gpg.md

  https://cwiki.apache.org/confluence/display/NETBEANS/Apache+NetBeans+Release+README

Check the SHA512 checksums:

$> find . -name '*.sha512' -execdir sha512sum --check '{}' \;
  #alternative
$> for z in $(find . -name '*.sha512'); do cd $(dirname $z); sha512sum ./$(basename $z) --check --quiet;\
    cd - >/dev/null; done

Sign the Release Files

  $> find . -name '*.zip' -exec gpg -u [email protected] --armor --output {}.asc --detach-sign {} \;
# Stop here if nbms are not going to be published
  $> find . -name '*.nbm' -exec gpg -u [email protected] --armor --output {}.asc --detach-sign {} \;
  $> find . -name '*.gz' -exec gpg -u [email protected] --armor --output {}.asc --detach-sign {} \;
# nbm licenses
  $> find . -name '*.license' -exec gpg -u [email protected] --armor --output {}.asc --detach-sign {} \;
# nbm/updates.xml and nbm/tasks.jar
  $> find . -name '*.jar' -exec gpg -u [email protected] --armor --output {}.asc --detach-sign {} \;
  $> find . -name '*.xml' -exec gpg -u [email protected] --armor --output {}.asc --detach-sign {} \;

Verify Signatures

  $> find . -name '*.asc' -exec gpg --verify {} \;