<h1>Commons HttpClient</h1>

<p> This is the most current released version of
    <a href="http://hc.apache.org/httpclient-3.x/">Commons HttpClient</a>,
    brought to you by the
    <a href="http://hc.apache.org/">Apache HttpComponents Project</a>.
</p>
<p>This release is available in both binary and source distributions. </p>


<p>
  <font color="Red"><strong>Note:</strong></font>
  The tar files in this distribution use GNU tar extensions and must be
  untarred with a GNU compatible version of tar. The version of tar on
  Solaris and Mac OS X will not work with these files.
</p>

<h2>Signatures</h2>

<p> The files in this distribution have been digitally signed using PGP. Each 
  signed file has a corresponding <em>filename</em>.asc signature file in the 
  same directory. The signing keys can be found in the distribution directory 
  at &lt;<a href="http://www.apache.org/dist/httpcomponents/httpclient-3.x/KEYS"> 
  http://www.apache.org/dist/httpcomponents/httpclient-3.x/KEYS</a>&gt;.
</p>

<p>
  <b>
    Always download the KEYS file directly from the Apache site, never from a
    mirror site.
  </b>
</p>


<p>
  Always test available signatures, to ensure that what you download has not
  been tampered with. How you do this depends on the tools that you use. Here
  are a few examples:
  </p><ul>
    <li>
      PGP for Windows:
      <br>
      Use the Decrypt/Verify option in the PGPmail tool.
    </li>
    <li>
      PGP command line (some versions):
      <br>
      $ pgpk -a KEYS
      <br>
      $ pgpv commons-httpclient-3.1.tar.gz.asc
    </li>
    <li>
      PGP command line (some versions):
      <br>
      $ pgp -ka KEYS
      <br>
      $ pgp commons-httpclient-3.1.tar.gz.asc
    </li>
    <li>
      GnuPG:
      <br>
      $ gpg --import KEYS
      <br>
      $ gpg --verify commons-httpclient-3.1.tar.gz.asc
    </li>
  </ul>
<p>
</p>
