加入收藏 | 设为首页 | 会员中心 | 我要投稿 李大同 (https://www.lidatong.com.cn/)- 科技、建站、经验、云计算、5G、大数据,站长网!
当前位置: 首页 > 综合聚焦 > 服务器 > 安全 > 正文

python – 构建Docker镜像时的InsecurePlatformWarning

发布时间:2020-12-16 03:52:43 所属栏目:安全 来源:网络整理
导读:我在构建Docker镜像时收到此警告: /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:79: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately

我在构建Docker镜像时收到此警告:

/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:79: 
      InsecurePlatformWarning: A true SSLContext object is not available. 
      This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. 
      For more information,see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.

几个来源(如InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately)说,pip install pyopenssl ndg-httpsclient pyasn1将解决这个问题.但是一旦pip尝试安装pyopenssl,我就会收到警告.

这是我的Dockerfile:

FROM ubuntu:14.04

# Install packages
RUN apt-get update && apt-get install -y 
    git 
    libmysqlclient-dev 
    mysql-server 
    nginx 
    python-dev 
    python-mysqldb 
    python-setuptools 
    supervisor 
    vim
RUN easy_install pip

# Handle urllib3 InsecurePlatformWarning
RUN apt-get install -y libffi-dev libssl-dev
RUN pip install pyopenssl ndg-httpsclient pyasn1

# ...more
似乎在运行pip:http://github.com/pypa/pip/issues/2681时会出现此警告,但在安装pyopenssl ndg-httpsclient pyasn1时,使用python请求时不会收到警告.

例如,如果我构建这个Dockerfile:

FROM ubuntu:14.04

# Install packages
RUN apt-get update && apt-get install -y 
    git 
    libmysqlclient-dev 
    mysql-server 
    nginx 
    python-dev 
    python-mysqldb 
    python-setuptools 
    supervisor 
    vim
RUN easy_install pip
RUN pip install requests

然后在容器内运行:

root@b2759f79f947:/# python
Python 2.7.6 (default,Jun 22 2015,17:58:13) 
[GCC 4.8.2] on linux2
Type "help","copyright","credits" or "license" for more information.

>>> import requests

>>> url = "https://www.digicert.com/"

>>> r = requests.get(url)

/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:100: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information,see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.

  InsecurePlatformWarning

如你所见,我得到了警告.
但是如果我在Dockerfile中添加这些行:

RUN apt-get install -y libffi-dev libssl-dev
RUN pip install pyopenssl ndg-httpsclient pyasn1

并运行相同的python命令,我不再收到警告.

如果您在安装pyopenssl时确实不想要警告,可以设置环境变量:PYTHONWARNINGS =“ignore:一个真正的SSLContext对象”,如下所示:https://github.com/pypa/pip/pull/3109

你的Dockerfile看起来像这样:

FROM ubuntu:14.04

# Install packages
RUN apt-get update && apt-get install -y 
    git 
    libmysqlclient-dev 
    mysql-server 
    nginx 
    python-dev 
    python-mysqldb 
    python-setuptools 
    supervisor 
    vim
RUN easy_install pip

# Handle urllib3 InsecurePlatformWarning
RUN apt-get install -y libffi-dev libssl-dev
ENV PYTHONWARNINGS="ignore:a true SSLContext object"
RUN pip install pyopenssl ndg-httpsclient pyasn1

另一个解决方案是将python升级到2.7.9

(编辑:李大同)

【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容!

    推荐文章
      热点阅读