From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by sourceware.org (Postfix) with ESMTPS id 208243849ACF for ; Fri, 19 Apr 2024 19:18:49 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 208243849ACF Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSW.ab.ca Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=SystematicSW.ab.ca ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 208243849ACF Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=216.40.44.11 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1713554334; cv=none; b=Y5a42mg8YAtlCUGgG9qsuQtt9T0XRoeVWvSC1SuwpZe/h9iWES9PWbo5tsGmEv+FaAFpuXLB1hcXhiXL8TG1F2gNvoyKjN8T3OX90xgccxbNmBjVaGQeiaEaMtRoh7A3ZF3DspvM6lRYbHxaRNGUJjzVhGABgFh8cywtZyWXm5s= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1713554334; c=relaxed/simple; bh=NDNZEIx9a4N1dHRBq9pSGOPGUzVcVfJln7Yn5muXvmI=; h=Message-ID:Date:MIME-Version:Subject:To:From; b=xbQB5XpTg4HqMGVvbciodH67RJ2ia7Pvs5tQGEp2Yl2rfGn5hh+LEIVjKoYdVhdy5xZVDjhv5n9QgVtL7Zf+35HJeydQLDYreoh34GEv0HJJCe2uS2Wjr7oGqhQ4Y5DiPHa2ry6skiCJpVbulpMDsOW1XPQmOwg0Hnm4hFMywZw= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from omf08.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay01.hostedemail.com (Postfix) with ESMTP id 362B21C1C48 for ; Fri, 19 Apr 2024 19:18:48 +0000 (UTC) Received: from [HIDDEN] (Authenticated sender: Brian.Inglis@SystematicSW.ab.ca) by omf08.hostedemail.com (Postfix) with ESMTPA id B6BFB2002A for ; Fri, 19 Apr 2024 19:18:46 +0000 (UTC) Message-ID: <7375785e-ddde-41e7-8295-a61f39058680@SystematicSW.ab.ca> Date: Fri, 19 Apr 2024 13:18:45 -0600 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Reply-To: cygwin@cygwin.com Subject: Re: Howto request an upgrade for keychain package Content-Language: en-CA To: cygwin@cygwin.com References: From: Brian Inglis Organization: Systematic Software In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: B6BFB2002A X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,KAM_DMARC_STATUS,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS,TXREP,UNPARSEABLE_RELAY,URIBL_SBL_A autolearn=no autolearn_force=no version=3.4.6 X-Rspamd-Server: rspamout08 X-Stat-Signature: 6t77rq3qyz6g53godixomzz4ap8eaqrj X-Session-Marker: 427269616E2E496E676C69734053797374656D6174696353572E61622E6361 X-Session-ID: U2FsdGVkX18yRJCofeChOk95wJ/K8fqujhRLsN63TjA= X-HE-Tag: 1713554326-653368 X-HE-Meta: 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 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 2024-04-19 08:53, J M via Cygwin wrote: > El jue., 18 abr. 2024 20:10, J M escribió: >> I'm having some problems (gpg2, and some for ssh management) with keychain >> package: https://www.cygwin.com/packages/summary/keychain.html >> >> It version is 2.7.1, can be upgraded to, by example the last 2.8.5? >> >> It is here: https://github.com/funtoo/keychain/tree/2.8.5 > Fow now, I implement a very weird implementation to fix this (very old > keychain version) in pseudocode: > > If I am inside Cygwin and keychain version is 2.7.1 then: > curl -L -o /usr/bin/keychain > https://raw.githubusercontent.com/funtoo/keychain/2.8.5/keychain > > But it is a weird workaround, you can upgrade this package? If not exists > any security problem clearly... The upstream repo has not been updated since 2018. You might be better finding a more modern, secure, compatible login manager like gnome-keyring or KDE kwalletmanager, or improved process like using known hosts and authorized keys files to limit access. -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry