There is some information on https://www.drupal.org/https-information about installing the Secure Pages module to force SSL. This gives me a redirect loop on the login pages.

When I try without the Secure Login module I get mixed mode errors due to JS being served in plain http. Is a module really the only method to enable SSL on D8?

Assuming the server configuration is set-up for HTTPS and has the relevant SSL certifications and settings: Specifically, with the Drupal configuration, what is the correct way to make a Drupal 8 site Https only?

closed as too broad by Mołot, Shawn Conn, Krishna Mohan, kiamlaluno Jan 7 '16 at 7:58

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • If D8 cares what protocol it's served on that's got to be a pretty major bug - it was never a problem in D7, the web server just needed to be set up to forward http requests to https, base url set up correctly, and you're away. The secure login module is: For sites that are available via both HTTP and HTTPS, so for an "Https only" site that you're describing, it should never be installed – Clive Jan 7 '16 at 11:46
  • Looks like it is a bug. Opened a new question at drupal.stackexchange.com/questions/186057/… – Taylor Taff Jan 7 '16 at 15:58
  • @Clive I think base_url was removed in D8 – Taylor Taff Jan 7 '16 at 20:38

Browse other questions tagged or ask your own question.