Alpine 3.3、Python 2.7.11、urllib2 导致 SSL:CERTIFICATE_VERIFY_FAILED [英] Alpine 3.3, Python 2.7.11, urllib2 causing SSL: CERTIFICATE_VERIFY_FAILED
问题描述
我有这个小 Dockerfile
I have this small Dockerfile
FROM alpine:3.3
RUN apk --update add python
CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"]
使用 docker build -t alpine-py/01 .
构建它,然后使用 docker run -it --rm alpine-py/01
运行它会创建以下内容输出
Building it with docker build -t alpine-py/01 .
and then running it with docker run -it --rm alpine-py/01
creates the following output
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/usr/lib/python2.7/urllib2.py", line 154, in urlopen
return opener.open(url, data, timeout)
File "/usr/lib/python2.7/urllib2.py", line 431, in open
response = self._open(req, data)
File "/usr/lib/python2.7/urllib2.py", line 449, in _open
'_open', req)
File "/usr/lib/python2.7/urllib2.py", line 409, in _call_chain
result = func(*args)
File "/usr/lib/python2.7/urllib2.py", line 1240, in https_open
context=self._context)
File "/usr/lib/python2.7/urllib2.py", line 1197, in do_open
raise URLError(err)
urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)>
昨天我被最近发布的 OpenSSL 1.0.2g 咬了,这导致 py-cryptograpy
无法编译.幸运的是,几个小时后,来自 py-cryptography
的人在 PyPI 上发布了一个新版本.问题是 OpenSSL 中的函数获得了新签名.
Yesterday I got bitten by the recent OpenSSL 1.0.2g release, which caused py-cryptograpy
to not compile. Luckily the guys from py-cryptography
released a new version on PyPI a couple of hours later. The issue was that a function in OpenSSL got a new signature.
这可能是相关的还是我遗漏了什么?
Could this be related or am I missing something?
推荐答案
您需要安装 ca-certificates 才能验证公共 CA 的签名证书:
You need to install ca-certificates to be able to validate signed certs by public CAs:
FROM alpine:3.3
RUN apk --no-cache add python ca-certificates
CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"]
这篇关于Alpine 3.3、Python 2.7.11、urllib2 导致 SSL:CERTIFICATE_VERIFY_FAILED的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!