Edgewall Software

Opened 10 years ago

Closed 10 years ago

#581 closed defect (fixed)

Download documentation claims Genshi installable through pip

Reported by: gsnedders Owned by: hodgestar
Priority: major Milestone: 0.7
Component: Documentation Version: 0.6
Keywords: Cc:

Description

http://genshi.edgewall.org/wiki/Download says "[i]f you have a recent version of pip installed, you can directly install Genshi using the pip command-line tool: pip install Genshi".

Since pip 1.5 was released, this hasn't worked, as pip 1.5 "[will] no longer scrape insecure external urls by default nor will it install externally hosted files by default". Genshi's external URL is insecure (it is sent over HTTP, without SSL/TLS) and the downloads are externally hosted.

Presently, to install Genshi one must use pip install --allow-external Genshi --allow-unverified Genshi Genshi. In the short-term, the documentation should be fixed to provide working instructions to install Genshi; longer-term it would be desirable to have verifiable downloads from PyPI (with all the metadata to verify the download fetched securely), and ideally with the releases hosted on PyPI.

Change History (3)

comment:1 Changed 10 years ago by hodgestar

  • Owner changed from cmlenz to hodgestar
  • Status changed from new to assigned

Genshi source tarballs and zip files and Windows installers uploaded to PyPI for 0.7 and 0.6.1. Try now?

comment:2 Changed 10 years ago by hodgestar

I uploaded the files for 0.6 too for good measure.

comment:3 Changed 10 years ago by hodgestar

  • Resolution set to fixed
  • Status changed from assigned to closed

Sound be fixed now.

Note: See TracTickets for help on using tickets.