How to edit Apache server banner in AIX 7.1

From OSX to iPods, iTunes to Mac Minis, and all other things Apple.

Moderators: David, Thresher

How to edit Apache server banner in AIX 7.1

Postposted on Fri Jan 18, 2013 3:35 am

Dear Experts,

1. I have installed apache 2.2.22 version for web interface in AIX 7.1 server
2. i am using the apache for req routing using re write rule (mod writers)
3. in the year of 2008 my collegue compiled the apache with openssl version OpenSSL/0.9.8k
4. This version is having security threads and hence the info sec team advised to update he openssl to new version.
5. But Now my apache architecture is not using openssl so i have removed the openssl from the server and recomplied the apache with latest verson 2.2.22.

still when a http req hit the server it is showing the banner "Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8k"
-------------------------------------------------
hulstms> telnet inpartnerdev.u.com 80
Trying...
Connected to inpartnerdev.u.com.
Escape character is '^]'.

GET / HTTP/1.1

HTTP/1.1 400 Bad Request
Date: Thu, 17 Jan 2013 11:58:02 GMT
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8k
Content-Length: 226
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
</body></html>
Connection closed.


Desired Output :-

hulstms> telnet inpartnerdev.u.com 80
Trying...
Connected to inpartnerdev.u.com.
Escape character is '^]'.

GET / HTTP/1.1

HTTP/1.1 400 Bad Request
Date: Thu, 17 Jan 2013 11:58:02 GMT
Server: Apache/2.2.22 (Unix)
Content-Length: 226
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
</body></html>
Connection closed.


only because of this the security team is commenting red in audit.

do u know the location of this banner file where i can manually edit that.


Regards
Bala
balamuruganpalani
Gerbil In Training
 
Posts: 1
Joined: Fri Jan 18, 2013 3:27 am

Re: How to edit Apache server banner in AIX 7.1

Postposted on Fri Jan 18, 2013 8:54 am

I do believe this is set at compile time. You can turn it off though in apache2.conf / httpd.conf. Lookup ServerSignature for options.
Core i7 920 @stock - 6GB OCZ Mem - Adaptec 5805 - 2 x Intel X25-M in RAID1 - 5 x Western Digital RE4 WD1003FBYX 1TB in RAID 6 - Nvidia GTX 460
kc77
Gerbil Team Leader
 
Posts: 242
Joined: Sat Jul 02, 2005 2:25 am

Re: How to edit Apache server banner in AIX 7.1

Postposted on Fri Jan 18, 2013 9:35 am

I would look really hard at whether you're actually running the version that you recompiled. It sounds like you are still running the old version to me. Maybe you did not copy the new binaries to the correct location?

AFAICT the ServerSignature and ServerTokens directives control whether the various parts of the banner are generated, but not their contents; the contents are determined by what's actually running. So if it is saying that you are still running OpenSSL/0.9.8k, then OpenSSL/0.9.8k is still compiled in.

Edit: One possibility -- if you built/installed from generic sources, the default installation location may not be where AIX expects!
(this space intentionally left blank)
just brew it!
Administrator
Gold subscriber
 
 
Posts: 37494
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer


Return to Apple Sanctuary

Who is online

Users browsing this forum: No registered users and 3 guests