Configure weblogic.xml to send secure JSESSIONID

Question

I'm trying to add to weblogic.xml file <cookie-secure> tag:

<wls:session-descriptor>
    <wls:timeout-secs>1800</wls:timeout-secs>
    <wls:cookie-path>/my-web</wls:cookie-path>
    <wls:cookie-http-only>false</wls:cookie-http-only>
    <wls:url-rewriting-enabled>false</wls:url-rewriting-enabled>
    <wls:sharing-enabled>true</wls:sharing-enabled>
    <wls:invalidate-on-relogin>true</wls:invalidate-on-relogin>
    <wls:cookie-secure>true</wls:cookie-secure>
</wls:session-descriptor>

But an error appears:

cvc-complex-type.2.4.d: Invalid content was found starting with element 'wls:cookie-secure'. No child element is expected at this point

How is possible to solve the problem?

Answer 1

Right order is:

<wls:timeout-secs>1800</wls:timeout-secs>
<wls:cookie-path>/my</wls:cookie-path>
<wls:cookie-secure>true</wls:cookie-secure>
<wls:cookie-http-only>true</wls:cookie-http-only>
<wls:url-rewriting-enabled>false</wls:url-rewriting-enabled>