certifi-linux

What it is and what it does

certifi-linux is a monkey-patch wrapper around certifi that intercepts calls to certifi.where() and certifi.contents to return paths from the Linux system certificate store instead of bundled certificates. It uses wrapt to inject this behavior transparently, so any library depending on certifi automatically uses OS-managed certificates without code changes.

This is particularly useful in enterprise environments where custom or internal certificate authorities must be trusted, or where system administrators manage certificates centrally. The package searches a predefined set of common certificate bundle locations across different Linux distributions (Debian, Ubuntu, Fedora, RHEL, Alpine, CentOS) and returns the first match it finds. Installation is passive: once installed, it takes effect immediately for any downstream code that calls certifi.

Use it for:

• Enterprise deployments where internal certificate authorities must be trusted by Python applications without modifying application code.
• Containerized applications on Linux where the host's certificate store is mounted and must be used for TLS verification.
• Development environments on Linux where system-wide certificate updates should automatically propagate to Python's certifi lookups.
• Compliance scenarios requiring audit trails of certificate changes managed at the OS level rather than bundled with Python packages.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Redirects certifi's certificate lookup to use the Linux system trust store instead of bundled certificates, enabling TLS verification against OS-managed certificates.

Yes, if you are on Linux and need Python applications to respect the system certificate store. The install is frictionless, maintenance is active, and there are no known vulnerabilities. Not applicable on Windows or other non-Linux platforms. Verify that your Linux distribution's certificate path is among the tested ones before relying on it in production.

Install

certifi-linux on PyPI

pip install certifi-linux

uv add certifi-linux

poetry add certifi-linux

Installing certifi-linux

Before you install

Low friction install with a single runtime dependency (wrapt). Actively maintained as of 2026-08-11 with stable status and broad Python version support (3.7–3.13).

License in practice

MIT license permits unrestricted use, modification, and distribution with minimal legal friction.

Quickstart

pip install certifi-linux

# Then in any code using certifi:
import certifi
print(certifi.where())  # Now returns system cert path, e.g. /etc/ssl/certs/ca-certificates.crt

Linux-only; will not work on Windows, macOS, or other non-Linux platforms. Requires one of the tested certificate bundle paths to exist on the system.

Verify before relying

• Whether the package successfully handles all untested distributions (Arch, Slackware, OpenWRT, FreeBSD, SUSE, gentoo) or only the documented ones.
• Performance impact of certificate path searching at runtime compared to direct bundled-certificate lookup.
• Behavior when multiple certificate bundle paths exist on the same system.

Package facts

Evidence: certifi_linux-1.1.0-py3-none-any.whl

Keywords: certifi, certificates, certs, linux, requests, ssl, tls

Tags

More Cryptography packages