From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pf1-x436.google.com (mail-pf1-x436.google.com [IPv6:2607:f8b0:4864:20::436]) by sourceware.org (Postfix) with ESMTPS id 3DE223858D33 for ; Sat, 20 Apr 2024 08:08:00 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 3DE223858D33 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 3DE223858D33 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=2607:f8b0:4864:20::436 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1713600482; cv=none; b=RWQhuY25MVqYscwx2ORW0qddLh83osWbXM3xgZx1+HRQMDp9Nr7Ks5k49XiM6sVuaZWoMGpuXAPQNf4Km+ZrF6fxwi48NPrFxu6WawP618yvmDr45HSw7VBwhBzCrWuNDmnd49LMaxHz4KRGUgSdDJGR32bkQ1gYOEJsGrzEHXs= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1713600482; c=relaxed/simple; bh=VoQ6LDPBEnjvF0T1hMOKiSRR0dzUGc2ufyqI40dY/6g=; h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To; b=uKsvXEVopY4CTXyq1lgIFfGQB7ZxOLNlu3P8a3YZzOLDTYu3V/ruWaCB9mDku7l/bgtbqFAdg7Pfwsw2FL/mKIxiRiz2oCAyElB7ZBSW75JdZ6g5QWne6JpU8AscJJwuBJzU1bbT3F3ErezaF8Dyo7+FH7+0Of8h5ZoRAteOTXQ= ARC-Authentication-Results: i=1; server2.sourceware.org Received: by mail-pf1-x436.google.com with SMTP id d2e1a72fcca58-6eddff25e4eso2371329b3a.3 for ; Sat, 20 Apr 2024 01:08:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1713600479; x=1714205279; darn=cygwin.com; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=VoQ6LDPBEnjvF0T1hMOKiSRR0dzUGc2ufyqI40dY/6g=; b=W9IuU2NuyFEYRkIGpcOXiSAN6sRjXPgCQBc2CqmheM2PGlZRRpllIoZuRw8wkclnCS zYUPfFefxnb14wmvdLRp1v+jDDZNqCIZhJM2/NRwvZ1zPya+Gdfgcs9CHHckKnT9nQk3 YO3vWxcTPDqJaI2qBOV/gxsNfUOUsVV1KK4gkNNY+eB2fp4RMq+e6ytt+35b6k5N7NCV fC5cbn55kB5g92xeyFE34Rfyx0eZQAz5YUnCdldgAPDy4d2cFmvlntHgoTiOMweJpKC+ xFAb5a4OBqdpOGVvsH8WL7tT1fnZQMRL0LDMZzGBZvOHbxTyZ3WGBLR488wj12xTmqQm OBHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1713600479; x=1714205279; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=VoQ6LDPBEnjvF0T1hMOKiSRR0dzUGc2ufyqI40dY/6g=; b=GkwkkeY7mBsgADrOxeMWmMxZWS7l2kU8MmCTTJZo53k7dfXDUInBhzM5GxDdNGTugv Gh0bgjuDrThVUbwBsn4UWMQFYNRpxWachv83IDPzDcRt0Ay8jGqe3gGEX0OPkJf75Thc ZkdZXdWPT0V0lOl4iDVHEviRii5PfoC1rYdrQCozj+Epmz2cYLqS0vA+o03hLPZuxI/v rIsRazoshp6a3VgefeHu9LAWp5yGXgu4u+CBoSUwh9Gci3rmLmrlFpDbeoV3T3WSh9d7 r9CjrUV9XNm925MOOGE/YTrXvQB4Az56S1b5aqydSMn43yEAOdSjfSGQejbXpErWvll9 oFZA== X-Gm-Message-State: AOJu0YyE4ghQg40wodTyQAipxwLjzDRsgzoo/lRgEO2vfYKJxrgvrF3K wtB3ldtaIsYF2YHvLO2PneIEbR98yrUKoCwVOVFViLUIHrBDlHbdpyg/rqC6IcJ3obvXL78KagR eJ5WOOHZmV7YVgsH+7BI2ORC7G7LN/A== X-Google-Smtp-Source: AGHT+IElaFty3jX5JTelry83vk/+KMgxgmBVIdje6iNuVKn9SwFRFGSzRAsqbEcLmsQlwWSsgGpl6dhFN/LFyU0G88Y= X-Received: by 2002:a05:6a20:6f8b:b0:1a7:a72c:6f4 with SMTP id gv11-20020a056a206f8b00b001a7a72c06f4mr5283803pzb.41.1713600478801; Sat, 20 Apr 2024 01:07:58 -0700 (PDT) MIME-Version: 1.0 References: <7375785e-ddde-41e7-8295-a61f39058680@SystematicSW.ab.ca> In-Reply-To: <7375785e-ddde-41e7-8295-a61f39058680@SystematicSW.ab.ca> From: J M Date: Sat, 20 Apr 2024 10:07:47 +0200 Message-ID: Subject: Re: Howto request an upgrade for keychain package To: cygwin@cygwin.com Content-Type: multipart/alternative; boundary="000000000000d37590061682b3e8" X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP,URIBL_SBL_A autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: --000000000000d37590061682b3e8 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable El vie., 19 abr. 2024 21:19, Brian Inglis via Cygwin escribi=C3=B3: > On 2024-04-19 08:53, J M via Cygwin wrote: > > El jue., 18 abr. 2024 20:10, J M > escribi=C3=B3: > >> I'm having some problems (gpg2, and some for ssh management) with > keychain > >> package: https://www.cygwin.com/packages/summary/keychain.html > >> > >> It version is 2.7.1, can be upgraded to, by example the last 2.8.5? > >> > >> It is here: https://github.com/funtoo/keychain/tree/2.8.5 > > > Fow now, I implement a very weird implementation to fix this (very old > > keychain version) in pseudocode: > > > > If I am inside Cygwin and keychain version is 2.7.1 then: > > curl -L -o /usr/bin/keychain > > https://raw.githubusercontent.com/funtoo/keychain/2.8.5/keychain > > > > But it is a weird workaround, you can upgrade this package? If not exis= ts > > any security problem clearly... > > The upstream repo has not been updated since 2018. > You might be better finding a more modern, secure, compatible login > manager like > gnome-keyring or KDE kwalletmanager, or improved process like using known > hosts > and authorized keys files to limit access. > Hi Brian, Yes, I know gnome-keyring or for the kde, but keychain not depends for X11, and installs multiple packages not used. The keychain is the better for text mode and lightweight. Has not been updated since 2018 (I see that are finding maintainers), but work well and support for GPG2. The actual is very old 2013... Improve solution is not an option. The Cygwin has the possibility to select exact versions and can be live two versions. Regards > > --000000000000d37590061682b3e8--