<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE document PUBLIC "-//APACHE//DTD Documentation V1.1//EN" "document-v11.dtd"
[
  <!ENTITY % xmlsec_entities SYSTEM "./xmlsec_entities.ent"> 
  %xmlsec_entities; 
]>
<!--
Copyright 2003-2004 The Apache Software Foundation

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->

<document> 
  <header> 
    <title>Downloading the Libraries</title> 
  </header> 
  <body> 
	<section>
	  <title>Obtaining the Libraries</title>
	  <p>
		Source and binary distributions for both the Java and C++ libraries
		are available from from the 
		<jump href="http://xml.apache.org/security/dist/">
		  XML project site</jump> only.  Current
		distributions are <em>not</em> available from the mirrors.
	  </p>
	</section>
    <section> 
      <title>Validating Distribution Signatures</title>
      <p>
		All distributions are provided with signature <em>.sig</em> files.
		These contain PGP signatures for the related distribution.
		You should validate these using the keys found in the
		<jump href="http://www.apache.org/dist/xml/security/KEYS">
		  key file</jump> downloaded from the Apache site.
	  </p>
	  <p/>
<!--
	  This is not valid if the mirror is not available
	  <warning>
		You should always use a key file downloaded from the Apache site
		directly rather than from a mirror.
	  </warning>
-->
	  <p>
		Verification can be performed using :
	  </p>
	  <source>
% pgpk -a KEYS
% pgpv xml-security-bin-1_2_1.zip.sig
  <em>or</em>
% pgp -ka KEYS
% pgp xml-security-bin-1_2_1.zip.sig
  <em>or</em>
% gpg --import KEYS
% gpg --verify xml-security-bin-1_2_1.zip.sig
	  </source>
	</section>
    <section>
      <title>SVN Download</title>
      <p>
		For the adventurous, this project's SVN repository can be checked 
		out through anonymous SVN with the following instruction 
		set.
      </p>
      <source>svn co https://svn.apache.org/repos/asf/xml/security/trunk xml-security</source>
      <p>
               This will check out the code into a subdirectory named
               "xml-security".  The checkout will contain both the Java and
               the C++ source.
      </p>
	</section>
  </body>
</document>


<!-- Keep this comment at the end of the file
Local variables:
mode: xml
sgml-omittag:nil
sgml-shorttag:nil
sgml-namecase-general:nil
sgml-general-insert-case:lower
sgml-minimize-attributes:nil
sgml-always-quote-attributes:t
sgml-indent-step:2
sgml-indent-data:t
sgml-parent-document:nil
sgml-exposed-tags:nil
sgml-local-catalogs:nil
sgml-local-ecat-files:nil
End:
-->