[Python-Dev] Re: Why doesn't venv also install python3*-config?

2020-01-08 Thread Matt Billenstein via Python-Dev
On Wed, Jan 08, 2020 at 12:26:39PM +0100, Musbur wrote:
> I'm experimenting with package development on different versions of Python
> in different virtualenvs. After running "make" I don't do "make install",
> but rather I set up virtualenvs by running /path/to/source/python -m venv
> env_dir. 

I'd suggest https://github.com/pyenv/pyenv -- this handles this more
seamlessly.

m

--
Matt Billenstein
m...@vazor.com
http://www.vazor.com/
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/DL45OWIVYPZLKMLVSYISPG2XNY2S3PE7/
Code of Conduct: http://python.org/psf/codeofconduct/


[Python-Dev] MacOS pkg bundles openssl, but doesn't include a cert bundle?

2020-03-23 Thread Matt Billenstein via Python-Dev
Hi, installing the latest 2.7.16 MacOS installer, functions in urllib
will attempt to load trusted certs from:

/Library/Frameworks/Python.framework/Versions/2.7/etc/openssl/cert.pem

But this file is not shipped with the installer package - this makes
urlretrieve and friends fail on https hosts - perhaps the installer
should ship a bundle or enable using something like certifi if it's
installed?

AFAIK Apple has deprecated openssl libs as shipped with the OS a long
time ago and only support their proprietary framework crypto apis and on
MacOS Catalina and newer.

thx

m

-- 
Matt Billenstein
m...@vazor.com
http://www.vazor.com/
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/F4NRIGHUOJVWQAOHJEOOF3AQBB76VNGD/
Code of Conduct: http://python.org/psf/codeofconduct/


[Python-Dev] Re: MacOS pkg bundles openssl, but doesn't include a cert bundle?

2020-03-23 Thread Matt Billenstein via Python-Dev
Thanks Ned - confirmed that works in 2.7.17 - maybe it was there in
2.7.16 and I just overlooked that messaging in the last step.

m

On Mon, Mar 23, 2020 at 09:11:09PM -0400, Ned Deily wrote:
> On Mar 23, 2020, at 20:30, Matt Billenstein via Python-Dev 
>  wrote:
> > Hi, installing the latest 2.7.16 MacOS installer, functions in urllib
> > will attempt to load trusted certs from:
> > 
> > /Library/Frameworks/Python.framework/Versions/2.7/etc/openssl/cert.pem
> > 
> > But this file is not shipped with the installer package - this makes
> > urlretrieve and friends fail on https hosts - perhaps the installer
> > should ship a bundle or enable using something like certifi if it's
> > installed?
> 
> Python 2.7.17 is the most recent 2.7.x release.  You should be using it 
> instead of 2.7.16.
> 
> When you open one of the current macOS Installer packages from python.org,
> the first (Welcome) display includes the following text:
> 
> "At the end of this install, click on Install Certificates to install a set 
> of current SSL root certificates."
> 
> The second display (ReadMe) in the Installer includes the following section:
> 
> "Certificate verification and OpenSSL
> 
> This package includes its own private copy of OpenSSL 1.0.2.   The trust 
> certificates in system and user keychains managed by the Keychain Access 
> application and the security command line utility are not used as defaults by 
> the Python ssl module.  A sample command script is included in 
> /Applications/Python 2.7 to install a curated bundle of default root 
> certificates from the third-party certifi package 
> (https://pypi.org/project/certifi/).  Double-click on Install Certificates to 
> run it.
> 
> The bundled pip has its own default certificate store for verifying download 
> connections."
> 
> By default, a copy of that ReadMe is saved as a file in /Application/Python 
> 2.7/ should you need to refer to it, along with the "Install 
> Certificates.command" file.
> 
> We do not currently ship a set of certificates with the installer directly 
> because any of them could be replaced or invalidated over the lifetome of the 
> installer package.
> 
> Hope that helps.
> 
> 
> --
>   Ned Deily
>   n...@python.org -- []

-- 
Matt Billenstein
m...@vazor.com
http://www.vazor.com/
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/27TF36AURBYJZW2LLGRYGL3GMI6XZZ4W/
Code of Conduct: http://python.org/psf/codeofconduct/


[Python-Dev] Re: PEP 617: New PEG parser for CPython

2020-04-02 Thread Matt Billenstein via Python-Dev
On Thu, Apr 02, 2020 at 05:17:31PM -0700, Guido van Rossum wrote:
> On Thu, Apr 2, 2020 at 4:20 PM Nathaniel Smith  wrote:
> 
> If the AST is supposed to be the same, then would it make sense to
> temporarily – maybe just during the alpha/beta period – always run
> *both* parsers and confirm that they match?
> 
> 
> That's not a bad idea! https://github.com/we-like-parsers/cpython/issues/33

Even just running it in a dev build against the corpus of the top few
thousand packages on pypi might give enough confidence -- I had a script
to download the top N packages and run some script over the python files
contained therein, but I can't seem to find it atm.

m

-- 
Matt Billenstein
m...@vazor.com
http://www.vazor.com/
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/YCL5HQIV5YIRPZ5VCKV6B7U5XCECFAW2/
Code of Conduct: http://python.org/psf/codeofconduct/


[Python-Dev] Re: PEP 617: New PEG parser for CPython

2020-04-02 Thread Matt Billenstein via Python-Dev
On Thu, Apr 02, 2020 at 08:57:30PM -0700, Guido van Rossum wrote:
> On Thu, Apr 2, 2020 at 7:55 PM Matt Billenstein  wrote:
> 
> Even just running it in a dev build against the corpus of the top few
> thousand packages on pypi might give enough confidence -- I had a script
> to download the top N packages and run some script over the python files
> contained therein, but I can't seem to find it atm.
> 
> 
> We got that. Check https://github.com/gvanrossum/pegen/tree/master/scripts --
> look at download_pypi_packages.py and test_pypi_packages.py.

Very nice!

m

-- 
Matt Billenstein
m...@vazor.com
http://www.vazor.com/
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/Q5DY4ZNCB7GYGIL5LUWJFJ7GLL5EJMW2/
Code of Conduct: http://python.org/psf/codeofconduct/