+ +

Use the links below to download the Apache HTTP Server from one of our +mirrors. You must verify the integrity of the downloaded +files using signatures downloaded from our main distribution directory.

Only current recommended releases are available on the main distribution +site and its mirrors. Older releases, including the 1.3 family of releases, +are available from the archive download +site.

Stable Release - Latest Version:

2.4.2 (released 2012-04-17)

Stable Release - 2.2 Branch:

2.2.22 (released 2012-01-31)

Legacy Release:

2.0.64 (released 2010-10-19)

If you are downloading the Win32 distribution, please read these important +notes.

Mirror

[if-any logo] [end] The currently selected mirror is +[preferred]. If you encounter a problem with this mirror, please select +another mirror. If all mirrors are failing, there are backup mirrors (at +the end of the mirrors list) that should be available. +

+You may also consult the complete list of +mirrors.

Apache HTTP Server 2.4.2 (httpd): 2.4.2 is the latest available version

The Apache HTTP Server Project is pleased to +announce the +release of version 2.4.2 of the Apache HTTP Server ("Apache" and "httpd"). +This version of Apache is our 2nd GA release of the new generation 2.4.x +branch of Apache HTTPD and represents fifteen years of innovation by the +project, and is recommended over all previous releases!

For details see the Official +Announcement and +the CHANGES_2.4 and +CHANGES_2.4.2 lists

+
Unix Source: httpd-2.4.2.tar.bz2 +[ PGP ] [ +MD5 ] [ +SHA1 ]
+
+
Unix Source: httpd-2.4.2.tar.gz [ +PGP ] [ +MD5 ] [ +SHA1 ]
+
+
Security and official patches
+
+
Other files
+

Apache HTTP Server 2.2.22 (httpd)

The Apache HTTP Server Project is pleased to announce the release of Apache +HTTP Server (httpd) version 2.2.22.

For details see the Official +Announcement and +the CHANGES_2.2 or condensed +CHANGES_2.2.22 lists

Add-in modules for Apache 2.0 are not compatible with Apache 2.2. If you +are running third party add-in modules, you must obtain modules compiled or +updated for Apache 2.2 from that third party, before you attempt to upgrade +from these previous versions. Modules compiled for Apache 2.2 should +continue to work for all 2.2.x releases.

+
Unix Source: httpd-2.2.22.tar.gz +[ PGP ] [ +MD5 ] [ +SHA1 ]
+
+
Unix Source: +httpd-2.2.22.tar.bz2 [ +PGP ] [ +MD5 ] [ +SHA1 ]
+
+
Win32 Source: +httpd-2.2.22-win32-src.zip +[ PGP ] +[ MD5 ] +[ SHA1 +]
+
+
Win32 Binary without crypto (no mod_ssl) (MSI Installer): +httpd-2.2.22-win32-x86-no_ssl.msi +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
Win32 Binary including OpenSSL 0.9.8t (MSI Installer): +httpd-2.2.22-win32-x86-openssl-0.9.8t.msi +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
NetWare Binary: +httpd_2.2.22-netware.zip +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
Security and official patches
+
+
Other files
+

Apache HTTP Server 2.0.64 is also available

Apache 2.0.64 is the legacy stable version of the 2.0 series, and is +recommended over any previous 2.0 release. This release fixes a few +potential security vulnerabilites.

For details see the Official +Announcement and +the CHANGES_2.0 and +CHANGES_2.0.64 lists.

Apache 2.0 add-in modules are not compatible with Apache 2.2 modules. If +you are running third party add-in modules, you will need to obtain modules +compiled for or compatible with Apache 2.0 from that third party, before +you attempt to use this specific release.

+
Unix Source: httpd-2.0.64.tar.gz +[ PGP ] [ +MD5 ]
+
+
Unix Source: +httpd-2.0.64.tar.bz2 [ +PGP ] [ +MD5 ]
+
+
Win32 Source: +httpd-2.0.64-win32-src.zip +[ PGP ] +[ MD5 ]
+
+
Win32 Binary without crypto (no mod_ssl) (MSI Installer): +httpd-2.0.64-win32-x86-no_ssl.msi +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
Win32 Binary including OpenSSL 0.9.8o (MSI Installer): +httpd-2.0.64-win32-x86-openssl-0.9.8o.msi +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
NetWare Binary: +apache_2.0.64-netware.zip +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
Security and official patches
+
+
Other files
+

Apache mod_fcgid FastCGI module for Apache HTTP Server released as 2.3.7

The Apache Software Foundation and the Apache HTTP Server Project are +pleased to announce the release of version 2.3.7 of mod_fcgid, a FastCGI +implementation for Apache HTTP Server versions 2.0, 2.2, and future 2.4. +This version of mod_fcgid is a bug fix release.

For information about this module subproject, see the mod_fcgid module +project page.

+
Unix Source as gzip with LF line endings: +mod_fcgid-2.3.7.tar.gz +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
Unix Source as bz2 with LF line endings: +mod_fcgid-2.3.7.tar.bz2 +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+
+
Win32, Netware or OS/2 Source with CR/LF line endings: +mod_fcgid-2.3.7-crlf.zip +[ +PGP +] [ +MD5 +] [ +SHA1 +]
+

Apache FTP module for Apache HTTP Server released as 0.9.6-beta

The Apache HTTP Server Project is pleased to announce the release of Apache +FTP module for Apache HTTP Server, version 0.9.6 as beta.

Users are encouraged to test and provide feedback on this beta release. For +information about this module subproject, see the mod_ftp module project +page.

+
Unix Source with LF line endings (bzip2 compressed): +mod_ftp-0.9.6-beta.tar.bz2 +[ +PGP +] [ +SHA1 +] [ +MD5 +]
+
+
Unix Source with LF line endings (gzip compressed): +mod_ftp-0.9.6-beta.tar.gz +[ +PGP +] [ +SHA1 +] [ +MD5 +]
+
+
Win32, Netware or OS/2 Source with CR/LF line endings: +mod_ftp-0.9.6-beta-crlf.zip +[ +PGP +] [ +SHA1 +] [ +MD5 +]
+
+
Win32 binary build (unzip over the installed Apache 2.2 directory): +mod_ftp-0.9.6-beta-win32-x86.zip +[ +PGP +] [ +SHA1 +] [ +MD5 +]
+

Verify the integrity of the files

It is essential that you verify the integrity of the downloaded files using +the PGP or MD5 signatures. Please read Verifying Apache HTTP Server +Releases for more information on why you should +verify our releases.

The PGP signatures can be verified using PGP or GPG. First download the +KEYS as well as the asc +signature file for the relevant distribution. Make sure you get these files +from the main distribution directory , +rather than from a mirror. Then verify the signatures using

% pgpk -a KEYS % pgpv httpd-2.2.0.tar.gz.asc +or

% pgp -ka KEYS % pgp +httpd-2.2.0.tar.gz.asc or

% gpg --import +KEYS % gpg --verify httpd-2.2.0.tar.gz.asc

+
httpd-2.4.2.tar.* are signed by Jim Jagielski 791485A8
+
+
httpd-2.2.22.tar.* are signed by William A Rowe Jr B55D9977(60C5442D)
+
+
httpd-2.0.64.tar.* are signed by William A Rowe Jr B55D9977(7F7214A7)
+
+
httpd-2.2.22-win32-src.zip,.msi, and -netware/-sdk files signed by +William A Rowe Jr B55D9977(60C5442D)
+
+
httpd-2.0.64-win32-src.zip and.msi signed by William A Rowe Jr +B55D9977(7F7214A7)
+
+
mod_fcgid-2.3.7.tar.* and mod_fcgid-2.3.7-crlf.zip are signed by Jeff +Trawick 39FF092C
+
+
mod_ftp-0.9.6-beta* are signed by William A Rowe Jr B55D9977(7F7214A7)
+

Alternatively, you can verify the MD5 signature on the files. A unix +program called md5 or md5sum is included in many unix distributions. It +is also available as part of GNU +Textutils. Windows +users can get binary md5 programs from here +, here , or +here. An MD5 signature consists of 32 hex +characters, and a SHA1 signature consists of 40 hex characters. Ensure your +generated signature string matches the signature string published in the +files above.

+ + + + +

Essentials

Download!

Documentation

Get Support

Get Involved

Subprojects

Miscellaneous