From owner-freebsd-apache@FreeBSD.ORG  Mon Jul 25 17:26:35 2005
Return-Path: <owner-freebsd-apache@FreeBSD.ORG>
X-Original-To: apache@freebsd.org
Delivered-To: freebsd-apache@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 779A516A420
	for <apache@freebsd.org>; Mon, 25 Jul 2005 17:26:35 +0000 (GMT)
	(envelope-from chip@force-elite.com)
Received: from utopia.in.force-elite.com (force-elite.com [216.255.199.145])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 57E5A43D5C
	for <apache@freebsd.org>; Mon, 25 Jul 2005 17:26:34 +0000 (GMT)
	(envelope-from chip@force-elite.com)
X-AuthUser: chip@force-elite.com
Received: from [127.0.0.1] (127.0.0.1:56252)
	by localhost with [XMail 1.17 (Linux/Ix86) ESMTP Server]
	id <SC86F9> for <apache@freebsd.org> from <chip@force-elite.com>;
	Mon, 25 Jul 2005 10:26:31 -0700
Message-ID: <42E520B9.507@force-elite.com>
Date: Mon, 25 Jul 2005 19:26:17 +0200
From: Paul Querna <chip@force-elite.com>
User-Agent: Mozilla Thunderbird 1.0.2 (Macintosh/20050317)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Uzi Klein <uzi@bmby.com>
References: <42E51943.7030804@bmby.com>
In-Reply-To: <42E51943.7030804@bmby.com>
X-Enigmail-Version: 0.91.0.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Cc: apache@freebsd.org
Subject: Re: Server signature
X-BeenThere: freebsd-apache@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Support of apache-related ports  <freebsd-apache.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-apache>, 
	<mailto:freebsd-apache-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-apache>
List-Post: <mailto:freebsd-apache@freebsd.org>
List-Help: <mailto:freebsd-apache-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-apache>,
	<mailto:freebsd-apache-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Jul 2005 17:26:35 -0000

Uzi Klein wrote:
> Hi folks
> 
> I know it's off topic but I'm trying to hide apache signature (for
> security reasons) and got a problem
> 
> thew patch below does change the server name, but the signature still
> displays
> 
> "My Server/1.0.0 (Unix) mod_perl/1.29 mod_ssl/2.8.22 OpenSSL/0.9.7e"
> 
> Any clue where do i disable the modules list and the (Unix) part?
> 

This is the wrong way to change it.

This will cause many scripts to mis-detect the version number.

ServerTokens is the correct directive to eliminate the list of modules.

If you want to change the name, you are better off doing it in other places.

-Paul

> 
> Thanks, Uzi
> 
> 
> --- src/include/httpd.h.orig    Mon Jul 25 10:18:14 2005
> +++ src/include/httpd.h Mon Jul 25 10:46:54 2005
> @@ -387,8 +387,8 @@
>   */
> 
>  #define SERVER_BASEVENDOR   "Apache Group"
> -#define SERVER_BASEPRODUCT  "Apache"
> -#define SERVER_BASEREVISION "1.3.33"
> +#define SERVER_BASEPRODUCT  "My Server"
> +#define SERVER_BASEREVISION "1.0.0"
>  #define SERVER_BASEVERSION  SERVER_BASEPRODUCT "/" SERVER_BASEREVISION
> 
>  #define SERVER_PRODUCT  SERVER_BASEPRODUCT
> 
>