It's all about the answers!

Ask a question

HSTS Jazz and Tomcat


David Sakoda (2116) | asked Jun 18 '19, 6:03 p.m.
edited Jun 19 '19, 5:46 a.m. by Muralidhar Rajagopal (10114)
rtc clm 6.0.2
tomcat 8

How do you get the 'authenticated' url to have the HSTS header? i did enable all tomcat hsts via apache guidelines in the conf xmls.


the url https://host.com/ccm/secure/authenticated/identity?redirectPath=%2Fccm%2Fweb  doesn't have the hsts header and all subsequent urls in /ccm, /jts, /rm, etc do.

Missing

Present


One answer



permanent link
David Sakoda (2116) | answered Dec 16 '19, 5:38 p.m.

changes were made strictly to tomcat web.xml to fix this.


added 

<dispatcher>INCLUDE</dispatcher>
<dispatcher>FORWARD</dispatcher> <dispatcher>REQUEST</dispatcher>

Your answer


Register or to post your answer.