def connectTCP(host,
port,
factory,
timeout=30,
bindAddress=None,
reactor=twisted.internet.reactor,
postConnectionCheck=Checker()):
# type: (str, int, object, int, Optional[util.AddrType], object, Callable) -> object
"""
A convenience function to start a TCP connection using Twisted.
NOTE: You must call startTLS(ctx) to go into SSL/TLS mode.
See IReactorTCP interface in Twisted.
"""
wrappingFactory = policies.WrappingFactory(factory)
wrappingFactory.protocol = lambda factory, wrappedProtocol: \
TLSProtocolWrapper(factory,
wrappedProtocol,
startPassThrough=1,
client=1,
contextFactory=None,
postConnectionCheck=postConnectionCheck)
return reactor.connectTCP(host, port, wrappingFactory, timeout,
bindAddress)
def connectSSL(host, port, factory, contextFactory, timeout=30,
bindAddress=None,
reactor=twisted.internet.reactor,
postConnectionCheck=Checker()):
# type: (str, int, object, object, int, Optional[str], twisted.internet.reactor, Checker) -> reactor.connectTCP
"""
A convenience function to start an SSL/TLS connection using Twisted.
See IReactorSSL interface in Twisted.
"""
wrappingFactory = policies.WrappingFactory(factory)
wrappingFactory.protocol = lambda factory, wrappedProtocol: \
TLSProtocolWrapper(factory,
wrappedProtocol,
startPassThrough=0,
client=1,
contextFactory=contextFactory,
postConnectionCheck=postConnectionCheck)
return reactor.connectTCP(host, port, wrappingFactory, timeout, bindAddress)
def __init__(self, ssl_config):
M2Checker.__init__(self)
self.ssl_config = ssl_config
def __call__(self, peerCert, host=None):
# do not check host
return Checker.__call__(self, peerCert, None)
def verify_check_cname_only(certificate, host):
checker = Checker()
try:
checker(certificate, host)
except WrongHost, wrong_host:
raise InsecureCertificateError(wrong_host)
def __call__(self, peerCert, host=None):
# do not verify hostname
return Checker.__call__(self, peerCert, None)
def __init__(self, *args, **kwargs):
Checker.__init__(self, *args, **kwargs)
