Note: If you need this, M2Crypto, a third party replacement for the SSL module, provides the necessary functionality.  M2Crypto tends to be a headache to build (it uses SWIG, has version dependencies on SWIG, OpenSSL, the compiler, and CPython, and needs some code from its source repository that isn't in the current release), but the correct functionality is in there.  That's what I'm using now.