Skip to content

[ZT] Clarify Python cert install #18062

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Nov 8, 2024
Merged

[ZT] Clarify Python cert install #18062

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
0162490
Improve python Mac command
maxvp Nov 7, 2024
9c734cb
Improve Windows procedure
maxvp Nov 7, 2024
6c5e116
Add environment variables
maxvp Nov 7, 2024
f142235
Add optional path step
maxvp Nov 7, 2024
b26fe6c
Add venv note
maxvp Nov 7, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 27 additions & 25 deletions ...e/connections/connect-devices/warp/user-side-certificates/manual-deployment.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -305,49 +305,51 @@ For information on installing a Cloudflare certificate for organizations, refer

### Python

Depending on which version of Python you have installed and your configuration, you may need to use either the `python` or `python3` command. If you use [virtual environments](https://docs.python.org/3/library/venv.html), you will need to repeat the following steps within each virtual environment.

#### Python on Windows

The command to install the certificate with Python on Windows automatically includes `pip` and `certifi` (the default certificate bundle for certificate validation).

1. [Download a Cloudflare certificate](#download-the-cloudflare-root-certificate) in `.crt` format.
2. Update the bundle to include the Cloudflare certificate:
2. In a PowerShell terminal, install the `certifi` package:
```powershell
gc "$env:USERPROFILE\Downloads\certificate.crt" | ac C:\Python37\Lib\site-packages\pip\_vendor\certifi\cacert.pem
python -m pip install certifi
```

#### Python on Mac and Linux

1. In a terminal, install the `certifi` package:

```sh
pip install certifi
3. Identify the Python CA store:
```powershell
$CERT_PATH = python -c "import certifi; print(certifi.where())"
```

2. Identify the CA store:

```sh
python -m certifi
4. Update the bundle to include the Cloudflare certificate:
```powershell
gc "$env:USERPROFILE\Downloads\certificate.crt" | ac $CERT_PATH
```

```sh output
~/Library/Python/3.7/lib/python/site-packages/certifi/cert.pem
5. (Optional) Configure your system variables to point to the CA store by adding them to PowerShell's configuration file:
```powershell
[System.Environment]::SetEnvironmentVariable('CERT_PATH', $CERT_PATH, 'Machine')
[System.Environment]::SetEnvironmentVariable('SSL_CERT_FILE', $CERT_PATH, 'Machine')
[System.Environment]::SetEnvironmentVariable('REQUESTS_CA_BUNDLE', $CERT_PATH, 'Machine')
```
6. Restart your terminal.

3. [Download a Cloudflare certificate](#download-the-cloudflare-root-certificate) in `.pem` format.

4. Append the Cloudflare certificate to this CA store by running:
#### Python on Mac and Linux

1. [Download a Cloudflare certificate](#download-the-cloudflare-root-certificate) in `.pem` format.
2. In a terminal, install the `certifi` package:
```sh
python -m pip install certifi
```
3. Append the Cloudflare certificate to this CA store by running:
```sh
echo | cat - certificate.pem >> $(python -m certifi)
```

5. If needed, configure system variables to point to this CA store:

4. (Optional) Configure your system variables to point to the CA store by adding them to your shell's configuration file (such as `~/.zshrc` or `~/.bash_profile`). For example:
```sh
export CERT_PATH=$(python -m certifi)
echo 'export CERT_PATH=$(python -c "import certifi; print(certifi.where())")
export SSL_CERT_FILE=${CERT_PATH}
export REQUESTS_CA_BUNDLE=${CERT_PATH}
export REQUESTS_CA_BUNDLE=${CERT_PATH}' >> ~/.zshrc
```
5. Restart your terminal.

### Git

Expand Down
Loading