Little Star Blog

路在脚下,心向远方

http如何使用SSL做双向认证

生成证书 创建服务器端 import http.server import ssl # 硬编码私钥密码 SERVER_KEY_PASSWORD = '' server_address = ('0.0.0.0', 8443) httpd = http.server.HTTPServer(server_address, http.server.SimpleHTTPRequestHandler) # 使用 SSLContext 支持密码 context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH) context.load_cert_chain(certfile='server.pem', keyfile='server.key', password=SERVER_KEY_PASSWORD) context.load_verify_locations(cafile='ca.pem') context.verify_mode = ssl.CERT_REQUIRED # 强制客户端认证 httpd.socket = context.wrap_socket(httpd.socket, server_side=True) print("HTTPS Server running on port 8443 with

使用unix-socket解耦

vim receive.sh #!/bin/bash SOCKET="/var/run/ha_state.sock" [ -e "$SOCKET" ] && rm -f "$SOCKET" # 移除旧 socket 文件 socat - UNIX-LISTEN:$SOCKET,fork | while read line; do echo "收到 socket 消息: $line" done vim send.sh echo 'hello' | socat - UNIX-CONNECT:/var/run/lxgme.sock 先启动 receive.sh sudo bash receive.sh 再去启动 send.sh sudo bash receive.sh 返回内容如下