X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 75B683851C31
Authentication-Results: sourceware.org; dmarc=none (p=none dis=none)
 header.from=dronecode.org.uk
Authentication-Results: sourceware.org;
 spf=none smtp.mailfrom=jon DOT turney AT dronecode DOT org DOT uk
Authentication-Results: btinternet.com;
 auth=pass (PLAIN) smtp.auth=jonturney AT btinternet DOT com
X-Originating-IP: [86.141.128.212]
X-OWM-Source-IP: 86.141.128.212 (GB)
X-OWM-Env-Sender: jonturney AT btinternet DOT com
X-VadeSecure-score: verdict=clean score=0/300, class=clean
X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgeduhedrudegledgkeeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuueftkffvkffujffvgffngfevqffopdfqfgfvnecuuegrihhlohhuthemuceftddunecunecujfgurhepuffhvfhfkffffgggjggtgfesthejredttdefjeenucfhrhhomheplfhonhcuvfhurhhnvgihuceojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukheqnecuggftrfgrthhtvghrnheptdelvdfhteetgfehgeeukefhtedtudelhefgteffhefhffevvdelgfeigedvuddtnecuffhomhgrihhnpegthihgfihinhdrtghomhenucfkphepkeeirddugedurdduvdekrddvuddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghloheplgduledvrdduieekrddurdduudejngdpihhnvghtpeekiedrudeguddruddvkedrvdduvddpmhgrihhlfhhrohhmpeeojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhequceuqfffjgepkeeukffvoffkoffgpdhrtghpthhtohepoegthihgfihinhdqrghnnhhouhhntggvsegthihgfihinhdrtghomheq
X-RazorGate-Vade-Verdict: clean 0
X-RazorGate-Vade-Classification: clean
Subject: [ANNOUNCEMENT] Re: Cygwin setup signing public key update
From: Jon Turney <jon DOT turney AT dronecode DOT org DOT uk>
To: cygwin AT cygwin DOT com
References: <6312.65287972695$1584116184 AT news DOT gmane DOT org>
 <73cab308-f9a9-7a9b-bc92-d5d9180c7153 AT dronecode DOT org DOT uk>
Message-Id: <announce.2af2ac56-cfe5-ce9a-4840-69927193effd@dronecode.org.uk>
Date: Sun, 7 Jun 2020 16:06:43 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101
 Thunderbird/68.9.0
MIME-Version: 1.0
In-Reply-To: <73cab308-f9a9-7a9b-bc92-d5d9180c7153@dronecode.org.uk>
Content-Language: en-GB
X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00, FORGED_SPF_HELO,
 KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, RCVD_IN_DNSWL_LOW,
 RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_PASS, SPF_NONE,
 TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-Mailman-Approved-At: Sun, 07 Jun 2020 15:07:33 +0000
X-BeenThere: cygwin-announce AT cygwin DOT com
X-Mailman-Version: 2.1.29
X-Mailer: Perl5 Mail::Internet v2.20
X-BeenThere: cygwin AT cygwin DOT com
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <http://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <http://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>

On 13/03/2020 16:34, Jon Turney wrote:
> On 13/03/2020 16:13, Jon Turney wrote:
>> This is an announcement of an update to the key used to sign (i)
>> Cygwin setup executables, and (ii) the (compressed) setup.ini package
>> manifest.
> 
> If you just run setup, and update it when it tells you to update it, no 
> action is required, and this message chain will be of limited interest 
> to you.
> 
> This update is following the policy announced at [1]:
> 
>  > On 05/08/2008 14:30, Dave Korn wrote:
>  >> If we, from time to time, need to change this key, we will release
>  >> a new version of setup.exe and make announcements on the cygwin
>  >> and cygwin-announce mailing lists, and on the cygwin.com website.
> 
> Also see that post for further discussion of the technicals details of 
> setup signing.
> 
> The transition period, during which signatures are made using both keys 
> will probably be approx. 90 days, circumstances permitting.

As of today, the signature made is not compatible with setup versions 
<=2.894, and thus they will no longer work.
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple