Skip to content

Releases

certifi 2026.10.23.post1 (Python 2.7)

certifi 2026.10.23.post1 (Python 2.7) Latest
Latest

Choose a tag to compare

View all tags
@icanhasmath icanhasmath released this 26 Oct 18:04
2026.10.23.post1
ba44cc1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ActiveState's Python 2.7-compatible build of upstream certifi 2026.10.23. It supersedes 2026.10.19.post1.

  • CA bundle: cacert.pem is unchanged from upstream. Compared with 2026.10.19, it also removes emSign Root CA - C1 and emSign ECC Root CA - C3, leaving 118 roots. The compromised emSign ECC Root CA - G3 (GHSA-6q48-6c7w-9gw2, critical) was already removed in 2026.10.19.post1. TrustCor (CVE-2022-23491), E-Tugra (CVE-2023-37920) and GLOBALTRUST (CVE-2024-39689) remain absent.
  • Python 2.7 support: the same changes as 2026.10.19.post1, cherry-picked unchanged. Annotations become type comments, and a pre-3.7 fallback locates cacert.pem and reads it with io.open. The package has python_requires >=2.7 and a universal py2.py3 wheel.

Merged in #2 (ba44cc1).

Testing:

  • Unit tests and types: certifi/tests passes on Python 2.7.18 and 3.10, and mypy --strict is clean.
  • Python 2.7 install: the wheel built from the merge commit installs on Python 2.7, and live TLS 1.3 handshakes to pypi.org and github.com verify against the bundle.
  • Python 3.12: the wheel installs and works there too.

sha256

  • certifi-2026.10.23.post1.tar.gz: 65491343d8501a6bf1cdfc330f7f04c441dece71e620bb978b7005bfd7bd21f5
  • certifi-2026.10.23.post1-py2.py3-none-any.whl: 455b4e677b848c4e0133c32df3191e2d2c1c334c95709bf1c2dafdff7d7d2f7d
Assets 4
Loading

certifi 2026.10.19.post1 (Python 2.7)

certifi 2026.10.19.post1 (Python 2.7)

Choose a tag to compare

View all tags
@icanhasmath icanhasmath released this 21 Oct 21:51
2026.10.19.post1
87fbc73
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ActiveState's Python 2.7-compatible build of upstream certifi 2026.10.19, the current Mozilla CA bundle and the version vendored by pip 26.2.2.

  • The CA bundle (cacert.pem) is unchanged from upstream. It drops the distrusted TrustCor (CVE-2022-23491), E-Tugra (CVE-2023-37920) and GLOBALTRUST (CVE-2024-39689) roots that older Python 2.7 certifi builds still ship.
  • Python 2.7 support: type comments instead of annotations, plus a pre-3.7 fallback that finds cacert.pem next to __file__. It reads the bundle with io.open, which fixes certifi.contents(); that call raised TypeError on Python 2.7 in the earlier 2023.07.22 ActiveState build.
  • Packaging: python_requires >=2.7 and a universal py2.py3 wheel.

Merged in #1 (87fbc73). Tested on Python 2.7.18 and 3.10.

sha256:

  • certifi-2026.10.19.post1.tar.gz: a1f24d989566740e8c2cbd9efb5ba6f418890df6918239781f7687c89849d81b
  • certifi-2026.10.19.post1-py2.py3-none-any.whl: 4667fd8cb205b13e2c208449ee20cb04ef1b73dba242dacb42754a2582f81eb4
Loading