Downloads
Use the links below to download Apache Jackrabbit releases from one of our mirrors. You should verify the integrity of the files using the signatures and checksums available from this page.
- Latest stable release: Apache Jackrabbit 2.4.1
- Jackrabbit Oak experimental release: Apache Jackrabbit Oak 0.2.1
- Maintenance releases: Apache Jackrabbit 2.2.12, Apache Jackrabbit 2.1.6, Apache Jackrabbit 2.0.5
- Release Archive
Apache Jackrabbit releases are available under the Apache License, Version 2.0. See the NOTICE.txt file contained in each release artifact for applicable copyright attribution notices. Some Jackrabbit components contain external code with licenses that meet Apache licensing policies. See the LICENSE.txt file contained in each release artifact for applicable licenses.
Apache Jackrabbit 2.4.1
Apache Jackrabbit 2.4.1 is patch release that contains fixes and improvements over Jackrabbit 2.4.0. This release is fully compatible with earlier 2.x.x releases.
See the full release notes for more details.
- jackrabbit-2.4.1-src.zip (11M, source zip, PGP signature)
SHA1 checksum: 48e0a6ba1513ab758ef842a00402c9c941728834
MD5 checksum: ab3d1b83134bb06c9414ba390ef08885
- jackrabbit-standalone-2.4.1.jar (59M, standalone server, PGP signature)
SHA1 checksum: 12f7784b38942d53da4db7290141d966d4b9561b
MD5 checksum: f9a2a68f53ca0eeb32420ae123c0d668
- jackrabbit-webapp-2.4.1.war (24M, web application, PGP signature)
SHA1 checksum: f59bb38d803a23130df7991ae1f1f1b5265b20f4
MD5 checksum: 9fae77a886c978fb379cb54ce679483a
- jackrabbit-jca-2.4.1.rar (23M, JCA resource adapter, PGP signature)
SHA1 checksum: 75d5b497c32cf1118079ed173550f9c11713bd60
MD5 checksum: 6e6f6f36ad296d6c682be79281312263
Apache Jackrabbit Oak 0.2.1
Jackrabbit Oak 0.2.1 is to be considered alpha-level software. Use at your own risk with no stability or compatibility guarantees.
See the full release notes for more details.
- jackrabbit-oak-0.2.1-src.zip (809K, source zip, PGP signature)
SHA1 checksum: 05e7c8c71769aec9f326f4a377fd6e41fbb735a6
MD5 checksum: 6834183029ac35446af0d4c2cc0d6766
Apache Jackrabbit 2.2.12
Apache Jackrabbit 2.2.12 is patch release that contains fixes and improvements over previous 2.2.x releases. This release is fully compatible with earlier 2.x.x releases.
See the full release notes for more details.
- jackrabbit-2.2.12-src.zip (11M, source zip, PGP signature)
SHA1 checksum: 3e500bebd2e0dbce9073827ce64c3e134cd77277
MD5 checksum: 69951abdb2610be926fbf849d538db3f
- jackrabbit-standalone-2.2.12.jar (33M, standalone server, PGP signature)
SHA1 checksum: e3a21f424541286a539a9bb72a421881fb1cf830
MD5 checksum: 1dc1b1281681adf4b9a27c1139eab4ab
- jackrabbit-webapp-2.2.12.war (27M, web application, PGP signature)
SHA1 checksum: 7cfffe374ffc442bfecdc8841a48775c9e3f8bb9
MD5 checksum: a65d899131410ceb93692c185c1f1418
- jackrabbit-jca-2.2.12.rar (26M, JCA resource adapter, PGP signature)
SHA1 checksum: 528374d13961e3e63ca7089c56657d8ae9864373
MD5 checksum: 59fc5729fb498957ca564dd01d8ac380
Apache Jackrabbit 2.1.6
Apache Jackrabbit 2.1.6 is a bug fix release that fixes issues reported against previous releases. This release is fully compatible with the earlier 2.1.x releases.
See the full release notes for more details.
- jackrabbit-2.1.6-src.zip (6.5M, source zip, PGP signature)
SHA1 checksum: dc8bc82bca06292a3dd21ba3859da4c1a911daac
MD5 checksum: 0f8b5224454937d3a2c3ed9b12a50e32
- jackrabbit-standalone-2.1.6.jar (32M, standalone server, PGP signature)
SHA1 checksum: fdef08602dbe3ee83a31febbbb1ca30e0d82c632
MD5 checksum: ca2f261c10d8313938492afa45fc0317
- jackrabbit-webapp-2.1.6.war (22M, web application, PGP signature)
SHA1 checksum: c60039fc89a33fda2784872be6f83652213c7664
MD5 checksum: 7f7569eaafa1a879b8cd62eca4ddb3c8
- jackrabbit-jca-2.1.6.rar (20M, JCA resource adapter, PGP signature)
SHA1 checksum: cc6849e837d8f2a6ed217de706c56c0e5f7028b1
MD5 checksum: a7037c012e35c43675394db127b5f0c5
Apache Jackrabbit 2.0.5
Apache Jackrabbit 2.0.5 is a bug fix release that fixes issues reported against previous releases. This release is fully compatible with the earlier 2.0.x releases.
See the full release notes for more details.
- jackrabbit-2.0.5-src.zip (6.2M, source zip, PGP signature)
SHA1 checksum: e1b29e484ed2dde5ec1efc395e4035c44d6ea61f
MD5 checksum: 5463a14a95fe18a8da7a6e4861751d4a
- jackrabbit-standalone-2.0.5.jar (41M, standalone server, PGP signature)
SHA1 checksum: 8ab7acebbc402f9092128fd4552110f03c0ffb53
MD5 checksum: 91cd68164a4f6b738578e9a288ab2bc5
- jackrabbit-webapp-2.0.5.war (29M, web application, PGP signature)
SHA1 checksum: 4d70a6bfd0d7b9f18a59803e8f178711d4f9a0cf
MD5 checksum: 5c7a93ff714685383bf8a54b5f28e7d5
- jackrabbit-jca-2.0.5.rar (26M, JCA resource adapter, PGP signature)
SHA1 checksum: ea72a4b9e8ea0c0fa5047b976ec8430deff2dc35
MD5 checksum: 406252030cc64ca7203b67c671f71953
Apache Jackrabbit 1.6.5
Apache Jackrabbit 1.6.5 is a bug fix release that fixes issues reported against previous releases. This release is backwards-compatible with the earlier 1.6.x releases, but contains a change in persistence format that makes it impossible to downgrade to releases earlier than 1.6.2 after a repository has been upgraded. A full backup of the repository is recommended before this upgrade.
| This patch release marks the end of active maintenance of the Jackrabbit 1.6 branch. All users are encouraged to upgrade to the more recent Jackrabbit 2.x versions. |
See the full release notes for more details.
- jackrabbit-1.6.5-src.zip (5.7M, source zip, PGP signature)
SHA1 checksum: 4fa1e032f9b641fbc5c9ff8d6ba76fdb58b539ba
MD5 checksum: c54349f1f00e4d0f95f7e16dd3f5da11
- jackrabbit-standalone-1.6.5.jar (21M, standalone server, PGP signature)
SHA1 checksum: a9be78279c3987a7550d91f173b42bba9f801c4c
MD5 checksum: 6efcdd934e22b5dd5183638be7202a1f
- jackrabbit-webapp-1.6.5.war (14M, web application, PGP signature)
SHA1 checksum: ea352bce5528c819fec9a534838f1852e4c31bb5
MD5 checksum: 642daded0a09e19544b510cd390ce621
- jackrabbit-jca-1.6.5.rar (13M, JCA resource adapter, PGP signature)
SHA1 checksum: 3d5934b96f931c21da7bcffdf2c04999396c5d83
MD5 checksum: bb6c29df607ac7a6b117da4fc9aa3683
Release Archive
Only current recommended releases are available on the main distribution site and its mirrors. Older releases are available from the archive download site.
Verify
It is essential that you verify the integrity of the downloaded files using the PGP signatures or MD5 and SHA1 checksums. Please read Verifying Apache HTTP Server Releases for more information on why you should verify our releases.
The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well as the .asc signature files for the relevant release packages. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using
% pgpk -a KEYS % pgpv jackrabbit-X.Y.Z-src.zip.asc
or
% pgp -ka KEYS % pgp jackrabbit-X.Y.Z-src.zip.asc
or
% gpg --import KEYS
% gpg --verify jackrabbit-X.Y.Z-src.zip.asc
Alternatively, you can verify the MD5 or SHA1 checksums on the files. For checking the MD5 checksums, use the program called md5 or md5sum included in many Unix distributions. The similar program for SHA1 is called sha1sum. It is also available as part of the GNU core utilities. Windows users can get binary md5 programs from here, here, or here.

