python - cURL 查询有效,但 python-request 失败
问题描述
概括
我们在我们的环境中使用自定义 CA。我通过下载 Base64 证书并使用更新信任库将 CA 证书导入信任库update-ca-certificates
。
我能够对我的 REST API 运行 cURL 查询,但是请求库在运行时失败并出现 SSL 错误。
我试过的
我尝试指定库的根 ca 证书文件路径,但得到了同样的错误。如何解决此问题?将验证设置为 false 不是一种选择。
代码运行
作品
curl -X GET https://api.me.com/admin/ -H '授权:令牌 4ae5'
不工作
requests.get(' https://api.me.com/admin/ ', headers={'Authorization': 'Token 4ae5'}, verify='/etc/ssl/certs/root.pem')
Traceback (most recent call last):
File "/usr/local/lib/python3.5/dist-packages/urllib3/connectionpool.py", line 600, in urlopen
chunked=chunked)
File "/usr/local/lib/python3.5/dist-packages/urllib3/connectionpool.py", line 345, in _make_request
self._validate_conn(conn)
File "/usr/local/lib/python3.5/dist-packages/urllib3/connectionpool.py", line 844, in _validate_conn
conn.connect()
File "/usr/local/lib/python3.5/dist-packages/urllib3/connection.py", line 326, in connect
ssl_context=context)
File "/usr/local/lib/python3.5/dist-packages/urllib3/util/ssl_.py", line 325, in ssl_wrap_socket
return context.wrap_socket(sock, server_hostname=server_hostname)
File "/usr/lib/python3.5/ssl.py", line 377, in wrap_socket
_context=self)
File "/usr/lib/python3.5/ssl.py", line 752, in __init__
self.do_handshake()
File "/usr/lib/python3.5/ssl.py", line 988, in do_handshake
self._sslobj.do_handshake()
File "/usr/lib/python3.5/ssl.py", line 633, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:645)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/requests/adapters.py", line 376, in send
timeout=timeout
File "/usr/local/lib/python3.5/dist-packages/urllib3/connectionpool.py", line 630, in urlopen
raise SSLError(e)
requests.packages.urllib3.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:645)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/usr/lib/python3/dist-packages/requests/api.py", line 67, in get
return request('get', url, params=params, **kwargs)
File "/usr/lib/python3/dist-packages/requests/api.py", line 53, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 480, in request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python3/dist-packages/requests/sessions.py", line 588, in send
r = adapter.send(request, **kwargs)
File "/usr/lib/python3/dist-packages/requests/adapters.py", line 447, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:645)
解决方案
... requests.get(..., verify='/etc/ssl/certs/root.pem')
鉴于您对使用update-ca-certificates
它的描述,您似乎使用的是 Debian 或类似的(即 Ubuntu)。在这种情况下,相关路径应该是/etc/ssl/certs/ca-certificates.crt
.
推荐阅读
- c# - 为什么作者在看起来毫无意义的情况下使用 ContinueWith() 和异步方法变体
- c# - 使用 ReactiveUI 时,ComboBox ItemTemplate 不适用于所选项目
- php - 用于 sql 查询的 PHP li 值
- google-bigquery - BigQuery 的独立环境
- spring - spring 数据 cassandra 存储库上的缓慢插入和保存性能
- r - 通过两个不同的键将列合并到数据框
- angularjs - 如何使用 Kendo UI 验证器来验证表单内 AngularJS 组件中的输入
- android - 从通知意图通过锁屏开始活动
- android - 构建 Cordova Android 项目导致“com.android.builder.dexing.DexArchiveMergerException: Unable to merge dex”错误
- r - Jaro-Winkler 的包之间的区别