[Fix] Networking - allow using CA Bundles

[ishaan-jaff]

[Fix] Networking - allow using CA Bundles

This PR enhances the HTTP transport by allowing custom CA bundles (via certifi) for SSL verification in aiohttp, improving flexibility around SSL configuration.

Relevant issues

Pre-Submission checklist

Please complete all items before asking a LiteLLM maintainer to review your PR

• I have Added testing in the tests/litellm/ directory, Adding at least 1 test is a hard requirement - see details
• I have added a screenshot of my new test passing locally
• My PR passes all unit tests on make test-unit
• My PR's scope is as isolated as possible, it only solves 1 specific problem

Type

🐛 Bug Fix
✅ Test

Changes

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
litellm	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jun 20, 2025 0:02am

[Copilot]

Pull Request Overview

This PR enhances the HTTP transport by allowing custom CA bundles (via certifi) for SSL verification in aiohttp, improving flexibility around SSL configuration.

• Introduce _get_ssl_context to generate an SSL context using certifi’s CA bundle
• Add _get_ssl_connector_kwargs to centralize connector arguments based on ssl_context and ssl_verify
• Update _create_aiohttp_transport to use the new helper and add tests for SSL context behavior

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
tests/test_litellm/llms/custom_httpx/test_http_handler.py	Added unit and integration tests for _get_ssl_context
litellm/llms/custom_httpx/http_handler.py	Added _get_ssl_context and _get_ssl_connector_kwargs, updated transport creation to use them

Comments suppressed due to low confidence (2)

litellm/llms/custom_httpx/http_handler.py:537

• [nitpick] The new helper _get_ssl_connector_kwargs has multiple branches (custom ssl_context, ssl_verify=False, and default context) that are not covered by tests. Consider adding unit tests to validate each branch's behavior.

    def _get_ssl_connector_kwargs(

tests/test_litellm/llms/custom_httpx/test_http_handler.py:8

• The test references ssl.SSLContext and patches ssl.create_default_context but ssl is not imported, causing a NameError. Please add import ssl at the top of the test file.

import certifi