Most common Tobago will be used in a Maven project, so an explicit download is not needed. Nevertheless here are the artifacts to download.

Use the links below to download a distribution of MyFaces Tobago from one of our mirrors. It is good practice to verify the integrity of the distribution files.

You will be prompted for a mirror - if the file is not found on yours, please be patient, as it may take 24 hours to reach all mirrors.

Apache MyFaces Tobago is distributed as a zip archive and as a tar.gz archive. The content is the same. Please note that the tar.gz archives contain file names longer than 100 characters and have been created using GNU tar extensions. Thus they must be untarred with a GNU compatible version of tar.

Release notes can be found in .

#{release.version} | Type | Mirrors | Checksum | Signature
--- | --- | --- | --- | ---
MyFaces Tobago | tar.gz |  |  |
MyFaces Tobago | zip |  |  |
MyFaces Tobago Source | zip |  |  |

If you want to use the latest Apache MyFaces Tobago features, the source code is under version control with GIT. In the section you will find information how to use the ASF MyFaces Tobago GIT Repository.

Older releases are available in the . Those releases are only provided as historical artifacts. We strongly recommend not to use those releases, but upgrade to the most recent release.

It is essential that you verify the integrity of the downloaded files using the SHA 256. This verification ensures the file was not corrupted during the download or mirroring process.

To verify the hash signature on the files, you need to use a program called e.g. sha, shasum, which is included in many UNIX distributions and MacOS. It is also available for Windows.

PGP verification ensures that the file came from a certain person. We recommend you verify your downloads with PGP.

First download the Apache MyFaces as well as the asc signature file for the particular distribution. It is important that you get these files from the ultimate trusted source - the main ASF distribution site, rather than from a mirror.

You need an installation of e.g. OpenPGP or GPG to check the files. More information you'll find on the site.

Then verify the signatures for all downloaded files. With gpg for the dist.tar.gz it looks like

$ TOBAGO_VERSION=#{apiController.releases[0].version} $ gpg --import KEYS $ gpg --verify myfaces-tobago-$TOBAGO_VERSION-dist.tar.gz.asc myfaces-tobago-$TOBAGO_VERSION-dist.tar.gz