Releases of the Apache Roller blog server are made available to the general public at no charge, under the Apache License, in both binary and source distributions.
Roller 6.1.2 ("best available")
Previous source and binary distributions, including documentation, are available in the Apache archives.
Project releases are approved by vote of the Apache Roller Project Management Committee (PMC). Support for a release is provided by project volunteers on the project mailing lists. Bugs found in a release may be discussed on the list and reported through the issue tracker. The user mailing list and issue tracker are the only support options hosted by the Apache Roller project.
Note: When downloading from a mirror, be sure to verify that checksums and/or signatures are correct. To do so, use the checksum and signature files from the main Apache site at http://www.apache.org/dist/roller/.
The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the asc signature file for the particular distribution. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using pgpk as follows:
% pgpk -a KEYS
% pgpv ${filename}.tar.gz.asc
or
% pgp -ka KEYS
% pgp ${filename}.tar.gz.asc
or
% gpg --import KEYS
% gpg --verify ${filename}.tar.gz.asc
Alternatively you can also verify the SHA256 checksum for each file. Apache Open Office provides a nice guide to verifying checksum here How to verify the integrity of the downloaded file?
If you want to build directly from the sources, please check the Project Wiki.