| msg97589 - (view) |
Author: Rene Dudfield (illume) |
Date: 2010-01-11 15:22 |
| hi, When using setup.py upload --sign without --identity, gpg can give weird messages. Rather than this error message: """running upload gpg --detach-sign --local-user gn -a dist/pywebsite-0.1.18pre.tar.gz gpg: skipped "gn": secret key not available gpg: signing failed: secret key not available error: command 'gpg' failed with exit status 2 make: *** [upload] Error 1""" It might be nicer to also mention using --identity=, as well as a link to the documentation for --sign (url and also the help from "--help upload"). cheers, |
|
|
| msg101630 - (view) |
Author: Zubin Mithra (zubin71) |
Date: 2010-03-24 12:25 |
| are you suggesting that a warning stating that '--identity has`nt been used' has to be generated? |
|
|
| msg159660 - (view) |
Author: Éric Araujo (eric.araujo) *  |
Date: 2012-04-29 23:47 |
| We had a look at this bug during a sprint last week. First, it is reasonable to use --sign without --identity, as gpg will fall back to a default identity (see the description of --local-user and --default-key in the gpg man page). Second, it looks like you run distutils commands from a script or makefile and you have a bug there (the “skipped "gn"” message looks suspicious, maybe -sign was used instead of --sign and interpreted as -s -i gn). Finally, even though we thing this is not a bug, we agreed that it would be nicer to print a message to make clear that distutils2 is not broken but shows the error message from gpg on purpose; this may be done during the next sprint. |
|
|
| msg213460 - (view) |
Author: Éric Araujo (eric.araujo) * |
Date: 2014-03-13 20:32 |
| Improving error messages is an acceptable change for stable branches IMO. |
|
|
| msg213943 - (view) |
Author: Éric Araujo (eric.araujo) * |
Date: 2014-03-18 04:52 |
| Notes for contributors: * Ignore what I said about distutils2, it’s not an active project anymore. This ticket is about distutils in the standard library. * To test changes, you can run setup.py commands without really uploading stuff to PyPI, there is a special sandbox repository for that: https://wiki.python.org/moin/TestPyPI |
|
|
| msg214114 - (view) |
Author: Parimala Rao (Parimala.Rao) * |
Date: 2014-03-19 17:29 |
| This error is seen when there are no secret keys/default keys present for the person running "upload" command. Hence using --sign does not fall back to default identity. |
|
|
| msg386409 - (view) |
Author: Steve Dower (steve.dower) * |
Date: 2021-02-03 18:29 |
| Distutils is now deprecated (see PEP 632) and all tagged issues are being closed. From now until removal, only release blocking issues will be considered for distutils. If this issue does not relate to distutils, please remove the component and reopen it. If you believe it still requires a fix, most likely the issue should be re-reported at https://github.com/pypa/setuptools |
|
|