TLSV1_ALERT_PROTOCOL_VERSION for files.pythonhosted.org on Mac OS python 2.7 #3293

stromnet · 2018-03-16T15:15:11Z

Might not be relevant, but https://status.python.org/incidents/btjtz01lzp88 mentions to report issues which may have relation to https://pypi.org/simple/ansible/, and at least I seem to use that..
Never had this issue before at least (re-installing ansible 2.3.2.0 after doing some tests with 2.4.0, as evident a lot of cached stuff has been fetched earlier).

$ pip --version
pip 9.0.1 from /Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages (python 2.7)
$ python
Python 2.7.11 (v2.7.11:6d1b6a68f775, Dec  5 2015, 12:54:16) 
[GCC 4.2.1 (Apple Inc. build 5666) (dot 3)] on darwin
Type "help", "copyright", "credits" or "license" for more information.

$ pip install --user ansible==2.3.2.0 -v
Collecting ansible==2.3.2.0
  1 location(s) to search for versions of ansible:
  * https://pypi.python.org/simple/ansible/
  Getting page https://pypi.python.org/simple/ansible/
  Looking up "https://pypi.python.org/simple/ansible/" in the cache
  No cache entry available
  Starting new HTTPS connection (1): pypi.python.org
  "GET /simple/ansible/ HTTP/1.1" 302 98
  Status code 302 not in [200, 203, 300, 301]
  Looking up "https://pypi.org/simple/ansible/" in the cache
  Current age based on date: 126
  Freshness lifetime from max-age: 600
  Freshness lifetime from request max-age: 600
  The response is "fresh", returning cached response
  600 > 126
  Analyzing links from page https://pypi.org/simple/ansible/
    Found link https://files.pythonhosted.org/packages/b6/bd/f463a82c46596e73ebd8bd98f080d7bdd2d69af0a121b5fbf74d9bd41ad9/ansible-1.0.tar.gz#sha256=f5e6ee589ae78e81bf10bd1fb743d0a091ae3f6f338fd87a9a4070f8c2878601 (from https://pypi.org/simple/ansible/), version: 1.0
    Found link https://files.pythonhosted.org/packages/0d/2e/0310daffa68b57a904b0c0b13cddab2a2b3d4a0c09d390f14f7de45a0444/ansible-1.1.tar.gz#sha256=5e7d2a46715484abcd2f59f846fb12699d64b420400cca4224ae6ec358f2d0a1 (from https://pypi.org/simple/ansible/), version: 1.1
    Found link https://files.pythonhosted.org/packages/e9/b0/ac34d0cf1182005b9cb36f76dbe0536294bed617a01b243cade9f58d5a3e/ansible-1.2.tar.gz#sha256=1fb5c697b814c8b4fc4a0dd29cdb09fab190a248e8bedb5ddbf2a1283cabb911 (from https://pypi.org/simple/ansible/), version: 1.2
    Found link https://files.pythonhosted.org/packages/5e/a9/48293bf83cf48e76c0e8d1d8241285c968c11adc340ab756802ab7c433c0/ansible-1.2.1.tar.gz#sha256=8a3f33253887f14d55cbe3cfb1c7c034a283c04f22f85da642d94e9139f18aa4 (from https://pypi.org/simple/ansible/), version: 1.2.1
    Found link https://files.pythonhosted.org/packages/12/a3/7b340e274cd3e6538b55e59ee15a5b82e445ee388553cda216206dd6df7c/ansible-1.2.2.tar.gz#sha256=a6b734ae986f99f6291b4e0a92b3729298dd39a6640243070d2ef586aaae8b23 (from https://pypi.org/simple/ansible/), version: 1.2.2
    Found link https://files.pythonhosted.org/packages/84/12/f05b1f28e8f13f53cc525a5e51651e0f5f9152f1687302e4483792bd5bef/ansible-1.2.3.tar.gz#sha256=0f12d180978e73dbb85bb224f73e8dd4e0e8b7d5bbca01719a93427405208c63 (from https://pypi.org/simple/ansible/), version: 1.2.3
    Found link https://files.pythonhosted.org/packages/a2/ff/73c8d8460f21f4d0c5ad32e2a19e46fbaa25f9759f96696449ae73fe0477/ansible-1.3.0.tar.gz#sha256=876d9eb8a8ae6e4ff943eb956c46e83d53e56ac6fb7890f83a23c3cc10508864 (from https://pypi.org/simple/ansible/), version: 1.3.0
    Found link https://files.pythonhosted.org/packages/dc/d2/7cfc153b10a4d94a7031e17e5e5c8d19237cb66ca0e40ae7d229e15ac2f5/ansible-1.3.1.tar.gz#sha256=19b001e45c934fe4c7fb055ef8d97afadf060c877b49bad7181c3edc1e3acb7b (from https://pypi.org/simple/ansible/), version: 1.3.1
    Found link https://files.pythonhosted.org/packages/92/74/9ee517af77aa5445f638f8c39a469e36928a2c27333ec7440a53591a99cc/ansible-1.3.2.tar.gz#sha256=c245061d41986a2756b144933bbd55348ab3ee912b9b30539dcaca4f7e77a0fb (from https://pypi.org/simple/ansible/), version: 1.3.2
    Found link https://files.pythonhosted.org/packages/fb/ce/3af0d73bde2c4cdd5879a0d58967e0e09c9c4a76633ba53d7939148dcfa5/ansible-1.3.3.tar.gz#sha256=c38994c18c8cecfcb2b0d9a23f943b66707baca50dd80030592234b7e91403fc (from https://pypi.org/simple/ansible/), version: 1.3.3
    Found link https://files.pythonhosted.org/packages/df/b2/c9c817c0ce4b975f5199db93de3960864c48b375565523b0e542cdf12e64/ansible-1.3.4.tar.gz#sha256=703ab03147f034dbc203c71f05f1a4fdb933942f68ff1af3dd301a6497581968 (from https://pypi.org/simple/ansible/), version: 1.3.4
    Found link https://files.pythonhosted.org/packages/d6/68/91b6c9cc0856a289f76dd96b6b71a54be18f01411d3241233a62648e49f1/ansible-1.4.tar.gz#sha256=7d38d8a1db20e539f146edda97f212e86fe2906384da92a219fe9678009608d5 (from https://pypi.org/simple/ansible/), version: 1.4
    Found link https://files.pythonhosted.org/packages/ab/33/58a99082f36966d6e86affdc0fc939c96438cb0368e87611d1e6a75e1e8e/ansible-1.4.1.tar.gz#sha256=bfd1bbf96b4802a4302262e10374c6c400a3394d4dfd6ef6a8f3f7cad77b7ac9 (from https://pypi.org/simple/ansible/), version: 1.4.1
    Found link https://files.pythonhosted.org/packages/0b/2d/0e4d97d250c2f90028f96e448094e901235d39d3802898146b3d74608f9b/ansible-1.4.2.tar.gz#sha256=5722ff53a4cfc7f7344988f9fb4904d896edb8c34dbff7e7a8e430d30ed0e139 (from https://pypi.org/simple/ansible/), version: 1.4.2
    Found link https://files.pythonhosted.org/packages/06/5a/ce17cddb6fc0859a5be42fd387eba379626ae550fcd80e7d74c586284d54/ansible-1.4.3.tar.gz#sha256=899e52f206fc28a77d959cecab36ce883d1a11524f3fa189e261cd86d74d5bb6 (from https://pypi.org/simple/ansible/), version: 1.4.3
    Found link https://files.pythonhosted.org/packages/0b/7a/cc98ad3e7b1f211a2a8a212af1402c11dbd773915370101c922b12e66f8d/ansible-1.4.4.tar.gz#sha256=d320a8a848ee499f57d2852c50bbb9d9414bd1099f4105b620382096754d2e02 (from https://pypi.org/simple/ansible/), version: 1.4.4
    Found link https://files.pythonhosted.org/packages/1c/8a/46733115b6469b0ac5d557af88284904335ac3c0306e1298a877d4906151/ansible-1.4.5.tar.gz#sha256=c88b526c6e0724c26276d96ba3beafaf2f15372703cbe86fc7884ce2df1f493f (from https://pypi.org/simple/ansible/), version: 1.4.5
    Found link https://files.pythonhosted.org/packages/38/63/7bf323520a0348f0a1dfb477be7dbe77a0d2bc7fde124bcd6c75c316f1d6/ansible-1.5.tar.gz#sha256=37c46b84a5525ad027e3828cd862089a20783944603c504630d0c9c84e62df45 (from https://pypi.org/simple/ansible/), version: 1.5
    Found link https://files.pythonhosted.org/packages/17/ae/007b7a9d943eefec09330f7eed1f0cd0bd111669335667780268d13f39d7/ansible-1.5.1.tar.gz#sha256=c0b48e9dd3770868961215b7243d1ba7be21c59606d6b8ac732673f2668ef102 (from https://pypi.org/simple/ansible/), version: 1.5.1
    Found link https://files.pythonhosted.org/packages/05/b3/5db6530d56f62ff3874174697ee0fa54e95db5d0b545bd6c9dc575a9d8cb/ansible-1.5.2.tar.gz#sha256=36cf7e378137074466a07f8568c98940031e3a0b66d3844fac788907e919875a (from https://pypi.org/simple/ansible/), version: 1.5.2
    Found link https://files.pythonhosted.org/packages/8a/5f/523ddc547a84ee68d4c00e3e118442072612afcaae4289195cdf6936f4e0/ansible-1.5.3.tar.gz#sha256=25bfecb468616ae7117fce1036de663e9fc8d2a96d71cbfabe6153ca3c781a4e (from https://pypi.org/simple/ansible/), version: 1.5.3
    Found link https://files.pythonhosted.org/packages/39/b3/aba24a99152e3b27d5217c328c00e9d4d725a69b116da462f75b497348d6/ansible-1.5.4.tar.gz#sha256=39bcc5c9888828dde04ab3f0f4984a01c3eafbf6813d623dd39fc3e8b4f3e6c8 (from https://pypi.org/simple/ansible/), version: 1.5.4
    Found link https://files.pythonhosted.org/packages/2a/de/ac1ab42ba5f940a1e9cf9eb992c5a8d935101345f47799b3478dfc612444/ansible-1.5.5.tar.gz#sha256=e6414599d44ab805ffd76273db4970d1f09b50ea5837bc8dfcdeae7254d9d45f (from https://pypi.org/simple/ansible/), version: 1.5.5
    Found link https://files.pythonhosted.org/packages/b9/b5/170c1892ca52a3df6dd69da45c8f79f8d0ae812b41a6854389510039a08e/ansible-1.6.tar.gz#sha256=7f8f34e6e8a1a1348901b2e823ee74bea73c5d3b4c251d62826bf1bd6b130736 (from https://pypi.org/simple/ansible/), version: 1.6
    Found link https://files.pythonhosted.org/packages/3e/21/f8d469c0220b41f761f779f9c791fd7b49eb2c97f58c18dad0eda64dfb14/ansible-1.6.1.tar.gz#sha256=1773e4f40339a16ea6f308e008aee0c13738b3bfbd10a82689fc42bbd3eb315c (from https://pypi.org/simple/ansible/), version: 1.6.1
    Found link https://files.pythonhosted.org/packages/42/47/7e4162a49d6788679cf24fd0ca69bb44a00bf3d9d6584be8345ab67166a2/ansible-1.6.2.tar.gz#sha256=237769ca05b75a6df7ca8239357903efb54fa679d38bab0032573298a8feadc8 (from https://pypi.org/simple/ansible/), version: 1.6.2
    Found link https://files.pythonhosted.org/packages/63/72/206d4ad00c5bf6ee060a157aab609feb5ead5f1fae02fd599619762b8736/ansible-1.6.3.tar.gz#sha256=1280d93174dd1b39f72c7302a36c5e728c9e52dd3995dd815ca1a57974256d44 (from https://pypi.org/simple/ansible/), version: 1.6.3
    Found link https://files.pythonhosted.org/packages/3d/82/d2ee9c9ead96bcb44dc7e2ca9487e0369ae28f6ac00d02288782d26881e8/ansible-1.6.4.tar.gz#sha256=8822c920be476f09b18265d4e04aca4bee1ee66fdb22e462a32cf98ffb0e87c0 (from https://pypi.org/simple/ansible/), version: 1.6.4
    Found link https://files.pythonhosted.org/packages/19/ad/897a954dfc632ca710e8b541653ee47b50a219a75dcdc736a16b62660096/ansible-1.6.5.tar.gz#sha256=d19ed70298e778beab14a92a7d7739be5e7c670d3fc2ff3be9879c9a08520397 (from https://pypi.org/simple/ansible/), version: 1.6.5
    Found link https://files.pythonhosted.org/packages/e2/09/7c4f5d377ae64013735980fc1d9995cee3b58f0831c20214919fba03c3b4/ansible-1.6.6.tar.gz#sha256=bb9f5145ff051f38b0d533b86e3f661af180346945232d000aaab401f6c3f4fe (from https://pypi.org/simple/ansible/), version: 1.6.6
    Found link https://files.pythonhosted.org/packages/5a/06/40c2fed622050ddd672a53f61e760489629ffaeba3ef053c99bd352c3a47/ansible-1.6.7.tar.gz#sha256=87458f479061abcbb0d81f2e57955ed2e21a81fd8727733f5831890cfb946420 (from https://pypi.org/simple/ansible/), version: 1.6.7
    Found link https://files.pythonhosted.org/packages/73/25/08508b1d7d0834960a1b87f0e42fb2ba52d8f120eff0e8a98ceb19d95586/ansible-1.6.8.tar.gz#sha256=1a47ea5cf339572c46bc346dea6c27e4fe828be052f8b7c0f7cc1496dcd9d616 (from https://pypi.org/simple/ansible/), version: 1.6.8
    Found link https://files.pythonhosted.org/packages/49/e7/f4b2e3a6bbf90e346ca0b73271fc3b2dac973816a870e854f1495c69098e/ansible-1.6.9.tar.gz#sha256=1fe54105b593009390a7c601ccd8aafd693cdc5a8c6c478059a485d9a0eff409 (from https://pypi.org/simple/ansible/), version: 1.6.9
    Found link https://files.pythonhosted.org/packages/00/bf/f2990442bec58eb893322ea82ff8303581add25ffc429d212ae35166a41a/ansible-1.6.10.tar.gz#sha256=3d03c42073c4b6944f23dc06e150912f4f106d65fa00290c03f8972fd70e3c71 (from https://pypi.org/simple/ansible/), version: 1.6.10
    Found link https://files.pythonhosted.org/packages/2f/d4/3a76a12463aebc006bce192e5e3de3a48d2a419bccb946849b10b3e27373/ansible-1.7.tar.gz#sha256=3dc7174d8fe3f6c3cb13b988e620a52d4d8cae3b7922a46f59005a728821679e (from https://pypi.org/simple/ansible/), version: 1.7
    Found link https://files.pythonhosted.org/packages/00/33/4645cd3a251bd87740cd256cb541257ee6072b4c5e1b9dadb9413a8e0a5b/ansible-1.7.1.tar.gz#sha256=d8fa163ab3730a03d50bc0766809cb36122b6c8be880b3bcde7e25a5b5143f6a (from https://pypi.org/simple/ansible/), version: 1.7.1
    Found link https://files.pythonhosted.org/packages/5c/ed/39e054fc5add40bb94d24db0762f3483da3b190fcfe5b234ea6f0e244bdd/ansible-1.7.2.tar.gz#sha256=a17ce716b47f831ea9c88bdab33753fa3870c7ea8a1ee5e8c1287ca40c8498ac (from https://pypi.org/simple/ansible/), version: 1.7.2
    Found link https://files.pythonhosted.org/packages/f8/0b/84bdf18819878b8cd9c60633856dd0b5e57ca74c95b9c26554e2842db8a3/ansible-1.8.tar.gz#sha256=d5e4e414834e119083ee01d6a40668d9a69b044b861d78c3fdfb6beb97660b09 (from https://pypi.org/simple/ansible/), version: 1.8
    Found link https://files.pythonhosted.org/packages/9f/bd/2d950883179d708e5b5b6a26f0b47a01b19de220a3a0d9d91f93facbb667/ansible-1.8.1.tar.gz#sha256=cb69f0bd64f01260592c80d978e030051844a2abbf51c8f1e2cff262ed041eee (from https://pypi.org/simple/ansible/), version: 1.8.1
    Found link https://files.pythonhosted.org/packages/47/42/2ea090d439beb5c1d550e692f2e69d588fea2e27781b3de6042b316479cb/ansible-1.8.2.tar.gz#sha256=2cd01ff4d67acb410bae0a9438956f6fc36d01babd956b0dc3b700620f2372b9 (from https://pypi.org/simple/ansible/), version: 1.8.2
    Found link https://files.pythonhosted.org/packages/60/aa/682a7055d3987664c7d843e4eb4348a9e084be9810f2797ac9ddc6f15f9f/ansible-1.8.3.tar.gz#sha256=c2ff9638d58cd891730988e449603c09c8fadd0259a41b27545b061ff3d9e0cd (from https://pypi.org/simple/ansible/), version: 1.8.3
    Found link https://files.pythonhosted.org/packages/5b/6d/47b1969b7ae1560b24cdf093bc6bcfc93e9361abbb5078329ae3ed75f442/ansible-1.8.4.tar.gz#sha256=d37c04b3abce9b036a6c8311fccb360c5cbc3ec895445f805243b0448d239ec1 (from https://pypi.org/simple/ansible/), version: 1.8.4
    Found link https://files.pythonhosted.org/packages/c5/7f/d1fd416770775ffb216a1269bbe6daedc66dd6b3a786075711829f8ee26d/ansible-1.9.0.1.tar.gz#sha256=b2193fd9a4061ab624fa67311796419a759de06b4f321d37169b22ba3831331c (from https://pypi.org/simple/ansible/), version: 1.9.0.1
    Found link https://files.pythonhosted.org/packages/cd/e3/c2b52043b44aede4381b9eeb185554448afdfdf2608924a4b094bf6c1a03/ansible-1.9.1.tar.gz#sha256=a6f975d565723765a4d490ff40cede96833a745f38908def4950a0075f1973f5 (from https://pypi.org/simple/ansible/), version: 1.9.1
    Found link https://files.pythonhosted.org/packages/a7/1f/246f5766b51e354347f12422ab5ed04530c04d50dfe0bf14fc63a56c4c96/ansible-1.9.2.tar.gz#sha256=c25ef4738b08fdfb3094247c012f3fd1b29972acbd37f988070b2a85f5fbee00 (from https://pypi.org/simple/ansible/), version: 1.9.2
    Found link https://files.pythonhosted.org/packages/55/29/dbd3fee20def918fa401faf1666e5a139415d8b4d967086d96ea10e0af0d/ansible-1.9.3.tar.gz#sha256=2594f642fd800056a427c1026410dc6ed8dfa7c0033f5c3d187abdb2b0d4eeed (from https://pypi.org/simple/ansible/), version: 1.9.3
    Found link https://files.pythonhosted.org/packages/5b/d6/4f84e1e6e42f758ede5ba7dd3ae043c3942c9986aae618907b4269482e18/ansible-1.9.4.tar.gz#sha256=972c2face49f1577bd0ff7989440bfe2820e66fb10d7579915cc536bccfa6fe3 (from https://pypi.org/simple/ansible/), version: 1.9.4
    Found link https://files.pythonhosted.org/packages/ae/2e/3c962b3483faa35e8d5173442e7ac58eedf3633f5457f52076f4125aa5a5/ansible-1.9.5.tar.gz#sha256=6ba3539d98d993089bea0eb4ee83a04608aff900086040f11a77f2124dccbd8e (from https://pypi.org/simple/ansible/), version: 1.9.5
    Found link https://files.pythonhosted.org/packages/c3/b5/7329497d4b28d84011e47c9605a686c5f26b68719345e9174fc19084bfbe/ansible-1.9.6.tar.gz#sha256=50773781b1e76f2885bbeb2351a97cf1c6a29239d3e073da939a104e7e81ee5d (from https://pypi.org/simple/ansible/), version: 1.9.6
    Found link https://files.pythonhosted.org/packages/64/3c/b31bfc2d1ecc96922924a1deb269e42d0de886f94240daf6ceef9874c7a6/ansible-2.0.0.0.tar.gz#sha256=63a9386ae96bd6ae3e87b9e9fecef3f3f919f333ed8db22292e37df7643cb3f6 (from https://pypi.org/simple/ansible/), version: 2.0.0.0
    Found link https://files.pythonhosted.org/packages/57/b1/8027eea673afba6495806286ee25f4c6cb8c2450e43e3e46b861132caf03/ansible-2.0.0.1.tar.gz#sha256=1085c1fae3b59f8e55a64b949489f1ddcd811a0c32d9df8ac18abf44a430f3b5 (from https://pypi.org/simple/ansible/), version: 2.0.0.1
    Found link https://files.pythonhosted.org/packages/42/eb/0f78ac9b8abbc797ce08955bc9ea1b5013937e6270c4e517d369097fb658/ansible-2.0.0.2.tar.gz#sha256=27db0b99113fab85b1430c361c7790a0aa7f5c614c9af13362e2adbba07e5828 (from https://pypi.org/simple/ansible/), version: 2.0.0.2
    Found link https://files.pythonhosted.org/packages/e8/a5/db83bcaf2c823b8fb2df01f49a3835b62f5b757e27ecb31bcb472a789e9a/ansible-2.0.1.0.tar.gz#sha256=cddc4fa6af4c1be6cd1d6634de1bd0397abad921c76b32cab6722c042744ee5d (from https://pypi.org/simple/ansible/), version: 2.0.1.0
    Found link https://files.pythonhosted.org/packages/b3/0e/5f3ee8884866a3d5e3b8ba86e9caa85ecdec75adabac8924b1c122339e7f/ansible-2.0.2.0.tar.gz#sha256=373a2e50319d90da50948e3faf1c033464b7302200e0199da8981d24646d4387 (from https://pypi.org/simple/ansible/), version: 2.0.2.0
    Found link https://files.pythonhosted.org/packages/26/6e/3974858f047641de6ceffad0f51ab7cafa5f2c09d1474c6221ec96434f58/ansible-2.1.0.0.tar.gz#sha256=403443b55f6522cf86f9b41544a9b6b81f7d27f088446e85334d5d7a6317ccad (from https://pypi.org/simple/ansible/), version: 2.1.0.0
    Found link https://files.pythonhosted.org/packages/26/7c/4c717d39afac30bc324744a35fda077c969d3881daf71d396969958e01b7/ansible-2.1.1.0.tar.gz#sha256=8d2d4f39341b30257b83830a682b559c22904d81fd60b4a3e8b96f055f031197 (from https://pypi.org/simple/ansible/), version: 2.1.1.0
    Found link https://files.pythonhosted.org/packages/5f/51/9f54f20180eb323a80451c9f48f508bd5bbe03008c136e125b4ce3946fcf/ansible-2.1.2.0.tar.gz#sha256=9c37a7bd397c05ab8ca3fcc49417649ea49b9133d4cd9500408235617d1621eb (from https://pypi.org/simple/ansible/), version: 2.1.2.0
    Found link https://files.pythonhosted.org/packages/00/7a/08c9157cbd5f65ed4aa64946cbd0a4af7da6034bcc9185a2786bd9d168d5/ansible-2.1.3.0.tar.gz#sha256=a3bb0487687b70d5586277f0f0c9a419d05ad1811b81fa18535a568e5d064c0b (from https://pypi.org/simple/ansible/), version: 2.1.3.0
    Found link https://files.pythonhosted.org/packages/c9/a3/057fc36cb2f103b4a1b9333c53401fbfbbd88619cd3479258d2ea0d38ace/ansible-2.1.4.0.tar.gz#sha256=e9f1033356557dff2fdbaa1b13a7cc8fb2ed2b15129c84d0c53f63001232cc16 (from https://pypi.org/simple/ansible/), version: 2.1.4.0
    Found link https://files.pythonhosted.org/packages/7e/a6/2b56334a881407e544dcc45b9892188c0a56ab8d2ad523b79cddede189b7/ansible-2.1.5.0.tar.gz#sha256=11a214a5623f9e0032b3e9036211a046ab3c0d3fb6586809c00b8cabd11f6bde (from https://pypi.org/simple/ansible/), version: 2.1.5.0
    Found link https://files.pythonhosted.org/packages/f7/41/bfd21ae541eced8eeb61cbf8c45cb43effb3f5143d68a4dc06d2726f7872/ansible-2.1.6.0.tar.gz#sha256=e5d7c88412b9dbf5a5efec774648c1d1018491f1ac3e506f0004262ab3aa1a3a (from https://pypi.org/simple/ansible/), version: 2.1.6.0
    Found link https://files.pythonhosted.org/packages/48/da/5e51cf931e4c7849ba698654877e2951ade8f842f28f0c904453a1d317d7/ansible-2.2.0.0.tar.gz#sha256=d9f198d293394ce0f8ba802561b21368888e3301036a706b5584641b49408586 (from https://pypi.org/simple/ansible/), version: 2.2.0.0
    Found link https://files.pythonhosted.org/packages/6b/2d/419f5fd14fd728a5fae413029eef536f089d41cc044135def3d542348f87/ansible-2.2.1.0.tar.gz#sha256=63a12ea784c0f90e43293b973d5c75263634c7415e463352846cd676c188e93f (from https://pypi.org/simple/ansible/), version: 2.2.1.0
    Found link https://files.pythonhosted.org/packages/01/d5/b19c20595b2705d8bac61a803cecaaeb8cad4e6227df152335a18a9a0913/ansible-2.2.2.0.tar.gz#sha256=efd9c574168ac1916dd57f7c88d4dd2e13ef816af0ee49a8d34c77567886e4c2 (from https://pypi.org/simple/ansible/), version: 2.2.2.0
    Found link https://files.pythonhosted.org/packages/ba/41/83e024cdf5ca3b53c14261f268da7512ca395b893cab98c0639f9644b6b7/ansible-2.2.3.0.tar.gz#sha256=de18ab1cf0712252e928dd1226b2c058d5345ef7377a01e0601a268fcd512a90 (from https://pypi.org/simple/ansible/), version: 2.2.3.0
    Found link https://files.pythonhosted.org/packages/65/6e/3df94b6bf0e2d8b7d1e9e4e384e312c49c59fce45ccfce3d01dd98084395/ansible-2.3.0.0.tar.gz#sha256=299f3907cd566a20e163942fa82b6afc86ef89c2726ba503b90c1a651e82a458 (from https://pypi.org/simple/ansible/), version: 2.3.0.0
    Found link https://files.pythonhosted.org/packages/42/84/2a4a9274a8062684f71fbb75939d78c29829f81918a72bc94b5ccbd68950/ansible-2.3.1.0.tar.gz#sha256=cd4b8f53720fcd0c351156b840fdd15ecfbec22c951b5406ec503de49d40b9f5 (from https://pypi.org/simple/ansible/), version: 2.3.1.0
    Found link https://files.pythonhosted.org/packages/21/dc/ad51ca12ec4f7516d0befbc14312930a484a066b22192dac9c3814e349c4/ansible-2.3.2.0.tar.gz#sha256=0563b425279422487f12616ef719f6e558373b258dcf47e548d119be8d3168eb (from https://pypi.org/simple/ansible/), version: 2.3.2.0
    Found link https://files.pythonhosted.org/packages/d4/61/4080493544ecec71e770a20aa94cbd35a382813fac4fddb97573ae50bc7d/ansible-2.3.3.0.tar.gz#sha256=da2a715f6ca14a76001cc0f4bd1e44024328b3c2dad2c946dc9c7ed2d7c30afa (from https://pypi.org/simple/ansible/), version: 2.3.3.0
    Found link https://files.pythonhosted.org/packages/1e/7c/385ccbeb0fbefc13eaef53df76e42ef778170bdfe5fd425879735b43106e/ansible-2.4.0.0.tar.gz#sha256=1a276fee7f72d4e6601a7994879e8467edb763dacc3e215258cfe71350b77c76 (from https://pypi.org/simple/ansible/), version: 2.4.0.0
    Found link https://files.pythonhosted.org/packages/1a/53/6d6c0d46a8e6f6da7826eb57c1c755d183b2a766dd275e493daa447c6d8b/ansible-2.4.1.0.tar.gz#sha256=da61afb29cc5bd6bc4737a2da06e673fb6fccc3ae2685130d19ab3a8e404fb6a (from https://pypi.org/simple/ansible/), version: 2.4.1.0
    Found link https://files.pythonhosted.org/packages/4f/65/ae3ad8589c38f9e04ebc8a824c2880eb4f9e603a1f62b5f5a3f938e524b0/ansible-2.4.2.0.tar.gz#sha256=315f1580b20bbc2c2f1104f8b5e548c6b4cac943b88711639c5e0d4dfc4d7658 (from https://pypi.org/simple/ansible/), version: 2.4.2.0
    Found link https://files.pythonhosted.org/packages/ed/84/09e8dd117081db2077cf08dbd670a3454ab0265b05e8e7f75482492b46f0/ansible-2.4.3.0.tar.gz#sha256=0e98b3a56928d03979d5f8e7ae5d8e326939111b298729b03f00b3ad8f998a3d (from https://pypi.org/simple/ansible/), version: 2.4.3.0
    Found link https://files.pythonhosted.org/packages/ff/8b/75b34e2bd1bac5109c63a44a99f36bcb3acfec95e2955074ac713337b6b2/ansible-2.5.0a1-py2-none-any.whl#sha256=017ee05909680321cd6e302f24cc91e6bfbb8063880258c88c00f694737fd6f4 (from https://pypi.org/simple/ansible/), version: 2.5.0a1
    Found link https://files.pythonhosted.org/packages/1b/15/9d86272cb939f03502cbc0ca441152b107e6b50dc03429f46b25dc3405a5/ansible-2.5.0a1.tar.gz#sha256=629db1896086495a82a13e72078d7f1dc4f518d2c6af682d1cff6520e1c506c7 (from https://pypi.org/simple/ansible/), version: 2.5.0a1
    Found link https://files.pythonhosted.org/packages/bc/af/fd4f56403ba80d2001d50491df317acc0931ed307d8647f508f4ac482a9d/ansible-2.5.0b1-py2.py3-none-any.whl#sha256=c48f8312b002457bef25bbd1831796e8030de21fd6e37a8023cfa05277b17fea (from https://pypi.org/simple/ansible/), version: 2.5.0b1
    Found link https://files.pythonhosted.org/packages/6a/c6/799f517b9e934959047b5028e6fc574e537fcd338f454c6d4d9c0f2f6560/ansible-2.5.0b1.tar.gz#sha256=658166a5c5218464a775c4c9ddfe9e5f0971225d001f618df0aadf2e24fb9602 (from https://pypi.org/simple/ansible/), version: 2.5.0b1
    Found link https://files.pythonhosted.org/packages/6a/49/e1890d47af33c9d49955c56f57e4dfa820bb3cf85d7092e1117c679a3980/ansible-2.5.0b2-py2.py3-none-any.whl#sha256=325af7e9560b30f5d01d093b01045379fa1dee41e30a219f306726c33b85e64f (from https://pypi.org/simple/ansible/), version: 2.5.0b2
    Found link https://files.pythonhosted.org/packages/47/56/c222258d86c013f332ec68ac0b30c0891a3826acc44b2a569a9cbd28efe1/ansible-2.5.0b2.tar.gz#sha256=e12eb3d43bc7f7fda446af1a1c915199fdd7a70c683abbad9f863367bf72c51f (from https://pypi.org/simple/ansible/), version: 2.5.0b2
    Found link https://files.pythonhosted.org/packages/60/8f/814d7f1aaad3db09b08f12774de3d39a0645f3fdd3d2e1d4970fe0a3fae8/ansible-2.5.0rc1-py2.py3-none-any.whl#sha256=9e64bcc2a5f43976b3378ff38efcf14cc40c6220eb0be58f055815a358f398b2 (from https://pypi.org/simple/ansible/), version: 2.5.0rc1
    Found link https://files.pythonhosted.org/packages/20/8a/2d100a9e92105141f55fb54c5829149f87b32c492d51bac943bfef909278/ansible-2.5.0rc1.tar.gz#sha256=936e4f4619e243182462973a6a091f14d5032e081ad13f4251b96e59761fca7f (from https://pypi.org/simple/ansible/), version: 2.5.0rc1
    Found link https://files.pythonhosted.org/packages/74/3d/8c66f25e24d2855216ccb9a4f6804d94e77a3afb6d6037011310bfeadad6/ansible-2.5.0rc2-py2.py3-none-any.whl#sha256=8a7d67e12583412f81dfc2fe355a8eae55d865c9d97eaa7024dd9a68c7dd123d (from https://pypi.org/simple/ansible/), version: 2.5.0rc2
    Found link https://files.pythonhosted.org/packages/8c/f3/ee7b5612f13989216c0f64995e2a8542b0db0d2a95230edeff2b2722044c/ansible-2.5.0rc2.tar.gz#sha256=609066a807778228b4c3cb1b5f121c7d29d3abbf060079de65e434a9896f3efd (from https://pypi.org/simple/ansible/), version: 2.5.0rc2
    Found link https://files.pythonhosted.org/packages/4d/6a/8b583c1918d84e4b6d47f60472cc78f5b4bf3e5255b551a9c4ea5126c48c/ansible-2.5.0rc3-py2.py3-none-any.whl#sha256=2aec7e7b2cea845a08c0eace09fd2d7476d7e5b96123454c634bd4ab885808bb (from https://pypi.org/simple/ansible/), version: 2.5.0rc3
    Found link https://files.pythonhosted.org/packages/66/38/ca216c18e8ba441ad428aee9e4e96e7a755e31f26dd5c4f34feab0d89295/ansible-2.5.0rc3.tar.gz#sha256=0fde8eb02a34ba1936a52da423d339ac9bded6aeac8d13d90f1f0be812c5b877 (from https://pypi.org/simple/ansible/), version: 2.5.0rc3
  Using version 2.3.2.0 (newest of versions: 2.3.2.0)
  Looking up "https://files.pythonhosted.org/packages/21/dc/ad51ca12ec4f7516d0befbc14312930a484a066b22192dac9c3814e349c4/ansible-2.3.2.0.tar.gz" in the cache
  No cache entry available
  Starting new HTTPS connection (1): files.pythonhosted.org
Cleaning up...
Exception:
Traceback (most recent call last):
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/basecommand.py", line 215, in main
    status = self.run(options, args)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/commands/install.py", line 324, in run
    requirement_set.prepare_files(finder)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/req/req_set.py", line 380, in prepare_files
    ignore_dependencies=self.ignore_dependencies))
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/req/req_set.py", line 620, in _prepare_file
    session=self.session, hashes=hashes)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/download.py", line 821, in unpack_url
    hashes=hashes
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/download.py", line 659, in unpack_http_url
    hashes)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/download.py", line 853, in _download_http_url
    stream=True,
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/_vendor/requests/sessions.py", line 488, in get
    return self.request('GET', url, **kwargs)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/download.py", line 386, in request
    return super(PipSession, self).request(method, url, *args, **kwargs)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/_vendor/requests/sessions.py", line 475, in request
    resp = self.send(prep, **send_kwargs)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/_vendor/requests/sessions.py", line 596, in send
    r = adapter.send(request, **kwargs)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/_vendor/cachecontrol/adapter.py", line 47, in send
    resp = super(CacheControlAdapter, self).send(request, **kw)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/pip/_vendor/requests/adapters.py", line 497, in send
    raise SSLError(e, request=request)
SSLError: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:590)

The text was updated successfully, but these errors were encountered:

ewdurbin · 2018-03-16T15:33:52Z

@stromnet thanks for your report. Our CDN provider is deprecating support for TLS protocols 1.0 and 1.1 on June 30, 2018. In preparation for that, the new CDN endpoint for pypi.org only has support for TLSv1.2.

What is interesting here is that the initial requests to pypi.org succeeded... It's not clear to me why subsequent requests to files.pythonhosted.org are failing. cc @dstufft

pauldmccarthy · 2018-03-16T15:52:02Z

I am experiencing the same problem on Python 2.7, 3.4, and 3.5. Working on Python 3.6. Can I ask how long this testing period is going to last for?

ewdurbin · 2018-03-16T15:53:03Z

We're just over an hour in, so we'll probably back it off now. Thanks for confirming the report @pauldmccarthy

ewdurbin · 2018-03-16T16:04:18Z

Determination on cause of issue:

Although pypi.org and files.pythonhosted.org share a fastly service, files.pythonhosted.org is terminated by a separate TLS endpoint which does not have TLSv1.0/TLSv1.1 enabled due to being on the shared certificate provided by our CDN.

alex · 2018-03-17T20:53:40Z

There is a new version of pip out which should resolve this issue for macOS users.

stromnet · 2018-03-19T08:44:44Z

It's working again now, so cannot verify with updated pip, but indeed it looks like 9.0.2 has related changes: https://pip.pypa.io/en/stable/news/

brainwane · 2018-04-02T13:55:59Z

I'm writing a note to post to https://mail.python.org/mailman/listinfo/pythonmac-sig about this, to spur users of pre-10.12 macOS versions to upgrade to pip 9.0.3. Is this accurate?

Mac users:

If you are running macOS/OS X version 10.12 or older, you need to upgrade to the latest pip (9.0.3) to connect to the Python Package Index securely:

curl https://bootstrap.pypa.io/get-pip.py | python

Pip 9.0.3 supports TLSv1.2 when running under system Python on macOS < 10.13. Official release notes: https://pip.pypa.io/en/stable/news/

Context:

As PSF blogged last year https://pyfound.blogspot.com/2017/01/time-to-upgrade-your-python-tls-v12.html , on June 30, 2018, Python.org sites are going to entirely stop supporting TLS versions 1.0 and 1.1, because our CDN provider is deprecating support for those versions.

We are launching the new PyPI (in beta at https://pypi.org) this month and replacing the legacy PyPI (https://pypi.python.org). Here's the beta announcement for the new PyPI: https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html

Warehouse, the codebase for the new PyPI, does not support TLS 1.0 or 1.1.

We're warning our users early with this message. Also, as of late March, the Python Package Index has started doing brownouts of the deprecated TLS versions. For some portion of each hour, anyone attempting to access PyPI with TLSv1.0 or TLSv1.1 will get a 403 response with an informative error. As we get closer to the deadline, we will be ramping up the amount of time the endpoint is down for the deprecated TLS versions. The ultimate goal is to have it be 100% unavailable on and after April 8th, prior to the final deadline (because we can give a good error message -- once June 30th hits, it will just be an uninformative OpenSSL error).

More info:

Thank you. Please publicize this.

di · 2018-04-02T14:56:06Z

@brainwane

Warehouse does not support TLS 1.0 or 1.1.

Might be worthwhile to mention that this is due to our CDN provider deprecating support for 1.0 & 1.1.

pfmoore · 2018-04-02T16:22:07Z

@brainwane Looks good to me. @dstufft knows the details better than I do, but I think this covers the key points

brainwane · 2018-04-02T21:11:53Z

Got an ok from Donald, touched up the prose a bit, and posted to distutils-sig and a few other places.

gvanrossum · 2018-04-03T22:14:27Z

I have a question of clarification. What should users of MacOS 10.13 or newer do? Is pip 9.0.1 safe there, do they all have pip 9.0.3, or should they lose all hope?

alex · 2018-04-03T22:16:28Z

@gvanrossum System Python on macOS 10.13 should be unaffected, since Apple upgraded the OpenSSL it links against.

I think it's theoretically possible on macOS 10.13 to have virtualenvs with Pythons created under 10.12; in those cases you should either destroy and recreate the virtualenv, or upgrade pip to 9.0.3

gvanrossum · 2018-04-03T22:57:04Z

Also I guess if one installed any Python version from python.org one would be affected on 10.13 right? Or do I misunderstand how this works?

I noticed ensurepip in 2.7.14 still has the pip 9.0.1 bundle (though the git repo was updated). Does this require a 2.7.15 release then? (And 3.{5,6} release too?)

alex · 2018-04-03T22:59:40Z

I've forgotten what we do about OpenSSL for python.org installers. The short answer is that versions that use the system OpenSSL are ok on either macOS 10.13+ or pip 9.0.3+; versions that bundle their own OpenSSL are fine on any macOS.

…

On Tue, Apr 3, 2018 at 6:57 PM, Guido van Rossum ***@***.***> wrote: Also I guess if one installed any Python version from python.org one would be affected on 10.13 right? Or do I misunderstand how this works? I noticed ensurepip in 2.7.14 still has the pip 9.0.1 bundle (though the git repo was updated). Does this require a 2.7.15 release then? (And 3.{5,6} release too?) — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#3293 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAADBJud2sV8XrcDhWgUx8aJTBm2Yxuxks5tk_5DgaJpZM4St9U7> .

-- "I disapprove of what you say, but I will defend to the death your right to say it." -- Evelyn Beatrice Hall (summarizing Voltaire) "The people's good is the highest law." -- Cicero GPG Key fingerprint: D1B3 ADC0 E023 8CA6

gvanrossum · 2018-04-03T23:01:10Z

Who should I ask then?

alex · 2018-04-03T23:02:20Z

Ned Deily may know off hand which versions of Python use which OpenSSL packaging strategy.

…

On Tue, Apr 3, 2018 at 7:01 PM, Guido van Rossum ***@***.***> wrote: Who should I ask then? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#3293 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAADBJtuGF8PMsX9o5Kwk978TpQKPAG_ks5tk_84gaJpZM4St9U7> .

-- "I disapprove of what you say, but I will defend to the death your right to say it." -- Evelyn Beatrice Hall (summarizing Voltaire) "The people's good is the highest law." -- Cicero GPG Key fingerprint: D1B3 ADC0 E023 8CA6

ned-deily · 2018-04-04T03:24:55Z

tl;dr [UPDATE 2018-05-02: Python 2.7.15 is now released so all current python.org macOS installers now include up-to-date versions of OpenSSL. If you are using a python.org macOS Python 2.7.14 or earlier, please download and install Python 2.7.15. This should resolve any issues with using pip to download from PyPI. If for some reason, you cannot upgrade read on.] The versions of pip bundled with recent python.org macOS installers will continue to be usable with PyPI / Warehouse except for the 2.7.14 (and earlier) 10.6+ 64-bit/32-bit variant which needs to be updated to pip 9.0.3 or 10.x.

To update pip for 2.7.14, you may need to manually download and install it from PyPI; for example:

which python2.7
    /Library/Frameworks/Python.framework/Versions/2.7/bin/python2.7
    /usr/local/bin/python2.7
#     (either one of the two lines above)
# If the version, date, and time info differ from this,
#   you are not using the affected python.org Python 2.7.14
#   and your results may differ.
python2.7 -c 'import sys;print(sys.version)'
    2.7.14 (v2.7.14:84471935ed, Sep 16 2017, 12:01:12)
    [GCC 4.2.1 (Apple Inc. build 5666) (dot 3)]
python2.7 -m pip --version
    pip 9.0.1 from /Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages (python 2.7)open https://pypi.org/project/pip/#files

# Try to self-upgrade pip.  It may or may not work.
python2.7 -m pip install --upgrade --ignore-installed pip
    Collecting pip
      Could not find a version that satisfies the requirement pip (from versions: )
    No matching distribution found for pip

# if the upgrade fails, you will need to manually download pip.
# Go to the pip page on PyPi:
open https://pypi.org/project/pip/#files

# In the web browser page that opens, click on a pip download file name
#   for example, pip-10.0.0-py2.py3-none-any.whl

# Then determine to which folder your browser downloads files.
# In this case it is Downloads.
mdfind -name pip-10.0.0-py2.py3-none-any.whl
    /Users/sysadmin/Downloads/pip-10.0.0-py2.py3-none-any.whl

# Use that file name to manually install the new pip.
python2.7 -m pip install /Users/sysadmin/Downloads/pip-10.0.0-py2.py3-none-any.whl
    [...]
    Successfully installed pip-10.0.0
python2.7 -m pip --version
    pip 10.0.0 from /Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages (python 2.7)

Details:
Current versions with a bundled pip:

3.7.x (in pre-release) - use their own bundled OpenSSL 1.1.0
3.6.x (all) - use their own bundled OpenSSL 1.0.2
2.7.15 and later (all) - use their own bundled OpenSSL 1.0.2

Recently superseded versions with a bundled pip:

2.7.14 (10.5+ 32-bit-only variant, deprecated) - use their own bundled OpenSSL1.0.2
2.7.14 (10.6+ 64-bit/32-bit variant) - links with system OpenSSL 0.9.8
Binary installers are no longer current nor produced for any earlier versions of Python 3 or 2, as they are all either in security-fix-only mode or are retired.

Prior to the release of Python 2.7.15, the only problematic current python.org macOS was the 2.7 10.6+ 64-bit/32-bit variant (currently 2.7.14, released in 2017-09). For legacy compatibility reasons, that one still dynamically links with the deprecated Apple-supplied system OpenSSL libraries (0.9.8 series) and so the bundled pip included with that installer will no longer download from the updated PyPI Warehouse. Updating pip to the recent 9.0.3 version does restore PyPI connectivity, as that version of pip no longer relies on Python's shipped _ssl module. For 2.7.15, all variants use a bundled version of OpenSSl and we ship a recent released version of pip.

(By the way, in macOS 10.13+ (and perhaps earlier) Apple ships both the old 0.9.8+ OpenSSL and newer LibreSSL 2.2.7 libraries since they are not ABI-compatibile. The Apple-supplied system Python (2.7.10) now links with the LibreSSL version. Apple also does not ship a version of pip; they do ship setuptools / easy_install, currently 18.5).

dstufft · 2018-04-04T03:30:52Z

You can execute curl https://bootstrap.pypa.io/get-pip.py | python to get an updated pip as well. I'm not sure which option is easier to document for folks, but both work.

ned-deily · 2018-04-04T03:33:11Z

One problem with curl is that it may not work on older versions of macOS. Downloading through the web has a better chance of working as the browser TLS support was kept more up-to-date.

cjerdonek · 2018-04-04T03:50:07Z

If you are running macOS/OS X version 10.12 or older, you need to upgrade to the latest pip (9.0.3) to connect to the Python Package Index securely:

For people in this camp, if you fail to upgrade to the latest pip (e.g. in some virtualenv), will it connect to the Python Package Index insecurely in a silent fashion, or will it fail (or at least warn you)?

dstufft · 2018-04-04T03:57:04Z

It will fail.

ned-deily · 2018-04-04T04:00:19Z

And, alas, it fails without a very useful warning (see the example script above), unless you enable verbose.

gvanrossum · 2018-04-04T04:05:29Z

So, to be clear, this:

    No matching distribution found for pip==9.0.3
    You are using pip version 9.0.1, however version 9.0.3 is available.
    You should consider upgrading via the 'pip install --upgrade pip' command.

is how it fails. Not very clear indeed, alas.

ned-deily · 2018-04-04T04:10:39Z

Yes, with pip install -v you may see something like this go by:

Collecting pip==9.0.3
  1 location(s) to search for versions of pip:
  * https://pypi.python.org/simple/pip/
  Getting page https://pypi.python.org/simple/pip/
  Starting new HTTPS connection (1): pypi.python.org
  "GET /simple/pip/ HTTP/1.1" 403 109
  Could not fetch URL https://pypi.python.org/simple/pip/: 403 Client Error: Brownout of Legacy TLS for url: https://pypi.python.org/simple/pip/ - skipping
  Could not find a version that satisfies the requirement pip==9.0.3 (from versions: )
Cleaning up...
No matching distribution found for pip==9.0.3
[...]

cjerdonek · 2018-04-04T04:28:19Z

So just to clarify some more: In the course of normal usage, if someone types something like--

$ pip install ansible

Will they see something more like this, or something else? (note ansible in place of pip)

...
No matching distribution found for ansible==2.3.2.0
You are using pip version 9.0.1, however version 9.0.3 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.

And then if they follow the instructions in the message, they will get this?

$ pip install --upgrade pip
...
No matching distribution found for pip==9.0.3
You are using pip version 9.0.1, however version 9.0.3 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.

(With the examples others provided, it's a little confusing what parts are due to installing pip as opposed to installing whatever random package is being installed.)

dstufft · 2018-04-04T04:28:40Z

The error will change once we can disable TLSv1.0 and TLSv1.1, I believe it'll give a SSL error at that point, but I'm not 100% sure, I only have a macOS 10.13 machine.

dstufft · 2018-04-04T04:32:19Z

If someone has a non TLSv1.2 supporting Python, they could try pip install --index-url https://files.pythonhosted.org/ --upgrade pip and see what happens. That command won't actually work (attempting to use that directly as your index will 404, so it'll never find anything) but that domain is already rejecting at the TLS level TLSv1.0 and TLSv1.1.

ned-deily · 2018-04-04T04:58:39Z

$ /usr/local/bin/python2.7 -m pip install --index-url https://files.pythonhosted.org/ --upgrade pip
Could not fetch URL https://files.pythonhosted.org/pip/: There was a problem confirming the ssl certificate: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:661) - skipping
Requirement already up-to-date: pip in /Library/Frameworks/Python.framework/Versions/2.7.14_10_6/lib/python2.7/site-packages
You are using pip version 9.0.1, however version 9.0.3 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.

dstufft · 2018-04-04T04:59:21Z

Ok, so that's the error that'll happen after April 8th.

stromnet · 2018-04-11T12:24:47Z

Thank you all!

Downloading & installing pip manually as described in #3293 (comment) solved the issue. As there is a proper solution for this, I'll close this ticket!

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

DavidWMerrill · 2018-04-19T16:53:36Z

Same here, downloading & installing pip manually as described in #3293 (comment) solved the issue. Thank you!

ned-deily · 2018-05-04T16:35:30Z

[FTR, I've updated the detailed python.org macOS information in my 2018-04-03 comment earlier in this thread to reflect the release of Python 2.7.15. If you are using python.org macOS installers for 2.7.x, upgrading to 2.7.15 should eliminate download problems.]

pquentin · 2018-12-07T06:00:10Z

Using the python.org Python 3.5.4 macOS installer (which does not support TLS 1.2, even on macOS 10.14) but with a recent pip (with TLS 1.2 support), pip install will still fail when installing setuptools extras, presumably because easy_install tries to install them without TLS 1.2 support:

$ pip install "twisted[tls]"
Collecting twisted[tls]
  Downloading https://files.pythonhosted.org/packages/5d/0e/a72d85a55761c2c3ff1cb968143a2fd5f360220779ed90e0fadf4106d4f2/Twisted-18.9.0.tar.bz2 (3.1MB)
    100% |████████████████████████████████| 3.2MB 1.3MB/s
    Complete output from command python setup.py egg_info:
    Download error on https://pypi.org/simple/incremental/: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:719) -- Some packages may not be found!
    Couldn't find index page for 'incremental' (maybe misspelled?)
    Download error on https://pypi.org/simple/: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:719) -- Some packages may not be found!
    No local packages or working download links found for incremental>=16.10.1
    Traceback (most recent call last):
      File "<string>", line 1, in <module>
      File "/private/var/folders/g7/hm9bdhbx30j7cdzt9f9n4h0c0000gn/T/pip-install-j5k26gd5/twisted/setup.py", line 20, in <module>
        setuptools.setup(**_setup["getSetupArgs"]())
      File "/.../lib/python3.5/site-packages/setuptools/__init__.py", line 142, in setup
        _install_setup_requires(attrs)
      File "/.../lib/python3.5/site-packages/setuptools/__init__.py", line 137, in _install_setup_requires
        dist.fetch_build_eggs(dist.setup_requires)
      File "/.../lib/python3.5/site-packages/setuptools/dist.py", line 586, in fetch_build_eggs
        replace_conflicting=True,
      File "/.../lib/python3.5/site-packages/pkg_resources/__init__.py", line 780, in resolve
        replace_conflicting=replace_conflicting
      File "/.../lib/python3.5/site-packages/pkg_resources/__init__.py", line 1063, in best_match
        return self.obtain(req, installer)
      File "/.../lib/python3.5/site-packages/pkg_resources/__init__.py", line 1075, in obtain
        return installer(requirement)
      File "/.../lib/python3.5/site-packages/setuptools/dist.py", line 653, in fetch_build_egg
        return cmd.easy_install(req)
      File "/.../lib/python3.5/site-packages/setuptools/command/easy_install.py", line 673, in easy_install
        raise DistutilsError(msg)
    distutils.errors.DistutilsError: Could not find suitable distribution for Requirement.parse('incremental>=16.10.1')

    ----------------------------------------
Command "python setup.py egg_info" failed with error code 1 in /private/var/folders/g7/hm9bdhbx30j7cdzt9f9n4h0c0000gn/T/pip-install-j5k26gd5/twisted/

I'm not expecting any kind of fix, but I thought I would mention it in case it helps someone.

brainwane mentioned this issue Mar 19, 2018

Merge pull request #4454 from dstufft/securetransport pypa/pip#5071

Closed

brainwane mentioned this issue Apr 2, 2018

TLSv1.0/TLSv1.1 rolling brownouts are not transparent pypa/packaging-problems#130

Closed

ilovezfs mentioned this issue Apr 7, 2018

Use Homebrew Python 2 or 3 instead of system Python Homebrew/homebrew-core#26287

Closed

dstufft mentioned this issue Apr 9, 2018

Finalize TLS1.0/1.1 removal on PyPI #3411

Closed

8 tasks

ncoghlan mentioned this issue Apr 9, 2018

error: Upload failed (403): TLSv1.2+ is required pypa/packaging-problems#137

Closed

stromnet closed this as completed Apr 11, 2018

brainwane added a commit that referenced this issue Apr 16, 2018

Add user help on TLS 1.0/1.1 deprecation

0e8b4f8

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

brainwane mentioned this issue Apr 16, 2018

Add user help on TLS 1.0/1.1 deprecation #3720

Merged

brainwane added a commit that referenced this issue Apr 16, 2018

Add user help on TLS 1.0/1.1 deprecation

1b15cc9

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

brainwane added a commit that referenced this issue Apr 17, 2018

Add user help on TLS 1.0/1.1 deprecation

875c662

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

brainwane added a commit that referenced this issue Apr 17, 2018

Add user help on TLS 1.0/1.1 deprecation

30407ae

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

brainwane added a commit that referenced this issue Apr 17, 2018

Add user help on TLS 1.0/1.1 deprecation

56e945d

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

brainwane added a commit that referenced this issue Apr 17, 2018

Add user help on TLS 1.0/1.1 deprecation

c5f8c24

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

brainwane added a commit that referenced this issue Apr 17, 2018

Add user help on TLS 1.0/1.1 deprecation (#3720)

7947068

Add context and instructions for users affected by the TLS 1.0/1.1 deprecation. Followup to #3411, #3293.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

TLSV1_ALERT_PROTOCOL_VERSION for files.pythonhosted.org on Mac OS python 2.7 #3293

TLSV1_ALERT_PROTOCOL_VERSION for files.pythonhosted.org on Mac OS python 2.7 #3293

stromnet commented Mar 16, 2018 •

edited

Loading

ewdurbin commented Mar 16, 2018

pauldmccarthy commented Mar 16, 2018

ewdurbin commented Mar 16, 2018

ewdurbin commented Mar 16, 2018

alex commented Mar 17, 2018

stromnet commented Mar 19, 2018

brainwane commented Apr 2, 2018 •

edited

Loading

di commented Apr 2, 2018

pfmoore commented Apr 2, 2018

brainwane commented Apr 2, 2018

gvanrossum commented Apr 3, 2018

alex commented Apr 3, 2018

gvanrossum commented Apr 3, 2018

alex commented Apr 3, 2018 via email

gvanrossum commented Apr 3, 2018 via email

alex commented Apr 3, 2018 via email

ned-deily commented Apr 4, 2018 •

edited

Loading

dstufft commented Apr 4, 2018

ned-deily commented Apr 4, 2018

cjerdonek commented Apr 4, 2018

dstufft commented Apr 4, 2018

ned-deily commented Apr 4, 2018

gvanrossum commented Apr 4, 2018

ned-deily commented Apr 4, 2018

cjerdonek commented Apr 4, 2018 •

edited

Loading

dstufft commented Apr 4, 2018

dstufft commented Apr 4, 2018

ned-deily commented Apr 4, 2018

dstufft commented Apr 4, 2018

stromnet commented Apr 11, 2018

DavidWMerrill commented Apr 19, 2018

ned-deily commented May 4, 2018

pquentin commented Dec 7, 2018

TLSV1_ALERT_PROTOCOL_VERSION for files.pythonhosted.org on Mac OS python 2.7 #3293

TLSV1_ALERT_PROTOCOL_VERSION for files.pythonhosted.org on Mac OS python 2.7 #3293

Comments

stromnet commented Mar 16, 2018 • edited Loading

ewdurbin commented Mar 16, 2018

pauldmccarthy commented Mar 16, 2018

ewdurbin commented Mar 16, 2018

ewdurbin commented Mar 16, 2018

alex commented Mar 17, 2018

stromnet commented Mar 19, 2018

brainwane commented Apr 2, 2018 • edited Loading

di commented Apr 2, 2018

pfmoore commented Apr 2, 2018

brainwane commented Apr 2, 2018

gvanrossum commented Apr 3, 2018

alex commented Apr 3, 2018

gvanrossum commented Apr 3, 2018

alex commented Apr 3, 2018 via email

gvanrossum commented Apr 3, 2018 via email

alex commented Apr 3, 2018 via email

ned-deily commented Apr 4, 2018 • edited Loading

dstufft commented Apr 4, 2018

ned-deily commented Apr 4, 2018

cjerdonek commented Apr 4, 2018

dstufft commented Apr 4, 2018

ned-deily commented Apr 4, 2018

gvanrossum commented Apr 4, 2018

ned-deily commented Apr 4, 2018

cjerdonek commented Apr 4, 2018 • edited Loading

dstufft commented Apr 4, 2018

dstufft commented Apr 4, 2018

ned-deily commented Apr 4, 2018

dstufft commented Apr 4, 2018

stromnet commented Apr 11, 2018

DavidWMerrill commented Apr 19, 2018

ned-deily commented May 4, 2018

pquentin commented Dec 7, 2018

stromnet commented Mar 16, 2018 •

edited

Loading

brainwane commented Apr 2, 2018 •

edited

Loading

ned-deily commented Apr 4, 2018 •

edited

Loading

cjerdonek commented Apr 4, 2018 •

edited

Loading