hide Apache / PHP version information #15

fkooman commented 2025年07月03日 11:08:35 +02:00

On Fedora/EL:

$ cat /etc/php.d/40-expose.ini 
expose_php = Off

$ cat /etc/httpd/conf.d/tokens.conf 
ServerTokens ProductOnly

This reduces the output from:

$ curl -I https://elx.tuxed.net/vpn-user-portal/oauth/token
HTTP/1.1 401 Unauthorized
Date: 2025年7月03日 09:08:18 GMT
Server: Apache/2.4.63 (AlmaLinux Kitten) OpenSSL/3.2.2
X-Powered-By: PHP/8.3.19
Strict-Transport-Security: max-age=15768000
Content-Type: application/json

to:

$ curl -I https://elx.tuxed.net/vpn-user-portal/oauth/token
HTTP/1.1 401 Unauthorized
Date: 2025年7月03日 09:02:14 GMT
Server: Apache
Strict-Transport-Security: max-age=15768000
Content-Type: application/json

On Fedora/EL: ```bash $ cat /etc/php.d/40-expose.ini expose_php = Off ``` ```bash $ cat /etc/httpd/conf.d/tokens.conf ServerTokens ProductOnly ``` This reduces the output from: ``` $ curl -I https://elx.tuxed.net/vpn-user-portal/oauth/token HTTP/1.1 401 Unauthorized Date: 2025年7月03日 09:08:18 GMT Server: Apache/2.4.63 (AlmaLinux Kitten) OpenSSL/3.2.2 X-Powered-By: PHP/8.3.19 Strict-Transport-Security: max-age=15768000 Content-Type: application/json ``` to: ``` $ curl -I https://elx.tuxed.net/vpn-user-portal/oauth/token HTTP/1.1 401 Unauthorized Date: 2025年7月03日 09:02:14 GMT Server: Apache Strict-Transport-Security: max-age=15768000 Content-Type: application/json ```