Isn't it possible to call a Dns api and Google's Api to set the Txt record in dns and cleanup hook to set the certificates in Google respectively?
How to use Let's Encypt with Google Cloud Platform
21–30 of 35 posts
Re: How to use Let's Encypt with Google Cloud Platform
#22"LetsEncrypt issues SSL certificates by automatically verifying that you have ownership of the domain you claim you have."
Let's Encrypt does not verify ownership of domains. We verify control.
This is a common mistake, but the difference between ownership and control is significant so I'm just pointing this out for general educational purposes.
Re: How to use Let's Encypt with Google Cloud Platform
#23For the Container Engine part of GCP (and any Kubernetes installation really), this project automates everything away : https://github.com/jetstack/kube-lego
Re: How to use Let's Encypt with Google Cloud Platform
#24> Done! Your site is now HTTPS protected! Don’t forget to renew your cert in 3 months This is not how Let's Encrypt is designed to work. Manually registering and then deploying a certificate and saying "don't forget to renew" does not make for a particularly high quality post.
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
That's a big part of why this post is disappointing. It may as well be two separate posts titled "how to manually obtain an LE cert", and "how to manually install a cert on GAE".
I was excited and thought they'd come up with a way of installing certs into GAE in an automated manner, since that's been the biggest blocker of automated LE usage on GAE.
Re: How to use Let's Encypt with Google Cloud Platform
#25> Done! Your site is now HTTPS protected! Don’t forget to renew your cert in 3 months This is not how Let's Encrypt is designed to work. Manually registering and then deploying a certificate and saying "don't forget to renew" does not make for a particularly high quality post.
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
It is not GAE but Google Cloud DNS right? So one needs to write a small app that uses that API to answer the challenge.
Re: How to use Let's Encypt with Google Cloud Platform
#26"LetsEncrypt issues SSL certificates by automatically verifying that you have ownership of the domain you claim you have." Let's Encrypt does not verify ownership of domains. We verify control. This is a common mistake, but the difference between ownership and control is significant so I'm just pointing this out for general educational purposes.
Thank you! Good point.
Re: How to use Let's Encypt with Google Cloud Platform
#27> Done! Your site is now HTTPS protected! Don’t forget to renew your cert in 3 months This is not how Let's Encrypt is designed to work. Manually registering and then deploying a certificate and saying "don't forget to renew" does not make for a particularly high quality post.
Agreed! I also wish there was an automated way to renew! However currently there isn't, and I doubt building out the tooling is worth it given Google appears to be working on an integration themselves: https://issuetracker.google.com/issues/35900034 -- in the intermediate, I still need certificates though.
Re: How to use Let's Encypt with Google Cloud Platform
#28Earlier quoted context omitted.
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
That's a big part of why this post is disappointing. It may as well be two separate posts titled "how to manually obtain an LE cert", and "how to manually install a cert on GAE". I was excited and thought they'd come up with a way of installing certs into GAE in an automated manner, since that's been the biggest blocker of automated LE usage on GAE.
Thought about automating it with a sequence of API calls (get challenge, automatically create handler, deploy solution, get cert, modify it, upload it). However, Google is working on an automated solution, and I'm not sure deploying something for the intermediate is necessary https://issuetracker.google.com/issues/35900034 (but I still need certs in the intermediate).
Re: How to use Let's Encypt with Google Cloud Platform
#29> Done! Your site is now HTTPS protected! Don’t forget to renew your cert in 3 months This is not how Let's Encrypt is designed to work. Manually registering and then deploying a certificate and saying "don't forget to renew" does not make for a particularly high quality post.
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
SSL certificates can now be updated in GAE using the gcloud command[1].
You could combine that with lego[2] to renew a Let's Encrypt SSL certificate via DNS Challenge to automate the process until native automation is implemented in GAE.
[1] https://cloud.google.com/appengine/docs/standard/python/usin... [2] https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dn...
Re: How to use Let's Encypt with Google Cloud Platform
#30The fact that setting up SSL on Google's platform in 2017 requires reading a long article and repeating steps is really bad publicity - if this post is official it ought to be embarrassing. AWS, Heroku, Cloudflare have all moved on to automated certificate management for all their hosted services. http://docs.aws.amazon.com/acm/latest/userguide/acm-overview... https://devcenter.heroku.com/articles/automated-certifica…
Yup! I even link to the Amazon one in the tutorial, Google's is coming soon (https://issuetracker.google.com/issues/35900034), and in the meanwhile this helps you get a cert.