fedora-easy-karma: InsecurePlatformWarning

Robert Kuska rkuska at redhat.com
Fri Jun 5 08:29:05 UTC 2015




----- Original Message -----
> From: "Pekka Pietikäinen" <pp at ee.oulu.fi>
> To: "Development discussions related to Fedora" <devel at lists.fedoraproject.org>
> Sent: Friday, June 5, 2015 8:09:49 AM
> Subject: Re: fedora-easy-karma: InsecurePlatformWarning
> 
> On 28/04/15 21:17, Cole Robinson wrote:
> > On 04/28/2015 01:32 PM, Reindl Harald wrote:
> >> i am not sure for which package file a bug
> >>
> >> Waiting for Bodhi for a list of packages in updates-testing (F21)...
> >> /usr/lib/python2.7/site-packages/requests/packages/urllib3/util/ssl_.py:90:
> >> InsecurePlatformWarning: A true SSLContext object is not available. This
> >> prevents urllib3 from configuring SSL appropriately and may cause certain
> >> SSL
> >>
> > Pretty sure due to busted urllib3. This bug is tracking a similar issue
> >
> >
> Seems this is still unaddressed for quite some time.
> 
> Not really "busted", it just (rightly) complains that it's being used
> with a version of Python (2.7.8) that makes proper use of SSL impossible
> without adding extra dependencies...
> 
> Easiest fix is to disable the warnings (ONLY for F21) per package or
> patch/downgrade urllib3. Right fix is to bump Python to 2.7.9 or .10,
> but that will cause random unexpected breakage for a lot of people.
> 

We do not plan to upgrade Python to 2.7.9 in Fedora 21 and lower 
for the exact reason you've mentioned.

Can't speak for urllib3 maintainers (maybe they patch the warning)
but if you wish to get rid off warnings update to Fedora22.

--
Robert Kuska
{rkuska}
> 
> 
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct


More information about the devel mailing list