[ANNOUNCEMENT] Re: Cygwin setup signing public key update

[ANNOUNCEMENT] Re: Cygwin setup signing public key update

[Jon Turney]

On 13/03/2020 16:34, Jon Turney wrote:
> On 13/03/2020 16:13, Jon Turney wrote:
>> This is an announcement of an update to the key used to sign (i)
>> Cygwin setup executables, and (ii) the (compressed) setup.ini package
>> manifest.
> 
> If you just run setup, and update it when it tells you to update it, no 
> action is required, and this message chain will be of limited interest 
> to you.
> 
> This update is following the policy announced at [1]:
> 
>  > On 05/08/2008 14:30, Dave Korn wrote:
>  >> If we, from time to time, need to change this key, we will release
>  >> a new version of setup.exe and make announcements on the cygwin
>  >> and cygwin-announce mailing lists, and on the cygwin.com website.
> 
> Also see that post for further discussion of the technicals details of 
> setup signing.
> 
> The transition period, during which signatures are made using both keys 
> will probably be approx. 90 days, circumstances permitting.

As of today, the signature made is not compatible with setup versions 
<=2.894, and thus they will no longer work.