2bba507148
Previously, any test needing an SSL certificate file would automatically skip if the file could not be found. But that makes it too easy to accidentally skip tests. Instead, change it so that the test fails if the certificate file doesn't exist. That matches, for example, the fact that the test fails if networking (LAN, WiFi) is not active. Signed-off-by: Damien George <damien@micropython.org>
49 lines
1.2 KiB
Python
49 lines
1.2 KiB
Python
# Simple test creating an SSL connection and transferring some data
|
|
# This test won't run under CPython because CPython doesn't have key/cert
|
|
|
|
try:
|
|
import binascii, os, socket, ssl
|
|
except ImportError:
|
|
print("SKIP")
|
|
raise SystemExit
|
|
|
|
PORT = 8000
|
|
|
|
# These are test certificates. See tests/README.md for details.
|
|
certfile = "ec_cert.der"
|
|
keyfile = "ec_key.der"
|
|
|
|
with open(certfile, "rb") as cf:
|
|
cert = cadata = cf.read()
|
|
|
|
with open(keyfile, "rb") as kf:
|
|
key = kf.read()
|
|
|
|
|
|
# Server
|
|
def instance0():
|
|
multitest.globals(IP=multitest.get_network_ip())
|
|
s = socket.socket()
|
|
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
|
s.bind(socket.getaddrinfo("0.0.0.0", PORT)[0][-1])
|
|
s.listen(1)
|
|
multitest.next()
|
|
s2, _ = s.accept()
|
|
s2 = ssl.wrap_socket(s2, server_side=True, key=key, cert=cert)
|
|
print(s2.read(16))
|
|
s2.write(b"server to client")
|
|
s2.close()
|
|
s.close()
|
|
|
|
|
|
# Client
|
|
def instance1():
|
|
multitest.next()
|
|
s = socket.socket()
|
|
s.connect(socket.getaddrinfo(IP, PORT)[0][-1])
|
|
s = ssl.wrap_socket(
|
|
s, cert_reqs=ssl.CERT_REQUIRED, server_hostname="micropython.local", cadata=cadata
|
|
)
|
|
s.write(b"client to server")
|
|
print(s.read(16))
|
|
s.close()
|