blob: 14f3788d9fe0eca0fa8e12f46dde3f9d2e2af1fe [file] [log] [blame]
<?xml version="1.0"?>
<document url="./download.xml">
<properties>
<title>Downloading - The Apache Struts Web Application Framework</title>
<author email="martinc@apache.org">Martin Cooper</author>
</properties>
<body>
<section name="Downloading Struts" href="downloading">
<p>
Use the links below to download Apache Struts from one of our mirrors. You
<strong>must</strong> <a href="#verify">verify the integrity</a> of the
downloaded files using signatures downloaded from our main distribution
directory.
</p>
<section name="Mirror" href="mirror">
<p>
[if-any logo]
<a href="[link]"><img align="right" src="[logo]" border="0" alt="logo" /></a>
[end]
The currently selected mirror is <b>[preferred]</b>. If you encounter
a problem with this mirror, please select another mirror. If all
mirrors are failing, there are <i>backup</i> mirrors (at the end of
the mirrors list) that should be available.
</p>
<form action="[location]" method="get" id="SelectMirror">
Other mirrors:
<select name="Preferred">
[if-any http]
[for http]<option value="[http]">[http]</option>[end]
[end]
[if-any ftp]
[for ftp]<option value="[ftp]">[ftp]</option>[end]
[end]
[if-any backup]
[for backup]<option value="[backup]">[backup] (backup)</option>[end]
[end]
</select>
<input type="submit" value="Change" />
</form>
<p>
You may also consult the
<a href="http://www.apache.org/mirrors/">complete list of mirrors</a>.
</p>
</section>
<section name="Struts 1.2.8" href="struts128">
<p>
Struts 1.2.8 is the latest production release of Struts. It is available
in a binary distribution, a source distribution, and a minimal library
distribution.
</p>
<ul>
<li>Binaries:
<ul>
<li>
<a href="[preferred]/struts/binaries/struts-1.2.8-bin.zip">struts-1.2.8-bin.zip</a>
[<a href="http://www.apache.org/dist/struts/binaries/struts-1.2.8-bin.zip.asc">PGP</a>]
[<a href="http://www.apache.org/dist/struts/binaries/struts-1.2.8-bin.zip.md5">MD5</a>]
</li>
<li>
<a href="[preferred]/struts/binaries/struts-1.2.8-bin.tar.gz">struts-1.2.8-bin.tar.gz</a>
[<a href="http://www.apache.org/dist/struts/binaries/struts-1.2.8-bin.tar.gz.asc">PGP</a>]
[<a href="http://www.apache.org/dist/struts/binaries/struts-1.2.8-bin.tar.gz.md5">MD5</a>]
</li>
</ul>
</li>
<li>Source:
<ul>
<li>
<a href="[preferred]/struts/source/struts-1.2.8-src.zip">struts-1.2.8-src.zip</a>
[<a href="http://www.apache.org/dist/struts/source/struts-1.2.8-src.zip.asc">PGP</a>]
[<a href="http://www.apache.org/dist/struts/source/struts-1.2.8-src.zip.md5">MD5</a>]
</li>
<li>
<a href="[preferred]/struts/source/struts-1.2.8-src.tar.gz">struts-1.2.8-src.tar.gz</a>
[<a href="http://www.apache.org/dist/struts/source/struts-1.2.8-src.tar.gz.asc">PGP</a>]
[<a href="http://www.apache.org/dist/struts/source/struts-1.2.8-src.tar.gz.md5">MD5</a>]
</li>
</ul>
</li>
<li>Library:
<ul>
<li>
<a href="[preferred]/struts/library/struts-1.2.8-lib.zip">struts-1.2.8-lib.zip</a>
[<a href="http://www.apache.org/dist/struts/library/struts-1.2.8-lib.zip.asc">PGP</a>]
[<a href="http://www.apache.org/dist/struts/library/struts-1.2.8-lib.zip.md5">MD5</a>]
</li>
<li>
<a href="[preferred]/struts/library/struts-1.2.8-lib.tar.gz">struts-1.2.8-lib.tar.gz</a>
[<a href="http://www.apache.org/dist/struts/library/struts-1.2.8-lib.tar.gz.asc">PGP</a>]
[<a href="http://www.apache.org/dist/struts/library/struts-1.2.8-lib.tar.gz.md5">MD5</a>]
</li>
</ul>
</li>
</ul>
</section>
<section name="Verify the integrity of the files" href="verify">
<p>
It is essential that you verify the integrity of the downloaded files
using the PGP or MD5 signatures.
</p>
<p>
The PGP signatures can be verified using PGP or GPG. First download
the <a href="http://www.apache.org/dist/struts/KEYS">KEYS</a> as well
as the <code>asc</code> signature file for the particular distribution.
Make sure you get these files from the
<a href="http://www.apache.org/dist/struts/">main distribution directory</a>,
rather than from a mirror. Then verify the signatures using
</p>
<p>
<code>
% pgpk -a KEYS<br />
% pgpv ${filename}.tar.gz.asc<br />
</code>
<em>or</em><br />
<code>
% pgp -ka KEYS<br />
% pgp ${filename}.tar.gz.asc<br />
</code>
<em>or</em><br />
<code>
% gpg --import KEYS<br />
% gpg --verify ${filename}.tar.gz.asc
</code>
</p>
<p>
Alternatively, you can verify the MD5 signature on the files. A Unix
program called <code>md5</code> or <code>md5sum</code> is included in
many Unix distributions. It is also available as part of
<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
Textutils</a>. Windows users can get binary md5 programs from
<a href="http://www.fourmilab.ch/md5/">here</a>,
<a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
<a href="http://www.slavasoft.com/fsum/">here</a>.
</p>
</section>
</section>
</body>
</document>