[interchange-cvs] interchange - jon modified 3 files

[interchange-cvs at icdevgroup.org]

User:      jon
Date:      2009-01-15 02:08:04 GMT
Modified:  .        WHATSNEW-5.7
Modified:  lib/Vend Config.pm Server.pm
Log:
Add new SessionCookieSecure boolean catalog directive.

When enabled, makes session cookie set in https usable only in https.

Revision  Changes    Path
2.23                 interchange/WHATSNEW-5.7


rev 2.23, prev_rev 2.22
Index: WHATSNEW-5.7
===================================================================
RCS file: /var/cvs/interchange/WHATSNEW-5.7,v
retrieving revision 2.22
retrieving revision 2.23
diff -u -u -r2.22 -r2.23
--- WHATSNEW-5.7	31 Dec 2008 17:46:05 -0000	2.22
+++ WHATSNEW-5.7	15 Jan 2009 02:08:04 -0000	2.23
@@ -29,6 +29,9 @@
 
   Thanks to David Christensen <david at endpoint.com> for the fix.
 
+* Add new SessionCookieSecure boolean catalog directive. When enabled, makes
+  session cookie set in https usable only in https.
+
 
 ------------------------------------------------------------------------------
 



2.240                interchange/lib/Vend/Config.pm


rev 2.240, prev_rev 2.239
Index: Config.pm
===================================================================
RCS file: /var/cvs/interchange/lib/Vend/Config.pm,v
retrieving revision 2.239
retrieving revision 2.240
diff -u -u -r2.239 -r2.240
--- Config.pm	10 Oct 2008 15:08:19 -0000	2.239
+++ Config.pm	15 Jan 2009 02:08:04 -0000	2.240
@@ -1,8 +1,8 @@
 # Vend::Config - Configure Interchange
 #
-# $Id: Config.pm,v 2.239 2008-10-10 15:08:19 mheins Exp $
+# $Id: Config.pm,v 2.240 2009-01-15 02:08:04 jon Exp $
 #
-# Copyright (C) 2002-2008 Interchange Development Group
+# Copyright (C) 2002-2009 Interchange Development Group
 # Copyright (C) 1996-2002 Red Hat, Inc.
 #
 # This program was originally based on Vend 0.2 and 0.3
@@ -54,7 +54,7 @@
 use Vend::Data;
 use Vend::Cron;
 
-$VERSION = substr(q$Revision: 2.239 $, 10);
+$VERSION = substr(q$Revision: 2.240 $, 10);
 
 my %CDname;
 my %CPname;
@@ -711,6 +711,7 @@
 	['DebugHost',	     'ip_address_regexp',	''],
 	['BounceReferrals',  'yesno',            'no'],
 	['OrderCleanup',     'routine_array',    ''],
+	['SessionCookieSecure', 'yesno',         'no'],
 
 	];
 



2.97                 interchange/lib/Vend/Server.pm


rev 2.97, prev_rev 2.96
Index: Server.pm
===================================================================
RCS file: /var/cvs/interchange/lib/Vend/Server.pm,v
retrieving revision 2.96
retrieving revision 2.97
diff -u -u -r2.96 -r2.97
--- Server.pm	8 Jan 2009 12:05:16 -0000	2.96
+++ Server.pm	15 Jan 2009 02:08:04 -0000	2.97
@@ -1,8 +1,8 @@
 # Vend::Server - Listen for Interchange CGI requests as a background server
 #
-# $Id: Server.pm,v 2.96 2009-01-08 12:05:16 markj Exp $
+# $Id: Server.pm,v 2.97 2009-01-15 02:08:04 jon Exp $
 #
-# Copyright (C) 2002-2008 Interchange Development Group
+# Copyright (C) 2002-2009 Interchange Development Group
 # Copyright (C) 1996-2002 Red Hat, Inc.
 #
 # This program was originally based on Vend 0.2 and 0.3
@@ -26,7 +26,7 @@
 package Vend::Server;
 
 use vars qw($VERSION);
-$VERSION = substr(q$Revision: 2.96 $, 10);
+$VERSION = substr(q$Revision: 2.97 $, 10);
 
 use Cwd;
 use POSIX qw(setsid strftime);
@@ -492,6 +492,9 @@
 				($::Instance->{CookieName} || 'MV_SESSION_ID'),
 				defined $::Instance->{ClearCookie} ? '' : $Vend::SessionName,
 				$Vend::Expire || undef,
+				undef,
+				undef,
+				$Vend::Cfg->{SessionCookieSecure} ? $CGI::secure : undef,
 			]
 		unless $Vend::CookieID;
 	push @jar, @{$::Instance->{Cookies}}