Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

how do I update root certificates of certifi?

I am using certifi python module to verify ssl connections. I looked at the root certificates included in certifi (python2.7/site-packages/certifi/cacert.pem) and some of those certificates have expired. How do I update those certificates? I tried updating certifi package using pip but that only updates the package and not the root CA files.

like image 540
vishal Avatar asked Dec 18 '17 13:12

vishal


People also ask

How are trusted root certificates updated?

The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.

How do I renew my Microsoft root authority certificate?

Open Certification Authority. Right click CA ->All Taska->Renew CA certificate->Yes (stop CA service)-> No (Do you want to generate a new public and private key pairs). Hope the information above is helpful to you. Should you have any question or concern, please feel free to let us know.


1 Answers

certifi/cacert.pem is, naturally, a part of certifi. Consequently, it's supposed to be updated with the module.

  • You can check if the latest code at https://github.com/certifi/python-certifi has a newer bundle and if it does, install the module directly from there with pip install git+https://github.com/certifi/python-certifi.
  • You can also replace cacert.pem with any other certificate bundle that meets your needs, like the Mozilla root certificate store. Of course, your changes will be lost the next time you update the module.
like image 185
ivan_pozdeev Avatar answered Nov 14 '22 23:11

ivan_pozdeev