fix SSL context with local path

[xavdid-stripe]

Why?

#1431 fixed a deprecation warning, but introduced a bug because we weren't creating the SSL context correctly. We have a path to a file, so we should use cafile. I mistakenly thought that kwarg was the actual contents of a file. This now lines up with how httpx treated the string we were passing before.

Reported in #1437.

What?

• use cafile kwarg instead of capath for ssl.create_default_context.

Testing

This script fails without the fix and passes with it:

import stripe

def main():
    stripe.default_http_client = stripe.HTTPXClient(allow_sync_methods=True)
    stripe.api_key = "sk_test_1234"
    print(stripe.Customer.list())
    
main()

See Also

• v11.4.0 SSL certificate verify failed with async http client #1437
• fix deprecation warning in httpx @ 0.28 #1431

[jar-stripe]

replaced "Fixes" with "Reported in" in the description, so we don't automatically close the issue.