Managed SSL for Google App Engine • Hacker News Board

Re: Managed SSL for Google App Engine

#31

Post by sofaofthedamned » Thu, Sep 14, 2017, 8:05 PM UTC

joshribakoff wrote: post #27

I feel like Google isn't exactly the best place to get your SSL, given their track record with the NSA.

Really?

Re: Managed SSL for Google App Engine

#32

Post by iancarroll » Thu, Sep 14, 2017, 8:10 PM UTC

joshribakoff wrote: post #27

I feel like Google isn't exactly the best place to get your SSL, given their track record with the NSA.

If you are using App Engine, Google is terminating the TLS connection regardless...

Re: Managed SSL for Google App Engine

#33

Post by partiallypro » Thu, Sep 14, 2017, 8:30 PM UTC

syntaxgoonoo wrote: post #30

When will Azure do the same?

They do offer it for webapps using Lets Encrypt, but nothing else afaik. But I look forward to it being added, it is definitely needed. Even setting up the Let's Encrypt to auto renew is a very tedious process.

Re: Managed SSL for Google App Engine

#34

Post by daave » Thu, Sep 14, 2017, 9:06 PM UTC

NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

Agreed this is super-exciting.

Hope they add the same functionality for Google Cloud HTTPS Load Balancers soon as well.

Re: Managed SSL for Google App Engine

#35

Post by mchristen » Thu, Sep 14, 2017, 9:23 PM UTC

NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

AWS has been offering free SSL certs for a year now, happy to see Google following their lead.

Re: Managed SSL for Google App Engine

#36

Post by [deleted] » Thu, Sep 14, 2017, 9:38 PM UTC

mchristen wrote: post #35

NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

AWS has been offering free SSL certs for a year now, happy to see Google following their lead.

[deleted]

Re: Managed SSL for Google App Engine

#37

Post by bckygldstn » Thu, Sep 14, 2017, 9:51 PM UTC

joshribakoff wrote: post #26

NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

The whole premise behind letsencrypt is the ACME protocol, so you don't have to manually renew certs [although you can]. The problem is in handling SSL renewals on a cluster, you have to do renewals via DNS & rsync certs around, and there's not many tools to do this. But for a single server, its very easy to automate. Another problem with letsencrypt is the rate limits & such.

Google App Engine only a few weeks ago released an API for managing certificates. Before that, the only way to add or update a certificate was to manually paste the key into a web form.

Re: Managed SSL for Google App Engine

#38

Post by darshan » Thu, Sep 14, 2017, 10:11 PM UTC

OzzyB wrote: post #13

This is a welcomed addition that many have been patiently waiting for. If you want to see the progress here's the relevant ticket[0] -- nice to see it finally closed! Not privy to the final implementation details but my guess it's a based on Let's Encrypt as suggested by the originator of the ticket and others. Edit: Yeah, probably not Let's Encrypt as others have stated. [0] https://issuetracker.google.com/issues/35…

I turned this on today via gcloud, and the certificate I was issued is from Let's Encrypt.

Re: Managed SSL for Google App Engine

#39

Post by bmizerany » Thu, Sep 14, 2017, 10:33 PM UTC

partiallypro wrote: post #33

syntaxgoonoo wrote: post #30

When will Azure do the same?

They do offer it for webapps using Lets Encrypt, but nothing else afaik. But I look forward to it being added, it is definitely needed. Even setting up the Let's Encrypt to auto renew is a very tedious process.

Hello from Backplane. You can get this on Azure today using https://www.backplane.io with end-to-end encryption to your backends plus a huge chest of other routing and security features. It's free to start. I'm blake at backplane dot io

Re: Managed SSL for Google App Engine

#40

Post by lklig » Thu, Sep 14, 2017, 10:53 PM UTC

AnssiH wrote: post #20

mbwalas wrote: post #12

Earlier quoted context omitted.

Can you try using gcloud? There may be a UI problem.

Thanks, it worked fine with the gcloud command.

We've found the glitch in the UI and the issue will be resolved shortly. Thanks for all the support and quick testing after announcing this beta release.