Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. You should read the OpenJPA Release Policy to decide on the name of the new release, based on the content.
  2. You should read the Apache Release FAQ
  3. You must have shell access to people.apache.org
  4. You must have the following utilities installed on your local machine and available in your path:

Tasks that need to be performed for each release

...

Create and install a SSH key

1

Install PuTTY

2a

Use ssh-keygen to create a SSH key.

Info

See Authenticating By Public Key (OpenSSH) for a good description on why and how to perform this task.

2b

In Windows platform, use

2

Use PuttyGen to create a SSH key (see Putty help for details).

Info
  • Use "SSH-2 DSA" key type and 1024-bit key size.
  • Copy the content of the "Public key for pasting...." and save it to a file named authorized_keys for later use.
  • The private key saved by PuTTYGen can only be used in the "Connection -> SSH -> Auth" category in Putty configuration.

3

pscp your SSH public key authorized_keys saved in last step to ~/authorized_keys

4

Use PuTTY to login to people.apache.org

5

Create a ~\.ssh folder and change its file mode to 700.

6

Move or append ~/authorized_keys to ~/.ssh/authorized_keys and change its file mode to 600.

Info
  • Each public key in the authorized_keys spans only one line.
    • For example: "ssh-dss AAAAB3NzaC1kc3MAAA ..... agBmmfZ9uAbSqA== dsa-key-20071107"
  • '#' in the first column is a comment line.

6 7

Configure putty to use your private key and save the session

Info

Specify your private key in the "Connection -> SSH -> Auth" category in Putty configuration.

Create a PGP key

1

Install cgywin, including Utils/gnupg and Net/openssh packages, or install gpg from http://www.gnupg.org/(en)/download/index.html

2

Generate a key-pair with $ gpg --gen-key using default key kind ("DSA and Elgamal") and ELG-E keys size (2048).

Info
  • The generated keys are stored in $HOME/.gnupg or %HOME%\Application Data\gnupg subdirectory.
  • Save the content in this subdirectory to a safe media. This contains your private key used to sign all the OpenJPA release materials.

3

Backup your cygwin home directory to another media

4

Add your public key to https://svn.apache.org/repos/asf/openjpa/site/docs/KEYS. See the commands describe at the beginning of this KEYS file to perform this task. The gpg key-pair is used to sign the published artifacts for the OpenJPA releases.

...