I’m having issues with this as well.
I use SSL on my site, but people are also able to get to my site without HTTPS, thus I’ve found myself with http and https versions, creating duplicate content, I’d to be able to set the canonical tag to the https version ideally.