mosquitto/test/broker/08-ssl-connect-no-auth.py
2026-05-03 01:17:26 +01:00

60 lines
1.8 KiB
Python
Executable file

#!/usr/bin/env python3
# Test whether a valid CONNECT results in the correct CONNACK packet using an SSL connection.
from mosq_test_helper import *
mosq_test.require_features(["WITH_TLS"])
if sys.version < '2.7':
print("WARNING: SSL not supported on Python 2.6")
exit(0)
def write_config(filename, port1, port2):
with open(filename, 'w') as f:
f.write("listener %d\n" % (port2))
f.write("allow_anonymous true\n")
f.write("\n")
f.write("listener %d\n" % (port1))
f.write("allow_anonymous true\n")
f.write(f"cafile {ssl_dir}/all-ca.crt\n")
f.write(f"certfile {ssl_dir}/server.crt\n")
f.write(f"keyfile {ssl_dir}/server.key\n")
(port1, port2) = mosq_test.get_port(2)
conf_file = os.path.basename(__file__).replace('.py', '.conf')
write_config(conf_file, port1, port2)
rc = 1
connect_packet = mosq_test.gen_connect("connect-success-test")
connack_packet = mosq_test.gen_connack(rc=0)
broker = mosq_test.start_broker(filename=os.path.basename(__file__), port=port2, use_conf=True)
try:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
context = ssl.create_default_context(ssl.Purpose.SERVER_AUTH, cafile=f"{ssl_dir}/test-root-ca.crt")
context.minimum_version = ssl.TLSVersion.TLSv1_2
ssock = context.wrap_socket(sock, server_hostname="localhost")
ssock.settimeout(20)
ssock.connect(("localhost", port1))
mosq_test.do_send_receive(ssock, connect_packet, connack_packet, "connack")
rc = 0
ssock.close()
except mosq_test.TestError:
pass
finally:
os.remove(conf_file)
mosq_test.terminate_broker(broker)
if mosq_test.wait_for_subprocess(broker):
print("broker not terminated")
if rc == 0: rc=1
if rc:
print(mosq_test.broker_log(broker))
exit(rc)