How to fix "Cookie not Sent Over SSL (4720)" ASP.NET MVC?

Question

1.The Tester test my ASP.NET MVC website and report "Cookie not Sent Over SSL(4720)" issues.

2.And they provide me to solve this issue by Add <httpCookies httpOnlyCookies="true" requireSSL="true" /> in Web.config and then I followed the instructions.

3.The problem when i run and test my website the Session and TempData is null when change page. The code below is shown how i set Session and TempData.

3.1 I set Session and TempData when user go to "Home/Index".

public class HomeController : Controller
{
   public ActionResult Index()
   {
      TempData["class"] = "A";
      TempData.Keep();

      Session["status"] = "NO";

      return View();
   }
}

3.2 When user change page to "Admin/User" i get TempData["class"] and Session["status"] but both is null.

public class AdminController : Controller
{
   public ActionResult User()
   {
      string userclass = TempData["class"] != null ? TempData["class"].ToString() : "";

      string userstatus = Session["status"] != null ? Session["status"].ToSring() : "";

      UserModel usermodel = new UserModel(userclass, userstatus);
      return View(usermodel);
   }
}

4. If i delete <httpCookies httpOnlyCookies="true" requireSSL="true" /> from Web.config and test again it's work. but it's still issue "Cookie not Sent Over SSL (4720)" when tester test this website.

How to fix this problem?

P.S. Sorry for bad english skill.

Answer 1

If you set your cookies to be sent securely over SSL, then you must enable SSL in IIS Express for this to work. Visual Studio configures all the necessary things (like your server certificate and the settings) when you select the SSL option for the web host.

You'll find here a full tutorial about it.