ZYT/zyt
2
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

更新

Browse Source
This commit is contained in:
Your Name
2026-04-21 09:49:44 +08:00
parent c9e0419895
commit c15c348b7a
454 changed files with 5391 additions and 25651 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/app/common/service/gancao/GancaoOpenApiTransport.php
+24 -9
View File
@@ -62,14 +62,18 @@ final class GancaoOpenApiTransport
'Expect:',
];
// cURL 常量在部分精简构建里可能未注册，统一用 defined() 做优雅降级，值取自官方枚举
$httpVer11 = defined('CURL_HTTP_VERSION_1_1') ? CURL_HTTP_VERSION_1_1 : 2;
$ipv4Only = defined('CURL_IPRESOLVE_V4') ? CURL_IPRESOLVE_V4 : 1;
$ch = curl_init($this->url);
curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1); // 改用 HTTP/1.1
curl_setopt($ch, CURLOPT_HTTP_VERSION, $httpVer11); // 改用 HTTP/1.1
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_USERAGENT, $this->userAgent);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_ENCODING, 'gzip');
curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
curl_setopt($ch, CURLOPT_IPRESOLVE, $ipv4Only);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10); // 增加连接超时
curl_setopt($ch, CURLOPT_TIMEOUT, 120);
curl_setopt($ch, CURLOPT_POSTFIELDS, $cipher);
@@ -77,14 +81,25 @@ final class GancaoOpenApiTransport
if (str_starts_with($this->url, 'https:')) {
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); // 改为 0，完全禁用主机验证
// 添加 SSL 相关选项
curl_setopt($ch, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); // 强制使用 TLS 1.2
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'DEFAULT@SECLEVEL=1'); // 降低安全级别
// 强制 TLS 1.2；常量值为 6，但部分 PHP/cURL 构建未注册该常量，运行时未定义时退化为默认 TLS
$tls12 = defined('CURL_SSLVERSION_TLSv1_2') ? CURL_SSLVERSION_TLSv1_2 : 6;
curl_setopt($ch, CURLOPT_SSLVERSION, $tls12);
// 可选 cipher list。默认不设（交给 cURL 自带默认，兼容性最好）。
// 需要兼容弱加密服务器时，在 config/gancao_scm.php 或 .env 里设：
// GANCAO_SCM_TLS_CIPHERS="DEFAULT@SECLEVEL=1" // 仅 OpenSSL 构建的 cURL 支持此语法
// GANCAO_SCM_TLS_CIPHERS="DEFAULT:!aNULL:!eNULL" // 通用写法
// cURL 是 LibreSSL/NSS/GnuTLS/BoringSSL 时，@SECLEVEL= 会直接报 CURLE_SSL_CIPHER(59)。
$cipherList = trim((string) \think\facade\Config::get('gancao_scm.tls_ciphers', ''));
if ($cipherList !== '') {
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, $cipherList);
}
}
// 添加 TCP keepalive（部分旧 libcurl 可能没注册 CURLOPT_TCP_KEEPALIVE，守一下）
if (defined('CURLOPT_TCP_KEEPALIVE')) {
curl_setopt($ch, CURLOPT_TCP_KEEPALIVE, 1);
curl_setopt($ch, CURLOPT_TCP_KEEPIDLE, 120);
curl_setopt($ch, CURLOPT_TCP_KEEPINTVL, 60);
}
// 添加 TCP keepalive
curl_setopt($ch, CURLOPT_TCP_KEEPALIVE, 1);
curl_setopt($ch, CURLOPT_TCP_KEEPIDLE, 120);
curl_setopt($ch, CURLOPT_TCP_KEEPINTVL, 60);
$raw = curl_exec($ch);
$info = curl_getinfo($ch);