Forum Discussion

Nandhi's avatar
Nandhi
Icon for Cirrus rankCirrus
Aug 24, 2023

hsts scan result none

We implemented hsts via irule. The ltm logs says headers are inserting but SSL labs results shows none. We tested the in chrome and can see the header values. Below is the rule. HSTS for http vs:  ...
application delivery
Nandhi's avatar
Nandhi
Icon for Cirrus rankCirrus

Hi Edward,

The hsts already added via irule to the specific vs. We can see the inserted header in GET response and browser developer tools. But ssl labs not able to identify it (showing none). 

P_Kueppers's avatar
P_Kueppers
Icon for MVP rankMVP
Aug 24, 2023

Why you insert it via irule and not via http profile? are you testing your http:// url or https:// url on ssllabs? Is there maybe any redirect going on and ssllabs isnt doing that redirect, but browser does?