I'm having a problem with SSL for Custom Domains. Everything appears to be
set up (no error complaints from Google), but it just doesn't work for the
our custom domain.
Say the project is myproject.appspot.com, and that the custom domain is
my-project.com. Then:
http://myproject.appspot.com redirects to https://myproject.appspot.com
which works ok.
and
http://www.myproject.appspot.com redirects to
https://www.myproject.appspot.com, also ok.
However:
http://my-project.com/ redirects to https://my-projectr.com/, not ok,
and
http://www.my-projectr.com/ redirects to https://www.my-project.com/,
also not ok:
Both https://my-project.com/ and https://www.my-project.com/ yield messages:
…. can't establish a secure connection to the server
"[www.]my-project.com"
Here are the details:
* In Apps > Domains, the primary domain is set to my-project.com, and the
naked domain is redirected to http://www.my-project.com
* Billing is turned on for the project, and SSL is being billed to the
project.
* I got 3 different *.crt files from Comodo:
AddTrustExternalCARoot.crt PositiveSSLCA2.crt www_my_project_com.crt
Below, I've tried uploading three different combos:
- www_my_project_com.crt alone (= combined.pem below)
- cat PositiveSSLCA2.crt AddTrustExternalCARoot.crt
www_my_project_com.crt > combined.pem
- cat www_my_project_com.crt PositiveSSLCA2.crt
AddTrustExternalCARoot.crt > combined.pem
* In Apps > Security > SSL for Custom Domains:
- I uploaded combined.pem together with the private.key I generated from
openssl with the CSR which produced this cert. Apps made no complaint, and:
- In the Billing Summary it shows: SNI certificate slots: Used 1 of 5
- the CNAME for www is set to ghs.googlehosted.com in our DNS.
- In web.xml, I have this set in security-constraint:
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
Plugging each of my-project.com and www.my-project.com into
http://www.digicert.com/help/, I get "No certificates were found" even
though my Apps > SSL for Custom Domains asserts: SNI certificate slots:
Used 1 of 5.
So, if anyone can give me any useful troubleshooting tips for this, I'll
greatly appreciate it.
Thanks in advance,
Ken Bowen
--
You received this message because you are subscribed to the Google Groups
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-appengine.
For more options, visit https://groups.google.com/groups/opt_out.
