Le 05/04/2013 01:41, Glyph a écrit : > > On Apr 4, 2013, at 9:53 AM, exar...@twistedmatrix.com wrote: > >> On 04:00 pm, the...@free.fr wrote: >>> Le 04/04/2013 13:14, exar...@twistedmatrix.com a écrit : >>>> On 10:18 am, the...@free.fr wrote: >>>>> OK. I've opened http://pad.lv/1164403 for the required changes in our >>>>> tool. I'll update the release document once that's done. >>>> >>>> Hm. As far as the download/release trac macro goes, the purpose of >>>> this >>>> to to generate links with md5 hashes for easy_install and similar >>>> tools. >>>> It should continue to operate with md5, not be switched to sha. >>> >>> I realized that while looking at the code more in depth. So should we >>> just publish an additional list of sha sums? >> >> Sounds like a step in the right direction. > > Would it actually break the existing macro to just include the sha sums > inside the same signature list? Presumably it has some way of ignoring the > GPG signature lines; could that just be modified to ignore the shasum lines > as well? > > I ask because it would be nice to avoid giving the release manager two things > to sign. However, if not; still definitely a step in the right direction.
Well, the file is called "md5sums.txt", so we'd need to rename it, and probably add tests to the macro code to make sure it works with several hashes. As a casual release manager, I don't mind signing and uploading an additional file. -- Thomas _______________________________________________ Twisted-Python mailing list Twisted-Python@twistedmatrix.com http://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python
