[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

STINNER Victor added the comment: If someone wants to use HTTPS on pythontest.net, please open a new issue. I don't recall who operates this service. Ask Ernest or Benjamin maybe? See https://github.com/python/pythontestdotnet/ project. https://pythontest.net/ has an invalid certificate.

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

Chris Angelico added the comment: That ducks the immediate issue, but I think the underlying issue would still be worth solving. How hard would it be to fetch this via an encrypted connection? It's still not 100% secure, but it would be resilient against some of these sorts of issues.

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

STINNER Victor added the comment: Yeah, it seems like Chris's Internet issues are gone ;-) -- resolution: -> out of date stage: -> resolved status: open -> closed ___ Python tracker

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

Emmanuel Arias added the comment: Hi, seems that this test doesn't occur ? or I'm very wrong? https://buildbot.python.org/all/#/builders/345 -- ___ Python tracker ___

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

Change by Emmanuel Arias : -- nosy: +eamanu ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

Chris Angelico added the comment: Has this been ongoing, or is it something that started in the past day and a half? I've had intermittent internet issues (and expect them to continue for another half day or thereabouts), so it's possible that this is actually a symptom of that. If that's

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

STINNER Victor added the comment: > It is also not safe to pass data downloaded from untrusted source to eval(). Would you mind to open a separated issue for that? Does someone want to propose a change to avoid eval() in the tests? -- ___ Python

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

Florian Bruhin added the comment: > It is also not safe to pass data downloaded from untrusted source to eval(). To make matters worse, it's downloaded via HTTP (rather than HTTPS) - so anyone who can mess with the network of a machine running the Python testsuite can run arbitrary code on

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

Serhiy Storchaka added the comment: It is also not safe to pass data downloaded from untrusted source to eval(). -- nosy: +serhiy.storchaka ___ Python tracker ___

[issue41940] AMD64 Debian root 3.x: tests fail because downloaded files start with:

New submission from STINNER Victor : Why do downloaded files start with https://buildbot.python.org/all/#/builders/345/builds/132 5 tests failed: test_codecmaps_cn test_codecmaps_jp test_codecmaps_kr test_codecmaps_tw test_hashlib I'm not sure if all failures are download issues.