Live data from Hacker News

Managed SSL for Google App Engine

cloudplatform.googleblog.com

51–54 of 54 posts

Re: Managed SSL for Google App Engine

#51
post #7

Earlier quoted context omitted.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

I also could not get it to work on two separate domains. Everything seems fine, and I was able to renew the certs with LE just now. I believe all my DNS records look fine, and I have the domain ownership set correctly with GAE. Not sure what else I can change to get it working.

Seems to be working fine now.

Re: Managed SSL for Google App Engine

#52
post #19
post #13

This is a welcomed addition that many have been patiently waiting for. If you want to see the progress here's the relevant ticket[0] -- nice to see it finally closed! Not privy to the final implementation details but my guess it's a based on Let's Encrypt as suggested by the originator of the ticket and others. Edit: Yeah, probably not Let's Encrypt as others have stated. [0] https://issuetracker.google.com/issues/35…

I guess it's based on Google's own Certificate Authority, instead of Let's Encrypt, according to this: https://security.googleblog.com/2017/01/the-foundation-of-mo...

For the record, I guessed wrong. I enabled the feature and checked the certificate: it's based on Let's Encrypt ;-)

Re: Managed SSL for Google App Engine

#53

I feel like Google isn't exactly the best place to get your SSL, given their track record with the NSA.

If you are using App Engine, Google is terminating the TLS connection regardless...

Right... Which is all the more reason not to let them issue your SSL cert, or terminate your SSL for that matter.

Re: Managed SSL for Google App Engine

#54

Earlier quoted context omitted.

If you are using App Engine, Google is terminating the TLS connection regardless...

Right... Which is all the more reason not to let them issue your SSL cert, or terminate your SSL for that matter.

Your issue is then with using App Engine, not with them giving you a certificate. There is no way to use App Engine without them getting the plaintext in the end.
Post reply on HN