-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Naga,
On 6/28/18 1:31 PM, Naga Ramesh wrote: > I have done the hardening on Tomcat 8 version (PF below mentioned > configuration changes) What "hardening"? What is "PF"? > but in application level some of the functionalities are not > working properly and observed some errors in the backend (PF below > mentioned errors), please re-check and provide me the proper > solution ASAP. So... enabling some kind of security controls has broken your application? Sounds like a problem with the application to me. > *Enabled the below changes on web.xml file (tomcat8/conf).* > > [enable HSTS for all contexts in conf/web.xml] I wouldn't have done that. I would have done it for my specific application and not at the container-level. You are welcome to enable it for all applications in conf/web.xml... just remember to re-create that change if you reinstall/upgrade tomcat. > *Server.xml: (added the secure tag on connector)* > > <Connector *secure="true* I'm not sure that does what you think it does. What did you expect setting secure="true" to accomplish for you? > *Below errors observed in the back end:* You'll need to provide a non-image description of your errors to get help, here. - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAls2mLwACgkQHPApP6U8 pFhsNQ//ebs5SveDfY07oNrWEPPU6BYdgG8FhI51Dz7MM+sNZz0Eew7cM4PSEVLs iHx65zjw84xAXfDTcRSVQ07QaxQa2nMj3jfBlx8TXRprt4NjOg5jhU3UHQ6qxU/9 dD2u4vYe8E1aF7HCGQv2mroZA2SvRkzuwsi6irq4nj7Sh2gJVae1U7hPp50F01PB AYtwxVdAkqaFSHoC+y+rTY/o///cSHGlhGkuV+U4VFin8eRj1h/7DwP9Og8gAy1N cv83BukMlp7YFGa24K6XBYwLQwn1xbiKLg81Z+Qk1B0605hiL0o3QtZHLgV2BKGQ p4kZShdC47fihGdCTUpf6zWtuTuS9Ordn31jONCtPLg/mdLwD2kxA+hfm7Pcmx7/ IzFAXVkDMVZYtye4WAjyxy+eo7J29iOh9zgFLDXQgAbHSNpaPKbYCXEey7/+qQx6 gJ/i1s++MQJj9Z3xRItqqurrciszSLefxKJ/irajaGN3gnLegoqKP8DdzSPk0l86 4B2plCRqjFs6DikZaahS2kCqGwVrePVwK1QXXy/TeFeUIncaUPuYN06wqPxUU7sQ sVaWukRBSBJzIaeOksPI0VkIxs5BS/rPKIA1CyQTrh6CsYRYLykVEiXxS76ThNFs 8gjjLIJ/Cou6sXYtmHs0P5eJf7wylnfSYgatY6yP2iPVC4IaKDs= =MCZZ -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
