mirror of
https://github.com/micropython/micropython.git
synced 2025-09-05 17:30:41 +02:00
f3f215e9bd
This commit adds: 1) Methods to SSLContext class that match CPython signature: - `SSLContext.load_cert_chain(certfile, keyfile)` - `SSLContext.load_verify_locations(cafile=, cadata=)` - `SSLContext.get_ciphers()` --> ["CIPHERSUITE"] - `SSLContext.set_ciphers(["CIPHERSUITE"])` 2) `sslsocket.cipher()` to get current ciphersuite and protocol version. 3) `ssl.MBEDTLS_VERSION` string constant. 4) Certificate verification errors info instead of `MBEDTLS_ERR_X509_CERT_VERIFY_FAILED`. 5) Tests in `net_inet` and `multi_net` to test these new methods. `SSLContext.load_cert_chain` method allows loading key and cert from disk passing a filepath in `certfile` or `keyfile` options. `SSLContext.load_verify_locations`'s `cafile` option enables the same functionality for ca files. Signed-off-by: Carlos Gil <carlosgilglez@gmail.com>
57 lines
1.3 KiB
Python
57 lines
1.3 KiB
Python
# Simple test creating an SSL connection and transferring some data
|
|
# This test won't run under CPython because CPython doesn't have key/cert
|
|
|
|
try:
|
|
import binascii, os, socket, ssl
|
|
except ImportError:
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
PORT = 8000
|
|
|
|
# These are test certificates. See tests/README.md for details.
|
|
certfile = "multi_net/rsa_cert.der"
|
|
keyfile = "multi_net/rsa_key.der"
|
|
|
|
try:
|
|
os.stat(certfile)
|
|
os.stat(keyfile)
|
|
except OSError:
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
with open(certfile, "rb") as cf:
|
|
cert = cadata = cf.read()
|
|
|
|
with open(keyfile, "rb") as kf:
|
|
key = kf.read()
|
|
|
|
|
|
# Server
|
|
def instance0():
|
|
multitest.globals(IP=multitest.get_network_ip())
|
|
s = socket.socket()
|
|
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
|
s.bind(socket.getaddrinfo("0.0.0.0", PORT)[0][-1])
|
|
s.listen(1)
|
|
multitest.next()
|
|
s2, _ = s.accept()
|
|
s2 = ssl.wrap_socket(s2, server_side=True, key=key, cert=cert)
|
|
print(s2.read(16))
|
|
s2.write(b"server to client")
|
|
s2.close()
|
|
s.close()
|
|
|
|
|
|
# Client
|
|
def instance1():
|
|
multitest.next()
|
|
s = socket.socket()
|
|
s.connect(socket.getaddrinfo(IP, PORT)[0][-1])
|
|
s = ssl.wrap_socket(
|
|
s, cert_reqs=ssl.CERT_REQUIRED, server_hostname="micropython.local", cadata=cadata
|
|
)
|
|
s.write(b"client to server")
|
|
print(s.read(16))
|
|
s.close()
|