Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Managed SSL for Google App Engine

cloudplatform.googleblog.com

Post reply on HN
Print view View original

41–50 of 54 posts

Re: Managed SSL for Google App Engine

#41

Post by andy_ppp »

joshribakoff wrote: post #26
NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

The whole premise behind letsencrypt is the ACME protocol, so you don't have to manually renew certs [although you can]. The problem is in handling SSL renewals on a cluster, you have to do renewals via DNS & rsync certs around, and there's not many tools to do this. But for a single server, its very easy to automate. Another problem with letsencrypt is the rate limits & such.

If using docker you can mount a volume to your let’s encrypt certs on all your frontend servers.

Re: Managed SSL for Google App Engine

#42

Post by thedevil »

lklig wrote: post #7
thedevil wrote: post #3

Earlier quoted context omitted.

Me too. If anyone figures this out, I'd love to hear more.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

I was able to get this to work in the command line (after gcloud components update). This is an exciting feature!

Thanks for the support! And thanks for all the good work on AppEngine!

And thanks to other commenters too!

Re: Managed SSL for Google App Engine

#43

Post by cloudwizard »

lklig wrote: post #7
thedevil wrote: post #3

Earlier quoted context omitted.

Me too. If anyone figures this out, I'd love to hear more.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

Any chance that you will support wildcard domain names?

Re: Managed SSL for Google App Engine

#44

Post by benguild »

ohstopitu wrote: post #25

This is great news. I love app engine but one of the biggest issues I've had with it is the fact that memcached and search are not available for anything but app engine standard - python (2.7). Providing access to both via app engine flexible would be god sent!

We use memcache but it’s really unreliable. I recommend rolling your own anyway.

Also I think there is an alpha for flex?

Re: Managed SSL for Google App Engine

#45

Post by hw »

NearAP wrote: post #24

This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites. I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them). Finally, I also see it as another way of pushing for the uptake of SSL…

> Finally, I also see it as another way of pushing for the uptake of SSL. With GAE doing this, other hosting services might also start offering something similar or close to it which would then beg the question - why is your site not using SSL.

Good question. Everybody should be on SSL. It isn't just hosting services that should offer something similar, but SaaSes too that provide SSL on custom domains for their customers. They usually don't get around to securing those custom domains due to the pain and inconvenience and maintenance.

There are platforms out there like Clearalias and Cloudfront that help with making that a breeze though, so I don't see why it would be an issue going forward.

Hopefully with Google and browsers punishing non-SSL sites more, there'll be more sites behind an SSL cert.

Re: Managed SSL for Google App Engine

#46

Post by nyrikki »

OzzyB wrote: post #13

This is a welcomed addition that many have been patiently waiting for. If you want to see the progress here's the relevant ticket[0] -- nice to see it finally closed! Not privy to the final implementation details but my guess it's a based on Let's Encrypt as suggested by the originator of the ticket and others. Edit: Yeah, probably not Let's Encrypt as others have stated. [0] https://issuetracker.google.com/issues/35…

It is Let's Encrypt, I just converted my test project so that I could kill the Jenkins job to update the Cert.

  Issued By
    Common Name (CN)	Let's Encrypt Authority X3

Re: Managed SSL for Google App Engine

#50

Post by lklig »

lklig wrote: post #40
AnssiH wrote: post #20

Earlier quoted context omitted.

Thanks, it worked fine with the gcloud command.

We've found the glitch in the UI and the issue will be resolved shortly. Thanks for all the support and quick testing after announcing this beta release.

Happy to report everything is working as expected, go get those managed certs!
Post reply on HN