- Applying the Apache License, Version 2.0
- Understanding the 2.0 license
- Applying the license to new software
- Updating Existing Software
- Frequently Asked Questions (Updates)
- Frequently Asked Questions (General)
- Where Can I Find More Information?
- Where Can I Find Policy?
- Where do I find a copy of the new license?
- Do I have to have a copy of the license in each source file?
- In my current source files I have attribution notices for other works. Do I put this in each source file now?
- Can/Should individual committers added copyright statements to the NOTICE or source code files?
- Can the LICENSE and NOTICE files be called LICENSE.txt and NOTICE.txt?
- Should the license be included in source files for documentation (e.g. XML that is transformed to HTML)?
- Apache Blogs
- CloudKick logging tool at Apache
- ASF Content Management System
- CMS Adoption
- CMS Reference
- Markdown format
- Information flow
- FAQ
- What version of Django's template library does the CMS use?
- How do I use the code highlighter?
- How do I add a new file or directory to my site?
- How do I publish generated docs (eg. doxygen)?
- How do I run the CMS build scripts?
- How come my nested lists don't render properly?
- How do I verify compatibility if I write a client app for the CMS?
- What is
Quick Commitand why would I use it? - Why doesn't the bookmarklet take me directly to the
Editscreen for a page? - How come the publish link doesn't show diffs of newly added files?
- How do I verify the
markdown -> htmlconversion by the python implementation, before committing my changes? - I'm not a committer on $project, which uses the CMS. Can I still use the CMS?
- How do I create per-directory navigation links in the CMS?
- How do I force the CMS to do a full site build?
- How do I use the CMS with an external build system?
- We've completely restructured our site and now there are a lot of leftover files on the live site. How do we clean things up?
- Committers' FAQ
- General Questions
- I have just been elected a Committer, so what I should do now?
- What Is ApacheCon?
- What Is A Hackathon?
- What Is An Infrathon?
- What Is PlanetApache?
- I need to request some changes to infrastructure?
- What does the Infrastructure Team use for communicating with the public?
- Being committed and managing my energy
- What machines do I have access to?
- How Long Will It Take For A CLA To Be Registered?
- How do I start a new project in the ASF?
- Is there a way to see a graph of loads (CPU, I/O, network)?
- What are the responsibilities of a Committer?
- Is there a set term for acting as a Committer? Will I have to be elected again?
- What are the core beliefs of The Apache Way?
- I'm Told That The Host Key Has Changed When I To Login To My Apache Account. What Should I Do?
- How Do I Bring Code Developed Outside Apache To An Existing Project?
- What Do I Need To Keep In Mind When Applying Patches From A Contributor?
- Version Control Questions
- Mail Questions
- How do I setup my email account?
- How do I request the creation of a new mail list?
- How do I find out how many people are subscribed to a list?
- How do I request changes for mail list moderators?
- I am a moderator and receive these "MODERATE" emails.
- I didn't forward my mail before. How can I download my old mail?
- Where Should Project Business Be Discussed?
- I've Just Made My First Commit. Why Isn't A Commit Message Delivered?
- General Questions
- Tips for email contributors
- Contributors Tech Guide
- Handling Cryptography within an ASF Release
- Overview
- Notification of Updates to this Page
- Check the Export Control Classification Number (ECCN)
- Update the Exports Page with Source Links
- Notify the U.S. Government of the Release
- Inform Users by Including a Crypto Notice in the Distribution's README
- Frequently Asked Questions
- What is the MANUFACTURER?
- What is the NOTIFICATION?
- When is the first time a notification email must be sent?
- What are examples of when a crypto item is publicly accessible through ASF servers?
- Are public contributions of crypto items to the mailing list, JIRA or Bugzilla databases considered exports?
- If we distribute previously exported crypto items, must we still qualify the same item for export?
- If the ASF distributes a particular crypto item within one product under the TSU exception, must the same item requalify for the TSU exception when distributed in a different ASF product?
- If the ASF distributes/exports a crypto item after qualifying it under the TSU exception, must the same product requalify for release of future versions?
- Where must the email's notification URL point to?
- If the notification URL never changes, when are additional notification emails required?
- Is there any BIS requirement to tell users and/or redistributors of our products about the crypto within our products?
- When exporting a product that is not only designed to use some third-party crypto item, but also includes the third-party crypto item, does this require two notifications or one notification with two manufacturers?
- Can the ultimate link to the crypto item's source code point to a non-ASF web page?
- What if the object/binary code being distributed was built with a particular compiler switch?
- Do we ever need to notify the BIS of the location of object/binary files?
- If my project ships a binary that includes libssl/libcrypto, what notifications must be made?
- If my project ships a binary that provides bindings to OpenSSL, but does not include its source or binaries, what notifications must be made?
- Isn't it somewhat weird that I, who am not a U.S. citizen nor resident, should be constrained as to what or how I can commit to an ASF repository by some U.S. law?
- Do digest algorithms such as MD5 and SHA1 require notification?
- Converting from CVS to Subversion at the ASF
- FreeBSD Jails for ASF projects
- Git access to Apache codebases
- ASF Infrastructure mailing lists
- Updating the Infrastructure web site
- How to be an ASF Infrastructure volunteer
- Apache Infrastructure
- How To Transition To A Longer Key
- Machines List
- Step-By-Step Guide To Mirroring Releases
- Apache Mirroring Information
- Guide for new committers
- How To OpenPGP
- Introduction
- GNU Privacy Guard
- How To Update Apache Documents With Details Of A New Key
- How To Use The Web Of Trust
- Project Management Committee Guide
- Intended Audience
- PMC Required Policy
- PMC FAQ
- What Is A PMC?
- We've decided on new committer. Now what?
- How to grant SVN access to a project source repository
- We want to grant karma to someone who already has an account.
- We need access to a machine other than people.apache.org.
- We've voted in a new PMC member. Now what?
- A PMC member wishes to be resign/go emeritus. Now what?
- What are the duties of the PMC chair and how to perform them?
- How Do We Import Code From An External Source?
- How Do I Search The Archives For Private Lists?
- Who Is Allowed To Subscribe To A Project's Private List?
- How Do We Request A Wiki?
- How Do We Request A New Mailing List?
- Where Should Project Business Be Discussed?
- Tasks for Creating a Project
- Procedures for Creating a Project
- Choosing names for ASF projects
- Manage your project web site
- Manage your project web site
- How do I preview my project website?
- How do I set the correct file ownership and protections?
- How do I edit my project website?
- Can I control the configuration of my project website?
- How does logging work?
- Do project sites have to use [the CMS](cms)?
- Do project sites have to use svnpubsub?
- Can my project site use its own favicon? We're seeing an Apache Feather.
- Publishing Maven Artifacts
- Release Download Pages (DRAFT)
- Publishing Releases (DRAFT 30 May 2010)
- Publishing Releases (DRAFT 30 May 2010)
- The Goal of the Release Process — or — What is an Apache Release, Anyway?
- Who Manages The Release Process?
- What is a Valid Release Package?
- Signing release artifacts
- Voting to Release
- Distribution
- I've Just Published A Release: Why Isn't It Available From XYZ?
- What File Permissions Should Be Set On The Release?
- How Can I An Archive Old Release?
- Signing Releases
- Important
- Abstract
- Help Wanted!
- Further Reading
- The KEYS File
- Why We Sign Releases
- Security Basics
- Key Basics
- Signing Basics
- How Do I Sign A Release?
- What Is an OpenPGP Compatible ASCII Armored Detached Signature?
- What Is OpenPGP?
- What Is Public Key Cryptography?
- What Is An Detached Signature?
- What Is ASCII Armoring?
- What Is An MD5 Checksum?
- What is a SHA checksum?
- What Is A Message Digest Algorithm?
- What Is A Web Of Trust?
- How Do I Link Into A Public Web of Trust?
- What Is A Key Signing Party?
- How Can I Link My Key Into The Apache Web of Trust?
- What Does Verifying A Signature Mean?
- How Can I Check The Integrity Of A Release?
- What Does 'Public Key Not Found' Mean (When Verifying A Signature)?
- What is a Trusted Key?
- What Is The Difference Between A Valid Signature from an Untrusted Key And An Invalid Signature from an Untrusted Key?
- What Is A Public Key Fingerprint?
- Why Infeasible And Not Impossible?
- Where Should I Create The Signatures?
- What Is 'Insecure Memory' And Should I Be Worried?
- What is a Passphrase?
- What Is A Revocation Certificate?
- How Do I Revoke A Key?
- Where Should A Revocation Certificate Be Stored?
- How Do I Distribute A Revocation Certificate?
- What Is The Difference Between Deleting And Revoking A Key?
- Can I Mark A Key As Locally Trusted?
- How Can I Safely Practice Using OpenPGP?
- What Is The Difference Between A Public And A Private Key?
- How Should My Code Signing Private Key Be Protected?
- How Secure Does The Machine Used To Sign Releases Need To Be?
- Which Applications Create OpenPGP Compatible Signatures?
- How Safe Does The Private Key Need To Be?
- What Does 'Isolated Installation' Mean?
- What Key Length Is Recommended?
- Is MD5 Still Secure?
- Is SHA-1 Still Secure?
- What is SHA-3?
- Which Standard Crytographic Hash Algorithms Are Secure?
- How Do You Generate A Code Signing Key?
- What OpenPGP User-ID Should I Choose For My Code Signing Key?
- What OpenPGP Comment Should I Choose For My Code Signing Key?
- What Is A Public Key Server?
- How Do You Upload A Key To A Public Key Server?
- How Can I Ensure My Local Web Of Trust Is Up To Date?
- How Do You Export A Key?
- What Is A Key ID?
- What Is A Sub Key?
- How Do I A Use Sub Key To Sign Emails?
- How Can I Find Out More?
- Is There A Quick Way To Sign Several Distributions?
- How Can I Transfer A Secret Key?
- Why Do Some People Have Two Keys?
- What Is A Transition Period (For Keys)?
- How Should I Transition From A Short To A Longer Key?
- I Have A New Key. Which Apache Documents Need To Be Updated?
- What Is RSA?
- How Do I Find The Length Of A Key?
- Releases FAQ
- Release Questions
- Release Management Questions
- What Must Every ASF Release Contain?
- What are the ASF requirements on approving a release?
- What Are The Key Points Of ASF Mirroring Policy?
- How do I upload a release (current way)?
- How Should Releases Be Announced?
- Which Directory For What Build?
- How Is An Old Release Moved To The Archives?
- When Should An Old Release Be Archived?
- Is There A Guide To Best Practice?
- How do I release Maven Artifacts?
- Release Licensing Questions
- Which Files Must Contain An ASF License Text?
- Is A Full Copy Of The License Required In Each Source File?
- Where Is The Right Place For Attribution Notices?
- What Content Is Appropriate For The NOTICE File?
- Is A NOTICE File Required For Pure ASF Code?
- If An Artifact Contains Code Under Several Licenses, Should It Contain Several License Files?
- What Are The Requirements To Distribute Other Artifacts In Addition To The Source Package?
- Questions About Release Statistics
- Reporting issues and requesting project resources
- ASF Jar Repositories
- Services List
- Zones for ASF projects
- Committer email configuration
- Committer SSH Configuration on Windows
- Committer SSH Access (DRAFT)
- Source Code Repository
