Skip to content

Commit ef14c35

Browse files
author
Steve Hay
committed
Use SHA256/SHA512 checksums rather than MD5/SHA1 as required by https://www.apache.org/dev/release-distribution
Also, prefer https: links over http: links. git-svn-id: https://svn.apache.org/repos/asf/perl/modperl/trunk@1868060 13f79535-47bb-0310-9956-ffa450edef68
1 parent 2c20c6c commit ef14c35

File tree

1 file changed

+10
-11
lines changed

1 file changed

+10
-11
lines changed

RELEASE

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ Instructions for mod_perl 2.0 Release Manager
1111
need on how to add your key. if you need further help on gpg
1212
(like how to create a key in the first place) you can look here
1313

14-
http://people.apache.org/~geoff/gpghowto.html
14+
https://people.apache.org/~geoff/gpghowto.html
1515

1616
Copy the KEYS file into place:
1717
% scp KEYS people.apache.org:/www/www.apache.org/dist/perl/KEYS
@@ -118,9 +118,9 @@ Instructions for mod_perl 2.0 Release Manager
118118

119119
% pgps -b --armor mod_perl-2.0.12.tar.gz
120120

121-
b. create MD5 and SHA1 checksums of the tarball:
122-
% md5sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.md5
123-
% sha1sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.sha1
121+
b. create SHA256 and SHA512 checksums of the tarball:
122+
% sha256sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.sha256
123+
% sha512sum mod_perl-2.0.12.tar.gz >mod_perl-2.0.12.tar.gz.sha512
124124

125125
5. Release the package and update links
126126

@@ -129,15 +129,15 @@ Instructions for mod_perl 2.0 Release Manager
129129
chair to give you the needed permissions if you do not have them.
130130

131131
b. delete the previous release's files from the same location (they will
132-
already have been archived at http://archive.apache.org/dist/perl/)
132+
already have been archived at https://archive.apache.org/dist/perl/)
133133

134134
c. update the example command-lines in README.html in the same location
135135

136136
d. ask one of the other developers to double check the signature file
137137
and tarball: download both files and verify the signature:
138138

139-
http://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz.asc
140-
http://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz
139+
https://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz.asc
140+
https://www.apache.org/dist/perl/mod_perl-2.0.12.tar.gz
141141

142142
% gpg --verify mod_perl-2.0.12.tar.gz.asc
143143

@@ -161,7 +161,7 @@ Instructions for mod_perl 2.0 Release Manager
161161
on your local machine, you can just directly edit download/index.html
162162
with the changes that were made to modperl-docs/download/index_top.html)
163163

164-
The change to the website will appear at http://perl.apache.org/ sometime
164+
The change to the website will appear at https://perl.apache.org/ sometime
165165
later (but maybe not until the next day).
166166

167167
6. Upload the package to CPAN
@@ -180,9 +180,8 @@ Instructions for mod_perl 2.0 Release Manager
180180

181181
include:
182182
- link at perl.apache.org:
183-
http://apache.org/dist/perl/mod_perl-2.0.12.tar.gz
184-
http://apache.org/dist/perl/mod_perl-2.0.12.tar.gz.asc (pgp sig)
185-
- MD5 sig (as it comes from CPAN upload announce).
183+
https://perl.apache.org/download/index.html
184+
- SHA256 and SHA512 sigs
186185
- the latest Changes
187186

188187
8. Prepare for the next cycle

0 commit comments

Comments
 (0)