Forum Discussion

negin's avatar
negin
Icon for Altostratus rankAltostratus
Jun 06, 2019

HSTS

Hello Dear when enable HSTS in profile insert HSTS in header but when test with ssl lab and another tools for test hsts show there is not hsts.How can I fix this problem? my firmware f5 is 12.1.2 ...
application delivery
iRules
LTM
security
JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Jun 20, 2019

Try the following:

when RULE_INIT {
    set static::expires [clock scan "12 month"]
}
 
when HTTP_RESPONSE {
    HTTP::header insert Strict-Transport-Security "max-age=[expr {$static::expires - [clock seconds]}]; includeSubDomains"
}
  • negin's avatar
    negin
    Icon for Altostratus rankAltostratus
    Jun 20, 2019

    Hello

    I tested it but does not work