b7fb911428
The function ssl.wrap_socket() is deprecated starting Python 3.7 because it does not support hostname matching (which is considered insecure). In Python 3.10, the function now throws warnings at runtime, which makes Ubuntu / Debian autopkgtest fail. The function ssl.SSLContext.wrap_socket comes in as the replacement and has support for SNI and hostname matching. Replaced all uses of ssl.wrap_socket() by equivalent using ssl.SSLContext.wrap_socket(). Signed-off-by: Olivier Gayot <olivier.gayot@canonical.com>
64 lines
2.0 KiB
Python
Executable File
64 lines
2.0 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
# Test whether a client produces a correct connect and subsequent disconnect when using SSL.
|
|
# Client must provide a certificate.
|
|
|
|
# The client should connect to port 1888 with keepalive=60, clean session set,
|
|
# and client id 08-ssl-connect-crt-auth
|
|
# It should use the CA certificate ssl/test-root-ca.crt for verifying the server.
|
|
# The test will send a CONNACK message to the client with rc=0. Upon receiving
|
|
# the CONNACK and verifying that rc=0, the client should send a DISCONNECT
|
|
# message. If rc!=0, the client should exit with an error.
|
|
|
|
from mosq_test_helper import *
|
|
|
|
port = mosq_test.get_lib_port()
|
|
|
|
if sys.version < '2.7':
|
|
print("WARNING: SSL not supported on Python 2.6")
|
|
exit(0)
|
|
|
|
rc = 1
|
|
keepalive = 60
|
|
connect_packet = mosq_test.gen_connect("08-ssl-connect-crt-auth-enc", keepalive=keepalive)
|
|
connack_packet = mosq_test.gen_connack(rc=0)
|
|
disconnect_packet = mosq_test.gen_disconnect()
|
|
|
|
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
|
context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH, cafile="../ssl/all-ca.crt")
|
|
context.load_cert_chain(certfile="../ssl/server.crt", keyfile="../ssl/server.key")
|
|
context.verify_mode = ssl.CERT_REQUIRED
|
|
ssock = context.wrap_socket(sock, server_side=True)
|
|
ssock.settimeout(10)
|
|
ssock.bind(('', port))
|
|
ssock.listen(5)
|
|
|
|
client_args = sys.argv[1:]
|
|
env = dict(os.environ)
|
|
env['LD_LIBRARY_PATH'] = '../../lib:../../lib/cpp'
|
|
try:
|
|
pp = env['PYTHONPATH']
|
|
except KeyError:
|
|
pp = ''
|
|
env['PYTHONPATH'] = '../../lib/python:'+pp
|
|
client = mosq_test.start_client(filename=sys.argv[1].replace('/', '-'), cmd=client_args, env=env, port=port)
|
|
|
|
try:
|
|
(conn, address) = ssock.accept()
|
|
conn.settimeout(10)
|
|
|
|
mosq_test.do_receive_send(conn, connect_packet, connack_packet, "connect")
|
|
mosq_test.expect_packet(conn, "disconnect", disconnect_packet)
|
|
rc = 0
|
|
|
|
conn.close()
|
|
except mosq_test.TestError:
|
|
pass
|
|
finally:
|
|
client.terminate()
|
|
client.wait()
|
|
ssock.close()
|
|
|
|
exit(rc)
|