Project

General

Profile

Actions
Copy link

action #14204

closed

openqa.opensuse.org sends an HSTS header twice

Added by dheidler over 7 years ago. Updated over 7 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
2016-10-13
Due date:
% Done:

0%

Estimated time:

Description

See also: https://www.ssllabs.com/ssltest/analyze.html?d=openqa.opensuse.org&s=2001%3a67c%3a2178%3a8%3a0%3a0%3a0%3a19&latest

% curl -I https://openqa.opensuse.org/
HTTP/1.1 200 OK
Date: Thu, 13 Oct 2016 12:35:15 GMT
Server: Mojolicious (Perl)
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 45523
Content-Type: text/html;charset=UTF-8
Set-Cookie: mojolicious=[...]; expires=Sat, 15 Oct 2016 12:35:15 GMT; path=/; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains

So the Header Strict-Transport-Security: max-age=31536000; includeSubDomains is sent twice.

https://openqa.suse.de doesn't have this problem.

Actions
Copy link

Also available in: Atom PDF