--- id: truststore version: "0.10.4" license: MIT license_treatment: permissive maintenance: aging --- # truststore — Verify certificates using native system trust stores License: permissive · Maintenance: aging · Popularity: top 1,000 on PyPI ## Install pip install truststore uv add truststore poetry add truststore ## Description # Truststore [![PyPI](https://img.shields.io/pypi/v/truststore)](https://pypi.org/project/truststore) [![CI](https://github.com/sethmlarson/truststore/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/sethmlarson/truststore/actions/workflows/ci.yml) Truststore is a library which exposes native system certificate stores (ie "trust stores") through an `ssl.SSLContext`-like API. This means that Python applications no longer need to rely on certifi as a root certificate store. Native system certificate stores have many helpful features compared to a static certificate bundle like certifi: - Automatically update certificates as new CAs are created and removed - Fetch missing intermediate certificates - Check certificates against certificate revocation lists (CRLs) to avoid monster-in-the-middle (MITM) attacks - Managed per-system rather than per-application by a operations/IT team - PyPI is no longer a CA distribution channel 🥳 Right now truststore is a stand-alone library that can be installed globally in your application to immediately take advantage of the benefits in Python 3.10+. Truststore has also been integrated into pip 24.2+ as the default method for... ## AI interpretation — verify before relying Truststore exposes native system certificate stores through an ssl.SSLContext-like API, allowing Python applications to verify HTTPS certificates using the operating system's trust store instead of relying on bundled certificate files. Verdict: Truststore is a production-ready, zero-dependency library that modernizes Python's certificate verification by leveraging native system trust stores. Its MIT license and top-1000 popularity make it a solid choice for applications targeting Python 3.10+, though the aging maintenance status warrants monitoring. [View on SkillFed](https://skillfed.io/packages/truststore) · [View on PyPI](https://pypi.org/project/truststore/)