Re: cookie secure flag

[Mark Brodis <mabrodis@xxxxxxxxxxxxxxx>]

What I have done is do a edit-header to append the "Secure" onto the Set-Cookie command coming back from the app-container through the web server.  The header edit command is only available on 2.2 (likely 3.X also), but not on 2.0.

Example:

Header edit Set-Cookie ^(.*)$ $1;Secure;

-Mark

On Mon, May 23, 2011 at 1:40 PM, Gil Pratte <gilbert.pratte@xxxxxxxxx> wrote:

Hello all,

I'm using apache http as a reverse proxy to tomcat. http takes care of the ssl encryption.

Can anyone enlighten me on how to set the cookie secure flag to true.

thanks in advance,

gilbert