How-To Remove HPDM HTTPS Repository headers
How-To limit exposure by removing Apache, OpenSSL & PHP version information from HTTPS Headers.
By default, the headers contain version information regarding, Apache, OpenSSL & PHP.
Version info can be removed from the HTTPS Repository headers by editing the httpd.conf file.
This file is located in the following directory:
HP Device Manager\HTTPSRepository\Apache24\conf\
Add the following lines to the end of the file:
ServerSignature Off
ServerTokens Prod
Restart the HPDM HTTPS Repository service.
Now the headers will only show “Server: Apache” without any further version info.
Was this post helpful?
Let us know if you liked the post. That’s the only way we can improve.