Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Unable to hide server and openssl information on windows |
|
| Author |
|
hariprasad.n
Joined: 06 Jan 2017
Posts: 4
Location: Bangalore
|
 Posted: Wed 18 Jan '17 13:22 Post subject: Unable to hide server and openssl information on windows |
 |
|
Hi Team,
I am using Apache 2.4.25 and configured with
ServerSignature Off
ServerTokens Prod entries.
On browser the apache and openssl versions are not showing, but when i scan the URL on "https://www.ssllabs.com/ssltest" site it is showing the exact Apache and openSSL version details.
Is there any way to hide this information. |
|
| Back to top |
|
DnvrSysEngr
Joined: 15 Apr 2012
Posts: 226
Location: Denver, CO USA
|
| Posted: Wed 18 Jan '17 19:05 Post subject: |
|
|
Your settings of
ServerSignature Off
ServerTokens Prod
are correct.
I just tried the test at ssl labs and my server info DID NOT appear at all.
One option you can try (this is what I am using too) is "mod_bikeshed."
It can be found at:
https://www.apachehaus.net/modules/mod_bikeshed/ |
|
| Back to top |
|
DnvrSysEngr
Joined: 15 Apr 2012
Posts: 226
Location: Denver, CO USA
|
| Posted: Wed 18 Jan '17 19:17 Post subject: |
|
|
Just to confirm, the steps you have taken along with the alternate solution I posted will only hide the Apache Server version. It will not hide the SSL Certificate information.
I have never seen SSL version posted via Apache (if that is indeed what you are saying). The SSL Certificate information is posted, not the version (ex. 1.01x, 1.1.0x, etc.). |
|
| Back to top |
|
|
|
|
|
|
