Re: remove me from tomcat user list

2016-08-31 Thread Joan Morales
Send a blank email to users-unsubscr...@tomcat.apache.org On Wed, Aug 31, 2016 at 9:01 AM, 罗茂林 wrote: > could someone remove me from the tomcat user list?

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Joan Morales
Hi Cris, I already try with AJP, but I cant get rid of the JSESSIONID cookie either Regards, -- Joan Morales El 28/09/2012, a las 19:11, Christopher Schultz escribió: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Konstantin, > > On 9/28/12 10:27 AM, Konsta

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Joan Morales
I put the SSL because I thought It was necessary to handle the SSL on TC, anyways I'll change It to COOKIE and see what happens. Another couple of ideas were to use a Valve for SSL on TC or enable the mod_header on Apache, but any idea on how this would help? Thanks, Joan -- Joan Mo

Re: Security issue regarding JSESSIONID cookie

2012-09-28 Thread Joan Morales
tore" keystorePass="password" > > >clientAuth="false" sslProtocol="TLS" /> > > > > > > I also added this on the web.xml: > > > > > > > > > 30 > > > SSL > > > > > > > > > Results for this solution: > > > > > > The JSESSIONID cookie disappears OK > > > Everything works OK if I access directly to the tomcat and bypass the > > > apache, (localhost:8443), I can login into the web page and keep the > > > seesion in every link inside the app > > > > > > but, when try to access trought the Apache in https in port 443 , ( > > > https://localhost:443 <https://localhost/>), I can login the first > time > > but > > > when I try to access somewhere else in the app I lose the user session > > and > > > the app log me out, I checked over the logs and there are no error > > neither > > > in apache nor tomcat > > > > > > So, Is this solution implementable under this architecture? > > > Am I missing some configurations? > > > > > > Thanks and regards, > > > Joan Morales > > >