URL 3错误“SSL:错误的签名类型”

v1uwarro  于 2022-12-19  发布在  其他
关注(0)|答案(4)|浏览(233)

当我从Ubuntu服务器运行python 3.8.5中的以下代码时:

import urllib3
import certifi
url = "https://www.website.com"
http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED', ca_certs=certifi.where())
content = http.request("GET", url, preload_content=False).read()

出现以下错误:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 665, in urlopen
    httplib_response = self._make_request(
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 376, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 996, in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py", line 366, in connect
    self.sock = ssl_wrap_socket(
  File "/usr/lib/python3/dist-packages/urllib3/util/ssl_.py", line 370, in ssl_wrap_socket
    return context.wrap_socket(sock, server_hostname=server_hostname)
  File "/usr/lib/python3.8/ssl.py", line 500, in wrap_socket
    return self.sslsocket_class._create(
  File "/usr/lib/python3.8/ssl.py", line 1040, in _create
    self.do_handshake()
  File "/usr/lib/python3.8/ssl.py", line 1309, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:1123)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "MyFile.py", line 46, in <module>
    content = urllib3.PoolManager().request("GET", url)
  File "/usr/lib/python3/dist-packages/urllib3/request.py", line 75, in request
    return self.request_encode_url(
  File "/usr/lib/python3/dist-packages/urllib3/request.py", line 97, in request_encode_url
    return self.urlopen(method, url, **extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/poolmanager.py", line 330, in urlopen
    response = conn.urlopen(method, u.request_uri, **kw)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 747, in urlopen
    return self.urlopen(
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 747, in urlopen
    return self.urlopen(
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 747, in urlopen
    return self.urlopen(
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py", line 719, in urlopen
    retries = retries.increment(
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py", line 436, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='www.website.com', port=443): Max retries exceeded with url: /path/to/web/page.html (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:1123)')))

系统将随着我使用的所有库而更新
在我的Windows 10 PC上运行相同的代码不会导致任何错误
我错过了什么?

oalqel3c

oalqel3c1#

您还可以继续使用带有以下代码的请求(灵感来自您的答案和请求文档):

import ssl
import requests
import urllib3

class SslOldHttpAdapter(requests.adapters.HTTPAdapter):
    def init_poolmanager(self, connections, maxsize, block=False):
        ctx = ssl.create_default_context()
        ctx.set_ciphers('DEFAULT@SECLEVEL=1')

        self.poolmanager = urllib3.poolmanager.PoolManager(
            ssl_version=ssl.PROTOCOL_TLS,
            ssl_context=ctx)

url = "https://www.website.com"
s = requests.Session()
s.mount(url, SslOldHttpAdapter())
r = s.get(url, headers=headers)
xghobddn

xghobddn2#

尝试禁用系统代理

proxies = {"http": None, "https": None}
q3qa4bjr

q3qa4bjr3#

我自己回答这个GitHub问题:https://github.com/psf/requests/issues/4775
我用下面的代码解决了这个问题:

import urllib3
url = "https://www.website.com"

ctx = ssl.create_default_context()
ctx.set_ciphers('DEFAULT@SECLEVEL=1')
http = urllib3.PoolManager(
   ssl_version=ssl.PROTOCOL_TLS,
   ssl_context=ctx)
content = http.request("GET", url, preload_content=False).read()
iaqfqrcu

iaqfqrcu4#

上面关于创建一个SECLEVEL=1的新上下文的答案在Windows上的Python 3.11.1中不适用(使用OpenSSL 1.1.1q 5 Jul 2022)。
但这(由Python - requests.exceptions.SSLError - dh key too small解释)是有效的:

import requests
requests.packages.urllib3.util.ssl_.DEFAULT_CIPHERS = 'DEFAULT@SECLEVEL=1'
r = requests.get('https://www.billboard-japan.com')
print(r.status_code)

相关问题