I\'ve installed a self-signed root ca cert into debian\'s /usr/share/ca-certificates/local
and installed them with sudo dpkg-reconfigure ca-certificates>
My two cents:
Thanks to this other answer, which had me check on actual requests code, I figured out that you don't have to use the env variable but can just set the "verify" param in your request:
requests.get("https://whatever", verify="/my/path/to/cacert.crt", ...)
It is also documented, although I could only find the documentation after having made the discovery (and the pypi project points to a dead link for doc) :D