feat(urllib): try to use certifi.where() if request.ca_certs are not …

…provided
celery · Oct 8, 2024 · 0fd6ea1 · 0fd6ea1
1 parent e9e2be7
commit 0fd6ea1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/kombu/asynchronous/http/urllib3_client.py b/kombu/asynchronous/http/urllib3_client.py
@@ -128,6 +128,12 @@ def get_pool(self, request: Request):
         # CA Certificates
         if request.ca_certs is not None:
             _pool.connection_pool_kw['ca_certs'] = request.ca_certs
+        elif request.validate_cert is True:
+            try:
+                from certifi import where
+                _pool.connection_pool_kw['ca_certs'] = where()
+            except ImportError:
+                pass
 
         # Client Certificates
         if request.client_cert is not None: