[users@httpd] cookies and http cache

["luy80@libero.it" <lu...@libero.it>]

hi everyone,
i have a problem with apache 2.0.48 (windows and hpux ports)
with websphere (and the websphere plugin) and mod_cache.
with a test webapplication we create session with the application
server and those session are kept by JSESSIONID cookie.
by default the http header response contain:
Cache-Control: no-cache="set-cookie,set-cookie2"

creating new seesion the header of new response contain all
previous cookie, see a snip from ab at the bottom of the mail.
we modified the web application to set the Cache-Control to:
Cache-Control: no-cache
and the problem persists.
with:
Cache-Control: no-store
the problem is solved.
disabling mod_cache the problem is solved.
with the 1.3.26 with mod_proxy the problem doesn't appear.
the different beavior is due to a bug or different cache policies?

i looked at the http 1.1 rfc for the meaning of no-cache and
no-store but i can't understand if i run through a apache bug,
web application bug or websphere bug.
it's correct to get multiple Set-Cookie, Expires,Cache-Control
directive in the same http response?

thanks in advance
Luigi


3 ab snip:
Benchmarking 10.131.66.102 (be patient)...INFO: POST header ==
---
GET /cache/Test?data=DHO HTTP/1.0
User-Agent: ApacheBench/2.0.40-dev
Host: 10.131.66.102
Accept: */*


---
LOG: header received:
HTTP/1.1 200 OK
Date: Thu, 18 Mar 2004 10:58:55 GMT
Server: Apache/2.0.48 (Win32)
Set-Cookie: JSESSIONID=0000I87fbjjRbC2Ya5GrxQ2DmOC:-1;Path=/
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Language: en-US


Benchmarking 10.131.66.102 (be patient)...INFO: POST header ==
---
GET /cache/Test?data=DHO HTTP/1.0
User-Agent: ApacheBench/2.0.40-dev
Host: 10.131.66.102
Accept: */*


---
LOG: header received:
HTTP/1.1 200 OK
Date: Thu, 18 Mar 2004 11:00:56 GMT
Server: Apache/2.0.48 (Win32)
Set-Cookie: JSESSIONID=0000I87fbjjRbC2Ya5GrxQ2DmOC:-1;Path=/
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache
Set-Cookie: JSESSIONID=0000nDlrfx9aIko9qexRTN7N2i3:-1;Path=/
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Language: en-US


Benchmarking 10.131.66.102 (be patient)...INFO: POST header ==
---
GET /cache/Test?data=DHO HTTP/1.0
User-Agent: ApacheBench/2.0.40-dev
Host: 10.131.66.102
Accept: */*


---
LOG: header received:
HTTP/1.1 200 OK
Date: Thu, 18 Mar 2004 11:02:13 GMT
Server: Apache/2.0.48 (Win32)
Set-Cookie: JSESSIONID=0000I87fbjjRbC2Ya5GrxQ2DmOC:-1;Path=/
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache
Set-Cookie: JSESSIONID=0000nDlrfx9aIko9qexRTN7N2i3:-1;Path=/
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache
Set-Cookie: JSESSIONID=0000FjihUPlB3HdCn3Wyw3G4KvA:-1;Path=/
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-cache
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Content-Language: en-US






---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org