On Tue, Jan 19, 2010 at 02:10, Sidney Markowitz <[email protected]> wrote: > Justin Mason wrote, On 19/01/10 12:55 PM: >> proposed release announcement mail is there, too. We need 3 +1 votes >> and no -1's over the next 72 hours to "bless" this as an official >> release. > > I have an issue with the proposed release announcement. Not enough for a > hard -1 vote, but we can change it without canceling the release, correct? > > It says to install rules by either running sa-update as root, or going > through a series of steps for installing from files that has you > download GPG.KEY using curl and then importing the key and then running > sa-update on the downloaded tarball.
Actually, this *is* wrong, but not in the way you thought ;) As noted, the rule-update signing key has not changed, since it was already 4096-bit. This means that the "curl" step is not necessary at all, since the distributed sa-update already knows about that key and trusts it out-of-the-box. I've opened this as bug 6292 to get it fixed. -- --j.
