快捷導航

Python發(fā)送請求SSL驗證設(shè)置的幾種方案

更新時間：2025年09月14日 11:25:00 作者：detayun

這篇文章主要介紹了Python請求SSL/TLS握手失敗的常見原因及五種解決方案,包括禁用驗證、指定TLS版本、添加重試、更新證書庫與系統(tǒng)時間、排查防火墻,建議優(yōu)先檢查網(wǎng)絡(luò)和證書問題,生產(chǎn)環(huán)境慎用禁用驗證,需要的朋友可以參考下

方案一：臨時禁用SSL驗證（快速測試）

response = requests.get(url=url, headers=header, verify=False)

注意：生產(chǎn)環(huán)境不推薦長期禁用驗證，存在安全風險

方案二：指定TLS版本（推薦）

response = requests.get(
    url=url,
    headers=header,
    ssl_version='TLSv1_2'  # 顯式指定TLS 1.2版本
)

方案三：添加重試機制

from requests.adapters import HTTPAdapter
from requests.packages.urllib3.util.retry import Retry

session = requests.Session()
retry = Retry(total=3, backoff_factor=0.5)
adapter = HTTPAdapter(max_retries=retry)
session.mount('https://', adapter)

response = session.get(url=url, headers=header)

方案四：檢查本地環(huán)境

更新證書庫：運行pip install --upgrade certifi
檢查系統(tǒng)時間：確保系統(tǒng)時間準確
防火墻排查：臨時禁用防火墻/安全軟件測試

方案五：完整改進代碼

import os
import requests
from requests.adapters import HTTPAdapter
from urllib3.util.retry import Retry

url = 'https://www.hainan.gov.cn/.../files/eae7d9e018bf468794e87e690eef3a95.zip'

headers = {
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36",
    "Accept": "*/*",
}

# 創(chuàng)建帶重試的Session
session = requests.Session()
retry = Retry(total=3, backoff_factor=1, status_forcelist=[500, 502, 503, 504])
adapter = HTTPAdapter(max_retries=retry)
session.mount("https://", adapter)

try:
    # 添加超時參數(shù)
    response = session.get(url, headers=headers, timeout=10, verify=True)
    response.raise_for_status()
    
    # 確保目錄存在
    os.makedirs('test_file', exist_ok=True)
    
    with open('test_file/test2.zip', 'wb') as f:
        f.write(response.content)
        
except requests.exceptions.RequestException as e:
    print(f"請求失敗: {type(e).__name__}: {e}")
except Exception as e:
    print(f"其他錯誤: {e}")