Key rollover: switch to signing using the new keys.

[PuTTY.git] / CHECKLST.txt

diff --git a/CHECKLST.txt b/CHECKLST.txt
index b92799947acb90a81bd9cf31333683d7b3024d51..93996f8d4d957b9573b5bbd4ddcc296355c1eeb7 100644 (file)
--- a/CHECKLST.txt
+++ b/CHECKLST.txt
@@ -93,7 +93,7 @@ for it:
 
  - Write a release announcement (basically a summary of the changes
    since the last release). Squirrel it away in
-   atreus:src/putty/local/announce-<ver> in case it's needed again
+   atreus:src/putty-local/announce-<ver> in case it's needed again
    within days of the release going out.
 
  - Update the web site, in a local checkout.
@@ -106,6 +106,7 @@ for it:
      pre-releases, if there were any before this release. Comment out
      the big pre-release section at the top, and also adjust the
      sections about source archives at the bottom.
+   + Do the same on the Docs page.
    + Adjust header text on Changelog page. (That includes changing
      `are new' in previous version to `were new'!)
    + .htaccess has an individual redirect for each version number. Add
@@ -121,17 +122,20 @@ for it:
 
  - Build the release, by checking out the release tag:
      git checkout 0.XX
-     bob -F . RELEASE=0.XX'
+     bob . RELEASE=0.XX
    This should generate a basically valid release directory as
    `build.out/putty', and provide link maps and sign.sh alongside that
    in build.out.
 
+ - Double-check in build.log that the release was built from the right
+   git commit.
+
  - Do a bit of checking that the release binaries basically work,
    report their version numbers accurately, and so on. Test the
    installer and the Unix source tarball.
 
  - Sign the release: in the `build.out' directory, type
-     sh sign.sh putty Releases
+     sh sign.sh -r putty
    and enter the passphrases a lot of times.
 
 The actual release procedure
@@ -147,7 +151,7 @@ locally, this is the procedure for putting it up on the web.
 
  - Do final checks on the release directory in its new location:
     + verify all the signatures:
-      for i in `find . -name '*.*SA'`; do case $i in *sums*) gpg --verify $i;; *) gpg --verify $i ${i%%.?SA};; esac; done
+      for i in `find . -name '*.gpg'`; do case $i in *sums*) gpg --verify $i;; *) gpg --verify $i ${i%%.gpg};; esac; done
     + check the checksum files:
       md5sum -c md5sums
       sha1sum -c sha1sums