ssl - 如何解决BAE上部署python-web发生 InsecurePlatformWarning错误而无法下载pip软件包的问题？

Question

报错信息如下：

失败原因：编译失败
失败信息：Fix depends failed. Please check requirements.txt or package.json.

cmdoptions.check_install_build_global(options)
/home/bae/code/helios/deps/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
InsecurePlatformWarning
/home/bae/code/helios/deps/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
InsecurePlatformWarning
/home/bae/code/helios/deps/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
InsecurePlatformWarning
DEPRECATION: Failed to find 'django' at https://pypi.mirrors.ustc.edu.cn/simple/django/. It is suggested to upgrade your index to support normalized names as the name in /simple/{name}.
/home/bae/code/helios/deps/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
InsecurePlatformWarning
Cannot fetch index base URL https://pypi.mirrors.ustc.edu.cn/simple/
/home/bae/code/helios/deps/lib/python2.7/site-packages/pip/_vendor/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
InsecurePlatformWarning
Could not find a version that satisfies the requirement django==1.10.3 (from -r /home/bae/run/baeng/helios/work/appid9f0jy29yct/requirements.txt (line 1)) (from versions: )
No matching distribution found for django==1.10.3 (from -r /home/bae/run/baeng/helios/work/appid9f0jy29yct/requirements.txt (line 1))

百度这个问题说要解决需要安装openssl等软件包，但是通过SSH连接服务器我没有权限无法安装，而通过requirements.txt安装又会报错，如何解决？

Answer 1

この問題は古い Python でよく発生します。BAE ではおそらく制御が困難です。requirements.txt のインストール方法しか提供されていないようです。

pip は、https ソースからモジュールをインストールするときに urllib3 ライブラリを使用します。python2.7.9 より前の ssl モジュールは比較的古いため、SSL 接続でセキュリティ上の問題が発生します [1]。
この問題を直接解決するには 2 つの方法があります:

1. Python を 2.7.9 以降にアップグレードします

2. urllib3のセキュリティ依存関係をインストール【2】

   リーリー

次のように、http ソースを直接使用してこの問題を回避することもできます。

リーリー

【1】https://urllib3.readthedocs.i...
【2】https://urllib3.readthedocs.i...