简体   繁体   中英

GAE SSL for custom domain impossible?

I tried to configure SSL for my website that is served on GAE and failed.

http://www.gluwa.com/

works fine but

https://www.gluwa.com/

gives me nothing but an google error page.

在此输入图像描述

After going over their SSL setup instruction several times now I am out of guesses.

I've tried both SNI and VIP but still no hope.

Is it impossible to have SSL for GAE apps?

EDIT:

I'm adding my settings as suggested by dragonx.

在此输入图像描述

app.yaml

application: myapp
version: 1
runtime: python27
api_version: 1
threadsafe: true

libraries:
- name: django
  version: "1.3"
- name: PIL
  version: "latest"
- name: webob
  version: "latest"

builtins:
- django_wsgi: on
- appstats: on

inbound_services:
- warmup

handlers:
- url: /static/admin
  static_dir: admin_media/

- url: /static
  static_dir: static/

EDIT 2:

handlers:
- url: /.*
  script: google.appengine.ext.django.main.app
  secure: always

I commented out below from builtins to add above handler.

- django_wsgi: on

However, adding this mark didn't solve the problem.

EDIT 3:

For more information, I followed below three steps to create my SSL certificate with openssl in my terminal.

$openssl genrsa -out yourdomain.com.key 1024
$openssl req -new -key yourdomain.com.key -out yourdomain.com.csr
$openssl x509 -req -days 365 -in yourdomain.com.csr -signkey yourdomain.com.key -out yourdomain.com.crt

and for the second command, I entered these information

Country Name (2 letter code) [AU]:KR
State or Province Name (full name) [Some-State]:Seoul
Locality Name (eg, city) []:Seocho
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Gluwa Inc.
Organizational Unit Name (eg, section) []:R&D
Common Name (e.g. server FQDN or YOUR name) []:www.gluwa.com
Email Address []:gluwa@gluwa.com

I'm not sure if they should matter at all, though.

EDIT 4:

I tried using GAE server's information for creating SSL but it didn't worth either.

No, it's not impossible. Works fine for me.

There's something you haven't configured properly. You'll have to actually describe your configuration in detail for anyone to help you figure it out.

I'm guessing you didn't mark your request handlers as secure in your app.yaml.

your DNS entry is pointing to the wrong address:

$ host www.gluwa.com
www.gluwa.com has address 216.239.38.21

according to your screenshot it should be a CNAME to ghs-svc-https-c1099.ghs-ssl.googlehosted.com.

when I try to access https://ghs-svc-https-c1099.ghs-ssl.googlehosted.com I see your certificate, and if I send a GET request for www.gluwa.com to the server it returns some content from App Engine, so I think everything is configured correctly on Google's side.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM