title: php encrypted ssl session data
body: <p>I have 2 servers running, 
  one for the dynamic content (nginx, php) 
  and another for login (apache2, php)</p>
  
  <p>i use memcache to share the session information</p>
  
  <p>i upgraded the server software and since then the session data in apache is encrypted</p>
  
  <p>apache:<br>
  session::write("sessions/s53mqdhghmlrvnvjt05novt4m2","encrypted-data",0,1440)</p>
  
  <p>nginx:<br>
  session::write("sessions/s53mqdhghmlrvnvjt05novt4m2","test|i:1;",0,1440)</p>
  
  <p>on both servers the session-id's are the same, and the session cookie still passes the sessionId so that all still works like it should</p>
  
  <p>both servers use the exact same php.ini</p>
  
  <p>i looked in the ssl conf but i couldnt find anything that would set the session data to be encrypted</p>
  
  <p>anyone know where i can stop the session data from being encrypted on apache/mod_ssl</p>
  
  <p><strong>edit:</strong><br>
  well i've found a working sollution but i still havnt found the origion of the problem
  i do know that the session data has to leave the php process to be encrypted by mod_ssl
  and the session save handler is called at the cleanup operations by php after the script end.<br>
  But there is nothing of this behaviour documented in the docs.</p>
  
  <p>the sollution is, for now, to not save the data provided by php at session::write, but rather to use the session_encode() to generate the session hash again and save that</p>
  
  <p>for those of you reading this that do know how and why i would really like to know to turn off the directive that encrypts the data.</p>