From 4f7ec7aca7c0c9fe62edf5b17b3b36fb5fc2ebc5 Mon Sep 17 00:00:00 2001 From: gitianuser Date: Thu, 13 Dec 2018 07:42:36 +0100 Subject: [PATCH] Gitian: Change source for detached signatures - Change to new repository https://github.com/gitianuser/ion-detachded-sigs --- contrib/gitian-descriptors/gitian-osx-signer.yml | 2 +- contrib/gitian-descriptors/gitian-win-signer.yml | 2 +- doc/README_osx.md | 2 +- doc/release-process.md | 6 +++--- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/contrib/gitian-descriptors/gitian-osx-signer.yml b/contrib/gitian-descriptors/gitian-osx-signer.yml index 27e704f325ae0..91c4f6ba8bbd1 100644 --- a/contrib/gitian-descriptors/gitian-osx-signer.yml +++ b/contrib/gitian-descriptors/gitian-osx-signer.yml @@ -7,7 +7,7 @@ architectures: packages: - "faketime" remotes: -- "url": "https://github.com/cevap/ion-detached-sigs.git" +- "url": "https://github.com/gitianuser/ion-detached-sigs.git" "dir": "signature" files: - "ion-osx-unsigned.tar.gz" diff --git a/contrib/gitian-descriptors/gitian-win-signer.yml b/contrib/gitian-descriptors/gitian-win-signer.yml index 198f2b263726e..86d0652497495 100644 --- a/contrib/gitian-descriptors/gitian-win-signer.yml +++ b/contrib/gitian-descriptors/gitian-win-signer.yml @@ -8,7 +8,7 @@ packages: - "libssl-dev" - "autoconf" remotes: -- "url": "https://github.com/cevap/ion-detached-sigs.git" +- "url": "https://github.com/gitianuser/ion-detached-sigs.git" "dir": "signature" files: - "osslsigncode-1.7.1.tar.gz" diff --git a/doc/README_osx.md b/doc/README_osx.md index c1798b9b8f95b..96cfe77219805 100644 --- a/doc/README_osx.md +++ b/doc/README_osx.md @@ -92,6 +92,6 @@ build process to remain somewhat deterministic. Here's how it works: that have been previously (deterministically) built in order to create a final dmg. - **TODO** The Apple keyholder uses this unsigned app to create a detached signature, - using the script that is also included there. Detached signatures are available from this [repository](https://github.com/cevap/ion-detached-sigs). + using the script that is also included there. Detached signatures are available from this [repository](https://github.com/gitianuser/ion-detached-sigs). - Builders feed the unsigned app + detached signature back into Gitian. It uses the pre-built tools to recombine the pieces into a deterministic dmg. diff --git a/doc/release-process.md b/doc/release-process.md index 6f527fd048392..143b88d08a8f4 100644 --- a/doc/release-process.md +++ b/doc/release-process.md @@ -38,7 +38,7 @@ Check out the source code in the following directory hierarchy. cd /path/to/your/toplevel/build git clone https://github.com/gitianuser/gitian.sigs.git - git clone https://github.com/cevap/ion-detached-sigs.git + git clone https://github.com/gitianuser/ion-detached-sigs.git git clone https://github.com/devrandom/gitian-builder.git git clone https://github.com/cevap/ion.git @@ -88,7 +88,7 @@ Ensure gitian-builder is up-to-date: mkdir -p inputs wget -P inputs https://github.com/cevap/osslsigncode/releases/download/v1.7.1/osslsigncode-Backports-to-1.7.1.patch wget -P inputs https://github.com/cevap/osslsigncode/archive/v1.7.1.tar.gz && mv inputs/v1.7.1.tar.gz inputs/osslsigncode-1.7.1.tar.gz - wget -P inputs https://github.com/cevap/MacOSX-SDKs/releases/download/MacOSX10.11.sdk-trusty/MacOSX10.11.sdk.tar.gz + wget -P inputs https://github.com/gitianuser/MacOSX-SDKs/releases/download/MacOSX10.11.sdk/MacOSX10.11.sdk.tar.xz popd Create the OS X SDK tarball, see the [OS X readme](README_osx.md) for details, and copy it into the inputs directory. @@ -204,7 +204,7 @@ Codesigner only: Commit the detached codesign payloads: Non-codesigners: wait for Windows/OS X detached signatures: - Once the Windows/OS X builds each have 3 matching signatures, they will be signed with their respective release keys. -- Detached signatures will then be committed to the [ion-detached-sigs](https://github.com/cevap/ion-detached-sigs) repository, which can be combined with the unsigned apps to create signed binaries. +- Detached signatures will then be committed to the [ion-detached-sigs](https://github.com/gitianuser/ion-detached-sigs) repository, which can be combined with the unsigned apps to create signed binaries. Create (and optionally verify) the signed OS X binary: