On Thu Mar 20 14:00:55 CET 2008 Tomcat Users List <users@tomcat.apache.org>
wrote:
Ronald Klop wrote:
> On Wed Mar 19 23:13:33 CET 2008 Tomcat Users List
> <users@tomcat.apache.org> wrote:
>> Rajeev Angal wrote:
>> > I misspoke - this is happening on Tomcat 6.0.16 only .
>> > 6.0.10 is working fine on all browsers.
>> > > Any pointers highly appreciated.
>>
>> It is a known issue in 6.0.16. A patch is currently under consideration.
>>
>> Mark
> Is it an issue on any 5.5.x version?
Yes, the latest. It is a side-effect of the recent cookie security fixes so
for v0 cookies you can either have secure or working but not both.
One work-around would be to use v1 cookies.
Mark
Can this affect the cookie of JSESSIONID?
I'm currently having trouble with people losing there session in my 5.5.26
cluster. But my problem was also while running 5.5.23.
Ronald.