Python SSL服务器客户端Hello w/仅密码套件：TLS_DH_anon_WITH_AES_256_CBC_SHA（0x003a）失败

Question

我正试图让客户机与我的Python服务器脚本建立TLSv1连接。我不知道为什么它不工作。。。

在客户端Hello中，提供的唯一密码套件是TLS_DH_anon_WITH_AES_256_CBC_SHA（0x003a）-如WireShark所写。

无论我在ssl_包装器中定义了什么，我都尝试将ciphers=保留在定义之外，如代码“ADH-AES256-SHA”、“ALL”、“ALL:eNULL”、“ADH”中所示。我总是得到没有共享密码的响应。

我在Linux中的WindowsPython3.5.1和Python2.7.9中都尝试过。同样的问题。

如果我在Linux或cygwin中使用openssl s s_服务器进行调试，它就会工作。。。

openssl s_server-接受22939-cert server.crt-key private_key.pem-密码“ADH-AES256-SHA”-调试

cygwin openssl 1.0.2e版

linux openssl 1.0.1k

代码：

import socket, ssl

tcpSocket = socket.socket()
tcpSocket.bind(('', 22939))
tcpSocket.listen(5)


while True:
    newsocket, fromaddr = tcpSocket.accept()
    sslSocket = ssl.wrap_socket(newsocket,
                                 server_side=True,
                                 certfile="server.crt",
                                 keyfile="private_key.pem",
                                 ciphers="ADH-AES256-SHA"
                                 )
try:
    #Later add stuff
finally:
    sslSocket.shutdown(socket.SHUT_RDWR)
    sslSocket.close()

Python错误：

   File "C:\Program Files (x86)\Python35-32\lib\ssl.py", line 1064, in wrap_socket
ciphers=ciphers)
  File "C:\Program Files (x86)\Python35-32\lib\ssl.py", line 747, in __init__
self.do_handshake()
  File "C:\Program Files (x86)\Python35-32\lib\ssl.py", line 983, in do_handshake
self._sslobj.do_handshake()
    File "C:\Program Files (x86)\Python35-32\lib\ssl.py", line 628, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:645)

Wireshark的客户您好：

TLSv1 Record Layer: Handshake Protocol: Client Hello
    Content Type: Handshake (22)
    Version: TLS 1.0 (0x0301)
    Length: 45
    Handshake Protocol: Client Hello
        Handshake Type: Client Hello (1)
        Length: 41
        Version: TLS 1.0 (0x0301)
        Random
            GMT Unix Time: Jan  9, 2016 20:34:56.000000000 W. Europe Standard Time
            Random Bytes: a5e0011a6307dc4328eb9a2779a5f22a2eea8d607c8a1297...
        Session ID Length: 0
        Cipher Suites Length: 2
        Cipher Suites (1 suite)
            Cipher Suite: TLS_DH_anon_WITH_AES_256_CBC_SHA (0x003a)
        Compression Methods Length: 1
        Compression Methods (1 method)
            Compression Method: null (0)