fix: Use default (system) certificates instead of Mozilla's root cert…

…ificates (#207)
influxdata · Mar 16, 2021 · e453f34 · e453f34
1 parent 8568097
commit e453f34
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,9 @@
 ### Features
 1. [#203](https://github.com/influxdata/influxdb-client-python/pull/203): Allow configuring client via TOML file.
 
+### Bug Fixes
+1. [#206](https://github.com/influxdata/influxdb-client-python/pull/207): Use default (system) certificates instead of Mozilla's root certificates (certifi.where())
+
 ### Documentation
 1. [#202](https://github.com/influxdata/influxdb-client-python/pull/202): Added an example how to use RxPY and sync batching
 

diff --git a/influxdb_client/rest.py b/influxdb_client/rest.py
@@ -18,7 +18,6 @@
 import re
 import ssl
 
-import certifi
 # python 2 and python 3 compatibility library
 import six
 from six.moves.urllib.parse import urlencode
@@ -85,8 +84,7 @@ def __init__(self, configuration, pools_size=4, maxsize=None, retries=False):
         if configuration.ssl_ca_cert:
             ca_certs = configuration.ssl_ca_cert
         else:
-            # if not set certificate file, use Mozilla's root certificates.
-            ca_certs = certifi.where()
+            ca_certs = None
 
         addition_pool_args = {}
         if configuration.assert_hostname is not None: