Question

我正在尝试通过cron作业执行CURL，托管是GoDaddy的共享linux托管。当我从浏览器URL执行脚本时，它可以工作，但不能通过cron作业工作。

以下错误：

curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

请注意： GET请求工作正常，仅与POST请求有关，我尝试了不同的解决方案，但问题是为什么它对GET有用，而不仅仅是POST。当我通过浏览器URL执行脚本时，它可以工作，但只能通过cron作业发出。

以下是我的CURL代码

$postData = array(
    "email" => "login",
    "password" => "password",
);

$headers = array(
   "Content-Type: application/json"
);

$ch=curl_init();
curl_setopt($ch,CURLOPT_URL,'https://reqres.in/api/login');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($postData));
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,2);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_VERBOSE, 1);
curl_setopt ($ch, CURLOPT_HTTPPROXYTUNNEL, TRUE);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

$result = curl_exec ($ch);

if (empty($result)){
    $return = "<hr><br>\n";
    $return .= 'Errors: ' . curl_errno($ch) . ' ' . curl_error($ch) . '<br><br>';
    $return .= "<hr><br>\n";
}
else{
    $return = $result;
}
print $result;
curl_close ($ch);

请提出建议。

Answer 1

在处理对启用SSL的端点的curl请求时，如果curl请求中包含专门针对ssl连接的选项，那么您将获得更大的成功。下面的简单函数使用cacert.pem和其他ssl特定选项

function curl( $url=NULL, $options=NULL ){
    $cacert='c:/wwwroot/cacert.pem';
    $vbh = fopen('php://temp', 'w+');

    $res=array(
        'response'  =>  NULL,
        'info'      =>  array( 'http_code' => 400 ),
        'headers'   =>  NULL,
        'errors'    =>  NULL
    );
    if( is_null( $url ) ) return (object)$res;

    session_write_close();

    /* Initialise curl request object */
    $curl=curl_init();
    if( parse_url( $url,PHP_URL_SCHEME )=='https' ){
        curl_setopt( $curl, CURLOPT_SSL_VERIFYPEER, true );
        curl_setopt( $curl, CURLOPT_SSL_VERIFYHOST, 2 );
        curl_setopt( $curl, CURLOPT_CAINFO, $cacert );
    }

    /* Define standard options */
    curl_setopt( $curl, CURLOPT_URL,trim( $url ) );
    curl_setopt( $curl, CURLOPT_AUTOREFERER, true );
    curl_setopt( $curl, CURLOPT_FOLLOWLOCATION, true );
    curl_setopt( $curl, CURLOPT_FAILONERROR, true );
    curl_setopt( $curl, CURLOPT_HEADER, false );
    curl_setopt( $curl, CURLINFO_HEADER_OUT, false );
    curl_setopt( $curl, CURLOPT_RETURNTRANSFER, true );
    curl_setopt( $curl, CURLOPT_BINARYTRANSFER, true );
    curl_setopt( $curl, CURLOPT_CONNECTTIMEOUT, 20 );
    curl_setopt( $curl, CURLOPT_TIMEOUT, 60 );
    curl_setopt( $curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36' );
    curl_setopt( $curl, CURLOPT_MAXREDIRS, 10 );
    curl_setopt( $curl, CURLOPT_ENCODING, '' );

    curl_setopt( $curl, CURLOPT_VERBOSE, true );
    curl_setopt( $curl, CURLOPT_NOPROGRESS, true );
    curl_setopt( $curl, CURLOPT_STDERR, $vbh );

    /* Assign runtime parameters as options */
    if( isset( $options ) && is_array( $options ) ){
        foreach( $options as $param => $value ) curl_setopt( $curl, $param, $value );
    }

    /* Execute the request and store responses */
    $res=(object)array(
        'response'  =>  curl_exec( $curl ),
        'info'      =>  (object)curl_getinfo( $curl ),
        'errors'    =>  curl_error( $curl )
    );
    rewind( $vbh );
    $res->verbose=stream_get_contents( $vbh );
    fclose( $vbh );
    curl_close( $curl );
    return $res;
}

/* configure the request */
$data = array(
    'email'     => 'peter@klaven',
    'password'  => 'cityslicka'
);

/* the target endpoint */
$url='https://reqres.in/api/login';

$config=array(
    CURLOPT_POST        =>  true,
    CURLOPT_POSTFIELDS  =>  json_encode( $data ),
    CURLOPT_HTTPHEADER  =>  array('Content-Type: application/json')
);
/* make the request */
$results=curl( $url, $config );
if( $results->info->http_code==200 ){
    printf('<pre>%s</pre>',print_r( $results, true ));
}

来自响应对象的一些信息-尤其是verbose的详细信息〜完整的响应包括〜表示成功的令牌〜{"token":"QpwL5tke4Pnpja7X"}！

* TCP_NODELAY set
* Connected to reqres.in (104.27.134.11) port 443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
  CAfile: c:/wwwroot/cacert.pem
  CApath: none
* SSL connection using TLSv1.2 / ECDHE-ECDSA-CHACHA20-POLY1305
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: OU=Domain Control Validated; OU=PositiveSSL Multi-Domain; CN=sni96286.cloudflaressl.com
*  start date: Jan 23 00:00:00 2019 GMT
*  expire date: Aug  1 23:59:59 2019 GMT
*  subjectAltName: host "reqres.in" matched cert's "reqres.in"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=COMODO CA Limited; CN=COMODO ECC Domain Validation Secure Server CA 2
*  SSL certificate verify ok.

GET请求有效，仅在cron作业中使用CURL的POST请求未执行

1 个答案: