• Important: We recently upgraded our forum software - please let us know if you run into any issues.

Cannot see Strict Transport Header HSTS

Edenson James

New Member
Good Day,

I need assistance configuring the HSTS (HTTP Strict-Transport Header) in Linux. I have added the following on the Tomcat/Conf Web.xml file:
<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>

<init-param>
<param-name>hstsEnabled</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>hstsMaxAgeSeconds</param-name>
<param-value>31536000</param-value>
</init-param>
<init-param>
<param-name>hstsIncludeSubDomains</param-name>
<param-value>true</param-value>
</init-param>
<async-supported>true</async-supported>

I have also added port 80 on the server.xml file and I still cannot the Strict Transport Header. Any help is greatly appreciated. Thank you very much. - Edenson
 


Rob

Administrator
Staff member
Hey there Edenson - welcome to Linux.org.

After adding to the server.xml file, have you restarted httpd and/or tomcat? Usually http files are read into memory upon startup and are only re-read after stopping and starting it again.
 

Members online

No members online now.


Top