Use custom certificate for https request with custom app (or serverless app) with fdk9

[mickel (Mickel Daelmans)]

Hi all,

We’re updating to fdk 9 and are running into an issue that used to work with the previous fdk version. One of our custom apps needs a custom certificate chain to connect to an external (government) API.

This used to work like mentioned here:

Configuring TLS CA Certificate for External API

Hi, I need to use a Mutually Authenticated TLS (mTLS) connection from a Freshdesk serverless application to an external API. If the external API was to use a TLS certificate signed by a self-signed Certificate Authority (CA) (i.e. not signed by one of the globally trusted CAs built into Node.js), what is the best way to provide the Freshdesk serverless application with the certificate for the external API? I’ve assumed that I will need to provide the CA certificate(s) via an Installation Param…

var options = {
  … 
  ca: tlsCaCerts,
  method: 'POST',
  …
}

With tlsCaCerts being a file that I just pack with the rest of the app, and this worked like a charm

With fdk9 we’re refactoring all our requests as documented for the ‘new’ request method that uses the requests.js; but “ca” seems not to be a valid option in the requests.json for the custom app; and after trying a few other things it seems that “ca” isnt a valid attribute at all in requests.json (no tls options seem to be available?), resulting in validation errors on ‘fdk run’.

So, I moved to plan B: Server Method Invocation. I made a server.js file that uses Axios to make the request and try to make it work though that; but I seem to run into a new issue: To use the custom certificate; I need to create an https agent to set the certificate, but the https module seems to be ‘blocked’ by Freshworks:

“For security reasons, Freshworks restricts some of the core modules where https is one of them.”

Custom app supported node modules

Good evening, I was wondering if the node module “https” is supported. I’m working on an integration between Freshservice and an old ticketing system, but when I try to do for example a GET request I recieve a “Certificare has expired” Error. [image] To avoid this error I need an Agent from the “https” module to pass in the call options. new https.Agent({rejectUnauthorized: false}) But when I try to run the code this happens [image] In fact there isn’t a “index.js” file in the https fo…

To make a long story short: is there any way I can include a custom certificate chain to make a https request to an external API?

[mickel (Mickel Daelmans)]

small bump, hopefully someone has some suggestions for this issue …

[mickel (Mickel Daelmans)]

A new month, a new bump… Still looking for a working solution regarding this.