[java-identity-provider] branch maint-3.3 updated: IDP-1223 - IdPv3 defaults to insecure cookies

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch maint-3.3
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=b55eea06beda4898b2c35f9eb402cb61bc558c2f

The following commit(s) were added to refs/heads/maint-3.3 by this push:
       new  b55eea0   IDP-1223 - IdPv3 defaults to insecure cookies
b55eea0 is described below

commit b55eea06beda4898b2c35f9eb402cb61bc558c2f
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Sep 27 21:11:53 2017 -0400

    IDP-1223 - IdPv3 defaults to insecure cookies
    
    https://issues.shibboleth.net/jira/browse/IDP-1223
    
    Add note to property file.
---
 idp-conf/src/main/resources/conf/idp.properties | 1 +
 1 file changed, 1 insertion(+)

diff --git a/idp-conf/src/main/resources/conf/idp.properties b/idp-conf/src/main/resources/conf/idp.properties
index 3477eec..5b3a7b2 100644
--- a/idp-conf/src/main/resources/conf/idp.properties
+++ b/idp-conf/src/main/resources/conf/idp.properties
@@ -8,6 +8,7 @@ idp.entityID = https://idp.example.org
 idp.scope = example.org
 
 # General cookie properties (maxAge only applies to persistent cookies)
+# Note the default for idp.cookie.secure, you will usually want it set.
 #idp.cookie.secure = false
 #idp.cookie.httpOnly = true
 #idp.cookie.domain =

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.