mirror of
https://github.com/brunoos/luasec.git
synced 2024-12-29 13:58:22 +01:00
41 lines
929 B
Lua
41 lines
929 B
Lua
|
--
|
||
|
|
-- Public domain
|
||
|
|
--
|
||
|
|
local socket = require("socket")
|
||
|
|
local ssl = require("ssl")
|
||
|
|
|
||
|
|
local params = {
|
||
|
|
mode = "client",
|
||
|
|
protocol = "tlsv1",
|
||
|
|
key = "../certs/serverBkey.pem",
|
||
|
|
certificate = "../certs/serverB.pem",
|
||
|
|
cafile = "../certs/rootB.pem",
|
||
|
|
verify = {"peer", "fail_if_no_peer_cert"},
|
||
|
|
options = {"all", "no_sslv2"},
|
||
|
|
}
|
||
|
|
|
||
|
|
local ctx = assert(ssl.newcontext(params))
|
||
|
|
|
||
|
|
-- [[ Ignore error on certificate verification
|
||
|
|
ctx:setverifyext("lsec_continue")
|
||
|
|
--ctx:setverifyext("lsec_ignore_purpose")
|
||
|
|
--ctx:setverifyext(); -- Clear all flags set
|
||
|
|
--]]
|
||
|
|
|
||
|
|
local peer = socket.tcp()
|
||
|
|
peer:connect("127.0.0.1", 8888)
|
||
|
|
|
||
|
|
peer = assert( ssl.wrap(peer, ctx) )
|
||
|
|
assert(peer:dohandshake())
|
||
|
|
|
||
|
|
local succ, errs = peer:getpeerverification()
|
||
|
|
print(succ, errs)
|
||
|
|
for i, err in pairs(errs) do
|
||
|
|
for j, msg in ipairs(err) do
|
||
|
|
print("depth = " .. i, "error = " .. msg)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
print(peer:receive("*l"))
|
||
|
|
peer:close()
|