LAMP Tips! » Apache http://lamptips.com Tips, tricks and (good) hacks Tue, 12 May 2009 22:04:48 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Hide Apache Version Number http://lamptips.com/2008/04/hide-apache-version-number/ http://lamptips.com/2008/04/hide-apache-version-number/#comments Fri, 18 Apr 2008 18:39:27 +0000 Geoff W. http://lamptips.com/?p=7 Add to httpd.conf

ServerSignature Off
ServerTokens Prod

]]> http://lamptips.com/2008/04/hide-apache-version-number/feed/ 0 Disable HTTP Trace Method http://lamptips.com/2008/04/disable-http-trace-method/ http://lamptips.com/2008/04/disable-http-trace-method/#comments Fri, 18 Apr 2008 17:55:00 +0000 Geoff W. http://lamptips.com/?p=6 Disable the TRACE Method for PCI Compliance

Add this to your httpd.conf

TraceEnable off

Alternatively, if not using 1.3.34 or 2.0.55+, you can add this to your httpd.conf:

RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]

]]> http://lamptips.com/2008/04/disable-http-trace-method/feed/ 0 Disable weak ciphers and older TLS support http://lamptips.com/2008/04/disable-weak-ciphers-and-older-tls-support/ http://lamptips.com/2008/04/disable-weak-ciphers-and-older-tls-support/#comments Fri, 18 Apr 2008 17:46:28 +0000 Geoff W. http://lamptips.com/?p=5 Disable SSLv2/TLS1 for PCI Compliance

Add the following to httpd.conf:

SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:-SSLv2:-RC4:+EXP

]]> http://lamptips.com/2008/04/disable-weak-ciphers-and-older-tls-support/feed/ 0