Not able to upload SSL certificate

126 views
Skip to first unread message

Thomas Baldauf

unread,
Mar 8, 2017, 3:01:30 AM3/8/17
to Google App Engine
Hi!

I'm desperately trying to configure my App Engine project for SSL encryption without success. When I upload my certificate and private key, I always get the following message, even though my domain ownership has been verified and the domains are listed in the "Custom domains" tab:

Please help!

Kind regards,
Thomas

George (Cloud Platform Support)

unread,
Mar 8, 2017, 9:45:44 AM3/8/17
to Google App Engine

Hello Thomas,


Have you already added and verified each and every domain, as listed in your SSL certificate? The “Adding custom domain to your application” guide  may help with details. The unverified domain(s) in step 3 may be retrieved after navigating to your console’s Custom Domain page. All of the listed domains need to have been added to your project, when you attempt enabling SSL on them. The added resource records at step 6 become effective after a while.


If following the above-mentioned guide does not help, you may consider mailing me a list of the domains to be added to your project, as well as your Project ID, in a private email.

George (Cloud Platform Support)

unread,
Mar 9, 2017, 1:07:31 PM3/9/17
to google-a...@googlegroups.com

We have managed to check further, and it seems that your certificate, the one that you keep trying to upload, is faulty somehow. It definitely pays to double-check this certificate or to have it re-issued; in any case, to get a valid one in the end. If the certificate itself is valid, your upload should work as expected.

Anastasios Hatzis

unread,
Mar 9, 2017, 5:39:52 PM3/9/17
to google-a...@googlegroups.com
Hi George,

does the solution also work for adding wildcard "2-level" sub-domain certificates, e.g. *.sub.example.com?


Mit freundlichen Grüßen / Kind regards

i. A.
Anastasios Hatzis

Fon: +49 8374 930813
Fax: +49 8374 930810
Mobil: +49 1520 8592878

On 9 March 2017 at 19:07, 'George (Cloud Platform Support)' via Google App Engine <google-a...@googlegroups.com> wrote:

Your certificate may happen to list both these formats: “only_domain_name.com” and “lower_level_name.domain_name.com”; have a look. If this is the case, one can solve the problem by separately adding each of these as custom domain names in the developer console, as if dealing with two different domain names.


This solution is described clearer in the “Issue with a new SSL Cert (You must verify ownership of this certificate's domain(s)in order to upload it)” group thread.

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/7dff08ea-4956-452a-85ab-1577d089fa73%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


HATZIS Edelstahlbearbeitung GmbH
Hojen 2
87490 Haldenwang (Allgäu)
Germany

Handelsregister Kempten (Allgäu): HRB 4204
Geschäftsführer: Paulos Hatzis, Charalampos Hatzis
Umsatzsteuer-Identifikationsnummer: DE 128791802

http://www.hatzis.de/
Message has been deleted

Thomas Baldauf

unread,
Mar 13, 2017, 6:25:59 PM3/13/17
to Google App Engine
Hi!

Finally I managed to set it up with a wildcard certificate. The problem was that I had to revalidate the ownership of my custom domains.

Thank you,
Thomas

George (Cloud Platform Support)

unread,
Mar 14, 2017, 9:45:14 AM3/14/17
to Google App Engine
Hello Thomas!
Glad to hear you solved your problem, in the end. 

For the general good of the readers, how did the solution actually work: 
1) Obtain proper certificate. 
2) Re-validate ownership of custom domains. 
3) Upload certificate. 
Is this the case? 

Thomas Baldauf

unread,
Mar 15, 2017, 11:06:10 AM3/15/17
to Google App Engine
Yes, exactly. Especially step 2 was necessary even though my domains were verified long ago. As soon as I verified them anew I was able to upload my certificate.
Reply all
Reply to author
Forward
0 new messages