How to Install an SSL Certificate on Google App Engine

If you’re looking for more information on how to conduct an SSL installation on the Google App Engine (GAE), follow this step-by-step guide to learn how to install your SSL certificate on GAE.

Getting Started

Before you start the SSL certificate installation on GAE, please make sure the following processes have been completed:

• Buy/renew SSL Certificate
• Generate CSR with an SHA-2 algorithm
• Save the CSR and private key file on your server
• Apply for SSL certificate issuance
• Submit SSL issuance documents required by your certificate authority (Only for OV and EV SSL)

Step 1: Save the Certificate Files

Your SSL Certificate files will be sent by email via your CA (Certificate Authority). You will need to download the certificate files and save it on your server directory.

For successful SSL installation, first you need to activate SSL for customer domains, and then, you need to configure the SSL in GAE. 

Step 2: Activate the SSL Certificate for Custom Domain

• Open Google Admin Console and sign in with your correct credentials.
• Now, you need to add the app as service in Google Apps.
  • Move to More controls > App Engine apps > Add services to your domain form the bottom of the page
  • After entering your Application ID, click on Add it now
  • By accepting the terms and condition, click on Activate.

Now, your users can access your application by entering your_app_name.appsspot.com.

• To enter a sub-domain, click on Add new URL. This will give you access to add a new URL into your Google app’s primary domain (your_domain.com). Now, add the sub-domain name (Example: playgame) and press Enter.
• Now, your URL will be set as your_domain.com

If you carry more domains in your Google Apps account, then you need to select the domain you wish to add the new URL.

• Once you add the URL into your Google Apps and map it with sub-domain, you can now add the SSL Certificate.
  • Via Google Admin Console, move to Security > Show more > Advanced settings > SSL for Custom Domains.
  • Enter your Application ID of the Google App Engine, which you wish to secure with SSL (Note: You have to pay the SSL Charges for that app)
  • Now, click over Enable SSL for App Engine Applications
  • This will add all the SSL charges for the selected application
  • You are allowed to disable the SSL for a domain, sub-domain, and Google app account in both Google Apps and the App Engine console.
• You will be redirected to the Google App Engine Admin Console for the application that you have secured with SSL. You may also require to log in.
• Click on Enable, which activates the SSL for the selected Application
• Now, you will be redirected to the Google Admin Console’s SSL page. You can now add VIPs and SNI certificate slots in your application and configure the SSL certificate.

Step 3: Configure SSL Certificate for Custom Domain

1. Upload the Certificate

• Sign in to your Google Admin Console
• Now, click on Security > Advanced settings > Show more > SSL for Custom Domains
• Click on SSL Certificate configuration page > New certificate and press Upload.
• Click on Choose File button for Public Certificate
• Again, follow the same for Private Key
• After selecting the proper Public Certificate and Private Key, click on Upload

Your certificate and key file are uploaded, now configure the certificate. 

2. Configure the Certificate

• Select a serving mode from the dropdown list.
• There will be three serving methods available based on VIP of SNI Certificate slots or both.
• The serving options are ‘Not serving, SNI only, or SNI + VIP: <a VIP number>’.
• In the SNI + VIP option, the certificate is assigned to the listed VIP.
• Now, select a specific URL form dropdown list and press Add button
• If you wish to change the CNAME record of the URL you’ve assigned, you to need to contact your DNS provider.
• Click on Save

Hooray! Your SSL Certificate is now configured in the Google App Engine.