MongoDB 2.4 will support SSL certificate verification. PyMongo needs to implement client side support.

PyMongo's connection classes will support optional keyword parameters (through **kwargs) for keyfile, certfile, and ca_certs, the values of which will be passed to ssl.wrap_socket:

http://docs.python.org/2/library/ssl.html#ssl.wrap_socket

(Sadly, python doesn't support a way to use OpenSSL's default cert path until 3.2 - http://docs.python.org/3.2/library/ssl.html#ssl-contexts.)

These new parameters will not be supported in the MongoDB URI.