Displaying Workflow does not show objects within ; when using Tomcat with HSTS enabled

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

The issue is when displaying a workflow in process assembly, the panel does not show any objects.  You can hover over the blank area and the cursor would identify an object present but just not displayed.

This issue is intermittent.

Environment

Automic  V 21.0.x and V 24.x 

Cause

Configuration 

Resolution

Follow the below resolution steps to resolve the issue.

• Please adapt the web.xml from

<filter>
       <filter-name>httpHeaderSecurity</filter-name>
       <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<!-- 1126hours enable below not causing a problem -->
       <init-param>
        <param-name>hstsEnabled</param-name>
        <param-value>true</param-value>
     </init-param>
       <init-param>
          <param-name>hstsMaxAgeSeconds</param-name>
          <param-value>31536000</param-value>
       </init-param>
<!-- 1128hours enable below not causing a problem -->
     <init-param>
        <param-name>hstsIncludeSubDomains</param-name>
        <param-value>true</param-value>
     </init-param>
       <async-supported>true</async-supported>
   </filter>

 

To:

 

<filter>
       <filter-name>httpHeaderSecurity</filter-name>
       <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<!-- 1126hours enable below not causing a problem -->
       <init-param>
        <param-name>hstsEnabled</param-name>
        <param-value>true</param-value>
     </init-param>
       <init-param>
          <param-name>hstsMaxAgeSeconds</param-name>
          <param-value>31536000</param-value>
       </init-param>
<!-- 1128hours enable below not causing a problem -->
     <init-param>
        <param-name>hstsIncludeSubDomains</param-name>
        <param-value>true</param-value>
     </init-param>
       <async-supported>true</async-supported>
<init-param>
           <param-name>antiClickJackingEnabled</param-name>
           <param-value>true</param-value>
       </init-param>
       <init-param>
           <param-name>antiClickJackingOption</param-name>
           <param-value>SAMEORIGIN</param-value>
       </init-param>
   </filter>

 

These lines are needed in order for HSTS to work for Tomcat:

 

<init-param>
           <param-name>antiClickJackingEnabled</param-name>
           <param-value>true</param-value>
       </init-param>
       <init-param>
           <param-name>antiClickJackingOption</param-name>
           <param-value>SAMEORIGIN</param-value>
       </init-param>

 

After the change, please restart tomcat server and the workflow display will be working fine now.