Forum Discussion
Encrypting a cookie with HTTP::cookie encrypt and encrypting with an HTTP Profile
I'm going to go out on a limb here and say, based on testing, that cookies encrypted with the HTTP profile cookie encryption cannot be decrypted with the HTTP::cookie decrypt command (and vice versa), nor would you need to do this. The HTTP cookie encryption option performs both encryption and decryption on cookies that pass through the proxy.
Further, I attempted to encrypt the MRHSession cookie with the HTTP profile encryption option and that completely broke the access session. If you're not trying to encrypt the access session cookies, then simply applying the HTTP profile cookie encryption option should both encrypt and decrypt any other (designated) cookies. Now, if you wanted to encrypt the MRHSession access session cookie, that could actually be done with layered virtuals. Put an LTM VIP in front of your APM VIP and apply the HTTP profile cookie encryption there.
when CLIENT_ACCEPTED {
virtual [internal VIP name]
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
