From 6cfbc1071fd88ed94776aa6f81f1582cda7fa5ab Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mike=20F=C3=A4hrmann?= <mike_faehrmann@web.de>
Date: Sat, 1 Jun 2024 16:02:18 +0200
Subject: [PATCH] workaround for requests 2.32.3 (#5665)

manually call 'load_default_certs()' for SSLContexts
in custom HTTPAdapter instances
---
 gallery_dl/extractor/common.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/gallery_dl/extractor/common.py b/gallery_dl/extractor/common.py
index d80dea2a..87712617 100644
--- a/gallery_dl/extractor/common.py
+++ b/gallery_dl/extractor/common.py
@@ -837,6 +837,9 @@ def _build_requests_adapter(ssl_options, ssl_ciphers, source_address):
     if ssl_options or ssl_ciphers:
         ssl_context = urllib3.connection.create_urllib3_context(
             options=ssl_options or None, ciphers=ssl_ciphers)
+        if requests.__version__ > "2.31":
+            # https://github.com/psf/requests/pull/6731
+            ssl_context.load_default_certs()
         ssl_context.check_hostname = False
     else:
         ssl_context = None