2 files changed, 24 insertions, 1 deletions
diff --git a/src/utils/__init__.py b/src/utils/__init__.py
index c9a42935..188b8e9c 100644
--- a/src/utils/__init__.py
+++ b/src/utils/__init__.py
@@ -1,5 +1,5 @@
 import decimal, io, ipaddress, re, typing
-from src.utils import cli, consts, irc, http, parse
+from src.utils import cli, consts, irc, http, parse, security
 
 TIME_SECOND = 1
 TIME_MINUTE = TIME_SECOND*60
diff --git a/src/utils/security.py b/src/utils/security.py
new file mode 100644
index 00000000..266a767a
--- /dev/null
+++ b/src/utils/security.py
@@ -0,0 +1,23 @@
+import socket, ssl
+
+def ssl_context(cert: str=None, key: str=None, verify: bool=True
+        ) -> ssl.SSLContext:
+    context = ssl.SSLContext(ssl.PROTOCOL_TLS)
+    context.options |= ssl.OP_NO_SSLv2
+    context.options |= ssl.OP_NO_SSLv3
+    context.options |= ssl.OP_NO_TLSv1
+    context.load_default_certs()
+
+    if verify:
+        context.verify_mode = ssl.CERT_REQUIRED
+    if cert and key:
+        context.load_cert_chain(cert, keyfile=key)
+
+    return context
+
+def ssl_wrap(sock: socket.socket, cert: str=None, key: str=None,
+        verify: bool=True, server_side: bool=False, hostname: str=None
+        ) -> ssl.SSLSocket:
+    context = ssl_context(cert=cert, key=key, verify=verify)
+    return context.wrap_socket(sock, server_side=server_side,
+        server_hostname=hostname)