Configure Google App Engine SSL for custom domains

1
votes

The problem:

I have configured GAE with a custom domain with SSL and it does not work for the root domain: https://example.com

I get the following error:

Failed to load resource: net::ERR_SSL_PROTOCOL_ERROR

These work fine:

  • www.example.com (over https) and
  • example.com (over http)

In Google Apps admin -> Security -> SSL for Custom Domains:

I have uploaded an SSL certificate which should work for both cases:

Subject Alternative Names
DNS Name:www.example.com
DNS Name:example.com

The Serving mode is SNI Only. Assigned URL is https://www.example.com and there are no other matching URLs - I believe this is the problem and as far as I understood the docs I should to Google Developers Console to add more URLs.

In Google Developers Console -> Compute -> App Engine -> Settings -> Custom Domains: In step 1 I have verified my domain. In Step 2 I have added a few subdomains like www.example.com and the root domain example.com.

Since all these URLs are reachable over http I guess this particular configuration is fine - I just can't find a way to get these to show as matching URLs in the SSL configuration ! Any ideas what might be wrong here ?

My thanks for the help !

1
google-app-enginessldns
This question appears to be off-topic because it is not about programming. See What topics can I ask about here in the Help Center. Perhaps Web Apps Stack Exchange would be a better place to ask. – jww

1 Answers

0
votes

Unfortunately, SSL for the "naked" domain (example.com) is not yet supported by Google Apps. You can configure Google Apps to redirect from the naked domain to a subdomain (www.example.com), but as you noticed, it won't do it over SSL, even if the naked domain is mentioned in the certificate. It'll only use the certificate for traffic for the subdomains that are assigned applications (the "matching URLs").

I agree it's a gap in the feature. As a partial solution, if you redirect http://example.com to http://www.example.com, you can then redirect again to https://www.example.com with the App Engine configuration (secure: always).