Mailman 3 February 2017 - Twisted

[Twisted-Python] trial cant find my class, example from twisted docs
by steven meiers 21 Feb '17

21 Feb '17

hi, up to now ive only used the python unittest for my code, but now i would also like to test the twisted part. so i followed: http://twistedmatrix.com/documents/current/core/howto/trial.html but i get this error: (venv) julius@t560:~/code/python/twisted/basics$ trial calculus calculus ... [ERROR] ======================================================================= ======== [ERROR] Traceback (most recent call last): File "/home/julius/code/python/twisted/basics/calculus/venv/lib/python3.5/si te-packages/twisted/trial/runner.py", line 781, in loadByName return self.suiteFactory([self.findByName(name, recurse=recurse)]) File "/home/julius/code/python/twisted/basics/calculus/venv/lib/python3.5/si te-packages/twisted/trial/runner.py", line 710, in findByName obj = reflect.namedAny(name) File "/home/julius/code/python/twisted/basics/calculus/venv/lib/python3.5/si te-packages/twisted/python/reflect.py", line 306, in namedAny raise ModuleNotFound("No module named %r" % (name,)) twisted.python.reflect.ModuleNotFound: No module named 'calculus' calculus --------------------------------------------------------------------- ---------- Ran 1 tests in 0.024s FAILED (errors=1) heres how my calculus directory looks like: find . | grep -v './venv/' . ./__pycache__ ./__pycache__/__init__.cpython-35.pyc ./test ./test/test_base_1.py ./test/__init__.py ./venv ./__init__.py ./base_1.py ./__init__.pyc venv contains the virtualenv created by "virtualenv -p /usr/bin/python3 venv" the __init__.py files are empty and test_base_1.py / base_1.py contains what is shown in the tutorial. any idea why this does not work?

3 3

[Twisted-Python] announcing: txmix, a twisted python mixnet library
by David Stainton 20 Feb '17

20 Feb '17

Hi. I'd like to announce txmix, a library for writing mixnets in python. https://github.com/applied-mixnetworks/txmix txmix is GPL3 licensed and currently depends on: sphinxmixcrypto, Twisted, txtorcon, attrs, eliot and Tor Project's chutney (for integration tests). txmix allows you to write mixnets with reduced code complexity and transport agnosticism... however I've choosen to focus my development efforts on the Tor onion transport for several reasons, the onion transport has some properties which the UDP transport does not: - reliability - forward secrecy - NAT penetration Additionally the Tor anonymity properties are a welcome bonus since they aren't really overlapping with those of the mixnet, they are vulnerable to different types of attacks and accomodate for totally different threat models. Currently txmix has some integration tests that use chutney to spin up a local 25 relay tor network; builds a mixnet using onion services as the transport and then tests functionality by sending and receiving messages on the mixnet. future development ------------------ - txmix could certainly be used to write various kinds of mixnets, however, we are missing a PKI. Without some kind of public key infrastructure how will mix clients learn about mix public keys? - sphixmixcrypto library needs improvements that would allow us to specify more message types such as dummy/cover traffic message and heartbeat messages. These of course are essential for the defense against certain known active attacks against some mix types. questions, code review and pull requests welcome. David Stainton

2 2

[Twisted-Python] Weekly Bug Summary
by trac＠twistedmatrix.com 19 Feb '17

19 Feb '17

1 0

[Twisted-Python] (Potential) Twisted sprint in San Francisco - anyone want to help organize?
by Glyph Lefkowitz 18 Feb '17

18 Feb '17

Hi all, For those of you that live in the SF bay area, the SF Python Meetup is holding a sprint in almost exactly one month from today: https://www.meetup.com/sfpython/events/234926664/ <https://www.meetup.com/sfpython/events/234926664/> Personally, I'm a bit tapped out at the moment in terms of spare time and brainpower to help organize things, but I do hope some enterprising member of the project can pick this up and help us have a great sprint there. I can probably show up and write some code :-). -glyph

1 0

[Twisted-Python] Twisted 17.1 Release Announcement
by Amber Hawkie Brown 18 Feb '17

18 Feb '17

On behalf of Twisted Matrix Laboratories, I am honoured to announce the release of Twisted 17.1! The highlights of this release are: - twisted.web.client.Agent now supports IPv6! It's also now the primary web client in Twisted, with twisted.web.client.getPage being deprecated in favour of it and Treq. - twisted.web.server has had many cleanups revolving around timing out inactive clients. - twisted.internet.ssl.CertificateOptions has had its `method` argument deprecated, in favour of the new raiseMinimumTo, lowerMaximumSecurityTo, and insecurelyLowerMinimumTo arguments, which take TLSVersion arguments. This allows you to better give a range of versions of TLS you wish to negotiate, rather than forcing yourself to any one version. - twisted.internet.ssl.CertificateOptions will use OpenSSL's MODE_RELEASE_BUFFERS, which will let it free unused memory that was held by idle TLS connections. - You can now call the new twist runner with `python -m twisted`. - twisted.conch.ssh now has some ECDH key exchange support and supports `hmac-sha2-384`. - Better Unicode support in twisted.internet.reactor.spawnProcess, especially on Windows on Python 3.6. - More Python 3 porting in Conch, and more under-the-hood changes to facilitate a Twisted-wide jump to new-style classes only on Python 2 in 2018/2019. This release has also been tested on Python 3.6 on Linux. - Lots of deprecated code removals, to make a sleeker, less confusing Twisted. - 60+ closed tickets. For more information, check the NEWS file (link provided below). You can find the downloads at <https://pypi.python.org/pypi/Twisted <https://pypi.python.org/pypi/Twisted>> (or alternatively <http://twistedmatrix.com/trac/wiki/Downloads <http://twistedmatrix.com/trac/wiki/Downloads>>). The NEWS file is also available at <https://github.com/twisted/twisted/blob/twisted-17.1.0/NEWS <https://github.com/twisted/twisted/blob/twisted-17.1.0/NEWS>>. Many thanks to everyone who had a part in this release - the supporters of the Twisted Software Foundation, the developers who contributed code as well as documentation, and all the people building great things with Twisted! Twisted Regards, Amber Brown (HawkOwl)

7 22

[Twisted-Python] ANN: txaio-etcd
by Tobias Oberstein 16 Feb '17

16 Feb '17

Hi, txaio-etcd is a etcd3 client library for Twisted that is fully asynchronous and pure Python: https://github.com/crossbario/txaio-etcd It also exposes advanced features like watching keys, transactions and leases: https://github.com/crossbario/txaio-etcd/tree/master/examples Releases are on PyPI https://pypi.python.org/pypi/txaioetcd The library is reasonably complete and working, but definitely alpha status as it hasn't seen much use from app code still. Hence, any usage and testing feedback, API change requests or PRs are welcome! Cheers, /Tobias

1 0

[Twisted-Python] Trial & Hypothesis
by Jean-Paul Calderone 16 Feb '17

16 Feb '17

Hey all, A few folks had an IRC discussion about improving the trial & hypothesis experience. I took some notes and thought I'd share them here in case anyone else is interested. We're planning to pick up the discussion next Wednesday. Feel free to join in #twisted-dev on Freenode (we might set up a Google Hangout, details will be on IRC if so). Jean-Paul

2 1

[Twisted-Python] Hanging SFTP client operations on server disconnection
by Adi Roiban 15 Feb '17

15 Feb '17

Hi, t.conch.ssh.filetransfer.FileTransferClient._sendRequest keeps a mapping with active SFTP requests in self.openRequests The self.openRequests is only updated when the server is responding for that request. They are not cleared/cancelled on connection lost. In the case in which the client send a request in the exact same time in which the server closes the connect , the client will send the request as there is no way to know that the server is gone... but since the server is gone it will not reply to the response... and the deferred is never called. To solve this issue, I went for cancelling the open requests when the connection is close. I assume that this is also an issue with bad behaved servers which will just ignore a request... so instead of a simple deferred, there is the need to use a timeout deferred. Is this a bug? I am wondering if I am doing something wrong and these type of errors should be handled in a different way. Thanks! PS: There is a stray release notes fragment in conch https://github.com/twisted/twisted/blob/trunk/src/twisted/conch/8791.feature -- Adi Roiban

3 3

[Twisted-Python] Trying out Detectify on twistedmatrix.com
by Ying Li 15 Feb '17

15 Feb '17

Hey all, I recently heard about https://detectify.com/ <https://detectify.com/> , which is a service which does automatic pen testing, scanning for OWASP top 10 vulnerabilities (https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project <https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project>). I thought this would be a useful thing to try to run against https://twistedmatrix.com. They offer non-commercial accounts, and have approved us for a non-commercial account should we want to run automated scans. I’m going to try running the scan once tonight (post midnight PST), or alternately tomorrow (again post midnight PST) if tonight goes wrong. Any vulnerabilities discovered will be shared with twisted admins only. Just wanted to warn everyone in case alerts start going off or if it happens to knock anything over (which is unlikely, but just in case Glyph has volunteered to look into it if it happens). Thanks! -Ying

1 0

[Twisted-Python] conch.ssh.SSHFactory publicKeys and getPublicKeys
by Adi Roiban 15 Feb '17

15 Feb '17

Hi, I am writing to ask about the reason why t.conch.ssh.Factory has both the getPublicKeys and getPrivateKeys methods ? The public keys should be string while private keys should be twisted.conch.ssh.keys.Key Based on my understanding if you have a private key object you can extract the public key from it. Are there any SSH key formats which will store a private key without the public components ? Or this is just a legacy code from the time when twisted.conch.ssh.keys.Key was not there... and getPublicKeys should be deprecated? Thanks! -- Adi Roiban

2 1