Re: HTTP_COOKIE exists under HTTPS, but not under HTTP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Apr 8, 2008 at 2:44 AM, darlingm <darlingm@xxxxxxxxx> wrote:
>
>  I'm probably missing something simple.  I am migrating to a new server.  The
>  old server ran Apache 2.0.46 on RHEL 3, and the new server runs Apache 2.2.3
>  on CentOS 5.1.  The packages related to apache that my new server has
>  installed are: "apr - 1.2.7-11.x86_64", "apr-util - 1.2.7-6.x86_64", "httpd
>  - 2.2.3-11.el5_1.centos.3.x86_64", "mod_ssl -
>  1:2.2.3-11.el5_1.centos.3.x86_64", and "php - 5.1.6-15.el5.x86_64".
>
>  On the new server, HTTP_COOKIE only exists when using a HTTPS connection.
>  HTTP_COOKIE does not exist at all when using a HTTP connection.  This occurs
>  regardless of what computer I'm using, or what browser I'm using.
>
>  Any ideas on what I'm missing?  I'm positive the cookies are created and
>  exist, I've verified that through the FireFox addon "View Cookies".  The
>  cookies have the Domain ".www.mydomain.com" but do not specify a protocol
>  (if they even can.)  I ran into this with some CGI applications not finding
>  their cookies, and verified it by running a perl CGI script that prints out
>  every environment variable.
>
>  Everything else is identical from the perl CGI script showing environment
>  variables, except HTTPS of course has "HTTPS = on", the REMOTE_PORT is of
>  course different, the SERVER_PORT of course changes from 80 to 443, and all
>  the SSL_* variables exist.
>
>  I've compared my old server's http configuration files to my new server's,
>  and can't see anything I've missed, but obviously I'm missing something
>  somewhere.

Have you verified (using a tool like firebug, which I highly
recommmend) that a COOKIE is sent to the browser the first time it
connects with the https hosts?

Krist


-- 
krist.vanbesien@xxxxxxxxx
krist@xxxxxxxxxxxxx
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux