Current release

7.0.0 (Oct 25, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

Verifying file integrity

It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures.

The PGP signatures can be verified using PGP or GPG.
First download the KEYS as well as the asc signature file for the relevant distribution.
Make sure you get these files from the main distribution directory rather than from a mirror.
Then verify the signatures using:

pgpk -a KEYS pgpv apache-juneau-7.0.0-bin.zip.asc

... or ...

pgp -ka KEYS apache-juneau-7.0.0-bin.zip.asc

... or ...

gpg --import KEYS gpg --verify apache-juneau-7.0.0-bin.zip.asc apache-juneau-7.0.0-bin.zip

Alternatively, you can verify the MD5 signature on the files.
A unix program called md5 or md5sum is included in many unix distributions. It is also available as part of GNU Textutils.
Windows users can get binary md5 programs from any of the following:

An MD5 signature consists of 32 hex characters, and a SHA1 signature consists of 40 hex characters.
Ensure your generated signature string matches the signature string published in the files above.

Older releases

6.4.0 (Oct 04, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

6.3.1 (Aug 02, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

6.3.0 (Jun 28, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

6.2.0 (Apr 28, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

6.1.0 (Feb 25, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

6.0.1 (Jan 03, 2017) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)

6.0.0 (Oct 25, 2016) - Release Notes - Binaries (ASC, MD5, SHA1) - Source (ASC, MD5, SHA1)