The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Apache 2.2 : turn off Serversignature. version is still there

Discussion in 'EasyApache' started by gundamz, Jan 23, 2008.

  1. gundamz

    gundamz Well-Known Member

    Joined:
    Mar 27, 2002
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    316
    Apache 2.2 : turn off Serversignature. version is still there

    I have turn off serversignature.

    After restart, the apache version with the modules are still listed.

    any ideas why?
     
    #1 gundamz, Jan 23, 2008
  2. bornonline

    bornonline Well-Known Member

    Joined:
    Nov 19, 2004
    Messages:
    139
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Earth
    Try this after you update the conf file.
    /usr/local/cpanel/bin/apache_conf_distiller --update --main

     
    #2 bornonline, Jan 23, 2008
  3. gundamz

    gundamz Well-Known Member

    Joined:
    Mar 27, 2002
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    316
    I did run /usr/local/cpanel/bin/apache_conf_distiller --update --main and restart apache.

    It is still there.
     
    #3 gundamz, Jan 24, 2008
  4. sampride

    sampride Member

    Joined:
    Jul 8, 2005
    Messages:
    24
    Likes Received:
    0
    Trophy Points:
    151
    you need to put the code at

    /etc/httpd/conf/extra/httpd-default.conf
     
    #4 sampride, Jan 25, 2008
  5. gundamz

    gundamz Well-Known Member

    Joined:
    Mar 27, 2002
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    316

    I edit that file and restart apache.

    It is still showing the version and other info.

    Did you successfully remove the version?
     
    #5 gundamz, Jan 25, 2008
  6. arhs

    arhs Well-Known Member

    Joined:
    Jul 4, 2003
    Messages:
    116
    Likes Received:
    0
    Trophy Points:
    166
    Add this:

    Code:
    ServerSignature Off
ServerTokens Prod
     
    #6 arhs, Jan 25, 2008
  7. gundamz

    gundamz Well-Known Member

    Joined:
    Mar 27, 2002
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    316
    I have already those in httpd.conf

    it is still showing apache version.
     
    #7 gundamz, Jan 27, 2008
  8. sawbuck

    sawbuck Well-Known Member

    Joined:
    Jan 18, 2004
    Messages:
    1,368
    Likes Received:
    5
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    Assuming your directives are correct in /usr/local/apache/conf/extra/httpd-default.conf then add the following to httpd.conf:

    Include "/usr/local/apache/conf/extra/httpd-default.conf" and run the command bornonline mentioned.
     
    #8 sawbuck, Jan 27, 2008
  9. sampride

    sampride Member

    Joined:
    Jul 8, 2005
    Messages:
    24
    Likes Received:
    0
    Trophy Points:
    151

    Yes, I've disabled the signature in apache2
     
    #9 sampride, Jan 28, 2008
  10. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    Where is it showing the version from WHM or a phpinfo page? I thought I was not disabling the signature because it was showing in WHM Apache Status page, but loading phpinfo shows the signature is disabled.
     
    #10 rhenderson, Jan 28, 2008
  11. WebHostDog

    WebHostDog Well-Known Member

    Joined:
    Sep 3, 2006
    Messages:
    144
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    Website Owner
    #11 WebHostDog, Jan 29, 2008
  12. gundamz

    gundamz Well-Known Member

    Joined:
    Mar 27, 2002
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    316
    I am viewing it from WHM > Apache status.

    I guess it had been disabled since phpinfo doesn't show it..

    WebHostDog, i tried that. It is not showing apache version.

    I think it is working fine.
     
    #12 gundamz, Feb 3, 2008
  13. SuperBaby

    SuperBaby Well-Known Member

    Joined:
    Nov 27, 2003
    Messages:
    333
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Thailand
    cPanel Access Level:
    Website Owner
    Twitter:
    In Apache 2.x, you need to add this line to httpd.conf and restart Apache:

    SecServerSignature "Your String Here"
     
    #13 SuperBaby, Feb 4, 2008
(You must log in or sign up to post here.)
Loading...
Similar Threads - Apache turn Serversignature
  1. Abdullah Coldwater

    Returning to easyapache 3 to deploy war

    Abdullah Coldwater, Apr 2, 2017, in forum: EasyApache
    Replies:
    1
    Views:
    190
    cPanelMichael
    Apr 3, 2017
  2. tmcstom

    The system detected EasyApache 4 template change

    tmcstom, Jun 22, 2017 at 12:06 AM, in forum: EasyApache
    Replies:
    6
    Views:
    116
    cPanelMichael
    Jun 23, 2017 at 7:45 AM
  3. cPStacy

    EasyApache 4 Update - June 21, 2017

    cPStacy, Jun 21, 2017 at 4:18 PM, in forum: EasyApache
    Replies:
    0
    Views:
    178
    cPStacy
    Jun 21, 2017 at 4:18 PM
  4. cPJacob

    Apache 2.4.26

    cPJacob, Jun 21, 2017 at 9:51 AM, in forum: EasyApache
    Replies:
    0
    Views:
    1,048
    cPJacob
    Jun 21, 2017 at 9:51 AM
  5. MajorLancelot

    Apache CVE-2017-7679

    MajorLancelot, Jun 19, 2017, in forum: Security
    Replies:
    2
    Views:
    143
    cPanelMichael
    Jun 21, 2017 at 10:02 AM

Share This Page