4 ms·

> Done! Your site is now HTTPS protected! Don’t forget to renew your cert in 3 months This is not how Let's Encrypt is designed to work. Manually registering a

> Done! Your site is now HTTPS protected! Don’t forget to renew your cert in 3 months This is not how Let's Encrypt is designed to work. Manually registering and then deploying a certificate and saying "don't forget to renew" does not make for a particularly high quality post.

charlieegan3 9y ago
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
- subway 9y ago
  That's a big part of why this post is disappointing. It may as well be two separate posts titled "how to manually obtain an LE cert", and "how to manually install a cert on GAE". I was excited and thought they'd come up with a way of installing certs into GAE in an automated manner, since that's been the biggest blocker of automated LE usage on GAE.
  - tomasreimers 9y ago
    Thought about automating it with a sequence of API calls (get challenge, automatically create handler, deploy solution, get cert, modify it, upload it). However, Google is working on an automated solution, and I'm not sure deploying something for the intermediate is necessary https://issuetracker.google.com/issues/35900034 https://issuetracker.google.com/issues/35900034 (but I still need certs in the intermediate).
- dagss 9y ago
  It is not GAE but Google Cloud DNS right? So one needs to write a small app that uses that API to answer the challenge.
- aliasnexus0 9y ago
  SSL certificates can now be updated in GAE using the gcloud command[1]. You could combine that with lego[2] to renew a Let's Encrypt SSL certificate via DNS Challenge to automate the process until native automation is implemented in GAE. [1] https://cloud.google.com/appengine/docs/standard/python/using-custom-domains-and-ssl#transferring_mappings_from_a_serving_certificate_to_a_new_certificate https://cloud.google.com/appengine/docs/standard/python/usin... [2] https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dns-challenge-to-generate-lets-encrypt-ssl-certificates.html https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dn...
  - subway 9y ago
    Oh hot damn! I've been waiting on API access to manage certs for a while.
tomasreimers 9y ago
Agreed! I also wish there was an automated way to renew! However currently there isn't, and I doubt building out the tooling is worth it given Google appears to be working on an integration themselves: https://issuetracker.google.com/issues/35900034 https://issuetracker.google.com/issues/35900034 -- in the intermediate, I still need certificates though.

charlieegan3 9y ago

It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.

subway 9y ago
That's a big part of why this post is disappointing. It may as well be two separate posts titled "how to manually obtain an LE cert", and "how to manually install a cert on GAE". I was excited and thought they'd come up with a way of installing certs into GAE in an automated manner, since that's been the biggest blocker of automated LE usage on GAE.
- tomasreimers 9y ago
  Thought about automating it with a sequence of API calls (get challenge, automatically create handler, deploy solution, get cert, modify it, upload it). However, Google is working on an automated solution, and I'm not sure deploying something for the intermediate is necessary https://issuetracker.google.com/issues/35900034 https://issuetracker.google.com/issues/35900034 (but I still need certs in the intermediate).
dagss 9y ago
It is not GAE but Google Cloud DNS right? So one needs to write a small app that uses that API to answer the challenge.
aliasnexus0 9y ago
SSL certificates can now be updated in GAE using the gcloud command[1]. You could combine that with lego[2] to renew a Let's Encrypt SSL certificate via DNS Challenge to automate the process until native automation is implemented in GAE. [1] https://cloud.google.com/appengine/docs/standard/python/using-custom-domains-and-ssl#transferring_mappings_from_a_serving_certificate_to_a_new_certificate https://cloud.google.com/appengine/docs/standard/python/usin... [2] https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dns-challenge-to-generate-lets-encrypt-ssl-certificates.html https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dn...
- subway 9y ago
  Oh hot damn! I've been waiting on API access to manage certs for a while.

tomasreimers 9y ago

Agreed! I also wish there was an automated way to renew! However currently there isn't, and I doubt building out the tooling is worth it given Google appears to be working on an integration themselves: https://issuetracker.google.com/issues/35900034 https://issuetracker.google.com/issues/35900034 -- in the intermediate, I still need certificates though.