Hide X-Powered-By and Server header

[gigi.git] / src / org / cacert / gigi / Launcher.java

diff --git a/src/org/cacert/gigi/Launcher.java b/src/org/cacert/gigi/Launcher.java
index 1ed07e2cdb13dbc72af9e3213cd4ecb8d3444ee7..6918074774d0d696c177224f06f511c4a1647392 100644 (file)
--- a/src/org/cacert/gigi/Launcher.java
+++ b/src/org/cacert/gigi/Launcher.java
@@ -30,6 +30,9 @@ public class Launcher {
                Server s = new Server();
                // === SSL HTTP Configuration ===
                HttpConfiguration https_config = new HttpConfiguration();
+               https_config.setSendServerVersion(false);
+               https_config.setSendXPoweredBy(false);
+
                // for client-cert auth
                https_config.addCustomizer(new SecureRequestCustomizer());
 
@@ -43,7 +46,8 @@ public class Launcher {
                s.setHandler(sh);
                sh.addServlet(new ServletHolder(new TestServlet()), "/");
                s.start();
-               if (connector.getPort() <= 1024) {
+               if (connector.getPort() <= 1024
+                               && !System.getProperty("os.name").toLowerCase().contains("win")) {
                        SetUID uid = new SetUID();
                        if (!uid.setUid(-2, -2).getSuccess()) {
                                Log.getLogger(Launcher.class).warn("Couldn't set uid!");