Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
MIME-Version: 1.0
In-Reply-To: <CAGBAQ45xCdzCdy+R+JrE4Q2y08uCbFkSW4B9+Wfg6Puvu_DAmA@mail.gmail.com>
References: <ED3E1935AD5EC44E8448520E88A887902FC7FF96@msgb04.nih.gov> <CAGBAQ45xCdzCdy+R+JrE4Q2y08uCbFkSW4B9+Wfg6Puvu_DAmA@mail.gmail.com>
From: Mauricio Tavares <raubvogel@gmail.com>
Date: Wed, 14 Sep 2016 10:34:57 -0400
Message-ID: <CAHEKYV783vs1Ww+PkvCVCoeJZasNJKReDOqN0C_h-vYiYEmKcg@mail.gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [users@httpd] Apache TomCat 5.5.23 SSL
archived-at: Wed, 14 Sep 2016 14:35:15 -0000

On Wed, Sep 14, 2016 at 10:22 AM, Yehuda Katz <yehuda@ymkatz.net> wrote:
> Are you using Apache HTTPD or just Tomcat? This list if for HTTPD questio=
ns.
> A better place to ask for help with Tomcat is the Tomcat list:
> http://tomcat.apache.org/lists.html
>
      From the original post, she is talking about what she needs to
edit in server.xml to enable that feature. That would sound like a
tomcat question.

I googled "tomcat Strict-Transport-Security" and found
http://stackoverflow.com/questions/30940902/how-to-enable-hsts-http-strict-=
transport-security-in-tomcat-jira
showing an example of where it goes and
https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet
explaining it a bit. I hope this helps the OP.

> - Y
>
> On Wed, Sep 14, 2016 at 9:02 AM, Pham, Mary (NIH/OD/ORS) [E]
> <marypham@mail.nih.gov> wrote:
>>
>> Hello EveryOne,
>>
>>
>>
>> As new bee of Apache.  We have been using one of the old Apache TomCat o=
n
>> windows server 2008R2.  After we purchased and installed the SSL
>> certificate.  We need to apply a header directive in Apache
>> =E2=80=9CStrict-Transport-Security=E2=80=9D so that our web site would b=
e secured as the
>> Government required.  My question is where can I insert this line?  In w=
hich
>> and where=E2=80=99s the files in Apache 5.5.23, TomCat 2.0.1.0.  Is it i=
n the same
>> server.xml file as we modified the connector for SSL.
>>
>> Look forward to hearing from your supports.
>>
>>
>>
>> Regards,
>>
>>
>>
>>
>>
>> Mary Pham
>>
>> Information Technology Specialist
>>
>> National Institutes of Health Library
>>
>> Division of Library Services
>>
>> Office of Research Services
>>
>> 10 Center Drive, Room 1L07, MSC 1150
>>
>> Bethesda, MD 20892-1150
>>
>> T. 301.496.1506
>>
>> marypham@mail.nih.gov
>>
>>
>>
>> Stay connected with the NIH Library
>>
>> NIH Library: http://nihlibrary.nih.gov
>>
>> Facebook: http://www.facebook.com/nihlibrary
>>
>> Twitter: http://www.twitter.com/nihlib
>>
>> _____________________________
>>
>>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org