Apache 2.2 : turn off Serversignature. version is still there

[gundamz]

Apache 2.2 : turn off Serversignature. version is still there

I have turn off serversignature.

After restart, the apache version with the modules are still listed.

any ideas why?

 

[bornonline]

Try this after you update the conf file.
/usr/local/cpanel/bin/apache_conf_distiller --update --main

Apache 2.2 : turn off Serversignature. version is still there

I have turn off serversignature.

After restart, the apache version with the modules are still listed.

any ideas why?

 

[gundamz]

I did run /usr/local/cpanel/bin/apache_conf_distiller --update --main and restart apache.

It is still there.

 

[sampride]

you need to put the code at

/etc/httpd/conf/extra/httpd-default.conf

 

[gundamz]

you need to put the code at

/etc/httpd/conf/extra/httpd-default.conf

I edit that file and restart apache.

It is still showing the version and other info.

Did you successfully remove the version?

 

[arhs]

Add this:

ServerSignature Off
ServerTokens Prod

 

[gundamz]

Add this:

ServerSignature Off
ServerTokens Prod

I have already those in httpd.conf

it is still showing apache version.

 

[sawbuck]

Assuming your directives are correct in /usr/local/apache/conf/extra/httpd-default.conf then add the following to httpd.conf:

Include "/usr/local/apache/conf/extra/httpd-default.conf" and run the command bornonline mentioned.

 

[sampride]

I edit that file and restart apache.

It is still showing the version and other info.

Did you successfully remove the version?

Yes, I've disabled the signature in apache2

 

[rhenderson]

I have already those in httpd.conf

it is still showing apache version.

Where is it showing the version from WHM or a phpinfo page? I thought I was not disabling the signature because it was showing in WHM Apache Status page, but loading phpinfo shows the signature is disabled.

 

[WebHostDog]

Hello,
You may try:

curl -LI http://somedomainhostedonserver.com

and see if the version is still showing.


Thanks,

 

[gundamz]

Where is it showing the version from WHM or a phpinfo page? I thought I was not disabling the signature because it was showing in WHM Apache Status page, but loading phpinfo shows the signature is disabled.

I am viewing it from WHM > Apache status.

I guess it had been disabled since phpinfo doesn't show it..

WebHostDog, i tried that. It is not showing apache version.

I think it is working fine.

 

[SuperBaby]

In Apache 2.x, you need to add this line to httpd.conf and restart Apache:

SecServerSignature "Your String Here"