I'm using app engine standard with python I added custom domain in app engine api.octabyte.io and a wildcard *.api.octabyte.io
I have two services default and quran I'm able to access both services like this.
default -> api.octabyte.io
quran -> quran.api.octabyte.io/v1/docs
SSL work fine for default service https://api.octabyte.io but not with quran service https://quran.api.octabyte.io
Can you please let me know how can I enable SSL for other services.
You can access quran service with SSL when you use default url of app engine
https://quran-dot-islam786.appspot.com/v1/docs
Here is screenshot of custom domains in app engine
Google-managed SSL certificates don't support wildcard mappings: Upgrading to managed SSL certificates
Related
I have been hosting by web app on GCP App Engine using their's managed certificate feature for SSL. Now I would like to migrate to a different provider, but I don't want my users to be warned by browser that the certificate has changed. Is there a way to extract a managed certificate and use it somewhere else?
Is my app secure with Google App Engine without my own SSL Certificate?
I ask because I've just gone through the process of using Letsencrypt to create an SSL cert and apply it to my App Engine project with a custom domain - myapp.com
Now, I also a development environment which is at myapp.appspot.com. While configuring the app.yaml files with secure: always, I accidentally deployed the dev app before creating the certificates and I noticed it was secured!
I thought this could be an appspot.com thing, so I removed the certificates from my live app and it is still showing as secured...
So the question is, does App Engine have some sort of built-in SSL and thus, do I need to bother with my own certs???
Yes, your app at appspot.com is secure. However, if you wish to use a custom domain then you must get an SSL certificate. Here you can find instructions on how to use a custom SSL certificate for a custom domain with appengine.
I'm maintaining a app that is hosted in GAE (appengine),
The app is set up to work with custom domain builder.go-arc.com
(I didn't do the set up - it was done before I got the project).
but when I go to my app in https://appengine.google.com/settings or in https://console.developers.google.com/project/go-arc-builder/appengine/settings/domains/add?authuser=1
I don't see the domain listed under Domain Setup and
Custom domains
My question is: how/where do I configure my domain?
The reason I need this is to configure SSL for the domain.
Unfortunately, custom domains and SSL are set up in different places (for now).
Custom domains ARE configured int the Developer console in the appengine/settings/domains section.
In order to set SSL you need to link you GAE application to a Google Apps Domain and then add the SSL in the Security > SSL for custom domains
Check: https://cloud.google.com/appengine/docs/ssl
I have an app engine app and I enabled SSL for it (without an own certificate) and it works for the appspot-url like https://myApp.appspot.com. Now I want to use my custom domain like myDomain.com with SSL (e.g. https://myDomain.com). Is this possible without an own certificate like with the appspot domain? I followed this guide (https://developers.google.com/appengine/docs/ssl?hl=de) and it talks about uploading a certificate. Is that an optional or a mandatory step?
Because if I try to access my domain, I always get an SSL error
Uploading a certificate is mandatory if you want to use SSL for a custom domain. You can find details on SSL handshake at [1].
[1] - http://www.pierobon.org/ssl/ch2/detail.htm
I want my app engine service to speak with a separate service that I manage. I want to be able to install my self signed certificate on both ends. Is it possible to have app engine speak to this instance over SSL?
Yes. App Engine doesn't currently verify certificates for SSL sites over urlfetch, so it will accept self-signed certificates just fine.