Do not download from www.apache.org. Please use a mirror site to help us save apache.org bandwidth. Go here to find your nearest mirror.
Are available in the binaries/ directory. Every binary distribution contains an install script. See README for details.
For details on current releases, please see the Apache HTTP Server Download Page.
Note; the -win32-src.zip versions of Apache are nearly identical to the .tar.gz versions. However, they offer the source files in DOS/Windows CR/LF text format, and include the Win32 build files. These -win32-src.zip files do NOT contain binaries! See the binaries/win32/ directory for the Windows binary distributions.
Only current, recommended releases are available on www.apache.org and the mirror sites. Older releases can be obtained from the archive site.
All of the release distribution packages have been digitally signed (using PGP or GPG) by the Apache Group members that constructed them. There will be an accompanying distribution.asc file in the same directory as the distribution. The PGP keys can be found at the MIT key repository and within this project's KEYS file.
Always use the signature files to verify the authenticity of the distribution, e.g.,
% pgpk -a KEYS % pgpv httpd-2.2.8.tar.gz.asc or, % pgp -ka KEYS % pgp httpd-2.2.8.tar.gz.asc or, % gpg --import KEYS % gpg --verify httpd-2.2.8.tar.gz.asc
We offer MD5 hashes as an alternative to validate the integrity
of the downloaded files. A unix program called
md5sum is included in many unix distributions. It is
also available as part of GNU
Textutils. Windows users can get binary md5 programs from here, here, or
When we have patches to a minor bug or two, or features which we haven't yet included in a new release, we will put them in the patches subdirectory so people can get access to it before we roll another complete release.