Verify certificates using OS trust stores. Supports macOS,
Windows, and Linux (with OpenSSL). This project should be
considered experimental.
Provides
Requires
License
MIT
Changelog
* Tue Sep 30 2025 Dirk Müller <dmueller@suse.com>
- update to 0.10.4:
* Fixed a thread-safety issue when configuring the internal
`ssl.SSLContext` object.
* Added support for the system certificate bundle in Fedora 43
and later.
* Release failed to publish to PyPI due to outdated build
tools.
* Created new release (0.10.3) after updating `build` to
1.2.2.post1.
* Mon Feb 24 2025 Dirk Müller <dmueller@suse.com>
- update to 0.10.1:
* Fixed the patching of Requests' globally-cached
`ssl.SSLContext` object to work automagically with
``truststore.inject_into_ssl()`` regardless of import-order.
* Speed up import times by skipping feature-checking for known
Python implementations (CPython and PyPy).
* Tue Jan 28 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 0.10.0
* Added support for macOS 10.13 and earlier using the `SecTrustEvaluate`
API. Note that this API doesn't return fine-grained errors like
`SecTrustEvaluateWithError` (requires macOS 10.14+).
* Added `SSLContext.set_default_verify_paths()` method.
* Changed method for disabling hostname verification for macOS and
Windows. Previously would ignore hostname verification errors if
`SSLContext.check_hostname` was `False`.
Now for both macOS and Windows the certificate verification policy
is configured to not check certificate hostname. This should have
no effect on users.
- from version 0.9.2
* Fixed an issue where implementations supporting Python 3.10 but not
the peer certificate chain APIs would fail during the handshake instead
of when importing the `truststore` module. The module now raises an error
immediately instead of on first handshake. This was added for the GraalPy
implementation specifically, but there may be others.
- Skip test_wrong_host_succeeds_with_hostname_verification_disabled test
* Thu Oct 03 2024 Steve Kowalik <steven.kowalik@suse.com>
- Add missing BuildRequires on pyOpenSSL for the testsuite, rather than
depending on it transitivity.
* Wed Aug 14 2024 Steve Kowalik <steven.kowalik@suse.com>
- Update to 0.9.1:
* Fixed an issue for CPython 3.13 where `ssl.SSLSocket` and `ssl.SSLObject`
certificate chain APIs would return different types.
* Added support for Python 3.13.
* Fixed loading additional certificates on macOS.
- Drop patch no-network-testing.patch, not required.
* Sat Mar 02 2024 Andreas Schneider <asn@cryptomilk.org>
- Use sle15_python_module_pythons
* Fri Sep 29 2023 Ondřej Súkup <mimi.vx@gmail.com>
- update to 0.8.0
- refresh no-network-testing.patch
* Added documentation for how to use truststore with urllib3,
Requests, aiohttp, and pip.
* Added pass-through implementations for many ssl.SSLContext methods
like load_cert_chain(), set_alpn_protocols(), etc.
* Added inject_into_ssl() and extract_from_ssl() to enable Truststore
for all packages using ssl.SSLContext automatically
* Added support for setting check_hostname, verify_mode, and verify_flags.
* Fixed issue where a RecursionError that would be raised when setting
SSLContext.minimum_version or .maximum_version
* Thu Jul 28 2022 Matej Cepl <mcepl@suse.com>
- Initial packaging effort for truststore 0.4.0.
- Add no-network-testing.patch to skip networked tests
(gh#sethmlarson/truststore#65).
Files
/usr/lib/python3.11/site-packages/truststore
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/INSTALLER
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/METADATA
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/RECORD
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/REQUESTED
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/WHEEL
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/licenses
/usr/lib/python3.11/site-packages/truststore-0.10.4.dist-info/licenses/LICENSE
/usr/lib/python3.11/site-packages/truststore/__init__.py
/usr/lib/python3.11/site-packages/truststore/__pycache__
/usr/lib/python3.11/site-packages/truststore/__pycache__/__init__.cpython-311.opt-1.pyc
/usr/lib/python3.11/site-packages/truststore/__pycache__/__init__.cpython-311.pyc
/usr/lib/python3.11/site-packages/truststore/__pycache__/_api.cpython-311.opt-1.pyc
/usr/lib/python3.11/site-packages/truststore/__pycache__/_api.cpython-311.pyc
/usr/lib/python3.11/site-packages/truststore/__pycache__/_macos.cpython-311.opt-1.pyc
/usr/lib/python3.11/site-packages/truststore/__pycache__/_macos.cpython-311.pyc
/usr/lib/python3.11/site-packages/truststore/__pycache__/_op