pip-system-certs
Automatically configures Python to use system certificates via truststore
Decision gist · record as of 2026-08-14
Yes, if you need Python to use system certificates and are on Python 3.10+ with pip 24.2+. Install friction is minimal and there are no known vulnerabilities. The aging maintenance status (302 days since release) is a minor concern, but the package is straightforward and relies on stable pip internals. Not suitable for PyInstaller-bundled applications without manual workarounds, and conda on Linux may require additional configuration.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.10 or higher and pip 24.2 or higher.
- Does not work with PyInstaller-bundled applications without manual setup; conda virtual environments on Linux may use a separate certificate store that takes precedence.
- Low install friction—a pure-Python wheel with only pip as a runtime dependency.
License · maintenance · safety
BSD-3-Clause (permissive) — BSD-3-Clause is permissive; you can use, modify, and distribute this package freely in commercial and open-source projects with minimal restrictions.
last release 2025-10-16 (302 days)
0 known vulnerabilities (OSV.dev, 2026-08-14) · 3,244,020 downloads/mo, #2,686 on PyPI
Alternatives
Verify before relying
pip install pip-system-certs
import pip_system_certs
# SSL verification now uses system certificates automatically- Whether the package works reliably with all major Python HTTP libraries beyond requests, urllib3, and httpx.
- Performance impact of automatic certificate injection on startup time or SSL handshake latency.
- How the package behaves when system certificates are updated or rotated after Python starts.
What it is and what it does
pip-system-certs is a bootstrap utility that injects your operating system's certificate store into Python's SSL context at startup, replacing the bundled certificates that Python normally uses. It leverages pip's vendored truststore library to provide native OS integration: the Security framework on macOS, CryptoAPI on Windows, and OpenSSL with system stores on Linux.
Once installed, the package works transparently—Python applications automatically verify TLS/SSL connections against your system's trusted certificates without any code changes. This is particularly useful when your organization uses custom or self-signed certificates trusted by the OS, or when you need pip and Python libraries to respect system-wide certificate policies. The mechanism uses a .pth file to trigger bootstrap at Python startup, so it applies globally to all SSL connections made by any library using the standard SSL context.
Use it for
- Verify pip package downloads against corporate or custom certificate authorities trusted by your OS.
- Make requests and urllib3 respect system-installed root certificates in enterprise environments.
- Ensure Python applications work correctly behind corporate proxies or firewalls that intercept HTTPS.
- Avoid certificate verification errors when using conda or other tools that manage their own certificate stores.
- Simplify certificate management by delegating to OS-level trust stores instead of bundling or configuring certificates in Python.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you need Python to use system certificates and are on Python 3.10+ with pip 24.2+.
Install friction is minimal and there are no known vulnerabilities. The aging maintenance status (302 days since release) is a minor concern, but the package is straightforward and relies on stable pip internals. Not suitable for PyInstaller-bundled applications without manual workarounds, and conda on Linux may require additional configuration.
Install
pip-system-certs on PyPI
Before you install
Low install friction—a pure-Python wheel with only pip as a runtime dependency. Maintenance status is aging (302 days since last release), but the package targets current Python versions (3.10–3.13) and carries no known vulnerabilities.
Requires Python 3.10 or higher and pip 24.2 or higher. Does not work with PyInstaller-bundled applications without manual setup; conda virtual environments on Linux may use a separate certificate store that takes precedence.
License in practice
BSD-3-Clause is permissive; you can use, modify, and distribute this package freely in commercial and open-source projects with minimal restrictions.
Quickstart
pip install pip-system-certs
import pip_system_certs
# SSL verification now uses system certificates automaticallyVerify before relying
- Whether the package works reliably with all major Python HTTP libraries beyond requests, urllib3, and httpx.
- Performance impact of automatic certificate injection on startup time or SSL handshake latency.
- How the package behaves when system certificates are updated or rotated after Python starts.
Package facts
| License | BSD-3-Clause permissive |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 1 packagepip |
| Maintenance | Aging 302 days since the last release |
| First released | |
| Downloads | 3,244,020 / month, #2,686 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 4 - BetaIntended Audience :: DevelopersProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Topic :: Security :: CryptographyTopic :: Software Development :: Libraries :: Python ModulesTopic :: System :: Systems Administration |
Evidence: pip_system_certs-5.3-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “ssl tls verification os certificates”
- pip-system-certsAutomatically configures Python to use the operating system's…
- wassimaWassima provides access to your operating system's root certificate…
- certifi-linuxRedirects certifi's certificate lookup to use the Linux system trust…
Give your agent the search over MCP, or paste the wish link into any chat.
More Python Modules packages
Converts domain names between Unicode and ASCII-compatible encoding (Punycode) according to IDNA 2008 and Unicode Technical Standard 46, with security validation and broader script coverage than the standard library.
Install it if you work with internationalized domain names, need to validate domains, or use HTTP clients that depend on it transitively.
Setuptools is a Python build backend and package management tool that handles building, distributing, and installing Python packages, including support for C/C++ extension modules.
PyYAML parses and emits YAML 1.1 data format, enabling serialization and deserialization of configuration files and Python objects to and from human-readable YAML text.
Pydantic validates Python data structures against type hints, coercing and checking input at runtime to ensure it matches a declared schema.
Provides reusable metadata objects for use with PEP-593 `typing.Annotated` to express common constraints like bounds, collection sizes, and predicates on types.
Install it if you use or build libraries that need to express type constraints in a standardized, inspectable way—or if you want to annotate your own types with…
Provides runtime tools to inspect and introspect Python type annotations, enabling programmatic examination of type hints at execution time.
See also python-certifi-win32 · sslpsk-pmd3 · truststore · aia · certifi-linux · wincertstore · certifi · wassima · requestsexceptions · service-identity