REST response over https - no-cache always set

[Tamar Furman (tfurman)]

Hi - 

I'm straggling this problem for several days and will appreciate any
help.

I'm using CXF 2.2.6 providing REST services over https. I have the
following problem with download function via rest. The method returns
ws.rs.Response and encapsulates in the content a download file. All
works nice with Firefox but fails on IE8. There is a known bug on IE8
that requires that such https response avoid 'no-cache' header. However
no matter how I build the response header it seams that the
ResponseBuilder puts in the 'no-cache' one and I can't get rid of it. 

Here is a snip of my code:

                        CacheControl cc = new CacheControl();
                        cc.setNoStore(true);
                        cc.setNoCache(false);
                        Response res = Response.ok(file).
                                         type("application/octet").
                                         cacheControl(cc).
                                         header("Content-Disposition",
"attachment; filename=" + fileName).
        
header("Content-Length:",Long.toString(file.length())).
                                         build();



also tried:
                         header("Cache-Control", "no-store").
                         header("Cache-Control", "private, max-age=1").
                         header("Pragma", "no-store").



No matter what, I always see the following headers return to the client:

        Pragma  No-cache
        Cache-Control   no-cache, no-store;no-transform

Any idea how can I solve this with this cxf ResponseBuilder?

Thanks,
T.