SSL Behaviour: Documentation vs Code discrepancy

[atatarn]

In the current docs there is this:
https://www.python-httpx.org/advanced/ssl/#working-with-ssl_cert_file-and-ssl_cert_dir

But the current master and httpx==0.28.1 have this: https://github.com/encode/httpx/blob/6c7af967734bafd011164f2a1653abc87905a62b/httpx/_config.py#L34C9-L35C81

    if verify is True:
        if trust_env and os.environ.get("SSL_CERT_FILE"):  # pragma: nocover
            ctx = ssl.create_default_context(cafile=os.environ["SSL_CERT_FILE"])

This is an issue, hopefully in the documentation. :)

[tobb10001]

I was stumbling over the same thing. Here's some more context:

Here's an example illustrating the behavior:

$ env -i ./.venv/bin/python -c "import httpx;print(httpx.get('https://httpbin.org'))"
...
httpx.ConnectError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1000)

$ env -i SSL_CERT_DIR=/etc/ssl/certs ./.venv/bin/python -c "import httpx;print(httpx.get('https://httpbin.org'))"
<Response [200 OK]>

(Behind an SSL termination proxy, Python 3.12.3, httpx 0.28.1)

---

Support for the environment variables was added in #307, including documentation. However, it was removed again in #3319, which also added the section pointed out by @atatarn.

[tomchristie]

This is correctly identified as a docs-issue and pull requests resolving it are welcome.

[tobb10001]

Here you go. 🙂

#3579