hackgyver

I’m quite sure that the sub-modules was not enabled during this test.
This is still a valid issue for non-paying customers.

I’ve been testing the responseheaders with the two versions now:

curl -k -s –include -D /dev/tty -o /dev/null ‘https://wp-www.www.dev.x.net/privat/bredband/wifi/’

Responsheaders with 2.5.3:

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2017 13:58:52 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Strict-Transport-Security: max-age=31536000
Set-Cookie: partnerinfo=%7B%22id%22%3A%221027%22%2C%22name%22%3Anull%2C%22hostname%22%3Anull%2C%22logoUrl%22%3Anull%7D
Cache-Control: max-age=1200, s-maxage=300
Link: <https://wp-www.www.dev.x.net/wp-json/&gt;; rel=”https://api.w.org/&#8221;
Link: <https://wp-www.www.dev.x.net/?p=4385&gt;; rel=shortlink
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Response headers with 2.5.9:

HTTP/1.1 200 OK
Date: Wed, 22 Feb 2017 13:58:03 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Strict-Transport-Security: max-age=31536000
Set-Cookie: PHPSESSID=tvn2oo45s1gs988ead088as0b2; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: max-age=1200, s-maxage=300
Pragma: no-cache
Set-Cookie: partnerinfo=%7B%22id%22%3A%221027%22%2C%22name%22%3Anull%2C%22hostname%22%3Anull%2C%22logoUrl%22%3Anull%7D
Link: <https://wp-www.www.dev.x.net/wp-json/&gt;; rel=”https://api.w.org/&#8221;
Link: <https://wp-www.www.dev.x.net/?p=4385&gt;; rel=shortlink
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

PHP automatic sets Expires (to 1981) and Pragma when there’s an active session.

The combination of Cache-Control with instructions like cache and Expires, Pragma not to cache leaves our Apache Traffic Server (ATS) without caching.