remove trusted-certs, make ca_certs optional

Author: maxbelanger

dropbox/dropbox_client.py

@@ -181,8 +181,8 @@ def __init__(self,
             Not required if PKCE was used to authorize the token
         :param list scope: list of scopes to request on refresh.  If left blank,
             refresh will request all available scopes for application
-        :param str ca_certs: path to CA certificate. If left blank, default certificate location \
-            will be used
+        :param str ca_certs: if specified, a path to a file of concatenated CA certificates in PEM
+            format; has the same meaning as when using :meth:`ssl.SSLContext.wrap_socket`.
         """
 
         if not (oauth2_access_token or oauth2_refresh_token or (app_key and app_secret)):

dropbox/session.py

@@ -1,4 +1,3 @@
-import pkg_resources
 import os
 import ssl
 
@@ -32,21 +31,14 @@
 # This is the default longest time we'll block on receiving data from the server
 DEFAULT_TIMEOUT = 100
 
-try:
-    _TRUSTED_CERT_FILE = pkg_resources.resource_filename(__name__, 'trusted-certs.crt')
-except NotImplementedError:  # Package is used inside python archive
-    _TRUSTED_CERT_FILE = None
-
 
 # TODO(kelkabany): We probably only want to instantiate this once so that even
 # if multiple Dropbox objects are instantiated, they all share the same pool.
 class _SSLAdapter(HTTPAdapter):
     _ca_certs = None
 
     def __init__(self, *args, **kwargs):
-        self._ca_certs = kwargs.pop("ca_certs", None) or _TRUSTED_CERT_FILE
-        if not self._ca_certs:
-            raise AttributeError("CA certificate not set")
+        self._ca_certs = kwargs.pop("ca_certs", None)
         super(_SSLAdapter, self).__init__(*args, **kwargs)
 
     def init_poolmanager(self, connections, maxsize, block=False, **_):