Index: container/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java
===================================================================
--- container/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java       (revision 495443)
+++ container/catalina/src/share/org/apache/catalina/authenticator/AuthenticatorBase.java       (working copy)
@@ -745,6 +745,9 @@
             Cookie cookie = new Cookie(Constants.SINGLE_SIGN_ON_COOKIE, ssoId);
             cookie.setMaxAge(-1);
             cookie.setPath("/");
+
+            // BZ 41217
+            cookie.setSecure(request.isSecure());
             
             // Bugzilla 34724
             String ssoDomain = sso.getCookieDomain();