* [ANNOUNCEMENT] Re: Cygwin setup signing public key update
[not found] ` <73cab308-f9a9-7a9b-bc92-d5d9180c7153@dronecode.org.uk>
@ 2020-06-07 15:06 ` Jon Turney
0 siblings, 0 replies; only message in thread
From: Jon Turney @ 2020-06-07 15:06 UTC (permalink / raw)
To: cygwin
On 13/03/2020 16:34, Jon Turney wrote:
> On 13/03/2020 16:13, Jon Turney wrote:
>> This is an announcement of an update to the key used to sign (i)
>> Cygwin setup executables, and (ii) the (compressed) setup.ini package
>> manifest.
>
> If you just run setup, and update it when it tells you to update it, no
> action is required, and this message chain will be of limited interest
> to you.
>
> This update is following the policy announced at [1]:
>
> > On 05/08/2008 14:30, Dave Korn wrote:
> >> If we, from time to time, need to change this key, we will release
> >> a new version of setup.exe and make announcements on the cygwin
> >> and cygwin-announce mailing lists, and on the cygwin.com website.
>
> Also see that post for further discussion of the technicals details of
> setup signing.
>
> The transition period, during which signatures are made using both keys
> will probably be approx. 90 days, circumstances permitting.
As of today, the signature made is not compatible with setup versions
<=2.894, and thus they will no longer work.
^ permalink raw reply [flat|nested] only message in thread