From 9f5ce44b252d2d62fb7beaf6b93b7a86b74d6204 Mon Sep 17 00:00:00 2001 From: amyblais Date: Fri, 26 Jan 2018 10:56:54 -0500 Subject: [PATCH 1/2] Update release-process.md --- docs/release-process.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/release-process.md b/docs/release-process.md index fcb7baad..260b2dff 100644 --- a/docs/release-process.md +++ b/docs/release-process.md @@ -92,6 +92,7 @@ The final release is cut. If an urgent and important issue needs to be addressed 2. Build: - Tag a new release (e.g. 1.1.0) and run an official build which should be essentially identical to the last RC - Post in Desktop App channel with links to all supported distributions and SHA-256 checksum + - Complete code-signing and confirm that it worked well by testing the download links and keeping an eye out for any warnings or issues 3. PM: - Update the links in [Mattermost download page](https://www.mattermost.org/download/) and [installation guides](https://docs.mattermost.com/install/desktop.html) - Draft [Mattermost Security Updates](http://about.mattermost.com/security-updates/) if applicable, but do not post until seven days after official release From fdb15b9ce88844e25b3860e00de27cb6dc05d72b Mon Sep 17 00:00:00 2001 From: amyblais Date: Mon, 29 Jan 2018 08:45:37 -0500 Subject: [PATCH 2/2] Update release-process.md --- docs/release-process.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/release-process.md b/docs/release-process.md index 260b2dff..d80b2d58 100644 --- a/docs/release-process.md +++ b/docs/release-process.md @@ -92,7 +92,11 @@ The final release is cut. If an urgent and important issue needs to be addressed 2. Build: - Tag a new release (e.g. 1.1.0) and run an official build which should be essentially identical to the last RC - Post in Desktop App channel with links to all supported distributions and SHA-256 checksum - - Complete code-signing and confirm that it worked well by testing the download links and keeping an eye out for any warnings or issues + - Complete code-signing and confirm that it worked well by testing the download links and keeping an eye out for any warnings or issues. Also, use these commands to verify the signatures: + - Windows: On "Developer Command Prompt" (bundled in Visual Studio), + `signtool verify /pa /all EXE_TO_VERIFY` + - Mac: On console, + `codesign --verify --deep --strict --verbose=2 Mattermost.app` 3. PM: - Update the links in [Mattermost download page](https://www.mattermost.org/download/) and [installation guides](https://docs.mattermost.com/install/desktop.html) - Draft [Mattermost Security Updates](http://about.mattermost.com/security-updates/) if applicable, but do not post until seven days after official release