There is some information on https://www.drupal.org/https-information about installing the Secure Pages module to force SSL. This gives me a redirect loop on the login pages.

When I try without the Secure Login module I get mixed mode errors due to JS being served in plain http. Is a module really the only method to enable SSL on D8?

Assuming the server configuration is set-up for HTTPS and has the relevant SSL certifications and settings: Specifically, with the Drupal configuration, what is the correct way to make a Drupal 8 site Https only?

  • If D8 cares what protocol it's served on that's got to be a pretty major bug - it was never a problem in D7, the web server just needed to be set up to forward http requests to https, base url set up correctly, and you're away. The secure login module is: For sites that are available via both HTTP and HTTPS, so for an "Https only" site that you're describing, it should never be installed – Clive Jan 7 '16 at 11:46
  • Looks like it is a bug. Opened a new question at drupal.stackexchange.com/questions/186057/… – Taylor Taff Jan 7 '16 at 15:58
  • @Clive I think base_url was removed in D8 – Taylor Taff Jan 7 '16 at 20:38

Browse other questions tagged or ask your own question.