DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23887>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23887

FORM-based login with SSL broken in Mozilla (but not IE6)





------- Additional Comments From [EMAIL PROTECTED]  2003-10-17 17:58 -------
Yes that is the problem. I've been tricked by the cache again. Caching is the
one of my biggest sources of wasted time in looking for bugs that aren't there. 

In the upgrade from TC4 to TC5, the URL of the FORM-based login page is hidden,
so I am not surprised by Mozilla's behaviour. I do not think Mozilla is buggy -
it is more likely a feature. :)

I was also caught out because I am using struts so much and the struts servlet
puts the non-cache headers in automatically if you configure it to do so.
Obviously these are not going to be taken care of in the HTML login page. 

So a refresh is all that is required. Or for anyone else reading this
afterwards, the following headers in the HTML (where the expiry date is in the
past) (check the source HTML if you can't see this):

<meta http-equiv="cache-control" content="public">
<meta http-equiv="expires" content="Fri, 30 Oct 2002 14:19:41 GMT">
<meta http-equiv="pragma" content="no-cache">

Adasm

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to