db-derby-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From rhille...@apache.org
Subject svn commit: r1033590 - in /db/derby/code/trunk: RELEASE-NOTES.html java/build/org/apache/derbyBuild/ReleaseNotesGenerator.java releaseSummary.xml
Date Wed, 10 Nov 2010 16:57:20 GMT
Author: rhillegas
Date: Wed Nov 10 16:57:20 2010
New Revision: 1033590

URL: http://svn.apache.org/viewvc?rev=1033590&view=rev
Log:
DERBY-4864: Add release verification instructions to the end of the release notes.

Modified:
    db/derby/code/trunk/RELEASE-NOTES.html
    db/derby/code/trunk/java/build/org/apache/derbyBuild/ReleaseNotesGenerator.java
    db/derby/code/trunk/releaseSummary.xml

Modified: db/derby/code/trunk/RELEASE-NOTES.html
URL: http://svn.apache.org/viewvc/db/derby/code/trunk/RELEASE-NOTES.html?rev=1033590&r1=1033589&r2=1033590&view=diff
==============================================================================
--- db/derby/code/trunk/RELEASE-NOTES.html (original)
+++ db/derby/code/trunk/RELEASE-NOTES.html Wed Nov 10 16:57:20 2010
@@ -22,6 +22,9 @@
 <li>
 <a href="#Build Environment">Build Environment</a>
 </li>
+<li>
+<a href="#Verifying Releases">Verifying Releases</a>
+</li>
 </ul>
 <h2>
 <a name="Overview"></a>Overview</h2>
@@ -100,6 +103,9 @@ This is a feature release. The following
 <td><b>Issue Id</b></td><td><b>Description</b></td>
 </tr>
 <tr>
+<td><a href="https://issues.apache.org/jira/browse/DERBY-4895">DERBY-4895</a></td><td>Thread
local TableDescriptor#referencedColumnMap is not removed from app threads when Derby is shut
down</td>
+</tr>
+<tr>
 <td><a href="https://issues.apache.org/jira/browse/DERBY-4893">DERBY-4893</a></td><td>Allow
Java 5 language constructs in build code</td>
 </tr>
 <tr>
@@ -109,12 +115,21 @@ This is a feature release. The following
 <td><a href="https://issues.apache.org/jira/browse/DERBY-4891">DERBY-4891</a></td><td>Enable
testing of boolean type in ParameterMappingTest</td>
 </tr>
 <tr>
+<td><a href="https://issues.apache.org/jira/browse/DERBY-4890">DERBY-4890</a></td><td>Different
string to boolean conversion on embedded and client</td>
+</tr>
+<tr>
+<td><a href="https://issues.apache.org/jira/browse/DERBY-4889">DERBY-4889</a></td><td>Different
byte to boolean conversion on embedded and client</td>
+</tr>
+<tr>
 <td><a href="https://issues.apache.org/jira/browse/DERBY-4888">DERBY-4888</a></td><td>ClassCastException
when calling boolean meta-data functions with 10.7 client against 10.6 server</td>
 </tr>
 <tr>
 <td><a href="https://issues.apache.org/jira/browse/DERBY-4885">DERBY-4885</a></td><td>Reduce
lock timeout in SavepointJdbc30Test</td>
 </tr>
 <tr>
+<td><a href="https://issues.apache.org/jira/browse/DERBY-4884">DERBY-4884</a></td><td>DatabasePropertyTestSetup
cannot change static properties in encrypted databases</td>
+</tr>
+<tr>
 <td><a href="https://issues.apache.org/jira/browse/DERBY-4881">DERBY-4881</a></td><td>Deadlock
accessing SYS.SYSSTATISTICS</td>
 </tr>
 <tr>
@@ -939,5 +954,57 @@ the bulk fetch optimization.
 <b>JSR 169</b> - J2ME support was built using libraries from phoneME Advanced
Milestone Release 2.</li>
 </ul>
 </blockquote>
+<h2>
+<a name="Verifying Releases"></a>Verifying Releases</h2>
+<blockquote>
+
+
+<p>It is essential that you verify the integrity of the downloaded
+files using the PGP and MD5 signatures.  MD5 verification ensures the
+file was not corrupted during the download process.  PGP verification
+ensures that the file came from a certain person.</p>
+
+
+<p>The PGP signatures can be verified using
+<a href="http://www.pgpi.org/">PGP</a> or
+<a href="http://www.gnupg.org/">GPG</a>.
+First download the Apache Derby
+<a href="http://svn.apache.org/repos/asf/db/derby/code/trunk/KEYS">KEYS</a>
+as well as the <code>asc</code> signature file for the particular
+distribution. It is important that you get these files from the ultimate
+trusted source - the main ASF distribution site, rather than from a mirror.
+Then verify the signatures using ...</p>
+
+
+<pre>
+% pgpk -a KEYS
+% pgpv db-derby-X.Y.tar.gz.asc
+
+<em>or</em>
+
+% pgp -ka KEYS
+% pgp db-derby-X.Y.tar.gz.asc
+
+<em>or</em>
+
+% gpg --import KEYS
+% gpg --verify db-derby-X.Y.tar.gz.asc
+
+</pre>
+
+
+<p>To verify the MD5 signature on the files, you need to use a program
+called <code>md5</code> or <code>md5sum</code>, which is
+included in many unix distributions.  It is also available as part of
+<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>,
<a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
+
+
+<p>We strongly recommend that you verify your downloads with both PGP and MD5.</p>
+
+
+
+</blockquote>
 </body>
 </html>

Modified: db/derby/code/trunk/java/build/org/apache/derbyBuild/ReleaseNotesGenerator.java
URL: http://svn.apache.org/viewvc/db/derby/code/trunk/java/build/org/apache/derbyBuild/ReleaseNotesGenerator.java?rev=1033590&r1=1033589&r2=1033590&view=diff
==============================================================================
--- db/derby/code/trunk/java/build/org/apache/derbyBuild/ReleaseNotesGenerator.java (original)
+++ db/derby/code/trunk/java/build/org/apache/derbyBuild/ReleaseNotesGenerator.java Wed Nov
10 16:57:20 2010
@@ -114,8 +114,8 @@ public class ReleaseNotesGenerator exten
     private static  final   String  NEW_FEATURES_SECTION = "New Features";
     private static  final   String  BUG_FIXES_SECTION = "Bug Fixes";
     private static  final   String  ISSUES_SECTION = "Issues";
-    private static  final   String  BUILD_ENVIRONMENT_SECTION =
-            "Build Environment";
+    private static  final   String  BUILD_ENVIRONMENT_SECTION = "Build Environment";
+    private static  final   String  RELEASE_VERIFICATION_SECTION = "Verifying Releases";
 
     // headlines
     private static  final   String  ANT_HEADLINE = "Ant";
@@ -137,6 +137,7 @@ public class ReleaseNotesGenerator exten
     private static  final   String  SUM_NEW_FEATURES = "newFeatures";
     private static  final   String  SUM_OSGI = "osgi";
     private static  final   String  SUM_OVERVIEW = "overview";
+    private static  final   String  SUM_RELEASE_VERIFICATION = "releaseVerification";
 
     /////////////////////////////////////////////////////////////////////////
     //
@@ -187,6 +188,7 @@ public class ReleaseNotesGenerator exten
             buildFixedBugsList();
             buildReleaseNoteIssuesList();
             buildEnvironment();
+            buildReleaseVerification();
             replaceVariables();
             printOutput();
 
@@ -236,6 +238,8 @@ public class ReleaseNotesGenerator exten
                 ISSUES_SECTION, ISSUES_SECTION);
         createSection(body, MAIN_SECTION_LEVEL, toc,
                 BUILD_ENVIRONMENT_SECTION, BUILD_ENVIRONMENT_SECTION);
+        createSection(body, MAIN_SECTION_LEVEL, toc,
+                RELEASE_VERIFICATION_SECTION, RELEASE_VERIFICATION_SECTION);
     }
 
 
@@ -438,6 +442,21 @@ public class ReleaseNotesGenerator exten
                 summary.getTextByTagName(SUM_JSR169));
     }
 
+    //////////////////////////////////
+    //
+    //  Release Verification SECTION
+    //
+    //////////////////////////////////
+
+    /**
+     * Build the Release Verification section.
+     */
+    private void buildReleaseVerification() throws Exception {
+        // copy the details out of the summary file into the release verification section
+        cloneChildren(summary.getElementByTagName(SUM_RELEASE_VERIFICATION),
+                getSection(outputDoc, MAIN_SECTION_LEVEL, RELEASE_VERIFICATION_SECTION));
+    }
+
 
     //////////////////////////////////
     //

Modified: db/derby/code/trunk/releaseSummary.xml
URL: http://svn.apache.org/viewvc/db/derby/code/trunk/releaseSummary.xml?rev=1033590&r1=1033589&r2=1033590&view=diff
==============================================================================
--- db/derby/code/trunk/releaseSummary.xml (original)
+++ db/derby/code/trunk/releaseSummary.xml Wed Nov 10 16:57:20 2010
@@ -119,6 +119,59 @@ This is a feature release. The following
 
 </newFeatures>
 
+<!--
+    These are the instructions for verifying the signed distributions. Probably you
+    won't need to touch this section.
+    
+-->
+
+<releaseVerification>
+
+<p>It is essential that you verify the integrity of the downloaded
+files using the PGP and MD5 signatures.  MD5 verification ensures the
+file was not corrupted during the download process.  PGP verification
+ensures that the file came from a certain person.</p>
+
+<p>The PGP signatures can be verified using
+<a href="http://www.pgpi.org/">PGP</a> or
+<a href="http://www.gnupg.org/">GPG</a>.
+First download the Apache Derby
+<a href="http://svn.apache.org/repos/asf/db/derby/code/trunk/KEYS">KEYS</a>
+as well as the <code>asc</code> signature file for the particular
+distribution. It is important that you get these files from the ultimate
+trusted source - the main ASF distribution site, rather than from a mirror.
+Then verify the signatures using ...</p>
+
+<pre>
+% pgpk -a KEYS
+% pgpv db-derby-X.Y.tar.gz.asc
+
+<em>or</em>
+
+% pgp -ka KEYS
+% pgp db-derby-X.Y.tar.gz.asc
+
+<em>or</em>
+
+% gpg --import KEYS
+% gpg --verify db-derby-X.Y.tar.gz.asc
+
+</pre>
+
+<p>To verify the MD5 signature on the files, you need to use a program
+called <code>md5</code> or <code>md5sum</code>, which is
+included in many unix distributions.  It is also available as part of
+<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+Textutils</a>.  Windows users can get binary md5 programs from <a
+href="http://www.fourmilab.ch/md5/">here</a>, <a
+href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
+
+<p>We strongly recommend that you verify your downloads with both PGP and MD5.</p>
+
+
+</releaseVerification>
+
 </summary>
 
 



Mime
View raw message