Amazon Linux on EC2.
Fails to connect over SSL to hosts that are listed as Subject Alternative Names in the certificate. TSSLSocket.py compairs the the host only to the Common Name.
Validate client IP address against cert's SubjectAltName
Thrift Python client should support subjectAltName and wildcard certs in TSSLSocket