[psycopg] Releasing psycopg 2.7.1 soon
От | Daniele Varrazzo |
---|---|
Тема | [psycopg] Releasing psycopg 2.7.1 soon |
Дата | |
Msg-id | CA+mi_8ZKxSZrwv2YG9qiP8Gumpo6fGMe+FPLPgA+VjKkZVEUqQ@mail.gmail.com обсуждение исходный текст |
Список | psycopg |
Hello, I'm planning to release a bugfix version of psycopg in a few days. There is a regression compared to previous versions so that connection fails if some arguments are passed as None instead of omitted, which was not documented (nor tested) but quite idiomatic, see https://github.com/psycopg/psycopg2/issues/517 and from the amount of references to the bug it seems is biting several people. Another problem that hasn't probably bitten many, but I'm glad if we have a solution, is that the wheel version of psycopg ships with libssl 0.9.8e, which misses some features (hence https://github.com/psycopg/psycopg2/issues/518). 0.9.8e is the most up-to-date libssl that is possible to install on the venerable (venerable means obsolete) CentOS 5, the platform used to build manylinux1-compliant wheel packages. CentOS 5 is going EoL in a matter of weeks, so I'm expecting the "Python Packaging Authority" (!) group to release soon specs for wheel packages to be build on a less ageing (ageing means decrepit) platform (see https://github.com/pypa/manylinux/issues/96 if you fancy). So there is this window of time, between when CentOS 5 will be abandoned and when the Python community will be able to release manylinux2 packages, in which if an ssl security bug is found we don't have many ways to protect except blaming others, a fine activity sure, but of which I prefer not being a champion. The solution of the problem seems to build our own version of libssl from source, as well as the libraries depending on it, which are libpq and libldap. The build script is at https://github.com/psycopg/psycopg2-wheels/blob/openssl1/scripts/build_libpq.sh and you can find the artefacts produced at http://initd.org/psycopg/upload/psycopg2-2.7.1.dev1/ They seem working ok (as the problem reported in #518 seems fixed) but I wouldn't mind if someone could take a look at the build procedure and try out the packages, especially if they use ldap for authentication as it's something I haven't tested at all (it compiles: ship it!). Just in case I've missed a -fPIC or something. Any feedback is appreciated. Have a good day! -- Daniele
В списке psycopg по дате отправления: