D4
/
d4-core
mirror of https://github.com/D4-project/d4-core
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [exporter TLS] add client cert

gallypette-patch-1
Terrtia 2020-03-10 15:04:29 +01:00
parent 99656658f2
commit 209cd0500f
No known key found for this signature in database
GPG Key ID: 1E1B1F50D84613D0
1 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
server/analyzer/analyzer-d4-export/d4_export_tls.py
View File

@ -26,7 +26,8 @@ if __name__ == "__main__":
parser.add_argument('-n', '--newline', help='add new lines', action="store_true") parser.add_argument('-n', '--newline', help='add new lines', action="store_true")
parser.add_argument('-ri', '--redis_ip', help='redis ip', type=str, default='127.0.0.1', dest='host_redis') parser.add_argument('-ri', '--redis_ip', help='redis ip', type=str, default='127.0.0.1', dest='host_redis')
parser.add_argument('-rp', '--redis_port', help='redis port', type=int, default=6380, dest='port_redis') parser.add_argument('-rp', '--redis_port', help='redis port', type=int, default=6380, dest='port_redis')
parser.add_argument('-v', '--verify_certificate', help='verify server certificate' , type=str, default='False', dest='verify_certificate') parser.add_argument('-v', '--verify_certificate', help='verify server certificate', type=str, default='True', dest='verify_certificate')
parser.add_argument('-c', '--ca_certs', help='cert filename' , type=str, default=None, dest='ca_certs')
args = parser.parse_args() args = parser.parse_args()
if not args.uuid or not args.type or not args.target_port: if not args.uuid or not args.type or not args.target_port:
@ -37,6 +38,7 @@ if __name__ == "__main__":
port_redis=args.port_redis port_redis=args.port_redis
newLines=args.newline newLines=args.newline
verify_certificate=args.verify_certificate verify_certificate=args.verify_certificate
ca_certs=args.ca_certs
redis_d4= redis.StrictRedis( redis_d4= redis.StrictRedis(
host=host_redis, host=host_redis,
@ -69,12 +71,15 @@ if __name__ == "__main__":
s.setsockopt(socket.IPPROTO_TCP, socket.TCP_KEEPINTVL, ka_sec) s.setsockopt(socket.IPPROTO_TCP, socket.TCP_KEEPINTVL, ka_sec)
# SSL # SSL
if verify_certificate == 'False': if verify_certificate in ['False', 'false', 'f']:
cert_reqs_option = ssl.CERT_NONE cert_reqs_option = ssl.CERT_NONE
else: else:
cert_reqs_option = ssl.CERT_REQUIRED cert_reqs_option = ssl.CERT_REQUIRED
client_socket = ssl.wrap_socket(s, cert_reqs=cert_reqs_option, ssl_version=ssl.PROTOCOL_TLS) if ca_certs:
ca_certs = None
client_socket = ssl.wrap_socket(s, cert_reqs=cert_reqs_option, ca_certs=ca_certs, ssl_version=ssl.PROTOCOL_TLS)
# TCP connect # TCP connect
client_socket.connect(addr) client_socket.connect(addr)