Fedora Account System
Red Hat Associate
Red Hat Customer
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, which is taking effect during the fedora rawhide mass rebuild (starting 23th of July), we would like you to add `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` to the following list in the source code as the other items will not be present on the system. ``` ./python-pip-25.1.1-build/pip-25.1.1/src/pip/_vendor/truststore/_openssl.py:10: "/etc/ssl/cert.pem", ./python-pip-25.1.1-build/pip-25.1.1/src/pip/_vendor/truststore/_openssl.py:12: "/etc/pki/tls/cert.pem", ./python-pip-25.1.1-build/pip-25.1.1/src/pip/_vendor/truststore/_openssl.py:14: "/etc/ssl/certs/ca-certificates.crt", ```
Oh. pip now bundles certifi as well as truststore -- we have only fixed this in certifi. Anyway, is /etc/ssl/cert.pem going away as well? If so, we should adjust this list upstream: https://github.com/sethmlarson/truststore/blob/v0.10.1/src/truststore/_openssl.py#L8
Upstream PR: https://github.com/sethmlarson/truststore/pull/183
Fedora PR: https://src.fedoraproject.org/rpms/python-pip/pull-request/158
FEDORA-2025-4c6f97005b (python-pip-25.1.1-13.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2025-4c6f97005b
FEDORA-2025-4c6f97005b (python-pip-25.1.1-13.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.