是否可以为我的 Google App Engine 应用程序安装/访问 SSL？
由于 App Engine 被如此锁定，我认为无法设置 SSL 证书来允许信用卡付款。 如果没有这一点，如何在 App Engine 应用程序中安全处理付款？
Since App Engine is so locked down I assume there is no way to setup an SSL certificate to allow credit card payments. In the absence of this, how is it possible to secure handle payments in an App Engine app?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
http://code.google.com/appengine/docs/ java/config/webxml.html#Secure_URLs 表示
可以使用 *.appspot.com 子域名在 appengine-web.xml 文件中进行设置。 谷歌在该页面的开始标签中有一个拼写错误，仅供参考。
对于 Google Apps，您根本无法使用 HTTPS，但对于 appspot，您可以。
至于使用您自己的证书，您不能！ 对于appspot，Google 的证书是
未针对您的网络应用的特定域进行签名，因此它将导致浏览器弹出，但如果接受，页面将加载。
http://code.google.com/appengine/docs/java/config/webxml.html#Secure_URLs says that
can be set in your appengine-web.xml file with *.appspot.com subdommains. Google had a typo in their opening tag on that page, just FYI.
For Google Apps you can't use HTTPS at all, but for appspot you can.
As far as using your own cert, you can't! For appspot, Google's cert is
not signed for your web-app's specific domain so it will cause a browser pop-up, but if accepted the page will load.
截至今天，App Engine 在您自己的域上支持 SSL。 看：
https://developers.google.com/appengine/docs/ssl
请注意，两个选择。 较贵的（VIP - 每月 99 美元）适用于所有浏览器，而较便宜的（SNI - 每月 9 美元）不适用于某些版本。 看这里：
您还
可以使用例如 Cloudflare.com 来前置您的应用程序并提供 SSL。 目前，这是到 Cloudflare 的 HTTPS，然后是到 App Engine 的普通 HTTP。 这将防止任何偷渡式黑客攻击，但如果攻击者以某种方式进入 CF 和 GAE 之间，则可以进行拦截。 该技术描述如下：
http://blorn.com/post/20185054195 /ssl-for-your-domain-on-google-app-engine
As of today, App Engine supports SSL on your own domain. See:
https://developers.google.com/appengine/docs/ssl
Note that there are two options. The more expensive (VIP - $99 per month) will work with all browsers, whereas the cheaper (SNI - $9 per month) doesn't work on some variations. See here:
http://en.wikipedia.org/wiki/Server_Name_Indication#Support
You can also use e.g. Cloudflare.com to front your app and provide SSL. Currently this is HTTPS to Cloudflare and then normal HTTP to App Engine. This will protect from any drive-by hacks but would be possible to intercept should an attacker somehow get between CF and GAE. This technique is described here:
http://blorn.com/post/20185054195/ssl-for-your-domain-on-google-app-engine