Function tls_server

src/tests/test_python_socket.py:1068–1107

Start a TLS server with a self-signed cert. Yields (host, port).

(handler, certfile, keyfile, *, timeout=5.0)

@contextlib.contextmanager
def tls_server(handler, certfile, keyfile, *, timeout=5.0):
    """Start a TLS server with a self-signed cert. Yields (host, port)."""
    import ssl as host_ssl

    server_ctx = host_ssl.SSLContext(host_ssl.PROTOCOL_TLS_SERVER)  # type: ignore[attr-defined]
    server_ctx.load_cert_chain(certfile, keyfile)

    server_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    server_socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
    server_socket.bind(("127.0.0.1", 0))
    server_socket.listen(1)
    server_socket.settimeout(timeout)
    host, port = server_socket.getsockname()
    tls_sock = server_ctx.wrap_socket(server_socket, server_side=True)

    errors: list[str] = []
    ready = threading.Event()

    def _serve():
        ready.set()
        try:
            conn, addr = tls_sock.accept()
            try:
                handler(conn, addr)
            finally:
                conn.close()
        except Exception as e:
            errors.append(str(e))
        finally:
            tls_sock.close()

    thread = threading.Thread(target=_serve, daemon=True)
    thread.start()
    ready.wait(timeout=timeout)

    try:
        yield host, port
    finally:
        thread.join(timeout=timeout)
        assert not errors, f"TLS server error: {errors[0]}"


@pytest.mark.skip_refcount_check