Configure SSL certificates for custom domains
To use SSL for custom domains with your App Engine applications, you need to:
- Activate SSL for custom domains.
- Upload and configure a public SSL certificate along with the corresponding private key.
Note: These must conform to the certificate and key requirements outlined in the corresponding App Engine documentation. Follow the instructions below to configure your certificate and key.
Upload a certificate
- Sign in to the Google Admin console.
- Click Security > Advanced settings > (optional) Show more > SSL for Custom Domains where is it?
- Click Configure SSL certificates to go to the SSL Certificate Configuration page.
- On the SSL Certificate configuration page > New certificate section, click Upload.
- Choose the public certificate and private key you wish to upload.
- Once you have selected a public certificate and private key, click Upload.
Configure a certificate
Once you’ve uploaded the certificate and key, you can configure the certificate:
- Select a serving mode.
The drop-down list displays the available serving methods depending upon whether you have a VIP or SNI certificate slots, or both. The options include Not serving, SNI only, or SNI + VIP: <a VIP number>. SNI + VIP doesn't make use of an SNI certificate slot; the certificate is assigned to the VIP listed.
- Add any matching URLs to the certificate. Click the Assign all matching URLs link to add the matching URLs, or you can manually add matching URLs via the drop-down menu.
If you don't have any URLs to assign, you can add them by following the Using a Custom Domain documentation.
- Contact your DNS provider to change the CNAME record for your assigned URLs to the CNAME given in the CNAME to field while configuring the certificate. See Add a CNAME record.
- Click Save.
Learn more about canceling SSL in Billing and disabling SSL for custom domains.