use system SSL cert store #34

Closed
opened 2025-06-25 08:17:33 +00:00 by foefl · 6 comments
Owner

Delta Barth uses a custom self-signed HTTPS certificate which is installed in the cert store of their customers' machines. These trigger an SSL error by requests because they are checked with the certifi library.

Delta Barth uses a custom self-signed HTTPS certificate which is installed in the cert store of their customers' machines. These trigger an SSL error by `requests` because they are checked with the `certifi` library. - use `pip-system-certs` ([https://pypi.org/project/pip-system-certs/](https://pypi.org/project/pip-system-certs/)) to use the system's cert store
foefl added the
bug
label 2025-06-25 08:17:33 +00:00
foefl self-assigned this 2025-06-25 08:17:33 +00:00
foefl added this to the bug fixes project 2025-06-25 08:17:33 +00:00
Author
Owner
  • check if the installation alone with a hook for Python's site package is enough --> not working
  • optional: trigger hook manually with wrapper for requests
- [x] check if the installation alone with a hook for Python's site package is enough --> *not working* - [ ] optional: trigger hook manually with wrapper for requests
Author
Owner

see: ccce2c703e

see: ccce2c703e
Author
Owner

Feedback on 27.06.25: Not yet working, but with using the certifi.where() directory it is passing, which should only be possible if the library is already patched in the background.

*Feedback on 27.06.25*: Not yet working, but with using the `certifi.where()` directory it is passing, which should only be possible if the library is already patched in the background.
foefl moved this to In Progress in bug fixes on 2025-06-27 13:24:34 +00:00
Author
Owner

30.06.25: Prepared test system to use HTTPS for test purposes

30.06.25: Prepared test system to use HTTPS for test purposes
Author
Owner

added manual hook of pip_system_certs because site manipulation is not triggered if the interpreter is initialised via its C-API like it is done in the C# wrapper

added manual hook of `pip_system_certs` because site manipulation is not triggered if the interpreter is initialised via its C-API like it is done in the C# wrapper
Author
Owner

Feedbach on 02.07.25: now working properly, both on test and production system

*Feedbach on 02.07.25: now working properly, both on test and production system*
foefl closed this issue 2025-07-04 06:34:06 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: delta-barth/delta-barth-py#34
No description provided.