Apparently your client uses Windows and IE, AFAICS there is no such
issue with other platforms and other browsers.

Perhaps you already thought of, but there is no solution to this
problem, because SSL was designed to exactly do not allow tweaks by
evil adversaries to get rid of the browser warning.
Having said that, this actually is a lie.  There are some tweaks, but
they involve help of a 3rd party tool.  You cannot fix this on the
direct path from your client to GAE.  If you could, this would render
SSL worthless.

The only tweak I know of is using reverse proxy methods.  So your
client afterwards accesses
URL https://some-version.lastest.example.com/...
instead of
URL https://some-version.latest.APPID.appspot.com/...

To implement this type of reverse proying you need following:

- Some hosting besides Google - it only is needed to serve old
application versions.
- Apache or NGINX as reverse proxy (perhaps squid is usable, too)
- A wildcard SSL cert for *.latest.example.com
- A dedicated IP on which this SSL cert is installed
- The reverse proxy setup to forward https requests to https of
appspot.com
- Perhaps some minor changes to the application in case some minor
things (Cookies, direct paths etc.) are broken due to the reverse
proxy.

If you do not want to use a self-signed cert, please be informed that
"unlimited 2 years wild cards certificates" do not need to cost more
than 50$.
You only need to find out where to get it this cheap.  Hint: Try
Google for the exact phrase, and remember it need not be the first
hit. ;)
(Have you order this by some good sysadmin, as they know what to do.
Perhaps this source is nothing for sales-type-people or experienced-
programmer-only folks.)

However it does not work out of the box.  You still need your own
hosting, and if this comes down no service to your customer (except
auf the main appID).

-Tino

On 1 Jun., 21:12, Houston startup coder <[email protected]> wrote:
[..]
> different-version.latest.my-app.appspot.com
>
> Google's certificate is for *.appspot.com so even though we install
> that certificate, it doesn't match
>
> *.latest.*.appspot.com
>
> and the user is being prompted every time the program tries to access

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to