7018300: HTTP Strict Transport Security on the Access Gateway can’t be disabled.

Reported to engineering

As a workaround we made the below changes to disable the option:

Modify the /etc/opt/novell/apache2/conf/httpd.conf file and unmarked the below entry to enable the mod_headers module:
LoadModule headers_module libexec/mod_headers.so

Add the below entry as the last line in the httpd.conf file:
Header always unset Strict-Transport-Security

Restart apache:
/etc/init.d/novell-apache2 restart


Leave a Reply