You are viewing a plain text version of this content. The canonical link for it is here.
Posted to svn@forrest.apache.org by cr...@apache.org on 2005/06/12 07:33:51 UTC

svn commit: r190222 - /forrest/trunk/etc/RELEASE_PROCESS.txt

Author: crossley
Date: Sat Jun 11 22:33:51 2005
New Revision: 190222

URL: http://svn.apache.org/viewcvs?rev=190222&view=rev
Log:
Some tips about signing and md5

Modified:
    forrest/trunk/etc/RELEASE_PROCESS.txt

Modified: forrest/trunk/etc/RELEASE_PROCESS.txt
URL: http://svn.apache.org/viewcvs/forrest/trunk/etc/RELEASE_PROCESS.txt?rev=190222&r1=190221&r2=190222&view=diff
==============================================================================
--- forrest/trunk/etc/RELEASE_PROCESS.txt (original)
+++ forrest/trunk/etc/RELEASE_PROCESS.txt Sat Jun 11 22:33:51 2005
@@ -106,8 +106,17 @@
    ensure that it unpacks okay, configure, and do the usual tests.
 
  - Understand how to sign releases and generate MD5 and PGP.
-   http://wiki.apache.org/incubator/SigningReleases
-   Create the *.md5 and *.asc files.
+   Not going to try to explain, but here is some info:
+    http://wiki.apache.org/incubator/SigningReleases
+    http://forrest.apache.org/mirrors.cgi#verify
+   Create the *.md5 and *.asc files. Here is one example:
+   gpg --recv-key <myKey>
+   gpg --output crossley-apache-forrest-0.7.tar.gz.asc \
+       --detach-sig --armor apache-forrest-0.7.tar.gz
+   gpg --verify crossley-apache-forrest-0.7.tar.gz.asc \
+       apache-forrest-0.7.tar.gz
+   openssl dgst -md5 -out crossley-apache-forrest-0.7.tar.gz.md5 \
+       apache-forrest-0.7.tar.gz
 
  - Create a maintenance branch in SVN with
     svn copy -m "Create the x.y release branch from r#####" \