RE: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Yanhua Wusands
ct: Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT On 31/08/2022 17:39, Yanhua Wusands wrote: > You are right, tomcat is sitting behind AWS LB, where is ssl enabled, once it > is passed that, tomcat is set up to listen 8080. > If I understand you correctly, we will ne

Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Mark Thomas
, August 31, 2022 11:21 AM To: users@tomcat.apache.org Subject: Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT You don't have any TLS connectors configured so the HSTS filter isn't going to do anything. Given you access the server via port 443 but Tomcat is only li

RE: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Yanhua Wusands
Sent: Wednesday, August 31, 2022 11:21 AM To: users@tomcat.apache.org Subject: Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT You don't have any TLS connectors configured so the HSTS filter isn't going to do anything. Given you access the server via port 443 but Tomc

Re: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Mark Thomas
rg Subject: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT On 31/08/2022 15:36, Yanhua Wusands wrote: We are using TOMCAT 9.0.40 on linux, and are trying setup Strict-Transport-Security per requirement from our security team. We followed this note: https://urldefense.com/

RE: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Yanhua Wusands
-Original Message- From: Mark Thomas Sent: Wednesday, August 31, 2022 11:03 AM To: users@tomcat.apache.org Subject: [EXTERNAL] Re: How to setup Strict-Transport-Security in TOMCAT On 31/08/2022 15:36, Yanhua Wusands wrote: > We are us

Re: How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Mark Thomas
On 31/08/2022 15:36, Yanhua Wusands wrote: We are using TOMCAT 9.0.40 on linux, and are trying setup Strict-Transport-Security per requirement from our security team. We followed this note: https://knowledge.broadcom.com/external/article/226769/enable-http-strict-transport-security-hs.html Cha

How to setup Strict-Transport-Security in TOMCAT

2022-08-31 Thread Yanhua Wusands
We are using TOMCAT 9.0.40 on linux, and are trying setup Strict-Transport-Security per requirement from our security team. We followed this note: https://knowledge.broadcom.com/external/article/226769/enable-http-strict-transport-security-hs.html Changed $CATALINA_HOME/conf/web.xml With: