---
id: certifi-linux
version: "1.1.0"
license: unclear
license_treatment: permissive
maintenance: active
---

# certifi-linux — Certifi patch for using Linux cert trust stores

License: permissive · Maintenance: active · Downloads: 171.5K/mo

## What it is and what it does

certifi-linux is a monkey-patch wrapper around certifi that intercepts calls to certifi.where() and certifi.contents to return paths from the Linux system certificate store instead of bundled certificates. It uses wrapt to inject this behavior transparently, so any library depending on certifi automatically uses OS-managed certificates without code changes.

This is particularly useful in enterprise environments where custom or internal certificate authorities must be trusted, or where system administrators manage certificates centrally. The package searches a predefined set of common certificate bundle locations across different Linux distributions (Debian, Ubuntu, Fedora, RHEL, Alpine, CentOS) and returns the first match it finds. Installation is passive: once installed, it takes effect immediately for any downstream code that calls certifi.

Use it for:

- Enterprise deployments where internal certificate authorities must be trusted by Python applications without modifying application code.
- Containerized applications on Linux where the host's certificate store is mounted and must be used for TLS verification.
- Development environments on Linux where system-wide certificate updates should automatically propagate to Python's certifi lookups.
- Compliance scenarios requiring audit trails of certificate changes managed at the OS level rather than bundled with Python packages.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Redirects certifi's certificate lookup to use the Linux system trust store instead of bundled certificates, enabling TLS verification against OS-managed certificates.

Yes, if you are on Linux and need Python applications to respect the system certificate store. The install is frictionless, maintenance is active, and there are no known vulnerabilities. Not applicable on Windows or other non-Linux platforms. Verify that your Linux distribution's certificate path is among the tested ones before relying on it in production.

## Install

pip install certifi-linux
uv add certifi-linux
poetry add certifi-linux

## Installing certifi-linux

Before you install: Low friction install with a single runtime dependency (wrapt). Actively maintained as of 2026-08-11 with stable status and broad Python version support (3.7–3.13).

License in practice: MIT license permits unrestricted use, modification, and distribution with minimal legal friction.

Quickstart:

pip install certifi-linux

# Then in any code using certifi:
import certifi
print(certifi.where())  # Now returns system cert path, e.g. /etc/ssl/certs/ca-certificates.crt

Linux-only; will not work on Windows, macOS, or other non-Linux platforms. Requires one of the tested certificate bundle paths to exist on the system.

Verify before relying:

- Whether the package successfully handles all untested distributions (Arch, Slackware, OpenWRT, FreeBSD, SUSE, gentoo) or only the documented ones.
- Performance impact of certificate path searching at runtime compared to direct bundled-certificate lookup.
- Behavior when multiple certificate bundle paths exist on the same system.

## Package facts

- License: not declared (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 171.5K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

linux system certificates, certifi system trust store, os certificate bundle, enterprise ssl certificates, linux ca certificates, tls certificate override, system certificate path, certificate-management, linux-system-integration, enterprise-ssl

[View on SkillFed](https://skillfed.io/packages/certifi-linux) · [View on PyPI](https://pypi.org/project/certifi-linux/)