libcurl (and prob. others) need a rebuild after the OpenSSL 3 upgrade

Fri Mar 14 15:26:12 GMT 2025

On 2025年03月13日 05:57, Antonin Décimo via Cygwin wrote:
> With mingw64-x86_64-openssl 3.0.16-1 and mingw64-x86_64-libcurl
> 8.12.1-1 installed I get these errors:
>> cygcheck: track_down: could not find ssleay32.dll
> cygcheck: track_down: could not find libeay32.dll
>> These two DLLs were provided by openssl 1.0.2 and have been renamed as
> libcrypto and libssl in openssl 1.1.1.
> cygcheck /usr/x86_64-w64-mingw32/sys-root/mingw/bin/libcurl-4.dll
> shows that the libcurl DLL requires these two DLLs.
>> I see that openssl 3.0.16-1 was marked stable on 2025年02月19日 20:52, but
> curl 8.12.1-1 was packaged on 2025年02月17日 23:42, two days earlier. I
> don't know how Cygwin manages dependencies, but I think this should
> entail a rebuild of all packages depending on openssl, and also mark
> incompatibilities between the packages.

The mingw64 packages were released as test on that date, but must have been 
marked stable some time more recently in March:
> Date: 2025年2月19日 23:16:56 +0100	[thread overview]
> The following MinGW64 test packages are made available:
> * mingw64-x86_64-openssl-3.0.16-0.1

Systems with bulk rebuilds may have long periods between package upgrades, as 
any dependent package having any build issue blocks release of any upgrade they 
need.
Cygwin is a rolling release system, with package upgrades released when 
maintainers notice upstream availability and have time, with curl released on an 
eight week (Wednesday) or fewer (if there are serious issues) schedule, while 
OpenSSL is released on a twice yearly (04/10, April/October, but could extend up 
to 34 weeks between) schedule.
Devel package mingw64-x86_64-libcurl depends on other packages 
mingw64-x86_64-libidn2, mingw64-x86_64-libssh2, mingw64-x86_64-nghttp2, 
mingw64-x86_64-openssl, mingw64-x86_64-zlib, mingw64-x86_64-zstd being upgraded 
by *YOU*, and setting *YOUR* build and execution paths so that programs can find 
the required libraries.
If you do not set the paths correctly, you may end up running years old versions 
of the system provided /proc/cygdrive/c/Windows/System32/{lib,ssl}eay32.dll!
Due to dependencies, compatibility requirements, and possible issues with 
upstream sources, it may take time to resolve issues to allow a new Cygwin 
upgrade release.
All Cygwin developers and package maintainers work as volunteers in their 
available spare time, depending on work and personal requirements, priorities, 
and pressures.
[My practice recently has been to apply other maintainers' Cygwin package 
upgrades monthly; on Monday after my weekend Cygwin package builds, upgrades, 
and releases; just before I allow Windows to apply the previous month's patches 
and restart; before pausing Windows updates prior to Patch Tuesday the next day.]
-- 
Take care. Thanks, Brian Inglis Calgary, Alberta, Canada
La perfection est atteinte Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add
mais lorsqu'il n'y a plus rien à retrancher but when there is no more to cut
 -- Antoine de Saint-Exupéry