[ATTN] ca-certificates-letsencrypt maintainer

Brian Inglis Brian.Inglis@SystematicSW.ab.ca
Sun Jul 14 17:05:37 GMT 2024


On 2024-07-13 15:03, Brian Inglis wrote:
> On 2024-07-13 14:43, Brian Inglis via Cygwin-apps wrote:
>> On 2024-06-30 05:31, ASSI wrote:
>>>
>>> The following packages have been uploaded to the Cygwin distribution:
>>>
>>>   ca-certificates-2024.2.66_v8.0.302-1
>>>
>>> The ca-certificates-letsencrypt package has been removed, since all
>>> signatures using the cross-signed certificate chain for Let's Encrypt
>>> root servers have long expired.  In other words, the problem this
>>> package was solving no longer exists.
>>
>> Hi folks,
>>
>> Any chance a cert may have been dropped inadvertently?
>>
>> Or some other update I or others may have packaged could have messed up email.
>>
>> I can no longer use cygport announce or git send-email via this mail server, 
>> but Windows Thunderbird still works!
> 
> Have any Let's Encrypt Intermediate certs been dropped?
> 
> While Cygwin uses ISRG Root X1 -> R3 -> Cygwin.com my email provider may use 
> ISRG Root X1 -> R11 -> hover.com - all valid until later this year or much 
> longer - checking if they may use a different email cert chain or CA.

Hi folks,

Re-installed last ca-certificates-letencrypt package and cygport announce and 
git send-email are working again.
Some unexpired letsencrypt certificates should probably have been migrated to 
ca-certificates or left in ca-certificates-letencrypt?

Trying cygport --debug and git send-email --smtp-debug=1 do not show any cert 
validation - any ideas how to see what certs are used in email auth?

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry


More information about the Cygwin-apps mailing list