From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 42896 invoked by alias); 18 Mar 2019 01:57:53 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 42796 invoked by uid 89); 18 Mar 2019 01:57:53 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-2.4 required=5.0 tests=ALL_TRUSTED,BAYES_00,KAM_NUMSUBJECT autolearn=no version=3.3.1 spammy=ANNOUNCEMENT, transparent, H*MI:cygwin, structures X-HELO: localhost.localdomain Received: from localhost (HELO localhost.localdomain) (127.0.0.1) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 18 Mar 2019 01:57:51 +0000 Reply-To: cygwin@cygwin.com Return-Path: Authentication-Results: sourceware.org; auth=none From: Yaakov Selkowitz To: cygwin@cygwin.com Date: Mon, 18 Mar 2019 01:57:00 -0000 Message-Id: Subject: [ANNOUNCEMENT] openssl 1.1.1b-1 Sender: qmail alias X-SW-Source: 2019-03/txt/msg00452.txt.bz2 The following packages have been uploaded to the Cygwin distribution: * openssl-1.1.1b-1 * openssl-perl-1.1.1b-1 * libssl1.1-1.1.1b-1 * libssl-devel-1.1.1b-1 * libssl1.0-1.0.2r-2 * libssl1.0-devel-1.0.2r-2 The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This is a major update to the latest upstream release, which includes the following changes: * 1.1 changes the API to make data structures opaque to applications. By now, most active projects have updated their code for 1.1 compatibility, which is why we waited until now to switch to the 1.1 branch. If you have code that still needs to be ported, the following may be of help: https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes * Most of Fedora's patchset has been applied. * The /usr/ssl directory has been replaced by /etc/pki/tls. In that directory, there are two separate config files, openssl.cnf for 1.1 and openssl10.conf for 1.0. * Due to this change, ca-certificates 2.26 is required. * Support for system crypto policies has been enabled. * The upstream location of engines has changed for 1.1, and 1.0 has moved for consistency. This should be mostly transparent, except for users which have built their own engines, which should now be rebuilt anyway. * The 1.0 library is still provided for binary compatibility with existing packages. * For those (hopefully rare) packages which are not compatible with 1.1 and for which such a patch cannot be found, a -devel package for 1.0 is also available. In order to use it, when pkg-config is used to find openssl, you must add /usr/lib/openssl-1.0/lib/pkgconfig to PKG_CONFIG_PATH, otherwise you must add /usr/lib/openssl-1.0/include to your includepath and /usr/lib/openssl-1.0/lib to your libpath. (The exact method will depend on the package.) However, please note that 1.0 will only be supported with security fixes for the remainder of the calendar year, so now is the time to rebuild your code and packages with, or port them to, 1.1. -- Yaakov -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple