将Curl客户端ssl移动到Guzzle

Question

我在使用PHP 5.3和php 5.5的Guzzev3.9.2。

我有以下使用ssl客户端证书的工作curl代码：

$url = "https://example.com/";
$cert_file = '/path/to/certificate.pem';

$ch = curl_init();
$options = array(
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_FOLLOWLOCATION => true,
  CURLOPT_URL => $url ,
  CURLOPT_SSLCERT => $cert_file ,
);

curl_setopt_array($ch , $options);
$output = curl_exec($ch);

if (!$output) {
  echo "Curl Error : " . curl_error($ch);
}
else {
  echo htmlentities($output);
}

我试图把它移到古兹尔：

require '/var/www/vendor/autoload.php';
use Guzzle\Http\Client;
$client = new Client();
$request = $client->get($url, array('cert' => $cert_file));
$response = $client->send($request);
echo $response . PHP_EOL;
print 'HI' . PHP_EOL;

当我使用curl运行它时，得到了200个响应。当我用口香糖的时候，我得到了403分。

Answer 1

If you are using private key then you have to use ssl_key option it will not 
work with cert.You can use **cert** options only with client certificate.

出现此错误有三个原因。

1. 未提供正确的证书路径。因此无法阅读

古兹尔如何设置 ssl 卷曲路径：

>

对文件使用CURLOPT_CAINFO

$cert_file = '/var/www/stack/25924147/cert/example.pem'; #Use absolute path as relative path will not work
$client = new Client();
$client->setDefaultOption('verify',true); #pass it for self-signed certificate
$client->setSslVerification($cert_file,true,2);  #Last Verify Option states default value is 2. When the verify value is 0, the connection succeeds regardless of the names in the certificate. Use that ability with caution!. When the verify value is 1, curl_easy_setopt will return an error
try{
    $request = $client->get($url);
    $options = $request->getCurlOptions(); #used to check curl options is set properly.
    var_dump($options); 
    $response = $client->send($request);
    echo $response . PHP_EOL;
    print 'HI' . PHP_EOL;
}catch( Guzzle\Http\Exception\CurlException $e){
    print_r($e->getResponse());
    echo "\n Curl Error \n";
}catch(Guzzle\Http\Exception\ClientErrorResponseException $e){
   print_r($e->getResponse());
   echo "\n Response Error \n";
}catch( Guzzle\Http\Exception\RequestException $e){
  print_r($e->getResponse());
  echo "\n REquest Error \n";
}

或者，如果您想对每个请求都传递证书，请尝试下面代码

   $cert_file = '/var/www/stack/25924147/cert/example.pem'; #Use absolute path as relative path will not work
   $client = new Client();
   $request = $client->get('https://www.example.com', array(), array(

      'ssl_key' => array('/etc/pki/private_key.pem')

  )


With Passoword - 
 $request = $client->get('https://www.example.com', array(), array(

     'ssl_key' => array('/etc/pki/private_key.pem', 's3cr3tp455w0rd')

 )

对于咕噜咕噜 http 客户端 文档检查 - 咕噜 HTTP 客户端

Answer 2

首先，因为这导致了一些混乱，Gihub上有两个版本Guzzle:

• 咕噜噜3（旧版本，你正在使用）
• 咕噜咕噜（新的，重写的版本）

这里有两个（经过测试的工作）示例，每个版本的Guzzes都有一个：

对于Guzzle的最新版本(不是所谓的旧版本Guzzle3 ),应该是:

use GuzzleHttp\Client;

$client = new Client();
$response = $client->get($url, array('cert' => $cert_file));

var_dump($response);

确保客户端证书以PEM格式存储。如果证书受密码保护，则需要这样指定：

$response = $client->get($url, 
    array('cert' => array($cert_file, 'password' => '****'));

！！注意上面提供密码的代码在手册中有所描述，但在最近的版本中不起作用。

对于旧版本 Guzzle3 （您正在使用）

use Guzzle\Http\Client;

// Create a client and provide a base URL
$client = new Client();

$request = $client->get($url, array(), array(
    'cert' => $cert_file
));

// You must send a request in order for the transfer to occur
$response = $request->send();

var_dump($response);

Answer 3

试试像这样：

 $client = new Client();
 $response = $client->get($url, array(), array('cert' => $cert_file));

并添加以下行进行检查：

 $this->assertEquals($cert_file, $request->getCurlOptions()->get(CURLOPT_SSLCERT));

或使用此：

 $client = new Client();
 $request = $client->createRequest('GET', $url);
 $request->getCurlOptions()->set(CURLOPT_SSLCERT, $cert_file);
 $response = $client->send($request);

如果使用自签名证书，请设置此选项：

$request->getCurlOptions()->set(CURLOPT_SSL_VERIFYHOST, false);
$request->getCurlOptions()->set(CURLOPT_SSL_VERIFYPEER, false);

在发送请求之前设置此行：

$request = $client->get( .... )
.
.
.
$request->setResponse(new Response(200), true);
$request->send();

检查您的url，并像这样输入:

$url = 'https://example.com/index.php';

您可以添加默认选项，例如curl代码：

$request->getCurlOptions()->set(CURLOPT_RETURNTRANSFER , true);
$request->getCurlOptions()->set(CURLOPT_FOLLOWLOCATION , true);