From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11on2072c.outbound.protection.outlook.com [IPv6:2a01:111:f400:7eaa::72c]) by sourceware.org (Postfix) with ESMTPS id C8DF33858D3C for ; Wed, 1 Jun 2022 12:32:28 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org C8DF33858D3C Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=cornell.edu Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=cornell.edu ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jif7lacxXKcATYvJ8fkHISyzwc65mNJAhTvvAC34ljjo8/SQOyCYE8iiFqy+T3Ot5NwilyqBuvx9LEOdZwtD/lyqLsS8XI+jWJPUAN/Y8jzJ8VBgOle5xR4n3LcIsGv8sWowLPkPtudE88S5KgAV5b2nfSlkXS9pXVBZdKcdZkEWKBwZbotsDpF3nzl+/k/dudKdOmFzj0a/YhNPGh1MIDunJZfSZZr1wkk5S7IHdxmMEmfSn+sNRCCXK4GK47+/SVGoVIaOoFcKPdIjzjE3p/mLiuMLFmWItXb1Eq52vTCJyFG2TmMO+Qymh5Rf2krM9W6fz0oq+2AzGLNyMRW4Zw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uYqhbtkYH3cw2DcyJ9oCvQaFczxbLZmEEYjLCulgme0=; b=C1gaju0Pvnv9LaVKgtZMX2ferYSfCh0UAwByaVvsZd6IlykIbgJnRRDEZNzRmfCLqinaSe5m8io3VwRZ+IAC0Tn79n3Y9gO30cfH8fF94NcQUXINoERb58Dy1xqNUQ8cTs27JMqrgS0Ytq3w/labGOi4Sx6yrVCZHkBRAEE6QtWKw85l1MnURcvP6DZihZL4MsK/T+g3Sp0nAomAZ0TBXQY8IeS8E3uLy1V+vghGqFkA/tMlEfOkhteiyAb7jO/owaGi/vDYsb3yXzD5fJk8/gPmOq9CqI4pLNQ91TVMigl7f1JUuHqubPUU6c5wrsPEHm2X5wGmSt+ep5rHIlMBQw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cornell.edu; dmarc=pass action=none header.from=cornell.edu; dkim=pass header.d=cornell.edu; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cornell.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uYqhbtkYH3cw2DcyJ9oCvQaFczxbLZmEEYjLCulgme0=; b=GCxsdLpjHwmY/cRvSrKFo6A+WDWDU3I/6f/8v9Bg4LcA84nL7u/Nd/GdLz8OsZFxGKC/fIPF+6zGNQmqNtbRfMEqiD5KfBm113Pmqtw/+I0tZnxrOKYB5OIU2h2ysL3dsOFFM2/0NA4v5p8P9f264RHnw5rIy/uPuYar2yAB8Rk= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cornell.edu; Received: from BN7PR04MB4388.namprd04.prod.outlook.com (2603:10b6:406:f8::19) by PH0PR04MB7544.namprd04.prod.outlook.com (2603:10b6:510:59::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5314.12; Wed, 1 Jun 2022 12:32:26 +0000 Received: from BN7PR04MB4388.namprd04.prod.outlook.com ([fe80::e48c:b440:3098:a050]) by BN7PR04MB4388.namprd04.prod.outlook.com ([fe80::e48c:b440:3098:a050%6]) with mapi id 15.20.5293.019; Wed, 1 Jun 2022 12:32:26 +0000 Message-ID: <57472ae7-7f31-354e-a403-f1c1b4953d83@cornell.edu> Date: Wed, 1 Jun 2022 08:32:23 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.9.1 Subject: Re: Unable to update PKI - p11-kit does not support 'extract' command Content-Language: en-US To: cygwin@cygwin.com References: <187912860.20220601115412@yandex.ru> From: Ken Brown In-Reply-To: <187912860.20220601115412@yandex.ru> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-ClientProxiedBy: BL1PR13CA0065.namprd13.prod.outlook.com (2603:10b6:208:2b8::10) To BN7PR04MB4388.namprd04.prod.outlook.com (2603:10b6:406:f8::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: fe9a7782-37c2-41a5-669c-08da43cac8ee X-MS-TrafficTypeDiagnostic: PH0PR04MB7544:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN7PR04MB4388.namprd04.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(75432002)(83380400001)(316002)(38100700002)(186003)(2906002)(15650500001)(4744005)(31686004)(2616005)(508600001)(8936002)(66946007)(66556008)(66476007)(5660300002)(53546011)(36756003)(786003)(31696002)(8676002)(6486002)(6916009)(6512007)(86362001)(6666004)(6506007)(43740500002)(45980500001); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?bVMzeUd3cGI2MVRLQXZUdFMyNStEcDVNdVFRT1FjUHdpc3FnOVV3ZVFqRGZC?= =?utf-8?B?dWQ2WmRrUktvSWYxUkJjb3N2SEhCelQ1S0VwNkZ4Tks1bzMzbDVWOUtpbmo0?= =?utf-8?B?bytTYWhLa1hrbk1CTXJZbllUQVdZZjVXcU9HcXd3clRWeDdOSkZxdC9HNHYw?= =?utf-8?B?dGZhdkljb29lSCtaWlVkOWZvdVhBbU9pVkNzSFNzWFBEUjU2dGZieHA5UjIy?= =?utf-8?B?QkNDQ0dHTXE1K0ZQanV1alRCUzVvdnpHVTJYT3RPUFZvSEZrS1hiaVMwYlJL?= =?utf-8?B?Ym01Ly9ZR3FtUEhRUUp4TUJyaythcDhyVXVOQW9kaG1IVXIxbkxDR25PZVFr?= =?utf-8?B?a0FUUkRPQ2l2YzFWOU1Xd3RWcnFrNEZiRHB1bXBZN1dGME00c1lZbDZZSnhp?= =?utf-8?B?YnZxZUVTQWNsMU55RTlRSjlmcE1aUWg3aEdiSkdML2taekdicVFnZXkyUGF2?= =?utf-8?B?VnhsZC92OHprdWhVbzB0OGFoNzNNNUZ3UExZQVRTOXFqOHRPVkNSN2tQMzB0?= =?utf-8?B?WWdvZWthZHVOck9YU0lRMnkvd2JpRlJyUXVNUEhuRWxxUzROcG9RMDZhclFC?= =?utf-8?B?dmxtZzc1Qm02SGpxam0vTWpUK3JVNEh0TkUxdVJqcG84THRMaEc0MnZaNHln?= =?utf-8?B?dmVtUEg1TnBqUHVQdHpkOGt6UnB1bDEwMVRQYy9UYWRkZVozTGJlTzlPQkV4?= =?utf-8?B?a2U3UCtEZGJKVkUwTXA3aElVVW1RVndwTnpFQjZyYVp6czA2SUMwQTZqT1NM?= =?utf-8?B?SHpIVk8rYjBiVjhHaXFGNHZ6UXhrUGRmQjNKcy9PQnpBR25OS1k5ZTVXcUxX?= =?utf-8?B?QmxoTXdGUUxXUnNvUzZTRm1PSDEraDFqZ0hlRFVkVU45dk0wZDlNZVV5eUlY?= =?utf-8?B?Q3djT29vRlIraGw1L0xKaVFZNVNUb0pBb3h3L21VMWNZWTc0VHBIbXlBRWJu?= =?utf-8?B?ckh1QVJlTWxRRU55QU5aNFp6dmI4dHp3d25MR25xZ3NYN1V1eDE4N0tYdCtK?= =?utf-8?B?ci9hYWcyOGxZYldxZ2x2YnBsTVdLenAySU1td1c4cVk2UWNhdVU3NlRoaElh?= =?utf-8?B?RlZrZFN0QThIalNNRFN6OGNmL2V5S3IrOWZyRXk1OVVKbDhuRWoxdStJU0JH?= =?utf-8?B?QlhTNFlTUUgrMmRmeTZ0M0lxR3VNMnNtMTMzeC84ZkZhd1lSTUxZL2JjS3hy?= =?utf-8?B?WmpyTm1qR2tKdVArNmxadTM5QmVkaDE5T1grYWlZekdxVnQ1bjdGclFadHVH?= =?utf-8?B?eEt1ZWJjZXR5RmRIN0M1Yk1OanRHbk0yeFlmcFY1alllVGZ2VUVBU2U2eXZT?= =?utf-8?B?amtMdVd6UUZDSHdMYnBwMlJIOVI3dEtpUURHNmFsNWZ0ZnVTRDdWVnlPK3lt?= =?utf-8?B?RExTMmp5Qkc5ZVZvM1NOVENSSFJ3V2ZwMWZzZ1RORG9adFk2NlpGRTR6Nm5w?= =?utf-8?B?MzltbDhmTHlrbkNsbGMwQmt5K1NXbHpxNXA3WEQvZWRRK1VKS3ZDTm14d0ZY?= =?utf-8?B?R3RVSlpzcHpUTzhvek14N3VsL3BKVytHaDZEaUdaN1NmOGdRN3J6ZkVUY2la?= =?utf-8?B?MGlnUnBVcTIvM1FDY2xLNXNsaml5QTQ0R3FjRk5WUUNHRVZrb1NrYWs5MjJJ?= =?utf-8?B?TGF6NDYzSUFmOG00TGJYNloxY1p6OWF4VzZLWXkrT3NhTU0za3lIMUpoTm4v?= =?utf-8?B?bTJ4cGhwUjdVSDk4aHNzaml1RVpoNnRhWWVzTUJKN1JhLzRQTXpWaGdaN1Vy?= =?utf-8?B?Y2szVXNqQURPdkZ0dVdrQzlZaWsyanRadVo5WkdjK05HZG1XYlNISEc5NEdu?= =?utf-8?B?a2hudnplTmVseVFqQUdQcVdOcnBXd1BnRnVuLzRXUnhsYzR3eE1pNGEveGpo?= =?utf-8?B?USs5NzQzVzBKUnFCU2M2L1pXcVR4S0lZL0EreWIzV013UmovOHU5TnpCZThY?= =?utf-8?B?Z3c2VWVzNVduTkZBRUd5OTU5KzBac0Q2bTEvL3MyYUw3UE94NEZjN01WOExW?= =?utf-8?B?MDJkY09mRUlqY3ZEdUhIUStsYmk5ZDBvUCtkK1VqYXVIalVwcEYvWmxnRFc1?= =?utf-8?B?Y3p3KzUzZ1k4S0JVOFpzRUNBeDZ4dTBWNU9qTVhPalVHYWxobkk5Snc2aFFw?= =?utf-8?B?S0lHa1BibUdTQjFqQ3BZZnROMXVOa2dXU2l5MmdWV2VOK1BzTjdwZGVaSlBD?= =?utf-8?B?aUdRYW5UU1VCUWlaKytEQWtGUitqZW5PcnBWMEJPMW9HdUI4c2VwMmZHNjUz?= =?utf-8?B?a1d2U0ltMFp5Q0JYRnp5bEZIM1orbHN3Rm5zUDMyV2o2Y1JUUFZId2ZKcVdn?= =?utf-8?B?alVtNkI4NmtlSVpoZHJ1YVhJNWxIbHhaRVlOeWpCdXVXNWFza2NlQ3hRRllK?= =?utf-8?Q?WXPNMnXN28kKFSbUuGT+u7WwysVWRo+/VD+KsM6KShyQC?= X-MS-Exchange-AntiSpam-MessageData-1: yiA7iYkNMZTt0w== X-OriginatorOrg: cornell.edu X-MS-Exchange-CrossTenant-Network-Message-Id: fe9a7782-37c2-41a5-669c-08da43cac8ee X-MS-Exchange-CrossTenant-AuthSource: BN7PR04MB4388.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jun 2022 12:32:26.1274 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 5d7e4366-1b9b-45cf-8e79-b14b27df46e1 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: rEY/AFs1EMMC6i20xd+7uxFzyYcaQFm8Q+wtzDAm2TZuREuNLFWGPEYEoeaZkjGek8OEsR4G07FBkr2CcTzEZg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR04MB7544 X-Spam-Status: No, score=-3.9 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, JMQ_SPF_NEUTRAL, NICE_REPLY_A, SPF_HELO_PASS, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jun 2022 12:32:31 -0000 On 6/1/2022 4:54 AM, Andrey Repin wrote: > Greetings, All! > > My root CA key expired recently and I'm battling to update my infrastructure. > The most unexpected issue so far is a change in Cygwin's p11-kit, that made > update-ca-trust script unusable. > > Running `p11-kit extract …` immediately fails with code 2 and its manual does > not mention `extract` command anywhere. $ man p11-kit NAME p11-kit - Tool for operating on configured PKCS#11 modules SYNOPSIS p11-kit list-modules p11-kit extract ... [...] EXTRACT Extract certificates from configured PKCS#11 modules. This operation has been moved to a separate command trust extract. See trust(1) for more information Ken