Heroku SSL termination breaks Transport Security for downloads
See original GitHub issueWhen deploying to Heroku, the download URLs will use http:// instead of https:// as getFullUrl()
uses req.protocol, which is always ‘http’ on Heroku
Issue Analytics
- State:
- Created 5 years ago
- Reactions:1
- Comments:6
Top Results From Across the Web
Heroku SSL
SSL is a cryptographic protocol that provides end-to-end encryption and integrity for all web requests. Apps that transmit sensitive data ...
Read more >Issues · GitbookIO/nuts - GitHub
chestnut: Releases/downloads server with auto-updater and GitHub as a backend - Issues ... Heroku SSL termination breaks Transport Security for downloads.
Read more >Heroku - disable SSL termination - Salesforce Stack Exchange
I would like to renew, serve and negotiate SSL connections myself, within my application. Is this possible? Currently it seems SSL ...
Read more >Configure SSL for the GitLab Linux package
Some cloud provider services, such as AWS Certificate Manager (ACM), do not allow the download of certificates. This prevents them from being used...
Read more >Force HTTPS with .htaccess for Security | InMotion Hosting
Learn how to use mod_rewrite and your .htaccess file to force your website's visitors to use the SSL.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
For people running into this issue it can be solved by setting
TRUST_PROXY
totrue
in your heroku config vars@Eugeny Just solved my problem. I did end up using https, however I just got other errors afterwards. Turns out I had to install the application as a .dmg file to my computer and then issue updates to the heroku server as a .zip otherwise they wouldn’t download (on mac). Not sure why; any idea?