Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

 Chilkat Python Module Downloads for Windows, Linux, and MAC OS X

import sys
import chilkat

socket = chilkat.CkSocket()

success = socket.UnlockComponent("Anything for 30-day trial")
if (success != True):
    print "Failed to unlock component"
    sys.exit()

ssl = True
maxWaitMillisec = 20000

#  The SSL server hostname may be an IP address, a domain name,
#  or "localhost".

sslServerHost = "www.paypal.com"
sslServerPort = 443

#  Connect to the SSL server:
success = socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec)
if (success != True):
    print socket.lastErrorText()
    sys.exit()

cert = socket.GetSslServerCert()
if (not (cert == None )):

    print "Server Certificate:"
    print "Distinguished Name: " + cert.subjectDN()
    print "Common Name: " + cert.subjectCN()
    print "Issuer Distinguished Name: " + cert.issuerDN()
    print "Issuer Common Name: " + cert.issuerCN()

    bExpired = cert.IsExpired()
    bRevoked = cert.get_Revoked()
    bSignatureVerified = cert.get_SignatureVerified()
    bTrustedRoot = cert.get_TrustedRoot()

    print "Expired: " + bExpired
    print "Revoked: " + bRevoked
    print "Signature Verified: " + bSignatureVerified
    print "Trusted Root: " + bTrustedRoot

#  Close the connection with the server
#  Wait a max of 20 seconds (20000 millsec)
socket.Close(20000)