Web Server

After HeartBleed, Poodle (Padding Oracle On Downgraded Legacy Encryption) is another exploit recently discovered affecting SSL version3. To disable SSL version 3 for Apache in WHM cPanel, you can follow below steps: 1) Login in WHM and go to Service Configuration > Apache Configuration > Include Editor 2) Click on the Pre Main Include and select All Versions option from …

The htaccess override is by default disabled in the Apache Webserver. If you wish to enable htaccess override then small change is required in the Apache configuration file. 1) CentOS/RHEL: Backup the Apache configuration file "http.conf" Open the "http.conf" file in your favourite editor and look for the string "AllowOverride". Change it from "AllowOverride None" to "AllowOverride All". Make sure …

The Apache Tomcat is widely use as an Web Application server. Sometimes, naive users are not aware how to start / stop / restart Apache Tomcat service on the server. Also, the Apache Tomcat service is required to auto start in case of server reboot and to avoid any manual intervention. To achieve this, Apache Tomcat should be added in …

To reset Tomcat manager password, follow simple steps. 1) Got to the apache-tomcat directory and open file following in your favorite editor cd /usr/local/apache-tomcat-6.0.20/conf/ vi tomcat-users.xml Part of file contents before update. <tomcat-users> <!-- <role rolename="tomcat"/> <role rolename="role1"/> <user username="tomcat" password="tomcat" roles="tomcat"/> <user username="both" password="tomcat" roles="tomcat,role1"/> <user username="role1" password="tomcat" roles="role1"/> --> </tomcat-users> Now , update the file as follows <tomcat-users> …

Most of the SEO, Developers are concern about the website load time, and question about the compression from the server end. The compression is achieved from both PHP zlib output_compression and Apache's mod_gzip (old Apache version) , mod_deflate. But the one question remains unanswered is that which compression method gives good compression. this post is going to cover the same …

The following redirect rules can be used in the .htaccess for permanently redirecting http to https (secure connection) in Apache with SSL. RewriteEngine on RewriteCond %{HTTPS} !=on RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L] or RewriteEngine on Options +FollowSymLinks RewriteCond %{SERVER_PORT} !^443$ RewriteRule ^.*$ https://www.%{SERVER_NAME}%{REQUEST_URI} [L,R]