Releases
...
4.
...
0.
...
3
The 24.50.1 release 3 is our latest release. For more information please see the migration guide for a first release to feature Jakarta EE 9.1 support and JDK-11 baseline. For a complete list of new features and changes that are needed to migrate to 2.5.1, API changes, etc... please see the release notes and migration guide.
Description | File | MD5sha256 | SHA1 | PGP |
---|---|---|---|---|
Source distribution | apache-cxf-24.5.1-src.tar.gz.sha1apache-cxf-2.5.10.3-src.tar.gz.asc | |||
apache-cxf-24.50.13-src.zip.sha1apache-cxf-2.5.1-src.zip.asc | ||||
Binary distribution | ||||
apache-cxf-24.50.13.zip.sha1 |
2.4.5
3.6.2
The 3.6.2 release is an updated version of 3.x to move to a fully JDK-11 baseline. This allows for new dependencies, security updates, and a few additional features, yet remains JEE 8.x compatible(javax.* namespace). For a complete list of new features, API changes, etc... The 2.4.5 release is our latest patch release for 2.4.x. For more information please see the release notes and the 2.4.x migration guide.
Description | File | MD5sha256 | SHA1 | PGP |
---|---|---|---|---|
Source distribution | apache-cxf-2.4.5-src.tar.gz.sha1apache-cxf-2.4.53.6.2-src.tar.gz.asc |
| ||
apache-cxf-2.4.5-src.zip.sha1apache-cxf-2.4.53.6.2-src.zip.asc | ||||
Binary distribution | apache-cxf-23.4.5.tar.gz.sha1apache-cxf-2.4.56.2.tar.gz.asc | |||
apache-cxf-2.4.5.zip.sha1apache-cxf-2.4.53.6.2.zip.asc |
...
3.
...
5.
...
7
The 23.35.8 7 release is our latest patch release for 2.3.x. For more information release representing a significant amount of work on new features, enhancements, code cleanups, etc... For a complete list of new features, API changes, etc... please see the release notes and migration guide.
Description | File |
---|
MD5
sha256 | PGP |
---|---|
Source distribution |
Binary distribution |
Verifying Releases
When downloading from a mirror please check the MD5 and SHA1 checksums as well as it is recommended to verify the integrity of the downloads. This should preferably be done by verifying the OpenPGP compatible signature available from the main Apache site. The KEYS file contains the public keys used for signing the release. It is recommended that a web of trust is used to confirm the identity of these keys.
You can check the OpenPGP signature with GnuPG via:
Code Block | ||
---|---|---|
| ||
gpg --verify apache-cxf-*.tar.gz.asc |
You can check the MD5 checksum with:
Code Block |
---|
md5sumimport KEYS gpg --checkverify apache-cxf-*.tar.gz.md5asc |
You can check It is also possible to verify the integrity of the downloads using the SHA1 checksum with:
Code Block | ||
---|---|---|
| ||
sha1sum --check apache-cxf-*.tar.gz.sha1
|
...
Previous releases are all archived in the apache archive:
Non-incubator releases: http https://archive.apache.org/dist/cxf/
Incubator releases: httphttps://archive.apache.org/dist/incubator/cxf/
Snapshots
...
...
These are snapshot builds - untested builds provided for your convenience. They have not been tested, and are not official releases of the Apache CXF project or the Apache Software Foundation.
Snapshot distributions can be found at: (the latest one is at the bottom)
2.3.9 http://repository.apache.org/snapshots/org/apache/cxf/apache-cxf/2.3.9-SNAPSHOT/
2.4.6 http://repository.apache.org/snapshots/org/apache/cxf/apache-cxf/2.4.6-SNAPSHOT/
2.5.2 http://repository.apache.org/snapshots/org/apache/cxf/apache-cxf/2.5.2-SNAPSHOT/
The snapshot Maven repository is http://repository.apache.org/snapshots.
Maven
...
Repositories
If you use Maven 2 for building your applications, Apache CXF artifacts are available from the following repository URLS:
Releases:
All all supported CXF releases are synced into the maven central repository: http https://repo1.maven.org/maven2/
Snapshots:
Snapshots are available in Apache's snapshot repository: http://repository.apache.org/snapshots
...
For information on where to retrieve Apache CXF SNAPSHOT maven artifacts, please refer to the page on building CXF.