Downloading the Libraries

Source and binrary distributions for both the Java and C++ libraries are available from from the XML project site only. Current distributions are not available from the mirrors.

All distributions are provided with signature .sig files. These contain PGP signatures for the related distribution. You should validate these using the keys found in the key file downloaded from the Apache site.

Verification can be performed using :

% pgpk -a KEYS
% pgpv xml-security-bin-1_2_1.zip.sig
  or
% pgp -ka KEYS
% pgp xml-security-bin-1_2_1.zip.sig
  or
% gpg --import KEYS
% gpg --verify xml-security-bin-1_2_1.zip.sig
	  

For the adventurous, this project's CVS repository can be checked out through anonymous (pserver) CVS with the following instruction set. When prompted for a password for anonymous, simply enter "anoncvs" without quotes:

cvs -d :pserver:anoncvs@cvs.apache.org:/home/cvspublic login
	password: anoncvs
	cvs -d :pserver:anoncvs@cvs.apache.org:/home/cvspublic checkout
	xml-security