DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 52EFRZ011475346
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 99D0D3858C48
Message-ID: <f254976d-37f0-40ed-b0d8-1bf17cfe02e3@SystematicSW.ab.ca>
Date: Fri, 14 Mar 2025 09:26:12 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: libcurl (and prob. others) need a rebuild after the OpenSSL 3
 upgrade
To: cygwin AT cygwin DOT com
References: <CACCWBSDKy3H-KzmSy+rDLT5FTtXxZNej8koY7c4VyOCLm3UoBw AT mail DOT gmail DOT com>
Content-Language: en-CA
Autocrypt: addr=Brian DOT Inglis AT SystematicSW DOT ab DOT ca; keydata=
 xjMEXopx8xYJKwYBBAHaRw8BAQdAnCK0qv/xwUCCZQoA9BHRYpstERrspfT0NkUWQVuoePbN
 LkJyaWFuIEluZ2xpcyA8QnJpYW4uSW5nbGlzQFN5c3RlbWF0aWNTdy5hYi5jYT7ClgQTFggA
 PhYhBMM5/lbU970GBS2bZB62lxu92I8YBQJeinHzAhsDBQkJZgGABQsJCAcCBhUKCQgLAgQW
 AgMBAh4BAheAAAoJEB62lxu92I8Y0ioBAI8xrggNxziAVmr+Xm6nnyjoujMqWcq3oEhlYGAO
 WacZAQDFtdDx2koSVSoOmfaOyRTbIWSf9/Cjai29060fsmdsDM44BF6KcfMSCisGAQQBl1UB
 BQEBB0Awv8kHI2PaEgViDqzbnoe8B9KMHoBZLS92HdC7ZPh8HQMBCAfCfgQYFggAJhYhBMM5
 /lbU970GBS2bZB62lxu92I8YBQJeinHzAhsMBQkJZgGAAAoJEB62lxu92I8YZwUBAJw/74rF
 IyaSsGI7ewCdCy88Lce/kdwX7zGwid+f8NZ3AQC/ezTFFi5obXnyMxZJN464nPXiggtT9gN5
 RSyTY8X+AQ==
Organization: Systematic Software
In-Reply-To: <CACCWBSDKy3H-KzmSy+rDLT5FTtXxZNej8koY7c4VyOCLm3UoBw@mail.gmail.com>
Precedence: list
From: Brian Inglis via Cygwin <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Brian Inglis <Brian DOT Inglis AT SystematicSW DOT ab DOT ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit

On 2025-03-13 05:57, Antonin Décimo via Cygwin wrote:
> With mingw64-x86_64-openssl 3.0.16-1 and mingw64-x86_64-libcurl
> 8.12.1-1 installed I get these errors:
> 
> cygcheck: track_down: could not find ssleay32.dll
> cygcheck: track_down: could not find libeay32.dll
> 
> These two DLLs were provided by openssl 1.0.2 and have been renamed as
> libcrypto and libssl in openssl 1.1.1.
> cygcheck /usr/x86_64-w64-mingw32/sys-root/mingw/bin/libcurl-4.dll
> shows that the libcurl DLL requires these two DLLs.
> 
> I see that openssl 3.0.16-1 was marked stable on 2025-02-19 20:52, but
> curl 8.12.1-1 was packaged on 2025-02-17 23:42, two days earlier. I
> don't know how Cygwin manages dependencies, but I think this should
> entail a rebuild of all packages depending on openssl, and also mark
> incompatibilities between the packages.

The mingw64 packages were released as test on that date, but must have been 
marked stable some time more recently in March:

> Date: Wed, 19 Feb 2025 23:16:56 +0100	[thread overview]
> The following MinGW64 test packages are made available:
> * mingw64-x86_64-openssl-3.0.16-0.1

Systems with bulk rebuilds may have long periods between package upgrades, as 
any dependent package having any build issue blocks release of any upgrade they 
need.

Cygwin is a rolling release system, with package upgrades released when 
maintainers notice upstream availability and have time, with curl released on an 
eight week (Wednesday) or fewer (if there are serious issues) schedule, while 
OpenSSL is released on a twice yearly (04/10, April/October, but could extend up 
to 34 weeks between) schedule.

Devel package mingw64-x86_64-libcurl depends on other packages 
mingw64-x86_64-libidn2, mingw64-x86_64-libssh2, mingw64-x86_64-nghttp2, 
mingw64-x86_64-openssl, mingw64-x86_64-zlib, mingw64-x86_64-zstd being upgraded 
by *YOU*, and setting *YOUR* build and execution paths so that programs can find 
the required libraries.

If you do not set the paths correctly, you may end up running years old versions 
of the system provided /proc/cygdrive/c/Windows/System32/{lib,ssl}eay32.dll!

Due to dependencies, compatibility requirements, and possible issues with 
upstream sources, it may take time to resolve issues to allow a new Cygwin 
upgrade release.
All Cygwin developers and package maintainers work as volunteers in their 
available spare time, depending on work and personal requirements, priorities, 
and pressures.

[My practice recently has been to apply other maintainers' Cygwin package 
upgrades monthly; on Monday after my weekend Cygwin package builds, upgrades, 
and releases; just before I allow Windows to apply the previous month's patches 
and restart; before pausing Windows updates prior to Patch Tuesday the next day.]

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retrancher  but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple