CODEWITHSUNDEEP
pythondjangogoogle-app-enginessl
taelimoh
taelimoh

Reputation: 1003

GAE SSL for custom domain impossible?

I tried to configure SSL for my website that is served on GAE and failed.

http://www.gluwa.com/

works fine but

https://www.gluwa.com/

gives me nothing but an google error page.

enter image description here

After going over their SSL setup instruction several times now I am out of guesses.

I've tried both SNI and VIP but still no hope.

Is it impossible to have SSL for GAE apps?

EDIT:

I'm adding my settings as suggested by dragonx.

enter image description here

app.yaml

application: myapp
version: 1
runtime: python27
api_version: 1
threadsafe: true

libraries:
- name: django
  version: "1.3"
- name: PIL
  version: "latest"
- name: webob
  version: "latest"

builtins:
- django_wsgi: on
- appstats: on

inbound_services:
- warmup

handlers:
- url: /static/admin
  static_dir: admin_media/

- url: /static
  static_dir: static/

EDIT 2:

handlers:
- url: /.*
  script: google.appengine.ext.django.main.app
  secure: always

I commented out below from builtins to add above handler.

- django_wsgi: on

However, adding this mark didn't solve the problem.

EDIT 3:

For more information, I followed below three steps to create my SSL certificate with openssl in my terminal.

$openssl genrsa -out yourdomain.com.key 1024
$openssl req -new -key yourdomain.com.key -out yourdomain.com.csr
$openssl x509 -req -days 365 -in yourdomain.com.csr -signkey yourdomain.com.key -out yourdomain.com.crt

and for the second command, I entered these information

Country Name (2 letter code) [AU]:KR
State or Province Name (full name) [Some-State]:Seoul
Locality Name (eg, city) []:Seocho
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Gluwa Inc.
Organizational Unit Name (eg, section) []:R&D
Common Name (e.g. server FQDN or YOUR name) []:www.gluwa.com
Email Address []:[email protected]

I'm not sure if they should matter at all, though.

EDIT 4:

I tried using GAE server's information for creating SSL but it didn't worth either.

Upvotes: 0

Views: 414

Answers (2)

Iain Wade
Iain Wade

Reputation: 176

your DNS entry is pointing to the wrong address:

$ host www.gluwa.com
www.gluwa.com has address 216.239.38.21

according to your screenshot it should be a CNAME to ghs-svc-https-c1099.ghs-ssl.googlehosted.com.

when I try to access https://ghs-svc-https-c1099.ghs-ssl.googlehosted.com I see your certificate, and if I send a GET request for www.gluwa.com to the server it returns some content from App Engine, so I think everything is configured correctly on Google's side.

Upvotes: 1

dragonx
dragonx

Reputation: 15143

No, it's not impossible. Works fine for me.

There's something you haven't configured properly. You'll have to actually describe your configuration in detail for anyone to help you figure it out.

I'm guessing you didn't mark your request handlers as secure in your app.yaml.

Upvotes: 1

Related Questions