Heroku: SSL is not enabled

Question

So my Rails (3.2.1) app was working fine on Heroku. Then I set config.force_ssl = true in my production config file, upon opening the file, I now got the "SSL is not enabled" error. I thought Heroku allows you to piggyback their SSL certs, but it is not working for me.

What I've tried:

using heroku addons:add piggyback_ssl (fails, as the add-on is now standard..)
validating my account (shouldn't be necessary, but I tried it anyway)
changing my config.force_ssl = false, but my app still tries to use SSL...

score 2 · Answer 1 · edited Jun 16 '18 at 10:32

2

I may a bit late, but the reason that your browser still redirects you to https even if you have that option turned off in Rails has to do with the "Strict-Transport-Security" header (HSTS).

edited Jun 16 '18 at 10:32

Bhargav Rao

50,140
28
121
140

answered May 09 '12 at 19:55

Stefan Kühn

339
2
11

This would certainly explain [this](http://stackoverflow.com/q/10444780/372643) too. – Bruno May 10 '12 at 11:25
1

page no longer available – simpleuser Dec 25 '15 at 14:26

score 0 · Answer 2 · answered Mar 11 '12 at 20:16

0

Try installing the Piggyback SSL addon as follows:

heroku addons:add ssl:piggyback

Once that's installed and your app has been restarted, it should be accessible at both of the following addresses:

http://your-app.heroku.com
https://your-app.heroku.com

answered Mar 11 '12 at 20:16

Graham Swan

4,818
2
30
39

yeah, that's the first thing I tried. It gives a message that ssl piggyback now comes standard, and that I don't need to use that command anymore... and then continues to give me the error.... Also, I went back and set force_ssl to false, and the app still tries to load https, and gives me the error. I can't access the app at http, it just keeps re directing to https... – ImprovedSilence Mar 11 '12 at 20:40
You said you tried to install **piggyback_ssl**, so I was confused. I'm not sure then. Does SSL work locally? – Graham Swan Mar 11 '12 at 20:48

score 0 · Answer 3 · answered Mar 22 '12 at 21:08

Looks like you might have caught Heroku in the middle of a rollout. As of a few weeks ago, Piggyback SSL is now enabled for all users/apps by default. If you're still seeing the "SSL is not enabled" error, you should contact Support.

http://devcenter.heroku.com/changelog/10

Heroku: SSL is not enabled

3 Answers3

Linked