* OpenSSL
@ 2020-04-08 9:30 Tommie King
2020-04-08 10:23 ` OpenSSL Marco Atzeri
0 siblings, 1 reply; 6+ messages in thread
From: Tommie King @ 2020-04-08 9:30 UTC (permalink / raw)
To: cygwin
Hey, sorry if this is the wrong place.
But im struggling to see how I can upgrade openssl >1.1.1d
Compliance checks state that we must have a more up to date version, I know
that it exists (1.1.1f)
But I can only seem to upgrade to 1.1.1 in Cygwin - is there a new upgrade
package for Cygwin/Openssl coming in the near future?
Thanks
Tommie King
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: OpenSSL
2020-04-08 9:30 OpenSSL Tommie King
@ 2020-04-08 10:23 ` Marco Atzeri
2020-04-08 19:43 ` OpenSSL Allen Hewes
0 siblings, 1 reply; 6+ messages in thread
From: Marco Atzeri @ 2020-04-08 10:23 UTC (permalink / raw)
To: cygwin
Am 08.04.2020 um 11:30 schrieb Tommie King:
> Hey, sorry if this is the wrong place.
Hi Tommie,
right place
> But im struggling to see how I can upgrade openssl >1.1.1d
>
> Compliance checks state that we must have a more up to date version, I know
> that it exists (1.1.1f)
that was released just 2 weeks ago.
> But I can only seem to upgrade to 1.1.1 in Cygwin - is there a new upgrade
> package for Cygwin/Openssl coming in the near future?
https://cygwin.com/packages/summary/openssl.html
last available version is 1.1.1d
Next version when the maintainer has time to do so.
> Thanks
> Tommie King
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: OpenSSL
2020-04-08 10:23 ` OpenSSL Marco Atzeri
@ 2020-04-08 19:43 ` Allen Hewes
0 siblings, 0 replies; 6+ messages in thread
From: Allen Hewes @ 2020-04-08 19:43 UTC (permalink / raw)
To: cygwin
> Am 08.04.2020 um 11:30 schrieb Tommie King:
> > Hey, sorry if this is the wrong place.
>
> Hi Tommie,
> right place
>
> > But im struggling to see how I can upgrade openssl >1.1.1d
> >
> > Compliance checks state that we must have a more up to date version, I
> > know that it exists (1.1.1f)
>
> that was released just 2 weeks ago.
[Allen Hewes]
Fedora has updated their bits (Cygwin's version uses some of Fedora's packaging):
https://src.fedoraproject.org/rpms/openssl/c/5004ccfb250b6b8e6e1ac40ee91433090dc19366?branch=master
>
> > But I can only seem to upgrade to 1.1.1 in Cygwin - is there a new
> > upgrade package for Cygwin/Openssl coming in the near future?
>
> https://cygwin.com/packages/summary/openssl.html
> last available version is 1.1.1d
>
> Next version when the maintainer has time to do so.
>
[Allen Hewes]
...or build it yourself (learn cygport and the associated stuffs to get it installed via setup-x86_64.exe, this is non-trivial depending on your skills (and time 😉)...):
$ uname -a
CYGWIN_NT-10.0 FOUREYES 3.1.4(0.340/5/3) 2020-02-19 08:49 x86_64 Cygwin
$ cygcheck -c openssl
Cygwin Package Information
Package Version Status
openssl 1.1.1f-1 OK
This also allows one to change OpenSSL to suit their specific needs (maybe you need/want FIPS?):
$ openssl version
OpenSSL 1.1.1f FIPS 31 Mar 2020
/allen
________________________________
Disclaimer Confidentiality Notice: This e-mail, and any attachments and/or documents linked to this email, are intended for the addressee and may contain information that is privileged, confidential, proprietary, or otherwise protected by law. Any dissemination, distribution, or copying is prohibited. This notice serves as a confidentiality marking for the purpose of any confidentiality or nondisclosure agreement. If you have received this communication in error, please contact the original sender.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: OpenSSL
2021-01-04 15:11 ` OpenSSL Marco Atzeri
@ 2021-01-05 4:37 ` Brian Inglis
0 siblings, 0 replies; 6+ messages in thread
From: Brian Inglis @ 2021-01-05 4:37 UTC (permalink / raw)
To: cygwin; +Cc: tommie.king
On 2021-01-04 08:11, Marco Atzeri via Cygwin wrote:
> On 04.01.2021 13:21, tommie.king@alverservices.com wrote:
>> But im struggling to see how I can upgrade openssl >1.1.1f
>> Compliance checks state that we must have a more up to date version, I know
>> that it exists (1.1.1g, 1.1.1h, 1.1.1i)
>
> https://cygwin.com/packages/summary/openssl.html
>
> the last one available on cygwin is 1.1.1f
>
>> But I can only seem to upgrade to 1.1.1f in Cygwin - is there a new upgrade
>> package for Cygwin/Openssl coming in the near future?
>
> It will depends on the maintainer (Corinna) availability.
> Maybe after the holiday season
What are your compliance timing constraints in terms of releases and time?
I see Cygwin openssl is now 3 versions and 9 months behind the latest.
If you have a compliance timing issue, your organization will have to take
responsibility for meeting your compliance needs, either by having staff or
contracting others to meet those needs, by building packages more up to date
than those available from the distros you use.
All recent, and certainly all important, Cygwin packages use the common cygport
package build and maintenance system, which takes a lot of the burden off the
rote tasks required of maintainers to update packages to newer versions.
Any package user may also do so by installing the cygport package and all its
toolchain dependencies, downloading the package sources, most of which contain a
<package>.cygport file, or cloning the package repo:
https://cygwin.com/git-cygwin-packages/?p=git/cygwin-packages/openssl.git;a=summary
to get the <package>.cygport file, change the package version within to the
latest, and within that directory run:
$ cygport <package>.cygport download all check
to download all source and patch files and build the package.
In some cases, you may need to install the package source to get the patch
sources if they have not been pushed to the package repo (as there is not really
much in the way of common policies or practices about that as yet), or search
and find the online locations of distros patches.
You may also have to tweak the <package>.cygport files to skip patches already
applied to the upstream package so redundant, tweak patches that are still
required but no longer apply without error, drop patches as the package has been
tweaked in some other way so they are no longer required, or make your own
patches to get the package to build under Cygwin.
You will also have to install the development versions of libraries required by
packages, often named lib/...-devel, and those available on Cygwin which support
additional functionality provided by the package, which may have to be
explicitly configured into the build specified in the <package>.cygport files.
Some background and help is available in the pages under Contributing on the
home page, in the archives of the cygwin-apps list, by searching online, and
asking on this list, if nothing else works.
--
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada
This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: OpenSSL
2021-01-04 12:21 ` OpenSSL tommie.king
@ 2021-01-04 15:11 ` Marco Atzeri
2021-01-05 4:37 ` OpenSSL Brian Inglis
0 siblings, 1 reply; 6+ messages in thread
From: Marco Atzeri @ 2021-01-04 15:11 UTC (permalink / raw)
To: tommie.king, cygwin
On 04.01.2021 13:21, tommie.king@alverservices.com wrote:
>
>
> Hey, sorry if this is the wrong place.
Hi Tommie,
this is the right place.
>
> But im struggling to see how I can upgrade openssl >1.1.1f
>
> Compliance checks state that we must have a more up to date version, I know
> that it exists (1.1.1g, 1.1.1h, 1.1.1i)
https://cygwin.com/packages/summary/openssl.html
the last one available on cygwin is 1.1.1f
> But I can only seem to upgrade to 1.1.1f in Cygwin - is there a new upgrade
> package for Cygwin/Openssl coming in the near future?
It will depends on the maintainer (Corinna) availability.
Maybe after the holyday season
> Thanks
> Tommie King
Regards
Marco
^ permalink raw reply [flat|nested] 6+ messages in thread
* OpenSSL
[not found] <014601d60d88$527d6030$f7782090$@alverservices.com>
@ 2021-01-04 12:21 ` tommie.king
2021-01-04 15:11 ` OpenSSL Marco Atzeri
0 siblings, 1 reply; 6+ messages in thread
From: tommie.king @ 2021-01-04 12:21 UTC (permalink / raw)
To: cygwin
Hey, sorry if this is the wrong place.
But im struggling to see how I can upgrade openssl >1.1.1f
Compliance checks state that we must have a more up to date version, I know
that it exists (1.1.1g, 1.1.1h, 1.1.1i)
But I can only seem to upgrade to 1.1.1f in Cygwin - is there a new upgrade
package for Cygwin/Openssl coming in the near future?
Thanks
Tommie King
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2021-01-05 4:38 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-04-08 9:30 OpenSSL Tommie King
2020-04-08 10:23 ` OpenSSL Marco Atzeri
2020-04-08 19:43 ` OpenSSL Allen Hewes
[not found] <014601d60d88$527d6030$f7782090$@alverservices.com>
2021-01-04 12:21 ` OpenSSL tommie.king
2021-01-04 15:11 ` OpenSSL Marco Atzeri
2021-01-05 4:37 ` OpenSSL Brian Inglis
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).