feat: Support for custom CA root certificates in Appsmith fat container

[sharat87]

Problem description at #13202.

How to use solution

Problem: We have a custom CA root certificate that we want to install into Appsmith's container environment.

To do so, create a ca-certs folder under stacks, and place the ca certificate file in it. It your file ends with a .pem extension, please rename it to .crt extension, since Ubuntu only picks up files with .crt extension for this purpose.

Restart the Appsmith container and the new root cert should've been installed and setup.

To remove it, just remove the cert file and restart.

How to test solution

1. Get mitmproxy with brew install mitmproxy (for macOS).

2. Start mitmproxy with the command mitmweb --listen-port 9020 --web-port 9021. This will open a browser tab with the proxied requests. Keep this running for the remainder of this test.

3. Start a new Appsmith Docker container with the command:

   docker run --name ace -p 8001:80 -v ~/appsmith-stacks-14207:/appsmith-stacks -d -e HTTPS_PROXY=http://host.docker.internal:9020 -e HTTP_PROXY=http://host.docker.internal:9020 appsmith/appsmith-ce:release

4. Now login to Appsmith at http://localhost:8001, signup, create an app, create an API action, and use httpbun.com/get as the query.

5. Run this query, and see the cert validation failure error. This request should also show up in the proxy web interface, but in an incomplete/incorrect way.

6. Now let's copy the custom CA root cert of mitmproxy. Run:

   mkdir -v ~/appsmith-stacks-14207/ca-certs && cp -v ~/.mitmproxy/mitmproxy-ca-cert.pem ~/appsmith-stacks-14207/ca-certs/mitmproxy-ca-cert.crt
   

7. Restart the container with docker restart ace.

8. Repeat step 4, but see that the JSON response shows up correctly. This request should also show up with full details in the proxy web interface.

Additional test cases

• Empty ca-certs folder and restart.
• Delete ca-certs folder and restart.
• Check if proxy works for HTTP URLs as well.
• Empty value for HTTPS_PROXY and restart.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated
appsmith	✅ Ready (Inspect)	Visit Preview	Jun 1, 2022 at 3:17AM (UTC)

[github-actions]

Unable to find test scripts. Please add necessary tests to the PR.

[github-actions]

Unable to find test scripts. Please add necessary tests to the PR.

[github-actions]

Unable to find test scripts. Please add necessary tests to the PR.

[github-actions]

Unable to find test scripts. Please add necessary tests to the PR.

[github-actions]

Unable to find test scripts. Please add necessary tests to the PR.