GRPC_DEFAULT_SSL_ROOTS_FILE_PATH is indeed used to specify the PEM file to load SSL roots from (doc about this and more env vars can be find here <https://github.com/grpc/grpc/blob/master/doc/environment_variables.md>), so using it should be able to solve the issue too.
On Wednesday, February 14, 2024 at 8:47:39 AM UTC-8 Andrew Bay wrote: > The windows certificates are fine because the site opens fine in Edge. > > I found that gRPC uses > %PYTHON_HOME%\lib\site-packages\grpc_cython_credentials\roots.pem > for its certificates and if I add the one I needed to the bottom of that, > it made it work. > > I didn't try, but I think if I were to create a file and set that file's > path in GRPC_DEFAULT_SSL_ROOTS_FILE_PATH environment variable, that > would work too. > > On Tuesday, February 13, 2024 at 2:49:32 PM UTC-5 AJ Heller wrote: > >> I think this is a general Windows problem, nothing gRPC-specific you'd >> want to do here. A quick googling turned up this: >> https://learn.microsoft.com/en-us/skype-sdk/sdn/articles/installing-the-trusted-root-certificate >> >> On Monday, February 12, 2024 at 8:07:11 AM UTC-8 Andrew Bay wrote: >> >>> gRPC is used as a library inside of the databricks-connect library in >>> python. I cannot programmatically add a trust certificate for the server >>> it is connecting to. Where can I put my firewall's MitM certificate so I >>> do not get "CERTIFICATE_VERIFY_FAILED" errors on a windows machine? >> >> -- You received this message because you are subscribed to the Google Groups "grpc.io" group. To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/2e0b5822-df29-414f-b6da-318bcc155d0an%40googlegroups.com.