SSL AND SECURITY SETTING IN APACHE TOMCAT CENTOS

REQUIEMENTS:

1. LOCAL MACHINE SSL CERITIFICATE. OPEN SSL

2. SECURITY SETTING
a)        Session cookie –HTTP only –Enable/Disable
b)        Options method- Enable/Disable
c)        HTTP Header Vulnerabilities
i.           X Frame Options Response heads-Incl
ii.         X-Xss Protection header-define
iii.        X-Content-Type-Option Header-Set Protection
d)        Version of software should not be disclosed
e)        All ports should be closed except SSL