requests 2.32.0+ does not work with truststore library

[timo-reymann]

Problem

Starting with the release 2.32.0 of the requests library the truststore library always leads to an recursion error. I was able to reproduce this on different Windows, Linux (Ubuntu) and macOS machines.

The crulpit seems to be the added "preloaded ssl context", which does not work well with truststore injection. While it seems to use urllib3 under the hood, the patched SSLContext is not really used.

Fix

Proposed fix is to import the requests.adapter package and patch the context accordingly with a truststore patched SSLContext, finished up in #164

Related

• inject_into_ssl() not working in virtual environment (Windows 10) #155
• RecursionError when SSLContext imported from urllib3 #121

[timo-reymann]

@sethmlarson if you find some time I would appreciate if you could have a look 🙏

[timo-reymann]

@sethmlarson do you have a timeline when this will be released? :)

[sethmlarson]

I can work on a release, there's another change that should get distributed too.

[sethmlarson]

Published a release: https://pypi.org/project/truststore/0.10.1/

[timo-reymann]

Thanks a lot 😊