Class ServerSSLCertVerification

Override parent class __init__ to enable setting of certDN setting

Parameters:

• certDN (string) - Set the expected Distinguished Name of the server to avoid errors matching hostnames. This is useful where the hostname is not fully qualified
• hostname (string) - hostname to match against peer certificate subjectAltNames or subject common name
• subj_alt_name_match (bool) - flag to enable/disable matching of hostname against peer certificate subjectAltNames. Nb. A setting of True will be ignored if the pyasn1 package is not installed

Overrides: object.__init__

Verify server certificate

Parameters:

• connection (OpenSSL.SSL.Connection) - SSL connection object
• peerCert (basestring) - server host certificate as OpenSSL.crypto.X509 instance
• errorStatus (int) - error status passed from caller. This is the value returned by the OpenSSL C function X509_STORE_CTX_get_error(). Look-up x509_vfy.h in the OpenSSL source to get the meanings of the different codes. PyOpenSSL doesn't help you!
• errorDepth (int) - a non-negative integer representing where in the certificate chain the error occurred. If it is zero it occured in the end entity certificate, one if it is the certificate which signed the end entity certificate and so on.
• preverifyOK (int) - the error status - 0 = Error, 1 = OK of the current SSL context irrespective of any verification checks done here. If this function yields an OK status, it should enforce the preverifyOK value so that any error set upstream overrides and is honoured.

Returns: int

status code - 0/False = Error, 1/True = OK

DN_LUT

Value:

{'commonName': 'CN', 'countryName': 'C', 'domainComponent': 'DC', 'emailAddress': 'EMAILADDRESS', 'localityName': 'L', 'organisation': 'O', 'organisationalUnitName': 'OU', 'stateOrProvinceName': 'ST', ...

PARSER_RE_STR

Value:

'/(countryName|userid|streetAddress|emailAddress|domainComponent|local ityName|organisationalUnitName|organisation|commonName|stateOrProvince Name|C|UID|STREET|EMAILADDRESS|DC|L|OU|O|CN|ST)='

PARSER_RE

Value:

re.compile(r'/(countryName|userid|streetAddress|emailAddress|domainCom ponent|localityName|organisationalUnitName|organisation|commonName|sta teOrProvinceName|C|UID|STREET|EMAILADDRESS|DC|L|OU|O|CN|ST)=')

certDN

Distinguished Name for Server Certificate

Get Method:

_getCertDN(self)

Set Method:

_setCertDN(self, val)

hostname

hostname of server

Get Method:

_getHostname(self)

Set Method:

_setHostname(self, val)