ServerTokens Prod missing

[jamieburchell]

It seems that ServerTokens Prod has been removed which is now causing the full Apache and OpenSSL version information to be output in the response headers.

[LeoColomb]

Thanks for opening this issue, @jamieburchell.
That being said, the ServerTokens directive is still present and actively recommended in here:

server-configs-apache/httpd.conf

Line 97 in 14d8af4

ServerTokens Prod

The older issue is probably relevant to your question as well: #153

[jamieburchell]

@LeoColomb I took the dist file, it's missing from there but was there previously. That's what I base my configs on.

I can see that things have moved around a bit, and the trace stuff has been moved out with it. I never used the dist .htaccess as a .htaccess file, but included it as a conf file.