I think this would help :

when you switch from HTTP to HTTPS, add JSESSIONID to that url by calling
response.encodeURL(url)

        -Jan 

-----Original Message-----
From: Neil Aggarwal [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 14, 2002 6:49 AM
To: Tomcat-User
Subject: Session Tacking across hostnames?


Hello:

I am using Apache 1.3 and Tomcat 4.0.3.

For an application we are building, we are using a shared SSL certificate
so the hostname has to be different for http and https.  For example,
public pages are loaded from http://www.futurescope.com/fscope/myPage.jsp
and private pages are loaded from
http://www.JAMMConsulting.com/fscope/privatePage.jsp

Unforutnately, when we switch from http to https or vice versa, we lose
track of the session.  Is there a way to keep the session is this
instance?

Thanks,
        Neil.

--
Neil Aggarwal
JAMM Consulting, Inc.    (972) 612-6056, http://www.JAMMConsulting.com
Custom Internet Development    Websites, Ecommerce, Java, databases





---
Odchoz� zpr�va neobsahuje viry.
Zkontrolov�no antivirov�m syst�mem AVG (http://www.grisoft.cz).
Verze: 6.0.346 / Virov� b�ze: 194 - datum vyd�n�: 10.4. 2002
 

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to