Google App Engine SSL Auto-Renewal

[James Terry]

Hi all,

I'm am trying to set up SSL Renewal on my domain name in Google App Engine. In Settings > Custom Domains, I select my domain and then click on Enable Managed Security. It prompts me with the following: 

domain.com is currently using certificate '$(certificateName)'. This certificate will continue to be used until the Google-managed certificate is activated. Are you sure you want to proceed?

I click ok and then get prompted with "Failed to activate certificate". Naturally, I tried to remove the previous SSL certificate but even after selecting it under the SSL certificates tab, the delete button is greyed out. When I hover over it, it says that, "To delete a certificate, it must not be in use by any domain across any project". I'm guessing that this means I have to stop the domain before I uninstall the certificate. I then disabled the domain and tried again and still, I got the same message. I've tried searching how to remove a certificate from being used but I get no good results.

Not stopping there, I tried working with the cloud console. According to https://cloud.google.com/appengine/docs/standard/python/securing-custom-domains-with-ssl, I tried the following command, 

gcloud app domain-mappings update DOMAIN --certificate-management='AUTOMATIC'

This instead gave me an error saying the operation failed. This is the error.

ERROR: (gcloud.app.domain-mappings.update) Error Response: [7] Caller is not authorized to administer the domain 'www.domain.com'. If you own 'www.domain.com', you can ob

tain authorization by verifying ownership of the domain, or any of its parent domains, via the Webmaster Central portal: https://www.google.com/webmasters/verification/verification?d

omain=www.domain.com. We reccomend verifying ownership of the largest scope you wish to use with subdomains (eg. verify 'example.com' if you wish to map 'subdomain.example.com'

).

Then, I click on the link provided which sent me to a page explaining domain verification. At the top of the page however, it says I'm already the verified owner of my domain. Now I'm confused as there doesn't seem to be any other logical progression to solving this problem. Could anyone help me out with this?

[diogoa...@google.com]

Hello James.

Note that the Google Groups thread is not the best channel to post this type of issues [1]. For technical questions you can use StackOverflow. However, it looks like to resolve this issue you will need to file a case with the GCP support team [2] (Free trial [3]).

[1] https://cloud.google.com/support/docs/community

[2] https://cloud.google.com/support/

[3] https://support.google.com/cloud/contact/free_trial_support