-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Deepak,
On 2/9/16 6:28 AM, dku...@ccilindia.co.in wrote: > Dear Harrie, > > We have already implemented the said configuration of filter. > > Still we are unable to implement HSTS. This configuration works > absolutely fine on tomcat running running on windows, but in the > case of unix we aren't able to achieve HSTS. > > Below are the steps followed by us: > > We have downloaded latest tomcat tar.gz from tomcat website, > Deployed our application on it, Made above changes in conf\web.xml > and then started tomcat. no error till this point. When i started > VA testing on the server i get below error : Note: further > occurrences of HTTP header parsing errors will be logged at DEBUG > level. java.lang.IllegalArgumentException: Invalid character (CR or > LF) found in method name at > org.apache.coyote.http11.AbstractNioInputBuffer.parseRequestLine(Abstr actNioInputBuffer.java:228) > > at > org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp1 1Processor.java:1010) > > at > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(A bstractProtocol.java:674) > > at > org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoi nt.java:1500) > > at > org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint .java:1456) > > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.j ava:1142) > > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor. java:617) > > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThr ead.java:61) > > at java.lang.Thread.run(Thread.java:745) > > > and then VA test results show that HSTS is not configured. It looks like "VA test" has a broken client: it's not issuing a valid HTTP request. > Please note that we followed the above steps for tomcat on windows > and every thing is absolutely fine and even results of VA test > don't contain HSTS information. Any help is greatly appreciated. - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAla5810ACgkQ9CaO5/Lv0PATwACgmXpTJ6AmI1USQqQDm42s13we W1gAniTXh/dufrGmkM5/pJ2GnNu6divo =50QF -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
