Re: [Savannah-hackers] uploading files to download areas with the new instructions

[Hugo Gayosso]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Juri Pakaste <address@hidden> writes:

> Hi, I tried to upload an archive to the download area of my project,
> Straw, with the help of your instructions at
> https://savannah.nongnu.org/forum/forum.php?forum_id=2838 .
> 
> However, nothing seemed to happen, and I'm left wondering if I did
> something wrong (I'm pretty much a GPG newbie.) I set my GPG public key
> via my account prefs; I copy pasted the whole -----BEGIN GPG PUBLIC KEY
> BLOCK---- .... ----END PGP etc thingy into the Change GPG Key textarea;
> is that what I was supposed to do? A few hours after that (and again
> just now), I tried to upload straw-0.21.2.tar.gz and
> straw-0.21.2.tar.gz.sig, which at least GPG said was ok. But nothing
> appears in http://savannah.nongnu.org/download/straw/ .
> 
> Thanks for any help.

[...]

Try following these instructions and if they fail, let us know.

https://savannah.gnu.org/forum/forum.php?forum_id=2838


Files that were in the download areas on Savannah before the
compromise can be downloaded from ftp://ftp.gnu.org/savannah/files.
We kindly ask project administrators to verify the integrity of those
files and use the following procedure to upload them to the new file
areas on Savannah.

Savannah has a new system to handle uploads of files to the download
area in a secure way. Project administrators are the only ones
allowed to upload files at this time.

To begin, please add your GPG key by logging in to Savannah and
visiting one of the following URLs:

https://savannah.gnu.org/account/change.php?item=gpgkey

https://savannah.nongnu.org/account/change.php?item=gpgkey

Within 2 hours the system should have updated the files necessary for
uploads.

After that time, use the following procedure to upload files:

For each upload destined for Savannah, two files need to be
uploaded via ftp to the site.

(1) File to distributed (eg. foo.tar.gz)

(2) Detached GPG binary signature for (1) (using gpg -b)
(eg. foo.tar.gz.sig)

The files should be uploaded via anonymous ftp to savannah.gnu.org.
and placed in the /incoming/savannah/<projectname> directory. For
example, to place foo.tar.gz in project bar's download area, upload
foo.tar.gz and foo.tar.gz.sig to:

ftp://savannah.gnu.org/incoming/savannah/bar

Uploads are processed every five minutes. Uploads that are in
progress when the upload processing script is running are handled
properly, so do not worry about the timing of your upload.

Currently there is no easy way to manipulate (move, rename, delete, or
work in subdirectories) with the new system. If you are an
experienced PHP programmer and would like to help add this
functionality, please contact us.

If you have questions about this process, please contact us at
<<address@hidden>>.

Thank you for your patience. 
- -- 
Hugo Gayosso
GNU Savannah Support
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAOuDLMNObVRBZveYRAq0WAJ4xbRicdZh1XVzmUTQHrfUxYKOPqgCeL0zM
oCaDZ99ZpHElT5ZNPAZGmOk=
=eG5D
-----END PGP SIGNATURE-----