4840-69927193effd@dronecode.org.uk>
Date:	Sun, 7 Jun 2020 16:06:43 +0100
User-Agent:	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101
	Thunderbird/68.9.0
MIME-Version:	1.0
In-Reply-To:	<73cab308-f9a9-7a9b-bc92-d5d9180c7153@dronecode.org.uk>
X-Spam-Status:	No, score=-6.3 required=5.0 tests=BAYES_00, FORGED_SPF_HELO,
	KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, RCVD_IN_DNSWL_LOW,
	RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_PASS, SPF_NONE,
	TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-Mailman-Approved-At:	Sun, 07 Jun 2020 15:07:33 +0000
X-BeenThere:	cygwin-announce AT cygwin DOT com
X-Mailman-Version:	2.1.29
X-Mailer:	Perl5 Mail::Internet v2.20
X-BeenThere:	cygwin AT cygwin DOT com
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<http://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<http://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

On 13/03/2020 16:34, Jon Turney wrote:
> On 13/03/2020 16:13, Jon Turney wrote:
>> This is an announcement of an update to the key used to sign (i)
>> Cygwin setup executables, and (ii) the (compressed) setup.ini package
>> manifest.
> 
> If you just run setup, and update it when it tells you to update it, no 
> action is required, and this message chain will be of limited interest 
> to you.
> 
> This update is following the policy announced at [1]:
> 
>  > On 05/08/2008 14:30, Dave Korn wrote:
>  >> If we, from time to time, need to change this key, we will release
>  >> a new version of setup.exe and make announcements on the cygwin
>  >> and cygwin-announce mailing lists, and on the cygwin.com website.
> 
> Also see that post for further discussion of the technicals details of 
> setup signing.
> 
> The transition period, during which signatures are made using both keys 
> will probably be approx. 90 days, circumstances permitting.

As of today, the signature made is not compatible with setup versions 
<=2.894, and thus they will no longer work.
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -