| the Apache Ant site |

| Home |
| Projects |

# Source Distributions

### Downloading Antlibs

Use the links below to download a source distribution of Antlibs from one of our mirrors. It is good practice to verify the integrity of the distribution files, especially if you are using one of our mirror sites. In order to do this you must use the signatures from our main distribution directory.

Antlibs are distributed as `zip`, `tar.gz` and `tar.bz2` archives - the contents are the same. Please note that the `tar.*` archives contain file names longer than 100 characters and have been created using GNU tar extensions. Thus they must be untarred with a GNU compatible version of `tar`.

If you do not see the file you need in the links below, please see the master distribution directory or, preferably, its mirror.

### Mirror

You are currently using [preferred]. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available.

Other mirrors:

### Current Antlib Releases

Note
Very recent releases may not be available on all mirrors for a few days.
Tar files may require gnu tar to extract
Tar files in the distribution contain long file names, and may require gnu tar to do the extraction.

- Apache .NET Ant Library 1.0
  - `.zip` archive: apache-ant-dotnet-1.0-src.zip [PGP] [SHA1] [MD5]
  - `.tar.gz` archive: apache-ant-dotnet-1.0-src.tar.gz [PGP] [SHA1] [MD5]
  - `.tar.bz2` archive: apache-ant-dotnet-1.0-src.tar.bz2 [PGP] [SHA1] [MD5]
- Apache AntUnit 1.0
  - `.zip` archive: apache-ant-antunit-1.0-src.zip [PGP] [SHA1] [MD5]
  - `.tar.gz` archive: apache-ant-antunit-1.0-src.tar.gz [PGP] [SHA1] [MD5]
  - `.tar.bz2` archive: apache-ant-antunit-1.0-src.tar.bz2 [PGP] [SHA1] [MD5]

### Verify Releases

It is essential that you verify the integrity of the downloaded files using the PGP signature or the SHA1 or MD5 checksums. The checksums are not as strong indicators as the PGP signature.

The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the `asc` signature file for the particular distribution. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using

`% pgpk -a KEYS
% pgpv apache-ant-dotnet-1.0-bin.tar.gz.asc
` or
`% pgp -ka KEYS
% pgp apache-ant-dotnet-1.0-bin.tar.gz.asc
` or
`% gpg --import KEYS
% gpg --verify apache-ant-dotnet-1.0-bin.tar.gz.asc`

Alternatively, you can verify the checksums on the files. Unix programs called `md5`/`sha1` or `md5sum`/`sha1sum` are included in many unix distributions. `*sum` is also available as part of GNU Textutils. Windows users can get binary md5 programs from here, here. fsum supports MD5 and SHA1.

We highly recommend to verify the PGP signature, though.