Re: how to secure (HttpOnly) JSESSIONID cookie ?

2012-10-10 Thread Dattu Barla
Hi, Done. Please check PAXWEB-431. Thanks Dattu On Oct 11, 2012 4:55 AM, "Achim Nierbeck" wrote: > hmm, ok, looks like another feature request :) > > could you open a jira issue for it? > > thanks, Achim > > 2012/10/10 Dattu Barla : > > Hi, > > > > I tried it, getting below error while server s

Re: how to secure (HttpOnly) JSESSIONID cookie ?

2012-10-10 Thread Achim Nierbeck
hmm, ok, looks like another feature request :) could you open a jira issue for it? thanks, Achim 2012/10/10 Dattu Barla : > Hi, > > I tried it, getting below error while server startup. > > Object of class > 'org.ops4j.pax.web.service.jetty.internal.JettyServerWrapper' is not of type > 'org.ecli

Re: how to secure (HttpOnly) JSESSIONID cookie ?

2012-10-10 Thread Dattu Barla
Hi, I tried it, getting below error while server startup. Object of class 'org.ops4j.pax.web.service.jetty.internal.JettyServerWrapper' is not of type 'org.eclipse.jetty.webapp.WebAppContext'. Object Class and type Class are from different loaders. Thanks Dattu On Wed, Oct 10, 2012 at 9:26 PM,

Re: how to secure (HttpOnly) JSESSIONID cookie ?

2012-10-10 Thread Achim Nierbeck
Hi, in that case try to configure the jetty.xml, this will have an effect on all services then, which I think should be OK. You'll find the jetty.xml in the etc folder of Karaf. You probably also need to restart the Karaf server to pick up this change. regards, Achim 2012/10/10 Dattu Barla : > H

Re: how to secure (HttpOnly) JSESSIONID cookie ?

2012-10-10 Thread Dattu Barla
Hi Achim, Thanks for your reply. I think jetty-web.xml should be in WEB-INF folder right? But my bundle is not WAB (No WEB-INF folder inside bundle/ not using pax-war). I am using httpservice to register servlet, in this case how to configure jetty-web.xml ? Is there any way in karaf to do this ?

Re: how to secure (HttpOnly) JSESSIONID cookie ?

2012-10-10 Thread Achim Nierbeck
Hi, according to stackoverflow setting a config in the jetty-web.xml could do this [1]. Try this, if it's not working open an issue to enable this in the jetty-web.xml :) regards, Achim [1] - http://stackoverflow.com/questions/3038223/how-to-get-jetty-to-send-jsessionid-cookies-with-the-secure