Skip to content
Snippets Groups Projects
Commit 73e012ae authored by Dominik Fuhrmann's avatar Dominik Fuhrmann
Browse files

new scripts

parent 882ab890
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
communicationScripts/client.py
+ 169
− 22
View file @ 73e012ae
import wolfssl #!/usr/bin/env python
#
# -*- coding: utf-8 -*-
#
# client.py
#
# Copyright (C) 2006-2020 wolfSSL Inc.
#
# This file is part of wolfSSL. (formerly known as CyaSSL)
#
# wolfSSL is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# wolfSSL is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
# pylint: disable=missing-docstring, invalid-name, import-error
import sys
import socket import socket
import logging import argparse
try:
import wolfssl
except ImportError:
print("You must run 'python setup.py install' to use the examples")
sys.exit()
def build_arg_parser():
parser = argparse.ArgumentParser(add_help=False)
parser.add_argument(
"-?", "--help", action="help",
help="show this help message and exit"
)
parser.add_argument(
"-h", metavar="host", default="127.0.0.1",
help="Host to connect to, default 127.0.0.1"
)
parser.add_argument(
"-p", metavar="port", type=int, default=11111,
help="Port to connect on, not 0, default 11111"
)
parser.add_argument(
"-v", metavar="version", type=int, choices=[0, 1, 2, 3, 4, 5],
default=5,
help="SSL version [0-5]"
"(SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1.3, SSLv23)"
)
parser.add_argument(
"-u", action="store_true",
help="Use UDP DTLS, add -v 0 for DTLSv1, -v 1 for DTLSv1.2 (default)"
)
parser.add_argument(
"-l", metavar="ciphers", type=str, default="",
help="Cipher suite list (: delimited)"
)
parser.add_argument(
"-c", metavar="certificate", default="./certs/client-cert.pem",
help="Certificate file, default ./certs/client-cert.pem"
)
parser.add_argument(
"-k", metavar="key", default="./certs/client-key.pem",
help="Key file, default ./certs/client-key.pem"
)
parser.add_argument(
"-A", metavar="ca_file", default="./certs/ca-cert.pem",
help="Certificate Authority file, default ./certs/ca-cert.pem"
)
parser.add_argument(
"-d", action="store_true",
help="Disable client cert check"
)
parser.add_argument(
"-g", action="store_true",
help="Send server HTTP GET"
)
parser.add_argument(
"-C", action="store_true",
help="Disable CRL"
)
parser.add_argument(
"-r", metavar="crl_file", default="./certs/crl.pem",
help="CRL file, default ./certs/crl.pem"
)
return parser
def get_SSLmethod(index):
return (
wolfssl.PROTOCOL_SSLv3,
wolfssl.PROTOCOL_TLSv1,
wolfssl.PROTOCOL_TLSv1_1,
wolfssl.PROTOCOL_TLSv1_2,
wolfssl.PROTOCOL_TLSv1_3,
wolfssl.PROTOCOL_SSLv23
)[index]
def get_DTLSmethod(index):
return (
wolfssl.PROTOCOL_DTLSv1,
wolfssl.PROTOCOL_DTLSv1_2,
wolfssl.PROTOCOL_DTLSv1_3
)[index]
def main():
args = build_arg_parser().parse_args()
# DTLS connection over UDP
if args.u:
bind_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM, 0)
context = wolfssl.SSLContext(get_DTLSmethod(args.v))
# SSL/TLS connection over TCP
else:
bind_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM, 0)
context = wolfssl.SSLContext(get_SSLmethod(args.v))
# enable debug, if native wolfSSL has been compiled with '--enable-debug'
wolfssl.WolfSSL.enable_debug()
context.load_cert_chain(args.c, args.k)
if args.d:
context.verify_mode = wolfssl.CERT_NONE
else:
context.verify_mode = wolfssl.CERT_REQUIRED
context.load_verify_locations(args.A)
# Logging konfigurieren if args.l:
logging.basicConfig(level=logging.DEBUG) context.set_ciphers(args.l)
# SSLContext für den Client try:
context = wolfssl.SSLContext(wolfssl.SSLv23_METHOD) secure_socket = context.wrap_socket(bind_socket)
if not args.C:
secure_socket.enable_crl(1)
secure_socket.load_crl_file(args.r, 1);
secure_socket.connect((args.h, args.p))
# Client-Socket einrichten if args.g:
client_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) secure_socket.write(b"GET / HTTP/1.1\n\n")
else:
secure_socket.write(b"hello wolfssl")
# SSL-Verbindung zum Server aufbauen (IPv4-Adresse verwenden) print("\n", secure_socket.read(), "\n")
ssl_connection = context.wrap_socket(client_socket, server_side=False)
ssl_connection.connect(('192.168.178.63', 10023)) # IPv4-Adresse des Servers
logging.info("SSL-Verbindung zum Server aufgebaut.") except KeyboardInterrupt:
print()
# Nachricht senden finally:
message = "Hallo Server!" secure_socket.close()
ssl_connection.sendall(message.encode())
logging.info(f"Nachricht gesendet: {message}")
# Empfangene Nachricht lesen (Echo)
response = ssl_connection.recv(1024)
logging.info(f"Empfangene Antwort: {response.decode()}")
# Verbindung schließen if __name__ == '__main__':
ssl_connection.close() main()
logging.info("Verbindung geschlossen.") \ No newline at end of file
communicationScripts/server.py
+ 181
− 42
View file @ 73e012ae
import wolfssl #!/usr/bin/env python
#
# -*- coding: utf-8 -*-
#
# server.py
#
# Copyright (C) 2006-2020 wolfSSL Inc.
#
# This file is part of wolfSSL. (formerly known as CyaSSL)
#
# wolfSSL is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# wolfSSL is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
# pylint: disable=missing-docstring, invalid-name, import-error
import sys
import socket import socket
import logging import argparse
# Logging konfigurieren try:
logging.basicConfig(level=logging.DEBUG) import wolfssl
except ImportError:
# SSLContext für den Server print("You must run 'python setup.py install' to use the examples")
context = wolfssl.SSLContext(wolfssl.SSLv23_METHOD) sys.exit()
context.use_certificate_file('server-cert.pem') # Server-Zertifikat
context.use_privatekey_file('server-key.pem') # Server-Schlüssel def build_arg_parser():
parser = argparse.ArgumentParser(add_help=False)
# Server-Socket einrichten
server_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) parser.add_argument(
server_socket.bind(('192.168.178.63', 10023)) # IPv4-Adresse verwenden "-?", "--help", action="help",
server_socket.listen(1) help="show this help message and exit"
)
logging.info("Server läuft und wartet auf Verbindungen...")
parser.add_argument(
while True: "-p", metavar="port", type=int, default=11111,
# Akzeptiere eingehende Verbindungen help="Port to listen on, not 0, default 11111"
client_socket, client_address = server_socket.accept() )
logging.info(f"Verbindung von {client_address} akzeptiert.")
parser.add_argument(
# SSL-Verbindung aufbauen "-v", metavar="version", type=int, choices=[0, 1, 2, 3, 4, 5],
ssl_connection = context.wrap_socket(client_socket, server_side=True) default=5,
logging.info("SSL-Verbindung aufgebaut.") help="SSL version [0-5]"
"(SSLv3, TLSv1, TLSv1.1, TLSv1.2, TLSv1_3, SSLv23)"
try: )
# Empfangene Nachricht lesen
data = ssl_connection.recv(1024) parser.add_argument(
logging.info(f"Empfangene Nachricht: {data.decode()}") "-u", action="store_true",
help="Use UDP DTLS, add -v 0 for DTLSv1, -v 1 for DTLSv1.2"
# Nachricht zurückschicken (Echo) )
ssl_connection.sendall(data)
logging.info(f"Nachricht zurückgeschickt: {data.decode()}") parser.add_argument(
"-l", metavar="ciphers", type=str, default="",
except Exception as e: help="Cipher suite list (: delimited)"
logging.error(f"Fehler: {e}") )
finally: parser.add_argument(
ssl_connection.close() "-c", metavar="certificate", default="./certs/server-cert.pem",
logging.info("Verbindung geschlossen.") help="Certificate file, default ./certs/server-cert.pem"
)
parser.add_argument(
"-k", metavar="key", default="./certs/server-key.pem",
help="Key file, default ./certs/server-key.pem"
)
parser.add_argument(
"-A", metavar="ca_file", default="./certs/client-cert.pem",
help="Certificate Authority file, default ./certs/client-cert.pem"
)
parser.add_argument(
"-d", action="store_true",
help="Disable client cert check"
)
parser.add_argument(
"-b", action="store_true",
help="Bind to any interface instead of localhost only"
)
parser.add_argument(
"-i", action="store_true",
help="Loop indefinitely (allow repeated connections)"
)
return parser
def get_SSLmethod(index):
return (
wolfssl.PROTOCOL_SSLv3,
wolfssl.PROTOCOL_TLSv1,
wolfssl.PROTOCOL_TLSv1_1,
wolfssl.PROTOCOL_TLSv1_2,
wolfssl.PROTOCOL_TLSv1_3,
wolfssl.PROTOCOL_SSLv23
)[index]
def get_DTLSmethod(index):
return (
wolfssl.PROTOCOL_DTLSv1,
wolfssl.PROTOCOL_DTLSv1_2,
wolfssl.PROTOCOL_DTLSv1_3
)[index]
def main():
args = build_arg_parser().parse_args()
# DTLS connection over UDP
if args.u:
# Set DTLSv1.2 as default if unspecified
if args.v == 5:
args.v = 1
bind_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM, 0)
bind_socket.bind(("" if args.b else "localhost", args.p))
data, from_addr = bind_socket.recvfrom(1)
context = wolfssl.SSLContext(get_DTLSmethod(args.v), server_side=True)
# SSL/TLS connection over TCP
else:
bind_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM, 0)
bind_socket.bind(("" if args.b else "localhost", args.p))
bind_socket.listen(5)
context = wolfssl.SSLContext(get_SSLmethod(args.v), server_side=True)
print("Server listening on port", bind_socket.getsockname()[1])
# enable debug, if native wolfSSL has been compiled with '--enable-debug'
wolfssl.WolfSSL.enable_debug()
context.load_cert_chain(args.c, args.k)
if args.d:
context.verify_mode = wolfssl.CERT_NONE
else:
context.verify_mode = wolfssl.CERT_REQUIRED
context.load_verify_locations(args.A)
if args.l:
context.set_ciphers(args.l)
while True:
try:
secure_socket = None
if args.u:
secure_socket = context.wrap_socket(bind_socket)
else:
new_socket, from_addr = bind_socket.accept()
secure_socket = context.wrap_socket(new_socket)
print("Connection received from", from_addr)
print("\n", secure_socket.read(), "\n")
secure_socket.write(b"I hear you fa shizzle!")
except KeyboardInterrupt:
print()
break
finally:
if secure_socket:
secure_socket.shutdown(socket.SHUT_RDWR)
secure_socket.close()
if not args.i:
break
bind_socket.close()
if __name__ == '__main__':
main()
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment