> I'm using mod_ssl 2.8.0 + apache 1.3.17 + tomcat 3.2.1.
> The problem i encountered is: after redirect the user back to
> http page from
> an https page, the session variables were gone.
If you're using cookies for session management, it might be that tomcat sets
the cookie to be only send with https when starting the session on a secure
server. I have not yet used tomcat with https so I'm not sure about that,
but it might be a point to look at.
Jens
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
