mistral[patch]: set global ssl context (#30189)

libs/partners/mistralai/langchain_mistralai/chat_models.py

@@ -5,6 +5,7 @@
 import logging
 import os
 import re
+import ssl
 import uuid
 from operator import itemgetter
 from typing import (
@@ -24,6 +25,7 @@
     cast,
 )
 
+import certifi
 import httpx
 from httpx_sse import EventSource, aconnect_sse, connect_sse
 from langchain_core.callbacks import (
@@ -87,6 +89,11 @@
 TOOL_CALL_ID_PATTERN = re.compile(r"^[a-zA-Z0-9]{9}$")
 
 
+# This SSL context is equivelent to the default `verify=True`.
+# https://www.python-httpx.org/advanced/ssl/#configuring-client-instances
+global_ssl_context = ssl.create_default_context(cafile=certifi.where())
+
+
 def _create_retry_decorator(
     llm: ChatMistralAI,
     run_manager: Optional[
@@ -518,6 +525,7 @@ def validate_environment(self) -> Self:
                     "Authorization": f"Bearer {api_key_str}",
                 },
                 timeout=self.timeout,
+                verify=global_ssl_context,
             )
         # todo: handle retries and max_concurrency
         if not self.async_client:
@@ -529,6 +537,7 @@ def validate_environment(self) -> Self:
                     "Authorization": f"Bearer {api_key_str}",
                 },
                 timeout=self.timeout,
+                verify=global_ssl_context,
             )
 
         if self.temperature is not None and not 0 <= self.temperature <= 1: