From 3c6b3c84c968c38b4331ff5aa3625238a5c970d9 Mon Sep 17 00:00:00 2001
From: Norbert Preining <preining@logic.at>
Date: Tue, 12 Apr 2016 06:12:20 +0000
Subject: switch consistently to sha512 for all checksums, sign installer and
 iso etc

git-svn-id: svn://tug.org/texlive/trunk@40455 c570f23f-e606-0410-a88d-b1316a301751
---
 Master/tlpkg/bin/tl-update-images | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

(limited to 'Master/tlpkg/bin/tl-update-images')

diff --git a/Master/tlpkg/bin/tl-update-images b/Master/tlpkg/bin/tl-update-images
index 6e3c8f36c70..46e18d03271 100755
--- a/Master/tlpkg/bin/tl-update-images
+++ b/Master/tlpkg/bin/tl-update-images
@@ -76,7 +76,7 @@ MAKEINST ()
   echo "-- `date` Writing image to $iso"
 
   # remove old images and checksums.
-  rm -f $prefix-*.iso* $prefix-*.md5 $prefix-*.sha256
+  rm -f $prefix-*.iso* $prefix-*.md5 $prefix-*.sha256 $prefix-*.sha512
 
   # the image consists of the tlnet tree and the top-level files
   # from master, more or less.
@@ -131,18 +131,25 @@ MAKEINST ()
   # make checksums
   # and symlinks with short names (potentially used in /etc/fstab).
   for ext in ""; do  # used to do .xz here too
-    rm -f $prefix.iso$ext $prefix.iso$ext.md5 $prefix.iso$ext.sha256
+    rm -f $prefix.iso$ext $prefix.iso$ext.md5 $prefix.iso$ext.sha256 $prefix.iso$ext.sha512
     
     (cd $target && md5sum `basename $iso$ext`) >$iso$ext.md5
-    (cd $target && sha256sum `basename $iso$ext`) >$iso$ext.sha256
+    (cd $target && sha512sum `basename $iso$ext`) >$iso$ext.sha512
+    (cd $target && gpg --homedir /home/texlive/.gnupg \
+        --passphrase-file /home/texlive/.gnupg/passphrase  \
+        --armor --detach-sign --local-user 0x06BAB6BC $iso$ext.sha512)
 
     ln -s `basename $iso$ext` $prefix.iso$ext
     
-    # for md5 and sha256, have to adjust the filename embedded in the file.
+    # for md5 and sha512, have to adjust the filename embedded in the file.
     sed s,-$D,, $iso$ext.md5 >$prefix.iso$ext.md5
-    sed s,-$D,, $iso$ext.sha256 >$prefix.iso$ext.sha256
+    sed s,-$D,, $iso$ext.sha512 >$prefix.iso$ext.sha512
     #ln -s `basename $iso`$ext.md5 $prefix.iso$ext.md5
     #ln -s `basename $iso`$ext.sha256 $prefix.iso$ext.sha256
+
+    gpg --homedir /home/texlive/.gnupg \
+        --passphrase-file /home/texlive/.gnupg/passphrase  \
+        --armor --detach-sign --local-user 0x06BAB6BC $prefix.iso$ext.sha512
     
     ls -l $iso$ext
   done
@@ -183,7 +190,11 @@ do_tar ()
   if test $? -ne 0; then
     echo "$0: tar failed, goodbye." >&2
   fi
-  (cd $target && sha256sum `basename $tarfile`) >$tarfile.sha256
+  (cd $target && sha512sum `basename $tarfile`) >$tarfile.sha512
+  (cd $target && gpg --homedir /home/texlive/.gnupg \
+       --passphrase-file /home/texlive/.gnupg/passphrase  \
+       --armor --detach-sign --local-user 0x06BAB6BC $tarfile.sha512)
+
   ls -l $tarfile
 }
 
-- 
cgit v1.2.3