X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:to:subject:content-type;
	 q=dns; s=default; b=ijN3sa6GF2yIZI0dzc0hO/n4vaHsHUQ6boe0eRIRoyP
	N0yJsZO4pTZeI2Fy2h0h0rkoDN/ewTzKjR0E6jHOIK9D38MsDUNCsfGp6cdwncVl
	giUk0HR5kY/T1ElTN1ZfjCkqerjuMU6++h3ZlzSMvSsrY2dZ6olCDNhhL362AwwQ
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:to:subject:content-type;
	 s=default; bh=f2z6JrLTPBY04RQ6WEArAqT61j8=; b=QWBIg5C5PNMCoMt1o
	jLYw66KCd4cluiuvLyDAV9gGaDkjOIOF4dcuwWK+tqtNV5sEDdmtJSQdTn5dJS6f
	F3SgPfSSxc2dWwUYYIvYIbRJW6DvYfsOjheRG6fugkL76v0InR63lI3YiQiM9nhs
	ziHZm84OyL0cFKo0/qMzRDFlaw=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.1 spammy=H*MI:1c69fb81, H*r:6045, H*M:1c69fb81, H*MI:google
X-HELO: mail-ot1-f43.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=gmail.com; s=20161025;        h=message-id:date:from:to:subject:user-agent;        bh=cJaByo7xjmAmaV3yOkgYNQN69phJlQSiXwG0PAx6jZk=;        b=jxig0OCLimomT+UiTJ7iWCdbHCjl2euw6MMUuTi2nj0vgtj1vWtUGugM+A6YxmbSI5         mBGYxaJBxjCnu45OYnKeVG4bTnF6nK6Z51Mrw0Ba26RLfPa0MnA12QbQ4eLUZZnt+Y1j         Skvjb+EwGaiMRY05UUVmgvw9Jdvfkyr6G4sm2MGgJf0EHAnD+ENoLsIW498HNuEm47se         VlWTmzbd6sOiGYxSIxSManJt0qrTA0S33lBTb4/OMwmphBGcDPxoGlmYxOEnL0JyGrhg         TT4NWNTuLclmd20KKE1nlI36vaS5+TQafsD542h1uJZvD5qt768NQfAUCItHw4yeIpHk         67lQ==
Message-ID: <5d33c79a.1c69fb81.f0966.b914@mx.google.com>
Date: Sat, 20 Jul 2019 19:02:02 -0700 (PDT)
From: Steven Penny <svnpenn AT gmail DOT com>
To: cygwin AT cygwin DOT com
Subject: cURL dependencies broken
Content-Type: text/plain; charset=utf8; format=flowed
User-Agent: Suede Mail/2.8.0 (github.com/cup/suede)

For some reason cURL 7.65.0-1 requires both of these:

    cygcrypto-1.1.dll
    cygcrypto-1.0.0.dll

and confirmed by "setup.ini":

    requires: cygwin libcurl4 libmetalink3 libopenssl100 libssl1.1 zlib0

this raises several questions:

Why are both required?

Why is cURL requiring an old version of OpenSSL? Isn’t that a security risk?

Why is the "requires" line being used? I thought the "depends2" was superseding
it.

Even if "requires" is still valid, why is "libopenssl100" being required by
anything? "setup.ini" says that it is obsolete, twice over:

    @ libopenssl100
    sdesc: "Obsoleted by libssl1.0"


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple