Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Add support for SSL_CERT_FILE, REQUESTS_CA_BUNDLE, and CURL_CA_BUNDLE

See original GitHub issue

Part of #33 these three environment variables all have the same behavior, to specify where a CA bundle is if none are specified by default and trust_env is True.

We should check the three environment variables in the order above, as SSL_CERT_FILE is a PEP and a standard whereas the other are products of other projects.

If multiple are set and that file doesn’t exist we should skip it and try the next environment variable.

We’ll also have to document these environment variables within docs/environment.md.

Issue Analytics

State:
Created 4 years ago
Comments:7 (7 by maintainers)

Top GitHub Comments

2reactions

pquentincommented, Oct 13, 2020

One data point: to get async/await support, we switched from requests to httpx for a production service at work today, and we had to change this environment variable. It would be nice if requests supported SSL_CERT_FILE and SSL_CERT_DIR but it doesn’t: https://github.com/psf/requests/pull/2903#issuecomment-206520463.

2reactions

tomchristiecommented, Sep 3, 2019

Yeah, I think our starting point should be the PEP - https://www.python.org/dev/peps/pep-0476/#trust-database - Ie. let’s support SSL_CERT_FILE and SSL_CERT_DIR.

We could always walk back from that point to add support requests and curl style env vars in addition, but I don’t think it’s obvious if we want to do that or not.