From 9e1bde98cfa199143f6ab9eb6d746cad4f3efe59 Mon Sep 17 00:00:00 2001
From: Peter Dragun <peter.dragun@espressif.com>
Date: Fri, 6 Mar 2026 15:44:20 +0100
Subject: [PATCH] fix(idf_tools.py): Print correct path to Install
 Certificates.command on macOS

Related to: https://github.com/espressif/esp-idf/issues/17787
---
 tools/idf_tools.py | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/tools/idf_tools.py b/tools/idf_tools.py
index 2e66545631c..52c8a3fe11d 100755
--- a/tools/idf_tools.py
+++ b/tools/idf_tools.py
@@ -183,10 +183,17 @@ def print_hints_on_download_error(err: str) -> None:
         info('Certificate issues are usually caused by an outdated certificate database on your computer.')
         info('Please check the documentation of your operating system for how to upgrade it.')
 
+        info('The following commands may help resolve this issue:')
         if sys.platform == 'darwin':
-            info('Running "./Install\\ Certificates.command" might be able to fix this issue.')
-
-        info(f'Running "{sys.executable} -m pip install --upgrade certifi" can also resolve this issue in some cases.')
+            # Python.org macOS installer puts Install Certificates.command in /Applications/Python X.Y/
+            app_certs = (
+                f'/Applications/Python {sys.version_info.major}.{sys.version_info.minor}/Install Certificates.command'
+            )
+            if os.path.isfile(app_certs):
+                info(f'\tRun: open "{app_certs}"  (or double-click it in Finder)')
+            else:
+                info('\tGo to Python installation location and execute: ./Install\\ Certificates.command')
+        info(f'\t{sys.executable} -m pip install --upgrade pip-system-certs certifi')
 
     # Certificate issue on Windows can be hidden under different errors which might be even translated,
     # e.g. "[WinError -2146881269] ASN1 valor de tag inválido encontrado"