Force_Https Not Working

[heliumhel]

Have btsync 1.4.103 installed on a debian x86 system.   Works great, have SSL configured and working in the configuration file.   My issue is the command ( "force_https" : true ), does not disable http access to the GUI.   so if I connect with http://127.0.0.1:8888 it works and doesn't prompt for a user and password while using https://127.0.0.1:8888 also works but does prompt for use and password.   Am I wrong in the expectation that force_https would disable non encrypted access?   

 

My apologies if this has been asked and answered but a search didn't come up with results for this issue.

[RomanZ]

@heliumhel

force_https disables regular http access. It should simply redirect you from http to https same URL. Please look carefully in your browser - does it use HTTP or HTTPS when actually loading the page? Also, the pass prompted once and saved to a session cookie, so you'll need to restart your browser to get prompted again.

[heliumhel]

I have, no sign of encrypted content.   A trace shows that it is not encrypted.    My implementation is a little more obvious as the key are self signed so the browser will cry about not being able to verify the certificate through a root.   

[RomanZ]

@heliumhel

One more thing to check - when you supply Sync with the private key - you need to decrypt it to make sure it won't demand password from Sync to actually access the key.