Diferencia entre revisiones de «Apache HTTP Server»
De TechShareRoom wiki
Más acciones
Página creada con «== Hardening == *Quitar exposición de versión Cambiar en: <syntaxhighlight lang="bash" copy> /etc/apache2/conf-available/security.conf </syntaxhighlight> <syntaxhighlight lang="bash" copy> ServerTokens Prod ServerSignature Off </syntaxhighlight> *Activar HSTS Abrir: <syntaxhighlight lang="bash" copy> /etc/apache2/sites-available/tu-sitio-le-ssl.conf </syntaxhighlight> Dentro del bloque: <VirtualHost *:443> Añade esto: <syntaxhighlight lang="bash" copy> Header…» |
Sin resumen de edición |
||
| Línea 9: | Línea 9: | ||
ServerTokens Prod | ServerTokens Prod | ||
ServerSignature Off | ServerSignature Off | ||
</syntaxhighlight> | |||
*Securizar SSL | |||
Cambiar en: | |||
<syntaxhighlight lang="bash" copy> | |||
nano /etc/apache2/mods-available/ssl.conf | |||
</syntaxhighlight> | |||
<syntaxhighlight lang="bash" copy> | |||
SSLCipherSuite HIGH:!aNULL:!MD5:!3DES | |||
SSLProtocol -all +TLSv1.2 +TLSv1.3 | |||
SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(128000) | |||
SSLHonorCipherOrder on | |||
</syntaxhighlight> | |||
Activar módulos: | |||
<syntaxhighlight lang="bash" copy> | |||
a2enmod rewrite ssl headers http2 | |||
systemctl restart apache2 | |||
</syntaxhighlight> | </syntaxhighlight> | ||
| Línea 24: | Línea 44: | ||
<syntaxhighlight lang="bash" copy> | <syntaxhighlight lang="bash" copy> | ||
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" | Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" | ||
Header always set X-Content-Type-Options "nosniff" | |||
Header always set X-Frame-Options SAMEORIGIN | |||
Header always set X-XSS-Protection "1; mode=block" | |||
</syntaxhighlight> | </syntaxhighlight> | ||
Revisión del 20:07 22 feb 2026
Hardening
- Quitar exposición de versión
Cambiar en:
/etc/apache2/conf-available/security.confServerTokens Prod
ServerSignature Off- Securizar SSL
Cambiar en:
nano /etc/apache2/mods-available/ssl.confSSLCipherSuite HIGH:!aNULL:!MD5:!3DES
SSLProtocol -all +TLSv1.2 +TLSv1.3
SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(128000)
SSLHonorCipherOrder onActivar módulos:
a2enmod rewrite ssl headers http2
systemctl restart apache2- Activar HSTS
Abrir:
/etc/apache2/sites-available/tu-sitio-le-ssl.confDentro del bloque:
<VirtualHost *:443>
Añade esto:
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options SAMEORIGIN
Header always set X-XSS-Protection "1; mode=block"Reinicia apache
a2enmod headers
systemctl reload apache2