jsessionid length and force

[fuligj.fuligj.indamail.hu]

Hi!

I would like to know where can I configure the JSESSIONID's length and force.

Thank You!

[sjmenden]

Not possible unless you were to recompile Tomcat, why would you need to configure the length?

[fuligj.fuligj.indamail.hu]

Thank You for reply!

I would like to config a stronger session id with capitals,lowercases,numbers and punctuation marks for the higher security. Is this unnecessary?

[sjmenden]

Length should be sufficient, I haven't seen any issues with security concerns over the actual JSESSIONID content wise, since it has a length of 32 characters, that should be plenty.