{"id":6582,"date":"2021-10-30T18:14:41","date_gmt":"2021-10-30T12:44:41","guid":{"rendered":"https:\/\/pheonixsolutions.com\/blog\/?p=6582"},"modified":"2021-10-30T18:14:42","modified_gmt":"2021-10-30T12:44:42","slug":"hide-server-details-and-disable-tlsv1-0-and-tlsv1-1","status":"publish","type":"post","link":"https:\/\/pheonixsolutions.com\/blog\/hide-server-details-and-disable-tlsv1-0-and-tlsv1-1\/","title":{"rendered":"Hide server details and disable TLSV1.0 and TLSV1.1"},"content":{"rendered":"\n

Remove server name from Apache headers<\/strong>:- <\/p>\n\n\n\n

It is essential to remove Apache server header to hide Apache server information and protect your website from malicious attackers. Here\u2019s how to remove server name from Apache response header using htaccess. You can use it to hide the Apache version and server type in Ubuntu, CentOS.<\/p>\n\n\n\n

  1. Open terminal and run the following command to open Apache main configuration file.
    Centos:-<\/strong> vi \/etc\/httpd\/conf\/httpd.conf<\/span>
    Ubuntu:- <\/strong>vi \/etc\/apache2\/apache2.conf<\/span><\/li>
  2. Turn off server signature. Add or Modify the below lines
    ServerSignature Off
    ServerTokens Prod<\/span><\/li><\/ol>\n\n\n\n

    ServerSignature<\/strong>\u00a0\u2013 appears at the bottom of server generated pages such as error pages, directory listings, etc<\/p>\n\n\n\n

    ServerTokens<\/strong>\u00a0\u2013\u00a0decides what Apache will send back in response headers.<\/p>\n\n\n\n

    If you want to disable server signature in WordPress or turn off server signature in CPanel, then you will have to remove Apache server using\u00a0.htaccess<\/em>\u00a0file, since you may not have access to Apache\u2019s main configuration file.

    Open CPanel, locate\u00a0.htaccess<\/em>\u00a0file and edit it. Add the following 2 lines to\u00a0.htaccess<\/em>\u00a0file
    ServerSignature Off<\/span>
    ServerTokens Prod<\/span><\/p>\n\n\n\n

    3. Restart the Apache server with the below command.
    systemctl restart apache2<\/span><\/p>\n\n\n\n

    <\/p>\n\n\n\n

    Disable TLSV1.0 and TLSV1.1:- <\/strong><\/p>\n\n\n\n

    All versions of the SSL\/TLS protocol prior to TLS 1.2 are now deprecated and considered insecure.\u00a0Many web server platforms still have TLS 1.0 and TLS 1.1 enabled by default. However, all modern web browsers are compatible with TLS 1.2. For this reason, it\u2019s a good idea for website owners to check their server configuration to make sure that only current, secure versions of SSL\/TLS are enabled and all others (including TLS 1.0, TLS 1.1, and SSL 3.0) are disabled.<\/p>\n\n\n\n

    You can also check for the SSL\/TLS versions and ciphers supported by a website with the open-source nmap command-line tool:<\/p>\n\n\n\n

    nmap –script ssl-enum-ciphers -p <PORT> <DOMAIN NAME><\/span><\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n

    To disable TLS 1.0 and 1.1 in Apache, you will need to edit the configuration file containing the SSLProtocol directive for your website. This file may be located in different places depending on your platform, version, or other installation details. Some possible locations are:<\/p>\n\n\n\n

    Default Apache installation:-<\/span> \/usr\/local\/apache2\/conf\/extra\/httpd-ssl.conf
    <\/span>Ubuntu\/Debian:-<\/span> \/etc\/apache2\/mods-enabled\/ssl.conf
    <\/span>macOS:-<\/span> \/private\/etc\/apache2\/extra\/httpd-ssl.conf<\/span><\/p>\n\n\n\n

    You can disable all obsolete versions of SSL\/TLS supported by Apache by specifying them as follows:
    SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1<\/span><\/p>\n\n\n\n

    The configuration above enables TLS 1.2, as well as TLS 1.3 if it is available in your environment.<\/p>\n\n\n\n

    Disabling TLSV1.0 and TLSV1.1 at load-balancer level:-<\/strong>

    1) Log into the AWS Console and navigate to the EC2 group. Within this group, click the\u00a0Load Balancers<\/strong>option under Load Balancing.<\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n

    2) At the bottom of the screen, click the\u00a0Listeners<\/strong>\u00a0tab. You should see your HTTPS listener listed. Click the\u00a0Change<\/strong>\u00a0link under the Cipher column.<\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n



    3) You will see a list of Predefined Security Policies in the window that just opened. Ensure you select at least the TLS 1.1 or higher policy. You will notice the selections in the window to the right changing, leaving both vulnerable protocols unchecked.
    <\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n

    Finally, click the\u00a0Save<\/strong>\u00a0button to confirm the changes. You can make use of a service like\u00a0Qualys<\/a>\u00a0to confirm your changes:<\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

    Remove server name from Apache headers:- It is essential to remove Apache server header to hide Apache server information and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1019],"tags":[398,925,926,924,923],"class_list":["post-6582","post","type-post","status-publish","format-standard","hentry","category-cloud-aws","tag-apache2","tag-disable-tlsv1-0-and-tlsv1-1","tag-disable-tlsv1-0-and-tlsv1-1-at-loadbalancer-level","tag-hide-server-details","tag-loadbalancer","psol-cat-cloud-aws"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/phn2x7-1Ia","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=6582"}],"version-history":[{"count":0,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/6582\/revisions"}],"wp:attachment":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=6582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=6582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=6582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}