Topic: Change Apache service description

[elav83]

Can some one tell me how to change the httpd service description in Windows?
When Apache is run as service using the command httpd.exe -k install -n "MyServiceName" then we are able to see the version details in service description.
Description: Apache/2.4.23 (Win64) OpenSSL/1.0.2h
We want to hide the description for security reason.

[Steffen]

You can try the directive: ServerTokens

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of: Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
#

[elav83]

Hi Steffen

Thanks for the reply.
I need to disable server details in service description(httpd is run as service in windows).
My config file already has the following configuration:

#To disable server signature
ServerSignature Off
ServerTokens Prod

[timo]

[elav83]

Hi Timo,
Thanks for the reply.

SC command changes the description but the description is reset every time when the service is started. It looks like Apache sets the description at the service startup.
SC command is not solving the problem.

Is there any configuration available to change the service description? or In which source code file we have to make the change.

[tholian]

can you give a screenshot of what exactly you wish to change?

[elav83]

Hi Tholian,

Thanks for the reply. Here is the screen shot.
I want to change/hide the description. Due to security reasons I want to hide the Apache/OpenSSL version details in
server machine.


Regards,
Elavarasan

[elav83]

I'm able to change the service description by modifying the source code.

Source File: ..\httpd-2.4.23\server\mpm\winnt\service.c
Function: set_service_description()
The variable full_description is assigned with custom description:
full_description = (const char *)AP_SERVER_MY_DESCRIPTION;


I'm not sure whether changing the source is the only possible way or any other alternative is also available.

[tholian]

you can change it by starting windows command prompt as administrator and enter the following:

[timo]

Instead of changing the description, try http://stackoverflow.com/questions/38568582/how-to-change-apache-service-description-in-windows to hide it.

[elav83]

The link in the stackoverflow describes about 'LanmanService' and not the Apache service.

The only possible solution I know is changing the source code and it works.

[James Blond]

[tpbradt]

All,

1) Any option for changing the Apache services description does not work, whether it is using sc.exe or going straight to the registry. When the service is next started or restarted, it will change the description right back to the original.
2) Yes, the option listed in the SO post answer can be used for any service and not just the LanmanServer. However it is not a good option for anyone who still wants the service visible but just wants to hide or change the DESCRIPTION of the service. The "hidden" parameter hides the service itself, not just the description as the user listed as the option. NOTE: The Microsoft kb is inaccurate...the value to be added is a REG_DWORD, not REG_BINARY.
3) None of the httpd.conf directives, including ServerTokens as mentioned here (seems to apply only the HTTP response header, nothing to do with the service), seem to have any relation to the service description.
4) I am concluding, as elav83 has also insisted, that the only real solution is to modify the code itself. Sad...this should be configurable.