Edgewall Software

Opened 8 years ago

Closed 8 years ago

#581 closed defect (fixed)

Download documentation claims Genshi installable through pip

Reported by: gsnedders Owned by: hodgestar
Priority: major Milestone: 0.7
Component: Documentation Version: 0.6
Keywords: Cc:


http://genshi.edgewall.org/wiki/Download says "[i]f you have a recent version of pip installed, you can directly install Genshi using the pip command-line tool: pip install Genshi".

Since pip 1.5 was released, this hasn't worked, as pip 1.5 "[will] no longer scrape insecure external urls by default nor will it install externally hosted files by default". Genshi's external URL is insecure (it is sent over HTTP, without SSL/TLS) and the downloads are externally hosted.

Presently, to install Genshi one must use pip install --allow-external Genshi --allow-unverified Genshi Genshi. In the short-term, the documentation should be fixed to provide working instructions to install Genshi; longer-term it would be desirable to have verifiable downloads from PyPI (with all the metadata to verify the download fetched securely), and ideally with the releases hosted on PyPI.

Change History (3)

comment:1 Changed 8 years ago by hodgestar

  • Owner changed from cmlenz to hodgestar
  • Status changed from new to assigned

Genshi source tarballs and zip files and Windows installers uploaded to PyPI for 0.7 and 0.6.1. Try now?

comment:2 Changed 8 years ago by hodgestar

I uploaded the files for 0.6 too for good measure.

comment:3 Changed 8 years ago by hodgestar

  • Resolution set to fixed
  • Status changed from assigned to closed

Sound be fixed now.

Note: See TracTickets for help on using tickets.