Received: (from majordom@localhost) by hyperreal.org (8.8.5/8.8.5) id FAA12266; Thu, 3 Jul 1997 05:10:56 -0700 (PDT) Received: from eastwood.aldigital.algroup.co.uk (eastwood.aldigital.algroup.co.uk [194.128.162.193]) by hyperreal.org (8.8.5/8.8.5) with SMTP id FAA12259 for ; Thu, 3 Jul 1997 05:10:49 -0700 (PDT) Received: from gonzo.ben.algroup.co.uk (gonzo.ben.algroup.co.uk [193.133.15.1]) by eastwood.aldigital.algroup.co.uk (8.6.12/8.6.12) with SMTP id MAA14101 for ; Thu, 3 Jul 1997 12:10:33 GMT Subject: Re: [STATUS] 1.2.1 To: new-httpd@apache.org Date: Thu, 3 Jul 1997 12:55:05 +0100 (BST) From: Ben Laurie In-Reply-To: <199707031027.GAA16598@devsys.jaguNET.com> from "Jim Jagielski" at Jul 3, 97 06:27:03 am X-Mailer: ELM [version 2.4 PL24 PGP2] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Message-ID: <9707031255.aa23775@gonzo.ben.algroup.co.uk> Sender: new-httpd-owner@apache.org Precedence: bulk Reply-To: new-httpd@apache.org Jim Jagielski wrote: > > Ben Laurie wrote: > > > > Randy Terbush wrote: > > > > > > > Everyone happy with rolling 1.2.1 final? Let's not hold it off for the > > > > hostname debate, we can clear that up for certain in 1.3. My schedule is > > > > kind of busy, I won't be able to roll until about 8pm PDT. I'll also be > > > > offline for the weekend, leaving tomorrow morning. > > > > > > If you need me to step in to roll this, let me know. > > > > > > > Oh btw, blush, I've never used pgp so someone else is going to have to > > > > sign it. > > > > > > What did we decide to do on this signing business? > > > > Here's what I proposed, so far with no response whatsoever: > > > > For Developers > > -------------- > > > > To sign a distribution (for example, apache_1.2.0.tar.Z), do this: > > > > 1. Get the distribution from the FTP site (don't attempt to reconstruct it > > yourself). > > > > 2. Unpack it. [2] > > > > 3. Verify that it is the same as you think it should be, for example: > > > > gdiff -r apache_1.2.0 ~/work/apache-1.2 [1] > > > > 4. Sign the distribution: > > > > pgp -bsa apache_1.2.0.tar [-u ] [2] > > > > 5. The above produces a file apache_1.2.0.tar.asc. Append this to the signature > > file on ftp.apache.org. [2,3,4] > > > > Wouldn't it be bette to put that in the ./binaries directory along > with the apache_1.2.0.tar tarball. I think that's what I meant! > > Also, shouldn't we sign the .Z or .gz file(s) as well? No, see my note [2]. Cheers, Ben. -- Ben Laurie Phone: +44 (181) 994 6435 Email: ben@algroup.co.uk Freelance Consultant and Fax: +44 (181) 994 6472 Technical Director URL: http://www.algroup.co.uk/Apache-SSL A.L. Digital Ltd, Apache Group member (http://www.apache.org) London, England. Apache-SSL author