LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-14-2018, 10:56 AM   #1
ejames0512
LQ Newbie
 
Registered: Sep 2018
Posts: 1

Rep: Reputation: Disabled
Strict transport security header


Good Day,

I need assistance configuring the HSTS (HTTP Strict-Transport Header) in Linux. I have added the following on the Tomcat/Conf Web.xml file:
<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>

<init-param>
<param-name>hstsEnabled</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>hstsMaxAgeSeconds</param-name>
<param-value>31536000</param-value>
</init-param>
<init-param>
<param-name>hstsIncludeSubDomains</param-name>
<param-value>true</param-value>
</init-param>
<async-supported>true</async-supported>

I have also added port 80 on the server.xml file and I still cannot the Strict Transport Header. Any help is greatly appreciated. Thank you very much. - Edenson
 
Old 09-15-2018, 08:38 PM   #2
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.8.2003
Posts: 5,219

Rep: Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915Reputation: 1915
Which web server are you using, please?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Enable HTTP Strict Transport Security robertkwild CentOS 1 10-27-2017 10:57 AM
LXer: HTTP Strict Transport Security becomes Internet Standard LXer Syndicated Linux News 0 11-21-2012 09:33 PM
LXer: GMail Fails LA PD Strict Security Requirements LXer Syndicated Linux News 1 12-19-2011 09:43 PM
Security setting too strict The_Nerd Linux - Security 2 03-30-2008 12:11 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration