diff --git a/kmip/services/kmip_client.py b/kmip/services/kmip_client.py index 15442d09..9204044c 100644 --- a/kmip/services/kmip_client.py +++ b/kmip/services/kmip_client.py @@ -285,7 +285,8 @@ def open(self): six.reraise(*last_error) def _create_socket(self, sock): - context = ssl.create_default_context(purpose=ssl.Purpose.CLIENT_AUTH, cafile=self.certfile) + context = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH, cafile=self.certfile) + context.check_hostname = False self.socket = context.wrap_socket( sock, server_side=False, diff --git a/kmip/services/server/server.py b/kmip/services/server/server.py index 92c2b122..1b6308c9 100644 --- a/kmip/services/server/server.py +++ b/kmip/services/server/server.py @@ -287,7 +287,7 @@ def interrupt_handler(trigger, frame): for cipher in auth_suite_ciphers: self._logger.debug(cipher) - context = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH, cafile=self.config.settings.get('certificate_path')) + context = ssl.create_default_context(purpose=ssl.Purpose.CLIENT_AUTH, cafile=self.config.settings.get('certificate_path')) self._socket = context.wrap_socket(self._socket, server_side=True, do_handshake_on_connect=False,