Hi,

I have fixed these hyperlinks.

- KEYS, SHA512, ASC are linked to the dist website  [0]-[4]
- binary and source files are linked to the mirrors [5][6]
- release notes file is on the iotdb website, [7]
- Verifying Hashes and Signatures section is added

Hope it meets Apache's requirements.

[0] https://dist.apache.org/repos/dist/release/incubator/iotdb/KEYS
[1]
https://www.apache.org/dist/incubator/iotdb/0.8.0-incubating/apache-iotdb-0.8.0-incubating-bin.zip.sha512
[2]
https://www.apache.org/dist/incubator/iotdb/0.8.0-incubating/apache-iotdb-0.8.0-incubating-bin.zip.asc
[3]
https://www.apache.org/dist/incubator/iotdb/0.8.0-incubating/apache-iotdb-0.8.0-incubating-source-release.zip.sha512
[4]
https://www.apache.org/dist/incubator/iotdb/0.8.0-incubating/apache-iotdb-0.8.0-incubating-source-release.zip.asc
[5]
https://www.apache.org/dyn/closer.cgi/incubator/iotdb/0.8.0-incubating/apache-iotdb-0.8.0-incubating-bin.zip
[6]
https://www.apache.org/dyn/closer.cgi/incubator/iotdb/0.8.0-incubating/apache-iotdb-0.8.0-incubating-source-release.zip
[7] http://iotdb.apache.org/#/Materials/Release%20Notes

Best,
-----------------------------------
Xiangdong Huang
School of Software, Tsinghua University

 黄向东
清华大学 软件学院


Julian Feinauer <[email protected]> 于2019年8月23日周五 上午3:16写道:

> Hi xiangdong,
>
> good catch there... I'm unsure how to proceed as we are not allowed to
> change the RELEASE NOTES in dist but I think it should be fine to copy the
> content on the homepage (we do this e.g. for PLC4X that way, see here
> http://plc4x.apache.org/users/download.html ).
> Then you can reformat it.
> What do you think?
>
> Julian
>
> Am 22.08.19, 07:11 schrieb "Xiangdong Huang" <[email protected]>:
>
>     Hi,
>
>     Done.
>
>     One more thing: the format of current RELEASE_NOTES file on
>
> https://www.apache.org/dist/incubator/iotdb/0.8.0-incubating/RELEASE_NOTES.md
>     is
>     incorrect. On MacOS, there is no line break... Therefore, I did not
> adopt
>     this url.
>
>     Best,
>
>     -----------------------------------
>     Xiangdong Huang
>     School of Software, Tsinghua University
>
>      黄向东
>     清华大学 软件学院
>
>
>     Xiangdong Huang <[email protected]> 于2019年8月22日周四 下午12:48写道:
>
>     > Hi,
>     >
>     > do we need the hyperlink of KEYS?
>     >
>     > I can only get the key file from
>     > https://dist.apache.org/repos/dist/dev/incubator/iotdb/KEYS
>     > However, should it be at
>     > https://dist.apache.org/repos/dist/incubator/iotdb/KEYS (i.e., no
> "dev")
>     >
>     > Best,
>     >
>     >
>     > -----------------------------------
>     > Xiangdong Huang
>     > School of Software, Tsinghua University
>     >
>     >  黄向东
>     > 清华大学 软件学院
>     >
>     >
>     > Julian Feinauer <[email protected]> 于2019年8月22日周四
> 上午12:24写道:
>     >
>     >> Just a short addition:
>     >> I copied from the flink site the following statement (which should
>     >> suffice), regarding the hash verification:
>     >>
>     >>
>     >> Verifying Hashes and Signatures
>     >>
>     >> Along with our releases, we also provide sha512 hashes in *.sha512
> files
>     >> and cryptographic signatures in *.asc files. The Apache Software
> Foundation
>     >> has an extensive tutorial to verify hashes and signatures which you
> can
>     >> follow by using any of these release-signing KEYS.
>     >>
>     >> Am 21.08.19, 18:22 schrieb "Julian Feinauer" <
>     >> [email protected]>:
>     >>
>     >>     Hey,
>     >>
>     >>     I got some further requests to fix which we should address
> before the
>     >> announce goes out...
>     >>     It would be good if someone could help with the fixes
>     >>
>     >>     =======================
>     >>     The download page must only use https://www.apache.org/dist/...
> for
>     >> the
>     >>     KEYS, hashes and sigs.
>     >>     The source and binary artifacts must only use the mirror
> system, not
>     >>     /dist/...
>     >>
>     >>     The public download page must not link directly to the source
> code in
>     >>     GitHub, as that has not been formally released.
>     >>     Such links should be restricted to pages intended for
> developers.
>     >>
>     >>     The same considerations apply to the News section.
>     >>
>     >>     The download page needs say that downloaders should verify
> releases,
>     >> and
>     >>     describe how to do so using KEYS + sig, or hash.
>     >>     =======================
>     >>
>     >>     Thanks!
>     >>     Julian
>     >>
>     >>     Am 21.08.19, 15:28 schrieb "Julian Feinauer" <
>     >> [email protected]>:
>     >>
>     >>         Hi,
>     >>
>     >>         thanks fort he fast fix, I already resend the ANNOUNCE
> mail.. so
>     >> hopefully it comes through soon __
>     >>
>     >>         Julian
>     >>
>     >>         Am 21.08.19, 12:59 schrieb "Xiangdong Huang" <
> [email protected]
>     >> >:
>     >>
>     >>             Hi,
>     >>
>     >>             As something is wrong in jenkins server, I have manually
>     >> deployed the
>     >>             latest website.
>     >>
>     >>             Now http://iotdb.apache.org/#/Download has correct
> urls.
>     >>
>     >>             Best,
>     >>             -----------------------------------
>     >>             Xiangdong Huang
>     >>             School of Software, Tsinghua University
>     >>
>     >>              黄向东
>     >>             清华大学 软件学院
>     >>
>     >>
>     >>             Xiangdong Huang <[email protected]> 于2019年8月21日周三
> 下午6:34写道:
>     >>
>     >>             > Hi,
>     >>             >
>     >>             > I fixed it. Please review PR
>     >>             >
> https://github.com/apache/incubator-iotdb-website/pull/30
>     >>             > Or I will merge it a short time later.
>     >>             >
>     >>             > Best,
>     >>             > -----------------------------------
>     >>             > Xiangdong Huang
>     >>             > School of Software, Tsinghua University
>     >>             >
>     >>             >  黄向东
>     >>             > 清华大学 软件学院
>     >>             >
>     >>             >
>     >>             > Julian Feinauer <[email protected]>
>     >> 于2019年8月21日周三 下午6:10写道:
>     >>             >
>     >>             >> Hi,
>     >>             >>
>     >>             >> Just got a mail from the announce guys that we need
> a fix
>     >> on our download
>     >>             >> section :
>     >>             >>
>     >>             >> The links to iotdb 0.8.0 mirrors are ok.
>     >>             >> But the links to ASC and SHA512 must be direct links
> to
>     >>             >> https://www.apache.org/dist/incubator/iotdb/... and
> not
>     >> to mirrors.
>     >>             >>
>     >>             >> Could someone take care of that?
>     >>             >> Then I can resubmit the announce mail :)
>     >>             >>
>     >>             >> Thanks!
>     >>             >> Julian
>     >>             >>
>     >>             >> Von meinem Mobiltelefon gesendet
>     >>             >>
>     >>             >
>     >>
>     >>
>     >>
>     >>
>     >>
>     >>
>     >>
>
>
>

Reply via email to