commit 0c79f86414e147b3ebd16d47f8da579be36ba56b Author: Eduardo Stalinho eduardooc.86@gmail.com Date: Thu May 9 04:56:36 2013 -0300

turn hsts on with header on Apache. --- doc/facilitator-howto.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/doc/facilitator-howto.txt b/doc/facilitator-howto.txt index 53cc897..1945a17 100644 --- a/doc/facilitator-howto.txt +++ b/doc/facilitator-howto.txt @@ -126,7 +126,7 @@ It also installs System V init files to /etc/init.d/. Apache is the web server that runs the CGI program.

# apt-get install apache2 libapache2-mod-evasive - # a2enmod ssl + # a2enmod ssl headers

Edit /etc/apache2/ports.conf and comment out the port 80 configuration.

@@ -146,6 +146,7 @@ these contents: SSLEngine on SSLCertificateFile /etc/apache2/fp-facilitator.pem SSLCertificateChainFile /etc/apache2/intermediate.pem + Header add Strict-Transport-Security "max-age=15768000" </VirtualHost> intermediate.pem is a possible intermediate certificate file provided by the CA; if you did not get one, then leave off the