I am using certifi python module to verify ssl connections. I looked at the root certificates included in certifi (python2.7/site-packages/certifi/cacert.pem) and some of those certificates have expired. How do I update those certificates? I tried updating certifi package using pip but that only updates the package and not the root CA files.
The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.
Open Certification Authority. Right click CA ->All Taska->Renew CA certificate->Yes (stop CA service)-> No (Do you want to generate a new public and private key pairs). Hope the information above is helpful to you. Should you have any question or concern, please feel free to let us know.
certifi/cacert.pem
is, naturally, a part of certifi
. Consequently, it's supposed to be updated with the module.
pip install git+https://github.com/certifi/python-certifi
.cacert.pem
with any other certificate bundle that meets your needs, like the Mozilla root certificate store. Of course, your changes will be lost the next time you update the module.If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With