DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:date:message-id:subject
	:sender; q=dns; s=default; b=GmpjKOykiyPKhbkr8Lw+Udal089knI6YEOc
	tADYXE19h5TuBwVskLwj6hRsUJydIEMU4zF3hOtuHaxSrPKJZoN20UO2YMT8g14D
	h1tvuhvXBnQXr0HP8qQ2Zt9lSc+/ZUB5vt08r4whG5CU6Q4P2Fxmah33x7TzzVNL
	rxACgXtI=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Reply-To: cygwin@cygwin.com
From: Yaakov Selkowitz <yselkowitz@cygwin.com>
To: cygwin@cygwin.com
Date: Sun, 17 Mar 2019 22:14:05 -0400
Message-Id: <announce.20190317221405.24980-1-yselkowitz@cygwin.com>
Subject: [ANNOUNCEMENT] crypto-policies 20190218-1
Sender: qmail alias <cygwin@server4.sourceware.org>

The following packages have been uploaded to the Cygwin distribution:

* crypto-policies-20190218-1

This package provides a tool update-crypto-policies, which sets the 
policy applicable for the various cryptographic back-ends, such as 
SSL/TLS libraries. The policy set by the tool will be the default policy 
used by these back-ends unless the application user configures them 
otherwise.

This is a new addition to the distribution.  The latest OpenSSL, GnuTLS, 
and NSS have all been configured to use this by default.  Applications 
still need to be patched to use these instead of overriding the default 
config, as described further:

https://docs.fedoraproject.org/en-US/packaging-guidelines/CryptoPolicies/

Patches for such packages should be available from Fedora.

--
Yaakov

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple