python3 验证客户端链接的合法性

--------------------------------tcp_server.py--------------------------------
# coding:utf-8
import os
import hmac
import socket

secret_key = b‘This is my secret key‘  # bytes类型

def conn_auth(conn):
    random_bytes = os.urandom(32)  # 随机生成长度为32字节的bytes
    conn.send(random_bytes)  # 发送给客户端
    server_md5_bytes = hmac.new(secret_key, random_bytes, ‘md5‘).digest()  # md5加密后的bytes
    client_md5_bytes = conn.recv(len(server_md5_bytes))  # 接收客户端数据
    return hmac.compare_digest(server_md5_bytes, client_md5_bytes)  # 对比md5加密后的bytes


def data_handler(conn, bufsize=1024):
    if not conn_auth(conn):
        print("客户端链接认证失败.")
        conn.close()
        return

    print("客户端链接认证成功.")
    while 1:
        client_msg = conn.recv(bufsize)
        if not client_msg: break
        print("客户端消息: ", client_msg.decode("utf-8"))
        conn.send(client_msg.upper())


def server_handler(ip_port, backlog=5):
    server = socket.socket()
    server.bind(ip_port)
    server.listen(backlog)

    while 1:
        conn, addr = server.accept()
        print("客户端链接地址: %s 端口号: %s" % (addr[0], addr[1]))
        data_handler(conn)

    conn.close()
    server.close()


if __name__ == ‘__main__‘:
    ip_port = ("127.0.0.1", 8001)
    bufsize = 1024
    server_handler(ip_port, bufsize)

--------------------------------tcp_client.py--------------------------------
# coding:utf-8
import hmac
import socket

secret_key = b‘This is my secret key.‘  # bytes类型

def conn_auth(conn):
    server_bytes = conn.recv(32)  # 接收来自服务端的随机bytes
    client_md5_bytes = hmac.new(secret_key, server_bytes, ‘md5‘).digest()  # md5加密后的bytes
    conn.send(client_md5_bytes)  # 把md5加密后的bytes发送给服务端


def client_handler(ip_port, bufsize=1024):
    client = socket.socket()
    client.connect(ip_port)
    conn_auth(client)

    while 1:
        inp = input(">>>: ").strip()
        if not inp: continue
        if inp.upper() == "Q": break
        client.send(inp.encode("utf-8"))
        server_msg = client.recv(bufsize)
        print("服务端消息: ", server_msg.decode("utf-8"))
    client.close()


if __name__ == ‘__main__‘:
    ip_port = ("127.0.0.1", 8001)
    bufsize = 1024
    client_handler(ip_port, bufsize)