> ## Documentation Index > Fetch the complete documentation index at: https://brightdata-ipv6-release.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # SSL 证书 The SSL certificate allows you to establish end-to-end encrypted connections when using [Residential Proxies](https://docs.brightdata.com/cn/proxy-networks/residential/introduction), the [Web Unlocker](https://docs.brightdata.com/cn/scraping-automation/web-unlocker/introduction) or the [SERP API](https://docs.brightdata.com/cn/scraping-automation/serp-api/introduction). 如果您只是进行初步测试，也可以不使用 SSL 证书，稍后再使用。使用 SSL 证书非常简单。只需下载证书并选择在环境中的使用方式。 ## 下载 SSL 证书 1. **右键**单击此[链接上的](https://brightdata.com/static/brightdata_proxy_ca.zip)将该文件“另存为”到您的硬盘中。 2. **Unzip the file** and choose the certificate to use. Most users - espcially if they are new to Bright Data - should use the \**new* SSL certificate. ## 在代码中使用 SSL 证书如果您编写抓取代码，在大多数情况下，您无需在环境中安装 SSL 证书。只需在代码中加载 SSL 证书即可。例如，对于 CURL： ```sh theme={null} curl --proxy brd.superproxy.io:33335 --proxy-user brd-customer--zone-: --cacert "https://geo.brdtest.com/mygeo.json" ``` 具体语法可参考仪表板中的 Bright Data 示例代码。 ## 安装 SSL 证书在某些情况下，例如使用某些不允许从硬盘加载证书的第三方工具时，您仍需要在计算机上安装 SSL 证书。 ### Where do I install the certificate? The SSL certificate needs to be installed **on the host that is running the actual scraping code or application.** In most cases this is your PC but, if you use a cloud-hosted server to run your code, you need to install the SSL certificate on the server itself. ### Installation instructions 这只需要 2 分钟，只需按照以下说明操作即可： * 如果您还没有这样做，请右键单击此链接，将文件“另存为”到您的硬盘中: [https://brightdata.com/static/brightdata\_proxy\_ca.zip](https://brightdata.com/static/brightdata_proxy_ca.zip) * 双击 ca.crt 文件 * 按照 Windows 的说明安装证书。 * 重启电脑 * 重启，您就可以连接到所需的 Bright Data 产品（住宅代理、Web Unlocker 或 SERP API） * Once you've download the [certificate](https://brightdata.com/static/brightdata_proxy_ca.zip) file (see the instruction on the top of this article)

* Type in the address bar: `about:preferences#advanced` * Under “安全” click “View Certificates” * Select the authorities tab, and click “Import” button below * Browse to the directory you downloaded the certificate file to, select the certificate file and click “Open” * In the popup box click the checkbox “Trust this CA to identify websites” * Click OK to complete the installation * Make sure Bright Data proxy is configured as Firefox's proxy, and browse thru proxy to a protected website * Copy the downloaded certificate file `ca.crt` to the `/usr/local/share/ca-certificates/` folder. * Run `sudo update-ca-certificates`. The output of the command should state that 1 certificate was added. * Go to an SSL-protected website to check that everything is working as cted. * Double-click the downloaded certificate file. You will see the "Keychain Access" application. * Double-click the "luminati.io" certificate to see a popup with certificate settings. * Select "Always Trust" in the "When using this certificate" dropdown. * Close the popup enter your credentials when asked. * Restart your browser and go to an SSL-protected website to check that everything is working as expected. * Open up Safari * Navigate to this page and download the certificate using [this link](https://brightdata.com/static/brightdata_proxy_ca.zip), but first read the following two items. * Click Install and provide your passcode * Click Install in the top right corner and then Done * Go to iPhone "Settings" * Go to "About" * Go to "Certificate Trust Settings" * Enable the "luminati.io" certificate * You can now go to an SSL-protected website in any browser installed in your system to check that everything is working as expected. * Download the following [certificate](https://brightdata.com/static/brightdata_proxy_ca.zip) and save it on your phone. * On your phone, look for the certificate through 'My files'. * Enter your password and press next. * Choose a name, preferably something you will recognize like Bright Data. * Under 'Used for', choose 'VPN and apps' and click OK. * You can now go to an SSL-protected website in any browser installed in your system to check that everything is working as expected. ## 如何忽略 SSL 错误？在某些情况下，您需要安装我们的证书或忽略 SSL 错误，才能访问特定产品或功能。如果您不想安装我们的证书，则可以忽略 SSL 错误。请查看以下不同编程语言的代码片段，高亮部分是为忽略 SSL 错误而需要添加到代码中的内容。 ```sh Curl theme={null} # Add -k to ignore ssl errors curl --proxy brd.superproxy.io:33335 --proxy-user brd-customer--zone-: -k "http://lumtest.com/myip.json" ``` ```js NodeJS theme={null} #!/usr/bin/env node /*This sample code assumes the request-promise package is installed. If it is not installed run: "npm install request-promise"*/ require('request-promise')({ url: 'http://lumtest.com/myip.json', proxy: 'http://brd-customer--zone-:@brd.superproxy.io:33335', // Make sure you set reject rejectUnauthorized to false rejectUnauthorized: false, }) .then(function(data){ console.log(data); }, function(err){ console.error(err); }); ``` ```python Python theme={null} #!/usr/bin/env python print('If you get error "ImportError: No module named \'six\'" install six:\n'+\ '$ sudo pip install six'); import sys # Make sure you add these two line to ignore ssl error import ssl ssl._create_default_https_context = ssl._create_unverified_context if sys.version_info[0]==2: import six from six.moves.urllib import request opener = request.build_opener( request.ProxyHandler( {'http': 'http://brd-customer--zone-:@brd.superproxy.io:33335', 'https': 'http://brd-customer--zone-:@brd.superproxy.io:33335'})) print(opener.open('http://lumtest.com/myip.json').read()) if sys.version_info[0]==3: import urllib.request opener = urllib.request.build_opener( urllib.request.ProxyHandler( {'http': 'http://brd-customer--zone-:@brd.superproxy.io:33335', 'https': 'http://brd-customer--zone-:@brd.superproxy.io:33335'})) print(opener.open('http://lumtest.com/myip.json').read()) ``` ```cs C# theme={null} using System; using System.Net; class Example { static void Main() { // Make sure you add this line to ignore ssl error ServicePointManager.ServerCertificateValidationCallback += (sender, cert, chain, ssl政策Errors) => true; var client = new WebClient(); client.Proxy = new WebProxy("brd.superproxy.io:33335"); client.Proxy.Credentials = new NetworkCredential("brd-customer--zone-", ""); Console.WriteLine(client.DownloadString("http://lumtest.com/myip.json")); } } ``` ```ruby Ruby theme={null} #!/usr/bin/ruby require 'uri' require 'net/http' require 'net/https' uri = URI.parse('http://lumtest.com/myip.json') proxy = Net::HTTP::Proxy('brd.superproxy.io', 33335, 'brd-customer--zone-', '') req = Net::HTTP::Get.new(uri) # Make sure you add verify_mode => OpenSSL::SSL::VERIFY_NONE result = proxy.start(uri.host,uri.port, :use_ssl => uri.scheme == 'https', :verify_mode => OpenSSL::SSL::VERIFY_NONE) do |http| http.request(req) send puts result.body ``` ```java Java theme={null} package example; import org.apache.http.HttpHost; import org.apache.http.client.fluent.*; public class Example { public static void main(String[] args) throws Exception { HttpHost proxy = new HttpHost("brd.superproxy.io", 33335); String res = Executor.newInstance() .auth(proxy, "brd-customer--zone-", "") .execute(Request.Get("http://lumtest.com/myip.json").viaProxy(proxy)) .returnContent().asString(); System.out.println(res); } } /*In the above example, we are not explicitly ignoring SSL I will share with you a short code I wrote that does ignore SSL using JAVA (was taken from cloud proxy manager examples) */ import java.io.*; import java.net.*; import java.security.cert.X509Certificate; import javax.net.ssl.*; import java.util.Base64; public class Example { public static void main(String[] args) throws Exception { // Disable restricted headers for proxy authentication System.setProperty("jdk.http.auth.tunneling.disabledSchemes", ""); // Set up a TrustManager that does not validate certificate chains SSLContext sc = SSLContext.getInstance("SSL"); TrustManager trust_manager = new X509TrustManager() { public X509Certificate[] getAcceptedIssuers() { return null; } public void checkClientTrusted(X509Certificate[] certs, String authType) { } public void checkServerTrusted(X509Certificate[] certs, String authType) { } }; TrustManager[] trust_all = new TrustManager[] { trust_manager }; sc.init(null, trust_all, new java.security.SecureRandom()); HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory()); // Set up the proxy and open a connection URL url = new URL("https://geo.brdtest.com/mygeo.json"); Proxy proxy = new Proxy(Proxy.Type.HTTP, new InetSocketAddress("brd.superproxy.io", 33335)); URLConnection yc = url.openConnection(proxy); // Set default Authenticator for proxy authentication Authenticator.setDefault(new Authenticator() { @Override public PasswordAuthentication getPasswordAuthentication() { return new PasswordAuthentication("brd-customer--zone-", "".toCharArray()); } }); // Read and print the response from the server BufferedReader in = new BufferedReader(new InputStreamReader(yc.getInputStream())); String inputLine; while ((inputLine = in.readLine()) != null) System.out.println(inputLine); in.close(); } } ``` ```vba VBA theme={null} Imports System.Net Module Module1 Sub Main() ' Make sure you add this line to ignore ssl error ServicePointManager.ServerCertificateValidationCallback = Function(se, cert, chain, sslerror) True Dim Client As New WebClient Client.Proxy = New WebProxy("http://brd.superproxy.io:33335") Client.Proxy.Credentials = New NetworkCredential("brd-customer--zone-", "") Console.WriteLine(Client.DownloadString("http://lumtest.com/myip.json")) End Sub End Module ``` ```php PHP theme={null} -zone-:'); // Make sure you add this line to ignore ssl error curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0); curl_exec($curl); ?> ``` ```perl Perl theme={null} #!/usr/bin/perl use LWP::UserAgent; # Make sure you add this line to ignore ssl error use IO::Socket::SSL qw( SSL_VERIFY_NONE ); my $agent = LWP::UserAgent->new(); $agent->proxy(['http', 'https'], "http://brd-customer--zone-:\@brd.superproxy.io:33335"); $agent->ssl_opts(verify_hostname => 0, SSL_verify_mode => SSL_VERIFY_NONE); print $agent->get('http://lumtest.com/myip.json')->content(); ``` ## SSL 分析如何工作？某些功能需要 Proxy Manager 访问 HTTPS 流量。这可以通过在代理端口配置页面上启用 SSL 分析选项来实现。一旦允许 Proxy Manager 终止 SSL，您还需要信任 [Bright Data Certificate Authority (CA)](https://brightdata.com/static/brightdata_proxy_ca.zip)。 Proxy Manager 将与目标网站创建安全的加密 HTTPS 连接，解密流量以记录请求，并根据您的设置运行规则，然后将响应通过加密 HTTPS 连接传回您的客户端，该连接带有由我们的 CA 证书签名的证书。