[Archivesspace_Users_Group] Set-Cookie: Secure attribute

[Christine Di Bella]

Hi Alan,

We're going to put a tech support ticket on this for you. You'll see another message about that directly to you in a minute.

Christine

Christine Di Bella
ArchivesSpace Program Manager
christine.dibella at lyrasis.org
800.999.8558 x2905
678-235-2905
cdibella13 (Skype)


-----Original Message-----
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> On Behalf Of Huebschen, Alan M
Sent: Wednesday, November 14, 2018 10:18 AM
To: Archivesspace Users Group <archivesspace_users_group at lyralists.lyrasis.org>
Subject: Re: [Archivesspace_Users_Group] Set-Cookie: Secure attribute

I was unable to figure out how to get Set-Cookie to display the secure attribute. I also examined other ArchivesSpace installations using HTTPS listed at http://archivesspace.org/community/whos-using-archivesspace and I was unable to find any that had the attribute set.

-Alan Huebschen
Brookens Library
Information Systems
(217) 206-7115

-----Original Message-----
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> On Behalf Of Blake Carver
Sent: Wednesday, November 14, 2018 8:07 AM
To: Archivesspace Users Group <Archivesspace_Users_Group at lyralists.lyrasis.org>
Subject: Re: [Archivesspace_Users_Group] Set-Cookie: Secure attribute

Hi Alan,
Did you ever get this one figured out?



________________________________________
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Huebschen, Alan M <ahueb2 at uis.edu>
Sent: Tuesday, November 6, 2018 9:38:47 AM
To: Archivesspace Users Group
Subject: [Archivesspace_Users_Group] Set-Cookie: Secure attribute

Good morning everyone,

In my attempts to secure our installation of ArchivesSpace, I've run into an issue setting the "Set-Cookie" attribute through Apache. I'm currently routing ArchiveSpace through Apache for SSL as dictated in the HTTPS readme file, but it appears that ArchivesSpace only sees the http connection and does not set the Secure attribute. I've attempted to force the attribute to set with Apache but none of the settings changes seem to work when it comes to set-cookie (other attributes do change when set in Apache). Is there a way to force this attribute to be set properly?

-Alan Huebschen
Brookens Library
Information Systems
(217) 206-7115

_______________________________________________
Archivesspace_Users_Group mailing list
Archivesspace_Users_Group at lyralists.lyrasis.org
http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group
_______________________________________________
Archivesspace_Users_Group mailing list
Archivesspace_Users_Group at lyralists.lyrasis.org
http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group