From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from re-prd-fep-047.btinternet.com (mailomta22-re.btinternet.com [213.120.69.115]) by sourceware.org (Postfix) with ESMTPS id 75B683851C31 for ; Sun, 7 Jun 2020 15:06:45 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 75B683851C31 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dronecode.org.uk Authentication-Results: sourceware.org; spf=none smtp.mailfrom=jon.turney@dronecode.org.uk Received: from re-prd-rgout-005.btmx-prd.synchronoss.net ([10.2.54.8]) by re-prd-fep-047.btinternet.com with ESMTP id <20200607150644.JZJZ4599.re-prd-fep-047.btinternet.com@re-prd-rgout-005.btmx-prd.synchronoss.net> for ; Sun, 7 Jun 2020 16:06:44 +0100 Authentication-Results: btinternet.com; auth=pass (PLAIN) smtp.auth=jonturney@btinternet.com X-Originating-IP: [86.141.128.212] X-OWM-Source-IP: 86.141.128.212 (GB) X-OWM-Env-Sender: jonturney@btinternet.com X-VadeSecure-score: verdict=clean score=0/300, class=clean X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgeduhedrudegledgkeeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuueftkffvkffujffvgffngfevqffopdfqfgfvnecuuegrihhlohhuthemuceftddunecunecujfgurhepuffhvfhfkffffgggjggtgfesthejredttdefjeenucfhrhhomheplfhonhcuvfhurhhnvgihuceojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukheqnecuggftrfgrthhtvghrnheptdelvdfhteetgfehgeeukefhtedtudelhefgteffhefhffevvdelgfeigedvuddtnecuffhomhgrihhnpegthihgfihinhdrtghomhenucfkphepkeeirddugedurdduvdekrddvuddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghloheplgduledvrdduieekrddurdduudejngdpihhnvghtpeekiedrudeguddruddvkedrvdduvddpmhgrihhlfhhrohhmpeeojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhequceuqfffjgepkeeukffvoffkoffgpdhrtghpthhtohepoegthihgfihinhdqrghnnhhouhhntggvsegthihgfihinhdrtghomheq X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean Received: from [192.168.1.117] (86.141.128.212) by re-prd-rgout-005.btmx-prd.synchronoss.net (5.8.340) (authenticated as jonturney@btinternet.com) id 5ED9C74D00742B0B for cygwin-announce@cygwin.com; Sun, 7 Jun 2020 16:06:44 +0100 Subject: Re: Cygwin setup signing public key update From: Jon Turney To: cygwin-announce@cygwin.com References: <6312.65287972695$1584116184@news.gmane.org> <73cab308-f9a9-7a9b-bc92-d5d9180c7153@dronecode.org.uk> Message-ID: <2af2ac56-cfe5-ce9a-4840-69927193effd@dronecode.org.uk> Date: Sun, 7 Jun 2020 16:06:43 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.9.0 MIME-Version: 1.0 In-Reply-To: <73cab308-f9a9-7a9b-bc92-d5d9180c7153@dronecode.org.uk> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00, FORGED_SPF_HELO, KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_PASS, SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-Mailman-Approved-At: Sun, 07 Jun 2020 15:07:33 +0000 X-BeenThere: cygwin-announce@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Read-only mailing list announcing new and updated Cygwin packages List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jun 2020 15:06:47 -0000 On 13/03/2020 16:34, Jon Turney wrote: > On 13/03/2020 16:13, Jon Turney wrote: >> This is an announcement of an update to the key used to sign (i) >> Cygwin setup executables, and (ii) the (compressed) setup.ini package >> manifest. > > If you just run setup, and update it when it tells you to update it, no > action is required, and this message chain will be of limited interest > to you. > > This update is following the policy announced at [1]: > > > On 05/08/2008 14:30, Dave Korn wrote: > >> If we, from time to time, need to change this key, we will release > >> a new version of setup.exe and make announcements on the cygwin > >> and cygwin-announce mailing lists, and on the cygwin.com website. > > Also see that post for further discussion of the technicals details of > setup signing. > > The transition period, during which signatures are made using both keys > will probably be approx. 90 days, circumstances permitting. As of today, the signature made is not compatible with setup versions <=2.894, and thus they will no longer work.