Mailman 3 May 2017 - docs

Documentation in PDF A4
by F SkZ M May 18, 2017

May 18, 2017

I downloaded the A4 version of the documentation from the site, but when I check in the properties the pdf files result to be in letter, and comparing with the letter version of the same document, they have effectively the same format (pages 102 of c-api.pdf of "a4" and letter version are identical, that it would be not possible considering the different size of the page format). python-3.6.1 :)pdfinfo c-api.pdf > Title: > Subject: > Keywords: > Author: > Creator: LaTeX with hyperref package > Producer: pdfTeX-1.40.14 > CreationDate: Tue Apr 25 00:15:56 2017 > ModDate: Tue Apr 25 00:15:56 2017 > Tagged: no > Form: none > Pages: 226 > Encrypted: no > Page size: 612 x 792 pts (letter) > Page rot: 0 > File size: 947872 bytes > Optimized: no > PDF version: 1.5 > Francesco Mauro PS: the size of the compress file is actually 12MiB and not 8MiB --and rising one morning with the rosy dawn, he went before the sun, and spake thus unto it: Thou great star! What would be thy happiness if thou hadst not those for whom thou shinest! (Nietzsche, AsZ) Software is like sex: it's better when it's free (Linus T.)

1 1

[issue18617] AIA chasing for missing intermediate certificates on TLS connections
by Alex Gaynor May 17, 2017

May 17, 2017

Alex Gaynor added the comment: Just discussed with Christian, and we're both in favor of adding AIA chasing support to the stdlib ssl. ---------- nosy: +alex, janssen _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue18617> _______________________________________

1 0

[issue18617] AIA chasing for missing intermediate certificates on TLS connections
by April King May 17, 2017

May 17, 2017

April King added the comment: Err, sorry, I may have been a bit unclear. AIA chasing is not *universal* amongst browsers. IE, Edge, Chrome, and Safari perform AIA chasing. Firefox maintains a cache of intermediate certificate authorities. I noted that a bit further underneath, but my apologies if it was confusing. That said, every browser has a some chosen some underlying method to ameliorate this common TLS error. It would be amazing if Python could similarly resolve this issue for developers. ---------- _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue18617> _______________________________________

1 0

[issue18617] AIA chasing for missing intermediate certificates on TLS connections
by April King May 17, 2017

May 17, 2017

April King added the comment: Browsers universally support AIA chasing/fetching, as do a number of underlying OS libraries, such as Secure Transport (macOS) and schannel (Windows). As a result, it is becoming increasingly common for server operators to fail to include the entire certificate chain in their handshake. By some measures, anywhere from 10 to over 30% of all TLS errors(1) are caused by missing intermediate certificates. There are a handful of ways that scanners and other tools have worked around this issue. Some, like SSL Labs, do their own AIA chasing. Others make subprocess to other tools linked to OS libraries which invisibly perform AIA chasing, such as curl on macOS. Others, like Firefox, maintain a cache of intermediate certificates. In any case, all of these solutions are concession to the reality that TLS is really hard and that it is largely impossible to solve this particular misconfiguration issue. I myself write a popular tool(2) that does scanning of sites for missing security configurations. Although it's not explicitly focused on TLS, some of the underlying tests rely on a verified TLS connection. For example, the HTTP Strict Transport Security (HSTS) header can only be set on valid TLS connections. I use requests (which uses httplib underneath), but I'm unable to tell if a given certificate error is because of either: a) the certificate validation actually failed (for example, due to being expired), or b) there was a missing intermediate certificate and that things would have worked if AIA chasing was available As a result, I have to tell people that their HSTS header can't be set. This is often incorrect, because browsers that do AIA chasing consider the connection perfectly secure for the purposes of HSTS. It would be really nice if Python's httplib could be updated to do transparent AIA chasing, with the optional ability to turn it off. In an ideal world, the underlying TLS libraries (such as OpenSSL) would do this for us, but unfortunately as things stand now OpenSSL leaves it up to the applications themselves to perform chasing. According to Mozilla research (3), if implemented, it would reduce TLS errors by approximately 6% were AIA chasing always performed and successful. Thanks! 1. https://docs.google.com/document/d/1ryqFMSHHRDERg1jm3LeVt7VMfxtXXrI8p49gmtn… 2. https://observatory.mozilla.org/ 3. https://bugzilla.mozilla.org/show_bug.cgi?id=399324#c80 ---------- nosy: +april title: TLS and Intermediate Certificates -> AIA chasing for missing intermediate certificates on TLS connections _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue18617> _______________________________________

1 0

[issue30390] Document how to make classes in the C API.
by Decorater May 17, 2017

May 17, 2017

New submission from Decorater: On the C API, it tells how to make modules, functions, variables, and other things, but what about classes? Like for example if you wanted to make a class with all of the methods having to use direct C Code which would then be converted to PyObject *'s for returning the information the C Code would normally return. Not only that but also being able to create class instance variables using the C API as well. Like for example here is an example class (As it would be if it was written in python): class Example: def __init__(self): self.data = None # None being a place holder for now. def somefunction(self): # C Code here. self.data = ret # return value for the C Code. return self.data Yes, there are better ways than writing the return data to the instance variable and returning it. That is just an example, I have classes that uses them for other things that does not return anything making the instance variables be the only way to get the data. But yeah long story short I think creating classes with the C API should be documented if not already, or at least an example of doing one to be added as an guide for others wondering how to use the C API to make their own (non exception) classes. ---------- assignee: docs@python components: Documentation, Extension Modules messages: 293863 nosy: Decorater, docs@python priority: normal severity: normal status: open title: Document how to make classes in the C API. versions: Python 3.5, Python 3.6, Python 3.7 _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue30390> _______________________________________

2 5

[issue30211] Bdb: add docstrings
by Cheryl Sabella May 17, 2017

May 17, 2017

New submission from Cheryl Sabella: Add docstrings to Bdb. See issue 19417. ---------- assignee: docs@python components: Documentation messages: 292598 nosy: csabella, docs@python, terry.reedy priority: normal pull_requests: 1467 severity: normal status: open title: Bdb: add docstrings type: enhancement versions: Python 3.7 _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue30211> _______________________________________

2 9

[issue29898] PYTHONLEGACYWINDOWSIOENCODING isn't implemented
by Berker Peksag May 16, 2017

May 16, 2017

Changes by Berker Peksag <berker.peksag(a)gmail.com>: ---------- resolution: -> fixed stage: backport needed -> resolved status: open -> closed _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue29898> _______________________________________

1 0

[issue29898] PYTHONLEGACYWINDOWSIOENCODING isn't implemented
by Berker Peksag May 16, 2017

May 16, 2017

Berker Peksag added the comment: New changeset 0d267041c40a3ab655676b885c0ba35ed9685848 by Berker Peksag in branch '3.6': bpo-29898: Fix incorrect env variable name (GH-1576) https://github.com/python/cpython/commit/0d267041c40a3ab655676b885c0ba35ed9… ---------- _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue29898> _______________________________________

1 0

[issue29898] PYTHONLEGACYWINDOWSIOENCODING isn't implemented
by Berker Peksag May 16, 2017

May 16, 2017

Changes by Berker Peksag <berker.peksag(a)gmail.com>: ---------- pull_requests: +1700 _______________________________________ Python tracker <report(a)bugs.python.org> <http://bugs.python.org/issue29898> _______________________________________

1 0

Wrong paper format
by Pierre Chauveau-Thoumelin May 16, 2017

May 16, 2017

Hello, I am attempting to download the docs as PDFs (A4 paper size) from this page : https://docs.python.org/3.7/download.html. The problem is that both archives ( https://docs.python.org/3.7/archives/python-3.7.0a0-docs-pdf-a4.zip and https://docs.python.org/3.7/archives/python-3.7.0a0-docs-pdf-a4.tar.bz2) contain PDFs with the US-Letter paper size. Could you please do something about it? (I've only checked the tutorial.pdf, not all files). Thank you! Best, Pierre Chauveau-Thoumelin

1 0