networking-py: add HTTPS test and CA certificates

Signed-off-by: danbugs <danilochiarlone@gmail.com>

Author: danbugs

examples/networking-py/Dockerfile

@@ -8,10 +8,11 @@ FROM ${BASE} AS rootfs
 COPY http_get.py /http_get.py
 COPY echo_server.py /echo_server.py
 COPY urllib_get.py /urllib_get.py
+COPY https_test.py /https_test.py
 
 # --- CPIO rootfs builder ---
 FROM alpine:3.20 AS cpio
-RUN apk add --no-cache cpio findutils
+RUN apk add --no-cache cpio findutils ca-certificates
 COPY --from=rootfs / /rootfs/
 
 # DNS configuration for glibc's getaddrinfo (added in the cpio stage
@@ -22,4 +23,9 @@ RUN mkdir -p /rootfs/etc && \
     echo "hosts: files dns" > /rootfs/etc/nsswitch.conf && \
     echo "127.0.0.1 localhost" > /rootfs/etc/hosts
 
+# CA certificates for TLS
+RUN mkdir -p /rootfs/etc/ssl/certs /rootfs/usr/lib/ssl && \
+    cp /etc/ssl/certs/ca-certificates.crt /rootfs/etc/ssl/certs/ && \
+    ln -sf /etc/ssl/certs/ca-certificates.crt /rootfs/usr/lib/ssl/cert.pem
+
 RUN cd /rootfs && find . | cpio -o -H newc > /output.cpio 2>/dev/null

examples/networking-py/Justfile

@@ -22,6 +22,10 @@ run-get:
 run-urllib:
     hyperlight-unikraft {{kernel}} --initrd {{initrd}} --memory {{memory}} -- /urllib_get.py
 
+# Run HTTPS (TLS) test
+run-https:
+    hyperlight-unikraft {{kernel}} --initrd {{initrd}} --memory {{memory}} -- /https_test.py
+
 # Run echo server
 run-echo:
     hyperlight-unikraft {{kernel}} --initrd {{initrd}} --memory {{memory}} -- /echo_server.py

examples/networking-py/https_test.py

@@ -0,0 +1,11 @@
+import urllib.request
+import sys
+
+print("Testing HTTPS (TLS) through proxied sockets...")
+try:
+    r = urllib.request.urlopen('https://api.github.com', timeout=10)
+    print(f"Status: {r.status}")
+    print("SUCCESS: HTTPS works!")
+except Exception as e:
+    print(f"FAILED: {e}")
+    sys.exit(1)