diff --git a/news/11082.feature.rst b/news/11082.feature.rst new file mode 100644 index 00000000000..105fc44d655 --- /dev/null +++ b/news/11082.feature.rst @@ -0,0 +1,3 @@ +Add support to use `truststore `_ as an alternative SSL certificate verification backend. The backend can be enabled on Python 3.10 and later by installing ``truststore`` into the environment, and adding the ``--use-feature=truststore`` flag to various pip commands. + +``truststore`` differs from the current default verification backend (provided by ``certifi``) in it uses the operating system’s trust store, which can be better controlled and augmented to better support non-standard certificates. Depending on feedback, pip may switch to this as the default certificate verification backend in the future.