龙卷风从请求标头读取X509证书

Question

如何从Tornado服务器中的HTTP（S）请求中读取X509证书？ Java中的类似代码：

public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException,
  IOException {
res.setContentType("text/plain");
PrintWriter out = res.getWriter();

X509Certificate[] certs = (X509Certificate[]) req
    .getAttribute("javax.servlet.request.X509Certificate");

Answer 1

在RequestHandler ，使用self.request.get_ssl_certificate() 。 要使用此方法，在构造HTTPServer时，还必须在ssl_options设置cert_reqs选项：

server = HTTPServer(app,
    ssl_options=dict(
        certfile="foo.crt",
        keyfile="foo.key",
        cert_reqs=ssl.CERT_REQUIRED,
        ca_certs="cacert.crt"))

http://www.tornadoweb.org/en/stable/httputil.html#tornado.httputil.HTTPServerRequest.get_ssl_certificate