`ssl.SSLObject` and `ssl.SSLSocket` should expose method to get certificate chain

[matiuszka]

Feature or enhancement

Proposal:

Being able to get a certificate chain is needed to perform OCSP revocation checks.
Starting from py3.10 we can at least call C-level API directly, but I guess such a crucial functionality should be documented and exposed in Python API:

ssl_socket._sslobj.get_unverified_chain()

Has this already been discussed elsewhere?

No response given

Links to previous discussion of this feature:

No response

Linked PRs

• gh-109109: Expose retrieving certificate chains in SSL module #109113

[gpshead]

Thanks for the contribution!