[or-cvs] r14693: Added notes about package signature requests and a few TODO (in torbrowser/trunk: . build-scripts)

[ioerror@xxxxxxxx]

Author: ioerror
Date: 2008-05-23 17:42:23 -0400 (Fri, 23 May 2008)
New Revision: 14693

Modified:
   torbrowser/trunk/TODO
   torbrowser/trunk/build-scripts/INSTALL
Log:
Added notes about package signature requests and a few TODO items.


Modified: torbrowser/trunk/TODO
===================================================================
--- torbrowser/trunk/TODO	2008-05-23 11:54:46 UTC (rev 14692)
+++ torbrowser/trunk/TODO	2008-05-23 21:42:23 UTC (rev 14693)
@@ -99,6 +99,21 @@
 - Split archive or make auto-downloader to help people who cannot
   download large files in one go
 
+- Because the batch file cannot have an icon other than the default windows
+  icon, perhaps we should abandon the batch file and use a windows specific
+  shortcut. This would allow us to use the Vidalia icon and Vidalia will do all
+  of the work that the batchfile once did. This may not work if shortcuts are 
+  all absolute.
+
+- Ask specific vendors to sign their packaged binary releases, probably with
+  pgp/gpg. The packages are: 7zip, MinGW, MSYS, CMake, QT, msysDTK,
+  zlib, FirefoxPortable
+
+  Letters requesting package signatures have been sent to: zlib
+
+  A forum post requesting package signatures have been posted for 7zip:
+  http://sourceforge.net/forum/message.php?msg_id=4982530
+
 Questions
 =========
 

Modified: torbrowser/trunk/build-scripts/INSTALL
===================================================================
--- torbrowser/trunk/build-scripts/INSTALL	2008-05-23 11:54:46 UTC (rev 14692)
+++ torbrowser/trunk/build-scripts/INSTALL	2008-05-23 21:42:23 UTC (rev 14693)
@@ -78,6 +78,11 @@
 
     http://www.7-zip.org/download.html
 
+Currently, 7-zip doesn't have package signatures, we requested this for current
+and future releases:
+
+    http://sourceforge.net/forum/message.php?msg_id=4982530
+
 The suggested version is "7-Zip 4.57":
 
     http://downloads.sourceforge.net/sevenzip/7z457.exe
@@ -92,6 +97,10 @@
 
     http://python.org/ftp/python/2.5.2/python-2.5.2.msi
 
+Download and verify the signature:
+
+    http://www.python.org/download/releases/2.5.2/python-2.5.2.msi.asc
+
 When prompted for a directory, install it into: C:\Python25\
 
 Installing MinGW
@@ -287,6 +296,8 @@
 Download the zlib source:
         http://www.zlib.net/zlib-1.2.3.tar.gz
 
+Currently, zlib doesn't have package signatures. We emailed the zlib team and are awaiting a reply. 
+
 Extract zlib:
         $ cd /c/build/
         $ tar -C /c/build/ -xvzf /c/Documents\ and\ Settings/Administrator/Desktop/zlib-1.2.3.tar.gz