Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-09-07 Thread Mark H. Wood
On Thu, Sep 07, 2017 at 04:07:25PM +0530, Mohammad Nayeem wrote: > We have installed apace and configured mod_jk connector along with a > load-balancer for 2 tomcat servers. > > We were able to successfully start apache and we got the login page of our > application hosted on it, but the

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-09-07 Thread Mohammad Nayeem
the exact same functionality that we had without apache in the front? Regards, Mohammad Nayeem -Original Message- From: Olaf Kock [mailto:tom...@olafkock.de] Sent: 31 May 2017 16:38 To: Tomcat Users List <users@tomcat.apache.org> Subject: [External] Re: Security Headers Implementation in

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-09-07 Thread Mohammad Nayeem
: Security Headers Implementation in Tomcat 6.x version -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 6/1/17 12:43 AM, Shaik, Mohammad N. wrote: > What should be name of the new JAR file that I would create for the > Filter classes? It doesn't matter. > There are

Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-08 Thread kmaxwilliams43
Ghgfhch  Dygugjfbjg Envoyé de mon smartphone BlackBerry 10.   Message d'origine   De: Christopher Schultz Envoyé: jeudi 8 juin 2017 18:43 À: users@tomcat.apache.org Répondre à: Tomcat Users List Objet: Re: [External] Re: Security Headers Implementation in Tomcat 6.x version -BEGIN PGP SIGNED

Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-08 Thread Christopher Schultz
way. - -chris > -Original Message- From: Olaf Kock > [mailto:tom...@olafkock.de] Sent: 31 May 2017 16:38 To: Tomcat > Users List <users@tomcat.apache.org> Subject: [External] Re: > Security Headers Implementation in Tomcat 6.x version > > Am 29.05.2017 um 13:34

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-07 Thread Shaik, Mohammad N.
mcat Users List <users@tomcat.apache.org> Subject: [External] Re: Security Headers Implementation in Tomcat 6.x version Am 29.05.2017 um 13:34 schrieb Shaik, Mohammad N.: > Hello Olaf, > > Thanks for your response! > > Based on your inputs, we are thinking to put Apache http

Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-02 Thread Olaf Kock
Am 02.06.2017 um 07:43 schrieb Shaik, Mohammad N.: > Hi Chris, > > My actual requirement was to implement 7 HTTP headers, out of > which 4 are implemented in "HttpHeaderSecurityFilter". The remaining 3 headers (Content-Security-Policy, Public-Key-Pins, X-Robots-Tag) are not addressed in any of

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-01 Thread Shaik, Mohammad N.
in there. Remember: Upgrade ASAP. - -chris > -Original Message- From: Christopher Schultz > [mailto:ch...@christopherschultz.net] Sent: 31 May 2017 23:52 To: > users@tomcat.apache.org Subject: [External] Re: Security Headers > Implementation in Tomcat 6.x version > >

Re: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-06-01 Thread Christopher Schultz
emember: Upgrade ASAP. - -chris > -Original Message- From: Christopher Schultz > [mailto:ch...@christopherschultz.net] Sent: 31 May 2017 23:52 To: > users@tomcat.apache.org Subject: [External] Re: Security Headers > Implementation in Tomcat 6.x version > > Mohammad, >

RE: [External] Re: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Shaik, Mohammad N.
2017 23:52 To: users@tomcat.apache.org Subject: [External] Re: Security Headers Implementation in Tomcat 6.x version -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 5/31/17 6:37 AM, Shaik, Mohammad N. wrote: > Can I simply use the JAR files from Tomcat 7 that contains executable >

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 5/31/17 6:37 AM, Shaik, Mohammad N. wrote: > Can I simply use the JAR files from Tomcat 7 that contains > executable code of filter classes (security headers), and put them > into corresponding location in Tomcat 6? Definitely don't

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Olaf Kock
Am 29.05.2017 um 13:34 schrieb Shaik, Mohammad N.: > Hello Olaf, > > Thanks for your response! > > Based on your inputs, we are thinking to put Apache httpd in front of Tomcat > 6 server, since our header configuration is going to be static. > > Can you please help us in identifying which version

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Violeta Georgieva
gt; Sent: 30 May 2017 21:06 > To: users@tomcat.apache.org > Subject: Re: Security Headers Implementation in Tomcat 6.x version > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mohammad, > > On 5/30/17 2:13 AM, Shaik, Mohammad N. wrote: > > Thanks for the valu

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Violeta Georgieva
istopher Schultz [mailto:ch...@christopherschultz.net] > Sent: 30 May 2017 21:06 > To: users@tomcat.apache.org > Subject: Re: Security Headers Implementation in Tomcat 6.x version > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Mohammad, > > On 5/30/17 2:

RE: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Shaik, Mohammad N.
: 30 May 2017 21:06 To: users@tomcat.apache.org Subject: Re: Security Headers Implementation in Tomcat 6.x version -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 5/30/17 2:13 AM, Shaik, Mohammad N. wrote: > Thanks for the valuable input, that helps!! We shall go with gett

RE: Security Headers Implementation in Tomcat 6.x version

2017-05-31 Thread Shaik, Mohammad N.
folder or under "WEB-INF" folder of my application? Regards, Mohammad -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 30 May 2017 21:06 To: users@tomcat.apache.org Subject: Re: Security Headers Implementation in Tomcat 6.x versio

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-30 Thread Christopher Schultz
opher Schultz > [mailto:ch...@christopherschultz.net] Sent: 29 May 2017 20:57 To: > users@tomcat.apache.org Subject: Re: Security Headers > Implementation in Tomcat 6.x version > > Mohammad, > > On 5/29/17 7:34 AM, Shaik, Mohammad N. wrote: >> Based on your inputs, we are think

RE: Security Headers Implementation in Tomcat 6.x version

2017-05-30 Thread Shaik, Mohammad N.
Implementation in Tomcat 6.x version -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 5/29/17 7:34 AM, Shaik, Mohammad N. wrote: > Based on your inputs, we are thinking to put Apache httpd in front of > Tomcat 6 server, since our header configuration is going to be static. This

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mohammad, On 5/29/17 7:34 AM, Shaik, Mohammad N. wrote: > Based on your inputs, we are thinking to put Apache httpd in front > of Tomcat 6 server, since our header configuration is going to be > static. This might not be a bad idea for a number

RE: Security Headers Implementation in Tomcat 6.x version

2017-05-29 Thread Shaik, Mohammad N.
in Tomcat 6.x version Am 29.05.2017 um 07:59 schrieb Shaik, Mohammad N.: > We are using Tomcat 6.x version and we need to implement the following > headers in our environment. > > Headers: > 1) Strict-Transport-Security > 2) Content-Security-Policy > > 7) X-Robots-Tag >

Re: Security Headers Implementation in Tomcat 6.x version

2017-05-29 Thread Olaf Kock
Am 29.05.2017 um 07:59 schrieb Shaik, Mohammad N.: > We are using Tomcat 6.x version and we need to implement the following > headers in our environment. > > Headers: > 1) Strict-Transport-Security > 2) Content-Security-Policy > > 7) X-Robots-Tag > > When I checked the Tomcat 6 version

Security Headers Implementation in Tomcat 6.x version

2017-05-28 Thread Shaik, Mohammad N.
Hello, We are using Tomcat 6.x version and we need to implement the following headers in our environment. Headers: 1) Strict-Transport-Security 2) Content-Security-Policy 3) Public-Key-Pins 4) X-Frame-Options 5) X-XSS-Protection 6) X-Content-Type-Options 7) X-Robots-Tag When I checked the