[jboss-jira] [JBoss JIRA] Created: (JBAS-7433) SSL uses coockies that affects usability

Mikhail Pashkin (JIRA) jira-events at lists.jboss.org
Tue Nov 10 07:03:06 EST 2009


SSL uses coockies that affects usability
----------------------------------------

                 Key: JBAS-7433
                 URL: https://jira.jboss.org/jira/browse/JBAS-7433
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
    Affects Versions: JBossAS-4.2.3.GA, JBossAS-4.2.2.GA
         Environment: mozilla firefox 3.5.5
java 1.6.0.12
windows xp sp 2
            Reporter: Mikhail Pashkin


Steps to reproduce:

1. run 2 jboss instances on the same machine (on the same ip, but different ports) with enabled ssl connector (for example ports: 8443 and 8543)
2. login the first app: http://localhost:8443/myApp. (A new session created and JSESSIONID is written into coockies)
3. login the second app: http://localhost:8543/myApp. (A new session created and JSESSIONID is written into coockies)

bug: the first JSESSIONID is rewritten and the first session is lost

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list