プロジェクト

全般

プロフィール

Vote #64637

完了

Config option to use https://secure.gravatar.com

Admin Redmine さんがほぼ2年前に追加. ほぼ2年前に更新.

ステータス:
Closed
優先度:
通常
担当者:
-
カテゴリ:
Accounts / authentication_7
対象バージョン:
開始日:
2009/02/11
期日:
進捗率:

100%

予定工数:
category_id:
7
version_id:
6
issue_org_id:
2718
author_id:
349
assigned_to_id:
5
comments:
6
status_id:
5
tracker_id:
2
plus1:
2
affected_version:
closed_on:
affected_version_id:
ステータス-->[Closed]

説明

IE no gives an error message when redmine is used over ssl saying somethin like "unencrypted items are on this page, do you want to continue" If redmine could have a switch to let is use https://secure.gravatar.com, this would be fixed.

Do not automaticly detect https because redmine will probably be used often in a proxy setup.

If I have time, I'll create a patch


journals

+1
--------------------------------------------------------------------------------
+1 I had to hack the existing plugin.

also, an option to set the default gravatar would be good too.
--------------------------------------------------------------------------------
Sorry, in my opinion this should be issued as a bug.
--------------------------------------------------------------------------------
Instead of an option, I think it would be best to autodetect if Redmine is running with SSL and dynamically change the url. I'll take this issue since I need to do some work in the Gravatar section anyways.
--------------------------------------------------------------------------------
I ended up upgrading the "gravatar plugin":http://github.com/woods/gravatar-plugin/tree/master which included SSL support. So now Redmine will use the secure gravatars when the the "protocol":http://www.redmine.org/wiki/1/RedmineSettings#Protocol setting is set to https.
--------------------------------------------------------------------------------
Eric Davis wrote:
> I ended up upgrading the "gravatar plugin":http://github.com/woods/gravatar-plugin/tree/master which included SSL support. So now Redmine will use the secure gravatars when the the "protocol":http://www.redmine.org/wiki/1/RedmineSettings#Protocol setting is set to https.

It looks like (according to app/helpers/application_helper.rb, Redmine 1.4.3) the SSL option is set depending on the protocol that is used to access a web page (so it will be SSL if you open the web page via HTTPS), not on the Protocol setting (which is used for adding links to the email notifications).

In my case, I needed to add proxy_set_header X-Forwarded-Proto https; to the nginx config (without this header Redmine considered the requests as HTTP requests and avatars were loaded via HTTP, although the rest of the content was loaded through HTTPS).

Alternatively (if the same configuration is used for both HTTP and HTTPS), one would add:

proxy_set_header X-Forwarded-Proto $scheme;
--------------------------------------------------------------------------------

Admin Redmine さんがほぼ2年前に更新

  • カテゴリAccounts / authentication_7 にセット
  • 対象バージョン0.9.0_6 にセット

他の形式にエクスポート: Atom PDF

いいね!0
いいね!0