TLS Minimal Webserver: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(Die Seite wurde neu angelegt: „=CA, Request, Signierung= ==CA erstellen== *openssl req -new -x509 -newkey rsa:4096 -nodes -keyout ca.key -out ca.crt -days 3650 -subj "/CN=ca.crt" ==Request u…“) |
|||
| Zeile 13: | Zeile 13: | ||
srv.socket = ssl.wrap_socket(srv.socket, keyfile="kali.microsott.de.key", certfile="kali.microsott.de.crt", server_side=True) | srv.socket = ssl.wrap_socket(srv.socket, keyfile="kali.microsott.de.key", certfile="kali.microsott.de.crt", server_side=True) | ||
srv.serve_forever() | srv.serve_forever() | ||
| + | =Aufruf= | ||
| + | *python3 https.py | ||
Version vom 10. Dezember 2025, 08:41 Uhr
CA, Request, Signierung
CA erstellen
- openssl req -new -x509 -newkey rsa:4096 -nodes -keyout ca.key -out ca.crt -days 3650 -subj "/CN=ca.crt"
Request und Privaten Key erstellen
FQDN=kali.microsott.de
- openssl req -new -newkey rsa:4096 -nodes -keyout $FQDN.key -out $FQDN.csr -subj "/CN=$FQDN"
Signierung
- openssl x509 -req -days 1460 -in $FQDN.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out $FQDN.crt -extfile <(echo "subjectAltName=DNS:$FQDN")
Python Webserver
- nano https.py
import http.server, ssl
srv = http.server.HTTPServer(('0.0.0.0', 8443), http.server.SimpleHTTPRequestHandler)
srv.socket = ssl.wrap_socket(srv.socket, keyfile="kali.microsott.de.key", certfile="kali.microsott.de.crt", server_side=True)
srv.serve_forever()
Aufruf
- python3 https.py