Forum OpenACS Development: Scott Goodwin writes ServerSessionCache true always[1]

"Turn it [session caching] on, always, always, always have session caching on, or SSL to certain MSIE browser versions will fail.."(Scott Goodwin[1])

Why is ServerSessionCache set to false in openacs' nsd.tcl? Or, should it be set to true? If so, for openacs4.6.3 also?

1. http://www.mail-archive.com/aolserver@listserv.aol.com/msg05135.html
more refs at:
2. http://www.mail-archive.com/aolserver@listserv.aol.com/msg05113.html
3. https://openacs.org/forums/message-view?message_id=79894
4. https://openacs.org/forums/message-view?message_id=34364

Collapse
Posted by Jade Rubick on
Torben, this is a good question. Since nobody has replied here, perhaps you should ask on the Aolserver list? (or perhaps you already did -- if so, could you post the followup here?)
Hi, Jade,

I just checked posting there, it's already done. Thanks for prompting me to check. sample-config.tcl[1] is only set to use nsssl not nsopenssl, and nsd.tcl[2] in the nsopenssl directory already has it set true. Not to mention that searching the aolserver listserv archives shows that they also recommend this value to be always set true (search for "session cache").

I'll post a change in the bugtracker.

1. http://cvs.sourceforge.net/viewcvs.py/*checkout*/aolserver/aolserver/sample-config.tcl
2. http://cvs.sourceforge.net/viewcvs.py/*checkout*/aolserver/nsopenssl/nsd.tcl