certifi 2026.2.25: where, contents

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify pkg:pypi/certifi@2026.2.25
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:pypi/certifi@2026.2.25
Constraints:
  - executionContext: node
Required runtime conditions:
  - ecosystem: npm
  - language: javascript
  - moduleSystem: cjs
  - packageManager: npm@10.9.8
  - runtime: node@22.23.2

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:2bfa8c3dcbd8ce2f9a7cd370c463eb4efcb283bbc812f5a9b253d6da981e98fd","contract":["certifi.where returns an existing file path pointing to the Mozilla CA certificate bundle containing PEM certificates","certifi.contents returns the text content of the CA bundle containing PEM formatted root certificates"],"goal":"verify pkg:pypi/certifi@2026.2.25","kind":"HOW","packages":["pkg:pypi/certifi@2026.2.25"],"schemaVersion":1,"symbols":["certifi.where","certifi.contents"]},"contractCommand":["python","test/contract.py"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"pypi","language":"python","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"pip","runtime":"python","schemaVersion":1},"license":"MIT-0","packages":["pkg:pypi/certifi@2026.2.25"],"schemaVersion":1,"symbols":["certifi.where","certifi.contents"],"verifierAdapter":"python@1"}

certifi==2026.2.25

"""Sample demonstrating certificate authority bundle path resolution and content retrieval with certifi."""

import os
from typing import Tuple
import certifi


def get_ca_bundle_path() -> str:
    """Return the filesystem path to the installed CA bundle."""
    return certifi.where()


def get_ca_bundle_contents() -> str:
    """Return the text content of the CA bundle."""
    return certifi.contents()


def inspect_ca_bundle() -> Tuple[str, bool, int]:
    """Inspect CA bundle path, existence, and text content length."""
    bundle_path = certifi.where()
    exists = os.path.isfile(bundle_path)
    contents = certifi.contents()
    return bundle_path, exists, len(contents)

{
  "schemaVersion": 1,
  "goal": "verify pkg:pypi/certifi@2026.2.25",
  "kind": "HOW",
  "packages": [
    "pkg:pypi/certifi@2026.2.25"
  ],
  "constraints": {
    "executionContext": "node"
  },
  "runtimeConditions": {
    "ecosystem": "npm",
    "language": "javascript",
    "moduleSystem": "cjs",
    "packageManager": "npm@10.9.8",
    "runtime": "node@22.23.2"
  }
}

"""Contract verification test for certifi CA bundle resolution and contents."""

import os
import sys

# Ensure project root is on sys.path for local module imports
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))

import certifi
from sample import (
    get_ca_bundle_contents,
    get_ca_bundle_path,
    inspect_ca_bundle,
)


def test_where_returns_valid_pem_file():
    """Assertion 1: certifi.where returns an existing file path pointing to the Mozilla CA certificate bundle containing PEM certificates."""
    bundle_path = get_ca_bundle_path()
    assert isinstance(bundle_path, str)
    assert len(bundle_path) > 0
    assert os.path.exists(bundle_path), f"Bundle path does not exist: {bundle_path}"
    assert os.path.isfile(bundle_path), f"Bundle path is not a regular file: {bundle_path}"

    with open(bundle_path, "r", encoding="utf-8", errors="replace") as f:
        file_content = f.read()

    assert "-----BEGIN CERTIFICATE-----" in file_content
    assert "-----END CERTIFICATE-----" in file_content


def test_contents_returns_ca_bundle_text():
    """Assertion 2: certifi.contents returns the text content of the CA bundle containing PEM formatted root certificates."""
    contents = get_ca_bundle_contents()
    assert isinstance(contents, str)
    assert len(contents) > 0
    assert "-----BEGIN CERTIFICATE-----" in contents
    assert "-----END CERTIFICATE-----" in contents

    bundle_path, exists, content_len = inspect_ca_bundle()
    assert exists is True
    assert content_len == len(contents)


def main():
    test_where_returns_valid_pem_file()
    test_contents_returns_ca_bundle_text()
    print("All contract assertions passed successfully.")


if __name__ == "__main__":
    main()