Gitian: Change source for detached signatures

- Change to new repository

    https://github.com/gitianuser/ion-detachded-sigs

contrib/gitian-descriptors/gitian-osx-signer.yml

@@ -7,7 +7,7 @@ architectures:
 packages:
 - "faketime"
 remotes:
-- "url": "https://github.com/cevap/ion-detached-sigs.git"
+- "url": "https://github.com/gitianuser/ion-detached-sigs.git"
   "dir": "signature"
 files:
 - "ion-osx-unsigned.tar.gz"

contrib/gitian-descriptors/gitian-win-signer.yml

@@ -8,7 +8,7 @@ packages:
 - "libssl-dev"
 - "autoconf"
 remotes:
-- "url": "https://github.com/cevap/ion-detached-sigs.git"
+- "url": "https://github.com/gitianuser/ion-detached-sigs.git"
   "dir": "signature"
 files:
 - "osslsigncode-1.7.1.tar.gz"

doc/README_osx.md

@@ -92,6 +92,6 @@ build process to remain somewhat deterministic. Here's how it works:
   that have been previously (deterministically) built in order to create a
   final dmg.
 - **TODO** The Apple keyholder uses this unsigned app to create a detached signature,
-  using the script that is also included there. Detached signatures are available from this [repository](https://github.com/cevap/ion-detached-sigs).
+  using the script that is also included there. Detached signatures are available from this [repository](https://github.com/gitianuser/ion-detached-sigs).
 - Builders feed the unsigned app + detached signature back into Gitian. It
   uses the pre-built tools to recombine the pieces into a deterministic dmg.

doc/release-process.md

@@ -38,7 +38,7 @@ Check out the source code in the following directory hierarchy.
 
     cd /path/to/your/toplevel/build
     git clone https://github.com/gitianuser/gitian.sigs.git
-    git clone https://github.com/cevap/ion-detached-sigs.git
+    git clone https://github.com/gitianuser/ion-detached-sigs.git
     git clone https://github.com/devrandom/gitian-builder.git
     git clone https://github.com/cevap/ion.git
 
@@ -88,7 +88,7 @@ Ensure gitian-builder is up-to-date:
     mkdir -p inputs
     wget -P inputs https://github.com/cevap/osslsigncode/releases/download/v1.7.1/osslsigncode-Backports-to-1.7.1.patch
     wget -P inputs https://github.com/cevap/osslsigncode/archive/v1.7.1.tar.gz && mv inputs/v1.7.1.tar.gz inputs/osslsigncode-1.7.1.tar.gz
-    wget -P inputs https://github.com/cevap/MacOSX-SDKs/releases/download/MacOSX10.11.sdk-trusty/MacOSX10.11.sdk.tar.gz
+    wget -P inputs https://github.com/gitianuser/MacOSX-SDKs/releases/download/MacOSX10.11.sdk/MacOSX10.11.sdk.tar.xz
     popd
 
 Create the OS X SDK tarball, see the [OS X readme](README_osx.md) for details, and copy it into the inputs directory.
@@ -204,7 +204,7 @@ Codesigner only: Commit the detached codesign payloads:
 Non-codesigners: wait for Windows/OS X detached signatures:
 
 - Once the Windows/OS X builds each have 3 matching signatures, they will be signed with their respective release keys.
-- Detached signatures will then be committed to the [ion-detached-sigs](https://github.com/cevap/ion-detached-sigs) repository, which can be combined with the unsigned apps to create signed binaries.
+- Detached signatures will then be committed to the [ion-detached-sigs](https://github.com/gitianuser/ion-detached-sigs) repository, which can be combined with the unsigned apps to create signed binaries.
 
 Create (and optionally verify) the signed OS X binary: