{"id":6371,"date":"2026-09-24T09:00:00","date_gmt":"2026-09-24T09:00:00","guid":{"rendered":"https:\/\/otus.ru\/journal\/?p=6371"},"modified":"2026-09-25T15:27:05","modified_gmt":"2026-09-25T15:27:05","slug":"http-opisanie-i-osobennosti","status":"publish","type":"post","link":"https:\/\/otus.ru\/journal\/http-opisanie-i-osobennosti\/","title":{"rendered":"\u0427\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 S \u0432 HTTPS \u0438 \u0447\u0435\u043c HTTPS \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 HTTP"},"content":{"rendered":"

S \u0432 HTTPS<\/strong> \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 Secure (\u00ab\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439\u00bb): HTTPS — \u044d\u0442\u043e \u0442\u043e\u0442 \u0436\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u0434\u0443\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 TLS<\/strong>. \u0421\u0430\u043c HTTP \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f — \u0442\u0435 \u0436\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0438 \u043a\u043e\u0434\u044b \u043e\u0442\u0432\u0435\u0442\u0430. \u041c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043d\u0430\u043b: \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e HTTP \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0443 80, HTTPS — \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 443.<\/p>\n

\n

\u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435<\/strong><\/p>\n

    \n
  1. \u041c\u0438\u043d\u0438-\u0441\u043b\u043e\u0432\u0430\u0440\u044c: \u0447\u0442\u043e \u0441 \u0447\u0435\u043c \u043f\u0443\u0442\u0430\u044e\u0442<\/a><\/li>\n
  2. HTTP \u0438 HTTPS: \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435<\/a><\/li>\n
  3. \u041a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f HTTPS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435<\/a><\/li>\n
  4. \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435: \u0447\u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a<\/a><\/li>\n
  5. \u041f\u043e\u0447\u0435\u043c\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u0438\u0448\u0435\u0442 \u00ab\u041d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e\u00bb<\/a><\/li>\n
  6. \u0427\u0435\u0433\u043e HTTPS \u043d\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442<\/a><\/li>\n
  7. \u041a\u0430\u043a \u043f\u0435\u0440\u0435\u0432\u0435\u0441\u0442\u0438 \u0441\u0430\u0439\u0442 \u043d\u0430 HTTPS<\/a><\/li>\n
  8. \u0412\u044b\u0432\u043e\u0434\u044b<\/a><\/li>\n
  9. \u0413\u0434\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \/ \u0441\u0432\u044f\u0437\u044c \u0441 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u043e\u0439<\/a><\/li>\n
  10. FAQ<\/a><\/li>\n<\/ol>\n<\/div>\n

    TLS \u0434\u0430\u0435\u0442 \u0442\u0440\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430, \u0438 \u0438\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u043e \u043d\u0435 \u0441\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c: \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435<\/strong> (\u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043d\u0435 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435), \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c<\/strong> (\u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c) \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430<\/strong> \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0443 (\u0432\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u0434\u043e\u043c\u0435\u043d\u043e\u043c \u0438\u0437 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438). \u041d\u0438\u0436\u0435 — \u043a\u0430\u043a \u044d\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e, \u043e\u043f\u044b\u0442 \u043d\u0430 Python \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u00ab\u041d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e\u00bb.<\/p>\n

    \u041c\u0438\u043d\u0438-\u0441\u043b\u043e\u0432\u0430\u0440\u044c: \u0447\u0442\u043e \u0441 \u0447\u0435\u043c \u043f\u0443\u0442\u0430\u044e\u0442<\/h2>\n\n\n\n\n\n\n\n\n
    \u0422\u0435\u0440\u043c\u0438\u043d<\/th>\n\u0427\u0442\u043e \u044d\u0442\u043e<\/th>\n\u0427\u0430\u0441\u0442\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430<\/th>\n<\/tr>\n<\/thead>\n
    HTTP<\/td>\n\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u00ab\u0437\u0430\u043f\u0440\u043e\u0441 — \u043e\u0442\u0432\u0435\u0442\u00bb \u043c\u0435\u0436\u0434\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c<\/td>\n\u0421\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f — \u043e\u043d \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0448\u0438\u0444\u0440\u0443\u0435\u0442<\/td>\n<\/tr>\n
    TLS<\/td>\n\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 TCP (\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 1.2 \u0438 1.3)<\/td>\n\u041d\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e SSL<\/td>\n<\/tr>\n
    SSL<\/td>\n\u041f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0438\u043a TLS; SSL 3.0 \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d \u0441 2015 \u0433\u043e\u0434\u0430 (RFC 7568)<\/td>\n\u0414\u0443\u043c\u0430\u0442\u044c, \u0447\u0442\u043e \u00abSSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u00bb \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e SSL — \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0434\u043b\u044f TLS<\/td>\n<\/tr>\n
    \u0421\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442<\/td>\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440\u043e\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CA)<\/td>\n\u0421\u0447\u0438\u0442\u0430\u0442\u044c, \u0447\u0442\u043e \u0438\u043c \u0448\u0438\u0444\u0440\u0443\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0434\u0430\u043d\u043d\u044b\u0435<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    HTTP \u0438 HTTPS: \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435<\/h2>\n\n\n\n\n\n\n\n\n\n\n\n
    \u0421\u0432\u043e\u0439\u0441\u0442\u0432\u043e<\/th>\nHTTP<\/th>\nHTTPS<\/th>\n<\/tr>\n<\/thead>\n
    \u0421\u0445\u0435\u043c\u0430 \u0432 \u0430\u0434\u0440\u0435\u0441\u0435<\/td>\nhttp:\/\/<\/code><\/td>\nhttps:\/\/<\/code><\/td>\n<\/tr>\n
    \u041f\u043e\u0440\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e<\/td>\n80<\/td>\n443<\/td>\n<\/tr>\n
    \u0427\u0442\u043e \u0432\u0438\u0434\u043d\u043e \u043d\u0430 \u043f\u0443\u0442\u0438 (Wi-Fi, \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u043f\u0440\u043e\u043a\u0441\u0438)<\/td>\n\u0412\u0441\u0435: \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438, cookie, \u043f\u0430\u0440\u043e\u043b\u0438 \u0438\u0437 \u0444\u043e\u0440\u043c<\/td>\nIP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043e\u0431\u044a\u0435\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u043c\u044f \u0434\u043e\u043c\u0435\u043d\u0430; \u043f\u0443\u0442\u044c, \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0438 \u0442\u0435\u043b\u043e \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b<\/td>\n<\/tr>\n
    \u041c\u043e\u0436\u043d\u043e \u043b\u0438 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0442\u0432\u0435\u0442<\/td>\n\u0414\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0440\u0435\u043a\u043b\u0430\u043c\u0443 \u0438\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442<\/td>\n\u041d\u0435\u0442: \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u043b\u043e\u043c\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438<\/td>\n<\/tr>\n
    \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430, \u0447\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439<\/td>\n\u041d\u0435\u0442<\/td>\n\u0414\u0430, \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0443 \u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e CA<\/td>\n<\/tr>\n
    \u041e\u0442\u043c\u0435\u0442\u043a\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435<\/td>\n\u00ab\u041d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e\u00bb<\/td>\n\u0417\u043d\u0430\u0447\u043e\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f<\/td>\n<\/tr>\n
    HTTP\/2 \u0438 HTTP\/3 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445<\/td>\n\u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f<\/td>\n\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b: HTTP\/2 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0432\u0435\u0440\u0445 TLS, HTTP\/3 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 QUIC \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c TLS 1.3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u0422\u0435\u0437\u0438\u0441 \u00abHTTP \u0431\u044b\u0441\u0442\u0440\u0435\u0435, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043d\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb \u0443\u0441\u0442\u0430\u0440\u0435\u043b: TLS 1.3 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0434\u0438\u043d \u043e\u0431\u043c\u0435\u043d \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043e \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e, \u0430 HTTP\/2 \u0438 HTTP\/3 \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441 HTTPS.<\/p>\n

    \u041a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f HTTPS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435<\/h2>\n

    \u0423\u043f\u0440\u043e\u0449\u0435\u043d\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0434\u043b\u044f TLS 1.3 (\u0432 TLS 1.2 \u0448\u0430\u0433\u043e\u0432 \u0431\u043e\u043b\u044c\u0448\u0435 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u043e):<\/p>\n

      \n
    1. \u0411\u0440\u0430\u0443\u0437\u0435\u0440 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043d\u0430 \u043f\u043e\u0440\u0442 443.<\/li>\n
    2. ClientHello<\/strong>: \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u0448\u0438\u0444\u0440\u044b, \u0441\u0432\u043e\u044e \u0447\u0430\u0441\u0442\u044c \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0438\u043c\u044f \u0441\u0430\u0439\u0442\u0430 (SNI). \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0438\u043c\u044f \u0434\u043e\u043c\u0435\u043d\u0430 \u0432\u0438\u0434\u043d\u043e \u043d\u0430 \u043f\u0443\u0442\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 ECH.<\/li>\n
    3. ServerHello<\/strong>: \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0441\u0432\u043e\u0435\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043e\u0431\u043c\u0435\u043d\u0430. \u0418\u0437 \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u0442\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u044e\u0442 \u043e\u0431\u0449\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0441\u0430\u043c \u043a\u043b\u044e\u0447 \u043f\u043e \u0441\u0435\u0442\u0438 \u043d\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f. \u041a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u0414\u0438\u0444\u0444\u0438 — \u0425\u0435\u043b\u043b\u043c\u0430\u043d \u043d\u0430 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0440\u0438\u0432\u044b\u0445 (X25519); \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u0438 OpenSSL 3.5+ \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043e\u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043e \u0433\u0438\u0431\u0440\u0438\u0434\u0435 X25519MLKEM768 \u0441 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u043c ML-KEM.<\/li>\n
    4. \u0423\u0436\u0435 \u0432 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438\u0441\u044b\u043b\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0441\u0432\u043e\u0438\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c — \u0442\u0430\u043a \u043e\u043d \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043b\u0430\u0434\u0435\u0435\u0442 \u043a\u043b\u044e\u0447\u043e\u043c \u0438\u0437 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430.<\/li>\n
    5. \u0411\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442: \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0432\u0435\u0434\u0435\u0442 \u043a \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c\u0443 CA, \u0438\u043c\u044f \u0441\u0430\u0439\u0442\u0430 \u0435\u0441\u0442\u044c \u0432 SAN, \u0441\u0440\u043e\u043a \u043d\u0435 \u0438\u0441\u0442\u0435\u043a.<\/li>\n
    6. \u0414\u0430\u043b\u044c\u0448\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u0432\u0435\u0442\u044b \u0438\u0434\u0443\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u0430\u043d\u0430\u043b\u0430, \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u043c\u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 (AES-GCM \u0438\u043b\u0438 ChaCha20-Poly1305).<\/li>\n<\/ol>\n

      \u041f\u043e\u043f\u0440\u0430\u0432\u043a\u0430 \u043a \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c\u0443 \u043e\u0431\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u044e: \u043a\u043b\u044e\u0447 \u0438\u0437 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043d\u0435 \u0448\u0438\u0444\u0440\u0443\u0435\u0442 \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u043d \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u043a\u0442\u043e \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u0414\u0430\u043d\u043d\u044b\u0435 \u0448\u0438\u0444\u0440\u0443\u044e\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0431\u0443\u0434\u0443\u0449\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0442\u0440\u0430\u0444\u0438\u043a TLS 1.3.<\/p>\n

      \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435: \u0447\u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a<\/h2>\n

      \u041e\u043f\u044b\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d 24.09.2026 \u0432 Python 3.14.7 \u0438 OpenSSL 3.5.7 (\u043e\u0431\u0440\u0430\u0437 python:3.14-slim<\/code>). \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0443\u0447\u0435\u0431\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043b\u044f localhost<\/code>. \u041a\u043b\u044e\u0447\u0438 \u0443\u0447\u0435\u0431\u043d\u044b\u0435 \u0438 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f — \u0434\u043b\u044f \u0431\u043e\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0442\u0430\u043a \u043d\u0435 \u0434\u0435\u043b\u0430\u044e\u0442.<\/p>\n

      # 1. \u0423\u0447\u0435\u0431\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CA): \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439, \u0441 \u043f\u0440\u0430\u0432\u043e\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c<\/span>\nopenssl <\/span>req <\/span>-x509 <\/span>-newkey <\/span>rsa:2048 <\/span>-nodes <\/span>-days <\/span>30<\/span> <\/span>\\<\/span>\n  <\/span>-keyout <\/span>ca.key <\/span>-out <\/span>ca.crt <\/span>-subj <\/span>\"\/CN=Demo Training CA\"<\/span> <\/span>\\<\/span>\n  <\/span>-addext <\/span>\"basicConstraints=critical,CA:TRUE\"<\/span> <\/span>\\<\/span>\n  <\/span>-addext <\/span>\"keyUsage=critical,keyCertSign,cRLSign\"<\/span>\n# 2. \u041a\u043b\u044e\u0447 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442<\/span>\nopenssl <\/span>req <\/span>-newkey <\/span>rsa:2048 <\/span>-nodes <\/span>\\<\/span>\n  <\/span>-keyout <\/span>server.key <\/span>-out <\/span>server.csr <\/span>-subj <\/span>\"\/CN=localhost\"<\/span>\n# 3. CA \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442; \u0438\u043c\u0435\u043d\u0430, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043d \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442, - \u0432 SAN<\/span>\ncat <\/span>> <\/span>server.ext <\/span><<'X'<\/span>\nsubjectAltName=DNS:localhost,IP:127.0.0.1<\/span>\nkeyUsage=critical,digitalSignature,keyEncipherment<\/span>\nextendedKeyUsage=serverAuth<\/span>\nauthorityKeyIdentifier=keyid<\/span>\nX<\/span>\nopenssl <\/span>x509 <\/span>-req <\/span>-in <\/span>server.csr <\/span>-CA <\/span>ca.crt <\/span>-CAkey <\/span>ca.key <\/span>-CAcreateserial <\/span>\\<\/span>\n  <\/span>-days <\/span>30<\/span> <\/span>-extfile <\/span>server.ext <\/span>-out <\/span>server.crt\nopenssl <\/span>x509 <\/span>-in <\/span>server.crt <\/span>-noout <\/span>-subject <\/span>-issuer <\/span>-ext <\/span>subjectAltName<\/code><\/pre>\n
      \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u0435\u0447\u0430\u0442\u0430\u0435\u0442, \u043a\u043e\u043c\u0443 \u0432\u044b\u0434\u0430\u043d \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u043a\u0435\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d \u0438 \u0434\u043b\u044f \u043a\u0430\u043a\u0438\u0445 \u0438\u043c\u0435\u043d:<\/p>\n
      subject=CN=localhost\nissuer=CN=Demo Training CA\nX509v3 Subject Alternative Name: \n    DNS:localhost, IP Address:127.0.0.1\n<\/code><\/pre>\n
      \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f basicConstraints<\/code> \u0438 keyUsage<\/code> \u0443 CA \u043d\u0435 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c: \u0432 Python 3.13+ \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0442\u0440\u043e\u0433\u0430\u044f, \u0438 \u0431\u0435\u0437 keyUsage<\/code> CA \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 CA cert does not include key usage extension<\/code>.<\/p>\n
      \u0421\u043a\u0440\u0438\u043f\u0442 demo.py<\/code> \u0432 \u0442\u043e\u0439 \u0436\u0435 \u043f\u0430\u043f\u043a\u0435 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e HTTP (\u043f\u043e\u0440\u0442 8080) \u0438 HTTPS (8443), \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u044b\u043c \u00ab\u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0435\u0442 \u0438 \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0431\u0430\u0439\u0442\u044b, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u043e\u0440\u043c\u0443 \u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u043c.<\/p>\n
      import<\/span> <\/span>socket<\/span>,<\/span> <\/span>ssl<\/span>,<\/span> <\/span>threading<\/span>,<\/span> <\/span>urllib.error<\/span>,<\/span> <\/span>urllib.request<\/span>\nfrom<\/span> <\/span>http.server<\/span> <\/span>import<\/span> HTTPServer<\/span>,<\/span> BaseHTTPRequestHandler<\/span>\n\nclass<\/span> <\/span>Hello<\/span>(<\/span>BaseHTTPRequestHandler<\/span>):<\/span>\n    def<\/span> <\/span>do_POST<\/span>(<\/span>self<\/span>):<\/span>\n        self<\/span>.<\/span>rfile<\/span>.<\/span>read<\/span>(<\/span>int<\/span>(<\/span>self<\/span>.<\/span>headers<\/span>[<\/span>\"Content-Length\"<\/span>]))<\/span>\n        self<\/span>.<\/span>send_response<\/span>(<\/span>200<\/span>)<\/span>\n        self<\/span>.<\/span>end_headers<\/span>()<\/span>\n        self<\/span>.<\/span>wfile<\/span>.<\/span>write<\/span>(<\/span>b\"ok\"<\/span>)<\/span>\n    def<\/span> <\/span>log_message<\/span>(<\/span>self<\/span>,<\/span> *<\/span>args<\/span>):<\/span>\n        pass<\/span>\n\ndef<\/span> <\/span>serve<\/span>(<\/span>port<\/span>,<\/span> tls<\/span>):<\/span>\n    srv<\/span> =<\/span> HTTPServer<\/span>((<\/span>\"127.0.0.1\"<\/span>,<\/span> port<\/span>),<\/span> Hello<\/span>)<\/span>\n    if<\/span> tls<\/span>:<\/span>\n        ctx<\/span> =<\/span> ssl<\/span>.<\/span>SSLContext<\/span>(<\/span>ssl<\/span>.<\/span>PROTOCOL_TLS_SERVER<\/span>)<\/span>\n        ctx<\/span>.<\/span>load_cert_chain<\/span>(<\/span>\"server.crt\"<\/span>,<\/span> \"server.key\"<\/span>)<\/span>\n        srv<\/span>.<\/span>socket<\/span> =<\/span> ctx<\/span>.<\/span>wrap_socket<\/span>(<\/span>srv<\/span>.<\/span>socket<\/span>,<\/span> server_side<\/span>=<\/span>True<\/span>)<\/span>\n    threading<\/span>.<\/span>Thread<\/span>(<\/span>target<\/span>=<\/span>srv<\/span>.<\/span>serve_forever<\/span>,<\/span> daemon<\/span>=<\/span>True<\/span>)<\/span>.<\/span>start<\/span>()<\/span>\n\nseen<\/span> =<\/span> bytearray<\/span>()<\/span>  # \u0432\u0441\u0435 \u0431\u0430\u0439\u0442\u044b \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0448\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430<\/span>\n\ndef<\/span> <\/span>spy<\/span>(<\/span>listen_port<\/span>,<\/span> target_port<\/span>):<\/span>\n    <\/span>\"\"\"\u041f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a \u043d\u0430 \u043f\u0443\u0442\u0438: \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u0435\u0442 \u0431\u0430\u0439\u0442\u044b \u0438 \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u0441\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0448\u043b\u043e.\"\"\"<\/span>\n    lsock<\/span> =<\/span> socket<\/span>.<\/span>create_server<\/span>((<\/span>\"127.0.0.1\"<\/span>,<\/span> listen_port<\/span>))<\/span>\n    def<\/span> <\/span>pipe<\/span>(<\/span>src<\/span>,<\/span> dst<\/span>,<\/span> record<\/span>):<\/span>\n        try<\/span>:<\/span>\n            while<\/span> data<\/span> :=<\/span> src<\/span>.<\/span>recv<\/span>(<\/span>4096<\/span>):<\/span>\n                if<\/span> record<\/span>:<\/span>\n                    seen<\/span>.<\/span>extend<\/span>(<\/span>data<\/span>)<\/span>\n                dst<\/span>.<\/span>sendall<\/span>(<\/span>data<\/span>)<\/span>\n        except<\/span> OSError<\/span>:<\/span>\n            pass<\/span>\n        try<\/span>:<\/span>\n            dst<\/span>.<\/span>shutdown<\/span>(<\/span>socket<\/span>.<\/span>SHUT_WR<\/span>)<\/span>  # \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0434\u0430\u043b\u044c\u0448\u0435 \"\u043a\u043e\u043d\u0435\u0446 \u0434\u0430\u043d\u043d\u044b\u0445\"<\/span>\n        except<\/span> OSError<\/span>:<\/span>\n            pass<\/span>\n    def<\/span> <\/span>run<\/span>():<\/span>\n        while<\/span> True<\/span>:<\/span>\n            client<\/span>,<\/span> _<\/span> =<\/span> lsock<\/span>.<\/span>accept<\/span>()<\/span>\n            server<\/span> =<\/span> socket<\/span>.<\/span>create_connection<\/span>((<\/span>\"127.0.0.1\"<\/span>,<\/span> target_port<\/span>))<\/span>\n            threading<\/span>.<\/span>Thread<\/span>(<\/span>target<\/span>=<\/span>pipe<\/span>,<\/span> args<\/span>=<\/span>(<\/span>client<\/span>,<\/span> server<\/span>,<\/span> True<\/span>),<\/span> daemon<\/span>=<\/span>True<\/span>)<\/span>.<\/span>start<\/span>()<\/span>\n            threading<\/span>.<\/span>Thread<\/span>(<\/span>target<\/span>=<\/span>pipe<\/span>,<\/span> args<\/span>=<\/span>(<\/span>server<\/span>,<\/span> client<\/span>,<\/span> False<\/span>),<\/span> daemon<\/span>=<\/span>True<\/span>)<\/span>.<\/span>start<\/span>()<\/span>\n    threading<\/span>.<\/span>Thread<\/span>(<\/span>target<\/span>=<\/span>run<\/span>,<\/span> daemon<\/span>=<\/span>True<\/span>)<\/span>.<\/span>start<\/span>()<\/span>\n\nserve<\/span>(<\/span>8080<\/span>,<\/span> tls<\/span>=<\/span>False<\/span>);<\/span> serve<\/span>(<\/span>8443<\/span>,<\/span> tls<\/span>=<\/span>True<\/span>)<\/span>\nspy<\/span>(<\/span>9080<\/span>,<\/span> 8080<\/span>);<\/span> spy<\/span>(<\/span>9443<\/span>,<\/span> 8443<\/span>)<\/span>\nform<\/span> =<\/span> b\"login=anna&password=qwerty\"<\/span>\n\ndef<\/span> <\/span>report<\/span>():<\/span>\n    print<\/span>(<\/span>\"  \u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u0430\u0439\u0442\u044b:\"<\/span>,<\/span> bytes<\/span>(<\/span>seen<\/span>[:<\/span>24<\/span>]))<\/span>\n    print<\/span>(<\/span>\"  \u043f\u0430\u0440\u043e\u043b\u044c \u0432\u0438\u0434\u0435\u043d \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0443:\"<\/span>,<\/span> b\"password=qwerty\"<\/span> in<\/span> seen<\/span>)<\/span>\n    seen<\/span>.<\/span>clear<\/span>()<\/span>\n\nprint<\/span>(<\/span>\"1) HTTP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430:\"<\/span>)<\/span>\nurllib<\/span>.<\/span>request<\/span>.<\/span>urlopen<\/span>(<\/span>\"http:\/\/127.0.0.1:9080\/\"<\/span>,<\/span> data<\/span>=<\/span>form<\/span>)<\/span>\nreport<\/span>()<\/span>\n\nprint<\/span>(<\/span>\"2) HTTPS \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430, CA \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043a\u043b\u0438\u0435\u043d\u0442\u0443:\"<\/span>)<\/span>\ntrusted<\/span> =<\/span> ssl<\/span>.<\/span>create_default_context<\/span>(<\/span>cafile<\/span>=<\/span>\"ca.crt\"<\/span>)<\/span>\nresp<\/span> =<\/span> urllib<\/span>.<\/span>request<\/span>.<\/span>urlopen<\/span>(<\/span>\"https:\/\/127.0.0.1:9443\/\"<\/span>,<\/span> data<\/span>=<\/span>form<\/span>,<\/span> context<\/span>=<\/span>trusted<\/span>)<\/span>\nprint<\/span>(<\/span>\"  \u043e\u0442\u0432\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430:\"<\/span>,<\/span> resp<\/span>.<\/span>status<\/span>,<\/span> resp<\/span>.<\/span>read<\/span>())<\/span>\nreport<\/span>()<\/span>\n\nprint<\/span>(<\/span>\"3) HTTPS \u0431\u0435\u0437 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u043d\u0430\u0448\u0435\u043c\u0443 CA (\u043a\u0430\u043a \u0447\u0443\u0436\u043e\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440):\"<\/span>)<\/span>\ntry<\/span>:<\/span>\n    urllib<\/span>.<\/span>request<\/span>.<\/span>urlopen<\/span>(<\/span>\"https:\/\/127.0.0.1:8443\/\"<\/span>,<\/span> data<\/span>=<\/span>form<\/span>,<\/span>\n                           context<\/span>=<\/span>ssl<\/span>.<\/span>create_default_context<\/span>())<\/span>\nexcept<\/span> urllib<\/span>.<\/span>error<\/span>.<\/span>URLError<\/span> as<\/span> e<\/span>:<\/span>\n    print<\/span>(<\/span>\"  \u043e\u0448\u0438\u0431\u043a\u0430:\"<\/span>,<\/span> e<\/span>.<\/span>reason<\/span>)<\/span>\n\nprint<\/span>(<\/span>\"4) \u0421\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0435\u0441\u0442\u044c, \u043d\u043e \u0438\u043c\u044f \u043d\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u0435\u0442:\"<\/span>)<\/span>\ntry<\/span>:<\/span>\n    with<\/span> socket<\/span>.<\/span>create_connection<\/span>((<\/span>\"127.0.0.1\"<\/span>,<\/span> 8443<\/span>))<\/span> as<\/span> raw<\/span>:<\/span>\n        trusted<\/span>.<\/span>wrap_socket<\/span>(<\/span>raw<\/span>,<\/span> server_hostname<\/span>=<\/span>\"shop.example\"<\/span>)<\/span>\nexcept<\/span> ssl<\/span>.<\/span>SSLCertVerificationError<\/span> as<\/span> e<\/span>:<\/span>\n    print<\/span>(<\/span>\"  \u043e\u0448\u0438\u0431\u043a\u0430:\"<\/span>,<\/span> e<\/span>.<\/span>verify_message<\/span>)<\/span>\n\nwith<\/span> socket<\/span>.<\/span>create_connection<\/span>((<\/span>\"127.0.0.1\"<\/span>,<\/span> 8443<\/span>))<\/span> as<\/span> raw<\/span>:<\/span>\n    with<\/span> trusted<\/span>.<\/span>wrap_socket<\/span>(<\/span>raw<\/span>,<\/span> server_hostname<\/span>=<\/span>\"localhost\"<\/span>)<\/span> as<\/span> tls<\/span>:<\/span>\n        print<\/span>(<\/span>\"5) \u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f:\"<\/span>,<\/span> tls<\/span>.<\/span>version<\/span>(),<\/span> tls<\/span>.<\/span>cipher<\/span>()[<\/span>0<\/span>])<\/span><\/code><\/pre>\n
      \u0412\u044b\u0432\u043e\u0434 python demo.py<\/code> (\u0445\u0432\u043e\u0441\u0442 \u0431\u0430\u0439\u0442\u043e\u0432 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043f\u0443\u043d\u043a\u0442\u0435 \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0441\u0432\u043e\u0439 — \u044d\u0442\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0438\u0437 ClientHello):<\/p>\n
      1) HTTP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430:\n  \u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u0430\u0439\u0442\u044b: b'POST \/ HTTP\/1.1\\r\\nAccept-'\n  \u043f\u0430\u0440\u043e\u043b\u044c \u0432\u0438\u0434\u0435\u043d \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0443: True\n2) HTTPS \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430, CA \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043a\u043b\u0438\u0435\u043d\u0442\u0443:\n  \u043e\u0442\u0432\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430: 200 b'ok'\n  \u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u0430\u0439\u0442\u044b: b'\\x16\\x03\\x01\\x05\\xde\\x01\\x00\\x05\\xda\\x03\\x03\\x87\\xca\\xc5\\x1f\\xe7A\\xb6j\\x1b\\xa7H\\x9e\\xfd'\n  \u043f\u0430\u0440\u043e\u043b\u044c \u0432\u0438\u0434\u0435\u043d \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0443: False\n3) HTTPS \u0431\u0435\u0437 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u043d\u0430\u0448\u0435\u043c\u0443 CA (\u043a\u0430\u043a \u0447\u0443\u0436\u043e\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440):\n  \u043e\u0448\u0438\u0431\u043a\u0430: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1082)\n4) \u0421\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0435\u0441\u0442\u044c, \u043d\u043e \u0438\u043c\u044f \u043d\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u0435\u0442:\n  \u043e\u0448\u0438\u0431\u043a\u0430: Hostname mismatch, certificate is not valid for 'shop.example'.\n5) \u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f: TLSv1.3 TLS_AES_256_GCM_SHA384\n<\/code><\/pre>\n
      \u0427\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043a\u0430\u0436\u0434\u044b\u0439 \u043f\u0443\u043d\u043a\u0442:<\/p>\n