Re: [Catalog-sig] V2 pre-PEP: transitioning to release file hosting on PYPI

2013-03-12 Thread M.-A. Lemburg
On 12.03.2013 20:17, holger krekel wrote: On Tue, Mar 12, 2013 at 19:07 +0100, M.-A. Lemburg wrote: Just a quick note (more later, if time permits)... On 12.03.2013 18:05, holger krekel wrote: Hi Marc-Andre, all, - Prepare PYPI implementation to allow a per-project hosting mode

Re: [Catalog-sig] V2 pre-PEP: transitioning to release file hosting on PYPI

2013-03-12 Thread M.-A. Lemburg
On 12.03.2013 20:46, PJ Eby wrote: On Tue, Mar 12, 2013 at 2:07 PM, M.-A. Lemburg m...@egenix.com wrote: Just a quick note (more later, if time permits)... On 12.03.2013 18:05, holger krekel wrote: Hi Marc-Andre, all, - Prepare PYPI implementation to allow a per-project hosting mode

Re: [Catalog-sig] setuptools/distribute/easy_install/pkg_resource sorting algorithm

2013-03-12 Thread M.-A. Lemburg
On 12.03.2013 19:15, M.-A. Lemburg wrote: I've run into a weird issue with easy_install, that I'm trying to solve: If I place two files named egenix_mxodbc_connect_client-2.0.2-py2.6.egg egenix-mxodbc-connect-client-2.0.2.win32-py2.6.prebuilt.zip into the same directory and let

Re: [Catalog-sig] V2 pre-PEP: transitioning to release file hosting on PYPI

2013-03-13 Thread M.-A. Lemburg
On 13.03.2013 07:28, Nick Coghlan wrote: On Tue, Mar 12, 2013 at 12:59 PM, M.-A. Lemburg m...@egenix.com wrote: I think we should establish a versioned API like that for PyPI to make progress easier. All major web APIs use versioning for this reason. Why set up versioning for something we

Re: [Catalog-sig] V3 PEP-draft for transitioning to pypi-hosting of release files

2013-03-13 Thread M.-A. Lemburg
On 13.03.2013 12:21, holger krekel wrote: Hi all, after some more discussions and hours spend by Carl Meyer (who is now co-authoring the PEP) and me, here is a new V3 pre-submit draft. It is now more ambitious than the previous draft as should be obvious from the modified abstract (and

Re: [Catalog-sig] V3 PEP-draft for transitioning to pypi-hosting of release files

2013-03-13 Thread M.-A. Lemburg
On 13.03.2013 20:08, Donald Stufft wrote: On Mar 13, 2013, at 2:57 PM, M.-A. Lemburg m...@egenix.com wrote: On 13.03.2013 12:21, holger krekel wrote: [V3 proposal] I must say, don't like this change in motivation compared to V1 and V2. The original of the discussion was to make PyPI

Re: [Catalog-sig] setuptools/distribute/easy_install/pkg_resource sorting algorithm

2013-03-14 Thread M.-A. Lemburg
On 12.03.2013 22:26, PJ Eby wrote: On Tue, Mar 12, 2013 at 3:59 PM, M.-A. Lemburg m...@egenix.com wrote: On 12.03.2013 19:15, M.-A. Lemburg wrote: I've run into a weird issue with easy_install, that I'm trying to solve: If I place two files named egenix_mxodbc_connect_client-2.0.2-py2.6.egg

Re: [Catalog-sig] setuptools/distribute/easy_install/pkg_resource sorting algorithm

2013-03-14 Thread M.-A. Lemburg
On 14.03.2013 17:39, PJ Eby wrote: On Thu, Mar 14, 2013 at 6:07 AM, M.-A. Lemburg m...@egenix.com wrote: On 12.03.2013 22:26, PJ Eby wrote: On Tue, Mar 12, 2013 at 3:59 PM, M.-A. Lemburg m...@egenix.com wrote: On 12.03.2013 19:15, M.-A. Lemburg wrote: I've run into a weird issue

Re: [Catalog-sig] V4 Pre-PEP: transition to release-file hosting on PYPI

2013-03-15 Thread M.-A. Lemburg
Thanks, Holger. This version looks a lot better :-) There are still some minor quirks which would need to be addressed more explicitly, but overall, this proposal provides a good way forward. Perhaps it would also be possible to add the secured download links and the caching/proxying ideas to

Re: [Catalog-sig] V4 Pre-PEP: transition to release-file hosting on PYPI

2013-03-15 Thread M.-A. Lemburg
A little off-topic, but I thought you might enjoy this in the context of all the crypto, hash and signing debate: http://xkcd.com/1181/ Cheers, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Mar 15 2013) Python Projects, Consulting and Support ...

Re: [Catalog-sig] PEP 438 implementation on testpypi

2013-03-20 Thread M.-A. Lemburg
On 20.03.2013 19:26, Richard Jones wrote: Thanks to Donald Stufft for his implementation of the PEP 438 changes, I've made them live on testpypi.python.org - specifically the urls page of package administration. Please poke and play. Nice... first tests: * Going to urls and then clicking on

Re: [Catalog-sig] PEP 438 implementation on testpypi

2013-03-20 Thread M.-A. Lemburg
On 20.03.2013 20:31, M.-A. Lemburg wrote: Other things: - * Would it be possible to add a link to the corresponding /simple/ index page on the package menu (the one with files, urls, etc.) ? * Could you add a link to the PKG-INFO file from pypi?:action=display_pkginfo

Re: [Catalog-sig] PEP 438 implementation on testpypi

2013-03-20 Thread M.-A. Lemburg
On 20.03.2013 21:16, Richard Jones wrote: On 20 March 2013 12:31, M.-A. Lemburg m...@egenix.com wrote: * Will there be an RPC interface to register URLs with PyPI ? Doing this manually for a large number of files is, well, not ideal :-) It's just a HTTP POST and there's plans for a tool

Re: [Catalog-sig] PEP 438 implementation on testpypi

2013-03-20 Thread M.-A. Lemburg
On 20.03.2013 23:01, Richard Jones wrote: On 20 March 2013 14:56, M.-A. Lemburg m...@egenix.com wrote: Could you change The URL must end with the MD5 hash of the file contents to The URL must include the MD5 hash of the file contents ? (See my original test report for the reason :-)) Hm

Re: [Catalog-sig] PEP 438 implementation on testpypi

2013-03-20 Thread M.-A. Lemburg
On 20.03.2013 23:19, Richard Jones wrote: On 20 March 2013 15:01, Richard Jones r1chardj0...@gmail.com wrote: On 20 March 2013 14:56, M.-A. Lemburg m...@egenix.com wrote: Could you change The URL must end with the MD5 hash of the file contents to The URL must include the MD5 hash of the file

Re: [Catalog-sig] PEP 438 implementation on testpypi

2013-03-20 Thread M.-A. Lemburg
On 20.03.2013 23:28, Richard Jones wrote: On 20 March 2013 14:17, Richard Jones r1chardj0...@gmail.com wrote: On 20 March 2013 13:27, M.-A. Lemburg m...@egenix.com wrote: On 20.03.2013 21:16, Richard Jones wrote: On 20 March 2013 12:31, M.-A. Lemburg m...@egenix.com wrote

Re: [Catalog-sig] Access to Windows' cert store

2013-03-21 Thread M.-A. Lemburg
On 21.03.2013 13:06, Christian Heimes wrote: Hi, the message is slightly off-topic but it might be interesting for pip, setuptools and other developers that are working on HTTPS for PyPI. I while ago I found C++ example code that shows how to dump CA and CRL certs from Windows's system

Re: [Catalog-sig] Access to Windows' cert store

2013-03-21 Thread M.-A. Lemburg
On 21.03.2013 14:32, Christian Heimes wrote: Am 21.03.2013 13:58, schrieb M.-A. Lemburg: Why not simply use the Firefox certs ? We started adding these to our pyOpenSSL distribution with the last release: https://cms.egenix.com/products/python/pyOpenSSL/doc/#Module_OpenSSL.ca_bundle Sure

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 10:04, Ronald Oussoren wrote: On 22 Mar, 2013, at 9:58, anatoly techtonik techto...@gmail.com wrote: Some links are broken. I added redirects for wiki pages, but it will be better to fix links too. The OAuth link appears to be broken, and that's likely part of the fallout of

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 10:14, M.-A. Lemburg wrote: On 22.03.2013 10:04, Ronald Oussoren wrote: On 22 Mar, 2013, at 9:58, anatoly techtonik techto...@gmail.com wrote: Some links are broken. I added redirects for wiki pages, but it will be better to fix links too. The OAuth link appears to be broken

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 09:58, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 11:16 AM, Ronald Oussoren ronaldousso...@mac.comwrote: On 22 Mar, 2013, at 8:37, anatoly techtonik techto...@gmail.com wrote: Hi, I understand that this will make PyPI a potential target for automated spam bots, but

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 10:16, M.-A. Lemburg wrote: On 22.03.2013 10:14, M.-A. Lemburg wrote: On 22.03.2013 10:04, Ronald Oussoren wrote: On 22 Mar, 2013, at 9:58, anatoly techtonik techto...@gmail.com wrote: Some links are broken. I added redirects for wiki pages, but it will be better to fix

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 11:25, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 12:14 PM, M.-A. Lemburg m...@egenix.com wrote: On 22.03.2013 10:04, Ronald Oussoren wrote: On 22 Mar, 2013, at 9:58, anatoly techtonik techto...@gmail.com wrote: Some links are broken. I added redirects for wiki pages

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 13:20, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 1:49 PM, M.-A. Lemburg m...@egenix.com wrote: Again: Please don't do this. I think you're not against renaming pages, but against renaming without redirects. In fact, if MoinMoin could automatically insert #REDIRECT

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-22 Thread M.-A. Lemburg
On 22.03.2013 13:38, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 3:26 PM, M.-A. Lemburg m...@egenix.com wrote: On 22.03.2013 13:20, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 1:49 PM, M.-A. Lemburg m...@egenix.com wrote: Again: Please don't do this. I think you're not against

Re: [Catalog-sig] API for uploading packages to PyPI

2013-03-23 Thread M.-A. Lemburg
On 22.03.2013 23:33, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 4:17 PM, M.-A. Lemburg m...@egenix.com wrote: On 22.03.2013 13:38, anatoly techtonik wrote: On Fri, Mar 22, 2013 at 3:26 PM, M.-A. Lemburg m...@egenix.com wrote: On 22.03.2013 13:20, anatoly techtonik wrote: On Fri, Mar

<    1   2   3