Did you also create the symlink? That’s a very important part.
To get the certificate permanently in place, you want to amend the app.yml file add or modify a hooks section to something like the following:
hooks:
before_code:
- file:
path: /etc/ssl/certs/custom-root.crt
chmod: 644
contents: |
-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----
- exec:
cmd:
- bash -c "ln -s custom-root.crt /etc/ssl/certs/$(openssl x509 -hash -noout -in /etc/ssl/certs/custom-root.crt).0"
Ah, likely nothing we can add into the app.yml file to fix that.