Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Set up TLS proxy for Google Cloud Endpoint APIs

I have been viewing my Google App Engine endpoint APIs in the API explorer (localhost) without issues, now am getting this:

enter image description here

in full it says:

You are exploring an API that is described or served via HTTP instead of HTTPS. This is insecure and may be blocked by your browser. To fix this, set up a TLS proxy for your API. Alternatively, you can tell your browser to allow active content via HTTP at this site (on Chrome, click the shield in the URL bar), but this will not improve security or dismiss this message.

This is one of the API methods I have in my endpoint:

@ApiMethod(
        name = "insert",
        path = "movie",
        httpMethod = ApiMethod.HttpMethod.POST)
public Movie insert(Movie movie) throws UnauthorizedException {
    ...
}

Since I do not know what's causing this all of a sudden, I do not know what else to show.I've tried updating my browsers (Firefox, Opera, Chrome) with no luck.

like image 402
Ojonugwa Jude Ochalifu Avatar asked May 11 '15 18:05

Ojonugwa Jude Ochalifu


People also ask

What is TLS in apigee?

View Apigee X documentation. Transport Layer Security (TLS), whose predecessor is Secure Sockets Layer (SSL), is the standard security technology for establishing an encrypted link between a web server and a web client, such as a browser or an app.

What is SSL proxy GCP?

External SSL Proxy Load Balancing is a reverse proxy load balancer that distributes SSL traffic coming from the internet to virtual machine (VM) instances in your Google Cloud VPC network.


2 Answers

The same problem appeared to me today

For now if you are using chrome you can click on the shield icon on the right of the URL bar and click on something saying load scripts anyway and your API should appear.

Image: http://i.gyazo.com/f16a557c4b53c147f31067029d15c093.png

like image 76
JonathanK Avatar answered Oct 08 '22 01:10

JonathanK


You will likely want to use a browser-based workaround, such as the shield icon on Chrome. This was recently added to address a security vulnerability. Unfortunately, we are unable to do better than this. A colleague suggests that stunnel may be viable for setting up a TLS proxy, if you want to go that route.

like image 36
saiyr Avatar answered Oct 08 '22 01:10

saiyr