Plugins.matomo.org over https

Feature Suggestions
1

Hi everyone.

We are starting using Matomo in out organization to unify various statistics scattered all over the place. It works great so far. Thanks.

We are experiencing a little problem while connecting to plugins.matomo.org . For some reason, matomo uses http to initiate connection, which is blocked by our proxy server:

curl -Is https://plugins.matomo.org/
HTTP/1.1 200 Connection established

HTTP/2 200
date: Fri, 28 Jul 2023 06:08:03 GMT
server: Apache
[...]

# curl -Is http://plugins.matomo.org/
HTTP/1.1 403 Forbidden
Date: Fri, 28 Jul 2023 06:08:07 GMT
Content-Type: text/html
Cache-Control: no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Length: 3677
X-Cache: MISS from proxy
X-Cache-Lookup: MISS from proxy:8080
Via: 1.1 proxy (squid/3.5.20)
Connection: keep-alive

We would want to use https from the start. Is there a setting in config.ini for that? So far I put host and port in [proxy] section of config.ini.php . I simply changed:

return 'http://plugins.matomo.org';

to:

return 'https://plugins.matomo.org';

in plugins/Marketplace/config/config.php file and it works, but I am afraid that I will forgot about it during an upgrade. I also triggers file integrity check warning.

Thank You.

1 Like
2

I just found about this - https://github.com/matomo-org/matomo/issues/19081 . I guess will be migrating to 5 as soon as possible. Which is fine.

3

Hi @lpcezgovpl, Matomo 5 will use https by default for requests to plugins.matomo.org, but in the meantime you can change the api_service_url config setting to make Matomo 4.x do the same.

[General]
api_service_url = https://api.matomo.org
4

@bx80 Thank You. We’ll do it right away.