Xalan-C++ may be obtained in two ways:
See the Installing Xalan-C++ chapter for further details.
The Xalan-C++ sources may be downloaded from:
https://gitbox.apache.org/repos/asf/xerces-c.git
Note: You must verify the integrity of the downloaded files using signatures downloaded from the Apache master distribution directory.
Note: To access previous releases of Xalan-C++, visit the Apache Xalan-C++ archives. To access previous releases of Xerces-C++, visit the Apache Xerces-C++ archives
After downloading the sources, proceed to Building Xalan-C++ to build Xalan-C++
It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures. You should only download the KEYS and the (asc/md5) signature files from the Apache Master Distribution. The Apache Mirrors of previous sections should be used to download the products.
Make sure you get the signature file for the particular distribution from the master directory, rather than from a mirror. Then verify the signatures using:
% pgpk -a KEYS
% pgpv <archive-name>.tar.gz.asc
or
% pgp -ka KEYS
% pgp <archive-name>.tar.gz.asc
or
% gpg --import KEYS
% gpg --verify <archive-name>.tar.gz.asc
Alternatively, you can verify the MD5 signature on the files.