java ee - Mysterious HttpSession and session-config dependency -


good day. i'm developing java web app servlets\jsp using tomcat 7.0. during request client put , object session , use forward. after forward processing same request object can retreived if secure parameter false otherwise not stored in session.

    <session-config>         <session-timeout>15</session-timeout>         <cookie-config>             <http-only>true</http-only>             <secure>true</secure>         </cookie-config>         <tracking-mode>cookie</tracking-mode>     </session-config> 

i've figured out "...cookies can created 'secure' flag, ensures browser never transmit specified cookie on non-ssl...". i've configured tomcat use ssl, haven't helped. changing tracking mode ssl haven't helped well. how session-config , httpsession object correlate in case? problem?


Comments

Popular posts from this blog

jquery - Invalid Assignment Left-Hand Side -

java - Play! framework 2.0: How to display multiple image? -

gmail - Is there any documentation for read-only access to the Google Contacts API? -