Configure SSL certificates for custom domains

Setting up custom URLs and Secure Sockets Layer (SSL) will be moving from the Google App Engine to the Google Developers console in Q2 2015. To configure your custom domain name using the Google Developers console, refer to Google Developers console. Permissions are stricter for setting up domain access using the Google Developers console. In the Google Admin console domain administrators can add URLs from their domain to any App Engine project for which they have the project ID. In the Google Developers console domain administrators can only add URLs from their domain to App Engine projects for which they are editors or owners. Learn more about Configuring your App's Authentication. Follow these instructions to get the new permissions you’ll need.

To use SSL for Custom Domains with your App Engine applications, you must first Activate SSL for custom domains.

You will then need to upload and configure a public SSL certificate along with the corresponding private key. Please note, these must conform to the certificate and key requirements outlined in the corresponding App Engine documentation. Follow the instructions below to get your certificate and key configured.

Uploading a Certificate

  1. Sign in to the Google Admin console.
  2. Click Security > Advanced settings > (optional) Show more > SSL for Custom Domains where is it?
  3. Click Configure SSL certificates to go to the SSL Certificate Configuration page.
  4. Click Upload a new certificate.

  5. Choose the public certificate and private key you wish to upload.  
  6. Once you have selected a public certificate and private key, click Upload.

Configuring a Certificate

  1. After uploading the certificate and key, select a serving mode on the following page.

    The list displays the available serving methods depending upon whether you have a VIP or SNI certificate slots or both. The options provided will include: not serving, SNI only, or SNI + VIP: <a VIP number>. SNI + VIP will not make use of an SNI certificate slot; the certificate will simply be assigned to the VIP listed.

  2. Add any matching URLs to the certificate. Manually add matching URLs via the pulldown menu or add all of the matching URLs by clicking the Assign all matching URLs link.

    If you do not have any URLs to assign, you can add them by following the Using a Custom Domain documentation.
  3. Contact your DNS provider to change the CNAME record for your assigned URLs to the CNAME given in the CNAME to field while configuring the certificate. See Create a CNAME record for instructions.
  4. Click Save at the bottom of the page to save your changes.

See Billing and disabling SSL for custom domains for instructions on canceling SSL.