[Distutils] Is this a bug?

Robert Collins robertc at robertcollins.net
Mon Oct 26 02:20:34 EDT 2015


Ok, so I'm not sure where the bug is, but I'd say in the save-password
code that should have escaped it. Not sure if that is in the disutils
core code or setuptools.

-Rob

On 26 October 2015 at 19:10, Nagy László Zsolt <gandalf at shopzeus.com> wrote:
>
>
>
>> I can't confirm or deny that with the data given:)
>>
>> Have a look in your .pypirc file - don't share it, it has your
>> password in it - but see if it looks sane. If you can't tell, mask out
>> your username and password and share the content. If you do that,
>> please be sure to note exactly how the % in your password was encoded
>> in the file.
>
> My .pypirc is very simple:
>
> [distutils]
> index-servers =
>     pypi
>
> [pypi]
> repository = https://pypi.python.org/pypi
> username:nagylzs
> password:******************
>
>
> The password of course is different, and it has a *single* percent sign
> in it. I had no .pypirc file at all. Here are the steps I have taken:
>
> 1. register online at pypi.python.org
> 2. create setup file for my package
> 3. run "setup.py register"  (python version 3.5)
>
> The registration was successful, and setup.py asked me if I want to save
> the password into the pypirc file. I said "YES" and the .pypirc file was
> created. Then I wanted to do "setup.py sdist upload" and I got the
> aforementioned traceback. Then I have deleted the "password:" line from
> the pypirc file and the upload succeeded (but of course, I had to retype
> the password.)
>
> Finally - as a workaround - I have changed my password so it does not
> contain % sign.



-- 
Robert Collins <rbtcollins at hp.com>
Distinguished Technologist
HP Converged Cloud


More information about the Distutils-SIG mailing list