Google App Engine SSL error “DNS records could not be found” even though custom domain is working

Question

I pointed a new custom domain to a Google App Engine Standard Environment project and edited the DNS records per Google\'s instructions, and it seems to be redirected proper

Answer 1

Igor Kromin's article outlined the exact same issue that I was having.

I too was / am using CloudFLare's free solution. For some reason Google App Engine didn't immediately recognize the TXT record, so I went ahead and did the alternative CNAME based mapping. Apparently, when you do this, the Cloudflare CNAME flattening kicks in, and will do something to the records. When we try to verify domain ownership, it works though. But later, when the APP Engine's Google managed auto-renewing agent looks at the records, somehow they don't match up!

Solution is to simply keep trying to verify the TXT record which Cloudflare doesn't modify, and then it works out.

Tip: If you're trying to verify a subdomain to app engine like api.yourdomain.com, your TXT record needs to be with the api domain name, not at @ like normal.

Answer 2

In my case I accidentally created a C record for the naked domain (@) in addition to the www. subdomain which should exclusively have it. As there can't be a TXT record on the same level as a C record, the verification failed. Totally my bad but maybe anyone else is also having such issues.

Answer 3

Ok for anyone still stuck on this:

1. Go to https://console.cloud.google.com/appengine/

2. Select Settings

3. Add custom domain. select your domain name. (if you have not verified your account before this then do that first)

4. Select the domain you want to add

5. you will get a list of things that you need to create in your hosting acount something like this:

6. if you bought your domain name in GoDaddy then you will have to go into your Godaddy account -> YourDomain.com -> DNS -> Manage Zones. Then enter it there thus:

7. go back to app engine and click verify.

8. Enjoy!

Answer 4

• Go To "App Engine" -> "Settings" -> "Custom Domains"
• Click on "Add Custom Domain"
• Choose the Domain You Want

• You'll end up with something similar that originally brought you to this solution:

  App Engine Settings With Domain Name SSL Certificate Not Working

---

• Go to your Domain Registrar (assuming you bought your domain through Google) https://domains.google.com/m/registrar/
• Click on the domain name you'd like to resolve.
• Go to "DNS" -> "Custom resource records" at the bottom

• Fill in the info with the appropriately matching IPv4/IPv6 addresses:

  Custom Resource Records Where You'll Copy Over Info From App Engine

** Precaution: This is for domain names bought through Google's registrar. If you bought yours elsewhere then the steps may differ.