centersl/open-webui-docs
1
0
Fork 0
mirror of https://github.com/open-webui/docs.git synced 2026-03-27 13:28:37 +07:00
Code Issues Packages Projects Releases Wiki Activity

custom CA cert: use SSL_CERT_FILE

Browse Source 
REQUESTS_CA_BUNDLE is proprietary to requests.

SSL_CERT_FILE is part of [PEP 476](https://peps.python.org/pep-0476/#trust-database).

Requests supports SSL_CERT_FILE too: https://github.com/psf/requests/issues/2899
This commit is contained in:
Felix Hummel
2026-02-26 14:21:50 +01:00
committed by GitHub
parent 257ac5ec7f
commit c5cdb10154
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/tutorials/integrations/custom-ca.md
View File

@@ -16,9 +16,7 @@ To fix this, you will need to add the new cert into OI's truststore.
**For pre-built Docker image**: **For pre-built Docker image**:
1. Mount the certificate store from your host machine into the container by passing `--volume=/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro` as a command-line option to `docker run` 1. Mount the certificate store from your host machine into the container by passing `--volume=/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro` as a command-line option to `docker run`
2. Force python to use the system truststore by setting `REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt` (see https://docs.docker.com/reference/cli/docker/container/run/#env) 2. Force python to use the system truststore by setting `SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt` (see https://docs.docker.com/reference/cli/docker/container/run/#env)
If the environment variable `REQUESTS_CA_BUNDLE` does not work try to set `SSL_CERT_FILE` (as per the [httpx documentation](https://www.python-httpx.org/environment_variables/#ssl_cert_file)) instead with the same value.
Example `compose.yaml` from [@KizzyCode](https://github.com/open-webui/open-webui/issues/1398#issuecomment-2258463210): Example `compose.yaml` from [@KizzyCode](https://github.com/open-webui/open-webui/issues/1398#issuecomment-2258463210):
@@ -38,7 +36,7 @@ services:
- WEBUI_SESSION_COOKIE_SAME_SITE=strict - WEBUI_SESSION_COOKIE_SAME_SITE=strict
- WEBUI_SESSION_COOKIE_SECURE=True - WEBUI_SESSION_COOKIE_SECURE=True
- ENABLE_OLLAMA_API=False - ENABLE_OLLAMA_API=False
- REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt - SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
``` ```
The `ro` flag mounts the CA store as read-only and prevents accidental changes to your host CA store The `ro` flag mounts the CA store as read-only and prevents accidental changes to your host CA store