Hello,
Based on the information you have given, it seems that you are encountering an issue when changing from Self-managed SSL certificates to a Google Managed SSL certificate. Specifically issue regarding the verification your custom domain when trying to switch over SSL management. The troubleshooting section <https://cloud.google.com/appengine/docs/standard/java/securing-custom-domains-with-ssl> of the Google documents mentions that App-Engine cannot provision certificates for an unverified domain. You mentioned that this is not the case as you have verified domain ownership via Webmaster Central <https://www.google.com/webmasters/verification/home>. I would assume this issue has arised after completing the appropriate set up for mapping your custom domain to your GAE application and configuring your dns record <https://cloud.google.com/appengine/docs/standard/java/securing-custom-domains-with-ssl>. As a precaution it would be a good idea review the process once more. At this point, it seems there is more to your issue and we would require more information to resolve it. I would like to redirect you to creating a private issue on our Public Issue Tracker <https://cloud.google.com/support/docs/issue-trackers>to help with your this. (Note: You can navigate to the section Compute > Create new App Engine issue.) On Saturday, October 27, 2018 at 11:00:34 AM UTC-4, Devel63 wrote: > > I am having this same problem with subdomain.mydomain.com, which is > currently using a self-signed SSL certificate. The problem is that for > some reason that certificate is no longer trusted by the browser, so I > thought I'd switch over to Google's managed security. > > But I can't do anything, and as the original poster says, I'm getting the > message that I must be a domain owner. > > However, I am also unable to reverify. I have tried adding a TXT record, > a CNAME record, and via Webmaster Central, the integrated GoDaddy check. > All those checks seem to be trying to verify the domain, not the subdomain, > but the documentation seems to imply that's expected. > > Not sure if it's related, but Webmaster Central says I am indeed the > verified owner of the domain. But it says this is the case via Delegation, > from another verified owner that is ******@g*****account.com > <[email protected]>, which is presumably the standard > gmail login that got migrated when I created the Google Apps equivalent. > But that happened many years ago, and I added the subdomain.domain.com > property to App Engine years long after that. I suppose it's possible that > with the new managed security, they are doing some other checks, and this > has fouled things up. > > Anyway, can someone help me? > > > On Tuesday, October 2, 2018 at 6:35:39 PM UTC-4, John Janzen wrote: >> >> Thanks Amit. >> >> Reverifying the domain did the trick. (Still not sure why I had to >> reverify) >> >> >> -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/4fd42abc-0abd-4946-9759-b08e202db494%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
