{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/3"},{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Verifies that cryptography or pyOpenSSL certificates are valid for a specific hostname or IP address, implementing RFC 6125 hostname verification and service identity inspection.","skillfed_tags":["tls-security","certificate-validation"],"use_cases":["Verify TLS certificates in custom HTTPS clients to prevent MITM attacks","Validate certificates in pyOpenSSL-based applications before accepting connections","Inspect certificate service identities to debug hostname mismatch errors","Build secure reverse proxies or load balancers that validate upstream certificates","Implement certificate validation logic in network services"],"what_it_does":"service-identity is a certificate verification library that checks whether a cryptography or pyOpenSSL certificate is valid for a given hostname or IP address. It implements RFC 6125 fully, going beyond simple hostname matching to handle wildcards, alternative names, and other service identity verification scenarios. The package protects against man-in-the-middle attacks by ensuring certificates are actually issued for the services you're connecting to.\n\nThe library recently dropped its dependency on pyasn1 in favor of cryptography's native Rust-based ASN.1 decoder, simplifying its dependency tree. It works with modern Python versions (3.8 through 3.15) and is actively maintained. The package is particularly useful when building TLS clients or servers that need robust certificate validation beyond what basic SSL libraries provide.","worth_installing":"Yes. This is a focused, well-maintained security library with no known vulnerabilities, low install friction, and permissive licensing. Install it if you're building TLS clients or servers with cryptography or pyOpenSSL and need robust hostname verification beyond basic SSL defaults. The recent removal of pyasn1 dependencies makes it lighter and more maintainable."},"id":"service-identity","links":{"html":"https://skillfed.io/packages/service-identity","md":"https://skillfed.io/packages/service-identity.md","pypi":"https://pypi.org/project/service-identity/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-30","license_spdx":"MIT","license_treatment":"permissive","name":"service-identity","python_support":"supports_current","summary":"Service identity verification for pyOpenSSL & cryptography."},"popularity":{"monthly_downloads":16467631,"position":1151,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"26.1.0"}