the ssl.get_server_certificate function is very useful for just requesting a cert. It would also be very useful to have a parallel function, possibly ssl.get_server_cert_chain that does the same thing except but provides a tuple of PEM encoded certs comprising the chain provided by the peer.

It would also be very useful, given that we have the ability to collect certs and cert chains without validating them, to have a separate convenience method for validation of certs given a cert (or chain) and the file/path to trusted CA root certs.

This way we could collect a cert chain once and validate against different ca cert stores, or collect a set of cert chains and do batch validation.

oh, and I'd love to see the _ssl._decode_certificate function exposed so that we can get easily get python data structure from certs.

If any of this sounds useful I would be happy to submit patches.

I'm already working on the issue and I have a couple of patches in my work queue, e.g. #18369, #18233, #18147, #16487 and #18293

very cool - i had seen a couple of those patches and they look good. Most of what I asked for is implemented in supporting bits for those issues.

Is their anything you could use some help on? I'm very interested in seeing better ssl support in python.

I'm closing the ticket as duplicate of #18233