Use truststore instead of certifi.

pyproject.toml

@@ -22,7 +22,7 @@ classifiers = [
     "Topic :: Internet :: WWW/HTTP",
 ]
 dependencies = [
-    "certifi",
+    "truststore",
 ]
 dynamic = ["version"]
 

src/ahttpx/_network.py

@@ -3,7 +3,7 @@
 import typing
 
 import trio
-import certifi
+import truststore
 
 from ._streams import Stream
 
@@ -87,8 +87,7 @@ def __init__(self, ssl_ctx: ssl.SSLContext | None = None):
         self._ssl_ctx = self.create_default_context() if ssl_ctx is None else ssl_ctx
 
     def create_default_context(self) -> ssl.SSLContext:
-        import certifi
-        return ssl.create_default_context(cafile=certifi.where())
+        return truststore.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
 
     async def connect(self, host: str, port: int) -> NetworkStream:
         """

src/httpx/_network.py

@@ -9,6 +9,8 @@
 import types
 import typing
 
+import truststore
+
 from ._streams import Stream
 
 
@@ -199,8 +201,7 @@ def __init__(self, ssl_ctx: ssl.SSLContext | None = None):
         self._ssl_ctx = self.create_default_context() if ssl_ctx is None else ssl_ctx
 
     def create_default_context(self) -> ssl.SSLContext:
-        import certifi
-        return ssl.create_default_context(cafile=certifi.where())
+        return truststore.SSLContext(ssl.PROTOCOL_TLS_CLIENT)
 
     def connect(self, host: str, port: int) -> NetworkStream:
         """