mirror of
https://github.com/micropython/micropython.git
synced 2025-09-06 09:50:20 +02:00
b802f0f8ab
The current `ssl` module has quite a few differences to the CPython implementation. This change moves the MicroPython variant to a new `tls` module and provides a wrapper module for `ssl` (in micropython-lib). Users who only rely on implemented comparible behavior can continue to use `ssl`, while users that rely on non-compatible behavior should switch to `tls`. Then we can make the facade in `ssl` more strictly adhere to CPython. Signed-off-by: Felix Dörre <felix@dogcraft.de>
63 lines
1.6 KiB
Python
63 lines
1.6 KiB
Python
# Test creating an SSL connection with specified ciphers.
|
|
|
|
try:
|
|
import os
|
|
import socket
|
|
import tls
|
|
except ImportError:
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
PORT = 8000
|
|
|
|
# These are test certificates. See tests/README.md for details.
|
|
cert = cafile = "ec_cert.der"
|
|
key = "ec_key.der"
|
|
with open(cafile, "rb") as f:
|
|
cadata = f.read()
|
|
with open(key, "rb") as f:
|
|
keydata = f.read()
|
|
|
|
try:
|
|
os.stat(cafile)
|
|
os.stat(key)
|
|
except OSError:
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
|
|
# Server
|
|
def instance0():
|
|
multitest.globals(IP=multitest.get_network_ip())
|
|
s = socket.socket()
|
|
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
|
s.bind(socket.getaddrinfo("0.0.0.0", PORT)[0][-1])
|
|
s.listen(1)
|
|
multitest.next()
|
|
s2, _ = s.accept()
|
|
server_ctx = tls.SSLContext(tls.PROTOCOL_TLS_SERVER)
|
|
server_ctx.load_cert_chain(cadata, keydata)
|
|
s2 = server_ctx.wrap_socket(s2, server_side=True)
|
|
assert isinstance(s2.cipher(), tuple)
|
|
print(s2.read(16))
|
|
s2.write(b"server to client")
|
|
s2.close()
|
|
s.close()
|
|
|
|
|
|
# Client
|
|
def instance1():
|
|
multitest.next()
|
|
s = socket.socket()
|
|
s.connect(socket.getaddrinfo(IP, PORT)[0][-1])
|
|
client_ctx = tls.SSLContext(tls.PROTOCOL_TLS_CLIENT)
|
|
ciphers = client_ctx.get_ciphers()
|
|
assert "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" in ciphers
|
|
client_ctx.set_ciphers(["TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256"])
|
|
client_ctx.verify_mode = tls.CERT_REQUIRED
|
|
client_ctx.load_verify_locations(cadata)
|
|
s = client_ctx.wrap_socket(s, server_hostname="micropython.local")
|
|
s.write(b"client to server")
|
|
print(s.read(16))
|
|
s.close()
|