NUT-A
diff --git a/‎docs/envvars.rst
Copy file name to clipboardExpand all lines: docs/envvars.rst
+4Lines changed: 4 additions & 0 deletions b/‎docs/envvars.rst
Copy file name to clipboardExpand all lines: docs/envvars.rst
+4Lines changed: 4 additions & 0 deletions
diff --git a/‎semantic_release/repository.py
Copy file name to clipboardExpand all lines: semantic_release/repository.py
+8-3Lines changed: 8 additions & 3 deletions b/‎semantic_release/repository.py
Copy file name to clipboardExpand all lines: semantic_release/repository.py
+8-3Lines changed: 8 additions & 3 deletions
diff --git a/‎tests/test_repository.py
Copy file name to clipboardExpand all lines: tests/test_repository.py
+21-1Lines changed: 21 additions & 1 deletion b/‎tests/test_repository.py
Copy file name to clipboardExpand all lines: tests/test_repository.py
+21-1Lines changed: 21 additions & 1 deletion
@@ -159,3 +159,7 @@ Custom repository (package index) URL to upload the package to.
 Takes precedence over :ref:`config-repository_url`
 
 See :ref:`automatic-dist-upload` for more about uploads to custom repositories.
+
+``TWINE_CERT``
+------------------
+Path to alternative CA bundle to use for SSL verification to repository. `See here for more information <https://twine.readthedocs.io/en/stable/>`
@@ -2,9 +2,7 @@
 """
 import logging
 import os
-from dataclasses import InitVar
-from dataclasses import asdict as dataclass_asdict
-from dataclasses import dataclass, field
+from dataclasses import InitVar, asdict as dataclass_asdict, dataclass, field
 from pathlib import Path
 from typing import Any, Dict, List, Optional
 
@@ -126,6 +124,13 @@ def _create_twine_settings(self, addon_kwargs: Dict[str, Any]) -> TwineSettings:
         pass them to Twine which then validates and loads the config.
         """
         params = {name: val for name, val in dataclass_asdict(self).items() if val}
+        cacert = os.environ.get("TWINE_CERT", None)
+        if cacert:
+            if not Path(cacert).is_file():
+                raise ImproperConfigurationError(
+                    f"TWINE_CERT env variable set, but file does not exist. Value: {cacert}"
+                )
+            params["cacert"] = cacert
         settings = TwineSettings(**params, **addon_kwargs)
 
         return settings
 
@@ -174,16 +174,19 @@ def test_repo_with_custom_repo_url_from_env(mock_handle_creds):
     {
         "REPOSITORY_USERNAME": "repo-username",
         "REPOSITORY_PASSWORD": "repo-password",
+        "TWINE_CERT": "cert_bundle.crt",
     },
 )
-def test_upload_with_custom_settings(mock_upload):
+@mock.patch("semantic_release.repository.Path.is_file", return_value=True)
+def test_upload_with_custom_settings(mock_is_file, mock_upload):
     repo = ArtifactRepo(Path("custom-dist"))
     repo.upload(
         noop=False, verbose=True, skip_existing=True, comment="distribution comment"
     )
     settings = mock_upload.call_args[1]["upload_settings"]
     assert isinstance(settings.auth, auth.Private)
     assert settings.comment == "distribution comment"
+    assert settings.cacert == "cert_bundle.crt"
     assert settings.username == "repo-username"
     assert settings.password == "repo-password"
     assert settings.repository_config["repository"] == "https://custom-repo"
@@ -192,6 +195,23 @@ def test_upload_with_custom_settings(mock_upload):
     assert mock_upload.called
 
 
+@mock.patch.dict(
+    "os.environ",
+    {
+        "TWINE_CERT": "cert_bundle.crt",
+    },
+)
+@mock.patch("semantic_release.repository.Path.is_file", return_value=False)
+@mock.patch.object(ArtifactRepo, "_handle_credentials_init")
+def test_upload_with_invalid_twine_cert(mock_is_file, mock_handle_creds):
+    repo = ArtifactRepo(Path("custom-dist"))
+
+    with pytest.raises(ImproperConfigurationError) as ex:
+        repo.upload(noop=False, verbose=True, skip_existing=True)
+
+    assert "TWINE_CERT env variable set, but file does not exist" in str(ex.value)
+
+
 @mock.patch.object(ArtifactRepo, "_handle_credentials_init")
 @mock.patch("semantic_release.repository.twine_upload")
 def test_upload_with_noop(mock_upload, mock_handle_creds):