Geek Answers Handbook

Is there an API for installing TLS certificates for Google App Engine?

I would like to automate the process of renewing certificates using Let Encrypt (implementation of the ACME challenge response + converting the private key to the unencrypted .rsa format).

But the only thing that still requires manual intervention is to provide a certificate chain and a private key for the Google domain manager: https://console.cloud.google.com/appengine/settings/certificates You need to open the browser manually and get a copy- certificate paste.

Is there any possible way to automate this? Maybe the endpoint is protected by OAuth2.0 tokens? The tool gclouddoes not seem to contain any relevant methods.

+4
source share
1 answer

You can upload the SSL certificate to App Engine using tools gcloud beta.

gcloud beta app ssl-certificates create \
  --display-name mydomain-letsencrypt-aug2017 \
  --certificate /etc/letsencrypt/live/www.mydomain.com/fullchain.pem \
  --private-key /etc/letsencrypt/live/www.mydomain.com/privkey.pem \
  --project hello-app

gcloud beta app domain-mappings update www.mydomain.com \
    --certificate-id $certId \
    --project hello-app

https://code.luasoftware.com/tutorials/google-app-engine/lets-encrypt-on-google-app-engine/

+2
source

More articles:


All Articles