service_identity 18.1.0

Service identity verification for pyOpenSSL & cryptography.

Use this package if:

• you use pyOpenSSL and don’t want to be MITMed or
• if you want to verify that a PyCA cryptography certificate is valid for a certain hostname or IP address.

service_identity aspires to give you all the tools you need for verifying whether a certificate is valid for the intended purposes.

In the simplest case, this means host name verification. However, service_identity implements RFC 6125 fully and plans to add other relevant RFCs too.

service_identity’s documentation lives at Read the Docs, the code on GitHub.

Release Information

18.1.0 (2018-12-05)

Changes:

• pyOpenSSL is optional now if you use service_identity.cryptography.* only.
• Added support for iPAddress subjectAltNames. You can now verify whether a connection or a certificate is valid for an IP address using service_identity.pyopenssl.verify_ip_address() and service_identity.cryptography.verify_certificate_ip_address(). #12

Full changelog.

Authors

service_identity is written and maintained by Hynek Schlawack.

The development is kindly supported by Variomedia AG.

Other contributors can be found in GitHub’s overview.