blocks|key|37401|text|就像我在评论中写的那样，这个问题可能与this+SO+answer有关。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|37402|简而言之:有多种方法可以验证证书。OpenSSL使用的验证与您系统上的受信任根证书不兼容。OpenSSL由Python使用。|37403|您可以尝试获取Verisign+Class+3+Public+Primary+Certification+Authority缺少的证书，然后根据Python+documentation使用cafile选项|style|CODE|37404|urllib2.urlopen(req,+cafile="verisign.pem")|code-block|syntax|javascript|37405|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/27826829/3081018|1|http://www.symantec.com/content/en/us/enterprise/verisign/roots/Class-3-Public-Primary-Certification-Authority.pem|2|https://docs.python.org/2/library/urllib2.html^0|J|E|0|0|0|2M|6|7|1J|1|20|K|2|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@$A|11|B|12|1|13]]|C|$]]|$1|D|3|E|5|6|7|14|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|15|8|@$A|16|B|17|H|I]]|9|@$A|18|B|19|1|1A]|$A|1B|B|1C|1|1D]]|C|$]]|$1|J|3|K|5|L|7|1E|8|@]|9|@]|C|$M|N]]|$1|O|3|-4|5|6|7|1F|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]|W|$5|R|S|T|C|$U|X]]|Y|$5|R|S|T|C|$U|Z]]]]

Like I've written in a comment, this problem is probably related to <a href="https://stackoverflow.com/a/27826829/3081018">this SO answer</a>. 

In short: there are multiple ways to verify the certificate. The verification used by OpenSSL is incompatible with the trusted root certificates you have on your system. OpenSSL is used by Python.

You could try to get the missing certificate for <a href="http://www.symantec.com/content/en/us/enterprise/verisign/roots/Class-3-Public-Primary-Certification-Authority.pem" rel="nofollow noreferrer">Verisign Class 3 Public Primary Certification Authority</a> and then use the <code>cafile</code> option according to the <a href="https://docs.python.org/2/library/urllib2.html" rel="nofollow noreferrer">Python documentation</a>:

<pre><code>urllib2.urlopen(req, cafile="verisign.pem")
</code></pre>

blocks|key|37444|text|我羞愧地低下头，因为我也有同样的问题，除了在我的例子中，我点击的URL是有效的，证书也是有效的。无效的是我与网络的连接。我未能将代理详细信息添加到浏览器中(本例中为IE)。这使得验证过程无法正确进行。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37445|添加了代理的详细信息，我的python非常高兴。|37446|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

I hang my head in semi-shame, as I had the same issue, except that in my case, the URL I was hitting was valid, the certificate was valid. What wasn't valid was my connection out to the web. I had failed to add proxy details into the browser (IE in this case). This stopped the verification process from happening correctly. 
Added in the proxy details and my python was then very happy .

blocks|key|37475|text|Python+2.7.12+(默认，2016+-07+29，15:26:22)修复了上述问题。这些信息可能会对其他人有所帮助。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37476|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Python 2.7.12 (default, Jul 29 2016, 15:26:22) fixed the mentioned issue. This information might help someone else.

blocks|key|4544636|text|import+requests
requests.packages.urllib3.disable_warnings()

import+ssl

try:
++++_create_unverified_https_context+=+ssl._create_unverified_context
except+AttributeError:
++++#+Legacy+Python+that+doesn't+verify+HTTPS+certificates+by+default
++++pass
else:
++++#+Handle+target+environment+that+doesn't+support+HTTPS+verification
++++ssl._create_default_https_context+=+_create_unverified_https_context|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|4544637|取自此处https://gist.github.com/michaelrice/a6794a017e349fc65d01|unstyled|offset|length|4544638|entityMap|0|LINK|mutability|MUTABLE|url|https://gist.github.com/michaelrice/a6794a017e349fc65d01^0|0|4|1K|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|R|8|@]|9|@$G|S|H|T|1|U]]|A|$]]|$1|I|3|-4|5|F|7|V|8|@]|9|@]|A|$]]]|J|$K|$5|L|M|N|A|$O|P]]]]

<pre><code>import requests
requests.packages.urllib3.disable_warnings()

import ssl

try:
 _create_unverified_https_context = ssl._create_unverified_context
except AttributeError:
 # Legacy Python that doesn't verify HTTPS certificates by default
 pass
else:
 # Handle target environment that doesn't support HTTPS verification
 ssl._create_default_https_context = _create_unverified_https_context
</code></pre>

Taken from here <a href="https://gist.github.com/michaelrice/a6794a017e349fc65d01" rel="noreferrer">https://gist.github.com/michaelrice/a6794a017e349fc65d01</a>

blocks|key|4544640|text|ln+-s+/usr/local/share/certs/ca-root-nss.crt+/etc/ssl/cert.pem|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4544641|(FreeBSD+10.1)|4544642|entityMap^0|0|1Q|0|1|C|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|P|8|@]|D|@]|E|$]]]|I|$]]

<code>ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem</code>

(<code>FreeBSD 10.1</code>)

blocks|key|37503|text|扩展一下Craig+Glennie的答案：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37504|在MacOs+Sierra上的Python+3.6.1中|37505|在bash终端中输入以下命令就解决了问题：|37506|pip+install+certifi
/Applications/Python\+3.6/Install\+Certificates.command|code-block|syntax|javascript|37507|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|O|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|P|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

To expand on Craig Glennie's answer:

in Python 3.6.1 on MacOs Sierra

Entering this in the bash terminal solved the problem:

<pre><code>pip install certifi
/Applications/Python\ 3.6/Install\ Certificates.command
</code></pre>

blocks|key|37551|text|我需要添加另一个答案，因为就像Craig+Glennie一样，由于Web上有许多关于这个问题的帖子，我进行了徒劳无功的追逐。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37552|我使用的是MacPorts，我最初认为是Python的问题实际上是MacPorts的问题:它在安装openssl时没有安装根证书。正如this+blog+post中提到的，解决方案是port+install+curl-ca-bundle。|offset|length|style|CODE|37553|entityMap|0|LINK|mutability|MUTABLE|url|http://andatche.com/blog/2012/02/fixing-ssl-ca-certificates-with-openssl-from-macports/^0|0|2J|R|1V|E|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@$D|R|E|S|F|G]]|9|@$D|T|E|U|1|V]]|A|$]]|$1|H|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

I need to add another answer because just like Craig Glennie, I went on a wild goose chase due to the many posts referring to this problem across the Web.

I am using MacPorts, and what I originally thought was a Python problem was in fact a MacPorts problem: it does not install a root certificate with its installation of openssl. The solution is to <code>port install curl-ca-bundle</code>, as mentioned in <a href="http://andatche.com/blog/2012/02/fixing-ssl-ca-certificates-with-openssl-from-macports/" rel="noreferrer">this blog post</a>.

blocks|key|4544695|text|看一看|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4544696|/Applications/Python3.6/安装Certificates.command|4544697|您也可以转到应用程序并单击Certificates.command|4544698|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Take a look at

/Applications/Python 3.6/Install Certificates.command

You can also go to Aplications ans click on Certificates.command

blocks|key|37582|text|安装nltk的步骤(我已经在MAC中安装了python3+(3.6.2)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37583|sudo+easy_install+pip|code-block|syntax|javascript|37584|使用忽略已安装选项可以忽略卸载以前版本的six，否则，在卸载时会出现错误，并且不会向前播放影片|37585|sudo+pip3+install+-U+nltk+--ignore-installed+six|37586|检查pip和python的安装，使用'3‘版本|37587|which+python+python2+python3
which+pip+pip2+pip3|37588|检查是否安装了NLTK|37589|python3
import+nltk
nltk.__path__
['/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/nltk']|37590|在安装示例书之前安装SSL证书，否则我们将在安装示例时出现证书错误|37591|/Applications/Python\+3.6/Install\+Certificates.command
python3+-m+nltk.downloader+book|37592|这就成功地完成了nltk和nltk_ata图书示例的安装。|37593|entityMap^0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|11|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|12|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|13|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|14|8|@]|9|@]|A|$]]|$1|M|3|N|5|D|7|15|8|@]|9|@]|A|$E|F]]|$1|O|3|P|5|6|7|16|8|@]|9|@]|A|$]]|$1|Q|3|R|5|D|7|17|8|@]|9|@]|A|$E|F]]|$1|S|3|T|5|6|7|18|8|@]|9|@]|A|$]]|$1|U|3|V|5|D|7|19|8|@]|9|@]|A|$E|F]]|$1|W|3|X|5|6|7|1A|8|@]|9|@]|A|$]]|$1|Y|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|Z|$]]

<h1>installing steps for nltk (I had python3 (3.6.2) installed already in MAC OS X</h1>
<pre><code>sudo easy_install pip
</code></pre>
use ignore installed option to ignore uninstalling previous version of six, else, it gives an error while uninstalling and does not movie forward
<pre><code>sudo pip3 install -U nltk --ignore-installed six
</code></pre>
Check the installation of pip and python, use the '3' versions
<pre><code>which python python2 python3
which pip pip2 pip3
</code></pre>
Check if NLTK is installed
<pre><code>python3
import nltk
nltk.__path__
['/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/nltk']
</code></pre>
Install SSL certificate prior to installing the examples book, else we will certificate error while installing the examples
<pre><code>/Applications/Python\ 3.6/Install\ Certificates.command
python3 -m nltk.downloader book
</code></pre>
That completed the installation successfully of nltk and nltk_ata for book examples

blocks|key|4544734|text|使用pip安装PyOpenSSL对我来说很有效(不需要转换为PEM)：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4544735|pip+install+PyOpenSSL|code-block|syntax|javascript|4544736|entityMap^0|2|3|7|9|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|L|$]]

Installing <code>PyOpenSSL</code> using <code>pip</code> worked for me (without converting to PEM):

<pre><code>pip install PyOpenSSL
</code></pre>

blocks|key|4544748|text|我通过关闭Fiddler+(+HTTP调试代理)来解决这个问题，检查您是否启用了代理，然后重试。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4544749|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

I had this problem solved by closing Fiddler (an HTTP debugging proxy) check if you have a proxy enabled and try again.

blocks|key|4544775|text|我针对Mac+OS+X的解决方案：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4544776|1)使用从Python语言官方网站https://www.python.org/downloads/下载的原生应用Python安装程序升级到Python+3.6.5|offset|length|4544777|我发现这个安装程序负责更新新Python的链接和符号链接，比起自制的要好得多。|4544778|2)使用更新后的Python3.6目录中的"./Install+Certificates.command“安装新证书|4544779|>+cd+"/Applications/Python+3.6/"
>+sudo+"./Install+Certificates.command"|code-block|syntax|javascript|4544780|entityMap|0|LINK|mutability|MUTABLE|url|https://www.python.org/downloads/^0|0|H|X|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@$D|Y|E|Z|1|10]]|A|$]]|$1|F|3|G|5|6|7|11|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|12|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|13|8|@]|9|@]|A|$M|N]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

My solution for Mac OS X:

1) Upgrade to Python 3.6.5 using the native app Python installer downloaded from the official Python language website <a href="https://www.python.org/downloads/" rel="noreferrer">https://www.python.org/downloads/</a> 

I've found that this installer is taking care of updating the links and symlinks for the new Python a lot better than homebrew. 

2) Install a new certificate using "./Install Certificates.command" which is in the refreshed Python 3.6 directory 

<pre><code>&gt; cd "/Applications/Python 3.6/"
&gt; sudo "./Install Certificates.command"
</code></pre>

blocks|key|37729|text|搭载centOS+7的亚马逊EC2上的Python2.7|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37730|我必须将环境变量SSL_CERT_DIR设置为指向位于/etc/ssl/certs/ca-bundle.crt的ca-bundle|offset|length|style|CODE|37731|entityMap^0|0|8|C|R|S|1K|9|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@$D|L|E|M|F|G]|$D|N|E|O|F|G]|$D|P|E|Q|F|G]]|9|@]|A|$]]|$1|H|3|-4|5|6|7|R|8|@]|9|@]|A|$]]]|I|$]]

Python 2.7 on Amazon EC2 with centOS 7

I had to set the env variable <code>SSL_CERT_DIR</code> to point to my <code>ca-bundle</code> which was located at <code>/etc/ssl/certs/ca-bundle.crt</code>

blocks|key|37760|text|在Python2.7中，在文件C:\Python27\lib\site-packages\certifi\cacert.pem的末尾添加受信任的根CA详细信息有帮助|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37761|之后，我确实运行了pip+install+--可信主机pypi.python.org+--可信主机pypi.org+--可信主机files.pythonhosted.org+packageName|37762|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

In python 2.7 adding Trusted root CA details at the end in file C:\Python27\lib\site-packages\certifi\cacert.pem helped

after that i did run (using admin rights)
pip install --trusted-host pypi.python.org --trusted-host pypi.org --trusted-host files.pythonhosted.org packageName

blocks|key|4544844|text|对于遇到这个问题的任何使用mechanize的人，以下是如何将相同的技术应用于机械化浏览器实例的方法：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4544845|br+=+mechanize.Browser()
context+=+ssl._create_unverified_context()
br.set_ca_data(context=context)|code-block|syntax|javascript|4544846|entityMap^0|D|9|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

For anyone using <code>mechanize</code> who comes across this question, here's how you can apply the same technique to a mechanize Browser instance:

<pre><code>br = mechanize.Browser()
context = ssl._create_unverified_context()
br.set_ca_data(context=context)
</code></pre>

blocks|key|4544865|text|在Mac上安装证书解决了我的问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4544866|pip+install+certifi|code-block|syntax|javascript|4544867|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Installing certifi on Mac solved my issue:

<pre><code>pip install certifi
</code></pre>

blocks|key|4544891|text|我在here上找到了这个|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4544892|我找到了这个解决方案，在源文件的开头插入以下代码：|4544893|import+ssl

try:
+++_create_unverified_https_context+=+ssl._create_unverified_context
except+AttributeError:
++++#+Legacy+Python+that+doesn't+verify+HTTPS+certificates+by+default
++++pass
else:
++++#+Handle+target+environment+that+doesn't+support+HTTPS+verification
++++ssl._create_default_https_context+=+_create_unverified_https_context|code-block|syntax|javascript|4544894|此代码撤消验证，因此不会验证ssl证书。|4544895|entityMap|0|LINK|mutability|MUTABLE|url|https://community.netapp.com/t5/Software-Development-Kit-SDK-and-API-Discussions/Python-How-to-disable-SSL-certificate-verification/td-p/113697^0|2|4|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@$A|V|B|W|1|X]]|C|$]]|$1|D|3|E|5|6|7|Y|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|Z|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|10|8|@]|9|@]|C|$]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|C|$]]]|N|$O|$5|P|Q|R|C|$S|T]]]]

I have found this over <a href="https://community.netapp.com/t5/Software-Development-Kit-SDK-and-API-Discussions/Python-How-to-disable-SSL-certificate-verification/td-p/113697" rel="noreferrer">here</a>

I found this solution, insert this code at the beginning of your source file:

<pre><code>import ssl

try:
 _create_unverified_https_context = ssl._create_unverified_context
except AttributeError:
 # Legacy Python that doesn't verify HTTPS certificates by default
 pass
else:
 # Handle target environment that doesn't support HTTPS verification
 ssl._create_default_https_context = _create_unverified_https_context
</code></pre>

This code makes the verification undone so that the ssl certification is not verified.

blocks|key|4544925|text|对于Linux+Python3.6，这对我很有效。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4544926|从命令行安装pyopenssl和证书|4544927|sudo+pip3+install+-U+pyopenssl
sudo+pip3+install+certifi|code-block|syntax|javascript|4544928|在我的python3脚本中，添加了如下verify='/usr/lib/python3.6/site-packages/certifi/cacert.pem‘：|4544929|import+requests
from+requests.auth+import+HTTPBasicAuth
import+certifi

auth+=+HTTPBasicAuth('username',+'password')
body+=+{}

r+=+requests.post(url='https://your_url.com',+data=body,+auth=auth,+verify='/usr/lib/python3.6/site-packages/certifi/cacert.pem')|4544930|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Q|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|R|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

For Linux Python3.6, this worked for me.

from command line install pyopenssl and certifi

<pre><code>sudo pip3 install -U pyopenssl
sudo pip3 install certifi
</code></pre>

and in my python3 script, added verify='/usr/lib/python3.6/site-packages/certifi/cacert.pem' like this:

<pre><code>import requests
from requests.auth import HTTPBasicAuth
import certifi

auth = HTTPBasicAuth('username', 'password')
body = {}

r = requests.post(url='https://your_url.com', data=body, auth=auth, verify='/usr/lib/python3.6/site-packages/certifi/cacert.pem')
</code></pre>

blocks|key|37891|text|在我的例子中，我得到这个错误是因为requests和urllib3版本不兼容，在安装过程中出现了以下错误：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|37892|ERROR:+requests+2.21.0+has+requirement+urllib3<1.25,>=1.21.1,+but+you'll+have+urllib3+1.25+which+is+incompatible.|code-block|syntax|javascript|37893|pip+install+'urllib3<1.25'+--force-reinstall|37894|成功了。|37895|entityMap^0|H|8|Q|7|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|H|7|W|8|@]|D|@]|E|$I|J]]|$1|M|3|N|5|6|7|X|8|@]|D|@]|E|$]]|$1|O|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|P|$]]

In my case I was getting this error because <code>requests</code> and <code>urllib3</code> versions were incompatible, giving the following error during installation: 

<pre><code>ERROR: requests 2.21.0 has requirement urllib3&lt;1.25,&gt;=1.21.1, but you'll have urllib3 1.25 which is incompatible.
</code></pre>

<pre><code>pip install 'urllib3&lt;1.25' --force-reinstall
</code></pre>

did the trick.

blocks|key|37909|text|我在我的一台Linux机器上遇到了类似的问题。生成新的证书并导出指向证书目录的环境变量为我解决了这个问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|37910|$+sudo+update-ca-certificates+--fresh
$+export+SSL_CERT_DIR=/etc/ssl/certs|code-block|syntax|javascript|37911|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I had a similar problem on one of my Linux machines. Generating fresh certificates and exporting an environment variable pointing to the certificates directory fixed it for me:

<pre><code>$ sudo update-ca-certificates --fresh
$ export SSL_CERT_DIR=/etc/ssl/certs
</code></pre>

blocks|key|37923|text|$+cd+$HOME
$+wget+--quiet+https://curl.haxx.se/ca/cacert.pem
$+export+SSL_CERT_FILE=$HOME/cacert.pem|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|37924|来源：https://access.redhat.com/articles/2039753|unstyled|offset|length|37925|entityMap|0|LINK|mutability|MUTABLE|url|https://access.redhat.com/articles/2039753#troubleshooting-certificate-verification-8^0|0|3|16|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|R|8|@]|9|@$G|S|H|T|1|U]]|A|$]]|$1|I|3|-4|5|F|7|V|8|@]|9|@]|A|$]]]|J|$K|$5|L|M|N|A|$O|P]]]]

<pre><code>$ cd $HOME
$ wget --quiet https://curl.haxx.se/ca/cacert.pem
$ export SSL_CERT_FILE=$HOME/cacert.pem
</code></pre>

Source: <a href="https://access.redhat.com/articles/2039753#troubleshooting-certificate-verification-8" rel="noreferrer">https://access.redhat.com/articles/2039753</a>

blocks|key|37956|text|在某些情况下，您无法使用不安全的连接或将ssl上下文传递到urllib请求中。这里是我的基于https://stackoverflow.com/a/28052583/6709778的解决方案|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|37957|在需要使用自己证书文件的情况下|37958|import+ssl

def+new_ssl_context_decorator(*args,+**kwargs):
++++kwargs['cafile']+=+'/etc/ssl/certs/ca-certificates.crt'
++++return+ssl.create_default_context(*args,+**kwargs)

ssl._create_default_https_context+=+ssl._create_unverified_context|code-block|syntax|javascript|37959|或者，您可以使用证书中的共享文件|37960|def+new_ssl_context_decorator(*args,+**kwargs):
++++import+certifi
++++kwargs['cafile']+=+certifi.where()
++++return+ssl.create_default_context(*args,+**kwargs)|37961|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/28052583/6709778^0|1A|18|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|11|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|13|8|@]|9|@]|C|$I|J]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]]]

There are cases when you can not use insecure connections or pass ssl context into urllib request. Here my solution based on 
<a href="https://stackoverflow.com/a/28052583/6709778">https://stackoverflow.com/a/28052583/6709778</a>

In a case if you want use your own cert file

<pre class="lang-py prettyprint-override"><code>import ssl

def new_ssl_context_decorator(*args, **kwargs):
 kwargs['cafile'] = '/etc/ssl/certs/ca-certificates.crt'
 return ssl.create_default_context(*args, **kwargs)

ssl._create_default_https_context = ssl._create_unverified_context
</code></pre>

or you can use shared file from certifi

<pre class="lang-py prettyprint-override"><code>def new_ssl_context_decorator(*args, **kwargs):
 import certifi
 kwargs['cafile'] = certifi.where()
 return ssl.create_default_context(*args, **kwargs)
</code></pre>

blocks|key|38039|text|如果您有私有证书要处理，比如您的组织拥有CA根目录和链的中间部分，那么最好将证书添加到ca文件中。而不是绕过整个安全设备(verify=False)。下面的代码可以让您同时使用2.7%2B和3%2B|type|unstyled|depth|inlineStyleRanges|entityRanges|data|38040|考虑添加整个证书链，当然你只需要这样做一次。|38041|import+certifi

cafile=certifi.where()+#+cacert+file
with+open+('rootca.pem','rb')+as+infile:
++++customca=infile.read()
++++with+open(cafile,'ab')+as+outfile:
++++++++outfile.write(customca)
with+open+('interca.pem','rb')+as+infile:
++++customca=infile.read()
++++with+open(cafile,'ab')+as+outfile:
++++++++outfile.write(customca)
with+open+('issueca.pem','rb')+as+infile:
++++customca=infile.read()
++++with+open(cafile,'ab')+as+outfile:
++++++++outfile.write(customca)|code-block|syntax|javascript|38042|然后这应该会让你开始|38043|import+requests
response+=+requests.request("GET",+'https://yoursecuresite.com',++data+=+{})
print(response.text.encode('utf8'))|38044|希望这能有所帮助|38045|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

If you have private certs to deal with, like your orgs own CA root and intermediates part of the chain, then better to add the certs to the ca file viz. cacert.pem than bypassing the entire security apparatus (verify=False). Below code gets you going in both 2.7+ and 3+

Consider adding the whole cert chain and off course you need to do this only once.

<pre><code>import certifi

cafile=certifi.where() # cacert file
with open ('rootca.pem','rb') as infile:
 customca=infile.read()
 with open(cafile,'ab') as outfile:
 outfile.write(customca)
with open ('interca.pem','rb') as infile:
 customca=infile.read()
 with open(cafile,'ab') as outfile:
 outfile.write(customca)
with open ('issueca.pem','rb') as infile:
 customca=infile.read()
 with open(cafile,'ab') as outfile:
 outfile.write(customca)
</code></pre>

Then this should get you going

<pre><code>import requests
response = requests.request("GET", 'https://yoursecuresite.com', data = {})
print(response.text.encode('utf8'))
</code></pre>

Hope this helps

blocks|key|38093|text|如果证书是通过Let's+encrypt颁发的，请确保在客户端的中间证书存储中删除过期的DST+Root+CA、X3颁发的R3证书。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|38094|entityMap^0|1P|2|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

If the certificate is issued through Let's encrypt make sure to remove the expired DST Root CA X3 issued <code>R3</code> certificate in your Intermediate cert store on the client.

blocks|key|38124|text|我的解决方案是使用Beautiful+Soup，一个python包。它神奇地处理SSL的东西。Beautiful是一个库，它可以很容易地从网页上抓取信息。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|38125|from+bs4+import+BeautifulSoup+as+soup
import+requests
url+=+"https://dex.raydium.io/#/market/2xiv8A5xrJ7RnGdxXB42uFEkYHJjszEhaJyKKt4WaLep"
html+=+requests.get(url,+verify=True)
+
page_soup+=+soup(html.text,+'html.parser')
print(page_soup.prettify())|code-block|syntax|javascript|38126|entityMap|0|LINK|mutability|MUTABLE|url|https://pypi.org/project/beautifulsoup4/^0|9|E|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

My solution was to use <a href="https://pypi.org/project/beautifulsoup4/" rel="nofollow noreferrer">Beautiful Soup</a> a python package. It magically handles the SSL stuff. Beautiful Soup is a library that makes it easy to scrape information from web pages.
<pre><code>from bs4 import BeautifulSoup as soup
import requests
url = &quot;https://dex.raydium.io/#/market/2xiv8A5xrJ7RnGdxXB42uFEkYHJjszEhaJyKKt4WaLep&quot;
html = requests.get(url, verify=True)
 
page_soup = soup(html.text, 'html.parser')
print(page_soup.prettify())
</code></pre>

I am getting the following error:

<pre><code>Exception in thread Thread-3:
Traceback (most recent call last):
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/threading.py", line 810, in __bootstrap_inner
self.run()
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/threading.py", line 763, in run
self.__target(*self.__args, **self.__kwargs)
File "/Users/Matthew/Desktop/Skypebot 2.0/bot.py", line 271, in process
info = urllib2.urlopen(req).read()
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 154, in urlopen
return opener.open(url, data, timeout)
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 431, in open
response = self._open(req, data)
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 449, in _open
'_open', req)
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 409, in _call_chain
result = func(*args)
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 1240, in https_open
context=self._context)
File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib2.py", line 1197, in do_open
raise URLError(err)
URLError: &lt;urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)&gt;
</code></pre>

This is the code that is causing this error:

<pre><code>if input.startswith("!web"):
 input = input.replace("!web ", "") 
 url = "https://domainsearch.p.mashape.com/index.php?name=" + input
 req = urllib2.Request(url, headers={ 'X-Mashape-Key': 'XXXXXXXXXXXXXXXXXXXX' })
 info = urllib2.urlopen(req).read()
 Message.Chat.SendMessage ("" + info)
</code></pre>

The API I'm using requires me to use HTTPS. How can I make it bypass the verification?

urllib and "SSL: CERTIFICATE_VERIFY_FAILED" Error

FreeBSD

Python

Linux

我收到以下错误：Exception in thread Thread-3:Traceback (most recent call last):File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/threading.py", line...

问urllib和"SSL: CERTIFICATE_VERIFY_FAILED“错误
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问urllib和"SSL: CERTIFICATE_VERIFY_FAILED“错误EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问urllib和"SSL: CERTIFICATE_VERIFY_FAILED“错误
EN