It's all about the answers!

Ask a question

HSTS Jazz and Tomcat


David Sakoda (2116) | asked Jun 18 '19, 6:03 p.m.
edited Jun 19 '19, 5:46 a.m. by Muralidhar Rajagopal (10114)
rtc clm 6.0.2
tomcat 8

How do you get the 'authenticated' url to have the HSTS header? i did enable all tomcat hsts via apache guidelines in the conf xmls.


the url https://host.com/ccm/secure/authenticated/identity?redirectPath=%2Fccm%2Fweb  doesn't have the hsts header and all subsequent urls in /ccm, /jts, /rm, etc do.

Missing

Present


One answer



permanent link
David Sakoda (2116) | answered Dec 16 '19, 5:38 p.m.

changes were made strictly to tomcat web.xml to fix this.


added 

<dispatcher>INCLUDE</dispatcher>
<dispatcher>FORWARD</dispatcher> <dispatcher>REQUEST</dispatcher>

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.