http：//http：//http：//http：//http：//EOF中的SSL版本违反了协议

Question

我正在向我使用httplib2拥有的REST服务发出HTTPS GET请求，但我们得到了错误：

[Errno 8] _ssl.c:504: EOF occurred in violation of protocol

所有其他客户端都运行良好（浏览器、Java客户端等...），只有一个小例外，PHP curl需要设置为使用SSL v3。

我已经搜索了周围，它似乎确实是一个关于SSL版本的错误，但我似乎找不到一种方法来改变它在http：//www. ttplib2.除了改变源代码中的以下行之外，还有什么方法可以解决这个问题吗？

# We should be specifying SSL version 3 or TLS v1, but the ssl module
# doesn't expose the necessary knobs. So we need to go with the default
# of SSLv23.
return ssl.wrap_socket(sock, keyfile=key_file, certfile=cert_file,
                       cert_reqs=cert_reqs, ca_certs=ca_certs)

Answer 1

请参阅另一个指定解决方案的StackOverflow线程。指定TLS版本的方法将强制SSL版本为TLSv1，如用户favoretti在提供的链接中的响应中所述。

希望这能奏效

Answer 2

我为httplib2开发了以下解决方案：

import httplib2

# Start of the workaround for SSL3
# This is a monkey patch / module function overriding 
# to allow pages that only work with SSL3

# Build the appropriate socket wrapper for ssl
try:
    import ssl # python 2.6
    httplib2.ssl_SSLError = ssl.SSLError
    def _ssl_wrap_socket(sock, key_file, cert_file,
                         disable_validation, ca_certs):
        if disable_validation:
            cert_reqs = ssl.CERT_NONE
        else:
            cert_reqs = ssl.CERT_REQUIRED
        # Our fix for sites the only accepts SSL3
        try:
            # Trying SSLv3 first
            tempsock = ssl.wrap_socket(sock, keyfile=key_file, certfile=cert_file,
                                       cert_reqs=cert_reqs, ca_certs=ca_certs,
                                       ssl_version=ssl.PROTOCOL_SSLv3)
        except ssl.SSLError, e:
            tempsock = ssl.wrap_socket(sock, keyfile=key_file, certfile=cert_file,
                                       cert_reqs=cert_reqs, ca_certs=ca_certs,
                                       ssl_version=ssl.PROTOCOL_SSLv23)
        return tempsock
    httplib2._ssl_wrap_socket = _ssl_wrap_socket
except (AttributeError, ImportError):
    httplib2.ssl_SSLError = None
    def _ssl_wrap_socket(sock, key_file, cert_file,
                         disable_validation, ca_certs):
        if not disable_validation:
            raise httplib2.CertificateValidationUnsupported(
                    "SSL certificate validation is not supported without "
                    "the ssl module installed. To avoid this error, install "
                    "the ssl module, or explicity disable validation.")
        ssl_sock = socket.ssl(sock, key_file, cert_file)
        return httplib.FakeSocket(sock, ssl_sock)
    httplib2._ssl_wrap_socket = _ssl_wrap_socket

# End of the workaround for SSL3

if __name__ == "__main__":
    h1 = httplib2.Http()
    resp, content = h1.request("YOUR_SSL3_ONLY_LINK_HERE", "GET")
    print(content)

这个解决方案是基于urllib2的解决方案，在这个错误报告http://bugs.python.org/issue11220，

更新：介绍httplib2的解决方案。我没有注意到你在使用httplib2，我以为是urlib2。