Yi amfani da mahallin TLS daban don wakili da gidan yanar gizo na urllib3

Saka takardar shaidar abokin ciniki ta HTTPS proxy cikin proxy_ssl_context, ka bar amanar makoma da duk wani asalin abokin ciniki na makoma a kan ssl_context.

import ssl
import urllib3

proxy_tls = ssl.create_default_context(cafile='proxy-roots.pem')
proxy_tls.load_cert_chain('proxy-client.pem', 'proxy-client.key')
origin_tls = ssl.create_default_context()

with urllib3.ProxyManager(
    'https://proxy.example:8443',
    proxy_ssl_context=proxy_tls,
    ssl_context=origin_tls,
    timeout=urllib3.Timeout(connect=5, read=15),
) as http:
    response = http.request('GET', 'https://service.example/data')

Yi amfani da ainihin fayilolin da aka amince. proxy-roots.pem yana tabbatar da mai shiga tsakani; proxy-client.pem da maballinsa na sirri masu dacewa suna gane wannan abokin ciniki ga wancan mai shiga tsakani. origin_tls yana kiyaye manufar amana ta daban ta makoma.

Tsarin https na adireshin proxy yana da muhimmanci ga wannan musayar TLS ta farko. Don manufa ta HTTPS, urllib3 sannan yana aika CONNECT cikin zaman TLS na waje kuma yana yin TLS na gidan yanar gizo ta hanyar rami.

Idan gidan yanar gizon kuma yana bukatar takardar shaidar abokin ciniki, sanya ta a kan origin_tls. Sake amfani da asalin proxy a can zai tabbatar da wata hanyar hadi daban.

Proxy na HTTP na yau da kullum da ke dauke da HTTPS ba shi da musafaha na TLS na waje. Karin HTTP 407 shima daban yake: bayar da takardar shaidar abokin ciniki ba ya samar da bayanan sunan mai amfani/kalmar sirri.

Labarai masu alaƙa