Call to AppWrite endpoint does not verify HTTPS certificate

[cellerich]

Just noticed while using the AppWrite Phyton module in a Jupyter Notebook that I get a warning:

InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings

I guess would be easy to fix with this statement before urllib3 is used:

import certifi
import urllib3
http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED',ca_certs=certifi.where())

[eldadfux]

@cellerich please share the Appwrite SDK code you are using.

[cellerich]

Setup:

• I run my own copy of AppWrite in a Kubernetes cluster
• trying stuff from within a Jupyter Notebook (Python) on how to access the database
• appwrite version in Python is: appwrite==0.0.5

Code:

from appwrite.client import Client 
from appwrite.services.storage import Storage

client = Client()

client.set_project('5f1a86f2bfe96') # my project ID 
client.set_key('xxxxxxxxxxxxxxxxxxx') # my secret API key )
client.set_endpoint('https://aw.example.com/v1')  # my appwrite endpoint

storage = Storage(client)
filelist = storage.list_files()

Error message I get from Jupyter

C:\Users\msp\AppData\Local\Continuum\anaconda3\lib\site-packages\urllib3\connectionpool.py:847: InsecureRequestWarning:
Unverified HTTPS request is being made. Adding certificate verification is strongly advised. 
See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
InsecureRequestWarning)

[eldadfux]

@cellerich, you can try and use client. set_self_signed() method to allow your Appwrite SDK to send requests with a self-signed SSL certificate.

If you're running Appwrite on a server with a public IP and a public suffix domain, Appwrite will auto-generate an SSL certificate for you. Just make sure your domain is set properly in your Appwrite container ENV vars, and restart your Appwrite container to generate your certificate.

[cellerich]

@eldadfux, that did the trick!

Thanks a lot for your work on AppWrite. I haven't done much yet, but I love it so far.
I know about the auto-generated SSL but in my case I'm running AppWrite in a small Kubernetes cluster together with NodeRed and OpenFaas and gave the "certificate handling" to my reverse proxy Traefik v2.

Again, thank you!

[eldadfux]

That's great to hear @cellerich. If you'll have some time during the weekend, I'd love to hear your feedback about our upcoming built-in cloud functions for Appwrite, and learn if that might be useful for your use case instead of using Appwrite in combination with OpenFaas.

You can learn more about Appwrite cloud function on this links:
appwrite/appwrite#307
https://github.com/appwrite/appwrite/blob/master/docs/specs/functions.drawio.svg

I can share more info on our Discord channel: https://appwrite.io/discord