Google App Engine SSL 错误“找不到 DNS 记录"即使自定义域正在工作 [英] Google App Engine SSL error "DNS records could not be found" even though custom domain is working

问题描述

我将一个新的自定义域指向了 Google App Engine 标准环境项目，并按照 Google 的说明编辑了 DNS 记录，它似乎已正确重定向.现在我的印象是 App Engine 项目的 SSL 证书现在可以由 Let's Encrypt 自动提供，而不必由用户单独提供:

如果我输入 gcloud beta app domain-mappings list，我会得到如下所示的内容:

ID SSL_CERTIFICATE_ID SSL_MANAGEMENT_TYPE PENDING_AUTO_CERTmydomain.com 自动 1256789www.mydomain.com 1234567 自动

我还尝试了禁用托管安全"并通过启用托管安全"重新打开它，几分钟后得到相同的结果:www.mydomain.com 的托管证书已激活."出现，但不适用于 mydomain.com.

如果我使用据称已激活的证书访问 www.mydomain.com，我仍然会在浏览器中看到连接不安全".如果我转到mydomain.com"，它会以相同的结果重定向到 www.mydomain.com.

有什么想法吗?

更新:我只是尝试使用 Certbot 获取我自己的密钥并将它们上传到 GAE.GAE 显示了 mydomain.com 和 www.mydomain.com 的证书 ID.但是我必须在浏览器中手动输入https"才能进入安全页面.我发现在域默认加载安全版本之前，我必须在 app.yaml 中添加安全:始终".我仍然不知道为什么 Google 的默认托管安全选项对我不起作用；这比每 3 个月获取和上传我自己的脚本要方便得多.

解决方案

好的，对于任何仍然坚持这个的人:

1. 转到

2. 如果您在 GoDaddy 购买了域名，那么您必须进入您的 Godaddy 帐户 -> YourDomain.com -> DNS -> 管理区域.然后在那里输入它:

3. 返回应用引擎并点击验证.

4. 享受吧！

I pointed a new custom domain to a Google App Engine Standard Environment project and edited the DNS records per Google's instructions, and it seems to be redirected properly. Now I'm under the impression that SSL certificates for App Engine projects can now be provided automatically by Let's Encrypt and do not necessarily need to be supplied by the user separately: https://cloud.google.com/appengine/docs/standard/go/securing-custom-domains-with-ssl

However, I'm having problem getting the SSL security service from Google. The error message in the App Engine console is: DNS records could not be found. Certificate activation will retry automatically.

This error message looks like this:

If I type gcloud beta app domain-mappings list, I get something that looks like this:

ID                    SSL_CERTIFICATE_ID  SSL_MANAGEMENT_TYPE  PENDING_AUTO_CERT
mydomain.com                              AUTOMATIC            1256789
www.mydomain.com      1234567             AUTOMATIC

I also tried "Disable managed security" and turn it back on by "Enable managed security", and get the same result after some minutes: "Managed certificate for www.mydomain.com activated." shows up, but not for mydomain.com.

If I go to www.mydomain.com with its supposedly activated certificate, I still get "connection is not secure" in the browser. If I go to "mydomain.com" it gets redirected to www.mydomain.com with the same result.

Any ideas?

Update: I just tried getting my own keys using Certbot and uploaded them to GAE. GAE showed a Certificate ID for both mydomain.com and www.mydomain.com. However I had to manually type "https" in the browser to get to the secure page. I found that I had to add "secure: always" in app.yaml before the domain will load the secure version by default. I still don't know why Google's default managed security option didn't work for me though; that would be much more convenient than getting and uploading my own scripts every 3 months.

解决方案

Ok for anyone still stuck on this:

1. Go to https://console.cloud.google.com/appengine/

2. Select Settings

3. Add custom domain. select your domain name. (if you have not verified your account before this then do that first)

4. Select the domain you want to add

5. you will get a list of things that you need to create in your hosting acount something like this:

6. if you bought your domain name in GoDaddy then you will have to go into your Godaddy account -> YourDomain.com -> DNS -> Manage Zones. Then enter it there thus:

7. go back to app engine and click verify.

8. Enjoy!

这篇关于Google App Engine SSL 错误“找不到 DNS 记录"即使自定义域正在工作的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！