Use the links below to download the Apache HTTP Server from one of our mirrors. You must verify the integrity of the downloaded files using signatures downloaded from our main distribution directory.
Only current recommended releases are available on the main distribution site and its mirrors. Older releases, including the 1.3 and 2.0 families of releases, are available from the archive download site.
Apache httpd for Microsoft Windows is available from a number of third party vendors.
Stable Release - Latest Version:
Legacy Release - 2.2 Branch:
If you are downloading the Win32 distribution, please read these important notes.
The currently selected mirror is http://ftp.tsukuba.wide.ad.jp/software/apache/. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available.
You may also consult the complete list of mirrors.The Apache HTTP Server Project is pleased to announce the release of version 2.4.29 of the Apache HTTP Server ("Apache" and "httpd"). This version of Apache is our latest GA release of the new generation 2.4.x branch of Apache HTTPD and represents fifteen years of innovation by the project, and is recommended over all previous releases!
For details see the Official Announcement and the CHANGES_2.4 and CHANGES_2.4.29 lists
Source: httpd-2.4.29.tar.bz2 [ PGP ] [ MD5 ] [ SHA1 ] [ SHA256 ]
Source: httpd-2.4.29.tar.gz [ PGP ] [ MD5 ] [ SHA1 ] [ SHA256 ]
The Apache HTTP Server Project is pleased to announce the release of Apache HTTP Server (httpd) version 2.2.34. This version will be the last release of the 2.2 legacy branch.
For details see the Official Announcement and the CHANGES_2.2 or condensed CHANGES_2.2.34 lists
Add-in modules for Apache 2.0 are not compatible with Apache 2.2. If you are running third party add-in modules, you must obtain modules compiled or updated for Apache 2.2 from that third party, before you attempt to upgrade from these previous versions. Modules compiled for Apache 2.2 should continue to work for all 2.2.x releases.
Source: httpd-2.2.34.tar.gz [ PGP ] [ MD5 ] [ SHA1 ]
Source: httpd-2.2.34.tar.bz2 [ PGP ] [ MD5 ] [ SHA1 ]
Win32, Netware or OS/2 Source with CR/LF line endings: httpd-2.2.34-win32-src.zip [ PGP ] [ MD5 ] [ SHA1 ]
The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.3.9 of mod_fcgid, a FastCGI implementation for Apache HTTP Server versions 2.2 and 2.4. This version of mod_fcgid is a security release.
For information about this module subproject, see the mod_fcgid module project page.
Source as gzip with LF line endings: mod_fcgid-2.3.9.tar.gz [ PGP ] [ MD5 ] [ SHA1 ]
Source as bz2 with LF line endings: mod_fcgid-2.3.9.tar.bz2 [ PGP ] [ MD5 ] [ SHA1 ]
Win32, Netware or OS/2 Source with CR/LF line endings: mod_fcgid-2.3.9-crlf.zip [ PGP ] [ MD5 ] [ SHA1 ]
The Apache HTTP Server Project is pleased to announce the release of Apache FTP module for Apache HTTP Server, version 0.9.6 as beta.
Users are encouraged to test and provide feedback on this beta release. For information about this module subproject, see the mod_ftp module project page.
Source with LF line endings (bzip2 compressed): mod_ftp-0.9.6-beta.tar.bz2 [ PGP ] [ SHA1 ] [ MD5 ]
Source with LF line endings (gzip compressed): mod_ftp-0.9.6-beta.tar.gz [ PGP ] [ SHA1 ] [ MD5 ]
Win32, Netware or OS/2 Source with CR/LF line endings: mod_ftp-0.9.6-beta-crlf.zip [ PGP ] [ SHA1 ] [ MD5 ]
Win32 binary build (unzip over the installed Apache 2.2 directory): mod_ftp-0.9.6-beta-win32-x86.zip [ PGP ] [ SHA1 ] [ MD5 ]
It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures. Please read Verifying Apache HTTP Server Releases for more information on why you should verify our releases.
The PGP signatures can be verified using PGP or GPG. First download the
KEYS as well as the asc
signature file for the relevant distribution. Make sure you get these files
from the main distribution directory ,
rather than from a mirror. Then verify the signatures using
% pgpk -a KEYS
or
% pgpv httpd-2.4.29.tar.gz.asc % pgp -ka KEYS
or
% pgp
httpd-2.4.29.tar.gz.asc % gpg --import
KEYS
% gpg --verify httpd-2.4.29.tar.gz.asc httpd-2.4.29.tar.gz
httpd-2.4.29.tar.* are signed by Jim Jagielski 791485A8
httpd-2.2.34.tar.* are signed by William A Rowe Jr B55D9977(9088F565)
httpd_2.4.16-netware-*.zip signed by Guenter Knauf E55B0D0E(31D9665F)
mod_fcgid-2.3.9.tar.* and mod_fcgid-2.3.9-crlf.zip are signed by Jeff
Trawick 39FF092C
mod_ftp-0.9.6-beta* are signed by William A Rowe Jr B55D9977(7F7214A7)
Alternatively, you can verify the MD5 signature on the files. A unix
program called md5
or md5sum
is included in many unix distributions. It
is also available as part of GNU
Textutils. Windows
users can get binary md5 programs from here
, here , or
here. An MD5 signature consists of 32 hex
characters, and a SHA1 signature consists of 40 hex characters. Ensure your
generated signature string matches the signature string published in the
files above.