11 lines
446 B
Text
11 lines
446 B
Text
|
|
||
|
|
sock = ssl.wrap_socket(sock,
|
||
|
|
ciphers="HIGH:-aNULL:-eNULL:-PSK:RC4-SHA:RC4-MD5",
|
||
|
|
ssl_version=ssl.PROTOCOL_TLSv1,
|
||
|
|
cert_reqs=ssl.CERT_REQUIRED,
|
||
|
|
ca_certs='/etc/ssl/certs/ca-bundle.crt')
|
||
|
|
# getpeercert() triggers the handshake as a side effect.
|
||
|
|
if not check_host_name(sock.getpeercert(), host):
|
||
|
|
raise IOError("peer certificate does not match host name")
|
||
|
|
|