certifi 2026.2.25: core.exit_cacert_ctx

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify certifi.core.exit_cacert_ctx cleanup in pkg:pypi/certifi@2026.2.25
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:pypi/certifi@2026.2.25
Demonstrate these symbols/APIs:
  - certifi.core.exit_cacert_ctx
Constraints:
  - executionContext: node
Required runtime conditions:
  - ecosystem: npm
  - language: javascript
  - moduleSystem: cjs
  - packageManager: npm@10.9.8
  - runtime: node@22.23.2

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:970a34cbe6eb96ac3b6fcdd7d42877b35fb977003decd7fd85631d4e4f09ed21","contract":["certifi.core.exit_cacert_ctx is a callable function in the certifi.core module","certifi.where initializes the CA bundle context allowing certifi.core.exit_cacert_ctx to release context manager resources without error","certifi.core.exit_cacert_ctx executes cleanly when called after resolving the CA certificate path"],"goal":"verify certifi.core.exit_cacert_ctx cleanup in pkg:pypi/certifi@2026.2.25","kind":"HOW","packages":["pkg:pypi/certifi@2026.2.25"],"schemaVersion":1,"symbols":["certifi.core.exit_cacert_ctx"]},"contractCommand":["python","test/contract.py"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"pypi","language":"python","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"pip","runtime":"python","schemaVersion":1},"license":"MIT-0","packages":["pkg:pypi/certifi@2026.2.25"],"schemaVersion":1,"symbols":["certifi.core.exit_cacert_ctx"],"verifierAdapter":"python@1"}

certifi==2026.2.25

"""Sample demonstrating CA certificate context cleanup with certifi.core.exit_cacert_ctx."""

import os
from typing import Tuple
import certifi
import certifi.core


def initialize_and_get_ca_path() -> str:
    """Initialize CA certificate path and context via certifi.where."""
    return certifi.where()


def cleanup_ca_certificate_context() -> None:
    """Invoke certifi.core.exit_cacert_ctx to release certificate context resources."""
    certifi.core.exit_cacert_ctx()


def inspect_ca_context_state() -> Tuple[str, bool, bool]:
    """Inspect the CA bundle path, its existence on disk, and whether context is initialized."""
    bundle_path = certifi.where()
    exists = os.path.isfile(bundle_path)
    ctx_initialized = certifi.core._CACERT_CTX is not None
    return bundle_path, exists, ctx_initialized

{
  "schemaVersion": 1,
  "goal": "verify certifi.core.exit_cacert_ctx cleanup in pkg:pypi/certifi@2026.2.25",
  "kind": "HOW",
  "packages": [
    "pkg:pypi/certifi@2026.2.25"
  ],
  "symbols": [
    "certifi.core.exit_cacert_ctx"
  ],
  "constraints": {
    "executionContext": "node"
  },
  "runtimeConditions": {
    "ecosystem": "npm",
    "language": "javascript",
    "moduleSystem": "cjs",
    "packageManager": "npm@10.9.8",
    "runtime": "node@22.23.2"
  }
}

"""Contract verification test for certifi.core.exit_cacert_ctx cleanup functionality."""

import os
import sys

# Ensure project root is on sys.path for local imports
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))

import certifi
import certifi.core
from sample import (
    cleanup_ca_certificate_context,
    initialize_and_get_ca_path,
    inspect_ca_context_state,
)


def test_exit_cacert_ctx_is_callable():
    """Assertion 1: certifi.core.exit_cacert_ctx is a callable function in the certifi.core module."""
    assert hasattr(certifi.core, "exit_cacert_ctx"), "certifi.core must define exit_cacert_ctx"
    assert callable(certifi.core.exit_cacert_ctx), "certifi.core.exit_cacert_ctx must be callable"


def test_where_initializes_context_and_exit_releases():
    """Assertion 2: certifi.where initializes the CA bundle context allowing certifi.core.exit_cacert_ctx to release context manager resources without error."""
    bundle_path, exists, ctx_initialized = inspect_ca_context_state()
    assert isinstance(bundle_path, str) and len(bundle_path) > 0, "Bundle path must be a non-empty string"
    assert exists is True, f"CA bundle path must exist on disk: {bundle_path}"
    assert ctx_initialized is True, "CA context manager must be initialized after certifi.where"

    # exit_cacert_ctx should execute cleanly
    cleanup_ca_certificate_context()


def test_exit_cacert_ctx_clean_execution():
    """Assertion 3: certifi.core.exit_cacert_ctx executes cleanly when called after resolving the CA certificate path."""
    path = initialize_and_get_ca_path()
    assert os.path.exists(path), f"Resolved CA bundle path does not exist: {path}"
    # Verify exit_cacert_ctx returns None and raises no unexpected exception
    result = certifi.core.exit_cacert_ctx()
    assert result is None, "exit_cacert_ctx should return None"


def main():
    test_exit_cacert_ctx_is_callable()
    test_where_initializes_context_and_exit_releases()
    test_exit_cacert_ctx_clean_execution()
    print("All contract assertions passed successfully.")


if __name__ == "__main__":
    main()