Trace

Requirement → acceptance criteria → tasks → commits → pull requests → reviews, with each criterion's AI verdict and its verification on the latest build.

REQ-CLICK-01: Terminal output respects user configuration REQ-CLICK-02: Styled output degrades gracefully REQ-CLICK-03: Breaking changes are announced one minor release ahead REQ-HTTPX-01: TLS configuration has one obvious way REQ-HTTPX-02: URLs are encoded the way browsers encode them REQ-HTTPX-03: Secrets never appear in logs REQ-REQ-01: Anything that behaves like a file is accepted REQ-REQ-02: Public type hints describe what callers may pass REQ-REQ-03: Security-relevant code works under FIPS SUB-CLI-01: Command-line output library (click) meets the baseline SUB-HTTP-01: HTTP client libraries (requests, httpx) meet the baseline SYS-01: Third-party client libraries meet the platform dependency baseline

REQ-HTTPX-01 · v2 changed 2025-01-10

TLS is configured through verify (bool or ssl.SSLContext) only. Old string forms raise TypeError with a message that shows the replacement.

2 versions

v	Changed	Text	Why
1	2024-10-20	TLS is configured through verify (bool or ssl.SSLContext) only. Old string forms fail with a message that shows the replacement.	initial
2	2025-01-10	TLS is configured through verify (bool or ssl.SSLContext) only. Old string forms raise TypeError with a message that shows the replacement.	Error type tightened to TypeError to match Python conventions for a wrong argument type.

6 acceptance criteria

AC-HTTPX-101-1 not checked Re-verify requirement changed after merge

`verify` accepts `True`, `False` or an `ssl.SSLContext`, and the separate `ssl_context` parameter is removed.

TASK-HTTPX-1011 done

1805ee0d · PR #3394 Graceful upgrade path for 0.28. merged 2024-11-12
Reviews: Sofia Reyes (commented), Nina Kowalski (commented), Jamal Wright (approved)

AC-HTTPX-101-2 not checked Re-verify requirement changed after merge

Passing a string to `verify` raises an error that tells the user to use `ssl.create_default_context(cafile=...)` instead.

TASK-HTTPX-1012 done

ce7e14da · PR #3418 Error on verify as str. merged 2024-11-28
Reviews: Jamal Wright (approved)

AC-HTTPX-101-3 not checked Re-verify requirement changed after merge

Passing a string to `verify` raises `TypeError`.

TASK-HTTPX-1012 done

ce7e14da · PR #3418 Error on verify as str. merged 2024-11-28
Reviews: Jamal Wright (approved)

AC-HTTPX-101-4 not checked Re-verify requirement changed after merge

Importing httpx does not import the `ssl` module until a client actually needs it.

TASK-HTTPX-1014 done

2ea2286d · PR #3401 Import ssl on demand merged 2024-11-15
Reviews: Sofia Reyes (approved)

AC-HTTPX-101-5 not checked Re-verify requirement changed after merge

Using `verify=False` together with a client certificate (`cert=...`) still loads the certificate instead of ignoring it.

TASK-HTTPX-1013 done

89599a95 · PR #3442 Fix `verify=False`, `cert=...` case. merged 2024-12-04
Reviews: Jamal Wright (commented), Sofia Reyes (approved)

AC-HTTPX-101-6 not checked Re-verify

The documentation describes the `SSL_CERT_FILE` and `SSL_CERT_DIR` environment variables.

TASK-HTTPX-1015 done

652f051f · PR #3579 Documentation for SSL_CERT_FILE and SSL_CERT_DIR merged 2025-09-11
Reviews: Jamal Wright (approved)