Lo awọn ipo TLS ọtọtọ fun proxy ati oju-iwe ayelujara urllib3

Fi iwe-ẹri alabara ti HTTPS proxy sinu proxy_ssl_context, ki o fi igbẹkẹle ibi-afẹde ati idanimọ alabara ibi-afẹde eyikeyi sori ssl_context.

import ssl
import urllib3

proxy_tls = ssl.create_default_context(cafile='proxy-roots.pem')
proxy_tls.load_cert_chain('proxy-client.pem', 'proxy-client.key')
origin_tls = ssl.create_default_context()

with urllib3.ProxyManager(
    'https://proxy.example:8443',
    proxy_ssl_context=proxy_tls,
    ssl_context=origin_tls,
    timeout=urllib3.Timeout(connect=5, read=15),
) as http:
    response = http.request('GET', 'https://service.example/data')

Lo awọn faili ti a fọwọsi gangan. proxy-roots.pem ṣe ayẹwo alarina; proxy-client.pem ati bọtini ikọkọ ti o baamu n ṣe idanimọ alabara yii fun alarina yẹn. origin_tls n tọju eto imulo igbẹkẹle ọtọtọ ti ibi-afẹde.

Eto https ti URL proxy ṣe pataki fun paṣipaarọ TLS akọkọ yẹn. Fun ibi-afẹde HTTPS, urllib3 yoo ranṣẹ CONNECT ninu ipade TLS ode ati ṣe TLS oju-iwe ayelujara nipasẹ oju-ọna.

Ti oju-iwe ayelujara naa ba nilo iwe-ẹri alabara, fi si origin_tls. Lilo idanimọ proxy lẹẹkansi nibẹ yoo jẹrisi asopọ miiran.

Proxy HTTP lasan ti o gbe HTTPS ko ni ifọwọsi TLS ode. HTTP 407 afikun tun jẹ ọtọtọ: fifun iwe-ẹri alabara ko pese awọn ẹri orukọ olumulo/ọrọ igbaniwọle.

Àwọn àpilẹ̀kọ tó jọra