[Archivesspace_Users_Group] Set-Cookie: Secure attribute

[Blake Carver]

Hi Alan,
Did you ever get this one figured out?



________________________________________
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Huebschen, Alan M <ahueb2 at uis.edu>
Sent: Tuesday, November 6, 2018 9:38:47 AM
To: Archivesspace Users Group
Subject: [Archivesspace_Users_Group] Set-Cookie: Secure attribute

Good morning everyone,

In my attempts to secure our installation of ArchivesSpace, I’ve run into an issue setting the “Set-Cookie” attribute through Apache. I’m currently routing ArchiveSpace through Apache for SSL as dictated in the HTTPS readme file, but it appears that ArchivesSpace only sees the http connection and does not set the Secure attribute. I’ve attempted to force the attribute to set with Apache but none of the settings changes seem to work when it comes to set-cookie (other attributes do change when set in Apache). Is there a way to force this attribute to be set properly?

-Alan Huebschen
Brookens Library
Information Systems
(217) 206-7115