search

rabbitmq / rabbitmq-stomp

RabbitMQ STOMP plugin
https://www.rabbitmq.com/stomp.html
Other
49 stars 28 forks source link

Hide server information header #57

Closed sega-yarkin closed 8 years ago

sega-yarkin commented 8 years ago

When STOMP server accepts connection it sends information about software and version back to a user. We'd like to be able to have parameter to disable sending this information (for security reasons).

michaelklishin commented 8 years ago

This belongs to https://github.com/rabbitmq/rabbitmq-web-stomp.

sega-yarkin commented 8 years ago

@michaelklishin I thought web-stomp is just adapter and anything from the stomp adapter is just bytes for it. I've found setting this header here - https://github.com/rabbitmq/rabbitmq-stomp/blob/master/src/rabbit_stomp_processor.erl#L546 - is it possible to change headers in web-stomp adapter?

michaelklishin commented 8 years ago

OK, I thought you meant the Cowboy header.

sega-yarkin commented 8 years ago

Thanks

michaelklishin commented 8 years ago

According to STOMP specs 1.0 through 1.2, the server header in CONNECTED frames is indeed optional, so there is no reason to not do it.

yixuan178 commented 6 years ago

hello, how to configure it in rabbitmq conf file to disable it? in nmap scan result, it will show: 5672/tcp open amqp RabbitMQ 3.3.5 (0-9) i want to disable version of RabbitMQ.

michaelklishin commented 6 years ago

As the milestone suggests the configuration setting was introduced in 3.6.2, so 3.3.5 cannot possibly have it. You have to upgrade. Please direct questions to rabbitmq-users, our public mailing list, in the future.