From 5b8914338ffd8033dc9dcb6e5e00b2c651a19120 Mon Sep 17 00:00:00 2001
From: wwwwwwwww <526125649@qq.com>
Date: Wed, 10 Jun 2026 18:00:08 +0800
Subject: [PATCH] 1

---
 video-gen-api/app/services/payment.py | 16 ++--------------
 1 file changed, 2 insertions(+), 14 deletions(-)

diff --git a/video-gen-api/app/services/payment.py b/video-gen-api/app/services/payment.py
index 24c8f1bb..9b0bd689 100644
--- a/video-gen-api/app/services/payment.py
+++ b/video-gen-api/app/services/payment.py
@@ -1,5 +1,6 @@
 import logging
 import os
+import certifi
 from datetime import datetime, timedelta
 
 from sqlalchemy import select
@@ -156,20 +157,7 @@ def _get_alipay_client(app_id: str, private_key: str, public_key: str, gateway:
     config.alipay_public_key = public_key
     config.sign_type = "RSA2"
     config.charset = "utf-8"
-    
-    # 配置 SSL 验证相关参数
-    # 如果服务器缺少 CA 证书，可以尝试以下方案：
-    # 1. 设置 verify_ssl = False（不推荐生产环境）
-    # 2. 指定 CA 证书路径: config.ca_certificates = "/path/to/ca-certificates.crt"
-    try:
-        # 尝试禁用 SSL 验证（仅用于解决证书问题）
-        config.verify_ssl = False
-        logger.warning("SSL verification disabled for Alipay API (temporary workaround)")
-    except AttributeError:
-        # 如果配置对象不支持 verify_ssl 属性，使用备选方案
-        logger.info("AlipayClientConfig does not support verify_ssl attribute")
-        pass
-    
+    config.ca_certificates = certifi.where()
     try:
         _alipay_client = DefaultAlipayClient(config, logger)
         _alipay_client_app_id = app_id