CODEWITHSUNDEEP
python-3.xsslhttps
josh
josh

Reputation: 1

TLS/SSL socket python server

I am trying to build a simple HTTPS server with Python3 using the socket and ssl modules. I have a self signed certificate and a private key files generated by OpenSSL and I tried to use them with the ssl module but every time I try, I get a "ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1076)" error. My code is

import socket
import ssl
    context = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
    context.load_cert_chain(certfile='cert.pem', keyfile='my_key.key')
    context.verify_mode = ssl.CERT_NONE
    sock = socket.socket()
    sock.bind(('', 443))
    sock.listen(5)
    while True:
        new_conn, addr = sock.accept()
        ssl_conn = context.wrap_socket(new_conn, server_side=True)
        print(ssl_conn.recv(1024).decode())     # this is where i get the error

The error I get is:

  File "C:\AllInOne\PortableApps\Python374\lib\ssl.py", line 1139, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1076)

Does anyone know why this happens or how to fix it?

Upvotes: 0

Views: 4867

Answers (2)

ReadTheDockFirst
ReadTheDockFirst

Reputation: 51

Generate server.pem with the following command:

mkdir .ssh
openssl req -new -x509 -keyout .ssh/key.pem -out .ssh/cert.pem -days 365 -nodes

run as follows:

python3 simple-https-server.py

Then in your browser, visit:

https://localhost:4443

Here is the code:

import http.server
from http.server import HTTPServer, BaseHTTPRequestHandler, SimpleHTTPRequestHandler
import ssl
import sys

# This class will handles any incoming request from the browser
class myHandler(BaseHTTPRequestHandler):
    # Handler for the GET requests
    def do_GET(self):
        print(self.requestline)
        # print(self.rfile.read(content_length))
        self.send_response(200)
        self.send_header("Content-type", "text/html")
        self.end_headers()
        # Send the html message
        self.wfile.write("Hello World !".encode())
        return


try:
    separator = "-" * 80
    server_address = ("", 4443)
    # server_address = ('localhost', 4443)
    httpd = http.server.HTTPServer(server_address, myHandler)
    # httpd = http.server.HTTPServer(server_address, http.server.SimpleHTTPRequestHandler)
    httpd.socket = ssl.wrap_socket(
        httpd.socket,
        server_side=True,
        certfile=".ssh/cert.pem",
        keyfile=".ssh/key.pem",
        ssl_version=ssl.PROTOCOL_TLS,
    )
    print(separator)
    print("Server running on https://localhost:4443")
    print(separator)
    # Wait forever for incoming htto requests
    httpd.serve_forever()
except KeyboardInterrupt:
    print("^C received, shutting down the web server")
    server.socket.close()

Upvotes: 5

Steffen Ullrich
Steffen Ullrich

Reputation: 123260

ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1076)

The client signals your server that it is does not trust your certificate. Which is expected since this is not a certificate issued by a trusted CA and you did not make the client explicit trust this certificate. If the client would not complain it would be insecure since every man in the middle could just use a fake certificate to identify itself as a trusted server.

Upvotes: 1

Related Questions