wassima

library2.1.4pypypi✓ verified 23d ago

wassima is a Python library designed to simplify access to your operating system's root certificates, aiming to provide similar ease of use as `certifi` but leveraging the system's native trust store. It is currently at version 2.0.6 and maintains an active release cadence, primarily for bug fixes and updates to its embedded CA bundle.

auth-security serialization

pip install wassima

github ↗package ↗docs ↗changelog ↗

INSTALL

IMPORT

SIG · WASSIMA

wassima

auth-securitypythonv2.1.4

Install

1.6s avg

Import

57ms

Disk

16MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v2.1.4 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.058s · 18.3MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 1.6s · import 0.056s · 19MB

16MB installed

● package 16MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

create_default_ssl_context

✓ from wassima import create_default_ssl_context

✗ from wassima import get_certs_paths

root_pem_certificates

✓ from wassima import root_pem_certificates

✗ from wassima import get_certs_paths

generate_ca_bundle

✓ from wassima import generate_ca_bundle

✗ from wassima import get_certs_paths

This quickstart demonstrates how to obtain an `ssl.SSLContext` object configured with your operating system's root certificates using `wassima.trust_manager()`. This context can then be passed to HTTP clients for secure communication.

import ssl from wassima import trust_manager # Get an SSLContext configured with system trust store # This context can be used with HTTP clients like `requests` or `httpx`. context: ssl.SSLContext = trust_manager() print(f"SSLContext type: {type(context)}") print(f"Context protocol: {context.protocol}") # You can optionally inspect loaded certificates (example): # for cert in context.get_ca_certs(): # print(f" Loaded CA: {cert.subject.rfc4514_string()}") # Example usage with `requests` (if installed): # import requests # try: # response = requests.get("https://example.com", verify=context) # print(f"Request to example.com successful: {response.status_code}") # except Exception as e: # print(f"Request failed: {e}")

Debug

Known issues

breakingVersion 2.0.0 removed the native Rust extension, the `RUSTLS_LOADED` constant, and the `python -m wassima` debugging utility. Code relying on these features will break. The library is now pure Python.

fix

Update imports and remove references to `RUSTLS_LOADED`. For debugging, inspect `wassima`'s internal logic directly. Be aware of potential performance changes due to the shift to pure Python.

affects: >=2.0.0

breakingThe optional dependency on `certifi` was removed in `wassima` 2.0.0. While `wassima` now includes its own embedded CCADB bundle as a fallback, users who previously relied on `certifi`'s specific trust behavior might experience different trust store resolution.

fix

Review your application's trust requirements. `wassima` will now use its internal CCADB bundle if the system trust store cannot be found or loaded, which might have different implications than `certifi`'s bundle.

affects: >=2.0.0

gotcha`wassima` might encounter OS-specific issues or permissions errors when attempting to discover and load system trust stores. Past versions have seen fixes for PermissionError on Linux, deep scan slowness on FreeBSD, and MacOS truststore inconsistencies.

fix

Ensure your `wassima` installation is up-to-date (2.0.6 or newer). If issues persist, verify file permissions for system certificate directories or consult `wassima`'s GitHub issues for OS-specific troubleshooting.

affects: <2.0.6

gotchaIf `wassima` cannot find or load the official system trust store, it will silently fall back to an embedded CCADB bundle. This might lead to unexpected trust decisions if the embedded bundle's policy differs from the system's intended policy.

fix

Monitor logs or debug `wassima`'s internal certificate loading process if you suspect an incorrect trust store is being used. Ensure your system's trust store is correctly configured and accessible to the Python process running `wassima`.

affects: >=2.0.0

Upgrade

Version history

2.1.4latest on PyPI · released Aug 27, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

45 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/jawah/wassima ↗

packagehttps://pypi.org/project/wassima/ ↗

docshttps://wassima.readthedocs.io ↗

changeloghttps://github.com/jawah/wassima/blob/main/CHANGELOG.md ↗