From 4448460b779c6e138b4c8e37e02bac0bd41fc1d0 Mon Sep 17 00:00:00 2001
From: Rob Austein <sra@hactrn.net>
Date: Sat, 30 May 2009 03:15:05 +0000
Subject: Certificate verification

svn path=/scripts/tls-client.py; revision=2476
---
 scripts/tls-client.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'scripts/tls-client.py')

diff --git a/scripts/tls-client.py b/scripts/tls-client.py
index 552501ff..d0c59f3e 100644
--- a/scripts/tls-client.py
+++ b/scripts/tls-client.py
@@ -2,10 +2,20 @@
 
 import socket, POW, time
 
+key = POW.pemRead(POW.RSA_PRIVATE_KEY, open("Carol.key", "r").read())
+cer = POW.pemRead(POW.X509_CERTIFICATE, open("Carol.cer", "r").read())
+ta  = POW.pemRead(POW.X509_CERTIFICATE, open("Alice-TA.cer", "r").read())
+
 s = socket.socket()
 s.connect(('',6666))
 
 ssl = POW.Ssl(POW.TLSV1_CLIENT_METHOD)
+
+ssl.useCertificate(cer)
+ssl.useKey(key)
+ssl.setVerifyMode(POW.SSL_VERIFY_PEER | POW.SSL_VERIFY_FAIL_IF_NO_PEER_CERT)
+ssl.trustCertificate(ta)
+
 ssl.setFd(s.fileno())
 ssl.connect()
 
-- 
cgit v1.2.3