From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 78215 invoked by alias); 13 Dec 2016 18:33:19 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 78199 invoked by uid 89); 13 Dec 2016 18:33:18 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: Yes, score=6.6 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPAM_URI,SPF_PASS autolearn=no version=3.3.2 spammy=Hx-spam-relays-external:ESMTPA X-HELO: mail-in-12.arcor-online.net Received: from mail-in-12.arcor-online.net (HELO mail-in-12.arcor-online.net) (151.189.21.52) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 13 Dec 2016 18:33:08 +0000 Received: from mail-in-11-z2.arcor-online.net (mail-in-11-z2.arcor-online.net [151.189.8.28]) by mx.arcor.de (Postfix) with ESMTP id 3tdSxs54RzzZN3k for ; Tue, 13 Dec 2016 19:33:05 +0100 (CET) Received: from mail-in-05.arcor-online.net (mail-in-05.arcor-online.net [151.189.21.45]) by mail-in-11-z2.arcor-online.net (Postfix) with ESMTP id A9BFF3269AA for ; Tue, 13 Dec 2016 19:33:05 +0100 (CET) X-DKIM: Sendmail DKIM Filter v2.8.2 mail-in-05.arcor-online.net 3tdSxs3fcCz2D4D Received: from Gertrud (p4ff1c71e.dip0.t-ipconnect.de [79.241.199.30]) (Authenticated sender: stromeko@arcor.de) by mail-in-05.arcor-online.net (Postfix) with ESMTPA id 3tdSxs3fcCz2D4D for ; Tue, 13 Dec 2016 19:33:05 +0100 (CET) From: Achim Gratz To: cygwin-apps@cygwin.com Subject: Re: [PATCH setup 4/4] Codesign setup.exe (DO NOT APPLY) References: <20161212132929.58904-1-jon.turney@dronecode.org.uk> <20161212132929.58904-5-jon.turney@dronecode.org.uk> <20161212173051.GD3705@calimero.vinschen.de> <87shptass0.fsf@Rainer.invalid> <20161213083038.GE3705@calimero.vinschen.de> Date: Tue, 13 Dec 2016 18:33:00 -0000 In-Reply-To: <20161213083038.GE3705@calimero.vinschen.de> (Corinna Vinschen's message of "Tue, 13 Dec 2016 09:30:38 +0100") Message-ID: <87twa7of1f.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-SW-Source: 2016-12/txt/msg00023.txt.bz2 Corinna Vinschen writes: >> That wouldn't do any good for folks trying to use an old setup version >> or am I missing something? > > They would get two messages, "Sig has expired" and "there's a new version > of setup". Isn't that sufficient? I was under the (maybe mistaken) impression that the executable would stop running if the signature was deemed incorrect. >> In the meantime, we could provide a detached signature with the cygwin >> key, just like we do for setup.ini? > > We already do. You can download setup-x86.exe.sig and > setup-x86_64.exe.sig from https://cygwin.com/ It's not advertised in an easily accessible place (i.e. right besides the download link on cygwin.com main page). The install page shows those, but I'm not sure how many people look it up there. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ DIY Stuff: http://Synth.Stromeko.net/DIY.html