龍卷風從請求標頭讀取X509證書

Question

如何從Tornado服務器中的HTTP（S）請求中讀取X509證書？ Java中的類似代碼：

public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException,
  IOException {
res.setContentType("text/plain");
PrintWriter out = res.getWriter();

X509Certificate[] certs = (X509Certificate[]) req
    .getAttribute("javax.servlet.request.X509Certificate");

Answer 1

在RequestHandler ，使用self.request.get_ssl_certificate() 。 要使用此方法，在構造HTTPServer時，還必須在ssl_options設置cert_reqs選項：

server = HTTPServer(app,
    ssl_options=dict(
        certfile="foo.crt",
        keyfile="foo.key",
        cert_reqs=ssl.CERT_REQUIRED,
        ca_certs="cacert.crt"))

http://www.tornadoweb.org/en/stable/httputil.html#tornado.httputil.HTTPServerRequest.get_ssl_certificate