The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows NT.

The main goal of Apache HTTP Server is to provide an efficient, secure and extensible server that provides HTTP services in sync with the current HTTP standards.

Apache has been the most popular web server on the Internet since 1996.

The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, featureful, and freely-available source code implementation of an HTTP (Web) server.

The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation.

This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.

Apache is run on millions of Internet servers. It has been tested thoroughly by both developers and users. The Apache HTTP Server Project maintains rigorous standards before releasing new versions of our server, and our server runs without a hitch on over 70% of all WWW servers available on the Internet. When bugs do show up, we release patches and new versions as soon as they are available.

Here are some key features of "Apache HTTP Server for Windows":

· Is a powerful, flexible, HTTP/1.1 compliant web server
· Implements the latest protocols, including HTTP/1.1 (RFC2616)
· Is highly configurable and extensible with third-party modules
· Can be customised by writing 'modules' using the Apache module API
· Provides full source code and comes with an unrestrictive license
· Runs on Windows 2003/XP/2000/NT/9x, Netware 5.x and above, OS/2, and most versions of Unix, as well as several other operating systems
· Is actively being developed
· Rncourages user feedback through new ideas, bug reports and patches

What's New in This Release: [ read full changelog ]

· SECURITY: CVE-2009-2699
· Fixed in APR 1.3.9. Faulty error handling in the Solaris pollset support Event Port backend) which could trigger hangs in the prefork and event MPMs on that platform. PR 47645. [Jeff Trawick]
· SECURITY: CVE-2009-3095 (cve.mitre.org)mod_proxy_ftp: sanity check authn credentials. Stefan Fritsch, Joe Orton]
· SECURITY: CVE-2009-3094 (cve.mitre.org) mod_proxy_ftp: NULL pointer dereference on error paths. Stefan Fritsch, Joe Orton]
· mod_proxy_scgi: Backport from trunk. [André Malo]
· mod_ldap: Don't try to resolve file-based user ids to a DN when AuthLDAPURL
· has been defined at a very high level. PR 45946. [Eric Covener]
· htcacheclean: 19 ways to fail, 1 error message. Fixed. [Graham Leggett]
· mod_ldap: Bring the LDAPCacheEntries and LDAPOpCacheEntries usage() in synch with the manual and the implementation (0 and -1 both disable the cache). [Eric Covener]
· mod_ssl: The error message when SSLCertificateFile is missing should at least give the name or position...