def test_ssl_2(self):
# Given a server that supports SSL 2.0
try:
with VulnerableOpenSslServer() as server:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(5)
sock.connect((server.hostname, server.port))
ssl_client = LegacySslClient(
ssl_version=OpenSslVersionEnum.SSLV2,
underlying_socket=sock,
ssl_verify=OpenSslVerifyEnum.NONE,
ignore_client_authentication_requests=True,
)
# When doing the special SSL 2.0 handshake, it succeeds
try:
ssl_client.do_handshake()
self.assertTrue(ssl_client)
finally:
ssl_client.shutdown()
sock.close()
except NotOnLinux64Error:
logging.warning('WARNING: Not on Linux - skipping test')
return
def setUp(self):
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(5)
sock.connect(('www.google.com', 443))
ssl_client = LegacySslClient(ssl_version=OpenSslVersionEnum.SSLV23, underlying_socket=sock,
ssl_verify=OpenSslVerifyEnum.NONE)
ssl_client.set_cipher_list('ECDH') # Needed for test_get_ecdh_param()
ssl_client.do_handshake()
self.ssl_client = ssl_client
def test_ignore_client_authentication_requests(self):
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(10)
sock.connect(('auth.startssl.com', 443))
ssl_client = LegacySslClient(ssl_version=OpenSslVersionEnum.SSLV23, underlying_socket=sock,
ssl_verify=OpenSslVerifyEnum.NONE, ignore_client_authentication_requests=True)
ssl_client.do_handshake()
self.assertGreater(len(ssl_client.get_client_CA_list()), 2)
def test_ssl_2(self):
# Given a server that supports SSL 2.0
with LegacyOpenSslServer() as server:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(5)
sock.connect((server.hostname, server.port))
ssl_client = LegacySslClient(
ssl_version=OpenSslVersionEnum.SSLV2,
underlying_socket=sock,
ssl_verify=OpenSslVerifyEnum.NONE,
ignore_client_authentication_requests=True,
)
# When doing the special SSL 2.0 handshake, it succeeds
try:
ssl_client.do_handshake()
finally:
ssl_client.shutdown()
def test_ssl_2(self):
# Given a server that supports SSL 2.0
with LegacyOpenSslServer() as server:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.settimeout(5)
sock.connect((server.hostname, server.port))
ssl_client = LegacySslClient(
ssl_version=OpenSslVersionEnum.SSLV2,
underlying_socket=sock,
ssl_verify=OpenSslVerifyEnum.NONE,
ignore_client_authentication_requests=True,
)
# When doing the special SSL 2.0 handshake, it succeeds
try:
ssl_client.do_handshake()
finally:
ssl_client.shutdown()