[Catalog-sig] HTTPS now promoted on PyPI

Vinay Sajip vinay_sajip at yahoo.co.uk
Tue Feb 19 14:02:20 CET 2013


Richard Jones <r1chardj0n3s <at> gmail.com> writes:

> I've just altered the nginx configuration to promote (ie. redirect to)
> HTTPS for all GET/HEAD requests. This includes HSTS, but I've set the
> lifetime to 1 day just in case there's some HTTPS compatibility
> issues. Once it's bedded down I'll bump it to a year.

Nice, but does this also apply to the XML-RPC interface? My distlib tests
started failing when I changed the URL to https with a "Network unreachable"
error. Changed back to http and the tests work again, but the XML-RPC calls
return http URLs for package downloads.

Regards,

Vinay Sajip



More information about the Catalog-SIG mailing list