--- ./jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java	2004-11-24 17:55:07.000000000 +0100
+++ ./jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java	2008-04-04 15:53:59.000000000 +0200
@@ -843,6 +843,11 @@
             Cookie cookie = new Cookie(Constants.SINGLE_SIGN_ON_COOKIE, ssoId);
             cookie.setMaxAge(-1);
             cookie.setPath("/");
+
+            // Bugzilla 41217
+            javax.servlet.ServletRequest r = (javax.servlet.ServletRequest) request;
+            cookie.setSecure(r.isSecure());
+
             hres.addCookie(cookie);
 
             // Register this principal with our SSO valve