PyPI · #124 most downloaded on PyPI

truststore

0.10.4230M downloads/mosethmlarson/truststore ↗New releases in your daily digest, changelog included.

Verify certificates using native system trust stores

Last release 1 years ago
12 Aug 2025
Ships fairly regularly
a new release about every 4 months
Nearly every release is documented
notes for 15 of 15 stable releases
1 version withdrawn
withdrawn after publishing
5 years old
16 releases · first in 2022

Release timeline

16 releases since 2022

20222023202420252026

20222026

One column per quarter.

Releases

0.10.412 Aug 20252 sources agree
Fixed a thread-safety issue when configuring the internal ssl.SSLContext object.
Fixed a thread-safety issue when configuring the internal ssl.SSLContext object.
Open source →
0.10.329 Jul 2025
Added support for the system certificate bundle in Fedora 43 and later.
Added support for the system certificate bundle in Fedora 43 and later.
Open source →
0.10.17 Feb 2025
Patch preloaded SSL context for requests library by @timo-reymann in #164

What's Changed

Patch preloaded SSL context for requests library by @timo-reymann in #164

New Contributors

@timo-reymann made their first contribution in #164

Full Changelog: v0.10.0...v0.10.1

Open source →

Additional notes

What's Changed

Patch preloaded SSL context for requests library by @timo-reymann in https://github.com/sethmlarson/truststore/pull/164

New Contributors

@timo-reymann made their first contribution in https://github.com/sethmlarson/truststore/pull/164

Full Changelog: https://github.com/sethmlarson/truststore/compare/v0.10.0...v0.10.1

Open source →

Additional notes

Fixed the patching of Requests' globally-cached ssl.SSLContext object to work automagically with truststore.inject_into_ssl() regardless of import-order.
Speed up import times by skipping feature-checking for known Python implementations (CPython and PyPy).

Open source →

0.10.023 Oct 2024

Use the 'SecTrustEvaluate' API for macOS 10.13 and earlier by @sethmlarson and @illume in #157

What's Changed

Use the 'SecTrustEvaluate' API for macOS 10.13 and earlier by @sethmlarson and @illume in #157
Enable disabling hostname verification for macOS and Windows by @sethmlarson in #152

Full Changelog: v0.9.2...v0.10.0

Open source →

Additional notes

What's Changed

Use the 'SecTrustEvaluate' API for macOS 10.13 and earlier by @sethmlarson and @illume in https://github.com/sethmlarson/truststore/pull/157
Enable disabling hostname verification for macOS and Windows by @sethmlarson in https://github.com/sethmlarson/truststore/pull/152

Full Changelog: https://github.com/sethmlarson/truststore/compare/v0.9.2...v0.10.0

Open source →

Additional notes

Added support for macOS 10.13 and earlier using the SecTrustEvaluate API. Note that this API doesn't return fine-grained errors like SecTrustEvaluateWithError (requires macOS 10.14+).
Added SSLContext.set_default_verify_paths() method.
Changed method for disabling hostname verification for macOS and Windows. Previously would ignore hostname verification errors if SSLContext.check_hostname was False. Now for both macOS and Windows the certificate verification policy is configured to not check certificate hostname. This should have no effect on users.

Open source →

0.9.221 Aug 2024

Raise an error if peer certificate chain APIs aren't available by @sethmlarson in #149

What's Changed

Raise an error if peer certificate chain APIs aren't available by @sethmlarson in #149

New Contributors

@webknjaz made their first contribution in #139
@mayeut made their first contribution in #146
@ichard26 made their first contribution in #148

Full Changelog: v0.9.1...v0.9.2

Open source →

Additional notes

What's Changed

Raise an error if peer certificate chain APIs aren't available by @sethmlarson in https://github.com/sethmlarson/truststore/pull/149

New Contributors

@webknjaz made their first contribution in https://github.com/sethmlarson/truststore/pull/139
@mayeut made their first contribution in https://github.com/sethmlarson/truststore/pull/146
@ichard26 made their first contribution in https://github.com/sethmlarson/truststore/pull/148

Full Changelog: https://github.com/sethmlarson/truststore/compare/v0.9.1...v0.9.2

Open source →

Additional notes

Fixed an issue where implementations supporting Python 3.10 but not the peer certificate chain APIs would fail during the handshake instead of when importing the truststore module. The module now raises an error immediately instead of on first handshake. This was added for the GraalPy implementation specifically, but there may be others.

Open source →

0.9.16 May 20242 sources agree

Fixed an issue for CPython 3.13 where ssl.SSLSocket and ssl.SSLObject certificate chain APIs would return different types by @sethmlarson in #137

What's Changed

Fixed an issue for CPython 3.13 where ssl.SSLSocket and ssl.SSLObject certificate chain APIs would return different types by @sethmlarson in #137

Full Changelog: v0.9.0...v0.9.1

Open source →

0.9.029 Apr 2024withdrawn: Doesn't work for CPython 3.13, upgrade to 0.9.1

Add explicit support for Python 3.13 by @sethmlarson in #132

What's Changed

Add explicit support for Python 3.13 by @sethmlarson in #132
Fix loading of additional certificates for macOS by @sethmlarson in #134
Raise a better exception when peer sends no certificates on Windows by @sethmlarson in #135

New Contributors

@mgorny made their first contribution in #111
@stefanor made their first contribution in #120

Full Changelog: v0.8.0...v0.9.0

Open source →

Additional notes

What's Changed

Add explicit support for Python 3.13 by @sethmlarson in https://github.com/sethmlarson/truststore/pull/132
Fix loading of additional certificates for macOS by @sethmlarson in https://github.com/sethmlarson/truststore/pull/134
Raise a better exception when peer sends no certificates on Windows by @sethmlarson in https://github.com/sethmlarson/truststore/pull/135

New Contributors

@mgorny made their first contribution in https://github.com/sethmlarson/truststore/pull/111
@stefanor made their first contribution in https://github.com/sethmlarson/truststore/pull/120

Full Changelog: https://github.com/sethmlarson/truststore/compare/v0.8.0...v0.9.0

Open source →

Additional notes

Added support for Python 3.13.
Fixed loading additional certificates on macOS.
Changed error message for Windows when peer offers no certificates and verification is enabled. Previously was IndexError, now is SSLCertVerificationError.

Open source →

0.8.08 Sept 2023

Added support for PyPy 3.10 by @sethmlarson in https://github.com/sethmlarson/truststore/pull/113

Added support for PyPy 3.10 by @sethmlarson in https://github.com/sethmlarson/truststore/pull/113

Full Changelog: https://github.com/sethmlarson/truststore/compare/v0.7.0...v0.8.0

Open source →

Additional notes

Added support for PyPy 3.10 by @sethmlarson in #113

Full Changelog: v0.7.0...v0.8.0

Open source →

Additional notes

Added support for PyPy 3.10 and later.

Open source →

0.7.05 Apr 20232 sources agree

Changed the error raised when using an unsupported macOS version (10.7 or earlier) from an OSError to an ImportError to match the error raised in othe

Changed the error raised when using an unsupported macOS version (10.7 or earlier) from an OSError to an ImportError to match the error raised in other situations where the module isn't supported.

Open source →

0.6.131 Mar 20232 sources agree

Fixed issue where a RecursionError that would be raised when setting SSLContext.minimum_version or .maximum_version.

Fixed issue where a RecursionError that would be raised when setting SSLContext.minimum_version or .maximum_version.

Open source →

0.6.06 Mar 20232 sources agree

Truststore is now beta! Truststore will be made the default in a future pip release.

Truststore is now beta! Truststore will be made the default in a future pip release.

Added inject_into_ssl() and extract_from_ssl() to enable Truststore for all packages using ssl.SSLContext automatically.
Added support for setting check_hostname, verify_mode, and verify_flags.
Added pass-through implementations for many ssl.SSLContext methods like load_cert_chain(), set_alpn_protocols(), etc.

Open source →

0.5.019 Aug 20222 sources agree

Support for using truststore was released with pip v22.2! You can read more here about how to help us test truststore.

Support for using truststore was released with pip v22.2! You can read more here about how to help us test truststore.
Added David Glick as an author in packaging metadata.
Added documentation for how to use truststore with urllib3, Requests, aiohttp, and pip.
Changed macOS SecureTransport error handling to raise as ssl.SSLError with message from the OS.

Open source →

0.4.05 May 20222 sources agree

:warning: This package is experimental and shouldn't be used in applications

:warning: This package is experimental and shouldn't be used in applications

Added more descriptive error messages to ssl.SSLCertVerificationError determined by the OS on macOS and Windows.
Changed Windows to follow SSLContext.verify_flags for strictly checking CRLs instead of checking CRLs strictly by default.

Open source →

0.3.029 Apr 20222 sources agree

:warning: This package is experimental and shouldn't be used in applications

:warning: This package is experimental and shouldn't be used in applications

Added support for loading extra CA certificates via SSLContext.load_verify_locations().
Added type hints.
Changed the name of TruststoreSSLContext to SSLContext.
Changed certificate hostname verification to rely on macOS and Windows instead of OpenSSL.
Fixed the order default certificates are loaded for OpenSSL backend.

Open source →

0.2.014 Mar 2022

:warning: This package is experimental and shouldn't be used in applications

:warning: This package is experimental and shouldn't be used in applications

Added support for Windows via CryptoAPI (Contributed by @davisagli)

Open source →

Additional notes

Added support for Windows via the CryptoAPI.

Open source →