Repair missing certifi CA bundle after updates
Cluster 29866 · gateway. Data as of
Nothing open on GitHub. Fix merged in #71010 on 24 Jul 2026. Check it covers your case.
The short answer
- Known?
- Yes. 3 related items grouped here, 1 issue already closed.
- Fix event
- A fix was merged to main in PR #71010. Check it covers your case. No release data is tracked.
- Tracker
- The maintainers' tracker marks this
resolved, deciding PR #71010. That is separate from the fix event. - Still open
- Nothing open on GitHub.
These members concern a problem where upgrading (e.g. via brew) leaves certifi's cacert.pem missing in the virtual environment, breaking SSL for multiple services. The proposed fixes involve detecting and restoring the missing CA bundle through existing repair infrastructure.
Open issues0
Open PRs0
Fixes on record
-
#71010 fix(ssl): detect and repair a missing certifi cacert.pem via existing venv-repair infra
files:
agent/ssl_guard.py,hermes_cli/_early_recovery.py,hermes_cli/doctor.py,hermes_cli/main.py,tests/hermes_cli/test_certifi_repair.py
1 PR closed without merging
From the close comments: done elsewhere 1
-
#68389 fix(update): repair missing certifi CA bundles after updates · done elsewhere →
#71010,#29866
Closed issues · 1
- Closed#29866brew upgrade breaks certifi (cacert.pem missing in venv) - Feishu/Telegram/WeChat all fail
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the LabAt a glance
- Subsystem
- gateway
- Merged PRs
- #71010
- Closed issues
- 1
- Attempts
- 1 PR closed without merging
- Fix link checked
- 24 Jul 2026