service-identity 1.0.0

Service identity verification for pyOpenSSL.

TL;DR: Use this package if you use pyOpenSSL and don’t want to be MITMed.

service_identity aspires to give you all the tools you need for verifying whether a certificate is valid for the intended purposes.

In the simplest case, this means host name verification. However, service_identity implements RFC 6125 fully and plans to add other relevant RFCs too.

service_identity’s documentation lives at Read the Docs, the code on GitHub.

Authors

service_identity is currently maintained by Hynek Schlawack.

The development is kindly supported by Variomedia AG.

If you think you’ve found a security-relevant bug, please contact me privately and ideally encrypt your message using PGP. I will then work with you on a responsible resolution. You can find my contact information and PGP data on my homepage.

The following wonderful people contributed directly or indirectly to this project:

• Alex Stapleton

• Glyph

• Paul Kehrer

Please add yourself here alphabetically when you submit your first pull request.