[Archivesspace_Users_Group] Set-Cookie: Secure attribute
Huebschen, Alan M
ahueb2 at uis.edu
Wed Nov 14 10:17:42 EST 2018
I was unable to figure out how to get Set-Cookie to display the secure attribute. I also examined other ArchivesSpace installations using HTTPS listed at http://archivesspace.org/community/whos-using-archivesspace and I was unable to find any that had the attribute set.
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> On Behalf Of Blake Carver
Sent: Wednesday, November 14, 2018 8:07 AM
To: Archivesspace Users Group <Archivesspace_Users_Group at lyralists.lyrasis.org>
Subject: Re: [Archivesspace_Users_Group] Set-Cookie: Secure attribute
Did you ever get this one figured out?
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Huebschen, Alan M <ahueb2 at uis.edu>
Sent: Tuesday, November 6, 2018 9:38:47 AM
To: Archivesspace Users Group
Subject: [Archivesspace_Users_Group] Set-Cookie: Secure attribute
Good morning everyone,
In my attempts to secure our installation of ArchivesSpace, I've run into an issue setting the "Set-Cookie" attribute through Apache. I'm currently routing ArchiveSpace through Apache for SSL as dictated in the HTTPS readme file, but it appears that ArchivesSpace only sees the http connection and does not set the Secure attribute. I've attempted to force the attribute to set with Apache but none of the settings changes seem to work when it comes to set-cookie (other attributes do change when set in Apache). Is there a way to force this attribute to be set properly?
Archivesspace_Users_Group mailing list
Archivesspace_Users_Group at lyralists.lyrasis.org
More information about the Archivesspace_Users_Group