Isticmaal goobo TLS oo gooni ah proxy-ga iyo website-ka urllib3

Ku shub shahaadada macmiilka ee HTTPS proxy-ga proxy_ssl_context, adigoo uga tagaya kalsoonida goobta iyo aqoonsiga macmiilka goobta ssl_context.

import ssl
import urllib3

proxy_tls = ssl.create_default_context(cafile='proxy-roots.pem')
proxy_tls.load_cert_chain('proxy-client.pem', 'proxy-client.key')
origin_tls = ssl.create_default_context()

with urllib3.ProxyManager(
    'https://proxy.example:8443',
    proxy_ssl_context=proxy_tls,
    ssl_context=origin_tls,
    timeout=urllib3.Timeout(connect=5, read=15),
) as http:
    response = http.request('GET', 'https://service.example/data')

Isticmaal faylasha la ansixiyay dhab ahaan. proxy-roots.pem waxay xaqiijisaa dhexdhexaadiyaha; proxy-client.pem iyo fureheeda gaarka ah ee u dhigma waxay macmiilkan u aqoonsadaan dhexdhexaadiyahaas. origin_tls waxay ilaalisaa siyaasadda kalsoonida goobta ee gooni ah.

Qaabka https ee URL-ka proxy-ga ayaa lagama maarmaan u ah isdhaafsiga TLS ee koowaadkaas. Bartilmaameed HTTPS ah, urllib3 wuxuu markaas CONNECT u diraa gudaha fadhiga TLS-ka dibadda wuxuuna sameeyaa TLS-ka website-ka iyada oo loo marayo tunnel-ka.

Haddii website-ku sidoo kale u baahdo shahaado macmiil, ku dheji origin_tls. Dib u isticmaalka aqoonsiga proxy-ga halkaas waxay xaqiijin lahayd xiriir kale.

Proxy HTTP caadi ah oo qaada HTTPS ma laha gacan-qaad TLS dibadda ah. HTTP 407 dheeraad ah sidoo kale waa gooni: bixinta shahaado macmiil ma bixiso aqoonsiga magaca isticmaalaha/furaha.

Maqaallo la xiriira