[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pykde
Subject:    [PyQt] invalid PyQt5 wheel metadata
From:       Benoit Pierre <benoit.pierre () gmail ! com>
Date:       2017-11-21 12:41:29
Message-ID: CA+SSzV0Pdg6VCmxuHyEtAXf236h60CbSWKQUHcxpr+xwCmks_w () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


The RECORD metadata for the wheels available on PyPI is invalid: it looks
like the checksums are the result of `hashlib.sha256(data).hexdigest()`,
but a valid PEP 427 implementation expects
`base64.b64encode(hashlib.sha256(data).digest()).rstrip(b"=")`. Reference:
https://www.python.org/dev/peps/pep-0427/#signed-wheel-files

This is not an issue when installing with pip because those are not
checked, but can be problematic when using other tools, e.g. with distlib:
python -c 'import distlib.wheel, sys;
distlib.wheel.Wheel(sys.argv[1]).verify()' WHEEL

Cheers,

-- 
A: Because it destroys the flow of conversation.
Q: Why is top posting dumb?

[Attachment #5 (text/html)]

<div dir="ltr"><div><div>The RECORD metadata for the wheels available on PyPI is \
invalid: it looks like the checksums are the result of \
`hashlib.sha256(data).hexdigest()`, but a valid PEP 427 implementation expects \
`base64.b64encode(hashlib.sha256(data).digest()).rstrip(b&quot;=&quot;)`. Reference: \
<a href="https://www.python.org/dev/peps/pep-0427/#signed-wheel-files">https://www.python.org/dev/peps/pep-0427/#signed-wheel-files</a><br><br></div>This \
is not an issue when installing with pip because those are not checked, but can be \
problematic when using other tools, e.g. with distlib: python -c &#39;import \
distlib.wheel, sys; distlib.wheel.Wheel(sys.argv[1]).verify()&#39; \
WHEEL<br><br></div>Cheers,<br><div><div><br><div><div>-- <br><div \
class="gmail_signature">A: Because it destroys the flow of conversation.<br>Q: Why is \
top posting dumb?</div> </div></div></div></div></div>


[Attachment #6 (text/plain)]

_______________________________________________
PyQt mailing list    PyQt@riverbankcomputing.com
https://www.riverbankcomputing.com/mailman/listinfo/pyqt

[prev in list] [next in list] [prev in thread] [next in thread]