public inbox for cygwin-announce@cygwin.com
 help / color / mirror / Atom feed
From: Achim Gratz <Stromeko@nexgo.de>
To: cygwin-announce@cygwin.com
Subject: Updated: ca-certificates-2.50-3
Date: Tue, 05 Oct 2021 20:15:15 +0200	[thread overview]
Message-ID: <875yubbaoc.fsf@Rainer.invalid> (raw)


The following packages have been uploaded to the Cygwin distribution:

* ca-certificates-2.50-3
* ca-certificates-letsencrypt-2.50-3

Mozilla's CA root certificates for use with OpenSSL, NSS, GnuTLS, and
other software that handles certificate verification.

This update adds the ca-certificates-letsencrypt package, which when
installed will make the ISRG R3 intermediate CA a trust anchor.  This
will allow to successfully verify certificates using the Letsencrypt
legacy cert chain in certain applications.  Install this package when
you currently have trouble accessing sites (due to validation
complaining about an expired certificate) that had no problems until
about September 30 or October 1 2021 depending on your timezone.

It may be necessary to also remove trust for the already expired DST X3
root CA (which is provided in /usr/share/pki/letsencrypt together with
the R3 intermediate and ISRG X1 and X2 root CA certificates).  Please
report to the main Cygwin mailing list if you know of an example that
needs this blocklisting (with details for reproducing the validation or
application error).


-- 
              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there. It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

                 reply	other threads:[~2021-10-05 18:15 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=875yubbaoc.fsf@Rainer.invalid \
    --to=stromeko@nexgo.de \
    --cc=cygwin-announce@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).