[wtp-pmc] Small item for agenda: Jar signing, Downloads

[David M Williams <david_williams@xxxxxxxxxx>]

per this requirement from Eclipse Foundation ... "We
will be extending signing privileges to one or two committers on each project."
I recommend we specify myself and Naci
as the "signers" ... we are both used to working with the infrastructure
and in a position to
"officially release" a build.


But  .. other suggestions welcome.



----- Forwarded by David
M Williams/Raleigh/IBM on 10/21/2006 12:34 AM -----

"Eclipse WebMaster (Denis Roy)" <webmaster@xxxxxxxxxxx>
Sent by: eclipse.org-committers-bounces@xxxxxxxxxxx

10/20/2006 10:53 AM

To	eclipse.org-committers@xxxxxxxxxxx
cc
Subject	[eclipse.org-committers] Jar signing, Downloads

Greetings all,

A short update for you today:

1. Jar signing
The Eclipse Foundation, with help from the Eclipse project team, has set
up an infrastructure that will enable you to sign your JAR files, as well
as JAR files within a ZIP file. The files are signed by the Foundation,
using a Foundation-owned code signing certificate. We will be extending
signing privileges to one or two committers on each project.

How does it work?

1. You Project Lead must tell us (webmaster) who is allowed to sign JARs
for your project.

2. When you've been granted signing privileges, you use an SSH client and
connect to build.eclipse.org using your committer account as usual.

3. You must copy/move the files you wish to sign to the downloads staging
area. We do not allow you to sign files from any other location.

4. You type a command that will add files to the signing queue. The queue
is processed automatically, and you can get an e-mail notification when
signing is complete.

5. You can then move the signed files from the staging area to your downloads
area.

Detailed instructions on the signing process will be sent to those committers
who are appointed as signers.


If you have any questions about signing, please ask, or refer to these
documents:
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=135044
- http://wiki.eclipse.org/index.php/JAR_Signing


2. Downloads vs. archives
When moving files from download.eclipse.org to archive.eclipse.org, a common
pain point was the need to update all your download links.  If you're
using http://www.eclipse.org/downloads/download.php?file=
(and you should be), you don't need to update your download links anymore.
When download.php cannot find the requested file on download.eclipse.org,
it searches the exact same file on archive.eclipse.org.  This change
should help simplify moving files to the archives.

As usual, thanks for reading.

Denis


-- 
Denis Roy
Manager, IT Infrastructure
Eclipse Foundation, Inc.  --  http://www.eclipse.org/
Office: 613.224.9461 x224
Cell: 819.210.6481
denis.roy@xxxxxxxxxxx

-- 

Eclipse WebMaster - webmaster@xxxxxxxxxxx
Questions? Consult the WebMaster FAQ at http://wiki.eclipse.org/index.php/Webmaster_FAQ
View my status at http://wiki.eclipse.org/index.php/WebMaster_______________________________________________
eclipse.org-committers mailing list
eclipse.org-committers@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/eclipse.org-committers