pyAMF客户机在哪里（在代码中的哪一点）接受SSL证书？

Question

我设置了一个监听SSL端口的服务器。我能够连接到它，并且通过适当的凭据，我能够访问服务（下面的示例中是echo服务）

下面的代码可以正常工作，但我不知道此时客户端接受证书

服务器：

import os.path
import logging
import cherrypy
from pyamf.remoting.gateway.wsgi import WSGIGateway

logging.basicConfig(
    level=logging.DEBUG,
    format='%(asctime)s %(levelname)-5.5s [%(name)s] %(message)s'
)

def auth(username, password):
    users = {"user": "pwd"}
    if (users.has_key(username) and users[username] == password):
            return True
    return False

def echo(data):
   return data

class Root(object):
    @cherrypy.expose
    def index(self):
            return "This is your main website"

gateway = WSGIGateway({'myservice.echo': echo,}, logger=logging, debug=True, authenticator=auth)

localDir = os.path.abspath(os.path.dirname(__file__))
CA = os.path.join(localDir, 'new.cert.cert')
KEY = os.path.join(localDir, 'new.cert.key')
global_conf = {'global': {'server.socket_port': 8443,
                      'environment': 'production',
                      'log.screen': True,
                      'server.ssl_certificate': CA,
                      'server.ssl_private_key': KEY}}

cherrypy.tree.graft(gateway, '/gateway/')
cherrypy.quickstart(Root(), config=global_conf)

客户：

^{pr2}$

现在，当我运行这个时，它运行OK，客户端日志如下：

2010-01-18 00:50:56,323 INFO  [root] Connecting to https://localhost:8443/gateway
2010-01-18 00:50:56,323 DEBUG [root] Referer: None
2010-01-18 00:50:56,323 DEBUG [root] User-Agent: PyAMF/0.5.1
2010-01-18 00:50:56,323 DEBUG [root] Adding request myservice.echo('Echo this',)
2010-01-18 00:50:56,324 DEBUG [root] Executing single request: /1
2010-01-18 00:50:56,324 DEBUG [root] AMF version: 0
2010-01-18 00:50:56,324 DEBUG [root] Client type: 0
2010-01-18 00:50:56,326 DEBUG [root] Sending POST request to /gateway
2010-01-18 00:50:56,412 DEBUG [root] Waiting for response...
2010-01-18 00:50:56,467 DEBUG [root] Got response status: 200
2010-01-18 00:50:56,467 DEBUG [root] Content-Type: application/x-amf
2010-01-18 00:50:56,467 DEBUG [root] Content-Length: 41
2010-01-18 00:50:56,467 DEBUG [root] Server: PyAMF/0.5.1 Python/2.5.2
2010-01-18 00:50:56,467 DEBUG [root] Read 41 bytes for the response
2010-01-18 00:50:56,468 DEBUG [root] Response: <Envelope amfVersion=0 clientType=0>
 (u'/1', <Response status=/onResult>u'Echo this'</Response>)
</Envelope>
2010-01-18 00:50:56,468 DEBUG [root] Removing request: /1
Echo this

2010-01-18 00:50:56467 DEBUG[root]Read 41 bytes for The response的行看起来可疑，因为响应太短（证书为~1K），我希望证书传输在调试日志中。在

问题：客户端在什么时候接受证书？默认情况下，它将存储在哪里？哪个配置参数设置默认位置？

Answer 1

PyAMF在幕后使用httplib来驱动远程处理请求。通过https://连接时，httplib.HTTPSConnection用作RemotingService的connection属性。在

文件中规定（参照HTTPSConnection）：

Note: This does not do any certificate verification

因此，在回答您的问题时，证书基本上被忽略，即使您向key_file/cert_file参数提供connection。在

实际的忽略是在调用connect方法时完成的-当实际向网关发出请求时。。在

[root] Sending POST request to /gateway

Read 41 bytes for the response是未加密的http响应长度。在

这个答案可能不包含您需要的所有信息，但应该在某种程度上解释您所看到的行为。在