The Secure Sockets layer is only actually secure
if you check the hostname in the certificate returned
by the server to which you are connecting,
and verify that it matches to hostname
that you are trying to reach.
But the matching logic, defined in
can be a bit tricky to implement on your own.
ssl package in the Standard Library of Python 3.2
and greater now includes a
for performing this check instead of requiring every application
to implement the check separately.
This backport brings
match_hostname() to users
of earlier versions of Python.
Simply make this distribution a dependency of your package,
and then use it like this::
from backports.ssl_match_hostname import match_hostname, CertificateError
sslsock = ssl.wrap_socket(sock, ssl_version=ssl.PROTOCOL_SSLv3,
except CertificateError, ce: