Apache

Apache Web-server

Improving server security

Test Web Server Security (Online test)

---

Using HPKP Header changing script

To use this script you must run it as root user (due access restrictions to the certificates/keys directory):
sudo ./apache-HPKP.sh <Domain name> <Patch to the config> <Max age>.
Where:

• <Domain name> – full name of your domain (like example.com);
• <Patch to the config> – path to the Apache general config file or site config file;
• <Max age> – time in seconds that the browser should remember that this site is only to be accessed using one of the defined keys.

Additional information: developer.mozilla.org.

---