08-ssl-connect-no-auth-wrong-ca.py 1.4 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152
  1. #!/usr/bin/env python3
  2. # Test whether a valid CONNECT results in the correct CONNACK packet using an SSL connection.
  3. from mosq_test_helper import *
  4. if sys.version < '2.7':
  5. print("WARNING: SSL not supported on Python 2.6")
  6. exit(0)
  7. def write_config(filename, port1, port2):
  8. with open(filename, 'w') as f:
  9. f.write("port %d\n" % (port2))
  10. f.write("\n")
  11. f.write("listener %d\n" % (port1))
  12. f.write("cafile ../ssl/all-ca.crt\n")
  13. f.write("certfile ../ssl/server.crt\n")
  14. f.write("keyfile ../ssl/server.key\n")
  15. (port1, port2) = mosq_test.get_port(2)
  16. conf_file = os.path.basename(__file__).replace('.py', '.conf')
  17. write_config(conf_file, port1, port2)
  18. rc = 1
  19. keepalive = 10
  20. connect_packet = mosq_test.gen_connect("connect-success-test", keepalive=keepalive)
  21. connack_packet = mosq_test.gen_connack(rc=0)
  22. broker = mosq_test.start_broker(filename=os.path.basename(__file__), port=port2, use_conf=True)
  23. sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  24. ssock = ssl.wrap_socket(sock, ca_certs="../ssl/test-alt-ca.crt", cert_reqs=ssl.CERT_REQUIRED)
  25. ssock.settimeout(20)
  26. try:
  27. ssock.connect(("localhost", port1))
  28. except ssl.SSLError as err:
  29. if err.errno == 1:
  30. rc = 0
  31. except mosq_test.TestError:
  32. pass
  33. finally:
  34. os.remove(conf_file)
  35. ssock.close()
  36. time.sleep(0.5)
  37. broker.terminate()
  38. broker.wait()
  39. (stdo, stde) = broker.communicate()
  40. if rc:
  41. print(stde.decode('utf-8'))
  42. exit(rc)