Re: [2.4.39] [mod_auth_form] [mod_session_crypto] Cookie management performance

2019-05-13 Thread Vincent Deffontaines
Hi, Thanks for pointing this option in trunk. I did compile trunk and tried to use it with the option on my application. It raised other problems that I cannot really isolate (unexpected 500s with mod_wsgi which are absolutely off-topic). So I applied the diffs from

Re: [2.4.39] [mod_auth_form] [mod_session_crypto] Cookie management performance

2019-05-10 Thread Marion & Christophe JAILLET
Hi, have you checked the work in trunk related to "SessionExpiryUpdateInterval"? [1] If you have the opportunity to compile and test the trunk version and report if it corresponds to your use case, it would be great. If you want to have a look at the code itself, see [2]. Just my 2c, CJ

[2.4.39] [mod_auth_form] [mod_session_crypto] Cookie management performance

2019-05-10 Thread Vincent Deffontaines
Greetings, The root observation that makes me open this subject is the following : Using mod_auth_form + encrypted cookies to manage a web application authentication gets httpd's auth cookie to be reset by the server at each and every authenticated request. On a website with a number of users