Yes, I've definitely setup the CNAME correctly and waited for that to propagate. GoDaddy's site looks fine on my android browser so I think their cert should generally speaking work.
I believe the issue I have is hooking up the GoDaddy issued cert and intermediate bundle. I assume I must not be formatting this correctly or something. The weird thing is that the site works fine on desktop, but from the article I linked earlier it sounds like there are some sort of mobile specific issues that the intermediate crt bundle can solve when you copy and paste them together. Anyone know the steps to correctly plug these together? Thanks, Phil On Sun, Apr 28, 2013 at 1:26 PM, Barry Hunter <[email protected]>wrote: > According to this > > http://support.godaddy.com/help/article/1139/which-browsers-and-devices-are-your-ssl-certificates-compatible-with > GoDaddy's Root Authority should be installed on Android. > > Can you visit? > https://www.godaddy.com/ > (they of course use their own CA :) > > > And to confirm have you definitly set the right CNAME (ie something like > ghs-svc-https-cXXXX.ghs-ssl.googlehosted.com<http://ghs-svc-https-cxxxx.ghs-ssl.googlehosted.com/>. > not just ghs.google.com). And allowed enough time for it to propogate, eg > mobile still has the old settings cached somewhere). > > > > > On Sun, Apr 28, 2013 at 9:02 PM, Phil McDonnell < > [email protected]> wrote: > >> I've setup SSL with a VIP on my GAE account. It works fine on my mac in >> chrome, safari, etc. However, when I pull up the https site on my android >> browser (both android stock broswer & android chrome) I get a "security >> certificated is not trusted" warning. >> >> Is this normal? I used GoDaddy to create a cert and followed the directions >> here<http://blog.zlocation.com/post/27014425678/configuring-ssl-https-for-google-app-engine-gae> >> . >> >> Here's in detail what I did... >> >> 1. GoDaddy gives you yourdomain.com.crt and gd_bundle.crt, which is >> the intermediate bundle. >> 2. I copied those two crt files together into one file and called it >> combined.pem >> 3. I unencrypted my key file an called it unencrypted.pem >> 4. Uploaded the combined.pem and unencrypted.pem to Google >> 5. Changed my cname to point to the right ghs domain. >> >> Like I said, it works fine on desktop, but just seems broken on mobile. >> Any ideas what might be wrong? >> >> Thanks, >> Phil >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> Visit this group at http://groups.google.com/group/google-appengine?hl=en >> . >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at http://groups.google.com/group/google-appengine?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
