Sebenzisa izimo ze-TLS ezihlukene ze-proxy ne-website ye-urllib3

Layisha isitifiketi somsebenzisi se-HTTPS proxy ku-proxy_ssl_context, ushiya ukuthembela kwendawo kanye nobunikazi bomsebenzisi bendawo ku-ssl_context.

import ssl
import urllib3

proxy_tls = ssl.create_default_context(cafile='proxy-roots.pem')
proxy_tls.load_cert_chain('proxy-client.pem', 'proxy-client.key')
origin_tls = ssl.create_default_context()

with urllib3.ProxyManager(
    'https://proxy.example:8443',
    proxy_ssl_context=proxy_tls,
    ssl_context=origin_tls,
    timeout=urllib3.Timeout(connect=5, read=15),
) as http:
    response = http.request('GET', 'https://service.example/data')

Sebenzisa amafayela agunyaziwe ngempela. I-proxy-roots.pem iqinisekisa umlamuli; i-proxy-client.pem nokhiye wayo oyimfihlo ohambisanayo bakhomba le klayenti kulowo mlamuli. I-origin_tls igcina inqubomgomo yokuthembela ehlukile yendawo.

Uhlelo lwe-https lwe-URL ye-proxy lubalulekile kulokho kushintshisana kokuqala kwe-TLS. Kunhloso ye-HTTPS, i-urllib3 ibe isithumela i-CONNECT ngaphakathi kwesikhathi se-TLS sangaphandle futhi yenza i-TLS yewebhusayithi ngomhubhe.

Uma i-website nayo idinga isitifiketi somsebenzisi, sibeke ku-origin_tls. Ukusebenzisa kabusha ubunikazi be-proxy lapho kuzoqinisekisa uxhumano oluhlukile.

I-proxy ye-HTTP evamile ethwala i-HTTPS ayinakho ukuxhawulana kwe-TLS kwangaphandle. I-HTTP 407 eyengeziwe nayo ihlukile: ukunikeza isitifiketi somsebenzisi akunikezi ubufakazi begama lomsebenzisi/iphasiwedi.

Izihloko ezihlobene