root/python/TLSLite/cert/server.py

#!/usr/bin/python
# -*- coding: utf-8 -*-

import socket
import SocketServer as ss
import tlslite.api as tls

# 証明書を使った場合の例
class Handler(ss.StreamRequestHandler):
  def setup(self):
    self.connection = tls.TLSConnection(self.request)
    self.connection.closeSocket = True
    s = open("./serverX509Cert.pem").read()
    x509 = tls.X509()
    x509.parse(s)
    certChain = tls.X509CertChain([x509])
    s = open("./serverX509Key.pem").read()
    privateKey = tls.parsePEMKey(s, private=True)
 
    settings = tls.HandshakeSettings()
    settings.cipherNames = ["aes128"]
    # 提示されるクライアントの証明書のfingerprint
    checker = tls.Checker(x509Fingerprint= 'cbfef53d18298d7a432720a39232f0ce22e9a30a')
    self.connection.handshakeServer(certChain=certChain, 
      privateKey =privateKey, checker = checker, reqCert = True,
      settings = settings)
    self.rfile = self.connection.makefile('rb', self.rbufsize)
    self.wfile = self.connection.makefile('wb', self.wbufsize)

  def handle(self):
    print 'handle'
    while 1:
      line = self.rfile.readline()
      if len(line) == 0:
        return
      self.wfile.write(line)

class Server(ss.ThreadingTCPServer):
  allow_reuse_address = 1
  daemon_threads = 1

server = Server(('localhost', 3746), Handler)
print 'listening:', server.socket.getsockname()
server.serve_forever()