[issue29480] Mac OSX Installer SSL Roots

[Ned Deily]

Ned Deily  added the comment:

Thanks for your suggestions.  I agree that the Root Certificates and OpenSSL 
situation on macOS is still less than desirable.  For 3.7.0b2, I have tried to 
make things more obvious in two ways.  One, the installer package will now 
attempt to open a Finder window for the /Application/Python 3.7 folder that 
contains the "Install Certificates.command".  Two, rather than just a generic 
"installation complete" message at the end of the install, there is now a 
tailored message that urges the user to click on the "Install 
Certificates.command" icon. I considered trying to run the command 
automatically from the installer but that gets a bit messy: 1. it requires a 
network connection; 2. the installer would need to ensure the installation 
takes place with the right user and group permission and not just as root; 3. 
the user might not want to use certifi; and 4. the solution needs to work 
across all macOS versions supported by the installer variant.  Also, it appears 
the installer doesn't allo
 w command files to be executed by clicking on a link in the installer window, 
a prudent security measure.  While not perfect, I think what's now in 3.7.0b2 
should be an improvement, at least it will be much harder to overlook without 
being too obnoxious about it.

--
resolution:  -> fixed
stage:  -> resolved
status: open -> closed
versions: +Python 3.8 -Python 3.6

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue29480] Mac OSX Installer SSL Roots

[Ned Deily]

Ned Deily  added the comment:

Tommy, you should ask your question elsewhere, like on Stackoverflow or on the 
Python mailing list.  It does not seem related to this issue at all or to 
indicate a problem with Python itself. (For the record, the Python Developer's 
Guide has some good tips on how to build Python for macOS and other platforms; 
see https://devguide.python.org/setup/#build-dependencies)

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue29480] Mac OSX Installer SSL Roots

[Raymond Hettinger]

Raymond Hettinger  added the comment:

> I would like to suggest that the OSX installer automatically run "Install 
> Certificates.command", or display a prompt to users saying "Run Now" during 
> installation.

+1 This would be really helpful.  I occasionally get entire rooms full of Mac 
users with a fresh install of Python 3.6 who immediately get stuck with 
something as simple as:

   urllib.request.urlopen('http://www.python.org').read()

The error messages that pop up are decidedly unhelpful.  This is especially 
mystifying because the original request uses "http" and the site itself 
redirects to "https".

--
nosy: +rhettinger

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue29480] Mac OSX Installer SSL Roots

[Tommy Carstensen]

Tommy Carstensen  added the comment:

I can't user requests, urllib, pandas.read_html(), etc. because of this. I 
don't have root access / sudo rights. I've tried downloading OpenSSL from 
openssl.org and then installing with:
 `./config --prefix=/my/home/dir ; make ; make install`

Then I tried installing Python with:
 `export CFLAGS="-I/my/home/dir/include" ; export LDFLAGS="-L/my/home/dir/lib" 
; ./configure prefix=/my/home/dir ; make ; make install`

But it doesn't work. How can I install Python3.6 without root access / admin 
rights? Thanks!

--
nosy: +Tommy.Carstensen

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue29480] Mac OSX Installer SSL Roots

[Christian Heimes]

Changes by Christian Heimes :


--
nosy: +christian.heimes

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue29480] Mac OSX Installer SSL Roots

[R. David Murray]

R. David Murray added the comment:

I thought there was an open issue for using the Apple cert mechanisms natively, 
but I can't find it.  Adding the OSX people to nosy.

--
components: +macOS
nosy: +ned.deily, r.david.murray, ronaldoussoren
versions: +Python 3.7

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue29480] Mac OSX Installer SSL Roots

[Edward Ned Harvey]

New submission from Edward Ned Harvey:

I would like to suggest that the OSX installer automatically run "Install 
Certificates.command", or display a prompt to users saying "Run Now" during 
installation.

Having the readme is helpful - but only after you google for 20 minutes, 
because of an exception you encountered. Of course nobody reads the readme 
during install. "I've installed python a thousand times before, I know what I'm 
doing."

There are so many things that require SSL, and it's reasonably assumed to be 
functional by default.

--
components: Installation
messages: 287302
nosy: rahvee
priority: normal
severity: normal
status: open
title: Mac OSX Installer SSL Roots
type: behavior
versions: Python 3.6

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com