Hide X-Powered-By and Server header

[gigi.git] / src / org / cacert / gigi / Launcher.java

diff --git a/src/org/cacert/gigi/Launcher.java b/src/org/cacert/gigi/Launcher.java
index 2c8c1f531d67a5e04dcbab21ce7b6a4c40efe359..6918074774d0d696c177224f06f511c4a1647392 100644 (file)
--- a/src/org/cacert/gigi/Launcher.java
+++ b/src/org/cacert/gigi/Launcher.java
@@ -30,6 +30,9 @@ public class Launcher {
                Server s = new Server();
                // === SSL HTTP Configuration ===
                HttpConfiguration https_config = new HttpConfiguration();
+               https_config.setSendServerVersion(false);
+               https_config.setSendXPoweredBy(false);
+
                // for client-cert auth
                https_config.addCustomizer(new SecureRequestCustomizer());