Re: Time for squid 3.0 STABLE2 ?

Henrik Nordstrom wrote:
> On Thu, 2008-02-28 at 01:04 +1300, Amos Jeffries wrote:
>> Just a few issues remaining before 3.0.STABLE-2.
>>
>> * patch 11467 back-porting.
>
> cd English
> ls ERR_* >../list
>
>> * Close more bugs?
>> http://www.squid-cache.org/bugs/show_bug.cgi?id=2127
>
> Is closed and verified by the reporter.
>
>> http://www.squid-cache.org/bugs/show_bug.cgi?id=2124
>
> Done.
>
>> why is this not 2.6??
>> http://www.squid-cache.org/bugs/show_bug.cgi?id=2138
>
> Don't know.
>
>> * CVS branching? checkpoint?.
>> Will need another How-To here I think Henrik.t
>
> update releasenotes and changelog.
>
> login on squid/cache.org and
>
> - get an up to date checkout of the tree
> cvs up -d -P
> - make sure the version in configure.in is correct
> - ./bootstrap.sh
> - cvs commit
> - cvs tag SQUID_3_0_STABLE2
> - ./mkrelease.sh squid-3.0.STABLE2 /server/httpd/htdocs/squid-cache.org/Versions/v3/3.0/
> (i think, verify the path)
> this should give you a suitable tarball in the website.
>
> download that, and the previous release and signature as well.
>
> verify the signature of the previous release
>
> make a diff between the two, and audit that diff to verify that the
> changes looks right.
>
> sign the new release and diff.

Got this far. But one thing is still making me think...

The official sigs Duane has up for STABLE1 look like this:

File: squid-3.0.STABLE1.tar.gz
Date: Fri Dec 14 00:26:31 GMT 2007
Size: 2406601
MD5 : 688d02adad9b592c5947d54237fbc076
SHA1: 057dd85a28b7123035aa6f7ad36ec0d985088943
Key : 0x2402F2F8 <wessels@squid-cache.org>
       fingerprint = B732 17BA 0C71 D6FC A77B 6E43 4250 AB43 2402 F2F8
       keyring = http://www.squid-cache.org/~wessels/pgp.pub
       keyserver = subkeys.pgp.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQBHYc8CQlCrQyQC8vgRAtQ3AKCQZjVWRiJHg2I4U94nI3DSAYwJ3QCfbZwX
cTpDjGay6Cj1BynzwTSZss0=
=7DnF
-----END PGP SIGNATURE-----

I cant figure out how to get my gpg app (1.4.6) to produce any of the
File stats etc. It only seems to be doing the SIG part.

>
> upload the diff and signatures to the 3.0 folder on the web server.
>
> go to the 3.0 web folder
>
> co -l index.tmpl
>
> edit index.tmpl, moving the previous release down to "older stable
> releases" and the new as current stable release.
>
> ./make.sh
>
> verify that it got published right.
>
> copy the tarballs, diff, release notes and signatures to the ftp area.
>
> send announce
>

Amos

-- 
Please use Squid 2.6STABLE17+ or 3.0STABLE1+
There are serious security advisories out on all earlier releases.