4 ms·
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
by charlieegan3 9y ago
It's hard to auto renew on GAE; in fact, I don't know how to config auto renew.
- subway 9y agoThat's a big part of why this post is disappointing. It may as well be two separate posts titled "how to manually obtain an LE cert", and "how to manually install a cert on GAE". I was excited and thought they'd come up with a way of installing certs into GAE in an automated manner, since that's been the biggest blocker of automated LE usage on GAE.
- tomasreimers 9y agoThought about automating it with a sequence of API calls (get challenge, automatically create handler, deploy solution, get cert, modify it, upload it). However, Google is working on an automated solution, and I'm not sure deploying something for the intermediate is necessary https://issuetracker.google.com/issues/35900034 https://issuetracker.google.com/issues/35900034 (but I still need certs in the intermediate).
- dagss 9y agoIt is not GAE but Google Cloud DNS right? So one needs to write a small app that uses that API to answer the challenge.
- aliasnexus0 9y agoSSL certificates can now be updated in GAE using the gcloud command[1]. You could combine that with lego[2] to renew a Let's Encrypt SSL certificate via DNS Challenge to automate the process until native automation is implemented in GAE. [1] https://cloud.google.com/appengine/docs/standard/python/using-custom-domains-and-ssl#transferring_mappings_from_a_serving_certificate_to_a_new_certificate https://cloud.google.com/appengine/docs/standard/python/usin... [2] https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dns-challenge-to-generate-lets-encrypt-ssl-certificates.html https://thornelabs.net/2016/11/08/use-lego-gcloud-dns-and-dn...
- subway 9y agoOh hot damn! I've been waiting on API access to manage certs for a while.