Mailman 3 January 2012 - Twisted

[Twisted-Python] Weekly Bug Summary
by exarkun＠twistedmatrix.com Jan. 22, 2012

Jan. 22, 2012

1 0

[Twisted-Python] Twisted Hackday at Rackspace, SF
by exarkun＠twistedmatrix.com Jan. 20, 2012

Jan. 20, 2012

Hey all, If you're in the bay area, join Rackspace and I on February 1st for a day of hacking on Twisted and Twisted projects: http://twistedpython.eventbrite.com/ Jean-Paul

1 0

[Twisted-Python] regarding ticket #2328
by moses dsouza Jan. 19, 2012

Jan. 19, 2012

Hi Can anyone provide any ideas how to get started on this one ? Is this still open ? regards moijes12

3 3

[Twisted-Python] questions about testing xmlrpc server with ssl - problems with more than 1000 requests
by Hanusz L. Jan. 19, 2012

Jan. 19, 2012

I did some testing between a twisted xmlrpc ssl server and a twisted client with lots of simultaneous requests. I'm using windows (don't have the choice...), python 2.7, twisted 11.1 and both server and client are on the same computer... (Xeon 2Ghz 3GB of RAM) The client is configured to get a number of "Hello" answers and if there is a problem on the connection, it will try again with a calllater of 1second If the number of requests is low (<100), there is no problem. With 200 requests, … [View More]there is some errors "Connection to the other side was lost in a non-clean fashion." but the client can still get all the answers by retrying. If I try to increase the number of requests, the number of retries is rising very fast and at some point the client is unable to get any answer (with errors like "User timeout caused connection failure") 100 request - no retries 0.688 s 200 requests - 37 retries 1.5s 500 requests - 395 retries 4.2s 750 requests - 1205 retries - 36.4s 1500 requests - too much In the client the time is measured between the start of the reactor and the reception of each answer. What I don't understand is that it seems no answer is parsed before all the messages are received. For example for the 750 requests, the first message is parsed after 32.1s My questions are the following: - what is happening ? - why are all messages parsed at the end ? Priority of the reactor ? - is it possible to limit the number of incoming connections globally and/or for each client ? How ? Same for outgoing connections in the client. - to be able to see what is going on, is it possible to print the number of connections (counting connectionMade and connectionLost or is there a better method?), and the number of callbacks waiting in the reactor ? - is there a maximum number of callbacks waiting in the reactor ? The code I used is below. Modified from http://twistedmatrix.com/pipermail/twisted-python/2007-May/015357.html Thanks for your help. ########################## xmlrpc_ssl_helloworld_server.py ########################## from twisted.web import xmlrpc, server, http from twisted.internet import reactor, ssl from twisted.web.xmlrpc import withRequest class Engine: def __init__(self): self.clientWS_ip_address = "127.0.0.1" self.clientWS_port = 8010 self.clientWS = ClientWebServiceListener(self.clientWS_ip_address,self.clientWS_port,self) self.clientWS.start() class ClientWebServiceListener(): class XmlRpcFunctions(xmlrpc.XMLRPC): @withRequest def xmlrpc_helloworld(self,request): return 'Hello ' + request.channel.transport.getPeerCertificate().get_subject().commonName def __init__(self,ip_address,port,engine): self.engine = engine self.ip_address = ip_address self.port = port def start(self): ctx = self.makeSSLContext(myKey='server.pem',trustedCA='cacert.pem') self.listening_port = reactor.listenSSL(self.port, server.Site(self.XmlRpcFunctions()) ,ctx) def makeSSLContext(self,myKey,trustedCA): '''Returns an ssl Context Object @param myKey a pem formated key and certificate with for my current host the other end of this connection must have the cert from the CA that signed this key @param trustedCA a pem formated certificat from a CA you trust you will only allow connections from clients signed by this CA and you will only allow connections to a server signed by this CA ''' fd = open(myKey,'r') theCert = ssl.PrivateCertificate.loadPEM(fd.read()) fd.close() fd = open(trustedCA,'r') theCA = ssl.Certificate.loadPEM(fd.read()) fd.close() ctx = theCert.options(theCA) # Now the options you can set look like Standard OpenSSL Library options # The SSL protocol to use, one of SSLv23_METHOD, SSLv2_METHOD, # SSLv3_METHOD, TLSv1_METHOD. Defaults to TLSv1_METHOD. ctx.method = ssl.SSL.TLSv1_METHOD # If True, verify certificates received from the peer and fail # the handshake if verification fails. Otherwise, allow anonymous # sessions and sessions with certificates which fail validation. ctx.verify = True # Depth in certificate chain down to which to verify. ctx.verifyDepth = 1 # If True, do not allow anonymous sessions. ctx.requireCertification = True # If True, do not re-verify the certificate on session resumption. ctx.verifyOnce = True # If True, generate a new key whenever ephemeral DH parameters are used # to prevent small subgroup attacks. ctx.enableSingleUseKeys = True # If True, set a session ID on each context. This allows a shortened # handshake to be used when a known client reconnects. ctx.enableSessions = True # If True, enable various non-spec protocol fixes for broken # SSL implementations. ctx.fixBrokenPeers = False return ctx if __name__ == '__main__' : e = Engine() print "Starting reactor now." reactor.run() ########################## xmlrpc_ssl_helloworld_client.py ########################## import sys import time from twisted.web import xmlrpc, server from twisted.internet import reactor, ssl from datetime import datetime class wstest(): times=[] def __init__(self,port,nb_test): self.nb_test=0 self.i=0 self.nb_retry=0 ctx = self.makeSSLContext(myKey='client.pem', trustedCA='cacert.pem') self.proxy = Proxy('https://localhost:'+str(port)+'/') self.proxy.setSSLClientContext(ctx) self.port = port def printValue(self,value): time_diff = datetime.now() - self.time_begin ms_time_diff = time_diff.microseconds / 1000 + time_diff.seconds * 1000 self.times.append(ms_time_diff) self.i = self.i + 1 print repr(value) + ' - ' + str(self.i) if self.i == nb_test: print 'Nb retrys : ' + str(self.nb_retry) for j in self.times: print str(j) + ',', reactor.stop() def retry_connect(self): self.proxy.callRemote('helloworld').addCallbacks(self.printValue,self.err_received) def err_received(self,failure): print "Error - retrying" sys.stderr.write(str(failure)) self.nb_retry = self.nb_retry + 1 reactor.callLater(1,self.retry_connect) def makeSSLContext(self,myKey,trustedCA): '''Returns an ssl Context Object @param myKey a pem formated key and certifcate with for my current host the other end of this connection must have the cert from the CA that signed this key @param trustedCA a pem formated certificat from a CA you trust you will only allow connections from clients signed by this CA and you will only allow connections to a server signed by this CA ''' # our goal in here is to make a SSLContext object to pass to connectSSL # or listenSSL # Why these functioins... Not sure... fd = open(myKey,'r') theCert = ssl.PrivateCertificate.loadPEM(fd.read()) fd.close() fd = open(trustedCA,'r') theCA = ssl.Certificate.loadPEM(fd.read()) fd.close() ctx = theCert.options(theCA) # Now the options you can set look like Standard OpenSSL Library options # The SSL protocol to use, one of SSLv23_METHOD, SSLv2_METHOD, # SSLv3_METHOD, TLSv1_METHOD. Defaults to TLSv1_METHOD. ctx.method = ssl.SSL.TLSv1_METHOD # If True, verify certificates received from the peer and fail # the handshake if verification fails. Otherwise, allow anonymous # sessions and sessions with certificates which fail validation. ctx.verify = True # Depth in certificate chain down to which to verify. ctx.verifyDepth = 1 # If True, do not allow anonymous sessions. ctx.requireCertification = True # If True, do not re-verify the certificate on session resumption. ctx.verifyOnce = True # If True, generate a new key whenever ephemeral DH parameters are used # to prevent small subgroup attacks. ctx.enableSingleUseKeys = True # If True, set a session ID on each context. This allows a shortened # handshake to be used when a known client reconnects. ctx.enableSessions = True # If True, enable various non-spec protocol fixes for broken # SSL implementations. ctx.fixBrokenPeers = False return ctx class Proxy(xmlrpc.Proxy): ''' See: http://twistedmatrix.com/projects/web/documentation/howto/xmlrpc.html this is eacly like the xmlrpc.Proxy included in twisted but you can give it a SSLContext object insted of just accepting the defaults.. ''' def setSSLClientContext(self,SSLClientContext): self.SSLClientContext = SSLClientContext def callRemote(self, method, *args): factory = xmlrpc._QueryFactory( self.path, self.host, method, self.user, self.password, self.allowNone, args) if self.secure: from twisted.internet import ssl try: self.SSLClientContext except NameError: print "Must Set a SSL Context" print "use self.setSSLClientContext() first" # Its very bad to connect to ssl without some kind of # verfication of who your talking to # Using the default sslcontext without verification # Can lead to man in the middle attacks reactor.connectSSL(self.host, self.port or 443, factory,self.SSLClientContext) else: reactor.connectTCP(self.host, self.port or 80, factory) return factory.deferred def do_test(t,nb_test): for i in range(0,nb_test): t.proxy.callRemote('helloworld').addCallbacks(t.printValue,t.err_received) if __name__ == '__main__': if len(sys.argv) < 2 : sys.exit('Usage: ' + sys.argv[0] + ' nb_test') nb_test = int(sys.argv[1]) t = wstest(8010,nb_test) reactor.callWhenRunning(do_test,t,nb_test) print "Starting reactor now." t.time_begin = datetime.now() reactor.run() ##################################################################################### This e-mail message has been scanned for Viruses and Content and cleared by Mailsecurity software ##################################################################################### [View Less]

1 0

[Twisted-Python] xmlrpc function return message to client asynchronously
by Hanusz L. Jan. 19, 2012

Jan. 19, 2012

I'd like to create a xmlrpc function get_message with the following characteristic : - If the server doesn't have any message to send the client, the server will answer with a timeout after 60s (and the client can retry) - If the server has a message to send to the client, the answer is sent directly To do that, can I do the following: - create a deferred in the xmlrpc function with a calllater of 60s and keep a reference to this deferred in the factory * If the server has no message to … [View More]

2 1

[Twisted-Python] for reference - how to get ssl certificate from a xmlrpc function
by Hanusz L. Jan. 19, 2012

Jan. 19, 2012

I had some difficulty to find how to get the ssl certificate from the xmlrpc function but I found how to do it : You can get the protocol from the xmlrpc function with @withRequest http://twistedmatrix.com/documents/11.1.0/api/twisted.web.xmlrpc.withReques… Then you can use getPeerCertificate from the transport @withRequest def xmlrpc_helloworld(self,request): return 'Hello ' + request.channel.transport.getPeerCertificate().get_subject().commonName ###############… [View More]

1 0

[Twisted-Python] 2011 Totals
by anatoly techtonik Jan. 17, 2012

Jan. 17, 2012

I want to see how did I score in 2011! http://twistedmatrix.com/highscores/?time=2011-12-01 plz.plz.plz. :b -- anatoly t.

1 0

[Twisted-Python] still, txjson-rpc question
by bino oetomo Jan. 16, 2012

Jan. 16, 2012

Dear All .. I just test my simple txjson-rpc server with PHP , and found it 'works' Here is the also simple php script i use ------START--------- <?php require_once './jsonRPCClient.php'; //php json rpc class is taken from http://jsonrpcphp.org/ $myExample = new jsonRPCClient('http://127.0.0.1:50008'); // performs some basic operation echo '<b>Attempt to perform basic operations</b><br />'."\n"; try { echo 'Your name is <i>'.$myExample->aksi('This is PHP … [View More]

1 0

[Twisted-Python] Weekly Bug Summary
by exarkun＠twistedmatrix.com Jan. 15, 2012

Jan. 15, 2012

1 0

[Twisted-Python] Review of kqueue reactor patch (ticket 1918)
by Tobias Oberstein Jan. 14, 2012

Jan. 14, 2012

Hi all, the latest patch contained in http://twistedmatrix.com/trac/ticket/1918 is - after some iterations - now in a "ready for final review state" for some weeks now. I'd like to ask if someone has time to review it so it can be finally merged and the issue closed .. after 6 years;) Cheers, Tobias

2 1