[Koha-bugs] [Bug 25360] Use secure flag for CGISESSID cookie

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25360

--- Comment #4 from David Cook <dcook at prosentient.com.au> ---
(In reply to David Cook from comment #2)
> Actually, it looks like Bug 21267 adds support for X-Forwarded-Proto for
> Plack-enabled Koha. 
> 
> I think for now I'll write this patch using $ENV->{HTTPS}, which will only
> work for Plack-enabled Koha, and I'll use Bug 25361 to add support for
> X-Forwarded-Proto to CGI Koha...

On a CGI Koha, I just added the following to Apache:

SetEnvIf X-Forwarded-Proto "https" HTTPS=on

Of course, I also had to set X-Forwarded-Proto on my reverse proxy in order to
get it to work.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.