07db6afb |
1 | Checklists for PuTTY administrative procedures |
2 | ============================================== |
3 | |
4 | Locations of the licence |
5 | ------------------------ |
6 | |
7 | The PuTTY copyright notice and licence are stored in quite a few |
8 | places. At the start of a new year, the copyright year needs |
9 | updating in all of them; and when someone sends a massive patch, |
10 | their name needs adding in all of them too. |
11 | |
12 | The LICENCE file in the main source distribution: |
13 | |
14 | - putty/LICENCE |
15 | |
16 | The resource files: |
17 | |
18 | - putty/pageant.rc |
19 | + the copyright date appears twice, once in the About box and |
20 | once in the Licence box. Don't forget to change both! |
21 | - putty/puttygen.rc |
22 | + the copyright date appears twice, once in the About box and |
23 | once in the Licence box. Don't forget to change both! |
24 | - putty/win_res.rc |
25 | + the copyright date appears twice, once in the About box and |
26 | once in the Licence box. Don't forget to change both! |
27 | - putty/mac/mac_res.r |
28 | |
29 | The documentation (both the preamble blurb and the licence appendix): |
30 | |
31 | - putty/doc/blurb.but |
32 | - putty/doc/licence.but |
33 | |
34 | The website: |
35 | |
36 | - putty-website/licence.html |
37 | |
38 | Before tagging a release |
39 | ------------------------ |
40 | |
41 | For a long time we got away with never checking the current version |
42 | number into CVS at all - all version numbers were passed into the |
43 | build system on the compiler command line, and the _only_ place |
44 | version numbers showed up in CVS was in the tag information. |
45 | |
46 | Unfortunately, those halcyon days are gone, and we do need the |
47 | version number in CVS in a couple of places. These must be updated |
48 | _before_ tagging a new release. |
49 | |
50 | The file used to generate the Unix snapshot version numbers (which |
51 | are <previousrelease>-<date> so that the Debian versioning system |
52 | orders them correctly with respect to releases): |
53 | |
54 | - putty/LATEST.VER |
55 | |
dd953a88 |
56 | The Windows installer script: |
07db6afb |
57 | |
58 | - putty/putty.iss |
59 | |
dd953a88 |
60 | The Mac resource file (used to generate the binary bit of the 'vers' |
61 | resources -- the strings are supplied by the usual means): |
62 | |
1bf96508 |
63 | - putty/mac/version.r |
dd953a88 |
64 | |
8208b498 |
65 | It might also be worth going through the documentation looking for |
66 | version numbers - we have a couple of transcripts showing the help |
67 | text from the command-line tools, and it would be nice to ensure the |
68 | whole transcripts (certainly including the version numbers) are up |
69 | to date. |
70 | |
71 | - putty/doc/pscp.but |
72 | - putty/doc/plink.but |
73 | - putty/doc/psftp.but (in case it ever acquires a similar thing) |
74 | |
07db6afb |
75 | The actual release procedure |
76 | ---------------------------- |
77 | |
78 | This is the procedure I (SGT) currently follow (or _should_ follow |
79 | :-) when actually making a release, once I'm happy with the position |
80 | of the tag. |
81 | |
82 | - Write a release announcement (basically a summary of the changes |
83 | since the last release). Squirrel it away in |
84 | ixion:src/putty/local/announce-<ver> in case it's needed again |
85 | within days of the release going out. |
86 | |
87 | - On my local machines, check out the release-tagged version of the |
88 | sources. |
1e7aebc9 |
89 | + Make sure to run mkfiles.pl _after_ this checkout, just in |
90 | case. |
07db6afb |
91 | |
92 | - Build the Windows/x86 release binaries. Don't forget to supply |
93 | VER=/DRELEASE=<ver>. Run them, or at least one or two of them, to |
94 | ensure that they really do report their version number correctly. |
fe4184a6 |
95 | + Save the release link maps. Currently I keep these on ixion, |
96 | in src/putty/local/maps-<version>. |
07db6afb |
97 | |
98 | - Acquire the Windows/alpha release binaries from Owen. |
99 | + Verify the snapshot-key signatures on these, to ensure they're |
100 | really the ones he built. If I'm going to snapshot-sign a zip |
101 | file I make out of these, I'm damn well going to make sure the |
102 | binaries that go _into_ it were snapshot-signed themselves. |
fe4184a6 |
103 | + Make sure Owen has kept the Alpha release link maps somewhere |
104 | useful. |
07db6afb |
105 | |
106 | - Run Halibut to build the docs. |
107 | |
108 | - Build the .zip files. |
109 | + The binary archive putty.zip just contains all the .exe files |
110 | except PuTTYtel, and the .hlp and .cnt files. |
111 | + The source archive putty-src.zip is built by puttysnap.sh (my |
112 | cron script that also builds the nightly snapshot source |
113 | archive). |
114 | + The docs archive puttydoc.zip contains all the HTML files |
115 | output from Halibut. |
116 | |
117 | - Build the installer. |
118 | |
119 | - Sign the release (gpg --detach-sign). |
120 | + Sign the locally built x86 binaries, the locally built x86 |
121 | binary zipfile, and the locally built x86 installer, with the |
122 | release keys. |
123 | + The Alpha binaries should already have been signed with the |
124 | snapshot keys. Having checked that, sign the Alpha binary |
125 | zipfile with the snapshot keys too. |
126 | + The source archive should be signed with the release keys. |
127 | This was the most fiddly bit of the last release I did: the |
128 | script that built the source archive was on ixion, so I had to |
129 | bring the archive back to my local machine, check everything |
130 | in it was untampered-with, and _then_ sign it. Perhaps next |
131 | time I should arrange that puttysnap.sh can run on my local |
132 | box; it'd be a lot easier. |
133 | + Don't forget to sign with both DSA and RSA keys for absolutely |
134 | everything. |
135 | |
136 | - Begin to pull together the release directory structure. |
137 | + subdir `x86' containing the x86 binaries, x86 binary zip, x86 |
138 | installer, and all signatures on the above. |
139 | + subdir `alpha' containing the Alpha binaries, Alpha binary |
140 | zip, and all signatures on the above. |
141 | + top-level dir contains the source zip (plus signatures), |
142 | puttydoc.txt, the .hlp and .cnt files, and puttydoc.zip. |
143 | |
144 | - Create and sign md5sums files: one in the x86 subdir, one in the |
145 | alpha subdir, and one in the parent dir of both of those. |
146 | + The md5sums files need not list the .DSA and .RSA signatures, |
147 | and the top-level md5sums need not list the other two. |
148 | + Sign the md5sums files (gpg --clearsign). The Alpha md5sums |
149 | should be signed with the snapshot keys, but the other two |
150 | with the release keys (yes, the top-level one includes some |
151 | Alpha files, but I think people will understand). |
152 | |
153 | - Now double-check by verifying all the signatures on all the |
154 | files. |
155 | |
156 | - Create subdir `htmldoc' in the release directory, which should |
157 | contain exactly the same set of HTML files that went into |
158 | puttydoc.zip. |
159 | |
160 | - Now the whole release directory should be present and correct. |
161 | Upload to ixion:www/putty/<ver>, upload to |
162 | chiark:ftp/putty-<ver>, and upload to the:www/putty/<ver>. |
163 | |
164 | - Update the HTTP redirects. |
165 | + Update the one at the:www/putty/htaccess which points the |
166 | virtual subdir `latest' at the actual latest release dir. TEST |
167 | THIS ONE - it's quite important. |
168 | + ixion:www/putty/.htaccess has an individual redirect for each |
169 | version number. Add a new one. |
170 | |
171 | - Update the FTP symlink (chiark:ftp/putty-latest -> putty-<ver>). |
172 | |
173 | - Update web site. |
174 | + Adjust front page (`the latest version is <ver>'). |
175 | + Adjust filename of installer on links in Download page. |
176 | + Adjust header text on Changelog page. (That includes changing |
177 | `are new' in previous version to `were new'!) |
178 | |
179 | - Check the Docs page links correctly to the release docs. (It |
180 | should do this automatically, owing to the `latest' HTTP |
181 | redirect.) |
182 | |
183 | - Check that the web server attaches the right content type to .HLP |
184 | and .CNT files. |
185 | |
1e7aebc9 |
186 | - Run webupdate, so that all the changes on ixion propagate to |
187 | chiark. Important to do this _before_ announcing that the release |
188 | is available. |
189 | |
07db6afb |
190 | - Announce the release! |
191 | + Mail the announcement to putty-announce. |
192 | + Post it to comp.security.ssh. |
193 | + Mention it in <TDHIS> on mono. |
194 | |
195 | - All done. Probably best to run `cvs up -A' now, or I'll only |
196 | forget in a few days' time and get confused... |