RE: SSL and HttpServletRequest.getRequestedSessionId()

2000-10-05 Thread Walker, Eric
Thanks But how do I gain access to this 'ssl session'? I can find o mention of it in the doc. Thanks Eric -Original Message- From: Lorin Kobashigawa [mailto:[EMAIL PROTECTED]] Sent: Monday, October 02, 2000 3:10 PM To: Orion-Interest Subject: R

Re: SSL and HttpServletRequest.getRequestedSessionId()

2000-10-02 Thread Lorin Kobashigawa
There are actually two sessions involved in SSL. The ssl session, and the http session. The ssl session is probably returning true before the http session has been instantiated. I ran into this problem with session timeouts. Make sure to use shared="true" in your secure-site.xml, or your ssl s

SSL and HttpServletRequest.getRequestedSessionId()

2000-10-02 Thread Walker, Eric
When accessing a web site configured for SSL I have noticed that calling HttpServletRequest.getRequestedSessionId() for a client that has not yet joined a session returns a non null value. The same scenario for a non-SSL site always returns a null. Any ideas why there is a difference betwee