You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2012/11/29 00:39:02 UTC

[Bug 54222] New: ServerTokens checking is not complete

https://issues.apache.org/bugzilla/show_bug.cgi?id=54222

            Bug ID: 54222
           Summary: ServerTokens checking is not complete
           Product: Apache httpd-2
           Version: 2.4.3
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Core
          Assignee: bugs@httpd.apache.org
          Reporter: jackie.qq.zhang@gmail.com
    Classification: Unclassified

Created attachment 29650
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=29650&action=edit
"harmless" patch which add a log message

Hi, 

This's a configuration related patch. Basically for the "ServerTokens" config
directive, any random string will be regarded as the "Full" option. This bugged
me when my input has typos, e.g., 

ServerTokens Mionr

What the patch does is to check whether the user input matches any option
keyword, and prints out a log message to notify users if their input does not
match any keyword. It still uses the "Full" option if none are matched so that
it won't affect legacy systems, but only provide verbosity.

Thanks,
Jackie

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 54222] ServerTokens checking is not complete

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54222

--- Comment #2 from Jackie Zhang <ja...@gmail.com> ---
(In reply to comment #1)
> thanks for the report. I think we should fail startup here though even in
> 2.4.x

Thank you, Eric. 

My concern for failing startup is that it may be inconsistent with the old
system behavior, and may cause complaints.

I'm fine if httpd uses "Full" and let me know its decision. Afterall, it won't
cause severe problems.  

If you need the fail startup patch, please let me know.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 54222] ServerTokens checking is not complete

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54222

--- Comment #1 from Eric Covener <co...@gmail.com> ---
thanks for the report. I think we should fail startup here though even in 2.4.x

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 54222] ServerTokens checking is not complete

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54222

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 54222] ServerTokens checking is not complete

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54222

Jackie Zhang <ja...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |PatchAvailable
                 CC|                            |jackie.qq.zhang@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org