root/python/TLSLite/cert/client.py

#!/usr/bin/python
# -*- coding: utf-8 -*-

import socket
import tlslite.api as tls
import sys

DST = ('localhost', 3746)

# 証明書を使った場合の例
def connect(sockaddr):
  sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  sock.connect(sockaddr)
  sock.settimeout(10)
  conn = tls.TLSConnection(sock)
  conn.closeSocket = True
  s = open("./clientX509Cert.pem").read()
  x509 = tls.X509()
  x509.parse(s)
  print "fingerprint=", x509.getFingerprint()
  certChain = tls.X509CertChain([x509])
  s = open("./clientX509Key.pem").read()
  privateKey = tls.parsePEMKey(s, private=True)
  # 提示されるサーバの証明書のfingerprint
  checker = tls.Checker(x509Fingerprint= '8b8a01e15a2095da731a9b864a30ae272d038180')
  conn.handshakeClientCert(certChain = certChain, privateKey = privateKey,
    checker = checker)
  return conn

conn = connect(DST)
rfile = conn.makefile('rb')
while 1:
  print '> ',
  line = sys.stdin.readline()
  if len(line) == 0:
    conn.close()
    print
    break
  conn.write(line)
  line = rfile.readline()
  if len(line) == 0:
    conn.close()
    print 'EOF'
    break
  sys.stdout.write(line)