Bug 2380441

Summary: Moving of off /etc/pki/tls/certs/ca-bundle.crt
Product: [Fedora] Fedora Reporter: Frantisek Krenzelok <fkrenzel>
Component: python-pipAssignee: Miro Hrončok <mhroncok>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: ksurma, metherid, mhroncok, python-maint, python-packagers-sig, TicoTimo, torsava
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: python-pip-25.1.1-13.fc43 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-07-22 14:19:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2360110    

Description Frantisek Krenzelok 2025-07-16 09:45:37 UTC 
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, which is taking effect during the fedora rawhide mass rebuild (starting 23th of July), we would like you to add `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` to the following list in the source code as the other items will not be present on the system.

```
./python-pip-25.1.1-build/pip-25.1.1/src/pip/_vendor/truststore/_openssl.py:10:    "/etc/ssl/cert.pem",
./python-pip-25.1.1-build/pip-25.1.1/src/pip/_vendor/truststore/_openssl.py:12:    "/etc/pki/tls/cert.pem",
./python-pip-25.1.1-build/pip-25.1.1/src/pip/_vendor/truststore/_openssl.py:14:    "/etc/ssl/certs/ca-certificates.crt",
```
Comment 1 Miro Hrončok 2025-07-16 14:46:03 UTC 
Oh.

pip now bundles certifi as well as truststore -- we have only fixed this in certifi.

Anyway, is /etc/ssl/cert.pem going away as well?

If so, we should adjust this list upstream:

https://github.com/sethmlarson/truststore/blob/v0.10.1/src/truststore/_openssl.py#L8
Comment 2 Miro Hrončok 2025-07-17 07:52:05 UTC 
Upstream PR: https://github.com/sethmlarson/truststore/pull/183
Comment 3 Miro Hrončok 2025-07-22 09:48:41 UTC 
Fedora PR: https://src.fedoraproject.org/rpms/python-pip/pull-request/158
Comment 4 Fedora Update System 2025-07-22 13:29:04 UTC 
FEDORA-2025-4c6f97005b (python-pip-25.1.1-13.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-4c6f97005b
Comment 5 Fedora Update System 2025-07-22 14:19:13 UTC 
FEDORA-2025-4c6f97005b (python-pip-25.1.1-13.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.