added SHA verification links
diff --git a/download.md b/download.md
index c1421a5..443d7f6 100644
--- a/download.md
+++ b/download.md
@@ -6,8 +6,13 @@
The latest stable release of Thrift is {{ site.current_release }} (released on {{ site.current_release_date }}).
* [thrift-{{ site.current_release }}.tar.gz]({{ site.mirror_url }}/thrift/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz) \[[PGP]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.asc)\]
+\[[SHA256]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.sha256)\]
+\[[SHA1]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.sha1)\]
\[[MD5]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.md5)\]
-* [Thrift compiler for Windows (thrift-{{ site.current_release }}.exe)]({{ site.mirror_url }}/thrift/{{ site.current_release }}/thrift-{{ site.current_release }}.exe) \[[PGP]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.exe.asc)\] \[[MD5]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.exe.md5)\]
+* [Thrift compiler for Windows (thrift-{{ site.current_release }}.exe)]({{ site.mirror_url }}/thrift/{{ site.current_release }}/thrift-{{ site.current_release }}.exe) \[[PGP]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.exe.asc)\]
+\[[SHA256]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.exe.sha256)\]
+\[[SHA1]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.exe.sha1)\]
+\[[MD5]({{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.exe.md5)\]
## Maven artifact
<pre><code><dependency>
@@ -17,7 +22,7 @@
</dependency>
</code></pre>
-When downloading from a mirror, please be sure to [verify](http://www.apache.org/info/verification.html) the checksums and signature (see the MD5 and PGP links above). The [KEYS]({{ site.release_url }}/KEYS) file contains the public key(s) used for signing releases.
+When downloading from a mirror, please be sure to [verify](http://www.apache.org/info/verification.html) the checksums and signature (see the SHA256/SHA1/MD5 and PGP links above). The [KEYS]({{ site.release_url }}/KEYS) file contains the public key(s) used for signing releases.
---
diff --git a/index.md b/index.md
index df4651d..baec2d6 100644
--- a/index.md
+++ b/index.md
@@ -41,6 +41,14 @@
</p>
<p>
<small>
+ <a href="{{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.sha256">SHA256</a>
+ </small>
+ |
+ <small>
+ <a href="{{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.sha1">SHA1</a>
+ </small>
+ |
+ <small>
<a href="{{ site.release_url }}/{{ site.current_release }}/thrift-{{ site.current_release }}.tar.gz.md5">MD5</a>
</small>
|