truststore

Verify certificates using native system trust stores

truststore Permissive license MIT AGING ★ 240 v0.10.4 released 2025-08-12

Install

truststore on PyPI

pip

pip install truststore

uv

uv add truststore

poetry

poetry add truststore

Package facts

License	MIT (permissive)
Python support	supports the current Python release (>=3.10)
Install friction	low — pure-Python wheel
Runtime dependencies	none
Maintenance	aging — 366 days since the last release
Last repo commit	2025-11-28
First released	2022-03-10
Popularity	one of the top 1,000 most-downloaded packages on PyPI (30-day window, as of 2026-08-13)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-13)

Evidence: truststore-0.10.4-py3-none-any.whl

Development Status :: 5 - Production/StableIntended Audience :: DevelopersOperating System :: MacOSOperating System :: MicrosoftProgramming Language :: Python :: 3Programming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: Implementation :: CPythonProgramming Language :: Python :: Implementation :: PyPy

About truststore

from the package's own PyPI description — quoted content, verbatim

Truststore

PyPI (image) CI (image)

Truststore is a library which exposes native system certificate stores (ie "trust stores") through an ssl.SSLContext-like API. This means that Python applications no longer need to rely on certifi as a root certificate store. Native system certificate stores have many helpful features compared to a static certificate bundle like certifi:

Automatically update certificates as new CAs are created and removed
Fetch missing intermediate certificates
Check certificates against certificate revocation lists (CRLs) to avoid monster-in-the-middle (MITM) attacks
Managed per-system rather than per-application by a operations/IT team
PyPI is no longer a CA distribution channel 🥳

Right now truststore is a stand-alone library that can be installed globally in your application to immediately take advantage of the benefits in Python 3.10+. Truststore has also been integrated into pip 24.2+ as the default method for...

Read as markdown · JSON record · Source repository · Docs

AI interpretation — verify before relying

AI-generated interpretation of the package facts above; every digit, version, license, or vulnerability id it cites is grounded in the facts already shown on this page

Truststore exposes native system certificate stores through an ssl.SSLContext-like API, allowing Python applications to verify HTTPS certificates using the operating system's trust store instead of relying on bundled certificate files.

Installation is straightforward with no runtime dependencies and a pure-Python wheel distribution. The package is classified as Production/Stable, though the last release was 366 days ago.

MIT license permits unrestricted use, modification, and distribution with minimal obligations—suitable for both commercial and open-source projects.

Usage

pip install truststore

import ssl
import truststore

ctx = truststore.SSLContext(ssl.PROTOCOL_TLS_CLIENT)

Requires Python 3.10 or later; platform support includes macOS 10.8+, Windows, and Linux with OpenSSL.

Verdict: Truststore is a production-ready, zero-dependency library that modernizes Python's certificate verification by leveraging native system trust stores. Its MIT license and top-1000 popularity make it a solid choice for applications targeting Python 3.10+, though the aging maintenance status warrants monitoring.

Needs verification

Whether the 366-day gap since last release reflects deliberate stability or reduced active development
Real-world adoption rate and integration stability with HTTP libraries beyond documented examples

system certificate store pythonnative ssl context verificationreplace certifi with system certsssl certificate validationcross-platform certificate managementpython https certificate verificationos trust store integration