truststore 0.3.0

Verify certificates using OS trust stores

Truststore

Verify certificates using OS trust stores. Supports macOS, Windows, and Linux (with OpenSSL). This project should be considered experimental.

Usage

# The following code works on Linux and macOS without other dependencies.

import socket
import ssl
import truststore

sock = socket.create_connection(("example.com", 443))
ctx = truststore.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
sock = ctx.wrap_socket(sock, server_hostname="example.com")

# Also works with libraries that accept an SSLContext object
import urllib3

http = urllib3.PoolManager(ssl_context=ctx)
http.request("GET", "https://example.com")

import aiohttp

http = aiohttp.ClientSession()
await http.request("GET", "https://example.com", ssl=ctx)

Platforms

Works in the following configurations:

• macOS 10.8+ using Python 3.10+ (via Security framework)
• Windows using Python 3.10+ (via CryptoAPI)
• Linux using any Python version

Prior art

• PEP 543: A Unified TLS API for Python
• Experimental APIs in Python 3.10 and the future of trust stores

License

MIT