[osgeo4w-dev] [osgeo4w] #562: Bundle Python version is outdated in OSGeo4w package

OSGeo4W trac_osgeo4w at osgeo.org
Wed Mar 7 01:25:44 PST 2018


#562: Bundle Python version is outdated in OSGeo4w package
-------------------+---------------------------
Reporter:  JLiang  |      Owner:  osgeo4w-dev@…
    Type:  defect  |     Status:  new
Priority:  major   |  Component:  Package
 Version:          |   Keywords:  Python SSL
-------------------+---------------------------
 Please consider upgrading Python to 2.7.10 or above in OSGeo4W

 Current Python version in OSGeo4W is 2.7.5 (QGIS 2.18) However, TLSv1_2
 wasn't added until Python 2.7.9.

 For some API provider, like Github, they started to move to supporting
 TLS1.2, also requires that the Client's Hello Message carries with a
 server name indication (SNI), otherwise server end would reject.

 Also it is likely that more and more web services will switch to TLS1.2,
 please consider upgrading the Python version (in the bundle package) at
 least to 2.7.10 or even higher.

 In order to verify that, try in python console: import json, urllib2;
 print json.load(urllib2.urlopen('​https://api.github.com/')) it is very
 much the same with Requests library.

 It is not easy to workaround this SSL version problem, provided we
 continue using Python 2.7.5 in OSGeo4W.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo4w/ticket/562>
OSGeo4W <http://trac.osgeo.org/osgeo4w>
OSGeo4W is the Windows installer and package environment for the OSGeo stack.


More information about the osgeo4w-dev mailing list