Class TLSClientAutomaton

scapy/layers/tls/automaton_cli.py:89–1471

A simple TLS test client automaton. Try to overload some states or conditions and see what happens on the other side. Rather than with an interruption, the best way to stop this client is by typing 'quit'. This won't be a message sent to the server. :param server: the server I

class TLSClientAutomaton(_TLSAutomaton):
    """
    A simple TLS test client automaton. Try to overload some states or
    conditions and see what happens on the other side.

    Rather than with an interruption, the best way to stop this client is by
    typing 'quit'. This won't be a message sent to the server.

    :param server: the server IP or hostname. defaults to 127.0.0.1
    :param dport: the server port. defaults to 4433
    :param server_name: the SNI to use. It does not need to be set
    :param mycert:
    :param mykey: may be provided as filenames. They will be used in the (or post)
        handshake, should the server ask for client authentication.
    :param client_hello: may hold a TLSClientHello, TLS13ClientHello or
        SSLv2ClientHello to be sent to the server. This is particularly useful
        for extensions tweaking. If not set, a default is populated accordingly.
    :param version: is a quicker way to advertise a protocol version ("sslv2",
        "tls1", "tls12", "tls13", etc.) It may be overridden by the previous
        'client_hello'.
    :param session_ticket_file_in: path to a file that contains a session ticket
        acquired in a previous session.
    :param session_ticket_file_out: path to store any session ticket acquired during
        this session.
    :param data: is a list of raw data to be sent to the server once the
        handshake has been completed. Both 'stop_server' and 'quit' will
        work this way.
    """

    def parse_args(self, server="127.0.0.1", dport=4433, server_name=None,
                   mycert=None, mykey=None,
                   client_hello=None, version=None,
                   resumption_master_secret=None,
                   session_ticket_file_in=None,
                   session_ticket_file_out=None,
                   psk=None, psk_mode=None,
                   data=None,
                   ciphersuite: Optional[int] = None,
                   curve: Optional[str] = None,
                   supported_groups=None,
                   supported_signature_algorithms=None,
                   **kargs):

        super(TLSClientAutomaton, self).parse_args(mycert=mycert,
                                                   mykey=mykey,
                                                   **kargs)
        tmp = socket.getaddrinfo(server, dport)
        self.remote_family = tmp[0][0]
        self.remote_ip = tmp[0][4][0]
        self.remote_port = dport
        self.server_name = server_name
        self.local_ip = None
        self.local_port = None
        self.socket = None

        if isinstance(client_hello, (SSLv2ClientHello, TLSClientHello,
                                     TLS13ClientHello)):
            self.client_hello = client_hello