Hi,

we were using App Engine bound to naked custom domain for quite some time. 
At some moment it just stopped working because of inability to establish 
SSL/TLS connection.

We have verified domain registered in Google Admin. App Engine is 
configured to work on this custom domain. SSL Security is set to be Google 
Managed. DNS records recommended in Control Panel were set correctly. 
We are completely sure that everything was set up correctly because it was 
working for several months without a glitch.

But recently naked domain stopped working with the following symptoms 
(replaced my domain with *bla-bla-bla.com*):

MacDenisPro3~(:|✔) % curl -vvv https://bla-bla-bla.com
*   Trying 216.239.34.21...
* TCP_NODELAY set
* Connected to bla-bla-bla.com (216.239.34.21) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to bla-bla-bla.com:
443
* Closing connection 0
curl: (35) LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to bla-bla-
bla.com:443

The following command just shows CONNECTED(00000006):

openssl s_client -connect itspartner.by:443 -showcerts

Interesting that the following commands give *different IPs*:

dig www.bla-bla-bla.com @8.8.8.8
dig bla-bla-bla.com @8.8.8.8

I'm really stunned and can't think of a solution other than re-setup 
everything from scratch. Which will potentially break development process 
and there's no guarantee that situation resolves itself.


-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/cfc010ac-e056-4977-8195-4fb25f9eff2bo%40googlegroups.com.
  • [google-appeng... Denis Dmitriev
    • [google-a... 'Mohammad I (Cloud Platform Support)' via Google App Engine

Reply via email to