feat(tls): verify against the OS trust store by default (closes #2004)#2005

Merged

danielmeppiel merged 33 commits into

microsoft:mainfrom

fangkangmi:feat/truststore-os-trust

Jul 12, 2026

Commits on Jul 5, 2026

feat(tls): verify against the OS trust store by default (#2004)

fangkangmi
authored and
danielmeppiel
committed
test(tls): integration test for verification against a custom CA (#2004)

fangkangmi
authored and
danielmeppiel
committed
fix(tls): don't let SSL_CERT_FILE suppress OS-trust injection (#2004)

authored and
danielmeppiel
committed
test(tls): drive the real frozen SSL runtime hook (#2004)

authored and
danielmeppiel
committed
docs(tls): tighten comments to repo style, fix stale SSL_CERT_FILE docstring

authored and
danielmeppiel
committed
docs(tls): address PR review feedback

fangkangmi
authored and
danielmeppiel
committed
fix(tls): fold OS trust follow-ups

danielmeppiel
and
WilliamK112
committed
docs(tls): complete trust environment guidance

danielmeppiel
and
Copilot
committed
docs(tls): link enterprise proxy TLS guidance

danielmeppiel
and
Copilot
committed
test(tls): isolate custom CA server SSL context

danielmeppiel
and
Copilot
committed
fix(tls): use OS store in frozen binary, add trust-source diagnostics, add child-env shim

danielmeppiel
and
Copilot
committed
fix(tls): propagate OS-store trust into runtime child processes

danielmeppiel
and
Copilot
committed
test(tls): independent e2e verification of B1/B2/H2 OS-trust remediation

danielmeppiel
and
Copilot
committed
Merge remote-tracking branch 'origin/main' into feat/truststore-os-trust
danielmeppiel
committed
fix(tls): deliver OS-trust to child venvs via install-time .pth bootstrap

danielmeppiel
and
Copilot
committed
test(tls): independent round-2 verification of foreign-venv OS-trust delivery

danielmeppiel
and
Copilot
committed
Merge remote-tracking branch 'origin/main' into feat/truststore-os-trust
danielmeppiel
committed
fix(tls): generate child .pth inline + package-data, harden child-trust delivery (#2005)

danielmeppiel
and
Copilot
committed
test(tls): independent round-3 verification of wheel-shipped OS-trust delivery

danielmeppiel
and
Copilot
committed
Merge remote-tracking branch 'origin/main' into feat/truststore-os-trust
danielmeppiel
committed
fix(tls): round-4 red-team LOW folds (certifi boundary, macOS py3.9 honesty, sdist guard)

danielmeppiel
and
Copilot
committed

Commits on Jul 9, 2026

Commits on Jul 12, 2026