Created
March 11, 2025 20:26
-
-
Save mdutkin/f9322e36a44733069ca086709bc48c18 to your computer and use it in GitHub Desktop.
python certificate verify failed on MacOS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# in case you have problems accessing servers over https using libraries like | |
# requests due to the failed certificate validation and you're 100% sure that | |
# those certs work for the rest of your software, you need to combine whatever | |
# you have in your Keychain and tell your python where to look for this bundled | |
# file. tested on the pyenv environment. | |
# export system root certs | |
security export -t certs -f pemseq -k /System/Library/Keychains/SystemRootCertificates.keychain -o bundleCA.pem | |
# export self-signed certs | |
security export -t certs -f pemseq -k /Library/Keychains/System.keychain -o selfSignedCAbundle.pem | |
# make one fat cert | |
cat bundleCA.pem selfSignedCAbundle.pem >> allCAbundle.pem | |
# now you should be able to export several env variables and be good | |
CERT_PATH=$(pwd)/allCAbundle.pem | |
export REQUESTS_CA_BUNDLE=${CERT_PATH} | |
export SSL_CERT_FILE=${CERT_PATH} | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment