Groups > comp.lang.python.announce > #2808

Mac users, upgrade to pip 9.0.3 (due to TLS deprecation)

Path	csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail
From	Sumana Harihareswara <sh@changeset.nyc>
Newsgroups	comp.lang.python.announce
Subject	Mac users, upgrade to pip 9.0.3 (due to TLS deprecation)
Date	Mon, 2 Apr 2018 17:05:43 -0400
Lines	59
Approved	python-announce-list@python.org
Message-ID	<mailman.111.1522757677.3863.python-announce-list@python.org> (permalink)
References	<367db39f-8a0b-f86d-0f8f-0f3a298b7e9b@changeset.nyc>
Mime-Version	1.0
Content-Type	text/plain; charset=utf-8
Content-Transfer-Encoding	7bit
X-Trace	news.uni-berlin.de umpJqbjGEjX/Hzt0fgTuqwpUUW4XpAKnM9SOK0JJN9aQ==
Return-Path	<sh@changeset.nyc>
X-Original-To	python-announce-list@python.org
Delivered-To	python-announce-list@mail.python.org
X-Spam-Status	OK 0.000
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'url:pypi': 0.03; 'index': 0.03; 'portion': 0.03; 'url:org)': 0.03; 'psf': 0.06; 'pypi': 0.07; 'tries': 0.07; 'url-ip:192.30.253.112/32': 0.07; 'url- ip:192.30.253.113/32': 0.07; 'url-ip:192.30.253/24': 0.07; 'url:changeset': 0.07; 'url:github': 0.07; 'url:py': 0.07; 'versions,': 0.07; 'versions.': 0.07; 'context:': 0.09; 'deprecated': 0.09; 'notes:': 0.09; 'received:internal': 0.09; 'url:2017': 0.09; 'url:issues': 0.09; 'url-ip:192.30/16': 0.13; 'python': 0.15; 'macos': 0.16; 'march,': 0.16; 'ought': 0.16; 'received:10.202': 0.16; 'received:10.202.2': 0.16; 'received:166.84': 0.16; 'received:166.84.1': 0.16; 'received:166.84.1.89': 0.16; 'received:66.111': 0.16; 'received:66.111.4': 0.16; 'received:mailbackend.panix.com': 0.16; 'received:messagingengine.com': 0.16; 'received:panix.com': 0.16; 'subject:Mac': 0.16; 'subject:pip': 0.16; 'tls': 0.16; 'unavailable': 0.16; 'url:2018': 0.16; 'url:pip': 0.16; 'url:pypa': 0.16; 'url:warehouse': 0.16; '1.0': 0.18; '(for': 0.20; 'received:166': 0.20; 'url:status': 0.20; '(in': 0.21; 'versions': 0.21; 'error': 0.22; 'figure': 0.23; 'url:io': 0.24; 'header:User-Agent:1': 0.25; 'pip': 0.25; 'subject:users': 0.25; 'replacing': 0.27; 'running': 0.29; 'discussion': 0.31; 'anyone': 0.31; 'legacy': 0.33; 'subject:upgrade': 0.33; 'url- ip:151.101/16': 0.34; 'url-ip:151/8': 0.34; 'announcement': 0.34; 'url-ip:188.166.95.178/32': 0.34; 'url-ip:188.166.95/24': 0.34; 'url-ip:188.166/16': 0.34; 'list': 0.35; 'received:192.168.1': 0.35; 'late': 0.36; 'python.org': 0.36; 'subject:)': 0.36; 'thank': 0.36; 'url-ip:188/8': 0.36; 'received:192.168': 0.37; 'subject: (': 0.37; 'url:en': 0.37; 'file': 0.37; 'url:mailman': 0.37; 'received:192': 0.37; 'url-ip:192/8': 0.37; 'error.': 0.38; 'plan': 0.38; 'mailing': 0.39; 'url:python': 0.39; 'url:org': 0.39; 'doing': 0.40; 'subject:, ': 0.61; 'url:blogspot': 0.61; 'more': 0.62; 'info:': 0.62; 'final': 0.62; 'upgrading': 0.63; 'upgrade': 0.63; 'url-ip:185/8': 0.63; 'further': 0.65; 'our': 0.65; '30,': 0.67; 'latest': 0.70; '100%': 0.70; 'url-ip:lookup error': 0.75; 'curl': 0.84; 'deadline.': 0.84; 'url- ip:151.101.36/24': 0.84; 'url:03': 0.84; 'url:distutils-sig': 0.84; 'warehouse,': 0.84
X-ME-Sender	<xms:KJvCWosccA51cZFZux0dQXmjnmSfrZrjnnW3DNDas1e4q_sIVs9G3A>
Openpgp	preference=signencrypt
Autocrypt	addr=sh@changeset.nyc; keydata= xsFNBE5DPwoBEADDmyv+TzpjFCqpfC8PFnaL+8OWaOfSJWMTSjwzSG3Q8eSEnU2Mw/n3syAy BJcPLTlu/1u8k0XWf3uDT7jIcKmWPClRJBLj4Zw1vCIxCE7P5V7bNJNVr9Dg0gjwUst3JeJP 0adaiJZ7MvGgShKvZJbT7nuJAS0R/lx4rVLg/Uphr6DzVzyvsgEZLDIuPHDj23GopLULySMi KzLEBVoeYGA9VvKE2XjlIzcrpg78QSYXNJQRRsTSj8j0qTXeQKi/zLZTrtYkezT556sKKs/f xwSOa3IJcfLXxVwlEji8Vhi08eDKHvbUAdPaFJbNmixI9vzAhEJ8i1cwOr8EKk+WcorsIJ1J IYwk6e0BnScIbiRDdNY6Wa0twKGj8GYVS+IFiJ2ePVszmC+MX66iqWUi+MZnsSGCy1eiqAW3 6B3bedKYe5Ar+bmBJcihelUZQIlk2m7AWYeXft+bDLNE6UHFk7+gS61Iu8oO4Wqz8DuoNjYq tuj/BvQerJuFB44OYOgGyBqX2zx1RwXT/eVa+dqoW5nVlGABXeEiwpQVdvvAvGAGu8vrPSUg Mg1VxL78vu3GMGzokPc9esEAPhcfmn8FhL//mtm2kbVn8wZuA4eKLYxMPMZZNRcYaFYwsrip GJByILVodFRtAsAVzCMULxecH9Gg0xN7CUuZ49xPuVsCK5J84wARAQABzT5TdW1hbmEgSGFy aWhhcmVzd2FyYSAoQ2hhbmdlc2V0IENvbnN1bHRpbmcpIDxzaEBjaGFuZ2VzZXQubnljPsLB mAQTAQIAQgIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFCQ4NIlIWIQQWxkie4AxSSqQJ iuEkebIftX2vnAUCWkuWWAIZAQAKCRAkebIftX2vnNw4D/92QyGjA3bcly8SZm0UmGhLHBD1 9SV6eDBItfboc1fTgnvvWL4mZPvWhSpWMLkFxbfeIdTxgqqfsl1aj/fHzg7F/6wAWbCkQSaC 8P+3Z07uzCbDaRP80M1+pxmK40f6wqGeCi6f23be/cI0jFp2/NRj1tjTWXj1N8jx8viOvpsY quFC7NQLFPyzy+hEYy34LVEM/EuwvGz/+0Sncg/gxsHsOlAK36I+ekA/ddg7FVbsD2GuszeU 67LhRrMLKY0/JekcHNt3P75toGpvVjVTYMUsenOS6PwUQQkJ++LFfOsM09h+AuU24m0cRNP8 g6XRIVnWZdInRP1eQbrUx8jtFOc8/j8zcnP6yNn9pnpudHzFMyqNIW11NNE4WLSY1e4ebuQp kTVORE+XLVhweGRxb3hqzU4HDUv9r4E/hSyli7q/Q0UI/HU0huysHUjaZyGLqXkjNzxxEKA8 sACZ93rz0VvB3KERB0zL1EvB33i1TPksR4JS8EahSHbLrrFcsDKLUzMyF6aZflcl8EsM18To 6ylDUJmYEJTfxUJMH8S/vvUSlxIvpaycSRCFjaIRfc+iA/sYRYJNfhmS5ZAZajSeL7h9EhDj pFFwC6i3iZb9AWAwBXSvCQM+aYv8apMPqpW/3zpBoPTBfecrhkgO+O6UskcJ6Lnyu2PESstz CR8nyvGXb87BTQRXsPhCARAAsj2H7v6cD/e9wQIxQfsFnZRtx4htOS2a1L4gImxcpGSJ/+H7 y7yBsM3lFlFRpiSq65fCiSkwBKRCGo2fzvksx/zvDMkurjfo5DutkjuWA5awvV2MN/AfOYhO R1X7/6zzuNJLt5rLFWhwwBtd0metHklsXsjVIaUImZca8yX+n7WXvDeRxDdYi3vuRB/3fZPu YABV52+aLDNA34VreCEgByzJBe6oAEilXVkANhIDQUwU9NhIBWlXub9t1eNU9nVbWvVXRWfl Mb98WkR3Wthn/eEoWTaR0mla6Er8EdxhIgaJZ15WmpcGt/zoXIeU7quUS7UaVKQm4foFCj6H qGTkAE40Viwf1FceQUZGBgfDra6b3WbiEXtzplvU+2kCt4srvyCS5yqkYKBG86gSCn7ESlyB LR8kQxqxn5PryiqTgF4oGJHdgpXFWiJ28FoPoFjvEwaNBbF4qVl+WfXtyauIsz9FHWt2BlNk B9tEdslrbipCmCs9QRs+6HVFtKlEVsJtRgR6+JnMpWi7LvOvpu4B6iMGpcOmMqUUpw+wUXqn NKcgTFZlktpANP+WkWw5/HTA08FjUcrtuxBTTu6uu7E/CXFgSsjuDms1rihDNCtbO+GyRTF1 j1x1fO3IPZOHvvK8npM7kQB370owjID75/StgMqJjB9w3W5B40ogxI+2GZEAEQEAAcLBfAQY AQIAJgIbDBYhBBbGSJ7gDFJKpAmK4SR5sh+1fa+cBQJaS5YVBQkEn2nTAAoJECR5sh+1fa+c AckQALuHEEDf9ySkbW542thWz98ix4S9gkq+HcgzvpfzUjHGrXggXqUwlEsHvfZKiic3B4A0 nh6Y/S/k/nxHLkbwlf717Rg6Gg7XWZddP39M2peSigmp7LYjFLFVstS65paLcpJnzDgzmoyy nCaiHoEddcYgxu5wlB7UmUQ5WNLxQl2PRh2ZiRTC2idmilUNv2lDt1qx+oPZBmRkaSZmge8w NLGpQXMEf5BQIm3HXGpmKrRRD1c5NIxe09/7FmUJd2PyBNbnJiiD52qt6tIFgl2nqxz3Fsag ZeC3tWlQDgrx7ttojqqHVKJEzzlV/DSD5cRTNo7DgOfKTIalMBIdGwprT0ftSERdSMHwFw45 9bcVIdLk8mA5USROdVwnhuuGN+FLGm2uFpU6p4RqGa25RZhT5puqrBF6BSyzInZTr1xpG5Pj uF5lB0Uq150zwnrcHifAYOKLrRJRNt4oNh9NvKcLTFb3let3M5oVei7M7IGTDHAGaurGsnQN ZaV0f/MY3D34OL/ENiwb2Om643RKd8PAgMH5n3JvuROKiDE5hkKHZ/NeN4W4uKscIVOSLQ79 GzA5jPGu98lDR3JBu3XdJC2mTG74NB52Wlw/ZF1O3qIqC8y446kVFbqfP0OFCMBXLf5kCchF qi7wj/Rp3wGR0C9bW6TlEcpYg4WlHj0E681uvxKJ
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0
Content-Language	en-US
X-Mailman-Approved-At	Tue, 03 Apr 2018 08:14:36 -0400
X-BeenThere	python-announce-list@python.org
X-Mailman-Version	2.1.26
Precedence	list
List-Id	Announcement-only list for the Python programming language <python-announce-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-announce-list>, <mailto:python-announce-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-announce-list/>
List-Post	<mailto:python-announce-list@python.org>
List-Help	<mailto:python-announce-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-announce-list>, <mailto:python-announce-list-request@python.org?subject=subscribe>
X-Mailman-Original-Message-ID	<367db39f-8a0b-f86d-0f8f-0f3a298b7e9b@changeset.nyc>
Xref	csiph.com comp.lang.python.announce:2808

Show key headers only | View raw

Mac users who use pip and PyPI:

If you are running macOS/OS X version 10.12 or older, then you ought to
upgrade to the latest pip (9.0.3) to connect to the Python Package Index
securely:

    curl https://bootstrap.pypa.io/get-pip.py | python

and we recommend you do that by April 8th.

Pip 9.0.3 supports TLSv1.2 when running under system Python on macOS <
10.13. Official release notes: https://pip.pypa.io/en/stable/news/

Context:

As PSF blogged last year
https://pyfound.blogspot.com/2017/01/time-to-upgrade-your-python-tls-v12.html
, on June 30, 2018, Python.org sites are going to entirely stop
supporting TLS versions 1.0 and 1.1, because our CDN provider is
deprecating support for those versions.

We are launching the new PyPI (in beta at https://pypi.org) this month
and replacing the legacy PyPI (https://pypi.python.org). Here's the beta
announcement for the new PyPI:
https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html

Warehouse, the codebase for the new PyPI, does not support TLS 1.0 or 1.1.

As of late March, the Python Package Index has started doing brownouts
of the deprecated TLS versions. For some portion of each hour, anyone
attempting to access PyPI with TLSv1.0 or TLSv1.1 will get a 403
response with an informative error. We are ramping up the amount of time
the endpoint is down for the deprecated TLS versions, and plan to make
the endpoint 100% unavailable (for the deprecated TLS versions) on and
after April 8th, prior to the final deadline. That gives us a few months
where, someone tries to "pip install", we can give a good error message
-- once June 30th hits, it will just be an uninformative OpenSSL error.

More info:

* https://github.com/pypa/warehouse/issues/3293
* https://github.com/pypa/warehouse/issues/3411
* https://status.python.org/incidents/btjtz01lzp88

If you have problems accessing PyPI, upgrading pip, etc., please file an
issue at https://github.com/pypa/packaging-problems/issues/ and we'll
help figure it out.

Please publicize this. Further discussion on this can be found in the
distutils-sig mailing list
https://mail.python.org/mailman/listinfo/distutils-sig .

Thank you.

-- 
Sumana Harihareswara
Warehouse project manager
Changeset Consulting
https://changeset.nyc

Back to comp.lang.python.announce | Previous | Next | Find similar | Unroll thread

Thread

Mac users, upgrade to pip 9.0.3 (due to TLS deprecation) Sumana Harihareswara <sh@changeset.nyc> - 2018-04-02 17:05 -0400

csiph-web