Hey Rodrigo, It appears this is expected behaviour as Startcom root certificates are distrusted by Google and Chrome. See this Google Security Blog post <https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html> for details.
So, it seems you should get a new root certificate authority. Let me know if you have any further questions! Cheers, Nick Cloud Platform Community Support On Wednesday, February 22, 2017 at 9:16:03 AM UTC-5, Rodrigo Ferreira wrote: > > Can someone help me figure out what is wrong with this SSL certificate > installation on GAE? > > > upholdex.tk > > > I get a net::ERR_CERT_AUTHORITY_INVALID error on Chrome and a > SEC_ERROR_REVOKED_CERTIFICATE on Firefox. > > > The certificates were issued by StartSLL. > > > I have tested the installation with multiple online SSL checking tools, > all seem fine. The only one that hints a problem is > https://www.htbridge.com/ssl/ where I get "Server sends an unnecessary > root certificate.", but I tried removing the root certificate from the > chain and the problem persists. > > > A similar setup of a different domain with the same certificate chain > works fine on AWS+Nginx. It makes me think that this is something related > to GAE. Maybe the StartSSL root certificate has been revoked on GAE? Does > this make sense? I have made many deployments of SSL installations but I am > far from an expert. > > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/5bf89a10-2a6c-4e38-b2bd-55be3f0c9664%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
