TLS Mutual Auth

main.py

import os
import ssl
import http.server
import socketserver

HOST = 'localhost'
PORT = 8001

PROJECT_ROOT = os.path.abspath(os.path.dirname(__file__))
CERT_DIR = os.path.join(PROJECT_ROOT, 'certificates')

ctx = ssl.SSLContext(protocol=ssl.PROTOCOL_TLSv1_2)
ctx.verify_mode = ssl.CERT_REQUIRED
ctx.load_verify_locations(os.path.join(CERT_DIR, 'CA.crt'))
ctx.load_cert_chain(
    certfile=os.path.join(CERT_DIR, 'webserver.crt'),
    keyfile=os.path.join(CERT_DIR, 'webserver.key')
)


class RequestHandler(http.server.BaseHTTPRequestHandler):
    def do_GET(self):
        self.send_response(200)
        self.send_header('Content-Type', 'text/html')
        self.end_headers()

        client_cert = self.connection.getpeercert()
        subject = dict([x[0] for x in client_cert.get('subject')])

        self.wfile.write(
            bytes('Hello, {}'.format(subject.get('commonName')), 'utf8')
        )
        return


if __name__ == '__main__':
    socketserver.TCPServer.allow_reuse_address = True
    httpd = socketserver.TCPServer((HOST, PORT), RequestHandler)
    httpd.socket = ctx.wrap_socket(httpd.socket, server_side=True)
    print('Serving on {}:{}'.format(HOST, PORT))
    httpd.serve_forever()