You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Apache Wiki <wi...@apache.org> on 2008/08/12 19:02:01 UTC
[Tomcat Wiki] Update of "FAQ/Security" by TimFunk
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Tomcat Wiki" for change notification.
The following page has been changed by TimFunk:
http://wiki.apache.org/tomcat/FAQ/Security
The comment on the change is:
Server header
------------------------------------------------------------------------------
1. [#Q6 How do I restrict access by ip address or remote host?]
1. [#Q7 How do I use jsvc/procrun to run Tomcat on port 80 securely?]
1. [#Q8 Has Tomcat's security been independently analyzed or audited?]
+ 1. [#Q9 How do I change the Server header in the response?]
+
== Answers ==
[[Anchor(Q1)]]'''How do I use OpenSSL to set up my own Certificate Authority (CA)?'''
@@ -57, +59 @@
Yes, by numerous organizations and individuals, many times. Try [http://www.google.com/search?sourceid=navclient&ie=UTF-8&q=is+tomcat+secure this Google search] and you'll see many references, guides, and analyses.
+ [[Anchor(Q9)]]'''How do I change the Server header in the response?'''
+
+ In server.xml - add a "server" attribute to the Connector element. http://tomcat.apache.org/tomcat-6.0-doc/config/http.html
+
+
+
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org