Re: Jython 2.7.2 final

Eero Aaltonen <[email protected]> Sun, 5 Apr 2020 15:56:29 +0300
Newsgroups gmane.comp.lang.jython.devel
Message-ID <CALo3+byQP5hAU5Si0XG5Q04ctfWL9ZJUU2AcKh1wp2bOwLeGnA@mail.gmail.com>
Thank you for your hard work on making the release!

The obvious place to download the release
https://www.jython.org/download.html

Currently does not have obvious instructions for verifying the download.
Everything required for that however seems to be in place:
* https://repo1.maven.org/maven2/org/python/jython-installer/2.7.2/
.asc signatures
*
https://jython-devguide.readthedocs.io/en/latest/release_jy.html#publication
releases (Jeff's) public key on the keyserver.

In case you wish to add verification instructions to the download page, I
make a sketch while doing that myself


## Download release and signature

Download files

* `jython-installer-2.7.2.jar`
* `jython-installer-2.7.2.jar.asc` from example
https://repo1.maven.org/maven2/org/python/jython-installer/2.7.2/

## Identify Signing Key

`gpg --verify jython-installer-2.7.2.jar.asc jython-installer-2.7.2.jar`

## Search and Import Key

`gpg --keyserver hkp://pool.sks-keyservers.net --search-keys
C8C4B9DC1E031F788B12882B875C3EF9DC4638E3`

## Verify

Run the verification command again

`gpg --verify jython-installer-2.7.2.jar.asc jython-installer-2.7.2.jar`

_______________________________________________
Jython-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jython-dev