> Build a source RPM, create its md5sum and "gpg --clearsign" it, then upload it > to a public server. Update the Bugzilla entry with the URL of the source RPM > and inform the mailing list about your work.
We decided to use "sha1sum"s for the "gpg --clearsign"ed Bugzilla comments, didn't we? If you're signing the RPM, you would use "rpm --addsign", right?
Thanks, John
