images.python-gnutls.server.py Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tls-docker-library Show documentation

Bill of Materials POM for the entire protocol attacker ecosystem used to keep dependencies in sync.

The newest version!

#!/usr/bin/env python

"""Synchronous server that handles each connection in a thread"""

import sys
import os
import socket
from threading import Thread

from gnutls.crypto import *
from gnutls.connection import *

script_path = os.path.realpath(os.path.dirname(sys.argv[0]))
certs_path = os.path.join(script_path, 'certs')

cert = X509Certificate(open(certs_path + '/valid.crt').read())
key = X509PrivateKey(open(certs_path + '/valid.key').read())
ca = X509Certificate(open(certs_path + '/ca.pem').read())
crl = X509CRL(open(certs_path + '/crl.pem').read())
cred = X509Credentials(cert, key, [ca], [crl])
context = TLSContext(cred)

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
ssf = ServerSessionFactory(sock, context)
ssf.bind(('0.0.0.0', 10000))
ssf.listen(100)


class SessionHandler(Thread):
    def __init__(self, session, address):
        Thread.__init__(self, name='SessionHandler')
        self.setDaemon(True)
        self.session = session
        self.address = address

    def run(self):
        session = self.session
        try:
            session.handshake()
            peer_cert = session.peer_certificate
            try:
                peer_name = peer_cert.subject
            except AttributeError:
                peer_name = 'Unknown'
            print '\nNew connection from:', peer_name
            print 'Protocol:     ', session.protocol
            print 'KX algorithm: ', session.kx_algorithm
            print 'Cipher:       ', session.cipher
            print 'MAC algorithm:', session.mac_algorithm
            print 'Compression:  ', session.compression
            session.verify_peer()
            cred.check_certificate(peer_cert, cert_name='peer certificate')
        except Exception, e:
            print 'Handshake failed:', e
        else:
            while True:
                try:
                    buf = session.recv(1024)
                    if not buf:
                        print "Peer has closed the session"
                        break
                    else:
                        if buf.strip().lower() == 'quit':
                            print "Got quit command, closing connection"
                            session.bye()
                            break
                    session.send(buf)
                except Exception, e:
                    print "Error in reception: ", e
                    break
        try:
            session.shutdown()
        except:
            pass
        session.close()

while True:
    session, address = ssf.accept()
    handler = SessionHandler(session, address)
    handler.start()