Forum Discussion
foremans_135136
Nimbostratus
NimbostratusHTTP Set-Cookie broken due to multiple "; Secure" inserted
Greeting!
I'm from SAP and currently we are using F5 loadbalancing, and use iRule to add secure for all the cookiee send back to browser, sorry I'm not from OPS team and not familiar with F5 product...
foremans_135136Nimbostratus
NimbostratusI posted here to use the text format
when HTTP_RESPONSE {
foreach cookie [HTTP::cookie names]
{
set value [HTTP::cookie value $cookie];
if { "" != $value }
{
set testvalue [string tolower $value]
set valuelen [string length $value]
log local0. "Cookie found: $cookie = $value";
switch -glob -- "$testvalue" {
"*;secure*" -
"*; secure*" { }
default { set value "$value; Secure"; }
}
if { [string length $value] > $valuelen} {
log local0. "Replacing cookie $cookie with $value"
HTTP::cookie value $cookie "${value}"
}
}
}
}
- boneyard
MVP
doesnt directly seem to cause an issue, i would decomment the log lines (log local0...) and see what the incoming value is, if it is already wrong before it hits the BIG-IP you know that the BIG-IP isnt the cause.
