Chilkat2-Python

Verify SSL Server Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server and verify its SSL certificate. Chilkat2-Python

import sys
import chilkat2

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

socket = chilkat2.Socket()

ssl = True
maxWaitMillisec = 20000

# The SSL server hostname may be an IP address, a domain name,
# or "localhost". 

sslServerHost = "www.paypal.com"
sslServerPort = 443

# Connect to the SSL server:
success = socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec)
if (success == False):
    print(socket.LastErrorText)
    sys.exit()

cert = chilkat2.Cert()

success = socket.GetServerCert(cert)
if (success != False):

    print("Server Certificate:")
    print("Distinguished Name: " + cert.SubjectDN)
    print("Common Name: " + cert.SubjectCN)
    print("Issuer Distinguished Name: " + cert.IssuerDN)
    print("Issuer Common Name: " + cert.IssuerCN)

    bExpired = cert.Expired
    bRevoked = cert.Revoked
    bSignatureVerified = cert.SignatureVerified
    bTrustedRoot = cert.TrustedRoot

    print("Expired: " + str(bExpired))
    print("Revoked: " + str(bRevoked))
    print("Signature Verified: " + str(bSignatureVerified))
    print("Trusted Root: " + str(bTrustedRoot))

# Close the connection with the server
# Wait a max of 20 seconds (20000 millsec)
success = socket.Close(20000)