On 13/03/2020 16:34, Jon Turney wrote:
On 13/03/2020 16:13, Jon Turney wrote:
This is an announcement of an update to the key used to sign (i)
Cygwin setup executables, and (ii) the (compressed) setup.ini package
manifest.
If you just run setup, and update it when it tells you to update it, no
action is required, and this message chain will be of limited interest
to you.
This update is following the policy announced at [1]:
> On 05/08/2008 14:30, Dave Korn wrote:
>> If we, from time to time, need to change this key, we will release
>> a new version of setup.exe and make announcements on the cygwin
>> and cygwin-announce mailing lists, and on the cygwin.com website.
Also see that post for further discussion of the technicals details of
setup signing.
The transition period, during which signatures are made using both keys
will probably be approx. 90 days, circumstances permitting.
As of today, the signature made is not compatible with setup versions
<=2.894, and thus they will no longer work.
