Python Requests: ka'idojin CA suna cikin verify, ba cert ba

Wani abokin aiki ya ba ka takardar shaidar CA ta ƙungiyar. Requests yana ba da siga mai suna cert. Sunayen suna kama da juna, amma suna amsa tambayoyi daban-daban.

Don amintaccen CA na katsewa, aikin Requests na iya zaɓar jerin CA da ake nufi:

response = requests.get(
    'https://example.com/',
    proxies=routes,
    verify='/path/to/approved-ca-bundle.pem',
    timeout=15,
)

A nan routes shine taswirar wakili da ke akwai na aikace-aikacen. Hanyar dole ta ambaci daidaitaccen jerin amincewa da ake iya karantawa ga wannan abokin ciniki. Ba takardar shaidar gidan yanar gizo da aka sauke ba ce da aka zaɓa kawai saboda haɗin ya kasa.

Canjin yanayi REQUESTS_CA_BUNDLE wata hanyar amincewa ce da ake tallafawa. Duba hanyar aikawa ta gaske idan ta bayyana ba ta da tasiri; hanyoyin ayyukan buƙatun da aka shirya da saitunan bayyane na iya canza yadda ake haɗa tsarin yanayi.

Bai kamata ka buƙaci sirrin maɓallin CA ba

Takardar shaidar CA ta jama'a ita ce abin da abokin ciniki ke buƙata don gane mai bayarwa da aka amince da shi. Sirrin maɓallin sa hannu nasa babban sirri ne na wani ɓangare. Bai kamata a rarraba shi ga masu amfani da aikace-aikacen ba a matsayin wani ɓangare na gyaran amincewar wakili na yau da kullum.

Wataƙila wata hanya ta musamman ko wata alaƙar TLS da aka saita daban na iya buƙatar takardar shaidar abokin ciniki. Wannan buƙata ce daban, ba wani abu da aka fahimta daga kowane kuskuren tabbatar da takardar shaida ba.

Lokacin da kuskure na gaba ya bayyana, ambaci aikin: loda fayil ɗin CA, tabbatar da takardar shaidar abokin gaba, ko gabatar da asalin abokin ciniki. Matsar da fayil tsakanin verify da cert har sai saƙon ya canza ba hanya ce mai dogaro ba don zaɓar rawar sa.