App Engine Python SSL version 2.7 shut down

228 views
Skip to first unread message

Ridha El Bekri

unread,
Dec 12, 2017, 5:01:19 AM12/12/17
to Google App Engine
Hi everyone,

I recentrly received a notification email from google about multiple live project I have running on GAE saying the following:

Dear App Engine Developer,

This is a reminder that App Engine Python SSL version 2.7 will be shut down on March 1, 2018. After this date, application deployments using SSL version 2.7 will be automatically updated to use SSL library version 2.7.11, even if their app.yaml file specifies the 2.7 version.

Your projects listed below are using an outdated version 2.7 of the SSL library on App Engine. Please update to the latest Cloud SDK version, then update these projects to SSL library version 2.7.11 before March 1, 2018 to avoid any potential security risks. We recommend that you also update your projects to require SSL certificate validation. This will enable your projects to take full advantage of the security benefits provided by the updated SSL library:


 This notification says that apps will automatically update and at the same time it asks me to update my projects. Knowing that on my yaml files I dont specify the version 2.7 of SSL but I specify : version: latest. Does updating the Cloud SDK version is mandatory for this ? Should I deploy again all my services after updating the Google Cloud SDK ?

Thank you in advance for your answers.

Jordan (Cloud Platform Support)

unread,
Dec 12, 2017, 2:51:17 PM12/12/17
to google-a...@googlegroups.com
It is always better to perform updates yourself in order to have full control over migrating to the new updated service, which also allows for monitoring for potential issues. 

If you let it auto-update, it may result in un-foreseen issues with your code dependencies that could cause downtime for your application. Therefore we recommend and provide the option to upgrade yourself as to give you full control over your application.  

PK

unread,
Dec 12, 2017, 2:59:44 PM12/12/17
to Google App Engine
@Ridha, I have the same issue, I do not know why they send me this message. I find also annoying that they state that we need to update to the "latest cloud SDK version" instead of telling us the version of the SDK after which we should be OK with this change. So now support brushed me off saying that I probably do not have the latest SDK, well they change it almost every week, I will never have the "latest SDK".

PK

Jordan (Cloud Platform Support)

unread,
Dec 13, 2017, 2:15:31 PM12/13/17
to Google App Engine
According to the Python release notes it looks as though this was implemented on November 15th for the Python SDK. Likewise, on November 15h this was updated in GCloud as per the release notes. Therefore "latest SDK" means anything on or after November 15th (but it is a good practice to always choose the absolute latest).

More details about the shutdown can be seen in the documentations. All further questions concerning this specific shut down should be directed at support via their Inquiry Form.   

Ridha El Bekri

unread,
Dec 15, 2017, 6:03:26 AM12/15/17
to Google App Engine
Thank you Jordan, the documentations link is cristal clear !
Reply all
Reply to author
Forward
0 new messages