java - Tornado 从请求 header 读取 X509 证书

Question

如何从进入 Tornado 服务器的 HTTP(S) 请求中读取 X509 证书？ java中的类似代码:

public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException,
  IOException {
res.setContentType("text/plain");
PrintWriter out = res.getWriter();

X509Certificate[] certs = (X509Certificate[]) req
    .getAttribute("javax.servlet.request.X509Certificate");

Answer 1

在 RequestHandler 中，使用 self.request.get_ssl_certificate()。要使用此方法，您还必须在构建 HTTPServer 时在 ssl_options 中设置 cert_reqs 选项:

server = HTTPServer(app,
    ssl_options=dict(
        certfile="foo.crt",
        keyfile="foo.key",
        cert_reqs=ssl.CERT_REQUIRED,
        ca_certs="cacert.crt"))

http://www.tornadoweb.org/en/stable/httputil.html#tornado.httputil.HTTPServerRequest.get_ssl_certificate