Downloads
Use the links below to download Apache Jackrabbit releases from one of our mirrors. You should verify the integrity of the files using the signatures and checksums available from this page.
- Latest stable release: Apache Jackrabbit 2.4.0
- Maintenance releases: Apache Jackrabbit 2.2.11, Apache Jackrabbit 2.1.6, Apache Jackrabbit 2.0.5
- Release Archive
Apache Jackrabbit releases are available under the Apache License, Version 2.0. See the NOTICE.txt file contained in each release artifact for applicable copyright attribution notices. Some Jackrabbit components contain external code with licenses that meet Apache licensing policies. See the LICENSE.txt file contained in each release artifact for applicable licenses.
Apache Jackrabbit 2.4.0
Apache Jackrabbit 2.4 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit 2.4.x releases are considered stable and targeted for production use.
See the full release notes for more details.
- jackrabbit-2.4.0-src.zip (11M, source zip, PGP signature)
SHA1 checksum: ff9332ffb571ebd3b22717a8f30e4aa2c5e6d759
MD5 checksum: 490334d02561c29df09d2f404f034a64
- jackrabbit-standalone-2.4.0.jar (59M, standalone server, PGP signature)
SHA1 checksum: ed96e5783a8114e9b4938e67890b258b141d9d17
MD5 checksum: e189408ffbffcae786b7dd75c0110baa
- jackrabbit-webapp-2.4.0.war (24M, web application, PGP signature)
SHA1 checksum: 5a0577e1ca1bd614360a7854a0ae503cc673f7c4
MD5 checksum: 9f9c150ad2461f58e3d3f781e5d8b260
- jackrabbit-jca-2.4.0.rar (23M, JCA resource adapter, PGP signature)
SHA1 checksum: cbcfa1c068b2044c1346f9513589b1824ec583f0
MD5 checksum: fe330b376f8d0d2dd5ec80af6b3e54f5
Apache Jackrabbit 2.2.11
Apache Jackrabbit 2.2.11 is patch release that contains fixes and improvements over previous 2.2.x releases. This release is fully compatible with earlier 2.x.x releases.
See the full release notes for more details.
- jackrabbit-2.2.11-src.zip (10M, source zip, PGP signature)
SHA1 checksum: 9d7c16265ee5c8578fef3b120389a0c22a4e4d4f
MD5 checksum: d42357cb7679bb08639a71dabc206ecc
- jackrabbit-standalone-2.2.11.jar (33M, standalone server, PGP signature)
SHA1 checksum: 391b1aac90427f4490a3321022ae877c81483a81
MD5 checksum: 935e4b204702af61a9a0e521644c1851
- jackrabbit-webapp-2.2.11.war (27M, web application, PGP signature)
SHA1 checksum: 4cc81f4982e38b862b34c8df60153d961ca602ae
MD5 checksum: ab5969e57a65835ce0628f4d6c050097
- jackrabbit-jca-2.2.11.rar (25M, JCA resource adapter, PGP signature)
SHA1 checksum: 3a2e46969f9741981d88188c8403ca347fc7a656
MD5 checksum: 497d56f4794a548d0b81792c6cc30ecc
Apache Jackrabbit 2.1.6
Apache Jackrabbit 2.1.6 is a bug fix release that fixes issues reported against previous releases. This release is fully compatible with the earlier 2.1.x releases.
See the full release notes for more details.
- jackrabbit-2.1.6-src.zip (6.5M, source zip, PGP signature)
SHA1 checksum: dc8bc82bca06292a3dd21ba3859da4c1a911daac
MD5 checksum: 0f8b5224454937d3a2c3ed9b12a50e32
- jackrabbit-standalone-2.1.6.jar (32M, standalone server, PGP signature)
SHA1 checksum: fdef08602dbe3ee83a31febbbb1ca30e0d82c632
MD5 checksum: ca2f261c10d8313938492afa45fc0317
- jackrabbit-webapp-2.1.6.war (22M, web application, PGP signature)
SHA1 checksum: c60039fc89a33fda2784872be6f83652213c7664
MD5 checksum: 7f7569eaafa1a879b8cd62eca4ddb3c8
- jackrabbit-jca-2.1.6.rar (20M, JCA resource adapter, PGP signature)
SHA1 checksum: cc6849e837d8f2a6ed217de706c56c0e5f7028b1
MD5 checksum: a7037c012e35c43675394db127b5f0c5
Apache Jackrabbit 2.0.5
Apache Jackrabbit 2.0.5 is a bug fix release that fixes issues reported against previous releases. This release is fully compatible with the earlier 2.0.x releases.
See the full release notes for more details.
- jackrabbit-2.0.5-src.zip (6.2M, source zip, PGP signature)
SHA1 checksum: e1b29e484ed2dde5ec1efc395e4035c44d6ea61f
MD5 checksum: 5463a14a95fe18a8da7a6e4861751d4a
- jackrabbit-standalone-2.0.5.jar (41M, standalone server, PGP signature)
SHA1 checksum: 8ab7acebbc402f9092128fd4552110f03c0ffb53
MD5 checksum: 91cd68164a4f6b738578e9a288ab2bc5
- jackrabbit-webapp-2.0.5.war (29M, web application, PGP signature)
SHA1 checksum: 4d70a6bfd0d7b9f18a59803e8f178711d4f9a0cf
MD5 checksum: 5c7a93ff714685383bf8a54b5f28e7d5
- jackrabbit-jca-2.0.5.rar (26M, JCA resource adapter, PGP signature)
SHA1 checksum: ea72a4b9e8ea0c0fa5047b976ec8430deff2dc35
MD5 checksum: 406252030cc64ca7203b67c671f71953
Apache Jackrabbit 1.6.5
Apache Jackrabbit 1.6.5 is a bug fix release that fixes issues reported against previous releases. This release is backwards-compatible with the earlier 1.6.x releases, but contains a change in persistence format that makes it impossible to downgrade to releases earlier than 1.6.2 after a repository has been upgraded. A full backup of the repository is recommended before this upgrade.
| This patch release marks the end of active maintenance of the Jackrabbit 1.6 branch. All users are encouraged to upgrade to the more recent Jackrabbit 2.x versions. |
See the full release notes for more details.
- jackrabbit-1.6.5-src.zip (5.7M, source zip, PGP signature)
SHA1 checksum: 4fa1e032f9b641fbc5c9ff8d6ba76fdb58b539ba
MD5 checksum: c54349f1f00e4d0f95f7e16dd3f5da11
- jackrabbit-standalone-1.6.5.jar (21M, standalone server, PGP signature)
SHA1 checksum: a9be78279c3987a7550d91f173b42bba9f801c4c
MD5 checksum: 6efcdd934e22b5dd5183638be7202a1f
- jackrabbit-webapp-1.6.5.war (14M, web application, PGP signature)
SHA1 checksum: ea352bce5528c819fec9a534838f1852e4c31bb5
MD5 checksum: 642daded0a09e19544b510cd390ce621
- jackrabbit-jca-1.6.5.rar (13M, JCA resource adapter, PGP signature)
SHA1 checksum: 3d5934b96f931c21da7bcffdf2c04999396c5d83
MD5 checksum: bb6c29df607ac7a6b117da4fc9aa3683
Release Archive
Only current recommended releases are available on the main distribution site and its mirrors. Older releases are available from the archive download site.
Verify
It is essential that you verify the integrity of the downloaded files using the PGP signatures or MD5 and SHA1 checksums. Please read Verifying Apache HTTP Server Releases for more information on why you should verify our releases.
The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well as the .asc signature files for the relevant release packages. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using
% pgpk -a KEYS % pgpv jackrabbit-X.Y.Z-src.zip.asc
or
% pgp -ka KEYS % pgp jackrabbit-X.Y.Z-src.zip.asc
or
% gpg --import KEYS
% gpg --verify jackrabbit-X.Y.Z-src.zip.asc
Alternatively, you can verify the MD5 or SHA1 checksums on the files. For checking the MD5 checksums, use the program called md5 or md5sum included in many Unix distributions. The similar program for SHA1 is called sha1sum. It is also available as part of the GNU core utilities. Windows users can get binary md5 programs from here, here, or here.

