SSL certificate issue for appspot domain

420 views
Skip to first unread message

willi

unread,
Apr 4, 2012, 10:43:36 PM4/4/12
to Google App Engine
There's an issue regarding the SSL certificate and appspot domain for
version of an app, like https://version1.app-id.appspot.com. Seems
like Google updated the certificate, but not working for the sub
domain like version1.app-id.appspot.com.

This issue just started today. It worked perfectly a few hours ago.

Barry Hunter

unread,
Apr 6, 2012, 5:18:13 PM4/6/12
to google-a...@googlegroups.com
Are you sure it worked?

I think this has long been an issue.

See
http://stackoverflow.com/questions/2115611/wildcard-ssl-on-sub-subdomain
http://stackoverflow.com/questions/3088022/is-it-possible-to-have-a-valid-sub-subdomain-with-a-wildcard-certificate

The certificate is issed for *.appspot.com not *.*.appspot.com

In fact searching a bit further, Google provide a workaround:
http://groups.google.com/group/google-appengine/browse_thread/thread/87b39f366191d743/ecea690ff0573fe5?lnk=gst&q=ssl+version+#ecea690ff0573fe5

> --
> You received this message because you are subscribed to the Google Groups "Google App Engine" group.
> To post to this group, send email to google-a...@googlegroups.com.
> To unsubscribe from this group, send email to google-appengi...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
>

Nathaniel Stensland

unread,
Apr 6, 2012, 7:19:08 PM4/6/12
to google-a...@googlegroups.com
Just stopped working for me too. Worked fine before. Yikes!

in...@cupple.mobi

unread,
Apr 7, 2012, 7:27:05 AM4/7/12
to google-a...@googlegroups.com
This has only just presented itself an issue for our application, which has been running for 6 months using version.app-id.appspot.com. It stopped working around 6 hours ago. Our application is accessed via mobile and the URL is hardwired in the iPhone client, meaning that unless we can find a workaround, all of our users have just been locked out of our application until we can get a new version approved by Apple using the -dot- syntax. This will take more than a week, and so the situation is very grim indeed.

Workarounds anyone?

Thanks.

in...@cupple.mobi

unread,
Apr 7, 2012, 7:49:15 AM4/7/12
to google-a...@googlegroups.com
This is not a long standing issue. Our application was working fine until around 8-12 hours ago, and now all of our users are frozen out of our application as the version.app-id.appspot.com syntax is hard-wired into our iPhone client. We're looking at around 2 weeks to roll a fix due to Apple's lengthy submission process.



On Thursday, 5 April 2012 03:43:36 UTC+1, willi wrote:

willi

unread,
Apr 7, 2012, 11:15:46 AM4/7/12
to Google App Engine

I've used it like that for several months now.
I'll try the workaround. Thanks.

On Apr 6, 11:18 pm, Barry Hunter <barrybhun...@gmail.com> wrote:
> Are you sure it worked?
>
> I think this has long been an issue.
>
> Seehttp://stackoverflow.com/questions/2115611/wildcard-ssl-on-sub-subdomainhttp://stackoverflow.com/questions/3088022/is-it-possible-to-have-a-v...
>
> The certificate is issed for *.appspot.com not *.*.appspot.com
>
> In fact searching a bit further, Google provide a workaround:http://groups.google.com/group/google-appengine/browse_thread/thread/...
>
>
>
>
>
>
>
> On Thu, Apr 5, 2012 at 3:43 AM, willi <robocata...@gmail.com> wrote:
> > There's an issue regarding the SSL certificate and appspot domain for
> > version of an app, likehttps://version1.app-id.appspot.com. Seems

Rick Mangi

unread,
Apr 7, 2012, 9:19:31 PM4/7/12
to google-a...@googlegroups.com
Ditto for us. This has worked for months and now it's not working. Opened an issue with google enterprise support but no response so far.

This is beyond incredible.

Nathaniel Stensland

unread,
Apr 9, 2012, 7:59:17 PM4/9/12
to google-a...@googlegroups.com
You could use cloudflare (it costs $20 a month) to fix the issue (temporarily anyways). The SSL would be from iPhone to cloud and then no SSL from cloud to your app but at least it would work...

Jeff Schnitzer

unread,
Apr 9, 2012, 8:00:53 PM4/9/12
to google-a...@googlegroups.com
Ouch. I sincerely hope someone at Google can solve it for you, but
that shouldn't change your course of action:

You can ask Apple for an emergency update. They don't like doing this
but it can be done. You might be able to get the new version out in
24 hours.

Get a new version into the hands of your customers ASAP, and recognize
that you should NEVER, EVER push out hard-to-update client software
pointing at a DNS name that you do not control. I sympathize with
your plight, but this was an *incredibly* poor decision.

Jeff

> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.

> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/ypMEF5DXk6IJ.

Reply all
Reply to author
Forward
0 new messages