CODEWITHSUNDEEP
google-app-enginegoogle-cloud-platformgoogle-kubernetes-engine
uilianries
uilianries

Reputation: 3887

Mutual SSL authentication on Google App Engine

I have an application where the client uses mutual SSL authentication through NGINX. So far, so good.

However, I want to move my project to Google App Engine and I need to use the same approach to valid the client, or at least, forward the client certificate to be validate in the application.

Is there some way to use mutual authentication on App Engine or other Google Cloud service?

Regards!

Upvotes: 0

Views: 1162

Answers (1)

Dan Cornilescu
Dan Cornilescu

Reputation: 39814

This might not be possible in GAE flexible environment because the SSL connections don't reach all the way to the actual application code. From Request limits:

  • SSL connections are terminated at the load balancer. Traffic from the load balancer is sent to the instance over an encrypted channel, and then forwarded to the application server over HTTP. The X-Forwarded-Proto header lets you understand if the origin request was HTTP or HTTPs.

I didn't find such mention about the standard env GAE, so I'm unusure if the same applies there or not.

Upvotes: 5

Related Questions