如何解碼X-ARR-ClientCertAzure 應用服務傳遞到我的 Azure Function 代碼的標頭？例子：HTTP 觸發(fā)的 Python Azure FunctionAzure 應用服務配置為接受客戶端證書請求者通過 GET 請求發(fā)送客戶端證書（按照此處的 Postman 說明）X-ARR-ClientCertAzure 應用服務通過標頭將客戶端證書傳遞給函數(shù)代碼問題：我找不到有關如何編碼此標頭的文檔我找不到如何使用 Python 解碼此標頭的示例我得到的最接近的是這段代碼：import loggingimport base64import azure.functions as funcdef main(req: func.HttpRequest) -> func.HttpResponse: logging.info('####### Python HTTP trigger certificate validation function processing a request. #######') # Retrieve client cert from headers req_cert_str = req.headers.get("X-ARR-ClientCert") req_cert_bytes = base64.b64decode(req_cert_str) decoded_string = req_cert_bytes.decode('cp1252') return func.HttpResponse( decoded_string )結果是Status 500 Internal server error：Exception while executing function: Functions.certiFunc <--- Result: Failure Exception: UnicodeDecodeError: 'charmap' codec can't decode byte 0x8d in position 403: character maps to <undefined> Stack: File "/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/dispatcher.py", line 343, in _handle__invocation_request call_result = await self._loop.run_in_executor( File "/usr/local/lib/python3.8/concurrent/futures/thread.py", line 57, in run result = self.fn(*self.args, **self.kwargs) File "/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/dispatcher.py", line 480, in __run_sync_func return func(**params) File "/home/site/wwwroot/certiFunc/__init__.py", line 14, in main decoded_string = req_cert_bytes.decode('cp1252') File "/usr/local/lib/python3.8/encodings/cp1252.py", line 15, in decode return codecs.charmap_decode(input,errors,decoding_table) 當替換 時decoded_string = req_cert_bytes.decode('utf-8')，我得到：運行以下命令時（直接解碼標頭）...req_cert_str = req.headers.get("X-ARR-ClientCert")decoded_string = base64.b64decode(req_cert_str) ...我得到一個Status 200 Success，但響應是二進制（？）字符和純文本的混搭：
1 回答
犯罪嫌疑人X
TA貢獻2080條經驗 獲得超4個贊
由于您要從 Postman 添加客戶端證書，因此它采用 DER（二進制）格式。您可以使用 Python加密技術從字節(jié)本身解碼 x509 證書。
from cryptography import x509
# header is base64 encoded string, so extract the bytes first
req_cert_str = req.headers.get("X-ARR-ClientCert")?
req_cert_bytes = base64.b64decode(req_cert_str)
cert = x509.load_der_x509_certificate(req_cert_bytes)
# do stuffs with cert
logging.info(f'Received client cert with serial number: {cert.serial_number}')
添加回答
舉報
0/150
提交
取消