public inbox for
 help / color / mirror / Atom feed
* Updated: ca-certificates-2.50-3
@ 2021-10-05 18:15 Achim Gratz
  0 siblings, 0 replies; only message in thread
From: Achim Gratz @ 2021-10-05 18:15 UTC (permalink / raw)
  To: cygwin-announce

The following packages have been uploaded to the Cygwin distribution:

* ca-certificates-2.50-3
* ca-certificates-letsencrypt-2.50-3

Mozilla's CA root certificates for use with OpenSSL, NSS, GnuTLS, and
other software that handles certificate verification.

This update adds the ca-certificates-letsencrypt package, which when
installed will make the ISRG R3 intermediate CA a trust anchor.  This
will allow to successfully verify certificates using the Letsencrypt
legacy cert chain in certain applications.  Install this package when
you currently have trouble accessing sites (due to validation
complaining about an expired certificate) that had no problems until
about September 30 or October 1 2021 depending on your timezone.

It may be necessary to also remove trust for the already expired DST X3
root CA (which is provided in /usr/share/pki/letsencrypt together with
the R3 intermediate and ISRG X1 and X2 root CA certificates).  Please
report to the main Cygwin mailing list if you know of an example that
needs this blocklisting (with details for reproducing the validation or
application error).


If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there. It will be in the format:

If you need more information on unsubscribing, start reading here:

Please read *all* of the information on unsubscribing that is available
starting at this URL.

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2021-10-05 18:15 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-10-05 18:15 Updated: ca-certificates-2.50-3 Achim Gratz

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).