[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfire-development
Subject:    [PATCH] disable Apache server signature
From:       Peter =?UTF-8?B?TcO8bGxlcg==?= <peter.mueller () link38 ! eu>
Date:       2017-12-05 13:43:17
Message-ID: 20171205144317.3016dee5.peter.mueller () link38 ! eu
[Download RAW message or body]

Sending the server signature is unnecessary and might leak
some internal information (although ServerTokens is already
set to "Prod").

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
---
 config/httpd/global.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/httpd/global.conf b/config/httpd/global.conf
index 6cc69b55e..cc8000379 100644
--- a/config/httpd/global.conf
+++ b/config/httpd/global.conf
@@ -1,5 +1,5 @@
 Timeout 300
-ServerSignature on
+ServerSignature off
 UseCanonicalName off
 ServerTokens Prod
 LogLevel warn
-- 
2.13.6


[prev in list] [next in list] [prev in thread] [next in thread]