(Chilkat2-Python) Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

socket = chilkat2.Socket()

ssl = True
maxWaitMillisec = 20000

# The SSL server hostname may be an IP address, a domain name,
# or "localhost". 

sslServerHost = "www.paypal.com"
sslServerPort = 443

# Connect to the SSL server:
success = socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec)
if (success != True):
    print(socket.LastErrorText)
    sys.exit()

# cert is a CkCert
cert = socket.GetSslServerCert()
if (socket.LastMethodSuccess != False):

    print("Server Certificate:")
    print("Distinguished Name: " + cert.SubjectDN)
    print("Common Name: " + cert.SubjectCN)
    print("Issuer Distinguished Name: " + cert.IssuerDN)
    print("Issuer Common Name: " + cert.IssuerCN)

    bExpired = cert.Expired
    bRevoked = cert.Revoked
    bSignatureVerified = cert.SignatureVerified
    bTrustedRoot = cert.TrustedRoot

    print("Expired: " + str(bExpired))
    print("Revoked: " + str(bRevoked))
    print("Signature Verified: " + str(bSignatureVerified))
    print("Trusted Root: " + str(bTrustedRoot))

# Close the connection with the server
# Wait a max of 20 seconds (20000 millsec)
success = socket.Close(20000)