https://issues.apache.org/bugzilla/show_bug.cgi?id=56014

--- Comment #2 from Antoine Prevosto <antoine.prevo...@gmail.com> ---
I am facing the same problem with Apache 2.2.22. I can supply you the response
headers for such configurations :

1. CO=cookieName:cookieValue:abcxyz.com:0:/context/:1:1

Reponse headear :
Set-Cookie: cookieName=cookieValue; path=/context/; domain=abcxyz.com;
expires=Sun, 20-Apr-2014 12:56:17 GMT; secure; HttpOnly

This does NOT create a session cookie but an already expired cookie (expires
after 0 seconds)

2. CO=cookieName:cookieValue:abcxyz.com::/context/:1:1

Reponse headear :
Set-Cookie: cookieName=cookieValue; path=1; domain=abcxyz.com; expires=Sun,
20-Apr-2014 12:58:17 GMT; secure

This seems to be an invalid syntax, because "::" seems to be treated as ":"

3. CO=cookieName:cookieValue:abcxyz.com

Reponse headear :
Set-Cookie: cookieName=cookieValue; path=/; domain=abcxyz.com

This is valid, but does not allow to create a SESSION cookie with a specific
PATH or SECURE or HTTPONLY flag.

Brgds
Antoine Prevosto

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to