diff --git a/src/wuttafarm/config.py b/src/wuttafarm/config.py
index 5828299..831698f 100644
--- a/src/wuttafarm/config.py
+++ b/src/wuttafarm/config.py
@@ -23,6 +23,8 @@
 WuttaFarm config extensions
 """
 
+import os
+
 from wuttjamaican.conf import WuttaConfigExtension
 
 
@@ -56,3 +58,8 @@ class WuttaFarmConfig(WuttaConfigExtension):
 
         # web app libcache
         # config.setdefault('wuttaweb.static_libcache.module', 'wuttafarm.web.static')
+
+        # maybe override cert validation for requests lib.
+        # nb. this is "global" and not "specific" to the farmos API requests!
+        if bundle := config.get(f"{config.appname}.requests_ca_bundle"):
+            os.environ.setdefault("REQUESTS_CA_BUNDLE", bundle)