- Applying the Apache License, Version 2.0
- Understanding the 2.0 license
- Applying the license to new software
- Updating Existing Software
- Frequently Asked Questions (Updates)
- Frequently Asked Questions (General)
- Where Can I Find More Information?
- Where Can I Find Policy?
- Where do I find a copy of the new license?
- Do I have to have a copy of the license in each source file?
- In my current source files I have attribution notices for other works. Do I put this in each source file now?
- Can/Should individual committers added copyright statements to the NOTICE or source code files?
- Can the LICENSE and NOTICE files be called LICENSE.txt and NOTICE.txt?
- Should the license be included in source files for documentation (e.g. XML that is transformed to HTML)?
- ASF IRC Services and Archives
- How to use the ASF mail search facility
- CloudKick logging tool at Apache
- ASF Content Management System
- CMS Adoption
- CMS Reference
- Markdown format used by CMS pages
- Information flow
- Control Flow of the Standard Build System
- Setting up your content
- Organization of the webgui pages
- FAQ - Anonymous/Non-Committer Use
- I'm not a committer on $project, which uses the CMS. Can I still use the CMS?
- I'm having trouble committing changes from an anonymous clone after applying changes which added files or directories.
- What is
Quick Commitand why would I use it? - Why doesn't the bookmarklet take me directly to the
Editscreen for a page? - How come the publish link doesn't show diffs of newly added files?
- Is it safe to click on the
Static,Staged, orProductionlinks? What do each of these do? - How do I force the CMS to do a full site build?
- How do I add a new file or directory to my site?
- What revision of the site is currently being served?
- We've completely restructured our site and now there are a lot of leftover files on the live site. How do we clean things up?
- What version of Django's template library does the CMS use?
- How do I use the code highlighter?
- How come my nested lists don't render properly?
- How do I verify the
markdown -> htmlconversion by the python implementation, before committing my changes? - How do I create per-directory navigation links in the CMS?
- How do I make the mail archives for my TLP accessible through the /mail URL?
- How do I run the CMS build scripts?
- How do I use the CMS with an external build system?
- How do I verify compatibility if I write a client app for the CMS?
- How do I publish generated docs (eg. doxygen)?
- Is there any way to turn off all these annoying buildbot commit messages appearing on our commit lists?
- Help! I made a massive commit to my CMS source tree and now I cannot use the CMS webgui, not even to publish the site!
- Running
svn logon a file in the production tree gives too many results! - Running
svn logon the production tree shows entries from staging.
- Apache Planet - syndication of committers' blogs
- Committers' FAQ
- General Questions
- I have just been elected a Committer, so what I should do now?
- What Is PlanetApache?
- What Is ApacheCon?
- What Is A Hackathon?
- What Is An Infrathon?
- How do I manage my volunteer energy?
- How do I start a new project in the ASF?
- What are the responsibilities of a Committer?
- Is there a set term for acting as a Committer? Will I have to be elected again?
- How Do I Bring Code Developed Outside Apache To An Existing Project?
- Infrastructure, Website, and Technical Questions
- How do I make infrastructure requests?
- What does the Infrastructure Team use for communicating with the public?
- What hosts/machines at Apache do I have access to?
- What can (and can't) I do on those machines?
- Is there a way to see a graph of loads (CPU, I/O, network)?
- What should I do if Host Key Has Changed when loggint into an Apache server?
- Version Control Questions
- Mail Questions
- How do I setup my Apache email account?
- How do I subscribe to a mailing list?
- How do I request the creation of a new mail list?
- How do I find out list subscribers there are?
- Moderation: How do I request changes for moderators?
- Moderation: what should I do with "MODERATE" emails.
- Moderation: dealing with problem posts
- I didn't forward my mail before. How can I download my old mail?
- Where Should Project Business Be Discussed?
- I've Just Made My First Commit. Why Isn't A Commit Message Delivered?
- Legal And Organizational Questions
- General Questions
- Tips for email contributors
- Contributors Tech Guide
- Handling Cryptography within an ASF Release
- Overview
- Notification of Updates to this Page
- Check the Export Control Classification Number (ECCN)
- Update the Exports Page with Source Links
- Notify the U.S. Government of the Release
- Inform Users by Including a Crypto Notice in the Distribution's README
- Frequently Asked Questions
- What is the MANUFACTURER?
- What is the NOTIFICATION?
- When is the first time a notification email must be sent?
- What are examples of when a crypto item is publicly accessible through ASF servers?
- Are public contributions of crypto items to the mailing list, JIRA or Bugzilla databases considered exports?
- If we distribute previously exported crypto items, must we still qualify the same item for export?
- If the ASF distributes a particular crypto item within one product under the TSU exception, must the same item requalify for the TSU exception when distributed in a different ASF product?
- If the ASF distributes/exports a crypto item after qualifying it under the TSU exception, must the same product requalify for release of future versions?
- Where must the email's notification URL point to?
- If the notification URL never changes, when are additional notification emails required?
- Is there any BIS requirement to tell users and/or redistributors of our products about the crypto within our products?
- When exporting a product that is not only designed to use some third-party crypto item, but also includes the third-party crypto item, does this require two notifications or one notification with two manufacturers?
- Can the ultimate link to the crypto item's source code point to a non-ASF web page?
- What if the object/binary code being distributed was built with a particular compiler switch?
- Do we ever need to notify the BIS of the location of object/binary files?
- If my project ships a binary that includes libssl/libcrypto, what notifications must be made?
- If my project ships a binary that provides bindings to OpenSSL, but does not include its source or binaries, what notifications must be made?
- Isn't it somewhat weird that I, who am not a U.S. citizen nor resident, should be constrained as to what or how I can commit to an ASF repository by some U.S. law?
- Do digest algorithms such as MD5 and SHA1 require notification?
- FreeBSD Jails for ASF projects
- Git access to Apache codebases
- Contacting the Infrastructure Team
- ASF Infrastructure mailing lists
- Updating the Infrastructure web site
- How to be an ASF Infrastructure volunteer
- Apache Infrastructure
- How To Transition To A Longer Key
- Assembling LICENSE and NOTICE.
- Intended Audience
- Overview of the
LICENSEandNOTICEfiles - Location Within the Source Tree - The Simple Case -- No Bundled Dependencies - Step-by-Step Instructions - Machines List
- Apache Mirroring Information
- Miscellaneous Policies
- Guide for new committers
- Open Access SVN
- How To OpenPGP
- Introduction
- GNU Privacy Guard
- How To Update Apache Documents With Details Of A New Key
- How To Use The Web Of Trust
- Project Management Committee Guide
- Intended Audience
- PMC Required Policy
- PMC FAQ
- What Is A PMC?
- We've decided on new committer. Now what?
- How to grant SVN access to a project source repository
- We want to grant karma to someone who already has an account.
- We need access to a machine other than people.apache.org.
- We've voted in a new PMC member. Now what?
- A PMC member wishes to be resign/go emeritus. Now what?
- Should the PMC remove inactive members?
- What are the duties of the PMC chair and how to perform them?
- How Do We Import Code From An External Source?
- How Do I Search The Archives For Private Lists?
- Who Is Allowed To Subscribe To A Project's Private List?
- How Do We Request A Wiki?
- How Do We Request A Blog?
- How Do We Request A New Mailing List?
- Where Should Project Business Be Discussed?
- How To Request A Blog For Your Apache Project
- Choosing names for ASF projects
- Manage your project web site
- How To Manage any Apache Project's Website
- How do I preview my project website?
- Can I control the configuration of my project website?
- How does logging work?
- Do project sites have to use [the CMS](cms)?
- Do project sites have to use svnpubsub?
- How to provide public access to our project mail archive mbox files?
- Can my project site use its own favicon instead of just the Apache Feather?
- How can I minimize the number of changes committed in my Maven/JavaDoc/generated site?
- Publishing Maven Artifacts
- Release Download Pages (DRAFT)
- Publishing Releases
- Publishing Releases
- The Goal of the Release Process — or — What is an Apache Release, Anyway?
- Who Manages The Release Process?
- What is a Valid Release Package?
- Signing release artifacts
- Voting to Release
- Distribution
- I've Just Published A Release: Why Isn't It Available From XYZ?
- How Can I Archive An Old Release?
- For Legacy TLPs - What File Permissions Should Be Set On The Release? - Rsync Schedule
- Signing Releases
- Abstract
- Important
- Help Wanted!
- Further Reading
- Basic facts
- The KEYS File
- Why We Sign Releases
- Security Basics
- Key Basics
- Signing Basics
- How Do I Sign A Release?
- What Is an OpenPGP Compatible ASCII Armored Detached Signature?
- What Is OpenPGP?
- What Is Public Key Cryptography?
- What Is An Detached Signature?
- What Is ASCII Armoring?
- What Is An MD5 Checksum?
- What is a SHA checksum?
- What Is A Message Digest Algorithm?
- What Is A Web Of Trust?
- How Do I Link Into A Public Web of Trust?
- What Is A Key Signing Party?
- How Can I Link My Key Into The Apache Web of Trust?
- What Does Verifying A Signature Mean?
- How Can I Check The Integrity Of A Release?
- What Does 'Public Key Not Found' Mean (When Verifying A Signature)?
- What is a Trusted Key?
- What Is The Difference Between A Valid Signature from an Untrusted Key And An Invalid Signature from an Untrusted Key?
- What Is A Public Key Fingerprint?
- Why Infeasible And Not Impossible?
- Where Should I Create The Signatures?
- What Is 'Insecure Memory' And Should I Be Worried?
- What is a Passphrase?
- What Is A Revocation Certificate?
- How Do I Revoke A Key?
- Where Should A Revocation Certificate Be Stored?
- How Do I Distribute A Revocation Certificate?
- What Is The Difference Between Deleting And Revoking A Key?
- Can I Mark A Key As Locally Trusted?
- How Can I Safely Practice Using OpenPGP?
- What Is The Difference Between A Public And A Private Key?
- How Should My Code Signing Private Key Be Protected?
- How Secure Does The Machine Used To Sign Releases Need To Be?
- Which Applications Create OpenPGP Compatible Signatures?
- How Safe Does The Private Key Need To Be?
- What Does 'Isolated Installation' Mean?
- What Key Length Is Recommended?
- Is MD5 Still Secure?
- Is SHA-1 Still Secure?
- What is SHA-3?
- Which Standard Crytographic Hash Algorithms Are Secure?
- How Do You Generate A Code Signing Key?
- What OpenPGP User-ID Should I Choose For My Code Signing Key?
- What OpenPGP Comment Should I Choose For My Code Signing Key?
- What Is A Public Key Server?
- How Do You Upload A Key To A Public Key Server?
- How Can I Ensure My Local Web Of Trust Is Up To Date?
- How Do You Export A Key?
- What Is A Key ID?
- What Is A Sub Key?
- How Do I A Use Sub Key To Sign Emails?
- How Can I Find Out More?
- Is There A Quick Way To Sign Several Distributions?
- How Can I Transfer A Secret Key?
- Why Do Some People Have Two Keys?
- What Is A Transition Period (For Keys)?
- How Should I Transition From A Short To A Longer Key?
- I Have A New Key. Which Apache Documents Need To Be Updated?
- What Is RSA?
- How Do I Find The Length Of A Key?
- Releases Policy
- Release Questions
- Release Management Questions
- Release Distribution and Mirroring Questions
- Where can we host test packages (nightly builds and release candidates)?
- Where can we host public (GA) releases?
- How are releases archived?
- When Should An Old Release Be Archived?
- How do I upload a release (current way)?
- Which Directory For What Build?
- How Is An Old Release Moved To The Archives?
- How do I release Maven Artifacts?
- Release Licensing Questions
- Which Files Must Contain An ASF License Text?
- Is A Full Copy Of The License Required In Each Source File?
- Where Is The Right Place For Attribution Notices?
- What Content Is Appropriate For The NOTICE File?
- Is A NOTICE File Required For Pure ASF Code?
- If An Artifact Contains Code Under Several Licenses, Should It Contain Several License Files?
- What Are The Requirements To Distribute Other Artifacts In Addition To The Source Package?
- Questions About Release Statistics
- ASF Jar Repositories
- Services List
- Zones for ASF projects
- Subversion and Git integration with JIRA tickets
- Committer email configuration
- Committer SSH Configuration on Windows
- Committer SSH Access (DRAFT)
- Source Code Repository
- Experimental writable Git repositories
