Knowledge is Power

How to Use Google Managed Certificates on a Google Cloud Load Balancer

Aa stress-free way to manage HTTPS certificates in the cloud

Leonard B. Butz
Jul 22 · 4 min read
Image for post
Image for post
Photo by C Dustin on Unsplash

What you need:

  • Load Balancer that you want to have HTTPS enabled
  • Some workload, backend or website that should receive HTTPS traffic
  • A domain that you want to secure. The DNS entry for the domain must already be set up to point to the Load Balancer's external IP address.

Steps to a managed certificate:

  1. Please read through the whole article before you start. Just to make sure that you understand all steps so that you don’t end up with a broken domain, website, or Load Balancer.
    The procedure is normally risk-free, but some down-time of your services is to be expected.
  2. Open the Load Balancer that you want to secure and click the Edit button
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post
Image for post

Troubleshooting

My certificate never reaches state ACTIVE

Possible issues from my personal experience:

  • The DNS entries for the domain that should be secured are not propagated through the internet yet. Check the DNS entries for your domain by using an online DNS checker tool like this one.

I get ERR_SSL_VERSION_CIPHER_MISMATCH when I access the secured domain via browser

Be careful here. Many solutions on the internet for this problem propose to change the SSL policy for the Load Balancer from TLS 1.0 to TLS 1.2. Even though this works, this is not the correct solution.

Other issues

Have a look at the official troubleshooting guide.

The Startup

Medium's largest active publication, followed by +730K people. Follow to join our community.

Leonard B. Butz

Written by

I quit my job, sold all my stuff, and moved to Reykjavík — Personal Experiences, Iceland, Technology

The Startup

Medium's largest active publication, followed by +730K people. Follow to join our community.

Leonard B. Butz

Written by

I quit my job, sold all my stuff, and moved to Reykjavík — Personal Experiences, Iceland, Technology

The Startup

Medium's largest active publication, followed by +730K people. Follow to join our community.

Medium is an open platform where 170 million readers come to find insightful and dynamic thinking. Here, expert and undiscovered voices alike dive into the heart of any topic and bring new ideas to the surface. Learn more

Follow the writers, publications, and topics that matter to you, and you’ll see them on your homepage and in your inbox. Explore

If you have a story to tell, knowledge to share, or a perspective to offer — welcome home. It’s easy and free to post your thinking on any topic. Write on Medium

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store