Download a Release of the Apache Struts

The Apache Struts web framework is a free open-source solution for creating Java web applications.

You can start with Apache Struts using Apache Maven and optionally provided archetypes for easier dependency management and version upgrade. Or download some of the distributions for fully offline development.

Use the links below to download a release of Apache Struts from one of our mirrors. You can verify the integrity of the downloaded files using signatures downloaded from our main distribution directory.

Mirror

The currently selected mirror is [preferred]. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available.

You may also consult the complete list of mirrors.

Full Releases

Struts 6.3.0.1

The Apache Struts 6.3.0.1 is an elegant, extensible framework for creating enterprise-ready Java web applications. It is available in a full distribution, or as separate library, source, example and documentation distributions. Struts 6.3.0.1 is the "best available" version of Struts in the 2.5 series.

• Version Notes
• Full Distribution:
  • struts-6.3.0.1-all.zip (73MB) [PGP] [SHA256]
• Example Applications:
  • struts-6.3.0.1-apps.zip (32MB) [PGP] [SHA256]
• Essential Dependencies Only:
  • struts-6.3.0.1-min-lib.zip (4MB) [PGP] [SHA256]
• All Dependencies:
  • struts-6.3.0.1-lib.zip (24MB) [PGP] [SHA256]
• Documentation:
  • struts-6.3.0.1-docs.zip (12MB) [PGP] [SHA256]
• Source:
  • struts-6.3.0.1-src.zip (6MB) [PGP] [SHA256]

Struts 2.5.32

• Version Notes
• Full Distribution:
  • struts-2.5.32-all.zip (65MB) [PGP] [SHA256]
• Example Applications:
  • struts-2.5.32-apps.zip (35MB) [PGP] [SHA256]
• Essential Dependencies Only:
  • struts-2.5.32-min-lib.zip (4MB) [PGP] [SHA256]
• All Dependencies:
  • struts-2.5.32-lib.zip (19MB) [PGP] [SHA256]
• Documentation:
  • struts-2.5.32-docs.zip (13MB) [PGP] [SHA256]
• Source:
  • struts-2.5.32-src.zip (7MB) [PGP] [SHA256]

Struts 2.3.x

We stopped serving directly the outdated Struts 2.3.x series, you should immediately upgrade to the latest 2.5.x version or migrate to the latest 6.x.x version. Please check the Prior releases section below, if you are looking for older versions.

Struts Extras

• README
• Apache Struts 2 Secure Jakarta Multipart parser plugin:
  • struts2-secure-jakarta-multipart-parser-plugin-1.1.jar [PGP] [MD5] [SHA1]
• Source:
  • struts2-secure-jakarta-multipart-parser-plugin-1.1-source-release.zip [MD5] [PGP] [SHA1]
• Apache Struts 2 Secure Jakarta Stream Multipart parser plugin:
  • struts2-secure-jakarta-stream-multipart-parser-plugin-1.1.jar [PGP] [MD5] [SHA1]
• Source:
  • struts2-secure-jakarta-stream-multipart-parser-plugin-1.1-source-release.zip [MD5] [PGP] [SHA1]

Prior releases

If you are looking for other versions than above please check the Apache Archive site.

Struts 1.3.10

Struts 1.3.10 - EOL is the latest production release of Struts 1. It is available in a full distribution, or as separate library, source, example and documentation distributions.

Important: Apache Struts 1 EOL Announcement, including a detailed Q/A section

Verify the integrity of the files

We recommend that you verify the integrity of the downloaded files using the PGP or MD5/SHA256 signatures.

The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the asc signature file for the particular distribution. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using

% pgpk -a KEYS
% pgpv ${filename}.tar.gz.asc
or
% pgp -ka KEYS
% pgp ${filename}.tar.gz.asc
or
% gpg --import KEYS
% gpg --verify ${filename}.tar.gz.asc ${filename}.tar.gz

Alternatively, you can verify the MD5 signature on the files. A Unix program called md5 or md5sum is included in many Unix distributions. It is also available as part of GNU Textutils. Windows users can get binary md5 programs from here, here, or here.