cURL dependencies broken

[Steven Penny]

For some reason cURL 7.65.0-1 requires both of these:

    cygcrypto-1.1.dll
    cygcrypto-1.0.0.dll

and confirmed by "setup.ini":

    requires: cygwin libcurl4 libmetalink3 libopenssl100 libssl1.1 zlib0

this raises several questions:

Why are both required?

Why is cURL requiring an old version of OpenSSL? Isn’t that a security risk?

Why is the "requires" line being used? I thought the "depends2" was superseding
it.

Even if "requires" is still valid, why is "libopenssl100" being required by
anything? "setup.ini" says that it is obsolete, twice over:

    @ libopenssl100
    sdesc: "Obsoleted by libssl1.0"


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple