summaryrefslogtreecommitdiff
path: root/files/include.d/CentOS/ssl_defaults.inc
diff options
context:
space:
mode:
authormh <mh@immerda.ch>2011-02-22 22:59:51 +0100
committermh <mh@immerda.ch>2011-02-22 22:59:51 +0100
commita371c169c45dbd14ad3c465f8b7314b14c4ed8cb (patch)
treec83e0e002cbe0e32193042552af2548d0ba81439 /files/include.d/CentOS/ssl_defaults.inc
parentf14fd057987b5489228a40444c3a101768c5b6bb (diff)
add STS header in default ssl config
Diffstat (limited to 'files/include.d/CentOS/ssl_defaults.inc')
-rw-r--r--files/include.d/CentOS/ssl_defaults.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/files/include.d/CentOS/ssl_defaults.inc b/files/include.d/CentOS/ssl_defaults.inc
index b57cbb9..c1ef0be 100644
--- a/files/include.d/CentOS/ssl_defaults.inc
+++ b/files/include.d/CentOS/ssl_defaults.inc
@@ -142,3 +142,6 @@ SetEnvIf User-Agent ".*MSIE.*" \
# compact non-error SSL logfile on a virtual host basis.
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
+
+# set STS Header
+Header add Strict-Transport-Security "max-age=15768000"