Rails application resources not getting rendered over https

Question

I am using ruby 2.4.0p0 and Rails 5.2.3

In the production.rb file I have done the following setting:

  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
  config.force_ssl = true
  if Rails.application.config.force_ssl
    Rails.application.routes.default_url_options[:protocol] = 'https'
  end

But still the resource are getting rendered on http rather then https do I need to do any thing extra, please provide the desired thing to be done to get all assets getting loaded from s3 loads over https.

The website is live here at: https://tukaweb.com/asset/garments The s3 resources are at http ex: http://tukaweb.s3.amazonaws.com/uploads/three_d_garment/thumbnail/7/Womens_Dress_35-41_Thumbnail.png?X-Amz-Expires=600&X-Amz-Date=20200918T060705Z&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIRDA3IQIVTEPMN6Q%2F20200918%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Signature=1792bd4cc2437abd950b7d16d360d09e64423bdef89f41c24a5386d35e982dfa need them over https.

vidur punj vidur punj · Accepted Answer · 2020-09-18T08:51:28

The required change should be done inside the carrierwave.rb inside the webapp/config/initializers directory modified the settings as:

CarrierWave.configure do |config|
  config.fog_provider = 'fog/aws'
  config.fog_credentials = {
      provider:              'AWS',               
      aws_access_key_id:     'XXXXXXXXXX',        
      aws_secret_access_key: 'xxxxxxxxxx',        
      use_iam_profile:       false,               
      region:                'us-west-2',   #  optional, defaults to 'us-east-1'
      # host:                  'ec2-xx-xxx-xx-xx.us-west-2.compute.amazonaws.com',             # optional, defaults to nil
      :endpoint => 'https://s3.amazonaws.com',
  }
  config.fog_directory  = 'tukaweb'                                      # required
  config.fog_public     = false                                                 # optional, defaults to true
  # config.fog_attributes = { cache_control: "public, max-age=#{365.days.to_i}" } # optional, defaults to {}
end

The line which is responsible for changing s3 resource to be downloaded from https instead of http

  :endpoint => 'https://s3.amazonaws.com'  ## earlier it was 'http://s3.amazonaws.com'

Rails application resources not getting rendered over https

2 Answers