3 ms·
Looks like this does not include certifi [0] and loads system certificates by default. This is a breath of fresh air to see, because so many packages want to us
by neuland 7y ago
Looks like this does not include certifi [0] and loads system certificates by default. This is a breath of fresh air to see, because so many packages want to use their own certs and have a custom system to override it to use system certs.
Edit: Well, looks like it does use certifi. But my grumble still stands, I don't understand why does everyone want to mess with your certs.
[0] https://pypi.org/project/certifi/ https://pypi.org/project/certifi/
- Twirrim 7y agoIt uses certifi by default, and it's down in the dependencies: https://www.python-httpx.org/advanced/#changing-the-verification-defaults https://www.python-httpx.org/advanced/#changing-the-verifica...
- neuland 7y agoBummer. Luckily, it doesn't invent a new way to override, `SSL_CERT_FILE` is mentioned in the environmental variables.
- greglindahl 7y agoI want to mess with certs in Python so that my web crawler can actually access the whole web. If you don't talk to a wide variety of hosts, you probably haven't noticed that it's broken for 1%.
- dragonwriter 7y agoIf you work in a corporate environment, you would probably notice that systems that insist on bundling their own certs without an easy to activate option of using system cert store are broken. (And even if the library has an easy to use option, if it's easy to not expose it, much software built on the library will still be broken.) People should be empowered to substitute cert stores, but the system store should be the default.
- greglindahl 7y agoWhy yes, my web crawler operates in a corporate environment. It's almost as if different companies have different needs.
- fulafel 7y agoA lot of corporate environments are fortunately legally bound and/or princilped about not doing mitm and are using the happy path of internet CAs.