get_verified_chain

RustPython · youknowone · Oct 26, 2025 · Oct 23, 2025 · Oct 23, 2025 · Oct 23, 2025
commit 6abf7f13bdbcadaad749b27ea8cf0de98d207ce3
diff --git a/stdlib/src/ssl.rs b/stdlib/src/ssl.rs
@@ -1146,6 +1146,37 @@ mod _ssl {
             Some(vm.ctx.new_list(certs).into())
         }
 
+        #[pymethod]
+        fn get_verified_chain(&self, vm: &VirtualMachine) -> Option<PyListRef> {
+            let stream = self.stream.read();
+            unsafe {
+                let chain = sys::SSL_get0_verified_chain(stream.ssl().as_ptr());
+                if chain.is_null() {
+                    return None;
+                }
+
+                let num_certs = sys::OPENSSL_sk_num(chain as *const _);
+                let mut certs = Vec::new();
+
+                for i in 0..num_certs {
+                    let cert_ptr = sys::OPENSSL_sk_value(chain as *const _, i) as *mut sys::X509;
+                    if cert_ptr.is_null() {
+                        continue;
+                    }
+                    let cert = X509Ref::from_ptr(cert_ptr);
+                    if let Ok(der) = cert.to_der() {
+                        certs.push(vm.ctx.new_bytes(der).into());
+                    }
+                }
+
+                if certs.is_empty() {
+                    None
+                } else {
+                    Some(vm.ctx.new_list(certs))
+                }
+            }
+        }
+
         #[pymethod]
         fn version(&self) -> Option<&'static str> {
             let v = self.stream.read().ssl().version_str();