Bug#769682: Secure and HttpOnly flags are not set for cookies with Jenkins on Tomcat

Yann Rouillard yann at pleiades.fr.eu.org
Mon Nov 17 21:51:42 UTC 2014


> Can you check that it's possible to force the secure flag with an HTTP
> connector?  Some load-balancer-based setups need this (although direct
> HTTP connections from a browser will not work, obviously).

I can confirm you that is possible, you just have to add
'secure="true"' in the HTTP connector configuration.

Yann



More information about the pkg-java-maintainers mailing list