PHP cURL 和 SSL 的奇怪超时

Question

在尝试访问 Amazon Cloudfront 时，我在使用 cURL 和 PHP 时遇到了奇怪的超时。这似乎会影响所有失效请求、创建分发等。cURL 要么报告接收到 0 个字节，要么报告接收到很少的字节，然后超时： Operation timed out after 120000 milliseconds with 88 out of 619 bytes received。

延长超时设置似乎没有什么不同。

使用CURLOPT_VERBOSE 进行跟踪会产生以下输出：

* About to connect() to cloudfront.amazonaws.com port 443 (#0)
*   Trying 72.21.215.67... * connected
* Connected to cloudfront.amazonaws.com (72.21.215.67) port 443 (#0)
* skipping SSL peer certificate verification
* SSL connection using SSL_RSA_WITH_RC4_128_MD5
* Server certificate:
*   subject: CN=cloudfront.amazonaws.com,O=Amazon.com Inc.,L=Seattle,ST=Washington,C=US
*   start date: Jul 30 00:00:00 2010 GMT
*   expire date: Jul 29 23:59:59 2013 GMT
*   common name: cloudfront.amazonaws.com
*   issuer: CN=VeriSign Class 3 Secure Server CA - G2,OU=Terms of use at https://www.verisign.com/rpa (c)09,OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US
> POST /2010-11-01/distribution/E1CIM4A92QFD98/invalidation HTTP/1.1
User-Agent: S3/php
Accept: */*
Host: cloudfront.amazonaws.com
Date: Wed, 07 Mar 2012 14:31:58 GMT
Content-Type: application/xml
Authorization: AWS ************************
Content-Length: 200

< HTTP/1.1 201 Created
< x-amzn-RequestId: 4c2d0d3f-6862-11e1-ac27-5531ac8c967f
< Location: https://cloudfront.amazonaws.com/2010-11-01/distribution/E1CIM4A92QFD98/invalidation/I35KLNROKA40FU
* Operation timed out after 120000 milliseconds with 0 bytes received
* Closing connection #0

这似乎类似于this question。但是，在我的情况下，看起来 curl 实际上确实得到了响应，但不知何故忽略了它并超时？据我所知，收到了响应（201 Created...），并且没有 SSL 错误。那么为什么 curl 会超时？

cURL 版本信息

[version_number] => 463623 
[age] => 3 
[features] => 1597 
[ssl_version_number] => 0 
[version] => 7.19.7 
[host] => x86_64-unknown-linux-gnu 
[ssl_version] => NSS/3.12.7.0 
[libz_version] => 1.2.3 
[protocols] => Array ( [0] => tftp [1] => ftp [2] => telnet [3] => dict [4] => ldap [5] => ldaps [6] => http [7] => file [8] => https [9] => ftps [10] => scp [11] => sftp )

Answer 1

仍然不完全确定为什么这个版本的 curl 会有这样的行为（它看起来像一个错误），但解决方案是编译不同版本的 curl 和 php（或多或少遵循these instructions）

Answer 2

这将有助于了解您如何设置 curl 会话。你是否在做这样的事情：

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_CAINFO, getcwd() . "/CAcerts/BuiltinObjectToken-EquifaxSecureCA.crt");

查看您是否遇到 SSL 验证问题的快速测试是：

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);