Jellyfin/jellyfin-kodi
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-kodi.git synced 2024-12-24 17:56:11 +00:00
Code Issues Projects Releases Packages Wiki Activity

SSL socket SNI support (#108)

Browse source
This commit is contained in:
Alex 2017-12-10 11:15:58 +01:00 committed by angelblue05
parent a7057ec3dc
commit 9803e9dcdf
1 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
resources/lib/websocket.py
View file

@ -130,6 +130,22 @@ def getdefaulttimeout():
return default_timeout return default_timeout
def _wrap_sni_socket(sock, sslopt, hostname):
context = ssl.SSLContext(sslopt.get('ssl_version', ssl.PROTOCOL_SSLv23))
if sslopt.get('cert_reqs', ssl.CERT_NONE) != ssl.CERT_NONE:
capath = ssl.get_default_verify_paths().capath
context.load_verify_locations(cafile=sslopt.get('ca_certs', None),
capath=sslopt.get('ca_cert_path', capath))
return context.wrap_socket(
sock,
do_handshake_on_connect=sslopt.get('do_handshake_on_connect', True),
suppress_ragged_eofs=sslopt.get('suppress_ragged_eofs', True),
server_hostname=hostname,
)
def _parse_url(url): def _parse_url(url):
""" """
parse url and the result is tuple of parse url and the result is tuple of
@ -448,7 +464,10 @@ class WebSocket(object):
sslopt = {} sslopt = {}
else: else:
sslopt = self.sslopt sslopt = self.sslopt
self.sock = ssl.wrap_socket(self.sock, **sslopt) if ssl.HAS_SNI:
self.sock = _wrap_sni_socket(self.sock, sslopt, hostname)
else:
self.sock = ssl.wrap_socket(self.sock, **sslopt)
else: else:
raise WebSocketException("SSL not available.") raise WebSocketException("SSL not available.")