On Wed, Sep 14, 2016 at 10:22 AM, Yehuda Katz <yehuda@xxxxxxxxxx> wrote:
> Are you using Apache HTTPD or just Tomcat? This list if for HTTPD questions.
> A better place to ask for help with Tomcat is the Tomcat list:
> http://tomcat.apache.org/lists.html
>
From the original post, she is talking about what she needs to
edit in server.xml to enable that feature. That would sound like a
tomcat question.
I googled "tomcat Strict-Transport-Security" and found
http://stackoverflow.com/questions/30940902/how-to-enable-hsts-http-strict-transport-security-in-tomcat-jira
showing an example of where it goes and
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
explaining it a bit. I hope this helps the OP.
> - Y
>
> On Wed, Sep 14, 2016 at 9:02 AM, Pham, Mary (NIH/OD/ORS) [E]
> <marypham@xxxxxxxxxxxx> wrote:
>>
>> Hello EveryOne,
>>
>>
>>
>> As new bee of Apache. We have been using one of the old Apache TomCat on
>> windows server 2008R2. After we purchased and installed the SSL
>> certificate. We need to apply a header directive in Apache
>> “Strict-Transport-Security” so that our web site would be secured as the
>> Government required. My question is where can I insert this line? In which
>> and where’s the files in Apache 5.5.23, TomCat 2.0.1.0. Is it in the same
>> server.xml file as we modified the connector for SSL.
>>
>> Look forward to hearing from your supports.
>>
>>
>>
>> Regards,
>>
>>
>>
>>
>>
>> Mary Pham
>>
>> Information Technology Specialist
>>
>> National Institutes of Health Library
>>
>> Division of Library Services
>>
>> Office of Research Services
>>
>> 10 Center Drive, Room 1L07, MSC 1150
>>
>> Bethesda, MD 20892-1150
>>
>> T. 301.496.1506
>>
>> marypham@xxxxxxxxxxxx
>>
>>
>>
>> Stay connected with the NIH Library
>>
>> NIH Library: http://nihlibrary.nih.gov
>>
>> Facebook: http://www.facebook.com/nihlibrary
>>
>> Twitter: http://www.twitter.com/nihlib
>>
>> _____________________________
>>
>>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|