Skip to main content

Python package for providing Mozilla's CA Bundle.

Project description

Certifi is a carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project.

Installation

certifi is available on PyPI. Simply install it with pip:

$ pip install certifi

Usage

To reference the installed certificate authority (CA) bundle, you can use the built-in function:

>>> import certifi

>>> certifi.where()
'/usr/local/lib/python2.7/site-packages/certifi/cacert.pem'

Enjoy!

1024-bit Root Certificates

Browsers and certificate authorities have concluded that 1024-bit keys are unacceptably weak for certificates, particularly root certificates. For this reason, Mozilla has removed any weak (i.e. 1024-bit key) certificate from its bundle, replacing it with an equivalent strong (i.e. 2048-bit or greater key) certificate from the same CA. Because Mozilla removed these certificates from its bundle, certifi removed them as well.

In previous versions, certifi provided the certifi.old_where() function to intentionally re-add the 1024-bit roots back into your bundle. This was not recommended in production and therefore was removed. To assist in migrating old code, the function certifi.old_where() continues to exist as an alias of certifi.where(). Please update your code to use certifi.where() instead. certifi.old_where() will be removed in 2018.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

certifi-2018.1.18.tar.gz (151.3 kB view details)

Uploaded Source

Built Distribution

certifi-2018.1.18-py2.py3-none-any.whl (151.6 kB view details)

Uploaded Python 2Python 3

File details

Details for the file certifi-2018.1.18.tar.gz.

File metadata

  • Download URL: certifi-2018.1.18.tar.gz
  • Upload date:
  • Size: 151.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for certifi-2018.1.18.tar.gz
Algorithm Hash digest
SHA256 edbc3f203427eef571f79a7692bb160a2b0f7ccaa31953e99bd17e307cf63f7d
MD5 068fd5c3c690ae47504b3e0bf4e56c4c
BLAKE2b-256 15d42f888fc463d516ff7bf2379a4e9a552fef7f22a94147655d9b1097108248

See more details on using hashes here.

File details

Details for the file certifi-2018.1.18-py2.py3-none-any.whl.

File metadata

File hashes

Hashes for certifi-2018.1.18-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 14131608ad2fd56836d33a71ee60fa1c82bc9d2c8d98b7bdbc631fe1b3cd1296
MD5 38f1c6a4a5d6b5e8bcb614354d6584c9
BLAKE2b-256 fa530a5562e2b96749e99a3d55d8c7df91c9e4d8c39a9da1f1a49ac9e4f4b39f

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page