Python developer urges packages to stop vendoring CA roots
The reply says distribution ca-certificates should be the default, with certifi used as a dependency only when necessary.
3 stories, newest first · one card per story
The reply says distribution ca-certificates should be the default, with certifi used as a dependency only when necessary.
22.04, 24.04 and 26.04 LTS also refresh ca-certificates to the Mozilla 2.90 authority bundle.
The forwarded note cites crypto/x509; the snippet does not name the removed certificate.
Today 2.2K readers · 2.7K views · 397 reads · all time 108K views