Skip to main content

Python package for providing Mozilla's CA Bundle.

Project description

Certifi provides Mozilla’s carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project.

Installation

certifi is available on PyPI. Simply install it with pip:

$ pip install certifi

Usage

To reference the installed certificate authority (CA) bundle, you can use the built-in function:

>>> import certifi

>>> certifi.where()
'/usr/local/lib/python3.7/site-packages/certifi/cacert.pem'

Or from the command line:

$ python -m certifi
/usr/local/lib/python3.7/site-packages/certifi/cacert.pem

Enjoy!

1024-bit Root Certificates

Browsers and certificate authorities have concluded that 1024-bit keys are unacceptably weak for certificates, particularly root certificates. For this reason, Mozilla has removed any weak (i.e. 1024-bit key) certificate from its bundle, replacing it with an equivalent strong (i.e. 2048-bit or greater key) certificate from the same CA. Because Mozilla removed these certificates from its bundle, certifi removed them as well.

In previous versions, certifi provided the certifi.old_where() function to intentionally re-add the 1024-bit roots back into your bundle. This was not recommended in production and therefore was removed at the end of 2018.

Addition/Removal of Certificates

Certifi does not support any addition/removal or other modification of the CA trust store content. This project is intended to provide a reliable and highly portable root of trust to python deployments. Look to upstream projects for methods to use alternate trust.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

certifi-2020.11.8.tar.gz (157.3 kB view details)

Uploaded Source

Built Distribution

certifi-2020.11.8-py2.py3-none-any.whl (155.4 kB view details)

Uploaded Python 2 Python 3

File details

Details for the file certifi-2020.11.8.tar.gz.

File metadata

  • Download URL: certifi-2020.11.8.tar.gz
  • Upload date:
  • Size: 157.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.6.1 requests/2.24.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.51.0 CPython/3.8.5

File hashes

Hashes for certifi-2020.11.8.tar.gz
Algorithm Hash digest
SHA256 f05def092c44fbf25834a51509ef6e631dc19765ab8a57b4e7ab85531f0a9cf4
MD5 b25267355218d11652c707e46accd059
BLAKE2b-256 e6de879cf857ae6f890dfa23c3d6239814c5471936b618c8fb0c8732ad5da885

See more details on using hashes here.

File details

Details for the file certifi-2020.11.8-py2.py3-none-any.whl.

File metadata

  • Download URL: certifi-2020.11.8-py2.py3-none-any.whl
  • Upload date:
  • Size: 155.4 kB
  • Tags: Python 2, Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.6.1 requests/2.24.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.51.0 CPython/3.8.5

File hashes

Hashes for certifi-2020.11.8-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 1f422849db327d534e3d0c5f02a263458c3955ec0aae4ff09b95f195c59f4edd
MD5 b27d7af63ddc9f3b12f61cf849c5c107
BLAKE2b-256 c16f3d85f0850962279a7e4c622695d7b3171e95ac65308a57d3b29738b27149

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page