Merge pull request #603 from sbellem/ae-repro-verif-fix-links

Fix prebuilt AE downloads links.

Signed-off-by: Zhang Lili Z <lili.z.zhang@intel.com>

Author: lzha101

linux/reproducibility/ae_reproducibility_verifier/README.md

@@ -17,7 +17,9 @@ So this doc will give an approach using your local AE builds to verify Intel(R)
 * <a id="materials">Prepare below 4 materials</a>
 
  1. intel_signed_ae:  
- It is the Intel(R) prebuilt AE to be verified, and can be downloaded from (https://download.01.org/intel-sgx/latest/intel-latest/)
+ It is the Intel(R) prebuilt AE to be verified, and can be downloaded from
+ https://download.01.org/intel-sgx/latest/dcap-latest/linux/ (for ECDSA-based
+ attestation) or https://download.01.org/intel-sgx/latest/linux-latest/.
  2. user_build_unsigned_ae:   
  The unsigned AE is built by yourself in an SGX docker container. You can follow the [reproducibility README.md](../README.md) to build all AEs in a container.
  3. user_private_key:  

linux/reproducibility/ae_reproducibility_verifier/reproducibility_verifier.sh

@@ -39,8 +39,10 @@ The script is to verify Intel(R) prebuilt AEs are:
     * Signed using same config.xml that being opensourced
 
 Arguments:
-    intel_signed_ae:		It's the Intel(R) prebuilt AE to be verified, 
-				and can be downloaded from https://download.01.org/intel-sgx/latest/intel-latest/
+    intel_signed_ae:		It's the Intel(R) prebuilt AE to be verified,
+				and can be downloaded from
+				https://download.01.org/intel-sgx/latest/dcap-latest/linux/ or
+				https://download.01.org/intel-sgx/latest/linux-latest/.
     user_build_unsigned_ae:	It's built by yourself in an SGX docker container.
     user_private_key:		It's generated by yourself for signing user_build_unsigned_ae in bullet 1.
     intel_ae_config_xml:	It's the opensource enclave config.xml of Intel(R) prebuilt AE,