fix: Use default (system) certificates instead of Mozilla's root certificates (influxdata#207)

borlaugen · web-flow · commit e453f342e1e0 · 2021-03-16T09:16:24.000+01:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,9 @@
 ### Features
 1. [#203](https://github.com/influxdata/influxdb-client-python/pull/203): Allow configuring client via TOML file.
 
+### Bug Fixes
+1. [#206](https://github.com/influxdata/influxdb-client-python/pull/207): Use default (system) certificates instead of Mozilla's root certificates (certifi.where())
+
 ### Documentation
 1. [#202](https://github.com/influxdata/influxdb-client-python/pull/202): Added an example how to use RxPY and sync batching
 
diff --git a/influxdb_client/rest.py b/influxdb_client/rest.py
@@ -18,7 +18,6 @@
 import re
 import ssl
 
-import certifi
 # python 2 and python 3 compatibility library
 import six
 from six.moves.urllib.parse import urlencode
@@ -85,8 +84,7 @@ def __init__(self, configuration, pools_size=4, maxsize=None, retries=False):
         if configuration.ssl_ca_cert:
             ca_certs = configuration.ssl_ca_cert
         else:
-            # if not set certificate file, use Mozilla's root certificates.
-            ca_certs = certifi.where()
+            ca_certs = None
 
         addition_pool_args = {}
         if configuration.assert_hostname is not None:
