Purchase Linux CDs / DVDs / Flash Drives at OSDisc.com

Welcome to Our Community

While Linux.org has been around for a while, we recently changed management and had to purge most of the content (including users). If you signed up before April 23rd, 2017 please sign up again. Thanks!

Cannot see Strict Transport Header HSTS

Discussion in 'Getting Started' started by Edenson James, Sep 14, 2018.

  1. Edenson James

    Edenson James New Member

    Joined:
    Sep 14, 2018
    Messages:
    1
    Likes Received:
    0
    Good Day,

    I need assistance configuring the HSTS (HTTP Strict-Transport Header) in Linux. I have added the following on the Tomcat/Conf Web.xml file:
    <filter>
    <filter-name>httpHeaderSecurity</filter-name>
    <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>



    <init-param>
    <param-name>hstsEnabled</param-name>
    <param-value>true</param-value>
    </init-param>
    <init-param>
    <param-name>hstsMaxAgeSeconds</param-name>
    <param-value>31536000</param-value>
    </init-param>
    <init-param>
    <param-name>hstsIncludeSubDomains</param-name>
    <param-value>true</param-value>
    </init-param>
    <async-supported>true</async-supported>

    I have also added port 80 on the server.xml file and I still cannot the Strict Transport Header. Any help is greatly appreciated. Thank you very much. - Edenson
     
  2. Rob

    Rob Administrator
    Staff Member

    Joined:
    Oct 27, 2011
    Messages:
    269
    Likes Received:
    745
    Hey there Edenson - welcome to Linux.org.

    After adding to the server.xml file, have you restarted httpd and/or tomcat? Usually http files are read into memory upon startup and are only re-read after stopping and starting it again.
     
    Condobloke likes this.

Share This Page