Downloads

There are several ways to obtain the PDFBox binaries or sources:

See also the export control information related to the encryption features included in Apache PDFBox.

Current releases

Mirrors

[if-any logo] []([link]) [end] Your current mirror is [preferred]. If you encounter a problem with this mirror, please select another. If all mirrors are failing, try the *backup* mirrors at the end of the mirrors list, which should be available. Alternatively, view the complete list of mirrors.
Mirrors:

PDFBox 2.0.0-RC1

This is a release candidate of the upcoming major release based on the current svn trunk. See the Release Notes for more details. The Migration Guide gives an overview about things to look at when upgrading from earlier versions.

PDFBox 1.8.10

This is an incremental feature release based on the earlier `1.8.x` releases. See the Release Notes for more details.

Verify

It is essential that you verify the integrity of the downloaded files using the PGP signatures or MD5 and SHA1 checksums. Please read Verifying Apache HTTP Server Releases for more information on why you should verify our releases.

The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well as the .asc signature files for the relevant release packages. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using 

% pgpk -a KEYS
% pgpv pdfbox-X.Y.Z-src.zip.asc
or 
% pgp -ka KEYS
% pgp pdfbox-X.Y.Z-src.zip.asc
or 
% gpg --import KEYS
% gpg --verify pdfbox-X.Y.Z-src.zip.asc

Previous releases

Previous Apache releases (starting with version `0.8.0-incubating`) are available in the release archive. Older releases (up to version `0.7.3`) published from SourceForge are still available on SourceForge Files.

Latest source from version control

To fetch the latest source code from the trunk in the Subversion repository, just run the following command: 
svn checkout http://svn.apache.org/repos/asf/pdfbox/trunk/

You can also browse the Subversion repository using ViewVC;

We also have a read-only Git mirror which is further mirrored to GitHub as apache/pdfbox.

Latest development snapshot

Development snapshots are built automatically from the latest SVN trunk. Snapshots are unreleased development previews and may change without notice. Snapshots do not have their own version numbers and there is no guarantee of API stability between snapshots.

Download a snapshot build

Export control information

This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code.

The following provides more details on the included cryptographic software:

  • Apache PDFBox uses the Java Cryptography Architecture (JCA) and the Bouncy Castle libraries for handling encryption in PDF documents.