[incubator-dubbo-website] branch asf-site updated: add content to release guide.

[li...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

liujun pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/incubator-dubbo-website.git


The following commit(s) were added to refs/heads/asf-site by this push:
     new 2ee400e  add content to release guide.
2ee400e is described below

commit 2ee400e7f691c767f7822246e1d3544c568af2cb
Author: ken.lj <ke...@gmail.com>
AuthorDate: Wed Aug 29 14:34:37 2018 +0800

    add content to release guide.
---
 blog/en-us/prepare-an-apache-release.md | 20 ++++++++++++++++----
 blog/zh-cn/prepare-an-apache-release.md | 20 +++++++++++++++-----
 2 files changed, 31 insertions(+), 9 deletions(-)

diff --git a/blog/en-us/prepare-an-apache-release.md b/blog/en-us/prepare-an-apache-release.md
index b15a1c5..c193906 100644
--- a/blog/en-us/prepare-an-apache-release.md
+++ b/blog/en-us/prepare-an-apache-release.md
@@ -217,12 +217,24 @@ modifications and taggings related to ${release_version} Release Candidates are
 The verification link includes but is not limited to the following contents and forms:
 
 1. Check signatures and hashes are good
+* sha512
 ```sh
-shasum -c apache-dubbo-incubating-${release_version}-source-release.zip.sha512
-shasum -c apache-dubbo-incubating-${release_version}-bin-release.zip.sha512
-gpg2 --keyserver pgpkeys.mit.edu --recv-key 208B0AB1D63011C7
-gpg2 --verify apache-dubbo-incubating-${release_version}-source-release.zip.asc apache-dubbo-incubating-${release_version}-source-release.zip
+$ shasum -c apache-dubbo-incubating-${release_version}-source-release.zip.sha512
+$ shasum -c apache-dubbo-incubating-${release_version}-bin-release.zip.sha512
 ```
+* gpg
+   * If it's your first time verify a release candidte, you should import public keys first.  
+   ```sh
+   $ curl https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS >> KEYS # download public keys to local directory
+   $ gpg --import KEYS # import keys
+   $ gpg —edit-key liujun
+     > trust # 输入trust子命令
+   ```
+   * Now, you can verify signature with command
+   ```
+   gpg --verify apache-dubbo-incubating-2.6.3-source-release.zip.asc apache-dubbo-incubating-2.6.3-source-release.zip
+   ```
+
 
 2. Unzip apache-dubbo-incubating-${release_version}-source-release.zip to the default directory and check the following:
 
diff --git a/blog/zh-cn/prepare-an-apache-release.md b/blog/zh-cn/prepare-an-apache-release.md
index 9a5f6bc..ea9d460 100644
--- a/blog/zh-cn/prepare-an-apache-release.md
+++ b/blog/zh-cn/prepare-an-apache-release.md
@@ -217,13 +217,23 @@ https://dist.apache.org/repos/dist/dev/incubator/dubbo/${release_version}/
 然后，开始验证环节，验证包含但不限于以下内容和形式
 
 1. Check signatures and hashes are good
+* sha512
 ```sh
-shasum -c apache-dubbo-incubating-${release_version}-source-release.zip.sha512
-shasum -c apache-dubbo-incubating-${release_version}-bin-release.zip.sha512
-gpg2 --keyserver pgpkeys.mit.edu --recv-key 208B0AB1D63011C7
-gpg2 --verify apache-dubbo-incubating-${release_version}-source-release.zip.asc apache-dubbo-incubating-${release_version}-source-release.zip
+$ shasum -c apache-dubbo-incubating-${release_version}-source-release.zip.sha512
+$ shasum -c apache-dubbo-incubating-${release_version}-bin-release.zip.sha512
 ```
-
+* gpg
+   * If it's your first time verify a release candidte, you should import public keys first.  
+   ```sh
+   $ curl https://dist.apache.org/repos/dist/dev/incubator/dubbo/KEYS >> KEYS # download public keys to local directory
+   $ gpg --import KEYS # import keys
+   $ gpg —edit-key liujun
+     > trust # 输入trust子命令
+   ```
+   * Now, you can verify signature with command
+   ```
+   gpg --verify apache-dubbo-incubating-2.6.3-source-release.zip.asc apache-dubbo-incubating-2.6.3-source-release.zip
+   ```
 2. Unzip apache-dubbo-incubating-${release_version}-source-release.zip to the default directory and check the following:
 
 - Directory with 'incubating' in name