diff options
Diffstat (limited to 'docs/release-verification.md')
| -rw-r--r-- | docs/release-verification.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/release-verification.md b/docs/release-verification.md index 408bab9..04d18a3 100644 --- a/docs/release-verification.md +++ b/docs/release-verification.md | |||
| @@ -81,6 +81,12 @@ Publish, alongside the assets, `SHA256SUMS` and `SHA256SUMS.asc`, and update | |||
| 81 | is ever rotated, announce the new fingerprint clearly and update the embedded | 81 | is ever rotated, announce the new fingerprint clearly and update the embedded |
| 82 | key in `verify-release.sh`. | 82 | key in `verify-release.sh`. |
| 83 | 83 | ||
| 84 | For Windows releases with managed Tor built in, run `make windows-tor`. It | ||
| 85 | creates `Bitflash-*-windows-with-tor.zip` by downloading the Tor Expert Bundle, | ||
| 86 | checking the pinned SHA256 in `scripts/package-windows-tor.sh`, and placing | ||
| 87 | `tor/tor.exe` next to `Bitflash.exe`. Include that zip in `SHA256SUMS` like any | ||
| 88 | other release asset. | ||
| 89 | |||
| 84 | ## Why this matters | 90 | ## Why this matters |
| 85 | 91 | ||
| 86 | `SHA256SUMS` alone protects against a broken download, but not against someone | 92 | `SHA256SUMS` alone protects against a broken download, but not against someone |