RE: OT: hsts in Tomcat 9.0.73

2023-04-26 Thread jonmcalexander
Qualsys only checks ROOT (/), as it's the only context it could possibly know about. The team does have a ROOT webapps which is different from the one supplied with Tomcat. Can you show me where in the application web.xml to specify the headers? I'm not that familiar with things at that level,

Re: How to setup client certificate based authentication in Tomcat 9

2023-04-26 Thread Christopher Schultz
Parkar, On 4/26/23 10:34, Patkar Omkar Anant wrote: I am a bit newbie to this domain of client certificate-based authentication. We have two applications … A(server) and B(client). Web application A runs on Apache Tomcat 9.0.52. (it’s a REST API based application). Application B invokes the res

How to setup client certificate based authentication in Tomcat 9

2023-04-26 Thread Patkar Omkar Anant
Hi, I am a bit newbie to this domain of client certificate-based authentication. We have two applications … A(server) and B(client). Web application A runs on Apache Tomcat 9.0.52. (it’s a REST API based application). Application B invokes the rest api of application A. Now we want to introduce