Skip to content
Branch: release
Go to file

Latest commit


Failed to load latest commit information.
Latest commit message
Commit time


Linux Build Status Windows Build status PyPI version PyPI wheel PyPI version

Experimental OpenSSL wrapper for Python 3.7+ and SSLyze. Do NOT use for anything serious. This code has not been properly tested/reviewed and is absolutely not production ready.

Quick Start

Nassl can be installed directly via pip:

pip install nassl

Dev environment

If you want to setup a local environment where you can work on SSLyze, you will first need to install pipenv. Then, the environment can initialized using:

$ cd nassl
$ pipenv install --dev
$ pipenv shell

Nassl relies on a C extension to call into OpenSSL; you can compile everything using:

$ invoke build.all

Then, the tests can be run using:

$ invoke test

Project structure


Classes implemented in Python are part of the nassl namespace; they are designed to provide a simpler, higher-level interface to perform SSL connections.


Classes implemented in C are part of the nassl._nassl namespace; they try to stay as close as possible to OpenSSL's API. In most cases, Python methods of such objects directly match the OpenSSL function with same name. For example the Python method matches OpenSSL's SSL_read() function.

These classes should be considered internal.

Why another SSL library?

I'm the author of SSLyze, an SSL scanner written in Python. Scanning SSL servers requires access to low-level SSL functions within the OpenSSL API, for example to test for things like insecure renegotiation or session resumption.

None of the existing OpenSSL wrappers for Python (including ssl, M2Crypto and pyOpenSSL) expose the APIs that I need for SSLyze, so I had to write my own wrapper.


See ./LICENSE.txt

Please contact me if this license doesn't work for you.


Alban Diquet - @nabla_c0d3 -


Experimental OpenSSL wrapper for Python 3.7+ and SSLyze.





You can’t perform that action at this time.