Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use pip_system_certs in place of certifi #26456

Open
willwh opened this issue May 16, 2023 · 4 comments
Open

Use pip_system_certs in place of certifi #26456

willwh opened this issue May 16, 2023 · 4 comments
Assignees
Labels
Azure CLI Team The command of the issue is owned by Azure CLI team customer-reported Issues that are reported by GitHub users external to the Azure organization. feature-request
Milestone

Comments

@willwh
Copy link

willwh commented May 16, 2023

Related command
This is related to any TLS verification by az cli.

Is your feature request related to a problem? Please describe.
Managing certificates is very challenging in a corporate environment, the advice in https://learn.microsoft.com/en-us/cli/azure/use-cli-effectively?tabs=bash%2Cbash2#work-behind-a-proxy works, but is rather cumbersome.

Describe the solution you'd like
Using pip_system_certs would likely greatly improve the user experience by using the system certificate store, and likely reduce support requests etc related to problem like this.... just searching the issue queue with is:issue is:open certificate it looks like there are 105 at the time of writing.

See: pip_system_certs

@ghost ghost added the customer-reported Issues that are reported by GitHub users external to the Azure organization. label May 16, 2023
@yonzhan
Copy link
Collaborator

yonzhan commented May 16, 2023

Thank you for opening this issue, we will look into it.

@yonzhan yonzhan added Azure CLI Team The command of the issue is owned by Azure CLI team feature-request labels May 17, 2023
@yonzhan yonzhan added this to the Backlog milestone May 17, 2023
@jiasli
Copy link
Member

jiasli commented May 17, 2023

This issue has been tracked by the underlying requests library: psf/requests#2966

@bebound
Copy link
Contributor

bebound commented May 17, 2023

This repo has only 11 starts and it seems that it does not support MacOS: https://gitlab.com/alelec/pip-system-certs/-/issues/19

PS: Find another alternative truststore, which only works for python3.10+. Pip supports it experimentally: https://pip.pypa.io/en/stable/topics/https-certificates/#using-system-certificate-stores

@Ousret
Copy link

Ousret commented Dec 8, 2023

There might be a 3rd solution that eventually comes to be interesting for the broader community.
https://github.com/jawah/niquests

Or.. directly use the underlying library https://github.com/jawah/wassima

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Azure CLI Team The command of the issue is owned by Azure CLI team customer-reported Issues that are reported by GitHub users external to the Azure organization. feature-request
Projects
None yet
Development

No branches or pull requests

5 participants