Is the "EnableSSL" flag supported in a load balanced environment in nop 3.9?
Currently "EnableSSL" causes redirection loop likely due to missing check for "X-Forwarded-Proto" header.
Manual redirect to https can be achieved instead using IIS Rewrite or example below:
protected void Application_BeginRequest() {
if (!string.Equals(Request.Headers["X-Forwarded-Proto"], "https", StringComparison.InvariantCultureIgnoreCase) && HttpContext.Current.Request.IsLocal.Equals(false)) {
Response.Redirect("https://" + Request.ServerVariables["HTTP_HOST"] + HttpContext.Current.Request.RawUrl);
}
}
I am sure you are aware that doing the redirect manually will not not serve images from the database securely.
Is there ability in nopcommerce to serve the images via https in this setup?