On 10.02.2013 00:13, Stephen Thorne wrote:
> Hello,
>
> One of my concerns with the recent pip dramas that have seen some excellent
> and timely action from catalog-sig and others, is that 'setuptools' is
> still widely distributed and used instead of distribute/pip.
Just as data point: distribute isn't using HTTPS either and the
distribute bootstrap site doesn't work with HTTPS:
http://python-distribute.org/
(https://python-distribute.org/ gives
"Error code: ssl_error_rx_record_too_long" in Firefox)
By redirecting the PyPI main and mirror sites from HTTP to HTTPS
you can "upgrade" older installations.
The only problem with this approach is that some Python installations
may not have OpenSSL available, so HTTPS doesn't work for them.
For those installations, the redirect would mean a complete cut-off
from PyPI.
An alternative approach would be to make people more aware of
the possibility to configure the PyPI site URL in a distutils
config file (even globally) and changing the URL from HTTP
to HTTPS there:
* distutils config files:
http://docs.python.org/2/install/index.html#inst-config-files
* setuptools:
http://peak.telecommunity.com/DevCenter/EasyInstall#configuration-files
http://peak.telecommunity.com/DevCenter/EasyInstall#command-line-options
(the option is called --index-url)
* distribute:
http://pythonhosted.org/distribute/easy_install.html#configuration-files
http://pythonhosted.org/distribute/easy_install.html#reference-manual
(the option is called --index-url)
--
Marc-Andre Lemburg
eGenix.com
Professional Python Services directly from the Source (#1, Feb 10 2013)
>>> Python Projects, Consulting and Support ... http://www.egenix.com/
>>> mxODBC.Zope/Plone.Database.Adapter ... http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/
________________________________________________________________________
::::: Try our mxODBC.Connect Python Database Interface for free ! ::::::
eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48
D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
Registered at Amtsgericht Duesseldorf: HRB 46611
http://www.egenix.com/company/contact/
_______________________________________________
Catalog-SIG mailing list
[email protected]
http://mail.python.org/mailman/listinfo/catalog-sig
