SSL: EE_KEY_TOO_SMALL 解决办法

最新推荐文章于 2025-03-21 00:20:35 发布

Li-Yongjun

最新推荐文章于 2025-03-21 00:20:35 发布

阅读量3.3w

点赞数 2

分类专栏： Linux 网络 # Python 文章标签： linux ssl flask https 证书

本文链接：https://blog.csdn.net/lyndon_li/article/details/114667122

版权

Linux 同时被 3 个专栏收录

238 篇文章

订阅专栏

网络

44 篇文章

订阅专栏

Python

6 篇文章

订阅专栏

本文介绍了一种在使用Flask框架部署HTTPS服务时遇到的私钥长度过短导致的SSLError异常，并提供了详细的解决方案，包括如何生成符合要求的私钥和证书。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

源码目录树

$ tree
.
├── hello.py
├── server.crt
└── server.key

hello.py

from flask import Flask
app = Flask(__name__)

@app.route('/')
def hello():
    return 'hello'

if __name__ == '__main__':
    app.run(host='127.0.0.1', port=5000, ssl_context=('server.crt', 'server.key'))

启动报错

$ python3 hello.py 
 * Serving Flask app "hello" (lazy loading)
 * Environment: production
   WARNING: This is a development server. Do not use it in a production deployment.
   Use a production WSGI server instead.
 * Debug mode: off
Traceback (most recent call last):
  File "hello.py", line 9, in <module>
    app.run(host='127.0.0.1', port=5000, ssl_context=('server.crt', 'server.key'))
  File "/home/liyongjun/.local/lib/python3.8/site-packages/flask/app.py", line 990, in run
    run_simple(host, port, self, **options)
  File "/home/liyongjun/.local/lib/python3.8/site-packages/werkzeug/serving.py", line 1052, in run_simple
    inner()
  File "/home/liyongjun/.local/lib/python3.8/site-packages/werkzeug/serving.py", line 996, in inner
    srv = make_server(
  File "/home/liyongjun/.local/lib/python3.8/site-packages/werkzeug/serving.py", line 847, in make_server
    return ThreadedWSGIServer(
  File "/home/liyongjun/.local/lib/python3.8/site-packages/werkzeug/serving.py", line 766, in __init__
    self.socket = ssl_context.wrap_socket(sock, server_side=True)
  File "/home/liyongjun/.local/lib/python3.8/site-packages/werkzeug/serving.py", line 656, in wrap_socket
    return ssl.wrap_socket(
  File "/usr/lib/python3.8/ssl.py", line 1402, in wrap_socket
    context.load_cert_chain(certfile, keyfile)
ssl.SSLError: [SSL: EE_KEY_TOO_SMALL] ee key too small (_ssl.c:4022)

原因是使用的私钥长度太短了，需要高于 1024 位，这里我们再重新生成一个 2048 位的密钥和证书：

# 生成私钥(Generate a private key) : server.key
openssl genrsa -des3 -out server.key 2048

# Generate a CSR : server.csr
openssl req -new -key server.key -out server.csr

# Remove Passphrase from key : server.key.org 、server.crt
cp server.key server.key.org
openssl rsa -in server.key.org -out server.key

# 产生自签名证书(Generate self signed certificate): server.crt
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

替换掉上面的私钥和证书文件就可以了
再次运行：

$ python3 hello.py 
 * Serving Flask app "hello" (lazy loading)
 * Environment: production
   WARNING: This is a development server. Do not use it in a production deployment.
   Use a production WSGI server instead.
 * Debug mode: off
 * Running on https://127.0.0.1:5000/ (Press CTRL+C to quit)

访问成功：
在这里插入图片描述