10 lines
446 B
Text
10 lines
446 B
Text
|
|
sock = ssl.wrap_socket(sock,
|
|
ciphers="HIGH:-aNULL:-eNULL:-PSK:RC4-SHA:RC4-MD5",
|
|
ssl_version=ssl.PROTOCOL_TLSv1,
|
|
cert_reqs=ssl.CERT_REQUIRED,
|
|
ca_certs='/etc/ssl/certs/ca-bundle.crt')
|
|
# getpeercert() triggers the handshake as a side effect.
|
|
if not check_host_name(sock.getpeercert(), host):
|
|
raise IOError("peer certificate does not match host name")
|
|
|