py-setuptools is again unvailable

[mtwest729@…]

Checking this morning if any ports I had installed were outdated, one of which was py27-setuptools.

Running sudo port upgrade py27-setuptools, I get the same "fail to fetch" error as was in ​ ticket #42935, but for version 5.5.1_0. Taking a look at the individual urls one is attempting to fetch from, it seems each one lacks the setuptools-5.5.1.tar.gz file. My guess is that the port was updated but the mirrors where the tar file would be available never were.

OSX 10.5.8
Xcode 3.1.4

[mf2k (Frank Schima)]

In the future, please Cc the port maintainers (port info --maintainers py27-setuptools).

[mtwest729@…]

ouput of < port distcheck py27-setuptools >

[jmroot (Joshua Root)]

It’s definitely there: ​http://distfiles.macports.org/py-setuptools/

Since you’re on 10.5, your list of trusted certificates is rather out of date, so you can’t download directly from pypi because it forces https and uses a new-ish certificate. We can’t fix that.

[mtwest729@…]

Replying to jmr@…:

It’s definitely there: ​http://distfiles.macports.org/py-setuptools/

Since you’re on 10.5, your list of trusted certificates is rather out of date, so you can’t download directly from pypi because it forces https and uses a new-ish certificate. We can’t fix that.

@jmr: As you said, since I am running an old version of OSX, the certificate I have isn't accepted anymore and that is on me. But as could been in both main.log and the output of port distcheck yesterday, the requisite tar file was not showing up on any of the mirrors, at least in the morning and early afternoon EDT.

I can say now that sudo port update py27-setuptools works for me as well. Thanks for the assistance.

[jmroot (Joshua Root)]

Yes, the mirrors don’t update instantly. That isn’t a problem unless you’re unable to download from the upstream site.

[udbraumann]

Looking at ​http://distfiles.macports.org/py-setuptools/ there is no setuptools-12.0.3.tar.gz which is presently the latest version macports tries to install via ​http://distfiles.macports.org/py-setuptools/setuptools-12.0.3.tar.gz. Only an older version setuptools-12.0.1.tar.gz from four days ago can be found here ​http://distfiles.macports.org/py-setuptools/setuptools-12.0.1.tar.gz. The same holds true for all other repositories macports tries to contact. Since a binary version of setuptools-12.0.3 in fact can be installed, I guess the tar ball by mistake was not spread on the servers. I really doubt the trouble has to do with https and certificates (most of the servers are being contacted via http) or update latencies.

[udbraumann]

Cc Me!

[larryv (Lawrence Velázquez)]

Replying to braumann@…:

Only an older version setuptools-12.0.1.tar.gz from four days ago can be found here ​http://distfiles.macports.org/py-setuptools/setuptools-12.0.1.tar.gz. The same holds true for all other repositories macports tries to contact.

I believe the other servers directly mirror distfiles.macports.org. If something is causing that primary mirror to update in an untimely way, they are all affected.

Since a binary version of setuptools-12.0.3 in fact can be installed, I guess the tar ball by mistake was not spread on the servers.

The Buildbot infrastructure downloaded the distfile directly from PyPi. None of the buildslaves are running 10.5, so none of them have the certificate issue described here.

I really doubt the trouble has to do with https and certificates (most of the servers are being contacted via http)

Verbatim from the attached log​:

:debug:fetch Executing org.macports.fetch (py27-setuptools)
:info:fetch --->  setuptools-5.5.1.tar.gz doesn't seem to exist in /opt/local/var/macports/distfiles/py-setuptools
:notice:fetch --->  Attempting to fetch setuptools-5.5.1.tar.gz from https://pypi.python.org/packages/source/s/setuptools/
:debug:fetch Fetching distfile failed: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

The distfile mirrors might be a bit out of date, but you should not rely on them to fetch a distfile. Leopard’s aged certificate store is the problem.

[jmroot (Joshua Root)]

Replying to braumann@…:

Looking at ​http://distfiles.macports.org/py-setuptools/ there is no setuptools-12.0.3.tar.gz

There is now. See comment:4.