请求返回 HTTP 599: error:0A000152:SSL routines::unsafe legacy renegotiation disabled

[b1n23]

请求返回 HTTP 599: error:0A000152:SSL routines::unsafe legacy renegotiation disabled

日志：

[W 230427 23:31:46 qiandao.Http.Fetcher fetcher:484] GET https://xxx/xxx[Warning] HTTP 599: error:0A000152:SSL routines::unsafe legacy renegotiation disabled -> Try to retry!


[W 230427 23:31:46 tornado.general iostream:1404] SSL Error on 11 ('x.x.x.x', 443): [SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED] unsafe legacy renegotiation disabled (_ssl.c:992)


[E 230427 23:31:46 qiandao.Http.Fetcher fetcher:488] error:0A000152:SSL routines::unsafe legacy renegotiation disabled

似乎是请求的网站使用了过时的协议？

解决方法：
https://stackoverflow.com/questions/71603314/ssl-error-unsafe-legacy-renegotiation-disabled

进入容器内，创建一个openssl.cnf文件，内容为：

openssl_conf = openssl_init

[openssl_init]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
Options = UnsafeLegacyRenegotiation

然后在添加环境变量OPENSSL_CONF，值为/root/openssl.cnf（这个文件的位置）

问题解决。