# httpx.ConnectError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not trusted (_ssl.c:1123) while connecting to 'https://untrusted.example.com'

- **ID:** `python/httpx-connecterror-ssl-certificate-verify-failed-untrusted`
- **Domain:** python
- **Category:** network_error
- **Verification:** ai_generated
- **Fix Rate:** 80%

## Root Cause

The server's certificate is signed by a CA that is not trusted by the system.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| 3.x | active | — | — |

## Workarounds

1. **Properly install the CA certificate in the system trust store** (90% success)
   ```
   # On Windows: import the .crt file into 'Trusted Root Certification Authorities'
# On macOS: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ca.crt
   ```
2. **Use the verify parameter with the CA certificate file** (85% success)
   ```
   httpx.get('https://untrusted.example.com', verify='/path/to/ca.crt')
   ```

## Dead Ends

- **Adding the certificate to the system trust store incorrectly** — Improper installation may still not make it trusted. (70% fail)
- **Using verify=False as a permanent solution** — Disables security and is not recommended for production. (60% fail)