pip install throws SSL Certificate Error

pip install fails with "connection error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed

If you're behind a firewall or require a proxy, tunnelled or one which otherwise may strip the certificate you may need to provide this parameters to pip or pip.conf:

trusted-host

With the cli:

pip install --trusted-host pypi.org --trusted-host pypi.python.org --trusted-host files.pythonhosted.org pip <package>

and for easy access to pip, add this to pip.conf:

[global]
trusted-host = pypi.python.org
               pypi.org
               files.pythonhosted.org