Forum Discussion
Tarmo_Mamers
Nimbostratus
May 25, 2009current/initial sessionid variables after SSL session has been invalidated
I'm forcing SSL session invalidation when the web client goes to "/logout.php*"
if { [HTTP::uri] starts_with "/logout.php" } {
session delete ssl [SSL::sessionid]
SSL::session invalidate
SSL::cert mode ignore
HTTP::redirect "https://go.to/"
After that [SSL::modssl_sessionid_headers current] is filled with zeroes and [SSL::modssl_sessionid_headers initial] still contains the last sessionid value.
Both variables disappear only after 15 seconds.
Where does this 15 seconds come from? Is it possible to adjust this timeout to aero so that both variables would disappear right after invalidating the SSL session?
Cheers,
-tarmo-
No RepliesBe the first to reply
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects