[GLPI 10.0.15] PHP directive "session.cookie_secure" should be set to "on" when GLPI can be accessed on HTTPS protocol. about glpi HOT 8 CLOSED

Hi,

Could you check if #17314 fixes this issue ?

from glpi.

@cedric-anne Anne, I swapped lines in [src/System/Requirement/SessionsSecurityConfiguration.php] and in [src/Auth.php] but the message in [/front/central.php] still remains the same. Big orange bar with this 'PHP directive "session.cookie_secure" should be set to "on" when GLPI can be accessed on HTTPS protocol.' message.

from glpi.

It looks like your htaccess file is not correctly applied. The expected directive is php_value session.cookie_secure 1.

from glpi.

@cedric-anne OK, moved .htaccess to catalogue public and now everything's good. Why wouldn't it work by setting this parameter globally in php.ini?

Thank for your assistance, problem fixed by #17314 and .htaccess.

from glpi.

Why wouldn't it work by setting this parameter globally in php.ini?

It works when it is set in the php.ini file. You may have to reload the related sevice, that can be Apache, PHP-FPM, ... depending on your server configuration.

from glpi.

@cedric-anne I've set it on all php.ini files I could find, restarted all services, no success, I've restarted even a whole VM:

fpm/php.ini:;session.cookie_secure = 1
cli/php.ini:;session.cookie_secure = 1
apache2/php.ini:;session.cookie_secure = 1
root@<REDACTED>:/etc/php/8.2#

But with .htaccess it's OK.

from glpi.

The ; char is used to comment lines. It means that the line is ignored and it explains why your configuration is not applied.

from glpi.

@cedric-anne Yeah, definetely, I have to buy new glasses or set bigger text in terminal... Thank you so much. I've read those lines for hundreds of times, didn't see the semicolone.

from glpi.