From: Cory Benfield <lukasaoz@gmail.com>
Date: Thu, 4 Sep 2014 18:40:15 +0000 (+0100)
Subject: Remove hard certifi dependency and document.
X-Git-Tag: v2.4.1~3^2~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=a77054f90fd3947db03838d3f244ee802c388314;p=services%2Fpython-requests.git

Remove hard certifi dependency and document.
---

diff --git a/docs/user/advanced.rst b/docs/user/advanced.rst
index 0de6b1b..d14b355 100644
--- a/docs/user/advanced.rst
+++ b/docs/user/advanced.rst
@@ -741,3 +741,20 @@ coffee.
     r = requests.get('https://github.com', timeout=None)
 
 .. _`connect()`: http://linux.die.net/man/2/connect
+
+CA Certificates
+---------------
+
+By default Requests bundles a set of root CAs that it trusts, sourced from the
+Mozilla trust store. However, these are only updated once for each Requests
+version. This means that if you pin a Requests version your certificates can
+become extremely out of date.
+
+From Requests version 2.4.0 onwards, Requests will attempt to use certificates
+from `certifi`_ if it is present on the system. This allows for users to update
+their trusted certificates without having to change the code that runs on their
+system.
+
+For the sake of security we recommend upgrading certifi frequently!
+
+.. _certifi: http://certifi.io/
diff --git a/setup.py b/setup.py
index 9540a47..b790ec7 100755
--- a/setup.py
+++ b/setup.py
@@ -25,7 +25,7 @@ packages = [
     'requests.packages.urllib3.packages.ssl_match_hostname',
 ]
 
-requires = ['certifi']
+requires = []
 
 with open('README.rst') as f:
     readme = f.read()