question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Heroku SSL termination breaks Transport Security for downloads

See original GitHub issue

When deploying to Heroku, the download URLs will use http:// instead of https:// as getFullUrl() uses req.protocol, which is always ‘http’ on Heroku

Issue Analytics

  • State:open
  • Created 5 years ago
  • Reactions:1
  • Comments:6

github_iconTop GitHub Comments

7reactions
ddnetterscommented, Mar 2, 2019

For people running into this issue it can be solved by setting TRUST_PROXY to true in your heroku config vars

0reactions
Joshandrews43commented, Dec 11, 2018

@Eugeny Just solved my problem. I did end up using https, however I just got other errors afterwards. Turns out I had to install the application as a .dmg file to my computer and then issue updates to the heroku server as a .zip otherwise they wouldn’t download (on mac). Not sure why; any idea?

Read more comments on GitHub >

github_iconTop Results From Across the Web

Heroku SSL
SSL is a cryptographic protocol that provides end-to-end encryption and integrity for all web requests. Apps that transmit sensitive data ...
Read more >
Issues · GitbookIO/nuts - GitHub
chestnut: Releases/downloads server with auto-updater and GitHub as a backend - Issues ... Heroku SSL termination breaks Transport Security for downloads.
Read more >
Heroku - disable SSL termination - Salesforce Stack Exchange
I would like to renew, serve and negotiate SSL connections myself, within my application. Is this possible? Currently it seems SSL ...
Read more >
Configure SSL for the GitLab Linux package
Some cloud provider services, such as AWS Certificate Manager (ACM), do not allow the download of certificates. This prevents them from being used...
Read more >
Force HTTPS with .htaccess for Security | InMotion Hosting
Learn how to use mod_rewrite and your .htaccess file to force your website's visitors to use the SSL.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found