{"categories":[{"label":"Testing","url":"https://skillfed.io/packages/category/software-development-testing/2"},{"label":"Networking","url":"https://skillfed.io/packages/category/system-networking"},{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"trustme generates fake TLS certificates and certificate authorities for testing network code without needing real certificates or disabling certificate validation in tests.","skillfed_tags":["tls-testing","certificate-generation","test-doubles"],"use_cases":["Test a Python web client or server that makes HTTPS connections without disabling certificate validation.","Generate test certificates for use in non-Python test suites (e.g., shell scripts, Docker containers) via command-line or PEM files.","Validate that your application correctly handles certificate chains and trust validation logic.","Create temporary certificate files for libraries that require cert paths rather than SSL context objects.","Test TLS error handling by issuing certs for different hostnames than the server is configured for."],"what_it_does":"trustme is a lightweight Python package that creates fake certificate authorities and issues TLS certificates signed by them, specifically for testing network code. Instead of disabling certificate validation in tests (which masks production bugs), you use trustme to generate realistic test certificates that your test suite can trust, letting you validate the full TLS handshake without real certificates.\n\nThe package works both programmatically (creating CA and cert objects in Python) and from the command line (generating PEM files for use in non-Python test suites). It depends on cryptography for the underlying certificate operations and idna for domain name handling. The generated certificates are real certificates, just signed by your test CA rather than a trusted root authority.","worth_installing":"Yes. trustme is a focused, well-maintained tool for a common testing need: validating TLS code without real certificates. Low install friction, permissive license, no known vulnerabilities, and active maintenance make it a safe choice for test suites. Install it if you test any code that makes HTTPS connections."},"id":"trustme","links":{"html":"https://skillfed.io/packages/trustme","md":"https://skillfed.io/packages/trustme.md","pypi":"https://pypi.org/project/trustme/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-01-02","license_spdx":null,"license_treatment":"permissive","name":"trustme","python_support":"supports_current","summary":"#1 quality TLS certs while you wait, for the discerning tester"},"popularity":{"monthly_downloads":1063092,"position":4419,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.2.1"}
