问题

我一直在尝试使用Python的请求包来下载以下URL:

https://service.isracard.co.il/I_logon.jsp

在Chrome中,证书似乎有效:

但是,在Python中,SSLV3_ALERT_HANDSHAKE_FAILURE即使使用verify忽略错误证书的标志,请求也会失败:

如果将verify设置为False,请求也可以忽略验证SSL证书

堆栈跟踪

>>> requests.__version__
'2.7.0'
>>> LOGIN_URL = 'https://service.isracard.co.il/I_logon.jsp'
>>> requests.get(LOGIN_URL, verify=False)
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/private/tmp/sslenv/lib/python2.7/site-packages/requests/api.py", line 69, in get
    return request('get', url, params=params, **kwargs)
  File "/private/tmp/sslenv/lib/python2.7/site-packages/requests/api.py", line 50, in request
    response = session.request(method=method, url=url, **kwargs)
  File "/private/tmp/sslenv/lib/python2.7/site-packages/requests/sessions.py", line 465, in request
    resp = self.send(prep, **send_kwargs)
  File "/private/tmp/sslenv/lib/python2.7/site-packages/requests/sessions.py", line 573, in send
    r = adapter.send(request, **kwargs)
  File "/private/tmp/sslenv/lib/python2.7/site-packages/requests/adapters.py", …

再会，

我在 Linux Redhat 中有一个 WAS 自由服务器，并且我启用了唯一的 TLSv1.2。

我输入以下命令来获取服务器信息：

openssl s_client -connect 10.7.5.65:9443 -msg

部分结果如下：

No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: DH, 1024 bits
---
SSL handshake has read 1710 bytes and written 479 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported

我看到Server Temp Key值是 DH，1024 位，但也看到服务器公钥是 2048 位，请问我的 Diffie-Hellman MODP 大小（位）实际上是 1024 还是 2048？

还有那部分 ServerKeyExchange

<<< TLS 1.2 Handshake [length …