CkPython

Get the Server Certificate from a TLS Connection

Demonstrates Socket.GetServerCert, which copies the certificate presented by the remote TLS server into a Cert object for inspection.

Background. The method returns false when the socket is not connected, is not using TLS, or no server certificate is available. Inspecting the certificate lets an application validate the server's identity.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

socket = chilkat.CkSocket()

#  Connect to the server using TLS.
bTls = True
maxWaitMs = 5000
success = socket.Connect("example.com",5000,bTls,maxWaitMs)
if (success == False):
    print(socket.lastErrorText())
    sys.exit()

#  Copy the certificate presented by the remote TLS server, then inspect it.  This can be used to
#  validate the server's identity.
cert = chilkat.CkCert()
success = socket.GetServerCert(cert)
if (success == False):
    print(socket.lastErrorText())
    sys.exit()

print("Server certificate subject: " + cert.subjectCN())
print("Issued by: " + cert.issuerCN())