Automate release process for the Tor Browser.

We also instruct the RM to check the url with https for some added
authentication.

wiki/src/contribute/release_process/tor-browser.mdwn

@@ -4,28 +4,42 @@
 
 Have a look at
 
-* http://archive.torproject.org/tor-package-archive/torbrowser/
-* http://www.torproject.org/dist/torbrowser/
-* http://people.torproject.org/~mikeperry/builds/
-* http://people.torproject.org/~linus/builds/
+* https://archive.torproject.org/tor-package-archive/torbrowser/
+* https://www.torproject.org/dist/torbrowser/
+* https://people.torproject.org/~mikeperry/builds/
+* https://people.torproject.org/~linus/builds/
 
 and see if the desired version is available. We prefer
 `archive.torproject.org` since the other sources periodically cleans
-up old releases.
+up old releases. Set `DIST_URL` to the chosen url, and set `VERSION`
+to the desired TBB version, for example:
 
-Fetch the version's `sha256sums.txt` and `sha256sums.txt.asc`, verify
-with `gpg`, and:
+    DIST_URL=https://people.torproject.org/~mikeperry/builds/
+    VERSION=4.0
+
+Fetch the version's `sha256sums.txt` and `sha256sums.txt.asc` and
+verify with `gpg`:
+
+    wget ${DIST_URL}/${VERSION}/sha256sums.txt{,.asc} && \
+    gpg --verify sha256sums.txt.asc
+
+Filter the tarballs we want and make them available at build time,
+when the tarballs are fetched.
 
     grep "\<tor-browser-linux32-.*\.tar.xz$" sha256sums.txt > \
          config/chroot_local-includes/usr/share/tails/tbb-sha256sums.txt
 
-to make the checksums available at build time, when the tarballs are
-fetched. Then update the url to the one chosen above:
+Then update the url to the one chosen above:
 
-    echo "http://archive.torproject.org/tor-package-archive/torbrowser/" > \
+    echo "${DIST_URL}" | sed "s,^https://,http://," > \
          config/chroot_local-includes/usr/share/tails/tbb-dist-url.txt
 
 NOTE: We must use http (not http**s**) due to limitations/bugs in
 `apt-cacher-ng`, which often is used in Tails build
 environments. However, it is of no consequence since we verify the
 checksum file.
+
+Lastly, commit:
+
+    commit config/chroot_local-includes/usr/share/tails/tbb-*.txt \
+        -m "Upgrade TBB to ${VERSION}."