Google App Engine SSL错误“找不到DNS记录"即使自定义域正在运行 [英] Google App Engine SSL error "DNS records could not be found" even though custom domain is working

问题描述

我为Google App Engine标准环境项目指向了一个新的自定义域，并按照Google的说明编辑了DNS记录，并且该域名似乎已正确重定向.现在，我的印象是，让我们加密可以自动为App Engine项目提供SSL证书，而不必由用户单独提供:

I pointed a new custom domain to a Google App Engine Standard Environment project and edited the DNS records per Google's instructions, and it seems to be redirected properly. Now I'm under the impression that SSL certificates for App Engine projects can now be provided automatically by Let's Encrypt and do not necessarily need to be supplied by the user separately: https://cloud.google.com/appengine/docs/standard/go/securing-custom-domains-with-ssl

但是，我在从Google获得SSL安全服务时遇到了问题. App Engine控制台中的错误消息是: 找不到DNS记录.证书激活将自动重试.

However, I'm having problem getting the SSL security service from Google. The error message in the App Engine console is: DNS records could not be found. Certificate activation will retry automatically.

此错误消息如下:

如果我键入gcloud beta app domain-mappings list，我将得到如下所示的内容:

If I type gcloud beta app domain-mappings list, I get something that looks like this:

ID                    SSL_CERTIFICATE_ID  SSL_MANAGEMENT_TYPE  PENDING_AUTO_CERT
mydomain.com                              AUTOMATIC            1256789
www.mydomain.com      1234567             AUTOMATIC

我还尝试了禁用托管安全性"，并通过启用托管安全性"将其重新打开，并在几分钟后得到了相同的结果:激活了www.mydomain.com的托管证书."出现，但不适用于mydomain.com.

I also tried "Disable managed security" and turn it back on by "Enable managed security", and get the same result after some minutes: "Managed certificate for www.mydomain.com activated." shows up, but not for mydomain.com.

如果我使用其应有的激活证书访问www.mydomain.com，则在浏览器中仍会收到连接不安全"的信息.如果我转到"mydomain.com"，它会被重定向到www.mydomain.com，结果相同.

If I go to www.mydomain.com with its supposedly activated certificate, I still get "connection is not secure" in the browser. If I go to "mydomain.com" it gets redirected to www.mydomain.com with the same result.

有什么想法吗?

更新:我只是尝试使用Certbot获取自己的密钥，然后将其上传到GAE. GAE分别显示了mydomain.com和www.mydomain.com的证书ID.但是，我必须在浏览器中手动键入"https"才能进入安全页面.我发现我必须在app.yaml中添加安全:始终"，然后域才能默认加载安全版本.我仍然不知道为什么Google的默认托管安全选项对我不起作用.这比每三个月获取和上传自己的脚本要方便得多.

Update: I just tried getting my own keys using Certbot and uploaded them to GAE. GAE showed a Certificate ID for both mydomain.com and www.mydomain.com. However I had to manually type "https" in the browser to get to the secure page. I found that I had to add "secure: always" in app.yaml before the domain will load the secure version by default. I still don't know why Google's default managed security option didn't work for me though; that would be much more convenient than getting and uploading my own scripts every 3 months.

推荐答案

好吧，仍然对这个问题感兴趣的人:

Ok for anyone still stuck on this:

1. 转到 https://console.cloud.google.com/appengine/

2. 选择设置

1. Go to https://console.cloud.google.com/appengine/

2. Select Settings

添加自定义域.选择您的域名. (如果您之前尚未验证您的帐户，请先执行此操作)

Add custom domain. select your domain name. (if you have not verified your account before this then do that first)

选择要添加的域

您将获得需要在托管帐户中创建的东西的列表，如下所示:

you will get a list of things that you need to create in your hosting acount something like this:

如果您在GoDaddy中购买了域名，则必须进入Godaddy帐户-> YourDomain.com-> DNS->管理区域.然后在此处输入:

if you bought your domain name in GoDaddy then you will have to go into your Godaddy account -> YourDomain.com -> DNS -> Manage Zones. Then enter it there thus:

返回到应用引擎，然后单击验证".

go back to app engine and click verify.

享受！

这篇关于Google App Engine SSL错误“找不到DNS记录"即使自定义域正在运行的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！