svn commit: r1868060 - /perl/modperl/trunk/RELEASE

[st...@apache.org]

Author: stevehay
Date: Sun Oct  6 13:27:28 2019
New Revision: 1868060

URL: http://svn.apache.org/viewvc?rev=1868060&view=rev
Log:
Use SHA256/SHA512 checksums rather than MD5/SHA1 as required by https://www.apache.org/dev/release-distribution

Also, prefer https: links over http: links.

Modified:
    perl/modperl/trunk/RELEASE

Modified: perl/modperl/trunk/RELEASE
URL: http://svn.apache.org/viewvc/perl/modperl/trunk/RELEASE?rev=1868060&r1=1868059&r2=1868060&view=diff
==============================================================================
--- perl/modperl/trunk/RELEASE (original)
+++ perl/modperl/trunk/RELEASE Sun Oct  6 13:27:28 2019
@@ -11,7 +11,7 @@ Instructions for mod_perl 2.0 Release Ma
    need on how to add your key.  if you need further help on gpg
    (like how to create a key in the first place) you can look here
 
-      http://people.apache.org/~geoff/gpghowto.html
+      https://people.apache.org/~geoff/gpghowto.html
 
    Copy the KEYS file into place:
    % scp KEYS people.apache.org:/www/www.apache.org/dist/perl/KEYS
@@ -118,9 +118,9 @@ Instructions for mod_perl 2.0 Release Ma
 
      % pgps -b --armor mod_perl-2.0.12.tar.gz
 
-  b. create MD5 and SHA1 checksums of the tarball:
-     % md5sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.md5
-     % sha1sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.sha1
+  b. create SHA256 and SHA512 checksums of the tarball:
+     % sha256sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.sha256
+     % sha512sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.sha512
 
 5. Release the package and update links
 
@@ -129,15 +129,15 @@ Instructions for mod_perl 2.0 Release Ma
      chair to give you the needed permissions if you do not have them.
 
   b. delete the previous release's files from the same location (they will
-     already have been archived at http://archive.apache.org/dist/perl/)
+     already have been archived at https://archive.apache.org/dist/perl/)
 
   c. update the example command-lines in README.html in the same location
 
   d. ask one of the other developers to double check the signature file
      and tarball: download both files and verify the signature:
 
-     http://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz.asc
-     http://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz
+     https://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz.asc
+     https://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz
 
      % gpg --verify mod_perl-2.0.12.tar.gz.asc
 
@@ -161,7 +161,7 @@ Instructions for mod_perl 2.0 Release Ma
      on your local machine, you can just directly edit download/index.html
      with the changes that were made to modperl-docs/download/index_top.html)
 
-     The change to the website will appear at http://perl.apache.org/ sometime
+     The change to the website will appear at https://perl.apache.org/ sometime
      later (but maybe not until the next day).
      
 6. Upload the package to CPAN
@@ -180,9 +180,8 @@ Instructions for mod_perl 2.0 Release Ma
 
      include:
      - link at perl.apache.org:
-       http://apache.org/dist/perl/mod_perl-2.0.12.tar.gz
-       http://apache.org/dist/perl/mod_perl-2.0.12.tar.gz.asc (pgp sig)
-     - MD5 sig (as it comes from CPAN upload announce).
+       https://perl.apache.org/download/index.html
+     - SHA256 and SHA512 sigs
      - the latest Changes
 
 8. Prepare for the next cycle