Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Managed SSL for Google App Engine

cloudplatform.googleblog.com

Post reply on HN
Print view View original

21–30 of 54 posts

Re: Managed SSL for Google App Engine

#21

Post by iamgopal »

StevePerkins wrote: post #17
iamgopal wrote: post #14

Earlier quoted context omitted.

I think they do not use letsencrypt . They use thier own SSL, since they are now licencing authority. Edit: I am wrong. They use letsencrypt.

I am hosting this project on App Engine, and have been using their SSL management for a couple of months now: https://resumefodder.com/ A click on the browser padlock icon says that it's a LetEncrypt cert. Unsurprising, since Google is such a major sponsor. Also unsurprising that Google chooses to focus on their own branding rather than call attention to it.

You are right, I do have many domains and didn't bother to check it.

Re: Managed SSL for Google App Engine

#22

Post by kuschku »

paulddraper wrote: post #16

Been using AWS's certificate management. It is _so_ nice not to (1) manage the certs with your own infrastructure (2) automatically deploy these things to HAProxy, Apache, MySQL, random server X. Automated load balancing + cert management is heaven.

I'm using kubernetes with kube-lego, and my experience is exactly the same.

Automating all routing, API gateways, TLS termination and certificate management makes life so much easier.

Re: Managed SSL for Google App Engine

#24

Post by NearAP »

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites.

I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them).

Finally, I also see it as another way of pushing for the uptake of SSL. With GAE doing this, other hosting services might also start offering something similar or close to it which would then beg the question - why is your site not using SSL.

Re: Managed SSL for Google App Engine

#25

Post by ohstopitu »

This is great news.

I love app engine but one of the biggest issues I've had with it is the fact that memcached and search are not available for anything but app engine standard - python (2.7).

Providing access to both via app engine flexible would be god sent!

Re: Managed SSL for Google App Engine

#26

Post by joshribakoff »

NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

The whole premise behind letsencrypt is the ACME protocol, so you don't have to manually renew certs [although you can]. The problem is in handling SSL renewals on a cluster, you have to do renewals via DNS & rsync certs around, and there's not many tools to do this. But for a single server, its very easy to automate. Another problem with letsencrypt is the rate limits & such.

Re: Managed SSL for Google App Engine

#28

Post by _asummers »

kuschku wrote: post #22
paulddraper wrote: post #16

Been using AWS's certificate management. It is _so_ nice not to (1) manage the certs with your own infrastructure (2) automatically deploy these things to HAProxy, Apache, MySQL, random server X. Automated load balancing + cert management is heaven.

I'm using kubernetes with kube-lego, and my experience is exactly the same. Automating all routing, API gateways, TLS termination and certificate management makes life so much easier.

My hope is that this makes kube-lego unnecessary for kubernetes! Being able to get a cluster spun up with TLS by default would be amazing.

Re: Managed SSL for Google App Engine

#29

Post by pg_is_a_butt »

hinfaits wrote: post #10
lklig wrote: post #7

Earlier quoted context omitted.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

I also could not get it to work on two separate domains. Everything seems fine, and I was able to renew the certs with LE just now. I believe all my DNS records look fine, and I have the domain ownership set correctly with GAE. Not sure what else I can change to get it working.

same here... the UI doesn't work. i fell back on LE and generated new certs... hopefully google can work this out in 3 months.
Post reply on HN