mirror of
https://github.com/licsber/micropython.git
synced 2024-09-20 09:00:23 +08:00
bba8a673d5
Changes are: - use ssl.SSLContext.wrap_socket instead of ssl.wrap_socket - disable check_hostname and call load_default_certs() where appropriate, to get CPython to run the tests correctly - pass socket.AF_INET to getaddrinfo and socket.socket(), to force IPv4 - change tests to use github.com instead of google.com, because certificate validation was failing with google.com Signed-off-by: Damien George <damien@micropython.org>
35 lines
1.1 KiB
Python
35 lines
1.1 KiB
Python
# test that modtls produces a text error message
|
|
|
|
import socket, ssl
|
|
|
|
|
|
def test(addr):
|
|
s = socket.socket()
|
|
s.connect(addr)
|
|
try:
|
|
ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
|
|
if hasattr(ssl_context, "check_hostname"):
|
|
# Disable hostname check on CPython.
|
|
ssl_context.check_hostname = False
|
|
s = ssl_context.wrap_socket(s)
|
|
print("wrap: no exception")
|
|
except OSError as e:
|
|
# mbedtls produces "mbedtls -0x7200: SSL - An invalid SSL record was received"
|
|
# axtls produces "RECORD_OVERFLOW" but also prints "TLS buffer overflow,..."
|
|
# CPython produces "[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1108)"
|
|
ok = (
|
|
"SSL_INVALID_RECORD" in str(e)
|
|
or "RECORD_OVERFLOW" in str(e)
|
|
or "wrong version" in str(e)
|
|
)
|
|
print("wrap:", ok)
|
|
if not ok:
|
|
print("got exception:", e)
|
|
s.close()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
# connect to plain HTTP port, oops!
|
|
addr = socket.getaddrinfo("micropython.org", 80)[0][-1]
|
|
test(addr)
|