encryption 1.5.1

[jnweiger]

Reason

• Release needed for Use binary encoding setting for HSM #261 - Don't use binary encoding with HSM

Product approval

• Verify transifex commits are in master: If a folder https://github.com/owncloud//tree/master/l10n exists, then https://drone.owncloud.com/owncloud/ should receive nightly '[tx] updated from transifex` ...
• Ping pmaier to check info.xml description and screenshot
• Get approval on translations from pmaier - send the date of the last tx commit from drone to Patrick

QA

• Create QA Milestone and set the description to $version
• Move items from development to qa
• Create release branch with the format "release-$version"
• Create "$version Testplan" (QA templates) -> [QA] 1.5.1 Testplan #263
• copy new/reopened issues from the previous release ticket as 'Issues to review' below.

Documentation

• Changes in the docs needed? If so create issue in owncloud/docs.

Marketing

• Ping @owncloud/marketing
• Request App image if app is new or changed fundamentally

Build

All actions to be done on the release branch from here:

• Bump version in info.xml (no version suffix)
• Check php version dependency in info.xml
• Check minimum ownCloud version dependency in info.xml
• Change CHANGELOG.md 'Unreleased' to '$version' (today's date)

Beta/RC

• Create github tag for v${version}RC1 on release branch
• Build and sign RC tarball from github tag v${version}RC1 (see
  handbook for how to build)
• Upload as Github release using changelog entries
• Manual explorative testing:
  • If this is an enterprise app: Enabling the app must start the grace period
  • If this is the initial release of an app: Check that the minimum version constraint resolves correctly
  • Changelog testing
  • Test and document in testplan => Final "Go" from QA (set 'QA-ready' label) => else do another RC after fixing issues in the "release-$version" branch

Final

• Check that no documentation issues are pending
• Rename last RC tarball to final
• Create github tag for final v${version} on release branch
• Upload as Github release using changelog entries
• Ping #marketing channel to coordinate publishing

Publishing

Not done. Encryption is special.

• Upload tarball to marketplace (see handbook in confluence for details)
• Publish tarball for customers (see handbook in confluence for details) - https://customer.owncloud.com and https://portal.owncloud.com
• Send mail to release-coordination with link to this ticket and to the changelog
• Copy email to rocket chat #updates channel

Post-release

• Add a new 'Unreleased' section in CHANGELOG.md (and also update links at the bottom!)
• Create PR to merge changes back to the master branch with description "Closes #XYZ" with the release ticket number
• Rename QA milestone to $version and close the milestone
• Update https://confluence.owncloud.com/display/PROD/Upcoming+Releases
• Ensure release template is up to date
• Ensure the testplan template (community or enterprise) is up to date
• Close the testplan issue

[jnweiger]

Issues opened while testing

• [QA] module does not exist error after disabling encryption [QA] module does not exist error after disabling encryption #280
• update encryption size overhead note update encryption size overhead note docs#3636
• [QA] moving encrypted file to unencrypted FTP storage and back causes a decrypt error [QA] moving encrypted file to unencrypted FTP storage and back causes a decrypt error #281
• [QA] files:transfer-ownership fails unless manually decrypted [QA] files:transfer-ownership fails unless manually decrypted #285
• hsmdaemon install consistency and accuracy hsmdaemon install consistency and accuracy docs#3710
• [QA] excessive log messages from hsmdaemon [QA] excessive syslog messages from hsmdaemon #286
• [QA] enabling encryption on non-empty external storage causes errors [QA] enabling encryption on non-empty external storage causes errors #287
• [QA] encryption with hsmdaemon works without license, but hsmdaemon is proprietary [QA] encryption with hsmdaemon works without license, but hsmdaemon is proprietary #288

[mmattel]

owncloud/docs#3636 --> merged and backported

[jnweiger]

Changelog testing done as part of #263 (comment)

• hsmdaemon does both legacy base64 and new binary encoding, just fine.
• occ fix-encrypted-version prints messages "No fix found ..., restored version to original" e.g. for unencrypted files.