def _create_tls_1_3_session(server_host: str, server_port: int) -> _nassl.SSL_SESSION: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(5) sock.connect((server_host, server_port)) ssl_client = SslClient(ssl_version=OpenSslVersionEnum.TLSV1_3, underlying_socket=sock, ssl_verify=OpenSslVerifyEnum.NONE) try: ssl_client.do_handshake() ssl_client.write(ModernOpenSslServer.HELLO_MSG) ssl_client.read(2048) session = ssl_client.get_session() finally: ssl_client.shutdown() return session
def _create_tls_1_3_session(server_host: str, server_port: int) -> _nassl.SSL_SESSION: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(5) sock.connect((server_host, server_port)) ssl_client = SslClient( ssl_version=OpenSslVersionEnum.TLSV1_3, underlying_socket=sock, ssl_verify=OpenSslVerifyEnum.NONE ) try: ssl_client.do_handshake() ssl_client.write(ModernOpenSslServer.HELLO_MSG) ssl_client.read(2048) session = ssl_client.get_session() finally: ssl_client.shutdown() return session
class EarlyDataClient(): def __init__(self, **kw): self.socket = None self.session = None self.client = None self.dest = kw.get('dest', 'localhost') self.port = kw.get('port', 443) self.socket_timeout = kw.get('socket_timeout', 5) self.regular_data = kw.get('regular_data', b'XXX-REGULAR-DATA-XXX') self.early_data = kw.get('early_data', b'XXX-EARLY-DATA-XXX') self.read_size = kw.get('read_size', 2048) def _init(self, dest='localhost', port=443, timeout=5): self.socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) self.socket.settimeout(timeout) self.socket.connect((dest, port)) self.client = SslClient(ssl_version=OpenSslVersionEnum.TLSV1_3, underlying_socket=self.socket, ssl_verify_locations=u'mozilla.pem') def _finish_handshake(self): if not self.client.is_handshake_completed(): self.client.do_handshake() print('\tCipher suite:', self.client.get_current_cipher_name()) def _close(self): self.client.shutdown() self.socket.close() print('\n') def _write_read_close(self, data_to_send=b'XXX-REGULAR-DATA-XXX', read_size=2048): try: self.client.write(data_to_send) self.client.read(2048) self.session = self.client.get_session() except socket.timeout as e: print('\n\tSocket was timed out. Closing...') finally: self._close() def _send_early_data(self, early_data_to_send=b'XXX-EARLY-DATA-XXX'): self.client.set_session(self.session) self.client.write_early_data(early_data_to_send) self._finish_handshake() print('\t', self.client.get_early_data_status()) self._close() def test_early(self, early_data_to_send=b'XXX-EARLY-DATA-XXX'): print('First Session:') self._init(dest=self.dest, port=self.port) self._finish_handshake() self._write_read_close(data_to_send=self.regular_data) if self.session: print('Reused Session:') self._init(dest=self.dest, port=self.port) if self.session.get_max_early_data() > 0: self._send_early_data() else: print('\n\tServer does not support Early-Data. Closing...') self._close else: print('\nPrevious session failed, can`t send early data. Closing...') print('='*80, '\n')