Truststore

Latest version: v0.10.1

Safety actively analyzes 722491 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 3

0.10.1

* Fixed the patching of Requests' globally-cached `ssl.SSLContext`
object to work automagically with ``truststore.inject_into_ssl()``
regardless of import-order.
* Speed up import times by skipping feature-checking for known Python
implementations (CPython and PyPy).

0.10.0

* Added support for macOS 10.13 and earlier using the `SecTrustEvaluate` API. Note that
this API doesn't return fine-grained errors like `SecTrustEvaluateWithError` (requires macOS 10.14+).
* Added `SSLContext.set_default_verify_paths()` method.
* Changed method for disabling hostname verification for macOS and Windows.
Previously would ignore hostname verification errors if `SSLContext.check_hostname` was `False`.
Now for both macOS and Windows the certificate verification policy is configured
to not check certificate hostname. This should have no effect on users.

0.9.2

* Fixed an issue where implementations supporting Python 3.10 but not the peer certificate chain APIs
would fail during the handshake instead of when importing the `truststore` module. The module
now raises an error immediately instead of on first handshake. This was added for the GraalPy
implementation specifically, but there may be others.

0.9.1

* Fixed an issue for CPython 3.13 where `ssl.SSLSocket` and `ssl.SSLObject` certificate
chain APIs would return different types.

0.9.0

* Added support for Python 3.13.
* Fixed loading additional certificates on macOS.
* Changed error message for Windows when peer offers no certificates
and verification is enabled. Previously was `IndexError`, now is `SSLCertVerificationError`.

0.8.0

* Added support for PyPy 3.10 and later.

Page 1 of 3

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.