[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Preparing for a Release
- Subject: Re: Preparing for a Release
- From: James Turner <james@xxxxxxxxxxxxxxx>
- Date: Thu, 2 Mar 2017 14:37:02 -0500
- To: Ori Bernstein <ori@xxxxxxxxxxxxxx>
- Cc: myrddin-dev@xxxxxxxxxxxxxx
On Thu, Mar 02, 2017 at 10:20:57AM -0800, Ori Bernstein wrote:
> On Thu, 2 Mar 2017 12:54:32 -0500
> James Turner <james@xxxxxxxxxxxxxxx> wrote:
>
> > Sounds like a solid plan to me. I'll probably point at the tarball
> > release then.
>
> Actually -- any thoughts on signing/hashes/integerity?
>
> --
> Ori Bernstein <ori@xxxxxxxxxxxxxx>
>
The OpenBSD project uses a tool called signify, which was built inhouse,
to sign all packages and releases.
https://www.openbsd.org/papers/bsdcan-signify.html
http://man.openbsd.org/signify
http://www.tedunangst.com/flak/post/signify
It's pretty straight forward and I believe has been ported to other
operating system.
--
James Turner