diff --git a/CHANGELOG.md b/CHANGELOG.md
index 12ec7a9..316319e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ and **Merged pull requests**. Critical items to know are:
 The versions coincide with releases on pip. Only major versions will be released as tags on Github.
 
 ## [0.0.x](https://github.com/oras-project/oras-py/tree/main) (0.0.x)
+ - TLS verify added to retry as well (0.1.27)
  - To make it available for more OCI registries, the value of config used when `manifest_config` is not specified in `client.push()` has been changed from a pure empty string to `{}` (0.1.26)
  - refactor tests using fixtures and rework pre-commit configuration (0.1.25)
  - eliminate the additional subdirectory creation while pulling an image to a custom output directory (0.1.24)
diff --git a/oras/provider.py b/oras/provider.py
index db0ac3a..16475ae 100644
--- a/oras/provider.py
+++ b/oras/provider.py
@@ -904,6 +904,7 @@ def do_request(
                 json=json,
                 headers=headers,
                 stream=stream,
+                verify=self._tls_verify,
             )
 
         # Fallback to using Authorization if already required
@@ -919,6 +920,7 @@ def do_request(
                 json=json,
                 headers=headers,
                 stream=stream,
+                verify=self._tls_verify,
             )
 
         return response
diff --git a/oras/version.py b/oras/version.py
index 8432dbd..b13c0b1 100644
--- a/oras/version.py
+++ b/oras/version.py
@@ -2,7 +2,7 @@
 __copyright__ = "Copyright The ORAS Authors."
 __license__ = "Apache-2.0"
 
-__version__ = "0.1.26"
+__version__ = "0.1.27"
 AUTHOR = "Vanessa Sochat"
 EMAIL = "vsoch@users.noreply.github.com"
 NAME = "oras"