Forum Discussion

Albert__Tase_70's avatar
Albert__Tase_70
Icon for Nimbostratus rankNimbostratus
Jan 22, 2010

setting the secure bit on

I tired the irule given here but my vakuse keep comming back disabled

 

 

 

when HTTP_RESPONSE {

 

 

 

Loop through each cookie in the response by name

 

foreach a_cookie [HTTP::cookie names] {

 

 

log local0. "$a_cookie=[HTTP::cookie value $a_cookie], secure: [HTTP::cookie secure $a_cookie]"

 

 

Set the secure flag on the cookie.

 

The flag only seems to be set if it's not there already, so no need to check the original state first

 

HTTP::cookie secure $a_cookie enable

 

}

 

}

 

 

 

Fri Jan 22 09:23:33 EST 2010 tmm tmm[1628] Rule setting_secure_flag_to_on HTTP_RESPONSE: JSESSIONID=25C204CE868CB3507E6EA51163E841E6, secure: disable

 

 

 

any ideas how to change that disable respones to enable

 

 

 

Thanks

 

1 Reply

  • Hi Al,

     

     

    That rule is logging the fact that the cookie value isn't set before setting it. Are you sure it's not setting the flag on the JSESSIONID cookie? It looks like the rule should work as it is.

     

     

    Thanks,

     

    Aaron