SSLify for images doesn't work in 3.6.1

I found that SSLify mechanism for images doesn't work for posts coming from hub no TLS support.

No images visible in post on my hub tiksi.net but it can be opened on originating hub by clicking on link in post.

Here is how HTTP answer looks like.

xm@beta:~ # curl -IL 'https://tiksi.net/sslify/f0f48e61b57c9462bcb8384549138442f96e5d50d94add33a51523b60bb91b6f-2.jpg?f=&url=http%3A%2F%2Ffhtagn.org%2Fphoto%2Ff0f48e61b57c9462bcb8384549138442f96e5d50d94add33a51523b60bb91b6f-2.jpg%3Ff%3D%26zid%3Dkostikov%2540tiksi.net'
HTTP/2 200
server: h2o/2.2.5
date: Mon, 10 Sep 2018 10:30:59 GMT
strict-transport-security: max-age=15768000; includeSubDomains; preload
public-key-pins: pin-sha256="SnC66yWXq5KuOIPEgzuXbT0CIAp9Z6uxGKGxkEa2ACg="; pin-sha256="nnKdoftm4C3Fcs1FNi3Y8NWNfFELx5hN1MFhJGz/Qkg="; max-age=2592000; includeSubDomains
x-powered-by: PHP/7.2.9
set-cookie: PHPSESSID=fa5aaaaebf71621d5f1a2fb47a0d7451; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8

Here is what happens with direct request.

xm@beta:~ # curl -IL 'http://fhtagn.org/photos/timeoff/image/f0f48e61b57c9462bcb8384549138442f96e5d50d94add33a51523b60bb91b6f?f=&zid=kostikov%40tiksi.net'
HTTP/1.1 302 Found
Date: Mon, 10 Sep 2018 11:10:31 GMT
Server: Apache/2.4.18 (Ubuntu)
Set-Cookie: PHPSESSID=mlf9692boi6rpf9021km573901; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://tiksi.net/magic?f=&rev=1&owa=1&bdest=687474703a2f2f66687461676e2e6f72672f70686f746f732f74696d656f66662f696d6167652f663066343865363162353763393436326263623833383435343931333834343266393665356435306439346164643333613531353233623630626239316236663f663d
Content-Type: text/html; charset=UTF-8

HTTP/2 302
server: h2o/2.2.5
date: Mon, 10 Sep 2018 11:10:32 GMT
strict-transport-security: max-age=15768000; includeSubDomains; preload
public-key-pins: pin-sha256="SnC66yWXq5KuOIPEgzuXbT0CIAp9Z6uxGKGxkEa2ACg="; pin-sha256="nnKdoftm4C3Fcs1FNi3Y8NWNfFELx5hN1MFhJGz/Qkg="; max-age=2592000; includeSubDomains
x-powered-by: PHP/7.2.9
set-cookie: PHPSESSID=6797d2b8140ab60b18e4ab6cf5b87914; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: http://fhtagn.org/photos/timeoff/image/f0f48e61b57c9462bcb8384549138442f96e5d50d94add33a51523b60bb91b6f?f=
content-type: text/html; charset=UTF-8

HTTP/1.1 200 OK
Date: Mon, 10 Sep 2018 11:10:32 GMT
Server: Apache/2.4.18 (Ubuntu)
Set-Cookie: PHPSESSID=gpv0da7sfmnjech4fvmmhaodl5; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';
Content-Type: text/html; charset=utf-8