pip-system-certs

What it is and what it does

pip-system-certs is a bootstrap utility that injects your operating system's certificate store into Python's SSL context at startup, replacing the bundled certificates that Python normally uses. It leverages pip's vendored truststore library to provide native OS integration: the Security framework on macOS, CryptoAPI on Windows, and OpenSSL with system stores on Linux.

Once installed, the package works transparently—Python applications automatically verify TLS/SSL connections against your system's trusted certificates without any code changes. This is particularly useful when your organization uses custom or self-signed certificates trusted by the OS, or when you need pip and Python libraries to respect system-wide certificate policies. The mechanism uses a .pth file to trigger bootstrap at Python startup, so it applies globally to all SSL connections made by any library using the standard SSL context.

Use it for:

• Verify pip package downloads against corporate or custom certificate authorities trusted by your OS.
• Make requests and urllib3 respect system-installed root certificates in enterprise environments.
• Ensure Python applications work correctly behind corporate proxies or firewalls that intercept HTTPS.
• Avoid certificate verification errors when using conda or other tools that manage their own certificate stores.
• Simplify certificate management by delegating to OS-level trust stores instead of bundling or configuring certificates in Python.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Automatically configures Python to use the operating system's certificate store for SSL/TLS verification instead of bundled certificates, working transparently with pip, requests, urllib3, and other standard Python libraries.

Yes, if you need Python to use system certificates and are on Python 3.10+ with pip 24.2+. Install friction is minimal and there are no known vulnerabilities. The aging maintenance status (302 days since release) is a minor concern, but the package is straightforward and relies on stable pip internals. Not suitable for PyInstaller-bundled applications without manual workarounds, and conda on Linux may require additional configuration.

Install

pip-system-certs on PyPI

pip install pip-system-certs

uv add pip-system-certs

poetry add pip-system-certs

Installing pip-system-certs

Before you install

Low install friction—a pure-Python wheel with only pip as a runtime dependency. Maintenance status is aging (302 days since last release), but the package targets current Python versions (3.10–3.13) and carries no known vulnerabilities.

License in practice

BSD-3-Clause is permissive; you can use, modify, and distribute this package freely in commercial and open-source projects with minimal restrictions.

Quickstart

pip install pip-system-certs

import pip_system_certs
# SSL verification now uses system certificates automatically

Requires Python 3.10 or higher and pip 24.2 or higher. Does not work with PyInstaller-bundled applications without manual setup; conda virtual environments on Linux may use a separate certificate store that takes precedence.

Verify before relying

• Whether the package works reliably with all major Python HTTP libraries beyond requests, urllib3, and httpx.
• Performance impact of automatic certificate injection on startup time or SSL handshake latency.
• How the package behaves when system certificates are updated or rotated after Python starts.

Package facts

Evidence: pip_system_certs-5.3-py3-none-any.whl

Tags

More Python Modules packages