CERTIFICATE_VERIFY_FAILED虽然它应该是有效的?

您知道为什么要调用badCertificateCallback吗?该证书(该dart声称无效)与我设置为可信证书的证书(相等性检查为真!)完全相同。

import 'dart:convert';
import 'dart:io';
import 'dart:typed_data';
import 'package:http/http.dart' as http;
import 'package:http/io_client.dart';
final PEM = new File(
'../server_keys/cert.pem',
).readAsBytesSync();
Future<http.Response> listDir(String path) async {
SecurityContext context = new SecurityContext(withTrustedRoots: false);
context.setTrustedCertificatesBytes(PEM);
print("context setup");
final httpClient = HttpClient(context: context);
httpClient.badCertificateCallback = ((cert, host, port) {
print("In bad certificate callback.");
print('Subject: ${cert.subject}');
print('Issuer: ${cert.issuer}');
print('Expires: ${cert.endValidity}');
print('Host: ${host}');
print('Port: ${port}');
return String.fromCharCodes(PEM) == cert.pem;
});
print("get url");
final client = IOClient(httpClient);
print("POSTING");
return client
.post(
Uri.parse('https://127.0.0.1:5000/list'),
headers: <String, String>{
'Content-Type': 'application/json; charset=UTF-8',
},
body: jsonEncode(<String, String>{
'path': path,
}),
)
.timeout(const Duration(seconds: 5));
}
void main() async {
await listDir("admin/user/test").then((response) {
print(response.body);
});
print("finished");
}

此外，这工作得很好:

curl -v --cacert ../server_keys/cert.pem https://127.0.0.1:5000/list

也许你能给我一个提示。

进一步信息:

这是证书:

以下是python flask服务器代码(现在使用localhost):

import os
from flask import Flask, jsonify
import ssl
app = Flask(__name__)
@app.route("/list", methods = ['POST', 'GET'])
def list_route():
return jsonify(isError= False,
message= "Success",
statusCode= 200,
data={
"path": "hihi"
}), 200

if __name__ == "__main__":  
server_keys = {
"url": "localhost",
"cert_file": "server_keys/cert.pem",
"key_file": "server_keys/key.pem",
}
os.system("openssl req -x509 -nodes -new -sha256 -days 390 -newkey rsa:4096 -keyout server_keys/key.pem -out server_keys/cert.pem -subj '/C=de/CN=localhost'")
context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)    
context.load_cert_chain(server_keys["cert_file"], server_keys["key_file"])    
app.run(debug=True, ssl_context=context, host=server_keys["url"], port="5000")

使用curl:

curl -v --cacert ../server_keys/cert.pem https://localhost:5000/list

但我仍然不适合dart(使用Intel Mac OSX Monetary)。

看起来您在Dart上偶然发现了一个bug。关于这个确切的问题还有一个悬而未决的问题。它只出现在macOS上，但在Windows/Linux/Android上它可以完美地工作…

下面是生成bash中的密钥的命令。我自己测试了这个脚本，它在Windows上工作，但在macOS上失败了。

openssl req -x509 -out localhost.crt -keyout localhost.key 
-newkey rsa:2048 -nodes -sha256 -subj '/CN=localhost' -extensions EXT 
-config <(printf "[dn]nCN=localhostn[req]ndistinguished_name = dnn[EXT]nsubjectAltName=DNS:localhostnkeyUsage=digitalSignaturenextendedKeyUsage=serverAuth")

相关内容

最新更新

热门标签：