错误：500 无法连接到 example.com:443（证书验证失败）

Question

I get that error. Here is my code.

   use LWP::UserAgent;
    use HTTP::Request::Common qw(POST);
    use HTTP::Cookies;

$URL="https://example.com/my.plicy";
$UA = LWP::UserAgent->new();
$UA->ssl_opts( verify_hostnames => 0 ); 
#UA->ssl_opts( SSL_ca_file => Mozilla::CA::SSL_ca_file() );

$req =HTTP::Request::Common::POST("$URL",
   Content_type=>'form-data',
   Content =>[
         'username'=>'111',
         'password'=>'2222',
         'vhost'=>'standard'
   ]
);
$req->header('Cookie' =>q(TIN=287000; LastMRH_Session=439960f5; MRHSession=78c9c47291c1fcedae166121439960f5));


$resp=$UA->request($req);

if( ($resp->code() >= 200) && ($resp->code() <400) ) {
  print $resp->decoded_content;

}else{
  print "Error: ". $resp->status_line. "\n";
}
   

The problem is that I have no real certificate to provide, because the site is in development stages, and a certificate of the localhost is used... the browsers don't recognize it.

Is there a way to bypass the verification?? and avoid the error?

UPDATE:

I changed my code a bit. Added another library and added this function:

use CACertOrg::CA;

$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0;

$UA->ssl_opts(
    verify_hostnames => 0,
    SSL_ca_file      => CACertOrg::CA::SSL_ca_file()
);

Now I get this:

---

Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER together with SSL_ca_file|SSL_ca_path for verification. If you really don't want to verify the certificate and keep the connection open to Man-In-The-Middle attacks please set SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

---

at C:/Perl/lib/LWP/Protocol/http.pm line 31.

So I changed the options to this:

    $UA->ssl_opts(
     SSL_verify_mode   => 'SSL_VERIFY_NONE',
    verify_hostnames => 0,
    SSL_ca_file      => CACertOrg::CA::SSL_ca_file()
);

I get nothing printed... I don't get an error, though. Is it a good sign?

Answer 1

您需要在use ..部分后添加这一行：

$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0;

Answer 2

试试这个

my $UA   = LWP::UserAgent->new( ssl_opts => { verify_hostname => 0, } );

Answer 3

Digging up corpses here but I was in the same position and here is what you need to include in order to fix it ;)

$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0;
$ENV{PERL_LWP_SSL_CA_FILE} = "/path/to/your/cert.pem";

Only setting verify_hostnames to 0 is not enough when you play around with self signed certificates.

Answer 4

None of those solutions worked for me (two and a half years after the last update.. but still the top search result) - I needed an additional package:

cpan install LWP::Protocol::https

without any further alterations to my code.