servicecomb-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From GitBox <...@apache.org>
Subject [GitHub] WillemJiang closed pull request #52: Add the verification guide in each downloads page
Date Mon, 02 Apr 2018 14:30:46 GMT
WillemJiang closed pull request #52: Add the verification guide in each downloads page
URL: https://github.com/apache/incubator-servicecomb-website/pull/52
 
 
   

This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:

As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):

diff --git a/_data/navigation.yml b/_data/navigation.yml
index 5d9ebb1..ed3c67b 100755
--- a/_data/navigation.yml
+++ b/_data/navigation.yml
@@ -136,9 +136,9 @@ t:
       - title: "Service-Center"
         children:
           - title: "Release Notes"
-            url: /release/sc-release-notes/
+            url: /release/service-center-release-notes/
           - title: "Donwloads"
-            url: /release/sc-downloads/
+            url: /release/service-center-downloads/
       - title: "Java-Chassis"
         children:
           - title: "Release Notes"
@@ -292,9 +292,9 @@ t:
       - title: "Service-Center"
         children:
           - title: "发布说明"
-            url: /cn/release/sc-release-notes/
+            url: /cn/release/service-center-release-notes/
           - title: "发布包"
-            url: /cn/release/sc-downloads/
+            url: /cn/release/service-center-downloads/
       - title: "Java-Chassis"
         children:
           - title: "发布说明"
diff --git a/_release/cn/java_chassis_downloads.md b/_release/cn/java_chassis_downloads.md
index fb51057..42168b7 100644
--- a/_release/cn/java_chassis_downloads.md
+++ b/_release/cn/java_chassis_downloads.md
@@ -11,4 +11,41 @@ last_modified_at: 2018-03-28T00:50:43-55:00
 
 * Apache ServiceComb (incubating) Service-Center 1.0.0-m1
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-src.zip.sha512)

-    - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.sha512)
\ No newline at end of file
+    - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.sha512)
+    
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-java-chassis-********.asc apache-servicecomb-incubating-java-chassis-*********
+
+or
+
+pgpv apache-servicecomb-incubating-java-chassis-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-java-chassis-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/){:target="_blank"}
and verify the downloads using sha512sum.
+    
\ No newline at end of file
diff --git a/_release/cn/saga_binaries.md b/_release/cn/saga_binaries.md
index 9e8ea8f..5b8ef89 100644
--- a/_release/cn/saga_binaries.md
+++ b/_release/cn/saga_binaries.md
@@ -12,3 +12,40 @@ last_modified_at: 2018-03-28T00:50:43-55:00
 * Apache ServiceComb (incubating) Saga 0.1.0
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.sha512)
     - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.sha512)
+
+
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-saga********.asc apache-servicecomb-incubating-saga-*********
+
+or
+
+pgpv apache-servicecomb-incubating-saga-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-saga-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/cn/saga_downloads.md b/_release/cn/saga_downloads.md
index 68b3b6f..5881584 100644
--- a/_release/cn/saga_downloads.md
+++ b/_release/cn/saga_downloads.md
@@ -12,3 +12,40 @@ last_modified_at: 2018-03-28T00:50:43-55:00
 * Apache ServiceComb (incubating) Saga 0.1.0
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.sha512)
     - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.sha512)
+
+
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-saga********.asc apache-servicecomb-incubating-saga-*********
+
+or
+
+pgpv apache-servicecomb-incubating-saga-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-saga-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/cn/service_center_binaries.md b/_release/cn/service_center_binaries.md
index f57a854..e352139 100644
--- a/_release/cn/service_center_binaries.md
+++ b/_release/cn/service_center_binaries.md
@@ -2,7 +2,7 @@
 title: "ServiceComb Service-Center Binaries"
 lang: cn
 ref: release
-permalink: /cn/release/sc-binary/
+permalink: /cn/release/service-center-binary/
 excerpt: "ServiceComb Service-Center Binaries"
 last_modified_at: 2018-03-28T00:50:43-55:00
 ---
@@ -14,3 +14,38 @@ last_modified_at: 2018-03-28T00:50:43-55:00
     - Windows [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.sha512)
     - Linux [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.sha512)
 
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-service-center-********.asc apache-servicecomb-incubating-service-center-*********
+
+or
+
+pgpv apache-servicecomb-incubating-service-center-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-service-center-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/cn/service_center_downloads.md b/_release/cn/service_center_downloads.md
index d4e45d4..da43238 100644
--- a/_release/cn/service_center_downloads.md
+++ b/_release/cn/service_center_downloads.md
@@ -2,7 +2,7 @@
 title: "ServiceComb Service-Center Downloads"
 lang: cn
 ref: release
-permalink: /cn/release/sc-downloads/
+permalink: /cn/release/service-center-downloads/
 excerpt: "ServiceComb Service-Center Downloads"
 last_modified_at: 2018-03-28T00:50:43-55:00
 ---
@@ -14,3 +14,38 @@ last_modified_at: 2018-03-28T00:50:43-55:00
     - Windows [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.sha512)
     - Linux [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.sha512)
 
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-service-center-********.asc apache-servicecomb-incubating-service-center-*********
+
+or
+
+pgpv apache-servicecomb-incubating-service-center-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-service-center-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/cn/service_center_releaseNotes.md b/_release/cn/service_center_releaseNotes.md
index f8cf005..b11aa00 100644
--- a/_release/cn/service_center_releaseNotes.md
+++ b/_release/cn/service_center_releaseNotes.md
@@ -2,7 +2,7 @@
 title: "Release Notes"
 lang: cn
 ref: release
-permalink: /cn/release/sc-release-notes/
+permalink: /cn/release/service-center-release-notes/
 excerpt: "Release Notes"
 last_modified_at: 2018-03-28T00:50:43-55:00
 ---
diff --git a/_release/java_chassis_downloads.md b/_release/java_chassis_downloads.md
index f13158b..d70491a 100644
--- a/_release/java_chassis_downloads.md
+++ b/_release/java_chassis_downloads.md
@@ -11,4 +11,43 @@ last_modified_at: 2018-03-28T00:50:43-55:00
 
 * Apache ServiceComb (incubating) Service-Center 1.0.0-m1
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-src.zip.sha512)

-    - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.sha512)
\ No newline at end of file
+    - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/1.0.0-m1/apache-servicecomb-incubating-java-chassis-distribution-1.0.0-m1-bin.zip.sha512)
+    
+    
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-java-chassis-********.asc apache-servicecomb-incubating-java-chassis-*********
+
+or
+
+pgpv apache-servicecomb-incubating-java-chassis-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-java-chassis-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-java-chassis/){:target="_blank"}
and verify the downloads using sha512sum.
+
+    
\ No newline at end of file
diff --git a/_release/saga_binaries.md b/_release/saga_binaries.md
index e961004..ccc5fc1 100644
--- a/_release/saga_binaries.md
+++ b/_release/saga_binaries.md
@@ -12,3 +12,40 @@ last_modified_at: 2018-03-28T00:50:43-55:00
 * Apache ServiceComb (incubating) Saga 0.1.0
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.sha512)
     - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.sha512)
+
+
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-saga********.asc apache-servicecomb-incubating-saga-*********
+
+or
+
+pgpv apache-servicecomb-incubating-saga-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-saga-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/saga_downloads.md b/_release/saga_downloads.md
index 542bc94..29b6dc2 100644
--- a/_release/saga_downloads.md
+++ b/_release/saga_downloads.md
@@ -12,3 +12,40 @@ last_modified_at: 2018-03-28T00:50:43-55:00
 * Apache ServiceComb (incubating) Saga 0.1.0
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-src.zip.sha512)
     - Distribution [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/0.1.0/apache-servicecomb-incubating-saga-distribution-0.1.0-bin.zip.sha512)
+
+
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-saga********.asc apache-servicecomb-incubating-saga-*********
+
+or
+
+pgpv apache-servicecomb-incubating-saga-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-saga-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-saga/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/service_center_binaries.md b/_release/service_center_binaries.md
index 070c86a..23df927 100644
--- a/_release/service_center_binaries.md
+++ b/_release/service_center_binaries.md
@@ -13,3 +13,39 @@ last_modified_at: 2018-03-28T00:50:43-55:00
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-src.zip.sha512)

     - Windows [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.sha512)
     - Linux [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.sha512)
+
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-service-center-********.asc apache-servicecomb-incubating-service-center-*********
+
+or
+
+pgpv apache-servicecomb-incubating-service-center-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-service-center-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/service_center_downloads.md b/_release/service_center_downloads.md
index 2b916d8..cac1a27 100644
--- a/_release/service_center_downloads.md
+++ b/_release/service_center_downloads.md
@@ -2,7 +2,7 @@
 title: "ServiceComb Service-Center Downloads"
 lang: en
 ref: release
-permalink: /release/sc-downloads/
+permalink: /release/service-center-downloads/
 excerpt: "ServiceComb Service-Center Downloads"
 last_modified_at: 2018-03-28T00:50:43-55:00
 ---
@@ -13,3 +13,39 @@ last_modified_at: 2018-03-28T00:50:43-55:00
     - Source [[src]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-src.zip)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-src.zip.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-src.zip.sha512)

     - Windows [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-windows-amd64.tar.gz.sha512)
     - Linux [[Binary]](https://apache.org/dyn/closer.cgi/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz)
[[asc]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.asc)
[[sha512]](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/1.0.0-m1/apache-servicecomb-incubating-service-center-1.0.0-m1-linux-amd64.tar.gz.sha512)
+
+**Verifying the release**
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA
signatures.
+ The PGP signatures can  be verified using GPG or PGP. 
+ Please download the [KEYS](https://www.apache.org/dist/incubator/servicecomb/KEYS){:target="_blank"}
as well as the asc signature files for relevant distribution. It is recommended to get these
files from the main distribution [directory](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and not from the mirrors.
+ ```
+ gpg -i KEYS
+ 
+ or
+ 
+ pgpk -a KEYS
+ 
+ or
+ 
+ pgp -ka KEYS
+
+```
+
+To verify the binaries/sources you can download the relevant asc files for it from main distribution
directory and follow the below guide.
+
+```
+gpg --verify apache-servicecomb-incubating-service-center-********.asc apache-servicecomb-incubating-service-center-*********
+
+or
+
+pgpv apache-servicecomb-incubating-service-center-********.asc
+
+or 
+
+pgp apache-servicecomb-incubating-service-center-********.asc
+
+
+```
+
+Alternatively you can download the SHA signatures from main distribution [repo](https://www.apache.org/dist/incubator/servicecomb/incubator-servicecomb-service-center/){:target="_blank"}
and verify the downloads using sha512sum.
diff --git a/_release/service_center_releaseNotes.md b/_release/service_center_releaseNotes.md
index 5cb9e2f..c1bfebb 100644
--- a/_release/service_center_releaseNotes.md
+++ b/_release/service_center_releaseNotes.md
@@ -2,7 +2,7 @@
 title: "Release Notes"
 lang: en
 ref: release
-permalink: /release/sc-release-notes/
+permalink: /release/service-center-release-notes/
 excerpt: "Release Notes"
 last_modified_at: 2018-03-28T00:50:43-55:00
 ---


 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

Mime
View raw message