Urllib3 错误“SSL：签名类型错误”

如何解决Urllib3 错误“SSL：签名类型错误”

当我从 Ubuntu 服务器在 python 3.8.5 中运行以下代码时：

import urllib3
import certifi
url = "https://www.website.com"
http = urllib3.PoolManager(cert_reqs='CERT_required',ca_certs=certifi.where())
content = http.request("GET",url,preload_content=False).read()

出现以下错误：

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py",line 665,in urlopen
    httplib_response = self._make_request(
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py",line 376,in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py",line 996,in _validate_conn
    conn.connect()
  File "/usr/lib/python3/dist-packages/urllib3/connection.py",line 366,in connect
    self.sock = ssl_wrap_socket(
  File "/usr/lib/python3/dist-packages/urllib3/util/ssl_.py",line 370,in ssl_wrap_socket
    return context.wrap_socket(sock,server_hostname=server_hostname)
  File "/usr/lib/python3.8/ssl.py",line 500,in wrap_socket
    return self.sslsocket_class._create(
  File "/usr/lib/python3.8/ssl.py",line 1040,in _create
    self.do_handshake()
  File "/usr/lib/python3.8/ssl.py",line 1309,in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:1123)

During handling of the above exception,another exception occurred:

Traceback (most recent call last):
  File "MyFile.py",line 46,in <module>
    content = urllib3.PoolManager().request("GET",url)
  File "/usr/lib/python3/dist-packages/urllib3/request.py",line 75,in request
    return self.request_encode_url(
  File "/usr/lib/python3/dist-packages/urllib3/request.py",line 97,in request_encode_url
    return self.urlopen(method,**extra_kw)
  File "/usr/lib/python3/dist-packages/urllib3/poolmanager.py",line 330,in urlopen
    response = conn.urlopen(method,u.request_uri,**kw)
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py",line 747,in urlopen
    return self.urlopen(
  File "/usr/lib/python3/dist-packages/urllib3/connectionpool.py",line 719,in urlopen
    retries = retries.increment(
  File "/usr/lib/python3/dist-packages/urllib3/util/retry.py",line 436,in increment
    raise MaxRetryError(_pool,error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='www.website.com',port=443): Max retries exceeded with url: /path/to/web/page.html (Caused by SSLError(SSLError(1,'[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:1123)')))

系统已更新为我正在使用的所有库

在我的 Windows 10 电脑上运行相同的代码不会导致任何错误

我错过了什么？

解决方法

我自己参考这个 GitHub 问题回答：https://github.com/psf/requests/issues/4775

我使用下面的代码解决了这个问题：

import urllib3
url = "https://www.website.com"

ctx = ssl.create_default_context()
ctx.set_ciphers('DEFAULT@SECLEVEL=1')
http = urllib3.PoolManager(
   ssl_version=ssl.PROTOCOL_TLS,ssl_context=ctx)
content = http.request("GET",url,preload_content=False).read()

您还可以继续使用带有以下代码的请求（灵感来自您的回答和 requests documentation）：

import ssl
import requests
import urllib3

class SslOldHttpAdapter(requests.adapters.HTTPAdapter):
    def init_poolmanager(self,connections,maxsize,block=False):
        ctx = ssl.create_default_context()
        ctx.set_ciphers('DEFAULT@SECLEVEL=1')

        self.poolmanager = urllib3.poolmanager.PoolManager(
            ssl_version=ssl.PROTOCOL_TLS,ssl_context=ctx)

url = "https://www.website.com"
s = requests.Session()
s.mount(url,SslOldHttpAdapter())
r = s.get(url,headers=headers)