Using ca_cert_file doesn't work

[stdkoehler]

Last version for which the following code worked is 0.9.2

import certifi
import primp
client = primp.Client(
            cookie_store=True,
            referer=True,
            follow_redirects=False,
            verify=True,
            ca_cert_file=certifi.where(),
            http2_only=True,
        )
client.request(
                "GET",
                "https://www.google.de"
            )

for all primp>=0.9.3 I receive:

---------------------------------------------------------------------------
RuntimeError                              Traceback (most recent call last)
Cell In[2], line 11
      2 import primp
      3 client = primp.Client(
      4             cookie_store=True,
      5             referer=True,
   (...)
      9             http2_only=True,
     10         )
---> 11 client.request(
     12                 "GET",
     13                 "https://www.google.de"
     14             )

RuntimeError: error sending request for url (https://www.google.de/): client error (Connect)

Caused by:
    0: client error (Connect)
    1: TLS handshake failed: cert verification failed - self signed certificate in certificate chain [CERTIFICATE_VERIFY_FAILED]
    2: [CERTIFICATE_VERIFY_FAILED]
    3: [CERTIFICATE_VERIFY_FAILED]

[deedy5]

certifi is the latest version?

[stdkoehler]

certifi was 2024.12.14, now I updated to 2025.4.26. The problem still persists (only tested for 0.15.0 with the new certifi)

[deedy5]

If you use a proxy, is there an error?

[stdkoehler]

Sorry, not sure how to do that. I'm in a coorporate network and we use self-signed certificates. Usually, this is taken care by pip-system-certs and certifi. I first tried to add the certifi's pem location to PRIMP_CA_BUNDLE which didn't work. I then tried to direcly add it as per given example. Both didn't work.
It does work however when I use 0.9.2 of primp

Other packages like requests work

[deedy5]

I'm redesigning the repository code.
After that it will be possible to solve your problem.
For now, use verify=False.

[stdkoehler]

Will do, thank you :)