I want to improve security of my Apache webserver.
ServerTokens Prod ServerSignature Off
/etc/init.d/apache2 reload /etc/init.d/apache2 restart
The values Prod and Off should be fine, but I get these errors:
ServerTokens takes one argument, Determine tokens displayed in the Server: header - Min(imal), OS or Full Action 'configtest' failed.
ServerSignature takes one argument, En-/disable server signature (on|off|email) Action 'configtest' failed.
Where do I find Apache's configtest declaration, so I can tell it to accept Prod and Off?
I had inline comments in my config file, which are not allowed.
So do NOT do this:
ServerTokens Prod # Added this on 10/20/2012
Instead do it this way:
# Added this on 10/20/2012: ServerTokens Prod
However, the error messages confused me, since they only had three options (Min, OS and Full) and were all lower case (on|off|email) while in the config file there were more options and ucfirst.