Python使用ssl模块进行SSL握手和验证

import socket
import ssl

# 创建SSL上下文
context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
context.load_cert_chain("server.crt", "server.key")

# 创建socket并进行SSL握手
server_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
server_socket.bind(('localhost', 8443))
server_socket.listen()
print("Listening on port 8443...")
while True:
    conn, addr = server_socket.accept()
    ssl_conn = context.wrap_socket(conn, server_side=True)
    print("SSL handshake successful with", addr)

    # 验证SSL证书
    cert = ssl_conn.getpeercert()
    if not cert:
        print("No certificate found.")
    else:
        print("Certificate found:", cert)
        if ssl.match_hostname(cert, "pidancode.com"):
            print("Certificate hostname matches.")
        else:
            print("Certificate hostname doesn't match.")

    # 发送数据并关闭连接
    ssl_conn.write(b"Welcome to Pidancode!")
    ssl_conn.close()