X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 2E66F385803F
Authentication-Results:	sourceware.org; dmarc=none (p=none dis=none)
	header.from=SystematicSw.ab.ca
Authentication-Results:	sourceware.org;
	spf=none smtp.mailfrom=brian DOT inglis AT systematicsw DOT ab DOT ca
X-Authority-Analysis:	v=2.4 cv=INe8tijG c=1 sm=1 tr=0 ts=5ff3ed28
	a=kiZT5GMN3KAWqtYcXc+/4Q==:117 a=kiZT5GMN3KAWqtYcXc+/4Q==:17
	a=IkcTkHD0fZMA:10 a=X3t9OT4CAAAA:8 a=w_pzkKWiAAAA:8 a=TImcKGuyeGIbufSLrCcA:9
	a=QEXdDO2ut3YA:10 a=WFwZ391c_fEA:10 a=MWD-WI_l2dhDSdway31P:22
	a=sRI3_1zDfAgwuvI8zelB:22
To:	cygwin AT cygwin DOT com
References:	<014601d60d88$527d6030$f7782090$@alverservices.com>
	<06bb01d6e294$15805f20$40811d60$@alverservices.com>
	<da2a8489-4fe0-e75a-2ffc-1f6cfc663761 AT gmail DOT com>
From:	Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Organization:	Systematic Software
Subject:	Re: OpenSSL
Message-ID:	<752b3961-83aa-993c-a766-c93f175e069a@SystematicSw.ab.ca>
Date:	Mon, 4 Jan 2021 21:37:59 -0700
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
	Thunderbird/78.6.0
MIME-Version:	1.0
In-Reply-To:	<da2a8489-4fe0-e75a-2ffc-1f6cfc663761@gmail.com>
X-CMAE-Envelope:	MS4xfK/XLilPgGhWjLJ0khwITX+y+L6LsIEWpMCWNkG8Rho40jiOQwvgIeHSfaqS0gJqCm1UpDsHkl1ZrVjgtC155bkwJotWV0VywwoBqsALDGs1lfXqhjLk
	HYtMPwNRnO9fgGH3hEvlKAeFZfz1fr1+LHAK5Mcg69rDvsOWM5s8YP63fzdh61U8DzYEUejpeIVD0DNwjBzXtAPqKkvLfiTvtXjpzW3d+mEnbDz/We3e9t1I
	1UnmhBRLKWPrQxcACT+/DA==
X-Spam-Status:	No, score=-5.9 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
	KAM_LAZY_DOMAIN_SECURITY, NICE_REPLY_A, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H3,
	RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_NONE,
	TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Cc:	tommie DOT king AT alverservices DOT com
Errors-To:	cygwin-bounces AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 1054cWh5020890

On 2021-01-04 08:11, Marco Atzeri via Cygwin wrote:
> On 04.01.2021 13:21, tommie DOT king AT alverservices DOT com wrote:
>> But im struggling to see how I can upgrade openssl >1.1.1f
>> Compliance checks state that we must have a more up to date version, I know
>> that it exists (1.1.1g, 1.1.1h, 1.1.1i)
> 
> https://cygwin.com/packages/summary/openssl.html
> 
> the last one available on cygwin is 1.1.1f
> 
>> But I can only seem to upgrade to 1.1.1f in Cygwin  - is there a new upgrade
>> package for Cygwin/Openssl coming in the near future?
> 
> It will depends on the maintainer (Corinna) availability.
> Maybe after the holiday season

What are your compliance timing constraints in terms of releases and time?
I see Cygwin openssl is now 3 versions and 9 months behind the latest.

If you have a compliance timing issue, your organization will have to take 
responsibility for meeting your compliance needs, either by having staff or 
contracting others to meet those needs, by building packages more up to date 
than those available from the distros you use.

All recent, and certainly all important, Cygwin packages use the common cygport 
package build and maintenance system, which takes a lot of the burden off the 
rote tasks required of maintainers to update packages to newer versions.
Any package user may also do so by installing the cygport package and all its 
toolchain dependencies, downloading the package sources, most of which contain a 
<package>.cygport file, or cloning the package repo:

https://cygwin.com/git-cygwin-packages/?p=git/cygwin-packages/openssl.git;a=summary

to get the <package>.cygport file, change the package version within to the 
latest, and within that directory run:

	$ cygport <package>.cygport download all check

to download all source and patch files and build the package.

In some cases, you may need to install the package source to get the patch 
sources if they have not been pushed to the package repo (as there is not really 
much in the way of common policies or practices about that as yet), or search 
and find the online locations of distros patches.

You may also have to tweak the <package>.cygport files to skip patches already 
applied to the upstream package so redundant, tweak patches that are still 
required but no longer apply without error, drop patches as the package has been 
tweaked in some other way so they are no longer required, or make your own 
patches to get the package to build under Cygwin.

You will also have to install the development versions of libraries required by 
packages, often named lib/...-devel, and those available on Cygwin which support 
additional functionality provided by the package, which may have to be 
explicitly configured into the build specified in the <package>.cygport files.

Some background and help is available in the pages under Contributing on the 
home page, in the archives of the cygwin-apps list, by searching online, and 
asking on this list, if nothing else works.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -