Python请求和CX_Freeze

Question

我正在尝试冻结一个依赖于requests的Python应用程序，但是我遇到了以下错误：

Traceback (most recent call last):
  File "c:\Python33\lib\site-packages\requests\packages\urllib3\util.py", line 630, in ssl_wrap_socket
    context.load_verify_locations(ca_certs)
FileNotFoundError: [Errno 2] No such file or directory

看起来它在使用可执行文件时出现了找不到ssl证书的问题。我找到了this，似乎是同样的问题，但我无法弄清楚他们如何解决。主要问题似乎是由于requests捆绑的证书没有复制到压缩库中。因此，似乎我将不得不强制cx_freeze捆绑证书，然后从我的脚本中指向它。

从这个简单的脚本开始，一切都正常：

import requests
r = requests.get("https://yourapihere.com")
print(r.json())

如果我添加证书文件，就会出现错误：

import requests
r = requests.get("https://yourapihere.com", cert=requests.certs.where())
print(r.json())

-

Traceback (most recent call last):
  File "c:\Python33\lib\site-packages\requests\packages\urllib3\connectionpool.py", line 480, in urlopen
    body=body, headers=headers)
  File "c:\Python33\lib\site-packages\requests\packages\urllib3\connectionpool.py", line 285, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "c:\Python33\lib\http\client.py", line 1065, in request
    self._send_request(method, url, body, headers)
  File "c:\Python33\lib\http\client.py", line 1103, in _send_request
    self.endheaders(body)
  File "c:\Python33\lib\http\client.py", line 1061, in endheaders
    self._send_output(message_body)
  File "c:\Python33\lib\http\client.py", line 906, in _send_output
    self.send(msg)
  File "c:\Python33\lib\http\client.py", line 844, in send
    self.connect()
  File "c:\Python33\lib\site-packages\requests\packages\urllib3\connection.py", line 164, in connect
    ssl_version=resolved_ssl_version)
  File "c:\Python33\lib\site-packages\requests\packages\urllib3\util.py", line 637, in ssl_wrap_socket
    context.load_cert_chain(certfile, keyfile)
ssl.SSLError: [SSL] PEM lib (_ssl.c:2155)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "c:\Python33\lib\site-packages\requests\adapters.py", line 330, in send
    timeout=timeout
  File "c:\Python33\lib\site-packages\requests\packages\urllib3\connectionpool.py", line 504, in urlopen
    raise SSLError(e)
requests.packages.urllib3.exceptions.SSLError: [SSL] PEM lib (_ssl.c:2155)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "example.py", line 10, in <module>
    r = requests.get("https://yourapihere.com", cert=requests.certs.where())
  File "c:\Python33\lib\site-packages\requests\api.py", line 55, in get
    return request('get', url, **kwargs)
  File "c:\Python33\lib\site-packages\requests\api.py", line 44, in request
    return session.request(method=method, url=url, **kwargs)
  File "c:\Python33\lib\site-packages\requests\sessions.py", line 383, in request
    resp = self.send(prep, **send_kwargs)
  File "c:\Python33\lib\site-packages\requests\sessions.py", line 486, in send
    r = adapter.send(request, **kwargs)
  File "c:\Python33\lib\site-packages\requests\adapters.py", line 385, in send
    raise SSLError(e)
requests.exceptions.SSLError: [SSL] PEM lib (_ssl.c:2155)

我想我正在正确地使用它，但实际上我并不确定为什么它不起作用。我猜测在修复这个问题之后，我可以继续将证书添加到cx_freeze包中，就像这样：

example.py:

import os
import requests

cert = os.path.join(os.path.dirname(requests.__file__),'cacert.pem')
r = requests.get("https://yourapihere.com", cert=cert)
print(r.json())

setup.py:

from cx_Freeze import setup, Executable

import requests.certs
build_exe_options = {"zip_includes":[(requests.certs.where(),'requests/cacert.pem')]}

executables = [
    Executable('example.py')
]

setup(
      executables=executables
      )

如果有人能给我一些提示，那将不胜感激。

- Mac

---

在您的冻结代码中，requests.__file__ 不会指向真实的文件，因为该模块位于一个压缩文件中。请参阅 FAQ 中的 使用数据文件。 - Thomas K

我仔细检查了一下，requests.__file__指向zip文件。所以我想那应该没问题。 - Mac

不行，因为它不能仅仅打开 .../library.zip/requests/cacert.pem。该路径需要指向一个可以打开和读取的文件。 - Thomas K

那个第一个错误没有使用 freeze，只是正常运行。 - Mac

我有一种感觉，路径应该作为“verify”参数传递 - “cert”似乎是另一回事。 - Thomas K

Answer 1

我在另一个帖子中找到了这个对我有用的评论： https://dev59.com/_WUp5IYBdhLWcg3woojS#25239701

以下是摘要：

你也可以使用环境变量“REQUESTS_CA_BUNDLE”（如http://docs.python-requests.org/en/latest/user/advanced/#ssl-cert-verification所述）

这比纠正所有请求要简单得多：

os.environ["REQUESTS_CA_BUNDLE"] = os.path.join(os.getcwd(), "cacert.pem")

- The Human Puck

---

基于 os.getcwd() 进行操作只有在你从包含该文件的目录中运行程序时才有效。如果你创建了一个快捷方式并从其他地方运行它，它将找不到该文件。FAQ 中有一篇关于如何相对于你的 exe 文件查找数据文件的条目。 - Thomas K

Answer 2

使其正常工作的步骤：

• 明确告诉请求证书在哪里
• 告诉 cx_freeze 在“构建”时也获取证书文件
• 冻结时让代码使用正确的证书文件

test.py:

import os
import sys

import requests

# sets the path to the certificate file
if getattr(sys, 'frozen', False):
    # if frozen, get embeded file
    cacert = os.path.join(os.path.dirname(sys.executable), 'cacert.pem')
else:
    # else just get the default file
    cacert = requests.certs.where()

# remember to use the verify to set the certificate to be used
# I guess it could also work with REQUESTS_CA_BUNDLE, but I have not tried
r = requests.get('https://www.google.com', verify=cacert)

print(r)

setup.py:

from cx_Freeze import setup, Executable
import requests
import sys

executable = Executable( script = "test.py" )

# Add certificate to the build
options = {
    "build_exe": {
        'include_files' : [(requests.certs.where(), 'cacert.pem')]
    }
}

setup(
    version = "0",
    requires = ["requests"],
    options = options,
    executables = [executable]
)

构建它，只需：

$ python setup.py build

如果成功，您应该看到：

$ test
<Response [200]>

- Mac