python - 在 python 2.7.10、Mac OSX 下机械化的 SSLv3 握手失败

Question

我正在使用 mechanize 以进入网站。虽然能够在我 friend 的计算机(其操作系统是 Linux)上运行代码，但我面临以下握手失败警报:

urllib2.URLError: <urlopen error [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:590)>

我正在使用以下代码:

import mechanize
from bs4 import BeautifulSoup
import xlwt
import time
import unicodedata

br = mechanize.Browser()
br.set_handle_robots(False)
br.set_handle_equiv(False)
br.addheaders = [('User-agent', 'Chrome')]
page = br.open('https://....')

Answer 1

默认情况下禁用 SSLv3，因为它完全损坏。如果可能，请勿使用它。

Note: If you find that when certain older clients or servers attempt to connect with a SSLContext created by this function that they get an error stating “Protocol or cipher suite mismatch”, it may be that they only support SSL3.0 which this function excludes using the OP_NO_SSLv3. SSL3.0 is widely considered to be completely broken. If you still wish to continue to use this function but still allow SSL 3.0 connections you can re-enable them using:

ctx = ssl.create_default_context(Purpose.CLIENT_AUTH)
ctx.options &= ~ssl.OP_NO_SSLv3

这是这里的第二条注释:https://docs.python.org/2/library/ssl.html#ssl.create_default_context .

您需要以某种方式将配置的 SSLContext 传递给 mechanize。