Question

我正在尝试从端点请求数据，我可以使用curl -k --key a-key.pem --cert a.pem https://<endpoint>

但是当我使用python3进行操作时，每次都会失败

示例：

卷曲：

root@control-plane-0:~# curl -k --key /etc/kubernetes/a-key.pem --cert /etc/kubernetes/a.pem https://127.0.0.1:6443/api/
{
  "kind": "APIVersions",
  "versions": [
    "v1"
  ],
  "serverAddressByClientCIDRs": [
    {
      "clientCIDR": "0.0.0.0/0",
      "serverAddress": "10.0.31.2:6443"
    }
  ]
}

使用python：（代码）：

from flask import Flask, render_template
import requests
from ast import literal_eval



app = Flask(__name__)


@app.route('/metrics')
def metrics():
   data = requests.get("https://127.0.0.1:6443/api/, cert=('/etc/kubernetes/a.pem', '/etc/kubernetes/a-key.pem'))

   print(data)
   return data

if __name__ == '__main__':
   app.run(host='0.0.0.0',port="5001", debug=True)

结果：

    r = adapter.send(request, **kwargs)
  File "/usr/local/lib/python3.9/site-packages/requests/adapters.py", line 514, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='127.0.0.1', port=6443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1121)')))

请求库是否有问题？我找不到使它工作的方法

Answer 1

您已使用验证证书

openssl verify -CAfile your-cert.pm

我遇到了同样的问题，并通过使用全链证书解决了。请查看您的证书包含全链（root，intermediate）。您可以尝试

import requests
test=request.get("url",verify="certificate-with-path")

带有cert和密钥“ verified fail”的Python3请求

1 个答案: