b7fb911428
The function ssl.wrap_socket() is deprecated starting Python 3.7 because it does not support hostname matching (which is considered insecure). In Python 3.10, the function now throws warnings at runtime, which makes Ubuntu / Debian autopkgtest fail. The function ssl.SSLContext.wrap_socket comes in as the replacement and has support for SNI and hostname matching. Replaced all uses of ssl.wrap_socket() by equivalent using ssl.SSLContext.wrap_socket(). Signed-off-by: Olivier Gayot <olivier.gayot@canonical.com>
54 lines
1.3 KiB
Python
Executable File
54 lines
1.3 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
from mosq_test_helper import *
|
|
|
|
port = mosq_test.get_lib_port()
|
|
|
|
if sys.version < '2.7':
|
|
print("WARNING: SSL not supported on Python 2.6")
|
|
exit(0)
|
|
|
|
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
|
context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH, cafile="../ssl/all-ca.crt")
|
|
context.load_cert_chain(certfile="../ssl/server.crt", keyfile="../ssl/server.key")
|
|
context.verify_mode = ssl.CERT_REQUIRED
|
|
ssock = context.wrap_socket(sock, server_side=True)
|
|
ssock.settimeout(10)
|
|
ssock.bind(('', port))
|
|
ssock.listen(5)
|
|
|
|
client_args = sys.argv[1:]
|
|
env = dict(os.environ)
|
|
env['LD_LIBRARY_PATH'] = '../../lib:../../lib/cpp'
|
|
try:
|
|
pp = env['PYTHONPATH']
|
|
except KeyError:
|
|
pp = ''
|
|
env['PYTHONPATH'] = '../../lib/python:'+pp
|
|
client = mosq_test.start_client(filename=sys.argv[1].replace('/', '-'), cmd=client_args, env=env, port=port)
|
|
|
|
try:
|
|
(conn, address) = ssock.accept()
|
|
|
|
conn.close()
|
|
except ssl.SSLError:
|
|
# Expected error due to ca certs not matching.
|
|
pass
|
|
except mosq_test.TestError:
|
|
pass
|
|
finally:
|
|
time.sleep(1.0)
|
|
try:
|
|
client.terminate()
|
|
except OSError:
|
|
pass
|
|
client.wait()
|
|
ssock.close()
|
|
|
|
if client.returncode == 0:
|
|
exit(0)
|
|
else:
|
|
exit(1)
|
|
|