[Twisted-Python] Release questions

[Thomas Hervé]

Le 05/04/2013 01:41, Glyph a écrit :
> 
> On Apr 4, 2013, at 9:53 AM, exarkun at twistedmatrix.com wrote:
> 
>> On 04:00 pm, therve at free.fr wrote:
>>> Le 04/04/2013 13:14, exarkun at twistedmatrix.com a écrit :
>>>> On 10:18 am, therve at free.fr wrote:
>>>>> OK. I've opened http://pad.lv/1164403 for the required changes in our
>>>>> tool. I'll update the release document once that's done.
>>>>
>>>> Hm.  As far as the download/release trac macro goes, the purpose of 
>>>> this
>>>> to to generate links with md5 hashes for easy_install and similar 
>>>> tools.
>>>> It should continue to operate with md5, not be switched to sha.
>>>
>>> I realized that while looking at the code more in depth. So should we
>>> just publish an additional list of sha sums?
>>
>> Sounds like a step in the right direction.
> 
> Would it actually break the existing macro to just include the sha sums inside the same signature list?  Presumably it has some way of ignoring the GPG signature lines; could that just be modified to ignore the shasum lines as well?
> 
> I ask because it would be nice to avoid giving the release manager two things to sign.  However, if not; still definitely a step in the right direction.

Well, the file is called "md5sums.txt", so we'd need to rename it, and
probably add tests to the macro code to make sure it works with several
hashes. As a casual release manager, I don't mind signing and uploading
an additional file.

-- 
Thomas