SSL Certificate Stuck in FAILED_NOT_VISIBLE for App Engine Auto-Generated Domain

[maro_h]

Hello,

I am encountering an issue while setting up HTTPS on a Google Cloud Load Balancer. Despite multiple troubleshooting steps, the SSL certificate remains in the FAILED_NOT_VISIBLE state. Below are the details of my setup and the problem:

Setup Information:

1. Domain:

• An auto-generated App Engine domain.

2. SSL Certificate:

• A Google-managed SSL certificate provisioned for the domain.

3. Certificate Status:

• Status: PROVISIONING

• Domain Status: FAILED_NOT_VISIBLE

4. DNS Check:

• The domain resolves correctly with dig.

• Both HTTP and HTTPS requests return 200 OK.

5. Load Balancer Configuration:

• Configured with a frontend HTTPS proxy, URL map, and App Engine backend.

• Firewall rules allow all incoming traffic.

Problem:

1. The SSL certificate does not transition to ACTIVE.

2. HTTPS requests to the Load Balancer’s IP result in an SSL handshake failure.

Troubleshooting Steps Taken:

1. Regenerated the SSL certificate multiple times.

2. Reconfigured the HTTPS proxy and URL map.

3. Verified that the domain resolves and responds correctly over both HTTP and HTTPS.

4. Confirmed that firewall rules allow all traffic.

5. Reviewed the Google troubleshooting guide for SSL certificates but couldn’t identify the cause.

Question:

Could this issue be related to using an auto-generated App Engine domain? If not, are there additional steps I can take to resolve the FAILED_NOT_VISIBLE status and activate the certificate?

Thank you for your assistance!