# Suddenly all CDN links are https rather than http, what happened?

**URL:** https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015
**Category:** Support
**Created:** [January 19, 2017, 10:12am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015 "2017-01-19T10:12:34Z")
**Posts on this page:** 19
**Page:** 1

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [January 19, 2017, 10:12am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/1 "2017-01-19T10:12:34Z")

</div>

Hi,

I have no idea when this happened but I guess it was after some upgrade, all uploaded images were no longer http but https. I’ve talked to my CDN ISP but they said it was discourse that made the change.

Is that so? How can I keep using http?

Thanks.

Yinglu

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [January 19, 2017, 11:05am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/2 "2017-01-19T11:05:37Z")

</div>

Did you tick the “use https” site setting?

---

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [January 19, 2017, 11:18am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/3 "2017-01-19T11:18:23Z")

</div>

You mean this?

![](https://global.discourse-cdn.com/meta/original/3X/9/7/97454173027a599d6a1c48650cf747de8d1c7c2e.png)

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [January 21, 2017, 10:30pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/4 "2017-01-21T22:30:44Z")

</div>

Yes, that’s the setting I was referring to.

---

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [January 22, 2017, 2:25am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/5 "2017-01-22T02:25:04Z")

</div>

I haven’t turned on this option. Any other ideas?

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [January 22, 2017, 2:31am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/6 "2017-01-22T02:31:24Z")

</div>

What site are you referring to, so that we can see the actual behaviour you’re talking about?

---

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [January 22, 2017, 2:50am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/8 "2017-01-22T02:50:55Z")

</div>

You can post an image on [http://bbs.iosre.com/t/topic/6320](http://bbs.iosre.com/t/topic/6320) with username snaken1nny and password newpassw0rd, thank you!

---

<div class="post-metadata">

### Author: ![Fer\_Nando](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fer_nando/32/66726_2.png) [@Fer\_Nando](https://meta.discourse.org/u/Fer_Nando)
#### Post date: [January 23, 2017, 9:10pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/9 "2017-01-23T21:10:59Z")

</div>

I have the same problem in my forum, i use http only and when apply cdn, all site images are forced to https.

---

<div class="post-metadata">

### Author: ![michaeld](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/michaeld/32/1594_2.png) [@michaeld](https://meta.discourse.org/u/michaeld)
#### Post date: [January 23, 2017, 11:24pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/10 "2017-01-23T23:24:49Z")

</div>

And this is a problem why?

---

<div class="post-metadata">

### Author: ![Fer\_Nando](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fer_nando/32/66726_2.png) [@Fer\_Nando](https://meta.discourse.org/u/Fer_Nando)
#### Post date: [January 24, 2017, 1:04am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/11 "2017-01-24T01:04:15Z")

</div>

If you dont have a ssl certificate, some browsers refund to display the images, this is my case.

---

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [January 24, 2017, 2:33am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/12 "2017-01-24T02:33:22Z")

</div>

As @Fer_Nando said, both Chrome and Safari refuse to display the images without a valid certificate

---

<div class="post-metadata">

### Author: ![michaeld](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/michaeld/32/1594_2.png) [@michaeld](https://meta.discourse.org/u/michaeld)
#### Post date: [January 24, 2017, 5:44am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/13 "2017-01-24T05:44:16Z")

</div>

The CDN ISP provides a certicificate for you, right?  
Which CDN are you using?

---

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [January 24, 2017, 6:02am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/15 "2017-01-24T06:02:27Z")

</div>

Yes, I can request for a free certificate but I didn’t. The CDN is from QiNiu, based in China.

---

<div class="post-metadata">

### Author: ![Fer\_Nando](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fer_nando/32/66726_2.png) [@Fer\_Nando](https://meta.discourse.org/u/Fer_Nando)
#### Post date: [January 25, 2017, 1:27am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/16 "2017-01-25T01:27:50Z")

</div>

I maked free cert in cloundfront, this solve my problem but other admins of discourse dont have an option for disable https in images when enable the cdn option, this is a small bug.

---

<div class="post-metadata">

### Author: ![snakeninny](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/snakeninny/32/115522_2.png) [@snakeninny](https://meta.discourse.org/u/snakeninny)
#### Post date: [February 8, 2017, 2:18am UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/17 "2017-02-08T02:18:19Z")

</div>

Is this a confirmed bug? @mpalmer

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [February 8, 2017, 2:11pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/18 "2017-02-08T14:11:37Z")

</div>

I don’t know and I doubt Matt can help you here 🙂

Can you confirm:

1. you are running latest?

2. your `DISCOURSE_CDN_URL` is set to: `http://7xibfi.com1.z0.glb.clouddn.com` ? (note how it is http there and not https)

---

<div class="post-metadata">

### Author: ![Fer\_Nando](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fer_nando/32/66726_2.png) [@Fer\_Nando](https://meta.discourse.org/u/Fer_Nando)
#### Post date: [February 8, 2017, 5:44pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/19 "2017-02-08T17:44:57Z")

</div>

The question is for me?

I have “DISCOURSE\_CDN\_URL: [//cdn.domaincname.com](https://cdn.domaincname.com)” in cdn option, no http or https set here.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [February 8, 2017, 6:05pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/20 "2017-02-08T18:05:06Z")

</div>

> [@Fer\_Nando](#):
>
> I have “DISCOURSE\_CDN\_URL: [//cdn.domaincname.com](https://cdn.domaincname.com)” in cdn option, no http or https set here.

Then change it to:

```plaintext
DISCOURSE_CDN_URL: "http://cdn.domaincname.com"

```

Otherwise we will pick HTTPS for you.

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [June 8, 2024, 12:45pm UTC](https://meta.discourse.org/t/suddenly-all-cdn-links-are-https-rather-than-http-what-happened/56015/21 "2024-06-08T12:45:02Z")

</div>

This topic was automatically closed after 2697 days. New replies are no longer allowed.
