Topic: Why is 2.2.29 Windows binary not available at apache.org?

[DaveEcometry]

Could someone tell me why the httpd.apache.org/download.cgi page recommends 2.2.29 as the Legacy Release, but only offers Windows binaries for 2.2.25 via the download mirrors -- not 2.2.29?

(I know that there is a link to download httpd-2.2.29-win32-ssl_0.9.8.zip from ApacheLounge, but my question is why that is not available from the official httpd.apache.org site.)

Thanks,
Dave

[glsmith]

That very page with the links says why

"The Apache HTTP Server Project itself does not provide binary releases of software, only source code. Individual committers may provide binary packages as a convenience, but it is not a release deliverable".

The key word there is "may," or may not.

[DaveEcometry]

Thank you for pointing that out.

So, when Apache.org offers links to mirror sites providing httpd-2.2.25-win32-x86-openssl-0.9.8y.msi does that mean it has been validated as safe?

Alternatively, when considering independent sites that offer httpd-2.2.29-win32-ssl_0.9.8zc is it a matter of considering the site's reputation, to assure users?

Thanks,
Dave

[glsmith]

2.2.25 w/ 0.9.8y is not safe. Just no one has removed the installer. The level of safety (or unsafeness) is dependent on your use, how you use and what parts you use.

As far as the 3rd party distributions, apache.org does not endorse any one of them! It lists the most popular distributions it knows about.

Site reputation is a good indicator, especially when a distro has been around for many years. A little searching google should answer any trust/safety concerns you may have about any of them as well.

[DaveEcometry]

Thank you!!!

[maxCola]

Thanks you very much! Thanks to people like you, this world becomes the better place for you and for me! apachelounge.com is the best website ever!