Python Requests: ama-CA bundle akhonelwa ku-verify, hhayi ku-cert
Beka i-CA trust material evunyelwe ku-configuration yokuqinisekisa, hhayi ukuthatha iphutha le-certificate njengesicelo se-client private key.
Uzakwenu ukunika i-CA certificate yombutho. I-Requests ineparamitha ebizwa ngokuthi cert. Amagama abukeka njengombhangqwana, kodwa aphendula imibuzo ehlukene.
| Isilungiselelo | Inhloso |
|---|---|
verify | Ikhetha i-trust material esetshenziselwa ukuqinisekisa uhlangothi olunye |
cert | Iveza isitifiketi sekliyenti, kanye nokhiye wayo oyimfihlo, lapho kudingeka ukuqinisekiswa kwekliyenti |
Nge-CA yokungena evunyelwe, umsebenzi we-Requests ungakhetha i-CA bundle ehlosiwe:
response = requests.get(
'https://example.com/',
proxies=routes,
verify='/path/to/approved-ca-bundle.pem',
timeout=15,
)Lapha routes iwumephu yeproxisi ekhona yohlelo. Indlela kufanele isho i-trust bundle efanele futhi efundekayo yaleli kliyenti. Akusona isitifiketi sewebhusayithi esilandiwe esikhethwe nje ngoba ukuxhumana kuhlulekile.
Ukuguquguquka kwemvelo REQUESTS_CA_BUNDLE kungenye into yokuthembela esekelwayo. Hlola indlela yokuthumela yangempela uma ibonakala ingasebenzi; imisebenzi yezicelo ezilungisiwe nezilungiselelo ezicacile zingashintsha indlela okuhlanganiswa ngayo ukulungiselelwa kwemvelo.
Akufanele udinge ukhiye oyimfihlo we-CA
Isitifiketi se-CA esidlangalaleni yiso esidingwa yikliyenti ukuze ibone umkhiphi ovunyelwe. Ukhiye wayo oyimfihlo wokusayina uyimfihlo enamandla yomunye uhlangothi. Akufanele isatshalaliswe kubasebenzisi bohlelo njengengxenye yokulungisa ukwethembela kweproxisi okujwayelekile.
Isitifiketi sekliyenti singase sifunwe indawo ethile noma obunye ubudlelwano be-TLS obulungiselelwe ngokwehlukana. Lokho kuyisidingo esihlukile, hhayi into ecatshangwayo kulo lonke iphutha lokuqinisekisa isitifiketi.
Lapho kuvela iphutha elilandelayo, shono umsebenzi: ukulayisha ifayela le-CA, ukuqinisekisa isitifiketi sohlangothi olunye, noma ukuveza ubunikazi bekliyenti. Ukuhambisa ifayela phakathi kwe-verify ne-cert kuze kushintshe umyalezo akuyona indlela ethembekile yokukhetha indima yalo.