# httpx.ConnectError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123) while connecting to 'https://internal.example.com'

- **ID:** `python/httpx-connecterror-ssl-certificate-verify-failed`
- **Domain:** python
- **Category:** network_error
- **Verification:** ai_generated
- **Fix Rate:** 80%

## Root Cause

The server's certificate chain is incomplete or the CA certificate is not installed locally.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| 3.x | active | — | — |

## Workarounds

1. **Install the missing CA certificate in the system trust store** (90% success)
   ```
   # On Linux: sudo cp ca.crt /usr/local/share/ca-certificates/ && sudo update-ca-certificates
# Then use httpx normally
   ```
2. **Provide the CA certificate file via the verify parameter** (85% success)
   ```
   httpx.get('https://internal.example.com', verify='/path/to/ca.crt')
   ```

## Dead Ends

- **Disabling SSL verification entirely** — Compromises security and does not address the missing CA. (70% fail)
- **Using a different SSL library** — The issue is with the certificate, not the library. (90% fail)