Skip to main content

Python package for providing Mozilla's CA Bundle.

Project description

Certifi provides Mozilla’s carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project.

Installation

certifi is available on PyPI. Simply install it with pip:

$ pip install certifi

Usage

To reference the installed certificate authority (CA) bundle, you can use the built-in function:

>>> import certifi

>>> certifi.where()
'/usr/local/lib/python3.7/site-packages/certifi/cacert.pem'

Or from the command line:

$ python -m certifi
/usr/local/lib/python3.7/site-packages/certifi/cacert.pem

Enjoy!

1024-bit Root Certificates

Browsers and certificate authorities have concluded that 1024-bit keys are unacceptably weak for certificates, particularly root certificates. For this reason, Mozilla has removed any weak (i.e. 1024-bit key) certificate from its bundle, replacing it with an equivalent strong (i.e. 2048-bit or greater key) certificate from the same CA. Because Mozilla removed these certificates from its bundle, certifi removed them as well.

In previous versions, certifi provided the certifi.old_where() function to intentionally re-add the 1024-bit roots back into your bundle. This was not recommended in production and therefore was removed at the end of 2018.

Addition/Removal of Certificates

Certifi does not support any addition/removal or other modification of the CA trust store content. This project is intended to provide a reliable and highly portable root of trust to python deployments. Look to upstream projects for methods to use alternate trust.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

certifi-2021.5.30.tar.gz (147.5 kB view details)

Uploaded Source

Built Distribution

certifi-2021.5.30-py2.py3-none-any.whl (145.5 kB view details)

Uploaded Python 2Python 3

File details

Details for the file certifi-2021.5.30.tar.gz.

File metadata

  • Download URL: certifi-2021.5.30.tar.gz
  • Upload date:
  • Size: 147.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.6.1 requests/2.24.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.51.0 CPython/3.8.7

File hashes

Hashes for certifi-2021.5.30.tar.gz
Algorithm Hash digest
SHA256 2bbf76fd432960138b3ef6dda3dde0544f27cbf8546c458e60baf371917ba9ee
MD5 4b38238b7305fcb3ffbc4368be4e8845
BLAKE2b-256 6d78f8db8d57f520a54f0b8a438319c342c61c22759d8f9a1cd2e2180b5e5ea9

See more details on using hashes here.

File details

Details for the file certifi-2021.5.30-py2.py3-none-any.whl.

File metadata

  • Download URL: certifi-2021.5.30-py2.py3-none-any.whl
  • Upload date:
  • Size: 145.5 kB
  • Tags: Python 2, Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.2.0 pkginfo/1.6.1 requests/2.24.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.51.0 CPython/3.8.7

File hashes

Hashes for certifi-2021.5.30-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 50b1e4f8446b06f41be7dd6338db18e0990601dce795c2b1686458aa7e8fa7d8
MD5 ee66fb12729b9e8ea4bb5b4b92f5ce2d
BLAKE2b-256 051b0a0dece0e8aa492a6ec9e4ad2fe366b511558cdc73fd3abc82ba7348e875

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page