You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/administration/pages/ssl-certs-hsts.adoc
+11-3Lines changed: 11 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,11 +6,13 @@
6
6
HTTP Strict Transport Security (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security[HSTS]) is a policy mechanism that helps to protect websites against man-in-the-middle attacks such as protocol downgrade attacks and cookie hijacking.
7
7
8
8
On {productname}, HSTS is enabled by default.
9
-
If needed, you can disable it on the server following this procedure:
9
+
If you need to disable it on the server, follow this procedure:
10
10
11
11
12
12
13
13
.Procedure: Disabling HSTS on the server
14
+
[role=procedure]
15
+
_____
14
16
. On the server container host, as root, execute the following command to create a new configuration file with setting [literal]``max-age=0``:
15
17
16
18
+
@@ -31,10 +33,13 @@ mgrctl exec -- \
31
33
mgrctl exec -- systemctl restart apache2
32
34
----
33
35
36
+
_____
34
37
35
-
To disable it on proxies:
38
+
If you need to disable it on the proxy, follow this procedure:
36
39
37
-
.Procedure: Disabling HSTS on the proxies
40
+
.Procedure: Disabling HSTS on the proxy
41
+
[role=procedure]
42
+
_____
38
43
. On the server container host, as root, execute the following command to create a new configuration file with setting [literal]``max-age=0``:
0 commit comments