Repository files navigation

The Apache HTTP Server is a powerful and flexible HTTP/1.1 compliantweb server. Originally designed as a replacement for the NCSA HTTPServer, it has grown to be the most popular web server on theInternet. As a project of the Apache Software Foundation, thedevelopers aim to collaboratively develop and maintain a robust,commercial-grade, standards-based server with freely availablesource code.

Details of the latest version can be found on theApache HTTPserver project page.

The documentation available as of the date of this release isincluded in HTML format in the docs/manual/ directory. The mostup-to-date documentation can be found athttps://httpd.apache.org/docs/trunk/.

Please see the file calledINSTALL. Platform specific notes can befound inREADME.platforms.

Please see the file calledLICENSE.

This distribution may include software that has been designed for usewith cryptographic software. The country in which you currently residemay have restrictions on the import, possession, use, and/or re-exportto another country, of encryption software. BEFORE using any encryptionsoftware, please check your country's laws, regulations and policiesconcerning the import, possession, or use, and re-export of encryptionsoftware, to see if this is permitted. Seehttps://www.wassenaar.org/for more information.

The U.S. Government Department of Commerce, Bureau of Industry andSecurity (BIS), has classified this software as Export CommodityControl Number (ECCN) 5D002.C.1, which includes information securitysoftware using or performing cryptographic functions with asymmetricalgorithms. The form and manner of this Apache Software Foundationdistribution makes it eligible for export under the License ExceptionENC Technology Software Unrestricted (TSU) exception (see the BISExport Administration Regulations, Section 740.13) for both objectcode and source code.

The following provides more details on the included files thatmay be subject to export controls on cryptographic software:

Apache httpd 2.0 and later versions include the mod_ssl module undermodules/ssl/for configuring and listening to connections over SSL encryptednetwork sockets by performing calls to a general-purpose encryptionlibrary, such as OpenSSL or the operating system's platform-specificSSL facilities.

In addition, some versions of apr-util provide an abstract interfacefor symmetrical cryptographic functions that make use of ageneral-purpose encryption library, such as OpenSSL, NSS, or theoperating system's platform-specific facilities. This interface isknown as theapr_crypto interface, with implementation beneath the/crypto directory. Theapr_crypto interface is used by themod_session_crypto module available undermodules/sessionfor optional encryption of session information.

Some object code distributions of Apache httpd, indicated with theword "crypto" in the package name, may include object code for theOpenSSL encryption library as distributed in open source form fromhttps://www.openssl.org/source/.

The above files are optional and may be removed if the cryptographicfunctionality is not desired or needs to be excluded from redistribution.Distribution packages of Apache httpd that include the word "nossl"in the package name have been created without the above files and aretherefore not subject to this notice.

• If you want to be informed about new code releases, bug fixes,security fixes, general news and information about the Apache serversubscribe to the apache-announce mailing list as described underhttps://httpd.apache.org/lists.html#http-announce

• If you want freely available support for running Apache please see theresources athttps://httpd.apache.org/support.html

• If you have a concrete bug report for Apache please see the instructionsfor bug reporting athttps://httpd.apache.org/bug_report.html

• If you want to participate in actively developing Apache pleasesubscribe to thedev@httpd.apache.org mailing list as described athttps://httpd.apache.org/lists.html#http-dev