Add certifi dependency and use it as default for SSL CA certificates

Co-authored-by: bradymholt <[email protected]>

Author: Copilot

pyproject.toml

@@ -14,6 +14,7 @@ urllib3 = ">= 1.25.3 < 3.0.0"
 python-dateutil = ">= 2.8.2"
 pydantic = ">= 2"
 typing-extensions = ">= 4.7.1"
+certifi = ">= 14.05.14"
 
 [tool.poetry.group.dev.dependencies]
 pytest = ">= 7.2.1"

requirements.txt

@@ -2,3 +2,4 @@ urllib3 >= 2.1.0, < 3.0.0
 python_dateutil >= 2.8.2
 pydantic >= 2
 typing-extensions >= 4.7.1
+certifi >= 14.05.14

templates/configuration.mustache

@@ -14,6 +14,7 @@ from typing import Any, ClassVar, Dict, List, Literal, Optional, TypedDict, Unio
 from typing_extensions import NotRequired, Self
 
 import urllib3
+import certifi
 
 {{#hasHttpSignatureMethods}}
 from {{packageName}}.signing import HttpSigningConfiguration
@@ -370,7 +371,7 @@ conf = {{{packageName}}}.Configuration(
            Set this to false to skip verifying SSL certificate when calling API
            from https server.
         """
-        self.ssl_ca_cert = ssl_ca_cert
+        self.ssl_ca_cert = ssl_ca_cert if ssl_ca_cert is not None else certifi.where()
 
         """Set this to verify the peer using PEM (str) or DER (bytes)
            certificate data.

ynab/configuration.py

@@ -22,6 +22,7 @@
 from typing_extensions import NotRequired, Self
 
 import urllib3
+import certifi
 
 
 JSON_SCHEMA_VALIDATION_KEYWORDS = {
@@ -256,7 +257,7 @@ def __init__(
            Set this to false to skip verifying SSL certificate when calling API
            from https server.
         """
-        self.ssl_ca_cert = ssl_ca_cert
+        self.ssl_ca_cert = ssl_ca_cert if ssl_ca_cert is not None else certifi.where()
 
         """Set this to verify the peer using PEM (str) or DER (bytes)
            certificate data.