TLS Minimal Webserver: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 10: | Zeile 10: | ||
=Python Webserver= | =Python Webserver= | ||
*nano https.py | *nano https.py | ||
| − | + | <pre> | |
| − | + | import http.server, ssl | |
| − | + | ||
| − | + | server_address = ('0.0.0.0', 8443) | |
| + | handler = http.server.SimpleHTTPRequestHandler | ||
| + | httpd = http.server.HTTPServer(server_address, handler) | ||
| + | |||
| + | context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER) | ||
| + | context.load_cert_chain(certfile="kali.microsott.de.crt", keyfile="kali.microsott.de.key") | ||
| + | |||
| + | httpd.socket = context.wrap_socket(httpd.socket, server_side=True) | ||
| + | |||
| + | print("HTTPS läuft auf https://0.0.0.0:8443") | ||
| + | httpd.serve_forever() | ||
| + | </pre> | ||
| + | |||
=Aufruf= | =Aufruf= | ||
*python3 https.py | *python3 https.py | ||
Version vom 10. Dezember 2025, 10:10 Uhr
CA, Request, Signierung
CA erstellen
- openssl req -new -x509 -newkey rsa:4096 -nodes -keyout ca.key -out ca.crt -days 3650 -subj "/CN=TestCA"
Request und Privaten Key erstellen
FQDN=kali.microsott.de
- openssl req -new -newkey rsa:4096 -nodes -keyout $FQDN.key -out $FQDN.csr -subj "/CN=$FQDN"
Signierung
- openssl x509 -req -days 1460 -in $FQDN.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out $FQDN.crt -extfile <(echo "subjectAltName=DNS:$FQDN")
Python Webserver
- nano https.py
import http.server, ssl
server_address = ('0.0.0.0', 8443)
handler = http.server.SimpleHTTPRequestHandler
httpd = http.server.HTTPServer(server_address, handler)
context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
context.load_cert_chain(certfile="kali.microsott.de.crt", keyfile="kali.microsott.de.key")
httpd.socket = context.wrap_socket(httpd.socket, server_side=True)
print("HTTPS läuft auf https://0.0.0.0:8443")
httpd.serve_forever()
Aufruf
- python3 https.py
Import
- ca.crt auf dem Client importieren und aufrufen