Mailman 3 May 2017 - docs

Documentation in PDF A4
by F SkZ M May 18, 2017

May 18, 2017

I downloaded the A4 version of the documentation from the site, but when I check in the properties the pdf files result to be in letter, and comparing with the letter version of the same document, they have effectively the same format (pages 102 of c-api.pdf of "a4" and letter version are identical, that it would be not possible considering the different size of the page format). python-3.6.1 :)pdfinfo c-api.pdf > Title: > Subject: > Keywords: > Author: > Creator: LaTeX … [View More]

1 1

[issue18617] AIA chasing for missing intermediate certificates on TLS connections
by Alex Gaynor May 17, 2017

May 17, 2017

Alex Gaynor added the comment: Just discussed with Christian, and we're both in favor of adding AIA chasing support to the stdlib ssl. ---------- nosy: +alex, janssen _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue18617> _______________________________________

1 0

[issue18617] AIA chasing for missing intermediate certificates on TLS connections
by April King May 17, 2017

May 17, 2017

April King added the comment: Err, sorry, I may have been a bit unclear. AIA chasing is not *universal* amongst browsers. IE, Edge, Chrome, and Safari perform AIA chasing. Firefox maintains a cache of intermediate certificate authorities. I noted that a bit further underneath, but my apologies if it was confusing. That said, every browser has a some chosen some underlying method to ameliorate this common TLS error. It would be amazing if Python could similarly resolve this issue for … [View More]

1 0

[issue18617] AIA chasing for missing intermediate certificates on TLS connections
by April King May 17, 2017

May 17, 2017

April King added the comment: Browsers universally support AIA chasing/fetching, as do a number of underlying OS libraries, such as Secure Transport (macOS) and schannel (Windows). As a result, it is becoming increasingly common for server operators to fail to include the entire certificate chain in their handshake. By some measures, anywhere from 10 to over 30% of all TLS errors(1) are caused by missing intermediate certificates. There are a handful of ways that scanners and other tools … [View More]have worked around this issue. Some, like SSL Labs, do their own AIA chasing. Others make subprocess to other tools linked to OS libraries which invisibly perform AIA chasing, such as curl on macOS. Others, like Firefox, maintain a cache of intermediate certificates. In any case, all of these solutions are concession to the reality that TLS is really hard and that it is largely impossible to solve this particular misconfiguration issue. I myself write a popular tool(2) that does scanning of sites for missing security configurations. Although it's not explicitly focused on TLS, some of the underlying tests rely on a verified TLS connection. For example, the HTTP Strict Transport Security (HSTS) header can only be set on valid TLS connections. I use requests (which uses httplib underneath), but I'm unable to tell if a given certificate error is because of either: a) the certificate validation actually failed (for example, due to being expired), or b) there was a missing intermediate certificate and that things would have worked if AIA chasing was available As a result, I have to tell people that their HSTS header can't be set. This is often incorrect, because browsers that do AIA chasing consider the connection perfectly secure for the purposes of HSTS. It would be really nice if Python's httplib could be updated to do transparent AIA chasing, with the optional ability to turn it off. In an ideal world, the underlying TLS libraries (such as OpenSSL) would do this for us, but unfortunately as things stand now OpenSSL leaves it up to the applications themselves to perform chasing. According to Mozilla research (3), if implemented, it would reduce TLS errors by approximately 6% were AIA chasing always performed and successful. Thanks! 1. https://docs.google.com/document/d/1ryqFMSHHRDERg1jm3LeVt7VMfxtXXrI8p49gmtn… 2. https://observatory.mozilla.org/ 3. https://bugzilla.mozilla.org/show_bug.cgi?id=399324#c80 ---------- nosy: +april title: TLS and Intermediate Certificates -> AIA chasing for missing intermediate certificates on TLS connections _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue18617> _______________________________________ [View Less]

1 0

[issue30390] Document how to make classes in the C API.
by Decorater May 17, 2017

May 17, 2017

New submission from Decorater: On the C API, it tells how to make modules, functions, variables, and other things, but what about classes? Like for example if you wanted to make a class with all of the methods having to use direct C Code which would then be converted to PyObject *'s for returning the information the C Code would normally return. Not only that but also being able to create class instance variables using the C API as well. Like for example here is an example class (As it … [View More]

2 5

[issue30211] Bdb: add docstrings
by Cheryl Sabella May 16, 2017

May 16, 2017

New submission from Cheryl Sabella: Add docstrings to Bdb. See issue 19417. ---------- assignee: docs@python components: Documentation messages: 292598 nosy: csabella, docs@python, terry.reedy priority: normal pull_requests: 1467 severity: normal status: open title: Bdb: add docstrings type: enhancement versions: Python 3.7 _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue30211> _______________________________________

2 9

[issue29898] PYTHONLEGACYWINDOWSIOENCODING isn't implemented
by Berker Peksag May 16, 2017

May 16, 2017

Changes by Berker Peksag <berker.peksag(a)gmail.com>: ---------- resolution: -> fixed stage: backport needed -> resolved status: open -> closed _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue29898> _______________________________________

1 0

[issue29898] PYTHONLEGACYWINDOWSIOENCODING isn't implemented
by Berker Peksag May 16, 2017

May 16, 2017

Berker Peksag added the comment: New changeset 0d267041c40a3ab655676b885c0ba35ed9685848 by Berker Peksag in branch '3.6': bpo-29898: Fix incorrect env variable name (GH-1576) https://github.com/python/cpython/commit/0d267041c40a3ab655676b885c0ba35ed9… ---------- _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue29898> _______________________________________

1 0

[issue29898] PYTHONLEGACYWINDOWSIOENCODING isn't implemented
by Berker Peksag May 16, 2017

May 16, 2017

Changes by Berker Peksag <berker.peksag(a)gmail.com>: ---------- pull_requests: +1700 _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue29898> _______________________________________

1 0

Wrong paper format
by Pierre Chauveau-Thoumelin May 16, 2017

May 16, 2017

Hello, I am attempting to download the docs as PDFs (A4 paper size) from this page : https://docs.python.org/3.7/download.html. The problem is that both archives ( https://docs.python.org/3.7/archives/python-3.7.0a0-docs-pdf-a4.zip and https://docs.python.org/3.7/archives/python-3.7.0a0-docs-pdf-a4.tar.bz2) contain PDFs with the US-Letter paper size. Could you please do something about it? (I've only checked the tutorial.pdf, not all files). Thank you! Best, Pierre Chauveau-Thoumelin

1 0