from Hacker News

Managed SSL for Google App Engine

by lklig on 9/14/17, 4:27 PM with 51 comments

  • by NearAP on 9/14/17, 6:23 PM

    This is welcome news. This means I no longer have to track and manually renew my Let's Encrypt certificates for my websites.

    I also see it as a way to incentivize folks to use GAE (not only are you getting free quotas to run your app, you also don't have to spend money to buy certificates and don't have to worry about installing or renewing them).

    Finally, I also see it as another way of pushing for the uptake of SSL. With GAE doing this, other hosting services might also start offering something similar or close to it which would then beg the question - why is your site not using SSL.

  • by paulddraper on 9/14/17, 5:40 PM

    Been using AWS's certificate management.

    It is _so_ nice not to (1) manage the certs with your own infrastructure (2) automatically deploy these things to HAProxy, Apache, MySQL, random server X.

    Automated load balancing + cert management is heaven.

  • by jfoster on 9/14/17, 4:59 PM

    I've tried it and get "Failed to activate certificates" errors.

  • by ohstopitu on 9/14/17, 6:42 PM

    This is great news.

    I love app engine but one of the biggest issues I've had with it is the fact that memcached and search are not available for anything but app engine standard - python (2.7).

    Providing access to both via app engine flexible would be god sent!

  • by OzzyB on 9/14/17, 5:34 PM

    This is a welcomed addition that many have been patiently waiting for.

    If you want to see the progress here's the relevant ticket[0] -- nice to see it finally closed!

    Not privy to the final implementation details but my guess it's a based on Let's Encrypt as suggested by the originator of the ticket and others.

    Edit: Yeah, probably not Let's Encrypt as others have stated.

    [0] https://issuetracker.google.com/issues/35900034

  • by zackify on 9/14/17, 6:18 PM

    Any plans to add this to storage buckets?

  • by syntaxgoonoo on 9/14/17, 7:34 PM

    When will Azure do the same?

  • by kennethh on 9/15/17, 7:10 AM

    Is this both for App Engine standard or flexible environment also?

  • by le-mark on 9/14/17, 5:11 PM

    Is this basically just SNI for GAE? Or did they already have that?

  • by nivertech on 9/15/17, 12:00 PM

    Can this be used with load balancers on GCE?

  • by joshribakoff on 9/14/17, 6:56 PM

    I feel like Google isn't exactly the best place to get your SSL, given their track record with the NSA.