socketv 验证客户端链接的合法性，socketserver

补充：

send（）与sendall（）

在python socket编程中，有两个发送TCP的函数，send()与sendall()，区别如下：

socket.send(string[, flags]) 　发送TCP数据，返回发送的字节大小。这个字节长度可能少于实际要发送的数据的长度。换句话说，这个函数执行一次，并不一定能发送完给定的数据，可能需要重复多次才能发送完成。

data = "something you want to send" 
while True: 
    len = s.send(data[len:]) 
    if not len: 
        break

socket.sendall(string[, flags]) 看懂了上面那个，这个函数就容易明白了。发送完整的TCP数据，成功返回None，失败抛出异常

data = "something you want to send" 
   
s.sendall(data)

getpeername和getsoketopt的用法

服务器端代码

import socket
sk =socket.socket()
sk.bind(('127.0.0.1',9000))
sk.listen()
conn,addr =sk.accept()
conn.send(b'gdadfadsd')
print('getpeername:
',conn.getpeername())  #连接到当前套接字的远端地址.
print('getsocketop:
',sk.getsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR))#返回指定套接字的参数
conn.recv(1024)
conn.close()
sk.close()

结果

客户端代码

import socket
sk=socket.socket()
sk.connect(('127.0.0.1',9000))
sk.send(b'helllo')
ret =sk.recv(1024)
print(ret)
sk.close()

一、socketv 验证客户端链接的合法性

对server与client双向传输的数据进行md5加密操作()

import hashlib
import socket
sk =socket.socket()
sk.bind(('127.0.0.1',8083))
sk.listen()
conn,addr =sk.accept()
send_str ="helloword"
secret_key = b'hello'
conn.send(send_str.encode('utf-8'))#把字符串发过去

#留着比对用
md5_obj =hashlib.md5(secret_key)#md5加密
md5_obj.update(send_str.encode('utf-8')) #send_str进行加密，留着然后和client返回的做对比
sercret_ret =md5_obj.hexdigest() # 摘要之后是一串字符串.
print(sercret_ret)

# conn.send(sercret_ret.encode('utf-8'))

if sercret_ret ==conn.recv(1024).decode('utf-8'):
    print("客户端为合法身份")
else: print("客户端为非法身份")

Server端

import socket
import hashlib
ADDR = ('127.0.0.1',8083)
sk =socket.socket()
sk.connect(ADDR)

secret_key = b'hello'
md5_obj =hashlib.md5(secret_key)
msg = sk.recv(1024)
print(msg.decode('utf-8'))
md5_obj.update(msg)
secret_ret =md5_obj.hexdigest()#摘要结果为字符串格式.
print(secret_ret)
sk.send(secret_ret.encode('utf-8'))

client

对server与client双向传输的数据进行md5加密操作()，然后制作了一个小聊天工具

import os
import socket
import hashlib
def check_client(conn):
    secret_key =b'egg'#秘钥
    send_str ='这是一个随机的字符串'
    conn.send(send_str.encode('utf-8'))
    md5_obj =hashlib.md5(secret_key)         #加盐也要转换成bytes类型
    md5_obj.update(send_str.encode('utf-8'))# update摘要必须是byte类型.
    secret_ret =md5_obj.hexdigest()         #摘要后的结果字符串类型str
    if conn.recv(1024).decode('utf-8')==secret_ret:
        print('合法的客户端')
        return  True
    else:
        print('非法的客户端')
        return False
sk =socket.socket()
sk.bind(('127.0.0.1',8002))
sk.listen()
conn,addr =sk.accept()
ret = check_client(conn)
while ret :
    inp = input('>>>>')
    conn.send(inp.encode('utf-8'))
    msg = conn.recv(1024)
    print(msg.decode('utf-8'))
conn.close()
sk.close()

服务器端

import socket
import hashlib
sk = socket.socket()
sk.connect(('127.0.0.1',8002))
recv =sk.recv(1024)
#用相同的手法对这个字符串进行摘要.
secret_key = b'egg'#秘钥
md5_obj = hashlib.md5(secret_key)  #加盐的方式进行md5加密.
md5_obj.update(recv)        #摘要以bytes类型摘要.
ret = md5_obj.hexdigest()  #加密后是字符串的形式.
sk.send(ret.encode('utf-8')) # 发送以bytes类型发送.
msg =sk.recv(1024)
if msg:
    print(msg.decode('utf-8'))
    while True:
        inp = input(">>>>")
        sk.send(inp.encode('utf-8'))
        msg =sk.recv(1024)
        print(msg.decode('utf-8'))
sk.close()

客户端

验证客户端合法性的方法HMAC

import os
import hmac
#内置模块
#简单的网络编程中的客户端合法性验证。
ret =os.urandom(32)
print(os.urandom(32))#每次运行都会生成一个32位的随机字节
# 输出结果
# b'xa8=xd2}xe2xdccxbdxc3Xxf4xe2xcfWxe02LDxd8xa0x10exbcR0x02xf8xc1x0ez9xf1'

hmac_obj =hmac.new(b'egg',ret)
ret2 =hmac_obj.digest()
print(ret2)
# 输出结果
# b'xf9x0cxa8{xb1xb0xf7xdaxa7xb9x8dxe3x1fx9exa0x87'

#服务器端

import hmac 
import os
import socket
import hmac
def check_client(conn):
    secret_key =b'egg'#秘钥
    send_str = os.urandom(32)
    conn.send(send_str)
    md5_obj =hmac.new(secret_key,send_str)
    secret_ret =md5_obj.digest() hmac  #摘要后的结果是bytes
    if conn.recv(1024)==secret_ret:  两个bytes类型进行对比

        print('合法的客户端')
        return  True
    else:
        print('非法的客户端')
        return False
sk =socket.socket()
sk.bind(('127.0.0.1',8002))
sk.listen()
conn,addr =sk.accept()
ret = check_client(conn)
while ret :
    inp = input('>>>>')
    conn.send(inp.encode('utf-8'))
    msg = conn.recv(1024)
    print(msg.decode('utf-8'))
conn.close()
sk.close()

# sk.connect(('127.0.0.1',8002))
# recv =sk.recv(1024)
# #用相同的手法对这个字符串进行摘要.
# secret_key = b'egg'#秘钥
# md5_obj = hashlib.md5(secret_key)  #加盐的方式进行md5加密.
md5_obj=hmac.new(secret_key,recv)
# ret = md5_obj.digest()  #加密后是字符串的形式.
# sk.send(ret.encode('utf-8')) # 发送以bytes类型发送.
# sk.send(ret) #

# msg =sk.recv(1024)
# if msg:
#     print(msg.decode('utf-8'))
#     while True:
#         inp = input(">>>>")
#         sk.send(inp.encode('utf-8'))
#         msg =sk.recv(1024)
#         print(msg.decode('utf-8'))
# sk.close()

客户端

二、socketserver

#服务器端

import socketserver
class MyServer(socketserver.BaseRequestHandler):
    def handle(self):
        self.request.send(b'hello')      #conn
        msg=self.request.recv(1024).decode('utf-8')
        print(msg)
server = socketserver.ThreadingTCPServer(
    ('127.0.0.1',9000),
    MyServer)
server.serve_forever()


#客户端

import socket
sk =socket.socket()
sk.connect(('127.0.0.1',9000))
print(sk.recv(1024))
msg= input(">>>>").encode('utf-8')
sk.send(msg)
sk.close()

import json
import hashlib
import socketserver
def md5_pwd(user,pwd):
    md5_obj = hashlib.md5(user.encode('utf-8'))
    md5_obj.update(pwd.encode('utf-8'))
    ret = md5_obj.hexdigest()
    return ret

def login(userinfo):
    user_dic = json.loads(userinfo)
    passwd = md5_pwd(user_dic['username'], user_dic['passwd'])
    with open('userinfo') as f:
        for line in f:
            user, pwd = line.split('|')
            if user_dic['username'] == 
            user and passwd == pwd:
                print('登录成功')
                break

class MyServer(socketserver.BaseRequestHandler):
    def handle(self):
        userinfo = self.request.recv(1024).decode('utf-8')
        login(userinfo)

server = socketserver.ThreadingTCPServer(
                ('127.0.0.1',9000),
                MyServer)
server.serve_forever()