investigate tracking sessions by SSL session id

[GoogleCodeExporter]

Right now we track sessions either by cookie or URL parameter. SSL session id 
would potentially be safer. We have to find out which servers support it.
- AJP: yes
- WebClient: ???
- mod_proxy

Original issue reported on code.google.com by [email protected] on 8 Aug 2010 at 8:23

[GoogleCodeExporter]

Original comment by [email protected] on 13 Aug 2010 at 9:32

• Changed title: investigate tracking sessions by SSL session id
• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

Original comment by [email protected] on 7 Oct 2010 at 2:03

• Added labels: Version-Seaside3.1
• Removed labels: ****

[GoogleCodeExporter]

Should definitely be possible with FastCGI, it should be in the Variable 
SSL_SESSION_ID
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#envvars

Original comment by [email protected] on 16 Oct 2010 at 10:07

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

Name: Seaside-Core-pmm.744
Author: pmm
Time: 14 August 2011, 12:44:10 pm
UUID: 1dae530c-f37d-4229-9326-966492cefaa0
Ancestors: Seaside-Core-pmm.743

- Issue 592:    investigate tracking sessions by SSL session id
- add SSL session id to WARequest and methods in WAServerAdaptor

Name: Seaside-Session-pmm.155
Author: pmm
Time: 14 August 2011, 12:45:40 pm
UUID: de0e66c6-e410-4c17-ba07-db65b5aa7005
Ancestors: Seaside-Session-pmm.154

- Issue 592:    investigate tracking sessions by SSL session id
- add new SSL session tracking strategy

Name: Seaside-Tests-Functional-pmm.141
Author: pmm
Time: 14 August 2011, 12:46:38 pm
UUID: d8c61fd0-369f-42aa-a961-d050b37fef03
Ancestors: Seaside-Tests-Functional-pmm.140

- Issue 592:    investigate tracking sessions by SSL session id
- add functional test for SSL session id

Name: Seaside-Tests-Session-pmm.60
Author: pmm
Time: 14 August 2011, 12:47:24 pm
UUID: eaa30183-6434-42e8-9df3-8565add687a6
Ancestors: Seaside-Tests-Session-pmm.59

- Issue 592:    investigate tracking sessions by SSL session id
- add new SSL session tracking strategy

Original comment by [email protected] on 14 Aug 2011 at 10:47

• Changed state: Fixed
• Added labels: ****
• Removed labels: ****