[prev in list] [next in list] [prev in thread] [next in thread]
List: pykde
Subject: [PyQt] invalid PyQt5 wheel metadata
From: Benoit Pierre <benoit.pierre () gmail ! com>
Date: 2017-11-21 12:41:29
Message-ID: CA+SSzV0Pdg6VCmxuHyEtAXf236h60CbSWKQUHcxpr+xwCmks_w () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
The RECORD metadata for the wheels available on PyPI is invalid: it looks
like the checksums are the result of `hashlib.sha256(data).hexdigest()`,
but a valid PEP 427 implementation expects
`base64.b64encode(hashlib.sha256(data).digest()).rstrip(b"=")`. Reference:
https://www.python.org/dev/peps/pep-0427/#signed-wheel-files
This is not an issue when installing with pip because those are not
checked, but can be problematic when using other tools, e.g. with distlib:
python -c 'import distlib.wheel, sys;
distlib.wheel.Wheel(sys.argv[1]).verify()' WHEEL
Cheers,
--
A: Because it destroys the flow of conversation.
Q: Why is top posting dumb?
[Attachment #5 (text/html)]
<div dir="ltr"><div><div>The RECORD metadata for the wheels available on PyPI is invalid: it \
looks like the checksums are the result of `hashlib.sha256(data).hexdigest()`, but a valid PEP \
427 implementation expects \
`base64.b64encode(hashlib.sha256(data).digest()).rstrip(b"=")`. Reference: <a \
href="https://www.python.org/dev/peps/pep-0427/#signed-wheel-files">https://www.python.org/dev/peps/pep-0427/#signed-wheel-files</a><br><br></div>This \
is not an issue when installing with pip because those are not checked, but can be problematic \
when using other tools, e.g. with distlib: python -c 'import distlib.wheel, sys; \
distlib.wheel.Wheel(sys.argv[1]).verify()' \
WHEEL<br><br></div>Cheers,<br><div><div><br><div><div>-- <br><div class="gmail_signature">A: \
Because it destroys the flow of conversation.<br>Q: Why is top posting dumb?</div> \
</div></div></div></div></div>
[Attachment #6 (text/plain)]
_______________________________________________
PyQt mailing list PyQt@riverbankcomputing.com
https://www.riverbankcomputing.com/mailman/listinfo/pyqt
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic