这是senario:
服务器通过主机10.10.10.1端口9999为客户端监听两个端口9999,9998,为控制器监听端口9998我能够将客户端和控制器连接到服务器并从控制器控制客户端而不使用ssl套接字 . 我想使用加密套接字我添加了ssl证书套接字连接,客户端也没有通过SSL_SOCK作为控制器连接到服务器 . 感谢您的帮助或建议 .
服务器:
s=socket(AF_INET, SOCK_STREAM)
s.bind(("10.10.10.1",9999))
s.listen(5)
port = 9999
password = "password"
bridgeport = 9998
allConnections = []
allAddresses = []
def getConnections():
for item in allConnections:
item.close()
del allConnections[:]
del allAddresses[:]
while 1:
try:
q,addr=s.accept()
connstream = ssl.wrap_socket(q, server_side=True, certfile="server.crt", keyfile="server.key", ssl_version=ssl.PROTOCOL_SSLv23)
connstream.setblocking(1)
allConnections.append(connstream)
allAddresses.append(addr)
except:
print "YOU ARE NOT CONNECTED!! TRY AGAIN LATER"
time.sleep(10.0)
break
def main():
bridge=socket(AF_INET, SOCK_STREAM)
bridge.bind(("10.10.10.1",9998))
bridge.setsockopt(SOL_SOCKET, SO_REUSEADDR, 1)
while 1:
bridge.listen(1)
q,addr=bridge.accept()
bridgestream = ssl.wrap_socket(q, server_side=True, certfile="server.crt", keyfile="server.key", ssl_version=ssl.PROTOCOL_SSLv23)
cpass = bridgestream.recv(4096)
if (cpass == password):
print "Controller is connected"
else:
print "Controller not conected"
try:
main()
except:
try:
del allConnections[:]
del allAddresses[:]
except:
pass
控制器:
host = '10.10.10.1'
port = 9998
password = "password"
def main():
try:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
ssl_sock = ssl.wrap_socket(s, ca_certs="server.crt", cert_reqs=ssl.CERT_REQUIRED)
ssl_sock.connect((host, port))
except:
sys.exit("[ERROR] Can't connect to server")
ssl_sock.sendall(password)
客户:
host = "10.10.10.1"
port = 9999
def main(host, port):
while 1:
connected = False
while 1:
while (connected == False):
try:
print host
print port
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
print s
ssl_sock = ssl.wrap_socket(s, ca_certs="server.crt", cert_reqs=ssl.CERT_REQUIRED)
print "ssl_sock"
ssl_sock.connect((host,port))
print "Connected"
connected = True
except:
print "The client not Connected yet"
time.sleep(5)
while 1:
try:
main(host, port)
except:
time.sleep(5)