How to install SSL in GAE in 3 simple steps :)

How to install SSL in GAE in 3 simple steps :)

Pre-requisites

1.GENERATE or FIND THE RSA PRIVATE KEY

    • File *.key
    • Looks like this one
-----BEGIN RSA PRIVATE KEY-----
MIIEoQIBAAKCAQEA0e3E4b0LSv7tpImLLtJsfW6gtrGV2VLkPfsiINinFSAtgtQy
qen0LKFdxEfGxbF6VM0mRTcp1OEsihl64u4Kz1+cflkJnC9Z6HUl48vgavqVmglp
o42YMDORnD5EskSWcXNne6O7fhorgbjycw8X5RukK2XbHtavg+kclY/U0rl8OZiq
...
jwKBgQCnpTtF7nEC8ZwYnTzGoqXd5q+d0RyDreQ95IBEGSf6QF8j9hO3t5PvXONe
sjzVSj5HVglWAwnQITXeGLmJOJ8otaqtGvdeGLvwOvIF0Nfrvk/lfCvmyBEsd19N
LGIpPmXFLPur5OwBzwFv98nfe1U4bbfPoKlZD9gCOprHJjWTKw==
-----END RSA PRIVATE KEY-----

If you don’t have it you can generate a new one with the command line:

openssl genrsa -out [FILENAME].key 2048

NOTE: If you don’t have openssl.exe search in Internet for OpenSSL-Win64 working fine for me.  (C:\OpenSSL-Win64\bin\openssl.exe)

2) GENERATE or FIND CSR REQUEST

  • Looks like
-----BEGIN CERTIFICATE REQUEST-----
MIIC/TCCAeUCAQAwgbcxCzAJBgNVBAYTAkVTMRIwEAYDVQQIDAlDYW50YWJyaWEx
EjAQBgNVBAcMCVNhbnRhbmRlcjEUMBIGA1UECgwLU29sdmF5IFMuTC4xIzAhBgNV
BAsMGlNCUyBJUyBBcHBsaSBDb2xsYWJvcmF0aW9uMRgwFgYDVQQDDA9nb3RvLnNv
...
ndFQKsF3ZlY/zMPNpLf9khk8lc7BT6SQ6p5azhqaDWgdS9xwcBqupmoeI8thCA4G
X9xgGeVFObexFrLq5XnjOGp8MuGUehVdhVmHw37G7rrkv86QnVGOuymKsVBglNcB
fQFByRdiBcI9SkEQTTcx5ekWt2VBVge+wjAElAiAN84OGmnwaaggEFCqQtsDRIEi
bw==
-----END CERTIFICATE REQUEST-----

If you don’t have it, you can generate it using the RSA PRIVATE KEY

openssl req -new -sha256 -key [FILENAME].key -out [FILENAME].csr

System will ask you for some parameters, but the most important one:

Common Name (e.g. server FQDN or YOUR name) []:

Provide the web address application without http://

Step 1) Send CSR to SSL provider to generate Certificate

They should send something like this

-----BEGIN CERTIFICATE-----
MIIHZjCCBk6gAwIBAgIMey0SvBni/TH6Qz9iMA0GCSqGSIb3DQEBCwUAMGAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H
bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN
...
pjwY4jn/GDxWIPnqkKEViPsnwVZyEqhK7iWHfLIqKyqkqJ70YMbVQ4Rx8VByz1sF
SllmiUsLfpL7UAT0r/NLysrJA4hNHEaY9cDfOAUV58p43Hu2iW3cXuPpvBL6Xhbh
MviDPaoXWDko7nU7Ph0npWHVmPKYE4JtLWY=
-----END CERTIFICATE-----

Step 2) Upload the Certificate send by the provider and the RSA PRIVATE KEY

add-ssl-certificate

No Comments

Sorry, the comment form is closed at this time.