在python中使用urllib2庫去訪問一個自簽名的網(wǎng)站時，會出現(xiàn)如下報錯：
urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
出現(xiàn)以上錯誤的原因是因為python的版本問題，在python2.6（含2.6）以下版本中，在訪問HTTPS的網(wǎng)站時，TLS握手期間不會檢查服務(wù)器X509的證書簽名是否是CA的可信任根證書。這種局面在python2.7 3.4 和 3.5版本中得到了修改。
所以，以下代碼在python2.6版本中測試是完全沒有問題的
import json
import urllib
import urllib2
url='https://www.20150509.cn:1559'
def test():
pre_data = [{"client":"local", "tgt":"*", "fun":"test.ping"}]
json_data = json.dumps(pre_data)
header = {"Content-Type":"application/json", "Accept":"application/json", "X-Auth-Token":"b91e7uj86g4f97cc**********b92778ujh4kedf"}
request = urllib2.Request(url, json_data, header)
response = urllib2.urlopen(request)
html = response.read()
print html
if __name__=="__main__":
test()
運行測試
shell> python sa.py
{"return": [{"vm3.salt.com": true, "vm2.salt.com": true, "ph1.salt.com": true, "ph2.salt.com": true, "vm1.salt.com": true, "vm4.salt.com": true, "localhost": true, "vm7.salt.com": true}]}
在python2.7+版本就會報上述錯誤
shell> python sa.py
Traceback (most recent call last):
File "sa.py", line 25, in <module>
test()
File "sa.py", line 17, in test
response = urllib2.urlopen(request)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 154, in urlopen
return opener.open(url, data, timeout)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 431, in open
response = self._open(req, data)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 449, in _open
'_open', req)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 409, in _call_chain
result = func(*args)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 1240, in https_open
context=self._context)
File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 1197, in do_open
raise URLError(err)
urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
解決方法：
import json
import urllib
import urllib2
import ssl #add line 1
ssl._create_default_https_context = ssl._create_unverified_context #add line 2
url='https://www.20150509.cn:1559'
def test():
pre_data = [{"client":"local", "tgt":"*", "fun":"test.ping"}]
json_data = json.dumps(pre_data)
header = {"Content-Type":"application/json", "Accept":"application/json", "X-Auth-Token":"b91e7uj86g4f97cc**********b92778ujh4kedf"}
request = urllib2.Request(url, json_data, header)
response = urllib2.urlopen(request)
html = response.read()
print html
if __name__=="__main__":
test()
