Re: OpenBSD httpd: PCI - DSS Compliance

2019-04-11 Thread Kihaguru Gathura
The issue is now resolved. The alert message no longer appears. Thank you. Kihaguru. On 4/10/19, Kihaguru Gathura wrote: > Hi, > > The message below refers. Has httpd met the particular requirement > 6.5.1 - 6.5.10 as shown? or is it a matter of further configuration. > > "Requirement 6.5 >

Re: OpenBSD httpd: PCI - DSS Compliance

2019-04-10 Thread Bob
On 04/10/2019 20:22, Chris Cappuccio wrote: > Kihaguru Gathura [pqscr...@gmail.com] wrote: >> Hi, >> >> The message below refers. Has httpd met the particular requirement >> 6.5.1 - 6.5.10 as shown? or is it a matter of further configuration. >> >> "Requirement 6.5 >> Fingerprinted versions of web

Re: OpenBSD httpd: PCI - DSS Compliance

2019-04-10 Thread Chris Cappuccio
Kihaguru Gathura [pqscr...@gmail.com] wrote: > Hi, > > The message below refers. Has httpd met the particular requirement > 6.5.1 - 6.5.10 as shown? or is it a matter of further configuration. > > "Requirement 6.5 > Fingerprinted versions of web software used on the website may contain >

Re: OpenBSD httpd: PCI - DSS Compliance

2019-04-10 Thread Janne Johansson
I think that point was badly made by the site, they don't list what they did look at or how they deduced it, only that "it may" even though that same report later says no version string was sent as if that was a good thing. I guess this means "because you did as expected and did not send a

OpenBSD httpd: PCI - DSS Compliance

2019-04-10 Thread Kihaguru Gathura
Hi, The message below refers. Has httpd met the particular requirement 6.5.1 - 6.5.10 as shown? or is it a matter of further configuration. "Requirement 6.5 Fingerprinted versions of web software used on the website may contain publicly known vulnerabilities (cf. PCI DSS 6.5.1-6.5.10).