Bug 2440334 - Review Request: python-truststore - Verify certificates using native system trust stores
Summary: Review Request: python-truststore - Verify certificates using native system t...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2440333
TreeView+ depends on / blocked
 
Reported: 2026-02-17 10:51 UTC by Benson Muite
Modified: 2026-02-17 10:51 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Benson Muite 2026-02-17 10:51:09 UTC
spec: https://fed500.fedorapeople.org/python-truststore.spec
srpm: https://fed500.fedorapeople.org/python-truststore-0.10.1-1.fc43.src.rpm

description:
Truststore is a library which exposes native system certificate stores
(ie "trust stores") through an ssl.SSLContext-like API. This means that
Python applications no longer need to rely on certifi as a root certificate
store. Native system certificate stores have many helpful features compared
to a static certificate bundle like certifi:

- Automatically update certificates as new CAs are created and removed
- Fetch missing intermediate certificates
- Check certificates against certificate revocation lists (CRLs) to avoid
  monster-in-the-middle (MITM) attacks
- Managed per-system rather than per-application by a operations/IT team
- PyPI is no longer a CA distribution channel

Right now truststore is a stand-alone library that can be installed globally in
your application to immediately take advantage of the benefits in Python 3.10+.
Truststore has also been integrated into pip 24.2+ as the default method for
verifying HTTPS certificates (with a fallback to certifi).

fas: fed500

Reproducible: Always


Note You need to log in before you can comment on or make changes to this bug.