https://issues.apache.org/bugzilla/show_bug.cgi?id=56014
--- Comment #2 from Antoine Prevosto <antoine.prevo...@gmail.com> --- I am facing the same problem with Apache 2.2.22. I can supply you the response headers for such configurations : 1. CO=cookieName:cookieValue:abcxyz.com:0:/context/:1:1 Reponse headear : Set-Cookie: cookieName=cookieValue; path=/context/; domain=abcxyz.com; expires=Sun, 20-Apr-2014 12:56:17 GMT; secure; HttpOnly This does NOT create a session cookie but an already expired cookie (expires after 0 seconds) 2. CO=cookieName:cookieValue:abcxyz.com::/context/:1:1 Reponse headear : Set-Cookie: cookieName=cookieValue; path=1; domain=abcxyz.com; expires=Sun, 20-Apr-2014 12:58:17 GMT; secure This seems to be an invalid syntax, because "::" seems to be treated as ":" 3. CO=cookieName:cookieValue:abcxyz.com Reponse headear : Set-Cookie: cookieName=cookieValue; path=/; domain=abcxyz.com This is valid, but does not allow to create a SESSION cookie with a specific PATH or SECURE or HTTPONLY flag. Brgds Antoine Prevosto -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org