Greetings!! all.

I have a configuration where i use Apache in front of JBoss(which uses the tomcat4.1). Recently, we set up http/https switching using mod rewrite in Apache, to separate the secure content from insecure in our web app.

Problem that came up is that if session starts in htpps, the session looses data, when retrieving data in the insecure state.

The following was the most helpful link I found on this
http://mail-archives.apache.org/mod_mbox/tomcat-users/200505.mbox/[EMAIL 
PROTECTED]

After reviewing this, I still want to try to change the Tomcat code so that i can have one session regardless of http/https.

Can any one shed some light as to which Tomcat Classes i should be looking at?? Also,if there are any new changes on how Tomcat might be implementing this in the future, would be good to know.

(TIA)thanks in Advance

prayash  ([EMAIL PROTECTED])



---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to