incubator-flex-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Carol Frampton <>
Subject Re: InstallApacheFlex - TODO
Date Fri, 20 Jul 2012 19:31:23 GMT

On 7/20/12 3 :17PM, "Om" <> wrote:

>> >1.  Build auto-update mechanism (Om + Carol)
>> release/version.xml is now being generated.  You/someone needs to fix
>> in
>> Awesome!  I will get working on the update mechanism.
>What exactly needs to be done to get the appropriate urls in version.xml?
>Is that something we can hardcode for now?  Of course, the app will still
>have to resolve the appropriate mirror via closer.cgi.

Fix these two propertues in  Whatever is there goes into

#The URLs for the IDE Installer Apps

which currently gets generated looking like:

<?xml version="1.0"?>

  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  See the License for the specific language governing permissions and
  limitations under the License.

    <!-- The URL to download the Windows installer from -->
    <!-- The URL to download the Mac installer from -->
    <!-- The version from InstallApacheFlex-app.xml -->
    <description>Latest release</description>

>> >
>> >3.  Signing the binaries the Apache way.  I was hoping to learn the
>> >process, but if Carol can do it for this release, that would be great.
>> In
>> >any case, I dont have access to a Mac, and I dont think I should be
>> >signing
>> >artifacts that I personally did not generate.
>> I can do this when it is time.
>Cool.  Do you have access to both Windows and Mac machines?  You will be
>able to sign both the binaries, right?

I have vmware for my Windows machine.  I try to use Windows as little as
possible but I did just build the app there to make sure I didn't break

>>  >
>> >4.  The installer app needs to programatically verify the downloaded
>> >binaries' signatures.  I have very little experience with crypto
>> >algorithms.  Can someone take this up?  Even if someone can explain the
>> >steps to do this, I can get it done.
>> Are you going to check the signature (.asc) or the checksum (.md5)?  I'm
>> sure the later is much easier.
>.md5 it is, then ;-)  As I said, I dont know how to go about doing this
>(yet)  I will do some research on this when I get a chance.

View raw message