From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from localhost.localdomain (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 92275385AC25 for ; Wed, 6 Oct 2021 17:34:44 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 0ACA43858408 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=nexgo.de Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=nexgo.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nexgo.de; s=vfde-smtpout-mb-15sep; t=1633541459; bh=U1szSjufPQGA/rsBvgU+Tq43J9Xc5vcT3cvuhSHt+v0=; h=From:To:Subject:Date; b=YNYFDiGwTvX/ZGGVNDHiDbPg3UptyY0U99RT/cGC4+znKxMB1gZksCjUTOBOiGHKR cTD/4vTjRf8ta42Sk9uKg3t/ReIcAGqcMHS3LQOli3T9gxQ0Tw4asSS7RBWjIaFMHu pJ4bgrAd1lmX9VwxuQI3qaH1WIXpdg/6ijPJAGH8= From: Achim Gratz To: cygwin@cygwin.com Subject: [ANNOUNCEMENT] Updated: ca-certificates-2.50-4 Date: Wed, 06 Oct 2021 19:30:52 +0200 Message-Id: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate: clean X-purgate-size: 1690 X-purgate-ID: 155817::1633541458-0000065C-2191F10A/0/0 X-Spam-Status: No, score=-3030.1 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, KAM_NUMSUBJECT, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin-announce@cygwin.com X-Mailman-Version: 2.1.29 Errors-To: cygwin-announce-bounces+cygwin-announce-resender=cygwin.com@cygwin.com Reply-To: cygwin@cygwin.com X-Mailer: Perl5 Mail::Internet v2.20 Sender: Kernel Overflow User X-BeenThere: cygwin@cygwin.com Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Oct 2021 17:34:44 -0000 The following packages have been uploaded to the Cygwin distribution: * ca-certificates-2.50-4 * ca-certificates-letsencrypt-2.50-4 Mozilla's CA root certificates for use with OpenSSL, NSS, GnuTLS, and other software that handles certificate verification. This update adds the ca-certificates-letsencrypt package, which when installed will make the ISRG R3 intermediate CA a trust anchor and removes trust for the already expired DST X3 root CA (this should strictly not be necessary, but works around bugs present in some libraries in how alternate chains are constructed and verified). This will allow to successfully verify certificates using the Letsencrypt legacy cert chain in certain applications. Install this package when you currently have trouble accessing sites (due to validation complaining about an expired certificate) that had no problems until about September 30 or October 1 2021 depending on your timezone. Please report to the main Cygwin mailing list if you know of an example that still doesn't work for you (with details for reproducing the validation or application error). -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL.