3

我正在尝试准备原型，但无法建立连接。我在客户端和服务器上都使用 OpenSSL。

#!/usr/bin/env python

import SocketServer
import json
from OpenSSL import SSL
import os
import socket

TERMINATION_STRING = "Done"

CERTIFICATE_PATH = os.getcwd() + '/CA/certs/01.pem'
KEY_PATH = os.getcwd() + '/CA/private/key.pem'

class SSLThreadingTCPServer(SocketServer.ThreadingTCPServer):
    def __init__(self, address, handler):
        SocketServer.ThreadingTCPServer.__init__(self, address, handler)

        ctx = SSL.Context(SSL.SSLv23_METHOD)

        #ctx.use_privatekey_file(KEY_PATH)
        #ctx.use_certificate_file(CERTIFICATE_PATH)
        self.socket = SSL.Connection(ctx, socket.socket(self.address_family, self.socket_type))

        print "Serving:", address[0], "on port:", address[1]



class MemberUpdateHandler(SocketServer.BaseRequestHandler):
    def setup(self):
        print self.client_address, "connected"

    def handle(self):
        data = ""
        while True:
            data += self.request.recv(1024).encode('utf-8').strip
            if data[-4:] == "Done":
                print "Done"
                break

            dataStrings = data.split(' ')
            for item in dataStrings:
                print item
if __name__ == "__main__":
    ADDRESS = 'localhost'
    PORT = 42424
    HOST = (ADDRESS, PORT)

    s = SSLThreadingTCPServer(HOST, MemberUpdateHandler)
    s.serve_forever()

和客户：

#!/usr/bin/env python

from OpenSSL import SSL
import socket
import os

HOST = 'localhost'
PORT = 42424
ADDRESS = (HOST, PORT)

CERTIFICATE_FILE = os.getcwd() + '/CA/certs/02.pem'

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

ctx = SSL.Context(SSL.SSLv23_METHOD)
sslSock = SSL.Connection(ctx, sock)
sslSock.connect(ADDRESS) #THIS IS WHERE IT FAILS

items = "this is a test Done"

sslSock.sendall(items)

sslSock.close()

最后，错误：

File "SSLClient.py", line 19, in <module> sslSock.connect(ADDRESS)
File "<string>", line 1, in connect
socket.error: [Errno 111] Connection refused

任何帮助，将不胜感激。我觉得我错过了一些简单的东西，但我是网络编程的新手。

netstat -tpn服务器运行时的输出：

(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)

Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 198.183.6.199:59724     74.125.227.0:80         ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:49758     74.125.227.16:80        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:39299     69.30.156.16:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:44128     23.0.38.218:80          TIME_WAIT   -
tcp        0      0 198.183.6.199:41272     64.34.119.101:80        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:39420     69.30.156.26:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:39418     69.30.156.26:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:41218     64.34.119.101:80        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:56224     198.183.6.22:22         ESTABLISHED 3156/ssh
tcp        0      0 198.183.6.199:54281     74.125.227.10:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:46349     69.30.156.11:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:54380     74.125.227.62:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:42252     75.126.125.212:80       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:39300     69.30.156.16:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:53321     74.125.227.15:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:60669     74.125.227.0:80         ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:54285     74.125.227.10:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:37783     74.125.137.125:5222     ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:897       198.183.6.22:2049       ESTABLISHED -
tcp        0      0 198.183.6.199:45040     69.171.248.16:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:54286     74.125.227.10:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:54284     74.125.227.10:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:38499     74.125.227.21:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:54157     173.194.33.47:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:44312     70.84.101.150:6667      ESTABLISHED 5776/xchat
tcp        0      0 198.183.6.199:46074     69.30.156.32:80         ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:39298     69.30.156.16:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:58444     74.125.227.16:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:39056     198.183.6.100:993       ESTABLISHED 3180/thunderbird-bi
tcp        0      0 198.183.6.199:54283     74.125.227.10:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:54910     173.194.64.116:80       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:10050     198.183.6.231:34955     TIME_WAIT   -
tcp        0      0 198.183.6.199:56503     72.247.172.20:80        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:52454     173.194.64.95:443       ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:968       198.183.6.11:2049       ESTABLISHED -
tcp        0      0 198.183.6.199:39419     69.30.156.26:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:52088     74.125.227.0:443        ESTABLISHED 2128/google-chrome
tcp        0      0 198.183.6.199:33184     198.183.6.1:6667        ESTABLISHED 5776/xchat
tcp        0      0 198.183.6.199:39417     69.30.156.26:443        ESTABLISHED 2128/google-chrome
4

1 回答 1

2

你打电话时

SocketServer.ThreadingTCPServer.__init__(self, address, handler)

在您的子类中，ThreadingTCPServer 将创建一个套接字并执行绑定/侦听。在那条线之后你做

self.socket = SSL.Connection(ctx, socket.socket(self.address_family, self.socket_type))

创建您的 SSL 套接字。但是这个套接字并没有被绑定。您需要做的是以不同的方式调用超类的构造函数：

SocketServer.ThreadingTCPServer.__init__(self, address, handler, bind_and_activate=False)

注意最后一个参数。这将阻止超类绑定它创建的套接字。然后，在您创建套接字后，调用self.server_bind()andself.server_activate()以便正确设置您创建的套接字。

总之，尝试将您的服务器更改为：

class SSLThreadingTCPServer(SocketServer.ThreadingTCPServer):
    def __init__(self, address, handler):
        SocketServer.ThreadingTCPServer.__init__(self, address, handler, bind_and_activate=False)

        ctx = SSL.Context(SSL.SSLv23_METHOD)

        #ctx.use_privatekey_file(KEY_PATH)
        #ctx.use_certificate_file(CERTIFICATE_PATH)
        self.socket = SSL.Connection(ctx, socket.socket(self.address_family, self.socket_type))
        self.server_bind()
        self.server_activate()


        print "Serving:", address[0], "on port:", address[1]
于 2012-09-17T18:24:47.207 回答