Feature #24763

Force SSL when Setting.protocol is "https"

Added by Aleksandar Pavic visit redminecookbook.com 12 months ago. Updated 8 months ago.

Status:NewStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Administration
Target version:-
Resolution:

Description

Forcing SSL is important, and some enterprise environment can't be used if they aren't forcing the SSL due to security standards and best practices.

Redmine's Administration | Settings offers HTTPS as an option, but choosing it does nothing.

Editing the config/settings.yml and changing protocol from default: http
to https does nothing also

However placing the

config.force_ssl = true

in config/application.rb do work and do force SSL

So I'm not sure is it a defect or a feature request, but I'm posting it as a defect.

My Redmine info:

Environment:
  Redmine version                3.3.1.stable
  Ruby version                   2.1.4-p265 (2014-10-27) [x86_64-linux]
  Rails version                  4.2.7.1
  Environment                    production
  Database adapter               Mysql2

redminessl.png (9.56 KB) Aleksandar Pavic visit redminecookbook.com, 2017-01-05 08:52


Related issues

Related to Redmine - Feature #2579: Configure SSL schema for "private" actions. New 2009-01-25
Related to Redmine - Feature #3804: Authentication over HTTPS New 2009-09-02

History

#1 Updated by Go MAEDA 11 months ago

  • Priority changed from High to Normal

Aleksandar Pavic wrote:

Redmine's Administration | Settings offers HTTPS as an option, but choosing it does nothing.

It is used to generate URL of issues in email notification.

#2 Updated by Go MAEDA 11 months ago

  • Tracker changed from Defect to Feature
  • Subject changed from Settings protocol HTTPS does nothing to Force SSL when Setting.protocol is "https"
  • Category changed from Accounts / authentication to Administration

#3 Updated by Go MAEDA 11 months ago

  • Related to Feature #2579: Configure SSL schema for "private" actions. added

#4 Updated by Go MAEDA 11 months ago

#5 Updated by Fernando Hartmann 8 months ago

+1

Also available in: Atom PDF