Learning Python Network Programming

Programming with Sockets

from ssl import HAS_SNI

from pprint import pprint

TARGET_HOST = 'www.google.com'

SSL_PORT = 443

# Use the path of CA certificate file in your system

CA_CERT_PATH = '/usr/local/lib/python3.3/dist-

packages/requests/cacert.pem'

def ssl_wrap_socket(sock, keyfile=None, certfile=None,

cert_reqs=None, ca_certs=None, server_hostname=None,

ssl_version=None):

context = SSLContext(ssl_version)

context.verify_mode = cert_reqs

if ca_certs:

try:

context.load_verify_locations(ca_certs)

except Exception as e:

raise SSLError(e)

if certfile:

context.load_cert_chain(certfile, keyfile)

if HAS_SNI: # OpenSSL enabled SNI

return context.wrap_socket(sock,

server_hostname=server_hostname)

return context.wrap_socket(sock)

if __name__ == '__main__':

hostname = input("Enter target host:") or TARGET_HOST

client_sock = socket.socket(socket.AF_INET,

socket.SOCK_STREAM)

client_sock.connect((hostname, 443))

ssl_socket = ssl_wrap_socket(client_sock,

ssl_version=PROTOCOL_TLSv1,

cert_reqs=ssl.CERT_REQUIRED,

ca_certs=CA_CERT_PATH,

server_hostname=hostname)

print("Extracting remote host certificate details:")