Google Apps 自定义域 SSL 的问题 [英] Trouble with Google Apps Custom Domain SSL

问题描述

我目前正处于 Google Apps for business 的 30 天免费试用期(计费设置，因此将很快开始非免费试用).我正在尝试为 Google App Engine 应用程序的自定义域设置 SSL，但我对这方面有点菜鸟，而且我积累的文件不被应用程序提交表单接受.

I'm currently inside the 30-day free trial for Google Apps for business (billing set up, so will start non-free trial soon). I'm attempting to set up SSL for a custom domain for a Google App Engine app, but am a bit of a noob at this stuff and the files I've accumulated aren't accepted by the Apps submission form.

我经历了以下过程:

openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key

填写证书后.请求信息(名称为 www.mydomain.com)，我有两个文件 CSR.csr 和 privateKey.key.

After filling in the cert. request information (with name www.mydomain.com), I had the two files CSR.csr and privateKey.key.

我使用 SSL 提供商廉价 SSLs.com 为我提供了该 CSR.csr 的证书，他们回复了证书 www_mydomain_com.crt.

I used an SSL provider CheapSSLs.com to provide me with a certificate off this CSR.csr, and they've responded with a cert www_mydomain_com.crt.

但是，在通过 Google Apps Dashboard -> Security -> SSL for Custom Domains 并上传 www_mydomain_com.crt 和 privateKey.key 时，我得到了错误:

However, on going through Google Apps Dashboard -> Security -> SSL for Custom Domains and uploading www_mydomain_com.crt and privateKey.key I'm given the error:

私钥和 SSL 证书都应采用未加密的 PEM 格式.

有什么帮助吗?据我所知，它们采用这种格式:私钥看起来像:

Any help? As far as I can tell, they are in that format: the private Key looks like:

-----BEGIN PRIVATE KEY-----
MIIEv...
...
...CftTU=
-----END PRIVATE KEY-----

.crt 文件如下所示:

and the .crt file looks like:

-----BEGIN CERTIFICATE----- 
MIIFy...
...
...WJjk= 
-----END CERTIFICATE-----

推荐答案

这是由社区的一位友好成员回答的，然后立即删除(不知道为什么......)但在我发现他的回答并使用它之前，效果很好:)

This was answered by a friendly member of the community and then immediately deleted (not sure why...) but not before I spotted his answer and used it, to great effect :)

openssl rsa -in privateKey.key -text > private.pem
openssl x509 -inform PEM -in www_mydomain_com.crt > public.pem

以上两个命令生成 private.pem 和 public.pem，它们被 Google Apps 仪表板接受.

The above two commands produce private.pem and public.pem, which are accepted fine by Google Apps dashboard.

谢谢！

这篇关于Google Apps 自定义域 SSL 的问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！