trustifi: Google-trusted Root CA Certificates

trustifi provides Google-trusted Root CA certificates for TLS verification. It is intended as a drop-in replacement for certifi, using Google’s TLS-only trust model instead of Mozilla’s general-purpose root store.

It is currently used by RedC.

Installation

trustifi can be installed using pip:

pip install trustifi

Usage

To reference the installed certificate authority (CA) bundle, you can use the built-in function:

>>> import trustifi
>>> trustifi.where()
'/usr/local/lib/python3.7/site-packages/trustifi/cacert.pem'

Or from the command line:

python -m trustifi
/usr/local/lib/python3.7/site-packages/trustifi/cacert.pem