DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=YyS9zBwRd83K2ZyIeWheziI/bZ6APIMAOIyX3HooxcDIpqXrJe/ij
	Ope+ueQ7jSG25ejGlCl8cdzQ/0oTdUMjQlDOUFjOjPZdlJfRQblOeTyZOWk5hq0a
	n8n68YfQPZNkAH89IQyrc20lGSAA7tJK1e4wGWwX2nKNM/hw2vvWE0=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Fri, 6 Feb 2015 11:23:04 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Updated: setup.exe (Release 2.867)
Message-ID: <20150206102304.GD2635@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20150205180713 DOT GZ2635 AT calimero DOT vinschen DOT de> <54D4216D DOT 5050509 AT cisra DOT canon DOT com DOT au>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="JWOY2/vB4uO4FuME"
Content-Disposition: inline
In-Reply-To: <54D4216D.5050509@cisra.canon.com.au>
User-Agent: Mutt/1.5.23 (2014-03-12)

--JWOY2/vB4uO4FuME
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb  6 13:05, Luke Kendall wrote:
> On 06/02/15 05:07, Corinna Vinschen wrote:
> >Hi folks,
> >
> >A new version of Setup, release 2.867, has been uploaded to
> >
> >   https://cygwin.com/setup-x86.exe     (32 bit version)
> >   https://cygwin.com/setup-x86_64.exe  (64 bit version)
> >
> >The changes compared to 2.864 are mostly not visible:
> >
> >- There's one fix to the output when mistyping a command line option.
> >
> >- More importantly, Setup now understands SHA512 checksums additionally
> >   to MD5 checksums.  We're going to switch to using SHA512 checksums in
> >   the setup.ini files in a couple of weeks and this requires all of you
> >   to use the newer Setup version.
> >
> >
> >Please send bug reports, as usual, to the public mailing list
> >cygwin AT cygwin DOT com.
> >
> >
> >Have fun,
> >Corinna
> >
>=20
> I was just wondering, will you be dropping the md5.sum files from the
> package directories at the same time?

The md5.sum files are created for all ftp dirs on sourceware.org, not
only for the Cygwin dirs.  Right now we still need the md5.sum files
to support people who haven't upgraded setup yet.  If the files get
removed (not created anymore) at one point is up to the overseers crew.

>   Just this week I
> noticed that cygwin64-gcc-4.8.3-4-src.tar.xz's md5 checksum in its md5.sum
> file was incorrect (but its md5 in setup.ini was of course correct).

"Of course"?  In fact upset (the script creating the setup.ini files)
reads the content of md5.sum and uses the checksums in there if
available to create the setup.ini entry.  It only computes its own
checksum if the md5.sum file is missing the info.  So, afaics, in border
cases in which a file gets replaced, there is a chance that the
setup.ini checksum is incorrect as well.  In theory that's not supposed
to happen because replacing a distro package should always include
bumping the subversion, thus creating a new file and just removing the
old one.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--JWOY2/vB4uO4FuME
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ypbe
-----END PGP SIGNATURE-----

--JWOY2/vB4uO4FuME--