Python3和ssl實現(xiàn)加密通信功能的方法

import socket

class client_class:
 def send_hello(self):
  # 與服務端建立連接
  client_socket = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
  client_socket.connect(('127.0.0.1',9999))

  # 向服務端發(fā)送消息
  msg = "do i connect with server ?".encode("utf-8")
  client_socket.send(msg)
  # 接收服務端返回的消息
  msg = client_socket.recv(1024).decode('utf-8')
  print(f"receive msg from server : {msg}")
  client_socket.close()

if __name__ == "__main__":
 client = client_class()
 client.send_hello()

import socket

class server_class :
 def build_listen(self):
  # 監(jiān)聽端口
  server_socket = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
  server_socket.bind(('127.0.0.1',9999))
  server_socket.listen(5)

  while True:
   # 接收客戶端連接
   client_socket, addr = server_socket.accept()
   # 接收客戶端信息
   msg = client_socket.recv(1024).decode("utf-8")
   print(f"receive msg from client {addr}：{msg}")
   # 向客戶端發(fā)送信息
   msg = f"yes , you have client_socketect with server.\r\n".encode("utf-8")
   client_socket.send(msg)
   client_socket.close()

if __name__ == "__main__":
 server = server_class()
 server.build_listen()

import socket
import ssl

class client_ssl:
 def send_hello(self,):
  # 生成SSL上下文
  context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
  # 加載信任根證書
  context.load_verify_locations('cert/ca.crt')

  # 與服務端建立socket連接
  with socket.create_connection(('127.0.0.1', 9443)) as sock:
   # 將socket打包成SSL socket
   # 一定要注意的是這里的server_hostname不是指服務端IP，而是指服務端證書中設置的CN，我這里正好設置成127.0.1而已
   with context.wrap_socket(sock, server_hostname='127.0.0.1') as ssock:
    # 向服務端發(fā)送信息
    msg = "do i connect with server ?".encode("utf-8")
    ssock.send(msg)
    # 接收服務端返回的信息
    msg = ssock.recv(1024).decode("utf-8")
    print(f"receive msg from server : {msg}")
    ssock.close()

if __name__ == "__main__":
 client = client_ssl()
 client.send_hello()

import socket
import ssl

class server_ssl:
 def build_listen(self):
  # 生成SSL上下文
  context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
  # 加載服務器所用證書和私鑰
  context.load_cert_chain('cert/server.crt', 'cert/server_rsa_private.pem.unsecure')

  # 監(jiān)聽端口
  with socket.socket(socket.AF_INET, socket.SOCK_STREAM, 0) as sock:
   sock.bind(('127.0.0.1', 9443))
   sock.listen(5)
   # 將socket打包成SSL socket
   with context.wrap_socket(sock, server_side=True) as ssock:
    while True:
     # 接收客戶端連接
     client_socket, addr = ssock.accept()
     # 接收客戶端信息
     msg = client_socket.recv(1024).decode("utf-8")
     print(f"receive msg from client {addr}：{msg}")
     # 向客戶端發(fā)送信息
     msg = f"yes , you have client_socketect with server.\r\n".encode("utf-8")
     client_socket.send(msg)
     client_socket.close()

if __name__ == "__main__":
 server = server_ssl()
 server.build_listen()