验证客户端连接的合法性

hams

客户端和服务器共有一个私有密钥，发送消息，然后用密钥进行加密获得密文

#client
import socket
import hmac
sk = socket.socket()
sk.connect(('127.0.0.1',8090))

recv = sk.recv(1024)
# 用和server端相同的手法对这个字符串进行摘要
secret_key = b'egg'  # 密钥
hmac_obj = hmac.new(secret_key,recv)
ret = hmac_obj.digest()
sk.send(ret)
msg = sk.recv(1024)
if msg:
    print(msg.decode('utf-8'))
    while True:
        inp = input('>>>')
        sk.send(inp.encode('utf-8'))
        msg = sk.recv(1024)
        print(msg.decode('utf-8'))
sk.close()



#server
import os
import socket
import hmac
def check_client(conn):
    secret_key = b'egg'  # 密钥
    send_str = os.urandom(32)
    conn.send(send_str)
    hmac_obj = hmac.new(secret_key,send_str)
    secret_ret = hmac_obj.digest()  #bytes类型
    if conn.recv(1024) == secret_ret:
        print('合法的客户端')
        return   True
    else:
        print('非法的客户端')
        return   False


sk = socket.socket()
sk.bind(('127.0.0.1',8090))
sk.listen()

conn,addr = sk.accept()
ret = check_client(conn)
while ret:
    inp = input('>>>')
    conn.send(inp.encode('utf-8'))
    msg = conn.recv(1024)
    print(msg.decode('utf-8'))
conn.close()
sk.close()

hashlib

#client
import socket
import hashlib
sk = socket.socket()
sk.connect(('127.0.0.1',8090))

recv = sk.recv(1024)
# 用和server端相同的手法对这个字符串进行摘要
secret_key = b'egon'  # 密钥
md5_obj = hashlib.md5(secret_key)
md5_obj.update(recv)
ret = md5_obj.hexdigest()
sk.send(ret.encode('utf-8'))
msg = sk.recv(1024)
if msg:
    print(msg.decode('utf-8'))
    while True:
        inp = input('>>>')
        sk.send(inp.encode('utf-8'))
        msg = sk.recv(1024)
        print(msg.decode('utf-8'))
sk.close()


#server
import os
import socket
import hashlib
def check_client(conn):
    secret_key = b'egg'  # 密钥
    send_str = os.urandom(32)
    conn.send(send_str)
    md5_obj = hashlib.md5(secret_key)
    md5_obj.update(send_str)
    secret_ret = md5_obj.hexdigest()
    if conn.recv(1024).decode('utf-8') == secret_ret:
        print('合法的客户端')
        return   True
    else:
        print('非法的客户端')
        return   False


sk = socket.socket()
sk.bind(('127.0.0.1',8090))
sk.listen()

conn,addr = sk.accept()
ret = check_client(conn)
while ret:
    inp = input('>>>')
    conn.send(inp.encode('utf-8'))
    msg = conn.recv(1024)
    print(msg.decode('utf-8'))
conn.close()
sk.close()