google-app-engine


CA/Root/SSL Certificates in Go - Too Old?


I'm doing a request for a reverse-geocode to Google from an AppEngine application (which would use URL Fetch to make the request) and it's failing in my local development environment:
*url.Error Get https://maps.googleapis.com/maps/api/geocode/json?key=APIKEY&latlng=25.5636006%!C(MISSING)-81.103772: API error 6 (urlfetch: SSL_CERTIFICATE_ERROR): [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)
However, the same call works under Go outside of AppEngine and directly in the browser.
There is only one SSL asset of interest that come with the AppEngine:
~/go_appengine$ find ./ -name "*.pem"
./lib/requests/requests/cacert.pem
./lib/docker/docker/tests/unit/testdata/certs/ca.pem
./lib/docker/docker/tests/unit/testdata/certs/key.pem
./lib/docker/docker/tests/unit/testdata/certs/cert.pem
./lib/docker/docker/tests/testdata/certs/ca.pem
./lib/docker/docker/tests/testdata/certs/key.pem
./lib/docker/docker/tests/testdata/certs/cert.pem
Google uses "GeoTrust Global CA" to sign their certificates (at least the one used by their maps API). The cacert.pem that comes in AppEngine has the same certificate as my system.
I did this on a Mac a couple of months ago and it worked. I'm now using Ubuntu 16.04 . I don't think this is a domain-name mismatch since it only breaks within AppEngine.
I'm a little stumped. Can anyone help me find what I'm missing?
Thanks.

Related Links

Google App Engine + Validation
GQL Random Record [duplicate]
AppEngine entity modeling - minimizing entity groups and achieving atomic cascading update/delete
What does _ah mean in Google App Engine?
Spring Roo with GAE error on most basic tests
Running a web crawler for selected sites on google app engine?
Many-to-many relationship modeling in google app engine
Appengine: ClassCastException in query with string of leng
How to integrate user quotas?
Restlet that works on localhost throws NullPointerException when deployed on GAE
No module named Crypto.Cipher on local mac AppEngine
Should I use a GZIP compression middleware or not?
AppEngine vs. sendmail space problem
nosetests 'cannot import name mkdir'
What is the benefit / usage of a AppEngine remote procedure call
How use AppEngine's Datastore Admin: Copy to Another App Feature

Categories

HOME
google-app-engine
scikit-learn
rsa
hessian
jwplayer
nuget
pdfbox
hugo
regular-language
tvos
spin
google-schemas
renjin
altera
modbus-tcp
null-pointer
dreamweaver
selinux
breadth-first-search
visual-glitch
blade
imagemap
question2answer
easeljs
event-store
comparator
slidetoggle
amazon-quicksight
fractions
rpgle
paperjs
google-cast
batching
apic
salesforce-communities
xdocreport
loading
google-data-api
opensmpp
p4merge
unordered-map
magento-1.9.3
vaadin-charts
uiimage
phpdbg
jide
getchar
builder
wcftestclient
static-cast
wpas
gameplay-kit
objectscript
restore
juice-ui
cudd
centrifuge
async.js
respondcms
php-socket
hadoop-partitioning
httpruntime.cache
dynatree
forwarding
pax-exam
iced-coffeescript
finalbuilder
google-refine
j-security-check
dbaccess
sql-scripts
jqmodal
synapse
android-audiorecord
scriptaculous
jammer
unit-of-work
rolify
workitem
time.h
dolby-audio-api
actiondispatch
virtual-pc
bjyauthorize
booksleeve
android-loadermanager
objectquery
kqueue
expression-blend-4
jquery-tools
saxparseexception
promotion-code
quotation-marks
facebook-iframe
maven-1
addchild
scrollbars
nstokenfield
purepdf
dsl-tools
asynchronous-wcf-call
sifr3
business-model
information-management
change-management

Resources

Encrypt Message