SSL for app engine custom domain
221 views
Skip to first unread message
Richard Cheesmar
Aug 14, 2015, 11:41:48 AM8/14/15
to Google App Engine
Hi,
Is it going to be possible anytime soon to setup SSL for a custom domain without a Google App account directly from the Google cloud developers console? Signing up for yet another Google account is bordering on making me insane.
I have setup a custom domain via the Google cloud developers console for my app project, and this is serving as a naked url...no problem.
Then I tried to setup a Google App account with an existing account linked to my Google App Engine project as an owner, but it didn't like it. So I setup a new one (deleted now) and re-verified the custom domain, which then stopped the serving of the custom domain. I then deleted the Google App account and it started serving the custom domain again. I have no idea why, what or how...
I have purchased an SSL certificate from Comodo, not yet activated, and all I want to do is set it up without giving myself an emotional hernia, I get enough of those from coding! And, yes, read the docs, but you know, they suck! A step by step idiots example would be great!
In fact back to the question at the beginning, is it going to be possible to setup SSL for a custom domain from the Google cloud developers console?
Thanks one and all
Is it going to be possible anytime soon to setup SSL for a custom domain without a Google App account directly from the Google cloud developers console? Signing up for yet another Google account is bordering on making me insane.
I have setup a custom domain via the Google cloud developers console for my app project, and this is serving as a naked url...no problem.
Then I tried to setup a Google App account with an existing account linked to my Google App Engine project as an owner, but it didn't like it. So I setup a new one (deleted now) and re-verified the custom domain, which then stopped the serving of the custom domain. I then deleted the Google App account and it started serving the custom domain again. I have no idea why, what or how...
I have purchased an SSL certificate from Comodo, not yet activated, and all I want to do is set it up without giving myself an emotional hernia, I get enough of those from coding! And, yes, read the docs, but you know, they suck! A step by step idiots example would be great!
In fact back to the question at the beginning, is it going to be possible to setup SSL for a custom domain from the Google cloud developers console?
Thanks one and all
Nick (Cloud Platform Support)
Aug 14, 2015, 4:11:34 PM8/14/15
to Google App Engine
Hi Richard,
If you calmly follow each step outlined in the docs and don't skip any steps or go most of the way and change something (attach the app to a different Apps account), there should be no issues. If you'd like specific 1-on-1 support for setting up the Custom Domain mapping, you should post to stackoverflow and get support in that forum which is meant for that, while this forum is more meant for general discussion, which brings me to your second point: will SSL be supported in the Developers Console?
Yes, this is confirmed and is even mentioned in the docs you would have read in order to set up a Custom Domain with SSL. The main Custom Domains SSL doc, which you should read from the top, paying attention to all details, can be found here. The feature, as the first link mentions, should be rolled out by the end of the month.
Let me know if you have any further questions before proceeding to open a stackoverflow question regarding your specific stage of the documented steps. When you do so, feel free to post it here and I'll be happy to troubleshoot in that forum :)
Best wishes,
Nick
If you calmly follow each step outlined in the docs and don't skip any steps or go most of the way and change something (attach the app to a different Apps account), there should be no issues. If you'd like specific 1-on-1 support for setting up the Custom Domain mapping, you should post to stackoverflow and get support in that forum which is meant for that, while this forum is more meant for general discussion, which brings me to your second point: will SSL be supported in the Developers Console?
Yes, this is confirmed and is even mentioned in the docs you would have read in order to set up a Custom Domain with SSL. The main Custom Domains SSL doc, which you should read from the top, paying attention to all details, can be found here. The feature, as the first link mentions, should be rolled out by the end of the month.
Let me know if you have any further questions before proceeding to open a stackoverflow question regarding your specific stage of the documented steps. When you do so, feel free to post it here and I'll be happy to troubleshoot in that forum :)
Best wishes,
Nick
Nick (Cloud Platform Support)
Aug 14, 2015, 4:15:26 PM8/14/15
to Google App Engine
As a quick follow-up, please feel free to reply with any questions you have in the meantime, however, and I'll be happy to answer them. Upon a second reading, I hope that reference to "calmly" following the steps won't come across in a negative way. I simply meant it in the most literal fashion, that this is a good way to ensure the following of a doc goes well, and I know from personal experience that right now the Custom Domain SSL set-up is somewhat of a convoluted task, taking you through several docs page and requiring very focused, calm reading. As part of the new development, this process will of course be much smoother and more pleasant. Thank you for your feedback!
On Friday, August 14, 2015 at 11:41:48 AM UTC-4, Richard Cheesmar wrote:
Kaan Soral
Aug 14, 2015, 5:08:36 PM8/14/15
to Google App Engine
As a friendly suggestion, just set up Cloudflare until App Engine becomes smart enough for one-click automated SSL integrations :)
There are a lot that could go wrong with SSL integrations, however Cloudflare handles it well (If you don't mind the data going through Cloudflare in an un-encrypted form, but it's a necessary evil in my opinion, at least initially)
I find it interesting that after all these years, Google/App Engine still doesn't provide some basic features and force people to use Cloudflare (Cloudflare is great by the way, it solves a lot of small problems, not just SSL, for example it handles basic redirects well, like redirecting naked domain to the www domain etc. - all possible because they re-route everything)
Kaan Soral
Aug 14, 2015, 5:11:59 PM8/14/15
to Google App Engine
As another +1 for Cloudflare, I've previously used them to cache ~1TB traffic daily, with my $20/mo account, they saved me ~$100 daily in that period
My suggestion is, just use Cloudflare for user-facing URL's and https/appspot for internal calls (maybe calls from the mobile apps etc.)
Richard Cheesmar
Aug 15, 2015, 1:52:32 AM8/15/15
to Google App Engine
Hi, all, and thanks for replying
Nick, I appreciate the followup. After thirty years of development, I can honestly say two things. First that the process of developing for the web is for anything of scale way too complicated and needs simplifying by the big guns such as Google. Secondly, I am used to but tired of bad processes and have read the docs, in fact I have read hundreds of pages of Google docs in my time, some of which are better than others. In this particular case I did read a lot of docs and I'm a reasonably intelligent idiot. However, it's not just the docs, it's the over complicated and as you said convoluted process. It almost as though it's one of those infamous Google tests to see if you're good enough to get a job there. Obviously I'm not :) As for being calm, I am as calm as can be expected after a regular 12+ hours a day of developing... etc. etc.
Anyway, I am looking at what Cloudflare has to offer, but I can wait until the end of the month as my site is on beta at the moment. If indeed, Google can simplify the whole process considerably and be competitive in terms of monthly fees for SSL then I prefer to go with a single supplier. Would I be correct in the assumption that this new process avoids having to acquire a Google Apps account?
Kaan, thanks for the feedback, and yes, Cloudflare seems to be very economical in comparison. I am surely looking into it.
Nick, I appreciate the followup. After thirty years of development, I can honestly say two things. First that the process of developing for the web is for anything of scale way too complicated and needs simplifying by the big guns such as Google. Secondly, I am used to but tired of bad processes and have read the docs, in fact I have read hundreds of pages of Google docs in my time, some of which are better than others. In this particular case I did read a lot of docs and I'm a reasonably intelligent idiot. However, it's not just the docs, it's the over complicated and as you said convoluted process. It almost as though it's one of those infamous Google tests to see if you're good enough to get a job there. Obviously I'm not :) As for being calm, I am as calm as can be expected after a regular 12+ hours a day of developing... etc. etc.
Anyway, I am looking at what Cloudflare has to offer, but I can wait until the end of the month as my site is on beta at the moment. If indeed, Google can simplify the whole process considerably and be competitive in terms of monthly fees for SSL then I prefer to go with a single supplier. Would I be correct in the assumption that this new process avoids having to acquire a Google Apps account?
Kaan, thanks for the feedback, and yes, Cloudflare seems to be very economical in comparison. I am surely looking into it.
Nick (Cloud Platform Support)
Aug 17, 2015, 6:30:00 PM8/17/15
to Google App Engine
Hey Richard,
Thanks for your response. It's comments and feedback like yours which resulted in the current effort to improve/simplify the Custom Domains SSL process. I'm glad you seem to have taken my post in good humour, and I enjoyed your commentary. As to Cloudflare, it's a great service which can of course be used as part of a website development stack. Finally, you're correct that the need to set up a Google Apps account or integrate with Apps in any way is not part of the imminently-to-be-released Custom Domains SSL process, which will take place entirely in the Developers Console.
Regards,
Nick
Thanks for your response. It's comments and feedback like yours which resulted in the current effort to improve/simplify the Custom Domains SSL process. I'm glad you seem to have taken my post in good humour, and I enjoyed your commentary. As to Cloudflare, it's a great service which can of course be used as part of a website development stack. Finally, you're correct that the need to set up a Google Apps account or integrate with Apps in any way is not part of the imminently-to-be-released Custom Domains SSL process, which will take place entirely in the Developers Console.
Regards,
Nick
Richard Cheesmar
Aug 18, 2015, 2:52:11 AM8/18/15
to Google App Engine
Nick,
Now, that is good news, therefore, I think I shall hold off on decisions until I see the Custom Domains SSL process.
Looking forward to it.
Oh, there is something else to, is it possible to disable the .appspot domain and just serve the custom domain, or do I have to implement my own redirect in the code?
Regards
Now, that is good news, therefore, I think I shall hold off on decisions until I see the Custom Domains SSL process.
Looking forward to it.
Oh, there is something else to, is it possible to disable the .appspot domain and just serve the custom domain, or do I have to implement my own redirect in the code?
Regards
On Friday, August 14, 2015 at 6:41:48 PM UTC+3, Richard Cheesmar wrote:
Nick (Cloud Platform Support)
Aug 19, 2015, 7:38:29 PM8/19/15
to Google App Engine
Hey Richard,
Feel free to come back here or open a new thread to discuss any impressions of the feature once it's released. As to your question with regard to the appspot domain, you're correct that you'll need a tiny handler to throw redirects. You can use a dispatch file (java version, but docs for other langs exist) to catch requests to the appspot domain and send them to an auto-scaled module with minimal resources which simply throws the redirect responses.
Sincerely,
Nick
Feel free to come back here or open a new thread to discuss any impressions of the feature once it's released. As to your question with regard to the appspot domain, you're correct that you'll need a tiny handler to throw redirects. You can use a dispatch file (java version, but docs for other langs exist) to catch requests to the appspot domain and send them to an auto-scaled module with minimal resources which simply throws the redirect responses.
Sincerely,
Nick
PK
Aug 19, 2015, 7:50:23 PM8/19/15
to Google App Engine
Hi Nick,
this is great news.
Having been a GAE developer since its inception let me say this: we have been waiting for this and other SSL improvements for ever. Along the way, we and have heard various estimates that have always proven longer than thought. Now you launched a new term "imminently-to-be-released”. I have started counting to see how many days/weeks/months/years this will be :-)
PK
--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/d6e68ca3-038c-40c7-bd37-3e31659a9127%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Richard Cheesmar
Sep 8, 2015, 1:48:34 AM9/8/15
to google-a...@googlegroups.com
Nick, it's starting to sound like PK was correct. Where is the SSL?
--
You received this message because you are subscribed to a topic in the Google Groups "Google App Engine" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-appengine/M7aIs612Ug4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/0C5F51BE-4F0C-4347-B5CC-8432BA8C1614%40gae123.com.
Lorne Kligerman
Sep 9, 2015, 12:07:23 PM9/9/15
to Google App Engine
I'm happy to report that the custom domain and SSL configuration within the developer console will be released in the next two weeks.
Stay tuned for the more details.
Cheers,
Lorne.
Hi Nick,
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsub...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/d6e68ca3-038c-40c7-bd37-3e31659a9127%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
pdknsk
Sep 9, 2015, 1:25:52 PM9/9/15
to Google App Engine
\o/
Reply all
Reply to author
Forward
0 new messages