{"action":"created","issue":{"url":"https://api.github.com/repos/pypa/pip/issues/3109","labels_url":"https://api.github.com/repos/pypa/pip/issues/3109/labels{/name}","comments_url":"https://api.github.com/repos/pypa/pip/issues/3109/comments","events_url":"https://api.github.com/repos/pypa/pip/issues/3109/events","html_url":"https://github.com/pypa/pip/pull/3109","id":106402115,"number":3109,"title":"Add a --disable-urllib3-warnings option","user":{"login":"msabramo","id":305268,"avatar_url":"https://avatars.githubusercontent.com/u/305268?v=3","gravatar_id":"","url":"https://api.github.com/users/msabramo","html_url":"https://github.com/msabramo","followers_url":"https://api.github.com/users/msabramo/followers","following_url":"https://api.github.com/users/msabramo/following{/other_user}","gists_url":"https://api.github.com/users/msabramo/gists{/gist_id}","starred_url":"https://api.github.com/users/msabramo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/msabramo/subscriptions","organizations_url":"https://api.github.com/users/msabramo/orgs","repos_url":"https://api.github.com/users/msabramo/repos","events_url":"https://api.github.com/users/msabramo/events{/privacy}","received_events_url":"https://api.github.com/users/msabramo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-14T18:36:07Z","updated_at":"2015-09-14T18:37:19Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/pypa/pip/pulls/3109","html_url":"https://github.com/pypa/pip/pull/3109","diff_url":"https://github.com/pypa/pip/pull/3109.diff","patch_url":"https://github.com/pypa/pip/pull/3109.patch"},"body":"Fixes: GH-2681\r\n\r\nI'm sorry to beat a dead horse, but...\r\n\r\n## Rationale\r\n\r\nThis warning might be useful in some cases, if it convinces folks to upgrade their Python to a version that supports more secure SSL. However, a lot of folks can't upgrade for various reasons, including that they want to use the standard packages from their distro and their distro bundles an older version.\r\n\r\nIn my case, we have a CI server that has Ubuntu 14.04 and hence Python 2.7.3. We'd rather not upgrade to a later version at this time, because we'd have to use an unofficial repo like deadsnakes and upgrading even a minor version of Python can often break existing virtualenvs built with an older version. Developers are frequently confused by this warning and think that it has something to do with their build failing. We will upgrade to a later version of Python, but in the meantime we want developers to have clean build logs.\r\n\r\n    [marca@marca-mac2 pip]$ pip list -o --no-cache-dir\r\n    /Users/marca/dev/git-repos/pip/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.\r\n      InsecurePlatformWarning\r\n    path.py (Current: 7.6.1 Latest: 8.1.1 [wheel])\r\n    setuptools (Current: 12.0.5 Latest: 18.3.1 [wheel])\r\n\r\n    [marca@marca-mac2 pip]$ pip list -o --no-cache-dir --disable-urllib3-warnings\r\n    path.py (Current: 7.6.1 Latest: 8.1.1 [wheel])\r\n    setuptools (Current: 12.0.5 Latest: 18.3.1 [wheel])\r\n\r\n    [marca@marca-mac2 pip]$ PIP_DISABLE_URLLIB3_WARNINGS=1 pip list -o --no-cache-dir\r\n    path.py (Current: 7.6.1 Latest: 8.1.1 [wheel])\r\n    setuptools (Current: 12.0.5 Latest: 18.3.1 [wheel])\r\n\r\nCc: @georges, @aconrad"},"comment":{"url":"https://api.github.com/repos/pypa/pip/issues/comments/140169848","html_url":"https://github.com/pypa/pip/pull/3109#issuecomment-140169848","issue_url":"https://api.github.com/repos/pypa/pip/issues/3109","id":140169848,"user":{"login":"dstufft","id":145979,"avatar_url":"https://avatars.githubusercontent.com/u/145979?v=3","gravatar_id":"","url":"https://api.github.com/users/dstufft","html_url":"https://github.com/dstufft","followers_url":"https://api.github.com/users/dstufft/followers","following_url":"https://api.github.com/users/dstufft/following{/other_user}","gists_url":"https://api.github.com/users/dstufft/gists{/gist_id}","starred_url":"https://api.github.com/users/dstufft/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dstufft/subscriptions","organizations_url":"https://api.github.com/users/dstufft/orgs","repos_url":"https://api.github.com/users/dstufft/repos","events_url":"https://api.github.com/users/dstufft/events{/privacy}","received_events_url":"https://api.github.com/users/dstufft/received_events","type":"User","site_admin":false},"created_at":"2015-09-14T18:37:19Z","updated_at":"2015-09-14T18:37:19Z","body":"You're aware you can get the ability to have good TLS even in 2.7.3? You just need to install pyasn1, ndg-httpsclient, and pyopenssl."}}