setup SSL Certification on google cloud

SSL Configure Certificate on google cloud computer

1. Purchase SSL Certification on (domain provides/hosting provider)
2. Run these commands first.
   1. -> run :- a2enmod ssl (enable ssl)
   2. -> run :- a2ensite default-ssl
   3. -> sudo service apache2 restart
3. #create a folder
   1. -> mkdir /etc/apache2/ssl (Create a folder)
   2. -> cd /etc/apache2/ssl/
   3. -> service apache2 reload (Reload Server)
4. Create KEY and Private KEY
   1. https://www.digicert.com/easy-csr/openssl.htm
5. Convert www_example_com.key to www_example_com.key.pem
   1. openssl rsa -in www_example_com.key -out www_example_com.key.pem
6. Concatinate the all csr file when purchase or generate ssl key
   1. cat www_example_com.crt ASecureServerCA.crt ATrustCA.crt ATrustExternal.crt > concat.crt
7. To verify that the private key and certificate match, use the following commands:
   1. -> openssl x509 -noout -modulus -in concat.crt | openssl md5
   2. -> openssl rsa -noout -modulus -in www_example_com.key.pem | openssl md5.
   3. Both commands should return the same output.
8. Open Apache2 /etc/sites-enabled/default-ssl-conf.
   1. And update these changes
   2. -> /etc/apache2/sites-enabled/default-ssl.conf  
   3. SSLCertificateFile /etc/apache2/ssl/concat.crt
   4. SSLCertificateKeyFile /etc/apache2/ssl/www_example_com.key
      1. ( Also comment on previous  
         1. #SSLCertificateFile     /etc/ssl/certs/ssl-cert-snakeoil.pem
         2. #SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
      2.         )
9. After that run these file :- openssl s_client -connect localhost:443
10. Add Custom Domain on google cloude computer APP Engine -> App engine section -> setting -> Custom Domains (Need verify domains)
    1. Custom domain name -> www.bat11.co.in
    2. SSL support -> my-cert-1
    3. Record type -> CNAME
    4. Data -> ghs.googlehosted.com
    5. Alias ->www
11. After that upload SSL Certification on google cloude computer in -> App engine section -> setting -> SSL Certificates
    1. -> upload concatinated file (concat.crt) on first section
    2. -> upload private key on www_example_com.key.pem

If still domain mapping give you an error that – domain is already mapped with another project.

Then open this url

https://cloud.google.com/appengine/docs/admin-api/reference/rest/v1/apps.domainMappings/create

1. Enter project application id in appsId.
2. Select Override in the overrideStrategy.
3. Enter domain full name in the id like, example.com and www.example.com
4. Press execute.
5. Again check in the App engine’s setting -> custom domain and set the SSL.