Vote #75510
完了Plugin update check not working if redmine is viewed over https
0%
説明
Chrome silently blocks any request to insecure sites:
[blocked] The page at 'https:///admin/plugins' was loaded over HTTPS, but ran insecure content from 'http://www.redmine.org/plugins/check_updates? ': this content should also be loaded over HTTPS.
This causes breaks the plugin update checker. redmine.org should be accessible over https and the check should use the secure site if https is selected in the redmine settings. I'd also like to note that redmine.org is transmitting username and password unencrypted which is really bad!
journals
This happens in Firefox as well. Both browsers block the plugin check silently when your Redmine installation uses HTTPS.
--------------------------------------------------------------------------------
As of today, www.redmine.org is available via HTTPS, this should fix this problem.
--------------------------------------------------------------------------------
:thumbsup:
--------------------------------------------------------------------------------
This is still unfixed in Redmine 2.6.1 since it still sends the request using http://
I recommend using an protocol relative url so it chooses automatically between http and https depending on what is used for Redmine.
http://www.redmine.org/projects/redmine/repository/entry/tags/2.6.1/app/views/admin/plugins.html.erb#L28
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Request changed to https in r14014.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------