SSL/TLS 레퍼런스

import ssl
import socket

# Check server's TLS version and cipher
def check_tls(hostname, port=443):
    context = ssl.create_default_context()
    with socket.create_connection((hostname, port)) as sock:
        with context.wrap_socket(sock, server_hostname=hostname) as ssock:
            cipher = ssock.cipher()
            version = ssock.version()
            cert = ssock.getpeercert()
            return {
                'version': version,
                'cipher': cipher[0],
                'bits': cipher[2],
                'subject': dict(x[0] for x in cert['subject']),
                'expires': cert['notAfter']
            }

# Configure minimum TLS version
def create_secure_context(min_version=ssl.TLSVersion.TLSv1_2):
    ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
    ctx.minimum_version = min_version
    ctx.maximum_version = ssl.TLSVersion.TLSv1_3
    ctx.load_default_certs()
    return ctx

# Example
try:
    info = check_tls('example.com')
    print(f"TLS Version: {info['version']}")
    print(f"Cipher: {info['cipher']} ({info['bits']} bits)")
    print(f"Certificate expires: {info['expires']}")
except Exception as e:
    print(f"Error: {e}")