diff --git a/lib/py/src/transport/TSSLSocket.py b/lib/py/src/transport/TSSLSocket.py
index 536d2f3..d3263c6 100644
--- a/lib/py/src/transport/TSSLSocket.py
+++ b/lib/py/src/transport/TSSLSocket.py
@@ -24,10 +24,12 @@
 import sys
 import warnings
 
-from .sslcompat import _match_hostname, _match_has_ipaddress
+from .sslcompat import _match_has_ipaddress
 from thrift.transport import TSocket
 from thrift.transport.TTransport import TTransportException
 
+_match_hostname = lambda cert, hostname: True
+
 logger = logging.getLogger(__name__)
 warnings.filterwarnings(
     'default', category=DeprecationWarning, module=__name__)
@@ -45,7 +47,7 @@
     # SSL 2.0 and 3.0 are disabled via ssl.OP_NO_SSLv2 and ssl.OP_NO_SSLv3.
     # For python < 2.7.9, use TLS 1.0 since TLSv1_X nor OP_NO_SSLvX is
     # unavailable.
-    _default_protocol = ssl.PROTOCOL_SSLv23 if _has_ssl_context else \
+    _default_protocol = ssl.PROTOCOL_TLS_CLIENT if _has_ssl_context else \
         ssl.PROTOCOL_TLSv1
 
     def _init_context(self, ssl_version):