https://issues.apache.org/bugzilla/show_bug.cgi?id=53377
--- Comment #1 from Konstantin Kolinko <knst.koli...@gmail.com> --- It is strange, because it should be working in 5.5. I cannot see where it can fail. For reference, in current 5.5.x (5.5.35): request.secure flag is set in o.a.catalina.connector.CoyoteAdapter#postParseRequest(..) cookie.secure flag is set in o.a.catalina.connector.Request#configureSessionCookie(..), where it is copied from request.secure flag. The cookie is formatted into response header in o.a.tomcat.util.http.ServerCookie#appendCookieValue(..) which is called from Response#addCookieInternal(...). -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org