svn commit: r1053112 - /ant/core/trunk/ReleaseInstructions

[an...@apache.org]

Author: antoine
Date: Mon Dec 27 17:23:44 2010
New Revision: 1053112

URL: http://svn.apache.org/viewvc?rev=1053112&view=rev
Log:
suggest to use commons-openpgp instead of a script to sign the artifacts

Modified:
    ant/core/trunk/ReleaseInstructions

Modified: ant/core/trunk/ReleaseInstructions
URL: http://svn.apache.org/viewvc/ant/core/trunk/ReleaseInstructions?rev=1053112&r1=1053111&r2=1053112&view=diff
==============================================================================
--- ant/core/trunk/ReleaseInstructions (original)
+++ ant/core/trunk/ReleaseInstructions Mon Dec 27 17:23:44 2010
@@ -118,27 +118,17 @@ Note: This document was updated in the c
 
     Revision 437509 Uebertragen.
 
-9.  Sign the distribution files using the following simple script
+9.  Sign the distribution files using the script release/signit.xml 
 
-    @TODO : document using commons-openpgp to sign the artefacts,
-    change the build file to do this
- 
-    #!/bin/sh
-    # signing the various source and binary archives of the entire distribution
-    for i in `/usr/bin/find distribution \( -name "*.bz2" -o -name  "*.zip" -o -name "*.gz" \)`
-    do
-         echo "Signing " $i
-         gpg -a -b --force-v3-sigs $i
-    done
-    # signing the maven artefacts
-    for i in `/usr/bin/find java-repository \( -name "*.pom" -o -name  "*.jar" \)`
-    do
-         echo "Signing " $i
-         gpg -a -b --force-v3-sigs $i
-    done
+    This script requires using commons-openpgp to sign the artefacts,
 
-    The --force-v3-sigs will improve the interoperability with PGP 5.x,
-    see <http://www.gnupg.org/(en)/documentation/faqs.html#q5.5>.
+    This tool can be checked out from 
+    http:/svn.apache.org/repos/asf/commons/sandbox/openpgp/trunk
+    You have to build it using maven
+    
+    You can create a property file .gnupg.properties in your home directory 
+    with your key id
+    and pass your key passphrase on the command line with -Dpassword=****
 
     Before you do that, ensure that the key you use is inside the KEYS
     file in Ant's SVN repository