There isn't one "formal" location as there are different implementations. For some reason, all seem difficult to locate. See the
JSP FAQ for the latest known information, which may or may not be currently helpful due to the shifting vagaries of the interwebs.
Also be aware that JSTL 1.2 is generally packaged as a single jar versus the two jars of JSTL 1.1.