Managed SSL for Google App Engine

I was in the preview/alpha/whatever group. Never could get cert creation to work through the console UI, but it worked fine when using the gcloud SDK from the command-line.

Re: Managed SSL for Google App Engine

#6

Post by StevePerkins » Thu, Sep 14, 2017, 5:15 PM UTC

le-mark wrote: post #4

Is this basically just SNI for GAE? Or did they already have that?

It's basically invisible automation for creating and renewing LetEncrypt certs on App Engine.

The traditional process for installing a custom domain SSL cert on App Engine was very clunky. Involved running OpenSSL commands, cut-n-pasting PEM data, etc. If you were using LetsEncrypt, then it was more or less impossible to automate... you had to go through a tedious manual process every 3 months (including updating your app, to respond to the LetsEncrypt verification endpoint!).

Re: Managed SSL for Google App Engine

#7

Post by lklig » Thu, Sep 14, 2017, 5:15 PM UTC

thedevil wrote: post #3

jfoster wrote: post #2

I've tried it and get "Failed to activate certificates" errors.

Me too. If anyone figures this out, I'd love to hear more.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

Re: Managed SSL for Google App Engine

#8

Post by AnssiH » Thu, Sep 14, 2017, 5:18 PM UTC

le-mark wrote: post #4

Is this basically just SNI for GAE? Or did they already have that?

They did already have that.

This is fully automatic SSL management for your own domains that point to Google App Engine, with certs managed by Google.

Previously you had to use your own certs and manually upload them through the UI (or via the beta API, which is also now in general availability).

edit: managed, not provided, the certs are actually Let's Encrypt

Re: Managed SSL for Google App Engine

#9

Post by thedevil » Thu, Sep 14, 2017, 5:19 PM UTC

lklig wrote: post #7

thedevil wrote: post #3

Earlier quoted context omitted.

Me too. If anyone figures this out, I'd love to hear more.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

Thanks for the quick response! I'll double check them later today.

Re: Managed SSL for Google App Engine

#10

Post by hinfaits » Thu, Sep 14, 2017, 5:21 PM UTC

lklig wrote: post #7

thedevil wrote: post #3

Earlier quoted context omitted.

Me too. If anyone figures this out, I'd love to hear more.

Hello from the App Engine team. Could you double check that your DNS records are accurate? Everything is looking good on our end. Thanks for the feedback!

I also could not get it to work on two separate domains. Everything seems fine, and I was able to renew the certs with LE just now.

I believe all my DNS records look fine, and I have the domain ownership set correctly with GAE. Not sure what else I can change to get it working.