openssl s_client -connect www.handlingandfulfilment.co.uk:443

openssl s_client -connect www.handlingandfulfilment.co.uk:8079

New, TLSv1.2, Cipher is AES256-GCM-SHA384

import ssl

context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
# 禁用TLS 1.0 和 TLS 1.1
context.options |= ssl.OP_NO_TLSv1
context.options |= ssl.OP_NO_TLSv1_1
# 對(duì)于更現(xiàn)代的應(yīng)用，也可以禁用TLS 1.2，強(qiáng)制TLS 1.3
# context.options |= ssl.OP_NO_TLSv1_2

CIPHERS = 'ECDHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:!aNULL:!MD5'
context.set_ciphers(CIPHERS)

import certifi
context.load_verify_locations(certifi.where())

import certifi
import requests
from requests.adapters import HTTPAdapter, Retry
from urllib3 import PoolManager
from urllib3.util.ssl_ import create_urllib3_context
from zeep import Client
from zeep.transports import Transport
from dataclasses import dataclass, field

# 定義所需的加密套件
CIPHERS = 'ECDHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:!aNULL:!MD5'

class TLSAdapter(HTTPAdapter):
    """
    自定義HTTPAdapter，用于強(qiáng)制TLS版本、指定加密套件和加載certifi證書(shū)。
    """
    def init_poolmanager(self, *args, **kwargs):
        # 創(chuàng)建一個(gè)帶有指定加密套件的SSL上下文
        context = create_urllib3_context(ciphers=CIPHERS)

        # 加載certifi提供的CA證書(shū)
        context.load_verify_locations(certifi.where())

        # 再次設(shè)置加密套件，確保生效
        context.set_ciphers(CIPHERS)

        # 禁用TLS 1.0 和 TLS 1.1
        # SSL_OP_NO_TLSv1 (0x80000) 和 SSL_OP_NO_TLSv1_1 (0x1000000) 是OpenSSL的選項(xiàng)標(biāo)志
        context.options |= 0x80000  # ssl.OP_NO_TLSv1
        context.options |= 0x1000000 # ssl.OP_NO_TLSv1_1

        # 將自定義的SSL上下文傳遞給urllib3的PoolManager
        self.poolmanager = PoolManager(*args, ssl_context=context, **kwargs)

def requests_retry_session(
    retries=8,
    backoff_factor=0.3,
    status_forcelist=(500, 502, 503, 504),
    session=None,
) -> requests.Session:
    """
    創(chuàng)建一個(gè)帶有重試機(jī)制和自定義TLS配置的requests會(huì)話。
    """
    session = session or requests.Session()
    retry = Retry(
        total=retries,
        read=retries,
        connect=retries,
        backoff_factor=backoff_factor,
        status_forcelist=status_forcelist,
    )
    # 使用自定義的TLSAdapter掛載到http和https協(xié)議上
    adapter = TLSAdapter(max_retries=retry)
    session.mount('http://', adapter)
    session.mount('https://', adapter)
    return session

# 示例：如何將此會(huì)話用于zeep客戶端
@dataclass(order=True)
class ArkH:
    wsdl_url: str
    consumerName: str
    passCode: str
    helixClientName: str
    helixUsername: str
    userPassword: str
    client: Client = field(init=False)
    dummyCustomer: str
    dummy_customer_mapping: dict = field(default_factory=lambda: {'CTS':'CTS'})
    dear_warehouse: str
    dear_ship_after_3PL_shipment_date: bool

    def __post_init__(self):
        # 創(chuàng)建一個(gè)帶有自定義TLS配置和重試機(jī)制的requests會(huì)話
        session = requests_retry_session()
        # 將此會(huì)話傳遞給Zeep的Transport
        transport = Transport(session=session, timeout=40, operation_timeout=40)
        self.client = Client(self.wsdl_url, transport=transport)

# 實(shí)際使用示例 (假設(shè)你有一個(gè)WSDL URL)
# ark_client = ArkH(
#     wsdl_url='https://www.handlingandfulfilment.co.uk:8079/YourService?wsdl',
#     consumerName='your_consumer',
#     passCode='your_passcode',
#     helixClientName='your_helix_client',
#     helixUsername='your_helix_username',
#     userPassword='your_user_password',
#     dummyCustomer='CTS',
#     dear_warehouse='main',
#     dear_ship_after_3PL_shipment_date=True
# )
# print("Zeep client initialized with custom TLS settings.")